[vrtmrz]

This release preparation selects Commonlib 0.4.2 for opt-in recovery of unapplied logical deletions and corrected unbounded namespaced key enumeration.

The implementation was merged in #215. This PR changes only the source manifest version, matching lockfile version fields, and the dated release notes in updates.md; dependencies and runtime source are unchanged.

Release notes

Added

• Hosts can recover a received logical deletion during an ordinary scan when its unchanged file remains in storage. Enable provenance path enumeration explicitly to opt in. Recovery verifies the current deletion and recorded content evidence, preserving edited or unverified files. (Self-hosted LiveSync #1338)
  • Recovery shares three file permits and follows the existing Chunk delivery and Fetcher policy. Interrupted cleanup is rediscovered from existing provenance and last-seen records, without a new persistent index or journal.
  • This supplies a guarded recovery path; it does not establish or remove the cause of the initial reflection failure. See the host contract and limits.

Fixed

• Unbounded namespaced key enumeration returns the full namespace, including Unicode paths. Explicit upper bounds and count limits retain their behaviour.

Verification and publication

• Version 0.4.2 was unused in npm when selected; latest and next both pointed to 0.4.1.
• npm run test:release, npm run test:package, and npm publish --dry-run .package --tag next --access public passed after the version change. The source manifest remains private.
• Runtime source is unchanged from fix: recover unapplied logical deletions during ordinary scans #215, whose Package verification, managed Integration tests, and Complete package gate all passed. Existing exact-candidate LiveSync and real Obsidian validation remain local-candidate evidence.

No package is published by this PR. After merge, stage the exact reviewed main commit through the trusted workflow to next, verify the published registry artefact and applicable consumer checks, then promote that same version to latest. LiveSync adoption remains in vrtmrz/obsidian-livesync#1341.