Xiaoye Radar Community v0.4.2

Xiaoye Radar Community v0.4.2

Import Reliability Maintenance Release

v0.4.2 makes local file imports easier to diagnose and safer to report. It keeps the existing Community workflow, workspace schema version, Community/Pro separation, rule behavior, review states, and release target unchanged.

Import reliability

• CSV, JSON, RSS/Atom, Markdown, and text adapters reject empty or invalid UTF-8 files consistently.
• Malformed CSV, JSON, and RSS/Atom inputs return format-specific recovery guidance.
• Missing, unreadable, folder, unsupported-extension, and over-limit selections return short actionable errors.
• Unexpected parser or normalization details are replaced at the UI boundary, so local paths and raw source content are not exposed in the displayed error.
• Successful source cards show the adapter kind, normalized item count, and latest check result.
• The 10 MiB limit is covered at the exact accepted boundary and at one byte above it.

These changes add backward-compatible source diagnostic defaults while retaining workspace schema version 1. Existing Community workspaces continue to load without migration.

Maintenance

• Updated eslint from 10.9.1 to 10.10.0.
• Updated lucide-react from 1.40.0 to 1.43.0.
• Kept the current Electron, Vite, TypeScript, and Vitest major versions. Major dependency updates remain deferred for separate compatibility audits.

Verification

The release source is checked with:

npm ci
npm run format:check
npm run lint
npm run typecheck
npm test
npm run verify:secrets
npm run verify:secret-history
npm run build
npm audit
npm run dist:win
npm run smoke:portable

The automated suite contains 52 tests across 10 test files. Portable smoke covers the general Demo, Legal Inquiry Triage, human-review persistence, scan history, restart persistence, isolated storage, and single-instance behavior.

The Windows x64 artifact is Xiaoye-Radar-Community-0.4.2-portable-x64.exe, accompanied by Xiaoye-Radar-Community-0.4.2-portable-x64.exe.sha256.

Download safety

The portable executable supports Windows 10 and 11 x64. It is not Authenticode-signed, so Windows SmartScreen may display an unknown-publisher or reputation warning. Download both assets from the official GitHub Release and compare SHA-256 before running; do not disable Windows security controls.

Security and compliance

No Pro source, platform-specific connector, account or session handling, private API, customer data, real legal inquiry, or commercial rule pack is added. Imports remain local, all example data remains synthetic, and final decisions remain subject to human review.

Current limitations

• Windows x64 is the only packaged desktop target.
• The portable executable is not Authenticode-signed.
• User Regex remains disabled until it can execute outside the Electron main process with a tested hard timeout.
• Workspace packages are source workspaces and are not claimed as published npm packages.

Xiaoye Radar Community v0.4.1

Xiaoye Radar Community v0.4.1

Maintenance Release

v0.4.1 adds a reusable Legal Inquiry Triage example with synthetic data while improving maintenance, documentation and test coverage. Xiaoye Radar remains a source-neutral public-content monitoring, filtering and human-review toolkit.

Legal Inquiry Triage

The new examples/legal-inquiry-triage workflow includes:

• a deliberately basic deterministic rule pack for labor, family, debt, traffic, contract, consumer and rental inquiries
• 100 fully fictional records covering actionable requests, legal education, lawyer marketing, irrelevant content, expired content, duplicates and boundary cases
• a dashboard action that imports the example, creates its monitoring job, runs the rule and records history locally
• integration tests for Candidate, Excluded, time-filtered, same-revision duplicate and changed-revision reevaluation behavior
• a personal-information regression check for the complete synthetic dataset

A clean first run has fixed expectations:

Result	Count
Input records	100
Candidates	51
Duplicate records	5
Excluded records	18
Outside time window	10
Other rule-filtered	16

The example runs fully offline and does not call an AI model or network service. It does not provide legal advice. A Candidate remains subject to human review.

Maintenance

• Updated lucide-react from 1.39.0 to 1.40.0.
• Updated @types/react-dom from 19.2.5 to 19.2.7.
• Kept the current Electron, Vite, TypeScript and Vitest major versions. Major Dependabot updates were intentionally excluded from this maintenance release.
• Made Regex-disabled messages release-neutral while retaining the hard-timeout safety requirement.
• Expanded both main READMEs with balanced legal, customer-feedback, brand, RSS and custom-adapter use cases.
• Extended the packaged Windows smoke test to cover both bundled workflows, a persisted human-review decision, history, restart and single-instance behavior. The same test accepts an explicitly selected downloaded executable for release verification.

Security and compliance

No Pro source, platform login, Cookie, Session, platform selector, CAPTCHA bypass, risk-control evasion, private API, commercial scoring, customer data, real scan result, automatic direct message or bulk-contact implementation is included.

The legal fixture contains no real name, phone number, email address, social handle, user ID, post URL or case record. Every row is explicitly marked synthetic and fictional, and every URL uses the reserved example.invalid domain.

Use the example only with synthetic data or content you are lawfully authorized to access and process. It must not be used for unauthorized private-data collection, credential or access-control bypass, automated harassment, spam or unsolicited messaging.

Verification

The release source is checked with:

npm ci
npm run format:check
npm run lint
npm run typecheck
npm test
npm run verify:secrets
npm run verify:secret-history
npm run build
npm audit
npm run dist:win
npm run smoke:portable

The Windows x64 artifact is Xiaoye-Radar-Community-0.4.1-portable-x64.exe. It remains unsigned, so Windows may display a reputation warning. Verify the separately published SHA-256 file before running it.

Current limitations

• Windows x64 is the only packaged desktop target in this release.
• The portable executable is not Authenticode-signed.
• User Regex remains disabled until it can execute outside the Electron main process with a tested hard timeout.
• Workspace packages are source workspaces and are not claimed as published npm packages.

Xiaoye Radar Community v0.4.0

Xiaoye Radar Community v0.4.0

v0.4.0 is the first public Community Edition release.

Highlights

• Local Windows desktop workflow with no account, license, telemetry, updater, or private-service dependency
• JSON/YAML rules for source, time, include, exclude, contains, score, priority, and enable state
• CSV, JSON, local RSS/Atom, Markdown, and text adapters
• SHA-256 deduplication, atomic local storage, human review, and safe CSV/JSON export
• One-click 80-record synthetic Demo with fixed integration-test outcomes
• Public Source Adapter contract and four additional synthetic use-case examples
• Architecture, rule, adapter, compliance, security, and contribution documentation
• Packaged data-directory isolation, failed-run history, semantic rule revisions, deterministic deduplication, and single-instance workspace protection

Verified release candidate

• formatting, ESLint, TypeScript, 9 test files / 39 tests, current-tree secret scan, and full-history secret scan passed
• production Electron build passed
• Windows x64 portable package launched and completed the Demo workflow
• no Pro adapter, account/session implementation, browser profile, real customer data, or private rule pack is included

Windows portable artifact

File: Xiaoye-Radar-Community-0.4.0-portable-x64.exe
Size: 93,918,381 bytes
SHA-256: 2477b7b1ca4d431f8c5c497bb92f6942bcc2a8333a9f900de62fae6a8bd6b98f
Authenticode: NotSigned

This hash identifies the locally smoke-tested release candidate. If the owner signs or rebuilds the executable, publish the new hash instead.

Known limitations

• Windows x64 portable is the only tested release target.
• The executable is unsigned until the owner provides a code-signing workflow.
• The default Electron icon remains in this candidate.
• User-supplied regular expressions are disabled in v0.4.0; restoring the feature requires worker or process isolation with a hard timeout.
• Public npm packages, network adapters, notifications, telemetry, and automatic updates are not included.
• GitHub Private Vulnerability Reporting is the documented private security-reporting channel.

Upgrade note

This is the first Community release, so there is no Community database migration from an earlier version. Community uses a separate data directory and does not import or alter Pro data.