capacitor-native-agent 0.9.13 → 0.9.15

package/ios/Frameworks/NativeAgentFFI.xcframework/ios-arm64/Headers/native_agent_ffi/native_agent_ffiFFI.h

@@ -273,14 +273,21 @@ typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod3)(uint64_t, RustB
 #endif
 #ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD4
 #define UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD4
-typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod4)(uint64_t, void* _Nonnull, 
+typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod4)(uint64_t, RustBuffer, RustBuffer, RustBuffer, RustBuffer, void* _Nonnull, 
         RustCallStatus *_Nonnull uniffiCallStatus
     );
 
 #endif
 #ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD5
 #define UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD5
-typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod5)(uint64_t, RustBuffer, uint32_t, uint32_t, void* _Nonnull, 
+typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod5)(uint64_t, void* _Nonnull, 
+        RustCallStatus *_Nonnull uniffiCallStatus
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD6
+#define UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD6
+typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod6)(uint64_t, RustBuffer, uint32_t, uint32_t, void* _Nonnull, 
         RustCallStatus *_Nonnull uniffiCallStatus
     );
 
@@ -357,8 +364,9 @@ typedef struct UniffiVTableCallbackInterfaceGovernanceProvider {
     UniffiCallbackInterfaceGovernanceProviderMethod1 _Nonnull recordOutcome;
     UniffiCallbackInterfaceGovernanceProviderMethod2 _Nonnull recordAudit;
     UniffiCallbackInterfaceGovernanceProviderMethod3 _Nonnull checkSink;
-    UniffiCallbackInterfaceGovernanceProviderMethod4 _Nonnull reset;
-    UniffiCallbackInterfaceGovernanceProviderMethod5 _Nonnull recordUsage;
+    UniffiCallbackInterfaceGovernanceProviderMethod4 _Nonnull registerTaint;
+    UniffiCallbackInterfaceGovernanceProviderMethod5 _Nonnull reset;
+    UniffiCallbackInterfaceGovernanceProviderMethod6 _Nonnull recordUsage;
 } UniffiVTableCallbackInterfaceGovernanceProvider;
 
 #endif
@@ -610,7 +618,7 @@ RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_serialize_agent_e
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_AUTH_KEY
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_AUTH_KEY
-void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_auth_key(uint64_t ptr, RustBuffer key, RustBuffer provider, RustBuffer auth_type, RustBuffer refresh, RustBuffer expires_at, RustCallStatus *_Nonnull out_status
+void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_auth_key(uint64_t ptr, RustBuffer key, RustBuffer provider, RustBuffer auth_type, RustBuffer refresh, RustBuffer expires_at, RustBuffer base_url, RustCallStatus *_Nonnull out_status
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_EVENT_CALLBACK
@@ -1325,6 +1333,12 @@ uint16_t uniffi_native_agent_ffi_checksum_method_governanceprovider_record_audit
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_GOVERNANCEPROVIDER_CHECK_SINK
 uint16_t uniffi_native_agent_ffi_checksum_method_governanceprovider_check_sink(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_GOVERNANCEPROVIDER_REGISTER_TAINT
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_GOVERNANCEPROVIDER_REGISTER_TAINT
+uint16_t uniffi_native_agent_ffi_checksum_method_governanceprovider_register_taint(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_GOVERNANCEPROVIDER_RESET

package/ios/Frameworks/NativeAgentFFI.xcframework/ios-arm64-simulator/Headers/native_agent_ffi/native_agent_ffi.swift

@@ -682,7 +682,12 @@ public protocol NativeAgentHandleProtocol: AnyObject, Sendable {
     func resetToolPermissions() throws 
     
     /**
-     * Respond to a tool approval request.
+     * Respond to a tool approval request (legacy boolean entry point).
+     *
+     * Retained as the UniFFI-facing API for mobile callers that pass a plain
+     * boolean. Internally delegates to `respond_to_approval_decision` (a
+     * Rust-only helper, not UniFFI-exported) with no `decision`/`answers`,
+     * preserving today's behavior.
      */
     func respondToApproval(toolCallId: String, approved: Bool, reason: String?) throws 
     
@@ -732,8 +737,13 @@ public protocol NativeAgentHandleProtocol: AnyObject, Sendable {
     
     /**
      * Set an auth key for a provider.
+     *
+     * `base_url`, when set, overrides the provider's hardcoded endpoint — used
+     * to point the driver at a backend proxy that injects the real API key
+     * server-side, so the device never holds the provider secret. `None` ⇒
+     * the provider's default endpoint (unchanged behavior).
      */
-    func setAuthKey(key: String, provider: String, authType: String, refresh: String?, expiresAt: Int64?) throws 
+    func setAuthKey(key: String, provider: String, authType: String, refresh: String?, expiresAt: Int64?, baseUrl: String?) throws 
     
     /**
      * Set the event callback for receiving agent events.
@@ -1208,7 +1218,12 @@ open func resetToolPermissions()throws   {try rustCallWithError(FfiConverterType
 }
     
     /**
-     * Respond to a tool approval request.
+     * Respond to a tool approval request (legacy boolean entry point).
+     *
+     * Retained as the UniFFI-facing API for mobile callers that pass a plain
+     * boolean. Internally delegates to `respond_to_approval_decision` (a
+     * Rust-only helper, not UniFFI-exported) with no `decision`/`answers`,
+     * preserving today's behavior.
      */
 open func respondToApproval(toolCallId: String, approved: Bool, reason: String?)throws   {try rustCallWithError(FfiConverterTypeNativeAgentError_lift) {
     uniffi_native_agent_ffi_fn_method_nativeagenthandle_respond_to_approval(
@@ -1328,15 +1343,21 @@ open func serializeAgentEventJson(eventType: String, payloadJson: String, sessio
     
     /**
      * Set an auth key for a provider.
+     *
+     * `base_url`, when set, overrides the provider's hardcoded endpoint — used
+     * to point the driver at a backend proxy that injects the real API key
+     * server-side, so the device never holds the provider secret. `None` ⇒
+     * the provider's default endpoint (unchanged behavior).
      */
-open func setAuthKey(key: String, provider: String, authType: String, refresh: String?, expiresAt: Int64?)throws   {try rustCallWithError(FfiConverterTypeNativeAgentError_lift) {
+open func setAuthKey(key: String, provider: String, authType: String, refresh: String?, expiresAt: Int64?, baseUrl: String?)throws   {try rustCallWithError(FfiConverterTypeNativeAgentError_lift) {
     uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_auth_key(
             self.uniffiCloneHandle(),
         FfiConverterString.lower(key),
         FfiConverterString.lower(provider),
         FfiConverterString.lower(authType),
         FfiConverterOptionString.lower(refresh),
-        FfiConverterOptionInt64.lower(expiresAt),$0
+        FfiConverterOptionInt64.lower(expiresAt),
+        FfiConverterOptionString.lower(baseUrl),$0
     )
 }
 }
@@ -1936,6 +1957,11 @@ public struct SendMessageParams: Equatable, Hashable {
      * JSON-encoded prior conversation messages for multi-turn sessions.
      */
     public var priorMessagesJson: String?
+    /**
+     * Create-only plan-mode seed (Stage 4b). Honored when starting a NEW
+     * session; the persisted store value is authoritative on resume.
+     */
+    public var planModeInit: Bool?
 
     // Default memberwise initializers are never public by default, so we
     // declare one manually.
@@ -1947,7 +1973,11 @@ public struct SendMessageParams: Equatable, Hashable {
          */skillAllowedToolsJson: String?, 
         /**
          * JSON-encoded prior conversation messages for multi-turn sessions.
-         */priorMessagesJson: String?) {
+         */priorMessagesJson: String?, 
+        /**
+         * Create-only plan-mode seed (Stage 4b). Honored when starting a NEW
+         * session; the persisted store value is authoritative on resume.
+         */planModeInit: Bool?) {
         self.prompt = prompt
         self.sessionKey = sessionKey
         self.model = model
@@ -1956,6 +1986,7 @@ public struct SendMessageParams: Equatable, Hashable {
         self.maxTurns = maxTurns
         self.skillAllowedToolsJson = skillAllowedToolsJson
         self.priorMessagesJson = priorMessagesJson
+        self.planModeInit = planModeInit
     }
 
     
@@ -1981,7 +2012,8 @@ public struct FfiConverterTypeSendMessageParams: FfiConverterRustBuffer {
                 systemPrompt: FfiConverterString.read(from: &buf), 
                 maxTurns: FfiConverterOptionUInt32.read(from: &buf), 
                 skillAllowedToolsJson: FfiConverterOptionString.read(from: &buf), 
-                priorMessagesJson: FfiConverterOptionString.read(from: &buf)
+                priorMessagesJson: FfiConverterOptionString.read(from: &buf), 
+                planModeInit: FfiConverterOptionBool.read(from: &buf)
         )
     }
 
@@ -1994,6 +2026,7 @@ public struct FfiConverterTypeSendMessageParams: FfiConverterRustBuffer {
         FfiConverterOptionUInt32.write(value.maxTurns, into: &buf)
         FfiConverterOptionString.write(value.skillAllowedToolsJson, into: &buf)
         FfiConverterOptionString.write(value.priorMessagesJson, into: &buf)
+        FfiConverterOptionBool.write(value.planModeInit, into: &buf)
     }
 }
 
@@ -2415,6 +2448,19 @@ public protocol GovernanceProvider: AnyObject, Sendable {
      */
     func checkSink(sinkType: String, content: String)  -> String
     
+    /**
+     * Register a tainted value for data-flow tracking (agent-os taint uptake).
+     * `labels` is a comma-separated set drawn from
+     * `Pii|Secret|ExternalNetwork|UserInput|UntrustedAgent`; a later
+     * `check_sink` blocks if a registered value reaches a sink that forbids one
+     * of its labels (e.g. ExternalNetwork content flowing into ShellExec).
+     * (No default: `#[uniffi::export]` callback-interface methods can't be
+     * defaulted — every host impl must provide it. Mobile delegates to its
+     * `TaintTracker::register`; a host with no taint engine implements it as a
+     * no-op.)
+     */
+    func registerTaint(key: String, value: String, labels: String, source: String) 
+    
     /**
      * Reset loop guard state (e.g. on new session).
      */
@@ -2560,6 +2606,36 @@ fileprivate struct UniffiCallbackInterfaceGovernanceProvider {
                 writeReturn: writeReturn
             )
         },
+        registerTaint: { (
+            uniffiHandle: UInt64,
+            key: RustBuffer,
+            value: RustBuffer,
+            labels: RustBuffer,
+            source: RustBuffer,
+            uniffiOutReturn: UnsafeMutableRawPointer,
+            uniffiCallStatus: UnsafeMutablePointer<RustCallStatus>
+        ) in
+            let makeCall = {
+                () throws -> () in
+                guard let uniffiObj = try? FfiConverterCallbackInterfaceGovernanceProvider.handleMap.get(handle: uniffiHandle) else {
+                    throw UniffiInternalError.unexpectedStaleHandle
+                }
+                return uniffiObj.registerTaint(
+                     key: try FfiConverterString.lift(key),
+                     value: try FfiConverterString.lift(value),
+                     labels: try FfiConverterString.lift(labels),
+                     source: try FfiConverterString.lift(source)
+                )
+            }
+
+            
+            let writeReturn = { () }
+            uniffiTraitInterfaceCall(
+                callStatus: uniffiCallStatus,
+                makeCall: makeCall,
+                writeReturn: writeReturn
+            )
+        },
         reset: { (
             uniffiHandle: UInt64,
             uniffiOutReturn: UnsafeMutableRawPointer,
@@ -3261,6 +3337,30 @@ fileprivate struct FfiConverterOptionInt64: FfiConverterRustBuffer {
     }
 }
 
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+fileprivate struct FfiConverterOptionBool: FfiConverterRustBuffer {
+    typealias SwiftType = Bool?
+
+    public static func write(_ value: SwiftType, into buf: inout [UInt8]) {
+        guard let value = value else {
+            writeInt(&buf, Int8(0))
+            return
+        }
+        writeInt(&buf, Int8(1))
+        FfiConverterBool.write(value, into: &buf)
+    }
+
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> SwiftType {
+        switch try readInt(&buf) as Int8 {
+        case 0: return nil
+        case 1: return try FfiConverterBool.read(from: &buf)
+        default: throw UniffiInternalError.unexpectedOptionalTag
+        }
+    }
+}
+
 #if swift(>=5.8)
 @_documentation(visibility: private)
 #endif
@@ -3434,7 +3534,7 @@ private let initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_reset_tool_permissions() != 15060) {
         return InitializationResult.apiChecksumMismatch
     }
-    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_respond_to_approval() != 3194) {
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_respond_to_approval() != 56876) {
         return InitializationResult.apiChecksumMismatch
     }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_respond_to_cron_approval() != 851) {
@@ -3461,7 +3561,7 @@ private let initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_serialize_agent_event_json() != 40873) {
         return InitializationResult.apiChecksumMismatch
     }
-    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_auth_key() != 1639) {
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_auth_key() != 12658) {
         return InitializationResult.apiChecksumMismatch
     }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_event_callback() != 56165) {
@@ -3518,10 +3618,13 @@ private let initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_governanceprovider_check_sink() != 37338) {
         return InitializationResult.apiChecksumMismatch
     }
-    if (uniffi_native_agent_ffi_checksum_method_governanceprovider_reset() != 57214) {
+    if (uniffi_native_agent_ffi_checksum_method_governanceprovider_register_taint() != 17176) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_native_agent_ffi_checksum_method_governanceprovider_reset() != 47675) {
         return InitializationResult.apiChecksumMismatch
     }
-    if (uniffi_native_agent_ffi_checksum_method_governanceprovider_record_usage() != 907) {
+    if (uniffi_native_agent_ffi_checksum_method_governanceprovider_record_usage() != 32049) {
         return InitializationResult.apiChecksumMismatch
     }
     if (uniffi_native_agent_ffi_checksum_method_memoryprovider_store() != 49136) {

package/ios/Frameworks/NativeAgentFFI.xcframework/ios-arm64-simulator/Headers/native_agent_ffi/native_agent_ffiFFI.h

@@ -273,14 +273,21 @@ typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod3)(uint64_t, RustB
 #endif
 #ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD4
 #define UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD4
-typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod4)(uint64_t, void* _Nonnull, 
+typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod4)(uint64_t, RustBuffer, RustBuffer, RustBuffer, RustBuffer, void* _Nonnull, 
         RustCallStatus *_Nonnull uniffiCallStatus
     );
 
 #endif
 #ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD5
 #define UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD5
-typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod5)(uint64_t, RustBuffer, uint32_t, uint32_t, void* _Nonnull, 
+typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod5)(uint64_t, void* _Nonnull, 
+        RustCallStatus *_Nonnull uniffiCallStatus
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD6
+#define UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD6
+typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod6)(uint64_t, RustBuffer, uint32_t, uint32_t, void* _Nonnull, 
         RustCallStatus *_Nonnull uniffiCallStatus
     );
 
@@ -357,8 +364,9 @@ typedef struct UniffiVTableCallbackInterfaceGovernanceProvider {
     UniffiCallbackInterfaceGovernanceProviderMethod1 _Nonnull recordOutcome;
     UniffiCallbackInterfaceGovernanceProviderMethod2 _Nonnull recordAudit;
     UniffiCallbackInterfaceGovernanceProviderMethod3 _Nonnull checkSink;
-    UniffiCallbackInterfaceGovernanceProviderMethod4 _Nonnull reset;
-    UniffiCallbackInterfaceGovernanceProviderMethod5 _Nonnull recordUsage;
+    UniffiCallbackInterfaceGovernanceProviderMethod4 _Nonnull registerTaint;
+    UniffiCallbackInterfaceGovernanceProviderMethod5 _Nonnull reset;
+    UniffiCallbackInterfaceGovernanceProviderMethod6 _Nonnull recordUsage;
 } UniffiVTableCallbackInterfaceGovernanceProvider;
 
 #endif
@@ -610,7 +618,7 @@ RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_serialize_agent_e
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_AUTH_KEY
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_AUTH_KEY
-void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_auth_key(uint64_t ptr, RustBuffer key, RustBuffer provider, RustBuffer auth_type, RustBuffer refresh, RustBuffer expires_at, RustCallStatus *_Nonnull out_status
+void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_auth_key(uint64_t ptr, RustBuffer key, RustBuffer provider, RustBuffer auth_type, RustBuffer refresh, RustBuffer expires_at, RustBuffer base_url, RustCallStatus *_Nonnull out_status
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_EVENT_CALLBACK
@@ -1325,6 +1333,12 @@ uint16_t uniffi_native_agent_ffi_checksum_method_governanceprovider_record_audit
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_GOVERNANCEPROVIDER_CHECK_SINK
 uint16_t uniffi_native_agent_ffi_checksum_method_governanceprovider_check_sink(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_GOVERNANCEPROVIDER_REGISTER_TAINT
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_GOVERNANCEPROVIDER_REGISTER_TAINT
+uint16_t uniffi_native_agent_ffi_checksum_method_governanceprovider_register_taint(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_GOVERNANCEPROVIDER_RESET

package/ios/Sources/NativeAgentPlugin/Generated/native_agent_ffi.swift

@@ -682,7 +682,12 @@ public protocol NativeAgentHandleProtocol: AnyObject, Sendable {
     func resetToolPermissions() throws 
     
     /**
-     * Respond to a tool approval request.
+     * Respond to a tool approval request (legacy boolean entry point).
+     *
+     * Retained as the UniFFI-facing API for mobile callers that pass a plain
+     * boolean. Internally delegates to `respond_to_approval_decision` (a
+     * Rust-only helper, not UniFFI-exported) with no `decision`/`answers`,
+     * preserving today's behavior.
      */
     func respondToApproval(toolCallId: String, approved: Bool, reason: String?) throws 
     
@@ -732,8 +737,13 @@ public protocol NativeAgentHandleProtocol: AnyObject, Sendable {
     
     /**
      * Set an auth key for a provider.
+     *
+     * `base_url`, when set, overrides the provider's hardcoded endpoint — used
+     * to point the driver at a backend proxy that injects the real API key
+     * server-side, so the device never holds the provider secret. `None` ⇒
+     * the provider's default endpoint (unchanged behavior).
      */
-    func setAuthKey(key: String, provider: String, authType: String, refresh: String?, expiresAt: Int64?) throws 
+    func setAuthKey(key: String, provider: String, authType: String, refresh: String?, expiresAt: Int64?, baseUrl: String?) throws 
     
     /**
      * Set the event callback for receiving agent events.
@@ -1208,7 +1218,12 @@ open func resetToolPermissions()throws   {try rustCallWithError(FfiConverterType
 }
     
     /**
-     * Respond to a tool approval request.
+     * Respond to a tool approval request (legacy boolean entry point).
+     *
+     * Retained as the UniFFI-facing API for mobile callers that pass a plain
+     * boolean. Internally delegates to `respond_to_approval_decision` (a
+     * Rust-only helper, not UniFFI-exported) with no `decision`/`answers`,
+     * preserving today's behavior.
      */
 open func respondToApproval(toolCallId: String, approved: Bool, reason: String?)throws   {try rustCallWithError(FfiConverterTypeNativeAgentError_lift) {
     uniffi_native_agent_ffi_fn_method_nativeagenthandle_respond_to_approval(
@@ -1328,15 +1343,21 @@ open func serializeAgentEventJson(eventType: String, payloadJson: String, sessio
     
     /**
      * Set an auth key for a provider.
+     *
+     * `base_url`, when set, overrides the provider's hardcoded endpoint — used
+     * to point the driver at a backend proxy that injects the real API key
+     * server-side, so the device never holds the provider secret. `None` ⇒
+     * the provider's default endpoint (unchanged behavior).
      */
-open func setAuthKey(key: String, provider: String, authType: String, refresh: String?, expiresAt: Int64?)throws   {try rustCallWithError(FfiConverterTypeNativeAgentError_lift) {
+open func setAuthKey(key: String, provider: String, authType: String, refresh: String?, expiresAt: Int64?, baseUrl: String?)throws   {try rustCallWithError(FfiConverterTypeNativeAgentError_lift) {
     uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_auth_key(
             self.uniffiCloneHandle(),
         FfiConverterString.lower(key),
         FfiConverterString.lower(provider),
         FfiConverterString.lower(authType),
         FfiConverterOptionString.lower(refresh),
-        FfiConverterOptionInt64.lower(expiresAt),$0
+        FfiConverterOptionInt64.lower(expiresAt),
+        FfiConverterOptionString.lower(baseUrl),$0
     )
 }
 }
@@ -1936,6 +1957,11 @@ public struct SendMessageParams: Equatable, Hashable {
      * JSON-encoded prior conversation messages for multi-turn sessions.
      */
     public var priorMessagesJson: String?
+    /**
+     * Create-only plan-mode seed (Stage 4b). Honored when starting a NEW
+     * session; the persisted store value is authoritative on resume.
+     */
+    public var planModeInit: Bool?
 
     // Default memberwise initializers are never public by default, so we
     // declare one manually.
@@ -1947,7 +1973,11 @@ public struct SendMessageParams: Equatable, Hashable {
          */skillAllowedToolsJson: String?, 
         /**
          * JSON-encoded prior conversation messages for multi-turn sessions.
-         */priorMessagesJson: String?) {
+         */priorMessagesJson: String?, 
+        /**
+         * Create-only plan-mode seed (Stage 4b). Honored when starting a NEW
+         * session; the persisted store value is authoritative on resume.
+         */planModeInit: Bool?) {
         self.prompt = prompt
         self.sessionKey = sessionKey
         self.model = model
@@ -1956,6 +1986,7 @@ public struct SendMessageParams: Equatable, Hashable {
         self.maxTurns = maxTurns
         self.skillAllowedToolsJson = skillAllowedToolsJson
         self.priorMessagesJson = priorMessagesJson
+        self.planModeInit = planModeInit
     }
 
     
@@ -1981,7 +2012,8 @@ public struct FfiConverterTypeSendMessageParams: FfiConverterRustBuffer {
                 systemPrompt: FfiConverterString.read(from: &buf), 
                 maxTurns: FfiConverterOptionUInt32.read(from: &buf), 
                 skillAllowedToolsJson: FfiConverterOptionString.read(from: &buf), 
-                priorMessagesJson: FfiConverterOptionString.read(from: &buf)
+                priorMessagesJson: FfiConverterOptionString.read(from: &buf), 
+                planModeInit: FfiConverterOptionBool.read(from: &buf)
         )
     }
 
@@ -1994,6 +2026,7 @@ public struct FfiConverterTypeSendMessageParams: FfiConverterRustBuffer {
         FfiConverterOptionUInt32.write(value.maxTurns, into: &buf)
         FfiConverterOptionString.write(value.skillAllowedToolsJson, into: &buf)
         FfiConverterOptionString.write(value.priorMessagesJson, into: &buf)
+        FfiConverterOptionBool.write(value.planModeInit, into: &buf)
     }
 }
 
@@ -2415,6 +2448,19 @@ public protocol GovernanceProvider: AnyObject, Sendable {
      */
     func checkSink(sinkType: String, content: String)  -> String
     
+    /**
+     * Register a tainted value for data-flow tracking (agent-os taint uptake).
+     * `labels` is a comma-separated set drawn from
+     * `Pii|Secret|ExternalNetwork|UserInput|UntrustedAgent`; a later
+     * `check_sink` blocks if a registered value reaches a sink that forbids one
+     * of its labels (e.g. ExternalNetwork content flowing into ShellExec).
+     * (No default: `#[uniffi::export]` callback-interface methods can't be
+     * defaulted — every host impl must provide it. Mobile delegates to its
+     * `TaintTracker::register`; a host with no taint engine implements it as a
+     * no-op.)
+     */
+    func registerTaint(key: String, value: String, labels: String, source: String) 
+    
     /**
      * Reset loop guard state (e.g. on new session).
      */
@@ -2560,6 +2606,36 @@ fileprivate struct UniffiCallbackInterfaceGovernanceProvider {
                 writeReturn: writeReturn
             )
         },
+        registerTaint: { (
+            uniffiHandle: UInt64,
+            key: RustBuffer,
+            value: RustBuffer,
+            labels: RustBuffer,
+            source: RustBuffer,
+            uniffiOutReturn: UnsafeMutableRawPointer,
+            uniffiCallStatus: UnsafeMutablePointer<RustCallStatus>
+        ) in
+            let makeCall = {
+                () throws -> () in
+                guard let uniffiObj = try? FfiConverterCallbackInterfaceGovernanceProvider.handleMap.get(handle: uniffiHandle) else {
+                    throw UniffiInternalError.unexpectedStaleHandle
+                }
+                return uniffiObj.registerTaint(
+                     key: try FfiConverterString.lift(key),
+                     value: try FfiConverterString.lift(value),
+                     labels: try FfiConverterString.lift(labels),
+                     source: try FfiConverterString.lift(source)
+                )
+            }
+
+            
+            let writeReturn = { () }
+            uniffiTraitInterfaceCall(
+                callStatus: uniffiCallStatus,
+                makeCall: makeCall,
+                writeReturn: writeReturn
+            )
+        },
         reset: { (
             uniffiHandle: UInt64,
             uniffiOutReturn: UnsafeMutableRawPointer,
@@ -3261,6 +3337,30 @@ fileprivate struct FfiConverterOptionInt64: FfiConverterRustBuffer {
     }
 }
 
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+fileprivate struct FfiConverterOptionBool: FfiConverterRustBuffer {
+    typealias SwiftType = Bool?
+
+    public static func write(_ value: SwiftType, into buf: inout [UInt8]) {
+        guard let value = value else {
+            writeInt(&buf, Int8(0))
+            return
+        }
+        writeInt(&buf, Int8(1))
+        FfiConverterBool.write(value, into: &buf)
+    }
+
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> SwiftType {
+        switch try readInt(&buf) as Int8 {
+        case 0: return nil
+        case 1: return try FfiConverterBool.read(from: &buf)
+        default: throw UniffiInternalError.unexpectedOptionalTag
+        }
+    }
+}
+
 #if swift(>=5.8)
 @_documentation(visibility: private)
 #endif
@@ -3434,7 +3534,7 @@ private let initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_reset_tool_permissions() != 15060) {
         return InitializationResult.apiChecksumMismatch
     }
-    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_respond_to_approval() != 3194) {
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_respond_to_approval() != 56876) {
         return InitializationResult.apiChecksumMismatch
     }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_respond_to_cron_approval() != 851) {
@@ -3461,7 +3561,7 @@ private let initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_serialize_agent_event_json() != 40873) {
         return InitializationResult.apiChecksumMismatch
     }
-    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_auth_key() != 1639) {
+    if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_auth_key() != 12658) {
         return InitializationResult.apiChecksumMismatch
     }
     if (uniffi_native_agent_ffi_checksum_method_nativeagenthandle_set_event_callback() != 56165) {
@@ -3518,10 +3618,13 @@ private let initializationResult: InitializationResult = {
     if (uniffi_native_agent_ffi_checksum_method_governanceprovider_check_sink() != 37338) {
         return InitializationResult.apiChecksumMismatch
     }
-    if (uniffi_native_agent_ffi_checksum_method_governanceprovider_reset() != 57214) {
+    if (uniffi_native_agent_ffi_checksum_method_governanceprovider_register_taint() != 17176) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_native_agent_ffi_checksum_method_governanceprovider_reset() != 47675) {
         return InitializationResult.apiChecksumMismatch
     }
-    if (uniffi_native_agent_ffi_checksum_method_governanceprovider_record_usage() != 907) {
+    if (uniffi_native_agent_ffi_checksum_method_governanceprovider_record_usage() != 32049) {
         return InitializationResult.apiChecksumMismatch
     }
     if (uniffi_native_agent_ffi_checksum_method_memoryprovider_store() != 49136) {

package/ios/Sources/NativeAgentPlugin/Generated/native_agent_ffiFFI.h

@@ -273,14 +273,21 @@ typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod3)(uint64_t, RustB
 #endif
 #ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD4
 #define UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD4
-typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod4)(uint64_t, void* _Nonnull, 
+typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod4)(uint64_t, RustBuffer, RustBuffer, RustBuffer, RustBuffer, void* _Nonnull, 
         RustCallStatus *_Nonnull uniffiCallStatus
     );
 
 #endif
 #ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD5
 #define UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD5
-typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod5)(uint64_t, RustBuffer, uint32_t, uint32_t, void* _Nonnull, 
+typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod5)(uint64_t, void* _Nonnull, 
+        RustCallStatus *_Nonnull uniffiCallStatus
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD6
+#define UNIFFI_FFIDEF_CALLBACK_INTERFACE_GOVERNANCE_PROVIDER_METHOD6
+typedef void (*UniffiCallbackInterfaceGovernanceProviderMethod6)(uint64_t, RustBuffer, uint32_t, uint32_t, void* _Nonnull, 
         RustCallStatus *_Nonnull uniffiCallStatus
     );
 
@@ -357,8 +364,9 @@ typedef struct UniffiVTableCallbackInterfaceGovernanceProvider {
     UniffiCallbackInterfaceGovernanceProviderMethod1 _Nonnull recordOutcome;
     UniffiCallbackInterfaceGovernanceProviderMethod2 _Nonnull recordAudit;
     UniffiCallbackInterfaceGovernanceProviderMethod3 _Nonnull checkSink;
-    UniffiCallbackInterfaceGovernanceProviderMethod4 _Nonnull reset;
-    UniffiCallbackInterfaceGovernanceProviderMethod5 _Nonnull recordUsage;
+    UniffiCallbackInterfaceGovernanceProviderMethod4 _Nonnull registerTaint;
+    UniffiCallbackInterfaceGovernanceProviderMethod5 _Nonnull reset;
+    UniffiCallbackInterfaceGovernanceProviderMethod6 _Nonnull recordUsage;
 } UniffiVTableCallbackInterfaceGovernanceProvider;
 
 #endif
@@ -610,7 +618,7 @@ RustBuffer uniffi_native_agent_ffi_fn_method_nativeagenthandle_serialize_agent_e
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_AUTH_KEY
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_AUTH_KEY
-void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_auth_key(uint64_t ptr, RustBuffer key, RustBuffer provider, RustBuffer auth_type, RustBuffer refresh, RustBuffer expires_at, RustCallStatus *_Nonnull out_status
+void uniffi_native_agent_ffi_fn_method_nativeagenthandle_set_auth_key(uint64_t ptr, RustBuffer key, RustBuffer provider, RustBuffer auth_type, RustBuffer refresh, RustBuffer expires_at, RustBuffer base_url, RustCallStatus *_Nonnull out_status
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_FN_METHOD_NATIVEAGENTHANDLE_SET_EVENT_CALLBACK
@@ -1325,6 +1333,12 @@ uint16_t uniffi_native_agent_ffi_checksum_method_governanceprovider_record_audit
 #define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_GOVERNANCEPROVIDER_CHECK_SINK
 uint16_t uniffi_native_agent_ffi_checksum_method_governanceprovider_check_sink(void
     
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_GOVERNANCEPROVIDER_REGISTER_TAINT
+#define UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_GOVERNANCEPROVIDER_REGISTER_TAINT
+uint16_t uniffi_native_agent_ffi_checksum_method_governanceprovider_register_taint(void
+    
 );
 #endif
 #ifndef UNIFFI_FFIDEF_UNIFFI_NATIVE_AGENT_FFI_CHECKSUM_METHOD_GOVERNANCEPROVIDER_RESET

package/ios/Sources/NativeAgentPlugin/NativeAgentPlugin.swift

@@ -353,13 +353,16 @@ public class NativeAgentPlugin: CAPPlugin, CAPBridgedPlugin {
             }
             let refresh: String? = call.getString("refresh")
             let expiresAt: Int64? = (call.options["expiresAt"] as? NSNumber)?.int64Value
+            // Optional endpoint override (e.g. a backend proxy holding the real key).
+            let baseUrl: String? = call.getString("baseUrl")
             do {
                 try h.setAuthKey(
                     key: key,
                     provider: call.getString("provider") ?? "anthropic",
                     authType: call.getString("authType") ?? "api_key",
                     refresh: refresh,
-                    expiresAt: expiresAt
+                    expiresAt: expiresAt,
+                    baseUrl: baseUrl
                 )
                 call.resolve()
             } catch {