fix(mobile): keep agent widgets updated in the background

[jakeleventhal]

The iOS Agent Activity widget could render blank and keep showing an old “Working” snapshot after T3 closed. This change embeds the native layouts and lets the widget extension fetch current linked agent activity directly from the relay, independently of the app’s JavaScript runtime.

The relay registers an install/account-scoped read capability, stores its hash, and queues WidgetKit refresh pushes when agent activity changes. On iOS 26+, the extension registers its WidgetKit push token and receives quiet refresh requests. Scheduled native reads request another refresh after five minutes; iOS controls the actual timing and budgets both mechanisms. Successful reads renew freshness, including unchanged results. After an hour without a confirmed relay read, unfinished rows become out of date; Done and Failed outcomes stay intact. Direct-only observations retain their ten-minute deadline.

Foreground reconciliation preserves live environment precedence, handles older relay responses with an unavailable count when needed, and clears previous-account content. The native configuration survives app suspension and is cleared on sign-out. The change includes the relay migration, generated extension entitlements, and native fingerprint inputs. It requires a compatible native rebuild and relay deployment.

Continues #14608 and replaces the closed draft #14830. Rebased onto current main without conflicts.

Validation

• 296 focused tests passed across 15 files covering mobile registration/reconciliation/layouts/timelines, relay refresh/registration/publication/APNs delivery, HTTP handlers, client requests, and contracts.
• Native Swift behavior checks passed for unchanged-result renewal, source reconciliation, expiration, terminal preservation, and property-list storage.
• Scoped formatting/lint and mobile, relay, client-runtime, and contracts typechecks passed.
• A fresh compatible native build succeeded on iPhone 18 Pro Max, iOS 27.0. With T3 terminated and Metro stopped, real native scheduled reads changed isolated test agents from Working → Approval → Done. Reads at 17:16:39 and 17:21:59 UTC fetched the new states; the widget stayed fresh beyond the app’s original ten-minute deadline.
• Native evidence was captured before the final rebase. Range-diff confirms all five implementation commits are unchanged; post-rebase focused tests and typechecks ran on the published branch.
• The recording uses synthetic agent states and the production native widget/relay refresh service with isolated persistence. It does not exercise real agent approval or input workflows. APNs request construction, routing, token revocation, and queue handling are tested; real WidgetKit push delivery and the requested two-thread push sequence remain unverified. This draft does not claim push-path recording proof.

Native evidence

Baseline before: the original native client had no Agent Activity layout before publication.

Current build: Working while T3 is closed.

After a native background read:

After the next native background read:

40-second recording, accelerated 12× · Full uninterrupted seven-minute recording · Timestamped native relay reads

Implementation and validation by GPT-6.1-sol through the Codex harness in T3 Code.

[juliusmarminge]

Note

This comment is posted by Julius' dot

Could a maintainer confirm whether the approved widget scope includes native background relay reads, WidgetKit refresh pushes, and the one-hour freshness window? The earlier review requested scheduled expiration; this adds a persistent read capability and background updates. The supplied recording shows scheduled Working → Approval → Done updates, while the description explicitly leaves real push delivery unverified. Please link the approval for this broader direction or confirm it here so the scope assessment can proceed.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This 45-file change adds a new background iOS WidgetKit capability with native extension code, authenticated relay access, database state, APNs delivery, and altered account lifecycle behavior. Its production-wide scope and bearer-token handling, alongside unresolved security and stale-state concerns, require human review.

^{Adjust the Minimum Blocking Severity for this repo — including turning it Off — in Settings. You can add or adjust custom eligibility rules. Learn more.}

[juliusmarminge]

lets just continue on the old PR. i added the label there so the dot wont close it