nvrsion: Add: Adjust Canary Build Auto-Update to run every hour, fix Keychain permission audit by updating files: ControlAuth.swift, GitHubCredentials.swift, HeartbeatReporter.swift, KeychainOwnedAccess.swift, HostIdentityStore.swift, PushRelayClient.swift, refactor Remote Build Icon to use “bell.and.waves.left.and.right.fill” in ios/NucleicRemote/NucleicRemote/Views/BuildBanner.swift, add a Remote Release Channel Check in AppStore.swift, Sync/ConnectionHandler.swift, Sync/SyncHostBridge.swift, Sync/ReleaseChannel.swift, Sync/SyncClient.swift, Sync/WireMessages.swift, tests/SyncHostTests.swift, tests/SyncTestSupport.swift, and align build number hash in ios/NucleicRemote/NucleicRemote.xcodeproj/project.pbxproj, ios/NucleicRemote/NucleicRemote/Info.plist, ios/NucleicRemote/NucleicRemote/Views/BuildBanner.swift.

Nucleic-Promote: 1
Co-authored-by: Nucleic <[email protected]>

NucleicRemote/NucleicRemote/Models/RemoteStore.swift

@@ -293,7 +293,8 @@ final class RemoteStore: ObservableObject {
         let client = SyncClient(
             channel: channel, identity: identity, hostStaticKey: payload.hostStaticKey,
             mode: .pair(secret: payload.pairingSecret), deviceID: deviceID,
-            deviceLabel: UIDevice.current.name, pushToken: PushRegistrar.shared.tokenHex)
+            deviceLabel: UIDevice.current.name, pushToken: PushRegistrar.shared.tokenHex,
+            releaseChannel: BuildInfo.current.channel.releaseChannel)
         self.client = client
         consume(client, pairingPayload: payload)
     }
@@ -312,7 +313,8 @@ final class RemoteStore: ObservableObject {
         let client = SyncClient(
             channel: channel, identity: identity, hostStaticKey: host.hostStaticKey,
             mode: .reconnect, deviceID: host.deviceID, deviceLabel: UIDevice.current.name,
-            pushToken: PushRegistrar.shared.tokenHex)
+            pushToken: PushRegistrar.shared.tokenHex,
+            releaseChannel: BuildInfo.current.channel.releaseChannel)
         self.client = client
         consume(client, pairingPayload: nil)
     }
@@ -781,6 +783,15 @@ final class RemoteStore: ObservableObject {
             openDiff = diff
             diffLoading = false
         case .wireError(let error):
+            // A channel mismatch means the host and this remote were built from incompatible
+            // release channels. Surface it as a persistent failure with a clear message rather
+            // than a transient bubble; the follow-on `.closed` still schedules a backoff retry,
+            // so the connection recovers on its own once either side is updated to a matching
+            // channel.
+            if error.code == .channelMismatch {
+                connectivity = .failed(error.message)
+                break
+            }
             // Not fatal — surface as a transient bubble (the Mac's last-error overlay).
             // Losing an approval race isn't an error worth interrupting for; the card
             // collapses on the matching `approvalResolved`.