MDS Roadmap — Post-v0.1.0 Progress Tracker

[dean0x]

MDS Roadmap

Master tracking issue for all planned work after the v0.1.0 release. Each item links to a detailed issue with its own PRD.

Status Key

• ✅ Complete
• 🚧 In Progress
• ⚪ Not Started

---

v0.2.0 — Language Enrichment ✅

The core language gets the features users will hit first. Focus: make templates self-sufficient without external preprocessing.

• feat: built-in functions (upper, lower, join, trim, length, etc.) #53 — Built-in functions (upper, lower, join, trim, length, etc.)
• feat: default function arguments #54 — Default function arguments
• feat: logical operators in @if conditions (&&, ||) #55 — Logical operators in @if conditions (&&, ||)
• chore: re-enable wasm-opt for WASM size optimization #68 — Re-enable wasm-opt for WASM size optimization
• feat: expression support in @for and @if directives #74 — Expression support in @for and @if directives
• feat: frontmatter imports #75 — Frontmatter imports
• Add CODE_OF_CONDUCT.md (Contributor Covenant 2.1) #38 — Add CODE_OF_CONDUCT.md

Released: 2026-06-06 — v0.2.0

---

v0.3.0 — Production Readiness ✅

Bridge MDS from "template language" to "production LLM input format." Add the developer workflow tooling that makes daily use pleasant.

Released: 2026-06-28 — v0.3.0

Headline Features (Complete)

• feat: structured JSON output (chat message arrays) #56 — Structured output → shipped as the intrinsic output format: @message templates compile to a JSON array, all others to Markdown; mixed content is a hard error (mds::mixed_content)
• feat: mds watch command (file watcher with auto-recompile) #57 — mds watch command (file watcher with auto-recompile) — merged in feat(cli): add mds watch subcommand with auto-recompile on save #93
• feat: template inheritance (@extends / @block) #58 — Template inheritance (@extends / @block) — merged in feat(core): template inheritance via @extends / @block (#58) #95
• feat: verify & harden hot-reload (HMR) across bundler plugins — Vite, Rollup, Webpack, Rspack #94 — Hot-reload (HMR) across bundler plugins (Vite, Rollup, Webpack, Rspack) — merged in feat(ecosystem): verify & harden HMR across bundler plugins + add @mdscript/rspack-loader #105
• rspack-loader: verify @rspack/core 2.x compat and widen peer range to ^1.0.0 || ^2.0.0 #106 — rspack-loader: verify @rspack/core 2.x compat + widen peer to ^1.0.0 || ^2.0.0 — merged in feat(ecosystem): verify & harden HMR across bundler plugins + add @mdscript/rspack-loader #105

Tech-Debt Sweep (Complete)

Do-set — all 11 landed in PR #117 (88ddbcc):

• tech-debt: Deduplicate arity-check logic across evaluator and validator #71 — Deduplicate arity-check logic across evaluator and validator
• tech-debt: Extract generic quote-aware byte scanner from parser_helpers.rs #72 — Extract generic quote-aware byte scanner from parser_helpers.rs
• Unify CondValue and Expr literal types #78 — Unify CondValue and Expr literal types
• Delegate parse_interpolation_expr to parse_expr_inner #79 — Delegate parse_interpolation_expr to parse_expr_inner
• tech-debt: Share @for loop machinery between text and messages modes #88 — Share @for loop machinery between text and messages modes
• tech-debt: Add resolver-backed compile_messages_file for CLI messages-mode symlink parity #89 — Messages-mode symlink parity — superseded by the intrinsic output format
• tech-debt: Harden CLI/NAPI boundaries with escaping and injection tests #90 — Harden CLI/NAPI boundaries with escaping and injection tests
• tech-debt: Parse WASM return shape at FFI boundary #91 — Parse WASM return shape at FFI boundary (canonical method manifest / backend contract)
• tech-debt: Split resolver.rs into inheritance and frontmatter submodules #96 — Split resolver.rs into inheritance and frontmatter submodules
• tech-debt: Extract build_merged_extends_scope resolver helper #99 — Extract build_merged_extends_scope resolver helper
• tech-debt: Extract resolve_intermediate_base resolver helper #100 — Extract resolve_intermediate_base resolver helper

Already Closed (verified done): #98, #101, #80, #77

---

v0.4.0 — Ecosystem Expansion 🚧

Expand reach beyond JS/TS. Add the quality-of-life tooling that mature languages provide.

Release state (2026-08-12). All v0.4.0 code is merged on main at 113f472; the tag has not been cut. Workspace version is still 0.3.0, and everything below the line is staged under [Unreleased]. CI at 113f472 is green as measured: both CI / CI and CodeQL / Push on main report status=completed, conclusion=success. There was a brief red window at c8b4062 — a rustfmt violation in crates/mds-cli/src/output.rs that rode in on an --admin merge over a cancelled CI run, fixed by cb44b56. That is precisely the failure mode #289 exists to close, which is why it sits in Wave 1. The remaining work is not features — it is the set of decisions and fixes that get materially more expensive once the tag makes them public surface.

Headline Features — landed ✅

• feat: Python bindings (PyO3) #59 — Python bindings (PyO3) — PR feat(python): native Python bindings via PyO3 (mdscript) #131
• feat: mds fmt — auto-formatter #60 — mds fmt (auto-formatter) — PR feat: mds fmt auto-formatter #137
• feat: mds lint — static analysis and diagnostics #61 — mds lint (static analysis) — PR feat: mds lint — static analysis and diagnostics (#61) #171
• feat: source maps for compiled output #62 — Source maps for compiled output
• Interpolation syntax migration: {x} → {{x}} (v0.4.0) #236 — BREAKING: {x} → {{x}} double-brace interpolation, with a lint --fix migration path — PR feat!: double-brace {{x}} interpolation with lint --fix migration (v0.4.0) #237 (aac4070)

Fix / hardening waves — landed ✅

• Indented code fences are not recognized; {…} inside them is interpolated #149 Blank line after frontmatter is stripped on compile #150 Blank lines at @block/@end boundaries are consumed (blank runs collapse to 1) #151 --set x=true coerces to boolean, silently breaking x == "true" #152 Interpolation error suggests the wrong escape; hint \{{ fails, \{ works #153 Base-only frontmatter keys are in scope but omitted from the child output frontmatter #154 — v0.4.0 bug batch: indented + wide fences, interior-verbatim whitespace, --set-string type safety, merged @extends frontmatter, \{ hint — PR fix!: v0.4.0 bug batch — fences, whitespace, type safety, @extends FM (#149–#154) #161 (3ce9f1d)
• core: base_path relative imports fail on Windows for string sources (verbatim canonicalize + '/' join) #133 — Windows base_path relative-import resolution for string sources — PR fix(core): resolve string-source @import on Windows verbatim paths #146
• Add per-branch offset to IfBlock.elseif_branches for precise @elseif diagnostics #181 — per-branch offsets on IfBlock.elseif_branches for precise @elseif diagnostics — PR fix: v0.4.0 remediation — dogfooding blockers, bug batch, UX polish, docs sweep #196 (3aef465)
• First dogfood remediation: blockers, bug batch, span attribution, UX polish, docs sweep — PR fix: v0.4.0 remediation — dogfooding blockers, bug batch, UX polish, docs sweep #196 (3aef465)
• lint --fix: full-block-span removal for block-spanning Tier A fixes (empty-block, unreachable-branch) #172 — lint --fix full-block-span removal for block-spanning Tier A fixes; CLI/config UX; typed Python lint; WASM guard → 850K — PR fix: v0.4.0 dogfooding remediation — block-span lint fixes, span attribution, CLI/config UX, binding alignment, docs (#172 batch) #228 (f06a2d1)
• Harden terminal-escape rendering across all MdsError variants (CWE-150) #176 — Harden terminal-escape rendering across all MdsError variants (CWE-150) — PR fix: harden terminal-escape rendering across all MdsError variants (CWE-150) #253 (b681129). Render path rebuilt per PF-014: sanitize inputs, not frames.
• atomic_write_file: metadata() failure silently yields mode 0600 via .ok() #225 — atomic_write_file warns on metadata() failure instead of silently falling back to mode 0600 — PR fix: atomic_write_file: warn on metadata failure instead of silently using 0600 #240 (de8857d)
• atomic_write_file: rename-based write does not preserve platform ACLs, xattrs, or owner/group #226 (doc half) — doc comment recording that rename-based writes do not preserve hard links, ACLs, xattrs, or owner/group — PR doc: add note about atomic_write_file not preserving hard links, ACLs, xattrs, owner/group #239 (acb8a86)
• PRE-TAG DECISION: mark LintDiagnostic as #[non_exhaustive] #259 — BREAKING: LintDiagnostic marked #[non_exhaustive] + constructor added — PR feat(mds-core)!: mark LintDiagnostic #[non_exhaustive] and add constructor [#259] #286 (d8766af)
• release: workflow_dispatch path fails GH006 on protected main (prepare can't push) #127 — release machinery hardened: broken workflow_dispatch -f version= path deleted, cargo publish idempotency check, bounded crates.io index poll, bump-version.mjs CHANGELOG link-table corruption fixed, examples/ outputs gitignored + examples-gitignore-coverage CI job — PR chore: harden release machinery (5 independent fixes) #287 (cb44b56)
• fix(deps): clear Dependabot dev-dep advisories (vite, js-yaml, esbuild) #125 (partial) — relax 30-day soak pins for vite and js-yaml — PR chore: relax 30-day soak pins for vite and js-yaml (deferred from #125) #266 (c8b4062)

---

⚪ Wave 1 — everything remaining before the tag

13 issues. This list is exactly the open v0.4.0 milestone as of 2026-08-12 — no more, no less.

Wire format — bytes consumers parse; cheap today, a semver event after the tag

• lint: diagnostic ordering — sort by offset within a file #202 — lint JSON diagnostics emit in rule-dispatch order, not source order. Array order is part of the --format json contract.
• lint: unused-import span should anchor at the unused name in multi-name imports #203 — unused-import span is hardcoded to the @import keyword: wrong offset/length in JSON output, wrong squiggle for any future LSP client.
• CLI quiet-mode and directory-summary consistency gaps: build --quiet prints summary while lint/check/fmt suppress; lint has no directory summary #216 — build.rs:1596 prints the directory summary unconditionally, violating the documented --quiet contract; lint has no aggregate summary at all.

⚠️ Decisions needed — nobody is blocked on code here; somebody has to choose

• DECISION NEEDED: unify stdin label conventions across lint/fmt/build — three conventions in four contexts affect the --format json wire format #211 — stdin labels. Four contexts, three conventions: <source> (build/check), input.mds (lint, including the JSON "file" key), <stdin> (fmt). Two of those are wire surfaces. Options A–D are written up in the issue. Deciding after the tag makes mds lint --format json - a breaking change.
• Core: warn on unknown lint rule names instead of silently accepting them #224 — unknown lint rule names. Unknown severities hard-fail; unknown rule names silently no-op. The asymmetry is currently documented as deliberate (crates/mds-python/README.md:70), so this needs a ruling — hard error, warning, or keep-and-own-it — not a patch.

Deprecation window — miss it and removal costs a major bump

• Deprecate apply_fixes from public mds-core API and schedule removal — 0 callers since apply_fixes_incremental shipped #209 — deprecate apply_fixes (0 production callers). This is the pre-tag half of deprecate-at-0.4 / remove-at-0.5.

TS public surface

• Expose basePath on CompileOptions to match LintOptions #180 — BUG (live, shipped): basePath is accepted by assertKnownKeys and then silently discarded by compileOpt()/varsOpt(). Affects both compile and check in the published npm package. The only shipped-bug item on the milestone.
• Add lint/lintFile/lintVirtual exports to browser.ts (pre-existing gap) #215 — browser.ts is missing lint exports. Scope to lint + lintVirtual only — lintFile is not implementable in a browser, so the issue title overreaches.
• options.ts second pass: value-type validation, indexed-access safety, and varsOpt type narrowing #213 — options.ts second pass: value-type validation, indexed-access safety, and varsOpt type narrowing.

Community / release hygiene

• Add CODE_OF_CONDUCT.md (Contributor Covenant 2.1) #38 — add CODE_OF_CONDUCT.md (Contributor Covenant 2.1). Carried since v0.2.0.
• Register mdscript name on PyPI (pre-tag prerequisite) #292 — register the mdscript name on PyPI. The README advertises pip install mdscript, the name is unclaimed, and the squatting window widens on announcement.

Release-safety gates

• ci: reject control bytes and bidi codepoints in tracked source (authoring toolchain injects live ESC) #288 — reject control bytes and bidi codepoints in tracked source. The authoring toolchain has injected a live 0x1B three times; b94ef80 stripped the most recent one from the escape-handling PR itself. Note the detection trap documented in the issue: BSD grep has no -P, exits 2 silently, and makes a dirty tree look clean.
• process: CI checks can be cancelled and an --admin squash-merge will not notice #289 — CI checks can be cancelled and an --admin squash-merge will not notice. PRs doc: add note about atomic_write_file not preserving hard links, ACLs, xattrs, owner/group #239 and fix: atomic_write_file: warn on metadata failure instead of silently using 0600 #240 merged on cancelled runs and left main red on rustfmt until cb44b56.

Build shape — 6 PRs on one wave branch

PRs squash-merge back into the wave branch in dependency order.

PR	Issues	Primary files
1. Lint JSON wire contract	#211, #202, #203	crates/mds-cli/src/lint.rs, mds-core/src/lint/diagnostic.rs, rules/unused_import.rs, formatter.rs
2. Unknown rule-name ruling	#224	mds-core/src/lint/config.rs, crates/mds-python/README.md
3. TS public surface	#180, #215, #213	packages/mds/src/util/options.ts, browser.ts, types.ts, backend/native.ts
4. CLI quiet/summary contract	#216	crates/mds-cli/src/build.rs:1596, lint.rs
5. Deprecate apply_fixes	#209	crates/mds-core/src/lint/fix.rs:691
6. Community + release-safety	#38, #288, #289	CODE_OF_CONDUCT.md, .github/workflows/

• lint: diagnostic ordering — sort by offset within a file #202 and lint: unused-import span should anchor at the unused name in multi-name imports #203 ride with DECISION NEEDED: unify stdin label conventions across lint/fmt/build — three conventions in four contexts affect the --format json wire format #211 deliberately. All three mutate the same lint JSON object; splitting them would churn the published contract twice.
• Register mdscript name on PyPI (pre-tag prerequisite) #292 is MANUAL and cannot be delegated. Registering a PyPI name is an account action, not a code change — no agent and no PR can close it. It must happen before the tag.

---

v0.4.0 gate = MEDIUM (decided 2026-08-09)

The milestone now holds only:

1. semver-breaking or window-limited items — wire formats, exported type surface, deprecation windows
2. the one live shipped bug — Expose basePath on CompileOptions to match LintOptions #180
3. community / release hygiene — Add CODE_OF_CONDUCT.md (Contributor Covenant 2.1) #38, Register mdscript name on PyPI (pre-tag prerequisite) #292
4. release-safety gates — ci: reject control bytes and bidi codepoints in tracked source (authoring toolchain injects live ESC) #288, process: CI checks can be cancelled and an --admin squash-merge will not notice #289

Everything else moved to v0.5.0 on a single criterion: none of it becomes more expensive after the tag. A quality or infra fix costs the same after v0.4.0 ships as it does today; a wire-format or exported-type change does not.

Moved out:

• Correctness / reliability queue — output.rs path helpers fail-open on strip_prefix edge cases and non-UTF-8 paths #217, build: stale .map sidecar left behind when switching --source-map to --inline #199, build: empty directory build exits 0 — silent success hazard in CI #204, debug_assert!-only invariants silently degrade in release builds (3 sites) — PF-005 #220, build::write_output still uses truncate-then-write (non-atomic) for compiled artifacts #227
  • debug_assert!-only invariants silently degrade in release builds (3 sites) — PF-005 #220 — the assert lives at resolver.rs:2437 and guards a UTF-8 char-boundary precondition, not a sortedness invariant. It is also not the last remaining instance: there are 3 sites — resolver.rs:2437, resolver/inheritance.rs:77, resolver/inheritance.rs:174. The issue has been retitled accordingly.
  • build::write_output still uses truncate-then-write (non-atomic) for compiled artifacts #227 — sequence with its prerequisite: routing build::write_output through atomic_write_file trips the metadata() warning branch fix: atomic_write_file: warn on metadata failure instead of silently using 0600 #240 added at output.rs:459-472, which spuriously fires on first build when the output file does not yet exist. Fix that branch in the same change.
• Release infrastructure — ci: SHA-pin GitHub Actions + assert lockfile version in verify-versions.mjs #163, ci: add cargo-deny / cargo-audit supply-chain gate #136, test: flaky cli_watch.rs::watch_ctrl_c_prints_stopped_watching (timing) #129, ci: add a windows-latest leg to the rust CI job (Rust suite is ubuntu-only) #147, ci(wasm): pin wasm build toolchain for deterministic size; re-tighten size budget #128, Release hygiene: fix config drift and close gold-standard gaps #182
  • ci: SHA-pin GitHub Actions + assert lockfile version in verify-versions.mjs #163 — 2 of 53 uses: refs are SHA-pinned; 51 float.
  • test: flaky cli_watch.rs::watch_ctrl_c_prints_stopped_watching (timing) #129 — two distinct flake surfaces: the recorded panic at cli_watch.rs:1152 (assert!(status.success(), ...)), and a separate fixed 100 ms sleep at :1157-1158 gating a later stderr-content assert at :1161-1164.
  • ci: add a windows-latest leg to the rust CI job (Rust suite is ubuntu-only) #147 — the never-executed #[cfg(windows)] test is at crates/mds-core/src/resolver_tests.rs:2896. The file lives in src/, not tests/.
• Carried tech-debt block — tech-debt: reduce Value cloning in evaluate_expr Var lookups #81, tech-debt: carry base-source identity through splice_skeleton for base-default block spans #114, tech-debt: minimize FileSystem trait — remove production-dead normalize base!="" branch #155, tech-debt: centralize block-opener keyword literals (A1) #156, tech-debt: mirror broken-pipe handling to stderr (R3) #157, tech-debt: write-path TOCTOU hardening — openat/O_NOFOLLOW (S1) #160, perf: Arc<str> hoist for per-file source in render_diag_human #255
  • tech-debt: minimize FileSystem trait — remove production-dead normalize base!="" branch #155 — deferred by explicit decision. It touches the path-traversal and symlink guards; a second FileSystem trait break in v0.5.0 is cheaper than a security regression before the tag.

---

⚪ Explicitly deferred past v0.4.0

Everything here is out of scope for the tag. Listed so the boundary is unambiguous.

• Source maps follow-ups: Refactor oversized source-map core functions (CX-1, CX-2, CX-3) #184, Source-map architecture hardening (ARCH-2, ARCH-3) #185, Source-map performance polish (PERF-2, PERF-3, PERF-4) #186, Source-map test-coverage gaps (TEST-4, TEST-5, TEST-6) #187, Source-map cosmetic/consistency nits (TS-1, TS-2, CON-2, CON-4, CX-6, PY-2) #188, source maps: --out-dir far from source produces root-climbing relative sources (sourceRoot design) #197, source maps: static-run mapping granularity — multi-line static runs map only their first line #198, Python: refactor source-map tests toward per-surface golden files to prevent cross-surface divergence #221
• Lint internals: Refactor mds lint CLI per-file dispatch spine #173, Centralize Severity string parsing across bindings #175, Consolidate lint entry-file reads through NativeFs (single source of truth) #179, Restructure apply_fixes_incremental: decompose 135-line function, collapse impossible-state guard, deduplicate regression triple #208, lint fix-pipeline test hardening: dedup coverage and cross-rule validation #230, cosmetic consistency sweep: tone/naming/style across lint rules and docs #231, lint rules: simplify check_if_block and sortedness guard logic #235
• Escape/render follow-ups from Harden terminal-escape rendering across all MdsError variants (CWE-150) #176: refactor: constrain complexity of run_watch_file #256, refactor: unify eprint_error settle patterns in watch.rs #257, perf: eliminate double allocation in render_error_sanitized #260, refactor: rename render_error_sanitized to clarify it is the sanitization boundary #261, refactor: relocate sanitize_control_chars to dedicated module #262, docs: add normative spec section for serialized error shape #263, test: adopt pytest.raises idiom for E11 error test #264, Reject control characters in filenames at the input boundary #265
• Errors and spans: errors: remaining span-less errors — frontmatter name collisions and other sites without byte offsets #205, resolver: messages-mode @extends type_mismatch span can mis-attribute base-origin conditions (same class as PR #196 markdown fix) #207, evaluator: body_origin manual LIFO restore → RAII guard (future-proofing) #233
• CLI/UX open questions: --set duplicate key silently last-wins — warn? #200, find_project_root fallback UX in unmarked trees (.mdsroot discoverability) #201, build tooling: wasm-opt local version drift (self-provisioned 117 vs CI-pinned Binaryen 129) — add a version check #206
• Bindings and ecosystem: tech-debt: bound depythonize recursion depth in native bindings (stack-overflow hardening) #134, tech-debt: centralize MAX_MODULE_COUNT (duplicated in mds-python and mds-wasm) #135, test: cross-binding parity gaps — type_mismatch (napi) + @extends merged-FM (python) #164, Python test: mds_cli_bin fixture silently falls through on malformed MDS_CLI_BIN env var — support CARGO_TARGET_DIR/--target layouts #214, Python binding polish: optimize to_dict() and simplify files() closure chain #232, examples/python/demo.py: harden None-safety for strict mypy/pyright #234
• Python packaging: Python bindings: cross-platform wheel matrix + PyPI publishing (+ cp314t) #132 (wheel matrix, OIDC, cp314t) — post-tag; its pre-tag half is tracked separately as Register mdscript name on PyPI (pre-tag prerequisite) #292
• Rust cleanups and module decomposition: Consolidate MAX_DEPTH from 4 per-file constants to one shared constant adjacent to collect_mds_files #218, Rust minor cleanups from PR #196 review: bounded-loop form, discarded infallible Result, saturating_sub, unwrap_or defensibility, error label wording #219, Tech debt: decompose oversized modules — resolver.rs (2554L) and build.rs (2020L) block safe incremental work #223, build.rs DRY: consolidate embed_sources warnings and sidecar/stdout ladder duplication #229, perf: collect_mds_files eagerly walks excluded dirs to count .mds files — fixed FS cost per run #238
• Security hardening: security: frontmatter YAML parse exposed to alias-bomb / deep-nest DoS (uncatchable at FFI) #162 (frontmatter YAML alias-bomb / deep-nest DoS)
• Write path: atomic_write_file: rename-based write does not preserve platform ACLs, xattrs, or owner/group #226 (hard links / ACLs / xattrs / owner-group — doc half landed in doc: add note about atomic_write_file not preserving hard links, ACLs, xattrs, owner/group #239)
• Repo hygiene: examples/ gitignore footgun: hand-authored .md/.json silently ignored by the catch-alls #290 (examples/ gitignore footgun — local discipline; CI structurally cannot catch it)
• Type rename: Public TS: rename FileOptions to CompileFileOptions for intent clarity (breaking — target v0.5.0) #222 → v0.5.0, conditional on shipping a deprecated FileOptions alias

Closed as duplicate — tracked by the survivor:

Closed	Survivor
#115	#114
#159	#136
#174	#235
#258	#157

#178 and #210 are likewise closed as duplicates; their analysis now lives in the surviving issues.

---

v0.5.0 — Advanced Features

Enable sharing and reuse across projects and teams.

• feat: URL-based imports (remote modules) #63 — URL-based imports (remote modules)
• feat: MDS package registry / prompt library ecosystem #64 — Package registry / prompt library ecosystem
• feat: MDS Runtime — on-read compilation via virtual filesystem #82 — MDS Runtime (on-read compilation via virtual filesystem)
• Public TS: rename FileOptions to CompileFileOptions for intent clarity (breaking — target v0.5.0) #222 — Public TS: rename FileOptions → CompileFileOptions (with deprecated alias)

---

v1.0.0 — Editor Experience (Deferred)

Full editor integration. Intentionally last — language features and production readiness come before distribution overhead. These items require significant DevOps, testing, and maintenance investment beyond the code itself.

• feat: VS Code extension (TextMate injection grammar) #65 — VS Code extension (TextMate injection grammar)
• feat: Tree-sitter grammar (Neovim, Helix, Zed) #66 — Tree-sitter grammar (Neovim, Helix, Zed)
• feat: LSP server for MDS #67 — LSP server

---

Completed Milestones

v0.3.0 (2026-06-28) ✅

• mds watch, template inheritance (@extends / @block), HMR across all four bundler plugins
• Intrinsic output format (breaking): template content decides Markdown vs JSON message array
• Full 11-item tech-debt sweep

v0.2.0 (2026-06-06) ✅

• 18 built-in functions, default args, logical operators
• Expression support in @for and @if directives
• Frontmatter imports
• wasm-opt re-enabled (Binaryen v129, -Oz)
• Published to crates.io, npm (with SLSA provenance), and GitHub Releases

v0.1.0 (2026-05-31) ✅

• Core compiler (lexer, parser, resolver, validator, evaluator)
• CLI: build, check, init
• JS/TS ecosystem: WASM bindings, napi-rs, universal package, Vite/Rollup/Webpack plugins
• Automated release pipeline (workflow dispatch)
• 591+ tests, full CI/CD
• Published to crates.io, npm, and GitHub Releases

Notes

• Editor experience (v1.0.0) is intentionally deferred. Language enrichment and production readiness take priority — we want to ship features users can use before investing in distribution and tooling overhead.
• The v0.4.0 pre-tag set is deliberately biased toward things that become expensive after the tag: wire formats, exported type names, and deprecation windows. Pure-quality tech debt is listed but is not a blocker.
• Release path is tag-push: node scripts/bump-version.mjs 0.4.0 → land on main via PR → git tag -a v0.4.0 && git push origin v0.4.0. The workflow_dispatch -f version= path was deleted in chore: harden release machinery (5 independent fixes) #287; bare gh workflow run release.yml is now the dry-run.

[dean0x]

v0.2.0 Released — 2026-06-06

All language enrichment features shipped:

• mds-core + mds-cli → crates.io
• 8 npm packages → npmjs.com (with SLSA provenance)
• GitHub Release v0.2.0

Features: 18 built-in functions, default args, logical operators, expression directives, frontmatter imports, wasm-opt re-enabled.

Remaining on milestone: #38 (CODE_OF_CONDUCT.md), #71 and #72 (tech debt — moving to v0.3.0).

[dean0x]

Progress Update: v0.4.0 Fix Batch

PR #161 (fix!: v0.4.0 bug batch — fences, whitespace, type safety, @extends FM) was squash-merged to main at commit 3ce9f1d on 2026-07-09.

Closed: #149, #150, #151, #152, #153, #154 — all marked COMPLETED.

Status: Fix batch is on main under [Unreleased] at version 0.3.0 with no version bump yet. v0.4.0 bump is a deliberate, separate post-merge step gated on full milestone closure.

Deferred follow-ups remain open: #162 (YAML parse DoS), #163 (SHA-pin Actions), #164 (parity gaps).