craft-native 0.0.319 → 0.0.328

package/dist/android/src/index.d.ts

@@ -1,8 +1,5 @@
-/**
- * Craft Android Builder
- *
- * Generates Android apps with native Craft components and optional WebView content.
- */
+/** Store large native source assets compressed; the host decodes each once on demand. */
+export declare function compressNativeSources(target: string): void;
 import { type AndroidMapProvider } from './native-map.js';
 export type { AndroidMapProvider } from './native-map.js';
 /**
@@ -55,6 +52,7 @@ export interface CraftAndroidConfig {
     backgroundColor?: string;
     backgroundColorDark?: string;
     enableSpeechRecognition?: boolean;
+    enableAudioRecording?: boolean;
     enableHaptics?: boolean;
     enableShare?: boolean;
     enableCamera?: boolean;

package/dist/android/src/index.js

@@ -1,6 +1,7 @@
 // @bun
 // ../android/src/index.ts
-import { cpSync, existsSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync as rmSync2, statSync, writeFileSync } from "fs";
+import { gzipSync } from "zlib";
+import { cpSync, existsSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, readdirSync, rmSync as rmSync2, statSync, writeFileSync } from "fs";
 import { dirname as dirname2, extname, isAbsolute as isAbsolute2, join as join3, relative, resolve as resolve2, sep } from "path";
 var {$ } = globalThis.Bun;
 
@@ -357,6 +358,8 @@ async function createAndroidEmulator(options) {
       }
       await Bun.sleep(Math.min(2000, Math.max(0, deadline - Date.now())));
     }
+    if (child.exitCode !== null)
+      throw new Error(`The owned Android emulator exited with code ${child.exitCode} before boot; inspect ${join2(artifacts, "emulator.log")}`);
     throw new Error(`The owned Android emulator did not boot within ${bootTimeoutMs}ms; inspect ${artifacts}`);
   } catch (error) {
     if (child) {
@@ -381,6 +384,21 @@ async function createAndroidEmulator(options) {
 }
 
 // ../android/src/index.ts
+function compressNativeSources(target) {
+  if (statSync(target).isDirectory()) {
+    for (const entry of readdirSync(target))
+      compressNativeSources(join3(target, entry));
+    return;
+  }
+  if (!/\.(?:js|json)$/.test(target))
+    return;
+  const bytes = readFileSync2(target);
+  if (bytes.length < 1024 || bytes[0] === 31 && bytes[1] === 139)
+    return;
+  const packed = gzipSync(bytes, { level: 9 });
+  if (packed.length < bytes.length)
+    writeFileSync(target, packed);
+}
 var nativeRouteBundles = true;
 var nativeRouteRuntime = true;
 var nativeMessages = true;
@@ -538,6 +556,7 @@ var DEFAULT_CONFIG = {
   darkMode: true,
   backgroundColor: "#0b1712",
   enableSpeechRecognition: false,
+  enableAudioRecording: false,
   enableHaptics: false,
   enableShare: false,
   enableCamera: false,
@@ -825,7 +844,7 @@ function syncAndroidWebAssets(source, output) {
 }
 function renderAndroidPermissions(config) {
   const permissions = new Set(["android.permission.INTERNET", "android.permission.ACCESS_NETWORK_STATE"]);
-  if (config.enableSpeechRecognition)
+  if (config.enableSpeechRecognition || config.enableAudioRecording)
     permissions.add("android.permission.RECORD_AUDIO");
   if (config.enableCamera)
     permissions.add("android.permission.CAMERA");
@@ -1138,6 +1157,8 @@ async function init(options) {
     writeFileSync(join3(output, "app/src/main/java", packagePath, "CraftNativeNotificationReceiver.kt"), notificationTemplate.replace(/\{\{PACKAGE_NAME\}\}/g, finalPackageName));
     writeNativeShellSources(output, packagePath, finalPackageName, config);
   }
+  const permissionPolicy = readFileSync2(join3(TEMPLATES_DIR, "CraftPermissionPolicy.kt.template"), "utf8");
+  writeFileSync(join3(output, "app/src/main/java", packagePath, "CraftPermissionPolicy.kt"), permissionPolicy.replace(/\{\{PACKAGE_NAME\}\}/g, finalPackageName));
   const craftBridgeTemplate = readFileSync2(join3(TEMPLATES_DIR, "CraftBridge.kt.template"), "utf-8");
   const craftBridge = craftBridgeTemplate.replace(/\{\{PROMISE_RUNTIME\}\}/g, () => renderAndroidPromiseRuntime("            ")).replace(/\{\{PACKAGE_NAME\}\}/g, finalPackageName).replace(/\{\{ENABLE_SPEECH\}\}/g, String(Boolean(config.enableSpeechRecognition))).replace(/\{\{ENABLE_HAPTICS\}\}/g, String(Boolean(config.enableHaptics))).replace(/\{\{ENABLE_SHARE\}\}/g, String(Boolean(config.enableShare))).replace(/\{\{ENABLE_CAMERA\}\}/g, String(Boolean(config.enableCamera))).replace(/\{\{ENABLE_BIOMETRIC\}\}/g, String(Boolean(config.enableBiometric))).replace(/\{\{ENABLE_PUSH\}\}/g, String(Boolean(config.enablePushNotifications))).replace(/\{\{ENABLE_SECURE_STORAGE\}\}/g, String(Boolean(config.enableSecureStorage))).replace(/\{\{ENABLE_GEOLOCATION\}\}/g, String(Boolean(config.enableGeolocation))).replace(/\{\{ENABLE_BACKGROUND_LOCATION\}\}/g, String(Boolean(config.enableBackgroundLocation))).replace(/\{\{ENABLE_KEEP_AWAKE\}\}/g, String(Boolean(config.enableKeepAwake))).replace(/\{\{ENABLE_DEEP_LINKS\}\}/g, String(Boolean(config.enableDeepLinks))).replace(/\{\{ENABLE_HEALTH_CONNECT\}\}/g, String(Boolean(config.enableHealthConnect))).replace(/\{\{ENABLE_HEART_RATE\}\}/g, String(Boolean(config.enableHeartRate))).replace(/\{\{FIREBASE_IMPORT\}\}/g, config.enablePushNotifications ? "import com.google.firebase.messaging.FirebaseMessaging" : "").replace(/\{\{REGISTER_PUSH_IMPLEMENTATION\}\}/g, config.enablePushNotifications ? `activity.runOnUiThread {
             if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.TIRAMISU
@@ -1158,8 +1179,21 @@ async function init(options) {
         }` : `evaluatePromiseJavascript(
             "window._craftPushReject && window._craftPushReject('Push notifications are disabled')"
         )`);
-  writeFileSync(join3(output, "app/src/main/java", packagePath, "CraftBridge.kt"), craftBridge);
-  const craftNative = readFileSync2(join3(TEMPLATES_DIR, "CraftNative.kt.template"), "utf-8");
+  const bridgeFile = join3(output, "app/src/main/java", packagePath, "CraftBridge.kt");
+  if (config.renderer === "native")
+    rmSync2(bridgeFile, { force: true });
+  else
+    writeFileSync(bridgeFile, craftBridge);
+  let craftNative = readFileSync2(join3(TEMPLATES_DIR, "CraftNative.kt.template"), "utf-8");
+  if (config.renderer === "native") {
+    craftNative = craftNative.replace(/^import com\.google\.mlkit\..*\n/gm, "").replace(/    \/\/ CRAFT_WEB_ML_START[\s\S]*?    \/\/ CRAFT_WEB_ML_END/, () => ["runImageClassification", "runObjectDetection", "runTextRecognition"].map((name) => `    @JvmStatic
+    fun ${name}(imageBase64: String) {
+        val (_, reject) = createMlSettlement()
+        reject("Machine learning is unavailable in the native renderer")
+    }`).join(`
+
+`));
+  }
   const nativeDir = join3(output, "app/src/main/java/com/craft/runtime");
   mkdirSync2(nativeDir, { recursive: true });
   writeFileSync(join3(nativeDir, "CraftNative.kt"), craftNative);
@@ -1184,7 +1218,13 @@ async function init(options) {
   const projectGradleTemplate = readFileSync2(join3(TEMPLATES_DIR, "build.gradle.kts.project.template"), "utf-8");
   writeFileSync(join3(output, "build.gradle.kts"), projectGradleTemplate.replace(/\{\{GOOGLE_SERVICES_PLUGIN\}\}/g, hasGoogleServices ? '    id("com.google.gms.google-services") version "4.4.2" apply false' : ""));
   const appGradleTemplate = readFileSync2(join3(TEMPLATES_DIR, "build.gradle.kts.app.template"), "utf-8");
-  const appGradle = appGradleTemplate.replace(/\{\{PACKAGE_NAME\}\}/g, finalPackageName).replace(/\{\{VERSION_NAME\}\}/g, escapeKotlinString(config.version || "1.0.0")).replace(/\{\{VERSION_CODE\}\}/g, String(config.versionCode || 1)).replace(/\{\{MIN_SDK\}\}/g, String(config.minSdk ?? ANDROID_MIN_SDK)).replace(/\{\{COMPILE_SDK\}\}/g, String(config.compileSdk || 36)).replace(/\{\{TARGET_SDK\}\}/g, String(config.targetSdk || 35)).replace(/\{\{GOOGLE_SERVICES_PLUGIN\}\}/g, hasGoogleServices ? '    id("com.google.gms.google-services")' : "").replace(/\{\{FIREBASE_MESSAGING_DEPENDENCY\}\}/g, config.enablePushNotifications ? '    implementation("com.google.firebase:firebase-messaging:24.1.0")' : "").replace(/\{\{REFRESH_LAYOUT_DEPENDENCY\}\}/g, config.renderer === "native" ? '    implementation("androidx.swiperefreshlayout:swiperefreshlayout:1.1.0")' : "").replace(/\{\{NATIVE_MAP_DEPENDENCY\}\}/g, config.renderer === "native" ? `    // Native STX Map overlays and trail routes
+  const appGradle = appGradleTemplate.replace(/\{\{MACHINE_LEARNING_DEPENDENCIES\}\}/g, config.renderer === "native" ? "" : [
+    "barcode-scanning:17.3.0",
+    "image-labeling:17.0.9",
+    "object-detection:17.0.2",
+    "text-recognition:16.0.1"
+  ].map((module) => `    implementation("com.google.mlkit:${module}")`).join(`
+`)).replace(/\{\{PACKAGE_NAME\}\}/g, finalPackageName).replace(/\{\{VERSION_NAME\}\}/g, escapeKotlinString(config.version || "1.0.0")).replace(/\{\{VERSION_CODE\}\}/g, String(config.versionCode || 1)).replace(/\{\{MIN_SDK\}\}/g, String(config.minSdk ?? ANDROID_MIN_SDK)).replace(/\{\{COMPILE_SDK\}\}/g, String(config.compileSdk || 36)).replace(/\{\{TARGET_SDK\}\}/g, String(config.targetSdk || 35)).replace(/\{\{GOOGLE_SERVICES_PLUGIN\}\}/g, hasGoogleServices ? '    id("com.google.gms.google-services")' : "").replace(/\{\{FIREBASE_MESSAGING_DEPENDENCY\}\}/g, config.enablePushNotifications ? '    implementation("com.google.firebase:firebase-messaging:24.1.0")' : "").replace(/\{\{REFRESH_LAYOUT_DEPENDENCY\}\}/g, config.renderer === "native" ? '    implementation("androidx.swiperefreshlayout:swiperefreshlayout:1.1.0")' : "").replace(/\{\{NATIVE_MAP_DEPENDENCY\}\}/g, config.renderer === "native" ? `    // Native STX Map overlays and trail routes
     implementation("${androidMapHost(config.mapProvider).dependency}")` : "").replace(/\{\{HEALTH_CONNECT_DEPENDENCIES\}\}/g, config.enableHealthConnect ? `    implementation("androidx.health.connect:connect-client:1.1.0")
     implementation("org.jetbrains.kotlinx:kotlinx-coroutines-android:1.8.1")` : "").replace(/\{\{HEALTH_SERVICES_DEPENDENCIES\}\}/g, config.enableHealthServices ? '    implementation("androidx.health:health-services-client:1.1.0")' : "").replace(/\{\{WALLET_DEPENDENCY\}\}/g, config.enableWallet ? `    // Native Google Wallet save flow for signed pass JWTs
     implementation("com.google.android.gms:play-services-pay:16.5.0")` : "").replace(/\{\{JAVASCRIPT_ENGINE_DEPENDENCY\}\}/g, config.renderer === "native" ? `    implementation("androidx.javascriptengine:javascriptengine:1.1.0")
@@ -1381,11 +1421,13 @@ async function build(options) {
         if (resolve2(nativeBundlePath) !== resolve2(routeDestination)) {
           rmSync2(routeDestination, { recursive: true, force: true });
           cpSync(nativeBundlePath, routeDestination, { recursive: true });
+          compressNativeSources(routeDestination);
         }
         rmSync2(destination, { force: true });
       } else {
         if (resolve2(nativeBundlePath) !== resolve2(destination))
           cpSync(nativeBundlePath, destination);
+        compressNativeSources(destination);
         rmSync2(routeDestination, { recursive: true, force: true });
       }
     }
@@ -1502,6 +1544,7 @@ export {
   ANDROID_MIN_SDK,
   HEALTH_CONNECT_PERMISSIONS,
   build,
+  compressNativeSources,
   createAndroidEmulator,
   healthConnectPermissions,
   init,

package/dist/android/templates/CraftBridge.kt.template

@@ -112,97 +112,7 @@ import java.io.File
 import java.util.concurrent.TimeUnit
 import java.util.UUID
 
-internal object CraftPermissionPolicy {
-    data class Request(
-        val groupIndex: Int,
-        val permissions: Array<String>
-    )
-
-    private fun permissionGroups(name: String, sdkInt: Int): List<List<String>>? = when (name) {
-        "camera" -> listOf(listOf(Manifest.permission.CAMERA))
-        "microphone" -> listOf(listOf(Manifest.permission.RECORD_AUDIO))
-        "photos" -> listOf(listOf(
-            if (sdkInt >= Build.VERSION_CODES.TIRAMISU) {
-                Manifest.permission.READ_MEDIA_IMAGES
-            } else {
-                Manifest.permission.READ_EXTERNAL_STORAGE
-            }
-        ))
-        // Android presents precise and approximate location as one choice. A
-        // coarse grant is usable foreground location access even when the
-        // corresponding fine result is denied.
-        "location" -> listOf(listOf(
-            Manifest.permission.ACCESS_FINE_LOCATION,
-            Manifest.permission.ACCESS_COARSE_LOCATION
-        ))
-        "locationAlways" -> if (sdkInt >= Build.VERSION_CODES.Q) {
-            listOf(
-                listOf(
-                    Manifest.permission.ACCESS_FINE_LOCATION,
-                    Manifest.permission.ACCESS_COARSE_LOCATION
-                ),
-                listOf(Manifest.permission.ACCESS_BACKGROUND_LOCATION)
-            )
-        } else {
-            listOf(listOf(
-                Manifest.permission.ACCESS_FINE_LOCATION,
-                Manifest.permission.ACCESS_COARSE_LOCATION
-            ))
-        }
-        "notifications" -> if (sdkInt >= Build.VERSION_CODES.TIRAMISU) {
-            listOf(listOf(Manifest.permission.POST_NOTIFICATIONS))
-        } else {
-            emptyList()
-        }
-        "contacts" -> listOf(listOf(Manifest.permission.READ_CONTACTS))
-        "calendar" -> listOf(listOf(Manifest.permission.READ_CALENDAR))
-        "bluetooth" -> if (sdkInt >= Build.VERSION_CODES.S) {
-            listOf(listOf(Manifest.permission.BLUETOOTH_SCAN))
-        } else {
-            emptyList()
-        }
-        "motion" -> if (sdkInt >= Build.VERSION_CODES.Q) {
-            listOf(listOf(Manifest.permission.ACTIVITY_RECOGNITION))
-        } else {
-            emptyList()
-        }
-        else -> null
-    }
-
-    fun requiredPermissions(name: String, sdkInt: Int): Array<String>? =
-        permissionGroups(name, sdkInt)?.flatten()?.distinct()?.toTypedArray()
-
-    fun status(name: String, sdkInt: Int, isGranted: (String) -> Boolean): String {
-        val groups = permissionGroups(name, sdkInt) ?: return "undetermined"
-        return if (groups.all { group -> group.any(isGranted) }) "granted" else "denied"
-    }
 
-    fun nextRequest(
-        name: String,
-        sdkInt: Int,
-        startingAt: Int,
-        isGranted: (String) -> Boolean
-    ): Request? {
-        val groups = permissionGroups(name, sdkInt) ?: return null
-        val groupIndex = (startingAt until groups.size).firstOrNull { index ->
-            groups[index].none(isGranted)
-        } ?: return null
-        return Request(groupIndex, groups[groupIndex].toTypedArray())
-    }
-
-    fun groupIsGranted(
-        name: String,
-        sdkInt: Int,
-        groupIndex: Int,
-        isGranted: (String) -> Boolean
-    ): Boolean = permissionGroups(name, sdkInt)
-        ?.getOrNull(groupIndex)
-        ?.any(isGranted) == true
-
-    fun foregroundLocationIsGranted(isGranted: (String) -> Boolean): Boolean =
-        isGranted(Manifest.permission.ACCESS_FINE_LOCATION) ||
-            isGranted(Manifest.permission.ACCESS_COARSE_LOCATION)
-}
 
 private data class SpeechRequest(
     val text: String,

package/dist/android/templates/CraftNative.kt.template

@@ -1245,6 +1245,7 @@ object CraftNative {
         return resolve to reject
     }
 
+    // CRAFT_WEB_ML_START
     @JvmStatic
     fun runImageClassification(imageBase64: String) {
         val (resolve, reject) = createMlSettlement()
@@ -1366,6 +1367,8 @@ object CraftNative {
         }
     }
 
+    // CRAFT_WEB_ML_END
+
     fun classifyImage(imageBase64: String): Boolean {
         if (!isAvailable) return false
         return try { nativeClassifyImage(imageBase64) } catch (e: UnsatisfiedLinkError) { false }

package/dist/android/templates/CraftNativeBackground.kt.template

@@ -65,11 +65,17 @@ internal object CraftNativeSandbox {
  */
 internal object CraftNativeBundle {
     private val sources = object : android.util.LruCache<String, String>(24 shl 20) {
-        override fun sizeOf(key: String, value: String) = value.length
+        override fun sizeOf(key: String, value: String) = value.length * 2
     }
 
     private fun read(context: Context, asset: String): String? = sources.get(asset)
-        ?: runCatching { context.assets.open(asset).bufferedReader().use { it.readText() } }.getOrNull()?.also { sources.put(asset, it) }
+        ?: runCatching { context.assets.open(asset).buffered().use { input ->
+            input.mark(2)
+            val packed = input.read() == 0x1f && input.read() == 0x8b
+            input.reset()
+            val decoded = if (packed) java.util.zip.GZIPInputStream(input) else input
+            decoded.bufferedReader().use { it.readText() }
+        } }.getOrNull()?.also { sources.put(asset, it) }
 
     /**
      * A route's file runs on the runtime stx writes beside it

package/dist/android/templates/CraftNativeServices.kt.template

@@ -9,6 +9,8 @@ import android.content.Context
 import android.content.Intent
 import android.content.pm.PackageManager
 import android.net.Uri
+import android.media.MediaRecorder
+import android.media.MediaMetadataRetriever
 import android.os.Build
 import android.os.Handler
 import android.os.Looper
@@ -113,6 +115,7 @@ internal class CraftNativeServices(
         add("brightness")
         add("statusBar")
         add("speech")
+        if (config.optBoolean("enableAudioRecording")) add("audioRecording")
         // Videos kept on the phone for offline (CraftNativeMedia).
         add("media")
         if (config.optBoolean("enableShare")) add("share")
@@ -142,7 +145,7 @@ internal class CraftNativeServices(
 
     fun handles(module: String): Boolean = module in setOf(
         "Dialog", "Browser", "Linking", "Share", "Push", "Health", "KeepAwake", "Brightness", "StatusBar", "Speech", "Background",
-        "Location", "Media", "CrashReporter", "HeartRate",
+        "Location", "Media", "CrashReporter", "HeartRate", "AudioRecording",
         "Wallet",
     )
 
@@ -165,6 +168,7 @@ internal class CraftNativeServices(
                 "Brightness" -> brightness(method, args, done)
                 "StatusBar" -> statusBar(args.optString(0, "default"), done)
                 "Speech" -> speech(method, args, done)
+                "AudioRecording" -> main.post { voiceRecording(method, args, done) }
                 "Location" -> location(method, args, done)
                 "HeartRate" -> heartRate(method, args, done)
                 "Media" -> when (method) {
@@ -422,6 +426,12 @@ internal class CraftNativeServices(
     }
 
     fun onRequestPermissionsResult(requestCode: Int): Boolean {
+        if (requestCode == 7134) {
+            val pending = pendingVoicePermission
+            pendingVoicePermission = null
+            pending?.invoke(ContextCompat.checkSelfPermission(context, Manifest.permission.RECORD_AUDIO) == PackageManager.PERMISSION_GRANTED)
+            return true
+        }
         if (heartRateEnabled && CraftHeartRate.get(context).onPermissions(requestCode)) return true
         if (requestCode == LOCATION_PERMISSION_REQUEST) {
             val pending = pendingLocationPermission
@@ -612,6 +622,94 @@ internal class CraftNativeServices(
         done(success(true))
     }
 
+    // A microphone belongs to its requesting screen/account, including the
+    // permission prompt. Files use the same private upload root as Files.
+    private var voiceOwner: String? = null
+    private var voiceRecorder: MediaRecorder? = null
+    private var voiceFile: File? = null
+    private var pendingVoicePermission: ((Boolean) -> Unit)? = null
+
+    fun pauseVoice() { if (voiceRecorder != null) cancelVoice() }
+    private fun cancelVoice() {
+        voiceOwner = null
+        val recorder = voiceRecorder
+        voiceRecorder = null
+        try { recorder?.stop() } catch (_: Exception) {}
+        recorder?.release()
+        voiceFile?.parentFile?.deleteRecursively()
+        voiceFile = null
+        val pending = pendingVoicePermission
+        pendingVoicePermission = null
+        pending?.invoke(false)
+    }
+
+    private fun voiceRecording(method: String, args: JSONArray, done: (CraftNativeCapabilityResult) -> Unit) {
+        if (!config.optBoolean("enableAudioRecording")) { done(failure("CAPABILITY_DISABLED", "Audio recording is disabled")); return }
+        val key = args.optString(0)
+        if (!key.matches(Regex("[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}"))) { done(failure("INVALID_ARGUMENT", "A recording owner UUID is required")); return }
+        if (method == "cancel") {
+            if (voiceOwner == key) cancelVoice()
+            done(success(true)); return
+        }
+        if (method == "stop") {
+            val file = voiceFile
+            if (voiceOwner != key || file == null) { done(failure("RECORDING_NOT_FOUND", "This recording is no longer available")); return }
+            try {
+                voiceRecorder?.stop()
+                voiceRecorder?.release()
+                voiceRecorder = null
+                val metadata = MediaMetadataRetriever()
+                val duration = try { metadata.setDataSource(file.absolutePath); (metadata.extractMetadata(MediaMetadataRetriever.METADATA_KEY_DURATION)?.toDoubleOrNull() ?: 0.0) / 1000 } finally { metadata.release() }
+                if (!file.exists() || file.length() == 0L || duration <= 0) throw IllegalStateException("Empty recording")
+                done(success(JSONObject().put("path", file.absolutePath).put("name", file.name).put("type", "audio/mp4").put("size", file.length()).put("durationSeconds", duration)))
+            } catch (_: Exception) { cancelVoice(); done(failure("RECORDING_FAILED", "The recording could not be read")) }
+            return
+        }
+        if (method != "start") { done(failure("UNKNOWN_ACTION", "Unknown recording action")); return }
+        if (voiceOwner != null) { done(failure("RECORDING_BUSY", "Another microphone session is active")); return }
+        val host = activity()
+        if (host == null) { done(failure("NEEDS_ACTIVITY", "Recording needs the foreground app")); return }
+        val seconds = args.optJSONObject(1)?.optInt("maxSeconds", 300) ?: 300
+        if (seconds !in 1..300) { done(failure("INVALID_ARGUMENT", "Recordings are limited to five minutes")); return }
+        voiceOwner = key
+        val start: (Boolean) -> Unit = start@ { allowed ->
+            if (voiceOwner != key) { done(failure("RECORDING_CANCELLED", "Recording was cancelled")); return@start }
+            if (!allowed) { cancelVoice(); done(failure("PERMISSION_DENIED", "Microphone permission was refused")); return@start }
+            try {
+                val folder = File(context.cacheDir, "craft-files/" + UUID.randomUUID()).apply { mkdirs() }
+                val file = File(folder, "voice-feedback.m4a")
+                voiceFile = file
+                @Suppress("DEPRECATION")
+                val recorder = if (Build.VERSION.SDK_INT >= 31) MediaRecorder(context) else MediaRecorder()
+                voiceRecorder = recorder
+                recorder.setAudioSource(MediaRecorder.AudioSource.MIC)
+                recorder.setOutputFormat(MediaRecorder.OutputFormat.MPEG_4)
+                recorder.setAudioEncoder(MediaRecorder.AudioEncoder.AAC)
+                recorder.setAudioChannels(1)
+                recorder.setAudioSamplingRate(16000)
+                recorder.setAudioEncodingBitRate(32000)
+                recorder.setMaxDuration(seconds * 1000 - 250)
+                recorder.setMaxFileSize(12L * 1024 * 1024)
+                recorder.setOutputFile(file.absolutePath)
+                recorder.setOnInfoListener { current, what, _ ->
+                    if (voiceOwner == key && what in setOf(MediaRecorder.MEDIA_RECORDER_INFO_MAX_DURATION_REACHED, MediaRecorder.MEDIA_RECORDER_INFO_MAX_FILESIZE_REACHED)) {
+                        try { current.stop() } catch (_: Exception) {}
+                        current.release()
+                        voiceRecorder = null
+                    }
+                }
+                recorder.prepare()
+                recorder.start()
+                done(success(true))
+            } catch (_: Exception) { cancelVoice(); done(failure("RECORDING_FAILED", "The microphone could not start")) }
+        }
+        if (ContextCompat.checkSelfPermission(context, Manifest.permission.RECORD_AUDIO) == PackageManager.PERMISSION_GRANTED) start(true)
+        else {
+            pendingVoicePermission = start
+            ActivityCompat.requestPermissions(host, arrayOf(Manifest.permission.RECORD_AUDIO), 7134)
+        }
+    }
+
     // MARK: Speech
 
     private fun speech(method: String, args: JSONArray, done: (CraftNativeCapabilityResult) -> Unit) {
@@ -703,6 +801,7 @@ internal class CraftNativeServices(
     }
 
     fun close() {
+        cancelVoice()
         watchCallback?.let(locationClient::removeLocationUpdates)
         watchCallback = null
         pendingLocationPermission = null

package/dist/android/templates/CraftPermissionPolicy.kt.template

@@ -0,0 +1,96 @@
+package {{PACKAGE_NAME}}
+
+import android.Manifest
+import android.os.Build
+
+internal object CraftPermissionPolicy {
+    data class Request(
+        val groupIndex: Int,
+        val permissions: Array<String>
+    )
+
+    private fun permissionGroups(name: String, sdkInt: Int): List<List<String>>? = when (name) {
+        "camera" -> listOf(listOf(Manifest.permission.CAMERA))
+        "microphone" -> listOf(listOf(Manifest.permission.RECORD_AUDIO))
+        "photos" -> listOf(listOf(
+            if (sdkInt >= Build.VERSION_CODES.TIRAMISU) {
+                Manifest.permission.READ_MEDIA_IMAGES
+            } else {
+                Manifest.permission.READ_EXTERNAL_STORAGE
+            }
+        ))
+        // Android presents precise and approximate location as one choice. A
+        // coarse grant is usable foreground location access even when the
+        // corresponding fine result is denied.
+        "location" -> listOf(listOf(
+            Manifest.permission.ACCESS_FINE_LOCATION,
+            Manifest.permission.ACCESS_COARSE_LOCATION
+        ))
+        "locationAlways" -> if (sdkInt >= Build.VERSION_CODES.Q) {
+            listOf(
+                listOf(
+                    Manifest.permission.ACCESS_FINE_LOCATION,
+                    Manifest.permission.ACCESS_COARSE_LOCATION
+                ),
+                listOf(Manifest.permission.ACCESS_BACKGROUND_LOCATION)
+            )
+        } else {
+            listOf(listOf(
+                Manifest.permission.ACCESS_FINE_LOCATION,
+                Manifest.permission.ACCESS_COARSE_LOCATION
+            ))
+        }
+        "notifications" -> if (sdkInt >= Build.VERSION_CODES.TIRAMISU) {
+            listOf(listOf(Manifest.permission.POST_NOTIFICATIONS))
+        } else {
+            emptyList()
+        }
+        "contacts" -> listOf(listOf(Manifest.permission.READ_CONTACTS))
+        "calendar" -> listOf(listOf(Manifest.permission.READ_CALENDAR))
+        "bluetooth" -> if (sdkInt >= Build.VERSION_CODES.S) {
+            listOf(listOf(Manifest.permission.BLUETOOTH_SCAN))
+        } else {
+            emptyList()
+        }
+        "motion" -> if (sdkInt >= Build.VERSION_CODES.Q) {
+            listOf(listOf(Manifest.permission.ACTIVITY_RECOGNITION))
+        } else {
+            emptyList()
+        }
+        else -> null
+    }
+
+    fun requiredPermissions(name: String, sdkInt: Int): Array<String>? =
+        permissionGroups(name, sdkInt)?.flatten()?.distinct()?.toTypedArray()
+
+    fun status(name: String, sdkInt: Int, isGranted: (String) -> Boolean): String {
+        val groups = permissionGroups(name, sdkInt) ?: return "undetermined"
+        return if (groups.all { group -> group.any(isGranted) }) "granted" else "denied"
+    }
+
+    fun nextRequest(
+        name: String,
+        sdkInt: Int,
+        startingAt: Int,
+        isGranted: (String) -> Boolean
+    ): Request? {
+        val groups = permissionGroups(name, sdkInt) ?: return null
+        val groupIndex = (startingAt until groups.size).firstOrNull { index ->
+            groups[index].none(isGranted)
+        } ?: return null
+        return Request(groupIndex, groups[groupIndex].toTypedArray())
+    }
+
+    fun groupIsGranted(
+        name: String,
+        sdkInt: Int,
+        groupIndex: Int,
+        isGranted: (String) -> Boolean
+    ): Boolean = permissionGroups(name, sdkInt)
+        ?.getOrNull(groupIndex)
+        ?.any(isGranted) == true
+
+    fun foregroundLocationIsGranted(isGranted: (String) -> Boolean): Boolean =
+        isGranted(Manifest.permission.ACCESS_FINE_LOCATION) ||
+            isGranted(Manifest.permission.ACCESS_COARSE_LOCATION)
+}

package/dist/android/templates/MainActivityNative.kt.template

@@ -7668,6 +7668,7 @@ class MainActivity : AppCompatActivity() {
     }
 
     override fun onPause() {
+        if (::services.isInitialized) services.pauseVoice()
         nativeAppState = "inactive"
         publish("APP_STATE", JSONObject().put("state", nativeAppState))
         super.onPause()

package/dist/android/templates/build.gradle.kts.app.template

@@ -116,11 +116,7 @@ dependencies {
 
 {{WALLET_DEPENDENCY}}
 
-    // On-device computer vision APIs exposed by CraftBridge
-    implementation("com.google.mlkit:barcode-scanning:17.3.0")
-    implementation("com.google.mlkit:image-labeling:17.0.9")
-    implementation("com.google.mlkit:object-detection:17.0.2")
-    implementation("com.google.mlkit:text-recognition:16.0.1")
+{{MACHINE_LEARNING_DEPENDENCIES}}
 
     // Google Play Billing (In-App Purchase)
     implementation("com.android.billingclient:billing:6.1.0")

package/dist/api/mobile.d.ts

@@ -1844,6 +1844,15 @@ export declare const health: {
     onHeartRate(callback: (samples: HealthHeartRateSample[]) => void): () => void;
 };
 export interface LiveActivityState {
+    /** Native step boundaries retained on device; at most 1000, with detail limited to 96 characters. Only the current state is sent to the widget. */
+    transitions?: Array<{
+        at: number;
+        detail: string;
+        duration?: number | null;
+    }>;
+    /** An actual HealthKit workout (iOS 26+, already authorised) owns background updates. */
+    workoutType?: string;
+    sessionStartedAt?: number;
     /** What to show once staleAt passes without fresh app state. */
     staleStatus?: string;
     /** Current step, interval or session detail. */

package/dist/cli.js

@@ -311,6 +311,12 @@ async function packageMacOS(config, outDir) {
   } catch (error) {
     return [{ success: false, platform: "macos", format: "app", error: error.message }];
   }
+  if (opts.notarize && !opts.appStore) {
+    const notarized = await notarizeIfRequested(opts, appBundlePath, "app");
+    results.push(...notarized);
+    if (notarized.some((result) => !result.success))
+      return results;
+  }
   results.push({ success: true, platform: "macos", format: "app", outputPath: appBundlePath });
   if (opts.dmg !== false) {
     const outputPath = join2(outDir, `${name}-${version}.dmg`);
@@ -359,24 +365,36 @@ async function notarizeIfRequested(opts, artifactPath, format) {
       error: "Notarization requires a keychain profile, API key, or Apple ID/password/team ID"
     }];
   }
-  const submitted = await runTool("xcrun", notarytoolArguments({
-    artifactPath,
-    appleId: opts.appleId,
-    applePassword: opts.applePassword,
-    teamId: opts.teamId,
-    keychainProfile: opts.notaryKeychainProfile,
-    apiKey: opts.notaryApiKey
-  }));
-  if (!submitted.success)
-    return [{ success: false, platform: "macos", format: `${format} (notarize)`, error: submitted.error }];
-  const stapled = await runTool("xcrun", ["stapler", "staple", artifactPath]);
-  return [{
-    success: stapled.success,
-    platform: "macos",
-    format: `${format} (notarize)`,
-    outputPath: stapled.success ? artifactPath : undefined,
-    error: stapled.success ? undefined : stapled.error
-  }];
+  const scratch = format === "app" ? createTempDir("craft-notarize-") : undefined;
+  try {
+    const submission = scratch ? join2(scratch, "app.zip") : artifactPath;
+    if (scratch) {
+      const zipped = await runTool("ditto", ["-c", "-k", "--keepParent", artifactPath, submission]);
+      if (!zipped.success)
+        return [{ success: false, platform: "macos", format: `${format} (notarize)`, error: zipped.error }];
+    }
+    const submitted = await runTool("xcrun", notarytoolArguments({
+      artifactPath: submission,
+      appleId: opts.appleId,
+      applePassword: opts.applePassword,
+      teamId: opts.teamId,
+      keychainProfile: opts.notaryKeychainProfile,
+      apiKey: opts.notaryApiKey
+    }));
+    if (!submitted.success)
+      return [{ success: false, platform: "macos", format: `${format} (notarize)`, error: submitted.error }];
+    const stapled = await runTool("xcrun", ["stapler", "staple", artifactPath]);
+    return [{
+      success: stapled.success,
+      platform: "macos",
+      format: `${format} (notarize)`,
+      outputPath: stapled.success ? artifactPath : undefined,
+      error: stapled.success ? undefined : stapled.error
+    }];
+  } finally {
+    if (scratch)
+      removeTempDir(scratch);
+  }
 }
 async function packageWindows(config, outDir) {
   const results = [];
@@ -2970,7 +2988,7 @@ function pinCraftNativeDependency(packagePath, craftVersion) {
 `);
 }
 // package.json
-var version = "0.0.319";
+var version = "0.0.328";
 
 // bin/cli.ts
 var spawnedFrom = process6.env[CRAFT_CLI_SPAWN_MARKER];