feat(ffi): add thinking extraction, structured logging, and session retry

- Extract inline thinking tags (<think>, <thinking>, <analysis>,
  <reflection>, <inner_monologue>) from model responses and route them
  to the thinking card via on_thinking(), preventing them from appearing
  as visible response text
- Forward API-level reasoning_content (o1, o3) to thinking card
- Add tracing-android integration with per-crate log filtering: noisy
  HTTP/TLS crates (hyper, reqwest, rustls) suppressed to WARN, session
  events logged at INFO with structured fields (tool names, durations,
  response sizes, iteration counts)
- Add init_logging() UniFFI export called at app startup
- Fix reqwest TLS: change rustls-tls to rustls-tls-webpki-roots to
  bundle Mozilla root certificates (Android NDK has no system cert store)
- Add ensureSession() retry in TerminalViewModel to recover from
  session_start race conditions after ADB hot-swap
- Fix tool routing: clean up phantom tools, add FfiWebSearchTool wrapper,
  fix web_search name mismatch in build_android_tool_descs
- Add 12 unit tests for extract_thinking_from_text

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Natfii

app/src/main/java/com/zeroclaw/android/ZeroClawApplication.kt

@@ -212,6 +212,7 @@ class ZeroClawApplication :
         super.onCreate()
         System.loadLibrary("sqlcipher")
         System.loadLibrary("zeroclaw")
+        com.zeroclaw.ffi.initLogging()
         verifyCrateVersion()
 
         @Suppress("InjectDispatcher")

app/src/main/java/com/zeroclaw/android/ui/screen/terminal/TerminalViewModel.kt

@@ -80,6 +80,10 @@ class TerminalViewModel(
     private val _history = MutableStateFlow<List<String>>(emptyList())
     private val _historyIndex = MutableStateFlow(NO_HISTORY_SELECTION)
 
+    /** Whether [sessionStart] has succeeded at least once. */
+    @Volatile
+    private var sessionReady = false
+
     /** Observable terminal state combining persisted entries with transient UI state. */
     val state: StateFlow<TerminalState> =
         combine(
@@ -123,6 +127,7 @@ class TerminalViewModel(
                 withContext(Dispatchers.IO) {
                     sessionStart()
                 }
+                sessionReady = true
             } catch (e: Exception) {
                 logRepository.append(
                     LogSeverity.WARN,
@@ -133,6 +138,32 @@ class TerminalViewModel(
         }
     }
 
+    /**
+     * Attempts [sessionStart] if the initial call in [initAgentSession] failed.
+     *
+     * This handles the race where the daemon service hasn't finished
+     * starting when the ViewModel initialises. Called on [Dispatchers.IO]
+     * before the first [sessionSend].
+     *
+     * @return `true` if a session is now active.
+     */
+    @Suppress("TooGenericExceptionCaught")
+    private suspend fun ensureSession(): Boolean {
+        if (sessionReady) return true
+        return try {
+            sessionStart()
+            sessionReady = true
+            true
+        } catch (e: Exception) {
+            logRepository.append(
+                LogSeverity.WARN,
+                TAG,
+                "Session retry failed: ${e.message}",
+            )
+            false
+        }
+    }
+
     /**
      * Tears down the agent session when the ViewModel is destroyed.
      */
@@ -362,6 +393,11 @@ class TerminalViewModel(
 
             try {
                 withContext(Dispatchers.IO) {
+                    if (!ensureSession()) {
+                        throw IllegalStateException(
+                            "No active session — is the daemon running?",
+                        )
+                    }
                     sessionSend(
                         message,
                         images.map { it.base64Data },

zeroclaw-android/Cargo.lock

@@ -25,7 +25,7 @@ tokio = { version = "1.42", features = ["rt-multi-thread", "sync", "macros"] }
 tokio-util = { version = "0.7", features = ["rt"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
-reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls", "stream"] }
+reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls-webpki-roots", "stream"] }
 nanohtml2text = "0.1"
 futures-util = "0.3"
 anyhow = "1.0"
@@ -34,3 +34,7 @@ toml = "0.8"
 tracing = "0.1"
 chrono = "0.4"
 rhai = { version = "1.21", features = ["sync"] }
+
+[target.'cfg(target_os = "android")'.dependencies]
+tracing-android = "0.2"
+tracing-subscriber = { version = "0.3", default-features = false, features = ["registry", "env-filter"] }

zeroclaw-android/zeroclaw-ffi/Cargo.toml

@@ -42,6 +42,39 @@ use std::sync::Arc;
 
 pub use error::FfiError;
 
+/// Initialises the Rust tracing subscriber for Android logcat output.
+///
+/// On Android debug builds, routes `tracing` events (info, warn, error)
+/// to `__android_log_write` with the tag `"zeroclaw_ffi"`. On release
+/// builds or non-Android targets, this is a no-op.
+///
+/// Safe to call multiple times — the second and subsequent calls are
+/// silently ignored by the subscriber registry.
+#[uniffi::export]
+pub fn init_logging() {
+    #[cfg(target_os = "android")]
+    {
+        use tracing_subscriber::prelude::*;
+        use tracing_subscriber::EnvFilter;
+
+        // Noisy HTTP/TLS crates → WARN only; everything else → DEBUG.
+        let filter = if cfg!(debug_assertions) {
+            EnvFilter::new(
+                "debug,hyper=warn,hyper_util=warn,reqwest=warn,rustls=warn,h2=warn,tower=warn",
+            )
+        } else {
+            EnvFilter::new("warn")
+        };
+
+        if let Ok(layer) = tracing_android::layer("zeroclaw_ffi") {
+            let _ = tracing_subscriber::registry()
+                .with(layer.with_filter(filter))
+                .try_init();
+            tracing::info!("Rust tracing initialised");
+        }
+    }
+}
+
 /// Extracts a human-readable message from a caught panic payload.
 fn panic_detail(payload: &Box<dyn std::any::Any + Send>) -> String {
     payload