octosentry.git, branch 1.0.1

Normalize repo watch-list entries in addRepo

2026-07-25T21:47:21+00:00

Store the canonical "owner/repo" reconstructed from the parsed parts instead of the raw input, so stray slashes (e.g. "owner/repo/") can't create an entry that silently 404s on refresh. Also compare case-insensitively for duplicates, since GitHub owner/repo names are case-insensitive. Bumps marketing version to 1.0.1. Co-Authored-By: Claude Opus 4.8

Drop App Store from distribution docs

2026-07-18T05:25:24+00:00

Not pursuing App Store submission — DMG + Homebrew only. Removed the submission walkthrough and reframed the doc around the single channel; also updated the Homebrew section since the tap is actually published now, not just a template.

Publish octosentry cask to zerolabsco/homebrew-tap

2026-07-18T05:05:53+00:00

Filled in the real DMG checksum, fixed deprecated depends_on macos syntax (caught by a real brew install test), and updated the comment now that the tap repo actually exists.

Add app icon

2026-07-17T22:52:56+00:00

Generated all 10 required AppIcon sizes (16-1024px) via sips from a 2000x2000 source logo and wired them into Contents.json. Previously all icon slots were empty (Xcode's default template state).

Add repo picker, update checker, and distribution tooling

2026-07-17T22:34:57+00:00

Closes #11-#15 (milestones 0.6.0, 0.7.0, 1.0.0). - Repo picker: on-demand broader OAuth scope (security_events repo), requested only when the "Browse your repos" action is used, never by default. Lists /user/repos via the existing pagination helper. Granted scope persisted with backward-compatible decoding for existing state files. Fixed a bug where a failed re-auth force-signed-out a user who already had a valid narrower-scope token. - Update checker: polls this repo's GitHub Releases API, surfaces a banner linking to new releases. Skipped on the Mac App Store build via a runtime receipt check rather than a separate build configuration. - Fixed MARKETING_VERSION, stuck at Xcode's default "1.0" this whole time unrelated to our git tags — now 1.0.0, matching this release. - Added PrivacyInfo.xcprivacy (no tracking, no collected data). - Added scripts/build-dmg.sh (archive, Developer ID export, notarize, staple) and Casks/octosentry.rb (Homebrew Cask template), plus DISTRIBUTION.md documenting both channels end to end. Entitlements were already identical across all builds — no divergence needed there. What remains for actual App Store submission and notarized DMG builds is account-specific (Apple Developer Program membership, certificates, App Store Connect submission) and can't be done from here; documented clearly in DISTRIBUTION.md.

Set package ecosystem to 'swift' for Dependabot

2026-07-17T22:24:06+00:00

Add mark-seen action, critical-alert badge, and a dedicated window

2026-07-17T22:12:46+00:00

Closes #8-#10 (milestone 0.5.0). - Mark-seen: each row gets a checkmark button (separate from the click-to-open button) that persists the event into seenEventIDs and removes it from the active stream immediately, no API write. - Menu bar icon switches to a filled exclamation-shield with a red badge showing the count of unseen critical alerts when any exist. - Added a dedicated Window (singleton scene, not WindowGroup — avoids spawning duplicates) opened via a header button, sharing the exact same store/authStore instances as the popover. The button hides itself when already viewing the standalone window.

Replace env-var PAT with GitHub device authorization flow + Keychain

2026-07-17T22:04:15+00:00

Closes #6, #7 (milestone 0.4.0). - GitHubDeviceAuthClient implements the OAuth 2.0 device authorization grant (device code request + poll for token) against GitHub's OAuth App endpoints. Verified against the real endpoints directly. - KeychainTokenStore stores the resulting token in the app's own Keychain item (not synced to iCloud Keychain), no shared entitlement needed since nothing else reads it. - AuthStore drives the sign-in state machine (signedOut / awaitingAuthorization / signedIn) and a new SignInView replaces the old "missing token" error state with an actual sign-in UI. - SecurityEventStore now reads the token from Keychain instead of the GITHUB_TOKEN environment variable, which is fully retired. - Scope requested is security_events, the narrowest available for classic OAuth Apps (no read-only variant exists at this level, unlike fine-grained PATs). Private-repo Dependabot alerts may need broader repo scope — to be confirmed with real-world testing.

Add persistence, multi-repo watch list, and background polling

2026-07-17T21:41:52+00:00

Closes #1-#5 (milestones 0.2.0, 0.3.0). - Flat JSON persistence (PersistedState/PersistenceStore) in Application Support, chosen over SwiftData since the dataset is small and the existing model types are plain Codable value types passed across actor boundaries. - Repo watch list, per-event seen-state, and last-fetch timestamps are now persisted instead of living only in memory. - Configurable minimum severity filter, applied from a cached raw fetch so changing it doesn't require a network round-trip. - Multi-repo support: SecurityEventStore now loops over a persisted watch list instead of one hardcoded repo, with an in-popover UI (gear button) to add/remove repos. - Background polling every 15 minutes, layered on top of the existing refresh-on-open and manual refresh, so the feed stays fresh even while the popover is closed.

Scaffold octosentry MVP: unified GitHub security alert feed

2026-07-17T21:06:47+00:00

MenuBarExtra popover aggregating Dependabot, code scanning, and secret scanning alerts for a single repo into one severity-ranked stream. Swift 6 strict concurrency, zero third-party dependencies, PAT-via-env-var auth as a dev-only shortcut ahead of the device authorization flow.