@onairos/react-native 3.7.1 → 3.7.3

package/lib/commonjs/services/apiClient.js

@@ -1,8 +1,298 @@
-'use strict';
-// Onairos SDK - Asset Registry (auto-generated)
-var __ONAIROS_REQ_REGISTRY__ = [
-    require("./jwtStorageService"),
-    require("../config/api")
-];
-function __ONAIROS_REQ_FUNC__(i) { return __ONAIROS_REQ_REGISTRY__[i]; }
-function _0x1e89(){const _0x30133b=['defineProperty','__esModule','default','authenticatedRequest','apiPut','apiPost','apiGet','apiDelete','apiClient','ApiClient','API_CONFIG','BASE_URL','authTriggers','request','OnairosSDK/1.0.0','iYgtx','Request\x20cancelled','Unknown\x20error','set','log','\x20to:\x20','🎯\x20[API\x20Client]\x20Route\x20','\x20requires\x20','\x20token','getRequestHeaders','rBIds','requiresAuth','method','HYLRU','headers','signal','🔐\x20[API\x20Client]\x20Request\x20','\x20using\x20','rbSbB','baseUrl','\x20status:','status','qvlzf','handle401Error','json','delete','message','eGKLj','name','HfaVA','abort','🚫\x20[API\x20Client]\x20Request\x20','\x20was\x20cancelled','euYxJ','error','❌\x20[API\x20Client]\x20Request\x20','\x20failed:','TtfDM','getJWTForRoute','No\x20','.\x20Please\x20authenticate\x20first.','1|3|5|2|0|6|4','split','cancelRequestsForTokenType','🔄\x20[API\x20Client]\x20Clearing\x20','\x20token\x20due\x20to\x20401\x20error','.\x20Please\x20re-authenticate.','clearJWT','🔑\x20[API\x20Client]\x20','\x20token\x20cleared,\x20user\x20needs\x20to\x20re-authenticate','wCCzt','PuMvX','YdPPP','QymEE','🔑\x20[API\x20Client]\x20Triggering\x20Onairos\x20re-authentication','⚠️\x20[API\x20Client]\x20No\x20Onairos\x20re-auth\x20trigger\x20configured','hDCNN','🔄\x20[API\x20Client]\x20Triggering\x20re-auth\x20for\x20','\x20token\x20(endpoint:\x20','GYCWG','jmRPs','🚫\x20[API\x20Client]\x20Cancelled\x20','\x20requests\x20due\x20to\x20','\x20token\x20failure','TokenType','iEujO','Request\x20failed\x20with\x20status\x20','QtIZe','yUqxl','XVnqX','warn','yqiij','ONAIROS','hTyST','rbhyu','oaCau','apnRH','triggerOnairosReAuth','dGtij','triggerAuthTokenRefresh','XmlfD','⚠️\x20[API\x20Client]\x20No\x20auth\x20token\x20refresh\x20trigger\x20configured','❌\x20[API\x20Client]\x20Failed\x20to\x20trigger\x20re-auth\x20for\x20','QlYTn','ymNPq','lcTbI','tikot','yHuSC','Woerh','LiawH','sxhBs','ZXGfq','replaceTokenForType','🔄\x20[API\x20Client]\x20Replacing\x20','replaceJWTAfterVerification','✅\x20[API\x20Client]\x20','\x20token\x20replaced\x20and\x20related\x20requests\x20cancelled','debugTokens','wDaJc','eSKQR','RpocC','getAllTokens','entries','ymEfk','AlhKN','NXzFw','🔐\x20','substring','...\x20(length:\x20','length','NFZVY','📭\x20',':\x20null','setAuthTriggers','🔧\x20[API\x20Client]\x20Authentication\x20triggers\x20updated','get','bind','post','put'];_0x1e89=function(){return _0x30133b;};return _0x1e89();}function _0x51cb(_0x1e8910,_0x51cbea){_0x1e8910=_0x1e8910-0x0;const _0x5e0adc=_0x1e89();let _0x1ebca6=_0x5e0adc[_0x1e8910];return _0x1ebca6;}Object[_0x51cb(0x0)](exports,_0x51cb(0x1),{'value':!![]}),exports[_0x51cb(0x2)]=exports[_0x51cb(0x3)]=exports[_0x51cb(0x4)]=exports[_0x51cb(0x5)]=exports[_0x51cb(0x6)]=exports[_0x51cb(0x7)]=exports[_0x51cb(0x8)]=exports[_0x51cb(0x9)]=void 0x0;var _jwtStorageService=__ONAIROS_REQ_FUNC__(0x0),_api=__ONAIROS_REQ_FUNC__(0x1);let currentRequestId=0x0;const activeRequests=new Map();class ApiClient{constructor(_0x4aa5ac=_api[_0x51cb(0xa)][_0x51cb(0xb)],_0x107b7a={}){this['baseUrl']=_0x4aa5ac,this[_0x51cb(0xc)]=_0x107b7a;}async[_0x51cb(0xd)](_0x23f6b0,_0x405fba={}){const _0x4cae65={'rBIds':function(_0x4cd9e0,_0x57eb69){return _0x4cd9e0!==_0x57eb69;},'HYLRU':_0x51cb(0xe),'rbSbB':function(_0x3eea7b,_0x36a6cc,_0x4d84d3){return _0x3eea7b(_0x36a6cc,_0x4d84d3);},'qvlzf':function(_0x11085b,_0x38208e){return _0x11085b===_0x38208e;},'eGKLj':function(_0x5054dc,_0xb6cd0a){return _0x5054dc instanceof _0xb6cd0a;},'HfaVA':_0x51cb(0xf),'euYxJ':_0x51cb(0x10),'TtfDM':function(_0x877f9a,_0x18fc9b){return _0x877f9a instanceof _0x18fc9b;},'rJobq':_0x51cb(0x11)},_0x2372b5=++currentRequestId,_0xe9108f=new AbortController();activeRequests[_0x51cb(0x12)](_0x2372b5,_0xe9108f);try{console[_0x51cb(0x13)]('🔗\x20[API\x20Client]\x20Starting\x20request\x20'+_0x2372b5+_0x51cb(0x14)+_0x23f6b0);const _0xcef63b=(0x0,_jwtStorageService['getTokenTypeForRoute'])(_0x23f6b0);console[_0x51cb(0x13)](_0x51cb(0x15)+_0x23f6b0+_0x51cb(0x16)+_0xcef63b+_0x51cb(0x17));const _0x2307a5=await this[_0x51cb(0x18)](_0x23f6b0,_0x4cae65[_0x51cb(0x19)](_0x405fba[_0x51cb(0x1a)],![])),_0x3bff65={'method':_0x405fba[_0x51cb(0x1b)]||'GET','headers':{'Content-Type':'application/json','User-Agent':_0x4cae65[_0x51cb(0x1c)],..._0x2307a5,..._0x405fba[_0x51cb(0x1d)]},'body':_0x405fba['body']?JSON['stringify'](_0x405fba['body']):undefined,'signal':_0xe9108f[_0x51cb(0x1e)]};console[_0x51cb(0x13)](_0x51cb(0x1f)+_0x2372b5+_0x51cb(0x20)+_0xcef63b+'\x20token');const _0xc66e8f=await _0x4cae65[_0x51cb(0x21)](fetch,''+this[_0x51cb(0x22)]+_0x23f6b0,_0x3bff65);console[_0x51cb(0x13)]('📡\x20[API\x20Client]\x20Response\x20'+_0x2372b5+_0x51cb(0x23),_0xc66e8f[_0x51cb(0x24)]);if(_0x4cae65[_0x51cb(0x25)](_0xc66e8f[_0x51cb(0x24)],0x191))return await this[_0x51cb(0x26)](_0x2372b5,_0x23f6b0,_0xcef63b,_0x405fba);const _0x61cab5=await _0xc66e8f[_0x51cb(0x27)]();activeRequests[_0x51cb(0x28)](_0x2372b5);if(!_0xc66e8f['ok'])return{'success':![],'error':_0x61cab5[_0x51cb(0x29)]||'Request\x20failed\x20with\x20status\x20'+_0xc66e8f[_0x51cb(0x24)],'status':_0xc66e8f[_0x51cb(0x24)],'tokenType':_0xcef63b};return{'success':!![],'data':_0x61cab5,'status':_0xc66e8f[_0x51cb(0x24)],'tokenType':_0xcef63b};}catch(_0x37e786){activeRequests[_0x51cb(0x28)](_0x2372b5);if(_0x4cae65[_0x51cb(0x2a)](_0x37e786,Error)&&_0x4cae65[_0x51cb(0x25)](_0x37e786[_0x51cb(0x2b)],'AbortError')){if(_0x4cae65[_0x51cb(0x2c)]!==_0x4cae65[_0x51cb(0x2c)])_0x437a52[_0x51cb(0x2d)](),_0x252c1f[_0x51cb(0x28)](_0x6ef6f8),_0x497d5f++;else return console[_0x51cb(0x13)](_0x51cb(0x2e)+_0x2372b5+_0x51cb(0x2f)),{'success':![],'error':_0x4cae65[_0x51cb(0x30)],'status':0x0};}return console[_0x51cb(0x31)](_0x51cb(0x32)+_0x2372b5+_0x51cb(0x33),_0x37e786),{'success':![],'error':_0x4cae65[_0x51cb(0x34)](_0x37e786,Error)?_0x37e786[_0x51cb(0x29)]:_0x4cae65['rJobq'],'status':0x0};}}async[_0x51cb(0x18)](_0x206219,_0x4341a1){if(!_0x4341a1)return{};const _0x57ac2f=await(0x0,_jwtStorageService[_0x51cb(0x35)])(_0x206219);if(!_0x57ac2f){const _0x687941=(0x0,_jwtStorageService['getTokenTypeForRoute'])(_0x206219);throw new Error(_0x51cb(0x36)+_0x687941+'\x20token\x20available\x20for\x20route\x20'+_0x206219+_0x51cb(0x37));}return{'Authorization':_0x57ac2f};}async[_0x51cb(0x26)](_0x1962c6,_0x10a77a,_0x3327db,_0x56a566){const _0x526ca1=_0x51cb(0x38)[_0x51cb(0x39)]('|');let _0xed8e10=0x0;while(!![]){switch(_0x526ca1[_0xed8e10++]){case'0':await this['triggerReAuthForTokenType'](_0x3327db,_0x10a77a);continue;case'1':console[_0x51cb(0x31)](_0x51cb(0x2e)+_0x1962c6+'\x20received\x20401\x20for\x20'+_0x3327db+'\x20token\x20on\x20route:\x20'+_0x10a77a);continue;case'2':this[_0x51cb(0x3a)](_0x3327db,_0x1962c6);continue;case'3':console[_0x51cb(0x13)](_0x51cb(0x3b)+_0x3327db+_0x51cb(0x3c));continue;case'4':return{'success':![],'error':_0x3327db+'\x20authentication\x20expired\x20for\x20'+_0x10a77a+_0x51cb(0x3d),'status':0x191,'tokenType':_0x3327db};case'5':await(0x0,_jwtStorageService[_0x51cb(0x3e)])(_0x3327db);continue;case'6':console[_0x51cb(0x13)](_0x51cb(0x3f)+_0x3327db+_0x51cb(0x40));continue;}break;}}async['triggerReAuthForTokenType'](_0x286ad0,_0x167fb6){const _0x165a03={'yUqxl':function(_0x7ad3e1,_0x3cbc9b){return _0x7ad3e1!==_0x3cbc9b;},'jmRPs':function(_0x51332e,_0x15ecb9){return _0x51332e>_0x15ecb9;},'oaCau':_0x51cb(0x10),'yqiij':'⚠️\x20[API\x20Client]\x20No\x20Enoch\x20re-auth\x20trigger\x20configured','GYCWG':function(_0x2c1ea6,_0x2bf43e){return _0x2c1ea6===_0x2bf43e;},'zbQRR':_0x51cb(0x41),'NPuUX':_0x51cb(0x42),'iEujO':_0x51cb(0x43),'QtIZe':'📧\x20[API\x20Client]\x20Triggering\x20Enoch\x20email\x20re-verification','jmklo':'vJjtn','hTyST':_0x51cb(0x44),'rbhyu':'XSZNE','apnRH':_0x51cb(0x45),'dGtij':_0x51cb(0x46),'XmlfD':'🔄\x20[API\x20Client]\x20Triggering\x20auth\x20token\x20refresh','mnVAo':_0x51cb(0x47)};console[_0x51cb(0x13)](_0x51cb(0x48)+_0x286ad0+_0x51cb(0x49)+_0x167fb6+')');try{if(_0x165a03[_0x51cb(0x4a)](_0x165a03['zbQRR'],_0x165a03['NPuUX'])){let _0x2abcb6=0x0;for(const [_0x4f75ed,_0x38b8e6]of _0x2bb1bf['entries']()){_0x165a03['yUqxl'](_0x4f75ed,_0x15789a)&&(_0x38b8e6[_0x51cb(0x2d)](),_0x1e42c3[_0x51cb(0x28)](_0x4f75ed),_0x2abcb6++);}_0x165a03[_0x51cb(0x4b)](_0x2abcb6,0x0)&&_0x5e8780[_0x51cb(0x13)](_0x51cb(0x4c)+_0x2abcb6+_0x51cb(0x4d)+_0x46577b+_0x51cb(0x4e));}else switch(_0x286ad0){case _jwtStorageService[_0x51cb(0x4f)]['ENOCH']:if(this['authTriggers']['triggerEnochReAuth']){if(_0x165a03['yUqxl'](_0x51cb(0x43),_0x165a03[_0x51cb(0x50)]))return{'success':![],'error':_0x30e448['message']||_0x51cb(0x51)+_0x1d0fce[_0x51cb(0x24)],'status':_0x5c126d[_0x51cb(0x24)],'tokenType':_0x1d2007};else console[_0x51cb(0x13)](_0x165a03[_0x51cb(0x52)]),await this[_0x51cb(0xc)]['triggerEnochReAuth']();}else _0x165a03[_0x51cb(0x53)](_0x51cb(0x54),_0x165a03['jmklo'])?console[_0x51cb(0x55)](_0x165a03[_0x51cb(0x56)]):_0x273e47['log']('🚫\x20[API\x20Client]\x20Cancelled\x20'+_0x4ab695+_0x51cb(0x4d)+_0xd22eda+_0x51cb(0x4e));break;case _jwtStorageService[_0x51cb(0x4f)][_0x51cb(0x57)]:if(this[_0x51cb(0xc)]['triggerOnairosReAuth']){if(_0x165a03[_0x51cb(0x58)]===_0x165a03[_0x51cb(0x59)])return _0xce3923[_0x51cb(0x13)]('🚫\x20[API\x20Client]\x20Request\x20'+_0x2bbeb3+_0x51cb(0x2f)),{'success':![],'error':_0x165a03[_0x51cb(0x5a)],'status':0x0};else console[_0x51cb(0x13)](_0x165a03[_0x51cb(0x5b)]),await this[_0x51cb(0xc)][_0x51cb(0x5c)]();}else console['warn'](_0x165a03[_0x51cb(0x5d)]);break;case _jwtStorageService[_0x51cb(0x4f)]['AUTH']:this[_0x51cb(0xc)][_0x51cb(0x5e)]?(console[_0x51cb(0x13)](_0x165a03[_0x51cb(0x5f)]),await this[_0x51cb(0xc)][_0x51cb(0x5e)]()):console[_0x51cb(0x55)](_0x51cb(0x60));break;}}catch(_0x605015){_0x165a03['GYCWG']('nRpWg',_0x165a03['mnVAo'])?_0x20c756['warn'](_0x165a03[_0x51cb(0x56)]):console[_0x51cb(0x31)](_0x51cb(0x61)+_0x286ad0+':',_0x605015);}}[_0x51cb(0x3a)](_0x55eaba,_0x3d18ec){const _0x15ac41={'LiawH':_0x51cb(0x46),'tikot':function(_0x28fb2d,_0x2f81fe){return _0x28fb2d!==_0x2f81fe;},'yHuSC':function(_0x50ddd1,_0x23163f){return _0x50ddd1===_0x23163f;},'Woerh':_0x51cb(0x62),'sxhBs':_0x51cb(0x63),'ZXGfq':_0x51cb(0x64)};let _0x21ae63=0x0;for(const [_0x45b61c,_0x463923]of activeRequests['entries']()){_0x15ac41[_0x51cb(0x65)](_0x45b61c,_0x3d18ec)&&(_0x15ac41[_0x51cb(0x66)](_0x15ac41['Woerh'],_0x15ac41[_0x51cb(0x67)])?(_0x463923[_0x51cb(0x2d)](),activeRequests[_0x51cb(0x28)](_0x45b61c),_0x21ae63++):_0x40f3bc[_0x51cb(0x55)](_0x15ac41[_0x51cb(0x68)]));}if(_0x21ae63>0x0){if(_0x15ac41[_0x51cb(0x66)](_0x15ac41[_0x51cb(0x69)],_0x15ac41[_0x51cb(0x6a)]))return this[_0x51cb(0xd)](_0x42e7b8,{..._0x37d037,'method':'DELETE'});else console['log'](_0x51cb(0x4c)+_0x21ae63+_0x51cb(0x4d)+_0x55eaba+_0x51cb(0x4e));}}async[_0x51cb(0x6b)](_0xb990d3,_0x1d8444){console[_0x51cb(0x13)](_0x51cb(0x6c)+_0xb990d3+_0x51cb(0x17)),this[_0x51cb(0x3a)](_0xb990d3);const _0x1b5e60=await(0x0,_jwtStorageService[_0x51cb(0x6d)])(_0xb990d3,_0x1d8444);return _0x1b5e60&&console['log'](_0x51cb(0x6e)+_0xb990d3+_0x51cb(0x6f)),_0x1b5e60;}async[_0x51cb(0x70)](){const _0x450185={'RpocC':'🔍\x20[API\x20Client]\x20Debug:\x20Current\x20token\x20status','ymEfk':function(_0x1fc25e,_0x510bf6){return _0x1fc25e===_0x510bf6;},'AlhKN':_0x51cb(0x71),'NXzFw':_0x51cb(0x72),'iSqhU':'Ruzmc'};console[_0x51cb(0x13)](_0x450185[_0x51cb(0x73)]);const _0x4b8583=await(0x0,_jwtStorageService[_0x51cb(0x74)])();for(const [_0x3c1458,_0x4ff4a2]of Object[_0x51cb(0x75)](_0x4b8583)){_0x4ff4a2?_0x450185[_0x51cb(0x76)](_0x450185[_0x51cb(0x77)],_0x450185[_0x51cb(0x78)])?_0xfda4c9!==_0x34a34c&&(_0x294571['abort'](),_0x20ecef['delete'](_0xcc68d2),_0x4aeccb++):console[_0x51cb(0x13)](_0x51cb(0x79)+_0x3c1458+':\x20'+_0x4ff4a2[_0x51cb(0x7a)](0x0,0x14)+_0x51cb(0x7b)+_0x4ff4a2[_0x51cb(0x7c)]+')'):_0x450185['iSqhU']!==_0x51cb(0x7d)?console[_0x51cb(0x13)](_0x51cb(0x7e)+_0x3c1458+':\x20null'):_0x3f0636?_0x5ea8f6[_0x51cb(0x13)](_0x51cb(0x79)+_0x42a6b1+':\x20'+_0x4ed5d4['substring'](0x0,0x14)+_0x51cb(0x7b)+_0x1fac18[_0x51cb(0x7c)]+')'):_0x269a2e[_0x51cb(0x13)](_0x51cb(0x7e)+_0x2dd8b4+_0x51cb(0x7f));}return _0x4b8583;}[_0x51cb(0x80)](_0x386600){const _0x390b1a={'KdJYH':_0x51cb(0x81)};this[_0x51cb(0xc)]={...this[_0x51cb(0xc)],..._0x386600},console[_0x51cb(0x13)](_0x390b1a['KdJYH']);}async[_0x51cb(0x82)](_0x2f1527,_0x39b5e7={}){return this[_0x51cb(0xd)](_0x2f1527,{..._0x39b5e7,'method':'GET'});}async['post'](_0x270747,_0x2c2bce,_0x3fb597={}){return this['request'](_0x270747,{..._0x3fb597,'method':'POST','body':_0x2c2bce});}async['put'](_0x15ac91,_0x472591,_0x583406={}){return this['request'](_0x15ac91,{..._0x583406,'method':'PUT','body':_0x472591});}async['delete'](_0x4104ef,_0x133348={}){return this[_0x51cb(0xd)](_0x4104ef,{..._0x133348,'method':'DELETE'});}}exports['ApiClient']=ApiClient;const apiClient=exports['apiClient']=new ApiClient(),authenticatedRequest=exports['authenticatedRequest']=apiClient[_0x51cb(0xd)][_0x51cb(0x83)](apiClient),apiGet=exports[_0x51cb(0x6)]=apiClient['get'][_0x51cb(0x83)](apiClient),apiPost=exports[_0x51cb(0x5)]=apiClient[_0x51cb(0x84)][_0x51cb(0x83)](apiClient),apiPut=exports[_0x51cb(0x4)]=apiClient[_0x51cb(0x85)]['bind'](apiClient),apiDelete=exports[_0x51cb(0x7)]=apiClient[_0x51cb(0x28)][_0x51cb(0x83)](apiClient);var _default=exports[_0x51cb(0x2)]=apiClient;
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = exports.authenticatedRequest = exports.apiPut = exports.apiPost = exports.apiGet = exports.apiDelete = exports.apiClient = exports.ApiClient = void 0;
+var _jwtStorageService = require("./jwtStorageService");
+var _api = require("../config/api");
+/**
+ * Centralized API Client with Route-Based JWT Token Management
+ * CORRECTED APPROACH: Uses different JWT tokens for different route families
+ * 
+ * TOKEN ROUTING:
+ * - Enoch JWT: /enoch/*, /api/auth/*, /mobile-training/enoch
+ * - Onairos JWT: /youtube/*, /gmail/*, social connections
+ * - Auth Token: Context-specific auth flows
+ */
+
+/**
+ * Global request counter for tracking in-flight requests
+ */
+let currentRequestId = 0;
+const activeRequests = new Map();
+
+/**
+ * Route-specific authentication triggers
+ */
+
+/**
+ * Create API client with route-based token management
+ */
+class ApiClient {
+  constructor(baseUrl = _api.API_CONFIG.BASE_URL, authTriggers = {}) {
+    this.baseUrl = baseUrl;
+    this.authTriggers = authTriggers;
+  }
+
+  /**
+   * Make authenticated API request with route-based token selection
+   * CRITICAL: Uses the correct token type based on route
+   */
+  async request(endpoint, options = {}) {
+    const requestId = ++currentRequestId;
+    const abortController = new AbortController();
+    activeRequests.set(requestId, abortController);
+    try {
+      console.log(`🔗 [API Client] Starting request ${requestId} to: ${endpoint}`);
+
+      // CRITICAL FIX: Determine which token type to use based on route
+      const tokenType = (0, _jwtStorageService.getTokenTypeForRoute)(endpoint);
+      console.log(`🎯 [API Client] Route ${endpoint} requires ${tokenType} token`);
+
+      // Get route-specific headers
+      const headers = await this.getRequestHeaders(endpoint, options.requiresAuth !== false);
+      const fetchOptions = {
+        method: options.method || 'GET',
+        headers: {
+          'Content-Type': 'application/json',
+          'User-Agent': 'OnairosSDK/1.0.0',
+          ...headers,
+          ...options.headers
+        },
+        body: options.body ? JSON.stringify(options.body) : undefined,
+        signal: abortController.signal
+      };
+      console.log(`🔐 [API Client] Request ${requestId} using ${tokenType} token`);
+      const response = await fetch(`${this.baseUrl}${endpoint}`, fetchOptions);
+      console.log(`📡 [API Client] Response ${requestId} status:`, response.status);
+
+      // CRITICAL FIX: Route-specific 401 handler
+      if (response.status === 401) {
+        return await this.handle401Error(requestId, endpoint, tokenType, options);
+      }
+      const result = await response.json();
+      activeRequests.delete(requestId);
+      if (!response.ok) {
+        return {
+          success: false,
+          error: result.message || `Request failed with status ${response.status}`,
+          status: response.status,
+          tokenType
+        };
+      }
+      return {
+        success: true,
+        data: result,
+        status: response.status,
+        tokenType
+      };
+    } catch (error) {
+      activeRequests.delete(requestId);
+      if (error instanceof Error && error.name === 'AbortError') {
+        console.log(`🚫 [API Client] Request ${requestId} was cancelled`);
+        return {
+          success: false,
+          error: 'Request cancelled',
+          status: 0
+        };
+      }
+      console.error(`❌ [API Client] Request ${requestId} failed:`, error);
+      return {
+        success: false,
+        error: error instanceof Error ? error.message : 'Unknown error',
+        status: 0
+      };
+    }
+  }
+
+  /**
+   * Get request headers with route-appropriate token
+   * CRITICAL: Selects correct token based on route
+   */
+  async getRequestHeaders(endpoint, requiresAuth) {
+    if (!requiresAuth) {
+      return {};
+    }
+
+    // CRITICAL FIX: Get token specifically for this route
+    const token = await (0, _jwtStorageService.getJWTForRoute)(endpoint);
+    if (!token) {
+      const tokenType = (0, _jwtStorageService.getTokenTypeForRoute)(endpoint);
+      throw new Error(`No ${tokenType} token available for route ${endpoint}. Please authenticate first.`);
+    }
+    return {
+      'Authorization': token
+    };
+  }
+
+  /**
+   * Handle 401 errors with route-specific re-authentication
+   * CRITICAL FIX: Different auth flows for different token types
+   */
+  async handle401Error(requestId, endpoint, tokenType, options) {
+    console.error(`🚫 [API Client] Request ${requestId} received 401 for ${tokenType} token on route: ${endpoint}`);
+
+    // CRITICAL FIX: Clear only the specific token type that failed
+    console.log(`🔄 [API Client] Clearing ${tokenType} token due to 401 error`);
+    await (0, _jwtStorageService.clearJWT)(tokenType);
+
+    // Cancel requests using the same token type
+    this.cancelRequestsForTokenType(tokenType, requestId);
+
+    // CRITICAL FIX: Route-specific re-authentication
+    await this.triggerReAuthForTokenType(tokenType, endpoint);
+    console.log(`🔑 [API Client] ${tokenType} token cleared, user needs to re-authenticate`);
+    return {
+      success: false,
+      error: `${tokenType} authentication expired for ${endpoint}. Please re-authenticate.`,
+      status: 401,
+      tokenType
+    };
+  }
+
+  /**
+   * Trigger appropriate re-authentication based on token type
+   */
+  async triggerReAuthForTokenType(tokenType, endpoint) {
+    console.log(`🔄 [API Client] Triggering re-auth for ${tokenType} token (endpoint: ${endpoint})`);
+    try {
+      switch (tokenType) {
+        case _jwtStorageService.TokenType.ENOCH:
+          if (this.authTriggers.triggerEnochReAuth) {
+            console.log('📧 [API Client] Triggering Enoch email re-verification');
+            await this.authTriggers.triggerEnochReAuth();
+          } else {
+            console.warn('⚠️ [API Client] No Enoch re-auth trigger configured');
+          }
+          break;
+        case _jwtStorageService.TokenType.ONAIROS:
+          if (this.authTriggers.triggerOnairosReAuth) {
+            console.log('🔑 [API Client] Triggering Onairos re-authentication');
+            await this.authTriggers.triggerOnairosReAuth();
+          } else {
+            console.warn('⚠️ [API Client] No Onairos re-auth trigger configured');
+          }
+          break;
+        case _jwtStorageService.TokenType.AUTH:
+          if (this.authTriggers.triggerAuthTokenRefresh) {
+            console.log('🔄 [API Client] Triggering auth token refresh');
+            await this.authTriggers.triggerAuthTokenRefresh();
+          } else {
+            console.warn('⚠️ [API Client] No auth token refresh trigger configured');
+          }
+          break;
+      }
+    } catch (error) {
+      console.error(`❌ [API Client] Failed to trigger re-auth for ${tokenType}:`, error);
+    }
+  }
+
+  /**
+   * Cancel requests using a specific token type
+   */
+  cancelRequestsForTokenType(tokenType, excludeRequestId) {
+    let cancelledCount = 0;
+
+    // Note: In a full implementation, we'd track which requests use which tokens
+    // For now, we cancel all other requests as a safety measure
+    for (const [requestId, controller] of activeRequests.entries()) {
+      if (requestId !== excludeRequestId) {
+        controller.abort();
+        activeRequests.delete(requestId);
+        cancelledCount++;
+      }
+    }
+    if (cancelledCount > 0) {
+      console.log(`🚫 [API Client] Cancelled ${cancelledCount} requests due to ${tokenType} token failure`);
+    }
+  }
+
+  /**
+   * Replace token for specific type and cancel related requests
+   */
+  async replaceTokenForType(tokenType, newToken) {
+    console.log(`🔄 [API Client] Replacing ${tokenType} token`);
+
+    // Cancel all in-flight requests using this token type
+    this.cancelRequestsForTokenType(tokenType);
+
+    // Replace token using storage service
+    const replaced = await (0, _jwtStorageService.replaceJWTAfterVerification)(tokenType, newToken);
+    if (replaced) {
+      console.log(`✅ [API Client] ${tokenType} token replaced and related requests cancelled`);
+    }
+    return replaced;
+  }
+
+  /**
+   * Debug: Get all current tokens
+   */
+  async debugTokens() {
+    console.log('🔍 [API Client] Debug: Current token status');
+    const tokens = await (0, _jwtStorageService.getAllTokens)();
+    for (const [tokenType, token] of Object.entries(tokens)) {
+      if (token) {
+        console.log(`🔐 ${tokenType}: ${token.substring(0, 20)}... (length: ${token.length})`);
+      } else {
+        console.log(`📭 ${tokenType}: null`);
+      }
+    }
+    return tokens;
+  }
+
+  /**
+   * Set authentication triggers
+   */
+  setAuthTriggers(triggers) {
+    this.authTriggers = {
+      ...this.authTriggers,
+      ...triggers
+    };
+    console.log('🔧 [API Client] Authentication triggers updated');
+  }
+
+  /**
+   * Convenience methods for common HTTP verbs
+   */
+  async get(endpoint, options = {}) {
+    return this.request(endpoint, {
+      ...options,
+      method: 'GET'
+    });
+  }
+  async post(endpoint, body, options = {}) {
+    return this.request(endpoint, {
+      ...options,
+      method: 'POST',
+      body
+    });
+  }
+  async put(endpoint, body, options = {}) {
+    return this.request(endpoint, {
+      ...options,
+      method: 'PUT',
+      body
+    });
+  }
+  async delete(endpoint, options = {}) {
+    return this.request(endpoint, {
+      ...options,
+      method: 'DELETE'
+    });
+  }
+}
+
+// SINGLE INSTANCE - Global API client  
+exports.ApiClient = ApiClient;
+const apiClient = exports.apiClient = new ApiClient();
+// Export convenience functions
+const authenticatedRequest = exports.authenticatedRequest = apiClient.request.bind(apiClient);
+const apiGet = exports.apiGet = apiClient.get.bind(apiClient);
+const apiPost = exports.apiPost = apiClient.post.bind(apiClient);
+const apiPut = exports.apiPut = apiClient.put.bind(apiClient);
+const apiDelete = exports.apiDelete = apiClient.delete.bind(apiClient);
+
+// Export types for external use
+var _default = exports.default = apiClient;
+//# sourceMappingURL=apiClient.js.map

package/lib/commonjs/services/biometricPinService.js

@@ -1,8 +1,180 @@
-'use strict';
-// Onairos SDK - Asset Registry (auto-generated)
-var __ONAIROS_REQ_REGISTRY__ = [
-    require("react-native-keychain"),
-    require("react-native")
-];
-function __ONAIROS_REQ_FUNC__(i) { return __ONAIROS_REQ_REGISTRY__[i]; }
-Object[_0x4078(0x0)](exports,_0x4078(0x1),{'value':!![]}),exports['storePinWithBiometric']=exports['retrievePinWithBiometric']=exports[_0x4078(0x2)]=exports['isPinStored']=exports[_0x4078(0x3)]=exports['biometricPinService']=void 0x0;var Keychain=_interopRequireWildcard(__ONAIROS_REQ_FUNC__(0x0)),_reactNative=__ONAIROS_REQ_FUNC__(0x1);function _0x29ce(){const _0x7f550=['defineProperty','__esModule','removePinFromStorage','isBiometricAvailable','📱\x20Biometric\x20not\x20available','GdiiC','PSEBw','default','function','khcZa','EYnGj','LqQep','cAmJC','SJrSS','LCeCc','has','get','set','gwykb','hasOwnProperty','call','getOwnPropertyDescriptor','GZwuh','pEJUs','SRtJS','log','XTymQ','OnairosEventsPIN','WDVXB','JnvhM','Mdfta','SDMfx','BIOMETRY_TYPE','FACE_ID','TOUCH_ID','FACE','IRIS','ADlLP','VHKlU','error','ZbJRu','❌\x20Face\x20ID/Touch\x20ID\x20not\x20available\x20on\x20this\x20device','🔒\x20Face\x20ID\x20locked\x20out\x20-\x20too\x20many\x20failed\x20attempts','object','DQKRU','🔐\x20Starting\x20Face\x20ID\x20authentication\x20for\x20PIN\x20storage...','📱\x20Face\x20ID\x20available,\x20showing\x20authentication\x20prompt...','ios','Authenticate\x20with\x20Face\x20ID\x20to\x20secure\x20your\x20PIN','Cancel','android','Authenticate\x20with\x20biometric\x20to\x20secure\x20your\x20PIN','👤\x20Requesting\x20Face\x20ID\x20authentication...','❌\x20Error\x20details:','UserCancel','AuthenticationFailed','iQEJd','🚫\x20Face\x20ID\x20authentication\x20failed','FvzIL','kTnwA','zknBO','sBnoR','aAfBG','MOVZB','lZROv','BIOMETRY_CURRENT_SET','AUTHENTICATION_TYPE','BIOMETRICS','XmLBU','Platform','bHJrA','sBzqB','jASLS','dBbEd','setGenericPassword','✅\x20Face\x20ID\x20authentication\x20successful\x20-\x20PIN\x20stored\x20securely','DTkaE','myVqT','message','code','domain','userInfo','ywgzf','TrXwA','lgCgm','OtJfT','afFNR','gbdmP','includes','BiometryNotAvailable','kYWta','PACdP','CEQvz','aRmwY','📱\x20Face\x20ID/Touch\x20ID\x20not\x20available','eukjS','ajTtL','nvPgE','APTbz','CVlkO','htkMp','zjcEz','jcRiC','vwvtF','BvgZs','QRXnA','MXgjh','JaMYo','qqyEu','❌\x20Unknown\x20Face\x20ID\x20error:','storePinWithBiometric','❌\x20Error\x20removing\x20PIN\x20from\x20storage:','👤\x20User\x20cancelled\x20biometric\x20authentication','🔓\x20Retrieving\x20PIN\x20with\x20biometric\x20authentication...','✅\x20PIN\x20retrieved\x20successfully','qJLrx','rJLCD','TFoyW','kEHcn','SOABo','ZNmaF','wsqGT','qwdAx','⚠️\x20No\x20PIN\x20found\x20in\x20secure\x20storage','❌\x20Error\x20retrieving\x20PIN\x20with\x20biometric:','BfqTi','gvcdn','dTPhL','vKAus','JXPkW','gtfou','RUPDG','VkQqK','lJINq','TZzvi','yjqMj','thVfN','kGVnb','xhiaz','eNqZl','retrievePinWithBiometric','❌\x20Error\x20checking\x20PIN\x20storage:','isPinStored','🗑️\x20Removing\x20PIN\x20from\x20secure\x20storage...','resetGenericPassword','EpTQR','biometricPinService'];_0x29ce=function(){return _0x7f550;};return _0x29ce();}function _interopRequireWildcard(_0x28f8c7,_0x222b5b){const _0x5761fa={'gwykb':function(_0x3571a8,_0x49cfe2){return _0x3571a8===_0x49cfe2;},'joQkw':function(_0x562128,_0x520ff6){return _0x562128!=_0x520ff6;},'SJrSS':'object','GZwuh':function(_0x377cf2,_0x6fe37f,_0x145ece,_0x26f947){return _0x377cf2(_0x6fe37f,_0x145ece,_0x26f947);},'EYnGj':_0x4078(0x4),'sPTsd':function(_0x67e731,_0x477e40){return _0x67e731!==_0x477e40;},'LqQep':_0x4078(0x5),'cAmJC':_0x4078(0x6),'WSuWJ':function(_0x47447b,_0x4b3be8){return _0x47447b&&_0x4b3be8;},'pEJUs':function(_0xda0883,_0x58ad12){return _0xda0883!==_0x58ad12;},'SRtJS':_0x4078(0x7),'khcZa':_0x4078(0x8)};if(_0x5761fa[_0x4078(0x9)]==typeof WeakMap)var _0x557206=new WeakMap(),_0x5b6f2d=new WeakMap();return(_interopRequireWildcard=function(_0x18d8b3,_0x1d33a9){const _0xa79ccd={'XTymQ':_0x5761fa[_0x4078(0xa)]};if(_0x5761fa['sPTsd'](_0x5761fa[_0x4078(0xb)],_0x5761fa[_0x4078(0xc)])){if(_0x5761fa['WSuWJ'](!_0x1d33a9,_0x18d8b3)&&_0x18d8b3[_0x4078(0x1)])return _0x18d8b3;var _0x51648b,_0x46ef85,_0x52326e={'__proto__':null,'default':_0x18d8b3};if(null===_0x18d8b3||_0x5761fa['joQkw'](_0x5761fa[_0x4078(0xd)],typeof _0x18d8b3)&&'function'!=typeof _0x18d8b3)return _0x52326e;if(_0x51648b=_0x1d33a9?_0x5b6f2d:_0x557206){if(_0x4078(0xe)===_0x4078(0xe)){if(_0x51648b[_0x4078(0xf)](_0x18d8b3))return _0x51648b[_0x4078(0x10)](_0x18d8b3);_0x51648b[_0x4078(0x11)](_0x18d8b3,_0x52326e);}else{if(!_0x46387b&&_0x452ddd&&_0x59f687[_0x4078(0x1)])return _0x401c47;var _0x193d31,_0x1af30f,_0x4a9bef={'__proto__':null,'default':_0x30255b};if(_0x5761fa[_0x4078(0x12)](null,_0x1a599c)||_0x5761fa['joQkw'](_0x5761fa['SJrSS'],typeof _0x17ea0d)&&_0x4078(0x8)!=typeof _0x12a7bd)return _0x4a9bef;if(_0x193d31=_0x1c9be0?_0x590e63:_0x4c06e8){if(_0x193d31[_0x4078(0xf)](_0x180060))return _0x193d31['get'](_0x4329a8);_0x193d31['set'](_0x3f37bc,_0x4a9bef);}for(const _0x55deac in _0x494015)_0x4078(0x7)!==_0x55deac&&{}[_0x4078(0x13)][_0x4078(0x14)](_0xc1e66a,_0x55deac)&&((_0x1af30f=(_0x193d31=_0xbad19[_0x4078(0x0)])&&_0x489072[_0x4078(0x15)](_0x1618f4,_0x55deac))&&(_0x1af30f[_0x4078(0x10)]||_0x1af30f['set'])?_0x5761fa[_0x4078(0x16)](_0x193d31,_0x4a9bef,_0x55deac,_0x1af30f):_0x4a9bef[_0x55deac]=_0x3099b2[_0x55deac]);return _0x4a9bef;}}for(const _0x5cf503 in _0x18d8b3)_0x5761fa[_0x4078(0x17)](_0x5761fa[_0x4078(0x18)],_0x5cf503)&&{}[_0x4078(0x13)][_0x4078(0x14)](_0x18d8b3,_0x5cf503)&&((_0x46ef85=(_0x51648b=Object[_0x4078(0x0)])&&Object[_0x4078(0x15)](_0x18d8b3,_0x5cf503))&&(_0x46ef85[_0x4078(0x10)]||_0x46ef85[_0x4078(0x11)])?_0x5761fa[_0x4078(0x16)](_0x51648b,_0x52326e,_0x5cf503,_0x46ef85):_0x52326e[_0x5cf503]=_0x18d8b3[_0x5cf503]);return _0x52326e;}else return _0x1ee825[_0x4078(0x19)](_0xa79ccd[_0x4078(0x1a)]),null;})(_0x28f8c7,_0x222b5b);}const PIN_SERVICE_KEY=_0x4078(0x1b),PIN_USERNAME='user_pin',isBiometricAvailable=async()=>{const _0x2af520={'Mdfta':'📱\x20Biometric\x20support:','SDMfx':function(_0x445a00,_0x57b45c){return _0x445a00===_0x57b45c;},'VcTCV':function(_0x3dfc1e,_0x59c9d1){return _0x3dfc1e===_0x59c9d1;},'ADlLP':function(_0x1f2262,_0x528de5){return _0x1f2262!==_0x528de5;},'VHKlU':_0x4078(0x1c),'NVqcL':_0x4078(0x1d),'ZbJRu':'❌\x20Error\x20checking\x20biometric\x20availability:'};try{const _0x6b7f8a=await Keychain['getSupportedBiometryType']();return console[_0x4078(0x19)](_0x2af520[_0x4078(0x1e)],_0x6b7f8a),_0x2af520[_0x4078(0x1f)](_0x6b7f8a,Keychain[_0x4078(0x20)][_0x4078(0x21)])||_0x6b7f8a===Keychain['BIOMETRY_TYPE'][_0x4078(0x22)]||_0x2af520['VcTCV'](_0x6b7f8a,Keychain[_0x4078(0x20)]['FINGERPRINT'])||_0x2af520[_0x4078(0x1f)](_0x6b7f8a,Keychain[_0x4078(0x20)][_0x4078(0x23)])||_0x2af520[_0x4078(0x1f)](_0x6b7f8a,Keychain['BIOMETRY_TYPE'][_0x4078(0x24)]);}catch(_0x4bb930){return _0x2af520[_0x4078(0x25)](_0x2af520[_0x4078(0x26)],_0x2af520['NVqcL'])?(console[_0x4078(0x27)](_0x2af520[_0x4078(0x28)],_0x4bb930),![]):(_0x5a9e1b[_0x4078(0x27)](_0x4078(0x29)),![]);}};exports[_0x4078(0x3)]=isBiometricAvailable;const storePinWithBiometric=async _0x53593d=>{const _0x29a89a={'sBnoR':_0x4078(0x2a),'vwvtF':function(_0x56ca08,_0x1c871e){return _0x56ca08&&_0x1c871e;},'BvgZs':_0x4078(0x2b),'ElEiE':function(_0x5a01fa,_0x42cfc0){return _0x5a01fa!=_0x42cfc0;},'QRXnA':'function','MXgjh':function(_0x49dcfb,_0x3bd5b3){return _0x49dcfb!==_0x3bd5b3;},'JaMYo':'default','qqyEu':function(_0x5eaaf2,_0x50cbcd,_0x2fe792,_0x2ebc98){return _0x5eaaf2(_0x50cbcd,_0x2fe792,_0x2ebc98);},'jcRiC':function(_0x587197,_0x15e0ed){return _0x587197==_0x15e0ed;},'kTnwA':'xYdwo','zknBO':_0x4078(0x2c),'aAfBG':_0x4078(0x2d),'MOVZB':function(_0x3e2462){return _0x3e2462();},'VnWcj':_0x4078(0x29),'lZROv':_0x4078(0x2e),'XmLBU':function(_0x513396,_0x1dc18e){return _0x513396===_0x1dc18e;},'QBtys':_0x4078(0x2f),'oDSer':_0x4078(0x30),'bHJrA':_0x4078(0x31),'sBzqB':function(_0x4b2e9a,_0x1ac1ec){return _0x4b2e9a===_0x1ac1ec;},'jASLS':_0x4078(0x32),'FJKHb':_0x4078(0x33),'dBbEd':_0x4078(0x34),'DTkaE':'❌\x20Face\x20ID\x20authentication\x20failed:','myVqT':_0x4078(0x35),'ywgzf':function(_0x479bf6,_0x30917b){return _0x479bf6!==_0x30917b;},'TrXwA':function(_0x90281,_0x2691a4){return _0x90281!==_0x2691a4;},'lgCgm':_0x4078(0x36),'OtJfT':function(_0x5a8b3e,_0x49e1f7){return _0x5a8b3e===_0x49e1f7;},'afFNR':function(_0x5bf851,_0x1798bb){return _0x5bf851===_0x1798bb;},'gbdmP':function(_0x103390,_0x3d36e7){return _0x103390!==_0x3d36e7;},'WlJRF':'📱\x20Face\x20ID/Touch\x20ID\x20not\x20available','kYWta':function(_0x35f942,_0x30014b){return _0x35f942!==_0x30014b;},'ynBli':_0x4078(0x37),'PACdP':function(_0x566435,_0x1e4cd2){return _0x566435===_0x1e4cd2;},'CEQvz':_0x4078(0x38),'aRmwY':_0x4078(0x39),'eukjS':function(_0x3e15a4,_0x57d51b){return _0x3e15a4!==_0x57d51b;},'ajTtL':function(_0x4462a5,_0x4662f1){return _0x4462a5!==_0x4662f1;},'nvPgE':'BiometryLockout','APTbz':function(_0x16187f,_0x18a1ad){return _0x16187f===_0x18a1ad;},'CVlkO':function(_0x300972,_0x421bdf){return _0x300972===_0x421bdf;},'htkMp':function(_0x49df2f,_0x1b1222){return _0x49df2f===_0x1b1222;},'zjcEz':_0x4078(0x3a)};try{if(_0x29a89a[_0x4078(0x3b)]===_0x29a89a[_0x4078(0x3c)])return _0x585edb[_0x4078(0x19)](_0x29a89a[_0x4078(0x3d)]),![];else{console['log'](_0x29a89a[_0x4078(0x3e)]);const _0x413a8b=await _0x29a89a[_0x4078(0x3f)](isBiometricAvailable);if(!_0x413a8b)return console['error'](_0x29a89a['VnWcj']),![];console[_0x4078(0x19)](_0x29a89a[_0x4078(0x40)]);const _0x252858={'accessControl':Keychain['ACCESS_CONTROL'][_0x4078(0x41)],'authenticationType':Keychain[_0x4078(0x42)][_0x4078(0x43)],'touchID':!![],'showModal':!![],'kLocalizedFallbackTitle':'',..._0x29a89a[_0x4078(0x44)](_reactNative[_0x4078(0x45)]['OS'],_0x29a89a['QBtys'])&&{'localizedPrompt':_0x29a89a['oDSer'],'localizedCancel':_0x29a89a[_0x4078(0x46)]},..._0x29a89a[_0x4078(0x47)](_reactNative[_0x4078(0x45)]['OS'],_0x29a89a[_0x4078(0x48)])&&{'promptMessage':_0x29a89a['FJKHb'],'cancelButtonText':_0x29a89a[_0x4078(0x46)]}};console[_0x4078(0x19)](_0x29a89a[_0x4078(0x49)]);const _0xfaae6a=await Keychain[_0x4078(0x4a)](PIN_USERNAME,_0x53593d,{'service':PIN_SERVICE_KEY,..._0x252858});return console[_0x4078(0x19)](_0x4078(0x4b)),console[_0x4078(0x19)]('🔍\x20Keychain\x20storage\x20result:',_0xfaae6a),!![];}}catch(_0xcc96fa){var _0x11a42d,_0x566786,_0x1293bb,_0x4aff35;console[_0x4078(0x27)](_0x29a89a[_0x4078(0x4c)],_0xcc96fa),console['error'](_0x29a89a[_0x4078(0x4d)],{'message':_0xcc96fa[_0x4078(0x4e)],'code':_0xcc96fa[_0x4078(0x4f)],'domain':_0xcc96fa[_0x4078(0x50)],'userInfo':_0xcc96fa[_0x4078(0x51)]});if(_0x29a89a[_0x4078(0x52)](_0xcc96fa,null)&&_0x29a89a['TrXwA'](_0xcc96fa,void 0x0)&&_0x29a89a[_0x4078(0x53)](_0x11a42d=_0xcc96fa[_0x4078(0x4e)],null)&&_0x29a89a[_0x4078(0x53)](_0x11a42d,void 0x0)&&_0x11a42d['includes'](_0x29a89a[_0x4078(0x54)])||(_0x29a89a[_0x4078(0x55)](_0xcc96fa,null)||_0x29a89a[_0x4078(0x56)](_0xcc96fa,void 0x0)?void 0x0:_0xcc96fa[_0x4078(0x4f)])===-0x80)return console[_0x4078(0x19)]('👤\x20User\x20cancelled\x20Face\x20ID\x20authentication'),![];else{if(_0x29a89a[_0x4078(0x52)](_0xcc96fa,null)&&_0x29a89a[_0x4078(0x57)](_0xcc96fa,void 0x0)&&(_0x566786=_0xcc96fa[_0x4078(0x4e)])!==null&&_0x566786!==void 0x0&&_0x566786[_0x4078(0x58)](_0x4078(0x59))||(_0xcc96fa===null||_0xcc96fa===void 0x0?void 0x0:_0xcc96fa[_0x4078(0x4f)])===-0x6)return console[_0x4078(0x19)](_0x29a89a['WlJRF']),![];else{if(_0x29a89a[_0x4078(0x5a)](_0xcc96fa,null)&&_0xcc96fa!==void 0x0&&_0x29a89a[_0x4078(0x53)](_0x1293bb=_0xcc96fa[_0x4078(0x4e)],null)&&_0x29a89a[_0x4078(0x53)](_0x1293bb,void 0x0)&&_0x1293bb['includes'](_0x29a89a['ynBli'])||(_0xcc96fa===null||_0x29a89a[_0x4078(0x5b)](_0xcc96fa,void 0x0)?void 0x0:_0xcc96fa[_0x4078(0x4f)])===-0x1)return _0x29a89a[_0x4078(0x5c)]===_0x29a89a[_0x4078(0x5c)]?(console[_0x4078(0x19)](_0x29a89a[_0x4078(0x5d)]),![]):(_0x143701[_0x4078(0x19)](_0x4078(0x5e)),![]);else{if(_0x29a89a[_0x4078(0x5f)](_0xcc96fa,null)&&_0x29a89a[_0x4078(0x5f)](_0xcc96fa,void 0x0)&&(_0x4aff35=_0xcc96fa['message'])!==null&&_0x29a89a[_0x4078(0x60)](_0x4aff35,void 0x0)&&_0x4aff35[_0x4078(0x58)](_0x29a89a[_0x4078(0x61)])||_0x29a89a[_0x4078(0x62)](_0x29a89a[_0x4078(0x63)](_0xcc96fa,null)||_0xcc96fa===void 0x0?void 0x0:_0xcc96fa['code'],-0x8)){if(_0x29a89a[_0x4078(0x64)](_0x29a89a[_0x4078(0x65)],_0x29a89a[_0x4078(0x65)]))return console[_0x4078(0x19)](_0x29a89a['sBnoR']),![];else{if(_0x29a89a[_0x4078(0x66)](_0x4078(0x8),typeof _0x5064e6))var _0x284b6c=new _0x3b049d(),_0x5eb436=new _0xff11fb();return(_0x46ad19=function(_0x49488e,_0x322c58){if(_0x29a89a[_0x4078(0x67)](!_0x322c58,_0x49488e)&&_0x49488e['__esModule'])return _0x49488e;var _0x39fec2,_0x145378,_0x244b04={'__proto__':null,'default':_0x49488e};if(null===_0x49488e||_0x29a89a[_0x4078(0x68)]!=typeof _0x49488e&&_0x29a89a['ElEiE'](_0x29a89a[_0x4078(0x69)],typeof _0x49488e))return _0x244b04;if(_0x39fec2=_0x322c58?_0x5eb436:_0x284b6c){if(_0x39fec2['has'](_0x49488e))return _0x39fec2[_0x4078(0x10)](_0x49488e);_0x39fec2[_0x4078(0x11)](_0x49488e,_0x244b04);}for(const _0xa62145 in _0x49488e)_0x29a89a[_0x4078(0x6a)](_0x29a89a[_0x4078(0x6b)],_0xa62145)&&{}[_0x4078(0x13)][_0x4078(0x14)](_0x49488e,_0xa62145)&&((_0x145378=(_0x39fec2=_0x45164e[_0x4078(0x0)])&&_0x27bbf0[_0x4078(0x15)](_0x49488e,_0xa62145))&&(_0x145378[_0x4078(0x10)]||_0x145378['set'])?_0x29a89a[_0x4078(0x6c)](_0x39fec2,_0x244b04,_0xa62145,_0x145378):_0x244b04[_0xa62145]=_0x49488e[_0xa62145]);return _0x244b04;})(_0x2d964e,_0x345c4c);}}}}}return console[_0x4078(0x27)](_0x4078(0x6d),_0xcc96fa[_0x4078(0x4e)]),![];}};exports[_0x4078(0x6e)]=storePinWithBiometric;const retrievePinWithBiometric=async()=>{const _0x3cde52={'wsqGT':_0x4078(0x6f),'BfqTi':function(_0x287f3a,_0x15922d){return _0x287f3a!==_0x15922d;},'gvcdn':function(_0x1ce86a,_0x7868af){return _0x1ce86a!==_0x7868af;},'dTPhL':function(_0x2baccb,_0x3a9d02){return _0x2baccb!==_0x3a9d02;},'vKAus':_0x4078(0x36),'Puqyg':function(_0x3ee20a,_0x22ba66){return _0x3ee20a!==_0x22ba66;},'JXPkW':function(_0x4d82cf,_0x617698){return _0x4d82cf!==_0x617698;},'gtfou':'BiometryNotAvailable','RUPDG':_0x4078(0x4),'thVfN':_0x4078(0x70),'eNqZl':_0x4078(0x39),'FmZTy':_0x4078(0x71),'SOABo':'SLddm','ZNmaF':_0x4078(0x72),'qwdAx':_0x4078(0x73),'VkQqK':_0x4078(0x74),'fjOdC':'❌\x20Error\x20retrieving\x20PIN\x20with\x20biometric:','FfGMg':function(_0x52e947,_0x509524){return _0x52e947!==_0x509524;},'lJINq':function(_0x4f3913,_0x201f59){return _0x4f3913!==_0x201f59;},'TZzvi':'tGkbe','yjqMj':'fNruV','kGVnb':function(_0x561c5c,_0x2c54d3){return _0x561c5c!==_0x2c54d3;},'xhiaz':_0x4078(0x75),'qZXgt':_0x4078(0x76)};try{console[_0x4078(0x19)](_0x3cde52['FmZTy']);const _0x19ffdb=await Keychain['getGenericPassword']({'service':PIN_SERVICE_KEY});if(_0x19ffdb&&_0x19ffdb['password'])return _0x3cde52['JXPkW'](_0x3cde52[_0x4078(0x77)],'GvlhC')?(console['log'](_0x3cde52[_0x4078(0x78)]),_0x19ffdb['password']):(_0x3fc94e[_0x4078(0x27)](_0x3cde52[_0x4078(0x79)],_0x1e5c58),![]);else{if(_0x3cde52[_0x4078(0x7a)]===_0x3cde52[_0x4078(0x7a)])return console['log'](_0x4078(0x7b)),null;else{var _0x2f69bb,_0x4fb0c6;_0x51125e[_0x4078(0x27)](_0x4078(0x7c),_0x21d7c7);if(_0x3cde52[_0x4078(0x7d)](_0x500119,null)&&_0x3cde52[_0x4078(0x7e)](_0x4210a4,void 0x0)&&_0x3cde52[_0x4078(0x7f)](_0x2f69bb=_0x41879d['message'],null)&&_0x3cde52[_0x4078(0x7e)](_0x2f69bb,void 0x0)&&_0x2f69bb['includes'](_0x3cde52[_0x4078(0x80)]))return _0x4b9e92['log'](_0x4078(0x70)),null;else{if(_0x3cde52[_0x4078(0x7f)](_0x80bb15,null)&&_0x3cde52['Puqyg'](_0x17c5f3,void 0x0)&&_0x3cde52[_0x4078(0x7f)](_0x4fb0c6=_0x15b8f9['message'],null)&&_0x3cde52[_0x4078(0x81)](_0x4fb0c6,void 0x0)&&_0x4fb0c6[_0x4078(0x58)](_0x3cde52[_0x4078(0x82)]))return _0x47f7d2['log'](_0x3cde52[_0x4078(0x83)]),null;}return null;}}}catch(_0x3d044e){if(_0x3cde52[_0x4078(0x84)]!=='CFWya'){var _0xc14161,_0x36375e;console[_0x4078(0x27)](_0x3cde52['fjOdC'],_0x3d044e);if(_0x3d044e!==null&&_0x3cde52[_0x4078(0x7d)](_0x3d044e,void 0x0)&&_0x3cde52['FfGMg'](_0xc14161=_0x3d044e['message'],null)&&_0x3cde52[_0x4078(0x85)](_0xc14161,void 0x0)&&_0xc14161[_0x4078(0x58)](_0x3cde52[_0x4078(0x80)])){if(_0x3cde52['lJINq'](_0x3cde52[_0x4078(0x86)],_0x3cde52[_0x4078(0x87)]))return console[_0x4078(0x19)](_0x3cde52[_0x4078(0x88)]),null;else{if(_0x13b019[_0x4078(0xf)](_0x51abb2))return _0x51c637['get'](_0x1497aa);_0x5c9994[_0x4078(0x11)](_0x56cd5c,_0x5dd160);}}else{if(_0x3cde52[_0x4078(0x81)](_0x3d044e,null)&&_0x3cde52['lJINq'](_0x3d044e,void 0x0)&&_0x3cde52[_0x4078(0x81)](_0x36375e=_0x3d044e[_0x4078(0x4e)],null)&&_0x3cde52[_0x4078(0x89)](_0x36375e,void 0x0)&&_0x36375e[_0x4078(0x58)](_0x3cde52[_0x4078(0x82)]))return _0x3cde52[_0x4078(0x7d)](_0x3cde52[_0x4078(0x8a)],_0x3cde52['qZXgt'])?(console[_0x4078(0x19)](_0x3cde52['RUPDG']),null):(_0x57bce3['log'](_0x3cde52['thVfN']),null);}return null;}else return _0x2de2eb[_0x4078(0x19)](_0x3cde52[_0x4078(0x8b)]),![];}};exports[_0x4078(0x8c)]=retrievePinWithBiometric;const isPinStored=async()=>{const _0x41ad74={'ZvMkj':_0x4078(0x8d)};try{const _0x507c4a=await Keychain['getGenericPassword']({'service':PIN_SERVICE_KEY});return!!(_0x507c4a&&_0x507c4a['password']);}catch(_0x510364){return console[_0x4078(0x27)](_0x41ad74['ZvMkj'],_0x510364),![];}};exports[_0x4078(0x8e)]=isPinStored;function _0x4078(_0x29ce19,_0x4078c1){_0x29ce19=_0x29ce19-0x0;const _0x15e747=_0x29ce();let _0x431a50=_0x15e747[_0x29ce19];return _0x431a50;}const removePinFromStorage=async()=>{const _0x42b0f2={'lwujr':'✅\x20PIN\x20removed\x20successfully','EpTQR':_0x4078(0x6f)};try{return console[_0x4078(0x19)](_0x4078(0x8f)),await Keychain[_0x4078(0x90)]({'service':PIN_SERVICE_KEY}),console[_0x4078(0x19)](_0x42b0f2['lwujr']),!![];}catch(_0x2d480b){return console['error'](_0x42b0f2[_0x4078(0x91)],_0x2d480b),![];}};exports['removePinFromStorage']=removePinFromStorage;const biometricPinService=exports[_0x4078(0x92)]={'storePinWithBiometric':storePinWithBiometric,'retrievePinWithBiometric':retrievePinWithBiometric,'isPinStored':isPinStored,'removePinFromStorage':removePinFromStorage,'isBiometricAvailable':isBiometricAvailable};
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.storePinWithBiometric = exports.retrievePinWithBiometric = exports.removePinFromStorage = exports.isPinStored = exports.isBiometricAvailable = exports.biometricPinService = void 0;
+var Keychain = _interopRequireWildcard(require("react-native-keychain"));
+var _reactNative = require("react-native");
+function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
+// Service key for PIN storage
+const PIN_SERVICE_KEY = 'OnairosEventsPIN';
+const PIN_USERNAME = 'user_pin';
+/**
+ * Check if biometric authentication is available on the device
+ */
+const isBiometricAvailable = async () => {
+  try {
+    const biometryType = await Keychain.getSupportedBiometryType();
+    console.log('📱 Biometric support:', biometryType);
+
+    // Check for Face ID on iOS or any biometric on Android
+    return biometryType === Keychain.BIOMETRY_TYPE.FACE_ID || biometryType === Keychain.BIOMETRY_TYPE.TOUCH_ID || biometryType === Keychain.BIOMETRY_TYPE.FINGERPRINT || biometryType === Keychain.BIOMETRY_TYPE.FACE || biometryType === Keychain.BIOMETRY_TYPE.IRIS;
+  } catch (error) {
+    console.error('❌ Error checking biometric availability:', error);
+    return false;
+  }
+};
+
+/**
+ * Store PIN with biometric authentication
+ */
+exports.isBiometricAvailable = isBiometricAvailable;
+const storePinWithBiometric = async pin => {
+  try {
+    console.log('🔐 Starting Face ID authentication for PIN storage...');
+
+    // Check if biometric is available - REQUIRED for this implementation
+    const biometricAvailable = await isBiometricAvailable();
+    if (!biometricAvailable) {
+      console.error('❌ Face ID/Touch ID not available on this device');
+      return false;
+    }
+    console.log('📱 Face ID available, showing authentication prompt...');
+
+    // Configure keychain options for MANDATORY biometric authentication
+    const keychainOptions = {
+      accessControl: Keychain.ACCESS_CONTROL.BIOMETRY_CURRENT_SET,
+      authenticationType: Keychain.AUTHENTICATION_TYPE.BIOMETRICS,
+      touchID: true,
+      showModal: true,
+      kLocalizedFallbackTitle: '',
+      // Disable fallback to prevent passcode option
+      // Add explicit prompts for better UX
+      ...(_reactNative.Platform.OS === 'ios' && {
+        localizedPrompt: 'Authenticate with Face ID to secure your PIN',
+        localizedCancel: 'Cancel'
+      }),
+      ...(_reactNative.Platform.OS === 'android' && {
+        promptMessage: 'Authenticate with biometric to secure your PIN',
+        cancelButtonText: 'Cancel'
+      })
+    };
+
+    // Store the PIN - this will trigger the Face ID prompt
+    console.log('👤 Requesting Face ID authentication...');
+    const result = await Keychain.setGenericPassword(PIN_USERNAME, pin, {
+      service: PIN_SERVICE_KEY,
+      ...keychainOptions
+    });
+    console.log('✅ Face ID authentication successful - PIN stored securely');
+    console.log('🔍 Keychain storage result:', result);
+    return true;
+  } catch (error) {
+    var _error$message, _error$message2, _error$message3, _error$message4;
+    console.error('❌ Face ID authentication failed:', error);
+    console.error('❌ Error details:', {
+      message: error.message,
+      code: error.code,
+      domain: error.domain,
+      userInfo: error.userInfo
+    });
+
+    // Handle specific error cases
+    if (error !== null && error !== void 0 && (_error$message = error.message) !== null && _error$message !== void 0 && _error$message.includes('UserCancel') || (error === null || error === void 0 ? void 0 : error.code) === -128) {
+      console.log('👤 User cancelled Face ID authentication');
+      return false;
+    } else if (error !== null && error !== void 0 && (_error$message2 = error.message) !== null && _error$message2 !== void 0 && _error$message2.includes('BiometryNotAvailable') || (error === null || error === void 0 ? void 0 : error.code) === -6) {
+      console.log('📱 Face ID/Touch ID not available');
+      return false;
+    } else if (error !== null && error !== void 0 && (_error$message3 = error.message) !== null && _error$message3 !== void 0 && _error$message3.includes('AuthenticationFailed') || (error === null || error === void 0 ? void 0 : error.code) === -1) {
+      console.log('🚫 Face ID authentication failed');
+      return false;
+    } else if (error !== null && error !== void 0 && (_error$message4 = error.message) !== null && _error$message4 !== void 0 && _error$message4.includes('BiometryLockout') || (error === null || error === void 0 ? void 0 : error.code) === -8) {
+      console.log('🔒 Face ID locked out - too many failed attempts');
+      return false;
+    }
+    console.error('❌ Unknown Face ID error:', error.message);
+    return false;
+  }
+};
+
+/**
+ * Retrieve PIN with biometric authentication
+ */
+exports.storePinWithBiometric = storePinWithBiometric;
+const retrievePinWithBiometric = async () => {
+  try {
+    console.log('🔓 Retrieving PIN with biometric authentication...');
+
+    // Retrieve the PIN (will prompt for biometric if configured)
+    const credentials = await Keychain.getGenericPassword({
+      service: PIN_SERVICE_KEY
+    });
+    if (credentials && credentials.password) {
+      console.log('✅ PIN retrieved successfully');
+      return credentials.password;
+    } else {
+      console.log('⚠️ No PIN found in secure storage');
+      return null;
+    }
+  } catch (error) {
+    var _error$message5, _error$message6;
+    console.error('❌ Error retrieving PIN with biometric:', error);
+
+    // Handle specific error cases
+    if (error !== null && error !== void 0 && (_error$message5 = error.message) !== null && _error$message5 !== void 0 && _error$message5.includes('UserCancel')) {
+      console.log('👤 User cancelled biometric authentication');
+      return null;
+    } else if (error !== null && error !== void 0 && (_error$message6 = error.message) !== null && _error$message6 !== void 0 && _error$message6.includes('BiometryNotAvailable')) {
+      console.log('📱 Biometric not available');
+      return null;
+    }
+    return null;
+  }
+};
+
+/**
+ * Check if PIN is stored in secure storage
+ */
+exports.retrievePinWithBiometric = retrievePinWithBiometric;
+const isPinStored = async () => {
+  try {
+    const credentials = await Keychain.getGenericPassword({
+      service: PIN_SERVICE_KEY
+    });
+    return !!(credentials && credentials.password);
+  } catch (error) {
+    console.error('❌ Error checking PIN storage:', error);
+    return false;
+  }
+};
+
+/**
+ * Remove PIN from secure storage
+ */
+exports.isPinStored = isPinStored;
+const removePinFromStorage = async () => {
+  try {
+    console.log('🗑️ Removing PIN from secure storage...');
+    await Keychain.resetGenericPassword({
+      service: PIN_SERVICE_KEY
+    });
+    console.log('✅ PIN removed successfully');
+    return true;
+  } catch (error) {
+    console.error('❌ Error removing PIN from storage:', error);
+    return false;
+  }
+};
+
+// Export the service object
+exports.removePinFromStorage = removePinFromStorage;
+const biometricPinService = exports.biometricPinService = {
+  storePinWithBiometric,
+  retrievePinWithBiometric,
+  isPinStored,
+  removePinFromStorage,
+  isBiometricAvailable
+};
+//# sourceMappingURL=biometricPinService.js.map