@ateam-ai-mobile/plugin-runtime 0.1.0 → 0.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ateam-ai-mobile/plugin-runtime",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "ADAS plugin runtime for React Native hosts \u2014 plugin SDK, bundle pipeline with integrity verification, host bridge, surfaces. No Expo dependencies.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -9,7 +9,7 @@
     "build": "tsup"
   },
   "dependencies": {
-    "@ateam-ai-mobile/core": "0.1.0",
+    "@ateam-ai-mobile/core": "0.1.1",
     "zustand": "^5.0.0"
   },
   "peerDependencies": {

package/src/bridge/native.ts

@@ -27,7 +27,7 @@ function buildContext(pluginId: string, connectorId?: string): PluginContext {
     tenant: getTenant(),
     pluginId,
     connectorId,
-    user: user ? { id: user.actorId || '', name: user.name || '', roles: [] } : undefined,
+    user: user ? { id: user.actorId || '', name: user.name || '', roles: user.roles || [] } : undefined,
   };
 }
 

package/src/bundles/bundleManager.ts

@@ -17,6 +17,11 @@ import {
 import * as ReactNative from 'react-native';
 import { apiFetchRaw } from '@ateam-ai-mobile/core';
 import * as PluginSDKModule from '../sdk';
+import SurfaceDrawer from '../surfaces/SurfaceDrawer';
+import SurfaceCard from '../surfaces/SurfaceCard';
+import SurfaceFullscreen from '../surfaces/SurfaceFullscreen';
+import { useSurfaceStore } from '../registry/store';
+import SurfaceDispatcher from '../registry/SurfaceDispatcher';
 import { resolveBundleModule } from '../host';
 import { sha256Hex } from '../utils/sha256';
 import { getBundleStorage, type BundleCacheEntry } from './storage';
@@ -51,9 +56,17 @@ const ReactShim: any = {
   Suspense: React.Suspense,
 };
 
-// Freeze PluginSDK shim to prevent bundle monkey-patching of register()
+// Freeze PluginSDK shim to prevent bundle monkey-patching of register().
+// Surface containers + registry ride along — the reference app's original
+// shim exposed the FULL plugin-sdk index, and bundles built against it may
+// import SurfaceDrawer/useSurfaceStore/etc. from '@adas/plugin-sdk'.
 const PluginSDKShim = Object.freeze({
   ...PluginSDKModule,
+  SurfaceDrawer,
+  SurfaceCard,
+  SurfaceFullscreen,
+  useSurfaceStore,
+  SurfaceDispatcher,
   PluginSDK: Object.freeze({
     ...PluginSDKModule.PluginSDK,
     register: PluginSDKModule.PluginSDK.register,

package/src/host.ts

@@ -5,7 +5,7 @@
  * a bare host works with zero configuration.
  */
 
-import type { HapticsAPI, PluginNative } from './sdk/types';
+import type { HapticsAPI, NativeCapabilities, PluginNative } from './sdk/types';
 import type { RegisteredPlugin } from './sdk/types';
 
 // ── Haptics ────────────────────────────────────────────────────────────────
@@ -62,6 +62,50 @@ export function getPluginNative(): PluginNative {
   return _pluginNative;
 }
 
+/** Blocked-capability proxy: any call warns and is ignored (no throw) —
+ *  matches the reference app's behaviour for undeclared capabilities. */
+function blocked(api: string): any {
+  return new Proxy({}, {
+    get: (_t, method) => {
+      if (typeof method !== 'string') return undefined;
+      return () => {
+        console.warn(`[adas] native.${api}.${method} blocked — capability '${api}' not declared in the plugin manifest`);
+      };
+    },
+  });
+}
+
+/**
+ * Gate a PluginNative by the capabilities a plugin's manifest declares.
+ * Undeclared capabilities become warn-and-ignore proxies, so a plugin can
+ * only touch device APIs it asked for (per-plugin security model, preserved
+ * from the reference app). Connectivity is always allowed.
+ *
+ * Flag mapping mirrors the manifest contract: `storage` is gated by
+ * `offline` (offline data ⇒ local storage).
+ */
+export function gatePluginNative(
+  native: PluginNative,
+  declared?: NativeCapabilities,
+): PluginNative {
+  const caps = declared || {};
+  return {
+    camera: caps.camera ? native.camera : blocked('camera'),
+    location: caps.location ? native.location : blocked('location'),
+    storage: caps.offline ? native.storage : blocked('storage'),
+    biometrics: caps.biometrics ? native.biometrics : blocked('biometrics'),
+    biometricsV2: caps.biometricsV2 ? native.biometricsV2 : blocked('biometricsV2'),
+    notifications: caps.notifications ? native.notifications : blocked('notifications'),
+    haptics: caps.haptics ? native.haptics : blocked('haptics'),
+    connectivity: native.connectivity,
+    fileSystem: caps.fileSystem ? native.fileSystem : blocked('fileSystem'),
+    cookies: caps.cookies ? native.cookies : blocked('cookies'),
+    sharing: caps.sharing ? native.sharing : blocked('sharing'),
+    scanner: caps.scanner ? native.scanner : blocked('scanner'),
+    nfc: caps.nfc ? native.nfc : blocked('nfc'),
+  };
+}
+
 // ── Native (host-bundled) plugin registry ─────────────────────────────────
 // Plugins compiled into the host binary (dev plugins, first-party panels).
 // usePlugin checks this registry before hitting the remote bundle pipeline.

package/src/index.ts

@@ -22,6 +22,7 @@ export {
   getHaptics,
   setPluginNativeProvider,
   getPluginNative,
+  gatePluginNative,
   registerNativePlugin,
   unregisterNativePlugin,
   nativePluginRegistry,

package/src/sdk/usePluginTheme.ts

@@ -7,6 +7,7 @@
  * once at startup to override.
  */
 import { useMemo, useSyncExternalStore } from 'react';
+import { useColorScheme } from 'react-native';
 import { ada, spacing, fontSize, borderRadius } from '@ateam-ai-mobile/core';
 import type { ThemeTokens } from './types';
 
@@ -37,7 +38,9 @@ const adaColors: ThemeColors = {
 };
 
 let _colors: ThemeColors = adaColors;
-let _isDark = false;
+// null = host hasn't pinned it → track the device color scheme live
+// (parity with the reference app, whose isDark followed useColorScheme()).
+let _isDark: boolean | null = null;
 const _subscribers = new Set<() => void>();
 
 /** Override the plugin theme (host brand). Call once at startup — mounted
@@ -55,7 +58,9 @@ function subscribe(fn: () => void): () => void {
 
 export function usePluginTheme(): ThemeTokens {
   const colors = useSyncExternalStore(subscribe, () => _colors);
-  const isDark = useSyncExternalStore(subscribe, () => _isDark);
+  const hostIsDark = useSyncExternalStore(subscribe, () => _isDark);
+  const scheme = useColorScheme();
+  const isDark = hostIsDark ?? scheme === 'dark';
 
   // Memoize so plugins don't re-render on every host render.
   return useMemo(() => ({