Ungate procedures from the unstable feature (#5164)

# Description of Changes

Graduate **procedures** (and the outgoing HTTP client used from
procedures) out of the `unstable` feature gate /
`SPACETIMEDB_UNSTABLE_FEATURES` across all module libraries. The
`procedure` macro, `ProcedureContext`, `with_tx`/`try_with_tx`,
scheduled procedures, and `ctx.http` are now available without opting
into `unstable`.

**Still gated** (unchanged): HTTP handlers/webhooks, views, RLS /
`client_visibility_filter`, and immediate-scheduling
(`volatile_nonatomic_schedule_immediate`).

Per library:
- **`bindings-sys`**: ungate the `procedure` host-call module + raw ABI
imports (`procedure_start/commit/abort_mut_tx`,
`procedure_http_request`) and `call_no_ret`. Scheduling ABI stays gated.
- **`bindings` (Rust)**: ungate the `procedure` macro,
`ProcedureContext`, `TxContext`/`with_tx`/`try_with_tx`,
`db_read_only`/`get_read_only`, the procedure traits,
`register_procedure`, `__call_procedure__`, and procedure RNG. The
`http` module (previously gated as a unit) now has fine-grained gating
so the outgoing `HttpClient` is exposed while
`HandlerContext`/`Router`/handler macros stay gated.
- **`bindings-csharp`**: drop `[Experimental("STDB_UNSTABLE")]` from
`ProcedureContext.WithTx/TryWithTx` (runtime + codegen) and the
generated `ProcedureTxContext`; FFI snapshots regenerated. Handler
context members + RLS attribute stay gated.
- **`bindings-cpp`**: ungate the procedure ABI (`abi.h`/`FFI.h`),
`tx_execution.h`, the outgoing HTTP client (`http.h`/`http_convert.h`),
and `procedure_context.h`.
`handler_context.h`/`router.h`/`http_handler_macros.h` still `#error`
without `SPACETIMEDB_UNSTABLE_FEATURES`.
- **docs**: remove the procedures beta notices (HTTP handlers stay
marked beta for a later release); regenerate `static/llms.md`.
- **`sdk-test-procedure`**: no longer needs `features = ["unstable"]`.

# API and ABI breaking changes

Not breaking. This is purely additive to the stable surface: procedures
become available **without** the `unstable` feature, while modules that
already opt into `unstable` are unaffected. The wasm host-ABI imports
were already implemented host-side and merely gated module-side, so
there is no ABI version change. (No breaking-change label needed.)

# Expected complexity level and risk

**3/5.** The diff itself is mostly removing
`#[cfg]`/`#ifdef`/`[Experimental]` guards, but the gate bundled
procedures + outgoing HTTP + handlers + the ABI crate together, so the
work was in *separating* procedures from the features that stay gated.
Areas reviewers may want to scrutinize:
- The Rust `http` module went from "gated as a whole" to fine-grained
per-item gating; the outgoing `HttpClient` is exposed while handler
types/macros stay behind `unstable`.
- The `unstable` cut reaches the ABI crate (`bindings-sys`), which is
the only way procedures can compile without the feature.
- C++ separation of the outgoing HTTP client from HTTP handlers across
several headers.

# Testing

- [x] Rust: `cargo check -p spacetimedb` passes in default, `--features
unstable`, and `--no-default-features --features unstable`.
- [x] Rust end-to-end: `sdk-test-procedure` (uses procedures,
`with_tx`/`try_with_tx`, `ctx.http.get`, `new_uuid_v7`, scheduled
procedures) builds **without** `unstable`.
- [x] C#: Codegen + Runtime build; `Codegen.Tests` pass (6/6) after FFI
snapshot regen.
- [x] C++: host syntax-check confirms procedures + `ctx.http.send()`
compile **without** the flag, full headers compile **with** it, and
`handler_context.h` still `#error`s without it. (Not built for the real
wasm/emscripten target locally — relying on CI.)
- [x] `cargo ci lint` components reproduced locally: rustfmt, clippy
(`-D warnings`, default + `unstable`), csharpier, and `cargo doc --deny
warnings`.
- [ ] Reviewer: confirm the wasm bindings + C#/C++ test suites pass in
CI (especially the C++ wasm build, which couldn't run locally).

Author: cloutiertyler

crates/bindings-cpp/include/spacetimedb/abi/FFI.h

@@ -75,11 +75,9 @@ using ::identity;
 using ::get_jwt;
 
 // ===== Procedure Transactions =====
-#ifdef SPACETIMEDB_UNSTABLE_FEATURES
 using ::procedure_start_mut_tx;
 using ::procedure_commit_mut_tx;
 using ::procedure_abort_mut_tx;
-#endif
 
 // ===== Module Export Helpers =====
 

crates/bindings-cpp/include/spacetimedb/abi/abi.h

@@ -174,7 +174,6 @@ STDB_IMPORT_10_2(get_jwt)
 Status get_jwt(const uint8_t* connection_id_ptr, BytesSource* out);
 
 // ===== Procedure Transactions (spacetime_10.3) =====
-#ifdef SPACETIMEDB_UNSTABLE_FEATURES
 STDB_IMPORT_10_3(procedure_start_mut_tx)
 Status procedure_start_mut_tx(int64_t* out);
 
@@ -190,7 +189,6 @@ Status procedure_http_request(
     const uint8_t* request_ptr, size_t request_len,
     const uint8_t* body_ptr, size_t body_len,
     BytesSource out[2]);
-#endif
 
 } // extern "C"
 

crates/bindings-cpp/include/spacetimedb/http.h

@@ -3,10 +3,6 @@
 
 #pragma once
 
-#ifndef SPACETIMEDB_UNSTABLE_FEATURES
-#error "spacetimedb/http.h requires SPACETIMEDB_UNSTABLE_FEATURES to be enabled"
-#endif
-
 #include <string>
 #include <vector>
 #include <optional>
@@ -302,12 +298,8 @@ class HttpClient {
      * @endcode
      */
     Outcome<HttpResponse> send(const HttpRequest& request) {
-        #ifndef SPACETIMEDB_UNSTABLE_FEATURES
-        return Err<HttpResponse>("HTTP requests require SPACETIMEDB_UNSTABLE_FEATURES to be enabled");
-        #else
         // Implemented in http_client_impl.h to avoid circular dependencies
         return SendImpl(request);
-        #endif
     }
 
 private:
@@ -317,7 +309,7 @@ class HttpClient {
 } // namespace SpacetimeDB
 
 // Include implementation dependencies after class definition to avoid circular dependencies
-#if defined(SPACETIMEDB_UNSTABLE_FEATURES) && !defined(SPACETIMEDB_HTTP_CONVERT_H)
+#ifndef SPACETIMEDB_HTTP_CONVERT_H
 #include "spacetimedb/logger.h"
 #include "spacetimedb/http_convert.h"
 #include "spacetimedb/http_client_impl.h"

crates/bindings-cpp/include/spacetimedb/http_convert.h

@@ -281,9 +281,7 @@ inline std::pair<wire::HttpResponse, std::vector<uint8_t>> to_wire_split(const H
 } // namespace convert
 } // namespace SpacetimeDB
 
-#ifdef SPACETIMEDB_UNSTABLE_FEATURES
 #include "spacetimedb/logger.h"
 #include "spacetimedb/http_client_impl.h"
-#endif
 
 #endif // SPACETIMEDB_HTTP_CONVERT_H

crates/bindings-cpp/include/spacetimedb/internal/tx_execution.h

@@ -9,8 +9,6 @@
 
 namespace SpacetimeDB::Internal {
 
-#ifdef SPACETIMEDB_UNSTABLE_FEATURES
-
 template<typename T>
 struct is_outcome : std::false_type {};
 
@@ -143,8 +141,6 @@ auto try_with_tx(MakeReducerContext&& make_reducer_ctx, Func& body) -> decltype(
     return result;
 }
 
-#endif
-
 } // namespace SpacetimeDB::Internal
 
 #endif // SPACETIMEDB_INTERNAL_TX_EXECUTION_H

crates/bindings-cpp/include/spacetimedb/procedure_context.h

@@ -8,9 +8,7 @@
 #include <spacetimedb/abi/FFI.h> // For transaction syscalls
 #include <spacetimedb/internal/tx_execution.h>
 #include <spacetimedb/random.h> // For StdbRng
-#ifdef SPACETIMEDB_UNSTABLE_FEATURES
 #include <spacetimedb/http.h> // For HttpClient
-#endif
 #include <cstdint>
 #include <functional>
 #include <stdexcept>
@@ -66,12 +64,10 @@ struct ProcedureContext {
     // Used to track which client connection initiated this procedure
     ConnectionId connection_id;
 
-#ifdef SPACETIMEDB_UNSTABLE_FEATURES
     // HTTP client for making external requests
     // IMPORTANT: HTTP calls are NOT allowed inside transactions!
     // Always call HTTP before with_tx() or try_with_tx()
     HttpClient http;
-#endif
 
 private:
     // Lazily initialized RNG for UUID generation
@@ -173,10 +169,9 @@ struct ProcedureContext {
         return Uuid::from_counter_v7(counter_uuid_, timestamp, random_bytes);
     }
 
-#ifdef SPACETIMEDB_UNSTABLE_FEATURES
     /**
      * @brief Execute a callback within a database transaction
-     * 
+     *
      * Starts a mutable transaction, executes the callback, and commits on success.
      * If the callback panics (via LOG_PANIC), the transaction is automatically rolled back.
      * 
@@ -238,7 +233,6 @@ struct ProcedureContext {
         };
         return Internal::try_with_tx(make_reducer_ctx, body);
     }
-#endif
 };
 
 } // namespace SpacetimeDB

crates/bindings-csharp/Codegen.Tests/fixtures/diag/snapshots/Module#FFI.verified.cs

@@ -151,14 +151,11 @@ Internal.TxContext inner
 
         private ProcedureTxContext? _cached;
 
-        [Experimental("STDB_UNSTABLE")]
         public Local Db => _db;
 
-        [Experimental("STDB_UNSTABLE")]
         public TResult WithTx<TResult>(Func<ProcedureTxContext, TResult> body) =>
             base.WithTx(tx => body((ProcedureTxContext)tx));
 
-        [Experimental("STDB_UNSTABLE")]
         public TxOutcome<TResult> TryWithTx<TResult, TError>(
             Func<ProcedureTxContext, Result<TResult, TError>> body
         )
@@ -252,7 +249,6 @@ public Uuid NewUuidV7()
         }
     }
 
-    [Experimental("STDB_UNSTABLE")]
     public sealed class ProcedureTxContext : global::SpacetimeDB.ProcedureTxContextBase
     {
         internal ProcedureTxContext(Internal.TxContext inner)

crates/bindings-csharp/Codegen.Tests/fixtures/explicitnames/snapshots/Module#FFI.verified.cs

@@ -593,14 +593,11 @@ Internal.TxContext inner
 
         private ProcedureTxContext? _cached;
 
-        [Experimental("STDB_UNSTABLE")]
         public Local Db => _db;
 
-        [Experimental("STDB_UNSTABLE")]
         public TResult WithTx<TResult>(Func<ProcedureTxContext, TResult> body) =>
             base.WithTx(tx => body((ProcedureTxContext)tx));
 
-        [Experimental("STDB_UNSTABLE")]
         public TxOutcome<TResult> TryWithTx<TResult, TError>(
             Func<ProcedureTxContext, Result<TResult, TError>> body
         )
@@ -694,7 +691,6 @@ public Uuid NewUuidV7()
         }
     }
 
-    [Experimental("STDB_UNSTABLE")]
     public sealed class ProcedureTxContext : global::SpacetimeDB.ProcedureTxContextBase
     {
         internal ProcedureTxContext(Internal.TxContext inner)

crates/bindings-csharp/Codegen.Tests/fixtures/server/snapshots/Module#FFI.verified.cs

@@ -2545,14 +2545,11 @@ internal ProcedureContext(Identity identity, ConnectionId? connectionId, Random
 
                             private ProcedureTxContext? _cached;
 
-                            [Experimental("STDB_UNSTABLE")]
                             public Local Db => _db;
-                            
-                            [Experimental("STDB_UNSTABLE")]
+
                             public TResult WithTx<TResult>(Func<ProcedureTxContext, TResult> body) =>
                                 base.WithTx(tx => body((ProcedureTxContext)tx));
-                            
-                            [Experimental("STDB_UNSTABLE")]
+
                             public TxOutcome<TResult> TryWithTx<TResult, TError>(
                                 Func<ProcedureTxContext, Result<TResult, TError>> body)
                                 where TError : Exception =>
@@ -2643,7 +2640,6 @@ public Uuid NewUuidV7()
                             }
                         }
 
-                        [Experimental("STDB_UNSTABLE")]
                         public sealed class ProcedureTxContext : global::SpacetimeDB.ProcedureTxContextBase {
                             internal ProcedureTxContext(Internal.TxContext inner) : base(inner) {}