Ghost FTP 0.99.22 — mandatory Client + Server distribution (Preview)

Previous public release: v0.99.21. Source version and canonical predecessor remain sequential. This release remains Preview, not production-certified.

Implementation

• Extend the existing independent Go ghost-server/, preserving mandatory explicit FTPS, loopback/read-only defaults and non-overwrite upload safeguards. Add a build-injected version command for binary provenance.
• Build a real Windows x64 Ghost FTP Server Portable EXE and a real unsigned Windows x64 NSIS Setup EXE, tested by the existing Windows SCM install/start/stop and NSIS smoke tests.
• Build a real Linux x86_64 server executable, tarball, DEB and RPM, with a hardened systemd unit, dedicated least-privilege ghostftp account provisioning and an installation policy that does not enable/start a server without separately supplied TLS identity and credentials. Uninstallation must preserve external configuration and served data.
• All six standalone server binaries/packages are required at both pre-publication and public post-release gates, along with the current 25 client/source/QA artefacts. Verify package inventories, exact source SHA, checksum manifests, the server binary's embedded version and real release SHA-256 digests. Server CI runs for every PR and every main SHA even when only client code changes.
• Repair verifiably misclassified v0.99.20 and v0.99.21 Preview metadata only after checking their immutable source tag and existing artefacts; do not change, delete or replace their released contents.

Integrated Client + Server premium design (v0.99.22)

• Ghost FTP Server's local Control Center now uses the exact Windows desktop logo SVG, shared premium colors, desktop navigation dimensions and responsive mobile-safe layout.
• The five read-only pages are wired to live server state using the versioned /api/v1/status endpoint (legacy /api/status preserved), with explicit stale-state handling, bearer-token-only access and no browser credential persistence.
• Windows and Linux server binaries inject the canonical build version into both CLI and live status. New source regressions verify cross-platform brand, navigation geometry and API/credential boundaries.
• The server dashboard remains loopback-only; remote administration, full RBAC/SFTP Server, real-device screenshot parity and production signing are not accepted. See synchronization contract.

Release recovery, CLI and standalone Demo

• Repair the Windows-native SHA256 manifest that previously emitted CRLF line endings; the Linux release verifier accepts normalized manifest text while preserving all checksum values and verifying the unmodified binaries. This is the verified root cause of the failed first v0.99.22 publication job.
• Add /ghost-cli as the official distribution front-end for the existing shared Rust CLI engine; build and publish GhostCLI-Windows-x64-v0.99.22.exe and GhostCLI-Linux-x86_64-v0.99.22. FTP, explicit FTPS, SFTP and existing supported cloud operations reuse the desktop client backends; real commands depend on the user's configured authorized profiles.
• Add GhostFTP-Demo-Windows-x64-Portable-v0.99.22.exe, a distinct standalone Windows executable. It embeds a responsive dark Ghost FTP product demo with synthetic saved sites and files, simulated upload/download/cancellation queue, fictional progress and additive sync preview. The demo makes no real file transfers or connections and stores no production credentials.
• Every public edition now requires at least 43 nonempty SHA-256-verified assets, including six Server packages and independent Windows portable/Setup and Linux standalone/tar.gz/DEB/RPM distributions for both Ghost CLI and Ghost FTP Demo. The graphical Ghost FTP Client remains separately distributed. Native Windows Demo self-test, Go race tests, CLI real binary/version smoke and exact-SHA platform gates must pass first.
• Clarify legal terms in EULA.txt and LICENSE.txt, refresh SECURITY.md, docs/legal/PRIVACY.md and cross-platform release documentation. Issue #246 is closed after exact-tag and public Preview metadata verification.

Security and acceptance boundaries

• Server packages are unsigned development Previews. Windows Authenticode, physical OS installation/upgrade testing and independent security sign-off remain outstanding; the Android production bundles are unsigned and the macOS Preview is not Developer ID notarized.
• The server is not a full SFTP server, multi-account RBAC/ACL/quota solution or remotely managed public service. The optional existing loopback dashboard is read-only. This release does not assert completed 75/75 pixel-perfect screens, full platform parity or production readiness.
• Fail closed on missing packages, missing certificate/key/password, invalid checksums or failed exact-source CI. The Linux systemd service is not automatically started or externally exposed.

See Ghost FTP Server, Linux installation guide, CI and release procedure.