chore: update TronIDE source (9d0007040)

[Redchar1992]

TronIDE v2.3.2

This PR publishes the public-source snapshot of TronIDE v2.3.2 from release commit 9d0007040.

v2.3.2 is the cumulative release: work completed during the earlier v2.3.1 development cycle was merged into this release line and is included in the functionality below.

Git and GitHub workflow

• Adds a complete in-browser Git panel for init, status, stage/unstage, commit, history, branch creation and checkout.
• Detects added, modified and deleted files reactively.
• Warns before switching branches with uncommitted changes and preserves staged/working-tree changes correctly.
• Supports GitHub OAuth connection, clone, fetch, pull, push and explicitly confirmed force-push.
• Keeps GitHub credentials in session memory and removes the retired Settings PAT channel.

AI Assistant

• Expands multi-vendor model support and provides workspace-aware tools for files, compilation, tests, static analysis, deployment, contract calls, Git, workspaces, verification preparation and recorder flows.
• Adds workspace search, paged file reading, precise edits with diff previews, undo safeguards and visible multi-step tool progress.
• Adds secure confirmation gates for file writes and blockchain transactions.
• Keeps API keys in browser memory and rejects clear-text HTTP AI endpoints.

Compiler, editor and workspace

• Falls back to the bundled Solidity 0.8.20 compiler when a remote binary cannot be downloaded.
• Improves slow-network compiler loading, compiler-source validation and stale-error cleanup.
• Adds workspace templates, last-workspace restore and safer clone-failure recovery.
• Adds Prettier formatting with undo support, live Solidity lint annotations, Solidity UML and expanded syntax highlighting.
• Adds browser-compatible editor and file-explorer context menus.

Contract verification

• Lets users select the actual deployable main contract instead of an imported interface.
• Flattens Solidity sources and provides copy/download actions for the .sol file accepted by TronScan.
• Generates verification metadata as a reference checklist while clearly explaining that TronScan verification remains a manual source/settings workflow.

TVM, debugger, analysis and recorder

• Fixes JavaScript VM storage-state visibility and transaction queue ordering.
• Tracks the transaction's originating environment and explains VM vs Injected TronWeb debugging limitations instead of showing a generic receipt error.
• Improves TRON-focused static analysis summaries and imported-library handling.
• Improves deploy recording, replay failure handling and export to runnable TronBox projects.

Security and reliability

• Removes the legacy request dependency and restores the audit test gate after its patch removal.
• Hardens URL handling, iframe/plugin boundaries, Git/GitHub token flow and transaction confirmation messaging.
• Removes the unused React Router runtime and pins patched minimatch, brace-expansion, and valibot paths to clear the production audit gate.
• Pins Axios to exactly 1.18.1 across all workspace importers through the pnpm override.
• Clears the remaining high-severity full dependency scan findings by upgrading PostCSS and brace-expansion while preserving legacy minimatch compatibility.
• Adds and stabilizes regression coverage across Git, AI tools, verification, compiler, debugger, recorder, workspace and security flows.

Validation

• ✅ pnpm audit --prod — no known vulnerabilities
• ✅ pnpm audit --audit-level=high — no high or critical findings
• ✅ pnpm lint:libs
• ✅ pnpm lint:compiler-source
• ✅ pnpm lint:remix-ide-entry
• ✅ pnpm build:prod
• ⏳ GitHub CI reruns automatically for this updated PR

Release guide

The illustrated feature guide is available in TronIDE v2.3.2 功能介绍.

Internal CI/deployment files and private release documentation are intentionally excluded from this public snapshot. Merging this PR publishes the snapshot to main and triggers the GitHub Pages deployment.