@glassly/engine 0.4.0-beta.1025 → 0.4.0-beta.1045

package/src/services/CloudClientService.ts

@@ -20,6 +20,7 @@ import type {
   StoreCatalogResponse,
   StoreListing,
   StoreReleasesResponse,
+  StoreHostOptions,
 } from "@glassly/cloud-client/react-native"
 import type {SubjectTokenType} from "@glassly/cloud-client"
 import {AppState, Platform} from "react-native"
@@ -190,9 +191,16 @@ function resolveEndpoints(): {core: string; runtime: string} {
   }
 }
 
+// Via init(), never construct(): init() holds the disable-cloud gate, and a
+// client built past it opens the runtime socket and retries it forever.
+function requireClient(): CloudClient {
+  if (!client) cloudClientService.init()
+  if (!client) throw new Error("Glassly cloud is disabled")
+  return client
+}
+
 function getCoreClient(): CloudCore {
-  if (!client) construct()
-  const core = client?.core
+  const core = requireClient().core
   if (!core) throw new Error("cloud client core not configured")
   return core
 }
@@ -207,9 +215,7 @@ function syncCoreAccessTokenToBluetooth(): Promise<string> {
 }
 
 async function syncCoreAccessTokenToBluetoothInternal(): Promise<string> {
-  if (!client) construct()
-  const c = client
-  if (!c) throw new Error("cloud client not initialized")
+  const c = requireClient()
 
   const token = await c.auth.getCoreToken()
   if (c !== client) {
@@ -765,25 +771,25 @@ export const cloudClientService = {
     return c.core.miniapps.getRegistry()
   },
 
-  async getStoreCatalog(): Promise<StoreCatalogResponse> {
+  async getStoreCatalog(opts?: StoreHostOptions): Promise<StoreCatalogResponse> {
     if (!client) this.init()
     const c = client
     if (!c?.core) throw new Error("cloud client core is unavailable")
-    return c.core.store.list()
+    return c.core.store.list(opts)
   },
 
-  async getStoreListing(packageName: string): Promise<StoreListing> {
+  async getStoreListing(packageName: string, opts?: StoreHostOptions): Promise<StoreListing> {
     if (!client) this.init()
     const c = client
     if (!c?.core) throw new Error("cloud client core is unavailable")
-    return c.core.store.get(packageName)
+    return c.core.store.get(packageName, opts)
   },
 
-  async getStoreReleases(packageName: string): Promise<StoreReleasesResponse> {
+  async getStoreReleases(packageName: string, opts?: StoreHostOptions): Promise<StoreReleasesResponse> {
     if (!client) this.init()
     const c = client
     if (!c?.core) throw new Error("cloud client core is unavailable")
-    return c.core.store.releases(packageName)
+    return c.core.store.releases(packageName, opts)
   },
 
   /** Bytes of a store icon or screenshot; these routes need the user Bearer. */

package/src/services/DisplayProcessor.ts

@@ -21,6 +21,7 @@ import {
   NEX_PROFILE,
   RAYNEO_IO_PROFILE,
   MEMOMIND_ONE_PROFILE,
+  NIMO_PROFILE,
   RAYNEO_IO_CFW_PROFILE,
   TextMeasurer,
   TextWrapper,
@@ -206,6 +207,7 @@ const DEVICE_PROFILES: Partial<Record<DeviceTypes, DisplayProfile>> = {
   [DeviceTypes.MACH1]: Z100_PROFILE, // Mach1 uses same hardware as Vuzix Z100
   [DeviceTypes.RAYNEO_IO]: RAYNEO_IO_PROFILE,
   [DeviceTypes.MEMOMIND_ONE]: MEMOMIND_ONE_PROFILE,
+  [DeviceTypes.NIMO]: NIMO_PROFILE,
 }
 
 /**

package/src/services/GestureDotsService.ts

@@ -50,7 +50,7 @@ const MIDDLE_FINGER_GLYPHS: Partial<Record<GestureDotGlyph, GestureDotGlyph>> =
 
 /** `glyph` as `finger` draws it: the middle finger's shapes are hollow. */
 function fingerGlyph(glyph: GestureDotGlyph, finger: number): GestureDotGlyph {
-  return finger === 1 ? MIDDLE_FINGER_GLYPHS[glyph] ?? glyph : glyph
+  return finger === 1 ? (MIDDLE_FINGER_GLYPHS[glyph] ?? glyph) : glyph
 }
 
 function fingerKey(controllerId: string | undefined, finger: number): string {

package/src/services/HotspotOtaTransport.ts

@@ -1,7 +1,6 @@
 import BluetoothSdk, {isEnabledHotspotStatus} from "@glassly/bluetooth-sdk"
 import {otaServer} from "@glassly/bluetooth-sdk/ota-transport"
 // One coordinator selects the native Android or iOS staging implementation at runtime.
-// eslint-disable-next-line react-native/split-platform-components
 import {PermissionsAndroid, Platform} from "react-native"
 import type {OtaCheckCurrentGlassesResult} from "./OtaUpdateCheckService"
 import {
@@ -24,10 +23,7 @@ export type HotspotOtaProgress = {
 }
 
 export type HotspotOtaErrorCode =
-  | "hotspot_wifi_permission_denied"
-  | "hotspot_start_failed"
-  | "hotspot_join_failed"
-  | "hotspot_server_failed"
+  "hotspot_wifi_permission_denied" | "hotspot_start_failed" | "hotspot_join_failed" | "hotspot_server_failed"
 
 export class HotspotOtaTransportError extends Error {
   constructor(

package/src/services/LocalMiniappRuntime.ts

@@ -141,6 +141,7 @@ import {phoneStreamCoordinator} from "./PhoneStreamCoordinator"
 import {phoneVideoCoordinator} from "./PhoneVideoCoordinator"
 import {runSentenceTtsPipeline} from "./SentenceTtsPipeline"
 import {
+  matchesTranscriptionSubscription,
   summarizeTranscriptionRoutes,
   transcriptionDeliveryRoute,
   type TranscriptionDeliveryRoute,
@@ -433,7 +434,7 @@ const PERMISSION_TYPE_TO_CANONICAL: Record<string, string> = {
 }
 
 /**
- * User API keys (Settings > API Keys) a miniapp may read via
+ * User API keys (Settings > Privacy > API Keys) a miniapp may read via
  * session.keys.get(), mapped provider → settings-store key. Explicit
  * allowlist: the Soniox key is deliberately absent — it gates the
  * phone→Soniox direct transcription path and is not exposed to miniapps.
@@ -477,9 +478,9 @@ function directLlmProvider(name: AiTierProvider): LlmProviderImpl {
 }
 
 const QUOTA_EXCEEDED_MESSAGE =
-  "AI credits are used up. Get more in Settings > Membership, or add your own API key in Settings > API Keys."
+  "AI credits are used up. Get more in Settings > Membership, or add your own API key in Settings > Privacy > API Keys."
 
-/** The user's saved key (Settings > API Keys) for an LLM provider, "" if none. */
+/** The user's saved key (Settings > Privacy > API Keys) for an LLM provider, "" if none. */
 function userLlmKey(provider: AiTierProvider): string {
   const raw = useSettingsStore.getState().getSetting(MINIAPP_READABLE_API_KEYS[provider])
   return typeof raw === "string" ? raw.trim() : ""
@@ -4149,7 +4150,7 @@ class LocalMiniappRuntime {
   }
 
   // ---------------------------------------------------------------------------
-  // User API keys (Settings > API Keys)
+  // User API keys (Settings > Privacy > API Keys)
   // ---------------------------------------------------------------------------
 
   /**
@@ -4217,7 +4218,7 @@ class LocalMiniappRuntime {
    * The request names a TIER; this handler resolves it to a provider+model
    * (Settings > AI Models dropdowns, or auto from saved keys) and then picks
    * one of two transport paths, decided by whether the user saved a key for
-   * the resolved provider (Settings > API Keys) — the phone is where both
+   * the resolved provider (Settings > Privacy > API Keys) — the phone is where both
    * settings live, so this is the only place the choice can be made:
    *
    *  - User key saved → the phone calls the vendor DIRECTLY via
@@ -4490,7 +4491,7 @@ class LocalMiniappRuntime {
         this.sendResult(packageName, requestId, false, undefined, {
           code: MiniappErrorCode.QUOTA_EXCEEDED,
           message:
-            "AI credits are used up. Get more in Settings > Membership, or add your own API key in Settings > API Keys.",
+            "AI credits are used up. Get more in Settings > Membership, or add your own API key in Settings > Privacy > API Keys.",
         })
         return
       }
@@ -4744,7 +4745,11 @@ class LocalMiniappRuntime {
    * session.system.webLogin — host in-app browser sheet. Same contract as
    * scanQr: the seam presents a Modal and never clears miniapp foreground.
    */
-  private async handleWebLogin(packageName: string, payload: Record<string, unknown>, requestId?: string): Promise<void> {
+  private async handleWebLogin(
+    packageName: string,
+    payload: Record<string, unknown>,
+    requestId?: string,
+  ): Promise<void> {
     try {
       const result = await invokeWebLoginSeam(getUiSeams().webLogin, payload, packageName)
       this.sendResult(packageName, requestId, true, result)
@@ -5385,6 +5390,9 @@ class LocalMiniappRuntime {
    */
   private buildCloudAudioSubscriptions(cloudStreams: Set<string>): AudioSubscription[] {
     const subs: AudioSubscription[] = []
+    // One auto recognizer serves every transcription listener. Explicit-language
+    // listeners are filtered at delivery; translations still need their own jobs.
+    const hasAutoTranscription = cloudStreams.has("transcription:auto")
     // Union of every connected app's TRANSCRIPTION_CONFIG hints. Hints only
     // apply to the auto-mode TRANSCRIPTION subscription (the wire schema has
     // no hints field on specific-language sources — the language IS the hint
@@ -5395,6 +5403,7 @@ class LocalMiniappRuntime {
     for (const stream of cloudStreams) {
       if (stream.startsWith("transcription:")) {
         const lang = stream.substring("transcription:".length)
+        if (hasAutoTranscription && lang !== "auto") continue
         const source = langSource(lang)
         subs.push({
           kind: "transcription",
@@ -5527,6 +5536,12 @@ class LocalMiniappRuntime {
   }
 
   private handleTranscriptionData(d: TranscriptionData): void {
+    const expectsAuto = [...(this.streamSubscribers.get("transcription:auto") ?? [])].some(
+      (packageName) => this.appTranscriptionRoutesForSubscription(packageName, "transcription:auto").cloud,
+    )
+    // Subscription replacement is asynchronous. Ignore late results from the
+    // old pipeline while switching between auto and language-specific jobs.
+    if ((d.subscription.language.mode === "auto") !== expectsAuto) return
     const receivedAt = Date.now()
     if (TRANSCRIPT_TIMING_TELEMETRY) {
       console.log(
@@ -5565,6 +5580,8 @@ class LocalMiniappRuntime {
         __hostReceivedAt: receivedAt,
       },
       "cloud",
+      undefined,
+      d.subscription,
     )
   }
 
@@ -5642,8 +5659,7 @@ class LocalMiniappRuntime {
   /** Model profile + runtime overrides (the G2 CFW scene canvas) for the default wearable. */
   private currentCapabilities(): Capabilities {
     const defaultWearable = useSettingsStore.getState().getSetting(ISLAND_SETTINGS_KEYS.defaultWearable) as
-      | DeviceTypes
-      | undefined
+      DeviceTypes | undefined
     return getEffectiveCapabilities(defaultWearable || DeviceTypes.NONE)
   }
 
@@ -5661,7 +5677,7 @@ class LocalMiniappRuntime {
     // connected controllers add their input surfaces to `button`.
     useGlassesStore.subscribe(
       (s) =>
-        `${s.sceneCanvasWidth ?? 0}x${s.sceneCanvasHeight ?? 0}:${s.sceneVector === true}:${s.firmwareVersion}:${s.connection.state}:${s.deviceModel}:${readyControllersKey(s.controllers)}`,
+        `${s.sceneCanvasWidth ?? 0}x${s.sceneCanvasHeight ?? 0}:${s.sceneVector === true}:${s.sceneStereo === true}:${s.firmwareVersion}:${s.connection.state}:${s.deviceModel}:${readyControllersKey(s.controllers)}`,
       broadcast,
     )
     // The debug knob flips hasNativeNavigation on custom firmware.
@@ -5790,6 +5806,8 @@ class LocalMiniappRuntime {
     transcriptionSource?: TranscriptionEventSource,
     /** Deliver to this subscriber alone (the designated dashboard app's gestures while it shows). */
     only?: string,
+    /** Producing cloud/direct subscription; auto results also serve matching language listeners. */
+    transcriptionSubscription?: TranscriptionData["subscription"],
   ): void {
     // Paused miniapps (glasses disconnected) hear no streams. The resume push
     // lands before the reconnect's own glasses_connection event, so nothing
@@ -5801,6 +5819,12 @@ class LocalMiniappRuntime {
     if (transcriptionSource === "local") markTranscriptSourceRecent("local")
     // Translate cloud event names to miniapp protocol stream types
     const normalizedStream = this.normalizeStreamType(streamType)
+    const transcriptionStreams =
+      transcriptionSource === "cloud" && transcriptionSubscription
+        ? [...this.streamSubscribers.keys()].filter((stream) =>
+            matchesTranscriptionSubscription(stream, normalizedStream, transcriptionSubscription),
+          )
+        : undefined
 
     // Passive memory capture happens HERE, before subscriber fan-out, so the
     // timeline reflects what was said around the user regardless of which
@@ -5809,10 +5833,10 @@ class LocalMiniappRuntime {
     // recorded while it was open.)
     this.captureTranscriptToMemory(normalizedStream, data)
 
-    // Collect all subscribers: exact match, plus wildcard matches for streams
-    // that carry a language tag. A miniapp subscribed to "transcription:auto"
-    // should receive any "transcription:<lang>" event (the detected language
-    // is conveyed in the event data, not the stream key).
+    // Auto cloud/direct results serve auto listeners and listeners requesting
+    // the detected language. Specific jobs serve only their own subscription.
+    // Local/legacy events have no producing subscription and retain wildcard
+    // matching so one on-device recognizer can serve auto and explicit listeners.
     //
     // Translation streams support cloud v3's wildcard patterns. Incoming
     // events are keyed `translation:<source>:<target>` and we match against
@@ -5824,11 +5848,13 @@ class LocalMiniappRuntime {
     //   translation:auto            — back-compat alias for *:*
     const matchedSubs = new Set<string>()
     let translationPatterns: string[] = []
-    const exact = this.streamSubscribers.get(normalizedStream)
-    if (exact) for (const p of exact) matchedSubs.add(p)
+    for (const stream of transcriptionStreams ?? [normalizedStream]) {
+      const exact = this.streamSubscribers.get(stream)
+      if (exact) for (const p of exact) matchedSubs.add(p)
+    }
 
     if (normalizedStream.startsWith("transcription:")) {
-      const autoSubs = this.streamSubscribers.get("transcription:auto")
+      const autoSubs = transcriptionStreams ? undefined : this.streamSubscribers.get("transcription:auto")
       if (autoSubs) for (const p of autoSubs) matchedSubs.add(p)
     } else if (normalizedStream.startsWith("translation:")) {
       // translation:<source>:<target> — match each wildcard variant.
@@ -5907,8 +5933,18 @@ class LocalMiniappRuntime {
       // The wearer's touches reach a widget-only app through its host's widget events alone.
       if (normalizedStream === MiniappStreamType.TOUCH_EVENT && miniappWidgetMode.isWidgetOnly(packageName)) continue
       let transcriptionRoute: TranscriptionDeliveryRoute | undefined
+      let outboundStream = normalizedStream
       if (normalizedStream.startsWith("transcription:") && transcriptionSource) {
-        const routes = this.appTranscriptionRoutesForEvent(packageName, normalizedStream)
+        const cloudStreams = transcriptionStreams?.filter(
+          (stream) => this.appTranscriptionRoutesForSubscription(packageName, stream).cloud,
+        )
+        const routes = cloudStreams
+          ? {cloud: cloudStreams.length > 0, forceLocal: false}
+          : this.appTranscriptionRoutesForEvent(packageName, normalizedStream)
+        // Existing miniapp bundles dispatch explicit listeners by their BCP-47
+        // subscription key, while providers detect bare codes (es vs es-ES).
+        // Send one envelope per app, even when it also subscribes to auto.
+        outboundStream = cloudStreams?.find((stream) => stream !== "transcription:auto") ?? normalizedStream
         transcriptionRoute =
           transcriptionDeliveryRoute(transcriptionSource, routes, this.transcriptionPrimaryUp()) ?? undefined
         if (!transcriptionRoute) continue
@@ -5937,7 +5973,7 @@ class LocalMiniappRuntime {
       }
       this.sendToMiniapp(packageName, {
         type: MiniappResponseType.EVENT,
-        streamType: normalizedStream,
+        streamType: outboundStream,
         data: outboundData,
         ...(transcriptionRoute ? {transcriptionRoute} : {}),
       })
@@ -6538,7 +6574,12 @@ class LocalMiniappRuntime {
     // and an unplace racing it cannot stop the provider early. A provider the
     // store already runs (a wearer's launch still spawning, say) stays a
     // normal run; the registry alone lags that launch.
-    this.widgetPlacements = placeWidget(this.widgetPlacements, {hostPackageName, providerPackageName: provider, widgetId, box})
+    this.widgetPlacements = placeWidget(this.widgetPlacements, {
+      hostPackageName,
+      providerPackageName: provider,
+      widgetId,
+      box,
+    })
     miniappWidgetMode.setPlaced(provider, true)
     if (!app.running && !miniappRunningRegistry.has(provider)) miniappWidgetMode.setWidgetOnly(provider, true)
     try {
@@ -6575,7 +6616,10 @@ class LocalMiniappRuntime {
     this.widgetPlacements = unplaceWidget(this.widgetPlacements, hostPackageName, provider, target.widgetId)
     this.sendResult(hostPackageName, requestId, true)
     if (!had) return
-    if (this.connectedApps.has(provider) && widgetHostsOf(this.widgetPlacements, provider, target.widgetId).length === 0) {
+    if (
+      this.connectedApps.has(provider) &&
+      widgetHostsOf(this.widgetPlacements, provider, target.widgetId).length === 0
+    ) {
       this.sendWidgetCall(provider, target.widgetId, {kind: "box", box: null})
     }
     await this.settleWidgetProvider(provider)
@@ -6706,9 +6750,7 @@ class LocalMiniappRuntime {
     if (!widget) return
     const view: WidgetView = payload.view === "expanded" ? "expanded" : "card"
     if (view === "expanded" && !widget.expandable) {
-      console.warn(
-        `${LOG_TAG}: dropping expanded frame from ${providerPackageName}/${widgetId}: it does not list EX`,
-      )
+      console.warn(`${LOG_TAG}: dropping expanded frame from ${providerPackageName}/${widgetId}: it does not list EX`)
       return
     }
     const cap =

package/src/services/LocalSttFallbackCoordinator.ts

@@ -28,11 +28,7 @@ import sttModelManager from "./STTModelManager"
  * `force_local` (a forced subscription would keep local STT on either way).
  */
 export type LocalSttFallbackReason =
-  | "force_local"
-  | "cloud_disconnected"
-  | "cloud_disabled"
-  | "stt_quota"
-  | "provider_unreachable"
+  "force_local" | "cloud_disconnected" | "cloud_disabled" | "stt_quota" | "provider_unreachable"
 
 class LocalSttFallbackCoordinator {
   private static instance: LocalSttFallbackCoordinator

package/src/services/NativeNavigationService.ts

@@ -61,8 +61,7 @@ class NativeNavigationService {
    */
   public isSupported(): boolean {
     const defaultWearable = useSettingsStore.getState().getSetting(ISLAND_SETTINGS_KEYS.defaultWearable) as
-      | DeviceTypes
-      | undefined
+      DeviceTypes | undefined
     // Effective, not model: custom firmware drops hasNativeNavigation so the
     // miniapp's scene HUD owns the display (see effectiveCapabilities).
     const capabilities = getEffectiveCapabilities(defaultWearable || DeviceTypes.NONE)

package/src/services/NavigationHandlers.ts

@@ -364,7 +364,7 @@ export class NavigationHandlers {
 
   async handleComputeRoute(packageName: string, payload: Record<string, unknown>, requestId?: string): Promise<void> {
     try {
-      // With the user's own Mapbox key (Settings > API Keys), compute
+      // With the user's own Mapbox key (Settings > Privacy > API Keys), compute
       // on-device so routing works without the cloud and bills their account.
       // Without one, go through the v2 cloud maps proxy — org-token Mapbox
       // usage only ever happens cloud-side.
@@ -437,7 +437,7 @@ export class NavigationHandlers {
 
   /**
    * Type-ahead place search. Runs on-device against Mapbox Search Box when the
-   * user saved their own key (Settings > API Keys) — that key exists precisely
+   * user saved their own key (Settings > Privacy > API Keys) — that key exists precisely
    * so search works without the cloud — and falls back to the v2 cloud maps
    * service otherwise. Resolves `{ok: true, suggestions}` — an empty query or no
    * matches is `{ok: true, suggestions: []}`, not an error.

package/src/services/NavigationService.ts

@@ -211,7 +211,7 @@ class NavigationService {
     const mapboxRenderToken = await resolveMapboxRenderToken()
     if (!mapboxRenderToken) {
       const error =
-        "No Mapbox token available — add your key in Settings > API Keys" +
+        "No Mapbox token available — add your key in Settings > Privacy > API Keys" +
         " (required while Glassly Cloud is disabled or unreachable)"
       console.warn(`${LOG_TAG}: start blocked — ${error}`)
       return {ok: false, error}
@@ -329,7 +329,7 @@ class NavigationService {
    * Compute one or more routes without starting a trip.
    *
    * Reached from the miniapp bridge (NavigationHandlers.handleComputeRoute)
-   * when the user has saved their own Mapbox key in Settings > API Keys —
+   * when the user has saved their own Mapbox key in Settings > Privacy > API Keys —
    * that key exists so navigation works without the cloud. Without a user
    * key the bridge uses the v2 cloud maps service, which holds a provider
    * token server-side and caches results. Implemented by
@@ -379,7 +379,7 @@ class NavigationService {
     return !!resolveMapboxAccessToken()
   }
 
-  /** True when the user saved their own Mapbox key in Settings > API Keys. */
+  /** True when the user saved their own Mapbox key in Settings > Privacy > API Keys. */
   public hasUserMapboxKey(): boolean {
     return !!userMapboxApiKey()
   }
@@ -501,7 +501,7 @@ export default navigationService
 // ---------------------------------------------------------------------------
 
 // Routes + Geocoding go DIRECT to Mapbox from the phone process ONLY when the
-// user saved their own key (Settings > API Keys) — "use my account". Without
+// user saved their own key (Settings > Privacy > API Keys) — "use my account". Without
 // one, callers (NavigationHandlers) route these operations through the v2
 // cloud maps proxy instead; the binary ships no baked Mapbox key.
 const MAPBOX_DIRECTIONS_BASE = "https://api.mapbox.com/directions/v5/mapbox"
@@ -532,7 +532,7 @@ function mapboxToken(): string {
 
 /**
  * Phone-side helper: hit the Mapbox Directions API directly with the user's own
- * key (Settings > API Keys). Preferred over the v2 cloud maps service whenever
+ * key (Settings > Privacy > API Keys). Preferred over the v2 cloud maps service whenever
  * that key is set, so routing works without the cloud. Lives here
  * (not in Kotlin) so it's platform-independent across the JS bridge.
  * Returns the SDK-shaped result with primary + alternates.
@@ -583,7 +583,8 @@ async function computeRouteViaRoutesApi(payload: Record<string, unknown>): Promi
   }
 
   const token = mapboxToken()
-  if (!token) return {ok: false, error: "computeRoute: no Mapbox key saved (add yours in Settings > API Keys)"}
+  if (!token)
+    return {ok: false, error: "computeRoute: no Mapbox key saved (add yours in Settings > Privacy > API Keys)"}
 
   // Mapbox path is a semicolon-joined `lng,lat` list: origin then each stop.
   const coords = [`${oLng},${oLat}`, ...stops.map((s) => `${s.lng},${s.lat}`)].join(";")
@@ -739,7 +740,7 @@ function mapboxManeuverToKind(type?: string, modifier?: string): string | undefi
 
 /**
  * Reverse-geocode a coordinate via the Mapbox Geocoding v6 API directly, using
- * the user's own key (Settings > API Keys). Preferred over the v2 cloud maps
+ * the user's own key (Settings > Privacy > API Keys). Preferred over the v2 cloud maps
  * service whenever that key is set, so pin labels work without the cloud.
  *
  * Returns the road/street name (e.g. "Octavia Blvd") plus the full formatted
@@ -767,7 +768,7 @@ async function reverseGeocodeRoadViaGeocodingApi(coord: {lat: number; lng: numbe
   if (!token)
     return {
       ok: false,
-      error: "reverseGeocode: no Mapbox key saved (add yours in Settings > API Keys)",
+      error: "reverseGeocode: no Mapbox key saved (add yours in Settings > Privacy > API Keys)",
     }
   const params = new URLSearchParams({
     longitude: String(coord.lng),
@@ -813,7 +814,7 @@ async function reverseGeocodeRoadViaGeocodingApi(coord: {lat: number; lng: numbe
 
 /**
  * Type-ahead place search straight from the device via Mapbox Search Box,
- * using the user's own key (Settings > API Keys). This is the offline-from-
+ * using the user's own key (Settings > Privacy > API Keys). This is the offline-from-
  * the-cloud path: with a key saved, place search works with no runtime
  * involvement at all.
  *
@@ -840,7 +841,7 @@ async function placeAutocompleteViaSearchBox(
   if (!token) {
     return {
       ok: false,
-      error: "placeAutocomplete: no Mapbox key saved (add yours in Settings > API Keys)",
+      error: "placeAutocomplete: no Mapbox key saved (add yours in Settings > Privacy > API Keys)",
     }
   }
   const params = new URLSearchParams({
@@ -904,7 +905,7 @@ async function placeDetailsViaSearchBox(
   if (!token) {
     return {
       ok: false,
-      error: "placeDetails: no Mapbox key saved (add yours in Settings > API Keys)",
+      error: "placeDetails: no Mapbox key saved (add yours in Settings > Privacy > API Keys)",
     }
   }
   const params = new URLSearchParams({access_token: token, session_token: sessionToken})

package/src/services/PairingIdentity.ts

@@ -40,9 +40,7 @@ import {useSettingsStore, SETTINGS} from "../stores/settings"
 import {DeviceTypes} from "../types"
 
 export type IdentitySnapshot =
-  | {kind: "none"}
-  | {kind: "pending"; model: string}
-  | {kind: "paired"; model: string; name: string; address?: string}
+  {kind: "none"} | {kind: "pending"; model: string} | {kind: "paired"; model: string; name: string; address?: string}
 
 // Identity keys hold model/name strings; anything else (legacy null, a stray
 // non-string) reads as absent, matching native currentDefaultDevice()'s

package/src/services/PhoneCalendarService.ts

@@ -14,9 +14,7 @@ import {
 
 export {PhoneCalendarError} from "./PhoneCalendarHelpers"
 
-type CalendarPermissionStatus = Awaited<
-  ReturnType<typeof Calendar.getCalendarPermissionsAsync>
->["status"]
+type CalendarPermissionStatus = Awaited<ReturnType<typeof Calendar.getCalendarPermissionsAsync>>["status"]
 
 /**
  * expo-calendar reports anything below EventKit full access as not granted,

package/src/services/PhoneNotificationsSync.ts

@@ -1,3 +1,4 @@
+import {notificationAppPayload} from "./notificationAppPayload"
 /**
  * Phone-notifications sync — engine-owned, started by `engine.start()`. Keeps
  * three things in step with settings and the connected glasses, for any host:
@@ -78,7 +79,7 @@ export function getKnownNotificationApps(): NotificationApp[] {
 export function installedNotificationApps(): Promise<
   Array<{packageName: string; appName: string; icon: string | null}>
 > {
-  if (Platform.OS === "android") return CrustModule.getInstalledApps()
+  if (Platform.OS === "android") return CrustModule.getInstalledApps().then(notificationAppPayload)
   if (Platform.OS !== "ios") return Promise.resolve([])
   return Promise.resolve(
     getKnownNotificationApps().map((app) => ({packageName: app.appId, appName: app.displayName, icon: null})),

package/src/services/PhoneStreamCoordinator.ts

@@ -339,8 +339,7 @@ export class PhoneStreamCoordinator {
     // block subsequent start/stop transitions on this coordinator.
     assertGlassesConnected()
     type JoinDecision =
-      | {kind: "join"; entry: ManagedEntry; immediate: ManagedStartResult | null}
-      | {kind: "fresh"; entry: ManagedEntry}
+      {kind: "join"; entry: ManagedEntry; immediate: ManagedStartResult | null} | {kind: "fresh"; entry: ManagedEntry}
 
     const decision = await this.runExclusive(async (): Promise<JoinDecision> => {
       if (this.current && this.current.kind === "unmanaged") {

package/src/services/ProviderKeyValidation.ts

@@ -2,7 +2,7 @@
  * ProviderKeyValidation
  *
  * Cheap validate-before-save probes for the AI/voice provider keys on the
- * Keys screen (Settings > API Keys), mirroring validateMapboxApiKey's shape:
+ * Keys screen (Settings > Privacy > API Keys), mirroring validateMapboxApiKey's shape:
  * each probe hits the provider's cheapest authenticated read endpoint (no
  * metered usage), maps auth failures to `invalid_key`, and maps everything
  * else to `network` so the caller can offer "save anyway".

package/src/services/STTModelManager.ts

@@ -151,12 +151,7 @@ class STTModelManager {
       fileName: "sherpa-onnx-nemo-streaming-fast-conformer-transducer-en-480ms-int8",
       size: 101 * 1024 * 1024,
       type: "transducer",
-      requiredFiles: [
-        "encoder.int8.onnx",
-        "decoder.int8.onnx",
-        "joiner.int8.onnx",
-        "tokens.txt",
-      ],
+      requiredFiles: ["encoder.int8.onnx", "decoder.int8.onnx", "joiner.int8.onnx", "tokens.txt"],
       languageCode: "en-US",
     },
     // NVIDIA Nemotron streaming ASR. These are model choices rather than plain

package/src/services/SupportProfileSync.ts

@@ -83,6 +83,8 @@ function armDebounce(generation: number): void {
 
 async function sendCurrentSnapshot(force: boolean, generation = syncGeneration): Promise<void> {
   if (!unsubscribe || generation !== syncGeneration) return
+  // Every send would fail into the retry backoff with no client to send through.
+  if (cloudClientService.isCloudDisabled()) return
   if (sendingGeneration === generation) {
     const fingerprint = snapshotFingerprint(buildSnapshot())
     if (fingerprint !== lastSentFingerprint) queuedFingerprint = fingerprint

package/src/services/TranscriptionRouting.ts

@@ -1,3 +1,21 @@
+import type {TranscriptionSubscription} from "@glassly/cloud-protocol"
+
+/** Match a provider result to a logical miniapp subscription. */
+export function matchesTranscriptionSubscription(
+  stream: string,
+  resolvedStream: string,
+  subscription: TranscriptionSubscription,
+): boolean {
+  const prefix = "transcription:"
+  if (!stream.startsWith(prefix) || !resolvedStream.startsWith(prefix)) return false
+  if (subscription.language.mode === "specific") return stream === `${prefix}${subscription.language.code}`
+  if (stream === `${prefix}auto`) return true
+  // Providers detect ISO language codes; miniapps request regional BCP-47 tags.
+  // Unknown language stays auto-only until the recognizer identifies it.
+  const detected = resolvedStream.slice(prefix.length).split("-")[0].toLowerCase()
+  return detected !== "auto" && detected !== "" && stream.slice(prefix.length).split("-")[0].toLowerCase() === detected
+}
+
 export interface TranscriptionRouteSummary {
   hasCloudSubscriber: boolean
   hasForceLocalSubscriber: boolean

package/src/services/UIRouter.ts

@@ -193,9 +193,7 @@ export class UIRouter {
       const cancel = {type: "cancel", requestId: uiSendPayload.requestId}
       const literal = JSON.stringify(cancel)
       const escaped = JSON.stringify(literal)
-      binding.inject(
-        `if (window.__host && window.__host.recv) window.__host.recv(JSON.parse(${escaped})); true;`,
-      )
+      binding.inject(`if (window.__host && window.__host.recv) window.__host.recv(JSON.parse(${escaped})); true;`)
       return
     }
     const outbound: Record<string, unknown> = {
@@ -207,9 +205,7 @@ export class UIRouter {
     if (typeof uiSendPayload.requestId === "string") outbound.requestId = uiSendPayload.requestId
     const literal = JSON.stringify(outbound)
     const escaped = JSON.stringify(literal)
-    binding.inject(
-      `if (window.__host && window.__host.recv) window.__host.recv(JSON.parse(${escaped})); true;`,
-    )
+    binding.inject(`if (window.__host && window.__host.recv) window.__host.recv(JSON.parse(${escaped})); true;`)
   }
 
   /**
@@ -222,9 +218,7 @@ export class UIRouter {
     if (!binding) return
     const literal = JSON.stringify(frame)
     const escaped = JSON.stringify(literal)
-    binding.inject(
-      `if (window.__host && window.__host.recv) window.__host.recv(JSON.parse(${escaped})); true;`,
-    )
+    binding.inject(`if (window.__host && window.__host.recv) window.__host.recv(JSON.parse(${escaped})); true;`)
   }
 
   /**

package/src/services/controllers.ts

@@ -57,6 +57,7 @@ const INPUT_SURFACES: Readonly<Record<string, readonly InputSurface[]>> = {
   [ControllerTypes.IINE_ANANKE]: [GAMEBRICK_SURFACE],
   [ControllerTypes.ZERO2]: [GAMEBRICK_SURFACE],
   [ControllerTypes.MICRO]: [GAMEBRICK_SURFACE],
+  [ControllerTypes.CRKD_ATOM_PLUS]: [GAMEBRICK_SURFACE],
   [ControllerTypes.R1]: [],
 }