Split the project into Lanework and Lanework Pro targets

Two app targets from one source tree — no build flags, no #if in
shared code: an edition difference is a file one target compiles and
the other does not. Base keeps everything it had (dev.rzen.indie.Kanban,
minimal entitlements, AppIcon); KanbanPro compiles the same sources
plus the reserved KanbanPro/ root (Git/, Remote/, Auth/ land with
pro-m1 — libgit2 deliberately not added yet), adds network-client and
its keychain group, and hand-writes its Info.plist with the UTI block
verbatim — base exports the type, Pro imports it, one format either
app opens. The unit-test sources compile twice, once per host, with
Pro's module aliased so 56 test files keep @testable import Kanban
unchanged; scheme Kanban stays the muscle-memory command and
LaneworkPro joins it. InertGitTests pins the base posture with bytes
and mtimes — a full editing session over boards carrying realistic
.git trees at root and nested in a card leaves all twelve entries
untouched, and moves and copies carry them verbatim.
scripts/verify-editions.sh proves the rest: 26 checks over signatures,
symbols, entitlements, identity, and the shared UTI, discounting
Xcode's test-host exceptions by name rather than silently.

Claude-Session: https://claude.ai/code/session_01SR4XGjmBE16ZUYWpfFHXwY
This commit is contained in:
2026-07-28 13:15:06 -04:00
parent 06ee59e24b
commit f37892c9a9
20 changed files with 898 additions and 5 deletions
@@ -0,0 +1 @@
{"colors":[{"idiom":"universal"}],"info":{"version":1,"author":"xcode"}}
@@ -0,0 +1,68 @@
{
"images": [
{
"filename": "icon-mac-16.png",
"idiom": "mac",
"size": "16x16",
"scale": "1x"
},
{
"filename": "[email protected]",
"idiom": "mac",
"size": "16x16",
"scale": "2x"
},
{
"filename": "icon-mac-32.png",
"idiom": "mac",
"size": "32x32",
"scale": "1x"
},
{
"filename": "[email protected]",
"idiom": "mac",
"size": "32x32",
"scale": "2x"
},
{
"filename": "icon-mac-128.png",
"idiom": "mac",
"size": "128x128",
"scale": "1x"
},
{
"filename": "[email protected]",
"idiom": "mac",
"size": "128x128",
"scale": "2x"
},
{
"filename": "icon-mac-256.png",
"idiom": "mac",
"size": "256x256",
"scale": "1x"
},
{
"filename": "[email protected]",
"idiom": "mac",
"size": "256x256",
"scale": "2x"
},
{
"filename": "icon-mac-512.png",
"idiom": "mac",
"size": "512x512",
"scale": "1x"
},
{
"filename": "[email protected]",
"idiom": "mac",
"size": "512x512",
"scale": "2x"
}
],
"info": {
"author": "xcode",
"version": 1
}
}
Binary file not shown.

After

Width:  |  Height:  |  Size: 3.3 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 8.3 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 512 B

Binary file not shown.

After

Width:  |  Height:  |  Size: 911 B

Binary file not shown.

After

Width:  |  Height:  |  Size: 8.3 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 32 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 911 B

Binary file not shown.

After

Width:  |  Height:  |  Size: 1.6 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 32 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 538 KiB

+1
View File
@@ -0,0 +1 @@
{"info":{"version":1,"author":"xcode"}}
+36
View File
@@ -0,0 +1,36 @@
import Foundation
/// **Pro's source root.** This directory and this file's presence in it *is* the edition
/// split (12-editions.md Targets): the `Kanban` target compiles `Kanban/` alone, the
/// `KanbanPro` target compiles `Kanban/` **plus** `KanbanPro/`. Nothing in the shared tree is
/// `#if`-ed on an edition, because "the editions differ at the binary level" (12) is only true if
/// the difference is a file one target builds and the other does not.
///
/// **What lands here, and when.** Nothing yet this is a reserved root, split out ahead of the
/// code so pro-m1 is a set of new files rather than a second pass over the project structure:
///
/// - `KanbanPro/Git/` the git `HistoryProviding` implementation (06-history-undo.md: undo as
/// forward restore commits over HEAD's first-parent ancestry), init/adoption, branches, commit
/// identity, repository hygiene. Brings the libgit2 dependency with it; the base target must
/// never gain one, which `scripts/verify-editions.sh` checks against the signed binary.
/// - `KanbanPro/Remote/` pull/push, push-on-commit (07-sync-collab.md). The
/// `com.apple.security.network.client` entitlement Pro already carries is for this, and base's
/// lack of it is the other half of what the verification script checks.
/// - `KanbanPro/Auth/` remote credentials over the declared keychain access group
/// (07 Auth: Keychain, SSH, TOFU).
///
/// **What does not land here**: anything the edition matrix marks for all three editions. The
/// board experience, agent attribution and accessibility are shared code and stay in `Kanban/`.
///
/// The type itself is a namespace, not state the composition root that picks a
/// `HistoryProviding` per edition arrives with the providers it chooses between (base's native
/// stack in m8-native-undo, Pro's git stack in pro-m1), and inventing a seam here before either
/// exists would be guessing at its shape.
enum ProEdition {
/// The edition's own bundle identifier (12 Targets, ruled 2026-07-27: base keeps
/// `dev.rzen.indie.Kanban`, Pro mints its own). Stated as a constant so the value has one
/// home in Pro-only code; the running app reads its identity from `Bundle.main`, which is
/// already how the App Support directory is per-edition without a line of edition code
/// (`BoardRegistry`, `ClipboardStore`).
static let bundleIdentifier = "dev.rzen.indie.KanbanPro"
}
+107
View File
@@ -0,0 +1,107 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>CFBundleDevelopmentRegion</key>
<string>$(DEVELOPMENT_LANGUAGE)</string>
<key>CFBundleDisplayName</key>
<string>Lanework Pro</string>
<key>CFBundleExecutable</key>
<string>$(EXECUTABLE_NAME)</string>
<key>CFBundleIdentifier</key>
<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
<key>CFBundleInfoDictionaryVersion</key>
<string>6.0</string>
<key>CFBundleName</key>
<string>Lanework Pro</string>
<key>CFBundlePackageType</key>
<string>$(PRODUCT_BUNDLE_PACKAGE_TYPE)</string>
<key>CFBundleShortVersionString</key>
<string>$(MARKETING_VERSION)</string>
<key>CFBundleVersion</key>
<string>1</string>
<key>LSMinimumSystemVersion</key>
<string>$(MACOSX_DEPLOYMENT_TARGET)</string>
<key>NSHumanReadableCopyright</key>
<string>© 2026 rzen</string>
<key>NSPrincipalClass</key>
<string>NSApplication</string>
<!-- The board format is one format, owned by 01-storage-format.md, with no edition-specific
keys (12-editions.md ▸ Distribution). Base **exports** `dev.rzen.indie.kanban-board`;
Pro **imports** the identical declaration verbatim — same identifier, same conformance,
same tag spec — so a board opens in either app and neither edition's copy can drift into
claiming a different format. The drag and clipboard payload types ride along for the same
reason: the two editions run the same drag code, so they must carry the same types. -->
<key>UTImportedTypeDeclarations</key>
<array>
<dict>
<key>UTTypeIdentifier</key>
<string>dev.rzen.indie.kanban-board</string>
<key>UTTypeConformsTo</key>
<array>
<string>com.apple.package</string>
<string>public.directory</string>
</array>
<key>UTTypeDescription</key>
<string>Lanework Board</string>
<key>UTTypeTagSpecification</key>
<dict>
<key>public.filename-extension</key>
<string>kanban</string>
</dict>
</dict>
<!-- The drag session payload types (DRAG-REORDER.md; 04-interactions.md ▸ Drag and drop).
Same-app transfer is the only real consumer — both boards are open in this app — but a
system drag session is what crosses window boundaries, draws the copy badge and gives
the full-size replica, and a system session needs a declared type to carry. -->
<dict>
<key>UTTypeIdentifier</key>
<string>dev.rzen.indie.kanban.cards</string>
<key>UTTypeConformsTo</key>
<array>
<string>public.data</string>
</array>
<key>UTTypeDescription</key>
<string>Lanework Cards</string>
</dict>
<dict>
<key>UTTypeIdentifier</key>
<string>dev.rzen.indie.kanban.lanes</string>
<key>UTTypeConformsTo</key>
<array>
<string>public.data</string>
</array>
<key>UTTypeDescription</key>
<string>Lanework Lanes</string>
</dict>
<!-- The clipboard manifest (04-interactions.md ▸ Clipboard). Its own type rather than either
drag type above: a clipboard payload carries cards or lanes under one identifier, plus
the staging copyID and the fallback index.md text a drag has no use for. -->
<dict>
<key>UTTypeIdentifier</key>
<string>dev.rzen.indie.kanban.clipboard</string>
<key>UTTypeConformsTo</key>
<array>
<string>public.data</string>
</array>
<key>UTTypeDescription</key>
<string>Lanework Clipboard</string>
</dict>
</array>
<key>CFBundleDocumentTypes</key>
<array>
<dict>
<key>CFBundleTypeName</key>
<string>Lanework Board</string>
<key>CFBundleTypeRole</key>
<string>Editor</string>
<key>LSItemContentTypes</key>
<array>
<string>dev.rzen.indie.kanban-board</string>
</array>
<key>LSTypeIsPackage</key>
<true/>
</dict>
</array>
</dict>
</plist>
+27
View File
@@ -0,0 +1,27 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<!-- Base's three, verbatim (Kanban/Kanban.entitlements) — the board experience is identical
across editions, so its sandbox posture is too. -->
<key>com.apple.security.app-sandbox</key>
<true/>
<key>com.apple.security.files.user-selected.read-write</key>
<true/>
<key>com.apple.security.files.bookmarks.app-scope</key>
<true/>
<!-- Pro only (12-editions.md ▸ Targets): remotes. Base ships without this key at all, which
is what makes "base cannot talk to a network" a checkable property of the signed binary
rather than a promise about the source (scripts/verify-editions.sh). -->
<key>com.apple.security.network.client</key>
<true/>
<!-- Pro only: remote auth credentials (07-sync-collab.md ▸ Auth — Keychain, SSH, TOFU).
A sandboxed app reaches its own keychain items without this key; the group is declared
so the credential store has one stable, named home from pro-m2 onward instead of an
implicit per-signature one that moves when the signing identity does. -->
<key>keychain-access-groups</key>
<array>
<string>$(AppIdentifierPrefix)dev.rzen.indie.KanbanPro</string>
</array>
</dict>
</plist>