Changelog

Add opt-in crash and error reporting. Off by default, revocable from onboarding and Home, and scrubbed of tokens, headers, and blocked-app identifiers before it leaves the device.

Switch crash reporting to opt-out instead of opt-in, and forward detection-service crashes to the consent-gated reporter instead of swallowing them silently.

Make enforcement fail closed. A failed or stale rule refresh now keeps the last-known verdict instead of dropping the Shield, and locked apps stay covered through app restarts and lost permissions.

Add FCM push pairing so an unlock lifts the Shield within moments of the backend verdict, with a periodic poll as a backstop when push does not arrive.

Gate installation registration on a signed-in session. Fixes a crash loop from unauthenticated registration attempts and ensures a signed-in user without Firebase still registers their device.

Detect the foreground app through usage stats and raise an overlay Shield over locked apps. Home now shows the verdict and progress per rule, and onboarding walks through the required permissions and app picker.

Add GitHub sign-in and a Keystore-backed session to the app. Rules, verdicts, and the installed-app catalog now sync from the backend, and the device registers itself for push.

Add a scheduled reconciliation pass that catches commits a dropped or delayed webhook missed, and keeps a streak’s day record current even on a day with no GitHub activity, closing gaps where a lost webhook or a quiet day could silently break the streak.

Add push delivery over Firebase Cloud Messaging, the transport an Android client needs to receive unlocks.

Give the macOS app a live connection to the backend, so a menu-bar unlock lands the instant the goal flips instead of waiting on a push notification.

Encrypt push credentials (APNs device tokens, FCM registration tokens, Web Push keys) at rest instead of storing them in plaintext, matching how connected-account tokens are already sealed.

Auto-link a GitHub App installation the moment it’s installed, instead of waiting for the next sign-in. Signing in first and installing the app seconds later, the common order, no longer leaves commits uncredited until a second sign-in.

Add Web Push delivery and a per-client OAuth redirect target, opening the door for the Chrome extension to connect and receive unlock pushes. Also close a race where a fast double refresh of a session could log a device out instead of returning the same rotated token pair.

Add an “any” role option for merged-pull-request and closed-issue rules, so a rule can count activity where the account was either the author or the reviewer, not just one fixed role.

Close an account-takeover hole where registering a device only required asserting someone else’s GitHub id, with no proof of a real session. Registering a device now requires a live, verified session tied to that account.

Add a visible notification announcing the moment the day’s goal flips from not-met to met, alongside the existing silent push that does the unlocking. If the device is offline right when it happens, the alert still lands anytime before the day resets.

Add rate limits on sign-in and token-refresh requests, and turn off the public API docs in production, closing off easy brute-force and reconnaissance paths at the edge.

Reject scheduled-rule windows that don’t align to a 15-minute grid, matching the precision the phone can actually enact, instead of silently saving a window it could never honor.

Harden the webhook and push pipeline: reject deliveries outright when no signing secret is configured, instead of accepting them, and make a crashed delivery safe to retry without dropping or duplicating events.

Add schedule-only rules: define a rule as just a time window, such as no Slack after 9pm, with no GitHub activity required and kept separate from the streak.

Serve the list of valid GitHub signals, roles, and repo-match patterns from the backend, so a rule editor shows real, current options instead of a copy that can drift out of sync.

Add a history endpoint that returns each day’s outcome, newest first, so a client can show more than just today’s streak.

Fix the repo picker coming up empty for a user with the GitHub App installed on an org. Signing in again now discovers and links the existing installation instead of leaving it unset.

Fix rule changes to recompute the day’s verdict immediately, so editing a rule after already meeting the goal no longer suppresses that day’s unlock push.

Skip redundant network calls on routine service-worker wakes. Alarm ticks now self-heal the sync schedule locally instead of re-fetching rules and re-registering the installation every time.

Add opt-in error and performance reporting. Off by default, revocable in settings, and scrubbed of URLs and other identifying details before anything leaves the browser.

Grant the extension permission to reach the backend API host directly, so sync and sign-in no longer fail to a browser CORS block. Diagnostic trace headers now attach only to backend requests, not to every outgoing call.

Share one hostname-parsing helper between declarativeNetRequest and the block page, so a blocked URL can no longer send the block page into an infinite redirect loop.

Make enforcement fail closed. A failed sync step, an unresolved schedule, or an unexpected verdict now locks instead of unlocking, and a push key rotation no longer breaks unlock delivery for good.

Ship the Chrome extension: sign in with GitHub, sync the day’s Rule, and block distracting sites with declarativeNetRequest until goal is hit. Adds a popup, onboarding flow, and branded block page, backed by a background alarm that keeps enforcement current.

Add crash and error reporting, gated behind a consent toggle in Settings.

Switch crash and error reporting to on by default, with an opt-out toggle in Settings instead of an opt-in one.

Fix a gap where a failed refresh after corrupt rule state could leave the shield clearable; the shield now stays locked until a valid fetch replaces the corrupt state.

Add an Any role to the rule role picker, so a rule can count a pull request or issue regardless of whether you authored or merged or closed it.

Snap scheduled-rule window start and end times to a 15-minute grid so a lock can no longer fire late from a dropped short-interval wake.

Fix scheduled rules staying locked past their window end until the app was opened; background refresh now re-arms the monitor that watches the window.

Add a notification when a lock lifts, whether from a scheduled window ending or a goal being met, so an unlock no longer goes unannounced.

Fix rule freshness near the daily reset and across time-zone changes by reading the reset instant from the backend instead of recomputing it on device.

Add a day-history heatmap to the home screen, showing which recent days met their rules, held apps locked, or had no active rules.

Add scheduled rules: time-block windows that lock apps on a schedule, independent of any GitHub goal, alongside day-scoped GitHub rules.

Rebuild the home screen as a sectioned summary of what’s locked now, your rules, and today’s activity, replacing the streak-first screen.

Scope a rule to one repository and a role, authored, merged, or either, picked from your connected GitHub repositories.

Add crash and error reporting to the menu-bar app and the content-filter extension, gated behind a consent toggle.

Switch the menu-bar app and content-filter extension’s crash reporting to on by default, with an opt-out toggle instead of an opt-in one.

Ship the first macOS app: a menu-bar app backed by a content-filter system extension that blocks distracting sites until the day’s rules are met.

Fix the content-filter extension resolving schedule windows in the machine’s time zone instead of the stored day-boundary zone.

Add an endpoint that deep-links account setup straight to the GitHub org or account that owns the app installation, instead of sending everyone to their personal installations list where an org install stays invisible.

Add an endpoint listing the repos a GitHub App installation can actually see, so a rule’s repo picker offers only repos that scoping will work for instead of free-text entry.

Count pull requests, issues, and reviews toward the day’s goal, not just commits. A rule can also narrow which activity counts, to specific repos and to a specific role such as author or reviewer.

Restrict counted commits to pushes on a repo’s default branch (or gh-pages) in a non-fork repo, matching GitHub’s own contribution-graph definition. A commit on a feature branch or in a fork no longer counts toward the day’s goal.

Fix a newly created or edited rule to reflect today’s already-logged activity right away, instead of showing empty progress until the next refresh. The rules list also now shows today’s real streak instead of zero when today hasn’t been recomputed yet.

Add rules: set a GitHub activity target, then create, edit, or delete it going forward. The backend now computes the day’s pass-or-hold verdict itself, with a step-by-step progress breakdown, instead of leaving that logic to the client.

Fix the streak to require every enabled rule to be met, not just one, and to carry through a day with no enabled rules instead of breaking it.

Replace personal-access-token sign-in with GitHub’s own authorization-code web flow. A session now refreshes automatically in the background, and replaying an already-used refresh token revokes the whole session instead of quietly succeeding.

Replace the single daily gate with rules: a list you can create, edit, enable, disable, and delete, each showing its own progress toward being lifted.

Replace personal-access-token sign-in with GitHub’s own web sign-in flow; the GitHub token never touches the device.

Add a first-run onboarding flow: connect GitHub, set a ship goal, pick distracting apps, and finish, replacing the hidden Settings-only setup.

Move gate state onto the backend and add silent push, so a goal met while the app is closed unlocks without waiting on a manual re-check.

Fix the daily-goal stepper in Settings re-arming the shield on every tap; the shield now re-arms once, when the change is saved.

Fix merged-PR and issue-closed activity that was hardcoded to zero, so a goal set on either signal could actually be met.

Fix the shield’s Re-check now button so it re-checks GitHub from the lock screen itself and clears the lock the moment the goal is met, even with the app closed.

Add a notification when a background re-check first finds today’s goal met, firing only on the not-met-to-met flip so it never repeats.

Add a settable daily goal in Settings and a background re-check that unlocks apps on its own once GitHub activity clears the goal.

Lock the shield closed on stale or unreadable progress instead of assuming the goal is met, with lock enforcement centralized to one path.