Beta convergence: phone-native CLI sandbox, subscriptions, and artifact runtime

[Harzva]

Summary

• Converge MobileCode into an advanced Beta candidate with reviewable safety, product-surface, provider-adapter, phone-native runtime, CI, and report commits.
• Add the typed CLI Hub and Android Alpine/PRoot execution path, bounded approvals/evidence, editable HTML plus PNG/PDF output, and approved HyperFrames MP4 rendering.
• Complete provider-specific subscription usage adapters without claiming unsupported consumer-subscription reuse or scraping private sessions.
• Harden Pure vs Dev Harness boundaries, checked-in Android projection consistency, local Helper authentication, emulator timeouts, and workspace/public-repository safety.
• Publish the reproducible 18-page technical report in Markdown and PDF, plus a verified visual PPTX artifact.

CI 401 closure

The Android Helper did receive the expected synthetic token. The persistent 401 came from process scope in reactivecircus/android-emulator-runner: adjacent script lines were executed in separate shells, so an auth header assigned on one line was absent from later curl requests. The workflow now sends the synthetic header explicitly on every request. Related hardening adds a shell-safe intent alias, non-sticky explicit startup, presence-only diagnostics, and a volatile per-request credential snapshot.

Technical report visual upgrade

• Added a product navigation map from Agent Chat through Capability Center, Build & Release, Models & Settings, typed execution, evidence, and artifacts.
• Added current Android API 36 captures for home, navigation, runtime, Extension Center, subscriptions, and security, plus a current iOS simulator launch capture.
• Added existing functional demonstrations for CLI Hub, Phone Use, and the editable HTML/WebView artifact flow, with explicit emulator evidence labels.
• Added a manifest-derived matrix for all 14 CLI Hub entries across support stage, install strategy, probe, auth, read-only tasks, mutation tasks, credential policy, and risk.
• Generated a real 16:9 PPTX through MobileCode's HTML-to-PPTX worker, rendered it back to PNG, and passed the presentation overflow check. Visual mode is verified; editable-text mode remains explicitly unsupported.

Artifacts:

• docs/technical-report/mobilecode-phone-native-harness-v0.md
• output/pdf/mobilecode-phone-native-harness-v0.pdf
• output/pptx/mobilecode-lark-channel-demo.pptx

Validation

• flutter test --reporter compact: 502 passed.
• Full analyzer snapshot: 0 errors, 241 warnings, 4,160 infos; exit 2 reflects existing strict-lint/legacy warning debt.
• Current Pure and Dev Harness debug APKs built locally.
• Local Android authenticated Helper smoke: expected token 200, wrong token 401, typed pwd success, app launch without fatal logcat signatures.
• Android Dev Harness native WebView PNG/PDF instrumentation: 2/2 passed on API 36 emulator.
• July 14 current Android navigation capture: six screens rendered from the current APK with no fatal app logcat signature.
• iPhone 17 Pro simulator build, initialized launch, and current-home capture passed without fatal Runner signatures.
• PPTX visual export: one 16:9 slide generated, re-rendered, and checked with no overflow.
• Previous code-head Mobile Runtime CI: passed.
• Previous code-head Android App Smoke Test: passed in 14m20s.
• Visual-report head Mobile Runtime CI: passed.
• Visual-report head Android App Smoke Test: Helper auth and typed execution passed, then the unaccelerated API 29 runner timed out on real UI readiness while the white splash remained visible.
• Current CI hardening keeps the white splash rejected, adds a MobileCode semantic-tree readiness check, and doubles the bounded slow-runner wait from 24 to 48 probes.
• UI-readiness hardening Mobile Runtime CI: passed.
• UI-readiness hardening Android App Smoke Test: passed in 16m10s; artifact inspection then found a System UI ANR dialog over a rendered MobileCode home surface.
• Current artifact hardening suppresses system error dialogs, dismisses a residual System UI dialog before capture, rejects the run if it persists, and requires non-empty hierarchy and screenshot artifacts.
• Current-head Mobile Runtime CI: running.
• Current-head Android App Smoke Test: running.

Beta release status

Repository convergence, split commits, PR synchronization, report generation, and the prior code-head Actions are complete. The release claim remains intentionally gated on current-head Actions and physical-device evidence:

• iPhone 11 is paired but still locked; CoreDevice reports ddiServicesAvailable=false and tunnelState=disconnected, so physical install/launch cannot complete yet.
• No physical Android handset is attached; permission, background, official CLI login, and one bounded business-task flow still need handset evidence.
• Provider quota cards must remain truthful where an official quota source is unavailable.

The implementation is therefore an advanced Beta candidate, not yet a fully releasable Beta, until current-head Actions and those physical-device gates are recorded.