Prepare OpenGUI 0.6.0-rc.1

[akemmanuel]

Summary

• prepare OpenGUI 0.6.0-rc.1 for the first-party Host/Harness architecture
• bound MCP discovery, preserve healthy/last-known-good tools, expose translated connection diagnostics, and make transport failures recoverable
• restore durable prompt steering/send-now semantics and align the sidebar empty-project test with the refactored hierarchy
• accept ADR 0014 and update architecture, deployment, mobile, operations, compatibility, and migration documentation
• add PR-level Node 24 quality gates and an artifact-only release-candidate path
• gate tag publication on Linux, Windows, macOS, Android, Docker, candidate aggregation, and checksums

Migration impact

Existing sessions from the external-Harness architecture are not imported into the first-party Harness database. Their source files are left untouched. Operators should back up Host data and test this candidate against a copy.

Automated validation

• pnpm install --frozen-lockfile
• pnpm run check
• pnpm run test — 197 files / 1,035 tests
• pnpm run slop-check
• pnpm run build
• pnpm run mobile:build:release
• local Docker image build and /api/health smoke test
• docker compose config --quiet
• git diff --check

Local validation used Node 26.1.0; this PR intentionally reruns the complete suite under Node 24 in GitHub Actions.

Risk areas

• MCP refresh timeout/abort and overlapping-refresh arbitration
• prompt interrupt/send-now ordering and multi-client event timing
• cross-platform updater metadata and candidate artifact collection
• unsigned macOS candidates and debug-signed Android candidate

Manual acceptance required before tagging

• Windows clean install/uninstall and Session/tool/abort smoke test
• macOS x64 and arm64 launch/Gatekeeper assessment
• Linux AppImage and deb clean-install smoke test
• Docker/Web authenticated setup, persistence, restart, and rollback rehearsal
• Android install, Remote Host setup, reconnect/send/follow-up/abort/uploads/back navigation
• long live-provider Session covering all native tools, MCP outage, compaction, restart, and reconnect
• signing/notarization policy and production credentials before stable 0.6.0

No tag or release is created by this PR.

[akemmanuel]

Automated release-preparation result

All current-head PR checks and the non-publishing candidate build are green.

• Node 24 PR quality gate: https://github.com/akemmanuel/OpenGUI/actions/runs/30705717619
• Artifact-only candidate build: https://github.com/akemmanuel/OpenGUI/actions/runs/30705720314
• Linux deb/AppImage: built
• Windows NSIS: built
• macOS x64/arm64 DMG + ZIP: built and updater manifests merged
• Android release APK: built
• Docker amd64/arm64: built and health-smoked
• Candidate checksums: generated
• Docker publication and GitHub Release jobs: correctly skipped

The first candidate run exposed a missing manifest-script dependency; that was fixed. A later run exposed a cold browser-audit timeout; its hook allowance was made CI-safe. The final run passed end to end.

The remaining unchecked items in the PR description are manual platform/product acceptance and production signing decisions. No tag, image, or GitHub Release has been published.