v0.4.3

KyDrive 0.4.3: everything since v0.4.2 (79 commits, about 26 PRs).

Upgrade: 0.4.3 migrates the SQLite schema at startup (5 migrations: client mtimes, the change log, devices and device codes, and app-password scopes). Back up before upgrading. See docs/DEPLOYMENT.md for upgrade notes, including Compose now defaulting to :stable.

Restore

• Offline restore-reset of access grants before restored data starts (#67). KyQuickStart requires it before restoring KyDrive.

Desktop access and sync groundwork

• Device credentials with loopback PKCE linking, and device management UI (#45, #47)
• Per-workspace change log and changes API (#43, #46), client mtime on versions (#44)
• DAV ETag reuse fix (#40)

Agents

• MCP endpoint with AI agent tokens, scoped read/write and limited to a folder root (#58)

Product

• Content search: find files by the words inside them, encrypted and permission-scoped (#61)
• UI pass and launch bug fixes (#54, #60, #63), setup gap fixes (#56)

Security and build

• Go 1.27.3 for GO-2026-6809, KaTeX 0.18, DOMPurify 3.4.17, Node 26.12.1 (#64, #66)
• Daily Dependabot releases as vX.Y.Z.N; Compose defaults to the published :stable image (#65)

Docs: #39, #41, #42, #48, #53, #55, #57, #59.