13 Commits

Include renames

Author	SHA1	Message	Date
rogee	0d29b828bb	feat: harden control-plane deployment	2026-09-12 11:09:42 +08:00
rogee	13c31fc902	feat: add remote control plane and whitelist reads	2026-09-12 09:46:05 +08:00
rogee	c5314350bf	feat: add tray app and Setup.exe installer	2026-09-08 07:50:04 +08:00
rogee	49faf16b83	feat: improve web console and Windows startup	2026-09-08 03:23:28 +08:00
rogee	30df7ae433	feat: expand merged chat records directly from read-only databases ... Add db merged with exact account/chat/local-ID selection and shard ambiguity checks. Preserve Int64 composite message types and parse bounded, DTD-free embedded record XML, including duplicate messages and source metadata. Revalidate cached keys against current page-1 HMAC; replace the SQL write probe with sqlite3_db_readonly. Core tests: 129 passed. Windows Session 0 database validation: 5/5; all 16 text/sender/source-ID/timestamp entries matched independent XML parsing. Read-only UI baseline: 3/3; zero sends.	2026-09-06 20:10:04 +08:00
rogee	e5548bd471	feat: add bounded session and history navigation ... Add session scrolling, latest-message navigation and fingerprint location under the shared UI gate; reuse navigation in history reads and provide read-only smoke. Navigation index snapshot passed 124 tests and a full build. Windows 4.1.13.63 read-only validation passed 10/10, including two-scroll history location; no sends. Record scope limits, including next-unread navigation not yet implemented.	2026-09-06 20:09:00 +08:00
rogee	c49f6a10b2	feat: generalize session sending with multiline text and structured mentions ... Add named-session file/image/reply sending, preserve multiline text, and share safe member/all mention handling. Protect existing drafts, bind popup selection to the current window, validate structured mention tokens, and require fresh matching visible messages without automatic resend. Core tests: 121 passed. Windows 4.1.13.63 final validation: 9/9 passed. Record explicit coverage limits and sanitized evidence.	2026-09-06 17:10:53 +08:00
rogee	ad22a89185	feat: send text to named sessions with draft protection and listener isolation ... - chat send and listener-smoke accept --session; defaults remain File Transfer Assistant. - Reject existing drafts, reacquire the send control after input changes, and require a fresh message fingerprint for confirmation without retrying failed sends. - Test-NamedTextSend sends the same text twice and verifies distinct confirmed fingerprints; Test-NamedListeners -SendMarkers verifies per-window own events exactly once with zero cross-session events. Note export now requires a unique fresh owned note window and keeps repeated paragraphs. 97 Core tests pass; real-machine validated.	2026-09-06 14:35:55 +08:00
rogee	1494094651	fix: reject UI operations when the input desktop is unavailable	2026-09-06 02:14:16 +08:00
rogee	c35a4a1051	fix: expand local session results and reject unsafe search targets	2026-09-06 01:24:50 +08:00
rogee	93f4583737	feat: listen to named conversations in dedicated chat windows	2026-09-06 00:03:32 +08:00
rogee	786932e892	fix: serialize desktop commands across CLI processes	2026-09-05 23:24:56 +08:00
rogee	1e8e894dba	fix: restore existing WeChat instance and add M6 validation tools	2026-09-05 22:49:18 +08:00