Vendor OpenClaw source as Adolf fork baseline

Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11),
free to diverge. Tree copied sans upstream .git; upstream remote added for
future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19.
Preserves docs/ARCHITECTURE.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2

apps/ios/fastlane/.env.example

@@ -0,0 +1,33 @@
+# App Store Connect API key (pick one approach)
+#
+# Recommended (use the downloaded .p8 directly):
+# APP_STORE_CONNECT_KEY_ID=XXXXXXXXXX
+# APP_STORE_CONNECT_ISSUER_ID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+# APP_STORE_CONNECT_KEY_PATH=/absolute/path/to/AuthKey_XXXXXXXXXX.p8
+#
+# Or (JSON key file):
+# APP_STORE_CONNECT_API_KEY_PATH=/absolute/path/to/AuthKey_XXXXXX.json
+#
+# Or:
+# APP_STORE_CONNECT_KEY_ID=XXXXXXXXXX
+# APP_STORE_CONNECT_ISSUER_ID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+# APP_STORE_CONNECT_KEY_CONTENT=BASE64_P8_CONTENT
+#
+# Or (macOS Keychain, recommended for maintainer machines):
+# APP_STORE_CONNECT_KEY_ID=XXXXXXXXXX
+# APP_STORE_CONNECT_ISSUER_ID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+# APP_STORE_CONNECT_KEYCHAIN_SERVICE=openclaw-app-store-connect-key
+# APP_STORE_CONNECT_KEYCHAIN_ACCOUNT=your-macos-user
+
+# Fastlane match signing repo encryption
+# MATCH_PASSWORD=...
+
+# Code signing
+# IOS_DEVELOPMENT_TEAM=XXXXXXXXXX
+
+# Deliver toggles (off by default)
+# DELIVER_METADATA=1
+# DELIVER_SCREENSHOTS=1
+
+# Screenshot generation
+# OPENCLAW_SNAPSHOT_DEVICES=iPhone 16 Pro Max,iPad Pro 13-inch (M4)

apps/ios/fastlane/Appfile

@@ -0,0 +1,17 @@
+app_identifier("ai.openclawfoundation.app")
+
+# Auth is expected via App Store Connect API key.
+# Provide either:
+# - APP_STORE_CONNECT_API_KEY_PATH=/path/to/AuthKey_XXXXXX.p8.json (recommended)
+# or:
+# - APP_STORE_CONNECT_KEY_PATH=/path/to/AuthKey_XXXXXX.p8 with
+#   APP_STORE_CONNECT_KEY_ID and APP_STORE_CONNECT_ISSUER_ID
+# - APP_STORE_CONNECT_KEY_ID, APP_STORE_CONNECT_ISSUER_ID, and
+#   APP_STORE_CONNECT_KEY_CONTENT (base64 or raw p8 content)
+# - APP_STORE_CONNECT_KEY_ID and APP_STORE_CONNECT_ISSUER_ID plus Keychain fallback:
+#   APP_STORE_CONNECT_KEYCHAIN_SERVICE (default: openclaw-app-store-connect-key)
+#   APP_STORE_CONNECT_KEYCHAIN_ACCOUNT (default: USER/LOGNAME)
+#
+# Optional deliver app lookup overrides:
+# - APP_STORE_CONNECT_APP_IDENTIFIER (bundle ID)
+# - APP_STORE_CONNECT_APP_ID (numeric App Store Connect app ID)

apps/ios/fastlane/SETUP.md

@@ -0,0 +1,173 @@
+# fastlane setup (OpenClaw iOS)
+
+Install:
+
+```bash
+brew install fastlane
+```
+
+Create an App Store Connect API key:
+
+- App Store Connect → Users and Access → Keys → App Store Connect API → Generate API Key
+- Download the `.p8`, note the **Issuer ID** and **Key ID**
+
+Recommended (macOS): store the private key in Keychain and write non-secret vars:
+
+```bash
+scripts/ios-app-store-connect-keychain-setup.sh \
+  --key-path /absolute/path/to/AuthKey_XXXXXXXXXX.p8 \
+  --issuer-id YOUR_ISSUER_ID \
+  --write-env
+```
+
+This writes these auth variables in `apps/ios/fastlane/.env`:
+
+```bash
+APP_STORE_CONNECT_KEY_ID=YOUR_KEY_ID
+APP_STORE_CONNECT_ISSUER_ID=YOUR_ISSUER_ID
+APP_STORE_CONNECT_KEYCHAIN_SERVICE=openclaw-app-store-connect-key
+APP_STORE_CONNECT_KEYCHAIN_ACCOUNT=YOUR_MAC_USERNAME
+```
+
+Important: `apps/ios/fastlane/.env` is only for Fastlane/App Store Connect auth and optional release-archive settings. It does **not** configure gateway-side direct APNs push delivery for local iOS builds.
+
+Optional app targeting variables (helpful if Fastlane cannot auto-resolve app by bundle):
+
+```bash
+APP_STORE_CONNECT_APP_IDENTIFIER=ai.openclawfoundation.app
+# or
+APP_STORE_CONNECT_APP_ID=YOUR_APP_STORE_CONNECT_APP_ID
+```
+
+File-based fallback (CI/non-macOS):
+
+```bash
+APP_STORE_CONNECT_KEY_ID=YOUR_KEY_ID
+APP_STORE_CONNECT_ISSUER_ID=YOUR_ISSUER_ID
+APP_STORE_CONNECT_KEY_PATH=/absolute/path/to/AuthKey_XXXXXXXXXX.p8
+```
+
+Code signing variable (optional in `.env`):
+
+```bash
+IOS_DEVELOPMENT_TEAM=YOUR_TEAM_ID
+```
+
+Tip: run `scripts/ios-team-id.sh --require-canonical` from repo root to verify the canonical OpenClaw iOS team (`FWJYW4S8P8`) is available locally. Fastlane uses the same canonical-only path when `IOS_DEVELOPMENT_TEAM` is missing, and rejects non-canonical teams for release archives.
+
+App Store release signing is manual and profile-pinned. The canonical manifest is `apps/ios/Config/AppStoreSigning.json`, and Fastlane `match` owns the encrypted signing repo and branch named there.
+
+One-time or rotation setup:
+
+```bash
+pnpm ios:release:signing:plan
+pnpm ios:release:signing:check
+pnpm ios:release:signing:setup
+```
+
+`signing:setup` uses Fastlane `produce` and `modify_services` to create Developer Portal bundle IDs and enable required services before running `match`. The main app also requires App Attest, and the main app and share extension both require the shared App Group from `apps/ios/Config/AppStoreSigning.json`; associate that group with both bundle IDs in the Apple Developer Portal before regenerating profiles. If Fastlane does not already have a valid Apple Developer Portal session, run `fastlane spaceauth` for a release-owner Apple ID and export the resulting `FASTLANE_SESSION`.
+
+Shared encrypted signing storage:
+
+```bash
+MATCH_PASSWORD=... pnpm ios:release:signing:sync:push
+MATCH_PASSWORD=... pnpm ios:release:signing:sync:pull
+```
+
+The signing repo is private and encrypted. Store `MATCH_PASSWORD` in the release-owner vault, not in this product repo. `sync:pull` uses Fastlane `match` to decrypt, install profiles, and import the distribution signing identity into the local Keychain.
+
+For local/manual iOS builds that stay on direct APNs, configure the gateway host separately with `OPENCLAW_APNS_TEAM_ID`, `OPENCLAW_APNS_KEY_ID`, and either `OPENCLAW_APNS_PRIVATE_KEY_P8` or `OPENCLAW_APNS_PRIVATE_KEY_PATH`. Those gateway runtime env vars are separate from Fastlane's `.env`.
+
+Validate auth:
+
+```bash
+cd apps/ios
+fastlane ios auth_check
+```
+
+App Store Connect API auth is required when:
+
+- uploading to App Store Connect
+- auto-resolving the next build number from App Store Connect
+
+If you pass `--build-number` to `pnpm ios:release:archive`, the local archive path does not need App Store Connect API auth.
+
+Archive locally without upload:
+
+```bash
+pnpm ios:release:archive -- --version 2026.6.11 --build-number 3
+```
+
+Generate deterministic App Store screenshots:
+
+```bash
+pnpm ios:screenshots
+```
+
+The screenshot lane runs the app with `--openclaw-screenshot-mode`, which enters the built-in connected screenshot fixture instead of pairing with a live gateway. By default it chooses one available large iPhone simulator and one available 13-inch iPad simulator from the installed Xcode runtime; override devices with a comma-separated `OPENCLAW_SNAPSHOT_DEVICES` value when the requested simulators exist locally.
+
+Upload to App Store Connect:
+
+```bash
+pnpm ios:release:upload -- --version 2026.6.11
+```
+
+Direct Fastlane upload is disabled. Use the package script so the release
+wrapper, App Store push mode, and exported-IPA validation gate all run in the
+same path.
+
+Maintainer recovery path for a fresh clone on the same Mac:
+
+1. Reuse the existing Keychain-backed App Store Connect key on that machine.
+2. Restore or recreate `apps/ios/fastlane/.env` so it contains the non-secret variables:
+
+```bash
+APP_STORE_CONNECT_KEY_ID=YOUR_KEY_ID
+APP_STORE_CONNECT_ISSUER_ID=YOUR_ISSUER_ID
+APP_STORE_CONNECT_KEYCHAIN_SERVICE=openclaw-app-store-connect-key
+APP_STORE_CONNECT_KEYCHAIN_ACCOUNT=YOUR_MAC_USERNAME
+```
+
+3. Re-run auth validation:
+
+```bash
+cd apps/ios
+fastlane ios auth_check
+```
+
+4. If you are starting a brand-new production release train, validate iOS release notes for the release version:
+
+```bash
+pnpm ios:version:check -- --version 2026.6.11
+```
+
+5. Upload:
+
+```bash
+pnpm ios:release:upload -- --version 2026.6.11 --build-number 3
+```
+
+Quick verification after upload:
+
+- confirm `apps/ios/build/app-store/OpenClaw-<version>.ipa` exists
+- confirm Fastlane validates the exported IPA before upload
+- confirm Fastlane prints `Uploaded iOS App Store build: version=<version> short=<short> build=<build>`
+- remember that App Store Connect processing can take a few minutes after the upload succeeds
+
+Versioning rules:
+
+- App Store release uploads require an explicit `--version`
+- local defaults derive from root `package.json`
+- `apps/ios/CHANGELOG.md` is the iOS-only changelog and release-note source
+- Supported iOS release versions use CalVer: `YYYY.M.D`
+- Fastlane uses the explicit release version for App Store upload
+- Fastlane sets `CFBundleShortVersionString` to the release version, for example `2026.4.10`
+- Fastlane resolves `CFBundleVersion` as the next integer App Store Connect build number for that short version
+- Run `pnpm ios:version:check -- --version <release-version>` after changing `apps/ios/CHANGELOG.md`
+- `pnpm ios:version:check` validates that release notes can be generated from the iOS changelog
+- The release flow regenerates `apps/ios/OpenClaw.xcodeproj` from `apps/ios/project.yml` before archiving
+- Local App Store signing uses a temporary generated xcconfig with profile names from `apps/ios/Config/AppStoreSigning.json` and leaves local development signing overrides untouched
+- App Store release uses `OpenClawPushMode=appStore`, which derives the canonical production hosted relay, production APNs, production relay profile, and `appleStrict` proof. The release lane rejects custom production relay URL overrides.
+- The exported IPA is validated before upload by inspecting its push mode, signed entitlements, and embedded App Store profile.
+- `pnpm ios:release:upload` generates and uploads screenshots, release notes, and the App Review PDF attachment before archiving, then uploads the IPA without submitting it for App Review or uploading the App Store Connect `Notes` field
+- See `apps/ios/VERSIONING.md` for the detailed workflow

apps/ios/fastlane/Snapfile

@@ -0,0 +1,23 @@
+project("OpenClaw.xcodeproj")
+scheme("OpenClawUITests")
+configuration("Debug")
+
+# The Fastfile screenshot lane resolves concrete device names from the installed
+# Xcode simulators. Fastlane validates Snapfile devices before lane overrides, so
+# this file intentionally does not hardcode simulator model names.
+
+languages([
+  "en-US",
+])
+
+launch_arguments([
+  "--openclaw-screenshot-mode",
+])
+
+output_directory("fastlane/screenshots")
+clear_previous_screenshots(true)
+reinstall_app(true)
+concurrent_simulators(false)
+override_status_bar(true)
+override_status_bar_arguments("--time 09:41 --dataNetwork wifi --wifiMode active --wifiBars 3 --cellularMode active --cellularBars 4 --batteryState charged --batteryLevel 100")
+skip_open_summary(true)

apps/ios/fastlane/metadata/README.md

@@ -0,0 +1,58 @@
+# App Store metadata (Fastlane deliver)
+
+This directory is used by `fastlane deliver` for App Store Connect text metadata.
+
+## Upload public metadata and App Review attachment
+
+```bash
+cd apps/ios
+APP_STORE_CONNECT_APP_ID=YOUR_APP_STORE_CONNECT_APP_ID \
+DELIVER_METADATA=1 fastlane ios metadata release_version:2026.6.11
+```
+
+## Release notes and App Review attachment
+
+`pnpm ios:release:upload` uses this mode before archiving so the editable App Store version has current release notes and the App Review PDF attachment without rewriting all metadata:
+
+```bash
+cd apps/ios
+DELIVER_RELEASE_NOTES=1 fastlane ios metadata release_version:2026.6.11
+```
+
+## Optional: include screenshots
+
+```bash
+cd apps/ios
+DELIVER_METADATA=1 DELIVER_SCREENSHOTS=1 fastlane ios metadata release_version:2026.6.11
+```
+
+## Auth
+
+The `ios metadata` lane uses App Store Connect API key auth from `apps/ios/fastlane/.env`:
+
+- Keychain-backed (recommended on macOS):
+  - `APP_STORE_CONNECT_KEY_ID`
+  - `APP_STORE_CONNECT_ISSUER_ID`
+  - `APP_STORE_CONNECT_KEYCHAIN_SERVICE` (default: `openclaw-app-store-connect-key`)
+  - `APP_STORE_CONNECT_KEYCHAIN_ACCOUNT` (default: current user)
+- File/path fallback:
+  - `APP_STORE_CONNECT_KEY_ID`
+  - `APP_STORE_CONNECT_ISSUER_ID`
+  - `APP_STORE_CONNECT_KEY_PATH`
+
+Or set `APP_STORE_CONNECT_API_KEY_PATH`.
+
+## Notes
+
+- Locale files live under `metadata/<locale>/`, for example `metadata/en-US/` and `metadata/sv-SE/`. Each locale directory should use the public metadata filenames consumed by the `ios metadata` lane.
+- Release notes are generated from `apps/ios/CHANGELOG.md` into temporary Fastlane metadata during upload; after changelog updates, run `pnpm ios:version:check -- --version <release-version>`.
+- Do not check in `release_notes.txt` under locale metadata directories; the lane strips copied release-note files and writes the current generated en-US release notes when requested.
+- `apps/ios/APP-REVIEW-NOTES.md` is rendered to `apps/ios/build/app-review/APP-REVIEW-NOTES.pdf` and uploaded as the App Review attachment when metadata is uploaded.
+- Release notes resolve from `## <release version>` first, then fall back to `## Unreleased` while an App Store Connect build train is still in progress.
+- When starting a new production release train, validate metadata with `pnpm ios:version:check -- --version <release-version>`.
+- The release upload flow uploads release notes, screenshots, and the App Review PDF attachment before the IPA, and never submits for App Review.
+- `privacy_url.txt` is set to `https://openclaw.ai/privacy`.
+- If app lookup fails in `deliver`, set one of:
+  - `APP_STORE_CONNECT_APP_IDENTIFIER` (bundle ID)
+  - `APP_STORE_CONNECT_APP_ID` (numeric App Store Connect app ID, e.g. from `/apps/<id>/...` URL)
+- App Review submission is manual. Keep review contact, demo account, and the App Store Connect `Notes` field outside this repo and enter them directly in App Store Connect when submitting for review. Do not add `metadata/review_information/notes.txt`; the lane refuses to upload that field.

apps/ios/fastlane/metadata/en-US/description.txt

@@ -0,0 +1,19 @@
+OpenClaw is a personal AI assistant you run on your own devices.
+
+Pair this iOS app with your OpenClaw Gateway to use your iPhone as a secure node for chat, voice, approvals, sharing, and device-aware automation.
+
+What you can do:
+- Pair with your private OpenClaw Gateway by QR code or setup code
+- Chat with your assistant from iPhone
+- Use realtime Talk mode and background Talk
+- Review Gateway action approvals from your iPhone
+- Share text, links, and media directly from iOS into OpenClaw
+- Enable device capabilities such as camera, screen, location, photos, contacts, calendar, and reminders when you choose
+- Receive push wakes and node status updates for connected workflows
+
+OpenClaw is local-first: you control your gateway, keys, configuration, and permissions. Device access is managed by iOS permissions and can be enabled only for the capabilities you want to use.
+
+Getting started:
+1) Set up your OpenClaw Gateway
+2) Open the iOS app and pair with your gateway
+3) Start using chat, Talk mode, approvals, and automations from your iPhone

apps/ios/fastlane/metadata/en-US/keywords.txt

@@ -0,0 +1 @@
+openclaw,ai assistant,local ai,iphone ai,voice assistant,automation,gateway,chat,agent

apps/ios/fastlane/metadata/en-US/marketing_url.txt

@@ -0,0 +1 @@
+https://openclaw.ai

apps/ios/fastlane/metadata/en-US/name.txt

@@ -0,0 +1 @@
+OpenClaw - iOS Client

apps/ios/fastlane/metadata/en-US/privacy_url.txt

@@ -0,0 +1 @@
+https://openclaw.ai/privacy

apps/ios/fastlane/metadata/en-US/promotional_text.txt

@@ -0,0 +1 @@
+Pair your iPhone with your OpenClaw Gateway for chat, realtime voice, approvals, device capabilities, and private automation.

apps/ios/fastlane/metadata/en-US/subtitle.txt

@@ -0,0 +1 @@
+Personal AI on your devices

apps/ios/fastlane/metadata/en-US/support_url.txt

@@ -0,0 +1 @@
+https://docs.openclaw.ai/platforms/ios

apps/ios/fastlane/metadata/sv-SE/description.txt

@@ -0,0 +1,19 @@
+OpenClaw är en personlig AI-assistent som du kör på dina egna enheter.
+
+Parkoppla iOS-appen med din OpenClaw Gateway och använd din iPhone som en säker nod för chatt, röst, godkännanden, delning och enhetsmedveten automatisering.
+
+Det här kan du göra:
+- Parkoppla med din privata OpenClaw Gateway via QR-kod eller installationskod
+- Chatta med din assistent från iPhone
+- Använd Talk-läge i realtid och tryck-och-prata
+- Granska åtgärder som väntar på godkännande från gatewayen
+- Dela text, länkar och media direkt från iOS till OpenClaw
+- Aktivera enhetsfunktioner som kamera, skärm, plats, bilder, kontakter, kalender och påminnelser när du vill
+- Ta emot pushväckningar och nodstatus för anslutna arbetsflöden
+
+OpenClaw är byggt för lokal kontroll: du styr din gateway, dina nycklar, din konfiguration och dina behörigheter. Åtkomst till enheten hanteras av iOS-behörigheter och aktiveras bara för de funktioner du vill använda.
+
+Kom igång:
+1. Konfigurera din OpenClaw Gateway
+2. Öppna iOS-appen och parkoppla den med gatewayen
+3. Börja använda chatt, Talk-läge, godkännanden och automatiseringar från din iPhone

apps/ios/fastlane/metadata/sv-SE/keywords.txt

@@ -0,0 +1 @@
+openclaw,ai-assistent,lokal ai,iphone ai,röstassistent,automatisering,gateway,chatt,agent

apps/ios/fastlane/metadata/sv-SE/marketing_url.txt

@@ -0,0 +1 @@
+https://openclaw.ai

apps/ios/fastlane/metadata/sv-SE/name.txt

@@ -0,0 +1 @@
+OpenClaw - iOS-klient

apps/ios/fastlane/metadata/sv-SE/privacy_url.txt

@@ -0,0 +1 @@
+https://openclaw.ai/privacy

apps/ios/fastlane/metadata/sv-SE/promotional_text.txt

@@ -0,0 +1 @@
+Parkoppla din iPhone med OpenClaw Gateway för chatt, röst i realtid, godkännanden, enhetsfunktioner och privat automatisering.

apps/ios/fastlane/metadata/sv-SE/subtitle.txt

@@ -0,0 +1 @@
+Personlig AI på dina enheter

apps/ios/fastlane/metadata/sv-SE/support_url.txt

@@ -0,0 +1 @@
+https://docs.openclaw.ai/platforms/ios