core+agents: JIT bundle resolution stage 1 — R03 flips

[obj-p]

What

Stage 1 of docs/jit-bundle-resolution.md: imageless JIT-compiled classes get their Bundle(for:) redirected to the target's built framework wrapper, closing R03's resource half (the last row of the dissolved resource-staging cluster).

• The hook lives in each agent binary — a BundleRedirect objc_library on macOS (alwayslink, ARC-verified via aquery) and a keep-in-sync Swift mirror in the iOS agent app — because bridge generations can be torn down while the swizzled IMP must outlive them.
• The generated bridge declares the agent's setter via @_silgen_name (the set_preview_vc precedent) and calls it before setup and before every render, unconditionally: a nil wrapper emits a clearing call, so an agent surviving a mid-session build-system identity flip cannot keep a stale path.
• The wrapper rides BuildContext.resourceWrapperPath from CODESIGNING_FOLDER_PATH on both Xcode capture paths; SwiftPM and Bazel stay nil so the hook never installs there.
• Predicate decided by the stage-opening diagnostic through the real JIT: ORC-materialized classes report class_getImageName == NULL with Bundle(for:) falling back to the agent's main bundle — the hook redirects exactly that combination.

Verification

• Unit: BundleRedirectTests pins the hook decision table (redirect, real-class passthrough, replace, missing-path fallback, clear); BridgeGeneratorRedirectTests pins emission (set call before the view, clearing call on nil, setup-entry ordering, escaping). iOS agent builder hash re-pinned.
• Manual matrix: R03 flips — Xcode resources loaded, plist, Core Data model, and the generated color on macOS and iOS; R02 stays Spanish with the hook code present (inert on SPM); B04's real-image framework class keeps its own wrapper.
• Gates: 4-angle /simplify + 4-angle adversarial review (runtime safety incl. ARC/deadlock/re-entrancy probes, plumbing/lifecycle incl. refresh and literal paths — all findings folded: @_silgen_name over dlsym, nil-clearing call, setup-entry ordering, iOS nil-class guard, doc placement); both local tiers + manual RegressToolGuardTests green; lint exit 0.

Follow-ups (in the design doc)

Stage 2 retires the Generated*Symbols.swift text rewrite once the hook's record is clean; stage 3 adds R03's macOS half to RegressGuardTests. Known accepted behaviors documented: runtime-generated imageless classes (KVO subclasses) over-redirect harmlessly; Xcode-embedded resource-bearing SwiftPM packages need their own matrix row before that combination ships.

🤖 Generated with Claude Code