@ateam-ai-mobile/plugin-runtime 0.1.21 → 0.1.23

package/dist/index.mjs

@@ -5,6 +5,7 @@ import {
   AdaOrb,
   Animated,
   Badge,
+  CONSENT_TAKEN_BACK,
   CameraPreview,
   Card,
   EmptyState,
@@ -65,6 +66,8 @@ import {
   mayPicturesLeavePhone,
   nativePluginRegistry,
   neverObserved,
+  notifyPicturesToAiConsentChanged,
+  onPicturesToAiConsentChange,
   pluginBundleUrl,
   register,
   registerBundleModules,
@@ -97,7 +100,7 @@ import {
   useNativeBridge,
   usePluginTheme,
   useSurfaceStore
-} from "./chunk-32IN24XO.mjs";
+} from "./chunk-DD3KH7OI.mjs";
 
 // src/tools/platformTools.ts
 var PLATFORM_PLUGIN_ID = "platform:device-tools";
@@ -140,10 +143,10 @@ var REAL_DEPS = {
   // `./loader` reaches react-native via the bundle manager; import it only when
   // an effect actually fires (real app), never at module load (tests).
   resetLoader: () => {
-    void import("./loader-UH3GARV5.mjs").then((m) => m.resetDeviceToolLoader());
+    void import("./loader-QTQNSXGS.mjs").then((m) => m.resetDeviceToolLoader());
   },
   load: () => {
-    void import("./loader-UH3GARV5.mjs").then((m) => {
+    void import("./loader-QTQNSXGS.mjs").then((m) => {
       m.resetDeviceToolLoader();
       return m.ensureDeviceToolsLoaded({ force: true });
     });
@@ -404,6 +407,7 @@ export {
   AdaOrb,
   Animated,
   Badge,
+  CONSENT_TAKEN_BACK,
   CameraPreview,
   Card,
   EmptyState,
@@ -468,6 +472,8 @@ export {
   mayPicturesLeavePhone,
   nativePluginRegistry,
   neverObserved,
+  notifyPicturesToAiConsentChanged,
+  onPicturesToAiConsentChange,
   pluginBundleUrl,
   register,
   registerBundleModules,

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/tools/platformTools.ts","../src/tools/sessionSync.ts","../src/tools/serverCalls.ts","../src/hooks/usePlugin.ts","../src/hooks/usePluginRuntimeProps.ts","../src/hooks/useRemotePlugins.ts"],"sourcesContent":["/**\n * Platform device tools.\n *\n * These are not a solution's plugin tools — they ship with the SDK and every\n * host has them, which is what makes a device tool testable without deploying\n * anything to a tenant. Their names and contracts are declared once on the\n * server (connectors/platform/device-tools-mcp.json); this is the device half.\n *\n * Registered at import, so a client answers them even before any plugin bundle\n * has loaded — that is the point: proving the device path works should not\n * depend on the thing being proved.\n */\nimport { registerDeviceTools } from './registry';\n\nconst PLATFORM_PLUGIN_ID = 'platform:device-tools';\n\nexport function registerPlatformDeviceTools(): void {\n  registerDeviceTools(PLATFORM_PLUGIN_ID, [\n    {\n      name: 'device.echo',\n      description: \"Echo a string back from the user's own device.\",\n      input_schema: {\n        type: 'object',\n        properties: { text: { type: 'string' } },\n        required: ['text'],\n      },\n      run: (args: any) => ({\n        ok: true,\n        echoed: (args && args.text) || '',\n        // The proof: a server-side implementation could not say this truthfully.\n        ran_on: 'device',\n      }),\n    },\n    {\n      name: 'device.ping',\n      description: 'Check that the device is reachable.',\n      input_schema: { type: 'object', properties: {} },\n      run: () => ({ ok: true, ran_on: 'device', at: new Date().toISOString() }),\n    },\n  ]);\n}\n","/**\n * Ambient device-tool registration, driven by the auth session (R14).\n *\n * The LOCAL reasoning path must be live BEFORE voice opens — otherwise the only\n * proof of a loadable external skill is a voice-triggered one. So the host wires\n * this to its EXISTING auth-session subscription (no new transport, no plugin\n * special-case): a tenant becoming authenticated loads that tenant's external\n * device-tool bundles (and re-ensures the static platform tools); a tenant\n * SWITCH is a change of tenant while still authenticated, so it clears the old\n * tenant's tools and reloads; sign-out resets the loader latch (the registry\n * itself is cleared by the host's logout teardown, which already calls\n * clearDeviceTools()).\n *\n * The decision is a PURE function so the lifecycle is testable without a network\n * or a device; the effects are injected (same DI shape as the host's logout\n * teardown) so a test drives them with fakes.\n */\nimport { registerPlatformDeviceTools } from './platformTools';\nimport { clearDeviceTools } from './registry';\n// NOTE: `./loader` pulls in the bundle manager (react-native, core), so it is\n// imported LAZILY inside the real effects below — keeping this module itself\n// node-testable (a test injects fake effects and never touches that graph).\n\nexport interface SessionSnapshot {\n  authenticated: boolean;\n  /** The tenant the session is scoped to (derive it; never a stored copy). */\n  tenant: string | null;\n}\n\nexport type DeviceToolsAction = 'load' | 'reset' | 'none';\n\n/**\n * PURE: what should the device-tool registry do for this session transition?\n * - a new authenticated tenant (initial sign-in OR a switch) → 'load'\n * - the same authenticated tenant again (e.g. a silent token refresh) → 'none'\n * - leaving authenticated (sign-out) → 'reset'\n */\nexport function deviceToolsActionForSession(\n  next: SessionSnapshot,\n  prevTenant: string | null,\n): { action: DeviceToolsAction; tenant: string | null } {\n  const tenant = next.authenticated ? (next.tenant ?? null) : null;\n  if (tenant && tenant !== prevTenant) return { action: 'load', tenant };\n  if (!tenant && prevTenant) return { action: 'reset', tenant: null };\n  return { action: 'none', tenant: prevTenant };\n}\n\n/** The effects a session transition drives — injected so a test can fake them. */\nexport interface DeviceToolsSessionDeps {\n  /** Drop the previous tenant's device tools (a switch does not run logout teardown). */\n  clear: () => void;\n  /** Ensure the static, host-owned platform device tools are present. */\n  registerPlatform: () => void;\n  /** Forget the \"already loaded\" latch so a later (non-forced) load runs — sign-out. */\n  resetLoader: () => void;\n  /** Fire-and-forget reload of the current tenant's external device-tool bundles. */\n  load: () => void;\n}\n\nconst REAL_DEPS: DeviceToolsSessionDeps = {\n  clear: clearDeviceTools,\n  registerPlatform: registerPlatformDeviceTools,\n  // `./loader` reaches react-native via the bundle manager; import it only when\n  // an effect actually fires (real app), never at module load (tests).\n  resetLoader: () => {\n    void import('./loader').then((m) => m.resetDeviceToolLoader());\n  },\n  load: () => {\n    void import('./loader').then((m) => {\n      m.resetDeviceToolLoader();\n      return m.ensureDeviceToolsLoaded({ force: true });\n    });\n  },\n};\n\nlet prevTenant: string | null = null;\n\n/**\n * Apply a session transition to the device-tool registry. Call from the host's\n * existing auth-session subscription with a derived snapshot. Idempotent per\n * tenant: repeated snapshots for the same authenticated tenant do nothing, so a\n * silent token refresh does not churn the registry. Returns the action taken.\n */\nexport function syncDeviceToolsForSession(\n  next: SessionSnapshot,\n  deps: DeviceToolsSessionDeps = REAL_DEPS,\n): DeviceToolsAction {\n  const { action, tenant } = deviceToolsActionForSession(next, prevTenant);\n  prevTenant = tenant;\n  if (action === 'load') {\n    // A new authenticated tenant: drop the prior tenant's tools, re-seat the\n    // static platform tools, then reload this tenant's external bundles (forced).\n    deps.clear();\n    deps.registerPlatform();\n    deps.load();\n  } else if (action === 'reset') {\n    // Sign-out: the host's logout teardown clears the registry; we only forget\n    // the loader latch so a later sign-in reloads.\n    deps.resetLoader();\n  }\n  return action;\n}\n\n/** Test seam: forget the last-seen tenant so a test starts from signed-out. */\nexport function __resetSessionSyncForTest(): void {\n  prevTenant = null;\n}\n","/**\n * Device tools called BY THE SERVER.\n *\n * Two callers reach the same registered function on this phone:\n *\n *  - the voice loop, which already runs here (no server hop at all), and\n *  - the server reasoning loop, which cannot execute a device tool itself and\n *    sends it down the client's stream instead.\n *\n * This is the second one. It rides the transport the `ui.*` plugin commands\n * already use — a command arrives on the job/actor stream, we run it, and post\n * the outcome back keyed by `correlationId`. Nothing new was invented; the\n * payload just carries a tool call instead of a UI command.\n *\n * The host wires this once at startup:\n *\n *   pluginCommandEmitter.on('plugin-command', handleServerDeviceToolCall);\n */\nimport { callDeviceTool } from './registry';\nimport { ensureDeviceToolsLoaded } from './loader';\n\ntype PostResult = (correlationId: string, result: any, error?: string) => Promise<void>;\n\nlet postResult: PostResult | null = null;\n\n/**\n * Host DI: how to answer the server. `@ateam-ai-mobile/core` supplies\n * postCommandResult; kept injectable so this package stays free of the REST\n * client and so tests can observe the answer.\n */\nexport function setDeviceToolResultPoster(fn: PostResult): void {\n  postResult = fn;\n}\n\n/** Is this stream command a device tool call? */\nexport function isDeviceToolCommand(cmd: any): boolean {\n  return !!cmd && cmd.kind === 'device_tool' && typeof cmd.tool === 'string' && !!cmd.correlationId;\n}\n\n/**\n * Run a server-dispatched device tool and answer.\n *\n * Never throws — the server is blocked on the correlationId, so the one thing\n * we must not do is stay silent. Every path posts something back.\n */\nexport async function handleServerDeviceToolCall(cmd: any): Promise<void> {\n  if (!isDeviceToolCommand(cmd)) return;\n\n  const { tool, args, correlationId } = cmd;\n\n  if (!postResult) {\n    console.warn('[deviceTools] server called a tool but no result poster is installed');\n    return;\n  }\n\n  try {\n    // The server may reach us before anything opened a voice call, so the\n    // plugins may not be loaded yet. Cheap and idempotent once warm.\n    await ensureDeviceToolsLoaded();\n\n    const outcome = await callDeviceTool(tool, args || {});\n    console.log(`[deviceTools] server-called ${tool} → ${outcome.ok ? 'ok' : outcome.reason}`);\n\n    await postResult(\n      correlationId,\n      outcome.ok ? { ok: true, ...unwrap(outcome.result) } : undefined,\n      outcome.ok ? undefined : outcome.error,\n    );\n  } catch (err: any) {\n    await postResult(correlationId, undefined, err?.message || String(err)).catch(() => {});\n  }\n}\n\n/** Keep an object result flat for the reasoning loop; wrap anything else. */\nfunction unwrap(result: any): Record<string, any> {\n  if (result && typeof result === 'object' && !Array.isArray(result)) return result;\n  return { result };\n}\n","/**\n * usePlugin — single hook for loading any plugin.\n *\n * Simple async load → done pattern over the global BundleManager singleton\n * (deduplication + caching) and the host's native plugin registry.\n *\n * Usage:\n *   const { plugin, loading, error } = usePlugin(pluginId, manifest);\n *   if (loading) return <Spinner />;\n *   if (error) return <Error message={error} />;\n *   return <plugin.Component bridge={bridge} device={device} theme={theme} context={context} />;\n */\nimport { useState, useEffect } from 'react';\nimport { bundleManager } from '../bundles/bundleManager';\nimport { nativePluginRegistry } from '../host';\nimport { resolvePluginGrants } from '../pluginRuntime';\nimport type { NativeCapabilities, RegisteredUIPlugin } from '../sdk/types';\nimport type { DeviceBridgeDomain } from '../sdk/device-state';\nimport { pluginBundleUrl } from '../bundles/bundleUrl';\n\ninterface PluginManifestLike {\n  version?: string;\n  name?: string;\n  render?: any;\n  _connectorId?: string;\n  capabilities?: Record<string, unknown>;\n  native?: NativeCapabilities;\n  stateDomains?: DeviceBridgeDomain[];\n}\n\ninterface UsePluginResult {\n  plugin: RegisteredUIPlugin | null;\n  loading: boolean;\n  error: string | null;\n  bundleMissing: boolean;\n}\n\n/**\n * Compute the bundle URL.\n *\n * **Policy:** bundle URLs are ALWAYS derived from the pluginId via the\n * canonical platform route /api/ui-plugins/{pluginId}/bundle.js.\n * Connector-supplied bundleUrl fields are IGNORED — the Builder strips them\n * at introspection time, but we treat any survivors as bugs and ignore them\n * here too (defense in depth vs \"hand-coded URL with bad encoding causes\n * silent iframe fallback\" bugs).\n */\ntype BundleUrlSource = 'derived-default' | 'ignored-explicit' | 'none';\nfunction extractBundleUrl(pluginId: string, manifest: PluginManifestLike): { url: string | null; source: BundleUrlSource; ignored?: string } {\n  const render = manifest.render;\n  if (!render || typeof render !== 'object') return { url: null, source: 'none' };\n\n  // Detect (and refuse) any explicit bundle URL the connector tried to inject.\n  const injected =\n    (manifest as any).bundleUrl ||\n    (render as any).bundleUrl ||\n    render.reactNative?.bundleUrl ||\n    null;\n\n  // Mobile decides native vs web INDEPENDENT of render.mode. The server's\n  // cp.getContextPlugin flattens mode to \"iframe\" whenever an iframeUrl is\n  // available (for web-frontend compatibility) — even when a reactNative\n  // component is also declared. So we derive the bundle URL whenever a\n  // reactNative component is present, regardless of what `mode` says.\n  const hasNativeComponent = !!(render.reactNative?.component || render.component);\n  if (hasNativeComponent) {\n    return {\n      url: pluginBundleUrl(pluginId),\n      source: injected ? 'ignored-explicit' : 'derived-default',\n      ...(injected && { ignored: injected }),\n    };\n  }\n\n  return { url: null, source: 'none' };\n}\n\n/**\n * Extract the SHA-256 integrity hash from the manifest (server-provided).\n * BundleManager refuses to evaluate a downloaded bundle whose bytes don't\n * hash to this value — defense vs MITM/CDN tampering.\n */\nfunction extractBundleHash(manifest: PluginManifestLike): string | undefined {\n  if ((manifest as any).bundleHash) return (manifest as any).bundleHash;\n  const render = manifest.render;\n  if (!render || typeof render !== 'object') return undefined;\n  if (render.bundleHash) return render.bundleHash;\n  if (render.reactNative?.bundleHash) return render.reactNative.bundleHash;\n  return undefined;\n}\n\n/**\n * Extract component name from manifest render field.\n */\nfunction extractComponentId(manifest: PluginManifestLike): string | null {\n  const render = manifest.render;\n  if (!render || typeof render !== 'object') return null;\n  return render.component || render.reactNative?.component || null;\n}\n\nexport function usePlugin(pluginId: string, manifest: PluginManifestLike): UsePluginResult {\n  const [plugin, setPlugin] = useState<RegisteredUIPlugin | null>(null);\n  const [loading, setLoading] = useState(true);\n  const [error, setError] = useState<string | null>(null);\n  const [bundleMissing, setBundleMissing] = useState(false);\n\n  const version = manifest.version || '1.0.0';\n  const { url: bundleUrl, ignored: ignoredUrl } = extractBundleUrl(pluginId, manifest);\n  const bundleHash = extractBundleHash(manifest);\n  const componentId = extractComponentId(manifest);\n  const lookupId = componentId || pluginId;\n  // The manifest's grants — the authority for the bundle's device tools, the\n  // same one the renderer gates the component with. Keyed by value so a fresh\n  // manifest object with the same grants does not reload the plugin.\n  const grants = resolvePluginGrants({ pluginId, manifest });\n  const grantsKey = JSON.stringify(grants);\n\n  if (ignoredUrl) {\n    console.warn(`[usePlugin] ${pluginId}: IGNORED connector-injected bundleUrl=\"${ignoredUrl}\". The host derives bundle URLs from pluginId via the canonical route.`);\n  }\n\n  useEffect(() => {\n    let cancelled = false;\n\n    (async () => {\n      try {\n        // Path 1: Local registry (host-bundled / dev plugins)\n        if (nativePluginRegistry.has(lookupId)) {\n          const registered = await nativePluginRegistry.get(lookupId);\n          if (cancelled) return;\n\n          if (!registered) {\n            throw new Error(`Local plugin not found: ${lookupId}`);\n          }\n          if (registered.type === 'service') {\n            throw new Error(`Plugin ${lookupId} is a service plugin and cannot be rendered`);\n          }\n\n          setPlugin(registered as RegisteredUIPlugin);\n          setLoading(false);\n          return;\n        }\n\n        // Path 2: Remote bundle (via global BundleManager)\n        if (bundleUrl) {\n          try {\n            const component = await bundleManager.load(pluginId, bundleUrl, version, bundleHash, grants);\n            if (cancelled) return;\n            setPlugin(component);\n            setLoading(false);\n            return;\n          } catch (bundleErr) {\n            const msg = bundleErr instanceof Error ? bundleErr.message : String(bundleErr);\n            // warn (not error) — this is a handled path: we fall back to WebView.\n            console.warn(`[usePlugin] ${pluginId}: Bundle load failed, falling back to WebView:`, msg);\n            // RN bundle failed — connector declared a component but didn't\n            // ship a usable bundle (404, eval error, integrity fail, etc).\n            // Mark \"bundle missing\" so the parent renderer can fall back to\n            // the WebView/iframe when the manifest also has an iframeUrl.\n            if (!cancelled) {\n              setBundleMissing(true);\n              setLoading(false);\n            }\n            return;\n          }\n        }\n\n        // No native source available. If the manifest also has an iframeUrl,\n        // mark \"bundle missing\" so the parent falls back to the WebView.\n        // Only throw when there's truly nothing renderable.\n        const iframeUrl = manifest?.render?.iframeUrl\n          || (manifest?.render?.mode === 'adaptive' && manifest?.render?.iframe?.iframeUrl);\n        if (iframeUrl) {\n          if (!cancelled) {\n            setBundleMissing(true);\n            setLoading(false);\n          }\n          return;\n        }\n        throw new Error(\n          `Plugin \"${manifest.name || pluginId}\" has no bundle URL and is not in the local registry. ` +\n          `Check that the solution definition includes a valid render.reactNative.bundleUrl.`\n        );\n      } catch (err) {\n        if (cancelled) return;\n        const msg = err instanceof Error ? err.message : String(err);\n        console.error(`[usePlugin] Failed to load ${pluginId}:`, msg);\n        setError(msg);\n        setLoading(false);\n      }\n    })();\n\n    return () => { cancelled = true; };\n  }, [pluginId, lookupId, bundleUrl, bundleHash, version, grantsKey]);\n\n  return { plugin, loading, error, bundleMissing };\n}\n","// usePluginRuntimeProps — the gated { device, native, deviceState, voice } for ONE\n// mounted surface, with the device-state sessions it starts released when it\n// unmounts (AI Models F2: a screen that closes leaves no camera running).\n//\n// Every surface that renders a plugin uses this instead of calling\n// resolvePluginRuntimeProps in a useMemo, so the release cannot be forgotten.\n// Each mount is its own holder: a drawer and an embedded view of one plugin hold\n// the same camera separately, and it ends only when both have closed. A mount\n// that switches plugin releases the old plugin's sessions, and one whose grants\n// shrink releases the domains it lost.\n\nimport { useEffect, useMemo, useRef } from 'react';\nimport { resolvePluginGrants, resolvePluginRuntimeProps, type PluginRuntimeSource } from '../pluginRuntime';\nimport { releaseDeviceStateHolds } from '../deviceStateHost';\nimport { releaseAiLive } from '../aiLiveHost';\nimport type { PluginRuntimeProps } from '../pluginRuntime';\n\nlet mounts = 0;\n\nexport function usePluginRuntimeProps(src: PluginRuntimeSource, deps: readonly unknown[]): PluginRuntimeProps {\n  // One holder per plugin on this mount: a renderer that switches to ANOTHER plugin\n  // gets a new holder, and the effect below releases what the old one held.\n  const holderRef = useRef<{ pluginId: string; holder: string } | null>(null);\n  if (holderRef.current?.pluginId !== src.pluginId) {\n    holderRef.current = { pluginId: src.pluginId, holder: `${src.pluginId}#${++mounts}` };\n  }\n  const holder = holderRef.current.holder;\n  // eslint-disable-next-line react-hooks/exhaustive-deps\n  const props = useMemo(() => resolvePluginRuntimeProps(src, holder), [...deps, holder]);\n  // eslint-disable-next-line react-hooks/exhaustive-deps\n  const granted = useMemo(() => resolvePluginGrants(src).stateDomains ?? [], deps);\n\n  // Unmount, or a switch to another plugin: release everything this holder holds.\n  useEffect(() => () => { void releaseDeviceStateHolds(holder); }, [holder]);\n  // ... and stop any pictures it was sending to the AI (closing the screen ends it).\n  useEffect(() => () => { void releaseAiLive(holder); }, [holder]);\n\n  // Grants changed while mounted: a domain no longer granted is released now. The\n  // new facade refuses it, so the plugin could not stop that session itself.\n  const grantedKey = granted.join(',');\n  // eslint-disable-next-line react-hooks/exhaustive-deps\n  useEffect(() => { void releaseDeviceStateHolds(holder, granted); }, [holder, grantedKey]);\n\n  return props;\n}\n","import { useEffect, useState, useCallback } from 'react';\nimport { apiFetch } from '@ateam-ai-mobile/core';\nimport type { PluginManifest } from '../sdk/types';\n\nexport interface RemotePlugin {\n  id: string;\n  name: string;\n  version: string;\n  manifest: PluginManifest;\n  source: 'remote' | 'local'; // Where this plugin came from\n}\n\ninterface UseRemotePluginsResult {\n  plugins: RemotePlugin[];\n  loading: boolean;\n  error: string | null;\n  refreshing: boolean;\n  refresh: () => Promise<void>;\n}\n\n/**\n * Fetches available UI plugins from A-Team Core for the current solution.\n * Uses apiFetch which auto-injects JWT + tenant headers.\n */\nexport function useRemotePlugins(solutionId?: string): UseRemotePluginsResult {\n  const [plugins, setPlugins] = useState<RemotePlugin[]>([]);\n  const [loading, setLoading] = useState(true);\n  const [refreshing, setRefreshing] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n\n  const fetchRemotePlugins = useCallback(async () => {\n    try {\n      setError(null);\n\n      const targetSolutionId = solutionId || 'current';\n\n      let data: any;\n      try {\n        data = await apiFetch<any>(`/api/solutions/${targetSolutionId}/ui-plugins`);\n      } catch (err: any) {\n        if (err?.message?.includes('404')) {\n          console.warn(`[useRemotePlugins] Solution ${targetSolutionId} not found or has no plugins`);\n          setPlugins([]);\n          return;\n        }\n        throw err;\n      }\n      const uiPlugins: RemotePlugin[] = (data.plugins || []).map((plugin: any) => ({\n        id: plugin.id,\n        name: plugin.name,\n        version: plugin.version || '1.0.0',\n        source: 'remote' as const,\n        manifest: {\n          id: plugin.id,\n          name: plugin.name,\n          version: plugin.version || '1.0.0',\n          type: 'ui',\n          description: plugin.description || '',\n          capabilities: plugin.capabilities || {},\n          channels: plugin.channels || ['default'],\n          render: (plugin.render && typeof plugin.render === 'object') ? plugin.render : { mode: 'react-native' as const, component: plugin.name || plugin.id },\n          entry_point: plugin.entry_point || plugin.name,\n          sandbox: plugin.sandbox !== false,\n          requires_auth: plugin.requires_auth !== false,\n        } as PluginManifest,\n      }));\n\n      setPlugins(uiPlugins);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      console.error('[useRemotePlugins] Failed to fetch plugins:', message);\n      setError(message);\n      setPlugins([]); // Clear plugins on error\n    } finally {\n      setLoading(false);\n      setRefreshing(false);\n    }\n  }, [solutionId]);\n\n  const refresh = useCallback(async () => {\n    setRefreshing(true);\n    await fetchRemotePlugins();\n  }, [fetchRemotePlugins]);\n\n  useEffect(() => {\n    setLoading(true);\n    fetchRemotePlugins();\n  }, [fetchRemotePlugins]);\n\n  return {\n    plugins,\n    loading,\n    error,\n    refreshing,\n    refresh,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,IAAM,qBAAqB;AAEpB,SAAS,8BAAoC;AAClD,sBAAoB,oBAAoB;AAAA,IACtC;AAAA,MACE,MAAM;AAAA,MACN,aAAa;AAAA,MACb,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,EAAE;AAAA,QACvC,UAAU,CAAC,MAAM;AAAA,MACnB;AAAA,MACA,KAAK,CAAC,UAAe;AAAA,QACnB,IAAI;AAAA,QACJ,QAAS,QAAQ,KAAK,QAAS;AAAA;AAAA,QAE/B,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,aAAa;AAAA,MACb,cAAc,EAAE,MAAM,UAAU,YAAY,CAAC,EAAE;AAAA,MAC/C,KAAK,OAAO,EAAE,IAAI,MAAM,QAAQ,UAAU,KAAI,oBAAI,KAAK,GAAE,YAAY,EAAE;AAAA,IACzE;AAAA,EACF,CAAC;AACH;;;ACHO,SAAS,4BACd,MACAA,aACsD;AACtD,QAAM,SAAS,KAAK,gBAAiB,KAAK,UAAU,OAAQ;AAC5D,MAAI,UAAU,WAAWA,YAAY,QAAO,EAAE,QAAQ,QAAQ,OAAO;AACrE,MAAI,CAAC,UAAUA,YAAY,QAAO,EAAE,QAAQ,SAAS,QAAQ,KAAK;AAClE,SAAO,EAAE,QAAQ,QAAQ,QAAQA,YAAW;AAC9C;AAcA,IAAM,YAAoC;AAAA,EACxC,OAAO;AAAA,EACP,kBAAkB;AAAA;AAAA;AAAA,EAGlB,aAAa,MAAM;AACjB,SAAK,OAAO,uBAAU,EAAE,KAAK,CAAC,MAAM,EAAE,sBAAsB,CAAC;AAAA,EAC/D;AAAA,EACA,MAAM,MAAM;AACV,SAAK,OAAO,uBAAU,EAAE,KAAK,CAAC,MAAM;AAClC,QAAE,sBAAsB;AACxB,aAAO,EAAE,wBAAwB,EAAE,OAAO,KAAK,CAAC;AAAA,IAClD,CAAC;AAAA,EACH;AACF;AAEA,IAAI,aAA4B;AAQzB,SAAS,0BACd,MACA,OAA+B,WACZ;AACnB,QAAM,EAAE,QAAQ,OAAO,IAAI,4BAA4B,MAAM,UAAU;AACvE,eAAa;AACb,MAAI,WAAW,QAAQ;AAGrB,SAAK,MAAM;AACX,SAAK,iBAAiB;AACtB,SAAK,KAAK;AAAA,EACZ,WAAW,WAAW,SAAS;AAG7B,SAAK,YAAY;AAAA,EACnB;AACA,SAAO;AACT;AAGO,SAAS,4BAAkC;AAChD,eAAa;AACf;;;ACnFA,IAAI,aAAgC;AAO7B,SAAS,0BAA0B,IAAsB;AAC9D,eAAa;AACf;AAGO,SAAS,oBAAoB,KAAmB;AACrD,SAAO,CAAC,CAAC,OAAO,IAAI,SAAS,iBAAiB,OAAO,IAAI,SAAS,YAAY,CAAC,CAAC,IAAI;AACtF;AAQA,eAAsB,2BAA2B,KAAyB;AACxE,MAAI,CAAC,oBAAoB,GAAG,EAAG;AAE/B,QAAM,EAAE,MAAM,MAAM,cAAc,IAAI;AAEtC,MAAI,CAAC,YAAY;AACf,YAAQ,KAAK,sEAAsE;AACnF;AAAA,EACF;AAEA,MAAI;AAGF,UAAM,wBAAwB;AAE9B,UAAM,UAAU,MAAM,eAAe,MAAM,QAAQ,CAAC,CAAC;AACrD,YAAQ,IAAI,+BAA+B,IAAI,WAAM,QAAQ,KAAK,OAAO,QAAQ,MAAM,EAAE;AAEzF,UAAM;AAAA,MACJ;AAAA,MACA,QAAQ,KAAK,EAAE,IAAI,MAAM,GAAG,OAAO,QAAQ,MAAM,EAAE,IAAI;AAAA,MACvD,QAAQ,KAAK,SAAY,QAAQ;AAAA,IACnC;AAAA,EACF,SAAS,KAAU;AACjB,UAAM,WAAW,eAAe,QAAW,KAAK,WAAW,OAAO,GAAG,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACxF;AACF;AAGA,SAAS,OAAO,QAAkC;AAChD,MAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO;AAC3E,SAAO,EAAE,OAAO;AAClB;;;ACjEA,SAAS,UAAU,iBAAiB;AAoCpC,SAAS,iBAAiB,UAAkB,UAAiG;AAC3I,QAAM,SAAS,SAAS;AACxB,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO,EAAE,KAAK,MAAM,QAAQ,OAAO;AAG9E,QAAM,WACH,SAAiB,aACjB,OAAe,aAChB,OAAO,aAAa,aACpB;AAOF,QAAM,qBAAqB,CAAC,EAAE,OAAO,aAAa,aAAa,OAAO;AACtE,MAAI,oBAAoB;AACtB,WAAO;AAAA,MACL,KAAK,gBAAgB,QAAQ;AAAA,MAC7B,QAAQ,WAAW,qBAAqB;AAAA,MACxC,GAAI,YAAY,EAAE,SAAS,SAAS;AAAA,IACtC;AAAA,EACF;AAEA,SAAO,EAAE,KAAK,MAAM,QAAQ,OAAO;AACrC;AAOA,SAAS,kBAAkB,UAAkD;AAC3E,MAAK,SAAiB,WAAY,QAAQ,SAAiB;AAC3D,QAAM,SAAS,SAAS;AACxB,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,MAAI,OAAO,WAAY,QAAO,OAAO;AACrC,MAAI,OAAO,aAAa,WAAY,QAAO,OAAO,YAAY;AAC9D,SAAO;AACT;AAKA,SAAS,mBAAmB,UAA6C;AACvE,QAAM,SAAS,SAAS;AACxB,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,SAAO,OAAO,aAAa,OAAO,aAAa,aAAa;AAC9D;AAEO,SAAS,UAAU,UAAkB,UAA+C;AACzF,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAoC,IAAI;AACpE,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,IAAI;AAC3C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,IAAI;AACtD,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAS,KAAK;AAExD,QAAM,UAAU,SAAS,WAAW;AACpC,QAAM,EAAE,KAAK,WAAW,SAAS,WAAW,IAAI,iBAAiB,UAAU,QAAQ;AACnF,QAAM,aAAa,kBAAkB,QAAQ;AAC7C,QAAM,cAAc,mBAAmB,QAAQ;AAC/C,QAAM,WAAW,eAAe;AAIhC,QAAM,SAAS,oBAAoB,EAAE,UAAU,SAAS,CAAC;AACzD,QAAM,YAAY,KAAK,UAAU,MAAM;AAEvC,MAAI,YAAY;AACd,YAAQ,KAAK,eAAe,QAAQ,2CAA2C,UAAU,wEAAwE;AAAA,EACnK;AAEA,YAAU,MAAM;AACd,QAAI,YAAY;AAEhB,KAAC,YAAY;AACX,UAAI;AAEF,YAAI,qBAAqB,IAAI,QAAQ,GAAG;AACtC,gBAAM,aAAa,MAAM,qBAAqB,IAAI,QAAQ;AAC1D,cAAI,UAAW;AAEf,cAAI,CAAC,YAAY;AACf,kBAAM,IAAI,MAAM,2BAA2B,QAAQ,EAAE;AAAA,UACvD;AACA,cAAI,WAAW,SAAS,WAAW;AACjC,kBAAM,IAAI,MAAM,UAAU,QAAQ,6CAA6C;AAAA,UACjF;AAEA,oBAAU,UAAgC;AAC1C,qBAAW,KAAK;AAChB;AAAA,QACF;AAGA,YAAI,WAAW;AACb,cAAI;AACF,kBAAM,YAAY,MAAM,cAAc,KAAK,UAAU,WAAW,SAAS,YAAY,MAAM;AAC3F,gBAAI,UAAW;AACf,sBAAU,SAAS;AACnB,uBAAW,KAAK;AAChB;AAAA,UACF,SAAS,WAAW;AAClB,kBAAM,MAAM,qBAAqB,QAAQ,UAAU,UAAU,OAAO,SAAS;AAE7E,oBAAQ,KAAK,eAAe,QAAQ,kDAAkD,GAAG;AAKzF,gBAAI,CAAC,WAAW;AACd,+BAAiB,IAAI;AACrB,yBAAW,KAAK;AAAA,YAClB;AACA;AAAA,UACF;AAAA,QACF;AAKA,cAAM,YAAY,UAAU,QAAQ,aAC9B,UAAU,QAAQ,SAAS,cAAc,UAAU,QAAQ,QAAQ;AACzE,YAAI,WAAW;AACb,cAAI,CAAC,WAAW;AACd,6BAAiB,IAAI;AACrB,uBAAW,KAAK;AAAA,UAClB;AACA;AAAA,QACF;AACA,cAAM,IAAI;AAAA,UACR,WAAW,SAAS,QAAQ,QAAQ;AAAA,QAEtC;AAAA,MACF,SAAS,KAAK;AACZ,YAAI,UAAW;AACf,cAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,gBAAQ,MAAM,8BAA8B,QAAQ,KAAK,GAAG;AAC5D,iBAAS,GAAG;AACZ,mBAAW,KAAK;AAAA,MAClB;AAAA,IACF,GAAG;AAEH,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAM;AAAA,EACnC,GAAG,CAAC,UAAU,UAAU,WAAW,YAAY,SAAS,SAAS,CAAC;AAElE,SAAO,EAAE,QAAQ,SAAS,OAAO,cAAc;AACjD;;;ACxLA,SAAS,aAAAC,YAAW,SAAS,cAAc;AAM3C,IAAI,SAAS;AAEN,SAAS,sBAAsB,KAA0B,MAA8C;AAG5G,QAAM,YAAY,OAAoD,IAAI;AAC1E,MAAI,UAAU,SAAS,aAAa,IAAI,UAAU;AAChD,cAAU,UAAU,EAAE,UAAU,IAAI,UAAU,QAAQ,GAAG,IAAI,QAAQ,IAAI,EAAE,MAAM,GAAG;AAAA,EACtF;AACA,QAAM,SAAS,UAAU,QAAQ;AAEjC,QAAM,QAAQ,QAAQ,MAAM,0BAA0B,KAAK,MAAM,GAAG,CAAC,GAAG,MAAM,MAAM,CAAC;AAErF,QAAM,UAAU,QAAQ,MAAM,oBAAoB,GAAG,EAAE,gBAAgB,CAAC,GAAG,IAAI;AAG/E,EAAAC,WAAU,MAAM,MAAM;AAAE,SAAK,wBAAwB,MAAM;AAAA,EAAG,GAAG,CAAC,MAAM,CAAC;AAEzE,EAAAA,WAAU,MAAM,MAAM;AAAE,SAAK,cAAc,MAAM;AAAA,EAAG,GAAG,CAAC,MAAM,CAAC;AAI/D,QAAM,aAAa,QAAQ,KAAK,GAAG;AAEnC,EAAAA,WAAU,MAAM;AAAE,SAAK,wBAAwB,QAAQ,OAAO;AAAA,EAAG,GAAG,CAAC,QAAQ,UAAU,CAAC;AAExF,SAAO;AACT;;;AC5CA,SAAS,aAAAC,YAAW,YAAAC,WAAU,mBAAmB;AACjD,SAAS,gBAAgB;AAuBlB,SAAS,iBAAiB,YAA6C;AAC5E,QAAM,CAAC,SAAS,UAAU,IAAIA,UAAyB,CAAC,CAAC;AACzD,QAAM,CAAC,SAAS,UAAU,IAAIA,UAAS,IAAI;AAC3C,QAAM,CAAC,YAAY,aAAa,IAAIA,UAAS,KAAK;AAClD,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAwB,IAAI;AAEtD,QAAM,qBAAqB,YAAY,YAAY;AACjD,QAAI;AACF,eAAS,IAAI;AAEb,YAAM,mBAAmB,cAAc;AAEvC,UAAI;AACJ,UAAI;AACF,eAAO,MAAM,SAAc,kBAAkB,gBAAgB,aAAa;AAAA,MAC5E,SAAS,KAAU;AACjB,YAAI,KAAK,SAAS,SAAS,KAAK,GAAG;AACjC,kBAAQ,KAAK,+BAA+B,gBAAgB,8BAA8B;AAC1F,qBAAW,CAAC,CAAC;AACb;AAAA,QACF;AACA,cAAM;AAAA,MACR;AACA,YAAM,aAA6B,KAAK,WAAW,CAAC,GAAG,IAAI,CAAC,YAAiB;AAAA,QAC3E,IAAI,OAAO;AAAA,QACX,MAAM,OAAO;AAAA,QACb,SAAS,OAAO,WAAW;AAAA,QAC3B,QAAQ;AAAA,QACR,UAAU;AAAA,UACR,IAAI,OAAO;AAAA,UACX,MAAM,OAAO;AAAA,UACb,SAAS,OAAO,WAAW;AAAA,UAC3B,MAAM;AAAA,UACN,aAAa,OAAO,eAAe;AAAA,UACnC,cAAc,OAAO,gBAAgB,CAAC;AAAA,UACtC,UAAU,OAAO,YAAY,CAAC,SAAS;AAAA,UACvC,QAAS,OAAO,UAAU,OAAO,OAAO,WAAW,WAAY,OAAO,SAAS,EAAE,MAAM,gBAAyB,WAAW,OAAO,QAAQ,OAAO,GAAG;AAAA,UACpJ,aAAa,OAAO,eAAe,OAAO;AAAA,UAC1C,SAAS,OAAO,YAAY;AAAA,UAC5B,eAAe,OAAO,kBAAkB;AAAA,QAC1C;AAAA,MACF,EAAE;AAEF,iBAAW,SAAS;AAAA,IACtB,SAAS,KAAK;AACZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,cAAQ,MAAM,+CAA+C,OAAO;AACpE,eAAS,OAAO;AAChB,iBAAW,CAAC,CAAC;AAAA,IACf,UAAE;AACA,iBAAW,KAAK;AAChB,oBAAc,KAAK;AAAA,IACrB;AAAA,EACF,GAAG,CAAC,UAAU,CAAC;AAEf,QAAM,UAAU,YAAY,YAAY;AACtC,kBAAc,IAAI;AAClB,UAAM,mBAAmB;AAAA,EAC3B,GAAG,CAAC,kBAAkB,CAAC;AAEvB,EAAAD,WAAU,MAAM;AACd,eAAW,IAAI;AACf,uBAAmB;AAAA,EACrB,GAAG,CAAC,kBAAkB,CAAC;AAEvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":["prevTenant","useEffect","useEffect","useEffect","useState"]}
+{"version":3,"sources":["../src/tools/platformTools.ts","../src/tools/sessionSync.ts","../src/tools/serverCalls.ts","../src/hooks/usePlugin.ts","../src/hooks/usePluginRuntimeProps.ts","../src/hooks/useRemotePlugins.ts"],"sourcesContent":["/**\n * Platform device tools.\n *\n * These are not a solution's plugin tools — they ship with the SDK and every\n * host has them, which is what makes a device tool testable without deploying\n * anything to a tenant. Their names and contracts are declared once on the\n * server (connectors/platform/device-tools-mcp.json); this is the device half.\n *\n * Registered at import, so a client answers them even before any plugin bundle\n * has loaded — that is the point: proving the device path works should not\n * depend on the thing being proved.\n */\nimport { registerDeviceTools } from './registry';\n\nconst PLATFORM_PLUGIN_ID = 'platform:device-tools';\n\nexport function registerPlatformDeviceTools(): void {\n  registerDeviceTools(PLATFORM_PLUGIN_ID, [\n    {\n      name: 'device.echo',\n      description: \"Echo a string back from the user's own device.\",\n      input_schema: {\n        type: 'object',\n        properties: { text: { type: 'string' } },\n        required: ['text'],\n      },\n      run: (args: any) => ({\n        ok: true,\n        echoed: (args && args.text) || '',\n        // The proof: a server-side implementation could not say this truthfully.\n        ran_on: 'device',\n      }),\n    },\n    {\n      name: 'device.ping',\n      description: 'Check that the device is reachable.',\n      input_schema: { type: 'object', properties: {} },\n      run: () => ({ ok: true, ran_on: 'device', at: new Date().toISOString() }),\n    },\n  ]);\n}\n","/**\n * Ambient device-tool registration, driven by the auth session (R14).\n *\n * The LOCAL reasoning path must be live BEFORE voice opens — otherwise the only\n * proof of a loadable external skill is a voice-triggered one. So the host wires\n * this to its EXISTING auth-session subscription (no new transport, no plugin\n * special-case): a tenant becoming authenticated loads that tenant's external\n * device-tool bundles (and re-ensures the static platform tools); a tenant\n * SWITCH is a change of tenant while still authenticated, so it clears the old\n * tenant's tools and reloads; sign-out resets the loader latch (the registry\n * itself is cleared by the host's logout teardown, which already calls\n * clearDeviceTools()).\n *\n * The decision is a PURE function so the lifecycle is testable without a network\n * or a device; the effects are injected (same DI shape as the host's logout\n * teardown) so a test drives them with fakes.\n */\nimport { registerPlatformDeviceTools } from './platformTools';\nimport { clearDeviceTools } from './registry';\n// NOTE: `./loader` pulls in the bundle manager (react-native, core), so it is\n// imported LAZILY inside the real effects below — keeping this module itself\n// node-testable (a test injects fake effects and never touches that graph).\n\nexport interface SessionSnapshot {\n  authenticated: boolean;\n  /** The tenant the session is scoped to (derive it; never a stored copy). */\n  tenant: string | null;\n}\n\nexport type DeviceToolsAction = 'load' | 'reset' | 'none';\n\n/**\n * PURE: what should the device-tool registry do for this session transition?\n * - a new authenticated tenant (initial sign-in OR a switch) → 'load'\n * - the same authenticated tenant again (e.g. a silent token refresh) → 'none'\n * - leaving authenticated (sign-out) → 'reset'\n */\nexport function deviceToolsActionForSession(\n  next: SessionSnapshot,\n  prevTenant: string | null,\n): { action: DeviceToolsAction; tenant: string | null } {\n  const tenant = next.authenticated ? (next.tenant ?? null) : null;\n  if (tenant && tenant !== prevTenant) return { action: 'load', tenant };\n  if (!tenant && prevTenant) return { action: 'reset', tenant: null };\n  return { action: 'none', tenant: prevTenant };\n}\n\n/** The effects a session transition drives — injected so a test can fake them. */\nexport interface DeviceToolsSessionDeps {\n  /** Drop the previous tenant's device tools (a switch does not run logout teardown). */\n  clear: () => void;\n  /** Ensure the static, host-owned platform device tools are present. */\n  registerPlatform: () => void;\n  /** Forget the \"already loaded\" latch so a later (non-forced) load runs — sign-out. */\n  resetLoader: () => void;\n  /** Fire-and-forget reload of the current tenant's external device-tool bundles. */\n  load: () => void;\n}\n\nconst REAL_DEPS: DeviceToolsSessionDeps = {\n  clear: clearDeviceTools,\n  registerPlatform: registerPlatformDeviceTools,\n  // `./loader` reaches react-native via the bundle manager; import it only when\n  // an effect actually fires (real app), never at module load (tests).\n  resetLoader: () => {\n    void import('./loader').then((m) => m.resetDeviceToolLoader());\n  },\n  load: () => {\n    void import('./loader').then((m) => {\n      m.resetDeviceToolLoader();\n      return m.ensureDeviceToolsLoaded({ force: true });\n    });\n  },\n};\n\nlet prevTenant: string | null = null;\n\n/**\n * Apply a session transition to the device-tool registry. Call from the host's\n * existing auth-session subscription with a derived snapshot. Idempotent per\n * tenant: repeated snapshots for the same authenticated tenant do nothing, so a\n * silent token refresh does not churn the registry. Returns the action taken.\n */\nexport function syncDeviceToolsForSession(\n  next: SessionSnapshot,\n  deps: DeviceToolsSessionDeps = REAL_DEPS,\n): DeviceToolsAction {\n  const { action, tenant } = deviceToolsActionForSession(next, prevTenant);\n  prevTenant = tenant;\n  if (action === 'load') {\n    // A new authenticated tenant: drop the prior tenant's tools, re-seat the\n    // static platform tools, then reload this tenant's external bundles (forced).\n    deps.clear();\n    deps.registerPlatform();\n    deps.load();\n  } else if (action === 'reset') {\n    // Sign-out: the host's logout teardown clears the registry; we only forget\n    // the loader latch so a later sign-in reloads.\n    deps.resetLoader();\n  }\n  return action;\n}\n\n/** Test seam: forget the last-seen tenant so a test starts from signed-out. */\nexport function __resetSessionSyncForTest(): void {\n  prevTenant = null;\n}\n","/**\n * Device tools called BY THE SERVER.\n *\n * Two callers reach the same registered function on this phone:\n *\n *  - the voice loop, which already runs here (no server hop at all), and\n *  - the server reasoning loop, which cannot execute a device tool itself and\n *    sends it down the client's stream instead.\n *\n * This is the second one. It rides the transport the `ui.*` plugin commands\n * already use — a command arrives on the job/actor stream, we run it, and post\n * the outcome back keyed by `correlationId`. Nothing new was invented; the\n * payload just carries a tool call instead of a UI command.\n *\n * The host wires this once at startup:\n *\n *   pluginCommandEmitter.on('plugin-command', handleServerDeviceToolCall);\n */\nimport { callDeviceTool } from './registry';\nimport { ensureDeviceToolsLoaded } from './loader';\n\ntype PostResult = (correlationId: string, result: any, error?: string) => Promise<void>;\n\nlet postResult: PostResult | null = null;\n\n/**\n * Host DI: how to answer the server. `@ateam-ai-mobile/core` supplies\n * postCommandResult; kept injectable so this package stays free of the REST\n * client and so tests can observe the answer.\n */\nexport function setDeviceToolResultPoster(fn: PostResult): void {\n  postResult = fn;\n}\n\n/** Is this stream command a device tool call? */\nexport function isDeviceToolCommand(cmd: any): boolean {\n  return !!cmd && cmd.kind === 'device_tool' && typeof cmd.tool === 'string' && !!cmd.correlationId;\n}\n\n/**\n * Run a server-dispatched device tool and answer.\n *\n * Never throws — the server is blocked on the correlationId, so the one thing\n * we must not do is stay silent. Every path posts something back.\n */\nexport async function handleServerDeviceToolCall(cmd: any): Promise<void> {\n  if (!isDeviceToolCommand(cmd)) return;\n\n  const { tool, args, correlationId } = cmd;\n\n  if (!postResult) {\n    console.warn('[deviceTools] server called a tool but no result poster is installed');\n    return;\n  }\n\n  try {\n    // The server may reach us before anything opened a voice call, so the\n    // plugins may not be loaded yet. Cheap and idempotent once warm.\n    await ensureDeviceToolsLoaded();\n\n    const outcome = await callDeviceTool(tool, args || {});\n    console.log(`[deviceTools] server-called ${tool} → ${outcome.ok ? 'ok' : outcome.reason}`);\n\n    await postResult(\n      correlationId,\n      outcome.ok ? { ok: true, ...unwrap(outcome.result) } : undefined,\n      outcome.ok ? undefined : outcome.error,\n    );\n  } catch (err: any) {\n    await postResult(correlationId, undefined, err?.message || String(err)).catch(() => {});\n  }\n}\n\n/** Keep an object result flat for the reasoning loop; wrap anything else. */\nfunction unwrap(result: any): Record<string, any> {\n  if (result && typeof result === 'object' && !Array.isArray(result)) return result;\n  return { result };\n}\n","/**\n * usePlugin — single hook for loading any plugin.\n *\n * Simple async load → done pattern over the global BundleManager singleton\n * (deduplication + caching) and the host's native plugin registry.\n *\n * Usage:\n *   const { plugin, loading, error } = usePlugin(pluginId, manifest);\n *   if (loading) return <Spinner />;\n *   if (error) return <Error message={error} />;\n *   return <plugin.Component bridge={bridge} device={device} theme={theme} context={context} />;\n */\nimport { useState, useEffect } from 'react';\nimport { bundleManager } from '../bundles/bundleManager';\nimport { nativePluginRegistry } from '../host';\nimport { resolvePluginGrants } from '../pluginRuntime';\nimport type { NativeCapabilities, RegisteredUIPlugin } from '../sdk/types';\nimport type { DeviceBridgeDomain } from '../sdk/device-state';\nimport { pluginBundleUrl } from '../bundles/bundleUrl';\n\ninterface PluginManifestLike {\n  version?: string;\n  name?: string;\n  render?: any;\n  _connectorId?: string;\n  capabilities?: Record<string, unknown>;\n  native?: NativeCapabilities;\n  stateDomains?: DeviceBridgeDomain[];\n}\n\ninterface UsePluginResult {\n  plugin: RegisteredUIPlugin | null;\n  loading: boolean;\n  error: string | null;\n  bundleMissing: boolean;\n}\n\n/**\n * Compute the bundle URL.\n *\n * **Policy:** bundle URLs are ALWAYS derived from the pluginId via the\n * canonical platform route /api/ui-plugins/{pluginId}/bundle.js.\n * Connector-supplied bundleUrl fields are IGNORED — the Builder strips them\n * at introspection time, but we treat any survivors as bugs and ignore them\n * here too (defense in depth vs \"hand-coded URL with bad encoding causes\n * silent iframe fallback\" bugs).\n */\ntype BundleUrlSource = 'derived-default' | 'ignored-explicit' | 'none';\nfunction extractBundleUrl(pluginId: string, manifest: PluginManifestLike): { url: string | null; source: BundleUrlSource; ignored?: string } {\n  const render = manifest.render;\n  if (!render || typeof render !== 'object') return { url: null, source: 'none' };\n\n  // Detect (and refuse) any explicit bundle URL the connector tried to inject.\n  const injected =\n    (manifest as any).bundleUrl ||\n    (render as any).bundleUrl ||\n    render.reactNative?.bundleUrl ||\n    null;\n\n  // Mobile decides native vs web INDEPENDENT of render.mode. The server's\n  // cp.getContextPlugin flattens mode to \"iframe\" whenever an iframeUrl is\n  // available (for web-frontend compatibility) — even when a reactNative\n  // component is also declared. So we derive the bundle URL whenever a\n  // reactNative component is present, regardless of what `mode` says.\n  const hasNativeComponent = !!(render.reactNative?.component || render.component);\n  if (hasNativeComponent) {\n    return {\n      url: pluginBundleUrl(pluginId),\n      source: injected ? 'ignored-explicit' : 'derived-default',\n      ...(injected && { ignored: injected }),\n    };\n  }\n\n  return { url: null, source: 'none' };\n}\n\n/**\n * Extract the SHA-256 integrity hash from the manifest (server-provided).\n * BundleManager refuses to evaluate a downloaded bundle whose bytes don't\n * hash to this value — defense vs MITM/CDN tampering.\n */\nfunction extractBundleHash(manifest: PluginManifestLike): string | undefined {\n  if ((manifest as any).bundleHash) return (manifest as any).bundleHash;\n  const render = manifest.render;\n  if (!render || typeof render !== 'object') return undefined;\n  if (render.bundleHash) return render.bundleHash;\n  if (render.reactNative?.bundleHash) return render.reactNative.bundleHash;\n  return undefined;\n}\n\n/**\n * Extract component name from manifest render field.\n */\nfunction extractComponentId(manifest: PluginManifestLike): string | null {\n  const render = manifest.render;\n  if (!render || typeof render !== 'object') return null;\n  return render.component || render.reactNative?.component || null;\n}\n\nexport function usePlugin(pluginId: string, manifest: PluginManifestLike): UsePluginResult {\n  const [plugin, setPlugin] = useState<RegisteredUIPlugin | null>(null);\n  const [loading, setLoading] = useState(true);\n  const [error, setError] = useState<string | null>(null);\n  const [bundleMissing, setBundleMissing] = useState(false);\n\n  const version = manifest.version || '1.0.0';\n  const { url: bundleUrl, ignored: ignoredUrl } = extractBundleUrl(pluginId, manifest);\n  const bundleHash = extractBundleHash(manifest);\n  const componentId = extractComponentId(manifest);\n  const lookupId = componentId || pluginId;\n  // The manifest's grants — the authority for the bundle's device tools, the\n  // same one the renderer gates the component with. Keyed by value so a fresh\n  // manifest object with the same grants does not reload the plugin.\n  const grants = resolvePluginGrants({ pluginId, manifest });\n  const grantsKey = JSON.stringify(grants);\n\n  if (ignoredUrl) {\n    console.warn(`[usePlugin] ${pluginId}: IGNORED connector-injected bundleUrl=\"${ignoredUrl}\". The host derives bundle URLs from pluginId via the canonical route.`);\n  }\n\n  useEffect(() => {\n    let cancelled = false;\n\n    (async () => {\n      try {\n        // Path 1: Local registry (host-bundled / dev plugins)\n        if (nativePluginRegistry.has(lookupId)) {\n          const registered = await nativePluginRegistry.get(lookupId);\n          if (cancelled) return;\n\n          if (!registered) {\n            throw new Error(`Local plugin not found: ${lookupId}`);\n          }\n          if (registered.type === 'service') {\n            throw new Error(`Plugin ${lookupId} is a service plugin and cannot be rendered`);\n          }\n\n          setPlugin(registered as RegisteredUIPlugin);\n          setLoading(false);\n          return;\n        }\n\n        // Path 2: Remote bundle (via global BundleManager)\n        if (bundleUrl) {\n          try {\n            const component = await bundleManager.load(pluginId, bundleUrl, version, bundleHash, grants);\n            if (cancelled) return;\n            setPlugin(component);\n            setLoading(false);\n            return;\n          } catch (bundleErr) {\n            const msg = bundleErr instanceof Error ? bundleErr.message : String(bundleErr);\n            // warn (not error) — this is a handled path: we fall back to WebView.\n            console.warn(`[usePlugin] ${pluginId}: Bundle load failed, falling back to WebView:`, msg);\n            // RN bundle failed — connector declared a component but didn't\n            // ship a usable bundle (404, eval error, integrity fail, etc).\n            // Mark \"bundle missing\" so the parent renderer can fall back to\n            // the WebView/iframe when the manifest also has an iframeUrl.\n            if (!cancelled) {\n              setBundleMissing(true);\n              setLoading(false);\n            }\n            return;\n          }\n        }\n\n        // No native source available. If the manifest also has an iframeUrl,\n        // mark \"bundle missing\" so the parent falls back to the WebView.\n        // Only throw when there's truly nothing renderable.\n        const iframeUrl = manifest?.render?.iframeUrl\n          || (manifest?.render?.mode === 'adaptive' && manifest?.render?.iframe?.iframeUrl);\n        if (iframeUrl) {\n          if (!cancelled) {\n            setBundleMissing(true);\n            setLoading(false);\n          }\n          return;\n        }\n        throw new Error(\n          `Plugin \"${manifest.name || pluginId}\" has no bundle URL and is not in the local registry. ` +\n          `Check that the solution definition includes a valid render.reactNative.bundleUrl.`\n        );\n      } catch (err) {\n        if (cancelled) return;\n        const msg = err instanceof Error ? err.message : String(err);\n        console.error(`[usePlugin] Failed to load ${pluginId}:`, msg);\n        setError(msg);\n        setLoading(false);\n      }\n    })();\n\n    return () => { cancelled = true; };\n  }, [pluginId, lookupId, bundleUrl, bundleHash, version, grantsKey]);\n\n  return { plugin, loading, error, bundleMissing };\n}\n","// usePluginRuntimeProps — the gated { device, native, deviceState, voice } for ONE\n// mounted surface, with the device-state sessions it starts released when it\n// unmounts (AI Models F2: a screen that closes leaves no camera running).\n//\n// Every surface that renders a plugin uses this instead of calling\n// resolvePluginRuntimeProps in a useMemo, so the release cannot be forgotten.\n// Each mount is its own holder: a drawer and an embedded view of one plugin hold\n// the same camera separately, and it ends only when both have closed. A mount\n// that switches plugin releases the old plugin's sessions, and one whose grants\n// shrink releases the domains it lost.\n\nimport { useEffect, useMemo, useRef } from 'react';\nimport { resolvePluginGrants, resolvePluginRuntimeProps, type PluginRuntimeSource } from '../pluginRuntime';\nimport { releaseDeviceStateHolds } from '../deviceStateHost';\nimport { releaseAiLive } from '../aiLiveHost';\nimport type { PluginRuntimeProps } from '../pluginRuntime';\n\nlet mounts = 0;\n\nexport function usePluginRuntimeProps(src: PluginRuntimeSource, deps: readonly unknown[]): PluginRuntimeProps {\n  // One holder per plugin on this mount: a renderer that switches to ANOTHER plugin\n  // gets a new holder, and the effect below releases what the old one held.\n  const holderRef = useRef<{ pluginId: string; holder: string } | null>(null);\n  if (holderRef.current?.pluginId !== src.pluginId) {\n    holderRef.current = { pluginId: src.pluginId, holder: `${src.pluginId}#${++mounts}` };\n  }\n  const holder = holderRef.current.holder;\n  // eslint-disable-next-line react-hooks/exhaustive-deps\n  const props = useMemo(() => resolvePluginRuntimeProps(src, holder), [...deps, holder]);\n  // eslint-disable-next-line react-hooks/exhaustive-deps\n  const granted = useMemo(() => resolvePluginGrants(src).stateDomains ?? [], deps);\n\n  // Unmount, or a switch to another plugin: release everything this holder holds.\n  useEffect(() => () => { void releaseDeviceStateHolds(holder); }, [holder]);\n  // ... and stop any pictures it was sending to the AI (closing the screen ends it).\n  useEffect(() => () => { void releaseAiLive(holder); }, [holder]);\n\n  // Grants changed while mounted: a domain no longer granted is released now. The\n  // new facade refuses it, so the plugin could not stop that session itself.\n  const grantedKey = granted.join(',');\n  // eslint-disable-next-line react-hooks/exhaustive-deps\n  useEffect(() => { void releaseDeviceStateHolds(holder, granted); }, [holder, grantedKey]);\n\n  return props;\n}\n","import { useEffect, useState, useCallback } from 'react';\nimport { apiFetch } from '@ateam-ai-mobile/core';\nimport type { PluginManifest } from '../sdk/types';\n\nexport interface RemotePlugin {\n  id: string;\n  name: string;\n  version: string;\n  manifest: PluginManifest;\n  source: 'remote' | 'local'; // Where this plugin came from\n}\n\ninterface UseRemotePluginsResult {\n  plugins: RemotePlugin[];\n  loading: boolean;\n  error: string | null;\n  refreshing: boolean;\n  refresh: () => Promise<void>;\n}\n\n/**\n * Fetches available UI plugins from A-Team Core for the current solution.\n * Uses apiFetch which auto-injects JWT + tenant headers.\n */\nexport function useRemotePlugins(solutionId?: string): UseRemotePluginsResult {\n  const [plugins, setPlugins] = useState<RemotePlugin[]>([]);\n  const [loading, setLoading] = useState(true);\n  const [refreshing, setRefreshing] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n\n  const fetchRemotePlugins = useCallback(async () => {\n    try {\n      setError(null);\n\n      const targetSolutionId = solutionId || 'current';\n\n      let data: any;\n      try {\n        data = await apiFetch<any>(`/api/solutions/${targetSolutionId}/ui-plugins`);\n      } catch (err: any) {\n        if (err?.message?.includes('404')) {\n          console.warn(`[useRemotePlugins] Solution ${targetSolutionId} not found or has no plugins`);\n          setPlugins([]);\n          return;\n        }\n        throw err;\n      }\n      const uiPlugins: RemotePlugin[] = (data.plugins || []).map((plugin: any) => ({\n        id: plugin.id,\n        name: plugin.name,\n        version: plugin.version || '1.0.0',\n        source: 'remote' as const,\n        manifest: {\n          id: plugin.id,\n          name: plugin.name,\n          version: plugin.version || '1.0.0',\n          type: 'ui',\n          description: plugin.description || '',\n          capabilities: plugin.capabilities || {},\n          channels: plugin.channels || ['default'],\n          render: (plugin.render && typeof plugin.render === 'object') ? plugin.render : { mode: 'react-native' as const, component: plugin.name || plugin.id },\n          entry_point: plugin.entry_point || plugin.name,\n          sandbox: plugin.sandbox !== false,\n          requires_auth: plugin.requires_auth !== false,\n        } as PluginManifest,\n      }));\n\n      setPlugins(uiPlugins);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      console.error('[useRemotePlugins] Failed to fetch plugins:', message);\n      setError(message);\n      setPlugins([]); // Clear plugins on error\n    } finally {\n      setLoading(false);\n      setRefreshing(false);\n    }\n  }, [solutionId]);\n\n  const refresh = useCallback(async () => {\n    setRefreshing(true);\n    await fetchRemotePlugins();\n  }, [fetchRemotePlugins]);\n\n  useEffect(() => {\n    setLoading(true);\n    fetchRemotePlugins();\n  }, [fetchRemotePlugins]);\n\n  return {\n    plugins,\n    loading,\n    error,\n    refreshing,\n    refresh,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,IAAM,qBAAqB;AAEpB,SAAS,8BAAoC;AAClD,sBAAoB,oBAAoB;AAAA,IACtC;AAAA,MACE,MAAM;AAAA,MACN,aAAa;AAAA,MACb,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,EAAE;AAAA,QACvC,UAAU,CAAC,MAAM;AAAA,MACnB;AAAA,MACA,KAAK,CAAC,UAAe;AAAA,QACnB,IAAI;AAAA,QACJ,QAAS,QAAQ,KAAK,QAAS;AAAA;AAAA,QAE/B,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,aAAa;AAAA,MACb,cAAc,EAAE,MAAM,UAAU,YAAY,CAAC,EAAE;AAAA,MAC/C,KAAK,OAAO,EAAE,IAAI,MAAM,QAAQ,UAAU,KAAI,oBAAI,KAAK,GAAE,YAAY,EAAE;AAAA,IACzE;AAAA,EACF,CAAC;AACH;;;ACHO,SAAS,4BACd,MACAA,aACsD;AACtD,QAAM,SAAS,KAAK,gBAAiB,KAAK,UAAU,OAAQ;AAC5D,MAAI,UAAU,WAAWA,YAAY,QAAO,EAAE,QAAQ,QAAQ,OAAO;AACrE,MAAI,CAAC,UAAUA,YAAY,QAAO,EAAE,QAAQ,SAAS,QAAQ,KAAK;AAClE,SAAO,EAAE,QAAQ,QAAQ,QAAQA,YAAW;AAC9C;AAcA,IAAM,YAAoC;AAAA,EACxC,OAAO;AAAA,EACP,kBAAkB;AAAA;AAAA;AAAA,EAGlB,aAAa,MAAM;AACjB,SAAK,OAAO,uBAAU,EAAE,KAAK,CAAC,MAAM,EAAE,sBAAsB,CAAC;AAAA,EAC/D;AAAA,EACA,MAAM,MAAM;AACV,SAAK,OAAO,uBAAU,EAAE,KAAK,CAAC,MAAM;AAClC,QAAE,sBAAsB;AACxB,aAAO,EAAE,wBAAwB,EAAE,OAAO,KAAK,CAAC;AAAA,IAClD,CAAC;AAAA,EACH;AACF;AAEA,IAAI,aAA4B;AAQzB,SAAS,0BACd,MACA,OAA+B,WACZ;AACnB,QAAM,EAAE,QAAQ,OAAO,IAAI,4BAA4B,MAAM,UAAU;AACvE,eAAa;AACb,MAAI,WAAW,QAAQ;AAGrB,SAAK,MAAM;AACX,SAAK,iBAAiB;AACtB,SAAK,KAAK;AAAA,EACZ,WAAW,WAAW,SAAS;AAG7B,SAAK,YAAY;AAAA,EACnB;AACA,SAAO;AACT;AAGO,SAAS,4BAAkC;AAChD,eAAa;AACf;;;ACnFA,IAAI,aAAgC;AAO7B,SAAS,0BAA0B,IAAsB;AAC9D,eAAa;AACf;AAGO,SAAS,oBAAoB,KAAmB;AACrD,SAAO,CAAC,CAAC,OAAO,IAAI,SAAS,iBAAiB,OAAO,IAAI,SAAS,YAAY,CAAC,CAAC,IAAI;AACtF;AAQA,eAAsB,2BAA2B,KAAyB;AACxE,MAAI,CAAC,oBAAoB,GAAG,EAAG;AAE/B,QAAM,EAAE,MAAM,MAAM,cAAc,IAAI;AAEtC,MAAI,CAAC,YAAY;AACf,YAAQ,KAAK,sEAAsE;AACnF;AAAA,EACF;AAEA,MAAI;AAGF,UAAM,wBAAwB;AAE9B,UAAM,UAAU,MAAM,eAAe,MAAM,QAAQ,CAAC,CAAC;AACrD,YAAQ,IAAI,+BAA+B,IAAI,WAAM,QAAQ,KAAK,OAAO,QAAQ,MAAM,EAAE;AAEzF,UAAM;AAAA,MACJ;AAAA,MACA,QAAQ,KAAK,EAAE,IAAI,MAAM,GAAG,OAAO,QAAQ,MAAM,EAAE,IAAI;AAAA,MACvD,QAAQ,KAAK,SAAY,QAAQ;AAAA,IACnC;AAAA,EACF,SAAS,KAAU;AACjB,UAAM,WAAW,eAAe,QAAW,KAAK,WAAW,OAAO,GAAG,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACxF;AACF;AAGA,SAAS,OAAO,QAAkC;AAChD,MAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO;AAC3E,SAAO,EAAE,OAAO;AAClB;;;ACjEA,SAAS,UAAU,iBAAiB;AAoCpC,SAAS,iBAAiB,UAAkB,UAAiG;AAC3I,QAAM,SAAS,SAAS;AACxB,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO,EAAE,KAAK,MAAM,QAAQ,OAAO;AAG9E,QAAM,WACH,SAAiB,aACjB,OAAe,aAChB,OAAO,aAAa,aACpB;AAOF,QAAM,qBAAqB,CAAC,EAAE,OAAO,aAAa,aAAa,OAAO;AACtE,MAAI,oBAAoB;AACtB,WAAO;AAAA,MACL,KAAK,gBAAgB,QAAQ;AAAA,MAC7B,QAAQ,WAAW,qBAAqB;AAAA,MACxC,GAAI,YAAY,EAAE,SAAS,SAAS;AAAA,IACtC;AAAA,EACF;AAEA,SAAO,EAAE,KAAK,MAAM,QAAQ,OAAO;AACrC;AAOA,SAAS,kBAAkB,UAAkD;AAC3E,MAAK,SAAiB,WAAY,QAAQ,SAAiB;AAC3D,QAAM,SAAS,SAAS;AACxB,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,MAAI,OAAO,WAAY,QAAO,OAAO;AACrC,MAAI,OAAO,aAAa,WAAY,QAAO,OAAO,YAAY;AAC9D,SAAO;AACT;AAKA,SAAS,mBAAmB,UAA6C;AACvE,QAAM,SAAS,SAAS;AACxB,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,SAAO,OAAO,aAAa,OAAO,aAAa,aAAa;AAC9D;AAEO,SAAS,UAAU,UAAkB,UAA+C;AACzF,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAoC,IAAI;AACpE,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,IAAI;AAC3C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,IAAI;AACtD,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAS,KAAK;AAExD,QAAM,UAAU,SAAS,WAAW;AACpC,QAAM,EAAE,KAAK,WAAW,SAAS,WAAW,IAAI,iBAAiB,UAAU,QAAQ;AACnF,QAAM,aAAa,kBAAkB,QAAQ;AAC7C,QAAM,cAAc,mBAAmB,QAAQ;AAC/C,QAAM,WAAW,eAAe;AAIhC,QAAM,SAAS,oBAAoB,EAAE,UAAU,SAAS,CAAC;AACzD,QAAM,YAAY,KAAK,UAAU,MAAM;AAEvC,MAAI,YAAY;AACd,YAAQ,KAAK,eAAe,QAAQ,2CAA2C,UAAU,wEAAwE;AAAA,EACnK;AAEA,YAAU,MAAM;AACd,QAAI,YAAY;AAEhB,KAAC,YAAY;AACX,UAAI;AAEF,YAAI,qBAAqB,IAAI,QAAQ,GAAG;AACtC,gBAAM,aAAa,MAAM,qBAAqB,IAAI,QAAQ;AAC1D,cAAI,UAAW;AAEf,cAAI,CAAC,YAAY;AACf,kBAAM,IAAI,MAAM,2BAA2B,QAAQ,EAAE;AAAA,UACvD;AACA,cAAI,WAAW,SAAS,WAAW;AACjC,kBAAM,IAAI,MAAM,UAAU,QAAQ,6CAA6C;AAAA,UACjF;AAEA,oBAAU,UAAgC;AAC1C,qBAAW,KAAK;AAChB;AAAA,QACF;AAGA,YAAI,WAAW;AACb,cAAI;AACF,kBAAM,YAAY,MAAM,cAAc,KAAK,UAAU,WAAW,SAAS,YAAY,MAAM;AAC3F,gBAAI,UAAW;AACf,sBAAU,SAAS;AACnB,uBAAW,KAAK;AAChB;AAAA,UACF,SAAS,WAAW;AAClB,kBAAM,MAAM,qBAAqB,QAAQ,UAAU,UAAU,OAAO,SAAS;AAE7E,oBAAQ,KAAK,eAAe,QAAQ,kDAAkD,GAAG;AAKzF,gBAAI,CAAC,WAAW;AACd,+BAAiB,IAAI;AACrB,yBAAW,KAAK;AAAA,YAClB;AACA;AAAA,UACF;AAAA,QACF;AAKA,cAAM,YAAY,UAAU,QAAQ,aAC9B,UAAU,QAAQ,SAAS,cAAc,UAAU,QAAQ,QAAQ;AACzE,YAAI,WAAW;AACb,cAAI,CAAC,WAAW;AACd,6BAAiB,IAAI;AACrB,uBAAW,KAAK;AAAA,UAClB;AACA;AAAA,QACF;AACA,cAAM,IAAI;AAAA,UACR,WAAW,SAAS,QAAQ,QAAQ;AAAA,QAEtC;AAAA,MACF,SAAS,KAAK;AACZ,YAAI,UAAW;AACf,cAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,gBAAQ,MAAM,8BAA8B,QAAQ,KAAK,GAAG;AAC5D,iBAAS,GAAG;AACZ,mBAAW,KAAK;AAAA,MAClB;AAAA,IACF,GAAG;AAEH,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAM;AAAA,EACnC,GAAG,CAAC,UAAU,UAAU,WAAW,YAAY,SAAS,SAAS,CAAC;AAElE,SAAO,EAAE,QAAQ,SAAS,OAAO,cAAc;AACjD;;;ACxLA,SAAS,aAAAC,YAAW,SAAS,cAAc;AAM3C,IAAI,SAAS;AAEN,SAAS,sBAAsB,KAA0B,MAA8C;AAG5G,QAAM,YAAY,OAAoD,IAAI;AAC1E,MAAI,UAAU,SAAS,aAAa,IAAI,UAAU;AAChD,cAAU,UAAU,EAAE,UAAU,IAAI,UAAU,QAAQ,GAAG,IAAI,QAAQ,IAAI,EAAE,MAAM,GAAG;AAAA,EACtF;AACA,QAAM,SAAS,UAAU,QAAQ;AAEjC,QAAM,QAAQ,QAAQ,MAAM,0BAA0B,KAAK,MAAM,GAAG,CAAC,GAAG,MAAM,MAAM,CAAC;AAErF,QAAM,UAAU,QAAQ,MAAM,oBAAoB,GAAG,EAAE,gBAAgB,CAAC,GAAG,IAAI;AAG/E,EAAAC,WAAU,MAAM,MAAM;AAAE,SAAK,wBAAwB,MAAM;AAAA,EAAG,GAAG,CAAC,MAAM,CAAC;AAEzE,EAAAA,WAAU,MAAM,MAAM;AAAE,SAAK,cAAc,MAAM;AAAA,EAAG,GAAG,CAAC,MAAM,CAAC;AAI/D,QAAM,aAAa,QAAQ,KAAK,GAAG;AAEnC,EAAAA,WAAU,MAAM;AAAE,SAAK,wBAAwB,QAAQ,OAAO;AAAA,EAAG,GAAG,CAAC,QAAQ,UAAU,CAAC;AAExF,SAAO;AACT;;;AC5CA,SAAS,aAAAC,YAAW,YAAAC,WAAU,mBAAmB;AACjD,SAAS,gBAAgB;AAuBlB,SAAS,iBAAiB,YAA6C;AAC5E,QAAM,CAAC,SAAS,UAAU,IAAIA,UAAyB,CAAC,CAAC;AACzD,QAAM,CAAC,SAAS,UAAU,IAAIA,UAAS,IAAI;AAC3C,QAAM,CAAC,YAAY,aAAa,IAAIA,UAAS,KAAK;AAClD,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAwB,IAAI;AAEtD,QAAM,qBAAqB,YAAY,YAAY;AACjD,QAAI;AACF,eAAS,IAAI;AAEb,YAAM,mBAAmB,cAAc;AAEvC,UAAI;AACJ,UAAI;AACF,eAAO,MAAM,SAAc,kBAAkB,gBAAgB,aAAa;AAAA,MAC5E,SAAS,KAAU;AACjB,YAAI,KAAK,SAAS,SAAS,KAAK,GAAG;AACjC,kBAAQ,KAAK,+BAA+B,gBAAgB,8BAA8B;AAC1F,qBAAW,CAAC,CAAC;AACb;AAAA,QACF;AACA,cAAM;AAAA,MACR;AACA,YAAM,aAA6B,KAAK,WAAW,CAAC,GAAG,IAAI,CAAC,YAAiB;AAAA,QAC3E,IAAI,OAAO;AAAA,QACX,MAAM,OAAO;AAAA,QACb,SAAS,OAAO,WAAW;AAAA,QAC3B,QAAQ;AAAA,QACR,UAAU;AAAA,UACR,IAAI,OAAO;AAAA,UACX,MAAM,OAAO;AAAA,UACb,SAAS,OAAO,WAAW;AAAA,UAC3B,MAAM;AAAA,UACN,aAAa,OAAO,eAAe;AAAA,UACnC,cAAc,OAAO,gBAAgB,CAAC;AAAA,UACtC,UAAU,OAAO,YAAY,CAAC,SAAS;AAAA,UACvC,QAAS,OAAO,UAAU,OAAO,OAAO,WAAW,WAAY,OAAO,SAAS,EAAE,MAAM,gBAAyB,WAAW,OAAO,QAAQ,OAAO,GAAG;AAAA,UACpJ,aAAa,OAAO,eAAe,OAAO;AAAA,UAC1C,SAAS,OAAO,YAAY;AAAA,UAC5B,eAAe,OAAO,kBAAkB;AAAA,QAC1C;AAAA,MACF,EAAE;AAEF,iBAAW,SAAS;AAAA,IACtB,SAAS,KAAK;AACZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,cAAQ,MAAM,+CAA+C,OAAO;AACpE,eAAS,OAAO;AAChB,iBAAW,CAAC,CAAC;AAAA,IACf,UAAE;AACA,iBAAW,KAAK;AAChB,oBAAc,KAAK;AAAA,IACrB;AAAA,EACF,GAAG,CAAC,UAAU,CAAC;AAEf,QAAM,UAAU,YAAY,YAAY;AACtC,kBAAc,IAAI;AAClB,UAAM,mBAAmB;AAAA,EAC3B,GAAG,CAAC,kBAAkB,CAAC;AAEvB,EAAAD,WAAU,MAAM;AACd,eAAW,IAAI;AACf,uBAAmB;AAAA,EACrB,GAAG,CAAC,kBAAkB,CAAC;AAEvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":["prevTenant","useEffect","useEffect","useEffect","useState"]}

package/dist/{loader-UH3GARV5.mjs → loader-QTQNSXGS.mjs}

@@ -1,9 +1,9 @@
 import {
   ensureDeviceToolsLoaded,
   resetDeviceToolLoader
-} from "./chunk-32IN24XO.mjs";
+} from "./chunk-DD3KH7OI.mjs";
 export {
   ensureDeviceToolsLoaded,
   resetDeviceToolLoader
 };
-//# sourceMappingURL=loader-UH3GARV5.mjs.map
+//# sourceMappingURL=loader-QTQNSXGS.mjs.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ateam-ai-mobile/plugin-runtime",
-  "version": "0.1.21",
+  "version": "0.1.23",
   "description": "ADAS plugin runtime for React Native hosts — plugin SDK, bundle pipeline with integrity verification, host bridge, surfaces. No Expo dependencies.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -9,7 +9,7 @@
     "build": "tsup"
   },
   "dependencies": {
-    "@ateam-ai-mobile/core": "0.1.21",
+    "@ateam-ai-mobile/core": "0.1.23",
     "zustand": "^5.0.0"
   },
   "peerDependencies": {

package/src/aiLiveHost.ts

@@ -4,20 +4,26 @@
  * The app hands the SDK's live provider here once at startup (setAiLiveProvider,
  * @ateam-ai-mobile/expo createAiLiveProvider). gateAiLive then decides, per screen:
  *
- *  - NOT declared (`capabilities: { picturesToAi: true }`) → a refusal that names it.
+ *  - NOT declared (`native: { picturesToAi: true }`) → a refusal that names it.
  *  - declared, no provider in this build → a refusal that names it.
  *  - declared + provider → the real session, bound to the screen's holder. start()
  *    asks mayPicturesLeavePhone() at CALL time, so the person's switch is read when
  *    it matters, never cached; it refuses by name when they have not allowed it.
+ *  - and FOR AS LONG AS IT SENDS (GPT review 2026-10-30): the gate re-asks whenever
+ *    the host says the answer may have changed (onPicturesToAiConsentChange) and
+ *    stops the session on a no; the provider re-asks right before every picture
+ *    (ctx.allowed), so nothing leaves after the yes is taken back even if a change
+ *    went unannounced.
  *
  * The camera the session reads is held for the screen (deviceStateHost holds), and
  * releaseAiLive(holder) — run when the screen unmounts (usePluginRuntimeProps) —
- * stops both: a closed screen sends nothing.
+ * stops both: a closed screen sends nothing. A screen's start, stop and close run one
+ * at a time, in order (one queue per screen, below), so they never overlap.
  *
  * ABSENCE IS AN ANSWER, as for voice: a denied surface reads `state: 'error'` with
  * the reason and its actions throw — never a silent no-op that looks like "idle".
  */
-import { mayPicturesLeavePhone } from './host';
+import { mayPicturesLeavePhone, onPicturesToAiConsentChange } from './host';
 import { releaseDeviceStateHolds } from './deviceStateHost';
 import type { NativeCapabilities } from './sdk/types';
 import type { DeviceState, Subscription } from './sdk/device-state';
@@ -25,6 +31,44 @@ import type { AiLiveAPI, AiLiveProvider, AiLiveSnapshot } from './sdk/aiLive';
 
 let _provider: AiLiveProvider | null = null;
 
+/**
+ * ONE QUEUE PER SCREEN. Each screen's start, stop and close run one at a time, in the order they were asked:
+ * a request waits until the one before it has completely finished, so two can never overlap (the source of
+ * every race Codex found on #53 while they could). Two things act at once, outside the queue, because
+ * they must not wait behind a start still on the network: the person taking the yes back, and stop/close
+ * telling the provider to stop now. The provider stops even a start in progress; the queued step then
+ * tidies up (the camera, the watch).
+ *
+ * The screen's record goes when the screen closes. Its aiLive objects keep the record itself, so a start()
+ * a plugin calls late (a timer after unmount) still reads "closed" and is refused.
+ */
+interface Screen {
+  closed: boolean;
+  /** Bumped by every stop: a start asked before it never runs. */
+  stops: number;
+  queue: Promise<unknown>;
+  watch: { unsubscribe(): void } | null;
+}
+const _screens = new Map<string, Screen>();
+function screenOf(holder: string): Screen {
+  let sc = _screens.get(holder);
+  if (!sc) { sc = { closed: false, stops: 0, queue: Promise.resolve(), watch: null }; _screens.set(holder, sc); }
+  return sc;
+}
+/** Run `step` after everything this screen was asked before it. */
+function inTurn<T>(sc: Screen, step: () => Promise<T>): Promise<T> {
+  const run = sc.queue.then(step, step);
+  sc.queue = run.then(() => {}, () => {});
+  return run;
+}
+const unwatch = (sc: Screen) => { sc.watch?.unsubscribe(); sc.watch = null; };
+const STOPPED_BEFORE_START = 'aiLive: stopped before it started: the screen stopped or closed while its start was waiting.';
+const SCREEN_CLOSED = 'aiLive: this screen is closed; it cannot start sending.';
+const stopped = (msg: string) => Object.assign(new Error(msg), { code: 'STOPPED' });
+
+/** The person took the yes back: what the screen reads, and why it stopped. */
+export const CONSENT_TAKEN_BACK = 'Camera pictures to AI was turned off on this phone, so sending stopped.';
+
 /** Host DI: the app supplies the live provider once at startup; null detaches it. */
 export function setAiLiveProvider(provider: AiLiveProvider | null): void {
   _provider = provider || null;
@@ -64,39 +108,89 @@ export function gateAiLive(
   camera: () => DeviceState['visual'],
 ): AiLiveAPI {
   if (capabilities?.picturesToAi !== true) {
-    return deniedAiLive("not declared in this plugin's capabilities. Add `capabilities: { picturesToAi: true }` to send camera pictures to the workspace's chosen AI.");
+    return deniedAiLive("not declared in this plugin's manifest. Add `native: { picturesToAi: true }` to send camera pictures to the workspace's chosen AI.");
   }
   if (!pluginId || !holder) return deniedAiLive('no plugin identity — it fails closed without a screen to bind the session to.');
   if (!_provider) return deniedAiLive('no live AI in this build — the app has not called setAiLiveProvider.');
   const provider = _provider;
+  const sc = screenOf(holder);
+  const allowed = () => mayPicturesLeavePhone(capabilities);
+  const releaseCamera = () => releaseDeviceStateHolds(aiLiveCameraHolder(holder));
+  /** The queued half of a stop: the session stopped (again, harmlessly) and the camera released. */
+  const tidy = async (why?: string) => {
+    unwatch(sc);
+    try { await provider.stop(holder, why); } finally { await releaseCamera(); }
+  };
+  /** Stop now, without waiting for a start still on the network; in turn, once that stop has finished,
+   *  tidy up. So the next step in the queue never starts while a stop is still under way. */
+  const stopNowAndInTurn = (why?: string) => {
+    sc.stops++;
+    const now = provider.stop(holder, why).catch(() => {});
+    return inTurn(sc, async () => { await now; await tidy(why); });
+  };
+  const onConsentChange = () => { if (!allowed()) void stopNowAndInTurn(CONSENT_TAKEN_BACK); };
+
   return {
-    async start(opts) {
-      if (!mayPicturesLeavePhone(capabilities)) {
-        throw denial('the person on this phone has not allowed camera pictures to go to AI. They can turn on "Pictures to AI" in the app\'s settings (What Ada can access).');
-      }
-      try {
-        return await provider.start(opts || {}, holder, { visual: camera() });
-      } catch (e) {
-        await releaseDeviceStateHolds(aiLiveCameraHolder(holder));
-        throw e;
-      }
-    },
-    async stop() {
-      try { await provider.stop(holder); } finally { await releaseDeviceStateHolds(aiLiveCameraHolder(holder)); }
+    start(opts) {
+      if (sc.closed) return Promise.reject(stopped(SCREEN_CLOSED));
+      const stopsWhenAsked = sc.stops;
+      return inTurn(sc, async () => {
+        if (sc.closed) throw stopped(SCREEN_CLOSED);
+        if (sc.stops !== stopsWhenAsked) throw stopped(STOPPED_BEFORE_START);
+        if (!allowed()) {
+          throw denial('the person on this phone has not allowed camera pictures to go to AI. They can turn on Settings > Camera > "Camera pictures to AI" in the app.');
+        }
+        // Watched from before the start: a yes taken back while it is on the network stops it too.
+        unwatch(sc);
+        sc.watch = onPicturesToAiConsentChange(onConsentChange);
+        let snap: AiLiveSnapshot;
+        try {
+          snap = await provider.start(opts || {}, holder, { visual: camera(), allowed });
+        } catch (e) {
+          unwatch(sc);
+          await releaseCamera();
+          if (!allowed()) throw denial(CONSENT_TAKEN_BACK);
+          throw e;
+        }
+        if (!allowed()) { await tidy(CONSENT_TAKEN_BACK); throw denial(CONSENT_TAKEN_BACK); }
+        return snap;
+      });
     },
+    stop: () => stopNowAndInTurn(),
     getSnapshot: () => provider.getSnapshot(holder),
     onEpisode: (cb) => provider.onEpisode(cb, holder),
     subscribe: (cb) => provider.subscribe(cb, holder),
   };
 }
 
-/** The screen closed: stop its live session and release its camera. */
+/** The screen closed: stop its live session and release its camera, and keep nothing of it. Closed for
+ *  good first, so every later start() of this screen is refused; then, in turn after anything it asked
+ *  before, the session stopped and the camera released. */
 export async function releaseAiLive(holder: string): Promise<void> {
-  try { await _provider?.stop(holder); } catch { /* already stopped */ }
-  try { _provider?.forget(holder); } catch { /* nothing kept */ }
-  await releaseDeviceStateHolds(aiLiveCameraHolder(holder));
+  const sc = _screens.get(holder);
+  if (!sc) {
+    // A screen that never asked for anything: nothing queued, nothing to wait for.
+    try { await _provider?.stop(holder); } catch { /* already stopped */ }
+    try { _provider?.forget(holder); } catch { /* nothing kept */ }
+    await releaseDeviceStateHolds(aiLiveCameraHolder(holder));
+    return;
+  }
+  sc.closed = true;
+  sc.stops++;
+  const now = _provider ? _provider.stop(holder).catch(() => {}) : Promise.resolve();
+  await inTurn(sc, async () => {
+    await now;
+    unwatch(sc);
+    try { await _provider?.stop(holder); } catch { /* already stopped */ }
+    try { _provider?.forget(holder); } catch { /* nothing kept */ }
+    await releaseDeviceStateHolds(aiLiveCameraHolder(holder));
+  });
+  if (_screens.get(holder) === sc) _screens.delete(holder);
 }
 
+/** For tests: how many screens still have a record (0 once every screen closed). */
+export const _aiLiveRecordsForTest = () => ({ screens: _screens.size });
+
 const NOTHING: Subscription = { unsubscribe() {} };
 
 /** For the platform's "Sending to AI" indicator: is any screen sending, and when that changes. */

package/src/bundles/bundleManager.ts

@@ -782,17 +782,23 @@ class BundleManager {
     assertBundleIntegrity(content, verifiedHash, bundleUrl);
 
     // Strip __toESM wrapping — our shim already provides correct ESM objects.
-    // esbuild's __toESM + isNodeMode=1 double-wraps and breaks React 19 hooks.
+    // esbuild's __toESM + isNodeMode=1 double-wraps and breaks React 19 hooks:
+    // its getters close over a `let` loop variable, which Hermes compiles as one
+    // shared binding, so EVERY export reads the module's last key. For react that
+    // is `version`, and the plugin crashes with "'19.1.0' is not a function".
+    // esbuild's cjs format emits `require(...)`; its iife/esm formats emit
+    // `__require(...)` — both are the same call into this shim, so both unwrap.
     let cleaned = content.replace(
-      /__toESM\(require\(("[^"]+")\)(?:,\s*\d+)?\)/g,
+      /__toESM\((?:__)?require\(("[^"]+")\)(?:,\s*\d+)?\)/g,
       'require($1)',
     );
 
     // Strip __toCommonJS wrapper — it creates a getter-based Proxy that
-    // collapses all named exports to the same object in Hermes/JSC.
+    // collapses all named exports to the same object in Hermes/JSC. cjs assigns
+    // it to module.exports; iife returns it from the wrapper.
     cleaned = cleaned.replace(
-      /module\.exports\s*=\s*__toCommonJS\((\w+)\)/g,
-      'module.exports = $1',
+      /(module\.exports\s*=|return)\s*__toCommonJS\((\w+)\)/g,
+      '$1 $2',
     );
 
     const mod: { exports: any } = { exports: {} };

package/src/host.ts

@@ -189,14 +189,34 @@ export function getCameraPreviewProvider(): ((props: CameraPreviewImplProps) =>
 //      installs a consent provider that answers from its own live state.
 // The answer is read at call time, never cached (derive, never store), and every
 // doubt answers no: no provider, a provider that throws, or anything but `true`.
-// Any code path that sends a picture off the phone must ask this first.
+// Any code path that sends a picture off the phone must ask this first — and keep
+// asking: a yes can be taken back while pictures are going (GPT review 2026-10-30),
+// so the host also says WHEN its answer may have changed, and a running sender
+// re-asks then and before every picture.
 
 let _picturesToAiConsent: (() => boolean) | null = null;
+const _consentListeners = new Set<() => void>();
 
 /** Install the host's answer to "did the person on this phone allow camera
  *  pictures to go to AI?". Pass null to remove it (consent then reads as no). */
 export function setPicturesToAiConsentProvider(provider: (() => boolean) | null): void {
   _picturesToAiConsent = provider;
+  notifyPicturesToAiConsentChanged();
+}
+
+/** The host calls this whenever anything its consent answer reads may have changed
+ *  (the switch, the camera's own switch, the OS permission). Listeners re-ask
+ *  mayPicturesLeavePhone(); nothing is passed, so nothing can be cached. */
+export function notifyPicturesToAiConsentChanged(): void {
+  for (const cb of [..._consentListeners]) {
+    try { cb(); } catch { /* a listener's error is its own */ }
+  }
+}
+
+/** Hear when the consent answer may have changed (see notifyPicturesToAiConsentChanged). */
+export function onPicturesToAiConsentChange(cb: () => void): { unsubscribe(): void } {
+  _consentListeners.add(cb);
+  return { unsubscribe: () => { _consentListeners.delete(cb); } };
 }
 
 /** The one check: true only when the plugin's trusted declaration includes

package/src/index.ts

@@ -57,6 +57,7 @@ export {
   gateAiLive,
   releaseAiLive,
   aiLiveIndicator,
+  CONSENT_TAKEN_BACK,
 } from './aiLiveHost';
 
 // Host integration
@@ -68,6 +69,8 @@ export {
   getCameraPreviewProvider,
   setPicturesToAiConsentProvider,
   mayPicturesLeavePhone,
+  notifyPicturesToAiConsentChanged,
+  onPicturesToAiConsentChange,
   getPluginNative,
   gatePluginNative,
   registerNativePlugin,

package/src/sdk/aiLive.ts

@@ -9,11 +9,21 @@
  * touches a picture: it gets events, not pixels.
  *
  * Two people must say yes before a picture leaves the phone (owner decision
- * 2026-10-25): the solution declares `capabilities: { picturesToAi: true }`, AND
- * the person on the phone allowed "Pictures to AI" in the app's settings. Owner
- * decision 2026-10-29: only while the screen that asked is open, and with
- * "Sending to AI" on screen — the indicator is the PLATFORM's (AiLiveIndicator in
- * @ateam-ai-mobile/ui), a plugin cannot hide it, and closing the screen stops it.
+ * 2026-10-25): the solution declares `native: { picturesToAi: true }`, AND the
+ * person on the phone allowed "Camera pictures to AI" in the app's settings. Both
+ * are asked at start() AND for as long as it sends: taking the yes back (the
+ * switch, the camera's own switch, the OS permission) stops it, and no picture is
+ * sent after that (GPT review 2026-10-30). Owner decision 2026-10-29: only while
+ * the screen that asked is open, and with "Sending to AI" on screen — the
+ * indicator is the PLATFORM's (AiLiveIndicator in @ateam-ai-mobile/ui), a plugin
+ * cannot hide it, and closing the screen stops it.
+ *
+ * Each phone session is the phone's OWN live session, capped at US$0.50 by Core,
+ * and it is one connection: start() opening it starts the session, and its end
+ * (stop(), the screen closing, the app gone, the network lost) ends it. Live
+ * sessions are per person (workspace + actor): other people's never get in the
+ * way, and when the person already has one running (started on the AI Models
+ * page or on another device), start() refuses rather than join it.
  */
 import type { Subscription } from './device-state';
 
@@ -26,6 +36,9 @@ export interface AiLiveEpisode {
   /** The task class id from the chosen setup, e.g. "drinking". */
   class: string;
   episodeId: string;
+  /** Whose camera saw it: the signed-in person whose live session this is (live sessions are per
+   *  person, workspace + actor). Always there: an event without it never reaches the screen. */
+  actorId: string;
   /** When (ms since the epoch, the session's clock). */
   at: number;
   [key: string]: unknown;
@@ -38,7 +51,7 @@ export type AiLiveState =
   | 'starting'
   /** Pictures are going to the AI ("Sending to AI" is on screen). */
   | 'sending'
-  /** Stopped by stop() or by the screen closing. */
+  /** Stopped by stop(), by the screen closing, or by the person taking the yes back (lastError says so). */
   | 'stopped'
   /** It could not start or it broke; `lastError` says why in plain words. */
   | 'error';
@@ -60,8 +73,10 @@ export interface AiLiveStartOptions {
 }
 
 export interface AiLiveAPI {
-  /** Start sending this phone's camera to the chosen AI. Refuses by name when either
-   *  side has not said yes, or when another screen is sending already. */
+  /** Start sending this phone's camera to the chosen AI, in a live session of the
+   *  phone's own (capped at US$0.50). Refuses by name when either side has not said
+   *  yes, when another screen is sending already, or when the person already has a
+   *  live session running elsewhere. */
   start(opts?: AiLiveStartOptions): Promise<AiLiveSnapshot>;
   /** Stop sending. Closing the screen does the same. */
   stop(): Promise<void>;
@@ -75,8 +90,11 @@ export interface AiLiveAPI {
 /** What the host supplies (setAiLiveProvider). `owner` is the screen's holder id,
  *  captured by the gate — a plugin never supplies its own. */
 export interface AiLiveProvider {
-  start(opts: AiLiveStartOptions, owner: string, ctx: { visual: import('./device-state').DeviceState['visual'] }): Promise<AiLiveSnapshot>;
-  stop(owner: string): Promise<void>;
+  /** `ctx.allowed` is the two-sided consent, asked again right before every picture:
+   *  once it answers no, the provider sends nothing more and stops. */
+  start(opts: AiLiveStartOptions, owner: string, ctx: { visual: import('./device-state').DeviceState['visual']; allowed: () => boolean }): Promise<AiLiveSnapshot>;
+  /** `why` (optional) is what the screen then reads as lastError, e.g. the yes taken back. */
+  stop(owner: string, why?: string): Promise<void>;
   getSnapshot(owner: string): AiLiveSnapshot;
   onEpisode(cb: (ev: AiLiveEpisode) => void, owner: string): Subscription;
   subscribe(cb: (snap: AiLiveSnapshot) => void, owner: string): Subscription;