otpGarmin, branch main

docs: add public repository and clone URL

2026-10-28T11:05:22+00:00

chore: prepare repository for open-source release

2026-10-28T10:45:11+00:00

build(release): new application ID for the public Store app

2026-10-27T23:20:57+00:00

Garmin can't turn a beta app into a public one, so 1.0.0 is published as a new Store app with a new manifest ID. The watch treats it as a separate app from the beta: the user guide's Install section explains importing the entries again and deleting the beta. Co-Authored-By: Claude Opus 5.5

chore(release): 1.0.0, with the Connect IQ Store listing

2026-10-27T23:03:01+00:00

The second real-watch round on the Forerunner 70 passed: codes from otpauth:// links, the 4-digit PIN, touch scrolling and Aegis JSON import. Version 1.0.0 ships the fixes of the 0.9.0 review. - docs/STORE_LISTING.md: title, description and What's New for the Garmin developer page, with measured character counts. - docs/store/: hero (1440x720), cover (500x500) and seven round screen images, built by tools/store_assets.py from the fr70 goldens. - CHANGELOG 1.0.0, README status, TESTING round 2 results, YOUR_STEPS marked done, fr70 about.png golden at 1.0.0. make ci green on fr70. Co-Authored-By: Claude Opus 5.5

docs(spike): test C split, only the backslash is refused

2026-10-27T23:03:01+00:00

Settings spike test C, split (round 2, 2026-10-27, Android): Garmin Connect refuses to save only C3, the backslash. Every other character group and an Aegis export without backslashes save, and a real Aegis export imported on the Forerunner 70, so the import design stays. Android Aegis writes / as \/ (icons, names with a slash): the user guide explains replacing \/ with / or removing icons. C3 is a known limitation. The spike manifest gets a new application id: the old one could not be uploaded to the Garmin developer page. Co-Authored-By: Claude Opus 5.5

fix(import): splitting pasted otpauth:// links runs no character loop

2026-10-27T00:08:30+00:00

OtpAuth.splitUris/firstWord looped over every character in one event, so pasting about 100 links tripped the watchdog (the UI fixture imports Aegis JSON, so it never ran this path). They now use native searches only. New make watchdog case uris_100 (13,576 characters, twice per event) trips on the old code and passes now. fr70: make lint, make test, make watchdog pass. Co-Authored-By: Claude Opus 5.5

fix(pin): the work after a PIN and the change queue run in steps

2026-10-27T00:01:18+00:00

After a correct or new PIN, promoting pending entries and applying waiting "Require PIN" changes ran in the event of the last PBKDF2 step; 16 waiting changes tripped the watchdog on the Forerunner 70. ChangeQueue.LockJob now does it in steps while the PIN screen shows "Checking...", saves what it did to the results and refreshes the glance after Set PIN too. The list title decrypted every waiting change at each start. Queue items are now [action, box] (aad OTPW-Q-2 + action code), so they are counted without decrypting; 0.9.0 items are still read. A replacement is checked when it arrives and its material is sealed apart (qm.). Large buffers are wiped and UTF-8-checked in pieces (Jobs.Wiper, Bytes.utf8Prefix, SealedBox.openKeep/sealKeep). "Phone changes" reads behind "Reading...", and Confirm all / Reject all act only on the changes shown. Storage full no longer stops the app at the PIN. Found by the review of b8addc8/096b5a4 and a new make watchdog test; the diff was reviewed again and its findings fixed. fr70: make lint, make test (176), make watchdog (19 cases at two steps per event), make screenshots pass; list_locked and list_reset goldens show "Results ready (menu)". Co-Authored-By: Claude Opus 5.5

fix(pin): START never submits on touch; Change PIN asks once after a legacy PIN

2026-10-26T14:20:20+00:00

A legacy PIN (0.8.0 or earlier) on a touch screen was still submitted by START, and a tap that also arrives as START could submit the digits typed so far as a counted wrong PIN. The OK key is tapped instead. "Change PIN" while locked with a legacy PIN asked for the new PIN twice: the forced new PIN after the unlock is now the change. Found in the review of b8addc8 and 096b5a4. make test and make screenshots pass on the Forerunner 70. Co-Authored-By: Claude Opus 5.5

build: test on the Forerunner 70 only by default; ALL=1 for every device

2026-10-26T13:52:06+00:00

Unit tests, perf, memory, lint builds, screenshots and the watchdog test run on the owner's Forerunner 70 alone unless ALL=1 is given, which keeps runs and screenshot reviews short (8 instead of 65 minutes for the screenshots). make build defaults to the Forerunner 70 too. Co-Authored-By: Claude Opus 5.5

chore(release): 0.9.0, the fixes from the first real-watch round

2026-10-25T22:51:52+00:00

Co-Authored-By: Claude Opus 5.5