chore: update version and changelog

CHANGELOG.md

@@ -1,5 +1,15 @@
 # seamless-auth-api
 
+## 0.18.0
+
+### Minor Changes
+
+- f0a7866: Publish an adapter manifest so server adapters can be driven by data instead of a hand-maintained route list (#372).
+
+  - `GET /.well-known/seamless-adapter.json` describes every route a server adapter exposes: which held token it sends (`none`, `preAuth`, `registration`, `access`, `refresh`), which tokens a response issues or clears, which body fields reach the browser under the adapter's cookie transport, and which routes support external message delivery. The same document is committed as `adapter-manifest.json` and regenerated by `npm run generate:api`.
+  - Routes declare this with a new `adapter` option on `defineRoute`. Registration fails when a public route does not say whether adapters expose it, when an ephemeral route does not say which token it takes, or when a route that always returns a token does not say what it issues.
+  - The four OTP send routes and the magic-link request now accept `POST`. They send a message, and a `GET` can be triggered cross-site without a CORS preflight. The `GET` forms still work and are marked deprecated.
+
 ## 0.17.0
 
 ### Minor Changes

package.json

@@ -1,6 +1,6 @@
 {
   "name": "seamless-auth-api",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "description": "Seamless Auth API - A web application server for supporting a Seamless Auth server instance.",
   "main": "index.js",
   "type": "module",