Platform evolution
Nexus Roadmap
A transparent view of what we've shipped, what we're building, and where Nexus is headed.
v1.0.0-betaPlannedQ2 2027
Production-ready release
- Feature-complete platform with all core workflows stabilized and battle-tested
- Full documentation suite: onboarding guides, API reference, plugin SDK, and self-hosting manual
- Performance baseline and SLA definitions for cloud and self-hosted deployments
- Public API stability guarantee with semantic versioning commitment
- Community contribution guidelines, plugin SDK, and third-party integration templates
- End-to-end test coverage for all critical paths (auth, sessions, decisions, CLI, MCP)
v0.18.0PlannedQ1 2027
Self-hosted Stack, Multi-Tenant & Nexus Spark (BYOH)
- Helm chart for the full Nexus stack (webapp, MCP server, Supabase services, Caddy) on user-owned Kubernetes, with RKE2 as the reference distribution
- PostgreSQL through the CloudNativePG (CNPG) operator: pgvector, scheduled backups, point-in-time recovery and failover, replacing the hosted database for self-hosted installs
- Community/Pro self-hosted deployment with zero license enforcement and no phone-home
- One-command deployment for single-node setups via Docker Compose alternative
- Configuration wizard for self-hosted setup: database, storage, auth, and domain
- Multi-tenant support: tenant resolution via middleware + RLS session variables, replacing LIMIT 1 pattern
- Organization-scoped URL routing: /o/[orgSlug]/ prefix for all authenticated routes (ADR-0081)
- Multi-tenant SaaS onboarding with self-service registration and tenant provisioning
- nexus-cli org context: NEXUS_ORG env var, config.toml org binding
- Nexus Spark (BYOH) integration pushed forward: deeper provisioning and lifecycle wiring for user-owned DGX Spark / private GPU hardware nodes into the AI Gateway routing surface
- Cost Control improvements: sharper per-project/per-session cost attribution, refined budget enforcement, and clearer reconciliation against the 0.13 BYOK provider-credential foundation
- Stripe billing integration with metered usage tracking and invoice generation
- Demo licenses: fixed admin quick actions for managing demo licenses
v0.17.0ReleasedOctober 2026
Discreet Projects, Shadow Guard & Release Lines
- Discreet customers and projects: left out of overviews, pickers, search and dashboard widgets, so they do not appear during a screen share; shown only when opened on purpose
- Shadow guard for public repositories: rules against AI and Nexus references in commits, PRs, comments and docs, central patterns, nexus shadow check and a commit-msg hook (nexus-cli 0.28.16)
- Language settings with live inheritance: platform defaults, project and personal languages for documentation and agent answers
- One Nexus session per release line: release lines on sessions, a session-guard nudge, and automatic retirement of old staging lines
- Devbox workspaces refined: plugin variables from .nexus/plugin.env with shell-safe loading (nexus-cli 0.28.15), one-click Review & sync, leaner blueprints
- Dashboard refinements: customer detail aligned with projects, one search and filter bar for customers and projects, the customer in project breadcrumbs, user search with avatars, audit log review queue, AI hardware info drawers, rebuilt design system reference
- Error pages and error references: every server error answers with a reference that is also in the logs
- Security and performance: no full user directory for platform users, dependency patches, parallel queries and new indexes, lint back in CI
v0.16.0ReleasedOctober 2026
Short Rules, Curated Plugins & Public-Repo Safety
- Project directives as short rules (ADR-0125): a platform catalog written once, MUST/SHOULD levels, rationale for humans only, render budget and preview
- Project settings for artifact and docs language, Conventional Commits, em-dashes and personal address, each rendering its rule
- Shadow levels off, ai and nexus: untracked agent files kept out of git for public repositories (tracked files need git rm --cached once), optional rule against Nexus references
- Claude Code plugins per project (ADR-0117 tier A) and a managed capability routing rule that keeps workflows in Nexus skills (ADR-0124)
- Skill catalog cleanup: archived skills removed, dispatch sweeps merged, descriptions required, run-on-request skills
- Security: role checks for MCP skill and directive changes, DNS rebinding protection for node calls, eight more tables closed to direct reads (SEC-007 follow-up)
v0.15.0ReleasedSeptember 2026
Configurable Claude Code Workspace
- Workspace Profiles (ADR-0119): a multiplexer-neutral workspace model with system presets, a project default and personal settings, validated and previewed before saving
- New default preset Standard + Terminal: Claude Code at 75% with token usage, the agent observer and a devbox terminal in the sidebar
- Agent observer pane (ADR-0120): agents and subagents at a glance via nexus status --agents, AgentHUD as an experimental alternative
- Zellij sessions named after the project, and personal Zellij settings (clipboard program, copy on select, mouse mode, theme, keybinds) applied by nexus run
- Routing policy changes reach the gateway right away via policy-reload (best effort; the regular bundle poll remains the fallback)
- Security: cross-tenant PostgREST reads closed on fourteen tables (SEC-007), Next.js 16.3.6
v0.14.0ReleasedSeptember 2026
Claude Code as a First-Class Runtime
- One agent executioner per project: OpenCode (default) or Claude Code, selected in the backend; the "generate configs for both tools" option is removed
- Single start command: nexus run starts whatever the project selects (OpenCode, Claude Code, or the Claude Code workspace); --plain or --workspace override the terminal workspace per start, and a local [run] workspace setting sets the default for a checkout
- Claude Code Experience bundles (ADR-0117): essential, engineering, review, and test-ops profiles compiled into Nexus-managed rules, a statusline/HUD (project, branch, model, context, headroom; never money figures), plugins, and a preview of every generated file
- Claude Code workspace: Zellij layout with Claude Code, lazygit, and a Nexus usage panel (5-hour block, daily/weekly/monthly token totals, headroom state); ending Claude Code ends the workspace and prints the session summary
- Claude Code hook adapters: session-guard, headroom-intercept, compaction-plus, routing-guard, and cost-control ship as bundled Claude Code hooks wired in by nexus pull, or through the nexus-core Claude Code plugin from the Gatewarden Nexus marketplace
- Claude Max execution mode (experimental, user-owned, ADR-0106): selectable per project for users granted the feature flag; Nexus stores no Claude credential and does not pool subscriptions across users, and cost surfaces show tokens instead of per-token money figures
- Project settings from the CLI (ADR-0118): nexus env get|set|keys over a PAT-authenticated settings API with dry run, optimistic locking, audit events, and regenerated agent files; nexus status|diff|push|reset|stash separate content files from projection files generated from settings
- GitHub CLI profiles (ADR-0116): per-user default gh profile with per-project override, used by nexus run sessions; AI attribution control keeps Co-Authored-By trailers out of commits by default
- Runtime-neutral spec (ADR-C04): project, agent, directive, and actor data exported in a runtime-independent shape; generated AGENTS.md / CLAUDE.md point to directives.md instead of repeating every directive
- Reworked team member assignment, Git & GitHub panel in the project wizard, and stacked Model Execution modes
- Performance: local session verification in middleware (landing page Lighthouse score 82 to 99), smaller client bundles, faster agent-file export, and new composite indexes
- Security hardening: CI secret scanning with gitleaks default rules, admin-only AI node compose routes, fail-closed environment detection, project-membership checks on dashboard reads, sanitized API errors, and stricter project copy, document move, and git_config validation
- Tool versions: nexus-cli v0.28.x (run, env, status, diff, push, reset, stash)
v0.13.0ReleasedSeptember 2026
AI Model Gateway: BYOK, Model Catalog Rebuild, Routing Lab & Gateway Operations
- BYOK provider credentials (ADR-0096): bring your own OpenRouter, Anthropic, or OpenCode Zen key, encrypted at rest, with explicit audited per-project billing bindings replacing token-creator inference
- Model Catalog rebuild (ADR-0097, ADR-0100): Registry (curated, routable) vs. Discover (raw upstream feed) split, nightly OpenRouter + models.dev sync via pg_cron, OpenCode Zen as a first-class aggregator, catalog drift logging
- Routing Lab (ADR-0104): evidence-based model suitability scoring from LiveBench, LMArena, and Nexus-run scenario fixtures, weighted by source trust/precedence -- quality, cost, and latency shown as separate honest lenses, never a fabricated single score
- Gateway Operations: Route Simulator with live-apply confirmation, per-project Route Decision audit trail, and platform-admin Cost Reconciliation against the provider's own usage/credit ledger
- Security & data-integrity hardening: atomic credential/skill/evidence writes, standardized API error sanitization, outbound request timeouts, a cache-invalidation race fix, and a closed project re-parenting authorization gap
v0.12.0ReleasedAugust 2026
Confidentiality Framework, Feature Flags, Audit & Operational Tooling
- Confidentiality-Aware Action Gating Framework (ADR-0079): extensible policy table with allow/warn/block outcomes, Textract extraction gating for medium-severity projects
- Override Audit Trail: permanent audit events with actor, IP, timestamp, structured payload, flag management workflow
- Admin Audit Log with search, severity/flag filters, event detail view, SIEM export (NDJSON + CEF)
- Per-user Feature Flags: time-limited, revocable flags (textract_extraction, knowledge_graph, llm_bridge, ci_bridge) with admin toggle UI
- AWS Textract integration: document text extraction with async polling, confidentiality gating, feature-flag controlled access
- Platform Settings: tenant management (name/slug editor), SIEM token management, tabbed layout
- Editable user profiles: inline name/nickname editing, password change (email auth), profile security section
- Environment architecture: three-file env model (.env.shared + .env.staging + .env.production), env-switch script
- Deploy pipeline via Makefile: db-push + build + netlify deploy with message, staging/production targets
- Observability: Sentry environment + release correlation, S3 structured error logging, sentry-test pipeline
- Resend staging safety: safeSend() wrapper with [STAGING] subject prefix and recipient allowlist
- Centralized error logging: all API routes migrated from console.error to logError/logWarn/apiError
- createClient to createServiceClient migration: all data queries use service client, eliminating stale JWT failures
- Staging fixtures: seed-users (4 test users), seed-directives (16 prod snapshot), seed-platform (skills, baselines, demo data)
- Ingest document favorites: generic user_favorites table, star button, starred quickfilter pill
- Workspace sync API: ws_push (push local changes as new fork), af_status (hash comparison)
- Landing page: server-side auth resolution, tree picker navigation, dynamic Textract messaging
- Tool versions: nexus-cli v0.14.x (push, stash, status, origin guard, NEXUS_API_URL env override)
v0.11.xReleasedJuly 2026
Platform Hardening, Design System Foundation, and Public Portal Clarity
- Security hardening: OWASP-aligned audit, response headers (X-Frame-Options, CSP, Referrer-Policy), dependency vulnerability remediation, unprotected endpoint cleanup
- Component consolidation: StatusBadge, InfoPanel, and format utilities centralized; 6 duplicated components and ~200 lines of scattered code eliminated
- Design System foundation: all shared components dark-mode ready, 46-entry status color map, InfoPanel with 4 semantic variants (info/warning/error/success)
- Design System Bootstrap documentation (ADR-0068): component inventory, token reference, usage conventions, and agent onboarding strategy
- Public portal clarity refinement: FAQ restructured with depth labels, section reorder (product→workflow→technical), transition bridge, and gradual adoption path
- /why-nexus product story page: 11-section editorial page with landing-page design language: problem→comparison→capabilities→workflow→use cases→adoption→trust→FAQ gateway
- Landing page grid balance: BYOH 2-col promotion card, differentiated Dispatch/Cost copy, Actor strengthening, footer spacing fix
- Team Governance FAQ: 5 new items covering RBAC, ADR voting, delegated agent identity, notifications, and permission scoping
- Private AI Control Plane: strengthened FAQ positioning as operational infrastructure layer, not just hardware dashboard
- Cross-page consistency: pricing values centralized via TIER_DEFINITIONS, legacy terminology fully migrated (Vault Letters→Dispatch)
- Technical content routing: deep FAQ answers shortened with documentation links for volatile implementation details
- Performance: ISR for public pages, critical CSS inlining, Cache-Control on 68 API routes, next/image migration across 26 files, N+1 and waterfall fixes
- Session guard plugin: nexus-session-guard enforces session-append discipline after code-changing operations
- Cost control: session metadata tracking (model, toolstack, machine_id), headroom context compression, RTK output filtering
v0.11.0ReleasedJuly 2026
Cross-Project Knowledge Browser & Coordination Dashboard
- Cross-project Decision Browser: /dashboard/decisions with ADR listing, status filter, and inline hybrid vector search
- Cross-project Session Timeline: /dashboard/sessions with status filter and semantic search over session entries
- Cross-project Dispatch Overview: /dashboard/dispatches with priority/status/type filters, source→target routing display
- API endpoints: GET /api/decisions, /api/sessions, /api/dispatches (RLS-scoped, paginated, project-enriched)
- Sidebar restructured: Sessions moved to Knowledge, Dispatches enabled under Coordination
- Search results enriched: customer logo, classification shield, entry timestamps
- Security: all search paths verified project-membership scoped, no cross-tenant data leakage
v0.10.0ReleasedJune 2026
Nexus Actors: Virtual Team Members, Model Routing & Dark Mode
- Nexus Actor System: first-class virtual team members with role profiles, model routing, avatar identity, and operational workflow instructions (ADR-0053, ADR-0054)
- 11 seed actors: 7 system templates + 3 personalized (Yuri, Max, Marina) + 1 promoted (Dan Data)
- Actor Management UI: list (Named/Templates split), detail (Runtime Profile capability card), edit (tabbed markdown sections with per-section source/preview)
- Project Wizard: "Agents & Actors" step with search-autocomplete multi-select
- Actor promotion flow: template → named workspace actor with personalized avatar + vita
- Model Route Catalog (ADR-0055): 28 routes across 5 provider groups (Copilot, Local, Zen, Direct, Free) with lifecycle metadata
- Model Routes admin page with CRUD, inline edit, icon-prefixed custom dropdowns, search filter
- Generated actor files in nexus pull: .nexus/actors/*.md (YAML frontmatter + operational body), actors.json, AGENTS.md injection, opencode_agents export
- Actor-aware Dispatch routing: to_actor resolves via actors.slug
- Dark Mode MVP: class-based toggle, ThemeProvider, user menu switch
- Session timeline cleanup: cost_snapshot entry type + server-side dedup (92% noise reduction)
- DiceBear avatar system: deterministic generation, S3 cache, regenerate preview
- Scan skills: @actor-slug recommended actor sections
- Tool versions: nexus-mcp v0.9.0, nexus-cli v0.9.2, nexus-link v0.8.7
v0.10.xReleasedJuly 2026
Headroom Integration, Cost Control & Workspace Enhancements
- nexus-headroom-intercept v0.5.9: 72 compression policies, transform mode, production-hardened (7 security/correctness findings resolved)
- Headroom config UI: per-project mode/preflight/retrieval settings, .nexus/env sync via nexus pull
- Cost Control panel: headroom stats, cache read/write/savings metrics, token usage summary
- Named Workspace Forks: custom fork names on creation and edit (decoupled from blueprint name)
- Experimental badge: actor-based agent mode marked as alpha with info dialog
- Email management: send direct email to users, branding aligned with Supabase templates
- Project detail redesign: 4-column config grid, actor UI improvements, classic-mode 2-box layout
- RTK fix: skip native Rust module filters in TOML generation
- Task MCP extensions: task_update (title/description), task_delete, task_note fix
- PDF export: fontsource CDN pinning, IBM Plex Mono italic, structured error handling
- Preflight API: /api/mcp/projects/:id/preflight for headroom plugin activation gate
- Headroom enabled for all projects via migration with best-practice defaults
- Tool versions: nexus-mcp v0.10.1, headroom-intercept v0.5.9
v0.9.xReleasedJune 2026
Nexus Dispatch, Documentation Site & Skill Refinement
- Vault Letters promoted to Nexus Dispatch: canonical product concept for Nexus-native routed agent work (ADR-0052)
- Clean-break data model: dispatches + dispatch_messages + dispatch_participants tables
- 8 Dispatch types: question, bug_report, implementation_request, review_request, decision_notice, blocker, status_update, handover
- 9-status lifecycle with enforced transition rules: open, acknowledged, in_progress, needs_review, resolved, closed
- 13 new dispatch_* MCP tools: create, reply, inbox, outbox, ack, assign, forward, resolve, close, sweep, get, related + vl_* compat aliases
- Dedicated documentation site at docs.nexus.gatewarden.eu (tailwind-plus-protocol template, MDX, FlexSearch)
- Grill Me skill (/nexus-grill-me): upstream-preserving wrapper with depth control and output routing
- Dispatch skills: /nexus-dispatch-sweep replaces /nexus-vl-sweep, /nexus-dispatch for structured creation
- Document classification: email and chat_message types, per-classification icons, row context menu
- Actor registry auto-seed: trg_seed_project_agent trigger on project creation
- Tool versions: nexus-mcp v0.9.0, nexus-cli v0.8.0, nexus-link v0.8.7
v0.8.0ReleasedJune 2026
Compose Management, C&C Security & Node Control
- Compose YAML management API: read, edit, atomic write, docker compose up -d, and SSE log stream via nexus-link-service
- C&C channel security (ADR-0051): dedicated nxs_cmd_* token + Ed25519 signed write commands + AES-256-GCM proxy encryption
- Dual-token registration wizard: node token (telemetry) + command token (compose control), shown once with copy command
- Auto-detected private IP as service endpoint; WireGuard/LAN deployments need no manual DNS setup
- Compose tab on node detail page: YAML editor, Save & Commit, Activate Config, live SSE log viewer
- AI Hardware info sidebar: two-token model, WireGuard guidance, security status, docs placeholder
- Rotate-cmd endpoint for immediate command token rotation (no grace period)
- nexus-link v0.8.0: compose handlers, refresh-cmd CLI, core::network module, pre-commit hooks
- Fixed: dashboard-configured node names preserved on CLI claim (no hostname override)
- Unified TagChipInput component replacing all comma-based tag inputs across all forms
v0.7.0ReleasedJune 2026
Local LLM, Plugin Marketplace, and Project Intelligence
- DGX Spark local LLM integration: Qwen3-14B deployed via vLLM + LiteLLM + Caddy on NVIDIA GB10
- Plugin Marketplace: dedicated catalog page with free (compaction+, cost-control) and alpha tiers (vault-shield, knowledge-graph, llm-bridge, ci-bridge)
- Licensing rework: self-hosted = full Pro features for free, no license key, no phone-home
- Project Intelligence Layer positioning: Nexus sits upstream of agent execution as the governance brain
- Project-scoped skills and agent files (ADR-0044): nullable project_id FK, RLS-enforced isolation
- Grid/tile view toggles for skills, agent files, and projects with localStorage persistence
- Security + performance scans with auto-ingest: scan reports automatically stored as knowledge docs
- CLI v0.7.0: provider passthrough fix (serde_json::Value), 237 tests, GitHub Release rebuilt
- 13 core skills including nx-learnings, nx-sec-scan v4, nx-perf-scan v4
- UI improvements: filter widgets, read-only gold banners, wizard enhancements, bundle optimization
v0.6.10ReleasedMay 2026
Git Identity Guard
- Per-project git identity config (user.name, user.email, signingkey, commit.gpgsign)
- Project wizard: collapsible Git Identity section in the Agent step
- CLI: nexus git verify / nexus git apply commands
- Auto-apply git identity on nexus init and nexus pull
- AGENTS.md / CLAUDE.md: auto-generated GIT IDENTITY section
- Default directive: all knowledge artifacts must be written in English
- Fix: plugin TUI deadlock (migration 0083, fire-and-forget showToast in DB)
v0.6.9ReleasedMay 2026
Workspace Management & Shadow Mode
- Workspace shadow mode toggle: git-exclude workspace files via .git/info/exclude
- Shadow mode un-deprecated: root-level agentic files still need git-exclude management
- Auto-generated script files: new forks receive boilerplate shell scripts from blueprint or defaults
- Upstream sync info box and Ignore & Decouple from upstream
- Shared LineNumberedEditor with JSON and bash syntax highlighting
- Blueprint edit and detail view upgrade with syntax-highlighted editors
- Fork-impact dialog on blueprint save
- New baseline: Minimal K8s/Tilt; new flavor: Go (Expert)
- CLI v0.6.9: nexus workspace shadow on|off|status, auto-apply git-exclude on pull, 211 tests
v0.6.8ReleasedMay 2026
Smart Agent File Generation & Sync Protocol
- Smart agent file auto-generation (ADR-0036): AGENTS.md and CLAUDE.md with project-specific content
- Content hash & sync protocol: SHA-256 drift detection, bidirectional sync MCP actions
- Override source tracking and confidentiality-aware agent files
- Sync badges in agent files manager with per-file status
- CLI v0.6.8: nexus status, nexus push, nexus reset with content hash tracking
v0.6.7ReleasedMay 2026
Workspace Pull Fix: PAT-Authenticated Export
- ws_export MCP action for workspace fork export with PAT authentication
- Backup/restore script for pull-managed agentic files
- Fixed workspace pull 404 for CLI users
v0.6.6ReleasedMay 2026
Workspace 2.0: Blueprint + Fork Architecture
- Workspace Blueprints: first-class entities composed from Baseline (core tools) + Flavor (language toolchain)
- 5-step creation wizard: Type → Baseline → Flavor → Post-Init Script → Metadata
- Project Forks: deep-copy forks of blueprints with upstream-change detection via DB triggers
- Curated catalog: 6 baselines (Minimal, DevOps, AWS/GCP/Azure Cloud, Docker/K8s) and 6 flavors (Node.js/TS, Rust, Python, Go, PHP, Nexus Dev)
- Version tracking: blueprint updates bump version and flag all downstream forks
- New dashboard pages: /dashboard/workspaces (list, create, detail) and refactored project workspace view
- Fork export API: POST /api/projects/:id/workspace-forks/:forkId/export for CLI consumption
- CLI v0.6.6: v2 fork export with v1 fallback, upstream-changed awareness, shadow/direct mode indicators
v0.6.5ReleasedMay 2026
FAQ redesign, plugin detail pages, and content refresh
- FAQ page redesign: grid layout with sticky sidebar, category navigation, and CTA card
- Plugin detail pages: /tools/plugins/[slug] with full feature breakdown, hooks, tools, and GitHub repo link
- Plugin table on tools page: data-driven from centralized plugin registry
- FAQ + Docs content refresh: import workflow documented, .nexus workspace cache explained
- Navbar cleanup: removed vertical pipe divider between nav sections
- MCP server version bumped to v0.8.5 (48 tools) across all public pages
v0.6.4ReleasedMay 2026
Shadow mode, .git/info/exclude, and CLI hardening
- Shadow mode: nexus shadow on/off/status manages agentic file exclusions via .git/info/exclude
- .git/info/exclude: .nexus/ exclusion managed via .git/info/exclude instead of .gitignore
- nexus deinit: cleanup of .git/info/exclude entries alongside workspace removal
- .gitignore migration: existing .nexus entries automatically moved to .git/info/exclude
- CLI v0.6.4 with 205 passing tests
v0.6.3ReleasedMay 2026
Skill resources, agentic file import, and .nexus exclusive root
- Skill resources: multi-file support with CRUD API, accordion UI, and version snapshots
- Auto-generated YAML frontmatter on MCP skill export (not stored in DB)
- Agentic file import: nexus import scans repos for existing CLAUDE.md, AGENTS.md, .cursorrules, copilot-instructions.md and imports them into the linked Nexus project
- Import API: batch endpoint for agentic files, directives extraction, and referenced doc ingestion
- Dynamic cross-references: af_export appends customer repository context block when imported files exist
- Source/Preview toggle always visible on all document views
- Shared VersionHistory, VersionBanner, DocumentMeta, VersionControls components
- .nexus as exclusive agentic root: .claude/ is never written by Nexus (ADR-0027, supersedes ADR-0024)
- CLI: conflict detection replaced with informational import hint for existing .claude/ files
- Project wizard simplified: agentic root toggle removed, .nexus is always used
v0.6.2ReleasedApril 2026
License tier refactoring and per-user licensing groundwork
- License tier consolidation: 4 tiers → 3 (Community/Pro/Enterprise) with monthly pricing
- Per-user license tables (user_licenses, user_license_history) with RLS; enforcement in v0.7.0
- Community tier gate in project wizard: team members disabled with upgrade banner
- License page: 3-column plan comparison with monthly pricing
- ADR-0025: License Tier Refactoring (supersedes ADR-0014)
v0.6.1ReleasedApril 2026
PDF export for ADRs and agent skill files
- PDF export button on ADR/Decision detail pages with S3 caching
- New OpenCode skill definitions for agent-assisted workflows
- Compaction plugin session ID capture fix
v0.6.0ReleasedApril 2026
Security hardening, PDF export, and performance
- Comprehensive security audit: IDOR fixes, open redirect prevention, SVG sanitization, error hardening
- PDF export for ingest documents with S3 caching and one-click download
- Ingest classification UX: quick-classify, bulk-classify, and promotion tracking
- Database aggregation RPCs and query parallelization across all major pages
- Centralized project access verification (~283 lines of duplication removed)
- Markdown XSS protection via rehype-sanitize
v0.5.0ReleasedApril 2026
Document management, vector search, and onboarding
- Document management: upload, organize, and version documents per project with S3/CloudFront
- Vector-DB support: semantic search across documents using pgvector embeddings
- OCR and agentic meta-analytics: AI-powered text extraction, metadata tagging, and categorization
- Demo license request flow for new users to explore the platform before committing
- Community showcase: read-only sample project with example ADRs, sessions, and documents
- Early Access landing page and FAQ section based on developer survey responses
- Revised pricing model, consolidated to Community, Pro, and Enterprise tiers
v0.4.0ReleasedApril 2026
Devbox integration, skill lifecycle, and entity reviews
- Devbox integration: interactive developer shell with module system for local dev and deployment
- Skill lifecycle management: full CRUD with versioning, review workflow, and project assignment
- Agent file management: versioned agent configs with review pipeline and tenant-scoped access
- Entity review system: structured workflow for skills and agent files with inline comments and audit trail
- Notification subscription system: per-user preferences for ADR changes, session summaries, and letters
- Performance: N+1 query elimination, batch loading, CLI stabilization, MCP expanded to 48 tools across 14 endpoints
v0.3.7ReleasedApril 2026
Skill editor UX overhaul
- Source-first editing: skill editor opens in markdown source view with segmented Source/Preview toggle
- Integrated upload: .md upload button moved into the editor toolbar
- Tags relocated from markdown area to settings/control pane
- Status badge right-aligned in actions bar alongside Edit/Save/Cancel
- Danger Zone: archive/unarchive + permanent delete with slug confirmation
- DELETE /api/skills/[id]: cascading deletion of tags, commands, versions, assignments, reviews
- Downloadable skill blueprint template on S3/CloudFront
- 7 new default tags: Workflow, Code Quality, DevOps, Testing, Documentation, Agent, Init
v0.3.6ReleasedApril 2026
Code audit, security fixes, and dead code cleanup
- MCP auth: fixed profile lookup bug (wrong column) and actor identity (surrogate PK vs auth UUID)
- Security: decision links DELETE now scopes by decision_id; 7 API routes guard request.json()
- Query parallelization: 6 dashboard pages + license quota check via Promise.all
- Replaced framer-motion with pure CSS keyframes (~130KB removed from client bundle)
- Removed 4 unused npm deps (zod, dayjs, react-use-measure, framer-motion)
- Deleted ~64 template placeholder assets across 12 directories
- Dead code removal: proxy.ts, dead CSS keyframe, no-op useEffect
- Added root not-found.tsx (branded 404) and error.tsx (root error boundary)
v0.3.5ReleasedApril 2026
Code quality, performance, and consistency fixes
- N+1 query elimination: letters and sessions list pages batch-fetch counts in a single query
- Query parallelization: customer detail page runs 3 independent queries via Promise.all
- Safe error handling: shared toApiError() utility replaces 29 unsafe casts across 13 API routes
- Unified status styles: 7 duplicate STATUS_COLORS maps consolidated into single shared module
- Dashboard loading skeleton: new loading.tsx provides shimmer placeholder during RSC navigation
- Explicit column selects in skills API GET; removed debug console.log from DELETE endpoint
- Error observability: 5 silent catch blocks now log warnings for easier debugging
v0.3.4ReleasedApril 2026
Skill versioning, markdown editing, and UI refinements
- Skill version history: view/switch between all version snapshots on the detail page
- Create new version workflow: checkbox saves as new version, resets to draft for review
- Markdown upload: .md/.txt file import in skill edit mode with frontmatter extraction
- Custom command slug: editable command name when auto-generate is enabled
- Clickable skills: management table and project skills view link to detail/edit page
- Governance widget: redesigned Accept/Reject buttons, joined vote group, right-aligned controls
- New GET /api/skills/[id]/versions endpoint + PATCH with create_new_version and command_slug
v0.3.3ReleasedApril 2026
Performance hardening and architecture cleanup
- Query parallelization: dashboard, project detail, decision detail (200-400ms latency reduction)
- N+1 elimination: getProjectsWithStats (4N→4), getCustomerSummaries (N→1), skills export (N→1)
- Error boundaries: global-error, dashboard/error, projects/[id]/error with retry + fallback nav
- Explicit column selection: 10 high-value .select('*') replaced with explicit column lists
- Dead code cleanup: 10 unused component files removed (~3,000 lines)
v0.3.2ReleasedApril 2026
Governance, UX polish, and billing foundation
- ADR Governance Widget with lifecycle actions + community voting
- Change Request flow for accepted ADRs (supersedes)
- Directive priorities (high/medium/low) and optional body
- Skills table with skill_id-first layout and version-pinning dropdown
- License page: Enterprise styling, plugin line items, storage add-on
- Top navigation progress bar for route transitions
- DangerZone: slug-based delete confirmation
- Planning feature deferred to v1.0
- Architectural + performance audit with 7-category findings report
v0.3.1ReleasedApril 2026
Stack stabilization, CI/CD, and CLI release
- nexus-cli v0.3.0: install.sh, preflight, shadow mode, upgrade, --yes
- CLI CI/CD pipeline (4 targets: aarch64/x86_64 macOS + Linux)
- MCP CI (Node 20+22 matrix) and npm release workflow
- @gwdn/nexus-mcp v0.8.5 published to npm
- 48 MCP tool actions across 14 endpoints
- 55 API routes (up from 43)
- Comprehensive README updates for CLI and MCP
v0.3.0ReleasedApril 2026
Skills, decisions, sessions, and governance workflows
- Skill management: create, review, version, assign to projects
- Command auto-generation from skills
- ADR decision lifecycle (draft, review, accept/reject)
- Session UI with user attribution and markdown rendering
- Decision voting (up/down) with RLS-scoped visibility
- License model (Community/Pro/Enterprise) with quota gauges
- Project directives system (8 categories, CRUD)
- Entity tags and decision attachments/links
- Project star/favorites system
v0.2.0ReleasedApril 2026
Landing page redesign, CRUD forms, and quality improvements
- Hero banner with gradient background and version pill
- Public navigation with dark sign-up button
- Roadmap page with timeline and sidebar
- New Project and New Customer creation forms
- POST /api/projects endpoint
- Admin-request widget on empty-state pages
- 46 audit findings resolved (type safety, rate limiting, pagination)
v0.1.0ReleasedApril 2026
Initial platform launch
- GitHub OAuth + automatic profile creation
- Project-scoped RBAC (admin, editor, reviewer, viewer)
- Long-term memory: sessions, decisions, research, letters
- MCP server with 11 tools across 3 layers
- API key system for delegated agent access
- Customer, contract, and SOW management
- S3 document storage with CloudFront delivery
- Transactional email via Resend
- Netlify deployment with CSP + HSTS hardening