@glassly/engine 0.4.0 → 0.4.1-dev.1137

package/src/services/LocalMiniappRuntime.ts

@@ -14,6 +14,7 @@ import {AppState, Linking} from "react-native"
 import {logBuffer} from "../utils/devLogging"
 import {collectDisplayDiagnostics} from "./DisplayDiagnostics"
 import Share from "react-native-share"
+import {uses24HourClock} from "react-native-localize"
 import * as Battery from "expo-battery"
 import * as Clipboard from "expo-clipboard"
 import {File, Paths} from "expo-file-system"
@@ -83,6 +84,13 @@ import overlayPages from "./pages/OverlayPages"
 import dashboardOpenTrace from "./debug/DashboardOpenTrace"
 import {isAppForegrounded, isPhoneActive, onAppForegroundChange, onPhoneActivityChange} from "./PhoneActivity"
 import {installedNotificationApps} from "./PhoneNotificationsSync"
+import {
+  emitMiniappNotification,
+  MINIAPP_NOTIFICATION_CONTENT_MAX,
+  MINIAPP_NOTIFICATION_ID_MAX,
+  MINIAPP_NOTIFICATION_TITLE_MAX,
+  miniappNotificationId,
+} from "./notifications/miniappNotifications"
 import {MiniappIcons} from "./MiniappIcons"
 import {pairedControllersFrom, readyControllersKey} from "./controllers"
 import {
@@ -141,6 +149,7 @@ import {phoneStreamCoordinator} from "./PhoneStreamCoordinator"
 import {phoneVideoCoordinator} from "./PhoneVideoCoordinator"
 import {runSentenceTtsPipeline} from "./SentenceTtsPipeline"
 import {
+  matchesTranscriptionSubscription,
   summarizeTranscriptionRoutes,
   transcriptionDeliveryRoute,
   type TranscriptionDeliveryRoute,
@@ -433,7 +442,7 @@ const PERMISSION_TYPE_TO_CANONICAL: Record<string, string> = {
 }
 
 /**
- * User API keys (Settings > API Keys) a miniapp may read via
+ * User API keys (Settings > Privacy > API Keys) a miniapp may read via
  * session.keys.get(), mapped provider → settings-store key. Explicit
  * allowlist: the Soniox key is deliberately absent — it gates the
  * phone→Soniox direct transcription path and is not exposed to miniapps.
@@ -477,9 +486,9 @@ function directLlmProvider(name: AiTierProvider): LlmProviderImpl {
 }
 
 const QUOTA_EXCEEDED_MESSAGE =
-  "AI credits are used up. Get more in Settings > Membership, or add your own API key in Settings > API Keys."
+  "AI credits are used up. Get more in Settings > Membership, or add your own API key in Settings > Privacy > API Keys."
 
-/** The user's saved key (Settings > API Keys) for an LLM provider, "" if none. */
+/** The user's saved key (Settings > Privacy > API Keys) for an LLM provider, "" if none. */
 function userLlmKey(provider: AiTierProvider): string {
   const raw = useSettingsStore.getState().getSetting(MINIAPP_READABLE_API_KEYS[provider])
   return typeof raw === "string" ? raw.trim() : ""
@@ -1512,6 +1521,12 @@ class LocalMiniappRuntime {
       case MiniappRequestType.NOTIFICATION_APPS_LIST:
         void this.handleNotificationAppsList(packageName, requestId)
         break
+      case MiniappRequestType.NOTIFICATION_POST:
+        this.handleNotificationPost(packageName, payload, requestId)
+        break
+      case MiniappRequestType.NOTIFICATION_DISMISS:
+        this.handleNotificationDismiss(packageName, payload, requestId)
+        break
       case MiniappRequestType.NATIVE_NAV:
         this.handleNativeNav(packageName, payload, requestId)
         break
@@ -2791,7 +2806,17 @@ class LocalMiniappRuntime {
       return
     }
     try {
-      this.sendResult(packageName, requestId, true, await installedNotificationApps())
+      const posters = this.interopApps().filter(
+        (app) => app.packageName && app.permissions?.some((permission) => permission.type === "POST_NOTIFICATIONS"),
+      )
+      const miniapps = await Promise.all(
+        posters.map(async (app) => ({
+          packageName: app.packageName,
+          appName: app.name || app.packageName,
+          icon: (await this.miniappIcons.read(app)) ?? null,
+        })),
+      )
+      this.sendResult(packageName, requestId, true, [...(await installedNotificationApps()), ...miniapps])
     } catch (err) {
       this.sendResult(packageName, requestId, false, undefined, {
         code: MiniappErrorCode.INTERNAL,
@@ -2800,6 +2825,60 @@ class LocalMiniappRuntime {
     }
   }
 
+  private handleNotificationPost(packageName: string, payload: Record<string, unknown>, requestId?: string): void {
+    if (!this.requirePermission(packageName, requestId, "POST_NOTIFICATIONS", "to post notifications")) return
+    const title = typeof payload.title === "string" ? payload.title.slice(0, MINIAPP_NOTIFICATION_TITLE_MAX) : ""
+    const content =
+      typeof payload.content === "string" ? payload.content.slice(0, MINIAPP_NOTIFICATION_CONTENT_MAX) : ""
+    if (!title.trim() && !content.trim()) {
+      this.sendResult(packageName, requestId, false, undefined, {
+        code: MiniappErrorCode.INVALID_ARGUMENT,
+        message: "A notification needs a title or content",
+      })
+      return
+    }
+    if (payload.id !== undefined && (typeof payload.id !== "string" || !payload.id.trim())) {
+      this.sendResult(packageName, requestId, false, undefined, {
+        code: MiniappErrorCode.INVALID_ARGUMENT,
+        message: "A notification id must be a non-empty string",
+      })
+      return
+    }
+    const id =
+      typeof payload.id === "string"
+        ? payload.id.trim().slice(0, MINIAPP_NOTIFICATION_ID_MAX)
+        : `${Date.now().toString(36)}-${++this.notificationSeq}`
+    const app = this.interopApps().find((candidate) => candidate.packageName === packageName)
+    emitMiniappNotification({
+      type: "posted",
+      notificationId: miniappNotificationId(packageName, id),
+      source: packageName,
+      app: app?.name || packageName,
+      title,
+      content,
+      timestamp: Date.now(),
+    })
+    this.sendResult(packageName, requestId, true, {id})
+  }
+
+  private handleNotificationDismiss(packageName: string, payload: Record<string, unknown>, requestId?: string): void {
+    if (!this.requirePermission(packageName, requestId, "POST_NOTIFICATIONS", "to dismiss notifications")) return
+    if (typeof payload.id !== "string" || !payload.id.trim()) {
+      this.sendResult(packageName, requestId, false, undefined, {
+        code: MiniappErrorCode.INVALID_ARGUMENT,
+        message: "dismiss needs the id post() returned",
+      })
+      return
+    }
+    emitMiniappNotification({
+      type: "dismissed",
+      notificationId: miniappNotificationId(packageName, payload.id.trim().slice(0, MINIAPP_NOTIFICATION_ID_MAX)),
+      source: packageName,
+      timestamp: Date.now(),
+    })
+    this.sendResult(packageName, requestId, true)
+  }
+
   /**
    * Push bridged settings as they change: stored keys from the store, the
    * derived keys whenever their inputs move (phone activity, the display,
@@ -4149,7 +4228,7 @@ class LocalMiniappRuntime {
   }
 
   // ---------------------------------------------------------------------------
-  // User API keys (Settings > API Keys)
+  // User API keys (Settings > Privacy > API Keys)
   // ---------------------------------------------------------------------------
 
   /**
@@ -4217,7 +4296,7 @@ class LocalMiniappRuntime {
    * The request names a TIER; this handler resolves it to a provider+model
    * (Settings > AI Models dropdowns, or auto from saved keys) and then picks
    * one of two transport paths, decided by whether the user saved a key for
-   * the resolved provider (Settings > API Keys) — the phone is where both
+   * the resolved provider (Settings > Privacy > API Keys) — the phone is where both
    * settings live, so this is the only place the choice can be made:
    *
    *  - User key saved → the phone calls the vendor DIRECTLY via
@@ -4490,7 +4569,7 @@ class LocalMiniappRuntime {
         this.sendResult(packageName, requestId, false, undefined, {
           code: MiniappErrorCode.QUOTA_EXCEEDED,
           message:
-            "AI credits are used up. Get more in Settings > Membership, or add your own API key in Settings > API Keys.",
+            "AI credits are used up. Get more in Settings > Membership, or add your own API key in Settings > Privacy > API Keys.",
         })
         return
       }
@@ -4744,7 +4823,11 @@ class LocalMiniappRuntime {
    * session.system.webLogin — host in-app browser sheet. Same contract as
    * scanQr: the seam presents a Modal and never clears miniapp foreground.
    */
-  private async handleWebLogin(packageName: string, payload: Record<string, unknown>, requestId?: string): Promise<void> {
+  private async handleWebLogin(
+    packageName: string,
+    payload: Record<string, unknown>,
+    requestId?: string,
+  ): Promise<void> {
     try {
       const result = await invokeWebLoginSeam(getUiSeams().webLogin, payload, packageName)
       this.sendResult(packageName, requestId, true, result)
@@ -5385,6 +5468,9 @@ class LocalMiniappRuntime {
    */
   private buildCloudAudioSubscriptions(cloudStreams: Set<string>): AudioSubscription[] {
     const subs: AudioSubscription[] = []
+    // One auto recognizer serves every transcription listener. Explicit-language
+    // listeners are filtered at delivery; translations still need their own jobs.
+    const hasAutoTranscription = cloudStreams.has("transcription:auto")
     // Union of every connected app's TRANSCRIPTION_CONFIG hints. Hints only
     // apply to the auto-mode TRANSCRIPTION subscription (the wire schema has
     // no hints field on specific-language sources — the language IS the hint
@@ -5395,6 +5481,7 @@ class LocalMiniappRuntime {
     for (const stream of cloudStreams) {
       if (stream.startsWith("transcription:")) {
         const lang = stream.substring("transcription:".length)
+        if (hasAutoTranscription && lang !== "auto") continue
         const source = langSource(lang)
         subs.push({
           kind: "transcription",
@@ -5527,6 +5614,12 @@ class LocalMiniappRuntime {
   }
 
   private handleTranscriptionData(d: TranscriptionData): void {
+    const expectsAuto = [...(this.streamSubscribers.get("transcription:auto") ?? [])].some(
+      (packageName) => this.appTranscriptionRoutesForSubscription(packageName, "transcription:auto").cloud,
+    )
+    // Subscription replacement is asynchronous. Ignore late results from the
+    // old pipeline while switching between auto and language-specific jobs.
+    if ((d.subscription.language.mode === "auto") !== expectsAuto) return
     const receivedAt = Date.now()
     if (TRANSCRIPT_TIMING_TELEMETRY) {
       console.log(
@@ -5565,6 +5658,8 @@ class LocalMiniappRuntime {
         __hostReceivedAt: receivedAt,
       },
       "cloud",
+      undefined,
+      d.subscription,
     )
   }
 
@@ -5642,8 +5737,7 @@ class LocalMiniappRuntime {
   /** Model profile + runtime overrides (the G2 CFW scene canvas) for the default wearable. */
   private currentCapabilities(): Capabilities {
     const defaultWearable = useSettingsStore.getState().getSetting(ISLAND_SETTINGS_KEYS.defaultWearable) as
-      | DeviceTypes
-      | undefined
+      DeviceTypes | undefined
     return getEffectiveCapabilities(defaultWearable || DeviceTypes.NONE)
   }
 
@@ -5661,7 +5755,7 @@ class LocalMiniappRuntime {
     // connected controllers add their input surfaces to `button`.
     useGlassesStore.subscribe(
       (s) =>
-        `${s.sceneCanvasWidth ?? 0}x${s.sceneCanvasHeight ?? 0}:${s.sceneVector === true}:${s.firmwareVersion}:${s.connection.state}:${s.deviceModel}:${readyControllersKey(s.controllers)}`,
+        `${s.sceneCanvasWidth ?? 0}x${s.sceneCanvasHeight ?? 0}:${s.sceneVector === true}:${s.sceneStereo === true}:${s.firmwareVersion}:${s.connection.state}:${s.deviceModel}:${readyControllersKey(s.controllers)}`,
       broadcast,
     )
     // The debug knob flips hasNativeNavigation on custom firmware.
@@ -5720,28 +5814,33 @@ class LocalMiniappRuntime {
     }
   }
 
-  /** Host user preferences miniapps follow by default (Settings > Appearance). */
+  /** Host user preferences miniapps follow by default: the metric toggle and the phone's own clock format. */
   private currentPreferences(): MiniappPreferences {
     const settings = useSettingsStore.getState()
     return {
       unitSystem: settings.getSetting(SETTINGS.metric_system.key) === true ? "metric" : "imperial",
-      twelveHourTime: settings.getSetting(SETTINGS.twelve_hour_time.key) === true,
+      twelveHourTime: !uses24HourClock(),
     }
   }
 
   private ensurePreferencesWired(): void {
     if (this.preferencesWired) return
     this.preferencesWired = true
-    useSettingsStore.subscribe(
-      (s) =>
-        `${s.getSetting(SETTINGS.metric_system.key) === true}:${s.getSetting(SETTINGS.twelve_hour_time.key) === true}`,
-      () => {
-        const preferences = this.currentPreferences()
-        for (const packageName of this.handshookApps) {
-          this.sendToMiniapp(packageName, {type: MiniappResponseType.PREFERENCES_UPDATE, preferences})
-        }
-      },
-    )
+    let sent = JSON.stringify(this.currentPreferences())
+    const pushIfChanged = () => {
+      const preferences = this.currentPreferences()
+      const key = JSON.stringify(preferences)
+      if (key === sent) return
+      sent = key
+      for (const packageName of this.handshookApps) {
+        this.sendToMiniapp(packageName, {type: MiniappResponseType.PREFERENCES_UPDATE, preferences})
+      }
+    }
+    useSettingsStore.subscribe((s) => s.getSetting(SETTINGS.metric_system.key) === true, pushIfChanged)
+    // The clock format is an OS setting, so it can only have changed while the app was in the background.
+    AppState.addEventListener("change", (state) => {
+      if (state === "active") pushIfChanged()
+    })
   }
 
   private currentCloudStatus(): MiniappCloudStatus {
@@ -5790,6 +5889,8 @@ class LocalMiniappRuntime {
     transcriptionSource?: TranscriptionEventSource,
     /** Deliver to this subscriber alone (the designated dashboard app's gestures while it shows). */
     only?: string,
+    /** Producing cloud/direct subscription; auto results also serve matching language listeners. */
+    transcriptionSubscription?: TranscriptionData["subscription"],
   ): void {
     // Paused miniapps (glasses disconnected) hear no streams. The resume push
     // lands before the reconnect's own glasses_connection event, so nothing
@@ -5801,6 +5902,12 @@ class LocalMiniappRuntime {
     if (transcriptionSource === "local") markTranscriptSourceRecent("local")
     // Translate cloud event names to miniapp protocol stream types
     const normalizedStream = this.normalizeStreamType(streamType)
+    const transcriptionStreams =
+      transcriptionSource === "cloud" && transcriptionSubscription
+        ? [...this.streamSubscribers.keys()].filter((stream) =>
+            matchesTranscriptionSubscription(stream, normalizedStream, transcriptionSubscription),
+          )
+        : undefined
 
     // Passive memory capture happens HERE, before subscriber fan-out, so the
     // timeline reflects what was said around the user regardless of which
@@ -5809,10 +5916,10 @@ class LocalMiniappRuntime {
     // recorded while it was open.)
     this.captureTranscriptToMemory(normalizedStream, data)
 
-    // Collect all subscribers: exact match, plus wildcard matches for streams
-    // that carry a language tag. A miniapp subscribed to "transcription:auto"
-    // should receive any "transcription:<lang>" event (the detected language
-    // is conveyed in the event data, not the stream key).
+    // Auto cloud/direct results serve auto listeners and listeners requesting
+    // the detected language. Specific jobs serve only their own subscription.
+    // Local/legacy events have no producing subscription and retain wildcard
+    // matching so one on-device recognizer can serve auto and explicit listeners.
     //
     // Translation streams support cloud v3's wildcard patterns. Incoming
     // events are keyed `translation:<source>:<target>` and we match against
@@ -5824,11 +5931,13 @@ class LocalMiniappRuntime {
     //   translation:auto            — back-compat alias for *:*
     const matchedSubs = new Set<string>()
     let translationPatterns: string[] = []
-    const exact = this.streamSubscribers.get(normalizedStream)
-    if (exact) for (const p of exact) matchedSubs.add(p)
+    for (const stream of transcriptionStreams ?? [normalizedStream]) {
+      const exact = this.streamSubscribers.get(stream)
+      if (exact) for (const p of exact) matchedSubs.add(p)
+    }
 
     if (normalizedStream.startsWith("transcription:")) {
-      const autoSubs = this.streamSubscribers.get("transcription:auto")
+      const autoSubs = transcriptionStreams ? undefined : this.streamSubscribers.get("transcription:auto")
       if (autoSubs) for (const p of autoSubs) matchedSubs.add(p)
     } else if (normalizedStream.startsWith("translation:")) {
       // translation:<source>:<target> — match each wildcard variant.
@@ -5907,8 +6016,18 @@ class LocalMiniappRuntime {
       // The wearer's touches reach a widget-only app through its host's widget events alone.
       if (normalizedStream === MiniappStreamType.TOUCH_EVENT && miniappWidgetMode.isWidgetOnly(packageName)) continue
       let transcriptionRoute: TranscriptionDeliveryRoute | undefined
+      let outboundStream = normalizedStream
       if (normalizedStream.startsWith("transcription:") && transcriptionSource) {
-        const routes = this.appTranscriptionRoutesForEvent(packageName, normalizedStream)
+        const cloudStreams = transcriptionStreams?.filter(
+          (stream) => this.appTranscriptionRoutesForSubscription(packageName, stream).cloud,
+        )
+        const routes = cloudStreams
+          ? {cloud: cloudStreams.length > 0, forceLocal: false}
+          : this.appTranscriptionRoutesForEvent(packageName, normalizedStream)
+        // Existing miniapp bundles dispatch explicit listeners by their BCP-47
+        // subscription key, while providers detect bare codes (es vs es-ES).
+        // Send one envelope per app, even when it also subscribes to auto.
+        outboundStream = cloudStreams?.find((stream) => stream !== "transcription:auto") ?? normalizedStream
         transcriptionRoute =
           transcriptionDeliveryRoute(transcriptionSource, routes, this.transcriptionPrimaryUp()) ?? undefined
         if (!transcriptionRoute) continue
@@ -5937,7 +6056,7 @@ class LocalMiniappRuntime {
       }
       this.sendToMiniapp(packageName, {
         type: MiniappResponseType.EVENT,
-        streamType: normalizedStream,
+        streamType: outboundStream,
         data: outboundData,
         ...(transcriptionRoute ? {transcriptionRoute} : {}),
       })
@@ -6233,6 +6352,7 @@ class LocalMiniappRuntime {
   }
 
   private miniappIcons = new MiniappIcons()
+  private notificationSeq = 0
 
   private async handleMiniappsList(
     packageName: string,
@@ -6538,7 +6658,12 @@ class LocalMiniappRuntime {
     // and an unplace racing it cannot stop the provider early. A provider the
     // store already runs (a wearer's launch still spawning, say) stays a
     // normal run; the registry alone lags that launch.
-    this.widgetPlacements = placeWidget(this.widgetPlacements, {hostPackageName, providerPackageName: provider, widgetId, box})
+    this.widgetPlacements = placeWidget(this.widgetPlacements, {
+      hostPackageName,
+      providerPackageName: provider,
+      widgetId,
+      box,
+    })
     miniappWidgetMode.setPlaced(provider, true)
     if (!app.running && !miniappRunningRegistry.has(provider)) miniappWidgetMode.setWidgetOnly(provider, true)
     try {
@@ -6575,7 +6700,10 @@ class LocalMiniappRuntime {
     this.widgetPlacements = unplaceWidget(this.widgetPlacements, hostPackageName, provider, target.widgetId)
     this.sendResult(hostPackageName, requestId, true)
     if (!had) return
-    if (this.connectedApps.has(provider) && widgetHostsOf(this.widgetPlacements, provider, target.widgetId).length === 0) {
+    if (
+      this.connectedApps.has(provider) &&
+      widgetHostsOf(this.widgetPlacements, provider, target.widgetId).length === 0
+    ) {
       this.sendWidgetCall(provider, target.widgetId, {kind: "box", box: null})
     }
     await this.settleWidgetProvider(provider)
@@ -6706,9 +6834,7 @@ class LocalMiniappRuntime {
     if (!widget) return
     const view: WidgetView = payload.view === "expanded" ? "expanded" : "card"
     if (view === "expanded" && !widget.expandable) {
-      console.warn(
-        `${LOG_TAG}: dropping expanded frame from ${providerPackageName}/${widgetId}: it does not list EX`,
-      )
+      console.warn(`${LOG_TAG}: dropping expanded frame from ${providerPackageName}/${widgetId}: it does not list EX`)
       return
     }
     const cap =
@@ -6733,8 +6859,7 @@ class LocalMiniappRuntime {
 
   /** A miniapp disconnected: as a host its placements go, as a provider its boxes are forgotten and its frames kept. */
   private onWidgetPartyGone(packageName: string): void {
-    const providersBefore = placedProviders(this.widgetPlacements)
-    this.widgetPlacements = dropWidgetHost(this.widgetPlacements, packageName)
+    this.releaseWidgetHost(packageName)
     this.widgetPlacements = dropWidgetProvider(this.widgetPlacements, packageName)
     miniappWidgetMode.setPlaced(packageName, false)
     miniappWidgetMode.setWidgetOnly(packageName, false)
@@ -6749,8 +6874,13 @@ class LocalMiniappRuntime {
         })
       }
     }
+  }
+
+  public releaseWidgetHost(hostPackageName: string): void {
+    const providersBefore = placedProviders(this.widgetPlacements)
+    this.widgetPlacements = dropWidgetHost(this.widgetPlacements, hostPackageName)
     for (const provider of providersBefore) {
-      if (provider !== packageName) void this.settleWidgetProvider(provider)
+      if (provider !== hostPackageName) void this.settleWidgetProvider(provider)
     }
   }
 

package/src/services/LocalSttFallbackCoordinator.ts

@@ -28,11 +28,7 @@ import sttModelManager from "./STTModelManager"
  * `force_local` (a forced subscription would keep local STT on either way).
  */
 export type LocalSttFallbackReason =
-  | "force_local"
-  | "cloud_disconnected"
-  | "cloud_disabled"
-  | "stt_quota"
-  | "provider_unreachable"
+  "force_local" | "cloud_disconnected" | "cloud_disabled" | "stt_quota" | "provider_unreachable"
 
 class LocalSttFallbackCoordinator {
   private static instance: LocalSttFallbackCoordinator

package/src/services/NativeNavigationService.ts

@@ -61,8 +61,7 @@ class NativeNavigationService {
    */
   public isSupported(): boolean {
     const defaultWearable = useSettingsStore.getState().getSetting(ISLAND_SETTINGS_KEYS.defaultWearable) as
-      | DeviceTypes
-      | undefined
+      DeviceTypes | undefined
     // Effective, not model: custom firmware drops hasNativeNavigation so the
     // miniapp's scene HUD owns the display (see effectiveCapabilities).
     const capabilities = getEffectiveCapabilities(defaultWearable || DeviceTypes.NONE)

package/src/services/NavigationHandlers.ts

@@ -364,7 +364,7 @@ export class NavigationHandlers {
 
   async handleComputeRoute(packageName: string, payload: Record<string, unknown>, requestId?: string): Promise<void> {
     try {
-      // With the user's own Mapbox key (Settings > API Keys), compute
+      // With the user's own Mapbox key (Settings > Privacy > API Keys), compute
       // on-device so routing works without the cloud and bills their account.
       // Without one, go through the v2 cloud maps proxy — org-token Mapbox
       // usage only ever happens cloud-side.
@@ -437,7 +437,7 @@ export class NavigationHandlers {
 
   /**
    * Type-ahead place search. Runs on-device against Mapbox Search Box when the
-   * user saved their own key (Settings > API Keys) — that key exists precisely
+   * user saved their own key (Settings > Privacy > API Keys) — that key exists precisely
    * so search works without the cloud — and falls back to the v2 cloud maps
    * service otherwise. Resolves `{ok: true, suggestions}` — an empty query or no
    * matches is `{ok: true, suggestions: []}`, not an error.

package/src/services/NavigationService.ts

@@ -211,7 +211,7 @@ class NavigationService {
     const mapboxRenderToken = await resolveMapboxRenderToken()
     if (!mapboxRenderToken) {
       const error =
-        "No Mapbox token available — add your key in Settings > API Keys" +
+        "No Mapbox token available — add your key in Settings > Privacy > API Keys" +
         " (required while Glassly Cloud is disabled or unreachable)"
       console.warn(`${LOG_TAG}: start blocked — ${error}`)
       return {ok: false, error}
@@ -329,7 +329,7 @@ class NavigationService {
    * Compute one or more routes without starting a trip.
    *
    * Reached from the miniapp bridge (NavigationHandlers.handleComputeRoute)
-   * when the user has saved their own Mapbox key in Settings > API Keys —
+   * when the user has saved their own Mapbox key in Settings > Privacy > API Keys —
    * that key exists so navigation works without the cloud. Without a user
    * key the bridge uses the v2 cloud maps service, which holds a provider
    * token server-side and caches results. Implemented by
@@ -379,7 +379,7 @@ class NavigationService {
     return !!resolveMapboxAccessToken()
   }
 
-  /** True when the user saved their own Mapbox key in Settings > API Keys. */
+  /** True when the user saved their own Mapbox key in Settings > Privacy > API Keys. */
   public hasUserMapboxKey(): boolean {
     return !!userMapboxApiKey()
   }
@@ -501,7 +501,7 @@ export default navigationService
 // ---------------------------------------------------------------------------
 
 // Routes + Geocoding go DIRECT to Mapbox from the phone process ONLY when the
-// user saved their own key (Settings > API Keys) — "use my account". Without
+// user saved their own key (Settings > Privacy > API Keys) — "use my account". Without
 // one, callers (NavigationHandlers) route these operations through the v2
 // cloud maps proxy instead; the binary ships no baked Mapbox key.
 const MAPBOX_DIRECTIONS_BASE = "https://api.mapbox.com/directions/v5/mapbox"
@@ -532,7 +532,7 @@ function mapboxToken(): string {
 
 /**
  * Phone-side helper: hit the Mapbox Directions API directly with the user's own
- * key (Settings > API Keys). Preferred over the v2 cloud maps service whenever
+ * key (Settings > Privacy > API Keys). Preferred over the v2 cloud maps service whenever
  * that key is set, so routing works without the cloud. Lives here
  * (not in Kotlin) so it's platform-independent across the JS bridge.
  * Returns the SDK-shaped result with primary + alternates.
@@ -583,7 +583,8 @@ async function computeRouteViaRoutesApi(payload: Record<string, unknown>): Promi
   }
 
   const token = mapboxToken()
-  if (!token) return {ok: false, error: "computeRoute: no Mapbox key saved (add yours in Settings > API Keys)"}
+  if (!token)
+    return {ok: false, error: "computeRoute: no Mapbox key saved (add yours in Settings > Privacy > API Keys)"}
 
   // Mapbox path is a semicolon-joined `lng,lat` list: origin then each stop.
   const coords = [`${oLng},${oLat}`, ...stops.map((s) => `${s.lng},${s.lat}`)].join(";")
@@ -739,7 +740,7 @@ function mapboxManeuverToKind(type?: string, modifier?: string): string | undefi
 
 /**
  * Reverse-geocode a coordinate via the Mapbox Geocoding v6 API directly, using
- * the user's own key (Settings > API Keys). Preferred over the v2 cloud maps
+ * the user's own key (Settings > Privacy > API Keys). Preferred over the v2 cloud maps
  * service whenever that key is set, so pin labels work without the cloud.
  *
  * Returns the road/street name (e.g. "Octavia Blvd") plus the full formatted
@@ -767,7 +768,7 @@ async function reverseGeocodeRoadViaGeocodingApi(coord: {lat: number; lng: numbe
   if (!token)
     return {
       ok: false,
-      error: "reverseGeocode: no Mapbox key saved (add yours in Settings > API Keys)",
+      error: "reverseGeocode: no Mapbox key saved (add yours in Settings > Privacy > API Keys)",
     }
   const params = new URLSearchParams({
     longitude: String(coord.lng),
@@ -813,7 +814,7 @@ async function reverseGeocodeRoadViaGeocodingApi(coord: {lat: number; lng: numbe
 
 /**
  * Type-ahead place search straight from the device via Mapbox Search Box,
- * using the user's own key (Settings > API Keys). This is the offline-from-
+ * using the user's own key (Settings > Privacy > API Keys). This is the offline-from-
  * the-cloud path: with a key saved, place search works with no runtime
  * involvement at all.
  *
@@ -840,7 +841,7 @@ async function placeAutocompleteViaSearchBox(
   if (!token) {
     return {
       ok: false,
-      error: "placeAutocomplete: no Mapbox key saved (add yours in Settings > API Keys)",
+      error: "placeAutocomplete: no Mapbox key saved (add yours in Settings > Privacy > API Keys)",
     }
   }
   const params = new URLSearchParams({
@@ -904,7 +905,7 @@ async function placeDetailsViaSearchBox(
   if (!token) {
     return {
       ok: false,
-      error: "placeDetails: no Mapbox key saved (add yours in Settings > API Keys)",
+      error: "placeDetails: no Mapbox key saved (add yours in Settings > Privacy > API Keys)",
     }
   }
   const params = new URLSearchParams({access_token: token, session_token: sessionToken})

package/src/services/PairingIdentity.ts

@@ -40,9 +40,7 @@ import {useSettingsStore, SETTINGS} from "../stores/settings"
 import {DeviceTypes} from "../types"
 
 export type IdentitySnapshot =
-  | {kind: "none"}
-  | {kind: "pending"; model: string}
-  | {kind: "paired"; model: string; name: string; address?: string}
+  {kind: "none"} | {kind: "pending"; model: string} | {kind: "paired"; model: string; name: string; address?: string}
 
 // Identity keys hold model/name strings; anything else (legacy null, a stray
 // non-string) reads as absent, matching native currentDefaultDevice()'s

package/src/services/PhoneCalendarService.ts

@@ -14,9 +14,7 @@ import {
 
 export {PhoneCalendarError} from "./PhoneCalendarHelpers"
 
-type CalendarPermissionStatus = Awaited<
-  ReturnType<typeof Calendar.getCalendarPermissionsAsync>
->["status"]
+type CalendarPermissionStatus = Awaited<ReturnType<typeof Calendar.getCalendarPermissionsAsync>>["status"]
 
 /**
  * expo-calendar reports anything below EventKit full access as not granted,

package/src/services/PhoneNotificationsSync.ts

@@ -1,3 +1,4 @@
+import {notificationAppPayload} from "./notificationAppPayload"
 /**
  * Phone-notifications sync — engine-owned, started by `engine.start()`. Keeps
  * three things in step with settings and the connected glasses, for any host:
@@ -78,7 +79,7 @@ export function getKnownNotificationApps(): NotificationApp[] {
 export function installedNotificationApps(): Promise<
   Array<{packageName: string; appName: string; icon: string | null}>
 > {
-  if (Platform.OS === "android") return CrustModule.getInstalledApps()
+  if (Platform.OS === "android") return CrustModule.getInstalledApps().then(notificationAppPayload)
   if (Platform.OS !== "ios") return Promise.resolve([])
   return Promise.resolve(
     getKnownNotificationApps().map((app) => ({packageName: app.appId, appName: app.displayName, icon: null})),

package/src/services/PhoneStreamCoordinator.ts

@@ -339,8 +339,7 @@ export class PhoneStreamCoordinator {
     // block subsequent start/stop transitions on this coordinator.
     assertGlassesConnected()
     type JoinDecision =
-      | {kind: "join"; entry: ManagedEntry; immediate: ManagedStartResult | null}
-      | {kind: "fresh"; entry: ManagedEntry}
+      {kind: "join"; entry: ManagedEntry; immediate: ManagedStartResult | null} | {kind: "fresh"; entry: ManagedEntry}
 
     const decision = await this.runExclusive(async (): Promise<JoinDecision> => {
       if (this.current && this.current.kind === "unmanaged") {

package/src/services/ProviderKeyValidation.ts

@@ -2,7 +2,7 @@
  * ProviderKeyValidation
  *
  * Cheap validate-before-save probes for the AI/voice provider keys on the
- * Keys screen (Settings > API Keys), mirroring validateMapboxApiKey's shape:
+ * Keys screen (Settings > Privacy > API Keys), mirroring validateMapboxApiKey's shape:
  * each probe hits the provider's cheapest authenticated read endpoint (no
  * metered usage), maps auth failures to `invalid_key`, and maps everything
  * else to `network` so the caller can offer "save anyway".

package/src/services/STTModelManager.ts

@@ -151,12 +151,7 @@ class STTModelManager {
       fileName: "sherpa-onnx-nemo-streaming-fast-conformer-transducer-en-480ms-int8",
       size: 101 * 1024 * 1024,
       type: "transducer",
-      requiredFiles: [
-        "encoder.int8.onnx",
-        "decoder.int8.onnx",
-        "joiner.int8.onnx",
-        "tokens.txt",
-      ],
+      requiredFiles: ["encoder.int8.onnx", "decoder.int8.onnx", "joiner.int8.onnx", "tokens.txt"],
       languageCode: "en-US",
     },
     // NVIDIA Nemotron streaming ASR. These are model choices rather than plain