| feat: wake the requester when a reviewer submits feedback | Dami | | +252 | -44 | |
| fix(cli): keep numeric-looking site addresses as strings | Dami | | +64 | -46 | |
| feat: collect visitor feedback on protected sites | Dami | | +1738 | -95 | |
| fix: write vault policy triggers without inner END so remote D1 migrations apply | Dami | | +56 | -46 | |
| release: v0.11.0 | Dami | | +4 | -4 | |
| Merge pull request #4 from FelineStateMachine/feat/stateless-mcp-stdio | FelineStateMachine | | +3095 | -102 | |
| feat: add stateless MCP tools and purpose-driven vault policies | Slate (OpenClaw) | | +3095 | -102 | |
| fix: prevent duplicate nightly security emails | Dami | | +107 | -17 | |
| feat: make HTML revisions source-stable | Dami | | +283 | -81 | |
| feat: make lofi apps first-class nzip hosts (#3) | FelineStateMachine | | +1761 | -230 | |
| fix: modernize artifact origin isolation | Dami | | +25 | -5 | |
| release: v0.8.0 | Dami | | +4 | -4 | |
| docs: clarify isolated-origin boundaries | Dami | | +42 | -38 | |
| fix: prevent cross-site edge cache reuse | Dami | | +26 | -7 | |
| docs: document isolated site origins | Dami | | +307 | -136 | |
| feat: isolate sites on subdomains | Dami | | +512 | -195 | |
| chore: ignore browser test artifacts | Dami | | +1 | -0 | |
| docs: disclose shared artifact origin boundary | Dami | | +10 | -0 | |
| fix: keep canonical redirects on public HTTPS | Dami | | +50 | -7 | |
| fix: preserve site policy on repush | Dami | | +114 | -13 | |
| release: v0.7.1 | Dami | | +12 | -5 | |
| release: v0.7.0 | Dami | | +4 | -4 | |
| fix: preserve locked page target after unlock | Dami | | +150 | -18 | |
| merge: add nzip version reporting | Dami | | +65 | -8 | |
| feat: report the installed CLI version | Dami | | +65 | -8 | |
| docs: clarify contracts and JSR skill setup | Dami | | +94 | -49 | |
| docs: compact Mermaid diagrams | Dami | | +47 | -48 | |
| docs: restore Mermaid architecture flows | Dami | | +75 | -26 | |
| docs: split project guides and refresh examples | Dami | | +423 | -432 | |
| release: v0.6.0 | Dami | | +498 | -1483 | |
| feat: hide notification device tombstones by default | Dami | | +46 | -10 | |
| docs: organize CLI commands and notifications | Dami | | +118 | -96 | |
| feat: alias list to ls | Dami | | +2 | -0 | |
| release: v0.5.0 | Dami | | +4 | -4 | |
| docs: document notifications and stabilize mobile surfaces | Dami | | +88 | -2 | |
| feat: add owner web push notifications | Dami | | +3903 | -24 | |
| nit: rename to just /skills | Dami | | +0 | -0 | |
| docs: name auth env vars and relax artifact directory naming in nzip skill | Dami | | +22 | -20 | |
| fix: refuse raw address targets when allowVaults is set | Dami | | +89 | -17 | |
| release: v0.4.0 | Dami | | +4 | -4 | |
| fix: harden vault updates per review | Dami | | +124 | -47 | |
| docs: add agent skill for nzip | Dami | | +126 | -0 | |
| feat: add vault descriptions and unified vault updates | Dami | | +231 | -37 | |
| docs: complete shared JSR documentation | Dami | | +142 | -20 | |
| ci: publish GitHub release notes | Dami | | +13 | -1 | |
| docs: rename architecture section | Dami | | +1 | -1 | |
| fix: stabilize secret binding generation | Dami | | +9 | -7 | |
| fix: make Worker type checks portable | Dami | | +7 | -14702 | |
| docs: collapse security and observability diagrams | Dami | | +10 | -0 | |
| feat: harden free-tier security for v0.3.0 | Dami | | +18516 | -835 | |
| docs: split architecture into focused views | Dami | | +42 | -9 | |
| docs: explain security observability architecture | Dami | | +137 | -52 | |
| feat: add enumeration email alerts | Dami | | +855 | -162 | |
| feat: add security telemetry and edge caching | Dami | | +336 | -21 | |
| feat: refine source copy and password security | Dami | | +131 | -76 | |
| feat: serve the nzip wordmark favicon | Dami | | +45 | -1 | |
| fix: canonicalize directory index URLs | Dami | | +121 | -0 | |
| release: v0.2.0 atomic publish policy | Dami | | +145 | -63 | |
| release: v0.1.2 | Dami | | +2 | -2 | |
| fix: prevent caching protected site content | Dami | | +9 | -4 | |
| Add hosted source recovery | Dami | | +282 | -10 | |
| Add nzip landing wordmark | Dami | | +4 | -4 | |
| doc: move repo link on landing | Dami | | +2 | -2 | |
| doc: fix README rendering on args.io, add args link, tidy description | Dami | | +6 | -16 | |
| feat: rate-limit address enumeration and password unlock | Dami | | +33 | -0 | |
| ci: publish workspace to JSR on v#.#.# tags (OIDC + provenance) | Dami | | +23 | -0 | |
| doc: raise JSR score and tidy prose for 0.1.1 | Dami | | +190 | -37 | |
| doc: lead install with jsr:@nzip/cli and add second-machine flow | Dami | | +21 | -9 | |
| nzip v0.1 — self-hosted HTML share tool | Dami | | +5616 | -0 | |