[BGLuis]

Summary

Implements Epic #210 across 5 atomic commits covering container allowlists, whole-word 3D filename token detection, 3D view controls in the format modal, per-file fisheye lens FOV, and manifest/analytics CI guards:

1. [FEATURE] File browser: list .m4v, .m2ts, .mts and .mk3d videos #211 (141d626) — File browser container allowlists:
   • Adds .m4v, .m2ts, .mts, and .mk3d to DirectoryLister.VIDEO_EXTENSIONS and folder_scan::MEDIA_EXTENSIONS while keeping .vob, .asf, .ogv, and .rm excluded.
2. [BUG] 3D detection: match filename tokens as whole words on any separator #212 (a4c7041) — Whole-word 3D filename token matching:
   • Splits lowercase stem on non-alphanumeric separators in rust/media-logic/src/format3d.rs (detect_from_filename) and matches whole tokens and adjacent token pairs (half + sbs, 3d + sbs, etc.), adding fsbs, fou, and tb.
   • Matches projection numbers (180, 360, 360x180, 180x180) only as whole tokens so resolution tags (360p, 180p) and words sharing a prefix (out, ou2, lrx, table) no longer trigger false positives.
   • Adds .fsbs., .fou., and .tb. patterns to MediaFilterEngine.kt.
3. [FEATURE] Screen format modal: restore swap eyes and add a 2D view of 3D #213 (3d50613) — Restore Swap Eyes and add 2D view in ScreenFormatModal:
   • Adds MONO_VIEW atomic flag (toggle_mono_view, get_mono_view) in rust/bridge/src/lib.rs, cleared on reset_process_state().
   • Forces eyeIndex = 0 and swapEyes = 0 for both eyes in GetStereoParams when MONO_VIEW is active on a stereo layout.
   • Exports JNI bridges (nativeGetSwapEyes, nativeToggleMonoView, nativeGetMonoView) in both vr_player_jni_vulkan.cpp and vr_player_app.cpp.
   • Adds ScreenFormatCatalog.isStereo and a "3D view" toggle row (player_btn_swap_eyes and player_btn_2d_view) in ScreenFormatModal.kt across all 3 locales.
4. [FEATURE] Fisheye: make the lens field of view a per-file setting #214 (017a362) — Per-file Fisheye lens FOV (180°, 190°, 200°, 220°):
   • Packs polarMode (bits 0..7) and fisheyeFov (bits 8..23) into the 32-bit polar180 field via native/include/polar_mode.h, preserving sizeof(StereoPushConstants) == 128 (enforced by static_assert).
   • Decodes the FOV in native/shaders/vulkan/stereo.frag (defaulting to 190° when unset) and masks polar180 & 0xFF in debug stats and logs.
   • Adds FisheyeFovPreferenceStore keyed by historyKey and a 4-option angle selector in ScreenFormatModal for Fisheye190 and Fisheye190SBS.
5. [FEATURE] Tests: fail when a manifest permission or analytics dependency is added #215 (7b844b0) — Manifest permission & analytics dependency guard test:
   • Seeds app/config/manifest-guards/permissions.txt from AndroidManifest.xml and adds ManifestGuardTest to fail on unapproved or stale <uses-permission> / <uses-feature> entries and on analytics/crash-reporting artifacts in app/build.gradle.kts.

Verification

• cd rust && cargo fmt --check
• cd rust && cargo clippy -p protocols -p media-logic --all-targets --all-features -- -D warnings
• cd rust && cargo test -p protocols -p media-logic
• ./scripts/check-shaders.sh
• clang-format --dry-run -Werror on native test and header files
• ENABLE_ASAN=1 ./scripts/test-native-host.sh (including TestPolarModeEncodeDecode)
• ./gradlew ktlintCheck testDebugUnitTest :app:lintDebug -PrustBuildMode=skip (including DirectoryListerTest, MediaFilterEngineTest, ScreenFormatCatalogTest, FisheyeFovPreferenceStoreTest, ManifestGuardTest, I18nParityTest, UiSourceGuardsTest)
• Physical Meta Quest 3 verification (needs-headset items in [FEATURE] File browser: list .m4v, .m2ts, .mts and .mk3d videos #211, [FEATURE] Screen format modal: restore swap eyes and add a 2D view of 3D #213, [FEATURE] Fisheye: make the lens field of view a per-file setting #214)

Closes #211
Closes #212
Closes #213
Closes #214
Closes #215
Closes #210

[BGLuis]

The epic lands in five clean, one-issue commits, and the hard parts are done carefully: the FOV is packed into polar180 instead of growing StereoPushConstants (now pinned by static_assert), the 2D view is a single edit in GetStereoParams that both RecordStereoFrame paths pick up through sp.eyeIndex, MONO_VIEW is cleared in reset_process_state() next to SWAP_EYES, and the GLES fallback gets the JNI symbols so it can't hit UnsatisfiedLinkError. ManifestGuardTest follows the UiSourceGuardsTest pattern and fails on new and stale entries, as #215 asks.

No blocking findings. My comments are mostly about the filename detector, where the tokenizer changes more than #212 describes.

Main points

• Projection order in detect_from_filename: the bare-360 check now runs before the cubemap checks, so has_token("360") in the 6x1 rule can never fire, and dot/dash names like tour.360.6x1.mp4 go from Cubemap6x1Mono to Spherical360Mono (reproduced; inline).
• The detector gains matches #212 didn't ask for: a bare vr token now means VR180 SBS (family_vr.mp4), and bare fisheye / fisheye180|200|220 / mkx200 map to fisheye, while the FOV from the name is never used, so clip_fisheye_220 plays at 190° (inline).
• 2D view stays on across files and the swap is sticky too. #213 left that as an open question; could the answer be written down in the issue?

Smaller

• The detect_from_filename doc comment and FilenameProjection variant docs still describe substring matching.
• New and edited comments in ScreenFormatModal.kt and stereo.frag are in Portuguese (CLAUDE.md asks for English).
• polar_mode.h isn't in the CI clang-format file list.
• ManifestGuardTest reads the source manifest, so permissions merged in from a dependency's AAR aren't covered.
• 15 || 16 and 190 are repeated as literals.

Dependencies: no lockfile or manifest version changed (dependency_diff.py). New library calls: SharedPreferences.edit().putInt().apply(), the same pattern as Format3DPreferenceStore; std::atomic and slice::windows. Nothing deprecated there, and the build showed no deprecation warnings on changed lines. Toolchain pins and dependency placement unchanged.

Checked: every changed line against CLAUDE.md (layering Kotlin→JNI→C++→Rust, GLES frozen, i18n positional placeholders and parity, English comments), the four-place screen-mode sync (no index changed), and the acceptance criteria of #211–#215.
Ran (in a separate worktree at 7b844b0): cargo fmt --check, cargo clippy -p protocols -p media-logic --all-targets --all-features -- -D warnings, cargo test -p protocols -p media-logic (all pass); ./scripts/check-shaders.sh (22 OK); ENABLE_ASAN=1 ./scripts/test-native-host.sh (all pass, including TestPolarModeEncodeDecode); clang-format --dry-run -Werror on polar_mode.h and test_screen_mode.cpp (clean); ./gradlew ktlintCheck testDebugUnitTest :app:lintDebug -PrustBuildMode=skip (pass).
Probes (thrown away afterwards): an old-vs-new run of detect_from_filename on about 40 names (the source of the detector points). #215 negatives: adding READ_PHONE_STATE, or removing ACCESS_WIFI_STATE from the manifest, makes ManifestGuardTest fail. Note that the literal criterion implementation("com.google.firebase:firebase-analytics:1.0.0") fails in checkDebugAarMetadata because that version doesn't exist, before the guard runs; with the same coordinate as a plain string in build.gradle.kts, testNoAnalyticsOrCrashReportingDependenciesInBuildGradle fails as intended.
Not run: assembleDebug with the real native + Rust build (the static_assert and the Vulkan/GLES TUs compiled only in CI's build-apk, which is green), and anything on the Quest 3: the headset criteria of #211, #213 and #214 are still unverified.

[BGLuis]

Addressed in 3d50613: 2D view is kept sticky across video loads during the playback session (matching Swap Eyes), and is only reset on full player teardown in reset_process_state(), so users watching stereoscopic playlists in 2D do not have to re-enable it on every track change.