Changelog
Every shipped version of Filoo, latest first.
v0.3.3
2026-05-10latestStatus page, changelog, hero illustration, token-bucket rate limit, and Solo demoted from the agent-first homepage.
- New /status page with live component checks (D1, KV, Resend, Stripe).
- New /changelog page (this page).
- Homepage pricing teaser focused on Free / Pro / Agents only. Solo stays on /pricing for indie / non-API use cases.
- Hero SVG illustration on home: agent → API → tracking flow.
- Token-bucket rate limit replaces fixed-window for API and redirects (smoother bursts, no minute-boundary spikes).
- Inactive links sorted by recent scan count (30d) so reactivation prioritizes high-traffic links.
- #26 (marketing tagline) closed: "Programmable links for AI agents." is the official tagline.
v0.3.2
2026-05-10New marketing copy on /, /pricing, /api + annual billing toggle for Pro and Agents.
- Agent-first homepage rewrite: H1 "Programmable links for AI agents", hero code tabs (curl/TS/Python), 3 SVG icons (eye/gear/loop), pain → powers → use cases narrative.
- /pricing: monthly/yearly toggle, 4 tier cards (Agents highlighted), comparison vs Bitly/Rebrandly/Linktree.
- /api: MCP coming-soon banner, per-endpoint code tabs in 3 languages, webhook HMAC verification example.
- Annual Stripe prices: Pro €90/year, Agents €290/year (2 months free vs monthly).
- Customer Portal allows plan changes between Solo/Pro/Agents with always_invoice proration.
v0.3.1
2026-05-10Downgrade lock revenue fix, E2E test suite, downgrade banner, and observability.
- enforceTierDowngrade(): on Pro→Solo, Agents→Pro etc, oldest links up to new limit stay active; newer excess deactivates (FIFO). Closes the revenue leak where downgraded users kept all their links.
- Email notification on downgrade (FR + EN).
- CSRF middleware now bypasses /admin/api/* with X-Admin-Token (server-to-server channel).
- Fixed legacy bug: getPremiumLink filtered on type='premium' only — Pro/Agents links were 404'ing in production.
- 8 new admin endpoints (gated by X-Admin-Token).
- 20-check end-to-end test suite against production with synthesized Stripe webhooks.
- Boost Pack button on /dashboard when active links > 70% of effective limit.
- DowngradeBanner threaded into DashboardShell.
- Custom domain auto-poll (every 30s for 10min) with activation email.
- Sentry observability via @sentry/cloudflare with sendDefaultPii: false.
v0.3.0
2026-05-10Pro/Agents tiers, multi-username, custom domains, REST API, TypeScript + Python SDKs.
- New tier model: Free / Solo €24/year / Pro €9/month / Agents €29/month.
- Multi-username (1 for Solo, 5 for Pro, unlimited for Agents) via dedicated usernames table.
- Custom domains via Cloudflare for SaaS Custom Hostnames API.
- Public REST API: links CRUD + stats + usage + usernames.
- HMAC-keyed API keys (database compromise alone cannot forge keys).
- Per-tier rate limits: Pro 100 req/min, Agents 1000 req/min.
- Boost Packs: +500 active links for €9 one-time, stackable.
- @filooapp/sdk (TypeScript) and filoo-sdk (Python) published.
- Marketing pages: agent-first home (EN), /business artisan (FR+EN), /pricing, /api docs.
- OpenAPI 3.0 JSON specification at /api/openapi.json.
- Logo: plain Inter wordmark "filoo" in default text color.
v0.2.0
2026-05-10Three-tier pricing, EN+FR i18n, anonymous paste flow, security hardening, FAQ SEO.
- 3 tiers: Free / Solo €12/year / Pro €9/month (later restructured in v0.3.0).
- Internationalization: EN default, FR auto-detection via Accept-Language.
- Anonymous paste-and-create on homepage with 24h expiration.
- Source tracking via ?src= query parameter.
- CSRF protection (double-submit cookie), Stripe webhook idempotency, security headers (HSTS, CSP, X-Frame-Options).
- Trailing slash 308 redirect, redirect rate limiting, KV cache invalidation on plan change.
- GDPR considerations: email change flow, account deletion, IP hashing.
- Mobile responsive tested across 5 viewports.
v0.1.0
2026-05-10Initial production release. Single Premium tier at €12/year, magic-link auth, redirects, QR codes.
- Cloudflare Workers + Hono + D1 + KV + R2 stack.
- Magic-link authentication via Resend.
- Free links at /f/:id with 7-day expiration.
- Premium links at /:user/:slug, custom slugs, edit destination.
- Linktree-style profile pages at /:user.
- Stripe Checkout + customer portal + webhooks (test mode).
- Google Safe Browsing moderation on link creation + hourly cron recheck.
- In-Worker QR code generation (SVG, byte mode, error correction H).