Madraka · Oct 20, 2026 · Oct 20, 2026
diff --git a/.changeset/short-deploy-token.md b/.changeset/short-deploy-token.md
diff --git a/packages/agent-runtime/CHANGELOG.md b/packages/agent-runtime/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @cloudhal/agent-runtime
 
+## 0.3.3
+
+### Patch Changes
+
+- @cloudhal/core-contracts@0.3.3
+  - @cloudhal/storage@0.3.3
+
 ## 0.3.2
 
 ### Patch Changes

diff --git a/packages/agent-runtime/package.json b/packages/agent-runtime/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudhal/agent-runtime",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Cloudhal agent runtime: policy engine (actors, scopes, approvals), skill loader, audit log",
   "license": "Apache-2.0",
   "homepage": "https://cloudhal.dev",

diff --git a/packages/analytics/CHANGELOG.md b/packages/analytics/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @cloudhal/analytics
 
+## 0.3.3
+
+### Patch Changes
+
+- @cloudhal/core-contracts@0.3.3
+  - @cloudhal/storage@0.3.3
+
 ## 0.3.2
 
 ### Patch Changes

diff --git a/packages/analytics/package.json b/packages/analytics/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudhal/analytics",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Cloudhal site analytics (RFC-0006): query model, classifiers, beacon handler, SQLite/D1 store, daily rollups and Workers Analytics Engine adapters. Worker-safe.",
   "license": "Apache-2.0",
   "homepage": "https://cloudhal.dev",

diff --git a/packages/api/CHANGELOG.md b/packages/api/CHANGELOG.md
@@ -1,5 +1,20 @@
 # @cloudhal/api
 
+## 0.3.3
+
+### Patch Changes
+
+- 54a524c: A `CLOUDHAL_DEPLOY_TOKEN` shorter than 32 characters no longer makes every `/api` request fail with 500. Only `/api/admin` is disabled (503 `deploy_token_invalid`): the error is logged once, `/api/health` reports `problems: ["deploy_token_invalid"]`, and sign-in and Studio keep working. The Workers Builds setup steps and the Deploy button guide now say not to edit `CLOUDHAL_DEPLOY_TOKEN`, because every build replaces it.
+- @cloudhal/agent-runtime@0.3.3
+  - @cloudhal/analytics@0.3.3
+  - @cloudhal/astro-renderer@0.3.3
+  - @cloudhal/comments@0.3.3
+  - @cloudhal/core-contracts@0.3.3
+  - @cloudhal/core-ts@0.3.3
+  - @cloudhal/mcp-server@0.3.3
+  - @cloudhal/schedules@0.3.3
+  - @cloudhal/storage@0.3.3
+
 ## 0.3.2
 
 ### Patch Changes

diff --git a/packages/api/package.json b/packages/api/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudhal/api",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Cloudhal HTTP API (Hono): sites, pages, entries, snapshots, auth — runs on Node and Cloudflare Workers",
   "license": "Apache-2.0",
   "homepage": "https://cloudhal.dev",

diff --git a/packages/astro-renderer/CHANGELOG.md b/packages/astro-renderer/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @cloudhal/astro-renderer
 
+## 0.3.3
+
+### Patch Changes
+
+- @cloudhal/analytics@0.3.3
+  - @cloudhal/comments@0.3.3
+  - @cloudhal/core-contracts@0.3.3
+  - @cloudhal/core-ts@0.3.3
+  - @cloudhal/storage@0.3.3
+
 ## 0.3.2
 
 ### Patch Changes

diff --git a/packages/astro-renderer/package.json b/packages/astro-renderer/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudhal/astro-renderer",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Render a Cloudhal Site Graph with Astro: data sources (live/snapshot), section components and the cloudhal() integration",
   "license": "Apache-2.0",
   "homepage": "https://cloudhal.dev",

diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md
@@ -1,5 +1,22 @@
 # @cloudhal/cli
 
+## 0.3.3
+
+### Patch Changes
+
+- 54a524c: A `CLOUDHAL_DEPLOY_TOKEN` shorter than 32 characters no longer makes every `/api` request fail with 500. Only `/api/admin` is disabled (503 `deploy_token_invalid`): the error is logged once, `/api/health` reports `problems: ["deploy_token_invalid"]`, and sign-in and Studio keep working. The Workers Builds setup steps and the Deploy button guide now say not to edit `CLOUDHAL_DEPLOY_TOKEN`, because every build replaces it.
+- Updated dependencies [54a524c]
+  - @cloudhal/api@0.3.3
+  - @cloudhal/cloudflare@0.3.3
+  - @cloudhal/agent-runtime@0.3.3
+  - @cloudhal/analytics@0.3.3
+  - @cloudhal/comments@0.3.3
+  - @cloudhal/core-contracts@0.3.3
+  - @cloudhal/core-ts@0.3.3
+  - @cloudhal/mcp-server@0.3.3
+  - @cloudhal/schedules@0.3.3
+  - @cloudhal/storage@0.3.3
+
 ## 0.3.2
 
 ### Patch Changes

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudhal/cli",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "cloudhal — create, run and build Cloudhal sites locally",
   "license": "Apache-2.0",
   "homepage": "https://cloudhal.dev",

diff --git a/packages/cloudflare/CHANGELOG.md b/packages/cloudflare/CHANGELOG.md
@@ -1,5 +1,19 @@
 # @cloudhal/cloudflare
 
+## 0.3.3
+
+### Patch Changes
+
+- Updated dependencies [54a524c]
+  - @cloudhal/api@0.3.3
+  - @cloudhal/agent-runtime@0.3.3
+  - @cloudhal/analytics@0.3.3
+  - @cloudhal/comments@0.3.3
+  - @cloudhal/core-ts@0.3.3
+  - @cloudhal/mcp-server@0.3.3
+  - @cloudhal/schedules@0.3.3
+  - @cloudhal/storage@0.3.3
+
 ## 0.3.2
 
 ### Patch Changes

diff --git a/packages/cloudflare/package.json b/packages/cloudflare/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudhal/cloudflare",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Cloudhal on Cloudflare: the admin Worker (API, auth, MCP, Studio) over D1 + R2",
   "license": "Apache-2.0",
   "homepage": "https://cloudhal.dev",

diff --git a/packages/comments/CHANGELOG.md b/packages/comments/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @cloudhal/comments
 
+## 0.3.3
+
+### Patch Changes
+
+- @cloudhal/core-contracts@0.3.3
+  - @cloudhal/core-ts@0.3.3
+  - @cloudhal/storage@0.3.3
+
 ## 0.3.2
 
 ### Patch Changes

diff --git a/packages/comments/package.json b/packages/comments/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudhal/comments",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Cloudhal reader comments (RFC-0007): settings and thread state, text normalising and content rules, linkify, first-party proof of work, the submission pipeline, purge planner, retention plan and the SQLite/D1 store. Worker-safe.",
   "license": "Apache-2.0",
   "homepage": "https://cloudhal.dev",

diff --git a/packages/core-contracts/CHANGELOG.md b/packages/core-contracts/CHANGELOG.md
@@ -1,5 +1,9 @@
 # @cloudhal/core-contracts
 
+## 0.3.3
+
+No changes in this release.
+
 ## 0.3.2
 
 No changes in this release.

diff --git a/packages/core-contracts/package.json b/packages/core-contracts/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudhal/core-contracts",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Cloudhal domain contracts: JSON Schema source of truth plus generated TypeScript types",
   "license": "Apache-2.0",
   "homepage": "https://cloudhal.dev",

diff --git a/packages/core-ts/CHANGELOG.md b/packages/core-ts/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @cloudhal/core-ts
 
+## 0.3.3
+
+### Patch Changes
+
+- @cloudhal/core-contracts@0.3.3
+  - @cloudhal/schedules@0.3.3
+  - @cloudhal/storage@0.3.3
+
 ## 0.3.2
 
 ### Patch Changes

diff --git a/packages/core-ts/package.json b/packages/core-ts/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudhal/core-ts",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Cloudhal Site Graph core (TypeScript): load/save nodes with optimistic locking, snapshots, diff, publish and rollback; taxonomies, terms, redirects and menus",
   "license": "Apache-2.0",
   "homepage": "https://cloudhal.dev",

diff --git a/packages/create-cloudhal/CHANGELOG.md b/packages/create-cloudhal/CHANGELOG.md
@@ -1,5 +1,12 @@
 # create-cloudhal
 
+## 0.3.3
+
+### Patch Changes
+
+- Updated dependencies [54a524c]
+  - @cloudhal/cli@0.3.3
+
 ## 0.3.2
 
 ### Patch Changes

diff --git a/packages/create-cloudhal/package.json b/packages/create-cloudhal/package.json
@@ -1,6 +1,6 @@
 {
   "name": "create-cloudhal",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Create a Cloudhal site: npm create cloudhal@latest",
   "license": "Apache-2.0",
   "homepage": "https://cloudhal.dev",

diff --git a/packages/mcp-server/CHANGELOG.md b/packages/mcp-server/CHANGELOG.md
@@ -1,5 +1,18 @@
 # @cloudhal/mcp-server
 
+## 0.3.3
+
+### Patch Changes
+
+- @cloudhal/agent-runtime@0.3.3
+  - @cloudhal/analytics@0.3.3
+  - @cloudhal/astro-renderer@0.3.3
+  - @cloudhal/comments@0.3.3
+  - @cloudhal/core-contracts@0.3.3
+  - @cloudhal/core-ts@0.3.3
+  - @cloudhal/schedules@0.3.3
+  - @cloudhal/storage@0.3.3
+
 ## 0.3.2
 
 ### Patch Changes

diff --git a/packages/mcp-server/package.json b/packages/mcp-server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudhal/mcp-server",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Cloudhal MCP server: semantic site tools (pages, articles, snapshots, preview, publish) governed by the policy engine",
   "license": "Apache-2.0",
   "homepage": "https://cloudhal.dev",

diff --git a/packages/schedules/CHANGELOG.md b/packages/schedules/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @cloudhal/schedules
 
+## 0.3.3
+
+### Patch Changes
+
+- @cloudhal/core-contracts@0.3.3
+  - @cloudhal/storage@0.3.3
+
 ## 0.3.2
 
 ### Patch Changes

diff --git a/packages/schedules/package.json b/packages/schedules/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudhal/schedules",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Cloudhal schedules (RFC-0008): the time model, the RRULE subset and its sentences, releases (pin, closure, rl1: hash, compose, conflicts, state machine), automation and run state, taint and budget accounting, the Scheduler and runDue, and the SQLite/D1 store. Worker-safe.",
   "license": "Apache-2.0",
   "homepage": "https://cloudhal.dev",

diff --git a/packages/storage/CHANGELOG.md b/packages/storage/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @cloudhal/storage
 
+## 0.3.3
+
+### Patch Changes
+
+- @cloudhal/core-contracts@0.3.3
+
 ## 0.3.2
 
 ### Patch Changes

diff --git a/packages/storage/package.json b/packages/storage/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudhal/storage",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Cloudhal storage interfaces (SQL driver, blob store) with Cloudflare D1/R2/Durable Object SQLite and local SQLite/filesystem adapters",
   "license": "Apache-2.0",
   "homepage": "https://cloudhal.dev",