Astervis Desktop

Fixed

• Softphone provisioning via a loopback HTTP bridge (cross-platform). Replaces the astervis:// deep-link handoff, which was unreliable inside the webview — WKWebView swallowed in-page scheme navigations, WebView2 popped a permission prompt on every fire. The shell now runs a 127.0.0.1-only HTTP server; the admin posts the SIP profile / notifications there (nonce/key gated). Works identically on macOS, Windows and Linux, and under tauri dev.
• Blank, frozen admin window on first server-URL add (Windows). The open_admin_window command built the WebView2 window on a Tauri worker thread; WebView2 windows must be created on the main thread. Defer to the main thread (run_on_main_thread). Also dropped the 1.0.227 on_navigation interceptor (unneeded with the loopback bridge).
• Softphone needed a hard reload after restart. The loopback bridge used a random port each launch, but the admin page caches __ASTERVIS_BRIDGE__, so the cached page posted to a dead port. Use a stable port range (47821–47835).
• astervis://call deep links on Windows/Linux are now handled from the second-instance argv (single-instance forwarding), not just macOS.
• Outbound calls never connected (INVITE auth in the wrong header). The re-INVITE put digest credentials in Proxy-Authorization, but Asterisk challenges INVITE with 401/WWW-Authenticate, which requires Authorization. Asterisk ignored the credentials and re-challenged forever (thousands of INVITEs, call stuck "dialing"). Send the correct header per challenge type, and cap retries. REGISTER was unaffected (already correct).
• Verbose outbound-call logging: dial → INVITE, every INVITE response (auth challenge, 200 answered, 4xx/5xx rejection), plus open_admin enter/built tracing to diagnose the window.