Krillswitch SDK v0.0.1

What's Changed

• feat: prepare SDK packages for npm by @jesse-merhi in #62
• feat(release): publish SDKs through npm OIDC by @vincentkoc in #80

Full Changelog: v0.5.0...sdk-v0.0.1

Krillswitch v0.5.0

What's Changed

• fix(admin): touch taps no longer leave grey hover bands on table cards by @vincentkoc in #58
• feat(react): add SSR flag bootstrap by @jesse-merhi in #43
• chore(release): prepare v0.5.0 by @vincentkoc in #61

New Contributors

• @jesse-merhi made their first contribution in #43

Full Changelog: v0.4.0...v0.5.0

Krillswitch v0.4.0

What's Changed

• fix(admin): mobile webview navigation and layout by @vincentkoc in #52
• feat(api): OpenFeature Remote Evaluation Protocol (OFREP) endpoints by @vincentkoc in #53
• feat: targeting rule operators (negation, string, numeric, semver, date) by @vincentkoc in #54
• feat: real-time flag updates — SSE change stream + SDK refetch-on-ping by @vincentkoc in #55
• feat: flag lifecycle debt tools — permanent marking, stale surfacing, CLI code references by @vincentkoc in #56
• chore(release): prepare v0.4.0 by @vincentkoc in #57

Full Changelog: v0.3.0...v0.4.0

Krillswitch v0.3.0

What's Changed

• refactor: adopt carapace v0.4.0 chart primitives and command palette by @vincentkoc in #48
• fix: light-mode polish, Access sign-out, member roles, carapace.design palette by @vincentkoc in #49
• fix: clean light-mode hero and flat scroll-edge tables by @vincentkoc in #50
• chore(release): krillswitch v0.3.0 by @vincentkoc in #51

Full Changelog: v0.2.0...v0.3.0

Krillswitch v0.2.0

KrillSwitch grows from a CRUD console into a LaunchDarkly-grade flag operations surface, restyled end to end on the Carapace design system.

Added

• Production guardrail — saves and toggles in production require a confirm dialog with an audit comment; change-log entries carry optional operator comments end to end.
• Segments — reusable project-scoped audiences (pinned context keys plus attribute rules) referenced from any flag's targeting rules, with typed segment evaluation reasons.
• Flag archive lifecycle — archived flags leave the admin list but keep serving evaluations, with restore and full audit coverage.
• Usage analytics — per-environment eval counters and daily request series power SDK-freshness badges, a home usage chart, and per-project and per-flag sparklines.
• Webhooks — admin-managed URLs receive every change-log entry as JSON through a cursor-driven outbox drained after each mutation.
• Console features — a ⌘K command palette over pages, projects, and flags; a Connect page with copyable curl/JavaScript eval snippets and a live first-request status; scoped log-stream viewers on project and flag pages; a tabbed Settings page.

Changed

• The admin console consumes @openclaw/carapace as a dependency — tokens, themes, and components — with a collapsible navigation rail, the krillswitch brand mark, environment and variation color identity, inline flag toggles, copy-first keys, and a LaunchDarkly-density visual pass across every page.

All D1 migrations in this release (0007–0012) are additive.

Full Changelog: v0.1.2...v0.2.0

Krillswitch v0.1.2

Krillswitch 0.1.2 hardens production authentication around Cloudflare Access and ships React Router's RSC action CSRF fix.

Fixed

• Update reusable Cloudflare Access policies through their account-level API so repeat admin deployments remain idempotent.

Security

• Accept verified Cloudflare Access JWTs as production dashboard identities, avoiding a redundant GitHub OAuth login after the Access gate.
• Default the admin Cloudflare Access policy to the OpenClaw GitHub organization instead of the openclaw.ai email domain.
• Update React Router to 8.3.0 to resolve GHSA-qwww-vcr4-c8h2, an RSC action CSRF bypass advisory.

Changed

• Refresh eligible workspace dependencies and pinned official GitHub Actions revisions while preserving the deliberate Sharp override.
• Stabilize process-heavy CLI integration tests under loaded runners without weakening their build-and-execute assertions.

Distribution

Krillswitch is released as a GitHub application repository. Its workspace packages remain private; no npm package is published.

Full details: CHANGELOG.md

CI proof: release PR #41 and dependency PR #40

Krillswitch v0.1.1

Krillswitch 0.1.1 strengthens the audit trail, fixes CLI request behavior, completes the public documentation surface, and hardens the newly public MIT-licensed repository.

Fixed

• Record access-token mint and revoke operations atomically without storing plaintext tokens.
• Honor CLI change-log limits and normalize configured API origins before appending request paths.
• Publish dashboard and evaluation Workers through Cloudflare Custom Domains.

Changed

• Update workspace and GitHub Actions dependencies, including TypeScript 7, React Router 8, and Node.js 22.22.
• Add the full Markdown documentation site at krillswitch.com, including operator guides, SDK references, search, and production runbooks.
• Publish the repository under the MIT license with contribution workflows and GitHub-native security reporting.

Security

• Resolve known transitive-tooling advisories.
• Enable CodeQL, secret scanning, push protection, and private vulnerability reporting.

Distribution

Krillswitch is released as a GitHub application repository. Its workspace packages remain private; no npm package is published.

Full details: CHANGELOG.md

CI proof: release PR #23

Krillswitch v0.1.0

First release

Krillswitch v0.1.0 is the first GitHub release of OpenClaw's self-hosted feature flag service for Cloudflare Workers.

Highlights

• Cloudflare Worker and D1-backed flag evaluation with in-isolate caching, ETags, and Server-Timing telemetry.
• Admin dashboard for projects, environments, flags, targeting, rollouts, access tokens, role grants, and audit history.
• Typed core evaluator and React SDK, plus a CLI for flag and project operations.
• pnpm-based local development, CI, and deployment tooling.

Security and operations

• D1-enforced final-admin protection with audited role changes.
• Exact Cloudflare Access application matching that rejects ambiguous and path-scoped targets.
• GitHub CI, CodeQL, Dependabot, stale management, and code ownership.

Distribution

This is a GitHub application release. Workspace packages remain private and are not published to npm.

See CHANGELOG.md for the complete release notes.