apple_kit, branch HEAD

secure-store: harden keychain replacement semantics

2026-06-19T23:02:01Z

commit ba96eda9ff5d50bdb07d183690dca3676f1819f9 parent fe759666a3e6165330e492eb7320d0b74f894473 Author: triesap Date: Fri, 19 Jun 2026 16:02:01 -0700 secure-store: harden keychain replacement semantics - replace delete-before-add writes with add-or-update keychain mutation. - prepare access-control attributes before mutating stored secrets. - add regression coverage for failed replacement preserving old data. - keep secure-store replacement behavior local to RadrootsKit.

document: support file-backed share items

2026-06-18T20:40:58Z

commit fe759666a3e6165330e492eb7320d0b74f894473 parent c0177dda89e33cbf18179f53558105f6ae63f693 Author: triesap Date: Thu, 18 Jun 2026 13:40:58 -0700 document: support file-backed share items - validate scoped share files and secret-like material - prepare scoped files through AppleKit file access - prepare staged blobs as file-backed share exports - cover text url file and staged share requests

background: fail closed on registration rejection

2026-06-18T20:02:13Z

commit c0177dda89e33cbf18179f53558105f6ae63f693 parent 3a411118e41f4fece4d51a34328c2c6a92e9e478 Author: triesap Date: Thu, 18 Jun 2026 13:02:13 -0700 background: fail closed on registration rejection - map false background task registration to a scheduler failure - preserve successful registration return values for existing callers - add adapter coverage for registration rejection behavior - keep background task platform APIs behind RadrootsKit

capture: harden presentation cleanup

2026-06-18T19:59:25Z

commit 3a411118e41f4fece4d51a34328c2c6a92e9e478 parent 486fd1c1e92b40379e61c3bdb3a60e06316266fd Author: triesap Date: Thu, 18 Jun 2026 12:59:25 -0700 capture: harden presentation cleanup - add exactly-once cleanup hooks to capture callback state - dismiss media picker and scanner presentations on timeout or cancellation - preserve coordinator completion idempotence across duplicate callbacks - cover timeout, cancellation, and double-completion cleanup in tests

apple-kit: expose background session event handling

2026-06-18T03:41:43Z

commit 486fd1c1e92b40379e61c3bdb3a60e06316266fd parent 15ed98b2e88ddf2f99f6efc6ac8dde9bb1ffe557 Author: triesap Date: Wed, 17 Jun 2026 20:41:43 -0700 apple-kit: expose background session event handling Add the background URLSession event callback to the shared background transfer contract and test fake so app runtimes can bridge iOS lifecycle events without owning transfer execution.

apple-kit: harden live background execution

2026-06-18T03:28:43Z

commit 15ed98b2e88ddf2f99f6efc6ac8dde9bb1ffe557 parent f1a3379e210255b247b8fb04dfc17af6bdc128e8 Author: triesap Date: Wed, 17 Jun 2026 20:28:43 -0700 apple-kit: harden live background execution - complete BGTask requests after async handlers finish - add delegate-backed background transfer coordination - move completed downloads into resolved AppleKit destinations - cover transfer completion, failure, progress, and event handlers

apple-kit: fix iOS background task adapter build

2026-06-18T00:23:40Z

commit f1a3379e210255b247b8fb04dfc17af6bdc128e8 parent cc5a7dded0ddd49cc6752fbb7561ed8816a9a2aa Author: triesap Date: Wed, 17 Jun 2026 17:23:40 -0700 apple-kit: fix iOS background task adapter build - avoid sending BGTask values through async handler closures - map pending requests inside the scheduler callback - add explicit snapshot typing for the simulator compiler - preserve live adapter behavior under SwiftPM and Xcode builds

apple-kit: add live background execution adapters

2026-06-18T00:14:18Z

commit cc5a7dded0ddd49cc6752fbb7561ed8816a9a2aa parent f87bc1bc95cc3b6d1d8309a6c5de5eb6b2d13cd0 Author: triesap Date: Wed, 17 Jun 2026 17:14:18 -0700 apple-kit: add live background execution adapters - add AppleKit-owned task scheduler adapter registration - add background transfer adapter and URLSession shell - reconcile persisted transfers with active task identifiers - prove live wrappers through deterministic adapter tests

apple-kit: add background transfer contracts

2026-06-18T00:09:52Z

commit f87bc1bc95cc3b6d1d8309a6c5de5eb6b2d13cd0 parent d03a020cf684a868ec643e162acab241e9370dc4 Author: triesap Date: Wed, 17 Jun 2026 17:09:52 -0700 apple-kit: add background transfer contracts - add transfer request, snapshot, progress, and store contracts - add file-root and staged-blob resolver support - persist transfer snapshots through AppleKit file roots - cover fake transfer behavior and recovery tests

apple-kit: add background task scheduler contracts

2026-06-18T00:04:57Z

commit d03a020cf684a868ec643e162acab241e9370dc4 parent 6633fca85507c17bd68103a1d39730b593a5a147 Author: triesap Date: Wed, 17 Jun 2026 17:04:57 -0700 apple-kit: add background task scheduler contracts - add Swift-native background task request and snapshot models - add unavailable scheduler behavior for unsupported platforms - add RadrootsKitTesting fake scheduler coverage - verify contracts with focused Swift tests

telemetry: add Apple logger sink

2026-06-15T21:14:42Z

commit 6633fca85507c17bd68103a1d39730b593a5a147 parent 475d2ee2c7079bade88595a5c6ed66f7e97bbf5d Author: triesap Date: Mon, 15 Jun 2026 14:14:42 -0700 telemetry: add Apple logger sink - add an OSLog-backed telemetry sink behind RadrootsKit - expose an injectable emitter for deterministic sink tests - sanitize log identifiers and bound rendered payloads - cover redaction, level mapping, category cleanup, and payload rendering

telemetry: add local telemetry contracts

2026-06-15T21:12:13Z

commit 475d2ee2c7079bade88595a5c6ed66f7e97bbf5d parent 32d2f84aa73a2003307627d23972de177c2187a0 Author: triesap Date: Mon, 15 Jun 2026 14:12:13 -0700 telemetry: add local telemetry contracts - add typed telemetry levels, events, fields, and validation - add reusable redaction, no-op, redacting, and multiplex sinks - add deterministic recording telemetry for RadrootsKitTesting - cover event validation, redaction, sink forwarding, and fake filtering

user-presence: add Apple implementation

2026-06-15T20:19:57Z

commit 32d2f84aa73a2003307627d23972de177c2187a0 parent c9fecf9079b7c0d62413fe6b9526643eb0a7701c Author: triesap Date: Mon, 15 Jun 2026 13:19:57 -0700 user-presence: add Apple implementation - make RadrootsAppleUserPresence implement the shared user-presence protocol - isolate LocalAuthentication policy and error mapping inside AppleKit - add adapter-driven tests for status, verification, and timeout behavior - update secure-store coverage to use the protocol-backed status API

user-presence: add contracts and fakes

2026-06-15T20:17:30Z

commit c9fecf9079b7c0d62413fe6b9526643eb0a7701c parent 4ac999d25ef7da1a28293e5940822a937b570eb2 Author: triesap Date: Mon, 15 Jun 2026 13:17:30 -0700 user-presence: add contracts and fakes - add reusable user-presence policy, status, request, result, and error models - add a protocol boundary for Apple host verification services - add a deterministic RadrootsKitTesting fake with request recording - cover request validation, localized errors, and fake outcomes

external-actions: add Apple implementation

2026-06-14T21:50:23Z

commit 4ac999d25ef7da1a28293e5940822a937b570eb2 parent 6a782e7c4a85b37e5fe730a868339d40cd4a084e Author: triesap Date: Sun, 14 Jun 2026 14:50:23 -0700 external-actions: add Apple implementation

external-actions: add contracts and fakes

2026-06-14T21:48:10Z

commit 6a782e7c4a85b37e5fe730a868339d40cd4a084e parent 38c018d3f263f07cd3f6faffdbe063b4368b669f Author: triesap Date: Sun, 14 Jun 2026 14:48:10 -0700 external-actions: add contracts and fakes

capture: harden iOS picker build

2026-06-14T20:12:20Z

commit 38c018d3f263f07cd3f6faffdbe063b4368b669f parent 872f5554a694fe7e4da00c1d7841785bf1ab4a4d Author: triesap Date: Sun, 14 Jun 2026 13:12:20 -0700 capture: harden iOS picker build - replace internal default presenter references with public overloads - keep UIKit presentation helpers package-internal - resolve Photos picker callback sendability - verify AppleKit with swift test

capture: add Apple document scanner

2026-06-14T20:05:43Z

commit 872f5554a694fe7e4da00c1d7841785bf1ab4a4d parent d4a4fbb498a44885c6dea5f8f58a173d87674a6a Author: triesap Date: Sun, 14 Jun 2026 13:05:43 -0700 capture: add Apple document scanner - add AppleKit-owned PDF document scanner service - render scanned pages into local PDF documents - reuse capture presentation and async retention helpers - cover unavailable platform behavior with Swift tests

capture: add Apple media picker

2026-06-14T20:02:54Z

commit d4a4fbb498a44885c6dea5f8f58a173d87674a6a parent a74b8041cd092bc54f5cb59d6482cc4932dd8beb Author: triesap Date: Sun, 14 Jun 2026 13:02:54 -0700 capture: add Apple media picker - add AppleKit-owned still-image import and camera capture service - persist media results through RadrootsAppleFileAccess - normalize media metadata and capture errors behind RadrootsKit - cover unavailable platform behavior with Swift tests

capture: add intake contracts

2026-06-14T19:58:17Z

commit a74b8041cd092bc54f5cb59d6482cc4932dd8beb parent 8b37d0c0fd38416947781f1b03e7b086da1b98df Author: triesap Date: Sun, 14 Jun 2026 12:58:17 -0700 capture: add intake contracts - define media picker and document scanner request models - add typed capture-intake errors and metadata validation - provide deterministic RadrootsKitTesting fakes - cover contract normalization and fake outcomes with Swift tests

kit: add Apple location services

2026-06-14T10:32:20Z

commit 8b37d0c0fd38416947781f1b03e7b086da1b98df parent 1a6a3b207d4891c1bc81f0c96c2f7e318e5e1882 Author: triesap Date: Sun, 14 Jun 2026 03:32:20 -0700 kit: add Apple location services - add CoreLocation-backed current authorization and location services - short-circuit denied unavailable and authorized states before requests - clean up live CoreLocation sessions on timeout cancellation and completion - cover location service behavior with adapter-backed Swift tests

kit: add Apple permission status provider

2026-06-14T10:29:17Z

commit 1a6a3b207d4891c1bc81f0c96c2f7e318e5e1882 parent 522bbb42c89ad6f9347b8f5300c4d0f6f4920bb1 Author: triesap Date: Sun, 14 Jun 2026 03:29:17 -0700 kit: add Apple permission status provider - add adapter-backed Apple permission status snapshots - normalize notification capture photo microphone and location states - link the Apple frameworks used by the status provider - cover provider routing and platform enum mappings with Swift tests

kit: add permission and location contracts

2026-06-14T10:26:27Z

commit 522bbb42c89ad6f9347b8f5300c4d0f6f4920bb1 parent 841700cf1121eb6ede62b5677755d54247ddc53e Author: triesap Date: Sun, 14 Jun 2026 03:26:27 -0700 kit: add permission and location contracts - add reusable permission snapshot and location request models - validate coordinate accuracy timeout and reading freshness inputs - add deterministic permission and location testing fakes - cover the new contracts with Swift package tests

kit: expose prepared export existence

2026-06-14T09:42:55Z

commit 841700cf1121eb6ede62b5677755d54247ddc53e parent 6933a6cdf18b0db3037f8528e7cffbf306e28b2d Author: triesap Date: Sun, 14 Jun 2026 02:42:55 -0700 kit: expose prepared export existence Add a RadrootsFileAccess API for inspecting prepared export lifecycle state. Update AppleKit tests to verify export release behavior through the shared file access boundary.

kit: add SwiftUI document presentation

2026-06-14T09:16:05Z

commit 6933a6cdf18b0db3037f8528e7cffbf306e28b2d parent acfb31baaa6a3364b46e29c2776149e66bebfd16 Author: triesap Date: Sun, 14 Jun 2026 02:16:05 -0700 kit: add SwiftUI document presentation - add AppleKit-owned SwiftUI import and export modifiers - add prepared export file document support - wrap public text sharing behind an AppleKit share link view - cover content type, import destination, and share adapters

kit: add file based document staging

2026-06-14T09:13:12Z

commit acfb31baaa6a3364b46e29c2776149e66bebfd16 parent 548a50e8b0317ca9fe9e618b8a8c432a87c695fc Author: triesap Date: Sun, 14 Jun 2026 02:13:12 -0700 kit: add file based document staging - add external file import and staging primitives to file access - prepare export documents under temporary AppleKit roots - copy staged and large scoped files without public inline data transfer - cover file staging, import, export, cleanup, and invalid requests

kit: add document interchange contracts

2026-06-14T09:10:27Z

commit 548a50e8b0317ca9fe9e618b8a8c432a87c695fc parent 03cc7a6486122d7674e1fc32b15989cb20c2dc03 Author: triesap Date: Sun, 14 Jun 2026 02:10:27 -0700 kit: add document interchange contracts - add reusable document import, export, and share payload models - validate filenames, media types, public urls, and share text - normalize unsigned byte counts for inline and staged export sources - cover document interchange contracts with Swift package tests

kit: add staged file access

2026-06-14T07:55:21Z

commit 03cc7a6486122d7674e1fc32b15989cb20c2dc03 parent a782d61ce2b03be1f4b3613766c75284d1b55a66 Author: triesap Date: Sun, 14 Jun 2026 00:55:21 -0700 kit: add staged file access - add the reusable Radroots file access protocol - implement Apple-backed inline and staged-blob storage - add reset, release, list, and sweep helpers - cover staged blob behavior with Swift package tests

kit: add file root contract

2026-06-14T07:49:50Z

commit a782d61ce2b03be1f4b3613766c75284d1b55a66 parent ee71a39735e55e1cd5ea2fd40ab2fcf3e9ef8636 Author: triesap Date: Sun, 14 Jun 2026 00:49:50 -0700 kit: add file root contract - add reusable file scopes and references - add deterministic Apple file root derivation - validate scoped path resolution and root config - cover the contract with Swift package tests

kit: harden secure store contract

2026-06-13T22:07:33Z

commit ee71a39735e55e1cd5ea2fd40ab2fcf3e9ef8636 parent c8eecf0a58ec5f26b62de49e9df95871f736f76d Author: triesap Date: Sat, 13 Jun 2026 15:07:33 -0700 kit: harden secure store contract - normalize secure-store keys before Keychain account use - route namespace service names through shared validation - add an in-memory secure store for reusable tests - expand secure-store policy and namespace coverage

kit: harden secure store policy checks

2026-06-13T09:00:54Z

commit c8eecf0a58ec5f26b62de49e9df95871f736f76d parent 91da1787ca4af03c61a9bf1dd10e61b66746f126 Author: triesap Date: Sat, 13 Jun 2026 02:00:54 -0700 kit: harden secure store policy checks

kit: expose local state reset from radroots kit

2026-06-12T07:05:34Z

commit 91da1787ca4af03c61a9bf1dd10e61b66746f126 parent 22cf4fd131673bab9cd51d12969bac9df1c33993 Author: triesap Date: Fri, 12 Jun 2026 00:05:34 -0700 kit: expose local state reset from radroots kit - move reusable app local-state reset into the production kit target - keep UI-test launch configuration in RadrootsKitTesting - cover missing-state and keychain-service reset behavior

package: add host service primitives

2026-06-12T04:27:09Z

commit 22cf4fd131673bab9cd51d12969bac9df1c33993 parent 000587a80a582fafdb0e561dca449b8593514f81 Author: triesap Date: Thu, 11 Jun 2026 21:27:09 -0700 package: add host service primitives - expose RadrootsKit and RadrootsKitTesting products - add typed secure-store and Keychain support - add Apple user-presence inspection and verification - add deterministic launch and local reset test helpers

Initial commit

2026-06-12T04:06:55Z

commit 000587a80a582fafdb0e561dca449b8593514f81 Author: triesap Date: Thu, 11 Jun 2026 21:06:55 -0700 Initial commit