Changelog

What's in the box

The current state of DataAgent: what the app does, how it is built, and what is still open. There is no dated public release history — work on the codebase is recorded from 6 October 2026.

v1.0.0 Current build The build you download today

This is the current state of the codebase. Work on DataAgent is recorded from 6 October 2026 and has been a single line of development since, so there is no dated public release history behind this entry — everything below ships in the build you download today.

What the app does

  • Natural-language chat over your local warehouse — the query that produced the answer travels with it and is written to the audit log
  • SQL workbench, file upload (CSV, TSV, TXT, JSON, JSONL, NDJSON, Parquet, XLSX, XLS) and live SQLite, PostgreSQL and MySQL connections
  • Dashboard Studio: 30+ chart types on a drag-and-drop canvas, with .pbix export and .pbix import
  • A spreadsheet workbench with a formula bar, multi-sheet and CSV / XLSX import and export
  • ETL pipelines, data profiling, data catalog, lineage and scheduled reports
  • Ten LLM providers — Ollama, LM Studio, OpenAI, OpenRouter, Anthropic, Gemini, DeepSeek, Groq, xAI and the OpenCode free tier
  • JWT authentication with Google sign-in, role-based access and audit logging
  • MCP servers for DuckDB, memory and filesystem
  • A Windows .exe installer and a portable build, plus a Docker image for self-hosting

How it is built

  • Warehouse opened read-only for analysis; ETL writes funnel through one dedicated process
  • Web UI auto-reloads on change with WAREHOUSE_RELOAD=1
  • Quality is gated by the project's pytest suite and the coverage floor set in pyproject.toml
  • The whole app is open source under the GNU AGPL v3 licence

Hardened

  • Windows file-lock errors when two processes opened the DuckDB warehouse
  • Long-running queries no longer block the chat stream
  • First-admin takeover on an exposed port — a first admin created over the network now requires DATAAGENT_BOOTSTRAP_TOKEN, while a loopback-only desktop install registers its first account without one
  • Sandbox escape, SSRF and spreadsheet formula injection in the export paths

What is not in this build

  • Single sign-on and row-level security are implemented but ship disabled — switch them on in config/settings.yaml if you need them
  • The PDF export is a plain text summary; the fully formatted exports are Excel, PowerPoint, HTML, Markdown, CSV, Parquet and .pbix
  • No cloud object-store connectors — live connections are SQLite, PostgreSQL and MySQL only
  • The installer is not code-signed yet, so SmartScreen shows "Unknown publisher"
  • One warehouse file, one writer — a second process writing to it is an error by design

Ready to try the current build?

Download DataAgent Read the docs