@hosty-sdk/app 0.27.23 → 0.27.24

package/dist/react.js

@@ -208,24 +208,34 @@ export function useAppIdentity({ probePath = "/api/auth/identity", appCodePath =
     const onSessionRef = useRef(onSession);
     useEffect(() => { onSessionRef.current = onSession; }, [onSession]);
     const continuity = activity?.continuity;
+    const continuityCoreOrigin = activity?.openUrl ? new URL(activity.openUrl).origin : null;
     const continuityActor = session?.userId;
     useEffect(() => {
-        if (!continuity || !activity?.openUrl || !continuityActor)
+        if (!continuity || !continuityCoreOrigin || !continuityActor)
             return;
-        return configureAppContinuity({ coreOrigin: new URL(activity.openUrl).origin, authority: continuity,
+        return configureAppContinuity({ coreOrigin: continuityCoreOrigin, authority: continuity,
             probe: async () => {
                 const next = await refreshRef.current();
                 return next?.status === "active" && next.userId === continuityActor
                     && (!next.hosty || (next.hosty.version === 1 && next.hosty.setup === "ready"));
             } });
-    }, [continuity?.grantId, activity?.openUrl, continuityActor]);
+    }, [continuity?.grantId, continuityCoreOrigin, continuityActor]);
     useEffect(() => {
         let cancelled = false;
         let probeSequence = 0;
         const controller = new AbortController();
         if (initialGrantPresent.current === null)
             initialGrantPresent.current = restoreAppGrant();
-        async function probeAndRecover() {
+        let pendingProbe = null;
+        // Focus, continuity maintenance and setup review can request the same identity at once.
+        // Share its result: a superseded successful probe must not look like an access outage.
+        function probeAndRecover() {
+            if (pendingProbe)
+                return pendingProbe;
+            pendingProbe = runProbeAndRecover().finally(() => { pendingProbe = null; });
+            return pendingProbe;
+        }
+        async function runProbeAndRecover() {
             const sequence = ++probeSequence;
             // Dedicated controller + setTimeout instead of AbortSignal.any/timeout, which are not
             // available in every browser (a synchronous throw here would stop the bridge from
@@ -274,7 +284,7 @@ export function useAppIdentity({ probePath = "/api/auth/identity", appCodePath =
             }
             if (revision !== appGrantRevision()) {
                 initialGrantPresent.current ||= restoreAppGrant();
-                return probeAndRecover();
+                return runProbeAndRecover();
             }
             forgetRejectedAppGrant(rejectionCode, revision);
             if (openUrl && protocol)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hosty-sdk/app",
-  "version": "0.27.23",
+  "version": "0.27.24",
   "description": "Hosty app auth: session state machine, recovery bridge, Core revalidation, and the embedder responder.",
   "license": "AGPL-3.0-only",
   "type": "module",