krz/domain-dig

an ios app for DNS & SSL analysis dns ios networking ssl https://krz.sh/apps/domain-dig/

Commit 655d11b59a

655d11b59a273c14720952478ccebec20a9627bd

parent: 872583eca8

Unsigned

cmc <hello@cleberg.net> · 2026-07-23 04:26 UTC 

chore: bump to v4.9.0; record the release in the roadmap

MARKETING_VERSION 4.8.3 -> 4.9.0 and CURRENT_PROJECT_VERSION 43 -> 44
across all targets, with AppVersion.current aligned — the three-way
consistency v4.4.1 established.

The roadmap gains the v4.9.0 entry: the full accessibility pass (#21
phases 0-5 — semantic colours, light mode and the appearance setting,
Dynamic Type reflow and tap targets, VoiceOver, colour independence and
motion/transparency), the audit harness with seeded fixtures and the
engaged enforcement ratchet, the manual verification checklist, and
Swift 6 language mode adoption (#27). Deferred device passes are named
rather than implied.

The v5.0.0 "establish a test target" bullet is rewritten to match
reality: a UI test target now exists with an enforcement gate; what
remains for v5.0.0 is unit coverage of the deterministic core.

Layout: unified · split

DomainDig.xcodeproj/project.pbxproj +16 −16
@@ -566,7 +566,7 @@
566 ASSETCATALOG_COMPILER_GLOBAL_ACCENT_COLOR_NAME = AccentColor; 566 ASSETCATALOG_COMPILER_GLOBAL_ACCENT_COLOR_NAME = AccentColor;
567 CODE_SIGN_ENTITLEMENTS = DomainDig/DomainDig.entitlements; 567 CODE_SIGN_ENTITLEMENTS = DomainDig/DomainDig.entitlements;
568 CODE_SIGN_STYLE = Automatic; 568 CODE_SIGN_STYLE = Automatic;
569 CURRENT_PROJECT_VERSION = 43; 569 CURRENT_PROJECT_VERSION = 44;
570 DEVELOPMENT_TEAM = ZCNAX3VL9D; 570 DEVELOPMENT_TEAM = ZCNAX3VL9D;
571 ENABLE_PREVIEWS = YES; 571 ENABLE_PREVIEWS = YES;
572 GENERATE_INFOPLIST_FILE = YES; 572 GENERATE_INFOPLIST_FILE = YES;
@@ -583,7 +583,7 @@
583 "$(inherited)", 583 "$(inherited)",
584 "@executable_path/Frameworks", 584 "@executable_path/Frameworks",
585 ); 585 );
586 MARKETING_VERSION = 4.8.3; 586 MARKETING_VERSION = 4.9.0;
587 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDig; 587 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDig;
588 PRODUCT_NAME = "$(TARGET_NAME)"; 588 PRODUCT_NAME = "$(TARGET_NAME)";
589 STRING_CATALOG_GENERATE_SYMBOLS = YES; 589 STRING_CATALOG_GENERATE_SYMBOLS = YES;
@@ -603,7 +603,7 @@
603 ASSETCATALOG_COMPILER_GLOBAL_ACCENT_COLOR_NAME = AccentColor; 603 ASSETCATALOG_COMPILER_GLOBAL_ACCENT_COLOR_NAME = AccentColor;
604 CODE_SIGN_ENTITLEMENTS = DomainDig/DomainDig.entitlements; 604 CODE_SIGN_ENTITLEMENTS = DomainDig/DomainDig.entitlements;
605 CODE_SIGN_STYLE = Automatic; 605 CODE_SIGN_STYLE = Automatic;
606 CURRENT_PROJECT_VERSION = 43; 606 CURRENT_PROJECT_VERSION = 44;
607 DEVELOPMENT_TEAM = ZCNAX3VL9D; 607 DEVELOPMENT_TEAM = ZCNAX3VL9D;
608 ENABLE_PREVIEWS = YES; 608 ENABLE_PREVIEWS = YES;
609 GENERATE_INFOPLIST_FILE = YES; 609 GENERATE_INFOPLIST_FILE = YES;
@@ -620,7 +620,7 @@
620 "$(inherited)", 620 "$(inherited)",
621 "@executable_path/Frameworks", 621 "@executable_path/Frameworks",
622 ); 622 );
623 MARKETING_VERSION = 4.8.3; 623 MARKETING_VERSION = 4.9.0;
624 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDig; 624 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDig;
625 PRODUCT_NAME = "$(TARGET_NAME)"; 625 PRODUCT_NAME = "$(TARGET_NAME)";
626 STRING_CATALOG_GENERATE_SYMBOLS = YES; 626 STRING_CATALOG_GENERATE_SYMBOLS = YES;
@@ -639,7 +639,7 @@
639 APPLICATION_EXTENSION_API_ONLY = YES; 639 APPLICATION_EXTENSION_API_ONLY = YES;
640 CODE_SIGN_ENTITLEMENTS = DomainDigWidget/DomainDigWidget.entitlements; 640 CODE_SIGN_ENTITLEMENTS = DomainDigWidget/DomainDigWidget.entitlements;
641 CODE_SIGN_STYLE = Automatic; 641 CODE_SIGN_STYLE = Automatic;
642 CURRENT_PROJECT_VERSION = 43; 642 CURRENT_PROJECT_VERSION = 44;
643 DEVELOPMENT_TEAM = ZCNAX3VL9D; 643 DEVELOPMENT_TEAM = ZCNAX3VL9D;
644 GENERATE_INFOPLIST_FILE = NO; 644 GENERATE_INFOPLIST_FILE = NO;
645 INFOPLIST_FILE = DomainDigWidget/Info.plist; 645 INFOPLIST_FILE = DomainDigWidget/Info.plist;
@@ -650,7 +650,7 @@
650 "@executable_path/Frameworks", 650 "@executable_path/Frameworks",
651 "@executable_path/../../Frameworks", 651 "@executable_path/../../Frameworks",
652 ); 652 );
653 MARKETING_VERSION = 4.8.3; 653 MARKETING_VERSION = 4.9.0;
654 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDig.DomainDigWidget; 654 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDig.DomainDigWidget;
655 PRODUCT_NAME = "$(TARGET_NAME)"; 655 PRODUCT_NAME = "$(TARGET_NAME)";
656 SKIP_INSTALL = YES; 656 SKIP_INSTALL = YES;
@@ -668,7 +668,7 @@
668 APPLICATION_EXTENSION_API_ONLY = YES; 668 APPLICATION_EXTENSION_API_ONLY = YES;
669 CODE_SIGN_ENTITLEMENTS = DomainDigWidget/DomainDigWidget.entitlements; 669 CODE_SIGN_ENTITLEMENTS = DomainDigWidget/DomainDigWidget.entitlements;
670 CODE_SIGN_STYLE = Automatic; 670 CODE_SIGN_STYLE = Automatic;
671 CURRENT_PROJECT_VERSION = 43; 671 CURRENT_PROJECT_VERSION = 44;
672 DEVELOPMENT_TEAM = ZCNAX3VL9D; 672 DEVELOPMENT_TEAM = ZCNAX3VL9D;
673 GENERATE_INFOPLIST_FILE = NO; 673 GENERATE_INFOPLIST_FILE = NO;
674 INFOPLIST_FILE = DomainDigWidget/Info.plist; 674 INFOPLIST_FILE = DomainDigWidget/Info.plist;
@@ -679,7 +679,7 @@
679 "@executable_path/Frameworks", 679 "@executable_path/Frameworks",
680 "@executable_path/../../Frameworks", 680 "@executable_path/../../Frameworks",
681 ); 681 );
682 MARKETING_VERSION = 4.8.3; 682 MARKETING_VERSION = 4.9.0;
683 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDig.DomainDigWidget; 683 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDig.DomainDigWidget;
684 PRODUCT_NAME = "$(TARGET_NAME)"; 684 PRODUCT_NAME = "$(TARGET_NAME)";
685 SKIP_INSTALL = YES; 685 SKIP_INSTALL = YES;
@@ -697,7 +697,7 @@
697 APPLICATION_EXTENSION_API_ONLY = YES; 697 APPLICATION_EXTENSION_API_ONLY = YES;
698 CODE_SIGN_ENTITLEMENTS = DomainDigShareExtension/DomainDigShareExtension.entitlements; 698 CODE_SIGN_ENTITLEMENTS = DomainDigShareExtension/DomainDigShareExtension.entitlements;
699 CODE_SIGN_STYLE = Automatic; 699 CODE_SIGN_STYLE = Automatic;
700 CURRENT_PROJECT_VERSION = 43; 700 CURRENT_PROJECT_VERSION = 44;
701 DEVELOPMENT_TEAM = ZCNAX3VL9D; 701 DEVELOPMENT_TEAM = ZCNAX3VL9D;
702 GENERATE_INFOPLIST_FILE = NO; 702 GENERATE_INFOPLIST_FILE = NO;
703 INFOPLIST_FILE = DomainDigShareExtension/Info.plist; 703 INFOPLIST_FILE = DomainDigShareExtension/Info.plist;
@@ -708,7 +708,7 @@
708 "@executable_path/Frameworks", 708 "@executable_path/Frameworks",
709 "@executable_path/../../Frameworks", 709 "@executable_path/../../Frameworks",
710 ); 710 );
711 MARKETING_VERSION = 4.8.3; 711 MARKETING_VERSION = 4.9.0;
712 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDig.DomainDigShareExtension; 712 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDig.DomainDigShareExtension;
713 PRODUCT_NAME = "$(TARGET_NAME)"; 713 PRODUCT_NAME = "$(TARGET_NAME)";
714 SKIP_INSTALL = YES; 714 SKIP_INSTALL = YES;
@@ -726,7 +726,7 @@
726 APPLICATION_EXTENSION_API_ONLY = YES; 726 APPLICATION_EXTENSION_API_ONLY = YES;
727 CODE_SIGN_ENTITLEMENTS = DomainDigShareExtension/DomainDigShareExtension.entitlements; 727 CODE_SIGN_ENTITLEMENTS = DomainDigShareExtension/DomainDigShareExtension.entitlements;
728 CODE_SIGN_STYLE = Automatic; 728 CODE_SIGN_STYLE = Automatic;
729 CURRENT_PROJECT_VERSION = 43; 729 CURRENT_PROJECT_VERSION = 44;
730 DEVELOPMENT_TEAM = ZCNAX3VL9D; 730 DEVELOPMENT_TEAM = ZCNAX3VL9D;
731 GENERATE_INFOPLIST_FILE = NO; 731 GENERATE_INFOPLIST_FILE = NO;
732 INFOPLIST_FILE = DomainDigShareExtension/Info.plist; 732 INFOPLIST_FILE = DomainDigShareExtension/Info.plist;
@@ -737,7 +737,7 @@
737 "@executable_path/Frameworks", 737 "@executable_path/Frameworks",
738 "@executable_path/../../Frameworks", 738 "@executable_path/../../Frameworks",
739 ); 739 );
740 MARKETING_VERSION = 4.8.3; 740 MARKETING_VERSION = 4.9.0;
741 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDig.DomainDigShareExtension; 741 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDig.DomainDigShareExtension;
742 PRODUCT_NAME = "$(TARGET_NAME)"; 742 PRODUCT_NAME = "$(TARGET_NAME)";
743 SKIP_INSTALL = YES; 743 SKIP_INSTALL = YES;
@@ -753,11 +753,11 @@
753 isa = XCBuildConfiguration; 753 isa = XCBuildConfiguration;
754 buildSettings = { 754 buildSettings = {
755 CODE_SIGN_STYLE = Automatic; 755 CODE_SIGN_STYLE = Automatic;
756 CURRENT_PROJECT_VERSION = 43; 756 CURRENT_PROJECT_VERSION = 44;
757 DEVELOPMENT_TEAM = ZCNAX3VL9D; 757 DEVELOPMENT_TEAM = ZCNAX3VL9D;
758 GENERATE_INFOPLIST_FILE = YES; 758 GENERATE_INFOPLIST_FILE = YES;
759 IPHONEOS_DEPLOYMENT_TARGET = 17.6; 759 IPHONEOS_DEPLOYMENT_TARGET = 17.6;
760 MARKETING_VERSION = 4.8.3; 760 MARKETING_VERSION = 4.9.0;
761 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDigUITests; 761 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDigUITests;
762 PRODUCT_NAME = "$(TARGET_NAME)"; 762 PRODUCT_NAME = "$(TARGET_NAME)";
763 SWIFT_APPROACHABLE_CONCURRENCY = YES; 763 SWIFT_APPROACHABLE_CONCURRENCY = YES;
@@ -772,11 +772,11 @@
772 isa = XCBuildConfiguration; 772 isa = XCBuildConfiguration;
773 buildSettings = { 773 buildSettings = {
774 CODE_SIGN_STYLE = Automatic; 774 CODE_SIGN_STYLE = Automatic;
775 CURRENT_PROJECT_VERSION = 43; 775 CURRENT_PROJECT_VERSION = 44;
776 DEVELOPMENT_TEAM = ZCNAX3VL9D; 776 DEVELOPMENT_TEAM = ZCNAX3VL9D;
777 GENERATE_INFOPLIST_FILE = YES; 777 GENERATE_INFOPLIST_FILE = YES;
778 IPHONEOS_DEPLOYMENT_TARGET = 17.6; 778 IPHONEOS_DEPLOYMENT_TARGET = 17.6;
779 MARKETING_VERSION = 4.8.3; 779 MARKETING_VERSION = 4.9.0;
780 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDigUITests; 780 PRODUCT_BUNDLE_IDENTIFIER = net.cleberg.DomainDigUITests;
781 PRODUCT_NAME = "$(TARGET_NAME)"; 781 PRODUCT_NAME = "$(TARGET_NAME)";
782 SWIFT_APPROACHABLE_CONCURRENCY = YES; 782 SWIFT_APPROACHABLE_CONCURRENCY = YES;
DomainDig/AppVersion.swift +1 −1
@@ -2,6 +2,6 @@ import Foundation
2 2
3enum AppVersion { 3enum AppVersion {
4 nonisolated static var current: String { 4 nonisolated static var current: String {
5 "4.8.3" 5 "4.9.0"
6 } 6 }
7} 7}
RELEASE_ROADMAP.md +65 −5
@@ -6,7 +6,7 @@ ports, geolocation, subdomains, availability). The next several releases invest
6in *reach and surfacing* — getting that data onto more iOS surfaces and into more 6in *reach and surfacing* — getting that data onto more iOS surfaces and into more
7workflows — rather than adding raw protocol checks. 7workflows — rather than adding raw protocol checks.
8 8
9Current version: `v4.8.3`. 9Current version: `v4.9.0`.
10 10
11## v4.4.1 Patch: Release Readiness — ✅ shipped 11## v4.4.1 Patch: Release Readiness — ✅ shipped
12 12
@@ -185,6 +185,65 @@ hits on SwiftUI `$binding` shorthand in `AuditModeView`, which cannot be
185renamed. These want a *Won't Fix* / *Safe* resolution in SonarCloud rather than 185renamed. These want a *Won't Fix* / *Safe* resolution in SonarCloud rather than
186a code change. 186a code change.
187 187
188## v4.9.0 Minor: Accessibility, Appearance & Engineering Health — ✅ shipped
189
190Goal: make the app usable by every iOS user — full accessibility pass (#21),
191light mode, and the engineering scaffolding to keep both from regressing.
192
193- **Semantic colour system** — every hard-coded colour replaced with adaptive
194 colorsets in `Shared/Colors.xcassets` (Any/Dark + High Contrast variants),
195 shared by app, widget, and share extension via the synchronized `Shared`
196 group. Every status colour clears WCAG AA on its page, its card, and its
197 badge surface, in both schemes; measured, not asserted. The accent is now
198 blue (`#0000FF` light / `#4DA3FF` dark), split into foreground
199 (`StatusInfo`), fill (`AccentFill`), and on-fill (`AppOnAccent`) roles
200 because one value cannot serve as both text-on-dark and fill-behind-white.
201 `AppStatusTone` pairs each status foreground with an authored surface.
202- **Light mode unlocked** — the 16 scattered `.preferredColorScheme(.dark)`
203 calls removed; appearance (System/Light/Dark) is applied once at the
204 `WindowGroup` and exposed under Settings → Display. `.secondary` (3.29:1 on a
205 light card) replaced with `AppTextSecondary` across 191 sites.
206- **Dynamic Type & reflow** — `Label`-clipped empty-state titles fixed, the
207 44pt tap-target floor enforced (`AppCopyButton` was 30×30;
208 `controlMinHeight` was 42), `CardView`'s horizontal-scroll default flipped
209 to reflow, dense rows (`WatchlistRowView`, `BatchResultRowView`,
210 `PortfolioExpiryRow`) and the collapsible section headers rebuilt on
211 `ViewThatFits` so badges and buttons can never letter-wrap vertically, and
212 the widget clamped at `accessibility1` (fixed canvas, no scroll).
213- **VoiceOver** — labels on every icon-only control (label-in-name preserved
214 for Voice Control), selected-state on all toggles, badges read as one word,
215 heading-rotor navigation, dense rows collapsed to one element with the
216 detail on the More Content rotor (`accessibilityCustomContent`), technical
217 strings (DNS records, cipher suites) spoken with punctuation, and lookup/
218 sweep completion announcements. Widget rows read as a single phrase.
219- **Colour independence, motion, transparency** — widget status uses the badge
220 symbol vocabulary instead of colour-only dots; `differentiateWithoutColor`
221 adds symbols/borders on demand; all five animation sites honour
222 `reduceMotion`; the one material honours `reduceTransparency`.
223- **Accessibility audit harness** — `DomainDigUITests` runs
224 `performAccessibilityAudit()` over every primary screen at default and
225 AccessibilityXXXL, on CI (newest runtime, clean merge-result checkout) and
226 locally (`Scripts/audit-a11y.sh`, real floor runtime, wired to an opt-in
227 pre-push hook). `DOMAIN_DIG_SEED_FIXTURES` seeds deterministic in-memory
228 rows so the dense paths actually render under audit. The **enforcement
229 ratchet is engaged**: named findings in six categories fail CI, with
230 narrowly characterised, always-logged noise suppressions. Manual
231 verification checklist in `Docs/ACCESSIBILITY_VERIFICATION.md`; findings
232 burndown 20 → 11 with every remaining item characterised as system noise.
233- **Swift 6 language mode** (#27) — all three product targets build under
234 `SWIFT_VERSION = 6.0` with zero warnings. `SMTPChannel` became an actor
235 (fixing a real `CheckedContinuation` double-resume hazard),
236 `SweepActivityController` stores a Sendable activity id, and the remaining
237 isolation issues were resolved layer by layer. The UITests target stays on
238 Swift 5 (XCTest override isolation), recorded as a decision.
239- **Project hygiene** — the misleading project-level deployment target
240 (26.2 shadowing the real 17.6) reconciled; CI selects simulators
241 floor-aware instead of first-match.
242
243Deferred: the Phase 6 manual device passes (VoiceOver walkthrough, Voice
244Control, iPad Full Keyboard Access, Liquid Glass runtime check) are tracked in
245`Docs/ACCESSIBILITY_VERIFICATION.md` and #21 — they close on device, not in CI.
246
188## v5.0.0 Major: Contract Stabilization & Engineering Health 247## v5.0.0 Major: Contract Stabilization & Engineering Health
189 248
190Goal: earn long-term compatibility promises — and pay down the debt that the 249Goal: earn long-term compatibility promises — and pay down the debt that the
@@ -194,10 +253,11 @@ feature releases above will accumulate.
194 and settings. 253 and settings.
195- Stabilize the public local API response contract; document compatibility 254- Stabilize the public local API response contract; document compatibility
196 guarantees and planned deprecations. 255 guarantees and planned deprecations.
197- **Establish a test target.** The project currently has no XCTest target and no 256- **Extend the test net to the deterministic core.** v4.9.0 established
198 tests; add one and cover the deterministic core first — `DomainReportBuilder`, 257 `DomainDigUITests` (accessibility audit + enforcement gate); unit coverage of
199 `DomainReportExporter`, `DomainDataPortabilityService` (merge/replace dedup), 258 `DomainReportBuilder`, `DomainReportExporter`, `DomainDataPortabilityService`
200 and `DiffService` — before locking down external contracts. 259 (merge/replace dedup), and `DiffService` is still needed before locking down
260 external contracts.
201- **Decompose the god-files** behind that test net: `DomainViewModel.swift` 261- **Decompose the god-files** behind that test net: `DomainViewModel.swift`
202 (~4.7k lines) and `ContentView.swift` (~3.8k lines) into focused units 262 (~4.7k lines) and `ContentView.swift` (~3.8k lines) into focused units
203 (audit, monitoring, workflows, portability). 263 (audit, monitoring, workflows, portability).