v0.7.0

0.7.0 (2026-10-08)

Features

• automations: coded run details translated in the UI (#92) (762d81f)
• shortcuts: remap single-key shortcuts per device (#93) (a407cfd)

Refactoring

• ui: drop leftover button class overrides (phase C) (#90) (7bb7545)

v0.6.0

0.6.0 (2026-10-08)

Features

• ui: migrate route buttons to the button system (phase B) (#88) (bc104b2)
• ui: replace native confirm() with accessible ConfirmDialog (#81) (12c86bb)
• ui: semantic button system with touch-sized targets (phase A) (#87) (59a8537)

Bug Fixes

• canvas: make connecting and unlinking cards reliable (#84) (fbaf84b)
• layout: align page frames and left-align readable columns (#83) (959f326)
• layout: reserve the root scrollbar track so page frames line up (#86) (4937287)
• layout: use the full page frame on settings, inbox, automations and error pages (#85) (320f0de)
• ui: descriptive confirm dialogs and consistent date/time inputs (#89) (9d2a1ba)

v0.5.0

0.5.0 (2026-10-08)

Features

• auth: one-time recovery codes for TOTP two-factor (c950e96)
• auth: one-time recovery codes for TOTP two-factor (#77) (c950e96)
• capture: fill every note field from one Telegram/inbox message (#69) (ada71ba)
• capture: fill every task field from one Telegram/inbox message (#66) (e7d45e8)
• capture: prefill the project and template forms from text with AI (#70) (1085cf5)
• i18n: full ID/EN coverage of the app UI (#76) (70946cb)
• i18n: split dictionaries into src/lib/i18n with typed EN parity (70946cb)
• i18n: translate route heads, option labels, capture fields and … (7323307)
• i18n: translate route heads, option labels, capture fields and cron errors (#80) (7323307)
• i18n: translate the remaining app pages to English (70946cb)
• reports,habits: focus, burndown and throughput charts plus a habit tracker (#72) (2a7bda1)
• ux: keyboard nav for Today, Upcoming, calendar, timeline, notes… (57b7f96)
• ux: keyboard navigation for Today, Upcoming, calendar, timeline and notes grid (#79) (57b7f96)
• ux: keyboard-first navigation, command palette actions and a shortcut cheat-sheet (#74) (4c05341)

Bug Fixes

• a11y: 44 px touch hit area for small icon buttons (44030ee)
• backup: restore habits and habit logs from Settings JSON (e799f11)
• backup: restore habits and habit logs from Settings JSON (#78) (e799f11)
• graph,automations: colour graph nodes by project and show automation rules without UUIDs or false "invalid schedule" (#68) (1e89719)
• share,a11y: opt-in search indexing for public links and 44 px touch targets (#75) (44030ee)
• share: let owners allow search-engine indexing of public links (44030ee)

Documentation

• add demo screenshots to the README and the landing page (#65) (cca3917)
• screenshots: re-capture graph and automations, add habits (#73) (371c272)

v0.4.0

0.4.0 (2026-10-07)

Features

• auth: email invites with set-password page and password reset (#58) (5c72176)
• auth: Google sign-in, magic link and TOTP two-factor authentication (#61) (4a5df25)
• automations: scheduled rules and note triggers (#62) (af9d8ef)
• calendar: two-way Google Calendar sync (#60) (afd3fd5)
• db: demo row limits, write quota and demo account protection (0019) (#52) (cad3374)
• demo: demo mode foundation (guards, banner, login, IP rate limit) (#53) (2a423ec)
• demo: seed data, daily reset endpoint and demo deployment guide (#56) (95cecf1)
• demo: simulated AI with fixtures and pre-filled examples (#55) (138ec5d)
• landing: tech stack marquee, back to top, demo button, SSR language and login back link (#54) (d43a34c)
• login redirect, closed signup, sticky landing with sections and legal pages (#51) (52ae808)
• n8n: email-to-inbox via Gmail Trigger, keep IMAP as 08b (#50) (eeeea67)
• search: semantic search for notes and tasks (#57) (e8ea938)
• settings: about card with version, build info and update check (#49) (5caaaa0)
• share: revocable read-only public links for notes and projects (#63) (1e63c9c)

Bug Fixes

• db: make migrations 0019–0024 safe to apply on a live database (#64) (8ce4170)
• n8n: handleN8n maps undefined column/table errors (42703, 42P01, 42883, PGRST202/204/205 and the matching messages) to 503 {"error":"schema_outdated","hint":...} instead of 500. Root cause of the automations tick 500: migration 0023 was not applied. (8ce4170)
• ui: mobile-first dialogs, responsive pages, back to top and demo notice (#59) (3613f6e)

Documentation

• plan: mark TS 7 upgrade blocked (#47) (faea141)
• README (auth section, env vars, Supabase steps: Google provider, MFA TOTP on, Redirect URLs including /auth/callback, Magic Link template), SECURITY.md, DEMO.md, the implementation plan and .env.example (VITE_AUTH_GOOGLE, VITE_AUTH_MAGIC_LINK). (4a5df25)
• README section "Applying migrations to a live database". (8ce4170)
• README, SECURITY.md, integrations/n8n README + workflow 07, plan. (afd3fd5)

v0.3.1

0.3.1 (2026-10-06)

Bug Fixes

• n8n: use resolved IMAP format in email-to-inbox to avoid Gmail disconnects (#45) (e28b011)

v0.3.0

0.3.0 (2026-10-06)

⚠ BREAKING CHANGES

• n8n: re-import all n8n workflows and rename the n8n env vars (SECOND_BRAIN_URL -> SB_APP_URL, SECOND_BRAIN_CRON_SECRET -> SB_CRON_SECRET, SECOND_BRAIN_OWNER_EMAIL -> SB_OWNER_EMAIL, OPENAI_* -> SB_AI_*, N8N_OCR_MODE/N8N_TRANSCRIBE_MODE -> SB_AI_OCR_MODE/SB_AI_TRANSCRIBE_MODE, everything else gets an SB_ prefix). Replace the OpenAI credential with the Header Auth credential "Second Brain AI key (Gemini)". AI now defaults to Gemini in chat mode. Web app (Vercel) env is unchanged.

Features

• keyboard drag and drop, reduced motion, AA tokens and Playwright e2e (8.3, 8.5) (#43) (89d2842)
• landing SEO, Open Graph image, favicons and demo CTA (#42) (60e9794)
• optional Sentry error monitoring and web-vitals reporting (#44) (ca44950)
• per-route error boundaries and consistent error toasts (#36) (9caefa2)
• public bento-grid landing page at / and move Today to /today (#38) (dc6c101)
• support Gemini (chat input_audio) for voice transcription (#37) (8a6ebad)
• Workbox service worker with update prompt and no theme flash (#41) (f91bc0e)

Bug Fixes

• blocks: parse - [x]/* [x] as checked todos so checked todos survive the markdown round trip (5e2dbe9)
• fail Vercel build when client Supabase env is missing (#22) (e569b10)
• n8n: namespace template env vars with SB_ and use Gemini-compatible AI calls (#40) (4591c50)

Performance

• auth guard in beforeLoad and parallel data prefetch in route loaders (#27) (86d6e52)
• autosize only the changed block textarea and share note titles in the editor (#24) (c623594)
• granular Yjs blocks and single-leader autosave for note collaboration (#30) (a13fc53)
• move dependent auto-shift and recurrence into Postgres RPCs (#26) (b18fbee)
• store note links/refs/excerpt and query backlinks in Postgres (#28) (638c4a8)
• virtualize long lists above 200 items (Phase 4.6) (#25) (deec845)

Refactoring

• migrate to zod 4 (#35) (ab0b584)
• split data.ts into feature modules (#32) (816d018)
• type Supabase helpers and forbid explicit any (#34) (5e2dbe9)

Documentation

• plan public bento-grid landing page at / (Phase 8.6) (#23) (f83bd16)

v0.2.1

0.2.1 (2026-10-05)

Performance

• Phase 3 quick wins — query defaults, lazy layout, lean selects, optimistic cache (#17) (5303e01)

v0.2.0

0.2.0 (2026-10-05)

Features

• db: Phase 2 database hardening — indexes, single audit trigger, RLS initplan, constraints (47c0112)

Bug Fixes

• db: keep a single audit trigger per table (e046401)
• db: reference auth.users from user_id and check enum columns (38a916f)

Performance

• db: evaluate auth.uid() and project membership once per query (b5a9123)
• db: index the main access paths and every FK column (7d1aac1)

Documentation

• record Phase 2 explain results and mark Phase 2 rows done (6060fc7)

v0.1.0

First tagged release of Second Brain: the baseline for automated releases with Release Please.

Highlights

• Open-source readiness: MIT license, CONTRIBUTING, CODE_OF_CONDUCT, SECURITY and ACCESSIBILITY docs, issue forms, PR template, CODEOWNERS and Dependabot.
• CI/CD: GitHub Actions for ESLint, Prettier, TypeScript, Vitest, build and migration checks, CodeQL, dependency review and an optional Vercel deploy workflow.
• Lovable-free deployment on Vercel + Supabase, with security headers in vercel.json.
• Security hardening: RLS fixes for shared projects (immutable user_id, per-operation member policies), rate limiting (0011_rate_limits), SSRF guard, CSRF middleware and safe one-time Telegram linking.
• Integrations: own Google OAuth client for Google Calendar (encrypted refresh tokens), direct Telegram Bot API, and n8n backend endpoints (/api/public/n8n/*) for the bot, capture, digests, reminders, maintenance, backups and calendar sync.
• Product: inbox and AI capture, tasks across list / kanban / calendar / timeline with dependencies and automations, block-based notes with links, refs, queries, graph and Yjs collaboration, projects with team members, installable PWA in Indonesian and English.

See CHANGELOG.md for the full list. Future releases are generated from Conventional Commits.