Changelog & Release Notes

• Resizable Drawer Columns: Added draggable column dividers and persistent column widths to Transfers, Scheduled Jobs, SSH Tunnels, and Search. Made table rows single-line with ellipsis.
• Native "Download As": Replaced modal text prompt with native OS file/folder picker on Windows and Linux.
• Context Submenus: Grouped Download actions into ⬇️ Download ❯ (Download, Download As...) and Public URL actions into 🌐 Public URL ❯ (Copy Public URL, Visit URL).
• Auto Web-Root Detection: Automatically strips /public, /public_html, /htdocs, and /var/www/html from public URLs; removed the manual web-root input field.
• Collapsible Proxy Settings: Put Proxy/Bastion fields inside a collapsible dropdown in the profile editor.
• Keyboard Shortcuts: Documented Ctrl+L (Lock Workspace) and Ctrl+J / Ctrl+` (Toggle Drawer) in the app help dialog and online docs.
• OAuth Callback Pages: Updated Google Drive, OneDrive, and Dropbox OAuth pages to match current site header and footer.

New Features

• Profile Local Start Directory: Added an optional "Local Start Directory" configuration to connection profiles with a folder browser picker. When connecting to a profile, the local file browser automatically switches straight to that assigned directory.
• Line-by-Line File Discrepancy Viewer: Added an integrated text and code diff tool with LCS hunk pairing, real-time grep search filtering, and one-click report clipboard export.
• Workspace Quick Lock (Ctrl+L): Added a one-click toolbar lock button and global Ctrl+L / Cmd+L shortcut to immediately lock the workspace behind your Master Password, securing active servers, sessions, and directory trees when stepping away from your desk. Includes failed-attempt brute-force lockout protection.

Security Hardening

• Vault Token Encryption: Encrypted cloud OAuth refresh tokens (Dropbox, Google Drive, OneDrive), SSH private keys, passphrases, and AWS secret keys under AES-256-GCM when master password is enabled.
• Content Security Policy (CSP): Added strict renderer CSP (default-src 'self') blocking cross-origin script injection.
• Stored XSS Elimination: Universal HTML entity escaping across directory tables and profile labels.
• Safe External Editor Launching: Replaced raw shell open execution with validated executable paths (notepad.exe, open -t) and isolated arguments in the file watcher service.
• Window Navigation Lockdown: Added setWindowOpenHandler and will-navigate guards to block unexpected external navigation and popups.
• Profile Export Sanitization: Stripped secret keys and passwords when exporting profiles.

Bug Fixes & Stability

• SSH Host Key Timeout Race Condition: Increased readyTimeout to 75 seconds and added socket destruction guards across SFTPService, SSHTerminalService, and TunnelService to prevent disconnects while users review host key prompts.
• Remote-to-Remote Temp File Leak: Fixed scoping in transfer:remote-to-remote to ensure intermediate files and folders are cleaned up in finally blocks on completion, failure, or cancellation.
• Memory & DOM Throttling: Bounded remote SSH terminal scrollback buffer to 100,000 characters and capped log viewer DOM nodes to 1,000 entries to prevent memory leaks and UI freezing.
• Diff Memory Guard: Enforced a 15 MB pre-download check on remote files in discrepancy analysis to prevent out-of-memory errors.
• POSIX Path Normalization: Unified POSIX path resolution across all protocol adapters to eliminate directory traversal edge cases.

User Interface & Workstation

• Flat High-Contrast Design: Standardized application and website interfaces to clean, high-contrast borders, completely eliminating glowing drop-shadows and blur halos.
• Streamlined Navigation: Simplified desktop and mobile headers; centralized legal policies into the footer for cleaner workflow focus.
• Unified Dialog Layouts: Standardized agreement and confirmation modal dialog widths across the application and website to eliminate layout shifts.

Licensing & Agreement

• Freeware End-User License Agreement: Published formalized End-User License Agreement for personal and commercial internal use under the laws of the State of Tennessee.
• Explicit Disclaimers: Incorporated conspicuous T.C.A. § 47-2-316 "AS IS" and "WITH ALL FAULTS" warranty terms and a total liability limitation cap.
• Download Verification Flow: Added active terms agreement verification across all binary downloads.
• Setup Wizard Integration: Embedded the license agreement step directly inside the Windows installer wizard (DevsFTP Setup 2.0.0.exe).

Communication & Infrastructure

• Dedicated Contact Portal: Deployed a direct verified contact channel at /contact/ with anti-flood rate limits and persistent message queueing.
• Infrastructure Transparency: Published annual operational infrastructure targets covering hosting and mirror delivery with admin controls.
• Privacy Policy Alignment: Formalized compliance with the Tennessee Information Protection Act (TIPA) and reinforced zero-telemetry offline operation.

Transfer Engine & Connectivity

• Parallel Transfer Engine: Configurable concurrency (1 to 10 concurrent streams) in the Transfer Queue toolbar with dynamic worker pools.
• Direct Remote-to-Remote Transfers: Direct server-to-server data streaming (SFTP, FTP, WebDAV, Amazon S3) without staging files to local storage.
• Stream Cancellation: Reliable stream cancellation with instant unpiping, preventing socket errors and unexpected disconnects.
• Bandwidth Throttling: Configurable upload and download speed caps with live transfer graph analytics.

Productivity & Tools

• External Editor Watcher: Save-to-upload file watcher integrating with local IDEs (VS Code, Sublime Text, Notepad++) for automatic remote file synchronization.
• Visual Directory Compare: Side-by-side local vs. remote directory diffing with color-coded states and batch synchronization.
• Embedded SSH Terminal: Integrated terminal console directly within active SFTP sessions with configurable scrollback history.

Stability & Reliability

• Vault Fail-Closed Verification: Master password checks fail closed on IPC errors to maintain security integrity.
• Windows File Lock Recovery: Multi-step async retry handling on temporary file renames to avoid EBUSY locks.
• Tunnel Hardening: Added bounds checking and exception handling for SOCKS5 dynamic proxy forwarding.

Security & Local Storage

• Offline-First Architecture: Connection profiles, private keys, and session configs are stored purely locally with zero cloud telemetry.
• Vault Encryption: AES-256-GCM cipher encryption protecting credentials at rest.
• Key Derivation: Offline master key generation using PBKDF2 with 800,000 iterations.

Protocols & Workspace

• Multi-Protocol Connectivity: Transfer support for SFTP (SSH-2), FTP, FTPS (Explicit TLS 1.3), WebDAV, and Amazon S3.
• Workspace Identity Accents: Color-coded visual accents per profile to distinguish development, staging, and production environments.
• Dual-Pane File Manager: Side-by-side local and remote browsing designed for desktop development.