SilentSuite v0.3.0-beta: Encrypted Sharing, Labels, and Android Polish

This adds the first full sharing management surfaces, labels/categories for events, tasks, and contacts, major Android import and sync improvements, better mobile web collection management, more security hardening across the web app, Android app, bridge, and self-hosted server, and of course some minor bug fixes and improvements.

Encrypted sharing

SilentSuite now has the first real sharing management flow across the server, core client layer, web app, and DAV bridge.

Added sharing invitation and member-management support in the core client layer.
Added a web Settings → Sharing page for incoming invitations, sent invitations, member lists, and access controls.
Added support for accepting, rejecting, canceling, and managing sharing invitations.
Added safer permission handling so non-admin users do not see unsafe member-management controls.
Hardened the server invitation lifecycle so accepted invitations create memberships correctly and duplicate invite/accept cases return clearer errors.
Improved bridge behavior for shared collections by rejecting writes, deletes, and metadata changes to read-only shared collections before local cache mutation.

Sharing remains fully zero-knowledge and end-to-end encrypted.

Labels and categories

Events, tasks, and contacts now support labels/categories.

Added labels/categories to calendar events, tasks, and contacts.
Added web UI for adding, removing, and displaying labels.
Added label/category search across events, tasks, and contacts.
Preserved labels through ICS CATEGORIES and vCard CATEGORIES import/export round-trips.
Existing unlabeled data remains compatible and defaults safely.

Android

This release includes several Android improvements.

Added pull-to-refresh manual sync on collection/item lists and account screens.
Improved Android .vcf contact imports so one malformed contact no longer aborts the whole file.
Added privacy-safe per-contact import failure reporting without logging or retaining failed contact contents.
Fixed status bar and toolbar icon visibility issues.
Fixed dark-theme content icon tinting in several Android screens.
Polished the Android login screen layout, secondary links, and info banner.
Fixed accepted sharing invitations so Android refreshes shared collections more reliably.
Split Android CI builds so pull requests and branch builds cannot access release signing secrets.

Web app

The web app has several organization, calendar, and mobile usability improvements.

Added client-side calendar search on desktop and mobile.
Added a synced date format preference with a central formatter.
Applied the first-day-of-week preference across calendar range math, mini calendar, and date labels.
Added week numbers in week view.
Fixed multi-day timed events so they render as spanning bars in month view.
Added per-collection export, so users can export a single calendar, task list, or address book.
Added mobile web collection management through a mobile-only Collections sheet.
Improved mobile web touch targets toward a 44px minimum hit area.

Bridge and desktop DAV

Fixed a desktop bridge dashboard redirect loop at the local /.web route.
Re-enabled macOS ARM64 bridge release builds.
Added local-only warnings and clearer DAV bridge compatibility documentation.
Improved bridge protections around read-only shared collections.

Security and self-hosting

This release includes another security/privacy hardening pass.

Hardened the web offline mutation queue so plaintext PIM content is not persisted when encrypted queue persistence is unavailable.
Purged legacy plaintext offline queue records on read where applicable.
Cleared queued offline mutations on logout and before login/account switch.
Hardened bridge dashboard Host/Origin checks against DNS-rebinding-style access.
Hardened malformed server authorization header handling.
Improved server collection dependency scoping.
Hardened self-host bootstrap/admin exposure and added regression coverage.
Added high/critical dependency audit enforcement improvements.