Changelog

All notable changes to loci.

v1.2.0 (2026-05-03)

Security hardening release.

Security: Content sanitisation before IndexedDB storage (strips scripts, normalises HTML)
Security: Message validation on all internal message passing (prevents injection via malformed messages)
Security: Strict CSP in extension manifest
Docs: Added INSTALL.md with build-from-source instructions
Docs: Added /security page documenting the full security model
Fix: Service worker index restoration now validates stored JSON before loading

Prompted by Cipher security review.

v1.0.0 (2026-05-03)

Initial public release.

Extension: Chrome MV3 extension with MutationObserver-based collection
Extension: Support for Claude.ai and ChatGPT
Extension: MiniSearch 7.x local search index
Extension: Command-K overlay for quick search
Extension: Persistent side panel with tag management
Desktop: Tauri v2 app skeleton (Mac + Windows)
Server: MCP server exposing rooms as tools (localhost:3721)
Monorepo: Unified packages/ structure (extension, desktop, server)
Landing: loci.garden v3 with Scholar/Wizard/LLMAGE paths
Docs: VitePress documentation site

v0.0.1 (2026)

Concept phase.

Original loci methodology documentation
loci.garden domain registration
llms.txt specification draft
Memory palace concept validation

Versioning

loci follows Semantic Versioning:

Major (1.x.x): Breaking changes to storage format or MCP API
Minor (x.1.x): New features, new platform support
Patch (x.x.1): Bug fixes, security patches

Extension and desktop app versions are kept in sync.