react-native-image-stitcher 0.7.1 → 0.8.0

package/ios/Sources/RNImageStitcher/RNSARWorkletRuntime.mm

@@ -0,0 +1,313 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// RNSARWorkletRuntime.mm — Obj-C++ implementation.  See the header
+// for the API contract.  This file owns:
+//
+//   - The dispatch queue the worklet runtime is pinned to
+//   - The `std::shared_ptr<RNWorklet::JsiWorkletContext>` itself
+//   - The registry of host worklets (Phase 4 wiring will populate
+//     this via a JSI plugin entry point)
+//
+// Phase 3b scope: construct the context + expose the API.  No
+// dispatch logic yet — `dispatchFrame:pose:` is a stub.  Phase 3c
+// fills in (a) the host-object construction + worklet invocation,
+// (b) the first-party stitching callback, (c) the migration in
+// `RNSARSession.delegate`.
+//
+// ## Singleton lifetime note (for Leaks-tool readers)
+//
+// `+ shared` uses `dispatch_once`, so the singleton lives for the
+// process lifetime — same pattern as most Obj-C singletons.  This
+// means the dispatch queue (created in `init`) + the JsiWorkletContext
+// (constructed lazily in `installIfNeeded`) + the `workletCallInvoker`
+// lambda that captures the queue are ALL retained until process
+// termination.  Xcode Instruments → Leaks will flag this as "leaked
+// allocation rooted at the singleton" — that's noise, not a real leak
+// (process termination reclaims it).  Phase 3c will keep this shape.
+
+#import "RNSARWorkletRuntime.h"
+#import "StitcherFrameHostObject.h"
+
+#import <Foundation/Foundation.h>
+#import <os/log.h>
+
+#include <jsi/jsi.h>
+// worklets-core headers — use quotes-include since the pod
+// publishes them via HEADER_SEARCH_PATHS, not as a framework
+// module map.  Same pattern KeyframeGateFrameProcessor.mm uses
+// for vision-camera headers (which are reachable via <angle>
+// only because vc's podspec sets `define_module` differently).
+#include "WKTJsiWorkletContext.h"
+#include "WKTJsiWorklet.h"
+
+#include "stitcher_worklet_registry.hpp"
+
+#include <exception>
+#include <memory>
+#include <utility>
+#include <vector>
+
+// Forward-declare `RNSARFramePose` — same pattern as
+// StitcherFrameHostObject.mm.  We don't read its fields here in
+// Phase 3b (the stub doesn't unpack the pose), but Phase 3c will.
+@class RNSARFramePose;
+
+@implementation RNSARWorkletRuntime {
+    /// Dispatch queue the worklet runtime's `workletCallInvoker`
+    /// posts onto.  Serial; `DISPATCH_QUEUE_SERIAL` matches the
+    /// existing `IncrementalStitcher::workQueue` cost envelope
+    /// (one-at-a-time frame ingest).
+    ///
+    /// Phase 3c will configure `ARSession.delegateQueue` to point
+    /// at the same queue so the delegate fires on the worklet
+    /// thread — eliminates a thread hop per frame + makes the
+    /// "first-party first, host worklets after" ordering trivial
+    /// to enforce (all on one queue).
+    dispatch_queue_t _dispatchQueue;
+
+    /// The wrapped worklet-runtime context.  Constructed lazily on
+    /// `-installIfNeeded`; held for the singleton's lifetime
+    /// (process-wide).
+    std::shared_ptr<RNWorklet::JsiWorkletContext> _ctx;
+
+    /// Single-flight install guard.  `BOOL` is sufficient because
+    /// `-installIfNeeded` synchronises on `_installLock` below.
+    BOOL _installed;
+
+    /// Lock for `_installed` + `_ctx`.  Construction may race with
+    /// concurrent first-mount calls from multiple `<Camera>`
+    /// instances; serialise to ensure exactly-once init.
+    NSLock *_installLock;
+
+    // Phase 4 will add the host-worklet registry here.  Storage
+    // shape (NSMutableArray of boxed shared_ptrs vs C++ vector
+    // ivar) is intentionally NOT pre-committed in Phase 3b — let
+    // the JSI plugin's actual register/unregister implementation
+    // pick the natural shape.
+
+    /// Phase 3c — first-party callback installed by RNSARSession.
+    /// Invoked synchronously on the caller thread per AR frame.
+    /// Cleared on RNSARSession.stop() to avoid retain cycles.
+    ///
+    /// Atomic property protects against the delegate firing
+    /// concurrently with a setFirstPartyCallback: call on a
+    /// different thread (rare but possible: setter on main thread
+    /// from RNSARSession.start while a delayed delegate frame
+    /// arrives).
+    RNSARFirstPartyCallback _firstPartyCallback;
+
+    /// Lock for `_firstPartyCallback` reads + writes.  The
+    /// `_installLock` above is dispatch-queue-scoped (install);
+    /// callback rotation is a separate concern.
+    NSLock *_callbackLock;
+}
+
++ (instancetype)shared {
+    static RNSARWorkletRuntime *sInstance;
+    static dispatch_once_t once;
+    dispatch_once(&once, ^{ sInstance = [[self alloc] init]; });
+    return sInstance;
+}
+
+- (instancetype)init {
+    if ((self = [super init])) {
+        _dispatchQueue = dispatch_queue_create(
+            "io.imagestitcher.ar-worklet-runtime", DISPATCH_QUEUE_SERIAL);
+        _installed = NO;
+        _installLock = [[NSLock alloc] init];
+        _callbackLock = [[NSLock alloc] init];
+        _firstPartyCallback = nil;
+    }
+    return self;
+}
+
+- (void)setFirstPartyCallback:(RNSARFirstPartyCallback)callback {
+    [_callbackLock lock];
+    // Copy the block to move it from stack to heap (ARC handles
+    // the copy semantics for blocks assigned to strong ivars).
+    _firstPartyCallback = [callback copy];
+    [_callbackLock unlock];
+}
+
+- (void)installIfNeeded {
+    [_installLock lock];
+    if (_installed) {
+        [_installLock unlock];
+        return;
+    }
+
+    // Build the `workletCallInvoker`.  `RNWorklet::JsiWorkletContext`
+    // accepts a `std::function<void(std::function<void()>&&)>` that
+    // posts a task onto whatever thread the runtime should execute
+    // on.  We post onto `_dispatchQueue` (a serial GCD queue).
+    //
+    // The captured `fp` is moved into a `std::shared_ptr` so the
+    // dispatch_async block (which can only capture copyable types)
+    // can hold + invoke it.  Without the shared_ptr indirection
+    // we'd hit `std::function` copy-construction on the
+    // non-copyable forward closure.
+    dispatch_queue_t queue = _dispatchQueue;
+    auto invoker = [queue](std::function<void()>&& fp) {
+        auto fpHolder = std::make_shared<std::function<void()>>(std::move(fp));
+        dispatch_async(queue, ^{ (*fpHolder)(); });
+    };
+
+    _ctx = std::make_shared<RNWorklet::JsiWorkletContext>(
+        "stitcher.ar", std::move(invoker));
+    _installed = YES;
+    [_installLock unlock];
+}
+
+- (BOOL)isInstalled {
+    [_installLock lock];
+    BOOL result = _installed;
+    [_installLock unlock];
+    return result;
+}
+
+- (void)dispatchFrame:(ARFrame *)arFrame pose:(RNSARFramePose *)pose {
+    // ── Phase 3c — first-party (synchronous on caller thread) ────
+    //
+    // The callback (installed by RNSARSession.start) wraps the
+    // existing `incrementalConsumer.consumeFrame(...)` call path,
+    // so net behavior is byte-identical to the v0.7.x direct call.
+    //
+    // **Why first-party runs on the CALLER thread (not the worklet
+    // thread):** ARKit's pool reuse contract requires the pixel
+    // buffer to be consumed before this method returns.  The Swift
+    // consumer does that synchronously inside `consumeFrame(...)`
+    // (converts NV12 → cv::Mat synchronously, then defers heavier
+    // work to its own queue).  If we posted the callback onto
+    // `_dispatchQueue`, the delegate would return before
+    // `consumeFrame` ran, ARKit could reclaim the buffer, and we'd
+    // get torn frames.
+    //
+    // Pull the callback under the lock so a concurrent
+    // `setFirstPartyCallback:` doesn't race with our invocation.
+    [_callbackLock lock];
+    RNSARFirstPartyCallback cb = _firstPartyCallback;
+    [_callbackLock unlock];
+    if (cb != nil) {
+        cb(arFrame, pose);
+    }
+
+    // ── Phase 4b — host-worklet fan-out (async on worklet thread) ──
+    //
+    // Snapshot the native registry.  Fast-path early-exit when no
+    // host worklets are registered — saves the host-object alloc
+    // + dispatch_async hop on every frame (the common case in
+    // first-party-only deployments).
+    auto invokers = retailens::StitcherWorkletRegistry::shared().snapshot();
+    if (invokers.empty()) {
+        return;
+    }
+
+    // Construction must happen on the caller thread.  The
+    // `IOSPixelBufferReader` ctor takes a `CFBridgingRetain(arFrame)`
+    // so the underlying CVPixelBuffer stays alive until the host
+    // object's `invalidate` runs.  ARKit's pool will throttle the
+    // *next* frame's delegate call while we hold this retain
+    // (acceptable for Phase 4b minimum-viable; a per-frame buffer
+    // copy is a known optimization for later if throughput
+    // suffers).
+    StitcherFrameHostObject *hostObj =
+        [StitcherFrameHostObject fromARFrame:arFrame pose:pose];
+
+    // Hand the host object's jsi::HostObject shared_ptr (boxed as
+    // void*) into the lambda.  The lambda will:
+    //   1. Cast back to `std::shared_ptr<jsi::HostObject>*`
+    //   2. Construct the JS-side `jsi::Object` from the host object
+    //   3. Invoke each registered WorkletInvoker with the JS-side
+    //      object as its single argument
+    //   4. Delete the boxed shared_ptr
+    //   5. Invalidate the host object on caller-side retained ref
+    //
+    // The dispatch is via worklets-core's `JsiWorkletContext::
+    // invokeOnWorkletThread` — internally posts onto our serial
+    // `_dispatchQueue` via the `workletCallInvoker` we set up in
+    // `installIfNeeded`.
+    //
+    // `hostObj` (the Obj-C facade) is captured by the block; ARC
+    // retains it for the block's lifetime, so the host object
+    // outlives the dispatch.  We invalidate AFTER all worklets
+    // return.
+    void *hostObjPtr = [hostObj jsiHostObjectPtr];
+    if (hostObjPtr == NULL) {
+        // Host object construction failed (e.g., ARFrame was nil).
+        // Skip fan-out.
+        os_log_error(OS_LOG_DEFAULT,
+            "[RNSARWorkletRuntime] host object jsiHostObjectPtr was NULL; "
+            "skipping host-worklet fan-out for this frame.");
+        return;
+    }
+
+    if (_ctx == nullptr) {
+        // installIfNeeded wasn't called.  This shouldn't happen
+        // because RNSARSession.start calls installIfNeeded before
+        // any frames arrive, but guard defensively.
+        os_log_error(OS_LOG_DEFAULT,
+            "[RNSARWorkletRuntime] _ctx is nullptr in dispatchFrame; "
+            "did installIfNeeded run?  Skipping host-worklet fan-out.");
+        // Leaked: hostObjPtr (boxed shared_ptr).  Reclaim it here so
+        // we don't leak even on the defensive path.
+        delete static_cast<std::shared_ptr<facebook::jsi::HostObject>*>(hostObjPtr);
+        return;
+    }
+
+    _ctx->invokeOnWorkletThread(
+        [invokers, hostObjPtr, hostObj](
+            RNWorklet::JsiWorkletContext* /*ctx*/,
+            facebook::jsi::Runtime& rt) {
+            // Reclaim the boxed shared_ptr.  After this scope the
+            // unique_ptr automatically deletes the heap allocation
+            // even if the JSI call below throws.
+            std::unique_ptr<std::shared_ptr<facebook::jsi::HostObject>> spBox(
+                static_cast<std::shared_ptr<facebook::jsi::HostObject>*>(
+                    hostObjPtr));
+
+            facebook::jsi::Object frameJsi =
+                facebook::jsi::Object::createFromHostObject(rt, *spBox);
+            // Pass the host object as a single argument.  The
+            // worklet's signature is `(frame: StitcherFrame) =>
+            // void` — matches.
+            //
+            // Construct the argument value as a copy of the
+            // Object (jsi::Value(rt, obj) makes a fresh Value
+            // wrapping the same host object — refcounted by JSI).
+            facebook::jsi::Value frameVal(rt, frameJsi);
+
+            for (const auto& entry : invokers) {
+                if (!entry.invoker) continue;
+                try {
+                    entry.invoker->call(rt, facebook::jsi::Value::undefined(),
+                                         &frameVal, 1);
+                } catch (const facebook::jsi::JSError& jsErr) {
+                    // Per-worklet failure isolation: one host
+                    // worklet throwing must NOT stop the lib's own
+                    // path or other host worklets.  Log + continue.
+                    os_log_error(OS_LOG_DEFAULT,
+                        "[RNSARWorkletRuntime] host worklet '%{public}s' "
+                        "threw JS error: %{public}s",
+                        entry.id.c_str(), jsErr.what());
+                } catch (const std::exception& e) {
+                    os_log_error(OS_LOG_DEFAULT,
+                        "[RNSARWorkletRuntime] host worklet '%{public}s' "
+                        "threw native exception: %{public}s",
+                        entry.id.c_str(), e.what());
+                } catch (...) {
+                    os_log_error(OS_LOG_DEFAULT,
+                        "[RNSARWorkletRuntime] host worklet '%{public}s' "
+                        "threw unknown exception", entry.id.c_str());
+                }
+            }
+
+            // Drop the JSI references BEFORE invalidating the host
+            // object — `frameJsi` / `frameVal` go out of scope at
+            // end of lambda anyway, but be explicit.  Then
+            // invalidate the Obj-C facade which releases the
+            // CFBridgingRetain'd ARFrame so ARKit's pool can recycle.
+            [hostObj invalidate];
+        });
+}
+
+@end

package/ios/Sources/RNImageStitcher/StitcherFrameHostObject.h

@@ -0,0 +1,60 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// StitcherFrameHostObject.h — Obj-C facade for the v0.8.0
+// `StitcherFrame` JSI host object.  Header is intentionally
+// Obj-C-only (no `<jsi/jsi.h>` import) so this can land in the
+// public CocoaPods umbrella without breaking `use_frameworks!` hosts
+// (same rationale as `KeyframeGateBridge.h`).
+//
+// The C++ JSI host object class lives in the .mm; this facade
+// exposes only what cross-module callers need:
+//
+//   - Factory `+ fromARFrame:pose:` that the AR worklet runtime
+//     calls per ARFrame to construct a host object backed by the
+//     current AR session's frame.
+//   - Opaque accessor `- (void *)jsiHostObjectPtr` returning the
+//     `std::shared_ptr<facebook::jsi::HostObject> *` (boxed) that
+//     the worklet runtime hands to `jsi::Object::createFromHostObject`.
+//
+// Lifetime: the Obj-C wrapper holds the C++ shared_ptr; ARC frees
+// the wrapper when nothing references it.  Worklet runtime
+// invalidates the underlying ARFrame retain when the dispatch
+// returns; after invalidation, JSI access throws.
+
+#pragma once
+
+#import <Foundation/Foundation.h>
+#import <ARKit/ARKit.h>
+
+@class RNSARFramePose;
+
+NS_ASSUME_NONNULL_BEGIN
+
+NS_SWIFT_NAME(StitcherFrameHostObject)
+@interface StitcherFrameHostObject : NSObject
+
+/// Construct a host object backed by the supplied ARFrame + pose.
+/// Retains the ARFrame for the host object's lifetime — caller can
+/// safely release their reference.
+///
+/// Thread: safe to call from the ARSession delegate queue; the
+/// resulting host object's JSI access must happen on the worklet
+/// runtime's thread (separate queue).
++ (instancetype)fromARFrame:(ARFrame *)arFrame pose:(RNSARFramePose *)pose;
+
+/// Mark the host object's underlying ARFrame as no longer accessible.
+/// Subsequent JSI property reads return `undefined` or throw,
+/// depending on the property.  Idempotent.
+- (void)invalidate;
+
+/// Opaque pointer to a `std::shared_ptr<facebook::jsi::HostObject>`.
+/// The worklet runtime (Obj-C++ context with JSI available) casts
+/// this back via `*reinterpret_cast<std::shared_ptr<facebook::jsi::HostObject>*>(ptr)`
+/// to hand to `jsi::Object::createFromHostObject`.
+///
+/// Returns `NULL` if the host object has been invalidated.
+- (nullable void *)jsiHostObjectPtr;
+
+@end
+
+NS_ASSUME_NONNULL_END

package/ios/Sources/RNImageStitcher/StitcherFrameHostObject.mm

@@ -0,0 +1,214 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// StitcherFrameHostObject.mm — iOS-specific wrapper for the shared
+// `retailens::StitcherFrameJsiHostObject` (defined in
+// `cpp/stitcher_frame_jsi.{hpp,cpp}`).
+//
+// Owns:
+//   - The Obj-C facade callable from Swift / other Obj-C / .mm files.
+//   - The iOS-specific `PixelBufferReader` impl (wraps a
+//     `CVPixelBufferRef` from `ARFrame.capturedImage`; lock / memcpy
+//     / unlock pattern).
+//   - The Obj-C → C++ extraction logic that builds a
+//     `retailens::StitcherFrameData` from an `ARFrame` + the lib's
+//     `RNSARFramePose`.
+//
+// Does NOT own:
+//   - The JSI `get` / `getPropertyNames` dispatch.  That lives in
+//     `cpp/stitcher_frame_jsi.cpp` and is identical to the Android
+//     implementation (DRY across platforms).
+
+#import "StitcherFrameHostObject.h"
+
+#import <Foundation/Foundation.h>
+#import <CoreVideo/CVPixelBuffer.h>
+#import <CoreMedia/CoreMedia.h>
+#import <os/log.h>
+
+#include <jsi/jsi.h>
+
+#include <algorithm>
+#include <cstring>
+#include <memory>
+#include <string>
+#include <utility>
+
+#include "stitcher_frame_data.hpp"
+#include "stitcher_frame_jsi.hpp"
+
+using namespace facebook;
+
+// Forward-declare the Swift `RNSARFramePose` Obj-C surface we need.
+// This matches the pattern in `KeyframeGateFrameProcessor.mm`
+// (forward-declaring `IncrementalStitcher`) — avoids depending on
+// the autogenerated `RNImageStitcher-Swift.h`, which is created at
+// build time and not always available to .mm files in this pod.
+//
+// MUST stay in sync with `RNSARSession.swift::RNSARFramePose` —
+// adding a new field there means adding it here too.
+@class RNSARFramePose;
+@interface RNSARFramePose : NSObject
+@property (nonatomic, readonly) double tx;
+@property (nonatomic, readonly) double ty;
+@property (nonatomic, readonly) double tz;
+@property (nonatomic, readonly) double qx;
+@property (nonatomic, readonly) double qy;
+@property (nonatomic, readonly) double qz;
+@property (nonatomic, readonly) double qw;
+@property (nonatomic, readonly) NSInteger imageWidth;
+@property (nonatomic, readonly) NSInteger imageHeight;
+@property (nonatomic, readonly) double timestampMs;
+@end
+
+#pragma mark - iOS PixelBufferReader
+
+namespace {
+
+/// iOS-specific `retailens::PixelBufferReader` impl.  See the base
+/// class docstring for the general contract (thread-affinity,
+/// invalidation semantics, Y-plane-only constraint).  This subclass
+/// adds:
+///   - `CVPixelBuffer` lock/memcpy/unlock per copyTo
+///   - `CFBridgingRetain` of the parent `ARFrame` so ARKit's
+///     pool can't reclaim the underlying buffer mid-read
+class IOSPixelBufferReader : public retailens::PixelBufferReader {
+ public:
+  explicit IOSPixelBufferReader(ARFrame* arFrame) {
+    // Retain the ARFrame for our lifetime.  CFBridgingRetain hands
+    // ARC ownership to our void*.  Released in destructor.
+    _retainedFrame = (void*)CFBridgingRetain(arFrame);
+    CVPixelBufferRef pixelBuffer = arFrame.capturedImage;
+    if (pixelBuffer != NULL) {
+      _bytesPerRow = CVPixelBufferGetBytesPerRow(pixelBuffer);
+      _height = CVPixelBufferGetHeight(pixelBuffer);
+    }
+  }
+
+  ~IOSPixelBufferReader() override {
+    // Transfer ownership back to ARC, which then releases.
+    if (_retainedFrame != nullptr) {
+      ARFrame* frame = CFBridgingRelease(_retainedFrame);
+      (void)frame;
+      _retainedFrame = nullptr;
+    }
+  }
+
+  std::size_t byteSize() const override {
+    return _bytesPerRow * _height;
+  }
+
+  std::size_t copyTo(uint8_t* dst, std::size_t maxBytes) override {
+    if (_retainedFrame == nullptr) return 0;
+    ARFrame* frame = (__bridge ARFrame*)_retainedFrame;
+    CVPixelBufferRef pixelBuffer = frame.capturedImage;
+    if (pixelBuffer == NULL) return 0;
+
+    CVPixelBufferLockBaseAddress(pixelBuffer, kCVPixelBufferLock_ReadOnly);
+    const uint8_t* src = (const uint8_t*)CVPixelBufferGetBaseAddress(pixelBuffer);
+    std::size_t toCopy = std::min<std::size_t>(byteSize(), maxBytes);
+    if (src != nullptr && toCopy > 0) {
+      std::memcpy(dst, src, toCopy);
+    } else {
+      toCopy = 0;
+    }
+    CVPixelBufferUnlockBaseAddress(pixelBuffer, kCVPixelBufferLock_ReadOnly);
+    return toCopy;
+  }
+
+ private:
+  void* _retainedFrame = nullptr;   // CFBridgingRetain'd ARFrame
+  std::size_t _bytesPerRow = 0;
+  std::size_t _height = 0;
+};
+
+}  // anonymous namespace
+
+#pragma mark - Obj-C facade
+
+@implementation StitcherFrameHostObject {
+  std::shared_ptr<retailens::StitcherFrameJsiHostObject> _hostObject;
+}
+
++ (instancetype)fromARFrame:(ARFrame*)arFrame pose:(RNSARFramePose*)pose {
+  StitcherFrameHostObject* obj = [[self alloc] init];
+
+  retailens::StitcherFrameData data;
+  data.source = "ar";
+  data.width = static_cast<int32_t>(pose.imageWidth);
+  data.height = static_cast<int32_t>(pose.imageHeight);
+  // ARKit's `kCVPixelFormatType_420YpCbCr8BiPlanarFullRange` (NV12)
+  // is reported as "yuv".  Other formats (rare in ARKit; possible if
+  // ARWorldTrackingConfiguration.videoFormat is overridden to BGRA)
+  // → "unknown" + os_log warning so worklets that gate on
+  // `pixelFormat === 'yuv'` can be debugged without a screen recording.
+  OSType pf = CVPixelBufferGetPixelFormatType(arFrame.capturedImage);
+  if (pf == kCVPixelFormatType_420YpCbCr8BiPlanarFullRange ||
+      pf == kCVPixelFormatType_420YpCbCr8BiPlanarVideoRange) {
+    data.pixelFormat = "yuv";
+  } else {
+    data.pixelFormat = "unknown";
+    os_log_error(OS_LOG_DEFAULT,
+        "[StitcherFrame] unexpected ARKit pixel format 0x%x; "
+        "worklet receives pixelFormat='unknown' and toArrayBuffer() "
+        "bytes are first-plane only (layout undefined for unknown "
+        "formats).  See StitcherFrame.ts docstring.", (unsigned int)pf);
+  }
+  // ARKit doesn't have a `Frame.orientation` per se; pose carries
+  // the imageWidth >= imageHeight discriminator the lib uses
+  // elsewhere (`isLandscape`).  v0.8.0 ships a coarse mapping;
+  // worklets that need exact UI orientation can read it from
+  // device-orientation sensors.
+  data.orientation =
+      (pose.imageWidth >= pose.imageHeight) ? "landscape-right" : "portrait";
+  // `ARFrame.timestamp` is CFAbsoluteTime (seconds since epoch).
+  // Convert to ns to match vc Frame.timestamp.
+  data.timestampNs = arFrame.timestamp * 1e9;
+
+  data.qx = pose.qx;
+  data.qy = pose.qy;
+  data.qz = pose.qz;
+  data.qw = pose.qw;
+  data.tx = pose.tx;
+  data.ty = pose.ty;
+  data.tz = pose.tz;
+  data.hasTranslation = true;   // AR mode always has translation
+
+  switch (arFrame.camera.trackingState) {
+    case ARTrackingStateNotAvailable:
+      data.arTrackingState = "notAvailable";
+      break;
+    case ARTrackingStateLimited:
+      data.arTrackingState = "limited";
+      break;
+    case ARTrackingStateNormal:
+      data.arTrackingState = "normal";
+      break;
+  }
+
+  data.pixelReader = std::make_shared<IOSPixelBufferReader>(arFrame);
+
+  // Use the static factory (private ctor enforces shared_ptr
+  // ownership — required for `shared_from_this()` inside the JSI
+  // `toArrayBuffer` lambda).
+  obj->_hostObject =
+      retailens::StitcherFrameJsiHostObject::create(std::move(data));
+  return obj;
+}
+
+- (void)invalidate {
+  if (_hostObject) {
+    _hostObject->invalidate();
+  }
+}
+
+- (void*)jsiHostObjectPtr {
+  if (!_hostObject) return NULL;
+  // Box a heap-allocated copy of the shared_ptr to the abstract
+  // `jsi::HostObject` base.  Caller (worklet runtime) does:
+  //   auto sp = static_cast<std::shared_ptr<jsi::HostObject>*>(ptr);
+  //   auto jsObj = jsi::Object::createFromHostObject(rt, *sp);
+  //   delete sp;
+  return new std::shared_ptr<jsi::HostObject>(_hostObject);
+}
+
+@end

package/ios/Sources/RNImageStitcher/StitcherJsiInstaller.h

@@ -0,0 +1,42 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// StitcherJsiInstaller.h — RN module that installs the
+// `globalThis.__stitcherProxy` JSI host object on the main JS
+// runtime.  Called once at lib boot from the TS layer
+// (`src/index.ts` or the `useFrameProcessor` hook) via a
+// synchronous JS bridge call.
+//
+// The proxy exposes two host functions:
+//
+//   __stitcherProxy.install(workletFn)  →  string ID
+//   __stitcherProxy.uninstall(id)       →  undefined
+//
+// `install` wraps the worklet function into a
+// `RNWorklet::WorkletInvoker` and stores it in the C++
+// `retailens::StitcherWorkletRegistry` singleton (in
+// `cpp/stitcher_worklet_registry.{hpp,cpp}`).  The AR worklet
+// runtime's per-frame dispatch reads from that registry to fan
+// out invocations.
+//
+// Why a RN module (not a vanilla NSObject installable):
+//   - Hosts can't reliably reach into the JSI runtime from JS
+//     without a native sync method to broker the install.
+//   - `RCT_EXPORT_BLOCKING_SYNCHRONOUS_METHOD` is the documented
+//     pattern for "JS calls a native method synchronously to
+//     install JSI bindings on the main runtime".  vision-camera
+//     uses the same pattern (`VisionCameraInstaller.mm`).
+//   - In RN's bridgeless mode the legacy `RCTCxxBridge.runtime`
+//     accessor still works (vc has a comment to migrate but it
+//     hasn't been needed yet — same applies to us).
+
+#pragma once
+
+#import <Foundation/Foundation.h>
+#import <React/RCTBridgeModule.h>
+
+NS_ASSUME_NONNULL_BEGIN
+
+@interface StitcherJsiInstaller : NSObject <RCTBridgeModule>
+@end
+
+NS_ASSUME_NONNULL_END