@glassly/engine 0.3.0-beta.489 → 0.3.0-dev.462

package/build/utils/display/scene/anchor.d.ts

@@ -2,7 +2,8 @@
  * Anchor resolution — turn corner-anchored boxes into plain top-left boxes
  * against the device's real canvas. Runs in emitScene BEFORE the canPosition
  * branch so both processScene (clamping) and degradeScene (reading order)
- * only ever see concrete coordinates.
+ * only ever see concrete coordinates. Spec:
+ * notes/superpowers/specs/2026-08-10-anchored-render-boxes.md
  */
 import type { SceneElementInput } from "./types";
 /**

package/build/utils/display/scene/anchor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anchor.d.ts","sourceRoot":"","sources":["../../../../src/utils/display/scene/anchor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAA0B,iBAAiB,EAAC,MAAM,SAAS,CAAA;AAcvE;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,SAAS,iBAAiB,EAAE,EACnC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,iBAAiB,EAAE,CAKrB"}
+{"version":3,"file":"anchor.d.ts","sourceRoot":"","sources":["../../../../src/utils/display/scene/anchor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAA0B,iBAAiB,EAAC,MAAM,SAAS,CAAA;AAcvE;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,SAAS,iBAAiB,EAAE,EACnC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,iBAAiB,EAAE,CAKrB"}

package/build/utils/display/scene/anchor.js

@@ -2,7 +2,8 @@
  * Anchor resolution — turn corner-anchored boxes into plain top-left boxes
  * against the device's real canvas. Runs in emitScene BEFORE the canPosition
  * branch so both processScene (clamping) and degradeScene (reading order)
- * only ever see concrete coordinates.
+ * only ever see concrete coordinates. Spec:
+ * notes/superpowers/specs/2026-08-10-anchored-render-boxes.md
  */
 function resolveBox(box, width, height) {
     const { anchor, x, y, w, h } = box;

package/build/utils/display/scene/anchor.js.map

@@ -1 +1 @@
-{"version":3,"file":"anchor.js","sourceRoot":"","sources":["../../../../src/utils/display/scene/anchor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,SAAS,UAAU,CAAC,GAAkB,EAAE,KAAa,EAAE,MAAc;IACnE,MAAM,EAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAC,GAAG,GAAG,CAAA;IAChC,MAAM,KAAK,GAAG,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,cAAc,CAAA;IACjE,MAAM,MAAM,GAAG,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,cAAc,CAAA;IACpE,OAAO;QACL,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAmC,EACnC,KAAa,EACb,MAAc;IAEd,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACtB,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM;YAAE,OAAO,EAAE,CAAA;QACzE,OAAO,EAAC,GAAG,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,EAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["/**\n * Anchor resolution — turn corner-anchored boxes into plain top-left boxes\n * against the device's real canvas. Runs in emitScene BEFORE the canPosition\n * branch so both processScene (clamping) and degradeScene (reading order)\n * only ever see concrete coordinates.\n */\n\nimport type {SceneBox, SceneBoxInput, SceneElementInput} from \"./types\"\n\nfunction resolveBox(box: SceneBoxInput, width: number, height: number): SceneBox {\n  const {anchor, x, y, w, h} = box\n  const right = anchor === \"top-right\" || anchor === \"bottom-right\"\n  const bottom = anchor === \"bottom-left\" || anchor === \"bottom-right\"\n  return {\n    x: right ? width - x - w : x,\n    y: bottom ? height - y - h : y,\n    w,\n    h,\n  }\n}\n\n/**\n * Resolve every anchored box in a scene to top-left coordinates on a W×H\n * canvas. Unanchored elements pass through unchanged (same reference — no\n * copy churn on the common path), as do malformed ones so processScene's\n * validation still sees and reports them. Non-finite insets survive the\n * subtraction as non-finite and are dropped by the same validation.\n */\nexport function resolveAnchors(\n  input: readonly SceneElementInput[],\n  width: number,\n  height: number,\n): SceneElementInput[] {\n  return input.map((el) => {\n    if (!el || typeof el !== \"object\" || !el.box || !el.box.anchor) return el\n    return {...el, box: resolveBox(el.box, width, height)}\n  })\n}\n"]}
+{"version":3,"file":"anchor.js","sourceRoot":"","sources":["../../../../src/utils/display/scene/anchor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,SAAS,UAAU,CAAC,GAAkB,EAAE,KAAa,EAAE,MAAc;IACnE,MAAM,EAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAC,GAAG,GAAG,CAAA;IAChC,MAAM,KAAK,GAAG,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,cAAc,CAAA;IACjE,MAAM,MAAM,GAAG,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,cAAc,CAAA;IACpE,OAAO;QACL,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAmC,EACnC,KAAa,EACb,MAAc;IAEd,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACtB,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM;YAAE,OAAO,EAAE,CAAA;QACzE,OAAO,EAAC,GAAG,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,EAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["/**\n * Anchor resolution — turn corner-anchored boxes into plain top-left boxes\n * against the device's real canvas. Runs in emitScene BEFORE the canPosition\n * branch so both processScene (clamping) and degradeScene (reading order)\n * only ever see concrete coordinates. Spec:\n * notes/superpowers/specs/2026-08-10-anchored-render-boxes.md\n */\n\nimport type {SceneBox, SceneBoxInput, SceneElementInput} from \"./types\"\n\nfunction resolveBox(box: SceneBoxInput, width: number, height: number): SceneBox {\n  const {anchor, x, y, w, h} = box\n  const right = anchor === \"top-right\" || anchor === \"bottom-right\"\n  const bottom = anchor === \"bottom-left\" || anchor === \"bottom-right\"\n  return {\n    x: right ? width - x - w : x,\n    y: bottom ? height - y - h : y,\n    w,\n    h,\n  }\n}\n\n/**\n * Resolve every anchored box in a scene to top-left coordinates on a W×H\n * canvas. Unanchored elements pass through unchanged (same reference — no\n * copy churn on the common path), as do malformed ones so processScene's\n * validation still sees and reports them. Non-finite insets survive the\n * subtraction as non-finite and are dropped by the same validation.\n */\nexport function resolveAnchors(\n  input: readonly SceneElementInput[],\n  width: number,\n  height: number,\n): SceneElementInput[] {\n  return input.map((el) => {\n    if (!el || typeof el !== \"object\" || !el.box || !el.box.anchor) return el\n    return {...el, box: resolveBox(el.box, width, height)}\n  })\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@glassly/engine",
-  "version": "0.3.0-beta.489",
+  "version": "0.3.0-dev.462",
   "description": "Glassly Engine — miniapp registry, WebView bridge, and miniapp store",
   "main": "build/index.js",
   "react-native": "src/index.ts",
@@ -97,17 +97,17 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@glassly/bluetooth-sdk": "0.3.0-beta.489",
-    "@glassly/cloud-client": "0.3.0-beta.489",
-    "@glassly/cloud-protocol": "0.3.0-beta.489",
-    "@glassly/crust": "0.3.0-beta.489",
-    "@glassly/miniapp": "0.3.0-beta.489",
+    "@glassly/bluetooth-sdk": "0.3.0-dev.462",
+    "@glassly/cloud-client": "0.3.0-dev.462",
+    "@glassly/cloud-protocol": "0.3.0-dev.462",
+    "@glassly/crust": "0.3.0-dev.462",
+    "@glassly/miniapp": "0.3.0-dev.462",
     "buffer": "^6.0.3",
     "events": "^3.3.0",
     "react-native-marked": "8.1.1",
     "semver": "^7.7.4",
     "typesafe-ts": "^1.7.1",
-    "@glassly/llm-providers": "0.3.0-beta.489"
+    "@glassly/llm-providers": "0.3.0-dev.462"
   },
   "devDependencies": {
     "@glassly/llm-providers": "workspace:*",

package/src/facades/miniapps.ts

@@ -10,7 +10,6 @@
  */
 import {useAppStatusStore} from "../stores/apps"
 import localMiniappRuntime from "../services/LocalMiniappRuntime"
-import {activeDashboardAmong} from "../services/pages/activeDashboard"
 import type {ClientApp} from "../types"
 
 type AppsState = ReturnType<typeof useAppStatusStore.getState>
@@ -62,12 +61,4 @@ export const miniapps = {
     useAppStatusStore.getState().setHiddenStatus(...args),
   /** Mark a miniapp Always On (starts at launch, stops only from the switcher pill), persisted for the next boot. */
   setAlwaysOn: (...args: Parameters<AppsState["setAlwaysOn"]>) => useAppStatusStore.getState().setAlwaysOn(...args),
-
-  /** Installed miniapps that can hold the dashboard role (manifest type "dashboard"). */
-  dashboards: (): ClientApp[] => useAppStatusStore.getState().apps.filter((app) => app.type === "dashboard"),
-  /** The package that holds the dashboard role, or null when no dashboard is installed. */
-  activeDashboard: (): string | null => activeDashboardAmong(useAppStatusStore.getState().apps),
-  /** Give the dashboard role to an installed dashboard; the previous holder stops and the new one starts. */
-  setActiveDashboard: (...args: Parameters<AppsState["setActiveDashboard"]>) =>
-    useAppStatusStore.getState().setActiveDashboard(...args),
 }

package/src/generated/releaseMetadata.ts

@@ -12,9 +12,9 @@ export interface EngineReleaseMetadata {
 export const ENGINE_RELEASE_METADATA: Readonly<EngineReleaseMetadata> = Object.freeze({
   "schemaVersion": 1,
   "familyBaseVersion": "0.3.0",
-  "releaseIdentity": "0.3.0-beta.489",
-  "releaseSetId": "glassly-0.3.0-beta.489",
-  "sourceCommit": "fe72aed649a9cfa4186f114cf47766bffad566b6",
+  "releaseIdentity": "0.3.0-dev.462",
+  "releaseSetId": "glassly-0.3.0-dev.462",
+  "sourceCommit": "6d9eaccddb17582a14925742c5da672feeca3cee",
   "otaManifestUrl": null,
   "otaManifestSha256": null
 })

package/src/index.ts

@@ -23,7 +23,7 @@ export type {
 } from "./facades/reports"
 export type {IslandNotification, IslandNotificationKind} from "./facades/notifications"
 export type {PresentationOwner} from "./services/notifications/notificationPolicy"
-export {DEFAULT_HIDDEN_PACKAGES, isGatedByDevTools, isSystemMiniapp} from "./stores/appVisibility"
+export {DEFAULT_HIDDEN_PACKAGES, isGatedByDevTools} from "./stores/appVisibility"
 export type {WifiSearchResult} from "./facades/glassesWifi"
 export type {IdentitySnapshot} from "./services/PairingIdentity"
 export type {DisplayMirrorEvent} from "./facades/displayMirror"
@@ -182,8 +182,6 @@ export {
   useUninstall,
   useActiveApps,
   useRunningAlwaysOnApps,
-  useDashboards,
-  useActiveDashboard,
   useActiveBackgroundApps,
   useBackgroundApps,
   useActiveForegroundApp,

package/src/services/AppRegistry.ts

@@ -76,7 +76,7 @@ export function normalizeManifestPermissions(
 }
 
 function normalizeManifestType(raw: unknown): AppletType {
-  return raw === "background" || raw === "dashboard" || raw === "standard" ? raw : "standard"
+  return raw === "background" || raw === "system_dashboard" || raw === "standard" ? raw : "standard"
 }
 
 /**

package/src/services/LocalDisplayManager.ts

@@ -10,7 +10,8 @@
  *   - core-app vs background-app arbitration with a background lock
  *
  * Scope is deliberately local-only. Cloud-originated displays are untouched
- * and may race with local displays during dev; that's acceptable.
+ * and may race with local displays during dev; that's acceptable per plan
+ * (notes/archive/agents/local-display-manager-plan.md).
  *
  * Display pacing is NOT done here. A JS-side ~300ms throttle used to live in
  * this class, but JS timers (and therefore the throttle's trailing flush) do

package/src/services/LocalMiniappRuntime.ts

@@ -77,19 +77,7 @@ import {
   validateSettingsSet,
   type DerivedSettingsKey,
 } from "./settingsBridge"
-import {mayUsePermission} from "./miniappPermissions"
-import {activeDashboardAmong} from "./pages/activeDashboard"
-import {
-  activeDashboard,
-  addDashboardApp,
-  displayViewsFor,
-  isDashboardApp,
-  isOverlayApp,
-  onOverlayAppsChange,
-  removeDashboardApp,
-  setActiveDashboard,
-  setOverlayViewer,
-} from "./pages/overlayApps"
+import {addOverlayApp, displayViewsFor, isOverlayApp, removeOverlayApp, setOverlayViewer} from "./pages/overlayApps"
 import {pagesEligible} from "./pages/pageEligibility"
 import nativeNavigationService from "./NativeNavigationService"
 import type {DisplayPayload} from "./LocalDisplayManager"
@@ -132,7 +120,6 @@ import ttsModelManager from "./TTSModelManager"
 import {NavigationHandlers} from "./NavigationHandlers"
 import type {ClientApp} from "../types/applet"
 import {useAppStatusStore} from "../stores/apps"
-import {isSystemMiniapp} from "../stores/appVisibility"
 import {getDevAppAttestation, getDevAppSourcePackage} from "./AppRegistry"
 import {resolveForegroundLocationPermission} from "./ForegroundLocationPermission"
 import {advanceMiniappPingLiveness} from "./MiniappLiveness"
@@ -266,6 +253,9 @@ const SYSTEM_MINIAPP_PACKAGES = new Set([
   "com.glassly.ai",
   "com.glassly.feedback",
   "com.glassly.miniappdev",
+  // The dashboard: the settings bridge and the miniapp list/start/stop are its side menu and settings
+  // page, and the notification app list is its notification settings' per-app filter.
+  "com.glassly.dashboard",
 ])
 const PING_INTERVAL_MS = 5_000
 // Min gap between "transcription limit reached" notices on the glasses. A
@@ -352,8 +342,6 @@ const PERMISSION_TYPE_TO_CANONICAL: Record<string, string> = {
   MEMORY: "memory",
   AI: "ai",
   SPEAKERS: "speakers",
-  MANAGE_MINIAPPS: "manageMiniapps",
-  PLATFORM_SETTINGS: "platformSettings",
 }
 
 /**
@@ -468,8 +456,6 @@ const ALL_CANONICAL_PERMISSIONS = [
   "ai",
   "speakers",
   "displayMirror",
-  "manageMiniapps",
-  "platformSettings",
 ] as const
 
 /**
@@ -1177,11 +1163,11 @@ class LocalMiniappRuntime {
     // Drop this app's transcription hints; the cloud subscription rebuild
     // below (via replaceStreamSubscribers) re-derives the hint union without it.
     this.transcriptionHintsByApp.delete(packageName)
-    // A dashboard is going: release the slot if it holds it, and drop the
+    // An overlay app is going: release the slot if it holds it, and drop the
     // dashboard view from its capabilities record.
-    if (isDashboardApp(packageName)) {
+    if (isOverlayApp(packageName)) {
       overlayPages.remove(packageName)
-      removeDashboardApp(packageName)
+      removeOverlayApp(packageName)
     }
     // Its gesture claims go back to whoever claimed them before.
     this.applyGestureClaimChanges(dropGestureClaims(this.gestureClaims, packageName))
@@ -1565,11 +1551,7 @@ class LocalMiniappRuntime {
         this.handleOpenUrl(packageName, payload)
         break
       case MiniappRequestType.DISPLAY_DIAGNOSTICS: {
-        // The records are parsed out of the G2PERF lines, which the SDK only logs while g2_perf_logs is on.
-        const settings = useSettingsStore.getState()
-        const enabled =
-          settings.getSetting(SETTINGS.debug_console.key) === true &&
-          settings.getSetting(SETTINGS.g2_perf_logs.key) === true
+        const enabled = useSettingsStore.getState().getSetting(SETTINGS.debug_console.key) === true
         this.sendResult(packageName, requestId, true, {
           enabled,
           generatedAt: Date.now(),
@@ -1766,12 +1748,9 @@ class LocalMiniappRuntime {
     existing.lastPongAt = Date.now()
     existing.unansweredPingRounds = 0
 
-    // The dashboard that holds the role may take the overlay slot: its
-    // capabilities carry the dashboard view from the start.
-    if (existing.installedManifest?.type === "dashboard") {
-      addDashboardApp(packageName)
-      this.syncActiveDashboard()
-    }
+    // A system_dashboard app may take the overlay slot: its capabilities
+    // carry the dashboard view from the start.
+    if (existing.installedManifest?.type === "system_dashboard") addOverlayApp(packageName)
     const capabilities = this.capabilitiesFor(packageName)
 
     // Build the declared-permission record for the SDK's session.permissions
@@ -2142,26 +2121,24 @@ class LocalMiniappRuntime {
       const required = permissionForStream(stream)
       if (required && !declaredTypes.has(required)) {
         logPermissionNotDeclared(packageName, required, `to subscribe to "${stream}"`, `{"type": "${required}"}`)
-        const error = {
+        this.sendResult(packageName, requestId, false, undefined, {
           code: MiniappErrorCode.PERMISSION_NOT_DECLARED,
           message: `${required} permission not declared in miniapp.json (required for "${stream}"). Add {"type": "${required}"} to the "permissions" array.`,
           // Extra context fields read by the SDK so authors that subscribe
           // to session.on("error") can format their own messages.
           permission: required,
           subscription: stream,
-        }
-        // The SDK sends SUBSCRIBE without a requestId, so push the rejection.
-        if (requestId) this.sendResult(packageName, requestId, false, undefined, error)
-        else this.sendToMiniapp(packageName, {type: MiniappResponseType.ERROR, ...error})
+        })
         return
       }
     }
 
-    // The settings stream carries the wearer's settings.
-    if (
-      streams.includes(MiniappStreamType.SETTINGS_CHANGED) &&
-      !this.requirePermission(packageName, requestId, "PLATFORM_SETTINGS", "to subscribe to the settings stream")
-    ) {
+    // The settings stream carries the wearer's settings: system apps only.
+    if (streams.includes(MiniappStreamType.SETTINGS_CHANGED) && !this.isSystemPackage(packageName)) {
+      this.sendResult(packageName, requestId, false, undefined, {
+        code: MiniappErrorCode.NOT_PERMITTED,
+        message: "The settings stream is restricted to system apps",
+      })
       return
     }
 
@@ -2175,9 +2152,8 @@ class LocalMiniappRuntime {
       [...cloudTranscriptionStreams].filter((stream) => app.subscriptions.has(stream)),
     )
     this.replaceStreamSubscribers(packageName, previousSubscriptions, app.subscriptions)
-    // The overlay app presents phone notifications on the glasses while it
-    // listens to them; recorded for every dashboard so the role can move.
-    if (isDashboardApp(packageName)) {
+    // An overlay app that listens to phone notifications presents them on the glasses.
+    if (isOverlayApp(packageName)) {
       setOverlayViewer(packageName, app.subscriptions.has(MiniappStreamType.PHONE_NOTIFICATION))
     }
 
@@ -2409,13 +2385,13 @@ class LocalMiniappRuntime {
         })
         return
       }
-      // The dashboard view is the overlay app's alone; anyone else's frame
+      // The dashboard view is the overlay apps' alone; anyone else's frame
       // is dropped, reported rather than silently lost.
       if (payload.view === "dashboard" && !isOverlayApp(packageName)) {
         this.sendResult(packageName, requestId, true, {
           status: "displayed",
           presented: false,
-          reason: "not the active dashboard",
+          reason: "not the dashboard app",
         })
         return
       }
@@ -2439,11 +2415,10 @@ class LocalMiniappRuntime {
   }
 
   /**
-   * display.showView: the active dashboard takes or releases the overlay
-   * slot. Refused (NOT_PERMITTED) for an app that is not a dashboard;
-   * "unsupported" for a dashboard without the role and while the glasses
-   * cannot show the dashboard view. Idempotent either way; the slot's state
-   * comes back to the app as a display_view change.
+   * display.showView: the designated dashboard app takes or releases the
+   * overlay slot. Refused (NOT_PERMITTED) for any other app; "unsupported"
+   * while the glasses cannot show the dashboard view. Idempotent either way;
+   * the slot's state comes back to the app as a display_view change.
    */
   private handleShowView(packageName: string, payload: Record<string, unknown>, requestId?: string): void {
     if (!this.connectedApps.has(packageName)) {
@@ -2458,17 +2433,13 @@ class LocalMiniappRuntime {
       })
       return
     }
-    if (!isDashboardApp(packageName)) {
+    if (!isOverlayApp(packageName)) {
       this.sendResult(packageName, requestId, false, undefined, {
         code: MiniappErrorCode.NOT_PERMITTED,
-        message: 'The dashboard view belongs to miniapps of type "dashboard"',
+        message: "The dashboard view belongs to system_dashboard apps",
       })
       return
     }
-    if (!isOverlayApp(packageName)) {
-      this.sendResult(packageName, requestId, true, {status: "unsupported", reason: "not the active dashboard"})
-      return
-    }
     if (view === "main") {
       overlayPages.hide(packageName)
       this.sendResult(packageName, requestId, true, {status: "shown"})
@@ -2492,36 +2463,17 @@ class LocalMiniappRuntime {
     )
   }
 
-  /**
-   * Reject the request with PERMISSION_NOT_DECLARED unless the caller's
-   * manifest declares `permission`. System apps pass without declaring it.
-   */
-  private requirePermission(
-    packageName: string,
-    requestId: string | undefined,
-    permission: string,
-    context: string,
-  ): boolean {
-    const caller = {
-      system: this.isSystemPackage(packageName),
-      permissions: this.connectedApps.get(packageName)?.installedManifest?.permissions,
-    }
-    if (mayUsePermission(caller, permission)) return true
-    logPermissionNotDeclared(packageName, permission, context, `{"type": "${permission}"}`)
-    this.sendResult(packageName, requestId, false, undefined, {
-      code: MiniappErrorCode.PERMISSION_NOT_DECLARED,
-      message: `${permission} permission not declared in miniapp.json. Add {"type": "${permission}"} to the "permissions" array.`,
-      permission,
-    })
-    return false
-  }
-
   // ---------------------------------------------------------------------------
-  // Settings bridge (session.settings) — PLATFORM_SETTINGS permission
+  // Settings bridge (session.settings) — system apps only
   // ---------------------------------------------------------------------------
 
-  private requireSettingsPermission(packageName: string, requestId: string | undefined): boolean {
-    return this.requirePermission(packageName, requestId, "PLATFORM_SETTINGS", "to use the settings bridge")
+  private requireSystemForSettings(packageName: string, requestId: string | undefined): boolean {
+    if (this.isSystemPackage(packageName)) return true
+    this.sendResult(packageName, requestId, false, undefined, {
+      code: MiniappErrorCode.NOT_PERMITTED,
+      message: "The settings bridge is restricted to system apps",
+    })
+    return false
   }
 
   /** A bridged key's current value: the store's, or the engine's for a derived key. */
@@ -2538,13 +2490,11 @@ class LocalMiniappRuntime {
         return localDisplayManager.foregroundAppOnScreen()
       case "ring_battery":
         return ringBatteryFrom(useGlassesStore.getState())
-      case "active_dashboard":
-        return activeDashboard()
     }
   }
 
   private handleSettingsGet(packageName: string, payload: Record<string, unknown>, requestId?: string): void {
-    if (!this.requireSettingsPermission(packageName, requestId)) return
+    if (!this.requireSystemForSettings(packageName, requestId)) return
     const values: Record<string, unknown> = {}
     for (const key of selectSettingsBridgeKeys(payload.keys)) values[key] = this.settingsBridgeValue(key)
     this.sendResult(packageName, requestId, true, {values})
@@ -2555,7 +2505,7 @@ class LocalMiniappRuntime {
     payload: Record<string, unknown>,
     requestId?: string,
   ): Promise<void> {
-    if (!this.requireSettingsPermission(packageName, requestId)) return
+    if (!this.requireSystemForSettings(packageName, requestId)) return
     const validated = validateSettingsSet(payload)
     if (!validated.ok) {
       this.sendResult(packageName, requestId, false, undefined, {code: validated.code, message: validated.message})
@@ -2575,11 +2525,7 @@ class LocalMiniappRuntime {
   }
 
   private async handleNotificationAppsList(packageName: string, requestId?: string): Promise<void> {
-    if (
-      !this.requirePermission(packageName, requestId, "READ_NOTIFICATIONS", "to list the apps that post notifications")
-    ) {
-      return
-    }
+    if (!this.requireSystemForSettings(packageName, requestId)) return
     try {
       this.sendResult(packageName, requestId, true, await installedNotificationApps())
     } catch (err) {
@@ -2593,9 +2539,8 @@ class LocalMiniappRuntime {
   /**
    * Push bridged settings as they change: stored keys from the store, the
    * derived keys whenever their inputs move (phone activity, the display,
-   * the apps store, the ring, the dashboard role). Subscribers declared
-   * PLATFORM_SETTINGS (gated at SUBSCRIBE), so this is a no-op fan-out for
-   * everyone else.
+   * the apps store, the ring). Subscribers are system apps only (gated at
+   * SUBSCRIBE), so this is a no-op fan-out for everyone else.
    */
   private ensureSettingsBridgeWired(): void {
     if (this.settingsBridgeWired) return
@@ -2631,7 +2576,6 @@ class LocalMiniappRuntime {
     onAppForegroundChange((foregrounded) => this.broadcastVisibility(foregrounded))
     localDisplayManager.onActiveDisplayChange(pushDerived)
     useAppStatusStore.subscribe(pushDerived)
-    onOverlayAppsChange(pushDerived)
     useGlassesStore.subscribe(
       (s) => `${s.ringConnected}:${s.ringBatteryLevel}:${s.controllerConnected}:${s.controllerBatteryLevel}`,
       pushDerived,
@@ -5252,31 +5196,6 @@ class LocalMiniappRuntime {
     useSettingsStore.subscribe((s) => s.getSetting(SETTINGS.cfw_native_navigation.key), broadcast)
     // The dashboard master switch flips the dashboard view.
     useSettingsStore.subscribe((s) => s.getSetting(SETTINGS.custom_dashboard_enabled.key), broadcast)
-    // The wearer's choice and the installed dashboards decide who holds the role.
-    const syncRole = () => this.syncActiveDashboard()
-    useSettingsStore.subscribe((s) => s.getSetting(SETTINGS.active_dashboard.key), syncRole)
-    useAppStatusStore.subscribe(syncRole)
-    syncRole()
-  }
-
-  /**
-   * Recompute who holds the dashboard role (ADR-0009). The previous holder
-   * gives up the slot first, so it hears the view change while it is still
-   * the overlay app; then every app sees its views again.
-   */
-  private syncActiveDashboard(): void {
-    const candidates: Array<{packageName: string; type?: string}> = [...useAppStatusStore.getState().apps]
-    // A dashboard can connect at launch before the apps store has listed it.
-    for (const [packageName, app] of this.connectedApps) {
-      if (candidates.some((candidate) => candidate.packageName === packageName)) continue
-      candidates.push({packageName, type: app.installedManifest?.type})
-    }
-    const next = activeDashboardAmong(candidates)
-    const previous = activeDashboard()
-    if (next === previous) return
-    if (previous !== null) overlayPages.hide(previous, "replaced")
-    setActiveDashboard(next)
-    this.broadcastCapabilities()
   }
 
   /** Capabilities as `packageName` sees them: the model profile plus the views this app may draw. */
@@ -5749,20 +5668,18 @@ class LocalMiniappRuntime {
     }
   }
 
-  /** Reject the request unless the caller may list, start and stop other miniapps (MANAGE_MINIAPPS). */
-  private requireMiniappsPermission(
+  /** Reject the request with NOT_PERMITTED unless the caller is a system app. */
+  private requireSystemCaller(
     packageName: string,
     requestId: string | undefined,
     op: InteropAuditEvent["op"],
     target?: string,
   ): boolean {
-    if (this.requirePermission(packageName, requestId, "MANAGE_MINIAPPS", `to ${op} miniapps`)) return true
-    this.auditInterop({
-      caller: packageName,
-      op,
-      target,
-      ok: false,
-      errorCode: MiniappErrorCode.PERMISSION_NOT_DECLARED,
+    if (this.isSystemPackage(packageName)) return true
+    this.auditInterop({caller: packageName, op, target, ok: false, errorCode: MiniappErrorCode.NOT_PERMITTED})
+    this.sendResult(packageName, requestId, false, undefined, {
+      code: MiniappErrorCode.NOT_PERMITTED,
+      message: "Inter-miniapp APIs are restricted to system apps",
     })
     return false
   }
@@ -5781,14 +5698,13 @@ class LocalMiniappRuntime {
       version: app.version ?? "",
       running: app.running,
       hidden: app.hidden === true,
-      system: isSystemMiniapp(app),
       compatibility,
       actions: app.actions ?? [],
     }
   }
 
   private handleMiniappsList(packageName: string, payload: Record<string, unknown>, requestId?: string): void {
-    if (!this.requireMiniappsPermission(packageName, requestId, "list")) return
+    if (!this.requireSystemCaller(packageName, requestId, "list")) return
     const includeIncompatible = payload.includeIncompatible === true
     const infos = this.interopApps()
       .filter(
@@ -5809,7 +5725,7 @@ class LocalMiniappRuntime {
     requestId?: string,
   ): Promise<void> {
     const target = payload.packageName as string | undefined
-    if (!this.requireMiniappsPermission(packageName, requestId, "start", target)) return
+    if (!this.requireSystemCaller(packageName, requestId, "start", target)) return
     const app = target ? this.interopApps().find((a) => a.packageName === target) : undefined
     if (!target || !app) {
       this.sendResult(packageName, requestId, false, undefined, {
@@ -5901,7 +5817,7 @@ class LocalMiniappRuntime {
     requestId?: string,
   ): Promise<void> {
     const target = payload.packageName as string | undefined
-    if (!this.requireMiniappsPermission(packageName, requestId, "stop", target)) return
+    if (!this.requireSystemCaller(packageName, requestId, "stop", target)) return
     if (!target) {
       this.sendResult(packageName, requestId, false, undefined, {
         code: MiniappErrorCode.APP_NOT_FOUND,

package/src/services/MiniappLauncher.ts

@@ -31,7 +31,6 @@ import {storage} from "../utils/storage/storage"
 import appRegistry, {getLocalAppRunningState, saveLocalAppRunningState} from "./AppRegistry"
 import devServerBridge from "./DevServerBridge"
 import localMiniappRuntime, {type InstalledMiniappManifest} from "./LocalMiniappRuntime"
-import {activeDashboardAmong} from "./pages/activeDashboard"
 import type {MiniappLaunchSource} from "@glassly/miniapp"
 import type {JSRouter} from "./JSRouter"
 
@@ -307,21 +306,17 @@ class MiniappLauncher {
    *
    * Always On apps (the dashboard) start whether or not they were running
    * when the app was last killed, and get a switcher card like any other app.
-   * A dashboard that does not hold the role (ADR-0009) is not started by its
-   * Always On flag.
    * Both restore paths skip apps missing required OS permissions without
    * prompting or clearing their saved running/Always On choice.
    */
   async autostartLocalMiniapps(): Promise<void> {
     const apps = await appRegistry.getInstalledMiniapps()
-    const activeDashboard = activeDashboardAmong(apps)
     for (const app of apps) {
       // Only phone-hosted miniapps have a JSContext to re-spawn. Offline
       // built-ins (`local:false, offline:true`) restore their native running
       // state elsewhere and have no bundle to launch.
       if (!app.local) continue
-      const alwaysOn = app.alwaysOn && (app.type !== "dashboard" || app.packageName === activeDashboard)
-      if (!alwaysOn && !getLocalAppRunningState(app.packageName)) continue
+      if (!app.alwaysOn && !getLocalAppRunningState(app.packageName)) continue
       if (this.isRunning(app.packageName)) continue
       try {
         const missing = await permissions.missingRequired(app.permissions ?? [])

package/src/services/pages/OverlayPages.ts

@@ -1,12 +1,11 @@
 /**
- * The overlay app's page (ADR-0006, ADR-0009): one Page per dashboard that
- * has taken the slot, the only Page implementation the page host shows. The
- * engine keeps the slot and the eligibility watch; a page only relays:
- * holding the slot is reported to its app as a view change, and the app's
- * frames reach the slot through `renderOverlay` under its package name. Only
- * the dashboard that holds the role may show; when the role moves, the
- * previous holder hears it was replaced. The runtime supplies the sink that
- * delivers to apps, so this module never imports it.
+ * The overlay apps' pages (ADR-0006): one Page per app that has taken the
+ * slot, the only Page implementation the page host shows. The engine keeps
+ * the slot and the eligibility watch; a page only relays: holding the slot
+ * is reported to its app as a view change, and the app's frames reach the
+ * slot through `renderOverlay` under its package name. Whichever app asked
+ * last holds the slot; the previous one hears it was replaced. The runtime
+ * supplies the sink that delivers to apps, so this module never imports it.
  */
 import pageHost, {type Page, type PageHiddenReason} from "./PageHost"
 import {isOverlayApp} from "./overlayApps"
@@ -45,10 +44,10 @@ class OverlayPages {
     return pageHost.showing === page
   }
 
-  /** Release the slot if the app holds it; "replaced" when the dashboard role moved on. */
-  hide(packageName: string, reason: PageHiddenReason = "hidden"): void {
+  /** Release the slot if the app holds it. */
+  hide(packageName: string): void {
     const page = this.pages.get(packageName)
-    if (page) pageHost.hide(page, reason)
+    if (page) pageHost.hide(page)
   }
 
   /** The app stopped: release the slot without telling it, and forget its page. */

package/src/services/pages/PageHost.ts

@@ -72,10 +72,10 @@ class PageHost {
   }
 
   /** Release the slot if `page` holds it. */
-  hide(page: Page, reason: PageHiddenReason = "hidden"): void {
+  hide(page: Page): void {
     this.enqueue(() => {
       if (this.showingPage !== page) return
-      this.release(reason)
+      this.release("hidden")
     })
   }