# Twoman 0.6.7

Twoman 0.6.7 is the installer and operations release.

The main result is that a Linux machine can now become the hidden Twoman
server with one command while deploying the public host broker from the same
flow. This release also formalizes optional hidden-side WARP routing for the
setups where the hidden server cannot reach the public host directly.

## Highlights

- Added a one-command Linux installer:
  - deploys the selected public-host backend
  - installs the hidden agent locally with `systemd` and a watchdog
  - validates broker reachability from the real hidden-server path
  - prints the final Twoman import text for Android and desktop clients
  - installs the `twoman` management command
- Added `twoman_control/`:
  - guided interactive install flow
  - saved install state for reconfigure and redeploy
  - non-interactive management commands
  - Textual TUI for verify, logs, restart, redeploy, and config review
- Added optional hidden-server upstream proxy support in the shared transport:
  - designed for WireProxy / WARP or any other local SOCKS or HTTP upstream
  - keeps the upstream-routing decision on the hidden side only
- Added hidden-server local install support and proxy-aware deploy scripts.
- Fixed the intermittent legacy desktop TUI teardown race that was breaking the
  GitHub CI desktop test during shutdown.
- Expanded CI coverage for the installer, transport proxy path, and deploy
  shell scripts.

## Production Notes

- Production `darvazeh` keeps the same public path while allowing the hidden
  side to route through local WireProxy when direct hidden-to-host reachability
  is bad.
- The live camouflage site naming was corrected so the public site no longer
  shows temporary E2E naming.
- This release does not change the core product constraint: the public host
  remains in the live path.
- WARP support is optional and server-side only for this mode. Desktop and
  Android clients do not require WARP.

## Documentation

- `README.md` now leads with the fast installer instead of manual deployment.
- `docs/EASY_DEPLOY.md` covers the interactive flow, the optional WARP route,
  and a non-interactive install example.
- `docs/MANUAL_DEPLOY.md`, `docs/BACKENDS.md`, and `docs/RELEASE_CHECKLIST.md`
  now match the current runtime and release flow.
- `CONTRIBUTING.md` and `SECURITY.md` were added to make the public repository
  easier to work with as an open-source project.
