@adminide-stack/yantra-mobile 12.0.69-alpha.9 → 12.0.69

package/lib/hooks/useObtainSystemToken.js

@@ -1,4 +1,4 @@
-import {useCallback}from'react';import {useCreateSecretApiTokenMutation,useRevealSecretApiTokenMutation,useRevokeSecretApiTokenMutation,useGetUserSystemTokenQuery}from'common/graphql';import {SecretApiTokenAlgorithm}from'common';import {usePrerequisiteIds}from'./usePrerequisiteIds.js';import {isSystemTokenRowStale,isMissingRs256KeyError,isAlreadyHasSystemTokenError,isMissingVaultSecretError,isJwtExpired}from'./systemTokenJwt.js';var __defProp = Object.defineProperty;
+import {useRef,useCallback}from'react';import {useCreateSecretApiTokenMutation,useRevealSecretApiTokenMutation,useRevokeSecretApiTokenMutation,useGetUserSystemTokenQuery}from'common/graphql';import {SecretApiTokenAlgorithm}from'common';import {usePrerequisiteIds}from'./usePrerequisiteIds.js';import {isSystemTokenRowStale,isMissingRs256KeyError,isAlreadyHasSystemTokenError,isMissingVaultSecretError,isJwtExpired}from'./systemTokenJwt.js';var __defProp = Object.defineProperty;
 var __getOwnPropSymbols = Object.getOwnPropertySymbols;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __propIsEnum = Object.prototype.propertyIsEnumerable;
@@ -20,6 +20,7 @@ function useObtainSystemToken(enabled = true) {
     projectId,
     tagId
   } = usePrerequisiteIds();
+  const lastError = useRef(null);
   const [createTokenMutation] = useCreateSecretApiTokenMutation();
   const [revealTokenMutation] = useRevealSecretApiTokenMutation();
   const [revokeTokenMutation] = useRevokeSecretApiTokenMutation();
@@ -49,6 +50,7 @@ function useObtainSystemToken(enabled = true) {
   }, [createTokenMutation, orgName, projectId, tagId]);
   const obtainSystemToken = useCallback(async (opts = {}) => {
     var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _A, _B, _C, _D, _E, _F;
+    lastError.current = null;
     try {
       let tokenId = (_b = (_a = systemTokenData == null ? void 0 : systemTokenData.getUserSystemToken) == null ? void 0 : _a.id) != null ? _b : null;
       let expiresAt = (_d = (_c = systemTokenData == null ? void 0 : systemTokenData.getUserSystemToken) == null ? void 0 : _c.expiresAt) != null ? _d : null;
@@ -71,10 +73,13 @@ function useObtainSystemToken(enabled = true) {
       }
       if (!tokenId) {
         if (!orgName || !projectId || !tagId) {
+          const missing = [!orgName && "organization", !projectId && "project", !tagId && "environment"].filter(Boolean).join(", ");
+          lastError.current = `Your account is still being set up (${missing} not ready). Try again in a moment.`;
           return null;
         }
         if (!__DEV__ && projectId === "9a8ac704-1040-4836-9b72-48b771ca91b1") {
           console.warn("[useObtainSystemToken] refusing staging mint with testing project UUID");
+          lastError.current = "Your account has no project yet. Try again in a moment.";
           return null;
         }
         try {
@@ -99,13 +104,19 @@ function useObtainSystemToken(enabled = true) {
             const refetchResult = await refetchSystemToken().catch(() => null);
             tokenId = (_A = (_z = (_y = refetchResult == null ? void 0 : refetchResult.data) == null ? void 0 : _y.getUserSystemToken) == null ? void 0 : _z.id) != null ? _A : null;
             expiresAt = (_D = (_C = (_B = refetchResult == null ? void 0 : refetchResult.data) == null ? void 0 : _B.getUserSystemToken) == null ? void 0 : _C.expiresAt) != null ? _D : expiresAt;
-            if (!tokenId) return null;
+            if (!tokenId) {
+              lastError.current = "System token exists but could not be loaded.";
+              return null;
+            }
           } else {
             throw createErr;
           }
         }
       }
-      if (!tokenId) return null;
+      if (!tokenId) {
+        lastError.current = "The server did not create a system token.";
+        return null;
+      }
       let token = null;
       try {
         const {
@@ -137,7 +148,10 @@ function useObtainSystemToken(enabled = true) {
           createData = (await createSystemToken(SecretApiTokenAlgorithm.Hs256)).data;
         }
         const newTokenId = (_F = (_E = createData == null ? void 0 : createData.createSecretApiToken) == null ? void 0 : _E.id) != null ? _F : null;
-        if (!newTokenId) return null;
+        if (!newTokenId) {
+          lastError.current = "The server did not recreate the system token.";
+          return null;
+        }
         const {
           data: revealData
         } = await revealTokenMutation({
@@ -152,18 +166,22 @@ function useObtainSystemToken(enabled = true) {
           discardExistingRow: true
         });
       }
+      if (!token) lastError.current = "The server returned an empty system token.";
       return token;
     } catch (err) {
       console.error("[useObtainSystemToken] error:", err);
+      lastError.current = `System token error: ${err instanceof Error ? err.message : String(err)}`;
       return null;
     }
   }, [systemTokenData, createSystemToken, revealTokenMutation, revokeTokenMutation, refetchSystemToken, orgName, projectId, tagId]);
   const regenerateSystemToken = useCallback(() => obtainSystemToken({
     discardExistingRow: true
   }), [obtainSystemToken]);
+  const getLastError = useCallback(() => lastError.current, []);
   return {
     loading,
     obtainSystemToken,
-    regenerateSystemToken
+    regenerateSystemToken,
+    getLastError
   };
 }export{useObtainSystemToken};//# sourceMappingURL=useObtainSystemToken.js.map

package/lib/hooks/useObtainSystemToken.js.map

@@ -1 +1 @@
-{"version":3,"file":"useObtainSystemToken.js","sources":["../../src/hooks/useObtainSystemToken.ts"],"sourcesContent":["/**\n * Mint / reveal the org-scoped system JWT (GetUserSystemToken → RevealSecretApiToken).\n * Same token the webbuilder surface expects as `cdecli_token` / `?token=`.\n *\n * Matches web `useObtainSystemToken`: revoke a stale/rejected row before create\n * (one-per-user), and do not force HS256 — the backend default is HS256 when no\n * RS256 private key is present; forcing HS256 forever re-reveals a JWT signed\n * with a rotated secret.\n */\n\nimport { useCallback } from 'react';\nimport {\n    useGetUserSystemTokenQuery,\n    useCreateSecretApiTokenMutation,\n    useRevealSecretApiTokenMutation,\n    useRevokeSecretApiTokenMutation,\n} from 'common/graphql';\nimport { SecretApiTokenAlgorithm } from 'common';\nimport { usePrerequisiteIds } from './usePrerequisiteIds';\nimport {\n    isAlreadyHasSystemTokenError,\n    isJwtExpired,\n    isMissingRs256KeyError,\n    isMissingVaultSecretError,\n    isSystemTokenRowStale,\n} from './systemTokenJwt';\n\nexport interface ObtainSystemTokenOptions {\n    /** Revoke the server row first (dead signature, key rotation). */\n    discardExistingRow?: boolean;\n}\n\nexport interface UseObtainSystemTokenResult {\n    /** True while the initial GetUserSystemToken query is in flight. */\n    loading: boolean;\n    /** Mint or reveal the current system token. Returns null on failure. */\n    obtainSystemToken: (opts?: ObtainSystemTokenOptions) => Promise<string | null>;\n    /** Always revoke + remint. */\n    regenerateSystemToken: () => Promise<string | null>;\n}\n\nexport function useObtainSystemToken(enabled = true): UseObtainSystemTokenResult {\n    const { orgName, projectId, tagId } = usePrerequisiteIds();\n    const [createTokenMutation] = useCreateSecretApiTokenMutation();\n    const [revealTokenMutation] = useRevealSecretApiTokenMutation();\n    const [revokeTokenMutation] = useRevokeSecretApiTokenMutation();\n    const {\n        data: systemTokenData,\n        loading,\n        refetch: refetchSystemToken,\n    } = useGetUserSystemTokenQuery({\n        skip: !enabled,\n        fetchPolicy: 'network-only',\n    });\n\n    const createSystemToken = useCallback(\n        async (algorithm?: SecretApiTokenAlgorithm) => {\n            return createTokenMutation({\n                variables: {\n                    input: {\n                        name: 'System Token',\n                        expiryInSeconds: 31536000,\n                        isSystemToken: true,\n                        environmentTagId: tagId,\n                        orgName: orgName || 'default',\n                        projectId: projectId || 'default',\n                        ...(algorithm ? { algorithm } : {}),\n                    },\n                },\n            });\n        },\n        [createTokenMutation, orgName, projectId, tagId],\n    );\n\n    const obtainSystemToken = useCallback(\n        async (opts: ObtainSystemTokenOptions = {}): Promise<string | null> => {\n            try {\n                let tokenId: string | null = systemTokenData?.getUserSystemToken?.id ?? null;\n                let expiresAt: string | null = systemTokenData?.getUserSystemToken?.expiresAt ?? null;\n\n                if (!tokenId) {\n                    const refetchResult = await refetchSystemToken().catch(() => null);\n                    tokenId = refetchResult?.data?.getUserSystemToken?.id ?? null;\n                    expiresAt = refetchResult?.data?.getUserSystemToken?.expiresAt ?? expiresAt;\n                }\n\n                if (tokenId && (opts.discardExistingRow || isSystemTokenRowStale(expiresAt))) {\n                    try {\n                        await revokeTokenMutation({ variables: { id: tokenId } });\n                    } catch {\n                        /* best-effort — create below surfaces a real conflict */\n                    }\n                    tokenId = null;\n                    expiresAt = null;\n                }\n\n                if (!tokenId) {\n                    if (!orgName || !projectId || !tagId) {\n                        return null;\n                    }\n                    if (!__DEV__ && projectId === '9a8ac704-1040-4836-9b72-48b771ca91b1') {\n                        console.warn('[useObtainSystemToken] refusing staging mint with testing project UUID');\n                        return null;\n                    }\n                    try {\n                        const { data: createData } = await createSystemToken();\n                        tokenId = createData?.createSecretApiToken?.id ?? null;\n                        expiresAt = createData?.createSecretApiToken?.expiresAt ?? expiresAt;\n                        if (!tokenId) {\n                            const afterCreate = await refetchSystemToken().catch(() => null);\n                            tokenId = afterCreate?.data?.getUserSystemToken?.id ?? null;\n                            expiresAt = afterCreate?.data?.getUserSystemToken?.expiresAt ?? expiresAt;\n                        }\n                    } catch (createErr) {\n                        if (isMissingRs256KeyError(createErr)) {\n                            const { data: hsData } = await createSystemToken(SecretApiTokenAlgorithm.Hs256);\n                            tokenId = hsData?.createSecretApiToken?.id ?? null;\n                            expiresAt = hsData?.createSecretApiToken?.expiresAt ?? expiresAt;\n                        } else if (isAlreadyHasSystemTokenError(createErr)) {\n                            const refetchResult = await refetchSystemToken().catch(() => null);\n                            tokenId = refetchResult?.data?.getUserSystemToken?.id ?? null;\n                            expiresAt = refetchResult?.data?.getUserSystemToken?.expiresAt ?? expiresAt;\n                            if (!tokenId) return null;\n                        } else {\n                            throw createErr;\n                        }\n                    }\n                }\n\n                if (!tokenId) return null;\n\n                let token: string | null = null;\n                try {\n                    const { data: revealData } = await revealTokenMutation({\n                        variables: { id: tokenId },\n                    });\n                    token = (revealData?.revealSecretApiToken as string) || null;\n                } catch (revealErr) {\n                    const msg = revealErr instanceof Error ? revealErr.message : String(revealErr);\n                    if (!isMissingVaultSecretError(msg) || !orgName || !projectId || !tagId) {\n                        throw revealErr;\n                    }\n                    try {\n                        await revokeTokenMutation({ variables: { id: tokenId } });\n                    } catch {\n                        /* continue with recreation */\n                    }\n                    let createData;\n                    try {\n                        createData = (await createSystemToken()).data;\n                    } catch (retryErr) {\n                        if (!isMissingRs256KeyError(retryErr)) throw retryErr;\n                        createData = (await createSystemToken(SecretApiTokenAlgorithm.Hs256)).data;\n                    }\n                    const newTokenId = createData?.createSecretApiToken?.id ?? null;\n                    if (!newTokenId) return null;\n                    const { data: revealData } = await revealTokenMutation({ variables: { id: newTokenId } });\n                    token = (revealData?.revealSecretApiToken as string) || null;\n                }\n\n                if (token && isJwtExpired(token) && !opts.discardExistingRow) {\n                    return obtainSystemToken({ discardExistingRow: true });\n                }\n\n                return token;\n            } catch (err) {\n                console.error('[useObtainSystemToken] error:', err);\n                return null;\n            }\n        },\n        [\n            systemTokenData,\n            createSystemToken,\n            revealTokenMutation,\n            revokeTokenMutation,\n            refetchSystemToken,\n            orgName,\n            projectId,\n            tagId,\n        ],\n    );\n\n    const regenerateSystemToken = useCallback(\n        () => obtainSystemToken({ discardExistingRow: true }),\n        [obtainSystemToken],\n    );\n\n    return { loading, obtainSystemToken, regenerateSystemToken };\n}\n\n/**\n * Append `?token=&state=` for SurfaceLoginGate.captureLoginCallback(),\n * or replace existing token/state query params.\n */\nexport function appendSurfaceAuthParams(baseUrl: string, token: string, state = 'mobile-webview'): string {\n    try {\n        const url = new URL(baseUrl);\n        url.searchParams.set('token', token);\n        url.searchParams.set('state', state);\n        return url.toString();\n    } catch {\n        const sep = baseUrl.includes('?') ? '&' : '?';\n        return `${baseUrl}${sep}token=${encodeURIComponent(token)}&state=${encodeURIComponent(state)}`;\n    }\n}\n\n/** Injected before page scripts so SurfaceLoginGate finds cdecli_token immediately. */\nexport function buildCdecliTokenInjection(token: string): string {\n    const safe = JSON.stringify(token);\n    return `\n(function () {\n  try {\n    localStorage.setItem('cdecli_token', ${safe});\n    sessionStorage.setItem('cdecli_token', ${safe});\n  } catch (e) {}\n  true;\n})();\ntrue;\n`;\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AA2BgB,SAAA,oBAAA,CAAqB,UAAU,IAAkC,EAAA;AAC/E,EAAM,MAAA;AAAA,IACJ,OAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,MACE,kBAAmB,EAAA;AACvB,EAAM,MAAA,CAAC,mBAAmB,CAAA,GAAI,+BAAgC,EAAA;AAC9D,EAAM,MAAA,CAAC,mBAAmB,CAAA,GAAI,+BAAgC,EAAA;AAC9D,EAAM,MAAA,CAAC,mBAAmB,CAAA,GAAI,+BAAgC,EAAA;AAC9D,EAAM,MAAA;AAAA,IACJ,IAAM,EAAA,eAAA;AAAA,IACN,OAAA;AAAA,IACA,OAAS,EAAA;AAAA,MACP,0BAA2B,CAAA;AAAA,IAC7B,MAAM,CAAC,OAAA;AAAA,IACP,WAAa,EAAA;AAAA,GACd,CAAA;AACD,EAAM,MAAA,iBAAA,GAAoB,WAAY,CAAA,OAAO,SAAwC,KAAA;AACnF,IAAA,OAAO,mBAAoB,CAAA;AAAA,MACzB,SAAW,EAAA;AAAA,QACT,KAAO,EAAA,cAAA,CAAA;AAAA,UACL,IAAM,EAAA,cAAA;AAAA,UACN,eAAiB,EAAA,OAAA;AAAA,UACjB,aAAe,EAAA,IAAA;AAAA,UACf,gBAAkB,EAAA,KAAA;AAAA,UAClB,SAAS,OAAW,IAAA,SAAA;AAAA,UACpB,WAAW,SAAa,IAAA;AAAA,SAAA,EACpB,SAAY,GAAA;AAAA,UACd;AAAA,YACE,EAAC;AAAA;AAET,KACD,CAAA;AAAA,KACA,CAAC,mBAAA,EAAqB,OAAS,EAAA,SAAA,EAAW,KAAK,CAAC,CAAA;AACnD,EAAA,MAAM,iBAAoB,GAAA,WAAA,CAAY,OAAO,IAAA,GAAiC,EAA+B,KAAA;AA7D/G,IAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AA8DI,IAAI,IAAA;AACF,MAAA,IAAI,OAAyB,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,eAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,eAAA,CAAiB,kBAAjB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqC,OAArC,IAA2C,GAAA,EAAA,GAAA,IAAA;AACxE,MAAA,IAAI,SAA2B,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,eAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,eAAA,CAAiB,kBAAjB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqC,cAArC,IAAkD,GAAA,EAAA,GAAA,IAAA;AACjF,MAAA,IAAI,CAAC,OAAS,EAAA;AACZ,QAAA,MAAM,gBAAgB,MAAM,kBAAA,EAAqB,CAAA,KAAA,CAAM,MAAM,IAAI,CAAA;AACjE,QAAA,OAAA,GAAA,CAAU,gEAAe,IAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqB,kBAArB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAyC,OAAzC,IAA+C,GAAA,EAAA,GAAA,IAAA;AACzD,QAAA,SAAA,GAAA,CAAY,gEAAe,IAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqB,kBAArB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAyC,cAAzC,IAAsD,GAAA,EAAA,GAAA,SAAA;AAAA;AAEpE,MAAA,IAAI,OAAY,KAAA,IAAA,CAAK,kBAAsB,IAAA,qBAAA,CAAsB,SAAS,CAAI,CAAA,EAAA;AAC5E,QAAI,IAAA;AACF,UAAA,MAAM,mBAAoB,CAAA;AAAA,YACxB,SAAW,EAAA;AAAA,cACT,EAAI,EAAA;AAAA;AACN,WACD,CAAA;AAAA,SACK,CAAA,OAAA,CAAA,EAAA;AAAA;AAGR,QAAU,OAAA,GAAA,IAAA;AACV,QAAY,SAAA,GAAA,IAAA;AAAA;AAEd,MAAA,IAAI,CAAC,OAAS,EAAA;AACZ,QAAA,IAAI,CAAC,OAAA,IAAW,CAAC,SAAA,IAAa,CAAC,KAAO,EAAA;AACpC,UAAO,OAAA,IAAA;AAAA;AAET,QAAI,IAAA,CAAC,OAAW,IAAA,SAAA,KAAc,sCAAwC,EAAA;AACpE,UAAA,OAAA,CAAQ,KAAK,wEAAwE,CAAA;AACrF,UAAO,OAAA,IAAA;AAAA;AAET,QAAI,IAAA;AACF,UAAM,MAAA;AAAA,YACJ,IAAM,EAAA;AAAA,WACR,GAAI,MAAM,iBAAkB,EAAA;AAC5B,UAAA,OAAA,GAAA,CAAU,EAAY,GAAA,CAAA,EAAA,GAAA,UAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,UAAA,CAAA,oBAAA,KAAZ,IAAkC,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,EAAA,KAAlC,IAAwC,GAAA,EAAA,GAAA,IAAA;AAClD,UAAA,SAAA,GAAA,CAAY,EAAY,GAAA,CAAA,EAAA,GAAA,UAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,UAAA,CAAA,oBAAA,KAAZ,IAAkC,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,SAAA,KAAlC,IAA+C,GAAA,EAAA,GAAA,SAAA;AAC3D,UAAA,IAAI,CAAC,OAAS,EAAA;AACZ,YAAA,MAAM,cAAc,MAAM,kBAAA,EAAqB,CAAA,KAAA,CAAM,MAAM,IAAI,CAAA;AAC/D,YAAA,OAAA,GAAA,CAAU,4DAAa,IAAb,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAmB,kBAAnB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAuC,OAAvC,IAA6C,GAAA,EAAA,GAAA,IAAA;AACvD,YAAA,SAAA,GAAA,CAAY,4DAAa,IAAb,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAmB,kBAAnB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAuC,cAAvC,IAAoD,GAAA,EAAA,GAAA,SAAA;AAAA;AAClE,iBACO,SAAW,EAAA;AAClB,UAAI,IAAA,sBAAA,CAAuB,SAAS,CAAG,EAAA;AACrC,YAAM,MAAA;AAAA,cACJ,IAAM,EAAA;AAAA,aACJ,GAAA,MAAM,iBAAkB,CAAA,uBAAA,CAAwB,KAAK,CAAA;AACzD,YAAA,OAAA,GAAA,CAAU,EAAQ,GAAA,CAAA,EAAA,GAAA,MAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAA,oBAAA,KAAR,IAA8B,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,EAAA,KAA9B,IAAoC,GAAA,EAAA,GAAA,IAAA;AAC9C,YAAA,SAAA,GAAA,CAAY,EAAQ,GAAA,CAAA,EAAA,GAAA,MAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAA,oBAAA,KAAR,IAA8B,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,SAAA,KAA9B,IAA2C,GAAA,EAAA,GAAA,SAAA;AAAA,WACzD,MAAA,IAAW,4BAA6B,CAAA,SAAS,CAAG,EAAA;AAClD,YAAA,MAAM,gBAAgB,MAAM,kBAAA,EAAqB,CAAA,KAAA,CAAM,MAAM,IAAI,CAAA;AACjE,YAAA,OAAA,GAAA,CAAU,gEAAe,IAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqB,kBAArB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAyC,OAAzC,IAA+C,GAAA,EAAA,GAAA,IAAA;AACzD,YAAA,SAAA,GAAA,CAAY,gEAAe,IAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqB,kBAArB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAyC,cAAzC,IAAsD,GAAA,EAAA,GAAA,SAAA;AAClE,YAAI,IAAA,CAAC,SAAgB,OAAA,IAAA;AAAA,WAChB,MAAA;AACL,YAAM,MAAA,SAAA;AAAA;AACR;AACF;AAEF,MAAI,IAAA,CAAC,SAAgB,OAAA,IAAA;AACrB,MAAA,IAAI,KAAuB,GAAA,IAAA;AAC3B,MAAI,IAAA;AACF,QAAM,MAAA;AAAA,UACJ,IAAM,EAAA;AAAA,SACR,GAAI,MAAM,mBAAoB,CAAA;AAAA,UAC5B,SAAW,EAAA;AAAA,YACT,EAAI,EAAA;AAAA;AACN,SACD,CAAA;AACD,QAAA,KAAA,GAAA,CAAQ,yCAAY,oBAAkC,KAAA,IAAA;AAAA,eAC/C,SAAW,EAAA;AAClB,QAAA,MAAM,MAAM,SAAqB,YAAA,KAAA,GAAQ,SAAU,CAAA,OAAA,GAAU,OAAO,SAAS,CAAA;AAC7E,QAAI,IAAA,CAAC,0BAA0B,GAAG,CAAA,IAAK,CAAC,OAAW,IAAA,CAAC,SAAa,IAAA,CAAC,KAAO,EAAA;AACvE,UAAM,MAAA,SAAA;AAAA;AAER,QAAI,IAAA;AACF,UAAA,MAAM,mBAAoB,CAAA;AAAA,YACxB,SAAW,EAAA;AAAA,cACT,EAAI,EAAA;AAAA;AACN,WACD,CAAA;AAAA,SACK,CAAA,OAAA,CAAA,EAAA;AAAA;AAGR,QAAI,IAAA,UAAA;AACJ,QAAI,IAAA;AACF,UAAc,UAAA,GAAA,CAAA,MAAM,mBAAqB,EAAA,IAAA;AAAA,iBAClC,QAAU,EAAA;AACjB,UAAA,IAAI,CAAC,sBAAA,CAAuB,QAAQ,CAAA,EAAS,MAAA,QAAA;AAC7C,UAAA,UAAA,GAAA,CAAc,MAAM,iBAAA,CAAkB,uBAAwB,CAAA,KAAK,CAAG,EAAA,IAAA;AAAA;AAExE,QAAA,MAAM,UAAa,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,UAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,UAAA,CAAY,oBAAZ,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAkC,OAAlC,IAAwC,GAAA,EAAA,GAAA,IAAA;AAC3D,QAAI,IAAA,CAAC,YAAmB,OAAA,IAAA;AACxB,QAAM,MAAA;AAAA,UACJ,IAAM,EAAA;AAAA,SACR,GAAI,MAAM,mBAAoB,CAAA;AAAA,UAC5B,SAAW,EAAA;AAAA,YACT,EAAI,EAAA;AAAA;AACN,SACD,CAAA;AACD,QAAA,KAAA,GAAA,CAAQ,yCAAY,oBAAkC,KAAA,IAAA;AAAA;AAExD,MAAA,IAAI,SAAS,YAAa,CAAA,KAAK,CAAK,IAAA,CAAC,KAAK,kBAAoB,EAAA;AAC5D,QAAA,OAAO,iBAAkB,CAAA;AAAA,UACvB,kBAAoB,EAAA;AAAA,SACrB,CAAA;AAAA;AAEH,MAAO,OAAA,KAAA;AAAA,aACA,GAAK,EAAA;AACZ,MAAQ,OAAA,CAAA,KAAA,CAAM,iCAAiC,GAAG,CAAA;AAClD,MAAO,OAAA,IAAA;AAAA;AACT,GACF,EAAG,CAAC,eAAA,EAAiB,iBAAmB,EAAA,mBAAA,EAAqB,qBAAqB,kBAAoB,EAAA,OAAA,EAAS,SAAW,EAAA,KAAK,CAAC,CAAA;AAChI,EAAM,MAAA,qBAAA,GAAwB,WAAY,CAAA,MAAM,iBAAkB,CAAA;AAAA,IAChE,kBAAoB,EAAA;AAAA,GACrB,CAAA,EAAG,CAAC,iBAAiB,CAAC,CAAA;AACvB,EAAO,OAAA;AAAA,IACL,OAAA;AAAA,IACA,iBAAA;AAAA,IACA;AAAA,GACF;AACF"}
+{"version":3,"file":"useObtainSystemToken.js","sources":["../../src/hooks/useObtainSystemToken.ts"],"sourcesContent":["/**\n * Mint / reveal the org-scoped system JWT (GetUserSystemToken → RevealSecretApiToken).\n * Same token the webbuilder surface expects as `cdecli_token` / `?token=`.\n *\n * Matches web `useObtainSystemToken`: revoke a stale/rejected row before create\n * (one-per-user), and do not force HS256 — the backend default is HS256 when no\n * RS256 private key is present; forcing HS256 forever re-reveals a JWT signed\n * with a rotated secret.\n */\n\nimport { useCallback, useRef } from 'react';\nimport {\n    useGetUserSystemTokenQuery,\n    useCreateSecretApiTokenMutation,\n    useRevealSecretApiTokenMutation,\n    useRevokeSecretApiTokenMutation,\n} from 'common/graphql';\nimport { SecretApiTokenAlgorithm } from 'common';\nimport { usePrerequisiteIds } from './usePrerequisiteIds';\nimport {\n    isAlreadyHasSystemTokenError,\n    isJwtExpired,\n    isMissingRs256KeyError,\n    isMissingVaultSecretError,\n    isSystemTokenRowStale,\n} from './systemTokenJwt';\n\nexport interface ObtainSystemTokenOptions {\n    /** Revoke the server row first (dead signature, key rotation). */\n    discardExistingRow?: boolean;\n}\n\nexport interface UseObtainSystemTokenResult {\n    /** True while the initial GetUserSystemToken query is in flight. */\n    loading: boolean;\n    /** Mint or reveal the current system token. Returns null on failure. */\n    obtainSystemToken: (opts?: ObtainSystemTokenOptions) => Promise<string | null>;\n    /** Always revoke + remint. */\n    regenerateSystemToken: () => Promise<string | null>;\n    /** Why the last obtainSystemToken() returned null (null when it succeeded). */\n    getLastError: () => string | null;\n}\n\nexport function useObtainSystemToken(enabled = true): UseObtainSystemTokenResult {\n    const { orgName, projectId, tagId } = usePrerequisiteIds();\n    const lastError = useRef<string | null>(null);\n    const [createTokenMutation] = useCreateSecretApiTokenMutation();\n    const [revealTokenMutation] = useRevealSecretApiTokenMutation();\n    const [revokeTokenMutation] = useRevokeSecretApiTokenMutation();\n    const {\n        data: systemTokenData,\n        loading,\n        refetch: refetchSystemToken,\n    } = useGetUserSystemTokenQuery({\n        skip: !enabled,\n        fetchPolicy: 'network-only',\n    });\n\n    const createSystemToken = useCallback(\n        async (algorithm?: SecretApiTokenAlgorithm) => {\n            return createTokenMutation({\n                variables: {\n                    input: {\n                        name: 'System Token',\n                        expiryInSeconds: 31536000,\n                        isSystemToken: true,\n                        environmentTagId: tagId,\n                        orgName: orgName || 'default',\n                        projectId: projectId || 'default',\n                        ...(algorithm ? { algorithm } : {}),\n                    },\n                },\n            });\n        },\n        [createTokenMutation, orgName, projectId, tagId],\n    );\n\n    const obtainSystemToken = useCallback(\n        async (opts: ObtainSystemTokenOptions = {}): Promise<string | null> => {\n            lastError.current = null;\n            try {\n                let tokenId: string | null = systemTokenData?.getUserSystemToken?.id ?? null;\n                let expiresAt: string | null = systemTokenData?.getUserSystemToken?.expiresAt ?? null;\n\n                if (!tokenId) {\n                    const refetchResult = await refetchSystemToken().catch(() => null);\n                    tokenId = refetchResult?.data?.getUserSystemToken?.id ?? null;\n                    expiresAt = refetchResult?.data?.getUserSystemToken?.expiresAt ?? expiresAt;\n                }\n\n                if (tokenId && (opts.discardExistingRow || isSystemTokenRowStale(expiresAt))) {\n                    try {\n                        await revokeTokenMutation({ variables: { id: tokenId } });\n                    } catch {\n                        /* best-effort — create below surfaces a real conflict */\n                    }\n                    tokenId = null;\n                    expiresAt = null;\n                }\n\n                if (!tokenId) {\n                    if (!orgName || !projectId || !tagId) {\n                        const missing = [!orgName && 'organization', !projectId && 'project', !tagId && 'environment']\n                            .filter(Boolean)\n                            .join(', ');\n                        lastError.current = `Your account is still being set up (${missing} not ready). Try again in a moment.`;\n                        return null;\n                    }\n                    if (!__DEV__ && projectId === '9a8ac704-1040-4836-9b72-48b771ca91b1') {\n                        console.warn('[useObtainSystemToken] refusing staging mint with testing project UUID');\n                        lastError.current = 'Your account has no project yet. Try again in a moment.';\n                        return null;\n                    }\n                    try {\n                        const { data: createData } = await createSystemToken();\n                        tokenId = createData?.createSecretApiToken?.id ?? null;\n                        expiresAt = createData?.createSecretApiToken?.expiresAt ?? expiresAt;\n                        if (!tokenId) {\n                            const afterCreate = await refetchSystemToken().catch(() => null);\n                            tokenId = afterCreate?.data?.getUserSystemToken?.id ?? null;\n                            expiresAt = afterCreate?.data?.getUserSystemToken?.expiresAt ?? expiresAt;\n                        }\n                    } catch (createErr) {\n                        if (isMissingRs256KeyError(createErr)) {\n                            const { data: hsData } = await createSystemToken(SecretApiTokenAlgorithm.Hs256);\n                            tokenId = hsData?.createSecretApiToken?.id ?? null;\n                            expiresAt = hsData?.createSecretApiToken?.expiresAt ?? expiresAt;\n                        } else if (isAlreadyHasSystemTokenError(createErr)) {\n                            const refetchResult = await refetchSystemToken().catch(() => null);\n                            tokenId = refetchResult?.data?.getUserSystemToken?.id ?? null;\n                            expiresAt = refetchResult?.data?.getUserSystemToken?.expiresAt ?? expiresAt;\n                            if (!tokenId) {\n                                lastError.current = 'System token exists but could not be loaded.';\n                                return null;\n                            }\n                        } else {\n                            throw createErr;\n                        }\n                    }\n                }\n\n                if (!tokenId) {\n                    lastError.current = 'The server did not create a system token.';\n                    return null;\n                }\n\n                let token: string | null = null;\n                try {\n                    const { data: revealData } = await revealTokenMutation({\n                        variables: { id: tokenId },\n                    });\n                    token = (revealData?.revealSecretApiToken as string) || null;\n                } catch (revealErr) {\n                    const msg = revealErr instanceof Error ? revealErr.message : String(revealErr);\n                    if (!isMissingVaultSecretError(msg) || !orgName || !projectId || !tagId) {\n                        throw revealErr;\n                    }\n                    try {\n                        await revokeTokenMutation({ variables: { id: tokenId } });\n                    } catch {\n                        /* continue with recreation */\n                    }\n                    let createData;\n                    try {\n                        createData = (await createSystemToken()).data;\n                    } catch (retryErr) {\n                        if (!isMissingRs256KeyError(retryErr)) throw retryErr;\n                        createData = (await createSystemToken(SecretApiTokenAlgorithm.Hs256)).data;\n                    }\n                    const newTokenId = createData?.createSecretApiToken?.id ?? null;\n                    if (!newTokenId) {\n                        lastError.current = 'The server did not recreate the system token.';\n                        return null;\n                    }\n                    const { data: revealData } = await revealTokenMutation({ variables: { id: newTokenId } });\n                    token = (revealData?.revealSecretApiToken as string) || null;\n                }\n\n                if (token && isJwtExpired(token) && !opts.discardExistingRow) {\n                    return obtainSystemToken({ discardExistingRow: true });\n                }\n\n                if (!token) lastError.current = 'The server returned an empty system token.';\n                return token;\n            } catch (err) {\n                console.error('[useObtainSystemToken] error:', err);\n                lastError.current = `System token error: ${err instanceof Error ? err.message : String(err)}`;\n                return null;\n            }\n        },\n        [\n            systemTokenData,\n            createSystemToken,\n            revealTokenMutation,\n            revokeTokenMutation,\n            refetchSystemToken,\n            orgName,\n            projectId,\n            tagId,\n        ],\n    );\n\n    const regenerateSystemToken = useCallback(\n        () => obtainSystemToken({ discardExistingRow: true }),\n        [obtainSystemToken],\n    );\n\n    const getLastError = useCallback(() => lastError.current, []);\n\n    return { loading, obtainSystemToken, regenerateSystemToken, getLastError };\n}\n\n/**\n * Append `?token=&state=` for SurfaceLoginGate.captureLoginCallback(),\n * or replace existing token/state query params.\n */\nexport function appendSurfaceAuthParams(baseUrl: string, token: string, state = 'mobile-webview'): string {\n    try {\n        const url = new URL(baseUrl);\n        url.searchParams.set('token', token);\n        url.searchParams.set('state', state);\n        return url.toString();\n    } catch {\n        const sep = baseUrl.includes('?') ? '&' : '?';\n        return `${baseUrl}${sep}token=${encodeURIComponent(token)}&state=${encodeURIComponent(state)}`;\n    }\n}\n\n/** Injected before page scripts so SurfaceLoginGate finds cdecli_token immediately. */\nexport function buildCdecliTokenInjection(token: string): string {\n    const safe = JSON.stringify(token);\n    return `\n(function () {\n  try {\n    localStorage.setItem('cdecli_token', ${safe});\n    sessionStorage.setItem('cdecli_token', ${safe});\n  } catch (e) {}\n  true;\n})();\ntrue;\n`;\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AA6BgB,SAAA,oBAAA,CAAqB,UAAU,IAAkC,EAAA;AAC/E,EAAM,MAAA;AAAA,IACJ,OAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,MACE,kBAAmB,EAAA;AACvB,EAAM,MAAA,SAAA,GAAY,OAAsB,IAAI,CAAA;AAC5C,EAAM,MAAA,CAAC,mBAAmB,CAAA,GAAI,+BAAgC,EAAA;AAC9D,EAAM,MAAA,CAAC,mBAAmB,CAAA,GAAI,+BAAgC,EAAA;AAC9D,EAAM,MAAA,CAAC,mBAAmB,CAAA,GAAI,+BAAgC,EAAA;AAC9D,EAAM,MAAA;AAAA,IACJ,IAAM,EAAA,eAAA;AAAA,IACN,OAAA;AAAA,IACA,OAAS,EAAA;AAAA,MACP,0BAA2B,CAAA;AAAA,IAC7B,MAAM,CAAC,OAAA;AAAA,IACP,WAAa,EAAA;AAAA,GACd,CAAA;AACD,EAAM,MAAA,iBAAA,GAAoB,WAAY,CAAA,OAAO,SAAwC,KAAA;AACnF,IAAA,OAAO,mBAAoB,CAAA;AAAA,MACzB,SAAW,EAAA;AAAA,QACT,KAAO,EAAA,cAAA,CAAA;AAAA,UACL,IAAM,EAAA,cAAA;AAAA,UACN,eAAiB,EAAA,OAAA;AAAA,UACjB,aAAe,EAAA,IAAA;AAAA,UACf,gBAAkB,EAAA,KAAA;AAAA,UAClB,SAAS,OAAW,IAAA,SAAA;AAAA,UACpB,WAAW,SAAa,IAAA;AAAA,SAAA,EACpB,SAAY,GAAA;AAAA,UACd;AAAA,YACE,EAAC;AAAA;AAET,KACD,CAAA;AAAA,KACA,CAAC,mBAAA,EAAqB,OAAS,EAAA,SAAA,EAAW,KAAK,CAAC,CAAA;AACnD,EAAA,MAAM,iBAAoB,GAAA,WAAA,CAAY,OAAO,IAAA,GAAiC,EAA+B,KAAA;AAhE/G,IAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAiEI,IAAA,SAAA,CAAU,OAAU,GAAA,IAAA;AACpB,IAAI,IAAA;AACF,MAAA,IAAI,OAAyB,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,eAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,eAAA,CAAiB,kBAAjB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqC,OAArC,IAA2C,GAAA,EAAA,GAAA,IAAA;AACxE,MAAA,IAAI,SAA2B,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,eAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,eAAA,CAAiB,kBAAjB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqC,cAArC,IAAkD,GAAA,EAAA,GAAA,IAAA;AACjF,MAAA,IAAI,CAAC,OAAS,EAAA;AACZ,QAAA,MAAM,gBAAgB,MAAM,kBAAA,EAAqB,CAAA,KAAA,CAAM,MAAM,IAAI,CAAA;AACjE,QAAA,OAAA,GAAA,CAAU,gEAAe,IAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqB,kBAArB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAyC,OAAzC,IAA+C,GAAA,EAAA,GAAA,IAAA;AACzD,QAAA,SAAA,GAAA,CAAY,gEAAe,IAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqB,kBAArB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAyC,cAAzC,IAAsD,GAAA,EAAA,GAAA,SAAA;AAAA;AAEpE,MAAA,IAAI,OAAY,KAAA,IAAA,CAAK,kBAAsB,IAAA,qBAAA,CAAsB,SAAS,CAAI,CAAA,EAAA;AAC5E,QAAI,IAAA;AACF,UAAA,MAAM,mBAAoB,CAAA;AAAA,YACxB,SAAW,EAAA;AAAA,cACT,EAAI,EAAA;AAAA;AACN,WACD,CAAA;AAAA,SACK,CAAA,OAAA,CAAA,EAAA;AAAA;AAGR,QAAU,OAAA,GAAA,IAAA;AACV,QAAY,SAAA,GAAA,IAAA;AAAA;AAEd,MAAA,IAAI,CAAC,OAAS,EAAA;AACZ,QAAA,IAAI,CAAC,OAAA,IAAW,CAAC,SAAA,IAAa,CAAC,KAAO,EAAA;AACpC,UAAA,MAAM,UAAU,CAAC,CAAC,OAAW,IAAA,cAAA,EAAgB,CAAC,SAAa,IAAA,SAAA,EAAW,CAAC,KAAA,IAAS,aAAa,CAAE,CAAA,MAAA,CAAO,OAAO,CAAA,CAAE,KAAK,IAAI,CAAA;AACxH,UAAU,SAAA,CAAA,OAAA,GAAU,uCAAuC,OAAO,CAAA,mCAAA,CAAA;AAClE,UAAO,OAAA,IAAA;AAAA;AAET,QAAI,IAAA,CAAC,OAAW,IAAA,SAAA,KAAc,sCAAwC,EAAA;AACpE,UAAA,OAAA,CAAQ,KAAK,wEAAwE,CAAA;AACrF,UAAA,SAAA,CAAU,OAAU,GAAA,yDAAA;AACpB,UAAO,OAAA,IAAA;AAAA;AAET,QAAI,IAAA;AACF,UAAM,MAAA;AAAA,YACJ,IAAM,EAAA;AAAA,WACR,GAAI,MAAM,iBAAkB,EAAA;AAC5B,UAAA,OAAA,GAAA,CAAU,EAAY,GAAA,CAAA,EAAA,GAAA,UAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,UAAA,CAAA,oBAAA,KAAZ,IAAkC,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,EAAA,KAAlC,IAAwC,GAAA,EAAA,GAAA,IAAA;AAClD,UAAA,SAAA,GAAA,CAAY,EAAY,GAAA,CAAA,EAAA,GAAA,UAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,UAAA,CAAA,oBAAA,KAAZ,IAAkC,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,SAAA,KAAlC,IAA+C,GAAA,EAAA,GAAA,SAAA;AAC3D,UAAA,IAAI,CAAC,OAAS,EAAA;AACZ,YAAA,MAAM,cAAc,MAAM,kBAAA,EAAqB,CAAA,KAAA,CAAM,MAAM,IAAI,CAAA;AAC/D,YAAA,OAAA,GAAA,CAAU,4DAAa,IAAb,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAmB,kBAAnB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAuC,OAAvC,IAA6C,GAAA,EAAA,GAAA,IAAA;AACvD,YAAA,SAAA,GAAA,CAAY,4DAAa,IAAb,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAmB,kBAAnB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAuC,cAAvC,IAAoD,GAAA,EAAA,GAAA,SAAA;AAAA;AAClE,iBACO,SAAW,EAAA;AAClB,UAAI,IAAA,sBAAA,CAAuB,SAAS,CAAG,EAAA;AACrC,YAAM,MAAA;AAAA,cACJ,IAAM,EAAA;AAAA,aACJ,GAAA,MAAM,iBAAkB,CAAA,uBAAA,CAAwB,KAAK,CAAA;AACzD,YAAA,OAAA,GAAA,CAAU,EAAQ,GAAA,CAAA,EAAA,GAAA,MAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAA,oBAAA,KAAR,IAA8B,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,EAAA,KAA9B,IAAoC,GAAA,EAAA,GAAA,IAAA;AAC9C,YAAA,SAAA,GAAA,CAAY,EAAQ,GAAA,CAAA,EAAA,GAAA,MAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAA,oBAAA,KAAR,IAA8B,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,SAAA,KAA9B,IAA2C,GAAA,EAAA,GAAA,SAAA;AAAA,WACzD,MAAA,IAAW,4BAA6B,CAAA,SAAS,CAAG,EAAA;AAClD,YAAA,MAAM,gBAAgB,MAAM,kBAAA,EAAqB,CAAA,KAAA,CAAM,MAAM,IAAI,CAAA;AACjE,YAAA,OAAA,GAAA,CAAU,gEAAe,IAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqB,kBAArB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAyC,OAAzC,IAA+C,GAAA,EAAA,GAAA,IAAA;AACzD,YAAA,SAAA,GAAA,CAAY,gEAAe,IAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqB,kBAArB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAyC,cAAzC,IAAsD,GAAA,EAAA,GAAA,SAAA;AAClE,YAAA,IAAI,CAAC,OAAS,EAAA;AACZ,cAAA,SAAA,CAAU,OAAU,GAAA,8CAAA;AACpB,cAAO,OAAA,IAAA;AAAA;AACT,WACK,MAAA;AACL,YAAM,MAAA,SAAA;AAAA;AACR;AACF;AAEF,MAAA,IAAI,CAAC,OAAS,EAAA;AACZ,QAAA,SAAA,CAAU,OAAU,GAAA,2CAAA;AACpB,QAAO,OAAA,IAAA;AAAA;AAET,MAAA,IAAI,KAAuB,GAAA,IAAA;AAC3B,MAAI,IAAA;AACF,QAAM,MAAA;AAAA,UACJ,IAAM,EAAA;AAAA,SACR,GAAI,MAAM,mBAAoB,CAAA;AAAA,UAC5B,SAAW,EAAA;AAAA,YACT,EAAI,EAAA;AAAA;AACN,SACD,CAAA;AACD,QAAA,KAAA,GAAA,CAAQ,yCAAY,oBAAkC,KAAA,IAAA;AAAA,eAC/C,SAAW,EAAA;AAClB,QAAA,MAAM,MAAM,SAAqB,YAAA,KAAA,GAAQ,SAAU,CAAA,OAAA,GAAU,OAAO,SAAS,CAAA;AAC7E,QAAI,IAAA,CAAC,0BAA0B,GAAG,CAAA,IAAK,CAAC,OAAW,IAAA,CAAC,SAAa,IAAA,CAAC,KAAO,EAAA;AACvE,UAAM,MAAA,SAAA;AAAA;AAER,QAAI,IAAA;AACF,UAAA,MAAM,mBAAoB,CAAA;AAAA,YACxB,SAAW,EAAA;AAAA,cACT,EAAI,EAAA;AAAA;AACN,WACD,CAAA;AAAA,SACK,CAAA,OAAA,CAAA,EAAA;AAAA;AAGR,QAAI,IAAA,UAAA;AACJ,QAAI,IAAA;AACF,UAAc,UAAA,GAAA,CAAA,MAAM,mBAAqB,EAAA,IAAA;AAAA,iBAClC,QAAU,EAAA;AACjB,UAAA,IAAI,CAAC,sBAAA,CAAuB,QAAQ,CAAA,EAAS,MAAA,QAAA;AAC7C,UAAA,UAAA,GAAA,CAAc,MAAM,iBAAA,CAAkB,uBAAwB,CAAA,KAAK,CAAG,EAAA,IAAA;AAAA;AAExE,QAAA,MAAM,UAAa,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,UAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,UAAA,CAAY,oBAAZ,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAkC,OAAlC,IAAwC,GAAA,EAAA,GAAA,IAAA;AAC3D,QAAA,IAAI,CAAC,UAAY,EAAA;AACf,UAAA,SAAA,CAAU,OAAU,GAAA,+CAAA;AACpB,UAAO,OAAA,IAAA;AAAA;AAET,QAAM,MAAA;AAAA,UACJ,IAAM,EAAA;AAAA,SACR,GAAI,MAAM,mBAAoB,CAAA;AAAA,UAC5B,SAAW,EAAA;AAAA,YACT,EAAI,EAAA;AAAA;AACN,SACD,CAAA;AACD,QAAA,KAAA,GAAA,CAAQ,yCAAY,oBAAkC,KAAA,IAAA;AAAA;AAExD,MAAA,IAAI,SAAS,YAAa,CAAA,KAAK,CAAK,IAAA,CAAC,KAAK,kBAAoB,EAAA;AAC5D,QAAA,OAAO,iBAAkB,CAAA;AAAA,UACvB,kBAAoB,EAAA;AAAA,SACrB,CAAA;AAAA;AAEH,MAAI,IAAA,CAAC,KAAO,EAAA,SAAA,CAAU,OAAU,GAAA,4CAAA;AAChC,MAAO,OAAA,KAAA;AAAA,aACA,GAAK,EAAA;AACZ,MAAQ,OAAA,CAAA,KAAA,CAAM,iCAAiC,GAAG,CAAA;AAClD,MAAU,SAAA,CAAA,OAAA,GAAU,uBAAuB,GAAe,YAAA,KAAA,GAAQ,IAAI,OAAU,GAAA,MAAA,CAAO,GAAG,CAAC,CAAA,CAAA;AAC3F,MAAO,OAAA,IAAA;AAAA;AACT,GACF,EAAG,CAAC,eAAA,EAAiB,iBAAmB,EAAA,mBAAA,EAAqB,qBAAqB,kBAAoB,EAAA,OAAA,EAAS,SAAW,EAAA,KAAK,CAAC,CAAA;AAChI,EAAM,MAAA,qBAAA,GAAwB,WAAY,CAAA,MAAM,iBAAkB,CAAA;AAAA,IAChE,kBAAoB,EAAA;AAAA,GACrB,CAAA,EAAG,CAAC,iBAAiB,CAAC,CAAA;AACvB,EAAA,MAAM,eAAe,WAAY,CAAA,MAAM,SAAU,CAAA,OAAA,EAAS,EAAE,CAAA;AAC5D,EAAO,OAAA;AAAA,IACL,OAAA;AAAA,IACA,iBAAA;AAAA,IACA,qBAAA;AAAA,IACA;AAAA,GACF;AACF"}

package/lib/hooks/webViewRetentionPolicy.js

@@ -4,5 +4,6 @@ function shouldRenderWebView({
   releaseOnBlur
 }) {
   if (!isAppActive) return false;
+  if (releaseOnBlur && !isFocused) return false;
   return true;
 }export{shouldRenderWebView};//# sourceMappingURL=webViewRetentionPolicy.js.map

package/lib/hooks/webViewRetentionPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"webViewRetentionPolicy.js","sources":["../../src/hooks/webViewRetentionPolicy.ts"],"sourcesContent":["/**\n * When may a WebView stay mounted?\n *\n * Every live `<WebView>` is a WKWebView with its own out-of-process WebContent\n * renderer, JS heap and layer backing store - 50-150MB each, and more for the\n * WebGL and map surfaces. React Navigation v7 keeps every visited screen\n * mounted, and nothing in this app ever unmounted one, so a user who opened Web\n * Builder, the travel map and the 3D set viewport was holding all three alive\n * for the rest of the session.\n *\n * That is what makes iOS evict the whole app seconds after it is backgrounded on\n * a 6GB device (measured 2026-09-18: survives ~1.5s backgrounded, gone by 5s,\n * and the relaunch loses the user's place). Releasing a WebView costs a reload\n * when the user comes back; being evicted costs them EVERYTHING, so releasing is\n * strictly the better trade.\n *\n * `clearCache()` is NOT a substitute: it frees the HTTP cache and leaves the\n * renderer process running.\n *\n * Kept dependency-free (no react-native import) so the policy is unit-testable\n * without the RN transform.\n */\nexport interface IWebViewRetentionInput {\n    /** Is the hosting screen the one on top? */\n    isFocused: boolean;\n    /** Is the app itself in the foreground? */\n    isAppActive: boolean;\n    /**\n     * Release as soon as the screen is blurred, not just when the app\n     * backgrounds. Right for surfaces that rebuild cheaply from their own source\n     * (a map, a 3D viewport); wrong for one the user is actively working in,\n     * where a reload on every navigation would be hostile.\n     */\n    releaseOnBlur: boolean;\n}\n\n/**\n * Backgrounding ALWAYS releases: that is the exact moment the footprint decides\n * whether iOS evicts us, and a backgrounded WebView is showing nobody anything.\n */\nexport function shouldRenderWebView({ isFocused, isAppActive, releaseOnBlur }: IWebViewRetentionInput): boolean {\n    if (!isAppActive) return false;\n    if (releaseOnBlur && !isFocused) return false;\n    return true;\n}\n"],"names":[],"mappings":"AAwCO,SAAS,mBAAoB,CAAA;AAAA,EAClC,SAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAoC,EAAA;AAClC,EAAI,IAAA,CAAC,aAAoB,OAAA,KAAA;AAEzB,EAAO,OAAA,IAAA;AACT"}
+{"version":3,"file":"webViewRetentionPolicy.js","sources":["../../src/hooks/webViewRetentionPolicy.ts"],"sourcesContent":["/**\n * When may a WebView stay mounted?\n *\n * Every live `<WebView>` is a WKWebView with its own out-of-process WebContent\n * renderer, JS heap and layer backing store - 50-150MB each, and more for the\n * WebGL and map surfaces. React Navigation v7 keeps every visited screen\n * mounted, and nothing in this app ever unmounted one, so a user who opened Web\n * Builder, the travel map and the 3D set viewport was holding all three alive\n * for the rest of the session.\n *\n * That is what makes iOS evict the whole app seconds after it is backgrounded on\n * a 6GB device (measured 2026-09-18: survives ~1.5s backgrounded, gone by 5s,\n * and the relaunch loses the user's place). Releasing a WebView costs a reload\n * when the user comes back; being evicted costs them EVERYTHING, so releasing is\n * strictly the better trade.\n *\n * `clearCache()` is NOT a substitute: it frees the HTTP cache and leaves the\n * renderer process running.\n *\n * Kept dependency-free (no react-native import) so the policy is unit-testable\n * without the RN transform.\n */\nexport interface IWebViewRetentionInput {\n    /** Is the hosting screen the one on top? */\n    isFocused: boolean;\n    /** Is the app itself in the foreground? */\n    isAppActive: boolean;\n    /**\n     * Release as soon as the screen is blurred, not just when the app\n     * backgrounds. Right for surfaces that rebuild cheaply from their own source\n     * (a map, a 3D viewport); wrong for one the user is actively working in,\n     * where a reload on every navigation would be hostile.\n     */\n    releaseOnBlur: boolean;\n}\n\n/**\n * Backgrounding ALWAYS releases: that is the exact moment the footprint decides\n * whether iOS evicts us, and a backgrounded WebView is showing nobody anything.\n */\nexport function shouldRenderWebView({ isFocused, isAppActive, releaseOnBlur }: IWebViewRetentionInput): boolean {\n    if (!isAppActive) return false;\n    if (releaseOnBlur && !isFocused) return false;\n    return true;\n}\n"],"names":[],"mappings":"AAwCO,SAAS,mBAAoB,CAAA;AAAA,EAClC,SAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAoC,EAAA;AAClC,EAAI,IAAA,CAAC,aAAoB,OAAA,KAAA;AACzB,EAAI,IAAA,aAAA,IAAiB,CAAC,SAAA,EAAkB,OAAA,KAAA;AACxC,EAAO,OAAA,IAAA;AACT"}

package/lib/index.js

@@ -1 +1 @@
-import {Feature}from'@common-stack/client-react';import YantraMobileModule from'./module.js';export{default as Home}from'./screens/Home/HomeScreen.js';export{default as NewChat}from'./screens/NewChat/index.js';export{default as Account}from'./screens/Account/index.js';export{default as ChatHistory}from'./screens/ChatHistory/index.js';export{default as Apps}from'./screens/Apps/index.js';export{default as WebBuilder}from'./screens/WebBuilder/index.js';export{GatewayContextProvider,useGatewayContext}from'./contexts/GatewayContext.js';export{CdecliConnectionProvider,useCdecliConnection}from'./contexts/CdecliConnectionContext.js';export{ChatLiveStreamEngine}from'./contexts/ChatLiveStreamContext.js';export{MemoryPressureResponder}from'./features/memory/MemoryPressureResponder.js';export{BUILTIN_MOBILE_GATEWAYS,MAX_CONCURRENT_TASKS,STORAGE_KEYS}from'./config/constants.js';export{config}from'./config/env-config.js';export{useCdecliAutoConnect}from'./hooks/useCdecliAutoConnect.js';export{useObtainSystemToken}from'./hooks/useObtainSystemToken.js';export{appendSurfaceAuthParams,buildCdecliTokenInjection,buildSurfaceGateRecoveryScript,mintSurfaceSystemToken,resolveSurfaceCatalogBackend}from'./hooks/mintSurfaceSystemToken.js';export{isInstanceNotFoundError,useGatewayConnection}from'./hooks/useGatewayConnection.js';export{usePrerequisiteIds}from'./hooks/usePrerequisiteIds.js';export{useWorkspaceProvisioner}from'./hooks/useWorkspaceProvisioner.js';export{useGatewayRegistry}from'./hooks/useGatewayRegistry.js';export{agentSessionManager}from'./services/agentSessionManager.js';export{ensureGatewayApiKeys,resetGatewayApiKeyBridge}from'./services/gatewayApiKeyBridge.js';export{GatewayClient}from'./services/gatewayClient.js';export{BRIDGE_PROTOCOL_VERSION,BRIDGE_READY_ACTION,DEFAULT_BRIDGE_TIMEOUT_MS,DEFAULT_CHUNK_SIZE,MessageType}from'./bridge/types.js';export{WebViewManager}from'./bridge/WebViewManager.js';export{NativeWebViewBridge}from'./bridge/NativeWebViewBridge.js';export{TypedBridge}from'./bridge/TypedBridge.js';export{CancellableRequest}from'./bridge/CancellableRequest.js';export{ChunkedMessageHandler}from'./bridge/ChunkedMessageHandler.js';export{BridgeDebugger}from'./bridge/BridgeDebugger.js';export{WEB_BRIDGE_BOOTSTRAP}from'./bridge/webBridgeBootstrap.js';export{AuthenticatedFetch}from'./bridge/AuthenticatedFetch.js';export{AuthBridgeHandler}from'./bridge/handlers/AuthBridgeHandler.js';export{NavigationBridgeHandler}from'./bridge/handlers/NavigationBridgeHandler.js';export{AnalyticsBridgeHandler}from'./bridge/handlers/AnalyticsBridgeHandler.js';export{getPackagerHost,resolveMobileWebUrl}from'./bridge/resolveMobileWebUrl.js';export{YANTRA_LOADER_SIZE_COMPACT,YANTRA_LOADER_SIZE_DEFAULT,YantraBrandLoader}from'./components/YantraBrandLoader.js';export{default as CustomDrawer}from'./components/CustomDrawer.js';export{AppThemeProvider,useAppTheme}from'./theme/AppThemeProvider.js';export{InviteDeepLink}from'./features/invite/InviteDeepLink.js';export{inviteTokenFromUrl,isInviteUrl}from'./features/invite/inviteLink.js';export{isKeyboardControllerAvailable}from'./utils/keyboardController.js';export{getNativeCanvasExperience,getNativeCanvasViewer,preloadNativeCanvasExperience,registerCanvasExperiencePreload,registerNativeCanvasExperience,registerNativeCanvasViewer}from'./features/canvas/nativeViewerRegistry.js';export{getNativeCharactersExperience,registerNativeCharactersExperience}from'./features/characters/nativeCharactersRegistry.js';export{getNativeChatExperience,registerNativeChatExperience}from'./features/messaging/nativeChatRegistry.js';export{getNativeShoppingExperience,preloadNativeShoppingExperience,registerNativeShoppingExperience,registerShoppingExperiencePreload}from'./features/shopping/nativeShoppingRegistry.js';export{getNativeTravelExperience,preloadNativeTravelExperience,registerNativeTravelExperience,registerTravelExperiencePreload}from'./features/travel/nativeTravelRegistry.js';export{getNativeJobSearchExperience,preloadNativeJobSearchExperience,registerJobSearchExperiencePreload,registerNativeJobSearchExperience}from'./features/job-search/nativeJobSearchRegistry.js';export{getNativeResumeExperience,preloadNativeResumeExperience,registerNativeResumeExperience,registerResumeExperiencePreload}from'./features/resume/nativeResumeRegistry.js';export{NativeAgentChat}from'./features/agent-chat/NativeAgentChat.js';export{resolveSurfaceAuthGraphqlUrl}from'./hooks/resolveSurfaceAuthGraphqlUrl.js';var index = new Feature(YantraMobileModule);export{index as default};//# sourceMappingURL=index.js.map
+import {Feature}from'@common-stack/client-react';import YantraMobileModule from'./module.js';export{default as Home}from'./screens/Home/HomeScreen.js';export{default as NewChat}from'./screens/NewChat/index.js';export{default as Account}from'./screens/Account/index.js';export{default as ChatHistory}from'./screens/ChatHistory/index.js';export{default as Apps}from'./screens/Apps/index.js';export{default as WebBuilder}from'./screens/WebBuilder/index.js';export{GatewayContextProvider,useGatewayContext}from'./contexts/GatewayContext.js';export{CdecliConnectionProvider,useCdecliConnection}from'./contexts/CdecliConnectionContext.js';export{ChatLiveStreamEngine}from'./contexts/ChatLiveStreamContext.js';export{MemoryPressureResponder}from'./features/memory/MemoryPressureResponder.js';export{BUILTIN_MOBILE_GATEWAYS,MAX_CONCURRENT_TASKS,STORAGE_KEYS}from'./config/constants.js';export{config}from'./config/env-config.js';export{useCdecliAutoConnect}from'./hooks/useCdecliAutoConnect.js';export{useObtainSystemToken}from'./hooks/useObtainSystemToken.js';export{appendSurfaceAuthParams,buildCdecliTokenInjection,buildSurfaceGateRecoveryScript,mintSurfaceSystemToken,resolveSurfaceCatalogBackend}from'./hooks/mintSurfaceSystemToken.js';export{isInstanceNotFoundError,useGatewayConnection}from'./hooks/useGatewayConnection.js';export{usePrerequisiteIds}from'./hooks/usePrerequisiteIds.js';export{useWorkspaceProvisioner}from'./hooks/useWorkspaceProvisioner.js';export{useGatewayRegistry}from'./hooks/useGatewayRegistry.js';export{agentSessionManager}from'./services/agentSessionManager.js';export{ensureGatewayApiKeys,resetGatewayApiKeyBridge}from'./services/gatewayApiKeyBridge.js';export{GatewayClient}from'./services/gatewayClient.js';export{BRIDGE_PROTOCOL_VERSION,BRIDGE_READY_ACTION,DEFAULT_BRIDGE_TIMEOUT_MS,DEFAULT_CHUNK_SIZE,MessageType}from'./bridge/types.js';export{WebViewManager}from'./bridge/WebViewManager.js';export{NativeWebViewBridge}from'./bridge/NativeWebViewBridge.js';export{TypedBridge}from'./bridge/TypedBridge.js';export{CancellableRequest}from'./bridge/CancellableRequest.js';export{ChunkedMessageHandler}from'./bridge/ChunkedMessageHandler.js';export{BridgeDebugger}from'./bridge/BridgeDebugger.js';export{WEB_BRIDGE_BOOTSTRAP}from'./bridge/webBridgeBootstrap.js';export{AuthenticatedFetch}from'./bridge/AuthenticatedFetch.js';export{AuthBridgeHandler}from'./bridge/handlers/AuthBridgeHandler.js';export{NavigationBridgeHandler}from'./bridge/handlers/NavigationBridgeHandler.js';export{AnalyticsBridgeHandler}from'./bridge/handlers/AnalyticsBridgeHandler.js';export{getPackagerHost,resolveMobileWebUrl}from'./bridge/resolveMobileWebUrl.js';export{YANTRA_LOADER_SIZE_COMPACT,YANTRA_LOADER_SIZE_DEFAULT,YantraBrandLoader}from'./components/YantraBrandLoader.js';export{default as CustomDrawer}from'./components/CustomDrawer.js';export{AppThemeProvider,useAppTheme}from'./theme/AppThemeProvider.js';export{InviteDeepLink}from'./features/invite/InviteDeepLink.js';export{ChatInviteDeepLink}from'./features/messaging/ChatInviteDeepLink.js';export{inviteTokenFromUrl,isInviteUrl}from'./features/invite/inviteLink.js';export{isKeyboardControllerAvailable}from'./utils/keyboardController.js';export{getNativeCanvasExperience,getNativeCanvasViewer,preloadNativeCanvasExperience,registerCanvasExperiencePreload,registerNativeCanvasExperience,registerNativeCanvasViewer}from'./features/canvas/nativeViewerRegistry.js';export{getNativeCharactersExperience,registerNativeCharactersExperience}from'./features/characters/nativeCharactersRegistry.js';export{getNativeChatExperience,registerNativeChatExperience}from'./features/messaging/nativeChatRegistry.js';export{getNativeShoppingExperience,preloadNativeShoppingExperience,registerNativeShoppingExperience,registerShoppingExperiencePreload}from'./features/shopping/nativeShoppingRegistry.js';export{getNativeTravelExperience,preloadNativeTravelExperience,registerNativeTravelExperience,registerTravelExperiencePreload}from'./features/travel/nativeTravelRegistry.js';export{getNativeJobSearchExperience,preloadNativeJobSearchExperience,registerJobSearchExperiencePreload,registerNativeJobSearchExperience}from'./features/job-search/nativeJobSearchRegistry.js';export{getNativeResumeExperience,preloadNativeResumeExperience,registerNativeResumeExperience,registerResumeExperiencePreload}from'./features/resume/nativeResumeRegistry.js';export{NativeAgentChat}from'./features/agent-chat/NativeAgentChat.js';export{resolveSurfaceAuthGraphqlUrl}from'./hooks/resolveSurfaceAuthGraphqlUrl.js';var index = new Feature(YantraMobileModule);export{index as default};//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../src/index.ts"],"sourcesContent":["import { Feature } from '@common-stack/client-react';\nimport YantraMobileModule from './module';\n\nexport default new Feature(YantraMobileModule);\nexport * from './screens';\nexport { GatewayContextProvider, useGatewayContext } from './contexts/GatewayContext';\nexport { CdecliConnectionProvider, useCdecliConnection } from './contexts/CdecliConnectionContext';\nexport { ChatLiveStreamEngine } from './contexts/ChatLiveStreamContext';\nexport { MemoryPressureResponder } from './features/memory/MemoryPressureResponder';\nexport * from './config/constants';\nexport { config } from './config/env-config';\nexport { useCdecliAutoConnect } from './hooks/useCdecliAutoConnect';\nexport { useObtainSystemToken } from './hooks/useObtainSystemToken';\nexport {\n    mintSurfaceSystemToken,\n    appendSurfaceAuthParams,\n    buildCdecliTokenInjection,\n    buildSurfaceGateRecoveryScript,\n    resolveSurfaceCatalogBackend,\n    resolveSurfaceAuthGraphqlUrl,\n} from './hooks/mintSurfaceSystemToken';\nexport { useGatewayConnection, isInstanceNotFoundError } from './hooks/useGatewayConnection';\nexport { usePrerequisiteIds } from './hooks/usePrerequisiteIds';\nexport { useWorkspaceProvisioner } from './hooks/useWorkspaceProvisioner';\nexport { useGatewayRegistry } from './hooks/useGatewayRegistry';\nexport * from './services';\nexport * from './bridge';\nexport {\n    YantraBrandLoader,\n    YANTRA_LOADER_SIZE_DEFAULT,\n    YANTRA_LOADER_SIZE_COMPACT,\n} from './components/YantraBrandLoader';\nexport { default as CustomDrawer } from './components/CustomDrawer';\nexport { AppThemeProvider, useAppTheme } from './theme/AppThemeProvider';\n// Invite deep links. Mounted by the app at the root (see portable-devices/mobile\n// App.tsx) rather than routed to: the invitee has neither an org nor a session,\n// and every mobile route requires both.\nexport { InviteDeepLink } from './features/invite/InviteDeepLink';\nexport { inviteTokenFromUrl, isInviteUrl } from './features/invite/inviteLink';\nexport { isKeyboardControllerAvailable } from './utils/keyboardController';\n// The canvas viewer seam. Exported from the index on purpose: the app (the MF\n// host) registers the federated viewer here and the CanvasBoard screen reads\n// it. Reachability from this entry is what makes rollup emit the registry as a\n// real shared module - as an internal-only file, `registerNativeCanvasViewer`\n// is never called inside the package, so rollup tree-shakes it and constant-\n// folds the screen down to its fallback branch.\nexport {\n    registerNativeCanvasViewer,\n    getNativeCanvasViewer,\n    registerNativeCanvasExperience,\n    getNativeCanvasExperience,\n    registerCanvasExperiencePreload,\n    preloadNativeCanvasExperience,\n} from './features/canvas/nativeViewerRegistry';\n// Characters seam - same reachability contract as the canvas registry above.\nexport {\n    registerNativeCharactersExperience,\n    getNativeCharactersExperience,\n} from './features/characters/nativeCharactersRegistry';\n// Chat seam - same reachability contract as the two registries above.\nexport { registerNativeChatExperience, getNativeChatExperience } from './features/messaging/nativeChatRegistry';\nexport {\n    registerNativeShoppingExperience,\n    getNativeShoppingExperience,\n    registerShoppingExperiencePreload,\n    preloadNativeShoppingExperience,\n} from './features/shopping/nativeShoppingRegistry';\nexport type { ShoppingExperienceProps } from './features/shopping/ShoppingExperience';\nexport type { ShoppingHostChat } from './features/shopping/hostChat';\nexport {\n    registerNativeTravelExperience,\n    getNativeTravelExperience,\n    registerTravelExperiencePreload,\n    preloadNativeTravelExperience,\n} from './features/travel/nativeTravelRegistry';\nexport type { TravelExperienceProps } from './features/travel/TravelExperience';\nexport type { TravelHostChat } from './features/travel/hostChat';\nexport {\n    registerNativeJobSearchExperience,\n    getNativeJobSearchExperience,\n    registerJobSearchExperiencePreload,\n    preloadNativeJobSearchExperience,\n} from './features/job-search/nativeJobSearchRegistry';\nexport type { JobSearchExperienceProps } from './features/job-search/JobSearchExperience';\nexport type { JobSearchHostChat } from './features/job-search/hostChat';\nexport {\n    registerNativeResumeExperience,\n    getNativeResumeExperience,\n    registerResumeExperiencePreload,\n    preloadNativeResumeExperience,\n} from './features/resume/nativeResumeRegistry';\nexport type { ResumeExperienceProps } from './features/resume/ResumeExperience';\nexport type { ResumeHostChat } from './features/resume/hostChat';\nexport { NativeAgentChat } from './features/agent-chat';\nexport type { AgentChatMessage, AgentChatSuggestion, NativeAgentChatProps } from './features/agent-chat';\nexport type {\n    ChatHostServices,\n    ChatViewer,\n    FederatedChatProps,\n    NativeChatExperienceProps,\n} from './features/messaging/chatHost';\n"],"names":[],"mappings":"s3IAEA,YAAe,IAAI,QAAQ,kBAAkB,CAAA"}
+{"version":3,"file":"index.js","sources":["../src/index.ts"],"sourcesContent":["import { Feature } from '@common-stack/client-react';\nimport YantraMobileModule from './module';\n\nexport default new Feature(YantraMobileModule);\nexport * from './screens';\nexport { GatewayContextProvider, useGatewayContext } from './contexts/GatewayContext';\nexport { CdecliConnectionProvider, useCdecliConnection } from './contexts/CdecliConnectionContext';\nexport { ChatLiveStreamEngine } from './contexts/ChatLiveStreamContext';\nexport { MemoryPressureResponder } from './features/memory/MemoryPressureResponder';\nexport * from './config/constants';\nexport { config } from './config/env-config';\nexport { useCdecliAutoConnect } from './hooks/useCdecliAutoConnect';\nexport { useObtainSystemToken } from './hooks/useObtainSystemToken';\nexport {\n    mintSurfaceSystemToken,\n    appendSurfaceAuthParams,\n    buildCdecliTokenInjection,\n    buildSurfaceGateRecoveryScript,\n    resolveSurfaceCatalogBackend,\n    resolveSurfaceAuthGraphqlUrl,\n} from './hooks/mintSurfaceSystemToken';\nexport { useGatewayConnection, isInstanceNotFoundError } from './hooks/useGatewayConnection';\nexport { usePrerequisiteIds } from './hooks/usePrerequisiteIds';\nexport { useWorkspaceProvisioner } from './hooks/useWorkspaceProvisioner';\nexport { useGatewayRegistry } from './hooks/useGatewayRegistry';\nexport * from './services';\nexport * from './bridge';\nexport {\n    YantraBrandLoader,\n    YANTRA_LOADER_SIZE_DEFAULT,\n    YANTRA_LOADER_SIZE_COMPACT,\n} from './components/YantraBrandLoader';\nexport { default as CustomDrawer } from './components/CustomDrawer';\nexport { AppThemeProvider, useAppTheme } from './theme/AppThemeProvider';\n// Invite deep links. Mounted by the app at the root (see portable-devices/mobile\n// App.tsx) rather than routed to: the invitee has neither an org nor a session,\n// and every mobile route requires both.\nexport { InviteDeepLink } from './features/invite/InviteDeepLink';\nexport { ChatInviteDeepLink } from './features/messaging/ChatInviteDeepLink';\nexport { inviteTokenFromUrl, isInviteUrl } from './features/invite/inviteLink';\nexport { isKeyboardControllerAvailable } from './utils/keyboardController';\n// The canvas viewer seam. Exported from the index on purpose: the app (the MF\n// host) registers the federated viewer here and the CanvasBoard screen reads\n// it. Reachability from this entry is what makes rollup emit the registry as a\n// real shared module - as an internal-only file, `registerNativeCanvasViewer`\n// is never called inside the package, so rollup tree-shakes it and constant-\n// folds the screen down to its fallback branch.\nexport {\n    registerNativeCanvasViewer,\n    getNativeCanvasViewer,\n    registerNativeCanvasExperience,\n    getNativeCanvasExperience,\n    registerCanvasExperiencePreload,\n    preloadNativeCanvasExperience,\n} from './features/canvas/nativeViewerRegistry';\n// Characters seam - same reachability contract as the canvas registry above.\nexport {\n    registerNativeCharactersExperience,\n    getNativeCharactersExperience,\n} from './features/characters/nativeCharactersRegistry';\n// Chat seam - same reachability contract as the two registries above.\nexport { registerNativeChatExperience, getNativeChatExperience } from './features/messaging/nativeChatRegistry';\nexport {\n    registerNativeShoppingExperience,\n    getNativeShoppingExperience,\n    registerShoppingExperiencePreload,\n    preloadNativeShoppingExperience,\n} from './features/shopping/nativeShoppingRegistry';\nexport type { ShoppingExperienceProps } from './features/shopping/ShoppingExperience';\nexport type { ShoppingHostChat } from './features/shopping/hostChat';\nexport {\n    registerNativeTravelExperience,\n    getNativeTravelExperience,\n    registerTravelExperiencePreload,\n    preloadNativeTravelExperience,\n} from './features/travel/nativeTravelRegistry';\nexport type { TravelExperienceProps } from './features/travel/TravelExperience';\nexport type { TravelHostChat } from './features/travel/hostChat';\nexport {\n    registerNativeJobSearchExperience,\n    getNativeJobSearchExperience,\n    registerJobSearchExperiencePreload,\n    preloadNativeJobSearchExperience,\n} from './features/job-search/nativeJobSearchRegistry';\nexport type { JobSearchExperienceProps } from './features/job-search/JobSearchExperience';\nexport type { JobSearchHostChat } from './features/job-search/hostChat';\nexport {\n    registerNativeResumeExperience,\n    getNativeResumeExperience,\n    registerResumeExperiencePreload,\n    preloadNativeResumeExperience,\n} from './features/resume/nativeResumeRegistry';\nexport type { ResumeExperienceProps } from './features/resume/ResumeExperience';\nexport type { ResumeHostChat } from './features/resume/hostChat';\nexport { NativeAgentChat } from './features/agent-chat';\nexport type { AgentChatMessage, AgentChatSuggestion, NativeAgentChatProps } from './features/agent-chat';\nexport type {\n    ChatHostServices,\n    ChatViewer,\n    FederatedChatProps,\n    NativeChatExperienceProps,\n} from './features/messaging/chatHost';\n"],"names":[],"mappings":"i8IAEA,YAAe,IAAI,QAAQ,kBAAkB,CAAA"}

package/lib/screens/Chat/index.js

@@ -1,4 +1,4 @@
-import {jsx,jsxs,Fragment}from'react/jsx-runtime';import {useMemo,useLayoutEffect,useCallback,useState,useRef,useEffect}from'react';import {useWindowDimensions,Keyboard,View,StyleSheet,Pressable}from'react-native';import {getDefaultLeftItems,Box,Text,InputToolBar}from'@admin-layout/gluestack-ui-mobile';import {useSafeAreaInsets,SafeAreaView}from'react-native-safe-area-context';import {useNavigation,useRoute,CommonActions}from'@react-navigation/native';import {MessageActionBar}from'../../features/chat/MessageActionBar.js';import {ChatTranscript}from'../../features/chat/ChatTranscript.js';import {AskUserCard}from'../../features/chat/AskUserCard.js';import {pendingAskUser}from'../../features/chat/askUser.js';import {useCdecliConnection}from'../../contexts/CdecliConnectionContext.js';import {useChatLiveStream}from'../../contexts/ChatLiveStreamContext.js';import {KeyboardAwareScreen,KeyboardComposerDock}from'../../components/KeyboardComposerDock.js';import {YantraBrandLoader,YANTRA_LOADER_SIZE_COMPACT}from'../../components/YantraBrandLoader.js';import ThinkingIndicator from'../../components/ThinkingIndicator.js';import {mobileTokens}from'../../theme/mobileTokens.js';import {useAppTheme}from'../../theme/AppThemeProvider.js';import DeepSearchModal from'../Home/components/DeepSearchModal.js';import {normalizeSummaryText,extractDeepSearchSources}from'../Home/deepSearchUtils.js';import {AudioRecorderPanel}from'../../features/audio-input/AudioRecorderPanel.js';import {NativeDictationBar}from'../../features/audio-input/NativeDictationBar.js';import {isNativeDictationAvailable}from'../../features/audio-input/nativeDictation.js';import {useImageAttachments}from'../../features/attachments/useImageAttachments.js';import {ComposerAttachmentBar}from'../../features/attachments/ComposerAttachmentBar.js';import {useComposerAttachMenu}from'../../features/attachments/ComposerAttachMenu.js';import {hasComposerAttachments,takeComposerAttachments}from'../../features/attachments/composerAttachmentHandoff.js';import {MicErrorBoundary}from'../../features/audio-input/MicErrorBoundary.js';import {requestMicPermission}from'../../features/audio-input/useAudioPermission.js';import {shouldRedirectToShop}from'../../features/shopping/chat/homeShoppingIntent.js';import {replaceWithShopNative,shopHandoffParams,pushShopNative}from'../../features/shopping/chat/openShopNative.js';var __defProp = Object.defineProperty;
+import {jsx,jsxs,Fragment}from'react/jsx-runtime';import {useMemo,useLayoutEffect,useCallback,useState,useRef,useEffect}from'react';import {useWindowDimensions,Keyboard,View,StyleSheet,Pressable}from'react-native';import {getDefaultLeftItems,Box,Text,InputToolBar}from'@admin-layout/gluestack-ui-mobile';import {useSafeAreaInsets,SafeAreaView}from'react-native-safe-area-context';import {useNavigation,useRoute,CommonActions}from'@react-navigation/native';import {MessageActionBar}from'../../features/chat/MessageActionBar.js';import {ChatTranscript}from'../../features/chat/ChatTranscript.js';import {AskUserCard}from'../../features/chat/AskUserCard.js';import {pendingAskUser}from'../../features/chat/askUser.js';import {PendingConnectorConnectCard}from'../../features/chat/ConnectorConnectPrompt.js';import {QueuedFollowUps}from'../../features/chat/QueuedFollowUps.js';import {displayConnectorConnectMessages,displayConnectorConnectText}from'common';import {useCdecliConnection}from'../../contexts/CdecliConnectionContext.js';import {useChatLiveStream}from'../../contexts/ChatLiveStreamContext.js';import {KeyboardAwareScreen,KeyboardComposerDock}from'../../components/KeyboardComposerDock.js';import {YantraBrandLoader,YANTRA_LOADER_SIZE_COMPACT}from'../../components/YantraBrandLoader.js';import ThinkingIndicator from'../../components/ThinkingIndicator.js';import {mobileTokens}from'../../theme/mobileTokens.js';import {useAppTheme}from'../../theme/AppThemeProvider.js';import DeepSearchModal from'../Home/components/DeepSearchModal.js';import {normalizeSummaryText,extractDeepSearchSources}from'../Home/deepSearchUtils.js';import {AudioRecorderPanel}from'../../features/audio-input/AudioRecorderPanel.js';import {NativeDictationBar}from'../../features/audio-input/NativeDictationBar.js';import {isNativeDictationAvailable}from'../../features/audio-input/nativeDictation.js';import {useImageAttachments}from'../../features/attachments/useImageAttachments.js';import {ComposerAttachmentBar}from'../../features/attachments/ComposerAttachmentBar.js';import {useComposerAttachMenu}from'../../features/attachments/ComposerAttachMenu.js';import {hasComposerAttachments,takeComposerAttachments}from'../../features/attachments/composerAttachmentHandoff.js';import {MicErrorBoundary}from'../../features/audio-input/MicErrorBoundary.js';import {requestMicPermission}from'../../features/audio-input/useAudioPermission.js';import {shouldRedirectToShop}from'../../features/shopping/chat/homeShoppingIntent.js';import {replaceWithShopNative,shopHandoffParams,pushShopNative}from'../../features/shopping/chat/openShopNative.js';var __defProp = Object.defineProperty;
 var __defProps = Object.defineProperties;
 var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
 var __getOwnPropSymbols = Object.getOwnPropertySymbols;
@@ -47,25 +47,38 @@ function ChatScreen() {
     cdecli.setActiveChannelId(channelId);
   }, [channelId, cdecli.setActiveChannelId]);
   const chat = useChatLiveStream();
-  const transcriptRows = useMemo(() => [
-    ...chat.messages.map((msg, index) => ({
-      id: `msg-${index}-${msg.role}`,
-      role: msg.role,
-      content: msg.content,
-      attachments: msg.attachments,
-      metadata: msg.metadata
-    })),
-    // Turns typed while the gateway was down. They live in the outbox, not in
-    // the thread, so they survive a backend hydration and an app restart - and
-    // they are always the newest rows, so they belong at the end.
-    ...chat.queuedMessages.map((queued) => ({
-      id: `queued-${queued.id}`,
-      role: "user",
-      content: queued.text,
-      attachments: queued.attachments,
-      queued: true
-    }))
-  ], [chat.messages, chat.queuedMessages]);
+  const transcriptRows = useMemo(() => {
+    var _a2;
+    const waiting = chat.queuedFollowUps.map((queued) => queued.text.trim());
+    const hidden = /* @__PURE__ */ new Set();
+    for (let i = chat.messages.length - 1; i >= 0 && waiting.length > 0; i -= 1) {
+      const msg = chat.messages[i];
+      const match = msg.role === "user" ? waiting.indexOf(((_a2 = msg.content) != null ? _a2 : "").trim()) : -1;
+      if (match >= 0) {
+        hidden.add(i);
+        waiting.splice(match, 1);
+      }
+    }
+    return [
+      ...chat.messages.flatMap((msg, index) => hidden.has(index) ? [] : [{
+        id: `msg-${index}-${msg.role}`,
+        role: msg.role,
+        content: msg.content,
+        attachments: msg.attachments,
+        metadata: msg.metadata
+      }]),
+      // Turns typed while the gateway was down. They live in the outbox, not in
+      // the thread, so they survive a backend hydration and an app restart - and
+      // they are always the newest rows, so they belong at the end.
+      ...chat.queuedMessages.map((queued) => ({
+        id: `queued-${queued.id}`,
+        role: "user",
+        content: queued.text,
+        attachments: queued.attachments,
+        queued: true
+      }))
+    ];
+  }, [chat.messages, chat.queuedMessages, chat.queuedFollowUps]);
   const {
     messages,
     response,
@@ -77,6 +90,9 @@ function ChatScreen() {
     queuedMessages,
     flushQueuedMessages,
     discardQueuedMessages,
+    queuedFollowUps,
+    cancelQueuedFollowUp,
+    sendQueuedNow,
     sendMessage,
     cancel
   } = chat;
@@ -181,6 +197,12 @@ function ChatScreen() {
     content: response
   }] : []]), [transcriptRows, response]);
   const showAskCard = Boolean(pendingAsk && !resolvedAskIds[pendingAsk.requestId]);
+  const sendConnectorReply = useCallback(async (text) => {
+    if (!channelId) return false;
+    return await sendMessage(text, void 0, channelId) !== "failed";
+  }, [sendMessage, channelId]);
+  const transcriptDisplayRows = useMemo(() => displayConnectorConnectMessages(transcriptRows), [transcriptRows]);
+  const transcriptStreaming = useMemo(() => response ? displayConnectorConnectText(response, true) : response, [response]);
   const handleSend = useCallback((text) => {
     var _a2;
     const pending = imageAttachments.forSend();
@@ -364,7 +386,7 @@ function ChatScreen() {
     onSend: () => handleSend(),
     onMic: handleMicPress,
     disabled: !channelId,
-    // Empty + streaming → Stop. Typed follow-up → Send (steer). Never lock the composer.
+    // Empty + streaming → Stop. Typed follow-up → Send (queued for the agent). Never lock the composer.
     isLoading: canSubmit ? false : isLoading,
     onStop: isStreaming && !canSubmit ? cancel : void 0,
     steerable: isLoading || isStreaming
@@ -422,7 +444,7 @@ function ChatScreen() {
         /* @__PURE__ */ jsx(Text, { style: [styles.statusText, {
           color: secondaryTextColor
         }], children: "Connecting gateway\u2026" })
-      ] }) : /* @__PURE__ */ jsx(View, { style: styles.transcriptPane, children: /* @__PURE__ */ jsx(ChatTranscript, { messages: transcriptRows, streamingContent: response, listFooter: showSendingLoader && pinSendingLoaderNearComposer ? /* @__PURE__ */ jsx(View, { style: styles.thinkingInThread, children: /* @__PURE__ */ jsx(ThinkingIndicator, { variant: "awaiting", color: secondaryTextColor, isDark }) }) : null, renderMessageActions, isDark, listContentStyle: {
+      ] }) : /* @__PURE__ */ jsx(View, { style: styles.transcriptPane, children: /* @__PURE__ */ jsx(ChatTranscript, { messages: transcriptDisplayRows, streamingContent: transcriptStreaming, listFooter: showSendingLoader && pinSendingLoaderNearComposer ? /* @__PURE__ */ jsx(View, { style: styles.thinkingInThread, children: /* @__PURE__ */ jsx(ThinkingIndicator, { variant: "awaiting", color: secondaryTextColor, isDark }) }) : null, renderMessageActions, isDark, listContentStyle: {
         paddingTop: 12,
         paddingBottom: 8,
         margin: 0,
@@ -445,6 +467,13 @@ function ChatScreen() {
         }, onDismiss: () => setResolvedAskIds((prev) => __spreadProps(__spreadValues({}, prev), {
           [pendingAsk.requestId]: true
         })) }) }) : null,
+        showAskCard ? null : /* @__PURE__ */ jsx(PendingConnectorConnectCard, { messages: transcriptRows, send: sendConnectorReply, isDark, style: {
+          width: contentMaxWidth,
+          paddingHorizontal: 8
+        } }),
+        /* @__PURE__ */ jsx(View, { style: {
+          width: contentMaxWidth
+        }, children: /* @__PURE__ */ jsx(QueuedFollowUps, { items: queuedFollowUps, onCancel: cancelQueuedFollowUp, onSendNow: sendQueuedNow, isDark }) }),
         /* @__PURE__ */ jsxs(View, { style: [styles.bottomComposerInner, {
           width: contentMaxWidth
         }], children: [