Castles 0.1.4

Patch release for resilient mailbox HTML parsing.

• Fixes a scan crash when a hidden styled HTML container contains styled descendants.
• Processes destructive DOM snapshots descendant-first so decomposed ancestors cannot invalidate later nodes.
• Converts bounded HTML parser/data-shape failures into privacy-safe per-message rejections, preserving partial-scan behavior.
• Preserves hidden-content filtering, visible HTTP/HTTPS link extraction, parser bounds, local storage, and the exact Gmail read-only scope.

No OAuth, provider, database, installer, website, or privacy architecture changes are included. The live installer remains pinned to v0.1.3 until the separate verified installer-pin change is merged.

Castles 0.1.3

Castles 0.1.3 adds guided, privacy-preserving Google OAuth onboarding while retaining the intentional user-owned Desktop client architecture. castles setup now explains the model, safely discovers or accepts a validated client, imports a private managed copy, and continues through the hardened local browser authorization flow. A new canonical setup guide documents current Google Cloud configuration, Testing versus In production, warnings, revocation, and troubleshooting.

The exact Gmail read-only scope, local-only mailbox processing, PKCE and callback protections, existing token compatibility, offline findings, and no-backend architecture remain unchanged. Setup never scans Gmail and does not create findings.

See CHANGELOG.md and https://castles.luigiverona.dev/setup.html for details.

Castles 0.1.2

Castles 0.1.2 hardens OAuth refresh persistence and loopback callback handling, improves sanitized authorization guidance, documents privacy-safe synthetic detection feedback, and strengthens cross-platform and release validation. Detection policy and local-only privacy architecture remain unchanged.

See CHANGELOG.md for details.