Repository navigation

Release 1.4.0: encrypted video, alphanumeric PINs - #24

Merged

cwbooth5 merged 131 commits into

mainfrom

Oct 12, 2026

Merged

Release 1.4.0: encrypted video, alphanumeric PINs#24
cwbooth5 merged 131 commits into
mainfrom
video

Commits on Feb 2, 2026
- video checkpoint
  cwbooth5
  committed
  f347bea
Commits on May 26, 2026
Commits on May 30, 2026
- fix(nav): avoid double-dismiss black screen after decoy save
  
  cwbooth5
  and
  claude
  committed
  b50d740
- fix(security): destroy non-decoy videos on poison pill activation
  
  cwbooth5
  and
  claude
  committed
  6ff0cf9
- test: clean up orphaned test files; fold valid suites into the target
  
  cwbooth5
  and
  claude
  committed
  6e1598e
- feat(security): support decoy videos so non-decoy videos are destroyed
  
  cwbooth5
  and
  claude
  committed
  75b5237
- feat(gallery): show progress spinner while saving decoy media
  
  cwbooth5
  and
  claude
  committed
  e533a76
- feat(gallery): show real thumbnails for videos
  
  cwbooth5
  and
  claude
  committed
  31cfa89
- refactor(gallery): remove dead SecureGalleryViewModel
  
  cwbooth5
  and
  claude
  committed
  2701f37
- ci: guard that every test source file is a member of its test target
  
  cwbooth5
  and
  claude
  committed
  9219ac1
- docs(readme): document fastlane build/test/release and the test-membership guard
  
  cwbooth5
  and
  claude
  committed
  d5bc094
- fix(security): decoy videos were silently never created -> poison pill deleted ALL videos
  
  cwbooth5
  and
  claude
  committed
  1fa859b
- fix(video): decrypt over-read the final chunk -> fileIOError (broke sharing + decoy marking)
  
  cwbooth5
  and
  claude
  committed
  ecd97ea
Commits on May 31, 2026
- fix(security): keep decoy video thumbnails through the poison pill
  
  cwbooth5
  and
  claude
  committed
  2394621
- feat(gallery): import videos from the photo library (encrypted)
  
  cwbooth5
  and
  claude
  committed
  e443b08
- style(camera): Liquid Glass control buttons
  
  cwbooth5
  and
  claude
  committed
  f74798f
- feat(gallery): swipe through photos and videos together in detail view
  
  cwbooth5
  and
  claude
  committed
  ad4f544
- feat(video): glass inline player on the detail pager with reliable controls
  
  cwbooth5
  and
  claude
  committed
  90828e7
Commits on Jun 1, 2026
- fix(security): add file protection to wrapped DEK files
  
  cwbooth5
  and
  claude
  committed
  02aff67
- fix(security): propagate key-derivation errors instead of crashing
  
  cwbooth5
  and
  claude
  committed
  5421de7
- fix(compiler): audioInput is nonisolated
  cwbooth5
  committed
  4b7b1f1
- fix(security): delete hardware keys and await eviction in security reset
  
  cwbooth5
  and
  claude
  committed
  1b72cc3
- fix(security): use monotonic clock for session timeout and PIN backoff
  
  cwbooth5
  and
  claude
  committed
  d736305
- fix(security): short-circuit poison-pill PIN verification
  
  cwbooth5
  and
  claude
  committed
  ab82d5e
- fix(security): delete dead stub-cipher-key plumbing
  
  cwbooth5
  and
  claude
  committed
  94c3af1
- fix(security): bind the PIN cryptographically to DEK unwrap (C1)
  
  cwbooth5
  and
  claude
  committed
  1fddf1a
- fix(security): single-writer failed-attempt counter (M1)
  
  cwbooth5
  and
  claude
  committed
  6966ce0
- fix(security): complete file protection on the settings file (H2, partial)
  
  cwbooth5
  and
  claude
  committed
  67348b3
Commits on Jun 2, 2026
- feat(camera): add pure orientation-angle mapping and OrientationObserver
  
  cwbooth5
  and
  claude
  committed
  6442415
- fix(camera): lock camera UI to portrait and remove dead landscape layout
  
  cwbooth5
  and
  claude
  committed
  946bbf0
- feat(camera): rotate camera control glyphs to match device orientation
  
  cwbooth5
  and
  claude
  committed
  44bffa6
- fix(ipad): require full screen so the camera portrait lock is honored
  
  cwbooth5
  and
  claude
  committed
  4afa788
- fix(orientation): drop unsupported UIDevice.orientation hack
  
  cwbooth5
  and
  claude
  committed
  0e8d1a1
Commits on Jun 3, 2026
- fix(camera): stop controls shifting into the preview on device rotation
  
  cwbooth5
  and
  claude
  committed
  67be183
- Fix small view update warning
  cwbooth5
  committed
  f0f7a7c
- fix(ui): simplify glyph rotation
  cwbooth5
  committed
  2d9f894
- fix(ui): adjust spacing on zoom capsule
  cwbooth5
  committed
  51d1418
- fix(camera): let control taps through the preview's focus gesture
  
  cwbooth5
  and
  claude
  committed
  18348bb
- feat(video): add auto play video toggle
  cwbooth5
  committed
  50848ff
Commits on Jun 6, 2026
- feat(video): add replay button + mute toggle to inline player
  
  cwbooth5
  and
  claude
  committed
  8e4ddb2
- refactor(detail-pager): add counter auto-hide and consistent layout
  
  cwbooth5
  and
  claude
  committed
  18ba2a6
- style(ui): use system colors for consistency with glass backgrounds
  
  cwbooth5
  and
  claude
  committed
  36734a9
- refactor(obfuscation): use MediaToolbarButton for consistent controls
  
  cwbooth5
  and
  claude
  committed
  1cae3d0
- fix(auth): isolate AuthorizationRepository to @MainActor
  
  cwbooth5
  and
  claude
  committed
  a4e7342
- fix(video): tie encrypted-video delegate lifetime to its asset
  
  cwbooth5
  and
  claude
  committed
  afddfd9
- fix(auth): make failed-attempt increment atomic in the data source
  
  cwbooth5
  and
  claude
  committed
  e989a21
Commits on Jun 11, 2026
- fix(video): use built-in KVO publisher for AVPlayerItem status
  
  cwbooth5
  and
  claude
  committed
  fafd0e2
Commits on Jun 12, 2026
- views updates
  cwbooth5
  committed
  4705954
- Add fastlane screenshot
  cwbooth5
  committed
  ec6f93b
- fix(viewer): latch dismiss-drag direction once and track both axes
  
  cwbooth5
  and
  claude
  committed
  f9eaaa5
- feat(viewer): fade all chrome during the dismiss drag
  cwbooth5
  committed
  a247f09
- feat(video): pinch-zoom on video pages via ZoomableScrollView
  
  cwbooth5
  and
  claude
  committed
  e1ef2c9
- fix(camera): preview container matches capture aspect; max-res stills
  
  cwbooth5
  and
  claude
  committed
  90725ac
- fix(video): fade action bar with opacity so dismiss-drag doesn't reflow VStack
  cwbooth5
  committed
  f60d7e6
- fix(camera): pin max-res stills to the feed aspect; observe device service
  
  cwbooth5
  and
  claude
  committed
  bb78969
- fix(tests): register drag-latch tests with the SnapSafeTests target
  
  cwbooth5
  and
  claude
  committed
  5d41e72
Commits on Jun 13, 2026
- docs(spec): gallery landscape support design
  
  cwbooth5
  and
  claude
  committed
  e0b81d1
- fix(orientation): drop portrait-reset on disappear
  cwbooth5
  committed
  ca817cf
- feat(gallery): support landscape orientation
  cwbooth5
  committed
  128f295
- periphery fixes, video fixes
  cwbooth5
  committed
  e57d441
- Fix various security scan issues
  cwbooth5
  committed
  abef27d
- refactor(secureimage): add ImageProcessing namespace + tests
  
  cwbooth5
  and
  claude
  committed
  b9b7a8d
- fix(secureimage): guard image context in rotateImage; broaden ImageProcessing tests
  cwbooth5
  committed
  0c01443
- refactor(secureimage): route image work through ImageProcessing
  
  cwbooth5
  and
  claude
  committed
  c4bb396
- refactor(secureimage): move readImageMetadata + metadata types out of repository
  
  cwbooth5
  and
  claude
  committed
  14bb3e8
- refactor(secureimage): extract PhotoStorageDataSource (directories + encrypted file IO)
  
  cwbooth5
  and
  claude
  committed
  ede87a6
Commits on Jun 14, 2026
- refactor(secureimage): move file path + decoy enumeration helpers to PhotoStorageDataSource
  
  cwbooth5
  and
  claude
  committed
  2c27069
- refactor(secureimage): add ImageProcessing.createThumbnailData + generateVideoThumbnailJPEG; repo uses them
  
  cwbooth5
  and
  claude
  committed
  336be46
- fix(secureimage): guard scale>0 in createThumbnailData; log cache miss in storeVideoThumbnail
  
  cwbooth5
  and
  claude
  committed
  cac2917
- refactor(secureimage): ThumbnailCache → @unchecked Sendable final class
  cwbooth5
  committed
  0058b94
- refactor(secureimage): SecureImageRepository → actor; read APIs return Data; adapt callers
  
  cwbooth5
  and
  claude
  committed
  394299b
- fix(gallery): guard decoy-selection loops against cancellation during async enumeration
  
  cwbooth5
  and
  claude
  committed
  dcaa758
- refactor(gallery): route cell thumbnails through view model to repopulate cache
  
  cwbooth5
  and
  claude
  committed
  87c6b87
- fix(gallery): clear decrypted thumbnails on deauth and on delete
  
  cwbooth5
  and
  claude
  committed
  37fbdf8
- refactor(decoy): route decoy-photo removal through RemoveDecoyPhotoUseCase
  
  cwbooth5
  and
  claude
  committed
  0e27e50
- chore(deps): bump faraday, jwt, aws-sdk-s3, addressable to patch CVEs
  
  cwbooth5
  and
  claude
  committed
  be87754
- chore(periphery): fix 3 unused-code findings from fresh scan
  
  cwbooth5
  and
  claude
  committed
  cfceb34
- fix(gallery): make full toolbar button frame tappable in photo detail
  
  cwbooth5
  and
  claude
  committed
  e398fca
- fix(decoy): correct decoy state/limit handling in detail and gallery
  
  cwbooth5
  and
  claude
  committed
  15ddbe2
- fix(pin): make PIN field auto-focus reliable on appear
  
  cwbooth5
  and
  claude
  committed
  a5f6c68
- fix(decoy): clear decoy videos when poison pill is removed
  
  cwbooth5
  and
  claude
  committed
  cb7f926
- feat(video): add AVMetadataItemFactory for capture metadata and ISO 6709
  
  cwbooth5
  and
  claude
  committed
  21e8b76
- feat(video): add VideoMetaData model and display formatting
  
  cwbooth5
  and
  claude
  committed
  5ad929d
- feat(video): add SecureImageRepository.getVideoMetaData read path
  
  cwbooth5
  and
  claude
  committed
  82e7b39
- feat(video): embed location and creation date at record time
  cwbooth5
  committed
  f542d37
- feat(video): add VideoInfoViewModel
  cwbooth5
  committed
  2c5f313
- feat(video): add VideoInfoView sheet
  
  cwbooth5
  and
  claude
  committed
  818adf1
Commits on Jun 15, 2026
- feat(video): add videoInfo navigation case
  cwbooth5
  committed
  3822f79
- feat(video): add Info button to video detail toolbar
  cwbooth5
  committed
  5aa4743
- chore(i18n): extract video info sheet strings into the catalog
  cwbooth5
  committed
  88d0e35
- fix(pin): resolve PIN field focus deadlock from duplicate auth screens
  
  cwbooth5
  and
  claude
  committed
  ee81c34
- Update workflows to latest versions
  cwbooth5
  committed
  82d57d4
- Remove more leftover docs
  cwbooth5
  committed
  7a427d2
- Change session timeout to 5min
  cwbooth5
  committed
  44867bc
- Length warning on PIN setup
  cwbooth5
  committed
  b86e021
- feat: add PINType enum and embed it in HashedPin
  
  cwbooth5
  and
  claude
  committed
  a96b72d
- feat: thread pinType through PinRepository and PIN-creation use cases
  
  cwbooth5
  and
  claude
  committed
  6f95e59
- feat: add alphanumeric strength rules to PinStrengthCheckUseCase
  
  cwbooth5
  and
  claude
  committed
  2c8ffa6
- feat: add pinType to PINEntryField for dynamic keyboard and character filter
  
  cwbooth5
  and
  claude
  committed
  d213c70
- feat: add alphanumeric toggle to PIN setup
  
  cwbooth5
  and
  claude
  committed
  5794639
- feat: load and apply pinType at PIN verification
  
  cwbooth5
  and
  claude
  committed
  7d48a10
- feat: add independent alphanumeric toggle to poison pill PIN setup
  
  cwbooth5
  and
  claude
  committed
  8b29150
Commits on Jun 17, 2026
- Alphanumeric pins, gallery order, location precision
  cwbooth5
  committed
  e1af6a2
Commits on Jul 11, 2026
- Pin checksums in actions
  cwbooth5
  committed
  a383368
Commits on Oct 9, 2026
- Bump version to 1.4.0 and document release process
  
  cwbooth5
  and
  claude
  committed
  a5185f9
- Pin CI to Xcode 26.5
  
  cwbooth5
  and
  claude
  committed
  c65a7f5
- Fix CodeQL Swift build on macos-26 runners
  
  cwbooth5
  and
  claude
  committed
  a0628a6
Commits on Oct 12, 2026
- Speed up CodeQL Swift job and ignore superpowers docs
  
  cwbooth5
  and
  claude
  committed
  b64fe87
- Bump json to 2.21.2 for CVE-2026-71847
  
  cwbooth5
  and
  claude
  committed
  4c1c266
- Move CodeQL workflow to Node 24 actions
  
  cwbooth5
  and
  claude
  committed
  ca345ec
- Scope CodeQL arm64-only build to the simulator SDK
  
  cwbooth5
  and
  claude
  committed
  b1bf18c
- Remove CodeQL package pre-resolve step
  
  cwbooth5
  and
  claude
  committed
  33694b0
- Raise max PIN length to 16 and add alphanumeric PIN help
  
  cwbooth5
  and
  claude
  committed
  b5078d4
- Fix typo in poison pill warning text
  
  cwbooth5
  and
  claude
  committed
  5a061d6
- Stop gallery video playback when swiping to an adjacent page
  
  cwbooth5
  and
  claude
  committed
  df94dd5
- Add alphanumeric PIN help strings and fix poison pill warning key
  
  cwbooth5
  and
  claude
  committed
  cdc6efb
- Apply securityManaged to decoy selection full-screen cover
  
  cwbooth5
  and
  claude
  committed
  d046ca0