Skip to content

Hazakura Editor v0.19.0 Source / Local App Release

Pre-release
Pre-release

Choose a tag to compare

View all tags
@lero003 lero003 released this 12 Jun 12:05
· 113 commits to main since this release
v0.19.0
5b4df2a

Hazakura Editor 0.19.0 Source / Local App Release

App Store Candidate Stabilization / Safe Editor Reliability

Status: Published as a GitHub source / local-app prerelease on
2026-06-12. No binary assets are attached.

v0.19.0 is the source / local-app checkpoint for the App Store
submission-candidate stabilization work after the v0.18.0
warning-expected Developer / GitHub DMG preview.

This release publishes the repository state, source archive, release
notes, and build-from-source path. It does not attach a DMG asset. The
latest downloadable warning-expected DMG preview remains v0.18.0.

The release boundary stays unchanged: Markdown source remains canonical,
Safe Editor remains primary, Agent Workbench remains a separate
Developer / GitHub-lane trust boundary, and the App Store lane omits
Agent Workbench, CLI Agent launch, dev mode, arbitrary command
execution, Apple Local Assist helper, external AI/API calls, Git, LSP,
terminal, plugins, workspace-wide indexing, auto-apply, and auto-commit
behavior.

This is not an App Store, App Review-approved, Developer ID signed,
notarized, installer, updater, or production-ready distribution.

Build From Source

npm ci
npm run build

The local smoke bundle is generated at:

src-tauri/target/release/bundle/macos/Hazakura Editor.app

That local app is ad-hoc signed for local validation only. It is not
Developer ID signed or notarized.

What Changed Since 0.18.0

App Store Candidate Stabilization

  • Keeps the helper-free App Store preview and submit lanes explicit for
    0.19.0, with App Store build counter 8 tracked separately from
    the user-visible version.
  • Preserves the App Store lane omission of Agent Workbench, CLI Agent,
    Apple Local Assist helper, dev mode, arbitrary command execution, and
    external AI/API calls.
  • Keeps bundled LICENSE and THIRD_PARTY_NOTICES.md resources in the
    generated macOS app bundle.

Safe Editor Reliability

  • Pins bookmark-backed workspace restoration for repeated relaunch,
    outside-workspace active-tab restore, and fast clean quit after
    startup.
  • Uses the native macOS Trash API for App Store-lane Move to Trash,
    avoiding osascript, AppleEvents, and automation entitlements.
  • Preserves direct-open save failure recovery and image import safety
    from the v0.18 lane.
  • Fixes Cmd+Shift+F global-search result activation so clicking a
    result opens the matched workspace file and jumps to the matching
    line.

User-Facing Polish

  • Keeps tab close affordances visible and reachable in the active tab
    row.
  • Keeps the normal Safe Editor status bar from duplicating active
    encoding / line-ending values in passive detail text.
  • Finalizes macOS About metadata from canonical Tauri bundle metadata.

Release Boundary

v0.19.0 does not add:

  • App Store review approval.
  • Developer ID signing, notarization, installer packaging, auto-update,
    or a trusted macOS binary distribution.
  • A new GitHub DMG asset.
  • New Agent Workbench capability, provider plugins, command execution,
    terminal, LSP, Git integration, or workspace-wide indexing.
  • Preview DOM editing, contenteditable, HTML as the saved canonical
    model, hidden save-time rewriting, network fallback, tool calling,
    auto-apply, or auto-save.

Known Limitations

  • The latest downloadable warning-expected DMG preview remains
    v0.18.0; users who want a binary preview should use that release
    unless a later DMG preview is published.
  • The built local app is ad-hoc signed only and is not Developer ID
    signed or notarized.
  • Workspace restore was acceptable in human-side smoke, but Google
    Drive-backed folders and quit-before-interaction timing remain
    residual risks until the exact signed TestFlight build is tied to the
    upload record.
  • Save As has a UX observation: it did not show data loss, but the tab
    transition after saving under another name can feel surprising.
  • VoiceOver is partially usable, but full live VoiceOver,
    keyboard-only traversal, and Increase Contrast coverage remain
    incomplete.
  • App Review submission, approval, screenshots, support URL, final
    metadata, and reviewer notes remain App Store-lane work.
  • GitHub may report existing moderate dependency notices that require
    separate dependency triage.

Local Verification Before Tagging

Required gates for this source / local-app release:

npm ci
npm run test
npm run build:vite
cargo fmt --manifest-path src-tauri/Cargo.toml -- --check
cargo test --manifest-path src-tauri/Cargo.toml
npm run build
git diff --check
npm audit
cargo audit

Review-only dependency checks:

npm outdated
cargo update --manifest-path src-tauri/Cargo.toml --dry-run

Local Verification Result

Passed on 2026-06-12.

  • npm ci passed; 0 npm vulnerabilities.
  • npm run test passed: 94 files / 774 tests.
  • npm run build:vite passed with the existing
    INEFFECTIVE_DYNAMIC_IMPORT and chunk-size warnings.
  • cargo fmt --manifest-path src-tauri/Cargo.toml -- --check passed.
  • cargo test --manifest-path src-tauri/Cargo.toml passed: 280 tests.
  • npm run build passed, producing the launchable helper-free local
    preview bundle at
    src-tauri/target/release/bundle/macos/Hazakura Editor.app.
  • Built app metadata matched: version 0.19.0, bundle identifier
    dev.hazakura.editor, display name Hazakura Editor, executable
    hazakura-editor.
  • codesign --verify --deep --strict --verbose=2 passed on the built
    local app.
  • npm run probe:macos-distribution -- "src-tauri/target/release/bundle/macos/Hazakura Editor.app"
    passed: bundled LICENSE and THIRD_PARTY_NOTICES.md were present,
    the Apple Local Assist helper was absent, and broad network server /
    Apple-events entitlements were absent.
  • spctl rejected the ad-hoc, not-notarized local preview with
    source=Insufficient Context, which is expected for this local build
    lane.
  • Built-app launch smoke passed: open -n observed a new
    hazakura-editor process, and only that new process was stopped
    afterward.
  • npm audit passed: 0 vulnerabilities.
  • cargo audit --file src-tauri/Cargo.lock exited 0 with 17 allowed
    warnings, primarily existing Tauri / GTK stack warnings,
    proc-macro-error, unic-*, and glib unsoundness warnings.
  • npm outdated reported newer @types/react and dompurify patch
    versions. These are freshness signals only and were not folded into
    this release.
  • cargo update --manifest-path src-tauri/Cargo.toml --dry-run
    reported compatible update candidates and did not update the
    lockfile.
  • git diff --check passed.
  • Release pre-check grep hits were reviewed. Local-path hits were test
    fixtures, GitHub hits were public release URLs, and security-word hits
    were diagnostics / sanitizer wording or tests rather than
    credentials.

Publication State

  • Source / local-app tag: v0.19.0.
  • GitHub Release: published as a prerelease.
  • DMG asset: not published for this tag.
  • Latest published warning-expected DMG preview: v0.18.0.

Older public tags and releases remain immutable.

Assets 2
Loading