chore: release 26.1.2

- Simplified awk extraction without aggressive sed cleanup
- Now correctly extracts version-specific changelog entries
- Works with minimal or full changelog sections

CHANGELOG.md

@@ -1,10 +1,35 @@
 # Changelog
 
-## Unreleased
+
+## 26.1.1 (2025-01-03)
+- Fixed changelog extraction in publish script.
+
+## 26.1.0 (2025-01-03)
+- Auto-populate release description from CHANGELOG when publishing to Gitea.
+
+## Prereleases
+
+### Fixed
+- Fixed excessive refresh timer resets by properly cancelling previous subscriptions and validating value changes before recreating timers.
+- Fixed interval indicator to respect user's refresh interval setting instead of always assuming 60 seconds.
+
+### Added
+- Added status notifications for server monitoring in Preferences → Notifications:
+  - "Status Notifications" toggle: alerts when servers go offline/online or services change status.
+  - "Alert Notifications" toggle: (placeholder for future alert threshold configuration).
+- Ping status changes now trigger notifications (Server Online/Offline).
+- Service status monitoring tracks individual services (DNS, FTP, SSH, HTTP, HTTPS, etc.) and alerts when they go offline or come back online.
+- Notification permissions are requested automatically when the app launches.
+
+### Previous Changes
 - Flattened the project structure so sources live at the repository root instead of the nested `iKeyMon/` folder and updated the Xcode project accordingly.
 - Fixed build settings (entitlements, preview assets) and placeholder previews to work with the new layout.
 - Migrated the updated API layer and unified `ServerInfo` model from the previous branch.
 - Added verbose logging in `MainView` to trace server loading, selection, and fetch/ping activity when the list appears empty.
 - Switched `MainView` and `ServerFormView` to the version-aware API client (`APIFactory`/`APIv2_12`) for server summaries and introduced a shared `PingService`.
 - Detection now probes `meta.api_version` so future API versions are selected automatically, and the ping loop logs only failures to keep output quiet.
+- Introduced repository-wide version management via `version.json` + `scripts/sync_version.sh`, ensuring Xcode targets and release artifacts stay aligned.
+- Enhanced `scripts/build_release.sh` to timestamp/harden signatures, notarize DMGs, and optionally publish tagged releases (pre-release by default) with ZIP/DMG assets directly to Gitea when credentials are configured.
+- Integrated Sparkle (via Swift Package Manager) to handle automatic update checks, downloads, signature verification, and relaunches, replacing the previous custom updater UI. Preferences now simply surface Sparkle's check/download toggles.
+- `scripts/build_release.sh` can optionally run Sparkle's `generate_appcast` (when signing key and download prefix env vars are set), producing a ready-to-host `appcast.xml` alongside the ZIP/DMG artifacts.
 - Further reduced MainView console noise by removing redundant refresh/onAppear logs.

NOTES.md

@@ -3,6 +3,5 @@
     dynamic Data
     static Data
 
-add a merker for "reboot required"
-Add dmg download option for macOS
-Add versioning
+add a marker for "reboot required"
+

README.md

@@ -8,9 +8,10 @@ iKeyMon is a native macOS app written in SwiftUI that provides live monitoring f
 - Shows CPU load, memory usage, swap usage, and disk usage
 - Periodic ping via `/api/ping` endpoint to check if a server is reachable
 - Colored status indicator for each server in the list
-- Automatic updates:
+- Automatic refreshes:
   - Ping every 10 seconds
   - Server info every 60 seconds
+- Built-in Sparkle updater (automatic checks, downloads, and relaunch once a signed release is available)
 - Organized layout using tabs: General / Resources / Services
 - Stores API keys securely in the macOS Keychain
 - Native macOS look & feel using SwiftUI
@@ -46,6 +47,70 @@ Use the helper script to produce distributables in `dist/`:
 ```
 
 It cleans previous artifacts, builds the `Release` configuration, and drops both `iKeyMon-<version>.zip` and `iKeyMon-<version>.dmg` into the `dist` folder (ignored by git). To enable codesigning + notarization, copy `signing.env.example` to `.signing.env`, fill in your Developer ID identity, Apple ID, team ID, and app-specific password. The script sources that file locally (it remains gitignored) and performs signing/notarization when the values are present.
+
+To auto-publish the artifacts as a Gitea release, extend `.signing.env` with:
+
+```
+GITEA_TOKEN="..."
+GITEA_OWNER="tracer"
+GITEA_REPO="iKeyMon"
+# optional: GITEA_API_BASE="https://git.24unix.net/api/v1"
+# optional: GITEA_TARGET_COMMIT="master"
+# optional: GITEA_PRERELEASE="false"   # defaults to true until preferences are done
+# optional Sparkle feed helpers:
+# SPARKLE_EDDSA_KEY_FILE="$HOME/.config/Sparkle/iKeyMon.key"
+# SPARKLE_DOWNLOAD_BASE_TEMPLATE="https://git.24unix.net/tracer/iKeyMon/releases/download/v{{VERSION}}"
+# If you prefer SPARKLE_DOWNLOAD_BASE_URL, it will automatically append `/v<version>` for you.
+# SPARKLE_APPCAST_OUTPUT="$ROOT_DIR/Sparkle/appcast.xml"  # default
+```
+
+`GITEA_TARGET_COMMIT` defaults to the current `HEAD` commit, so overriding it lets you publish from another branch if needed. Whenever those variables are set, the script will create (or reuse) tag `v<version>` and upload both ZIP and DMG as release assets automatically.
+
+If you re-run the release script for the same version, it removes any existing assets with the same filenames before uploading, so you never end up with duplicate ZIP/DMG files on the release page.
+
+### Sparkle updates
+
+iKeyMon uses [Sparkle](https://sparkle-project.org/) for macOS-safe updates.
+
+1. Generate an EdDSA key pair once (`./Packages/Sparkle/bin/generate_keys`). Store the private key on-disk (for example `~/.config/Sparkle/iKeyMon.key`, which the build script expects) and copy the public key into the `SUPublicEDKey` entry (see Info.plist notes below).
+2. `./scripts/build_release.sh` signs the ZIP with Sparkle’s `sign_update` tool and invokes `generate_appcast` automatically when the Sparkle variables are present. The generated feed is written to `Sparkle/appcast.xml`, so commit that file after every release. Point `SPARKLE_DOWNLOAD_BASE_TEMPLATE` at your release-download prefix (e.g. `https://git.24unix.net/tracer/iKeyMon/releases/download/v{{VERSION}}`) so the generated URLs already match Gitea’s asset paths. The feed stays inside the repo (it is not uploaded as a release asset).
+3. Set `SUFeedURL` in Info.plist (or the corresponding build setting) to the raw URL of `Sparkle/appcast.xml` inside this repo (e.g. `https://git.24unix.net/tracer/iKeyMon/raw/branch/master/Sparkle/appcast.xml`).
+
+Preferences expose Sparkle’s built-in toggles for “Automatically check” and “Automatically download”, and the toolbar button simply calls Sparkle’s “Check for Updates…” sheet.
+
+> `./scripts/build_release.sh` will call `generate_appcast` for you when `SPARKLE_EDDSA_KEY_FILE` and `SPARKLE_DOWNLOAD_BASE_TEMPLATE` (or `SPARKLE_DOWNLOAD_BASE_URL`) are set. It tries to locate Sparkle’s CLI in DerivedData automatically, but you can override the path via `SPARKLE_GENERATE_APPCAST`. The resulting feed is written to `SPARKLE_APPCAST_OUTPUT` (defaults to `Sparkle/appcast.xml`).
+
+> Build settings include `INFOPLIST_KEY_SUFeedURL` and `INFOPLIST_KEY_SUPublicEDKey`. Make sure to fill both before shipping a build so Sparkle knows where to fetch updates and how to verify them.
+
+#### Debugging Sparkle updates
+
+Launch the shipped app via CLI with `SPARKLE_VERBOSE_LOGGING=1` to mirror Sparkle’s activity in stdout/stderr:
+
+```bash
+SPARKLE_VERBOSE_LOGGING=1 /Applications/iKeyMon.app/Contents/MacOS/iKeyMon
+```
+
+Sparkle’s installer helper runs in a separate `SUPipedBinary` process. If the installer fails, collect additional details with `log show --process SUPipedBinary --last 5m`.
+
+### Automated release push
+
+If you want `git push origin master` to build/sign/notarize/upload automatically, enable the provided pre-push hook:
+
+```bash
+git config core.hooksPath hooks
+```
+
+The hook (see `hooks/pre-push`) watches for pushes that include `refs/heads/master`, automatically bumps `marketing_version` (incrementing the last component), runs `scripts/build_release.sh`, stages `version.json`, `iKeyMon.xcodeproj/project.pbxproj`, and `Sparkle/appcast.xml`, then creates a commit `chore: release <version>`. It performs its own `git push` behind the scenes and cancels the original push command so you don't upload the same refs twice—once you see “Release … pushed. Original push cancelled”, you're done (Git will report the original push failed; that's expected). To skip the automation temporarily, prepend `SKIP_RELEASE=1` to your `git push` command.
+
+The bumping logic lives in `scripts/bump_version.sh` (feel free to run it manually if you need to create a release without pushing).
+
+### Versioning workflow
+
+- The canonical marketing version lives in `version.json` and follows the format `YY.major.minor` (example: `26.1.2`). Update that file manually whenever you cut a new release branch.
+- The build number is derived automatically from the git commit count on the current branch (you can override it by exporting `BUILD_NUMBER` before running the script if needed).
+- Run `./scripts/sync_version.sh` anytime after editing `version.json` (the release script already calls it). The helper updates `MARKETING_VERSION` and `CURRENT_PROJECT_VERSION` inside `iKeyMon.xcodeproj`, keeping Xcode, the app bundle, and release artifacts in sync.
+- `scripts/build_release.sh` reads the same `version.json` for naming the generated ZIP/DMG, so the artifact names, Info.plist values, and UI displays all stay aligned.
+
 ## 📦 License
 
 MIT — see [LICENSE](LICENSE) for details.

Sources/Extensions/View+Shimmer.swift

@@ -15,13 +15,12 @@ struct ShimmerModifier: ViewModifier {
                 guard active else { return }
                 animate()
             }
-            .onChange(of: active) { isActive in
-                if isActive {
+            .onChange(of: active) {
+                guard active else { return }
                 phase = -1
                 animate()
             }
     }
-    }
 
     private var shimmer: some View {
         LinearGradient(

Sources/Model/API/PingService.swift

@@ -1,7 +1,10 @@
 import Foundation
+import UserNotifications
 
 enum PingService {
-    static func ping(hostname: String, apiKey: String) async -> Bool {
+    private static var previousPingStates: [String: Bool] = [:]
+
+    static func ping(hostname: String, apiKey: String, notificationsEnabled: Bool = true) async -> Bool {
         guard let url = URL(string: "https://\(hostname)/api/v2/ping") else {
             print("❌ [PingService] Invalid URL for \(hostname)")
             return false
@@ -18,17 +21,49 @@ enum PingService {
                 if let responseString = String(data: data, encoding: .utf8) {
                     print("❌ [PingService] HTTP \(httpResponse.statusCode): \(responseString)")
                 }
+                handlePingFailure(for: hostname, notificationsEnabled: notificationsEnabled)
                 return false
             }
 
             if let result = try? JSONDecoder().decode([String: String].self, from: data), result["response"] == "pong" {
+                handlePingSuccess(for: hostname, notificationsEnabled: notificationsEnabled)
                 return true
             } else {
+                handlePingFailure(for: hostname, notificationsEnabled: notificationsEnabled)
                 return false
             }
         } catch {
             print("❌ [PingService] Error pinging \(hostname): \(error)")
+            handlePingFailure(for: hostname, notificationsEnabled: notificationsEnabled)
             return false
         }
     }
+
+    private static func handlePingSuccess(for hostname: String, notificationsEnabled: Bool) {
+        let wasPreviouslyDown = previousPingStates[hostname] == false
+        previousPingStates[hostname] = true
+
+        if wasPreviouslyDown && notificationsEnabled {
+            sendNotification(title: "Server Online", body: "\(hostname) is now online")
+        }
+    }
+
+    private static func handlePingFailure(for hostname: String, notificationsEnabled: Bool) {
+        let wasPreviouslyUp = previousPingStates[hostname] != false
+        previousPingStates[hostname] = false
+
+        if wasPreviouslyUp && notificationsEnabled {
+            sendNotification(title: "Server Offline", body: "\(hostname) is offline")
+        }
+    }
+
+    private static func sendNotification(title: String, body: String) {
+        let content = UNMutableNotificationContent()
+        content.title = title
+        content.body = body
+        content.sound = .default
+
+        let request = UNNotificationRequest(identifier: UUID().uuidString, content: content, trigger: nil)
+        UNUserNotificationCenter.current().add(request)
+    }
 }

Sources/Model/API/ServerInfo.swift

@@ -65,8 +65,9 @@ struct ServerInfo: Codable, Hashable, Equatable {
     }
 
     struct PHPInterpreter: Codable, Hashable, Identifiable, Equatable {
-        var id: String { versionFull }
+        var id: String { [fullVersion, path ?? ""].joined(separator: "|") }
         let version: String
+        let fullVersion: String
         let path: String?
         let configFile: String?
         let extensions: [String]
@@ -75,6 +76,7 @@ struct ServerInfo: Codable, Hashable, Equatable {
 
         init(
             version: String,
+            fullVersion: String? = nil,
             path: String? = nil,
             configFile: String? = nil,
             extensions: [String] = [],
@@ -82,6 +84,7 @@ struct ServerInfo: Codable, Hashable, Equatable {
             maxExecutionTime: String? = nil
         ) {
             self.version = version
+            self.fullVersion = fullVersion ?? version
             self.path = path
             self.configFile = configFile
             self.extensions = extensions
@@ -89,8 +92,8 @@ struct ServerInfo: Codable, Hashable, Equatable {
             self.maxExecutionTime = maxExecutionTime
         }
 
-        var versionFull: String {
-            var components = [version]
+        var versionWithPath: String {
+            var components = [fullVersion]
             if let path, !path.isEmpty {
                 components.append(path)
             }
@@ -162,12 +165,18 @@ struct ServerInfo: Codable, Hashable, Equatable {
     }
 
     var formattedServerTime: String {
-        guard let date = ServerInfo.isoFormatter.date(from: serverTime) else {
-            return serverTime
-        }
+        let normalizedServerTime = ServerInfo.normalizedServerTime(serverTime)
+
+        if let date = ServerInfo.serverTimeParsers
+            .lazy
+            .compactMap({ $0.date(from: normalizedServerTime) })
+            .first {
             return ServerInfo.displayFormatter.string(from: date)
         }
 
+        return serverTime
+    }
+
     var operatingSystemSummary: String? {
         guard let operatingSystem else { return nil }
         let components = [
@@ -181,19 +190,42 @@ struct ServerInfo: Codable, Hashable, Equatable {
 // MARK: - Helpers & Sample Data
 
 extension ServerInfo {
-    private static let isoFormatter: ISO8601DateFormatter = {
-        let formatter = ISO8601DateFormatter()
-        formatter.formatOptions = [.withInternetDateTime, .withFractionalSeconds, .withColonSeparatorInTimeZone]
-        return formatter
+    private static let serverTimeParsers: [ISO8601DateFormatter] = {
+        let withFractional = ISO8601DateFormatter()
+        withFractional.formatOptions = [.withInternetDateTime, .withFractionalSeconds]
+
+        let withoutFractional = ISO8601DateFormatter()
+        withoutFractional.formatOptions = [.withInternetDateTime]
+
+        let noColonTimeZone = ISO8601DateFormatter()
+        noColonTimeZone.formatOptions = [.withFullDate, .withTime, .withDashSeparatorInDate, .withColonSeparatorInTime, .withTimeZone]
+
+        return [withFractional, withoutFractional, noColonTimeZone]
     }()
 
     private static let displayFormatter: DateFormatter = {
         let formatter = DateFormatter()
+        formatter.locale = .autoupdatingCurrent
         formatter.dateStyle = .medium
         formatter.timeStyle = .medium
         return formatter
     }()
 
+    private static func normalizedServerTime(_ value: String) -> String {
+        if value.range(of: #"[+-]\d{2}:\d{2}$"#, options: .regularExpression) != nil {
+            return value
+        }
+
+        guard value.range(of: #"[+-]\d{4}$"#, options: .regularExpression) != nil else {
+            return value
+        }
+
+        var normalized = value
+        let insertionIndex = normalized.index(normalized.endIndex, offsetBy: -2)
+        normalized.insert(":", at: insertionIndex)
+        return normalized
+    }
+
     static let placeholder = ServerInfo(
         hostname: "preview.example.com",
         ipAddresses: ["192.168.1.1", "fe80::1"],

Sources/Model/API/Versions/APIv2_12.swift

@@ -278,6 +278,7 @@ private extension APIv2_12 {
 
         struct AdditionalInterpreter: Decodable {
             let version: String
+            let versionFull: String?
             let path: String?
             let configFile: String?
         }
@@ -398,6 +399,7 @@ private extension APIv2_12 {
                 additionalPHPInterpreters: additionalPhpInterpreters?.map {
                     ServerInfo.PHPInterpreter(
                         version: $0.version,
+                        fullVersion: $0.versionFull,
                         path: $0.path,
                         configFile: $0.configFile,
                         extensions: [],

Sources/Model/API/Versions/APIv2_13.swift

@@ -278,6 +278,7 @@ private extension APIv2_13 {
 
         struct AdditionalInterpreter: Decodable {
             let version: String
+            let versionFull: String?
             let path: String?
             let configFile: String?
         }
@@ -398,6 +399,7 @@ private extension APIv2_13 {
                 additionalPHPInterpreters: additionalPhpInterpreters?.map {
                     ServerInfo.PHPInterpreter(
                         version: $0.version,
+                        fullVersion: $0.versionFull,
                         path: $0.path,
                         configFile: $0.configFile,
                         extensions: [],

Sources/ViewModels/SparkleUpdater.swift

@@ -0,0 +1,127 @@
+import Sparkle
+import Foundation
+import OSLog
+
+@MainActor
+final class SparkleUpdater: NSObject, ObservableObject {
+    private lazy var controller: SPUStandardUpdaterController = {
+        SPUStandardUpdaterController(startingUpdater: true, updaterDelegate: self, userDriverDelegate: nil)
+    }()
+    private let logger = Logger(subsystem: "net.24unix.iKeyMon", category: "Sparkle")
+    private let verboseLogging: Bool
+    @Published var logMessages: [String] = []
+
+    override init() {
+        self.verboseLogging = ProcessInfo.processInfo.environment["SPARKLE_VERBOSE_LOGGING"] == "1"
+        super.init()
+        _ = controller
+        log("Sparkle updater initialized (verbose=\(verboseLogging)).")
+    }
+
+    var automaticallyChecksForUpdates: Bool {
+        get { controller.updater.automaticallyChecksForUpdates }
+        set { controller.updater.automaticallyChecksForUpdates = newValue }
+    }
+
+    var automaticallyDownloadsUpdates: Bool {
+        get { controller.updater.automaticallyDownloadsUpdates }
+        set { controller.updater.automaticallyDownloadsUpdates = newValue }
+    }
+
+    func checkForUpdates() {
+        log("Manual check for updates triggered.")
+        controller.checkForUpdates(nil)
+    }
+
+    private func log(_ message: String) {
+        logger.log("\(message, privacy: .public)")
+        addLogMessage("[INFO] \(message)")
+        if verboseLogging {
+            print("[Sparkle] \(message)")
+        }
+    }
+
+    private func logError(_ message: String) {
+        logger.error("\(message, privacy: .public)")
+        addLogMessage("[ERROR] \(message)")
+        if verboseLogging {
+            fputs("[Sparkle][error] \(message)\n", stderr)
+        }
+    }
+
+    private func addLogMessage(_ message: String) {
+        let timestamp = DateFormatter.localizedString(from: Date(), dateStyle: .none, timeStyle: .medium)
+        let timestampedMessage = "[\(timestamp)] \(message)"
+        logMessages.append(timestampedMessage)
+        if logMessages.count > 100 {
+            logMessages.removeFirst()
+        }
+    }
+
+    private func describe(update item: SUAppcastItem) -> String {
+        let short = item.displayVersionString
+        let build = item.versionString
+        return "\(short) (build \(build))"
+    }
+}
+
+extension SparkleUpdater: SPUUpdaterDelegate {
+    nonisolated func updater(_ updater: SPUUpdater, didFinishLoading appcast: SUAppcast) {
+        Task { @MainActor in
+            log("Loaded Sparkle appcast containing \(appcast.items.count) item(s).")
+        }
+    }
+
+    nonisolated func updater(_ updater: SPUUpdater, didFindValidUpdate item: SUAppcastItem) {
+        Task { @MainActor in
+            log("Found valid update \(describe(update: item))")
+        }
+    }
+
+    nonisolated func updaterDidNotFindUpdate(_ updater: SPUUpdater) {
+        Task { @MainActor in
+            log("No updates available.")
+        }
+    }
+
+    nonisolated func updater(_ updater: SPUUpdater, willDownloadUpdate item: SUAppcastItem, with request: NSMutableURLRequest) {
+        Task { @MainActor in
+            log("Downloading \(describe(update: item)) from \(request.url?.absoluteString ?? "unknown URL")")
+        }
+    }
+
+    nonisolated func updater(_ updater: SPUUpdater, didDownloadUpdate item: SUAppcastItem) {
+        Task { @MainActor in
+            log("Finished downloading \(describe(update: item))")
+        }
+    }
+
+    nonisolated func updater(_ updater: SPUUpdater, failedToDownloadUpdate item: SUAppcastItem, error: Error) {
+        Task { @MainActor in
+            logError("Failed to download \(describe(update: item)): \(error.localizedDescription)")
+        }
+    }
+
+    nonisolated func userDidCancelDownload(_ updater: SPUUpdater) {
+        Task { @MainActor in
+            log("User cancelled Sparkle download.")
+        }
+    }
+
+    nonisolated func updater(_ updater: SPUUpdater, willInstallUpdate item: SUAppcastItem) {
+        Task { @MainActor in
+            log("Will install update \(describe(update: item))")
+        }
+    }
+
+    nonisolated func updater(_ updater: SPUUpdater, didAbortWithError error: Error) {
+        Task { @MainActor in
+            let errorDescription = error as NSError
+            let details = "Domain: \(errorDescription.domain), Code: \(errorDescription.code), Description: \(error.localizedDescription)"
+            logError("Sparkle aborted: \(details)")
+            if let underlying = errorDescription.userInfo[NSUnderlyingErrorKey] as? NSError {
+                logError("Underlying error: Domain: \(underlying.domain), Code: \(underlying.code), Description: \(underlying.localizedDescription)")
+            }
+        }
+    }
+}

Sources/Views/Cells/InfoCell.swift

@@ -5,12 +5,6 @@
 //  Created by tracer on 03.04.25.
 //
 
-//
-//  ResourcesBarRow.swift
-//  iKeyMon
-//
-//  Created by tracer on 31.03.25.
-//
 
 import SwiftUI
 
@@ -32,6 +26,8 @@ struct InfoCell: View {
                         .font(monospaced ? .system(.body, design: .monospaced) : .body)
                 }
             }
+            
+            
 //            if let subtext {
 //                Text(subtext)
 //                    .font(.caption)

Sources/Views/MainView.swift

@@ -6,6 +6,8 @@
 //
 
 import SwiftUI
+import Combine
+import UserNotifications
 
 struct MainView: View {
     
@@ -17,10 +19,15 @@ struct MainView: View {
     @State private var serverToDelete: Server?
     @State private var showDeleteConfirmation = false
     @State private var isFetchingInfo: Bool = false
-    @State private var refreshTimer = Timer.publish(every: 60, on: .main, in: .common).autoconnect()
-    @State private var progress: Double = 0
-    @State private var lastRefresh = Date()
+    @AppStorage("pingInterval") private var pingInterval: Int = 10
+    @AppStorage("refreshInterval") private var refreshInterval: Int = 60
+    @AppStorage("enableStatusNotifications") private var enableStatusNotifications: Bool = true
+    @AppStorage("enableAlertNotifications") private var enableAlertNotifications: Bool = true
+    @State private var refreshTimer: Timer.TimerPublisher?
+    @State private var refreshSubscription: AnyCancellable?
     @State private var pingTimer: Timer?
+    @State private var lastRefreshInterval: Int?
+    @State private var previousServiceStates: [String: String] = [:]
     private let serverOrderKey = MainView.serverOrderKeyStatic
     private let storedServersKey = MainView.storedServersKeyStatic
 
@@ -30,7 +37,7 @@ struct MainView: View {
     @State private var selectedServerID: UUID?
 
     var body: some View {
-            
+        var mainContent: some View {
             NavigationSplitView {
                 List(selection: $selectedServerID) {
                 ForEach(servers) { server in
@@ -77,6 +84,8 @@ struct MainView: View {
                 ContentUnavailableView("No Server Selected", systemImage: "server.rack")
             }
             }
+        }
+        return mainContent
         .sheet(isPresented: $showAddServerSheet) {
             ServerFormView(
                 mode: .add,
@@ -97,12 +106,9 @@ struct MainView: View {
             }
             Button("Cancel", role: .cancel) {}
         }
-        .onReceive(refreshTimer) { _ in
-            for server in servers {
-                fetchServerInfo(for: server.id)
-            }
-        }
         .onAppear {
+            requestNotificationPermissions()
+
             let initialID: UUID?
             if let storedID = UserDefaults.standard.string(forKey: "selectedServerID"),
                let uuid = UUID(uuidString: storedID),
@@ -124,13 +130,17 @@ struct MainView: View {
                     await prefetchOtherServers(activeID: initialID)
                 }
             }
-            pingAllServers()
-            pingTimer = Timer.scheduledTimer(withTimeInterval: 10.0, repeats: true) { _ in
-                pingAllServers()
+            setupTimers()
+        }
+        .onChange(of: pingInterval) { _, _ in
+            setupPingTimer()
+        }
+        .onChange(of: refreshInterval) { oldValue, newValue in
+            if oldValue != newValue {
+                setupRefreshTimer()
             }
         }
         .frame(minWidth: 800, minHeight: 450)
-
     }
     
     private func fetchServerInfo(for id: UUID) {
@@ -160,6 +170,7 @@ struct MainView: View {
                         var updated = servers[index]
                         updated.info = info
                         servers[index] = updated
+                        checkServiceStatusChanges(for: server.hostname, newInfo: info)
                     }
                 }
             } catch {
@@ -220,7 +231,7 @@ struct MainView: View {
         for (index, server) in servers.enumerated() {
             Task {
                 let apiKey = KeychainHelper.loadApiKey(for: server.hostname)?.trimmingCharacters(in: .whitespacesAndNewlines) ?? ""
-                let pingable = await PingService.ping(hostname: server.hostname, apiKey: apiKey)
+                let pingable = await PingService.ping(hostname: server.hostname, apiKey: apiKey, notificationsEnabled: enableStatusNotifications)
                 await MainActor.run {
                     servers[index].pingable = pingable
                 }
@@ -231,6 +242,30 @@ struct MainView: View {
         }
     }
 
+    private func setupTimers() {
+        setupPingTimer()
+        setupRefreshTimer()
+    }
+
+    private func setupPingTimer() {
+        pingTimer?.invalidate()
+        pingAllServers()
+        pingTimer = Timer.scheduledTimer(withTimeInterval: Double(pingInterval), repeats: true) { _ in
+            pingAllServers()
+        }
+    }
+
+    private func setupRefreshTimer() {
+        refreshSubscription?.cancel()
+        refreshSubscription = nil
+        refreshTimer = Timer.publish(every: Double(refreshInterval), on: .main, in: .common)
+        refreshSubscription = refreshTimer?.autoconnect().sink { _ in
+            for server in servers {
+                fetchServerInfo(for: server.id)
+            }
+        }
+    }
+
     private static func loadStoredServers() -> [Server] {
         let defaults = UserDefaults.standard
         guard let data = defaults.data(forKey: storedServersKeyStatic) else {
@@ -257,8 +292,49 @@ struct MainView: View {
             return []
         }
     }
+
+    private func requestNotificationPermissions() {
+        Task {
+            do {
+                try await UNUserNotificationCenter.current().requestAuthorization(options: [.alert, .sound])
+            } catch {
+                print("❌ [MainView] Failed to request notification permissions: \(error)")
+            }
+        }
+    }
+
+    private func checkServiceStatusChanges(for hostname: String, newInfo: ServerInfo) {
+        guard let ports = newInfo.ports else { return }
+
+        for port in ports {
+            let key = "\(hostname)-\(port.id)"
+            let previousStatus = previousServiceStates[key]
+            let currentStatus = port.status
+
+            previousServiceStates[key] = currentStatus
+
+            if let previousStatus, previousStatus != currentStatus {
+                if currentStatus == "offline" && enableStatusNotifications {
+                    sendServiceNotification(service: port.service, hostname: hostname, status: "offline")
+                } else if currentStatus == "online" && previousStatus == "offline" && enableStatusNotifications {
+                    sendServiceNotification(service: port.service, hostname: hostname, status: "online")
+                }
+            }
+        }
+    }
+
+    private func sendServiceNotification(service: String, hostname: String, status: String) {
+        let content = UNMutableNotificationContent()
+        content.title = "\(service) \(status.uppercased())"
+        content.body = "\(service) on \(hostname) is \(status)"
+        content.sound = .default
+
+        let request = UNNotificationRequest(identifier: UUID().uuidString, content: content, trigger: nil)
+        UNUserNotificationCenter.current().add(request)
+    }
 }
 
 #Preview {
     MainView()
+        .environmentObject(SparkleUpdater())
 }

Sources/Views/PreferencesView.swift

@@ -2,13 +2,14 @@ import SwiftUI
 
 struct PreferencesView: View {
     private enum Tab: CaseIterable {
-        case monitor, notifications, alerts
+        case monitor, notifications, alerts, updates
 
         var title: String {
             switch self {
             case .monitor: return "Monitor"
             case .notifications: return "Notifications"
             case .alerts: return "Alerts"
+            case .updates: return "Updates"
             }
         }
 
@@ -17,9 +18,11 @@ struct PreferencesView: View {
             case .monitor: return "waveform.path.ecg"
             case .notifications: return "bell.badge"
             case .alerts: return "exclamationmark.triangle"
+            case .updates: return "square.and.arrow.down"
             }
         }
     }
+    @EnvironmentObject private var sparkleUpdater: SparkleUpdater
 
     @AppStorage("pingInterval") private var storedPingInterval: Int = 10
     @AppStorage("refreshInterval") private var storedRefreshInterval: Int = 60
@@ -77,14 +80,14 @@ struct PreferencesView: View {
                     .padding(.vertical, 8)
                     .padding(.horizontal, 10)
                     .frame(maxWidth: .infinity, alignment: .leading)
-                }
-                .buttonStyle(.plain)
-                .focusable(false)
-                .contentShape(Capsule())
                     .background(
                         Capsule(style: .continuous)
                             .fill(backgroundColor(for: tab))
                     )
+                }
+                .buttonStyle(.plain)
+                .focusable(false)
+                .contentShape(Capsule())
                 .foregroundColor(selection == tab ? .white : .primary)
                 .onHover { isHovering in
                     hoveredTab = isHovering ? tab : (hoveredTab == tab ? nil : hoveredTab)
@@ -120,6 +123,9 @@ struct PreferencesView: View {
                 NotificationsPreferencesView()
             case .alerts:
                 AlertsPreferencesView()
+            case .updates:
+                UpdatesPreferencesView()
+                    .environmentObject(sparkleUpdater)
             }
         }
     }
@@ -220,20 +226,52 @@ private struct MonitorPreferencesView: View {
     }
 }
 
-private struct NotificationsPreferencesView: View {
-    var body: some View {
-        VStack(alignment: .leading, spacing: 12) {
-            Text("Notifications")
-                .font(.headline)
-                .padding(.bottom)
+private struct UpdatesPreferencesView: View {
+    @EnvironmentObject var sparkleUpdater: SparkleUpdater
 
-            Text("Configure notification behavior here.")
-                .foregroundColor(.secondary)
+    private var automaticallyChecksBinding: Binding<Bool> {
+        Binding(
+            get: { sparkleUpdater.automaticallyChecksForUpdates },
+            set: { sparkleUpdater.automaticallyChecksForUpdates = $0 }
+        )
+    }
+
+    private var automaticallyDownloadsBinding: Binding<Bool> {
+        Binding(
+            get: { sparkleUpdater.automaticallyDownloadsUpdates },
+            set: { sparkleUpdater.automaticallyDownloadsUpdates = $0 }
+        )
+    }
+
+    var body: some View {
+        VStack(alignment: .leading, spacing: 18) {
+            Toggle("Automatically check for updates", isOn: automaticallyChecksBinding)
+            Toggle("Automatically download updates", isOn: automaticallyDownloadsBinding)
+
+            Button(action: sparkleUpdater.checkForUpdates) {
+                Label("Check for Updates Now", systemImage: "sparkles")
+            }
 
             Spacer()
         }
+        .toggleStyle(.switch)
+        .frame(maxWidth: .infinity, alignment: .leading)
+    }
+}
+
+private struct NotificationsPreferencesView: View {
+    @AppStorage("enableStatusNotifications") private var enableStatusNotifications: Bool = true
+    @AppStorage("enableAlertNotifications") private var enableAlertNotifications: Bool = true
+
+    var body: some View {
+        VStack(alignment: .leading, spacing: 18) {
+            Toggle("Status Notifications", isOn: $enableStatusNotifications)
+            Toggle("Alert Notifications", isOn: $enableAlertNotifications)
+
+            Spacer()
+        }
+        .toggleStyle(.switch)
         .frame(maxWidth: .infinity, alignment: .leading)
-        .padding()
     }
 }
 

Sources/Views/ServerDetailView.swift

@@ -11,6 +11,7 @@ struct ServerDetailView: View {
     @Binding var server: Server
     var isFetching: Bool
     @AppStorage("showIntervalIndicator") private var showIntervalIndicator: Bool = true
+    @AppStorage("refreshInterval") private var refreshInterval: Int = 60
 
     private var showPlaceholder: Bool {
         server.info == nil
@@ -59,7 +60,7 @@ struct ServerDetailView: View {
         .onReceive(timer) { _ in
             guard showIntervalIndicator else { return }
             withAnimation(.linear(duration: 1.0 / 60.0)) {
-                progress += 1.0 / (60.0 * 60.0)
+                progress += 1.0 / (Double(refreshInterval) * 60.0)
                 if progress >= 1 { progress = 0 }
             }
         }

Sources/Views/ServerFormView.swift

@@ -20,6 +20,8 @@ struct ServerFormView: View {
     @State private var hostname: String
     @State private var apiKey: String
     @State private var connectionOK: Bool = false
+    @State private var testingConnection: Bool = false
+    @State private var connectionError: String = ""
 
     @Environment(\.dismiss) private var dismiss
     
@@ -55,6 +57,12 @@ struct ServerFormView: View {
             SecureField("API Key", text: $apiKey)
                 .textFieldStyle(RoundedBorderTextFieldStyle())
 
+            if !connectionError.isEmpty {
+                Text(connectionError)
+                    .foregroundColor(.red)
+                    .font(.caption)
+            }
+
             HStack {
                 Button("Cancel") {
                     dismiss()
@@ -65,6 +73,8 @@ struct ServerFormView: View {
                         await testConnection()
                     }
                 }
+                .disabled(hostname.isEmpty || apiKey.isEmpty || testingConnection)
+
                 Button("Save") {
                     saveServer()
                     updateServer()
@@ -102,9 +112,21 @@ struct ServerFormView: View {
         let host = hostname.trimmingCharacters(in: .whitespacesAndNewlines)
         let key = apiKey.trimmingCharacters(in: .whitespacesAndNewlines)
 
+        await MainActor.run {
+            testingConnection = true
+            connectionError = ""
+        }
+
         let reachable = await PingService.ping(hostname: host, apiKey: key)
         await MainActor.run {
-            connectionOK = reachable
+            testingConnection = false
+            if reachable {
+                connectionOK = true
+                connectionError = ""
+            } else {
+                connectionOK = false
+                connectionError = "Connection failed. Check hostname and API key."
+            }
         }
 //
 //        guard let url = URL(string: "https://\(host)/api/v2/ping") else {

Sources/Views/Tabs/GeneralView.swift

@@ -59,10 +59,11 @@ struct GeneralView: View {
                                 var description = os.label.trimmingCharacters(in: .whitespacesAndNewlines)
                                 if description.isEmpty {
                                     description = distro
-                                } else if !distro.isEmpty && distro.caseInsensitiveCompare(description) != .orderedSame {
+                                } else if !distro.isEmpty && description.range(of: distro, options: [.caseInsensitive]) == nil {
                                     description += " • \(distro)"
                                 }
-                                if !os.architecture.isEmpty {
+                                if !os.architecture.isEmpty &&
+                                    description.range(of: os.architecture, options: [.caseInsensitive]) == nil {
                                     description += " (\(os.architecture))"
                                 }
                                 if !description.isEmpty {
@@ -105,7 +106,13 @@ struct GeneralView: View {
                                 if interpreters.isEmpty {
                                     return ["None"]
                                 }
-                                return interpreters.map { $0.versionFull }
+                                let versions = interpreters
+                                    .map { $0.fullVersion }
+                                    .filter { !$0.isEmpty }
+                                if versions.isEmpty {
+                                    return ["None"]
+                                }
+                                return [versions.joined(separator: " • ")]
                             }(),
                             monospaced: true
                         )

Sources/iKeyMonApp.swift

@@ -12,6 +12,8 @@ import AppKit
 
 @main
 struct iKeyMonApp: App {
+    @StateObject private var sparkleUpdater = SparkleUpdater()
+
     init() {
         #if os(macOS)
         if let customIcon = NSImage(named: "AppIcon") {
@@ -23,6 +25,7 @@ struct iKeyMonApp: App {
     var body: some Scene {
         WindowGroup {
             MainView()
+                .environmentObject(sparkleUpdater)
                 .onDisappear {
                     NSApp.terminate(nil)
                 }
@@ -32,6 +35,7 @@ struct iKeyMonApp: App {
         Settings {
             PreferencesView()
                 .padding()
+                .environmentObject(sparkleUpdater)
         }
     }
 }

Sparkle/appcast.xml

@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="utf-8" standalone="yes"?>
+<rss xmlns:sparkle="http://www.andymatuschak.org/xml-namespaces/sparkle" version="2.0">
+    <channel>
+        <title>iKeyMon</title>
+        <item>
+            <title>26.1.2</title>
+            <pubDate>Sat, 03 Jan 2026 18:05:27 +0100</pubDate>
+            <sparkle:version>164</sparkle:version>
+            <sparkle:shortVersionString>26.1.2</sparkle:shortVersionString>
+            <sparkle:minimumSystemVersion>15.2</sparkle:minimumSystemVersion>
+            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.1.2/iKeyMon-26.1.2.zip" length="3007173" type="application/octet-stream" sparkle:edSignature="CiNeGZ9h4WtI/ZOW371EAEKGK0vWdu1VhBk5ewh2hoq+4C8R9DbnQvDyHvwFy4wh6VpLahp/mXr4gV5alEIRCw=="/>
+        </item>
+        <item>
+            <title>26.1.1</title>
+            <pubDate>Sat, 03 Jan 2026 16:34:21 +0100</pubDate>
+            <sparkle:version>162</sparkle:version>
+            <sparkle:shortVersionString>26.1.1</sparkle:shortVersionString>
+            <sparkle:minimumSystemVersion>15.2</sparkle:minimumSystemVersion>
+            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.1.1/iKeyMon-26.1.1.zip" length="3007145" type="application/octet-stream" sparkle:edSignature="iIRDl2//fBGMkI0AwE5PzSOZO5fowONqEx/6EH3SLnWxj6LC0LQh+SifVAwpf4g5/zPEMXNrLl+CZB7LEz/HCw=="/>
+        </item>
+        <item>
+            <title>26.0.70</title>
+            <pubDate>Sat, 03 Jan 2026 15:49:42 +0100</pubDate>
+            <sparkle:version>154</sparkle:version>
+            <sparkle:shortVersionString>26.0.70</sparkle:shortVersionString>
+            <sparkle:minimumSystemVersion>15.2</sparkle:minimumSystemVersion>
+            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.0.70/iKeyMon-26.0.70.zip" length="3007098" type="application/octet-stream" sparkle:edSignature="XZA2xs40EZnexsv/DvzjiH2yiQACqlU+KSDFGqFQTgCTFEPxg6w/qx1cuolgHD3kQJm/svRTNYRR4OVYt9UQBA=="/>
+        </item>
+    </channel>
+</rss>

hooks/pre-push

@@ -0,0 +1,84 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+REMOTE_NAME="${1:-origin}"
+QUIET_RELEASE="${QUIET_RELEASE:-1}"
+RELEASE_LOG="${RELEASE_LOG:-$ROOT_DIR/build/release.log}"
+
+if [[ -n "${SKIP_RELEASE:-}" ]]; then
+  echo "release: skipped (SKIP_RELEASE=1)"
+  exit 0
+fi
+
+should_release=false
+release_local_ref=""
+release_remote_ref=""
+while read -r local_ref local_sha remote_ref remote_sha; do
+  [[ -z "${local_ref:-}" ]] && continue
+  if [[ "$local_ref" == "refs/heads/master" || "$remote_ref" == "refs/heads/master" ]]; then
+    should_release=true
+    release_local_ref="$local_ref"
+    release_remote_ref="${remote_ref:-refs/heads/master}"
+  fi
+done
+
+if [[ "$should_release" != true ]]; then
+  current_branch="$(git -C "$ROOT_DIR" symbolic-ref --short -q HEAD || true)"
+  if [[ "$current_branch" == "master" ]]; then
+    should_release=true
+    release_local_ref="refs/heads/master"
+    release_remote_ref="refs/heads/master"
+  fi
+fi
+
+if [[ "$should_release" != true ]]; then
+  exit 0
+fi
+
+if [[ "$QUIET_RELEASE" == "1" ]]; then
+  mkdir -p "$(dirname "$RELEASE_LOG")"
+  : >"$RELEASE_LOG"
+fi
+
+run_logged() {
+  if [[ "$QUIET_RELEASE" == "1" ]]; then
+    "$@" >>"$RELEASE_LOG" 2>&1
+  else
+    "$@"
+  fi
+}
+
+if [[ "$QUIET_RELEASE" == "1" ]]; then
+  NEW_VERSION="$("$ROOT_DIR/scripts/bump_version.sh" 2>>"$RELEASE_LOG" | tee -a "$RELEASE_LOG")"
+else
+  NEW_VERSION="$("$ROOT_DIR/scripts/bump_version.sh")"
+fi
+run_logged "$ROOT_DIR/scripts/sync_version.sh"
+
+git -C "$ROOT_DIR" add "$ROOT_DIR/version.json" "$ROOT_DIR/iKeyMon.xcodeproj/project.pbxproj"
+
+echo "release: building v${NEW_VERSION}..."
+if ! run_logged "$ROOT_DIR/scripts/build_release.sh"; then
+  echo "release: failed (log: $RELEASE_LOG)"
+  exit 1
+fi
+
+git -C "$ROOT_DIR" add "$ROOT_DIR/version.json" "$ROOT_DIR/iKeyMon.xcodeproj/project.pbxproj" "$ROOT_DIR/Sparkle/appcast.xml"
+
+if git -C "$ROOT_DIR" diff --cached --quiet; then
+  echo "release: no changes detected; skipping commit"
+else
+  run_logged git -C "$ROOT_DIR" commit -m "chore: release ${NEW_VERSION}" || {
+    echo "release: commit failed (log: $RELEASE_LOG)"
+    exit 1
+  }
+fi
+
+if SKIP_RELEASE=1 git -C "$ROOT_DIR" push --quiet "$REMOTE_NAME" "${release_local_ref:-refs/heads/master}:${release_remote_ref:-refs/heads/master}"; then
+  echo "release: success v${NEW_VERSION}"
+  exit 1
+else
+  echo "release: push failed (log: $RELEASE_LOG)"
+  exit 1
+fi

iKeyMon-Info.plist

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>SUFeedURL</key>
+	<string>https://git.24unix.net/tracer/iKeyMon/raw/branch/master/Sparkle/appcast.xml</string>
+	<key>SUPublicEDKey</key>
+	<string>EgJgrOGQ79L5me616jA7kDCEOgx+Rg11uYLYLLIyzTI=</string>
+	<key>SUEnableInstallerLauncherService</key>
+	<false/>
+</dict>
+</plist>

iKeyMon.entitlements

@@ -3,10 +3,12 @@
 <plist version="1.0">
 <dict>
 	<key>com.apple.security.app-sandbox</key>
-	<true/>
-	<key>com.apple.security.files.user-selected.read-only</key>
-	<true/>
+	<false/>
 	<key>com.apple.security.network.client</key>
 	<true/>
+	<key>com.apple.security.files.downloads.read-write</key>
+	<true/>
+	<key>com.apple.security.files.user-selected.read-write</key>
+	<true/>
 </dict>
 </plist>

iKeyMon.xcodeproj/project.pbxproj

@@ -7,18 +7,36 @@
 	objects = {
 
 /* Begin PBXBuildFile section */
+		5221016D2EE5E82700D04952 /* appcast.xml in Resources */ = {isa = PBXBuildFile; fileRef = 5221016B2EE5E82700D04952 /* appcast.xml */; };
 		52A9B79F2EC8E7EE004DD4A2 /* Assets.xcassets in Resources */ = {isa = PBXBuildFile; fileRef = 52A9B7872EC8E7EE004DD4A2 /* Assets.xcassets */; };
 		52A9B8222EC8FA8A004DD4A2 /* CHANGELOG.md in Resources */ = {isa = PBXBuildFile; fileRef = 52A9B8212EC8FA8A004DD4A2 /* CHANGELOG.md */; };
 		52A9B9722ECF751C004DD4A2 /* signing.env.example in Resources */ = {isa = PBXBuildFile; fileRef = 52A9B9712ECF751C004DD4A2 /* signing.env.example */; };
+		52A9BD112ED377F7004DD4A2 /* Sparkle in Frameworks */ = {isa = PBXBuildFile; productRef = 52A9BD102ED377F7004DD4A2 /* Sparkle */; };
+		52A9BECA2ED3874F004DD4A2 /* README.md in Resources */ = {isa = PBXBuildFile; fileRef = 52A9BEC92ED3874F004DD4A2 /* README.md */; };
 /* End PBXBuildFile section */
 
+/* Begin PBXCopyFilesBuildPhase section */
+		52A9BD152ED37BD8004DD4A2 /* CopyFiles */ = {
+			isa = PBXCopyFilesBuildPhase;
+			buildActionMask = 2147483647;
+			dstPath = "";
+			dstSubfolderSpec = 6;
+			files = (
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXCopyFilesBuildPhase section */
+
 /* Begin PBXFileReference section */
 		5203C24D2D997D2800576D4A /* iKeyMon.app */ = {isa = PBXFileReference; explicitFileType = wrapper.application; includeInIndex = 0; path = iKeyMon.app; sourceTree = BUILT_PRODUCTS_DIR; };
+		5221016B2EE5E82700D04952 /* appcast.xml */ = {isa = PBXFileReference; lastKnownFileType = text.xml; path = appcast.xml; sourceTree = "<group>"; };
 		52A9B7872EC8E7EE004DD4A2 /* Assets.xcassets */ = {isa = PBXFileReference; lastKnownFileType = folder.assetcatalog; path = Assets.xcassets; sourceTree = "<group>"; };
 		52A9B7882EC8E7EE004DD4A2 /* iKeyMon.entitlements */ = {isa = PBXFileReference; lastKnownFileType = text.plist.entitlements; path = iKeyMon.entitlements; sourceTree = "<group>"; };
 		52A9B8212EC8FA8A004DD4A2 /* CHANGELOG.md */ = {isa = PBXFileReference; lastKnownFileType = net.daringfireball.markdown; path = CHANGELOG.md; sourceTree = "<group>"; };
 		52A9B8BA2ECA35FB004DD4A2 /* NOTES.md */ = {isa = PBXFileReference; lastKnownFileType = net.daringfireball.markdown; path = NOTES.md; sourceTree = "<group>"; };
 		52A9B9712ECF751C004DD4A2 /* signing.env.example */ = {isa = PBXFileReference; lastKnownFileType = text; path = signing.env.example; sourceTree = "<group>"; };
+		52A9BEC92ED3874F004DD4A2 /* README.md */ = {isa = PBXFileReference; lastKnownFileType = net.daringfireball.markdown; path = README.md; sourceTree = "<group>"; };
+		52A9C38F2ED4D753004DD4A2 /* iKeyMon-Info.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist; path = "iKeyMon-Info.plist"; sourceTree = "<group>"; };
 /* End PBXFileReference section */
 
 /* Begin PBXFileSystemSynchronizedRootGroup section */
@@ -39,6 +57,7 @@
 			isa = PBXFrameworksBuildPhase;
 			buildActionMask = 2147483647;
 			files = (
+				52A9BD112ED377F7004DD4A2 /* Sparkle in Frameworks */,
 			);
 			runOnlyForDeploymentPostprocessing = 0;
 		};
@@ -48,6 +67,7 @@
 		5203C2442D997D2800576D4A = {
 			isa = PBXGroup;
 			children = (
+				52A9C38F2ED4D753004DD4A2 /* iKeyMon-Info.plist */,
 				52A9B8BE2ECB68B5004DD4A2 /* Sources */,
 				52A9B7872EC8E7EE004DD4A2 /* Assets.xcassets */,
 				52A9B7882EC8E7EE004DD4A2 /* iKeyMon.entitlements */,
@@ -56,6 +76,9 @@
 				52A9B8212EC8FA8A004DD4A2 /* CHANGELOG.md */,
 				52A9B8BA2ECA35FB004DD4A2 /* NOTES.md */,
 				52A9B9712ECF751C004DD4A2 /* signing.env.example */,
+				52A9BEC92ED3874F004DD4A2 /* README.md */,
+				52A9BD122ED37E08004DD4A2 /* Frameworks */,
+				5221016C2EE5E82700D04952 /* Sparkle */,
 			);
 			sourceTree = "<group>";
 		};
@@ -67,6 +90,21 @@
 			name = Products;
 			sourceTree = "<group>";
 		};
+		5221016C2EE5E82700D04952 /* Sparkle */ = {
+			isa = PBXGroup;
+			children = (
+				5221016B2EE5E82700D04952 /* appcast.xml */,
+			);
+			path = Sparkle;
+			sourceTree = "<group>";
+		};
+		52A9BD122ED37E08004DD4A2 /* Frameworks */ = {
+			isa = PBXGroup;
+			children = (
+			);
+			name = Frameworks;
+			sourceTree = "<group>";
+		};
 /* End PBXGroup section */
 
 /* Begin PBXNativeTarget section */
@@ -77,6 +115,7 @@
 				5203C2492D997D2800576D4A /* Sources */,
 				5203C24A2D997D2800576D4A /* Frameworks */,
 				5203C24B2D997D2800576D4A /* Resources */,
+				52A9BD152ED37BD8004DD4A2 /* CopyFiles */,
 			);
 			buildRules = (
 			);
@@ -88,6 +127,7 @@
 			);
 			name = iKeyMon;
 			packageProductDependencies = (
+				52A9BD102ED377F7004DD4A2 /* Sparkle */,
 			);
 			productName = iKeyMon;
 			productReference = 5203C24D2D997D2800576D4A /* iKeyMon.app */;
@@ -117,6 +157,9 @@
 			);
 			mainGroup = 5203C2442D997D2800576D4A;
 			minimizedProjectReferenceProxies = 1;
+			packageReferences = (
+				52A9BD0F2ED377F7004DD4A2 /* XCRemoteSwiftPackageReference "Sparkle" */,
+			);
 			preferredProjectObjectVersion = 77;
 			productRefGroup = 5203C24E2D997D2800576D4A /* Products */;
 			projectDirPath = "";
@@ -133,6 +176,8 @@
 			buildActionMask = 2147483647;
 			files = (
 				52A9B8222EC8FA8A004DD4A2 /* CHANGELOG.md in Resources */,
+				52A9BECA2ED3874F004DD4A2 /* README.md in Resources */,
+				5221016D2EE5E82700D04952 /* appcast.xml in Resources */,
 				52A9B79F2EC8E7EE004DD4A2 /* Assets.xcassets in Resources */,
 				52A9B9722ECF751C004DD4A2 /* signing.env.example in Resources */,
 			);
@@ -277,19 +322,22 @@
 				CODE_SIGN_ENTITLEMENTS = iKeyMon.entitlements;
 				CODE_SIGN_STYLE = Automatic;
 				COMBINE_HIDPI_IMAGES = YES;
-				CURRENT_PROJECT_VERSION = 1;
+				CURRENT_PROJECT_VERSION = 164;
 				DEVELOPMENT_ASSET_PATHS = "\"Preview Content\"";
 				DEVELOPMENT_TEAM = Q5486ZVAFT;
 				ENABLE_HARDENED_RUNTIME = YES;
 				ENABLE_PREVIEWS = YES;
 				GENERATE_INFOPLIST_FILE = YES;
+				INFOPLIST_FILE = "iKeyMon-Info.plist";
 				INFOPLIST_KEY_CFBundleIconName = AppIcon;
 				INFOPLIST_KEY_NSHumanReadableCopyright = "";
+				INFOPLIST_KEY_SUFeedURL = "https://git.24unix.net/tracer/iKeyMon/releases/appcast.xml";
+				INFOPLIST_KEY_SUPublicEDKey = "EgJgrOGQ79L5me616jA7kDCEOgx+Rg11uYLYLLIyzTI=";
 				LD_RUNPATH_SEARCH_PATHS = (
 					"$(inherited)",
 					"@executable_path/../Frameworks",
 				);
-				MARKETING_VERSION = 1.0;
+				MARKETING_VERSION = 26.1.2;
 				PRODUCT_BUNDLE_IDENTIFIER = net.24unix.iKeyMon;
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				SWIFT_EMIT_LOC_STRINGS = YES;
@@ -305,19 +353,22 @@
 				CODE_SIGN_ENTITLEMENTS = iKeyMon.entitlements;
 				CODE_SIGN_STYLE = Automatic;
 				COMBINE_HIDPI_IMAGES = YES;
-				CURRENT_PROJECT_VERSION = 1;
+				CURRENT_PROJECT_VERSION = 164;
 				DEVELOPMENT_ASSET_PATHS = "\"Preview Content\"";
 				DEVELOPMENT_TEAM = Q5486ZVAFT;
 				ENABLE_HARDENED_RUNTIME = YES;
 				ENABLE_PREVIEWS = YES;
 				GENERATE_INFOPLIST_FILE = YES;
+				INFOPLIST_FILE = "iKeyMon-Info.plist";
 				INFOPLIST_KEY_CFBundleIconName = AppIcon;
 				INFOPLIST_KEY_NSHumanReadableCopyright = "";
+				INFOPLIST_KEY_SUFeedURL = "https://git.24unix.net/tracer/iKeyMon/releases/appcast.xml";
+				INFOPLIST_KEY_SUPublicEDKey = "EgJgrOGQ79L5me616jA7kDCEOgx+Rg11uYLYLLIyzTI=";
 				LD_RUNPATH_SEARCH_PATHS = (
 					"$(inherited)",
 					"@executable_path/../Frameworks",
 				);
-				MARKETING_VERSION = 1.0;
+				MARKETING_VERSION = 26.1.2;
 				PRODUCT_BUNDLE_IDENTIFIER = net.24unix.iKeyMon;
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				SWIFT_EMIT_LOC_STRINGS = YES;
@@ -347,6 +398,25 @@
 			defaultConfigurationName = Release;
 		};
 /* End XCConfigurationList section */
+
+/* Begin XCRemoteSwiftPackageReference section */
+		52A9BD0F2ED377F7004DD4A2 /* XCRemoteSwiftPackageReference "Sparkle" */ = {
+			isa = XCRemoteSwiftPackageReference;
+			repositoryURL = "https://github.com/sparkle-project/Sparkle";
+			requirement = {
+				kind = upToNextMajorVersion;
+				minimumVersion = 2.8.1;
+			};
+		};
+/* End XCRemoteSwiftPackageReference section */
+
+/* Begin XCSwiftPackageProductDependency section */
+		52A9BD102ED377F7004DD4A2 /* Sparkle */ = {
+			isa = XCSwiftPackageProductDependency;
+			package = 52A9BD0F2ED377F7004DD4A2 /* XCRemoteSwiftPackageReference "Sparkle" */;
+			productName = Sparkle;
+		};
+/* End XCSwiftPackageProductDependency section */
 	};
 	rootObject = 5203C2452D997D2800576D4A /* Project object */;
 }

iKeyMon.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved

@@ -0,0 +1,15 @@
+{
+  "originHash" : "e721da7f9826abdffcb6185e886155efa2514bd6234475f1afa893e29eb258d6",
+  "pins" : [
+    {
+      "identity" : "sparkle",
+      "kind" : "remoteSourceControl",
+      "location" : "https://github.com/sparkle-project/Sparkle",
+      "state" : {
+        "revision" : "5581748cef2bae787496fe6d61139aebe0a451f6",
+        "version" : "2.8.1"
+      }
+    }
+  ],
+  "version" : 3
+}

scripts/build_release.sh

@@ -7,12 +7,140 @@ ARTIFACTS_DIR="$ROOT_DIR/dist"
 SCHEME="iKeyMon"
 PROJECT="iKeyMon.xcodeproj"
 CREDENTIALS_FILE="$ROOT_DIR/.signing.env"
+VERSION_FILE="$ROOT_DIR/version.json"
+DERIVED_DATA_ROOT="${DERIVED_DATA_ROOT:-$HOME/Library/Developer/Xcode/DerivedData}"
+
+find_generate_appcast() {
+  if [[ -n "${SPARKLE_GENERATE_APPCAST:-}" && -x "${SPARKLE_GENERATE_APPCAST}" ]]; then
+    echo "$SPARKLE_GENERATE_APPCAST"
+    return
+  fi
+
+  if [[ -d "$DERIVED_DATA_ROOT" ]]; then
+    local candidate
+    candidate="$(find "$DERIVED_DATA_ROOT" -path "*/SourcePackages/artifacts/sparkle/Sparkle/bin/generate_appcast" -type f 2>/dev/null | head -n 1 || true)"
+    if [[ -n "$candidate" ]]; then
+      echo "$candidate"
+      return
+    fi
+  fi
+}
+
+generate_appcast() {
+  local generator
+  generator="$(find_generate_appcast)"
+  local download_prefix=""
+  if [[ -n "${SPARKLE_DOWNLOAD_BASE_TEMPLATE:-}" ]]; then
+    download_prefix="${SPARKLE_DOWNLOAD_BASE_TEMPLATE//\{\{VERSION\}\}/$VERSION}"
+  elif [[ -n "${SPARKLE_DOWNLOAD_BASE_URL:-}" ]]; then
+    download_prefix="${SPARKLE_DOWNLOAD_BASE_URL%/}/v${VERSION}"
+  fi
+
+  # Ensure the version segment is present to match Gitea's /download/vX.Y.Z/ layout.
+  if [[ -n "$download_prefix" ]] && [[ "$download_prefix" != *"/$VERSION"* ]]; then
+    download_prefix="${download_prefix%/}/v${VERSION}"
+  fi
+
+  if [[ -z "$generator" || -z "${SPARKLE_EDDSA_KEY_FILE:-}" || -z "$download_prefix" ]]; then
+    echo "ℹ️ Skipping Sparkle appcast generation (generator/key/download prefix not configured)."
+    return
+  fi
+
+  local sparkle_cache="$HOME/Library/Caches/Sparkle_generate_appcast"
+  rm -rf "$sparkle_cache"
+
+  local output="$SPARKLE_APPCAST_OUTPUT"
+  mkdir -p "$(dirname "$output")"
+  local staging_dir
+  staging_dir="$(mktemp -d)"
+  cp "$ARTIFACTS_DIR"/*.zip "$staging_dir"/ 2>/dev/null || true
+
+  if ! ls "$staging_dir"/*.zip >/dev/null 2>&1; then
+    echo "ℹ️ Skipping Sparkle appcast generation (no ZIP archives found)."
+    rm -rf "$staging_dir"
+    return
+  fi
+
+  echo "🧾 Generating Sparkle appcast at $output"
+  if ! "$generator" \
+    --download-url-prefix "$download_prefix" \
+    --ed-key-file "$SPARKLE_EDDSA_KEY_FILE" \
+    -o "$output" \
+    "$staging_dir"; then
+    echo "⚠️ Sparkle appcast generation failed."
+  fi
+  rm -rf "$staging_dir"
+}
+
+sign_update_artifacts() {
+  local signer
+  signer="$(find "$DERIVED_DATA_ROOT" -path "*/SourcePackages/artifacts/sparkle/Sparkle/bin/sign_update" -type f 2>/dev/null | head -n 1 || true)"
+  if [[ -z "$signer" || -z "${SPARKLE_EDDSA_KEY_FILE:-}" ]]; then
+    echo "ℹ️ Skipping Sparkle signing (sign_update or SPARKLE_EDDSA_KEY_FILE missing)."
+    return
+  fi
+  echo "🔑 Signing ${ZIP_NAME} for Sparkle feed"
+  if ! "$signer" "${ARTIFACTS_DIR}/${ZIP_NAME}" --ed-key-file "${SPARKLE_EDDSA_KEY_FILE}"; then
+    echo "⚠️ sign_update failed (continuing without signature)"
+  fi
+}
+
+rewrite_appcast_urls() {
+  : # no-op (old helper removed)
+}
+
+submit_for_notarization() {
+  local target="$1"
+  local label="$2"
+  echo "📝 Submitting ${label} for notarization..."
+  xcrun notarytool submit "$target" \
+    --apple-id "$NOTARY_APPLE_ID" \
+    --team-id "$NOTARY_TEAM_ID" \
+    --password "$NOTARY_PASSWORD" \
+    --wait
+}
+
+notarize_app_bundle() {
+  local bundle="$1"
+  local label="$2"
+  if [[ -z "${NOTARY_APPLE_ID:-}" || -z "${NOTARY_TEAM_ID:-}" || -z "${NOTARY_PASSWORD:-}" ]]; then
+    echo "ℹ️ Skipping notarization for ${label} (NOTARY_* variables not set)."
+    return 1
+  fi
+
+  local tmp_dir
+  tmp_dir="$(mktemp -d)"
+  local archive="$tmp_dir/$(basename "$bundle").zip"
+  ditto -c -k --keepParent "$bundle" "$archive"
+
+  submit_for_notarization "$archive" "$label"
+  xcrun stapler staple "$bundle"
+  rm -rf "$tmp_dir"
+}
+
+notarize_artifact() {
+  local artifact="$1"
+  local label="$2"
+  if [[ -z "${NOTARY_APPLE_ID:-}" || -z "${NOTARY_TEAM_ID:-}" || -z "${NOTARY_PASSWORD:-}" ]]; then
+    echo "ℹ️ Skipping notarization for ${label} (NOTARY_* variables not set)."
+    return 1
+  fi
+  submit_for_notarization "$artifact" "$label"
+  xcrun stapler staple "$artifact"
+}
 
 if [[ -f "$CREDENTIALS_FILE" ]]; then
+  set -a
   # shellcheck disable=SC1090
   source "$CREDENTIALS_FILE"
+  set +a
 fi
 
+: "${SPARKLE_APPCAST_OUTPUT:=$ROOT_DIR/Sparkle/appcast.xml}"
+export SPARKLE_APPCAST_OUTPUT
+
+"$ROOT_DIR/scripts/sync_version.sh"
+
 rm -rf "$BUILD_DIR" "$ARTIFACTS_DIR"
 mkdir -p "$ARTIFACTS_DIR"
 
@@ -31,6 +159,14 @@ if [[ ! -d "$APP_PATH" ]]; then
 fi
 
 if [[ -n "${CODESIGN_IDENTITY:-}" ]]; then
+  echo "🔏 Codesigning Sparkle framework..."
+  codesign \
+    --force \
+    --options runtime \
+    --timestamp \
+    --sign "$CODESIGN_IDENTITY" \
+    "$APP_PATH/Contents/Frameworks/Sparkle.framework"
+
   echo "🔏 Codesigning app with identity: $CODESIGN_IDENTITY"
   codesign \
     --deep \
@@ -44,6 +180,8 @@ else
   echo "⚠️ Skipping codesign (CODESIGN_IDENTITY not set)."
 fi
 
+notarize_app_bundle "$APP_PATH" "iKeyMon.app"
+
 STAGING_DIR=$(mktemp -d)
 mkdir -p "$STAGING_DIR"
 cp -R "$APP_PATH" "$STAGING_DIR/"
@@ -51,35 +189,36 @@ ln -s /Applications "$STAGING_DIR/Applications"
 mkdir -p "$STAGING_DIR/.background"
 cp "$ROOT_DIR/Assets/dmg_background.png" "$STAGING_DIR/.background/background.png"
 
-VERSION=$(xcodebuild \
-  -project "$ROOT_DIR/$PROJECT" \
-  -scheme "$SCHEME" \
-  -configuration Release \
-  -showBuildSettings | awk '/MARKETING_VERSION/ {print $3; exit}')
-if [[ -z "$VERSION" ]]; then
-  VERSION="dev"
-fi
+VERSION="$(python3 - <<'PY' "$VERSION_FILE"
+import json, sys
+with open(sys.argv[1], "r", encoding="utf-8") as handle:
+    data = json.load(handle)
+print(data.get("marketing_version", "dev"))
+PY
+)"
 ZIP_NAME="iKeyMon-${VERSION}.zip"
-pushd "$(dirname "$APP_PATH")" >/dev/null
-zip -r "$ARTIFACTS_DIR/$ZIP_NAME" "$(basename "$APP_PATH")"
-popd >/dev/null
+ditto -c -k --keepParent "$APP_PATH" "$ARTIFACTS_DIR/$ZIP_NAME"
 
 DMG_NAME="iKeyMon-${VERSION}.dmg"
 hdiutil create -volname "iKeyMon" -srcfolder "$STAGING_DIR" -ov -format UDZO "$ARTIFACTS_DIR/$DMG_NAME"
 
+sign_update_artifacts
+
 if [[ -n "${NOTARY_APPLE_ID:-}" && -n "${NOTARY_TEAM_ID:-}" && -n "${NOTARY_PASSWORD:-}" ]]; then
-  echo "📝 Submitting DMG for notarization..."
-  xcrun notarytool submit "$ARTIFACTS_DIR/$DMG_NAME" \
-    --apple-id "$NOTARY_APPLE_ID" \
-    --team-id "$NOTARY_TEAM_ID" \
-    --password "$NOTARY_PASSWORD" \
-    --wait
-  xcrun stapler staple "$ARTIFACTS_DIR/$DMG_NAME"
+  notarize_artifact "$ARTIFACTS_DIR/$DMG_NAME" "$DMG_NAME"
 else
-  echo "⚠️ Skipping notarization (NOTARY_* variables not set)."
+  echo "⚠️ Skipping DMG notarization (NOTARY_* variables not set)."
 fi
 rm -rf "$STAGING_DIR"
 
+generate_appcast
+
+if [[ -n "${GITEA_TOKEN:-}" && -n "${GITEA_OWNER:-}" && -n "${GITEA_REPO:-}" ]]; then
+  "$ROOT_DIR/scripts/publish_release.sh" "$VERSION" "$ARTIFACTS_DIR/$ZIP_NAME" "$ARTIFACTS_DIR/$DMG_NAME"
+else
+  echo "ℹ️ Skipping Gitea release publishing (GITEA_* variables not fully set)."
+fi
+
 echo "✅ Build complete. Artifacts:"
 echo "   - $ARTIFACTS_DIR/$ZIP_NAME"
 echo "   - $ARTIFACTS_DIR/$DMG_NAME"

scripts/bump_version.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+VERSION_FILE="$ROOT_DIR/version.json"
+
+new_version="$(python3 - "$VERSION_FILE" <<'PY'
+import json, sys, pathlib
+path = pathlib.Path(sys.argv[1])
+data = json.loads(path.read_text())
+current = data.get("marketing_version")
+if not current:
+    raise SystemExit("marketing_version missing in version.json")
+parts = current.split(".")
+if len(parts) != 3 or not all(part.isdigit() for part in parts):
+    raise SystemExit(f"Invalid marketing_version format: {current}")
+parts[-1] = str(int(parts[-1]) + 1)
+data["marketing_version"] = ".".join(parts)
+path.write_text(json.dumps(data, indent=2) + "\n")
+print(data["marketing_version"])
+PY
+)"
+
+echo "$new_version"

scripts/publish_release.sh

@@ -0,0 +1,127 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+VERSION="$1"
+ZIP_PATH="$2"
+DMG_PATH="$3"
+
+: "${GITEA_TOKEN:?Set GITEA_TOKEN in .signing.env}"
+: "${GITEA_OWNER:?Set GITEA_OWNER in .signing.env}"
+: "${GITEA_REPO:?Set GITEA_REPO in .signing.env}"
+
+TARGET_COMMIT="${GITEA_TARGET_COMMIT:-$(git -C "$ROOT_DIR" rev-parse HEAD)}"
+API_BASE="${GITEA_API_BASE:-https://git.24unix.net/api/v1}"
+API_BASE="${API_BASE%/}"
+RELEASE_TAG="v${VERSION}"
+API_URL="${API_BASE}/repos/${GITEA_OWNER}/${GITEA_REPO}"
+CHANGELOG_FILE="$ROOT_DIR/CHANGELOG.md"
+
+if ! command -v jq >/dev/null 2>&1; then
+  echo "❌ jq is required to parse Gitea responses." >&2
+  exit 1
+fi
+
+# Extract changelog for this version
+extract_changelog() {
+  local version="$1"
+  local changelog_file="$2"
+
+  if [[ ! -f "$changelog_file" ]]; then
+    echo ""
+    return
+  fi
+
+  awk -v ver="## $version" '
+    /^## / {
+      if (found) exit
+      if ($0 ~ ver) {
+        found=1
+        next
+      }
+    }
+    found { print }
+  ' "$changelog_file"
+}
+
+CHANGELOG_BODY="$(extract_changelog "$VERSION" "$CHANGELOG_FILE")"
+if [[ -z "$CHANGELOG_BODY" ]]; then
+  CHANGELOG_BODY="See commit history for details."
+fi
+
+PRERELEASE_FLAG="${GITEA_PRERELEASE:-true}"
+
+create_payload="$(jq -n \
+  --arg tag "$RELEASE_TAG" \
+  --arg name "iKeyMon ${VERSION}" \
+  --arg target "$TARGET_COMMIT" \
+  --arg body "$CHANGELOG_BODY" \
+  --argjson prerelease "$PRERELEASE_FLAG" \
+  '{ tag_name: $tag, name: $name, target_commitish: $target, body: $body, draft: false, prerelease: $prerelease }')"
+
+response_file="$(mktemp)"
+http_code=$(curl -sS -w "%{http_code}" -o "$response_file" \
+  -H "Authorization: token ${GITEA_TOKEN}" \
+  -H "Content-Type: application/json" \
+  -X POST \
+  -d "$create_payload" \
+  "${API_URL}/releases")
+
+if [[ "$http_code" == "201" ]]; then
+  echo "✅ Created release ${RELEASE_TAG}"
+elif [[ "$http_code" == "409" ]]; then
+  echo "ℹ️ Release ${RELEASE_TAG} already exists, fetching existing ID."
+else
+  echo "❌ Failed to create release (HTTP ${http_code}):"
+  cat "$response_file"
+  rm -f "$response_file"
+  exit 1
+fi
+
+if [[ "$http_code" == "409" ]]; then
+  curl -sS \
+    -H "Authorization: token ${GITEA_TOKEN}" \
+    "${API_URL}/releases/tags/${RELEASE_TAG}" >"$response_file"
+fi
+
+release_id=$(jq -r '.id' "$response_file")
+rm -f "$response_file"
+
+if [[ -z "$release_id" || "$release_id" == "null" ]]; then
+  echo "❌ Could not determine release ID for ${RELEASE_TAG}"
+  exit 1
+fi
+
+delete_existing_asset() {
+  local filename="$1"
+  local asset_id
+  asset_id="$(curl -sS \
+    -H "Authorization: token ${GITEA_TOKEN}" \
+    "${API_URL}/releases/${release_id}/assets" | jq -r --arg name "$filename" '.[] | select(.name == $name) | .id' | head -n 1)"
+  if [[ -n "$asset_id" && "$asset_id" != "null" ]]; then
+    echo "🗑️  Removing existing asset ${filename}"
+    curl -sS \
+      -H "Authorization: token ${GITEA_TOKEN}" \
+      -X DELETE \
+      "${API_URL}/releases/${release_id}/assets/${asset_id}" >/dev/null
+  fi
+}
+
+upload_asset() {
+  local file="$1"
+  local filename
+  filename="$(basename "$file")"
+
+  delete_existing_asset "$filename"
+
+  echo "⬆️  Uploading ${filename}"
+  curl -sS \
+    -H "Authorization: token ${GITEA_TOKEN}" \
+    -F "attachment=@${file}" \
+    "${API_URL}/releases/${release_id}/assets" >/dev/null
+}
+
+upload_asset "$ZIP_PATH"
+upload_asset "$DMG_PATH"
+
+echo "🎉 Release ${RELEASE_TAG} assets uploaded."

scripts/sync_version.sh

@@ -0,0 +1,56 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+VERSION_FILE="$ROOT_DIR/version.json"
+PROJECT_FILE="$ROOT_DIR/iKeyMon.xcodeproj/project.pbxproj"
+
+if [[ ! -f "$VERSION_FILE" ]]; then
+  echo "❌ version.json not found at $VERSION_FILE" >&2
+  exit 1
+fi
+
+if ! command -v jq >/dev/null 2>&1; then
+  echo "❌ jq is required but not found in PATH" >&2
+  exit 1
+fi
+
+MARKETING_VERSION="$(jq -r '.marketing_version // empty' "$VERSION_FILE")"
+if [[ -z "$MARKETING_VERSION" ]]; then
+  echo "❌ marketing_version missing in $VERSION_FILE" >&2
+  exit 1
+fi
+
+if [[ ! "$MARKETING_VERSION" =~ ^[0-9]{2}\.[0-9]+\.[0-9]+$ ]]; then
+  echo "❌ marketing_version '$MARKETING_VERSION' must follow YY.major.minor (e.g. 26.1.2)" >&2
+  exit 1
+fi
+
+BUILD_NUMBER="${BUILD_NUMBER:-$(git -C "$ROOT_DIR" rev-list --count HEAD)}"
+if [[ -z "$BUILD_NUMBER" ]]; then
+  echo "❌ Unable to derive BUILD_NUMBER" >&2
+  exit 1
+fi
+
+update_setting() {
+  local key="$1"
+  local value="$2"
+  local tmp
+  tmp="$(mktemp)"
+  LC_ALL=C sed -E "s/(${key}[[:space:]]*=[[:space:]]*)[^;]+;/\\1${value};/g" "$PROJECT_FILE" >"$tmp"
+  if cmp -s "$tmp" "$PROJECT_FILE"; then
+    if ! grep -q "${key} = ${value};" "$PROJECT_FILE"; then
+      rm -f "$tmp"
+      echo "❌ Failed to update ${key} in $PROJECT_FILE" >&2
+      exit 1
+    fi
+    rm -f "$tmp"
+    return
+  fi
+  mv "$tmp" "$PROJECT_FILE"
+}
+
+update_setting "MARKETING_VERSION" "$MARKETING_VERSION"
+update_setting "CURRENT_PROJECT_VERSION" "$BUILD_NUMBER"
+
+echo "✅ Synced marketing version $MARKETING_VERSION and build $BUILD_NUMBER into Xcode project."

signing.env.example

@@ -2,3 +2,15 @@ CODESIGN_IDENTITY="Developer ID Application: Your Name (TEAMID1234)"
 NOTARY_APPLE_ID="appleid@example.com"
 NOTARY_TEAM_ID="TEAMID1234"
 NOTARY_PASSWORD="app-specific-password"
+GITEA_TOKEN="personal-access-token"
+GITEA_OWNER="tracer"
+GITEA_REPO="iKeyMon"
+# GITEA_API_BASE="https://git.24unix.net/api/v1"
+# GITEA_TARGET_COMMIT="master"
+# GITEA_PRERELEASE="false"
+
+# Sparkle appcast generation (optional)
+# SPARKLE_EDDSA_KEY_FILE="$HOME/.config/Sparkle/iKeyMon.key"
+# SPARKLE_DOWNLOAD_BASE_TEMPLATE="https://git.24unix.net/tracer/iKeyMon/releases/download/v{{VERSION}}"
+# SPARKLE_APPCAST_OUTPUT="$ROOT_DIR/Sparkle/appcast.xml"  # defaults to this path
+# SPARKLE_GENERATE_APPCAST="/path/to/generate_appcast"  # auto-detected if unset

version.json

@@ -0,0 +1,3 @@
+{
+  "marketing_version": "26.1.2"
+}