@qafka/react-native 2.0.0 → 2.1.0

package/dist/QafkaSDK.js

@@ -40,9 +40,13 @@ class QafkaSDK {
         if (this.status === 'ready') {
             const currentApiKey = this.config?.apiKey ?? null;
             const currentSubProjectId = this.subProjectId;
+            const currentProjectId = this.config?.projectId ?? null;
             const newApiKey = config.apiKey ?? null;
             const newSubProjectId = config.subProjectId ?? null;
-            if (currentApiKey === newApiKey && currentSubProjectId === newSubProjectId) {
+            const newProjectId = config.projectId ?? null;
+            if (currentApiKey === newApiKey &&
+                currentSubProjectId === newSubProjectId &&
+                currentProjectId === newProjectId) {
                 return;
             }
             await this.destroy();
@@ -78,6 +82,7 @@ class QafkaSDK {
             this.attestationManager = new AttestationManager_1.AttestationManager({
                 apiUrl: attestApiUrl,
                 apiKey: apiKey ?? null,
+                projectId: config.projectId ?? null,
                 debug: config.debug,
             });
             try {

package/dist/components/Qafka.types.d.ts

@@ -233,16 +233,16 @@ export interface QafkaHandle {
 export interface QafkaProps {
     style?: ViewStyle;
     /**
-     * Project identifier when the runtime config registers more than one
-     * project. Selects which project's development key the SDK uses in
-     * development builds (loaded from `qafka.config.js`).
+     * Target Qafka project identifier. Required.
      *
-     * Leave undefined to use the runtime config's default project. Pass a
-     * project id that is unknown to the runtime config and the SDK throws on
-     * mount — silent fallback would mask a typo.
+     * Identifies which project this SDK instance talks to. It is sent with
+     * device attestation in keyless (production) builds, so it cannot be
+     * omitted — a missing value throws on mount.
      *
-     * In production builds this prop is ignored by the key-resolution path,
-     * which does not rely on a bundled key.
+     * In development builds it also selects which project's development key
+     * the SDK uses (loaded from `qafka.config.js`). Pass a project id that is
+     * unknown to the runtime config and the SDK throws on mount — silent
+     * fallback would mask a typo.
      *
      * When the Qafka CLI has been run (`qafka init` / `qafka project` /
      * `qafka sync`), this prop is narrowed to the registered project ids —
@@ -251,7 +251,7 @@ export interface QafkaProps {
      *
      * @example "proj_abc123"
      */
-    projectId?: ProjectIdOf;
+    projectId: ProjectIdOf;
     /**
     * Backend API URL (OPTIONAL — advanced, leave unset for production).
     */

package/dist/components/QafkaProvider.d.ts

@@ -1,6 +1,6 @@
 import React from 'react';
 import { QafkaProps } from './Qafka.types';
-type QafkaProviderProps = Pick<QafkaProps, 'style' | 'apiUrl' | 'theme' | 'themeOverride' | 'customTheme' | 'enableStreaming' | 'isAuthenticated' | 'endUserId' | 'endUserData' | 'context' | 'contextDescription' | 'components' | 'showTimestamps' | 'placeholder' | 'maxMessageLength' | 'greetingMessage' | 'title' | 'showHeader' | 'onReady' | 'onMessageSent' | 'onResponseReceived' | 'onError' | 'onNavigationSuggest' | 'onNavigationAction' | 'onToolSuggested' | 'onActionResult' | 'onStepCompleted' | 'onClose' | 'onBack' | 'CloseComponent' | 'BackComponent' | 'navigationLabelFormat' | 'NavigationButtonComponent'> & {
+type QafkaProviderProps = Pick<QafkaProps, 'style' | 'projectId' | 'apiUrl' | 'theme' | 'themeOverride' | 'customTheme' | 'enableStreaming' | 'isAuthenticated' | 'endUserId' | 'endUserData' | 'context' | 'contextDescription' | 'components' | 'showTimestamps' | 'placeholder' | 'maxMessageLength' | 'greetingMessage' | 'title' | 'showHeader' | 'onReady' | 'onMessageSent' | 'onResponseReceived' | 'onError' | 'onNavigationSuggest' | 'onNavigationAction' | 'onToolSuggested' | 'onActionResult' | 'onStepCompleted' | 'onClose' | 'onBack' | 'CloseComponent' | 'BackComponent' | 'navigationLabelFormat' | 'NavigationButtonComponent'> & {
     mode?: 'floating' | 'fullscreen' | 'inline';
     position?: 'bottom-right' | 'bottom-left' | 'top-right' | 'top-left';
 };

package/dist/hooks/useSDK.js

@@ -18,6 +18,12 @@ const useSDK = ({ apiUrl, subProjectId, projectId, locale, onReady, onError, })
     onReadyRef.current = onReady;
     onErrorRef.current = onError;
     const initializeSDK = async () => {
+        if (!projectId) {
+            const err = new Error('Qafka: `projectId` prop is required.');
+            setError(err.message);
+            onErrorRef.current?.(err);
+            return;
+        }
         let apiKey = null;
         let resolvedUrl = apiUrl;
         if (__DEV__) {
@@ -45,6 +51,7 @@ const useSDK = ({ apiUrl, subProjectId, projectId, locale, onReady, onError, })
                 apiKey, // null in prod; developmentKey in dev
                 apiUrl: resolvedUrl,
                 subProjectId,
+                projectId,
                 locale,
                 onStatusChange: (status) => {
                     if (status === 'ready') {

package/dist/services/AttestationManager.d.ts

@@ -1,6 +1,7 @@
 interface AttestationConfig {
     apiUrl: string;
     apiKey: string | null;
+    projectId?: string | null;
     debug?: boolean;
 }
 export declare class AttestationManager {
@@ -9,6 +10,8 @@ export declare class AttestationManager {
     private keyId;
     constructor(config: AttestationConfig);
     private log;
+    private storageKeyIdName;
+    private androidAlias;
     initialize(): Promise<void>;
     private initializeIos;
     private performIosAttestation;

package/dist/services/AttestationManager.js

@@ -38,7 +38,6 @@ const react_native_1 = require("react-native");
 const storage_1 = require("./storage");
 const NativeAttestation = __importStar(require("../native/QafkaAttestation"));
 const QafkaAttestation_1 = require("../native/QafkaAttestation");
-const STORAGE_KEY_ID = '@qafka/attestation_key_id';
 class AttestationManager {
     config;
     sessionToken = null;
@@ -53,6 +52,20 @@ class AttestationManager {
         const verbose = this.config.debug || __DEV__;
         console.warn(verbose && verboseMessage ? verboseMessage : message);
     }
+    // Namespace the persisted key identifier per project so each project gets its
+    // own device-bound key instead of sharing one across projects.
+    storageKeyIdName() {
+        return this.config.projectId
+            ? `@qafka/attestation_key_id:${this.config.projectId}`
+            : '@qafka/attestation_key_id';
+    }
+    // Namespace the native key alias per project, sanitised to characters that
+    // are safe for a keystore alias.
+    androidAlias() {
+        return this.config.projectId
+            ? `qafka_attest_${String(this.config.projectId).replace(/[^a-zA-Z0-9_]/g, '_')}`
+            : 'qafka_attest';
+    }
     async initialize() {
         const moduleLinked = (0, QafkaAttestation_1.isAttestationAvailable)();
         // Diagnostic logs are intentionally NOT __DEV__-gated. Init is a once-per-
@@ -90,10 +103,10 @@ class AttestationManager {
         }
     }
     async initializeIos() {
-        this.keyId = await storage_1.storage.getItem(STORAGE_KEY_ID);
+        this.keyId = await storage_1.storage.getItem(this.storageKeyIdName());
         if (!this.keyId) {
             this.keyId = await NativeAttestation.generateKey();
-            await storage_1.storage.setItem(STORAGE_KEY_ID, this.keyId);
+            await storage_1.storage.setItem(this.storageKeyIdName(), this.keyId);
         }
         // Always perform a fresh attestation at session start. Lighter
         // assertions (`performIosAssertion`) are used later to refresh expired
@@ -122,9 +135,9 @@ class AttestationManager {
                 throw err;
             }
             this.log(`[Qafka:init] initial attestation failed (${msg}), regenerating key and retrying once`);
-            await storage_1.storage.removeItem(STORAGE_KEY_ID);
+            await storage_1.storage.removeItem(this.storageKeyIdName());
             this.keyId = await NativeAttestation.generateKey();
-            await storage_1.storage.setItem(STORAGE_KEY_ID, this.keyId);
+            await storage_1.storage.setItem(this.storageKeyIdName(), this.keyId);
             await this.performIosAttestation();
         }
     }
@@ -162,8 +175,9 @@ class AttestationManager {
     }
     async performAndroidAttestation() {
         const challenge = await this.requestChallenge('android');
-        await NativeAttestation.generateKeyPair('qafka_attest', challenge);
-        const certChain = await NativeAttestation.getAttestationCertChain('qafka_attest');
+        const alias = this.androidAlias();
+        await NativeAttestation.generateKeyPair(alias, challenge);
+        const certChain = await NativeAttestation.getAttestationCertChain(alias);
         const response = await this.submitAttestation({
             platform: 'android',
             certChain,
@@ -249,7 +263,7 @@ class AttestationManager {
             response = await fetch(url, {
                 method: 'POST',
                 headers: this.getHeaders(),
-                body: JSON.stringify({ platform }),
+                body: JSON.stringify({ platform, ...(this.config.projectId ? { projectId: this.config.projectId } : {}) }),
             });
         }
         catch (err) {
@@ -272,7 +286,10 @@ class AttestationManager {
             response = await fetch(url, {
                 method: 'POST',
                 headers: this.getHeaders(),
-                body: JSON.stringify(body),
+                body: JSON.stringify({
+                    ...body,
+                    ...(this.config.projectId ? { projectId: this.config.projectId } : {}),
+                }),
             });
         }
         catch (err) {
@@ -290,7 +307,7 @@ class AttestationManager {
     async reset() {
         this.sessionToken = null;
         this.keyId = null;
-        await storage_1.storage.removeItem(STORAGE_KEY_ID);
+        await storage_1.storage.removeItem(this.storageKeyIdName());
     }
 }
 exports.AttestationManager = AttestationManager;

package/dist/types/sdk.d.ts

@@ -12,6 +12,8 @@ export interface SDKConfig {
     apiKey?: string | null;
     /** Sub-project identifier (same apiKey, different sub-project). */
     subProjectId?: string;
+    /** Target Qafka project id. Required in keyless (production) builds. */
+    projectId?: string;
     /** Advanced — leave unset for production. */
     apiUrl?: string;
     /** React Navigation ref, used when the SDK navigates on your behalf. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qafka/react-native",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "Drop-in AI assistant for React Native: chat, voice, and tool execution with screen-aware navigation.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",