# Changelog All notable changes to Nabu will be documented in this file. ## Unreleased ## [0.7.4] - 2026-09-27 ### Added - Granted write owner-agent credentials (Settings → Agents connection links with read and write) full shared-space management parity with the owner across MCP and HTTP: propose, confirm, list, get, invite, revoke, extend, and read-link management. Spaces stay owned by the owner, so the owner session keeps full visibility and control. Read-only owner-agent credentials remain read-only. ## [0.7.3] - 2026-08-08 ### Added - Added owner-authenticated, rotatable read-only URL tokens for shared spaces, including scoped browser/API reads, asset access, expiry, and revocation. - Expanded the shared-space lease maximum from 30 to 183 days while preserving the 7-day default and 1-day minimum. ## [0.7.2] - 2026-08-04 ### Fixed - Prevented production shared-space metadata from silently falling back to container-local storage. - Added `/api/health` storage readiness checks, Docker health checks, and restart persistence coverage. - Documented the persistent `NABU_DATA_PATH` deployment contract and SQLite single-replica limit. ## [0.7.1] - 2026-08-02 Agent contract release. ### Changed - Published the complete deployment and integration contract for agents at `/agents.md`. - Clarified setup, authentication, note operations, search, traversal, and shared-space workflows. - Made the contract origin-aware so hosted agents can use the current Nabu instance without localhost assumptions. ### Why it matters Agents now have a complete, deployable contract for operating Nabu instead of a partial route description. ## [0.7.0] - 2026-08-02 Agent-first collaboration release. ### Added - Added durable, time-limited shared-space leases over live recursive vault-folder boundaries. - Added agent-facing proposal, confirmation, listing, revocation, extension, invite creation, and one-time redemption operations over HTTP and MCP. - Added scoped bearer access tokens with hashed-at-rest secrets and synchronous expiry/revocation enforcement. - Added explicit Markdown editing mode so humans can edit the same source files used by agents. ### Changed - Applied shared-space filtering to vault trees, folders, notes, search, backlinks, neighborhoods, and mutations. - Added note revisions and ETags with strict shared-token writes and structured `428`/`409` responses. - Documented the read → merge → retry workflow and temporary shared-space security model. ### Fixed - Restored ordered and unordered Markdown list markers and nested-list indentation in the reading view. ### Why it matters Nabu now supports temporary, agent-created collaboration spaces where humans and agents can safely work on the same live Markdown project without exposing the rest of the vault. ## [0.6.1] - 2026-08-01 Search transition fix release. ### Shipped - Prevented search form submissions from replacing the document and briefly showing unstyled server HTML - Added a regression test covering client-side search navigation and all submitted search fields - Preserved the native GET fallback for JavaScript-disabled clients ### Why it matters Search now stays inside the existing client-rendered document, keeping the loaded stylesheet in place while route data refreshes and removing the distracting flash during normal use. ## [0.6.0] - 2026-08-01 Agent-first MCP release. ### Shipped - Added a local stdio MCP server with direct-vault and remote deployed-Nabu modes - Added MCP tools and resources for vault traversal, search, note reads, and note mutations - Added bearer-token authentication for agent-facing API access - Hardened vault writes against traversal, symlink, race, and stale-write hazards - Improved vault search, indexing, and link navigation performance - Added Enkii code and security review automation for pull requests ### Why it matters Nabu now gives agents a first-class, local MCP interface to the same filesystem-backed knowledge space humans use through the web app, while keeping vault safety and deployment boundaries explicit. ## [0.4.2] - 2026-04-19 Launch cleanup release. ### Shipped - Removed the obsolete `design/nabu_redesign.html` standalone mock now that the redesign has already been shipped into the real product ### Why it matters The redesign should live in Nabu itself, not in a stale HTML artifact sitting beside the product. This release trims that leftover file and keeps the repo aligned with the real shipped surface. ## [0.4.1] - 2026-04-19 Launch readiness release. ### Shipped - Added a proper agent-first `SETUP.md` that explains the correct way to self-host Nabu for a human - Documented the non-negotiables for persistent storage, mounted vaults, passwords, backups, and post-install verification - Added a real `Dockerfile` and `.dockerignore` so container deployment is runnable instead of hand-wavy - Tightened the note details drawer so it distinguishes resolved outgoing links from unresolved ones - Exposed unresolved outgoing links in the note neighborhood payload and surfaced them in the UI - Preserved authored link labels for resolved outgoing links while still resolving targets correctly - Fixed long metadata/link text leaking out of the details drawer container - Linked the main README to the new setup guide and updated release docs to match the actual deployment paths ### Why it matters This is the "tell your agent to set it up" release. Nabu is now in a much better state for public sharing: the deployment story is concrete, the persistence guidance is explicit, and the hosted UI explains note relationships without confusing resolved links and broken ones. ## [0.4.0] - 2026-04-19 Design-system release. ### Shipped - Shipped the design system and redesign into the real app instead of leaving it trapped in a standalone HTML mock - Rebuilt the vault UI around the new reading-first three-pane shell with quieter chrome and tighter hierarchy - Redesigned the login and `/agents.md` surfaces to match the same product language - Added exactly two supported themes: `scribe` and `graphite`, with persistent switching in the UI - Exposed note neighborhood data directly in the browse payload so the hosted reader can render metadata, backlinks, outgoing links, related notes, and stats in a details drawer - Restored functional parity across the redesigned UI: search, path/tag filtering, clickable tag chips, copy-path, internal note links, frontmatter metadata, and traversal affordances ### Why it matters Nabu now actually looks like Nabu. The core vault surface, login flow, and agent docs share the same visual language and the same product posture: private, markdown-first, and built for humans and agents using the same knowledge space. ## [0.3.0] - 2026-04-13 Workspace polish release. ### Shipped - Obsidian-inspired workspace overhaul with a darker, denser, calmer reading interface - Stronger pane hierarchy across navigation, note list/search, and note content - Improved markdown presentation for headings, code blocks, blockquotes, and note metadata - CI reliability fix by syncing `package-lock.json` with the release version bump ### Why it matters Nabu now feels much closer to a real knowledge workspace instead of a generic web dashboard. The reading surface has more authority, the side rails are calmer, and the hosted branch release process is back in a clean state after the CI lockfile fix. ## [0.2.0] - 2026-04-13 Agent-operability release. ### Shipped - Deterministic note retrieval by canonical vault-relative path - Lexical search with exact phrase parsing and tag/path filters - Internal wiki-link and markdown note-link parsing - Backlinks and note neighborhood traversal - `/agents.md` expanded into a practical agent contract - Authenticated write surfaces for: - folder creation - note creation - note update by path - Immediate read/search consistency after successful writes ### Why it matters Nabu is no longer just a hosted markdown reader. With v0.2.0, an authenticated agent can discover how the system works via `/agents.md`, read and search the vault, traverse note relationships, and perform basic write operations directly against the filesystem-backed knowledge base. ## [0.1.1] - 2026-04-10 Deployment DX release. ### Shipped - Automatic creation of `KNOWLEDGE_PATH` on first boot when the directory does not yet exist - Simpler default env example for mounted app data at `/data/nabu/knowledge` - Updated deployment docs to reflect the mounted parent directory + auto-created knowledge folder flow ### Why it matters Nabu is aiming for dead-simple self-hosting. A fresh deploy should not fail just because a user forgot to pre-create a subdirectory inside their mounted data path. ## [0.1.0] - 2026-04-10 First deployable MVP release. ### Shipped - Mounted vault configuration via `KNOWLEDGE_PATH` - Safe markdown scanning for vault files - Frontmatter parsing with normalized metadata - In-memory vault index primitives with collision tracking - Read-only retrieval routes for vault navigation - Folder tree and folder note listing retrieval - Web note browsing UI with folder tree and note rendering - Simple env-password auth with session cookies ### Product frame Nabu v0.1.0 establishes the core idea: a filesystem-first, markdown-native knowledge OS that humans and agents can both traverse through a private web interface.