Notification live activity, compact mode & audit remediation (phases 0-4)

.github/CODEOWNERS

@@ -0,0 +1,13 @@
+# Code owners for boring.notch
+# Reviewers are automatically requested on PRs that touch owned paths.
+# Add active maintainers here as the team grows.
+
+# Default owner for the whole repo
+* @Alexander5015
+
+# Area-specific expertise
+/boringNotch/MediaControllers/ @Alexander5015
+/boringNotch/components/OSD/ @Alexander5015
+/BoringNotchXPCHelper/ @Alexander5015
+/Shared/ @Alexander5015
+/.github/workflows/ @Alexander5015

.github/dependabot.yml

@@ -5,18 +5,20 @@
 
 version: 2
 updates:
-  - package-ecosystem: "github-actions" # See documentation for possible values
-    directory: "/" # Location of package manifests
+  - package-ecosystem: "github-actions"
+    directory: "/"
     schedule:
       interval: "weekly"
+    target-branch: "dev"
 
   - package-ecosystem: "pip"
     directory: "/Configuration/dmg"
     schedule:
       interval: "weekly"
-
-  - package-ecosystem: "swift"
-    directory: "/"
-    schedule:
-      interval: "weekly"
     target-branch: "dev"
+
+  # NOTE: no "swift" section. SPM packages live in the xcodeproj-embedded
+  # manifest (boringNotch.xcodeproj/.../swiftpm/Package.resolved), which
+  # Dependabot's swift ecosystem cannot read (it requires a root-level
+  # Package.swift). Swift dependencies are bumped manually; see Package.resolved.
+

.github/workflows/cicd.yml

@@ -45,3 +45,18 @@ jobs:
           verbosity: xcpretty
           upload-logs: always
           configuration: release
+
+      # Unit tests run hosted by the app (TEST_HOST), so they spawn a real
+      # menubar-app instance on the runner — acceptable on CI where nothing
+      # else reacts to it; they are skipped on matrix legs without hosted-test
+      # support if they ever become flaky there.
+      - name: Test
+        uses: mxcl/xcodebuild@d3ee9b419c1be9a988086c58fe0988f32d99cfc5 # v3.6.0
+        with:
+          xcode: ${{ matrix.xcode }}
+          platform: macOS
+          scheme: boringNotch
+          action: test
+          verbosity: xcpretty
+          upload-logs: always
+          configuration: debug

.gitignore

@@ -1,23 +1,13 @@
 # Xcode
 *.xcuserstate
 *.xcuserdata
-*.xcscheme
 *.xcuserdatad
+*.xcodeproj/xcuserdata
+*.xcodeproj/project.xcuserdata
+*.xcodeproj/xcshareddata/WorkspaceSettings.xcsettings
 *.pbxuser
 *.xccheckout
-*.xcscheme
 *.xcplayground
-*.xcuserdatad
-*.xctest
-*.xcuserdata
-*.xcodeproj/xcshareddata/WorkspaceSettings.xcsettings
-
-# CocoaPods
-Pods/
-podfile.lock
-
-# Carthage
-Carthage/Build/
 
 # Swift Package Manager
 .swiftpm/
@@ -42,14 +32,6 @@ build/
 *.vscode/
 *.idea/
 
-# User-specific files
-*.xcuserdatad/
-*.xcscheme
-*.xcodeproj/xcuserdata
-*.xcodeproj/project.xcuserdata
-
 # Build artifacts
 *.ipa
 *.xcarchive
-*.dSYM
-

.swiftlint.yml

@@ -0,0 +1,85 @@
+# SwiftLint configuration for boring.notch
+# Run with: swiftlint --config .swiftlint.yml
+# CI wiring is tracked as a follow-up (needs a lint-capable runner).
+
+# Paths to check
+included:
+  - boringNotch
+  - BoringNotchXPCHelper
+  - Shared
+
+# Paths to ignore
+excluded:
+  - boringNotch/Assets.xcassets
+  - mediaremote-adapter
+  - updater
+  - .build
+
+# Crash-vector rules found in the audit — hard errors in new code.
+# The few audited, allow-listed legacy sites are excluded per rule below;
+# do not add new exclusions.
+force_unwrapping:
+  severity: error
+  excluded:
+    # CGEventType(rawValue: 14)! == kCGEventSystemDefined by construction
+    - boringNotch/observers/MediaKeyInterceptor.swift
+    # compile-time-known regexes
+    - boringNotch/helpers/OTPDetector.swift
+    # hard-bundled placeholder artwork/resource URLs
+    - boringNotch/managers/MusicManager.swift
+    - boringNotch/components/Music/LottieAnimationView.swift
+    - boringNotch/components/Settings/Views/MediaSettingsView.swift
+
+force_cast:
+  severity: error
+  excluded:
+    # XPC secure-coding bridging (NSSet -> Set<AnyHashable> is a guaranteed bridge)
+    - boringNotch/XPCHelperClient/XPCHelperClient.swift
+    - BoringNotchXPCHelper/main.swift
+
+force_try:
+  severity: error
+
+# Opt-in rules matching the house style established during remediation
+opt_in_rules:
+  - empty_count
+  - empty_string
+  - first_where
+  - contains_over_first_is_nil
+  - flatmap_over_parameter_reduce
+  - implicitly_unwrapped_optional
+  - lower_acl_than_parent
+  - modifier_order
+  - preferred_final_class
+  - redundant_nil_coalescing
+  - unused_enumerated
+  - vertical_whitespace_closing_braces
+  - vertical_whitespace_opening_braces
+
+type_body_length:
+  warning: 400
+  error: 800
+
+file_length:
+  warning: 500
+  error: 1000
+
+function_body_length:
+  warning: 60
+  error: 120
+
+line_length:
+  warning: 160
+  error: 220
+
+identifier_name:
+  min_length:
+    warning: 2
+    error: 1
+  max_length:
+    warning: 40
+    error: 60
+  excluded:
+    - id
+    - vm
+    - s