LookInside 3.0: Swift Host with activation built in

[Lakr233]

LookInside 3.0 replaces the Objective-C Mac app with a Swift rewrite. Do not merge this on its own; see Merge order.

What changes for users

• Activation runs inside the app. The separate activation helper is no longer installed, launched or updated. Existing activations carry over, because the app reads the same state file and keychain key. The first time 3.0 signs with that key, macOS asks for the login keychain password; choose Always Allow. Going back to 2.3.x keeps working.
• Requires macOS 14 or later.
• The MCP server is removed, along with the bundled lookinside-mcp CLI.
• Gesture Debug and Attach to App on Device carry over from 2.3.x.

What changes in the code

• Host, LookinCore models and activation are Swift. Packages/LookInsideActivation holds the activation code; Packages/LookInsideHostCore holds the shared logic.
• Our own frame transport and usbmuxd client replace the vendored Peertalk. The bytes on the wire are unchanged, so Servers 0.2.9 and earlier still connect. LookInside Server 1.0.0 is supported.
• Sources/ mirrors LookInside-Server 1.0.0.
• ReactiveObjC, ShortCocoa, Peertalk, the MCP bridge and the bundled LookinServer sources are deleted.
• Attach to App on Device runs on the new usbmuxd client. Its frames were cross-checked against the injector's own frame decoder in both directions, and the JSON wire check passes.
• Release builds are checked for debug overrides and scanned for private keys. CI builds the app, runs the gesture-model and activation tests, and runs gitleaks.

Verified locally (Xcode 27.0)

• Debug and Release builds succeed. The Release build is free of debug overrides.
• Activation package: 200 tests pass. Host core: 115 pass. Security gates, dashboard, Xcode view hierarchy and launch/toolbar/read suites pass. Gesture-model tests pass.
• LookInside-Server 1.0.0 suites pass, including the iOS Simulator run.

Not yet verified

• The UI end-to-end dumps and the side-by-side screenshot comparison. They were skipped because the test Mac was locked.
• Upgrading a 2.3.12 user (the keychain prompt) on a VM.
• Attach to App on Device against a device running the injector app.
• Gesture Debug on a device.

Merge order

1. Merge together with the parent repository change that removes the Auth helper and mcp_ref from the release train. This release.yml ignores mcp_ref and no longer stages the helper into Web. The old train would still sign and publish a helper for every app release.
2. LookInside-Release removes the helper signing workflow, and LookInside-Web adds the trial rate limit. Both can merge independently.
3. Do not tag release/app/3.0.0 until the items under "Not yet verified" pass.

🤖 Generated with Claude Code