DropSpace v0.3.0-preview.6
Pre-releaseDropSpace v0.3.0-preview.6
Preview.6 is the inseparable 3.0 feature Preview described by the full project plan. It keeps DropSpace Windows-first and local-first while adding explicit, bounded paths for previewing, acting on, handing off, and sharing selected content.
Highlights
- Quick Preview providers for images, PDFs, bounded text/code/JSON/Markdown, media metadata, URLs, and unknown fallback. Preview reads are cancellation-aware, pixel/byte bounded, revision-keyed, and cached only after successful validation.
- Quick Actions expose real source-safe operations: SHA-256, ZIP, QR, image resize/convert, and metadata-safe re-encoding. The More menu never advertises a command without an availability check.
- DropLink v1 provides Windows-to-Windows pairing with ECDH, SAS confirmation, certificate fingerprint pinning, DPAPI peer secrets, HMAC-authenticated HTTPS, 4 MiB chunks, explicit receive approval, staging, integrity verification, and reconnect/resume status.
- Cross-device clipboard reuses the existing event-driven watcher. Per-peer Off/Manual/automatic text+URL/automatic text+URL+image modes, a 10,000-entry/24-hour content-hash loop guard, and self-write suppression prevent stale overwrites and echo loops.
- Nearby browser Share uses a private IPv4 address, 192-bit token, ten-minute default TTL, receiver cap, range reads, no directory listing, and revoke/expiry behavior.
- Encrypted Internet Share encrypts the manifest and 5 MiB chunks on the client with AES-256-GCM/HKDF.
share-worker/contains the Cloudflare Worker/R2 reference backend and WebCrypto receiver. - SQLite schema v2 persists paired-device and transfer-session metadata with forward migration and pre-migration backup.
Availability and security boundary
Device Handoff, cross-device clipboard, Nearby Share, and Internet Share are disabled until explicitly enabled. Internet Share is unavailable unless an operator has deployed the reference Worker and configured the HTTPS DROPSPACE_SHARE_BACKEND_URL; this Preview does not claim that a Cloudflare account or live backend is included. The browser key remains in the URL fragment and is not sent to the backend.
The protocol, threat model, action/preview contracts, and manual two-device acceptance matrix are documented under docs/. Native macOS/iOS/iPadOS/Android/Linux clients, accounts, WebRTC, AirDrop, Universal Clipboard, and cloud account sync remain out of scope.
Validation
The release workflow remains authoritative for .NET restore, Core/Infrastructure tests, WinUI build, portable EXE, installer lifecycle, MSIX, localization, smoke, SHA-256 metadata, GitHub Release assets, and website/API synchronization. The v0.3.0-preview.6 network matrix additionally requires two real Windows 11 devices and an explicitly configured Worker for end-to-end handoff/browser acceptance; source presence alone is not runtime evidence.
Stable-channel users will not receive this Preview. Select the Preview channel only to test experimental builds.