v0.17.2

Erfana v0.17.2

Released: 2026-08-12

• Erfana no longer crashes to a black window when you open a very large project. Folders of roughly 100 000 files and up (reported on a 174 000-item external drive) now open instead of blanking the window with no message and no way out but force-quit.

• A failure in one part of the app no longer takes the whole window with it. If the project tree fails, the sidebar shows "Project tree unavailable" with a Reload button and the rest of Erfana keeps working; if something else fails, you get a recovery screen with Restart Erfana, Copy error details and Open logs folder.

• Crashes and hangs are now written to the log file — including the case where the window dies outright and no in-app message is possible — so a bug report can carry evidence instead of a description.

Technical changes

Bug fixes

• make DirectoryWatcherService tests deterministic under load
• prevent black window on very large projects

CI

• remove the Claude Code automation workflows
• make the extraResources warning edit-triggered

Chores

• bump version to 0.17.2
• merge develop into main for v0.17.2
• merge develop (Claude workflow removal) into fix/60
• clear the secret-scan false positive on the overlay test token

Documentation

• sync documentation with the #60 error-containment work
• record 2026-08-12 e2e flake observations
• move service catalogue out of root CLAUDE.md and cut derivable content
• stop project-documenter steering status back into CLAUDE.md

v0.17.1

Erfana v0.17.1

Released: 2026-08-10

• Word (.docx) export is safer. A malicious or pasted document can no longer make your machine fetch hidden remote images during export, and a broken image can no longer freeze the app — export now runs in a separate, killable process.
• Oversized imports are rejected up front. Files larger than 250 MB are now refused before importing starts, instead of bogging down partway through.
• The Claude Code context meter no longer freezes the app. After a long session compacts, the meter used to stall the whole interface roughly once a second; it now stays responsive regardless of transcript size.
• Smaller, cleaner install. The installed app no longer bundles the project's own source tree, shrinking the download and closing a packaging leak that could include stray build files.

Technical changes

Bug fixes

• bound the post-compaction transcript re-read
• extend #43 guards to extraFiles and extraResources
• remediate reachable npm-audit findings (deps, import size cap, DOCX SSRF) (#57)
• skip newline offender test on Windows
• replace negation-only files list with an allowlist

Chores

• bump version to 0.17.1
• bump @electron-toolkit/eslint-config-prettier (#8)
• bump @electron-toolkit/eslint-config-ts (#7)
• bump @noble/ed25519 from 2.1.0 to 3.1.0 (#6)

Documentation

• sync docs with the #47 context-meter freeze fix
• document multi-entry main/preload build wiring
• add missing #57 entries (DOCX SSRF, import size cap)
• mark Coverage as a required check on main
• note the #43 packaging-guard coverage gaps
• resync documentation with the code after the v0.17.0 release
• record the v0.17.0 attempt-1 prepare-gate race

v0.17.0

Erfana v0.17.0

Released: 2026-08-08

• Screenshots that macOS blocks now tell you how to fix it – when a capture is denied, Erfana opens a dialog that jumps straight to the Screen Recording privacy pane and offers to relaunch, which macOS requires before a fresh grant takes effect. The capture is always attempted first, so a stale permission record can no longer block someone who does have access. Other platforms keep the existing error toast.
• The camera preview now shows the real picture, and all of it – the preview used to be mirrored for every camera, so anything with text in it read backwards and never matched the photo you got; it was also cropped to a 4:3 window that hid parts of the frame you were still capturing. It is now un-mirrored and shows the whole 16:9 frame. If you prefer the selfie-style flipped view, tick Mirror preview below it – remembered per camera. Saved photos have never been mirrored and still aren't.
• A camera plugged in while Erfana is running now shows up reliably – a pending rescan could be silently discarded if the screen updated during the wait, leaving the camera missing from the list with no error and nothing in the logs until you reopened the dialog or hit Refresh.
• The Claude Code context meter scales correctly for Opus 5, Sonnet 5 and Fable 5 – it assumed a 200k context window for models that actually run 1M, so the used percentage climbed about five times too fast and the bar turned red while most of the window was still free. Model names are now read by one shared parser instead of three, so the label and the window can no longer disagree.
• Dialogs are easier to use with a keyboard and a screen reader – Enter now does what the focused button says instead of always firing the camera shutter, Tab stays inside the dialog rather than walking off into the page behind it, and the label on violet confirm buttons is now legible (contrast raised from 2.2:1 to 8.4:1).

Technical changes

Bug fixes

• correct context meter for Opus 5-era model ids
• stop hot-plug refresh being cancelled mid-debounce
• un-mirror the preview and make mirroring opt-in per camera
• restore the gitleaks allowlist dropped by the develop rewind
• cancel pending debounced search on unmount
• classify silent denied captures as PERMISSION_DENIED

Chores

• add the Windows-snapshot pre-flight gate and fix skill/agent contracts
• declare NSScreenCaptureUsageDescription
• bump claude workflows to checkout v6; soften CLA wording
• SHA-pin claude-code action workflows and add CODEOWNERS

Documentation

• record camera hot-plug fix, drop completed OSS plan
• correct errors introduced by the previous sweep, and two false claims in b62b79b
• resync docs/build and docs/windows with the code
• archive phase2-closure per its own declared lifecycle
• fix the release verification recipe, DR procedure and branch-protection facts
• resync documentation with the code after a full-repo staleness sweep
• resync documentation with the code the rewind left behind
• point develop at the graph branch and restore doc fixes lost in the rewind
• add nominative-use notes for LiteParse and named OSS components
• link SUPPORT.md from README
• sync CI docs with live pipeline (secret-scan, license job, required set)
• add SUPPORT.md help-routing guide
• remediate OSS-readiness review findings
• sync v0.16.3 release docs (version, AES-PFX runbook)
• align CONTRIBUTING + PR template with honest CLA wording

Features

• actionable permission dialog on denial (non-blocking)
• ScreenPermissionDialog (grant-and-relaunch)
• bridge screen-permission + system deep-link/relaunch
• sender-gated screen-recording deep link + graceful relaunch
• sender-gated screen-permission handler + test harness
• expose advisory macOS screen-permission status
• add screen-recording permission schema + channel

v0.16.3

Erfana v0.16.3

Released: 2026-06-17

• Erfana is now open source under GPL-3.0-only — free to use, study, and modify.
• First public release for macOS (Apple Silicon) and Windows, with cryptographically signed, notarized builds you can verify before installing.
• Run Claude Code and other terminal coding agents right beside your Markdown editor — with a live context-window meter for Claude Code sessions.
• Markdown editor with live preview and Mermaid, an integrated terminal, document import (50+ formats via LiteParse), and media transcription.

Technical changes

Release

• Re-release of the v0.16.1 build set after resolving two Windows code-signing failures in CI — an Azure cert secret mismatch (v0.16.1), then a legacy-encrypted signing PFX that the OpenSSL 3.x toolchain rejects (v0.16.2), fixed by re-exporting the PFX with AES-256. No application code changed across v0.16.1 → v0.16.3 — see docs/release-incidents/.

whisper.cpp v1.8.4 (erfana build 1)

Pinned whisper.cpp binaries consumed by Erfana's offline transcription (see src/main/services/whisper-assets.ts). Byte-identical to the original build; integrity is pinned via SHA-256 + the minisign-signed manifest.json.