One export, and a README that stops explaining itself.
subscriptionKey and KEY_PREFIX are part of the API. A host that wants the row
for one endpoint had to list the namespace and compare .endpoint on every row it
holds. Listing cannot answer that question: KV's list is eventually consistent, so a
device that enrolled a second ago comes back as not enrolled, and a page acting on
that tells somebody their enrollment failed while the row sits in KV. The key
derivation is now exported, so the lookup is a point read. It was never free to change
anyway, since an altered hash orphans every existing row, so exporting it costs nothing
that was not already owed. Without it, hosts copy the six lines and diverge quietly.
The README says less. It had grown to explain itself to the reader: what each
section was about to do, what the API section would report, a mounted-Worker walkthrough
that duplicated the docs it linked to. Roughly half of it is gone. The install path, the
five topologies, and the API are still there, now shown with curl instead of described.
The site has a share card. Links to the page now unfurl with an image and the tags
that point at it, and site/og.source.html keeps the source the card was cut from, so
the next edit is not a redraw from scratch. The second button demonstrates the thing
instead of claiming it, and the prerequisites end with the device that proves them.
Upgrading is npm install kukuroo@0.1.3. Nothing re-enrolls, no key changes, and no
route behaves differently.