Continuous growth.
Transparent progress.

Zelyra's shared pure standard library now provides parsedate(String) -> Result<Date, String> and parsetime(String) -> Result<Time, String>. They accept only canonical YYYY-MM-DD and HH:MM:SS values, validate the Gregorian calendar and 24-hour clock, and return ordinary Err values for invalid input. They do not guess locale formats, timezone offsets, or fractional seconds. The reusable csvimport business package adds explicit Date and Time mapping variants. Converted cells remain tagged values, and invalid input identifies the CSV row and target column. Conversion is opt-in; it does not infer a database schema or write records. The CSV package remains bounded to 16 MiB and processes input in memory. Database apply, a preview UI, and timezone-aware timestamp conversion remain outside this release. Verification - Runtime unit test covers valid leap dates, invalid dates, canonical times, out...

The standard library now provides parsedecimal(text) -> Result<Decimal, String>. It parses exact base-10 values with up to nine fractional digits directly into Zelyra's Decimal representation. It does not use Float; whitespace, a leading plus, exponent notation, and overflow are rejected through Err. The reusable csvimport package adds an explicit Decimal mapping and tagged CsvValue::Decimal. Conversion is selected by the caller, reports invalid row and target column, and does not infer types from database schemas or write to a database. Date/time conversion, database preview/apply, transactional imports, ODBC, PDF output, and Excel-compatible export remain open module work. Install Download the Linux .tar.gz or Windows .zip below and verify its adjacent .sha256 file. Extract the archive and place zelyra (or zelyra.exe) in a directory on PATH. The archive includes the standalone CLI and...

Stable release. Changes - The reusable CSV importer example supports explicitly selected text, integer, and Boolean conversions. It returns tagged CsvValue cells and identifies invalid values by CSV row and target column. - MIR now normalizes qualified enum variants during lowering. Imported package enums have matching behavior across AST, MIR, and Bytecode. - CSV conversion remains explicit: it does not infer types from database schemas and does not write to the database. Decimal, date, and time conversions remain unsupported. Verification - cargo fmt --all -- --check - cargo test --workspace --locked passed; database integration tests requiring a disposable configured database were reported as ignored. - cargo clippy -p zelyra-mir -p zelyra-cli --all-targets --locked -- -D warnings passed. - GitHub CI passed, including the 19m56s workspace/E2E test job, MariaDB 10.11/11.4/11.8/12.3, My...

Align source-level --max-steps accounting across the supported AST, MIR, and bytecode paths, and add a bounded differential test for a SQL audit insert plus one queued PDF email. AST remains the default; this is not a claim of general backend parity. See English release notes. Linux and Windows archives include SHA-256 sidecars and SPDX SBOMs. Install on Linux/macOS: ./install.sh --release v1.2.33. Install on Windows: .\install.ps1 -Release v1.2.33. Release assets and SHA-256 files are attached below.

Stable release focused on computed business fields and secure file attachments in generated CRUD. Highlights - Computed columns: compute(expr) is compiler-checked for field types, dependencies, cycles, and unsupported effects. Generated CRUD and validated API POST/PUT/PATCH recompute values on the server. Client-submitted computed values are ignored. Partial API updates merge omitted fields from the existing row under the verified tenant scope before validation. - FileRef attachments: CRUD schemas can attach bounded MIME/size policies to FileRef columns. Generated forms support upload, edit retention and replacement; files use private integrity-checked storage, rollback cleanup, and permission- and tenant-checked downloads. Raw FileRef values are not rendered. - Localized master-detail labels: Child collection legends resolve locale tokens after HTML escaping; tutorial catalog keys are c...

— Tenant-aware business number series Zelyra 1.2.31 adds declarative, transaction-protected number series for generated CRUD fields. Examples: zelyra customernumber: String(32) required autosequence("KD-{0001}") quotenumber: String(40) required autosequence("AG-{year}-{0001}") Generated values are computed on the server; submitted values are ignored and generated numbers are omitted from edit forms. Counters are scoped by resource and verified tenant, and {year} adds a UTC calendar-year scope. Apply the generated zelyranumbersequences schema before using these fields. Numbering is not gapless. MariaDB and PostgreSQL are supported; SQLite runtime allocation reports an unsupported-backend error. Existing automatic invoicenumber behavior remains compatible when no sequence is declared. The release also fixes MariaDB primary-key inspection for composite unique indexes, preventing false schem...

Add bounded secure multipart file uploads for checked forms, private tenant-scoped storage, permission-checked downloads, explicit orphan cleanup, and checksum-verified file-storage backup/restore. Storage creation is Unix-only; the file backup excludes the database, project configuration, and secrets. See English release notes. Linux and Windows archives include SHA-256 sidecars and SPDX SBOMs. Install on Linux/macOS: ./install.sh --release v1.2.29. Install on Windows: .\install.ps1 -Release v1.2.29. Release assets and SHA-256 files are attached below.

This release adds typed transactional CRUD actions and hardens the interactive language console. Highlights - CRUD actions can use compiler-checked row and trusted session values, pure guards evaluated under a row lock, explicit capabilities, and a shared request transaction for business SQL and audit writes. - MariaDB and PostgreSQL HTTP integration tests verify action writes, concurrent guards, and rollback. MariaDB also verifies enqueueing a real PDF attachment in the outbox; no SMTP delivery is started by that test. - The MariaDB/MySQL zelyra console --sandbox rejects DDL, transaction-control, and session-control statements that could bypass rollback. The tests also cover grant denial, rollback, and explicit commit. :schema now displays invariant messages and source positions. Limitations REPL SQL still requires the aggregate Database grant; a Database(read)-only grant is insufficien...

Add a read-only-first Laravel website importer foundation: explicit selection, source-evidenced analysis, checked schema and pure model/service candidates, and reusable native authentication modules. Laravel route handlers, controller workflows, Blade behavior, active tenant selection, and complete deployment migration are not included. See English release notes. Linux and Windows archives include SHA-256 sidecars and SPDX SBOMs. Install on Linux/macOS: ./install.sh --release v1.2.27. Install on Windows: .\install.ps1 -Release v1.2.27. Release assets and SHA-256 files are attached below.

Interactive AST language console with persistent typed bindings, tab completion, and MariaDB/MySQL transaction sandbox with rollback by default.

Add zelyra db console for MariaDB/MySQL and PostgreSQL clients and zelyra db query with read-only transactions by default, explicit transactional DML, bound parameters, and table/JSON/CSV output. See English release notes. Linux and Windows archives include SHA-256 sidecars and SPDX SBOMs. Install on Linux/macOS: ./install.sh --release v1.2.25. Install on Windows: .\install.ps1 -Release v1.2.25. Release assets and SHA-256 files are attached below.

Support for multiple transactional CRUD child collections per resource with atomic persistence, row limits, and aggregates.

Tenant-scoped APIs with binding validation of tenant context from verified user sessions.

Generated transactional master-detail CRUD forms with atomic persistence of parent and item rows and aggregates.

Typed table invariants for forms, generated CRUD and explicitly bound unscoped APIs; row-conditioned CRUD edit/delete policies checked against stored records and under mutation locks. Scoped API validation and raw SQL writes remain outside these invariant checks. See English release notes. Linux and Windows archives include SHA-256 sidecars and SPDX SBOMs. Install on Linux/macOS: ./install.sh --release v1.2.21. Install on Windows: .\install.ps1 -Release v1.2.21. Release assets and SHA-256 files are attached below.

— Database schema and tenant relations Optional table relations such as customer: Customer? are planned as nullable foreign-key columns (customerid). Relations between tenant-scoped tables use composite foreign keys containing both the tenant ID and record ID. MariaDB therefore rejects cross-tenant links even when data is written directly through SQL. The planner adds a required unique target key when needed and rejects incompatible nominal tenant ID types. Decimal defaults now use the declared scale, for example Decimal(12, 2) default 0 becomes DEFAULT 0.00. Compatibility note: The proposed r#/@column(...) syntax was not added: these field names are already accepted in field context, and storagename already supports SQL column mapping. Decimal(precision, scale) was already supported. The existing Money type remains DECIMAL(19, 4) to avoid unnecessarily reducing its range or precision. R...

Generated business pages - Extend generated CRUD create and edit pages with page-specific titles, submit labels, and content before or after the generated form. - Add typed supplemental field content and TableView content regions and per-row actions. - Keep routing, validation, authorization, CSRF protection, field allowlists, and persistence in the generated CRUD flow. - Improve invoice tutorial item cards so field labels and values read as one aligned card. The compiler-checked example is examples/generatedpagecustomization/main.zyl. Read the English release notes or German release notes. Install - Linux: ./install.sh --release v1.2.15 - Windows PowerShell: .\install.ps1 -Release v1.2.15 The attached Linux and Windows binaries and archives include SHA-256 sidecars. SPDX SBOMs are also attached.

Stable release introducing an opt-in, validated project layout. Highlights - zelyra new --layout standard creates a minimal application with routes/, domain/, schema/, public/, and assets/ roots. - check, run, and serve validate required roots and reject missing directories, symlinks, and paths escaping the project with E-LAYOUT-001/E-LAYOUT-002. - Existing import "domain::sales::actions" as sales syntax resolves schema, domain, and route namespaces only for opted-in standard-layout projects. Legacy projects and package imports keep their existing behavior. This release delivers the secure layout foundation. Full architecture rules, zelyra migrate-layout --check, database templates, and a plugins/ loader are not included. strictarchitecture = true is rejected as unsupported instead of silently claiming a check. See the English and German release notes. Install - Linux x8664: ./install.sh...

Stable release focused on secure application module settings and a smoother Studio and invoice tutorial workflow. Highlights - Authenticated /zelyra/module-settings page for configured packages, with permission and same-origin CSRF checks, schema validation, revision protection, safe atomic persistence, and secret redaction. Changed settings take effect after restart. - Simpler accessible Zelyra UI Dialog defaults: stable automatic IDs, localized close labels, native modal behavior, keyboard support, and focus handling. - Responsive invoice CRUD styling in custom application shells and direct Studio access to zelyra.theme.css, including guidance for projects without the file. - Stable browser coverage for compiler diagnostics on unsaved source and end-to-end tests for application settings and the invoice tutorial. The settings page requires an auth configuration with adminpermission and...