@mentra/engine 0.1.0-dev.0 → 3.1.0-beta.100

package/build/services/OtaArtifactDownloader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaArtifactDownloader.js","sourceRoot":"","sources":["../../src/services/OtaArtifactDownloader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,6BAA6B,CAAA;AA2CnD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEvB;IADlB,YACkB,IAAgF,EAChG,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHE,SAAI,GAAJ,IAAI,CAA4E;QAIhG,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAChC,CAAC;CACF;AAED,MAAM,WAAW,GAAG,uBAAuB,CAAA;AAE3C,MAAM,UAAU,qBAAqB;IACnC,OAAO,GAAG,IAAI,CAAC,qBAAqB,gBAAgB,CAAA;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAoC;IAChE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,uCAAuC,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,QAAqB,CAAA;IACzB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAA;IACnF,CAAC;IAED,MAAM,OAAO,GAA2B,EAAE,CAAA;IAE1C,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,CAAmD,CAAA;QAC1F,MAAM,GAAG,GAAG,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,mDAAmD,CAAC,CAAA;QACrG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK;YACX,GAAG;YACH,MAAM,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;SAClC,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAC3C,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC,QAAS,CAAC,CACd,CAAA;QACnD,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC5D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,+CAA+C,CAAC,CAAA;QACjG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK;YACX,GAAG;YACH,MAAM,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;SAClC,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAkD,CAAA;QACvE,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,kDAAkD,CAAC,CAAA;QACpG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK;YACX,GAAG;YACH,MAAM,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;SAClC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA4B,EAC5B,UAA4D,EAC5D,cAIkC;IAElC,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAA;IACzC,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAC,4BAA4B,EAAE,IAAI,EAAC,CAAC,CAAA;IAEjE,MAAM,QAAQ,GAA0B,EAAE,CAAA;IAC1C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;QAEzB,MAAM,UAAU,GAAG,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAA;QACjD,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;YACxE,IAAI,UAAU,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,EAAC,GAAG,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAC,CAAC,CAAA;gBAC/C,SAAQ;YACV,CAAC;YACD,MAAM,UAAU,CAAC,UAAU,CAAC,CAAA;QAC9B,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,SAAS,aAAa,KAAK,OAAO,CAAA;QACtD,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAA;QAC1B,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,CAAC,YAAoB,EAAE,aAAqB,EAAE,EAAE;gBACrE,UAAU,EAAE,CAAC;oBACX,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK;oBACL,UAAU,EAAE,IAAI,CAAC,MAAM;oBACvB,eAAe,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBACzF,YAAY;oBACZ,aAAa;iBACd,CAAC,CAAA;YACJ,CAAC,CAAA;YACD,MAAM,cAAc,GAAG,cAAc;gBACnC,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC;gBACvD,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC;oBACtB,OAAO,EAAE,KAAK,CAAC,GAAG;oBAClB,MAAM,EAAE,QAAQ;oBAChB,iBAAiB,EAAE,MAAM;oBACzB,WAAW,EAAE,MAAM;oBACnB,eAAe,EAAE,CAAC;oBAClB,QAAQ,EAAE,CAAC,GAAyC,EAAE,EAAE;wBACtD,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,aAAa,CAAC,CAAA;oBACrD,CAAC;iBACF,CAAC,CAAC,OAAO,CAAA;YACd,IAAI,cAAc,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBACtC,MAAM,IAAI,gBAAgB,CACxB,0BAA0B,EAC1B,eAAe,KAAK,CAAC,IAAI,8BAA8B,cAAc,CAAC,UAAU,EAAE,CACnF,CAAA;YACH,CAAC;YAED,MAAM,YAAY,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;YACxE,IAAI,YAAY,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,IAAI,gBAAgB,CACxB,wBAAwB,EACxB,GAAG,KAAK,CAAC,IAAI,qCAAqC,KAAK,CAAC,MAAM,SAAS,YAAY,EAAE,CACtF,CAAA;YACH,CAAC;YAED,MAAM,SAAS,GAAG,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAA;YAChD,MAAM,UAAU,CAAC,SAAS,CAAC,CAAA;YAC3B,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;YACxC,QAAQ,CAAC,IAAI,CAAC,EAAC,GAAG,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAC,CAAC,CAAA;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC1B,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,0BAA0B,EAC1B,eAAe,KAAK,CAAC,IAAI,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvG,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,YAAoB,EACpB,SAAgC,EAChC,OAAe;IAEf,IAAI,QAAqB,CAAA;IACzB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAA;IACnF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC5E,MAAM,QAAQ,GAAG,CAAC,QAA6B,EAAE,EAAE,CAAC,GAAG,OAAO,cAAc,QAAQ,CAAC,MAAM,EAAE,CAAA;IAE7F,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,GAAyC,CAAA;QACxD,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACzF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QAC/C,oBAAoB,CAAC,KAA2C,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;IACpF,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC1B,oBAAoB,CAAC,QAAQ,CAAC,YAAkD,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;IACpG,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;AACjC,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,cAAwB,EAAE;IAC/D,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAA;IACzC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACpC,OAAM;IACR,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IACjE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,SAAQ;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,SAAQ;QAC/C,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAA8B,EAC9B,KAAuC,EACvC,QAAmD;IAEnD,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAM;IACR,CAAC;IACD,KAAK,CAAC,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC9B,oFAAoF;IACpF,8BAA8B;IAC9B,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC1C,KAAK,CAAC,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACxC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,GAAG,CAAA;IACnB,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,MAAM,CAAC,WAAW,CAAA;IAC3B,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAA0C,EAAE,KAAa;IAC9E,MAAM,MAAM,GAAG,OAAO,KAAK,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACzF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,KAAK,wCAAwC,CAAC,CAAA;IAClG,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;IAC/E,CAAC;AACH,CAAC","sourcesContent":["import * as RNFS from \"@dr.pogodin/react-native-fs\"\nimport type {OtaCheckCurrentGlassesResult, VersionJson} from \"./OtaUpdateCheckService\"\n\n/**\n * Phone-side artifact staging for hotspot-served OTA (OS-1676).\n *\n * When the glasses have no WiFi, the phone downloads the OTA artifacts itself (over\n * whatever network it is on — the user's tap on \"update\" is the consent) and serves them\n * to the glasses via the LocalOtaServer over the glasses' hotspot. This module owns:\n *\n * - planning which artifacts the pending update actually needs (from the raw manifest the\n *   update check fetched, so the glasses re-parse byte-identical version data),\n * - downloading them with .part staging and sha256 verification, keyed on disk by hash so\n *   retries and the post-APK continuation reuse verified files,\n * - rewriting the manifest's URL fields to point at the phone server, and\n * - cleanup once the update completes or the manifest moves on.\n */\n\nexport type OtaArtifactKind = \"apk\" | \"mtk\" | \"bes\"\n\nexport interface OtaArtifactPlanEntry {\n  kind: OtaArtifactKind\n  /** URL this artifact is fetched from, exactly as it appears in the raw manifest. */\n  url: string\n  /** Required content hash from the manifest. */\n  sha256: string\n}\n\nexport interface PreparedOtaArtifact extends OtaArtifactPlanEntry {\n  filePath: string\n}\n\nexport interface OtaArtifactDownloadProgress {\n  kind: OtaArtifactKind\n  /** 0-based index of the artifact being downloaded. */\n  index: number\n  totalCount: number\n  /** Percent of the current artifact, 0-100 (0 when the server sent no length). */\n  artifactPercent: number\n  bytesWritten: number\n  contentLength: number\n}\n\nexport class OtaArtifactError extends Error {\n  constructor(\n    public readonly code: \"artifact_download_failed\" | \"artifact_verify_failed\" | \"manifest_invalid\",\n    message: string,\n  ) {\n    super(message)\n    this.name = \"OtaArtifactError\"\n  }\n}\n\nconst ASG_PACKAGE = \"com.mentra.asg_client\"\n\nexport function otaArtifactsDirectory(): string {\n  return `${RNFS.DocumentDirectoryPath}/ota_artifacts`\n}\n\n/**\n * Derive the artifact list the pending update needs from a completed check.\n * Works off the raw manifest body (not the normalized check fields) so the URLs and\n * hashes match exactly what the glasses will re-parse.\n */\nexport function planArtifacts(result: OtaCheckCurrentGlassesResult): OtaArtifactPlanEntry[] {\n  if (!result.manifestBody) {\n    throw new OtaArtifactError(\"manifest_invalid\", \"Check result carries no manifest body\")\n  }\n  let manifest: VersionJson\n  try {\n    manifest = JSON.parse(result.manifestBody)\n  } catch {\n    throw new OtaArtifactError(\"manifest_invalid\", \"Manifest body is not valid JSON\")\n  }\n\n  const entries: OtaArtifactPlanEntry[] = []\n\n  if (result.updates.includes(\"apk\")) {\n    const app = manifest.apps?.[ASG_PACKAGE] as unknown as Record<string, unknown> | undefined\n    const url = typeof app?.apkUrl === \"string\" ? app.apkUrl : null\n    if (!url) {\n      throw new OtaArtifactError(\"manifest_invalid\", \"Manifest has no apkUrl for the pending APK update\")\n    }\n    entries.push({\n      kind: \"apk\",\n      url,\n      sha256: requireSha256(app, \"APK\"),\n    })\n  }\n\n  if (result.updates.includes(\"mtk\") && result.mtkPatch) {\n    const raw = (manifest.mtk_patches ?? []).find(\n      (patch) => firmwareUrl(patch) === firmwareUrl(result.mtkPatch!),\n    ) as unknown as Record<string, unknown> | undefined\n    const url = firmwareUrl(raw) ?? firmwareUrl(result.mtkPatch)\n    if (!url) {\n      throw new OtaArtifactError(\"manifest_invalid\", \"Manifest has no URL for the pending MTK patch\")\n    }\n    entries.push({\n      kind: \"mtk\",\n      url,\n      sha256: requireSha256(raw, \"MTK\"),\n    })\n  }\n\n  if (result.updates.includes(\"bes\") && manifest.bes_firmware) {\n    const raw = manifest.bes_firmware as unknown as Record<string, unknown>\n    const url = firmwareUrl(raw)\n    if (!url) {\n      throw new OtaArtifactError(\"manifest_invalid\", \"Manifest has no URL for the pending BES firmware\")\n    }\n    entries.push({\n      kind: \"bes\",\n      url,\n      sha256: requireSha256(raw, \"BES\"),\n    })\n  }\n\n  return entries\n}\n\n/**\n * Download every planned artifact into the on-disk hash-keyed store, reusing files that\n * already verify. Sequential on purpose: progress is legible and the hotspot window that\n * follows is the slow part, not phone-side parallelism.\n */\nexport async function prepareArtifacts(\n  plan: OtaArtifactPlanEntry[],\n  onProgress?: (progress: OtaArtifactDownloadProgress) => void,\n  nativeDownload?: (\n    entry: OtaArtifactPlanEntry,\n    destination: string,\n    onProgress?: (bytesWritten: number, contentLength: number) => void,\n  ) => Promise<{statusCode: number}>,\n): Promise<PreparedOtaArtifact[]> {\n  const directory = otaArtifactsDirectory()\n  await RNFS.mkdir(directory, {NSURLIsExcludedFromBackupKey: true})\n\n  const prepared: PreparedOtaArtifact[] = []\n  for (let index = 0; index < plan.length; index++) {\n    const entry = plan[index]\n\n    const cachedPath = `${directory}/${entry.sha256}`\n    if (await RNFS.exists(cachedPath)) {\n      const cachedHash = (await RNFS.hash(cachedPath, \"sha256\")).toLowerCase()\n      if (cachedHash === entry.sha256) {\n        prepared.push({...entry, filePath: cachedPath})\n        continue\n      }\n      await safeUnlink(cachedPath)\n    }\n\n    const partPath = `${directory}/download-${index}.part`\n    await safeUnlink(partPath)\n    try {\n      const reportProgress = (bytesWritten: number, contentLength: number) => {\n        onProgress?.({\n          kind: entry.kind,\n          index,\n          totalCount: plan.length,\n          artifactPercent: contentLength > 0 ? Math.round((bytesWritten / contentLength) * 100) : 0,\n          bytesWritten,\n          contentLength,\n        })\n      }\n      const downloadResult = nativeDownload\n        ? await nativeDownload(entry, partPath, reportProgress)\n        : await RNFS.downloadFile({\n            fromUrl: entry.url,\n            toFile: partPath,\n            connectionTimeout: 30_000,\n            readTimeout: 30_000,\n            progressDivider: 5,\n            progress: (res: RNFS.DownloadProgressCallbackResultT) => {\n              reportProgress(res.bytesWritten, res.contentLength)\n            },\n          }).promise\n      if (downloadResult.statusCode !== 200) {\n        throw new OtaArtifactError(\n          \"artifact_download_failed\",\n          `Download of ${entry.kind} artifact failed with HTTP ${downloadResult.statusCode}`,\n        )\n      }\n\n      const actualSha256 = (await RNFS.hash(partPath, \"sha256\")).toLowerCase()\n      if (actualSha256 !== entry.sha256) {\n        throw new OtaArtifactError(\n          \"artifact_verify_failed\",\n          `${entry.kind} artifact hash mismatch: expected ${entry.sha256}, got ${actualSha256}`,\n        )\n      }\n\n      const finalPath = `${directory}/${entry.sha256}`\n      await safeUnlink(finalPath)\n      await RNFS.moveFile(partPath, finalPath)\n      prepared.push({...entry, filePath: finalPath})\n    } catch (error) {\n      await safeUnlink(partPath)\n      if (error instanceof OtaArtifactError) {\n        throw error\n      }\n      throw new OtaArtifactError(\n        \"artifact_download_failed\",\n        `Download of ${entry.kind} artifact failed: ${error instanceof Error ? error.message : String(error)}`,\n      )\n    }\n  }\n  return prepared\n}\n\n/**\n * Point the manifest's artifact URLs at the phone server, leaving every other field\n * semantically identical to what the update check saw. Entries we host get\n * `<baseUrl>/artifacts/<sha256>`; entries the update does not need keep their CDN URLs.\n * Only URL fields change: target versions, sizes, and manifest hashes remain untouched.\n */\nexport function rewriteManifestForLocalServer(\n  manifestBody: string,\n  artifacts: PreparedOtaArtifact[],\n  baseUrl: string,\n): string {\n  let manifest: VersionJson\n  try {\n    manifest = JSON.parse(manifestBody)\n  } catch {\n    throw new OtaArtifactError(\"manifest_invalid\", \"Manifest body is not valid JSON\")\n  }\n  const byUrl = new Map(artifacts.map((artifact) => [artifact.url, artifact]))\n  const localUrl = (artifact: PreparedOtaArtifact) => `${baseUrl}/artifacts/${artifact.sha256}`\n\n  for (const app of Object.values(manifest.apps ?? {})) {\n    const record = app as unknown as Record<string, unknown>\n    const artifact = typeof record.apkUrl === \"string\" ? byUrl.get(record.apkUrl) : undefined\n    if (artifact) {\n      record.apkUrl = localUrl(artifact)\n    }\n  }\n\n  for (const patch of manifest.mtk_patches ?? []) {\n    rewriteFirmwareEntry(patch as unknown as Record<string, unknown>, byUrl, localUrl)\n  }\n  if (manifest.bes_firmware) {\n    rewriteFirmwareEntry(manifest.bes_firmware as unknown as Record<string, unknown>, byUrl, localUrl)\n  }\n\n  return JSON.stringify(manifest)\n}\n\n/** Delete every stored artifact whose hash is not in `keepSha256s` (plus stray .part files). */\nexport async function cleanupArtifacts(keepSha256s: string[] = []): Promise<void> {\n  const directory = otaArtifactsDirectory()\n  if (!(await RNFS.exists(directory))) {\n    return\n  }\n  const keep = new Set(keepSha256s.map((sha) => sha.toLowerCase()))\n  const items = await RNFS.readDir(directory)\n  for (const item of items) {\n    if (!item.isFile()) continue\n    if (keep.has(item.name.toLowerCase())) continue\n    await safeUnlink(item.path)\n  }\n}\n\nfunction rewriteFirmwareEntry(\n  entry: Record<string, unknown>,\n  byUrl: Map<string, PreparedOtaArtifact>,\n  localUrl: (artifact: PreparedOtaArtifact) => string,\n): void {\n  const url = firmwareUrl(entry)\n  const artifact = url ? byUrl.get(url) : undefined\n  if (!artifact) {\n    return\n  }\n  entry.url = localUrl(artifact)\n  // Overwrite the legacy key too when present, so no glasses build can prefer a stale\n  // CDN URL over the local one.\n  if (typeof entry.firmwareUrl === \"string\") {\n    entry.firmwareUrl = localUrl(artifact)\n  }\n}\n\nfunction firmwareUrl(entry: unknown): string | null {\n  if (!entry || typeof entry !== \"object\") {\n    return null\n  }\n  const record = entry as Record<string, unknown>\n  if (typeof record.url === \"string\" && record.url.length > 0) {\n    return record.url\n  }\n  if (typeof record.firmwareUrl === \"string\" && record.firmwareUrl.length > 0) {\n    return record.firmwareUrl\n  }\n  return null\n}\n\nfunction requireSha256(entry: Record<string, unknown> | undefined, label: string): string {\n  const sha256 = typeof entry?.sha256 === \"string\" ? entry.sha256.trim().toLowerCase() : \"\"\n  if (!/^[a-f0-9]{64}$/.test(sha256)) {\n    throw new OtaArtifactError(\"manifest_invalid\", `${label} artifact has no valid manifest sha256`)\n  }\n  return sha256\n}\n\nasync function safeUnlink(path: string): Promise<void> {\n  try {\n    if (await RNFS.exists(path)) {\n      await RNFS.unlink(path)\n    }\n  } catch {\n    // Best-effort: a leftover file only wastes space and is cleaned up next run.\n  }\n}\n"]}

package/build/services/OtaAutoChain.d.ts

@@ -0,0 +1,41 @@
+import type { OtaCheckCurrentGlassesResult } from "./OtaUpdateCheckService";
+export declare const MAX_OTA_AUTO_CHAIN_PASSES = 8;
+export declare const OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS = 120000;
+export type OtaAutoChainReleaseRange = {
+    fromVersion: string | null;
+    toVersion: string | null;
+    /** Exact coordinated release identity for the OTA pin, absent for legacy manifests. */
+    releaseVersion?: string | null;
+};
+export type OtaAutoChainAdvanceResult = {
+    advance: true;
+    passCount: number;
+} | {
+    advance: false;
+    reason: "inactive" | "duplicate" | "max_passes" | "downgrade_not_approved";
+};
+/**
+ * Identify the exact update offer that produced one OTA pass. Including the
+ * observed versions and manifest body lets a changed manifest advance while a
+ * stale post-install version_info response is rejected as a duplicate.
+ */
+export declare function otaAutoChainFingerprint(result: OtaCheckCurrentGlassesResult): string;
+/** Start a chain after the user explicitly approves its first update pass. */
+export declare function beginOtaAutoChain(initialFingerprint: string, approvedDowngrade: boolean, releaseRange: OtaAutoChainReleaseRange): void;
+export declare function isOtaAutoChainActive(): boolean;
+export declare function otaAutoChainReleaseRange(): OtaAutoChainReleaseRange | null;
+/** End the current chain. Safe to call when no chain is active. */
+export declare function stopOtaAutoChain(): void;
+/**
+ * Start (or continue) the bounded wait for glasses that are rebooting between
+ * passes. Re-renders must not extend the original deadline indefinitely.
+ */
+export declare function otaAutoChainReconnectWaitRemaining(now?: number): number | null;
+/** A successful reconnect allows a future pass to establish a fresh wait. */
+export declare function clearOtaAutoChainReconnectWait(): void;
+/**
+ * Admit the next pass of an active chain. Repeated offers, unexpectedly
+ * destructive downgrades, and runaway chains fail closed and end automation.
+ */
+export declare function tryAdvanceOtaAutoChain(fingerprint: string, isDowngrade: boolean, targetVersion: string | null, releaseVersion?: string | null): OtaAutoChainAdvanceResult;
+//# sourceMappingURL=OtaAutoChain.d.ts.map

package/build/services/OtaAutoChain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaAutoChain.d.ts","sourceRoot":"","sources":["../../src/services/OtaAutoChain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAA;AAEzE,eAAO,MAAM,yBAAyB,IAAI,CAAA;AAC1C,eAAO,MAAM,mCAAmC,SAAU,CAAA;AAU1D,MAAM,MAAM,wBAAwB,GAAG;IACrC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAC,OAAO,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAC,GAClC;IAAC,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,wBAAwB,CAAA;CAAC,CAAA;AAIhG;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,4BAA4B,GAAG,MAAM,CAkBpF;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAC/B,kBAAkB,EAAE,MAAM,EAC1B,iBAAiB,EAAE,OAAO,EAC1B,YAAY,EAAE,wBAAwB,GACrC,IAAI,CAQN;AAED,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AAED,wBAAgB,wBAAwB,IAAI,wBAAwB,GAAG,IAAI,CAE1E;AAED,mEAAmE;AACnE,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAED;;;GAGG;AACH,wBAAgB,kCAAkC,CAAC,GAAG,SAAoB,GAAG,MAAM,GAAG,IAAI,CAKzF;AAED,6EAA6E;AAC7E,wBAAgB,8BAA8B,IAAI,IAAI,CAErD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,OAAO,EACpB,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,cAAc,GAAE,MAAM,GAAG,IAAW,GACnC,yBAAyB,CAyB3B"}

package/build/services/OtaAutoChain.js

@@ -0,0 +1,91 @@
+export const MAX_OTA_AUTO_CHAIN_PASSES = 8;
+export const OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS = 120_000;
+let session = null;
+/**
+ * Identify the exact update offer that produced one OTA pass. Including the
+ * observed versions and manifest body lets a changed manifest advance while a
+ * stale post-install version_info response is rejected as a duplicate.
+ */
+export function otaAutoChainFingerprint(result) {
+    return JSON.stringify({
+        manifestUrl: result.manifestUrl ?? "",
+        manifestBody: result.manifestBody ?? "",
+        buildNumber: result.buildNumber ?? "",
+        mtkFirmwareVersion: result.mtkFirmwareVersion ?? "",
+        besFirmwareVersion: result.besFirmwareVersion ?? "",
+        updates: result.updates,
+        targetBuildNumber: result.updateInfo?.versionCode ?? result.latestVersionInfo?.versionCode ?? 0,
+        targetBesVersion: result.besVersion ?? "",
+        mtkPatch: result.mtkPatch
+            ? {
+                startFirmware: result.mtkPatch.start_firmware,
+                endFirmware: result.mtkPatch.end_firmware,
+                url: result.mtkPatch.url,
+            }
+            : null,
+    });
+}
+/** Start a chain after the user explicitly approves its first update pass. */
+export function beginOtaAutoChain(initialFingerprint, approvedDowngrade, releaseRange) {
+    session = {
+        approvedDowngrade,
+        passCount: 1,
+        releaseRange: { ...releaseRange },
+        reconnectDeadline: null,
+        seenFingerprints: new Set([initialFingerprint]),
+    };
+}
+export function isOtaAutoChainActive() {
+    return session !== null;
+}
+export function otaAutoChainReleaseRange() {
+    return session ? { ...session.releaseRange } : null;
+}
+/** End the current chain. Safe to call when no chain is active. */
+export function stopOtaAutoChain() {
+    session = null;
+}
+/**
+ * Start (or continue) the bounded wait for glasses that are rebooting between
+ * passes. Re-renders must not extend the original deadline indefinitely.
+ */
+export function otaAutoChainReconnectWaitRemaining(now = performance.now()) {
+    if (!session)
+        return null;
+    session.reconnectDeadline ??= now + OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS;
+    return Math.max(0, session.reconnectDeadline - now);
+}
+/** A successful reconnect allows a future pass to establish a fresh wait. */
+export function clearOtaAutoChainReconnectWait() {
+    if (session)
+        session.reconnectDeadline = null;
+}
+/**
+ * Admit the next pass of an active chain. Repeated offers, unexpectedly
+ * destructive downgrades, and runaway chains fail closed and end automation.
+ */
+export function tryAdvanceOtaAutoChain(fingerprint, isDowngrade, targetVersion, releaseVersion = null) {
+    if (!session) {
+        return { advance: false, reason: "inactive" };
+    }
+    if (isDowngrade && !session.approvedDowngrade) {
+        stopOtaAutoChain();
+        return { advance: false, reason: "downgrade_not_approved" };
+    }
+    if (session.seenFingerprints.has(fingerprint)) {
+        stopOtaAutoChain();
+        return { advance: false, reason: "duplicate" };
+    }
+    if (session.passCount >= MAX_OTA_AUTO_CHAIN_PASSES) {
+        stopOtaAutoChain();
+        return { advance: false, reason: "max_passes" };
+    }
+    session.seenFingerprints.add(fingerprint);
+    session.passCount += 1;
+    if (targetVersion)
+        session.releaseRange.toVersion = targetVersion;
+    if (releaseVersion)
+        session.releaseRange.releaseVersion = releaseVersion;
+    return { advance: true, passCount: session.passCount };
+}
+//# sourceMappingURL=OtaAutoChain.js.map

package/build/services/OtaAutoChain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaAutoChain.js","sourceRoot":"","sources":["../../src/services/OtaAutoChain.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAA;AAC1C,MAAM,CAAC,MAAM,mCAAmC,GAAG,OAAO,CAAA;AAqB1D,IAAI,OAAO,GAA+B,IAAI,CAAA;AAE9C;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAoC;IAC1E,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;QACrC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;QACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;QACrC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,EAAE;QACnD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,EAAE;QACnD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,IAAI,MAAM,CAAC,iBAAiB,EAAE,WAAW,IAAI,CAAC;QAC/F,gBAAgB,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;QACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACvB,CAAC,CAAC;gBACE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;gBAC7C,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY;gBACzC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;aACzB;YACH,CAAC,CAAC,IAAI;KACT,CAAC,CAAA;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAC/B,kBAA0B,EAC1B,iBAA0B,EAC1B,YAAsC;IAEtC,OAAO,GAAG;QACR,iBAAiB;QACjB,SAAS,EAAE,CAAC;QACZ,YAAY,EAAE,EAAC,GAAG,YAAY,EAAC;QAC/B,iBAAiB,EAAE,IAAI;QACvB,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC;KAChD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,OAAO,KAAK,IAAI,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,OAAO,CAAC,CAAC,CAAC,EAAC,GAAG,OAAO,CAAC,YAAY,EAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACnD,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,gBAAgB;IAC9B,OAAO,GAAG,IAAI,CAAA;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kCAAkC,CAAC,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE;IACxE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAEzB,OAAO,CAAC,iBAAiB,KAAK,GAAG,GAAG,mCAAmC,CAAA;IACvE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAAA;AACrD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,8BAA8B;IAC5C,IAAI,OAAO;QAAE,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAA;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,WAAoB,EACpB,aAA4B,EAC5B,iBAAgC,IAAI;IAEpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAC,CAAA;IAC7C,CAAC;IAED,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9C,gBAAgB,EAAE,CAAA;QAClB,OAAO,EAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAC,CAAA;IAC3D,CAAC;IAED,IAAI,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,gBAAgB,EAAE,CAAA;QAClB,OAAO,EAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAC,CAAA;IAC9C,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,IAAI,yBAAyB,EAAE,CAAC;QACnD,gBAAgB,EAAE,CAAA;QAClB,OAAO,EAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAC,CAAA;IAC/C,CAAC;IAED,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACzC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAA;IACtB,IAAI,aAAa;QAAE,OAAO,CAAC,YAAY,CAAC,SAAS,GAAG,aAAa,CAAA;IACjE,IAAI,cAAc;QAAE,OAAO,CAAC,YAAY,CAAC,cAAc,GAAG,cAAc,CAAA;IACxE,OAAO,EAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAC,CAAA;AACtD,CAAC","sourcesContent":["import type {OtaCheckCurrentGlassesResult} from \"./OtaUpdateCheckService\"\n\nexport const MAX_OTA_AUTO_CHAIN_PASSES = 8\nexport const OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS = 120_000\n\ntype OtaAutoChainSession = {\n  approvedDowngrade: boolean\n  passCount: number\n  releaseRange: OtaAutoChainReleaseRange\n  reconnectDeadline: number | null\n  seenFingerprints: Set<string>\n}\n\nexport type OtaAutoChainReleaseRange = {\n  fromVersion: string | null\n  toVersion: string | null\n  /** Exact coordinated release identity for the OTA pin, absent for legacy manifests. */\n  releaseVersion?: string | null\n}\n\nexport type OtaAutoChainAdvanceResult =\n  | {advance: true; passCount: number}\n  | {advance: false; reason: \"inactive\" | \"duplicate\" | \"max_passes\" | \"downgrade_not_approved\"}\n\nlet session: OtaAutoChainSession | null = null\n\n/**\n * Identify the exact update offer that produced one OTA pass. Including the\n * observed versions and manifest body lets a changed manifest advance while a\n * stale post-install version_info response is rejected as a duplicate.\n */\nexport function otaAutoChainFingerprint(result: OtaCheckCurrentGlassesResult): string {\n  return JSON.stringify({\n    manifestUrl: result.manifestUrl ?? \"\",\n    manifestBody: result.manifestBody ?? \"\",\n    buildNumber: result.buildNumber ?? \"\",\n    mtkFirmwareVersion: result.mtkFirmwareVersion ?? \"\",\n    besFirmwareVersion: result.besFirmwareVersion ?? \"\",\n    updates: result.updates,\n    targetBuildNumber: result.updateInfo?.versionCode ?? result.latestVersionInfo?.versionCode ?? 0,\n    targetBesVersion: result.besVersion ?? \"\",\n    mtkPatch: result.mtkPatch\n      ? {\n          startFirmware: result.mtkPatch.start_firmware,\n          endFirmware: result.mtkPatch.end_firmware,\n          url: result.mtkPatch.url,\n        }\n      : null,\n  })\n}\n\n/** Start a chain after the user explicitly approves its first update pass. */\nexport function beginOtaAutoChain(\n  initialFingerprint: string,\n  approvedDowngrade: boolean,\n  releaseRange: OtaAutoChainReleaseRange,\n): void {\n  session = {\n    approvedDowngrade,\n    passCount: 1,\n    releaseRange: {...releaseRange},\n    reconnectDeadline: null,\n    seenFingerprints: new Set([initialFingerprint]),\n  }\n}\n\nexport function isOtaAutoChainActive(): boolean {\n  return session !== null\n}\n\nexport function otaAutoChainReleaseRange(): OtaAutoChainReleaseRange | null {\n  return session ? {...session.releaseRange} : null\n}\n\n/** End the current chain. Safe to call when no chain is active. */\nexport function stopOtaAutoChain(): void {\n  session = null\n}\n\n/**\n * Start (or continue) the bounded wait for glasses that are rebooting between\n * passes. Re-renders must not extend the original deadline indefinitely.\n */\nexport function otaAutoChainReconnectWaitRemaining(now = performance.now()): number | null {\n  if (!session) return null\n\n  session.reconnectDeadline ??= now + OTA_AUTO_CHAIN_RECONNECT_TIMEOUT_MS\n  return Math.max(0, session.reconnectDeadline - now)\n}\n\n/** A successful reconnect allows a future pass to establish a fresh wait. */\nexport function clearOtaAutoChainReconnectWait(): void {\n  if (session) session.reconnectDeadline = null\n}\n\n/**\n * Admit the next pass of an active chain. Repeated offers, unexpectedly\n * destructive downgrades, and runaway chains fail closed and end automation.\n */\nexport function tryAdvanceOtaAutoChain(\n  fingerprint: string,\n  isDowngrade: boolean,\n  targetVersion: string | null,\n  releaseVersion: string | null = null,\n): OtaAutoChainAdvanceResult {\n  if (!session) {\n    return {advance: false, reason: \"inactive\"}\n  }\n\n  if (isDowngrade && !session.approvedDowngrade) {\n    stopOtaAutoChain()\n    return {advance: false, reason: \"downgrade_not_approved\"}\n  }\n\n  if (session.seenFingerprints.has(fingerprint)) {\n    stopOtaAutoChain()\n    return {advance: false, reason: \"duplicate\"}\n  }\n\n  if (session.passCount >= MAX_OTA_AUTO_CHAIN_PASSES) {\n    stopOtaAutoChain()\n    return {advance: false, reason: \"max_passes\"}\n  }\n\n  session.seenFingerprints.add(fingerprint)\n  session.passCount += 1\n  if (targetVersion) session.releaseRange.toVersion = targetVersion\n  if (releaseVersion) session.releaseRange.releaseVersion = releaseVersion\n  return {advance: true, passCount: session.passCount}\n}\n"]}

package/build/services/OtaErrorMapping.d.ts

@@ -0,0 +1,18 @@
+import type { OtaProgress, OtaStatus } from "../facades/ota";
+export declare const BES_INSTALL_RESTART_MESSAGE = "Restart your glasses to safely exit firmware update mode before trying again";
+/**
+ * Offer Change WiFi whenever the OTA flow failed while the glasses were in the
+ * download step (any download failure — network, SSL, size cap, verify, etc.).
+ *
+ * Also covers phone-side watchdog failures that fire while the store still shows
+ * an active download phase (stall / global timeout mid-download).
+ */
+export declare function shouldShowChangeWifiForOtaDownloadFailure(otaStatus: OtaStatus | null | undefined, otaProgress: OtaProgress | null | undefined, localErrorMessage: string): boolean;
+export declare function getOtaErrorMessage(error?: string): string;
+/**
+ * Once a BES install has started, any failure conservatively requires a glasses restart. This
+ * avoids adding a BES-specific error code to the wire protocol and, more importantly, never offers
+ * an unsafe retry when a generic failure or silence may mean BES entered its raw OTA parser.
+ */
+export declare function shouldRequireGlassesRebootForBesFailure(otaStatus: OtaStatus | null | undefined, _otaProgress: OtaProgress | null | undefined, localErrorMessage: string): boolean;
+//# sourceMappingURL=OtaErrorMapping.d.ts.map

package/build/services/OtaErrorMapping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaErrorMapping.d.ts","sourceRoot":"","sources":["../../src/services/OtaErrorMapping.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,WAAW,EAAE,SAAS,EAAC,MAAM,gBAAgB,CAAA;AAE1D,eAAO,MAAM,2BAA2B,iFACwC,CAAA;AAehF;;;;;;GAMG;AACH,wBAAgB,yCAAyC,CACvD,SAAS,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,EACvC,WAAW,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,EAC3C,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAWT;AAED,wBAAgB,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAqBzD;AAED;;;;GAIG;AACH,wBAAgB,uCAAuC,CACrD,SAAS,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,EACvC,YAAY,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,EAC5C,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAKT"}

package/build/services/OtaErrorMapping.js

@@ -0,0 +1,63 @@
+export const BES_INSTALL_RESTART_MESSAGE = "Restart your glasses to safely exit firmware update mode before trying again";
+function isDownloadPhaseSnapshot(otaStatus, otaProgress) {
+    if (otaStatus?.phase === "download") {
+        return true;
+    }
+    if (otaProgress?.stage === "download") {
+        return true;
+    }
+    return false;
+}
+/**
+ * Offer Change WiFi whenever the OTA flow failed while the glasses were in the
+ * download step (any download failure — network, SSL, size cap, verify, etc.).
+ *
+ * Also covers phone-side watchdog failures that fire while the store still shows
+ * an active download phase (stall / global timeout mid-download).
+ */
+export function shouldShowChangeWifiForOtaDownloadFailure(otaStatus, otaProgress, localErrorMessage) {
+    if (otaStatus?.status === "failed" && otaStatus.phase === "download") {
+        return true;
+    }
+    if (otaProgress?.status === "FAILED" && otaProgress.stage === "download") {
+        return true;
+    }
+    if (localErrorMessage && isDownloadPhaseSnapshot(otaStatus, otaProgress)) {
+        return true;
+    }
+    return false;
+}
+export function getOtaErrorMessage(error) {
+    switch (error) {
+        case "no_internet":
+            return "Glasses WiFi has no internet connection";
+        case "clock_skew":
+            return "Glasses clock is wrong — syncing time from your phone, then retrying update check";
+        case "ssl_error":
+            return "Secure connection failed — try a different WiFi network";
+        case "download_failed":
+            return "Download failed — check glasses WiFi connection";
+        case "firmware_too_large":
+            return "Firmware file is unexpectedly large — please contact support";
+        case "firmware_verify_failed":
+            return "Firmware verification failed — please try again or contact support";
+        case "apk_verify_failed":
+            return "Update verification failed — please try again or contact support";
+        case "install_failed":
+            return "Install failed — please try again";
+        default:
+            return error || "Update failed";
+    }
+}
+/**
+ * Once a BES install has started, any failure conservatively requires a glasses restart. This
+ * avoids adding a BES-specific error code to the wire protocol and, more importantly, never offers
+ * an unsafe retry when a generic failure or silence may mean BES entered its raw OTA parser.
+ */
+export function shouldRequireGlassesRebootForBesFailure(otaStatus, _otaProgress, localErrorMessage) {
+    if (otaStatus?.stepType !== "bes" || otaStatus.phase !== "install") {
+        return false;
+    }
+    return otaStatus.status === "failed" || Boolean(localErrorMessage);
+}
+//# sourceMappingURL=OtaErrorMapping.js.map

package/build/services/OtaErrorMapping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtaErrorMapping.js","sourceRoot":"","sources":["../../src/services/OtaErrorMapping.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,2BAA2B,GACtC,8EAA8E,CAAA;AAEhF,SAAS,uBAAuB,CAC9B,SAAuC,EACvC,WAA2C;IAE3C,IAAI,SAAS,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,WAAW,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC;QACtC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yCAAyC,CACvD,SAAuC,EACvC,WAA2C,EAC3C,iBAAyB;IAEzB,IAAI,SAAS,EAAE,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACrE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,WAAW,EAAE,MAAM,KAAK,QAAQ,IAAI,WAAW,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACzE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,iBAAiB,IAAI,uBAAuB,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;QACzE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,aAAa;YAChB,OAAO,yCAAyC,CAAA;QAClD,KAAK,YAAY;YACf,OAAO,mFAAmF,CAAA;QAC5F,KAAK,WAAW;YACd,OAAO,yDAAyD,CAAA;QAClE,KAAK,iBAAiB;YACpB,OAAO,iDAAiD,CAAA;QAC1D,KAAK,oBAAoB;YACvB,OAAO,8DAA8D,CAAA;QACvE,KAAK,wBAAwB;YAC3B,OAAO,oEAAoE,CAAA;QAC7E,KAAK,mBAAmB;YACtB,OAAO,kEAAkE,CAAA;QAC3E,KAAK,gBAAgB;YACnB,OAAO,mCAAmC,CAAA;QAC5C;YACE,OAAO,KAAK,IAAI,eAAe,CAAA;IACnC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uCAAuC,CACrD,SAAuC,EACvC,YAA4C,EAC5C,iBAAyB;IAEzB,IAAI,SAAS,EAAE,QAAQ,KAAK,KAAK,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACnE,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAA;AACpE,CAAC","sourcesContent":["import type {OtaProgress, OtaStatus} from \"../facades/ota\"\n\nexport const BES_INSTALL_RESTART_MESSAGE =\n  \"Restart your glasses to safely exit firmware update mode before trying again\"\n\nfunction isDownloadPhaseSnapshot(\n  otaStatus: OtaStatus | null | undefined,\n  otaProgress: OtaProgress | null | undefined,\n): boolean {\n  if (otaStatus?.phase === \"download\") {\n    return true\n  }\n  if (otaProgress?.stage === \"download\") {\n    return true\n  }\n  return false\n}\n\n/**\n * Offer Change WiFi whenever the OTA flow failed while the glasses were in the\n * download step (any download failure — network, SSL, size cap, verify, etc.).\n *\n * Also covers phone-side watchdog failures that fire while the store still shows\n * an active download phase (stall / global timeout mid-download).\n */\nexport function shouldShowChangeWifiForOtaDownloadFailure(\n  otaStatus: OtaStatus | null | undefined,\n  otaProgress: OtaProgress | null | undefined,\n  localErrorMessage: string,\n): boolean {\n  if (otaStatus?.status === \"failed\" && otaStatus.phase === \"download\") {\n    return true\n  }\n  if (otaProgress?.status === \"FAILED\" && otaProgress.stage === \"download\") {\n    return true\n  }\n  if (localErrorMessage && isDownloadPhaseSnapshot(otaStatus, otaProgress)) {\n    return true\n  }\n  return false\n}\n\nexport function getOtaErrorMessage(error?: string): string {\n  switch (error) {\n    case \"no_internet\":\n      return \"Glasses WiFi has no internet connection\"\n    case \"clock_skew\":\n      return \"Glasses clock is wrong — syncing time from your phone, then retrying update check\"\n    case \"ssl_error\":\n      return \"Secure connection failed — try a different WiFi network\"\n    case \"download_failed\":\n      return \"Download failed — check glasses WiFi connection\"\n    case \"firmware_too_large\":\n      return \"Firmware file is unexpectedly large — please contact support\"\n    case \"firmware_verify_failed\":\n      return \"Firmware verification failed — please try again or contact support\"\n    case \"apk_verify_failed\":\n      return \"Update verification failed — please try again or contact support\"\n    case \"install_failed\":\n      return \"Install failed — please try again\"\n    default:\n      return error || \"Update failed\"\n  }\n}\n\n/**\n * Once a BES install has started, any failure conservatively requires a glasses restart. This\n * avoids adding a BES-specific error code to the wire protocol and, more importantly, never offers\n * an unsafe retry when a generic failure or silence may mean BES entered its raw OTA parser.\n */\nexport function shouldRequireGlassesRebootForBesFailure(\n  otaStatus: OtaStatus | null | undefined,\n  _otaProgress: OtaProgress | null | undefined,\n  localErrorMessage: string,\n): boolean {\n  if (otaStatus?.stepType !== \"bes\" || otaStatus.phase !== \"install\") {\n    return false\n  }\n  return otaStatus.status === \"failed\" || Boolean(localErrorMessage)\n}\n"]}

package/build/services/OtaInstallCoordinator.d.ts

@@ -1,4 +1,25 @@
-import type { OtaProgress, OtaStatus } from "@mentra/bluetooth-sdk/internal";
+/**
+ * OtaInstallCoordinator — engine-owned OTA install state machine (WP 8B).
+ *
+ * Owns every timer/retry/sequencing rule that used to live in the host screen
+ * `mobile/src/app/ota/progress.tsx`: the global session timeout, serialized
+ * ota_start retries, the stuck-at-zero watchdog, the progress-stall watchdog keyed
+ * on a staleness signature, connect-edge arbitration (initial mount vs
+ * reconnect vs post-APK reboot), the ota_query_status reply fallback, the ping
+ * keepalive, the ota_start_ack / mtk_update_complete listeners, and terminal
+ * cleanup. The host progress screen is a pure renderer over
+ * `snapshot()`/`onSnapshot()` plus the `attach()/detach()/retry()/finish()`
+ * commands (exposed as `engine.ota.installSession`).
+ *
+ * The reaction pass mirrors the old component's effect ordering: a
+ * pass diffs the store-derived inputs (connected / otaStatus / otaProgress /
+ * displayState / stall signature) exactly like the old effect dep arrays, and
+ * state written mid-pass queues a follow-up pass — the same way a setState
+ * during React effects scheduled a re-render after the current effect batch.
+ */
+import { type OtaProgress, type OtaStatus } from "@mentra/bluetooth-sdk";
+import { type HotspotOtaPhase } from "./HotspotOtaTransport";
+import type { OtaCheckCurrentGlassesResult } from "./OtaUpdateCheckService";
 import { type DisplayState } from "./otaDisplayState";
 /** Read model the host progress screen renders from. */
 export interface OtaInstallSnapshot {
@@ -14,9 +35,30 @@ export interface OtaInstallSnapshot {
      * +1% ticks up to 60% purely to reassure the user. Render max(real, simulated).
      */
     mtkInstallStallSimulatedPercent: number | null;
+    /** True for a downgrade (version-change) session — the UI narrates it differently. */
+    isVersionChange: boolean;
+    /** True once the glasses reported the exact pinned target (the downgrade truly completed). */
+    versionChangeConverged: boolean;
+    /**
+     * Sub-phase of the downgrade detour for the progress narrative, or null when not
+     * in one: "installing" before the handoff, "restarting" while the glasses are dark
+     * (uninstall / factory flicker / target install), "verifying" once reconnected and
+     * checking the version. Completion is the "complete" displayState.
+     */
+    versionChangePhase: "installing" | "restarting" | "verifying" | null;
+    /** Pre-ota_start phone staging/join state for a hotspot attempt. */
+    hotspotPhase: HotspotOtaPhase;
+    hotspotArtifactPercent: number | null;
+    /** Transport selected from the checked glasses capabilities and Wi-Fi state. */
+    transport: "wifi" | "hotspot";
 }
 declare class OtaInstallCoordinator {
     private attached;
+    private preparedCheckResult;
+    private selectedTransport;
+    private hotspotManifestUrl;
+    private hotspotPhase;
+    private hotspotArtifactPercent;
     private errorMsg;
     private sawReconnectEdge;
     private continueButtonDisabled;
@@ -25,6 +67,14 @@ declare class OtaInstallCoordinator {
     private initialBuildNumber;
     private apkExpectedInSession;
     private apkCompletedViaBuildIncrease;
+    private protocolProfile;
+    private besRestartExpected;
+    private besRestartDisconnectObserved;
+    private besRestartRecovery;
+    private versionChangeSession;
+    private versionChangeTarget;
+    private versionChangeInstallStarted;
+    private versionChangeConverged;
     private legacyApkSettleHold;
     private mtkSimulatedPercent;
     private lastRealMtkProgress;
@@ -33,14 +83,15 @@ declare class OtaInstallCoordinator {
     private retryTimeout;
     private stuckTimeout;
     private progressTimeout;
-    private postApkDelay;
     private pingInterval;
     private queryReplyTimeout;
     private continueLockoutTimer;
+    private restartRecoveryTimeout;
     private legacyApkSettleTimer;
     private mtkStallDetectTimer;
     private mtkSimTickTimer;
-    private hasReceivedAck;
+    private apkInstallPollInFlight;
+    private otaStartOwnership;
     private hasFirstActivity;
     private hasFirstNonZeroProgress;
     private retryCount;
@@ -55,6 +106,8 @@ declare class OtaInstallCoordinator {
     private reactQueued;
     private storeUnsubscribe;
     private snapshotCheckers;
+    /** Select the transport at the existing install entry point before the progress route attaches. */
+    prepare(checkResult: OtaCheckCurrentGlassesResult): "wifi" | "hotspot";
     /**
      * Bind the state machine to a mounted progress screen. Idempotent per
      * attach/detach cycle. Runs the initial-mount arbitration (send ota_start
@@ -75,15 +128,25 @@ declare class OtaInstallCoordinator {
      * stays in the screen): clear the selected update, and after an APK step
      * clear the stale build number so the next check re-reads version_info.
      */
-    finish(): void;
+    finish(): Promise<void>;
     /**
      * Abandon an interrupted session (the super-mode skip): terminal cleanup
      * plus dropping the session's status/progress read-state, so
      * deriveDisplayState doesn't resurrect the stale install when the host
      * navigates away and back through /ota routes.
      */
-    discard(): void;
+    discard(): Promise<void>;
     snapshot(): OtaInstallSnapshot;
+    /**
+     * True while the recovery worker owns the downgrade transaction (after the apk install
+     * started, before convergence). During this window ASG is being uninstalled/reinstalled and
+     * cannot answer the phone, so the coordinator must not ping, poll ota_query_status, or arm the
+     * progress-stall watchdog — doing so drives the passive factory build and fails the session
+     * before the target reconnects. Completion is exact-version convergence, detected separately.
+     */
+    private isInVersionChangeDetour;
+    /** Downgrade-detour sub-phase for the progress narrative (see OtaInstallSnapshot). */
+    private deriveVersionChangePhase;
     /**
      * Subscribe to install snapshot changes, deduped on the projected JSON.
      * Fires on glasses-store changes AND coordinator-internal state changes
@@ -91,6 +154,10 @@ declare class OtaInstallCoordinator {
      */
     onSnapshot(cb: (snapshot: OtaInstallSnapshot) => void): () => void;
     private resetSessionState;
+    /** Begin a genuinely new command attempt only after native ownership has settled. */
+    private prepareFreshOtaStartAttempt;
+    /** Reset only the reboot lifecycle that belongs to one install attempt. */
+    private resetBesRestartAttempt;
     /** Notify snapshot subscribers of a coordinator-internal state change. */
     private emitInternalChange;
     private setErrorMsg;
@@ -100,11 +167,7 @@ declare class OtaInstallCoordinator {
     private setLegacyApkSettleHold;
     /** Display-only (WP 8C-e): notifies snapshot subscribers but never queues a reaction pass. */
     private setMtkSimulatedPercent;
-    /**
-     * Legacy-session shape (WP 8C): event shape wins once events exist; before any event
-     * only the session-start build number can tell (falls back to the live build number
-     * until it is captured). Old builds get the LEGACY_* padded policy durations.
-     */
+    /** Legacy/unified policy is selected once, matching the old sticky route choice. */
     private isLegacySessionShapeNow;
     private react;
     /**
@@ -112,8 +175,22 @@ declare class OtaInstallCoordinator {
      * component, in the old declaration order.
      */
     private runPass;
+    /**
+     * Reconnect arbitration shared by the physical BLE connect edge and the
+     * glasses_session_changed signal. The latter exists because the BES keeps the BLE
+     * link alive across asg_client restarts (APK OTA): no physical edge ever fires, so
+     * the changed process session id is the only reconnect signal the coordinator gets
+     * (incident rep_01KY6BJ0B7A4RBMQ7VN39KAE5E). Always returns true (the caller's
+     * edge handling is complete).
+     */
+    private runReconnectArbitration;
     private runConnectEdge;
     private readonly handleAck;
+    /**
+     * The asg process restarted while the BES kept the BLE link up (sid change observed
+     * by the bridge): treat it exactly like a physical reconnect edge.
+     */
+    private readonly handleGlassesSessionChanged;
     private readonly handleMtkComplete;
     /**
      * Reacts to a NEW legacy-shaped install-phase "complete" (an old build's
@@ -126,6 +203,9 @@ declare class OtaInstallCoordinator {
      *   starting/failed (post-reboot explicit signal) completion is immediate.
      */
     private handleLegacyInstallCompleteEdge;
+    private isBesRestartExpected;
+    /** Complete only after a protocol-authorized BES restart traverses disconnect -> reconnect. */
+    private completeBesRestartRecovery;
     /**
      * Legacy MTK install stall simulation (WP 8C-e), ported verbatim: the MTK system
      * install typically stalls around 49-50%. Every real event restarts stall detection;
@@ -141,7 +221,25 @@ declare class OtaInstallCoordinator {
      */
     private computeDisplayStateNow;
     /**
-     * "Glasses are talking to us" — clears the no-ack retry watchdog only.
+     * During an APK install the package installer kills and restarts the glasses
+     * process, and the new process's completion push can lose its startup race
+     * against the UART transport (incident rep_01KY31HEMTSBSMK8DVMNXJ5XGG: the
+     * phone sat on a stale "install in_progress 0%" until the stall watchdog
+     * failed a successful update). The persisted session on the glasses always
+     * knows the truth, so poll ota_query_status on the keepalive tick while an
+     * apk step sits in its install phase — the reply either confirms progress or
+     * delivers the missed completion. Gated to the apk install phase so a stray
+     * idle reply can't disturb an active download; legacy (< 37) builds ignore
+     * the query, which is harmless.
+     *
+     * The native query pends up to 15s and rejects a concurrent call with
+     * request_in_flight — longer than the 10s tick — so exactly one poll is kept
+     * in flight (the glasses being slow to answer IS the silent-restart window
+     * this poll exists for) and rejections are swallowed: the next tick retries.
+     */
+    private maybePollApkInstallStatus;
+    /**
+     * "Glasses are talking to us" — suppresses retry if the native request later rejects.
      * Important: this does NOT clear the stuck-at-zero watchdog; that one fires
      * on real progress > 0% (see {@link onFirstNonZeroProgress}).
      */
@@ -155,14 +253,19 @@ declare class OtaInstallCoordinator {
      */
     private onFirstNonZeroProgress;
     private maybeStartGlobalTimeout;
-    private armAckAndStuckWatchdogsOnly;
+    private armStuckWatchdogOnly;
+    /** Arm the 0%-stuck watchdog only when this logical session has none. */
+    private maybeArmStuckWatchdog;
     private sendOtaStartWithWatchdogs;
+    private performOtaStart;
+    private teardownHotspotTransport;
     /**
      * After sending ota_query_status, wait QUERY_REPLY_TIMEOUT_MS for the glasses
-     * to reply with a useful ota_status. If nothing arrives (e.g. the glasses'
-     * OTA session was wiped between mount and reconnect), or the glasses reply
-     * with an explicit "idle" status (no session), fall back to ota_start so the
-     * user doesn't sit on a spinner forever.
+     * to reply with a useful ota_status. A unified session may start again only
+     * after an explicit "idle" reply, or after a locally rejected ota_start has
+     * produced no activity and no authoritative reply across reconnect. Legacy
+     * builds ignore ota_query_status, so their established timeout fallback
+     * remains the compatibility path.
      *
      * Cleared as soon as a non-idle otaStatus or any otaProgress lands in the
      * store (see the reaction block above). An idle reply intentionally does NOT
@@ -173,10 +276,10 @@ declare class OtaInstallCoordinator {
     private clearRetryTimeout;
     private clearStuckTimeout;
     private clearGlobalTimeout;
-    private clearPostApkDelay;
     private clearPingInterval;
     private clearQueryReplyTimeout;
     private clearContinueLockoutTimer;
+    private clearRestartRecoveryTimeout;
     private clearLegacyApkSettleTimer;
     private clearMtkSimulationTimers;
     /**

package/build/services/OtaInstallCoordinator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OtaInstallCoordinator.d.ts","sourceRoot":"","sources":["../../src/services/OtaInstallCoordinator.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAC,WAAW,EAAE,SAAS,EAAC,MAAM,gCAAgC,CAAA;AAI1E,OAAO,EAAqB,KAAK,YAAY,EAAC,MAAM,mBAAmB,CAAA;AA+FvE,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,YAAY,CAAA;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,sBAAsB,EAAE,OAAO,CAAA;IAC/B,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,SAAS,GAAG,IAAI,CAAA;IAC3B,WAAW,EAAE,WAAW,GAAG,IAAI,CAAA;IAC/B;;;;OAIG;IACH,+BAA+B,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/C;AAED,cAAM,qBAAqB;IACzB,OAAO,CAAC,QAAQ,CAAQ;IAGxB,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,gBAAgB,CAAQ;IAChC,OAAO,CAAC,sBAAsB,CAAQ;IAItC,OAAO,CAAC,WAAW,CAAQ;IAC3B,OAAO,CAAC,aAAa,CAAQ;IAK7B,OAAO,CAAC,kBAAkB,CAAsB;IAEhD,OAAO,CAAC,oBAAoB,CAAQ;IAEpC,OAAO,CAAC,4BAA4B,CAAQ;IAE5C,OAAO,CAAC,mBAAmB,CAAQ;IAEnC,OAAO,CAAC,mBAAmB,CAAsB;IACjD,OAAO,CAAC,mBAAmB,CAAI;IAG/B,OAAO,CAAC,aAAa,CAA6C;IAClE,OAAO,CAAC,oBAAoB,CAAQ;IACpC,OAAO,CAAC,YAAY,CAA6C;IACjE,OAAO,CAAC,YAAY,CAA6C;IACjE,OAAO,CAAC,eAAe,CAA6C;IACpE,OAAO,CAAC,YAAY,CAA6C;IACjE,OAAO,CAAC,YAAY,CAA8C;IAClE,OAAO,CAAC,iBAAiB,CAA6C;IACtE,OAAO,CAAC,oBAAoB,CAA6C;IACzE,OAAO,CAAC,oBAAoB,CAA6C;IACzE,OAAO,CAAC,mBAAmB,CAA6C;IACxE,OAAO,CAAC,eAAe,CAA8C;IAGrE,OAAO,CAAC,cAAc,CAAQ;IAC9B,OAAO,CAAC,gBAAgB,CAAQ;IAGhC,OAAO,CAAC,uBAAuB,CAAQ;IACvC,OAAO,CAAC,UAAU,CAAI;IAGtB,OAAO,CAAC,gBAAgB,CAA4B;IAGpD,OAAO,CAAC,aAAa,CAAQ;IAC7B,OAAO,CAAC,aAAa,CAAyB;IAC9C,OAAO,CAAC,eAAe,CAA2B;IAClD,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,YAAY,CAAK;IAIzB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,WAAW,CAAQ;IAE3B,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,gBAAgB,CAAwB;IAIhD;;;;;OAKG;IACH,MAAM,IAAI,IAAI;IAoBd;;;;OAIG;IACH,MAAM,IAAI,IAAI;IAcd,+EAA+E;IAC/E,KAAK,IAAI,IAAI;IA+Bb;;;;OAIG;IACH,MAAM,IAAI,IAAI;IAQd;;;;;OAKG;IACH,OAAO,IAAI,IAAI;IAOf,QAAQ,IAAI,kBAAkB;IAyB9B;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,IAAI,GAAG,MAAM,IAAI;IAmBlE,OAAO,CAAC,iBAAiB;IA2BzB,0EAA0E;IAC1E,OAAO,CAAC,kBAAkB;IAM1B,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,+BAA+B;IAOvC,OAAO,CAAC,sBAAsB;IAO9B,8FAA8F;IAC9F,OAAO,CAAC,sBAAsB;IAM9B;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,KAAK;IAiBb;;;OAGG;IACH,OAAO,CAAC,OAAO;IA2Pf,OAAO,CAAC,cAAc;IAgFtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAKzB;IAED,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAOjC;IAID;;;;;;;;;OASG;IACH,OAAO,CAAC,+BAA+B;IAgCvC;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;IAqDjC;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAa9B;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAMvB;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,uBAAuB;IAsB/B,OAAO,CAAC,2BAA2B;YA8CrB,yBAAyB;IA6BvC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,qBAAqB;IAgC7B,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,sBAAsB;IAO9B,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,wBAAwB;IAWhC;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,iBAAiB;CAO1B;AAED,oGAAoG;AACpG,eAAO,MAAM,qBAAqB,uBAA8B,CAAA"}
+{"version":3,"file":"OtaInstallCoordinator.d.ts","sourceRoot":"","sources":["../../src/services/OtaInstallCoordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAqB,EAAC,KAAK,WAAW,EAAE,KAAK,SAAS,EAAC,MAAM,uBAAuB,CAAA;AAIpF,OAAO,EAAsB,KAAK,eAAe,EAAC,MAAM,uBAAuB,CAAA;AAC/E,OAAO,KAAK,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAA;AACzE,OAAO,EAAqB,KAAK,YAAY,EAAC,MAAM,mBAAmB,CAAA;AAwHvE,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,YAAY,CAAA;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,sBAAsB,EAAE,OAAO,CAAA;IAC/B,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,SAAS,GAAG,IAAI,CAAA;IAC3B,WAAW,EAAE,WAAW,GAAG,IAAI,CAAA;IAC/B;;;;OAIG;IACH,+BAA+B,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9C,sFAAsF;IACtF,eAAe,EAAE,OAAO,CAAA;IACxB,8FAA8F;IAC9F,sBAAsB,EAAE,OAAO,CAAA;IAC/B;;;;;OAKG;IACH,kBAAkB,EAAE,YAAY,GAAG,YAAY,GAAG,WAAW,GAAG,IAAI,CAAA;IACpE,oEAAoE;IACpE,YAAY,EAAE,eAAe,CAAA;IAC7B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,gFAAgF;IAChF,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;CAC9B;AASD,cAAM,qBAAqB;IACzB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,mBAAmB,CAA4C;IACvE,OAAO,CAAC,iBAAiB,CAA6B;IACtD,OAAO,CAAC,kBAAkB,CAAsB;IAChD,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,sBAAsB,CAAsB;IAGpD,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,gBAAgB,CAAQ;IAChC,OAAO,CAAC,sBAAsB,CAAQ;IAItC,OAAO,CAAC,WAAW,CAAQ;IAC3B,OAAO,CAAC,aAAa,CAAQ;IAK7B,OAAO,CAAC,kBAAkB,CAAsB;IAEhD,OAAO,CAAC,oBAAoB,CAAQ;IAEpC,OAAO,CAAC,4BAA4B,CAAQ;IAG5C,OAAO,CAAC,eAAe,CAAkC;IAMzD,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,4BAA4B,CAAQ;IAC5C,OAAO,CAAC,kBAAkB,CAAuC;IAOjE,OAAO,CAAC,oBAAoB,CAAQ;IACpC,OAAO,CAAC,mBAAmB,CAAsB;IAGjD,OAAO,CAAC,2BAA2B,CAAQ;IAE3C,OAAO,CAAC,sBAAsB,CAAQ;IAEtC,OAAO,CAAC,mBAAmB,CAAQ;IAEnC,OAAO,CAAC,mBAAmB,CAAsB;IACjD,OAAO,CAAC,mBAAmB,CAAI;IAG/B,OAAO,CAAC,aAAa,CAA6C;IAClE,OAAO,CAAC,oBAAoB,CAAQ;IACpC,OAAO,CAAC,YAAY,CAA6C;IACjE,OAAO,CAAC,YAAY,CAA6C;IACjE,OAAO,CAAC,eAAe,CAA6C;IACpE,OAAO,CAAC,YAAY,CAA8C;IAClE,OAAO,CAAC,iBAAiB,CAA6C;IACtE,OAAO,CAAC,oBAAoB,CAA6C;IACzE,OAAO,CAAC,sBAAsB,CAA6C;IAC3E,OAAO,CAAC,oBAAoB,CAA6C;IACzE,OAAO,CAAC,mBAAmB,CAA6C;IACxE,OAAO,CAAC,eAAe,CAA8C;IAIrE,OAAO,CAAC,sBAAsB,CAAQ;IAKtC,OAAO,CAAC,iBAAiB,CAAiC;IAC1D,OAAO,CAAC,gBAAgB,CAAQ;IAGhC,OAAO,CAAC,uBAAuB,CAAQ;IACvC,OAAO,CAAC,UAAU,CAAI;IAGtB,OAAO,CAAC,gBAAgB,CAA4B;IAGpD,OAAO,CAAC,aAAa,CAAQ;IAC7B,OAAO,CAAC,aAAa,CAAyB;IAC9C,OAAO,CAAC,eAAe,CAA2B;IAClD,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,YAAY,CAAK;IAIzB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,WAAW,CAAQ;IAE3B,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,gBAAgB,CAAwB;IAIhD,mGAAmG;IACnG,OAAO,CAAC,WAAW,EAAE,4BAA4B,GAAG,MAAM,GAAG,SAAS;IAkBtE;;;;;OAKG;IACH,MAAM,IAAI,IAAI;IAgCd;;;;OAIG;IACH,MAAM,IAAI,IAAI;IAoBd,+EAA+E;IAC/E,KAAK,IAAI,IAAI;IA8Eb;;;;OAIG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAa7B;;;;;OAKG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAO9B,QAAQ,IAAI,kBAAkB;IAmC9B;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IAI/B,sFAAsF;IACtF,OAAO,CAAC,wBAAwB;IAMhC;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,IAAI,GAAG,MAAM,IAAI;IAmBlE,OAAO,CAAC,iBAAiB;IAiCzB,qFAAqF;IACrF,OAAO,CAAC,2BAA2B;IAYnC,2EAA2E;IAC3E,OAAO,CAAC,sBAAsB;IAM9B,0EAA0E;IAC1E,OAAO,CAAC,kBAAkB;IAM1B,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,+BAA+B;IAOvC,OAAO,CAAC,sBAAsB;IAO9B,8FAA8F;IAC9F,OAAO,CAAC,sBAAsB;IAM9B,oFAAoF;IACpF,OAAO,CAAC,uBAAuB;IAgB/B,OAAO,CAAC,KAAK;IAiBb;;;OAGG;IACH,OAAO,CAAC,OAAO;IA8Vf;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;IAgC/B,OAAO,CAAC,cAAc;IA8DtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAOzB;IAED;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAE3C;IAED,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAOjC;IAID;;;;;;;;;OASG;IACH,OAAO,CAAC,+BAA+B;IAkCvC,OAAO,CAAC,oBAAoB;IA2B5B,+FAA+F;IAC/F,OAAO,CAAC,0BAA0B;IASlC;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;IAqDjC;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAgB9B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,yBAAyB;IAcjC;;;;OAIG;IACH,OAAO,CAAC,eAAe;IASvB;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,uBAAuB;IAuB/B,OAAO,CAAC,oBAAoB;IAuB5B,yEAAyE;IACzE,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,yBAAyB;YAyCnB,eAAe;YAsFf,wBAAwB;IAStC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,qBAAqB;IAmC7B,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,sBAAsB;IAO9B,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,2BAA2B;IAOnC,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,wBAAwB;IAWhC;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,iBAAiB;CAQ1B;AAED,oGAAoG;AACpG,eAAO,MAAM,qBAAqB,uBAA8B,CAAA"}