feat(sync): cascade 1.0.1 is out, so the docs are synced to it

scripts/sync-manifest.mjs

@@ -142,6 +142,8 @@ export const PAGES = [
   { product: 'cascade', group: 'Use it', slug: 'cascade/importing', repo: 'cascade', file: 'README.md', sections: ['Bringing a workflow in'], title: 'Bringing a workflow in', description: 'Import an existing workflow into Cascade, what maps across and what the importer tells you it could not carry.' },
   { product: 'cascade', group: 'Use it', slug: 'cascade/observability', repo: 'cascade', file: 'README.md', sections: ['Watching it'], title: 'Watching it', description: 'Health, readiness, Prometheus metrics and traces for every run and step, so a stuck job shows up on a graph and not in a complaint.' },
   { product: 'cascade', group: 'Use it', slug: 'cascade/file-steps', repo: 'cascade', file: 'README.md', sections: ['The file steps'], title: 'The file steps', description: 'The steps that read, write, list and move files, build CSV or Excel, and read a PDF, all fenced to one directory and off until you set it.' },
+  { product: 'cascade', group: 'Identity', slug: 'cascade/identity', repo: 'cascade', file: 'docs/IDENTITY.md', title: 'Identity and access', description: 'Custom roles, sign-in with LDAP, Active Directory and SAML, and SCIM provisioning, all in every Cascade with no paid tier.' },
+  { product: 'cascade', group: 'Governance', slug: 'cascade/governance', repo: 'cascade', file: 'docs/GOVERNANCE.md', title: 'Governing a Cascade instance', description: 'Variables, folders, annotated runs, redaction, insights, outside secrets and log streaming, for a plant with a growing pile of workflows.' },
   { product: 'cascade', group: 'Install', slug: 'cascade/quadlet', repo: 'cascade', file: 'deploy/quadlet/README.md', title: 'Cascade with Podman Quadlet', description: 'Run Cascade as systemd services with Podman Quadlet, on SQLite or with Postgres and a separate worker, with an update window you control.' },
   { product: 'cascade', group: 'Install', slug: 'cascade/building', repo: 'cascade', file: 'README.md', sections: ['Building'], title: 'Building Cascade', description: 'Build the Cascade binary and image from source, and run the vet and race test suite against real services.' },
   { product: 'cascade', group: 'Project', slug: 'cascade/roadmap', repo: 'cascade', file: 'docs/ROADMAP.md', title: 'Cascade roadmap', description: 'What Cascade has built and what comes after the first release, phase by phase, and what each phase has to prove first.' },

src/content/docs/cascade/running.md

@@ -5,6 +5,10 @@ description: "Run Cascade with Podman Quadlet or Helm on k3s, on SQLite or Postg
 editUrl: false
 ---
 
+:::note[Written against main]
+This page follows `main` at dd8af77, and it differs from the copy in HotLoop Cascade 1.0.1, the latest release. Parts of it may be newer than what you have installed. The [release notes](/releases/) say what moved.
+:::
+
 On a Podman host, `deploy/quadlet` has systemd units. One file and a volume is
 Cascade on SQLite; `deploy/quadlet/postgres` is the server, a worker and
 PostgreSQL on a network of their own. Both start at boot, restart on failure and
@@ -14,15 +18,15 @@ it.
 To pull a version by hand:
 
 ```sh
-podman pull ghcr.io/hotloop-io/hotloop-cascade:0.1.2
+podman pull ghcr.io/hotloop-io/hotloop-cascade:1.0.1
 ```
 
 The units follow `:stable` and Podman's auto-update timer moves them.
 
 On k3s, `charts/hotloop-cascade` is the Helm chart:
 
 ```sh
-helm install cascade oci://ghcr.io/hotloop-io/charts/hotloop-cascade --version 0.1.2
+helm install cascade oci://ghcr.io/hotloop-io/charts/hotloop-cascade --version 1.0.1
 ```
 
 The chart carries the labels the EmberNet dashboard reads, on the Service and on

src/content/docs/cascade/status.md

@@ -5,20 +5,25 @@ description: "Cascade is released: what is in it, what is not in it yet, and whe
 editUrl: false
 ---
 
-0.1.2 is the release out today. It was the first one that isn't a candidate: there
-was a 0.1.0 tag that never published anything, because its chart test failed on a
-hosted runner and I cancelled the run, so nothing reached the registry.
+:::note[Written against main]
+This page follows `main` at dd8af77, and it differs from the copy in HotLoop Cascade 1.0.1, the latest release. Parts of it may be newer than what you have installed. The [release notes](/releases/) say what moved.
+:::
 
-Main has moved past it, and the next release is 1.0.0. It has everything in 0.1.2
-plus the identity and governance work, each piece tried against the real server it
+1.0.1 is the release out today, and 1.0.0 is the one before it. 1.0.0 is the first
+with the identity and governance work, each piece tried against the real server it
 talks to: SAML (against Keycloak), LDAP and Active Directory (OpenLDAP and a Samba
 domain controller), SCIM (against scim2-tester), custom roles, external secrets
 (OpenBao), log streaming (a syslog server and Loki), variables, folders, insights,
 execution annotations, redaction policies, and S3 and Azure blob stores (Garage and
-Azurite). And it has a new editor, so every one of those has a screen. What isn't
-here yet (environments, the HA scheduler with leases, more connectors, AI steps) is
-in `docs/ROADMAP.md`.
+Azurite). It also has a new editor, so every one of those has a screen. 1.0.1 fixes
+one mistake in sign-in: when the database could not be read, Cascade answered "not
+signed in" and cleared the cookie, so a short outage signed everyone out and could
+turn a good second factor into a wrong code. Now it says to try again and keeps the
+session. Nothing migrates between the two.
+
+What isn't here yet (Git source control and environments, more connectors, AI steps
+and an MCP server) is in `docs/ROADMAP.md`.
 
 The repository is private. The image and the chart are public and pull with no
-login. The image is `ghcr.io/hotloop-io/hotloop-cascade`, with tags `0.1.2`,
-`0.1`, `0`, `latest` and `stable`, for amd64 and arm64.
+login. The image is `ghcr.io/hotloop-io/hotloop-cascade`, with tags `1.0.1`,
+`1.0`, `1`, `latest` and `stable`, for amd64 and arm64.

src/content/docs/install/index.md

@@ -26,7 +26,7 @@ There are two ways to run a HotLoop product for real: Helm on k3s or any Kuberne
 | [HotLoop Gateway](/gateway/overview/) | 4.18.11 | Yes | Yes | [Install the Gateway](/gateway/install/) |
 | [HotLoop Edge Relay](/edge-relay/overview/) | 4.18.11 | Yes | Yes | [Install the Edge Relay](/edge-relay/install/) |
 | [HotLoop Flow](/flow/overview/) | 2.7.0 | Yes | Yes | [Install Flow](/flow/install/) |
-| [HotLoop Cascade](/cascade/overview/) | 1.0.0 | Yes, no login needed | Yes, no login needed, see [Cascade with Podman Quadlet](/cascade/quadlet/) | [Running Cascade](/cascade/running/) |
+| [HotLoop Cascade](/cascade/overview/) | 1.0.1 | Yes, no login needed | Yes, no login needed, see [Cascade with Podman Quadlet](/cascade/quadlet/) | [Running Cascade](/cascade/running/) |
 
 HotLoop IoT, Edge, Gateway, and the Edge Relay come out of one tag, in lockstep, so they share a version number. Flow and Cascade have their own. The IoT, Edge, and Gateway Quadlet units need Podman 5.0 or newer, and the relay's unit was run on Podman 4.9.3. Raspberry Pi OS Bookworm ships 4.3, which has no Quadlet at all, so a Pi wants Trixie or newer.
 

src/content/docs/releases/cascade-1-0-1.md

@@ -5,15 +5,8 @@ description: "What shipped in HotLoop Cascade 1.0.1, what changed on upgrade, an
 editUrl: false
 sidebar:
   label: "1.0.1"
-  badge:
-    text: Next release
-    variant: caution
 ---
 
-:::caution[On main, next release]
-This page was written from `main` at 0b6fbd5. These notes are for a release that is not out. HotLoop Cascade 1.0.0 is the latest one you can install.
-:::
-
 ## What this is
 
 1.0.1 fixes one mistake in how sign-in treats a database that can't be read. Nothing else changed from 1.0.0.

src/content/docs/releases/index.md

@@ -5,7 +5,7 @@ description: "What shipped in every HotLoop core, HotLoop Flow and HotLoop Casca
 editUrl: false
 ---
 
-Every release has its own page, written the day it shipped. A note marked "on main, next release" describes a release that is not out yet, so nothing in it is in what you have installed. The latest HotLoop core release is 4.18.11, the latest Flow release is 2.7.0, and the latest Cascade release is 1.0.0.
+Every release has its own page, written the day it shipped. A note marked "on main, next release" describes a release that is not out yet, so nothing in it is in what you have installed. The latest HotLoop core release is 4.18.11, the latest Flow release is 2.7.0, and the latest Cascade release is 1.0.1.
 
 ## HotLoop core
 
@@ -29,7 +29,7 @@ IoT, Edge, Gateway and Edge Relay release together from one tag, so they share t
 
 ## HotLoop Cascade
 
-- [HotLoop Cascade 1.0.1 release notes](/releases/cascade-1-0-1/) (on main, next release)
+- [HotLoop Cascade 1.0.1 release notes](/releases/cascade-1-0-1/)
 - [HotLoop Cascade 1.0.0 release notes](/releases/cascade-1-0-0/)
 - [HotLoop Cascade 0.1.2 release notes](/releases/cascade-0-1-2/)
 - [HotLoop Cascade 0.1.1 release notes](/releases/cascade-0-1-1/)

src/data/sync.json

@@ -2,7 +2,7 @@
   "repos": {
     "hotloop": {
       "slug": "HotLoop-io/hotloop",
-      "ref": "origin/main",
+      "ref": "4d5da2f216e276bba9587f9aa5e3343bad13258f",
       "sha": "4d5da2f216e276bba9587f9aa5e3343bad13258f",
       "release": {
         "tag": "v4.18.11",
@@ -14,7 +14,7 @@
     },
     "flow": {
       "slug": "HotLoop-io/hotloop-flow",
-      "ref": "origin/main",
+      "ref": "b1d8cc56826e6466c465d6b2473482b00d804f8e",
       "sha": "b1d8cc56826e6466c465d6b2473482b00d804f8e",
       "release": {
         "tag": "v2.7.0",
@@ -27,13 +27,13 @@
     "cascade": {
       "slug": "HotLoop-io/hotloop-cascade",
       "ref": "origin/main",
-      "sha": "0b6fbd5c0b593ccaf325667c2e0a0c1cb0869dac",
+      "sha": "dd8af77a63260c4ead704ef801b59865f288a7c6",
       "release": {
-        "tag": "v1.0.0",
-        "version": "1.0.0",
+        "tag": "v1.0.1",
+        "version": "1.0.1",
         "prerelease": false,
-        "publishedAt": "2026-11-01T19:16:03Z",
-        "sha": "6a3bdbe1d68e3ed92a594a0a66ee481d4dbc5fe8"
+        "publishedAt": "2026-11-01T20:06:03Z",
+        "sha": "0b6fbd5c0b593ccaf325667c2e0a0c1cb0869dac"
       }
     }
   },
@@ -775,7 +775,7 @@
       "group": "Start here",
       "title": "Where Cascade stands",
       "label": null,
-      "status": "released",
+      "status": "changed",
       "repo": "cascade",
       "source": "README.md",
       "release": false
@@ -797,7 +797,7 @@
       "group": "Use it",
       "title": "Running Cascade",
       "label": null,
-      "status": "released",
+      "status": "changed",
       "repo": "cascade",
       "source": "README.md",
       "release": false
@@ -835,6 +835,28 @@
       "source": "README.md",
       "release": false
     },
+    {
+      "slug": "cascade/identity",
+      "product": "cascade",
+      "group": "Identity",
+      "title": "Identity and access",
+      "label": null,
+      "status": "released",
+      "repo": "cascade",
+      "source": "docs/IDENTITY.md",
+      "release": false
+    },
+    {
+      "slug": "cascade/governance",
+      "product": "cascade",
+      "group": "Governance",
+      "title": "Governing a Cascade instance",
+      "label": null,
+      "status": "released",
+      "repo": "cascade",
+      "source": "docs/GOVERNANCE.md",
+      "release": false
+    },
     {
       "slug": "cascade/quadlet",
       "product": "cascade",
@@ -1039,7 +1061,7 @@
       "group": "HotLoop Cascade",
       "title": "HotLoop Cascade 1.0.1 release notes",
       "label": "1.0.1",
-      "status": "next",
+      "status": "released",
       "repo": "cascade",
       "source": "docs/release-notes/1.0.1.md",
       "release": true