Castles 0.1.3
Castles 0.1.3 adds guided, privacy-preserving Google OAuth onboarding while retaining the intentional user-owned Desktop client architecture. castles setup now explains the model, safely discovers or accepts a validated client, imports a private managed copy, and continues through the hardened local browser authorization flow. A new canonical setup guide documents current Google Cloud configuration, Testing versus In production, warnings, revocation, and troubleshooting.
The exact Gmail read-only scope, local-only mailbox processing, PKCE and callback protections, existing token compatibility, offline findings, and no-backend architecture remain unchanged. Setup never scans Gmail and does not create findings.
See CHANGELOG.md and https://castles.luigiverona.dev/setup.html for details.