@aglyn/aglyn 1.0.0-beta.263 → 1.0.0-beta.264

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/aglyn",
-  "version": "1.0.0-beta.263",
+  "version": "1.0.0-beta.264",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -37,16 +37,16 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/shared-data-enums": "1.0.0-beta.263",
-    "@aglyn/shared-data-mdi": "1.0.0-beta.263",
-    "@aglyn/shared-data-types": "1.0.0-beta.263",
-    "@aglyn/shared-util-email": "1.0.0-beta.263",
-    "@aglyn/shared-util-first-touch": "1.0.0-beta.263",
-    "@aglyn/shared-util-http": "1.0.0-beta.263",
-    "@aglyn/shared-util-logger": "1.0.0-beta.263",
-    "@aglyn/shared-util-timestamp": "1.0.0-beta.263",
-    "@aglyn/shared-util-tools": "1.0.0-beta.263",
-    "@aglyn/shared-util-vendor": "1.0.0-beta.263",
+    "@aglyn/shared-data-enums": "1.0.0-beta.264",
+    "@aglyn/shared-data-mdi": "1.0.0-beta.264",
+    "@aglyn/shared-data-types": "1.0.0-beta.264",
+    "@aglyn/shared-util-email": "1.0.0-beta.264",
+    "@aglyn/shared-util-first-touch": "1.0.0-beta.264",
+    "@aglyn/shared-util-http": "1.0.0-beta.264",
+    "@aglyn/shared-util-logger": "1.0.0-beta.264",
+    "@aglyn/shared-util-timestamp": "1.0.0-beta.264",
+    "@aglyn/shared-util-tools": "1.0.0-beta.264",
+    "@aglyn/shared-util-vendor": "1.0.0-beta.264",
     "@data-driven-forms/react-form-renderer": "^4.2.0",
     "@msgpack/msgpack": "^3.1.3",
     "@types/unist": "^3.0.3",

package/src/lib/app-utils/native-app-web-view.d.ts

@@ -0,0 +1,63 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Whether a page is running inside the native apps' web view (AGL-3894).
+ *
+ * The Aglyn apps (iPhone, iPad, Mac, Android, Windows) open the Besigner in
+ * an in-app web view. Inside it the app owns what a browser tab would offer:
+ * its own push notifications, its own Done button, its own window title. The
+ * page uses this to leave those web-only extras out.
+ *
+ * Two signals, either one enough:
+ *
+ * - **The user-agent marker.** Every app's web view appends
+ *   `AglynApp/<version> (<platform>)` to its user agent (WKWebView's
+ *   `applicationNameForUserAgent`, Android's `userAgentString`, WebView2's
+ *   `UserAgent`). It is there from the first request, whichever page the
+ *   view opens first, so it holds even for a build that predates the entry
+ *   page below.
+ * - **The entry page's session mark.** `/auth/besigner` marks the tab when
+ *   the app opens the Besigner through it (AGL-3850). Session storage lives
+ *   exactly as long as the web view and never reaches a browser tab.
+ *
+ * PRESENTATION ONLY. A user agent is whatever the client says it is, so this
+ * decides what the page shows (a prompt, a back arrow, a title) and never
+ * what anyone may do: no auth, entitlement or security decision reads it.
+ */
+/** The product token every app's web view adds to its user agent. */
+export declare const NATIVE_APP_USER_AGENT_PRODUCT = "AglynApp";
+/**
+ * The marker the apps append, for the native code's specs and for anyone
+ * reading this file to know the exact shape: `AglynApp/1.4.0 (ios)`.
+ */
+export declare function nativeAppUserAgentMarker(version: string, platform: string): string;
+/** Whether a user-agent string carries the apps' marker. */
+export declare function userAgentNamesNativeApp(userAgent: string | null | undefined): boolean;
+/**
+ * Remember, for this tab, that it is the native apps' web view. Called by the
+ * Besigner entry page the apps open first.
+ */
+export declare function markNativeAppWebView(): void;
+/** Whether this page is inside the native apps' web view. */
+export declare function isNativeAppWebView(): boolean;
+/**
+ * `isNativeAppWebView()` for a render. The server cannot tell, so it renders
+ * the browser's page and hydration agrees with it; the client then renders
+ * again with the answer. Neither signal changes while a page is open, so
+ * there is nothing to subscribe to.
+ */
+export declare function useIsNativeAppWebView(): boolean;

package/src/lib/app-utils/native-app-web-view.js

@@ -0,0 +1,83 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { useSyncExternalStore } from "react";
+/**
+ * Whether a page is running inside the native apps' web view (AGL-3894).
+ *
+ * The Aglyn apps (iPhone, iPad, Mac, Android, Windows) open the Besigner in
+ * an in-app web view. Inside it the app owns what a browser tab would offer:
+ * its own push notifications, its own Done button, its own window title. The
+ * page uses this to leave those web-only extras out.
+ *
+ * Two signals, either one enough:
+ *
+ * - **The user-agent marker.** Every app's web view appends
+ *   `AglynApp/<version> (<platform>)` to its user agent (WKWebView's
+ *   `applicationNameForUserAgent`, Android's `userAgentString`, WebView2's
+ *   `UserAgent`). It is there from the first request, whichever page the
+ *   view opens first, so it holds even for a build that predates the entry
+ *   page below.
+ * - **The entry page's session mark.** `/auth/besigner` marks the tab when
+ *   the app opens the Besigner through it (AGL-3850). Session storage lives
+ *   exactly as long as the web view and never reaches a browser tab.
+ *
+ * PRESENTATION ONLY. A user agent is whatever the client says it is, so this
+ * decides what the page shows (a prompt, a back arrow, a title) and never
+ * what anyone may do: no auth, entitlement or security decision reads it.
+ */ /** The product token every app's web view adds to its user agent. */ export const NATIVE_APP_USER_AGENT_PRODUCT = 'AglynApp';
+/** Set by the Besigner entry page for the life of the web view's tab. */ const NATIVE_APP_WEB_VIEW_KEY = 'aglyn:native-app-web-view';
+/** `AglynApp/<version>` as its own token: not inside a longer product name. */ const USER_AGENT_MARKER = new RegExp(`(?:^|[\\s(;])${NATIVE_APP_USER_AGENT_PRODUCT}/[^\\s/]+`);
+/**
+ * The marker the apps append, for the native code's specs and for anyone
+ * reading this file to know the exact shape: `AglynApp/1.4.0 (ios)`.
+ */ export function nativeAppUserAgentMarker(version, platform) {
+    return `${NATIVE_APP_USER_AGENT_PRODUCT}/${version || '0'} (${platform})`;
+}
+/** Whether a user-agent string carries the apps' marker. */ export function userAgentNamesNativeApp(userAgent) {
+    return typeof userAgent === 'string' && USER_AGENT_MARKER.test(userAgent);
+}
+/**
+ * Remember, for this tab, that it is the native apps' web view. Called by the
+ * Besigner entry page the apps open first.
+ */ export function markNativeAppWebView() {
+    try {
+        window.sessionStorage.setItem(NATIVE_APP_WEB_VIEW_KEY, '1');
+    } catch (unused) {
+    // Storage refused: the user-agent marker still answers.
+    }
+}
+/** Whether this page is inside the native apps' web view. */ export function isNativeAppWebView() {
+    var _window_navigator;
+    if (typeof window === 'undefined') return false;
+    if (userAgentNamesNativeApp((_window_navigator = window.navigator) == null ? void 0 : _window_navigator.userAgent)) return true;
+    try {
+        return window.sessionStorage.getItem(NATIVE_APP_WEB_VIEW_KEY) === '1';
+    } catch (unused) {
+        return false;
+    }
+}
+const subscribeNever = ()=>()=>undefined;
+const onServer = ()=>false;
+/**
+ * `isNativeAppWebView()` for a render. The server cannot tell, so it renders
+ * the browser's page and hydration agrees with it; the client then renders
+ * again with the answer. Neither signal changes while a page is open, so
+ * there is nothing to subscribe to.
+ */ export function useIsNativeAppWebView() {
+    return useSyncExternalStore(subscribeNever, isNativeAppWebView, onServer);
+}
+
+//# sourceMappingURL=native-app-web-view.js.map

package/src/lib/app-utils/native-app-web-view.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/native-app-web-view.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { useSyncExternalStore } from 'react'\n\n/**\n * Whether a page is running inside the native apps' web view (AGL-3894).\n *\n * The Aglyn apps (iPhone, iPad, Mac, Android, Windows) open the Besigner in\n * an in-app web view. Inside it the app owns what a browser tab would offer:\n * its own push notifications, its own Done button, its own window title. The\n * page uses this to leave those web-only extras out.\n *\n * Two signals, either one enough:\n *\n * - **The user-agent marker.** Every app's web view appends\n *   `AglynApp/<version> (<platform>)` to its user agent (WKWebView's\n *   `applicationNameForUserAgent`, Android's `userAgentString`, WebView2's\n *   `UserAgent`). It is there from the first request, whichever page the\n *   view opens first, so it holds even for a build that predates the entry\n *   page below.\n * - **The entry page's session mark.** `/auth/besigner` marks the tab when\n *   the app opens the Besigner through it (AGL-3850). Session storage lives\n *   exactly as long as the web view and never reaches a browser tab.\n *\n * PRESENTATION ONLY. A user agent is whatever the client says it is, so this\n * decides what the page shows (a prompt, a back arrow, a title) and never\n * what anyone may do: no auth, entitlement or security decision reads it.\n */\n\n/** The product token every app's web view adds to its user agent. */\nexport const NATIVE_APP_USER_AGENT_PRODUCT = 'AglynApp'\n\n/** Set by the Besigner entry page for the life of the web view's tab. */\nconst NATIVE_APP_WEB_VIEW_KEY = 'aglyn:native-app-web-view'\n\n/** `AglynApp/<version>` as its own token: not inside a longer product name. */\nconst USER_AGENT_MARKER = new RegExp(\n  `(?:^|[\\\\s(;])${NATIVE_APP_USER_AGENT_PRODUCT}/[^\\\\s/]+`,\n)\n\n/**\n * The marker the apps append, for the native code's specs and for anyone\n * reading this file to know the exact shape: `AglynApp/1.4.0 (ios)`.\n */\nexport function nativeAppUserAgentMarker(\n  version: string,\n  platform: string,\n): string {\n  return `${NATIVE_APP_USER_AGENT_PRODUCT}/${version || '0'} (${platform})`\n}\n\n/** Whether a user-agent string carries the apps' marker. */\nexport function userAgentNamesNativeApp(\n  userAgent: string | null | undefined,\n): boolean {\n  return typeof userAgent === 'string' && USER_AGENT_MARKER.test(userAgent)\n}\n\n/**\n * Remember, for this tab, that it is the native apps' web view. Called by the\n * Besigner entry page the apps open first.\n */\nexport function markNativeAppWebView(): void {\n  try {\n    window.sessionStorage.setItem(NATIVE_APP_WEB_VIEW_KEY, '1')\n  } catch {\n    // Storage refused: the user-agent marker still answers.\n  }\n}\n\n/** Whether this page is inside the native apps' web view. */\nexport function isNativeAppWebView(): boolean {\n  if (typeof window === 'undefined') return false\n  if (userAgentNamesNativeApp(window.navigator?.userAgent)) return true\n  try {\n    return window.sessionStorage.getItem(NATIVE_APP_WEB_VIEW_KEY) === '1'\n  } catch {\n    return false\n  }\n}\n\nconst subscribeNever = (): (() => void) => () => undefined\nconst onServer = (): boolean => false\n\n/**\n * `isNativeAppWebView()` for a render. The server cannot tell, so it renders\n * the browser's page and hydration agrees with it; the client then renders\n * again with the answer. Neither signal changes while a page is open, so\n * there is nothing to subscribe to.\n */\nexport function useIsNativeAppWebView(): boolean {\n  return useSyncExternalStore(subscribeNever, isNativeAppWebView, onServer)\n}\n"],"names":["useSyncExternalStore","NATIVE_APP_USER_AGENT_PRODUCT","NATIVE_APP_WEB_VIEW_KEY","USER_AGENT_MARKER","RegExp","nativeAppUserAgentMarker","version","platform","userAgentNamesNativeApp","userAgent","test","markNativeAppWebView","window","sessionStorage","setItem","isNativeAppWebView","navigator","getItem","subscribeNever","undefined","onServer","useIsNativeAppWebView"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,oBAAoB,QAAQ,QAAO;AAE5C;;;;;;;;;;;;;;;;;;;;;;;CAuBC,GAED,mEAAmE,GACnE,OAAO,MAAMC,gCAAgC,WAAU;AAEvD,uEAAuE,GACvE,MAAMC,0BAA0B;AAEhC,6EAA6E,GAC7E,MAAMC,oBAAoB,IAAIC,OAC5B,CAAC,aAAa,EAAEH,8BAA8B,SAAS,CAAC;AAG1D;;;CAGC,GACD,OAAO,SAASI,yBACdC,OAAe,EACfC,QAAgB;IAEhB,OAAO,GAAGN,8BAA8B,CAAC,EAAEK,WAAW,IAAI,EAAE,EAAEC,SAAS,CAAC,CAAC;AAC3E;AAEA,0DAA0D,GAC1D,OAAO,SAASC,wBACdC,SAAoC;IAEpC,OAAO,OAAOA,cAAc,YAAYN,kBAAkBO,IAAI,CAACD;AACjE;AAEA;;;CAGC,GACD,OAAO,SAASE;IACd,IAAI;QACFC,OAAOC,cAAc,CAACC,OAAO,CAACZ,yBAAyB;IACzD,EAAE,eAAM;IACN,wDAAwD;IAC1D;AACF;AAEA,2DAA2D,GAC3D,OAAO,SAASa;QAEcH;IAD5B,IAAI,OAAOA,WAAW,aAAa,OAAO;IAC1C,IAAIJ,yBAAwBI,oBAAAA,OAAOI,SAAS,qBAAhBJ,kBAAkBH,SAAS,GAAG,OAAO;IACjE,IAAI;QACF,OAAOG,OAAOC,cAAc,CAACI,OAAO,CAACf,6BAA6B;IACpE,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA,MAAMgB,iBAAiB,IAAoB,IAAMC;AACjD,MAAMC,WAAW,IAAe;AAEhC;;;;;CAKC,GACD,OAAO,SAASC;IACd,OAAOrB,qBAAqBkB,gBAAgBH,oBAAoBK;AAClE"}