release: public alpha 0.6.0 baseline

CHANGELOG.md

@@ -0,0 +1,49 @@
+# Changelog
+
+## alpha 0.6.0.1015
+
+- Replace repository-local and hardcoded deployment values with independent,
+  profile-based configuration packages.
+- Add atomic config generation, activation, import, redacted/private export,
+  schema validation, and migration of legacy environment/context material.
+- Move private person aliases, bot identity, debug sessions, incident reports,
+  telemetry exports, and root-operation archives outside Git with strict
+  permissions.
+- Remove fixed Steam rosters, aliases, display names, and SteamIDs from source.
+- Make `/steam` discover the configured account's public friend list at runtime.
+- Add `/steam时长 游戏名`, whitespace-free OCR forms, game-name fuzzy matching,
+  bounded per-account playtime queries, privacy-state accounting, and caching.
+- Add `/steam时长 游戏名、玩家名` with exact, unique partial, and fuzzy persona
+  matching while limiting game-library requests to the selected account.
+- Preserve optional group-person-to-SteamID mappings in private profiles,
+  migrate legacy scoped rosters and aliases, and prefer that roster over public
+  friend discovery.
+- Preserve multiline local-command output so `/debug` remains readable.
+- Remove the visible `好友` wording and add a dedicated Steam progress ACK.
+- Rename built-in plugin ownership from a personal namespace to `jwebot`.
+- Rename the SDK event field to the generic `mention_bot`.
+- Add a privacy-safe tracked-file/Git-object scanner that never prints matched
+  values.
+- Add a six-stage new-host bootstrap, an eight-stage coordinated deployment
+  progress display, runtime requirements, and zero-to-running documentation.
+- Add public repository, configuration, SDK, contribution, security, and
+  licensing documentation.
+- Start the public history from a sanitized root after a verified private
+  backup; pre-public operational history remains only in protected local
+  archives.
+
+## Pre-Public Milestones
+
+Earlier alpha work established:
+
+- adaptive OCR and XDamage capture;
+- guarded GUI send with visual confirmation;
+- durable ACK/final delivery ordering;
+- privacy-safe latency telemetry;
+- capability-limited SDK contracts;
+- signed extension artifacts and isolated Host execution;
+- reviewed command ownership and generated adapters;
+- coordinated production backup, health gates, and rollback.
+
+Private host, person, address, account, incident, and deployment details are
+intentionally omitted from the public changelog.