v0.41.0-alpha.6

v0.41.0-alpha.6

Release date: 2026-07-06
Previous package line: 0.41.0-alpha.5
Released package line: 0.41.0-alpha.6
npm tag: next
Git tag: v0.41.0-alpha.6

v0.41.0-alpha.6 closes the App/protocol architecture hardening line. It makes
OpenElement App own the core application concepts while keeping Vite, Hono,
Nitro, and Deno Desktop as official adapters and drivers. The release also
closes the front-half cleanup audit, the product-truth ADRs, and the CodeQL /
trust-boundary backlog.

Install

# create a new project
deno run -A npm:@openelement/create@0.41.0-alpha.6 my-app

# or install a specific package
npm install @openelement/core@0.41.0-alpha.6

Highlights

• App/protocol ownership boundary — @openelement/app now owns
  RouteGraph, RenderPipeline, RequestContext, AssetManifest,
  IslandManifest, DeploymentTarget, and Deno Desktop target contracts.
• Product truth — ADR-0110 adopts the public doctrine
  Web Components Fullstack Framework + Basic Element; ADR-0111 records that
  official adapters implement OpenElement-owned concepts rather than defining
  product identity.
• Front-half cleanup audit closure — duplicate implementations, redundant
  dependencies/configs, stale resolver maps, leaked router internals, and dead
  tooling helpers removed.
• Trust-boundary hardening — CodeQL/code-scanning backlog (#186–#191)
  closed; generated island dynamic imports use an admitted module-specifier
  boundary; shared JavaScript literal escaping is used for generated client and
  server entry code.
• Reader regression dogfood — the Deno Desktop Reader is promoted from a
  working proof to regression-grade evidence for the framework contract.
• npm provenance — all 11 packages published to npm with provenance under
  the next dist-tag.

What changed

Architecture & ownership

• packages/ssg/src/route-scanner.ts: fileToTagName now delegates to
  @openelement/core/pathToTagName, so route and island tag-name derivation
  share one source of truth and top-level page files produce valid custom
  element names.
• packages/core/src/island-transform.ts: reuses the shared tag-name helper,
  normalizing unsafe characters to valid custom element names instead of
  throwing.
• packages/ssg/src/island-manifest.ts and related entry generators: replaced
  the deprecated isCustomElementName with isValidTagName from
  @openelement/core/tag-utils.
• Removed the unused packages/ssg/src/custom-element-name.ts surface.

Tooling & release hygiene

• packages/core/src/write-json.ts: writeJson renamed to formatJson;
  writeJson remains as a deprecated alias.
• packages/ssg/src/entry-render-helpers.ts: removed the dead varName
  parameter from routeTagNameExpr.
• tools/lib/process.ts: runWithOutput aligned with runCommand options API.
• tools/lib/git.ts: gitIsTracked now passes -c core.quotepath=false to
  git ls-files.
• tools/consumer-smoke.ts: fixed pre-existing result.output reference to
  stdout + stderr after the runWithOutput API change.

Docs & website

• Updated README, README.zh, docs/status/STATUS.md, docs/roadmap/ROADMAP.md,
  docs/current/VERSION_PLAN.md, docs/current/PACKAGE_SURFACE.md, and
  docs/governance/PROJECT_WORKFLOW.md to reflect alpha.6 as the released line
  and alpha.7 as the active next line.
• Updated www version constant, roadmap page, homepage, getting-started guide,
  example comments, and design README.
• Added this release note and updated docs/release/v0.41.0.md.

Release evidence

• tools/autoflow/release.ts anchor replacements updated so the next release
  cycle starts from 0.41.0-alpha.6.

Verification

Local and CI gates passed before publish:

• deno task fmt:check, deno task lint, deno task typecheck
• deno task test — 1221 passed, 0 failed
• deno task test:coverage:check — 71.1% >= 70%
• deno task consumer:core-smoke
• deno task pack:dry-run
• deno task arch:check, deno task repo:hygiene,
  deno task package-surface:check, deno task graph:check
• deno task docs:truth

Post-publish npm consumer smoke passed in the AutoFlow Release workflow.

Migration

No breaking changes from 0.41.0-alpha.5. Update your dependency specifiers:

- "@openelement/core": "npm:@openelement/core@^0.41.0-alpha.5"
+ "@openelement/core": "npm:@openelement/core@^0.41.0-alpha.6"

Full changelog

See the alpha.6 plan for detailed scope and acceptance criteria:
docs/release/v0.41.0-alpha.6-plan.md.

---

AutoFlow3 release evidence: approved-release-v0.41.0-alpha.6-2026-07-06T23-55-21-058Z.