@ateam-ai-mobile/ui 0.1.3 → 0.1.4

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ateam-ai-mobile/ui",
-  "version": "0.1.3",
-  "description": "Prebuilt ADAS chat experience for React Native \u2014 full-screen chat, chips, widget views. Built on @ateam-ai-mobile/core + @ateam-ai-mobile/plugin-runtime.",
+  "version": "0.1.4",
+  "description": "Prebuilt ADAS chat experience for React Native — full-screen chat, chips, widget views. Built on @ateam-ai-mobile/core + @ateam-ai-mobile/plugin-runtime.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "scripts": {
@@ -9,8 +9,8 @@
     "build": "tsup"
   },
   "dependencies": {
-    "@ateam-ai-mobile/core": "0.1.3",
-    "@ateam-ai-mobile/plugin-runtime": "0.1.3",
+    "@ateam-ai-mobile/core": "^0.1.4",
+    "@ateam-ai-mobile/plugin-runtime": "^0.1.4",
     "zustand": "^5.0.0"
   },
   "peerDependencies": {
@@ -31,4 +31,4 @@
   "publishConfig": {
     "access": "public"
   }
-}
+}

package/src/voice/VoiceCallSheet.tsx

@@ -23,6 +23,8 @@ import useVoiceCall from './useVoiceCall';
 interface Props {
   visible: boolean;
   onClose: () => void;
+  /** Optional skill to hand the mic to on connect (voice /session → takeMic). */
+  skillSlug?: string;
 }
 
 const fontFam = Platform.OS === 'ios' ? 'SF Pro Rounded' : undefined;
@@ -88,12 +90,12 @@ function HighlightedText({
   );
 }
 
-export default function VoiceCallSheet({ visible, onClose }: Props) {
+export default function VoiceCallSheet({ visible, onClose, skillSlug }: Props) {
   const {
     callState, aiPartial, userPartial, transcript, error, muted,
     startCall, stopCall, toggleMute, handleWebViewMessage, getWebViewSource, webViewRef,
     injectedTrackHook,
-  } = useVoiceCall();
+  } = useVoiceCall({ skillSlug });
 
   const scrollRef = useRef<ScrollView>(null);
 

package/src/voice/useVoiceCall.ts

@@ -7,7 +7,36 @@
  * without it. Identity (token/tenant/actor) comes from the host-owned config.
  */
 import { useState, useRef, useCallback } from 'react';
-import { getVoiceApiUrl, getToken, getTenant, getUser } from '@ateam-ai-mobile/core';
+import { getVoiceApiUrl, getToken, getTenant, getUser, refreshToken } from '@ateam-ai-mobile/core';
+
+/**
+ * The voice WebView bakes the JWT into its URL once at mount and never
+ * refreshes it (unlike the SDK REST client, which self-heals on 401). So a
+ * token that has gone stale by the time the user taps the mic is handed to
+ * voice-backend and rejected by Core /api/auth/me ("Invalid or expired
+ * token"). Guard: if the current token is expired or within `SKEW_MS` of
+ * expiry, refresh it BEFORE the WebView mounts so it gets a fresh token.
+ * Cheap in the common case — we only pay the round-trip when actually near
+ * expiry (decoded locally, no network unless needed).
+ */
+const TOKEN_REFRESH_SKEW_MS = 90_000; // refresh if <90s of life left (or expired)
+function tokenNeedsRefresh(token: string | null): boolean {
+  if (!token) return true;
+  try {
+    const payloadB64 = token.split('.')[1];
+    const padded = payloadB64.replace(/-/g, '+').replace(/_/g, '/');
+    // Hermes has atob; Buffer fallback for older runtimes (mirrors
+    // apps/mobile authStore.decodeJwtPayload).
+    const json = typeof atob === 'function'
+      ? atob(padded)
+      : Buffer.from(padded, 'base64').toString('utf8');
+    const exp = JSON.parse(json)?.exp;
+    if (typeof exp !== 'number') return false;
+    return Date.now() >= exp * 1000 - TOKEN_REFRESH_SKEW_MS;
+  } catch {
+    return false; // can't decode → let the server decide, don't block the call
+  }
+}
 
 export interface TranscriptEntry {
   role: 'user' | 'ai' | 'tool';
@@ -113,7 +142,7 @@ const buildMuteScript = (muted: boolean) => `
 })(${muted}); true;
 `;
 
-export default function useVoiceCall() {
+export default function useVoiceCall({ skillSlug }: { skillSlug?: string } = {}) {
   const [callState, setCallState] = useState<CallState>('idle');
   const [sessionId, setSessionId] = useState<string | null>(null);
   const [error, setError] = useState<string | null>(null);
@@ -156,12 +185,25 @@ export default function useVoiceCall() {
     } catch {}
   }, []);
 
-  const startCall = useCallback(() => {
-    setCallState('connecting');
+  const startCall = useCallback(async () => {
     setError(null);
     setTranscript([]);
     setAiPartial('');
     setUserPartial('');
+    // Ensure the WebView is handed a FRESH token BEFORE it mounts (it never
+    // refreshes once mounted, and the WebView mounts as soon as callState
+    // leaves 'idle'). Only pays a round-trip when the token is expired or
+    // near-expiry; otherwise instant. Flip to 'connecting' only after, so
+    // getWebViewSource() reads the refreshed token.
+    try {
+      if (tokenNeedsRefresh(getToken())) {
+        await refreshToken();
+      }
+    } catch {
+      // Refresh failed — proceed with whatever token we have; voice-backend
+      // will surface a clean auth error rather than us blocking the call.
+    }
+    setCallState('connecting');
   }, []);
 
   const stopCall = useCallback(() => {
@@ -187,10 +229,13 @@ export default function useVoiceCall() {
     const token = getToken();
     const tenant = getTenant();
     const actorId = getUser()?.actorId || '';
+    // skillSlug (when opened for a specific skill) is read by the voice mini-app
+    // and posted to /session, which turns it into takeMic (E1 held-mic entry).
+    const skillParam = skillSlug ? `&skillSlug=${encodeURIComponent(skillSlug)}` : '';
     return {
-      uri: `${getVoiceApiUrl()}/app?mode=mini&embedded=rn&authToken=${encodeURIComponent(token || '')}&tenant=${encodeURIComponent(tenant)}&actorId=${encodeURIComponent(actorId)}`,
+      uri: `${getVoiceApiUrl()}/app?mode=mini&embedded=rn&authToken=${encodeURIComponent(token || '')}&tenant=${encodeURIComponent(tenant)}&actorId=${encodeURIComponent(actorId)}${skillParam}`,
     };
-  }, []);
+  }, [skillSlug]);
 
   return {
     callState, sessionId, error, transcript, aiPartial, userPartial, muted,