@hosty-sdk/app 0.21.0 → 0.21.2

package/README.md

@@ -25,6 +25,13 @@ Minimal Next.js wiring:
 import { AppIdentityBridge } from "@hosty-sdk/app/react";
 // wrap protected client content: <AppIdentityBridge>{children}</AppIdentityBridge>
 
+// Reuse an active probe that already returns the app's session fields:
+// <AppIdentityBridge probePath="/api/auth/session" onSession={seedSessionCache}>
+//   {children}
+// </AppIdentityBridge>
+// seedSessionCache receives unknown JSON; validate app-specific fields before caching.
+// The callback runs before children mount, only for a successful active probe.
+
 // app/api/auth/app-code/route.ts
 import { createAppCodeRouteHandler } from "@hosty-sdk/app/server";
 export const dynamic = "force-dynamic";

package/dist/install.d.ts

@@ -83,7 +83,7 @@ export interface InstallationSource {
             description?: string | null;
         };
     };
-    /** Personal source selection requires apps.sources as well as apps.install and Core review. */
+    /** Personal source selection requires apps.install plus apps.sources.full or sources.connections and Core review. */
     sourceConnections?: {
         manifestConnectionId?: string;
         gitConnectionId?: string;

package/dist/react.d.ts

@@ -50,6 +50,8 @@ export interface AppIdentityBridgeProps {
     appCodePath?: string;
     /** Optional app-owned rendering, including loading and active content. Recovery remains SDK-owned. */
     renderState?: (state: AppIdentityBridgeState) => ReactNode;
+    /** Receives a successful active probe before children mount, so an app can seed its session cache. */
+    onSession?: (body: unknown) => void;
     children?: ReactNode;
 }
 /**
@@ -60,7 +62,7 @@ export interface AppIdentityBridgeProps {
  * redirect through Core `/open` when standalone, and cards only in fallback/terminal states
  * — never a login UI while recovery is still running.
  */
-export declare function AppIdentityBridge({ probePath, appCodePath, renderState, children, }?: AppIdentityBridgeProps): string | number | bigint | boolean | Iterable<ReactNode> | Promise<string | number | bigint | boolean | import("react").ReactPortal | import("react").ReactElement<unknown, string | import("react").JSXElementConstructor<any>> | Iterable<ReactNode> | null | undefined> | import("react").JSX.Element | null | undefined;
+export declare function AppIdentityBridge({ probePath, appCodePath, renderState, onSession, children, }?: AppIdentityBridgeProps): string | number | bigint | boolean | Iterable<ReactNode> | Promise<string | number | bigint | boolean | import("react").ReactPortal | import("react").ReactElement<unknown, string | import("react").JSXElementConstructor<any>> | Iterable<ReactNode> | null | undefined> | import("react").JSX.Element | null | undefined;
 export interface HostThemeBridgeProps {
     /**
      * Whether the operating system decides the theme while no shell has spoken — `true` unless the

package/dist/react.js

@@ -187,7 +187,7 @@ export function useLaunchMode() {
  * redirect through Core `/open` when standalone, and cards only in fallback/terminal states
  * — never a login UI while recovery is still running.
  */
-export function AppIdentityBridge({ probePath = "/api/auth/identity", appCodePath = "/api/auth/app-code", renderState, children, } = {}) {
+export function AppIdentityBridge({ probePath = "/api/auth/identity", appCodePath = "/api/auth/app-code", renderState, onSession, children, } = {}) {
     const [ui, setUi] = useState({ kind: "recovering" });
     // A launch code is single-use. Strict Mode replays the effect after the URL is cleaned;
     // keep its exchange alive and let the replacement effect await the same response.
@@ -199,6 +199,8 @@ export function AppIdentityBridge({ probePath = "/api/auth/identity", appCodePat
     const upgradedAttempt = useRef(false);
     const [activity, setActivity] = useState(null);
     const exchangeRef = useRef(null);
+    const onSessionRef = useRef(onSession);
+    useEffect(() => { onSessionRef.current = onSession; }, [onSession]);
     useEffect(() => {
         let cancelled = false;
         const controller = new AbortController();
@@ -218,6 +220,7 @@ export function AppIdentityBridge({ probePath = "/api/auth/identity", appCodePat
             let protocol = null;
             let activityMetadata = null;
             let rejectionCode;
+            let sessionBody = null;
             const revision = appGrantRevision();
             try {
                 const response = await appFetch(probePath, {
@@ -227,6 +230,9 @@ export function AppIdentityBridge({ probePath = "/api/auth/identity", appCodePat
                 }, false);
                 const body = await response.json().catch(() => null);
                 status = readProbedSessionStatus(body);
+                if (status === "active" && !response.ok)
+                    status = null;
+                sessionBody = body;
                 const identityError = body;
                 rejectionCode = identityError?.error?.code ?? identityError?.appSession?.error?.code;
                 const recovery = readRecoveryParams(body);
@@ -289,6 +295,7 @@ export function AppIdentityBridge({ probePath = "/api/auth/identity", appCodePat
                 });
             switch (action.kind) {
                 case "none":
+                    onSessionRef.current?.(sessionBody);
                     appSessionActive();
                     wasActive.current = true;
                     setUi({ kind: "active" });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hosty-sdk/app",
-  "version": "0.21.0",
+  "version": "0.21.2",
   "description": "Hosty app auth: session state machine, recovery bridge, Core revalidation, and the embedder responder.",
   "license": "AGPL-3.0-only",
   "type": "module",
@@ -91,7 +91,7 @@
     "server-only": "^0.0.1"
   },
   "peerDependencies": {
-    "next": "^16.3.6",
+    "next": "^16.3.8",
     "react": "^19.2.8"
   },
   "peerDependenciesMeta": {
@@ -103,14 +103,14 @@
     }
   },
   "devDependencies": {
-    "@types/node": "^24.19.0",
+    "@types/node": "^24.19.1",
     "@types/react": "^19.3.0",
-    "typescript": "^6",
-    "vitest": "^5.0.2",
+    "@types/react-dom": "^19.3.0",
+    "jsdom": "^30.1.1",
     "react": "^19.3.0",
     "react-dom": "^19.3.0",
-    "@types/react-dom": "^19.3.0",
-    "jsdom": "^30.1.1"
+    "typescript": "^6",
+    "vitest": "^5.0.3"
   },
   "repository": {
     "type": "git",