Notes v0.4 is a rebuild. The app was written from scratch on the same stack, keeping the design and the parts of v0.3 that were worth keeping, and dropping the parts that only looked finished.
What's new
Markdown shows its syntax only where you're working. Move the caret into **bold** and the asterisks come back; move away and it renders. The rest of the line is untouched — the reveal follows the construct you're editing, not the whole line.
Any text file opens. Nothing is filtered by extension. Encoding and line endings are detected on the way in, files over 2 MB stream so the window keeps painting, and syntax highlighting covers 25 languages.
Checklists — checklist, bulleted and numbered, convertible to and from prose without losing anything.
Swipe a row sideways to pin a note or send it to the trash. The trash keeps what you delete until you empty it.
Nothing is lost on the way out. Closing a tab or quitting with unsaved edits asks first. v0.3 discarded them silently.
What's fixed
v0.3 shipped an arbitrary file write: rendered Markdown was injected unsanitised into a webview that could reach the native bridge, so opening a hostile .md file and pressing preview was enough to invoke a command. v0.4 sanitises every render path, ships a real content security policy, and the backend only writes to files you opened or saved in that session. File size is now checked before the file is read rather than after.
Several features that existed only as unreachable code are gone or finished. The tab bar the README promised was hidden behind display: none; the app-lock screen was never reachable; the language picker offered eight locales with no translation layer behind any of them.
Typing no longer costs a full document walk, and persistence writes only what changed instead of every note every 400 ms.
Not carried over yet
Per-note password locking. If you rely on it, stay on v0.3.0.
Install
Download Notes_0.4.0_x64-setup.exe and run it. It installs for the current
user, so Windows never asks for admin rights, and it adds a Start menu entry and
an uninstaller like any other app.
The installer is not code-signed, so SmartScreen warns on first run: choose
More info, then Run anyway.
The .msix and .appinstaller that shipped with earlier releases have been
withdrawn. They were signed with a self-signed certificate, so Windows rejected
them with 0x8000010A on every machine but the author's, and the only fix was
for each user to trust a self-signed root certificate — not something worth
asking for. The .exe is now the single install path.
Under the hood
Windows only. No telemetry and no network access — the content security policy permits none. 73 tests cover the encoding detection, list parsing, gesture maths, Markdown preview and the crypto round-trip.
The v0.1–v0.3 tree, built with Cursor, is preserved on the cursor branch.