User outcome

ScriptWidget now uses Apple Private Cloud Compute as its default AI backend on eligible iOS/macOS 27 devices. Users no longer need to supply an API key for the default path; existing OpenAI-compatible profiles remain available as a fallback.

Implementation

• Add an Apple PCC provider backed by PrivateCloudComputeLanguageModel
• Add PCC entitlement to the iOS and macOS main apps only
• Check OS support, Apple model availability, network/service errors, and daily quota
• Migrate existing installs once by adding/selecting the Apple profile while preserving existing providers
• Default fresh installs to the zero-configuration Apple profile
• Cap PCC agent repair loops at 3 requests to protect daily quota
• Update iOS/macOS provider settings, onboarding copy, tests, and documentation

Security and compatibility

• PCC requires no user credential and persists no Apple session data
• API keys for optional OpenAI-compatible profiles remain Keychain-backed
• Widget/share extensions do not receive the PCC entitlement and do not call AI services
• Legacy profiles decode as OpenAI-compatible
• Builds made with older compilers fail closed with a clear unavailable error

Verification

• Real signed PCC call on macOS 27: passed in 2.204s with non-empty content and token usage
• Refreshed provisioning profile contains com.apple.developer.private-cloud-compute = 1
• macOS runtime suite: 148 tests, 5 expected live/iCloud skips, 0 failures
• AI test group: 7 tests, 3 expected external-key/live skips, 0 failures
• Xcode 27 iOS Simulator full app/widget/share build: passed
• ./Scripts/release-readiness.sh: passed
• plutil -lint on both entitlements and both Xcode projects: passed

Physical-device PCC execution was not run; the live PCC request was executed in the signed macOS 27 app test host.