feat(mobile): v1.18.0 "Dormant" - monetization scaffold

[doublegate]

Summary

• New standalone rustysnes-monetization UniFFI crate (Mobile Phase 5): a dormant
  entitlement/ad-pacing policy scaffold (check_entitlement, default_ad_pacing_policy,
  should_show_ad). Never a dependency of the deterministic core — no rustysnes-core/
  -cpu/-ppu/-apu/-cart dependency in either direction. Every concrete pricing/pacing
  number is an explicit placeholder default, not a committed figure (unlike RustyNES's own
  already-shipped module) — the real store-launch decision stays with
  docs/mobile-readiness.md's standing "Mobile Phase 6" gate.
• Wired into both mobile shells as an inert dependency: compiled in, called once at startup,
  logged only, no real store SDK calls, no paywall/UI shown.
• Android: build.gradle.kts builds the new crate's native .so alongside the existing two
  and generates its own separate UniFFI Kotlin bindings. Verified for real: rebuilt via a real
  Gradle build, installed on the real AVD, launched, and confirmed via logcat:
  monetization scaffold (dormant): unlocked=true minIntervalSecs=300 sessionsBeforeFirstAd=3,
  app stayed alive afterward.
• iOS: scripts/build-ios-xcframework.sh gained a third crate to build/package
  (RustysnesMonetizationFFI.xcframework) and ios/project.yml gained it as a target
  dependency. The Rust staticlib/rlib outputs cross-compile for real in this dev environment;
  the cdylib output the bindgen/xcframework step needs only links with a real Apple toolchain
  (confirmed pre-existing, not introduced by this PR — rustysnes-mobile's own cdylib fails
  identically in isolation), so the full pipeline is compile-verified via ios.yml's real macOS
  CI only, matching the platform's standing scaffolded-only disposition since v1.16.0.

Test plan

• cargo test --workspace --exclude rustysnes-android — all green
• cargo clippy --workspace --exclude rustysnes-android --all-targets -- -D warnings — clean
• cargo fmt --check — clean
• RUSTDOCFLAGS="-D warnings" cargo doc --workspace --exclude rustysnes-android --no-deps — clean
• cargo build -p rustysnes-core --target thumbv7em-none-eabihf --no-default-features — no_std gate green
• cargo deny check — advisories/bans/licenses/sources all ok
• cargo audit — 0 vulnerabilities
• Real Android Gradle build + AVD install/launch + logcat verification of the dormant scaffold log line, app remained stable (no crash)
• Real aarch64-apple-ios staticlib/rlib cross-compile for rustysnes-monetization
• Full iOS xcframework + xcodebuild pipeline — pending ios.yml's macOS CI run on this PR

🤖 Generated with Claude Code

[gemini-code-assist]

Code Review

This pull request introduces the rustysnes-monetization crate (Mobile Phase 5), a standalone UniFFI library providing a dormant entitlement and ad-pacing policy scaffold. It is integrated as an inert dependency into both the Android and iOS mobile shells, where it is invoked once at startup for logging purposes only. Feedback on the changes identifies a potential runtime crash in the Swift implementation when casting a negative Double to UInt64 if the system clock is set before 1970, and suggests safeguarding the conversion using max(0.0, ...).

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[Copilot]

Pull request overview

This PR introduces a new mobile-only UniFFI crate (rustysnes-monetization) that provides a dormant entitlement + ad-pacing policy API, and wires it into both Android and iOS shells as an inert startup-time log (no gating/UI/SDK integration). It keeps the determinism boundary intact by not depending on any rustysnes-* core chip/core crates and by keeping the monetization APIs pure and host-time-injected.

Changes:

• Add new standalone crates/rustysnes-monetization UniFFI crate with placeholder policy APIs (check_entitlement, default_ad_pacing_policy, should_show_ad) plus unit tests.
• Integrate the new crate into Android (Gradle cargo ndk build + separate UniFFI bindgen output) and iOS (xcframework packaging + Swift bindgen generation) as a one-time startup log.
• Update iOS/Android app versions and document the Mobile Phase 5 verification status in docs/mobile-readiness.md and CHANGELOG.md.

Reviewed changes

Copilot reviewed 11 out of 13 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
scripts/build-ios-xcframework.sh	Builds/packaging updated to include the new monetization crate and generate Swift bindings + xcframework.
ios/RustySNES/Sources/RustySNESApp.swift	Adds an iOS startup hook to log the dormant monetization scaffold state.
ios/project.yml	Bumps iOS marketing version and adds the monetization xcframework dependency.
docs/mobile-readiness.md	Documents Mobile Phase 5 verification for the new monetization scaffold and inert shell wiring.
crates/rustysnes-monetization/src/lib.rs	New UniFFI-exported pure policy API + tests for entitlement and ad pacing.
crates/rustysnes-monetization/src/bin/uniffi-bindgen.rs	New bindgen helper binary (feature-gated) for UniFFI Swift/Kotlin generation.
crates/rustysnes-monetization/Cargo.toml	New crate manifest defining crate-types and UniFFI dependency/feature gating.
CHANGELOG.md	Adds Unreleased notes describing the new crate and inert Android/iOS wiring.
Cargo.toml	Adds rustysnes-monetization to the workspace members list.
Cargo.lock	Records the new rustysnes-monetization package entry.
android/app/src/main/kotlin/com/doublegate/rustysnes/MainActivity.kt	Logs dormant monetization scaffold once at Android startup via generated UniFFI bindings.
android/app/build.gradle.kts	Builds/copies the new .so and adds a dedicated UniFFI bindgen task + source dir.
.gitignore	Ignores generated Swift bindings for the monetization UniFFI surface.