soredake · pull · Apr 25, 2026 · Apr 25, 2026 · Apr 25, 2026 · Apr 25, 2026
diff --git a/manifests/a/AIDotNet/OpenCowork/0.9.82/AIDotNet.OpenCowork.installer.yaml b/manifests/a/AIDotNet/OpenCowork/0.9.82/AIDotNet.OpenCowork.installer.yaml
@@ -0,0 +1,32 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.installer.1.12.0.schema.json
+
+PackageIdentifier: AIDotNet.OpenCowork
+PackageVersion: 0.9.82
+InstallerType: nullsoft
+InstallerSwitches:
+  Upgrade: --updated
+UpgradeBehavior: install
+ProductCode: ef264783-8179-52ad-bf3a-efd1a5ce435d
+ReleaseDate: 2026-04-25
+Installers:
+- Architecture: x64
+  Scope: user
+  InstallerUrl: https://github.com/AIDotNet/OpenCowork/releases/download/0.9.82/OpenCowork-win-amd64-setup.exe
+  InstallerSha256: C493078FF83C45842475E737D024D19297AA4D5DF6478115B3BEB5A8DAB4C7D5
+  InstallerSwitches:
+    Custom: /currentuser
+- Architecture: x64
+  Scope: machine
+  InstallerUrl: https://github.com/AIDotNet/OpenCowork/releases/download/0.9.82/OpenCowork-win-amd64-setup.exe
+  InstallerSha256: C493078FF83C45842475E737D024D19297AA4D5DF6478115B3BEB5A8DAB4C7D5
+  InstallerSwitches:
+    Custom: /allusers
+- Architecture: arm64
+  Scope: machine
+  InstallerUrl: https://github.com/AIDotNet/OpenCowork/releases/download/0.9.82/OpenCowork-win-arm64-setup.exe
+  InstallerSha256: 020F2E5A239A7EB60136918C2C87F4AB47CF49650A8E4F621E67A15AA2C817A0
+  InstallerSwitches:
+    Custom: /allusers
+ManifestType: installer
+ManifestVersion: 1.12.0
diff --git a/manifests/a/AIDotNet/OpenCowork/0.9.82/AIDotNet.OpenCowork.locale.en-US.yaml b/manifests/a/AIDotNet/OpenCowork/0.9.82/AIDotNet.OpenCowork.locale.en-US.yaml
@@ -0,0 +1,36 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.defaultLocale.1.12.0.schema.json
+
+PackageIdentifier: AIDotNet.OpenCowork
+PackageVersion: 0.9.82
+PackageLocale: en-US
+Publisher: example.com
+PublisherUrl: https://github.com/AIDotNet
+PublisherSupportUrl: https://github.com/AIDotNet/OpenCowork/issues
+PackageName: OpenCoWork
+PackageUrl: https://github.com/AIDotNet/OpenCowork
+License: Apache-2.0
+LicenseUrl: https://github.com/AIDotNet/OpenCowork/blob/HEAD/LICENSE
+Copyright: Copyright 2026 AIDotNet
+ShortDescription: Open-source desktop platform for multi-agent collaboration. Empowering AI agents with local tools, parallel teamwork, and seamless workplace integration.
+Description: |-
+  Traditional LLM interfaces are often "environment-isolated islands." Developers spend 50% of their time copy-pasting code, terminal logs, and file contents between the chat and their IDE.
+  OpenCowork solves this by providing:
+  - Local Agency: Agents can directly read/write files and execute shell commands with your permission.
+  - Context Awareness: No more manual context feeding. Agents explore your codebase and logs autonomously.
+  - Task Orchestration: Complex tasks (like "Refactor this module and update tests") are broken down and handled by specialized sub-agents.
+  - Human-in-the-loop: You stay in control with a transparent tool-call approval system.
+Tags:
+- agent
+- agentic
+- ai
+- large-language-model
+- llm
+ReleaseNotes: |-
+  Changed
+  - Unified terminal output with the thinking stream display and added a session clear entry point.
+  Fixed
+  - Completed terminal session cleanup immediately when a terminal session has already ended, avoiding duplicate pending states.
+ReleaseNotesUrl: https://github.com/AIDotNet/OpenCowork/releases/tag/0.9.82
+ManifestType: defaultLocale
+ManifestVersion: 1.12.0
diff --git a/manifests/a/AIDotNet/OpenCowork/0.9.82/AIDotNet.OpenCowork.locale.zh-CN.yaml b/manifests/a/AIDotNet/OpenCowork/0.9.82/AIDotNet.OpenCowork.locale.zh-CN.yaml
@@ -0,0 +1,22 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.locale.1.12.0.schema.json
+
+PackageIdentifier: AIDotNet.OpenCowork
+PackageVersion: 0.9.82
+PackageLocale: zh-CN
+ShortDescription: 开源桌面多智能体协作平台，为 AI 智能体赋予本地工具、并行团队协作及无缝办公集成能力。
+Description: |-
+  传统的 LLM 界面往往是“环境孤岛”。开发者通常需要花费 50% 的时间在聊天窗口和 IDE 之间手动复制粘贴代码、终端日志和文件内容。
+  OpenCowork 通过以下方式解决这一问题：
+  - 本地代理能力：智能体可以在您的许可下直接读写文件并执行 Shell 命令。
+  - 上下文感知：无需再手动喂数据。智能体会自主探索您的代码库和日志。
+  - 任务编排：复杂的任务（如“重构此模块并更新测试”）会被拆解并由专门的子智能体处理。
+  - 人在回路：通过透明的工具调用审批系统，您始终拥有最终控制权。
+Tags:
+- 人工智能
+- 大语言模型
+- 智能体
+- 自主智能
+ReleaseNotesUrl: https://github.com/AIDotNet/OpenCowork/releases/tag/0.9.82
+ManifestType: locale
+ManifestVersion: 1.12.0
diff --git a/manifests/a/AIDotNet/OpenCowork/0.9.82/AIDotNet.OpenCowork.yaml b/manifests/a/AIDotNet/OpenCowork/0.9.82/AIDotNet.OpenCowork.yaml
@@ -0,0 +1,8 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.version.1.12.0.schema.json
+
+PackageIdentifier: AIDotNet.OpenCowork
+PackageVersion: 0.9.82
+DefaultLocale: en-US
+ManifestType: version
+ManifestVersion: 1.12.0
diff --git a/manifests/a/aquaproj/aqua/2.57.2/aquaproj.aqua.installer.yaml b/manifests/a/aquaproj/aqua/2.57.2/aquaproj.aqua.installer.yaml
@@ -0,0 +1,26 @@
+# This file was generated by GoReleaser. DO NOT EDIT.
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.installer.1.12.0.schema.json
+PackageIdentifier: aquaproj.aqua
+PackageVersion: 2.57.2
+InstallerLocale: en-US
+InstallerType: zip
+ReleaseDate: "2026-04-25"
+Installers:
+  - Architecture: arm64
+    NestedInstallerType: portable
+    NestedInstallerFiles:
+      - RelativeFilePath: aqua.exe
+        PortableCommandAlias: aqua
+    InstallerUrl: https://github.com/aquaproj/aqua/releases/download/v2.57.2/aqua_windows_arm64.zip
+    InstallerSha256: 0be5c3065239227888ed6e2bd72fb1100fe5253cadd7b4c5d8d23a9e04e61fd0
+    UpgradeBehavior: uninstallPrevious
+  - Architecture: x64
+    NestedInstallerType: portable
+    NestedInstallerFiles:
+      - RelativeFilePath: aqua.exe
+        PortableCommandAlias: aqua
+    InstallerUrl: https://github.com/aquaproj/aqua/releases/download/v2.57.2/aqua_windows_amd64.zip
+    InstallerSha256: e974550d0e412adeeff491bdc1790dc7bc61856eac207082aa82536f519de862
+    UpgradeBehavior: uninstallPrevious
+ManifestType: installer
+ManifestVersion: 1.12.0
diff --git a/manifests/a/aquaproj/aqua/2.57.2/aquaproj.aqua.locale.en-US.yaml b/manifests/a/aquaproj/aqua/2.57.2/aquaproj.aqua.locale.en-US.yaml
@@ -0,0 +1,20 @@
+# This file was generated by GoReleaser. DO NOT EDIT.
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.defaultLocale.1.12.0.schema.json
+PackageIdentifier: aquaproj.aqua
+PackageVersion: 2.57.2
+PackageLocale: en-US
+Publisher: aquaproj
+PublisherSupportUrl: https://github.com/aquaproj/aqua/discussions
+PackageName: aqua
+PackageUrl: https://github.com/aquaproj/aqua
+License: mit
+LicenseUrl: https://github.com/aquaproj/aqua/blob/main/LICENSE
+ShortDescription: Declarative CLI Version manager written in Go
+Description: |
+  Declarative CLI Version manager written in Go.
+  Support Lazy Install, Registry, and continuous update by Renovate.
+  CLI version is switched seamlessly
+Moniker: aqua
+ReleaseNotesUrl: https://github.com/aquaproj/aqua/releases/tag/v2.57.2
+ManifestType: defaultLocale
+ManifestVersion: 1.12.0
diff --git a/manifests/a/aquaproj/aqua/2.57.2/aquaproj.aqua.yaml b/manifests/a/aquaproj/aqua/2.57.2/aquaproj.aqua.yaml
@@ -0,0 +1,7 @@
+# This file was generated by GoReleaser. DO NOT EDIT.
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.version.1.12.0.schema.json
+PackageIdentifier: aquaproj.aqua
+PackageVersion: 2.57.2
+DefaultLocale: en-US
+ManifestType: version
+ManifestVersion: 1.12.0
diff --git a/manifests/a/axpnet/AeroFTP/3.6.3/axpnet.AeroFTP.installer.yaml b/manifests/a/axpnet/AeroFTP/3.6.3/axpnet.AeroFTP.installer.yaml
@@ -0,0 +1,36 @@
+# Created with WinGet Releaser using komac v2.16.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.installer.1.12.0.schema.json
+
+PackageIdentifier: axpnet.AeroFTP
+PackageVersion: 3.6.3
+InstallerLocale: en-US
+ReleaseDate: 2026-04-25
+Installers:
+- Architecture: x64
+  InstallerType: nullsoft
+  Scope: user
+  InstallerUrl: https://github.com/axpdev-lab/aeroftp/releases/download/v3.6.3/AeroFTP_3.6.3_x64-setup.exe
+  InstallerSha256: 0A8EC160E6AF6EA0B3341F489A6071518955D1790FB0B2FB0B029BB04CF1A538
+  InstallerSwitches:
+    Silent: /S
+    SilentWithProgress: /S
+  ProductCode: AeroFTP
+  AppsAndFeaturesEntries:
+  - Publisher: aeroftp
+    ProductCode: AeroFTP
+  InstallationMetadata:
+    DefaultInstallLocation: '%LocalAppData%\AeroFTP'
+- Architecture: x64
+  InstallerType: wix
+  Scope: machine
+  InstallerUrl: https://github.com/axpdev-lab/aeroftp/releases/download/v3.6.3/AeroFTP_3.6.3_x64_en-US.msi
+  InstallerSha256: 772C24103A7E01E86B2670AD3AFC17E1D241586F0E3DC59E6906CF008107296B
+  ProductCode: '{28677CE8-AA24-4459-ABE6-A963FBF00D70}'
+  AppsAndFeaturesEntries:
+  - Publisher: aeroftp
+    ProductCode: '{28677CE8-AA24-4459-ABE6-A963FBF00D70}'
+    UpgradeCode: '{3A660390-AA69-5CCD-A202-013C64158D37}'
+  InstallationMetadata:
+    DefaultInstallLocation: '%ProgramFiles%/AeroFTP'
+ManifestType: installer
+ManifestVersion: 1.12.0
diff --git a/manifests/a/axpnet/AeroFTP/3.6.3/axpnet.AeroFTP.locale.en-US.yaml b/manifests/a/axpnet/AeroFTP/3.6.3/axpnet.AeroFTP.locale.en-US.yaml
@@ -0,0 +1,85 @@
+# Created with WinGet Releaser using komac v2.16.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.defaultLocale.1.12.0.schema.json
+
+PackageIdentifier: axpnet.AeroFTP
+PackageVersion: 3.6.3
+PackageLocale: en-US
+Publisher: axpnet
+PublisherUrl: https://github.com/axpnet
+PublisherSupportUrl: https://github.com/axpnet/aeroftp/issues
+Author: axpnet
+PackageName: AeroFTP
+PackageUrl: https://github.com/axpnet/aeroftp
+License: GPL-3.0
+LicenseUrl: https://github.com/axpdev-lab/aeroftp/blob/HEAD/LICENSE
+ShortDescription: A modern, multi-protocol file manager and FTP client with integrated AI, cloud sync, and military-grade encryption.
+Description: |-
+  AeroFTP is an open-source, multi-protocol file manager built with Tauri 2 (Rust + React 18 + TypeScript).
+  It supports 16 protocols (FTP, FTPS, SFTP, WebDAV, S3, Google Drive, Dropbox, OneDrive, MEGA, Box, pCloud, Azure Blob, 4shared, Filen, Zoho WorkDrive, and Cryptomator vaults),
+  features an AI assistant with 45 tools and 15 LLM providers, military-grade encrypted vaults (AES-256-GCM-SIV + Argon2id),
+  bidirectional real-time sync, a built-in code editor, SSH terminal, and media player with visualizers.
+  Available in 47 languages with 4 themes.
+Moniker: aeroftp
+Tags:
+- cloud-storage
+- encryption
+- file-manager
+- file-transfer
+- ftp
+- ftp-client
+- multi-protocol
+- rust
+- s3
+- sftp
+- sync
+- tauri
+- webdav
+ReleaseNotes: |-
+  [3.6.3] - 2026-04-25
+  Unified Tool Dispatcher + Cloud Provider Sweep + AeroVault Pro Foundations
+  The post-3.6.2 sprint consolidates three years of organically-grown AeroAgent surface into a single, audited tool engine shared by the Tauri GUI, the standalone aeroftp-cli binary and the MCP server. In parallel, eighteen cloud providers gain trash management, version history, share links and label/tag CRUD, while the desktop backend grows new pillars (server health diagnostics, TOTP 2FA scaffold, vault history) that prepare the ground for AeroVault Pro and the upcoming biometric unlock work.
+  Added
+  - Unified AI tool dispatcher (T3 Gate 2) — All AeroAgent tools (53 entries across local, system, remote and RAG/memory areas) now flow through a single ai_core::tools::dispatch_tool with surface-aware filtering (GUI / CLI / MCP). Per-area handler modules (local_tools.rs, system_tools.rs, remote_tools.rs, agent_tools.rs) host the canonical implementations; per-surface ToolCtx impls (TauriToolCtx, CliToolCtx, McpToolCtx) bridge to the appropriate runtime. The legacy execute_ai_tool / execute_cli_tool / mcp::execute_tool dispatchers stay as thin fast-path wrappers, eliminating the long-standing drift between three parallel match statements. 11 parity tests prove identical output across surfaces; the security regression suite gains an Area B check ensuring system_tools always delegates shell_execute to the canonical denylist source. Behavioural wins: local_trash is now available on CLI, clipboard_* and archive_compress/archive_decompress use native Rust libraries instead of subprocess shellouts (no more xclip/zip/tar/7z runtime dependencies on CLI), and validate_path adopts component-aware matching so /bootcamp is no longer falsely flagged as /boot.
+  - Provider trait expansion — 7 new optional methods: list_trash, restore_from_trash, permanent_delete, list_versions, download_version, restore_version, create_share_link, get_storage_quota. The RemoteEntry struct grows MIME type, owner/group, octal permissions, symlink target, and a free-form metadata bag. Box, Google Drive, Dropbox, OneDrive, Zoho WorkDrive light up the full feature matrix.
+  - Box Pro feature set: trash management, file move/comment/collaboration, watermark (Enterprise), folder locks (Enterprise), inline tag chips with PRO badge.
+  - Google Drive starring + comments + properties: star/unstar from context menu, add comments via prompt dialog, set custom key-value properties and description; file listing now includes starred, description, properties fields.
+  - Dropbox tag management + Trash Manager: full tag CRUD via Dropbox Tags API (reuses generic BoxTagsDialog); dedicated modal for deleted files (restore + permanent delete).
+  - OneDrive Trash Manager: full recycle bin lifecycle (move to trash, list, restore, permanent delete).
+  - Zoho WorkDrive labels + versioning: list team labels, get/add/remove labels on files via ZohoLabelsDialog with color-coded toggle list; list versions, download specific version, restore/promote version through the StorageProvider trait.
+  - Server Health Check — Real-time diagnostics for saved servers: DNS / TCP / TLS / HTTP probes with latency stats, 0–100 health score, SVG radial gauge, latency bars, Canvas 2D area chart for trend. Right-click any server card → Connect / Edit / Duplicate / Health Check / Delete (useContextMenu hook). Batch health check across all saved servers in parallel with healthy/degraded/unreachable summary.
+  - TOTP 2FA scaffold (totp.rs) — RFC 6238 authenticator core ready for the optional vault second factor: issuer, period, digits, base32 secret import/export, code verification with drift window. Will surface in Settings > Security in a follow-up release.
+  - Vault history (vault_history.rs) — SQLite-backed recents tracker for AeroVault Pro: last-opened timestamp, security badges, dedupe by canonical path. Powers the new VaultHome recents grid and "reopen" one-click flow.
+  - AeroAgent server context tools registered in unified registry: server_list_saved, server_exec, plus the full aeroftp_* ↔ remote_* alias map (including newly-registered server_list_saved alias).
+  - Aerorsync standalone serve binary — bin/aerorsync_serve.rs (renamed from rsync_proto_serve.rs) ships as a separate [[bin]] target for capture/test workflows.
+  Changed
+  - rsync_native_proto/ module renamed to aerorsync/ — Aligns the experimental Rust-native rsync protocol implementation with the AeroFTP product naming. 41 source files, the capture harness, all fixtures and the standalone serve binary move under src-tauri/src/aerorsync/. CI workflows, Cargo bin section, lib.rs module declaration and the integration test path are updated to match. No on-the-wire changes: the protocol stays byte-identical to v3.6.x.
+  - AeroAgent tool count: 53 unified registry entries — formerly counted as ~47 across three parallel dispatchers, now consolidated into a single TOOL_DEFINITIONS table where the same handler runs unmodified on GUI, CLI and MCP.
+  - CLI relative-path resolution snapshot at process start — CliToolCtx::new() captures std::env::current_dir() once at construction and exposes it via ToolCtx::context_local_path(). Eliminates the silent regression where the unified dispatcher saw paths "as-is" instead of resolved against cwd. Behaviour matches the legacy CLI resolve_path closure exactly.
+  - shell_execute working_dir validation hardened — The unified system_tools::shell_execute now runs validate_path(working_dir, ...) against the system deny-list (/etc/shadow, /proc, /sys, /boot, /root, /etc/ssh, /etc/sudoers, …) before delegating to the legacy GUI helper, restoring CLI parity that was lost during Area B migration.
+  - upload_many / delete_many now report real elapsed seconds — the placeholder elapsed_secs: 0u64 returned to MCP and AI clients is replaced with Instant::now().elapsed().as_secs() measured around the inner loop.
+  - Vite 5 → 8 + @vitejs/plugin-react 4 → 6 — Major bump of the frontend build chain. Dev server, production build and Tauri packaging stay green. package-lock.json regenerated.
+  - Cargo.lock refreshed — picks up transitive dependency churn from the v3.6.x feature work (provider crates, ai_core additions, server_health, totp, vault history, aerorsync rename).
+  Fixed
+  - SFTP symlink-aware listing — SftpProvider::list() now follows symlinks via sftp.metadata() so directory traversal works on NAS devices that report symlinks for share roots (WD MyCloud, Synology DSM6, ASUSTOR ADM).
+  - Azure Blob server-side copy — Copy Blob API with x-ms-copy-source and safe resolve_blob_path() prefix resolution; eliminates the GET+PUT roundtrip for in-account moves.
+  - local_trash now available on CLI — was GUI-only in the legacy dispatcher; the unified registry exposes it on both surfaces with the same semantics.
+  - path_style no longer false-coalesced in App.tsx — Drop the || false on effectiveParams.options?.pathStyle and cloudServer.options?.pathStyle so explicit user choices (true / false / undefined) reach the backend faithfully without being squashed.
+  - vault_remote.rs validation tightened — null-byte rejection on remote vault paths, symlink refusal on Unix mode lookup, parent canonicalization before opening .aerovault files served from remote providers.
+  Security
+  - russh 0.59 → 0.60.1 — Closes Dependabot HIGH (GHSA-f5v4-2wr6-hqmg): pre-auth DoS via unbounded allocation in the keyboard-interactive auth handler. AeroFTP exposes a russh-based SSH server through aeroftp-cli serve sftp, so the fix is mandatory. The bump required updating the ed25519 server-key generation call site to the new CryptoRng bound — added a narrow rand_010 (rand 0.10) alias for that single line, with the rest of the codebase staying on rand 0.8.
+  - rand 0.8.5 → 0.8.6 — Closes Dependabot LOW (GHSA-cq8v-f236-94qc): rand was unsound when paired with a custom logger using rand::rng(). Direct dep bump only; the build-time-only transitive rand 0.7.3 (pulled by phf_generator 0.8.0 / selectors 0.24.0 in the Tauri stack) is left in place — not in the runtime path and the upstream chain is locked at this combination by Tauri's wry dependency.
+  - validate_path component-aware matching — path_matches_prefix(path, prefix) helper replaces 11 occurrences of s.starts_with(d). Eliminates false positives on prefix matches (e.g. /bootcamp was being blocked as if it were under /boot).
+  - Single source of truth for shell_execute denylist — Both the GUI fast-path and the new system_tools::shell_execute delegate to ai_tools::shell_execute for the canonical 35+ regex denylist + meta-character filter. The CI security regression script (security-regression.cjs) now actively verifies this delegation chain stays intact.
+  Internal
+  - 53 entries in TOOL_DEFINITIONS distributed: Area A local_* = 21, Area B clipboard/shell/archive = 5, Area C remote_*/aeroftp_*/server_exec = 24 (incl. server_list_saved alias), Area D rag_*/agent_memory_* = 3.
+  - tool_parity.rs integration test suite — 11 tests proving identical output across GUI and CLI surfaces for local_read, local_write, local_mkdir, local_delete, local_grep, shell_execute, rag_index, rag_search, plus 3 remote alias parity tests with a FakeRemoteBackend.
+  - security-regression.cjs Area B coverage — verifies system_tools::shell_execute calls crate::ai_tools::shell_execute (single denylist source) and validates working_dir against the deny-list before the call.
+  - Quality bar at closure: cargo check --features aerorsync --lib, cargo clippy --all-targets --features aerorsync -- -D warnings, cargo test --features aerorsync --lib (1018 / 1018 passed), cargo test --features aerorsync --test tool_parity (11 / 11 passed) and node .github/scripts/security-regression.cjs (5 / 5 passed) all green.
+  Downloads:
+  - Windows: .msi installer, .exe, or .zip portable (no installation required)
+  - macOS: .dmg disk image
+  - Linux: .deb, .rpm, .snap, or .AppImage
+  Download AeroFTP
+ReleaseNotesUrl: https://github.com/axpdev-lab/aeroftp/releases/tag/v3.6.3
+ManifestType: defaultLocale
+ManifestVersion: 1.12.0