@fixback/expo 0.9.0 → 0.9.1

package/dist/client-boot.js

@@ -0,0 +1,269 @@
+"use strict";
+/**
+ * Boot, and the capture its answer arms (spec 0003 §G ported to mobile, spec 0004).
+ *
+ * {@link Boot.bootAndArm} is the round trip `start`, `signIn` and `signOut` all end in:
+ * it swaps in the refreshed Reporter session, records the Account and tier for the
+ * identity row, raises or lowers maintenance mode's notice (and schedules its
+ * recheck), and arms capture only while a submission would be accepted — the trace
+ * hooks, mobile replay (`./client-replay`), and automatic error capture — or says why
+ * the SDK is dormant.
+ *
+ * One piece of the headless client (`./client`), created over the state every piece
+ * shares (`./client-state`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createBoot = createBoot;
+const sdk_core_1 = require("@fixback/sdk-core");
+const breadcrumbs_1 = require("./breadcrumbs");
+const client_connect_1 = require("./client-connect");
+const client_state_1 = require("./client-state");
+const error_capture_1 = require("./error-capture");
+const reporter_session_store_1 = require("./reporter-session-store");
+const submit_1 = require("./submit");
+const version_1 = require("./version");
+/** Boot and capture arming over the client's shared state, with replay's arming. */
+function createBoot(s, replay) {
+    const { options, adapters, warn, now, readEnvironment } = s;
+    const { key, origin, apiUrl, release, propagateTo, buffer } = s;
+    const { armReplay, disarmReplay, freezeAndEncodeReplay } = replay;
+    function setMaintenance(next) {
+        const changed = (s.maintenance === null) !== (next === null) ||
+            s.maintenance?.message !== next?.message ||
+            s.maintenance?.until !== next?.until;
+        s.maintenance = next;
+        if (next !== null)
+            scheduleMaintenanceRecheck();
+        if (!changed)
+            return;
+        for (const listener of s.maintenanceListeners) {
+            try {
+                listener(next);
+            }
+            catch {
+                /* a listener must never break the client */
+            }
+        }
+    }
+    /** Ask boot again in a minute, once, so the notice comes down on its own (the maintenance-mode ADR). */
+    function scheduleMaintenanceRecheck() {
+        if (!s.running)
+            return;
+        const gen = s.generation;
+        s.maintenanceRecheck.schedule(() => {
+            if (gen === s.generation)
+                void bootAndArm(gen, { recheck: true }).catch(() => undefined);
+        });
+    }
+    function clearMaintenanceRecheck() {
+        s.maintenanceRecheck.cancel();
+    }
+    /** Tear down the trace hooks (best-effort), so they can be re-armed. */
+    function disarmTrace() {
+        try {
+            s.teardownTrace?.();
+        }
+        catch {
+            /* teardown is best-effort */
+        }
+        s.teardownTrace = null;
+    }
+    /** Tear down the trace + auto-capture hooks (best-effort), so they can be re-armed. */
+    function disarmCapture() {
+        disarmTrace();
+        disarmReplay();
+        try {
+            s.autoCapture?.destroy();
+        }
+        catch {
+            /* teardown is best-effort */
+        }
+        s.autoCapture = null;
+    }
+    /**
+     * The effective per-stream capture flags: an init option overrides the served
+     * config, and an absent (or malformed) served value means **on** — the default-on
+     * rule (spec 0003 §C, ported). Called with no answer before boot has one, which is
+     * how the pre-boot arming lands on "both streams on".
+     */
+    function resolveStreams(served) {
+        return {
+            console: (0, sdk_core_1.streamEnabled)(options.capture?.console, served?.console),
+            network: (0, sdk_core_1.streamEnabled)(options.capture?.network, served?.network),
+        };
+    }
+    /**
+     * Install the trace instrumentation for the given per-stream flags, replacing
+     * whatever is installed — the teardown runs first, so a re-arm can never double-wrap
+     * `console` or `XMLHttpRequest`.
+     */
+    function armTrace(streams) {
+        disarmTrace();
+        s.teardownTrace = (0, breadcrumbs_1.instrumentBreadcrumbs)(buffer, {
+            consoleObj: adapters.consoleObj,
+            xhr: adapters.xhr,
+            ignoreUrl: (url) => (0, sdk_core_1.isFixbackApiRequest)(apiUrl, url),
+            now,
+            captureConsole: streams.console,
+            captureNetwork: streams.network,
+            propagateTo,
+        });
+    }
+    /**
+     * Boot with the current identity and reconcile capture + the identity row. Shared by
+     * `start`, `signIn`, and `signOut`: it swaps in the refreshed Reporter session token
+     * (30-day sliding), records the Account / tier / connect URL the boot answer carries,
+     * and arms capture only while a submission would be accepted — so a gated Project's
+     * shake gesture arms exactly when the Account becomes eligible, and drops when it signs
+     * out. `gen` is the caller's lifecycle generation; every await re-checks it so a
+     * destroyed (or restarted) client abandons this in-flight boot.
+     */
+    async function bootAndArm(gen, { recheck = false } = {}) {
+        // Boots are last-one-wins. Two can be in flight at once — a deep link redeemed
+        // while `start`'s boot is still out, a `signOut` racing a Connect — and they carry
+        // *different* identities, so an older answer landing last would undo a newer one:
+        // the shake gesture would stay withheld from a Reporter the server had just
+        // accepted, with the session sitting unused in SecureStore until the next launch.
+        const seq = ++s.bootSequence;
+        let failure = null;
+        const answer = await (0, sdk_core_1.requestBoot)(apiUrl, { key, ...(0, sdk_core_1.compactIdentity)(s.identity) }, {
+            fetch: adapters.fetch,
+            origin,
+            onFailure: (reason) => {
+                failure = reason;
+            },
+        });
+        if (gen !== s.generation || seq !== s.bootSequence)
+            return;
+        // Mid-maintenance, an unanswered boot is Fixback restarting, not a reason to disarm:
+        // keep the notice up and ask again (the maintenance-mode ADR).
+        if (!answer && s.maintenance !== null && s.status === "ready") {
+            scheduleMaintenanceRecheck();
+            return;
+        }
+        s.boot = answer;
+        // What the answer settles, read the way every capture SDK reads it (`reconcileBoot`).
+        const settled = (0, sdk_core_1.reconcileBoot)(answer);
+        // Swap in the refreshed session token (30-day sliding) when boot returned one.
+        if (settled.reporterSession) {
+            s.reporterSessionToken = settled.reporterSession;
+            s.identity = { ...s.identity, reporterSession: s.reporterSessionToken };
+            await (0, reporter_session_store_1.writeReporterSession)(adapters.secureStore, key, s.reporterSessionToken);
+            if (gen !== s.generation || seq !== s.bootSequence)
+                return;
+        }
+        s.currentTier = settled.tier;
+        s.account = settled.account;
+        s.connectUrl = settled.connectUrl;
+        (0, client_state_1.notifyIdentity)(s);
+        // Maintenance mode's notice (the maintenance-mode ADR) — sent only to a caller who could
+        // otherwise report, so it arms the composer as a yes does: it opens onto the notice.
+        const notice = settled.maintenance;
+        // A maintenance recheck on a client already armed changes only the notice: re-arming would
+        // restart the replay recorder every minute and drop the lead-up the next report should carry.
+        if (recheck && s.status === "ready" && settled.arm) {
+            setMaintenance(notice);
+            return;
+        }
+        if (answer && settled.arm) {
+            // Re-arm from a clean slate (the shared trace buffer persists across a re-arm, so
+            // no lead-up is lost) — a Connect that just made the Account eligible arms here.
+            disarmCapture();
+            armCapture(answer);
+            s.lastDormancyWarning = null;
+            setMaintenance(notice);
+            (0, client_state_1.setStatus)(s, "ready");
+        }
+        else {
+            setMaintenance(null);
+            // Say why, once per dormant boot, in a development build (`warn` is silent in
+            // production). A dormant SDK is otherwise indistinguishable on the device from
+            // one that was never installed — and the reason is right here in the answer the
+            // client already holds, or in the failure that stopped one arriving.
+            warnDormant(answer, failure);
+            // Not eligible (a gated Project the Account cannot yet report on, or a signed-out
+            // visitor): nothing armed, but `connectUrl` is retained so `signIn` still works.
+            // What the pre-boot arming optimistically recorded is dropped with it — this
+            // Account cannot submit, so holding its console and network lead-up in memory
+            // serves nothing. A later `signIn` re-arms and starts a fresh lead-up.
+            disarmCapture();
+            buffer.clear();
+            (0, client_state_1.setStatus)(s, "disabled");
+        }
+    }
+    /** Explain a dormant boot to the developer, at most once per distinct reason. */
+    function warnDormant(answer, failure) {
+        const message = (0, sdk_core_1.explainDormancy)({
+            answer,
+            failure,
+            apiUrl,
+            origin: origin || undefined,
+            // Connect needs a door this app can actually open — an auth session it can
+            // return through, or an in-app browser plus the seam the redirect comes back
+            // on. With neither, naming `signIn()` would send the developer down a dead end.
+            signInCall: (0, client_connect_1.canSignIn)(s) ? "Fixback.signIn()" : undefined,
+        });
+        if (!message || message === s.lastDormancyWarning)
+            return;
+        s.lastDormancyWarning = message;
+        warn(message);
+    }
+    /**
+     * Step two of `start`: with a boot answer that says a submission would be
+     * accepted, reconcile the trace instrumentation against the Project's served
+     * capture config and install (unless turned off) automatic error capture.
+     * Reaching here means the Gate is already satisfied, so an auto-error inherits
+     * the very tier boot derived.
+     *
+     * The trace was already armed optimistically at `start()`, so this is a
+     * **reconciliation**, not the first arming: a stream the Project turns off is both
+     * uninstrumented and **purged**, so what the optimistic window recorded for it can
+     * never ship.
+     */
+    function armCapture(answer) {
+        const streams = resolveStreams(answer.capture);
+        armTrace(streams);
+        if (!streams.console)
+            buffer.clearStream("console");
+        if (!streams.network)
+            buffer.clearStream("network");
+        // Replay arms **here and only here** — never optimistically before boot, the way
+        // the trace does. A trace that turns out to be unwanted is purged; frames already
+        // written to the cache are a recording that should not have started (ADR-0044).
+        armReplay(answer.capture);
+        if (options.autoCapture === false)
+            return;
+        s.autoCapture = (0, error_capture_1.installErrorCapture)({
+            apiUrl,
+            key,
+            origin,
+            identity: s.identity,
+            sdkVersion: version_1.EXPO_SDK_VERSION,
+            release,
+            buffer,
+            beforeSend: options.beforeSend,
+            scrub: options.scrub,
+            environment: readEnvironment,
+            currentUrl: () => (0, client_state_1.currentUrl)(s),
+            // The replay window as it stood at the throw (ADR-0044): frozen and encoded at
+            // filing time, on the rich first report only — a flush is a count update, and
+            // re-encoding the same window for it would be pure cost.
+            captureReplay: () => freezeAndEncodeReplay(),
+            errorUtils: adapters.errorUtils,
+            appState: adapters.appState,
+            deps: {
+                submitReport: (url, input) => (0, submit_1.submitReport)(url, input, (0, client_state_1.submitDeps)(s)),
+            },
+            now,
+        });
+    }
+    return {
+        bootAndArm,
+        resolveStreams,
+        armTrace,
+        disarmCapture,
+        setMaintenance,
+        clearMaintenanceRecheck,
+    };
+}
+//# sourceMappingURL=client-boot.js.map

package/dist/client-boot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-boot.js","sourceRoot":"","sources":["../src/client-boot.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAqDH,gCAwPC;AA3SD,gDAW2B;AAE3B,+CAAsD;AACtD,qDAA6C;AAE7C,iDAMwB;AACxB,mDAAsD;AACtD,qEAAgE;AAChE,qCAAwC;AACxC,uCAA6C;AAwB7C,oFAAoF;AACpF,SAAgB,UAAU,CAAC,CAAc,EAAE,MAAoB;IAC7D,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAAC;IAElE,SAAS,cAAc,CAAC,IAA8B;QACpD,MAAM,OAAO,GACX,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YAC5C,CAAC,CAAC,WAAW,EAAE,OAAO,KAAK,IAAI,EAAE,OAAO;YACxC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,CAAC;QACvC,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,KAAK,IAAI;YAAE,0BAA0B,EAAE,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,KAAK,MAAM,QAAQ,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,wGAAwG;IACxG,SAAS,0BAA0B;QACjC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO;QACvB,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC;QACzB,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,EAAE;YACjC,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU;gBAAE,KAAK,UAAU,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,uBAAuB;QAC9B,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;IAChC,CAAC;IAED,wEAAwE;IACxE,SAAS,WAAW;QAClB,IAAI,CAAC;YACH,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;QACD,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC;IACzB,CAAC;IAED,uFAAuF;IACvF,SAAS,aAAa;QACpB,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,IAAI,CAAC;YACH,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;QACD,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,SAAS,cAAc,CAAC,MAAiC;QACvD,OAAO;YACL,OAAO,EAAE,IAAA,wBAAa,EAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;YACjE,OAAO,EAAE,IAAA,wBAAa,EAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;SAClE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,SAAS,QAAQ,CAAC,OAAqB;QACrC,WAAW,EAAE,CAAC;QACd,CAAC,CAAC,aAAa,GAAG,IAAA,mCAAqB,EAAC,MAAM,EAAE;YAC9C,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,8BAAmB,EAAC,MAAM,EAAE,GAAG,CAAC;YACpD,GAAG;YACH,cAAc,EAAE,OAAO,CAAC,OAAO;YAC/B,cAAc,EAAE,OAAO,CAAC,OAAO;YAC/B,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,EAAE,OAAO,GAAG,KAAK,KAAqC,EAAE;QAC7F,+EAA+E;QAC/E,mFAAmF;QACnF,kFAAkF;QAClF,4EAA4E;QAC5E,kFAAkF;QAClF,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC;QAC7B,IAAI,OAAO,GAAuB,IAAI,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAW,EAC9B,MAAM,EACN,EAAE,GAAG,EAAE,GAAG,IAAA,0BAAe,EAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EACvC;YACE,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM;YACN,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;gBACpB,OAAO,GAAG,MAAM,CAAC;YACnB,CAAC;SACF,CACF,CAAC;QACF,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY;YAAE,OAAO;QAC3D,qFAAqF;QACrF,+DAA+D;QAC/D,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9D,0BAA0B,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC;QAChB,sFAAsF;QACtF,MAAM,OAAO,GAAG,IAAA,wBAAa,EAAC,MAAM,CAAC,CAAC;QAEtC,+EAA+E;QAC/E,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,CAAC,CAAC,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;YACjD,CAAC,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,oBAAoB,EAAE,CAAC;YACxE,MAAM,IAAA,6CAAoB,EAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAC9E,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY;gBAAE,OAAO;QAC7D,CAAC;QACD,CAAC,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;QAC7B,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC5B,CAAC,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAClC,IAAA,6BAAc,EAAC,CAAC,CAAC,CAAC;QAElB,yFAAyF;QACzF,qFAAqF;QACrF,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QACnC,2FAA2F;QAC3F,8FAA8F;QAC9F,IAAI,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YACnD,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC1B,kFAAkF;YAClF,iFAAiF;YACjF,aAAa,EAAE,CAAC;YAChB,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAC7B,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,IAAA,wBAAS,EAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,IAAI,CAAC,CAAC;YACrB,8EAA8E;YAC9E,+EAA+E;YAC/E,gFAAgF;YAChF,qEAAqE;YACrE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC7B,kFAAkF;YAClF,iFAAiF;YACjF,6EAA6E;YAC7E,8EAA8E;YAC9E,uEAAuE;YACvE,aAAa,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,IAAA,wBAAS,EAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,SAAS,WAAW,CAAC,MAAyB,EAAE,OAA2B;QACzE,MAAM,OAAO,GAAG,IAAA,0BAAe,EAAC;YAC9B,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM,EAAE,MAAM,IAAI,SAAS;YAC3B,2EAA2E;YAC3E,6EAA6E;YAC7E,gFAAgF;YAChF,UAAU,EAAE,IAAA,0BAAS,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;SAC1D,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,CAAC,mBAAmB;YAAE,OAAO;QAC1D,CAAC,CAAC,mBAAmB,GAAG,OAAO,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,SAAS,UAAU,CAAC,MAAkB;QACpC,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/C,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAEpD,iFAAiF;QACjF,kFAAkF;QAClF,gFAAgF;QAChF,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE1B,IAAI,OAAO,CAAC,WAAW,KAAK,KAAK;YAAE,OAAO;QAC1C,CAAC,CAAC,WAAW,GAAG,IAAA,mCAAmB,EAAC;YAClC,MAAM;YACN,GAAG;YACH,MAAM;YACN,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU,EAAE,0BAAgB;YAC5B,OAAO;YACP,MAAM;YACN,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE,eAAe;YAC5B,UAAU,EAAE,GAAG,EAAE,CAAC,IAAA,yBAAU,EAAC,CAAC,CAAC;YAC/B,+EAA+E;YAC/E,8EAA8E;YAC9E,yDAAyD;YACzD,aAAa,EAAE,GAAG,EAAE,CAAC,qBAAqB,EAAE;YAC5C,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,IAAI,EAAE;gBACJ,YAAY,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qBAAY,EAAC,GAAG,EAAE,KAAK,EAAE,IAAA,yBAAU,EAAC,CAAC,CAAC,CAAC;aACtE;YACD,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,UAAU;QACV,cAAc;QACd,QAAQ;QACR,aAAa;QACb,cAAc;QACd,uBAAuB;KACxB,CAAC;AACJ,CAAC"}

package/dist/client-connect.d.ts

@@ -0,0 +1,33 @@
+/**
+ * **Connect** on the headless client (ADR-0066): the two doors `signIn()` opens
+ * (ADR-0052), the inbound deep links that finish a Connect started outside the app
+ * (ADR-0046), and `signOut()`.
+ *
+ * One piece of the headless client (`./client`), created over the state every piece
+ * shares (`./client-state`): the Reporter session token, the connect URL boot
+ * returned, the last inbound code, and the callers waiting on one. A Connect that lands
+ * re-boots as the Account through the boot it is handed (`./client-boot`), so a gated
+ * Project's shake gesture arms once the Account is eligible.
+ */
+import { type ReporterIdentity } from "@fixback/sdk-core";
+import { type ClientState } from "./client-state";
+/** Whether `signIn()` can open a door at all — what the dormancy hint is gated on. */
+export declare function canSignIn(s: ClientState): boolean;
+/** Connect on the client, as {@link createConnect} builds it. */
+export interface Connect {
+    /** Start a Connect through whichever door this app can open. Never throws. */
+    signIn(): Promise<ReporterIdentity>;
+    /** Revoke the Reporter session, clear it from SecureStore, and re-boot as anonymous. */
+    signOut(): Promise<void>;
+    /** Listen for Connect deep links that arrive while the app runs. */
+    armConnectLinking(gen: number): void;
+    /** Redeem the code on the URL the app was launched with, before the first boot. */
+    redeemLaunchUrl(gen: number): Promise<void>;
+    /** Resolve everyone waiting on an inbound Connect, and stop waiting. */
+    settleInboundWaiters(landed: boolean): void;
+}
+/**
+ * Connect over the client's shared state. `bootAndArm` is the client's boot: a Connect
+ * that lands re-boots through it, as the Account.
+ */
+export declare function createConnect(s: ClientState, bootAndArm: (gen: number) => Promise<void>): Connect;

package/dist/client-connect.js

@@ -0,0 +1,306 @@
+"use strict";
+/**
+ * **Connect** on the headless client (ADR-0066): the two doors `signIn()` opens
+ * (ADR-0052), the inbound deep links that finish a Connect started outside the app
+ * (ADR-0046), and `signOut()`.
+ *
+ * One piece of the headless client (`./client`), created over the state every piece
+ * shares (`./client-state`): the Reporter session token, the connect URL boot
+ * returned, the last inbound code, and the callers waiting on one. A Connect that lands
+ * re-boots as the Account through the boot it is handed (`./client-boot`), so a gated
+ * Project's shake gesture arms once the Account is eligible.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canSignIn = canSignIn;
+exports.createConnect = createConnect;
+const sdk_core_1 = require("@fixback/sdk-core");
+const client_state_1 = require("./client-state");
+const connect_1 = require("./connect");
+const reporter_session_store_1 = require("./reporter-session-store");
+/**
+ * How long the browser door's `signIn()` waits for the connect page's redirect to come
+ * back as a deep link (ADR-0052). Generous, because the round trip contains a real
+ * sign-in — the doors, an email link, a password manager — and the only cost of
+ * waiting is one pending promise. It exists so a person who abandons the page settles
+ * that promise eventually rather than never; the Connect itself is not cancelled by it
+ * and still lands through the inbound listener if they come back later.
+ */
+const CONNECT_BROWSER_WAIT_MS = 5 * 60_000;
+/**
+ * Whether the browser door is available: something to open the page with, and the
+ * `linking` seam the code comes back on. Without the seam the page would land the
+ * person back in the app with a code nothing reads, which is worse than not opening
+ * it — so both are required, not either.
+ */
+function canConnectThroughBrowser({ adapters }) {
+    return Boolean(adapters.openBrowser && adapters.linking);
+}
+/** Whether `signIn()` can open a door at all — what the dormancy hint is gated on. */
+function canSignIn(s) {
+    const { options, adapters } = s;
+    return Boolean((options.returnUrl && adapters.openAuthSession) || canConnectThroughBrowser(s));
+}
+/** Why `signIn()` could not open a door, named by what this app is actually missing. */
+function explainSignInDoor({ adapters }) {
+    if (!adapters.openBrowser && !adapters.openAuthSession) {
+        return `${sdk_core_1.WARN_PREFIX} signIn needs a browser to open the connect page — install expo-web-browser.`;
+    }
+    if (!adapters.linking) {
+        return `${sdk_core_1.WARN_PREFIX} ` + "signIn needs the Linking seam to receive the connect page's redirect — or declare a `returnUrl` in init to return through an auth session instead.";
+    }
+    return `${sdk_core_1.WARN_PREFIX} ` + "signIn needs either an auth-session opener plus a `returnUrl` in init, or an in-app browser (install expo-web-browser).";
+}
+/**
+ * Connect over the client's shared state. `bootAndArm` is the client's boot: a Connect
+ * that lands re-boots through it, as the Account.
+ */
+function createConnect(s, bootAndArm) {
+    const { options, adapters, warn, key, apiUrl } = s;
+    /**
+     * Start a **Connect** (ADR-0066): open the platform's connect page, exchange the
+     * one-time code it hands back for a Reporter session, store it in SecureStore, and
+     * re-boot as the Account — so a gated Project's shake gesture arms once the Account
+     * is eligible. Exposed so a host app can put it on its own settings screen (the way
+     * a gated Project, which shows nothing to a signed-out visitor, is entered), and
+     * behind the composer's identity row. Never throws: any failure leaves the current
+     * identity untouched.
+     *
+     * There are two doors, and which one opens depends only on what this app can offer
+     * (ADR-0052):
+     *
+     *  - **The auth session**, when `init` declared a `returnUrl` and an opener is
+     *    installed. The page returns *in place*, so the person never leaves the app.
+     *  - **The in-app browser**, otherwise. The page is opened with no return URL and
+     *    resolves where to land from the app links the *Project* lists, then redirects
+     *    to one — which re-opens this app, where the inbound listener redeems the code
+     *    (the journey a claimed Invite already travels). This is what keeps `signIn()`
+     *    from being inert on the default install, which declares no `returnUrl` at all.
+     */
+    async function signIn() {
+        const gen = s.generation;
+        if (!s.connectUrl)
+            return (0, client_state_1.reporterIdentity)(s); // not booted, or an older server
+        try {
+            if (options.returnUrl && adapters.openAuthSession) {
+                const outcome = await (0, connect_1.startExpoConnect)(adapters.openAuthSession, {
+                    connectUrl: s.connectUrl,
+                    key,
+                    returnUrl: options.returnUrl,
+                });
+                if (gen !== s.generation)
+                    return (0, client_state_1.reporterIdentity)(s);
+                if (outcome.kind === "code")
+                    await redeemConnectCode(outcome.code, gen);
+            }
+            else if (canConnectThroughBrowser(s)) {
+                await connectThroughBrowser(gen);
+            }
+            else {
+                warn(explainSignInDoor(s));
+            }
+        }
+        catch {
+            // A Connect problem must never disturb the host app.
+        }
+        return (0, client_state_1.reporterIdentity)(s);
+    }
+    /**
+     * The browser door (ADR-0052): open the connect page with no return URL and wait for
+     * the app link it redirects to, which the OS delivers back here as a deep link.
+     *
+     * The wait matters because the two halves are separated by the operating system: the
+     * page redirects, the app is foregrounded, and {@link handleInboundUrl} redeems —
+     * all after `openBrowser` has resolved (on Android it resolves as soon as the tab is
+     * shown). Without it, an awaited `signIn()` would report the anonymous identity it
+     * started from while the Connect it started was still completing. It is bounded, so
+     * a person who wandered off never leaves a promise pending for the life of the app.
+     */
+    async function connectThroughBrowser(gen) {
+        const landed = awaitInboundConnect();
+        try {
+            await adapters.openBrowser((0, connect_1.buildAppConnectUrl)(s.connectUrl, key));
+        }
+        catch {
+            settleInboundWaiters(false);
+            return;
+        }
+        if (gen !== s.generation)
+            return settleInboundWaiters(false);
+        // The redirect re-opens this app; dismiss the page it came from so the person is
+        // returned to where they tapped Sign in rather than to a finished connect page.
+        if (await landed)
+            dismissBrowser();
+    }
+    /**
+     * A promise for the next inbound Connect — `true` when one is redeemed, `false` when
+     * the wait expires or the client is destroyed. The timer is cleared on either, so a
+     * completed sign-in leaves nothing running.
+     */
+    function awaitInboundConnect() {
+        return new Promise((resolve) => {
+            const timer = setTimeout(() => settleInboundWaiters(false), CONNECT_BROWSER_WAIT_MS);
+            s.inboundWaiters.push((landed) => {
+                clearTimeout(timer);
+                resolve(landed);
+            });
+        });
+    }
+    /** Resolve everyone waiting on an inbound Connect, and stop waiting. */
+    function settleInboundWaiters(landed) {
+        const waiting = s.inboundWaiters;
+        s.inboundWaiters = [];
+        for (const resolve of waiting) {
+            try {
+                resolve(landed);
+            }
+            catch {
+                /* a waiter must never break the client */
+            }
+        }
+    }
+    /** Close the in-app browser this app opened — best-effort, like every seam here. */
+    function dismissBrowser() {
+        try {
+            adapters.dismissBrowser?.();
+        }
+        catch {
+            /* dismissing is a courtesy, never a failure */
+        }
+    }
+    /**
+     * Exchange a one-time Connect code for a Reporter session and persist it, leaving the
+     * client identified as the Account. The tail every half of Connect on mobile shares:
+     * {@link signIn}, where the app opened the connect page itself, and
+     * {@link handleInboundUrl}, where the code arrived on a deep link from an invite the
+     * person claimed elsewhere (ADR-0046). `gen` is the caller's lifecycle generation,
+     * re-checked after every await so a destroyed client abandons the redemption.
+     *
+     * Booting on the new identity is the **caller's** step, because the two callers
+     * differ: a redemption mid-run must re-boot to arm, while the one on the launch URL
+     * is followed by `start`'s own boot and would only duplicate it.
+     */
+    async function exchangeAndStore(code, gen) {
+        const result = await (0, sdk_core_1.exchangeConnectCode)(apiUrl, {
+            key,
+            code,
+            anonymousId: s.identity.anonymousId,
+            platform: "expo",
+        }, { fetch: adapters.fetch });
+        if (gen !== s.generation || !result)
+            return false;
+        s.reporterSessionToken = result.reporterSession;
+        s.identity = { ...s.identity, reporterSession: s.reporterSessionToken };
+        await (0, reporter_session_store_1.writeReporterSession)(adapters.secureStore, key, s.reporterSessionToken);
+        return gen === s.generation;
+    }
+    /**
+     * {@link exchangeAndStore} plus the re-boot that arms the client as the Account, and
+     * whether the Connect landed. A refused exchange changes no identity, so it is not
+     * re-booted on: the answer would be the one already in hand.
+     */
+    async function redeemConnectCode(code, gen) {
+        if (!(await exchangeAndStore(code, gen)))
+            return false;
+        await bootAndArm(gen);
+        return true;
+    }
+    /**
+     * Finish a Connect that started outside the app: read the one-time code off an
+     * inbound deep link and redeem it. Ignores a code it has already seen — iOS and
+     * Android both replay the launch URL in ordinary situations (a cold start whose
+     * `getInitialURL` is then re-delivered as a `url` event), and a code is single-use,
+     * so a second exchange would fail and report a Connect that in fact succeeded as one
+     * that did not. A declared `returnUrl` additionally narrows this to links on the
+     * app's own return origin; an app that declared none still redeems, because the
+     * claim page mints its code against the **Project's** app link, not against `init`.
+     */
+    async function handleInboundUrl(url, gen, { reboot = true } = {}) {
+        try {
+            const code = (0, connect_1.parseInboundConnectCode)(url, options.returnUrl);
+            if (!code || code === s.lastInboundCode)
+                return;
+            s.lastInboundCode = code;
+            const landed = reboot
+                ? await redeemConnectCode(code, gen)
+                : await exchangeAndStore(code, gen);
+            // A `signIn()` that went through the browser door is waiting on exactly this —
+            // the code it sent the person out for, arriving back on the app's own link.
+            if (landed)
+                settleInboundWaiters(true);
+        }
+        catch {
+            // A Connect problem must never disturb the host app.
+        }
+    }
+    /**
+     * Listen for Connect deep links that arrive **while the app runs** — the person was
+     * already in the app (or it was backgrounded) when they tapped the claim page's
+     * button. Armed on the `linking` seam alone: a Project's app link is allowlisted on
+     * the Project, so an app that never declared a `returnUrl` in `init` is still where
+     * a claim lands (ADR-0046). Silent on an app that provides no seam, which can never
+     * be a Connect target.
+     */
+    function armConnectLinking(gen) {
+        const linking = adapters.linking;
+        if (!linking)
+            return;
+        try {
+            const subscription = linking.addEventListener("url", (event) => {
+                void handleInboundUrl(event?.url ?? "", gen);
+            });
+            s.teardownLinking = () => subscription.remove();
+        }
+        catch {
+            // A Linking seam that refuses to subscribe is not a reason to fail a start.
+        }
+    }
+    /**
+     * Redeem the code on the URL the app was **launched** with, before the first boot —
+     * the invite journey's cold start (the person tapped the claim page's redirect and
+     * the app opened). Awaited rather than left in flight, so the one boot that follows
+     * carries the Reporter session: two concurrent boots race, and an anonymous answer
+     * landing last leaves a Connect that succeeded looking like one that never happened.
+     * The browser SDK exchanges a URL code before booting for the same reason.
+     *
+     * Best-effort throughout: a seam that throws, a launch URL that carries nothing, or
+     * an exchange the server refuses all fall through to an ordinary anonymous boot.
+     */
+    async function redeemLaunchUrl(gen) {
+        const linking = adapters.linking;
+        if (!linking)
+            return;
+        try {
+            const initial = await linking.getInitialURL();
+            if (gen !== s.generation || !initial)
+                return;
+            await handleInboundUrl(initial, gen, { reboot: false });
+        }
+        catch {
+            // Never throw into the host app.
+        }
+    }
+    /**
+     * Revoke the Reporter session, clear it from SecureStore, and re-boot as anonymous —
+     * so a gated Project's launcher (shake gesture) drops at once. Never throws.
+     */
+    async function signOut() {
+        const gen = s.generation;
+        try {
+            if (s.reporterSessionToken) {
+                await (0, sdk_core_1.revokeReporterSession)(apiUrl, s.reporterSessionToken, {
+                    fetch: adapters.fetch,
+                });
+            }
+            await (0, reporter_session_store_1.clearReporterSession)(adapters.secureStore, key);
+            s.reporterSessionToken = null;
+            s.identity = { ...s.identity, reporterSession: undefined };
+            if (gen === s.generation)
+                await bootAndArm(gen);
+        }
+        catch {
+            // A Fixback problem must never disturb the host app.
+        }
+    }
+    return { signIn, signOut, armConnectLinking, redeemLaunchUrl, settleInboundWaiters };
+}
+//# sourceMappingURL=client-connect.js.map

package/dist/client-connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-connect.js","sourceRoot":"","sources":["../src/client-connect.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAkCH,8BAKC;AA+BD,sCA2PC;AA/TD,gDAK2B;AAE3B,iDAAoE;AACpE,uCAA0F;AAC1F,qEAAsF;AAEtF;;;;;;;GAOG;AACH,MAAM,uBAAuB,GAAG,CAAC,GAAG,MAAM,CAAC;AAE3C;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,EAAE,QAAQ,EAAe;IACzD,OAAO,OAAO,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,sFAAsF;AACtF,SAAgB,SAAS,CAAC,CAAc;IACtC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO,OAAO,CACZ,CAAC,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,eAAe,CAAC,IAAI,wBAAwB,CAAC,CAAC,CAAC,CAC/E,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,SAAS,iBAAiB,CAAC,EAAE,QAAQ,EAAe;IAClD,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;QACvD,OAAO,GAAG,sBAAW,8EAA8E,CAAC;IACtG,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,GAAG,sBAAW,GAAG,GAAG,oJAAoJ,CAAC;IAClL,CAAC;IACD,OAAO,GAAG,sBAAW,GAAG,GAAG,yHAAyH,CAAC;AACvJ,CAAC;AAgBD;;;GAGG;AACH,SAAgB,aAAa,CAC3B,CAAc,EACd,UAA0C;IAE1C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAEnD;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,UAAU,MAAM;QACnB,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,UAAU;YAAE,OAAO,IAAA,+BAAgB,EAAC,CAAC,CAAC,CAAC,CAAC,iCAAiC;QAChF,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;gBAClD,MAAM,OAAO,GAAG,MAAM,IAAA,0BAAgB,EAAC,QAAQ,CAAC,eAAe,EAAE;oBAC/D,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,GAAG;oBACH,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B,CAAC,CAAC;gBACH,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU;oBAAE,OAAO,IAAA,+BAAgB,EAAC,CAAC,CAAC,CAAC;gBACrD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;oBAAE,MAAM,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC1E,CAAC;iBAAM,IAAI,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;QACD,OAAO,IAAA,+BAAgB,EAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,UAAU,qBAAqB,CAAC,GAAW;QAC9C,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,WAAY,CAAC,IAAA,4BAAkB,EAAC,CAAC,CAAC,UAAW,EAAE,GAAG,CAAC,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU;YAAE,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC7D,iFAAiF;QACjF,gFAAgF;QAChF,IAAI,MAAM,MAAM;YAAE,cAAc,EAAE,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACH,SAAS,mBAAmB;QAC1B,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,EACjC,uBAAuB,CACxB,CAAC;YACF,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC/B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,SAAS,oBAAoB,CAAC,MAAe;QAC3C,MAAM,OAAO,GAAG,CAAC,CAAC,cAAc,CAAC;QACjC,CAAC,CAAC,cAAc,GAAG,EAAE,CAAC;QACtB,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IAED,oFAAoF;IACpF,SAAS,cAAc;QACrB,IAAI,CAAC;YACH,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,GAAW;QACvD,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAmB,EACtC,MAAM,EACN;YACE,GAAG;YACH,IAAI;YACJ,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW;YACnC,QAAQ,EAAE,MAAM;SACjB,EACD,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAC1B,CAAC;QACF,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAClD,CAAC,CAAC,oBAAoB,GAAG,MAAM,CAAC,eAAe,CAAC;QAChD,CAAC,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACxE,MAAM,IAAA,6CAAoB,EAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAC9E,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,GAAW;QACxD,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACvD,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,UAAU,gBAAgB,CAC7B,GAAW,EACX,GAAW,EACX,EAAE,MAAM,GAAG,IAAI,KAAoC,EAAE;QAErD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAA,iCAAuB,EAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,eAAe;gBAAE,OAAO;YAChD,CAAC,CAAC,eAAe,GAAG,IAAI,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM;gBACnB,CAAC,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC;gBACpC,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACtC,+EAA+E;YAC/E,4EAA4E;YAC5E,IAAI,MAAM;gBAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,iBAAiB,CAAC,GAAW;QACpC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC7D,KAAK,gBAAgB,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,eAAe,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,UAAU,eAAe,CAAC,GAAW;QACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;YAC9C,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,OAAO;gBAAE,OAAO;YAC7C,MAAM,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,UAAU,OAAO;QACpB,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAC;gBAC3B,MAAM,IAAA,gCAAqB,EAAC,MAAM,EAAE,CAAC,CAAC,oBAAoB,EAAE;oBAC1D,KAAK,EAAE,QAAQ,CAAC,KAAK;iBACtB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAA,6CAAoB,EAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACtD,CAAC,CAAC,oBAAoB,GAAG,IAAI,CAAC;YAC9B,CAAC,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;YAC3D,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU;gBAAE,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC;AACvF,CAAC"}

package/dist/client-replay.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Mobile replay's arming (ADR-0044): whether the client records at all, the frame
+ * recorder it starts and stops on every boot, and turning a frozen window into the
+ * report's video.
+ *
+ * One piece of the headless client (`./client`), created over the state every piece
+ * shares (`./client-state`). The recorder and the window the composer froze live
+ * there, because the composer (`present`, `submit`) and boot (`./client-boot`) both
+ * reach them.
+ */
+import { type CaptureConfig } from "@fixback/sdk-core";
+import type { ClientState } from "./client-state";
+import { type MobileReplayWindow } from "./replay";
+import { type ReplayAttachment } from "./replay-encode";
+/** The replay half of capture arming, as {@link createReplayArming} builds it. */
+export interface ReplayArming {
+    /** Start (or stop) the frame recorder for the Project's served config. */
+    armReplay(served: CaptureConfig | undefined): void;
+    /** Stop the recorder and drop every frame it owns (best-effort). */
+    disarmReplay(): void;
+    /** Delete a replay frame or encoded window file (best-effort, repeat-safe). */
+    releaseReplayFile(uri: string): void;
+    /** Give a frozen window back to the recorder, so its frames can be reclaimed. */
+    releaseReplayWindow(window: MobileReplayWindow | null): void;
+    /** Freeze the window as it stands now and encode it — the auto-capture path's replay. */
+    freezeAndEncodeReplay(): Promise<ReplayAttachment | null>;
+    /** Encode a frozen window for transport; `null` whenever it cannot become a video. */
+    encodeReplay(window: MobileReplayWindow | null): Promise<ReplayAttachment | null>;
+}
+/** Mobile replay's arming over the client's shared state. */
+export declare function createReplayArming(s: ClientState): ReplayArming;