NETWATCH v0.3.0-alpha.1 — IPv6 NDP, WSD Discovery & Arabic Localization

NETWATCH v0.3.0-alpha.1 — IPv6 NDP, WSD Discovery & Arabic Localization

"Know Every Device on Your LAN. Without the Cloud Watching."
"اعرف كل جهاز على شبكتك المحلية. دون رقابة سحابية."

NETWATCH v0.3.0-alpha.1 introduces native IPv6 Neighbor Discovery (NDP), zero-privilege WS-Discovery (UDP:3702), actionable Device Quick Actions (Web UI, SSH, RDP), Public Network Firewall Safeguards, and a complete Air-Gapped Arabic Localization & RTL Overhaul with native desktop typography.

---

🌟 Key Capabilities & Highlights

1. 🌐 Full Arabic (RTL) Localization & Typography Engine

• Zero-Egress i18n: Air-gapped translation dictionary covering 100% of user interface strings (English / العربية).
• High-Performance Arabic Typography: Bundled @fontsource/cairo and @fontsource/alexandria with tailored font fallbacks, eliminating browser rendering degradation.
• Strict Bidirectional Isolation: Technical networking strings (IPv4, IPv6, MAC, subnets, ping metrics) are strictly isolated with dir="ltr" to prevent reversed formatting.
• TopBar & Sidebar Ergonomics: Fixed RTL dropdown alignment, re-ordered navigation components, and added desktop sidebar collapse/expand toggle (Ctrl+B / button) with persistent state.

2. 🔍 Unprivileged IPv6 Neighbor Discovery (NDP)

• Zero-Elevation IPv6 Discovery: Integrated Windows native GetIpNetTable2 from iphlpapi.dll with fallback to GetIpNetTable, reading IPv6 neighbor cache without administrator rights.
• Cross-Platform Parity: Linux neighbor ingestion via ip -6 neigh show.
• Database Schema Migration v5: Added persistent ipv6 column tracking dual-stack devices with drift history and 1-click address copy.

3. 📡 WS-Discovery Protocol (UDP:3702) & Multi-Cast Probing

• Hardware & Appliance Visibility: Discovers Windows Workstations, Network Printers, and ONVIF IP Cameras over unprivileged multicast SOAP.
• Hardened XML Parser: XXE-immune, memory-capped parser validated by native Go fuzz testing with over 600,000 malformed inputs.
• Zero-Fetch Invariant: Enforces strict air-gap rules—remote URLs inside XML envelopes are never fetched.

4. ⚡ Device Quick Actions & Host Bridge

• Instant Connectivity: Launch device Web UI directly in default browser via safe local host bridge (POST /v1/system/open).
• 1-Click Terminal Presets: Instant clipboard helpers for SSH (ssh <ip>) and Windows Remote Desktop (mstsc /v:<ip>).
• SSRF & Egress Protection: Host bridge strictly validated against IsAllowedUnicastTarget—arbitrary external URLs are permanently blocked.

5. 🛡️ Public Firewall Safeguard & Security Hardening

• Windows Firewall Detection: Active network category detection alerting users if connected to a Public profile where multicast probing is blocked by Windows Defender.
• Zero-Egress rDNS Hardening: Kernel-level check blocking reverse DNS queries to external resolvers.
• Security Advisory Patch: Upgraded github.com/labstack/echo/v4 to v4.15.3 resolving GHSA-vfp3-v2gw-7wfq.

---

📸 Screenshots & Visual Preview

Dashboard & Overview	Network Topology & Nodes	Settings & Engine State

---

📦 Assets & Cryptographic Verification

Asset	Platform / Type	Size	SHA-256 Checksum
netwatch-v0.3.0-alpha.1-windows-amd64.zip	Windows 64-bit Standalone (ZIP)	9.28 MB	3C099BF296D1FF85D8E735E13E004873E4D4AE989FDDE092254588D56E46736E
netwatch.exe	Windows 64-bit Direct Executable	21.17 MB	BD6930F1D41AB29ABF4259CE20A7F1608494A017F313DA4C1F18BC7F461C740E
SHA256SUMS.txt	Checksum Verification Manifest	194 B	Included in release

---

🔒 Verification & Compliance

• Go Test Suite: go test -race ./... passed with 0 data races.
• Frontend Typecheck & Production Build: tsc --noEmit && vite build 100% clean.
• Zero-Egress Invariant Gate: 100% PASS via AST scanner.
• Multi-OS GitHub Actions CI: All Ubuntu & Windows build matrices are 100% GREEN.

Full Changelog: v0.2.0-alpha.1...v0.3.0-alpha.1