domain-dig.git/DomainDig/OwnerAccess.swift, branch chore/owner-record-id-reveallocal-first ios domain inspection toolkit. dns, tls, rdap, audit.
http://git.krz.sh/krz/domain-dig.git/atom?h=chore%2Fowner-record-id-reveal2026-07-25T16:59:44+00:00chore: add DEBUG reveal of the CloudKit owner record ID2026-07-25T16:59:44+00:00Christian Cleberghello@cleberg.net2026-07-25T16:59:44+00:00urn:sha1:030187ece649f3a6e28b298126884602aef16cf0
Groundwork for the owner Pro+ allowlist. Adds OwnerAccess, which identifies the
app owner by their CloudKit user-record ID (a stable, opaque per-Apple-ID value
that cannot be guessed or spoofed), plus a DEBUG-only "Developer" row in
Settings → App Info that fetches and copies the current iCloud user's record ID
for the app's container.
OwnerAccess.ownerUserRecordID is empty, so isOwner() is inert until the real
value is filled in. A follow-up will hardcode the owner ID, wire isOwner() into
PurchaseService to grant .proPlus on a match, remove this reveal, and cut 5.0.1.
DEBUG-only UI; release builds are unaffected.