@mentra/crust 3.4.0-dev.998 → 3.5.0-dev.1238

package/android/build.gradle

@@ -100,13 +100,16 @@ dependencies {
   // APK weight). `:navigation` is the core engine; `:tripdata` carries the
   // banner/maneuver formatting used to label turns.
   // Version pinned to 3.25.0 — re-check https://docs.mapbox.com/android/navigation/releases/
+  // The -ndk27 artifacts are Mapbox's 16 KB page-aligned builds. The
+  // unsuffixed 3.25.0 artifacts still ship 4 KB-aligned native libraries,
+  // which Google Play rejects for 64-bit updates after Feb 1, 2027.
   def isChinaBuild = System.getenv("EXPO_PUBLIC_DEPLOYMENT_REGION") == "china"
   if (isChinaBuild) {
-    compileOnly 'com.mapbox.navigationcore:navigation:3.25.0'
-    compileOnly 'com.mapbox.navigationcore:tripdata:3.25.0'
+    compileOnly 'com.mapbox.navigationcore:navigation-ndk27:3.25.0'
+    compileOnly 'com.mapbox.navigationcore:tripdata-ndk27:3.25.0'
   } else {
-    implementation 'com.mapbox.navigationcore:navigation:3.25.0'
-    implementation 'com.mapbox.navigationcore:tripdata:3.25.0'
+    implementation 'com.mapbox.navigationcore:navigation-ndk27:3.25.0'
+    implementation 'com.mapbox.navigationcore:tripdata-ndk27:3.25.0'
   }
 
   // Required for Java 8+ APIs on minSdk < 26 (was needed by Google Nav SDK;

package/android/src/main/java/com/mentra/crust/CrustModule.kt

@@ -24,6 +24,7 @@ import com.mentra.crust.jsc.InstalledMiniappManifest
 import com.mentra.crust.jsc.JSCPolyfillBridge
 import com.mentra.crust.http.NativeHttpRequests
 import com.mentra.crust.http.nativeHttpFailureCode
+import com.mentra.crust.utils.CanonicalFilePath
 
 class CrustModule : Module() {
   companion object {
@@ -185,6 +186,11 @@ class CrustModule : Module() {
       sendEvent("onChange", mapOf("value" to value))
     }
 
+    // Where a path really is, symlinks resolved; the engine checks miniapp-named paths with it.
+    Function("canonicalFilePath") { path: String ->
+      CanonicalFilePath.of(path)
+    }
+
     AsyncFunction("captureMiniappPreview") Coroutine { viewTag: Int ->
       val activity = appContext.currentActivity ?: error("No activity available for screenshot")
       PixelCopyPreview.capture(activity, viewTag)

package/android/src/main/java/com/mentra/crust/jsc/JSCPolyfillBridge.kt

@@ -138,8 +138,15 @@ object JSCPolyfillBridge {
                 ?: return@register JSCDispatchOutcome.Error("INVALID_ARGS", "ws.open: missing sid")
             val url = req["url"] as? String
                 ?: return@register JSCDispatchOutcome.Error("INVALID_ARGS", "ws.open: missing url")
+            if (!MiniappNetworkPolicy.allowsWebSocket(url)) {
+                return@register JSCDispatchOutcome.Error("UNSUPPORTED_SCHEME", MiniappNetworkPolicy.WEB_SOCKET_REFUSAL)
+            }
             val protocols = (req["protocols"] as? List<*>)?.mapNotNull { it as? String } ?: emptyList()
-            val builder = Request.Builder().url(url)
+            val builder = try {
+                Request.Builder().url(url)
+            } catch (e: IllegalArgumentException) {
+                return@register JSCDispatchOutcome.Error("INVALID_ARGS", "ws.open: ${e.message}")
+            }
             if (protocols.isNotEmpty()) {
                 builder.header("Sec-WebSocket-Protocol", protocols.joinToString(", "))
             }
@@ -247,6 +254,9 @@ object JSCPolyfillBridge {
             if (reqId == null) {
                 return@register JSCDispatchOutcome.Error("INVALID_ARGS", "fetch.request requires reqId (use __mentraSendRequest)")
             }
+            if (!MiniappNetworkPolicy.allowsFetch(url)) {
+                return@register JSCDispatchOutcome.Error("UNSUPPORTED_SCHEME", MiniappNetworkPolicy.FETCH_REFUSAL)
+            }
 
             val method = (req["method"] as? String) ?: "GET"
             val headers = (req["headers"] as? Map<*, *>)?.mapNotNull { (k, v) ->
@@ -260,7 +270,11 @@ object JSCPolyfillBridge {
                     ?: return@register JSCDispatchOutcome.Error("INVALID_ARGS", "fetch.request: bodyBase64 is not base64")
             }
 
-            val request = buildHttpRequest(method, url, headers, bodyString, bodyBytes)
+            val request = try {
+                buildHttpRequest(method, url, headers, bodyString, bodyBytes)
+            } catch (e: IllegalArgumentException) {
+                return@register JSCDispatchOutcome.Error("INVALID_ARGS", "fetch.request: ${e.message}")
+            }
 
             httpClient.newCall(request).enqueue(object : Callback {
                 override fun onFailure(call: Call, e: IOException) {

package/android/src/main/java/com/mentra/crust/jsc/MiniappNetworkPolicy.kt

@@ -0,0 +1,25 @@
+package com.mentra.crust.jsc
+
+/**
+ * Which URLs miniapp code may open through the polyfill's network bridge. Miniapp code is
+ * untrusted, so `fetch` and `WebSocket` reach only the network: never a `file:` URL (the
+ * Mentra App's own files), a `content:` URI or any other local scheme. Mirrors iOS
+ * `MiniappNetworkPolicy.swift` and the polyfill's own check, which miniapp code can skip by
+ * calling the bridge directly.
+ */
+object MiniappNetworkPolicy {
+    /** Leading C0 controls and spaces are skipped, as OkHttp's URL parser does. */
+    private val SCHEME = Regex("^[\\u0000-\\u0020]*([A-Za-z][A-Za-z0-9+.-]*):")
+    private val FETCH_SCHEMES = setOf("http", "https")
+    private val WEB_SOCKET_SCHEMES = setOf("ws", "wss", "http", "https")
+
+    const val FETCH_REFUSAL = "fetch: only http: and https: URLs are allowed"
+    const val WEB_SOCKET_REFUSAL = "ws.open: only ws:, wss:, http: and https: URLs are allowed"
+
+    /** The URL's scheme, lowercased, or null for a URL without one. */
+    fun scheme(url: String): String? = SCHEME.find(url)?.groupValues?.get(1)?.lowercase()
+
+    fun allowsFetch(url: String): Boolean = scheme(url) in FETCH_SCHEMES
+
+    fun allowsWebSocket(url: String): Boolean = scheme(url) in WEB_SOCKET_SCHEMES
+}

package/android/src/main/java/com/mentra/crust/utils/CanonicalFilePath.kt

@@ -0,0 +1,22 @@
+package com.mentra.crust.utils
+
+import java.io.File
+import java.io.IOException
+
+/**
+ * The real location of a path, for checking that a path a miniapp names stays inside the
+ * directory the host allows: absolute, with `.`, `..` and every symlink resolved.
+ */
+object CanonicalFilePath {
+    /** The canonical path of an existing file or directory, or null when there is none. */
+    fun of(path: String): String? {
+        if (!path.startsWith("/") || path.contains('\u0000')) return null
+        return try {
+            File(path).canonicalFile.takeIf { it.exists() }?.path
+        } catch (e: IOException) {
+            null
+        } catch (e: SecurityException) {
+            null
+        }
+    }
+}

package/android/src/test/java/com/mentra/crust/jsc/FetchBridgeTest.kt

@@ -39,6 +39,7 @@ class FetchBridgeTest {
     private val results = LinkedBlockingQueue<Map<*, *>>()
     private lateinit var server: MockWebServer
     private lateinit var runtime: JSCRuntime
+    @Volatile private var redirectTarget = "file:///etc/hosts"
 
     /** A 24 kHz 16-bit sine followed by every byte value: mostly not valid UTF-8. */
     private val pcm = ByteArray(4800 * 2 + 256).also { out ->
@@ -54,6 +55,10 @@ class FetchBridgeTest {
     private val utf8Bytes = byteArrayOf(0xEF.toByte(), 0xBB.toByte(), 0xBF.toByte()) +
         "{\"a\":\"é😀\"}".toByteArray(Charsets.UTF_8) + byteArrayOf(0x00, 0x7F)
 
+    /** Two MB of valid UTF-8 text: arrayBuffer() re-encodes it inside the 32 MB miniapp heap. */
+    private val largeUtf8Text: ByteArray =
+        "héllo 😀 中文 chunk of reply text ".repeat(52_000).toByteArray(Charsets.UTF_8)
+
     // crust's build.gradle ships this file as the runtime's startup.js asset.
     private val polyfill: String by lazy { File("../../jspolyfill/assets/startup.js").readText() }
 
@@ -63,8 +68,10 @@ class FetchBridgeTest {
                 override fun dispatch(request: RecordedRequest): MockResponse = when (request.path) {
                     "/reply.pcm" -> response("application/octet-stream").setBody(Buffer().write(pcm))
                     "/utf8.bin" -> response("application/octet-stream").setBody(Buffer().write(utf8Bytes))
+                    "/large.txt" -> response("text/plain").setBody(Buffer().write(largeUtf8Text))
                     "/data.json" -> response("application/json").setBody("{\"message\":\"héllo 😀 中文\"}")
                     "/upload" -> response("text/plain").setBody("ok")
+                    "/to-file" -> MockResponse().setResponseCode(302).setHeader("Location", redirectTarget)
                     else -> MockResponse().setResponseCode(404)
                 }
             }
@@ -108,6 +115,21 @@ class FetchBridgeTest {
         assertArrayEquals(utf8Bytes, bytes(result["bytes"]))
     }
 
+    @Test fun `arrayBuffer re-encodes a large UTF-8 body within the miniapp heap`() {
+        val result = runMiniapp(
+            """
+            const bytes = new Uint8Array(await (await fetch(BASE + "/large.txt")).arrayBuffer())
+            let sum = 0
+            for (let i = 0; i < bytes.length; i++) sum = (sum * 31 + bytes[i]) >>> 0
+            return {length: bytes.length, sum}
+            """,
+        )
+        var sum = 0L
+        for (byte in largeUtf8Text) sum = (sum * 31 + (byte.toInt() and 0xFF)) and 0xFFFFFFFFL
+        assertEquals(largeUtf8Text.size, (result["length"] as Number).toInt())
+        assertEquals(sum, (result["sum"] as Number).toLong())
+    }
+
     @Test fun `responses are sent as text only when that text re-encodes to the same bytes`() {
         val text = JSCPolyfillBridge.fetchResult(responseWith(utf8Bytes))
         assertEquals(String(utf8Bytes, Charsets.UTF_8), text.getString("body"))
@@ -169,6 +191,62 @@ class FetchBridgeTest {
         assertEquals("application/json; charset=utf-8", upload.getHeader("Content-Type"))
     }
 
+    /**
+     * Miniapp code is untrusted and can call the bridge without the polyfill's own check, so
+     * native must refuse a local URL itself. A file: URL would read the Mentra App's files.
+     */
+    @Test fun `native fetch and WebSocket refuse local URLs even when the polyfill is skipped`() {
+        val secret = File.createTempFile("mentra-credentials", ".txt").apply {
+            writeText("refresh-token-that-must-not-leak")
+            deleteOnExit()
+        }
+        val urls = listOf(secret.toURI().toString(), "FILE://${secret.absolutePath}", "content://com.mentra.mentra.fileprovider/x", "data:text/plain,hi")
+        val result = runMiniapp(
+            """
+            const outcomes = []
+            for (const url of ${org.json.JSONArray(urls)}) {
+              outcomes.push(await __mentraSendRequest("fetch", "request", [{url, method: "GET", headers: {}}]).then(
+                (r) => ({read: String(r && (r.body || r.bodyBase64))}),
+                (e) => ({error: String(e && (e.message || e.code))}),
+              ))
+              let opened = false
+              try {
+                __dispatch("ws", "open", JSON.stringify([{sid: "s-" + outcomes.length, url, protocols: []}]))
+                opened = true
+              } catch (e) {
+                outcomes.push({error: String(e && e.message)})
+              }
+              if (opened) outcomes.push({read: "ws opened"})
+            }
+            return {outcomes}
+            """,
+        )
+        val outcomes = result["outcomes"] as List<*>
+        assertEquals(urls.size * 2, outcomes.size)
+        for (outcome in outcomes) {
+            val map = outcome as Map<*, *>
+            assertNull("a local URL was read: $map", map["read"])
+            assertTrue("unexpected refusal: $map", (map["error"] as String).contains("URLs are allowed"))
+        }
+    }
+
+    /** OkHttp follows a redirect only to another http(s) URL, so a 302 to a file: URL reads nothing. */
+    @Test fun `a redirect to a file URL is not followed`() {
+        val secret = File.createTempFile("mentra-credentials", ".txt").apply {
+            writeText("refresh-token-that-must-not-leak")
+            deleteOnExit()
+        }
+        redirectTarget = secret.toURI().toString()
+        val result = runMiniapp(
+            """
+            const response = await fetch(BASE + "/to-file")
+            return {status: response.status, text: await response.text()}
+            """,
+        )
+        assertEquals(302, result["status"])
+        assertFalse((result["text"] as String).contains("refresh-token"))
+    }
+
     private fun runMiniapp(body: String): Map<*, *> {
         val script =
             """

package/android/src/test/java/com/mentra/crust/jsc/MiniappNetworkPolicyTest.kt

@@ -0,0 +1,45 @@
+package com.mentra.crust.jsc
+
+import org.junit.Assert.assertEquals
+import org.junit.Assert.assertFalse
+import org.junit.Assert.assertNull
+import org.junit.Assert.assertTrue
+import org.junit.Test
+
+class MiniappNetworkPolicyTest {
+    @Test fun `fetch reaches only http and https`() {
+        for (url in listOf("http://example.com", "https://example.com/a?b", "HTTPS://EXAMPLE.COM", " https://example.com")) {
+            assertTrue(url, MiniappNetworkPolicy.allowsFetch(url))
+        }
+        for (url in listOf(
+            "file:///data/data/com.mentra.mentra/files/mmkv/mmkv.default",
+            "FILE:///etc/hosts",
+            "\tfile:///etc/hosts",
+            "content://com.mentra.mentra.fileprovider/cache/x",
+            "data:text/plain,hi",
+            "jar:file:///x!/y",
+            "ws://example.com",
+            "/data/data/com.mentra.mentra/files",
+            "relative/path",
+            "",
+        )) {
+            assertFalse(url, MiniappNetworkPolicy.allowsFetch(url))
+        }
+    }
+
+    @Test fun `WebSockets reach only ws, wss, http and https`() {
+        for (url in listOf("ws://10.0.0.2:9000", "WSS://example.com/s", "http://example.com", "https://example.com")) {
+            assertTrue(url, MiniappNetworkPolicy.allowsWebSocket(url))
+        }
+        for (url in listOf("file:///etc/hosts", "content://x/y", "data:,x", "/socket")) {
+            assertFalse(url, MiniappNetworkPolicy.allowsWebSocket(url))
+        }
+    }
+
+    @Test fun `scheme is lowercased and absent for a relative URL`() {
+        assertEquals("file", MiniappNetworkPolicy.scheme("FiLe:///x"))
+        assertEquals("https", MiniappNetworkPolicy.scheme("\u0000 https://x"))
+        assertNull(MiniappNetworkPolicy.scheme("/x"))
+        assertNull(MiniappNetworkPolicy.scheme("1http://x"))
+    }
+}

package/android/src/test/java/com/mentra/crust/utils/CanonicalFilePathTest.kt

@@ -0,0 +1,39 @@
+package com.mentra.crust.utils
+
+import java.io.File
+import java.nio.file.Files
+import org.junit.After
+import org.junit.Assert.assertEquals
+import org.junit.Assert.assertNull
+import org.junit.Before
+import org.junit.Test
+
+class CanonicalFilePathTest {
+    private lateinit var root: File
+
+    @Before fun setUp() {
+        root = Files.createTempDirectory("canonical-path-test").toFile().canonicalFile
+    }
+
+    @After fun tearDown() {
+        root.deleteRecursively()
+    }
+
+    @Test fun `resolves dot segments and symlinks to the real location`() {
+        val sandbox = File(root, "sandbox").apply { mkdirs() }
+        val outside = File(root, "outside.txt").apply { writeText("secret") }
+        val link = File(sandbox, "link.txt")
+        Files.createSymbolicLink(link.toPath(), outside.toPath())
+
+        assertEquals(outside.path, CanonicalFilePath.of(link.path))
+        assertEquals(outside.path, CanonicalFilePath.of("${sandbox.path}/../outside.txt"))
+        assertEquals(sandbox.path, CanonicalFilePath.of("${sandbox.path}/./"))
+    }
+
+    @Test fun `is null for a missing, relative or malformed path`() {
+        assertNull(CanonicalFilePath.of("${root.path}/missing.txt"))
+        assertNull(CanonicalFilePath.of("relative/path"))
+        assertNull(CanonicalFilePath.of("${root.path}/a\u0000b"))
+        assertNull(CanonicalFilePath.of(""))
+    }
+}

package/build/CrustModule.d.ts

@@ -9,6 +9,12 @@ declare class CrustModule extends NativeModule<CrustModuleEvents> {
     getPermissionStatus(requestId: string): Promise<AppPermissionReceipt>;
     PI: number;
     hello(): string;
+    /**
+     * The canonical path of an existing file or directory: absolute, with `.`,
+     * `..` and every symlink resolved. Null when nothing is there. The engine
+     * checks that a path a miniapp names stays inside the directory it may use.
+     */
+    canonicalFilePath(path: string): string | null;
     setValueAsync(value: string): Promise<void>;
     /** Android: copy the displayed view's window pixels to a temporary JPEG URI. */
     captureMiniappPreview(viewTag: number): Promise<string>;

package/build/CrustModule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CrustModule.d.ts","sourceRoot":"","sources":["../src/CrustModule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAsB,MAAM,MAAM,CAAA;AAEtD,OAAO,EAAC,oBAAoB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,YAAY,EAAC,MAAM,eAAe,CAAA;AAE1G,OAAO,OAAO,WAAY,SAAQ,YAAY,CAAC,iBAAiB,CAAC;IAC/D,mEAAmE;IACnE,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;IAChC,4EAA4E;IAC5E,mBAAmB,CAAC,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,qBAAqB,CAAC;IACpE,2EAA2E;IAC3E,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IACrE,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,IAAI,MAAM;IACf,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3C,gFAAgF;IAChF,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IACvD,iBAAiB,CACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAC,CAAC;IAC/F,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACzD,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAElD;;;;;;;;OAQG;IACH,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAGnG,qBAAqB,CAAC,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IACnF,gBAAgB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAC3C,gCAAgC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAC3D,iCAAiC,IAAI,OAAO,CAAC,OAAO,CAAC;IACrD,2BAA2B,IAAI,OAAO,CAAC,OAAO,CAAC;IAC/C,gCAAgC,IAAI,OAAO,CAAC,OAAO,CAAC;IACpD,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAE/B,0BAA0B,IAAI,OAAO,CAAC,OAAO,CAAC;IAC9C,yBAAyB,IAAI,OAAO,CAAC,OAAO,CAAC;IAC7C,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC;IACxC,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IACnC,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC;IAGzC,mBAAmB,CACjB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE;QACP,cAAc,CAAC,EAAE,OAAO,CAAA;QACxB,eAAe,CAAC,EAAE,OAAO,CAAA;KAC1B,GACA,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAA;QAChB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC;IAEF,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAA;QAChB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC;IAEF,cAAc,CACZ,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAA;QAChB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC;IAGF,qBAAqB,CACnB,QAAQ,EAAE,MAAM,EAChB,iBAAiB,CAAC,EAAE,MAAM,EAC1B,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAA;QAChB,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC;IAGF,eAAe,CACb,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,iHAAiH;QACjH,KAAK,CAAC,EAAE,KAAK,CAAC;YAAC,GAAG,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAC,CAAC,CAAA;QACzC,2EAA2E;QAC3E,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,KAAK,CAAC,EAAE;YAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;YAAC,KAAK,CAAC,EAAE,OAAO,CAAC;YAAC,OAAO,CAAC,EAAE,OAAO,CAAA;SAAC,CAAA;QAChE,yFAAyF;QACzF,uBAAuB,CAAC,EAAE,MAAM,CAAA;KACjC,GACA,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IACzC,cAAc,IAAI,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IAExD;;;;;OAKG;IACH,2BAA2B,IAAI,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IAExF;;;;;OAKG;IACH,yBAAyB,IAAI,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IAEnE;;;OAGG;IACH,iBAAiB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IAEhF;;;;;;;OAOG;IACH,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IAEhF;;;;;;OAMG;IACH,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IAG1E,YAAY,IAAI,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IACtD,WAAW,IAAI,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IAGrD;;;;;;;;OAQG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAC/F,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IACvE,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAChD;;;;;OAKG;IACH,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3F,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9E,qEAAqE;IACrE,qBAAqB,IAAI,MAAM,EAAE;IACjC,0DAA0D;IAC1D,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAC3D;;;;;OAKG;IACH,0BAA0B,IAAI,MAAM;CACrC;;AAGD,wBAAwD"}
+{"version":3,"file":"CrustModule.d.ts","sourceRoot":"","sources":["../src/CrustModule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAsB,MAAM,MAAM,CAAA;AAEtD,OAAO,EAAC,oBAAoB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,YAAY,EAAC,MAAM,eAAe,CAAA;AAE1G,OAAO,OAAO,WAAY,SAAQ,YAAY,CAAC,iBAAiB,CAAC;IAC/D,mEAAmE;IACnE,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;IAChC,4EAA4E;IAC5E,mBAAmB,CAAC,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,qBAAqB,CAAC;IACpE,2EAA2E;IAC3E,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IACrE,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,IAAI,MAAM;IACf;;;;OAIG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAC9C,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3C,gFAAgF;IAChF,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IACvD,iBAAiB,CACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAC,CAAC;IAC/F,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACzD,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAElD;;;;;;;;OAQG;IACH,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAGnG,qBAAqB,CAAC,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IACnF,gBAAgB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAC3C,gCAAgC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAC3D,iCAAiC,IAAI,OAAO,CAAC,OAAO,CAAC;IACrD,2BAA2B,IAAI,OAAO,CAAC,OAAO,CAAC;IAC/C,gCAAgC,IAAI,OAAO,CAAC,OAAO,CAAC;IACpD,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAE/B,0BAA0B,IAAI,OAAO,CAAC,OAAO,CAAC;IAC9C,yBAAyB,IAAI,OAAO,CAAC,OAAO,CAAC;IAC7C,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC;IACxC,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IACnC,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC;IAGzC,mBAAmB,CACjB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE;QACP,cAAc,CAAC,EAAE,OAAO,CAAA;QACxB,eAAe,CAAC,EAAE,OAAO,CAAA;KAC1B,GACA,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAA;QAChB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC;IAEF,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAA;QAChB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC;IAEF,cAAc,CACZ,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAA;QAChB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC;IAGF,qBAAqB,CACnB,QAAQ,EAAE,MAAM,EAChB,iBAAiB,CAAC,EAAE,MAAM,EAC1B,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAA;QAChB,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC;IAGF,eAAe,CACb,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,iHAAiH;QACjH,KAAK,CAAC,EAAE,KAAK,CAAC;YAAC,GAAG,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAC,CAAC,CAAA;QACzC,2EAA2E;QAC3E,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,KAAK,CAAC,EAAE;YAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;YAAC,KAAK,CAAC,EAAE,OAAO,CAAC;YAAC,OAAO,CAAC,EAAE,OAAO,CAAA;SAAC,CAAA;QAChE,yFAAyF;QACzF,uBAAuB,CAAC,EAAE,MAAM,CAAA;KACjC,GACA,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IACzC,cAAc,IAAI,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IAExD;;;;;OAKG;IACH,2BAA2B,IAAI,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IAExF;;;;;OAKG;IACH,yBAAyB,IAAI,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IAEnE;;;OAGG;IACH,iBAAiB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IAEhF;;;;;;;OAOG;IACH,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IAEhF;;;;;;OAMG;IACH,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IAG1E,YAAY,IAAI,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IACtD,WAAW,IAAI,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;IAGrD;;;;;;;;OAQG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAC/F,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IACvE,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAChD;;;;;OAKG;IACH,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3F,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9E,qEAAqE;IACrE,qBAAqB,IAAI,MAAM,EAAE;IACjC,0DAA0D;IAC1D,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAC3D;;;;;OAKG;IACH,0BAA0B,IAAI,MAAM;CACrC;;AAGD,wBAAwD"}

package/build/CrustModule.js.map

@@ -1 +1 @@
-{"version":3,"file":"CrustModule.js","sourceRoot":"","sources":["../src/CrustModule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,mBAAmB,EAAC,MAAM,MAAM,CAAA;AAwMtD,yDAAyD;AACzD,eAAe,mBAAmB,CAAc,OAAO,CAAC,CAAA","sourcesContent":["import {NativeModule, requireNativeModule} from \"expo\"\n\nimport {AppPermissionReceipt, AppPermissionSnapshot, CrustModuleEvents, InstalledApp} from \"./Crust.types\"\n\ndeclare class CrustModule extends NativeModule<CrustModuleEvents> {\n  /** True for the native iOS app running on an Apple Silicon Mac. */\n  readonly isIOSAppOnMac?: boolean\n  /** iOS: passive actual-app authorization status; never requests consent. */\n  getPermissionStatus(requestId: null): Promise<AppPermissionSnapshot>\n  /** iOS: a nonce publishes fresh status at the fixed managed-cache path. */\n  getPermissionStatus(requestId: string): Promise<AppPermissionReceipt>\n  PI: number\n  hello(): string\n  setValueAsync(value: string): Promise<void>\n  /** Android: copy the displayed view's window pixels to a temporary JPEG URI. */\n  captureMiniappPreview(viewTag: number): Promise<string>\n  nativeHttpRequest(\n    requestId: string,\n    method: string,\n    url: string,\n    headers: Record<string, string>,\n    body?: string | null,\n  ): Promise<{status: number; statusText: string; headers: Record<string, string>; body: string}>\n  cancelNativeHttpRequest(requestId: string): Promise<void>\n  showAVRoutePicker(tintColor?: string | null): void\n\n  /**\n   * iOS: configure `preferredScreenEdgesDeferringSystemGestures`. When an\n   * edge is deferred, the first swipe across that edge is consumed by the\n   * app and the system gesture (Control Center, Notification Center, Home\n   * indicator) only fires on a second swipe — i.e. a two-swipe-to-exit UX.\n   *\n   * Pass `[]` to restore default behavior. Android: no-op (Android has no\n   * per-app equivalent; system gestures are configured at the OS level).\n   */\n  setDeferredSystemGestures(edges: Array<\"top\" | \"bottom\" | \"left\" | \"right\" | \"all\">): Promise<void>\n\n  // MentraOS Notification Commands\n  setNotificationConfig(listenerEnabled: boolean, blocklist: string[]): Promise<void>\n  getInstalledApps(): Promise<InstalledApp[]>\n  getInstalledAppsForNotifications(): Promise<InstalledApp[]>\n  hasNotificationListenerPermission(): Promise<boolean>\n  refreshNotificationListener(): Promise<boolean>\n  openNotificationListenerSettings(): Promise<boolean>\n  isBetaBuild(): Promise<boolean>\n  // location services commands\n  showLocationServicesDialog(): Promise<boolean>\n  isLocationServicesEnabled(): Promise<boolean>\n  openLocationSettings(): Promise<boolean>\n  openAppSettings(): Promise<boolean>\n  openBluetoothSettings(): Promise<boolean>\n\n  // Image Processing Commands\n  processGalleryImage(\n    inputPath: string,\n    outputPath: string,\n    options: {\n      lensCorrection?: boolean\n      colorCorrection?: boolean\n    },\n  ): Promise<{\n    success: boolean\n    outputPath?: string\n    processingTimeMs?: number\n    error?: string\n  }>\n\n  mergeHdrBrackets(\n    underPath: string,\n    normalPath: string,\n    overPath: string,\n    outputPath: string,\n  ): Promise<{\n    success: boolean\n    outputPath?: string\n    processingTimeMs?: number\n    error?: string\n  }>\n\n  stabilizeVideo(\n    inputPath: string,\n    imuPath: string,\n    outputPath: string,\n  ): Promise<{\n    success: boolean\n    outputPath?: string\n    processingTimeMs?: number\n    error?: string\n  }>\n\n  // Media Library Commands\n  saveToGalleryWithDate(\n    filePath: string,\n    captureTimeMillis?: number,\n    displayName?: string,\n  ): Promise<{\n    success: boolean\n    uri?: string\n    identifier?: string\n    existing?: boolean\n    error?: string\n  }>\n\n  // Navigation (Android only — iOS stubs return error)\n  startNavigation(\n    lat: number,\n    lng: number,\n    options?: {\n      simulate?: boolean\n      speedMultiplier?: number\n      /** Optional multi-stop list. When present takes precedence over lat/lng. Last entry is the final destination. */\n      stops?: Array<{lat: number; lng: number}>\n      /** \"walking\" | \"driving\" | \"cycling\" | \"two_wheeler\". Defaults driving. */\n      mode?: string\n      avoid?: {highways?: boolean; tolls?: boolean; ferries?: boolean}\n      /** Force a reroute when the user is more than N meters past a pivot they didn't take. */\n      missedTurnRerouteMeters?: number\n    },\n  ): Promise<{ok: boolean; error?: string}>\n  stopNavigation(): Promise<{ok: boolean; error?: string}>\n\n  /**\n   * Show the Google Nav SDK Terms & Conditions dialog if not already\n   * accepted. Idempotent — resolves immediately with `{accepted: true}`\n   * when the user has already accepted (cached in-process / on-disk /\n   * inside the SDK).\n   */\n  requestNavigationPermission(): Promise<{ok: boolean; accepted: boolean; error?: string}>\n\n  /**\n   * Dev-only: clear cached T&C acceptance (SDK flag + on-disk pref +\n   * in-process flag) so the next requestNavigationPermission() re-shows\n   * the dialog. Android only; iOS returns {ok: false, error: \"not\n   * supported on iOS\"}.\n   */\n  resetNavigationPermission(): Promise<{ok: boolean; error?: string}>\n\n  /**\n   * Dev-only: nudge the simulated user position ~offsetMeters perpendicular\n   * to the route so the Nav SDK reroutes. Default 20m. Android only.\n   */\n  simulateDeviation(offsetMeters?: number): Promise<{ok: boolean; error?: string}>\n\n  /**\n   * Dev toggle. When enabled, the native NavigationManager shifts every\n   * reported location ~8m perpendicular to the route bearing, simulating\n   * a pedestrian walking on the wrong sidewalk. Only meaningful in\n   * simulate mode; lets us verify the SDK's along-path pivot trigger\n   * fires even when the user never crosses the 7m pivot point radius.\n   * Android-only today; iOS is a no-op stub.\n   */\n  setWrongSidewalkOffset(enabled: boolean): Promise<{ok: boolean; error?: string}>\n\n  /**\n   * Dev toggle. When enabled, the native NavigationManager takes over\n   * from the Google simulator and walks the user along a modified\n   * polyline that omits crossing micro-steps — reproducing the\n   * wrong-sidewalk-then-missed-the-turn scenario. Android-only today;\n   * iOS is a no-op stub.\n   */\n  setSkipCrossings(enabled: boolean): Promise<{ok: boolean; error?: string}>\n\n  // Heading / compass (Android only)\n  startHeading(): Promise<{ok: boolean; error?: string}>\n  stopHeading(): Promise<{ok: boolean; error?: string}>\n\n  // MentraJS Runtime — per-miniapp JSContext lifecycle.\n  /**\n   * Spawn a per-miniapp JS context. Re-spawn is allowed: a live context\n   * with the same packageName is killed first. Returns true if the\n   * polyfill bundle + miniapp source evaluated without throwing.\n   *\n   * The polyfill bundle is `mobile/modules/mentrajs-runtime/dist/startup.js`\n   * (shipped inside the host binary). It installs window-style globals\n   * (console, timers, fetch, localStorage, crypto) atop the JSC runtime.\n   */\n  mentraJsSpawn(packageName: string, polyfillBundle: string, miniappJs: string): Promise<boolean>\n  mentraJsEvaluate(packageName: string, source: string): Promise<unknown>\n  mentraJsKill(packageName: string): Promise<void>\n  /**\n   * Push a `{kind: \"event\"|\"response\", …}` envelope into the named\n   * context's globalThis.__deliver. Returns when the underlying\n   * evaluateScript completes (the JS handler runs synchronously on the\n   * context's queue).\n   */\n  mentraJsDispatchToJs(packageName: string, envelope: Record<string, unknown>): Promise<void>\n  mentraJsSetManifest(packageName: string, permissions: string[]): Promise<void>\n  /** Diagnostic — returns the packageNames of every live JSContext. */\n  mentraJsAlivePackages(): string[]\n  /** Diagnostic — force a GC cycle on the named context. */\n  mentraJsDebugForceGC(packageName: string): Promise<boolean>\n  /**\n   * Read the bundled MentraJS polyfill (startup.js) shipped inside the\n   * host binary. Synchronous — host RN code calls this once on app boot\n   * and caches the string, then passes it to every mentraJsSpawn so\n   * every JSContext starts with the same polyfill ABI.\n   */\n  mentraJsLoadPolyfillBundle(): string\n}\n\n// This call loads the native module object from the JSI.\nexport default requireNativeModule<CrustModule>(\"Crust\")\n"]}
+{"version":3,"file":"CrustModule.js","sourceRoot":"","sources":["../src/CrustModule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,mBAAmB,EAAC,MAAM,MAAM,CAAA;AA8MtD,yDAAyD;AACzD,eAAe,mBAAmB,CAAc,OAAO,CAAC,CAAA","sourcesContent":["import {NativeModule, requireNativeModule} from \"expo\"\n\nimport {AppPermissionReceipt, AppPermissionSnapshot, CrustModuleEvents, InstalledApp} from \"./Crust.types\"\n\ndeclare class CrustModule extends NativeModule<CrustModuleEvents> {\n  /** True for the native iOS app running on an Apple Silicon Mac. */\n  readonly isIOSAppOnMac?: boolean\n  /** iOS: passive actual-app authorization status; never requests consent. */\n  getPermissionStatus(requestId: null): Promise<AppPermissionSnapshot>\n  /** iOS: a nonce publishes fresh status at the fixed managed-cache path. */\n  getPermissionStatus(requestId: string): Promise<AppPermissionReceipt>\n  PI: number\n  hello(): string\n  /**\n   * The canonical path of an existing file or directory: absolute, with `.`,\n   * `..` and every symlink resolved. Null when nothing is there. The engine\n   * checks that a path a miniapp names stays inside the directory it may use.\n   */\n  canonicalFilePath(path: string): string | null\n  setValueAsync(value: string): Promise<void>\n  /** Android: copy the displayed view's window pixels to a temporary JPEG URI. */\n  captureMiniappPreview(viewTag: number): Promise<string>\n  nativeHttpRequest(\n    requestId: string,\n    method: string,\n    url: string,\n    headers: Record<string, string>,\n    body?: string | null,\n  ): Promise<{status: number; statusText: string; headers: Record<string, string>; body: string}>\n  cancelNativeHttpRequest(requestId: string): Promise<void>\n  showAVRoutePicker(tintColor?: string | null): void\n\n  /**\n   * iOS: configure `preferredScreenEdgesDeferringSystemGestures`. When an\n   * edge is deferred, the first swipe across that edge is consumed by the\n   * app and the system gesture (Control Center, Notification Center, Home\n   * indicator) only fires on a second swipe — i.e. a two-swipe-to-exit UX.\n   *\n   * Pass `[]` to restore default behavior. Android: no-op (Android has no\n   * per-app equivalent; system gestures are configured at the OS level).\n   */\n  setDeferredSystemGestures(edges: Array<\"top\" | \"bottom\" | \"left\" | \"right\" | \"all\">): Promise<void>\n\n  // MentraOS Notification Commands\n  setNotificationConfig(listenerEnabled: boolean, blocklist: string[]): Promise<void>\n  getInstalledApps(): Promise<InstalledApp[]>\n  getInstalledAppsForNotifications(): Promise<InstalledApp[]>\n  hasNotificationListenerPermission(): Promise<boolean>\n  refreshNotificationListener(): Promise<boolean>\n  openNotificationListenerSettings(): Promise<boolean>\n  isBetaBuild(): Promise<boolean>\n  // location services commands\n  showLocationServicesDialog(): Promise<boolean>\n  isLocationServicesEnabled(): Promise<boolean>\n  openLocationSettings(): Promise<boolean>\n  openAppSettings(): Promise<boolean>\n  openBluetoothSettings(): Promise<boolean>\n\n  // Image Processing Commands\n  processGalleryImage(\n    inputPath: string,\n    outputPath: string,\n    options: {\n      lensCorrection?: boolean\n      colorCorrection?: boolean\n    },\n  ): Promise<{\n    success: boolean\n    outputPath?: string\n    processingTimeMs?: number\n    error?: string\n  }>\n\n  mergeHdrBrackets(\n    underPath: string,\n    normalPath: string,\n    overPath: string,\n    outputPath: string,\n  ): Promise<{\n    success: boolean\n    outputPath?: string\n    processingTimeMs?: number\n    error?: string\n  }>\n\n  stabilizeVideo(\n    inputPath: string,\n    imuPath: string,\n    outputPath: string,\n  ): Promise<{\n    success: boolean\n    outputPath?: string\n    processingTimeMs?: number\n    error?: string\n  }>\n\n  // Media Library Commands\n  saveToGalleryWithDate(\n    filePath: string,\n    captureTimeMillis?: number,\n    displayName?: string,\n  ): Promise<{\n    success: boolean\n    uri?: string\n    identifier?: string\n    existing?: boolean\n    error?: string\n  }>\n\n  // Navigation (Android only — iOS stubs return error)\n  startNavigation(\n    lat: number,\n    lng: number,\n    options?: {\n      simulate?: boolean\n      speedMultiplier?: number\n      /** Optional multi-stop list. When present takes precedence over lat/lng. Last entry is the final destination. */\n      stops?: Array<{lat: number; lng: number}>\n      /** \"walking\" | \"driving\" | \"cycling\" | \"two_wheeler\". Defaults driving. */\n      mode?: string\n      avoid?: {highways?: boolean; tolls?: boolean; ferries?: boolean}\n      /** Force a reroute when the user is more than N meters past a pivot they didn't take. */\n      missedTurnRerouteMeters?: number\n    },\n  ): Promise<{ok: boolean; error?: string}>\n  stopNavigation(): Promise<{ok: boolean; error?: string}>\n\n  /**\n   * Show the Google Nav SDK Terms & Conditions dialog if not already\n   * accepted. Idempotent — resolves immediately with `{accepted: true}`\n   * when the user has already accepted (cached in-process / on-disk /\n   * inside the SDK).\n   */\n  requestNavigationPermission(): Promise<{ok: boolean; accepted: boolean; error?: string}>\n\n  /**\n   * Dev-only: clear cached T&C acceptance (SDK flag + on-disk pref +\n   * in-process flag) so the next requestNavigationPermission() re-shows\n   * the dialog. Android only; iOS returns {ok: false, error: \"not\n   * supported on iOS\"}.\n   */\n  resetNavigationPermission(): Promise<{ok: boolean; error?: string}>\n\n  /**\n   * Dev-only: nudge the simulated user position ~offsetMeters perpendicular\n   * to the route so the Nav SDK reroutes. Default 20m. Android only.\n   */\n  simulateDeviation(offsetMeters?: number): Promise<{ok: boolean; error?: string}>\n\n  /**\n   * Dev toggle. When enabled, the native NavigationManager shifts every\n   * reported location ~8m perpendicular to the route bearing, simulating\n   * a pedestrian walking on the wrong sidewalk. Only meaningful in\n   * simulate mode; lets us verify the SDK's along-path pivot trigger\n   * fires even when the user never crosses the 7m pivot point radius.\n   * Android-only today; iOS is a no-op stub.\n   */\n  setWrongSidewalkOffset(enabled: boolean): Promise<{ok: boolean; error?: string}>\n\n  /**\n   * Dev toggle. When enabled, the native NavigationManager takes over\n   * from the Google simulator and walks the user along a modified\n   * polyline that omits crossing micro-steps — reproducing the\n   * wrong-sidewalk-then-missed-the-turn scenario. Android-only today;\n   * iOS is a no-op stub.\n   */\n  setSkipCrossings(enabled: boolean): Promise<{ok: boolean; error?: string}>\n\n  // Heading / compass (Android only)\n  startHeading(): Promise<{ok: boolean; error?: string}>\n  stopHeading(): Promise<{ok: boolean; error?: string}>\n\n  // MentraJS Runtime — per-miniapp JSContext lifecycle.\n  /**\n   * Spawn a per-miniapp JS context. Re-spawn is allowed: a live context\n   * with the same packageName is killed first. Returns true if the\n   * polyfill bundle + miniapp source evaluated without throwing.\n   *\n   * The polyfill bundle is `mobile/modules/mentrajs-runtime/dist/startup.js`\n   * (shipped inside the host binary). It installs window-style globals\n   * (console, timers, fetch, localStorage, crypto) atop the JSC runtime.\n   */\n  mentraJsSpawn(packageName: string, polyfillBundle: string, miniappJs: string): Promise<boolean>\n  mentraJsEvaluate(packageName: string, source: string): Promise<unknown>\n  mentraJsKill(packageName: string): Promise<void>\n  /**\n   * Push a `{kind: \"event\"|\"response\", …}` envelope into the named\n   * context's globalThis.__deliver. Returns when the underlying\n   * evaluateScript completes (the JS handler runs synchronously on the\n   * context's queue).\n   */\n  mentraJsDispatchToJs(packageName: string, envelope: Record<string, unknown>): Promise<void>\n  mentraJsSetManifest(packageName: string, permissions: string[]): Promise<void>\n  /** Diagnostic — returns the packageNames of every live JSContext. */\n  mentraJsAlivePackages(): string[]\n  /** Diagnostic — force a GC cycle on the named context. */\n  mentraJsDebugForceGC(packageName: string): Promise<boolean>\n  /**\n   * Read the bundled MentraJS polyfill (startup.js) shipped inside the\n   * host binary. Synchronous — host RN code calls this once on app boot\n   * and caches the string, then passes it to every mentraJsSpawn so\n   * every JSContext starts with the same polyfill ABI.\n   */\n  mentraJsLoadPolyfillBundle(): string\n}\n\n// This call loads the native module object from the JSI.\nexport default requireNativeModule<CrustModule>(\"Crust\")\n"]}

package/build/CrustModule.web.d.ts

@@ -13,6 +13,8 @@ declare class CrustModule extends NativeModule<CrustModuleEvents> {
         body: string;
     }>;
     cancelNativeHttpRequest(requestId: string): Promise<void>;
+    /** The web has no local files to resolve. */
+    canonicalFilePath(_path: string): string | null;
     hello(): string;
     showAVRoutePicker(_tintColor?: string | null): void;
     setDeferredSystemGestures(_edges: string[]): Promise<void>;

package/build/CrustModule.web.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CrustModule.web.d.ts","sourceRoot":"","sources":["../src/CrustModule.web.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,YAAY,EAAC,MAAM,MAAM,CAAA;AAEpD,OAAO,EAAC,iBAAiB,EAAC,MAAM,eAAe,CAAA;AAE/C,cAAM,WAAY,SAAQ,YAAY,CAAC,iBAAiB,CAAC;IACvD,EAAE,SAAU;IACZ,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqC;IAC5D,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAG3C,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;IAevH,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/D,KAAK;IAGL,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IACtC,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1D,qBAAqB,CAAC,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IACrF,gBAAgB;IAGhB,gCAAgC;IAGhC,iCAAiC;IAGjC,2BAA2B;IAG3B,gCAAgC;IAGhC,WAAW;IAGX,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;IAGjE,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAG3C,YAAY,CAAC,IAAI,EAAE,MAAM;IAGzB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAGhE,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;IAGxD,qBAAqB;IAGf,oBAAoB,CAAC,IAAI,EAAE,MAAM;IAGvC,0BAA0B;CAG3B;;AAED,wBAA4D"}
+{"version":3,"file":"CrustModule.web.d.ts","sourceRoot":"","sources":["../src/CrustModule.web.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,YAAY,EAAC,MAAM,MAAM,CAAA;AAEpD,OAAO,EAAC,iBAAiB,EAAC,MAAM,eAAe,CAAA;AAE/C,cAAM,WAAY,SAAQ,YAAY,CAAC,iBAAiB,CAAC;IACvD,EAAE,SAAU;IACZ,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqC;IAC5D,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAG3C,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;IAevH,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/D,6CAA6C;IAC7C,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAG/C,KAAK;IAGL,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IACtC,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1D,qBAAqB,CAAC,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IACrF,gBAAgB;IAGhB,gCAAgC;IAGhC,iCAAiC;IAGjC,2BAA2B;IAG3B,gCAAgC;IAGhC,WAAW;IAGX,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;IAGjE,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAG3C,YAAY,CAAC,IAAI,EAAE,MAAM;IAGzB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAGhE,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;IAGxD,qBAAqB;IAGf,oBAAoB,CAAC,IAAI,EAAE,MAAM;IAGvC,0BAA0B;CAG3B;;AAED,wBAA4D"}

package/build/CrustModule.web.js

@@ -25,6 +25,10 @@ class CrustModule extends NativeModule {
         this.httpRequests.get(requestId)?.abort();
         this.httpRequests.delete(requestId);
     }
+    /** The web has no local files to resolve. */
+    canonicalFilePath(_path) {
+        return null;
+    }
     hello() {
         return "Hello world! 👋";
     }

package/build/CrustModule.web.js.map

@@ -1 +1 @@
-{"version":3,"file":"CrustModule.web.js","sourceRoot":"","sources":["../src/CrustModule.web.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,iBAAiB,EAAE,YAAY,EAAC,MAAM,MAAM,CAAA;AAIpD,MAAM,WAAY,SAAQ,YAA+B;IACvD,EAAE,GAAG,IAAI,CAAC,EAAE,CAAA;IACK,YAAY,GAAG,IAAI,GAAG,EAA2B,CAAA;IAClE,KAAK,CAAC,aAAa,CAAC,KAAa;QAC/B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAC,KAAK,EAAC,CAAC,CAAA;IAChC,CAAC;IACD,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,MAAc,EAAE,GAAW,EAAE,OAA+B,EAAE,IAAoB;QAC3H,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAC5C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAC,CAAC,CAAA;YACrF,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACvD,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE;aAC5B,CAAA;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,KAAK,CAAC,uBAAuB,CAAC,SAAiB;QAC7C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAA;QACzC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC;IACD,KAAK;QACH,OAAO,iBAAiB,CAAA;IAC1B,CAAC;IACD,iBAAiB,CAAC,UAA0B,IAAG,CAAC;IAChD,KAAK,CAAC,yBAAyB,CAAC,MAAgB,IAAkB,CAAC;IACnE,KAAK,CAAC,qBAAqB,CAAC,gBAAyB,EAAE,UAAoB,IAAkB,CAAC;IAC9F,KAAK,CAAC,gBAAgB;QACpB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,KAAK,CAAC,gCAAgC;QACpC,OAAO,EAAE,CAAA;IACX,CAAC;IACD,KAAK,CAAC,iCAAiC;QACrC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,CAAC,2BAA2B;QAC/B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,CAAC,gCAAgC;QACpC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,CAAC,WAAW;QACf,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,SAAiB,EAAE,UAAkB;QACrE,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,IAAY;QAC/C,OAAO,IAAI,CAAA;IACb,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,OAAM;IACR,CAAC;IACD,KAAK,CAAC,oBAAoB,CAAC,IAAY,EAAE,IAA6B;QACpE,OAAM;IACR,CAAC;IACD,KAAK,CAAC,mBAAmB,CAAC,IAAY,EAAE,MAAgB;QACtD,OAAM;IACR,CAAC;IACD,qBAAqB;QACnB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,KAAK,CAAC,oBAAoB,CAAC,IAAY;QACrC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,0BAA0B;QACxB,OAAO,EAAE,CAAA;IACX,CAAC;CACF;AAED,eAAe,iBAAiB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA","sourcesContent":["import {registerWebModule, NativeModule} from \"expo\"\n\nimport {CrustModuleEvents} from \"./Crust.types\"\n\nclass CrustModule extends NativeModule<CrustModuleEvents> {\n  PI = Math.PI\n  private readonly httpRequests = new Map<string, AbortController>()\n  async setValueAsync(value: string): Promise<void> {\n    this.emit(\"onChange\", {value})\n  }\n  async nativeHttpRequest(requestId: string, method: string, url: string, headers: Record<string, string>, body?: string | null) {\n    const controller = new AbortController()\n    this.httpRequests.set(requestId, controller)\n    try {\n      const response = await fetch(url, {method, headers, body, signal: controller.signal})\n      return {\n        status: response.status,\n        statusText: response.statusText,\n        headers: Object.fromEntries(response.headers.entries()),\n        body: await response.text(),\n      }\n    } finally {\n      this.httpRequests.delete(requestId)\n    }\n  }\n  async cancelNativeHttpRequest(requestId: string): Promise<void> {\n    this.httpRequests.get(requestId)?.abort()\n    this.httpRequests.delete(requestId)\n  }\n  hello() {\n    return \"Hello world! 👋\"\n  }\n  showAVRoutePicker(_tintColor?: string | null) {}\n  async setDeferredSystemGestures(_edges: string[]): Promise<void> {}\n  async setNotificationConfig(_listenerEnabled: boolean, _blocklist: string[]): Promise<void> {}\n  async getInstalledApps() {\n    return []\n  }\n  async getInstalledAppsForNotifications() {\n    return []\n  }\n  async hasNotificationListenerPermission() {\n    return false\n  }\n  async refreshNotificationListener() {\n    return false\n  }\n  async openNotificationListenerSettings() {\n    return false\n  }\n  async isBetaBuild() {\n    return false\n  }\n  async mentraJsSpawn(_pkg: string, _polyfill: string, _miniappJs: string) {\n    return false\n  }\n  async mentraJsEvaluate(_pkg: string, _src: string) {\n    return null\n  }\n  async mentraJsKill(_pkg: string) {\n    return\n  }\n  async mentraJsDispatchToJs(_pkg: string, _env: Record<string, unknown>) {\n    return\n  }\n  async mentraJsSetManifest(_pkg: string, _perms: string[]) {\n    return\n  }\n  mentraJsAlivePackages() {\n    return []\n  }\n  async mentraJsDebugForceGC(_pkg: string) {\n    return false\n  }\n  mentraJsLoadPolyfillBundle() {\n    return \"\"\n  }\n}\n\nexport default registerWebModule(CrustModule, \"CrustModule\")\n"]}
+{"version":3,"file":"CrustModule.web.js","sourceRoot":"","sources":["../src/CrustModule.web.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,iBAAiB,EAAE,YAAY,EAAC,MAAM,MAAM,CAAA;AAIpD,MAAM,WAAY,SAAQ,YAA+B;IACvD,EAAE,GAAG,IAAI,CAAC,EAAE,CAAA;IACK,YAAY,GAAG,IAAI,GAAG,EAA2B,CAAA;IAClE,KAAK,CAAC,aAAa,CAAC,KAAa;QAC/B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAC,KAAK,EAAC,CAAC,CAAA;IAChC,CAAC;IACD,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,MAAc,EAAE,GAAW,EAAE,OAA+B,EAAE,IAAoB;QAC3H,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAC5C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAC,CAAC,CAAA;YACrF,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACvD,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE;aAC5B,CAAA;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,KAAK,CAAC,uBAAuB,CAAC,SAAiB;QAC7C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAA;QACzC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC;IACD,6CAA6C;IAC7C,iBAAiB,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,KAAK;QACH,OAAO,iBAAiB,CAAA;IAC1B,CAAC;IACD,iBAAiB,CAAC,UAA0B,IAAG,CAAC;IAChD,KAAK,CAAC,yBAAyB,CAAC,MAAgB,IAAkB,CAAC;IACnE,KAAK,CAAC,qBAAqB,CAAC,gBAAyB,EAAE,UAAoB,IAAkB,CAAC;IAC9F,KAAK,CAAC,gBAAgB;QACpB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,KAAK,CAAC,gCAAgC;QACpC,OAAO,EAAE,CAAA;IACX,CAAC;IACD,KAAK,CAAC,iCAAiC;QACrC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,CAAC,2BAA2B;QAC/B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,CAAC,gCAAgC;QACpC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,CAAC,WAAW;QACf,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,SAAiB,EAAE,UAAkB;QACrE,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,IAAY;QAC/C,OAAO,IAAI,CAAA;IACb,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,OAAM;IACR,CAAC;IACD,KAAK,CAAC,oBAAoB,CAAC,IAAY,EAAE,IAA6B;QACpE,OAAM;IACR,CAAC;IACD,KAAK,CAAC,mBAAmB,CAAC,IAAY,EAAE,MAAgB;QACtD,OAAM;IACR,CAAC;IACD,qBAAqB;QACnB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,KAAK,CAAC,oBAAoB,CAAC,IAAY;QACrC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,0BAA0B;QACxB,OAAO,EAAE,CAAA;IACX,CAAC;CACF;AAED,eAAe,iBAAiB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA","sourcesContent":["import {registerWebModule, NativeModule} from \"expo\"\n\nimport {CrustModuleEvents} from \"./Crust.types\"\n\nclass CrustModule extends NativeModule<CrustModuleEvents> {\n  PI = Math.PI\n  private readonly httpRequests = new Map<string, AbortController>()\n  async setValueAsync(value: string): Promise<void> {\n    this.emit(\"onChange\", {value})\n  }\n  async nativeHttpRequest(requestId: string, method: string, url: string, headers: Record<string, string>, body?: string | null) {\n    const controller = new AbortController()\n    this.httpRequests.set(requestId, controller)\n    try {\n      const response = await fetch(url, {method, headers, body, signal: controller.signal})\n      return {\n        status: response.status,\n        statusText: response.statusText,\n        headers: Object.fromEntries(response.headers.entries()),\n        body: await response.text(),\n      }\n    } finally {\n      this.httpRequests.delete(requestId)\n    }\n  }\n  async cancelNativeHttpRequest(requestId: string): Promise<void> {\n    this.httpRequests.get(requestId)?.abort()\n    this.httpRequests.delete(requestId)\n  }\n  /** The web has no local files to resolve. */\n  canonicalFilePath(_path: string): string | null {\n    return null\n  }\n  hello() {\n    return \"Hello world! 👋\"\n  }\n  showAVRoutePicker(_tintColor?: string | null) {}\n  async setDeferredSystemGestures(_edges: string[]): Promise<void> {}\n  async setNotificationConfig(_listenerEnabled: boolean, _blocklist: string[]): Promise<void> {}\n  async getInstalledApps() {\n    return []\n  }\n  async getInstalledAppsForNotifications() {\n    return []\n  }\n  async hasNotificationListenerPermission() {\n    return false\n  }\n  async refreshNotificationListener() {\n    return false\n  }\n  async openNotificationListenerSettings() {\n    return false\n  }\n  async isBetaBuild() {\n    return false\n  }\n  async mentraJsSpawn(_pkg: string, _polyfill: string, _miniappJs: string) {\n    return false\n  }\n  async mentraJsEvaluate(_pkg: string, _src: string) {\n    return null\n  }\n  async mentraJsKill(_pkg: string) {\n    return\n  }\n  async mentraJsDispatchToJs(_pkg: string, _env: Record<string, unknown>) {\n    return\n  }\n  async mentraJsSetManifest(_pkg: string, _perms: string[]) {\n    return\n  }\n  mentraJsAlivePackages() {\n    return []\n  }\n  async mentraJsDebugForceGC(_pkg: string) {\n    return false\n  }\n  mentraJsLoadPolyfillBundle() {\n    return \"\"\n  }\n}\n\nexport default registerWebModule(CrustModule, \"CrustModule\")\n"]}

package/ios/Crust.podspec

@@ -50,6 +50,9 @@ Pod::Spec.new do |s|
   }
 
   s.source_files = "**/*.{h,m,mm,swift,hpp,cpp}"
+  # MiniappPolicyKit's sources compile into this pod; its manifest, tests and
+  # local `swift test` output are only for testing them on a Mac.
+  s.exclude_files = "MiniappPolicyKit/Package.swift", "MiniappPolicyKit/Tests/**/*", "MiniappPolicyKit/.build/**/*"
 
   # Ship the MentraJS polyfill bundle inside the pod's resource bundle so
   # JSCRuntime can read it at runtime via Bundle.main. The source of

package/ios/CrustModule.swift

@@ -121,6 +121,11 @@ public class CrustModule: Module {
             "Hello world! 👋"
         }
 
+        // Where a path really is, symlinks resolved; the engine checks miniapp-named paths with it.
+        Function("canonicalFilePath") { (path: String) -> String? in
+            CanonicalFilePath.of(path)
+        }
+
         AsyncFunction("setValueAsync") { (value: String) in
             self.sendEvent("onChange", [
                 "value": value,

package/ios/MiniappPolicyKit/Package.swift

@@ -0,0 +1,13 @@
+// swift-tools-version: 5.9
+import PackageDescription
+
+// The Crust pod compiles Sources/MiniappPolicy into its own module; this package
+// exists so the rules can be unit tested on a Mac with `swift test`.
+let package = Package(
+  name: "MiniappPolicyKit", platforms: [.macOS(.v13), .iOS(.v15)],
+  products: [.library(name: "MiniappPolicy", targets: ["MiniappPolicy"])],
+  targets: [
+    .target(name: "MiniappPolicy"),
+    .testTarget(name: "MiniappPolicyTests", dependencies: ["MiniappPolicy"]),
+  ]
+)

package/ios/MiniappPolicyKit/Sources/MiniappPolicy/CanonicalFilePath.swift

@@ -0,0 +1,13 @@
+import Foundation
+
+/// The real location of a path, for checking that a path a miniapp names stays inside the
+/// directory the host allows: absolute, with `.`, `..` and every symlink resolved.
+public enum CanonicalFilePath {
+    /// The canonical path of an existing file or directory, or nil when there is none.
+    public static func of(_ path: String) -> String? {
+        guard path.hasPrefix("/"), !path.contains("\u{0}") else { return nil }
+        guard let resolved = realpath(path, nil) else { return nil }
+        defer { free(resolved) }
+        return String(cString: resolved)
+    }
+}

package/ios/MiniappPolicyKit/Sources/MiniappPolicy/MiniappNetworkPolicy.swift

@@ -0,0 +1,24 @@
+import Foundation
+
+/// Which URLs miniapp code may open through the polyfill's network bridge.
+///
+/// Miniapp code is untrusted, so `fetch` and `WebSocket` reach only the network.
+/// URLSession also reads `file:` URLs, which would hand a miniapp the Mentra App's
+/// own files, and `data:` URLs. Mirrors Android's `MiniappNetworkPolicy.kt` and the
+/// polyfill's own check, which miniapp code can skip by calling the bridge directly.
+public enum MiniappNetworkPolicy {
+    public static let fetchRefusal = "fetch: only http: and https: URLs are allowed"
+    public static let webSocketRefusal = "ws.open: only ws:, wss:, http: and https: URLs are allowed"
+
+    private static let fetchSchemes: Set<String> = ["http", "https"]
+    private static let webSocketSchemes: Set<String> = ["ws", "wss", "http", "https"]
+
+    /// `fetch`, and every redirect it follows.
+    public static func allowsFetch(_ url: URL) -> Bool {
+        fetchSchemes.contains(url.scheme?.lowercased() ?? "")
+    }
+
+    public static func allowsWebSocket(_ url: URL) -> Bool {
+        webSocketSchemes.contains(url.scheme?.lowercased() ?? "")
+    }
+}

package/ios/MiniappPolicyKit/Tests/MiniappPolicyTests/MiniappPolicyTests.swift

@@ -0,0 +1,117 @@
+import Foundation
+@testable import MiniappPolicy
+import XCTest
+
+final class MiniappNetworkPolicyTests: XCTestCase {
+    func testFetchReachesOnlyHttpAndHttps() {
+        for url in ["http://example.com", "https://example.com/a?b", "HTTPS://EXAMPLE.COM", "http://192.168.1.20:8080/x"] {
+            XCTAssertTrue(MiniappNetworkPolicy.allowsFetch(URL(string: url)!), url)
+        }
+        // URLSession reads file: URLs, so this is what keeps miniapp code out of the app's files.
+        for url in [
+            "file:///var/mobile/Containers/Data/Application/X/Documents/mmkv/mmkv.default",
+            "FILE:///etc/hosts",
+            "file:/etc/hosts",
+            "data:text/plain,hi",
+            "ftp://example.com/x",
+            "ws://example.com",
+            "/etc/hosts",
+            "relative/path",
+        ] {
+            XCTAssertFalse(MiniappNetworkPolicy.allowsFetch(URL(string: url)!), url)
+        }
+    }
+
+    /// Why the gate exists: the session the bridge uses hands back a local file's bytes.
+    func testUrlSessionWouldReadAFileUrl() throws {
+        let file = FileManager.default.temporaryDirectory.appendingPathComponent("\(UUID().uuidString).txt")
+        try Data("refresh-token".utf8).write(to: file)
+        defer { try? FileManager.default.removeItem(at: file) }
+        let done = expectation(description: "read")
+        var body: Data?
+        URLSession(configuration: .default).dataTask(with: file) { data, _, _ in
+            body = data
+            done.fulfill()
+        }.resume()
+        wait(for: [done], timeout: 5)
+        XCTAssertEqual(body, Data("refresh-token".utf8))
+        XCTAssertFalse(MiniappNetworkPolicy.allowsFetch(file))
+    }
+
+    /// The host's own downloads (blob.setFromUrl, system.download, meeting stills) check only
+    /// the first URL and rely on this: URLSession does not follow a redirect to a file: URL.
+    func testUrlSessionRefusesARedirectToAFileUrl() throws {
+        let file = FileManager.default.temporaryDirectory.appendingPathComponent("\(UUID().uuidString).txt")
+        try Data("refresh-token".utf8).write(to: file)
+        defer { try? FileManager.default.removeItem(at: file) }
+        let server = try RedirectServer(location: file.absoluteString)
+        defer { server.stop() }
+
+        for kind in ["data", "download"] {
+            let done = expectation(description: kind)
+            var read: String?
+            var failure: NSError?
+            let session = URLSession(configuration: .ephemeral)
+            let finish: (Data?, Error?) -> Void = { data, error in
+                read = data.map { String(decoding: $0, as: UTF8.self) }
+                failure = error as NSError?
+                done.fulfill()
+            }
+            if kind == "data" {
+                session.dataTask(with: server.url) { data, _, error in finish(data, error) }.resume()
+            } else {
+                session.downloadTask(with: server.url) { location, _, error in
+                    finish(location.flatMap { try? Data(contentsOf: $0) }, error)
+                }.resume()
+            }
+            wait(for: [done], timeout: 10)
+            XCTAssertNotEqual(read, "refresh-token", kind)
+            XCTAssertEqual(failure?.code, NSURLErrorNoPermissionsToReadFile, kind)
+        }
+    }
+
+    func testWebSocketsReachOnlyNetworkSchemes() {
+        for url in ["ws://10.0.0.2:9000", "WSS://example.com/s", "http://example.com", "https://example.com"] {
+            XCTAssertTrue(MiniappNetworkPolicy.allowsWebSocket(URL(string: url)!), url)
+        }
+        for url in ["file:///etc/hosts", "data:,x", "/socket"] {
+            XCTAssertFalse(MiniappNetworkPolicy.allowsWebSocket(URL(string: url)!), url)
+        }
+    }
+}
+
+final class CanonicalFilePathTests: XCTestCase {
+    private var root: URL!
+
+    override func setUpWithError() throws {
+        root = FileManager.default.temporaryDirectory.appendingPathComponent(UUID().uuidString)
+        try FileManager.default.createDirectory(at: root, withIntermediateDirectories: true)
+    }
+
+    override func tearDownWithError() throws {
+        try? FileManager.default.removeItem(at: root)
+    }
+
+    func testResolvesDotSegmentsAndSymlinks() throws {
+        let sandbox = root.appendingPathComponent("sandbox")
+        try FileManager.default.createDirectory(at: sandbox, withIntermediateDirectories: true)
+        let outside = root.appendingPathComponent("outside.txt")
+        try Data("secret".utf8).write(to: outside)
+        let link = sandbox.appendingPathComponent("link.txt")
+        try FileManager.default.createSymbolicLink(at: link, withDestinationURL: outside)
+
+        let realOutside = try XCTUnwrap(CanonicalFilePath.of(outside.path))
+        XCTAssertEqual(CanonicalFilePath.of(link.path), realOutside)
+        XCTAssertEqual(CanonicalFilePath.of(sandbox.path + "/../outside.txt"), realOutside)
+        // The temporary directory sits under /var, itself a symlink to /private/var, like an
+        // iOS app's container: both sides of a containment check must be resolved.
+        XCTAssertTrue(realOutside.hasPrefix("/private/"), realOutside)
+    }
+
+    func testNilForMissingRelativeOrMalformedPaths() {
+        XCTAssertNil(CanonicalFilePath.of(root.appendingPathComponent("missing.txt").path))
+        XCTAssertNil(CanonicalFilePath.of("relative/path"))
+        XCTAssertNil(CanonicalFilePath.of(root.path + "/a\u{0}b"))
+        XCTAssertNil(CanonicalFilePath.of(""))
+    }
+}

package/ios/MiniappPolicyKit/Tests/MiniappPolicyTests/RedirectServer.swift

@@ -0,0 +1,33 @@
+import Foundation
+import Network
+
+/// A one-route HTTP server on 127.0.0.1 that answers every request with a 302 to `location`.
+final class RedirectServer {
+    let url: URL
+    private let listener: NWListener
+    private let queue = DispatchQueue(label: "RedirectServer")
+
+    init(location: String) throws {
+        listener = try NWListener(using: .tcp, on: .any)
+        let response = "HTTP/1.1 302 Found\r\nLocation: \(location)\r\nContent-Length: 0\r\nConnection: close\r\n\r\n"
+        listener.newConnectionHandler = { [queue] connection in
+            connection.start(queue: queue)
+            connection.receive(minimumIncompleteLength: 1, maximumLength: 65536) { _, _, _, _ in
+                connection.send(content: Data(response.utf8), completion: .contentProcessed { _ in connection.cancel() })
+            }
+        }
+        let ready = DispatchSemaphore(value: 0)
+        listener.stateUpdateHandler = { state in
+            if case .ready = state { ready.signal() }
+        }
+        listener.start(queue: queue)
+        guard ready.wait(timeout: .now() + 5) == .success, let port = listener.port?.rawValue else {
+            throw URLError(.cannotConnectToHost)
+        }
+        url = URL(string: "http://127.0.0.1:\(port)/credentials")!
+    }
+
+    func stop() {
+        listener.cancel()
+    }
+}

package/ios/Resources/startup.js

@@ -571,38 +571,48 @@
       return parts.join("");
     }
     if (typeof g.TextEncoder !== "function") {
+      const codePointAt = (str, i) => {
+        const code = str.charCodeAt(i);
+        if (code >= 55296 && code <= 56319 && i + 1 < str.length) {
+          const next = str.charCodeAt(i + 1);
+          if (next >= 56320 && next <= 57343) return (code - 55296 << 10) + (next - 56320) + 65536;
+        }
+        return code;
+      };
       class TextEncoderPolyfill {
         constructor() {
           this.encoding = "utf-8";
         }
         encode(input) {
           const str = input ?? "";
-          const out = [];
+          let length = 0;
           for (let i = 0; i < str.length; i++) {
-            let code = str.charCodeAt(i);
-            if (code >= 55296 && code <= 56319 && i + 1 < str.length) {
-              const next = str.charCodeAt(i + 1);
-              if (next >= 56320 && next <= 57343) {
-                code = (code - 55296 << 10) + (next - 56320) + 65536;
-                i++;
-              }
-            }
+            const code = codePointAt(str, i);
+            if (code > 65535) i++;
+            length += code < 128 ? 1 : code < 2048 ? 2 : code < 65536 ? 3 : 4;
+          }
+          const out = new Uint8Array(length);
+          let at = 0;
+          for (let i = 0; i < str.length; i++) {
+            const code = codePointAt(str, i);
+            if (code > 65535) i++;
             if (code < 128) {
-              out.push(code);
+              out[at++] = code;
             } else if (code < 2048) {
-              out.push(192 | code >> 6, 128 | code & 63);
+              out[at++] = 192 | code >> 6;
+              out[at++] = 128 | code & 63;
             } else if (code < 65536) {
-              out.push(224 | code >> 12, 128 | code >> 6 & 63, 128 | code & 63);
+              out[at++] = 224 | code >> 12;
+              out[at++] = 128 | code >> 6 & 63;
+              out[at++] = 128 | code & 63;
             } else {
-              out.push(
-                240 | code >> 18,
-                128 | code >> 12 & 63,
-                128 | code >> 6 & 63,
-                128 | code & 63
-              );
+              out[at++] = 240 | code >> 18;
+              out[at++] = 128 | code >> 12 & 63;
+              out[at++] = 128 | code >> 6 & 63;
+              out[at++] = 128 | code & 63;
             }
           }
-          return new Uint8Array(out);
+          return out;
         }
       }
       ;
@@ -658,10 +668,20 @@
         return out;
       };
     }
+    const urlScheme = (url) => {
+      const match = /^[\u0000- ]*([A-Za-z][A-Za-z0-9+.-]*):/.exec(url);
+      return match ? match[1].toLowerCase() : null;
+    };
     if (typeof g.fetch !== "function") {
       ;
       g.fetch = async (input, init) => {
         const url = typeof input === "string" ? input : input.toString();
+        const scheme = urlScheme(url);
+        if (scheme !== "http" && scheme !== "https") {
+          throw new TypeError(
+            `fetch: only http: and https: URLs can be fetched, not ${scheme ? `${scheme}:` : "a relative URL"}`
+          );
+        }
         const method = (init?.method ?? "GET").toUpperCase();
         let bodyString = null;
         let bodyBase64;
@@ -772,6 +792,12 @@
             close: /* @__PURE__ */ new Set()
           };
           this.url = String(url);
+          const scheme = urlScheme(this.url);
+          if (scheme !== "ws" && scheme !== "wss" && scheme !== "http" && scheme !== "https") {
+            throw new SyntaxError(
+              `WebSocket: the URL's scheme must be ws:, wss:, http: or https:, not ${scheme ? `${scheme}:` : "none"}`
+            );
+          }
           const protoList = Array.isArray(protocols) ? protocols : protocols ? [protocols] : [];
           this.sid = `ws-${Date.now()}-${Math.floor(Math.random() * 1e9)}`;
           sockets.set(this.sid, this);

package/ios/Source/JSCPolyfillBridge.swift

@@ -37,6 +37,22 @@ public enum JSCPolyfillBridge {
     fileprivate final class WebSocketSessionDelegate: NSObject, URLSessionWebSocketDelegate {
         static let shared = WebSocketSessionDelegate()
 
+        /// A redirect is followed only to another network URL, never to a local scheme.
+        /// Completion-handler data tasks still ask the delegate about redirects.
+        func urlSession(
+            _ session: URLSession,
+            task: URLSessionTask,
+            willPerformHTTPRedirection response: HTTPURLResponse,
+            newRequest request: URLRequest,
+            completionHandler: @escaping (URLRequest?) -> Void,
+        ) {
+            guard let url = request.url, MiniappNetworkPolicy.allowsFetch(url) else {
+                completionHandler(nil)
+                return
+            }
+            completionHandler(request)
+        }
+
         func urlSession(
             _ session: URLSession,
             webSocketTask: URLSessionWebSocketTask,
@@ -98,6 +114,11 @@ public enum JSCPolyfillBridge {
             guard let reqId else {
                 return .error(code: "INVALID_ARGS", message: "fetch.request requires reqId (use __mentraSendRequest)")
             }
+            // URLSession reads file: URLs. Miniapp code can call this route without the
+            // polyfill's own check, so the scheme is checked here (MiniappNetworkPolicy).
+            guard MiniappNetworkPolicy.allowsFetch(url) else {
+                return .error(code: "UNSUPPORTED_SCHEME", message: MiniappNetworkPolicy.fetchRefusal)
+            }
 
             var urlRequest = URLRequest(url: url)
             let method = (req["method"] as? String) ?? "GET"
@@ -273,6 +294,10 @@ public enum JSCPolyfillBridge {
                   let url = URL(string: urlString) else {
                 return .error(code: "INVALID_ARGS", message: "ws.open expects {sid, url, protocols?}")
             }
+            // A WebSocket task also needs a network scheme; any other raises an exception.
+            guard MiniappNetworkPolicy.allowsWebSocket(url) else {
+                return .error(code: "UNSUPPORTED_SCHEME", message: MiniappNetworkPolicy.webSocketRefusal)
+            }
             var urlRequest = URLRequest(url: url)
             if let protocols = req["protocols"] as? [String], !protocols.isEmpty {
                 urlRequest.setValue(protocols.joined(separator: ", "), forHTTPHeaderField: "Sec-WebSocket-Protocol")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mentra/crust",
-  "version": "3.4.0-dev.998",
+  "version": "3.5.0-dev.1238",
   "description": "Mentra Native Module",
   "main": "build/index.js",
   "types": "build/index.d.ts",
@@ -35,7 +35,7 @@
   "license": "Apache-2.0",
   "homepage": "https://github.com/Mentra-Community/MentraOS/tree/dev/mobile/modules/crust#readme",
   "dependencies": {
-    "@mentra/jspolyfill": "3.4.0-dev.998"
+    "@mentra/jspolyfill": "3.5.0-dev.1238"
   },
   "devDependencies": {
     "@expo/config-plugins": ">=8.0.0",
@@ -63,6 +63,8 @@
     "!ios/build/**",
     "!ios/Pods",
     "!ios/Pods/**",
+    "!ios/MiniappPolicyKit/.build",
+    "!ios/MiniappPolicyKit/.build/**",
     "app.plugin.js",
     "build",
     "plugin/build",

package/src/CrustModule.ts

@@ -11,6 +11,12 @@ declare class CrustModule extends NativeModule<CrustModuleEvents> {
   getPermissionStatus(requestId: string): Promise<AppPermissionReceipt>
   PI: number
   hello(): string
+  /**
+   * The canonical path of an existing file or directory: absolute, with `.`,
+   * `..` and every symlink resolved. Null when nothing is there. The engine
+   * checks that a path a miniapp names stays inside the directory it may use.
+   */
+  canonicalFilePath(path: string): string | null
   setValueAsync(value: string): Promise<void>
   /** Android: copy the displayed view's window pixels to a temporary JPEG URI. */
   captureMiniappPreview(viewTag: number): Promise<string>

package/src/CrustModule.web.ts

@@ -27,6 +27,10 @@ class CrustModule extends NativeModule<CrustModuleEvents> {
     this.httpRequests.get(requestId)?.abort()
     this.httpRequests.delete(requestId)
   }
+  /** The web has no local files to resolve. */
+  canonicalFilePath(_path: string): string | null {
+    return null
+  }
   hello() {
     return "Hello world! 👋"
   }