krz/domain-dig

 1# DomainDig Release Roadmap
 2
 3Priority lens: **new user-facing features.** The inspection engine is already
 4deep (DNS, DNSSEC, CAA, TLS, TLSA/DANE, email security incl. BIMI/MTA-STS, RDAP,
 5ports, geolocation, subdomains, availability). The next several releases invest
 6in *reach and surfacing* — getting that data onto more iOS surfaces and into more
 7workflows — rather than adding raw protocol checks.
 8
 9Current version: `v4.6.0`.
10
11## v4.4.1 Patch: Release Readiness — ✅ shipped
12
13- Consolidated Audit Mode onto the single `DomainDig/DomainDig/Audit*`
14  implementation and retired the prototype files.
15- Aligned `AppVersion.current`, Xcode marketing version, and build number.
16- Included audit sessions in backup/restore counts, summaries, and merge behavior.
17- Removed the retired `DomainDigCLI` target and refreshed README/architecture docs.
18
19## v4.5.0 Minor: Home Screen & Shortcuts Reach — ✅ shipped
20
21Goal: put DomainDig data and actions where the user already is.
22
23- **App Intents / Shortcuts** — `InspectDomainIntent`, `AddToWatchlistIntent`, and
24  `RunSweepIntent`, exposed via `DomainDigShortcuts` for Shortcuts, Spotlight, the
25  Action button, and Siri.
26- **`domaindig://` deep links** — `inspect`, `watch`, `domain` (detail), and
27  `sweep`, routed in `RootTabView`.
28- **WidgetKit portfolio widget** (Home Screen small/medium/large) — per-domain
29  health, certificate countdowns, and portfolio health counts, shared from the app
30  via an App Group; tapping a domain deep-links into its detail.
31
32Deferred to a later minor: **Lock Screen accessory widget families** and a richer
33per-widget "last change" indicator.
34
35## v4.6.0 Minor: Alerts, Glances & iPad — ✅ shipped
36
37Goal: make monitoring and results feel first-class across contexts.
38
39- **Sweep Live Activity** — a batch/watchlist sweep drives a Live Activity with a
40  progress bar, current domain, and change/warning counts on the Lock Screen and
41  in the Dynamic Island (`SweepActivityController` around the batch pipeline).
42- **Share extension** (`DomainDigShareExtension`) — "Dig Domain" accepts a web URL
43  from the system share sheet, extracts the host, and hands it to the app via the
44  App Group inbox; the app inspects it on next activation.
45- **iPad-optimized layout** — `RootTabView` renders a `NavigationSplitView`
46  (sidebar + detail) in the regular size class and the tab bar in compact.
47- **Actionable notifications** — per-domain `threadIdentifier` grouping, a
48  "Re-inspect" action, and taps that route into the domain's detail.
49
50Deferred: monitoring-alert Live Activities (only the sweep activity shipped) and
51Lock Screen accessory widget families (carried over from v4.5.0).
52
53## v4.7.0 Minor: Intelligence & Comparison
54
55Goal: help users interpret and organize, not just collect.
56
57- **Domain-vs-domain comparison** (side-by-side), extending the existing
58  time-based `DiffService` to compare two distinct domains.
59- **Reputation / blocklist signals** as a new optional data source (currently
60  absent); surfaced in the report and available to monitoring alerts.
61- **Tags / folders and saved views** for the watchlist to organize large sets.
62
63## v4.8.0 Minor: Reporting & Sharing
64
65Goal: turn point-in-time snapshots into shareable, scheduled deliverables.
66
67- Scheduled report generation (markdown/json/pdf) for tracked domains.
68- Stronger share affordances for reports and audit evidence.
69- Export polish and consistency across app and local API output.
70
71## v5.0.0 Major: Contract Stabilization & Engineering Health
72
73Goal: earn long-term compatibility promises — and pay down the debt that the
74feature releases above will accumulate.
75
76- Define migration policy for persisted snapshots, backups, audits, workflows,
77  and settings.
78- Stabilize the public local API response contract; document compatibility
79  guarantees and planned deprecations.
80- **Establish a test target.** The project currently has no XCTest target and no
81  tests; add one and cover the deterministic core first — `DomainReportBuilder`,
82  `DomainReportExporter`, `DomainDataPortabilityService` (merge/replace dedup),
83  and `DiffService` — before locking down external contracts.
84- **Decompose the god-files** behind that test net: `DomainViewModel.swift`
85  (~4.7k lines) and `ContentView.swift` (~3.8k lines) into focused units
86  (audit, monitoring, workflows, portability).
87
88## Cross-cutting note
89
90New feature surfaces (widgets, intents, extensions) each add a target and a
91persistence/entitlement seam. Add at least characterization tests for
92`DomainDataPortabilityService` and the report builders **before** v4.7.0, so the
93v5.0.0 contract and refactor work has a safety net rather than starting from zero.