@tileflow/react-native 0.1.0-alpha.7 → 0.1.0-alpha.8

package/README.md

@@ -1,6 +1,6 @@
 # @tileflow/react-native
 
-`@tileflow/react-native` provides a Tileflow `Map` backed by MapLibre Native on iOS and Android. It is pre-release. The first alpha release requires the bootstrap and Trusted Publisher checks in the [publishing guide](https://github.com/tileflow/tileflow-sdk/blob/main/PUBLISHING.md).
+`@tileflow/react-native` provides a Tileflow `Map` backed by MapLibre Native on iOS and Android. It is pre-release. Publication requires the repository’s protected release workflow.
 
 The package targets exactly React 19.2.0, React Native 0.83.10 and `@maplibre/maplibre-react-native` 11.5.0, with MapLibre Native Android 13.6.1 and iOS 6.31.0 through the pinned integration below. Expo consumers use Expo 55.0.31 with a native development build; Expo Go does not contain the required native modules.
 
@@ -99,7 +99,7 @@ Theme and `timeOfDay` changes cross-fade over 450 ms by default: a snapshot of t
 <Map source={source} themeBlend={{themes: ['night', 'dusk', 'day'], position}} style={{flex: 1}} />
 ```
 
-The first blend of a set of themes prepares every theme's style and replaces the native style once; moving `position` later changes the map without loading. Removing `themeBlend` returns to `theme`. Both keep the same native Map, context and session, and `ready` events wait for the fade. The device's reduce-motion setting changes at once. See [theme transitions and blends](https://github.com/tileflow/tileflow-sdk/blob/main/packages/core/docs/theme-transitions-and-blends.md#react-native) for what follows the position on native maps.
+The first blend of a set of themes prepares every theme's style and replaces the native style once; moving `position` later changes the map without loading. Removing `themeBlend` returns to `theme`. Both keep the same native Map, context and session, and `ready` events wait for the fade. The device's reduce-motion setting changes at once. See [theme transitions and blends](https://github.com/tileflow/tileflow-sdk/blob/main/packages/core/README.md) for what follows the position on native maps.
 
 ## Boundary choropleths
 
@@ -132,8 +132,7 @@ export function UnemploymentMap({
 
 Values survive theme changes: they are set again once the new style has loaded. `values: null`
 removes them. Rows keyed by codes the polygons do not carry are joined before they reach the app,
-on a server or at build time; see
-[boundary areas and choropleths](https://github.com/tileflow/tileflow-sdk/blob/main/packages/core/docs/boundary-areas-and-choropleths.md#join-by-codes-the-polygons-do-not-carry).
+on a server or at build time.
 
 ## Camera
 
@@ -178,16 +177,12 @@ Relative URLs are resolved with Core's native URL policy. Protected resources ar
 
 Glyph templates use a finite set of exact font-stack expansions. A later theme may extend that same template only through an acknowledged append-only finite union; it cannot change the resource scope, origin or identity.
 
-See [Private native resource admission](./docs/native-admission.md) for the transport and security boundaries.
-
 ## Hosted mobile application configuration
 
 Hosted native session delivery uses a scoped, revocable, publishable **mobile application credential** configured once in the native application. It authenticates the distributed application, not its end user. The manifest supplies `mapId`, `apiUrl` and `usageMode`; Tileflow requires the manifest API origin to exactly match the configured canonical HTTPS origin before bootstrap.
 
 There is intentionally no credential prop, JS setter, Provider, client object, package-name/bundle-ID authentication or attestation path in this version.
 
-See [Native application configuration](./docs/native-configuration.md) for the exact Android resource and iOS Info.plist keys, credential grammar, origin normalization, rotation/revocation guidance and threat model.
-
 ## Map options and presentation
 
 The public `mapOptions` object remains a positive allowlist. It includes the currently supported gesture/control options only. Style inputs, request transformation, headers and upstream lifecycle callbacks remain owned by Tileflow. Runtime validation rejects forged extra keys without reflecting their values.
@@ -208,7 +203,7 @@ The public lifecycle surface remains:
 
 `getSourceState()` returns only the last safe projected source snapshot. Errors use existing bounded codes/fields/kinds. No URL, response body, native event, credential, grant, session object, native handle or raw cause enters public callbacks, refs or serializable state.
 
-`onError` reports `source-error`, `renderer-error` and, for Hosted session delivery, `session-error`. A `session-error` means Tileflow refused the session: the mobile credential was rejected (`NATIVE_SESSION_CREDENTIAL_REJECTED`), it does not authorize the Map (`NATIVE_SESSION_MAP_MISMATCH`), the Map was not found (`NATIVE_SESSION_MAP_NOT_FOUND`) or its view or spending limit was reached (`NATIVE_SESSION_QUOTA_EXCEEDED`). It can arrive after the first load, when a renewal is refused. The map keeps what it has drawn but loads nothing new until you call `ref.retry()` or change the source:
+`onError` reports `source-error`, `renderer-error` and, for Hosted session delivery, `session-error`. A `session-error` means Tileflow refused the session: the mobile credential was rejected (`NATIVE_SESSION_CREDENTIAL_REJECTED`), it does not authorize the Map (`NATIVE_SESSION_MAP_MISMATCH`), the Map was not found (`NATIVE_SESSION_MAP_NOT_FOUND`), its view or spending limit was reached (`NATIVE_SESSION_QUOTA_EXCEEDED`), or the service refused the session for another reason that trying again cannot change (`NATIVE_SESSION_REJECTED`), such as a Map that does not use session delivery. For `NATIVE_SESSION_REJECTED`, `event.error.reason` is the service's code when it sent one, for example `MOBILE_SESSION_MODE_REQUIRED`; it is a bounded identifier, never a message or response body. A `session-error` can arrive after the first load, when a renewal is refused. The map keeps what it has drawn but loads nothing new until you call `ref.retry()` or change the source:
 
 ```tsx
 import {Map, type MapRef} from '@tileflow/react-native';
@@ -226,6 +221,11 @@ export function StoreMap() {
           event.error.code === 'NATIVE_SESSION_QUOTA_EXCEEDED'
         ) {
           // Show your own notice; call map.current?.retry() once the limit is raised.
+        } else if (
+          event.type === 'session-error' &&
+          event.error.code === 'NATIVE_SESSION_REJECTED'
+        ) {
+          // event.error.reason, such as 'MOBILE_SESSION_MODE_REQUIRED', names the cause.
         }
       }}
       style={{flex: 1}}
@@ -247,7 +247,7 @@ $MLRN.post_install(installer)
 tileflow_native_admission_post_install(installer)
 ```
 
-Do not add a second MapLibre Native CocoaPod. See [Private native resource admission](./docs/native-admission.md) for installation-order and teardown details.
+Do not add a second MapLibre Native CocoaPod.
 
 ## Source-checkout harness
 
@@ -276,8 +276,7 @@ remain in native vector or GeoJSON layers and are selected through semantic rend
 queries rather than thousands of React marker views.
 
 The application owns persistent selection and its presentation. The SDK emits normalized
-annotation or POI targets but no popup, callout, tooltip, sheet, panel or modal renderer. See
-[Native interaction contract](./docs/native-interactions.md).
+annotation or POI targets but no popup, callout, tooltip, sheet, panel or modal renderer.
 
 ## Current boundary
 
@@ -297,7 +296,3 @@ Source and tests describe contracts; they do not establish that a native build,
 fix arrives. Applications can compose a validated foreground fix through the existing accessible
 annotation and controlled-camera contracts while keeping permission, provider lifetime, privacy
 policy, status UI and recenter controls outside Tileflow.
-
-See [Application-owned foreground location](./docs/native-location.md) for the package-owned
-source-checkout recipe. The recipe is excluded from package exports and packed runtime files and
-imports no concrete location provider.

package/dist/{contract-BaK24QZD.d.ts → contract-BWT1jxqg.d.ts}

@@ -110,13 +110,19 @@ type MapSourceState = Readonly<{
     error: MapSourceError;
 }>;
 /**
- * The Hosted session stopped: its credential, Map or quota was rejected. The map keeps what it has
- * drawn and loads nothing new until `ref.retry()` or another source. Service outages and rate
- * limits retry on their own and are not reported.
+ * The Hosted session stopped: its credential, Map or quota was rejected, or Tileflow refused the
+ * session for another reason that trying again will not change (`NATIVE_SESSION_REJECTED`). The map
+ * keeps what it has drawn and loads nothing new until `ref.retry()` or another source. Service
+ * outages and rate limits retry on their own and are not reported.
  */
 type MapSessionError = Readonly<{
-    code: 'NATIVE_SESSION_CREDENTIAL_REJECTED' | 'NATIVE_SESSION_MAP_MISMATCH' | 'NATIVE_SESSION_MAP_NOT_FOUND' | 'NATIVE_SESSION_QUOTA_EXCEEDED' | 'NATIVE_SESSION_INPUT_INVALID';
+    code: 'NATIVE_SESSION_CREDENTIAL_REJECTED' | 'NATIVE_SESSION_MAP_MISMATCH' | 'NATIVE_SESSION_MAP_NOT_FOUND' | 'NATIVE_SESSION_QUOTA_EXCEEDED' | 'NATIVE_SESSION_REJECTED' | 'NATIVE_SESSION_INPUT_INVALID';
     kind: 'terminal';
+    /**
+     * For `NATIVE_SESSION_REJECTED`, the service's code when its answer carried one, such as
+     * `MOBILE_SESSION_MODE_REQUIRED`. A bounded identifier, never a message or response body.
+     */
+    reason?: string;
 }>;
 type MapRef = Readonly<{
     /** A synchronous read of the last source snapshot. Does not trigger loading or native commands. */

package/dist/index.d.ts

@@ -1,8 +1,8 @@
 import { ReactElement } from 'react';
 import { TileflowAnnotation } from '@tileflow/interactions';
 export { TileflowAnnotation, TileflowInteractionBinding, TileflowInteractionCoordinate, TileflowInteractionDiagnostic, TileflowPoiCategory, TileflowResolvedAnnotationTarget, TileflowResolvedPoiFeatureTarget } from '@tileflow/interactions';
-import { d as MapProps } from './contract-BaK24QZD.js';
-export { e as MapBaseProps, f as MapBoundaryFeatureState, c as MapCameraProps, g as MapColorScheme, h as MapErrorEvent, i as MapEventHandlers, b as MapInitialViewInputs, j as MapInteractionEvent, k as MapInteractionProps, l as MapLoadEvent, m as MapMarkerRenderContext, n as MapMarkerRenderer, o as MapOptions, p as MapPresentationProps, q as MapReadinessChangeEvent, r as MapRef, s as MapSelection, t as MapSessionError, u as MapSource, v as MapSourceError, w as MapSourceProps, x as MapSourceState, y as MapTheme, z as MapThemeBlend, A as MapThemeChangeEvent, B as MapThemeSelection, C as MapThemeTransition, M as MapView, a as MapViewChangeEvent } from './contract-BaK24QZD.js';
+import { d as MapProps } from './contract-BWT1jxqg.js';
+export { e as MapBaseProps, f as MapBoundaryFeatureState, c as MapCameraProps, g as MapColorScheme, h as MapErrorEvent, i as MapEventHandlers, b as MapInitialViewInputs, j as MapInteractionEvent, k as MapInteractionProps, l as MapLoadEvent, m as MapMarkerRenderContext, n as MapMarkerRenderer, o as MapOptions, p as MapPresentationProps, q as MapReadinessChangeEvent, r as MapRef, s as MapSelection, t as MapSessionError, u as MapSource, v as MapSourceError, w as MapSourceProps, x as MapSourceState, y as MapTheme, z as MapThemeBlend, A as MapThemeChangeEvent, B as MapThemeSelection, C as MapThemeTransition, M as MapView, a as MapViewChangeEvent } from './contract-BWT1jxqg.js';
 import '@maplibre/maplibre-react-native';
 import 'react-native';
 import '@tileflow/core/native';

package/dist/index.js

@@ -1965,6 +1965,8 @@ var RETRY_LIMIT_MS = 6e4;
 var RETRY_AFTER_LIMIT_MS = 15 * 60 * 1e3;
 var RETRY_AFTER_SECONDS = /^\d{1,10}$/u;
 var QUOTA_CODES = /* @__PURE__ */ new Set(["COMMERCIAL_MAP_LIMIT_REACHED", "COMMERCIAL_SPENDING_LIMIT_REACHED"]);
+var SERVICE_CODE = /^[A-Z][A-Z0-9_]{0,63}$/u;
+var SERVICE_CODE_BODY_LIMIT = 4096;
 var MOBILE_CREDENTIAL = /^tf_public_[0-9a-f]{48}$/u;
 var MAP_ID = /^map_[A-Za-z0-9_-]{16}$/u;
 var CREDENTIAL_ID = /^key_[A-Za-z0-9_-]{8,80}$/u;
@@ -2008,7 +2010,8 @@ var TERMINAL_CODES = /* @__PURE__ */ new Set([
   "NATIVE_SESSION_CREDENTIAL_REJECTED",
   "NATIVE_SESSION_MAP_MISMATCH",
   "NATIVE_SESSION_MAP_NOT_FOUND",
-  "NATIVE_SESSION_QUOTA_EXCEEDED"
+  "NATIVE_SESSION_QUOTA_EXCEEDED",
+  "NATIVE_SESSION_REJECTED"
 ]);
 var ERROR_MESSAGES = {
   NATIVE_SESSION_INPUT_INVALID: "Native session configuration is invalid.",
@@ -2027,13 +2030,16 @@ var ERROR_MESSAGES = {
   NATIVE_SESSION_DISPOSED: "Native session controller is disposed."
 };
 var HostedNativeSessionError = class extends Error {
-  constructor(code) {
+  constructor(code, reason) {
     super(ERROR_MESSAGES[code]);
     __publicField(this, "code");
     __publicField(this, "kind");
     this.name = "HostedNativeSessionError";
     this.code = code;
     this.kind = errorKind(code);
+    if (code === "NATIVE_SESSION_REJECTED" && typeof reason === "string" && SERVICE_CODE.test(reason)) {
+      this.reason = reason;
+    }
   }
 };
 function createHostedNativeSessionController(input) {
@@ -2162,10 +2168,10 @@ function createHostedNativeSessionController(input) {
     if (retryAt === null || at >= retryAt) failures = Math.min(failures + 1, 16);
     const backoff = Math.min(RETRY_INITIAL_MS * 2 ** (failures - 1), RETRY_LIMIT_MS);
     retryAt = Math.max(retryAt ?? at, at + Math.max(backoff, retryAfterDelays.get(error) ?? 0));
-    retryError = Object.freeze({ code: error.code, kind: error.kind });
+    retryError = safeError(error);
   }
   function rotateIfRequired(at) {
-    if (terminal) throw new HostedNativeSessionError(terminal.code);
+    if (terminal) throw errorFrom(terminal);
     if (!activeSession || binding.kind !== "hosted") return;
     if (at - activeSession.startedAt < ROTATION_AGE_MS && activeSession.requestCount < ROTATION_REQUEST_LIMIT) {
       return;
@@ -2199,7 +2205,7 @@ function createHostedNativeSessionController(input) {
     return current;
   }
   async function ensureAuthority(session, at) {
-    if (terminal) throw new HostedNativeSessionError(terminal.code);
+    if (terminal) throw errorFrom(terminal);
     if (session.authority && session.authority.clockEpoch === clock.epoch && session.authority.validUntil - at > REFRESH_MARGIN_MS) {
       return { authority: session.authority, session };
     }
@@ -2211,7 +2217,7 @@ function createHostedNativeSessionController(input) {
       if (session.authority && session.authority.clockEpoch === clock.epoch && session.authority.validUntil > at) {
         return { authority: session.authority, session };
       }
-      throw new HostedNativeSessionError(retryError.code);
+      throw errorFrom(retryError);
     }
     const operationBinding = binding;
     const abort = new SessionAbortController();
@@ -2238,14 +2244,16 @@ function createHostedNativeSessionController(input) {
           const normalized = abort.signal.aborted ? abort.error() : normalizeError(error);
           const target = latestSession(session);
           if (normalized.kind === "terminal" && binding === operationBinding && !terminal) {
-            const failure3 = Object.freeze({ code: normalized.code, kind: normalized.kind });
+            const failure3 = safeError(normalized);
             terminal = failure3;
             const rejectedSession = activeSession;
             if (rejectedSession) {
               rejectedSession.authority = null;
               rejectedSession.error = failure3;
             }
-            for (const pending of [...operations]) pending.abort(failure3.code);
+            for (const pending of [...operations]) {
+              pending.abort(failure3.code, failure3.reason);
+            }
             if (binding === operationBinding && rejectedSession) {
               publishSession(rejectedSession, "error", failure3);
             }
@@ -2254,7 +2262,7 @@ function createHostedNativeSessionController(input) {
             delayRetry(normalized);
           }
           if (normalized.code !== "NATIVE_SESSION_REPLACED" && normalized.code !== "NATIVE_SESSION_DISPOSED") {
-            target.error = Object.freeze({ code: normalized.code, kind: normalized.kind });
+            target.error = safeError(normalized);
             publishSession(target, "error", target.error);
           }
           throw normalized;
@@ -2280,7 +2288,7 @@ function createHostedNativeSessionController(input) {
     if (abort.signal.aborted) throw abort.error();
     const expectedSurfaceId = session.authority?.public.surfaceId ?? session.requestedSurfaceId;
     const response = await fetchResponse(hostedBinding, session, expectedSurfaceId, abort);
-    const source = await readBoundedResponse(response, abort);
+    const { source, size } = await readBoundedResponse(response, abort);
     let body;
     try {
       body = source.length ? JSON.parse(source) : null;
@@ -2290,14 +2298,15 @@ function createHostedNativeSessionController(input) {
       }
       body = null;
     }
-    if (response.status === 409 && allowRestart && isExactRestart(body, session.sessionId)) {
+    if (response.status === 409 && isExactRestart(body, session.sessionId)) {
+      if (!allowRestart) throw new HostedNativeSessionError("NATIVE_SESSION_UNAVAILABLE");
       assertCurrentSession(session, hostedBinding);
       const replacement = redirectSession(session, readClock());
       if (abort.signal.aborted) throw abort.error();
       return bootstrap(replacement, hostedBinding, abort, false, false);
     }
     if (response.status !== 201) {
-      const failure3 = statusError(response.status, body);
+      const failure3 = statusError(response.status, body, size);
       const delay = retryAfterMs(response.headers, now);
       if (delay !== null) retryAfterDelays.set(failure3, delay);
       throw failure3;
@@ -2435,7 +2444,7 @@ function createHostedNativeSessionController(input) {
       if (bindingGeneration !== expectedGeneration) {
         throw new HostedNativeSessionError("NATIVE_SESSION_REPLACED");
       }
-      if (terminal) throw new HostedNativeSessionError(terminal.code);
+      if (terminal) throw errorFrom(terminal);
       checkedAt = readClock();
       if (resolved.authority.clockEpoch === clock.epoch && resolved.authority.validUntil > checkedAt) {
         admittedAuthorities.set(resolved.authority.public, resolved.authority);
@@ -2510,7 +2519,7 @@ function createHostedNativeSessionController(input) {
       if (disposed) throw new HostedNativeSessionError("NATIVE_SESSION_DISPOSED");
       lifecycle = "foreground";
       if (terminal) {
-        const error = new HostedNativeSessionError(terminal.code);
+        const error = errorFrom(terminal);
         publish(currentSnapshot());
         throw error;
       }
@@ -2783,7 +2792,7 @@ async function readBoundedResponse(response, abort) {
     bytes.set(chunk, offset);
     offset += chunk.byteLength;
   }
-  return decodeUtf8(bytes);
+  return { source: decodeUtf8(bytes), size };
 }
 function decodeUtf8(bytes) {
   let result = "";
@@ -2831,7 +2840,7 @@ function decodeUtf8(bytes) {
 function hasNoStore(value) {
   return typeof value === "string" && value.split(",").some((part) => part.trim().toLowerCase() === "no-store");
 }
-function statusError(status, body) {
+function statusError(status, body, size) {
   if (status === 401) return new HostedNativeSessionError("NATIVE_SESSION_CREDENTIAL_REJECTED");
   if (status === 403) return new HostedNativeSessionError("NATIVE_SESSION_MAP_MISMATCH");
   if (status === 404) return new HostedNativeSessionError("NATIVE_SESSION_MAP_NOT_FOUND");
@@ -2843,7 +2852,21 @@ function statusError(status, body) {
   if (status === 408 || status >= 500 && status <= 599) {
     return new HostedNativeSessionError("NATIVE_SESSION_UNAVAILABLE");
   }
-  return new HostedNativeSessionError("NATIVE_SESSION_REJECTED");
+  if (status >= 400 && status <= 499) {
+    return new HostedNativeSessionError(
+      "NATIVE_SESSION_REJECTED",
+      size <= SERVICE_CODE_BODY_LIMIT && isRecord(body) && typeof body.code === "string" ? body.code : void 0
+    );
+  }
+  return new HostedNativeSessionError("NATIVE_SESSION_RESPONSE_INVALID");
+}
+function safeError(error) {
+  return Object.freeze(
+    error.reason === void 0 ? { code: error.code, kind: error.kind } : { code: error.code, kind: error.kind, reason: error.reason }
+  );
+}
+function errorFrom(error) {
+  return new HostedNativeSessionError(error.code, error.reason);
 }
 var retryAfterDelays = /* @__PURE__ */ new WeakMap();
 function retryAfterMs(headers, now) {
@@ -2893,12 +2916,13 @@ async function cancelResponse(response) {
   } catch {
   }
 }
-var _aborted, _code, _listeners;
+var _aborted, _code, _reason, _listeners;
 var SessionAbortController = class {
   constructor() {
     __publicField(this, "signal");
     __privateAdd(this, _aborted, false);
     __privateAdd(this, _code, "NATIVE_SESSION_REPLACED");
+    __privateAdd(this, _reason);
     __privateAdd(this, _listeners, /* @__PURE__ */ new Set());
     const isAborted = () => __privateGet(this, _aborted);
     this.signal = Object.freeze({
@@ -2913,9 +2937,10 @@ var SessionAbortController = class {
       }
     });
   }
-  abort(code) {
+  abort(code, reason) {
     if (__privateGet(this, _aborted)) return;
     __privateSet(this, _code, code);
+    __privateSet(this, _reason, reason);
     __privateSet(this, _aborted, true);
     for (const listener of [...__privateGet(this, _listeners)]) {
       try {
@@ -2926,11 +2951,12 @@ var SessionAbortController = class {
     __privateGet(this, _listeners).clear();
   }
   error() {
-    return new HostedNativeSessionError(__privateGet(this, _code));
+    return new HostedNativeSessionError(__privateGet(this, _code), __privateGet(this, _reason));
   }
 };
 _aborted = new WeakMap();
 _code = new WeakMap();
+_reason = new WeakMap();
 _listeners = new WeakMap();
 function raceWithAbort(promise, controller) {
   if (controller.signal.aborted) return Promise.reject(controller.error());
@@ -3238,7 +3264,7 @@ function createNativeAdmissionOwner(options) {
         reported = code;
         if (state.status !== "error") return;
         try {
-          input.onSessionError?.(Object.freeze({ code: state.error.code, kind: state.error.kind }));
+          input.onSessionError?.(Object.freeze({ ...state.error }));
         } catch {
         }
       });
@@ -5824,8 +5850,10 @@ var sessionErrorCodes = /* @__PURE__ */ new Set([
   "NATIVE_SESSION_MAP_MISMATCH",
   "NATIVE_SESSION_MAP_NOT_FOUND",
   "NATIVE_SESSION_QUOTA_EXCEEDED",
+  "NATIVE_SESSION_REJECTED",
   "NATIVE_SESSION_INPUT_INVALID"
 ]);
+var SERVICE_CODE2 = /^[A-Z][A-Z0-9_]{0,63}$/u;
 function themeSource(source, name3) {
   const theme = Object.hasOwn(source.map.themes, name3) ? source.map.themes[name3] : void 0;
   if (!theme) throw new NativePreparationError();
@@ -6085,9 +6113,14 @@ function createMountedMapOwner(ports2) {
     reopenings += 1;
     restart(epoch);
   }
-  function sessionError(epoch, code) {
+  function sessionError(epoch, code, reason) {
     if (disposed || current !== epoch || !epoch.live || !sessionErrorCodes.has(code)) return;
-    const error = Object.freeze({ code, kind: "terminal" });
+    const detail = code === "NATIVE_SESSION_REJECTED" && typeof reason === "string" && SERVICE_CODE2.test(reason) ? { reason } : {};
+    const error = Object.freeze({
+      code,
+      kind: "terminal",
+      ...detail
+    });
     emit({ type: "session-error", generation: generation(), error });
   }
   function createEpoch(developmentOrigin) {
@@ -6125,7 +6158,7 @@ function createMountedMapOwner(ports2) {
           onRetired: () => void Promise.resolve().then(() => reopen(epoch)),
           onSessionError: (error) => {
             if (error.kind !== "terminal") return;
-            void Promise.resolve().then(() => sessionError(epoch, error.code));
+            void Promise.resolve().then(() => sessionError(epoch, error.code, error.reason));
           }
         });
         const map = await epoch.lease.ready;

package/dist/internal/camera.d.ts

@@ -1,4 +1,4 @@
-import { M as MapView, a as MapViewChangeEvent, b as MapInitialViewInputs, c as MapCameraProps } from '../contract-BaK24QZD.js';
+import { M as MapView, a as MapViewChangeEvent, b as MapInitialViewInputs, c as MapCameraProps } from '../contract-BWT1jxqg.js';
 import '@maplibre/maplibre-react-native';
 import 'react';
 import 'react-native';

package/dist/internal/initial-view.d.ts

@@ -1,4 +1,4 @@
-import { b as MapInitialViewInputs, M as MapView } from '../contract-BaK24QZD.js';
+import { b as MapInitialViewInputs, M as MapView } from '../contract-BWT1jxqg.js';
 import '@maplibre/maplibre-react-native';
 import 'react';
 import 'react-native';

package/dist/internal/native-admission.d.ts

@@ -11,6 +11,7 @@ type NativeMapAdmissionInput = Omit<SessionInput, 'fetch' | 'sessionIdFactory'>
     onSessionError?: (error: Readonly<{
         code: HostedNativeSessionErrorCode;
         kind: HostedNativeSessionErrorKind;
+        reason?: string;
     }>) => void;
 }>;
 type NativeMapAdmission = Readonly<{

package/dist/internal/native-admission.js

@@ -343,6 +343,8 @@ var RETRY_LIMIT_MS = 6e4;
 var RETRY_AFTER_LIMIT_MS = 15 * 60 * 1e3;
 var RETRY_AFTER_SECONDS = /^\d{1,10}$/u;
 var QUOTA_CODES = /* @__PURE__ */ new Set(["COMMERCIAL_MAP_LIMIT_REACHED", "COMMERCIAL_SPENDING_LIMIT_REACHED"]);
+var SERVICE_CODE = /^[A-Z][A-Z0-9_]{0,63}$/u;
+var SERVICE_CODE_BODY_LIMIT = 4096;
 var MOBILE_CREDENTIAL = /^tf_public_[0-9a-f]{48}$/u;
 var MAP_ID = /^map_[A-Za-z0-9_-]{16}$/u;
 var CREDENTIAL_ID = /^key_[A-Za-z0-9_-]{8,80}$/u;
@@ -386,7 +388,8 @@ var TERMINAL_CODES = /* @__PURE__ */ new Set([
   "NATIVE_SESSION_CREDENTIAL_REJECTED",
   "NATIVE_SESSION_MAP_MISMATCH",
   "NATIVE_SESSION_MAP_NOT_FOUND",
-  "NATIVE_SESSION_QUOTA_EXCEEDED"
+  "NATIVE_SESSION_QUOTA_EXCEEDED",
+  "NATIVE_SESSION_REJECTED"
 ]);
 var ERROR_MESSAGES = {
   NATIVE_SESSION_INPUT_INVALID: "Native session configuration is invalid.",
@@ -405,13 +408,16 @@ var ERROR_MESSAGES = {
   NATIVE_SESSION_DISPOSED: "Native session controller is disposed."
 };
 var HostedNativeSessionError = class extends Error {
-  constructor(code) {
+  constructor(code, reason) {
     super(ERROR_MESSAGES[code]);
     __publicField(this, "code");
     __publicField(this, "kind");
     this.name = "HostedNativeSessionError";
     this.code = code;
     this.kind = errorKind(code);
+    if (code === "NATIVE_SESSION_REJECTED" && typeof reason === "string" && SERVICE_CODE.test(reason)) {
+      this.reason = reason;
+    }
   }
 };
 function createHostedNativeSessionController(input) {
@@ -540,10 +546,10 @@ function createHostedNativeSessionController(input) {
     if (retryAt === null || at >= retryAt) failures = Math.min(failures + 1, 16);
     const backoff = Math.min(RETRY_INITIAL_MS * 2 ** (failures - 1), RETRY_LIMIT_MS);
     retryAt = Math.max(retryAt ?? at, at + Math.max(backoff, retryAfterDelays.get(error) ?? 0));
-    retryError = Object.freeze({ code: error.code, kind: error.kind });
+    retryError = safeError(error);
   }
   function rotateIfRequired(at) {
-    if (terminal) throw new HostedNativeSessionError(terminal.code);
+    if (terminal) throw errorFrom(terminal);
     if (!activeSession || binding.kind !== "hosted") return;
     if (at - activeSession.startedAt < ROTATION_AGE_MS && activeSession.requestCount < ROTATION_REQUEST_LIMIT) {
       return;
@@ -577,7 +583,7 @@ function createHostedNativeSessionController(input) {
     return current;
   }
   async function ensureAuthority(session, at) {
-    if (terminal) throw new HostedNativeSessionError(terminal.code);
+    if (terminal) throw errorFrom(terminal);
     if (session.authority && session.authority.clockEpoch === clock.epoch && session.authority.validUntil - at > REFRESH_MARGIN_MS) {
       return { authority: session.authority, session };
     }
@@ -589,7 +595,7 @@ function createHostedNativeSessionController(input) {
       if (session.authority && session.authority.clockEpoch === clock.epoch && session.authority.validUntil > at) {
         return { authority: session.authority, session };
       }
-      throw new HostedNativeSessionError(retryError.code);
+      throw errorFrom(retryError);
     }
     const operationBinding = binding;
     const abort = new SessionAbortController();
@@ -616,14 +622,16 @@ function createHostedNativeSessionController(input) {
           const normalized = abort.signal.aborted ? abort.error() : normalizeError(error);
           const target = latestSession(session);
           if (normalized.kind === "terminal" && binding === operationBinding && !terminal) {
-            const failure = Object.freeze({ code: normalized.code, kind: normalized.kind });
+            const failure = safeError(normalized);
             terminal = failure;
             const rejectedSession = activeSession;
             if (rejectedSession) {
               rejectedSession.authority = null;
               rejectedSession.error = failure;
             }
-            for (const pending of [...operations]) pending.abort(failure.code);
+            for (const pending of [...operations]) {
+              pending.abort(failure.code, failure.reason);
+            }
             if (binding === operationBinding && rejectedSession) {
               publishSession(rejectedSession, "error", failure);
             }
@@ -632,7 +640,7 @@ function createHostedNativeSessionController(input) {
             delayRetry(normalized);
           }
           if (normalized.code !== "NATIVE_SESSION_REPLACED" && normalized.code !== "NATIVE_SESSION_DISPOSED") {
-            target.error = Object.freeze({ code: normalized.code, kind: normalized.kind });
+            target.error = safeError(normalized);
             publishSession(target, "error", target.error);
           }
           throw normalized;
@@ -658,7 +666,7 @@ function createHostedNativeSessionController(input) {
     if (abort.signal.aborted) throw abort.error();
     const expectedSurfaceId = session.authority?.public.surfaceId ?? session.requestedSurfaceId;
     const response = await fetchResponse(hostedBinding, session, expectedSurfaceId, abort);
-    const source = await readBoundedResponse(response, abort);
+    const { source, size } = await readBoundedResponse(response, abort);
     let body;
     try {
       body = source.length ? JSON.parse(source) : null;
@@ -668,14 +676,15 @@ function createHostedNativeSessionController(input) {
       }
       body = null;
     }
-    if (response.status === 409 && allowRestart && isExactRestart(body, session.sessionId)) {
+    if (response.status === 409 && isExactRestart(body, session.sessionId)) {
+      if (!allowRestart) throw new HostedNativeSessionError("NATIVE_SESSION_UNAVAILABLE");
       assertCurrentSession(session, hostedBinding);
       const replacement = redirectSession(session, readClock());
       if (abort.signal.aborted) throw abort.error();
       return bootstrap(replacement, hostedBinding, abort, false, false);
     }
     if (response.status !== 201) {
-      const failure = statusError(response.status, body);
+      const failure = statusError(response.status, body, size);
       const delay = retryAfterMs(response.headers, now);
       if (delay !== null) retryAfterDelays.set(failure, delay);
       throw failure;
@@ -813,7 +822,7 @@ function createHostedNativeSessionController(input) {
       if (bindingGeneration !== expectedGeneration) {
         throw new HostedNativeSessionError("NATIVE_SESSION_REPLACED");
       }
-      if (terminal) throw new HostedNativeSessionError(terminal.code);
+      if (terminal) throw errorFrom(terminal);
       checkedAt = readClock();
       if (resolved.authority.clockEpoch === clock.epoch && resolved.authority.validUntil > checkedAt) {
         admittedAuthorities.set(resolved.authority.public, resolved.authority);
@@ -888,7 +897,7 @@ function createHostedNativeSessionController(input) {
       if (disposed) throw new HostedNativeSessionError("NATIVE_SESSION_DISPOSED");
       lifecycle = "foreground";
       if (terminal) {
-        const error = new HostedNativeSessionError(terminal.code);
+        const error = errorFrom(terminal);
         publish(currentSnapshot());
         throw error;
       }
@@ -1161,7 +1170,7 @@ async function readBoundedResponse(response, abort) {
     bytes.set(chunk, offset);
     offset += chunk.byteLength;
   }
-  return decodeUtf8(bytes);
+  return { source: decodeUtf8(bytes), size };
 }
 function decodeUtf8(bytes) {
   let result = "";
@@ -1209,7 +1218,7 @@ function decodeUtf8(bytes) {
 function hasNoStore(value) {
   return typeof value === "string" && value.split(",").some((part) => part.trim().toLowerCase() === "no-store");
 }
-function statusError(status, body) {
+function statusError(status, body, size) {
   if (status === 401) return new HostedNativeSessionError("NATIVE_SESSION_CREDENTIAL_REJECTED");
   if (status === 403) return new HostedNativeSessionError("NATIVE_SESSION_MAP_MISMATCH");
   if (status === 404) return new HostedNativeSessionError("NATIVE_SESSION_MAP_NOT_FOUND");
@@ -1221,7 +1230,21 @@ function statusError(status, body) {
   if (status === 408 || status >= 500 && status <= 599) {
     return new HostedNativeSessionError("NATIVE_SESSION_UNAVAILABLE");
   }
-  return new HostedNativeSessionError("NATIVE_SESSION_REJECTED");
+  if (status >= 400 && status <= 499) {
+    return new HostedNativeSessionError(
+      "NATIVE_SESSION_REJECTED",
+      size <= SERVICE_CODE_BODY_LIMIT && isRecord(body) && typeof body.code === "string" ? body.code : void 0
+    );
+  }
+  return new HostedNativeSessionError("NATIVE_SESSION_RESPONSE_INVALID");
+}
+function safeError(error) {
+  return Object.freeze(
+    error.reason === void 0 ? { code: error.code, kind: error.kind } : { code: error.code, kind: error.kind, reason: error.reason }
+  );
+}
+function errorFrom(error) {
+  return new HostedNativeSessionError(error.code, error.reason);
 }
 var retryAfterDelays = /* @__PURE__ */ new WeakMap();
 function retryAfterMs(headers, now) {
@@ -1271,12 +1294,13 @@ async function cancelResponse(response) {
   } catch {
   }
 }
-var _aborted, _code, _listeners;
+var _aborted, _code, _reason, _listeners;
 var SessionAbortController = class {
   constructor() {
     __publicField(this, "signal");
     __privateAdd(this, _aborted, false);
     __privateAdd(this, _code, "NATIVE_SESSION_REPLACED");
+    __privateAdd(this, _reason);
     __privateAdd(this, _listeners, /* @__PURE__ */ new Set());
     const isAborted = () => __privateGet(this, _aborted);
     this.signal = Object.freeze({
@@ -1291,9 +1315,10 @@ var SessionAbortController = class {
       }
     });
   }
-  abort(code) {
+  abort(code, reason) {
     if (__privateGet(this, _aborted)) return;
     __privateSet(this, _code, code);
+    __privateSet(this, _reason, reason);
     __privateSet(this, _aborted, true);
     for (const listener of [...__privateGet(this, _listeners)]) {
       try {
@@ -1304,11 +1329,12 @@ var SessionAbortController = class {
     __privateGet(this, _listeners).clear();
   }
   error() {
-    return new HostedNativeSessionError(__privateGet(this, _code));
+    return new HostedNativeSessionError(__privateGet(this, _code), __privateGet(this, _reason));
   }
 };
 _aborted = new WeakMap();
 _code = new WeakMap();
+_reason = new WeakMap();
 _listeners = new WeakMap();
 function raceWithAbort(promise, controller) {
   if (controller.signal.aborted) return Promise.reject(controller.error());
@@ -1616,7 +1642,7 @@ function createNativeAdmissionOwner(options) {
         reported = code;
         if (state.status !== "error") return;
         try {
-          input.onSessionError?.(Object.freeze({ code: state.error.code, kind: state.error.kind }));
+          input.onSessionError?.(Object.freeze({ ...state.error }));
         } catch {
         }
       });

package/dist/internal/native-appearance.d.ts

@@ -1,4 +1,4 @@
-import { B as MapThemeSelection, g as MapColorScheme } from '../contract-BaK24QZD.js';
+import { B as MapThemeSelection, g as MapColorScheme } from '../contract-BWT1jxqg.js';
 import '@maplibre/maplibre-react-native';
 import 'react';
 import 'react-native';