Release Java Network Chat 1.6.0

Author: krotname

.github/workflows/release.yml

@@ -11,6 +11,8 @@ permissions:
 jobs:
   release-check:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Checkout
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
@@ -22,4 +24,10 @@ jobs:
       - name: Verify release build
         run: |
           chmod +x ./gradlew
-          ./gradlew check
+          ./gradlew check releaseBundle
+      - name: Upload release assets
+        if: github.event_name == 'release'
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh release upload "${GITHUB_REF_NAME}" build/release/*.zip build/release/checksums.txt build/release/provenance.json --clobber

CHANGELOG.md

@@ -2,6 +2,47 @@
 
 ## Unreleased
 
+## 1.6.0 - 2026-06-12
+
+- Reworked Swing connection flow into a single settings dialog with defaults, cancel, and retry.
+- Added GUI status bar, send button, outgoing message validation, and graceful disconnect on close.
+- Preserved exact connection failure reasons for GUI retry flows.
+- Broadcast text messages back to the sender and include the current user in the initial user list.
+- Resolved console client settings in host/port/user order and fixed EOF handling for piped input.
+- Changed connection close order so closing a client unblocks pending socket reads.
+- Fixed UI smoke coverage to exercise the controller-owned chat window.
+- Wired Gradle `runClient` to standard input for interactive console runs.
+- Added embedded Swing connection panel, last-settings preferences, participant count in the status
+  bar, read-only disconnect state, and reconnect button with a short backoff.
+- Replaced the GUI latest-message slot with a bounded local timeline, service events, copy/select
+  all/clear controls, own-message rendering, and `messageId`-based deduplication.
+- Preserved client `messageId` and timestamp when the server echoes normalized text messages.
+- Added protocol versioning metadata plus room/private message frame types.
+- Added server-managed rooms with default `general`, room creation on join, room-scoped broadcasts,
+  leave events, and private sender/recipient delivery.
+- Added Swing room selection, join/leave controls, optional private recipient input, and room/private
+  timeline rendering.
+- Added integration coverage for room-only delivery, private-only delivery, room join/leave, and
+  explicit protocol errors for unversioned clients.
+- Added optional file-backed JSONL server history with bounded rotation, corrupt-line tolerance, and
+  room replay after restart.
+- Added local GUI timeline search by text, sender, date/timestamp, room, and recipient plus JSON/CSV
+  timeline export.
+- Added tests for history persistence, rotation, corrupt startup data, restart replay, search, and
+  export.
+- Added legacy JSONL history migration for unversioned `TEXT` records.
+- Added optional TLS server/client socket mode through JSSE keystore/truststore configuration.
+- Added optional file-backed token accounts, salted SHA-256 token hashes, `USER`/`ADMIN` roles, and a
+  `createAccount` helper.
+- Added admin `/health` command with private server status responses and structured lifecycle/auth
+  logs.
+- Added Windows release zip packaging plus SHA-256 checksums and local provenance metadata.
+- Updated release workflow to build and upload release artifacts with checksums/provenance.
+- Expanded security documentation with chat threat model, trust boundaries, and deployment
+  recommendations.
+- Fixed a client shutdown race where fast console `exit` could close the socket while the reader
+  thread still used the shared connection reference.
+
 ## 1.1.0
 
 - Added `ChatServerConfig` with server limits and socket timeout settings.

README.en.md

@@ -14,7 +14,12 @@ Network Chat is a Java 21 chat application over TCP sockets with:
 - a resilient server with user handshake and broadcast.
 - a console client.
 - a bot client with date/time commands.
-- a Swing GUI client using MVC style structure.
+- a Swing GUI client with an embedded connection panel, retry/cancel flow, saved last settings,
+  local message timeline, rooms, private messages, and MVC style structure.
+- optional file-backed message history with room replay after server restart.
+- optional TLS mode, token-based accounts with `USER`/`ADMIN` roles, and the admin `/health`
+  command.
+- a Windows release zip with launch scripts, checksums, and provenance metadata.
 - reproducible Gradle build, tests, CI, and quality gates.
 
 ![Swing GUI client](docs/images/gui-client.svg)
@@ -39,14 +44,70 @@ Server and clients can also be run directly with Java by building jars from Grad
 The default server port is `1500`. Programmatic server startup can use `ChatServerConfig` to set the
 port, maximum client count, handshake timeout, and post-handshake read timeout.
 
+To enable file-backed history:
+
+```bash
+./gradlew runServer --args="--port 1500 --history build/chat-history.jsonl"
+```
+
+To enable accounts, first generate rows for `accounts.csv`:
+
+```bash
+./gradlew createAccount --args="alice USER secret" >> build/accounts.csv
+./gradlew createAccount --args="admin ADMIN admin-secret" >> build/accounts.csv
+./gradlew runServer --args="--port 1500 --accounts build/accounts.csv"
+```
+
+Clients send the token through the GUI `Token` field or the `NETWORK_CHAT_TOKEN` environment
+variable. Admin users can send `/health` and receive a private server status response.
+
+To enable TLS, create a Java keystore for the server:
+
+```bash
+keytool -genkeypair -alias network-chat -keyalg RSA -keysize 3072 -validity 365 \
+  -keystore build/network-chat.p12 -storetype PKCS12 -storepass changeit
+./gradlew runServer --args="--port 1500 --tls-keystore build/network-chat.p12 --tls-password changeit"
+```
+
+Clients enable TLS through environment variables:
+
+```powershell
+$env:NETWORK_CHAT_TLS="true"
+$env:NETWORK_CHAT_TRUSTSTORE="build/network-chat.p12"
+$env:NETWORK_CHAT_TRUSTSTORE_PASSWORD="changeit"
+./gradlew runGuiClient
+```
+
+To build a no-Gradle release package for end users:
+
+```bash
+./gradlew releaseBundle
+```
+
+Artifacts are written to `build/release`: the Windows zip, `checksums.txt`, and `provenance.json`.
+
 ## Architecture and protocol
 
 The compact architecture contract is documented in [docs/architecture.md](docs/architecture.md).
 
 - `ChatServer` accepts TCP connections and handles clients in a bounded executor.
 - `ChatConnection` reads and writes one-line UTF-8 JSON frames.
 - `ChatProtocol` serializes `ChatMessage`.
+- `ChatMessage` carries `protocolVersion`; unversioned clients receive an explicit `ERROR`.
 - For `TEXT` messages, `data` contains only raw text and `sender` contains the author.
+- `TEXT` messages are broadcast to every client, including the sender, so users see their own sent
+  messages in the timeline.
+- `ROOM_TEXT` is delivered only to room members; `PRIVATE_TEXT` is delivered only to the sender and
+  recipient.
+- The GUI keeps a bounded local timeline for the current session, renders `USER_ADDED`/`USER_REMOVED`
+  as service events, uses `messageId` for deduplication, and supports search by text, sender,
+  date/timestamp, room, recipient plus JSON/CSV export.
+- When history is enabled, the server stores `ROOM_TEXT`/`PRIVATE_TEXT` frames as JSONL, bounds the
+  history size, migrates legacy unversioned `TEXT` records, and replays recent room messages on
+  join.
+- When accounts are enabled, the server accepts only `USER_NAME` frames with a valid token; roles are
+  used for admin-only commands.
+- TLS is enabled through server configuration and client environment variables.
 - Console and Swing clients format display text such as `alice: hello`.
 - The bot client reads date/time commands from `data` and uses the author from `sender`.
 
@@ -124,8 +185,16 @@ This repository is organized for maintainability:
 - GUI does not render in CI: UI smoke tests skip automatically in headless environments.
 - Client disconnects immediately: check username uniqueness and nickname length (`3..64`, letters, digits, `_`, `-`).
 - Client receives `Server is busy`: the configured `ChatServerConfig.maxClients` limit has been reached.
+- GUI shows `No connection`: check host/port and use the reconnect button; the last entered settings
+  are stored locally.
+- A corrupt line in the history file is skipped during startup; valid history still loads.
+- `Authentication failed`: check the user row in `accounts.csv` and the GUI token field or
+  `NETWORK_CHAT_TOKEN`.
+- TLS trust errors: set `NETWORK_CHAT_TRUSTSTORE` on the client or use a certificate trusted by the
+  JVM.
 
 ## Roadmap
 
-- v1.1.x: stabilize protocol/server lifecycle, expand negative tests, and improve documentation.
-- Later: rooms, message history, TLS, and persistent accounts as separate product-focused phases.
+- v1.6.x: TLS, token accounts, release packaging, and security hardening are implemented in the
+  current line.
+- Later: persistent user profiles and richer administration as separate product-focused phases.

README.md

@@ -19,7 +19,12 @@ Network Chat — это Java 21 приложение для сетевого ч
 - сервер с handshake и рассылкой сообщений;
 - консольный клиент;
 - бот-клиент с командами времени/даты;
-- GUI клиент на Swing с разделением на MVC;
+- GUI клиент на Swing со встроенной панелью подключения, retry/cancel, сохранением последних
+  настроек, локальной лентой сообщений, комнатами, приватными сообщениями и разделением на MVC;
+- опциональная файловая история сообщений с replay последних сообщений комнаты после рестарта;
+- опциональный TLS-режим, token-based accounts с ролями `USER`/`ADMIN` и admin-команда
+  `/health`;
+- Windows release zip с launch scripts, checksums и provenance metadata;
 - воспроизводимая Gradle-сборка, тесты, CI и проверки качества.
 
 ![Swing GUI client](docs/images/gui-client.svg)
@@ -37,14 +42,70 @@ Network Chat — это Java 21 приложение для сетевого ч
 `ChatServerConfig`: он задаёт порт, максимальное число клиентов, timeout handshake и timeout чтения
 после handshake.
 
+Чтобы включить файловую историю:
+
+```bash
+./gradlew runServer --args="--port 1500 --history build/chat-history.jsonl"
+```
+
+Чтобы включить accounts, сначала создайте строку для `accounts.csv`:
+
+```bash
+./gradlew createAccount --args="alice USER secret" >> build/accounts.csv
+./gradlew createAccount --args="admin ADMIN admin-secret" >> build/accounts.csv
+./gradlew runServer --args="--port 1500 --accounts build/accounts.csv"
+```
+
+Клиенты передают token через GUI-поле `Токен` или переменную окружения `NETWORK_CHAT_TOKEN`.
+Admin-пользователь может отправить `/health` и получить приватный ответ со статусом сервера.
+
+Чтобы включить TLS, серверу нужен Java keystore:
+
+```bash
+keytool -genkeypair -alias network-chat -keyalg RSA -keysize 3072 -validity 365 \
+  -keystore build/network-chat.p12 -storetype PKCS12 -storepass changeit
+./gradlew runServer --args="--port 1500 --tls-keystore build/network-chat.p12 --tls-password changeit"
+```
+
+Клиент включает TLS через окружение:
+
+```powershell
+$env:NETWORK_CHAT_TLS="true"
+$env:NETWORK_CHAT_TRUSTSTORE="build/network-chat.p12"
+$env:NETWORK_CHAT_TRUSTSTORE_PASSWORD="changeit"
+./gradlew runGuiClient
+```
+
+Релизный набор без Gradle на машине пользователя собирается командой:
+
+```bash
+./gradlew releaseBundle
+```
+
+Артефакты появятся в `build/release`: Windows zip, `checksums.txt` и `provenance.json`.
+
 ## Архитектура и протокол
 
 Краткий архитектурный контракт описан в [docs/architecture.md](docs/architecture.md).
 
 - `ChatServer` принимает TCP-соединения и обрабатывает клиентов в bounded executor.
 - `ChatConnection` читает и пишет однострочные UTF-8 JSON frames.
 - `ChatProtocol` сериализует `ChatMessage`.
+- `ChatMessage` содержит `protocolVersion`; unversioned клиенты получают явный `ERROR`.
 - Для `TEXT` сообщений `data` содержит только исходный текст, а `sender` содержит автора.
+- `TEXT` сообщения рассылаются всем клиентам, включая отправителя, чтобы пользователь видел своё
+  сообщение в ленте.
+- `ROOM_TEXT` доставляется только участникам комнаты; `PRIVATE_TEXT` доставляется отправителю и
+  адресату.
+- GUI хранит локальную ленту текущей сессии, оформляет `USER_ADDED`/`USER_REMOVED` как service
+  events, использует `messageId` для дедупликации, поддерживает поиск по тексту, автору,
+  дате/timestamp, комнате, адресату и экспорт JSON/CSV.
+- При включённой истории сервер сохраняет `ROOM_TEXT`/`PRIVATE_TEXT` в JSONL, ограничивает размер
+  истории, мигрирует старые unversioned `TEXT` записи и отправляет последние сообщения комнаты при
+  входе.
+- При включённых accounts сервер принимает только `USER_NAME` с корректным token; роли используются
+  для admin-команд.
+- TLS включается конфигурацией сервера и переменными окружения клиента.
 - Console и Swing клиенты сами форматируют отображение вида `alice: hello`.
 - Bot client отвечает на команды времени/даты по `data`, используя автора из `sender`.
 
@@ -75,6 +136,14 @@ Actions Summary для Linux job.
 - GUI не показывает окно в CI: UI smoke тесты автоматически пропускаются в headless окружении.
 - Клиент сразу отключился: проверьте уникальность имени и длину ника (`3..64`, буквы, цифры, `_`, `-`).
 - Клиент получил `Server is busy`: достигнут `maxClients` из `ChatServerConfig`.
+- GUI показывает `Нет соединения`: проверьте адрес/порт и используйте кнопку `Повторить`; последние
+  введённые настройки сохраняются локально.
+- Повреждённая строка в history-файле пропускается при старте; валидная история продолжает
+  загружаться.
+- `Authentication failed`: проверьте строку пользователя в `accounts.csv` и token в GUI или
+  `NETWORK_CHAT_TOKEN`.
+- Ошибка TLS trust: укажите truststore клиента через `NETWORK_CHAT_TRUSTSTORE` или используйте
+  сертификат, которому доверяет JVM.
 
 ## Структура репозитория
 
@@ -95,5 +164,6 @@ Actions Summary для Linux job.
 
 ## Roadmap
 
-- v1.1.x: стабилизация protocol/server lifecycle, расширение негативных тестов, улучшение документации.
-- Позже: комнаты, история сообщений, TLS и персистентные аккаунты отдельными функциональными этапами.
+- v1.6.x: TLS, token accounts, release packaging и security hardening реализованы в текущей линии.
+- Позже: персистентные профили пользователей и расширенное администрирование отдельными
+  функциональными этапами.

SECURITY.md

@@ -24,3 +24,39 @@ The maintainer aims to acknowledge valid reports within 48 hours and provide a r
 ## Scope
 
 This policy applies to application code, protocol handling, server lifecycle code, and CI configuration.
+
+## Threat model
+
+Network Chat is a small self-hosted Java chat, not an end-to-end encrypted messenger.
+
+Protected assets:
+
+- chat message contents in transit when TLS is enabled,
+- account tokens stored only as salted SHA-256 hashes in the optional accounts file,
+- server availability under configured client limits,
+- release artifacts and their checksums/provenance metadata.
+
+Trust boundaries:
+
+- Plain TCP mode is intended only for local development or trusted networks.
+- TLS mode protects the socket transport between client and server, but the server can still read
+  message contents.
+- The accounts file is trusted server configuration; filesystem access to it is administrative
+  access.
+- GUI preferences store host, port, and username only; account tokens are not persisted by the GUI.
+
+Known limitations:
+
+- No end-to-end encryption, federation, device verification, or forward secrecy beyond the selected
+  JSSE TLS configuration.
+- No account lockout, password reset, audit log retention, or persistent profile management.
+- Private messages are server-mediated and are persisted when history is enabled.
+- `NETWORK_CHAT_TLS_TRUST_ALL=true` is a development escape hatch and must not be used for production
+  deployments.
+
+Operational recommendations:
+
+- Enable TLS outside localhost/trusted lab networks.
+- Keep `accounts.csv` readable only by the server operator.
+- Rotate tokens by replacing account-file rows and restarting the server.
+- Publish release zip files together with `checksums.txt` and `provenance.json`.