rdmbair15m5-changelog-20260916-2342-replicantdb-icon-update-and-build43-fleet-rollout

ReplicantDB Build 43 ("Restraint") adopting Rich's bonsai tree icon artwork for macOS and iOS, universal2 packaging, Developer ID signing, Apple notarization, and 6-host fleet rollout.

Scope

• Canonical development root: rdmsm4x:~/dev/apps/replicantDB (commit 3ebcdee)
• Fleet deployment targets: rdmpw3265m (Intel canary), rdmbair15m5 (M5 canary), rdmpw3275m (Intel), rdmsm4x (canonical hub), rdmbair13m5, jdmbair13m5.
• Source input asset: /Users/richh/Desktop/ReplicantDB.png (1254×1254 PNG, 795,319 bytes, sha256 5e48f25a08e4189d3d7e8b2ab9ef5f299aaf1332f332e27298f9b59a4702fd75).

Changes Made

1. Source Asset Archival:
   • Original uncompressed artwork archived to assets/icon/originals/ReplicantDB-Desktop-20260916.png.
   • Previous LED dot-grid icon source archived to assets/icon/archive-20260916/replicantDB-icon-source-1024-led.png.
2. macOS Icon Generation:
   • Downscaled source to 1024×1024 (assets/icon/replicantDB-icon-source-1024.png).
   • Executed swift scripts/make_icon.swift to render standard macOS squircle (superellipse $n=5$, bodyRatio = 824.0 / 1024.0) with contact shadow across 10 iconset variants (16x16 to 512x512@2x) and ran iconutil producing assets/icon/ReplicantDB.icns (sha256 ff3a7521365bd3dacbe2f27b332c0d2917938c8d022d7701d342e6337adafa20).
3. iOS Icon Generation:
   • Downscaled source to 1024×1024 full-bleed square into ios/App/Assets.xcassets/AppIcon.appiconset/AppIcon-1024.png for iOS system squircle masking.
4. Version Bump:
   • In Sources/ReplicantDBCore/Version.swift, monotonic build bumped from "42" to "43" (codename "Restraint" retained).
5. Build Hardening in build.sh:
   • Replaced grep -q with grep ... >/dev/null in codesign and notarization verification pipelines to eliminate SIGPIPE false-positives under set -o pipefail.
6. Universal2 Packaging, Signing & Notarization:
   • Built fat binaries (x86_64 arm64) for ReplicantDB.app, replicantdb-cli, and replicantdb-mcp.
   • Signed with Developer ID Application: east coast science, llc (ZU2882L4HT) (1C07FCD80C36EAD5D9E3B73F7ACCCA5368DC73FB) with hardened runtime and secure timestamp.
   • Apple Notarization: Submissions d6b536ef-815a-4543-95cc-d340e08f6610 (App) and 335635c5-8635-4613-b967-a766b30063c3 (Tools) accepted with null issues.
   • Ticket stapled and validated on ReplicantDB.app.
   • Manifest snapshot saved to dist-snapshots/1.19.5-build43/.
7. Six-Host Rollout:
   • Order: rdmsm4x -> rdmbair15m5 -> rdmpw3265m -> rdmpw3275m -> rdmbair13m5 -> jdmbair13m5.
   • Preserved active inodes into /Applications/.replicantdb-rollbacks/<TS>-build43-from-42/.
   • Deployed updated ReplicantDB.app, ~/bin/replicantdb-cli, and ~/bin/replicantdb-mcp.
   • Refreshed LaunchServices (lsregister -f), restarted running instances, and refreshed icon cache.
8. Git Synchronization:
   • Committed 3ebcdee on canonical rdmsm4x:~/dev/apps/replicantDB and pushed to fleet (git.ecs0.net:git/apps/replicantDB.git) and GitHub backup.

Verification Commands & Evidence

• codesign --verify --deep --strict /Applications/ReplicantDB.app: 0 exit, valid on disk.
• spctl -a -vv /Applications/ReplicantDB.app: accepted, source=Notarized Developer ID, origin=Developer ID Application: east coast science, llc (ZU2882L4HT).
• Icon verified: shasum -a 256 /Applications/ReplicantDB.app/Contents/Resources/AppIcon.icns matches ff3a7521... across hosts.
• Version verified: replicantdb-cli --version reports ReplicantDB 1.19.5 (43) "Restraint".
• Fleet query verified: replicantdb-cli search tax --fleet --json returned 24 results across all reachable nodes.

Rollback Locations

• /Applications/.replicantdb-rollbacks/*-build43-from-42/ on each host.