Sleep: "Bridge brief wakes" (experimental, default OFF) — one session per night across brief wakes

.gitignore

@@ -69,6 +69,8 @@ android/app/release/
 # ── Misc / secrets (never commit) ───────────────────────────────
 *.log
 .env
+# Oura BYO-app OAuth credentials (never committed)
+Strand/Oura/OuraSecrets.xcconfig
 # Deployment credentials (PAT / signing / endpoints) — never commit. `.env` above
 # won't match `deploy.env`, so list it (and any `deploy.env.<stage>`) explicitly.
 deploy.env
@@ -92,6 +94,12 @@ export.zip
 __pycache__/
 *.pyc
 
+# ── Rust (liters dependency) ────────────────────────────────────
+# Build output only. Rust/Cargo.lock IS tracked: it pins the exact liters
+# commit this tree builds against, which a branch-tracking git dependency
+# otherwise leaves floating.
+Rust/target/
+
 # Local release artifacts (zips/ipas built for upload; never tracked)
 dist/
 err.txt
@@ -102,6 +110,12 @@ Strand/Oura/OuraSecrets.xcconfig
 # Personal bundle id prefix (BYO; never committed)
 Config/BundleIdSecrets.xcconfig
 
+# liters linkage, written by Rust/build-ios.sh from the xcframework it just produced. Untracked
+# because it names slice directories under Rust/target/, which is itself untracked — committing it
+# would point every other checkout at an archive that is not there. Config/Liters.xcconfig is the
+# tracked wrapper that optionally includes it.
+Config/LitersLocal.xcconfig
+
 # (#979) The linux-capture workbench moved from `tools/` to `Tools/` when the two case-colliding
 # trees were merged. On a case-SENSITIVE filesystem any capture a contributor already had stays
 # behind at the old path, where that tool's own .gitignore no longer reaches it — and those files

Config/BundleId.xcconfig

@@ -16,3 +16,10 @@ BUNDLE_ID_PREFIX = com.noopapp
 // to stop Xcode from asking you to reselect a team after every `xcodegen generate`.
 DEVELOPMENT_TEAM =
 #include? "BundleIdSecrets.xcconfig"
+
+// The liters (page-replication) linkage seam. Tracked, and inert until Rust/build-ios.sh has been
+// run: it defines LITERS_LIB_DIR / LITERS_HEADER_DIR / LITERS_LDFLAGS as empty and then optionally
+// includes the untracked Config/LitersLocal.xcconfig that build-ios.sh writes. Included from HERE
+// rather than from a target xcconfig because project.yml applies this file project-wide, which is
+// the only level every target (macOS Strand, StrandTests, NOOPiOS) already shares.
+#include "Liters.xcconfig"

Config/Liters.xcconfig

@@ -0,0 +1,37 @@
+// Tracked wrapper for the liters (page-replication) linkage, so a clean checkout that has never run
+// Rust/build-ios.sh still generates and builds. Included from Config/BundleId.xcconfig, which
+// project.yml applies project-wide, so every target inherits these.
+//
+// Liters.xcframework is a BUILD ARTIFACT, not a tracked file: the device slice alone is ~83 MB, and
+// three slices plus a macOS slice is far past what belongs in git. It is produced by
+// `Rust/build-ios.sh`, which ALSO writes the untracked Config/LitersLocal.xcconfig included at the
+// bottom of this file. That is deliberate — the search paths below name specific xcframework slice
+// directories, and having the build script emit them from the layout `xcodebuild -create-xcframework`
+// actually produced is the only way they cannot drift from it.
+//
+// The three variables default to EMPTY here. project.yml appends them unconditionally
+// (LIBRARY_SEARCH_PATHS / SWIFT_INCLUDE_PATHS / OTHER_LDFLAGS), so with no local file the appends
+// expand to nothing: no -l flag, no search path, and a default build links exactly what it links
+// today. Absence of the xcframework is therefore not a build error for anyone who does not want it.
+//
+// LITERS_LDFLAGS is what actually pulls the archive in. It is kept separate from the search path so
+// that "the paths are configured" and "the library is linked" stay two decisions: a build with the
+// paths set but LITERS_LDFLAGS empty compiles the generated bindings' module import and fails at
+// link, which is a clearer error than a missing module.
+LITERS_LIB_DIR =
+LITERS_HEADER_DIR =
+LITERS_LDFLAGS =
+
+// Set by build-ios.sh alongside the paths above. Gates every line of Swift that touches liters
+// (Strand/CloudSync/Generated/, and the round-trip tests), so a checkout without the xcframework
+// compiles none of it rather than failing to resolve `import liters_ffiFFI`:
+//
+//   OTHER_SWIFT_FLAGS = $(inherited) -D LITERS
+//
+// NOT SWIFT_ACTIVE_COMPILATION_CONDITIONS, even though that is the idiomatic setting and what
+// OuraSecrets.xcconfig uses for OURA_CLOUD_IMPORT / CLOUD_SYNC. Those work because OuraConfig.xcconfig
+// is a TARGET-level xcconfig, which outranks the project build settings; this file is included from
+// the PROJECT-level xcconfig, which xcodegen's own `SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG`
+// (written into the project's Debug config, with no $(inherited)) sits above and silently overwrites.
+// Verified with `xcodebuild -showBuildSettings`: the LITERS entry vanishes, DEBUG survives.
+#include? "LitersLocal.xcconfig"

Packages/NoopLocalAccess/Sources/NoopLocalAccessCore/LocalAccessCore.swift

@@ -333,6 +333,11 @@ public final class ReadonlyNoopStore {
                 "hrSample", "rrInterval", "event", "battery", "spo2Sample",
                 "skinTempSample", "respSample", "gravitySample", "ppgHrSample", "stepSample",
                 "sleepStateSample", "ppgWaveformSample", "rawImuSample", "v18AuxSample",
+                // v34: durable `@82` SpO2 percentages. Small (~100k rows/year) but UNBOUNDED — it is the
+                // one table here deliberately exempt from every prune — so it belongs in the readout for
+                // exactly the reason the comment above gives: growth that nothing prunes still has to be
+                // growth somebody can see.
+                "spo2PctSample",
             ]
             var decodedRows = 0
             for table in decodedTables where tableNames.contains(table) {