@bigbinary/neeto-commons-rn 2.3.0 → 2.3.1

package/README.md

@@ -58,7 +58,8 @@ yarn android:<environment>-release
 The project includes detailed documentation on various aspects of the
 application:
 
-- [Android Notifications](./docs/android-notifications.md) - Comprehensive guide
-  to the notification system for Android, including handling for Android 13+
-  permission requirements.
+- [Push notifications](./docs/notifications.md) - Delivery, registration,
+  permission and display, for both platforms.
+- [Mobile sign-in](./docs/authentication.md) - Email, Google and Apple, and how
+  google-signin is configured.
   

package/lib/typescript/components/LineLoader.d.ts

@@ -1,13 +1,16 @@
 import React from "react";
 export interface LineLoaderProps {
     isLoading?: boolean;
+    backgroundColor?: string;
+    foregroundColor?: string;
     height?: number;
 }
 /**
- * @deprecated Absorbed by the UI library's Skeleton
- * (<Skeleton variant="line" animated />). This shim keeps the v2 prop
- * contract for one deprecation cycle and disappears in the next commons
- * major.
+ * neetoui-rn v2's LineLoader. The v3 migration pointed this at the
+ * library's Skeleton, which only pulses a `grey200` strip — invisible on a
+ * white screen. The strip always occupies `height`, so toggling `isLoading`
+ * never shifts layout, and `key` remounts the loader so the sweep restarts
+ * from the left on every load.
  */
-export declare const LineLoader: ({ isLoading, height, }: LineLoaderProps) => React.JSX.Element;
+export declare const LineLoader: ({ isLoading, backgroundColor, foregroundColor, height, }: LineLoaderProps) => React.JSX.Element;
 //# sourceMappingURL=LineLoader.d.ts.map

package/lib/typescript/components/LineLoader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LineLoader.d.ts","sourceRoot":"","sources":["../../../src/components/LineLoader.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAM1B,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,eAAO,MAAM,UAAU,GAAI,wBAGxB,eAAe,sBAEjB,CAAC"}
+{"version":3,"file":"LineLoader.d.ts","sourceRoot":"","sources":["../../../src/components/LineLoader.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAO1B,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,GAAI,0DAKxB,eAAe,sBAajB,CAAC"}

package/lib/typescript/components/SocialButton.d.ts

@@ -7,5 +7,13 @@ export interface SocialButtonProps {
     style?: StyleProp<ViewStyle>;
     onPress: () => void;
 }
+/**
+ * Pressable rather than the library's Touchable: Touchable always sets an
+ * `android_ripple`, and the `grey800` (#1f1f1f) colour this passed painted an
+ * opaque near-black wash over the whole button on Android. iOS never showed
+ * it, because `android_ripple` is a no-op there. neetoui-rn's own Button is
+ * a bare Pressable for the same reason, so the press feedback is the opacity
+ * dip on both platforms.
+ */
 export declare const SocialButton: ({ variant, disabled, isLoading, style, onPress, }: SocialButtonProps) => React.JSX.Element;
 //# sourceMappingURL=SocialButton.d.ts.map

package/lib/typescript/components/SocialButton.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SocialButton.d.ts","sourceRoot":"","sources":["../../../src/components/SocialButton.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAc,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAkB1E,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC5B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7B,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAKD,eAAO,MAAM,YAAY,GAAI,mDAM1B,iBAAiB,sBAyBnB,CAAC"}
+{"version":3,"file":"SocialButton.d.ts","sourceRoot":"","sources":["../../../src/components/SocialButton.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAiBtB,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC5B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7B,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAKD;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,GAAI,mDAM1B,iBAAiB,sBAwBnB,CAAC"}

package/lib/typescript/components/WorkspaceSwitcherPane.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WorkspaceSwitcherPane.d.ts","sourceRoot":"","sources":["../../../src/components/WorkspaceSwitcherPane.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAkB1B,MAAM,WAAW,0BAA0B;IACzC,6EAA6E;IAC7E,UAAU,EAAE;QAAE,WAAW,EAAE,MAAM,IAAI,CAAA;KAAE,CAAC;CACzC;AAED,eAAO,MAAM,qBAAqB,GAAI,iBAEnC,0BAA0B,sBAyD5B,CAAC"}
+{"version":3,"file":"WorkspaceSwitcherPane.d.ts","sourceRoot":"","sources":["../../../src/components/WorkspaceSwitcherPane.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAkB1B,MAAM,WAAW,0BAA0B;IACzC,6EAA6E;IAC7E,UAAU,EAAE;QAAE,WAAW,EAAE,MAAM,IAAI,CAAA;KAAE,CAAC;CACzC;AAED,eAAO,MAAM,qBAAqB,GAAI,iBAEnC,0BAA0B,sBAgE5B,CAAC"}

package/lib/typescript/config/axios/constants.d.ts

@@ -1,6 +1,10 @@
 import { type CaseConversionOptions } from "./types";
 export declare const DEFAULT_CASE_CONVERSION: boolean;
 export declare const UUID_SEGMENT: RegExp;
+export declare const HEX_ID_SEGMENT: RegExp;
+export declare const OPAQUE_ID_SEGMENT: RegExp;
+export declare const RESERVED_URL_SEGMENTS: Set<string>;
+export declare const MIN_SLUG_LENGTH = 5;
 export declare const shouldEnableCaseConversion: (options?: CaseConversionOptions) => boolean;
 export declare const SENSITIVE_KEY_PATTERNS: RegExp[];
 export declare const REDACTED = "<redacted>";

package/lib/typescript/config/axios/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/config/axios/constants.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAErD,eAAO,MAAM,uBAAuB,SAA2C,CAAC;AAEhF,eAAO,MAAM,YAAY,QAC0C,CAAC;AAEpE,eAAO,MAAM,0BAA0B,GACrC,UAAS,qBAA0B,YASpC,CAAC;AAOF,eAAO,MAAM,sBAAsB,UAQlC,CAAC;AAEF,eAAO,MAAM,QAAQ,eAAe,CAAC;AAErC,eAAO,MAAM,gBAAgB,IAAI,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/config/axios/constants.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAErD,eAAO,MAAM,uBAAuB,SAA2C,CAAC;AAEhF,eAAO,MAAM,YAAY,QAC0C,CAAC;AAKpE,eAAO,MAAM,cAAc,QAAqB,CAAC;AAIjD,eAAO,MAAM,iBAAiB,QAAwC,CAAC;AAKvE,eAAO,MAAM,qBAAqB,aAUhC,CAAC;AAKH,eAAO,MAAM,eAAe,IAAI,CAAC;AAEjC,eAAO,MAAM,0BAA0B,GACrC,UAAS,qBAA0B,YASpC,CAAC;AAOF,eAAO,MAAM,sBAAsB,UAQlC,CAAC;AAEF,eAAO,MAAM,QAAQ,eAAe,CAAC;AAErC,eAAO,MAAM,gBAAgB,IAAI,CAAC"}

package/lib/typescript/config/axios/groupingKey.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"groupingKey.d.ts","sourceRoot":"","sources":["../../../../src/config/axios/groupingKey.ts"],"names":[],"mappings":"AAKA;;;;;;;;;GASG;AACH,eAAO,MAAM,uBAAuB,GAAI,MAAM,MAAM,WASnD,CAAC"}
+{"version":3,"file":"groupingKey.d.ts","sourceRoot":"","sources":["../../../../src/config/axios/groupingKey.ts"],"names":[],"mappings":"AAyCA;;;;;;;;;GASG;AACH,eAAO,MAAM,uBAAuB,GAAI,MAAM,MAAM,WAanD,CAAC"}

package/lib/typescript/config/bugsnag.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bugsnag.d.ts","sourceRoot":"","sources":["../../../src/config/bugsnag.ts"],"names":[],"mappings":"AACA,OAAgB,EACd,KAAK,KAAK,EACV,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAgD/B,eAAO,MAAM,iBAAiB,GAAI,OAAO,OAAO,KAAG,KAMlD,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,KAAK,eAAe,EACpB,QAAQ,MAAM,EAGd,eAAe,MAAM,EAGrB,WAAU,KAAK,CAAC,UAAU,CAAa,SAkBxC,CAAC;AAEF,eAAO,MAAM,gBAAgB,YAuD5B,CAAC"}
+{"version":3,"file":"bugsnag.d.ts","sourceRoot":"","sources":["../../../src/config/bugsnag.ts"],"names":[],"mappings":"AACA,OAAgB,EACd,KAAK,KAAK,EACV,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAgD/B,eAAO,MAAM,iBAAiB,GAAI,OAAO,OAAO,KAAG,KAMlD,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,KAAK,eAAe,EACpB,QAAQ,MAAM,EAGd,eAAe,MAAM,EAGrB,WAAU,KAAK,CAAC,UAAU,CAAa,SAkBxC,CAAC;AAEF,eAAO,MAAM,gBAAgB,YAyE5B,CAAC"}

package/lib/typescript/constants/index.d.ts

@@ -3,6 +3,7 @@ export declare const STORAGE_KEYS: {
     readonly DEVICE_TOKEN: "devicetoken";
     readonly IS_VISITED: "isVisited";
     readonly NOTIFICATION_PERMISSION_REQUESTED: "notificationPermissionRequested";
+    readonly DISPLAYED_MESSAGE_IDS: "displayedMessageIds";
     /**
      * Read-only fallback. Before this key existed here, every app kept its own
      * "have we asked yet?" flag under this exact string -- neeto-desk,

package/lib/typescript/constants/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/constants/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,eAAO,MAAM,YAAY;;;;IAIvB;;;;;;;;OAQG;;CAEK,CAAC;AAEX,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,QAAiB,CAAC;AAEhE,6EAA6E;AAC7E,eAAO,MAAM,+BAA+B,6BAA6B,CAAC;AAE1E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,mFAAmF;AACnF,eAAO,MAAM,oBAAoB,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/constants/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,eAAO,MAAM,YAAY;;;;;IAKvB;;;;;;;;OAQG;;CAEK,CAAC;AAEX,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,QAAiB,CAAC;AAEhE,6EAA6E;AAC7E,eAAO,MAAM,+BAA+B,6BAA6B,CAAC;AAE1E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,mFAAmF;AACnF,eAAO,MAAM,oBAAoB,MAAM,CAAC"}

package/lib/typescript/helpers/notifications/constants.d.ts

@@ -2,4 +2,5 @@ import { type AndroidChannel } from "react-native-notify-kit";
 export declare const NOTIFICATION_CHANNELS: AndroidChannel[];
 export declare const NOTIFICATION_CHANNEL_IDS: string[];
 export declare const DEVICE_TOKEN_TIMEOUT_MS = 10000;
+export declare const DISPLAYED_MESSAGE_ID_LIMIT = 100;
 //# sourceMappingURL=constants.d.ts.map

package/lib/typescript/helpers/notifications/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/helpers/notifications/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AAIjC,eAAO,MAAM,qBAAqB,EAAE,cAAc,EAkBjD,CAAC;AAEF,eAAO,MAAM,wBAAwB,UAEpC,CAAC;AAIF,eAAO,MAAM,uBAAuB,QAAQ,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/helpers/notifications/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AAiBjC,eAAO,MAAM,qBAAqB,EAAE,cAAc,EAUjD,CAAC;AAEF,eAAO,MAAM,wBAAwB,UAEpC,CAAC;AAIF,eAAO,MAAM,uBAAuB,QAAQ,CAAC;AAI7C,eAAO,MAAM,0BAA0B,MAAM,CAAC"}

package/lib/typescript/helpers/notifications/displayedMessages.d.ts

@@ -0,0 +1,12 @@
+/**
+ * GmsCore redelivers a message the app never acknowledged on the next process
+ * start. On MIUI that is the headless boot a notification dismissal triggers,
+ * which re-displayed stale messages as ghost duplicates. The message id
+ * survives redelivery, so it is recorded before display and a repeat is
+ * dropped. An age cutoff was tried first; it also dropped every message FCM
+ * had queued while the device was offline.
+ *
+ * Returns `false` when the message was already displayed.
+ */
+export declare const claimMessageForDisplay: (messageId?: string) => Promise<boolean>;
+//# sourceMappingURL=displayedMessages.d.ts.map

package/lib/typescript/helpers/notifications/displayedMessages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"displayedMessages.d.ts","sourceRoot":"","sources":["../../../../src/helpers/notifications/displayedMessages.ts"],"names":[],"mappings":"AAKA;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,GAAU,YAAY,MAAM,qBAc9D,CAAC"}

package/lib/typescript/helpers/notifications/registerBackgroundHandlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registerBackgroundHandlers.d.ts","sourceRoot":"","sources":["../../../../src/helpers/notifications/registerBackgroundHandlers.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAOxD,eAAO,MAAM,0BAA0B,GACrC,sBAAsB,wBAAwB,SA0D/C,CAAC"}
+{"version":3,"file":"registerBackgroundHandlers.d.ts","sourceRoot":"","sources":["../../../../src/helpers/notifications/registerBackgroundHandlers.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAOxD,eAAO,MAAM,0BAA0B,GACrC,sBAAsB,wBAAwB,SAwE/C,CAAC"}

package/lib/typescript/helpers/notifications/usePushNotification.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"usePushNotification.d.ts","sourceRoot":"","sources":["../../../../src/helpers/notifications/usePushNotification.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,SAAS,CAAC;AAWjB,UAAU,uBAAuB;IAC/B,WAAW,EAAE,wBAAwB,CAAC;CACvC;AAED,eAAO,MAAM,mBAAmB,GAC9B,YAAY,OAAO,EACnB,kBAAiB,uBAAmD,YAwLrE,CAAC"}
+{"version":3,"file":"usePushNotification.d.ts","sourceRoot":"","sources":["../../../../src/helpers/notifications/usePushNotification.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,SAAS,CAAC;AA2BjB,UAAU,uBAAuB;IAC/B,WAAW,EAAE,wBAAwB,CAAC;CACvC;AAED,eAAO,MAAM,mBAAmB,GAC9B,YAAY,OAAO,EACnB,kBAAiB,uBAAmD,YAiNrE,CAAC"}

package/lib/typescript/hooks/query/useAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAuth.d.ts","sourceRoot":"","sources":["../../../../src/hooks/query/useAuth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,OAAO,CAAC;AAUxC,OAAO,EAAE,KAAK,YAAY,EAAmB,MAAM,oBAAoB,CAAC;AASxE,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAE3B,eAAO,MAAM,OAAO;4CAQf;QACD,YAAY,EAAE,YAAY,CAAC;KAC5B;;eA8Ic,MAAM;4BAAsB,OAAO;;;cA/E1C,MAAM;gBACJ,MAAM;;;wBA0GyC,MAAM;;;2BAapC,MAAM;uBACV,MAAM;;;sBAYP,YAAY;;CAoBnC,CAAC"}
+{"version":3,"file":"useAuth.d.ts","sourceRoot":"","sources":["../../../../src/hooks/query/useAuth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,OAAO,CAAC;AAUxC,OAAO,EAAE,KAAK,YAAY,EAAmB,MAAM,oBAAoB,CAAC;AASxE,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAE3B,eAAO,MAAM,OAAO;4CAYf;QACD,YAAY,EAAE,YAAY,CAAC;KAC5B;;eA6Jc,MAAM;4BAAsB,OAAO;;;cA/E1C,MAAM;gBACJ,MAAM;;;wBA0GyC,MAAM;;;2BAapC,MAAM;uBACV,MAAM;;;sBAYP,YAAY;;CA2CnC,CAAC"}

package/lib/typescript/screens/authentication/AuthOptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthOptions.d.ts","sourceRoot":"","sources":["../../../../src/screens/authentication/AuthOptions.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAkC1B,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,eAAO,MAAM,WAAW,GAAI,kCAGzB,gBAAgB,sBAkMlB,CAAC"}
+{"version":3,"file":"AuthOptions.d.ts","sourceRoot":"","sources":["../../../../src/screens/authentication/AuthOptions.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA2B,MAAM,OAAO,CAAC;AAoChD,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,eAAO,MAAM,WAAW,GAAI,kCAGzB,gBAAgB,sBAkQlB,CAAC"}

package/lib/typescript/screens/authentication/IncompleteOnboardingInfo.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IncompleteOnboardingInfo.d.ts","sourceRoot":"","sources":["../../../../src/screens/authentication/IncompleteOnboardingInfo.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAsB,MAAM,OAAO,CAAC;AAgB3C,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,wBAAwB,GAAI,wBAGtC,kBAAkB,CAAC,WAAW,CAAC,sBAkEjC,CAAC"}
+{"version":3,"file":"IncompleteOnboardingInfo.d.ts","sourceRoot":"","sources":["../../../../src/screens/authentication/IncompleteOnboardingInfo.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAsB,MAAM,OAAO,CAAC;AAe3C,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,wBAAwB,GAAI,wBAGtC,kBAAkB,CAAC,WAAW,CAAC,sBAwDjC,CAAC"}

package/lib/typescript/screens/authentication/Organization.d.ts

@@ -6,6 +6,12 @@ export interface OrganizationProps {
         organization: OrganizationEntity;
     }) => void;
     isSidePane?: boolean;
+    /**
+     * Blocks the row while a selection is already in flight. Without it a
+     * second tap starts a second selection, and the two races decide which
+     * workspace the session ends up authenticated against.
+     */
+    disabled?: boolean;
 }
-export declare const Organization: ({ organization, onOrganizationSelect, isSidePane, }: OrganizationProps) => React.JSX.Element;
+export declare const Organization: ({ organization, onOrganizationSelect, isSidePane, disabled, }: OrganizationProps) => React.JSX.Element;
 //# sourceMappingURL=Organization.d.ts.map

package/lib/typescript/screens/authentication/Organization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Organization.d.ts","sourceRoot":"","sources":["../../../../src/screens/authentication/Organization.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAa1B,OAAO,EAAE,KAAK,YAAY,IAAI,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,kBAAkB,CAAC;IACjC,oBAAoB,EAAE,CAAC,IAAI,EAAE;QAAE,YAAY,EAAE,kBAAkB,CAAA;KAAE,KAAK,IAAI,CAAC;IAC3E,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,eAAO,MAAM,YAAY,GAAI,qDAI1B,iBAAiB,sBA4CnB,CAAC"}
+{"version":3,"file":"Organization.d.ts","sourceRoot":"","sources":["../../../../src/screens/authentication/Organization.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAa1B,OAAO,EAAE,KAAK,YAAY,IAAI,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,kBAAkB,CAAC;IACjC,oBAAoB,EAAE,CAAC,IAAI,EAAE;QAAE,YAAY,EAAE,kBAAkB,CAAA;KAAE,KAAK,IAAI,CAAC;IAC3E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,eAAO,MAAM,YAAY,GAAI,+DAK1B,iBAAiB,sBA6CnB,CAAC"}

package/lib/typescript/screens/authentication/SubDomainScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SubDomainScreen.d.ts","sourceRoot":"","sources":["../../../../src/screens/authentication/SubDomainScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAkBrD,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAGjE,eAAO,MAAM,eAAe,GAAI,wDAK7B,kBAAkB,CAAC,WAAW,CAAC,sBA6FjC,CAAC"}
+{"version":3,"file":"SubDomainScreen.d.ts","sourceRoot":"","sources":["../../../../src/screens/authentication/SubDomainScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAmBrD,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAGjE,eAAO,MAAM,eAAe,GAAI,wDAK7B,kBAAkB,CAAC,WAAW,CAAC,sBAgGjC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bigbinary/neeto-commons-rn",
-  "version": "2.3.0",
+  "version": "2.3.1",
   "license": "UNLICENSED",
   "main": "./src/index.ts",
   "react-native": "./src/index.ts",

package/src/components/LineLoader.tsx

@@ -1,23 +1,40 @@
 import React from "react";
 
-import { Skeleton } from "@bigbinary/neetoui-rn";
+import { lightTheme } from "@bigbinary/neetoui-rn";
+import ContentLoader, { Rect } from "react-content-loader/native";
 
 import { moderateScale } from "../helpers/scale";
 
 export interface LineLoaderProps {
   isLoading?: boolean;
+  backgroundColor?: string;
+  foregroundColor?: string;
   height?: number;
 }
 
 /**
- * @deprecated Absorbed by the UI library's Skeleton
- * (<Skeleton variant="line" animated />). This shim keeps the v2 prop
- * contract for one deprecation cycle and disappears in the next commons
- * major.
+ * neetoui-rn v2's LineLoader. The v3 migration pointed this at the
+ * library's Skeleton, which only pulses a `grey200` strip — invisible on a
+ * white screen. The strip always occupies `height`, so toggling `isLoading`
+ * never shifts layout, and `key` remounts the loader so the sweep restarts
+ * from the left on every load.
  */
 export const LineLoader = ({
-  isLoading,
-  height = moderateScale(1.5),
+  isLoading = false,
+  backgroundColor = lightTheme.colors.background.primary,
+  foregroundColor = lightTheme.colors.palette.base,
+  height = moderateScale(3),
 }: LineLoaderProps) => (
-  <Skeleton animated={Boolean(isLoading)} height={height} variant="line" />
+  <ContentLoader
+    animate={isLoading}
+    backgroundColor={backgroundColor}
+    foregroundColor={foregroundColor}
+    height={height}
+    interval={0}
+    key={String(isLoading)}
+    speed={1}
+    width="100%"
+  >
+    <Rect height={height} width="100%" x={0} y={0} />
+  </ContentLoader>
 );

package/src/components/SocialButton.tsx

@@ -1,10 +1,14 @@
 import React from "react";
-import { StyleSheet, type StyleProp, type ViewStyle } from "react-native";
+import {
+  Pressable,
+  StyleSheet,
+  type StyleProp,
+  type ViewStyle,
+} from "react-native";
 
 import {
   Container,
   Loader,
-  Touchable,
   Typography,
   lightTheme,
 } from "@bigbinary/neetoui-rn";
@@ -28,6 +32,14 @@ export interface SocialButtonProps {
 const capitalize = (value: string) =>
   `${value.charAt(0).toUpperCase()}${value.slice(1)}`;
 
+/**
+ * Pressable rather than the library's Touchable: Touchable always sets an
+ * `android_ripple`, and the `grey800` (#1f1f1f) colour this passed painted an
+ * opaque near-black wash over the whole button on Android. iOS never showed
+ * it, because `android_ripple` is a no-op there. neetoui-rn's own Button is
+ * a bare Pressable for the same reason, so the press feedback is the opacity
+ * dip on both platforms.
+ */
 export const SocialButton = ({
   variant,
   disabled,
@@ -35,10 +47,9 @@ export const SocialButton = ({
   style,
   onPress,
 }: SocialButtonProps) => (
-  <Touchable
-    disabled={disabled}
-    rippleConfig={{ color: lightTheme.colors.palette.grey800 }}
-    style={[styles.button, style]}
+  <Pressable
+    disabled={disabled || isLoading}
+    style={({ pressed }) => [styles.button, style, pressed && styles.pressed]}
     onPress={onPress}
   >
     {isLoading ? (
@@ -58,7 +69,7 @@ export const SocialButton = ({
         </Typography>
       </>
     )}
-  </Touchable>
+  </Pressable>
 );
 
 const styles = StyleSheet.create({
@@ -72,6 +83,9 @@ const styles = StyleSheet.create({
     height: moderateScale(AUTH_BUTTON_HEIGHT),
     width: "100%",
   },
+  pressed: {
+    opacity: 0.7,
+  },
   logo: {
     position: "absolute",
     left: moderateScale(17),

package/src/components/WorkspaceSwitcherPane.tsx

@@ -27,13 +27,19 @@ export const WorkspaceSwitcherPane = ({
   const organizations = useAppSelector(state => state.auth.organizations);
 
   const { useSelectOrganizationMutation } = useAuth();
-  const { mutate: selectOrganization } = useSelectOrganizationMutation();
+  const { mutate: selectOrganization, isPending: isSelectingOrganization } =
+    useSelectOrganizationMutation();
 
   const onOrganizationSelect = ({
     organization,
   }: {
     organization: OrganizationRecord;
   }) => {
+    // Same race as the sign-in workspace list: a second tap starts a second
+    // selection, and the two decide between them which workspace the session
+    // ends up authenticated against.
+    if (isSelectingOrganization) return;
+
     selectOrganization({ organization });
     navigation.closeDrawer();
   };
@@ -72,6 +78,7 @@ export const WorkspaceSwitcherPane = ({
           renderItem={({ item }) => (
             <Organization
               isSidePane
+              disabled={isSelectingOrganization}
               organization={item}
               onOrganizationSelect={onOrganizationSelect}
             />

package/src/config/axios/constants.ts

@@ -7,6 +7,35 @@ export const DEFAULT_CASE_CONVERSION = Config.ENABLE_CASE_CONVERSION === "true";
 export const UUID_SEGMENT =
   /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 
+// Unhyphenated record ids (`6fceba301a43642c3b1f`). Sixteen is the shortest
+// length no route word reaches while staying hex-only, so "faced" and
+// "decade" cannot match.
+export const HEX_ID_SEGMENT = /^[0-9a-f]{16,}$/i;
+
+// Opaque short slugs (`wtzwge4`). Both a letter and a digit are required, which
+// excludes every route word; the length floor of 6 excludes "v1" and "v2".
+export const OPAQUE_ID_SEGMENT = /^(?=.*[a-z])(?=.*\d)[a-z0-9]{6,12}$/;
+
+// Route words that read like ids: short lowercase alphanumerics, and actions
+// that sit where a collection member would (`/tickets/trash`,
+// `/direct_uploads/attach`).
+export const RESERVED_URL_SEGMENTS = new Set([
+  "oauth2",
+  "base64",
+  "sha256",
+  "utf8",
+  "ipv4",
+  "ipv6",
+  "h264",
+  "trash",
+  "attach",
+]);
+
+// Shortest a slug may be for the positional id rule below to claim it. Keeps
+// the connective words out — `neeto_fields` is plural, so without the floor
+// `/neeto_fields/api/v1` turned `api` into an id.
+export const MIN_SLUG_LENGTH = 5;
+
 export const shouldEnableCaseConversion = (
   options: CaseConversionOptions = {}
 ) => {

package/src/config/axios/groupingKey.ts

@@ -1,7 +1,43 @@
-import { UUID_SEGMENT } from "./constants";
+import {
+  HEX_ID_SEGMENT,
+  MIN_SLUG_LENGTH,
+  OPAQUE_ID_SEGMENT,
+  RESERVED_URL_SEGMENTS,
+  UUID_SEGMENT,
+} from "./constants";
 
-const isIdSegment = (segment: string) =>
-  /^\d+$/.test(segment) || UUID_SEGMENT.test(segment);
+// Unambiguous on their own, wherever they appear in the path.
+const looksLikeId = (segment: string) => {
+  if (/^\d+$/.test(segment) || UUID_SEGMENT.test(segment)) return true;
+
+  if (RESERVED_URL_SEGMENTS.has(segment.toLowerCase())) return false;
+
+  // Tenant-scoped record ids arrive as long hex strings —
+  // `/clients/6fceba301a43642c3b1f/projects/3d653bbc760187a6630e/...` filed 15
+  // separate NeetoInvoice groups for one broken timer.
+  if (HEX_ID_SEGMENT.test(segment)) return true;
+
+  // Slugs carrying both a letter and a digit (`wtzwge4`, `2kmffpd`). The mix
+  // is what makes them safe to match anywhere: no route word has it.
+  return OPAQUE_ID_SEGMENT.test(segment);
+};
+
+// A plural segment is a collection, so whatever follows it is that
+// collection's member — the only way to recognise letter-only slugs like
+// `xxnrdzg`, which are shaped exactly like the word `tickets`.
+const isCollection = (segment = "") =>
+  segment.endsWith("s") && !/^\d+$/.test(segment);
+
+// ...but a collection is also followed by sub-resources and actions
+// (`/bookings/counts`, `/tickets/default_views`). Those are plural or
+// snake_case; ids are neither.
+const isMemberOfCollection = (segment: string, previous?: string) =>
+  isCollection(previous) &&
+  segment.length >= MIN_SLUG_LENGTH &&
+  !RESERVED_URL_SEGMENTS.has(segment.toLowerCase()) &&
+  !segment.includes("_") &&
+  !segment.includes("-") &&
+  !segment.endsWith("s");
 
 /**
  * Collapses a request URL to its route shape for Bugsnag grouping: ids become
@@ -17,9 +53,13 @@ export const normalizeUrlForGrouping = (url?: string) => {
   if (!url) return "";
 
   const [path] = url.split("?");
+  const segments = path.split("/");
 
-  return path
-    .split("/")
-    .map(segment => (isIdSegment(segment) ? ":id" : segment))
+  return segments
+    .map((segment, index) =>
+      looksLikeId(segment) || isMemberOfCollection(segment, segments[index - 1])
+        ? ":id"
+        : segment
+    )
     .join("/");
 };

package/src/config/bugsnag.ts

@@ -108,12 +108,30 @@ export const configureBugsnag = () => {
         // names. Stage separation alone does not cover QA running
         // production-stage builds on emulators.
         const deviceModel = event.device?.model?.toLowerCase() ?? "";
-        const isKnownEmulator =
-          event.device?.emulator ||
+        const isEmulatorModel =
           deviceModel.startsWith("sdk_gphone") ||
+          deviceModel.startsWith("sdk_google") ||
           deviceModel.startsWith("generic") ||
           deviceModel.startsWith("emulator") ||
+          deviceModel.startsWith("emu64") ||
           deviceModel.includes("android sdk built for");
+
+        // An AVD created from an AOSP system image reports a real model name —
+        // "Pixel 6 Pro" — so the model checks above miss it, and it filed the
+        // libreactnative.so SoLoader crashes against production. The build
+        // fingerprint still names the emulator image it booted
+        // ("sdk_phone_arm64-eng ... test-keys"). Matched on `sdk_` rather than
+        // `test-keys` alone, which a real device on a custom ROM also carries.
+        const osBuild = String(
+          event.device?.runtimeVersions?.osBuild ?? ""
+        ).toLowerCase();
+
+        const isEmulatorBuild =
+          osBuild.includes("sdk_") || osBuild.startsWith("sdk");
+
+        const isKnownEmulator =
+          event.device?.emulator || isEmulatorModel || isEmulatorBuild;
+
         if (releaseStage === "production" && isKnownEmulator) {
           return false;
         }

package/src/constants/index.ts

@@ -4,6 +4,7 @@ export const STORAGE_KEYS = {
   DEVICE_TOKEN: "devicetoken",
   IS_VISITED: "isVisited",
   NOTIFICATION_PERMISSION_REQUESTED: "notificationPermissionRequested",
+  DISPLAYED_MESSAGE_IDS: "displayedMessageIds",
   /**
    * Read-only fallback. Before this key existed here, every app kept its own
    * "have we asked yet?" flag under this exact string -- neeto-desk,

package/src/helpers/notifications/constants.ts

@@ -3,8 +3,21 @@ import {
   type AndroidChannel,
 } from "react-native-notify-kit";
 
-// Server payloads bake these channel ids into android_channel_id — the ids
-// must exist byte-identically on device.
+// One channel, and both display paths name it explicitly.
+//
+// There used to be a second channel, `channel_01`. It was never ours: the old
+// react-native-notifications stack hardcoded
+// `DEFAULT_CHANNEL_ID = "channel_01"` and fell back to it whenever the payload
+// named a channel the device did not have (PushNotification.java:162). The
+// server names no channel, so every server push took that fallback and landed
+// on a channel the library had auto-created at IMPORTANCE_DEFAULT — quiet, no
+// heads-up banner. Android locks a channel's importance at creation, so the
+// only way to fix it was to create `channel_01` first, with the settings we
+// wanted (neetozone/neeto-commons-rn#289).
+//
+// Notifee has no such fallback and both display calls pass `channelId:
+// "default"`, so nothing can route there any more. Devices that already have
+// the channel keep it until the app is uninstalled; Android never removes one.
 export const NOTIFICATION_CHANNELS: AndroidChannel[] = [
   {
     id: "default",
@@ -15,14 +28,6 @@ export const NOTIFICATION_CHANNELS: AndroidChannel[] = [
     lights: true,
     badge: true,
   },
-  {
-    id: "channel_01",
-    name: "Channel 01",
-    importance: AndroidImportance.HIGH,
-    lights: true,
-    vibration: true,
-    badge: true,
-  },
 ];
 
 export const NOTIFICATION_CHANNEL_IDS = NOTIFICATION_CHANNELS.map(
@@ -32,3 +37,7 @@ export const NOTIFICATION_CHANNEL_IDS = NOTIFICATION_CHANNELS.map(
 // How long to wait for the APNs registration callback before treating the
 // token as unavailable (simulators without push entitlement never call back).
 export const DEVICE_TOKEN_TIMEOUT_MS = 10000;
+
+// Enough to cover every message a redelivery burst can replay; older ids age
+// out of the list, so a genuinely new message is never mistaken for a repeat.
+export const DISPLAYED_MESSAGE_ID_LIMIT = 100;

package/src/helpers/notifications/displayedMessages.ts

@@ -0,0 +1,30 @@
+import { DISPLAYED_MESSAGE_ID_LIMIT } from "./constants";
+
+import { STORAGE_KEYS } from "../../constants";
+import { getItem, setItem } from "../asyncStore";
+
+/**
+ * GmsCore redelivers a message the app never acknowledged on the next process
+ * start. On MIUI that is the headless boot a notification dismissal triggers,
+ * which re-displayed stale messages as ghost duplicates. The message id
+ * survives redelivery, so it is recorded before display and a repeat is
+ * dropped. An age cutoff was tried first; it also dropped every message FCM
+ * had queued while the device was offline.
+ *
+ * Returns `false` when the message was already displayed.
+ */
+export const claimMessageForDisplay = async (messageId?: string) => {
+  if (!messageId) return true;
+
+  const displayed =
+    (await getItem<string[]>(STORAGE_KEYS.DISPLAYED_MESSAGE_IDS)) ?? [];
+
+  if (displayed.includes(messageId)) return false;
+
+  await setItem(
+    STORAGE_KEYS.DISPLAYED_MESSAGE_IDS,
+    [...displayed, messageId].slice(-DISPLAYED_MESSAGE_ID_LIMIT)
+  );
+
+  return true;
+};

package/src/helpers/notifications/registerBackgroundHandlers.ts

@@ -3,6 +3,7 @@ import { Platform } from "react-native";
 import dayjs from "dayjs";
 import notifee, { EventType } from "react-native-notify-kit";
 
+import { claimMessageForDisplay } from "./displayedMessages";
 import { messaging } from "./firebaseMessaging";
 import { type NotificationPressHandler } from "./types";
 
@@ -30,8 +31,22 @@ export const registerBackgroundHandlers = (
         ) as Record<string, string>;
 
         // MIUI and other OEM launchers read the numeric badge off the active
-        // notification (setNumber), not from any badge API.
-        const unreadCount = Number(data.unread_count);
+        // notification (setNumber), not from any badge API. The pusher sends
+        // the count as `badge`; `unread_count` kept as a fallback.
+        const unreadCount = Number(data.badge ?? data.unread_count);
+
+        // Housekeeping push with no user-facing copy (badge/unread sync):
+        // update the badge and stop. Displaying it renders the fallback
+        // "New Notification" ghost seen on MIUI.
+        if (!data.title && !data.message) {
+          if (Number.isFinite(unreadCount)) {
+            await notifee.setBadgeCount(Math.max(0, unreadCount));
+          }
+
+          return;
+        }
+
+        if (!(await claimMessageForDisplay(remoteMessage.messageId))) return;
 
         await notifee.displayNotification({
           title: data.title || "New Notification",

package/src/helpers/notifications/usePushNotification.ts

@@ -1,11 +1,13 @@
 import { useEffect, useCallback, useState } from "react";
 import { Platform } from "react-native";
 
+import { type AxiosError } from "axios";
 import dayjs from "dayjs";
 import notifee, { EventType } from "react-native-notify-kit";
 import { RESULTS, checkNotifications } from "react-native-permissions";
 
 import { NOTIFICATION_CHANNELS } from "./constants";
+import { claimMessageForDisplay } from "./displayedMessages";
 import { messaging } from "./firebaseMessaging";
 import { getDeviceToken } from "./getDeviceToken";
 import {
@@ -22,6 +24,22 @@ import { getItem, setItem } from "../asyncStore";
 
 let pendingRegistrationToken: string | null = null;
 
+// Tokens the server refused for a reason retrying cannot change. NeetoInvoice
+// logged 40,695 registration attempts from a single session: the request 422s
+// on a duplicate `server_side_session_id`, the in-flight guard below was
+// cleared on failure, and the next render fired it again ~twice a second for
+// the rest of the session. A 4xx is the server's final answer, so remember it
+// and stop asking; 5xx and network failures stay retryable.
+const permanentlyRejectedTokens = new Set<string>();
+
+const isRetryableFailure = (error: unknown) => {
+  const status = (error as AxiosError)?.response?.status;
+
+  // No response at all means the request never landed — a later attempt can
+  // still succeed.
+  return status === undefined || status >= 500;
+};
+
 interface PushNotificationOptions {
   handleClick: NotificationPressHandler;
 }
@@ -75,6 +93,8 @@ export const usePushNotification = (
       if (!currentIsLoggedIn || !token) return;
 
       if (pendingRegistrationToken === token) return;
+
+      if (permanentlyRejectedTokens.has(token)) return;
       pendingRegistrationToken = token;
 
       const storedToken = await getItem<string>(STORAGE_KEYS.DEVICE_TOKEN);
@@ -96,7 +116,11 @@ export const usePushNotification = (
           await setItem(STORAGE_KEYS.DEVICE_TOKEN, token);
           pendingRegistrationToken = null;
         },
-        onError: () => {
+        onError: error => {
+          if (!isRetryableFailure(error)) {
+            permanentlyRejectedTokens.add(token);
+          }
+
           pendingRegistrationToken = null;
         },
       });
@@ -144,8 +168,27 @@ export const usePushNotification = (
         "You have a new message";
 
       // MIUI and other OEM launchers read the numeric badge off the active
-      // notification (setNumber), not from any badge API.
-      const unreadCount = Number(data.unread_count);
+      // notification (setNumber), not from any badge API. The pusher sends
+      // the count as `badge`; `unread_count` kept as a fallback.
+      const unreadCount = Number(data.badge ?? data.unread_count);
+
+      // Housekeeping push with no user-facing copy (badge/unread sync):
+      // update the badge and stop. Displaying it renders the fallback
+      // "New Notification" ghost seen on MIUI.
+      if (
+        !remoteMessage.notification?.title &&
+        !remoteMessage.notification?.body &&
+        !data.title &&
+        !data.message
+      ) {
+        if (Number.isFinite(unreadCount)) {
+          await notifee.setBadgeCount(Math.max(0, unreadCount));
+        }
+
+        return;
+      }
+
+      if (!(await claimMessageForDisplay(remoteMessage.messageId))) return;
 
       await notifee.displayNotification({
         title,

package/src/hooks/query/useAuth.ts

@@ -34,6 +34,10 @@ export const useAuth = () => {
   const { strings } = useLocalization();
   const navigation = useNavigation<NavigationProp<CommonsParamList>>();
   const last504ReportTimeRef = useRef<number | null>(null);
+  // A ref rather than the mutation's isPending: two taps in the same tick
+  // would both pass a state check before React had re-rendered, and the two
+  // selections then race to decide which workspace the session belongs to.
+  const isSelectingOrganizationRef = useRef(false);
 
   const selectOrganization = async ({
     organization,
@@ -50,13 +54,28 @@ export const useAuth = () => {
       profile_image_url,
     } = organization;
 
+    // Every request the app makes after this point reads its `x-auth-token`
+    // back out of the keychain and its base URL out of `auth.subdomain`. If
+    // either half is missing the session still *looks* signed in — the app
+    // renders its tabs — but no screen can load, and because both redux and
+    // the keychain are persisted the dead session survives a restart. So the
+    // login is only dispatched once the credentials are actually stored.
+    if (!auth_token) {
+      throw new Error("Workspace is missing its auth token");
+    }
+
     const userAuth = {
       authToken: auth_token,
       email,
     };
 
     await setItem("email", email);
-    await setSecureValue("userAuth", JSON.stringify(userAuth));
+    // setSecureValue swallows the keychain error and reports it as `false`.
+    const isStored = await setSecureValue("userAuth", JSON.stringify(userAuth));
+
+    if (isStored === false) {
+      throw new Error("Could not store the workspace credentials");
+    }
 
     dispatch(
       loginUserAction({
@@ -237,22 +256,45 @@ export const useAuth = () => {
         }: {
           organization: Organization;
         }) => {
-          const { subdomain } = organization;
-          const { data } = await fetchOrganizationDetailsAPI({ subdomain });
-
-          // PATCH: For the apps which does not support organization details API updates
-          // is_onboard will be set to true
-          const is_onboard = data?.organization?.is_onboard ?? true;
-
-          if (is_onboard) {
-            await selectOrganization({ organization });
-          } else {
-            navigation.navigate(SCREEN_NAMES.UnBoarded, {
-              name: organization.organization_name,
-              subdomain: organization.subdomain,
-            });
+          if (isSelectingOrganizationRef.current) return;
+          isSelectingOrganizationRef.current = true;
+
+          try {
+            const { subdomain } = organization;
+            const { data } = await fetchOrganizationDetailsAPI({ subdomain });
+
+            // PATCH: For the apps which does not support organization details API updates
+            // is_onboard will be set to true
+            const is_onboard = data?.organization?.is_onboard ?? true;
+
+            if (is_onboard) {
+              await selectOrganization({ organization });
+            } else {
+              navigation.navigate(SCREEN_NAMES.UnBoarded, {
+                name: organization.organization_name,
+                subdomain: organization.subdomain,
+              });
+            }
+          } finally {
+            isSelectingOrganizationRef.current = false;
           }
         },
+        onError: (error: Error) => {
+          // Request failures already reach the user through the axios
+          // response interceptor's toast. This covers the local ones — a
+          // workspace with no token, a refused keychain write — which
+          // previously failed silently and left the row looking inert.
+          if ((error as AxiosError).isAxiosError) return;
+
+          Toast.show({
+            type: "error",
+            text2:
+              strings.commons.errors.workspaceSelect ||
+              "Could not open that workspace. Please try again.",
+          });
+
+          bugsnagErrorHandler(error, "select_organization_error");
+        },
       }),
   };
 };

package/src/localization/translations/en.json

@@ -80,7 +80,8 @@
     "projects": "Projects",
     "subDomain": "Select your workspace",
     "login": "Login to your account",
-    "otpVerification": "Verify your email"
+    "otpVerification": "Verify your email",
+    "unboardedOrganization": "Onboarding process is incomplete"
   },
   "timerScreen": {
     "cannotFindProject": "Can't find your project? Add from "
@@ -187,11 +188,13 @@
       "invalidAccount": "The selected account is invalid. Please choose a different account.",
       "resolutionRequired": "Additional steps are required to complete the sign-in process.",
       "apiNotConnected": "The API is not connected. Please check your configuration.",
-      "developerError": "An error occurred due to misconfiguration. Please contact support."
+      "developerError": "An error occurred due to misconfiguration. Please contact support.",
+      "unsignedBuild": "This build was not installed from the Play Store, so Google does not recognise its signature. Google Sign-In only works on Play builds. Use another sign-in method here, or install from Play to test it."
     },
     "appleSignIn": {
       "failureTitle": "Apple Sign-In Failed",
       "default": "An error occurred during Apple Sign-In. Please try again."
-    }
+    },
+    "workspaceSelect": "Could not open that workspace. Please try again."
   }
 }

package/src/screens/authentication/AuthOptions.tsx

@@ -1,4 +1,4 @@
-import React from "react";
+import React, { useRef, useState } from "react";
 import { Platform, StyleSheet } from "react-native";
 
 import {
@@ -15,6 +15,8 @@ import {
   isErrorWithCode,
   isSuccessResponse,
 } from "@react-native-google-signin/google-signin";
+import Config from "react-native-config";
+import DeviceInfo from "react-native-device-info";
 
 import {
   GOOGLE_LOGIN_ERRORS,
@@ -51,7 +53,39 @@ export const AuthOptions = ({
   const { mutate: loginViaApple, isPending: isLoginViaAppleLoading } =
     useLoginViaAppleMutation();
 
+  // GoogleSignin.signIn() has no re-entrancy guard of its own, and the button's
+  // isLoading below reflects only the mutation that runs *after* it resolves —
+  // so the whole native flow left the button live. Tapping again while the
+  // first auth session was still opening made GIDSignIn fail with
+  // -1 "Unable to open Safari.", which is what six taps in four minutes looked
+  // like on the login screen in production.
+  // A build Play did not install keeps the upload or debug signature, and only
+  // the Play app-signing certificate is registered as an Android OAuth client —
+  // so Google answers DEVELOPER_ERROR. Expected for a sideload, and reporting it
+  // buried the real signal. Play is the only supported Android channel, so any
+  // other installer, a store that redistributes the artifact included, is
+  // treated as a sideload on purpose.
+  const isPlayInstall = () => {
+    if (Platform.OS !== "android") return true;
+
+    try {
+      return DeviceInfo.getInstallerPackageNameSync() === "com.android.vending";
+    } catch {
+      // Never let a diagnostic swallow a real report.
+      return true;
+    }
+  };
+
+  const isGoogleFlowActive = useRef(false);
+  const [isGooglePending, setIsGooglePending] = useState(false);
+
   const onGoogleButtonPress = async (retryCount = 0) => {
+    // A ref rather than the state below: two taps in the same tick would both
+    // pass a state check before React had re-rendered.
+    if (isGoogleFlowActive.current) return;
+    isGoogleFlowActive.current = true;
+    setIsGooglePending(true);
+
     try {
       const signedInUsingGoogle = GoogleSignin.hasPreviousSignIn();
       if (signedInUsingGoogle) {
@@ -70,8 +104,10 @@ export const AuthOptions = ({
         // Google types serverAuthCode as nullable. R.isEmpty(null) is false,
         // so the previous isEmpty guard let a null code through to the API.
         if (!serverAuthCode) {
+          // Message only — never attach authResponse. It carries the user's
+          // email, name and idToken, none of which belong in Bugsnag.
           bugsnagErrorHandler(
-            JSON.stringify(authResponse),
+            "serverAuthCode missing in Google sign-in response",
             "Empty serverAuthCode in GoogleLogin"
           );
         } else {
@@ -129,22 +165,51 @@ export const AuthOptions = ({
               break;
           }
 
+          const isUnsignedBuild =
+            error.code === GOOGLE_LOGIN_ERRORS.DEVELOPER_ERROR &&
+            !isPlayInstall();
+
+          if (isUnsignedBuild) {
+            errorMessage = strings.commons.errors.googleSignIn.unsignedBuild;
+          }
+
           Alert.show({
             title: strings.commons.errors.googleSignIn.failureTitle,
             description: errorMessage,
           });
 
+          if (isUnsignedBuild) return;
+
+          // A readable Error instead of a JSON blob, grouped per code —
+          // message text varies per failure ("Unable to open Safari.",
+          // play-services prompts…) and fragmented into a group per message.
+          //
+          // DEVELOPER_ERROR means Google rejected the app's own configuration
+          // rather than anything the user did, and the report was previously
+          // silent about which configuration. The client ids are public, and
+          // their leading project number is the thing to compare against the
+          // project google-services.json was generated from — a mismatch
+          // between the two is the usual cause. Appended only for that code,
+          // so every other report stays a bare code and message.
+          const configuration =
+            error.code === GOOGLE_LOGIN_ERRORS.DEVELOPER_ERROR
+              ? ` (${Platform.OS}, webClientId=${Config.GOOGLE_WEB_CLIENT_ID}, iosClientId=${Config.IOS_CLIENT_ID})`
+              : "";
+
           bugsnagErrorHandler(
-            JSON.stringify({
-              code: error.code,
-              message: error.message,
-            }),
-            "Google Sign-in API Error in GoogleLogin"
+            new Error(`[${error.code}] ${error.message}${configuration}`),
+            "Google Sign-in API Error in GoogleLogin",
+            `google-signin-${error.code}`
           );
         }
       } else {
         bugsnagErrorHandler(error as Error, "Error in GoogleLogin");
       }
+    } finally {
+      // Released before the retry alert's callback can fire, so a genuine
+      // retry is never blocked by this guard.
+      isGoogleFlowActive.current = false;
+      setIsGooglePending(false);
     }
   };
 
@@ -220,7 +285,8 @@ export const AuthOptions = ({
         />
       </Container>
       <SocialButton
-        isLoading={isLoginViaGoogleLoading}
+        disabled={isGooglePending}
+        isLoading={isLoginViaGoogleLoading || isGooglePending}
         variant="google"
         onPress={() => handleOnLogin("google")}
       />

package/src/screens/authentication/IncompleteOnboardingInfo.tsx

@@ -1,11 +1,10 @@
 import React, { useCallback } from "react";
 import { Linking, StyleSheet } from "react-native";
 
-import Left from "@bigbinary/neeto-icons-rn/icons/Left";
 import {
   Container,
+  Header,
   ParentView,
-  Touchable,
   Typography,
   lightTheme,
 } from "@bigbinary/neetoui-rn";
@@ -25,7 +24,7 @@ export const IncompleteOnboardingInfo = ({
 }: CommonsScreenProps<"UnBoarded">) => {
   const {
     strings: {
-      commons: { unboardedOrganization },
+      commons: { headers, unboardedOrganization },
       formatString,
     },
   } = useLocalization();
@@ -56,23 +55,13 @@ export const IncompleteOnboardingInfo = ({
   // asked for.
   return (
     <ParentView barStyle="dark-content">
-      <Container style={styles.header}>
-        {/* v3's ripple config dropped `isCentered`; nothing replaces it. */}
-        <Touchable
-          hitSlop={10}
-          rippleConfig={{ shouldOverflowContainer: true }}
-          style={styles.backButton}
-          onPress={onBackPress}
-        >
-          <Left size={moderateScale(24)} />
-        </Touchable>
-      </Container>
+      <Header title={headers.unboardedOrganization} onBack={onBackPress} />
       <Container style={styles.body}>
         <Typography variant="modalHeader">
           {formatString(unboardedOrganization.title, name)}
         </Typography>
         <HyperlinkText
-          linkStyleProps={{ color: lightTheme.colors.primary }}
+          linkStyleProps={styles.link}
           textStyleProps={{ style: styles.infoMessage }}
           linkMapping={{
             [helpLink]: unboardedOrganization.supportLabel,
@@ -91,20 +80,13 @@ export const IncompleteOnboardingInfo = ({
 };
 
 const styles = StyleSheet.create({
-  header: {
-    alignItems: "center",
-    flexDirection: "row",
-    height: moderateScale(44),
-    paddingHorizontal: moderateScale(16),
-  },
-  backButton: {
-    alignItems: "center",
-    justifyContent: "center",
-  },
   body: {
     marginHorizontal: moderateScale(16),
   },
   infoMessage: {
     marginTop: moderateScale(16),
   },
+  link: {
+    color: lightTheme.colors.primary,
+  },
 });

package/src/screens/authentication/Organization.tsx

@@ -17,12 +17,19 @@ export interface OrganizationProps {
   organization: OrganizationEntity;
   onOrganizationSelect: (args: { organization: OrganizationEntity }) => void;
   isSidePane?: boolean;
+  /**
+   * Blocks the row while a selection is already in flight. Without it a
+   * second tap starts a second selection, and the two races decide which
+   * workspace the session ends up authenticated against.
+   */
+  disabled?: boolean;
 }
 
 export const Organization = ({
   organization,
   onOrganizationSelect,
   isSidePane = false,
+  disabled = false,
 }: OrganizationProps) => {
   const { organization_name, subdomain } = organization;
 
@@ -47,7 +54,8 @@ export const Organization = ({
 
   return (
     <Touchable
-      style={styles.card}
+      disabled={disabled}
+      style={[styles.card, disabled && styles.cardDisabled]}
       onPress={() => onOrganizationSelect({ organization })}
     >
       {isSidePane ? (
@@ -84,6 +92,9 @@ const styles = StyleSheet.create({
     paddingHorizontal: 12,
     paddingVertical: 10,
   },
+  cardDisabled: {
+    opacity: 0.5,
+  },
   details: {
     justifyContent: "center",
   },

package/src/screens/authentication/SubDomainScreen.tsx

@@ -13,6 +13,7 @@ import {
 
 import { Organization } from "./Organization";
 
+import { LineLoader } from "../../components/LineLoader";
 import { useLocalization } from "../../contexts/localization";
 import { moderateScale } from "../../helpers/scale";
 import { useAuth } from "../../hooks/query/useAuth";
@@ -42,6 +43,10 @@ export const SubDomainScreen = ({
   }: {
     organization: OrganizationEntity;
   }) => {
+    // The mutation guards itself too, but stopping the tap here is what keeps
+    // a second row from queueing behind the first.
+    if (isSelectingOrganization) return;
+
     selectOrganization({ organization });
   };
 
@@ -93,13 +98,11 @@ export const SubDomainScreen = ({
       barStyle="dark-content"
       style={styles.screen}
     >
-      {/* Header carries the progress line the screen used to draw with its
-          own LineLoader. */}
-      <Header
-        isLoading={isSelectingOrganization}
-        title={strings.commons.headers.subDomain}
-        onBack={onBackPress}
-      />
+      {/* Header's own `isLoading` draws a grey200 Skeleton strip, which is
+          invisible on this white screen — the workspace list read as having
+          no loading state at all. LineLoader is the v2 progress line. */}
+      <Header title={strings.commons.headers.subDomain} onBack={onBackPress} />
+      <LineLoader isLoading={isSelectingOrganization} />
       <Container style={styles.body}>
         {renderIntro()}
         <FlashList
@@ -109,6 +112,7 @@ export const SubDomainScreen = ({
           style={styles.flatListStyle}
           renderItem={({ item }) => (
             <Organization
+              disabled={isSelectingOrganization}
               organization={item}
               onOrganizationSelect={onOrganizationSelect}
             />
@@ -136,9 +140,9 @@ const styles = StyleSheet.create({
     marginBottom: moderateScale(8),
   },
   flatListStyle: {
-    marginBottom: 20,
+    flex: 1,
   },
   contentContainerStyle: {
-    justifyContent: "center",
+    paddingBottom: moderateScale(20),
   },
 });