[Programcode]

Round 6 of the iOS app: the Apple platform features. It builds on #266 (rounds 3 and 4), so the base is native-ios/parity-r3r4-combined. Round 5 (native-ios/r5-speed-polish) owns quick actions, Spotlight indexing, the share extension and iPad keyboard shortcuts, so none of those are here.

Nothing here is deployed. The migration, the ai function change and the new push copy only exist in this PR. Every native part needs a new development build, and none was started.

What it adds

• Generating Live Activity and Dynamic Island. Generate, Attack, Brainstorm and Factoids show Ollie, the step (research, write, check), the parts written so far and the elapsed time on the Lock Screen. iOS suspends the app soon after it leaves the screen. When that happens the activity goes stale and says to open DebateOwl, and the answer is read back from ai_run_results.
• "Your case is ready" push. The ai function pushes result_ready once a streamed answer is stored. It goes only to the phone that started the run, and only for a successful answer. The app hides it while it is on screen.
• Timer Live Activity buttons and time-up alert. From iOS 17 the timer's Live Activity has Pause/Resume and Next speech. A local time-sensitive notification fires when a speech or prep clock runs out on a locked phone. The app's own beeps cannot play then, because iOS has suspended it.
• Sign in with Apple (Apple's button, hashed nonce, signInWithIdToken, the name saved on first sign-in) and Google (the website's OAuth flow in an authentication session, with PKCE). The Supabase client now uses flowType: 'pkce', as the website's does; email code and demo code verify directly and are unaffected.
• In-app purchase (StoreKit 2).
  • The app's own module, modules/store-kit, plus purchases.ts. It buys with the account id as appAccountToken, posts the signed transaction to app-store-purchase, and finishes it only after a 2xx.
  • Deliveries run one at a time and never go out under another account. Unfinished transactions are sent again at launch, on sign-in and in the foreground. Every Transaction.updates version is sent too, so refunds reach the server.
  • New plans sheet: StoreKit prices, renewal terms, Restore and Manage subscription. You and the limit sheet open it.
  • A migration adds com.pistack.debateowl.{basic,pro}.monthly.
• Siri, Shortcuts and Spotlight actions. Six App Intents with phrases in en/es/hu, compiled into the app target by a config plugin:
  • start the timer;
  • ask the coach (the question is filled in, not sent);
  • start a debate;
  • write a case for a motion;
  • open the Library;
  • spar.
• Handoff. The open screen continues on a Mac at its debateowl.com page, or on another iPhone or iPad on the same route.
• App Store review prompt after the third finished result, at most every 120 days. Notification taps now open the judged Sparring round or the timer.

Build switches

Expo Go's config is byte-identical to before (checked with npx expo config --json). DEBATELAB_BUILD=dev adds the native parts. The new DEBATELAB_APPLE_ACCOUNT=1 is for a build signed by DebateOwl's own Apple account. It keeps the push and Sign in with Apple entitlements, which withoutAccountEntitlements strips from every other development build because the borrowed profile has neither. It also adds Time Sensitive Notifications and activitycontinuation:debateowl.com. It goes in the eas.json profile env on build day.

What Adam sets up

docs/apple-platform.md has the full checklist. In short:

• Apple Developer Program and the Paid Apps agreement.
• App Group group.com.pistack.debateowl.
• App IDs com.pistack.debateowl (App Groups, Associated Domains, Push, Sign in with Apple, Time Sensitive Notifications) and com.pistack.debateowl.ExpoWidgetsTarget (App Groups).
• An APNs key uploaded to EAS.
• App Store Connect: the app, a subscription group with the two products, and the server notification URL.
• Supabase:
  • the Apple provider with client id com.pistack.debateowl;
  • the debatelab://auth/callback redirect;
  • the APP_STORE_* settings;
  • the migrations;
  • deploys of app-store-purchase, app-store-notifications, account and ai.
• The website's apple-app-site-association file, which needs the Team ID.

Verification

• npm run verify passed locally at the final head fb2e8035: lint and repo rules, typecheck, 902 unit tests, 30 collaboration tests, 555 edge tests, build, service worker, 47 Playwright smoke tests. This is a local pass, not CI.
• Database gate (./.superset/db-gate.sh --db-only): 33 files, 655 pgTAP tests, PASS, with the new migration. Stack stopped.
• New tests:
  • purchases: finish only after a 2xx, not_configured, pending and cancelled, serial delivery, an account switch mid-purchase, refund updates, a new signed version of a delivered transaction, a finish that failed;
  • the OAuth callback parser;
  • timer buttons, the time-up moment, and a paused prep bank kept on the Lock Screen;
  • Handoff and Siri link mapping;
  • result_ready scoped to the requesting install;
  • onResult runs after the result is stored and cannot break the stream.
• Swift:
  • StoreKitLogic.swift and DebateOwlAppIntents.swift typecheck with Swift 6.4 on the Mac (macOS SDK, plus Catalyst for the UIKit branch).
  • StoreKitModule.swift and HandoffModule.swift have not been compiled against ExpoModulesCore. They mirror existing Expo modules.
• The App Intents config plugin ran against a bare SDK 57 template and is idempotent. No prebuild of this app was run.
• Reviews:
  • Codex round 1 (6b8790c4) had seven medium findings, all addressed in cd1b24b5. For the offer-code finding, Redeem was removed and the limit documented.
  • Rounds 2 to 4 hung and were cancelled. Round 2 had been looking at two areas, and both turned out to be real bugs. They were reproduced with failing tests and fixed in 71cc82d4, ca0cd554 and fb2e8035:
    • a delivered transaction's new signed version was skipped;
    • a prep clock paused from the Lock Screen could not be resumed.
  • The final fixes were self-reviewed only, with no second-model review.

Not verified: anything on a device or in Xcode, Live Activities, Siri, Handoff, the StoreKit sandbox, Apple and Google sign-in end to end, web-preview screenshots (expo export was skipped for memory).

Risks

• The two Expo glue Swift files may need small fixes at the first build.
• A Live Activity button press on an app iOS has ended may be missed.
• An offer code redeemed through Apple, or a Family Sharing subscription, carries no account id, so the server cannot apply it.
• App Review 5.1.1(v): deleting an account should revoke its Sign in with Apple token. That needs the Sign in with Apple key on the server and is not built yet.
• Overlap with round 5: app.config.ts, _layout.tsx, apps/mobile/package.json, package-lock.json, apps/mobile/AGENTS.md, docs/development.md, and two lines in sparring/index.tsx.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Programcode/DebateLab
• Branch: native-ios/r6-apple-platform
• File: .coderabbit.yaml
• Commit: a415c2d
• Layers: Repository YAML (base), Organization UI (inherited)
• Review profile: CHILL
• Plan: Free
• Run ID: fbe720ef-fe41-453c-8039-be5289b1e494

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Note

🎁 Summarized by CodeRabbit Free

Your organization is on the Free plan. CodeRabbit will generate a high-level summary and a walkthrough for each pull request. For a comprehensive line-by-line review, please upgrade your subscription to CodeRabbit Essentials by visiting https://app.coderabbit.ai/settings/billing.

_{Comment @coderabbitai help to get the list of available commands.}

[Programcode]

Local npm run verify at 5b11a2be passed: lint and repo rules, typecheck, 898 unit tests, 30 collaboration tests, 555 edge tests, build, service worker, and 47 Playwright smoke tests. This is a local pass, not a CI pass.

[Programcode]

Local npm run verify at ca0cd554 passed (lint and repo rules, typecheck, unit, collaboration, edge, build, service worker, 47 Playwright smoke). This is a local pass, not a CI pass.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota.