@limrun/ui 0.14.1 → 0.14.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@limrun/ui",
-  "version": "0.14.1",
+  "version": "0.14.2",
   "publishConfig": {
     "access": "public",
     "tag": "next"

package/src/components/remote-control.test.ts

@@ -0,0 +1,34 @@
+// Covers `withAuthenticationToken` only — the rest of <RemoteControl> is
+// integration-tested (see vitest.config.ts).
+//
+// Assertions parse the result and read decoded parameter values, so they
+// don't depend on whether a space serializes as `+` or `%20`.
+
+import { describe, expect, test } from 'vitest';
+import { withAuthenticationToken } from './remote-control';
+
+describe('withAuthenticationToken', () => {
+  test('adds the token alongside query parameters already on the endpoint', () => {
+    const result = new URL(
+      withAuthenticationToken('wss://example.com/socket?transport=webrtc', 'instance-token'),
+    );
+
+    expect(result.searchParams.get('transport')).toBe('webrtc');
+    expect(result.searchParams.get('token')).toBe('instance-token');
+  });
+
+  test('keeps a token containing URL syntax as a single decoded value', () => {
+    const token = 'instance token&scope=preview';
+    const result = new URL(withAuthenticationToken('wss://example.com/socket?transport=webrtc', token));
+
+    expect(result.searchParams.get('token')).toBe(token);
+    expect(result.searchParams.get('transport')).toBe('webrtc');
+    expect(result.searchParams.get('scope')).toBeNull();
+  });
+
+  test('replaces an existing token instead of duplicating it', () => {
+    const result = new URL(withAuthenticationToken('wss://example.com/socket?token=stale', 'fresh-token'));
+
+    expect(result.searchParams.getAll('token')).toEqual(['fresh-token']);
+  });
+});

package/src/components/remote-control.tsx

@@ -437,6 +437,13 @@ const detectPlatform = (url: string): DevicePlatform => {
   return 'ios';
 };
 
+// The endpoint may already carry query parameters, and the token may contain URL syntax.
+export const withAuthenticationToken = (url: string, token: string): string => {
+  const endpoint = new URL(url);
+  endpoint.searchParams.set('token', token);
+  return endpoint.toString();
+};
+
 type DeviceConfig = {
   videoBorderRadiusMultiplier: number;
   loadingLogo: string;
@@ -2276,8 +2283,7 @@ export const RemoteControl = forwardRef<RemoteControlHandle, RemoteControlProps>
           parsed.protocol === 'wss:' ? 'https:'
           : parsed.protocol === 'ws:' ? 'http:'
           : parsed.protocol;
-        parsed.searchParams.set('token', token);
-        probeUrl = parsed.toString();
+        probeUrl = withAuthenticationToken(parsed.toString(), token);
       } catch {
         return false;
       }
@@ -2401,7 +2407,7 @@ export const RemoteControl = forwardRef<RemoteControlHandle, RemoteControlProps>
       }, CONNECTION_SUCCESS_TIMEOUT_MS);
 
       try {
-        const ws = new WebSocket(`${url}?token=${token}`);
+        const ws = new WebSocket(withAuthenticationToken(url, token));
         wsRef.current = ws;
 
         // Wait for WebSocket to connect

package/vitest.config.ts

@@ -12,8 +12,9 @@ import { defineConfig } from 'vitest/config';
 //
 // The actual <RemoteControl> component is intentionally NOT under unit
 // test here — its WebRTC plumbing is integration-tested via the demo +
-// staging instance. These tests cover the smaller, pure-logic modules:
-// `core/ax-tree.ts` and `core/ax-fetcher.ts`.
+// staging instance. These tests cover the smaller, pure-logic pieces:
+// `core/ax-tree.ts`, `core/ax-fetcher.ts` and the URL helper exported from
+// `components/remote-control.tsx`.
 export default defineConfig({
   test: {
     environment: 'jsdom',