Embed live cloud previews in iOS

[Haz3-jolt]

Outcome

Embed an authorized live application preview in planned apps/ios/ while all tunnel, origin, and session authority remains in the daemon or control plane.

Current repository evidence

• Planned apps/ios/ is absent from the current repository.
• Mobile is required to remain a projection over generated SDK state and authenticated remote placement.

Acceptance criteria

• Open only daemon-issued preview identities and short-lived URLs bound to the paired device scope.
• Render connection, expiry, target, and security state and never infer a tunnel from raw tool output.
• Keep cookies, credentials, and application content out of notifications and unrelated client storage.
• Handle backgrounding, reconnect, tunnel expiry, revocation, and session termination without opening a second tunnel.
• Pass shared preview conformance plus native navigation, authorization, lifecycle, and accessibility tests.

Verification

Add generated-SDK conformance and native UI tests when planned apps/ios/ exists. No tests were run during this source audit.

Coordination

The tunnel backend owns all effects. Mobile foundations, remote pairing, and cloud placement remain separate prerequisites.

Source

ROADMAP.md, Product vision §16.3 and §18.3; Technical implementation roadmap, Phase 14 Daemon and placement features.

Repository audit

Audited against Axl 88944a2. Phase 14. Source inspection, not an executed behavior test. Roadmap references: L1328, L1439, L2356.

Tracking key: axl-backlog:learning.live-preview-ios.

Issue tracking

Axl issue mirror: #367 | GitHub #367

Related issues:

• #236 (Broker policy-bound live app previews from cloud sessions #236)