[Tracker] AeroFTP 4.0.8 - Known issues, patches & updates

[axpnet]

AeroFTP 4.0.x, Rolling Tracker

Umbrella issue for AeroFTP 4.0.x: known issues for the current release (v4.0.7, release notes, published 2026-06-18) and the patches/updates already landed on main for the next patch release (v4.0.8).

Before opening a new issue, please check the lists below. If your problem is already tracked here, just add a thumbs-up reaction or a comment with your environment (OS, version, provider) instead of filing a duplicate. We update this issue as bugs are found and fixed.

Found something that is not listed? Open a new issue and we will link it here.

What shipped in 4.0.7

See the v4.0.7 release notes and the previous tracker (#338).

Patches & updates queued for 4.0.8

Done on main, shipping in the next release. Theme: AeroProgress, a flagship pass on the transfer/encryption progress bar, plus the Quick Connect polish from @EhudKirsh's v4.0.6 connection review (#215), and AeroCrypt promoted from the roadmap to a first-class Crypt profile with navigate-out encrypted scope (#272).

#	Type	Change	Status	Commit	Ref
1		Filen Quick Connect now shows the local-bridge admin default as the username/password placeholder (the generic WebDAV/OpenDrive default was masking the preset's own admin placeholder) and spells it out in the bridge setup steps, so AeroFTP no longer silently tries admin without telling the user	🟢	63dbeaef4	#215
2		Filen CLI API key behaviour is documented like the 2FA secret: once saved it is stored encrypted in the vault and not shown again, reused automatically on reconnect; an edit-time indicator confirms a key is already saved instead of looking like it disappeared	🟢	63dbeaef4	#215
3		MEGA Quick Connect: the MEGAcmd "Fetch URL" setup hint said the button was "above" when it renders below the notes (corrected), and the native ↔ MEGAcmd sub-mode toggle is no longer locked while editing a saved profile, so an existing MEGAcmd profile can switch to Native API and back	🟢	63dbeaef4	#215
4		Koofr and OpenDrive no longer show the "Remember credentials for every protocol" opt-in: both their Native API and WebDAV surfaces use one credential set, so there is nothing to remember per protocol	🟢	63dbeaef4	#215
5		The "Remember credentials for every protocol" opt-in is now carried onto the new profile by Convert and Save-as-new (with its per-mode credential snapshots), instead of silently dropping to off after a convert	🟢	63dbeaef4	#215
6		The ⭐ favourite (and server-group membership) now survives switching a saved profile's protocol: the carry-over was already written to the vault, but the My Servers list kept the old profile id in memory and dropped the star; it now re-syncs on update (the storage-quota carry was already correct)	🟢	63dbeaef4	#215
7		The InfiniCloud WebDAV ↔ API and GitHub authentication-method toggles are now switchable while editing a saved profile too (same one-account, several-surfaces case as MEGA), instead of being frozen on whichever mode the profile was created with	🟢	63dbeaef4	#215
8		AeroProgress: the floating transfer progress card is back, now with a lane per file (parallel uploads and downloads visible at once), live speed, ETA and bytes, a collapsible speed graph, and a minimize-to-chip control. This restores the rich card that an earlier Transfer Queue refactor had demoted to a bare percentage pill, and the per-file data shown is the real data the backend already reported	🟢	58febdc5d, 25a75ca2b	-
9		The Transfer Queue panel shows real progress bars now: a bar per active file plus an aggregate footer with the X of Y file counter, instead of the previous one-pixel strip and a plain percentage	🟢	93a2d43af	-
10		A Settings opt-out for the transfer progress card, shown by default, under Settings then General, for users who prefer not to see it	🟢	432680673	-
11		Creating an AeroVault or adding files to one now shows a live progress bar for the compression and encryption stage with real bytes, instead of a bare spinner. This is most useful on a large vault where the operation takes a few seconds	🟢	9482e6c94, cedcf5920	-
12		Folder and multi-file transfers now show a real byte-based aggregate ETA on the progress card instead of a blank zero, computed from the actual remaining bytes over the live combined speed, and each file in the Transfer Queue shows its own live speed	🟢	27b05ac9a, e5bd4d8d7	-
13		The progress card, the shared progress bar and the speed graph now have a dedicated look for every one of the 8 app themes (light, dark, true dark, tokyo, cyber, green, ice, redhorse), instead of the extra themes falling back to the dark gradient	🟢	4bd860776	-
14		AeroProgress hardening after an independent correctness, security and performance review: the aggregate progress snapshot is now matched to its own transfer so concurrent folder transfers cannot skew each other's ETA, the displayed percentage is clamped, malformed sizes can no longer render as NaN, and the Transfer Queue rows are memoized so a long queue stays smooth during a transfer	🟢	e5bd4d8d7, b395dd8f1	-
15		Transfers over SFTP and cloud providers now show the real filling progress bar with live speed and ETA instead of a frozen "Streaming" state, and large file uploads complete reliably	🟢	0f5994e00	-
16		The floating transfer card now stays locked while a transfer is running (minimize only, no dismiss until 100 percent) so an active transfer can no longer be closed and lost, the Transfer Queue progress bar reflects only the current transfer instead of the whole session history, and every shown percentage is rounded to a whole number	🟢	0f5994e00	-
17		Native delta sync (byte-level differential transfer over SFTP) is re-enabled on the desktop and now fills the transfer card with live progress as the data moves over the wire. It had been temporarily routed through the classic streaming path because it showed no progress and a brand-new upload whose compressed delta exceeded the protocol frame limit failed outright; the delta payload is now split into protocol-safe frames, so those large uploads complete, and the bar reports real wire bytes during the network phase	🟢	b5ce15d74, b5b34bfbd, f8bca1408	-
18		Cross-profile (server to server) transfers now show a real ETA on the progress card, derived from the remaining bytes over the live aggregate speed, and AeroSync now uses the same shared progress bar as the rest of the app instead of its own bespoke inline strip	🟢	f4f028783	-
19		Visual consistency: the floating transfer card and several dialogs (host key, permissions, insecure-certificate warning, keystore import result) now share the same corner radius as the Transfer Queue panel and the other app dialogs	🟢	f52c07aa2	-
20		Quick Connect credential isolation: on the multi-mode Filen / MEGA / FileLu forms the S3 "Secret Access Key" field and the API "Password" field are the same input relabeled per protocol, so switching protocol tabs leaked the account password into the S3 Secret Access Key on the first visit to a bridge tab (and it then got saved/sent). Each mode now starts blank on its first visit unless the group genuinely shares one credential set (Koofr / OpenDrive), and a per-mode snapshot restores typed keys on return	🟢	81c8c5e96	#215
21		App-aware local-bridge detector: the Filen Desktop / MEGAcmd "Local WebDAV / Local S3" modes now show a live 🔴/🟠/🟢 status dot and an app-aware message (not installed / installed but not running / active) in place of the static "Requires …" warning, and Save is disabled only when the helper app is confidently not installed	🟢	81c8c5e96	#215
22		The tall "Setup … first" instruction box on the bridge modes is now collapsible, auto-collapsing once the bridge is active and expanding while it is not	🟢	81c8c5e96	#215
23		CLI aeroftp profiles --health: opt-in flag that probes the local-bridge helper apps for every bridge profile and prints a 🔴/🟠/🟢 status line after the table, mirroring the GUI detector (off by default so the plain listing stays instant; index matches the table # column)	🟢	c903d79b4	#215
24		CLI interactive profiles refresh (.) is now consistent across terminals: it clears the scrollback too (ESC[3J), so Alacritty / pwsh / Windows Terminal no longer keep old tables stacked in scrollback while WezTerm wiped them	🟢	c903d79b4	#341
25		AeroCrypt is now a first-class profile type: the native AeroCrypt overlay and the rclone-crypt interop overlay (equal grade) show as a single Crypt class in My Servers and in aeroftp-cli profiles instead of living only in CLI commands and .sh / .ps1 automation, with an Encrypted marker on the card; public share links and server-side checksums are disabled while inside the encrypted area (they would act on ciphertext, not your file)	🟢	780f8b38c	#272
26		Navigate-out encrypted scope: one connection can bind the overlay to a subfolder, show its contents decrypted, and step above it to see the rest of the server in clear (path-bar badge switches to an "outside" state), then step back in to transparent decryption. A single fail-closed rule drives the badge, the transfer routing and the action gating, so the badge can never disagree with what an operation actually does	🟢	eedc570d3	#272
27		Exporting a profile that carries an encrypted overlay and re-importing it now round-trips the binding for both overlay kinds (it previously dropped on import and the profile came back as plaintext); the stored-credential indicators reflect exactly what was restored	🟢	136a10fbb	#272
28		Public ROADMAP.md recalibrated against the shipped code: Streaming Scan moved to Just Shipped, Crypt / Compression / XChaCha20 promoted to In Flight, Crypt-as-profile marked implemented-and-merged, Share Link and Photo & Media descriptions aligned with what already ships	🟢	efa8f54d0	-
29		Cryptomator vault interop: "Create Cryptomator Vault..." from a selection now actually encrypts the selected files and folders into the vault (it was writing an empty vault skeleton and ingesting nothing), and AeroFTP vaults are now byte-for-byte interoperable with the real Cryptomator in both directions. Two format defects were fixed alongside: directory-ID hashing (AES-SIV with zero associated-data components per RFC 5297, not one empty component) and encrypted-filename encoding (padded base64url, not unpadded). Proven bidirectionally against the official cryptomator-cli 0.6.2 (cryptofs 2.8.0), sha256 byte-identical each way	🟢	ac284d4ce, a56b73fb6	#322
30		The My Servers used-storage scan no longer aborts with Used-storage scan failed: List recursive failed (400 Bad Request) on providers that reject a recursive listing: the GUI fast path now falls back to the per-directory BFS the shared scanner already uses, so the storage bar fills instead of erroring	🟢	e33923e1d	#277
31		Uploading a file larger than OpenDrive's hard 100 MB per-file limit (free/Basic) now fails once with a clear File too large instead of a misleading Permission denied retried three times: the size-limit 403 maps to a dedicated, non-retryable error	🟢	d688c9c85	#277
32		A WebDAV upload that Koofr rejects with 404 (its non-standard answer when the target's parent folder is missing or the path is a directory, where other servers return 409) now surfaces a clear, non-retryable error instead of an opaque Upload failed with status: 404 that a sync would keep retrying	🟢	ec951b0a2	#277
33		Provider docs now record OpenDrive's maximum single-file size (100 MB on free/Basic), distinct from the separate API upload ceiling, confirmed against the OpenDrive dashboard and a live 403	🟢	1a994ac6b	#277
34		The open AeroVault now has Export .txt / Export .json / Copy controls next to Change Password that produce a complete technical report of the container: metadata (format version, security level and cascade, encryption pipeline, compression profile, error-correction state), chunk-level stats (chunk and dedup counts, zstd level, per-file chunks), a files/folders/size summary with the full file list, and the last-operation receipt when one exists	🟢	e34cd1862	aerovault#5 (@EhudKirsh)
35		The AeroVault create screen now accepts OS File Explorer drag and drop and adds Add files / Add folders pickers that stage a mixed files-and-folders list into the new vault (a regular zipping experience); a dropped folder in browse mode now routes through add_directory instead of erroring, and AeroFile's local panel gains drag-and-drop import of files and folders into the current directory	🟢	2286bc666	aerovault#5 (@EhudKirsh)
36		The vault Archive compression preset now maps to zstd -15 instead of -19: benchmarking (libzstd 1.5.5) showed -19 buys only ~5 to 8% extra ratio over -15 on compressible data for 2.5 to 14x the time and is pathological on already-compressed media (~517x slower than -3 for zero gain); vaults created before this change keep their receipt label	🟢	834ee5f64	aerovault#5
37		Change Mode (the v2 to v3 vault repack) no longer shows a false "Not a valid AeroVault file" after a SUCCESSFUL cross-format conversion: the container is rewritten correctly, but the post-repack refresh was reading the now-v3 file with the old v2 reader. The spurious error is gone, and the Recent Vaults badge and the Activity Log entry that the failed refresh had skipped are now updated	🟢	1d073e7c6	aerovault#5 (@EhudKirsh)
38		Double-click on a local .aerovault, an archive (zip, 7z, rar, tar and friends) or a Cryptomator marker now opens its in-app browser, the same action the right-click menu already offered, so an encrypted or archived container is no longer treated as a previewable blob	🟢	1d073e7c6	-
39		Adding a folder to a vault could fail with "is a directory": the file-versus-folder classifier matched by full path, so a folder picker's trailing slash or a canonicalized path could send the directory down the add-files path. It now matches by name, and vault creation re-validates the staged items at commit time	🟢	1d073e7c6	-
40		AeroVault dialog polish: the technical-receipt modal no longer paints a double backdrop or scrolls inside the vault panel (it is a proper full-screen overlay), the action toolbar wraps instead of overflowing on a narrow window, and the archive browser gained dialog accessibility semantics and click-outside-to-close	🟢	1d073e7c6	-
41		The "overlay locked due to inactivity" notice no longer floods the Activity Log: when several idle AeroVault overlays expire in the same sweep they collapse into one notice carrying a count	🟢	1d073e7c6	-
42		AeroVault operations (create, add files, Change Mode) now emit backend log lines, so vault activity shows in the Debug panel Logs tab, which previously stayed empty for the vault engine	🟢	1d073e7c6	-
43		CLI profiles TUI (requested by @EhudKirsh): selecting Quit with Q, 0 or Enter now highlights it like every other action instead of leaving silently, and a new aeroftp profiles --tui opens the inline action menu directly (quitting that directly-opened menu exits)	🟢	24672b31b	#311 (@EhudKirsh)
44		The in-app Dependencies panel now monitors every direct crate: it expanded from 49 to 115 tracked dependencies of the desktop app and CLI, added the "CLI & Tools" and "System" categories, and fixed a missing keyring entry, with each crate resolved from Cargo.lock and checked live against crates.io	🟢	0f49da3a8	-
45		Dependency audit with sub-dependency review: log advanced to 0.4.33 (safe patch, kv key-compare only), while tauri =2.11.0, suppaftp =8.0.3 and aes-kw 0.2.1 were deliberately held at their pinned versions for compatibility and zero regressions (tauri 2.11.x still rejects the Linux localhost webview origin; aes-kw 0.3 would force aes 0.9 across the whole crypto stack)	🟢	0f49da3a8	-
46		The bundled aerovault crate moved to 0.6.3 (published on crates.io): streaming seal and extract for constant memory on large vaults, progress callbacks behind the live vault progress bar, and per-shard error-correction health	🟢	0f49da3a8	-
47		Documentation audit: 33 public docs were swept against the live code (CLI and command counts, rate limits, provider crypto and crate versions, tool names) and the self-hosted security report was regenerated to the current release	🟢	0f49da3a8	-

Requested / under consideration

Community ideas captured for triage. Not committed to a release yet.

#	Type	Request	Status	Source
1		Lossless .jpg to .jxl transcode in AeroFile: JXL re-encodes an existing JPEG losslessly and reversibly (the original JPEG bytes reconstruct exactly), for a real size win with no quality loss. Candidate framing: AeroFile as a GUI for libjxl	🔵 idea	aerovault#2 (@EhudKirsh)
2		Media handling principle for any AeroFile conversion: lossless or pass-through only, never a lossy-to-lossy re-encode (for example .mp3 to .opus is destructive and should not be done silently)	🔵 idea	aerovault#2 (@EhudKirsh)

Known issues found after release

Updated as reports come in.

#	Area	Description	Status	Linked issue
1	Windows / Mount (portable only)	The Windows portable ZIP does not ship aeroftp-cli.exe, so Mount a folder fails with "Cannot locate aeroftp-cli.exe binary on disk or PATH". The .msi and .exe installers are unaffected: they already bundle the CLI (and aftp/PATH work there). Fixed on main, pending v4.0.8 (f4bf5a03a, #345): the portable ZIP now bundles aeroftp-cli.exe + aeroftp-dispatch.exe too	🟢 fixed (pending release)	#342

_{Status legend: 🔴 confirmed · 🟡 investigating · 🔵 planned / idea · 🟢 done / fixed (pending release) · ✅ released}

Affected platforms

• Windows
• macOS
• Linux

---

Maintained by the AeroFTP team. Current release v4.0.7, next patch v4.0.8. Patches accumulated here; each major release still gets its own tracker.

[axpnet]

Post-4.0.7 follow-up, fixed on main, shipping in v4.0.8:

@EhudKirsh's connection review on v4.0.6 (#215) turned into a Quick Connect polish pass. Every point is fixed on main.

Area	Description	Status	Ref
Filen / Quick Connect	The local-bridge admin default was tried silently. The generic WebDAV/OpenDrive default placeholder was masking the preset's own admin placeholder; the preset field placeholder now wins, and the WebDAV/S3 bridge setup steps spell out that leaving the fields blank uses Filen Desktop's admin/admin default.	🟢 fixed	63dbeaef4
Filen / API key	The CLI API key looked like it "disappeared" on every reconnect and was undocumented, unlike the 2FA secret. The help text now states the key is stored encrypted in the vault, not shown again, and reused automatically; an edit-time indicator confirms a key is already saved. (The connect path already reloads it from the vault.)	🟢 fixed	63dbeaef4
MEGA / Quick Connect	The MEGAcmd "Fetch URL" hint said the button was "above" when it renders below the notes (corrected). The native ↔ MEGAcmd sub-mode toggle was locked while editing, so an existing MEGAcmd profile could not switch to Native API; it is the same account reached two ways, so it is now switchable and saved in place.	🟢 fixed	63dbeaef4
Koofr & OpenDrive	The "Remember credentials for every protocol" opt-in was offered even though both Native API and WebDAV use one credential set. It is now hidden for these providers via a sharedCredentials group flag: there is nothing to remember per protocol.	🟢 fixed	63dbeaef4
Convert / Save-as-new	Converting a profile to another mode (or Save-as-new) silently dropped the "Remember credentials for every protocol" opt-in to off. The flag and the per-mode credential snapshots are now carried onto the resulting profile.	🟢 fixed	63dbeaef4
My Servers / favourites	The ⭐ favourite (and server-group membership) disappeared when switching a saved profile's protocol. The vault carry-over was correct, but the My Servers list kept the old profile id in its in-memory set; it now re-syncs favourites and groups on update, like the storage quota already did.	🟢 fixed	63dbeaef4
InfiniCloud & GitHub	Proactively, the InfiniCloud WebDAV ↔ API and GitHub authentication-method toggles were frozen while editing, the same edit-lock class as MEGA. They are now switchable in edit too (the AeroCrypt overlay binding stays locked, by design, because the remote holds keyed blobs).	🟢 fixed	63dbeaef4

Verified green: tsc clean, vitest 279/279, i18n 47 locales at 100% (the one new key connection.filenApiKeyStored plus the updated Filen API-key help translated everywhere). Frontend-only; no backend change.

[axpnet]

Post-4.0.7 follow-up, landed on main, shipping in v4.0.8:

AeroProgress, a flagship pass on the progress bar. AeroFTP transfers, compresses and encrypts files, so the progress bar is a distinctive element and it should show real, perfectly synced data: percentage, bytes done over total, speed and ETA, never a fabricated number or a bare spinner. This pass restores the rich experience an earlier Transfer Queue refactor had thinned out, and extends it to the AeroVault encryption pipeline. The per-file numbers shown are the real bytes the backend already reported, surfaced instead of discarded.

Area	Description	Status	Ref
Transfers / card	The floating transfer card is back, with one lane per file so parallel uploads and downloads are visible at once, each with live speed, ETA and bytes, plus a collapsible speed graph and a minimize to chip control. An earlier Transfer Queue refactor (TQ-5) had demoted this rich card to a bare percentage pill; the event data was always emitted, only the rendering was lost, and it is now restored and extended.	🟢 done	58febdc5d, 25a75ca2b
Transfers / queue	The Transfer Queue panel shows real progress bars: one bar per active file with name, speed, ETA and bytes, plus an aggregate footer with the X of Y file counter, instead of the previous thin strip and a plain percentage.	🟢 done	93a2d43af
Settings	A Settings opt-out for the transfer progress card, shown by default, under Settings then General, for anyone who prefers not to see it.	🟢 done	432680673
AeroVault / encrypt	Creating an AeroVault or adding files to one now shows a live progress bar for the compression and encryption stage with real bytes, instead of a bare spinner. The bar is driven by the same chunk stream that compresses, encrypts and error-corrects, so it reflects the actual encryption work, and it is most useful on a large vault where the operation takes a few seconds.	🟢 done	9482e6c94, cedcf5920
Transfers / aggregate	Folder and multi-file transfers now show a real byte-based aggregate ETA, computed from the actual remaining bytes over the live combined speed, instead of the previous blank zero, and each file in the Transfer Queue shows its own live speed.	🟢 done	27b05ac9a, e5bd4d8d7
Theming	The card, the bar and the speed graph carry a dedicated gradient and palette for each of the 8 app themes, instead of the extra themes falling back to the dark look.	🟢 done	4bd860776
Hardening	After an independent correctness, security and performance review: the aggregate snapshot is matched to its own transfer (concurrent folders cannot skew each other's ETA), the percentage is clamped, malformed sizes never render as NaN, and the Transfer Queue rows are memoized so a long queue stays smooth during a transfer.	🟢 done	e5bd4d8d7, b395dd8f1
Transfers / SFTP and cloud	Transfers over SFTP and cloud providers now show the real filling bar with live speed and ETA instead of a frozen "Streaming" state, and large uploads complete reliably.	🟢 done	0f5994e00
Transfers / locked card	The floating card stays locked while a transfer is running (minimize only, no dismiss until 100 percent) so an active transfer cannot be closed and lost, the Transfer Queue bar reflects only the current transfer rather than the whole session history, and every percentage is rounded to a whole number.	🟢 done	0f5994e00
Transfers / delta sync	Native delta sync (byte-level differential transfer over SFTP) is re-enabled on the desktop and fills the card with live progress as the data moves over the wire. It had been temporarily routed through the classic streaming path because it showed no progress and a brand-new upload whose compressed delta exceeded the protocol frame limit failed outright; the delta payload is now split into protocol-safe frames so those large uploads complete, and the bar reports real wire bytes during the network phase. The delta savings stay on the end-of-transfer receipt.	🟢 done	b5ce15d74, b5b34bfbd, f8bca1408
Transfers / cross-profile and AeroSync	Cross-profile (server to server) transfers show a real ETA on the card now, and AeroSync uses the same shared progress bar as the rest of the app instead of its own inline strip.	🟢 done	f4f028783
Polish / radius	The floating transfer card and several dialogs (host key, permissions, insecure-certificate warning, keystore import result) share the same corner radius as the Transfer Queue panel and the other app dialogs.	🟢 done	f52c07aa2

Verified green: npm run typecheck, npm run test:unit (279 of 279), npm run i18n:validate (0 placeholders, 47 locales), cargo check --lib, the aerorsync protocol suite and the delta-sync integration tests, plus a live GUI validation pass on SFTP and S3 (real filling bar with speed and ETA, a 100 MB upload completing, the folder double bar of aggregate card plus per-file lane, the locked card, and the re-enabled delta on SFTP for small and over-16-MiB files in both directions). The transfer card ticks run through an isolated host so the main window never re-renders on a tick, and the Transfer Queue rows are memoized too.

The remaining progress surfaces (archive compress and extract, Cryptomator, and the AeroVault extract, scrub and repair operations) will adopt the same shared bar incrementally; that audit is the next step. Design notes live in the AeroProgress master plan.

[axpnet]

Post-4.0.7 follow-up, fixed on main, shipping in v4.0.8:

The Quick Connect connection-form work from @EhudKirsh's v4.0.6 review (#215) continues, alongside a CLI interactive-refresh consistency fix he reported (#341). The headline is a security fix where the multi-mode forms leaked an account password into the S3 Secret Access Key, plus a new app-aware 🔴/🟠/🟢 detector for the Filen Desktop / MEGAcmd local bridges, surfaced in both the GUI and the CLI.

Area	Description	Status	Ref
Connection / security	Credential isolation (Security) On the multi-mode Filen / MEGA / FileLu forms the S3 "Secret Access Key" and the API "Password" are the same field relabeled per protocol, so switching protocol tabs leaked the account password into the S3 secret on a tab's first visit, where it then got saved and sent. Each mode now starts blank on its first visit unless the group genuinely shares one credential set (Koofr / OpenDrive), and a per-mode snapshot restores typed keys on return. A regression test asserts every non-shared group is blank on first visit.	🟢 fixed	81c8c5e96
Connection / bridge	App-aware local-bridge detector The Filen Desktop / MEGAcmd "Local WebDAV / Local S3" modes now show a live 🔴/🟠/🟢 status dot and an app-aware message (not installed / installed but not running / active) in place of the static "Requires …" warning. Save is disabled only when the helper app is confidently not installed.	🟢 done	81c8c5e96
Connection / UX	Collapsible setup box The tall "Setup … first" instruction box on the bridge modes now collapses once the bridge is active and expands while it is not, instead of always taking the full column height.	🟢 done	81c8c5e96
CLI / profiles	aeroftp profiles --health An opt-in flag probes the local-bridge helper apps for every bridge profile and prints a 🔴/🟠/🟢 status line after the table, mirroring the GUI detector. Off by default so the plain listing stays instant; the printed index matches the table # column.	🟢 done	c903d79b4
CLI / profiles	Consistent interactive-refresh clear The profiles refresh (.) now clears the scrollback too (ESC[3J), so Alacritty / pwsh / Windows Terminal no longer keep old tables stacked in scrollback while WezTerm wiped them: every terminal shows one clean table.	🟢 fixed	c903d79b4
CLI / profiles	WezTerm config.font_size refresh sub-case of #341, where the refresh reprinted only the header rather than the whole table. Not reproducible without WezTerm; a follow-up would reprint in-process rather than via a subprocess.	🟡 investigating	-

Verified green: TypeScript typecheck clean, Vitest 289 passing (new tests for the credential resolver and the detector state mapping), local_bridge Rust unit tests passing, clippy clean and the aeroftp-cli bin building; profiles --health confirmed live against the running Filen Desktop and MEGAcmd bridges. i18n: 6 bridge.* keys across all 47 locales.

[axpnet]

AeroCrypt is now a profile: encrypted inside, clear outside, one connection

A roadmap item from #272 Wrappers/Overlays just landed on main for 4.0.8.

Crypt is a first-class profile now. A saved profile that carries an encrypted overlay shows up as a Crypt class in My Servers and in aeroftp-cli profiles, instead of being hidden inside CLI commands and .sh / .ps1 automation. The native AeroCrypt overlay and the rclone-crypt interop overlay are the same Crypt family at equal grade (the kind is shown by colour). Exporting and re-importing a crypt profile now keeps the overlay, so it reconnects as crypt instead of reverting to plaintext.

One connection, encrypted inside the bound folder, clear outside it. You can bind the overlay to a subfolder of a server. Inside that folder names and contents are decrypted transparently; step above it with the same connection and you see the rest of the server in clear, with the path-bar badge switching to an "outside" state. Step back in and it decrypts again. While you are inside the encrypted area, public share links and server-side checksums are disabled, because those would act on the ciphertext rather than your file.

Under the hood a single fail-closed rule drives the badge, the transfer routing and the action gating together, so the badge can never disagree with what an operation actually does: anything ambiguous stays on the encrypted side.

Done on main, shipping in 4.0.8. Verified with a live test on a Filen-backed crypt folder; the rclone-crypt twin shares the same code path.

[axpnet]

✅ Fixed (pending release) — Windows portable CLI

The portable-CLI known issue (reported in #342) is fixed on main:

Area	Description	Status	Ref
Windows / portable	The portable ZIP now bundles aeroftp-cli.exe + aeroftp-dispatch.exe next to AeroFTP.exe, so Mount a folder and the rest of the CLI work in portable mode, matching the .msi / .exe installers. A hard-fail packaging guard prevents a future build from silently dropping them again. Portable-only; the installers were never affected. CI-validated on the Windows build. Commit f4bf5a03a (#345).	🟢 fixed (pending release)	#342

Ships in v4.0.8, which is being rolled out shortly.

[axpnet]

Cryptomator vaults are now byte-for-byte interoperable with the real Cryptomator

Post-4.0.7 follow-up, fixed on main, shipping in v4.0.8 (#322, reported by @EhudKirsh).

The report was that a vault created with "Create Cryptomator Vault..." opened empty. Chasing it down surfaced three distinct defects, two of them interoperability bugs that our self-consistent tests (AeroFTP writing and reading its own vault) could never catch, because they are symmetric in our own code. They only show against an independent implementation, so we now test against the real Cryptomator.

Area	Description	Status	Ref
Vault / create-from-selection	"Create Cryptomator Vault..." from a selection wrote only an empty vault skeleton and never encrypted the selected items into it (the empty-vault symptom). It now recursively ingests the selected files and folders into the vault, with a partial-failure summary; symlinks and over-long names are skipped with a reason, never silently dropped.	🟢 fixed	ac284d4ce
Format / directory hashing	Directory IDs were hashed with AES-SIV passing one empty associated-data component instead of none. Under RFC 5297 those are not equivalent, so our directories landed at the wrong paths and a real Cryptomator could not find the vault root (ContentRootMissingException). Now hashed spec-correct.	🟢 fixed	ac284d4ce
Format / encrypted filenames	Encrypted names were encoded with unpadded base64url; Cryptomator uses padded base64url. Any name whose ciphertext length is not a multiple of 3 (most names) did not match, so a real Cryptomator could not see those entries. Now padded.	🟢 fixed	ac284d4ce

Cross-implementation proof (official cryptomator-cli 0.6.2, cryptofs 2.8.0, FUSE), both directions, sha256 byte-identical:

Direction	Files	Result
AeroFTP creates → real Cryptomator reads	alpha.txt, beta.bin (5000-byte binary), nested/gamma.txt	🟢 every entry visible, bytes identical
Real Cryptomator creates → AeroFTP reads	from_cryptomator.txt, cmfolder/inside.txt	🟢 decrypted, bytes identical

Verified green: cargo fmt, clippy -D warnings (lib + tests), the Rust suite (2245 passing, including new round-trip, edge-case and reverse-read tests), cargo audit, npm run typecheck, npm run i18n:validate (4 new cryptomator.* keys across all 47 locales). Edge cases covered: empty file, non-ASCII/spaced name caffè è bello 日本語.dat, multi-level nesting, empty folder, symlink (skipped), over-long name (skipped, no crash).

With v4.0.8 we are also starting a dedicated, app-wide verification pass over existing features before adding new ones, with the same cross-checked-against-an-independent-reference approach this fix used.

[axpnet]

Cloud provider error-handling and quota hardening (from the #277 benchmark)

Post-4.0.7 follow-up, fixed on main, shipping in v4.0.8 (#277, from @EhudKirsh's community benchmark). Four rough edges his run surfaced on the cloud/WebDAV providers: opaque or misleading errors that also retried pointlessly. Each now fails (or scans) cleanly, with the oversize/invalid-target cases marked non-retryable so a sync no longer loops on something that can never succeed.

Area	Description	Status	Ref
Used-storage scan	The GUI used-storage scan fell back hard with List recursive failed (400 Bad Request) on providers that reject a recursive listing; it now routes through the shared scanner's per-directory BFS fallback, so the storage bar fills	🟢 fixed	e33923e1d
OpenDrive 403	An upload over OpenDrive's 100 MB per-file cap returned a misleading Permission denied and was retried 3x; it now maps to a dedicated, non-retryable File too large	🟢 fixed	d688c9c85
Koofr 404	A WebDAV PUT to a missing-parent or directory target (Koofr answers 404 where RFC 4918 says 409) fell into an opaque, retryable Upload failed with status: 404; it now gives a clear, non-retryable error	🟢 fixed	ec951b0a2
OpenDrive docs	Documented OpenDrive's 100 MB maximum single-file size, distinct from the separate API upload ceiling, confirmed against the dashboard and a live 403	🟢 fixed	1a994ac6b

Verified green: cargo fmt --check, cargo clippy --all-targets -- -D warnings, and the full test suite (20 result-ok blocks, 0 failed), with new unit tests covering the OpenDrive 403 to FileTooLarge mapping, its exit-code 5 / non-retryable classification, the Koofr 404/409 upload mapping, and the matching sync-executor classification.

[axpnet]

AeroVault Change Mode hardening, container double-click, and the profiles TUI polish (Ehud #311)

Post-4.0.7 follow-up, fixed on main, shipping in v4.0.8. Change Mode is tracked in aerovault#5 (@EhudKirsh); the TUI items are #311 (@EhudKirsh).

Smoke-testing the v2 to v3 Change Mode end to end (it works: a Standard vault converts to Archive v3 with the nested tree preserved) surfaced a cluster of GUI bugs, all fixed here. The repack engine itself was always correct; what broke was around it.

Area	Description	Status	Ref
Change Mode	False "Not a valid AeroVault file" after a SUCCESSFUL repack: the post-repack refresh read the now-v3 container with the old v2 reader. The vault was always converted correctly; the spurious error is gone and the Recent Vaults badge and Activity Log entry now update	🟢 fixed	1d073e7c6
Double-click	A local .aerovault, archive (zip/7z/rar/tar...) or Cryptomator marker now opens its in-app browser, the same as the right-click action (was context-menu only)	🟢 fixed	1d073e7c6
Add Folder	EISDIR ("is a directory") when a folder was misclassified as a file via full-path matching; now matches by basename, plus a create-time re-validation guard	🟢 fixed	1d073e7c6
Dialogs	Receipt modal double-backdrop and internal scroll fixed (full-screen overlay now); toolbar wraps instead of overflowing; ArchiveBrowser gained role/aria-modal and click-outside-to-close	🟢 fixed	1d073e7c6
Activity Log	The "overlay locked due to inactivity" flood is coalesced into one notice per sweep (with a count) when several idle overlays expire together	🟢 fixed	1d073e7c6
Debug Logs	aerovault create / add / Change Mode now emit backend log lines, so the Logs tab is no longer empty for vault operations	🟢 fixed	1d073e7c6
profiles TUI	Quit now highlights when selected with Q, 0 or Enter (not only when focused), and a new aeroftp profiles --tui opens the inline action menu directly; quitting that directly-opened menu exits	🟢 fixed	24672b31b

Verified green: cargo test --lib 2261, cli bin 387, clippy --all-targets -D warnings, fmt, tsc, vitest 289, i18n 46 locales.

[axpnet]

Dependencies panel completed + dependency audit

Landed on main, shipping in v4.0.8 (commit 0f49da3a8).

The in-app Help then Dependencies check now covers the whole dependency tree, and every flagged crate update was reviewed against its sub-dependencies before deciding to bump or hold.

Area	Description	Status	Ref
About / Dependencies	Monitored crates expanded from 49 to 115 (every direct dependency); new "CLI & Tools" and "System" categories; fixed a missing keyring entry; backend get_dependencies and build.rs TRACKED_DEPS kept in sync (115 = 115)	🟢 fixed	0f49da3a8
Dependencies / bump	log 0.4.32 to 0.4.33, a safe patch (kv key-compare only, no MSRV or API change)	🟢 fixed	0f49da3a8
Dependencies / hold	tauri held at =2.11.0: 2.11.x still rejects the Linux 127.0.0.1 webview origin via is_local_url ("not allowed by ACL")	🟢 done	0f49da3a8
Dependencies / hold	suppaftp held at =8.0.3: 9.0.0 is a major async-std to smol runtime switch; the 8.0.5 patch path is noted for a separate tested bump	🟢 done	0f49da3a8
Dependencies / hold	aes-kw held at 0.2.1: 0.3 would force aes 0.9 across the whole crypto stack and break the RFC 3394 key-wrap API	🟢 done	0f49da3a8
AeroVault	Bundled the aerovault crate 0.6.3 (streaming seal and extract, progress callbacks, per-shard error-correction health)	🟢 fixed	0f49da3a8
Docs	33 public docs swept against the live code; the self-hosted security report regenerated to the current release	🟢 fixed	0f49da3a8

Verified green: tsc 0, vitest 289, i18n 46 locales, clippy --all-targets -D warnings, cargo fmt --check, cargo test (lib 2261 + aeroftp-cli bin 387). Shipping in v4.0.8.

[axpnet]

✅ Released as v4.0.8.

Everything queued in the table above shipped in v4.0.8, now published on all channels (release notes). The headline is AeroProgress, a flagship pass on the transfer and encryption progress bar: the floating per-file transfer card is back with live speed, ETA, a collapsible speed graph and a minimize-to-chip, the Transfer Queue shows real per-file and aggregate progress bars, every one of the 8 themes has a dedicated look, and SFTP, cloud, cross-profile and native delta-sync transfers all report real wire progress instead of a frozen "Streaming" state.

Alongside it:

• AeroCrypt promoted to a first-class Crypt profile with navigate-out encrypted scope: one connection decrypts a bound subfolder and steps out to the rest of the server in clear, on a single fail-closed rule (#272).
• Cryptomator interop: AeroFTP vaults are now byte-for-byte interoperable with the real Cryptomator in both directions, proven against the official cryptomator-cli (#322).
• Quick Connect connection-form polish from @EhudKirsh's v4.0.6 review, including a credential-isolation security fix on the multi-mode Filen / MEGA / FileLu forms (#215).
• Cloud hardening from the [Community Benchmark] [v3.7.4] help us build a real-world protocol comparison page #277 benchmark: a used-storage scan fallback for providers that reject a recursive listing, OpenDrive 100 MB single-file limit handling, and clearer non-retryable Koofr 404 errors (#277).
• AeroVault: Change Mode hardening, local container double-click, drag-and-drop staging, a technical-report export, and the bundled aerovault crate at 0.6.3 (streaming seal and extract for constant memory on large vaults, with a live progress bar).
• The completed Dependencies panel (49 to 115 tracked crates) with a dependency audit (log advanced to 0.4.33; tauri, suppaftp and aes-kw held for compatibility), the profiles TUI polish (#311), and a 33-document audit.

The Windows portable-ZIP CLI known issue (#342) is fixed in this release too.

Per the tracker convention, 4.0.x patches accumulated here; the next patch line gets its own tracker (#349). Known issues found in 4.0.8 will be logged there as reports come in.

Thanks to @EhudKirsh and everyone who reported, tested and suggested.