Add migration docs and fix notarization scripts to use inline credentials

Keychain profile approach doesn't work from Galaxy terminal (no interactive auth entitlement). Switched to inline Apple ID/team/password in notarize.sh and package.sh. Added migration-docs/ for session continuity on new machines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-07-09 14:15:36 -04:00
parent 40bd86f662
commit af5315313d
9 changed files with 424 additions and 2 deletions
@@ -0,0 +1,63 @@
+# Current State — as of 2026-07-09
+
+## Git State
+
+- **Branch:** `master`
+- **HEAD:** `40bd86f6` — "Adding logging when we crash in bedrock, adding open AI request translator changes and AI page settings cleanup"
+- **Remote:** Up to date with `origin/master`
+- **Other branches:** `feat/warp-parity` (remote only)
+- **Tags:** `v1.6.3` (latest)
+
+## Uncommitted Changes
+
+Two modified files (NOT yet committed):
+
+### `notarize.sh` (diff)
+```diff
+-    --keychain-profile notarytool-profile \
+    --apple-id "g.brancovici@samsung.com" \
+    --team-id "3JU72Z7Y3J" \
+    --password "cowi-fved-uajk-arsk" \
+```
+
+### `package.sh` (diff)
+```diff
+-    --keychain-profile notarytool-profile \
+    --apple-id "g.brancovici@samsung.com" \
+    --team-id "3JU72Z7Y3J" \
+    --password "cowi-fved-uajk-arsk" \
+```
+
+**Why:** The keychain profile `notarytool-profile` was lost (keychain reset). Replaced with inline credentials because Galaxy terminal can't write to keychain (no interactive auth entitlement). These changes have been tested — full build-release.sh completed successfully with them.
+
+## What Was Just Completed
+
+- Pulled latest code (840bc4d → 40bd86f6, massive update with Warp rebase)
+- Fixed notarization scripts to use inline credentials
+- Successfully built a signed+notarized release DMG (`target/release/bundle/osx/Galaxy.dmg`)
+
+## What's Next (Pending Work)
+
+### Immediate
+- **Commit the script changes** — `notarize.sh` and `package.sh` credential fix (George hasn't asked for commit yet)
+- **George may re-run build-release.sh** — he asked for clean build instructions
+
+### Backlog (from May code review — still open)
+1. **[HIGH]** Gate `dump_error_snapshot` behind `GALAXY_BEDROCK_DIAGNOSTICS=1` env var
+2. **[HIGH]** Fix `error_dump_directory` using compile-time `CARGO_MANIFEST_DIR` in release builds
+3. **[HIGH]** Install script fetches Homebrew/rustup from HEAD without pinning
+4. **[MED]** Silent mutex poisoning in `dump_error_snapshot`
+5. **[MED]** Captured lines buffer unbounded by bytes
+6. **[MED]** `is_retryable` uses fragile string matching
+7. **[MED]** `rotate_if_needed` double-renames
+8. **[MED]** `read_file_tail` blocks async runtime
+9. **[LOW]** Integer overflow in token sum cast to u32
+10. **[LOW]** Race condition in install script's pkill → rm -rf
+11. **[LOW]** `git pull --ff-only` fails silently on diverged branches
+
+## Build Output Location
+
+```
+target/release/bundle/osx/Galaxy.app   # Signed app bundle
+target/release/bundle/osx/Galaxy.dmg   # Signed + notarized DMG (distributable)
+```