docs: README + device testing checklist (Phase 9)

README.md

@@ -0,0 +1,79 @@
+# Voice — iOS client for Hope Voice
+
+Native SwiftUI iOS app (iOS 17+) that talks to the [Hope Voice](https://github.com/) agent:
+full-parity voice/text conversation, transcript history, voice & model pickers, media player,
+and a background-tasks panel. Mirrors the web UI of `hope-voice-api`; no server-side changes.
+
+## Prerequisites
+
+- Xcode 16+ (Swift 6), iOS 17 simulator or a real iPhone on the LAN.
+- [xcodegen](https://github.com/yonaskolb/XcodeGen) (`brew install xcodegen`).
+- The `voice` container running on Unraid (LiveKit + token server + media API).
+- Mic: the simulator mic is unreliable in this environment (CoreAudio `-4010`, 0 input
+  channels) — voice mode needs a real device. If the simulator was wiped, grant permission
+  first: `xcrun simctl privacy booted grant microphone dev.shane.voice`.
+
+## Build & run
+
+```sh
+xcodegen generate   # regenerate Voice.xcodeproj after file changes
+xcodebuild -project Voice.xcodeproj -scheme Voice_iOS \
+  -destination 'generic/platform=iOS Simulator' build
+```
+
+The scheme is **`Voice_iOS`** (not `Voice`). Bundle id: `dev.shane.voice`.
+To run in the simulator, use Xcode or `xcrun simctl` with the built app.
+
+## Server configuration
+
+Default base URL is `https://192.168.86.2:9178` (see `Sources/App/SettingsStore.swift`).
+Change it at runtime in **Settings → Server URL** (the app disconnects and recreates the
+session when idle). The app derives LiveKit signaling and media endpoints from this base URL.
+
+### TLS cert pinning
+
+The deployment uses a self-signed cert that is **regenerated at container start**, so the
+pinned SHA-256 in `Sources/Networking/TLSPinning.swift` breaks on every cert rotation.
+Re-export after a server restart:
+
+```sh
+openssl s_client -connect 192.168.86.2:9178 </dev/null 2>/dev/null \
+  | openssl x509 -outform der | openssl dgst -sha256
+```
+
+Paste the new hash into `TLSPinning.pinnedCertSHA256Hex`. Until you do, token/media calls
+fail with a pin mismatch (not a network error).
+
+## Features
+
+- **Conversation** — LiveKit room with the Hope agent; voice mode (mic + TTS) and text mode
+  (composer), toggleable and persisted. State machine (idle/connecting/listening/thinking/
+  speaking) driven by audio levels, orb animation, mic meter, barge-in hint.
+- **Transcripts** — partials updated in place, finals with timestamps, delivery-marker
+  stripping, last-50 history persisted to UserDefaults, clear button.
+- **Voice & model pickers** — 13 Azure TTS voices; LLM models from the agent's `models`
+  message. Both persist and sync on join (`set_voice`/`set_model`).
+- **Media player** — now-playing card (art/title/channel/status), transport (play/pause,
+  ±10 s, stop), seek + volume sliders, search with "in library" tags, agent-offered choices,
+  library list (play/remove), add-stream form. AVPlayer-backed with a pinned-TLS Range proxy;
+  1.5 s `/state` polling and full web-parity reconciliation/reporting.
+- **Background tasks panel** — live `task_event` cards (steps, result, error) with an active
+  count badge in the toolbar.
+
+## Known limitations
+
+- **Simulator mic**: CoreAudio returns `-4010` (no usable input source) in this environment;
+  voice capture must be verified on a real device. Text mode works in the simulator.
+- **webm media**: iOS AVPlayer cannot decode webm/opus (`-11828`). Library tracks from yt-dlp
+  are webm, so audible playback requires the server to serve m4a/aac/mp3. Everything up to
+  decode (pinning, Range proxy, reconciliation, UI) is verified; no client change needed once
+  a supported format exists.
+- **Cert pin rotation**: see above — re-export the pin after each server cert regeneration.
+- **LiveKit signaling** uses plain `ws://192.168.86.2:7880` (not wss) because the Swift SDK
+  cannot trust the self-signed cert on its WebSocket; token + media still go over pinned TLS.
+
+## Docs
+
+- [PLAN.md](PLAN.md) — phase-by-phase progress, verified facts, open items.
+- [docs/DEVICE_TESTING.md](docs/DEVICE_TESTING.md) — real-device qualification checklist.
+- [UPDATE_PATH.md](UPDATE_PATH.md) — original plan & protocol reference (read-only).