Phase 6c + task assignment + 6d planning

.github/workflows/ci.yml

@@ -15,7 +15,7 @@ concurrency:
 jobs:
   build:
     name: build
-    runs-on: macos-14
+    runs-on: macos-15
     timeout-minutes: 30
     env:
       # See crates/stint-core/tests/config.rs — gates the one Keychain test.
@@ -54,6 +54,14 @@ jobs:
       - name: cargo test
         run: cargo test --workspace -- --test-threads=1
 
+      - name: Swift test (StintIntents framework)
+        working-directory: crates/stint-app/swift/StintIntents
+        run: xcodebuild -scheme StintIntents -destination 'platform=macOS' -derivedDataPath ./build/derived test
+
+      - name: Swift test (StintWidget)
+        working-directory: crates/stint-app/swift/StintWidget
+        run: xcodebuild -scheme StintWidget -destination 'platform=macOS' -derivedDataPath ./build/derived test
+
       - name: pnpm install (root workspace)
         run: pnpm install --frozen-lockfile
 
@@ -68,7 +76,7 @@ jobs:
 
   coverage:
     name: coverage
-    runs-on: macos-14
+    runs-on: macos-15
     timeout-minutes: 25
     env:
       STINT_SKIP_KEYCHAIN_TESTS: "1"

.github/workflows/release-artifacts.yml

@@ -14,7 +14,7 @@ on:
 
 jobs:
   build:
-    runs-on: macos-14
+    runs-on: macos-15
     env:
       MACOSX_DEPLOYMENT_TARGET: "13.0"
     steps:
@@ -160,6 +160,21 @@ jobs:
           cp target/universal-apple-darwin/release/stint "$APP/Contents/MacOS/stint"
           echo "APP_PATH=$APP" >> "$GITHUB_ENV"
 
+      - name: Relocate StintWidget.appex into Contents/PlugIns/
+        run: |
+          # build.rs produces crates/stint-app/PlugIns/StintWidget.appex.
+          # Tauri's bundle.resources puts files under Contents/Resources/
+          # but macOS WidgetKit only discovers widget extensions at
+          # Contents/PlugIns/. Move it into place + strip the duplicated
+          # Resources/PlugIns copy left behind by Tauri.
+          SRC="crates/stint-app/PlugIns/StintWidget.appex"
+          DEST="$APP_PATH/Contents/PlugIns/StintWidget.appex"
+          if [ ! -d "$SRC" ]; then echo "::error::appex source missing at $SRC"; exit 1; fi
+          mkdir -p "$(dirname "$DEST")"
+          rm -rf "$DEST"
+          cp -R "$SRC" "$DEST"
+          rm -rf "$APP_PATH/Contents/Resources/PlugIns"
+
       - name: Smoke-test embedded version
         env:
           VERSION: ${{ inputs.version }}
@@ -193,6 +208,14 @@ jobs:
             --entitlements crates/stint-app/entitlements.plist \
             "$APP_PATH/Contents/MacOS/stint"
 
+      - name: Verify StintIntents framework present
+        run: |
+          # The framework is bundled but its App Intents stencil isn't
+          # consulted by Apple's indexer on the framework path anyway
+          # (the 6b deferral). Phase 6d replaces this with a real .appex.
+          FRAMEWORK="$APP_PATH/Contents/Frameworks/StintIntents.framework"
+          if [ ! -d "$FRAMEWORK" ]; then echo "::error::framework missing"; exit 1; fi
+
       - name: Sign GUI binary + .app bundle (hardened runtime + entitlements)
         env:
           APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}
@@ -201,6 +224,19 @@ jobs:
           # (which seals CodeResources including the CLI's hash). Avoid
           # --deep so the per-binary signatures we did individually
           # aren't overwritten.
+          # Sign embedded framework first (inner) so the wrapper seals it.
+          codesign --force --options runtime \
+            --sign "$APPLE_SIGNING_IDENTITY" \
+            "$APP_PATH/Contents/Frameworks/StintIntents.framework"
+          # Sign the widget appex so the bundle wrapper can seal it. The
+          # appex's binary already carries an ad-hoc signature from build.rs;
+          # this overwrites with the production identity. The sandbox
+          # entitlement is required — pluginkit refuses to register
+          # extensions without com.apple.security.app-sandbox = true.
+          codesign --force --options runtime \
+            --sign "$APPLE_SIGNING_IDENTITY" \
+            --entitlements crates/stint-app/swift/StintWidget/StintWidget.entitlements \
+            "$APP_PATH/Contents/PlugIns/StintWidget.appex"
           codesign --force --options runtime \
             --sign "$APPLE_SIGNING_IDENTITY" \
             --entitlements crates/stint-app/entitlements.plist \
@@ -209,8 +245,10 @@ jobs:
             --sign "$APPLE_SIGNING_IDENTITY" \
             --entitlements crates/stint-app/entitlements.plist \
             "$APP_PATH"
-          codesign --verify --strict --verbose=2 "$APP_PATH"
+          codesign --verify --deep --strict --verbose=2 "$APP_PATH"
           codesign --verify --strict --verbose=2 "$APP_PATH/Contents/MacOS/stint"
+          codesign --verify --strict --verbose=2 "$APP_PATH/Contents/Frameworks/StintIntents.framework"
+          codesign --verify --strict --verbose=2 "$APP_PATH/Contents/PlugIns/StintWidget.appex"
 
       - name: Notarize .app
         env:

.gitignore

@@ -2,6 +2,8 @@
 /target/
 **/*.rs.bk
 *.pdb
+# llvm-cov / cargo-llvm-cov coverage instrumentation artifacts
+*.profraw
 
 # Claude Code session-local files
 .claude/
@@ -61,3 +63,4 @@ node_modules/
 
 # Image-generation scratch output (nano-banana skill)
 nanobanana-output/
+Frameworks/

CLAUDE.md

@@ -232,8 +232,11 @@ git checkout -b phase-2.5
 | 3c | Solidtime down-sync | ✅ shipped (`phase-3c-complete`) |
 | 3.5 | Test coverage uplift across core / CLI / app / UI | ✅ shipped (`phase-3.5-complete`) |
 | 3d | Post-3b UX polish + sync resilience + in-app error surfacing (picker / calendar defaults / editable times / backdate / restart-from-entry / calendar undo / 4xx-abandon / adopt-on-overlap / SyncErrorBanner + coverage CI) | ✅ shipped (`phase-3d-complete`) |
-| 4 | Distribution (Homebrew cask + signing + release CD) | planned |
-| 5 | Documentation site (GitHub Pages) | planned |
+| 4 | Distribution (Homebrew cask + signing + release CD) | ✅ shipped (`phase-4-complete`) |
+| 5 | Documentation site (GitHub Pages) | ✅ shipped (`phase-5-complete`) |
+| 6a | verbs façade + MCP + HTTP API + URL scheme + man page + skill installer | ✅ shipped (`phase-6a-complete`) |
+| 6b | Spotlight + App Intents + Focus filter | ⚠️ **partial** (`phase-6b-complete`) — Spotlight indexing + tap-to-focus-entry shipped and working; Siri/Shortcuts.app/Focus-filter discovery deferred to a follow-up using an App Intents Extension. See `docs/superpowers/specs/2026-05-25-stint-phase-6-deeper-integration-design.md` §1.5 |
+| 6c | Raycast + Alfred + WidgetKit + idle detection | ✅ shipped (`phase-6c-complete`) |
 
 ## Gotchas / dev-environment notes
 

README.md

@@ -239,8 +239,11 @@ branch.
 | 3c | Solidtime down-sync | ✅ shipped |
 | 3.5 | Test coverage uplift | ✅ shipped |
 | 3d | UX polish + sync resilience | ✅ shipped |
-| 4 | Distribution (Homebrew cask + signing + release CD) | 🔜 planned |
-| 5 | Documentation site (GitHub Pages) | 🔜 planned |
+| 4 | Distribution (Homebrew cask + signing + release CD) | ✅ shipped |
+| 5 | Documentation site (GitHub Pages) | ✅ shipped |
+| 6a | verbs façade + MCP + HTTP API + URL scheme + skill installer | ✅ shipped |
+| 6b | Spotlight + App Intents + Focus filter | ⚠️ partial — Spotlight tap-to-focus-entry works; Siri/Shortcuts.app discovery deferred |
+| 6c | Raycast + Alfred + WidgetKit + idle detection | ✅ shipped |
 
 ---
 

alfred-stint/README.md

@@ -0,0 +1,41 @@
+# Stint for Alfred
+
+Four keyword shortcuts for [stint](https://github.com/reyemtech/stint):
+
+| Keyword | What it does |
+|---|---|
+| `s <description>` | Start a timer with that description |
+| `sstop` | Stop the running timer |
+| `scur` | Show the running timer |
+| `srec` | List recent entries; ⏎ restarts, ⌥⏎ opens in Stint |
+
+## Install
+
+1. Double-click `Stint.alfredworkflow` from the GitHub Releases page.
+2. Alfred prompts to import.
+3. Make sure the `stint` CLI is in PATH (or set the Workflow Environment
+   Variable `STINT_BIN`).
+
+## First-time setup after import
+
+This directory ships a minimal `info.plist` skeleton — Alfred needs the
+four keywords wired to the corresponding scripts. After importing:
+
+1. Open Alfred Preferences → Workflows → Stint.
+2. Add four objects:
+   - Keyword `s` (argument required) → Run Script (`bash`) →
+     `./start.sh "{query}"`.
+   - Keyword `sstop` → Run Script (`bash`) → `./stop.sh`.
+   - Script Filter, keyword `scur` → `bash` → `./current.sh`. Open URL on
+     selection.
+   - Script Filter, keyword `srec` → `bash` → `./recent.sh`. ⏎ runs
+     `./start.sh "$(./describe.sh {query})"`, ⌥⏎ opens the URL.
+3. Export the workflow over this directory to lock in the wiring.
+
+## Build from source
+
+This directory IS the workflow source. Bundle:
+
+```bash
+zip -r Stint.alfredworkflow . -x ".*"
+```

alfred-stint/current.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+set -euo pipefail
+source "$(dirname "$0")/lib.sh"
+
+BIN="$(resolve_bin)" || {
+  cat <<EOF
+{"items":[{"title":"Stint binary not found","subtitle":"Set STINT_BIN in workflow env","valid":false}]}
+EOF
+  exit 0
+}
+
+JSON="$("$BIN" --json current 2>/dev/null || echo "null")"
+if [[ "$JSON" == "null" ]] || [[ -z "$JSON" ]]; then
+  echo '{"items":[{"title":"No active timer","valid":false}]}'
+  exit 0
+fi
+python3 - <<PY
+import json, sys
+e = json.loads('''$JSON''')
+print(json.dumps({"items":[{
+    "uid": e["local_uuid"],
+    "title": e.get("description","(no description)"),
+    "subtitle": "Open in Stint",
+    "arg": f"stint://entry/{e['local_uuid']}",
+}]}))
+PY

alfred-stint/info.plist

@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>bundleid</key>
+  <string>tech.reyem.stint.alfred</string>
+  <key>name</key>
+  <string>Stint</string>
+  <key>description</key>
+  <string>Start, stop, and inspect Stint time entries from Alfred.</string>
+  <key>version</key>
+  <string>0.1.0</string>
+  <key>createdby</key>
+  <string>Reyem Technologies</string>
+  <key>readme</key>
+  <string>See README.md</string>
+  <key>objects</key>
+  <array/>
+  <key>connections</key>
+  <dict/>
+  <key>uidata</key>
+  <dict/>
+</dict>
+</plist>

alfred-stint/lib.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+# Shared helpers for Stint Alfred workflow scripts.
+
+resolve_bin() {
+  if [[ -n "$STINT_BIN" ]] && [[ -x "$STINT_BIN" ]]; then
+    echo "$STINT_BIN"
+    return
+  fi
+  if command -v stint >/dev/null 2>&1; then
+    command -v stint
+    return
+  fi
+  for candidate in "$HOME/.cargo/bin/stint" "/Applications/Stint.app/Contents/MacOS/stint"; do
+    [[ -x "$candidate" ]] && { echo "$candidate"; return; }
+  done
+  return 1
+}

alfred-stint/recent.sh

@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+set -euo pipefail
+source "$(dirname "$0")/lib.sh"
+
+BIN="$(resolve_bin)" || {
+  echo '{"items":[{"title":"Stint binary not found","valid":false}]}'
+  exit 0
+}
+
+JSON="$("$BIN" --json list --limit 20 2>/dev/null || echo "[]")"
+python3 - <<PY
+import json
+items = []
+for e in json.loads('''$JSON'''):
+    items.append({
+        "uid": e["local_uuid"],
+        "title": e.get("description","(no description)"),
+        "subtitle": e.get("start_at",""),
+        "arg": e["local_uuid"],
+        "mods": {
+            "alt": {"arg": f"stint://entry/{e['local_uuid']}", "subtitle": "Open in Stint"},
+        }
+    })
+print(json.dumps({"items": items}))
+PY

alfred-stint/start.sh

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+source "$(dirname "$0")/lib.sh"
+
+DESC="${1:?usage: start.sh <description>}"
+BIN="$(resolve_bin)" || { echo "Stint binary not found"; exit 1; }
+
+"$BIN" --json start --description "$DESC" | head -1

alfred-stint/stop.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+set -euo pipefail
+source "$(dirname "$0")/lib.sh"
+
+BIN="$(resolve_bin)" || { echo "Stint binary not found"; exit 1; }
+
+ENTRY="$("$BIN" --json stop)"
+DESC="$(echo "$ENTRY" | python3 -c 'import sys,json; print(json.load(sys.stdin).get("description",""))')"
+echo "Stopped: $DESC"

crates/stint-app/.gitignore

@@ -0,0 +1,4 @@
+Frameworks/
+PlugIns/
+build-deps/
+Metadata.appintents/

crates/stint-app/Cargo.toml

@@ -15,6 +15,7 @@ path = "src/main.rs"
 [features]
 default = ["updater"]
 updater = ["dep:tauri-plugin-updater", "dep:semver"]
+test-utils = []
 
 [dependencies]
 stint-core = { path = "../stint-core" }
@@ -29,6 +30,7 @@ dirs.workspace = true
 chrono.workspace = true
 
 tauri = { version = "2.1", features = ["macos-private-api", "tray-icon", "image-png"] }
+libc = "0.2"
 tauri-plugin-opener = "2.2"
 tauri-plugin-positioner = { version = "2.3", features = ["tray-icon"] }
 tauri-plugin-deep-link = "2"
@@ -45,3 +47,4 @@ wiremock.workspace = true
 serde_json.workspace = true
 tauri = { version = "2.1", features = ["test"] }
 tower = "0.5"
+stint-app = { path = ".", features = ["test-utils"] }