v0.5.0 - Better Organization and Safer Upgrades

Inkstone 0.5.0 makes folders, notes, and tags work as one coherent organization system while strengthening upgrades, search, backups, sharing, uploads, and session security. Existing databases and legacy browser caches are migrated automatically through compatibility-preserving paths; no manual database command is required, and existing notes, folders, tags, attachments, sessions, and offline data are retained. As with every self-hosted update, keeping a current backup before deployment is recommended.

Added

1. A clearer, safer folder hierarchy. Folder pickers now show searchable nested paths, folder icons, and colors. New notes can inherit the current folder, folders can be created in context and reordered by drag and drop, and moves reject cycles, excessive depth, invalid sibling targets, and duplicate names. Deleting a folder promotes its children in place and moves direct notes to the parent without losing organization. Commit: ec15d12.

2. Context-aware note organization. Single-note and bulk move actions share the same hierarchical folder picker, recent and trash views retain their intended chronological order, and note lists and workspaces show full folder paths where the leaf name alone would be ambiguous. New notes preserve the folder context from which they were created. Commit: 95ea569.

3. Tag management directly in the sidebar. The separate tag-management page has been replaced by an inline New button and per-tag context menus for rename, color, and delete. Tag changes update immediately with rollback on failure, preserve unused tags, follow the active tag view safely, merge case-insensitive duplicates with confirmation, and update YAML Front Matter and body hashtags together while skipping code. Existing custom #RRGGBB tag colors remain compatible. Commits: 9b106db, 5e302ba, a9961ec.

4. A realistic MCP settings preview in Demo mode. The Demo now exposes the complete MCP settings surface as display-only content, with matching English and Chinese guidance and write operations still blocked. Commit: 6957c32.

Improved

1. Safer upgrades and account-local offline caches. Browser data is isolated by user so one account cannot inherit another account's cached shell state. Legacy cache layouts are migrated with fallbacks, and existing D1 databases converge through idempotent schema migrations instead of destructive rebuilds. Commits: 073e249, f14c70b, 03032fb.

2. More reliable AI and full-text search queues. Disabling semantic search is now honored consistently; queue completion uses conditional guards so concurrent edits are not lost; deleting or purging notes also cleans their vectors; and normal search schedules FTS draining outside the request path while retaining a correct lexical fallback during pending work. Commits: d05c9aa, 4a04b4b, 5b8e92d, e3d26e3, 846df98.

3. Long-running backups and large folder sets. Backup leases renew while work is active and allow longer destination operations, preventing valid long backups from losing their lock. Folder position normalization is chunked so large collections stay within D1 batch limits. Commits: 4b00f45, b9b53d5.

Fixed

1. Sharing and import edge cases. Shortening a share's expiry now revokes existing share-asset sessions, an empty password correctly removes share protection, and “newer wins” imports no longer treat a missing source timestamp as if it were current. Commits: 4ea81ab, b765d5e, 4c3fae8.

2. Stronger session and application security. HTTPS sessions migrate to __Host-inkstone_session while legacy cookies remain readable during upgrades and local HTTP logout remains valid. Anonymous health checks no longer expose database readiness, login throttling is ordered correctly, the app shell receives the Worker security headers, and the expanded Content Security Policy still permits existing remote Markdown images. Commits: 6f3bd68, 8efaa99, 846df98.

3. Bounded attachment uploads. Accounts now have a 1 GiB attachment quota and a limit of 100 uploads per hour, with concurrent quota checks serialized and throttling returned as a clear HTTP 429 response instead of an internal error. Commits: 8b319ee, 846df98.

4. Consistent folder-path tooltips. Folder paths in the sidebar and workspace status bar now use Inkstone's accessible tooltip instead of the browser's native title popup, keeping hover and keyboard focus behavior consistent. Commit: 446adaf.

v0.5.0 - 更清晰的整理与更安全的升级

Inkstone 0.5.0 将文件夹、笔记和标签整合为一套连贯的整理体验，同时增强升级、搜索、备份、分享、附件上传和会话安全性。现有数据库与旧版浏览器缓存会通过兼容路径自动迁移，无需手动执行数据库命令；已有笔记、文件夹、标签、附件、登录会话和离线数据都会保留。与所有自托管更新一样，部署前仍建议保留一份最新备份。

新增

1. 更清晰、更安全的文件夹层级。 文件夹选择器现在会显示可搜索的多级路径、图标和颜色。新笔记可以继承当前文件夹，可以在上下文中创建文件夹并通过拖拽排序；移动时会拦截循环层级、超出最大深度、无效同级目标和重名。删除文件夹会在原位置提升子文件夹，并把直属笔记移到上一级，不会丢失整理关系。提交：ec15d12。

2. 保留上下文的笔记整理。 单篇和批量移动共用同一个层级文件夹选择器；最近编辑与回收站继续保持预期的时间顺序；当末级名称不足以区分位置时，笔记列表和工作区会显示完整文件夹路径。从文件夹中创建新笔记时也会保留当前整理位置。提交：95ea569。

3. 直接在侧边栏管理标签。 独立的标签管理页面已移除，改为侧边栏新增按钮，以及每个标签的重命名、颜色和删除右键菜单。标签改动会立即显示，失败时自动回滚；未使用标签会继续保留；当前标签视图会安全跟随重命名或退出删除项；大小写重复标签会在确认后合并；YAML Front Matter 与正文标签会同步更新，并跳过代码内容。已有自定义 #RRGGBB 标签颜色继续兼容。提交：9b106db、5e302ba、a9961ec。

4. Demo 模式中的完整 MCP 设置预览。 Demo 现在会以只读方式展示完整的 MCP 设置界面，并提供对应的中英文说明；所有写操作仍然会被阻止。提交：6957c32。

改进

1. 更安全的升级与账号隔离离线缓存。 浏览器本地数据现在按用户隔离，不会让一个账号继承另一个账号的缓存界面状态。旧版缓存布局会通过兼容回退自动迁移，既有 D1 数据库则通过幂等迁移逐步收敛，不会破坏性重建用户数据。提交：073e249、f14c70b、03032fb。

2. 更可靠的 AI 与全文搜索队列。 关闭语义搜索后现在会始终遵守设置；队列完成使用条件保护，避免并发编辑被遗漏；删除或彻底删除笔记时会同时清理向量；普通搜索会在请求之外调度 FTS 队列，并在仍有待处理任务时保持结果正确的关键词回退。提交：d05c9aa、4a04b4b、5b8e92d、e3d26e3、846df98。

3. 长时间备份与大量文件夹处理。 备份运行期间会持续续租，并允许目标端操作有更充足的完成时间，避免正常的长备份丢失任务锁。文件夹位置归一化改为分批执行，让大量文件夹保持在 D1 批处理限制内。提交：4b00f45、b9b53d5。

修复

1. 分享与导入边界情况。 缩短分享有效期时会撤销已有的分享附件会话；空密码可以正确移除分享保护；“较新内容优先”导入不会再把缺失源时间戳的内容当作当前数据。提交：4ea81ab、b765d5e、4c3fae8。

2. 增强会话与应用安全性。 HTTPS 会话会迁移到 __Host-inkstone_session，升级期间仍兼容读取旧 Cookie，本地 HTTP 退出也保持正常。匿名健康检查不再暴露数据库就绪状态，登录限流顺序得到修正，应用外壳会经过 Worker 安全响应头，扩展后的内容安全策略也继续兼容已有的远程 Markdown 图片。提交：6f3bd68、8efaa99、846df98。

3. 有界的附件上传。 每个账号现在拥有 1 GiB 附件配额，并限制为每小时最多上传 100 次；并发配额检查会被串行保护，触发限流时返回明确的 HTTP 429，而不是内部错误。提交：8b319ee、846df98。

4. 统一的文件夹路径提示。 侧边栏和工作区状态栏中的文件夹路径现在使用 Inkstone 的无障碍 Tooltip，不再依赖浏览器原生 title 弹层，让鼠标悬停与键盘聚焦行为保持一致。提交：446adaf。