v0.1.5-alpha.1

What's Changed

Fixes

• fix(auth): keep Better Auth plugins on pinned line by @guyspy in #1070

Documentation

• docs: mark Starter release rules historical by @guyspy in #1069

Dependencies

• build(deps): bump hono from 4.13.5 to 4.13.7 in the hono group by @dependabot[bot] in #1060
• build(deps-dev): bump @types/react-dom from 19.2.5 to 19.2.7 in the react group across 1 directory by @dependabot[bot] in #1059
• build(deps): bump @better-auth/cimd from 1.7.2 to 1.7.3 by @dependabot[bot] in #1065
• build(deps): bump @better-auth/mcp from 1.7.2 to 1.7.3 by @dependabot[bot] in #1063

Other changes

• docs: introduce Mantle through features, Admin and API docs by @guyspy in #1049
• fix(skills): install Mantle with one command by @guyspy in #1052
• fix(skills): install only the Mantle bootstrap brief by @guyspy in #1054
• sync: carry small Mantle skill hotfix into develop by @guyspy in #1053
• fix(sites): align migrations and onboarding with stable SDK by @guyspy in #1056
• docs: check installed SDK version before reading handbook by @guyspy in #1057
• Show live Schema and View data in Admin Developer Console by @guyspy in #1090
• Define progressive generate selection and safe project reruns by @guyspy in #1091
• Generate runnable Cloudflare sites with selected Mantle surfaces by @guyspy in #1092
• feat: safe append-only managed SQLite migrations by @guyspy in #1093
• Generate complete ChatGPT Sites apps with managed D1 migrations by @guyspy in #1094
• Align Mantle skill and docs with progressive generate by @guyspy in #1095
• Add reviewed unique-index tuple migrations for managed Sites SQLite by @guyspy in #1096
• Support atomic multi-Schema entry writes in ref Procedures by @guyspy in #1097
• feat: add scheduled Procedure Triggers for Cloudflare by @guyspy in #1098
• feat: add explicit Schema TTL with D1 and Bun sweeps by @guyspy in #1099
• feat: show scheduled run observations in Developer Console by @guyspy in #1100
• fix: finish Developer Console inspection audit by @guyspy in #1101
• docs: guide generated Cloudflare OTP smoke and blank validation by @guyspy in #1104
• refactor: guide existing-project integration with a skill by @guyspy in #1103
• fix: remove extra managed SQLite cold boot queries by @guyspy in #1107

Full Changelog: v0.1.3...v0.1.5-alpha.1

v0.1.4

Mantle 0.1.4 repairs the path from a fresh agent install to a working consumer project. Install the stable SDK with an exact 0.1.4 version, and read the skill and handbook shipped with that installed package.

Fixes

• The ChatGPT Sites reference adds an append-only migration for _mantle_boot_state.store_instance_id, required by the runtime. Apply pending D1 migrations before deploying updated code. Its build now clears dist, so deleted migrations cannot remain in the deployment artifact. #1056
• The mantle bootstrap skill verifies the application's installed SDK and lockfile version before opening package docs, preventing a nearby checkout or another project's node_modules from supplying mismatched instructions. #1057
• Current guidance no longer requires a same-version mantle-starters tag or a mantle create command. Superseded ADRs are marked as history. #1069
• Better Auth plugins are kept on Mantle's pinned 1.7.2 line for this repair release. #1070

Documentation and examples

• The handbook's ChatGPT Sites guide now lives at docs/handbook/chatgpt-sites/. The reference explains HTTP Trigger mounting, owner Admin WebMCP and Sites-session MCP; article pages expose Markdown through alternate metadata without a visible Markdown button. #1056
• The README now leads with product capabilities, and the Admin, WebMCP and MCP API docs include English Admin Dev UI screenshots. #1049
• npx skills add aotter/mantle installs a small mantle bootstrap skill rather than copying the SDK repository. #1052, #1054

Upgrade guidance is in the 0.1.4 handbook entry. All eleven @aotter/mantle* packages should use the same exact version.

Full changelog: v0.1.3...v0.1.4

v0.1.3

What's Changed

Breaking changes

• feat(auth): extract @aotter/mantle-auth from the Cloudflare adapter by @guyspy in #948
• feat(spec): reserve the six native column names; let Schema.spec.indexes reference them by @guyspy in #1014

Features

• feat(spec): warn when an MCP-exposed Procedure has no description by @guyspy in #978
• feat(spec): warn when an MCP write tool's expectedVersion cannot be read on its surface by @guyspy in #980
• feat(mcp): emit tool annotations and let Procedures declare them by @guyspy in #984
• feat(spec): warn when an MCP-surfaced Procedure input is not agent-shaped by @guyspy in #985
• feat(codegen): typed indexed field reads on generated entry accessors by @guyspy in #979
• feat(auth): expose account.accountLinking through createMantleAuth by @guyspy in #982
• feat(cf): one caller gate for MCP and HTTP — surface only decides the staff check by @guyspy in #983
• docs(agent): pin skill-first cold start on the GitHub face by @guyspy in #996
• feat(auth): pass oauthProvider.extensions through to the OAuth provider by @guyspy in #1020
• feat(runtime): MCP tools/call audit sink with a Workers Analytics Engine sink by @guyspy in #1021
• feat(spec): add internal View surface by @guyspy in #1035
• feat(codegen): emit typed module from runtime plan by @guyspy in #1037
• feat(audit): use declared MCP idempotency key by @guyspy in #1039

Fixes

• fix(admin): close the remaining post-merge review findings from #877 by @guyspy in #986
• fix(auth): retain Better Auth background work through the request's waitUntil by @guyspy in #981
• fix(admin-ui): stop labeling access-denied users as GitHub by @guyspy in #997
• fix(spec): public Views over publishing Schemas read published rows only by @guyspy in #1012
• fix(runtime): refuse stale v1 RuntimePlans; post-merge review fixes for #1012 #1014 #1015 by @guyspy in #1019
• fix(spec): let uiSchema.list.columns name a native entry column by @guyspy in #1024
• fix(spec): confine sql Views to declared Schema tables by @guyspy in #1034
• fix(auth): bind session cache to store instance by @guyspy in #1036
• fix(admin-ui): reset row operation dialog state by @guyspy in #1038
• fix(harness): match production planner state by @guyspy in #1041

Documentation

• docs: rename example and test data properties that shadow native columns by @guyspy in #1013
• docs: ADR-0025, restore the untagged cold-start entry, one home per rule by @guyspy in #1015
• docs: tighten 0.1.3 skill onboarding and manifest/Admin reference by @guyspy in #1044

Other changes

• docs: reconcile the contributor process with how the repo actually works by @guyspy in #967
• docs: add a Releases chapter and drop the alpha-era migration history by @guyspy in #969
• docs: keep a 0.1.2 upgrade pointer so the handbook stays publishable by @guyspy in #975
• fix(runtime): native-table View codec and IndexedDB nullable:true by @guyspy in #991
• docs(agent): kill leftover Starter entry signals and single-source Admin/Sites trails by @guyspy in #992
• fix(cf): keyed default email OTP storage by @guyspy in #994
• feat(admin-ui): export the two-step email-OTP sign-in flow by @guyspy in #957
• docs(cli): point --help text to handbook and install skill by @guyspy in #998
• fix(release): remove the temporary mantle-release dist-tag after promotion by @guyspy in #1000
• test(mcp): MCP SDK 2.0 client conformance against /mcp and /mcp/staff by @guyspy in #1023

Full Changelog: v0.1.2...v0.1.3

v0.1.3-alpha.6

What's Changed

Features

• feat(spec): add internal View surface by @guyspy in #1035
• feat(codegen): emit typed module from runtime plan by @guyspy in #1037
• feat(audit): use declared MCP idempotency key by @guyspy in #1039

Fixes

• fix(spec): confine sql Views to declared Schema tables by @guyspy in #1034
• fix(auth): bind session cache to store instance by @guyspy in #1036
• fix(admin-ui): reset row operation dialog state by @guyspy in #1038
• fix(harness): match production planner state by @guyspy in #1041

Full Changelog: v0.1.3-alpha.5...v0.1.3-alpha.6

v0.1.3-alpha.5

What's Changed

Features

• feat(auth): pass oauthProvider.extensions through to the OAuth provider by @guyspy in #1020
• feat(runtime): MCP tools/call audit sink with a Workers Analytics Engine sink by @guyspy in #1021

Other changes

• test(mcp): MCP SDK 2.0 client conformance against /mcp and /mcp/staff by @guyspy in #1023

Full Changelog: v0.1.3-alpha.4...v0.1.3-alpha.5

v0.1.3-alpha.4

What's Changed

Fixes

• fix(spec): let uiSchema.list.columns name a native entry column by @guyspy in #1024

Full Changelog: v0.1.3-alpha.3...v0.1.3-alpha.4

v0.1.3-alpha.3

What's Changed

Breaking changes

• feat(spec): reserve the six native column names; let Schema.spec.indexes reference them by @guyspy in #1014

Fixes

• fix(spec): public Views over publishing Schemas read published rows only by @guyspy in #1012
• fix(runtime): refuse stale v1 RuntimePlans; post-merge review fixes for #1012 #1014 #1015 by @guyspy in #1019

Documentation

• docs: rename example and test data properties that shadow native columns by @guyspy in #1013
• docs: ADR-0025, restore the untagged cold-start entry, one home per rule by @guyspy in #1015

Full Changelog: v0.1.3-alpha.2...v0.1.3-alpha.3

v0.1.3-alpha.2

What's Changed

Other changes

• fix(release): remove the temporary mantle-release dist-tag after promotion by @guyspy in #1000

Full Changelog: v0.1.3-alpha.1...v0.1.3-alpha.2

v0.1.3-alpha.1

What's Changed

Breaking changes

• feat(auth): extract @aotter/mantle-auth from the Cloudflare adapter by @guyspy in #948

Features

• feat(spec): warn when an MCP-exposed Procedure has no description by @guyspy in #978
• feat(spec): warn when an MCP write tool's expectedVersion cannot be read on its surface by @guyspy in #980
• feat(mcp): emit tool annotations and let Procedures declare them by @guyspy in #984
• feat(spec): warn when an MCP-surfaced Procedure input is not agent-shaped by @guyspy in #985
• feat(codegen): typed indexed field reads on generated entry accessors by @guyspy in #979
• feat(auth): expose account.accountLinking through createMantleAuth by @guyspy in #982
• feat(cf): one caller gate for MCP and HTTP — surface only decides the staff check by @guyspy in #983
• docs(agent): pin skill-first cold start on the GitHub face by @guyspy in #996

Fixes

• docs: tighten the agent trail into ChatGPT Sites by @guyspy in #947
• fix(admin): close the remaining post-merge review findings from #877 by @guyspy in #986
• fix(auth): retain Better Auth background work through the request's waitUntil by @guyspy in #981
• fix(admin-ui): stop labeling access-denied users as GitHub by @guyspy in #997

Documentation

• docs(sites): illustrate equipment checkout and external API workflows by @guyspy in #941
• docs: README reading order, unpinned plugin install, Bun/Vercel marked experimental by @guyspy in #950
• chore: move the maintainer release skill to .agents/skills by @guyspy in #955

Dependencies

• chore(deps): bump lucide-react from 1.34.0 to 1.41.0 by @dependabot[bot] in #901
• chore(deps-dev): bump the cloudflare group across 1 directory with 2 updates by @dependabot[bot] in #897

Other changes

• fix: add raster default MCP icon by @guyspy in #921
• docs/DX stack 1/3: remove GA4 / Meta Pixel from Core siteConfig by @guyspy in #929
• docs/DX stack 2/3: handbook clean cut for pre-stable by @guyspy in #930
• docs/DX stack 3/3: one-shot local Admin / Dev UI + agent prompts by @guyspy in #932
• docs/DX stack 4/4: local Admin origin + CLI docs path SSOT by @guyspy in #933
• docs: examples hub SSOT (builtin vs cf-primitives vs host) by @guyspy in #935
• Clarify agent-first setup and authentication by @guyspy in #927
• docs: lead with runnable bunx quickstart by @guyspy in #936
• docs: clarify manifest generation and adoption paths by @guyspy in #937
• feat(web): request-scoped frontend client and Cloudflare app fallback by @guyspy in #940
• feat: make ChatGPT Sites a first-class Mantle integration by @guyspy in #938
• chore(plugin): align the Codex marketplace source with Claude's by @guyspy in #951
• chore(release): drop unreachable 0.0.x-alpha latest dist-tag branch by @guyspy in #958
• docs: stop steering readers to a prerelease ahead of 0.1.2 by @guyspy in #959
• fix(admin-ui): give favicon.png a transparent background by @guyspy in #960
• fix(scripts): pin packageManager in synthetic consumer package.json by @guyspy in #961
• release: 0.1.2 by @guyspy in #963
• fix(release): drop the stale marketplace ref assertion by @guyspy in #965
• docs: reconcile the contributor process with how the repo actually works by @guyspy in #967
• docs: add a Releases chapter and drop the alpha-era migration history by @guyspy in #969
• docs: keep a 0.1.2 upgrade pointer so the handbook stays publishable by @guyspy in #975
• fix(runtime): native-table View codec and IndexedDB nullable:true by @guyspy in #991
• docs(agent): kill leftover Starter entry signals and single-source Admin/Sites trails by @guyspy in #992
• fix(cf): keyed default email OTP storage by @guyspy in #994
• feat(admin-ui): export the two-step email-OTP sign-in flow by @guyspy in #957
• docs(cli): point --help text to handbook and install skill by @guyspy in #998

Full Changelog: v0.1.2-alpha.6...v0.1.3-alpha.1

v0.1.2

What's Changed

Breaking changes

• fix: enforce Auth, preview and public rendering boundaries by @guyspy in #852
• feat: fold child collections with optional uiSchema.nav standalone by @guyspy in #854
• fix(mcp): constrain generic tools to applicable collections by @guyspy in #863

Fixes

• docs: tighten the agent trail into ChatGPT Sites by @guyspy in #947

Documentation

• docs: ship the user handbook in docs/handbook/ as the single source of truth by @guyspy in #838
• docs(sites): illustrate equipment checkout and external API workflows by @guyspy in #941
• docs: README reading order, unpinned plugin install, Bun/Vercel marked experimental by @guyspy in #950
• chore: move the maintainer release skill to .agents/skills by @guyspy in #955

Dependencies

• chore(deps-dev): bump @types/react-dom from 19.2.4 to 19.2.5 in the react group by @dependabot[bot] in #830
• chore(deps): bump @vercel/functions from 3.9.3 to 3.9.5 by @dependabot[bot] in #833
• chore(deps): bump lucide-react from 1.33.0 to 1.34.0 by @dependabot[bot] in #836
• chore(deps): bump @types/bun from 1.3.14 to 1.4.0 in the typescript-toolchain group across 1 directory by @dependabot[bot] in #829
• chore(deps-dev): bump the admin-ui-vite group across 1 directory with 2 updates by @dependabot[bot] in #831
• chore(deps-dev): bump the cloudflare group across 1 directory with 2 updates by @dependabot[bot] in #832
• chore(deps-dev): bump shadcn from 4.18.0 to 4.19.0 by @dependabot[bot] in #834
• chore(deps): bump @tanstack/react-query from 5.101.4 to 5.102.5 by @dependabot[bot] in #835
• chore(deps): bump @xyflow/react from 12.11.5 to 12.11.6 by @dependabot[bot] in #898
• chore(deps-dev): bump shadcn from 4.19.0 to 4.19.1 by @dependabot[bot] in #900
• chore(deps-dev): bump @vitejs/plugin-react from 6.1.0 to 6.1.1 in the admin-ui-vite group across 1 directory by @dependabot[bot] in #896
• chore(deps): bump @tanstack/react-query from 5.102.5 to 5.102.8 by @dependabot[bot] in #902
• chore(deps): bump lucide-react from 1.34.0 to 1.41.0 by @dependabot[bot] in #901
• chore(deps-dev): bump the cloudflare group across 1 directory with 2 updates by @dependabot[bot] in #897

Other changes

• refactor!: retire Starter scaffolding and cross-repo release coupling by @guyspy in #827
• chore: integrate handbook and pending dependency branches by @guyspy in #839
• feat: support Cloud auth cookies and sandbox Admin previews by @guyspy in #844
• docs: consolidate legacy guides and collect ADR-lite records by @guyspy in #841
• feat(cloudflare): accept host-selected semantic storage by @guyspy in #848
• feat(admin-ui): expose global staff operations and retain results by @guyspy in #849
• fix: preserve caller-observed expectedVersion in Admin and builtin upsert by @guyspy in #853
• fix(runtime): enforce builtin collection isolation by @guyspy in #855
• fix(admin): recover row-operation versions without automatic overwrite by @guyspy in #858
• feat: preserve storage and service failure contracts by @guyspy in #859
• fix(admin): align navigation, collection tooling, and invitations by @guyspy in #860
• feat(admin): add staff WebMCP tools and navigation by @guyspy in #862
• docs: retire duplicate grammar after Builder handbook migration (#837) by @guyspy in #864
• fix(admin-ui): brighten dark primary descriptions (#828) by @guyspy in #865
• fix(admin): show email identity for OTP staff by @guyspy in #866
• fix(admin): expose declared WebMCP tools by @guyspy in #868
• feat(admin): split developer resources and map schemas by @guyspy in #869
• fix(admin): auto-submit six-digit email OTP by @guyspy in #871
• feat(admin): streamline interface docs and schema HUD by @guyspy in #872
• feat: document legal consent contract by @guyspy in #874
• docs: make legal revisions immutable by @guyspy in #875
• fix(runtime): map media metadata-delete failures (M1 / #877) by @guyspy in #878
• fix(admin-ui): guard OTP verify against double submit (M2 / #877) by @guyspy in #879
• fix(admin-ui): dark-mode page primary descriptions (M3 / #877) by @guyspy in #880
• docs: clarify legal example immutability boundary (M4 / #877) by @guyspy in #881
• fix(mcp): enforce Admin staff rank on generic tools by @guyspy in #876
• fix(admin): hide generic lifecycle actions for procedure-only records by @guyspy in #882
• Fix Admin collection navigation query waterfall by @guyspy in #883
• feat(cache): add scoped public view caching by @guyspy in #885
• Fix custom storage MCP catalog caching by @guyspy in #886
• perf(admin): remove duplicate role lookup from session requests by @guyspy in #887
• perf(auth): cache Better Auth sessions in deployment KV by @guyspy in #889
• perf(admin): bootstrap collection shell in one request by @guyspy in #890
• chore(admin): trace bootstrap request phases by @guyspy in #891
• Trace Admin entry list phases by @guyspy in #892
• perf(admin): skip cold auth work and prefetch collections by @guyspy in #893
• Prefetch Admin entry details on row intent by @guyspy in #894
• fix(admin-ui): use mature editors for formatted strings by @guyspy in #905
• feat(admin-ui): expose Mantle UI kit and auth recipe by @guyspy in #910
• feat(runtime): map schemas to native tables by @guyspy in #912
• fix(auth): verify cached staff roles against D1 by @guyspy in #914
• chore: prepare 0.1.2-alpha.3 release by @guyspy in #915
• fix(runtime): reserve legacy entries schema name by @guyspy in #918
• chore: prepare 0.1.2-alpha.4 release by @guyspy in #919
• fix(auth): hash email verification secrets by @guyspy in #922
• refactor(auth): expose native Better Auth configuration by @guyspy in #925
• fix: add raster default MCP icon by @guyspy in #921
• docs/DX stack 1/3: remove GA4 / Meta Pixel from Core siteConfig by @guyspy in #929
• docs/DX stack 2/3: handbook clean cut for pre-stable by @guyspy in #930
• docs/DX stack 3/3: one-shot local Admin / Dev UI + agent prompts by @guyspy in #932
• docs/DX stack 4/4: local Admin origin + CLI docs path SSOT by @guyspy in #933
• docs: examples hub SSOT (builtin vs cf-primitives vs host) by @guyspy in #935
• Clarify agent-first setup and authentication by @guyspy in #927
• docs: lead with runnable bunx quickstart by @guyspy in #936
• docs: clarify manifest generation and adoption paths by @guyspy in #937
• feat(web): request-scoped frontend client and Cloudflare app fallback by @guyspy in #940
• feat: make ChatGPT Sites a first-class Mantle integration by @guyspy in #938
• chore(plugin): align the Codex marketplace source with Claude's by @guyspy in #951
• chore(release): drop unreachable 0.0.x-alpha latest dist-tag branch by @guyspy in #958
• docs: stop steering readers to a prerelease ahead of 0.1.2 by @guyspy in #959
• fix(admin-ui): give favicon.png a transparent background by @guyspy in #960
• fix(scripts): pin packageManager in synthetic consumer packa...