release: promote v0.5.5 to main

[mohanagy]

Release

Promote exact reviewed development head 11397fc206553864f6e924b5e3b49162d51be0e1 to main for v0.5.5.

Included work

• Console: lead with connections and named accounts #318 / [Product] Make trust controls and multi-account onboarding discoverable #202: task-first returning-user Console that leads with connections and named accounts, shows the durable default and conditional live profile switching, keeps setup reachable, and collapses authentication reference detail.
• release: prepare v0.5.5 #320: finalized v0.5.5 version, lockfile, changelog, docs, and release contracts.
• chore(release): reconcile main ancestry for v0.5.5 #321: ancestry-only reconciliation; its resulting tree exactly preserved reviewed development content.
• Stabilize Windows Node 20 migration contracts without weakening ACL checks #323 / ci: serialize Windows core test files #324: Windows CI runs core test files serially while the generic migration suite uses a local ACL-boundary double; the unchanged dedicated Windows suite continues real PowerShell, SDDL, failure/timeout, and containment integration coverage.

Release gates

• Full local release suite passed under supported Node 24, including test, core, coverage, lint, typecheck, build, CLI smoke, package contents, and installed-package tests.
• Release PR release: prepare v0.5.5 #320 current-head Linux/macOS/Windows/quality/package CI passed.
• Exact post-merge development CI passed: https://github.com/mohanagy/miftah/actions/runs/30606230922
• Ancestry PR chore(release): reconcile main ancestry for v0.5.5 #321 had an independent exact-head review with no findings and passed its exact-head CI.
• ci: serialize Windows core test files #324 exact-head CI passed after an evidence-backed failed-job rerun, including Windows Node 20/22/24, and an independent final review found no remaining issue.
• Current promotion head review and Linux/macOS/Windows/quality/package CI must pass before merge.
• CodeRabbit was rate-limited during release review; that limitation is documented and independent exact-head review is required. Do not interpret a skipped or rate-limited automated status as substantive approval.

Honest validation state

Miftah remains experimental and pre-1.0. External validation remains incomplete under #25, #88, and #202; this release does not claim otherwise.

Publication

After this PR passes current-head review and Linux/macOS/Windows/quality/package CI, merge it to main. Then create GitHub Release v0.5.5 at the exact current main commit. The protected trusted-publishing workflow will publish to npm; no workstation publish or registry token is used.

Release tracking: #319. Close #319 only after GitHub Release, trusted npm publication, provenance, signature audit, and fresh-install verification are complete.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: c8f2bd4d-85c8-4c87-9a0f-6ef433a7e08f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[mohanagy]

Promotion head updated to 11397fc after merging #324/#323. The blocker fix serializes Windows core test files, keeps generic migration transaction contracts isolated from the real ACL boundary, and retains the unchanged dedicated real PowerShell/SDDL/containment integration suite. Exact-head #324 CI and independent review were clean. Promotion remains blocked pending this new head’s complete Linux/macOS/Windows Node 20/22/24, quality, package, and independent promotion review.

[mohanagy]

Exact-head PR CI run 30610391050 completed SUCCESS across Linux/macOS/Windows Node 20/22/24, quality, package, and Verify. The simultaneous push run 30610388403 had two Windows ACL probe timeouts while its Node 24 Windows job and every non-Windows/quality job passed. I am rerunning only those failed push jobs now that the duplicate matrix has completed, at unchanged head 11397fc. No timeout, skip, platform, coverage, ACL, or containment change.

[mohanagy]

Independent final promotion review at exact head 11397fc: CLEAN. PR CI 30610391050 and push CI 30610388403 attempt 2 are both SUCCESS across Linux/macOS/Windows Node 20/22/24, quality/package, and Verify. Updated provenance includes #323/#324. No remaining API/schema/security, containment, version/changelog, or validation-wording finding.