v0.1.0

First tagged release of CheckDeployManager, a multi-tenant configuration service for the Check by CyberDrain browser extension, hosted entirely on Cloudflare Workers.

Highlights

• Rules host: mirrors upstream CyberDrain detection rules daily, layers per-tenant deltas (exclusions, trusted patterns, custom indicators, suppressions), validates every merge, and serves immutable published rulesets at unguessable per-tenant URLs.
• Policy generator: renders ready-to-deploy artifacts per tenant: Chrome and Edge managed storage JSON, Firefox policies.json (fragment and full), .reg files for GPO, the Intune setup script variable block, and CIPP deployment field values.
• Operations dashboard: draft and publish with validation gates, one-click rollback, GUID rotation and revocation with hit counters, tenant branding with logo hosting, webhook inbox for false positive reports, upstream diff history, and an indefinite audit log.
• Deploy to Cloudflare button provisioning D1 and R2 automatically, comfortably inside the free tier at a few thousand endpoints.
• Types are generated from the Worker configuration (wrangler types), with CI enforcing freshness, typecheck, tests, and repository hygiene rules.

See the README for screenshots and the post-deploy runbook, and docs/architecture.md for the full design and threat model.