# Changelog

All notable changes to `klieo-ops-api` are documented here.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [Unreleased]

## [1.1.0] — 2026-06-05

### Added

- `OpsRouterBuilder::with_dev_auth()` capability default per ADR-036 —
  swaps in a permissive `DemoAuthenticator` so adopters can mount the
  ops router locally without configuring an OIDC provider. Gated on
  the `dev-auth` Cargo feature (default off) so the permissive
  authenticator cannot land in a production build by accident
  (CWE-1188 — insecure default). Release builds without the feature
  fail compilation if `with_dev_auth` is referenced.

### Notes

- Coordinated with `klieo-a2a` 1.1.0 and `klieo-auth-oauth` 1.1.0 as
  the ADR-036 PR 2 ops/auth capability-default cluster.

## [1.0.0] — 2026-06-04

### Notes

- Stability promotion to 1.0 as part of the klieo workspace 1.0.0 cut.
  See umbrella `klieo` CHANGELOG and ADR-036 for cross-crate context.

[Unreleased]: https://github.com/mohrimic/klieo/compare/klieo-ops-api-v1.1.0...HEAD
[1.1.0]: https://github.com/mohrimic/klieo/releases/tag/klieo-ops-api-v1.1.0
[1.0.0]: https://github.com/mohrimic/klieo/releases/tag/klieo-ops-api-v1.0.0
