Calame v0.8.1

Changed

• The HTTP server now binds to 127.0.0.1 (loopback) by default instead of all
  network interfaces. Because Calame can index local folders and serve database
  profiles over MCP, an all-interfaces default silently exposed that content to
  the local network on a fresh install. Set CALAME_HOST=0.0.0.0 to listen on
  all interfaces (front it with a reverse proxy / firewall). The Docker image
  sets CALAME_HOST=0.0.0.0 automatically, so containerized deployments are
  unaffected. The startup log now reports the bound host.

Security

• Raised transitive dependencies above newly published high-severity advisories
  via pnpm.overrides: @xmldom/xmldom (>=0.8.15), nodemailer (>=9.1.0),
  sharp (>=0.35.4) and js-yaml (>=4.3.2). The nodemailer bump required a
  small type-only adjustment in the email service.

Calame 0.8.0

Added

• Microsoft SQL Server (MSSQL) support: SQL Server now sits alongside
  PostgreSQL, MySQL and SQLite as a source you can connect, explore and
  serve over MCP. Connection strings are accepted in both the ADO style you
  copy out of SSMS (Server=localhost,1433;Database=mydb;User Id=sa;…) and
  the URL style used by the other connectors
  (mssql://user:password@host:1433/mydb). Tables outside the default dbo
  schema are picked up and stay schema-qualified, and all six tools
  (query, aggregate, join_aggregate, describe, list_tables,
  distinct-value discovery) generate proper T-SQL — bracket-quoted
  identifiers, OFFSET … FETCH NEXT paging and TOP (n) capped reads.
  SQL authentication only in this first version: Windows / Active
  Directory integrated authentication is not supported and is reported as a
  clear error rather than silently failing. Statistical aggregations
  (median, percentile) remain PostgreSQL-only; stddev and variance
  work on SQL Server.

Fixed

• A filter on a column that cannot be filtered — one hidden by masking,
  excluded from the profile, of an unsupported type, or simply misspelled —
  is now rejected with a clear error listing the columns you can filter on.
  Previously query and aggregate dropped such filters silently and
  returned the unfiltered rows as if the filter had applied, which could
  quietly overstate a result; join_aggregate already reported the error, so
  all four tools (including write) now behave the same way. Filtering on a
  masked column remains blocked exactly as before.
• Column types that MySQL, SQLite and SQL Server report but PostgreSQL does
  not — notably datetime, float, double and tinyint — are now
  recognised, so filters, groupings and date buckets work on those columns
  instead of the column being treated as unfilterable.

Calame v0.7.3

Fixed

• Local folder sources now skip node_modules, .git and hidden files
  (dotfiles) by default, and ignore files larger than 50 MB without reading
  them. All of it is configurable: the source form gains include/exclude
  glob filters and an "include hidden files" checkbox, and skipped-too-large
  files are counted in the sync summary instead of disappearing silently.
• Re-syncing a local folder no longer re-reads every file: unchanged files
  are detected from their size + modification time (one stat, zero content
  reads) and skipped before any fetch. Content is still verified by hash
  when a file's timestamp changes without its content changing. Note: a
  write that preserves both size and mtime is not detected — in that rare
  case, delete and recreate the source to force a full re-read (a dedicated
  per-source force-resync is planned as a follow-up).
• The HTTP API now masks personal data (emails, phone numbers, …) in
  POST /api/rag/search results and GET /api/rag/documents/:id text, with
  the same safe-by-default configuration (CALAME_RAG_PII_MASK) already
  applied to the MCP RAG tools. Previously these two endpoints returned the
  indexed text unmasked.
• Files in an unsupported format are no longer re-downloaded and re-analyzed
  on every sync: they are diagnosed once and then skipped until the file
  actually changes (or the source is deleted and recreated). Transient
  errors (parser crash, embedding outage) are still retried on every sync.
• Security: transitive dependencies fast-uri and mysql2 raised above
  recently published high-severity advisories (GHSA-jqff-g426-hqxp and
  friends, GHSA-3f6p-5ww8-9rcr) via pnpm overrides.

Full changelog: https://github.com/Calame-Tech/calame/blob/main/CHANGELOG.md

Calame v0.7.1

Fixed

• Packaged desktop app could fail to locate the bundled local embedding
  model (embedded resource path resolution in the Tauri sidecar), breaking
  on-device RAG on fresh installs. Dev-mode and remote providers were
  unaffected.

Full changelog: https://github.com/Calame-Tech/calame/blob/main/CHANGELOG.md

Calame v0.7.0

chore(release): bump version to 0.7.0

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Calame v0.6.0

chore(release): bump version to 0.6.0

Calame v0.5.1

Fixed

• Dashboard activity chart could stay stuck on its empty state: the app
  fetched only the 10 most recent audit entries, so as soon as one server
  had been used that day the 7-day aggregation window collapsed to a
  single day. The dashboard now aggregates over the last 250 entries
  (the activity feed still shows 8).
• Lint: removed disable comments referencing an unconfigured ESLint rule.

Full changelog: https://github.com/Calame-Tech/calame/blob/main/CHANGELOG.md

Calame v0.5.0

Added

• Redesigned Dashboard: a Sources → Data Configurations → MCP Servers
  pipeline strip with per-item drill-down, an activity chart aggregated
  from the audit log (DST-safe), a needs-attention column surfacing
  pending writes, a real masked-columns PII card, and a servers table
  with trend sparklines — all with an orchestrated construction
  animation honoring prefers-reduced-motion.
• Data Configurations page: List | Graph toggle. The new graph view
  shows servers, configurations and sources as three aligned layers
  with lineage highlighting (hover any node to trace the full data
  path), click-to-pin details, and drag-to-reorder persisted locally
  with a Reset layout control. List cards now show per-source chips
  and which servers mount each configuration.
• Access visibility: pinning a server in the graph lists the users
  granted access; the Users page gains an "Access matrix" tab (users ×
  servers with R / R+W badges and table-restriction markers).
• ADR 0003: domain terminology decision (Sources, Data Profiles,
  MCP Servers) with a progressive migration plan.

---

Also includes the unpublished 0.4.1 changes:

Changed

• UI craft pass on the web app, identity unchanged: four small labels raised
  above the WCAG AA contrast floor (schema tool badge, "+ PII" button, user
  delete button, dashboard OFF pill); chat typing indicator replaced with a
  soft staggered pulse honoring prefers-reduced-motion; Metrics progress
  bars now animate on transform: scaleX (GPU) instead of width; text
  selection, input caret, and placeholders themed from the workspace accent.

Added

• docs/RELEASE.md: step-by-step guide for shipping a desktop release
  (version bump, tagging, CI build, draft publication).
• Impeccable design-detector config (packages/web/.impeccable/config.json)
  so UI edits are scanned automatically with vetted ignores.

Full changelog: https://github.com/Calame-Tech/calame/blob/main/CHANGELOG.md

Calame v0.4.0

chore(release): bump version to 0.4.0

Calame v0.3.0

chore(release): bump version to 0.3.0