Apple Native Apps

[Kief5555]

This pull request introduces a new native iOS SwiftUI prototype app for OpenNOW, including a Live Activity widget for queue status, and updates the project documentation to reference the new iOS app. The changes add all necessary Xcode project files, asset catalogs, and widget implementation for the iOS prototype.

iOS App and Widget Addition:

• Added a new iOS SwiftUI prototype app under ios/OpenNOWiOS/, including all required Xcode project files, workspace, and schemes for both the main app and the Live Activity widget. [1] [2] [3]
• Implemented a Live Activity widget (OpenNOWWidget) using WidgetKit and ActivityKit, with custom queue status display for lock screen and Dynamic Island, including supporting views and logic in QueueLiveActivityWidget.swift. [1] [2] [3]

Assets and Resources:

• Added asset catalogs for app icons and store images (Steam and Epic), as well as accent colors, to support the iOS app’s UI. [1] [2] [3] [4] [5]

Documentation Updates:

• Updated README.md to mention the new iOS SwiftUI prototype and include it in the project directory structure. [1] [2]

[capy-ai]

Added 2 comments

[capy-ai]

[🟠 High] [🔵 Bug]

The ! negation prefix was removed from !opennow-stable/package-lock.json, turning it into a redundant positive-match pattern. The general package-lock.json rule on line 45 already ignores all files with that name. Previously, !opennow-stable/package-lock.json explicitly un-ignored the Electron app's lock file so it stayed committed. Without it, opennow-stable/package-lock.json is now git-ignored, which will cause non-reproducible dependency installations for the main application.

# .gitignore
package-lock.json
opennow-stable/package-lock.json   # was: !opennow-stable/package-lock.json

This contradicts the PR itself, which modifies opennow-stable/package-lock.json (+150/-44).

Suggested change

	opennow-stable/package-lock.json
	!opennow-stable/package-lock.json

[capy-ai]

[🟡 Medium] [🟡 Investigate]

The persistAuthSession method stores the full AuthSession (containing accessToken, refreshToken, and idToken) in UserDefaults as JSON. UserDefaults are stored in a plain plist file and are accessible from unencrypted device backups. Apple's security guidance recommends using the Keychain for sensitive credentials.

// OpenNOWStore.swift
private func persistAuthSession(_ session: AuthSession) {
    if let encoded = try? JSONEncoder().encode(session) {
        defaults.set(encoded, forKey: authSessionKey)
    }
}

For a prototype this is understandable, but if this ships to users, tokens should be stored in the iOS Keychain (SecItemAdd/SecItemCopyMatching) to protect against backup extraction and unauthorized access.