Watch apps: one entry point, a phone-watch channel, and a simulator that can run the pair - #5487

Open

shai-almog wants to merge 290 commits into

watch-apps-product

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 1, 2026

Wearables: order writes with a logical clock; address only nodes running the app

shai-almog
and
claude
committed
840e0fa
Wearables: three consequences of the logical clock

shai-almog
and
claude
committed
97cdc95
Wearables: break sequence ties on the publishing node

shai-almog
and
claude
committed
a911324
Wearables: one resolution path, and keep the stamp when resolution fails

shai-almog
and
claude
committed
d5e0a44
Wearables: record the surviving item's stamp outright after a deletion

shai-almog
and
claude
committed
cdd642d
Wearables: restore valueMap and payloadOf, deleted by the getData refactor

shai-almog
and
claude
committed
b05004e
Wearables: retry local identity; keep transfer claims out of the value stamps

shai-almog
and
claude
committed
ba71503
Wearables: don't re-announce a value when a shadow replica is deleted

shai-almog
and
claude
committed
92624c6
Wearables: read capability readiness and nodes as one snapshot

shai-almog
and
claude
committed
000632e
Wearables: resolve the real winner on the first event after a restart

shai-almog
and
claude
committed
81f822a
Wearables: read the capability cache atomically; retry winner resolution

shai-almog
and
claude
committed
81609cd
Wearables: version the capability cache; coalesce transfer sweeps

shai-almog
and
claude
committed
32460db
Wearables: generation-guard the remaining two cache paths

shai-almog
and
claude
committed
ec6286b
Wearables: guard the send-time refresh; unpin the watch simulator arch

shai-almog
and
claude
committed
f7a5bd4
Wearables: guard the last unguarded cache write, and audit the set

shai-almog
and
claude
committed
b69e37c
Wearables: retry the deletion resolution too

shai-almog
and
claude
committed
ae85394
Wearables: fix a main-thread block, a bypassed retry, and an unlocked snapshot

shai-almog
and
claude
committed
252ae90

Commits on Aug 2, 2026

Wearables: guard watch-excluded sources in the source, not in a build list

shai-almog
and
claude
committed
c03cd8b
Wearables: filter capability callbacks by name; fix headers and a stale-log false finish

shai-almog
and
claude
committed
e3080f2
Watch suite: pin the simulator locale and timezone

shai-almog
and
claude
committed
beb8e45
iOS builds: stop passing per-SDK conditional settings on the xcodebuild command line

shai-almog
and
claude
committed
be5544a
Merge remote-tracking branch 'origin/master' into watch-apps-product
shai-almog
committed
10062b8
Wearables: defer winner resolution instead of delivering an unverified replica

shai-almog
and
claude
committed
cf7d432
Android port: restore master's line endings in the two files this branch edits

shai-almog
and
claude
committed
7306d51
Merge remote-tracking branch 'origin/master' into watch-apps-product
shai-almog
committed
da6ae58
Health: keep the EDT contract when a listener attaches after completion

shai-almog
and
claude
committed
801722c
Wearables: defer deletion resolution too, instead of going silent

shai-almog
and
claude
committed
a446e4c
BrowserComponent test: time out against the clock, and allow a loaded runner

shai-almog
and
claude
committed
e0c66f9

Commits on Aug 3, 2026

Wear hints: standalone must not imply Wear mode; make the release retry pass -sdk

shai-almog
and
claude
committed
9c7731d
Wearables: compare-and-replace the delivery stamp after a blocking resolution

shai-almog
and
claude
committed
4df7d3a

Commits on Aug 4, 2026

Wearables: announce a replicated-path removal once, and never invent one

shai-almog
and
claude
committed
f41e48c

Commits on Aug 5, 2026

Merge master; drop the EdtResult fix that master superseded

shai-almog
and
claude
committed
62f73d9
Wearables: don't lose deletion state when coalescing a pending resolution

shai-almog
and
claude
committed
5c59155
iOS wearable: converge on ties, raise the clock from peer stamps, serialize context writes

shai-almog
and
claude
committed
7648ef0

Commits on Aug 6, 2026

Wearables: fix the capability resource path, link WatchConnectivity, anchor deletion stamps

shai-almog
and
claude
committed
67e5f25
Wearables: order deliveries with their stamps, anchor the empty deletion branch, persist claims
shai-almog
committed
6968932
Wearables: unlock putData, and only persist a transfer claim once it is delivered
shai-almog
committed
13651b8
Wearables: make the ordinary delivery atomic too, and prune claims by receipt time
shai-almog
committed
41fa8f4
Wearables: stop echoing local writes to peer listeners, and stop blocking the EDT on reads
shai-almog
committed
b61a242
Wearables: route the first-sight delivery through the atomic helper, and sweep the rest
shai-almog
committed
f82aac1
Wearables: finish the local-echo suppression and keep both snapshots current
shai-almog
committed
b7153ea
JavaSE wearable: escape dots, replace atomically, record the real stamp, stop self-replay

shai-almog
and
claude
committed
a1b0145
Wearables: a local wildcard delete is local on every authority, and couple snapshot to stamp
shai-almog
committed
4ece7b1
Wearables: discard partial decodes, reject empty transfer paths, escape iOS path lists, unlink WatchConnectivity on Catalyst

shai-almog
and
claude
committed
02260a4
Wearables: make the paired simulator actually pair, one watch process, rotary to focus, standalone switch

shai-almog
and
claude
committed
df04dd2
Wearables: bound transfer retries by retention, end the removal window on republish, be honest about standalone
shai-almog
committed
7ab6948
iOS wearable: deliver only real changes, acknowledge removals, prune properly, expire replies

shai-almog
and
claude
committed
51a9e89
Wearables: clear the removal marker on every publication path, consume deletion upgrades atomically
shai-almog
committed
08b6a2d
Wearables: durability, provenance, bounded queues and the last ordering gaps
shai-almog
committed
08cef01
Wearables: durable received transfers, and accept cold-start events from paired peers
shai-almog
committed
dfe0eca
Use /// markdown for the MAX_PENDING doc

shai-almog
and
claude
committed
08d9cea
Wearables: close the eight follow-ons from the durability and identity work
shai-almog
committed
881415e
iOS wearable: prune tombstones when publishing, and never report our own removal back
shai-almog
committed
2dd30d0
Wearables: retry deletion resolution until it resolves, with no deadline
shai-almog
committed
15afd3c
Wearables: confirm iOS inbox delivery, bound deletion retries, unblock the listener

shai-almog
and
claude
committed
06e1637
Wearables: make the simulator's author label atomic, gate the socket, refresh the registry

shai-almog
and
claude
committed
420781c
Wearables: protect one-shot transfers at the queue cap, reconcile a surviving local value

shai-almog
and
claude
committed
cbef9ca
Wearables: release evicted transfers, stop double-draining the iOS inbox

shai-almog
and
claude
committed
653c434
Wearables: make every evicted transfer replayable, sweep on each item's own deadline

shai-almog
and
claude
committed
bc99964
Wearables: replay relinquished iOS entries, put every expiry on its own timer

shai-almog
and
claude
committed
5fef7b6
Wearables: drop a leftover bare block in pruneInto

shai-almog
and
claude
committed
ba7140e
Wearables: copy payloads in and out of the value cache

shai-almog
and
claude
committed
a362448
Wearables: reset ordering after a local deletion, retry a failed retention sweep

shai-almog
and
claude
committed
5226709
Wearables: never confirm a delivery no listener saw; stamp from the staging file

shai-almog
and
claude
committed
80a94a3
Wearables: anchor the local-delete reset, upgrade pending resolutions on success

shai-almog
and
claude
committed
25cc620
Wearables: coalesce inbox replays, expire claims across restarts, fix a doc claim

shai-almog
and
claude
committed
db54a0d
Wearables: derive the watch app's versions from ios.plistInject when it sets them

shai-almog
and
claude
committed
6e9c4d6
Wearables: union the optional-framework lists; fix two simulator socket faults

shai-almog
and
claude
committed
f8e4c3c
Wearables: one snapshot per scanned file; populate cold caches in the background

shai-almog
and
claude
committed
7902583
Wearables: upgrade pending resolvers unconditionally, retry capability, keep the clock durable

shai-almog
and
claude
committed
0db4942
Wearables: keep the phone's bundle-version fallback; replay unclaimed transfers at start

shai-almog
and
claude
committed
e502f3d
Wearables: keep removal in the empty branch, upgrade resolvers for every deletion

shai-almog
and
claude
committed
c9a505a
Wearables: never replay without a local identity; real tombstone ages; author-aware scan

shai-almog
and
claude
committed
8d8bff5
Wearables: claims outlive the sender's deletion window; identity before echo and sweep

shai-almog
and
claude
committed
837cb5a
Wearables: fix an MRC over-release; keep replay and pruning alive as long as they matter

shai-almog
and
claude
committed
c01705f
Wearables: release priming markers on completion; keep claims while the item exists

shai-almog
and
claude
committed
56c3af7
Wearables: put the writer's stamp in the frame; unify the claim rule; drop stale births

shai-almog
and
claude
committed
801e478
Wearables: remember an authoritative absence

shai-almog
and
claude
committed
9e50bce
Wearables: keep reading v1 frames; keep the removal marker when a file vanishes

shai-almog
and
claude
committed
00f49a4
Wearables: anchor the negative cache on the pre-query stamp

shai-almog
and
claude
committed
ef14917
Wearables: never persist a lower logical-clock floor

shai-almog
and
claude
committed
09ddb07
Wearables: prune claims only after the replay has examined what is still published

shai-almog
and
claude
committed
c035f58
Wearables: refresh a transfer's claim before decoding it

shai-almog
and
claude
committed
92fc397
Wearables: decide the iOS surface lowering while parsing the manifest

shai-almog
and
claude
committed
79f6028
Wearables: give the Wear skins Android's theme, not the one from iPhoneX.skin

shai-almog
and
claude
committed
fe95ad5
Wearables: declare a standalone watch app watch-only

shai-almog
and
claude
committed
1dc24f8
Wearables: pair by role, coalesce the prune chain, forget evicted births

shai-almog
and
claude
committed
d2e3d8f
Wearables: say what isSupported() actually answers

shai-almog
and
claude
committed
8887e8e
Wearables: never expire a claim without checking the item is gone

shai-almog
and
claude
committed
bf0a665
Wearables: correct the last two isSupported() descriptions

shai-almog
and
claude
committed
70db95c
Wearables: give live messages their own worker thread

shai-almog
and
claude
committed
027c336
Wearables: remove the last age-only claim prune

shai-almog
and
claude
committed
8528f7a
Wearables: withdraw the local-removal marker when the delete fails

shai-almog
and
claude
committed
4a8b43e
Wearables: don't read a not-yet-run query as "not paired"; document the Android gap

shai-almog
and
claude
committed
e7da86d
Wearables: advance the paths generation even before a snapshot exists

shai-almog
and
claude
committed
f6124c3
Wearables: stop pretending isPaired() can answer on a cold start

shai-almog
and
claude
committed
de799da
Wearables: stop re-announcing an announced tombstone; one deadline sweep

shai-almog
and
claude
committed
2ce83bc
Wearables: replay durable values at startup too, and bound the negative cache

shai-almog
and
claude
committed
488cc63
Wearables: keep the startup value replay off local writes and let it keep trying

shai-almog
and
claude
committed
5360832
Wearables: re-decide a tombstone acknowledgement under the lock; drop an orphan birth

shai-almog
and
claude
committed
e46656a
Wearables: replay removals across a restart, and don't orphan the watch process

shai-almog
and
claude
committed
9120938
Wearables: fix four faults in the tombstone work

shai-almog
and
claude
committed
8ac177d
Wearables: record a suppressed local winner by the same rules as a dispatched one

shai-almog
and
claude
committed
58541f7
Wearables: coalesce parked deliveries by path; give the watch every privacy string

shai-almog
and
claude
committed
2261799
Wearables: remove the simulator tombstone before publishing its replacement

shai-almog
and
claude
committed
a21d6aa
Wearables: hand a discarded delivery back to the port; two simulator tombstone faults

shai-almog
and
claude
committed
09184f4
Wearables: give iOS a recovery handler, bound the dropped set, two tombstone faults

shai-almog
and
claude
committed
d54a385
Wearables: actually re-offer a forgotten iOS value; abort a removal that did not remove

shai-almog
and
claude
committed
7fa88a7
Wearables: ask for a rescan when recovery overflows; serialize the iOS replay

shai-almog
and
claude
committed
22cbe53
Wearables: recover a dropped removal as a removal; translate the location fallback

shai-almog
and
claude
committed
751ca26
Wearables: recover a discarded removal in core, where the information actually is

shai-almog
and
claude
committed
8f3a66b
Wearables: forget a tombstone's birth only once the publish succeeds

shai-almog
and
claude
committed
15c08af
Wearables: say when a removal passes beyond recovery; keep an older tombstone's birth

shai-almog
and
claude
committed
089bdd5
Wearables: drop only the simulator connection whose write actually failed

shai-almog
and
claude
committed
9fcefeb
Wearables: fix a 16-bit count that erased large messages; mirror injected purpose strings

shai-almog
and
claude
committed
c91066e
Wearables: resolve watch purpose strings once, from both sources

shai-almog
and
claude
committed
58d446d
Wearables: decode injected XML entities before re-emitting them

shai-almog
and
claude
committed
2a046e1
Wearables: keep a simulator tombstone until the peer has seen it

shai-almog
and
claude
committed
b9ff0ba
Wearables: decode numeric XML references, one HealthKit verdict

shai-almog
and
claude
committed
fb99556
Wearables: one HealthKit expression, honour the false opt-out

shai-almog
and
claude
committed
04dc680
Wearables: count the base HealthKit entitlement as usage

shai-almog
and
claude
committed
4e1cbc3
Wearables: announce deferred first-sight removals, bound the sentinels

shai-almog
and
claude
committed
aa5c3af
Wearables: tie a tombstone acknowledgement to the tombstone

shai-almog
and
claude
committed
2126715
Wearables: leave a sentinel after a stamped removal too

shai-almog
and
claude
committed
ea6883e
Wearables: an empty acknowledgement confirms nothing

shai-almog
and
claude
committed
ff217aa
Wearables: four ordering and retention fixes

shai-almog
and
claude
committed
a97128b
Wearables: tombstone housekeeping runs, and retires the eldest

shai-almog
and
claude
committed
b5d01df
Wearables: unit-test mode outranks the standalone watch lifecycle

shai-almog
and
claude
committed
3c0abc3
Wearables: do not retire a tombstone that has been replaced

shai-almog
and
claude
committed
591ee93
Wearables: keep the acknowledgement when the tombstone will not delete

shai-almog
and
claude
committed
0b81727
Wearables: one retention deadline, not one per transfer

shai-almog
and
claude
committed
0b7cff4
Wearables: an unreadable acknowledgement is not an unframed tombstone

shai-almog
and
claude
committed
c9511a8
Wearables: clear two SpotBugs findings the outage kept hidden

shai-almog
and
claude
committed
c36ab95

Commits on Aug 7, 2026

Wearables: clear the PMD gate, repark a delivery with no listener

shai-almog
and
claude
committed
e006427
Wearables: a republication cancels its own stale recovery record

shai-almog
and
claude
committed
4bf4cdb
Wearables: order deliveries against the backlog, not against timing

shai-almog
and
claude
committed
08aeb87
Wearables: keep recovery announcements ordered; hold the ack until the tombstone goes

shai-almog
and
claude
committed
ea15e32
Wearables: count concurrent drains; retire transfers on delivery, not age

shai-almog
and
claude
committed
bceabff
Wearables: a receive-only device must sweep its acknowledgements too

shai-almog
and
claude
committed
4f417dc
Wearables: null IS the rescan request, so pass it through

shai-almog
and
claude
committed
42b9a09
Wearables: atomic listener registration, record reconciliation, durable inbox claims

shai-almog
and
claude
committed
e68c125
Wearables: an acknowledgement names the publisher, not just the path

shai-almog
and
claude
committed
3a6156a
Wearables: recheck before deleting, serialise the consumed list

shai-almog
and
claude
committed
658c1e3
Wearables: a retained acknowledgement schedules its own re-check

shai-almog
and
claude
committed
12f4fd5
Wearables: release the drain guard on failure, serialise removals, retry to the cap

shai-almog
and
claude
committed
6a59a94
Wearables: snapshot listeners atomically; retry startup replay to the cap

shai-almog
and
claude
committed
a1ab69a
Wearables: the rename fallback must not unlink a version it never saw

shai-almog
and
claude
committed
2976a4d
Wearables: a parked publication cancels the recovery it supersedes

shai-almog
and
claude
committed
acc2423
Wearables: one failing port callback must not strand the queue

shai-almog
and
claude
committed
dc9173d
Wearables: every bundled watch skin reaches the skin menu

shai-almog
and
claude
committed
ac1a3a2
Wearables: the WidgetKit family spellings are the same families

shai-almog
and
claude
committed
563739d
Wearables: the accessory spellings are not watch-only after all

shai-almog
and
claude
committed
0cfc65f
Wearables: record the removal before destroying the value; durable transfer claims

shai-almog
and
claude
committed
e8e24f3
Wearables: one asset-retry chain per transfer, not one per sighting

shai-almog
and
claude
committed
369a62e
Wearables: translate the watch slice from watchMain

shai-almog
and
claude
committed
06e7550
Wearables: a simulator reload must not leave its listeners behind

shai-almog
and
claude
committed
7d8a888
Wearables: the Android summary must not promise a companion Wear artifact

shai-almog
and
claude
committed
715c28b
Merge remote-tracking branch 'origin/master' into watch-apps-product
shai-almog
committed
7613c84
Wearables: unchecked cast, reload handler, and guidance that described the old build

shai-almog
and
claude
committed
c8a1e5f
Wearables: make the watch translation actually build

shai-almog
and
claude
committed
ebba9d5
Wearables: carry per-file flags to the watch target; one simulator bridge

shai-almog
and
claude
committed
635070a
Wearables: keep the SVG registry reachable from the watch root

shai-almog
and
claude
committed
48a643c

Commits on Aug 8, 2026

Commits on Aug 9, 2026

Commits on Aug 10, 2026

Wearables: a spooled record in flight is not claimed again

shai-almog
and
claude
committed
2b26070
Wearables: one spool drain at a time, and a package gate that knows when it cannot decide

shai-almog
and
claude
committed
2d35ae6
Wearables: a reload keeps its parked messages, and a live event does not overtake the drain

shai-almog
and
claude
committed
e10482c
Wearables: a cold-start request is not dropped, and a commented plist key is not a key

shai-almog
and
claude
committed
bb358b4
Wearables: drags reach the watch, and a drain hands off cleanly

shai-almog
and
claude
committed
4b895fa
Wearables: once a watchOS arm is taken, the other arms are excluded too

shai-almog
and
claude
committed
43055d1
Wearables: the crown scrolls a usable distance, and unevaluable arms all survive

shai-almog
and
claude
committed
0aebc3d
Wearables: the drag calls use the names Swift actually imports

shai-almog
and
claude
committed
648d82d
Wearables: an unreceived message stays parked, and one rule decides legacy Wear mode

shai-almog
and
claude
committed
2cca8f6
Wearables: reply tokens survive a restart, and only a bare watchOS test closes a branch

shai-almog
and
claude
committed
0d7e02c
Wearables: a listener has to exist before the spool is skipped

shai-almog
and
claude
committed
197a598
Wearables: give the packaging notification tests the same 45 minutes

shai-almog
and
claude
committed
c9f1cb5

Commits on Aug 11, 2026

Wearables: a command-line build argument outranks the project file, and tags are elements

shai-almog
and
claude
committed
28745cb
Wearables: recognise the Objective-C platform guards, and keep commit() off the EDT

shai-almog
and
claude
committed
9212138
Wearables: attempts are charged only to a delivery someone can take, and negation is read

shai-almog
and
claude
committed
1433739
Wearables: reply tokens come from a reserved block, and staged names are quoted

shai-almog
and
claude
committed
6f3b637
Wearables: an asset catalog is judged by what is in it

shai-almog
and
claude
committed
35024bb
Merge remote-tracking branch 'origin/master' into watch-apps-product
shai-almog
committed
25296c9
Wearables: publish off the caller's thread, and pick up master's new module

shai-almog
and
claude
committed
e147610
Wearables: snapshot the caller's bytes, and let every delivery be durable

shai-almog
and
claude
committed
a01d387
Wearables: removals are ordered against the publications they follow

shai-almog
and
claude
committed
d5c57aa
Wearables: a transfer acknowledgement reaches the sender that is waiting for it

shai-almog
and
claude
committed
0e01ba6
Wearables: a failed read is not an absence, a live request stays durable, both watch slices required

shai-almog
and
claude
committed
e2c3d20
Wearables: a message is snapshotted before the send can outlive its call

shai-almog
and
claude
committed
00526a7

Commits on Aug 12, 2026

Wearables: a peer notification is not proof of identity

shai-almog
and
claude
committed
20b966e
Wearables: a transition cannot overtake the batch being delivered

shai-almog
and
claude
committed
5f9429f
Wearables: a scanner callback that cannot name its class says so

shai-almog
and
claude
committed
df8757d
Wearables: six review fixes across the worker, the drain and the generator

shai-almog
and
claude
committed
2e4aa70
Wearables: the transfer worker must not swallow a task's failure

shai-almog
and
claude
committed
e99b7e5
CI: a missing alias line is not a failed preview deploy

shai-almog
and
claude
committed
cd639b4

Commits on Aug 13, 2026

Wearables: deferred work must wait for the right event

shai-almog
and
claude
committed
37365dd
Wearables: the queue cap owes a durable delivery an answer

shai-almog
and
claude
committed
07fd3ee
Wearables: drop the deliver overload the durable-message change orphaned

shai-almog
and
claude
committed
de88d9d
Wearables: safe areas on both watches, and a spool record that cannot be read

shai-almog
and
claude
committed
7aa95e0
Wearables: honour a chosen watch skin, and require the right health string

shai-almog
and
claude
committed
6a14dbd
Wearables: the transfer quorum is the peers that run the app

shai-almog
and
claude
committed
3983150
Wearables: the watch target needs an app icon of its own

shai-almog
and
claude
committed
945bce5
Wearables: watch skins in the units the watch actually reports

shai-almog
and
claude
committed
b937b02
Wearables: reference the watch icon where it is written, and correct the docs

shai-almog
and
claude
committed
6cf1c72
Wearables: refresh the nine watch goldens the safe area moved

shai-almog
and
claude
committed
e4d3ebb
Wearables: decide the safe area once, after every contributor has had its say

shai-almog
and
claude
committed
f10016b
Wearables: the Apple watch skins need the density their dimensions are in

shai-almog
and
claude
committed
96b61e7
Wearables: read the SDK's module maps rather than guessing at paths

shai-almog
and
claude
committed
2fab382
Wearables: the SDK module assertions need a watchOS SDK to assert against

shai-almog
and
claude
committed
9456a68
Wearables: say the watch-only surfaces limitation where it can actually be said

shai-almog
and
claude
committed
f45a720
Wearables: a local build honours the same override the cloud one does

shai-almog
and
claude
committed
8bb5c05
Wearables: a true comparison of TARGET_OS_WATCH selects the watch arm

shai-almog
and
claude
committed
68999bd
Wearables: a vendored watch binary needs the slice this build will load

shai-almog
and
claude
committed
b8586a8
Wearables: record in the code why two review suggestions are declined

shai-almog
and
claude
committed
5a56333

Commits on Aug 14, 2026

Wearables: the Apple skins advertise the safe area the watch host publishes

shai-almog
and
claude
committed
f8bcef3
Wearables: delete the per-root reachability walk

shai-almog
and
claude
committed
810277b
Wearables: declare the system libraries watchOS lacks, do not probe for them

shai-almog
and
claude
committed
2b65ff4
Wearables: a vendored raw library is inspected, a declared one is not

shai-almog
and
claude
committed
0c5c100
Wearables: a contradictory conjunction excludes the watch

shai-almog
and
claude
committed
721b548
Wearables: this device is not its own companion

shai-almog
and
claude
committed
349f4dc
Wearables: declare the three system frameworks the link phase still named

shai-almog
and
claude
committed
108fc3b
Wearables: a corrupt escape must not strand the spool claim

shai-almog
and
claude
committed
62e51c9
Wearables: the exported listener service is not an open door

shai-almog
and
claude
committed
cc503bb