Last Updated: March 15, 2026 Purpose: What to work on next Context: See CURRENT_STATE.md for what's built, CHANGELOG.md for history
- Scaffold (Vite + React + Tailwind + Electron)
- Electron shell, system tray, credential store, IPC
- Full React UI with dark/light/system theme
- Playwright login flow with scenario detection and detach
- Production builds (Windows .exe, macOS .dmg)
- Cross-platform support (macOS + Windows)
- Configurable browser (Chrome/Edge) with platform-aware defaults
- Spec doc updated to v1.1
- Electron safeStorage (OS keychain encryption)
- IPC input validation (types, URLs, colors, channels)
- Path traversal protection
- Accessibility (ARIA roles, keyboard navigation, focus indicators)
- CSP hardened
- MIT license
- CSV export with optional password inclusion
- CSV import with file picker and custom parser
- Import preview screen (defaults bar, conflict detection, selective import)
- Design spec (
docs/0.8.0-csv-import-export-spec.md)
- Release workflow on
v*tag push (macOS .dmg + Windows .exe) - Automated GitHub Release with artifacts
- Account picker login fix (issue #3) — multi-selector approach
- Sample CSV template (issue #1)
- Default destination (Copilot Chat) seeded on first run
- User guide (
docs/user-guide.md) - Screenshots in README
- App name fix (productName in package.json)
- Azure Trusted Signing account + certificate profile
- Identity validation (Urmila Singhal, Public Trust)
- App registration with GitHub OIDC federated credential + client secret
- IAM role assignments (Certificate Profile Signer + Identity Verifier)
- GitHub secrets set (AZURE_TENANT_ID, AZURE_CLIENT_ID, AZURE_CLIENT_SECRET)
- electron-builder upgraded to v26.0.1
-
azureSignOptionsadded to electron-builder.yml - Release workflow updated to pass Azure env vars on Windows build
- Chrome + Edge launch, profile isolation, browser switching
- Multiple accounts, search, dark mode, delete cleanup, tray, persistence
- CSV import and export
- Auto-updater (electron-updater, in-app banner, tray menu)
- Login flow overhaul (sequential detection, sign-in button, account tile click, password-only)
- Help tab in Settings (quick start, CSV guide, troubleshooting)
- Tooltips on form fields
- Send Logs via email (Settings > General > Troubleshooting)
- Logger module (ring buffer, timestamps)
- Signed build verified (v0.8.4) — issue #2 closed
- Commit, push, tag v0.9.0
- Urmila downloads v0.9.0 .exe (last manual install — auto-update from here on)
- Urmila retests account picker login (issue #3)
- Test auto-update works (tag v0.9.1 later, verify in-app banner appears)
- Test installer on Windows 11 (no admin rights, Start Menu entry, tray icon)
- Test with real M365 test accounts (Copilot Chat, Admin Center destinations)
- One account, multiple destinations (button per destination or right-click menu)
- Session health check (background ping, stale indicators)
- Auto-update (Electron auto-updater)
- Keyboard shortcuts (quick-launch by number)
- Account ordering (drag-and-drop within groups)
- Run on startup (optional toggle)