Canvas Notebook 2026.6.6.1

Highlights

• Adds first-run owner setup, bootstrap admin migration fixes, account password changes, and CLI admin password recovery.
• Adds Telegram media attachment delivery, typing feedback, voice transcription integration, and cleaner Telegram formatting.
• Improves PI/browser tooling with isolated persistent browser sessions, safer browser evaluation, PDF reading and image extraction, large message projection, and repeated tool failure guards.
• Adds Marp slide preview/image export, in-app PDF viewing, public Excalidraw previews with local edits, and notebook panel resizing improvements.
• Improves automation heartbeat context, startup readiness behavior, primary channel links, MCP OAuth, and MCP registry access.
• Bumps Canvas Notebook and CLI version to 2026.6.6.1.

Verification

• npm run build

Canvas Notebook 2026.6.1.3

Changes since v2026.6.1.2:

• Fix automation prompt persistence.
• Fix mobile agent settings controls.
• Update package metadata, Electron build metadata, and CLI version to 2026.6.1.3.

Canvas Notebook 2026.6.1.2

Canvas Notebook Release 2026.6.1.2

Datum: 2026-06-01
Basis: v2026.6.1.1
Vergleich: v2026.6.1.1..v2026.6.1.2
Funktionale Commits seit dem letzten Tag: 28

Highlights

• Public Sharing: oeffentliche Dateifreigaben mit Security-Uebersicht, Revoke-Flow, Tool-Icon, responsivem Layout und neuen Short-URLs.
• Excalidraw: neuer Datei-Editor, Mermaid-Import, Diagramm-Seed-Skill, Sync bei externen Datei-Aenderungen sowie stabilere Preview-/Reload-Flows.
• Agent- und Browser-Tools: neue Browser-Evaluate-Action, native Websuche statt Brave-Skill, gefilterte aktive Composio-Verbindungen und stabilerer Channel-Runtime-Import.
• Chat-, Datei- und Todo-UI: Notebook-Preview aus Chat-Dateilinks, Fullscreen-Chat-Verhalten beim Dateioeffnen, mobile Todo-Filter und Deep-Link-Fixes fuer Benachrichtigungen.
• Settings und Automationen: Security-Tile auf Home/Settings, bessere Public-Shares-Mobile-Seite, Heartbeat-Zeitzonen-Dropdowns und Working-Hours-Defaults.

Nutzerwirkung

• Geteilte Dateien koennen kuerzer verlinkt, zentral geprueft und bei Bedarf direkt widerrufen werden.
• Excalidraw-Dateien lassen sich umfassender bearbeiten und bleiben bei externen Aenderungen synchroner.
• Mobile Chat-, Todo- und Settings-Flows reagieren stabiler und navigieren praeziser in die richtigen Ansichten.
• Agent-Integrationen und Browser-Aktionen sind robuster, besonders bei Runtime-Imports und aktiven Composio-Verbindungen.

Release- und Build-Aenderungen

• Root-App-Version in package.json und package-lock.json: 2026.6.1.2.
• Canvas Notebook CLI-Version in install/bin/canvas-notebook und install/lib/shared/output.sh: 2026.6.1.2.
• Der Tag v2026.6.1.2 triggert die bestehenden GitHub-Actions fuer Container- und Desktop-Builds.

Validierung

• npm run build

Hinweis: Der Build ist erfolgreich. Turbopack meldet weiterhin bestehende Warnungen zu breiten dynamischen Dateipfaden in app/lib/agents/system-prompt-shared.ts und app/lib/agents/storage.ts.

Commit-Uebersicht

• 7385d34f Add short URLs for public file shares
• 996247f1 Avoid Excalidraw reload flashes
• 9749f6c5 Fix duplicate image preview navigation
• a32f354f Add browser evaluate action
• 94bdf538 fix
• 9c3c87f5 Add public share tool icon
• 9c30afed Add security tile to home settings
• 0c18efc0 Fix mobile notification chat deep link
• e4c48514 Improve mobile public shares security page
• 241b8662 Add public share revoke flow
• c3b8e24f Fix public sharing responsive layout
• c1229c75 Collapse fullscreen chat when opening files
• 2a5d8404 Sync Excalidraw on external file changes
• e4f7e598 Tighten chat context status label
• 7afe85aa Add public file sharing
• b810351a Add Mermaid import to Excalidraw editor
• b4383bfc Use dropdowns for heartbeat time zones
• 83b82ffe Add Excalidraw diagram seed skill
• a2547da5 Hide Excalidraw save-to menu item
• f487aa70 Add Excalidraw file editor
• 1d87ca27 Add heartbeat working hours defaults
• 79c53db0 Replace Brave skill with native web search
• 59a444fa Defer channel runtime import during websocket startup
• 563f2305 Fix German umlauts in settings UI
• 14166447 Optimize todo mobile filters
• e62c3f31 Fix studio prompt handoff to create
• cc2d76c2 Show notebook preview from chat file links
• 6f78161a Filter Composio connections by active status

Canvas Notebook 2026.6.1.1

Canvas Notebook Release 2026.6.1.1

Datum: 2026-06-01
Basis: v2026.5.30.2
Vergleich: v2026.5.30.2..v2026.6.1.1
Funktionale Commits seit dem letzten Tag: 77

Highlights

• Human-Todo-Workspace: neue Todo-Persistenz, API-Routen, Workspace-App, Agent-Tool fuer menschliche Rueckfragen, Notification-Bell und Follow-up-Flow nach Todo-Abschluss.
• Agent-Konfiguration: personalisierter Agent-Dialog, Agent-Avatare, Icon-Metadaten, Capability-Overrides, Modell-Overrides und stabilere Verwaltung der Agent-Dateien.
• Prompt- und Session-Stabilitaet: eingefrorene PI-Session-Systemprompts, getrennte Base-Prompts/Overlays, spezialisierte Tool-Hinweise und robustere Chat-Session-Persistenz.
• Browser- und Datei-Tools: managed Browser-Gateway, aufgeteilte Browser-Services, Browser-Runtime-Resolver, sichere Agent-Dateioperationen und Batch-Pfadoperationen.
• Automationen: Custom-Webhook-Automationen, Heartbeat-Konfiguration in den Agent-Settings und fixes fuer Intervall-Rescheduling.
• Migration und Export: VM-Migration-Import/Restore-Flow, zentrale Komponenten-Pfadzuordnung und verbesserter Markdown/PDF-Export mit aktuellem Dateinamen.
• UI/Mobile: mobile Settings-, Agent-, Chat-, License- und Toast-Optimierungen, Login-Passwortsichtbarkeit, Settings-Tile auf Home und lazy Settings-Tabs.
• Runtime und Plattform: Turbopack fuer den Dev-Server, non-major Dependency-Updates, Node-26-Warning-Silencing, Migration auf @earendil-works/* PI-Pakete und stabilere Server-Startup-Aliases fuer ESM-only Pakete.

Nutzerwirkung

• Teams koennen offene menschliche Rueckfragen jetzt als eigene Todo-Arbeitsflaeche verfolgen und direkt aus Agent-Flows heraus erstellen, lesen und nachverfolgen.
• Agenten lassen sich praeziser konfigurieren, wiedererkennen und mobil bedienen; bestehende Sessions behalten dabei ihren eingefrorenen Systemkontext.
• Chat- und Follow-up-Flows reagieren stabiler bei neuen Chats, Todo-Wechseln, finaler Persistenz und parallelen Follow-up-Queues.
• Self-hosted Instanzen bekommen bessere Update- und Runtime-Kompatibilitaet fuer Node 26, die neuen Earendil-Pakete und seed-skill Syncs.

Release- und Build-Aenderungen

• Root-App-Version in package.json und package-lock.json: 2026.6.1.1.
• Canvas Notebook CLI-Version in install/bin/canvas-notebook und install/lib/shared/output.sh: 2026.6.1.1.
• Electron Desktop-Version synchronisiert: 2026.6.1 mit buildVersion 2026.6.1.1.
• Der Tag v2026.6.1.1 triggert die bestehenden GitHub-Actions fuer Container- und Desktop-Builds.

Validierung

• npm run build

Commit-Uebersicht

• 102a4531 Hide Microsoft email OAuth option
• a9264599 Fix first send in new chat
• ee825b76 Improve agent tool activity icons
• 8601c08b Add integration settings accordions
• cfedf5b0 Move heartbeat into agent settings
• c552fdd6 Add custom webhook automations
• b7e9ab57 Add agent icon metadata
• 29a1fca2 Move heartbeat file editor into heartbeat settings
• 766f4d55 Add personalized agent creation dialog
• 6272f215 Show agent avatars in chat sessions
• c4bb2006 Refactor chat history session rows
• 796b6062 Lazy load settings tabs
• 7dc39dac Refactor agent creation file editor
• b899a385 Make agent managed files collapsible
• f26bec72 Remove identity managed prompt file
• 35809bd4 Freeze PI session system prompts
• bd78d9c2 Optimize agent creation dialog loading
• cf036e06 Add settings tile to home
• 855cfaeb Improve usage summary layout
• 4f29db89 Separate base agent prompt from overlays
• 45f4c4f4 List specialized agent tools in prompts
• a9a475d8 Add Telegram channel prompt guidance
• 674dde73 Optimize settings tabs for mobile
• cf4ad9d8 Improve mobile chat agent controls
• 4d6a056e Optimize agent settings for mobile
• af625c28 Add agent connection logos
• 217a0a68 Fix canvas agent chat lint warnings
• 316a57d9 Fix mobile toast layout
• e148ea6e Optimize license settings on mobile
• bb109980 Add login password visibility toggle
• 48039b2d Unify chat history panel
• 570a6b9c Improve agent abort handling
• 65f6e372 Fix interval heartbeat rescheduling
• 8b7ec800 Fix chat context window meter
• f882c5e5 Add browser runtime resolver
• 781a38c9 Remove browser seed skill
• 8d954563 Add managed browser gateway tool
• 0e6db057 Split browser gateway services
• 3345bf70 Improve markdown PDF download
• 7c0a758e Use current file name for PDF export
• e8b2262b Add agent capability overrides
• acc03a95 Extract agent capability option services
• f581a13f Add create agent model override
• a8391b4e Add safe agent file edit tools
• a8bb13a1 Add VM migration import and restore flow
• d9cc8450 Centralize migration component path mapping
• f2e2760f Add agent path operation tools
• dc7c7cf2 Fix mobile settings overflow
• e2267194 Support batch agent path operations
• e9ba7d9f Add todo notification center plan
• 31c5f48e Document human todo prompt guidance
• 241133c3 Refine todo archive and read behavior plan
• 80f1dc45 Add mark unread session action
• 0f716b9d Extract reusable chat dock shell
• 53d4a2f4 Add todo persistence layer
• f4a019a2 Add todo API routes
• 384c2b1e Add todo workspace app
• 3a7fb24b Add human todo agent tool
• ba39fcb7 Add notification bell
• fb676f64 Open workspace file links in preview
• 6ddb3d2a Add image preview skeleton loading
• dc4f7ae7 Localize default todo categories
• 9e1c1d53 Add todo completion follow-up flow
• e7da8e6c Guard final chat persistence errors
• e2106746 Fix todo follow-up chat races
• edb9e395 Add chat websocket connection logging
• aae90794 Fix container chat websocket startup
• 33a51b14 Use Turbopack for dev server
• 700caea9 Open todo sessions without route refresh
• 74d5f412 Update non-major npm dependencies
• ea793ddd Silence Node 26 module register warnings
• 3a5ec2db Reduce chat console warning noise
• 4d171b91 Migrate Pi packages to Earendil scope
• 7a908311 Fix chat session persistence
• ed3b4c61 Keep notebook chat hidden on file select
• c0e66571 Fix busy chat follow-up queue rendering
• fbcbf668 Fix agent startup package resolution

v2026.5.30.2

Changes

• Add composer queue controls
• Fix email OAuth disconnect state
• Improve busy chat queue controls
• Fix chat stop button color
• Fix notebook restore races
• Fix automation studio tool user context
• Fix email subject MIME encoding
• Update single reference picker selection icon
• Build Electron on branch pushes

Verification

• npm run build

Canvas Notebook v2026.5.30.1

Full Changelog: v2026.5.29.1...v2026.5.30.1

Canvas Notebook v2026.5.29.1

Canvas Notebook v2026.5.29.1

Canvas Notebook v2026.5.29.1 rolls forward the 2026.5.28 release line with the latest settings, Studio, agent-provider, MCP, desktop, and release automation fixes.

This release also updates the package, Electron, and management CLI build metadata to 2026.5.29.1. The production build now keeps the CLI version injection repeatable, including the shared CLI output helpers used by installer and status commands.

Highlights

• Settings and onboarding fixes for hydration, managed provider selection, control-plane provider flow, runtime/tools accordions, and managed login help.
• Studio fixes for image reference uploads, thumbnail previews, Gemini model IDs, aspect-ratio editing, preview downloads, and create-flow transitions.
• Agent/runtime fixes for initial prompt model resolution, explicit model selection, managed model selection, startup process logging, and license onboarding/status diagnostics.
• Integration updates for MCP bearer-token storage, default MCP server enablement, unauthenticated HTTP MCP support, email OAuth refresh behavior, and untrusted email tool content handling.
• Release and operations improvements for macOS Electron signing, control-plane image-publish notification, redundant update recreate skips, and versioned CLI metadata.

Version Metadata

• App/package version: 2026.5.29.1
• Electron app version: 2026.5.29
• Electron build version: 2026.5.29.1
• Management CLI version: 2026.5.29.1

Upgrade Notes

For server installs, use the existing host CLI:

canvas-notebook update

Your workspace, database, skills, agent files, and secrets remain under /data and survive container updates.

Desktop downloads are attached to this release after the platform builds complete. The desktop app is a native shell for an already hosted Canvas Notebook instance; it does not store workspace data locally as the source of truth.

Validation

• npm run build
• bash -n scripts/inject-cli-version.sh
• bash -n install/bin/canvas-notebook
• bash -n install/lib/shared/output.sh
• git diff --check

Changelog

Full Changelog: v2026.5.28.6...v2026.5.29.1

Canvas Notebook v2026.5.28.6

Canvas Notebook v2026.5.28.6

Canvas Notebook v2026.5.28.6 is the refreshed production-ready release with the latest CodeQL security hardening included. It keeps the major v2026.5.28 release story intact: a self-hosted AI workspace with persistent agents, Studio workflows, local email OAuth, automations, integrations, and the new desktop app distribution path.

Security Update

This release adds a dedicated CodeQL hardening pass across API routes, file handling, OAuth flows, generated HTML responses, agent/session IDs, automation persistence, Studio output handling, and setup/runtime utilities.

Key fixes include:

• Escaped HTML in OAuth callback responses.
• Validated OAuth flow identifiers before using them in file paths.
• Replaced Math.random-derived session IDs with crypto.randomUUID().
• Hardened internal HTML-to-PDF rendering origin handling.
• Tightened file/path handling in Studio, upload, output, watcher, and automation code paths.
• Updated the algorithmic-art seed template to reduce unsafe inline behavior.

Highlights From The Production Release

Desktop App Builds

Canvas Notebook ships with an Electron desktop client for macOS, Windows, and Linux. The desktop app connects to your hosted Canvas Notebook instance, checks server health, remembers the server URL, opens external links safely in the system browser, keeps native window state, and supports desktop notifications for chat activity.

Release-tag builds now upload desktop installers directly to the matching GitHub Release. Starting with this release, desktop artifact filenames use the full Canvas build version.

Smarter Agents With Persistent Memory

Agents can use a dedicated persistent memory layer instead of ad-hoc file writes. Canvas Notebook stores curated agent and user memory under the agent storage model, keeps session summaries separate from long-term memory, and adds guardrails around memory size, duplicates, and secret-like content.

The agent runtime also includes session search and delegated ephemeral worker tasks, so agents can retrieve previous work and split focused subtasks while the main conversation stays coherent.

Production-Ready Self-Hosted Workspace

Canvas Notebook remains container-first: install once, keep /data persistent, and update from the host with canvas-notebook update. This release line also includes stronger stale-request handling, managed license certificate fetching, license activation copy improvements, and Node 24-ready GitHub Actions.

Local Email OAuth And Integrations

Local Google and Microsoft email OAuth can be configured from the app in addition to managed mode. Email account, draft, send, search, and policy routes are wired through the local service layer, with credentials managed through the integrations settings area.

Studio Workflow Improvements

Studio includes a reworked add-reference dialog, better mobile reference previews, fixed output downloads, and smoother handling for creative image/video/audio workflows.

What's Included

• CodeQL security hardening across server routes and runtime helpers
• Full-version desktop artifact filenames
• Electron desktop shell for hosted Canvas Notebook instances
• Native desktop chat notifications
• Release asset upload for desktop installers
• Persistent agent memory tool and storage model
• Session search and delegated worker tools
• Local Google/Microsoft email OAuth service support
• Studio reference and output workflow fixes
• Node 24-ready GitHub Actions
• CLI/package/electron build version 2026.5.28.6

Upgrade Notes

For server installs, use the existing host CLI:

canvas-notebook update

Your workspace, database, skills, agent files, and secrets remain under /data and survive container updates.

Desktop downloads are attached to this release after the platform builds complete. The desktop app is a native shell for an already hosted Canvas Notebook instance; it does not store workspace data locally as the source of truth.

Validation

• npm run lint
• npm run build
• Workflow YAML parse check
• CLI version injection check

Changelog

Full changelog since the previous release candidate: v2026.5.28.5...v2026.5.28.6

Feature-wave changelog since the last detailed 2026.5.28 release: v2026.5.28.1...v2026.5.28.6

Full Changelog: v2026.5.28.5...v2026.5.28.6

Canvas Notebook v2026.5.28.5

Canvas Notebook v2026.5.28.5

Canvas Notebook is now a production-ready self-hosted AI workspace for people who want their files, agents, automations, creative tools, and integrations in one private environment. This release turns the current 2026.5.28 feature wave into a production-ready release: stronger agent memory, a new desktop app path, local email OAuth, better Studio workflows, hardened deployment behavior, and release-ready desktop artifacts.

Highlights

Desktop App Builds

Canvas Notebook now ships with an Electron desktop client for macOS, Windows, and Linux. The desktop app connects to your hosted Canvas Notebook instance, checks server health, remembers the server URL, opens external links safely in the system browser, keeps native window state, and adds desktop notification support for chat activity.

Desktop installers are built by GitHub Actions for release tags and uploaded back to this GitHub Release. If you open the release immediately after publishing, the downloads may appear a few minutes later as the macOS, Windows, and Linux jobs finish.

Smarter Agents With Persistent Memory

Agents can now use a dedicated persistent memory layer instead of relying on ad-hoc file writes. Canvas Notebook stores curated agent and user memory under the new agent storage model, keeps session summaries separate from long-term memory, and adds guardrails around memory size, duplicates, and secret-like content.

The agent runtime also gained session search and delegation tools. Agents can search prior work more effectively and spawn focused ephemeral worker tasks for subtasks, while the main conversation keeps better control over context and follow-up work.

Production-Ready Self-Hosted Workspace

This release hardens the core hosted workspace experience: stale server-action posts are handled more gracefully, legacy agent IDs migrate more reliably, settings remember the active tab, managed license certificates are fetched automatically, and license activation copy is clearer for production deployments.

The VM and Docker deployment path remains the primary production route: install once, keep /data persistent, and update from the host with canvas-notebook update.

Local Email OAuth And Integrations

Canvas Notebook now supports local Google and Microsoft email OAuth configuration in addition to managed mode. Email account, draft, send, search, and policy routes are wired through the local service layer, with settings UI for provider credentials and clearer managed-vs-local behavior.

The Integrations area also continues to centralize API keys and runtime configuration so skills and tools can use configured providers without hardcoded secrets.

Studio Workflow Improvements

Studio received practical workflow polish: a reworked add-reference dialog, better mobile reference previews, fixed output downloads, improved generated-output actions, and continued support for image/video/audio-oriented creative workflows through the Studio surface.

Security, CI, And Release Infrastructure

This release includes dependency security fixes for SheetJS and PostCSS, a new SECURITY.md, CI install fixes, a Windows CLI version-injection fix, and updated GitHub Actions that use Node 24-compatible action runtimes. Electron release builds now run on v* tags and attach built desktop artifacts directly to the matching GitHub Release.

What's Included

• Electron desktop shell for hosted Canvas Notebook instances
• Native desktop chat notifications
• Weekly and tag-based Electron desktop builds
• Release asset upload for desktop installers
• Persistent agent memory tool and storage model
• Session search tool for agent context retrieval
• Delegated ephemeral worker tasks for agent subtasks
• Better automation delivery fallback behavior
• Local Google/Microsoft email OAuth service support
• Managed license certificate fetching
• Studio reference dialog and output download fixes
• Mobile reference-preview fixes
• Security policy and dependency advisory fixes
• Node 24-ready GitHub Actions
• CLI/package/electron build version 2026.5.28.5

Upgrade Notes

For server installs, use the existing host CLI:

canvas-notebook update

For fresh installs, use the one-line installer from the README. Your workspace, database, skills, agent files, and secrets remain under /data and survive container updates.

Desktop downloads are attached to this release after the platform builds complete. The desktop app is a native shell for an already hosted Canvas Notebook instance; it does not store workspace data locally as the source of truth.

Validation

• npm run lint
• npm run build
• Workflow YAML parse check
• CLI version injection check

Changelog

Full changelog since the previous release: v2026.5.28.4...v2026.5.28.5

Feature-wave changelog since the last detailed 2026.5.28 release: v2026.5.28.1...v2026.5.28.5

v2026.5.28.4

Full Changelog: v2026.5.28.3...v2026.5.28.4