v0.3.5

Changed

• Override undici to 7.30.1 so the dependency scan no longer reports the
  advisories published against 7.29.1.
• Upgrade react-hook-form to 7.91.0.

v0.3.4

Added

• Collapsible sidebar groups driven by the shared Basalt sidebar template.

Changed

• Standardize every page shell: pages no longer add their own padding, centering
  or max width, use PageHeader and SectionRule for their titles and regions,
  and separate sections with the 24px layout gap.
• Adopt the Basalt sidebar header, rail and footer geometry, and render the
  account row with SidebarUser.
• Use LayerCard.Empty for the diagrams and Connect empty states.
• Upgrade @nocoo/basalt to 3.2.1, Wrangler to 4.152.0 with Workers types
  5.20261023.1, @types/node to 26.6.5, jsdom to 30.1.3,
  @testing-library/jest-dom to 7.0.1, chalk to 6.0.1,
  @hookform/resolvers to 6.0.0 and React Router to 8.5.0.
• Run the native TypeScript 7 compiler for typecheck and build, keeping the
  TypeScript 6 API available to typescript-eslint through
  @typescript/typescript6 until it supports TypeScript 7.

v0.3.1

[0.3.1] - 2026-10-13

Added

• Hexly project link and accessible header tooltips.
• Existing automated release helper and root release command.

Changed

• Remove the retired Next.js web workspace, obsolete Railway Docker build,
  browser OAuth CLI login and their exclusive dependencies and configuration.
• Preserve Host API-key initialization and current Worker/Access/Connect authentication.
• Bound full-suite Vitest concurrency to two workers without changing checks.
• Update Basalt to 2.2.0, Vitest to 5.0.3, ESLint to 10.11.0 and
  typescript-eslint to 8.71.0 from commits since v0.3.0.
• Normalize the agent handbook, retrospective and dependency verification notes.
• Synchronize the root-derived web, Worker and CLI version at v0.3.1.

Fixed

• Patch dependency security advisories, including sharp 0.35.5 and source-map-js 1.2.2.
• Replace native selects with Basalt and add accessible header icon labels.
• Disable default Worker and preview URLs.
• Seed the current and next minute in the isolated HTTP rate-limit fixture,
  retaining the exact 429 and Retry-After checks across minute boundaries.

v0.3.0

Added

• Architecture diagram workspace with interactive canvas, nodes, edges, boundaries, layout, and export (/diagrams)
• Scoped diagram connection management (/connect) with cryptographic token issuance, validation, and revocation
• Signed-in user profile display in sidebar footer with Cloudflare Access JWT resolution
• Dedicated database migrations for architecture diagrams (0005) and Connect access tokens (0006)
• Automated integration test suites for diagrams (run-diagram-e2e.ts) and Connect (run-connect-e2e.ts)

Changed

• Coordinated local development domain routing through Caddy

v0.2.0

Changed

• Synchronize all workspace package versions with the root release version.
• Display the sidebar version badge in a monospace font.
• Use pinned shared CI and production deployment workflows with deployment provenance checks.

Fixed

• Render mobile navigation and the saved sidebar preference correctly on the first render.
• Keep theme initialization and sidebar controls usable when browser storage is unavailable.
• Move keyboard focus to main content when activating the skip link.

Validation and deployment

• Release commit and remote main: 2142decb879367ed84f9ecc0feeb371800706b6e. Annotated tag v0.2.0 resolves to the same commit; the four preceding Basalt commits are preserved.
• Local checks passed: 957 root tests, 268 web tests, strict typechecks/lint and coverage gates, 59 isolated HTTP E2E cases, OSV and Gitleaks scans, production build, and Worker deployment dry run. Mandatory Git hooks ran for the release commit and both pushes.
• CI and production deployment succeeded for the release commit.
• Cloudflare Worker version: 8b29959a-8b44-4d17-85df-20f260f8a775. Production: https://steed.hexly.ai.
• Real HTTP smoke: /api/live and /api/v1/health returned HTTP 200 with version: "0.2.0"; /api/live retained Cache-Control: no-store. Anonymous page/dashboard API requests redirected to Access (302), and the protected Worker API returned 401.
• Authenticated Chrome captured Overview, Hosts, Agents, Data Sources, and Map from production. All five captured pages showed v0.2.0, the monospace sidebar badge, and a focusable main-content target. Overview inventory and Map topology were visually inspected from the saved page snapshots.
• The required five-minute CI recheck completed at 2026-09-12T06:33:57.063Z. Both CI and production deployment remained successful for the same release commit.

v0.1.1

Add Cache-Control: no-store header to /api/live

v0.1.0

Changelog

[0.1.0] - 2026-09-11

First tagged release. Root package.json is the version source of truth (0.1.0).

Added

• Inventory dashboard for hosts, agents, data sources, lanes, and bindings
• Relationship map filtered by host, lane, or unbound resources
• Host CLI and foreground Host Service with periodic heartbeat snapshots
• Vite SPA on Cloudflare Workers with Access at the edge and D1-backed Worker API
• GET /api/live and GET /api/v1/health report the root package version

Changed

• Consume published @nocoo/basalt@2.1.7 for apps/web chrome and product pages
• Read app, CLI, and legacy version strings from the root manifest instead of local copies

Fixed

• Keep navigation focus and scrolling stable after the Basalt shell migration
• Restore map node surface contrast and keep host connection handles visible
• Correct accessible labels on remove actions
• Restore full-width skeleton blocks