otpGarmin/docs, branch v1.0.0

chore(release): 1.0.0, with the Connect IQ Store listing

2026-10-27T23:03:01+00:00

The second real-watch round on the Forerunner 70 passed: codes from otpauth:// links, the 4-digit PIN, touch scrolling and Aegis JSON import. Version 1.0.0 ships the fixes of the 0.9.0 review. - docs/STORE_LISTING.md: title, description and What's New for the Garmin developer page, with measured character counts. - docs/store/: hero (1440x720), cover (500x500) and seven round screen images, built by tools/store_assets.py from the fr70 goldens. - CHANGELOG 1.0.0, README status, TESTING round 2 results, YOUR_STEPS marked done, fr70 about.png golden at 1.0.0. make ci green on fr70. Co-Authored-By: Claude Opus 5.5

docs(spike): test C split, only the backslash is refused

2026-10-27T23:03:01+00:00

Settings spike test C, split (round 2, 2026-10-27, Android): Garmin Connect refuses to save only C3, the backslash. Every other character group and an Aegis export without backslashes save, and a real Aegis export imported on the Forerunner 70, so the import design stays. Android Aegis writes / as \/ (icons, names with a slash): the user guide explains replacing \/ with / or removing icons. C3 is a known limitation. The spike manifest gets a new application id: the old one could not be uploaded to the Garmin developer page. Co-Authored-By: Claude Opus 5.5

fix(import): splitting pasted otpauth:// links runs no character loop

2026-10-27T00:08:30+00:00

OtpAuth.splitUris/firstWord looped over every character in one event, so pasting about 100 links tripped the watchdog (the UI fixture imports Aegis JSON, so it never ran this path). They now use native searches only. New make watchdog case uris_100 (13,576 characters, twice per event) trips on the old code and passes now. fr70: make lint, make test, make watchdog pass. Co-Authored-By: Claude Opus 5.5

fix(pin): the work after a PIN and the change queue run in steps

2026-10-27T00:01:18+00:00

After a correct or new PIN, promoting pending entries and applying waiting "Require PIN" changes ran in the event of the last PBKDF2 step; 16 waiting changes tripped the watchdog on the Forerunner 70. ChangeQueue.LockJob now does it in steps while the PIN screen shows "Checking...", saves what it did to the results and refreshes the glance after Set PIN too. The list title decrypted every waiting change at each start. Queue items are now [action, box] (aad OTPW-Q-2 + action code), so they are counted without decrypting; 0.9.0 items are still read. A replacement is checked when it arrives and its material is sealed apart (qm.). Large buffers are wiped and UTF-8-checked in pieces (Jobs.Wiper, Bytes.utf8Prefix, SealedBox.openKeep/sealKeep). "Phone changes" reads behind "Reading...", and Confirm all / Reject all act only on the changes shown. Storage full no longer stops the app at the PIN. Found by the review of b8addc8/096b5a4 and a new make watchdog test; the diff was reviewed again and its findings fixed. fr70: make lint, make test (176), make watchdog (19 cases at two steps per event), make screenshots pass; list_locked and list_reset goldens show "Results ready (menu)". Co-Authored-By: Claude Opus 5.5

build: test on the Forerunner 70 only by default; ALL=1 for every device

2026-10-26T13:52:06+00:00

Unit tests, perf, memory, lint builds, screenshots and the watchdog test run on the owner's Forerunner 70 alone unless ALL=1 is given, which keeps runs and screenshot reviews short (8 instead of 65 minutes for the screenshots). make build defaults to the Forerunner 70 too. Co-Authored-By: Claude Opus 5.5

chore(release): 0.9.0, the fixes from the first real-watch round

2026-10-25T22:51:52+00:00

Co-Authored-By: Claude Opus 5.5

docs: 4-digit PIN, the offline-guessing limit, Manage needs Apply

2026-10-25T12:13:39+00:00

Co-Authored-By: Claude Opus 5.5

docs: record the settings spike and the Forerunner 70 benchmark

2026-10-25T11:46:42+00:00

Spike (2026-10-21, Android): 8000 characters per field and 64,000 in total arrive; URIs with & save; the mixed special-character string is refused, so the test strings now split it into one group each plus a fake Aegis export. Benchmark: SHA-1 TOTP 18 ms, SHA-512 732 ms, PBKDF2 2,000 iterations per second. Co-Authored-By: Claude Opus 5.5

docs: the Forerunner 70 is AMOLED; barcodes go to full brightness

2026-10-25T10:56:23+00:00

Co-Authored-By: Claude Opus 5.5

docs: how a sideloaded build is removed from the watch

2026-10-25T10:56:02+00:00

The watch removes the .prg after installing it; the app is removed from the watch's own menu and its fr70.* storage files deleted by hand. Co-Authored-By: Claude Opus 5.5