PageWright / Changelog

Changelog

Every feature, fix, and improvement — from the first release to the latest build.

v4.1.12October 2026Latest

Security

  • File transfers check the certificate too — Over FTPS, folder listings and file contents travel on connections of their own. Each must now show the same certificate as the connection you logged in on (or one a recognized authority issued for your server); otherwise PageWright stops the transfer before any file data moves and says why. Version 4.1.11 checked only the login.
  • A one-time tip to switch to FTPS — Plain FTP sends your password and files unencrypted. When a site saved as plain FTP is on a server that also offers FTPS, PageWright suggests switching when you open the site, once per site. Switch to FTPS logs in with FTPS and lists your folder first, using your saved password, and leaves the site on plain FTP if that doesn’t work.
  • Markdown preview — A crafted Markdown file could run script in the preview, where it could reach PageWright’s own controls. Links and pictures in Markdown are now built safely, and an & in a link is no longer doubled.
  • Line breaks in file names — An FTP server reads a line break as the start of a new command, so a name containing one could make it run a command nobody chose. Such names are now refused everywhere, including PageWright’s tools for Claude Code.
  • Clearer certificate warning — The “Server certificate changed” warning says whether a recognized authority vouched for the new certificate, and certificate names can’t use invisible characters to imitate another name.
  • Passwords starting with “enc:” — are now encrypted like any other password (they were saved as typed).

Protecting your work

  • Image Save As asks first — Saving an edited picture under the name of one that already exists asks before replacing it, and the replaced picture is backed up (saving over the original keeps a backup too). “Update references” changes only links to that exact file.
  • Generate Sitemap asks first — An existing sitemap.xml is no longer replaced without asking, and the old one is backed up.
  • Uploads keep a backup — Files dropped onto a folder that replace files already there (also when only upper/lower case differs) are backed up first. Restore no longer replaces a file when the backup of its current version fails.
  • Names that differ only in case — Templates and files the AI creates ask before replacing About.html with about.html, and moving a file between folders such as Images and images asks before replacing a file there.
  • Security “Apply Fix” — Applying a second fix no longer undoes the first one or what you typed since; a fix made from older text is refused, and the other Fix buttons keep working.
  • Backups made by Claude Code — Backups of files written through PageWright’s tools for Claude Code restore to the right place.

Fixes

  • Preview — Pictures with a ?v= cache-buster show again; a PHP block left open at the end of a page no longer shows as text; Flip after a rotation flips the right way; the responsive preview survives a window resize.
  • Dialogs opened from the F1 palette get the keyboard — Escape closes them, and pasting goes into the dialog instead of the page behind it.
  • AI features with the newest Claude models — Security Scan, Security Fix and AI Digest read Claude’s whole answer (they read only its first part, which is empty when Claude thinks first), and long answers aren’t cut off.
  • Switching sites during a scan — Check Links and the SEO/GEO scans no longer show one site’s results under another.
  • Big pages — The Validate panel no longer takes seconds on large files, and Publish works out what changed quickly on sites with tens of thousands of files.
  • Tabs and folders — Picture tabs and Site View count as the current tab (status bar, Close Tab, Undo); a deleted, renamed or moved folder is forgotten instead of showing its old files; a recent file that can’t be opened shows the site instead of an empty area; long site names fit the toolbar.
  • Editor — Emmet nests ul>li*3>a correctly; CSS suggestions stop after an uppercase </STYLE>; spelling suggestions belong to the file they were found in; shortcuts on + or Space work; pasting a picture into Chat works the first time.
  • llms.txt — With a relative Starting Directory (such as public_html), the existing file is found and updated.
  • Opening files from Explorer — A file at the top of a drive opens, and a folder saved with different capitals or a trailing slash isn’t added to Your Sites twice.
  • Claude Code tools — pw_upload_file no longer replaces an existing file unless asked (and then keeps a backup), pw_search results are capped, and the tools can’t mistake another program on PageWright’s port for PageWright.
  • Sharper theme pictures — Woodgrain, Coral Reef and Ocean Waves stay sharp on scaled screens, their ends join, and the status-bar text stays readable.
  • PageWright’s own pictures stay put — The toolbar logo can no longer be dragged onto your site by accident.

SEO/GEO audits

  • Fewer false alarms — Markup inside attribute values and tracking pixels in <noscript> no longer count; real titles that start with “Home” or “Page” aren’t called generic; wrapped titles and descriptions are read as one line.
  • More of your site is audited — .shtml pages are audited; FrontPage and Expression Web _vti_ folders are skipped (and no longer published); links written as full URLs to your own site count; noindex and error pages are left out of llms.txt and the orphan check.
v4.1.11October 2026Minor

Security

  • PageWright remembers each server’s certificate — The first time you connect to a site over FTPS, PageWright remembers the server’s security certificate (for SFTP, the server’s host key) and checks it on every later connection, before your password is sent. Routine renewals PageWright can check (newer, and signed by a recognized certificate authority for the same server name) are accepted without asking. Any other change stops PageWright before your password is sent and shows the old and new fingerprints: trust the new one if you expected it, or cancel if you didn’t. Publish checks it too, and a change that turns up while you’re working asks right there, without closing your files. This works with the self-signed and expired certificates many shared hosts use, which PageWright still accepts the first time.

Fixes

  • FTPS keeps port 21 — Choosing FTPS in the site settings or the Publish dialog no longer changes the port to 990. Most hosts expect FTPS on port 21; 990 is an older variant some servers don’t offer. If your host does use 990, type it in and PageWright keeps it. Sites already saved with 990 keep working as before.
v4.1.10October 2026Minor

Fixes

  • Clicking in the command palette and Quick Open — Clicking a command in the F1 palette or a file in Quick Open (Ctrl+P) now runs it. The list used to redraw itself constantly under the mouse, so the click was lost, and the arrow keys jumped back to the item under the mouse.
  • Busy AI services are tried again — When Claude, OpenAI or Gemini answers that it is busy or that a rate limit was reached, PageWright tries twice more (waiting as long as the service asks, up to 10 seconds) before giving up. What still fails is explained in plain words with the service’s own message instead of a raw error code, and a chat error that mentions “JSON” is no longer hidden.
  • Long folder paths in Your Sites — A long folder path on the welcome screen is shortened with “…” (point at it to see all of it), so the × that removes a site stays in view.
  • Crash notice only after a real crash — “PageWright crashed during your last session” now appears only when PageWright or one of its pages actually crashed. Chromium, the browser engine inside PageWright, also saves reports when nothing crashed: notes about something unusual it noticed while carrying on, and crashes of its graphics or helper processes, which it restarts on its own while the window stays open. Those no longer bring up the notice.
v4.1.9October 2026Minor

Protecting your work

  • Undo works after big replacements — Restoring a backup, applying a template, letting the AI create a file or updating references is now its own undo step: Ctrl+Z no longer also removes what you typed just before, and files with Windows line endings no longer stay marked as modified.
  • No stale tabs — Moving or renaming a file onto one that is open closes the old tab, so saving it can’t overwrite the moved file; the replace question names files with unsaved changes.
  • Safer on Windows (IIS) servers — New File refuses a name that differs from an existing file only in upper/lower case (the server would have emptied that file), and the site’s top folder is protected however its name is typed.
  • Duplicate and Save All & Close — Duplicate stops if it can’t check the folder for a free name; if Save All & Close is still uploading after two minutes, PageWright offers to keep waiting instead of cutting a file off halfway.

Preview editing

  • Edits land on the right text in more pages — Text inside <template>, tables with stray elements, unusual comments, misnested tags and end tags left out (</li>, </p>, </td>) are handled — or the edit is refused with a message — instead of changing the wrong spot; PHP or ASP code inside a start tag no longer blocks typing on the whole page.
  • Entities stay intact — Typing next to &copy without a semicolon, a bare & or a half-written reference such as &#x no longer changes how the page reads, a < followed by text stays text, and paragraphs with &#128;–&#159; (old Windows codes for €, ’, —) can be edited.
  • Lazy-loaded and SVG images — Pictures in data-src, data-background and SVG xlink:href show in the preview again.

Editor & tools

  • Keyboard — Save All, Close Tab and Find in Site work while the Find box has focus; your custom shortcuts also work in the preview; a shortcut must use Ctrl, Alt or an F-key.
  • Tools from Site View — Check Links, Notes, Validate, Security and Chat open in view when the preview is off.
  • Find References — Links with ?query or #section are found and renamed with the file.
  • Check Links — Finds links it used to miss (after an attribute containing >, next to PHP code, or in markup that PHP prints), reports the link’s own line, and finds public_html inside your Starting Directory.

SEO/GEO audits

  • Reads pages like a browser — A <!-- inside a script, a <title> that mentions <script>, or <!--> no longer hides the rest of the page (false “missing title/description/H1”); attributes are read in order, so a value like title="href=x" isn’t taken for a link.
  • PHP and ASP sites — Titles, descriptions and other head tags printed by code aren’t judged or called duplicates, and head tags from an include file count for the page that includes it.
  • llms.txt and sitemap — List only pages inside the web root (public_html, httpdocs, wwwroot…), with URLs and titles escaped; orphan checks understand default.asp and ignore upper/lower case.
  • Knowledge base — A damaged or locked knowledge file is never overwritten, and a refused change is undone.

AI

  • OpenAI’s newer models — o-series and GPT-5 models chosen with OPENAI_MODEL or the aiModelOpenAI preference work; replies cut off at the length limit say so; Gemini replies are read in full and have room to think.
v4.1.8October 2026Minor

Protecting your work

  • Typing in the preview changes only what you type — Editing text in the preview used to rewrite the whole page from the browser’s copy of it, which could change unrelated lines (entities, attributes, script output). Now only the text you edit changes, in HTML, PHP and ASP pages, and Ctrl+Z undoes it. Line breaks, formatting and pasted markup go in the code pane.
  • No silent overwrites — New File no longer empties an existing file, and Rename and Move ask before replacing one (the replaced file is backed up first). The site’s top folder can no longer be deleted or renamed from the file tree.
  • Unsaved edits stay safe — Restoring a backup, applying a template or letting the AI create a file asks before replacing unsaved changes in an open tab, and can be undone. Save As leaves the original file as it was and keeps the page’s encoding; Duplicate copies images byte for byte.
  • Backups kept per file — The last 10 versions of every file are kept (up to 1,000 per site), so a site-wide Replace All can no longer push out your older backups.

AI

  • Google Gemini works again — Google retired the Gemini 2.0 Flash model PageWright used, so every AI feature failed with a Google key. PageWright now uses the latest Gemini Flash, and the Google and OpenAI models can be changed like the Anthropic one (GOOGLE_MODEL / OPENAI_MODEL).
  • AI chat — No longer stops working after 50 exchanges; Stop really stops; an edit applied to another tab can be undone in that tab.

Editor & tools

  • Dialogs open on top — Confirmations no longer appear hidden behind the Backups and AI Settings windows.
  • Keyboard — Tab in the Find box no longer edits your document; custom keyboard shortcuts work while you type in the editor, and a cleared shortcut stays off.
  • Local-folder Live Preview — Root-relative links and images (/images/logo.png) load from your site instead of from PageWright.
  • SEO/GEO audits — Read attribute values that contain apostrophes and unquoted attributes, ignore commented-out tags, understand JSON-LD @graph, start at your site’s Starting Directory, and audit PHP, classic ASP and ASP.NET pages built from a shared header and footer (llms.txt lists those pages, not the header file).
  • Images — Saved edits match the preview; Ctrl+S on an image tab saves your edits (an image you only looked at is left untouched); Save As writes the format of the name you type. The Photo Gallery template’s lightbox opens.

Security & robustness

  • Hardening — AI security “Scan All” results are sanitised; the local server checks the host name on every request, not only API calls.
  • Starts and closes cleanly — If PageWright can’t start, it says why instead of staying invisible in the background; closing during an upload asks first; uploaded files with accented characters keep their names. 87 fixes in total (bug sweep #28).
v4.1.7September 2026Minor

Local folders & saved sites

  • Link a local folder to a saved FTP/SFTP site — A Local Folder site can now publish to one of your saved sites with that site’s saved (encrypted) login: pick it under Publishes To in the site settings or under Destination in the Publish dialog. No more retyping the password on every publish, and Your Sites shows “↑ publishes to …”.
  • Your saved server is never overwritten by a local folder — Switching a saved FTP site’s Protocol to Local Folder now creates a separate “Name (local)” entry linked to it. Opening a local folder with the same name as a saved site no longer silently replaces that site’s settings, and PageWright asks before replacing any saved site.
  • Reconnecting uses your saved password — Clicking a saved site and choosing Save & Connect no longer makes you retype the password: leave it blank to use the saved one. PageWright asks again only if you change the server or username, or switch an encrypted site to plain FTP.

Publishing

  • Each destination is tracked separately — “Changed Only” to a second server no longer skips files that were only ever uploaded to the first; the first publish to a new destination uploads everything.
  • No crossed wires between folders — The Publish dialog no longer carries one folder’s server, directory and typed password into another folder’s publish.
v4.1.6September 2026Minor

Protecting your work

  • Backup Restore works again — Restoring a backup wrote to the wrong path, and could not restore at all on local-folder sites. Backups are now exact byte-for-byte copies of the file.
  • Legacy-encoded files stay intact — Pages saved in windows-1252 / ISO-8859-1 (common on older sites) no longer have accented characters replaced with “�” on save. The status bar shows the file’s encoding, and PageWright asks before a save would lose a character.
  • FTPS stays FTPS — Re-saving an FTPS site profile used to silently downgrade it to plain FTP. Port 990 now uses implicit TLS instead of hanging.
  • Tabs follow moved and renamed files — Moving or renaming a folder keeps open tabs pointed at the right file; opening a folder from Windows Explorer no longer carries the previous site’s unsaved tabs into the new folder.
  • No more surprise data loss — Cancelling a save-conflict dialog keeps your edits; the image editor no longer reports success on a failed save or writes PNG data into .gif/.svg files; unsaved image edits are protected when switching sites or closing.

Preview & tools

  • Inline scripts run in the preview again — The click-to-code marker was being injected into JavaScript comparisons, which broke scripts such as slideshows in the preview.
  • Local-folder Live Preview loads stylesheets and images — Relative assets were returning errors.
  • Editor polish — Emmet Tab no longer mangles markup after >; preview tabs wrap instead of disappearing on narrower windows; Escape closes dialogs while you are typing in a field; Enter on a dialog’s Cancel button no longer connects.
  • Accurate checkers — The link checker no longer reports directory links, anchors or encoded names as broken, scans up to 400 pages and says when it stopped short. The spell checker skips code, entities and URLs and no longer freezes on long pages. Replace All matches like Find (case-insensitive). Publish now uploads .htaccess and .well-known/ and handles a relative remote folder. The SEO audit’s false “Generic title” warning and entity-inflated title lengths are fixed.

Security & robustness

  • Tighter local API — Requests are accepted only from PageWright’s own origin (a page on another local dev server could previously upload files). AI security-scan results are sanitised before display. A corrupt sites.json can no longer wipe your saved sites — a copy is kept.
  • Clearer failures — Every server error is reported as a readable message; local sites rooted at a drive root work; FTP save-conflict detection works on servers without MLSD; an unreachable Starting Directory is an error instead of a silent fallback.
  • Configurable AI model — The Anthropic model is no longer a hard-coded snapshot (defaults to Claude Sonnet 5; set ANTHROPIC_MODEL or the aiModelAnthropic preference to change it). 118 fixes in total (bug sweep #27).
v4.1.5July 2026Minor

Security

  • Protected the local service from hostile web pages — A malicious website open in your browser can no longer read your site files or FTP/SFTP connection details through PageWright’s local API. Added Host-header validation (defeats DNS rebinding) and pinned the security-checked IP address when fetching URLs.
  • Safer link handling — PageWright now warns before opening internationalized “punycode” domains that can be used to imitate real websites.

Protecting your work

  • No more surprise data loss — Switching or reconnecting to a site now warns before discarding unsaved edits, and site-wide Replace All no longer overwrites unsaved changes in open tabs.
  • Safer file operations — Save As warns before overwriting an existing file, deleting a site’s root folder is blocked, and bulk move/delete failures are summarized in a single dialog instead of one per file.

Improvements & Fixes

  • Faster, more reliable SEO/GEO analysis — Six HTML extractors were rewritten to eliminate slowdowns on malformed pages.
  • MCP File Bridge — Site-wide search works again, and directory listings are now bounded.
  • Friendlier and clearer — Plain-English connection errors, a message when a folder can’t be opened, a confirmation before clearing AI chat history, and accessible labels on icon-only buttons.
v4.1.4June 2026

Bug Fixes

  • Local folder editing fixed — Opening, saving, renaming, or deleting a file in a Local-folder site failed with “Access denied: path outside root” on every platform. A path-handling regression treated each file’s virtual path (e.g. /index.php) as an absolute system path and resolved it outside the folder root. Local folder sites work correctly again; FTP/SFTP sites were never affected. (Bug sweep #24)
v4.1.3May 2026

Business & Legal

  • Published by FifthWhy, LLC — PageWright is now a product of FifthWhy, LLC, a Wisconsin limited liability company. Copyright notices, EULA, License files, Terms of Service, Privacy Policy, Refund Policy, and the in-app About dialog have been updated to reflect the new business entity. The PageWright product name remains unchanged.
v4.1.2March 2026

New Features

  • Per-Site Notes — New 📌 Notes preview tab for keeping reminders, to-do items, and working notes per site. Notes can be scoped to a specific file, folder, or site-wide. Features pinning, inline editing, Ctrl+Enter shortcut, and 📌 badges in the file tree. Accessible from Tools menu, Command Palette, or right-click → Add Note.
  • PHP/ASP Visual Edit Sync — Preview edits in PHP and ASP files now sync back to the code editor via targeted text replacement using MutationObserver. Previously, the preview was editable but changes were visual-only.

Bug Fixes

  • Bug Sweep #18 — 10 fixes across 3 files (5 MEDIUM, 5 LOW): CSS Inspector XSS fix, prototype pollution guards on GET prefs/secrets, JSON.stringify try/catch, duplicate modal prevention, empty APPLY block guard, backups null byte check, filename length validation, publish port validation, dialog control char sanitization.
v4.1.1March 2026

New Features

  • In-App SEO/GEO Panels — Combined 📊 SEO/GEO preview tab brings all SEO/GEO Engine features into the app: page audits, site-wide audits, GEO (AI discoverability) scans, consistency checks, llms.txt generator, knowledge base, and news — no MCP tools required.
  • AI Digest — One-click AI-curated summary of the latest SEO news. Sends RSS feeds to your configured AI provider (Anthropic, OpenAI, or Google), returns urgency-ranked actionable insights, and auto-saves the best items to your knowledge base.
  • SEO News Web Search — Built-in RSS aggregator fetches the latest SEO/GEO news from Google Search Central, web.dev, Moz, Search Engine Land, Ahrefs, and Search Engine Journal. Configurable interval or turn off entirely.
  • AI Fix Buttons — Every issue in SEO/GEO scan results has a “🤖 AI Fix” button that sends the issue to the AI Chat panel for context-aware code suggestions you can apply with one click.
  • Folder View SEO/GEO Access — New 📊 SEO/GEO button in the folder view toolbar lets you access site-wide SEO tools (Scan All, Consistency, llms.txt, Knowledge, News, AI Digest) without needing a file open first.

Improvements

  • llms.txt Subdirectory Support — Sites configured with a starting directory (e.g., /wwwroot/) now correctly detect, read, and save llms.txt inside that directory instead of the FTP root. Shows existing file content with edit/regenerate options.
  • Double-Click Consistency — File tree (explorer pane) now uses double-click to open files and folders, matching the folder view and split view behavior. Arrow icons still respond to single-click for expand/collapse.
  • SEO/GEO Navigation — Seamless navigation between SEO and GEO scans with cross-scan buttons. Back buttons clear all cached results to prevent navigation traps.
  • 11 New API Endpoints — Server-side SEO/GEO endpoints with internal crawling via makeInternalApi (no HTTP round-trips). ESM bridge connects CommonJS server to the SEO/GEO engine module.
  • Electron Security — sandbox: true in webPreferences, will-navigate blocks non-localhost navigation, execInRenderer helper for safe renderer communication, postMessage origin checks on all handlers.
  • 40 Security & Bug Fixes — Two sweeps: critical fix for broken RSS redirect path, postMessage origin bypass, URL sanitization double-decode hardening, KB dedup fix, XSS hardening, SSRF improvements, input validation, resource leak cleanup, and more.
v4.1.0March 2026

New Features

  • SEO/GEO Engine — 9 new MCP tools for comprehensive SEO auditing, AI discoverability (GEO) analysis, cross-page consistency checking, llms.txt generation, and a user-curated knowledge base that improves audits over time. The engine parses HTML for 20+ SEO signals and scores pages 0–100 with severity-ranked issues and suggested fixes.

Improvements

  • MCP Server v2.0 — Server upgraded from 11 File Bridge tools to 20 total tools (11 File Bridge + 9 SEO/GEO). New modular architecture with seo-geo-engine.mjs.
v4.0.0March 2026

New Features

  • MCP File Bridge — PageWright now includes an MCP (Model Context Protocol) server that lets Claude Code and other AI tools read, edit, and manage files on your FTP/SFTP/local sites. 11 tools for full site access through PageWright's existing infrastructure. Auto-discovers the running server port.
  • Conversation Persistence — AI chat history is saved per-site and restored across sessions.
  • Image Context for AI — Paste or attach images in the AI chat to get visual feedback on layouts.
  • Scan on Save — Automatically run security analysis after saving a file (toggleable).
  • Folder Security Scan — Scan all files in your site at once with an aggregate dashboard showing scores, severity counts, and per-file results.
  • Markdown Preview — .md files render in the preview pane with full formatting: headings, lists, tables, code blocks, images, and links.
  • Site Templates — Start new sites from 5 built-in templates: Blank HTML, Portfolio, Landing Page, Blog, and Documentation. Templates button in the toolbar.
  • Keyboard Shortcut Customization — Rebind all keyboard shortcuts from Help → Customize Shortcuts. Click-to-capture with conflict detection.

Improvements

  • Performance — Debounced tree sizing via requestAnimationFrame. LRU cache for file cache (capped at 100 entries).
  • 29 Security & Bug Fixes — SSRF DNS rebinding protection, javascript: URL blocking in markdown, chat state cleanup on site switch, upload path traversal prevention, prototype pollution hardening, and more.
v3.4.0March 2026

New Features

  • Image Editor — Full-featured image editing right inside PageWright. Crop, resize, rotate, and flip images. Adjust brightness, contrast, and saturation with real-time sliders. Color-to-transparent tool for removing backgrounds. Save or Save As with automatic <img> reference updates across your site. Opens full-pane with its own tab, unsaved-changes indicator, and tooltips on every control.

Improvements

  • Preview Pane Freshness — Switching file tabs now refreshes whichever preview sub-tab is active (Validate, Colors, Links, Refs, Security), not just the preview iframe. No more stale content from previously viewed files.
v3.3.0March 2026

New Features

  • W3C HTML Validation — Click "🌐 W3C Check" in the Validate tab to check your HTML against official W3C web standards. Returns errors and warnings with clickable line numbers. Runs alongside the existing built-in validation.

Improvements

  • Homepage W3C Compliance — Fixed heading hierarchy, Content Security Policy, and semantic HTML on the pagewright.net homepage to pass W3C validation with zero errors.
  • Context Menu Overflow Fix — Right-click menus on files near the bottom of the file tree now shift up to stay within the window.
  • Preview Back Button — Moved next to the Live tab with "◀ Back" label and "Back to live preview" tooltip for better discoverability.
v3.2.1March 2026

New Features

  • Color Themes — 8 accent color presets accessible from View > Color Theme. Choose from Default Blue, Emerald, Amber, Rose, Violet, Teal, Rust, or Ice. Your choice is saved and restored on next launch.
  • In-App Update Checker — Help > Check for Updates now checks for new versions without opening a browser. Shows version comparison, release date, and release notes in a native dialog.
  • Preview Back Button — New ◀ button in the preview tab bar. Click it to return to your file's preview after navigating away by clicking a link.
  • Copy URL / Copy Path — Right-click any file in the tree or folder view to copy its live URL or full file path to the clipboard.
  • Toast Notifications — Non-intrusive floating notifications for clipboard operations and other actions.

Bug Fixes

  • Fixed broken link checker false positives when files live under a subdirectory like /wwwroot/.
  • Search result clicks now navigate to the specific line number and highlight it.
  • Copy URL now strips the web root prefix (e.g., /wwwroot/) so URLs work correctly in a browser.
v3.2.0March 2026

New Features

  • AI Chat Panel — New "💬 Chat" tab in the preview pane. Describe what you want in plain English and the AI modifies your code. Streaming responses show the AI typing in real time. Conversation history is maintained within each session. Code blocks get a one-click "Apply to File" button with full Ctrl+Z undo support.
  • Context-Aware AI — The chat sends your current file content and filename to the AI so it understands what you're working with. Smart truncation keeps requests within token limits.
  • Streaming Responses — AI responses stream in real time for Anthropic and OpenAI providers. Google Gemini uses chunked delivery for a similar experience.
v3.1.0March 2026

New Features

  • Multi-Provider AI Support — Security scanner now works with Anthropic (Claude), OpenAI (GPT-4o), and Google (Gemini). Add keys for any or all providers and switch between them.
  • AI-Suggested Security Fixes — Each vulnerability card now has a "🔧 Fix" button. Click it to get an AI-suggested patch. Preview the diff in Monaco's side-by-side editor, then apply with one click.
  • Redesigned AI Settings Modal — Shows all three providers with individual key fields, masked display, save/remove buttons, and a "Use This" button to switch providers.

Bug Fixes

  • Fixed diff overlay not closing when opened from security fix preview.
v3.0.0March 2026Major

New Features

  • AI Security Scanner — New "Security" tab in the right panel. Analyze the current file for vulnerabilities using AI. Returns a score (0–100), plain-English summary, and findings with severity, CWE references, and line locations. Click any vulnerability to jump to that line.
  • Encrypted API Key Storage — API keys encrypted with AES-256-GCM and stored in secrets.json, using the same encryption infrastructure as FTP passwords.
  • API Key Settings Modal — Configure your API key via the gear button. Masked display, add/replace/remove at any time.
v2.4.0March 2026Major

New Features

  • Local Folder Editing — Open and edit local website folders without FTP. Native folder picker or "Local Folder" protocol in the Connect dialog.
  • Publish to Server — Upload local sites to a remote FTP/SFTP server. Incremental mode uploads only changed files.
  • Preview Click-to-Code — Click any element in the Preview pane to jump to its matching line in the editor. Works for HTML, PHP, and ASP files.
  • Recent Files on Welcome Screen — Last 8 opened files with file type icons, site name, and time ago.
  • ASP File Support — Full preview, click-to-code sync, hover outlines, validation, and file tree icon for Classic ASP files.
  • Refs Panel — Parses the active file for all src, href, url(), and @import references. Edit paths inline.
  • Emmet Expansion — Press Tab to expand abbreviations like div.container, ul>li*5, ! for HTML5 boilerplate.
  • HTML/CSS Snippets — Autocomplete for common patterns: html5, nav, flex-center, grid-cols, etc.
  • Path Autocomplete — Inside src="" and href="", suggests files from the current site.
  • Linked Tag Editing — Rename an opening HTML tag and the closing tag updates automatically.
  • Color Decorators — Inline color swatches next to hex/rgb/hsl values in CSS.
  • Auto-close HTML Tags — Type <div> and </div> is inserted automatically.
  • Windows File Associations — Double-click .html, .php, .asp, or .css files in Explorer to open in PageWright.

Bug Fixes

  • Fixed live preview switching when changing tabs.
  • Fixed live preview server crash from double-sent response headers.
  • Fixed Rename and Connect dialogs — text inputs now receive keyboard focus properly.
  • Fixed path traversal security vulnerability in local folder mode.
  • Fixed Emmet expanding plain words as HTML tags — now only expands known tags.
  • Fixed publish failing for files in subdirectories — remote directories created automatically.
  • Single-instance lock prevents duplicate windows when opening files from Explorer.
  • App warns about unsaved changes when closing via the window X button.

UI Improvements

  • Visual Edit Always On — Preview pane text is always editable for HTML files.
  • Delete Site Profiles — Remove saved sites via x button on welcome screen.
  • Starting Directory — Set a virtual root; file tree and navigation respect the boundary.
  • Scrollable Tab Bar — Arrow buttons and mouse wheel when tabs overflow.
  • Save All (Ctrl+Shift+S) and Close All commands.
  • Close Tab (Ctrl+W) shortcut added.
v2.3.0March 2026

New Features

  • SFTP Support — Connect to modern hosts, VPS, and cloud servers via SSH (port 22).
  • Offline Monaco Editor — Full editor works without an internet connection. Assets bundled locally.
  • Encrypted Credentials — Passwords secured with AES-256-GCM. Existing passwords auto-upgrade.
  • Multi-Instance Support — Open multiple windows, each on its own port (3000–3019).
  • Image Preview Proxy — Images render even when servers block embedding.
  • Desktop Installer — Windows NSIS installer with Start Menu and Desktop shortcuts.
  • Welcome Guide — First-run overlay with quick start instructions and keyboard shortcuts.
v2.2.0February 2026

New Features

  • Link Checker — Scans your entire site for broken links, missing images, and redirect chains.
  • Find and Replace — Search across all files with regex support. Replace globally.
  • Color Picker — Extracts CSS colors from the current file for quick reference.
  • HTML/CSS Validation — Inline error and warning display with one-click navigation.
  • Folder View — Dual-pane sortable file listing with columns for name, size, date, and type.
  • Drag and Drop — Upload files by dragging them into the file tree or folder view.
  • Backup and Restore — Browse and restore previous versions of any saved file.
v2.1.0January 2026

New Features

  • Live Preview — Side-by-side preview that updates as you type or fetches the rendered page from your server.
  • Split Pane Editor — Editor and preview side by side with adjustable divider.
  • FTPS Support — Secure FTP over SSL/TLS connections (port 990).
  • Multiple Site Profiles — Save and switch between multiple server configurations.
v2.0.0December 2025Major

New Features

  • Monaco Editor — Replaced basic textarea with the VS Code editor engine. Syntax highlighting for 50+ languages, minimap, code folding, multi-cursor editing.
  • File Tree — Visual file browser with expand/collapse directories, file icons, and context menus.
  • Visual Editing Mode — WYSIWYG editing for HTML files with bold, italic, links, and formatting.
v1.0.0November 2025Initial Release

Features

  • Initial release. Basic FTP file editor with syntax highlighting and file management.