Connected services

Connects via WHOOP OAuth with read-only scopes (recovery, sleep, cycles, workouts, profile, body measurement). Tokens are encrypted server-side and never reach the browser. Recovery and strain inform meal timing and workout fueling suggestions; syncing runs via webhooks plus a 6-hour reconciliation job, and disconnecting deletes stored tokens and stops all sync.

What it never does: convert "calories burned" into permission to eat more (wearable calorie estimates aren't precise enough), silently change your targets, or claim a meal will "fix" your recovery.

The preferred morning-weight path. Connects via Withings OAuth (user.info + user.metrics) and writes timestamped scale readings into weigh_ins with source=scale. A notify webhook fires when you step on the scale; a 6-hour reconcile catches anything the webhook missed. Tokens are encrypted server-side and never reach the browser.

WHOOP also imports a body-measurement snapshot, but WHOOP is not a scale — it only stores the last-known profile weight, with no timestamp or history. If both are connected, the scale wins: WHOOP will not fill a day the scale already recorded, and it never overwrites a weigh-in you typed yourself.

Imports recipes by URL from a curated source allowlist using their published structured data. Every import stores attribution and the original link, gets checked against protein and time rules, and waits for your approval as a candidate. Quantities and temperatures are never invented.

Walmart, Instacart, Kroger/Giant Eagle and Amazon Fresh adapters export your consolidated list as text or CSV with per-item store links and a rough price estimate. Direct cart placement waits on retailer API access — the adapters are ready for it.

The Log screen searches USDA FoodData Central by name or camera barcode (UPC/EAN). Packaged hits verify the GTIN so the wrong product is never logged; if USDA has no match, Open Food Facts is tried next. Recipe nutrition remains curated per-recipe (ingredient-level USDA recalc is still planned).

On an in-progress Train session, a MusicKit dock lets you connect an Apple Music subscription, queue a workout playlist, and play / pause / skip without leaving the live HUD. Developer tokens are minted server-side (GET /api/music/developer-token); the private key never reaches the browser. Requires a MusicKit Media ID + key from Apple Developer andNEXT_PUBLIC_APP_URL matching the origin you open the app on.

Without the flag and keys, the dock stays hidden — there is no fake playback.