0.1.4

chore: v0.1.4 — parser v4.4.2 (real camp-stack totals)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

0.1.3

chore: v0.1.3

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

0.1.2

v0.1.2

chore: v0.1.2 — actually ship parser v4.4.0 (v0.1.1 was tagged before…

0.1.1

v0.1.1

chore: v0.1.1

0.1.0

fix: close 7 adversarial-review findings

- Retry queue for failed uploads (high): a transient network error no longer
  loses the match forever — failed uploads persist to userData/pending and
  replay on startup and right after a successful Steam link. The watcher never
  re-emits a processed .dem, so without this the loss was silent.
- Token-fixation guard on the Steam device-link (high): the loopback callback
  now requires a per-attempt random state nonce (timing-safe compare); forged
  no-cors GETs from a hostile page get 403 and the window stays open for the
  real callback. Companion side of the web's state pass-through.
- Honest backfill summary (high): processReplay returns its outcome and only
  'uploaded' counts as success — «Готово N/N» can no longer mask total failure.
- Concurrent backfill guard (medium): main-process in-flight flag + renderer
  busy flag (refresh() during a run kept re-enabling the button).
- mac auto-update (medium): zip target added — electron-updater cannot apply
  updates from a dmg-only release (ERR_UPDATER_ZIP_FILE_NOT_FOUND).
- setMsg stale-timer wipe + missing catch on the backfill invoke (low).

Deferred consciously: code-signing (needs Apple/Authenticode certs),
safeStorage for the token at rest (low; standard desktop practice).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>