feat: initial implement of changelog and versioning policy

Author: bradjin8

CHANGELOG.md

@@ -0,0 +1,48 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+- Hypothesis property-based tests for blob and bubble parsing (#71, #82)
+- PDF export endpoint coverage in CI (#72, #82)
+
+### Changed
+- Extract shared `from_dict` validation helpers for model classes, reducing duplication (#70, #80)
+- Enable mypy `strict-optional` and fix nullability gaps across the codebase (#69, #79)
+
+### Fixed
+- Add incomplete-result signaling on parse failure so callers can distinguish partial vs. complete data (#67, #78)
+- Replace `print()` error output with structured logging throughout (#68, #77)
+- Replace silent `except Exception: pass` with structured logging in workspace and bubble load paths (#66, #76)
+- Rename `_`-prefixed internal functions to public names to satisfy strict linters (#82)
+
+## [0.1.0] - 2026-05-21
+
+### Added
+- **Web UI** — browse and search all Cursor AI workspaces; conversation view with syntax-highlighted code blocks, dark/light mode, and bookmarkable chat URLs (#63)
+- **Export formats** — one-click export of chats as Markdown, HTML, PDF, JSON, and CSV from the web UI (#63)
+- **CLI export** (`cursor-chat-export` / `scripts/export.py`) — zip archive or individual Markdown files with YAML frontmatter; incremental mode (`--since last`) preserves state across runs (#63, #42, #61)
+- **Cursor CLI agent session support** — browse and export sessions stored in `~/.cursor/chats/` by the `cursor agent` CLI; gracefully degrades when the IDE database is absent (#7, #8, #63)
+- **Desktop app packaging** — Windows `.exe` via PyInstaller + pywebview; no Python installation required on the target machine (#63)
+- **Type-safe models** with schema validation at SQLite read boundaries (#24, #30)
+- **CI matrix** (Linux / macOS / Windows) running pytest, mypy, and gitleaks (#13, #19, #44, #62)
+- **Python packaging infrastructure** (`pyproject.toml` with hatchling, bounded dependency pins, `requirements-lock.txt`, Dependabot) (#45, #47, #49, #53)
+- Optional exclusion rules for sensitive projects and chats (#1, #2)
+- Full-text search with workspace and log-type filters (#63)
+
+### Fixed
+- Path traversal and symlink-escape protection on `/api/set-workspace` (#15, #22)
+- Disabled Werkzeug debug mode by default; opt-in via `--debug` / `FLASK_DEBUG=1` (#9, #20)
+- Sanitise Marked.js HTML output with DOMPurify (#11, #21)
+- Wrapped all production `sqlite3.connect()` calls in context managers (#17, #23)
+- Skip NULL bubble rows in workspace tabs loader (#50, #52)
+- Thread-unsafe `_workspace_path_override` race condition (#43, #54)
+- Normalise Windows-style paths on non-Windows hosts (#8)
+
+[Unreleased]: https://github.com/cppalliance/cppa-cursor-browser/compare/v0.1.0...HEAD
+[0.1.0]: https://github.com/cppalliance/cppa-cursor-browser/releases/tag/v0.1.0

README.md

@@ -240,6 +240,28 @@ The desktop app uses [pywebview](https://pywebview.flowrl.com/) to render the Fl
 - **Frontend:** Vanilla HTML/CSS/JS (no npm, no build step)
 - **PDF:** fpdf2
 
+## Versioning
+
+This project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html) (`MAJOR.MINOR.PATCH`).
+
+**Pre-1.0 stability (current):** The project is at `0.x.y`. During this phase:
+
+- **Minor version bumps (`0.x` → `0.x+1`)** may include breaking changes to the HTTP API, CLI flags, or exported file formats. Consumers of the `/api/*` endpoints or the `cursor-chat-export` CLI should review the changelog before upgrading.
+- **Patch version bumps (`0.x.y` → `0.x.y+1`)** are backward-compatible bug fixes only.
+
+**What constitutes a breaking change:**
+
+| Surface | Breaking examples |
+|---|---|
+| HTTP API | Removing or renaming an endpoint; changing the JSON schema of a response in a non-additive way |
+| CLI (`cursor-chat-export`) | Removing or renaming a flag; changing default output structure |
+| Export formats | Removing YAML frontmatter fields; changing the zip directory layout |
+| Python package | Removing a public symbol from an importable module |
+
+Adding new optional fields to JSON responses, adding new CLI flags with sensible defaults, or adding new export-format sections are *not* considered breaking.
+
+A complete history of changes is maintained in **[CHANGELOG.md](CHANGELOG.md)** following the [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) format.
+
 ## License
 
 This project is licensed under the [Boost Software License 1.0](https://www.boost.org/LICENSE_1_0.txt).

pyproject.toml

@@ -79,6 +79,7 @@ include = [
     "launcher.py",
     "requirements.txt",
     "README.md",
+    "CHANGELOG.md",
     "DEPLOYMENT.md",
     "LICENSE",
     "cursor-browser.spec",