capacitor-native-agent 0.6.0 → 0.6.1

package/android/src/main/java/uniffi/native_agent_ffi/native_agent_ffi.kt

@@ -900,6 +900,8 @@ internal open class UniffiVTableCallbackInterfaceNativeNotifier(
 
 
 
+
+
 
 
 
@@ -973,6 +975,8 @@ internal interface UniffiLib : Library {
     ): RustBuffer.ByValue
     fun uniffi_native_agent_ffi_fn_method_nativeagenthandle_load_session(`ptr`: Pointer,`sessionKey`: RustBuffer.ByValue,uniffi_out_err: UniffiRustCallStatus, 
     ): RustBuffer.ByValue
+    fun uniffi_native_agent_ffi_fn_method_nativeagenthandle_load_surfaced_messages(`ptr`: Pointer,`limit`: Long,uniffi_out_err: UniffiRustCallStatus, 
+    ): RustBuffer.ByValue
     fun uniffi_native_agent_ffi_fn_method_nativeagenthandle_persist_config(`ptr`: Pointer,uniffi_out_err: UniffiRustCallStatus, 
     ): Unit
     fun uniffi_native_agent_ffi_fn_method_nativeagenthandle_refresh_token(`ptr`: Pointer,`provider`: RustBuffer.ByValue,uniffi_out_err: UniffiRustCallStatus, 
@@ -1191,6 +1195,8 @@ internal interface UniffiLib : Library {
     ): Short
     fun uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_session(
     ): Short
+    fun uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_surfaced_messages(
+    ): Short
     fun uniffi_native_agent_ffi_checksum_method_nativeagenthandle_persist_config(
     ): Short
     fun uniffi_native_agent_ffi_checksum_method_nativeagenthandle_refresh_token(
@@ -1343,6 +1349,9 @@ private fun uniffiCheckApiChecksums(lib: UniffiLib) {
     if (lib.uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_session() != 39832.toShort()) {
         throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
     }
+    if (lib.uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_surfaced_messages() != 38563.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
     if (lib.uniffi_native_agent_ffi_checksum_method_nativeagenthandle_persist_config() != 63110.toShort()) {
         throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
     }
@@ -1889,6 +1898,11 @@ public interface NativeAgentHandleInterface {
      */
     fun `loadSession`(`sessionKey`: kotlin.String): kotlin.String
     
+    /**
+     * Load surfaced messages from background/cron jobs.
+     */
+    fun `loadSurfacedMessages`(`limit`: kotlin.Long): kotlin.String
+    
     fun `persistConfig`()
     
     /**
@@ -2435,6 +2449,22 @@ open class NativeAgentHandle: Disposable, AutoCloseable, NativeAgentHandleInterf
     
 
     
+    /**
+     * Load surfaced messages from background/cron jobs.
+     */
+    @Throws(NativeAgentException::class)override fun `loadSurfacedMessages`(`limit`: kotlin.Long): kotlin.String {
+            return FfiConverterString.lift(
+    callWithPointer {
+    uniffiRustCallWithError(NativeAgentException) { _status ->
+    UniffiLib.INSTANCE.uniffi_native_agent_ffi_fn_method_nativeagenthandle_load_surfaced_messages(
+        it, FfiConverterLong.lower(`limit`),_status)
+}
+    }
+    )
+    }
+    
+
+    
     @Throws(NativeAgentException::class)override fun `persistConfig`()
         = 
     callWithPointer {

package/ios/Frameworks/NativeAgentFFI.xcframework/ios-arm64/Headers/native_agent_ffi/native_agent_ffi.swift

@@ -598,11 +598,21 @@ public protocol NativeAgentHandleProtocol : AnyObject {
      */
     func listSkills() throws  -> String
     
+    /**
+     * List all tool permissions as JSON array.
+     */
+    func listToolPermissions() throws  -> String
+    
     /**
      * Load session message history.
      */
     func loadSession(sessionKey: String) throws  -> String
     
+    /**
+     * Load surfaced messages from background/cron jobs.
+     */
+    func loadSurfacedMessages(limit: Int64) throws  -> String
+    
     func persistConfig() throws 
     
     /**
@@ -620,6 +630,11 @@ public protocol NativeAgentHandleProtocol : AnyObject {
      */
     func removeSkill(id: String) throws 
     
+    /**
+     * Delete all tool permissions (reset to defaults on next seed).
+     */
+    func resetToolPermissions() throws 
+    
     /**
      * Respond to a tool approval request.
      */
@@ -650,6 +665,11 @@ public protocol NativeAgentHandleProtocol : AnyObject {
      */
     func runCronJob(jobId: String) throws 
     
+    /**
+     * Seed tool permissions from defaults. INSERT OR IGNORE preserves user overrides.
+     */
+    func seedToolPermissions(defaultsJson: String) throws  -> UInt32
+    
     /**
      * Send a message to the agent and start an agent loop turn.
      */
@@ -679,6 +699,11 @@ public protocol NativeAgentHandleProtocol : AnyObject {
      */
     func setSchedulerConfig(configJson: String) throws 
     
+    /**
+     * Set a single tool's permission (upsert).
+     */
+    func setToolPermission(toolName: String, permission: String, enabled: Bool) throws 
+    
     /**
      * Start MCP server with given tools.
      */
@@ -971,6 +996,16 @@ open func listSkills()throws  -> String {
     uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_skills(self.uniffiClonePointer(),$0
     )
 })
+}
+    
+    /**
+     * List all tool permissions as JSON array.
+     */
+open func listToolPermissions()throws  -> String {
+    return try  FfiConverterString.lift(try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_tool_permissions(self.uniffiClonePointer(),$0
+    )
+})
 }
     
     /**
@@ -982,6 +1017,17 @@ open func loadSession(sessionKey: String)throws  -> String {
         FfiConverterString.lower(sessionKey),$0
     )
 })
+}
+    
+    /**
+     * Load surfaced messages from background/cron jobs.
+     */
+open func loadSurfacedMessages(limit: Int64)throws  -> String {
+    return try  FfiConverterString.lift(try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_load_surfaced_messages(self.uniffiClonePointer(),
+        FfiConverterInt64.lower(limit),$0
+    )
+})
 }
     
 open func persistConfig()throws  {try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
@@ -1019,6 +1065,15 @@ open func removeSkill(id: String)throws  {try rustCallWithError(FfiConverterType
         FfiConverterString.lower(id),$0
     )
 }
+}
+    
+    /**
+     * Delete all tool permissions (reset to defaults on next seed).
+     */
+open func resetToolPermissions()throws  {try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_reset_tool_permissions(self.uniffiClonePointer(),$0
+    )
+}
 }
     
     /**
@@ -1089,6 +1144,17 @@ open func runCronJob(jobId: String)throws  {try rustCallWithError(FfiConverterTy
         FfiConverterString.lower(jobId),$0
     )
 }
+}
+    
+    /**
+     * Seed tool permissions from defaults. INSERT OR IGNORE preserves user overrides.
+     */
+open func seedToolPermissions(defaultsJson: String)throws  -> UInt32 {
+    return try  FfiConverterUInt32.lift(try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_seed_tool_permissions(self.uniffiClonePointer(),
+        FfiConverterString.lower(defaultsJson),$0
+    )
+})
 }
     
     /**
@@ -1156,6 +1222,18 @@ open func setSchedulerConfig(configJson: String)throws  {try rustCallWithError(F
         FfiConverterString.lower(configJson),$0
     )
 }
+}
+    
+    /**
+     * Set a single tool's permission (upsert).
+     */
+open func setToolPermission(toolName: String, permission: String, enabled: Bool)throws  {try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_tool_permission(self.uniffiClonePointer(),
+        FfiConverterString.lower(toolName),
+        FfiConverterString.lower(permission),
+        FfiConverterBool.lower(enabled),$0
+    )
+}
 }
     
     /**
@@ -1609,13 +1687,20 @@ public struct SendMessageParams {
      * JSON-encoded list of allowed tool names. Empty = all tools.
      */
     public var allowedToolsJson: String?
+    /**
+     * JSON-encoded prior conversation messages for multi-turn sessions.
+     */
+    public var priorMessagesJson: String?
 
     // Default memberwise initializers are never public by default, so we
     // declare one manually.
     public init(prompt: String, sessionKey: String, model: String?, provider: String?, systemPrompt: String, maxTurns: UInt32?, 
         /**
          * JSON-encoded list of allowed tool names. Empty = all tools.
-         */allowedToolsJson: String?) {
+         */allowedToolsJson: String?, 
+        /**
+         * JSON-encoded prior conversation messages for multi-turn sessions.
+         */priorMessagesJson: String?) {
         self.prompt = prompt
         self.sessionKey = sessionKey
         self.model = model
@@ -1623,6 +1708,7 @@ public struct SendMessageParams {
         self.systemPrompt = systemPrompt
         self.maxTurns = maxTurns
         self.allowedToolsJson = allowedToolsJson
+        self.priorMessagesJson = priorMessagesJson
     }
 }
 
@@ -1651,6 +1737,9 @@ extension SendMessageParams: Equatable, Hashable {
         if lhs.allowedToolsJson != rhs.allowedToolsJson {
             return false
         }
+        if lhs.priorMessagesJson != rhs.priorMessagesJson {
+            return false
+        }
         return true
     }
 
@@ -1662,6 +1751,7 @@ extension SendMessageParams: Equatable, Hashable {
         hasher.combine(systemPrompt)
         hasher.combine(maxTurns)
         hasher.combine(allowedToolsJson)
+        hasher.combine(priorMessagesJson)
     }
 }
 
@@ -1679,7 +1769,8 @@ public struct FfiConverterTypeSendMessageParams: FfiConverterRustBuffer {
                 provider: FfiConverterOptionString.read(from: &buf), 
                 systemPrompt: FfiConverterString.read(from: &buf), 
                 maxTurns: FfiConverterOptionUInt32.read(from: &buf), 
-                allowedToolsJson: FfiConverterOptionString.read(from: &buf)
+                allowedToolsJson: FfiConverterOptionString.read(from: &buf), 
+                priorMessagesJson: FfiConverterOptionString.read(from: &buf)
         )
     }
 
@@ -1691,6 +1782,7 @@ public struct FfiConverterTypeSendMessageParams: FfiConverterRustBuffer {
         FfiConverterString.write(value.systemPrompt, into: &buf)
         FfiConverterOptionUInt32.write(value.maxTurns, into: &buf)
         FfiConverterOptionString.write(value.allowedToolsJson, into: &buf)
+        FfiConverterOptionString.write(value.priorMessagesJson, into: &buf)
     }
 }
 
@@ -2480,9 +2572,15 @@ private var initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_skills() != 14677) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_tool_permissions() != 48713) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_session() != 39832) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_surfaced_messages() != 38563) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_persist_config() != 63110) {
         return InitializationResult.apiChecksumMismatch
     }
@@ -2495,6 +2593,9 @@ private var initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_remove_skill() != 49129) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_reset_tool_permissions() != 15060) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_respond_to_approval() != 3194) {
         return InitializationResult.apiChecksumMismatch
     }
@@ -2513,6 +2614,9 @@ private var initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_run_cron_job() != 11263) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_seed_tool_permissions() != 39225) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_send_message() != 53296) {
         return InitializationResult.apiChecksumMismatch
     }
@@ -2534,6 +2638,9 @@ private var initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_scheduler_config() != 18609) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_tool_permission() != 8407) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_start_mcp() != 53972) {
         return InitializationResult.apiChecksumMismatch
     }

package/ios/Frameworks/NativeAgentFFI.xcframework/ios-arm64/Headers/native_agent_ffi/native_agent_ffiFFI.h

@@ -438,11 +438,21 @@ RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_sessions(voi
 RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_skills(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LIST_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LIST_TOOL_PERMISSIONS
+RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_tool_permissions(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LOAD_SESSION
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LOAD_SESSION
 RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_load_session(void*_Nonnull ptr, RustBuffer session_key, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LOAD_SURFACED_MESSAGES
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LOAD_SURFACED_MESSAGES
+RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_load_surfaced_messages(void*_Nonnull ptr, int64_t limit, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_PERSIST_CONFIG
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_PERSIST_CONFIG
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_persist_config(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
@@ -463,6 +473,11 @@ void uniffi_native_agent_ffi_fn_method_nativeagenthandle_remove_cron_job(void*_N
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_remove_skill(void*_Nonnull ptr, RustBuffer id, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_RESET_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_RESET_TOOL_PERMISSIONS
+void uniffi_native_agent_ffi_fn_method_nativeagenthandle_reset_tool_permissions(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_RESPOND_TO_APPROVAL
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_RESPOND_TO_APPROVAL
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_respond_to_approval(void*_Nonnull ptr, RustBuffer tool_call_id, int8_t approved, RustBuffer reason, RustCallStatus *_Nonnull out_status
@@ -493,6 +508,11 @@ void uniffi_native_agent_ffi_fn_method_nativeagenthandle_resume_session(void*_No
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_run_cron_job(void*_Nonnull ptr, RustBuffer job_id, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SEED_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SEED_TOOL_PERMISSIONS
+uint32_t uniffi_native_agent_ffi_fn_method_nativeagenthandle_seed_tool_permissions(void*_Nonnull ptr, RustBuffer defaults_json, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SEND_MESSAGE
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SEND_MESSAGE
 RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_send_message(void*_Nonnull ptr, RustBuffer params, RustCallStatus *_Nonnull out_status
@@ -528,6 +548,11 @@ void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_notifier(void*_Nonn
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_scheduler_config(void*_Nonnull ptr, RustBuffer config_json, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_TOOL_PERMISSION
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_TOOL_PERMISSION
+void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_tool_permission(void*_Nonnull ptr, RustBuffer tool_name, RustBuffer permission, int8_t enabled, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_START_MCP
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_START_MCP
 uint32_t uniffi_native_agent_ffi_fn_method_nativeagenthandle_start_mcp(void*_Nonnull ptr, RustBuffer tools_json, RustCallStatus *_Nonnull out_status
@@ -982,12 +1007,24 @@ uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_sessions
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LIST_SKILLS
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_skills(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LIST_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LIST_TOOL_PERMISSIONS
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_tool_permissions(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LOAD_SESSION
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LOAD_SESSION
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_session(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LOAD_SURFACED_MESSAGES
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LOAD_SURFACED_MESSAGES
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_surfaced_messages(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_PERSIST_CONFIG
@@ -1012,6 +1049,12 @@ uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_remove_cron_j
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_REMOVE_SKILL
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_remove_skill(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_RESET_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_RESET_TOOL_PERMISSIONS
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_reset_tool_permissions(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_RESPOND_TO_APPROVAL
@@ -1048,6 +1091,12 @@ uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_resume_sessio
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_RUN_CRON_JOB
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_run_cron_job(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SEED_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SEED_TOOL_PERMISSIONS
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_seed_tool_permissions(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SEND_MESSAGE
@@ -1090,6 +1139,12 @@ uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_notifier(
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SET_SCHEDULER_CONFIG
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_scheduler_config(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SET_TOOL_PERMISSION
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SET_TOOL_PERMISSION
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_tool_permission(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_START_MCP

package/ios/Frameworks/NativeAgentFFI.xcframework/ios-arm64-simulator/Headers/native_agent_ffi/native_agent_ffi.swift

@@ -598,11 +598,21 @@ public protocol NativeAgentHandleProtocol : AnyObject {
      */
     func listSkills() throws  -> String
     
+    /**
+     * List all tool permissions as JSON array.
+     */
+    func listToolPermissions() throws  -> String
+    
     /**
      * Load session message history.
      */
     func loadSession(sessionKey: String) throws  -> String
     
+    /**
+     * Load surfaced messages from background/cron jobs.
+     */
+    func loadSurfacedMessages(limit: Int64) throws  -> String
+    
     func persistConfig() throws 
     
     /**
@@ -620,6 +630,11 @@ public protocol NativeAgentHandleProtocol : AnyObject {
      */
     func removeSkill(id: String) throws 
     
+    /**
+     * Delete all tool permissions (reset to defaults on next seed).
+     */
+    func resetToolPermissions() throws 
+    
     /**
      * Respond to a tool approval request.
      */
@@ -650,6 +665,11 @@ public protocol NativeAgentHandleProtocol : AnyObject {
      */
     func runCronJob(jobId: String) throws 
     
+    /**
+     * Seed tool permissions from defaults. INSERT OR IGNORE preserves user overrides.
+     */
+    func seedToolPermissions(defaultsJson: String) throws  -> UInt32
+    
     /**
      * Send a message to the agent and start an agent loop turn.
      */
@@ -679,6 +699,11 @@ public protocol NativeAgentHandleProtocol : AnyObject {
      */
     func setSchedulerConfig(configJson: String) throws 
     
+    /**
+     * Set a single tool's permission (upsert).
+     */
+    func setToolPermission(toolName: String, permission: String, enabled: Bool) throws 
+    
     /**
      * Start MCP server with given tools.
      */
@@ -971,6 +996,16 @@ open func listSkills()throws  -> String {
     uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_skills(self.uniffiClonePointer(),$0
     )
 })
+}
+    
+    /**
+     * List all tool permissions as JSON array.
+     */
+open func listToolPermissions()throws  -> String {
+    return try  FfiConverterString.lift(try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_tool_permissions(self.uniffiClonePointer(),$0
+    )
+})
 }
     
     /**
@@ -982,6 +1017,17 @@ open func loadSession(sessionKey: String)throws  -> String {
         FfiConverterString.lower(sessionKey),$0
     )
 })
+}
+    
+    /**
+     * Load surfaced messages from background/cron jobs.
+     */
+open func loadSurfacedMessages(limit: Int64)throws  -> String {
+    return try  FfiConverterString.lift(try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_load_surfaced_messages(self.uniffiClonePointer(),
+        FfiConverterInt64.lower(limit),$0
+    )
+})
 }
     
 open func persistConfig()throws  {try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
@@ -1019,6 +1065,15 @@ open func removeSkill(id: String)throws  {try rustCallWithError(FfiConverterType
         FfiConverterString.lower(id),$0
     )
 }
+}
+    
+    /**
+     * Delete all tool permissions (reset to defaults on next seed).
+     */
+open func resetToolPermissions()throws  {try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_reset_tool_permissions(self.uniffiClonePointer(),$0
+    )
+}
 }
     
     /**
@@ -1089,6 +1144,17 @@ open func runCronJob(jobId: String)throws  {try rustCallWithError(FfiConverterTy
         FfiConverterString.lower(jobId),$0
     )
 }
+}
+    
+    /**
+     * Seed tool permissions from defaults. INSERT OR IGNORE preserves user overrides.
+     */
+open func seedToolPermissions(defaultsJson: String)throws  -> UInt32 {
+    return try  FfiConverterUInt32.lift(try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_seed_tool_permissions(self.uniffiClonePointer(),
+        FfiConverterString.lower(defaultsJson),$0
+    )
+})
 }
     
     /**
@@ -1156,6 +1222,18 @@ open func setSchedulerConfig(configJson: String)throws  {try rustCallWithError(F
         FfiConverterString.lower(configJson),$0
     )
 }
+}
+    
+    /**
+     * Set a single tool's permission (upsert).
+     */
+open func setToolPermission(toolName: String, permission: String, enabled: Bool)throws  {try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_tool_permission(self.uniffiClonePointer(),
+        FfiConverterString.lower(toolName),
+        FfiConverterString.lower(permission),
+        FfiConverterBool.lower(enabled),$0
+    )
+}
 }
     
     /**
@@ -1609,13 +1687,20 @@ public struct SendMessageParams {
      * JSON-encoded list of allowed tool names. Empty = all tools.
      */
     public var allowedToolsJson: String?
+    /**
+     * JSON-encoded prior conversation messages for multi-turn sessions.
+     */
+    public var priorMessagesJson: String?
 
     // Default memberwise initializers are never public by default, so we
     // declare one manually.
     public init(prompt: String, sessionKey: String, model: String?, provider: String?, systemPrompt: String, maxTurns: UInt32?, 
         /**
          * JSON-encoded list of allowed tool names. Empty = all tools.
-         */allowedToolsJson: String?) {
+         */allowedToolsJson: String?, 
+        /**
+         * JSON-encoded prior conversation messages for multi-turn sessions.
+         */priorMessagesJson: String?) {
         self.prompt = prompt
         self.sessionKey = sessionKey
         self.model = model
@@ -1623,6 +1708,7 @@ public struct SendMessageParams {
         self.systemPrompt = systemPrompt
         self.maxTurns = maxTurns
         self.allowedToolsJson = allowedToolsJson
+        self.priorMessagesJson = priorMessagesJson
     }
 }
 
@@ -1651,6 +1737,9 @@ extension SendMessageParams: Equatable, Hashable {
         if lhs.allowedToolsJson != rhs.allowedToolsJson {
             return false
         }
+        if lhs.priorMessagesJson != rhs.priorMessagesJson {
+            return false
+        }
         return true
     }
 
@@ -1662,6 +1751,7 @@ extension SendMessageParams: Equatable, Hashable {
         hasher.combine(systemPrompt)
         hasher.combine(maxTurns)
         hasher.combine(allowedToolsJson)
+        hasher.combine(priorMessagesJson)
     }
 }
 
@@ -1679,7 +1769,8 @@ public struct FfiConverterTypeSendMessageParams: FfiConverterRustBuffer {
                 provider: FfiConverterOptionString.read(from: &buf), 
                 systemPrompt: FfiConverterString.read(from: &buf), 
                 maxTurns: FfiConverterOptionUInt32.read(from: &buf), 
-                allowedToolsJson: FfiConverterOptionString.read(from: &buf)
+                allowedToolsJson: FfiConverterOptionString.read(from: &buf), 
+                priorMessagesJson: FfiConverterOptionString.read(from: &buf)
         )
     }
 
@@ -1691,6 +1782,7 @@ public struct FfiConverterTypeSendMessageParams: FfiConverterRustBuffer {
         FfiConverterString.write(value.systemPrompt, into: &buf)
         FfiConverterOptionUInt32.write(value.maxTurns, into: &buf)
         FfiConverterOptionString.write(value.allowedToolsJson, into: &buf)
+        FfiConverterOptionString.write(value.priorMessagesJson, into: &buf)
     }
 }
 
@@ -2480,9 +2572,15 @@ private var initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_skills() != 14677) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_tool_permissions() != 48713) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_session() != 39832) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_surfaced_messages() != 38563) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_persist_config() != 63110) {
         return InitializationResult.apiChecksumMismatch
     }
@@ -2495,6 +2593,9 @@ private var initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_remove_skill() != 49129) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_reset_tool_permissions() != 15060) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_respond_to_approval() != 3194) {
         return InitializationResult.apiChecksumMismatch
     }
@@ -2513,6 +2614,9 @@ private var initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_run_cron_job() != 11263) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_seed_tool_permissions() != 39225) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_send_message() != 53296) {
         return InitializationResult.apiChecksumMismatch
     }
@@ -2534,6 +2638,9 @@ private var initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_scheduler_config() != 18609) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_tool_permission() != 8407) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_start_mcp() != 53972) {
         return InitializationResult.apiChecksumMismatch
     }

package/ios/Frameworks/NativeAgentFFI.xcframework/ios-arm64-simulator/Headers/native_agent_ffi/native_agent_ffiFFI.h

@@ -438,11 +438,21 @@ RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_sessions(voi
 RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_skills(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LIST_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LIST_TOOL_PERMISSIONS
+RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_tool_permissions(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LOAD_SESSION
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LOAD_SESSION
 RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_load_session(void*_Nonnull ptr, RustBuffer session_key, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LOAD_SURFACED_MESSAGES
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LOAD_SURFACED_MESSAGES
+RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_load_surfaced_messages(void*_Nonnull ptr, int64_t limit, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_PERSIST_CONFIG
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_PERSIST_CONFIG
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_persist_config(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
@@ -463,6 +473,11 @@ void uniffi_native_agent_ffi_fn_method_nativeagenthandle_remove_cron_job(void*_N
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_remove_skill(void*_Nonnull ptr, RustBuffer id, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_RESET_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_RESET_TOOL_PERMISSIONS
+void uniffi_native_agent_ffi_fn_method_nativeagenthandle_reset_tool_permissions(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_RESPOND_TO_APPROVAL
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_RESPOND_TO_APPROVAL
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_respond_to_approval(void*_Nonnull ptr, RustBuffer tool_call_id, int8_t approved, RustBuffer reason, RustCallStatus *_Nonnull out_status
@@ -493,6 +508,11 @@ void uniffi_native_agent_ffi_fn_method_nativeagenthandle_resume_session(void*_No
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_run_cron_job(void*_Nonnull ptr, RustBuffer job_id, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SEED_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SEED_TOOL_PERMISSIONS
+uint32_t uniffi_native_agent_ffi_fn_method_nativeagenthandle_seed_tool_permissions(void*_Nonnull ptr, RustBuffer defaults_json, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SEND_MESSAGE
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SEND_MESSAGE
 RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_send_message(void*_Nonnull ptr, RustBuffer params, RustCallStatus *_Nonnull out_status
@@ -528,6 +548,11 @@ void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_notifier(void*_Nonn
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_scheduler_config(void*_Nonnull ptr, RustBuffer config_json, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_TOOL_PERMISSION
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_TOOL_PERMISSION
+void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_tool_permission(void*_Nonnull ptr, RustBuffer tool_name, RustBuffer permission, int8_t enabled, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_START_MCP
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_START_MCP
 uint32_t uniffi_native_agent_ffi_fn_method_nativeagenthandle_start_mcp(void*_Nonnull ptr, RustBuffer tools_json, RustCallStatus *_Nonnull out_status
@@ -982,12 +1007,24 @@ uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_sessions
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LIST_SKILLS
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_skills(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LIST_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LIST_TOOL_PERMISSIONS
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_tool_permissions(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LOAD_SESSION
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LOAD_SESSION
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_session(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LOAD_SURFACED_MESSAGES
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LOAD_SURFACED_MESSAGES
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_surfaced_messages(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_PERSIST_CONFIG
@@ -1012,6 +1049,12 @@ uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_remove_cron_j
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_REMOVE_SKILL
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_remove_skill(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_RESET_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_RESET_TOOL_PERMISSIONS
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_reset_tool_permissions(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_RESPOND_TO_APPROVAL
@@ -1048,6 +1091,12 @@ uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_resume_sessio
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_RUN_CRON_JOB
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_run_cron_job(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SEED_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SEED_TOOL_PERMISSIONS
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_seed_tool_permissions(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SEND_MESSAGE
@@ -1090,6 +1139,12 @@ uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_notifier(
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SET_SCHEDULER_CONFIG
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_scheduler_config(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SET_TOOL_PERMISSION
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SET_TOOL_PERMISSION
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_tool_permission(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_START_MCP

package/ios/Sources/NativeAgentPlugin/Generated/native_agent_ffi.swift

@@ -598,11 +598,21 @@ public protocol NativeAgentHandleProtocol : AnyObject {
      */
     func listSkills() throws  -> String
     
+    /**
+     * List all tool permissions as JSON array.
+     */
+    func listToolPermissions() throws  -> String
+    
     /**
      * Load session message history.
      */
     func loadSession(sessionKey: String) throws  -> String
     
+    /**
+     * Load surfaced messages from background/cron jobs.
+     */
+    func loadSurfacedMessages(limit: Int64) throws  -> String
+    
     func persistConfig() throws 
     
     /**
@@ -620,6 +630,11 @@ public protocol NativeAgentHandleProtocol : AnyObject {
      */
     func removeSkill(id: String) throws 
     
+    /**
+     * Delete all tool permissions (reset to defaults on next seed).
+     */
+    func resetToolPermissions() throws 
+    
     /**
      * Respond to a tool approval request.
      */
@@ -650,6 +665,11 @@ public protocol NativeAgentHandleProtocol : AnyObject {
      */
     func runCronJob(jobId: String) throws 
     
+    /**
+     * Seed tool permissions from defaults. INSERT OR IGNORE preserves user overrides.
+     */
+    func seedToolPermissions(defaultsJson: String) throws  -> UInt32
+    
     /**
      * Send a message to the agent and start an agent loop turn.
      */
@@ -679,6 +699,11 @@ public protocol NativeAgentHandleProtocol : AnyObject {
      */
     func setSchedulerConfig(configJson: String) throws 
     
+    /**
+     * Set a single tool's permission (upsert).
+     */
+    func setToolPermission(toolName: String, permission: String, enabled: Bool) throws 
+    
     /**
      * Start MCP server with given tools.
      */
@@ -971,6 +996,16 @@ open func listSkills()throws  -> String {
     uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_skills(self.uniffiClonePointer(),$0
     )
 })
+}
+    
+    /**
+     * List all tool permissions as JSON array.
+     */
+open func listToolPermissions()throws  -> String {
+    return try  FfiConverterString.lift(try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_tool_permissions(self.uniffiClonePointer(),$0
+    )
+})
 }
     
     /**
@@ -982,6 +1017,17 @@ open func loadSession(sessionKey: String)throws  -> String {
         FfiConverterString.lower(sessionKey),$0
     )
 })
+}
+    
+    /**
+     * Load surfaced messages from background/cron jobs.
+     */
+open func loadSurfacedMessages(limit: Int64)throws  -> String {
+    return try  FfiConverterString.lift(try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_load_surfaced_messages(self.uniffiClonePointer(),
+        FfiConverterInt64.lower(limit),$0
+    )
+})
 }
     
 open func persistConfig()throws  {try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
@@ -1019,6 +1065,15 @@ open func removeSkill(id: String)throws  {try rustCallWithError(FfiConverterType
         FfiConverterString.lower(id),$0
     )
 }
+}
+    
+    /**
+     * Delete all tool permissions (reset to defaults on next seed).
+     */
+open func resetToolPermissions()throws  {try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_reset_tool_permissions(self.uniffiClonePointer(),$0
+    )
+}
 }
     
     /**
@@ -1089,6 +1144,17 @@ open func runCronJob(jobId: String)throws  {try rustCallWithError(FfiConverterTy
         FfiConverterString.lower(jobId),$0
     )
 }
+}
+    
+    /**
+     * Seed tool permissions from defaults. INSERT OR IGNORE preserves user overrides.
+     */
+open func seedToolPermissions(defaultsJson: String)throws  -> UInt32 {
+    return try  FfiConverterUInt32.lift(try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_seed_tool_permissions(self.uniffiClonePointer(),
+        FfiConverterString.lower(defaultsJson),$0
+    )
+})
 }
     
     /**
@@ -1156,6 +1222,18 @@ open func setSchedulerConfig(configJson: String)throws  {try rustCallWithError(F
         FfiConverterString.lower(configJson),$0
     )
 }
+}
+    
+    /**
+     * Set a single tool's permission (upsert).
+     */
+open func setToolPermission(toolName: String, permission: String, enabled: Bool)throws  {try rustCallWithError(FfiConverterTypeNativeAgentError.lift) {
+    uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_tool_permission(self.uniffiClonePointer(),
+        FfiConverterString.lower(toolName),
+        FfiConverterString.lower(permission),
+        FfiConverterBool.lower(enabled),$0
+    )
+}
 }
     
     /**
@@ -1609,13 +1687,20 @@ public struct SendMessageParams {
      * JSON-encoded list of allowed tool names. Empty = all tools.
      */
     public var allowedToolsJson: String?
+    /**
+     * JSON-encoded prior conversation messages for multi-turn sessions.
+     */
+    public var priorMessagesJson: String?
 
     // Default memberwise initializers are never public by default, so we
     // declare one manually.
     public init(prompt: String, sessionKey: String, model: String?, provider: String?, systemPrompt: String, maxTurns: UInt32?, 
         /**
          * JSON-encoded list of allowed tool names. Empty = all tools.
-         */allowedToolsJson: String?) {
+         */allowedToolsJson: String?, 
+        /**
+         * JSON-encoded prior conversation messages for multi-turn sessions.
+         */priorMessagesJson: String?) {
         self.prompt = prompt
         self.sessionKey = sessionKey
         self.model = model
@@ -1623,6 +1708,7 @@ public struct SendMessageParams {
         self.systemPrompt = systemPrompt
         self.maxTurns = maxTurns
         self.allowedToolsJson = allowedToolsJson
+        self.priorMessagesJson = priorMessagesJson
     }
 }
 
@@ -1651,6 +1737,9 @@ extension SendMessageParams: Equatable, Hashable {
         if lhs.allowedToolsJson != rhs.allowedToolsJson {
             return false
         }
+        if lhs.priorMessagesJson != rhs.priorMessagesJson {
+            return false
+        }
         return true
     }
 
@@ -1662,6 +1751,7 @@ extension SendMessageParams: Equatable, Hashable {
         hasher.combine(systemPrompt)
         hasher.combine(maxTurns)
         hasher.combine(allowedToolsJson)
+        hasher.combine(priorMessagesJson)
     }
 }
 
@@ -1679,7 +1769,8 @@ public struct FfiConverterTypeSendMessageParams: FfiConverterRustBuffer {
                 provider: FfiConverterOptionString.read(from: &buf), 
                 systemPrompt: FfiConverterString.read(from: &buf), 
                 maxTurns: FfiConverterOptionUInt32.read(from: &buf), 
-                allowedToolsJson: FfiConverterOptionString.read(from: &buf)
+                allowedToolsJson: FfiConverterOptionString.read(from: &buf), 
+                priorMessagesJson: FfiConverterOptionString.read(from: &buf)
         )
     }
 
@@ -1691,6 +1782,7 @@ public struct FfiConverterTypeSendMessageParams: FfiConverterRustBuffer {
         FfiConverterString.write(value.systemPrompt, into: &buf)
         FfiConverterOptionUInt32.write(value.maxTurns, into: &buf)
         FfiConverterOptionString.write(value.allowedToolsJson, into: &buf)
+        FfiConverterOptionString.write(value.priorMessagesJson, into: &buf)
     }
 }
 
@@ -2480,9 +2572,15 @@ private var initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_skills() != 14677) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_tool_permissions() != 48713) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_session() != 39832) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_surfaced_messages() != 38563) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_persist_config() != 63110) {
         return InitializationResult.apiChecksumMismatch
     }
@@ -2495,6 +2593,9 @@ private var initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_remove_skill() != 49129) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_reset_tool_permissions() != 15060) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_respond_to_approval() != 3194) {
         return InitializationResult.apiChecksumMismatch
     }
@@ -2513,6 +2614,9 @@ private var initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_run_cron_job() != 11263) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_seed_tool_permissions() != 39225) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_send_message() != 53296) {
         return InitializationResult.apiChecksumMismatch
     }
@@ -2534,6 +2638,9 @@ private var initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_scheduler_config() != 18609) {
         return InitializationResult.apiChecksumMismatch
     }
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_tool_permission() != 8407) {
+        return InitializationResult.apiChecksumMismatch
+    }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_start_mcp() != 53972) {
         return InitializationResult.apiChecksumMismatch
     }

package/ios/Sources/NativeAgentPlugin/Generated/native_agent_ffiFFI.h

@@ -438,11 +438,21 @@ RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_sessions(voi
 RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_skills(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LIST_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LIST_TOOL_PERMISSIONS
+RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_list_tool_permissions(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LOAD_SESSION
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LOAD_SESSION
 RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_load_session(void*_Nonnull ptr, RustBuffer session_key, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LOAD_SURFACED_MESSAGES
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_LOAD_SURFACED_MESSAGES
+RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_load_surfaced_messages(void*_Nonnull ptr, int64_t limit, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_PERSIST_CONFIG
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_PERSIST_CONFIG
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_persist_config(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
@@ -463,6 +473,11 @@ void uniffi_native_agent_ffi_fn_method_nativeagenthandle_remove_cron_job(void*_N
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_remove_skill(void*_Nonnull ptr, RustBuffer id, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_RESET_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_RESET_TOOL_PERMISSIONS
+void uniffi_native_agent_ffi_fn_method_nativeagenthandle_reset_tool_permissions(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_RESPOND_TO_APPROVAL
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_RESPOND_TO_APPROVAL
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_respond_to_approval(void*_Nonnull ptr, RustBuffer tool_call_id, int8_t approved, RustBuffer reason, RustCallStatus *_Nonnull out_status
@@ -493,6 +508,11 @@ void uniffi_native_agent_ffi_fn_method_nativeagenthandle_resume_session(void*_No
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_run_cron_job(void*_Nonnull ptr, RustBuffer job_id, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SEED_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SEED_TOOL_PERMISSIONS
+uint32_t uniffi_native_agent_ffi_fn_method_nativeagenthandle_seed_tool_permissions(void*_Nonnull ptr, RustBuffer defaults_json, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SEND_MESSAGE
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SEND_MESSAGE
 RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_send_message(void*_Nonnull ptr, RustBuffer params, RustCallStatus *_Nonnull out_status
@@ -528,6 +548,11 @@ void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_notifier(void*_Nonn
 void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_scheduler_config(void*_Nonnull ptr, RustBuffer config_json, RustCallStatus *_Nonnull out_status
 );
 #endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_TOOL_PERMISSION
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_TOOL_PERMISSION
+void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_tool_permission(void*_Nonnull ptr, RustBuffer tool_name, RustBuffer permission, int8_t enabled, RustCallStatus *_Nonnull out_status
+);
+#endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_START_MCP
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_START_MCP
 uint32_t uniffi_native_agent_ffi_fn_method_nativeagenthandle_start_mcp(void*_Nonnull ptr, RustBuffer tools_json, RustCallStatus *_Nonnull out_status
@@ -982,12 +1007,24 @@ uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_sessions
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LIST_SKILLS
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_skills(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LIST_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LIST_TOOL_PERMISSIONS
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_list_tool_permissions(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LOAD_SESSION
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LOAD_SESSION
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_session(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LOAD_SURFACED_MESSAGES
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_LOAD_SURFACED_MESSAGES
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_load_surfaced_messages(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_PERSIST_CONFIG
@@ -1012,6 +1049,12 @@ uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_remove_cron_j
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_REMOVE_SKILL
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_remove_skill(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_RESET_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_RESET_TOOL_PERMISSIONS
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_reset_tool_permissions(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_RESPOND_TO_APPROVAL
@@ -1048,6 +1091,12 @@ uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_resume_sessio
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_RUN_CRON_JOB
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_run_cron_job(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SEED_TOOL_PERMISSIONS
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SEED_TOOL_PERMISSIONS
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_seed_tool_permissions(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SEND_MESSAGE
@@ -1090,6 +1139,12 @@ uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_notifier(
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SET_SCHEDULER_CONFIG
 uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_scheduler_config(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SET_TOOL_PERMISSION
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_SET_TOOL_PERMISSION
+uint16_t uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_tool_permission(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_NATIVEAGENTHANDLE_START_MCP

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "capacitor-native-agent",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Native AI agent loop for Capacitor — runs LLM completions, tool execution, and cron jobs in native Rust, enabling background execution.",
   "main": "dist/esm/index.js",
   "types": "dist/esm/index.d.ts",