NetExperts Support and Advanced Support 1.5.3 — 26 October 2026

Regression surface / required changes:
- res/msi/CustomActions/CustomActions.cpp/.def and StaffAccess.wxs: each install
  starts Yes. The UI choice, or explicit CHOSEN=1 VALUE=N unattended selection,
  is the only way an installation saves No. Quiet installs also apply the value.
- src/platform/windows.rs: the native installer likewise starts Yes and applies
  Yes when no staff-access-no argument was supplied in this installation.
- src/staff_access.rs: macOS installation dialog always recommends Yes. Linux
  setup starts Yes and correctly verifies Yes even when default purification
  omits it from TOML. The root setter applies the new installation choice.
  Portable upgrades use the existing confirmation option for this release only,
  defaulting to Yes before offering a new setup choice.
- src/platform/macos.rs: installing service plists applies Yes, including when
  an older automatic updater invokes the new application's installation command.
- flutter/lib/desktop/widgets/linux_staff_access_setup.dart: first-run prompt
  starts Yes, ignoring imported No; an explicit No still saves normally.
- libs/hbb_common/src/config.rs: Inbound defaults to password-click, enabling
  existing recipient OK/Cancel controls and local approval as well as passwords.
  A deliberately configured password-only approval mode remains password-only.
- Linux DEB/RPM/AUR lifecycle scripts apply Yes on every installation unless
  that installation explicitly supplies NX_STAFF_ACCESS=N. Backups precede changes.
- Cargo.toml/Cargo.lock, Flutter pubspec and generated versions: 1.5.3+71.

Unchanged authentication/transport paths:
The staff verifier, displayed/permanent password verifier, and encrypted relay
identity checks are unchanged. 1.5.2 direct-handshake timeout/automatic relay
fallback is retained. No master credential is embedded. UI acceptance uses the
existing recipient login response; it does not automatically approve a request.

Acceptance invokes real MSI custom actions, exercises installation over prior No,
checks Linux setup save results, and uses real recipient approval and password
connections. Platform builds, signatures, source manifests and final results are
retained with this release. Preserved 1.4.8 tools/source and prior releases remain.
