@mentra/engine 0.1.0-beta.0

package/build/services/MentraJSRouter.js

@@ -0,0 +1,480 @@
+/**
+ * @fileoverview MentraJSRouter — RN-side host that bridges the per-miniapp
+ * JS contexts (iOS-JSC and Android-QuickJS via Zipline) into the existing
+ * {@link LocalMiniappRuntime} handler set.
+ *
+ * Rather than re-implement the 33 dispatch arms inline, the router
+ * consumes Crust's `mentrajs_message` Expo event and forwards its
+ * `__bridge.send(raw)` payloads to {@link LocalMiniappRuntime.handleRawMessage}.
+ * The SDK envelope shape (`{type: "DISPLAY", ...}` etc.) is unchanged from
+ * the WebView path, so every existing handler runs verbatim. What changes
+ * is the *transport*:
+ *
+ *   - **Inbound** (background JS → host): `__dispatch("__bridge", "send",
+ *     [rawJsonString])` → `mentrajs_message` event → router →
+ *     `LocalMiniappRuntime.handleRawMessage(packageName, raw)`.
+ *   - **Outbound** (host → background JS): every package registered with
+ *     the router gets a `sendMessage(raw)` fn that calls
+ *     `Crust.mentraJsDispatchToJs(packageName, {kind: "bridge", raw})`.
+ *     The polyfill's `__deliver` recognises `kind === "bridge"` and calls
+ *     `__mentraDeliverBridgeRaw(raw)`, which routes into the SDK's
+ *     {@link DispatchTransport.onMessage} handler.
+ *
+ * Host-side handler bodies (display fan-out, mic state, transcription,
+ * navigation, etc.) live untouched in `LocalMiniappRuntime.ts`.
+ *
+ * Cloud-message routing (`phone_stream_status`, `phone_managed_stream_status`)
+ * goes straight through `LocalMiniappRuntime.handleCloudMessage` — nothing
+ * for the router to do; the responses arrive inside an envelope whose
+ * `sendMessage` was already registered via the same path here.
+ *
+ * The router also bridges native error / log / unhandled-rejection
+ * events (`iface: "__log"`, `iface: "__error"`) into the standard
+ * `console.*` + Sentry breadcrumb pipeline so miniapp telemetry is
+ * visible without bringing up a separate sink.
+ */
+import devServerBridge from "./DevServerBridge";
+import { MentraJSLogRingBuffer, MentraJSLogThrottle, redactSecrets } from "./MentraJSLogPipeline";
+import { islandNotifications } from "./NotificationsEmitter";
+import { miniappRunningRegistry } from "./MiniappRunningRegistry";
+const defaultLogger = {
+    log: (m, p) => console.log(`[MentraJSRouter] ${m}`, p ?? ""),
+    warn: (m, p) => console.warn(`[MentraJSRouter] ${m}`, p ?? ""),
+    error: (m, p) => console.error(`[MentraJSRouter] ${m}`, p ?? ""),
+};
+export class MentraJSRouter {
+    runtime;
+    crust;
+    logger;
+    subscription = null;
+    registered = new Set();
+    /** Cached spawn arguments so the crash controller can respawn after a backoff. */
+    spawnCache = new Map();
+    /** Active respawn timers (so unregister() can cancel a pending respawn). */
+    respawnTimers = new Map();
+    /**
+     * Optional crash controller. When wired, every `__error` frame from a
+     * JSContext drives the state machine; an Outcome with
+     * scheduleRespawnAfterMs queues a setTimeout that re-spawns the
+     * miniapp's last-known JS source after the backoff delay.
+     */
+    crashController = null;
+    /** Hook called when a package transitions to CRASHLOOP_DISABLED. */
+    onCrashloop = null;
+    /** Hook called on the 2nd-within-window crash (toast UX). */
+    onRestartToast = null;
+    /**
+     * Logging plumbing. Every `__log` frame passes through `redactSecrets`
+     * (token/password/etc. scrubbed), then the throttle (100/min sustained
+     * per pkg, 500 burst), then lands in the ring buffer + the host
+     * logger. The ring buffer holds the last 200 lines/pkg so a crash
+     * report can attach "last words" context.
+     *
+     * Replace with new instances in tests; production code uses the
+     * defaults.
+     */
+    logThrottle = new MentraJSLogThrottle();
+    logRing = new MentraJSLogRingBuffer();
+    /**
+     * Optional UI router — when wired, `__bridge.send` envelopes whose
+     * inner payload type is `UI_SEND` get routed to the bound WebView
+     * instead of through LocalMiniappRuntime. Two-layer miniapps set
+     * this; legacy single-bundle WebView miniapps don't and the bridge
+     * frames pass through unchanged.
+     */
+    uiRouter = null;
+    constructor(runtime, crust, logger = defaultLogger) {
+        this.runtime = runtime;
+        this.crust = crust;
+        this.logger = logger;
+    }
+    /**
+     * Subscribe to Crust's `mentrajs_message` event. Idempotent — calling
+     * start() twice attaches a single listener.
+     */
+    start() {
+        if (this.subscription)
+            return;
+        this.subscription = this.crust.addListener("mentrajs_message", (raw) => {
+            try {
+                this.handleOutbound(raw);
+            }
+            catch (e) {
+                this.logger.error(`outbound handler threw`, { error: String(e), raw });
+            }
+        });
+        // A background script unregistered for missing liveness pings is dead
+        // weight: its subscriptions are gone (so the mic releases) while the
+        // webview keeps rendering stale state. Route it through the same
+        // respawn machinery as a crash so it comes back automatically, with
+        // the crash controller's backoff + crash-loop protection.
+        this.runtime.onLivenessTimeout = (packageName) => {
+            this.handleCrash(packageName, "liveness: missed pings");
+        };
+    }
+    /**
+     * Detach the Crust subscription. The router can be restarted later
+     * with start(); registrations survive (the runtime's app map is the
+     * source of truth).
+     */
+    stop() {
+        this.subscription?.remove();
+        this.subscription = null;
+        this.runtime.onLivenessTimeout = null;
+    }
+    /**
+     * Register a JSContext with the runtime so its handlers can fire
+     * `sendMessage(raw)` against the right context. The router builds a
+     * `sendMessage` that calls `Crust.mentraJsDispatchToJs(packageName,
+     * {kind: "bridge", raw})`; the polyfill's `__deliver` then hands the
+     * envelope to `DispatchTransport.onMessage` inside the miniapp.
+     *
+     * Mirrors `MiniappHost.registerRuntime` on the WebView side. Callers
+     * (e.g. {@link spawnAndRegister} below, or the host's miniapp launch
+     * pipeline) should call this once per spawn.
+     */
+    registerApp(packageName, installedManifest) {
+        this.runtime.registerApp(packageName, (raw) => {
+            this.dispatchBridgeRaw(packageName, raw);
+        }, installedManifest);
+        this.registered.add(packageName);
+        // JSContext is the source-of-truth for "miniapp running". The
+        // home tile / tray reads this registry to project the `running`
+        // flag — UI WebView open/close is separate.
+        miniappRunningRegistry.add(packageName);
+    }
+    /**
+     * Convenience: spawn a JSContext via Crust, register the app, and
+     * set its declared permissions. Returns true on successful spawn.
+     *
+     * The host's miniapp launch path
+     * (`mobile/src/services/miniapps/launchLocalMiniapp.ts`) calls this
+     * once per JSContext mount.
+     */
+    async spawnAndRegister(packageName, miniappJs, options) {
+        if (!this.crust.mentraJsSpawn) {
+            this.logger.warn("mentraJsSpawn not available — host binding missing native function");
+            return false;
+        }
+        const polyfill = this.crust.mentraJsLoadPolyfillBundle?.() ?? "";
+        if (!polyfill) {
+            this.logger.warn(`no polyfill bundle loaded for ${packageName}; spawn will likely fail`);
+        }
+        const ok = await this.crust.mentraJsSpawn(packageName, polyfill, miniappJs);
+        if (!ok) {
+            this.logger.error(`spawn failed for ${packageName}`);
+            return false;
+        }
+        // Two distinct permission gates:
+        //   1. Native dispatcher (JSContext → native bridge): `mentraJsSetManifest`
+        //      checks per-call iface, e.g. __dispatch("mic", "start", ...) requires
+        //      MICROPHONE.
+        //   2. LocalMiniappRuntime (SUBSCRIBE envelope): `registerApp(...,
+        //      installedManifest)` carries the full manifest so SUBSCRIBE's gate
+        //      can match stream → permission against declared types.
+        if (options?.permissions && options.permissions.length > 0) {
+            await this.crust.mentraJsSetManifest(packageName, options.permissions);
+        }
+        this.registerApp(packageName, options?.installedManifest);
+        // Cache spawn arguments so the crash controller can respawn the
+        // same code after a backoff. permissions + manifest are cached too
+        // because the native side resets setManifest on every spawn and
+        // LocalMiniappRuntime's installedManifest entry is keyed by
+        // connect-time registration.
+        this.spawnCache.set(packageName, {
+            miniappJs,
+            permissions: options?.permissions ?? [],
+            installedManifest: options?.installedManifest,
+        });
+        this.crashController?.onSpawn(packageName);
+        // Fire the `init` envelope so the polyfill's __deliver handler
+        // resolves `__mentraInitCallback(sessionId)`. The SDK's
+        // `registerMiniapp(handler)` wires that callback to construct
+        // MiniappSession and call the user's handler. Without this
+        // dispatch the user's code never runs — `registerMiniapp` just
+        // assigns to a global and waits.
+        const sessionId = `${packageName}-${Date.now().toString(36)}`;
+        void this.crust.mentraJsDispatchToJs(packageName, { kind: "init", sessionId });
+        return true;
+    }
+    /**
+     * Crash-controller integration. Called from the `__error` frame
+     * handler. The controller returns an outcome that tells us whether
+     * to respawn (with delay) or leave the context dead.
+     */
+    handleCrash(packageName, reason) {
+        // The native context is dead the instant a crash is observed — invalidate
+        // its CONNECT handshake NOW so waitForConnect() blocks through the respawn
+        // backoff window instead of resolving immediately against the dead context
+        // (an action invoked mid-backoff would otherwise be delivered to nothing).
+        this.runtime.resetHandshake(packageName);
+        const controller = this.crashController;
+        if (!controller)
+            return;
+        const cached = this.spawnCache.get(packageName);
+        if (!cached) {
+            this.logger.warn(`crash for ${packageName} but no cached spawn args — cannot respawn`);
+            controller.onCrash(packageName, reason);
+            return;
+        }
+        const outcome = controller.onCrash(packageName, reason);
+        if (outcome.surfaceCrashloopBanner) {
+            this.onCrashloop?.(packageName, reason);
+            islandNotifications.emit({ kind: "miniapp_crashloop", packageName, reason, timestamp: Date.now() });
+            return;
+        }
+        if (outcome.showRestartToast) {
+            this.onRestartToast?.(packageName, reason);
+        }
+        if (outcome.scheduleRespawnAfterMs == null)
+            return;
+        // Cancel any prior pending respawn before scheduling a new one.
+        const existing = this.respawnTimers.get(packageName);
+        if (existing)
+            clearTimeout(existing);
+        const timer = setTimeout(() => {
+            this.respawnTimers.delete(packageName);
+            void (async () => {
+                try {
+                    await this.crust.mentraJsKill?.(packageName);
+                }
+                catch {
+                    /* native may have already torn down */
+                }
+                const ok = await this.crust.mentraJsSpawn?.(packageName, this.crust.mentraJsLoadPolyfillBundle?.() ?? "", cached.miniappJs);
+                if (!ok) {
+                    this.logger.error(`crash respawn failed for ${packageName}`);
+                    return;
+                }
+                if (cached.permissions.length > 0) {
+                    await this.crust.mentraJsSetManifest(packageName, cached.permissions);
+                }
+                this.registerApp(packageName, cached.installedManifest);
+                controller.onSpawn(packageName);
+                // Re-fire the init envelope so the respawned context's
+                // `registerMiniapp` handler runs again.
+                const sessionId = `${packageName}-${Date.now().toString(36)}`;
+                void this.crust.mentraJsDispatchToJs(packageName, { kind: "init", sessionId });
+                this.logger.log(`respawned ${packageName} after crash`);
+            })();
+        }, outcome.scheduleRespawnAfterMs);
+        this.respawnTimers.set(packageName, timer);
+    }
+    summarizeReason(payload, method) {
+        if (payload && typeof payload === "object" && "message" in payload) {
+            return `${method}: ${payload.message}`;
+        }
+        return method;
+    }
+    /**
+     * Tear down a JSContext and unregister from the runtime. Synchronous
+     * teardown — the spec drops the 50ms WILL_DISCONNECT grace window
+     * because there's no transport handshake to flush in the JSC world.
+     */
+    async unregister(packageName) {
+        if (!this.registered.has(packageName))
+            return;
+        // Cancel any pending crash-respawn before tearing down — we don't
+        // want a stale timer to re-spawn a miniapp the user just disabled.
+        const pending = this.respawnTimers.get(packageName);
+        if (pending) {
+            clearTimeout(pending);
+            this.respawnTimers.delete(packageName);
+        }
+        this.spawnCache.delete(packageName);
+        this.crashController?.onKill(packageName);
+        this.runtime.unregisterApp(packageName);
+        this.registered.delete(packageName);
+        // JSContext torn down → miniapp is no longer "running".
+        miniappRunningRegistry.remove(packageName);
+        if (this.crust.mentraJsKill) {
+            try {
+                await this.crust.mentraJsKill(packageName);
+            }
+            catch (e) {
+                this.logger.warn(`mentraJsKill threw for ${packageName}: ${String(e)}`);
+            }
+        }
+    }
+    /** List packages the router has registered. */
+    registeredPackages() {
+        return Array.from(this.registered);
+    }
+    /**
+     * Validate that a reused background JSContext is still responsive when its
+     * WebView comes foreground. The runtime owns the ping/timeout mechanics; the
+     * router gates this to registered packages and keeps LocalMiniappView from
+     * reaching into runtime internals.
+     */
+    probeForegroundLiveness(packageName, reason = "foreground-open") {
+        if (!this.registered.has(packageName))
+            return;
+        this.runtime.probeForegroundLiveness(packageName, reason);
+    }
+    // ----------------------------------------------------------------
+    // Outbound message handling
+    // ----------------------------------------------------------------
+    handleOutbound(msg) {
+        const { packageName, iface, method } = msg;
+        if (!packageName || !iface || !method) {
+            this.logger.warn(`bad mentrajs_message — missing fields`, msg);
+            return;
+        }
+        // 1) Bridge frames: the SDK's DispatchTransport.send(raw) lands here.
+        //    Forward raw envelope into LocalMiniappRuntime.handleRawMessage
+        //    so every existing handler arm runs verbatim.
+        if (iface === "__bridge" && method === "send") {
+            const raw = this.coerceArgsToBridgeRaw(msg);
+            if (raw == null) {
+                this.logger.warn(`__bridge.send had no raw payload`, msg);
+                return;
+            }
+            // If the payload is a UI_SEND envelope, route it to the bound
+            // WebView instead of LocalMiniappRuntime.
+            // session.ui.send → DispatchTransport.send → here.
+            if (this.uiRouter) {
+                const innerPayload = this.peekBridgePayloadType(raw);
+                if (innerPayload?.type === "UI_SEND") {
+                    this.uiRouter.routeFromBackground(packageName, innerPayload);
+                    return;
+                }
+            }
+            this.runtime.handleRawMessage(packageName, raw);
+            return;
+        }
+        // 2) Log frames — console.* rewired through host. We tag with the
+        //    packageName so Sentry breadcrumbs can be filtered downstream.
+        //    Pipeline:
+        //      raw args → redactSecrets → throttle decision → ring buffer
+        //               → host logger (which surfaces to dev console / Sentry)
+        if (iface === "__log") {
+            const rawArgs = this.tryParseArgs(msg.argsJson);
+            const safeArgs = redactSecrets(rawArgs);
+            const decision = this.logThrottle.consume(packageName);
+            const tag = `[${packageName}]`;
+            const fn = method === "warn"
+                ? this.logger.warn
+                : method === "error" || method === "fatal"
+                    ? this.logger.error
+                    : this.logger.log;
+            // Emit a synthetic "[throttled N]" line in place of the next
+            // would-be-allowed log to summarise drops.
+            if (!decision.allowed) {
+                if (decision.throttledLine) {
+                    fn(`${tag} ${decision.throttledLine}`);
+                    this.logRing.push(packageName, `${decision.throttledLine}`);
+                }
+                return;
+            }
+            const formatted = `${tag} console.${method}`;
+            fn(formatted, safeArgs);
+            // Stringify into the ring buffer for crash-report attachment.
+            let line;
+            try {
+                line = `${method}: ${JSON.stringify(safeArgs)}`;
+            }
+            catch {
+                line = `${method}: <unserializable>`;
+            }
+            this.logRing.push(packageName, line);
+            // Forward to the `mentra-miniapp dev` sidecar (if one is connected
+            // for this package). Source="background" so the CLI tags lines as
+            // [MentraJS]. The bridge silently drops when no dev server is up,
+            // which makes this safe to call unconditionally in prod.
+            const argsForBridge = Array.isArray(safeArgs) ? safeArgs : [safeArgs];
+            devServerBridge.forwardLog(packageName, method, argsForBridge, Date.now(), "background");
+            return;
+        }
+        // 3) Error / unhandled rejection frames — surface as warnings AND
+        //    drive the crash state machine when one is attached. The
+        //    controller's outcome may schedule a respawn after a backoff;
+        //    if it doesn't (CRASHLOOP_DISABLED), we leave the JSContext
+        //    dead and let the host surface a "tap to retry" banner.
+        if (iface === "__error") {
+            const payload = this.tryParseArgs(msg.argsJson);
+            this.logger.error(`[${packageName}] ${method}`, payload);
+            if (this.crashController) {
+                // Only treat "exception" + "unhandledRejection" + "uncaught" as
+                // crash signals. `console.error` calls also flow through the
+                // log path — those don't end the JSContext.
+                const isCrash = method === "exception" || method === "unhandledRejection" || method === "uncaught";
+                if (isCrash) {
+                    this.handleCrash(packageName, this.summarizeReason(payload, method));
+                }
+            }
+            return;
+        }
+        // 4) Anything else is a `forwardToRn` from the dispatcher — a
+        //    handler the native dispatcher didn't know about. We don't have
+        //    inline handlers for any of these; the runtime's existing path
+        //    treats them as legacy WebView envelopes by falling through.
+        //    Log so unknown ifaces surface in dev.
+        this.logger.log(`unhandled iface=${iface} method=${method} from ${packageName}`);
+    }
+    /**
+     * The wire format for `__bridge.send` is `argsJson = JSON.stringify([raw])`
+     * — a single-element array containing the original raw envelope. The
+     * dispatcher passes the parsed array through as either:
+     *   - `msg.args` when the dispatcher unpacked (Android path that turns
+     *     `argsJson` into a List on the way to RN), or
+     *   - `msg.argsJson` (iOS path that ships the string verbatim).
+     * Cover both shapes here.
+     */
+    /**
+     * Parse a raw bridge envelope just enough to peek at the inner
+     * payload's `type` field. Used by the UI_SEND interception path.
+     * Returns null if the envelope isn't a valid bridge frame.
+     */
+    peekBridgePayloadType(raw) {
+        try {
+            const env = JSON.parse(raw);
+            if (env && typeof env.payload === "object" && env.payload && typeof env.payload.type === "string") {
+                return env.payload;
+            }
+        }
+        catch {
+            return null;
+        }
+        return null;
+    }
+    coerceArgsToBridgeRaw(msg) {
+        if (Array.isArray(msg.args)) {
+            const v = msg.args[0];
+            return typeof v === "string" ? v : null;
+        }
+        if (typeof msg.argsJson === "string") {
+            try {
+                const parsed = JSON.parse(msg.argsJson);
+                if (Array.isArray(parsed) && typeof parsed[0] === "string") {
+                    return parsed[0];
+                }
+            }
+            catch {
+                // fall through
+            }
+        }
+        return null;
+    }
+    tryParseArgs(argsJson) {
+        if (!argsJson)
+            return null;
+        try {
+            return JSON.parse(argsJson);
+        }
+        catch {
+            return argsJson;
+        }
+    }
+    /**
+     * Push a `kind="bridge"` envelope into the named JSContext's
+     * `globalThis.__deliver`. Used both by the per-app `sendMessage`
+     * registered via {@link registerApp} and by ad-hoc callers (e.g.
+     * cloud-relayed stream-status responses route through
+     * `LocalMiniappRuntime.handleCloudMessage`, which then calls the
+     * `app.sendMessage(serialized)` registered above).
+     */
+    dispatchBridgeRaw(packageName, raw) {
+        void this.crust.mentraJsDispatchToJs(packageName, { kind: "bridge", raw });
+    }
+}
+//# sourceMappingURL=MentraJSRouter.js.map

package/build/services/MentraJSRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MentraJSRouter.js","sourceRoot":"","sources":["../../src/services/MentraJSRouter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAIH,OAAO,eAAe,MAAM,mBAAmB,CAAA;AAI/C,OAAO,EAAC,qBAAqB,EAAE,mBAAmB,EAAE,aAAa,EAAC,MAAM,uBAAuB,CAAA;AAC/F,OAAO,EAAC,mBAAmB,EAAC,MAAM,wBAAwB,CAAA;AAE1D,OAAO,EAAC,sBAAsB,EAAC,MAAM,0BAA0B,CAAA;AAyC/D,MAAM,aAAa,GAAiB;IAClC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAE5D,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAE9D,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;CACjE,CAAA;AAQD,MAAM,OAAO,cAAc;IA4CN;IACA;IACA;IA7CX,YAAY,GAA6B,IAAI,CAAA;IACpC,UAAU,GAAgB,IAAI,GAAG,EAAE,CAAA;IACpD,kFAAkF;IACjE,UAAU,GAA4B,IAAI,GAAG,EAAE,CAAA;IAChE,4EAA4E;IAC3D,aAAa,GAA+C,IAAI,GAAG,EAAE,CAAA;IAEtF;;;;;OAKG;IACH,eAAe,GAAmC,IAAI,CAAA;IAEtD,oEAAoE;IACpE,WAAW,GAA2D,IAAI,CAAA;IAC1E,6DAA6D;IAC7D,cAAc,GAA2D,IAAI,CAAA;IAE7E;;;;;;;;;OASG;IACH,WAAW,GAAwB,IAAI,mBAAmB,EAAE,CAAA;IAC5D,OAAO,GAA0B,IAAI,qBAAqB,EAAE,CAAA;IAE5D;;;;;;OAMG;IACH,QAAQ,GAA0B,IAAI,CAAA;IAEtC,YACmB,OAA4B,EAC5B,KAA2B,EAC3B,SAAuB,aAAa;QAFpC,YAAO,GAAP,OAAO,CAAqB;QAC5B,UAAK,GAAL,KAAK,CAAsB;QAC3B,WAAM,GAAN,MAAM,CAA8B;IACpD,CAAC;IAEJ;;;OAGG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,YAAY;YAAE,OAAM;QAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE;YACrE,IAAI,CAAC;gBACH,IAAI,CAAC,cAAc,CAAC,GAAwC,CAAC,CAAA;YAC/D,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAC,CAAC,CAAA;YACtE,CAAC;QACH,CAAC,CAAC,CAAA;QACF,sEAAsE;QACtE,qEAAqE;QACrE,iEAAiE;QACjE,oEAAoE;QACpE,0DAA0D;QAC1D,IAAI,CAAC,OAAO,CAAC,iBAAiB,GAAG,CAAC,WAAW,EAAE,EAAE;YAC/C,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAA;QACzD,CAAC,CAAA;IACH,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,CAAA;QAC3B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAA;QACxB,IAAI,CAAC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAA;IACvC,CAAC;IAED;;;;;;;;;;OAUG;IACH,WAAW,CAAC,WAAmB,EAAE,iBAA4C;QAC3E,IAAI,CAAC,OAAO,CAAC,WAAW,CACtB,WAAW,EACX,CAAC,GAAW,EAAE,EAAE;YACd,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;QAC1C,CAAC,EACD,iBAAiB,CAClB,CAAA;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAChC,8DAA8D;QAC9D,gEAAgE;QAChE,4CAA4C;QAC5C,sBAAsB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CACpB,WAAmB,EACnB,SAAiB,EACjB,OAAgF;QAEhF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAA;YACtF,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,CAAA;QAChE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,WAAW,0BAA0B,CAAC,CAAA;QAC1F,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;QAC3E,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,WAAW,EAAE,CAAC,CAAA;YACpD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,iCAAiC;QACjC,4EAA4E;QAC5E,4EAA4E;QAC5E,mBAAmB;QACnB,mEAAmE;QACnE,yEAAyE;QACzE,6DAA6D;QAC7D,IAAI,OAAO,EAAE,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QACxE,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAA;QACzD,gEAAgE;QAChE,mEAAmE;QACnE,gEAAgE;QAChE,4DAA4D;QAC5D,6BAA6B;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE;YAC/B,SAAS;YACT,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,EAAE;YACvC,iBAAiB,EAAE,OAAO,EAAE,iBAAiB;SAC9C,CAAC,CAAA;QACF,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QAE1C,+DAA+D;QAC/D,wDAAwD;QACxD,8DAA8D;QAC9D,2DAA2D;QAC3D,+DAA+D;QAC/D,iCAAiC;QACjC,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAA;QAC7D,KAAK,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,WAAW,EAAE,EAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAC,CAAC,CAAA;QAE5E,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;OAIG;IACK,WAAW,CAAC,WAAmB,EAAE,MAAc;QACrD,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAA;QACvC,IAAI,CAAC,UAAU;YAAE,OAAM;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,WAAW,4CAA4C,CAAC,CAAA;YACtF,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YACvC,OAAM;QACR,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QACvD,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC;YACnC,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YACvC,mBAAmB,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAC,CAAC,CAAA;YACjG,OAAM;QACR,CAAC;QACD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAC5C,CAAC;QACD,IAAI,OAAO,CAAC,sBAAsB,IAAI,IAAI;YAAE,OAAM;QAClD,gEAAgE;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACpD,IAAI,QAAQ;YAAE,YAAY,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YACtC,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,WAAW,CAAC,CAAA;gBAC9C,CAAC;gBAAC,MAAM,CAAC;oBACP,uCAAuC;gBACzC,CAAC;gBACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CACzC,WAAW,EACX,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,EAC/C,MAAM,CAAC,SAAS,CACjB,CAAA;gBACD,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,WAAW,EAAE,CAAC,CAAA;oBAC5D,OAAM;gBACR,CAAC;gBACD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAClC,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;gBACvE,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;gBACvD,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;gBAC/B,uDAAuD;gBACvD,wCAAwC;gBACxC,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAA;gBAC7D,KAAK,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,WAAW,EAAE,EAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAC,CAAC,CAAA;gBAC5E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,WAAW,cAAc,CAAC,CAAA;YACzD,CAAC,CAAC,EAAE,CAAA;QACN,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAA;QAClC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAC5C,CAAC;IAEO,eAAe,CAAC,OAAgB,EAAE,MAAc;QACtD,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,SAAS,IAAK,OAAmC,EAAE,CAAC;YAChG,OAAO,GAAG,MAAM,KAAM,OAA6B,CAAC,OAAO,EAAE,CAAA;QAC/D,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,OAAM;QAC7C,kEAAkE;QAClE,mEAAmE;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACnD,IAAI,OAAO,EAAE,CAAC;YACZ,YAAY,CAAC,OAAO,CAAC,CAAA;YACrB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QACxC,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QACnC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;QACzC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAA;QACvC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QACnC,wDAAwD;QACxD,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;YAC5C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,kBAAkB;QAChB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACpC,CAAC;IAED;;;;;OAKG;IACH,uBAAuB,CAAC,WAAmB,EAAE,MAAM,GAAG,iBAAiB;QACrE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,OAAM;QAC7C,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;IAC3D,CAAC;IAED,mEAAmE;IACnE,4BAA4B;IAC5B,mEAAmE;IAE3D,cAAc,CAAC,GAA2B;QAChD,MAAM,EAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAC,GAAG,GAAG,CAAA;QACxC,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAA;YAC9D,OAAM;QACR,CAAC;QAED,sEAAsE;QACtE,oEAAoE;QACpE,kDAAkD;QAClD,IAAI,KAAK,KAAK,UAAU,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAA;YAC3C,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAA;gBACzD,OAAM;YACR,CAAC;YACD,8DAA8D;YAC9D,0CAA0C;YAC1C,mDAAmD;YACnD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,MAAM,YAAY,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAA;gBACpD,IAAI,YAAY,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;oBACrC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;oBAC5D,OAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;YAC/C,OAAM;QACR,CAAC;QAED,kEAAkE;QAClE,mEAAmE;QACnE,eAAe;QACf,kEAAkE;QAClE,uEAAuE;QACvE,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC/C,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;YACtD,MAAM,GAAG,GAAG,IAAI,WAAW,GAAG,CAAA;YAC9B,MAAM,EAAE,GACN,MAAM,KAAK,MAAM;gBACf,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI;gBAClB,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,OAAO;oBACxC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK;oBACnB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA;YACvB,6DAA6D;YAC7D,2CAA2C;YAC3C,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtB,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;oBAC3B,EAAE,CAAC,GAAG,GAAG,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAA;oBACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAA;gBAC7D,CAAC;gBACD,OAAM;YACR,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,GAAG,YAAY,MAAM,EAAE,CAAA;YAC5C,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;YACvB,8DAA8D;YAC9D,IAAI,IAAY,CAAA;YAChB,IAAI,CAAC;gBACH,IAAI,GAAG,GAAG,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAA;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,GAAG,MAAM,oBAAoB,CAAA;YACtC,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;YACpC,mEAAmE;YACnE,kEAAkE;YAClE,kEAAkE;YAClE,yDAAyD;YACzD,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,QAAsB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;YACpF,eAAe,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAA;YACxF,OAAM;QACR,CAAC;QAED,kEAAkE;QAClE,6DAA6D;QAC7D,kEAAkE;QAClE,gEAAgE;QAChE,4DAA4D;QAC5D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,WAAW,KAAK,MAAM,EAAE,EAAE,OAAO,CAAC,CAAA;YACxD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,gEAAgE;gBAChE,6DAA6D;gBAC7D,4CAA4C;gBAC5C,MAAM,OAAO,GAAG,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,oBAAoB,IAAI,MAAM,KAAK,UAAU,CAAA;gBAClG,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;gBACtE,CAAC;YACH,CAAC;YACD,OAAM;QACR,CAAC;QAED,8DAA8D;QAC9D,oEAAoE;QACpE,mEAAmE;QACnE,iEAAiE;QACjE,2CAA2C;QAC3C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,KAAK,WAAW,MAAM,SAAS,WAAW,EAAE,CAAC,CAAA;IAClF,CAAC;IAED;;;;;;;;OAQG;IACH;;;;OAIG;IACK,qBAAqB,CAAC,GAAW;QACvC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgC,CAAA;YAC1D,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAClG,OAAO,GAAG,CAAC,OAA+C,CAAA;YAC5D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,qBAAqB,CAAC,GAA2B;QACvD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACzC,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAY,CAAA;gBAClD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC3D,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;gBAClB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe;YACjB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,YAAY,CAAC,QAA4B;QAC/C,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QAC1B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAA;QACjB,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,iBAAiB,CAAC,WAAmB,EAAE,GAAW;QACxD,KAAK,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,WAAW,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAC,CAAC,CAAA;IAC1E,CAAC;CACF","sourcesContent":["/**\n * @fileoverview MentraJSRouter — RN-side host that bridges the per-miniapp\n * JS contexts (iOS-JSC and Android-QuickJS via Zipline) into the existing\n * {@link LocalMiniappRuntime} handler set.\n *\n * Rather than re-implement the 33 dispatch arms inline, the router\n * consumes Crust's `mentrajs_message` Expo event and forwards its\n * `__bridge.send(raw)` payloads to {@link LocalMiniappRuntime.handleRawMessage}.\n * The SDK envelope shape (`{type: \"DISPLAY\", ...}` etc.) is unchanged from\n * the WebView path, so every existing handler runs verbatim. What changes\n * is the *transport*:\n *\n *   - **Inbound** (background JS → host): `__dispatch(\"__bridge\", \"send\",\n *     [rawJsonString])` → `mentrajs_message` event → router →\n *     `LocalMiniappRuntime.handleRawMessage(packageName, raw)`.\n *   - **Outbound** (host → background JS): every package registered with\n *     the router gets a `sendMessage(raw)` fn that calls\n *     `Crust.mentraJsDispatchToJs(packageName, {kind: \"bridge\", raw})`.\n *     The polyfill's `__deliver` recognises `kind === \"bridge\"` and calls\n *     `__mentraDeliverBridgeRaw(raw)`, which routes into the SDK's\n *     {@link DispatchTransport.onMessage} handler.\n *\n * Host-side handler bodies (display fan-out, mic state, transcription,\n * navigation, etc.) live untouched in `LocalMiniappRuntime.ts`.\n *\n * Cloud-message routing (`phone_stream_status`, `phone_managed_stream_status`)\n * goes straight through `LocalMiniappRuntime.handleCloudMessage` — nothing\n * for the router to do; the responses arrive inside an envelope whose\n * `sendMessage` was already registered via the same path here.\n *\n * The router also bridges native error / log / unhandled-rejection\n * events (`iface: \"__log\"`, `iface: \"__error\"`) into the standard\n * `console.*` + Sentry breadcrumb pipeline so miniapp telemetry is\n * visible without bringing up a separate sink.\n */\n\nimport type {EventSubscription} from \"expo-modules-core\"\n\nimport devServerBridge from \"./DevServerBridge\"\nimport type localMiniappRuntime from \"./LocalMiniappRuntime\"\nimport type {InstalledMiniappManifest} from \"./LocalMiniappRuntime\"\nimport type {MentraJSCrashController} from \"./MentraJSCrashController\"\nimport {MentraJSLogRingBuffer, MentraJSLogThrottle, redactSecrets} from \"./MentraJSLogPipeline\"\nimport {islandNotifications} from \"./NotificationsEmitter\"\nimport type {MentraUIRouter} from \"./MentraUIRouter\"\nimport {miniappRunningRegistry} from \"./MiniappRunningRegistry\"\n\n/** The runtime's runtime instance type — the singleton exported from\n * LocalMiniappRuntime.ts (the file's `export default` is the instance,\n * not the class).\n */\ntype LocalMiniappRuntime = typeof localMiniappRuntime\n\n/**\n * Minimal subset of the Crust native module the router uses. Keeping the\n * binding loose lets us mock the module in unit tests without bringing\n * the whole Expo module surface along.\n */\nexport interface MentraJSCrustBinding {\n  mentraJsDispatchToJs(packageName: string, envelope: Record<string, unknown>): Promise<void> | void\n  mentraJsSetManifest(packageName: string, permissions: string[]): Promise<void> | void\n  mentraJsLoadPolyfillBundle?: () => string\n  mentraJsSpawn?: (packageName: string, polyfill: string, miniappJs: string) => Promise<boolean> | boolean\n  mentraJsKill?: (packageName: string) => Promise<void> | void\n  mentraJsAlivePackages?: () => string[]\n  addListener: (event: string, handler: (payload: Record<string, unknown>) => void) => EventSubscription\n}\n\nexport interface OutboundMessagePayload {\n  packageName: string\n  iface: string\n  method: string\n  argsJson?: string\n  args?: unknown[]\n  reqId?: string\n  // Implementation-internal: any extra fields the dispatcher attached on\n  // .forwardToRn (e.g. payload metadata) are passed through verbatim.\n  [extra: string]: unknown\n}\n\nexport type RouterLogger = {\n  log: (message: string, payload?: unknown) => void\n  warn: (message: string, payload?: unknown) => void\n  error: (message: string, payload?: unknown) => void\n}\n\nconst defaultLogger: RouterLogger = {\n  log: (m, p) => console.log(`[MentraJSRouter] ${m}`, p ?? \"\"),\n\n  warn: (m, p) => console.warn(`[MentraJSRouter] ${m}`, p ?? \"\"),\n\n  error: (m, p) => console.error(`[MentraJSRouter] ${m}`, p ?? \"\"),\n}\n\ninterface SpawnCache {\n  miniappJs: string\n  permissions: string[]\n  installedManifest?: InstalledMiniappManifest\n}\n\nexport class MentraJSRouter {\n  private subscription: EventSubscription | null = null\n  private readonly registered: Set<string> = new Set()\n  /** Cached spawn arguments so the crash controller can respawn after a backoff. */\n  private readonly spawnCache: Map<string, SpawnCache> = new Map()\n  /** Active respawn timers (so unregister() can cancel a pending respawn). */\n  private readonly respawnTimers: Map<string, ReturnType<typeof setTimeout>> = new Map()\n\n  /**\n   * Optional crash controller. When wired, every `__error` frame from a\n   * JSContext drives the state machine; an Outcome with\n   * scheduleRespawnAfterMs queues a setTimeout that re-spawns the\n   * miniapp's last-known JS source after the backoff delay.\n   */\n  crashController: MentraJSCrashController | null = null\n\n  /** Hook called when a package transitions to CRASHLOOP_DISABLED. */\n  onCrashloop: ((packageName: string, reason: string) => void) | null = null\n  /** Hook called on the 2nd-within-window crash (toast UX). */\n  onRestartToast: ((packageName: string, reason: string) => void) | null = null\n\n  /**\n   * Logging plumbing. Every `__log` frame passes through `redactSecrets`\n   * (token/password/etc. scrubbed), then the throttle (100/min sustained\n   * per pkg, 500 burst), then lands in the ring buffer + the host\n   * logger. The ring buffer holds the last 200 lines/pkg so a crash\n   * report can attach \"last words\" context.\n   *\n   * Replace with new instances in tests; production code uses the\n   * defaults.\n   */\n  logThrottle: MentraJSLogThrottle = new MentraJSLogThrottle()\n  logRing: MentraJSLogRingBuffer = new MentraJSLogRingBuffer()\n\n  /**\n   * Optional UI router — when wired, `__bridge.send` envelopes whose\n   * inner payload type is `UI_SEND` get routed to the bound WebView\n   * instead of through LocalMiniappRuntime. Two-layer miniapps set\n   * this; legacy single-bundle WebView miniapps don't and the bridge\n   * frames pass through unchanged.\n   */\n  uiRouter: MentraUIRouter | null = null\n\n  constructor(\n    private readonly runtime: LocalMiniappRuntime,\n    private readonly crust: MentraJSCrustBinding,\n    private readonly logger: RouterLogger = defaultLogger,\n  ) {}\n\n  /**\n   * Subscribe to Crust's `mentrajs_message` event. Idempotent — calling\n   * start() twice attaches a single listener.\n   */\n  start(): void {\n    if (this.subscription) return\n    this.subscription = this.crust.addListener(\"mentrajs_message\", (raw) => {\n      try {\n        this.handleOutbound(raw as unknown as OutboundMessagePayload)\n      } catch (e) {\n        this.logger.error(`outbound handler threw`, {error: String(e), raw})\n      }\n    })\n    // A background script unregistered for missing liveness pings is dead\n    // weight: its subscriptions are gone (so the mic releases) while the\n    // webview keeps rendering stale state. Route it through the same\n    // respawn machinery as a crash so it comes back automatically, with\n    // the crash controller's backoff + crash-loop protection.\n    this.runtime.onLivenessTimeout = (packageName) => {\n      this.handleCrash(packageName, \"liveness: missed pings\")\n    }\n  }\n\n  /**\n   * Detach the Crust subscription. The router can be restarted later\n   * with start(); registrations survive (the runtime's app map is the\n   * source of truth).\n   */\n  stop(): void {\n    this.subscription?.remove()\n    this.subscription = null\n    this.runtime.onLivenessTimeout = null\n  }\n\n  /**\n   * Register a JSContext with the runtime so its handlers can fire\n   * `sendMessage(raw)` against the right context. The router builds a\n   * `sendMessage` that calls `Crust.mentraJsDispatchToJs(packageName,\n   * {kind: \"bridge\", raw})`; the polyfill's `__deliver` then hands the\n   * envelope to `DispatchTransport.onMessage` inside the miniapp.\n   *\n   * Mirrors `MiniappHost.registerRuntime` on the WebView side. Callers\n   * (e.g. {@link spawnAndRegister} below, or the host's miniapp launch\n   * pipeline) should call this once per spawn.\n   */\n  registerApp(packageName: string, installedManifest?: InstalledMiniappManifest): void {\n    this.runtime.registerApp(\n      packageName,\n      (raw: string) => {\n        this.dispatchBridgeRaw(packageName, raw)\n      },\n      installedManifest,\n    )\n    this.registered.add(packageName)\n    // JSContext is the source-of-truth for \"miniapp running\". The\n    // home tile / tray reads this registry to project the `running`\n    // flag — UI WebView open/close is separate.\n    miniappRunningRegistry.add(packageName)\n  }\n\n  /**\n   * Convenience: spawn a JSContext via Crust, register the app, and\n   * set its declared permissions. Returns true on successful spawn.\n   *\n   * The host's miniapp launch path\n   * (`mobile/src/services/miniapps/launchLocalMiniapp.ts`) calls this\n   * once per JSContext mount.\n   */\n  async spawnAndRegister(\n    packageName: string,\n    miniappJs: string,\n    options?: {permissions?: string[]; installedManifest?: InstalledMiniappManifest},\n  ): Promise<boolean> {\n    if (!this.crust.mentraJsSpawn) {\n      this.logger.warn(\"mentraJsSpawn not available — host binding missing native function\")\n      return false\n    }\n    const polyfill = this.crust.mentraJsLoadPolyfillBundle?.() ?? \"\"\n    if (!polyfill) {\n      this.logger.warn(`no polyfill bundle loaded for ${packageName}; spawn will likely fail`)\n    }\n    const ok = await this.crust.mentraJsSpawn(packageName, polyfill, miniappJs)\n    if (!ok) {\n      this.logger.error(`spawn failed for ${packageName}`)\n      return false\n    }\n    // Two distinct permission gates:\n    //   1. Native dispatcher (JSContext → native bridge): `mentraJsSetManifest`\n    //      checks per-call iface, e.g. __dispatch(\"mic\", \"start\", ...) requires\n    //      MICROPHONE.\n    //   2. LocalMiniappRuntime (SUBSCRIBE envelope): `registerApp(...,\n    //      installedManifest)` carries the full manifest so SUBSCRIBE's gate\n    //      can match stream → permission against declared types.\n    if (options?.permissions && options.permissions.length > 0) {\n      await this.crust.mentraJsSetManifest(packageName, options.permissions)\n    }\n    this.registerApp(packageName, options?.installedManifest)\n    // Cache spawn arguments so the crash controller can respawn the\n    // same code after a backoff. permissions + manifest are cached too\n    // because the native side resets setManifest on every spawn and\n    // LocalMiniappRuntime's installedManifest entry is keyed by\n    // connect-time registration.\n    this.spawnCache.set(packageName, {\n      miniappJs,\n      permissions: options?.permissions ?? [],\n      installedManifest: options?.installedManifest,\n    })\n    this.crashController?.onSpawn(packageName)\n\n    // Fire the `init` envelope so the polyfill's __deliver handler\n    // resolves `__mentraInitCallback(sessionId)`. The SDK's\n    // `registerMiniapp(handler)` wires that callback to construct\n    // MiniappSession and call the user's handler. Without this\n    // dispatch the user's code never runs — `registerMiniapp` just\n    // assigns to a global and waits.\n    const sessionId = `${packageName}-${Date.now().toString(36)}`\n    void this.crust.mentraJsDispatchToJs(packageName, {kind: \"init\", sessionId})\n\n    return true\n  }\n\n  /**\n   * Crash-controller integration. Called from the `__error` frame\n   * handler. The controller returns an outcome that tells us whether\n   * to respawn (with delay) or leave the context dead.\n   */\n  private handleCrash(packageName: string, reason: string): void {\n    // The native context is dead the instant a crash is observed — invalidate\n    // its CONNECT handshake NOW so waitForConnect() blocks through the respawn\n    // backoff window instead of resolving immediately against the dead context\n    // (an action invoked mid-backoff would otherwise be delivered to nothing).\n    this.runtime.resetHandshake(packageName)\n    const controller = this.crashController\n    if (!controller) return\n    const cached = this.spawnCache.get(packageName)\n    if (!cached) {\n      this.logger.warn(`crash for ${packageName} but no cached spawn args — cannot respawn`)\n      controller.onCrash(packageName, reason)\n      return\n    }\n    const outcome = controller.onCrash(packageName, reason)\n    if (outcome.surfaceCrashloopBanner) {\n      this.onCrashloop?.(packageName, reason)\n      islandNotifications.emit({kind: \"miniapp_crashloop\", packageName, reason, timestamp: Date.now()})\n      return\n    }\n    if (outcome.showRestartToast) {\n      this.onRestartToast?.(packageName, reason)\n    }\n    if (outcome.scheduleRespawnAfterMs == null) return\n    // Cancel any prior pending respawn before scheduling a new one.\n    const existing = this.respawnTimers.get(packageName)\n    if (existing) clearTimeout(existing)\n    const timer = setTimeout(() => {\n      this.respawnTimers.delete(packageName)\n      void (async () => {\n        try {\n          await this.crust.mentraJsKill?.(packageName)\n        } catch {\n          /* native may have already torn down */\n        }\n        const ok = await this.crust.mentraJsSpawn?.(\n          packageName,\n          this.crust.mentraJsLoadPolyfillBundle?.() ?? \"\",\n          cached.miniappJs,\n        )\n        if (!ok) {\n          this.logger.error(`crash respawn failed for ${packageName}`)\n          return\n        }\n        if (cached.permissions.length > 0) {\n          await this.crust.mentraJsSetManifest(packageName, cached.permissions)\n        }\n        this.registerApp(packageName, cached.installedManifest)\n        controller.onSpawn(packageName)\n        // Re-fire the init envelope so the respawned context's\n        // `registerMiniapp` handler runs again.\n        const sessionId = `${packageName}-${Date.now().toString(36)}`\n        void this.crust.mentraJsDispatchToJs(packageName, {kind: \"init\", sessionId})\n        this.logger.log(`respawned ${packageName} after crash`)\n      })()\n    }, outcome.scheduleRespawnAfterMs)\n    this.respawnTimers.set(packageName, timer)\n  }\n\n  private summarizeReason(payload: unknown, method: string): string {\n    if (payload && typeof payload === \"object\" && \"message\" in (payload as Record<string, unknown>)) {\n      return `${method}: ${(payload as {message: string}).message}`\n    }\n    return method\n  }\n\n  /**\n   * Tear down a JSContext and unregister from the runtime. Synchronous\n   * teardown — the spec drops the 50ms WILL_DISCONNECT grace window\n   * because there's no transport handshake to flush in the JSC world.\n   */\n  async unregister(packageName: string): Promise<void> {\n    if (!this.registered.has(packageName)) return\n    // Cancel any pending crash-respawn before tearing down — we don't\n    // want a stale timer to re-spawn a miniapp the user just disabled.\n    const pending = this.respawnTimers.get(packageName)\n    if (pending) {\n      clearTimeout(pending)\n      this.respawnTimers.delete(packageName)\n    }\n    this.spawnCache.delete(packageName)\n    this.crashController?.onKill(packageName)\n    this.runtime.unregisterApp(packageName)\n    this.registered.delete(packageName)\n    // JSContext torn down → miniapp is no longer \"running\".\n    miniappRunningRegistry.remove(packageName)\n    if (this.crust.mentraJsKill) {\n      try {\n        await this.crust.mentraJsKill(packageName)\n      } catch (e) {\n        this.logger.warn(`mentraJsKill threw for ${packageName}: ${String(e)}`)\n      }\n    }\n  }\n\n  /** List packages the router has registered. */\n  registeredPackages(): string[] {\n    return Array.from(this.registered)\n  }\n\n  /**\n   * Validate that a reused background JSContext is still responsive when its\n   * WebView comes foreground. The runtime owns the ping/timeout mechanics; the\n   * router gates this to registered packages and keeps LocalMiniappView from\n   * reaching into runtime internals.\n   */\n  probeForegroundLiveness(packageName: string, reason = \"foreground-open\"): void {\n    if (!this.registered.has(packageName)) return\n    this.runtime.probeForegroundLiveness(packageName, reason)\n  }\n\n  // ----------------------------------------------------------------\n  // Outbound message handling\n  // ----------------------------------------------------------------\n\n  private handleOutbound(msg: OutboundMessagePayload): void {\n    const {packageName, iface, method} = msg\n    if (!packageName || !iface || !method) {\n      this.logger.warn(`bad mentrajs_message — missing fields`, msg)\n      return\n    }\n\n    // 1) Bridge frames: the SDK's DispatchTransport.send(raw) lands here.\n    //    Forward raw envelope into LocalMiniappRuntime.handleRawMessage\n    //    so every existing handler arm runs verbatim.\n    if (iface === \"__bridge\" && method === \"send\") {\n      const raw = this.coerceArgsToBridgeRaw(msg)\n      if (raw == null) {\n        this.logger.warn(`__bridge.send had no raw payload`, msg)\n        return\n      }\n      // If the payload is a UI_SEND envelope, route it to the bound\n      // WebView instead of LocalMiniappRuntime.\n      // session.ui.send → DispatchTransport.send → here.\n      if (this.uiRouter) {\n        const innerPayload = this.peekBridgePayloadType(raw)\n        if (innerPayload?.type === \"UI_SEND\") {\n          this.uiRouter.routeFromBackground(packageName, innerPayload)\n          return\n        }\n      }\n      this.runtime.handleRawMessage(packageName, raw)\n      return\n    }\n\n    // 2) Log frames — console.* rewired through host. We tag with the\n    //    packageName so Sentry breadcrumbs can be filtered downstream.\n    //    Pipeline:\n    //      raw args → redactSecrets → throttle decision → ring buffer\n    //               → host logger (which surfaces to dev console / Sentry)\n    if (iface === \"__log\") {\n      const rawArgs = this.tryParseArgs(msg.argsJson)\n      const safeArgs = redactSecrets(rawArgs)\n      const decision = this.logThrottle.consume(packageName)\n      const tag = `[${packageName}]`\n      const fn =\n        method === \"warn\"\n          ? this.logger.warn\n          : method === \"error\" || method === \"fatal\"\n            ? this.logger.error\n            : this.logger.log\n      // Emit a synthetic \"[throttled N]\" line in place of the next\n      // would-be-allowed log to summarise drops.\n      if (!decision.allowed) {\n        if (decision.throttledLine) {\n          fn(`${tag} ${decision.throttledLine}`)\n          this.logRing.push(packageName, `${decision.throttledLine}`)\n        }\n        return\n      }\n      const formatted = `${tag} console.${method}`\n      fn(formatted, safeArgs)\n      // Stringify into the ring buffer for crash-report attachment.\n      let line: string\n      try {\n        line = `${method}: ${JSON.stringify(safeArgs)}`\n      } catch {\n        line = `${method}: <unserializable>`\n      }\n      this.logRing.push(packageName, line)\n      // Forward to the `mentra-miniapp dev` sidecar (if one is connected\n      // for this package). Source=\"background\" so the CLI tags lines as\n      // [MentraJS]. The bridge silently drops when no dev server is up,\n      // which makes this safe to call unconditionally in prod.\n      const argsForBridge = Array.isArray(safeArgs) ? (safeArgs as unknown[]) : [safeArgs]\n      devServerBridge.forwardLog(packageName, method, argsForBridge, Date.now(), \"background\")\n      return\n    }\n\n    // 3) Error / unhandled rejection frames — surface as warnings AND\n    //    drive the crash state machine when one is attached. The\n    //    controller's outcome may schedule a respawn after a backoff;\n    //    if it doesn't (CRASHLOOP_DISABLED), we leave the JSContext\n    //    dead and let the host surface a \"tap to retry\" banner.\n    if (iface === \"__error\") {\n      const payload = this.tryParseArgs(msg.argsJson)\n      this.logger.error(`[${packageName}] ${method}`, payload)\n      if (this.crashController) {\n        // Only treat \"exception\" + \"unhandledRejection\" + \"uncaught\" as\n        // crash signals. `console.error` calls also flow through the\n        // log path — those don't end the JSContext.\n        const isCrash = method === \"exception\" || method === \"unhandledRejection\" || method === \"uncaught\"\n        if (isCrash) {\n          this.handleCrash(packageName, this.summarizeReason(payload, method))\n        }\n      }\n      return\n    }\n\n    // 4) Anything else is a `forwardToRn` from the dispatcher — a\n    //    handler the native dispatcher didn't know about. We don't have\n    //    inline handlers for any of these; the runtime's existing path\n    //    treats them as legacy WebView envelopes by falling through.\n    //    Log so unknown ifaces surface in dev.\n    this.logger.log(`unhandled iface=${iface} method=${method} from ${packageName}`)\n  }\n\n  /**\n   * The wire format for `__bridge.send` is `argsJson = JSON.stringify([raw])`\n   * — a single-element array containing the original raw envelope. The\n   * dispatcher passes the parsed array through as either:\n   *   - `msg.args` when the dispatcher unpacked (Android path that turns\n   *     `argsJson` into a List on the way to RN), or\n   *   - `msg.argsJson` (iOS path that ships the string verbatim).\n   * Cover both shapes here.\n   */\n  /**\n   * Parse a raw bridge envelope just enough to peek at the inner\n   * payload's `type` field. Used by the UI_SEND interception path.\n   * Returns null if the envelope isn't a valid bridge frame.\n   */\n  private peekBridgePayloadType(raw: string): {type: string; [k: string]: unknown} | null {\n    try {\n      const env = JSON.parse(raw) as {payload?: {type?: string}}\n      if (env && typeof env.payload === \"object\" && env.payload && typeof env.payload.type === \"string\") {\n        return env.payload as {type: string; [k: string]: unknown}\n      }\n    } catch {\n      return null\n    }\n    return null\n  }\n\n  private coerceArgsToBridgeRaw(msg: OutboundMessagePayload): string | null {\n    if (Array.isArray(msg.args)) {\n      const v = msg.args[0]\n      return typeof v === \"string\" ? v : null\n    }\n    if (typeof msg.argsJson === \"string\") {\n      try {\n        const parsed = JSON.parse(msg.argsJson) as unknown\n        if (Array.isArray(parsed) && typeof parsed[0] === \"string\") {\n          return parsed[0]\n        }\n      } catch {\n        // fall through\n      }\n    }\n    return null\n  }\n\n  private tryParseArgs(argsJson: string | undefined): unknown {\n    if (!argsJson) return null\n    try {\n      return JSON.parse(argsJson)\n    } catch {\n      return argsJson\n    }\n  }\n\n  /**\n   * Push a `kind=\"bridge\"` envelope into the named JSContext's\n   * `globalThis.__deliver`. Used both by the per-app `sendMessage`\n   * registered via {@link registerApp} and by ad-hoc callers (e.g.\n   * cloud-relayed stream-status responses route through\n   * `LocalMiniappRuntime.handleCloudMessage`, which then calls the\n   * `app.sendMessage(serialized)` registered above).\n   */\n  private dispatchBridgeRaw(packageName: string, raw: string): void {\n    void this.crust.mentraJsDispatchToJs(packageName, {kind: \"bridge\", raw})\n  }\n}\n"]}