@glassly/engine 0.1.0-dev.0

package/build/services/OtaArtifactDownloader.js

@@ -0,0 +1,226 @@
+import * as RNFS from "@dr.pogodin/react-native-fs";
+export class OtaArtifactError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "OtaArtifactError";
+    }
+}
+const ASG_PACKAGE = "com.mentra.asg_client";
+export function otaArtifactsDirectory() {
+    return `${RNFS.DocumentDirectoryPath}/ota_artifacts`;
+}
+/**
+ * Derive the artifact list the pending update needs from a completed check.
+ * Works off the raw manifest body (not the normalized check fields) so the URLs and
+ * hashes match exactly what the glasses will re-parse.
+ */
+export function planArtifacts(result) {
+    if (!result.manifestBody) {
+        throw new OtaArtifactError("manifest_invalid", "Check result carries no manifest body");
+    }
+    let manifest;
+    try {
+        manifest = JSON.parse(result.manifestBody);
+    }
+    catch {
+        throw new OtaArtifactError("manifest_invalid", "Manifest body is not valid JSON");
+    }
+    const entries = [];
+    if (result.updates.includes("apk")) {
+        const app = manifest.apps?.[ASG_PACKAGE];
+        const url = typeof app?.apkUrl === "string" ? app.apkUrl : null;
+        if (!url) {
+            throw new OtaArtifactError("manifest_invalid", "Manifest has no apkUrl for the pending APK update");
+        }
+        entries.push({
+            kind: "apk",
+            url,
+            sha256: requireSha256(app, "APK"),
+        });
+    }
+    if (result.updates.includes("mtk") && result.mtkPatch) {
+        const raw = (manifest.mtk_patches ?? []).find((patch) => firmwareUrl(patch) === firmwareUrl(result.mtkPatch));
+        const url = firmwareUrl(raw) ?? firmwareUrl(result.mtkPatch);
+        if (!url) {
+            throw new OtaArtifactError("manifest_invalid", "Manifest has no URL for the pending MTK patch");
+        }
+        entries.push({
+            kind: "mtk",
+            url,
+            sha256: requireSha256(raw, "MTK"),
+        });
+    }
+    if (result.updates.includes("bes") && manifest.bes_firmware) {
+        const raw = manifest.bes_firmware;
+        const url = firmwareUrl(raw);
+        if (!url) {
+            throw new OtaArtifactError("manifest_invalid", "Manifest has no URL for the pending BES firmware");
+        }
+        entries.push({
+            kind: "bes",
+            url,
+            sha256: requireSha256(raw, "BES"),
+        });
+    }
+    return entries;
+}
+/**
+ * Download every planned artifact into the on-disk hash-keyed store, reusing files that
+ * already verify. Sequential on purpose: progress is legible and the hotspot window that
+ * follows is the slow part, not phone-side parallelism.
+ */
+export async function prepareArtifacts(plan, onProgress, nativeDownload) {
+    const directory = otaArtifactsDirectory();
+    await RNFS.mkdir(directory, { NSURLIsExcludedFromBackupKey: true });
+    const prepared = [];
+    for (let index = 0; index < plan.length; index++) {
+        const entry = plan[index];
+        const cachedPath = `${directory}/${entry.sha256}`;
+        if (await RNFS.exists(cachedPath)) {
+            const cachedHash = (await RNFS.hash(cachedPath, "sha256")).toLowerCase();
+            if (cachedHash === entry.sha256) {
+                prepared.push({ ...entry, filePath: cachedPath });
+                continue;
+            }
+            await safeUnlink(cachedPath);
+        }
+        const partPath = `${directory}/download-${index}.part`;
+        await safeUnlink(partPath);
+        try {
+            const reportProgress = (bytesWritten, contentLength) => {
+                onProgress?.({
+                    kind: entry.kind,
+                    index,
+                    totalCount: plan.length,
+                    artifactPercent: contentLength > 0 ? Math.round((bytesWritten / contentLength) * 100) : 0,
+                    bytesWritten,
+                    contentLength,
+                });
+            };
+            const downloadResult = nativeDownload
+                ? await nativeDownload(entry, partPath, reportProgress)
+                : await RNFS.downloadFile({
+                    fromUrl: entry.url,
+                    toFile: partPath,
+                    connectionTimeout: 30_000,
+                    readTimeout: 30_000,
+                    progressDivider: 5,
+                    progress: (res) => {
+                        reportProgress(res.bytesWritten, res.contentLength);
+                    },
+                }).promise;
+            if (downloadResult.statusCode !== 200) {
+                throw new OtaArtifactError("artifact_download_failed", `Download of ${entry.kind} artifact failed with HTTP ${downloadResult.statusCode}`);
+            }
+            const actualSha256 = (await RNFS.hash(partPath, "sha256")).toLowerCase();
+            if (actualSha256 !== entry.sha256) {
+                throw new OtaArtifactError("artifact_verify_failed", `${entry.kind} artifact hash mismatch: expected ${entry.sha256}, got ${actualSha256}`);
+            }
+            const finalPath = `${directory}/${entry.sha256}`;
+            await safeUnlink(finalPath);
+            await RNFS.moveFile(partPath, finalPath);
+            prepared.push({ ...entry, filePath: finalPath });
+        }
+        catch (error) {
+            await safeUnlink(partPath);
+            if (error instanceof OtaArtifactError) {
+                throw error;
+            }
+            throw new OtaArtifactError("artifact_download_failed", `Download of ${entry.kind} artifact failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    return prepared;
+}
+/**
+ * Point the manifest's artifact URLs at the phone server, leaving every other field
+ * semantically identical to what the update check saw. Entries we host get
+ * `<baseUrl>/artifacts/<sha256>`; entries the update does not need keep their CDN URLs.
+ * Only URL fields change: target versions, sizes, and manifest hashes remain untouched.
+ */
+export function rewriteManifestForLocalServer(manifestBody, artifacts, baseUrl) {
+    let manifest;
+    try {
+        manifest = JSON.parse(manifestBody);
+    }
+    catch {
+        throw new OtaArtifactError("manifest_invalid", "Manifest body is not valid JSON");
+    }
+    const byUrl = new Map(artifacts.map((artifact) => [artifact.url, artifact]));
+    const localUrl = (artifact) => `${baseUrl}/artifacts/${artifact.sha256}`;
+    for (const app of Object.values(manifest.apps ?? {})) {
+        const record = app;
+        const artifact = typeof record.apkUrl === "string" ? byUrl.get(record.apkUrl) : undefined;
+        if (artifact) {
+            record.apkUrl = localUrl(artifact);
+        }
+    }
+    for (const patch of manifest.mtk_patches ?? []) {
+        rewriteFirmwareEntry(patch, byUrl, localUrl);
+    }
+    if (manifest.bes_firmware) {
+        rewriteFirmwareEntry(manifest.bes_firmware, byUrl, localUrl);
+    }
+    return JSON.stringify(manifest);
+}
+/** Delete every stored artifact whose hash is not in `keepSha256s` (plus stray .part files). */
+export async function cleanupArtifacts(keepSha256s = []) {
+    const directory = otaArtifactsDirectory();
+    if (!(await RNFS.exists(directory))) {
+        return;
+    }
+    const keep = new Set(keepSha256s.map((sha) => sha.toLowerCase()));
+    const items = await RNFS.readDir(directory);
+    for (const item of items) {
+        if (!item.isFile())
+            continue;
+        if (keep.has(item.name.toLowerCase()))
+            continue;
+        await safeUnlink(item.path);
+    }
+}
+function rewriteFirmwareEntry(entry, byUrl, localUrl) {
+    const url = firmwareUrl(entry);
+    const artifact = url ? byUrl.get(url) : undefined;
+    if (!artifact) {
+        return;
+    }
+    entry.url = localUrl(artifact);
+    // Overwrite the legacy key too when present, so no glasses build can prefer a stale
+    // CDN URL over the local one.
+    if (typeof entry.firmwareUrl === "string") {
+        entry.firmwareUrl = localUrl(artifact);
+    }
+}
+function firmwareUrl(entry) {
+    if (!entry || typeof entry !== "object") {
+        return null;
+    }
+    const record = entry;
+    if (typeof record.url === "string" && record.url.length > 0) {
+        return record.url;
+    }
+    if (typeof record.firmwareUrl === "string" && record.firmwareUrl.length > 0) {
+        return record.firmwareUrl;
+    }
+    return null;
+}
+function requireSha256(entry, label) {
+    const sha256 = typeof entry?.sha256 === "string" ? entry.sha256.trim().toLowerCase() : "";
+    if (!/^[a-f0-9]{64}$/.test(sha256)) {
+        throw new OtaArtifactError("manifest_invalid", `${label} artifact has no valid manifest sha256`);
+    }
+    return sha256;
+}
+async function safeUnlink(path) {
+    try {
+        if (await RNFS.exists(path)) {
+            await RNFS.unlink(path);
+        }
+    }
+    catch {
+        // Best-effort: a leftover file only wastes space and is cleaned up next run.
+    }
+}
+//# sourceMappingURL=OtaArtifactDownloader.js.map

package/build/services/OtaArtifactDownloader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaArtifactDownloader.js","sourceRoot":"","sources":["../../src/services/OtaArtifactDownloader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,6BAA6B,CAAA;AA2CnD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEvB;IADlB,YACkB,IAAgF,EAChG,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHE,SAAI,GAAJ,IAAI,CAA4E;QAIhG,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAChC,CAAC;CACF;AAED,MAAM,WAAW,GAAG,uBAAuB,CAAA;AAE3C,MAAM,UAAU,qBAAqB;IACnC,OAAO,GAAG,IAAI,CAAC,qBAAqB,gBAAgB,CAAA;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAoC;IAChE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,uCAAuC,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,QAAqB,CAAA;IACzB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAA;IACnF,CAAC;IAED,MAAM,OAAO,GAA2B,EAAE,CAAA;IAE1C,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,CAAmD,CAAA;QAC1F,MAAM,GAAG,GAAG,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,mDAAmD,CAAC,CAAA;QACrG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK;YACX,GAAG;YACH,MAAM,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;SAClC,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAC3C,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC,QAAS,CAAC,CACd,CAAA;QACnD,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC5D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,+CAA+C,CAAC,CAAA;QACjG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK;YACX,GAAG;YACH,MAAM,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;SAClC,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAkD,CAAA;QACvE,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,kDAAkD,CAAC,CAAA;QACpG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK;YACX,GAAG;YACH,MAAM,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;SAClC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA4B,EAC5B,UAA4D,EAC5D,cAIkC;IAElC,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAA;IACzC,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAC,4BAA4B,EAAE,IAAI,EAAC,CAAC,CAAA;IAEjE,MAAM,QAAQ,GAA0B,EAAE,CAAA;IAC1C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;QAEzB,MAAM,UAAU,GAAG,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAA;QACjD,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;YACxE,IAAI,UAAU,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,EAAC,GAAG,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAC,CAAC,CAAA;gBAC/C,SAAQ;YACV,CAAC;YACD,MAAM,UAAU,CAAC,UAAU,CAAC,CAAA;QAC9B,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,SAAS,aAAa,KAAK,OAAO,CAAA;QACtD,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAA;QAC1B,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,CAAC,YAAoB,EAAE,aAAqB,EAAE,EAAE;gBACrE,UAAU,EAAE,CAAC;oBACX,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK;oBACL,UAAU,EAAE,IAAI,CAAC,MAAM;oBACvB,eAAe,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBACzF,YAAY;oBACZ,aAAa;iBACd,CAAC,CAAA;YACJ,CAAC,CAAA;YACD,MAAM,cAAc,GAAG,cAAc;gBACnC,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC;gBACvD,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC;oBACtB,OAAO,EAAE,KAAK,CAAC,GAAG;oBAClB,MAAM,EAAE,QAAQ;oBAChB,iBAAiB,EAAE,MAAM;oBACzB,WAAW,EAAE,MAAM;oBACnB,eAAe,EAAE,CAAC;oBAClB,QAAQ,EAAE,CAAC,GAAyC,EAAE,EAAE;wBACtD,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,aAAa,CAAC,CAAA;oBACrD,CAAC;iBACF,CAAC,CAAC,OAAO,CAAA;YACd,IAAI,cAAc,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBACtC,MAAM,IAAI,gBAAgB,CACxB,0BAA0B,EAC1B,eAAe,KAAK,CAAC,IAAI,8BAA8B,cAAc,CAAC,UAAU,EAAE,CACnF,CAAA;YACH,CAAC;YAED,MAAM,YAAY,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;YACxE,IAAI,YAAY,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,IAAI,gBAAgB,CACxB,wBAAwB,EACxB,GAAG,KAAK,CAAC,IAAI,qCAAqC,KAAK,CAAC,MAAM,SAAS,YAAY,EAAE,CACtF,CAAA;YACH,CAAC;YAED,MAAM,SAAS,GAAG,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAA;YAChD,MAAM,UAAU,CAAC,SAAS,CAAC,CAAA;YAC3B,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;YACxC,QAAQ,CAAC,IAAI,CAAC,EAAC,GAAG,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAC,CAAC,CAAA;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC1B,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,0BAA0B,EAC1B,eAAe,KAAK,CAAC,IAAI,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvG,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,YAAoB,EACpB,SAAgC,EAChC,OAAe;IAEf,IAAI,QAAqB,CAAA;IACzB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAA;IACnF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC5E,MAAM,QAAQ,GAAG,CAAC,QAA6B,EAAE,EAAE,CAAC,GAAG,OAAO,cAAc,QAAQ,CAAC,MAAM,EAAE,CAAA;IAE7F,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,GAAyC,CAAA;QACxD,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACzF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QAC/C,oBAAoB,CAAC,KAA2C,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;IACpF,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC1B,oBAAoB,CAAC,QAAQ,CAAC,YAAkD,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;IACpG,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;AACjC,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,cAAwB,EAAE;IAC/D,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAA;IACzC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACpC,OAAM;IACR,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IACjE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,SAAQ;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,SAAQ;QAC/C,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAA8B,EAC9B,KAAuC,EACvC,QAAmD;IAEnD,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAM;IACR,CAAC;IACD,KAAK,CAAC,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC9B,oFAAoF;IACpF,8BAA8B;IAC9B,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC1C,KAAK,CAAC,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACxC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,GAAG,CAAA;IACnB,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,MAAM,CAAC,WAAW,CAAA;IAC3B,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAA0C,EAAE,KAAa;IAC9E,MAAM,MAAM,GAAG,OAAO,KAAK,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACzF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,KAAK,wCAAwC,CAAC,CAAA;IAClG,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;IAC/E,CAAC;AACH,CAAC","sourcesContent":["import * as RNFS from \"@dr.pogodin/react-native-fs\"\nimport type {OtaCheckCurrentGlassesResult, VersionJson} from \"./OtaUpdateCheckService\"\n\n/**\n * Phone-side artifact staging for hotspot-served OTA (OS-1676).\n *\n * When the glasses have no WiFi, the phone downloads the OTA artifacts itself (over\n * whatever network it is on — the user's tap on \"update\" is the consent) and serves them\n * to the glasses via the LocalOtaServer over the glasses' hotspot. This module owns:\n *\n * - planning which artifacts the pending update actually needs (from the raw manifest the\n *   update check fetched, so the glasses re-parse byte-identical version data),\n * - downloading them with .part staging and sha256 verification, keyed on disk by hash so\n *   retries and the post-APK continuation reuse verified files,\n * - rewriting the manifest's URL fields to point at the phone server, and\n * - cleanup once the update completes or the manifest moves on.\n */\n\nexport type OtaArtifactKind = \"apk\" | \"mtk\" | \"bes\"\n\nexport interface OtaArtifactPlanEntry {\n  kind: OtaArtifactKind\n  /** URL this artifact is fetched from, exactly as it appears in the raw manifest. */\n  url: string\n  /** Required content hash from the manifest. */\n  sha256: string\n}\n\nexport interface PreparedOtaArtifact extends OtaArtifactPlanEntry {\n  filePath: string\n}\n\nexport interface OtaArtifactDownloadProgress {\n  kind: OtaArtifactKind\n  /** 0-based index of the artifact being downloaded. */\n  index: number\n  totalCount: number\n  /** Percent of the current artifact, 0-100 (0 when the server sent no length). */\n  artifactPercent: number\n  bytesWritten: number\n  contentLength: number\n}\n\nexport class OtaArtifactError extends Error {\n  constructor(\n    public readonly code: \"artifact_download_failed\" | \"artifact_verify_failed\" | \"manifest_invalid\",\n    message: string,\n  ) {\n    super(message)\n    this.name = \"OtaArtifactError\"\n  }\n}\n\nconst ASG_PACKAGE = \"com.mentra.asg_client\"\n\nexport function otaArtifactsDirectory(): string {\n  return `${RNFS.DocumentDirectoryPath}/ota_artifacts`\n}\n\n/**\n * Derive the artifact list the pending update needs from a completed check.\n * Works off the raw manifest body (not the normalized check fields) so the URLs and\n * hashes match exactly what the glasses will re-parse.\n */\nexport function planArtifacts(result: OtaCheckCurrentGlassesResult): OtaArtifactPlanEntry[] {\n  if (!result.manifestBody) {\n    throw new OtaArtifactError(\"manifest_invalid\", \"Check result carries no manifest body\")\n  }\n  let manifest: VersionJson\n  try {\n    manifest = JSON.parse(result.manifestBody)\n  } catch {\n    throw new OtaArtifactError(\"manifest_invalid\", \"Manifest body is not valid JSON\")\n  }\n\n  const entries: OtaArtifactPlanEntry[] = []\n\n  if (result.updates.includes(\"apk\")) {\n    const app = manifest.apps?.[ASG_PACKAGE] as unknown as Record<string, unknown> | undefined\n    const url = typeof app?.apkUrl === \"string\" ? app.apkUrl : null\n    if (!url) {\n      throw new OtaArtifactError(\"manifest_invalid\", \"Manifest has no apkUrl for the pending APK update\")\n    }\n    entries.push({\n      kind: \"apk\",\n      url,\n      sha256: requireSha256(app, \"APK\"),\n    })\n  }\n\n  if (result.updates.includes(\"mtk\") && result.mtkPatch) {\n    const raw = (manifest.mtk_patches ?? []).find(\n      (patch) => firmwareUrl(patch) === firmwareUrl(result.mtkPatch!),\n    ) as unknown as Record<string, unknown> | undefined\n    const url = firmwareUrl(raw) ?? firmwareUrl(result.mtkPatch)\n    if (!url) {\n      throw new OtaArtifactError(\"manifest_invalid\", \"Manifest has no URL for the pending MTK patch\")\n    }\n    entries.push({\n      kind: \"mtk\",\n      url,\n      sha256: requireSha256(raw, \"MTK\"),\n    })\n  }\n\n  if (result.updates.includes(\"bes\") && manifest.bes_firmware) {\n    const raw = manifest.bes_firmware as unknown as Record<string, unknown>\n    const url = firmwareUrl(raw)\n    if (!url) {\n      throw new OtaArtifactError(\"manifest_invalid\", \"Manifest has no URL for the pending BES firmware\")\n    }\n    entries.push({\n      kind: \"bes\",\n      url,\n      sha256: requireSha256(raw, \"BES\"),\n    })\n  }\n\n  return entries\n}\n\n/**\n * Download every planned artifact into the on-disk hash-keyed store, reusing files that\n * already verify. Sequential on purpose: progress is legible and the hotspot window that\n * follows is the slow part, not phone-side parallelism.\n */\nexport async function prepareArtifacts(\n  plan: OtaArtifactPlanEntry[],\n  onProgress?: (progress: OtaArtifactDownloadProgress) => void,\n  nativeDownload?: (\n    entry: OtaArtifactPlanEntry,\n    destination: string,\n    onProgress?: (bytesWritten: number, contentLength: number) => void,\n  ) => Promise<{statusCode: number}>,\n): Promise<PreparedOtaArtifact[]> {\n  const directory = otaArtifactsDirectory()\n  await RNFS.mkdir(directory, {NSURLIsExcludedFromBackupKey: true})\n\n  const prepared: PreparedOtaArtifact[] = []\n  for (let index = 0; index < plan.length; index++) {\n    const entry = plan[index]\n\n    const cachedPath = `${directory}/${entry.sha256}`\n    if (await RNFS.exists(cachedPath)) {\n      const cachedHash = (await RNFS.hash(cachedPath, \"sha256\")).toLowerCase()\n      if (cachedHash === entry.sha256) {\n        prepared.push({...entry, filePath: cachedPath})\n        continue\n      }\n      await safeUnlink(cachedPath)\n    }\n\n    const partPath = `${directory}/download-${index}.part`\n    await safeUnlink(partPath)\n    try {\n      const reportProgress = (bytesWritten: number, contentLength: number) => {\n        onProgress?.({\n          kind: entry.kind,\n          index,\n          totalCount: plan.length,\n          artifactPercent: contentLength > 0 ? Math.round((bytesWritten / contentLength) * 100) : 0,\n          bytesWritten,\n          contentLength,\n        })\n      }\n      const downloadResult = nativeDownload\n        ? await nativeDownload(entry, partPath, reportProgress)\n        : await RNFS.downloadFile({\n            fromUrl: entry.url,\n            toFile: partPath,\n            connectionTimeout: 30_000,\n            readTimeout: 30_000,\n            progressDivider: 5,\n            progress: (res: RNFS.DownloadProgressCallbackResultT) => {\n              reportProgress(res.bytesWritten, res.contentLength)\n            },\n          }).promise\n      if (downloadResult.statusCode !== 200) {\n        throw new OtaArtifactError(\n          \"artifact_download_failed\",\n          `Download of ${entry.kind} artifact failed with HTTP ${downloadResult.statusCode}`,\n        )\n      }\n\n      const actualSha256 = (await RNFS.hash(partPath, \"sha256\")).toLowerCase()\n      if (actualSha256 !== entry.sha256) {\n        throw new OtaArtifactError(\n          \"artifact_verify_failed\",\n          `${entry.kind} artifact hash mismatch: expected ${entry.sha256}, got ${actualSha256}`,\n        )\n      }\n\n      const finalPath = `${directory}/${entry.sha256}`\n      await safeUnlink(finalPath)\n      await RNFS.moveFile(partPath, finalPath)\n      prepared.push({...entry, filePath: finalPath})\n    } catch (error) {\n      await safeUnlink(partPath)\n      if (error instanceof OtaArtifactError) {\n        throw error\n      }\n      throw new OtaArtifactError(\n        \"artifact_download_failed\",\n        `Download of ${entry.kind} artifact failed: ${error instanceof Error ? error.message : String(error)}`,\n      )\n    }\n  }\n  return prepared\n}\n\n/**\n * Point the manifest's artifact URLs at the phone server, leaving every other field\n * semantically identical to what the update check saw. Entries we host get\n * `<baseUrl>/artifacts/<sha256>`; entries the update does not need keep their CDN URLs.\n * Only URL fields change: target versions, sizes, and manifest hashes remain untouched.\n */\nexport function rewriteManifestForLocalServer(\n  manifestBody: string,\n  artifacts: PreparedOtaArtifact[],\n  baseUrl: string,\n): string {\n  let manifest: VersionJson\n  try {\n    manifest = JSON.parse(manifestBody)\n  } catch {\n    throw new OtaArtifactError(\"manifest_invalid\", \"Manifest body is not valid JSON\")\n  }\n  const byUrl = new Map(artifacts.map((artifact) => [artifact.url, artifact]))\n  const localUrl = (artifact: PreparedOtaArtifact) => `${baseUrl}/artifacts/${artifact.sha256}`\n\n  for (const app of Object.values(manifest.apps ?? {})) {\n    const record = app as unknown as Record<string, unknown>\n    const artifact = typeof record.apkUrl === \"string\" ? byUrl.get(record.apkUrl) : undefined\n    if (artifact) {\n      record.apkUrl = localUrl(artifact)\n    }\n  }\n\n  for (const patch of manifest.mtk_patches ?? []) {\n    rewriteFirmwareEntry(patch as unknown as Record<string, unknown>, byUrl, localUrl)\n  }\n  if (manifest.bes_firmware) {\n    rewriteFirmwareEntry(manifest.bes_firmware as unknown as Record<string, unknown>, byUrl, localUrl)\n  }\n\n  return JSON.stringify(manifest)\n}\n\n/** Delete every stored artifact whose hash is not in `keepSha256s` (plus stray .part files). */\nexport async function cleanupArtifacts(keepSha256s: string[] = []): Promise<void> {\n  const directory = otaArtifactsDirectory()\n  if (!(await RNFS.exists(directory))) {\n    return\n  }\n  const keep = new Set(keepSha256s.map((sha) => sha.toLowerCase()))\n  const items = await RNFS.readDir(directory)\n  for (const item of items) {\n    if (!item.isFile()) continue\n    if (keep.has(item.name.toLowerCase())) continue\n    await safeUnlink(item.path)\n  }\n}\n\nfunction rewriteFirmwareEntry(\n  entry: Record<string, unknown>,\n  byUrl: Map<string, PreparedOtaArtifact>,\n  localUrl: (artifact: PreparedOtaArtifact) => string,\n): void {\n  const url = firmwareUrl(entry)\n  const artifact = url ? byUrl.get(url) : undefined\n  if (!artifact) {\n    return\n  }\n  entry.url = localUrl(artifact)\n  // Overwrite the legacy key too when present, so no glasses build can prefer a stale\n  // CDN URL over the local one.\n  if (typeof entry.firmwareUrl === \"string\") {\n    entry.firmwareUrl = localUrl(artifact)\n  }\n}\n\nfunction firmwareUrl(entry: unknown): string | null {\n  if (!entry || typeof entry !== \"object\") {\n    return null\n  }\n  const record = entry as Record<string, unknown>\n  if (typeof record.url === \"string\" && record.url.length > 0) {\n    return record.url\n  }\n  if (typeof record.firmwareUrl === \"string\" && record.firmwareUrl.length > 0) {\n    return record.firmwareUrl\n  }\n  return null\n}\n\nfunction requireSha256(entry: Record<string, unknown> | undefined, label: string): string {\n  const sha256 = typeof entry?.sha256 === \"string\" ? entry.sha256.trim().toLowerCase() : \"\"\n  if (!/^[a-f0-9]{64}$/.test(sha256)) {\n    throw new OtaArtifactError(\"manifest_invalid\", `${label} artifact has no valid manifest sha256`)\n  }\n  return sha256\n}\n\nasync function safeUnlink(path: string): Promise<void> {\n  try {\n    if (await RNFS.exists(path)) {\n      await RNFS.unlink(path)\n    }\n  } catch {\n    // Best-effort: a leftover file only wastes space and is cleaned up next run.\n  }\n}\n"]}

package/build/services/OtaInstallCoordinator.d.ts

@@ -0,0 +1,275 @@
+import type { OtaProgress, OtaStatus } from "@glassly/bluetooth-sdk/internal";
+import { type HotspotOtaPhase } from "./HotspotOtaTransport";
+import type { OtaCheckCurrentGlassesResult } from "./OtaUpdateCheckService";
+import { type DisplayState } from "./otaDisplayState";
+/** Read model the host progress screen renders from. */
+export interface OtaInstallSnapshot {
+    displayState: DisplayState;
+    errorMsg: string;
+    continueButtonDisabled: boolean;
+    connected: boolean;
+    otaStatus: OtaStatus | null;
+    otaProgress: OtaProgress | null;
+    /**
+     * Display-only simulated percent for legacy (< 37) MTK install stalls (WP 8C-e), or
+     * null. The MTK system install goes quiet around 49-50%; the legacy screen simulated
+     * +1% ticks up to 60% purely to reassure the user. Render max(real, simulated).
+     */
+    mtkInstallStallSimulatedPercent: number | null;
+    /** True for a downgrade (version-change) session — the UI narrates it differently. */
+    isVersionChange: boolean;
+    /** True once the glasses reported the exact pinned target (the downgrade truly completed). */
+    versionChangeConverged: boolean;
+    /**
+     * Sub-phase of the downgrade detour for the progress narrative, or null when not
+     * in one: "installing" before the handoff, "restarting" while the glasses are dark
+     * (uninstall / factory flicker / target install), "verifying" once reconnected and
+     * checking the version. Completion is the "complete" displayState.
+     */
+    versionChangePhase: "installing" | "restarting" | "verifying" | null;
+    /** Pre-ota_start phone staging/join state for a hotspot attempt. */
+    hotspotPhase: HotspotOtaPhase;
+    hotspotArtifactPercent: number | null;
+}
+declare class OtaInstallCoordinator {
+    private attached;
+    private preparedCheckResult;
+    private selectedTransport;
+    private hotspotManifestUrl;
+    private hotspotPhase;
+    private hotspotArtifactPercent;
+    private errorMsg;
+    private sawReconnectEdge;
+    private continueButtonDisabled;
+    private apkStepSeen;
+    private prevConnected;
+    private initialBuildNumber;
+    private apkExpectedInSession;
+    private apkCompletedViaBuildIncrease;
+    private protocolProfile;
+    private besRestartExpected;
+    private besRestartDisconnectObserved;
+    private besRestartRecovery;
+    private versionChangeSession;
+    private versionChangeTarget;
+    private versionChangeInstallStarted;
+    private versionChangeConverged;
+    private legacyApkSettleHold;
+    private mtkSimulatedPercent;
+    private lastRealMtkProgress;
+    private globalTimeout;
+    private globalTimeoutStarted;
+    private retryTimeout;
+    private stuckTimeout;
+    private progressTimeout;
+    private pingInterval;
+    private queryReplyTimeout;
+    private continueLockoutTimer;
+    private legacyApkSettleTimer;
+    private mtkStallDetectTimer;
+    private mtkSimTickTimer;
+    private apkInstallPollInFlight;
+    private otaStartOwnership;
+    private hasFirstActivity;
+    private hasFirstNonZeroProgress;
+    private retryCount;
+    private prevDisplayState;
+    private lastConnected;
+    private lastOtaStatus;
+    private lastOtaProgress;
+    private lastBuildNumber;
+    private lastDisplayState;
+    private lastStallSig;
+    private reacting;
+    private reactQueued;
+    private storeUnsubscribe;
+    private snapshotCheckers;
+    /** Select the transport at the existing install entry point before the progress route attaches. */
+    prepare(checkResult: OtaCheckCurrentGlassesResult): "wifi" | "hotspot";
+    /**
+     * Bind the state machine to a mounted progress screen. Idempotent per
+     * attach/detach cycle. Runs the initial-mount arbitration (send ota_start
+     * when connected with no session; otherwise ota_query_status + reply
+     * fallback) and starts reacting to store changes + BLE OTA events.
+     */
+    attach(): void;
+    /**
+     * Unbind on screen unmount: clears ALL timers/subscriptions/listeners and
+     * resets the session-local state (the old component state died with the
+     * component) so a re-attach is a fresh session.
+     */
+    detach(): void;
+    /** Retry after a failure: clear state and re-send ota_start (if connected). */
+    retry(): void;
+    /**
+     * Terminal-state cleanup half of the old Continue/Done handlers (navigation
+     * stays in the screen): clear the selected update, and after an APK step
+     * clear the stale build number so the next check re-reads version_info.
+     */
+    finish(): void;
+    /**
+     * Abandon an interrupted session (the super-mode skip): terminal cleanup
+     * plus dropping the session's status/progress read-state, so
+     * deriveDisplayState doesn't resurrect the stale install when the host
+     * navigates away and back through /ota routes.
+     */
+    discard(): void;
+    snapshot(): OtaInstallSnapshot;
+    /**
+     * True while the recovery worker owns the downgrade transaction (after the apk install
+     * started, before convergence). During this window ASG is being uninstalled/reinstalled and
+     * cannot answer the phone, so the coordinator must not ping, poll ota_query_status, or arm the
+     * progress-stall watchdog — doing so drives the passive factory build and fails the session
+     * before the target reconnects. Completion is exact-version convergence, detected separately.
+     */
+    private isInVersionChangeDetour;
+    /** Downgrade-detour sub-phase for the progress narrative (see OtaInstallSnapshot). */
+    private deriveVersionChangePhase;
+    /**
+     * Subscribe to install snapshot changes, deduped on the projected JSON.
+     * Fires on glasses-store changes AND coordinator-internal state changes
+     * (errorMsg / reconnect edge / continue lockout). Returns an unsubscribe.
+     */
+    onSnapshot(cb: (snapshot: OtaInstallSnapshot) => void): () => void;
+    private resetSessionState;
+    /** Begin a genuinely new command attempt only after native ownership has settled. */
+    private prepareFreshOtaStartAttempt;
+    /** Reset only the reboot lifecycle that belongs to one install attempt. */
+    private resetBesRestartAttempt;
+    /** Notify snapshot subscribers of a coordinator-internal state change. */
+    private emitInternalChange;
+    private setErrorMsg;
+    private setSawReconnectEdge;
+    private setContinueButtonDisabled;
+    private setApkCompletedViaBuildIncrease;
+    private setLegacyApkSettleHold;
+    /** Display-only (WP 8C-e): notifies snapshot subscribers but never queues a reaction pass. */
+    private setMtkSimulatedPercent;
+    /** Legacy/unified policy is selected once, matching the old sticky route choice. */
+    private isLegacySessionShapeNow;
+    private react;
+    /**
+     * One reaction pass = one render + its changed-dep effects of the old
+     * component, in the old declaration order.
+     */
+    private runPass;
+    /**
+     * Reconnect arbitration shared by the physical BLE connect edge and the
+     * glasses_session_changed signal. The latter exists because the BES keeps the BLE
+     * link alive across asg_client restarts (APK OTA): no physical edge ever fires, so
+     * the changed process session id is the only reconnect signal the coordinator gets
+     * (incident rep_01KY6BJ0B7A4RBMQ7VN39KAE5E). Always returns true (the caller's
+     * edge handling is complete).
+     */
+    private runReconnectArbitration;
+    private runConnectEdge;
+    private readonly handleAck;
+    /**
+     * The asg process restarted while the BES kept the BLE link up (sid change observed
+     * by the bridge): treat it exactly like a physical reconnect edge.
+     */
+    private readonly handleGlassesSessionChanged;
+    private readonly handleMtkComplete;
+    /**
+     * Reacts to a NEW legacy-shaped install-phase "complete" (an old build's
+     * `install FINISHED`). Two ports from the legacy screen:
+     * - last-write-wins: completion arriving after a watchdog failure overrides it
+     *   (the old screen completed from "failed" too);
+     * - apk settle window: an apk install FINISHED observed in flight is held out of
+     *   "complete" for LEGACY_APK_COMPLETION_SETTLE_MS so the ASG process restart
+     *   settles (and fresh version_info lands) before the user can continue. From
+     *   starting/failed (post-reboot explicit signal) completion is immediate.
+     */
+    private handleLegacyInstallCompleteEdge;
+    private isBesRestartExpected;
+    /** Complete only after a protocol-authorized BES restart traverses disconnect -> reconnect. */
+    private completeBesRestartRecovery;
+    /**
+     * Legacy MTK install stall simulation (WP 8C-e), ported verbatim: the MTK system
+     * install typically stalls around 49-50%. Every real event restarts stall detection;
+     * after LEGACY_MTK_STALL_DETECT_MS of silence inside the [45, 55) zone, simulate +1%
+     * every LEGACY_MTK_SIM_TICK_MS from max(stall+1, 51), capped at 60. Real progress
+     * beyond the simulated value clears it. Display-only by construction: the timers call
+     * only {@link setMtkSimulatedPercent}, which never queues a reaction pass.
+     */
+    private runMtkStallSimulationPass;
+    /**
+     * Read the current derived display state from the store + internal state
+     * synchronously — used inside setTimeout callbacks.
+     */
+    private computeDisplayStateNow;
+    /**
+     * During an APK install the package installer kills and restarts the glasses
+     * process, and the new process's completion push can lose its startup race
+     * against the UART transport (incident rep_01KY31HEMTSBSMK8DVMNXJ5XGG: the
+     * phone sat on a stale "install in_progress 0%" until the stall watchdog
+     * failed a successful update). The persisted session on the glasses always
+     * knows the truth, so poll ota_query_status on the keepalive tick while an
+     * apk step sits in its install phase — the reply either confirms progress or
+     * delivers the missed completion. Gated to the apk install phase so a stray
+     * idle reply can't disturb an active download; legacy (< 37) builds ignore
+     * the query, which is harmless.
+     *
+     * The native query pends up to 15s and rejects a concurrent call with
+     * request_in_flight — longer than the 10s tick — so exactly one poll is kept
+     * in flight (the glasses being slow to answer IS the silent-restart window
+     * this poll exists for) and rejections are swallowed: the next tick retries.
+     */
+    private maybePollApkInstallStatus;
+    /**
+     * "Glasses are talking to us" — suppresses retry if the native request later rejects.
+     * Important: this does NOT clear the stuck-at-zero watchdog; that one fires
+     * on real progress > 0% (see {@link onFirstNonZeroProgress}).
+     */
+    private onFirstActivity;
+    /**
+     * "Real download progress arrived" — clears the stuck-at-zero watchdog. We
+     * deliberately wait for non-zero progress before clearing this so that an
+     * ota_status reply with stepPercent: 0 (which is "first activity" but not
+     * "real progress") doesn't disable the only watchdog that catches a wedged
+     * download.
+     */
+    private onFirstNonZeroProgress;
+    private maybeStartGlobalTimeout;
+    private armStuckWatchdogOnly;
+    /** Arm the 0%-stuck watchdog only when this logical session has none. */
+    private maybeArmStuckWatchdog;
+    private sendOtaStartWithWatchdogs;
+    private performOtaStart;
+    private teardownHotspotTransport;
+    /**
+     * After sending ota_query_status, wait QUERY_REPLY_TIMEOUT_MS for the glasses
+     * to reply with a useful ota_status. A unified session may start again only
+     * after an explicit "idle" reply, or after a locally rejected ota_start has
+     * produced no activity and no authoritative reply across reconnect. Legacy
+     * builds ignore ota_query_status, so their established timeout fallback
+     * remains the compatibility path.
+     *
+     * Cleared as soon as a non-idle otaStatus or any otaProgress lands in the
+     * store (see the reaction block above). An idle reply intentionally does NOT
+     * cancel the fallback, so reconnects against a wiped/lost session still recover.
+     */
+    private armQueryReplyFallback;
+    private clearProgressTimeout;
+    private clearRetryTimeout;
+    private clearStuckTimeout;
+    private clearGlobalTimeout;
+    private clearPingInterval;
+    private clearQueryReplyTimeout;
+    private clearContinueLockoutTimer;
+    private clearLegacyApkSettleTimer;
+    private clearMtkSimulationTimers;
+    /**
+     * NOTE (WP 8C): the legacy apk settle timer and the MTK stall simulation timers are
+     * deliberately NOT per-step watchdogs — a per-step failure must not kill them (the
+     * legacy screen kept the simulation ticking through a watchdog failure, and the
+     * settle latch resolves completion, not liveness). They are cleared on detach,
+     * retry(), global timeout, and their own supersession paths.
+     */
+    private clearPerStepTimers;
+    private clearAllOtaTimers;
+}
+/** Singleton — one install session machine per app process (matches the single progress screen). */
+export declare const otaInstallCoordinator: OtaInstallCoordinator;
+export {};
+//# sourceMappingURL=OtaInstallCoordinator.d.ts.map

package/build/services/OtaInstallCoordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaInstallCoordinator.d.ts","sourceRoot":"","sources":["../../src/services/OtaInstallCoordinator.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAC,WAAW,EAAE,SAAS,EAAC,MAAM,iCAAiC,CAAA;AAI3E,OAAO,EAAsB,KAAK,eAAe,EAAC,MAAM,uBAAuB,CAAA;AAC/E,OAAO,KAAK,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAA;AACzE,OAAO,EAAqB,KAAK,YAAY,EAAC,MAAM,mBAAmB,CAAA;AAsHvE,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,YAAY,CAAA;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,sBAAsB,EAAE,OAAO,CAAA;IAC/B,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,SAAS,GAAG,IAAI,CAAA;IAC3B,WAAW,EAAE,WAAW,GAAG,IAAI,CAAA;IAC/B;;;;OAIG;IACH,+BAA+B,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9C,sFAAsF;IACtF,eAAe,EAAE,OAAO,CAAA;IACxB,8FAA8F;IAC9F,sBAAsB,EAAE,OAAO,CAAA;IAC/B;;;;;OAKG;IACH,kBAAkB,EAAE,YAAY,GAAG,YAAY,GAAG,WAAW,GAAG,IAAI,CAAA;IACpE,oEAAoE;IACpE,YAAY,EAAE,eAAe,CAAA;IAC7B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;CACtC;AASD,cAAM,qBAAqB;IACzB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,mBAAmB,CAA4C;IACvE,OAAO,CAAC,iBAAiB,CAA6B;IACtD,OAAO,CAAC,kBAAkB,CAAsB;IAChD,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,sBAAsB,CAAsB;IAGpD,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,gBAAgB,CAAQ;IAChC,OAAO,CAAC,sBAAsB,CAAQ;IAItC,OAAO,CAAC,WAAW,CAAQ;IAC3B,OAAO,CAAC,aAAa,CAAQ;IAK7B,OAAO,CAAC,kBAAkB,CAAsB;IAEhD,OAAO,CAAC,oBAAoB,CAAQ;IAEpC,OAAO,CAAC,4BAA4B,CAAQ;IAG5C,OAAO,CAAC,eAAe,CAAkC;IAMzD,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,4BAA4B,CAAQ;IAC5C,OAAO,CAAC,kBAAkB,CAAuC;IAOjE,OAAO,CAAC,oBAAoB,CAAQ;IACpC,OAAO,CAAC,mBAAmB,CAAsB;IAGjD,OAAO,CAAC,2BAA2B,CAAQ;IAE3C,OAAO,CAAC,sBAAsB,CAAQ;IAEtC,OAAO,CAAC,mBAAmB,CAAQ;IAEnC,OAAO,CAAC,mBAAmB,CAAsB;IACjD,OAAO,CAAC,mBAAmB,CAAI;IAG/B,OAAO,CAAC,aAAa,CAA6C;IAClE,OAAO,CAAC,oBAAoB,CAAQ;IACpC,OAAO,CAAC,YAAY,CAA6C;IACjE,OAAO,CAAC,YAAY,CAA6C;IACjE,OAAO,CAAC,eAAe,CAA6C;IACpE,OAAO,CAAC,YAAY,CAA8C;IAClE,OAAO,CAAC,iBAAiB,CAA6C;IACtE,OAAO,CAAC,oBAAoB,CAA6C;IACzE,OAAO,CAAC,oBAAoB,CAA6C;IACzE,OAAO,CAAC,mBAAmB,CAA6C;IACxE,OAAO,CAAC,eAAe,CAA8C;IAIrE,OAAO,CAAC,sBAAsB,CAAQ;IAKtC,OAAO,CAAC,iBAAiB,CAAiC;IAC1D,OAAO,CAAC,gBAAgB,CAAQ;IAGhC,OAAO,CAAC,uBAAuB,CAAQ;IACvC,OAAO,CAAC,UAAU,CAAI;IAGtB,OAAO,CAAC,gBAAgB,CAA4B;IAGpD,OAAO,CAAC,aAAa,CAAQ;IAC7B,OAAO,CAAC,aAAa,CAAyB;IAC9C,OAAO,CAAC,eAAe,CAA2B;IAClD,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,YAAY,CAAK;IAIzB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,WAAW,CAAQ;IAE3B,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,gBAAgB,CAAwB;IAIhD,mGAAmG;IACnG,OAAO,CAAC,WAAW,EAAE,4BAA4B,GAAG,MAAM,GAAG,SAAS;IAkBtE;;;;;OAKG;IACH,MAAM,IAAI,IAAI;IAgCd;;;;OAIG;IACH,MAAM,IAAI,IAAI;IAoBd,+EAA+E;IAC/E,KAAK,IAAI,IAAI;IA8Eb;;;;OAIG;IACH,MAAM,IAAI,IAAI;IAYd;;;;;OAKG;IACH,OAAO,IAAI,IAAI;IAOf,QAAQ,IAAI,kBAAkB;IAkC9B;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IAI/B,sFAAsF;IACtF,OAAO,CAAC,wBAAwB;IAMhC;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,IAAI,GAAG,MAAM,IAAI;IAmBlE,OAAO,CAAC,iBAAiB;IAiCzB,qFAAqF;IACrF,OAAO,CAAC,2BAA2B;IAYnC,2EAA2E;IAC3E,OAAO,CAAC,sBAAsB;IAM9B,0EAA0E;IAC1E,OAAO,CAAC,kBAAkB;IAM1B,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,+BAA+B;IAOvC,OAAO,CAAC,sBAAsB;IAO9B,8FAA8F;IAC9F,OAAO,CAAC,sBAAsB;IAM9B,oFAAoF;IACpF,OAAO,CAAC,uBAAuB;IAgB/B,OAAO,CAAC,KAAK;IAiBb;;;OAGG;IACH,OAAO,CAAC,OAAO;IAoVf;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;IAgC/B,OAAO,CAAC,cAAc;IA8DtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAOzB;IAED;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAE3C;IAED,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAOjC;IAID;;;;;;;;;OASG;IACH,OAAO,CAAC,+BAA+B;IAkCvC,OAAO,CAAC,oBAAoB;IA2B5B,+FAA+F;IAC/F,OAAO,CAAC,0BAA0B;IASlC;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;IAqDjC;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAgB9B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,yBAAyB;IAcjC;;;;OAIG;IACH,OAAO,CAAC,eAAe;IASvB;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,uBAAuB;IAuB/B,OAAO,CAAC,oBAAoB;IAuB5B,yEAAyE;IACzE,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,yBAAyB;YAyCnB,eAAe;YAmFf,wBAAwB;IAStC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,qBAAqB;IAmC7B,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,sBAAsB;IAO9B,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,wBAAwB;IAWhC;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,iBAAiB;CAO1B;AAED,oGAAoG;AACpG,eAAO,MAAM,qBAAqB,uBAA8B,CAAA"}