[pull] master from microsoft:master

Tools/ManualValidation/ManualValidationPipeline.cs

@@ -3979,24 +3979,24 @@ public void AddValidationData(string PackageIdentifier,string gitHubUserName = "
 		//Extend/reference CredWriteW as CredWrite.
 
 		[DllImport("Advapi32.dll", SetLastError = true, EntryPoint = "CredFree", CharSet = CharSet.Unicode)]
-		private static extern bool CredRelease([In] IntPtr credentialPtr);
-		//Extend/reference CredFree as CredWrite.
+		private static extern void CredRelease([In] IntPtr credentialPtr);
+		//Extend/reference CredFree as CredRelease.
 
 		public static Credential GetUserCredential(string target) {
 			CredentialMem credMem;
 			IntPtr credPtr;
 			if (CredRead(target, 1, 0, out credPtr)) { //If found, returns true and adds to credPtr, else false and error. 
-				credMem = Marshal.PtrToStructure<CredentialMem>(credPtr); 
-				//"Marshals data from an unmanaged block of memory to a newly allocated managed object of the type specified by a generic type parameter."
-				byte[] passwordBytes = new byte[credMem.credentialBlobSize]; //Make a new byte array passwordBytes of size credentialBlobSize.
-				Marshal.Copy(credMem.credentialBlob, passwordBytes, 0, credMem.credentialBlobSize); 
-				//Copies data from an unmanaged memory pointer to a managed 8-bit unsigned integer array.
-				//
-				Credential cred = new Credential(credMem.targetName, credMem.userName, Encoding.Unicode.GetString(passwordBytes)); //Make a new Credential object cred.
-				//Original example doesn't include these:
-				CredRelease(credPtr);
-				CredRelease(credMem.credentialBlob);
-				return cred;
+				try {
+					credMem = Marshal.PtrToStructure<CredentialMem>(credPtr);
+					//"Marshals data from an unmanaged block of memory to a newly allocated managed object of the type specified by a generic type parameter."
+					byte[] passwordBytes = new byte[credMem.credentialBlobSize]; //Make a new byte array passwordBytes of size credentialBlobSize.
+					Marshal.Copy(credMem.credentialBlob, passwordBytes, 0, credMem.credentialBlobSize);
+					//Copies data from an unmanaged memory pointer to a managed 8-bit unsigned integer array.
+					return new Credential(credMem.targetName, credMem.userName, Encoding.Unicode.GetString(passwordBytes)); //Make a new Credential object cred.
+				} finally {
+					//credentialBlob is an interior pointer into credPtr; free the buffer once via CredFree.
+					if (credPtr != IntPtr.Zero) { CredRelease(credPtr); }
+				}
 			} else {
 				throw new Exception("Failed to retrieve credentials");
 			}
@@ -4014,11 +4014,14 @@ public static void SetUserCredential(string target, string userName, string pass
 			userCredential.credentialBlobSize = (int)bpassword.Length;
 			userCredential.credentialBlob = Marshal.StringToCoTaskMemUni(password);
 			//If write fails, emit last error. 
-			if (!CredWrite(ref userCredential, 0)) {
-				throw new System.ComponentModel.Win32Exception(Marshal.GetLastWin32Error());
+			try {
+				if (!CredWrite(ref userCredential, 0)) {
+					throw new System.ComponentModel.Win32Exception(Marshal.GetLastWin32Error());
+				}
+			} finally {
+				//Match StringToCoTaskMemUni allocation with FreeCoTaskMem.
+				Marshal.FreeCoTaskMem(userCredential.credentialBlob);
 			}
-			//Original example doesn't include this. Was going to use FreeCoTaskMem as recommended, but this gave an error. 
-			Marshal.FreeCoTaskMem(userCredential.credentialBlob);
 		}
 
 		[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]

Tools/ManualValidation/ManualValidationPipeline.ps1

@@ -7431,21 +7431,25 @@ namespace CredManager {
 		private static extern bool CredRead(string target, int type, int reservedFlag, out IntPtr credentialPtr);
 		//Extend/reference CredReadW as CredRead.
 
+		[DllImport("Advapi32.dll", SetLastError = true, EntryPoint = "CredFree", CharSet = CharSet.Unicode)]
+		private static extern void CredRelease([In] IntPtr credentialPtr);
+		//Extend/reference CredFree as CredRelease.
+
 		public static Credential GetUserCredential(string target) {
 			CredentialMem credMem;
 			IntPtr credPtr;
 			if (CredRead(target, 1, 0, out credPtr)) { //If found, returns true and adds to credPtr, else false and error. 
-				credMem = Marshal.PtrToStructure<CredentialMem>(credPtr); 
-				//"Marshals data from an unmanaged block of memory to a newly allocated managed object of the type specified by a generic type parameter."
-				byte[] passwordBytes = new byte[credMem.credentialBlobSize]; //Make a new byte array passwordBytes of size credentialBlobSize.
-				Marshal.Copy(credMem.credentialBlob, passwordBytes, 0, credMem.credentialBlobSize); 
-				//Copies data from an unmanaged memory pointer to a managed 8-bit unsigned integer array.
-				//
-				Credential cred = new Credential(credMem.targetName, credMem.userName, Encoding.Unicode.GetString(passwordBytes)); //Make a new Credential object cred.
-				//Original example doesn't include these:
-				Marshal.FreeHGlobal(credPtr);
-				Marshal.FreeHGlobal(credMem.credentialBlob);
-				return cred;
+				try {
+					credMem = Marshal.PtrToStructure<CredentialMem>(credPtr);
+					//"Marshals data from an unmanaged block of memory to a newly allocated managed object of the type specified by a generic type parameter."
+					byte[] passwordBytes = new byte[credMem.credentialBlobSize]; //Make a new byte array passwordBytes of size credentialBlobSize.
+					Marshal.Copy(credMem.credentialBlob, passwordBytes, 0, credMem.credentialBlobSize);
+					//Copies data from an unmanaged memory pointer to a managed 8-bit unsigned integer array.
+					return new Credential(credMem.targetName, credMem.userName, Encoding.Unicode.GetString(passwordBytes)); //Make a new Credential object cred.
+				} finally {
+					//credentialBlob is an interior pointer into credPtr; free the buffer once via CredFree.
+					if (credPtr != IntPtr.Zero) { CredRelease(credPtr); }
+				}
 			} else {
 				throw new Exception("Failed to retrieve credentials");
 			}
@@ -7467,11 +7471,14 @@ namespace CredManager {
 			userCredential.credentialBlobSize = (int)bpassword.Length;
 			userCredential.credentialBlob = Marshal.StringToCoTaskMemUni(password);
 			//If write fails, emit last error. 
-			if (!CredWrite(ref userCredential, 0)) {
-				throw new System.ComponentModel.Win32Exception(Marshal.GetLastWin32Error());
+			try {
+				if (!CredWrite(ref userCredential, 0)) {
+					throw new System.ComponentModel.Win32Exception(Marshal.GetLastWin32Error());
+				}
+			} finally {
+				//Match StringToCoTaskMemUni allocation with FreeCoTaskMem.
+				Marshal.FreeCoTaskMem(userCredential.credentialBlob);
 			}
-			//Original example doesn't include this. Was going to use FreeCoTaskMem as recommended, but this gave an error. 
-			Marshal.FreeHGlobal(userCredential.credentialBlob);
 		}
 	}
 }

manifests/a/AFAS/ProfitCommunicationCenter/8/2.9.1400.800/AFAS.ProfitCommunicationCenter.8.installer.yaml

@@ -0,0 +1,77 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.installer.1.12.0.schema.json
+
+PackageIdentifier: AFAS.ProfitCommunicationCenter.8
+PackageVersion: 2.9.1400.800
+InstallerType: exe
+Scope: machine
+InstallModes:
+- interactive
+- silent
+- silentWithProgress
+InstallerSwitches:
+  Silent: /S /V/quiet /V/norestart
+  SilentWithProgress: /S /V/passive /V/norestart
+  InstallLocation: /V"INSTALLDIR=""<INSTALLPATH>"""
+  Log: /V"/log ""<LOGPATH>"""
+ExpectedReturnCodes:
+- InstallerReturnCode: -1
+  ReturnResponse: cancelledByUser
+- InstallerReturnCode: 1
+  ReturnResponse: invalidParameter
+- InstallerReturnCode: 1150
+  ReturnResponse: systemNotSupported
+- InstallerReturnCode: 1201
+  ReturnResponse: diskFull
+- InstallerReturnCode: 1203
+  ReturnResponse: invalidParameter
+- InstallerReturnCode: 1601
+  ReturnResponse: contactSupport
+- InstallerReturnCode: 1602
+  ReturnResponse: cancelledByUser
+- InstallerReturnCode: 1618
+  ReturnResponse: installInProgress
+- InstallerReturnCode: 1623
+  ReturnResponse: systemNotSupported
+- InstallerReturnCode: 1625
+  ReturnResponse: blockedByPolicy
+- InstallerReturnCode: 1628
+  ReturnResponse: invalidParameter
+- InstallerReturnCode: 1633
+  ReturnResponse: systemNotSupported
+- InstallerReturnCode: 1638
+  ReturnResponse: alreadyInstalled
+- InstallerReturnCode: 1639
+  ReturnResponse: invalidParameter
+- InstallerReturnCode: 1640
+  ReturnResponse: blockedByPolicy
+- InstallerReturnCode: 1641
+  ReturnResponse: rebootInitiated
+- InstallerReturnCode: 1643
+  ReturnResponse: blockedByPolicy
+- InstallerReturnCode: 1644
+  ReturnResponse: blockedByPolicy
+- InstallerReturnCode: 1649
+  ReturnResponse: blockedByPolicy
+- InstallerReturnCode: 1650
+  ReturnResponse: invalidParameter
+- InstallerReturnCode: 1654
+  ReturnResponse: systemNotSupported
+- InstallerReturnCode: 3010
+  ReturnResponse: rebootRequiredToFinish
+UpgradeBehavior: install
+FileExtensions:
+- cvpdf
+- poci
+- ptaxrep
+ProductCode: '{99364302-b74f-48e3-80f4-8e40984a1f9c}'
+AppsAndFeaturesEntries:
+- UpgradeCode: '{8AF6210B-6233-410C-B1CA-1534B7FD0266}'
+  InstallerType: msi
+ElevationRequirement: elevationRequired
+Installers:
+- Architecture: x64
+  InstallerUrl: https://profitdownload.afas.nl/download/PCC/PccSetup8.00.exe
+  InstallerSha256: F9B9DEF508975E7776A333883466B7CDF7598DB61AF891CA881543A4A33E3281
+ManifestType: installer
+ManifestVersion: 1.12.0

manifests/a/AFAS/ProfitCommunicationCenter/8/2.9.1400.800/AFAS.ProfitCommunicationCenter.8.locale.en-US.yaml

@@ -0,0 +1,19 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.defaultLocale.1.12.0.schema.json
+
+PackageIdentifier: AFAS.ProfitCommunicationCenter.8
+PackageVersion: 2.9.1400.800
+PackageLocale: en-US
+Publisher: AFAS Software
+PublisherUrl: https://www.afas.nl/
+PublisherSupportUrl: https://help.afas.nl/
+PrivacyUrl: https://www.afas.nl/privacy-statement
+Author: AFAS Software B.V.
+PackageName: Profit Communication Center 8
+PackageUrl: https://klant.afas.nl/update-center/downloads
+License: Proprietary
+Copyright: Copyright (C) AFAS Software B.V. 1998-2026
+ShortDescription: |
+  The Profit Communication Center (PCC) is a link between Profit and your local Microsoft Office. This allows you to easily submit, open, and edit files on your local computer within Profit.
+ManifestType: defaultLocale
+ManifestVersion: 1.12.0

manifests/a/AFAS/ProfitCommunicationCenter/8/2.9.1400.800/AFAS.ProfitCommunicationCenter.8.locale.zh-CN.yaml

@@ -0,0 +1,11 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.locale.1.12.0.schema.json
+
+PackageIdentifier: AFAS.ProfitCommunicationCenter.8
+PackageVersion: 2.9.1400.800
+PackageLocale: zh-CN
+License: 专有软件
+ShortDescription: |
+  Profit Communication Center（PCC）是 Profit 与本地 Microsoft Office 之间的桥梁。通过它，您可以轻松 地在本地计算机上向 Profit 提交、打开和编辑文件。
+ManifestType: locale
+ManifestVersion: 1.12.0

manifests/a/AFAS/ProfitCommunicationCenter/8/2.9.1400.800/AFAS.ProfitCommunicationCenter.8.yaml

@@ -0,0 +1,8 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.version.1.12.0.schema.json
+
+PackageIdentifier: AFAS.ProfitCommunicationCenter.8
+PackageVersion: 2.9.1400.800
+DefaultLocale: en-US
+ManifestType: version
+ManifestVersion: 1.12.0

manifests/a/AQBot/AQBot/0.0.100/AQBot.AQBot.installer.yaml

@@ -0,0 +1,44 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.installer.1.12.0.schema.json
+
+PackageIdentifier: AQBot.AQBot
+PackageVersion: 0.0.100
+UpgradeBehavior: install
+Protocols:
+- aqbot
+ReleaseDate: 2026-07-14
+Installers:
+- Architecture: x64
+  InstallerType: nullsoft
+  Scope: user
+  InstallerUrl: https://github.com/AQBot-Desktop/AQBot/releases/download/v0.0.100/AQBot_0.0.100_x64-setup.exe
+  InstallerSha256: 00C78A7932E8C61723CAE3B921F9373D4F0A1816B519B6BD4102AAF0BD8C48FC
+  ProductCode: AQBot
+- Architecture: arm64
+  InstallerType: nullsoft
+  Scope: user
+  InstallerUrl: https://github.com/AQBot-Desktop/AQBot/releases/download/v0.0.100/AQBot_0.0.100_arm64-setup.exe
+  InstallerSha256: 08946EA8897CB0D3F829C225F0DBD1D30F5B0A52055A1E7273D0243A48CB310B
+  ProductCode: AQBot
+- Architecture: x64
+  InstallerType: wix
+  Scope: machine
+  InstallerUrl: https://github.com/AQBot-Desktop/AQBot/releases/download/v0.0.100/AQBot_0.0.100_x64_en-US.msi
+  InstallerSha256: AC4C09FAAF83660434716E9BB929F327C2D39909E2614DD8BBF29400346BDD87
+  InstallerSwitches:
+    InstallLocation: INSTALLDIR="<INSTALLPATH>"
+  ProductCode: '{06029508-290C-4672-9FD3-6603E032EA56}'
+  AppsAndFeaturesEntries:
+  - UpgradeCode: '{8BDD0169-05DB-5D77-8787-A6DEA286F0C6}'
+- Architecture: arm64
+  InstallerType: wix
+  Scope: machine
+  InstallerUrl: https://github.com/AQBot-Desktop/AQBot/releases/download/v0.0.100/AQBot_0.0.100_arm64_en-US.msi
+  InstallerSha256: 619A5223609ABBDF00A3D7A17FE3C2E9F85088BCA9AF8FDBF15589F2B0B654E7
+  InstallerSwitches:
+    InstallLocation: INSTALLDIR="<INSTALLPATH>"
+  ProductCode: '{72D477C9-B039-48AC-962F-D0C6755DB4F7}'
+  AppsAndFeaturesEntries:
+  - UpgradeCode: '{8BDD0169-05DB-5D77-8787-A6DEA286F0C6}'
+ManifestType: installer
+ManifestVersion: 1.12.0

manifests/a/AQBot/AQBot/0.0.100/AQBot.AQBot.locale.en-US.yaml

@@ -0,0 +1,74 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.locale.1.12.0.schema.json
+
+PackageIdentifier: AQBot.AQBot
+PackageVersion: 0.0.100
+PackageLocale: en-US
+ShortDescription: ☁️ Lightweight, high-performance cross-platform AI chat + AI gateway desktop client
+Description: |-
+  ☁️ Lightweight, high-performance cross-platform AI chat + AI gateway desktop client
+
+  Features
+  Chat and Models
+  - Multi-provider support — Compatible with all OpenAI-compatible APIs including OpenAI, Anthropic Claude, Google Gemini, etc.
+  - Model management — Supports remote fetching of model lists and custom parameters (temperature, max tokens, top-p, etc.)
+  - Multi-key round-robin — Configure multiple API keys per provider; automatically rotates to distribute rate-limit pressure
+  - Streaming output — Real-time token-by-token rendering; thinking blocks can be folded or expanded
+  - Message versions — Each response supports multiple versions for easy comparison of different models or parameter settings
+  - Conversation branching — Create new branches from any message node, enabling side-by-side branch comparisons
+  - Conversation management — Supports pinning, archiving, time-based grouping, and batch operations
+  - Conversation compression — Automatically compresses long conversations, preserving key information to save context space
+  - Multi-model same query — Ask the same question to multiple models simultaneously, with support for comparative analysis of responses
+  AI Agent
+  - Agent mode — Switch to Agent mode, allowing AI to autonomously perform multi-step tasks: reading/writing files, running commands, code analysis, etc.
+  - Three-tier permissions — Default mode (edits require approval), accept edits (automatically approve changes), full access (no prompts), ensuring secure and controlled operation
+  - Workspace sandbox — Agent operations strictly confined to designated workspace directory, preventing unauthorized access
+  - Tool approval panel — Real-time display of tool invocation requests, supporting per-item review, one-click always allow or deny
+  - Cost tracking — Real-time token usage and cost statistics for each session
+  Content Rendering
+  - Markdown rendering — Full support for syntax highlighting, LaTeX math formulas, tables, and task lists
+  - Monaco code editor — Embedded Monaco Editor in code blocks, supporting syntax highlighting, copy, and diff preview
+  - Chart rendering — Built-in Mermaid flowchart and D2 architecture diagram rendering
+  - Artifact panel — Preview code snippets, HTML drafts, Markdown notes, reports in isolated panels
+  - Real-time voice chat — (Coming soon) WebRTC-based real-time voice, compatible with OpenAI Realtime API
+  Search and Knowledge
+  - Web search — Integrated with Tavily, Zhipu WebSearch, Bocha, etc., with search results annotated with source references
+  - Local knowledge base (RAG) — Supports multiple knowledge bases; upload documents to automatically parse, segment, and build indexes, then semantically retrieve relevant passages during chat
+  - Memory system — Supports multi-namespace conversation memory; entries can be manually added or automatically extracted by AI (AI auto-extraction coming soon)
+  - Context management — Flexibly attach files, search results, knowledge base snippets, memory entries, and tool outputs
+  Tools and Extensions
+  - MCP protocol — Fully implements Model Context Protocol, supporting both stdio and HTTP transport methods
+  - Built-in tools — Includes ready-to-use built-in MCP tools such as @aqbot/fetch
+  - Tool execution panel — Visual display of tool invocation requests and return results
+  API Gateway
+  - Local API gateway — Built-in local API server with native OpenAI-compatible, Claude, Gemini interfaces; can serve as backend for any compatible client
+  - API key management — Generate, revoke, enable, or disable access keys with descriptive notes
+  - Usage statistics — Analyze request volume and token usage by key, provider, and date
+  - SSL/TLS support — Built-in self-signed certificate generation, also supports mounting custom certificates
+  - Request logs — Fully record all API requests and responses passing through the gateway
+  - Configuration templates — Pre-configured integration templates for common CLI tools like Claude, Codex, OpenCode, Gemini
+  Data and Security
+  - AES-256 encryption — Sensitive data such as API keys are encrypted and stored locally using AES-256; master key has file permission 0600
+  - Data directory isolation — Application state stored in ~/.aqbot/, user files in ~/Documents/aqbot/
+  - Automatic backup — Supports scheduled automatic backups to local directories or WebDAV storage
+  - Backup recovery — One-click restore full data from historical backups
+  - Chat export — Export conversations as PNG screenshots, Markdown, plain text, or JSON format
+  Desktop Experience
+  - Theme switching — Dark/light themes,可 follow system preference or be manually set
+  - Interface language — Fully supports Simplified Chinese, Traditional Chinese, English, Japanese, Korean, French, German, Spanish, Russian, Hindi, and Arabic; switch anytime in settings
+  - System tray — Minimizes to system tray on window close, without interrupting background services
+  - Always on top — Keep main window permanently on top
+  - Global shortcuts — Customizable global hotkeys to summon the main window at any time
+  - Auto-start on boot — Option to launch automatically with the system
+  - Proxy support — Supports HTTP and SOCKS5 proxy configurations
+  - Auto-update — Automatically checks for new versions on startup and prompts to update
+Tags:
+- ai
+- chatbot
+- large-language-model
+- llm
+Documentations:
+- DocumentLabel: Docs
+  DocumentUrl: https://app.aqbot.top/guide/getting-started
+ManifestType: locale
+ManifestVersion: 1.12.0