Repository navigation
v0.1.0
Immutable
release. Only release title and notes can be modified.
0.1.0 (2026-10-05)
⚠ BREAKING CHANGES
- krm_foyer_upstream_watches_open has an identity label (user or shared); a query on the bare name now sums both.
Features
- a working demo: task demo, the hello example and the browser helper (#17) (8891215)
- bound requests and responses, end open watches with their session, and serve metrics (#22) (2a6f43c)
- build streams on krm-stream 0.5.0, which maps the API server's answers and leaves retries to the browser (#25) (cdf1e23)
- build streams on krm-stream 0.6.0, which refuses redirects and stops reopening early-ending watches (#26) (c746c0c)
- install krm-foyer with a Helm chart, which the e2e suite now installs through (#30) (9571a03)
- interruption pages for browser navigations (#12) (243da5c)
- live notes with krm-stream: user-authenticated streams, closed with their session (#23) (5bf5dfb)
- OIDC login with PKCE, state and nonce, and /k8s behind sessions (#11) (a514dc8)
- proxy /k8s with the user's token, path checking and upstream response rules (#9) (3355231)
- server-side sessions with CSRF and same-origin checks (#10) (047f10c)
- share one watch per scope among every user's streams, with the API server asked about each user (#28) (4b95da1)
- upgrade krm-stream, enforce shared rate limits, and reconcile docs (#31) (50e79c6)
Bug Fixes
- keep issuer error text out of the logs, compare e2e bodies, and keep sessions free of HTTP (#16) (da7efd8)
- resend only krm-foyer's own CSRF refusals, log ID tokens by cause, and encrypt every hop of the demo (#21) (d7bd208)
- stop promptly with streams open, let concurrent logins finish, and harden the chart (#34) (15b3268)