Changelog

Major defense overhaul. The v2 injection defense architecture drops attack success rate from 68.9% to 4.4% across 45 agent trials. Also adds branch-aware indexing, multi-agent coordination, and GitHub integration.

Highlights

• Injection Defense v2 — Content redactor and result isolation moved to core MCP handler. 4.4% ASR across 15 scenarios (3 runs each).
• Branch-aware indexing — nella_index and nella_search accept --branch parameter. New nella_branch_info tool.
• Multi-agent coordination — Presence tracking, task delegation, and decision protocols for multi-agent workflows.
• GitHub App integration — Webhook-driven repo linking and workspace auto-creation.
• Azure/Cohere embedding support — Hybrid search now supports Azure OpenAI embeddings and Cohere reranking as fallback.
• Cloud branch sync — Branch indexes sync to GCS, agent state routes through Cloud SQL.
• Incremental indexing progress — Index progress saved after each embedding batch to survive interruptions.

Stability release focused on auth hardening and configuration cleanup.

• Block MCP server startup without authentication — no more silent failures.
• Validate auth on startup with actionable error messages.
• Make usage logging blocking with retries to prevent data loss.
• Centralize embedding model and dimensions config.
• Fix CommonJS compatibility for nella connect prompts.

Search quality improvements, injection benchmark engine, and interactive setup flow.

• Parallel hybrid search — Semantic and lexical search run concurrently, reducing query latency.
• Search guidance — Low-confidence results now include suggestions for better queries.
• Injection benchmark engine — Layer tests, metrics, and reporting for the 5-layer defense system. HMAC-signed search results.
• Interactive connect flow — nella connect now uses @clack/prompts for guided IDE setup.
• Dependency graph builder — nella index --graph generates codebase dependency graphs.
• Enable reranking by default, align search weights to lexical-heavy default (0.4/0.6).
• Fix language name resolution in search filters.

Patch release with indexing defaults export fix.

Fix npm release workflow and add package README.

Major infrastructure migration to Azure providers. First authenticated release.

• Azure OpenAI embeddings — Migrate embedding provider from OpenAI direct to Azure OpenAI.
• Usage logging overhaul — Switch to RPC for usage counts, add user ID tracking.
• Add CORS support to CLI auth callback server.
• Restore nella embedding proxy for local/MCP usage.
• Remove dead OpenAI and Voyage provider references.