chore(deps): bump jspdf from 2.5.2 to 4.2.1

.github/workflows/release.yml

@@ -0,0 +1,29 @@
+# Build Windows installers and publish to GitHub Releases (needs latest.yml for auto-update).
+name: Release
+
+on:
+  push:
+    tags:
+      - '*'
+
+permissions:
+  contents: write
+
+jobs:
+  windows:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build and publish to GitHub
+        run: npm run electron:publish:win
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -8,3 +8,14 @@ SECURITY.local.md
 
 # GitHub profile repo draft (publish to github.com/krwg/krwg separately)
 github-profile/
+MESH-PLUS-PLAN.md
+scripts/.mesh-plus-private.b64
+mesh-plus-private.b64
+keysandlicense.md
+giphy-api-key.local
+build/giphy-api-key.txt
+.env.local
+.env.build
+mesh-plus-public-key.local
+build/mesh-plus-public-key.txt
+ENTITLEMENT-MAP.local.md

CONTRIBUTING.md

@@ -55,23 +55,44 @@ Requires Windows for the current electron-builder targets:
 ```bash
 npm run electron:build        # NSIS installer
 npm run electron:build:portable
+npm run electron:build:all    # Setup + portable + latest.yml (auto-update manifest)
 ```
 
 Outputs go to `dist-electron/` (see `electron-builder.yml`).
 
+### Publishing a GitHub Release
+
+In-app updates need **`latest.yml`** and **`BLIP-Setup-<version>.exe`** on the **same** release tag as `app-metadata.json` (e.g. tag `1.1.1`, not `v1.1.1`, unless you use that tag consistently).
+
+| Method | Command |
+|--------|---------|
+| **CI (recommended)** | Push git tag `1.1.1` → [`.github/workflows/release.yml`](.github/workflows/release.yml) runs `electron:publish:win` |
+| **Local publish** | `$env:GH_TOKEN = "ghp_…"; npm run electron:publish:win` |
+| **Manual upload** | `npm run electron:build:all` then `npm run release:assets` — attach listed files to the GitHub Release |
+
+Copy release notes from [`docs/release-notes-v1.1.1-github.md`](docs/release-notes-v1.1.1-github.md) (update per version).
+
+**Portable** builds do not receive in-app updates — users must download a new portable or install Setup once.
+
+**Dev vs packaged UI:** `npm run electron:dev` loads live sources from Vite; `electron:build:all` snapshots `dist/` into the exe. Always run `npm run build` before shipping (the build scripts do this automatically).
+
 ## Release metadata
 
 Version and codename live in [`app-metadata.json`](app-metadata.json) (synced into `package.json` on `npm run build`). Update [`CHANGELOG.md`](CHANGELOG.md) when shipping.
 
+**MESH+** tier notes: [`docs/MESH-PLUS.md`](docs/MESH-PLUS.md) — test subscription, free keys via blipteam@icloud.com; plan to graduate features to FREE. Do not break FREE behavior when gating MESH+ features.
+
+Release builds: run `npm run setup:build-secrets` once, then configure maintainer build secrets before `electron:build:*` (see `ENTITLEMENT-MAP.local.md`, gitignored).
+
 ## TCP payloads (renderer ↔ main)
 
-Chat and signalling use newline-delimited JSON on TCP port **42070**. Common `type` values: `message`, `typing`, `ping`/`pong`, `call-*`, `group-*`, `group-call-*`, `file-*`, `clipboard-push`. See [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md).
+Chat and signalling use newline-delimited JSON on TCP port **42070**. Common `type` values: `message`, `typing`, `ping`/`pong`, `call-*`, `group-*`, `group-call-*`, `file-*`, `clipboard-push`, `seed-*` (BEACON). See [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md).
 
 The renderer Vite build produces three HTML entry points: `index.html`, `call-window.html`, `group-call-window.html`.
 
 ## Version / metadata
 
-- Release version and display metadata live in **`app-metadata.json`** (current line: **0.6.1 — Portrait**).
+- Release version and display metadata live in **`app-metadata.json`** (see current version/codename there).
 - `npm run build` runs `scripts/sync-app-metadata.mjs` so `package.json`’s `version` stays in sync.
 - User-facing release notes go in **`CHANGELOG.md`** before tagging.
 

app-metadata.json

@@ -1,6 +1,6 @@
 {
   "displayName": "BLIP",
-  "codename": "Signal Corps",
-  "version": "0.7.7",
+  "codename": "Beacon",
+  "version": "1.1.1",
   "githubUrl": "https://github.com/krwg/BLIP"
 }

build/build-info.json

@@ -0,0 +1,7 @@
+{
+  "issuer": "krwg-official",
+  "version": "1.1.1",
+  "buildTimestamp": 1779656042339,
+  "buildSignature": "cJXNEzz92AxCZXuaCDKRfk2QjeVD1dCMwLHYMMS6KNgBL+MRJJbXdK3VGngmcuH9U9yVG3lBBsHuHlIfBUolBg==",
+  "meshPlusPublicKeyHash": "b91e80f821881373"
+}