@glassly/engine 0.1.0-dev.99 → 0.2.8-dev.445

package/src/facades/permissions.ts

@@ -114,6 +114,52 @@ function androidPerms(feature: string): AndroidPermission[] {
 }
 
 export const permissions = {
+  /** Missing required miniapp grants, checked without prompting. CAMERA is the glasses camera. */
+  async missingRequired(requirements: readonly AppletPermission[]): Promise<string[]> {
+    const features = new Set<string>()
+    for (const permission of requirements) {
+      if (permission.required === false) continue
+      switch (permission.type) {
+        case "ALL":
+          features.add(PermissionFeatures.MICROPHONE)
+          features.add(PermissionFeatures.CALENDAR)
+          features.add(PermissionFeatures.LOCATION)
+          features.add(PermissionFeatures.BACKGROUND_LOCATION)
+          features.add(PermissionFeatures.POST_NOTIFICATIONS)
+          features.add("read_notifications")
+          break
+        case "MICROPHONE":
+        case "CALENDAR":
+        case "LOCATION":
+        case "BACKGROUND_LOCATION":
+        case "POST_NOTIFICATIONS":
+          features.add(PermissionFeatures[permission.type])
+          break
+        case "READ_NOTIFICATIONS":
+          features.add("read_notifications")
+          break
+      }
+    }
+
+    const missing: string[] = []
+    for (const feature of features) {
+      let granted: boolean
+      if (feature === "read_notifications") {
+        // iOS glasses read notifications directly; Android uses the phone's listener.
+        granted =
+          Platform.OS !== "android" ||
+          (await (await import("@glassly/crust")).default.hasNotificationListenerPermission())
+      } else if (feature === PermissionFeatures.CALENDAR && Platform.OS === "ios") {
+        // EventKit must allow reads; a scoped/write-only OS grant is insufficient.
+        granted = (await (await import("expo-calendar")).getCalendarPermissions()).status === "granted"
+      } else {
+        granted = await permissions.check(feature)
+      }
+      if (!granted) missing.push(feature)
+    }
+    return missing
+  },
+
   /** Is the given feature's OS permission currently granted? */
   async check(feature: string): Promise<boolean> {
     if (Platform.OS === "android") {

package/src/facades/phoneNotifications.ts

@@ -1,20 +1,28 @@
 /**
- * phoneNotifications facade — `engine.phoneNotifications`: forward phone
- * notifications to the glasses, with a per-app blocklist.
+ * phoneNotifications facade — `engine.phoneNotifications`: phone notifications
+ * on the glasses, with a per-app blocklist and one presentation owner.
  *
- * Android: apps come from the NotificationListenerService's installed-apps
- * enumeration and the blocklist filters capture phone-side.
- * iOS: apps are the seeded catalog plus what the glasses' ANCS client has
- * reported posting notifications (`ios_notification_seen_apps`); the blocklist
- * is mapped onto the G2's on-glass allowlist by PhoneNotificationsSync.
- * Capture itself is controlled by Android notification access / iOS ANCS
- * authorization (`glasses.ancsAuthorized`), not by this facade.
+ * Capture is the phone's (Android listener) or the glasses' (iOS, reading the
+ * phone's stream) business and is never gated here. Presentation is decided
+ * by `presentationOwner`: the engine's viewer on Glassly CFW glasses, the
+ * firmware on glasses with their own notification centre, else the host's
+ * card while its surface (Notify) runs. The four display settings drive
+ * firmware and viewer alike; PhoneNotificationsSync pushes them.
  */
 import {Platform} from "react-native"
 import CrustModule from "@glassly/crust"
+import type {PhoneNotificationEvent} from "@glassly/crust"
+import BluetoothSdk from "@glassly/bluetooth-sdk/internal"
+import type {GlassesNotificationStatus, NotificationUploadResult} from "@glassly/bluetooth-sdk"
 import {useSettingsStore, SETTINGS} from "../stores/settings"
-import {useGlassesStore} from "../stores/glasses"
-import {getKnownNotificationApps} from "../services/PhoneNotificationsSync"
+import {
+  captureAuthorization,
+  currentPresentationOwner,
+  installedNotificationApps,
+  nativeNotificationPopupSeconds,
+  nativeNotificationsSupported,
+  uploadPhoneNotification,
+} from "../services/PhoneNotificationsSync"
 
 export const phoneNotifications = {
   /**
@@ -22,17 +30,7 @@ export const phoneNotifications = {
    * Android: installed apps. iOS: seeded catalog ∪ glasses-reported apps
    * (icons unavailable — iOS offers no cross-app icon lookup).
    */
-  installedApps: (): Promise<Array<{packageName: string; appName: string; icon: string | null}>> => {
-    if (Platform.OS === "android") return CrustModule.getInstalledApps()
-    if (Platform.OS !== "ios") return Promise.resolve([])
-    return Promise.resolve(
-      getKnownNotificationApps().map((app) => ({
-        packageName: app.appId,
-        appName: app.displayName,
-        icon: null,
-      })),
-    )
-  },
+  installedApps: installedNotificationApps,
 
   /** The per-app blocklist (package/bundle ids whose notifications are NOT forwarded). */
   blocklist: (): string[] => {
@@ -54,10 +52,31 @@ export const phoneNotifications = {
     return CrustModule.openNotificationListenerSettings()
   },
 
+  /** Whether the glasses may read the phone's notifications; `not_needed` where the phone captures. */
+  captureAuthorization,
+
+  /** The connected model presents notifications in firmware. */
+  nativeNotifications: nativeNotificationsSupported,
+  /** Popup durations the firmware accepts (seconds, 0 = its default); empty when any value goes. */
+  popupSecondsOptions: nativeNotificationPopupSeconds,
+
   /**
-   * iOS: whether the connected glasses may read the phone's ANCS notification
-   * stream (the "Share System Notifications" Bluetooth consent). Always false
-   * on Android — Android capture is the notification listener instead.
+   * Who presents the next phone notification. Hosts pass whether their own
+   * surface runs and draw only when the answer is `host`.
    */
-  ancsAuthorized: (): boolean => Boolean(useGlassesStore.getState().ancsAuthorized),
+  presentationOwner: currentPresentationOwner,
+  /** Hand a captured notification to firmware that presents uploaded content (owner `firmware`, Android). */
+  uploadToGlasses: (event: PhoneNotificationEvent): Promise<void> => uploadPhoneNotification(event),
+
+  /** The driver's view of its notification surface. */
+  glassesStatus: (): Promise<GlassesNotificationStatus> => BluetoothSdk.getGlassesNotificationStatus(),
+  onGlassesStatus: (listener: (status: GlassesNotificationStatus) => void): (() => void) => {
+    const subscription = BluetoothSdk.addListener("glasses_notification_status", listener)
+    return () => subscription.remove()
+  },
+  /** Upload outcomes by id; content never travels back. */
+  onUploadResult: (listener: (result: NotificationUploadResult) => void): (() => void) => {
+    const subscription = BluetoothSdk.addListener("notification_upload_result", listener)
+    return () => subscription.remove()
+  },
 }

package/src/facades/settings.ts

@@ -1,7 +1,6 @@
 /**
  * settings facade — `engine.settings`: the typed keyed user-settings surface over
- * the engine-owned settings store. This is the (A) OEM contract; the raw store at
- * `engine.stores.settings` is the Glassly-app escape hatch.
+ * the engine-owned settings store. This is the OEM contract.
  *
  * Keys + their schema live in `SETTINGS` (theme, devMode, metric/twelveHourTime,
  * notifications, onboarding flags, …); `descriptor(key)`/`keys()` expose them.

package/src/generated/releaseMetadata.ts

@@ -11,10 +11,10 @@ export interface EngineReleaseMetadata {
 
 export const ENGINE_RELEASE_METADATA: Readonly<EngineReleaseMetadata> = Object.freeze({
   "schemaVersion": 1,
-  "familyBaseVersion": "0.1.0",
-  "releaseIdentity": "0.1.0-dev.99",
-  "releaseSetId": "glassly-0.1.0-dev.99",
-  "sourceCommit": "2aeea5db8ad4e84303faf84a92d025f0d1930ebf",
+  "familyBaseVersion": "0.2.8",
+  "releaseIdentity": "0.2.8-dev.445",
+  "releaseSetId": "glassly-0.2.8-dev.445",
+  "sourceCommit": "7e82d274d259dc795d05a3aef988d261d871106a",
   "otaManifestUrl": null,
   "otaManifestSha256": null
 })

package/src/index.ts

@@ -6,7 +6,7 @@
  * renders with (decision functions, sort/order helpers, policy constants,
  * capability tables, timers). Judgment rule: read models, commands, pure
  * functions and types belong here; anything that mutates runtime state or
- * exposes a raw store/service remains private to the GlasslyOS host.
+ * exposes a raw store/service remains private to the Glassly host.
  * See cloud-v2/docs/issues/020-glasses-status-boundary/integration-review.md §D.
  */
 
@@ -22,6 +22,8 @@ export type {
   EngineSubmitReportInput,
 } from "./facades/reports"
 export type {IslandNotification, IslandNotificationKind} from "./facades/notifications"
+export type {PresentationOwner} from "./services/notifications/notificationPolicy"
+export {DEFAULT_HIDDEN_PACKAGES} from "./stores/appVisibility"
 export type {WifiSearchResult} from "./facades/glassesWifi"
 export type {IdentitySnapshot} from "./services/PairingIdentity"
 export type {DisplayMirrorEvent} from "./facades/displayMirror"
@@ -41,14 +43,8 @@ export type {
 // (the hook layer, same precedent as the apps hooks below), and the pure
 // device-model key helpers. The raw useSettingsStore stays internal;
 // imperative access goes through engine.settings.
-export {SETTINGS, useSetting} from "./stores/settings"
-export {
-  isCustomDashboardEligible,
-  normalizeDashboardWidgets,
-  DASHBOARD_WIDGET_IDS,
-  type DashboardWidgetId,
-  type DashboardWidgetSetting,
-} from "./services/CustomDashboardModel"
+export {SETTINGS, useSetting, AI_DATA_CONSENT_VERSION} from "./stores/settings"
+export {isCfwFirmwareVersion, isCustomDashboardEligible} from "./services/pages/pageEligibility"
 
 // AI tier registry: the curated per-tier model dropdown options and helpers
 // the Settings > AI Models screen renders. Resolution itself runs inside
@@ -185,6 +181,7 @@ export {
   useInstall,
   useUninstall,
   useActiveApps,
+  useRunningPersistentApps,
   useActiveBackgroundApps,
   useBackgroundApps,
   useActiveForegroundApp,

package/src/react/MentraLiveOtaFlow.tsx

@@ -159,7 +159,7 @@ export function MentraLiveOtaFlow({
     <SafeAreaView style={[styles.safeArea, {backgroundColor: colors.background}, style]}>
       <View style={styles.header}>
         <View />
-        <GlasslyMark color={colors.primary} />
+        <BrandMark color={colors.primary} />
       </View>
       <OtaFlowContent
         allowDevSkip={allowDevSkip}
@@ -688,7 +688,7 @@ function FlowButton({
   )
 }
 
-function GlasslyMark({color}: {color: string}) {
+function BrandMark({color}: {color: string}) {
   return (
     <Svg width={33} height={18} viewBox="0 0 50 27" fill="none">
       <Rect y={14.8072} width={11.8457} height={11.8457} fill={color} />

package/src/react/useMentraLiveOta.ts

@@ -23,6 +23,8 @@ import type {OtaCheckCurrentGlassesResult} from "../services/OtaUpdateCheckServi
 import type {ReleaseChangelog} from "../facades/ota"
 import {useEngineSnapshot} from "./useEngineSnapshot"
 
+import {BgTimer} from "../utils/timers"
+
 export type MentraLiveOtaFlowPage = "check" | "progress"
 
 export type MentraLiveOtaScreen =
@@ -306,14 +308,14 @@ export function useMentraLiveOta(options: UseMentraLiveOtaOptions = {}): MentraL
 
     const myGeneration = ++performCheckGenerationRef.current
     let cancelled = false
-    let reconnectTimeout: ReturnType<typeof setTimeout> | null = null
+    let reconnectTimeout: number | null = null
 
     const performCheck = async () => {
       if (checkCompletedRef.current) return
       if (isOtaAutoChainActive() && !otaSnapshot.ready) {
         const remainingMs = otaAutoChainReconnectWaitRemaining()
         if (remainingMs === null) return
-        reconnectTimeout = setTimeout(() => {
+        reconnectTimeout = BgTimer.setTimeout(() => {
           if (cancelled || myGeneration !== performCheckGenerationRef.current || ota.snapshot().ready) return
           stopOtaAutoChain()
           checkCompletedRef.current = true
@@ -347,13 +349,15 @@ export function useMentraLiveOta(options: UseMentraLiveOtaOptions = {}): MentraL
         let result = await ota.checkForUpdates(checkOptions)
         if (cancelled || myGeneration !== performCheckGenerationRef.current) return
         if (!result.hasCheckCompleted && result.checkFailureReason === "network" && isOtaAutoChainActive()) {
-          await new Promise((resolve) => setTimeout(resolve, AUTO_CHAIN_NETWORK_RETRY_DELAY_MS))
+          await new Promise<void>((resolve) => BgTimer.setTimeout(resolve, AUTO_CHAIN_NETWORK_RETRY_DELAY_MS))
           if (cancelled || myGeneration !== performCheckGenerationRef.current) return
           result = await ota.checkForUpdates(checkOptions)
         }
         if (cancelled || myGeneration !== performCheckGenerationRef.current) return
         selectedCheckResultRef.current = result
-        await new Promise((resolve) => setTimeout(resolve, Math.max(0, MIN_DISPLAY_TIME_MS - (Date.now() - startTime))))
+        await new Promise<void>((resolve) =>
+          BgTimer.setTimeout(resolve, Math.max(0, MIN_DISPLAY_TIME_MS - (Date.now() - startTime))),
+        )
         if (cancelled || myGeneration !== performCheckGenerationRef.current) return
 
         if (result.skippedReason === "disconnected") {
@@ -416,7 +420,9 @@ export function useMentraLiveOta(options: UseMentraLiveOtaOptions = {}): MentraL
         setCheckState("no_update")
       } catch (error) {
         console.error("OTA check failed:", error)
-        await new Promise((resolve) => setTimeout(resolve, Math.max(0, MIN_DISPLAY_TIME_MS - (Date.now() - startTime))))
+        await new Promise<void>((resolve) =>
+          BgTimer.setTimeout(resolve, Math.max(0, MIN_DISPLAY_TIME_MS - (Date.now() - startTime))),
+        )
         if (cancelled || myGeneration !== performCheckGenerationRef.current) return
         stopOtaAutoChain()
         checkCompletedRef.current = true
@@ -428,7 +434,7 @@ export function useMentraLiveOta(options: UseMentraLiveOtaOptions = {}): MentraL
     void performCheck()
     return () => {
       cancelled = true
-      if (reconnectTimeout) clearTimeout(reconnectTimeout)
+      if (reconnectTimeout) BgTimer.clearTimeout(reconnectTimeout)
     }
   }, [
     checkGeneration,
@@ -500,13 +506,13 @@ export function useMentraLiveOta(options: UseMentraLiveOtaOptions = {}): MentraL
     ) {
       return
     }
-    const timeout = setTimeout(async () => {
+    const timeout = BgTimer.setTimeout(async () => {
       if (!isOtaAutoChainActive()) return
       autoChainAdvancedRef.current = true
       await ota.installSession.finish()
       returnToCheck()
     }, AUTO_CHAIN_COMPLETE_DELAY_MS)
-    return () => clearTimeout(timeout)
+    return () => BgTimer.clearTimeout(timeout)
   }, [installSnapshot.connected, installSnapshot.displayState, page, returnToCheck])
 
   const check = useCallback(() => {

package/src/runtime/config.ts

@@ -15,7 +15,7 @@ export interface CloudClientStatusSnapshot {
 }
 
 export interface MiniappAuthToken {
-  glasslyUserId: string
+  userId: string
   tenantId?: string
   token: string
   expiresAt: number

package/src/services/AppRegistry.ts

@@ -29,6 +29,7 @@ import {storage} from "../utils/storage/storage"
 import {printDirectory} from "../utils/storage/zip"
 import {checkManifestVersions} from "./manifestVersionGate"
 import {normalizeManifestActions} from "./manifestActions"
+import {normalizeManifestTags, normalizeManifestText} from "./manifestFields"
 import {miniappRunningRegistry} from "./MiniappRunningRegistry"
 
 export {normalizeManifestActions} from "./manifestActions"
@@ -40,6 +41,7 @@ const ALLOWED_PERMISSION_TYPES: ReadonlySet<AppPermissionType> = new Set<AppPerm
   "LOCATION",
   "BACKGROUND_LOCATION",
   "READ_NOTIFICATIONS",
+  "DISPLAY_MIRROR",
   "POST_NOTIFICATIONS",
   "API_KEYS",
 ])
@@ -141,7 +143,7 @@ interface InstalledLma {
 }
 
 export interface MiniappReleaseIdentity {
-  source: "direct_download" | "bundled_asset" | "preinstalled_registry" | "dev_snapshot"
+  source: "direct_download" | "bundled_asset" | "preinstalled_registry" | "dev_snapshot" | "store"
   releaseId?: string
   bundleSha256?: string
   channel?: string
@@ -750,12 +752,25 @@ class AppRegistry {
           permissions?: Array<string | {type: string; required?: boolean; description?: string}>
           hardwareRequirements?: Array<{type: string; level: string; description?: string}>
           type?: string
-          actions?: Array<{id?: unknown; description?: unknown; parameters?: unknown; outputSchema?: unknown; visibility?: unknown}>
+          persistent?: unknown
+          description?: unknown
+          tagline?: unknown
+          tags?: unknown
+          actions?: Array<{
+            id?: unknown
+            description?: unknown
+            parameters?: unknown
+            outputSchema?: unknown
+            visibility?: unknown
+          }>
         } | null
 
         const permissions = normalizeManifestPermissions(manifest?.permissions)
         const hardwareRequirements = buildHardwareRequirements(manifest?.hardwareRequirements, lmaInfo.packageName)
         const appType = normalizeManifestType(manifest?.type)
+        const description = normalizeManifestText(manifest?.description)
+        const tagline = normalizeManifestText(manifest?.tagline)
+        const tags = normalizeManifestTags(manifest?.tags)
 
         // Declared actions (for session.miniapps.list + invoke gating).
         const actions = normalizeManifestActions(manifest?.actions)
@@ -783,8 +798,12 @@ class AppRegistry {
           webviewUrl: "",
           logoUrl: versionInfo.logoUrl,
           type: appType,
+          persistent: getPersistentOverride(lmaInfo.packageName) ?? manifest?.persistent === true,
           permissions,
           hardwareRequirements,
+          ...(description ? {description} : {}),
+          ...(tagline ? {tagline} : {}),
+          ...(tags.length > 0 ? {tags} : {}),
           // Always project actions (even []) so the invoke gate can enforce
           // declared-action membership unconditionally — an app with no declared
           // actions must reject every invoke, not bypass the check.
@@ -927,6 +946,16 @@ export function getLocalAppRunningState(packageName: string): boolean {
   return false
 }
 
+/** The wearer's persistent choice for a miniapp, beside the `_hidden` flag; null when they never chose. */
+export function getPersistentOverride(packageName: string): boolean | null {
+  const res = storage.load<boolean>(`${packageName}_persistent`)
+  return res.is_ok() ? res.value : null
+}
+
+export function savePersistentOverride(packageName: string, status: boolean): void {
+  storage.save(`${packageName}_persistent`, status)
+}
+
 export function getLocalAppScreenshot(packageName: string): string | undefined {
   const key = `${packageName}_screenshot`
   const res = storage.load<string>(key)
@@ -974,7 +1003,13 @@ export interface DevAppRecord {
   permissions?: Array<string | {type: string; required?: boolean; description?: string}>
   hardwareRequirements?: Array<{type: string; level: string; description?: string}>
   /** Manifest-declared actions — so dev-sideloaded miniapps can be invoked too. */
-  actions?: Array<{id?: unknown; description?: unknown; parameters?: unknown; outputSchema?: unknown; visibility?: unknown}>
+  actions?: Array<{
+    id?: unknown
+    description?: unknown
+    parameters?: unknown
+    outputSchema?: unknown
+    visibility?: unknown
+  }>
   /** Legacy single-slot migration field. New records use the real packageName directly. */
   sourcePackageName?: string
   /**
@@ -988,7 +1023,6 @@ export interface DevAppRecord {
 const DEV_APPS_INDEX_KEY = "dev_apps_index"
 const DEV_APP_ICONS_DIR = "dev-miniapp-icons"
 
-
 function isPrivateLanHost(hostname: string): boolean {
   return (
     hostname === "localhost" ||
@@ -1044,7 +1078,10 @@ async function cacheDevAppIcon(packageName: string, iconUrl: string): Promise<st
       // Keep the decoder-friendly .png fallback; image loaders sniff content.
     }
 
-    const target = new File(dir, `${safePackageName}${extension}`)
+    // Image loaders cache file:// URIs too. Replacing bytes at the same path
+    // leaves the old decoded icon visible after rescanning the development QR.
+    const revision = `${Date.now()}-${Math.random().toString(36).slice(2)}`
+    const target = new File(dir, `${safePackageName}.${revision}${extension}`)
     const downloaded = await File.downloadFileAsync(iconUrl, target, {idempotent: true})
 
     // Only remove older extensions AFTER the replacement is safely on disk;
@@ -1174,8 +1211,7 @@ export async function registerDevApp(record: DevAppRecord): Promise<DevAppRecord
   // Relaunch paths (developer-URL screen, loadDevMiniapp) omit mdnsHost, so an
   // omitted field keeps whatever the QR scan stored instead of wiping the
   // `.local` failover host.
-  const mdnsHost =
-    record.mdnsHost !== undefined ? record.mdnsHost.trim() || undefined : readStoredMdnsHost(packageName)
+  const mdnsHost = record.mdnsHost !== undefined ? record.mdnsHost.trim() || undefined : readStoredMdnsHost(packageName)
   const devRecord: DevAppRecord = {
     ...record,
     packageName,

package/src/services/BlobStore.ts

@@ -15,7 +15,7 @@
  *   - `share` hands a stored file to the OS share sheet.
  *
  * Layout (mirrors SimpleStorage's scoping):
- *   bytes:    Paths.document/glassly_blobs/{userId}/{packageName}/{fileName}
+ *   bytes:    Paths.document/blobs/{userId}/{packageName}/{fileName}
  *   metadata: MMKV key  glassly_blobmeta_{userId}_{packageName}_{key}  → StoredBlobMeta JSON
  *
  * The on-disk file name is a generated id plus a mime-derived extension (iOS
@@ -39,7 +39,7 @@ const LOG_TAG = "LocalMiniappRuntime"
 
 /** Per-app blob quota: 1 GB. */
 export const BLOB_QUOTA_BYTES = 1024 * 1024 * 1024
-const ROOT_DIR_NAME = "glassly_blobs"
+const ROOT_DIR_NAME = "blobs"
 /** Cache dir root holding short-lived, properly-named copies handed to the OS share sheet (one subdir per stored blob). */
 const SHARE_DIR_NAME = "blob_share"
 /**
@@ -115,7 +115,7 @@ export class BlobStore {
    * Move blob *bytes* from a device-local user directory into the account's on
    * first sign-in. The matching metadata keys are moved by
    * migrateLocalMiniappData(); this half owns the filesystem because the path
-   * scheme (`glassly_blobs/{userId}/{pkg}/`) is private to BlobStore.
+   * scheme (`blobs/{userId}/{pkg}/`) is private to BlobStore.
    *
    * Per-package so an account directory that already exists wins for that
    * package only — mirroring the key-level "account data wins" rule instead of

package/src/services/CloudClientService.ts

@@ -14,7 +14,12 @@
  * this service.
  */
 import {CloudClient, setNativeHttp, setNativeUdp, setSecureStorage} from "@glassly/cloud-client/react-native"
-import type {PreinstalledMiniappRegistry, RuntimeSnapshot} from "@glassly/cloud-client/react-native"
+import type {
+  PreinstalledMiniappRegistry,
+  RuntimeSnapshot,
+  StoreCatalogResponse,
+  StoreListing,
+} from "@glassly/cloud-client/react-native"
 import type {SubjectTokenType} from "@glassly/cloud-client"
 import {Platform} from "react-native"
 import type {AudioSubscription, QuotaStatusPayload, TranscriptionData, TranslationData} from "@glassly/cloud-protocol"
@@ -206,8 +211,8 @@ async function syncCoreAccessTokenToBluetoothInternal(): Promise<string> {
   if (c !== client) {
     throw new Error("cloud client changed while syncing core token")
   }
-  adoptLocalNamespace(c.auth.identity.glasslyUserId)
-  localMiniappUserIdentity.remember(c.auth.identity.glasslyUserId)
+  adoptLocalNamespace(c.auth.identity.userId)
+  localMiniappUserIdentity.remember(c.auth.identity.userId)
   const result = await useSettingsStore.getState().setSetting(SETTINGS.core_token.key, token, false)
   if (result.is_error()) {
     throw result.error
@@ -380,7 +385,7 @@ function ensureAuthWatch(): void {
       try {
         cloudClientService.reconnect()
       } finally {
-        setTimeout(() => {
+        BgTimer.setTimeout(() => {
           reconnectPending = false
         }, 0)
       }
@@ -734,6 +739,28 @@ export const cloudClientService = {
     return c.core.miniapps.getRegistry()
   },
 
+  async getStoreCatalog(): Promise<StoreCatalogResponse> {
+    if (!client) this.init()
+    const c = client
+    if (!c?.core) throw new Error("cloud client core is unavailable")
+    return c.core.store.list()
+  },
+
+  async getStoreListing(packageName: string): Promise<StoreListing> {
+    if (!client) this.init()
+    const c = client
+    if (!c?.core) throw new Error("cloud client core is unavailable")
+    return c.core.store.get(packageName)
+  },
+
+  /** Bytes of a store icon or screenshot; these routes need the user Bearer. */
+  async fetchStoreAsset(url: string): Promise<Uint8Array> {
+    if (!client) this.init()
+    const c = client
+    if (!c?.core) throw new Error("cloud client core is unavailable")
+    return c.core.store.fetchAsset(url)
+  },
+
   /**
    * Resolve the stable Core-owned Glassly user id.
    *
@@ -743,7 +770,7 @@ export const cloudClientService = {
    * callers join the auth module's single-flight exchange/refresh instead of
    * falling back to an anonymous namespace.
    */
-  async resolveGlasslyUserId(): Promise<string> {
+  async resolveUserId(): Promise<string> {
     // With cloud off there is no client to exchange a token with and never will
     // be, so the online path below would throw on every storage call and take
     // offline-capable local miniapps down with it. Fall back to a device-local
@@ -759,14 +786,14 @@ export const cloudClientService = {
       if (c !== client) throw new Error("cloud client changed while resolving user identity")
       // Runs before resolve() persists the id, so the local namespace is adopted
       // whichever path reaches Core identity first (this or the token sync).
-      adoptLocalNamespace(c.auth.identity.glasslyUserId)
-      return c.auth.identity.glasslyUserId
+      adoptLocalNamespace(c.auth.identity.userId)
+      return c.auth.identity.userId
     })
   },
 
   /** Read the stable Glassly user id after async identity resolution. */
-  getGlasslyUserId(): string {
-    // Mirrors resolveGlasslyUserId(): with cloud off, minting is synchronous and
+  getUserId(): string {
+    // Mirrors resolveUserId(): with cloud off, minting is synchronous and
     // cannot fail, so sync callers (BlobStore) don't depend on an async resolve
     // having run first.
     if (cloudDisabled()) return localMiniappUserIdentity.resolveLocal()
@@ -786,7 +813,7 @@ export const cloudClientService = {
     const {token, expiresAt} = await c.auth.getMiniappToken(packageName, opts)
     const identity = c.auth.identity
     return {
-      glasslyUserId: identity.glasslyUserId,
+      userId: identity.userId,
       tenantId: identity.tenantId,
       token,
       expiresAt: normalizeExpiresAt(expiresAt),

package/src/services/DevServerBridge.ts

@@ -1,3 +1,5 @@
+import {BgTimer} from "../utils/timers"
+
 /**
  * DevServerBridge — phone-side WebSocket connection to a `glassly-miniapp dev`
  * sidecar running on a developer's laptop.
@@ -44,7 +46,7 @@ interface BridgeEntry {
   ringBuffer: BufferedLog[]
   ringBytes: number
   reloadHandler: ((packageName: string) => void) | null
-  reconnectTimer: ReturnType<typeof setTimeout> | null
+  reconnectTimer: number | null
 }
 
 class DevServerBridge {
@@ -116,7 +118,7 @@ class DevServerBridge {
    * side (`UIRouter.routeFromWebView` for `type:"log"` frames).
    *
    * `source` distinguishes the two halves so the CLI can prefix lines
-   * `[UI]` vs `[GlasslyJS]`. Logs are silently dropped when no bridge
+   * `[UI]` vs `[JSRuntime]`. Logs are silently dropped when no bridge
    * exists for the package (no `glassly-miniapp dev` running) and
    * buffered in the per-bridge ring while disconnected.
    */
@@ -155,7 +157,7 @@ class DevServerBridge {
         .split(":")[0]
         .split("/")[0]
     }
-    return `ws://${host}:${devPort}/__glassly_dev`
+    return `ws://${host}:${devPort}/__host_dev`
   }
 
   private openSocket(packageName: string, entry: BridgeEntry): void {
@@ -164,12 +166,12 @@ class DevServerBridge {
     const ws = new WebSocket(entry.url)
     entry.ws = ws
 
-    let helloTimer: ReturnType<typeof setTimeout> | null = null
+    let helloTimer: number | null = null
     let helloAcked = false
 
     const teardown = (reason: string): void => {
       if (helloTimer) {
-        clearTimeout(helloTimer)
+        BgTimer.clearTimeout(helloTimer)
         helloTimer = null
       }
       try {
@@ -195,7 +197,7 @@ class DevServerBridge {
         teardown("hello send failed")
         return
       }
-      helloTimer = setTimeout(() => {
+      helloTimer = BgTimer.setTimeout(() => {
         if (!helloAcked) {
           teardown("hello-ack timeout")
         }
@@ -220,7 +222,7 @@ class DevServerBridge {
         }
         helloAcked = true
         if (helloTimer) {
-          clearTimeout(helloTimer)
+          BgTimer.clearTimeout(helloTimer)
           helloTimer = null
         }
         entry.state = "connected"
@@ -257,9 +259,9 @@ class DevServerBridge {
 
   private scheduleReconnect(packageName: string, entry: BridgeEntry): void {
     if (entry.state === "closed") return
-    if (entry.reconnectTimer) clearTimeout(entry.reconnectTimer)
+    if (entry.reconnectTimer) BgTimer.clearTimeout(entry.reconnectTimer)
     const delay = this.backoffMs(entry.attempts)
-    entry.reconnectTimer = setTimeout(() => {
+    entry.reconnectTimer = BgTimer.setTimeout(() => {
       entry.reconnectTimer = null
       // Verify still alive and still in the bridge map.
       const current = this.entries.get(packageName)
@@ -316,7 +318,7 @@ class DevServerBridge {
 
   private teardownEntry(entry: BridgeEntry): void {
     if (entry.reconnectTimer) {
-      clearTimeout(entry.reconnectTimer)
+      BgTimer.clearTimeout(entry.reconnectTimer)
       entry.reconnectTimer = null
     }
     if (entry.ws) {