feat(ios): watchOS push-to-talk

[dastratakos]

Summary

Adds a hold-to-talk voice screen to apps/ios/LukeWatch that drives the same LukeKit.RealtimeSession the iPhone's VoiceView uses, with streaming captions on the wrist.

Navigation: Two pages accessible by swiping — voice on the left (default), sessions list on the right. The mic toolbar button on WatchRosterView is removed since voice is now a top-level tab.

Mint timing: The Realtime session is not minted until the developer presses the talk button. WatchVoiceView.task stores the credential reference (prepare) without opening any connection; beginTurn() mints and connects on first press. This keeps parity with iPhone's navigate-then-press gate.

Watch-specific audio:WatchAudioCapturer and WatchAudioPlayer mirror the iPhone classes without .allowBluetoothHFP (watchOS owns its own Bluetooth audio routing) and use AVAudioApplication.shared.recordPermission (watchOS 10 API).

Tool-free:dispatchToolCall always returns {"error":"not authorized"} and contextItems is always empty. The armed-act infrastructure (roster validation, ActClient, ProjectsAnswer) lives on the phone; a future PR may add a bounded act set.

Credential handling:WatchAccountSession.validAccessToken() throws .signedOut near expiry (the watch cannot refresh tokens). onError detects the signed-out state and shows "Open Luke on your iPhone".

Empty state: The Luke face mark (WatchLukeMark — a watchOS copy of FaceArt/LukeMark from apps/ios/Luke/Marks.swift without UIKit) replaces placeholder text.

Chat bubbles: Conversation history accumulates as [WatchVoiceMessage]. onSpokenAsk appends a user bubble (right-aligned, accent); streaming onCaption grows a luke bubble (left-aligned, secondary fill). Bubbles scroll behind the floating mic button.

Test plan

• Signed-in watch launch: voice tab is default; no network call is made until the talk button is pressed
• Press and hold talk button: status transitions connecting → listening → thinking → speaking; captions stream in bubbles
• Release button: session ends turn; speaking → idle
• Swipe right: sessions list renders with the roster
• Swipe back to voice: session reconnects on next button press
• Signed out: "Open Luke on your iPhone" shown
• Build passes on both iPhone and watchOS simulator targets

🤖 Generated with Claude Code

Automated visual evidence

Download the deterministic macOS evidence · workflow run

• Commit: 85f781b9915f8eafde68d37bc05b19becd306f6e
• Scenario: smoke
• Physical-notch check: not performed by CI

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
luke-web	Ready	Preview	Sep 4, 2026 9:35pm UTC

[cursor]

Security verification: unbidden watch voice mint + sessions context

(a) Finding: TRUE. On this PR’s changed watch UI, a signed-in watch launch lands on voice as tab 0; WatchVoiceView.task calls start immediately; that mints a remote Realtime credential and, on channel open, sends the mint’s observed-sessions context to OpenAI — without the user holding the talk button (startWithTurn defaults to false and only gates mic/turn arming, not mint or context send).

(b) Evidence (HEAD d4194d76)

1. Default tab is voice, not roster — apps/ios/LukeWatch/LukeWatchView.swift:6,14-18 (selectedTab = 0, WatchVoiceView.tag(0), roster .tag(1)).
2. Appear starts session — WatchVoiceView.swift:20-21 → model.start(accountSession:) with default startWithTurn: false.
3. start always mints — WatchVoiceSessionModel.swift:28-41,87 (VoiceMintClient.mint inside requestConnection, then connect(startWithTurn:)).
4. connect always mints regardless of startWithTurn — RealtimeSession.swift:212-234 (requestConnection() unconditional; startWithTurn only calls beginTurn()).
5. sessionsContext always sent on channel open — RealtimeSession.swift:234,364-375,390-391 (onChannelOpen → sendText(contextItemJSON(context)) with no startWithTurn / isArmed guard). Context is vault-observed session metadata (titles, branches, repos) from remote mint (apps/web/server/hosted/remote-context.ts).

(c) vs iPhone / regression

• iPhone also auto-mints on VoiceView appear (.task → start, same Realtime path) — but Voice is behind NavigationLink / SessionsRoute.voice (SessionsView.swift:51-54,215,222), so mint happens only after navigating to voice.
• This PR makes voice the watch home screen, so opening the watch app (signed in) is enough. That is a new privacy expansion relative to iPhone’s navigate-to-voice gate, even though mint-on-voice-appear (without talk press) already existed on iPhone.

(d) Severity: HIGH

Unbidden OpenAI mint + observed session roster/context on every signed-in watch open (ambient, frequent) expands the unbidden-send surface beyond intentional voice use. Talk button is not required.

(e) PR description mismatch: YES

PR body still claims: “Adds a mic toolbar button on WatchRosterView that navigates to the voice screen. The roster remains the default home screen.” Code after the swipeable-pages commit does the opposite: voice is default tab 0; roster is tab 1; no mic-nav-from-roster home. Description does not match code.

No fix proposed (verification-only).

_{Sent by Cursor Security Agent: Security Reviewer}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit d53a7b6. Configure here.}