@mentra/engine 0.1.0-beta.0 → 0.1.0-dev.1

package/build/services/MiniappLauncher.js.map

@@ -1 +1 @@
-{"version":3,"file":"MiniappLauncher.js","sourceRoot":"","sources":["../../src/services/MiniappLauncher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAC,IAAI,EAAC,MAAM,kBAAkB,CAAA;AAErC,OAAO,EAAC,oBAAoB,EAAC,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAC,OAAO,EAAC,MAAM,0BAA0B,CAAA;AAChD,OAAO,WAAW,EAAE,EAAC,uBAAuB,EAAE,wBAAwB,EAAC,MAAM,eAAe,CAAA;AAC5F,OAAO,eAAe,MAAM,mBAAmB,CAAA;AAC/C,OAAO,mBAAoD,MAAM,uBAAuB,CAAA;AAiCxF,MAAM,eAAe;IACX,IAAI,GAAwB,IAAI,CAAA;IAExC;;;;;;OAMG;IACc,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAA;IAEpE,uEAAuE;IACvE,SAAS,CAAC,IAAkB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;QACvF,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAA;IACzB,CAAC;IAED,yEAAyE;IACzE,SAAS,CAAC,WAAmB;QAC3B,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAA;IAC9E,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,KAAmB;QAC1D,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QAE9D,iEAAiE;QACjE,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YAC7D,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAA;YAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAuD,CAAA;YAC9E,IAAI,CAAC,KAAK,EAAE,UAAU;gBAAE,OAAO,IAAI,CAAA;YAEnC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;YACtC,wEAAwE;YACxE,2CAA2C;YAC3C,MAAM,KAAK,GAAG,GAAG,IAAI,SAAS,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAA;YACvE,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YAEjF,MAAM,KAAK,GAAG,QAAQ,CAAC,WAA0D,CAAA;YACjF,MAAM,mBAAmB,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;iBACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;iBACjD,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAA;YACpD,MAAM,iBAAiB,GAA6B;gBAClD,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW,EAAE,QAAQ,CAAC,WAAsD;gBAC5E,oBAAoB,EAAE,QAAQ,CAAC,oBAAwE;aACxG,CAAA;YAED,IAAI,QAAgB,CAAA;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;gBAC9B,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAA;gBACxB,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;YAED,OAAO;gBACL,QAAQ;gBACR,KAAK;gBACL,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;gBACxD,mBAAmB;gBACnB,iBAAiB;gBACjB,MAAM;gBACN,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC;aAC1D,CAAA;QACH,CAAC;QAED,iEAAiE;QACjE,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,CAAC,MAAM,WAAW,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAA;QACnF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACzB,MAAM,UAAU,GAAG,WAAW,CAAC,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QACzE,IAAI,CAAC,UAAU,EAAE,UAAU;YAAE,OAAO,IAAI,CAAA;QAExC,MAAM,QAAQ,GAAG,WAAW,CAAC,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAI5D,CAAA;QACR,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,CAAC;aACtD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAA;QACpD,MAAM,iBAAiB,GAAyC,QAAQ;YACtE,CAAC,CAAC,EAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB,EAAC;YAC/G,CAAC,CAAC,SAAS,CAAA;QAEb,IAAI,QAAgB,CAAA;QACpB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAA;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO;YACL,QAAQ;YACR,KAAK,EAAE,UAAU,CAAC,EAAE,IAAI,IAAI;YAC5B,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;YACxE,mBAAmB;YACnB,iBAAiB;YACjB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,KAAmB;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAA;QAEnC,uEAAuE;QACvE,wEAAwE;QACxE,oCAAoC;QACpC,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;YAC/E,OAAO,EAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI,EAAC,CAAA;QACjF,CAAC;QAED,qEAAqE;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAC9C,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QACtC,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAA;QACrB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;IAED,iFAAiF;IACzE,KAAK,CAAC,KAAK,CAAC,WAAmB,EAAE,KAAmB;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAA;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,8CAA8C,WAAW,EAAE,CAAC,CAAA;QAC9E,CAAC;QAED,yEAAyE;QACzE,6CAA6C;QAC7C,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE;gBACvE,WAAW,EAAE,QAAQ,CAAC,mBAAmB;gBACzC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;aAC9C,CAAC,CAAA;YACF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,IAAI,KAAK,CAAC,qCAAqC,WAAW,EAAE,CAAC,CAAA;YACrE,CAAC;YAED,mEAAmE;YACnE,0DAA0D;YAC1D,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;gBAChD,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;YACzE,CAAC;iBAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC3B,mEAAmE;gBACnE,uEAAuE;gBACvE,iEAAiE;gBACjE,OAAO,CAAC,IAAI,CAAC,oBAAoB,WAAW,yDAAyD,CAAC,CAAA;YACxG,CAAC;QACH,CAAC;QAED,OAAO,EAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAC,CAAA;IAC/D,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,KAAK,CAAC,sBAAsB;QAC1B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,oBAAoB,EAAE,CAAA;QACrD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,mEAAmE;YACnE,uEAAuE;YACvE,gDAAgD;YAChD,IAAI,CAAC,GAAG,CAAC,KAAK;gBAAE,SAAQ;YACxB,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,SAAQ;YACvD,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,SAAQ;YAC7C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAC3C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,yCAAyC,GAAG,CAAC,WAAW,gCAAgC,EAAE,CAAC,CAAC,CAAA;gBACzG,wBAAwB,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,gBAAgB,GAAG,MAAM,EAAE,KAAmB;QACvF,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QAC5C,MAAM,mBAAmB,CAAC,cAAc,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;IACzE,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,wEAAwE;QACxE,sEAAsE;QACtE,kEAAkE;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAC9C,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,OAAO,CAAA;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;YACrE,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;IACjD,CAAC;IAED,4EAA4E;IAEpE,YAAY,CAAC,WAAmB;QACtC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAS,GAAG,WAAW,UAAU,CAAC,CAAA;QACxD,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IACxC,CAAC;IAED,4EAA4E;IACpE,cAAc,CAAC,WAA+B,EAAE,WAAmB;QACzE,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;YACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAA;QAClC,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAS,GAAG,WAAW,WAAW,CAAC,CAAA;QAC9D,IAAI,MAAM,CAAC,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QACvC,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAA","sourcesContent":["/**\n * MiniappLauncher — headless launch/teardown of a local miniapp's background\n * JS context.\n *\n * This is the one piece of \"run a miniapp\" that used to live inside the\n * `LocalMiniappView` React component (resolve the bundle → read the manifest →\n * `spawnAndRegister`), triggered only when the Compositor mounted that\n * component on foreground. Pulling it into the runtime means:\n *\n *   - `start()` can actually spawn an app even when nothing foregrounds it\n *     (e.g. a system app launching another miniapp via `session.miniapps`).\n *   - the action broker can wake a stopped target headlessly — no UI at all.\n *   - the dev hot-reload respawn path and the WebView mount path share one\n *     resolve+spawn recipe instead of three copies.\n *\n * The launcher is **headless**: no React, no RN components. The engine-owned\n * MiniappEngine hands it the {@link MentraJSRouter} instance once during\n * engine construction. OEMs embedding the runtime drive miniapp lifecycle\n * through the engine facade and stores, not a separate launcher configure API.\n *\n * Boundary: the launcher owns the **background** context. WebView *rendering*\n * (the UI layer) stays with the host — the launcher just hands back the\n * resolved UI entry so the host can mount its `<WebView>`.\n */\n\nimport {File} from \"expo-file-system\"\n\nimport {decideDevLaunchRoute} from \"../utils/devMiniappLaunch\"\nimport {storage} from \"../utils/storage/storage\"\nimport appRegistry, {getLocalAppRunningState, saveLocalAppRunningState} from \"./AppRegistry\"\nimport devServerBridge from \"./DevServerBridge\"\nimport localMiniappRuntime, {type InstalledMiniappManifest} from \"./LocalMiniappRuntime\"\nimport type {MentraJSRouter} from \"./MentraJSRouter\"\n\ninterface LauncherDeps {\n  /** The host-constructed router (needs the native Crust binding). */\n  router: MentraJSRouter\n}\n\n/** Hints the host may pass from a view's props to avoid re-deriving them. */\nexport interface LaunchHints {\n  devUrl?: string\n  version?: string\n  devPort?: string\n}\n\n/** Everything the launcher resolved for a package — bg source + UI entry. */\nexport interface ResolvedBundle {\n  bgSource: string\n  uiUri: string | null\n  uiBaseDir: string | null\n  declaredPermissions: string[]\n  installedManifest?: InstalledMiniappManifest\n  /** Set for dev miniapps (HTTP off the dev server); null for released. */\n  devUrl: string | null\n  devPort: number | null\n}\n\n/** What the host needs back to render the UI layer. */\nexport interface LaunchResult {\n  uiUri: string | null\n  uiBaseDir: string | null\n}\n\nclass MiniappLauncher {\n  private deps: LauncherDeps | null = null\n\n  /**\n   * In-flight launches keyed by packageName. Both apps.ts start() and the\n   * WebView mount call ensureRunning() before the first spawnAndRegister\n   * resolves — without this, neither sees the package in registeredPackages()\n   * yet and both spawn the same context (a clobber/double-spawn). Concurrent\n   * callers share the same promise.\n   */\n  private readonly inFlight = new Map<string, Promise<LaunchResult>>()\n\n  /** Wire the router in. Called once from MiniappEngine construction. */\n  configure(deps: LauncherDeps): void {\n    this.deps = deps\n  }\n\n  private requireRouter(): MentraJSRouter {\n    if (!this.deps) {\n      throw new Error(\"MiniappLauncher not configured — ensureMiniappEngine() has not run\")\n    }\n    return this.deps.router\n  }\n\n  /** True iff the package's background JS context is currently spawned. */\n  isRunning(packageName: string): boolean {\n    return this.deps?.router.registeredPackages().includes(packageName) ?? false\n  }\n\n  /**\n   * Resolve the background JS source + UI entry + declared permissions for a\n   * package. Handles both dev (HTTP off the running dev server) and released\n   * (file:// from the installed snapshot). Reads disk/network/storage; does\n   * NOT spawn. Returns null when the bundle can't be resolved (dev server\n   * unreachable, missing entry, no installed version).\n   */\n  async resolveBundle(packageName: string, hints?: LaunchHints): Promise<ResolvedBundle | null> {\n    const devUrl = hints?.devUrl ?? this.storedDevUrl(packageName)\n\n    // --- Dev: load directly off the local dev server over HTTP. ---\n    if (devUrl) {\n      const route = await decideDevLaunchRoute(packageName, devUrl)\n      if (route.decision === \"offline\" || !route.manifest) return null\n      const manifest = route.manifest\n      const entry = manifest.entry as {background?: string; ui?: string} | undefined\n      if (!entry?.background) return null\n\n      const base = devUrl.replace(/\\/$/, \"\")\n      // entry.* are bundle-root paths (dist/ stripped); the dev server serves\n      // files relative to cwd, so prepend dist/.\n      const bgUrl = `${base}/dist/${entry.background.replace(/^\\.?\\/+/, \"\")}`\n      const uiUri = entry.ui ? `${base}/dist/${entry.ui.replace(/^\\.?\\/+/, \"\")}` : null\n\n      const perms = manifest.permissions as Array<{type?: string} | string> | undefined\n      const declaredPermissions = (perms ?? [])\n        .map((p) => (typeof p === \"string\" ? p : p?.type))\n        .filter((t): t is string => typeof t === \"string\")\n      const installedManifest: InstalledMiniappManifest = {\n        name: manifest.name,\n        permissions: manifest.permissions as InstalledMiniappManifest[\"permissions\"],\n        hardwareRequirements: manifest.hardwareRequirements as InstalledMiniappManifest[\"hardwareRequirements\"],\n      }\n\n      let bgSource: string\n      try {\n        const res = await fetch(bgUrl)\n        if (!res.ok) return null\n        bgSource = await res.text()\n      } catch {\n        return null\n      }\n\n      return {\n        bgSource,\n        uiUri,\n        uiBaseDir: uiUri ? uiUri.replace(/\\/[^/]+$/, \"/\") : null,\n        declaredPermissions,\n        installedManifest,\n        devUrl,\n        devPort: this.resolveDevPort(hints?.devPort, packageName),\n      }\n    }\n\n    // --- Released: resolve from the installed file:// snapshot. ---\n    const version = hints?.version ?? (await appRegistry.getActiveVersion(packageName))\n    if (!version) return null\n    const entryPaths = appRegistry.getMiniappEntryPaths(packageName, version)\n    if (!entryPaths?.background) return null\n\n    const manifest = appRegistry.getMiniappManifest(packageName, version) as {\n      name?: string\n      permissions?: Array<{type: string; required?: boolean; description?: string}>\n      hardwareRequirements?: Array<{type: string; level: string; description?: string}>\n    } | null\n    const declaredPermissions = (manifest?.permissions ?? [])\n      .map((p) => p.type)\n      .filter((t): t is string => typeof t === \"string\")\n    const installedManifest: InstalledMiniappManifest | undefined = manifest\n      ? {name: manifest.name, permissions: manifest.permissions, hardwareRequirements: manifest.hardwareRequirements}\n      : undefined\n\n    let bgSource: string\n    try {\n      bgSource = new File(entryPaths.background).textSync()\n    } catch {\n      return null\n    }\n\n    return {\n      bgSource,\n      uiUri: entryPaths.ui ?? null,\n      uiBaseDir: entryPaths.ui ? entryPaths.ui.replace(/\\/[^/]+$/, \"/\") : null,\n      declaredPermissions,\n      installedManifest,\n      devUrl: null,\n      devPort: null,\n    }\n  }\n\n  /**\n   * Ensure a miniapp's background JS context is spawned. Idempotent — if the\n   * context is already alive this is a no-op spawn-wise (it still resolves the\n   * UI entry so a re-mounting host gets its `<WebView>` source back).\n   *\n   * Resolves once the context is SPAWNED. It does NOT block on the context's\n   * CONNECT handshake — the host's WebView mount shouldn't wait on background\n   * JS. Callers that need the context to be connected and ready to receive\n   * messages (the action broker) follow up with\n   * {@link LocalMiniappRuntime.waitForConnect}.\n   */\n  async ensureRunning(packageName: string, hints?: LaunchHints): Promise<LaunchResult> {\n    const router = this.requireRouter()\n\n    // Already spawned: best-effort resolve for the UI entry, never throw —\n    // a headless caller that doesn't need UI gets {null, null} fast even if\n    // the dev server has since dropped.\n    if (router.registeredPackages().includes(packageName)) {\n      const existing = await this.resolveBundle(packageName, hints).catch(() => null)\n      return {uiUri: existing?.uiUri ?? null, uiBaseDir: existing?.uiBaseDir ?? null}\n    }\n\n    // Coalesce concurrent launches of the same package onto one promise.\n    const pending = this.inFlight.get(packageName)\n    if (pending) return pending\n\n    const launch = this.spawn(packageName, hints)\n    this.inFlight.set(packageName, launch)\n    try {\n      return await launch\n    } finally {\n      this.inFlight.delete(packageName)\n    }\n  }\n\n  /** Resolve the bundle and spawn the context. Serialized via {@link inFlight}. */\n  private async spawn(packageName: string, hints?: LaunchHints): Promise<LaunchResult> {\n    const router = this.requireRouter()\n    const resolved = await this.resolveBundle(packageName, hints)\n    if (!resolved) {\n      throw new Error(`MiniappLauncher: cannot resolve bundle for ${packageName}`)\n    }\n\n    // Re-check after the async resolve: a different path may have spawned it\n    // while we were fetching/reading the bundle.\n    if (!router.registeredPackages().includes(packageName)) {\n      const ok = await router.spawnAndRegister(packageName, resolved.bgSource, {\n        permissions: resolved.declaredPermissions,\n        installedManifest: resolved.installedManifest,\n      })\n      if (!ok) {\n        throw new Error(`MiniappLauncher: spawn failed for ${packageName}`)\n      }\n\n      // Dev: wire the hot-reload + log-forwarding sidecar. No-op in prod\n      // (devServerBridge silently drops when no sidecar is up).\n      if (resolved.devUrl && resolved.devPort != null) {\n        devServerBridge.connect(packageName, resolved.devUrl, resolved.devPort)\n      } else if (resolved.devUrl) {\n        // Dev miniapp with no resolvable port — it still launches, but hot\n        // reload + log forwarding won't connect. Surface it instead of failing\n        // silently (the old inline path hard-failed with \"no dev port\").\n        console.warn(`MiniappLauncher: ${packageName} has no dev port — hot reload + log forwarding disabled`)\n      }\n    }\n\n    return {uiUri: resolved.uiUri, uiBaseDir: resolved.uiBaseDir}\n  }\n\n  /**\n   * Re-spawn local miniapps that were running when the app was last killed.\n   *\n   * Cloud apps run on a remote server: the cloud persists which ones are\n   * running and resurrects them when the phone reconnects, so a host-app\n   * restart brings them back on its own. Local (phone-hosted) miniapps run in\n   * the phone's own JS engine — a host-process kill tears down their JSContext\n   * and there is no server to resurrect them, so without this they silently\n   * stay stopped on the next launch even though the user left them running.\n   *\n   * Each local miniapp persists its running flag to disk on start/stop\n   * (`saveLocalAppRunningState`, via the applet's `onStart`/`onStop`). We read\n   * those flags back and re-spawn the background context headlessly (no\n   * foreground, no navigation) — the spawn registers the package so the home\n   * tray/switcher project it as running, exactly as a normal start would. The\n   * WebView, if any, re-attaches lazily when the user opens the app.\n   *\n   * Idempotent and best-effort: skips already-spawned contexts, and clears the\n   * persisted flag for any app whose bundle can no longer be resolved\n   * (uninstalled, or dev server gone) so a dead entry doesn't retry every boot.\n   * Not compatibility-gated: a previously-running background app shouldn't be\n   * dropped just because glasses are momentarily disconnected at boot — it\n   * resumes when they reconnect, same as mid-session.\n   */\n  async autostartLocalMiniapps(): Promise<void> {\n    const apps = await appRegistry.getInstalledMiniapps()\n    for (const app of apps) {\n      // Only phone-hosted miniapps have a JSContext to re-spawn. Offline\n      // built-ins (`local:false, offline:true`) restore their native running\n      // state elsewhere and have no bundle to launch.\n      if (!app.local) continue\n      if (!getLocalAppRunningState(app.packageName)) continue\n      if (this.isRunning(app.packageName)) continue\n      try {\n        await this.ensureRunning(app.packageName)\n      } catch (e) {\n        console.warn(`MiniappLauncher: autostart failed for ${app.packageName} — clearing stale running flag`, e)\n        saveLocalAppRunningState(app.packageName, false)\n      }\n    }\n  }\n\n  /**\n   * Ensure the context is running AND has completed its CONNECT handshake.\n   * Used by the action broker, which must not deliver to a context that hasn't\n   * come up yet. Throws on spawn failure or connect timeout.\n   */\n  async ensureConnected(packageName: string, connectTimeoutMs = 10_000, hints?: LaunchHints): Promise<void> {\n    await this.ensureRunning(packageName, hints)\n    await localMiniappRuntime.waitForConnect(packageName, connectTimeoutMs)\n  }\n\n  /** Tear down a miniapp's background JS context. */\n  async stop(packageName: string): Promise<void> {\n    // If a launch is in flight, let it finish first. Otherwise unregister()\n    // no-ops on the not-yet-registered package and the pending spawn then\n    // re-registers the context — leaving it running despite the stop.\n    const pending = this.inFlight.get(packageName)\n    if (pending) {\n      try {\n        await pending\n      } catch {\n        // Launch failed — nothing got registered, so nothing to tear down.\n      }\n    }\n    await this.deps?.router.unregister(packageName)\n  }\n\n  // --- internals -----------------------------------------------------------\n\n  private storedDevUrl(packageName: string): string | undefined {\n    const r = storage.load<string>(`${packageName}_dev_url`)\n    return r.is_ok() ? r.value : undefined\n  }\n\n  /** resolveDevPort — moved verbatim from the old LocalMiniappView helper. */\n  private resolveDevPort(searchParam: string | undefined, packageName: string): number | null {\n    if (searchParam) {\n      const n = parseInt(searchParam, 10)\n      if (Number.isFinite(n)) return n\n    }\n    const stored = storage.load<number>(`${packageName}_dev_port`)\n    if (stored.is_ok()) return stored.value\n    return null\n  }\n}\n\nexport const miniappLauncher = new MiniappLauncher()\n"]}
+{"version":3,"file":"MiniappLauncher.js","sourceRoot":"","sources":["../../src/services/MiniappLauncher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAC,IAAI,EAAC,MAAM,kBAAkB,CAAA;AAErC,OAAO,EAAC,oBAAoB,EAAC,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAC,OAAO,EAAC,MAAM,0BAA0B,CAAA;AAChD,OAAO,WAAW,EAAE,EAAC,uBAAuB,EAAE,wBAAwB,EAAC,MAAM,eAAe,CAAA;AAC5F,OAAO,eAAe,MAAM,mBAAmB,CAAA;AAC/C,OAAO,mBAAoD,MAAM,uBAAuB,CAAA;AAiCxF,MAAM,eAAe;IACX,IAAI,GAAwB,IAAI,CAAA;IAExC;;;;;;OAMG;IACc,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAA;IAEpE,uEAAuE;IACvE,SAAS,CAAC,IAAkB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;QACvF,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAA;IACzB,CAAC;IAED,yEAAyE;IACzE,SAAS,CAAC,WAAmB;QAC3B,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAA;IAC9E,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,KAAmB;QAC1D,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QAE9D,iEAAiE;QACjE,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YAC7D,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAA;YAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAuD,CAAA;YAC9E,IAAI,CAAC,KAAK,EAAE,UAAU;gBAAE,OAAO,IAAI,CAAA;YAEnC,sEAAsE;YACtE,mFAAmF;YACnF,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;YACjD,wEAAwE;YACxE,2CAA2C;YAC3C,MAAM,KAAK,GAAG,GAAG,IAAI,SAAS,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAA;YACvE,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YAEjF,MAAM,KAAK,GAAG,QAAQ,CAAC,WAA0D,CAAA;YACjF,MAAM,mBAAmB,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;iBACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;iBACjD,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAA;YACpD,MAAM,iBAAiB,GAA6B;gBAClD,WAAW,EAAE,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW;gBAC1F,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;gBAC5E,UAAU,EAAE,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBACrF,cAAc,EAAE,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;gBACjG,IAAI,EAAE,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBACnE,KAAK,EAAE,QAAQ,CAAC,KAA0C;gBAC1D,WAAW,EAAE,QAAQ,CAAC,WAAsD;gBAC5E,oBAAoB,EAAE,QAAQ,CAAC,oBAAwE;gBACvG,OAAO,EAAE,QAAQ,CAAC,OAA8C;aACjE,CAAA;YAED,IAAI,QAAgB,CAAA;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;gBAC9B,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAA;gBACxB,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;YAED,OAAO;gBACL,QAAQ;gBACR,KAAK;gBACL,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;gBACxD,mBAAmB;gBACnB,iBAAiB;gBACjB,MAAM,EAAE,KAAK,CAAC,WAAW;gBACzB,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC;aAC1D,CAAA;QACH,CAAC;QAED,iEAAiE;QACjE,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,CAAC,MAAM,WAAW,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAA;QACnF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACzB,MAAM,UAAU,GAAG,WAAW,CAAC,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QACzE,IAAI,CAAC,UAAU,EAAE,UAAU;YAAE,OAAO,IAAI,CAAA;QAExC,MAAM,QAAQ,GAAG,WAAW,CAAC,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAW5D,CAAA;QACR,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,CAAC;aACtD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAA;QACpD,MAAM,iBAAiB,GAAyC,QAAQ;YACtE,CAAC,CAAC;gBACE,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,WAAW;gBAChD,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,OAAO;gBACpC,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;gBACnD,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B;YACH,CAAC,CAAC,SAAS,CAAA;QAEb,IAAI,QAAgB,CAAA;QACpB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAA;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO;YACL,QAAQ;YACR,KAAK,EAAE,UAAU,CAAC,EAAE,IAAI,IAAI;YAC5B,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;YACxE,mBAAmB;YACnB,iBAAiB;YACjB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,KAAmB;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAA;QAEnC,uEAAuE;QACvE,wEAAwE;QACxE,oCAAoC;QACpC,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;YAC/E,OAAO,EAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI,EAAC,CAAA;QACjF,CAAC;QAED,qEAAqE;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAC9C,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QACtC,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAA;QACrB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;IAED,iFAAiF;IACzE,KAAK,CAAC,KAAK,CAAC,WAAmB,EAAE,KAAmB;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAA;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,8CAA8C,WAAW,EAAE,CAAC,CAAA;QAC9E,CAAC;QAED,yEAAyE;QACzE,6CAA6C;QAC7C,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE;gBACvE,WAAW,EAAE,QAAQ,CAAC,mBAAmB;gBACzC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;aAC9C,CAAC,CAAA;YACF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,IAAI,KAAK,CAAC,qCAAqC,WAAW,EAAE,CAAC,CAAA;YACrE,CAAC;YAED,mEAAmE;YACnE,0DAA0D;YAC1D,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;gBAChD,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;YACzE,CAAC;iBAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC3B,mEAAmE;gBACnE,uEAAuE;gBACvE,iEAAiE;gBACjE,OAAO,CAAC,IAAI,CAAC,oBAAoB,WAAW,yDAAyD,CAAC,CAAA;YACxG,CAAC;QACH,CAAC;QAED,OAAO,EAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAC,CAAA;IAC/D,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,KAAK,CAAC,sBAAsB;QAC1B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,oBAAoB,EAAE,CAAA;QACrD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,mEAAmE;YACnE,uEAAuE;YACvE,gDAAgD;YAChD,IAAI,CAAC,GAAG,CAAC,KAAK;gBAAE,SAAQ;YACxB,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,SAAQ;YACvD,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,SAAQ;YAC7C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAC3C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,yCAAyC,GAAG,CAAC,WAAW,gCAAgC,EAAE,CAAC,CAAC,CAAA;gBACzG,wBAAwB,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,gBAAgB,GAAG,MAAM,EAAE,KAAmB;QACvF,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QAC5C,MAAM,mBAAmB,CAAC,cAAc,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;IACzE,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,wEAAwE;QACxE,sEAAsE;QACtE,kEAAkE;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAC9C,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,OAAO,CAAA;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;YACrE,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;IACjD,CAAC;IAED,4EAA4E;IAEpE,YAAY,CAAC,WAAmB;QACtC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAS,GAAG,WAAW,UAAU,CAAC,CAAA;QACxD,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IACxC,CAAC;IAED,4EAA4E;IACpE,cAAc,CAAC,WAA+B,EAAE,WAAmB;QACzE,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;YACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAA;QAClC,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAS,GAAG,WAAW,WAAW,CAAC,CAAA;QAC9D,IAAI,MAAM,CAAC,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QACvC,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAA","sourcesContent":["/**\n * MiniappLauncher — headless launch/teardown of a local miniapp's background\n * JS context.\n *\n * This is the one piece of \"run a miniapp\" that used to live inside the\n * `LocalMiniappView` React component (resolve the bundle → read the manifest →\n * `spawnAndRegister`), triggered only when the Compositor mounted that\n * component on foreground. Pulling it into the runtime means:\n *\n *   - `start()` can actually spawn an app even when nothing foregrounds it\n *     (e.g. a system app launching another miniapp via `session.miniapps`).\n *   - the action broker can wake a stopped target headlessly — no UI at all.\n *   - the dev hot-reload respawn path and the WebView mount path share one\n *     resolve+spawn recipe instead of three copies.\n *\n * The launcher is **headless**: no React, no RN components. The engine-owned\n * MiniappEngine hands it the {@link MentraJSRouter} instance once during\n * engine construction. OEMs embedding the runtime drive miniapp lifecycle\n * through the engine facade and stores, not a separate launcher configure API.\n *\n * Boundary: the launcher owns the **background** context. WebView *rendering*\n * (the UI layer) stays with the host — the launcher just hands back the\n * resolved UI entry so the host can mount its `<WebView>`.\n */\n\nimport {File} from \"expo-file-system\"\n\nimport {decideDevLaunchRoute} from \"../utils/devMiniappLaunch\"\nimport {storage} from \"../utils/storage/storage\"\nimport appRegistry, {getLocalAppRunningState, saveLocalAppRunningState} from \"./AppRegistry\"\nimport devServerBridge from \"./DevServerBridge\"\nimport localMiniappRuntime, {type InstalledMiniappManifest} from \"./LocalMiniappRuntime\"\nimport type {MentraJSRouter} from \"./MentraJSRouter\"\n\ninterface LauncherDeps {\n  /** The host-constructed router (needs the native Crust binding). */\n  router: MentraJSRouter\n}\n\n/** Hints the host may pass from a view's props to avoid re-deriving them. */\nexport interface LaunchHints {\n  devUrl?: string\n  version?: string\n  devPort?: string\n}\n\n/** Everything the launcher resolved for a package — bg source + UI entry. */\nexport interface ResolvedBundle {\n  bgSource: string\n  uiUri: string | null\n  uiBaseDir: string | null\n  declaredPermissions: string[]\n  installedManifest?: InstalledMiniappManifest\n  /** Set for dev miniapps (HTTP off the dev server); null for released. */\n  devUrl: string | null\n  devPort: number | null\n}\n\n/** What the host needs back to render the UI layer. */\nexport interface LaunchResult {\n  uiUri: string | null\n  uiBaseDir: string | null\n}\n\nclass MiniappLauncher {\n  private deps: LauncherDeps | null = null\n\n  /**\n   * In-flight launches keyed by packageName. Both apps.ts start() and the\n   * WebView mount call ensureRunning() before the first spawnAndRegister\n   * resolves — without this, neither sees the package in registeredPackages()\n   * yet and both spawn the same context (a clobber/double-spawn). Concurrent\n   * callers share the same promise.\n   */\n  private readonly inFlight = new Map<string, Promise<LaunchResult>>()\n\n  /** Wire the router in. Called once from MiniappEngine construction. */\n  configure(deps: LauncherDeps): void {\n    this.deps = deps\n  }\n\n  private requireRouter(): MentraJSRouter {\n    if (!this.deps) {\n      throw new Error(\"MiniappLauncher not configured — ensureMiniappEngine() has not run\")\n    }\n    return this.deps.router\n  }\n\n  /** True iff the package's background JS context is currently spawned. */\n  isRunning(packageName: string): boolean {\n    return this.deps?.router.registeredPackages().includes(packageName) ?? false\n  }\n\n  /**\n   * Resolve the background JS source + UI entry + declared permissions for a\n   * package. Handles both dev (HTTP off the running dev server) and released\n   * (file:// from the installed snapshot). Reads disk/network/storage; does\n   * NOT spawn. Returns null when the bundle can't be resolved (dev server\n   * unreachable, missing entry, no installed version).\n   */\n  async resolveBundle(packageName: string, hints?: LaunchHints): Promise<ResolvedBundle | null> {\n    const devUrl = hints?.devUrl ?? this.storedDevUrl(packageName)\n\n    // --- Dev: load directly off the local dev server over HTTP. ---\n    if (devUrl) {\n      const route = await decideDevLaunchRoute(packageName, devUrl)\n      if (route.decision === \"offline\" || !route.manifest) return null\n      const manifest = route.manifest\n      const entry = manifest.entry as {background?: string; ui?: string} | undefined\n      if (!entry?.background) return null\n\n      // Use the host that actually answered — may differ from the stored IP\n      // after a laptop Wi-Fi change (mDNS / Metro failover inside decideDevLaunchRoute).\n      const base = route.resolvedUrl.replace(/\\/$/, \"\")\n      // entry.* are bundle-root paths (dist/ stripped); the dev server serves\n      // files relative to cwd, so prepend dist/.\n      const bgUrl = `${base}/dist/${entry.background.replace(/^\\.?\\/+/, \"\")}`\n      const uiUri = entry.ui ? `${base}/dist/${entry.ui.replace(/^\\.?\\/+/, \"\")}` : null\n\n      const perms = manifest.permissions as Array<{type?: string} | string> | undefined\n      const declaredPermissions = (perms ?? [])\n        .map((p) => (typeof p === \"string\" ? p : p?.type))\n        .filter((t): t is string => typeof t === \"string\")\n      const installedManifest: InstalledMiniappManifest = {\n        packageName: typeof manifest.packageName === \"string\" ? manifest.packageName : packageName,\n        name: manifest.name,\n        version: typeof manifest.version === \"string\" ? manifest.version : undefined,\n        sdkVersion: typeof manifest.sdkVersion === \"string\" ? manifest.sdkVersion : undefined,\n        minHostVersion: typeof manifest.minHostVersion === \"string\" ? manifest.minHostVersion : undefined,\n        type: typeof manifest.type === \"string\" ? manifest.type : undefined,\n        entry: manifest.entry as InstalledMiniappManifest[\"entry\"],\n        permissions: manifest.permissions as InstalledMiniappManifest[\"permissions\"],\n        hardwareRequirements: manifest.hardwareRequirements as InstalledMiniappManifest[\"hardwareRequirements\"],\n        actions: manifest.actions as InstalledMiniappManifest[\"actions\"],\n      }\n\n      let bgSource: string\n      try {\n        const res = await fetch(bgUrl)\n        if (!res.ok) return null\n        bgSource = await res.text()\n      } catch {\n        return null\n      }\n\n      return {\n        bgSource,\n        uiUri,\n        uiBaseDir: uiUri ? uiUri.replace(/\\/[^/]+$/, \"/\") : null,\n        declaredPermissions,\n        installedManifest,\n        devUrl: route.resolvedUrl,\n        devPort: this.resolveDevPort(hints?.devPort, packageName),\n      }\n    }\n\n    // --- Released: resolve from the installed file:// snapshot. ---\n    const version = hints?.version ?? (await appRegistry.getActiveVersion(packageName))\n    if (!version) return null\n    const entryPaths = appRegistry.getMiniappEntryPaths(packageName, version)\n    if (!entryPaths?.background) return null\n\n    const manifest = appRegistry.getMiniappManifest(packageName, version) as {\n      packageName?: string\n      name?: string\n      version?: string\n      sdkVersion?: string\n      minHostVersion?: string\n      type?: string\n      entry?: {background?: string; ui?: string}\n      permissions?: Array<{type: string; required?: boolean; description?: string}>\n      hardwareRequirements?: Array<{type: string; level: string; description?: string}>\n      actions?: Array<{id?: unknown; description?: unknown; parameters?: unknown; outputSchema?: unknown}>\n    } | null\n    const declaredPermissions = (manifest?.permissions ?? [])\n      .map((p) => p.type)\n      .filter((t): t is string => typeof t === \"string\")\n    const installedManifest: InstalledMiniappManifest | undefined = manifest\n      ? {\n          packageName: manifest.packageName ?? packageName,\n          name: manifest.name,\n          version: manifest.version ?? version,\n          sdkVersion: manifest.sdkVersion,\n          minHostVersion: manifest.minHostVersion,\n          type: manifest.type,\n          entry: manifest.entry,\n          permissions: manifest.permissions,\n          hardwareRequirements: manifest.hardwareRequirements,\n          actions: manifest.actions,\n        }\n      : undefined\n\n    let bgSource: string\n    try {\n      bgSource = new File(entryPaths.background).textSync()\n    } catch {\n      return null\n    }\n\n    return {\n      bgSource,\n      uiUri: entryPaths.ui ?? null,\n      uiBaseDir: entryPaths.ui ? entryPaths.ui.replace(/\\/[^/]+$/, \"/\") : null,\n      declaredPermissions,\n      installedManifest,\n      devUrl: null,\n      devPort: null,\n    }\n  }\n\n  /**\n   * Ensure a miniapp's background JS context is spawned. Idempotent — if the\n   * context is already alive this is a no-op spawn-wise (it still resolves the\n   * UI entry so a re-mounting host gets its `<WebView>` source back).\n   *\n   * Resolves once the context is SPAWNED. It does NOT block on the context's\n   * CONNECT handshake — the host's WebView mount shouldn't wait on background\n   * JS. Callers that need the context to be connected and ready to receive\n   * messages (the action broker) follow up with\n   * {@link LocalMiniappRuntime.waitForConnect}.\n   */\n  async ensureRunning(packageName: string, hints?: LaunchHints): Promise<LaunchResult> {\n    const router = this.requireRouter()\n\n    // Already spawned: best-effort resolve for the UI entry, never throw —\n    // a headless caller that doesn't need UI gets {null, null} fast even if\n    // the dev server has since dropped.\n    if (router.registeredPackages().includes(packageName)) {\n      const existing = await this.resolveBundle(packageName, hints).catch(() => null)\n      return {uiUri: existing?.uiUri ?? null, uiBaseDir: existing?.uiBaseDir ?? null}\n    }\n\n    // Coalesce concurrent launches of the same package onto one promise.\n    const pending = this.inFlight.get(packageName)\n    if (pending) return pending\n\n    const launch = this.spawn(packageName, hints)\n    this.inFlight.set(packageName, launch)\n    try {\n      return await launch\n    } finally {\n      this.inFlight.delete(packageName)\n    }\n  }\n\n  /** Resolve the bundle and spawn the context. Serialized via {@link inFlight}. */\n  private async spawn(packageName: string, hints?: LaunchHints): Promise<LaunchResult> {\n    const router = this.requireRouter()\n    const resolved = await this.resolveBundle(packageName, hints)\n    if (!resolved) {\n      throw new Error(`MiniappLauncher: cannot resolve bundle for ${packageName}`)\n    }\n\n    // Re-check after the async resolve: a different path may have spawned it\n    // while we were fetching/reading the bundle.\n    if (!router.registeredPackages().includes(packageName)) {\n      const ok = await router.spawnAndRegister(packageName, resolved.bgSource, {\n        permissions: resolved.declaredPermissions,\n        installedManifest: resolved.installedManifest,\n      })\n      if (!ok) {\n        throw new Error(`MiniappLauncher: spawn failed for ${packageName}`)\n      }\n\n      // Dev: wire the hot-reload + log-forwarding sidecar. No-op in prod\n      // (devServerBridge silently drops when no sidecar is up).\n      if (resolved.devUrl && resolved.devPort != null) {\n        devServerBridge.connect(packageName, resolved.devUrl, resolved.devPort)\n      } else if (resolved.devUrl) {\n        // Dev miniapp with no resolvable port — it still launches, but hot\n        // reload + log forwarding won't connect. Surface it instead of failing\n        // silently (the old inline path hard-failed with \"no dev port\").\n        console.warn(`MiniappLauncher: ${packageName} has no dev port — hot reload + log forwarding disabled`)\n      }\n    }\n\n    return {uiUri: resolved.uiUri, uiBaseDir: resolved.uiBaseDir}\n  }\n\n  /**\n   * Re-spawn local miniapps that were running when the app was last killed.\n   *\n   * Cloud apps run on a remote server: the cloud persists which ones are\n   * running and resurrects them when the phone reconnects, so a host-app\n   * restart brings them back on its own. Local (phone-hosted) miniapps run in\n   * the phone's own JS engine — a host-process kill tears down their JSContext\n   * and there is no server to resurrect them, so without this they silently\n   * stay stopped on the next launch even though the user left them running.\n   *\n   * Each local miniapp persists its running flag to disk on start/stop\n   * (`saveLocalAppRunningState`, via the applet's `onStart`/`onStop`). We read\n   * those flags back and re-spawn the background context headlessly (no\n   * foreground, no navigation) — the spawn registers the package so the home\n   * tray/switcher project it as running, exactly as a normal start would. The\n   * WebView, if any, re-attaches lazily when the user opens the app.\n   *\n   * Idempotent and best-effort: skips already-spawned contexts, and clears the\n   * persisted flag for any app whose bundle can no longer be resolved\n   * (uninstalled, or dev server gone) so a dead entry doesn't retry every boot.\n   * Not compatibility-gated: a previously-running background app shouldn't be\n   * dropped just because glasses are momentarily disconnected at boot — it\n   * resumes when they reconnect, same as mid-session.\n   */\n  async autostartLocalMiniapps(): Promise<void> {\n    const apps = await appRegistry.getInstalledMiniapps()\n    for (const app of apps) {\n      // Only phone-hosted miniapps have a JSContext to re-spawn. Offline\n      // built-ins (`local:false, offline:true`) restore their native running\n      // state elsewhere and have no bundle to launch.\n      if (!app.local) continue\n      if (!getLocalAppRunningState(app.packageName)) continue\n      if (this.isRunning(app.packageName)) continue\n      try {\n        await this.ensureRunning(app.packageName)\n      } catch (e) {\n        console.warn(`MiniappLauncher: autostart failed for ${app.packageName} — clearing stale running flag`, e)\n        saveLocalAppRunningState(app.packageName, false)\n      }\n    }\n  }\n\n  /**\n   * Ensure the context is running AND has completed its CONNECT handshake.\n   * Used by the action broker, which must not deliver to a context that hasn't\n   * come up yet. Throws on spawn failure or connect timeout.\n   */\n  async ensureConnected(packageName: string, connectTimeoutMs = 10_000, hints?: LaunchHints): Promise<void> {\n    await this.ensureRunning(packageName, hints)\n    await localMiniappRuntime.waitForConnect(packageName, connectTimeoutMs)\n  }\n\n  /** Tear down a miniapp's background JS context. */\n  async stop(packageName: string): Promise<void> {\n    // If a launch is in flight, let it finish first. Otherwise unregister()\n    // no-ops on the not-yet-registered package and the pending spawn then\n    // re-registers the context — leaving it running despite the stop.\n    const pending = this.inFlight.get(packageName)\n    if (pending) {\n      try {\n        await pending\n      } catch {\n        // Launch failed — nothing got registered, so nothing to tear down.\n      }\n    }\n    await this.deps?.router.unregister(packageName)\n  }\n\n  // --- internals -----------------------------------------------------------\n\n  private storedDevUrl(packageName: string): string | undefined {\n    const r = storage.load<string>(`${packageName}_dev_url`)\n    return r.is_ok() ? r.value : undefined\n  }\n\n  /** resolveDevPort — moved verbatim from the old LocalMiniappView helper. */\n  private resolveDevPort(searchParam: string | undefined, packageName: string): number | null {\n    if (searchParam) {\n      const n = parseInt(searchParam, 10)\n      if (Number.isFinite(n)) return n\n    }\n    const stored = storage.load<number>(`${packageName}_dev_port`)\n    if (stored.is_ok()) return stored.value\n    return null\n  }\n}\n\nexport const miniappLauncher = new MiniappLauncher()\n"]}

package/build/services/MiniappLiveness.d.ts

@@ -0,0 +1,12 @@
+export interface MiniappPingLivenessDecision {
+    shouldUnregister: boolean;
+    unansweredPingRounds: number;
+}
+/**
+ * Advance liveness by one scheduled ping round.
+ *
+ * Counting actual rounds avoids treating time while React Native's scheduler
+ * was paused in the background as pings the miniapp failed to answer.
+ */
+export declare function advanceMiniappPingLiveness(unansweredPingRounds: number, timeoutThreshold: number): MiniappPingLivenessDecision;
+//# sourceMappingURL=MiniappLiveness.d.ts.map

package/build/services/MiniappLiveness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MiniappLiveness.d.ts","sourceRoot":"","sources":["../../src/services/MiniappLiveness.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,2BAA2B;IAC1C,gBAAgB,EAAE,OAAO,CAAA;IACzB,oBAAoB,EAAE,MAAM,CAAA;CAC7B;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,oBAAoB,EAAE,MAAM,EAC5B,gBAAgB,EAAE,MAAM,GACvB,2BAA2B,CAS7B"}

package/build/services/MiniappLiveness.js

@@ -0,0 +1,16 @@
+/**
+ * Advance liveness by one scheduled ping round.
+ *
+ * Counting actual rounds avoids treating time while React Native's scheduler
+ * was paused in the background as pings the miniapp failed to answer.
+ */
+export function advanceMiniappPingLiveness(unansweredPingRounds, timeoutThreshold) {
+    if (unansweredPingRounds >= timeoutThreshold) {
+        return { shouldUnregister: true, unansweredPingRounds };
+    }
+    return {
+        shouldUnregister: false,
+        unansweredPingRounds: unansweredPingRounds + 1,
+    };
+}
+//# sourceMappingURL=MiniappLiveness.js.map

package/build/services/MiniappLiveness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MiniappLiveness.js","sourceRoot":"","sources":["../../src/services/MiniappLiveness.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,oBAA4B,EAC5B,gBAAwB;IAExB,IAAI,oBAAoB,IAAI,gBAAgB,EAAE,CAAC;QAC7C,OAAO,EAAC,gBAAgB,EAAE,IAAI,EAAE,oBAAoB,EAAC,CAAA;IACvD,CAAC;IAED,OAAO;QACL,gBAAgB,EAAE,KAAK;QACvB,oBAAoB,EAAE,oBAAoB,GAAG,CAAC;KAC/C,CAAA;AACH,CAAC","sourcesContent":["export interface MiniappPingLivenessDecision {\n  shouldUnregister: boolean\n  unansweredPingRounds: number\n}\n\n/**\n * Advance liveness by one scheduled ping round.\n *\n * Counting actual rounds avoids treating time while React Native's scheduler\n * was paused in the background as pings the miniapp failed to answer.\n */\nexport function advanceMiniappPingLiveness(\n  unansweredPingRounds: number,\n  timeoutThreshold: number,\n): MiniappPingLivenessDecision {\n  if (unansweredPingRounds >= timeoutThreshold) {\n    return {shouldUnregister: true, unansweredPingRounds}\n  }\n\n  return {\n    shouldUnregister: false,\n    unansweredPingRounds: unansweredPingRounds + 1,\n  }\n}\n"]}

package/build/services/OtaArtifactDownloader.d.ts

@@ -0,0 +1,65 @@
+import type { OtaCheckCurrentGlassesResult } from "./OtaUpdateCheckService";
+/**
+ * Phone-side artifact staging for hotspot-served OTA (OS-1676).
+ *
+ * When the glasses have no WiFi, the phone downloads the OTA artifacts itself (over
+ * whatever network it is on — the user's tap on "update" is the consent) and serves them
+ * to the glasses via the LocalOtaServer over the glasses' hotspot. This module owns:
+ *
+ * - planning which artifacts the pending update actually needs (from the raw manifest the
+ *   update check fetched, so the glasses re-parse byte-identical version data),
+ * - downloading them with .part staging and sha256 verification, keyed on disk by hash so
+ *   retries and the post-APK continuation reuse verified files,
+ * - rewriting the manifest's URL fields to point at the phone server, and
+ * - cleanup once the update completes or the manifest moves on.
+ */
+export type OtaArtifactKind = "apk" | "mtk" | "bes";
+export interface OtaArtifactPlanEntry {
+    kind: OtaArtifactKind;
+    /** URL this artifact is fetched from, exactly as it appears in the raw manifest. */
+    url: string;
+    /** Required content hash from the manifest. */
+    sha256: string;
+}
+export interface PreparedOtaArtifact extends OtaArtifactPlanEntry {
+    filePath: string;
+}
+export interface OtaArtifactDownloadProgress {
+    kind: OtaArtifactKind;
+    /** 0-based index of the artifact being downloaded. */
+    index: number;
+    totalCount: number;
+    /** Percent of the current artifact, 0-100 (0 when the server sent no length). */
+    artifactPercent: number;
+    bytesWritten: number;
+    contentLength: number;
+}
+export declare class OtaArtifactError extends Error {
+    readonly code: "artifact_download_failed" | "artifact_verify_failed" | "manifest_invalid";
+    constructor(code: "artifact_download_failed" | "artifact_verify_failed" | "manifest_invalid", message: string);
+}
+export declare function otaArtifactsDirectory(): string;
+/**
+ * Derive the artifact list the pending update needs from a completed check.
+ * Works off the raw manifest body (not the normalized check fields) so the URLs and
+ * hashes match exactly what the glasses will re-parse.
+ */
+export declare function planArtifacts(result: OtaCheckCurrentGlassesResult): OtaArtifactPlanEntry[];
+/**
+ * Download every planned artifact into the on-disk hash-keyed store, reusing files that
+ * already verify. Sequential on purpose: progress is legible and the hotspot window that
+ * follows is the slow part, not phone-side parallelism.
+ */
+export declare function prepareArtifacts(plan: OtaArtifactPlanEntry[], onProgress?: (progress: OtaArtifactDownloadProgress) => void, nativeDownload?: (entry: OtaArtifactPlanEntry, destination: string, onProgress?: (bytesWritten: number, contentLength: number) => void) => Promise<{
+    statusCode: number;
+}>): Promise<PreparedOtaArtifact[]>;
+/**
+ * Point the manifest's artifact URLs at the phone server, leaving every other field
+ * semantically identical to what the update check saw. Entries we host get
+ * `<baseUrl>/artifacts/<sha256>`; entries the update does not need keep their CDN URLs.
+ * Only URL fields change: target versions, sizes, and manifest hashes remain untouched.
+ */
+export declare function rewriteManifestForLocalServer(manifestBody: string, artifacts: PreparedOtaArtifact[], baseUrl: string): string;
+/** Delete every stored artifact whose hash is not in `keepSha256s` (plus stray .part files). */
+export declare function cleanupArtifacts(keepSha256s?: string[]): Promise<void>;
+//# sourceMappingURL=OtaArtifactDownloader.d.ts.map

package/build/services/OtaArtifactDownloader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaArtifactDownloader.d.ts","sourceRoot":"","sources":["../../src/services/OtaArtifactDownloader.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,4BAA4B,EAAc,MAAM,yBAAyB,CAAA;AAEtF;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAA;AAEnD,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,eAAe,CAAA;IACrB,oFAAoF;IACpF,GAAG,EAAE,MAAM,CAAA;IACX,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;IAC/D,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,eAAe,CAAA;IACrB,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,iFAAiF;IACjF,eAAe,EAAE,MAAM,CAAA;IACvB,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,IAAI,EAAE,0BAA0B,GAAG,wBAAwB,GAAG,kBAAkB;gBAAhF,IAAI,EAAE,0BAA0B,GAAG,wBAAwB,GAAG,kBAAkB,EAChG,OAAO,EAAE,MAAM;CAKlB;AAID,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,4BAA4B,GAAG,oBAAoB,EAAE,CAuD1F;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,oBAAoB,EAAE,EAC5B,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,2BAA2B,KAAK,IAAI,EAC5D,cAAc,CAAC,EAAE,CACf,KAAK,EAAE,oBAAoB,EAC3B,WAAW,EAAE,MAAM,EACnB,UAAU,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,IAAI,KAC/D,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC,CAAC,GACjC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CA0EhC;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,mBAAmB,EAAE,EAChC,OAAO,EAAE,MAAM,GACd,MAAM,CA0BR;AAED,gGAAgG;AAChG,wBAAsB,gBAAgB,CAAC,WAAW,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhF"}

package/build/services/OtaArtifactDownloader.js

@@ -0,0 +1,226 @@
+import * as RNFS from "@dr.pogodin/react-native-fs";
+export class OtaArtifactError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "OtaArtifactError";
+    }
+}
+const ASG_PACKAGE = "com.mentra.asg_client";
+export function otaArtifactsDirectory() {
+    return `${RNFS.DocumentDirectoryPath}/ota_artifacts`;
+}
+/**
+ * Derive the artifact list the pending update needs from a completed check.
+ * Works off the raw manifest body (not the normalized check fields) so the URLs and
+ * hashes match exactly what the glasses will re-parse.
+ */
+export function planArtifacts(result) {
+    if (!result.manifestBody) {
+        throw new OtaArtifactError("manifest_invalid", "Check result carries no manifest body");
+    }
+    let manifest;
+    try {
+        manifest = JSON.parse(result.manifestBody);
+    }
+    catch {
+        throw new OtaArtifactError("manifest_invalid", "Manifest body is not valid JSON");
+    }
+    const entries = [];
+    if (result.updates.includes("apk")) {
+        const app = manifest.apps?.[ASG_PACKAGE];
+        const url = typeof app?.apkUrl === "string" ? app.apkUrl : null;
+        if (!url) {
+            throw new OtaArtifactError("manifest_invalid", "Manifest has no apkUrl for the pending APK update");
+        }
+        entries.push({
+            kind: "apk",
+            url,
+            sha256: requireSha256(app, "APK"),
+        });
+    }
+    if (result.updates.includes("mtk") && result.mtkPatch) {
+        const raw = (manifest.mtk_patches ?? []).find((patch) => firmwareUrl(patch) === firmwareUrl(result.mtkPatch));
+        const url = firmwareUrl(raw) ?? firmwareUrl(result.mtkPatch);
+        if (!url) {
+            throw new OtaArtifactError("manifest_invalid", "Manifest has no URL for the pending MTK patch");
+        }
+        entries.push({
+            kind: "mtk",
+            url,
+            sha256: requireSha256(raw, "MTK"),
+        });
+    }
+    if (result.updates.includes("bes") && manifest.bes_firmware) {
+        const raw = manifest.bes_firmware;
+        const url = firmwareUrl(raw);
+        if (!url) {
+            throw new OtaArtifactError("manifest_invalid", "Manifest has no URL for the pending BES firmware");
+        }
+        entries.push({
+            kind: "bes",
+            url,
+            sha256: requireSha256(raw, "BES"),
+        });
+    }
+    return entries;
+}
+/**
+ * Download every planned artifact into the on-disk hash-keyed store, reusing files that
+ * already verify. Sequential on purpose: progress is legible and the hotspot window that
+ * follows is the slow part, not phone-side parallelism.
+ */
+export async function prepareArtifacts(plan, onProgress, nativeDownload) {
+    const directory = otaArtifactsDirectory();
+    await RNFS.mkdir(directory, { NSURLIsExcludedFromBackupKey: true });
+    const prepared = [];
+    for (let index = 0; index < plan.length; index++) {
+        const entry = plan[index];
+        const cachedPath = `${directory}/${entry.sha256}`;
+        if (await RNFS.exists(cachedPath)) {
+            const cachedHash = (await RNFS.hash(cachedPath, "sha256")).toLowerCase();
+            if (cachedHash === entry.sha256) {
+                prepared.push({ ...entry, filePath: cachedPath });
+                continue;
+            }
+            await safeUnlink(cachedPath);
+        }
+        const partPath = `${directory}/download-${index}.part`;
+        await safeUnlink(partPath);
+        try {
+            const reportProgress = (bytesWritten, contentLength) => {
+                onProgress?.({
+                    kind: entry.kind,
+                    index,
+                    totalCount: plan.length,
+                    artifactPercent: contentLength > 0 ? Math.round((bytesWritten / contentLength) * 100) : 0,
+                    bytesWritten,
+                    contentLength,
+                });
+            };
+            const downloadResult = nativeDownload
+                ? await nativeDownload(entry, partPath, reportProgress)
+                : await RNFS.downloadFile({
+                    fromUrl: entry.url,
+                    toFile: partPath,
+                    connectionTimeout: 30_000,
+                    readTimeout: 30_000,
+                    progressDivider: 5,
+                    progress: (res) => {
+                        reportProgress(res.bytesWritten, res.contentLength);
+                    },
+                }).promise;
+            if (downloadResult.statusCode !== 200) {
+                throw new OtaArtifactError("artifact_download_failed", `Download of ${entry.kind} artifact failed with HTTP ${downloadResult.statusCode}`);
+            }
+            const actualSha256 = (await RNFS.hash(partPath, "sha256")).toLowerCase();
+            if (actualSha256 !== entry.sha256) {
+                throw new OtaArtifactError("artifact_verify_failed", `${entry.kind} artifact hash mismatch: expected ${entry.sha256}, got ${actualSha256}`);
+            }
+            const finalPath = `${directory}/${entry.sha256}`;
+            await safeUnlink(finalPath);
+            await RNFS.moveFile(partPath, finalPath);
+            prepared.push({ ...entry, filePath: finalPath });
+        }
+        catch (error) {
+            await safeUnlink(partPath);
+            if (error instanceof OtaArtifactError) {
+                throw error;
+            }
+            throw new OtaArtifactError("artifact_download_failed", `Download of ${entry.kind} artifact failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    return prepared;
+}
+/**
+ * Point the manifest's artifact URLs at the phone server, leaving every other field
+ * semantically identical to what the update check saw. Entries we host get
+ * `<baseUrl>/artifacts/<sha256>`; entries the update does not need keep their CDN URLs.
+ * Only URL fields change: target versions, sizes, and manifest hashes remain untouched.
+ */
+export function rewriteManifestForLocalServer(manifestBody, artifacts, baseUrl) {
+    let manifest;
+    try {
+        manifest = JSON.parse(manifestBody);
+    }
+    catch {
+        throw new OtaArtifactError("manifest_invalid", "Manifest body is not valid JSON");
+    }
+    const byUrl = new Map(artifacts.map((artifact) => [artifact.url, artifact]));
+    const localUrl = (artifact) => `${baseUrl}/artifacts/${artifact.sha256}`;
+    for (const app of Object.values(manifest.apps ?? {})) {
+        const record = app;
+        const artifact = typeof record.apkUrl === "string" ? byUrl.get(record.apkUrl) : undefined;
+        if (artifact) {
+            record.apkUrl = localUrl(artifact);
+        }
+    }
+    for (const patch of manifest.mtk_patches ?? []) {
+        rewriteFirmwareEntry(patch, byUrl, localUrl);
+    }
+    if (manifest.bes_firmware) {
+        rewriteFirmwareEntry(manifest.bes_firmware, byUrl, localUrl);
+    }
+    return JSON.stringify(manifest);
+}
+/** Delete every stored artifact whose hash is not in `keepSha256s` (plus stray .part files). */
+export async function cleanupArtifacts(keepSha256s = []) {
+    const directory = otaArtifactsDirectory();
+    if (!(await RNFS.exists(directory))) {
+        return;
+    }
+    const keep = new Set(keepSha256s.map((sha) => sha.toLowerCase()));
+    const items = await RNFS.readDir(directory);
+    for (const item of items) {
+        if (!item.isFile())
+            continue;
+        if (keep.has(item.name.toLowerCase()))
+            continue;
+        await safeUnlink(item.path);
+    }
+}
+function rewriteFirmwareEntry(entry, byUrl, localUrl) {
+    const url = firmwareUrl(entry);
+    const artifact = url ? byUrl.get(url) : undefined;
+    if (!artifact) {
+        return;
+    }
+    entry.url = localUrl(artifact);
+    // Overwrite the legacy key too when present, so no glasses build can prefer a stale
+    // CDN URL over the local one.
+    if (typeof entry.firmwareUrl === "string") {
+        entry.firmwareUrl = localUrl(artifact);
+    }
+}
+function firmwareUrl(entry) {
+    if (!entry || typeof entry !== "object") {
+        return null;
+    }
+    const record = entry;
+    if (typeof record.url === "string" && record.url.length > 0) {
+        return record.url;
+    }
+    if (typeof record.firmwareUrl === "string" && record.firmwareUrl.length > 0) {
+        return record.firmwareUrl;
+    }
+    return null;
+}
+function requireSha256(entry, label) {
+    const sha256 = typeof entry?.sha256 === "string" ? entry.sha256.trim().toLowerCase() : "";
+    if (!/^[a-f0-9]{64}$/.test(sha256)) {
+        throw new OtaArtifactError("manifest_invalid", `${label} artifact has no valid manifest sha256`);
+    }
+    return sha256;
+}
+async function safeUnlink(path) {
+    try {
+        if (await RNFS.exists(path)) {
+            await RNFS.unlink(path);
+        }
+    }
+    catch {
+        // Best-effort: a leftover file only wastes space and is cleaned up next run.
+    }
+}
+//# sourceMappingURL=OtaArtifactDownloader.js.map

package/build/services/OtaArtifactDownloader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaArtifactDownloader.js","sourceRoot":"","sources":["../../src/services/OtaArtifactDownloader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,6BAA6B,CAAA;AA2CnD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEvB;IADlB,YACkB,IAAgF,EAChG,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHE,SAAI,GAAJ,IAAI,CAA4E;QAIhG,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAChC,CAAC;CACF;AAED,MAAM,WAAW,GAAG,uBAAuB,CAAA;AAE3C,MAAM,UAAU,qBAAqB;IACnC,OAAO,GAAG,IAAI,CAAC,qBAAqB,gBAAgB,CAAA;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAoC;IAChE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,uCAAuC,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,QAAqB,CAAA;IACzB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAA;IACnF,CAAC;IAED,MAAM,OAAO,GAA2B,EAAE,CAAA;IAE1C,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,CAAmD,CAAA;QAC1F,MAAM,GAAG,GAAG,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,mDAAmD,CAAC,CAAA;QACrG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK;YACX,GAAG;YACH,MAAM,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;SAClC,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAC3C,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC,QAAS,CAAC,CACd,CAAA;QACnD,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC5D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,+CAA+C,CAAC,CAAA;QACjG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK;YACX,GAAG;YACH,MAAM,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;SAClC,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAkD,CAAA;QACvE,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,kDAAkD,CAAC,CAAA;QACpG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK;YACX,GAAG;YACH,MAAM,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;SAClC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA4B,EAC5B,UAA4D,EAC5D,cAIkC;IAElC,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAA;IACzC,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAC,4BAA4B,EAAE,IAAI,EAAC,CAAC,CAAA;IAEjE,MAAM,QAAQ,GAA0B,EAAE,CAAA;IAC1C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;QAEzB,MAAM,UAAU,GAAG,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAA;QACjD,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;YACxE,IAAI,UAAU,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,EAAC,GAAG,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAC,CAAC,CAAA;gBAC/C,SAAQ;YACV,CAAC;YACD,MAAM,UAAU,CAAC,UAAU,CAAC,CAAA;QAC9B,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,SAAS,aAAa,KAAK,OAAO,CAAA;QACtD,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAA;QAC1B,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,CAAC,YAAoB,EAAE,aAAqB,EAAE,EAAE;gBACrE,UAAU,EAAE,CAAC;oBACX,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK;oBACL,UAAU,EAAE,IAAI,CAAC,MAAM;oBACvB,eAAe,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBACzF,YAAY;oBACZ,aAAa;iBACd,CAAC,CAAA;YACJ,CAAC,CAAA;YACD,MAAM,cAAc,GAAG,cAAc;gBACnC,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC;gBACvD,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC;oBACtB,OAAO,EAAE,KAAK,CAAC,GAAG;oBAClB,MAAM,EAAE,QAAQ;oBAChB,iBAAiB,EAAE,MAAM;oBACzB,WAAW,EAAE,MAAM;oBACnB,eAAe,EAAE,CAAC;oBAClB,QAAQ,EAAE,CAAC,GAAyC,EAAE,EAAE;wBACtD,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,aAAa,CAAC,CAAA;oBACrD,CAAC;iBACF,CAAC,CAAC,OAAO,CAAA;YACd,IAAI,cAAc,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBACtC,MAAM,IAAI,gBAAgB,CACxB,0BAA0B,EAC1B,eAAe,KAAK,CAAC,IAAI,8BAA8B,cAAc,CAAC,UAAU,EAAE,CACnF,CAAA;YACH,CAAC;YAED,MAAM,YAAY,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;YACxE,IAAI,YAAY,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,IAAI,gBAAgB,CACxB,wBAAwB,EACxB,GAAG,KAAK,CAAC,IAAI,qCAAqC,KAAK,CAAC,MAAM,SAAS,YAAY,EAAE,CACtF,CAAA;YACH,CAAC;YAED,MAAM,SAAS,GAAG,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAA;YAChD,MAAM,UAAU,CAAC,SAAS,CAAC,CAAA;YAC3B,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;YACxC,QAAQ,CAAC,IAAI,CAAC,EAAC,GAAG,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAC,CAAC,CAAA;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC1B,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,0BAA0B,EAC1B,eAAe,KAAK,CAAC,IAAI,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvG,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,YAAoB,EACpB,SAAgC,EAChC,OAAe;IAEf,IAAI,QAAqB,CAAA;IACzB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAA;IACnF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC5E,MAAM,QAAQ,GAAG,CAAC,QAA6B,EAAE,EAAE,CAAC,GAAG,OAAO,cAAc,QAAQ,CAAC,MAAM,EAAE,CAAA;IAE7F,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,GAAyC,CAAA;QACxD,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACzF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QAC/C,oBAAoB,CAAC,KAA2C,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;IACpF,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC1B,oBAAoB,CAAC,QAAQ,CAAC,YAAkD,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;IACpG,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;AACjC,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,cAAwB,EAAE;IAC/D,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAA;IACzC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACpC,OAAM;IACR,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IACjE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,SAAQ;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,SAAQ;QAC/C,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAA8B,EAC9B,KAAuC,EACvC,QAAmD;IAEnD,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAM;IACR,CAAC;IACD,KAAK,CAAC,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC9B,oFAAoF;IACpF,8BAA8B;IAC9B,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC1C,KAAK,CAAC,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACxC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,GAAG,CAAA;IACnB,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,MAAM,CAAC,WAAW,CAAA;IAC3B,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAA0C,EAAE,KAAa;IAC9E,MAAM,MAAM,GAAG,OAAO,KAAK,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACzF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,KAAK,wCAAwC,CAAC,CAAA;IAClG,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;IAC/E,CAAC;AACH,CAAC","sourcesContent":["import * as RNFS from \"@dr.pogodin/react-native-fs\"\nimport type {OtaCheckCurrentGlassesResult, VersionJson} from \"./OtaUpdateCheckService\"\n\n/**\n * Phone-side artifact staging for hotspot-served OTA (OS-1676).\n *\n * When the glasses have no WiFi, the phone downloads the OTA artifacts itself (over\n * whatever network it is on — the user's tap on \"update\" is the consent) and serves them\n * to the glasses via the LocalOtaServer over the glasses' hotspot. This module owns:\n *\n * - planning which artifacts the pending update actually needs (from the raw manifest the\n *   update check fetched, so the glasses re-parse byte-identical version data),\n * - downloading them with .part staging and sha256 verification, keyed on disk by hash so\n *   retries and the post-APK continuation reuse verified files,\n * - rewriting the manifest's URL fields to point at the phone server, and\n * - cleanup once the update completes or the manifest moves on.\n */\n\nexport type OtaArtifactKind = \"apk\" | \"mtk\" | \"bes\"\n\nexport interface OtaArtifactPlanEntry {\n  kind: OtaArtifactKind\n  /** URL this artifact is fetched from, exactly as it appears in the raw manifest. */\n  url: string\n  /** Required content hash from the manifest. */\n  sha256: string\n}\n\nexport interface PreparedOtaArtifact extends OtaArtifactPlanEntry {\n  filePath: string\n}\n\nexport interface OtaArtifactDownloadProgress {\n  kind: OtaArtifactKind\n  /** 0-based index of the artifact being downloaded. */\n  index: number\n  totalCount: number\n  /** Percent of the current artifact, 0-100 (0 when the server sent no length). */\n  artifactPercent: number\n  bytesWritten: number\n  contentLength: number\n}\n\nexport class OtaArtifactError extends Error {\n  constructor(\n    public readonly code: \"artifact_download_failed\" | \"artifact_verify_failed\" | \"manifest_invalid\",\n    message: string,\n  ) {\n    super(message)\n    this.name = \"OtaArtifactError\"\n  }\n}\n\nconst ASG_PACKAGE = \"com.mentra.asg_client\"\n\nexport function otaArtifactsDirectory(): string {\n  return `${RNFS.DocumentDirectoryPath}/ota_artifacts`\n}\n\n/**\n * Derive the artifact list the pending update needs from a completed check.\n * Works off the raw manifest body (not the normalized check fields) so the URLs and\n * hashes match exactly what the glasses will re-parse.\n */\nexport function planArtifacts(result: OtaCheckCurrentGlassesResult): OtaArtifactPlanEntry[] {\n  if (!result.manifestBody) {\n    throw new OtaArtifactError(\"manifest_invalid\", \"Check result carries no manifest body\")\n  }\n  let manifest: VersionJson\n  try {\n    manifest = JSON.parse(result.manifestBody)\n  } catch {\n    throw new OtaArtifactError(\"manifest_invalid\", \"Manifest body is not valid JSON\")\n  }\n\n  const entries: OtaArtifactPlanEntry[] = []\n\n  if (result.updates.includes(\"apk\")) {\n    const app = manifest.apps?.[ASG_PACKAGE] as unknown as Record<string, unknown> | undefined\n    const url = typeof app?.apkUrl === \"string\" ? app.apkUrl : null\n    if (!url) {\n      throw new OtaArtifactError(\"manifest_invalid\", \"Manifest has no apkUrl for the pending APK update\")\n    }\n    entries.push({\n      kind: \"apk\",\n      url,\n      sha256: requireSha256(app, \"APK\"),\n    })\n  }\n\n  if (result.updates.includes(\"mtk\") && result.mtkPatch) {\n    const raw = (manifest.mtk_patches ?? []).find(\n      (patch) => firmwareUrl(patch) === firmwareUrl(result.mtkPatch!),\n    ) as unknown as Record<string, unknown> | undefined\n    const url = firmwareUrl(raw) ?? firmwareUrl(result.mtkPatch)\n    if (!url) {\n      throw new OtaArtifactError(\"manifest_invalid\", \"Manifest has no URL for the pending MTK patch\")\n    }\n    entries.push({\n      kind: \"mtk\",\n      url,\n      sha256: requireSha256(raw, \"MTK\"),\n    })\n  }\n\n  if (result.updates.includes(\"bes\") && manifest.bes_firmware) {\n    const raw = manifest.bes_firmware as unknown as Record<string, unknown>\n    const url = firmwareUrl(raw)\n    if (!url) {\n      throw new OtaArtifactError(\"manifest_invalid\", \"Manifest has no URL for the pending BES firmware\")\n    }\n    entries.push({\n      kind: \"bes\",\n      url,\n      sha256: requireSha256(raw, \"BES\"),\n    })\n  }\n\n  return entries\n}\n\n/**\n * Download every planned artifact into the on-disk hash-keyed store, reusing files that\n * already verify. Sequential on purpose: progress is legible and the hotspot window that\n * follows is the slow part, not phone-side parallelism.\n */\nexport async function prepareArtifacts(\n  plan: OtaArtifactPlanEntry[],\n  onProgress?: (progress: OtaArtifactDownloadProgress) => void,\n  nativeDownload?: (\n    entry: OtaArtifactPlanEntry,\n    destination: string,\n    onProgress?: (bytesWritten: number, contentLength: number) => void,\n  ) => Promise<{statusCode: number}>,\n): Promise<PreparedOtaArtifact[]> {\n  const directory = otaArtifactsDirectory()\n  await RNFS.mkdir(directory, {NSURLIsExcludedFromBackupKey: true})\n\n  const prepared: PreparedOtaArtifact[] = []\n  for (let index = 0; index < plan.length; index++) {\n    const entry = plan[index]\n\n    const cachedPath = `${directory}/${entry.sha256}`\n    if (await RNFS.exists(cachedPath)) {\n      const cachedHash = (await RNFS.hash(cachedPath, \"sha256\")).toLowerCase()\n      if (cachedHash === entry.sha256) {\n        prepared.push({...entry, filePath: cachedPath})\n        continue\n      }\n      await safeUnlink(cachedPath)\n    }\n\n    const partPath = `${directory}/download-${index}.part`\n    await safeUnlink(partPath)\n    try {\n      const reportProgress = (bytesWritten: number, contentLength: number) => {\n        onProgress?.({\n          kind: entry.kind,\n          index,\n          totalCount: plan.length,\n          artifactPercent: contentLength > 0 ? Math.round((bytesWritten / contentLength) * 100) : 0,\n          bytesWritten,\n          contentLength,\n        })\n      }\n      const downloadResult = nativeDownload\n        ? await nativeDownload(entry, partPath, reportProgress)\n        : await RNFS.downloadFile({\n            fromUrl: entry.url,\n            toFile: partPath,\n            connectionTimeout: 30_000,\n            readTimeout: 30_000,\n            progressDivider: 5,\n            progress: (res: RNFS.DownloadProgressCallbackResultT) => {\n              reportProgress(res.bytesWritten, res.contentLength)\n            },\n          }).promise\n      if (downloadResult.statusCode !== 200) {\n        throw new OtaArtifactError(\n          \"artifact_download_failed\",\n          `Download of ${entry.kind} artifact failed with HTTP ${downloadResult.statusCode}`,\n        )\n      }\n\n      const actualSha256 = (await RNFS.hash(partPath, \"sha256\")).toLowerCase()\n      if (actualSha256 !== entry.sha256) {\n        throw new OtaArtifactError(\n          \"artifact_verify_failed\",\n          `${entry.kind} artifact hash mismatch: expected ${entry.sha256}, got ${actualSha256}`,\n        )\n      }\n\n      const finalPath = `${directory}/${entry.sha256}`\n      await safeUnlink(finalPath)\n      await RNFS.moveFile(partPath, finalPath)\n      prepared.push({...entry, filePath: finalPath})\n    } catch (error) {\n      await safeUnlink(partPath)\n      if (error instanceof OtaArtifactError) {\n        throw error\n      }\n      throw new OtaArtifactError(\n        \"artifact_download_failed\",\n        `Download of ${entry.kind} artifact failed: ${error instanceof Error ? error.message : String(error)}`,\n      )\n    }\n  }\n  return prepared\n}\n\n/**\n * Point the manifest's artifact URLs at the phone server, leaving every other field\n * semantically identical to what the update check saw. Entries we host get\n * `<baseUrl>/artifacts/<sha256>`; entries the update does not need keep their CDN URLs.\n * Only URL fields change: target versions, sizes, and manifest hashes remain untouched.\n */\nexport function rewriteManifestForLocalServer(\n  manifestBody: string,\n  artifacts: PreparedOtaArtifact[],\n  baseUrl: string,\n): string {\n  let manifest: VersionJson\n  try {\n    manifest = JSON.parse(manifestBody)\n  } catch {\n    throw new OtaArtifactError(\"manifest_invalid\", \"Manifest body is not valid JSON\")\n  }\n  const byUrl = new Map(artifacts.map((artifact) => [artifact.url, artifact]))\n  const localUrl = (artifact: PreparedOtaArtifact) => `${baseUrl}/artifacts/${artifact.sha256}`\n\n  for (const app of Object.values(manifest.apps ?? {})) {\n    const record = app as unknown as Record<string, unknown>\n    const artifact = typeof record.apkUrl === \"string\" ? byUrl.get(record.apkUrl) : undefined\n    if (artifact) {\n      record.apkUrl = localUrl(artifact)\n    }\n  }\n\n  for (const patch of manifest.mtk_patches ?? []) {\n    rewriteFirmwareEntry(patch as unknown as Record<string, unknown>, byUrl, localUrl)\n  }\n  if (manifest.bes_firmware) {\n    rewriteFirmwareEntry(manifest.bes_firmware as unknown as Record<string, unknown>, byUrl, localUrl)\n  }\n\n  return JSON.stringify(manifest)\n}\n\n/** Delete every stored artifact whose hash is not in `keepSha256s` (plus stray .part files). */\nexport async function cleanupArtifacts(keepSha256s: string[] = []): Promise<void> {\n  const directory = otaArtifactsDirectory()\n  if (!(await RNFS.exists(directory))) {\n    return\n  }\n  const keep = new Set(keepSha256s.map((sha) => sha.toLowerCase()))\n  const items = await RNFS.readDir(directory)\n  for (const item of items) {\n    if (!item.isFile()) continue\n    if (keep.has(item.name.toLowerCase())) continue\n    await safeUnlink(item.path)\n  }\n}\n\nfunction rewriteFirmwareEntry(\n  entry: Record<string, unknown>,\n  byUrl: Map<string, PreparedOtaArtifact>,\n  localUrl: (artifact: PreparedOtaArtifact) => string,\n): void {\n  const url = firmwareUrl(entry)\n  const artifact = url ? byUrl.get(url) : undefined\n  if (!artifact) {\n    return\n  }\n  entry.url = localUrl(artifact)\n  // Overwrite the legacy key too when present, so no glasses build can prefer a stale\n  // CDN URL over the local one.\n  if (typeof entry.firmwareUrl === \"string\") {\n    entry.firmwareUrl = localUrl(artifact)\n  }\n}\n\nfunction firmwareUrl(entry: unknown): string | null {\n  if (!entry || typeof entry !== \"object\") {\n    return null\n  }\n  const record = entry as Record<string, unknown>\n  if (typeof record.url === \"string\" && record.url.length > 0) {\n    return record.url\n  }\n  if (typeof record.firmwareUrl === \"string\" && record.firmwareUrl.length > 0) {\n    return record.firmwareUrl\n  }\n  return null\n}\n\nfunction requireSha256(entry: Record<string, unknown> | undefined, label: string): string {\n  const sha256 = typeof entry?.sha256 === \"string\" ? entry.sha256.trim().toLowerCase() : \"\"\n  if (!/^[a-f0-9]{64}$/.test(sha256)) {\n    throw new OtaArtifactError(\"manifest_invalid\", `${label} artifact has no valid manifest sha256`)\n  }\n  return sha256\n}\n\nasync function safeUnlink(path: string): Promise<void> {\n  try {\n    if (await RNFS.exists(path)) {\n      await RNFS.unlink(path)\n    }\n  } catch {\n    // Best-effort: a leftover file only wastes space and is cleaned up next run.\n  }\n}\n"]}

package/build/services/OtaAutoChain.d.ts

@@ -0,0 +1,34 @@
+import type { OtaCheckCurrentGlassesResult } from "./OtaUpdateCheckService";
+export declare const MAX_OTA_AUTO_CHAIN_PASSES = 8;
+export declare const OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS = 120000;
+export type OtaAutoChainAdvanceResult = {
+    advance: true;
+    passCount: number;
+} | {
+    advance: false;
+    reason: "inactive" | "duplicate" | "max_passes" | "downgrade_not_approved";
+};
+/**
+ * Identify the exact update offer that produced one OTA pass. Including the
+ * observed versions and manifest body lets a changed manifest advance while a
+ * stale post-install version_info response is rejected as a duplicate.
+ */
+export declare function otaAutoChainFingerprint(result: OtaCheckCurrentGlassesResult): string;
+/** Start a chain after the user explicitly approves its first update pass. */
+export declare function beginOtaAutoChain(initialFingerprint: string, approvedDowngrade: boolean): void;
+export declare function isOtaAutoChainActive(): boolean;
+/** End the current chain. Safe to call when no chain is active. */
+export declare function stopOtaAutoChain(): void;
+/**
+ * Start (or continue) the bounded wait for glasses that are rebooting between
+ * passes. Re-renders must not extend the original deadline indefinitely.
+ */
+export declare function otaAutoChainReconnectWaitRemaining(now?: number): number | null;
+/** A successful reconnect allows a future pass to establish a fresh wait. */
+export declare function clearOtaAutoChainReconnectWait(): void;
+/**
+ * Admit the next pass of an active chain. Repeated offers, unexpectedly
+ * destructive downgrades, and runaway chains fail closed and end automation.
+ */
+export declare function tryAdvanceOtaAutoChain(fingerprint: string, isDowngrade: boolean): OtaAutoChainAdvanceResult;
+//# sourceMappingURL=OtaAutoChain.d.ts.map

package/build/services/OtaAutoChain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaAutoChain.d.ts","sourceRoot":"","sources":["../../src/services/OtaAutoChain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAA;AAEzE,eAAO,MAAM,yBAAyB,IAAI,CAAA;AAC1C,eAAO,MAAM,mCAAmC,SAAU,CAAA;AAS1D,MAAM,MAAM,yBAAyB,GACjC;IAAC,OAAO,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAC,GAClC;IAAC,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,wBAAwB,CAAA;CAAC,CAAA;AAIhG;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,4BAA4B,GAAG,MAAM,CAkBpF;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAAC,kBAAkB,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAO9F;AAED,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AAED,mEAAmE;AACnE,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAED;;;GAGG;AACH,wBAAgB,kCAAkC,CAAC,GAAG,SAAoB,GAAG,MAAM,GAAG,IAAI,CAKzF;AAED,6EAA6E;AAC7E,wBAAgB,8BAA8B,IAAI,IAAI,CAErD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,yBAAyB,CAuB3G"}

package/build/services/OtaAutoChain.js

@@ -0,0 +1,83 @@
+export const MAX_OTA_AUTO_CHAIN_PASSES = 8;
+export const OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS = 120_000;
+let session = null;
+/**
+ * Identify the exact update offer that produced one OTA pass. Including the
+ * observed versions and manifest body lets a changed manifest advance while a
+ * stale post-install version_info response is rejected as a duplicate.
+ */
+export function otaAutoChainFingerprint(result) {
+    return JSON.stringify({
+        manifestUrl: result.manifestUrl ?? "",
+        manifestBody: result.manifestBody ?? "",
+        buildNumber: result.buildNumber ?? "",
+        mtkFirmwareVersion: result.mtkFirmwareVersion ?? "",
+        besFirmwareVersion: result.besFirmwareVersion ?? "",
+        updates: result.updates,
+        targetBuildNumber: result.updateInfo?.versionCode ?? result.latestVersionInfo?.versionCode ?? 0,
+        targetBesVersion: result.besVersion ?? "",
+        mtkPatch: result.mtkPatch
+            ? {
+                startFirmware: result.mtkPatch.start_firmware,
+                endFirmware: result.mtkPatch.end_firmware,
+                url: result.mtkPatch.url,
+            }
+            : null,
+    });
+}
+/** Start a chain after the user explicitly approves its first update pass. */
+export function beginOtaAutoChain(initialFingerprint, approvedDowngrade) {
+    session = {
+        approvedDowngrade,
+        passCount: 1,
+        reconnectDeadline: null,
+        seenFingerprints: new Set([initialFingerprint]),
+    };
+}
+export function isOtaAutoChainActive() {
+    return session !== null;
+}
+/** End the current chain. Safe to call when no chain is active. */
+export function stopOtaAutoChain() {
+    session = null;
+}
+/**
+ * Start (or continue) the bounded wait for glasses that are rebooting between
+ * passes. Re-renders must not extend the original deadline indefinitely.
+ */
+export function otaAutoChainReconnectWaitRemaining(now = performance.now()) {
+    if (!session)
+        return null;
+    session.reconnectDeadline ??= now + OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS;
+    return Math.max(0, session.reconnectDeadline - now);
+}
+/** A successful reconnect allows a future pass to establish a fresh wait. */
+export function clearOtaAutoChainReconnectWait() {
+    if (session)
+        session.reconnectDeadline = null;
+}
+/**
+ * Admit the next pass of an active chain. Repeated offers, unexpectedly
+ * destructive downgrades, and runaway chains fail closed and end automation.
+ */
+export function tryAdvanceOtaAutoChain(fingerprint, isDowngrade) {
+    if (!session) {
+        return { advance: false, reason: "inactive" };
+    }
+    if (isDowngrade && !session.approvedDowngrade) {
+        stopOtaAutoChain();
+        return { advance: false, reason: "downgrade_not_approved" };
+    }
+    if (session.seenFingerprints.has(fingerprint)) {
+        stopOtaAutoChain();
+        return { advance: false, reason: "duplicate" };
+    }
+    if (session.passCount >= MAX_OTA_AUTO_CHAIN_PASSES) {
+        stopOtaAutoChain();
+        return { advance: false, reason: "max_passes" };
+    }
+    session.seenFingerprints.add(fingerprint);
+    session.passCount += 1;
+    return { advance: true, passCount: session.passCount };
+}
+//# sourceMappingURL=OtaAutoChain.js.map

package/build/services/OtaAutoChain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaAutoChain.js","sourceRoot":"","sources":["../../src/services/OtaAutoChain.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAA;AAC1C,MAAM,CAAC,MAAM,mCAAmC,GAAG,OAAO,CAAA;AAa1D,IAAI,OAAO,GAA+B,IAAI,CAAA;AAE9C;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAoC;IAC1E,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;QACrC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;QACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;QACrC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,EAAE;QACnD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,EAAE;QACnD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,IAAI,MAAM,CAAC,iBAAiB,EAAE,WAAW,IAAI,CAAC;QAC/F,gBAAgB,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;QACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACvB,CAAC,CAAC;gBACE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;gBAC7C,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY;gBACzC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;aACzB;YACH,CAAC,CAAC,IAAI;KACT,CAAC,CAAA;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAAC,kBAA0B,EAAE,iBAA0B;IACtF,OAAO,GAAG;QACR,iBAAiB;QACjB,SAAS,EAAE,CAAC;QACZ,iBAAiB,EAAE,IAAI;QACvB,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC;KAChD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,OAAO,KAAK,IAAI,CAAA;AACzB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,gBAAgB;IAC9B,OAAO,GAAG,IAAI,CAAA;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kCAAkC,CAAC,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE;IACxE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAEzB,OAAO,CAAC,iBAAiB,KAAK,GAAG,GAAG,mCAAmC,CAAA;IACvE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAAA;AACrD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,8BAA8B;IAC5C,IAAI,OAAO;QAAE,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAA;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB,EAAE,WAAoB;IAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAC,CAAA;IAC7C,CAAC;IAED,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9C,gBAAgB,EAAE,CAAA;QAClB,OAAO,EAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAC,CAAA;IAC3D,CAAC;IAED,IAAI,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,gBAAgB,EAAE,CAAA;QAClB,OAAO,EAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAC,CAAA;IAC9C,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,IAAI,yBAAyB,EAAE,CAAC;QACnD,gBAAgB,EAAE,CAAA;QAClB,OAAO,EAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAC,CAAA;IAC/C,CAAC;IAED,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACzC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAA;IACtB,OAAO,EAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAC,CAAA;AACtD,CAAC","sourcesContent":["import type {OtaCheckCurrentGlassesResult} from \"./OtaUpdateCheckService\"\n\nexport const MAX_OTA_AUTO_CHAIN_PASSES = 8\nexport const OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS = 120_000\n\ntype OtaAutoChainSession = {\n  approvedDowngrade: boolean\n  passCount: number\n  reconnectDeadline: number | null\n  seenFingerprints: Set<string>\n}\n\nexport type OtaAutoChainAdvanceResult =\n  | {advance: true; passCount: number}\n  | {advance: false; reason: \"inactive\" | \"duplicate\" | \"max_passes\" | \"downgrade_not_approved\"}\n\nlet session: OtaAutoChainSession | null = null\n\n/**\n * Identify the exact update offer that produced one OTA pass. Including the\n * observed versions and manifest body lets a changed manifest advance while a\n * stale post-install version_info response is rejected as a duplicate.\n */\nexport function otaAutoChainFingerprint(result: OtaCheckCurrentGlassesResult): string {\n  return JSON.stringify({\n    manifestUrl: result.manifestUrl ?? \"\",\n    manifestBody: result.manifestBody ?? \"\",\n    buildNumber: result.buildNumber ?? \"\",\n    mtkFirmwareVersion: result.mtkFirmwareVersion ?? \"\",\n    besFirmwareVersion: result.besFirmwareVersion ?? \"\",\n    updates: result.updates,\n    targetBuildNumber: result.updateInfo?.versionCode ?? result.latestVersionInfo?.versionCode ?? 0,\n    targetBesVersion: result.besVersion ?? \"\",\n    mtkPatch: result.mtkPatch\n      ? {\n          startFirmware: result.mtkPatch.start_firmware,\n          endFirmware: result.mtkPatch.end_firmware,\n          url: result.mtkPatch.url,\n        }\n      : null,\n  })\n}\n\n/** Start a chain after the user explicitly approves its first update pass. */\nexport function beginOtaAutoChain(initialFingerprint: string, approvedDowngrade: boolean): void {\n  session = {\n    approvedDowngrade,\n    passCount: 1,\n    reconnectDeadline: null,\n    seenFingerprints: new Set([initialFingerprint]),\n  }\n}\n\nexport function isOtaAutoChainActive(): boolean {\n  return session !== null\n}\n\n/** End the current chain. Safe to call when no chain is active. */\nexport function stopOtaAutoChain(): void {\n  session = null\n}\n\n/**\n * Start (or continue) the bounded wait for glasses that are rebooting between\n * passes. Re-renders must not extend the original deadline indefinitely.\n */\nexport function otaAutoChainReconnectWaitRemaining(now = performance.now()): number | null {\n  if (!session) return null\n\n  session.reconnectDeadline ??= now + OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS\n  return Math.max(0, session.reconnectDeadline - now)\n}\n\n/** A successful reconnect allows a future pass to establish a fresh wait. */\nexport function clearOtaAutoChainReconnectWait(): void {\n  if (session) session.reconnectDeadline = null\n}\n\n/**\n * Admit the next pass of an active chain. Repeated offers, unexpectedly\n * destructive downgrades, and runaway chains fail closed and end automation.\n */\nexport function tryAdvanceOtaAutoChain(fingerprint: string, isDowngrade: boolean): OtaAutoChainAdvanceResult {\n  if (!session) {\n    return {advance: false, reason: \"inactive\"}\n  }\n\n  if (isDowngrade && !session.approvedDowngrade) {\n    stopOtaAutoChain()\n    return {advance: false, reason: \"downgrade_not_approved\"}\n  }\n\n  if (session.seenFingerprints.has(fingerprint)) {\n    stopOtaAutoChain()\n    return {advance: false, reason: \"duplicate\"}\n  }\n\n  if (session.passCount >= MAX_OTA_AUTO_CHAIN_PASSES) {\n    stopOtaAutoChain()\n    return {advance: false, reason: \"max_passes\"}\n  }\n\n  session.seenFingerprints.add(fingerprint)\n  session.passCount += 1\n  return {advance: true, passCount: session.passCount}\n}\n"]}