@mentra/engine 0.1.0-beta.0

package/build/services/asgOtaVersionUrl.js

@@ -0,0 +1,36 @@
+import { SETTINGS, useSettingsStore } from "../stores/settings";
+const OTA_VERSION_URL_PROD = "https://ota.mentraglass.com/prod_live_version.json";
+function isLegacyAsgOtaStartBuild(glassesBuildNumber) {
+    const buildNumber = Number.parseInt(glassesBuildNumber ?? "", 10);
+    // ASG builds before 39 ignore ota_start.ota_version_url, so compare against
+    // the URL they will actually use.
+    return Number.isFinite(buildNumber) && buildNumber < 39;
+}
+function getOtaVersionUrlDevOverride() {
+    // Super mode only: a wrong OTA manifest can brick glasses, so a saved
+    // override is inert unless super mode is currently enabled.
+    if (!useSettingsStore.getState().getSetting(SETTINGS.super_mode.key)) {
+        return null;
+    }
+    const value = useSettingsStore.getState().getSetting(SETTINGS.ota_version_url.key);
+    const trimmed = typeof value === "string" ? value.trim() : "";
+    return trimmed || null;
+}
+export function getAsgOtaVersionUrl(glassesUrl, glassesBuildNumber) {
+    const deviceUrl = glassesUrl?.trim();
+    if (isLegacyAsgOtaStartBuild(glassesBuildNumber)) {
+        // Legacy glasses ignore ota_start.ota_version_url and install from their
+        // compiled default, so the developer override does not apply to them either.
+        return deviceUrl || OTA_VERSION_URL_PROD;
+    }
+    const devOverrideUrl = getOtaVersionUrlDevOverride();
+    if (devOverrideUrl) {
+        return devOverrideUrl;
+    }
+    const envUrl = process.env.EXPO_PUBLIC_ASG_OTA_VERSION_URL?.trim();
+    if (envUrl) {
+        return envUrl;
+    }
+    return deviceUrl || OTA_VERSION_URL_PROD;
+}
+//# sourceMappingURL=asgOtaVersionUrl.js.map

package/build/services/asgOtaVersionUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asgOtaVersionUrl.js","sourceRoot":"","sources":["../../src/services/asgOtaVersionUrl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAE,gBAAgB,EAAC,MAAM,oBAAoB,CAAA;AAE7D,MAAM,oBAAoB,GAAG,oDAAoD,CAAA;AAEjF,SAAS,wBAAwB,CAAC,kBAAkC;IAClE,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,kBAAkB,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;IACjE,4EAA4E;IAC5E,kCAAkC;IAClC,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,EAAE,CAAA;AACzD,CAAC;AAED,SAAS,2BAA2B;IAClC,sEAAsE;IACtE,4DAA4D;IAC5D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;IAClF,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7D,OAAO,OAAO,IAAI,IAAI,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,UAA0B,EAAE,kBAAkC;IAChG,MAAM,SAAS,GAAG,UAAU,EAAE,IAAI,EAAE,CAAA;IACpC,IAAI,wBAAwB,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACjD,yEAAyE;QACzE,6EAA6E;QAC7E,OAAO,SAAS,IAAI,oBAAoB,CAAA;IAC1C,CAAC;IAED,MAAM,cAAc,GAAG,2BAA2B,EAAE,CAAA;IACpD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,cAAc,CAAA;IACvB,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,IAAI,EAAE,CAAA;IAClE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAA;IACf,CAAC;IACD,OAAO,SAAS,IAAI,oBAAoB,CAAA;AAC1C,CAAC","sourcesContent":["import {SETTINGS, useSettingsStore} from \"../stores/settings\"\n\nconst OTA_VERSION_URL_PROD = \"https://ota.mentraglass.com/prod_live_version.json\"\n\nfunction isLegacyAsgOtaStartBuild(glassesBuildNumber?: string | null): boolean {\n  const buildNumber = Number.parseInt(glassesBuildNumber ?? \"\", 10)\n  // ASG builds before 39 ignore ota_start.ota_version_url, so compare against\n  // the URL they will actually use.\n  return Number.isFinite(buildNumber) && buildNumber < 39\n}\n\nfunction getOtaVersionUrlDevOverride(): string | null {\n  // Super mode only: a wrong OTA manifest can brick glasses, so a saved\n  // override is inert unless super mode is currently enabled.\n  if (!useSettingsStore.getState().getSetting(SETTINGS.super_mode.key)) {\n    return null\n  }\n  const value = useSettingsStore.getState().getSetting(SETTINGS.ota_version_url.key)\n  const trimmed = typeof value === \"string\" ? value.trim() : \"\"\n  return trimmed || null\n}\n\nexport function getAsgOtaVersionUrl(glassesUrl?: string | null, glassesBuildNumber?: string | null): string {\n  const deviceUrl = glassesUrl?.trim()\n  if (isLegacyAsgOtaStartBuild(glassesBuildNumber)) {\n    // Legacy glasses ignore ota_start.ota_version_url and install from their\n    // compiled default, so the developer override does not apply to them either.\n    return deviceUrl || OTA_VERSION_URL_PROD\n  }\n\n  const devOverrideUrl = getOtaVersionUrlDevOverride()\n  if (devOverrideUrl) {\n    return devOverrideUrl\n  }\n\n  const envUrl = process.env.EXPO_PUBLIC_ASG_OTA_VERSION_URL?.trim()\n  if (envUrl) {\n    return envUrl\n  }\n  return deviceUrl || OTA_VERSION_URL_PROD\n}\n"]}

package/build/services/blobPaths.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Pure path helper for BlobStore. No React Native / Expo imports, so it's
+ * unit-testable in isolation (see blobPaths.test.ts).
+ */
+/** Filesystem-safe path segment. Strips traversal + unsafe chars; never empty. */
+export declare function sanitizeSegment(s: string): string;
+/**
+ * Filesystem-safe display name for a shared blob, guaranteed to carry an
+ * extension. The on-disk blob name is a generated machine id (with a
+ * mime-derived extension since withDiskExt; legacy blobs may lack it), so the
+ * OS share sheet (which keys off the file path, not any metadata) would
+ * otherwise emit a machine-named file — breaking "open with"/preview on the
+ * receiving side. Derives the extension from the mimeType when the stored name
+ * lacks one.
+ */
+export declare function shareFileName(meta: {
+    name?: string;
+    fileName: string;
+    mimeType: string;
+}): string;
+/**
+ * On-disk name for a stored blob: the generated id plus a mime-derived
+ * extension when one is known. iOS AVPlayer resolves a local file's format
+ * from its path extension (not content sniffing), so an extension-less WAV is
+ * unplayable through `session.speaker.play` even though the bytes are valid.
+ * Leaves a name that already has an extension untouched.
+ */
+export declare function withDiskExt(fileName: string, mimeType: string): string;
+/** Best-effort file extension (no dot) for a MIME type. Inverse of inferMime in BlobStore. */
+export declare function extForMime(mime: string): string | undefined;
+//# sourceMappingURL=blobPaths.d.ts.map

package/build/services/blobPaths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blobPaths.d.ts","sourceRoot":"","sources":["../../src/services/blobPaths.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,kFAAkF;AAClF,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAIjD;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAC,GAAG,MAAM,CAsB/F;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAItE;AAED,8FAA8F;AAC9F,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CA0B3D"}

package/build/services/blobPaths.js

@@ -0,0 +1,86 @@
+/**
+ * Pure path helper for BlobStore. No React Native / Expo imports, so it's
+ * unit-testable in isolation (see blobPaths.test.ts).
+ */
+/** Filesystem-safe path segment. Strips traversal + unsafe chars; never empty. */
+export function sanitizeSegment(s) {
+    const cleaned = (s || "").replace(/[^A-Za-z0-9._-]/g, "_");
+    if (cleaned === "" || cleaned === "." || cleaned === "..")
+        return "_";
+    return cleaned.slice(0, 120);
+}
+/**
+ * Filesystem-safe display name for a shared blob, guaranteed to carry an
+ * extension. The on-disk blob name is a generated machine id (with a
+ * mime-derived extension since withDiskExt; legacy blobs may lack it), so the
+ * OS share sheet (which keys off the file path, not any metadata) would
+ * otherwise emit a machine-named file — breaking "open with"/preview on the
+ * receiving side. Derives the extension from the mimeType when the stored name
+ * lacks one.
+ */
+export function shareFileName(meta) {
+    const raw = (meta.name || meta.fileName).trim();
+    // Replace path separators + characters illegal on common filesystems (keep
+    // spaces, hyphens, dots, etc. — they're valid and keep names readable).
+    // eslint-disable-next-line no-control-regex
+    let safe = raw.replace(/[/\\<>:"|?*\x00-\x1f]/g, "_").trim();
+    if (!safe)
+        safe = meta.fileName;
+    // Split base + extension: use an extension already on the name, else derive
+    // one from the mimeType.
+    const dot = safe.lastIndexOf(".");
+    const hasExt = dot > 0 && dot < safe.length - 1;
+    let base = hasExt ? safe.slice(0, dot) : safe;
+    const ext = hasExt ? safe.slice(dot + 1) : extForMime(meta.mimeType);
+    const suffix = ext ? `.${ext}` : "";
+    // Bound the total length: common filesystems reject names over ~255 bytes, so
+    // a huge app-provided name would make the share's file copy throw. Truncate
+    // the base while preserving the extension (mirrors sanitizeSegment's ceiling).
+    const MAX_LEN = 120;
+    if (base.length + suffix.length > MAX_LEN) {
+        base = base.slice(0, Math.max(1, MAX_LEN - suffix.length));
+    }
+    return base + suffix;
+}
+/**
+ * On-disk name for a stored blob: the generated id plus a mime-derived
+ * extension when one is known. iOS AVPlayer resolves a local file's format
+ * from its path extension (not content sniffing), so an extension-less WAV is
+ * unplayable through `session.speaker.play` even though the bytes are valid.
+ * Leaves a name that already has an extension untouched.
+ */
+export function withDiskExt(fileName, mimeType) {
+    if (fileName.includes("."))
+        return fileName;
+    const ext = extForMime(mimeType);
+    return ext ? `${fileName}.${ext}` : fileName;
+}
+/** Best-effort file extension (no dot) for a MIME type. Inverse of inferMime in BlobStore. */
+export function extForMime(mime) {
+    const m = (mime || "").split(";")[0].trim().toLowerCase();
+    const map = {
+        "application/pdf": "pdf",
+        "application/epub+zip": "epub",
+        "application/zip": "zip",
+        "application/json": "json",
+        "text/plain": "txt",
+        "text/csv": "csv",
+        "text/html": "html",
+        "video/mp4": "mp4",
+        "video/quicktime": "mov",
+        "video/webm": "webm",
+        "audio/mpeg": "mp3",
+        "audio/mp4": "m4a",
+        "audio/wav": "wav",
+        "audio/x-wav": "wav",
+        "audio/wave": "wav",
+        "audio/ogg": "ogg",
+        "image/png": "png",
+        "image/jpeg": "jpg",
+        "image/gif": "gif",
+        "image/webp": "webp",
+        "image/svg+xml": "svg",
+    };
+    return map[m];
+}
+//# sourceMappingURL=blobPaths.js.map

package/build/services/blobPaths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blobPaths.js","sourceRoot":"","sources":["../../src/services/blobPaths.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,CAAS;IACvC,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAA;IAC1D,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,GAAG,CAAA;IACrE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC9B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,IAAyD;IACrF,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAA;IAC/C,2EAA2E;IAC3E,wEAAwE;IACxE,4CAA4C;IAC5C,IAAI,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IAC5D,IAAI,CAAC,IAAI;QAAE,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC/B,4EAA4E;IAC5E,yBAAyB;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;IAC/C,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpE,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACnC,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,MAAM,OAAO,GAAG,GAAG,CAAA;IACnB,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QAC1C,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,IAAI,GAAG,MAAM,CAAA;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,QAAgB;IAC5D,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IAChC,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC9C,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACzD,MAAM,GAAG,GAA2B;QAClC,iBAAiB,EAAE,KAAK;QACxB,sBAAsB,EAAE,MAAM;QAC9B,iBAAiB,EAAE,KAAK;QACxB,kBAAkB,EAAE,MAAM;QAC1B,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,KAAK;QACjB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,KAAK;QAClB,iBAAiB,EAAE,KAAK;QACxB,YAAY,EAAE,MAAM;QACpB,YAAY,EAAE,KAAK;QACnB,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,KAAK;QAClB,aAAa,EAAE,KAAK;QACpB,YAAY,EAAE,KAAK;QACnB,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,KAAK;QAClB,YAAY,EAAE,KAAK;QACnB,WAAW,EAAE,KAAK;QAClB,YAAY,EAAE,MAAM;QACpB,eAAe,EAAE,KAAK;KACvB,CAAA;IACD,OAAO,GAAG,CAAC,CAAC,CAAC,CAAA;AACf,CAAC","sourcesContent":["/**\n * Pure path helper for BlobStore. No React Native / Expo imports, so it's\n * unit-testable in isolation (see blobPaths.test.ts).\n */\n\n/** Filesystem-safe path segment. Strips traversal + unsafe chars; never empty. */\nexport function sanitizeSegment(s: string): string {\n  const cleaned = (s || \"\").replace(/[^A-Za-z0-9._-]/g, \"_\")\n  if (cleaned === \"\" || cleaned === \".\" || cleaned === \"..\") return \"_\"\n  return cleaned.slice(0, 120)\n}\n\n/**\n * Filesystem-safe display name for a shared blob, guaranteed to carry an\n * extension. The on-disk blob name is a generated machine id (with a\n * mime-derived extension since withDiskExt; legacy blobs may lack it), so the\n * OS share sheet (which keys off the file path, not any metadata) would\n * otherwise emit a machine-named file — breaking \"open with\"/preview on the\n * receiving side. Derives the extension from the mimeType when the stored name\n * lacks one.\n */\nexport function shareFileName(meta: {name?: string; fileName: string; mimeType: string}): string {\n  const raw = (meta.name || meta.fileName).trim()\n  // Replace path separators + characters illegal on common filesystems (keep\n  // spaces, hyphens, dots, etc. — they're valid and keep names readable).\n  // eslint-disable-next-line no-control-regex\n  let safe = raw.replace(/[/\\\\<>:\"|?*\\x00-\\x1f]/g, \"_\").trim()\n  if (!safe) safe = meta.fileName\n  // Split base + extension: use an extension already on the name, else derive\n  // one from the mimeType.\n  const dot = safe.lastIndexOf(\".\")\n  const hasExt = dot > 0 && dot < safe.length - 1\n  let base = hasExt ? safe.slice(0, dot) : safe\n  const ext = hasExt ? safe.slice(dot + 1) : extForMime(meta.mimeType)\n  const suffix = ext ? `.${ext}` : \"\"\n  // Bound the total length: common filesystems reject names over ~255 bytes, so\n  // a huge app-provided name would make the share's file copy throw. Truncate\n  // the base while preserving the extension (mirrors sanitizeSegment's ceiling).\n  const MAX_LEN = 120\n  if (base.length + suffix.length > MAX_LEN) {\n    base = base.slice(0, Math.max(1, MAX_LEN - suffix.length))\n  }\n  return base + suffix\n}\n\n/**\n * On-disk name for a stored blob: the generated id plus a mime-derived\n * extension when one is known. iOS AVPlayer resolves a local file's format\n * from its path extension (not content sniffing), so an extension-less WAV is\n * unplayable through `session.speaker.play` even though the bytes are valid.\n * Leaves a name that already has an extension untouched.\n */\nexport function withDiskExt(fileName: string, mimeType: string): string {\n  if (fileName.includes(\".\")) return fileName\n  const ext = extForMime(mimeType)\n  return ext ? `${fileName}.${ext}` : fileName\n}\n\n/** Best-effort file extension (no dot) for a MIME type. Inverse of inferMime in BlobStore. */\nexport function extForMime(mime: string): string | undefined {\n  const m = (mime || \"\").split(\";\")[0].trim().toLowerCase()\n  const map: Record<string, string> = {\n    \"application/pdf\": \"pdf\",\n    \"application/epub+zip\": \"epub\",\n    \"application/zip\": \"zip\",\n    \"application/json\": \"json\",\n    \"text/plain\": \"txt\",\n    \"text/csv\": \"csv\",\n    \"text/html\": \"html\",\n    \"video/mp4\": \"mp4\",\n    \"video/quicktime\": \"mov\",\n    \"video/webm\": \"webm\",\n    \"audio/mpeg\": \"mp3\",\n    \"audio/mp4\": \"m4a\",\n    \"audio/wav\": \"wav\",\n    \"audio/x-wav\": \"wav\",\n    \"audio/wave\": \"wav\",\n    \"audio/ogg\": \"ogg\",\n    \"image/png\": \"png\",\n    \"image/jpeg\": \"jpg\",\n    \"image/gif\": \"gif\",\n    \"image/webp\": \"webp\",\n    \"image/svg+xml\": \"svg\",\n  }\n  return map[m]\n}\n"]}

package/build/services/cloudStreamApi.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Managed-stream provisioning over the cloud-v2 runtime (cloud-client REST):
+ *
+ *   POST   /api/camera/stream      -> provision (Cloudflare live input)
+ *   GET    /api/camera/stream/:id  -> provider's ingest status
+ *   DELETE /api/camera/stream/:id  -> teardown
+ *
+ * Drop-in replacement for the legacy `v2StreamApi` (which hit the v1 cloud's
+ * /api/v2/client/streams/managed on backend_url): same exported shapes, so
+ * PhoneStreamCoordinator is unchanged apart from the import. Local miniapps
+ * use ONLY this path — no legacy V1 transport.
+ *
+ * Errors are tagged with stage "provision"/"status"/"teardown" and transport
+ * "cloud-rest" so a miniapp sees exactly where and on which leg it broke.
+ */
+/**
+ * Restream destination. The full stream key is part of the URL — Cloudflare
+ * appends nothing on the publish side. `name` is a human label that surfaces
+ * in Cloudflare's dashboard but doesn't affect routing.
+ */
+export interface RestreamDestination {
+    url: string;
+    name?: string;
+}
+/** Caller-facing shape: either a bare URL string or the full object. */
+export type RestreamDestinationInput = string | RestreamDestination;
+export interface ProvisionResult {
+    liveInputId: string;
+    rtmpUrl: string;
+    srtUrl?: string;
+    hlsUrl: string;
+    dashUrl: string;
+    webrtcUrl?: string;
+    webrtcPublishUrl?: string;
+}
+export interface CloudflareStatus {
+    isConnected: boolean;
+    state?: string | null;
+    connectedAt?: string;
+    lastSeenAt?: string;
+    reason?: string;
+}
+export type StreamApiStage = "provision" | "status" | "teardown";
+export declare class StreamApiError extends Error {
+    readonly code: string;
+    readonly stage: StreamApiStage;
+    readonly transport: "cloud-rest";
+    constructor(code: string, message: string, stage: StreamApiStage);
+}
+/**
+ * Provision a managed stream on the cloud-v2 runtime. Returns ready-to-publish
+ * ingest URLs (credentials embedded) plus the playback URLs.
+ */
+export declare function provisionManagedStream(restreamDestinations?: RestreamDestinationInput[]): Promise<ProvisionResult>;
+/** The provider's view of the ingest: is the device's push arriving? */
+export declare function getManagedStreamStatus(liveInputId: string): Promise<CloudflareStatus>;
+/** Tear down the provider stream. */
+export declare function teardownManagedStream(liveInputId: string): Promise<void>;
+//# sourceMappingURL=cloudStreamApi.d.ts.map

package/build/services/cloudStreamApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudStreamApi.d.ts","sourceRoot":"","sources":["../../src/services/cloudStreamApi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,wEAAwE;AACxE,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,mBAAmB,CAAA;AAEnE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,OAAO,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAA;AAEhE,qBAAa,cAAe,SAAQ,KAAK;aAGrB,IAAI,EAAE,MAAM;aAEZ,KAAK,EAAE,cAAc;IAJvC,QAAQ,CAAC,SAAS,EAAG,YAAY,CAAS;gBAExB,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM,EACC,KAAK,EAAE,cAAc;CAKxC;AAmBD;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,oBAAoB,CAAC,EAAE,wBAAwB,EAAE,GAChD,OAAO,CAAC,eAAe,CAAC,CAkC1B;AAED,wEAAwE;AACxE,wBAAsB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiB3F;AAED,qCAAqC;AACrC,wBAAsB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU9E"}

package/build/services/cloudStreamApi.js

@@ -0,0 +1,81 @@
+/**
+ * Managed-stream provisioning over the cloud-v2 runtime (cloud-client REST):
+ *
+ *   POST   /api/camera/stream      -> provision (Cloudflare live input)
+ *   GET    /api/camera/stream/:id  -> provider's ingest status
+ *   DELETE /api/camera/stream/:id  -> teardown
+ *
+ * Drop-in replacement for the legacy `v2StreamApi` (which hit the v1 cloud's
+ * /api/v2/client/streams/managed on backend_url): same exported shapes, so
+ * PhoneStreamCoordinator is unchanged apart from the import. Local miniapps
+ * use ONLY this path — no legacy V1 transport.
+ *
+ * Errors are tagged with stage "provision"/"status"/"teardown" and transport
+ * "cloud-rest" so a miniapp sees exactly where and on which leg it broke.
+ */
+import { cloudClientService as cloudClient } from "./CloudClientService";
+export class StreamApiError extends Error {
+    code;
+    stage;
+    transport = "cloud-rest";
+    constructor(code, message, stage) {
+        super(message);
+        this.code = code;
+        this.stage = stage;
+        this.name = "StreamApiError";
+    }
+}
+/**
+ * Provision a managed stream on the cloud-v2 runtime. Returns ready-to-publish
+ * ingest URLs (credentials embedded) plus the playback URLs.
+ */
+export async function provisionManagedStream(restreamDestinations) {
+    let wire;
+    try {
+        wire = (await cloudClient.startManagedStream(restreamDestinations && restreamDestinations.length > 0 ? { restreamDestinations } : {}));
+    }
+    catch (err) {
+        throw new StreamApiError("STREAM_PROVISION_FAILED", err instanceof Error ? err.message : String(err), "provision");
+    }
+    const ingest = wire.ingest ?? {};
+    const playback = wire.playback ?? {};
+    const rtmpUrl = ingest.rtmpUrl ?? (ingest.url && ingest.streamKey ? `${ingest.url}${ingest.streamKey}` : "");
+    if (!playback.hls || !playback.dash) {
+        throw new StreamApiError("STREAM_PROVISION_INCOMPLETE", `runtime returned no playback URLs for stream ${wire.streamId}`, "provision");
+    }
+    return {
+        liveInputId: wire.streamId,
+        rtmpUrl,
+        srtUrl: ingest.srtUrl,
+        hlsUrl: playback.hls,
+        dashUrl: playback.dash,
+        webrtcUrl: playback.webrtc,
+        webrtcPublishUrl: ingest.webrtcPublishUrl,
+    };
+}
+/** The provider's view of the ingest: is the device's push arriving? */
+export async function getManagedStreamStatus(liveInputId) {
+    try {
+        const s = await cloudClient.getManagedStreamStatus(liveInputId);
+        return {
+            isConnected: s.isConnected,
+            state: s.state,
+            connectedAt: s.connectedAt,
+            lastSeenAt: s.lastSeenAt,
+            reason: s.reason,
+        };
+    }
+    catch (err) {
+        throw new StreamApiError("STREAM_STATUS_FAILED", err instanceof Error ? err.message : String(err), "status");
+    }
+}
+/** Tear down the provider stream. */
+export async function teardownManagedStream(liveInputId) {
+    try {
+        await cloudClient.stopManagedStream(liveInputId);
+    }
+    catch (err) {
+        throw new StreamApiError("STREAM_TEARDOWN_FAILED", err instanceof Error ? err.message : String(err), "teardown");
+    }
+}
+//# sourceMappingURL=cloudStreamApi.js.map

package/build/services/cloudStreamApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudStreamApi.js","sourceRoot":"","sources":["../../src/services/cloudStreamApi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAC,kBAAkB,IAAI,WAAW,EAAC,MAAM,sBAAsB,CAAA;AAmCtE,MAAM,OAAO,cAAe,SAAQ,KAAK;IAGrB;IAEA;IAJT,SAAS,GAAG,YAAqB,CAAA;IAC1C,YACkB,IAAY,EAC5B,OAAe,EACC,KAAqB;QAErC,KAAK,CAAC,OAAO,CAAC,CAAA;QAJE,SAAI,GAAJ,IAAI,CAAQ;QAEZ,UAAK,GAAL,KAAK,CAAgB;QAGrC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;IAC9B,CAAC;CACF;AAmBD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,oBAAiD;IAEjD,IAAI,IAAuB,CAAA;IAC3B,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,kBAAkB,CAC1C,oBAAoB,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAC,oBAAoB,EAAC,CAAC,CAAC,CAAC,EAAE,CACtF,CAAsB,CAAA;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CACtB,yBAAyB,EACzB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,WAAW,CACZ,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAA;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAA;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAC5G,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,cAAc,CACtB,6BAA6B,EAC7B,gDAAgD,IAAI,CAAC,QAAQ,EAAE,EAC/D,WAAW,CACZ,CAAA;IACH,CAAC;IAED,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,QAAQ;QAC1B,OAAO;QACP,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,QAAQ,CAAC,GAAG;QACpB,OAAO,EAAE,QAAQ,CAAC,IAAI;QACtB,SAAS,EAAE,QAAQ,CAAC,MAAM;QAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,CAAA;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,WAAmB;IAC9D,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAA;QAC/D,OAAO;YACL,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CACtB,sBAAsB,EACtB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,QAAQ,CACT,CAAA;IACH,CAAC;AACH,CAAC;AAED,qCAAqC;AACrC,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,WAAmB;IAC7D,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CACtB,wBAAwB,EACxB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,UAAU,CACX,CAAA;IACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * Managed-stream provisioning over the cloud-v2 runtime (cloud-client REST):\n *\n *   POST   /api/camera/stream      -> provision (Cloudflare live input)\n *   GET    /api/camera/stream/:id  -> provider's ingest status\n *   DELETE /api/camera/stream/:id  -> teardown\n *\n * Drop-in replacement for the legacy `v2StreamApi` (which hit the v1 cloud's\n * /api/v2/client/streams/managed on backend_url): same exported shapes, so\n * PhoneStreamCoordinator is unchanged apart from the import. Local miniapps\n * use ONLY this path — no legacy V1 transport.\n *\n * Errors are tagged with stage \"provision\"/\"status\"/\"teardown\" and transport\n * \"cloud-rest\" so a miniapp sees exactly where and on which leg it broke.\n */\n\nimport {cloudClientService as cloudClient} from \"./CloudClientService\"\n\n/**\n * Restream destination. The full stream key is part of the URL — Cloudflare\n * appends nothing on the publish side. `name` is a human label that surfaces\n * in Cloudflare's dashboard but doesn't affect routing.\n */\nexport interface RestreamDestination {\n  url: string\n  name?: string\n}\n\n/** Caller-facing shape: either a bare URL string or the full object. */\nexport type RestreamDestinationInput = string | RestreamDestination\n\nexport interface ProvisionResult {\n  liveInputId: string\n  rtmpUrl: string\n  srtUrl?: string\n  hlsUrl: string\n  dashUrl: string\n  webrtcUrl?: string\n  webrtcPublishUrl?: string\n}\n\nexport interface CloudflareStatus {\n  isConnected: boolean\n  state?: string | null\n  connectedAt?: string\n  lastSeenAt?: string\n  reason?: string\n}\n\nexport type StreamApiStage = \"provision\" | \"status\" | \"teardown\"\n\nexport class StreamApiError extends Error {\n  readonly transport = \"cloud-rest\" as const\n  constructor(\n    public readonly code: string,\n    message: string,\n    public readonly stage: StreamApiStage,\n  ) {\n    super(message)\n    this.name = \"StreamApiError\"\n  }\n}\n\n/** The cloud-v2 runtime's ManagedStream wire shape (open records, see protocol). */\ninterface ManagedStreamWire {\n  streamId: string\n  ingest: {\n    url?: string\n    streamKey?: string\n    rtmpUrl?: string\n    srtUrl?: string\n    webrtcPublishUrl?: string\n  }\n  playback: {\n    hls?: string\n    dash?: string\n    webrtc?: string\n  }\n}\n\n/**\n * Provision a managed stream on the cloud-v2 runtime. Returns ready-to-publish\n * ingest URLs (credentials embedded) plus the playback URLs.\n */\nexport async function provisionManagedStream(\n  restreamDestinations?: RestreamDestinationInput[],\n): Promise<ProvisionResult> {\n  let wire: ManagedStreamWire\n  try {\n    wire = (await cloudClient.startManagedStream(\n      restreamDestinations && restreamDestinations.length > 0 ? {restreamDestinations} : {},\n    )) as ManagedStreamWire\n  } catch (err) {\n    throw new StreamApiError(\n      \"STREAM_PROVISION_FAILED\",\n      err instanceof Error ? err.message : String(err),\n      \"provision\",\n    )\n  }\n\n  const ingest = wire.ingest ?? {}\n  const playback = wire.playback ?? {}\n  const rtmpUrl = ingest.rtmpUrl ?? (ingest.url && ingest.streamKey ? `${ingest.url}${ingest.streamKey}` : \"\")\n  if (!playback.hls || !playback.dash) {\n    throw new StreamApiError(\n      \"STREAM_PROVISION_INCOMPLETE\",\n      `runtime returned no playback URLs for stream ${wire.streamId}`,\n      \"provision\",\n    )\n  }\n\n  return {\n    liveInputId: wire.streamId,\n    rtmpUrl,\n    srtUrl: ingest.srtUrl,\n    hlsUrl: playback.hls,\n    dashUrl: playback.dash,\n    webrtcUrl: playback.webrtc,\n    webrtcPublishUrl: ingest.webrtcPublishUrl,\n  }\n}\n\n/** The provider's view of the ingest: is the device's push arriving? */\nexport async function getManagedStreamStatus(liveInputId: string): Promise<CloudflareStatus> {\n  try {\n    const s = await cloudClient.getManagedStreamStatus(liveInputId)\n    return {\n      isConnected: s.isConnected,\n      state: s.state,\n      connectedAt: s.connectedAt,\n      lastSeenAt: s.lastSeenAt,\n      reason: s.reason,\n    }\n  } catch (err) {\n    throw new StreamApiError(\n      \"STREAM_STATUS_FAILED\",\n      err instanceof Error ? err.message : String(err),\n      \"status\",\n    )\n  }\n}\n\n/** Tear down the provider stream. */\nexport async function teardownManagedStream(liveInputId: string): Promise<void> {\n  try {\n    await cloudClient.stopManagedStream(liveInputId)\n  } catch (err) {\n    throw new StreamApiError(\n      \"STREAM_TEARDOWN_FAILED\",\n      err instanceof Error ? err.message : String(err),\n      \"teardown\",\n    )\n  }\n}\n"]}

package/build/services/gallerySyncClock.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Clock skew detection for gallery sync (phone vs glasses).
+ * Phone pushes time to glasses only when skew is detected during sync.
+ */
+export declare const CLOCK_SKEW_TOLERANCE_MS = 60000;
+export type ClockSkewReason = "watermark_ahead_of_glasses" | "wall_clock_drift" | "";
+export interface ClockSkewResult {
+    skewed: boolean;
+    reason: ClockSkewReason;
+}
+export declare function detectClockSkew(phoneNow: number, glassesServerTime: number, lastSyncTime: number, toleranceMs?: number): ClockSkewResult;
+export declare function isSyncManifestEmpty(syncData: {
+    api_version?: number;
+    captures?: unknown[];
+    changed_files?: unknown[];
+}): boolean;
+//# sourceMappingURL=gallerySyncClock.d.ts.map

package/build/services/gallerySyncClock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gallerySyncClock.d.ts","sourceRoot":"","sources":["../../src/services/gallerySyncClock.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,uBAAuB,QAAS,CAAA;AAE7C,MAAM,MAAM,eAAe,GAAG,4BAA4B,GAAG,kBAAkB,GAAG,EAAE,CAAA;AAEpF,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,eAAe,CAAA;CACxB;AAED,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EACzB,YAAY,EAAE,MAAM,EACpB,WAAW,GAAE,MAAgC,GAC5C,eAAe,CAQjB;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAA;IACpB,aAAa,CAAC,EAAE,OAAO,EAAE,CAAA;CAC1B,GAAG,OAAO,CAKV"}

package/build/services/gallerySyncClock.js

@@ -0,0 +1,21 @@
+/**
+ * Clock skew detection for gallery sync (phone vs glasses).
+ * Phone pushes time to glasses only when skew is detected during sync.
+ */
+export const CLOCK_SKEW_TOLERANCE_MS = 60_000;
+export function detectClockSkew(phoneNow, glassesServerTime, lastSyncTime, toleranceMs = CLOCK_SKEW_TOLERANCE_MS) {
+    if (lastSyncTime > glassesServerTime + toleranceMs) {
+        return { skewed: true, reason: "watermark_ahead_of_glasses" };
+    }
+    if (Math.abs(phoneNow - glassesServerTime) > toleranceMs) {
+        return { skewed: true, reason: "wall_clock_drift" };
+    }
+    return { skewed: false, reason: "" };
+}
+export function isSyncManifestEmpty(syncData) {
+    if ((syncData.api_version || 0) >= 2 && syncData.captures && syncData.captures.length > 0) {
+        return false;
+    }
+    return !syncData.changed_files || syncData.changed_files.length === 0;
+}
+//# sourceMappingURL=gallerySyncClock.js.map

package/build/services/gallerySyncClock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gallerySyncClock.js","sourceRoot":"","sources":["../../src/services/gallerySyncClock.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAA;AAS7C,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,iBAAyB,EACzB,YAAoB,EACpB,cAAsB,uBAAuB;IAE7C,IAAI,YAAY,GAAG,iBAAiB,GAAG,WAAW,EAAE,CAAC;QACnD,OAAO,EAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAC,CAAA;IAC7D,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,iBAAiB,CAAC,GAAG,WAAW,EAAE,CAAC;QACzD,OAAO,EAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAC,CAAA;IACnD,CAAC;IACD,OAAO,EAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAC,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAInC;IACC,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1F,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,CAAC,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,CAAA;AACvE,CAAC","sourcesContent":["/**\n * Clock skew detection for gallery sync (phone vs glasses).\n * Phone pushes time to glasses only when skew is detected during sync.\n */\n\nexport const CLOCK_SKEW_TOLERANCE_MS = 60_000\n\nexport type ClockSkewReason = \"watermark_ahead_of_glasses\" | \"wall_clock_drift\" | \"\"\n\nexport interface ClockSkewResult {\n  skewed: boolean\n  reason: ClockSkewReason\n}\n\nexport function detectClockSkew(\n  phoneNow: number,\n  glassesServerTime: number,\n  lastSyncTime: number,\n  toleranceMs: number = CLOCK_SKEW_TOLERANCE_MS,\n): ClockSkewResult {\n  if (lastSyncTime > glassesServerTime + toleranceMs) {\n    return {skewed: true, reason: \"watermark_ahead_of_glasses\"}\n  }\n  if (Math.abs(phoneNow - glassesServerTime) > toleranceMs) {\n    return {skewed: true, reason: \"wall_clock_drift\"}\n  }\n  return {skewed: false, reason: \"\"}\n}\n\nexport function isSyncManifestEmpty(syncData: {\n  api_version?: number\n  captures?: unknown[]\n  changed_files?: unknown[]\n}): boolean {\n  if ((syncData.api_version || 0) >= 2 && syncData.captures && syncData.captures.length > 0) {\n    return false\n  }\n  return !syncData.changed_files || syncData.changed_files.length === 0\n}\n"]}

package/build/services/glassesClockSync.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Push phone time to glasses only when clock skew is detected (gallery sync, OTA, etc.).
+ */
+export declare const CLOCK_SETTLE_MS = 500;
+/** @internal test-only */
+export declare function resetOtaClockFixCooldownForTests(): void;
+/**
+ * Set glasses system clock from phone when skew is detected.
+ */
+export declare function fixGlassesClockIfSkewed(glassesServerTime: number, lastSyncTime?: number): Promise<boolean>;
+/**
+ * After glasses report OTA failure due to clock skew, fix time and restart
+ * through the normal phone-driven ota_start path.
+ */
+export declare function handleOtaClockSkewFromGlasses(errorCode: string | undefined, glassesTimeMs?: number): Promise<boolean>;
+/**
+ * Proactive fix when version_info includes glasses system_time_ms before OTA manifest checks.
+ */
+export declare function maybeFixGlassesClockFromVersionInfo(systemTimeMs: number | undefined): Promise<boolean>;
+//# sourceMappingURL=glassesClockSync.d.ts.map

package/build/services/glassesClockSync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"glassesClockSync.d.ts","sourceRoot":"","sources":["../../src/services/glassesClockSync.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,eAAO,MAAM,eAAe,MAAM,CAAA;AASlC,0BAA0B;AAC1B,wBAAgB,gCAAgC,IAAI,IAAI,CAGvD;AAMD;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,iBAAiB,EAAE,MAAM,EAAE,YAAY,SAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAS3G;AAED;;;GAGG;AACH,wBAAsB,6BAA6B,CACjD,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,OAAO,CAAC,CA+ClB;AAED;;GAEG;AACH,wBAAsB,mCAAmC,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAW5G"}

package/build/services/glassesClockSync.js

@@ -0,0 +1,97 @@
+/**
+ * Push phone time to glasses only when clock skew is detected (gallery sync, OTA, etc.).
+ */
+import BluetoothSdk from "@mentra/bluetooth-sdk/internal";
+import { BgTimer } from "../utils/timers";
+import { useGlassesStore } from "../stores/glasses";
+import { getAsgOtaVersionUrl } from "./asgOtaVersionUrl";
+import { detectClockSkew } from "./gallerySyncClock";
+export const CLOCK_SETTLE_MS = 500;
+const OTA_CLOCK_FIX_COOLDOWN_MS = 30_000;
+let lastOtaClockFixAt = 0;
+// Coalesce concurrent OTA clock-fix attempts. Glasses can emit two clock_skew events
+// back-to-back during BLE handshake; without this guard both would await the BLE fix
+// + retry pair before either updated `lastOtaClockFixAt`.
+let inflightOtaClockFix = null;
+/** @internal test-only */
+export function resetOtaClockFixCooldownForTests() {
+    lastOtaClockFixAt = 0;
+    inflightOtaClockFix = null;
+}
+function delay(ms) {
+    return new Promise((resolve) => BgTimer.setTimeout(resolve, ms));
+}
+/**
+ * Set glasses system clock from phone when skew is detected.
+ */
+export async function fixGlassesClockIfSkewed(glassesServerTime, lastSyncTime = 0) {
+    const { skewed, reason } = detectClockSkew(Date.now(), glassesServerTime, lastSyncTime);
+    if (!skewed) {
+        return false;
+    }
+    console.log(`[GlassesClockSync] ⏰ Clock skew detected (${reason}) — setting glasses time from phone`);
+    await BluetoothSdk.setSystemTime(Date.now());
+    await delay(CLOCK_SETTLE_MS);
+    return true;
+}
+/**
+ * After glasses report OTA failure due to clock skew, fix time and restart
+ * through the normal phone-driven ota_start path.
+ */
+export async function handleOtaClockSkewFromGlasses(errorCode, glassesTimeMs) {
+    if (Date.now() - lastOtaClockFixAt < OTA_CLOCK_FIX_COOLDOWN_MS) {
+        return false;
+    }
+    const hasGlassesTime = typeof glassesTimeMs === "number" && Number.isFinite(glassesTimeMs) && glassesTimeMs > 0;
+    if (errorCode === "ssl_error") {
+        if (!hasGlassesTime) {
+            return false;
+        }
+        const { skewed } = detectClockSkew(Date.now(), glassesTimeMs, 0);
+        if (!skewed) {
+            return false;
+        }
+        console.log("[GlassesClockSync] ⏰ OTA ssl_error with wall-clock drift — treating as clock skew");
+    }
+    else if (errorCode !== "clock_skew") {
+        return false;
+    }
+    // Coalesce concurrent attempts: if a fix is already in flight, await its result instead
+    // of racing it through the cooldown guard.
+    if (inflightOtaClockFix) {
+        return inflightOtaClockFix;
+    }
+    const glassesTime = hasGlassesTime ? glassesTimeMs : Date.now() - 86_400_000;
+    inflightOtaClockFix = (async () => {
+        try {
+            const fixed = await fixGlassesClockIfSkewed(glassesTime, 0);
+            if (!fixed) {
+                return false;
+            }
+            lastOtaClockFixAt = Date.now();
+            const { buildNumber, otaVersionUrl } = useGlassesStore.getState();
+            const manifestUrl = getAsgOtaVersionUrl(otaVersionUrl, buildNumber);
+            console.log("[GlassesClockSync] ⏰ Restarting OTA with ota_start after clock fix");
+            await BluetoothSdk.startOtaUpdate(manifestUrl);
+            return true;
+        }
+        finally {
+            inflightOtaClockFix = null;
+        }
+    })();
+    return inflightOtaClockFix;
+}
+/**
+ * Proactive fix when version_info includes glasses system_time_ms before OTA manifest checks.
+ */
+export async function maybeFixGlassesClockFromVersionInfo(systemTimeMs) {
+    if (typeof systemTimeMs !== "number" || systemTimeMs <= 0) {
+        return false;
+    }
+    const fixed = await fixGlassesClockIfSkewed(systemTimeMs, 0);
+    if (!fixed) {
+        return false;
+    }
+    return true;
+}
+//# sourceMappingURL=glassesClockSync.js.map

package/build/services/glassesClockSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"glassesClockSync.js","sourceRoot":"","sources":["../../src/services/glassesClockSync.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,YAAY,MAAM,gCAAgC,CAAA;AACzD,OAAO,EAAC,OAAO,EAAC,MAAM,iBAAiB,CAAA;AACvC,OAAO,EAAC,eAAe,EAAC,MAAM,mBAAmB,CAAA;AAEjD,OAAO,EAAC,mBAAmB,EAAC,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAC,eAAe,EAAC,MAAM,oBAAoB,CAAA;AAElD,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAA;AAElC,MAAM,yBAAyB,GAAG,MAAM,CAAA;AACxC,IAAI,iBAAiB,GAAG,CAAC,CAAA;AACzB,qFAAqF;AACrF,qFAAqF;AACrF,0DAA0D;AAC1D,IAAI,mBAAmB,GAA4B,IAAI,CAAA;AAEvD,0BAA0B;AAC1B,MAAM,UAAU,gCAAgC;IAC9C,iBAAiB,GAAG,CAAC,CAAA;IACrB,mBAAmB,GAAG,IAAI,CAAA;AAC5B,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AAClE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,iBAAyB,EAAE,YAAY,GAAG,CAAC;IACvF,MAAM,EAAC,MAAM,EAAE,MAAM,EAAC,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAA;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,6CAA6C,MAAM,qCAAqC,CAAC,CAAA;IACrG,MAAM,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC5C,MAAM,KAAK,CAAC,eAAe,CAAC,CAAA;IAC5B,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,SAA6B,EAC7B,aAAsB;IAEtB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,GAAG,yBAAyB,EAAE,CAAC;QAC/D,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,CAAA;IAE/G,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,EAAC,MAAM,EAAC,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,CAAA;QAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,mFAAmF,CAAC,CAAA;IAClG,CAAC;SAAM,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QACtC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,wFAAwF;IACxF,2CAA2C;IAC3C,IAAI,mBAAmB,EAAE,CAAC;QACxB,OAAO,mBAAmB,CAAA;IAC5B,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAA;IAE5E,mBAAmB,GAAG,CAAC,KAAK,IAAI,EAAE;QAChC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;YAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,KAAK,CAAA;YACd,CAAC;YAED,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAC9B,MAAM,EAAC,WAAW,EAAE,aAAa,EAAC,GAAG,eAAe,CAAC,QAAQ,EAAE,CAAA;YAC/D,MAAM,WAAW,GAAG,mBAAmB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;YACnE,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAA;YACjF,MAAM,YAAY,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;YAC9C,OAAO,IAAI,CAAA;QACb,CAAC;gBAAS,CAAC;YACT,mBAAmB,GAAG,IAAI,CAAA;QAC5B,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IAEJ,OAAO,mBAAmB,CAAA;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,YAAgC;IACxF,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,YAAY,EAAE,CAAC,CAAC,CAAA;IAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC","sourcesContent":["/**\n * Push phone time to glasses only when clock skew is detected (gallery sync, OTA, etc.).\n */\n\nimport BluetoothSdk from \"@mentra/bluetooth-sdk/internal\"\nimport {BgTimer} from \"../utils/timers\"\nimport {useGlassesStore} from \"../stores/glasses\"\n\nimport {getAsgOtaVersionUrl} from \"./asgOtaVersionUrl\"\nimport {detectClockSkew} from \"./gallerySyncClock\"\n\nexport const CLOCK_SETTLE_MS = 500\n\nconst OTA_CLOCK_FIX_COOLDOWN_MS = 30_000\nlet lastOtaClockFixAt = 0\n// Coalesce concurrent OTA clock-fix attempts. Glasses can emit two clock_skew events\n// back-to-back during BLE handshake; without this guard both would await the BLE fix\n// + retry pair before either updated `lastOtaClockFixAt`.\nlet inflightOtaClockFix: Promise<boolean> | null = null\n\n/** @internal test-only */\nexport function resetOtaClockFixCooldownForTests(): void {\n  lastOtaClockFixAt = 0\n  inflightOtaClockFix = null\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => BgTimer.setTimeout(resolve, ms))\n}\n\n/**\n * Set glasses system clock from phone when skew is detected.\n */\nexport async function fixGlassesClockIfSkewed(glassesServerTime: number, lastSyncTime = 0): Promise<boolean> {\n  const {skewed, reason} = detectClockSkew(Date.now(), glassesServerTime, lastSyncTime)\n  if (!skewed) {\n    return false\n  }\n  console.log(`[GlassesClockSync] ⏰ Clock skew detected (${reason}) — setting glasses time from phone`)\n  await BluetoothSdk.setSystemTime(Date.now())\n  await delay(CLOCK_SETTLE_MS)\n  return true\n}\n\n/**\n * After glasses report OTA failure due to clock skew, fix time and restart\n * through the normal phone-driven ota_start path.\n */\nexport async function handleOtaClockSkewFromGlasses(\n  errorCode: string | undefined,\n  glassesTimeMs?: number,\n): Promise<boolean> {\n  if (Date.now() - lastOtaClockFixAt < OTA_CLOCK_FIX_COOLDOWN_MS) {\n    return false\n  }\n\n  const hasGlassesTime = typeof glassesTimeMs === \"number\" && Number.isFinite(glassesTimeMs) && glassesTimeMs > 0\n\n  if (errorCode === \"ssl_error\") {\n    if (!hasGlassesTime) {\n      return false\n    }\n    const {skewed} = detectClockSkew(Date.now(), glassesTimeMs, 0)\n    if (!skewed) {\n      return false\n    }\n    console.log(\"[GlassesClockSync] ⏰ OTA ssl_error with wall-clock drift — treating as clock skew\")\n  } else if (errorCode !== \"clock_skew\") {\n    return false\n  }\n\n  // Coalesce concurrent attempts: if a fix is already in flight, await its result instead\n  // of racing it through the cooldown guard.\n  if (inflightOtaClockFix) {\n    return inflightOtaClockFix\n  }\n\n  const glassesTime = hasGlassesTime ? glassesTimeMs : Date.now() - 86_400_000\n\n  inflightOtaClockFix = (async () => {\n    try {\n      const fixed = await fixGlassesClockIfSkewed(glassesTime, 0)\n      if (!fixed) {\n        return false\n      }\n\n      lastOtaClockFixAt = Date.now()\n      const {buildNumber, otaVersionUrl} = useGlassesStore.getState()\n      const manifestUrl = getAsgOtaVersionUrl(otaVersionUrl, buildNumber)\n      console.log(\"[GlassesClockSync] ⏰ Restarting OTA with ota_start after clock fix\")\n      await BluetoothSdk.startOtaUpdate(manifestUrl)\n      return true\n    } finally {\n      inflightOtaClockFix = null\n    }\n  })()\n\n  return inflightOtaClockFix\n}\n\n/**\n * Proactive fix when version_info includes glasses system_time_ms before OTA manifest checks.\n */\nexport async function maybeFixGlassesClockFromVersionInfo(systemTimeMs: number | undefined): Promise<boolean> {\n  if (typeof systemTimeMs !== \"number\" || systemTimeMs <= 0) {\n    return false\n  }\n\n  const fixed = await fixGlassesClockIfSkewed(systemTimeMs, 0)\n  if (!fixed) {\n    return false\n  }\n\n  return true\n}\n"]}

package/build/services/manifestVersionGate.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Pure helper extracted from `AppRegistry.checkManifestVersions` so it
+ * can be unit-tested without dragging in the `expo-file-system`
+ * transitively-React-Native dependency tree.
+ *
+ * Returns `{ok: true}` when the manifest is compatible with the host,
+ * or `{ok: false, reason}` with a user-facing string. Manifests missing
+ * either field pass through (legacy single-bundle bundles).
+ *
+ * `sdkVersion` is the SDK ABI the bundle targets; `minHostVersion` is
+ * the host floor the miniapp requires. Both must satisfy semver-coerce.
+ * Strings that don't coerce are treated as "unspecified" — the
+ * CLI's validateManifest catches malformed inputs at install time so
+ * this helper stays permissive at the policy layer.
+ */
+export declare function checkManifestVersions(manifest: {
+    sdkVersion?: string;
+    minHostVersion?: string;
+} | null, options: {
+    hostVersion: string;
+    supportedSdkRange: string;
+}): {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+//# sourceMappingURL=manifestVersionGate.d.ts.map

package/build/services/manifestVersionGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifestVersionGate.d.ts","sourceRoot":"","sources":["../../src/services/manifestVersionGate.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAC,GAAG,IAAI,EAC/D,OAAO,EAAE;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAC,GACxD;IAAC,EAAE,EAAE,IAAI,CAAA;CAAC,GAAG;IAAC,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAsB1C"}

package/build/services/manifestVersionGate.js

@@ -0,0 +1,41 @@
+import semver from "semver";
+/**
+ * Pure helper extracted from `AppRegistry.checkManifestVersions` so it
+ * can be unit-tested without dragging in the `expo-file-system`
+ * transitively-React-Native dependency tree.
+ *
+ * Returns `{ok: true}` when the manifest is compatible with the host,
+ * or `{ok: false, reason}` with a user-facing string. Manifests missing
+ * either field pass through (legacy single-bundle bundles).
+ *
+ * `sdkVersion` is the SDK ABI the bundle targets; `minHostVersion` is
+ * the host floor the miniapp requires. Both must satisfy semver-coerce.
+ * Strings that don't coerce are treated as "unspecified" — the
+ * CLI's validateManifest catches malformed inputs at install time so
+ * this helper stays permissive at the policy layer.
+ */
+export function checkManifestVersions(manifest, options) {
+    if (!manifest)
+        return { ok: true };
+    if (manifest.minHostVersion) {
+        const cleanHost = semver.valid(semver.coerce(options.hostVersion) ?? options.hostVersion);
+        const cleanMin = semver.valid(semver.coerce(manifest.minHostVersion) ?? manifest.minHostVersion);
+        if (cleanHost && cleanMin && semver.lt(cleanHost, cleanMin)) {
+            return {
+                ok: false,
+                reason: `Requires MentraOS ${manifest.minHostVersion}+; this host is ${options.hostVersion}.`,
+            };
+        }
+    }
+    if (manifest.sdkVersion) {
+        const cleanSdk = semver.valid(semver.coerce(manifest.sdkVersion) ?? manifest.sdkVersion);
+        if (cleanSdk && !semver.satisfies(cleanSdk, options.supportedSdkRange)) {
+            return {
+                ok: false,
+                reason: `Built for SDK ${manifest.sdkVersion}; host supports ${options.supportedSdkRange}.`,
+            };
+        }
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=manifestVersionGate.js.map

package/build/services/manifestVersionGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifestVersionGate.js","sourceRoot":"","sources":["../../src/services/manifestVersionGate.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAE3B;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAA+D,EAC/D,OAAyD;IAEzD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAC,EAAE,EAAE,IAAI,EAAC,CAAA;IAChC,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,CAAA;QACzF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,cAAc,CAAC,CAAA;QAChG,IAAI,SAAS,IAAI,QAAQ,IAAI,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC5D,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,qBAAqB,QAAQ,CAAC,cAAc,mBAAmB,OAAO,CAAC,WAAW,GAAG;aAC9F,CAAA;QACH,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAA;QACxF,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACvE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,iBAAiB,QAAQ,CAAC,UAAU,mBAAmB,OAAO,CAAC,iBAAiB,GAAG;aAC5F,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAC,EAAE,EAAE,IAAI,EAAC,CAAA;AACnB,CAAC","sourcesContent":["import semver from \"semver\"\n\n/**\n * Pure helper extracted from `AppRegistry.checkManifestVersions` so it\n * can be unit-tested without dragging in the `expo-file-system`\n * transitively-React-Native dependency tree.\n *\n * Returns `{ok: true}` when the manifest is compatible with the host,\n * or `{ok: false, reason}` with a user-facing string. Manifests missing\n * either field pass through (legacy single-bundle bundles).\n *\n * `sdkVersion` is the SDK ABI the bundle targets; `minHostVersion` is\n * the host floor the miniapp requires. Both must satisfy semver-coerce.\n * Strings that don't coerce are treated as \"unspecified\" — the\n * CLI's validateManifest catches malformed inputs at install time so\n * this helper stays permissive at the policy layer.\n */\nexport function checkManifestVersions(\n  manifest: {sdkVersion?: string; minHostVersion?: string} | null,\n  options: {hostVersion: string; supportedSdkRange: string},\n): {ok: true} | {ok: false; reason: string} {\n  if (!manifest) return {ok: true}\n  if (manifest.minHostVersion) {\n    const cleanHost = semver.valid(semver.coerce(options.hostVersion) ?? options.hostVersion)\n    const cleanMin = semver.valid(semver.coerce(manifest.minHostVersion) ?? manifest.minHostVersion)\n    if (cleanHost && cleanMin && semver.lt(cleanHost, cleanMin)) {\n      return {\n        ok: false,\n        reason: `Requires MentraOS ${manifest.minHostVersion}+; this host is ${options.hostVersion}.`,\n      }\n    }\n  }\n  if (manifest.sdkVersion) {\n    const cleanSdk = semver.valid(semver.coerce(manifest.sdkVersion) ?? manifest.sdkVersion)\n    if (cleanSdk && !semver.satisfies(cleanSdk, options.supportedSdkRange)) {\n      return {\n        ok: false,\n        reason: `Built for SDK ${manifest.sdkVersion}; host supports ${options.supportedSdkRange}.`,\n      }\n    }\n  }\n  return {ok: true}\n}\n"]}