Support afp:// links and open them with system handler

.cursor/worktrees.json

@@ -0,0 +1,3 @@
+{
+  "setup-worktree": ["yarn install"]
+}

.eslintignore

@@ -1,3 +1,7 @@
 /node_modules
 /app
 /workspaces/*
+# Standalone tooling scripts (not part of main app, run with ts-node)
+/scripts
+# Patch source files (copied to node_modules, not compiled directly)
+/patches-src

.eslintrc.json

@@ -1,5 +1,6 @@
 {
   "extends": ["@rocket.chat/eslint-config"],
+  "ignorePatterns": ["patches-src/**/*"],
   "plugins": ["react", "react-hooks"],
   "env": {
     "browser": true,
@@ -14,7 +15,14 @@
     "react/display-name": "error",
     "react/jsx-curly-brace-presence": "error",
     "react/jsx-fragments": ["error", "syntax"],
-    "react/jsx-key": ["error", { "checkFragmentShorthand": true, "checkKeyMustBeforeSpread": true, "warnOnDuplicates": true }],
+    "react/jsx-key": [
+      "error",
+      {
+        "checkFragmentShorthand": true,
+        "checkKeyMustBeforeSpread": true,
+        "warnOnDuplicates": true
+      }
+    ],
     "react/jsx-no-undef": "error",
     "react/jsx-uses-react": "error",
     "react/jsx-uses-vars": "error",
@@ -43,7 +51,13 @@
       }
     },
     {
-      "files": ["**/*.stories.js", "**/*.stories.jsx", "**/*.stories.ts", "**/*.stories.tsx", "**/*.spec.tsx"],
+      "files": [
+        "**/*.stories.js",
+        "**/*.stories.jsx",
+        "**/*.stories.ts",
+        "**/*.stories.tsx",
+        "**/*.spec.tsx"
+      ],
       "rules": {
         "react/display-name": "off",
         "react/no-multi-comp": "off"

.github/CONTRIBUTING.md

@@ -7,7 +7,7 @@ packages, which are hosted in the [Rocket.Chat Organization] on GitHub.
 
 [Rocket.Chat Organization]: https://github.com/RocketChat
 
-__Note:__ If there's a feature you'd like, there's a bug you'd like to fix, or
+**Note:** If there's a feature you'd like, there's a bug you'd like to fix, or
 you'd just like to get involved please raise an issue and start a conversation.
 We'll help as much as we can so you can get contributing - although we may not
 always be able to respond right away :)

.github/ISSUE_TEMPLATE.md

@@ -16,14 +16,18 @@ Thanks for opening an issue! A few things to keep in mind:
 - Installation type: <!-- exe, dmg, package manager etc. -->
 
 <!-- Answer questions by putting x in box, e.g. [x] -->
+
 - [ ] I have tested with the latest version
 - [ ] I can simulate the issue easily
 
 ## Description
+
 <!-- If relevant, attach screenshots, and how to reproduce -->
 
 ### Current Behavior
+
 <!-- What actually happens? -->
 
 ### Expected Behavior
+
 <!-- What do you think should happen? -->

.github/ISSUE_TEMPLATE/feature_request.md

@@ -4,7 +4,6 @@ about: Suggest an idea for this project
 title: ''
 labels: ''
 assignees: ''
-
 ---
 
 **Is your feature request related to a problem? Please describe.**

.github/PULL_REQUEST_TEMPLATE.md

@@ -7,6 +7,7 @@ prefixes:
 -->
 
 <!-- Inform the issue number that this PR closes, or remove the line below -->
+
 Closes #ISSUE_NUMBER
 
 <!-- Tell us more about your PR with screen shots if you can -->

.github/workflows/build-release.yml

@@ -1,15 +1,16 @@
+permissions:
+  contents: read
 name: Build release
 
 on:
   push:
     branches:
       - master
-      - develop
+      - dev
     tags:
       - '*'
-
 concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref }}
+  group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
@@ -31,10 +32,10 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Setup Node 22.13.1
+      - name: Setup Node 22.17.1
         uses: actions/setup-node@v4
         with:
-          node-version: '22.13.1'
+          node-version: '22.17.1'
 
       - name: Setup node_modules cache
         uses: actions/cache@v4
@@ -63,15 +64,32 @@ jobs:
           NODE_ENV: production
           BUGSNAG_API_KEY: ${{ secrets.BUGSNAG_API_KEY }}
           SNAPCRAFT_STORE_CREDENTIALS: ${{ secrets.SNAPCRAFT_STORE_CREDENTIALS }}
+
+      - name: Setup gcloud (Windows)
+        if: ${{ matrix.os == 'windows-latest' }}
+        uses: google-github-actions/setup-gcloud@v2
+        with:
+          version: '>=536.0.0'
+
+      - name: Authenticate to Google Cloud (Windows)
+        if: ${{ matrix.os == 'windows-latest' }}
+        uses: google-github-actions/auth@v2
+        with:
+          credentials_json: ${{ secrets.GCP_SA_JSON }}
+
       - uses: ./workspaces/desktop-release-action
         with:
           mac_csc_link: ${{ secrets.MAC_CSC_LINK }}
           mac_csc_key_password: ${{ secrets.MAC_CSC_KEY_PASSWORD }}
           mac_apple_id: ${{ secrets.APPLEID }}
           mac_apple_id_password: ${{ secrets.APPLEIDPASS }}
           mac_asc_provider: 'S6UPZG7ZR3'
-          win_csc_link: ${{ secrets.WIN_CSC_LINK }}
-          win_csc_key_password: ${{ secrets.WIN_CSC_KEY_PASSWORD }}
+          gcp_sa_json: ${{ secrets.GCP_SA_JSON }}
+          win_kms_key_resource: ${{ secrets.WIN_KMS_KEY_RESOURCE }}
+          win_user_crt: ${{ secrets.WIN_USER_CRT }}
+          win_intermediate_crt: ${{ secrets.WIN_INTERMEDIATE_CRT }}
+          win_root_crt: ${{ secrets.WIN_ROOT_CRT }}
           github_token: ${{ secrets.GH_TOKEN }}
+          snapcraft_token: ${{ secrets.SNAPCRAFT_STORE_CREDENTIALS }}
         env:
           SNAPCRAFT_STORE_CREDENTIALS: ${{ secrets.SNAPCRAFT_STORE_CREDENTIALS }}

.github/workflows/powershell-lint.yml

@@ -0,0 +1,48 @@
+name: PowerShell Lint
+
+permissions:
+  contents: read
+
+on:
+  pull_request:
+    paths:
+      - '**.ps1'
+      - '**.psm1'
+      - '**.psd1'
+      - '.github/workflows/powershell-lint.yml'
+  push:
+    branches:
+      - master
+      - dev
+    paths:
+      - '**.ps1'
+      - '**.psm1'
+      - '**.psd1'
+      - '.github/workflows/powershell-lint.yml'
+
+jobs:
+  lint:
+    runs-on: windows-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install PSScriptAnalyzer
+        shell: pwsh
+        run: |
+          Set-PSRepository PSGallery -InstallationPolicy Trusted
+          Install-Module -Name PSScriptAnalyzer -Force -Scope CurrentUser
+
+      - name: Run PSScriptAnalyzer
+        shell: pwsh
+        run: |
+          # Exclude Write-Host warnings as they're useful for CI output
+          $results = Invoke-ScriptAnalyzer -Path . -Recurse -ReportSummary -ExcludeRule PSAvoidUsingWriteHost
+          if ($results) {
+            $results | Format-Table -AutoSize
+            Write-Error "PSScriptAnalyzer found issues"
+            exit 1
+          } else {
+            Write-Host "✅ No PowerShell issues found"
+          }