Release notes

Private spaces add artifact visibility, person grants, scoped browsing, and stricter read enforcement.

• New artifacts are private by default, while existing artifacts remain workspace-visible after the migration backfill.
• Artifact listings, search, home projections, notifications, direct reads, subresources, and live session viewers now enforce member visibility consistently.
• Owners can share private artifacts with specific workspace members from the Share dialog, with grant audit events and shared-artifact notifications.
• Workspace, My space, and Shared with me scopes make browsing private and granted artifacts explicit.

Gallery, create flow, and detail polish make artifact work smoother from browse to live comments.

• The gallery filter strip now has consistent framed surfaces, menu-style sorting, creator suggestions, inline folder creation, compact pinned artifacts, quieter card metadata, and stable tag rows.
• Cards use viewport-sized thumbnails and scaled fallback previews so artifacts read as real page snapshots instead of zoomed or cropped fragments.
• Members can drop an HTML file anywhere on the gallery to start a new artifact, with title extraction, folder creation and rename, searchable tags, and optional data/manifest bundle parts in the create flow.
• Visual comments move to an authenticated live comment surface with a drawer, numbered pins, hash deep links, and detail-page links that keep the normal preview focused on review.

Usability, collaboration, and trust hardening make Atelier a reliable daily driver — safe destructive actions, a live in-app collaboration loop, template-first creation, smarter discoverability, workspace identity, and admin-visible backup health.

• Bulk archive now requires a confirmation that states the count and reversibility, followed by a 10-second undo window that restores the exact artifact set. Share revocation shows the token prefix, visibility, and recorded view count before confirming. Create and edit forms guard against accidental navigation with a "Leave without saving?" prompt.
• A notification bell in the top bar tracks unread mentions, replies, and new versions, refreshing every 60 seconds without a page reload. Each entry deep-links to the related comment; "Mark all read" clears the badge in one click.
• The comment composer now opens a live @mention autocomplete when you type @, filtering workspace members by name with keyboard navigation. Replies can be edited and deleted by their author or an admin under the same rules as top-level comments.
• The new-artifact page surfaces a "Start from a template" section listing forkable artifacts with their thumbnail, title, and adapted count. Selecting one pre-fills category and folder, and the fork relationship is recorded in lineage at create time.
• Gallery cards display an "Adapted N×" badge and "Adapted count" is now a sort option, making widely-reused templates visible at a glance.
• The fill flow adds a preview step that renders the filled artifact without writing a database record. Multiple preview iterations produce no intermediate versions — a new version is created only on explicit confirmation.
• Artifacts can be pinned to the home Pinned section directly from their detail page. The sidebar folder tree now shows the artifact count for each folder. The search box surfaces your recent queries when focused empty, with per-entry removal.
• Admins can set a workspace name and logo from the new admin settings page. The brand appears in the top bar and on public share pages. Share links pasted into Slack or email unfurl with the artifact title, description, and thumbnail.
• Every backup run — whether triggered from the CLI or the new "Backup now" button in the admin area — is recorded with its timestamp, status, size, and duration. A warning banner appears if no successful backup exists in the last 7 days.

Webfont support in artifact CSP and Outline embed integration.

• Artifact render CSP now includes cdn.jsdelivr.net, cdnjs.cloudflare.com, and unpkg.com in font-src so webfonts (e.g. Tabler Icons) load correctly.
• Artifacts can be embedded directly in Outline wiki pages via the embed URL from the Embed modal.

Library surfaces and collaboration foundations landed for gallery filtering, vault stats, rendered version diffs, visual pins, and Claude HTML import.

• The gallery read model now composes weighted FTS with category filtering and lineage counts for adapted-artifact signals.
• Visual comments can store coordinate-anchored pins per artifact version, list them by version, resolve or reopen them, and audit every pin mutation without touching the sandboxed iframe.
• The vault read model reports member artifact, fork, version, and comment counts from existing tables, with version-pill data for each artifact.
• Import from Claude accepts pasted/exported HTML through the existing bundle ingest path and records artifact.imported audit events on successful imports.
• Library thumbnails and detail previews now stay version-specific, avoid double-prefixed URLs, and open local live views with dev-safe signed links.

Spec 008 completed design system centralization with tokenized surfaces, shared layout rhythm, and a calmer form-control pass.

• The design system now owns the shared app shell, page shell spacing, footer rhythm, and route surface widths from one tokenized pattern.
• The component library carries the form-control pass, including a compact checkbox overhaul that replaces the shadowed accent-tile treatment.
• Profile, audit, new-artifact, release-note, and state surfaces are aligned around the same page shell and neobrutalist component primitives.
• The release history now includes the completed bundle-format and fork/fill specs so past product changes are visible in-app.

Fork, lineage, fill, MCP write flows, and state commits made artifacts reusable without mutating their sources.

• Artifacts can be forked into new artifacts with immutable lineage back to the source version.
• Fill payloads and MCP write scopes let external agents create data-backed versions while preserving audit and rate-limit boundaries.
• The viewer can capture postMessage state changes and save them as a new version with the template unchanged.
• Lineage APIs, migration coverage, and browser checks protect the source artifact from mutation during fork and fill workflows.

Artifact bundle support introduced html, data, and manifest parts with safer ingestion and render contracts.

• Uploads now support the three-file artifact bundle shape: artifact HTML plus optional data.json and manifest.json.
• Bundle parts are stored, carried forward, and served with scoped raw routes so data-only changes can preserve the HTML part.
• Manifest metadata powers category and dependency surfaces while enforcing pinned dependency and CDN allowlist rules.
• Backfill, migration, CORS, CSP, and isolation tests cover legacy artifacts and the new bundle render path.

Completed v0.4 compliance fixes for share management, detail and folder polish, validation coverage, and local reliability.

• Share management now covers one-time copy, visibility changes, 7-day and 30-day expiry updates, never-expire cleanup, tracking, and revoke from the artifact.
• Detail and folder polish closes the equal-action row, copy embed, and Top level wording gaps.
• The v0.4 validation suite now directly checks share lifecycle, detail layout, folder quality, static metadata, and clean viewer runtime output.
• Local reliability fixes keep app.lvh.me dev sign-in, isolated previews, and worker shutdown behavior dependable during review.

Neobrutalist redesign with a gallery-first home, working prefix search, folder completion, and tag discovery.

• Gallery cards now open isolated view-origin previews with a separate details affordance.
• Search supports as-you-type prefix matching, deterministic sorting, collapsed filters, and active filter chips.
• Folders can be renamed, moved, browsed by child folder, and audited alongside artifact moves.
• Tags are keyboard-accessible discovery links from the gallery and artifact detail pages.

People, admin, bulk operations, search-first organization, and security hardening for member workflows.

• Admin user and people management gained invitation, role, disable, and audit surfaces.
• Bulk artifact actions cover move, archive, and tag operations with safer limits.
• Search and organization APIs gained folders, tags, metadata edits, and audit coverage.
• Authentication, API tokens, throttling, and cleanup operations were tightened for production use.

Initial MVP for uploading, viewing, versioning, and cataloging artifact HTML safely.

• Member authentication and the first artifact inventory shell shipped.
• Artifact upload, immutable versions, thumbnails, and detail pages established the core catalog.
• View-origin rendering separated live artifact bytes from the application origin.
• Basic comments, discovery, and operational documentation created the baseline workflow.