# Changelog

All notable changes to this project will be documented in this file.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [1.0.7] - 2025-10-13

### Added
- CHANGELOG.md now included in npm package
- Comprehensive .gitignore for repository
- SECURITY.md with security policy and best practices

### Fixed
- Cleaned up temporary documentation files
- Improved package organization

## [1.0.6] - 2025-10-13

### Changed
- **BREAKING**: Removed hard-coded default URLs for better security
- `initializeHandshake()` now requires `keysUrl` parameter (no default)
- `applyPatchXHR()` now requires `proxyUrl` parameter (no default)
- `applyPatchFetch()` now requires `proxyUrl` parameter (no default)
- Updated `initialize()` to accept `allowedDomains` in options
- Enhanced TypeScript definitions with proper required/optional parameters
- Reduced default `allowedDomains` to empty array (user must specify)

### Added
- `allowedDomains` option in `initialize()` method
- Better error messages when required parameters are missing
- More detailed logging for proxy URL and allowed domains

## [1.0.5] - 2025-10-13

### Added
- Initial public release
- `initialize()` convenience method for easy setup
- Post-quantum encryption with ML-KEM
- AES-GCM-256 symmetric encryption
- Automatic fetch() and XMLHttpRequest patching
- TypeScript definitions
- WASM crypto module
- Comprehensive README with examples

### Fixed
- Response body "already read" error by using `response.clone()`
- WASM loading with `import.meta.url` for better bundler compatibility
- Bug fixes in handshake initialization

## [1.0.0] - 2025-10-13

### Added
- Initial development version
- Core QuantShield SDK functionality