[frahlg]

Step C6 of ADR 0008, the app's part. While the box cannot answer, a node's history comes from FTW Cloud's copy of the box's signed 5-minute tiles. It is dated, never shown as live.

Paired with srcfl/ftw#1817 (wire format and box) and srcfl/ftw-cloud#48 (the service). The vectors in Resources/cloud-tile-vectors.json come from srcfl/ftw 7dedcbf4.

What changes

• Carrier/CloudTiles.swift: CloudWire.Tiles (decode, check()), tilesGet(have:), tiles.end, and lay(_:), a port of Go's cloudwire.Lay. It also adds CloudTileStore, which keeps the checked tiles for 48 hours in the order the box sent them.
• CloudCarrier.tilesGet(have:) sends tiles.get.
• SiteModel: tiles and tiles.end skip CloudView.accept's seq rule, since tiles are history, not the newest of a class.
  • Each tile must verify with the box key the phone got from the box over Noise, never a key from the service.
  • It must pass check() before it is kept.
  • The store empties when the copy goes off or the box key changes.
• HistoryModel: when the box session does not stream and the cloud session with the copy is open, it asks FTW Cloud once per cloud session. It sends tiles.get with the closed tiles it holds as have.
  • Appends that come every five minutes are laid on at once.
  • Closed cloud tiles are the box's own bytes, so they share the tiles-<site> file. Cache first still draws frame one.
  • When the box answers again, its tiles replace the cloud's, and the label goes.
• The label: under the chart, "From FTW Cloud · up to 16:10" ("Från FTW Cloud · fram till 16:10"). On another day it names the day too.
  • The label comes first, so a long sum is what wraps, never the date.
  • The header still says "AS OF" and never live.
• Demo seam, Debug only: -FTWDemo YES -FTWDemoBoxAway YES runs a demo box that streams for 3 s and then goes away. Its history then comes through a simulated FTW Cloud, over the real Noise, signature, check and lay path. I used it for the screenshots.

Widgets: the grid widget does not use cloud tiles. It shows the box's own daily totals and cost from /api/savings/daily, which nothing can provide while the box is away. Mixing a cloud chart with no totals would break the widget's rule that every number is the box's.

NodeView.swift, which draft #93 also touches, gets three added lines in PeriodWords.summary and no other change.

Merge order with #99: #99 moves CloudWire.swift into a new FTWWire module. Carrier/CloudTiles.swift here extends CloudWire and uses its internal Fields and texts. Whichever merges second moves CloudTiles.swift's wire part (Tiles, check, lay, tilesGet) into FTWWire beside CloudWire.swift, or makes those two members public.

Tests

• swift test in appleApp/FTWKit: 578 tests in 86 suites pass.
• CloudTilesTests:
  • every vector verifies and passes check;
  • the forged vector fails, and so does an unsigned copy;
  • lay gives Go's exact tile id, etag and data in all five cases;
  • the tiles.get and tiles.end bytes match Go's;
  • check refuses 11 wrong shapes.
• CloudHistoryTests:
  • with the box away, cloud tiles draw, dated and never "live";
  • an append moves the end;
  • when the box comes back, its own answer replaces them and the label goes;
  • forged, unsigned or wrong-etag tiles are never laid;
  • with the copy off, nothing is asked;
  • an older copy names its day;
  • after a relaunch with the box still away, the history stays dated as the copy;
  • a later closed tile replaces the first, in lay and in the store.

Screenshots, box away

Taken in a simulator (iPhone 17 Pro, iOS 26.5, Debug) with -FTWDemo YES -FTWDemoBoxAway YES. They are not attached here; they are in the FTW-stack shared notes folder, cloud-c6-shots/:

• solar-48h-light.png: "From FTW Cloud · up to 16:25" above "48 h: made 20 kWh". The header says "AS OF 16:27" and the footer "NOT CONNECTED".
• grid-today-dark.png: dark mode, the Today view.
• battery-48h-sv-default.png: Swedish at the default text size. Both lines fit.
• battery-48h-sv-xxxl.png: Swedish at the largest text size. The date line comes first and stays whole.

The sum leaves out the time after the copy ends (42488d9). It used to count those minutes as "not recorded", although the copy says nothing about them.

After review

• check takes the four series and no other. A test ties HistoryModel.series to CloudWire.tileSeries.
• The tile store keeps a closed tile the box sent later over one it sent before, whatever order they come in.
• A closed tile from FTW Cloud never replaces one the box sent itself, only an earlier one from the copy.
• After a relaunch, what is shown is dated as the copy only when the copy reaches as far. The box's own cached history is not labelled as the copy.

🤖 Generated with Claude Code

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-23T14:31:08.847182Z	42488d9	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 42488d9c94

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".