curtain/CHANGELOG.md
Aric Camarata 4c55409232 CI: Swift 6 toolchain runner + tests; add CHANGELOG; silence CC_SHA256 result
The macos-14 runner's Swift 5.10 rejects region-isolation patterns (weak-self
captures in MainActor Tasks) that the codebase relies on; move CI to macos-15
and run the test suite alongside the release build.
2026-06-10 11:31:21 -04:00

2.5 KiB

Changelog

All notable changes to Curtain are documented here. The format follows Keep a Changelog; versions follow Semantic Versioning.

[Unreleased]

Added

  • Three-signal session detection: the CGSSessionScreenIsCaptured capture key (primary, transport-independent), an ESTABLISHED inbound TCP connection on port 5900 (standard Screen Sharing), and a peered UDP socket on 5900-5902 (High-Performance Screen Sharing).
  • Diagnostic probe (Scripts/probe-detection.swift) that reports every raw detection signal once per second and diffs the full CGSession dictionary.
  • Per-signal diagnostic logging on every detection transition.
  • Password box placement on a specific display, chosen from a picker of connected displays.
  • Activation notification: a real notification banner when the curtain rises.
  • Emergency escape: Control + Option + Command + U force-deactivates without Accessibility.

Changed

  • Idle detection honors its source setting; the default is now remote session activity, so the idle timer tracks the remote operator rather than the desk.
  • Cover scope is a two-mode model: all displays (default) or per-display Cover toggles. Legacy scope values migrate automatically.
  • The aerial cover style shares one video decoder across all displays.
  • "Refuse to arm" (Accessibility missing) is enforced at the master switch.
  • Release script: signing failures abort the build; the bundle version number increases monotonically with the repository history.

Fixed

  • Session detection: the network probe pointed at a nonexistent netstat path, which silently disabled the TCP activator.
  • The per-display Cover toggle had no effect in the default scope and inverted meaning in one legacy scope.
  • A curtain preview test could drop the cover of a live session after the preview delay.
  • The desk password buffer is zeroed on successful unlock and on dismissal.
  • A stale aerial playability check could tear down a rebuilt video player.
  • The menu deactivate no longer refuses when the input tap is unavailable and the on-cover password box cannot receive keys.

[1.0.0] — unreleased (pending live verification and notarization)

Initial release: menu-bar privacy curtain for macOS Screen Sharing hosts. Covers all displays and blocks physical input during an inbound session; desk password reveal; idle and end-of-session actions (disconnect, lock, displays off, deactivate); configurable cover styles; optional privileged disconnect helper; open-at-login.