Add Photos to the always-keep list (KeepPackages) like Calculator - the
default image viewer should not be removed. It stays in the removal list
but the keep-guard skips it and logs KEEP. Updates script header,
CLAUDE.md DO-NOT, web spec table, descriptions.json and CHANGELOG.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Add three GUI feature toggles to the bloatware step:
- standardBloatware (default on) - the bulk AppX/capability/feature list
- removeNewOutlook (default on) - new Outlook for Windows (Microsoft.OutlookForWindows)
- removeSnippingTool (default OFF) - Snipping Tool across all three lists
Each toggle is independent via Test-RemovalAllowed in 01-bloatware.ps1.
Snipping Tool (ScreenSketch + legacy capability/feature) is now kept by
default as a common productivity tool, like Calculator. Classic Outlook from
M365 is a Win32 app and was never touched; only the bundled new Outlook is.
Also fix a latent bug: the Go Config struct had no Bloatware field, so the
GUI's runtime-config regeneration silently dropped bloatware.keepPackages.
Added the field so the keep-list survives to the script.
Docs: SPEC.md, CHANGELOG.md, web/data/descriptions.json, web/spec/index.html.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
BackInfo paints a centered bitmap; when it is smaller than the screen the area
around it shows HKCU\Control Panel\Colors\Background, which was black in profiles
step 04 had not touched. Set the solid background (#223B47) in HKU\.DEFAULT and in
every existing user profile (loading each hive as needed), on top of the Default
hive and current user, so the border around the bitmap blends into the background.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
BackInfo reads BackgroundColor as a Windows COLORREF (0x00BBGGRR / BGR), as its
own header documents. The 0.7 value 2243399 (0x223B47) was therefore read with
red/blue swapped and rendered olive-brown (#473B22 / observed ~#554D39). The
correct COLORREF for #223B47 is 71*65536 + 59*256 + 34 = 4668194 (the original
value). Docs updated to match.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
- CHANGELOG.md: switch to Keep a Changelog versioning ([Unreleased], [0.7], [0.6]).
- web/changelog/: new page that fetches CHANGELOG.md from Forgejo (raw API via the
/forgejo-api proxy) and renders it - single source of truth.
- Add Changelog to the nav on landing, navod and spec pages.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
- spec: Atera row now SYSTEM + /qn + no MFA; taskbar row notes Explorer is
pinned via AUMID to avoid the duplicate-instance / unpinnable bug.
- descriptions.json: update 02 Atera item and 04 taskbar item accordingly.
- navod: drop the obsolete "confirm Atera MFA" warning - it installs silently
under SYSTEM now.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
- spec: document --source winget (msstore cert bypass), Atera service
detection, UCPD stop -> WARN on Win11 24H2, CZ+US keyboard layout,
Network Discovery resource string, clean Windows Update log output, and
the Trusted Signing step in the architecture section.
- descriptions.json: update 02-software (winget source, Atera) and
10-network (Network Discovery resource string); add the keyboard layout
item to 04-default-profile.
- navod + index: note that xetup.exe is now digitally signed (publisher
X9.cz s.r.o.), so SmartScreen/UAC show a verified publisher.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
- Add download link + curl workaround for antivirus blocking
- Note that curl only downloads, xetup + Enter needed to run
- Split preflight checks into separate section with details
- Explain Product Key priority (OA3 > GVLK) and when to fill in
- Document config load/save buttons for per-client presets
- Add adminx9 account explanation (autologon for reboot cycle)
- Warn about Atera MFA popup during SW install
- Note that partial failures don't stop deployment - check summary
- Add troubleshooting section: Deploy.log path + local report.html
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Reflect all changes from d30767e in web documentation:
- Atera /qn -> /qb for MFA window support
- EditionID-based GVLK matching instead of OS caption
- New architecture rows: watchdog, reboot loop protection,
atomic state, email retry, hive unload retry, resume fix
- Corrected Windows Update reboot cycle description (exit 9)
- Winget parallel job timeout documentation
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Main page: add short intro paragraph describing what xetup does.
Spec page:
- Remove steps 05 (personalization) and 06 (scheduled-tasks) - both
scripts were deleted/merged into step 04
- Merge personalization items into step 04 card, retitle to
"Default Profile + Personalizace"
- Fix taskbar note: reference to krok 06 replaced with correct info
- Fix arch build command: add CGO_ENABLED=1, CC=mingw, -s -w flags
- Bump version to 0.5, date to 2026-04-17
- Remove step-05 and step-06 from JS STEP_SCRIPT mapping
descriptions.json:
- Update atera-agent-install: reflect download approach + MFA window
- Remove stale 05-personalization and 06-scheduled-tasks entries
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
heal.sh now:
1. git fetch + reset --hard origin/main when remote is ahead
2. writes web/data/deploy.json (sha + timestamp) after each pull
3. nginx reload if web/ files changed
4. falls back to writing deploy.json on first run if missing
spec/index.html shows deployed commit SHA + timestamp in footer.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
