rzen
2c6b8fe63a
Phase 2 of the one-app pivot (DESIGN 12 ▸ App-side state, re-ruled
2026-07-30; reworks 566deab). AppGroup retires; what remains is
AppStateHome — ordinary sandbox Application Support as the one home for
the registry, clipboard staging and template stores, keeping the
unit-test-host redirect (the test host is the app and would sweep real
state). Scalar defaults return to UserDefaults.standard.
BoardRecord's per-edition grant slots and openNow flags collapse to one
bookmark + one isOpenNow; the legacy-key decode and adopt-in-memory
paths go (nothing shipped with group-era records), while the founding
four-keys-required / defaults-for-everything-since decode policy stays —
a bookmarkless record decodes as the born-orphan row rather than
quarantining the list. needsReopen and the pre-anchored re-grant panel
are removed whole: the only state that flow served — a record granted by
a sibling sandbox — is unrepresentable now, and a dead bookmark of our
own was already the orphan case by explicit comment. The
indexOfRecord path fallback dies with it; path is never a key again.
The cross-process freshness stamp (mtime+size re-read) and
BoardEditionPresence with its popover "Also open in…" line retire; the
clipboard prune keeps its atomic .sweeping/ claim-then-delete, reframed
for crash residue and open -n copies rather than sibling editions. The
application-groups entitlement key is gone.
1880 tests in 317 suites green (13 cross-edition tests retired with
their subject).
Claude-Session: https://claude.ai/code/session_01SR4XGjmBE16ZUYWpfFHXwY
27 lines
1.5 KiB
XML
27 lines
1.5 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
<plist version="1.0">
|
|
<dict>
|
|
<key>com.apple.security.app-sandbox</key>
|
|
<true/>
|
|
<key>com.apple.security.files.user-selected.read-write</key>
|
|
<true/>
|
|
<key>com.apple.security.files.bookmarks.app-scope</key>
|
|
<true/>
|
|
<!-- Remotes: pull/push and auth (07-sync-collab.md), which only the git provider ever makes.
|
|
**Declared now, dormant until Pro ships** — the one-app collapse traded "the free app
|
|
provably has no network access" for "no network use until you subscribe", with eyes open
|
|
(12-editions.md ▸ The target, re-ruled 2026-07-30). It sits in the shipped entitlements
|
|
from the start because a key added later is a new provisioning profile and a new review
|
|
surface for what is meant to be a StoreKit-only change. No `keychain-access-groups`
|
|
alongside it: a group shares items *between* apps, and there is one app — Pro's
|
|
credentials go to the sandbox's own keychain, which needs no key at all. -->
|
|
<key>com.apple.security.network.client</key>
|
|
<true/>
|
|
<!-- No `com.apple.security.application-groups`: a group exists to share a container *between*
|
|
apps, and there is one app (12-editions.md ▸ App-side state, re-ruled 2026-07-30). The
|
|
board registry and its Application Support peers home in the ordinary sandbox container
|
|
(`AppStateHome`), which the sandbox already scopes to this app alone. -->
|
|
</dict>
|
|
</plist>
|