#3346 [GUI] Opt-in Mac pairing and a native iPhone companion

说明

## Area

[GUI]

## What do you want to do?

Read and continue an existing Strata Mac conversation from an iPhone, including its history, visible Thinking, progress, browser/tool activity, pending approvals and Stop. Work should remain on the Mac and continue when the phone closes; opening the phone should not create an unrelated agent session or change that conversation's model, working folder or permission mode.

Today this requires returning to the Mac or using a separate remote-desktop/browser arrangement. The proposed native client follows Strata's existing colors and keeps the phone controls focused on the current conversation.

## Proposed scope

Two complementary draft PRs are available from the same upstream `main` base:

1. Mac support, #3347: an opt-in **Pair iPhone** screen, certificate-pinned HTTPS bridge with expiring one-use invitations and revocable device tokens, a durable shared-conversation catalog, and existing-session continuation/activity/approval controls.
2. Native iPhone client, #3348: SwiftUI pairing, shared history and continuation, expandable Thinking and ordered progress, browser/tool cards, approvals, Stop, status and selection of models already configured on the Mac. This client requires #3347 at runtime.

Pairing remains off until enabled. The existing inference host stays on loopback; the phone receives a narrow authenticated API. A paired phone is trusted to read the shared conversation catalog, continue work using the Mac chat's existing permissions, and answer pending approvals. Raw tool arguments, provider configuration and runtime protocol are not exported. The initial scope is local-network pairing, without a public relay or account service; browser activity is represented by readable action/result cards.

The implementation has been exercised locally on macOS, in an iOS simulator, and through development installation on an iPhone. The PRs separate fresh checks on the split upstream branches from earlier installed-build observations and list unverified platforms and distribution steps explicitly. Fresh checks include 23 bridge tests, 48 focused host tests, host type checking, the desktop UI build, the iPhone simulator build, 26 unit tests, and the full synthetic shared-conversation UI workflow using the real TLS bridge. No engine or GPU backend code is changed.

## Scope discussion

This is a substantial feature, so the submissions will remain drafts while maintainers decide whether this belongs in Strata and whether the split/API/permission boundary is appropriate. No maintainer agreement or release acceptance is assumed. The complete work remains available on the contributor's fork; the draft PRs provide concrete diffs for discussion rather than a request to merge before scope is agreed.