Claude/cleanup standalone app hvijkh

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,33 @@
+## What this PR does
+
+<!-- A short description of the change and why it's needed. -->
+
+## Type of change
+
+- [ ] Bug fix
+- [ ] New feature
+- [ ] Refactor / cleanup
+- [ ] Documentation
+- [ ] CI / tooling
+
+## How it was tested
+
+<!--
+For anything on the BLE path, say what you tested on real hardware and which
+strap (4.0 / 5.0 / MG). For protocol or analytics changes, point to the test
+that covers it. "Builds and unit tests pass" alone is not enough for BLE work.
+-->
+
+## Checklist
+
+- [ ] Swift package tests pass for any package I touched (`swift test` in `Packages/<name>`)
+- [ ] Android unit tests pass if I touched `android/` (`./gradlew testFullDebugUnitTest`)
+- [ ] No new build warnings introduced
+- [ ] UI changes use only `StrandDesign` tokens — no hardcoded colors, fonts, or spacing
+- [ ] No hardcoded hex frame bytes; protocol facts live in the schema / decoders
+- [ ] Follows the conventions in [`docs/CONTRIBUTING.md`](../docs/CONTRIBUTING.md)
+- [ ] I did not commit generated output (`Strand.xcodeproj/`) or any secrets/keystores
+
+## Related issues
+
+<!-- Closes #N -->

.github/workflows/app-build.yml

@@ -0,0 +1,64 @@
+# Compile-only verification for the macOS and iOS app targets.
+#
+# Why this exists: the iOS app is a build-from-source community port (no App Store —
+# NOOP stays anonymous), so it isn't exercised on a device by the maintainer. This job
+# compiles both app targets on every relevant change so a shared-code change can't
+# silently break iOS (or regress macOS). It is anonymity-safe: CODE_SIGNING_ALLOWED=NO,
+# no secrets, no signing identity, no artifacts uploaded — it only checks that it builds.
+# (The shipped macOS .app is still produced and anonymized by hand; this is a compile gate.)
+name: App build (macOS + iOS)
+
+on:
+  pull_request:
+    branches: [main]
+    paths:
+      - 'Strand/**'
+      - 'StrandiOS/**'
+      - 'StrandiOSShared/**'
+      - 'StrandiOSWidgets/**'
+      - 'Packages/**'
+      - 'project.yml'
+      - '.github/workflows/app-build.yml'
+  push:
+    branches: [main]
+    paths:
+      - 'Strand/**'
+      - 'StrandiOS/**'
+      - 'StrandiOSShared/**'
+      - 'StrandiOSWidgets/**'
+      - 'Packages/**'
+      - 'project.yml'
+      - '.github/workflows/app-build.yml'
+  workflow_dispatch:
+
+concurrency:
+  group: app-build-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build:
+    runs-on: macos-15
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - scheme: Strand
+            destination: 'platform=macOS'
+          - scheme: NOOPiOS
+            destination: 'generic/platform=iOS Simulator'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install XcodeGen
+        run: brew install xcodegen
+
+      - name: Generate Xcode project
+        run: xcodegen generate
+
+      - name: Build ${{ matrix.scheme }}
+        run: >-
+          xcodebuild -scheme '${{ matrix.scheme }}' -configuration Debug
+          -destination '${{ matrix.destination }}'
+          CODE_SIGNING_ALLOWED=NO CODE_SIGNING_REQUIRED=NO
+          build

.github/workflows/swift-packages.yml

@@ -0,0 +1,50 @@
+# Compile-and-test verification for the reusable Swift packages.
+#
+# This job intentionally does NOT touch the macOS app target: that build needs
+# XcodeGen to generate Strand.xcodeproj and a wired-up test scheme, and the app
+# release is produced and anonymized by hand. The packages, by contrast, build
+# and test on their own with plain SwiftPM — no Xcode project, no signing, no
+# secrets — which makes them a safe, self-contained CI check that leaks nothing.
+name: Swift Packages CI
+
+on:
+  pull_request:
+    branches: [main]
+    paths:
+      - 'Packages/**'
+      - '.github/workflows/swift-packages.yml'
+  push:
+    branches: [main]
+    paths:
+      - 'Packages/**'
+      - '.github/workflows/swift-packages.yml'
+  workflow_dispatch:
+
+concurrency:
+  group: swift-packages-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    runs-on: macos-15
+    strategy:
+      fail-fast: false
+      matrix:
+        package:
+          - WhoopProtocol
+          - WhoopStore
+          - StrandAnalytics
+          - StrandImport
+          - StrandDesign
+          - NoopLocalAccess
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Build ${{ matrix.package }}
+        run: swift build
+        working-directory: Packages/${{ matrix.package }}
+
+      - name: Test ${{ matrix.package }}
+        run: swift test
+        working-directory: Packages/${{ matrix.package }}

.gitignore

@@ -9,6 +9,21 @@ Icon?
 *.xcodeproj/
 *.xcworkspace/
 !*.xcworkspace/contents.xcworkspacedata
+# …EXCEPT the xcodeproj's SPM lockfile. The shipped app builds from this Package.resolved,
+# so it MUST be tracked — otherwise a clean checkout resolves a floating, uncommitted lockfile
+# that could drift to a newer (potentially compromised) upstream release. Supply-chain pin.
+# Git won't descend into an excluded directory, so re-include each ancestor on the path, then
+# re-exclude its contents with a wildcard so ONLY Package.resolved gets tracked (not the
+# generated project.pbxproj / contents.xcworkspacedata / xcuserdata cruft).
+!Strand.xcodeproj/
+Strand.xcodeproj/*
+!Strand.xcodeproj/project.xcworkspace/
+Strand.xcodeproj/project.xcworkspace/*
+!Strand.xcodeproj/project.xcworkspace/xcshareddata/
+Strand.xcodeproj/project.xcworkspace/xcshareddata/*
+!Strand.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/
+Strand.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/*
+!Strand.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved
 build/
 DerivedData/
 .build/
@@ -54,6 +69,10 @@ android/app/release/
 # ── Misc / secrets (never commit) ───────────────────────────────
 *.log
 .env
+# Deployment credentials (PAT / signing / endpoints) — never commit. `.env` above
+# won't match `deploy.env`, so list it (and any `deploy.env.<stage>`) explicitly.
+deploy.env
+deploy.env.*
 secrets.*
 android/local.properties
 android/keystore.properties
@@ -68,3 +87,11 @@ export.xml
 export.zip
 *whoop_export*.zip
 *apple_health*.zip
+
+# Python bytecode
+__pycache__/
+*.pyc
+
+# Local release artifacts (zips/ipas built for upload; never tracked)
+dist/
+err.txt

ATTRIBUTION.md

@@ -1,26 +1,27 @@
 # Attribution
 
-Strand is an independent, unofficial, local-first macOS app. It is not affiliated
+NOOP is an independent, unofficial, local-first app for macOS and iOS. It is not affiliated
 with, endorsed by, or connected to WHOOP, Inc. "WHOOP" is used nominatively only to
 identify the hardware the app interoperates with.
 
-Strand builds on prior open-source reverse-engineering and interoperability work:
+NOOP builds on prior community reverse-engineering and interoperability work:
 
 ## WHOOP 4.0 protocol + Swift packages
 - **`johnmiddleton12/my-whoop`** — the `WhoopProtocol` and `WhoopStore` Swift packages
   (vendored under `Packages/`), the WHOOP 4.0 BLE framing/command/decode work, and the
-  iOS collection logic that Strand's `WhoopBLE`/`Collect` layers are adapted from.
-  See `DISCLAIMER.md` (carried over from that project).
+  iOS collection logic that NOOP's `WhoopBLE`/`Collect` layers are adapted from.
 
 ## WHOOP 5.0 / MG protocol
 - **`b-nnett/goose`** — the WHOOP 5.0 BLE reverse-engineering (service UUID family
   `fd4b0001-…`, CRC16-Modbus header, CLIENT_HELLO, and the "puffin" packet types)
-  that Strand's `DeviceFamily` Whoop-5 path and `whoop5_protocol.json` are ported from.
+  that NOOP's `DeviceFamily` Whoop-5 path and `whoop5_protocol.json` are ported from.
 
 ## Other
 - **GRDB.swift** (`groue/GRDB.swift`) — SQLite persistence (via Swift Package Manager).
+- **MarkdownUI** (`gonzalezreal/swift-markdown-ui`) — renders the AI Coach's Markdown
+  replies (via Swift Package Manager).
 
-Strand contains no WHOOP proprietary code, binaries, firmware, logos, or assets, and
+NOOP contains no WHOOP proprietary code, binaries, firmware, logos, or assets, and
 performs no DRM circumvention. It operates only with the user's own device and data.
-Strand is **not a medical device**; all metrics (HR, HRV, recovery, strain, sleep,
+NOOP is **not a medical device**; all metrics (HR, HRV, recovery, strain, sleep,
 SpO₂, temperature) are approximations and not clinically validated.

NOOPWatch/Assets.xcassets/AppIcon.appiconset/Contents.json

@@ -0,0 +1,14 @@
+{
+  "images" : [
+    {
+      "filename" : "AppIcon1024.png",
+      "idiom" : "universal",
+      "platform" : "watchos",
+      "size" : "1024x1024"
+    }
+  ],
+  "info" : {
+    "author" : "xcode",
+    "version" : 1
+  }
+}

NOOPWatch/Assets.xcassets/Contents.json

@@ -0,0 +1,6 @@
+{
+  "info" : {
+    "author" : "xcode",
+    "version" : 1
+  }
+}

NOOPWatch/Info.plist

@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>AppGroupIdentifier</key>
+	<string>$(APP_GROUP_ID)</string>
+	<key>CFBundleDevelopmentRegion</key>
+	<string>$(DEVELOPMENT_LANGUAGE)</string>
+	<key>CFBundleDisplayName</key>
+	<string>NOOP</string>
+	<key>CFBundleExecutable</key>
+	<string>$(EXECUTABLE_NAME)</string>
+	<key>CFBundleIdentifier</key>
+	<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
+	<key>CFBundleInfoDictionaryVersion</key>
+	<string>6.0</string>
+	<key>CFBundleName</key>
+	<string>NOOP</string>
+	<key>CFBundlePackageType</key>
+	<string>APPL</string>
+	<key>CFBundleShortVersionString</key>
+	<string>$(MARKETING_VERSION)</string>
+	<key>CFBundleVersion</key>
+	<string>$(CURRENT_PROJECT_VERSION)</string>
+	<key>NSHealthShareUsageDescription</key>
+	<string>NOOP reads your heart rate from the Watch sensor to show a live readout on your wrist. It stays on your device.</string>
+	<key>NSHealthUpdateUsageDescription</key>
+	<string>NOOP records a basic workout session on your Watch for a higher-fidelity heart rate. The session stays on your device.</string>
+	<key>WKApplication</key>
+	<true/>
+	<key>WKCompanionAppBundleIdentifier</key>
+	<string>com.bbdw.noop</string>
+</dict>
+</plist>