[blessdyb]

Summary

• keep changed or removed active official packs visible with an app-wide review banner and Rules badge until acknowledgment or fresh consent
• avoid false review warnings for packs the user had already turned off
• route review directly to Rules › Packs while ordinary Rules navigation returns to the rule list
• preserve all three enabled packs across restart and show loading instead of briefly rendering default-off switches
• add a separate sandboxed Mac App Store product with an embedded content-filter app extension while preserving the Developer ID system-extension product
• remove direct-only updater, HTTPS inspection, privileged packet capture, nettop fallback, and arbitrary script execution from Store runtime paths
• persist Store-selected project roots with security-scoped read-only bookmarks and keep Store history separate rather than implicitly moving the live direct-install database
• add CI checks for Store bundle layout, versions, extension point, forbidden helper/resources, and system-extension linkage
• release app 0.15.5 build 50 while keeping the unchanged direct extension pinned at 0.15.4 build 26

Verification

• 820 macOS tests passed with zero failures on the exact committed sources
• direct Release and Mac App Store AppStore product graphs compile from clean DerivedData directories
• provisioned Store archive contains only the embedded content-filter app extension, with matching app/extension version 0.15.5/50
• Store host and provider signatures carry sandbox, App Group, and content-filter-provider entitlements; the host has read-only user-selected file access
• Store product excludes the system extension, SystemExtensions framework, OSSystemExtension symbols, response-script helper, and privileged BPF installer
• deliberate helper contamination is rejected by the new Store packaging gate
• restart regression enables all three packs through receipt-protected saves, creates a fresh monitor on the same database, and verifies restored configuration plus enforcement snapshot
• 53 generated site pages checked with zero problems
• 1,624 localization keys present in every locale with no missing or stray keys
• signed official catalog verified for app 0.15.5 and extension protocol 1
• exact signed Developer ID candidate 0.15.5/50 launched visibly with disposable demo data; the review banner navigated to Rules › Packs with the verified catalog and all three official packs rendered
• candidate cleanup stopped only the temporary process and preserved the installed app, user preference, production data, and enabled official-pack state

🤖 Generated with Claude Code