v0.1.0-alpha.0

v0.1.0-alpha.0

Released from 35dcb5e.

Alpha status

This is an alpha release. It is suitable for evaluation, but it is not a stable v0.1 release.

• Cloudflare deploy is experimental.
• The 1 GiB scale envelope is untested. See issue #302.
• Approvals, evidence capture and semantic search are not in v0.1.

Read the limitations and the GHSA-c53f-24h5-74qj advisory before using this release.

Package changelogs

packages/backend-local

@lorepack/backend-local

0.1.0-alpha.0

Patch Changes

• Updated dependencies [f899e7a]
• Updated dependencies [c97256d]
• Updated dependencies [6976d0b]
  • @lorepack/core@0.1.0-alpha.0

packages/cli

@lorepack/cli

0.1.0-alpha.0

Minor Changes

• b04cf0e: Lore Studio is rebuilt as a developer inspector. A sidebar names the active build and its
  source freshness on every route, a Cmd/Ctrl-K palette jumps to any route, source or table,
  and light and dark themes follow the system unless a reader picks one. Every route keeps its
  data, provenance and confirmations; the Playground now draws the token budget to scale.
• 0cdba12: Lore Studio is now a launchpad for using the build. Overview lists the MCP and HTTP endpoints
  and a lore connect command for each installed client; every Playground run, search and SQL
  query can be copied as the equivalent lore command, curl call or MCP tool call; and every
  citation opens the stored text of its source with the cited lines marked.

Patch Changes

• 952e28e: Keep internal package references in generated alpha changelog sections aligned with the
  version being released, while preserving historical release notes.
• cf8172c: Add the v0.1 release automation gate: pull requests now require a Changesets entry or an
  explicit no-release marker, and the manual release workflow dry-runs versioning, SBOM
  generation, package tarball creation and example archive creation before any publish-side
  effect.
• 9582569: Lore Studio's Versions history no longer breaks a row's rules at 1280px, its deployment column
  gives way on narrow windows instead of sliding under the row actions, and paths in a build diff
  no longer break mid-word.
• 0cdba12: Fix Lore Studio's Overview crashing with Cannot read properties of undefined (reading 'map')
  after visiting Sources. A route that fails to render now shows the error inside Studio, with
  the sidebar still usable, instead of replacing the whole app.
• 35d1dc4: Table queries now pass a shared statement guard on every backend before they run. It admits only
  the requested table, common table expressions over it and subqueries, so a query can neither read
  nor detect another table. The Cloudflare Worker additionally refuses recursive common table
  expressions, table-valued JSON functions, aggregates used as windows, and joins whose row product
  exceeds a bound, because D1 cannot be interrupted before its own time limit.
• Updated dependencies [cb7ea8a]
• Updated dependencies [f899e7a]
• Updated dependencies [e00503c]
• Updated dependencies [c97256d]
• Updated dependencies [6976d0b]
  • @lorepack/mcp@0.1.0-alpha.0
  • @lorepack/runtime@0.1.0-alpha.0
  • @lorepack/core@0.1.0-alpha.0
  • @lorepack/compiler@0.1.0-alpha.0
  • @lorepack/parsers@0.1.0-alpha.0
  • @lorepack/connect-clients@0.1.0-alpha.0
  • @lorepack/deploy-cloudflare@0.1.0-alpha.0
  • @lorepack/backend-local@0.1.0-alpha.0

packages/compiler

@lorepack/compiler

0.1.0-alpha.0

Patch Changes

• f899e7a: Reject source roots that normalize to the same source ID or overlap, and report filesystem
  entries that cannot be inspected as unreadable discovery warnings.
• Updated dependencies [f899e7a]
• Updated dependencies [e00503c]
• Updated dependencies [c97256d]
• Updated dependencies [6976d0b]
  • @lorepack/core@0.1.0-alpha.0
  • @lorepack/parsers@0.1.0-alpha.0

packages/connect-clients

@lorepack/connect-clients

0.1.0-alpha.0

Patch Changes

• e00503c: Replace Mammoth's vulnerable sprintf-js path with the dependency-free argparse@2.0.1
  override and upgrade smol-toml to 1.9.0, which clears the production audit advisories.
• Updated dependencies [f899e7a]
• Updated dependencies [c97256d]
• Updated dependencies [6976d0b]
  • @lorepack/core@0.1.0-alpha.0

packages/core

@lorepack/core

0.1.0-alpha.0

Minor Changes

• c97256d: Add LORE_E_SOURCE_UNREADABLE (exit 1) for a source file that exists and cannot be opened.
  It used to surface as LORE_E_INTERNAL with a raw errno, which told the user to report a
  bug for a permission they could fix. Error codes are part of the public contract, so the
  addition is recorded here.

  The fallback next: line no longer names lore doctor, which does not exist until Phase 3.

• 6976d0b: buildDescription gains an optional createdAt. A sealed build carries no wall-clock time
  by design, so identical content produces identical bytes; the creation time is operational
  state the serving backend records beside the build, and a backend without that record omits
  the field.

  Adds the CatalogArtifact and CatalogNode ports, and RUNTIME_LIMITS, which is
  deliberately separate from PRODUCT_DEFAULTS.limits: those are compilation inputs hashed
  into the build id, and how much text one read returns decides nothing about what a build
  contains.

Patch Changes

• f899e7a: Reject source roots that normalize to the same source ID or overlap, and report filesystem
  entries that cannot be inspected as unreadable discovery warnings.

packages/deploy-cloudflare

@lorepack/deploy-cloudflare

0.1.0-alpha.0

Patch Changes

• Updated dependencies [cb7ea8a]
• Updated dependencies [f899e7a]
• Updated dependencies [c97256d]
• Updated dependencies [6976d0b]
  • @lorepack/mcp@0.1.0-alpha.0
  • @lorepack/runtime@0.1.0-alpha.0
  • @lorepack/core@0.1.0-alpha.0
  • @lorepack/backend-local@0.1.0-alpha.0

packages/mcp

@lorepack/mcp

0.1.0-alpha.0

Patch Changes

• cb7ea8a: Declare the runtime zod imports in each published package that uses them, and add an
  architecture test that fails when compiled JavaScript imports a package missing from that
  package's published dependency manifest.
• Updated dependencies [cb7ea8a]
• Updated dependencies [f899e7a]
• Updated dependencies [c97256d]
• Updated dependencies [6976d0b]
  • @lorepack/runtime@0.1.0-alpha.0
  • @lorepack/core@0.1.0-alpha.0

packages/parsers

@lorepack/parsers

0.1.0-alpha.0

Patch Changes

• e00503c: Replace Mammoth's vulnerable sprintf-js path with the dependency-free argparse@2.0.1
  override and upgrade smol-toml to 1.9.0, which clears the production audit advisories.
• Updated dependencies [f899e7a]
• Updated dependencies [c97256d]
• Updated dependencies [6976d0b]
  • @lorepack/core@0.1.0-alpha.0

packages/runtime

@lorepack/runtime

0.1.0-alpha.0

Patch Changes

• cb7ea8a: Declare the runtime zod imports in each published package that uses them, and add an
  architecture test that fails when compiled JavaScript imports a package missing from that
  package's published dependency manifest.
• Updated dependencies [f899e7a]
• Updated dependencies [c97256d]
• Updated dependencies [6976d0b]
  • @lorepack/core@0.1.0-alpha.0

packages/sdk

@lorepack/sdk

0.1.0-alpha.0