CHANGELOG.md

Rama main · réplica de lectura del repositorio original.

# Changelog

All notable changes to Nabu will be documented in this file.

## Unreleased

## [0.7.4] - 2026-09-27

### Added

- Granted write owner-agent credentials (Settings → Agents connection links
  with read and write) full shared-space management parity with the owner
  across MCP and HTTP: propose, confirm, list, get, invite, revoke, extend,
  and read-link management. Spaces stay owned by the owner, so the owner
  session keeps full visibility and control. Read-only owner-agent
  credentials remain read-only.

## [0.7.3] - 2026-08-08

### Added

- Added owner-authenticated, rotatable read-only URL tokens for shared spaces,
  including scoped browser/API reads, asset access, expiry, and revocation.
- Expanded the shared-space lease maximum from 30 to 183 days while preserving
  the 7-day default and 1-day minimum.

## [0.7.2] - 2026-08-04

### Fixed

- Prevented production shared-space metadata from silently falling back to container-local storage.
- Added `/api/health` storage readiness checks, Docker health checks, and restart persistence coverage.
- Documented the persistent `NABU_DATA_PATH` deployment contract and SQLite single-replica limit.

## [0.7.1] - 2026-08-02

Agent contract release.

### Changed

- Published the complete deployment and integration contract for agents at `/agents.md`.
- Clarified setup, authentication, note operations, search, traversal, and shared-space workflows.
- Made the contract origin-aware so hosted agents can use the current Nabu instance without localhost assumptions.

### Why it matters

Agents now have a complete, deployable contract for operating Nabu instead of a partial route description.

## [0.7.0] - 2026-08-02

Agent-first collaboration release.

### Added

- Added durable, time-limited shared-space leases over live recursive vault-folder boundaries.
- Added agent-facing proposal, confirmation, listing, revocation, extension, invite creation, and one-time redemption operations over HTTP and MCP.
- Added scoped bearer access tokens with hashed-at-rest secrets and synchronous expiry/revocation enforcement.
- Added explicit Markdown editing mode so humans can edit the same source files used by agents.

### Changed

- Applied shared-space filtering to vault trees, folders, notes, search, backlinks, neighborhoods, and mutations.
- Added note revisions and ETags with strict shared-token writes and structured `428`/`409` responses.
- Documented the read → merge → retry workflow and temporary shared-space security model.

### Fixed

- Restored ordered and unordered Markdown list markers and nested-list indentation in the reading view.

### Why it matters

Nabu now supports temporary, agent-created collaboration spaces where humans and agents can safely work on the same live Markdown project without exposing the rest of the vault.

## [0.6.1] - 2026-08-01

Search transition fix release.

### Shipped

- Prevented search form submissions from replacing the document and briefly showing unstyled server HTML
- Added a regression test covering client-side search navigation and all submitted search fields
- Preserved the native GET fallback for JavaScript-disabled clients

### Why it matters

Search now stays inside the existing client-rendered document, keeping the loaded stylesheet in place while route data refreshes and removing the distracting flash during normal use.

## [0.6.0] - 2026-08-01

Agent-first MCP release.

### Shipped

- Added a local stdio MCP server with direct-vault and remote deployed-Nabu modes
- Added MCP tools and resources for vault traversal, search, note reads, and note mutations
- Added bearer-token authentication for agent-facing API access
- Hardened vault writes against traversal, symlink, race, and stale-write hazards
- Improved vault search, indexing, and link navigation performance
- Added Enkii code and security review automation for pull requests

### Why it matters

Nabu now gives agents a first-class, local MCP interface to the same filesystem-backed knowledge space humans use through the web app, while keeping vault safety and deployment boundaries explicit.

## [0.4.2] - 2026-04-19

Launch cleanup release.

### Shipped

- Removed the obsolete `design/nabu_redesign.html` standalone mock now that the redesign has already been shipped into the real product

### Why it matters

The redesign should live in Nabu itself, not in a stale HTML artifact sitting beside the product. This release trims that leftover file and keeps the repo aligned with the real shipped surface.

## [0.4.1] - 2026-04-19

Launch readiness release.

### Shipped

- Added a proper agent-first `SETUP.md` that explains the correct way to self-host Nabu for a human
- Documented the non-negotiables for persistent storage, mounted vaults, passwords, backups, and post-install verification
- Added a real `Dockerfile` and `.dockerignore` so container deployment is runnable instead of hand-wavy
- Tightened the note details drawer so it distinguishes resolved outgoing links from unresolved ones
- Exposed unresolved outgoing links in the note neighborhood payload and surfaced them in the UI
- Preserved authored link labels for resolved outgoing links while still resolving targets correctly
- Fixed long metadata/link text leaking out of the details drawer container
- Linked the main README to the new setup guide and updated release docs to match the actual deployment paths

### Why it matters

This is the "tell your agent to set it up" release. Nabu is now in a much better state for public sharing: the deployment story is concrete, the persistence guidance is explicit, and the hosted UI explains note relationships without confusing resolved links and broken ones.

## [0.4.0] - 2026-04-19

Design-system release.

### Shipped

- Shipped the design system and redesign into the real app instead of leaving it trapped in a standalone HTML mock
- Rebuilt the vault UI around the new reading-first three-pane shell with quieter chrome and tighter hierarchy
- Redesigned the login and `/agents.md` surfaces to match the same product language
- Added exactly two supported themes: `scribe` and `graphite`, with persistent switching in the UI
- Exposed note neighborhood data directly in the browse payload so the hosted reader can render metadata, backlinks, outgoing links, related notes, and stats in a details drawer
- Restored functional parity across the redesigned UI: search, path/tag filtering, clickable tag chips, copy-path, internal note links, frontmatter metadata, and traversal affordances

### Why it matters

Nabu now actually looks like Nabu. The core vault surface, login flow, and agent docs share the same visual language and the same product posture: private, markdown-first, and built for humans and agents using the same knowledge space.

## [0.3.0] - 2026-04-13

Workspace polish release.

### Shipped

- Obsidian-inspired workspace overhaul with a darker, denser, calmer reading interface
- Stronger pane hierarchy across navigation, note list/search, and note content
- Improved markdown presentation for headings, code blocks, blockquotes, and note metadata
- CI reliability fix by syncing `package-lock.json` with the release version bump

### Why it matters

Nabu now feels much closer to a real knowledge workspace instead of a generic web dashboard. The reading surface has more authority, the side rails are calmer, and the hosted branch release process is back in a clean state after the CI lockfile fix.

## [0.2.0] - 2026-04-13

Agent-operability release.

### Shipped

- Deterministic note retrieval by canonical vault-relative path
- Lexical search with exact phrase parsing and tag/path filters
- Internal wiki-link and markdown note-link parsing
- Backlinks and note neighborhood traversal
- `/agents.md` expanded into a practical agent contract
- Authenticated write surfaces for:
  - folder creation
  - note creation
  - note update by path
- Immediate read/search consistency after successful writes

### Why it matters

Nabu is no longer just a hosted markdown reader. With v0.2.0, an authenticated agent can discover how the system works via `/agents.md`, read and search the vault, traverse note relationships, and perform basic write operations directly against the filesystem-backed knowledge base.

## [0.1.1] - 2026-04-10

Deployment DX release.

### Shipped

- Automatic creation of `KNOWLEDGE_PATH` on first boot when the directory does not yet exist
- Simpler default env example for mounted app data at `/data/nabu/knowledge`
- Updated deployment docs to reflect the mounted parent directory + auto-created knowledge folder flow

### Why it matters

Nabu is aiming for dead-simple self-hosting. A fresh deploy should not fail just because a user forgot to pre-create a subdirectory inside their mounted data path.

## [0.1.0] - 2026-04-10

First deployable MVP release.

### Shipped

- Mounted vault configuration via `KNOWLEDGE_PATH`
- Safe markdown scanning for vault files
- Frontmatter parsing with normalized metadata
- In-memory vault index primitives with collision tracking
- Read-only retrieval routes for vault navigation
- Folder tree and folder note listing retrieval
- Web note browsing UI with folder tree and note rendering
- Simple env-password auth with session cookies

### Product frame

Nabu v0.1.0 establishes the core idea: a filesystem-first, markdown-native knowledge OS that humans and agents can both traverse through a private web interface.