3 Commits

Author	SHA1	Message	Date
Yaojia Wang	e38e6d1689	feat(ios): device client-cert mTLS — ClientTLS package, transport wiring, install UX (C-iOS) ... - ios/Packages/ClientTLS: SecIdentity wrapper, PKCS12 importer (typed errors), keychain store (AfterFirstUnlockThisDeviceOnly), pure MutualTLSChallengeResponder truth table, cross-platform X.509 DER summary. 14/14 tests. - Both transports (SessionCore URLSessionTermTransport, App URLSessionHTTPTransport) + SessionThumbnail take a lazy @Sendable ()->ClientIdentity? provider: WS resolves per-connect, HTTP per client-cert challenge, so a freshly-imported cert applies without an app relaunch. AppEnvironment injects { store.loadedIdentityOrNil() }. - ClientCertScreen (.fileImporter([.pkcs12]) + passphrase -> import -> keychain), reachable via a 设备证书 entry in SessionListScreen.hostMenu. PairingViewModel gates tunnel-host probes on cert presence and re-maps mTLS-reject to a clientCertRejected message. Verified: ClientTLS 14/14, SessionCore 93/93, xcodegen + xcodebuild BUILD SUCCEEDED.	2026-07-07 09:42:12 +02:00
Yaojia Wang	2ab93c9682	chore(ios): wire TestSupport test-dependency into SessionCore/APIClient manifests (W1 coordination point)	2026-07-04 21:21:09 +02:00
Yaojia Wang	cbaa08daba	feat(ios): W0 scaffold + day-1 spike + WireProtocol frozen contract + TestSupport doubles ... T-iOS-1: ios/ XcodeGen project (iOS 17, Swift 6 strict concurrency, ATS per PLAN §5.2), 5 SPM package shells, CI skeleton T-iOS-2: Origin spike vs real server — URLSessionWebSocketTask custom Origin CONFIRMED (no Starscream); 16MiB replay + EMSGSIZE(40) errno correction written back to plan T-iOS-3: WireProtocol frozen contract, 59 tests, 100% line coverage, cross-impl vectors vs src/protocol.ts via tsx T-iOS-4: FakeTransport/FakeClock/FakeHTTPTransport doubles Verify: independent agent re-ran all acceptance — 6/6 PASS	2026-07-04 21:19:30 +02:00