Skip to content

v1.0.1 — quickstart fix, trust model, images

Choose a tag to compare

View all tags
@paveler paveler released this 15 Oct 15:01
· 43 commits to main since this release
v1.0.1
d8a3096
  • Fix: the quickstart now works. npm run dev and npm start read .env (--env-file-if-exists). Before, cp .env.example .env + npm run dev failed with ENGINE_TOKEN is required. Node 22.9+ is required.
  • Docs: trust model. README states what "a prompt-injected model can ask, not act" depends on — write endpoints that only register intents, read tools without side effects, approval in the harness, data scoped by meta, ENGINE_TOKEN only on trusted servers — and what the engine guarantees itself.
  • Docs: AGENTS.md — one instruction file for any coding agent; CLAUDE.md imports it.
  • Images — every vX.Y.Z tag publishes ghcr.io/paveler/theloop:<version> (and <major>.<minor>, <major>, latest) after typecheck and tests.

No contract changes.

Assets 2
Loading