chore(release): 0.4.6

Turns the 0.4.7-rc rehearsal line into the shippable 0.4.6. Four things merged
(feat/telemetry-message-count #343, fix/release-drop-white-screen #344,
feat/arabic-ui-rtl-213 #345, and the command-name validation hardening), the
version bumped 0.4.7-rc.2 -> 0.4.6 (package.json + lock; __APP_VERSION__ and the
model-catalog gating both follow pkg.version, and no model has a numeric version
gate so visibility is unchanged), and both note surfaces rewritten for the whole
0.4.5 -> 0.4.6 story:

  - build/release-notes.md (the update toast, baked into latest*.yml via
    releaseInfo.releaseNotesFile): 5 bullets, 267/280 chars, none clipped.
  - RELEASE.md (the GitHub release body): a new "What's new in 0.4.6" section,
    0.4.5 demoted to "Still new in 0.4.5", and the stale 0.4.4 drop deck replaced
    with a clean 0.4.6 drop that uses the framework's own styling and self-hosted
    fonts — no remote fetch, so the drop-loader/font fix in this release protects
    it.

The (v0.4.7) activation-funnel comments are corrected to (v0.4.6) since the
funnel ships in this release. Suite 745/745, both typechecks clean.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LDbmAwrgtGskFGCRkYZBx4

Author: chaitanyagiri

RELEASE.md

@@ -1,4 +1,5 @@
-- **The interface speaks Chinese.** Pick zh-CN in Settings.
-- **IME typing no longer sends early.** Enter picks your candidate.
+- **The interface speaks Chinese and Arabic.** Set it in Settings.
+- **Updates install themselves.** Download, restart, done.
 - **Fonts ship inside the app.** No Google Fonts fetch on launch.
+- **Hardened how engine commands launch.**
 - **Settings has one Save button.** Connections get their own tab.

build/release-notes.md

@@ -1,6 +1,6 @@
 {
   "name": "munder-difflin",
-  "version": "0.4.7-rc.2",
+  "version": "0.4.6",
   "private": true,
   "description": "Clones for you and your team, working 24/7 — a free, local-first multi-agent harness that turns the CLI coding agent you already run into a clone of you, coordinating an office of agents on your machine.",
   "main": "out/main/index.js",

package-lock.json

@@ -58,7 +58,7 @@ const EVENTS: Record<string, ReadonlySet<string>> = {
   update_applied: new Set<string>(['from_version', 'to_version', 'via']),
   /** An agent PTY spawned. `provider` is the CLI engine name only. */
   agent_spawned: new Set<string>(['provider']),
-  /** ── The activation funnel (v0.4.7): app_launched → onboarding_completed →
+  /** ── The activation funnel (v0.4.6): app_launched → onboarding_completed →
    *  agent_spawn_attempted → {agent_spawned | agent_spawn_failed |
    *  agent_install_started → agent_install_finished}. Every added property is a
    *  closed enum or a closed CLI name — nothing free-form, same allowlist rule. */
@@ -81,7 +81,7 @@ const EVENTS: Record<string, ReadonlySet<string>> = {
    *  `install_failed` (non-zero exit — e.g. an installer that cannot complete
    *  unattended). This is the signal that a first agent never actually started. */
   agent_install_finished: new Set<string>(['provider', 'rung', 'outcome']),
-  /** ── The end of the activation funnel (v0.4.7): a HUMAN sent a message to an
+  /** ── The end of the activation funnel (v0.4.6): a HUMAN sent a message to an
    *  agent. Counted at the SUBMIT boundary, never per keystroke — see
    *  MESSAGE_SURFACES for the four places a person can send one. Carries a COUNT
    *  and nothing else: no text, no length, no hash. `surface` is a closed enum. */

package.json

@@ -2553,7 +2553,7 @@ async function spawnAgentCore(opts: AgentSpawnOptions, owner: Electron.WebConten
   const claudeProvider = isClaudeProvider(provider);
   opts.provider = provider;
   if (opts.hive) opts.hive = { ...opts.hive, provider };
-  // Activation-funnel entry (v0.4.7): every spawn REQUEST, so (attempted − spawned)
+  // Activation-funnel entry (v0.4.6): every spawn REQUEST, so (attempted − spawned)
   // measures the fallout the whole rebuild exists to see. Gated on !noAutoInstall so
   // the missing-CLI relaunch (the only re-entry, index.ts install-exit handler) does
   // NOT double-count a single user attempt — it is the SAME attempt continuing.
@@ -3128,7 +3128,7 @@ ipcMain.handle('config:update', (_evt, patch: Partial<HarnessConfig>) => {
   const next = writeConfig(patch);
   // Live opt-in/out from Settings → Privacy (TELEMETRY.md).
   if (typeof patch?.telemetryEnabled === 'boolean') analytics.setEnabled(patch.telemetryEnabled);
-  // Activation funnel (v0.4.7): onboarding just finished (false → true) — the top of
+  // Activation funnel (v0.4.6): onboarding just finished (false → true) — the top of
   // the launch → first-agent funnel. `provider` is the engine chosen in the wizard.
   // Fired here (main), not in the renderer, so it rides the same allowlist as the rest.
   if (!wasOnboarded && next.onboardingComplete) {