# Changelog

## alpha 0.6.0.1015

- Replace repository-local and hardcoded deployment values with independent,
  profile-based configuration packages.
- Add atomic config generation, activation, import, redacted/private export,
  schema validation, and migration of legacy environment/context material.
- Move private person aliases, bot identity, debug sessions, incident reports,
  telemetry exports, and root-operation archives outside Git with strict
  permissions.
- Remove fixed Steam rosters, aliases, display names, and SteamIDs from source.
- Make `/steam` discover the configured account's public friend list at runtime.
- Add `/steam时长 游戏名`, whitespace-free OCR forms, game-name fuzzy matching,
  bounded per-account playtime queries, privacy-state accounting, and caching.
- Add `/steam时长 游戏名、玩家名` with exact, unique partial, and fuzzy persona
  matching while limiting game-library requests to the selected account.
- Preserve optional group-person-to-SteamID mappings in private profiles,
  migrate legacy scoped rosters and aliases, and prefer that roster over public
  friend discovery.
- Preserve multiline local-command output so `/debug` remains readable.
- Remove the visible `好友` wording and add a dedicated Steam progress ACK.
- Rename built-in plugin ownership from a personal namespace to `jwebot`.
- Rename the SDK event field to the generic `mention_bot`.
- Add a privacy-safe tracked-file/Git-object scanner that never prints matched
  values.
- Add a six-stage new-host bootstrap, an eight-stage coordinated deployment
  progress display, runtime requirements, and zero-to-running documentation.
- Add public repository, configuration, SDK, contribution, security, and
  licensing documentation.
- Start the public history from a sanitized root after a verified private
  backup; pre-public operational history remains only in protected local
  archives.

## Pre-Public Milestones

Earlier alpha work established:

- adaptive OCR and XDamage capture;
- guarded GUI send with visual confirmation;
- durable ACK/final delivery ordering;
- privacy-safe latency telemetry;
- capability-limited SDK contracts;
- signed extension artifacts and isolated Host execution;
- reviewed command ownership and generated adapters;
- coordinated production backup, health gates, and rollback.

Private host, person, address, account, incident, and deployment details are
intentionally omitted from the public changelog.