[PukerWonderLand]

Summary

• add byte-offset incremental JSONL indexing and SQLite rollups for active sessions
• add an idempotent Windows installer, current-user scheduled-task supervisor, Private/LocalSubnet firewall setup, and existing Codex notify-chain preservation
• add Windows CI, deployment smoke checks, bilingual deployment and rollback documentation, and release metadata for 0.2.0

Validation

• npm run ci: 77 passed, 1 Windows symlink test skipped, 0 failed
• PowerShell ScriptOnly/WhatIf installation and uninstall checks passed with no writes
• real scheduled-task restart recovery restored HTTP 200 in 3.23 seconds
• remote host on the target LAN returned HTTP 200 for both the dashboard and API
• a real Codex completed-turn hook updated the snapshot; replaying the same turn left offset, parser state, and event count unchanged

Security

• firewall scope is Private profile plus LocalSubnet only
• the deployment does not read auth.json
• no local payload logs, SQLite databases, session archives, credentials, machine-specific paths, or test-host details are included