OrPAD v1.0.0-beta.9

OrPAD v1.0.0-beta.9

Beta.9 makes the workspace interface consistently localizable and adds native
search to every format-aware Preview surface.

Preview search

• Added a Preview search bar with literal text matching, match counts,
  wraparound previous/next navigation, case matching, and live highlighting.
• Ctrl+F / Cmd+F now follows the active Source or Preview surface in split
  view, while Find in Preview remains directly available from Commands.
• Search results refresh as Markdown, structured data, Mermaid, Git comparisons,
  and other previews rerender.
• Sanitized HTML previews are searchable inside their sandboxed srcdoc frame.
  The frame grants only allow-same-origin for parent-owned CSS Highlight
  ranges; scripts, navigation, forms, popups, and remote resources remain
  blocked.
• The same Preview search behavior is available in desktop and web builds.

Localization completion

• Expanded every one of the 30 locale packs to the same 756-key interface
  contract, preserving placeholders across translations.
• Localized workspace Home, artifact capability labels, Source/Split/Preview
  controls, Preview search, command and quick-open palettes, creation dialogs,
  templates, Git status actions, recovery and external-change notices, status
  counters, URL import, sharing, and structured-preview empty/error states.
• Locale changes now refresh dynamic surfaces immediately instead of updating
  only static data-i18n elements.
• Added right-to-left document direction for Arabic and Hebrew.
• Consolidated the supplemental locale layer into the canonical JSON packs and
  added npm run check:locales to reject missing/extra keys, empty values,
  placeholder drift, and unknown static key references.

Validation

• Added Electron coverage for Markdown Preview search, navigation, match case,
  live Korean UI refresh, cleanup, and searchable sandboxed HTML.
• Added web coverage for Preview search and CSS Highlight registration.
• Retained the local-first boundary: search operates only on rendered local
  content and performs no network requests.

OrPAD v1.0.0-beta.8

OrPAD v1.0.0-beta.8

Beta.8 is the first visibly workspace-first release after the beta.7 product
reset. It turns the retained editor and preview engine into a complete local
project loop: open a folder, navigate or create artifacts, edit with truthful
format controls, save safely, and return to the same workspace context.

Workspace-first product loop

• Added a dedicated Home screen centered on Open Workspace, Open File,
  New Artifact, and From Template instead of execution-oriented concepts.
• Added persistent desktop workspace and artifact history, a clear workspace
  identity, Home/Commands navigation, and compact Explorer actions for creating
  files and folders, collapsing the tree, and refreshing it.
• Added guided artifact creation for Markdown, JSON, YAML, CSV, Mermaid, HTML,
  XML, TOML, INI, properties, environment files, source code, logs, and text.
• Restored desktop clean workspace tabs, active tab, pinning, tab order, selection,
  scrolling, expanded folders, and each tab's legal view mode after restart.
  Unsaved text remains protected by the separate desktop recovery system.
• Closing a workspace now revokes its active folder capability. Clean workspace
  tabs close; modified buffers become detached, recoverable documents.

Truthful editing and preview capabilities

• Source, Split, and Preview are now labeled, stored per tab, and constrained by
  the active artifact. Source-only files no longer expose empty preview modes.
• Added an artifact capability panel and platform boundary labels so desktop and
  web limitations are visible rather than implied.
• Added language-aware handling for Svelte and generic INI/conf files where the
  bundled CodeMirror language data can support them.
• JSONL structure view is read-only and pauses on invalid or interior blank
  records instead of skipping them and destructively rewriting the source.
• Known binary formats, text-like files containing binary or invalid UTF-8
  data, and artifacts above the 64 MiB local editing limit now produce explicit
  feedback instead of an empty editor, unbounded buffering, or a silent no-op.

Safer local file operations

• Replaced renderer-derived CRUD with main-owned workspace operations that
  validate a single path segment, enforce workspace containment, reject root
  mutation, create files exclusively, and refuse rename collisions.
• Desktop deletion uses one native confirmation and moves entries to Trash.
  Browser deletion is clearly permanent; unsupported browser folder rename is
  hidden rather than faked.
• Renaming folders remaps descendant open tabs. Deleting files or folders keeps
  modified buffers as detached documents instead of discarding them.
• Reads now carry content revisions. Guarded saves reject a stale revision even
  if a filesystem-watch event has not arrived, preventing silent overwrite of
  external edits. Clean tabs refresh automatically; conflicting and missing
  files keep the local buffer and present explicit choices.

Preview and recovery hardening

• Markdown output is sanitized with DOMPurify before insertion; active elements,
  event handlers, and style injection are removed.
• HTML preview remains sanitized and sandboxed and now blocks remote subresources
  by default.
• Recovery records use bounded, atomic writes and opaque untitled-document keys.
  Stored paths are never accepted as new filesystem authority; unauthorized
  records recover as detached unsaved documents.
• Desktop session paths are restored only inside the currently main-approved workspace; browser folder sessions are not persisted without a stable handle identity.

Desktop and web boundaries

• Desktop advertises native picker, watcher, Trash, recovery, terminal, Git, and
  persistent-history capabilities through a shared capability contract.
• Chromium web builds support the browser-granted directory loop, collision-safe
  create, file rename, permanent delete, and explicit save handles for the
  current page. Folder permissions are not claimed as persistent after reload.
• Firefox and Safari continue to open individual files and save downloads; folder
  and terminal actions are presented as unavailable.
• The web Home screen now exposes Open from URL… as an explicit HTTPS import.
  URL imports remain unsaved local copies, enforce timeout and 10 MiB limits,
  reject untrusted cross-origin redirect responses, and cap Gists to 20 files
  and 10 MiB aggregate content.

Compatibility and migration

Beta.8 does not delete or migrate user files. Legacy .or-* data remains inert
and untouched. OrPAD does not restore orchestration, agents, pipelines, runbooks,
background execution, cloud sync, credential storage, or artifact execution.
The generic desktop terminal remains a separate, explicitly user-operated tool.

Beta prereleases are not promoted as stable releases.

OrPAD v1.0.0-beta.7

OrPAD v1.0.0-beta.7

Beta.7 completes OrPAD's product reset as a local-first, multi-format artifact
workspace. The release removes all former orchestration, automation, and execution
product code. The editor, previews, workspace navigation, desktop terminal, local
Git inspection, web/PWA access, and platform integration remain.

Migration stages

1. Surface removal

• Removed the former authoring, execution, monitoring, package-management, and
  generated-workflow entry points from the main window, command palette, menus,
  startup routing, and secondary windows.
• Removed related format bars, inspectors, graph canvases, dashboards, dialogs,
  translations, styles, and terminal launch presets.
• Restored the workspace around ordinary artifacts: editable source, format-aware
  previews, files, search, outline, links, tabs, themes, and templates.

2. Execution/backend deletion

• Deleted the privileged handlers, preload bridges, process adapters, validators,
  scanners, execution records, observation streams, and secondary-window
  controllers that supported the removed product.
• Removed browser adapter shims and runtime exports for those capabilities.
• Artifact files are never interpreted as executable plans. The retained terminal
  runs only commands explicitly entered or selected by the user.

3. Formats/config/dependencies cleanup

• Removed legacy product-specific file associations, web file-handler entries,
  starter content, registries, audit scripts, packaging rules, and npm commands.
• Removed dependencies and build inputs that were used only by the deleted
  subsystem.
• Kept the supported artifact set aligned across the Electron runtime, web
  adapter, PWA manifest, desktop packaging, and extension-parity tests.

4. Product/test/security redefinition

• Rewrote the README, template catalog, test guide, contributor guide, release
  notes, and security baseline around the artifact workspace that actually ships.
• Replaced stale execution expectations with launch, theme, web, format,
  authority, terminal, and artifact editing/preview regression coverage.
• Added a regression boundary that verifies removed UI and preload capabilities
  do not reappear while representative document and data formats continue to
  edit and preview.
• Updated the threat model for the retained Electron sandbox, filesystem
  authority, URL imports, generic terminal, Git operations, optional telemetry,
  and signed updater.

Legacy user data

Upgrading does not delete old workspace directories, execution records, saved
configuration, or other user-created files. OrPAD no longer discovers, validates,
observes, migrates, or executes that legacy data. Users may archive or remove it
manually after making any backups they need.

Notes

• Normal artifact parsing, editing, validation, conversion, and preview rendering
  remain local to the device.
• Explicit URL imports, external-link opening, update checks, and configured
  telemetry are the app-managed network boundaries. Programs explicitly started
  in the terminal retain the current user's normal OS and network authority.
• Beta prereleases are not promoted as stable releases.

OrPAD v1.0.0-beta.6

OrPAD v1.0.0-beta.6

This is a major prerelease. The orchestration subsystem has been fully rebuilt
("G2"): the old authoring / static-graph editor / node-pack backend was removed
and replaced with a governed agent-delegation core and a live Run GUI. The
in-app AI sidebar was removed, and a Run GUI window startup flash was fixed.

Added

• Run GUI — a dedicated multi-run window that visualises governed agent runs
  as a live data-flow graph (agent lanes ↔ file nodes, per-node read/write
  chips, branch-aware DAG, parallel research fan-out), with a run-history picker,
  selectable layout themes, zoom-to-fit, and follow-active camera.
• Governed delegation core — a zero-node run engine that grounds in prior
  art, applies results to the workspace, and enforces a verification gate as the
  trust boundary, with a metric-gated iterate loop and a time-cap / tree-kill
  stop signal with partial recovery.
• Codex provider — run governed delegation with the codex CLI (alongside
  Claude Code), with per-strand themes and multi-active glow in the graph.
• Terminal-driven Run GUI — launching an AI CLI in the integrated terminal
  can be observed live in the Run GUI (read-only observation via PTY-stream
  parsing).

Removed

• The in-app AI sidebar (AI chat, Assist tools, and the MCP servers panel),
  its toolbar button, the terminal "Ask AI" / "Explain error" actions, and the
  associated main-process bridges. OrPAD's AI capability is now centred on
  governed orchestration runs rather than an in-editor chat panel.

Fixed

• The Run GUI window no longer flashes the full OrPAD editor before switching to
  the run layout — the orchestration layout is now applied before first paint.

Notes

• Beta prereleases are not auto-served to stable users.

OrPAD v1.0.0-beta.5

OrPAD v1.0.0-beta.5

OrPAD v1.0.0-beta.5 expands source and text file handling across the desktop
app, PWA file handler, and editor language detection.

Changes

• Added desktop file associations for common source, stylesheet, script,
  config, diff, and SVG formats.
• Expanded the web app manifest file handlers so launched source/text files
  open through the PWA flow.
• Added CodeMirror language detection and async language loading for supported
  source file extensions.
• Completed editor syntax token colors for CodeMirror source files so keywords,
  names, literals, punctuation, and invalid tokens use distinct theme colors.
• Fixed Editor Only and Preview Only layout switching after resizing Split View.
• Updated quick-open format aliases for source, shell, diff, SVG, and related
  text formats.
• Added regression coverage for opening and saving editable source/text files
  on desktop, through the web launch flow, and across editor view mode changes.

OrPAD v1.0.0-beta.4

OrPAD v1.0.0-beta.4

OrPAD v1.0.0-beta.4 focuses on package sharing readiness, Package Manager
navigation, and release audit cleanup.

Changes

• Reworked Package Manager browse rows into compact full-width package slots
  with name, author, Detail, and Import actions.
• Moved registry package inspection into a focused Detail modal so large
  package catalogs are easier to scan.
• Added Registry governance metadata for official PR-reviewed OrPAD packages,
  custom Registry sources, third-party review claims, and discovery-only
  metadata.
• Added an initial official Registry JSON under registry/node-packs.json and
  wired the default Package Manager source to the repository-hosted copy.
• Added Package Manager trust labels and warnings so custom Registry URLs
  cannot self-declare OrPAD official approval.
• Added Registry authoring, source management, workspace lock, install/update,
  and review-state tests for package sharing flows.
• Updated release dependencies so npm audit --omit=dev --audit-level=high
  passes for production dependencies.

v1.0.0-beta.3

OrPAD v1.0.0-beta.3

OrPAD v1.0.0-beta.3 completes the OrPAD identity update for Orchestration
Pipeline Authoring & Development.

Changes

• Updated desktop app metadata, installer identity, protocol handling, web/PWA
  manifests, updater metadata, and release automation to use the OrPAD name.
• Refreshed in-app copy, documentation, security notes, tests, and localization
  files so user-facing surfaces use consistent OrPAD terminology.
• Rebuilt desktop, web, PWA, favicon, and installer icon assets with the OrPAD
  wordmark while preserving the logo aspect ratio.
• Published signed release manifests for Windows x64 and macOS universal
  release assets.

v1.0.0-beta.2

Second public beta of FormatPad. This release turns the initial beta into a more release-ready build: the web app is now packaged and deployed from the repo, desktop updates have signed verification metadata, and the editor gains the AI / MCP / terminal / Git workflows that make FormatPad feel like a document workbench rather than just a viewer.

Web app

Try it without installing: luke-youngmin-cho.github.io/FormatPad

The web build now ships through the GitHub Pages deployment workflow instead of committed docs/ output. It uses the same renderer as desktop with a browser platform adapter. Chromium-based browsers (Chrome, Edge, Arc, Opera) get the richest web experience through the File System Access API: folder browsing, read-write workspace files, workspace search, wiki-link backlinks, and browser-backed Git status flows. Firefox and Safari remain supported for single-file open and Save As download fallback; Open Folder shows a clear Chromium-required message.

What's new since beta.1

AI-native editing

• Added the AI sidebar, provider plumbing, action cards, and conversation history.
• Desktop provider keys are stored in the main process key store and provider requests run through the main-process proxy instead of exposing plaintext keys to the renderer.
• Added provider support for OpenAI, Anthropic, OpenRouter, Ollama, and OpenAI-compatible endpoints.
• Added format-aware AI actions for Markdown, JSON, CSV/TSV, and Mermaid workflows.

MCP and terminal workflows

• Added MCP server registry, permission UI, tool/resource listing, config import/export, and default server templates.
• Added a command runner and integrated PTY terminal with shell integration for PowerShell, bash, and zsh.
• Terminal output can be copied, inserted into the active document, or sent to AI for explanation.

Git, templates, snippets, and command UX

• Added Git status scanning, branch status, hunk gutter, diff/revert helpers, and browser-backed Git filesystem support for web workspaces.
• Added command palette, quick-open, built-in snippets, and template picker flows for PRD, ADR, handover, session log, spec sheet, task list, and tracker documents.
• Added stronger tab behavior coverage, template generation tests, and large Markdown performance coverage.

Release and security hardening

• Added signed release manifests for updater verification. The updater now requires signed metadata and verifies installer checksums before auto-install.
• Added IPC authority checks for workspace/file access, AI key containment coverage, CSP/XSS coverage, URL-import size limits, and shared-fragment decompression limits.
• Added bundle-size gates, web deployment workflow, E2E smoke workflow, security documentation, and release workflow fixes for native build tooling.

Install

Web

No download required. Open luke-youngmin-cho.github.io/FormatPad. Use a Chromium-based browser for full workspace features, or any modern browser for single-file editing.

Windows

Download FormatPad.Setup.1.0.0-beta.2.exe from Assets below and run the installer. This beta ships the Windows x64 installer.

macOS

Download FormatPad-1.0.0-beta.2-universal.dmg, mount it, and either launch FormatPad directly from the DMG or drag it to /Applications first.

This beta is not signed with an Apple Developer ID. On first launch, macOS may block it with an "Apple could not verify" warning. Clear the quarantine flag once from Terminal:

xattr -cr /Applications/FormatPad.app
open /Applications/FormatPad.app

Known issues

• macOS signing - the DMG is unsigned and unnotarized for now. This is expected for the free public beta until a paid Apple Developer ID pipeline exists.
• macOS support floor - the desktop app uses Electron 33, so macOS 11 Big Sur or newer is required. Catalina users should use the web app.
• Firefox / Safari web limits - single-file open and Save As work, but folder workspaces require Chromium because the File System Access API is not available there.
• Windows ARM - beta.2 provides the Windows x64 installer. Windows 11 ARM users may need x64 emulation until a native ARM64 asset is published.
• Beta status - MCP, terminal, AI actions, and web workspace flows are new in this beta and should be treated as actively hardening areas.

Full Changelog: v1.0.0-beta.1...v1.0.0-beta.2

Full Changelog: v1.0.0-beta.1...v1.0.0-beta.2

Full Changelog: v1.0.0-beta.1...v1.0.0-beta.2

Full Changelog: v1.0.0-beta.1...v1.0.0-beta.2

Full Changelog: v1.0.0-beta.1...v1.0.0-beta.2

v1.0.0-beta.1

Initial public beta of FormatPad — a fast, multi-format viewer and editor for Windows, macOS, and the web. One app for Markdown, JSON, YAML, CSV/TSV, TOML, XML, HTML, Mermaid, INI/conf, .env, log, and plain text. Every format gets a dedicated viewer and toolbar; every viewer is editable and round-trips through the text editor.

Web app

Try it without installing: luke-youngmin-cho.github.io/FormatPad

Same codebase as the desktop, running in a browser via a File System Access API adapter. Chromium-based browsers (Chrome, Edge, Arc, Opera) get folder browsing, workspace search, wiki-link backlinks, and read-write file access. Firefox and Safari work for single-file open and Save As (download); Open Folder surfaces a clear "needs Chromium" message rather than silently failing. Desktop-only features: OS default-app registration, file-tree watcher (web uses a Refresh button), auto-save recovery on restart, in-app auto-updater.

What's included

Viewers and formats

• Markdown — split-view live preview with GitHub Flavored Markdown (tables, task lists, strikethrough, ==highlight==), KaTeX math, Mermaid diagrams in fenced blocks, highlight.js code blocks, and wiki-style [[links]] with autocompletion + a backlinks panel. HTML / PDF export with theme styling.
• JSON — editable tree view, JSONPath queries, schema validation, side-by-side diff panel, beautify / minify / sort keys / repair, copy as YAML.
• YAML / TOML / INI — tree view that preserves comments and layout through the text side; cross-format conversion to clipboard.
• CSV / TSV — spreadsheet grid with sort, filter, row/column insert-delete, transpose, trim / dedupe / fill-down / split-column; copy as Markdown / JSON / YAML.
• JSONL / NDJSON — grid for homogeneous records; minify-each-line; to/from JSON array; CSV export; row/key stats.
• XML — element tree with XPath queries.
• HTML — rendered preview; beautify / minify / strip tags / entity encode-decode; copy as Markdown.
• Mermaid — live diagrams from .mmd files or fenced blocks; template inserts for flowchart / sequence / class / state / ER / gantt / pie / mindmap / timeline / journey; theme toggle.
• .env / .properties / .log / plain text — typed key-value table, validation, plain fallback.

Editor and UX

• Multi-tab editor (CodeMirror 6) with per-format syntax highlighting, drag reorder, pin, middle-click close, Ctrl+Tab switching
• Split / editor-only / preview-only view modes
• Bidirectional editor↔preview scroll sync — cursor in the editor follows the preview, and scrolling the preview pulls the editor viewport along
• Sidebar panels: Files (real-time watcher), Search (workspace-wide, regex + case), TOC (per-format outline with scroll-spy), Links (backlinks for Markdown wikilinks)
• Auto-save and crash recovery on restart
• Clipboard image paste → ./assets/
• Drag-and-drop file open

Theming and i18n

• 16 built-in themes (GitHub, Tokyo Night, Dracula, Nord, Catppuccin, Gruvbox, …) + custom theme creation
• 30 languages — selected at install or switched at runtime

Platform

• Windows — NSIS installer (multi-language), default handler for 20+ extensions
• macOS — universal DMG (arm64 + x64); unsigned, so clear the quarantine flag once: xattr -cr /Applications/FormatPad.app
• Web — GitHub Pages build, File System Access API on Chromium for full workspace, single-file fallback on Firefox/Safari
• In-app auto-update via GitHub Releases (desktop only)

Install

Web

No download — open luke-youngmin-cho.github.io/FormatPad. Use a Chromium-based browser for full workspace features, or any modern browser for single-file editing.

Windows

Download FormatPad.Setup.1.0.0-beta.1.exe from Assets below and run.

macOS

Download FormatPad-1.0.0-beta.1-universal.dmg, mount, and either launch FormatPad directly from the DMG or drag it to /Applications (or any writable location) first. Clear the quarantine flag once from Terminal:

xattr -cr /Applications/FormatPad.app
open /Applications/FormatPad.app

See the README for the full first-launch walkthrough.

Known issues

• macOS — window-resize responsive wrapping can overflow horizontally in narrow viewports across formats.
• Markdown — very wide code blocks / tables may not reflow correctly in narrow viewports (same root cause as above).