@qafka/react-native 2.4.0 → 2.4.2

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.ht
 
 ## [Unreleased]
 
+## [2.4.2] — 2026-06-22
+
+### Fixed
+
+- Voice could fail to connect (the orb stayed on the connecting/waiting state) in apps that did not pass an explicit `apiUrl`. The realtime WebSocket now falls back to the same default backend host as the REST/chat client, instead of building a host-less relative URL that could never complete its handshake. Apps relying on the default backend no longer need to set `apiUrl` just to make voice work.
+
+## [2.4.1] — 2026-06-21
+
+### Fixed
+
+- Development experience: when a development (test) API key has been rotated and the app is still running the old key, chat no longer fails silently. In development builds the SDK now logs an actionable warning and shows an in-chat message telling the developer to run `qafka refresh` and restart Metro with `--clear`. This guidance is stripped from release builds (`__DEV__`-gated) and only triggers for development keys, so it can never appear in production.
+
 ## [2.4.0] — 2026-06-21
 
 ### Added

package/dist/QafkaSDK.js

@@ -6,6 +6,7 @@ const BackendService_1 = require("./services/BackendService");
 const AttestationManager_1 = require("./services/AttestationManager");
 const ConversationManager_1 = require("./services/ConversationManager");
 const NavigationHandler_1 = require("./services/NavigationHandler");
+const constants_1 = require("./constants");
 /**
  * QafkaSDK - Main SDK class
  * Provides AI-powered conversational interface for React Native apps
@@ -85,7 +86,7 @@ class QafkaSDK {
             await this.conversationManager.initialize();
             this.navigationHandler = new NavigationHandler_1.NavigationHandler(config.navigationRef);
             // Initialize device attestation
-            const rawUrl = (config.apiUrl || 'https://api.qafka.com/api/v1').replace(/\/$/, '');
+            const rawUrl = (config.apiUrl || `${constants_1.DEFAULT_API_BASE}/api/v1`).replace(/\/$/, '');
             const attestApiUrl = rawUrl.includes('/api/v1') ? rawUrl : `${rawUrl}/api/v1`;
             this.attestationManager = new AttestationManager_1.AttestationManager({
                 apiUrl: attestApiUrl,

package/dist/components/Qafka.js

@@ -49,6 +49,7 @@ const validate_end_user_1 = require("../validate-end-user");
 const ChatPage_1 = require("./ChatPage");
 const VoicePage_1 = require("./VoicePage");
 const useVoiceChat_1 = require("../hooks/useVoiceChat");
+const constants_1 = require("../constants");
 const { width: SCREEN_WIDTH } = react_native_1.Dimensions.get('window');
 /**
  * Qafka Component
@@ -126,10 +127,10 @@ exports.Qafka = (0, react_1.forwardRef)(function Qafka({ style, apiUrl: apiUrlPr
         debounceMs: 500,
     });
     const voiceChat = (0, useVoiceChat_1.useVoiceChat)({
-        // Voice WebSocket still uses apiKey-based auth. In dev, the resolved
-        // developmentKey from qafka.config.js flows through. In production, this
-        // is null and voice will fail at WS handshake.
-        apiUrl: resolvedApiUrl || apiUrlProp || '',
+        // Voice realtime WebSocket. Fall back to the shared default backend host so
+        // the WS URL never resolves host-less (an empty apiUrl produced a relative
+        // `/v1/realtime` URL → handshake failure). Mirrors the REST client default.
+        apiUrl: resolvedApiUrl || apiUrlProp || constants_1.DEFAULT_API_BASE,
         apiKey: resolvedApiKey || '',
         userContext: currentContext,
         contextDescription,
@@ -311,6 +312,20 @@ exports.Qafka = (0, react_1.forwardRef)(function Qafka({ style, apiUrl: apiUrlPr
                         setIsInitialMessageLoading(false);
                         if (__DEV__) {
                             console.warn('[Qafka] Initial message error:', err.message);
+                            // Dev-only: a stale rotated test key would otherwise fail silently.
+                            // Surface the actionable hint in the transcript so it is visible.
+                            const devErr = err;
+                            if (devErr.code === 'DEV_KEY_INVALID') {
+                                const devErrMsg = {
+                                    id: `dev-key-error-${Date.now()}`,
+                                    role: 'assistant',
+                                    text: err.message,
+                                    content: err.message,
+                                    timestamp: new Date(),
+                                    metadata: { isInitialMessage: true },
+                                };
+                                setMessages((prev) => [...prev, devErrMsg]);
+                            }
                         }
                     }, currentContext, contextDescription, undefined, // onToolSuggestions
                     true);

package/dist/components/Qafka.types.d.ts

@@ -8,10 +8,11 @@ import type { RuntimeConfig } from '../runtime-config-loader';
 /**
  * Augmentation hook for consumer-side projectId literal types.
  *
- * The Qafka CLI generates a `qafka.config.d.ts` file alongside
- * `qafka.config.js` whenever it writes the runtime config. That `.d.ts`
- * augments this interface with the consumer's project ids as keys —
- * giving `<Qafka projectId="..." />` autocomplete + typo validation.
+ * The Qafka CLI generates a `qafka.config.d.ts` file at the consumer
+ * project root whenever it writes the runtime config; the consumer's
+ * tsconfig file scan picks it up. That `.d.ts` augments this interface
+ * with the consumer's project ids as keys — giving
+ * `<Qafka projectId="..." />` autocomplete + typo validation.
  *
  * When the augmentation is absent (fresh project, `qafka init` not yet
  * run), `keyof QafkaProjectIds` is `never` and `ProjectIdOf` falls back

package/dist/constants.d.ts

@@ -3,6 +3,16 @@
  */
 export declare const API_VERSION = "v1";
 export declare const DEFAULT_API_TIMEOUT = 30000;
+/**
+ * Default Qafka backend base host (scheme + host only).
+ *
+ * The REST client appends `/api/v1` and the realtime voice client appends
+ * `/v1/realtime`, so this holds the bare base. Used as the fallback when neither
+ * an explicit `apiUrl` prop nor a runtime-config `apiUrl` is provided — keeps the
+ * REST and voice transports pointed at the same host instead of one silently
+ * defaulting while the other resolves to an empty (host-less) URL.
+ */
+export declare const DEFAULT_API_BASE = "https://api.qafka.com";
 export declare const STORAGE_KEYS: {
     readonly CONFIG: "@qafka/config";
     readonly CONVERSATION_HISTORY: "@qafka/conversation_history";

package/dist/constants.js

@@ -3,9 +3,19 @@
  * Shared constants for SDK
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.STORAGE_KEYS = exports.DEFAULT_API_TIMEOUT = exports.API_VERSION = void 0;
+exports.STORAGE_KEYS = exports.DEFAULT_API_BASE = exports.DEFAULT_API_TIMEOUT = exports.API_VERSION = void 0;
 exports.API_VERSION = 'v1';
 exports.DEFAULT_API_TIMEOUT = 30000;
+/**
+ * Default Qafka backend base host (scheme + host only).
+ *
+ * The REST client appends `/api/v1` and the realtime voice client appends
+ * `/v1/realtime`, so this holds the bare base. Used as the fallback when neither
+ * an explicit `apiUrl` prop nor a runtime-config `apiUrl` is provided — keeps the
+ * REST and voice transports pointed at the same host instead of one silently
+ * defaulting while the other resolves to an empty (host-less) URL.
+ */
+exports.DEFAULT_API_BASE = 'https://api.qafka.com';
 exports.STORAGE_KEYS = {
     CONFIG: '@qafka/config',
     CONVERSATION_HISTORY: '@qafka/conversation_history',

package/dist/index.d.ts

@@ -1,4 +1,3 @@
-/// <reference path="../qafka.config.d.ts" />
 /**
  * QafkaSDK for React Native
  * AI-powered conversational interface with navigation intelligence

package/dist/services/BackendService.js

@@ -601,12 +601,27 @@ class BackendService {
                     });
                 }
                 else {
+                    let serverMessage;
                     try {
-                        const errorData = JSON.parse(xhr.responseText);
-                        onError(new Error(errorData.message || `HTTP Error: ${xhr.status}`));
+                        serverMessage = JSON.parse(xhr.responseText)?.message;
                     }
                     catch {
-                        onError(new Error(`HTTP Error: ${xhr.status}`));
+                        // non-JSON error body; fall through to a status-based message
+                    }
+                    // In dev, a 401 with a test key almost always means the rotated dev
+                    // key is stale. Surface an actionable hint instead of a bare HTTP error.
+                    if (__DEV__ && xhr.status === 401 && this.apiKey?.startsWith('qafka_test_')) {
+                        const hint = 'Qafka dev key is invalid or was rotated. Run `qafka refresh`, then restart Metro with --clear.';
+                        console.warn(`[Qafka] ${hint}`);
+                        const devErr = new Error(hint);
+                        devErr.code = 'DEV_KEY_INVALID';
+                        devErr.status = xhr.status;
+                        onError(devErr);
+                    }
+                    else {
+                        const httpErr = new Error(serverMessage || `HTTP Error: ${xhr.status}`);
+                        httpErr.status = xhr.status;
+                        onError(httpErr);
                     }
                 }
             };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qafka/react-native",
-  "version": "2.4.0",
+  "version": "2.4.2",
   "description": "Drop-in AI assistant for React Native: chat, voice, and tool execution with screen-aware navigation.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -23,7 +23,7 @@
     "LICENSE"
   ],
   "scripts": {
-    "build": "tsc && node -e \"const fs=require('fs'),p='dist/index.d.ts',c=fs.readFileSync(p,'utf-8');if(!c.startsWith('/// <reference'))fs.writeFileSync(p,'/// <reference path=\\\"../qafka.config.d.ts\\\" />\\n'+c,'utf-8');\"",
+    "build": "tsc",
     "dev": "tsc --watch",
     "clean": "rm -rf dist",
     "typecheck": "tsc --noEmit",