Skip to content

DropSpace v0.3.0-preview.6

Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 26 Aug 00:54
e22af93

DropSpace v0.3.0-preview.6

Preview.6 is the inseparable 3.0 feature Preview described by the full project plan. It keeps DropSpace Windows-first and local-first while adding explicit, bounded paths for previewing, acting on, handing off, and sharing selected content.

Highlights

  • Quick Preview providers for images, PDFs, bounded text/code/JSON/Markdown, media metadata, URLs, and unknown fallback. Preview reads are cancellation-aware, pixel/byte bounded, revision-keyed, and cached only after successful validation.
  • Quick Actions expose real source-safe operations: SHA-256, ZIP, QR, image resize/convert, and metadata-safe re-encoding. The More menu never advertises a command without an availability check.
  • DropLink v1 provides Windows-to-Windows pairing with ECDH, SAS confirmation, certificate fingerprint pinning, DPAPI peer secrets, HMAC-authenticated HTTPS, 4 MiB chunks, explicit receive approval, staging, integrity verification, and reconnect/resume status.
  • Cross-device clipboard reuses the existing event-driven watcher. Per-peer Off/Manual/automatic text+URL/automatic text+URL+image modes, a 10,000-entry/24-hour content-hash loop guard, and self-write suppression prevent stale overwrites and echo loops.
  • Nearby browser Share uses a private IPv4 address, 192-bit token, ten-minute default TTL, receiver cap, range reads, no directory listing, and revoke/expiry behavior.
  • Encrypted Internet Share encrypts the manifest and 5 MiB chunks on the client with AES-256-GCM/HKDF. share-worker/ contains the Cloudflare Worker/R2 reference backend and WebCrypto receiver.
  • SQLite schema v2 persists paired-device and transfer-session metadata with forward migration and pre-migration backup.

Availability and security boundary

Device Handoff, cross-device clipboard, Nearby Share, and Internet Share are disabled until explicitly enabled. Internet Share is unavailable unless an operator has deployed the reference Worker and configured the HTTPS DROPSPACE_SHARE_BACKEND_URL; this Preview does not claim that a Cloudflare account or live backend is included. The browser key remains in the URL fragment and is not sent to the backend.

The protocol, threat model, action/preview contracts, and manual two-device acceptance matrix are documented under docs/. Native macOS/iOS/iPadOS/Android/Linux clients, accounts, WebRTC, AirDrop, Universal Clipboard, and cloud account sync remain out of scope.

Validation

The release workflow remains authoritative for .NET restore, Core/Infrastructure tests, WinUI build, portable EXE, installer lifecycle, MSIX, localization, smoke, SHA-256 metadata, GitHub Release assets, and website/API synchronization. The v0.3.0-preview.6 network matrix additionally requires two real Windows 11 devices and an explicitly configured Worker for end-to-end handoff/browser acceptance; source presence alone is not runtime evidence.

Stable-channel users will not receive this Preview. Select the Preview channel only to test experimental builds.