TautWeekly for Plex v0.11.0

v0.11.0 introduces the one-click Windows Setup executable and the private local
Manager as the supported Windows setup and administration experience. The
newsletter engine and all existing non-Windows packages remain compatible.

Windows: install once, manage locally

Download TautWeekly-Setup.exe and SHA256SUMS.txt from this release. Verify
the EXE's SHA-256 before running it. This first installer is not code-signed, so
Windows SmartScreen may identify it as an unknown publisher even when its hash
matches the release.

Setup installs for the current Windows account, lets you choose the application
folder, creates Desktop and Start Menu shortcuts, registers an uninstaller, and
opens the Manager on 127.0.0.1. Go, Node.js, Docker, and a separate web server
are not required.

The Manager provides:

• Dashboard health, persistent Config status, last delivery evidence, preview
  status, and owned Task Scheduler state;
• guided configuration with stored-secret preservation and guarded temporary
  reveal;
• automatic safe verification after Validate, save, and verify: active
  Tautulli libraries/users, Tautulli and direct Plex checks, non-sending SMTP
  STARTTLS preflight, and six local preview states when metadata is ready;
• saved library scope and delivery exclusions without exposing raw IDs in the
  primary workflow;
• sandboxed newsletter previews and a separately confirmed six-message test
  delivery restricted to TestEmail;
• typed Task Scheduler Install/Refresh, Enable, Disable, and Remove actions with
  narrow UAC elevation and exact ownership verification;
• optional local password lock, sign-out, reset shortcut, and sanitized local
  diagnostics.

Windows trusted-local mode does not require a first-run pairing token. The
Manager remains bound to loopback and rejects unrecognized hosts. Enabling a
password is optional and is intended for Windows accounts shared with other
people.

Update an existing Setup installation

1. Download the newer TautWeekly-Setup.exe and verify it against this
   release's SHA256SUMS.txt.
2. Run it normally. The folder chooser preselects the registered TautWeekly
   application folder and the confirmation action reads Update.
3. Keep that exact folder selected and approve the update/UAC request.
4. Open the Manager, run Validate, save, and verify, inspect the previews,
   and complete a controlled TestEmail run before the next production send.

Setup serializes the update with newsletter activity, refuses to interrupt a
running send, temporarily preserves the enabled/disabled state of an owned
schedule, creates a private sibling backup, replaces only verified release-owned
files, and rolls back automatically if post-install verification fails.

Migrate an older portable/BAT installation

1. Keep the old extracted TautWeekly folder in its permanent location. Do not
   delete config.json, state, previews, logs, cache, or .manager-data.
2. Download and verify the new TautWeekly-Setup.exe.
3. Run Setup and choose the exact old extracted TautWeekly folder—not its
   parent directory. A valid older release has TautWeekly.ps1,
   RELEASE-METADATA.txt, and RELEASE-FILES.txt; the action reads Migrate.
4. Approve the migration. Setup converts the folder in place and moves legacy
   Manager state to %LOCALAPPDATA%\TautWeekly\data without overwriting a
   conflicting external state file.
5. Open Open TautWeekly Manager, validate and save the existing
   configuration, inspect all six previews, run the guarded TestEmail delivery,
   and install or refresh the weekly schedule from Schedule.

Setup refuses arbitrary non-empty folders and does not search the computer for
an old installation. If a legacy folder lacks a valid release ownership
manifest, retain it as a backup and perform a fresh Setup install, then transfer
only the private configuration/state with care.

The numbered BAT and PowerShell launchers remain in the Windows ZIP for
portable recovery and advanced diagnostics, but Setup and Manager are now the
documented source of truth.

Preservation and removal

Update, migration, and normal uninstall preserve configuration, credentials,
delivery/access state, generated previews, logs, deleted-item cache, custom
assets, Manager history, and backups. Uninstall removes only verified
application-owned files and shortcuts. Remove an owned schedule first, or let
the uninstaller remove it after verifying that it belongs to this installation.

Never publish the installer log, private sibling backup, configuration, tokens,
recipient data, generated newsletters, or viewing history without sanitizing
them.

Validation and remaining risks

Automated gates cover Go tests/vet, embedded JavaScript, accessibility
structure, PowerShell parsing, installer fresh install/update/portable
migration/uninstall, private-data preservation and rollback, release manifests
and checksums, archive reproducibility, and Manager cross-builds for Windows,
Linux, macOS, and FreeBSD on amd64 and arm64. The Windows workflow was also
accepted against real Tautulli, Plex, SMTP, preview generation, six TestEmail
messages, and Task Scheduler install/disable/enable/remove lifecycle.

The Setup executable is currently unsigned. Antivirus reputation and
SmartScreen experience can vary until a future release adds Authenticode code
signing. The Manager is shipped only in the Windows package in v0.11.0; the
cross-platform source/build gates establish compatibility for later native or
container packaging without changing those packages in this release.

Platform baselines

• Windows 1.9.0
• NAS/Docker Portable 1.3.4
• macOS Portable 1.2.4
• Native Linux source baseline 1.1.5
• FreeBSD Podman source baseline 1.1.6

Verify every downloaded artifact against SHA256SUMS.txt.