JotLuck v0.3.3 — Preview Release Notes

In plain words / 一句话

This release is about trust. Approving or discarding a review suggestion now lands exactly where you made the change; images render in every way you open a note; the editor and autosave settings take effect and persist; and the in-app update check now works — this is the first release it can see. Recommended for everyone.

这是一个以「可靠」为主题的版本：改稿的批准/丢弃精确落位、图片在任何打开方式下都能显示、 编辑器与自动保存设置真正生效、软件内更新检查可用（本版本是它首个能发现的版本）。 推荐所有用户升级。

Date: 2026-10-29 Quality release on the 0.3 editor generation. v0.3.3 ships the outcome of a full audit-and-repair campaign: two comprehensive audit rounds (77 findings, every one independently re-verified), a 43-defect repair batch, a rendering-matrix repair wave, dependency-audit cleanup, and a repaired CI evidence pipeline. This is also the first release resolvable via GitHub releases/latest, so the in-app update check now works end to end. Windows x64 round; Linux packages are unchanged from v0.14.0-preview.

What's new in 0.3.3 — trust, correctness, cross-platform groundwork

Review mode (改稿) made trustworthy

• The diff anchor system was rebuilt. Word-level insertions now adopt at the exact spot you typed (previously they landed at the start of the paragraph), "approve all" keeps your paragraph order when several new blocks share one anchor, and discarding a deleted-block note restores proper blank-line separation. Every decision recomputes against a fresh diff first — a 400 ms stale-coordinates window that could silently corrupt the working text is closed. Mixed regions (edit one paragraph, add another) adopt in working order, and annotations converge to zero instead of oscillating forever.

Images, links, and external files — end to end

• Double-clicked Markdown files render their images in every session and view combination. The original "images show as the word 图片" report is fixed across read-only, editing, external-file, review-mode, and large-document paths.
• External editing sessions resolve local images; DOCX imports render their bundled images through a new zero-copy binary pipeline (no JSON byte arrays over IPC).
• Remote images load only after an explicit per-note choice; a single failed retry stays per-image.
• Native HTML headings pasted from the web no longer steal heading anchor ids; same-page [[#anchor]] links work in all three views; large-document progressive preview resolves in-note anchor links; a wiki link whose anchor cannot be found now tells you instead of doing nothing.

DOCX import at scale

• "Save as Markdown copy" no longer intermittently corrupts documents with ten or more images (an asset-id prefix collision combined with unordered iteration; both fixed, with a regression test that exercises both orderings).

Settings that take effect

• The six editor & autosave controls — font size, line height, tab width, word wrap, autosave on/off, autosave delay — are now wired, persisted across restarts, and honored by the editor and the save pipeline.

Update check works again

• The security policy now allows the GitHub release lookup, and the settings page and the background check share one semver comparison (preview suffixes compare correctly). v0.3.3 is the first release reachable through releases/latest.

Cross-platform groundwork

• macOS: the file-open chain consumes Open events (Finder/open -a file handoff was silently dropped); window geometry self-healing covers external-file windows; a vanished cold-start file degrades gracefully instead of aborting launch. Declared minimum system version is now 13.3, matching the WebKit feature baseline the UI actually uses.
• Linux: the .desktop launcher carries a %f field code so JotLuck appears in "Open With"; the deb now requires WebKitGTK ≥ 2.40 (the color-mix baseline); an unused tray dependency was dropped from the package.
• Durability: Unix saves fsync the parent directory after the atomic rename, closing a power-loss gap versus the Windows WRITE_THROUGH path.

Editor, search, and export polish

• Ordered task items (1. [x]) keep their number and checkbox in live preview.
• The command palette is IME-safe: composition-period Enter/Escape no longer misfire.
• Switching notes in reading and split views resets scroll to the top.
• Template placeholders use one timezone (local) everywhere — no more off-by-one-day dates between midnight and 8 a.m. (UTC+8).
• Filenames are sanitized at every create/rename/template entry; / no longer silently creates subfolders.
• Index failures surface in the palette instead of masquerading as "no results"; clearing the search box clears the results.
• The share dialog no longer produces broken pseudo-PDFs through system share channels; CSV exports carry a BOM so Excel opens Chinese text correctly.
• IPC errors carry semantic codes (expired external-file grants, stale document conversions) with dedicated five-language messages.

Completion engine

• A one-unit writing engine no longer wastes a decoder inference on every keystroke inside code fences (an invalid visibility threshold now skips candidates instead of discarding the whole response).
• Learning signals persist in batches instead of rewriting a ~230 KB localStorage blob on every keystroke.

Touch reliability

• Touch suppression state survives live-preview refreshes (a plugin rebuild dropped the flag; real touch devices could mis-open links). Found and fixed through CI instrumentation.

Fixed since v0.3.0-preview

Beyond the highlights above, this line (0.3.1–0.3.3) closed roughly 130 defects across five audit-and-repair waves: the rendering/interaction matrix (images, external links, backlinks across every view and session), two review batches of static and Flash audits, a six-dimension maintainability/robustness pass (global error handling, 2× faster search, save-floor semantics, editor chunk −37%), dependency-audit cleanup (zip 9.1.1, calamine 0.37, vite 6.4.4 with documented transitive pins), and an evidence-pipeline repair that ended a six-week CI red streak.

中文摘要

v0.3.3 是 0.3 编辑器代际的质量收口版本：改稿模式的 diff 锚点体系重建（词级精确采纳、 批量批准保序、丢弃恢复段落分隔、裁决前冲刷防陈旧坐标）；图片/外链/反链在全部视图与会话 组合下端到端可用（含 DOCX 资产零拷贝与 ≥10 图另存损坏修复）；设置页编辑器/自动保存六控件 真正接线生效；更新检查修复并首次可经 releases/latest 解析；跨平台地基补齐（macOS 文件打开 链、Linux 打开方式注册、引擎基线声明、掉电耐久）；另有时区统一、文件名消毒、IME 守卫、 索引错误出口、CSV BOM、语义化错误码等一批修复。本轮代码经两轮全面审计（77 项发现全部独立 复核）与全量 E2E 门禁验证。

Important — Unsigned Preview

The official Windows installer for v0.3.3 is published on GitHub Releases. Verify the SHA-256 before installing: fd2c8c85ea4a0d3c650de73bc8054bc2720bfb51460e4206e617a35898816ac9 Code signing follows the pipeline documented in CODE_SIGNING.md.

Linux x86_64 packages are unchanged in this round and remain available at v0.14.0-preview.

JotLuck v0.3.0-preview — Preview Release Notes

Date: 2026-10-07 The complete V0.2 editor generation. Version numbering now tracks the app generation (0.14.0 → 0.2.0 → 0.3.0), not the old preview counter. Windows x64 round; Linux packages are unchanged from v0.14.0-preview.

What's new in 0.3.0 — the editor generation

• Smart format continuation. Enter continues lists, ordered lists, tasks, quotes, and table rows with the correct marker — Chinese numbering included (一、（一）① up to 九十九), plus letters, roman numerals, and full-width ＃－ forms. Empty items exit cleanly with Enter / Backspace / Esc; every continuation is a single Ctrl+Z.
• Focused-line ghost syntax. Markers (**, #, | …) on the cursor's line stay visible but dimmed and fully editable, with precise click positioning; they fade back to clean rendering when the cursor leaves.
• Find & replace inside the editor. Ctrl+F opens a five-language search panel (regex / case / whole-word). Read-only notes stay searchable while editing stays blocked.
• Slash commands. Typing / on an empty line opens a ten-item block menu — headings, lists, task list, quote, code block, table template, divider — filterable in Chinese or ASCII (h1, table), keyboard and mouse driven, with full IME guards.
• Tables that behave like a spreadsheet. A floating toolbar appears when the cursor enters a table: insert/delete rows and columns, column alignment, delete table. Tab and Shift+Tab move between cells; Tab at the last cell appends a new row. Escaped pipes (\|) and full-width ｜ are preserved everywhere.
• Million-character notebooks stay fluid. 1M–3M character notes are editable the moment they open, render progressively while scrolling, and copy & print the complete text — never just the visible part.
• Navigate by structure. The outline follows the current chapter; the backlinks panel groups every reference and jumps to the exact spot in all three view modes, including deep jumps into unrendered regions of large documents.
• Open as read-only. Right-click a note in the drawer → “Open read-only”. A badge marks the state, find still works, editing is blocked, and one click exits.
• Touch editing on Windows. Precise tap positioning, swipe that only scrolls, native selection handles, and a finger-draggable split divider (30–70%).
• New official theme: Constellation — a frosted star-field deck.

Fixed since 0.14.0

• DOCX export no longer loses content: blockquote text, task items (now ☑ / ☐), and nested list items are preserved; tables and code fences inside quotes keep their structure.
• Wiki-links with aliases ([[note#section|alias]]) and Markdown anchor links no longer export as broken literal text.
• Ordered task items (1. [x] …) are recognized end-to-end; TXT export keeps [x] / [ ] markers.
• Parser quirks: # comments inside code fences no longer pollute the outline; wiki-links and tags inside fences stay out of the index; a#b is no longer misread as a tag; ~~~ fences and setext headings follow CommonMark.
• Cancelled touch gestures no longer toggle checkboxes by accident.
• Dependency security upgrades across the workspace.

Important — Unsigned Preview

The official Windows installer for v0.3.0-preview is published on GitHub Releases. Verify the SHA-256 before installing: 342df185d2024b3c5bdd119f382ce0cb19b880d8dabe3423bdcc67369251ba18 Code signing follows the pipeline documented in CODE_SIGNING.md.

Linux x86_64 packages are unchanged in this round and remain available at v0.14.0-preview.

JotLuck V0.15 Preview — macOS Apple Silicon

This is a Mac-only pre-release. Windows x64 and Linux x86_64 downloads remain at v0.14.0-preview.

What changed

• Opening an existing .md file on cold start creates only its read-only preview. Direct app-icon launches open the editor.
• Opt-in background update information cross-checks the official website manifest and the matching GitHub Release.
• A new first-screen welcome choice introduces automatic checks. Existing users see it once; previous preferences are preserved.
• No note content, paths or device identifiers are uploaded. Updates are not downloaded, installed or restarted automatically.

Mac package

• File: JotLuck_0.15.0-preview_aarch64.dmg
• Size: 41,897,879 bytes
• SHA-256: 66f17129390ce7ce398ca20a520e1c3d59a6ca110fed896e4f507e5ab04d6561
• Architecture: Apple Silicon / arm64. Intel Mac, Windows and Linux packages are not included in this release.
• Signing: complete ad-hoc signature; no Apple Developer identity and no notarization. macOS may require right-click → Open.
• Install: mount the DMG and drag JotLuck to Applications. Quit the old application before replacing it.

Verification

• Native Mac smoke: default-off welcome setting, immediate preference persistence, preference retention and Finder Markdown cold-start preview verified in an isolated application profile.
• Full app signature and disk-image checks passed. Update-service tests passed; existing unrelated repository-wide environment/path/i18n failures are not claimed as passing.
• Source commit: f0b354d3c5ed4706d2a83a8ce6c2ae44a6423527
• Website: https://jotluck.com/zh/download
• Website package mirror: https://jotluck.com/downloads/JotLuck_0.15.0-preview_aarch64.dmg
• Version manifest: https://jotluck.com/updates/v1.json

Windows x64 preview installer (unsigned). Verify SHA-256 before installing: d78a8a0e601154c3f9c79021ffe853c1f4925866fba2f4119cbf64adef08b8f4

This release jumps from v0.12.3-preview and covers everything shipped in 0.13.0 → 0.14.0.

macOS Apple Silicon preview (unsigned)

Host-verified on Mac mini M4 (macOS 26). Same preview version as Windows/Linux. Not a stable release. Ad-hoc signed (local build).

• Package: JotLuck_0.14.0_aarch64.dmg (41,242,396 bytes)
• SHA-256: fb10381d0c0e199921ba691a32db7e52910060cb59a2aab8a0735ad5fd10e1c6
• Install: drag JotLuck to Applications. First launch: right-click → Open (unsigned preview). Double-click .md/.txt opens in JotLuck after macOS picks it as an editor (Open With → JotLuck).
• Port highlights: double-click file opening, Chinese menu bar with standard edit services, window dwell on last close (Dock reopen), drag-drop image upload, user-log startup errors, NFC-normalized wiki links, ⌘ shortcut labels, platform-gated Windows-only UI.

Linux x86_64 preview (unsigned)

Host-checked on Linux Mint 22.1 (Surface Go). Same preview version as Windows. Not a stable release. Not code-signed.

• Package: JotLuck_0.14.0_amd64.deb (39,678,902 bytes)
• SHA-256: 3d5f7b709c0eaf9fea2877593696c30cbc15f0a640733d208a040d8fc3a3ed77
• Needs: libwebkit2gtk-4.1-0, libgtk-3-0, libayatana-appindicator3-1 (Debian / Ubuntu 24.04 family, Linux Mint 22.1)
• Install: sudo dpkg -i JotLuck_0.14.0_amd64.deb
• AppImage is not included in this preview.
• WebKitGTK 2.42+ may hang on window map unless WEBKIT_DISABLE_DMABUF_RENDERER=1 (the Linux binary sets this when unset).
• Optional MIME types are registered for .md / .markdown / .mdx / .txt / .docx / .pdf / .xlsx / .xls. The installer does not run xdg-mime default.
• The Windows NSIS installer is still the 47bf93a GitHub Actions candidate. The Linux .deb was built and verified on Surface; it is not the same CI artifact.

Linux 预览版说明（未签名）

在 Linux Mint 22.1（Surface Go）上完成构建与窗口启动核验。版本与 Windows 预览相同，不是稳定版，也未代码签名。

• 安装包：JotLuck_0.14.0_amd64.deb
• SHA-256：3d5f7b709c0eaf9fea2877593696c30cbc15f0a640733d208a040d8fc3a3ed77
• 依赖 WebKitGTK 4.1 / GTK 3；适用 Debian / Ubuntu 24.04 同族与 Linux Mint 22.1
• 安装：sudo dpkg -i JotLuck_0.14.0_amd64.deb
• 本预览不含 AppImage
• 部分显卡/会话下需禁用 WebKitGTK DMABUF；Linux 二进制在环境变量未设置时会自行注入
• 文件关联仅为可选「打开方式」，不会改写系统默认应用
• Windows 安装包仍对应 commit 47bf93a；Linux 包为 Surface 本机构建核验产物

What's new in 0.14.0

• Personalized completion. The local V2.5 completion engine now blends your own retained phrasing into decoding: completions you kept before (and your personal n-gram history) bias the model's beam search toward your habitual wording. It runs entirely on your machine — nothing leaves the process, sensitive content is filtered before use, and a settings toggle (on by default, five languages) turns it off. Quality stays gated: suggestions the model does not actually support remain hidden behind the existing visibility gates.

What's new in 0.13.1

• The completion engine loader no longer fails silently or permanently. A failed first load used to disable the V2.5 engine for the whole session with no signal. Loading now retries automatically with bounded backoff and logs every failure path.
• Settings shows live completion-engine health — status, last error, generated requests/candidates, and visible inference p90, with a manual retry action.

What's new in 0.13.0

• V2.5 completion engine integrated. A bilingual (Chinese/English) one-unit writing model runs locally from the installer's bundled assets and silently falls back to the built-in completion when assets are missing.

Code signing is still in progress; this preview is unsigned. Full notes: RELEASE_NOTES.md.

Windows x64 preview installer (unsigned). Verify SHA-256 before installing: 17681727cdefb993a8c5604907cff25cbaba50b72363ebbec247328d50873a37

What's new in 0.12.3

• Failed link opens are no longer silent. When the system browser cannot be opened from a note, JotLuck logs the failure and shows a localized notice instead of doing nothing. The update-notification link and share-via-email use the same system opener; the shell-open allowlist is narrowed to mailto:/tel:/https?: only.
• No more dead right-click menu. The WebView default context menu is suppressed outside editable surfaces; right-click copy/paste in inputs and the editor keeps working; custom menus such as the file-tree context menu are unchanged.
• Cold start is several times faster. Workspace module graph preloading, a single shared startup IPC, and off-first-frame search indexing bring the production build from 1–2s down to roughly 0.2s to the editable shell on the reference machine.

Code signing is still in progress; this preview is unsigned. Full notes: RELEASE_NOTES.md.

本次更新修复了桌面端 Markdown 网页链接无法打开系统浏览器的问题。

网页链接恢复系统浏览器跳转

• 只读模式、阅读模式和分栏预览中的网页链接会在 Windows 默认浏览器中打开。
• Live Preview 中的网页链接使用相同的系统跳转通道。
• 外部 Markdown 文件和 Office/PDF 语义预览窗口已获得同样的链接打开能力。
• Web 版保留新标签页行为，Wiki-link、标签和页内锚点行为不变。

安装信息

• 版本：v0.12.2-preview
• 平台：Windows x64
• 文件：JotLuck_0.12.2_x64-setup.exe
• 大小：6,170,645 bytes（约 5.88 MB）
• 源码 Commit：efb550cf90f0bf3d3a1c8ad771a64aeaf6795150
• SHA-256：efeba410d5747358a286468720f9c4fc448ac0c9286fdff1dcc0fa63a77c9494

代码签名正在处理中。本安装包尚未签名，Windows 可能显示 SmartScreen 提示；请先核对 SHA-256，再选择“更多信息 → 仍要运行”。

这是公开预览版，不是稳定版。重要笔记请继续使用你自己的备份或同步工具。

本次更新重点完善 Markdown 图片的隐私与安全边界：本地图片照常自动显示，远程图片则由你决定何时连接。

远程图片由你决定是否加载

• HTTPS 图片默认不会发起网络请求，而是在原位置显示加载控件。
• 点击后一次加载当前笔记中的远程图片；授权只保存在当前窗口内存，并按笔记隔离，刷新后自动清除。
• Live Preview、分栏、阅读模式和外部文件阅读均采用相同规则。

更严格的图片安全边界

• HTTP、包含用户名或密码的地址以及非法协议永久阻止。
• Markdown 图片与原始 HTML img 标签执行相同策略，并再次经过 DOMPurify 清洗。
• 伪造的远程图片控件不能触发请求。
• 单张图片加载失败或重试时只替换该图片，不会重新请求已加载的其他图片。

本地图片保持原有体验

笔记本内的本地图片仍会自动渲染，不需要额外确认。图片粘贴、拖放和 assets 相对路径工作流保持不变。

安装信息

• 版本：v0.12.1-preview
• 平台：Windows x64
• 文件：JotLuck_0.12.1_x64-setup.exe
• 大小：6,225,244 bytes（约 5.94 MB）
• 候选 Commit：5f397173c8fb7851c923efdc992f08c5a3bfaed6
• SHA-256：1cebc263801c22d40d7f8c4f9c2a5303d57a17ae8e9b754e8dd25f0dc6cddd28

代码签名正在处理中。Windows 可能显示 SmartScreen 提示，请先核对 SHA-256，再选择“更多信息 → 仍要运行”。

这是公开预览版本。建议重要笔记继续使用你自己的备份或同步工具。

这次更新解决了两个很直接的问题：第一次打开 JotLuck 时可以立即开始写，笔记变多后也能在左侧找到每一条书签。

空启动也能先写起来

以前安装后直接打开、尚未选择工作区时，界面只会提示选择笔记本文件夹。现在，JotLuck 会先打开一组内置引导笔记，包括「快速入门」等内容，你可以直接阅读、编辑和熟悉操作。

这些引导笔记只存在于内存，不会自动写入磁盘。首次保存或按 Ctrl+S 时，JotLuck 会请你选择一个笔记本文件夹。

选好文件夹后，引导笔记会从左侧列表和编辑器中退出，只显示你自己的文件。如果修改过当前引导笔记，可以选择丢弃修改，或只把这一篇带入新文件夹保存。下次再次空启动时，仍会得到一套干净的引导笔记。

如果本机已经打开过真实笔记本，启动时仍会优先恢复原工作区，不会显示引导笔记。

左侧书签不再被截断

当笔记数量较多时，Paper、Halo Canvas 和 Lumen Field 的左侧书签列表过去可能被窗口裁掉，无法继续滚动查看后面的内容。

现在书签列表拥有独立滚动区域和细滚动条，长列表也能完整访问。在默认羽翼布局中，将鼠标移到彩色圆点上，或使用键盘将焦点移到圆点时，旁边会立即显示对应的笔记名称。

安装信息

• 版本：v0.12.0-preview
• 平台：Windows x64
• 文件：V12-preview_x64-setup.exe
• 大小：6,166,624 bytes（约 5.9 MB）
• 候选 Commit：094d99071d8a2daa74e75045644ef438ab18729a
• SHA-256：a13ee468e77c17f238d57fd17f9951cd51b95f0a1060ec020f4d3cb513a873be

当前安装包尚未签名，代码签名正在处理中。Windows 可能显示 SmartScreen 提示；请先核对 SHA-256，再选择「更多信息 → 仍要运行」。

这是公开预览版，不是稳定版本。建议重要笔记继续保留独立备份。

JotLuck v0.11.2 Preview is an unsigned public preview for Windows x64.

Fixes

• Keeps “Return to edit” visible in the sticky reading toolbar across all bundled themes and restores keyboard focus to the editor.
• Keeps the Lumen command deck inside the viewport when editing an external single Markdown file.
• Fixes Halo Canvas scrolling so its sticky reading controls are not clipped.

Download verification

• Candidate commit: 8f8c1150ac6db6c38230544acd7dfbaa054a44cb
• Installer: JotLuck_0.11.2-preview_x64-setup.exe
• SHA-256: 1df93e6426aa0b14d1dec3ddacc2c236880d26598d0d7a1c8968c378a75702c5
• Signature status: NotSigned

Windows SmartScreen may warn because this preview is not code-signed yet. Verify the SHA-256 before installation. The SignPath application is pending; see the code-signing policy and privacy policy.

JotLuck v0.11.0 Preview

预览版 / Preview release: 此 Windows x64 安装包尚未进行 Authenticode 代码签名，Windows SmartScreen 可能显示警告。它不是正式稳定版，请仅在了解风险后安装。

This Windows x64 installer is unsigned and may trigger a Windows SmartScreen warning. It is a preview build, not a production-stable release.

本版重点 / Highlights

• 只读导入并渐进预览 .docx、.pdf、.xlsx 和 .xls 文档。
• 可在检测到的专业软件中编辑原文件，或另存 Markdown 副本后在 JotLuck 中编辑。
• Windows 文件关联保持用户选择；安装程序不会强制替换现有默认应用。
• 文档预览采用 Markdown 语义映射，不承诺 Office/PDF 像素级版式复刻；PDF 不包含 OCR。

安装包 / Artifact

• Platform: Windows x64 (NSIS)
• Source commit: 56791be360568122b7e53e85389ed7467a669867
• SHA-256: f3655ed116839c8230b5191419cc40cdcd5a69a1a6cebe03425bd2b16efccdd5
• Signature: Unsigned / 未签名

安装前请核对 SHA-256。Please verify the SHA-256 before installing.

代码签名政策 / Code Signing Policy

• CODE_SIGNING.md
• 代码签名正在处理中，本安装包未签名。 / Code signing is in progress — this installer is unsigned.