kasy-cli 1.12.1 → 1.14.0

package/templates/firebase/ios/Runner/Info.plist

@@ -18,7 +18,7 @@
 			<string>pt-BR</string>
 		</array>
 		<key>CFBundleDisplayName</key>
-		<string>AppFirebase</string>
+		<string>Kasy App</string>
 		<key>CFBundleExecutable</key>
 		<string>$(EXECUTABLE_NAME)</string>
 		<key>CFBundleIdentifier</key>
@@ -57,7 +57,7 @@
 		<key>FacebookClientToken</key>
 		<string>00000000000000000000000000000000</string>
 		<key>FacebookDisplayName</key>
-		<string>AppFirebase</string>
+		<string>Kasy App</string>
 		<key>LSRequiresIPhoneOS</key>
 		<true/>
 		<key>NSPhotoLibraryAddUsageDescription</key>

package/templates/firebase/ios/Runner/es.lproj/InfoPlist.strings

@@ -1,5 +1,5 @@
 /* Localized Info.plist strings — es resources for system picker/camera UI (iOS). */
-"CFBundleDisplayName" = "AppFirebase";
+"CFBundleDisplayName" = "Kasy App";
 "NSCameraUsageDescription" = "Necesitamos la cámara para tomar fotos y vídeos.";
 "NSPhotoLibraryAddUsageDescription" = "Necesitamos acceso para guardar fotos y vídeos en la galería.";
 "NSPhotoLibraryUsageDescription" = "Necesitamos acceso para mostrar tus fotos recientes y abrir la galería desde la cámara.";

package/templates/firebase/ios/Runner/pt-BR.lproj/InfoPlist.strings

@@ -1,5 +1,5 @@
 /* Localized Info.plist strings — presence of pt-BR resources lets iOS use Portuguese for system UI (e.g. image picker). */
-"CFBundleDisplayName" = "AppFirebase";
+"CFBundleDisplayName" = "Kasy App";
 "NSCameraUsageDescription" = "Precisamos da câmera para tirar fotos e vídeos.";
 "NSPhotoLibraryAddUsageDescription" = "Precisamos de acesso para salvar fotos e vídeos na galeria.";
 "NSPhotoLibraryUsageDescription" = "Precisamos de acesso para mostrar suas fotos recentes e abrir a galeria a partir da câmera.";

package/templates/firebase/ios/Runner/pt.lproj/InfoPlist.strings

@@ -1,5 +1,5 @@
 /* Localized Info.plist strings — presence of pt-BR resources lets iOS use Portuguese for system UI (e.g. image picker). */
-"CFBundleDisplayName" = "AppFirebase";
+"CFBundleDisplayName" = "Kasy App";
 "NSCameraUsageDescription" = "Precisamos da câmera para tirar fotos e vídeos.";
 "NSPhotoLibraryAddUsageDescription" = "Precisamos de acesso para salvar fotos e vídeos na galeria.";
 "NSPhotoLibraryUsageDescription" = "Precisamos de acesso para mostrar suas fotos recentes e abrir a galeria a partir da câmera.";

package/templates/firebase/lib/components/kasy_button.dart

@@ -377,6 +377,9 @@ class KasyButton extends StatelessWidget {
     }
     final KasyColors c = context.colors;
     final Color soft = c.surfaceNeutralSoft;
+    // Variants used on non-theme-matched backgrounds (e.g. inverse on the paywall gradient)
+    // need an explicit case — the generic disabled fallback blends with surfaceNeutralSoft,
+    // which goes near-black in dark mode and kills contrast on colored surfaces.
     return switch (variant) {
       KasyButtonVariant.primary => _KasyButtonPalette(
         background: Color.alphaBlend(c.primary.withValues(alpha: 0.62), soft),
@@ -388,6 +391,11 @@ class KasyButton extends StatelessWidget {
         foreground: c.primary.withValues(alpha: 0.90),
         border: Colors.transparent,
       ),
+      KasyButtonVariant.inverse => _KasyButtonPalette(
+        background: c.onPrimary,
+        foreground: c.primary.withValues(alpha: 0.62),
+        border: Colors.transparent,
+      ),
       _ => null,
     };
   }

package/templates/firebase/lib/core/bottom_menu/kasy_bottom_bar_factory.dart

@@ -96,11 +96,29 @@ final class KasyPaddedSurfaceBottomBarFactory extends BartBottomBarFactory {
           ),
           Theme(
             data: Theme.of(context).copyWith(
+              splashFactory: NoSplash.splashFactory,
+              splashColor: Colors.transparent,
+              highlightColor: Colors.transparent,
               navigationBarTheme: NavigationBarTheme.of(context).copyWith(
                 backgroundColor: Colors.transparent,
                 elevation: 0,
                 shadowColor: Colors.transparent,
                 surfaceTintColor: Colors.transparent,
+                indicatorColor: Colors.transparent,
+                iconTheme: WidgetStateProperty.resolveWith((states) {
+                  final selected = states.contains(WidgetState.selected);
+                  return IconThemeData(
+                    color: selected ? colors.primary : colors.muted,
+                  );
+                }),
+                labelTextStyle: WidgetStateProperty.resolveWith((states) {
+                  final selected = states.contains(WidgetState.selected);
+                  final base = Theme.of(context).textTheme.labelMedium ??
+                      const TextStyle();
+                  return base.copyWith(
+                    color: selected ? colors.primary : colors.muted,
+                  );
+                }),
               ),
             ),
             child: BartMaterial3BottomBar(

package/templates/firebase/lib/core/home_widgets/home_widget_mywidget_service.dart

@@ -1,7 +1,10 @@
+import 'dart:async';
+import 'dart:io' show Platform;
+
+import 'package:flutter/foundation.dart' show kIsWeb;
 import 'package:home_widget/home_widget.dart';
 import 'package:kasy_kit/core/data/models/user.dart';
 import 'package:kasy_kit/core/home_widgets/home_widget_service.dart';
-import 'package:kasy_kit/core/states/translations.dart';
 import 'package:kasy_kit/core/states/user_state_notifier.dart';
 import 'package:kasy_kit/features/subscription/repositories/subscription_repository.dart';
 import 'package:kasy_kit/i18n/translations.g.dart';
@@ -19,10 +22,11 @@ class MyWidgetHomeWidget extends _$MyWidgetHomeWidget
   @override
   void build() {
     // Auto-refresh the widget whenever user state changes in a way that
-    // affects what it renders (login/logout, name, premium status). Without
-    // this, the widget would only update via the 15-min background task or
-    // a manual trigger — a fresh subscription would not reflect on the home
-    // screen until the next background tick.
+    // affects what it renders (login/logout, name, email, premium status).
+    // The initial render is triggered explicitly by HomeWidgetsManager.init()
+    // after setAppGroupId completes — putting it here would race with the
+    // app-group setup and the first saveWidgetData could land in the wrong
+    // UserDefaults suite.
     ref.listen(userStateNotifierProvider, (previous, next) {
       if (previous == null) return;
       if (_widgetSignature(previous.user) != _widgetSignature(next.user)) {
@@ -33,7 +37,7 @@ class MyWidgetHomeWidget extends _$MyWidgetHomeWidget
 
   /// Snapshot of the user fields the widget reads. Used to skip the update
   /// when an unrelated field changes (e.g. lastUpdateDate refresh).
-  (String?, String?, bool) _widgetSignature(User user) {
+  (String?, String?, String?, bool) _widgetSignature(User user) {
     final isPro = switch (user) {
       AuthenticatedUserData(:final subscription) ||
       AnonymousUserData(:final subscription) =>
@@ -44,34 +48,62 @@ class MyWidgetHomeWidget extends _$MyWidgetHomeWidget
       AuthenticatedUserData(:final name) => name,
       _ => null,
     };
-    return (user.idOrNull, name, isPro);
+    final email = switch (user) {
+      AuthenticatedUserData(:final email) => email,
+      _ => null,
+    };
+    return (user.idOrNull, name, email, isPro);
   }
 
   @override
-  Future<void> update() async {
+  Future<void> update() => updateForLocale(LocaleSettings.currentLocale);
+
+  /// Same as [update] but renders against an explicit locale. Use this
+  /// from the language picker so the widget never falls one step behind:
+  /// `LocaleSettings.setLocale` propagates to `currentLocale` over a
+  /// frame boundary, and an [update] call scheduled at the same time
+  /// can race with it. Passing the locale removes the race.
+  Future<void> updateForLocale(AppLocale locale) async {
     final logger = Logger();
-    logger.i('🔄 Updating MyWidget Home Widget');
+    logger.i('🔄 Updating MyWidget Home Widget (${locale.languageCode})');
     final user = ref.read(userStateNotifierProvider).user;
-    final t = ref.read(translationsProvider);
+    final t = locale.translations;
+
+    // "Logged out" = no user id at all (post-logout in authRequired mode, or
+    // before any anonymous signup completes). In this state we show a
+    // come-back message and hide the plan tag — showing a plan would be
+    // misleading when there is no account behind it.
+    final isLoggedOut = user.idOrNull == null;
 
     final name = switch (user) {
       AuthenticatedUserData(:final name)
           when name != null && name.isNotEmpty =>
         name.split(' ').first,
+      // Fallback when the Firestore profile has no name yet: derive a
+      // display name from the email local-part (matches what the
+      // settings page shows).
+      AuthenticatedUserData(:final email) => email.split('@').first,
       _ => null,
     };
 
-    final isPro = await _resolveIsPro(user);
+    final isPro = !isLoggedOut && await _resolveIsPro(user);
 
     final greeting = _greeting(t);
-    final title = name == null
-        ? t.home_widget.title_default
-        : t.home_widget.title_with_name(name: name);
-    final planText = isPro ? t.home_widget.plan_pro : t.home_widget.plan_free;
+    final title = isLoggedOut
+        ? t.home_widget.title_logged_out
+        : name == null
+            ? t.home_widget.title_default
+            : t.home_widget.title_with_name(name: name);
+    // Empty planText is the contract used by the native widget to skip
+    // rendering the pill — see MyWidget.swift / MyWidget.kt.
+    final planText = isLoggedOut
+        ? ''
+        : (isPro ? t.home_widget.plan_pro : t.home_widget.plan_free);
+    final quote = t.home_widget.quote;
 
     logger.d(
       'Widget payload → greeting: "$greeting", title: "$title", '
-      'planText: "$planText", isPro: $isPro',
+      'planText: "$planText", isPro: $isPro, loggedOut: $isLoggedOut',
     );
 
     return updateWidget({
@@ -79,6 +111,7 @@ class MyWidgetHomeWidget extends _$MyWidgetHomeWidget
       'title': title,
       'planText': planText,
       'isPro': isPro.toString(),
+      'quote': quote,
     });
   }
 
@@ -98,9 +131,14 @@ class MyWidgetHomeWidget extends _$MyWidgetHomeWidget
     if (userId == null) return cached;
     try {
       final repo = ref.read(subscriptionRepositoryProvider);
-      await repo.initUser(userId);
-      final fresh = await repo.get(userId);
-      return fresh.isActive;
+      // 2s timeout — if RevenueCat/network is slow, fall back to the cached
+      // value so the widget renders promptly on first install. The next
+      // background tick (or any user-state change) will reconcile later.
+      return await Future(() async {
+        await repo.initUser(userId);
+        final fresh = await repo.get(userId);
+        return fresh.isActive;
+      }).timeout(const Duration(seconds: 2), onTimeout: () => cached);
     } catch (e) {
       Logger().w('Widget could not refresh subscription: $e (using cached)');
       return cached;
@@ -112,6 +150,16 @@ class MyWidgetHomeWidget extends _$MyWidgetHomeWidget
     await HomeWidget.saveWidgetData<String>('title', data['title'] ?? '');
     await HomeWidget.saveWidgetData<String>('planText', data['planText'] ?? '');
     await HomeWidget.saveWidgetData<String>('isPro', data['isPro'] ?? 'false');
+    await HomeWidget.saveWidgetData<String>('quote', data['quote'] ?? '');
+
+    // On Android, saveWidgetData writes to SharedPreferences asynchronously.
+    // Glance's HomeWidgetGlanceStateDefinition reads from the same prefs, but
+    // a tight saveWidgetData→updateWidget sequence can race with the commit —
+    // Glance occasionally recomposes with the previous values (most visible
+    // right after a locale change). A small yield lets the writes settle.
+    if (!kIsWeb && Platform.isAndroid) {
+      await Future<void>.delayed(const Duration(milliseconds: 120));
+    }
 
     await HomeWidget.updateWidget(
       name: _androidWidgetName,

package/templates/firebase/lib/core/home_widgets/home_widget_service.dart

@@ -1,3 +1,5 @@
+import 'dart:async';
+
 import 'package:background_fetch/background_fetch.dart';
 import 'package:flutter/foundation.dart';
 import 'package:flutter_riverpod/flutter_riverpod.dart';
@@ -8,14 +10,7 @@ import 'package:kasy_kit/core/initializer/onstart_service.dart';
 import 'package:logger/logger.dart';
 
 final homeWidgetsManagerProvider = Provider<HomeWidgetsManager>(
-  (ref) {
-    // Force-build the widget service at app startup so its user-state
-    // listener attaches and the widget auto-refreshes when subscription
-    // status or other relevant fields change. Without this read, the
-    // listener would only attach on first manual update.
-    ref.read(myWidgetHomeWidgetProvider.notifier);
-    return HomeWidgetsManager();
-  },
+  (ref) => HomeWidgetsManager(ref),
 );
 
 const String appGroupId = 'group.com.aicrus.firebase.kit';
@@ -26,12 +21,31 @@ const String appGroupId = 'group.com.aicrus.firebase.kit';
 /// will be used to initialize the home widgets and set the app group id
 /// Register the background task for the home widgets
 class HomeWidgetsManager implements OnStartService {
+  HomeWidgetsManager(this._ref);
+
+  final Ref _ref;
+
   @override
   Future<void> init() async {
     if (kIsWeb) return;
     try {
+      // Must be set BEFORE any saveWidgetData call, otherwise the data lands
+      // in the default UserDefaults suite and the native widget extension
+      // (which reads from the app group) sees nothing.
       await HomeWidget.setAppGroupId(appGroupId);
 
+      // Read the widget notifier so its user-state listener attaches —
+      // future state changes (login/logout, subscription) auto-refresh
+      // the widget without waiting for the 15-min background tick.
+      final myWidget = _ref.read(myWidgetHomeWidgetProvider.notifier);
+      // Push initial data so the widget renders something on first install
+      // instead of staying blank until the background task fires.
+      // Fire-and-forget: we do NOT await here because update() may do a
+      // network call (RevenueCat) that could stall app startup and even
+      // prevent BackgroundFetch from being configured. setAppGroupId has
+      // already completed, so it is safe to fire it off now.
+      unawaited(myWidget.update());
+
       final status = await BackgroundFetch.configure(
         BackgroundFetchConfig(
           minimumFetchInterval: 15,

package/templates/firebase/lib/core/shared_preferences/shared_preferences.dart

@@ -60,11 +60,23 @@ class SharedPreferencesBuilder implements OnStartService {
     return prefs.getBool('biometric_enabled') ?? false;
   }
 
-  Future<void> setBiometricPromptShown(bool shown) async {
-    await prefs.setBool('biometric_prompt_shown', shown);
+  /// How many times the user dismissed the ATT soft prompt without accepting.
+  /// Used to back off and eventually stop asking. See [MaybeShowAttPermission].
+  int getAttSoftDismissCount() {
+    return prefs.getInt('att_soft_dismiss_count') ?? 0;
   }
 
-  bool getBiometricPromptShown() {
-    return prefs.getBool('biometric_prompt_shown') ?? false;
+  Future<void> setAttSoftDismissCount(int count) async {
+    await prefs.setInt('att_soft_dismiss_count', count);
+  }
+
+  DateTime? getAttSoftLastAskedAt() {
+    final millis = prefs.getInt('att_soft_last_asked_at');
+    if (millis == null) return null;
+    return DateTime.fromMillisecondsSinceEpoch(millis);
+  }
+
+  Future<void> setAttSoftLastAskedAt(DateTime when) async {
+    await prefs.setInt('att_soft_last_asked_at', when.millisecondsSinceEpoch);
   }
 }

package/templates/firebase/lib/core/states/components/maybeshow_component.dart

@@ -13,20 +13,16 @@ import 'package:kasy_kit/core/states/models/event_model.dart';
 /// Ex of usage:
 /// @override
 ///  Widget build(BuildContext context) {
-///    final homeState = ref.watch(homeNotifierProvider);
-///    final userState = ref.watch(userStateNotifierProvider);
-///    // final translations = ref.watch(translationsProvider);
-///
 ///    return ConditionalWidgetsEvents(
 ///      eventWidgets: [
 ///        MaybeShowPremiumPage(),
-///        MaybeShowNotificationPermission(),
-///        MaybeLevelUpBottomSheet(),
+///        MaybeShowAttPermission(),
 ///        MaybeAskForReview(),
 ///        MaybeAskForRating(),
 ///      ],
-///      child: Background.blue(
-///        child: SafeArea(...
+///      child: ...,
+///    );
+///  }
 /// A widget that can be shown or not based on a condition.
 sealed class MaybeShow {}
 

package/templates/firebase/lib/core/states/user_state_notifier.dart

@@ -6,6 +6,7 @@ import 'package:kasy_kit/core/data/models/subscription.dart';
 import 'package:kasy_kit/core/data/models/user.dart';
 import 'package:kasy_kit/core/data/repositories/user_repository.dart';
 import 'package:kasy_kit/core/initializer/onstart_service.dart';
+import 'package:kasy_kit/core/shared_preferences/shared_preferences.dart';
 import 'package:kasy_kit/core/states/models/user_state.dart';
 import 'package:kasy_kit/environnements.dart';
 import 'package:kasy_kit/features/authentication/repositories/authentication_repository.dart';
@@ -125,8 +126,19 @@ class UserStateNotifier extends _$UserStateNotifier implements OnStartService {
   Future<void> onLogout() async {
     final userId = state.user.idOrThrow;
     _deviceRepository.removeTokenUpdateListener();
-    await _deviceRepository.unregister(userId);
+    // Best-effort: if the network call fails we still proceed with logout so
+    // the user is never stuck on the previous account. A stale device doc on
+    // the old user is cleaned up server-side by the cross-user token dedup
+    // trigger when the same install registers under a new account.
+    try {
+      await _deviceRepository.unregister(userId);
+    } catch (e) {
+      _logger.w('Failed to unregister device during logout: $e');
+    }
     await _authenticationRepository.logout();
+    // Biometric lock is a per-account preference, not a device-wide one.
+    // The next user signing in on this install should start without it set.
+    await ref.read(sharedPreferencesProvider).setBiometricEnabled(false);
     state = const UserState(user: User.anonymous());
     if (mode == AuthenticationMode.anonymous) {
       await _loadAnonymousState();

package/templates/firebase/lib/core/theme/providers/theme_provider.dart

@@ -17,13 +17,8 @@ class ThemeProvider extends InheritedNotifier<AppTheme> {
 
   @override
   bool updateShouldNotify(covariant InheritedNotifier<AppTheme> oldWidget) {
-    final isModeChanged = oldWidget.notifier!.mode != notifier!.mode;
-    if (isModeChanged) {
-      // keeep the same theme when switching between light and dark mode while hot reloading
-      notifier!.mode = oldWidget.notifier!.mode;
-      notifier!.setSystemBarColor();
-    }
-    return false;
+    return oldWidget.notifier != notifier ||
+        oldWidget.notifier?.mode != notifier?.mode;
   }
 
   static AppTheme of(BuildContext context) =>
@@ -37,7 +32,7 @@ class ThemeProvider extends InheritedNotifier<AppTheme> {
 ///
 /// Defining a theme for light and dark should only change the colors
 /// not redefining everything. (see ./docs/theme.md)
-class AppTheme with ChangeNotifier {
+class AppTheme with ChangeNotifier, WidgetsBindingObserver {
   final KasyTheme? lightTheme;
   final KasyTheme? darkTheme;
   final SharedPreferences sharedPreferences;
@@ -50,6 +45,7 @@ class AppTheme with ChangeNotifier {
     this.darkTheme,
   }) {
     mode = _loadFromPrefs();
+    WidgetsBinding.instance.addObserver(this);
     setSystemBarColor();
   }
 
@@ -135,25 +131,55 @@ class AppTheme with ChangeNotifier {
     );
   }
 
-  /// automatically toggle between light and dark mode
-  /// call this using AppTheme.of(context).toggle()
-  void toggle() {
-    mode = mode == ThemeMode.light ? ThemeMode.dark : ThemeMode.light;
+  @override
+  void didChangePlatformBrightness() {
+    super.didChangePlatformBrightness();
+    if (mode == ThemeMode.system) {
+      setSystemBarColor();
+      notifyListeners();
+    }
+  }
+
+  @override
+  void dispose() {
+    WidgetsBinding.instance.removeObserver(this);
+    super.dispose();
+  }
+
+  /// Resolves [mode] to either light or dark by reading the system brightness
+  /// when [mode] is [ThemeMode.system].
+  ThemeMode get effectiveMode {
+    if (mode != ThemeMode.system) return mode;
+    final brightness =
+        WidgetsBinding.instance.platformDispatcher.platformBrightness;
+    return brightness == Brightness.dark ? ThemeMode.dark : ThemeMode.light;
+  }
+
+  /// Set the theme mode and persist the preference.
+  void setMode(ThemeMode newMode) {
+    if (mode == newMode) return;
+    mode = newMode;
     _saveInPrefs(mode);
-    notifyListeners();
     setSystemBarColor();
+    notifyListeners();
+  }
+
+  /// Toggle between light and dark based on the effective (visible) mode.
+  /// If the user is in system mode, this picks the opposite of the
+  /// currently displayed brightness and switches out of system mode.
+  void toggle() {
+    final next =
+        effectiveMode == ThemeMode.light ? ThemeMode.dark : ThemeMode.light;
+    setMode(next);
   }
 
   void setSystemBarColor() {
+    final isLight = effectiveMode == ThemeMode.light;
     SystemChrome.setSystemUIOverlayStyle(
       SystemUiOverlayStyle(
         statusBarColor: Colors.transparent,
-        statusBarBrightness:
-            mode == ThemeMode.light ? Brightness.light : Brightness.dark,
-        statusBarIconBrightness:
-            mode == ThemeMode.light ? Brightness.dark : Brightness.light,
-        // statusBarColor: Colors.black, // color for android
-        // statusBarBrightness: Brightness.light, // for ios Dark = white status
+        statusBarBrightness: isLight ? Brightness.light : Brightness.dark,
+        statusBarIconBrightness: isLight ? Brightness.dark : Brightness.light,
       ),
     );
   }
@@ -189,11 +215,7 @@ class AppTheme with ChangeNotifier {
   ThemeData get darkThemeData => darkTheme!.data.materialTheme;
 
   KasyTheme get current {
-    if (mode == ThemeMode.light) {
-      return lightTheme!;
-    } else {
-      return darkTheme!;
-    }
+    return effectiveMode == ThemeMode.dark ? darkTheme! : lightTheme!;
   }
 
   ThemeMode _loadFromPrefs() {
@@ -202,6 +224,8 @@ class AppTheme with ChangeNotifier {
       return ThemeMode.dark;
     } else if (themeMode == ThemeMode.light.name) {
       return ThemeMode.light;
+    } else if (themeMode == ThemeMode.system.name) {
+      return ThemeMode.system;
     }
     return mode;
   }

package/templates/firebase/lib/features/home/home_page.dart

@@ -4,7 +4,6 @@ import 'package:kasy_kit/components/kasy_app_bar.dart';
 import 'package:kasy_kit/core/bottom_menu/bart_inner_paths.dart';
 import 'package:kasy_kit/core/bottom_menu/kasy_bart_navigation.dart';
 import 'package:kasy_kit/core/haptics/kasy_haptics.dart';
-import 'package:kasy_kit/core/states/components/maybe_ask_biometric_setup.dart';
 import 'package:kasy_kit/core/states/components/maybe_ask_rating.dart';
 import 'package:kasy_kit/core/states/components/maybe_show_update_bottom_sheet.dart';
 import 'package:kasy_kit/core/states/components/maybeshow_component.dart';
@@ -12,7 +11,6 @@ import 'package:kasy_kit/core/theme/theme.dart';
 import 'package:kasy_kit/features/home/home_components_page.dart';
 import 'package:kasy_kit/features/home/home_features_page.dart';
 import 'package:kasy_kit/features/notifications/shared/att_permission.dart';
-import 'package:kasy_kit/features/notifications/shared/notification_permission_bottom_sheet.dart';
 import 'package:kasy_kit/features/subscription/shared/maybeshow_premium.dart';
 import 'package:kasy_kit/i18n/translations.g.dart';
 
@@ -27,13 +25,9 @@ class HomePage extends ConsumerWidget {
       eventWidgets: [
         MaybeAskForReview(),
         MaybeAskForRating(),
-        // First OnAppStart handler that may return true — premium / notifications
-        // no longer suppress the biometric one-shot prompt.
-        MaybeAskBiometricSetup(),
         MaybeShowPremiumPage(),
         MaybeShowUpdateBottomSheet(),
         MaybeShowAttPermission(),
-        MaybeShowNotificationPermission(),
       ],
       child: ColoredBox(
         color: context.colors.background,

package/templates/firebase/lib/features/notifications/api/device_api.dart

@@ -38,6 +38,15 @@ abstract class DeviceApi {
   /// Unregister the device in the backend
   Future<void> unregister(String userId, String deviceId);
 
+  /// Heartbeat — update the `lastUpdateDate` on the current device doc.
+  /// Used so the backend can detect orphaned device docs from previous installs.
+  Future<void> touch(String userId, String installationId);
+
+  /// Delete device docs of the same user that haven't been touched in a while.
+  /// Called after registering a fresh installation to remove orphans left by
+  /// previous installs (whose installationId no longer matches).
+  Future<void> cleanupStaleDevices(String userId, String currentInstallationId);
+
   /// Listen to token refresh
   void onTokenRefresh(OnTokenRefresh onTokenRefresh);
 
@@ -167,6 +176,54 @@ class FirebaseDeviceApi implements DeviceApi {
     }
   }
 
+  @override
+  Future<void> touch(String userId, String installationId) async {
+    try {
+      await retryOnFirestoreUnavailable(
+        () => _client
+            .collection('users')
+            .doc(userId)
+            .collection('devices')
+            .doc(installationId)
+            .update({'lastUpdateDate': Timestamp.now()}),
+      );
+    } catch (_) {
+      // Missing doc — happens if the device was unregistered or never saved.
+      // Caller (DeviceRepository) recovers by re-registering on next session.
+    }
+  }
+
+  @override
+  Future<void> cleanupStaleDevices(
+    String userId,
+    String currentInstallationId,
+  ) async {
+    // Devices not touched in the last 30 days are treated as orphans from
+    // previous installations on the same physical device. Real second devices
+    // that the user actively uses stay above this threshold via heartbeat.
+    final cutoff = DateTime.now().subtract(const Duration(days: 30));
+    try {
+      final snapshot = await _client
+          .collection('users')
+          .doc(userId)
+          .collection('devices')
+          .where('lastUpdateDate', isLessThan: Timestamp.fromDate(cutoff))
+          .get();
+      final batch = _client.batch();
+      var hasDeletions = false;
+      for (final doc in snapshot.docs) {
+        if (doc.id == currentInstallationId) continue;
+        batch.delete(doc.reference);
+        hasDeletions = true;
+      }
+      if (hasDeletions) {
+        await batch.commit();
+      }
+    } catch (e) {
+      Logger().w('cleanupStaleDevices failed: $e');
+    }
+  }
+
   @override
   void onTokenRefresh(OnTokenRefresh onTokenRefresh) {
     _onTokenRefreshSubscription =

package/templates/firebase/lib/features/notifications/providers/models/notification.dart

@@ -117,6 +117,8 @@ sealed class NotificationPermission {
         await permission.ask();
       case NotificationPermissionDenied():
         await permission.ask();
+      case NotificationPermissionPermanentlyDenied():
+        await permission.openSettings();
       case NotificationPermissionGranted():
         await permission.ensureSetup();
     }
@@ -151,7 +153,7 @@ class NotificationPermissionGranted extends NotificationPermission {
   }
 }
 
-/// we asked for permission and it was denied
+/// we asked for permission and it was denied (but can still be asked again)
 class NotificationPermissionDenied extends NotificationPermission {
   final NotificationSettings? _notificationSettings;
   final NotificationsRepository? _repository;
@@ -175,6 +177,14 @@ class NotificationPermissionDenied extends NotificationPermission {
   }
 }
 
+/// User denied the permission and the OS will not show the native prompt again.
+/// The only way back is the system settings of the app.
+class NotificationPermissionPermanentlyDenied extends NotificationPermission {
+  Future<void> openSettings() async {
+    await openAppSettings();
+  }
+}
+
 /// we never asked for permission
 class NotificationPermissionWaiting extends NotificationPermission {
   final NotificationSettings? _notificationSettings;