Trickle 0.1.16

Trickle 0.1.16 improves migration monitoring and closes two security gaps.

• Authenticate dedicated Trickle entry points before isolating ordinary plugins. Unrelated login and administration requests keep their plugins loaded.
• Reject staging and backup paths exposed beneath the public document root, including configured public symlinks.
• Add Settings and Diagnostics tabs, editable migration presets, component search and filters, and explicit destination action labels.
• Merge transfer and verification into one view with interactive byte/speed charts, stage timers, Follow live, grouped activity and copyable error details.
• Collapse setup during transfers and summarize results, unchanged files, protected folders, health and the saved destination backup.

Install the same version on both sites before transferring. Refresh open Trickle tabs after updating. The recovery loader refreshes automatically on the first WordPress request after updating when file modifications are allowed. CLI installations can reactivate Trickle to refresh it immediately.

Validation: offline security and real WordPress authentication regressions; UI/workflow, chart, settings, preset and verification checks; desktop/mobile render checks; 17 native JSON-updater checks; packaged PHP/JavaScript syntax and secret scans. No production migration was run for this release.