Eden 0.2.1 (security)

Security

• The public Worker now returns 404 for Eve's Workflow queue delivery
  routes (/.well-known/workflow/v1/flow and /step). They had no
  authentication, and in 0.2.0 they were reachable from the internet. Queue
  deliveries from the container to its own URL are now routed straight back
  into the container, and only that host is intercepted. Webhook callbacks and
  Eve's callback URLs are unchanged. Upgrade and redeploy existing 0.2.0
  deployments.

Changed

• Validated Eve 0.68.0 (was 0.66.3) with a real Cloudflare deploy, a real
  model reply, and a tool call. The compatibility runner now reads the
  installed Eve version and fails if it doesn't match the fixture pin.

npx @moinulmoin/eden@0.2.1 deploy

Eden 0.2.0

Eden now has one job: deploy an existing Eve project to your own Cloudflare
account.

Breaking

• Removed Eden Agent (eden agent init|build|dev|deploy) and its packages
  @moinulmoin/eden-compiler and @moinulmoin/eden-definitions. The CLI now
  has three commands: eden preflight, eden deploy, and eden destroy.

Added

• Validated Eve 0.66.3 (was 0.47.3). A fresh eve init project passes
  eden preflight, and a real preview deploy served a model turn with a tool
  call.
• eden deploy and eden preflight work without flags: the project is the
  current directory, the environment is preview, and the name is derived
  from package.json. --env production and destroy still require an
  explicit --name.
• Human-readable output by default: progress lines, ✓/✗ checks, and a
  summary with the URL and elapsed time. --json prints the previous
  machine-readable result for scripts and CI.

Changed

• The Cloudflare Container uses the basic instance type (1 GiB) instead of
  the 256 MiB default.
• eden destroy also deletes the registry image tags recorded for the exact
  target, including images left by aborted pushes, and reports any it could
  not remove.

Fixed

• Image builds copy the project's pnpm-workspace.yaml before frozen
  installs, so pnpm policy behaves the same inside the image as locally.
• The runtime image includes package.json and the authored Eve source that
  eve start needs, with secret files still excluded.
• Build failures are classified by the step that failed. A failing
  eve build reports EVE_BUILD_FAILED (with a just-bash hint when Eve's
  sandbox fallback is missing), and pnpm failures report pnpm's own error
  code, such as ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION or
  ERR_PNPM_IGNORED_BUILDS.
• Fixed a runtime-tree ordering mismatch that raised SOURCE_RACE on real
  Eve 0.66.3 builds.
• The Worker no longer overrides the container start command, which crashed
  the container under wrangler dev by running eve start twice.

npx @moinulmoin/eden deploy

v0.1.5

Full Changelog: v0.1.4...v0.1.5

v0.1.4

Full Changelog: v0.1.3...v0.1.4

v0.1.3

Full Changelog: v0.1.2...v0.1.3

v0.1.2

Registry-safe correction release.

• Replaces public workspace:* dependency specifiers with exact 0.1.2 versions.
• Restores npm, npx, pnpm, and Bun installation of the complete package graph.
• Includes the corrected onboarding documentation, relaxed Node upper bound, and Factory cleanup from 0.1.1.

This release supersedes 0.1.1, whose published dependency metadata could not be installed by npm.

v0.1.1

Superseded by v0.1.2. Do not install v0.1.1: its npm dependency metadata contains unsupported workspace:* specifiers.

The documentation and Node compatibility changes from this release are included in v0.1.2.

Eden v0.1.0 — Deploy-first CLI and Eden Agent namespace

Changelog

0.1.0 — 2026-08-26

Initial release.

Eden Deploy

• Added top-level eden preflight, eden deploy, and eden destroy commands for hosting an existing Eve project on Cloudflare without adapting its source or runtime semantics.
• Added immutable Linux/amd64 packaging, bounded Container hosting, Worker routing, protected runtime injection, generation identity checks, health-gated promotion, and exact owned-resource cleanup.
• Added fail-closed validation for project roots, lockfiles, runtime configuration, host requirements, deployment identity, and destroy ownership.

Eden Agent

• Placed Eden's agent-authoring framework beneath the explicit eden agent namespace: init, build, dev, and deploy.
• Added filesystem-first agent and tool discovery, coherent generated artifacts, authenticated local and remote runtimes, SQLite-backed Durable Object sessions, NDJSON journals, and bounded model/tool/final-response turns.

CLI contract

• Removed the obsolete eden eve namespace.
• Removed root aliases for Agent init, build, and dev; root deploy now always means Eden Deploy.
• Added command-specific help and explicit target selection through --project, --env, and --name.
• Added the @moinulmoin/eden package and eden binary with npm, pnpm, and
  Bun installer compatibility; Node remains the runtime.