Cotabby for Windows v0.5.0

Cotabby for Windows v0.5.0

Tagged build from commit 8ceeea7a7b58590ffea99eedab4ea00d203a10f8.

Upstream port round three from FuJacob/cotabby, merged into main as PR #6 and
shipped cumulatively with all five earlier ports.

Added

• Port upstream [correctable-misspelling guard (#814)](docs/upstream-seam-guard.md):
  a pure post-generation CompletionSeamGuard now refuses three classes of
  visible glitch before display — junk punctuation runs ("....", "$$$$"),
  mid-word splices that turn the word being typed into a misspelling
  ("gre" + "atful"), and, when the completion starts a new word, a first word
  the spell backend can actually correct. The leading-word check is
  intentionally fail-open: names, jargon and model vocabulary without a
  replacement pass through. Windows registers no always-on spell checker
  equivalent, so the check is pluggable (ISpellAssessor); without one the
  guard stays at its pure junk-run rule and behavior is unchanged beyond junk
  runs. Spelling checks skip capitalized words, short joins, tokens with
  digits, and CJK text.
• Port upstream [Low Power Mode pause (#812)](docs/upstream-low-power-mode.md):
  a new opt-in Pause in Low Power Mode toggle in Settings → General.
  When enabled, new suggestion requests pause while the Windows energy saver
  is engaged (read via GetSystemPowerStatus, one cheap cached poll per
  evaluation, never throws). Off by default, matching upstream.
• Port upstream [held-presentation rapid-Tab acceptance (#838)](docs/upstream-rapid-tab.md):
  while Cotabby's next overlay presentation is still in flight, a rapid
  follow-up Tab now accepts the tail Cotabby is about to paint instead of
  failing the stale-ghost check, tearing the session down, and leaking a real
  Tab into the host (which used to move focus to the page's next control).

Fixed

• Preserve all earlier ports: full output-budget reservation (#851), partial
  GPU/request Performance pane (#858), credential-field protection (#848),
  opt-in double-tap acceptance (#840), and the cumulative insertion,
  clipboard, BlockInput and privacy regressions fixed on Windows in v0.3.0–
  v0.4.1.

Verification

• 319 unit tests locally (281 baseline + 38 new: 31 seam-guard, 3 Low Power
  Mode, 2 rapid-Tab rig cases) and hosted Windows CI.
• Two timing-sensitive pre-existing tests flaked once on hosted CI and passed
  on rerun and deterministically in 30+ local runs; they are not related to
  this change set and are unchanged from v0.4.1.

Known limits

• Physical keys, live-model suggestions, per-application accessibility, GPU
  accuracy and the real energy-saver engagement path remain owner-verified;
  CI uses synthetic input and a deterministic engine. The spell backend is
  not registered on Windows yet, so the new leading/seam checks only act when
  an ISpellAssessor is injected.
• Rejected captured keys are still not replayed; warnings make this visible
  without logging content.

Assets

• Cotabby-win-x64-v0.5.0.zip — self-contained folder build. Extract into a new folder; do not flatten runtimes.
• Cotabby-win-x64-v0.5.0.zip.sha256 — verified checksum of the ZIP above.

SHA-256: 5eeae2d3ce53832147dd699a5031c94e8327b40a934c373c8a72ea8d17140fd1

Verification

• Windows CI on this commit runs the full test suite, the synthetic real-UI-Automation credential proof and a GPU counter/persistence smoke test.
• The published ZIP is extracted and every member is hashed against the packaged manifest before upload.
• Live model decoding, physical GPU readings, per-adapter behavior and browser/application credential coverage remain owner-verified.
• Inference stays local: no telemetry and no cloud completion. Do not share raw logs; they can contain typed text.