Changelog

All notable changes to Cmdr will be documented in this file.

The format is based on keep a changelog, and we use Semantic Versioning 2.0.0.

[0.32.0] - 2026-07-01

Design tweaks: colors, icons, dropdown design, and text alignment. Detect and display file systems, disallow copying 4GB+ files to FAT32 volumes.

Added

• Block copying or moving a file too large for the destination drive (f177b604, e0450ca8)
• Show each real volume’s filesystem (APFS, exFAT, FAT32, ext4, etc.) in the volume picker (c34d10de)

Changed

• Redesign every modal dialog to the macOS layout: left-aligned titles and text, right-aligned buttons, labeled Action and Route rows, folder and file icons, and tooltips on the scan status icons (95191e2e, b19ccb45)
• Make the Copy/Move destination box forgiving: accept ~ and ~/…, show the home folder in full, and create a missing destination folder on confirm on every drive (b19ccb45)
• Replace UI emoji with themeable Lucide icons across dialogs, menus, settings, and the network browser for sharper contrast in light and dark (ffd03c90, 5baba851, 48f3561f)
• Redesign the Select dropdown as a native macOS pop-up button with a frosted-glass menu that opens over the trigger (643f4200)
• Brighten dark-mode secondary text and the selection red for clearer readability (bbe29581)

Fixed

• Fix the Homebrew install silently failing for new users on Homebrew 6 (now runs the required tap-trust step), and stop onboarding text showing literal > and & (dbceea71)

Non-app

• Enforce an APCA Lc-45 contrast floor alongside WCAG 2.2 AA, clearing the last low-contrast spots so every text pair passes both (f6ccc188, e28b9a0e, cf33ac82)
• Add the full Tailwind v4 OKLCH color scale as reusable design tokens (3a2809b2)
• Upgrade the Node toolchain to 26 and relax the dependency cooldown to 3 days (4c5ef483, 714caeae)

[0.31.0] - 2026-06-30

See/set macOS Finder colored tags. Nicer Drive indexing UI, live folder sizes during scans, plus network and phone scans finish several times faster than before.

Added

• Add macOS Finder colored tags (86a9ca38, 6039e1a6, 4d87d4ec)
• Show a per-drive indexing checklist (find files, save list, compute sizes, catch up) with live counts and a per-step ETA (4a74312f, a92f9cdb, 138bdfa8, 519a27ea)

Changed

• Show folder sizes growing live during a network drive or phone scan, not only on the local disk (5a86abaf, ee9ee757)
• Speed up network and phone drive scans by listing directories concurrently, dropping long scans from minutes to seconds (a003f004, 6518b565)

Fixed

• Fix the indexing progress counter freezing mid-scan, making a healthy scan look stuck (7568931c)
• Fix one drive’s scan lighting the size-updating hourglass on folders of every drive (d4105d98)
• Fix a failed local scan sticking on a spinner instead of offering a rescan (61c66a0c)
• Fix a network first scan stalling for hours on NAS snapshot folders (bb64ad38)
• Fix a reindex wedging on a large set of changes (12e98e52, e4e13ed9)
• Fix folder size totals double-counting hardlinked files during a rescan (ca4151e6)
• Fix search, Go to path, and AI navigation sometimes opening a path on the wrong drive (3024839e, b029c435, ab44a722, f6e93c23)
• Stop the file index wasting disk space after a version upgrade (1536d307)
• Fix the file viewer failing to load lines when a file’s line count is still unknown (83ad3ceb)

Non-app

• Refactor navigation onto a first-class (volume, path) Location type, deleting bare-path navigation (bb6ef69c, 3eabcec5, e2f4e601, 0d189b23)
• Bump smb2 to 0.11.4, demoting per-frame SMB protocol logs to TRACE (676e24b9, 5e6d163e)

[0.30.0] - 2026-06-28

See folder sizes while indexing is going, browse your phone while a copy/move/delete is going, and get better mouse-driven navigation. Network drive rescans are also faster now.

Added

• MTP: Browse a phone while a transfer runs (06d1874d, 4a01ad7f, f002606d, edc89aa2)
• Navigate pane history with mouse’s back/forward side buttons (fcf34143)
• Click breadcrumb segments to jump to any ancestor folder, double-click empty pane spce to go to parent (dcc5b2e7)
• Explain why a phone’s folders add up to less than its used space (caedb655)

Changed

• Show folder sizes while indexing: ≥lower-bound when partially scanned, also unknown and stale (494849a9, d9dbf076, c4b20c96, fdadfc8f, 9f318e74)
• Speed up SMB and MTP rescans: update in place and keep last-known sizes visible while scanning (a6a2f586)
• Stop showing indexing notif and free space for DMGs, and show the read-only lock for read-only mounts (889859c4, 1ea48634)

Fixed

• Fix progress bars for cross-volume folder copy and move (38c405ec)
• Fix a UI freeze when starting a manual rescan (880688c9)
• Fix enabling or rescanning an SMB share or MTP device indexing nothing (d4527575, a8007894)
• Show the indexing indicator for SMB and MTP drives, not just the local disk (ef6005d4)
• Keep an honest stale index when a drive disconnects mid-scan instead of marking it complete (4d66beb0)
• Rebuild falsely-complete network indexes from earlier builds on upgrade, no manual action (3109ab69)
• Detect and explain Linux MTP permission denials from missing udev rules (51eee35d)

Security

• Patch quinn-proto (remote memory exhaustion) and memmap2 advisories (584aa27f)

Non-app

• Add a Total Commander vs Cmdr blog post (f4ce564d, d744a380, 8190a090, c0fdfd76)
• Surface the Homebrew install (brew install --cask cmdr) on the website and README (c2e4ed54)
• Attach a PII-free machine snapshot (model, RAM, disk headroom, index size) to error and crash reports (d148af1b)
• Migrate the MTP backend to the backend-neutral mtp-rs API for future Windows support (03f14279, 08a5059a, 71b3d580)
• Split the transfer and indexing modules into focused submodules (2597038a, fe8b414d, 4d65dcd0, e5005ca9, 194190fa)

[0.29.0] - 2026-06-22

Four big features: 1. Operations (copy, move, and delete) got pause/resume. 2. Operations can be queued. 3. Drive indexing extended to all volume types incl. SMB shares and MTP devices. 4. Cmdr is now localized into nine languages.

Added

• Translate Cmdr into nine languages: German, Spanish, French, Hungarian, Dutch, Brazilian Portuguese, Swedish, Vietnamese, and Simplified Chinese (5af98fea, 43b7f4c2, 042c7b01, a34ef72f)
• Pause/resume any operation (eeef1e2f)
• Add a Queue window for ops, with pause/resume/cancel plus multi-select (c06b485d, e279945b, 49c7b126)
• Add Pause/Resume and Queue (F2) controls to transfer progress dialog (07dd837c)
• Index SMB shares and MTP devices so folder sizes and search work, with scanning/fresh/stale statuses (384bffe2, 7b084cdf, 049e9f49, e4cdbb8f, 386e9c13, fbacdbd0)
• Add a per-drive index status badge and menu in the volume switcher (a36e7033, eaa2eea0)
• Add drive-indexing controls in Settings, a “index this drive?” prompt, and a one-time “drive stale” notice (bcd433ae, 0dddb45c)
• Show a live file count while a drive index scans, instead of a frozen label (eca50e21)
• Add ⌘↓ to open the item under the cursor, ⌘⌫ to move it to the trash, and ⇧- to deselect files (54e8bdeb)

Changed

• Keep MTP devices responsive during a background index scan: navigation, copy, and delete no longer stall behind it (0fa3faf9)
• Refresh only the affected folder on MTP changes, instead of every open pane on the device (7a08831a)
• Honor macOS Reduce transparency app-wide: every translucent surface goes opaque when the setting is on (298bdede)
• Go back to the SMB host list with ⌘↑ in the share list, matching Backspace (1115440a)

Fixed

• Fix the error reporter crashing on log lines with accented characters or emoji (72a800ee)

Non-app

• Speed up releases by reusing a persistent cargo build dirs and mise cache across architectures and releases (bc2b3779)
• Build the translation methodology: per-lang style guides, glossaries, and a reference-pile across 139 languages (45b6a7dd, 0759d720, ece168ea, fbddd165)

[0.28.0] - 2026-06-19

The file viewer now renders images and PDFs inline, local and custom AI endpoints like Ollama and LM Studio work, and counts and file sizes follow your Mac’s region. The volume selector also gets a frosted-glass look.

Added

• Show images and PDFs inline in the file viewer, with a Text/Image/PDF mode switch and a view-as-text fallback (ccfb536c, c03c0715, e46cc1be)
• Give the file viewer its own working menu bar on macOS: File, Edit, and View (with Word wrap) when it’s focused (60b7b568)

Changed

• Give the volume selector a frosted-glass material and honor macOS Reduce transparency across the app (a10d7def)
• Keep the volume selector open while ejecting, and make its row menu native (84fe8c66)
• Major Settings revamp: Group Settings pages into cards and make Advanced settings findable from the main search (3f9168ce, 43fb5ad1, 027a89ed)
• Format counts and file sizes by your Mac’s region instead of always US formatting (0324047b, 83906c5a)
• Show real macOS default icons while the icon cache loads, replacing the emoji placeholders (8ea3a54a, 7272df9d, 9b41bcc3)

Fixed

• Fix local and custom AI endpoints (Ollama, LM Studio): the model picker now selects, and keyless endpoints register as configured (e8389003)
• MTP: Heal a stale destination folder on MTP upload and retry instead of failing the copy (010d8b45)
• File viewer: Scroll search matches into view, and enable cut and paste in the search box (0496700a)
• Show the running app version in copied diagnostic info, not a stale hardcoded one (32bce781)
• Harden the backend against silent crashes and unsafe-code mistakes, and clear out dead code (d1e4f76f, 6d2acfb0, ab34d853)
• Update the MTP library to 0.20.0 for transaction-ID self-heal and stale-handle recovery (7fedfadc)

Non-app

• Lay the full groundwork for translating Cmdr into other languages (English-only for now): a message catalog of ~2,070 strings, region-aware number and date formatting, tooling that finds clipped text and screenshots every screen for translators, and a Language picker (56acb6c1, 17e05af8, 2b085afc, 375600ce, 8af5a0bb, a3a9ef3c)
• Move all error wording to the frontend so it’s ready to translate, with the logic staying in Rust (1e918e06, 77a851b8)
• Cut the docs that load into every AI coding session by two-thirds, and add checks to keep them lean (b84ca26a, 1ce6e7bb, 3dad7e03)
• Route every in-app icon and spinner through shared components, and split several oversized files into focused ones (94b6218a, 751e9bc4, d3c50a87)
• Keep automated test runs from disturbing the developer’s real apps, data, and keychain (28b6bcaf, 2476aba4, 3a56d765)

[0.27.0] - 2026-06-14

You can now add/rename/reorder/remove Favorite folders in the Volume selector, hide the bottom F5/F6/F8 bar, and can set Full mode to display filenames+extensions in one column. Also added Help > Keyboard shortcuts, a What’s new popup that shows up after Cmdr updates, and improved the Full Disk Access part of the onboarding.

Added

• Show a What’s new popup after Cmdr updates, with the changelog since the version you last saw and an opt-out in Settings (4e5ccbba, cc222919, 04f75ddb, 9ca6c524)
• Curate your favorites in the volume switcher: add (command palette, Go menu, or right-click a folder), rename, reorder by drag or ⌥↑/⌥↓, and remove (c660d6f4, 685fcac5, 335331ef, 608b8c81, d3db386f, 9dc2e968, e3acd2a4)
• Add a Help > Keyboard shortcuts window: a scannable reference of every command’s shortcuts, live-synced to your customizations (3bcbc285)
• Add a setting to show full filenames in the Name column instead of splitting off the extension (27060493)
• Add a setting to hide the bottom function key bar (950a213c)

Changed

• Onboarding now detects Full Disk Access the instant you grant it, and gets Cmdr into the macOS 13+ Full Disk Access list (dbf4d70b, 19e992dc)
• The AI cloud model picker now loads its list on open and keeps it when you reopen (f8aa514d)
• In Search and Select, ⌥←/⌥→ now move by word in the query field instead of navigating folders (dd8573b2)
• Search now remembers your query when you open a single result, not only “Open in pane” (5eae2139)

Fixed

• Fix dragging a file from Cmdr into a browser upload field doing nothing (7c338b51)
• Fix the file viewer misreading some binaries as UTF-16, which slowed the open by about a second (8f069f28)
• Fix the downloads jump re-opening a folder already shown in the other pane (9eee5395)
• Fix Search abbreviating paths that fit the column (3e558c7f)
• Fix a rare drive-indexer race that could lose a folder’s size (439d7fcb)
• Stop local AI logging an error when you turn it off while it’s still starting (1c8363b4)

Non-app

• Add a KV-backed ?r= short-code system so tracking links expand to UTM params without a website deploy (f2b2c465, 7a532406)
• Fix silently-broken Umami and PostHog injection (website analytics had stopped loading), and add a check guarding the regression (9cb620e8, 36d85974)
• Add a per-day acquisition funnel with first-touch channel attribution to the analytics dashboard (8cae7906, a1dd804e, a011de50)
• Split the analytics dashboard into Acquisition, Product, and Link codes pages (83eb55be)
• Converge the app’s dropdowns onto two reusable Ark primitives for a consistent macOS-native look (d282fdba, 6ac9016e, a705696d, 69130e27, 5f355670)
• Add a docs-reachable check keeping every doc linked from the repo root, and connect the orphaned docs (69e91dbe, 185afddb, 74ef31ee, 36b7075b)
• Quiet the drive indexer’s UNIQUE-conflict warning to fire only when two writers are racing the database (ba5a538c)
• Ban two-column tables in agent-facing docs and convert all 130 existing ones, with a check enforcing it (a909679b)

[0.26.0] - 2026-06-11

This release sharpens the Search and Select dialogs: a Files or Folders filter, folders matched by size, an AI strip that shows what the agent did, and your last query waiting for you on reopen. File-list dates and sizes now line up into clean columns, and you can install Cmdr from Homebrew.

Added

• Add a Files or Folders filter to Search and Select, matching folders by their recursive size (600b23ca)
• Add an AI strip to Search and Select that shows the pattern and filters the agent set, with a spinner while it translates (2328f469)
• Install and upgrade Cmdr from Homebrew with brew tap vdavid/tap && brew install --cask cmdr (65729ee8, 6490cb16)
• Add a Discord community link to the About window and website footer (f65050b5)

Changed

• Search and Select now remember your mode, text, and filters, and show your last results the moment you reopen (a5c60359, df819509)
• Keep your typed text when switching filename, regex, and AI modes, and land the cursor on the first file after a Select (8c90428e)
• Line up the Modified and Size columns with tabular figures, and default to ISO 8601 dates (b84d6877)
• Enlarge the Search and Select dialog text a step and clear it to AA contrast (9effb0e5)

Fixed

• Fix Select doing nothing when you set only a size or date filter and leave the name empty (89204c28)
• Fix the size filter ignoring a 0 bound, and add a one-click = comparator (0071a009)
• Fix an AI search keeping a stale size or date filter from the previous run (69ca52e5)
• Fix the onboarding AI step’s provider list overflowing the options below it, and two stale provider links (44c905c1)
• Fix commercial purchases not issuing a license (5e053ee6)

Non-app

• Dashboard download count now means new installs, with a new-vs-update chart (7ff2b6f3)
• Add a feedback and error-report section to the private dashboard (e449b007)
• Add a /feedback-and-error-digest-from-app command for agents (77b49d09)
• Cap each dashboard data source at 20s so one hung upstream can’t 524 the page (8b2909a0)
• Capture real app screenshots and add a tracked brand/ asset home (1b38da54, 8fa73633)
• Promote the Search and Select chip and popover primitives to lib/ui (14abab0d)
• Quiet noisy dev-run logs (812e0bb5)
• Fail the website build if a sandbox Paddle token would ship to production (7d227942)
• Show a Discord invite modal after a website download (46829c22)
• Use [email protected] as the public contact address (a667f7ce)
• Clone target/ to skip the full Rust rebuild on a fresh worktree (a2cbfce2)

[0.25.0] - 2026-06-11

Cmdr is now an open beta: stability badges, a Send feedback channel, and anonymous usage stats you can opt out of. SMB sign-in got smoother, and keyboard shortcut customization got a deep round of fixes.

Added

• Mark Cmdr as an open beta in onboarding and the About window, with a personal intro from David (7ce2c5e4, b2b27d8f)
• Add a Send feedback dialog (Help menu, command palette); notes go straight to David (79c4a6c9, 6bdb188a)
• Add stability badges (ALPHA, BETA) in the app and a feature status page on the website (219549db)
• Add anonymous beta usage analytics (daily-active count, PII-free feature events), disclosed during onboarding, opt-out under Settings > Updates & privacy (d1c481f0, c328bb13, b2b27d8f)
• Group crash and error reports per install, with an optional reply-to email so David can follow up (71da738c)
• Add a progress bar, percent, and ETA to drive indexing, now a calm hourglass with details on hover (bc824f18, 6defbf74, b03387e2, f8694ce8)
• Add a low-disk-space warning (in-app toast or macOS notification), configurable under Settings > Behavior (15ad9cf9)
• Drag files from your phone or NAS straight to Finder or the Desktop, with a toast tracking the download (c97a032f, 9e54719d)
• Teach the go-to-latest shortcuts (⌘J in-app, ⌃⌥⌘J from anywhere) in the downloads toast, now collapsible (1da0b835, 9ab2cf4f, 15fc9395)
• Shortcut hints across the app (F-key bar, toasts, onboarding) now follow your custom bindings live (123e76b7, e756a379, 18acf50f)
• Click any shortcut hint to jump to its row in Settings (b38f6cf8)
• Offer Finder’s saved SMB password on “Connect directly”, so a Finder-known share connects without retyping (2ccb45de, 3b07b0f2)
• Prompt for a fresh sign-in when a NAS password changes, instead of a misleading “unreachable” banner (7c654e70)
• Add drag auto-scroll near a pane’s top or bottom edge (6d1ca01b)
• Prepare brew install --cask cmdr for installing Cmdr via Homebrew (9348f888)

Changed

• Reuse a saved SMB password instead of re-prompting on every connect (d12f8d3d, 7c654e70)

Fixed

• Fix connecting to a password-protected NAS dead-ending in macOS’s cryptic “error code -6600”; Cmdr now shows its own login form right where you are (0e1bc77d)
• Picking an already-mounted share now goes straight there, even under a different name (Bonjour vs IP) (0e1bc77d)
• Fix the wrong-password message and a stale connection dot after an SMB sign-in fails (5846d351)
• Fix cloud AI for Groq, OpenRouter, DeepSeek, and Mistral (they were routed to the wrong API) (08aa31e1)
• AI search applies its translation again and reports failures (out of quota, bad key, timeout) instead of silently doing nothing (11f59ea1)
• Move a stranded plaintext AI key from settings.json into the OS secret store (c9d45e09)
• Fix copying or moving an empty folder silently doing nothing, and across drives deleting the source (5053ea0b)
• Fix the file viewer cutting off the file after about 60 lines with word wrap on (0655dc0b)
• Fix dialogs leaking focus into the background and locking out the keyboard after two Tabs (f2e04973)
• Closing Search or Select files with Esc no longer kills pane keyboard navigation (040d424e)
• Fix ⌘A doing nothing in the Settings and viewer windows (d99fafc1)
• Fix drag-out from a phone or network pane dropping a junk .textClipping file or pasting a meaningless path (6e8ac5ae)
• Fix index rename failing when the destination name is already taken (dea07427)
• Harden shortcut capture: bare keys don’t fire mid-typing, and macOS-owned combos (⌘Space, ⌃↑) warn instead of saving silently (a412e599, 92c5ad4b, 2b7abf3f)
• Fix custom shortcut rebinds and removals not sticking, not reaching other windows, or missing conflict detection (6c21fd1b, da570566, 2247dac1, a1dae889, add4db81)
• The command palette and the Keyboard shortcuts editor now show your real bindings and list every command (87df2ed9, 73766c9e, 762b3951, 396097ff)
• Focus the textarea when the feedback or error report dialog opens (6f295fc6)
• Show “/” instead of a raw storage id (like “65537”) in the tab title at a phone or camera storage root (582cfbaf)

Non-app

• Rewrite the website around one honest feature list (a bento grid by capability), in a product-first voice (272d177e, e975bd0c, 6ccb8aeb)
• Cut the landing page from ~2.3 MB to ~0.4 MB and remove render-blocking CSS (5fc6729a, fbacb4e9)
• Replace stringly-typed backend event emits with a typed event bus across volumes, write ops, indexing, MTP, network, git, and AI (f2d3febf, 57e9c87d, 5f510bd2)
• Split colocated docs into CLAUDE.md and DETAILS.md) across ~30 areas, add claude-md-length check (9bf1a653, bb26f2df)

[0.24.0] - 2026-06-06

Go to path (⌘G) lands, folders merge on copy and move, and same-volume moves are instant.

Added

• Go to path (⌘G): jump anywhere by typing or pasting a path, with ~ expansion, recent paths on digit keys, clipboard prefill, and a nearest-existing-ancestor fallback when the path doesn’t exist (2a87c01b, afa2fe18, 6b3e941b, 3a768fcc, 07877792)
• Block ejecting a volume while a copy, move, or delete is touching it (fe2a0987)

Changed

• Folders always merge on copy and move: your conflict choice (skip, overwrite, or rename) applies to the clashing files inside, and dest-only files survive (89cd978c, 6e305a47)
• Same-volume moves are instant: moving within one drive, share, or phone is a rename, no more 30–40 s “Verifying before move…” on a big NAS folder (a9743ecc, 114e5d2d)
• Completion toasts now report what you selected, split by type: “Moved 1 file and 3 folders” (ae629609, f977ed95)
• Disable Rollback for same-volume moves (a rename has nothing to roll back); Cancel stays available (f069e37e)
• Rename “Reveal latest download” to “Go to latest download” in the menu, palette, and settings (49ddaf0a)

Fixed

• Resolve conflicts file by file inside folder merges on network and phone drives; a newer file deep in the tree no longer loses behind a single folder-level OK (6e305a47)
• Fix dropping files from the Desktop, Documents, or Downloads failing with “Source volume not found” (c3021243)
• Fix drags from phone and network panes reading 0 bytes / 0 files in the transfer dialog (c3021243)
• Dropping onto a read-only volume now shows the “Read-only device” alert instead of a copy dialog that can’t succeed (62bbc09a)
• Fix the Copy→Move toggle zeroing the transfer dialog counters on local moves (f4a8b1cb)
• Show the volume name instead of a raw storage id (like “65538”) in the transfer dialog header (f4a8b1cb)
• Fix file viewer settings (word wrap, text size, binary warning) silently resetting every session (51e127aa)
• Make the title bar draggable while a dialog is open, and in the file viewer window (016abbdf, e28e8905)
• Highlight cloud drives (iCloud, Dropbox, Google Drive) in the volume switcher instead of Macintosh HD (28e72ac0)
• Fix tooltips jumping to the window corner in big folders (2b45ec08)
• Fix a rare hang when answering a copy/move conflict prompt (070b8d15, 99271478)

Non-app

• Rebuild the explorer frontend architecture: a module state store, a typed command bus across every entry path (keyboard, palette, menu, F-bar, MCP), one transactional navigate(), a per-kind volume capability table, and a flat command handler record replacing an 89-case switch (062ebbb7, 5709b50a, ef52db45, 6270612c, 6aaf82d0, c7c0f5d6)
• Add a virtual MTP device for dev: CMDR_VIRTUAL_MTP=1 pnpm dev plugs in a fake “Virtual Pixel 9”, no hardware needed (9b9a4cad)
• Make the SMB test containers safe to share across concurrent agent sessions: lease-refcounted teardown, auto-restart, and resource caps (b4307236, 7905a4ea, 7ae14a75)
• Stop E2E builds from uploading error reports to the live channel (293853b0)

[0.23.0] - 2026-06-01

A guided onboarding wizard, a Downloads watcher with a jump-to-latest shortcut, and AI-powered file selection. Under the hood, copy and move became durable and crash-safe.

Added

• Onboarding wizard: a multi-step soft sheet (Full Disk Access, AI provider, optional setup) replacing the single permission modal, reopenable from the menu, command palette, and MCP (alpha version!) (5a21bdba, 742ff625, 963b4bf1, 88ecdfaa, 7d081d2c, a09631c9)
• Downloads watcher: a toast or native notification when a download lands, and jump to the latest download with ⌘J or a global ⌃⌥⌘J hotkey (092203db, a9466e5a, 853a28a0, d378f42f, 1484c4f0, 2c3e36c3)
• Select or deselect files by query: a new Select menu plus a Select files… dialog with filters and AI-powered natural-language selection (“select all error logs from last week”) (alpha version!) (1fd163c4, 7ce90bb3, 8d5bd3dc, dcb4b3a9, 6d68def3, ac68709e)
• File viewer tail mode (F): follow a file live as it grows (8a6671de, ed479d2b, a7eb8d87, 29a25ffc)
• File viewer char encoding picker: switch text encoding instantly, with strict ISO-8859-1 and UTF-16 BOM detection (a2270782, 0c0b8716, b1277906, 3978ed4c)
• File viewer regex and case-sensitive search toggles (⌘⌥R, ⌘⌥C) (7d424d97, 48b5de06)
• Real folder icons in the list: system folders (Downloads, Desktop), packages (.app), and custom-icon folders, cached across restarts (1dd439d0, 389829bf, e50004ab, 418a86a9)
• Per-directory “size updating” hourglass and progressive folder-size reveal as the index fills in, instead of waiting up to 5 minutes (0afc10b4, f3740152, 66712c2d)

Changed

• Redesign the type-mismatch conflict dialog: one consistent layout across all clash types, with a clear warning when overwriting a whole folder with a file (a3faa3d8, d2b8f153, 79024932, 66df6570)

Fixed

• Make copy and move durable before reporting “complete”. Ejecting a USB stick right after a copy no longer loses files (bdb3b61a)
• Make cross-volume Overwrite crash-safe: stream to a temp file and swap in place, so a mid-transfer disconnect keeps the original (6e99640e)
• Stop concurrent indexing from corrupting the index (fixes inflated folder size display) and keep the index WAL bounded (0236723d, eb692287, b849ee01)
• Make config and secret-store writes survive power loss, protecting saved SMB servers, passwords, and AI keys (aea4aa0b, 57a47b63)
• Stream MTP uploads instead of buffering the whole file in RAM, and make Cancel stop in-flight USB writes (a0140150)
• Fix cross-volume moves showing “Moving... 0 bytes / 0 files” for the whole transfer (now real scan and per-file progress) (067b96db)
• Open file viewer instantly even under heavy FS activity (was up to 730 ms and could time out) (aa9905f1)
• Keep live indexing alive under database lock contention (9e808914)
• Fix a git-repo watcher leak during fast navigation (a0bac502)
• Stop losing Full Disk Access and onboarding state on a save failure (which re-ran onboarding) (5c46d887)
• Error instead of silently overwriting when creating a file that already exists (25ce82f4)
• Fix Enter or Backspace on “..” from “~” landing at “/” instead of “/Users” (a8096a25)
• Fix SMB share listing on servers with many shares (native enumeration handles fragmented replies) (fe5569cf)

Security

• Require bearer token for destructive MCP ops (68e337ef, 18cd4c35)
• Redact PII from MCP logs and state (8ea092ba)
• Close SMB password leak through process arg list in an edge case (a190f19c, 0a154f21)
• Reject plaintext-HTTP AI endpoints that carry an API key (3dd10609)
• Fix an updater AppleScript injection via the app bundle path (5875fb4c)
• Narrow down the FS capability to actually needed files, restrict Debug window’s capabilities (6cabc94c)
• Redact SMB credential URLs from debug logs (d7edb8a4)

Non-app

A big push on dev tooling: the check suite is roughly twice as fast overall, with some checks 30–40x.

• Add CPU-weight-aware scheduling (46bfae99)
• Add --graph arg to checker script to view the dep graph (46bfae99)
• Split eslint-typecheck into TS / Svelte: 616s to ~15s (~40x speed-up!) (10632789)
• Stop clippy forcing full crate rebuild every run: ~32s to ~1–2s warm, also sped up other Rust checks (3318f29c)
• Switch Svelte tests to happy-dom (22% faster) (ca6b13d9)
• Add per-instance isolation (CMDR_INSTANCE_ID). Parallel dev sessions now get own ports, data dir, and Keychain (3bcd2ed4)
• Add a lock-poison static check and pnpm install-side supply-chain guardrails (14-day cooldown, trust no-downgrade) (038c5ec2, d568789f)

[0.22.0] - 2026-05-23

The Search dialog got a full redesign, and the file viewer learned text selection and copy.

Added

• Redesign Search around one unified bar with mode chips for AI, filename, and regex, each remembering its own typed query, and keep the dialog’s state when you close and reopen it (62aef440, ac4c6340, b9ca1e6f, 3ea1b45e, 5c35d9ea, 9b8f9dd7, 71c9485b)
• Filter searches with size and modified-date chips that open quick popovers, and see the AI’s interpreted prompt and caveats right in the dialog (2c10bba7, 807e456e)
• Replay past searches from a recent-searches history with quick-pick chips, and auto-apply filename and regex queries as you type (1f03ff49, f4eea79d)
• Act on search results in place: clickable path pills, per-row menus, “Show all in main window”, and copy, move, or delete files straight from the results (e52c6dec, d94187bd, c79c1112, 4770a93f, e7afc8b3, 1b1fc5ab, f3f45084)
• Select and copy text in the file viewer (files up to 100 MB): double/triple-click for word/line, right-click menu (6f717829, 1e061820, 8d6f85c0, 46f278bb, e329bb39, 1445c2d7)
• Eject ejectable volumes (USB, SMB, DMG) from the picker and the breadcrumb right-click menu (2a7e256f)
• Replace the human-friendly size units toggle with a 5-way size unit picker (dynamic / bytes / kB / MB / GB) (78a7f367)
• Show climbing bytes and dirs during MTP/SMB scan previews (was “0 / N / 0” until done) (c2b5a040)
• Reuse scan-preview cache for local delete and cross-FS move so the dialog skips straight to the active phase (9445e61a)
• Center child windows on the main window; file viewers cascade (8cd06bf4)
• Tint zebra stripes with the pane bg so per-volume tinting actually shows through (b84e761e)
• Toast confirms zoom changes and points at ⌘0 to reset (37f94410)
• Show a Space hint on “Toggle selection” in the right-click menu (a24613d9)
• Blue info toasts, new colorless default level for low-importance feedback, and reclassify routine confirmations and soft refusals (dabf0e3a, 51e30112)

Fixed

• Fix SMB share mis-loading local paths after a volume switch (3e613ca6)
• Fix volume copy dialog wedging open after SMB/MTP cancel (0fbafebb)
• Process selected files in pane sort order, not Cmd+click order (39fc8d2e)
• Cursor lands on the new folder, not the row below (38ebdc87)
• Fix Full view “..” row hiding behind the header after PageDown/PageUp (6ddb4273)
• Fix viewer ⌘A freezing on huge unindexed files (e29312bd)
• Cancel viewer reads within ~64 KB instead of 16 MB (0e758b46)
• Fix Escape on viewer context menu closing the whole window (4464f766)
• Honor prefers-reduced-motion in viewer drag autoscroll (aec327b8)
• Surface silent-band viewer copy failures as a warn toast (41398aca)
• Polish viewer copy dialogs: ⌘A routes to the right size tier, Enter triggers the primary action, Tab skips × (b6542e7b)

Non-app

• Build git test fixtures via gix instead of CLI shell-outs; 91 tests went from tens of seconds to ~1.7 s (532722c8)
• Trim slow tests under the 8 s nextest cap, drop the 30 s cap_bundle_* exception, make index_mtime_change_invalidates_cache deterministic (f4c0b5ad, 9e23ff2a, 44429405)
• Re-enable three previously-skipped E2E tests; the culprit was a Node fixture-helper dangling-symlink bug (915c5f33)
• Settings-style chrome and a live SMB diagnostics dashboard in the dev Debug window (6bd0f15c, e7660b3a)

[0.21.0] - 2026-05-21

Quick Look (⇧Space) arrives, and Settings plus the main window now look properly macOS-native.

Added

• Add Quick Look (⇧Space) (6778494b)
• Add ⌘← / ⌘→ to copy the cursor path between panes (a3e15f45)
• Add red binary-file warning in the file viewer (74e7b0cd)
• Redesign Settings window to look like System Settings (69480931, 76be4f8a, 9668a078, 91c31f35)
• Redesign tab bar, flatten panes for a more native-macOS look, fix UI glitches (dc7d6500, 9668a078, 3771570a, 79ed3b6c)

Fixed

• Fix transfer dialog showing “✓ 0 files” when pre-flight scan beat the FE listeners (8525835c)
• Fix stale path events corrupting the breadcrumb after switching a pane to Network (a3e15f45)
• Fix Quick Look toast/content import cycle (b3d67fe6)

Non-app

• Move rust-toolchain.toml to the workspace root so every crate pins one toolchain (fixes v0.20.0’s rustup target add drift) (41e999ab)
• Add workflows-rustup check forbidding rustup target/component add in workflows (c68630ee)

[0.20.0] - 2026-05-20

Snappier and safer transfers: MTP cancels land instantly, SMB writes pipeline over one session, and selection switched to a high-contrast red. Cmdr now runs on macOS 12 Monterey, too.

Added

• Cmd+click toggles selection (c6adee74)
• Bind Insert to toggle selection in Total Commander style (719e4f9b)
• Modify Shift+Arrow/Page/Home/End behavior to align more with other file managers (47932132)
• Switch selection to red. Clears WCAG AA across all backgrounds! (9028722c, 02b295da, 069bc400, 14a36dd8)
• Tint each pane’s background by volume type (local/SMB/MTP) (3f5629d3)
• Improve MCP: replace fire-and-forgets with round-trips (48a9701c, 3c1b0dc9, e12285d1, df11caef)
• New MCP resources: cmdr://logs + filters, cmdr://state filters, recentErrors, upgrade_smb_to_direct, SMB connection state (e597d24d, 640c3330)
• SMB volumes auto-upgrade from OS-mount to direct smb2 sessions (640c3330)
• Copy/move/delete pre-flight scans reuse watcher-backed listings. Skip a 17s MTP re-list when the folder is already open in another pane! (9d434638, ba20ca3e, 49187230, fdebd329, b90b9003)
• SMB streaming writes no longer hold the client mutex (smb2 0.9). Concurrent writes pipeline over one session (3d0d5db7, 06bc5da7, ed4b6886)
• Bump SMB watcher to smb2 0.10 to stop losing events between polls (432d13ff)
• Localize macOS pane names in onboarding and error dialogs (points at what System Settings actually shows) (bad5d926)
• Honest transfer-complete toasts: report copied vs skipped separately (5cdf989e)
• Polish the license nudge: clearer copy and layout (95007952)
• Add fallback UI colors on macOS Monterey, achieving macOS 12.x compat! (5792b10e)
• Improve accent-fg to match WCAG AA+ against all colors, and add cursor outline (d00ba5b4)

Fixed

• Propagate MTP cancel all the way to the USB layer; no more 30-second “Cancelling…” wedges (0de4c6b7, 1696355d, f894e60e, b4018891)
• No more empty-pane flicker on bulk ops (coalesced refresh events) (54674854, 13b486a8)
• Friendly message for SMB STATUS_DELETE_PENDING (was misleading “disk needs attention”) (a560243b)
• Properly pluralize all words (“1 file"/"10 files”) everywhere (eb360370)
• Fix MTP destination pane staying stale after cross-volume writes (873f1102)
• Fix SMB/MTP listing cache going stale when the watcher misses an event (1dea24e1, ab98ee88)
• Fix MTP delete not emitting write-cancelled when cancel landed mid-iteration (e21ca6d3)
• Fix transfer dialog wedging at “Cancelling…” when Cancel raced ahead of the operationId IPC (2b2a5ec6)
• Fix MCP open_under_cursor on the Network view (0aec8fbd)
• Fix Linux startup hanging on a half-configured D-Bus (probes now bounded by a 500 ms timeout) (91afacbf, 85580df9)
• Fix refresh_listing short-circuiting on local volumes during the FSEvents symlink race (57ef1034)
• Fix two SMB shares with the same case-folded name on different servers colliding on the same volume ID (f2414556)
• Fix opening a guest SMB share popping the kernel smbfs credential dialog (92119464)
• Fix TransferErrorDialog being see-through in the transient branch (f01af359)
• Fix error dialogs rendering OS strings with markdown bleed-through (STATUS<em>DELETE</em>PENDING) (dbd7a2ac)
• Fix Brief mode cursor stripe briefly spanning the entire pane while column widths load (d676efa5)
• Fix Move dialog hiding the Size progress bar (bytes_total was 0) (8856e012)
• Fix conflict-resolution radios reading “Skip all” / “Ask for each” when only one conflict exists (4eac76b4)
• Fix focused-button Enter firing the dialog’s default action instead of the focused button (079a0ce1)
• Fix free-space numbers tier-coloring as red on healthy disks (8219a06c)
• Fix the AI offer prompting Intel Macs for a local-model download they can’t run (52f3cd81)
• Fix every tokio task crashing when stderr becomes a broken pipe (31d97e06)
• Fix Linux compile errors in errno.rs and mcp/resources.rs (90b0afee)
• Fix Linux compile errors in system_strings.rs (macOS-only loctable items) (e852f04a)
• Fix clippy::unnecessary_sort_by on Linux volume sorting (1.95 picked it up) (03faf480)

Non-app

• Cap every Rust test at 8 s (matches the Playwright convention), with documented exceptions (eb67f389)
• Stop gating desktop-e2e-linux on desktop-rust in CI (66a2e501)
• Harden the checker against supply-chain attacks: --locked everywhere, pinned tool versions, new workflows-hardening + govulncheck checks (7d771ca8)
• Declare rustfmt and clippy as required rust-toolchain.toml components (a23222eb)
• Trigger Rust CI on rust-toolchain.toml changes (0f8c9ffb)
• Dev override VITE_CMDR_FORCE_OLD_WEBKIT=1 pnpm dev to test the old-WebKit fallback on modern Macs (17537510)
• 14-day release-age gate via Renovate (3-day override for security advisories) (8bd5af1e)
• Shared pluralize helper for log/error/UI strings, plus a pluralize-noun check (0ae2ee92, ec277ba8, e070fc34)
• Force file-backed secret store under CMDR_E2E_MODE=1 (no more Keychain prompts in unattended E2E) (ecb495fc)
• New btn-restyle check (forbids .btn-* overrides); accent-matrix in the contrast check (51f31939, 0e885f5d)
• Codify 100-char Rust comment width; reflow existing comments (b76b9277, 610f66f6)
• Vendor smb-consumer-maxreadsize and pin the SMB streaming-write no-deadlock invariant (200 × 1 MB at concurrency 8) (1ae6eec7, e8259eef, e750920b)
• Ticketed acquire/release logs on the SmbVolume client mutex (2e4aeb9d)
• E2E focus hygiene: viewer/settings windows skip OS focus, Escape-binding tests use synthetic dispatch (be21bebe, 0dfdcb2a)
• Defensive disk-poll + refresh in the MTP→local copy E2E (9693b283)
• Stamp the running E2E test name into the main window’s OS title (1181e0c1)
• Document the UTM Ubuntu VM loop for iterating Linux-only tests (917938ee)
• Switch mtp-rs to crates.io 0.15.0 (off the path dep) (f98313f0)

[0.19.0] - 2026-05-16

Settings got reorganized into clear sections, the command palette remembers your recent commands, and you can type to jump to a file.

Added

• Reorganize Settings into Appearance, Behavior, File systems, Updates, AI, Network, Privacy, and Advanced (c3003a05)
• Add “Overwrite all smaller” and “Overwrite all older” conflict actions (2dfd17b8)
• ⌘⇧T reopens closed tabs; double-click the tab bar opens a new tab (65417fbe, d7a85a33)
• Move AI API keys to the OS keychain, with 300 ms debounced save (42bc5eaf, 10f8525b)
• Command palette recents on empty query (last 10, LRU, grouped, self-heals stale IDs) (d3406299, a2971aba)
• Type to jump to a file in the explorer (0b9f943f)
• Sort-column shortcuts ⌘3–6 (Brief) and ⌘F3–F6 (Full) (74e827e5)
• Brief mode: backend-computed per-column widths, plus a max-column-width slider (d84d5c2a, f7907107, f9e40fc4, e18bdbf4)
• Volume picker wraps cursor at top and bottom (206ec7d9)
• USB link-speed indicator in the volume switcher (637b152e)
• Stream MTP source-scan progress in the copy dialog (no more 0/0/0 freeze) (fef1aafd)
• Bulk-skip pre-known conflicts under Skip-all for copy and move (b365076d)
• MTP→SMB copy: kill the 2-min stall, faster source scan (1ae5c198)
• Honest copy ETA on long single-file streams: stop decaying files_rate (4737acbc)
• Format sub-1 files/s readouts instead of rounding to 0 (ff7a72f9)
• Strip em-dashes from user copy and docs; rephrase microcopy to sound more human (971e35c4, c39ecdc7, a16afb0c, adab08fa)

Fixed

• Fix MTP delete freezing instead of showing live scan progress (4e005f95)
• Fix Cancel-copy losing the rollback on the APFS clonefile fast path (9c2e6244)
• SMB upgrade no longer races mDNS in dev (be1350d7)
• “Connect directly” SMB login dialog now shows the actual server name (0d84e4e7)
• Bulk-skip no longer pollutes the throughput estimator, and only fires for top-level file conflicts (55d3ca46, c3be95c1)
• Per-iter Skip on volume copy credits byte progress (e7f657df)
• Show duration settings in their declared unit (66571349)
• Brief column-width slider enables inside the Settings window (591e090b)
• Brief mode horizontal scrollbar drag no longer vibrates at 60 Hz (b80789e1)
• Restore focus when a ModalDialog closes and when the command palette closes (35413fa3, 6c45e12d)
• File viewer surfaces SearchStatus::Cancelled to the FE on cancel (14ba2735)
• Separate MCP ports for prod (19224) and dev (19225) so dev no longer collides with the installed app (f0524658)
• setSetting is idempotent on unchanged values (c49636d8)
• Pane state: clear network host on leaving the network volume; skip FilePane MCP sync on Network (602fcb94, a1d19947)

Non-app

• Refactor write ops behind a shared transfer driver: per-source loop for copy/move, sink-based inner functions across local and volume code paths, drop one unsafe transmute (b6833e26, 1d9f2ca4, 63b6728e, 0218a645, 01c8614e, 101e8385, 118ac6b1, bc957471, 9d7c69e8, a056eb58, 5cf1173a, 1280056b, 0a7c257c, 643e7cb2, afb70901)
• Parallel-shard the E2E suite across three Tauri instances (MTP isolated, two non-MTP shards balanced); wall-clock 5m 49s → 2m 48s (7802fca3, 1841e0c5, 6e8971a0)
• Cut Playwright wall-clock 10m 12s → 5m 6s via condition polling, MCP-driven cursor moves, beforeEach short-circuits, and a per-keystroke → menu-dispatch migration (507afb0e, 3b04806e, f907adc2, df89b217)
• Add proptest-based property tests for platform_case_compare, search scope parsing, glob_to_regex, and topological_sort_bottom_up (2e747bf8, ffd799c8, 1813e3dc, 2cf586d1, e69e45aa)
• Add state-transition tests for IndexPhase, ActivityPhase, DiscoveryState, and SearchStatus (c0aed651, 9a9899e9, 9dd32504, 4ae15120)
• Add vitest mockIPC harness plus IPC contract tests for SMB connection, file viewer, and write operations (04c26e4d, 3a538b44, baa977ed, 967d93be)
• Add mutation-testing-driven unit tests across indexing/store, chunked_copy, watcher, copy_strategy, and state (ef91cfb8, a812cd9a, e9a3a9fd, b026f43d, 4f04d03c, 41a3a831)
• Codify the testing playbook and tools inventory (9515adde)
• Add ESLint rule cmdr/no-arbitrary-sleep-in-e2e (a9aea301)
• File-length check: 10% growth buffer with growth % shown; split long files into focused modules (1c1bdeb0, 2d7c27a3)
• Pre-commit --fast lane in the check runner (33f77ca5)
• E2E windows get a blue title stripe and E2E - prefix so they can’t be mistaken for the installed app (b1f707b7)

[0.18.0] - 2026-05-12

First launch stopped stacking permission popups, copy and delete dialogs show real scan progress, and cloud AI grew to cover many more providers. Dates and sizes are now color-coded across the app.

Added

• Suppress the 5–10 macOS permission popups that stacked behind the Full Disk Access prompt, and deep-link straight to the right System Settings pane (3c708d35, 16918218, f32dfc55, 791edff0)
• Flag TCC-restricted folders live in the sidebar and file list: italic + (i) icon, <no perms> Size, generic folder icon for FDA-gated favorites, failed listings stay in nav history (7baa9317, 6581f5ad, df6cd794, 762d7b9a)
• Defer the AI offer toast until onboarding ends so it stops piling on the FDA prompt (265c72d9)
• Color modified dates by age with per-segment tiers (year, month, day, time each get their own color); App palette is now the default (c73fcf54, d98459b6, be2333c2)
• Color sizes at every previously-plain site (tooltips, breadcrumb, transfer/delete dialogs, viewer footer, AI progress, search results); light-mode palette retuned to clear WCAG AA against every background (265c5a0e, 31128012)
• Show real scan progress in copy/delete dialogs with running tallies, throughput, current directory, and a real progress bar; hardlinks deduped by inode so totals match the indexer (03215d25)
• Honest ETA when files outnumber bytes: tracks both axes, picks the slower; no more “~0 s remaining” while the small-file tail drains (16b49a04)
• Stream folder-name suggestions in the New folder dialog: first option in under 500 ms instead of after the full reply (d681c8de)
• Add multi-provider AI via the genai crate (GPT-5, o-series, Anthropic, Gemini, xAI, Groq, DeepSeek, OpenRouter, Ollama); fixes GPT-5 400 on temperature and *-pro/*-codex 404 on chat completions (0c45a469)
• Cap updater hangs at 30 s and surface the real cause (DNS error, TCP deadline) instead of generic “error sending request” (e5be1467)
• Per-row crash email with build mode and short ID, schema migrations, newest-first sort (e89a63a3)
• One stable short ID per error report, shown the same in the dialog, the toast, and on David’s side (77260827, e1810361)
• Guard read-only volumes up front for F7/F8/F2 so MTP read-only SD cards warn before you type anything (d9212b83)
• Friendlier write errors that name the provider (like “Managed by MacDroid…”) and offer Retry only when it helps (e9452032, 51dff4c1, 5bcacfef)
• Make Stop/Skip/Overwrite/Rename work for folder conflicts on cross-volume copies too (7ecf9d37, 2f4e377d)
• Fix merging into an existing SMB folder after a partial copy (smb2 0.8.0) (7dd9cfc8, 623f8c17)
• Move MCP defaults to ports 19224 (prod) and 19225 (dev) so a dev build no longer collides with the installed app (c9fad17e)
• Polish getcmdr.com hero: “Download for macOS” button, viewport-responsive illustration mask, muted link style, tightened copy (606c724e)

Fixed

• Fix F8 and other dialogs dying after a volume switch (f2019aff, 46bd6d0e, eef042d3)
• Fix the Modified column ellipsizing on some rows under non-100% text size (a7a7915e)
• Fix light/dark theme briefly flipping at startup when the persisted choice differed from the system preference (f689da01)
• Stop the dev runtime silently overwriting committed bindings.ts on every pnpm dev launch (6e39d68d)
• Silence the get_file_at FE/BE drift warning that fired legitimately during async listing refreshes (0b51a331)
• Accept null for optional crash-report fields so reports written by older app versions still upload after upgrade (3c12ff2f)
• Fix dropped keystrokes during fast multi-select sequences (6074cd21)

Non-app

• Migrate the full IPC surface to typed bindings via tauri-specta; an ESLint rule and a Go check block raw invoke() and lockfile drift (f1e58011, dc5f0b47)
• Ban classifying errors by string-matching message/stderr/title with a Go check and ESLint rule; sweep across SMB, git, friendly errors, and updater (c764962a)
• Pin pnpm 11.0.9 in mise.toml and move overrides to pnpm-workspace.yaml; unblocks CI’s E2E-Linux (cee0aa08, c41d2e0d)
• Track recurring upkeep in docs/maintenance.md with a log going back to 2025-12-25 (49a119bd)

[0.17.0] - 2026-05-06

Dynamic text size lands, along with “Open with”, system Services, and Finder-matching drag and drop.

Added

• Add dynamic text size slider in Settings (75–150%, ⌘+/⌘-/⌘0 shortcuts) (a326bca6, ca78382d, e207effb)
• Add “Open with” and system Services to menus (71e6061b)
• Add iCloud Drive cloud actions to context menu (01bc0dae)
• Split Brief/Full menu items to per-pane View > Left/Right submenus (7f4d123d)
• Add networking toggle, lazy mDNS, no more local-network prompt at launch (d2ae5170)
• Faster external drive detection, fixes USB-C dock invisibility (6527d850)
• Drag & drop matches Finder (same-volume Move, cross-volume Copy, modifier overrides) (64db140f)
• Drag & drop “+” badge tracks the actual op, no flicker (cf8e3818, dcfe439e)
• Drag files into terminals (Warp etc.) (97d10675)
• Add Trash/Delete toggle to delete dialog (778296dd)
• Always show Copy/Move toggle in transfer dialog (450363e6)
• Default to Full mode on fresh installs (57ba47c1)
• File list typography polish: aligned dates, aligned headers, fade selection, clamped Ext (474f7414, e9aec7bd, 88f56367, c5698998)
• Add size-color palette setting (Rainbow / Accent / None) (5fe0d77e)
• Restore double-click-to-zoom on macOS title bar (f95441dc)
• Focus search when Settings opens (cb88685d)
• Hand cursor on License dialog support and Buy links (554b3801)
• Show real .git/* files alongside virtual categories in git portal (33219321)
• Per-file Modified dates inside git portal snapshots (3cead878)
• Cache git status per index change, near-instant repeat navs (19f0e98e)
• Error-report preview now lands under 200 ms on big log dirs (was 30+ s) (f24f255c)
• Send error reports in dev too, tagged [DEV] (63ebabf6)
• Persistent “Save bundle to disk” toast with Reveal in Finder (0debff1c)
• getcmdr.com comments follow live theme changes (7333b13c)

Fixed

• Fix Intel DMG download 404 (19f797da)
• Fix crash on virtual git portal toggle; empty git roots no longer render as 1970-01-01 (b266737e)
• Fix folder size column losing value after rename (b1d032c1, d7e08e16)

Non-app

• Big dead-code cleanup, 355 lines across 22 files (a6b46131)
• Bump GitHub Actions to Node 24 (2f02fa7e)
• Replace claude-md-staleness with claude-md-reminder (fires in-loop, not weeks later) (60e30be5)
• Big CHANGELOG cleanup: shorten long items and document style guidelines. (8f3daa0a)

[0.16.0] - 2026-05-01

Network shares now reconnect on their own, and you can check for updates from inside the app.

Added

• Add SMB live reconnect, 5-attempt backoff right in the pane, no re-auth (d96bc4b4, 0c1d3680)
• Disconnect button now actually unmounts (toast if Finder’s holding the volume) (c5a410aa)
• Add Check for updates from inside app (00470b96)
• Add human-friendly size units toggle (c8cc1008)
• Add symlink-aware size hint, info icon explains exclusion (matches du and Finder) (0d83a7b2)
• AI download toast X stays closed for the rest of the download (97f1cee3)
• Skip rename warning for equivalent extensions (jpg/jpeg, htm/html, yml/yaml, tif/tiff, etc.) (55592ba4)

Fixed

• Fix temp network issues kicking users out of folders (48ac9bf8)
• Suppress “Restart to update” toast during first-launch onboarding (ffeb7d96)
• Fix indexer triggering macOS perm popups while onboarding: now waits for FDA (59aca717)
• Fix SMB reconnect runaway subscribe loop after hot reload (91bc2e46)
• Fix SMB reconnect double-triggering loadDirectory (3f6b1b0d)

[0.15.0] - 2026-04-29

The git browser lands: browse branches, commits, stashes, and worktrees like folders, and copy a file out of any version.

Added

• Add git browser: live branch/dirty pill in breadcrumb, browse .git/branches/, tags/, commits/, stash/, worktrees/, submodules/ as folders, drag any file out of any branch or commit into working tree (preserves bytes and exec bit, no git checkout), optional per-file status column with M/A/D/?/! glyphs (314e9ae2, 897df2c7, 1ebcfa1c)
• Meaningful Modified and Size columns in git portal (+12 / -3 for branches, 5 files for commits, on main for stashes, short SHAs for tags) (31aec35c)
• Add friendly errors for git browser (19d5b075, af64689f)
• Add Git toggles in Settings (repo chip, status column, virtual portal) (19d5b075, af64689f)

Fixed

• Fix virtual .git/<category>/... paths kicking pane back to parent (bfcbfa48)

[0.14.0] - 2026-04-26

Added

• Add error reports: one-click redacted diagnostic bundle via Help menu or error toast, with optional auto-send and a short ERR-XXXXX correlation ID (6d904aa6, 51b6102a)
• Add log storage cap setting (default 200 MB, 0 disables log storage and error reports) (f3dbf514)
• Add per-output log filtering, with a verbose-logging toggle in Settings (319d5d37)

Fixed

• Fix auto-sent error reports dropping when fired before the Tauri handle exists (f069a712)
• Align Size column icons flush right (1d5f661a)

Non-app

• Add error-report endpoint on api server with R2 presigned-URL handoff (1a2ea1c0, f78f76af)
• Add shared PII redactor for crash files and error-report bundles (1d719f36, b64e2c2c)

[0.13.0] - 2026-04-22

Added

• SMB copies ~30× faster on high-latency links (100×10 KB over ~60 ms RTT: ~28 s to ~1 s) (94090555, 9d6df0e9, 4009b9ba, 77ea6e81)
• Add SMB concurrency setting (default 10, range 1–32, live) (7fdd85e3, aa331c4e, f46d45e4)
• .. row shows current folder’s totals, not parent’s (36212ede)
• Full mode shrink-wraps Ext/Size/Modified to give Name every spare pixel (7325c8f8)
• Brief mode shrink-wraps each column to its widest filename (c336dbba)
• Filename tooltip on truncation in Brief and Full (f37d7e51)
• Volume tooltip on tabs (b6663988)

Fixed

• Security: bump smb2 to 0.7.2, fixes a crafted DFS referral crashing Cmdr (7e7eaf76)
• Fix small SMB uploads ignoring cancel (f948731c)
• Fix click-on-cursor eating the next drag (cccf0095)
• ⌘C now copies selected text when there’s a text selection (47f03b20)
• Block dropping a folder onto itself or its descendants (“Can’t drop here” feedback); .. accepts drops (b7c3d960)
• Fix frontend hot reload (swap UnoCSS for unplugin-icons) (00906566)

Changed

• Internal: cross-volume copies flow through stream API (plus APFS clonefile fast path); batch copies run in parallel per-backend (eb99c37c, 508a0fe1, 50b7221e, 39c71eed)
• Move smb2 from git to crates.io, bump through 0.7.1 and 0.7.2 (96f4bbd3, 0ec95a79, 7e7eaf76)

Non-app

• Run Docker SMB integration tests on every push (26 tests against real servers) (257269bb)
• Byte-level blake3 hash verification on every SMB copy test (fd5a2d84)
• SMB copy soak harness: 30-min Docker run, 41,984 iterations, zero drift (3a9b58f2, 6a9e046d)
• Add changelog-commit-links check (surfaced and fixed 8 bad links) (4e28130)

[0.12.0] - 2026-04-18

Added

• Add friendly error pane for listing failures (provider-aware suggestions for Dropbox, Drive, OneDrive, iCloud, MacDroid, VeraCrypt, etc.) (eec50ff, cc7bb3)
• Live disk-space updates in status bar (configurable threshold, 3 s timeout) (d67dd3)
• Add “Copy path” to breadcrumb context menu (eb4d3c)
• Add SMB streaming reads/writes (MTP↔SMB and SMB↔SMB copies skip temp files, ~1 MiB peak RAM) (ac71bd, a82709, 35120d, 043597f)
• Disambiguate same-named SMB shares per server (76671b)
• Inline SMB login form on direct-connection upgrade (b315b4)
• Instant dialog open for large selections (50k-file Copy/Move: ~10 s to ~1 ms) (48ea60)
• Add MTP Samsung support (phones reporting 0 storages at connect time now appear) (14b3ac)
• Batch MTP scan for copy (one USB call per parent dir, not per file) (70978c)
• Skip rename extension warning on case-only changes (photo.JPG to photo.jpg) (1401017)
• Split filename + extension in Full view (275d091)
• Volume selector polish (clickable spacebar area, no clipping over F-key bar) (700eac)
• File-op dialog polish (thousand separators, mid-text truncation, fixed 500 px width) (d67dd3)
• Add debug-window error-pane preview with all 47 error states (cc7bb3)

Fixed

• User cancels no longer log as ERROR (6f79392)
• Fix copy/move crash from a reactivity race (0cdd7d)
• Fix stuck “Scanning 0 files” transfer dialog (dd06d68)
• Fix double-dispatched MCP autoConfirm copies (4af22ab)
• Fix file watcher panic on 500+ external changes (4087e30)
• Match Finder for copy space checks (count APFS purgeable space) (3454656)
• Fix SMB paths with spaces, serialize concurrent manual-server writes, fix viewer search after emoji/CJK (97c0481)
• Fix SMB port handling and human host display for mDNS names (c26f7e8, 017b7043)
• Fix “Connect directly” on QNAP (2666db8)
• Hide Clear-index button when there’s no index (fixes AA contrast) (b1915d9)
• Network pane no longer sticks on old host after mount (41c1860)
• Fix llama-server startup on Linux with locked keyring (encrypted-file fallback) (55ccde3)
• Fix nested-runtime panics on MTP/SMB (async Volume trait end-to-end, runtime-safe MTP reads) (531bb9b, 9d4982a, 694ddc1, 1598f8c)

Changed

• Cancelled SMB uploads skip the server flush (~100 ms to 1 s saved per cancel) (6fa0780)

Non-app

• Add design-time WCAG contrast checker (resolves CSS vars and color-mix chains, replaces flaky axe rule) (db25f0d, 55af258)
• Fix 18 real WCAG AA contrast failures (747507f, 67d42ba, 4a15a53)
• Add tier-3 component-level a11y tests (61 files, 146 tests, ~6.3 s) and a11y-coverage check (33300a4, d56c1df, 398bf7a)
• Switch Lucide to UnoCSS pure-CSS icons (93548fa)
• Add file-length check; split 20+ long files into sub-800-line modules (7514cb4, 2939bfe, 4514a83, 315609a)
• Run Linux E2E in Docker (8803c3c, f39177c)
• Drop CrabNebula/WebDriverIO macOS E2E suite (Playwright covers all 15) (4cecfb9)
• Upgrade rustls-webpki 0.103.12 (RUSTSEC-2026-0098/0099) and bitstream-io 4.10.0 (3734502)
• Add docs/error-handling.md contributor guide (a4a5fdb)

[0.11.1] - 2026-04-10

Added

• Add striped-rows setting (alternating row shading in Full and Brief) (faa2534)
• Add MTP per-file copy progress and instant mid-file cancel (~300 ms via USB SIC abort) (ac5ec4d, a66adf6)

Fixed

• Sync View menu Full/Brief checkmarks across panes (6e36a49)
• Stop MTP ObjectNotFound log spam on every copy (0cc675a)
• Fix MTP mid-stream cancel corrupting USB session (mtp-rs 0.11.0) (a66adf6)
• A11y: darken accent-text for WCAG AA, fix search placeholder opacity (b7744dd)
• Fix Linux compilation (cross-platform SMB types, get_smb_mount_info) (00c5f18)

[0.11.0] - 2026-04-10

Added

• Add SMB direct connections via smb2 (~4× faster, OS mount stays for Finder/Terminal) (dea46ec)
• Auto-upgrade existing and new SMB mounts to direct connections in the background (a6ab2ca)
• Add “Connect to server” for SMB by hostname, IP, or smb:// URL (persisted, context-menu Disconnect/Forget) (2df24ac)
• Add SMB connection status indicators with one-click upgrade (0473250)
• Real-time SMB transfer progress with end-to-end cancel (f530355)
• All SMB write ops (create, delete, rename, copy, move) through direct connections with full conflict handling (e72c082, 4f030d7)
• Unified SMB/MTP change notifications with incremental cache patches (2d0bc98)
• Warn in transfer dialog when using slower OS mount (d25de48)
• Auto-suppress ptpcamerad on macOS for MTP (d161f9b)
• Add MTP settings (disable toggle, “Don’t show again” toast, dedicated section) (2467ece, 70d8d40)
• Brief mode shows real recursive directory sizes in selection info (53ee5ef)
• Cursor jumps to newly created directories (eff84d1)

Fixed

• Fix per-file copy progress (counts files, not top-level items) (d10d9cc)
• Faster SMB deletes (skip stat round-trip) (0e7f072)
• Copy cancellation checks between every file in tree copies (a7d401a)
• Fix cross-volume copy misclassifying SmbVolume as local (4a86a85)
• Fix SMB paths with accented characters (NFC normalization) (baaccc8)
• Resolve SMB IPs to hostnames via mDNS so Keychain finds saved credentials (b1addfd)
• Show login form on stale Keychain credentials instead of empty share list (46609f1)
• Block navigating above SMB mount root, fall back to home when unreachable (d25de48)
• Fix stale cursor index after file ops (945093b)
• Fix drag & drop after wry upgrade (a816c77)
• Fix stale dir sizes after copy/create (1479108)
• Fix scan-preview race in progress dialog (5d9b91b)
• Fix dir_stats count drift on file/dir type changes (364ddf1)
• Fix index entry ID race via shared atomic counter (6e173e4)
• Fix MTP move not refreshing UI on Linux (mtp-rs 0.9.1) (5b27ead)

Non-app

• Replace smb/smb-rpc crates with our own smb2 (2d7904f)

[0.10.0] - 2026-04-08

Added

• Visible copy rollback (progress bars count back, Cancel stops the rollback) (0ac5d0)
• Dual progress bars in transfer dialogs (size + file count) (ced9d2)
• MCP: cmdr://settings resource and set_setting tool (c71115)
• MCP: move_cursor awaits frontend confirmation (6341c25)

Fixed

• Fix MTP move conflicts silently overwriting (27f2ff)
• Fix MTP watcher missing external file changes (266026)
• Fix MTP event debouncer dropping suppressed events (21b3bc)
• Fix MTP pane falling back to local root after copy (9deba7)
• Fix MTP volumes missing from copy/move dialog (cd6603)
• Fix MTP event-loop lock contention blocking copy/move/scan (0461e33, 547a41)
• Fix MTP scan preview showing 0/0/0 in confirmation dialog (4e1efa)
• Fix MTP rename conflicts not showing dialog on non-local volumes (25f2b2)
• Fix copy “Cancel” (keep partial files) triggering unintended rollback (3042f2)
• Fix copy cancel hanging 30+ s on network mounts (816e9e)
• Fix UI blocking on network filesystem ops (bed59d)
• Fix indexing replay progress showing “Scanning...” instead of replay overlay (32c053)
• Push-based volume selector, fixes mount/unmount races (b09665)
• Fix volume path resolution to <1 ms regardless of mount health, handle APFS firmlinks (5a1f78)
• Harden unsafe Rust (main-thread markers, scoped Send impls, SAFETY comments) (541804)

Changed

• Typed write-op errors (9 variants) replace string parsing (c10e06)
• Typed MTP volume errors (8f2296)

Non-app

• Backend owns MTP move strategy, frontend no longer orchestrates (547a41)
• Demote noisy per-file copy/move/MTP logs from INFO to DEBUG (357fef)
• Fix all WCAG violations found by axe-core (d29a7c, 438046, 6e6230)
• Port E2E tests from WebDriverIO to Playwright; add 80+ tests (MTP, SMB, conflicts, a11y, indexing) (77d05937, 7d58bd6c, 4f83aeb8)
• Replace Prettier with oxfmt (10–20× faster) (995f8c)
• Split indexing module (1951 lines) into focused files (390864)
• Add light/dark website theme, features page, OG images, blog Like buttons (49dbe782, 98bdcc35, 56a9e764, 5cff7c35)
• Dashboard: color-coded charts, GitHub star tracking, error reporting (4b7c9e1e, 67efc4ae, 2e26b956)

[0.9.1] - 2026-03-24

Fixed

• Fix orphaned llama-server processes after rapid AI provider switching (b3382e)
• Fix vendor-specific MTP detection (Kindle, USB class 0xFF) via mtp-rs 0.4.1 (1a170d)

Non-app

• API server: migrate telemetry to D1, add crash email notifications via Resend, rename license-server to api-server (7dc0da)
• Split search.rs (2361 lines) and SearchDialog.svelte (1552 lines) into focused modules (c17c21)
• Deduplicate repeated patterns across Rust, Svelte, TS, and Go (52afe3)
• Bump 9 Rust deps (reqwest 0.13, rusqlite 0.39, notify-debouncer-full 0.7, etc.) (929556)
• Skip pnpm install when lockfile unchanged (~20 s saved per run) (8d2b39)
• Blog: add Kindle support article (5c9d5b)

[0.9.0] - 2026-03-23

Added

• Add whole-drive file search (⌘F): glob/regex, size/date filters, scope, AI mode, MCP search and ai_search tools (058136, 15110c, 8c3546, cf5827, 415db3, 21d32e, 26d682)
• Add opt-in crash reporting (panic hook + signal handler, inspect-and-send dialog, no PII) (016ee3, be29af)
• Add Shift+F4 (Total Commander style): create new file, open in default editor (da8ca9)
• Add smart size display (min logical/physical, dual-size tooltips, hardlink dedup, mismatch icons) (1d666a, b302d0, 065820, 1d588f, a93a8b, 9c450c)
• Add sortable Ext column in Full mode (e834b4)
• Add replay progress overlay during cold-start (f166b0)
• Show live MTP disk space in volume dropdown and status bar (b155f1, c4cc26)
• Show MTP loading progress on large folders (77ebaa)
• Add focus indicators on search and command palette inputs (179221)
• Selection summary includes directory sizes (3928c1c)
• MCP: show directory sizes in state resource (9cb775)

Fixed

• Fix multi-GB macOS memory leak (ObjC calls on background threads now run inside autoreleasepool) (777f9e)
• Fix stack overflow in sync status (8 MB OS threads instead of rayon for NSURL/XPC calls) (fa28cd)
• Fix size overcounting (hardlink dedup, exclude cloud-only files, smart-size for dataless) (fe5eff)
• Fix file watcher: instant updates in large dirs via incremental diffs (df558e)
• Fix selection clearing after file ops; gradual deselection per source item (538ec5)
• Fix selection indices drifting after external file changes (453ec0)
• Fix cursor lost after deleting all files (17808d)
• Fix stale dir sizes on rename (10213d)
• Fix indexing not starting on fresh DB (a61376d)
• Fix “Scanning...” stuck after replay (4a44d7, fb796e)
• Fix verifier + replay transaction conflict via named savepoints (72ca9f)
• Fix MTP browsing panic; show device name on single-storage devices (d37b8a)
• Fix MTP duplicate directory listing on connect (17efe8)
• Fix MCP stale state after server crash; auto-probe port when configured port is in use (0369d2, d69f87)
• Fix OpenAI compatibility (795a67)
• Hide misleading rollback button for move ops (fbdba5)
• Raise replay/journal gap thresholds to reduce unnecessary full rescans (377919, af2bf7)

Non-app

• Add full-stack analytics dashboard (6 data sources, agent-readable report) (b4f740, 0766c4, b97028)
• Enforce CSS design tokens via Stylelint (50f2b4, e3259b, 36b340)
• Drop desktop smoke tests, speed up store tests by ~20 s (c6210a, dab071)
• Reduce code duplication across write ops, listing, events, search dialog (33ec2f)
• Website: story + testimonials sections, landing page polish, Docker healthcheck, Remark42 CSP (d5a7f4, 51acd8, 424a80, dd5e34)
• Bump mtp-rs to 0.2.0 (634255)

[0.8.2] - 2026-03-15

Fixed

• Fix crash on launch after auto-update (kernel code-signing cache SIGKILL: temp + rename for a fresh inode) (d2923af)
• Fix indexing drift: per-navigation verifier with 30 s debounce; skip /System and /dev as empty stubs (0f28b51, b0b1730)
• Fix dir size display during indexing (refresh on aggregation-complete, not scan-complete) (d0746fb)
• Fix navigation latency: fire-and-forget verification, parallelize 6 listen() calls (a4e87f1)
• Fix indexing perf (integer-only index: 25 min to seconds on 5.1M entries; 99% replay-event dedup) (a5b5beb, 44fecd6, d9877c1)

Non-app

• Separate dev and prod log dirs, fix Linux test output capture, fix smoke test timeout (e8762be, 83d2365, 88901f9)
• Improve agent instructions (dec19cf)

[0.8.1] - 2026-03-14

Fixed

• Fix indexing (lock-free dir-stats reads, drop stale PathResolver cache, fix “DB is locked”, fix overlay race, lost scan metadata, dir→file replacement orphans) (50bd4fa, 44abfd1, 7319c5c, 26785fc, 795e48b, 424eedb, dbccec1, 8f87a4f)
• Fix traffic light position in production builds (7551df2)

Non-app

• Add indexing concurrency stress tests, event loop tests, reconciler tests (3ad3adc, 8a084cd, dbccec1)

[0.8.0] - 2026-03-13

Added

• Add custom macOS updater that preserves Full Disk Access (syncs into existing .app bundle, privilege escalation) (190a637)
• Add MTP delete, rename, move (full progress, cancel, dry-run) (812ad07)
• Add breadcrumb polish (“/” prefix, “~” for home) (44b7105)
• Add auto-rescan on FSEvents channel overflow (ca7cece)
• Add index debug dashboard (DB stats, watcher status, event-rate sparkline) (7510ec3)

Fixed

• Fix indexing (interrupt-safe reconciler, stop micro-scans, faster bulk inserts, false FSEvents deletes, missing dir sizes after replay, periodic DB vacuum) (31df59e, 981b311, da74290, f0c225f, bf0b47f, d125a24, 67684bb)
• Fix drag swizzle failing on wry 0.54+ (2680bae)
• Fix MCP live start/stop UX (backend state as ground truth, port auto-check) (f4c107a)
• Fix MCP server not stopping on app quit (61fe290)
• Fix traffic light position in production builds (b74ed39)
• Fix scan overlay showing stale state (218bcb9)

Non-app

• Vendor cmdr-fsevent-stream fork as workspace crate (8b937a6)
• Fix two FOUC flickers on website page load (8c21ac7)
• Set up self-hosted macOS GitHub Actions runner; add index DB query tool, website deploy workflow extracted (665f63a, 37f1062, 5744636)
• Pink title bar in dev to distinguish from prod (d2c9ae4)

[0.7.1] - 2026-03-12

Fixed

• Fix scan overlay stuck at 100% after directory size aggregation (424eedb)

[0.7.0] - 2026-03-12

Added

• Add AI settings: three providers (off / cloud / local LLM), 15 cloud presets, per-provider keys, model combobox, RAM gauge, context size (b41365b, abfc248, 423e669)
• Live MCP server start/stop in Settings (no app restart) (e0c55e7)
• Add stale index detection with toast + auto-rescan (b590a54)
• Add device tracking for license abuse, fair-use terms in ToS (cf4f913)
• Add license section to Settings (status display, action buttons, dynamic labels) (39cf7b4)
• Improve app icon for macOS Sequoia (cc80d28)

Changed

• Drop supporter license tier (legacy keys map to Personal) (c0a63f5)
• Split Settings UI horizontally 50/50 (9493f88)
• Rename settings-v2.json to settings.json (d987cc8)

Fixed

• Fix startup panic from blocking_lock in async context (f9855ca)
• Fix SQLite write pragmas on read-only connections (panic in subtree scans) (a53a275)
• Fix llama-server not stopping on quit, stale PIDs, excess memory (256k to 4k default context) (eae70f1, ffcbc81, e45c742)
• Fix Settings UI freezing ~5 s when stopping AI server (instant SIGKILL for stateless llama-server) (2af7ee8)
• Separate dev/prod data dir and MCP port (b8b058a)
• Fix fallback path resolution falling to / instead of ~ (8d7c644)
• Fix indexing (100× faster aggregation, DB auto-vacuum, truncate before full scan) (47a2e8e, cad1af5, aff2046, 96323e9)
• Fix FSEvents storms causing memory pressure (mimalloc, 1 s dedup window) (207ddee)

Non-app

• Replace 19 ADRs with colocated Decision/Why entries in 11 CLAUDE.md files; slim AGENTS.md from 245 to 93 lines (ccf5cc7, d297a1a, 0595796)
• Website: version + file size on download buttons, fix Intel/Apple detection flicker (bd17056, ec35b1f)
• Add html-validate and circular-dep checks (3dbd5af, 4bead2b)
• Eliminate all circular deps via refactor (volume grouping, menu platform code, viewer scroll/search) (7740fbc, 8522e71, e16bd91, 7ed1cea)

[0.6.1] - 2026-03-10

Added

• Add top menu icons (1a2621a)
• Add View, Copy, Move, New folder, and Delete actions to context menu (a966f17)

Fixed

• Fix OOM crash from unbounded indexing buffers; toggling Full Disk Access could replay millions of FSEvents with zero backpressure, consuming 500+ GB RAM. All buffers are now bounded (~350 MB peak), with a memory watchdog that stops indexing at 16 GB (f1501ec)

Non-app

• Website: add llms.txt, Schema.org JSON-LD, and auto-generated sitemap for agent accessibility (ba64c36)
• Website: update roadmap (5197120)
• CI: simplify release pipeline, download sigs directly from release, generate latest.json with jq, validate all 3 sigs before proceeding (d3095cb, 5b82cd0)
• CI: fix Backspace E2E test on WebKitGTK, fix CI failures, fix 3 flaky tests (7c22951, 79f593c, 8f4ea82)
• Docs: add troubleshooting section to releasing guide (1768b29)

[0.6.0] - 2026-03-08

Added

• Add Linux support (alpha): volumes via /proc/mounts, file ops with reflink support, trash via FreeDesktop spec, inotify file watching, MTP ungated, SMB via mDNS + smbclient fallback, GVFS-mounted shares as volumes, native file icons via freedesktop-icons, accent color via XDG Desktop Portal, encrypted credential fallback when no system keyring, distro-specific install hints, USB permission handling (b6e80f6, 20be0c3, 9c51fa9, 64e41f9, 40cc1a9, c3ad1ed, d40ea25, 60063ec, e65d993, 22e2ea7, afe2609, 4bbcbb0, 48af543)
• Add per-pane tab support: ⌘T/⌘W, ⌃Tab cycling, pin/unpin, context menu, persistence with migration, per-tab sort (791a29a)
• Add delete/trash feature (F8): trash by default, ⇧F8 for permanent delete, confirmation dialog with scan preview, batch progress with cancellation, volume trash support detection (e3560a3)
• Add clipboard for files: ⌘C/⌘V/⌘X with Finder interop, ⌥⌘V for “Move here”, cut state tracking, text clipboard in all windows via NSPasteboard (0dc2953, 60baeba)
• Add toast notification system with centralized store, dedup, stacking, three levels, transient/persistent modes (6c5c452, 2329f2f)
• Add per-pane disk space display: 2px usage bar, free-space text in status bar, mini bars in volume dropdown (9b6d057)
• Add custom tooltips with glass material effect, shortcut badges, smart positioning, accessibility support, replacing all native tooltips (3c7f965)
• Add drive indexing with integer-keyed DB schema (7.4x size reduction, 3.8 GB → 0.54 GB), LRU path cache, platform-aware collation, recursive CTE aggregation (7c5d3ce, daee97b, 5e10fa9, 68be3ab)
• Add IPC hardening: timeout-protect all filesystem commands, transparent timeout UI with retry/fallback for volumes, tabs, file ops, and viewer (6a58278, 71de96e)
• Add accent color option in Settings: macOS theme or Cmdr gold, “Recolor to gold” for folder icons (330e824, ef9de79)
• Add directory sorting by size with toggle in Settings (a7dd8ca)
• Add “Forget saved password” UI for SMB network shares (7d751d5)
• Add path validation in copy/move and mkdir dialogs with platform-correct limits (6b295ec)
• Add centralized keyboard shortcut dispatch with runtime custom bindings (e40bcc2)
• Add macOS entitlements and TCC usage descriptions for proper permission prompts (ff0c27e)
• Add Apple code signing, notarization, and arch-specific downloads (aarch64, x86_64, universal) (b03f91e, 944085f)
• Add licensing UI improvements: verify/commit split, typed errors, short code in signed payload, Paddle live setup (0abc704, 1f2308b)

Fixed

• Fix file viewer: search progress bar with spinner and stop button, incremental match delivery, 10k match cap, byte-seek navigation, loading very long files (9c0a3c3, a3b9d0e, 31cf5fd, d15ecde, 86ef2a5, 0fcdb13, 8b57bbe)
• Fix 3–10s startup block from index enrichment holding the mutex (267e02b)
• Fix mDNS host resolution arriving before discovery, causing SMB auth failures (2dda99b)
• Fix focus escaping panes with focus guard, removing ~50 redundant refocus calls (4c9aadc)
• Fix clipboard shortcuts in text fields on macOS (20f3de0)
• Fix non-blocking navigation on slow/dead SMB shares with timeouts and optimistic UI (c85c8c2)
• Fix copy feature: auto-rollback on panic, deadlock prevention, cancel race condition (2b17ab5)
• Fix status bar not refreshing after file watcher diffs (e880f9f)
• Fix pinned tab volume change now opens new tab instead of navigating in-place (ff4c8f2)
• Fix cancel-loading to return to previous folder instead of home (8ff2379)
• Fix ⌘, to refocus Settings window if already open (71b3e61)
• Fix Settings: ⌥+key shortcuts showing “Dead” on macOS, key filter subset matching, ESC clears filter (1fd540a, 5056bb6, 47050e0)
• Fix settings not initialized warning at startup (b540fcc)
• Fix SMB share showing 0 bytes free on network filesystems (f791153)
• Fix volumes cached to prevent timeout at startup (024e48f)
• Fix top menu items staying enabled on non-main windows (7572d13)
• Fix live file count during large folder loading (7815d0f)
• Fix window content height for production builds (0cbd0fd)
• Fix folder icons updating on OS theme change (6b02445)
• Fix focus lost after rename cancellation (edace18)
• Fix file viewer not loading settings (acfef93)
• Fix drive indexing: orphaned entries, missing dir sizes, background scan failures, DB transaction issues (323ae86, 004f302, c331143)
• Fix MCP protocol version mismatch warnings at startup (2af0b90)
• Fix arrow up/down performance in large folders (e6f268c)
• Fix PostHog CSP and make it cookieless (1700d99, 9cea85a)
• Fix app loading slowly due to startup optimizations: license cache, async validation (3835866, 87de136)

Non-app

• Overhaul native menus on macOS and Linux: build from scratch, strip macOS system-injected items, unify dispatch via single event, context-aware graying, full accelerator sync (b38c552)
• Unify frontend + backend logging via tauri-plugin-log, demote noisy log levels, suppress smb/sspi noise (22f4ab5, dbbcc55, 1e59a56)
• Design system: unified button styles, consistent loading states, improved text readability, redesigned network screens (8dc2e33, 4d07ad0, 71dbe0b, b5d8b28, a018a3e, 90e2010)
• Docs overhaul: CLAUDE.md staleness checker in CI, enriched 25 CLAUDE.md files with Decision/Why entries, cross-cutting patterns in architecture.md, split infrastructure.md into per-service files (ff8b3be, 347ae9b, f961f19, 2f7bff1)
• Website: add blog with first post, PostHog and Umami analytics, arch-specific download buttons, Docker build check, newsletter improvements (01681c1, 75d5228, 78de573, ae8f6cb, 34ecc70)
• Check runner: CSV stats logging, cfg-gate enclosing block scope detection, file length check, flag combining fix (9ac4b54, 539db62, 4a24562, 6fe48a9)
• Refactors: split DualPaneExplorer and FilePane, extract dialog state, deduplicate templates and Settings CSS, split tauri-commands (337f620, cfae0db, dad8790, 35a4239, ba86d87)
• License server: download tracking via Cloudflare Analytics Engine (ef0f049)
• Add Renovate for automated dependency updates (00880a0)
• Add macOS Playwright E2E tests and CrabNebula E2E tests (ec900ee, a768c03)
• Infra: uptime monitoring with UptimeRobot + Pushover, hardened deploy script (19baefd)
• Add cfg-gate lint check for macOS-only Rust crates (075c1d4)

[0.5.0] - 2026-02-15

Added

• Add file viewer (F3) with three-backend architecture for files of any size, virtual scrolling, search with multibyte support, word wrap, horizontal scrolling, and keyboard shortcuts (79268a4, 9f91bce, b10002a, 2ad2521, b65c422, 43adc86)
• Add drag-and-drop into Cmdr: pane and folder-level targeting, canvas overlay with file names and icons, Alt to switch copy/move, smart overlay suppression for large source images (1ad1493, 6207d8e, a89f18f, 371746b, a3eae1c, c776eed, e97d3db)
• Add settings window (⌘,) with declarative registry, fuzzy search, persistence, keyboard shortcut customization with conflict detection, and cross-window sync (db121f6, 418f790, 8f78596, 218b79b, 9c39db3, 4e90137)
• Add MTP (Android device) support: browsing, file operations (copy, delete, rename, new folder), USB hotplug, multi-storage, MTP-to-MTP transfers (938e87c, 672fa6e, d1e9f80, 7ac1528, b08af36, ea845a6, fd8dad6)
• Add move feature (F6) reusing the copy UI as a unified transfer abstraction (682d33a, cb9e047)
• Add rename feature with edge-case handling (62799c6)
• Add swap panes feature with ⌘U shortcut (2a1b329)
• Add local AI for folder name suggestions in New Folder dialog, optional download (b9a112e, 3dc19c0)
• Add chunked copy with cancellation and pause support on network drives (ba5409e)
• Add 6 copy/move safety checks: path canonicalization, writability, disk space, inode identity, name length, special file filtering (9548022)
• Add sync status polling so iCloud/Dropbox icons update in real time (ed36158, 6296412)
• Add CSP to Tauri webview for XSS protection (68bd510)
• Add copy/move folder-into-subfolder warning with clear error message (521ab5e)

Fixed

• Fix panes getting stale when current directory or its parents are deleted (1b5ad52)
• Fix multi-window race conditions that could crash the app (9a33e24)
• Fix recovering from poisoned mutexes instead of crashing (56 lock sites) (62fd685)
• Fix wrong cursor position after show/hide hidden files (223b041)
• Fix selection and cursor position breaking on sort change (36d61d0)
• Fix panel unresponsive after Brief/Full view change (2b6d513)
• Fix copy operationId capture race condition (9b5c57c)
• Fix $effect listener cleanup race in FilePane (e2c6ee1)
• Fix condvar hang on unresolved conflict dialog (2975c45)
• Fix first click on main window not changing file focus (59c5da4)
• Fix AppleScript injection in get_info command (e3378c3)
• Fix URL-encoding of SMB username in smbutil URLs (f908a74)
• Fix mouse/keyboard interaction bug for volume picker (8afd0de)
• Fix drop coordinates when DevTools is docked (a9a041f)
• Fix MCP server always returning left pane as selected (2f9160a)
• Redact PII from production log statements (fe31316)

Non-app

• Migrate network discovery from NSNetServiceBrowser to mdns-sd: 68% code reduction, no unsafe code (3d44cf1)
• Rewrite MCP server with fewer tools but more capabilities, auto-reconnect, and instructions field (1061fad, ede6463, 82345d1)
• Introduce ModalDialog component for all soft modals with drag support (ffbf14a)
• Major refactors: split DualPaneExplorer, FilePane, volume_copy, listing/operations, connection modules (04dc3de, e14c289, 2da8e6d, c0bd500, 707a96a)
• Security: pin GitHub Actions to commit SHAs, fix Paddle webhook timing attack, use crypto.getRandomValues for license codes, HTML-escape license emails, add webhook idempotency, constant-time admin auth (c0d8cc3, 70bc594, 51cd0b5, bea3b2a, 9db450b, b82f857)
• Docs overhaul: add colocated CLAUDE.md files throughout repo, architecture.md, branding guide (eac9e61, dd91c78)
• Website: add changelog, roadmap, newsletter signup with Listmonk + AWS SES, mobile responsiveness fixes, 512px logo (643de6a, 07936d1, ba4812d, aa661cf)
• Add dead code check, manual CI trigger, pnpm security audit, LoC counter, summary job for branch protection (9876600, 3b20e66, ad22eba)
• Tooling: extract shared Go check helpers, add VNC mode for Linux testing, fix Linux E2E environment (550c353, 6aa5ff7, fa907b6)
• License server: add input validation, webhook idempotency, and security hardening (4363a32, 9db450b, 7398965)

[0.4.0] - 2026-01-27

Added

• Add file selection: Space toggles, Shift+arrows for range, Cmd+A for select all, selection info in status bar (4d44cda, 1cac4b3)
• Add copy feature with F5: copy dialog, destination picker with free space display, conflict handling (281f45e, fb5f027, a6d148d, 6c661f2)
• Add new folder feature with F7 shortcut and conflict handling (80ec297)
• Add “Open in editor” feature with F4 shortcut (7eb66ac)
• Add function key bar at bottom of UI for mouse-initiated actions (537e040)
• Add pane resizing: drag to resize between 25–75%, double-click to reset to 50% (542b491)
• Add multifile external drag and drop (7426334)
• Add keyboard navigation to network panes: PgUp/PgDn, Home/End, arrow keys (70aa341)
• Add “Opening folder...” loading phase for network folders with distinct status messages (9eb1185)
• Add license key entry dialog with organization address and tax ID collection (52480ce, 29eb6fe)

Fixed

• Fix UI not updating on external file renames (5de9346)
• Fix light mode colors (42888c7)
• Fix cursor going out of Full view bounds (7edcac8)
• Fix ESC during loading navigating to wrong location (b8c12e7)
• Fix focus after dragging window (8488de6)
• Fix multiple volume selectors opening at once (f4c4c21)
• Fix frontend race condition from refactor (646c7af)

Non-app

• Add E2E tests with tauri-driver on Linux using WebDriverIO in Docker (1b0cbac)
• Revamp checker script: parallel execution, dependency graph, aligned output, colored durations (7835b4c)
• Add type drift detection between Rust and Svelte types (b3ae1c3)
• Add jscpd for Rust code duplication detection, CSS health checks, Go checks (67e6c15, d177eb3, 2540752)
• Add Claude hooks for pre-session context and post-edit autoformat (3d59dde, 122182d)
• Add LogTape logging for Svelte and debug pane for dev mode (affa548, f494e15)
• Require reasoning in clippy lint exceptions (d327cf4)
• Website: fix hero image animation and sizing, fix broken Paddle references (40faeee, 278ad4c, 5eb5a52)
• License server: wire up Paddle checkout, fix webhook email fetching, support quantity > 1 (3c40929)

[0.3.2] - 2026-01-14

Fixed

• Fix auto-updater to download updates and restart the app after updating (c0bff9a)

Non-app

• Website: redesign with mustard yellow theme, view transitions, hero animation, and reduced motion support (0296379, 18b729f, 689a151)
• Website: avoid aggressive caching, rearrange T&C (8ca0539, c92dff8)
• Tooling: turn off MCP stdio sidecar, fix Rust-Linux check, reduce CI frequency, fix latest.json formatting (5dda608, 2ec3f7e, 42d81ab, 52980ae)
• Docs: release process and auto-updater documentation (c7c36f6, 765f5ad, f3785da, 10e43de)

[0.3.1] - 2026-01-14

Added

• Add custom title bar, 4 px narrower for more content space (33e90c8)

Changed

• Replace rusty icon with yellow one (79777e3)

Fixed

• Fix app name in task switcher: shows “Cmdr” instead of “cmdr” (8117300)

[0.3.0] - 2026-01-13

Added

• Add MCP server with file exploring tools (f6dcf27)
• Add stdio MCP interface for broader client compatibility (3b193f7)
• Add Streamable HTTP support to MCP server (1d0549b)
• Stream folder contents for blazing fast experience (1d82ec9)
• Add “listing complete” state showing file count (5059e00)
• Add Linux checks to checker script (02ab0ab)

Fixed

• Fix MCP server port and tool naming (c2ae7de)
• Fix race condition when loading files (38865e6)

[0.2.0] - 2026-01-10

Initial public release. Free forever for personal use (BSL license).

Added

• Dual-pane file explorer with keyboard and mouse navigation (c945f18)
• Full mode (vertical scroll with size/date columns) and Brief mode (horizontal multi-column), switchable via ⌘1/⌘2 (c779a6d)
• Virtual scrolling for 100k+ files (cf6c35d)
• Chunked directory loading (50k files: 350 ms to first files) (869cdfb)
• File icons from OS with caching (b8c588e)
• File metadata panel with size color coding and date tooltips (bc3dc85)
• Native context menu (Open, Show in Finder, Copy path, Quick Look) (7d977a1)
• Live file watching with incremental diffs (cf12372)
• Dropbox and iCloud sync status icons (46f1770)
• Volume switching with keyboard navigation (ba3e770)
• Network drives (SMB): host discovery via Bonjour, share listing, authentication, and mounting (54ee04f)
• Sorting by name, size, date, extension with alphanumeric sort (e7b7206)
• Back/Forward navigation (56a5bf6)
• Drag and drop from the app (8e1d53b)
• Command palette with fuzzy search (7b0ea13)
• Window state persistence (position and size remembered) (b8d93c5)
• Dark mode support (7deb986)
• Show hidden files menu item (4af855d)
• Full disk access permission handling (9f433d8)
• Licensing features (validation, about screen, expiry modal) (dc68eeb)
• Keyboard shortcuts: Backspace/⌘↑ (go up), ⌥↑/↓ (home/end), Fn arrows (page up/down) (fc899d4)
• getcmdr.com website (0f9eb21)
• License server (Cloudflare Worker) with Ed25519-signed keys (bff3e8a)

Development history