Novara v7.0.0

Novara v7.0.0 — Major Feature Release

Update Overview

7.0 is not a feature release — it is a change of direction. Novara steps out of the single-machine era and begins the connected era: a cross-device, local-first personal data control layer for humans and AI agents, where both you and your AI can use the data — but only you hold the keys. The first step is Novara Snapshot: export your entire database as one self-contained encrypted web page, open it anywhere — phone, PC, or your own server — unlock with a password, and read everything. No account, no upload, no server touching plaintext. Sync and self-hosted deployment will grow from the same foundation, and the red lines stay fixed: the server never sees plaintext, there is no official cloud, and offline never degrades. All data remains fully local by default: no cloud uploads, no telemetry, no account registration.

Key Updates

🚀 The Connected Era Begins 7.0 opens the road from a single-machine tool to a cross-device data control layer. Every future step — sync, self-hosted deployment — grows from the same foundation under three fixed red lines: the server never sees plaintext, there is no official cloud, and offline never degrades.

🔐 Novara Snapshot Export the whole database (or a chosen subset: memos / file paths / todos & notes / records) as a single self-contained encrypted HTML file. Double-click it or host it on your own NAS / server / any static hosting; unlock with a password and browse read-only, completely offline. The embedded ciphertext reuses the versioned .novaenc v4 container (AES-256-GCM, PBKDF2-SHA256 at 3,000,000 iterations) — the same contract as encrypted backups. A plaintext vault refuses to export, and MCP credentials are stripped from every snapshot before it is sealed.

📡 TOTP on the Go Verification codes are computed locally in the browser — the highest-frequency moment for a vault is checking a code on your phone. Fields stay masked with tap-to-reveal and one-tap copy.

🌗 Light & Dark Theme in the Viewer One tap in the title bar switches the viewer between light and dark; light is the default and nothing is persisted — refresh, and the plaintext is gone from memory.

📖 Deployment Help A hosted, mobile-first guide (novara.xin/snapshot-guide.html) covers local, LAN, and self-hosted public deployment — reachable directly from the export dialog.

🧹 Four verification rounds hardened the release: a full pre-release audit (2 agents) plus an on-device test round fixed issues across the export flow, the viewer (full desktop icon set now mirrored byte-for-byte, search aligned with the desktop app, honest degradation on plain HTTP), and the packaging pipeline. All projects build with zero warnings and the unit suite passes 365 tests.

Runtime & Compatibility

Windows 10 2004 (Build 19041) and above / all Windows 11 versions
Self-contained installer bundles .NET 8 and the WebView2 runtime; no manual prerequisites
The desktop sticky-note host ships as a complete bundle in a Host subfolder inside the install directory, and is installed/removed together with the main app
Snapshot viewer: Chrome / Edge 80+, Firefox, or Safari 16.4+ — opened locally (double-click) or over HTTPS for full functionality; plain HTTP degrades gracefully with a clear notice

Important Migration Notice

No data or format changes in this release — upgrading from 6.2.0 (or 5.x) is a routine update.
If you opted into the v3 key-derivation migration (introduced in 5.3.0), the database cannot be opened by 5.2.0 or earlier — if you need to downgrade, restore a backup first.
Snapshot passwords are never stored and cannot be recovered — export again with a new password if you forget one. Host snapshots publicly only with a strong password.
Please exit Novara before running the installer.

Installation

Download Novara_Setup_7.0.0.exe below and follow the wizard. Existing data is preserved automatically.

更新概述

7.0 不是一个功能版本——是一次方向转弯。Novara 走出单机时代，开启互联阶段：一个跨设备的、本地优先的个人数据控制层，为人，也为 AI——你和你的 AI 都能使用数据，但钥匙只在你的手里。第一步是 Novara Snapshot：把你的整个数据库导出为一个自包含的加密网页，放到哪里都能打开——手机、电脑、或你自己的服务器——输密码解锁，一切只读可查。无账号、无上传、服务器接触不到任何明文。同步与自托管部署将从同一地基上生长，而红线恒定不变：服务器零明文、无官方云、离线能力永不倒退。默认形态下所有数据完全本地存储：无云端上传、无遥测上报、无需注册账号。

主要更新内容

🚀 互联时代开启
7.0 开启了从单机工具走向跨设备数据控制层的道路。未来的每一步——同步、自托管部署——都从同一地基上生长，三红线恒定：服务器零明文、无官方云、离线能力永不倒退。

🔐 Novara Snapshot
将整个数据库（或勾选的子集：备忘 / 路径 / 计划 / 记录）导出为一个自包含的加密 HTML 文件。双击打开，或托管到你自己的 NAS / 服务器 / 任意静态托管；输密码解锁，只读浏览，完全离线。内嵌密文复用版本化的 .novaenc v4 容器（AES-256-GCM、PBKDF2-SHA256 3,000,000 次迭代）——与加密备份同一份契约。明文库拒绝导出，封口前 MCP 凭证一律剥离。

📡 随身 TOTP
动态码在浏览器本地实时计算——查密码时顺手看一眼动态码，是保险库最高频的时刻。字段默认掩码、点击显示、一键复制。

🌗 查看器深浅主题
标题栏一键切换深浅主题，默认浅色，不做任何持久化——刷新后明文即从内存消失。

📖 部署帮助
托管于 novara.xin/snapshot-guide.html 的移动优先指南，覆盖本地、局域网与自托管公网三种部署——从导出弹窗直达。

🧹 四轮核验为本版兜底：发布前全域核验（2 个审查代理）与实机测试轮修复了导出链路、查看器（条目图标现与主程序全量图标集逐字节一致、搜索与主程序对齐、明文 HTTP 下诚实降级）与打包管线。全工程 0 警告，365 项单元测试全过。

运行环境与兼容性

Windows 10 2004（Build 19041）及以上 / 全部 Windows 11 版本
自包含安装包内置 .NET 8 与 WebView2 运行时，无手动前置依赖
桌面便签宿主以完整自包含包形式随主程序安装于 Host 子目录，并随主程序一同安装 / 卸载
Snapshot 查看器：Chrome / Edge 80+、Firefox 或 Safari 16.4+——本地双击或 HTTPS 访问获得完整功能；明文 HTTP 下优雅降级并明确提示

重要迁移提示

本版本无数据或格式变化——从 6.2.0（或 5.x）升级为常规更新。
若你已选择 5.3.0 引入的 v3 密钥派生迁移，数据库无法被 5.2.0 及更早版本打开——如需降级请先恢复备份。
快照密码绝不存储、无法找回——遗忘密码重新导出即可。公网托管快照请务必使用强密码。
运行安装程序前请先退出 Novara。

安装方式

在下方下载 Novara_Setup_7.0.0.exe 并按向导安装。既有数据自动保留。

Novara v6.2.0

Novara v6.2.0 Hotfix Release

Update Overview

Quality-and-fit release focused on how gracefully Novara behaves in real window sizes and how predictably it orders your data. Every dialog in the app now adapts to split-screen and short windows, the note editor scrolls as a full page, memo pinning receives a single well-defined region-based meaning, and the editor's undo/redo icons get their proper identities — backed by an incremental verification round over everything shipped since 6.1.0. All data remains fully local: no cloud uploads, no telemetry, no account registration.

Key Updates

🖥️ Small-Window Dialog Adaptation A unified pass across all pages: confirmation buttons are pinned to the card bottom instead of floating inside scroll areas, scroll regions get bounded heights, dialogs are clamped to the viewport — and re-clamped live while the window resizes. Twelve dialogs that could overflow on split-screen or short windows now keep their buttons visible and their content scrollable, and the welcome-tour carousel scales down centrally instead of cropping.

📝 Full-Page Scrolling Note Dialog The new/edit note dialog (now a fixed 600 px wide) pins its title and confirm button while the icon, name, and auto-growing content area scroll as one page — long notes stay editable on any window size instead of the input being squeezed into two clipped lines.

🔄 Infinite Icon Ring The icon pickers in the group, entry, and workspace dialogs now scroll seamlessly in both directions as a three-fold mirrored carousel, map the mouse wheel to horizontal scrolling, and animate-center the selection. Reopening a picker no longer keeps a stale highlight, and edit dialogs restore the saved icon correctly.

📌 Region-Based Pinning (Memo Page) Pinning now has one well-defined meaning: a pinned entry rises to the top of its own region — inside its group, or within the ungrouped stack — and never escapes it; a pinned group, globally unique, rises to the top of the list together with all its entries. Re-pinning within the same region displaces the old pin, unpinning keeps the card in place, and pinned cards cannot be dragged.

🧹 Ownership Changes Strip Personal Marks Moving an entry into or out of a group — along with group-deletion rescue, soft-delete to the recycle bin, and MCP group changes — now clears its star and pin, since those belong to the region rather than the entry. Editing an entry keeps them.

✍️ Editor Body Placeholder Rich-text and markdown editors show a "start writing" placeholder when the body is empty, implemented with the Tiptap official CSS recipe so it never interferes with the caret. The markdown input font now matches the preview.

🎨 Editor Toolbar Icons Reworked Undo, redo, and clear-formatting each get a distinct, conventional icon — clear-formatting previously borrowed the redo glyph.

🛠️ Four lower-severity issues were fixed, including stack desync after pinning the only standalone entry, a stale highlight when reopening the group icon ring, and dialogs already open while the window resizes not re-fitting. All three projects build with zero warnings and the unit suite passes 365 tests.

Runtime & Compatibility

Windows 10 2004 (Build 19041) and above / all Windows 11 versions
Self-contained installer bundles .NET 8 and the WebView2 runtime; no manual prerequisites
The desktop sticky-note host ships as a complete bundle in a Host subfolder inside the install directory, and is installed/removed together with the main app

Important Migration Notice

No data or format changes in this release — upgrading from 6.1.0 (or 5.x) is a routine update.
If you opted into the v3 key-derivation migration (introduced in 5.3.0), the database cannot be opened by 5.2.0 or earlier — if you need to downgrade, restore a backup first.
Please exit Novara before running the installer.

Installation

Download Novara_Setup_6.2.0.exe below and follow the wizard. Existing data is preserved automatically.

ℹ️ Note for this Hotfix Release

This Stable Hotfix release is primarily aimed at resolving critical bugs. Minor new features may be included as supplementary changes.This hotfix is an intermediate transitional release and does not represent the latest‑level stability. For the most reliable experience, you are strongly advised to download the newest available release from this repository.

更新概述

本版本聚焦真实窗口尺寸下的软件适配表现，以及数据排序行为的可预测性。全部弹窗现已适配分屏与小窗口场景；笔记编辑器改为整页滚动；备忘录置顶逻辑改为明确的按分区生效规则；编辑器撤销 / 重做图标完成修正。针对 6.1.0 之后交付的全部改动开展增量验证轮次。所有数据完全本地存储：无云端上传、无遥测上报、无需注册账号。

主要更新内容

🖥️ 小窗口弹窗适配
对全部页面统一整改：确认按钮固定在卡片底部，不再悬浮于滚动区域内部；滚动区域设置高度边界；弹窗受视口约束，窗口大小改变时实时重新适配。
共计 12 个弹窗，此前在分屏、矮窗口下会出现内容溢出，现在按钮始终可见、内容区域可滚动；欢迎引导轮播组件会整体居中缩放，不再被窗口裁切。

📝 整页滚动笔记弹窗
新建 / 编辑笔记弹窗固定宽度 600px；标题与确认按钮保持固定，图标、名称与自动扩展内容区域作为整体页面滚动。长笔记在任意窗口尺寸下均可正常编辑，不会出现输入框被挤压截断为两行的问题。

🔄 无限循环图标环
分组、条目、工作区弹窗内的图标选择器改为三倍镜像轮播组件，双向无缝滚动；鼠标滚轮映射为横向滚动，选中项自动动画居中。重新打开选择器不会残留旧的高亮状态，编辑弹窗可正确还原已保存图标。

📌 基于分区的置顶逻辑（备忘录页面）
置顶行为拥有清晰统一定义：被置顶的条目会提升至所属分区顶部（分组内部或无分组条目堆），不会跳出该分区；置顶分组为全局唯一，分组连同内部全部条目整体提升至列表顶端。
同一分区内重复置顶会顶替原有置顶项；取消置顶卡片保持原有位置；已置顶卡片禁止拖拽操作。

🧹 归属变更清除个人标记
条目移入 / 移出分组、分组删除数据救援、软删除移入回收站、MCP 修改分组归属，以上场景会清除条目星标与置顶状态 —— 星标、置顶属于分区属性，而非条目本身属性。直接编辑条目不会清除标记。

✍️ 编辑器正文占位提示
富文本与 Markdown 编辑器正文为空时，显示 “开始撰写” 占位提示，采用 Tiptap 官方 CSS 方案实现，不会干扰光标行为。Markdown 编辑框字体与预览字体保持一致。

🎨 编辑器工具栏图标重制
撤销、重做、清除格式，三者全部使用独立标准图标；此前清除格式复用了重做的图标图形。

🛠️ 增量验证轮次
修复四项低优先级缺陷：仅存独立条目被置顶后列表状态不同步、重新打开分组图标选择器残留高亮、窗口缩放时已打开弹窗不会重新适配布局。
三个项目编译零警告，单元测试套件保持 365 项用例全部通过。

运行环境与兼容性

• 兼容系统：Windows 10 2004（内部版本 19041）及以上 / Windows 11 全版本
• 独立安装包内置.NET 8 以及 WebView2 运行时，无需手动安装前置组件
• 桌面便签宿主完整程序包存放于安装目录下 Host 子文件夹，跟随主程序一同安装、卸载

重要迁移提示

本版本没有数据、数据库格式变更，从 6.1.0 或者 5.x 版本升级属于普通常规更新。
如果你执行过 v5.3.0 引入的 KDF 密钥派生迁移，生成的 v3 格式数据库无法被 v5.2.0 以及更早版本打开；如需降级，请先恢复备份文件。运行安装程序前请完全退出 Novara。

安装方式

下载下方Novara_Setup_6.2.0.exe，跟随安装向导完成部署。原有数据自动保留。

ℹ️ 关于本稳定热修复版本说明

Stable Hotfix稳定热修复版本以修复严重缺陷为首要目标，可附带少量新增功能作为补充变更。该热修复属于过渡中间版本，并不代表最高水准的稳定性。想要获取最可靠的使用体验，强烈建议下载仓库内最新的可用版本。

Novara v6.1.0

Novara v6.1.0 Hotfix Release

Update Overview

Hotfix release resolving a defect reported from the field: after wiping memo data, creating a new group appeared to do nothing. The group was actually created and saved all along — a leftover rule from the workspace feature ("hide empty groups") applied unconditionally and collapsed the new empty card immediately, on every reload. The hiding now applies only while a workspace filter is active, which was always its intent. All data remains fully local: no cloud uploads, no telemetry, no account registration.

Key Updates

🛠️ Empty Groups Visible Again in the Unfiltered View With no workspace selected, an empty group now shows up as soon as it is created — and stays visible across restarts — instead of silently disappearing. Groups created after wiping memo data (where no entries exist to bring in) are the case this fixes; the group had been saved correctly, just never rendered.

📡 Clearer Toast Under an Active Workspace By design, group visibility follows its entries, so a brand-new empty group stays hidden while a workspace filter is active until it holds an entry from that workspace. Instead of a generic "created" toast in that situation, Novara now says exactly that, so the behavior is explained rather than mysterious.

Runtime & Compatibility

Windows 10 2004 (Build 19041) and above / all Windows 11 versions
Self-contained installer bundles .NET 8 and the WebView2 runtime; no manual prerequisites
The desktop sticky-note host ships as a complete bundle in a Host subfolder inside the install directory, and is installed/removed together with the main app

Important Migration Notice

No data or format changes in this release — upgrading from 6.0.0 (or 5.x) is a routine update.
If you opted into the v3 key-derivation migration (introduced in 5.3.0), the database cannot be opened by 5.2.0 or earlier — if you need to downgrade, restore a backup first.
Please exit Novara before running the installer.

Installation

Download Novara_Setup_6.1.0.exe below and follow the wizard. Existing data is preserved automatically.

ℹ️ Note for this Hotfix Release

This Stable Hotfix release is primarily aimed at resolving critical bugs. Minor new features may be included as supplementary changes.This hotfix is an intermediate transitional release and does not represent the latest‑level stability. For the most reliable experience, you are strongly advised to download the newest available release from this repository.

更新概述

本热修复版本修复一处用户反馈的实际场景缺陷：清空备忘录数据之后，新建分组看上去没有任何效果。实际上分组已经完成创建并持久保存，是工作区功能遗留的 “隐藏空分组” 规则被无条件全局生效，导致新建的空分组每次页面重载都会直接折叠隐藏。现已修改逻辑：空分组隐藏规则仅在启用工作区筛选时生效，回归原本的设计意图。所有数据完全本地存储：无云端上传、无遥测上报、无需注册账号。

主要更新内容

🛠️ 未筛选视图下空分组正常可见
未选中任何工作区时，新建空分组创建完成后会直接显示，重启软件也不会消失，不再静默隐藏。
本次修复专门对应清空备忘录数据后新建分组的场景：分组本身已经正确写入数据库，只是界面始终不会渲染展示。

📡 工作区激活状态下提示弹窗更加清晰
按照原有设计，分组可见性跟随所属条目；在工作区筛选开启状态下，全新的空分组会保持隐藏，直到该分组内存在属于当前工作区的条目。
该场景不再弹出笼统的 “创建成功” 提示，Novara 会给出明确文字说明，消除行为的神秘感。

运行环境与兼容性

• 兼容系统：Windows 10 2004（内部版本 19041）及以上 / Windows 11 全版本
• 独立安装包内置.NET 8 以及 WebView2 运行时，无需手动安装前置组件
• 桌面便签宿主完整程序包存放于安装目录下 Host 子文件夹，跟随主程序一同安装、卸载

重要迁移提示

本版本没有数据、数据库格式变更，从 6.0.0 或者 5.x 版本升级属于普通常规更新。
如果你执行过 v5.3.0 引入的 KDF 密钥派生迁移，生成的 v3 格式数据库无法被 v5.2.0 以及更早版本打开；如需降级，请先恢复备份文件。运行安装程序前请完全退出 Novara。

安装方式

下载下方Novara_Setup_6.1.0.exe，跟随安装向导完成部署。原有数据自动保留。

ℹ️ 关于本稳定热修复版本说明

Stable Hotfix稳定热修复版本以修复严重缺陷为首要目标，可附带少量新增功能作为补充变更。该热修复属于过渡中间版本，并不代表最高水准的稳定性。想要获取最可靠的使用体验，强烈建议下载仓库内最新的可用版本。

Novara v6.0.0

Novara v6.0.0 Major Feature Release

Update Overview

Major release focused on how the app feels and how much it can be trusted. This release introduces a token-based motion design system that unifies every animation in the app, lightweight Workspaces that group all five data types at once, a global Quick Capture hotkey, a network activity indicator, and a four-page welcome tour — backed by five exhaustive verification rounds that resolved roughly 250 issues, with encryption state changes now fully transactional and the MCP interface hardened end to end. All data remains fully local: no cloud uploads, no telemetry, no account registration.

Key Updates

✨ Motion Design System (New) Every animation now draws from a single token-based layer — shared durations, easing curves, and dialog transform channels. A brand-colored "hidden-light" glow slides behind the navigation and traces the selected tab's outline, page switches fade and float, dialogs open with depth and staggered rows, cards enter in a soft cascade, and every button answers a press. The glow slides on the compositor thread, so it stays smooth on high-refresh displays.

🗂️ Workspaces (New) A lightweight grouping layer spanning memos, paths, todos, notes, and records. Create a space for a project, assign cards to it from their context menus, and switching spaces reshapes every list at once. Cards never move between folders — the database stays flat — so grouping follows your workflow without locking data in.

⚡ Quick Capture (New) Press Ctrl+Shift+N anywhere in Windows and a small overlay appears: type the thought, dispatch it to a memo, todo, or note, done — without leaving the app you were in. Captured entries go through the same storage and sync paths as everything else.

📡 Network Activity Indicator (New) Novara makes no network calls on its own — and now it shows that. The title bar carries a local-only state, and whenever a user-triggered API detection goes out, the endpoint is named right where you can see it. Outbound traffic is never silent.

🧭 Welcome Tour (New) A four-page walkthrough on first launch, built from the real UI: menus rendered live, real navigation buttons, an auto-played desktop-note drag demo, and the privacy-lock experience — so the first minute with Novara explains Novara.

🛡️ Five Verification Rounds — ~250 Fixes Five exhaustive rounds across the entire codebase (storage, crypto, UI, editor, MCP, host processes, deployment), plus a code-level re-verification of the round's own fixes. Highlights: encrypted state transitions (enable / disable / migrate / password change) are now fully transactional — there is no window where the disk holds plaintext while memory believes it is encrypted; snapshot restore is two-phase with automatic rollback; IPC pending-write files are atomic; a stale render can no longer duplicate recycle-bin cards; the diary title no longer swallows IME candidate confirmation; and the first-open editor dialog on a cold start warms up correctly instead of opening blank.

🔒 MCP & Data-Security Hardening Malformed JSON now answers a spec-compliant -32700 error instead of hanging the client until timeout; read_item argument validation happens before the permission gate; audit-log fields are length-capped and credential-masked; chat response bodies are capped at 32 MB; CSV formula-injection protection round-trips symmetrically, so quote-leading values keep their quotes; snapshot file names are validated before delete/restore to block path traversal; and the MCP handshake reports the real application version.

🧪 Engineering & Reliability All three projects build with zero warnings and the unit suite grows to 365 passing tests — including new round-trip coverage for CSV formula escaping, precise dialect-column mapping, and fuzzy-search performance guards.

Runtime & Compatibility

Windows 10 2004 (Build 19041) and above / all Windows 11 versions
Self-contained installer bundles .NET 8 and the WebView2 runtime; no manual prerequisites
The desktop sticky-note host ships as a complete bundle in a Host subfolder inside the install directory, and is installed/removed together with the main app

Important Migration Notice

If you opted into the v3 key-derivation migration (introduced in 5.3.0), the database cannot be opened by 5.2.0 or earlier — if you need to downgrade, restore a backup first. The migration is opt-in and can be declined (a manual entry stays in Settings).
Backups exported by v5.0.0 or earlier contain no card data (fixed since v5.1.0). If you exported a backup under 5.0.0, please export again after upgrading.
Please exit Novara before running the installer — upgrading while the app is running can crash the old instance during the installer's application-close step (a legacy behavior present in earlier versions as well).

Installation

Download Novara_Setup_6.0.0.exe below and follow the wizard. Existing data from 5.x is preserved automatically.

ℹ️ Note for this Major Feature Release

A Major Feature Release introduces substantial new features and architectural changes. It does not guarantee production‑grade stability. Subsequent hotfixes and minor updates will be shipped to resolve defects. For the most reliable experience, you are strongly advised to download the latest available release from this repository.

更新概述

本大版本聚焦使用体验与安全可信度。引入基于设计令牌的动效系统，统一软件全部动画；新增轻量工作区，可同时对全部五类数据进行分组；全局快速捕获快捷键、网络活动指示器，以及四步式欢迎引导向导。经过五轮完整验证，共计修复约 250 项问题；加密状态变更现已完全事务化处理，MCP 接口完成端到端安全加固。所有数据完全本地存储：无云端上传、无遥测上报、无需注册账号。

主要更新内容

✨ 全新：动效设计系统
全部动画统一由一套令牌化层驱动，包含统一的动画时长、缓动曲线、弹窗变换通道。导航栏后方会滑动展示品牌色 “隐光” 光晕，勾勒当前选中标签页轮廓；页面切换兼具淡入与浮动效果；弹窗打开带有空间层次感，内部条目交错弹出；卡片柔和级联入场；所有按钮按压均有反馈。光晕在合成器线程运行，高刷新率显示器下依旧保持流畅。

🗂️ 全新：工作区
轻量分组层，可同时管理备忘录、路径、待办、笔记、记录五类数据。可以为项目创建独立工作区，通过卡片右键菜单将卡片归入对应工作区；切换工作区时，所有列表内容同步刷新。
卡片不会在物理文件夹之间移动，数据库保持扁平化存储；分组仅逻辑归类，不会把数据锁死在分组内，适配各类工作流程。

⚡ 全新：快速捕获
Windows 全局快捷键Ctrl+Shift+N，唤起悬浮小窗口。直接输入想法，保存为备忘录、待办或者笔记，无需退出当前正在使用的软件。捕获生成的条目与其他数据走同一套存储、同步逻辑。

📡 全新：网络活动指示器
Novara 本身不会主动发起任何网络请求，现在该状态对用户可见。标题栏展示 “仅本地” 状态；当用户手动触发 API 检测时，会直接显示正在访问的接口地址。所有对外网络流量均有提示，不会静默联网。

🧭 全新：欢迎引导向导
首次启动弹出四步交互式引导，完全基于真实 UI 构建：实时渲染菜单、原生导航按钮、自动播放桌面便签拖拽演示、隐私锁完整流程。用户打开软件的第一分钟即可了解软件核心能力。

🛡️ 五轮完整验证，修复约 250 项问题
对完整代码库开展五轮深度核查，覆盖存储、加密、UI、编辑器、MCP、宿主进程、部署模块，并且对每一轮修复代码再次复核校验。
重点修复内容：加密状态切换（开启 / 关闭 / 迁移 / 修改密码）实现完整事务机制，杜绝 “磁盘明文存储、内存判定已加密” 的危险窗口；快照恢复采用双阶段执行，支持自动回滚；IPC 待写入文件采用原子写入；修复渲染异常导致回收站卡片重复生成；修复日记标题框吞掉输入法候选词确认事件；冷启动首次打开编辑器可正常初始化，不再出现空白窗口。

🔒 MCP 与数据安全加固
收到畸形 JSON 时返回符合协议规范的‑32700错误，不再造成客户端挂起超时；read_item参数校验在权限校验之前执行；审计日志字段做长度限制，敏感凭证自动掩码；聊天响应报文上限 32MB；CSV 公式注入防护双向对称校验，带引号的字段可以保留原始引号；快照文件在删除 / 恢复前校验文件名，阻断路径遍历攻击；MCP 握手会返回真实应用版本号。

🧪 工程与可靠性优化
三个项目编译零警告；单元测试用例扩充至 365 个。新增 CSV 转义往返读写测试、精确列映射校验、模糊搜索性能防护相关用例。

运行环境与兼容性

• 兼容系统：Windows 10 2004（内部版本 19041）及以上 / Windows 11 全版本
• 独立安装包内置.NET 8 以及 WebView2 运行时，无需手动安装前置组件
• 桌面便签宿主完整程序包存放于安装目录下 Host 子文件夹，跟随主程序一同安装、卸载

重要迁移提示

如果你执行过 v5.3.0 引入的 KDF 密钥派生迁移，生成的 v3 格式数据库无法被 v5.2.0 以及更早版本打开；如需降级，请先恢复备份文件。迁移为用户主动选择，也可以选择放弃迁移，设置页面保留手动迁移入口。
v5.0.0 及更早版本导出的备份不含卡片数据（v5.1.0 已修复）。如果你曾经使用 v5.0.0 导出过备份，请升级版本后重新导出。
运行安装程序前请完全退出 Novara；软件运行状态下升级，安装程序关闭旧进程时会造成程序崩溃（旧版本同样存在该历史行为）。

安装方式

下载下方Novara_Setup_6.0.0.exe，跟随安装向导完成部署。5.x 版本原有数据会自动保留。

ℹ️ 关于本重大功能版本说明

Major Feature Release 代表该版本引入大量全新功能与架构调整，并不等同于生产级稳定版本。版本发布后会持续推送热修复与迭代更新修复各类缺陷。为获得最可靠的使用体验，强烈建议下载本仓库内最新的可用版本。

Novara v5.3.0

Novara v5.3.0 Hotfix Release

Update Overview

Feature release focused on trust, security depth, and desktop reliability. This release hardens the master-database key derivation to PBKDF2-SHA256 with 3,000,000 iterations (database format v3) behind a one-time migration prompt, introduces a per-client Agent Permission Center for the MCP interface, adds a live TOTP two-factor generator, a password/UUID/token generator, and a Command Palette on top of the global search, and fixes a critical deployment defect that made desktop sticky notes crash instantly on clean machines. All data remains fully local: no cloud uploads, no telemetry, no account registration.

Key Updates

🖥️ Desktop Sticky Notes — Deployment Fixed (Critical) The sticky-note host was previously shipped as a bare .NET launcher without its runtime bundle, which made every sticky note die instantly on clean machines (the app showed "sent", but no note ever appeared). The host now ships as a complete bundle in a Host subfolder next to the main app, with a graceful fallback for the tray icon, so notes create, sync, remind, and survive across upgrades on any machine.

🔐 KDF Hardening — Database Format v3 (New) The master-database key derivation moves from 100,000 to 3,000,000 PBKDF2-SHA256 iterations (~340 ms on the reference machine), raising the offline brute-force cost floor by 30×. Existing v2 databases are offered a one-time migration with an explicit wait-time hint; declining keeps the app fully usable and preserves a manual entry in Settings. The password hash file (security.dat) upgrades to the hardened variant in the same pass.

🤝 Agent Permission Center (New) MCP client authorizations now carry a 20-bit permission matrix (5 data zones × read/create/update/delete) instead of all-or-nothing trust. The credentials zone (memo) is denied by default even for reads; the delete column is additionally gated by the global delete switch with a visualized link between the two; denied attempts land in the audit log with reasons. Legacy authorizations migrate to full access so existing setups keep working.

🩺 Database Health Check (New) The data-overview card gains five health metrics — encryption status, last backup time, backup count, integrity verdict, and orphaned-reference scan — computed live whenever the panel opens, with warnings rendered in red. Read-only by design: it reports, it never repairs.

🎲 Secret Generator (New) A dice button next to every password field opens a generator with three modes: passwords (CSPRNG, 8–64 chars, four character classes, look-alike characters excluded, at least one character per selected class), UUID v4, and Base64Url tokens — with a live entropy readout. API-key fields deliberately get no fake vendor keys.

🔢 TOTP Two-Factor (New) Memo entries accept otpauth:// URIs or Base32 secrets with live recognition feedback. The card's expanded view renders a real two-factor row: the code recomputed every second, seconds remaining, one-click copy of the current code, and a period progress bar.

⌘ Command Palette (New) The Ctrl+K search page now speaks two languages: type ">" to switch into command mode and run any of eight commands (new memo / to-do / note / diary / document, open Settings, open Recycle Bin, Lock Now) with full keyboard navigation and prefix filtering.

🧹 Consistency & Polish Soft-delete confirmation dialogs are now pixel-identical across all four tab pages (cancel + confirm). The trash, lock, and command-prompt icons are redrawn. Note fields gain one-click copy on the rendered card.

🔒 Security Dependency Update AngleSharp upgraded 1.1.2 → 1.5.0 (CVE-2026-54570) on the HTML parsing path used by the diary editor and sanitizer.

🛠️ Engineering & Reliability The unit suite grows to 339 passing tests, covering the hardened KDF/migration paths, the permission matrix, TOTP (pinned to RFC test vectors), the secret generator, and database health.

Runtime & Compatibility

Windows 10 2004 (Build 19041) and above / all Windows 11 versions
Self-contained installer bundles .NET 8 and the WebView2 runtime; no manual prerequisites
The desktop sticky-note host ships as a complete bundle in a Host subfolder inside the install directory, and is installed/removed together with the main app

Important Migration Notice

After the one-time KDF migration, the database (format v3) cannot be opened by 5.2.0 or earlier — if you need to downgrade, restore a backup first. The migration is opt-in, shows its expected wait time, and can be declined (a manual entry stays in Settings).
Backups exported by v5.0.0 or earlier contain no card data (fixed since v5.1.0). If you exported a backup under 5.0.0, please export again after upgrading.
Please exit Novara before running the installer — upgrading while the app is running can crash the old instance during the installer's application-close step (a legacy behavior present in earlier versions as well).

Installation

Download Novara_Setup_5.3.0.exe below and follow the wizard. Existing data from 5.x is preserved automatically.

ℹ️ Note for this Hotfix Release

This Stable Hotfix release is primarily aimed at resolving critical bugs. Minor new features may be included as supplementary changes.This hotfix is an intermediate transitional release and does not represent the latest‑level stability. For the most reliable experience, you are strongly advised to download the newest available release from this repository.

更新概述

本次功能版本聚焦信任体系、安全深度以及桌面端可靠性。数据库主密钥派生算法升级为 PBKDF2‑SHA256，迭代次数提升至 300 万次（数据库格式 v3），提供一次性迁移提示；MCP 接口新增按客户端划分的代理权限中心；新增实时 TOTP 二次验证码生成器、密码 / UUID / 令牌生成工具；全局搜索之上增加命令面板；同时修复一处关键部署缺陷，该缺陷会导致全新设备上桌面便签启动即崩溃。所有数据完全本地存储：无云端上传、无遥测上报、无需注册账号。

主要更新内容

🖥️ 桌面便签 — 部署问题修复（严重缺陷）
此前便签宿主程序仅提供极简.NET 启动器，未附带完整运行时包，导致全新设备上每一个桌面便签都会瞬间崩溃；主程序显示 “发送成功”，但桌面不会出现任何便签窗口。
现已将宿主程序作为完整独立程序包，放置在主程序同级的Host子目录；托盘图标增加优雅降级逻辑，便签的创建、同步、提醒全部正常工作，升级版本后数据不会丢失，全设备兼容。

🔐 KDF 密钥派生加固 — 数据库格式 v3（新增）
数据库主密钥派生迭代次数由 10 万次提升至300 万次 PBKDF2‑SHA256（参考设备耗时约 340 毫秒），将离线暴力破解的成本提升 30 倍。
原有 v2 数据库会弹出一次性迁移弹窗，明确提示预计等待时长；用户可以选择拒绝迁移，软件依旧可以完整使用，设置页面会保留手动迁移入口。
密码哈希文件security.dat会在同一次迁移流程同步升级为加固版本。

🤝 代理权限中心（新增）
MCP 客户端授权不再是 “全部允许 / 全部拒绝”，引入 20 位权限矩阵（5 类数据区域 × 读取 / 创建 / 更新 / 删除）。
凭证备忘录区域默认禁止读取权限；删除操作额外受全局删除总开关管控，界面可视化展示两者关联关系；被拒绝的调用会写入审计日志并标注拒绝原因。
旧版本授权会自动迁移为完整访问权限，保证原有配置可以继续运行。

🩺 数据库健康检查（新增）
数据总览卡片新增五项健康指标：加密状态、上次备份时间、备份数量、完整性校验结果、孤立引用扫描。打开面板时实时计算，异常项以红色警告展示。
该功能仅做报告提示，只读不自动修复数据。

🎲 密钥生成器（新增）
所有密码输入框旁增加骰子图标，打开生成器，支持三种模式：
密码：基于加密安全随机数 CSPRNG，长度 8‑64 位，四类字符集，排除易混淆字符；强制每一类选中字符至少出现一次。
UUID v4、Base64Url 令牌，附带实时熵值显示。
API 密钥输入框不会生成仿冒第三方服务商密钥。

🔢 TOTP 二次验证码（新增）
备忘录条目支持otpauth://链接或者 Base32 密钥，实时识别反馈。卡片展开视图展示真实二因素验证码：每秒自动刷新、剩余倒计时、一键复制当前验证码、周期进度条。

⌘ 命令面板（新增）
Ctrl+K搜索页面支持命令模式，输入>即可切换；包含 8 条命令：新建备忘录 / 待办 / 笔记 / 日记 / 文档，打开设置、打开回收站、立即锁定。完整支持键盘导航、前缀过滤。

🧹 一致性与细节打磨
四个标签页内的软删除确认弹窗视觉样式完全统一（取消 + 确认按钮）；回收站、锁定、命令面板图标重新绘制；卡片展示区域的笔记字段支持一键复制。

🔒 安全依赖更新
日记编辑器与内容清洗模块所使用的 HTML 解析库 AngleSharp 由 1.1.2 升级至 1.5.0，修复漏洞 CVE‑2026‑54570。

🛠️ 工程与可靠性优化
单元测试扩充至 339 个用例，覆盖加固 KDF 与迁移流程、权限矩阵、TOTP（严格遵循 RFC 标准测试向量）、密钥生成器、数据库健康检查。

运行环境与兼容性

• 兼容系统：Windows 10 2004（内部版本 19041）及以上 / Windows 11 全版本
• 独立安装包内置.NET 8 以及 WebView2 运行时，无需手动安装前置组件
• 桌面便签宿主完整程序包存放于安装目录下 Host 子文件夹，跟随主程序一同安装、卸载

重要迁移提示

执行一次性 KDF 迁移后，v3 格式数据库无法被 v5.2.0 以及更早版本打开；如需降级，请先恢复备份文件。迁移为用户主动选择，弹窗会展示预计耗时，也可以选择放弃迁移，设置页面保留手动迁移入口。
v5.0.0 及更早版本导出的备份不含卡片数据（v5.1.0 已修复）。如果你曾经使用 v5.0.0 导出过备份，请升级版本后重新导出。
运行安装程序前请完全退出 Novara；软件运行状态下升级，安装程序关闭旧进程时会造成程序崩溃（旧版本同样存在该历史行为）。

安装方式

下载下方Novara_Setup_5.3.0.exe，跟随安装向导完成部署。5.x 版本原有数据会自动保留。

ℹ️ 关于本稳定热修复版本说明

Stable Hotfix稳定热修复版本以修复严重缺陷为首要目标，可附带少量新增功能作为补充变更。该热修复属于过渡中间版本，并不代表最高水准的稳定性。想要获取最可靠的使用体验，强烈建议下载仓库内最新的可用版本。

Novara v5.2.0

Novara v5.2.0 Hotfix Release

Update Overview

This release introduces the Encrypted Export Backup — a brand-new way to keep your backups as private as everything else in Novara — and fixes two important defects, including a session-lock regression that could cause an unlock/relock loop on Windows 11 24H2. All data remains fully local: no cloud uploads, no telemetry, no account registration.

Key Updates

🔐 Encrypted Export Backup (New) A new "Encrypted backup" option in the export menu produces a .novaenc file: the header carries the algorithm/KDF identifiers, the iteration count (300,000) and a fresh random salt, so every file is fully self-contained and decryptable on any machine. The payload is AES-256-GCM with GZip compression, and the entire header is authenticated as associated data. The backup password is independent of your privacy-lock password, is never stored anywhere, and can be set fresh on every export — with a red/yellow/green strength indicator (advisory only, never enforced). An opt-in checkbox lets advanced users reuse the privacy-lock password instead, with a clear warning that a leaked backup could then be attacked offline. Forgotten backup passwords cannot be recovered, and the app says so explicitly. Import is header-based, not extension-based: renamed or stripped .novaenc files still import. Legacy v1/v3 (.novabak) backups remain fully supported.

🛠️ Session-Lock Verdict Restored and Hardened v5.1.0 shipped a defective session-lock check (inverted semantics on Windows 11 24H2) that could relock the app about one second after every unlock when "sync lock on Windows lock" was enabled. The final verdict — OpenInputDesktop — is restored and now requires two consecutive confirmations, so Win+L is detected reliably while transient states (UAC prompts, screen savers) no longer trigger false locks.

🛠️ Privacy-Gated Flows Fix With the privacy lock enabled, the password check for MD / CSV / HTML / PDF exports, encrypted backup export and CSV import did not continue into the intended flow (a regression introduced in v5.1.0). The gate now correctly resumes each dedicated flow after verification.

🛠️ Engineering & Reliability 22 new unit tests covering the encrypted backup format (round-trip, tampering rejection, DoS-grade iteration caps, password-reuse path) and the strength rater. The suite now passes 262 tests.

Runtime & Compatibility

Windows 10 2004 (Build 19041) and above / all Windows 11 versions
Self-contained installer bundles .NET 8 and the WebView2 runtime; no manual prerequisites
StickNoteHost.exe (desktop sticky notes) and NovaraMCP.exe (MCP server) are deployed and removed together with the main app

Important Migration Notice

Backups exported by v5.0.0 or earlier contain no card data (fixed since v5.1.0). If you exported a backup under 5.0.0, please export again after upgrading.
The encrypted-backup password is separate from your privacy-lock password and is never saved. If you forget it, that backup can never be decrypted — there is no recovery.
Plaintext .novabak files (v1/v3) from any previous version import as usual.

Installation

Download Novara_Setup_5.2.0.exe below and follow the wizard. Existing data from 5.x is preserved automatically.

ℹ️ Note for this Hotfix Release

This Stable Hotfix release is primarily aimed at resolving critical bugs. Minor new features may be included as supplementary changes.This hotfix is an intermediate transitional release and does not represent the latest‑level stability. For the most reliable experience, you are strongly advised to download the newest available release from this repository.

更新概述

本次版本新增加密导出备份功能，为备份文件提供与 Novara 内部数据同等强度的隐私保护；同时修复两处重要缺陷，包含一处会话锁定逻辑退化问题，该问题会在 Windows 11 24H2 系统上触发解锁‑重新锁定死循环。所有数据完全本地存储：无云端上传、无遥测上报、无需注册账号。

主要更新内容

🔐 全新：加密导出备份
导出菜单新增「加密备份」选项，生成.novaenc格式文件：文件头部携带算法、KDF 标识、迭代次数（300000 次）以及全新随机盐值，每一份备份文件完全自包含，可在任意设备完成解密。
主体数据采用 AES‑256‑GCM 加密并进行 GZip 压缩，整个文件头作为关联数据参与完整性校验。
备份密码独立于隐私锁密码，软件不会在任何位置存储该密码，每次导出均可设置全新密码；附带红‑黄‑绿密码强度指示器（仅作参考，不会强制限制密码）。
高级用户可勾选复用隐私锁密码，界面会给出明确警告：一旦备份文件泄露，攻击者可离线暴力破解。
备份密码一旦遗忘将无法找回，软件会给出明确提示。
导入识别依据文件头而非文件扩展名：重命名、去掉后缀的.novaenc文件依旧可以正常导入。旧版 v1/v3（.novabak）明文备份保持完整兼容。

🛠️ 会话锁定判定逻辑恢复并加固
v5.1.0 版本会话锁定检测存在逻辑缺陷，在 Windows 11 24H2 系统下语义反转；开启 “跟随 Windows 锁屏同步锁定” 时，每次解锁后约 1 秒软件就会自动重新上锁。
现已恢复OpenInputDesktop最终判定逻辑，并且增加连续两次状态确认机制。可以可靠识别 Win+L 锁屏，同时 UAC 弹窗、屏幕保护程序这类瞬时状态不会再造成误锁定。

🛠️ 隐私锁校验流程修复
隐私锁开启状态下，MD/CSV/HTML/PDF 导出、加密备份导出、CSV 导入的密码校验完成后，无法继续执行后续业务流程（v5.1.0 引入的功能退化）。现已修复，校验通过后可正确继续执行对应操作。

🛠️ 工程与可靠性优化
新增 22 条单元测试，覆盖加密备份格式：往返读写校验、篡改拦截、防 DoS 迭代次数上限、密码复用逻辑、密码强度评估器。测试套件现已通过 262 项测试用例。

运行环境与兼容性

• 兼容系统：Windows 10 2004（内部版本 19041）及以上 / Windows 11 全版本
• 独立安装包内置.NET 8 以及 WebView2 运行时，无需手动安装前置组件
• 桌面便签进程StickNoteHost.exe与 MCP 服务端NovaraMCP.exe跟随主程序一同部署、卸载

重要迁移提示

v5.0.0 及更早版本导出的备份不含卡片数据（v5.1.0 已修复该问题）。如果你曾经使用 v5.0.0 导出过备份，请升级版本后重新导出。
加密备份的密码与隐私锁密码互相独立，软件不会保存该密码。一旦遗忘，该备份将永远无法解密，不存在找回手段。
历史各版本生成的明文.novabak（v1/v3）备份均可正常导入。

安装方式

下载下方Novara_Setup_5.2.0.exe，跟随安装向导完成部署。5.x 版本原有数据会自动保留。

ℹ️ 关于本稳定热修复版本说明

Stable Hotfix稳定热修复版本以修复严重缺陷为首要目标，可附带少量新增功能作为补充变更。该热修复属于过渡中间版本，并不代表最高水准的稳定性。想要获取最可靠的使用体验，强烈建议下载仓库内最新的可用版本。

Novara v5.1.0

Novara v5.1.0 Hotfix Release

Update Overview

Patch release focused on stability, security hardening, and a brand-new Auto-Lock experience. This release introduces Auto-Lock with three trigger sources (manual, idle timeout, and Windows lock-screen sync), an MCP audit log that records every agent activity, one-click Markdown import from the Explorer right-click menu, and a reworked expand/collapse animation across the app. It also upgrades backup export integrity from MD5 to SHA-256 (backup format v3) and — importantly — fixes a critical legacy bug where backup files exported by v5.0.0 contained settings only, with all card data missing. All data remains fully local: no cloud uploads, no telemetry, no account registration.

Key Updates

⏳ Auto-Lock & Lock Now (New) Lock the vault instantly from the tray menu, after a configurable idle timeout (30s / 1min / 5min / 10min / 30min / 60min), or automatically when Windows locks (Win+L) with your explicit confirmation. Locking is a true hard lock: unsaved work is flushed and saved, the decrypted database is dropped from memory, and unlocking goes through the full password / Windows Hello verification chain — keeping agent access (MCP) gated the entire time.

📊 Auto-Lock Settings Card (New) A dedicated card below the privacy-lock card, visible while the privacy lock is enabled — with a Windows-lock sync toggle (double-checked on enable) and an idle-timeout dropdown.

🛡️ MCP Audit Log (New) Every MCP agent activity is now recorded — connections, first-time authorizations, denied attempts (with reasons), tool calls with target summaries, and revocations. Sensitive-looking values are redacted and logs roll over automatically. A new "Audit Log" button on the MCP card opens the full history, with each entry led by the authorized process name.

📄 Markdown Right-Click Import (New) Right-click any .md / .markdown file in Explorer and send it straight into the Records page — no need to open Novara first. Oversized files and garbled encodings are rejected before they can pollute your data.

🔐 Backup Integrity Upgrade Backup export moves from MD5 to SHA-256 (backup format v3, 38-byte header). All legacy backups remain permanently importable. Note: SHA-256 detects corruption and is not tamper protection on plaintext backups — encrypted backups are on the roadmap.

🧹 Legacy Critical Fix — Missing Card Data in Backups Backups exported by v5.0.0 contained settings only, with all card data silently missing (a serialization defect in the export clone step). This is now fixed and covered by round-trip tests. If you exported a backup under 5.0.0, please re-export after upgrading — legacy v5.0.0 backup files still import, but they contain no card data by design of that defect.

🎨 UI Polish Navigation icons refreshed, entry cards gain a smooth "melt" expand/collapse animation (frame-rate synced, interruptible mid-animation), memo entries adopt a softer hover style, and the brand wordmark now ships with the embedded Comfortaa font (OFL) — no more dependence on system-installed fonts.

🛠️ Engineering & Reliability Session-lock detection hardened against false triggers (UAC elevation, screensavers), idle-time arithmetic fixed for long-running systems, save-state rollback tightened during import, and the test suite grew to 240 passing tests.

Runtime & Compatibility

Compatibility: Windows 10 2004 (Build 19041)+ / Windows 11 (all versions) Self-contained package bundles .NET 8 and the WebView2 runtime — no additional manual installation required The desktop sticky-note host (StickNoteHost.exe) and the MCP server (NovaraMCP.exe) are deployed alongside the main app and installed/uninstalled with it

Important Migration Notice

Backups exported by v5.0.0 contain settings only — no card data (a serialization defect fixed in this release). After upgrading, please re-export a fresh backup to have a complete, SHA-256-protected snapshot. Backup files from v3.0/v4.0/v5.0 remain importable as before.

Installation

Download the Novara_Setup_5.1.0.exe installation package below and follow the installation wizard to complete deployment. Existing 5.0 data is preserved and works directly.

ℹ️ Note for this Hotfix Release

This Stable Hotfix release is primarily aimed at resolving critical bugs. Minor new features may be included as supplementary changes.This hotfix is an intermediate transitional release and does not represent the latest‑level stability. For the most reliable experience, you are strongly advised to download the newest available release from this repository.

更新概述

补丁版本，聚焦稳定性、安全加固以及全新的自动锁定体验。本次新增自动锁定功能，支持三种触发来源（手动触发、闲置超时、Windows 锁屏同步）；新增 MCP 审计日志，完整记录每一条代理操作；资源管理器右键菜单支持一键导入 Markdown 文件；全局重写展开 / 收起动画效果。备份导出完整性校验算法由 MD5 升级为 SHA‑256（备份格式 v3）；重点修复一处严重历史 Bug：v5.0.0 导出的备份文件仅包含设置项，全部卡片数据丢失。所有数据完全本地存储：无云端上传、无遥测上报、无需注册账号。

主要更新内容

⏳ 全新：自动锁定与立即锁定
可通过托盘菜单一键锁定数据库；支持可自定义的闲置超时锁定（30 秒 / 1 分钟 / 5 分钟 / 10 分钟 / 30 分钟 / 60 分钟）；确认授权后，Windows 锁屏（Win+L）时软件自动上锁。
本次锁定为真正的强锁定：未保存内容会全部落盘保存，内存中解密后的数据库直接释放；解锁必须完整走完密码或 Windows Hello 校验流程，全程阻断 MCP 代理访问权限。

📊 全新：自动锁定设置卡片
隐私锁开启后，隐私锁卡片下方会显示独立的自动锁定设置卡片；包含 Windows 锁屏同步开关（开启时二次确认）、闲置超时下拉选项。

🛡️ 全新：MCP 审计日志
完整记录 MCP 代理全部行为：连接建立、首次授权、拒绝访问记录（附带拒绝原因）、工具调用（附带操作目标摘要）、权限撤销记录。敏感内容自动脱敏，日志自动轮转。MCP 卡片新增「审计日志」按钮，可打开完整历史记录，每条日志标注发起操作的授权进程名称。

📄 全新：Markdown 右键导入
在资源管理器中对.md/.markdown文件右键，可直接导入至记录页面，无需提前打开 Novara。超大文件、乱码编码文件会直接拦截，避免污染本地数据。

🔐 备份完整性升级
备份导出校验算法由 MD5 升级为 SHA‑256（备份格式 v3，38 字节文件头）。旧版本备份文件仍然可以正常导入。
注意：SHA‑256 仅用于检测文件损坏，无法为明文备份提供防篡改保护；加密备份功能已列入开发计划。

🧹 严重历史缺陷修复 —— 备份卡片数据丢失
v5.0.0 版本导出的备份仅会保存程序设置，卡片数据会静默丢失，根源于导出克隆环节的序列化漏洞。该问题现已修复，并新增往返读写测试覆盖该场景。
如果你在 v5.0.0 版本导出过备份，请升级版本后重新导出；v5.0.0 生成的旧备份文件依旧可以导入，但受该 Bug 影响，本身不携带任何卡片数据。

🎨 UI 细节打磨
刷新导航栏图标；条目卡片新增流畅的 “渐融式” 展开收起动画（帧率同步，动画过程可被打断）；备忘录条目悬浮样式更加柔和；产品标识字体改为内置 OFL 协议的 Comfortaa 字体，不再依赖系统预装字体。

🛠️ 工程与可靠性优化
会话锁定检测逻辑加固，规避误触发（UAC 权限提升、屏幕保护程序）；修复长时间运行设备下闲置超时计时错误；导入过程加强保存状态回滚机制；单元测试用例扩充至 240 个可通过用例。

运行环境与兼容性

• 兼容系统：Windows 10 2004（内部版本 19041）及以上 / Windows 11 全版本
• 独立安装包内置.NET 8 与 WebView2 运行时，无需手动额外安装组件
• 桌面便签宿主程序StickNoteHost.exe以及 MCP 服务端NovaraMCP.exe跟随主程序一同部署，随主程序完成安装、卸载

重要迁移提示

v5.0.0 导出的备份文件仅包含设置，不含卡片数据（本版本已修复该序列化缺陷）。升级完成后，请重新导出一份全新备份，获取带有 SHA‑256 校验的完整快照。v3.0、v4.0、v5.0 旧备份文件依旧可以正常导入。

安装方式

下载下方Novara_Setup_5.1.0.exe安装包，跟随安装向导完成部署。v5.0 原有数据完整保留，可直接使用。

ℹ️ 关于本稳定热修复版本说明

Stable Hotfix稳定热修复版本以修复严重缺陷为首要目标，可附带少量新增功能作为补充变更。该热修复属于过渡中间版本，并不代表最高水准的稳定性。想要获取最可靠的使用体验，强烈建议下载仓库内最新的可用版本。

Novara v5.0.0

Novara v5.0.0 Major Feature Release

Update Overview

Major version upgrade — the definitive release of Novara's local-first knowledge management platform. This release introduces an MCP Agent interface for AI-assisted knowledge management, a unified Records page supporting both HTML diaries and Markdown documents, Windows Hello biometric unlock, a three-tier API detection suite with relay-station probing, CSV import/export, PDF and HTML collection export, indexed fuzzy global search, and time-based reminders with system-level notifications. Five rounds of full-application review resolved over 200 issues across all modules. All data remains fully local: no cloud uploads, no telemetry, no account registration.

Key Updates

🤖 MCP Agent Interface (New)
Expose 14 tools over the Model Context Protocol, letting any AI agent create, read, update, list, search, and delete cards across all five data types — with token authentication, per-process authorization, sensitive-field redaction, and privacy-lock gating that blocks all access while the database is locked.

📝 Records Page (New)
HTML diaries and Markdown documents unified in one page — a source/preview split editor with live rendering, format badges on every card, a filter bar (mixed / diary / document), Markdown import, and per-format export. Both formats share the same WebView2 editor container with independent toolbars and state management.

🔐 Windows Hello Unlock (New)
Unlock the privacy lock with a fingerprint or face scan — credentials stored in the Windows encrypted vault, never in plaintext. Falls back to password entry on any failure; credential lifecycle syncs with every password change, lock removal, and database reset.

🔍 API Three-Entry Detection Suite
Connectivity testing with vendor recognition across 15+ providers, a status diagnostic that infers balance and measures latency/TTFT, and an eight-probe relay-station detector that scores identity authenticity, capability benchmarks, format compliance, token billing accuracy, tool calling, hidden injection, response poisoning, and long-context truncation — producing a weighted four-tier risk verdict with anti-cheat nonce tagging.

💳 Eight Memo Entry Types
Bank Card, WiFi, and ID Card join Email, Account, API Key, Website, and Custom — each with tailored required fields, per-field copy permissions, and random icon assignment for custom entries.

📊 CSV Import/Export (New)
Export memos as CSV compatible with KeePass and Bitwarden; import auto-detects all three dialects with a preview dialog, duplicate filtering, formula-injection protection, and multi-line note preservation.

📄 PDF / HTML Collection Export (New)
Export all records as a printable HTML collection or an A4 PDF via headless WebView2 rendering — with brand logo, CSP content-security policy, and print-optimized CSS.

🔎 Indexed Fuzzy Global Search
Ctrl+K now uses a pre-built search index with subsequence fuzzy matching, space-separated AND queries, and title-first relevance ranking — dramatically faster on large databases.

⏰ Time Reminders (New)
Set due dates on any to-do or note — the card border transitions continuously from green to red as the deadline approaches, a Toast notification fires at the system level, a scheduled task launches Novara even when closed, and an in-app dialog presents the content on return.

🏷️ Source Tags & Tab Filtering
Search results and recycle-bin cards carry brand-colored source tags; the Plan and Records pages each support in-tab filtering (mixed / todo / note, mixed / diary / document) via nav-arrow dropdowns.

🛠️ Five Rounds of Full-Application Review
Over 200 issues resolved across storage, crypto, UI, IPC, host processes, MCP, API services, and deployment — including data-loss race conditions, encryption state-machine gaps, cross-process sync holes, and platform-specific edge cases. Every fix was verified by re-reading the affected code paths.

Runtime & Compatibility

Compatibility: Windows 10 2004 (Build 19041)+ / Windows 11 (all versions)
Self-contained package bundles .NET 8 and the WebView2 runtime — no additional manual installation required
The desktop sticky-note host (StickNoteHost.exe) and the MCP server (NovaraMCP.exe) are deployed alongside the main app and installed/uninstalled with it

Installation

Download the Novara_Setup_5.0.0.exe installation package below and follow the installation wizard to complete deployment. Existing 4.0 data is preserved and works directly.

ℹ️ Note for this Major Feature Release

A Major Feature Release introduces substantial new features and architectural changes. It does not guarantee production‑grade stability. Subsequent hotfixes and minor updates will be shipped to resolve defects. For the most reliable experience, you are strongly advised to download the latest available release from this repository.

更新概述

大版本升级 ——Novara 本地优先知识管理平台的决定性版本。本次新增 MCP 智能代理接口实现 AI 辅助知识管理；全新统一记录页面，同时支持 HTML 日记与 Markdown 文档；支持 Windows Hello 生物识别解锁；三层 API 检测套件，包含中继探测能力；新增 CSV 导入导出、PDF 与 HTML 合集导出、索引模糊全局搜索，以及系统级通知的时间提醒功能。经过五轮全应用评审，修复全部模块共计 200 余项问题。所有数据完全本地存储：无云端上传、无遥测上报、无需注册账号。

主要更新内容

🤖 全新：MCP 智能代理接口
基于 Model Context Protocol 对外暴露 14 项工具，允许任意 AI 代理对全部五类数据卡片执行创建、读取、更新、列表查询、搜索、删除操作；具备令牌鉴权、按进程授权、敏感字段脱敏，隐私锁拦截机制 —— 数据库锁定时会完全阻断全部访问。

📝 全新：记录页面
HTML 日记与 Markdown 文档统一收纳至同一页面；提供源码 / 预览双栏分栏编辑器，实时渲染；每张卡片附带格式标识；支持筛选栏（全部 / 日记 / 文档）；支持 Markdown 导入，以及按格式单独导出。两种格式复用同一套 WebView2 编辑器容器，各自拥有独立工具栏与状态管理。

🔐 全新：Windows Hello 解锁
可通过指纹、人脸扫描解锁隐私锁；凭证存储于 Windows 加密保险箱，绝不以明文形式保存。识别失败会自动降级回密码输入；凭证生命周期跟随密码修改、移除锁定、数据库重置同步更新。

🔍 三层 API 检测套件
支持 15 家以上服务商识别连通性检测；状态诊断可推断账户余额、测量延迟与首字符返回时间；八维度中继探测，校验身份真实性、能力基准、格式合规性、令牌计费准确性、工具调用、隐藏注入、响应投毒、长上下文截断；输出带防篡改随机标记的四层加权风险判定结果。

💳 八种备忘录条目类型
银行卡、WiFi、身份证，与邮箱、账号、API 密钥、网页、自定义条目共同组成八种类型；每种条目配备专属必填字段，支持字段单独复制权限，自定义条目可分配随机图标。

📊 全新：CSV 导入导出
备忘录可导出为兼容 KeePass、Bitwarden 的 CSV 文件；导入时自动识别三种主流 CSV 格式，提供预览弹窗、重复项过滤、公式注入防护，完整保留多行备注内容。

📄 全新：PDF / HTML 合集导出
可将全部记录导出为可打印 HTML 合集，或是 A4 尺寸 PDF；基于无头 WebView2 渲染，自带品牌 Logo、CSP 内容安全策略，以及打印优化 CSS 样式。

🔎 索引模糊全局搜索
Ctrl+K全局搜索启用预构建索引，支持子序列模糊匹配、空格分隔的与查询，标题优先相关性排序；数据库体量较大时搜索速度大幅提升。

⏰ 全新：时间提醒
可为任意待办或笔记设置截止日期；临近截止，卡片边框会由绿色平滑过渡至红色；触发 Windows 系统 Toast 通知；即便软件关闭，系统计划任务也可唤起 Novara；打开软件后弹窗展示提醒内容。

🏷️ 来源标签与标签页筛选
搜索结果、回收站卡片附带品牌色来源标签；计划页面、记录页面支持标签内筛选（全部 / 待办 / 笔记；全部 / 日记 / 文档），通过下拉箭头切换。

🛠️ 五轮全应用评审
修复存储、加密、UI、进程间通信、宿主进程、MCP、API 服务、部署相关共计 200 余项问题，包含数据丢失竞争条件、加密状态机缺陷、跨进程同步漏洞、各平台特有边界场景。每一处修复均重新复核对应代码路径。

运行环境与兼容性

• 兼容系统：Windows 10 2004（内部版本 19041）及以上 / Windows 11 全版本
• 独立安装包内置.NET 8 与 WebView2 运行时，无需手动额外安装组件
• 桌面便签宿主程序StickNoteHost.exe以及 MCP 服务端NovaraMCP.exe跟随主程序一同部署，随主程序完成安装、卸载

安装方式

下载下方Novara_Setup_5.0.0.exe安装包，跟随安装向导完成部署。v4.0 原有数据完整保留，可直接使用。

ℹ️ 关于本重大功能版本说明

Major Feature Release 代表该版本引入大量全新功能与架构调整，并不等同于生产级稳定版本。版本发布后会持续推送热修复与迭代更新修复各类缺陷。为获得最可靠的使用体验，强烈建议下载本仓库内最新的可用版本。

Novara v4.0.0

Novara v4.0.0 Major Feature Release

Update Overview

Major version upgrade focused on polish, productivity, and reliability. Cards can now be reordered by dragging, desktop to-do notes sync back to the main app, diary entries export as Markdown, and the API connectivity test receives a full overhaul with vendor recognition. A data overview panel, keyboard shortcuts, rolling backups, and an extensive brand-design refresh round out the release. All data remains fully local: no cloud uploads, no telemetry, no account registration.

Key Updates

🎨 Brand Design Refresh
Extensive brand elements across the interface — buttons, dialogs, dropdowns, checkboxes, and more — with consistent brand-blue styling, hover/press states, and a unified visual language.

🖱️ Card Drag & Reorder (New)
Drag to reorder cards on all four pages — order is persisted to disk and survives restarts.

📋 Desktop To-do Sync (New)
To-do cards on the desktop are now fully bidirectional: check a to-do on a desktop note and it writes back to the main app, which stays the single source of truth.

📤 Markdown Export (New)
Export diary entries as Markdown — per entry, with or without images.

🔍 API Connectivity Test Overhaul
Vendor recognition against common providers (OpenAI, OpenRouter, Anthropic, Gemini, Azure, Groq, Together, Perplexity, Zhipu, Qwen, DeepSeek, Moonshot, and more), a protocol matrix, refined error codes, and a new detail dialog.

📊 Data Overview Panel (New)
Entries, groups, to-do completion rate, and storage usage at a glance.

⌨️ Keyboard Shortcuts (New)
Switch tabs with Ctrl+1~4, open Settings with Ctrl+, and open the Recycle Bin with Ctrl+Shift+Backspace.

📦 Feature Iteration
The export dropdown now offers Markdown-summary and native-backup options.

🔒 Security Enhancement
The 30-minute lockout now uses a monotonic clock, preventing a bypass by rolling the system clock backward.

🛠️ Engineering & Reliability
Batch rendering for large lists, local crash logs (sensitive values redacted), rolling backups (up to 10 local snapshots), debounced writes, and a unit-test project (Novara.Core + xUnit).

Runtime & Compatibility

Compatibility: Windows 10 2004 (Build 19041)+ / Windows 11 (all versions)
Self-contained package bundles .NET 8 and the WebView2 runtime — no additional manual installation required
The desktop sticky-note host (StickNoteHost.exe) is deployed alongside the main app and installed/uninstalled with it

Installation

Download the Novara_Setup_4.0.0.exe installation package below and follow the installation wizard to complete deployment. Existing 3.0 data is preserved and works directly.

ℹ️ Note for this Major Feature Release

A Major Feature Release introduces substantial new features and architectural changes. It does not guarantee production‑grade stability. Subsequent hotfixes and minor updates will be shipped to resolve defects. For the most reliable experience, you are strongly advised to download the latest available release from this repository.

更新概述

本次大版本聚焦体验打磨、生产效率与可靠性提升。现已支持卡片拖拽排序，桌面待办笔记可双向同步回主程序，日记支持导出为 Markdown 格式；API 连通性检测完成全面重构，新增服务商识别能力。版本还新增数据总览面板、键盘快捷键、滚动备份功能，并对整套品牌视觉设计进行大规模更新。所有数据完全本地存储：无云端上传、无遥测上报、无需注册账号。

主要更新内容

🎨 品牌视觉全面改版
界面全套品牌元素重构，包含按钮、弹窗、下拉菜单、复选框等组件，统一品牌蓝色配色、悬浮 / 按压交互状态，形成一套完整统一的视觉设计语言。

🖱️ 全新：卡片拖拽排序
四大页面全部支持拖拽调整卡片顺序；排序结果持久化保存到磁盘，重启软件后顺序不会丢失。

📋 全新：桌面待办双向同步
桌面待办卡片实现完整双向同步：在桌面便签勾选待办项，修改会实时回写到主程序，主程序始终作为唯一可信数据源。

📤 全新：Markdown 导出
日记条目可导出为 Markdown，支持单条导出，可选择是否一并导出图片。

🔍 API 连通性检测全面重构
可识别主流服务商（OpenAI、OpenRouter、Anthropic、Gemini、Azure、Groq、Together、Perplexity、智谱、通义千问、DeepSeek、月之暗面等）；新增协议矩阵、优化错误码，新增详情弹窗。

📊 全新：数据总览面板
可一眼查看条目数量、分组数量、待办完成率、磁盘存储占用。

⌨️ 全新：键盘快捷键
Ctrl+1~4切换标签页；Ctrl+,打开设置；Ctrl+Shift+Backspace打开回收站。

📦 功能迭代
导出下拉菜单新增 Markdown 摘要、原生备份两套导出选项。

🔒 安全增强
30 分钟密码错误锁定采用单调时钟实现，修改系统时间回拨无法绕过锁定机制。

🛠️ 工程与可靠性优化
大列表批量渲染；本地崩溃日志（敏感信息自动脱敏）；滚动备份（最多保留 10 份本地版本快照）；防抖写入；新增单元测试项目（Novara.Core + xUnit）。

运行环境与兼容性

• 兼容系统：Windows 10 2004（内部版本 19041）及以上 / Windows 11 全版本
• 独立安装包内置.NET 8 与 WebView2 运行时，无需手动额外安装组件
• 桌面便签宿主程序StickNoteHost.exe跟随主程序一同部署，随主程序完成安装与卸载

安装方式

下载下方Novara_Setup_4.0.0.exe安装包，跟随安装向导完成部署。v3.0 版本原有数据完整保留，可直接使用。

ℹ️ 关于本重大功能版本说明

Major Feature Release 代表该版本引入大量全新功能与架构调整，并不等同于生产级稳定版本。版本发布后会持续推送热修复与迭代更新修复各类缺陷。为获得最可靠的使用体验，强烈建议下载本仓库内最新的可用版本。

Novara v3.0.0

Novara v3.0.0 Major Feature Release

Update Overview

Major version upgrade — a new generation of the local-first knowledge manager. This release introduces authenticated encryption, desktop sticky notes, global search, a recycle bin, and five full interface languages, together with deep system integration. All data remains fully local: no cloud uploads, no telemetry, no account registration.

Key Updates

🔒 Security Enhancement
Authenticated encryption upgraded to AES-256-GCM — any tampering with the encrypted database is now detected by the cryptographic tag and reported, instead of being silently misread
Password length extended from 6-digit PIN to 6–64 characters; legacy 2.0 databases (AES-CBC) migrate to the new format with a single confirmation on first unlock — existing data upgrades in place with zero loss
Password hashing hardened with dual-salt SHA-256; the 30-minute lockout after 5 failed attempts persists across restarts
Uninstaller now also cleans the WebView2 runtime data directory, leaving no residue behind

🖥️ Desktop Sticky Notes (New)
Send any note card to your desktop with one click — a lightweight host process keeps notes visible even when Novara is closed
Drag & resize, lock & pin (always on top, survives Win+D), full theme and language sync
Edit directly from the desktop: right-click a note and Novara opens its editor automatically; edits and deletions sync back in real time
System reminders: create countdown cards that ring, pulse, and close automatically — even when the app is not running

🔍 Global Search (New)
Press Ctrl+K anywhere to search memos, file paths, todos, notes, and diary entries in one aggregated list
Click any result to jump straight to the item — Novara navigates, scrolls the target into view, and pulses it with a brand-colored flash

🗑️ Recycle Bin (New)
Deleted cards are recoverable for 7 days instead of vanishing instantly — restore, permanent-delete, or clear all
Recycled data is excluded from exports, and deleted desktop notes are removed from the desktop automatically

🌐 Five-Language UI
Complete interface in 简体中文, 繁體中文, English, 한국어, and 日本語, plus a Follow System option matching your Windows language
Static resource dictionaries — zero crash risk, no runtime XAML merging, instant lookups

📦 Feature Iteration
Path entries can be picked directly with built-in file/folder selectors, plus real-time validity detection (green/red borders)
New Website entry type for memos; email and account entries now validate required fields before saving
Export for new machines excludes file-path entries by default (optional to include) — no more red-flagging dead paths
Global right-click menu: add any folder/file to path backups from Explorer, or open Novara from the desktop
Unified button design system — primary actions in brand blue, secondary in ghost outline, destructive in red
Card entrance animations and refined hover states across all pages

🛠️ Fixes
Fixed the v2.0 known issue: faded borders / weakened outlines on light-theme buttons — resolved with the unified button system
Fixed a two-instance write race when restarting for theme/language changes
Fixed missing data on rapid save during exit, and file-writing exceptions under high-frequency edits
Fixed WebView2 editor edge cases (blank overwrite protection, reverse-selection, title sanitization)
Fixed stale desktop-note sync after import/reset, and removed leftover sticky-note ghosts
Over 60 issues found in five full-application review rounds were fixed, including navigation, storage, IPC, and host-process edge cases

Known Issues

After overlay-upgrading from 2.0, the desktop/taskbar shortcut icon may briefly show the old logo because Windows caches icons per install path. The installer now notifies the shell to refresh automatically; in rare cases a log-off or icon-cache reset is needed. A fresh install is unaffected.

Runtime & Compatibility

Compatibility: Windows 10 2004 (Build 19041)+ / Windows 11 (all versions)
Self-contained package bundles .NET 8 and the WebView2 runtime — no additional manual installation required
The desktop sticky-note host (StickNoteHost.exe) is deployed alongside the main app and installed/uninstalled with it

Installation

Download the Novara_Setup_3.0.0.exe installation package below and follow the installation wizard to complete deployment. Existing 2.0 data is preserved and upgraded in place.

ℹ️ Note for this Major Feature Release

A Major Feature Release introduces substantial new features and architectural changes. It does not guarantee production‑grade stability. Subsequent hotfixes and minor updates will be shipped to resolve defects. For the most reliable experience, you are strongly advised to download the latest available release from this repository.

更新概述

大版本升级 —— 新一代本地优先知识管理工具。本次更新带来认证加密、桌面便签、全局搜索、回收站功能，完整支持五国界面语言，同时深度集成 Windows 系统。所有数据完全保存在本地：无云端上传、无遥测上报、无需注册账号。

主要更新内容

🔒 安全增强
升级加密方案为 AES‑256‑GCM 认证加密；加密数据库一旦被篡改，密码学标签可检测到损坏并主动告警，不再静默读取错误数据。
密码由 6 位数字 PIN 扩展为 6‑64 位字符；旧版 2.0（AES‑CBC）数据库首次解锁时一键迁移至新格式，原有数据原地升级，零数据丢失。
密码哈希采用双盐值 SHA‑256 加固；连续 5 次密码错误触发 30 分钟锁定，锁定状态重启软件依然生效。
卸载程序会同步清理 WebView2 运行时数据目录，做到无残留。

🖥️ 全新：桌面便签
任意笔记卡片一键发送至桌面；轻量后台进程保证即便 Novara 主程序关闭，便签依旧可见。
支持拖拽缩放、锁定置顶（Win+D 显示桌面也不会被隐藏），主题、语言与主程序完全同步。
可直接在桌面编辑：右键便签即可唤起 Novara 编辑器，修改、删除内容会实时双向同步。
系统提醒功能：创建倒计时卡片，支持铃声提醒、闪烁弹窗、自动关闭，软件未运行也可触发提醒。

🔍 全新：全局搜索
任意界面按下 Ctrl+K，即可聚合检索备忘录、文件路径、待办、笔记、日记全部内容。
点击搜索结果直接跳转对应条目；软件自动定位滚动至目标位置，并以主题色闪烁高亮目标。

🗑️ 全新：回收站
删除卡片不会立刻消失，保留 7 天可恢复；支持单条还原、永久删除、清空回收站。
回收站内容不会被导出备份；被删除的桌面便签会自动从桌面移除。

🌐 五语言界面
完整界面支持简体中文、繁體中文、English、한국어、日本語，同时提供跟随系统选项，自动匹配 Windows 系统语言。
采用静态资源字典，不存在运行时 XAML 合并逻辑，无崩溃风险，查询响应即时。

📦 功能迭代
可通过内置文件选择器直接选取路径条目，实时校验路径有效性，用绿 / 红边框直观标记状态。
备忘录新增网页条目类型；邮箱、账号类条目保存前会校验必填字段。
导出至新设备时，默认不导出文件路径类条目（可手动开启），避免大量失效路径标记为异常。
系统全局右键菜单：资源管理器可将文件夹 / 文件加入路径备份，桌面可直接唤起 Novara。
统一按钮设计体系：主按钮使用品牌蓝色，次要按钮幽灵线框样式，危险操作使用红色。
全部页面新增卡片入场动画，优化悬浮交互状态。

🛠️ 问题修复
修复 v2.0 已知问题：浅色主题下按钮边框变淡、轮廓显示弱化，通过统一按钮组件彻底解决。
修复切换主题 / 语言重启时，双实例并发写入竞争问题。
修复退出时快速保存造成的数据丢失，以及高频编辑场景下的文件写入异常。
修复 WebView2 编辑器多项边界问题：空白覆盖防护、反向选区、标题内容过滤。
修复导入 / 重置后桌面便签同步异常，清除残留幽灵便签窗口。
完成五轮完整全应用评审，修复导航、存储、进程间通信、后台宿主进程等场景共计 60 余项问题。

已知问题

从 2.0 版本覆盖升级后，由于 Windows 会按安装路径缓存图标，桌面 / 任务栏快捷方式会短暂显示旧版图标。安装程序已主动通知系统刷新外壳；极少数情况需要注销账号或者重置图标缓存。全新安装不受该问题影响。

运行环境与兼容性

兼容系统：Windows 10 2004（内部版本 19041）及以上 / 全部 Windows 11 版本
独立安装包内置.NET 8 与 WebView2 运行时，无需手动额外安装组件。
桌面便签后台程序 StickNoteHost.exe 和主程序绑定部署，跟随主程序一同安装、卸载。

安装方式

下载下方 Novara_Setup_3.0.0.exe 安装包，跟随安装向导完成部署。原有 2.0 版本数据会被保留并原地升级。

ℹ️ 关于本重大功能版本说明

Major Feature Release 代表该版本引入大量全新功能与架构调整，并不等同于生产级稳定版本。版本发布后会持续推送热修复与迭代更新修复各类缺陷。为获得最可靠的使用体验，强烈建议下载本仓库内最新的可用版本。