[Adron]

First build-out of the iOS/iPadOS Substratal Hub, management sections first.

What's in it

• SubstratalKit (Swift package, shared with a future macOS app)
  • SubstratalAPI: the client generated at build time from openapi.yaml 1.0.0-draft.9 (124 operations)
  • SubstratalCore:
    • middleware that sends Substratal-Version: 1 on every request. There's no /v1 in any URL.
    • Deprecation/Sunset handling and the unsupported_api_version blocker
    • auth with single-flight refresh, error mapping, and Idempotency-Key / If-Match
    • session, Keychain, Capabilities, all 75 screen routes, and help-center links
  • SubstratalUI: the 5 light and 5 dark themes from the spec, StatusBadge, IDChip, AccessRow, SecretRevealSheet, and load/error states
• App
  • Layout: iPhone tabs (Manage is hidden without rights), the iPad sidebar, and deep links (substratal:// and dashboard URLs)
  • Working screens:
    • Sign-in and two-factor
    • Home, Account, and Settings appearance
    • Users and user access, Roles, and the Audit log
    • Applications, and API keys with the one-time secret reveal
  • Every unbuilt screen resolves to a placeholder that links to its spec and its help page.
• Demo mode (-demo YES, plus -autoSignIn YES and -route <path>) for running without an account
• Scripts: sync-openapi.sh and derive-openapi.py (open enums, nullable fields, version header via middleware), and generate-screen-ids.py
• Workflows:
  • CI: project drift check, unit tests, and UI smoke test
  • A daily API-contract sync that opens a PR when the contract changes
  • A help-center rebuild dispatch to the specs repo
• Docs: the plan is updated for header versioning, and the API gaps map to the [api-gaps] issues

Tested locally

• swift test: 13 tests pass (routing, versioning middleware, contract pin, status mapping).
• UI smoke test passes on iPhone 17 Pro (iOS 26.5): sign-in → two-factor → shell.
• Checked manually in the simulator: sign-in, Manage, and API keys on iPhone; a user-detail deep link on iPad Pro 13".

Not verified

• CI hasn't run yet. ios.yml assumes a macos-26 runner with Xcode 27 at /Applications/Xcode_27.0.app.
• docs-dispatch.yml needs the SPECS_DOCS_TOKEN secret. Without it, the workflow logs a warning and the help center still picks up changes on its daily build.

Not built yet

• Saving access-switch changes (ACX-03) and the remaining forms
• Push (blocked on API issues #24 and #25)
• Biometric lock, widgets, and App Intents

🤖 Generated with Claude Code