feat: added multiple functions.

## Added
- **Widget SDK v2** — `manifest.json` now supports `manifest_version`, `sdk_version`, structured `capabilities`, and `csp`. Legacy v1 manifests are auto-normalized to v2.
- **Widget `local_api_call` enforcement** — widgets can request `local-api:call`; the host issues scoped API tokens and the local API server enforces token scopes across all routes.
- **Widget dev harness** — updated the local widget preview page to handle SDK v2 capabilities and permission simulation.
- **Widget template & migration guide** — upgraded `examples/third-party-widget-template/` to SDK v2 with TypeScript types and `localApiCall` example; added `docs/WIDGET_SDK_v2_MIGRATION.md`.
- **Settings UI for v2.0.0 platform features** — added sections/cards for migration rehearsal/integrity checks, passphrase-protected backups, archive scheduler and compression, profile management, and database encryption.
- **CI quality gates** — added `npm test`, Rust `cargo test`, Tauri build smoke test, offline critical-journey tests, and migration-rehearsal job to `.github/workflows/ci.yml`.
- **Dashboard Insights enhancements** — added saved views, distraction hotspot card, and Apps/Categories/Projects comparison tabs.
- **Focus rule backend integration** — Focus Mode rules now persist in the backend `focus_rules` table with CRUD commands and backend-driven auto start/stop.
- **Profile state isolation** — moved profile metadata and `current_profile_id` into a separate unencrypted `app_state.db` so profile switching remains reliable even when individual profile databases are encrypted.
- **Full Japanese, Korean, French, German, and Spanish localization** — completed frontend translations across all desktop namespaces (`common`, `dashboard`, `widgets`, `settings`, `limits`, `categories`, `goals`, `focus`, `browserUsage`) for `ja`, `ko`, `fr`, `de`, and `es`.
- **Frontend accessibility pass** — added "Skip to main content" link, global `:focus-visible` styles, ARIA live announcer for notifications, navigation landmark labels, `aria-current="page"`, icon-only button labels, dialog roles/modal attributes, and dynamic HTML `lang` updates.
- **Local API server governance** — hardened all API server routes to enforce widget-scoped API token scopes and reject unscoped or revoked tokens.
- **Offline test harness scripts** — added `scripts/offline-journey-tests.sh` and `scripts/migration-rehearsal.sh` for local critical-journey and migration validation.

### Changed

- Consolidated roadmap governance into a single canonical local-first source at `docs/ROADMAP_v2.0.0.md`.
- Archived the parallel roadmap track to avoid split planning ownership and version drift.
- Normalized core desktop release metadata to `2.0.0` across npm, Tauri, and Windows MSIX manifest sources.
- Added advanced Browser Usage date-range exploration with local saved views (custom range, save/apply/delete presets).
- Added Dashboard "what changed" summary card for recent period comparison (top increase/decrease, new/stopped active apps, total delta).
- Added Dashboard "Unified Insight Workspace" narrative panel (daily review, weekly reflection, goal health) powered by local suggestions and anomaly detection.
- Added local notification automation controls in Tracking settings (quiet hours + reminder cooldown) and wired them into all in-app alert dispatches.
- Added Dashboard "Unified Timeline" panel with cross-source feed (desktop focus sessions, browser sessions, interruption markers) and local source/search filters.
- Moved "What Changed" summary, Unified Insight Workspace, and Unified Timeline into a dedicated Dashboard Insights page to reduce homepage density and improve analysis flow.
- Added cross-module drill-down actions from Dashboard summaries/timeline into Categories, Browser Usage, and Focus Mode, with URL-parameter context handoff.
- Fixed interruption marker detail drill-down target: `Open Detail` now routes to a dedicated interruption detail view with hour window, switch count, and fragment score context instead of Focus Mode landing.
- Added a unified Privacy & Permission Center entry in Settings to aggregate local-only boundary, tracking state, API governance, backup, and data health with one-click deep links.
- Added reusable async state cards (loading/empty/error) and applied them to core pages for consistent platform-level UX.
- Expanded async state card adoption to Goals, Dashboard, and Widget Center to reduce duplicated state UI logic.
- Added Focus Mode rule automation panel with local rule management, simulation, and one-click apply-to-start behavior.
- Hardened third-party widget permission enforcement by mapping `settings:write` to runtime channel interception and fixing install-time permission dialog state reset / instance targeting.
- Upgraded Widget permission matrix from read-only audit view to manageable controls with one-click permission revoke.
- Added secondary confirmation and success/failure feedback for widget permission revoke actions to reduce accidental operations.
- Added per-widget permission change timeline (grant/revoke actor + timestamp) for third-party widget governance audits.
- Completed i18n coverage for newly added Widget permission matrix and Browser Usage/Dashboard incremental features across `en` / `zh-CN` / `zh-TW`.

### Fixed

- **Profile switching reliability** — fixed a bug where switching profiles could result in a "connection refused" error or missing profiles because `current_profile_id` was stored inside the encrypted profile database.
- **Widget permission dialog state** — fixed install-time permission dialog state reset and instance targeting so permission grants are correctly associated with the widget being installed.
- **Database encryption shutdown corruption** — fixed a critical bug where shutdown re-encryption generated a fresh nonce/salt but did not update the stored metadata, causing the next startup to fail with "Failed to decrypt database". Re-encryption now writes updated metadata and uses atomic temp-file writes.
- **Database encryption file-lock resilience** — encryption/decryption and plaintext wipe now retry on Windows file locks and fall back to a usable runtime plaintext database if the encrypted backup cannot be decrypted on startup.
- **Database encryption disable flow** — fixed a bug where disabling encryption and restarting could corrupt or overwrite the latest plaintext with a stale encrypted backup. Disabling now preserves the current runtime plaintext and removes encrypted artifacts after verifying the plaintext is valid.
- **Database open retry on restart** — added a short retry loop when opening the profile database during startup to avoid "localhost refused connection" / startup failures caused by Windows file-lock races after `app.restart()`.

Author: PythonSmall-Q

.github/workflows/ci.yml

@@ -2,14 +2,14 @@ name: CI
 
 on:
   push:
-    branches: [main, dev]
+    branches: [master, main, dev]
   pull_request:
-    branches: [main, dev]
+    branches: [master, main, dev]
   workflow_dispatch:
 
 jobs:
   frontend:
-    name: Frontend lint & typecheck
+    name: Frontend lint, typecheck & unit tests
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -29,8 +29,11 @@ jobs:
       - name: Type-check
         run: npm run typecheck
 
+      - name: Unit tests
+        run: npm test
+
   rust:
-    name: Rust check
+    name: Rust check & test
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -58,3 +61,116 @@ jobs:
       - name: Cargo check
         working-directory: src-tauri
         run: cargo check --all-targets
+
+      - name: Cargo test
+        working-directory: src-tauri
+        run: cargo test --lib
+
+  tauri-build:
+    name: Tauri build smoke test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Install system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y \
+            libwebkit2gtk-4.1-dev \
+            libgtk-3-dev \
+            libayatana-appindicator3-dev \
+            librsvg2-dev \
+            libglib2.0-dev \
+            pkg-config \
+            libssl-dev
+
+      - name: Setup Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache Rust dependencies
+        uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: src-tauri
+
+      - name: Build Tauri
+        run: npm run tauri build -- --bundles deb
+        env:
+          CI: true
+
+  offline-critical-journeys:
+    name: Offline critical journey tests
+    runs-on: ubuntu-latest
+    needs: [frontend, rust]
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Install system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y \
+            libwebkit2gtk-4.1-dev \
+            libgtk-3-dev \
+            libayatana-appindicator3-dev \
+            librsvg2-dev \
+            libglib2.0-dev \
+            pkg-config \
+            libssl-dev
+
+      - name: Setup Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache Rust dependencies
+        uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: src-tauri
+
+      - name: Run offline journey tests
+        run: bash scripts/offline-journey-tests.sh
+
+  migration-rehearsal:
+    name: 1.x → 2.0 migration rehearsal
+    runs-on: ubuntu-latest
+    needs: [rust]
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y \
+            libwebkit2gtk-4.1-dev \
+            libgtk-3-dev \
+            libayatana-appindicator3-dev \
+            librsvg2-dev \
+            libglib2.0-dev \
+            pkg-config \
+            libssl-dev
+
+      - name: Setup Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache Rust dependencies
+        uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: src-tauri
+
+      - name: Run migration rehearsal
+        run: bash scripts/migration-rehearsal.sh

CHANGELOG.md

@@ -5,7 +5,7 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ---
 
-## [2.0.0] - 2026-06-06
+## [2.0.0] - 2026-06-12
 
 ### Added
 
@@ -30,6 +30,19 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 - **Category and project comparison** — added `get_category_comparison_in_ranges` and `get_project_comparison_in_ranges` for period-over-period drill-down beyond apps.
 - **Goal risk notifications** — added `evaluate_goal_risks` and a background notifier that emits `goal-risk-alert` events and native notifications when goals are off track.
 - **Backend Focus rule automation** — moved Focus rules from frontend-only `localStorage` to the `focus_rules` table with CRUD commands and a background evaluator that auto starts/stops focus sessions.
+- **Widget SDK v2** — `manifest.json` now supports `manifest_version`, `sdk_version`, structured `capabilities`, and `csp`. Legacy v1 manifests are auto-normalized to v2.
+- **Widget `local_api_call` enforcement** — widgets can request `local-api:call`; the host issues scoped API tokens and the local API server enforces token scopes across all routes.
+- **Widget dev harness** — updated the local widget preview page to handle SDK v2 capabilities and permission simulation.
+- **Widget template & migration guide** — upgraded `examples/third-party-widget-template/` to SDK v2 with TypeScript types and `localApiCall` example; added `docs/WIDGET_SDK_v2_MIGRATION.md`.
+- **Settings UI for v2.0.0 platform features** — added sections/cards for migration rehearsal/integrity checks, passphrase-protected backups, archive scheduler and compression, profile management, and database encryption.
+- **CI quality gates** — added `npm test`, Rust `cargo test`, Tauri build smoke test, offline critical-journey tests, and migration-rehearsal job to `.github/workflows/ci.yml`.
+- **Dashboard Insights enhancements** — added saved views, distraction hotspot card, and Apps/Categories/Projects comparison tabs.
+- **Focus rule backend integration** — Focus Mode rules now persist in the backend `focus_rules` table with CRUD commands and backend-driven auto start/stop.
+- **Profile state isolation** — moved profile metadata and `current_profile_id` into a separate unencrypted `app_state.db` so profile switching remains reliable even when individual profile databases are encrypted.
+- **Full Japanese, Korean, French, German, and Spanish localization** — completed frontend translations across all desktop namespaces (`common`, `dashboard`, `widgets`, `settings`, `limits`, `categories`, `goals`, `focus`, `browserUsage`) for `ja`, `ko`, `fr`, `de`, and `es`.
+- **Frontend accessibility pass** — added "Skip to main content" link, global `:focus-visible` styles, ARIA live announcer for notifications, navigation landmark labels, `aria-current="page"`, icon-only button labels, dialog roles/modal attributes, and dynamic HTML `lang` updates.
+- **Local API server governance** — hardened all API server routes to enforce widget-scoped API token scopes and reject unscoped or revoked tokens.
+- **Offline test harness scripts** — added `scripts/offline-journey-tests.sh` and `scripts/migration-rehearsal.sh` for local critical-journey and migration validation.
 
 ### Changed
 
@@ -54,6 +67,15 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 - Added per-widget permission change timeline (grant/revoke actor + timestamp) for third-party widget governance audits.
 - Completed i18n coverage for newly added Widget permission matrix and Browser Usage/Dashboard incremental features across `en` / `zh-CN` / `zh-TW`.
 
+### Fixed
+
+- **Profile switching reliability** — fixed a bug where switching profiles could result in a "connection refused" error or missing profiles because `current_profile_id` was stored inside the encrypted profile database.
+- **Widget permission dialog state** — fixed install-time permission dialog state reset and instance targeting so permission grants are correctly associated with the widget being installed.
+- **Database encryption shutdown corruption** — fixed a critical bug where shutdown re-encryption generated a fresh nonce/salt but did not update the stored metadata, causing the next startup to fail with "Failed to decrypt database". Re-encryption now writes updated metadata and uses atomic temp-file writes.
+- **Database encryption file-lock resilience** — encryption/decryption and plaintext wipe now retry on Windows file locks and fall back to a usable runtime plaintext database if the encrypted backup cannot be decrypted on startup.
+- **Database encryption disable flow** — fixed a bug where disabling encryption and restarting could corrupt or overwrite the latest plaintext with a stale encrypted backup. Disabling now preserves the current runtime plaintext and removes encrypted artifacts after verifying the plaintext is valid.
+- **Database open retry on restart** — added a short retry loop when opening the profile database during startup to avoid "localhost refused connection" / startup failures caused by Windows file-lock races after `app.restart()`.
+
 ## [1.4.4] - 2026-06-06
 
 ### Added

docs/ROADMAP_v2.0.0.md

@@ -1,6 +1,6 @@
 # TimeLens Roadmap to v2.0.0 (Local-First)
 
-Last updated: 2026-06-06
+Last updated: 2026-06-12
 
 ## Canonical Source
 
@@ -248,7 +248,7 @@ Target window: 2027 Q1
 - Full end-to-end offline scenario testing across dashboard, widgets, backup, restore, and extension integration.
 - Security checklist verification for local storage, permission boundaries, and API exposure.
 - Long-run stability tests (multi-day local logging workload).
-- Accessibility checks for keyboard navigation and screen reader critical flows.
+- Accessibility checks for keyboard navigation and screen reader critical flows. *(Basic pass completed: skip link, focus-visible styles, ARIA live announcer, dialog roles, dynamic `lang`, landmark labels.)*
 
 ### Release Gates (Must Pass)