@glassly/engine 0.1.0-dev.1 → 0.1.0-dev.101

package/build/services/MiniappExitGesture.d.ts

@@ -0,0 +1,33 @@
+export declare const MINIAPP_EXIT_NOTICE_MS = 1500;
+interface ExitGestureApp {
+    packageName: string;
+    name: string;
+    running: boolean;
+}
+interface ExitGestureState {
+    apps: ExitGestureApp[];
+    foregroundedPackage: string | null;
+    clearForeground: () => void;
+    stop: (packageName: string) => Promise<void>;
+}
+export interface ExitGestureDependencies {
+    getState: () => ExitGestureState;
+    getVisiblePackageName: () => string | null;
+    beginExitNotice: (packageName: string, text: string) => boolean;
+    finishExitNotice: (packageName: string) => void;
+    cancelExitNotice: (packageName: string) => void;
+    setTimeout: (callback: () => void, delay: number) => number;
+    clearTimeout: (timerId: number) => void;
+}
+/** Owns the short double-tap → exit-notice → normal-stop handoff. */
+export declare class MiniappExitGesture {
+    private readonly deps;
+    private pending;
+    constructor(deps: ExitGestureDependencies);
+    /** Returns true when the system gesture was consumed by a visible miniapp exit. */
+    tryExitVisibleMiniapp(): boolean;
+    /** Cancel an in-flight handoff when the device-event router shuts down. */
+    reset(): void;
+}
+export {};
+//# sourceMappingURL=MiniappExitGesture.d.ts.map

package/build/services/MiniappExitGesture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MiniappExitGesture.d.ts","sourceRoot":"","sources":["../../src/services/MiniappExitGesture.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,sBAAsB,OAAO,CAAA;AAE1C,UAAU,cAAc;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,UAAU,gBAAgB;IACxB,IAAI,EAAE,cAAc,EAAE,CAAA;IACtB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,eAAe,EAAE,MAAM,IAAI,CAAA;IAC3B,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7C;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,gBAAgB,CAAA;IAChC,qBAAqB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IAC1C,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;IAC/D,gBAAgB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/C,gBAAgB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/C,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IAC3D,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CACxC;AAED,qEAAqE;AACrE,qBAAa,kBAAkB;IAGV,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFxC,OAAO,CAAC,OAAO,CAAsD;gBAEjC,IAAI,EAAE,uBAAuB;IAEjE,mFAAmF;IAC5E,qBAAqB,IAAI,OAAO;IAmCvC,2EAA2E;IACpE,KAAK,IAAI,IAAI;CAOrB"}

package/build/services/MiniappExitGesture.js

@@ -0,0 +1,54 @@
+export const MINIAPP_EXIT_NOTICE_MS = 1500;
+/** Owns the short double-tap → exit-notice → normal-stop handoff. */
+export class MiniappExitGesture {
+    deps;
+    pending = null;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /** Returns true when the system gesture was consumed by a visible miniapp exit. */
+    tryExitVisibleMiniapp() {
+        // Swallow repeat taps while the notice is already counting down.
+        if (this.pending)
+            return true;
+        const packageName = this.deps.getVisiblePackageName();
+        if (!packageName)
+            return false;
+        const app = this.deps.getState().apps.find((candidate) => candidate.packageName === packageName);
+        if (!app?.running)
+            return false;
+        const name = app.name.trim() || packageName;
+        if (!this.deps.beginExitNotice(packageName, `Exiting ${name}…`))
+            return false;
+        const timerId = this.deps.setTimeout(() => {
+            const state = this.deps.getState();
+            if (state.foregroundedPackage === packageName)
+                state.clearForeground();
+            const stillRunning = state.apps.some((candidate) => candidate.packageName === packageName && candidate.running);
+            const stop = stillRunning ? state.stop(packageName) : Promise.resolve();
+            void stop
+                .catch((error) => {
+                console.error(`MiniappExitGesture: failed to stop ${packageName}:`, error);
+            })
+                .finally(() => {
+                if (this.pending?.packageName === packageName)
+                    this.pending = null;
+                // LocalMiniappRuntime.onUnmount normally finishes the notice. This
+                // fallback also handles a failed/no-op teardown.
+                this.deps.finishExitNotice(packageName);
+            });
+        }, MINIAPP_EXIT_NOTICE_MS);
+        this.pending = { packageName, timerId };
+        return true;
+    }
+    /** Cancel an in-flight handoff when the device-event router shuts down. */
+    reset() {
+        if (!this.pending)
+            return;
+        const { packageName, timerId } = this.pending;
+        this.pending = null;
+        this.deps.clearTimeout(timerId);
+        this.deps.cancelExitNotice(packageName);
+    }
+}
+//# sourceMappingURL=MiniappExitGesture.js.map

package/build/services/MiniappExitGesture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MiniappExitGesture.js","sourceRoot":"","sources":["../../src/services/MiniappExitGesture.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAA;AAyB1C,qEAAqE;AACrE,MAAM,OAAO,kBAAkB;IAGO;IAF5B,OAAO,GAAkD,IAAI,CAAA;IAErE,YAAoC,IAA6B;QAA7B,SAAI,GAAJ,IAAI,CAAyB;IAAG,CAAC;IAErE,mFAAmF;IAC5E,qBAAqB;QAC1B,iEAAiE;QACjE,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QAE7B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAA;QACrD,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAA;QAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,WAAW,CAAC,CAAA;QAChG,IAAI,CAAC,GAAG,EAAE,OAAO;YAAE,OAAO,KAAK,CAAA;QAE/B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,WAAW,CAAA;QAC3C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,IAAI,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;QAE7E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAA;YAClC,IAAI,KAAK,CAAC,mBAAmB,KAAK,WAAW;gBAAE,KAAK,CAAC,eAAe,EAAE,CAAA;YAEtE,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,WAAW,IAAI,SAAS,CAAC,OAAO,CAAC,CAAA;YAC/G,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;YACvE,KAAK,IAAI;iBACN,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,WAAW,GAAG,EAAE,KAAK,CAAC,CAAA;YAC5E,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,IAAI,IAAI,CAAC,OAAO,EAAE,WAAW,KAAK,WAAW;oBAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;gBAClE,mEAAmE;gBACnE,iDAAiD;gBACjD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAA;YACzC,CAAC,CAAC,CAAA;QACN,CAAC,EAAE,sBAAsB,CAAC,CAAA;QAE1B,IAAI,CAAC,OAAO,GAAG,EAAC,WAAW,EAAE,OAAO,EAAC,CAAA;QACrC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,2EAA2E;IACpE,KAAK;QACV,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAM;QACzB,MAAM,EAAC,WAAW,EAAE,OAAO,EAAC,GAAG,IAAI,CAAC,OAAO,CAAA;QAC3C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;QACnB,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;QAC/B,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC;CACF","sourcesContent":["export const MINIAPP_EXIT_NOTICE_MS = 1500\n\ninterface ExitGestureApp {\n  packageName: string\n  name: string\n  running: boolean\n}\n\ninterface ExitGestureState {\n  apps: ExitGestureApp[]\n  foregroundedPackage: string | null\n  clearForeground: () => void\n  stop: (packageName: string) => Promise<void>\n}\n\nexport interface ExitGestureDependencies {\n  getState: () => ExitGestureState\n  getVisiblePackageName: () => string | null\n  beginExitNotice: (packageName: string, text: string) => boolean\n  finishExitNotice: (packageName: string) => void\n  cancelExitNotice: (packageName: string) => void\n  setTimeout: (callback: () => void, delay: number) => number\n  clearTimeout: (timerId: number) => void\n}\n\n/** Owns the short double-tap → exit-notice → normal-stop handoff. */\nexport class MiniappExitGesture {\n  private pending: {packageName: string; timerId: number} | null = null\n\n  public constructor(private readonly deps: ExitGestureDependencies) {}\n\n  /** Returns true when the system gesture was consumed by a visible miniapp exit. */\n  public tryExitVisibleMiniapp(): boolean {\n    // Swallow repeat taps while the notice is already counting down.\n    if (this.pending) return true\n\n    const packageName = this.deps.getVisiblePackageName()\n    if (!packageName) return false\n\n    const app = this.deps.getState().apps.find((candidate) => candidate.packageName === packageName)\n    if (!app?.running) return false\n\n    const name = app.name.trim() || packageName\n    if (!this.deps.beginExitNotice(packageName, `Exiting ${name}…`)) return false\n\n    const timerId = this.deps.setTimeout(() => {\n      const state = this.deps.getState()\n      if (state.foregroundedPackage === packageName) state.clearForeground()\n\n      const stillRunning = state.apps.some((candidate) => candidate.packageName === packageName && candidate.running)\n      const stop = stillRunning ? state.stop(packageName) : Promise.resolve()\n      void stop\n        .catch((error) => {\n          console.error(`MiniappExitGesture: failed to stop ${packageName}:`, error)\n        })\n        .finally(() => {\n          if (this.pending?.packageName === packageName) this.pending = null\n          // LocalMiniappRuntime.onUnmount normally finishes the notice. This\n          // fallback also handles a failed/no-op teardown.\n          this.deps.finishExitNotice(packageName)\n        })\n    }, MINIAPP_EXIT_NOTICE_MS)\n\n    this.pending = {packageName, timerId}\n    return true\n  }\n\n  /** Cancel an in-flight handoff when the device-event router shuts down. */\n  public reset(): void {\n    if (!this.pending) return\n    const {packageName, timerId} = this.pending\n    this.pending = null\n    this.deps.clearTimeout(timerId)\n    this.deps.cancelExitNotice(packageName)\n  }\n}\n"]}

package/build/services/OtaAutoChain.d.ts

@@ -0,0 +1,41 @@
+import type { OtaCheckCurrentGlassesResult } from "./OtaUpdateCheckService";
+export declare const MAX_OTA_AUTO_CHAIN_PASSES = 8;
+export declare const OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS = 120000;
+export type OtaAutoChainReleaseRange = {
+    fromVersion: string | null;
+    toVersion: string | null;
+    /** Exact coordinated release identity for the OTA pin, absent for legacy manifests. */
+    releaseVersion?: string | null;
+};
+export type OtaAutoChainAdvanceResult = {
+    advance: true;
+    passCount: number;
+} | {
+    advance: false;
+    reason: "inactive" | "duplicate" | "max_passes" | "downgrade_not_approved";
+};
+/**
+ * Identify the exact update offer that produced one OTA pass. Including the
+ * observed versions and manifest body lets a changed manifest advance while a
+ * stale post-install version_info response is rejected as a duplicate.
+ */
+export declare function otaAutoChainFingerprint(result: OtaCheckCurrentGlassesResult): string;
+/** Start a chain after the user explicitly approves its first update pass. */
+export declare function beginOtaAutoChain(initialFingerprint: string, approvedDowngrade: boolean, releaseRange: OtaAutoChainReleaseRange): void;
+export declare function isOtaAutoChainActive(): boolean;
+export declare function otaAutoChainReleaseRange(): OtaAutoChainReleaseRange | null;
+/** End the current chain. Safe to call when no chain is active. */
+export declare function stopOtaAutoChain(): void;
+/**
+ * Start (or continue) the bounded wait for glasses that are rebooting between
+ * passes. Re-renders must not extend the original deadline indefinitely.
+ */
+export declare function otaAutoChainReconnectWaitRemaining(now?: number): number | null;
+/** A successful reconnect allows a future pass to establish a fresh wait. */
+export declare function clearOtaAutoChainReconnectWait(): void;
+/**
+ * Admit the next pass of an active chain. Repeated offers, unexpectedly
+ * destructive downgrades, and runaway chains fail closed and end automation.
+ */
+export declare function tryAdvanceOtaAutoChain(fingerprint: string, isDowngrade: boolean, targetVersion: string | null, releaseVersion?: string | null): OtaAutoChainAdvanceResult;
+//# sourceMappingURL=OtaAutoChain.d.ts.map

package/build/services/OtaAutoChain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaAutoChain.d.ts","sourceRoot":"","sources":["../../src/services/OtaAutoChain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAA;AAEzE,eAAO,MAAM,yBAAyB,IAAI,CAAA;AAC1C,eAAO,MAAM,mCAAmC,SAAU,CAAA;AAU1D,MAAM,MAAM,wBAAwB,GAAG;IACrC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAC,OAAO,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAC,GAClC;IAAC,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,wBAAwB,CAAA;CAAC,CAAA;AAIhG;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,4BAA4B,GAAG,MAAM,CAkBpF;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAC/B,kBAAkB,EAAE,MAAM,EAC1B,iBAAiB,EAAE,OAAO,EAC1B,YAAY,EAAE,wBAAwB,GACrC,IAAI,CAQN;AAED,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AAED,wBAAgB,wBAAwB,IAAI,wBAAwB,GAAG,IAAI,CAE1E;AAED,mEAAmE;AACnE,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAED;;;GAGG;AACH,wBAAgB,kCAAkC,CAAC,GAAG,SAAoB,GAAG,MAAM,GAAG,IAAI,CAKzF;AAED,6EAA6E;AAC7E,wBAAgB,8BAA8B,IAAI,IAAI,CAErD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,OAAO,EACpB,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,cAAc,GAAE,MAAM,GAAG,IAAW,GACnC,yBAAyB,CAyB3B"}

package/build/services/OtaAutoChain.js

@@ -0,0 +1,91 @@
+export const MAX_OTA_AUTO_CHAIN_PASSES = 8;
+export const OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS = 120_000;
+let session = null;
+/**
+ * Identify the exact update offer that produced one OTA pass. Including the
+ * observed versions and manifest body lets a changed manifest advance while a
+ * stale post-install version_info response is rejected as a duplicate.
+ */
+export function otaAutoChainFingerprint(result) {
+    return JSON.stringify({
+        manifestUrl: result.manifestUrl ?? "",
+        manifestBody: result.manifestBody ?? "",
+        buildNumber: result.buildNumber ?? "",
+        mtkFirmwareVersion: result.mtkFirmwareVersion ?? "",
+        besFirmwareVersion: result.besFirmwareVersion ?? "",
+        updates: result.updates,
+        targetBuildNumber: result.updateInfo?.versionCode ?? result.latestVersionInfo?.versionCode ?? 0,
+        targetBesVersion: result.besVersion ?? "",
+        mtkPatch: result.mtkPatch
+            ? {
+                startFirmware: result.mtkPatch.start_firmware,
+                endFirmware: result.mtkPatch.end_firmware,
+                url: result.mtkPatch.url,
+            }
+            : null,
+    });
+}
+/** Start a chain after the user explicitly approves its first update pass. */
+export function beginOtaAutoChain(initialFingerprint, approvedDowngrade, releaseRange) {
+    session = {
+        approvedDowngrade,
+        passCount: 1,
+        releaseRange: { ...releaseRange },
+        reconnectDeadline: null,
+        seenFingerprints: new Set([initialFingerprint]),
+    };
+}
+export function isOtaAutoChainActive() {
+    return session !== null;
+}
+export function otaAutoChainReleaseRange() {
+    return session ? { ...session.releaseRange } : null;
+}
+/** End the current chain. Safe to call when no chain is active. */
+export function stopOtaAutoChain() {
+    session = null;
+}
+/**
+ * Start (or continue) the bounded wait for glasses that are rebooting between
+ * passes. Re-renders must not extend the original deadline indefinitely.
+ */
+export function otaAutoChainReconnectWaitRemaining(now = performance.now()) {
+    if (!session)
+        return null;
+    session.reconnectDeadline ??= now + OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS;
+    return Math.max(0, session.reconnectDeadline - now);
+}
+/** A successful reconnect allows a future pass to establish a fresh wait. */
+export function clearOtaAutoChainReconnectWait() {
+    if (session)
+        session.reconnectDeadline = null;
+}
+/**
+ * Admit the next pass of an active chain. Repeated offers, unexpectedly
+ * destructive downgrades, and runaway chains fail closed and end automation.
+ */
+export function tryAdvanceOtaAutoChain(fingerprint, isDowngrade, targetVersion, releaseVersion = null) {
+    if (!session) {
+        return { advance: false, reason: "inactive" };
+    }
+    if (isDowngrade && !session.approvedDowngrade) {
+        stopOtaAutoChain();
+        return { advance: false, reason: "downgrade_not_approved" };
+    }
+    if (session.seenFingerprints.has(fingerprint)) {
+        stopOtaAutoChain();
+        return { advance: false, reason: "duplicate" };
+    }
+    if (session.passCount >= MAX_OTA_AUTO_CHAIN_PASSES) {
+        stopOtaAutoChain();
+        return { advance: false, reason: "max_passes" };
+    }
+    session.seenFingerprints.add(fingerprint);
+    session.passCount += 1;
+    if (targetVersion)
+        session.releaseRange.toVersion = targetVersion;
+    if (releaseVersion)
+        session.releaseRange.releaseVersion = releaseVersion;
+    return { advance: true, passCount: session.passCount };
+}
+//# sourceMappingURL=OtaAutoChain.js.map

package/build/services/OtaAutoChain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaAutoChain.js","sourceRoot":"","sources":["../../src/services/OtaAutoChain.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAA;AAC1C,MAAM,CAAC,MAAM,mCAAmC,GAAG,OAAO,CAAA;AAqB1D,IAAI,OAAO,GAA+B,IAAI,CAAA;AAE9C;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAoC;IAC1E,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;QACrC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;QACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;QACrC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,EAAE;QACnD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,EAAE;QACnD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,IAAI,MAAM,CAAC,iBAAiB,EAAE,WAAW,IAAI,CAAC;QAC/F,gBAAgB,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;QACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACvB,CAAC,CAAC;gBACE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;gBAC7C,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY;gBACzC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;aACzB;YACH,CAAC,CAAC,IAAI;KACT,CAAC,CAAA;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAC/B,kBAA0B,EAC1B,iBAA0B,EAC1B,YAAsC;IAEtC,OAAO,GAAG;QACR,iBAAiB;QACjB,SAAS,EAAE,CAAC;QACZ,YAAY,EAAE,EAAC,GAAG,YAAY,EAAC;QAC/B,iBAAiB,EAAE,IAAI;QACvB,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC;KAChD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,OAAO,KAAK,IAAI,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,OAAO,CAAC,CAAC,CAAC,EAAC,GAAG,OAAO,CAAC,YAAY,EAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACnD,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,gBAAgB;IAC9B,OAAO,GAAG,IAAI,CAAA;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kCAAkC,CAAC,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE;IACxE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAEzB,OAAO,CAAC,iBAAiB,KAAK,GAAG,GAAG,mCAAmC,CAAA;IACvE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAAA;AACrD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,8BAA8B;IAC5C,IAAI,OAAO;QAAE,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAA;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,WAAoB,EACpB,aAA4B,EAC5B,iBAAgC,IAAI;IAEpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAC,CAAA;IAC7C,CAAC;IAED,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9C,gBAAgB,EAAE,CAAA;QAClB,OAAO,EAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAC,CAAA;IAC3D,CAAC;IAED,IAAI,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,gBAAgB,EAAE,CAAA;QAClB,OAAO,EAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAC,CAAA;IAC9C,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,IAAI,yBAAyB,EAAE,CAAC;QACnD,gBAAgB,EAAE,CAAA;QAClB,OAAO,EAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAC,CAAA;IAC/C,CAAC;IAED,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACzC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAA;IACtB,IAAI,aAAa;QAAE,OAAO,CAAC,YAAY,CAAC,SAAS,GAAG,aAAa,CAAA;IACjE,IAAI,cAAc;QAAE,OAAO,CAAC,YAAY,CAAC,cAAc,GAAG,cAAc,CAAA;IACxE,OAAO,EAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAC,CAAA;AACtD,CAAC","sourcesContent":["import type {OtaCheckCurrentGlassesResult} from \"./OtaUpdateCheckService\"\n\nexport const MAX_OTA_AUTO_CHAIN_PASSES = 8\nexport const OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS = 120_000\n\ntype OtaAutoChainSession = {\n  approvedDowngrade: boolean\n  passCount: number\n  releaseRange: OtaAutoChainReleaseRange\n  reconnectDeadline: number | null\n  seenFingerprints: Set<string>\n}\n\nexport type OtaAutoChainReleaseRange = {\n  fromVersion: string | null\n  toVersion: string | null\n  /** Exact coordinated release identity for the OTA pin, absent for legacy manifests. */\n  releaseVersion?: string | null\n}\n\nexport type OtaAutoChainAdvanceResult =\n  | {advance: true; passCount: number}\n  | {advance: false; reason: \"inactive\" | \"duplicate\" | \"max_passes\" | \"downgrade_not_approved\"}\n\nlet session: OtaAutoChainSession | null = null\n\n/**\n * Identify the exact update offer that produced one OTA pass. Including the\n * observed versions and manifest body lets a changed manifest advance while a\n * stale post-install version_info response is rejected as a duplicate.\n */\nexport function otaAutoChainFingerprint(result: OtaCheckCurrentGlassesResult): string {\n  return JSON.stringify({\n    manifestUrl: result.manifestUrl ?? \"\",\n    manifestBody: result.manifestBody ?? \"\",\n    buildNumber: result.buildNumber ?? \"\",\n    mtkFirmwareVersion: result.mtkFirmwareVersion ?? \"\",\n    besFirmwareVersion: result.besFirmwareVersion ?? \"\",\n    updates: result.updates,\n    targetBuildNumber: result.updateInfo?.versionCode ?? result.latestVersionInfo?.versionCode ?? 0,\n    targetBesVersion: result.besVersion ?? \"\",\n    mtkPatch: result.mtkPatch\n      ? {\n          startFirmware: result.mtkPatch.start_firmware,\n          endFirmware: result.mtkPatch.end_firmware,\n          url: result.mtkPatch.url,\n        }\n      : null,\n  })\n}\n\n/** Start a chain after the user explicitly approves its first update pass. */\nexport function beginOtaAutoChain(\n  initialFingerprint: string,\n  approvedDowngrade: boolean,\n  releaseRange: OtaAutoChainReleaseRange,\n): void {\n  session = {\n    approvedDowngrade,\n    passCount: 1,\n    releaseRange: {...releaseRange},\n    reconnectDeadline: null,\n    seenFingerprints: new Set([initialFingerprint]),\n  }\n}\n\nexport function isOtaAutoChainActive(): boolean {\n  return session !== null\n}\n\nexport function otaAutoChainReleaseRange(): OtaAutoChainReleaseRange | null {\n  return session ? {...session.releaseRange} : null\n}\n\n/** End the current chain. Safe to call when no chain is active. */\nexport function stopOtaAutoChain(): void {\n  session = null\n}\n\n/**\n * Start (or continue) the bounded wait for glasses that are rebooting between\n * passes. Re-renders must not extend the original deadline indefinitely.\n */\nexport function otaAutoChainReconnectWaitRemaining(now = performance.now()): number | null {\n  if (!session) return null\n\n  session.reconnectDeadline ??= now + OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS\n  return Math.max(0, session.reconnectDeadline - now)\n}\n\n/** A successful reconnect allows a future pass to establish a fresh wait. */\nexport function clearOtaAutoChainReconnectWait(): void {\n  if (session) session.reconnectDeadline = null\n}\n\n/**\n * Admit the next pass of an active chain. Repeated offers, unexpectedly\n * destructive downgrades, and runaway chains fail closed and end automation.\n */\nexport function tryAdvanceOtaAutoChain(\n  fingerprint: string,\n  isDowngrade: boolean,\n  targetVersion: string | null,\n  releaseVersion: string | null = null,\n): OtaAutoChainAdvanceResult {\n  if (!session) {\n    return {advance: false, reason: \"inactive\"}\n  }\n\n  if (isDowngrade && !session.approvedDowngrade) {\n    stopOtaAutoChain()\n    return {advance: false, reason: \"downgrade_not_approved\"}\n  }\n\n  if (session.seenFingerprints.has(fingerprint)) {\n    stopOtaAutoChain()\n    return {advance: false, reason: \"duplicate\"}\n  }\n\n  if (session.passCount >= MAX_OTA_AUTO_CHAIN_PASSES) {\n    stopOtaAutoChain()\n    return {advance: false, reason: \"max_passes\"}\n  }\n\n  session.seenFingerprints.add(fingerprint)\n  session.passCount += 1\n  if (targetVersion) session.releaseRange.toVersion = targetVersion\n  if (releaseVersion) session.releaseRange.releaseVersion = releaseVersion\n  return {advance: true, passCount: session.passCount}\n}\n"]}

package/build/services/OtaErrorMapping.d.ts

@@ -0,0 +1,18 @@
+import type { OtaProgress, OtaStatus } from "../facades/ota";
+export declare const BES_INSTALL_RESTART_MESSAGE = "Restart your glasses to safely exit firmware update mode before trying again";
+/**
+ * Offer Change WiFi whenever the OTA flow failed while the glasses were in the
+ * download step (any download failure — network, SSL, size cap, verify, etc.).
+ *
+ * Also covers phone-side watchdog failures that fire while the store still shows
+ * an active download phase (stall / global timeout mid-download).
+ */
+export declare function shouldShowChangeWifiForOtaDownloadFailure(otaStatus: OtaStatus | null | undefined, otaProgress: OtaProgress | null | undefined, localErrorMessage: string): boolean;
+export declare function getOtaErrorMessage(error?: string): string;
+/**
+ * Once a BES install has started, any failure conservatively requires a glasses restart. This
+ * avoids adding a BES-specific error code to the wire protocol and, more importantly, never offers
+ * an unsafe retry when a generic failure or silence may mean BES entered its raw OTA parser.
+ */
+export declare function shouldRequireGlassesRebootForBesFailure(otaStatus: OtaStatus | null | undefined, _otaProgress: OtaProgress | null | undefined, localErrorMessage: string): boolean;
+//# sourceMappingURL=OtaErrorMapping.d.ts.map

package/build/services/OtaErrorMapping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaErrorMapping.d.ts","sourceRoot":"","sources":["../../src/services/OtaErrorMapping.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,WAAW,EAAE,SAAS,EAAC,MAAM,gBAAgB,CAAA;AAE1D,eAAO,MAAM,2BAA2B,iFACwC,CAAA;AAehF;;;;;;GAMG;AACH,wBAAgB,yCAAyC,CACvD,SAAS,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,EACvC,WAAW,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,EAC3C,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAWT;AAED,wBAAgB,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAqBzD;AAED;;;;GAIG;AACH,wBAAgB,uCAAuC,CACrD,SAAS,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,EACvC,YAAY,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,EAC5C,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAKT"}

package/build/services/OtaErrorMapping.js

@@ -0,0 +1,63 @@
+export const BES_INSTALL_RESTART_MESSAGE = "Restart your glasses to safely exit firmware update mode before trying again";
+function isDownloadPhaseSnapshot(otaStatus, otaProgress) {
+    if (otaStatus?.phase === "download") {
+        return true;
+    }
+    if (otaProgress?.stage === "download") {
+        return true;
+    }
+    return false;
+}
+/**
+ * Offer Change WiFi whenever the OTA flow failed while the glasses were in the
+ * download step (any download failure — network, SSL, size cap, verify, etc.).
+ *
+ * Also covers phone-side watchdog failures that fire while the store still shows
+ * an active download phase (stall / global timeout mid-download).
+ */
+export function shouldShowChangeWifiForOtaDownloadFailure(otaStatus, otaProgress, localErrorMessage) {
+    if (otaStatus?.status === "failed" && otaStatus.phase === "download") {
+        return true;
+    }
+    if (otaProgress?.status === "FAILED" && otaProgress.stage === "download") {
+        return true;
+    }
+    if (localErrorMessage && isDownloadPhaseSnapshot(otaStatus, otaProgress)) {
+        return true;
+    }
+    return false;
+}
+export function getOtaErrorMessage(error) {
+    switch (error) {
+        case "no_internet":
+            return "Glasses WiFi has no internet connection";
+        case "clock_skew":
+            return "Glasses clock is wrong — syncing time from your phone, then retrying update check";
+        case "ssl_error":
+            return "Secure connection failed — try a different WiFi network";
+        case "download_failed":
+            return "Download failed — check glasses WiFi connection";
+        case "firmware_too_large":
+            return "Firmware file is unexpectedly large — please contact support";
+        case "firmware_verify_failed":
+            return "Firmware verification failed — please try again or contact support";
+        case "apk_verify_failed":
+            return "Update verification failed — please try again or contact support";
+        case "install_failed":
+            return "Install failed — please try again";
+        default:
+            return error || "Update failed";
+    }
+}
+/**
+ * Once a BES install has started, any failure conservatively requires a glasses restart. This
+ * avoids adding a BES-specific error code to the wire protocol and, more importantly, never offers
+ * an unsafe retry when a generic failure or silence may mean BES entered its raw OTA parser.
+ */
+export function shouldRequireGlassesRebootForBesFailure(otaStatus, _otaProgress, localErrorMessage) {
+    if (otaStatus?.stepType !== "bes" || otaStatus.phase !== "install") {
+        return false;
+    }
+    return otaStatus.status === "failed" || Boolean(localErrorMessage);
+}
+//# sourceMappingURL=OtaErrorMapping.js.map

package/build/services/OtaErrorMapping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaErrorMapping.js","sourceRoot":"","sources":["../../src/services/OtaErrorMapping.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,2BAA2B,GACtC,8EAA8E,CAAA;AAEhF,SAAS,uBAAuB,CAC9B,SAAuC,EACvC,WAA2C;IAE3C,IAAI,SAAS,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,WAAW,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC;QACtC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yCAAyC,CACvD,SAAuC,EACvC,WAA2C,EAC3C,iBAAyB;IAEzB,IAAI,SAAS,EAAE,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACrE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,WAAW,EAAE,MAAM,KAAK,QAAQ,IAAI,WAAW,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACzE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,iBAAiB,IAAI,uBAAuB,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;QACzE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,aAAa;YAChB,OAAO,yCAAyC,CAAA;QAClD,KAAK,YAAY;YACf,OAAO,mFAAmF,CAAA;QAC5F,KAAK,WAAW;YACd,OAAO,yDAAyD,CAAA;QAClE,KAAK,iBAAiB;YACpB,OAAO,iDAAiD,CAAA;QAC1D,KAAK,oBAAoB;YACvB,OAAO,8DAA8D,CAAA;QACvE,KAAK,wBAAwB;YAC3B,OAAO,oEAAoE,CAAA;QAC7E,KAAK,mBAAmB;YACtB,OAAO,kEAAkE,CAAA;QAC3E,KAAK,gBAAgB;YACnB,OAAO,mCAAmC,CAAA;QAC5C;YACE,OAAO,KAAK,IAAI,eAAe,CAAA;IACnC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uCAAuC,CACrD,SAAuC,EACvC,YAA4C,EAC5C,iBAAyB;IAEzB,IAAI,SAAS,EAAE,QAAQ,KAAK,KAAK,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACnE,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAA;AACpE,CAAC","sourcesContent":["import type {OtaProgress, OtaStatus} from \"../facades/ota\"\n\nexport const BES_INSTALL_RESTART_MESSAGE =\n  \"Restart your glasses to safely exit firmware update mode before trying again\"\n\nfunction isDownloadPhaseSnapshot(\n  otaStatus: OtaStatus | null | undefined,\n  otaProgress: OtaProgress | null | undefined,\n): boolean {\n  if (otaStatus?.phase === \"download\") {\n    return true\n  }\n  if (otaProgress?.stage === \"download\") {\n    return true\n  }\n  return false\n}\n\n/**\n * Offer Change WiFi whenever the OTA flow failed while the glasses were in the\n * download step (any download failure — network, SSL, size cap, verify, etc.).\n *\n * Also covers phone-side watchdog failures that fire while the store still shows\n * an active download phase (stall / global timeout mid-download).\n */\nexport function shouldShowChangeWifiForOtaDownloadFailure(\n  otaStatus: OtaStatus | null | undefined,\n  otaProgress: OtaProgress | null | undefined,\n  localErrorMessage: string,\n): boolean {\n  if (otaStatus?.status === \"failed\" && otaStatus.phase === \"download\") {\n    return true\n  }\n  if (otaProgress?.status === \"FAILED\" && otaProgress.stage === \"download\") {\n    return true\n  }\n  if (localErrorMessage && isDownloadPhaseSnapshot(otaStatus, otaProgress)) {\n    return true\n  }\n  return false\n}\n\nexport function getOtaErrorMessage(error?: string): string {\n  switch (error) {\n    case \"no_internet\":\n      return \"Glasses WiFi has no internet connection\"\n    case \"clock_skew\":\n      return \"Glasses clock is wrong — syncing time from your phone, then retrying update check\"\n    case \"ssl_error\":\n      return \"Secure connection failed — try a different WiFi network\"\n    case \"download_failed\":\n      return \"Download failed — check glasses WiFi connection\"\n    case \"firmware_too_large\":\n      return \"Firmware file is unexpectedly large — please contact support\"\n    case \"firmware_verify_failed\":\n      return \"Firmware verification failed — please try again or contact support\"\n    case \"apk_verify_failed\":\n      return \"Update verification failed — please try again or contact support\"\n    case \"install_failed\":\n      return \"Install failed — please try again\"\n    default:\n      return error || \"Update failed\"\n  }\n}\n\n/**\n * Once a BES install has started, any failure conservatively requires a glasses restart. This\n * avoids adding a BES-specific error code to the wire protocol and, more importantly, never offers\n * an unsafe retry when a generic failure or silence may mean BES entered its raw OTA parser.\n */\nexport function shouldRequireGlassesRebootForBesFailure(\n  otaStatus: OtaStatus | null | undefined,\n  _otaProgress: OtaProgress | null | undefined,\n  localErrorMessage: string,\n): boolean {\n  if (otaStatus?.stepType !== \"bes\" || otaStatus.phase !== \"install\") {\n    return false\n  }\n  return otaStatus.status === \"failed\" || Boolean(localErrorMessage)\n}\n"]}

package/build/services/OtaInstallCoordinator.d.ts

@@ -1,4 +1,23 @@
-import type { OtaProgress, OtaStatus } from "@glassly/bluetooth-sdk/internal";
+/**
+ * OtaInstallCoordinator — engine-owned OTA install state machine (WP 8B).
+ *
+ * Owns every timer/retry/sequencing rule that used to live in the host screen
+ * `mobile/src/app/ota/progress.tsx`: the global session timeout, serialized
+ * ota_start retries, the stuck-at-zero watchdog, the progress-stall watchdog keyed
+ * on a staleness signature, connect-edge arbitration (initial mount vs
+ * reconnect vs post-APK reboot), the ota_query_status reply fallback, the ping
+ * keepalive, the ota_start_ack / mtk_update_complete listeners, and terminal
+ * cleanup. The host progress screen is a pure renderer over
+ * `snapshot()`/`onSnapshot()` plus the `attach()/detach()/retry()/finish()`
+ * commands (exposed as `engine.ota.installSession`).
+ *
+ * The reaction pass mirrors the old component's effect ordering: a
+ * pass diffs the store-derived inputs (connected / otaStatus / otaProgress /
+ * displayState / stall signature) exactly like the old effect dep arrays, and
+ * state written mid-pass queues a follow-up pass — the same way a setState
+ * during React effects scheduled a re-render after the current effect batch.
+ */
+import { type OtaProgress, type OtaStatus } from "@glassly/bluetooth-sdk";
 import { type HotspotOtaPhase } from "./HotspotOtaTransport";
 import type { OtaCheckCurrentGlassesResult } from "./OtaUpdateCheckService";
 import { type DisplayState } from "./otaDisplayState";
@@ -30,6 +49,8 @@ export interface OtaInstallSnapshot {
     /** Pre-ota_start phone staging/join state for a hotspot attempt. */
     hotspotPhase: HotspotOtaPhase;
     hotspotArtifactPercent: number | null;
+    /** Transport selected from the checked glasses capabilities and Wi-Fi state. */
+    transport: "wifi" | "hotspot";
 }
 declare class OtaInstallCoordinator {
     private attached;
@@ -65,6 +86,7 @@ declare class OtaInstallCoordinator {
     private pingInterval;
     private queryReplyTimeout;
     private continueLockoutTimer;
+    private restartRecoveryTimeout;
     private legacyApkSettleTimer;
     private mtkStallDetectTimer;
     private mtkSimTickTimer;
@@ -106,14 +128,14 @@ declare class OtaInstallCoordinator {
      * stays in the screen): clear the selected update, and after an APK step
      * clear the stale build number so the next check re-reads version_info.
      */
-    finish(): void;
+    finish(): Promise<void>;
     /**
      * Abandon an interrupted session (the super-mode skip): terminal cleanup
      * plus dropping the session's status/progress read-state, so
      * deriveDisplayState doesn't resurrect the stale install when the host
      * navigates away and back through /ota routes.
      */
-    discard(): void;
+    discard(): Promise<void>;
     snapshot(): OtaInstallSnapshot;
     /**
      * True while the recovery worker owns the downgrade transaction (after the apk install
@@ -257,6 +279,7 @@ declare class OtaInstallCoordinator {
     private clearPingInterval;
     private clearQueryReplyTimeout;
     private clearContinueLockoutTimer;
+    private clearRestartRecoveryTimeout;
     private clearLegacyApkSettleTimer;
     private clearMtkSimulationTimers;
     /**

package/build/services/OtaInstallCoordinator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OtaInstallCoordinator.d.ts","sourceRoot":"","sources":["../../src/services/OtaInstallCoordinator.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAC,WAAW,EAAE,SAAS,EAAC,MAAM,iCAAiC,CAAA;AAI3E,OAAO,EAAsB,KAAK,eAAe,EAAC,MAAM,uBAAuB,CAAA;AAC/E,OAAO,KAAK,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAA;AACzE,OAAO,EAAqB,KAAK,YAAY,EAAC,MAAM,mBAAmB,CAAA;AAsHvE,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,YAAY,CAAA;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,sBAAsB,EAAE,OAAO,CAAA;IAC/B,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,SAAS,GAAG,IAAI,CAAA;IAC3B,WAAW,EAAE,WAAW,GAAG,IAAI,CAAA;IAC/B;;;;OAIG;IACH,+BAA+B,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9C,sFAAsF;IACtF,eAAe,EAAE,OAAO,CAAA;IACxB,8FAA8F;IAC9F,sBAAsB,EAAE,OAAO,CAAA;IAC/B;;;;;OAKG;IACH,kBAAkB,EAAE,YAAY,GAAG,YAAY,GAAG,WAAW,GAAG,IAAI,CAAA;IACpE,oEAAoE;IACpE,YAAY,EAAE,eAAe,CAAA;IAC7B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;CACtC;AASD,cAAM,qBAAqB;IACzB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,mBAAmB,CAA4C;IACvE,OAAO,CAAC,iBAAiB,CAA6B;IACtD,OAAO,CAAC,kBAAkB,CAAsB;IAChD,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,sBAAsB,CAAsB;IAGpD,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,gBAAgB,CAAQ;IAChC,OAAO,CAAC,sBAAsB,CAAQ;IAItC,OAAO,CAAC,WAAW,CAAQ;IAC3B,OAAO,CAAC,aAAa,CAAQ;IAK7B,OAAO,CAAC,kBAAkB,CAAsB;IAEhD,OAAO,CAAC,oBAAoB,CAAQ;IAEpC,OAAO,CAAC,4BAA4B,CAAQ;IAG5C,OAAO,CAAC,eAAe,CAAkC;IAMzD,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,4BAA4B,CAAQ;IAC5C,OAAO,CAAC,kBAAkB,CAAuC;IAOjE,OAAO,CAAC,oBAAoB,CAAQ;IACpC,OAAO,CAAC,mBAAmB,CAAsB;IAGjD,OAAO,CAAC,2BAA2B,CAAQ;IAE3C,OAAO,CAAC,sBAAsB,CAAQ;IAEtC,OAAO,CAAC,mBAAmB,CAAQ;IAEnC,OAAO,CAAC,mBAAmB,CAAsB;IACjD,OAAO,CAAC,mBAAmB,CAAI;IAG/B,OAAO,CAAC,aAAa,CAA6C;IAClE,OAAO,CAAC,oBAAoB,CAAQ;IACpC,OAAO,CAAC,YAAY,CAA6C;IACjE,OAAO,CAAC,YAAY,CAA6C;IACjE,OAAO,CAAC,eAAe,CAA6C;IACpE,OAAO,CAAC,YAAY,CAA8C;IAClE,OAAO,CAAC,iBAAiB,CAA6C;IACtE,OAAO,CAAC,oBAAoB,CAA6C;IACzE,OAAO,CAAC,oBAAoB,CAA6C;IACzE,OAAO,CAAC,mBAAmB,CAA6C;IACxE,OAAO,CAAC,eAAe,CAA8C;IAIrE,OAAO,CAAC,sBAAsB,CAAQ;IAKtC,OAAO,CAAC,iBAAiB,CAAiC;IAC1D,OAAO,CAAC,gBAAgB,CAAQ;IAGhC,OAAO,CAAC,uBAAuB,CAAQ;IACvC,OAAO,CAAC,UAAU,CAAI;IAGtB,OAAO,CAAC,gBAAgB,CAA4B;IAGpD,OAAO,CAAC,aAAa,CAAQ;IAC7B,OAAO,CAAC,aAAa,CAAyB;IAC9C,OAAO,CAAC,eAAe,CAA2B;IAClD,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,YAAY,CAAK;IAIzB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,WAAW,CAAQ;IAE3B,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,gBAAgB,CAAwB;IAIhD,mGAAmG;IACnG,OAAO,CAAC,WAAW,EAAE,4BAA4B,GAAG,MAAM,GAAG,SAAS;IAkBtE;;;;;OAKG;IACH,MAAM,IAAI,IAAI;IAgCd;;;;OAIG;IACH,MAAM,IAAI,IAAI;IAoBd,+EAA+E;IAC/E,KAAK,IAAI,IAAI;IA8Eb;;;;OAIG;IACH,MAAM,IAAI,IAAI;IAYd;;;;;OAKG;IACH,OAAO,IAAI,IAAI;IAOf,QAAQ,IAAI,kBAAkB;IAkC9B;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IAI/B,sFAAsF;IACtF,OAAO,CAAC,wBAAwB;IAMhC;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,IAAI,GAAG,MAAM,IAAI;IAmBlE,OAAO,CAAC,iBAAiB;IAiCzB,qFAAqF;IACrF,OAAO,CAAC,2BAA2B;IAYnC,2EAA2E;IAC3E,OAAO,CAAC,sBAAsB;IAM9B,0EAA0E;IAC1E,OAAO,CAAC,kBAAkB;IAM1B,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,+BAA+B;IAOvC,OAAO,CAAC,sBAAsB;IAO9B,8FAA8F;IAC9F,OAAO,CAAC,sBAAsB;IAM9B,oFAAoF;IACpF,OAAO,CAAC,uBAAuB;IAgB/B,OAAO,CAAC,KAAK;IAiBb;;;OAGG;IACH,OAAO,CAAC,OAAO;IAoVf;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;IAgC/B,OAAO,CAAC,cAAc;IA8DtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAOzB;IAED;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAE3C;IAED,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAOjC;IAID;;;;;;;;;OASG;IACH,OAAO,CAAC,+BAA+B;IAkCvC,OAAO,CAAC,oBAAoB;IA2B5B,+FAA+F;IAC/F,OAAO,CAAC,0BAA0B;IASlC;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;IAqDjC;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAgB9B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,yBAAyB;IAcjC;;;;OAIG;IACH,OAAO,CAAC,eAAe;IASvB;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,uBAAuB;IAuB/B,OAAO,CAAC,oBAAoB;IAuB5B,yEAAyE;IACzE,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,yBAAyB;YAyCnB,eAAe;YAmFf,wBAAwB;IAStC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,qBAAqB;IAmC7B,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,sBAAsB;IAO9B,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,wBAAwB;IAWhC;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,iBAAiB;CAO1B;AAED,oGAAoG;AACpG,eAAO,MAAM,qBAAqB,uBAA8B,CAAA"}
+{"version":3,"file":"OtaInstallCoordinator.d.ts","sourceRoot":"","sources":["../../src/services/OtaInstallCoordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAqB,EAAC,KAAK,WAAW,EAAE,KAAK,SAAS,EAAC,MAAM,wBAAwB,CAAA;AAIrF,OAAO,EAAsB,KAAK,eAAe,EAAC,MAAM,uBAAuB,CAAA;AAC/E,OAAO,KAAK,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAA;AACzE,OAAO,EAAqB,KAAK,YAAY,EAAC,MAAM,mBAAmB,CAAA;AAwHvE,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,YAAY,CAAA;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,sBAAsB,EAAE,OAAO,CAAA;IAC/B,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,SAAS,GAAG,IAAI,CAAA;IAC3B,WAAW,EAAE,WAAW,GAAG,IAAI,CAAA;IAC/B;;;;OAIG;IACH,+BAA+B,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9C,sFAAsF;IACtF,eAAe,EAAE,OAAO,CAAA;IACxB,8FAA8F;IAC9F,sBAAsB,EAAE,OAAO,CAAA;IAC/B;;;;;OAKG;IACH,kBAAkB,EAAE,YAAY,GAAG,YAAY,GAAG,WAAW,GAAG,IAAI,CAAA;IACpE,oEAAoE;IACpE,YAAY,EAAE,eAAe,CAAA;IAC7B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,gFAAgF;IAChF,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;CAC9B;AASD,cAAM,qBAAqB;IACzB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,mBAAmB,CAA4C;IACvE,OAAO,CAAC,iBAAiB,CAA6B;IACtD,OAAO,CAAC,kBAAkB,CAAsB;IAChD,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,sBAAsB,CAAsB;IAGpD,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,gBAAgB,CAAQ;IAChC,OAAO,CAAC,sBAAsB,CAAQ;IAItC,OAAO,CAAC,WAAW,CAAQ;IAC3B,OAAO,CAAC,aAAa,CAAQ;IAK7B,OAAO,CAAC,kBAAkB,CAAsB;IAEhD,OAAO,CAAC,oBAAoB,CAAQ;IAEpC,OAAO,CAAC,4BAA4B,CAAQ;IAG5C,OAAO,CAAC,eAAe,CAAkC;IAMzD,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,4BAA4B,CAAQ;IAC5C,OAAO,CAAC,kBAAkB,CAAuC;IAOjE,OAAO,CAAC,oBAAoB,CAAQ;IACpC,OAAO,CAAC,mBAAmB,CAAsB;IAGjD,OAAO,CAAC,2BAA2B,CAAQ;IAE3C,OAAO,CAAC,sBAAsB,CAAQ;IAEtC,OAAO,CAAC,mBAAmB,CAAQ;IAEnC,OAAO,CAAC,mBAAmB,CAAsB;IACjD,OAAO,CAAC,mBAAmB,CAAI;IAG/B,OAAO,CAAC,aAAa,CAA6C;IAClE,OAAO,CAAC,oBAAoB,CAAQ;IACpC,OAAO,CAAC,YAAY,CAA6C;IACjE,OAAO,CAAC,YAAY,CAA6C;IACjE,OAAO,CAAC,eAAe,CAA6C;IACpE,OAAO,CAAC,YAAY,CAA8C;IAClE,OAAO,CAAC,iBAAiB,CAA6C;IACtE,OAAO,CAAC,oBAAoB,CAA6C;IACzE,OAAO,CAAC,sBAAsB,CAA6C;IAC3E,OAAO,CAAC,oBAAoB,CAA6C;IACzE,OAAO,CAAC,mBAAmB,CAA6C;IACxE,OAAO,CAAC,eAAe,CAA8C;IAIrE,OAAO,CAAC,sBAAsB,CAAQ;IAKtC,OAAO,CAAC,iBAAiB,CAAiC;IAC1D,OAAO,CAAC,gBAAgB,CAAQ;IAGhC,OAAO,CAAC,uBAAuB,CAAQ;IACvC,OAAO,CAAC,UAAU,CAAI;IAGtB,OAAO,CAAC,gBAAgB,CAA4B;IAGpD,OAAO,CAAC,aAAa,CAAQ;IAC7B,OAAO,CAAC,aAAa,CAAyB;IAC9C,OAAO,CAAC,eAAe,CAA2B;IAClD,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,YAAY,CAAK;IAIzB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,WAAW,CAAQ;IAE3B,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,gBAAgB,CAAwB;IAIhD,mGAAmG;IACnG,OAAO,CAAC,WAAW,EAAE,4BAA4B,GAAG,MAAM,GAAG,SAAS;IAkBtE;;;;;OAKG;IACH,MAAM,IAAI,IAAI;IAgCd;;;;OAIG;IACH,MAAM,IAAI,IAAI;IAoBd,+EAA+E;IAC/E,KAAK,IAAI,IAAI;IA8Eb;;;;OAIG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAa7B;;;;;OAKG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAO9B,QAAQ,IAAI,kBAAkB;IAmC9B;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IAI/B,sFAAsF;IACtF,OAAO,CAAC,wBAAwB;IAMhC;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,IAAI,GAAG,MAAM,IAAI;IAmBlE,OAAO,CAAC,iBAAiB;IAiCzB,qFAAqF;IACrF,OAAO,CAAC,2BAA2B;IAYnC,2EAA2E;IAC3E,OAAO,CAAC,sBAAsB;IAM9B,0EAA0E;IAC1E,OAAO,CAAC,kBAAkB;IAM1B,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,+BAA+B;IAOvC,OAAO,CAAC,sBAAsB;IAO9B,8FAA8F;IAC9F,OAAO,CAAC,sBAAsB;IAM9B,oFAAoF;IACpF,OAAO,CAAC,uBAAuB;IAgB/B,OAAO,CAAC,KAAK;IAiBb;;;OAGG;IACH,OAAO,CAAC,OAAO;IA8Vf;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;IAgC/B,OAAO,CAAC,cAAc;IA8DtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAOzB;IAED;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAE3C;IAED,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAOjC;IAID;;;;;;;;;OASG;IACH,OAAO,CAAC,+BAA+B;IAkCvC,OAAO,CAAC,oBAAoB;IA2B5B,+FAA+F;IAC/F,OAAO,CAAC,0BAA0B;IASlC;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;IAqDjC;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAgB9B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,yBAAyB;IAcjC;;;;OAIG;IACH,OAAO,CAAC,eAAe;IASvB;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,uBAAuB;IAuB/B,OAAO,CAAC,oBAAoB;IAuB5B,yEAAyE;IACzE,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,yBAAyB;YAyCnB,eAAe;YAsFf,wBAAwB;IAStC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,qBAAqB;IAmC7B,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,sBAAsB;IAO9B,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,2BAA2B;IAOnC,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,wBAAwB;IAWhC;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,iBAAiB;CAQ1B;AAED,oGAAoG;AACpG,eAAO,MAAM,qBAAqB,uBAA8B,CAAA"}

package/build/services/OtaInstallCoordinator.js

@@ -17,13 +17,13 @@
  * state written mid-pass queues a follow-up pass — the same way a setState
  * during React effects scheduled a re-render after the current effect batch.
  */
-import BluetoothSdk from "@glassly/bluetooth-sdk/internal";
+import BluetoothSdk from "@glassly/bluetooth-sdk";
 import GlobalEventEmitter from "../utils/GlobalEventEmitter";
 import { isGlassesConnected, useGlassesStore } from "../stores/glasses";
 import { resolveOtaManifestUrl } from "./otaManifestUrl";
 import { hotspotOtaTransport } from "./HotspotOtaTransport";
 import { deriveDisplayState } from "./otaDisplayState";
-import { BES_CONTINUE_LOCKOUT_MS, DOWNLOAD_STUCK_TIMEOUT_MS, GLOBAL_OTA_TIMEOUT_MS, LEGACY_APK_COMPLETION_SETTLE_MS, LEGACY_BES_CONTINUE_LOCKOUT_MS, LEGACY_DOWNLOAD_STUCK_TIMEOUT_MS, LEGACY_GLOBAL_OTA_TIMEOUT_MS, LEGACY_MTK_INSTALL_TIMEOUT_MS, LEGACY_MTK_SIM_CAP_PERCENT, LEGACY_MTK_SIM_FLOOR_PERCENT, LEGACY_MTK_SIM_TICK_MS, LEGACY_MTK_STALL_DETECT_MS, LEGACY_MTK_STALL_ZONE_MAX_PERCENT, LEGACY_MTK_STALL_ZONE_MIN_PERCENT, LEGACY_PING_INTERVAL_MS, LEGACY_PROGRESS_TIMEOUT_MS, LEGACY_RETRY_INTERVAL_MS, MAX_RETRIES, MTK_INSTALL_TIMEOUT_MS, OtaProgressMessages, PING_INTERVAL_MS, PROGRESS_TIMEOUT_MS, QUERY_REPLY_TIMEOUT_MS, RETRY_INTERVAL_MS, isLegacyShapedOtaSession, isLegacyShapedOtaStatus, selectOtaProtocolProfile, } from "./otaInstallPolicy";
+import { BES_CONTINUE_LOCKOUT_MS, BES_RESTART_TIMEOUT_MS, DOWNLOAD_STUCK_TIMEOUT_MS, GLOBAL_OTA_TIMEOUT_MS, LEGACY_APK_COMPLETION_SETTLE_MS, LEGACY_BES_CONTINUE_LOCKOUT_MS, LEGACY_BES_RESTART_TIMEOUT_MS, LEGACY_DOWNLOAD_STUCK_TIMEOUT_MS, LEGACY_GLOBAL_OTA_TIMEOUT_MS, LEGACY_MTK_INSTALL_TIMEOUT_MS, LEGACY_MTK_SIM_CAP_PERCENT, LEGACY_MTK_SIM_FLOOR_PERCENT, LEGACY_MTK_SIM_TICK_MS, LEGACY_MTK_STALL_DETECT_MS, LEGACY_MTK_STALL_ZONE_MAX_PERCENT, LEGACY_MTK_STALL_ZONE_MIN_PERCENT, LEGACY_PING_INTERVAL_MS, LEGACY_PROGRESS_TIMEOUT_MS, LEGACY_RETRY_INTERVAL_MS, MAX_RETRIES, MTK_INSTALL_TIMEOUT_MS, OtaProgressMessages, PING_INTERVAL_MS, PROGRESS_TIMEOUT_MS, QUERY_REPLY_TIMEOUT_MS, RETRY_INTERVAL_MS, isLegacyShapedOtaSession, isLegacyShapedOtaStatus, selectOtaProtocolProfile, } from "./otaInstallPolicy";
 function isTerminalForWatchdog(d) {
     return d === "complete" || d === "failed" || d === "restarting";
 }
@@ -156,6 +156,7 @@ class OtaInstallCoordinator {
     pingInterval = null;
     queryReplyTimeout = null;
     continueLockoutTimer = null;
+    restartRecoveryTimeout = null;
     legacyApkSettleTimer = null;
     mtkStallDetectTimer = null;
     mtkSimTickTimer = null;
@@ -306,7 +307,7 @@ class OtaInstallCoordinator {
                     void this.sendOtaStartWithWatchdogs();
                 }
                 else {
-                    void BluetoothSdk.sendOtaQueryStatus().catch(() => { });
+                    void BluetoothSdk.queryOtaStatus().catch(() => { });
                     this.armQueryReplyFallback("retry");
                 }
             }
@@ -349,16 +350,17 @@ class OtaInstallCoordinator {
      * stays in the screen): clear the selected update, and after an APK step
      * clear the stale build number so the next check re-reads version_info.
      */
-    finish() {
+    async finish() {
         if (this.otaStartOwnership?.outcome !== "pending") {
             this.otaStartOwnership = null;
         }
         useGlassesStore.getState().setOtaUpdateAvailable(null);
         if (this.apkStepSeen) {
-            BluetoothSdk.updateGlasses({ buildNumber: "" });
             useGlassesStore.getState().setGlassesInfo({ buildNumber: "" });
         }
-        void this.teardownHotspotTransport();
+        // The post-install check needs internet again. Do not let callers leave the
+        // terminal screen while Android still owns the no-internet hotspot route.
+        await this.teardownHotspotTransport();
     }
     /**
      * Abandon an interrupted session (the super-mode skip): terminal cleanup
@@ -366,8 +368,8 @@ class OtaInstallCoordinator {
      * deriveDisplayState doesn't resurrect the stale install when the host
      * navigates away and back through /ota routes.
      */
-    discard() {
-        this.finish();
+    async discard() {
+        await this.finish();
         const store = useGlassesStore.getState();
         store.setOtaStatus(null);
         store.setOtaProgress(null);
@@ -403,6 +405,7 @@ class OtaInstallCoordinator {
             versionChangePhase: this.deriveVersionChangePhase(connected),
             hotspotPhase: this.hotspotPhase,
             hotspotArtifactPercent: this.hotspotArtifactPercent,
+            transport: this.selectedTransport,
         };
     }
     /**
@@ -848,12 +851,24 @@ class OtaInstallCoordinator {
         // (15s unified, 35s for legacy-shaped sessions — WP 8C-f).
         if (displayStateChanged && displayState === "restarting") {
             this.clearContinueLockoutTimer();
+            this.clearRestartRecoveryTimeout();
             const lockoutMs = legacySession ? LEGACY_BES_CONTINUE_LOCKOUT_MS : BES_CONTINUE_LOCKOUT_MS;
+            const restartTimeoutMs = legacySession ? LEGACY_BES_RESTART_TIMEOUT_MS : BES_RESTART_TIMEOUT_MS;
             this.setContinueButtonDisabled(true);
             this.continueLockoutTimer = setTimeout(() => {
                 this.continueLockoutTimer = null;
                 this.setContinueButtonDisabled(false);
             }, lockoutMs);
+            this.restartRecoveryTimeout = setTimeout(() => {
+                this.restartRecoveryTimeout = null;
+                if (this.computeDisplayStateNow() !== "restarting")
+                    return;
+                console.log(`[OTA_PROGRESS] watchdog: glasses did not finish restarting in ${restartTimeoutMs}ms`);
+                this.setErrorMsg(OtaProgressMessages.restartTimeout);
+            }, restartTimeoutMs);
+        }
+        else if (displayStateChanged) {
+            this.clearRestartRecoveryTimeout();
         }
         // Legacy MTK install stall simulation (WP 8C-e): display-only. The simulation
         // timers only ever touch the projected snapshot percent — they never feed back
@@ -908,7 +923,7 @@ class OtaInstallCoordinator {
         if (this.otaStartOwnership?.outcome === "pending") {
             void this.sendOtaStartWithWatchdogs();
         }
-        void BluetoothSdk.sendOtaQueryStatus();
+        void BluetoothSdk.queryOtaStatus().catch(() => { });
         this.armQueryReplyFallback("reconnect");
         return true;
     }
@@ -946,7 +961,7 @@ class OtaInstallCoordinator {
         if (noSessionYet) {
             if (!isIdleStatus && this.otaStartOwnership?.outcome === "acknowledged") {
                 console.log("[OTA_PROGRESS] initial mount, acknowledged session has no cached status — reconciling");
-                void BluetoothSdk.sendOtaQueryStatus().catch(() => { });
+                void BluetoothSdk.queryOtaStatus().catch(() => { });
                 this.armQueryReplyFallback("initial-mount");
                 return;
             }
@@ -961,7 +976,7 @@ class OtaInstallCoordinator {
         }
         else {
             console.log("[OTA_PROGRESS] initial mount, session exists, sending ota_query_status");
-            void BluetoothSdk.sendOtaQueryStatus();
+            void BluetoothSdk.queryOtaStatus().catch(() => { });
             this.armQueryReplyFallback("initial-mount");
         }
     }
@@ -988,7 +1003,7 @@ class OtaInstallCoordinator {
         this.clearProgressTimeout();
         this.onFirstActivity();
         this.onFirstNonZeroProgress();
-        void BluetoothSdk.sendOtaQueryStatus();
+        void BluetoothSdk.queryOtaStatus().catch(() => { });
         useGlassesStore.getState().setMtkUpdatedThisSession(true);
     };
     // --- legacy (< 37) compatibility, ported from progress-legacy.tsx (WP 8C) ---
@@ -1148,7 +1163,7 @@ class OtaInstallCoordinator {
         const s = useGlassesStore.getState().otaStatus;
         if (s?.stepType === "apk" && s.phase === "install" && s.status === "in_progress") {
             this.apkInstallPollInFlight = true;
-            void BluetoothSdk.sendOtaQueryStatus()
+            void BluetoothSdk.queryOtaStatus()
                 .catch(() => { })
                 .finally(() => {
                 this.apkInstallPollInFlight = false;
@@ -1290,6 +1305,9 @@ class OtaInstallCoordinator {
                 otaVersionUrl = this.hotspotManifestUrl;
                 this.maybeArmStuckWatchdog();
             }
+            if (!otaVersionUrl) {
+                throw new Error("OTA is disabled because this build has no immutable manifest pin");
+            }
             console.log(`[OTA_PROGRESS] sending ota_start with ${this.selectedTransport} manifest URL: ${otaVersionUrl}`);
             nativeStartAttempted = true;
             await BluetoothSdk.startOtaUpdate(otaVersionUrl);
@@ -1449,6 +1467,12 @@ class OtaInstallCoordinator {
             this.continueLockoutTimer = null;
         }
     }
+    clearRestartRecoveryTimeout() {
+        if (this.restartRecoveryTimeout) {
+            clearTimeout(this.restartRecoveryTimeout);
+            this.restartRecoveryTimeout = null;
+        }
+    }
     clearLegacyApkSettleTimer() {
         if (this.legacyApkSettleTimer) {
             clearTimeout(this.legacyApkSettleTimer);
@@ -1484,6 +1508,7 @@ class OtaInstallCoordinator {
         this.clearPingInterval();
         this.clearLegacyApkSettleTimer();
         this.clearMtkSimulationTimers();
+        this.clearRestartRecoveryTimeout();
     }
 }
 /** Singleton — one install session machine per app process (matches the single progress screen). */