diff --git a/Cargo.lock b/Cargo.lock index 9514cbe..aba8236 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -5041,7 +5041,7 @@ checksum = "6a756c3fac73139e83f14c2d742155dd2b78d3ee56597b419a0579b7bdd6dd78" [[package]] name = "ironstorage" -version = "0.1.0" +version = "1.0.0" dependencies = [ "apple-native-keyring-store", "arboard", @@ -5083,7 +5083,7 @@ dependencies = [ [[package]] name = "ironstorage-apple" -version = "0.1.0" +version = "1.0.0" dependencies = [ "ironstorage", "uniffi", @@ -5091,7 +5091,7 @@ dependencies = [ [[package]] name = "ironstorage-apple-release" -version = "0.1.0" +version = "1.0.0" dependencies = [ "serde", "serde_json", @@ -5101,7 +5101,7 @@ dependencies = [ [[package]] name = "ironstorage-cli" -version = "0.1.0" +version = "1.0.0" dependencies = [ "ctrlc", "ironstorage", @@ -5111,7 +5111,7 @@ dependencies = [ [[package]] name = "ironstorage-desktop" -version = "0.1.0" +version = "1.0.0" dependencies = [ "ashpd", "iced", @@ -5125,7 +5125,7 @@ dependencies = [ [[package]] name = "ironstorage-macos-packager" -version = "0.1.0" +version = "1.0.0" dependencies = [ "apple-bundles", "apple-codesign", @@ -5136,7 +5136,7 @@ dependencies = [ [[package]] name = "ironstorage-tui" -version = "0.1.0" +version = "1.0.0" dependencies = [ "crossterm", "ironstorage", @@ -5147,7 +5147,7 @@ dependencies = [ [[package]] name = "ironstorage-watch-apple" -version = "0.1.0" +version = "1.0.0" dependencies = [ "ironstorage", "uniffi", diff --git a/Cargo.toml b/Cargo.toml index 7f59f7c..e049179 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -12,7 +12,7 @@ members = [ resolver = "3" [workspace.package] -version = "0.1.0" +version = "1.0.0" edition = "2024" rust-version = "1.92" license = "MIT" diff --git a/apple/AppStore/DISTRIBUTION.md b/apple/AppStore/DISTRIBUTION.md index 1a2e307..396b5b8 100644 --- a/apple/AppStore/DISTRIBUTION.md +++ b/apple/AppStore/DISTRIBUTION.md @@ -7,8 +7,9 @@ private diagnostics in the repository or release logs. ## Release identity - iPhone application: `de.rfc1437.ironstorage` -- AutoFill extension: `de.rfc1437.ironstorage.autofill` - Apple Watch companion: `de.rfc1437.ironstorage.watch` +- Apple Watch compatibility: watchOS 26; the archive carries Apple's required + arm64 and arm64_32 slices - Apple Developer team: `MU22FMRGK8` The submitted archive must embed the Watch application beneath the iPhone @@ -19,6 +20,7 @@ application. An iPhone-only archive is not a releasable IronStorage build. 1. Generate the project and release attribution, then run the release verifier: ```sh +rustup toolchain install nightly --component rust-src cargo metadata --format-version 1 --filter-platform aarch64-apple-ios \ > /private/tmp/ironstorage-ios-metadata.json cargo run -p ironstorage-apple-release -- licenses \ @@ -38,10 +40,11 @@ cargo run -p ironstorage-apple-release -- verify . xcodegen generate xcodebuild -project IronStorage.xcodeproj -scheme IronStorage \ -configuration Release -destination 'generic/platform=iOS' \ - -archivePath /private/tmp/IronStorage.xcarchive archive + -archivePath /private/tmp/IronStorage.xcarchive \ + -allowProvisioningUpdates archive ``` -4. Inspect the archive before upload. The iPhone, AutoFill, and Watch bundle +4. Inspect the archive before upload. The iPhone and Watch bundle identifiers and versions must match the metadata; the Watch app must be embedded; privacy manifests and license resources must be present; the archive must use distribution signing and must not contain `get-task-allow`, @@ -52,11 +55,13 @@ cargo run -p ironstorage-apple-release -- verify . xcodebuild -exportArchive \ -archivePath /private/tmp/IronStorage.xcarchive \ -exportPath /private/tmp/IronStorage-AppStore \ - -exportOptionsPlist AppStore/ExportOptions.plist + -exportOptionsPlist AppStore/ExportOptions.plist \ + -allowProvisioningUpdates ``` 6. In App Store Connect, complete the listing from `metadata.toml`, upload the - reviewed screenshots, answer privacy and encryption questions, provide + reviewed required-size iPhone screenshots and Watch screenshots, answer + privacy and encryption questions, provide local-first review instructions, select the processed build, and submit it for review. Do not provide a production password store or real credentials. 7. After approval, install the public release from the App Store on the paired diff --git a/apple/AppStore/metadata.toml b/apple/AppStore/metadata.toml index 958c826..814ec54 100644 --- a/apple/AppStore/metadata.toml +++ b/apple/AppStore/metadata.toml @@ -11,48 +11,51 @@ privacy_url = "https://rfc1437.de/apps/ironstorage/privacy/" support_url = "https://git.rfc1437.de/hugo/IronStorage/issues" marketing_url = "https://rfc1437.de/apps/ironstorage/" age_rating = "4+" +copyright = "2026 rfc1437" +review_notes = "IronStorage works entirely on-device without an account or remote service. On first launch, generate a local GPG key and choose a passphrase. You can then create folders without unlocking, and create encrypted password or TOTP entries after entering that passphrase. Git history is initialized locally; HTTPS synchronization is optional and is not needed for review. Entries appear on Apple Watch only after selecting them for Watch sharing on iPhone." [release] -version = "0.1.0" -build = "1" +version = "1.0" +build = "4" minimum_ios = "17.0" +minimum_watchos = "26.0" notes = "Initial iPhone and Apple Watch release with local GPG key generation, pass-compatible local Git history, optional HTTPS synchronization, password folders, and explicitly shared TOTP codes on Apple Watch." [[screenshots]] -file = "apple/AppStore/screenshots/home.png" +file = "apple/AppStore/screenshots/iphone-6.5/home.png" caption = "Local Git history works before a sync remote is configured" -width = 1206 -height = 2622 +width = 1284 +height = 2778 [[screenshots]] -file = "apple/AppStore/screenshots/passwords.png" +file = "apple/AppStore/screenshots/iphone-6.5/passwords.png" caption = "Password entries and folders stay organized on device" -width = 1206 -height = 2622 +width = 1284 +height = 2778 [[screenshots]] -file = "apple/AppStore/screenshots/totp.png" +file = "apple/AppStore/screenshots/iphone-6.5/totp.png" caption = "TOTP entries are shared with Apple Watch only when selected" -width = 1206 -height = 2622 +width = 1284 +height = 2778 [[screenshots]] -file = "apple/AppStore/screenshots/totp-detail.png" +file = "apple/AppStore/screenshots/iphone-6.5/totp-detail.png" caption = "Live TOTP codes include an exact validity indicator" -width = 1206 -height = 2622 +width = 1284 +height = 2778 [[screenshots]] -file = "apple/AppStore/screenshots/preferences.png" +file = "apple/AppStore/screenshots/iphone-6.5/preferences.png" caption = "Generate or import a GPG key and add optional HTTPS sync later" -width = 1206 -height = 2622 +width = 1284 +height = 2778 [[screenshots]] -file = "apple/AppStore/screenshots/search.png" +file = "apple/AppStore/screenshots/iphone-6.5/search.png" caption = "Search encrypted password entries by name or folder" -width = 1206 -height = 2622 +width = 1284 +height = 2778 [[watch_screenshots]] file = "apple/AppStore/screenshots/watch-list.png" diff --git a/apple/AppStore/privacy/index.html b/apple/AppStore/privacy/index.html index 77a320d..03a33b7 100644 --- a/apple/AppStore/privacy/index.html +++ b/apple/AppStore/privacy/index.html @@ -8,11 +8,11 @@
Last updated: 16 August 2026
IronStorage does not collect analytics, advertising identifiers, diagnostics, or personal data for the developer, and it does not track you.
Your local Git repository and encrypted password entries remain on your device. Application tokens, imported or generated private-key material, and protected unlock data use Apple Keychain storage. Camera frames used to scan a key-transfer QR code are processed on the device and are not retained by IronStorage.
+Your local Git repository and encrypted password entries remain on your device. Imported or generated private-key material stays in the app container and is protected by its GPG passphrase. Application tokens and biometric unlock data use Apple Keychain storage. Camera frames used to scan a key-transfer QR code are processed on the device and are not retained by IronStorage.
IronStorage works without a network service. If you later configure an HTTPS Git server, it connects only to that server using the credentials you provide to pull and push your password store. The developer does not operate an IronStorage service and does not receive this traffic.
Remove configured credentials and key material in IronStorage before uninstalling when you want them deleted immediately. Keychain items otherwise follow Apple’s secure-storage lifecycle and may survive an app reinstall.
+Deleting IronStorage removes its local repository and key files from the app container. Remove a configured application token and disable biometric unlock in Preferences before uninstalling when you also want those Keychain records removed immediately. Keychain items otherwise follow Apple’s secure-storage lifecycle and may survive an app reinstall.
Questions and issues can be filed at the IronStorage issue tracker.