feat(ios): pocket ios — transitional ios-dev target, NativeScript shell, play on the simulator

[NathanWalker]

Stacked on #255 (feat/apple-host) — the first six commits here are that PR; review the last six. Rebases onto main once #255 merges.

What

The follow-up #255's description names: a dev-profile target id and CLI integration for the Apple host. pocket play ios nsengine now builds a guest against a resolved plan, stages it into a committed NativeScript shell, and launches it on an arm64 iOS simulator.

• tools/ios-profile.ts — transitional ios-dev profile (hostAbi 7, platform ios, form embedded, 480×272, raster density 1–4 as a registry input, capabilities input.touch + text.glyphs.baked), following the tools/iphone2g-profile.ts pattern: out of POCKET_TARGETS until device-level acceptance.
• tools/ios.ts — doctor / setup / devices / native / build / stage / play, mirroring the symbian shape. pocket play ios <app> delegates here. Doctor is green-path only on Apple Silicon (both native artifacts ship arm64 slices only); Rust is needed only for --rebuild-native — the published plugin carries a prebuilt xcframework. CocoaPods is verifiably not required.
• hosts/apple/ns-shell/ — a minimal committed NativeScript app, plan-driven (viewport, density, and guest mode come from the staged plan + current.json), answering the ns.ping service channel. Runs in place for incremental rebuilds.
• apps/nsengine/pocket.json — the demo's first committed manifest (the root-template fallback demands input.buttons, which this surface cannot advertise).
• Identity fix in PocketSurfaceView.m — plan-built bundles bake __POCKET_TARGET__/__POCKET_HOST_ABI__ and assertNativeHostContract refuses hosts that don't publish the pair. The surface now applies pocket_apple_set_identity("ios-dev", 7) at init (the C ABI existed; nothing called it). External-guest hosts publish the same pair on the ui namespace they mount (@nativescript/pocketjs). Without this, the very first plan-built run fails at mount.
• Tests: tests/ios-profile.test.ts (profile privacy, exact plan, density selection, refusals, an identity source-text guard, checkAppTypes), the nsengine admission-matrix row, CLI dispatch cases.
• Docs: docs/APPLE.md runbook, docs/STRUCTURE.md, README platform-evidence row.

Validation (iOS 26.5 simulator, Apple Silicon)

• pocket ios doctor fully green; pocket play ios nsengine --density=4 from a wiped shell (cold ~47 s) and warm (~16 s): nsengine renders, spinner animates, and the guest→host stat reads pong 1 with no interaction — the whole runEffect → svcSend → onEffect → post → svcPoll → deliver loop through the shell's handler.
• --external-guest: platform stat reads iOS 26.5 via NativeScript (guest code reading UIDevice through the metadata bindings). Same bundle, both modes.
• bun tools/test.ts unit stage green including the new file.

Notes for review

• The shell's package.json pins @nativescript/pocketjs and @nativescript/ios-quickjs by their npm names; both publish imminently. Validation above used --plugin-path/--runtime-tgz (documented in docs/APPLE.md), which override for the install and restore the committed template.
• No POCKET_TARGETS change and no schema change — promotion is a follow-up gated on a device acceptance suite, per the transitional-profile convention.
• ProMotion follow-up: PocketSurfaceView pins its CADisplayLink to 60 because the core advances in exact 1/60 s steps (the determinism/baked-motion contract). Driving iPhone ProMotion displays at 120 needs the step rate to become a target-profile property (durations resolved against the profile tick, CADisableMinimumFrameDurationOnPhone, and an adaptive preferredFrameRateRange). Note the iOS simulator reports maximumFramesPerSecond = 60 regardless, so 120 is device-only evidence.

🤖 Generated with Claude Code