@ateam-ai-mobile/ui 0.1.8 → 0.1.10

package/dist/index.d.mts

@@ -3,7 +3,7 @@ import { Message, JobProgress, UIAction, AdasSession, TenantMembership, HandoffE
 import * as React$1 from 'react';
 import React__default, { ReactNode } from 'react';
 import * as _ateam_ai_mobile_plugin_runtime from '@ateam-ai-mobile/plugin-runtime';
-import { PluginSurfaceMeta, PlatformPluginManifest, VoiceState, VoiceTranscriptEntry, VoiceSessionProvider, VoicePersona, VoiceStartOptions, VoiceCaller, VoiceSnapshot, VoiceEvent, VoiceSubscription } from '@ateam-ai-mobile/plugin-runtime';
+import { PluginSurfaceMeta, PlatformPluginManifest, VoiceState, VoiceTranscriptEntry, VoiceSessionProvider, VoiceDeviceToolCall, VoicePersona, VoiceStartOptions, VoiceCaller, VoiceSnapshot, VoiceEvent, VoiceSubscription } from '@ateam-ai-mobile/plugin-runtime';
 import * as zustand from 'zustand';
 
 interface AdasChatScreenProps {
@@ -184,12 +184,6 @@ declare function WorkspaceBanner({ topInset }: WorkspaceBannerProps): react_jsx_
 interface HandoffScreenProps {
     /** The one-time handoff code the host captured from the deep link (null = nothing pending). */
     code: string | null;
-    /**
-     * Adopt the handed-off tenant. AWAITED before onSignedIn so the host's active
-     * tenant is set before the session reads it (the exchange result carries the
-     * tenant the code was bound to). No-op is fine when the result has no tenant.
-     */
-    onAdoptTenant: (tenant: string) => void | Promise<void>;
     /** Adopt the session JWT (host wires its authStore.login → core session + tenantConfirmed). */
     onSignedIn: (jwt: string) => void | Promise<void>;
     /** Clear the consumed single-use code so a relaunch never retries it. Called after success. */
@@ -197,32 +191,30 @@ interface HandoffScreenProps {
     /** Back to sign in — the host toggles the pre-auth phase (not a router). */
     onCancel: () => void;
 }
-declare function HandoffScreen({ code, onAdoptTenant, onSignedIn, onDone, onCancel }: HandoffScreenProps): react_jsx_runtime.JSX.Element;
+declare function HandoffScreen({ code, onSignedIn, onDone, onCancel }: HandoffScreenProps): react_jsx_runtime.JSX.Element;
 
 /**
  * Handoff exchange — the pure, testable half of HandoffScreen (R9B).
  *
  * Kept JSX-free in its own module (like R6's runLogoutTeardown) so the
- * security-sensitive error mapper and the adopt-before-sign-in ORDERING can be
+ * security-sensitive error mapper and the sign-in-before-clear ORDERING can be
  * node-tested directly, without rendering the RN component.
  */
 
 interface HandoffExchangeDeps {
     /** Trade the one-time code for a session JWT (host injects core.exchangeHandoff). */
     exchange: (code: string) => Promise<HandoffExchangeResult>;
-    /** Adopt the handed-off tenant (host's single tenant writer). */
-    onAdoptTenant: (tenant: string) => void | Promise<void>;
     /** Adopt the session JWT. */
     onSignedIn: (jwt: string) => void | Promise<void>;
     /** Clear the consumed single-use code. */
     onDone: () => void;
 }
 /**
- * Run the handoff: exchange → (adopt tenant) → sign in → clear the code, in that
- * exact order. The tenant adoption is AWAITED BEFORE onSignedIn so the host's
- * active tenant is set before the session reads it — a cross-tenant handoff must
- * never sign in under the wrong tenant. Throws on any failure (the caller maps it
- * to a user-facing message); onSignedIn / onDone never run on the error path.
+ * Run the handoff: exchange → sign in → clear the code, in that exact order. The
+ * handed-off tenant is the JWT's own `tenant` claim (getTenant() reads it), so a
+ * cross-tenant handoff is scoped correctly with nothing for the host to store.
+ * Throws on any failure (the caller maps it to a user-facing message);
+ * onSignedIn / onDone never run on the error path.
  */
 declare function runHandoffExchange(code: string, deps: HandoffExchangeDeps): Promise<void>;
 /**
@@ -236,19 +228,17 @@ declare function runHandoffExchange(code: string, deps: HandoffExchangeDeps): Pr
 declare function handoffErrorMessage(msg?: string): string;
 
 interface OpenJoinScreenProps {
-    /** Adopt the joined tenant (host's single ACTIVE_TENANT writer), awaited before sign-in. */
-    onAdoptTenant: (tenant: string) => void | Promise<void>;
     /** Adopt the session JWT (host: authStore.login → core session + tenantConfirmed). */
     onSignedIn: (jwt: string) => void | Promise<void>;
     /** Back to sign in — the host toggles the pre-auth phase (not a router). */
     onBack: () => void;
 }
-declare function OpenJoinScreen({ onAdoptTenant, onSignedIn, onBack }: OpenJoinScreenProps): react_jsx_runtime.JSX.Element;
+declare function OpenJoinScreen({ onSignedIn, onBack }: OpenJoinScreenProps): react_jsx_runtime.JSX.Element;
 
 /**
  * Open self-signup — the pure, testable half of OpenJoinScreen (R9B).
  *
- * JSX-free so the join ORDERING (join → adopt tenant → sign in) and the error
+ * JSX-free so the join ORDERING (join → sign in) and the error
  * mapper are node-testable without rendering. The native id_token acquisition
  * happens in the component via getOAuthProvider(); the acquired token is passed
  * in here, so this module stays pure and provider-free.
@@ -257,8 +247,6 @@ declare function OpenJoinScreen({ onAdoptTenant, onSignedIn, onBack }: OpenJoinS
 interface OpenJoinDeps {
     /** Exchange { tenant, id_token } for a session JWT (host injects core.openJoinWith*). */
     join: (slug: string, idToken: string) => Promise<ConsumerSignInResult>;
-    /** Adopt the joined tenant (host's single ACTIVE_TENANT writer). */
-    onAdoptTenant: (tenant: string) => void | Promise<void>;
     /** Adopt the session JWT. */
     onSignedIn: (jwt: string) => void | Promise<void>;
 }
@@ -267,10 +255,10 @@ interface OpenJoinDeps {
  *
  * Returns false WITHOUT side effects when idToken is null — the caller acquired
  * no token (the user cancelled the native sheet, or it returned none), which is
- * a silent no-op, never an error. Otherwise: join → adopt the joined tenant →
- * sign in, in that order (the tenant is adopted only AFTER the server confirms
- * the join, and BEFORE sign-in so the session reads the right tenant). Throws on
- * a join failure (the caller maps it to a message); sign-in never runs then.
+ * a silent no-op, never an error. Otherwise: join → sign in. The joined tenant
+ * is the returned JWT's own `tenant` claim (getTenant() reads it), so there is
+ * nothing for the host to store. Throws on a join failure (the caller maps it to
+ * a message); sign-in never runs then.
  */
 declare function completeOpenJoin(slug: string, idToken: string | null, deps: OpenJoinDeps): Promise<boolean>;
 /**
@@ -322,18 +310,19 @@ declare function completeInviteJoin(code: string, idToken: string | null, deps:
 declare function inviteHeadline(preview: InvitePreview | null): string;
 
 interface LoginScreenProps {
-    /** The reactive pre-auth tenant pick (host: useSession().tenant). Re-fetches config on change. */
+    /** The reactive pre-auth team (host: useSession().tenant). Re-fetches config on change.
+     *  '' → the screen asks for the team. */
     activeTenant: string;
-    /** The fallback tenant for the consumer-disabled self-heal guard (host: DEFAULT_TENANT). */
-    defaultTenant: string;
-    /** Reset to the default tenant + persist + bump activeTenant so this screen refetches. */
+    /** The user named a team to sign in to: the host stores it as its signed-out pick. */
+    onPickTenant: (tenant: string) => void | Promise<void>;
+    /** The team has no consumer sign-in: the host clears its pick (the screen asks for another). */
     onConsumerDisabled: () => void | Promise<void>;
     /** Adopt the session JWT (host: authStore.login → core session + tenantConfirmed). */
     onSignedIn: (jwt: string) => void | Promise<void>;
     /** Open the host's "join a team by name" (OpenJoin) sub-view. Link hidden when omitted. */
     onJoinTeam?: () => void;
 }
-declare function LoginScreen({ activeTenant, defaultTenant, onConsumerDisabled, onSignedIn, onJoinTeam }: LoginScreenProps): react_jsx_runtime.JSX.Element;
+declare function LoginScreen({ activeTenant, onPickTenant, onConsumerDisabled, onSignedIn, onJoinTeam }: LoginScreenProps): react_jsx_runtime.JSX.Element;
 
 /**
  * Login — the pure, testable half of LoginScreen (R9B).
@@ -353,12 +342,11 @@ declare function googleClientIds(config: ConsumerCapabilityConfig): {
     iosClientId: string;
 };
 /**
- * Whether a failed config fetch should self-heal by falling back to the default
- * tenant. A consumer-DISABLED tenant 404s with "capability not enabled"; rather
- * than dead-end the user on red text we coerce back to the default and refetch.
- * Guarded by currentTenant !== defaultTenant so we never loop on the default.
+ * Whether a failed config fetch means the picked tenant has no consumer sign-in
+ * ("capability not enabled" 404). The host then clears its pick and shows its
+ * team picker — it never falls back to a default tenant.
  */
-declare function shouldRecoverToDefaultTenant(errorMsg: string | undefined, currentTenant: string, defaultTenant: string): boolean;
+declare function isConsumerDisabled(errorMsg: string | undefined): boolean;
 interface ProviderSignInDeps {
     /** Trade the provider id_token for a session JWT (host injects core.signInWith*). */
     exchange: (idToken: string) => Promise<ConsumerSignInResult>;
@@ -382,6 +370,13 @@ declare function VoiceCallSheet({ visible, onClose, skillSlug }: Props): react_j
 
 type CallState = VoiceState;
 type TranscriptEntry = VoiceTranscriptEntry;
+/** A finished call, tagged with the session owner's pluginId when the tool is
+ *  that plugin's own; null when it is not (another solution's tool, the
+ *  platform's, an unregistered name, no name) — then only the platform sees it. */
+interface DeviceToolRecord {
+    owner: string | null;
+    call: VoiceDeviceToolCall;
+}
 interface InternalState {
     callState: CallState;
     sessionId: string | null;
@@ -394,11 +389,11 @@ interface InternalState {
     userSpeaking: boolean;
     /** Epoch ms of the last speaking:false, or null before the first utterance. */
     lastUserSpeechEndedAt: number | null;
-    /** The last device-tool call the model made (name + when), or null. */
-    lastDeviceTool: {
-        name: string;
-        at: number;
-    } | null;
+    /** This session's finished device-tool calls: the LATEST per owner tag (see
+     *  DeviceToolRecord), in the order they finished. The platform reads the last
+     *  one; the owning plugin reads its own (lastDeviceToolFor) — one store, both
+     *  views derived from it. */
+    deviceToolCalls: DeviceToolRecord[];
     /** The WebView should be mounted (a session is wanted / live). */
     mounted: boolean;
     /** The WebView source, computed ONCE at start() so state changes (transcript,
@@ -461,6 +456,11 @@ declare class VoiceSessionManager implements VoiceSessionProvider {
      *  and the bundleManager registers a plugin's tools under that same id (never
      *  the bundle's own short `id`), so exact equality is the whole check. */
     private toolScope;
+    /** Bumped whenever a session begins or ends. A device-tool call remembers the
+     *  epoch it arrived in, and its outcome is recorded only if that session is
+     *  still the current one — a tool that finishes after hang-up (or after a new
+     *  call started) must not show up as the new session's last call. */
+    private sessionEpoch;
     /** The platform (built-in sheet, mic indicator, session host) sees and
      *  controls any session — it is the user's own surface. A plugin caller may
      *  only touch a session it owns. */
@@ -486,13 +486,30 @@ declare class VoiceSessionManager implements VoiceSessionProvider {
      */
     observe(text: string, caller?: VoiceCaller): void;
     getSnapshot(caller?: VoiceCaller): VoiceSnapshot;
+    /** The snapshot for a caller that may access the session. Everything is the
+     *  session's, except `lastDeviceTool`, which is scoped to the caller's tools. */
     private realSnapshot;
+    /**
+     * The last finished device-tool call THIS caller may see. The platform (the
+     * user's own surface) sees every call. A plugin sees only calls to tools it
+     * registered — even on a session it owns, the model can call another
+     * solution's tool (a normal call offers every registered tool), and that
+     * tool's name and error are not this plugin's to read.
+     */
+    private lastDeviceToolFor;
     private foreignSnapshot;
     subscribe(cb: (event: VoiceEvent) => void, caller?: VoiceCaller): VoiceSubscription;
     transcript(caller?: VoiceCaller): TranscriptEntry[];
     private buildUri;
     /** Handle a postMessage from the WebView. `event` is the RN WebView event. */
     handleMessage(event: any): void;
+    /**
+     * One device-tool call, arrival to outcome: validate → authorize → run. The
+     * answer goes back to the mini-app (the model reads it) AND becomes
+     * `lastDeviceTool` — the same object, recorded only once it is known, so a
+     * refused call never looks like one that ran.
+     */
+    private handleDeviceToolCall;
     /**
      * Final authorization = Core's frozen allowset ∩ the current valid local
      * registry, bound to the ACTIVE session. All must hold:
@@ -506,15 +523,14 @@ declare class VoiceSessionManager implements VoiceSessionProvider {
      * No fallback to the live registry alone, ever.
      */
     private isToolAuthorized;
-    /** Tell the mini-app the call was refused — a stated reason, never a silent drop.
-     *  `notReady` distinguishes a transient "allowset not here yet" (retry) from a
-     *  final "not allowed in this session". */
-    private postDeviceToolRefusal;
+    /** Answer the mini-app's pending device-tool request (a call's outcome, or the
+     *  tool list) — it resolves the request with this payload by correlationId. */
+    private postDeviceToolResult;
     /** PROPOSE the phone's available tools — this is an offer to Core, not the
      *  authorization set. Core sanitizes it and returns the accepted set in a
      *  `deviceToolAllowset` message, which is what actually gates execution. */
     private sendDeviceToolList;
-    /** Run a device tool and post the outcome back into the WebView. */
+    /** Run an authorized device tool. Never throws: every failure is an answer. */
     private runDeviceTool;
     private setState;
     private appendTranscript;
@@ -594,4 +610,4 @@ declare function setUIActionNavigator(navigate: UIActionNavigator | null): void;
 type ExtraHostsGetter = () => string[];
 declare function setPluginWebViewExtraHosts(getter: ExtraHostsGetter | null): void;
 
-export { AdasChatScreen, type AdasChatScreenProps, type CallState, ChatInput, type ClipboardProvider, DaySeparator, EmbeddedPluginWebView, type HandoffExchangeDeps, HandoffScreen, type HandoffScreenProps, type InviteJoinDeps, JobProgressBar, JoinScreen, type JoinScreenProps, Lightbox, LoginScreen, type LoginScreenProps, MessageBubble, type OAuthGoogleConfig, type OAuthProvider, type OpenJoinDeps, OpenJoinScreen, type OpenJoinScreenProps, Plugin, PluginSurface, type ProviderSignInDeps, TableCardBlock, TenantPicker, type TenantPickerProps, type TranscriptEntry, TypingIndicator, type UIActionRoute, UIActionsRow, VoiceCallSheet, VoiceMicIndicator, VoiceSessionHost, WidgetHost, WidgetWebView, WorkspaceBanner, type WorkspaceBannerProps, buildPluginBridgeJS, completeInviteJoin, completeOpenJoin, completeProviderSignIn, googleClientIds, handoffErrorMessage, inviteHeadline, openJoinErrorMessage, openWidget, runHandoffExchange, setClipboardProvider, setOAuthProvider, setPluginWebViewExtraHosts, setUIActionNavigator, shouldRecoverToDefaultTenant, useLightboxStore, usePluginBridge, useVoiceCall, useWidgetHostStore, voiceSession };
+export { AdasChatScreen, type AdasChatScreenProps, type CallState, ChatInput, type ClipboardProvider, DaySeparator, EmbeddedPluginWebView, type HandoffExchangeDeps, HandoffScreen, type HandoffScreenProps, type InviteJoinDeps, JobProgressBar, JoinScreen, type JoinScreenProps, Lightbox, LoginScreen, type LoginScreenProps, MessageBubble, type OAuthGoogleConfig, type OAuthProvider, type OpenJoinDeps, OpenJoinScreen, type OpenJoinScreenProps, Plugin, PluginSurface, type ProviderSignInDeps, TableCardBlock, TenantPicker, type TenantPickerProps, type TranscriptEntry, TypingIndicator, type UIActionRoute, UIActionsRow, VoiceCallSheet, VoiceMicIndicator, VoiceSessionHost, WidgetHost, WidgetWebView, WorkspaceBanner, type WorkspaceBannerProps, buildPluginBridgeJS, completeInviteJoin, completeOpenJoin, completeProviderSignIn, googleClientIds, handoffErrorMessage, inviteHeadline, isConsumerDisabled, openJoinErrorMessage, openWidget, runHandoffExchange, setClipboardProvider, setOAuthProvider, setPluginWebViewExtraHosts, setUIActionNavigator, useLightboxStore, usePluginBridge, useVoiceCall, useWidgetHostStore, voiceSession };

package/dist/index.d.ts

@@ -3,7 +3,7 @@ import { Message, JobProgress, UIAction, AdasSession, TenantMembership, HandoffE
 import * as React$1 from 'react';
 import React__default, { ReactNode } from 'react';
 import * as _ateam_ai_mobile_plugin_runtime from '@ateam-ai-mobile/plugin-runtime';
-import { PluginSurfaceMeta, PlatformPluginManifest, VoiceState, VoiceTranscriptEntry, VoiceSessionProvider, VoicePersona, VoiceStartOptions, VoiceCaller, VoiceSnapshot, VoiceEvent, VoiceSubscription } from '@ateam-ai-mobile/plugin-runtime';
+import { PluginSurfaceMeta, PlatformPluginManifest, VoiceState, VoiceTranscriptEntry, VoiceSessionProvider, VoiceDeviceToolCall, VoicePersona, VoiceStartOptions, VoiceCaller, VoiceSnapshot, VoiceEvent, VoiceSubscription } from '@ateam-ai-mobile/plugin-runtime';
 import * as zustand from 'zustand';
 
 interface AdasChatScreenProps {
@@ -184,12 +184,6 @@ declare function WorkspaceBanner({ topInset }: WorkspaceBannerProps): react_jsx_
 interface HandoffScreenProps {
     /** The one-time handoff code the host captured from the deep link (null = nothing pending). */
     code: string | null;
-    /**
-     * Adopt the handed-off tenant. AWAITED before onSignedIn so the host's active
-     * tenant is set before the session reads it (the exchange result carries the
-     * tenant the code was bound to). No-op is fine when the result has no tenant.
-     */
-    onAdoptTenant: (tenant: string) => void | Promise<void>;
     /** Adopt the session JWT (host wires its authStore.login → core session + tenantConfirmed). */
     onSignedIn: (jwt: string) => void | Promise<void>;
     /** Clear the consumed single-use code so a relaunch never retries it. Called after success. */
@@ -197,32 +191,30 @@ interface HandoffScreenProps {
     /** Back to sign in — the host toggles the pre-auth phase (not a router). */
     onCancel: () => void;
 }
-declare function HandoffScreen({ code, onAdoptTenant, onSignedIn, onDone, onCancel }: HandoffScreenProps): react_jsx_runtime.JSX.Element;
+declare function HandoffScreen({ code, onSignedIn, onDone, onCancel }: HandoffScreenProps): react_jsx_runtime.JSX.Element;
 
 /**
  * Handoff exchange — the pure, testable half of HandoffScreen (R9B).
  *
  * Kept JSX-free in its own module (like R6's runLogoutTeardown) so the
- * security-sensitive error mapper and the adopt-before-sign-in ORDERING can be
+ * security-sensitive error mapper and the sign-in-before-clear ORDERING can be
  * node-tested directly, without rendering the RN component.
  */
 
 interface HandoffExchangeDeps {
     /** Trade the one-time code for a session JWT (host injects core.exchangeHandoff). */
     exchange: (code: string) => Promise<HandoffExchangeResult>;
-    /** Adopt the handed-off tenant (host's single tenant writer). */
-    onAdoptTenant: (tenant: string) => void | Promise<void>;
     /** Adopt the session JWT. */
     onSignedIn: (jwt: string) => void | Promise<void>;
     /** Clear the consumed single-use code. */
     onDone: () => void;
 }
 /**
- * Run the handoff: exchange → (adopt tenant) → sign in → clear the code, in that
- * exact order. The tenant adoption is AWAITED BEFORE onSignedIn so the host's
- * active tenant is set before the session reads it — a cross-tenant handoff must
- * never sign in under the wrong tenant. Throws on any failure (the caller maps it
- * to a user-facing message); onSignedIn / onDone never run on the error path.
+ * Run the handoff: exchange → sign in → clear the code, in that exact order. The
+ * handed-off tenant is the JWT's own `tenant` claim (getTenant() reads it), so a
+ * cross-tenant handoff is scoped correctly with nothing for the host to store.
+ * Throws on any failure (the caller maps it to a user-facing message);
+ * onSignedIn / onDone never run on the error path.
  */
 declare function runHandoffExchange(code: string, deps: HandoffExchangeDeps): Promise<void>;
 /**
@@ -236,19 +228,17 @@ declare function runHandoffExchange(code: string, deps: HandoffExchangeDeps): Pr
 declare function handoffErrorMessage(msg?: string): string;
 
 interface OpenJoinScreenProps {
-    /** Adopt the joined tenant (host's single ACTIVE_TENANT writer), awaited before sign-in. */
-    onAdoptTenant: (tenant: string) => void | Promise<void>;
     /** Adopt the session JWT (host: authStore.login → core session + tenantConfirmed). */
     onSignedIn: (jwt: string) => void | Promise<void>;
     /** Back to sign in — the host toggles the pre-auth phase (not a router). */
     onBack: () => void;
 }
-declare function OpenJoinScreen({ onAdoptTenant, onSignedIn, onBack }: OpenJoinScreenProps): react_jsx_runtime.JSX.Element;
+declare function OpenJoinScreen({ onSignedIn, onBack }: OpenJoinScreenProps): react_jsx_runtime.JSX.Element;
 
 /**
  * Open self-signup — the pure, testable half of OpenJoinScreen (R9B).
  *
- * JSX-free so the join ORDERING (join → adopt tenant → sign in) and the error
+ * JSX-free so the join ORDERING (join → sign in) and the error
  * mapper are node-testable without rendering. The native id_token acquisition
  * happens in the component via getOAuthProvider(); the acquired token is passed
  * in here, so this module stays pure and provider-free.
@@ -257,8 +247,6 @@ declare function OpenJoinScreen({ onAdoptTenant, onSignedIn, onBack }: OpenJoinS
 interface OpenJoinDeps {
     /** Exchange { tenant, id_token } for a session JWT (host injects core.openJoinWith*). */
     join: (slug: string, idToken: string) => Promise<ConsumerSignInResult>;
-    /** Adopt the joined tenant (host's single ACTIVE_TENANT writer). */
-    onAdoptTenant: (tenant: string) => void | Promise<void>;
     /** Adopt the session JWT. */
     onSignedIn: (jwt: string) => void | Promise<void>;
 }
@@ -267,10 +255,10 @@ interface OpenJoinDeps {
  *
  * Returns false WITHOUT side effects when idToken is null — the caller acquired
  * no token (the user cancelled the native sheet, or it returned none), which is
- * a silent no-op, never an error. Otherwise: join → adopt the joined tenant →
- * sign in, in that order (the tenant is adopted only AFTER the server confirms
- * the join, and BEFORE sign-in so the session reads the right tenant). Throws on
- * a join failure (the caller maps it to a message); sign-in never runs then.
+ * a silent no-op, never an error. Otherwise: join → sign in. The joined tenant
+ * is the returned JWT's own `tenant` claim (getTenant() reads it), so there is
+ * nothing for the host to store. Throws on a join failure (the caller maps it to
+ * a message); sign-in never runs then.
  */
 declare function completeOpenJoin(slug: string, idToken: string | null, deps: OpenJoinDeps): Promise<boolean>;
 /**
@@ -322,18 +310,19 @@ declare function completeInviteJoin(code: string, idToken: string | null, deps:
 declare function inviteHeadline(preview: InvitePreview | null): string;
 
 interface LoginScreenProps {
-    /** The reactive pre-auth tenant pick (host: useSession().tenant). Re-fetches config on change. */
+    /** The reactive pre-auth team (host: useSession().tenant). Re-fetches config on change.
+     *  '' → the screen asks for the team. */
     activeTenant: string;
-    /** The fallback tenant for the consumer-disabled self-heal guard (host: DEFAULT_TENANT). */
-    defaultTenant: string;
-    /** Reset to the default tenant + persist + bump activeTenant so this screen refetches. */
+    /** The user named a team to sign in to: the host stores it as its signed-out pick. */
+    onPickTenant: (tenant: string) => void | Promise<void>;
+    /** The team has no consumer sign-in: the host clears its pick (the screen asks for another). */
     onConsumerDisabled: () => void | Promise<void>;
     /** Adopt the session JWT (host: authStore.login → core session + tenantConfirmed). */
     onSignedIn: (jwt: string) => void | Promise<void>;
     /** Open the host's "join a team by name" (OpenJoin) sub-view. Link hidden when omitted. */
     onJoinTeam?: () => void;
 }
-declare function LoginScreen({ activeTenant, defaultTenant, onConsumerDisabled, onSignedIn, onJoinTeam }: LoginScreenProps): react_jsx_runtime.JSX.Element;
+declare function LoginScreen({ activeTenant, onPickTenant, onConsumerDisabled, onSignedIn, onJoinTeam }: LoginScreenProps): react_jsx_runtime.JSX.Element;
 
 /**
  * Login — the pure, testable half of LoginScreen (R9B).
@@ -353,12 +342,11 @@ declare function googleClientIds(config: ConsumerCapabilityConfig): {
     iosClientId: string;
 };
 /**
- * Whether a failed config fetch should self-heal by falling back to the default
- * tenant. A consumer-DISABLED tenant 404s with "capability not enabled"; rather
- * than dead-end the user on red text we coerce back to the default and refetch.
- * Guarded by currentTenant !== defaultTenant so we never loop on the default.
+ * Whether a failed config fetch means the picked tenant has no consumer sign-in
+ * ("capability not enabled" 404). The host then clears its pick and shows its
+ * team picker — it never falls back to a default tenant.
  */
-declare function shouldRecoverToDefaultTenant(errorMsg: string | undefined, currentTenant: string, defaultTenant: string): boolean;
+declare function isConsumerDisabled(errorMsg: string | undefined): boolean;
 interface ProviderSignInDeps {
     /** Trade the provider id_token for a session JWT (host injects core.signInWith*). */
     exchange: (idToken: string) => Promise<ConsumerSignInResult>;
@@ -382,6 +370,13 @@ declare function VoiceCallSheet({ visible, onClose, skillSlug }: Props): react_j
 
 type CallState = VoiceState;
 type TranscriptEntry = VoiceTranscriptEntry;
+/** A finished call, tagged with the session owner's pluginId when the tool is
+ *  that plugin's own; null when it is not (another solution's tool, the
+ *  platform's, an unregistered name, no name) — then only the platform sees it. */
+interface DeviceToolRecord {
+    owner: string | null;
+    call: VoiceDeviceToolCall;
+}
 interface InternalState {
     callState: CallState;
     sessionId: string | null;
@@ -394,11 +389,11 @@ interface InternalState {
     userSpeaking: boolean;
     /** Epoch ms of the last speaking:false, or null before the first utterance. */
     lastUserSpeechEndedAt: number | null;
-    /** The last device-tool call the model made (name + when), or null. */
-    lastDeviceTool: {
-        name: string;
-        at: number;
-    } | null;
+    /** This session's finished device-tool calls: the LATEST per owner tag (see
+     *  DeviceToolRecord), in the order they finished. The platform reads the last
+     *  one; the owning plugin reads its own (lastDeviceToolFor) — one store, both
+     *  views derived from it. */
+    deviceToolCalls: DeviceToolRecord[];
     /** The WebView should be mounted (a session is wanted / live). */
     mounted: boolean;
     /** The WebView source, computed ONCE at start() so state changes (transcript,
@@ -461,6 +456,11 @@ declare class VoiceSessionManager implements VoiceSessionProvider {
      *  and the bundleManager registers a plugin's tools under that same id (never
      *  the bundle's own short `id`), so exact equality is the whole check. */
     private toolScope;
+    /** Bumped whenever a session begins or ends. A device-tool call remembers the
+     *  epoch it arrived in, and its outcome is recorded only if that session is
+     *  still the current one — a tool that finishes after hang-up (or after a new
+     *  call started) must not show up as the new session's last call. */
+    private sessionEpoch;
     /** The platform (built-in sheet, mic indicator, session host) sees and
      *  controls any session — it is the user's own surface. A plugin caller may
      *  only touch a session it owns. */
@@ -486,13 +486,30 @@ declare class VoiceSessionManager implements VoiceSessionProvider {
      */
     observe(text: string, caller?: VoiceCaller): void;
     getSnapshot(caller?: VoiceCaller): VoiceSnapshot;
+    /** The snapshot for a caller that may access the session. Everything is the
+     *  session's, except `lastDeviceTool`, which is scoped to the caller's tools. */
     private realSnapshot;
+    /**
+     * The last finished device-tool call THIS caller may see. The platform (the
+     * user's own surface) sees every call. A plugin sees only calls to tools it
+     * registered — even on a session it owns, the model can call another
+     * solution's tool (a normal call offers every registered tool), and that
+     * tool's name and error are not this plugin's to read.
+     */
+    private lastDeviceToolFor;
     private foreignSnapshot;
     subscribe(cb: (event: VoiceEvent) => void, caller?: VoiceCaller): VoiceSubscription;
     transcript(caller?: VoiceCaller): TranscriptEntry[];
     private buildUri;
     /** Handle a postMessage from the WebView. `event` is the RN WebView event. */
     handleMessage(event: any): void;
+    /**
+     * One device-tool call, arrival to outcome: validate → authorize → run. The
+     * answer goes back to the mini-app (the model reads it) AND becomes
+     * `lastDeviceTool` — the same object, recorded only once it is known, so a
+     * refused call never looks like one that ran.
+     */
+    private handleDeviceToolCall;
     /**
      * Final authorization = Core's frozen allowset ∩ the current valid local
      * registry, bound to the ACTIVE session. All must hold:
@@ -506,15 +523,14 @@ declare class VoiceSessionManager implements VoiceSessionProvider {
      * No fallback to the live registry alone, ever.
      */
     private isToolAuthorized;
-    /** Tell the mini-app the call was refused — a stated reason, never a silent drop.
-     *  `notReady` distinguishes a transient "allowset not here yet" (retry) from a
-     *  final "not allowed in this session". */
-    private postDeviceToolRefusal;
+    /** Answer the mini-app's pending device-tool request (a call's outcome, or the
+     *  tool list) — it resolves the request with this payload by correlationId. */
+    private postDeviceToolResult;
     /** PROPOSE the phone's available tools — this is an offer to Core, not the
      *  authorization set. Core sanitizes it and returns the accepted set in a
      *  `deviceToolAllowset` message, which is what actually gates execution. */
     private sendDeviceToolList;
-    /** Run a device tool and post the outcome back into the WebView. */
+    /** Run an authorized device tool. Never throws: every failure is an answer. */
     private runDeviceTool;
     private setState;
     private appendTranscript;
@@ -594,4 +610,4 @@ declare function setUIActionNavigator(navigate: UIActionNavigator | null): void;
 type ExtraHostsGetter = () => string[];
 declare function setPluginWebViewExtraHosts(getter: ExtraHostsGetter | null): void;
 
-export { AdasChatScreen, type AdasChatScreenProps, type CallState, ChatInput, type ClipboardProvider, DaySeparator, EmbeddedPluginWebView, type HandoffExchangeDeps, HandoffScreen, type HandoffScreenProps, type InviteJoinDeps, JobProgressBar, JoinScreen, type JoinScreenProps, Lightbox, LoginScreen, type LoginScreenProps, MessageBubble, type OAuthGoogleConfig, type OAuthProvider, type OpenJoinDeps, OpenJoinScreen, type OpenJoinScreenProps, Plugin, PluginSurface, type ProviderSignInDeps, TableCardBlock, TenantPicker, type TenantPickerProps, type TranscriptEntry, TypingIndicator, type UIActionRoute, UIActionsRow, VoiceCallSheet, VoiceMicIndicator, VoiceSessionHost, WidgetHost, WidgetWebView, WorkspaceBanner, type WorkspaceBannerProps, buildPluginBridgeJS, completeInviteJoin, completeOpenJoin, completeProviderSignIn, googleClientIds, handoffErrorMessage, inviteHeadline, openJoinErrorMessage, openWidget, runHandoffExchange, setClipboardProvider, setOAuthProvider, setPluginWebViewExtraHosts, setUIActionNavigator, shouldRecoverToDefaultTenant, useLightboxStore, usePluginBridge, useVoiceCall, useWidgetHostStore, voiceSession };
+export { AdasChatScreen, type AdasChatScreenProps, type CallState, ChatInput, type ClipboardProvider, DaySeparator, EmbeddedPluginWebView, type HandoffExchangeDeps, HandoffScreen, type HandoffScreenProps, type InviteJoinDeps, JobProgressBar, JoinScreen, type JoinScreenProps, Lightbox, LoginScreen, type LoginScreenProps, MessageBubble, type OAuthGoogleConfig, type OAuthProvider, type OpenJoinDeps, OpenJoinScreen, type OpenJoinScreenProps, Plugin, PluginSurface, type ProviderSignInDeps, TableCardBlock, TenantPicker, type TenantPickerProps, type TranscriptEntry, TypingIndicator, type UIActionRoute, UIActionsRow, VoiceCallSheet, VoiceMicIndicator, VoiceSessionHost, WidgetHost, WidgetWebView, WorkspaceBanner, type WorkspaceBannerProps, buildPluginBridgeJS, completeInviteJoin, completeOpenJoin, completeProviderSignIn, googleClientIds, handoffErrorMessage, inviteHeadline, isConsumerDisabled, openJoinErrorMessage, openWidget, runHandoffExchange, setClipboardProvider, setOAuthProvider, setPluginWebViewExtraHosts, setUIActionNavigator, useLightboxStore, usePluginBridge, useVoiceCall, useWidgetHostStore, voiceSession };