@userflow-tech/react-native 0.1.0

package/lib/module/pairing/PairingController.js

@@ -0,0 +1,286 @@
+"use strict";
+
+import { DEFAULT_PAIRING_ENDPOINT, PairingEngine } from '@userflow-tech/core';
+import { AppState, Linking, Platform } from 'react-native';
+import { inspectPairingDeepLink, isPairingAttempt } from "./deepLink.js";
+import { defaultPairingLogger, pairingAttemptRejectionMessage, pairingConnectFailedMessage, pairingLinkDeferredMessage, pairingLinkInitFailedMessage, pairingListenerSetupFailedMessage, pairingTokenStoreClearFailedMessage } from "./diagnostics.js";
+import { createPairingTokenStore } from "./tokenStorage.js";
+
+/**
+ * Readiness of the end-user session that a preview attaches to.
+ *
+ * Pairing listens independently of `Userflow.init()` so a QR link is never
+ * lost, but it can only connect once init has resolved. `Userflow.init` drives
+ * this via `notifyInitStarted` / `notifyInitialized` / `notifyInitFailed`;
+ * a controller nobody reports init progress for stays usable (`ready`).
+ */
+
+/**
+ * Inbound deep links → pairing session → preview mode.
+ * Active in all builds (including release); security is the short-lived
+ * signed pairing JWT + Builder ability checks, not `__DEV__`.
+ */
+export class PairingController {
+  engine = null;
+  started = false;
+  urlSub = null;
+  appStateSub = null;
+  listeners = new Set();
+  initPhase = 'ready';
+  initFailureReason = null;
+  /** Pairing token captured before init resolved, replayed once it does. */
+  deferredPairingToken = null;
+  /** Diagnostics already emitted for the current init attempt. */
+  loggedOnce = new Set();
+  constructor(options) {
+    this.core = options.core;
+    this.pairingEndpoint = options.pairingEndpoint ?? DEFAULT_PAIRING_ENDPOINT;
+    this.tokenStore = options.tokenStore ?? createPairingTokenStore();
+    this.LinkingModule = options.LinkingModule ?? Linking;
+    this.AppStateModule = options.AppStateModule ?? AppState;
+    this.clearLocalSession = options.clearLocalSession ?? undefined;
+    this.logger = options.logger ?? defaultPairingLogger;
+  }
+  getEngine() {
+    return this.engine;
+  }
+
+  /** Whether deep-link / AppState listeners have been started. */
+  hasStarted() {
+    return this.started;
+  }
+  getState() {
+    const blocked = this.blockedState();
+    if (blocked) return blocked;
+    return this.engine?.getState() ?? {
+      status: 'idle',
+      pairingId: null,
+      deviceId: null,
+      previewActive: false,
+      lastError: null,
+      needsRescan: false,
+      awaitingStartCondition: false
+    };
+  }
+
+  /**
+   * State for a link we captured but cannot act on because init failed. Without
+   * this the host app shows no sign that a pairing link was ever received.
+   */
+  blockedState() {
+    if (this.initPhase !== 'failed' || this.deferredPairingToken === null) return null;
+    return {
+      status: 'error',
+      pairingId: null,
+      deviceId: null,
+      previewActive: false,
+      lastError: `Userflow.init() failed, so preview could not start: ${this.initFailureReason ?? 'unknown error'}`,
+      needsRescan: true,
+      awaitingStartCondition: false
+    };
+  }
+  onStateChange(listener) {
+    this.listeners.add(listener);
+    return () => {
+      this.listeners.delete(listener);
+    };
+  }
+
+  /**
+   * Start deep-link listeners. Safe to call multiple times, and never rejects —
+   * `Userflow.init` fires it without awaiting, so a rejection here would become
+   * an unhandled promise rejection.
+   */
+  async start() {
+    if (this.started) return;
+    this.started = true;
+    try {
+      await this.startListening();
+    } catch (error) {
+      this.warnOnce(pairingListenerSetupFailedMessage(describeError(error)));
+    }
+  }
+  async startListening() {
+    // Exit pairing on app restart: drop any leftover secure token. Guarded so a
+    // storage failure cannot cost us the listeners registered below — losing
+    // those is what makes an inbound QR link vanish without explanation.
+    try {
+      await this.tokenStore.clear();
+    } catch (error) {
+      this.warnOnce(pairingTokenStoreClearFailedMessage(describeError(error)));
+    }
+    this.ensureEngine();
+    this.urlSub = this.LinkingModule.addEventListener('url', ({
+      url
+    }) => {
+      // handleUrl still rejects for explicit callers (Userflow.handlePairingUrl);
+      // the auto-listener has nowhere to report, so log instead of leaving an
+      // unhandled rejection.
+      void this.handleUrl(url).catch(error => {
+        this.warnOnce(pairingConnectFailedMessage(describeError(error)));
+      });
+    });
+    this.appStateSub = this.AppStateModule.addEventListener('change', next => {
+      if (next === 'active') {
+        this.engine?.ensureAlive();
+      }
+    });
+    try {
+      const initial = await this.LinkingModule.getInitialURL();
+      if (initial) await this.handleUrl(initial);
+    } catch {
+      // Linking may throw on some platforms before the native module is ready.
+    }
+  }
+  stop() {
+    this.urlSub?.remove();
+    this.urlSub = null;
+    this.appStateSub?.remove();
+    this.appStateSub = null;
+    this.started = false;
+    void this.exitPreview();
+  }
+
+  /**
+   * Host apps that intercept deep links themselves can forward them here.
+   */
+  async handleUrl(url) {
+    const inspected = inspectPairingDeepLink(url);
+    if (!inspected.ok) {
+      // Links that are not recognisably ours belong to the host app. Stay silent
+      // so ordinary deep links — and preview links, which accept any
+      // `userflow-*` scheme — are never reported as pairing misconfiguration.
+      if (!isPairingAttempt(inspected.reason)) return false;
+
+      // A deliberate pairing attempt we cannot use. The OS already launched the
+      // app, so a silent return is indistinguishable from a broken deep link.
+      // Still return true — the URL was recognised as pairing, so the host
+      // should stop routing it (see docs/deep-linking.md).
+      this.warnOnce(pairingAttemptRejectionMessage(inspected.reason, url));
+      return true;
+    }
+    if (this.initPhase !== 'ready') {
+      // Hold the token rather than discarding it. `notifyInitialized` replays it;
+      // `notifyInitFailed` turns it into visible state.
+      this.deferredPairingToken = inspected.link.pairingToken;
+      this.warnOnce(this.initPhase === 'failed' ? pairingLinkInitFailedMessage(this.initFailureReason ?? 'unknown error') : pairingLinkDeferredMessage());
+      if (this.initPhase === 'failed') this.emit(this.getState());
+      return true;
+    }
+    await this.enterPreview(inspected.link.pairingToken);
+    return true;
+  }
+
+  /**
+   * Called when `Userflow.init()` begins. Clears a previous failure so a retried
+   * init does not keep reporting the old error.
+   */
+  notifyInitStarted() {
+    // A retry is a fresh attempt: allow its diagnostics through again, and drop
+    // a "Preview unavailable" banner that no longer reflects reality.
+    const wasBlocked = this.blockedState() !== null;
+    this.initPhase = 'pending';
+    this.initFailureReason = null;
+    this.loggedOnce.clear();
+    if (wasBlocked) this.emit(this.getState());
+  }
+
+  /**
+   * Called when `Userflow.init()` resolves. Connects a link that arrived while
+   * init was still in flight.
+   */
+  async notifyInitialized() {
+    this.initPhase = 'ready';
+    this.initFailureReason = null;
+    const deferred = this.deferredPairingToken;
+    if (deferred === null) return;
+    this.deferredPairingToken = null;
+    try {
+      await this.enterPreview(deferred);
+    } catch (error) {
+      // Preview must not fail host init. `Userflow.init` awaits this, and
+      // PairingEngine.start rethrows on every connect failure, so letting this
+      // escape would let an expired QR token fail the host app's entire init.
+      this.warnOnce(pairingConnectFailedMessage(describeError(error)));
+    }
+  }
+
+  /**
+   * Called when `Userflow.init()` rejects. Pairing cannot connect without a
+   * session, so surface why instead of failing silently.
+   */
+  notifyInitFailed(error) {
+    this.initPhase = 'failed';
+    this.initFailureReason = describeError(error);
+    if (this.deferredPairingToken !== null) {
+      this.warnOnce(pairingLinkInitFailedMessage(this.initFailureReason));
+      this.emit(this.getState());
+    }
+  }
+
+  /**
+   * Log `message` at most once per init attempt. Inbound links can repeat (URL
+   * event plus host forwarding), and these messages are several lines long.
+   */
+  warnOnce(message) {
+    if (this.loggedOnce.has(message)) return;
+    this.loggedOnce.add(message);
+    this.logger(message);
+  }
+
+  /** Explicit entry with a raw pairing JWT (tests / advanced hosts). */
+  async enterPreview(pairingToken) {
+    const engine = this.ensureEngine();
+    await this.tokenStore.set(pairingToken);
+    await engine.start(pairingToken);
+  }
+  async exitPreview() {
+    // Drop any held link too, so dismissing a blocked banner actually clears it.
+    this.deferredPairingToken = null;
+    await this.tokenStore.clear();
+    this.engine?.stop();
+    this.clearLocalSession?.();
+    this.emit(this.getState());
+  }
+
+  /** Flush queued startFlowWithToken after identify. */
+  notifyIdentified() {
+    this.engine?.notifyIdentified();
+  }
+  ensureEngine() {
+    if (this.engine) return this.engine;
+    this.engine = new PairingEngine({
+      sendClientMessage: message => this.core.send(message),
+      onServerMessage: handler => this.core.onServerMessage(handler),
+      isIdentified: () => this.core.getUserId() != null,
+      pairingOptions: {
+        pairingEndpoint: this.pairingEndpoint
+      },
+      deviceMeta: () => ({
+        os: Platform.OS
+      })
+    });
+    this.engine.onStateChange(state => {
+      this.emit(state);
+      if (state.status === 'token_expired' || state.needsRescan) {
+        void this.tokenStore.clear();
+      }
+    });
+    return this.engine;
+  }
+  emit(state) {
+    for (const listener of this.listeners) {
+      try {
+        listener(state);
+      } catch {
+        // ignore
+      }
+    }
+  }
+}
+function describeError(error) {
+  if (error instanceof Error) return error.message;
+  if (typeof error === 'string') return error;
+  return String(error);
+}
+//# sourceMappingURL=PairingController.js.map

package/lib/module/pairing/PairingController.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DEFAULT_PAIRING_ENDPOINT","PairingEngine","AppState","Linking","Platform","inspectPairingDeepLink","isPairingAttempt","defaultPairingLogger","pairingAttemptRejectionMessage","pairingConnectFailedMessage","pairingLinkDeferredMessage","pairingLinkInitFailedMessage","pairingListenerSetupFailedMessage","pairingTokenStoreClearFailedMessage","createPairingTokenStore","PairingController","engine","started","urlSub","appStateSub","listeners","Set","initPhase","initFailureReason","deferredPairingToken","loggedOnce","constructor","options","core","pairingEndpoint","tokenStore","LinkingModule","AppStateModule","clearLocalSession","undefined","logger","getEngine","hasStarted","getState","blocked","blockedState","status","pairingId","deviceId","previewActive","lastError","needsRescan","awaitingStartCondition","onStateChange","listener","add","delete","start","startListening","error","warnOnce","describeError","clear","ensureEngine","addEventListener","url","handleUrl","catch","next","ensureAlive","initial","getInitialURL","stop","remove","exitPreview","inspected","ok","reason","link","pairingToken","emit","enterPreview","notifyInitStarted","wasBlocked","notifyInitialized","deferred","notifyInitFailed","message","has","set","notifyIdentified","sendClientMessage","send","onServerMessage","handler","isIdentified","getUserId","pairingOptions","deviceMeta","os","OS","state","Error","String"],"sourceRoot":"../../../src","sources":["pairing/PairingController.ts"],"mappings":";;AAAA,SACEA,wBAAwB,EACxBC,aAAa,QAGR,qBAAqB;AAC5B,SAASC,QAAQ,EAAuBC,OAAO,EAAEC,QAAQ,QAAQ,cAAc;AAE/E,SAASC,sBAAsB,EAAEC,gBAAgB,QAAQ,eAAY;AACrE,SACEC,oBAAoB,EACpBC,8BAA8B,EAC9BC,2BAA2B,EAC3BC,0BAA0B,EAC1BC,4BAA4B,EAC5BC,iCAAiC,EACjCC,mCAAmC,QAE9B,kBAAe;AACtB,SAASC,uBAAuB,QAAgC,mBAAgB;;AAIhF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAqBA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,iBAAiB,CAAC;EACrBC,MAAM,GAAyB,IAAI;EACnCC,OAAO,GAAG,KAAK;EACfC,MAAM,GAA8B,IAAI;EACxCC,WAAW,GAA8B,IAAI;EACpCC,SAAS,GAAG,IAAIC,GAAG,CAA4B,CAAC;EAQzDC,SAAS,GAAc,OAAO;EAC9BC,iBAAiB,GAAkB,IAAI;EAC/C;EACQC,oBAAoB,GAAkB,IAAI;EAClD;EACiBC,UAAU,GAAG,IAAIJ,GAAG,CAAS,CAAC;EAE/CK,WAAWA,CAACC,OAAiC,EAAE;IAC7C,IAAI,CAACC,IAAI,GAAGD,OAAO,CAACC,IAAI;IACxB,IAAI,CAACC,eAAe,GAAGF,OAAO,CAACE,eAAe,IAAI7B,wBAAwB;IAC1E,IAAI,CAAC8B,UAAU,GAAGH,OAAO,CAACG,UAAU,IAAIhB,uBAAuB,CAAC,CAAC;IACjE,IAAI,CAACiB,aAAa,GAAGJ,OAAO,CAACI,aAAa,IAAI5B,OAAO;IACrD,IAAI,CAAC6B,cAAc,GAAGL,OAAO,CAACK,cAAc,IAAI9B,QAAQ;IACxD,IAAI,CAAC+B,iBAAiB,GAAGN,OAAO,CAACM,iBAAiB,IAAIC,SAAS;IAC/D,IAAI,CAACC,MAAM,GAAGR,OAAO,CAACQ,MAAM,IAAI5B,oBAAoB;EACtD;EAEA6B,SAASA,CAAA,EAAyB;IAChC,OAAO,IAAI,CAACpB,MAAM;EACpB;;EAEA;EACAqB,UAAUA,CAAA,EAAY;IACpB,OAAO,IAAI,CAACpB,OAAO;EACrB;EAEAqB,QAAQA,CAAA,EAAuB;IAC7B,MAAMC,OAAO,GAAG,IAAI,CAACC,YAAY,CAAC,CAAC;IACnC,IAAID,OAAO,EAAE,OAAOA,OAAO;IAE3B,OACE,IAAI,CAACvB,MAAM,EAAEsB,QAAQ,CAAC,CAAC,IAAI;MACzBG,MAAM,EAAE,MAAM;MACdC,SAAS,EAAE,IAAI;MACfC,QAAQ,EAAE,IAAI;MACdC,aAAa,EAAE,KAAK;MACpBC,SAAS,EAAE,IAAI;MACfC,WAAW,EAAE,KAAK;MAClBC,sBAAsB,EAAE;IAC1B,CAAC;EAEL;;EAEA;AACF;AACA;AACA;EACUP,YAAYA,CAAA,EAA8B;IAChD,IAAI,IAAI,CAAClB,SAAS,KAAK,QAAQ,IAAI,IAAI,CAACE,oBAAoB,KAAK,IAAI,EAAE,OAAO,IAAI;IAElF,OAAO;MACLiB,MAAM,EAAE,OAAO;MACfC,SAAS,EAAE,IAAI;MACfC,QAAQ,EAAE,IAAI;MACdC,aAAa,EAAE,KAAK;MACpBC,SAAS,EAAE,uDACT,IAAI,CAACtB,iBAAiB,IAAI,eAAe,EACzC;MACFuB,WAAW,EAAE,IAAI;MACjBC,sBAAsB,EAAE;IAC1B,CAAC;EACH;EAEAC,aAAaA,CAACC,QAAmC,EAAc;IAC7D,IAAI,CAAC7B,SAAS,CAAC8B,GAAG,CAACD,QAAQ,CAAC;IAC5B,OAAO,MAAM;MACX,IAAI,CAAC7B,SAAS,CAAC+B,MAAM,CAACF,QAAQ,CAAC;IACjC,CAAC;EACH;;EAEA;AACF;AACA;AACA;AACA;EACE,MAAMG,KAAKA,CAAA,EAAkB;IAC3B,IAAI,IAAI,CAACnC,OAAO,EAAE;IAClB,IAAI,CAACA,OAAO,GAAG,IAAI;IAEnB,IAAI;MACF,MAAM,IAAI,CAACoC,cAAc,CAAC,CAAC;IAC7B,CAAC,CAAC,OAAOC,KAAK,EAAE;MACd,IAAI,CAACC,QAAQ,CAAC3C,iCAAiC,CAAC4C,aAAa,CAACF,KAAK,CAAC,CAAC,CAAC;IACxE;EACF;EAEA,MAAcD,cAAcA,CAAA,EAAkB;IAC5C;IACA;IACA;IACA,IAAI;MACF,MAAM,IAAI,CAACvB,UAAU,CAAC2B,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,OAAOH,KAAK,EAAE;MACd,IAAI,CAACC,QAAQ,CAAC1C,mCAAmC,CAAC2C,aAAa,CAACF,KAAK,CAAC,CAAC,CAAC;IAC1E;IAEA,IAAI,CAACI,YAAY,CAAC,CAAC;IAEnB,IAAI,CAACxC,MAAM,GAAG,IAAI,CAACa,aAAa,CAAC4B,gBAAgB,CAAC,KAAK,EAAE,CAAC;MAAEC;IAAI,CAAC,KAAK;MACpE;MACA;MACA;MACA,KAAK,IAAI,CAACC,SAAS,CAACD,GAAG,CAAC,CAACE,KAAK,CAAER,KAAc,IAAK;QACjD,IAAI,CAACC,QAAQ,CAAC9C,2BAA2B,CAAC+C,aAAa,CAACF,KAAK,CAAC,CAAC,CAAC;MAClE,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,CAACnC,WAAW,GAAG,IAAI,CAACa,cAAc,CAAC2B,gBAAgB,CAAC,QAAQ,EAAGI,IAAI,IAAK;MAC1E,IAAIA,IAAI,KAAK,QAAQ,EAAE;QACrB,IAAI,CAAC/C,MAAM,EAAEgD,WAAW,CAAC,CAAC;MAC5B;IACF,CAAC,CAAC;IAEF,IAAI;MACF,MAAMC,OAAO,GAAG,MAAM,IAAI,CAAClC,aAAa,CAACmC,aAAa,CAAC,CAAC;MACxD,IAAID,OAAO,EAAE,MAAM,IAAI,CAACJ,SAAS,CAACI,OAAO,CAAC;IAC5C,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;EAEAE,IAAIA,CAAA,EAAS;IACX,IAAI,CAACjD,MAAM,EAAEkD,MAAM,CAAC,CAAC;IACrB,IAAI,CAAClD,MAAM,GAAG,IAAI;IAClB,IAAI,CAACC,WAAW,EAAEiD,MAAM,CAAC,CAAC;IAC1B,IAAI,CAACjD,WAAW,GAAG,IAAI;IACvB,IAAI,CAACF,OAAO,GAAG,KAAK;IACpB,KAAK,IAAI,CAACoD,WAAW,CAAC,CAAC;EACzB;;EAEA;AACF;AACA;EACE,MAAMR,SAASA,CAACD,GAAW,EAAoB;IAC7C,MAAMU,SAAS,GAAGjE,sBAAsB,CAACuD,GAAG,CAAC;IAE7C,IAAI,CAACU,SAAS,CAACC,EAAE,EAAE;MACjB;MACA;MACA;MACA,IAAI,CAACjE,gBAAgB,CAACgE,SAAS,CAACE,MAAM,CAAC,EAAE,OAAO,KAAK;;MAErD;MACA;MACA;MACA;MACA,IAAI,CAACjB,QAAQ,CAAC/C,8BAA8B,CAAC8D,SAAS,CAACE,MAAM,EAAEZ,GAAG,CAAC,CAAC;MACpE,OAAO,IAAI;IACb;IAEA,IAAI,IAAI,CAACtC,SAAS,KAAK,OAAO,EAAE;MAC9B;MACA;MACA,IAAI,CAACE,oBAAoB,GAAG8C,SAAS,CAACG,IAAI,CAACC,YAAY;MACvD,IAAI,CAACnB,QAAQ,CACX,IAAI,CAACjC,SAAS,KAAK,QAAQ,GACvBX,4BAA4B,CAAC,IAAI,CAACY,iBAAiB,IAAI,eAAe,CAAC,GACvEb,0BAA0B,CAAC,CACjC,CAAC;MACD,IAAI,IAAI,CAACY,SAAS,KAAK,QAAQ,EAAE,IAAI,CAACqD,IAAI,CAAC,IAAI,CAACrC,QAAQ,CAAC,CAAC,CAAC;MAC3D,OAAO,IAAI;IACb;IAEA,MAAM,IAAI,CAACsC,YAAY,CAACN,SAAS,CAACG,IAAI,CAACC,YAAY,CAAC;IACpD,OAAO,IAAI;EACb;;EAEA;AACF;AACA;AACA;EACEG,iBAAiBA,CAAA,EAAS;IACxB;IACA;IACA,MAAMC,UAAU,GAAG,IAAI,CAACtC,YAAY,CAAC,CAAC,KAAK,IAAI;IAC/C,IAAI,CAAClB,SAAS,GAAG,SAAS;IAC1B,IAAI,CAACC,iBAAiB,GAAG,IAAI;IAC7B,IAAI,CAACE,UAAU,CAACgC,KAAK,CAAC,CAAC;IACvB,IAAIqB,UAAU,EAAE,IAAI,CAACH,IAAI,CAAC,IAAI,CAACrC,QAAQ,CAAC,CAAC,CAAC;EAC5C;;EAEA;AACF;AACA;AACA;EACE,MAAMyC,iBAAiBA,CAAA,EAAkB;IACvC,IAAI,CAACzD,SAAS,GAAG,OAAO;IACxB,IAAI,CAACC,iBAAiB,GAAG,IAAI;IAE7B,MAAMyD,QAAQ,GAAG,IAAI,CAACxD,oBAAoB;IAC1C,IAAIwD,QAAQ,KAAK,IAAI,EAAE;IACvB,IAAI,CAACxD,oBAAoB,GAAG,IAAI;IAEhC,IAAI;MACF,MAAM,IAAI,CAACoD,YAAY,CAACI,QAAQ,CAAC;IACnC,CAAC,CAAC,OAAO1B,KAAK,EAAE;MACd;MACA;MACA;MACA,IAAI,CAACC,QAAQ,CAAC9C,2BAA2B,CAAC+C,aAAa,CAACF,KAAK,CAAC,CAAC,CAAC;IAClE;EACF;;EAEA;AACF;AACA;AACA;EACE2B,gBAAgBA,CAAC3B,KAAc,EAAQ;IACrC,IAAI,CAAChC,SAAS,GAAG,QAAQ;IACzB,IAAI,CAACC,iBAAiB,GAAGiC,aAAa,CAACF,KAAK,CAAC;IAE7C,IAAI,IAAI,CAAC9B,oBAAoB,KAAK,IAAI,EAAE;MACtC,IAAI,CAAC+B,QAAQ,CAAC5C,4BAA4B,CAAC,IAAI,CAACY,iBAAiB,CAAC,CAAC;MACnE,IAAI,CAACoD,IAAI,CAAC,IAAI,CAACrC,QAAQ,CAAC,CAAC,CAAC;IAC5B;EACF;;EAEA;AACF;AACA;AACA;EACUiB,QAAQA,CAAC2B,OAAe,EAAQ;IACtC,IAAI,IAAI,CAACzD,UAAU,CAAC0D,GAAG,CAACD,OAAO,CAAC,EAAE;IAClC,IAAI,CAACzD,UAAU,CAACyB,GAAG,CAACgC,OAAO,CAAC;IAC5B,IAAI,CAAC/C,MAAM,CAAC+C,OAAO,CAAC;EACtB;;EAEA;EACA,MAAMN,YAAYA,CAACF,YAAoB,EAAiB;IACtD,MAAM1D,MAAM,GAAG,IAAI,CAAC0C,YAAY,CAAC,CAAC;IAClC,MAAM,IAAI,CAAC5B,UAAU,CAACsD,GAAG,CAACV,YAAY,CAAC;IACvC,MAAM1D,MAAM,CAACoC,KAAK,CAACsB,YAAY,CAAC;EAClC;EAEA,MAAML,WAAWA,CAAA,EAAkB;IACjC;IACA,IAAI,CAAC7C,oBAAoB,GAAG,IAAI;IAChC,MAAM,IAAI,CAACM,UAAU,CAAC2B,KAAK,CAAC,CAAC;IAC7B,IAAI,CAACzC,MAAM,EAAEmD,IAAI,CAAC,CAAC;IACnB,IAAI,CAAClC,iBAAiB,GAAG,CAAC;IAC1B,IAAI,CAAC0C,IAAI,CAAC,IAAI,CAACrC,QAAQ,CAAC,CAAC,CAAC;EAC5B;;EAEA;EACA+C,gBAAgBA,CAAA,EAAS;IACvB,IAAI,CAACrE,MAAM,EAAEqE,gBAAgB,CAAC,CAAC;EACjC;EAEQ3B,YAAYA,CAAA,EAAkB;IACpC,IAAI,IAAI,CAAC1C,MAAM,EAAE,OAAO,IAAI,CAACA,MAAM;IAEnC,IAAI,CAACA,MAAM,GAAG,IAAIf,aAAa,CAAC;MAC9BqF,iBAAiB,EAAGJ,OAAO,IAAK,IAAI,CAACtD,IAAI,CAAC2D,IAAI,CAACL,OAAO,CAAC;MACvDM,eAAe,EAAGC,OAAO,IAAK,IAAI,CAAC7D,IAAI,CAAC4D,eAAe,CAACC,OAAO,CAAC;MAChEC,YAAY,EAAEA,CAAA,KAAM,IAAI,CAAC9D,IAAI,CAAC+D,SAAS,CAAC,CAAC,IAAI,IAAI;MACjDC,cAAc,EAAE;QAAE/D,eAAe,EAAE,IAAI,CAACA;MAAgB,CAAC;MACzDgE,UAAU,EAAEA,CAAA,MAAO;QACjBC,EAAE,EAAE1F,QAAQ,CAAC2F;MACf,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC/E,MAAM,CAACgC,aAAa,CAAEgD,KAAK,IAAK;MACnC,IAAI,CAACrB,IAAI,CAACqB,KAAK,CAAC;MAChB,IAAIA,KAAK,CAACvD,MAAM,KAAK,eAAe,IAAIuD,KAAK,CAAClD,WAAW,EAAE;QACzD,KAAK,IAAI,CAAChB,UAAU,CAAC2B,KAAK,CAAC,CAAC;MAC9B;IACF,CAAC,CAAC;IAEF,OAAO,IAAI,CAACzC,MAAM;EACpB;EAEQ2D,IAAIA,CAACqB,KAAyB,EAAQ;IAC5C,KAAK,MAAM/C,QAAQ,IAAI,IAAI,CAAC7B,SAAS,EAAE;MACrC,IAAI;QACF6B,QAAQ,CAAC+C,KAAK,CAAC;MACjB,CAAC,CAAC,MAAM;QACN;MAAA;IAEJ;EACF;AACF;AAEA,SAASxC,aAAaA,CAACF,KAAc,EAAU;EAC7C,IAAIA,KAAK,YAAY2C,KAAK,EAAE,OAAO3C,KAAK,CAAC4B,OAAO;EAChD,IAAI,OAAO5B,KAAK,KAAK,QAAQ,EAAE,OAAOA,KAAK;EAC3C,OAAO4C,MAAM,CAAC5C,KAAK,CAAC;AACtB","ignoreList":[]}

package/lib/module/pairing/PreviewModeBanner.js

@@ -0,0 +1,113 @@
+"use strict";
+
+import * as React from 'react';
+import { Pressable, StyleSheet, Text, View } from 'react-native';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Overlay chrome for Builder pairing preview mode.
+ */
+export function PreviewModeBanner({
+  state,
+  onExit
+}) {
+  if (!state.previewActive && state.status === 'idle') return null;
+  if (!state.previewActive && state.status !== 'token_expired' && state.status !== 'device_already_paired' && state.status !== 'error') {
+    return null;
+  }
+  const needsRescan = state.needsRescan;
+  // No pairing id means the session never started (e.g. init failed), so
+  // "Pairing ended" would misdescribe it.
+  const neverPaired = state.status === 'error' && !state.previewActive && state.pairingId === null;
+  const title = neverPaired ? 'Preview unavailable' : needsRescan ? 'Pairing ended' : 'Preview mode';
+  const detail = state.lastError ?? (state.status === 'reconnecting' ? 'Reconnecting…' : state.status === 'connecting' ? 'Connecting to Builder…' :
+  // Mirrors the Builder's own wording. Without this the banner reads
+  // "Paired" while the flow is absent, which looks like a broken preview
+  // rather than a condition that has not matched yet.
+  state.awaitingStartCondition ? 'Waiting for auto-start condition to trigger…' : 'Paired with Userflow Builder');
+  return /*#__PURE__*/_jsx(View, {
+    style: styles.wrap,
+    pointerEvents: "box-none",
+    children: /*#__PURE__*/_jsxs(View, {
+      style: [styles.banner, needsRescan ? styles.bannerWarn : styles.bannerActive],
+      children: [/*#__PURE__*/_jsxs(View, {
+        style: styles.textCol,
+        children: [/*#__PURE__*/_jsx(Text, {
+          style: styles.title,
+          children: title
+        }), /*#__PURE__*/_jsx(Text, {
+          style: styles.detail,
+          numberOfLines: 2,
+          children: needsRescan ? `${detail} Re-scan the QR code to continue.` : detail
+        })]
+      }), !needsRescan ? /*#__PURE__*/_jsx(Pressable, {
+        accessibilityRole: "button",
+        accessibilityLabel: "Exit preview",
+        onPress: onExit,
+        style: styles.button,
+        children: /*#__PURE__*/_jsx(Text, {
+          style: styles.buttonLabel,
+          children: "Exit preview"
+        })
+      }) : /*#__PURE__*/_jsx(Pressable, {
+        accessibilityRole: "button",
+        accessibilityLabel: "Dismiss pairing message",
+        onPress: onExit,
+        style: styles.button,
+        children: /*#__PURE__*/_jsx(Text, {
+          style: styles.buttonLabel,
+          children: "Dismiss"
+        })
+      })]
+    })
+  });
+}
+const styles = StyleSheet.create({
+  wrap: {
+    position: 'absolute',
+    top: 0,
+    left: 0,
+    right: 0,
+    zIndex: 1000
+  },
+  banner: {
+    marginTop: 48,
+    marginHorizontal: 12,
+    borderRadius: 10,
+    paddingHorizontal: 12,
+    paddingVertical: 10,
+    flexDirection: 'row',
+    alignItems: 'center',
+    gap: 10
+  },
+  bannerActive: {
+    backgroundColor: 'rgba(17, 24, 39, 0.92)'
+  },
+  bannerWarn: {
+    backgroundColor: 'rgba(127, 29, 29, 0.94)'
+  },
+  textCol: {
+    flex: 1
+  },
+  title: {
+    color: '#ffffff',
+    fontSize: 13,
+    fontWeight: '700'
+  },
+  detail: {
+    color: 'rgba(255,255,255,0.85)',
+    fontSize: 12,
+    marginTop: 2
+  },
+  button: {
+    paddingHorizontal: 10,
+    paddingVertical: 8,
+    borderRadius: 8,
+    backgroundColor: 'rgba(255,255,255,0.14)'
+  },
+  buttonLabel: {
+    color: '#ffffff',
+    fontSize: 12,
+    fontWeight: '600'
+  }
+});
+//# sourceMappingURL=PreviewModeBanner.js.map

package/lib/module/pairing/PreviewModeBanner.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["React","Pressable","StyleSheet","Text","View","jsx","_jsx","jsxs","_jsxs","PreviewModeBanner","state","onExit","previewActive","status","needsRescan","neverPaired","pairingId","title","detail","lastError","awaitingStartCondition","style","styles","wrap","pointerEvents","children","banner","bannerWarn","bannerActive","textCol","numberOfLines","accessibilityRole","accessibilityLabel","onPress","button","buttonLabel","create","position","top","left","right","zIndex","marginTop","marginHorizontal","borderRadius","paddingHorizontal","paddingVertical","flexDirection","alignItems","gap","backgroundColor","flex","color","fontSize","fontWeight"],"sourceRoot":"../../../src","sources":["pairing/PreviewModeBanner.tsx"],"mappings":";;AACA,OAAO,KAAKA,KAAK,MAAM,OAAO;AAC9B,SAASC,SAAS,EAAEC,UAAU,EAAEC,IAAI,EAAEC,IAAI,QAAQ,cAAc;AAAC,SAAAC,GAAA,IAAAC,IAAA,EAAAC,IAAA,IAAAC,KAAA;AAOjE;AACA;AACA;AACA,OAAO,SAASC,iBAAiBA,CAAC;EAChCC,KAAK;EACLC;AACsB,CAAC,EAA6B;EACpD,IAAI,CAACD,KAAK,CAACE,aAAa,IAAIF,KAAK,CAACG,MAAM,KAAK,MAAM,EAAE,OAAO,IAAI;EAChE,IACE,CAACH,KAAK,CAACE,aAAa,IACpBF,KAAK,CAACG,MAAM,KAAK,eAAe,IAChCH,KAAK,CAACG,MAAM,KAAK,uBAAuB,IACxCH,KAAK,CAACG,MAAM,KAAK,OAAO,EACxB;IACA,OAAO,IAAI;EACb;EAEA,MAAMC,WAAW,GAAGJ,KAAK,CAACI,WAAW;EACrC;EACA;EACA,MAAMC,WAAW,GAAGL,KAAK,CAACG,MAAM,KAAK,OAAO,IAAI,CAACH,KAAK,CAACE,aAAa,IAAIF,KAAK,CAACM,SAAS,KAAK,IAAI;EAChG,MAAMC,KAAK,GAAGF,WAAW,GACrB,qBAAqB,GACrBD,WAAW,GACT,eAAe,GACf,cAAc;EACpB,MAAMI,MAAM,GACVR,KAAK,CAACS,SAAS,KACdT,KAAK,CAACG,MAAM,KAAK,cAAc,GAC5B,eAAe,GACfH,KAAK,CAACG,MAAM,KAAK,YAAY,GAC3B,wBAAwB;EACxB;EACA;EACA;EACAH,KAAK,CAACU,sBAAsB,GAC1B,8CAA8C,GAC9C,8BAA8B,CAAC;EAEzC,oBACEd,IAAA,CAACF,IAAI;IAACiB,KAAK,EAAEC,MAAM,CAACC,IAAK;IAACC,aAAa,EAAC,UAAU;IAAAC,QAAA,eAChDjB,KAAA,CAACJ,IAAI;MAACiB,KAAK,EAAE,CAACC,MAAM,CAACI,MAAM,EAAEZ,WAAW,GAAGQ,MAAM,CAACK,UAAU,GAAGL,MAAM,CAACM,YAAY,CAAE;MAAAH,QAAA,gBAClFjB,KAAA,CAACJ,IAAI;QAACiB,KAAK,EAAEC,MAAM,CAACO,OAAQ;QAAAJ,QAAA,gBAC1BnB,IAAA,CAACH,IAAI;UAACkB,KAAK,EAAEC,MAAM,CAACL,KAAM;UAAAQ,QAAA,EAAER;QAAK,CAAO,CAAC,eACzCX,IAAA,CAACH,IAAI;UAACkB,KAAK,EAAEC,MAAM,CAACJ,MAAO;UAACY,aAAa,EAAE,CAAE;UAAAL,QAAA,EAC1CX,WAAW,GAAG,GAAGI,MAAM,mCAAmC,GAAGA;QAAM,CAChE,CAAC;MAAA,CACH,CAAC,EACN,CAACJ,WAAW,gBACXR,IAAA,CAACL,SAAS;QACR8B,iBAAiB,EAAC,QAAQ;QAC1BC,kBAAkB,EAAC,cAAc;QACjCC,OAAO,EAAEtB,MAAO;QAChBU,KAAK,EAAEC,MAAM,CAACY,MAAO;QAAAT,QAAA,eAErBnB,IAAA,CAACH,IAAI;UAACkB,KAAK,EAAEC,MAAM,CAACa,WAAY;UAAAV,QAAA,EAAC;QAAY,CAAM;MAAC,CAC3C,CAAC,gBAEZnB,IAAA,CAACL,SAAS;QACR8B,iBAAiB,EAAC,QAAQ;QAC1BC,kBAAkB,EAAC,yBAAyB;QAC5CC,OAAO,EAAEtB,MAAO;QAChBU,KAAK,EAAEC,MAAM,CAACY,MAAO;QAAAT,QAAA,eAErBnB,IAAA,CAACH,IAAI;UAACkB,KAAK,EAAEC,MAAM,CAACa,WAAY;UAAAV,QAAA,EAAC;QAAO,CAAM;MAAC,CACtC,CACZ;IAAA,CACG;EAAC,CACH,CAAC;AAEX;AAEA,MAAMH,MAAM,GAAGpB,UAAU,CAACkC,MAAM,CAAC;EAC/Bb,IAAI,EAAE;IACJc,QAAQ,EAAE,UAAU;IACpBC,GAAG,EAAE,CAAC;IACNC,IAAI,EAAE,CAAC;IACPC,KAAK,EAAE,CAAC;IACRC,MAAM,EAAE;EACV,CAAC;EACDf,MAAM,EAAE;IACNgB,SAAS,EAAE,EAAE;IACbC,gBAAgB,EAAE,EAAE;IACpBC,YAAY,EAAE,EAAE;IAChBC,iBAAiB,EAAE,EAAE;IACrBC,eAAe,EAAE,EAAE;IACnBC,aAAa,EAAE,KAAK;IACpBC,UAAU,EAAE,QAAQ;IACpBC,GAAG,EAAE;EACP,CAAC;EACDrB,YAAY,EAAE;IACZsB,eAAe,EAAE;EACnB,CAAC;EACDvB,UAAU,EAAE;IACVuB,eAAe,EAAE;EACnB,CAAC;EACDrB,OAAO,EAAE;IACPsB,IAAI,EAAE;EACR,CAAC;EACDlC,KAAK,EAAE;IACLmC,KAAK,EAAE,SAAS;IAChBC,QAAQ,EAAE,EAAE;IACZC,UAAU,EAAE;EACd,CAAC;EACDpC,MAAM,EAAE;IACNkC,KAAK,EAAE,wBAAwB;IAC/BC,QAAQ,EAAE,EAAE;IACZX,SAAS,EAAE;EACb,CAAC;EACDR,MAAM,EAAE;IACNW,iBAAiB,EAAE,EAAE;IACrBC,eAAe,EAAE,CAAC;IAClBF,YAAY,EAAE,CAAC;IACfM,eAAe,EAAE;EACnB,CAAC;EACDf,WAAW,EAAE;IACXiB,KAAK,EAAE,SAAS;IAChBC,QAAQ,EAAE,EAAE;IACZC,UAAU,EAAE;EACd;AACF,CAAC,CAAC","ignoreList":[]}

package/lib/module/pairing/deepLink.js

@@ -0,0 +1,134 @@
+"use strict";
+
+/**
+ * Parse Builder pairing deep links:
+ *   {scheme_id}://?pairing_token=<jwt>
+ *
+ * `scheme_id` is typically `userflow-<digits>`.
+ */
+
+/** Scheme prefix shared by preview and pairing links. */
+const USERFLOW_SCHEME_PREFIX = 'userflow-';
+const USERFLOW_SCHEME = /^userflow-\d+$/i;
+
+/**
+ * Why a URL was not treated as a pairing link.
+ *
+ * `bad-scheme-shape` and `missing-token` are only reported for URLs that
+ * actually target pairing (root with a `pairing_token` query), so callers can
+ * tell a misconfigured pairing attempt apart from an unrelated link. See
+ * {@link isPairingAttempt}.
+ */
+
+/**
+ * Rejections where the URL was a recognisable pairing attempt that could not be
+ * used. These are worth reporting; everything else belongs to the host app.
+ */
+
+/**
+ * True when a rejected URL was nonetheless a recognisable pairing attempt rather
+ * than someone else's deep link.
+ *
+ * Callers use this to decide whether a rejection is worth reporting. Preview
+ * links accept any `userflow-*` scheme, so scheme shape alone cannot be the
+ * signal — reporting on it would flag valid preview links as broken pairing.
+ */
+export function isPairingAttempt(reason) {
+  return reason === 'foreign-scheme' || reason === 'bad-scheme-shape' || reason === 'missing-token';
+}
+
+/**
+ * Parse `url` as a pairing deep link, reporting why it was rejected.
+ * Prefer this over {@link parsePairingDeepLink} when the reason matters.
+ */
+export function inspectPairingDeepLink(url) {
+  if (typeof url !== 'string' || url.length === 0) {
+    return {
+      ok: false,
+      reason: 'not-userflow'
+    };
+  }
+  const schemeMatch = /^([a-z][a-z0-9+.-]*):/i.exec(url);
+  if (!schemeMatch?.[1]) return {
+    ok: false,
+    reason: 'not-userflow'
+  };
+  const scheme = schemeMatch[1];
+  const isUserflowScheme = scheme.toLowerCase().startsWith(USERFLOW_SCHEME_PREFIX);
+
+  // Parse before judging the scheme: a pairing link opened with the host app's
+  // own scheme still needs to be recognisable so it can be reported.
+  //
+  // Custom schemes are not valid WHATWG URLs on their own. Strip the scheme
+  // and re-parse as https. Root forms (`://?…`, `://`) use a placeholder base
+  // so the query survives — a bare `https://?…` is an invalid URL.
+  const remainder = url.slice(scheme.length + 1).replace(/^\/\//, '');
+  let parsed;
+  try {
+    if (remainder === '' || remainder.startsWith('?') || remainder.startsWith('/')) {
+      parsed = new URL(remainder === '' ? '/' : remainder, 'https://userflow.local');
+    } else {
+      parsed = new URL(`https://${remainder}`);
+    }
+  } catch {
+    return {
+      ok: false,
+      reason: isUserflowScheme ? 'unparseable' : 'not-userflow'
+    };
+  }
+  const pairingToken = parsed.searchParams.get('pairing_token');
+  const hasPairingTokenParam = parsed.searchParams.has('pairing_token');
+  const isRoot = (parsed.hostname === '' || parsed.hostname === 'userflow.local') && (parsed.pathname === '' || parsed.pathname === '/');
+  // Only the root query form is pairing. A host `/pair` route (or any other
+  // path) is left alone even when it carries `pairing_token`.
+  const isPair = isRoot && hasPairingTokenParam;
+  if (!isUserflowScheme) {
+    // Claim a scheme we do not own only when the URL is unmistakably ours: root
+    // form *and* our query parameter. That combination means someone swapped
+    // the environment's scheme_id for the app's own scheme.
+    return isPair ? {
+      ok: false,
+      reason: 'foreign-scheme'
+    } : {
+      ok: false,
+      reason: 'not-userflow'
+    };
+  }
+  if (!isPair) return {
+    ok: false,
+    reason: 'not-pair-path'
+  };
+
+  // Only once the URL is known to target pairing does the scheme shape matter.
+  // Checking it earlier would misreport preview links on non-numeric schemes.
+  if (!USERFLOW_SCHEME.test(scheme)) return {
+    ok: false,
+    reason: 'bad-scheme-shape'
+  };
+  if (!pairingToken) return {
+    ok: false,
+    reason: 'missing-token'
+  };
+  return {
+    ok: true,
+    link: {
+      scheme,
+      pairingToken
+    }
+  };
+}
+
+/**
+ * Returns pairing token details when `url` is a Userflow pairing deep link.
+ * Accepts only `userflow-*` schemes.
+ */
+export function parsePairingDeepLink(url) {
+  const result = inspectPairingDeepLink(url);
+  return result.ok ? result.link : null;
+}
+
+/** True when the URL looks like a Userflow pairing deep link. */
+export function isUserflowPairingUrl(url) {
+  return parsePairingDeepLink(url) != null;
+}
+//# sourceMappingURL=deepLink.js.map

package/lib/module/pairing/deepLink.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["USERFLOW_SCHEME_PREFIX","USERFLOW_SCHEME","isPairingAttempt","reason","inspectPairingDeepLink","url","length","ok","schemeMatch","exec","scheme","isUserflowScheme","toLowerCase","startsWith","remainder","slice","replace","parsed","URL","pairingToken","searchParams","get","hasPairingTokenParam","has","isRoot","hostname","pathname","isPair","test","link","parsePairingDeepLink","result","isUserflowPairingUrl"],"sourceRoot":"../../../src","sources":["pairing/deepLink.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;;AAOA;AACA,MAAMA,sBAAsB,GAAG,WAAW;AAC1C,MAAMC,eAAe,GAAG,iBAAiB;;AAEzC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AASA;AACA;AACA;AACA;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,gBAAgBA,CAC9BC,MAAgC,EACG;EACnC,OAAOA,MAAM,KAAK,gBAAgB,IAAIA,MAAM,KAAK,kBAAkB,IAAIA,MAAM,KAAK,eAAe;AACnG;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASC,sBAAsBA,CAACC,GAA8B,EAAyB;EAC5F,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAIA,GAAG,CAACC,MAAM,KAAK,CAAC,EAAE;IAC/C,OAAO;MAAEC,EAAE,EAAE,KAAK;MAAEJ,MAAM,EAAE;IAAe,CAAC;EAC9C;EAEA,MAAMK,WAAW,GAAG,wBAAwB,CAACC,IAAI,CAACJ,GAAG,CAAC;EACtD,IAAI,CAACG,WAAW,GAAG,CAAC,CAAC,EAAE,OAAO;IAAED,EAAE,EAAE,KAAK;IAAEJ,MAAM,EAAE;EAAe,CAAC;EACnE,MAAMO,MAAM,GAAGF,WAAW,CAAC,CAAC,CAAC;EAC7B,MAAMG,gBAAgB,GAAGD,MAAM,CAACE,WAAW,CAAC,CAAC,CAACC,UAAU,CAACb,sBAAsB,CAAC;;EAEhF;EACA;EACA;EACA;EACA;EACA;EACA,MAAMc,SAAS,GAAGT,GAAG,CAACU,KAAK,CAACL,MAAM,CAACJ,MAAM,GAAG,CAAC,CAAC,CAACU,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;EACnE,IAAIC,MAAW;EACf,IAAI;IACF,IAAIH,SAAS,KAAK,EAAE,IAAIA,SAAS,CAACD,UAAU,CAAC,GAAG,CAAC,IAAIC,SAAS,CAACD,UAAU,CAAC,GAAG,CAAC,EAAE;MAC9EI,MAAM,GAAG,IAAIC,GAAG,CAACJ,SAAS,KAAK,EAAE,GAAG,GAAG,GAAGA,SAAS,EAAE,wBAAwB,CAAC;IAChF,CAAC,MAAM;MACLG,MAAM,GAAG,IAAIC,GAAG,CAAC,WAAWJ,SAAS,EAAE,CAAC;IAC1C;EACF,CAAC,CAAC,MAAM;IACN,OAAO;MAAEP,EAAE,EAAE,KAAK;MAAEJ,MAAM,EAAEQ,gBAAgB,GAAG,aAAa,GAAG;IAAe,CAAC;EACjF;EAEA,MAAMQ,YAAY,GAAGF,MAAM,CAACG,YAAY,CAACC,GAAG,CAAC,eAAe,CAAC;EAC7D,MAAMC,oBAAoB,GAAGL,MAAM,CAACG,YAAY,CAACG,GAAG,CAAC,eAAe,CAAC;EACrE,MAAMC,MAAM,GACV,CAACP,MAAM,CAACQ,QAAQ,KAAK,EAAE,IAAIR,MAAM,CAACQ,QAAQ,KAAK,gBAAgB,MAC9DR,MAAM,CAACS,QAAQ,KAAK,EAAE,IAAIT,MAAM,CAACS,QAAQ,KAAK,GAAG,CAAC;EACrD;EACA;EACA,MAAMC,MAAM,GAAGH,MAAM,IAAIF,oBAAoB;EAE7C,IAAI,CAACX,gBAAgB,EAAE;IACrB;IACA;IACA;IACA,OAAOgB,MAAM,GAAG;MAAEpB,EAAE,EAAE,KAAK;MAAEJ,MAAM,EAAE;IAAiB,CAAC,GAAG;MAAEI,EAAE,EAAE,KAAK;MAAEJ,MAAM,EAAE;IAAe,CAAC;EACjG;EAEA,IAAI,CAACwB,MAAM,EAAE,OAAO;IAAEpB,EAAE,EAAE,KAAK;IAAEJ,MAAM,EAAE;EAAgB,CAAC;;EAE1D;EACA;EACA,IAAI,CAACF,eAAe,CAAC2B,IAAI,CAAClB,MAAM,CAAC,EAAE,OAAO;IAAEH,EAAE,EAAE,KAAK;IAAEJ,MAAM,EAAE;EAAmB,CAAC;EAEnF,IAAI,CAACgB,YAAY,EAAE,OAAO;IAAEZ,EAAE,EAAE,KAAK;IAAEJ,MAAM,EAAE;EAAgB,CAAC;EAEhE,OAAO;IAAEI,EAAE,EAAE,IAAI;IAAEsB,IAAI,EAAE;MAAEnB,MAAM;MAAES;IAAa;EAAE,CAAC;AACrD;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASW,oBAAoBA,CAACzB,GAA8B,EAA0B;EAC3F,MAAM0B,MAAM,GAAG3B,sBAAsB,CAACC,GAAG,CAAC;EAC1C,OAAO0B,MAAM,CAACxB,EAAE,GAAGwB,MAAM,CAACF,IAAI,GAAG,IAAI;AACvC;;AAEA;AACA,OAAO,SAASG,oBAAoBA,CAAC3B,GAA8B,EAAW;EAC5E,OAAOyB,oBAAoB,CAACzB,GAAG,CAAC,IAAI,IAAI;AAC1C","ignoreList":[]}

package/lib/module/pairing/diagnostics.js

@@ -0,0 +1,101 @@
+"use strict";
+
+/**
+ * Diagnostics for Builder pairing deep links.
+ *
+ * Pairing failures are unusually easy to miss. The URL scheme is registered in
+ * the native project at build time, so the OS launches the host app from a
+ * Builder QR code whether or not the SDK is listening. When the SDK then drops
+ * the link, the app looks like it simply "opened and did nothing".
+ *
+ * Every drop path routes through a message below so the reason is visible.
+ */
+
+const PREFIX = '[Userflow]';
+
+/**
+ * Hide the pairing token before a URL reaches the console. It is a bearer
+ * credential for the pairing session, and these messages are printed verbatim.
+ */
+function redactPairingToken(url) {
+  return url.replace(/(pairing_token=)[^&]+/i, '$1<redacted>');
+}
+
+/** Sink for pairing diagnostics. Injected in tests. */
+
+/**
+ * Default logger. Pairing links only ever arrive from a deliberate developer
+ * action (scanning or opening a Builder QR code), so these warn unconditionally
+ * rather than behind `__DEV__` — a swallowed pairing link is otherwise
+ * undiagnosable, and this cannot fire for real end users.
+ */
+export const defaultPairingLogger = message => {
+  // eslint-disable-next-line no-console -- intentional pairing diagnostic
+  console.warn(message);
+};
+
+/** A pairing link arrived while `Userflow.init()` was still in flight. */
+export function pairingLinkDeferredMessage() {
+  return `${PREFIX} Builder pairing link received before Userflow.init() finished. ` + `Holding it and will connect as soon as init resolves.`;
+}
+
+/**
+ * A pairing link arrived but `Userflow.init()` rejected, so there is no session
+ * to attach the preview to.
+ */
+export function pairingLinkInitFailedMessage(reason) {
+  return `${PREFIX} Builder pairing link received, but Userflow.init() failed so pairing ` + `cannot start: ${reason}. Fix the init error — most often an invalid clientToken ` + `or an unreachable serverEndpoint — then re-open the pairing link.`;
+}
+
+/**
+ * Pairing was reachable but the connection itself failed (expired token, device
+ * already paired, backend unreachable). Never fatal to the host app.
+ */
+export function pairingConnectFailedMessage(reason) {
+  return `${PREFIX} Builder pairing could not connect: ${reason}. The app is unaffected — ` + `re-open the pairing link from the Builder to try again.`;
+}
+
+/** A pairing link arrived without the `pairing_token` query parameter. */
+export function pairingMissingTokenMessage(url) {
+  return `${PREFIX} Ignoring Builder pairing link "${redactPairingToken(url)}": no ` + `"pairing_token" query parameter. Open the link straight from the Builder QR ` + `code rather than reconstructing it by hand.`;
+}
+
+/**
+ * A pairing link arrived on a scheme Userflow does not own — almost always the
+ * host app's own scheme substituted for the environment's `scheme_id`.
+ */
+export function pairingForeignSchemeMessage(url) {
+  return `${PREFIX} Ignoring "${redactPairingToken(url)}": this is a Builder pairing ` + `link, but it was opened with a scheme Userflow does not own. Use your ` + `environment's scheme_id ("userflow-" followed by digits) exactly as the ` + `pairing QR code provides it — do not substitute your app's own scheme. ` + `Register it via the @userflow-tech/expo plugin ({ schemeId: 'userflow-…' }) and ` + `rebuild the native app; a Metro reload is not enough.`;
+}
+
+/** Message for a pairing attempt that could not be used. */
+export function pairingAttemptRejectionMessage(reason, url) {
+  switch (reason) {
+    case 'foreign-scheme':
+      return pairingForeignSchemeMessage(url);
+    case 'bad-scheme-shape':
+      return pairingSchemeShapeMessage(url);
+    case 'missing-token':
+      return pairingMissingTokenMessage(url);
+  }
+}
+
+/** Clearing the persisted pairing token failed. Best-effort, never fatal. */
+export function pairingTokenStoreClearFailedMessage(reason) {
+  return `${PREFIX} Could not clear the stored pairing token: ${reason}. Continuing — ` + `a stale preview may survive an app restart until you exit preview manually.`;
+}
+
+/** Attaching the deep-link listeners failed, which disables pairing entirely. */
+export function pairingListenerSetupFailedMessage(reason) {
+  return `${PREFIX} Could not start Builder pairing listeners: ${reason}. Pairing deep ` + `links will be ignored for this session; the rest of the SDK is unaffected.`;
+}
+
+/**
+ * The URL used a `userflow-` scheme that is not a valid `scheme_id`. Pairing
+ * requires `userflow-` followed by digits, so an arbitrary `userflow-*` scheme
+ * can match preview links but not pairing ones.
+ */
+export function pairingSchemeShapeMessage(url) {
+  return `${PREFIX} Ignoring Builder pairing link "${redactPairingToken(url)}": the scheme must be your ` + `environment's scheme_id — "userflow-" followed by digits (e.g. userflow-257587). ` + `Check the schemeId passed to the @userflow-tech/expo plugin.`;
+}
+//# sourceMappingURL=diagnostics.js.map