@usergist/feedback-react-native 0.1.1 → 0.1.4

package/dist/UserGist.js

@@ -1,12 +1,7 @@
-// UserGist — public singleton facade.
-//
-// Philosophy:
-//  - `init()` remains synchronous and backwards compatible. `initAsync()` can
-//    bind a server-proven identity before any lifecycle event is emitted.
-//  - All public methods catch their own errors and report via debug. The
-//    SDK never throws across its boundary.
-//  - Track is synchronous for the caller: it enqueues, schedules a flush,
-//    and runs the trigger matcher — zero awaits.
+import { drainRevocations, hasPendingRevocations } from './internal/session-revocations.js';
+import { setPushSubscriptionStateHandler, pushSubscriptionChanged } from './internal/push-subscription.js';
+import { cancelIdentityRecovery, identityChanged, setIdentityStateHandler, setSubjectTokenProvider, getIdentityState } from './internal/identity-lifecycle.js';
+import { userPropertiesUpdateSchema } from '@usergist/sdk-core/mobile';
 import { REQUEST_COMMENTED_EVENT_NAME, REQUEST_COMMENT_EDITED_EVENT_NAME, REQUEST_COMMENT_DELETED_EVENT_NAME, } from '@usergist/sdk-core/mobile';
 import { asEventProps, clearAllState, createEngine, emitAppOpenWhenConsentReady, emitAppVersionChanged, ensureHydrated, enqueueAndEvaluate, flushNow, flushMutations, pollInstructions, refreshTargetingRules, recordServerBackedEventLocally, submitResponse, } from './internal/engine.js';
 import { setDebugEnabled, reportError, debugLog, logTrace, getTraces, setDiagnosticHandler, } from './internal/debug.js';
@@ -16,10 +11,16 @@ import { UserGistPushNative, onTokenReceived, onNotificationReceived, onNotifica
 import { Push } from './Push.js';
 import { AppState, Platform } from 'react-native';
 import { generateEventId, validateIdentifyTransition } from './internal/identity.js';
-import { configureStorageAdapter, } from './internal/storage.js';
+import { STORAGE_KEYS, configureStorageAdapter, } from './internal/storage.js';
 import { surveyCompletionOutcome } from './internal/survey-completion.js';
 import { USERGIST_SDK_VERSION } from './internal/context.js';
 let engine = null;
+let pushRegistrationQueue = Promise.resolve();
+function serializePushRegistration(operation) {
+    const task = pushRegistrationQueue.then(operation);
+    pushRegistrationQueue = task.catch(() => undefined);
+    return task;
+}
 let runtimeStarted = false;
 let runtimeStartPromise = null;
 let resetPromise = null;
@@ -37,6 +38,17 @@ function ensureRequestsCache() {
     }
     return requestsCache;
 }
+function requestSessionIsCurrent(e) {
+    const generation = e.resetGeneration;
+    const consentVersion = e.consent.get().version;
+    const identity = e.identity.get();
+    return () => !e.resetting &&
+        generation === e.resetGeneration &&
+        consentVersion === e.consent.get().version &&
+        e.consent.allowsFeedback() &&
+        identity.anonymousId === e.identity.get().anonymousId &&
+        identity.externalId === e.identity.get().externalId;
+}
 function requireEngine() {
     if (!engine) {
         throw new Error('UserGist.init must be called before using the SDK');
@@ -47,6 +59,20 @@ function ensureEngine(config) {
     if (engine)
         return engine;
     engine = createEngine(config);
+    const pushEngine = engine;
+    pushEngine.retryPushRegistration = async () => {
+        if (pushEngine.resetting)
+            return;
+        const saved = await pushEngine.storage.getJson(STORAGE_KEYS.pushDevice);
+        if (!saved)
+            return;
+        pushEngine.pushTokenAvailable = true;
+        if (pushEngine !== engine || pushEngine.resetting)
+            return;
+        pushSubscriptionChanged(pushEngine);
+        if (pushEngine.consent.allowsPush())
+            await registerPushDevice(saved.token, saved.platform, { environment: saved.environment }, true);
+    };
     surveyStore = createSurveyStore(config.writeKey);
     return engine;
 }
@@ -135,6 +161,10 @@ function attachEnginePushListeners() {
     });
 }
 function forwardToPushHandler(p, kind) {
+    if (!engine?.consent.allowsPush() || engine.resetting)
+        return;
+    if (p.data?.usergist_anonymous_id && p.data.usergist_anonymous_id !== engine.identity.get().anonymousId)
+        return;
     const data = p.data ?? {};
     if (p.deliveryId) {
         ;
@@ -193,6 +223,11 @@ export const UserGist = {
     init(config) {
         void UserGist.initAsync(config);
     },
+    /** Defer campaign UI without stopping analytics or closing active UI. */
+    pausePresentation() { engine?.presentation.setPaused(true); },
+    /** Call after startup loading and navigation have completed. */
+    resumePresentation() { engine?.presentation.setPaused(false); },
+    __internal_presentationGate() { return requireEngine().presentation; },
     async initAsync(config, initialIdentity) {
         try {
             const e = ensureEngine(config);
@@ -210,6 +245,10 @@ export const UserGist = {
             return 'rejected';
         }
     },
+    setPushSubscriptionStateHandler,
+    setIdentityStateHandler,
+    setSubjectTokenProvider,
+    getIdentityState,
     identify(userId, properties, subjectToken) {
         void UserGist.identifyAsync(userId, properties, subjectToken);
     },
@@ -220,7 +259,10 @@ export const UserGist = {
                 return 'rejected';
             }
             const e = requireEngine();
+            const generation = e.resetGeneration;
             await ensureHydrated(e);
+            if (e.resetting || e.resetGeneration !== generation)
+                return 'rejected';
             const identity = e.identity.get();
             const pendingIdentity = e.mutations.peek();
             const transition = validateIdentifyTransition(identity.externalId, pendingIdentity?.kind === 'identify' ? pendingIdentity.payload.externalId : null, userId);
@@ -228,8 +270,13 @@ export const UserGist = {
                 reportError('identify rejected: call reset() before switching users');
                 return 'rejected';
             }
-            const cleanProps = e.consent.allowsAnalytics() ? asEventProps(properties) : undefined;
+            const cleanProps = e.consent.allowsAnalytics()
+                ? (properties && Object.keys(properties).length
+                    ? userPropertiesUpdateSchema.parse({ mutationId: generateEventId(), set: properties }).set
+                    : undefined)
+                : undefined;
             if (transition === 'already_identified' &&
+                (!subjectToken || subjectToken === e.subjectToken) &&
                 (!cleanProps || Object.keys(cleanProps).length === 0)) {
                 return 'synced';
             }
@@ -237,6 +284,7 @@ export const UserGist = {
                 reportError('identify requires a server-minted subject token');
                 return 'rejected';
             }
+            identityChanged(e, 'identifying');
             const mutationId = await e.mutations.enqueue('identify', 'essential', {
                 subjectToken,
                 anonymousId: identity.anonymousId,
@@ -244,7 +292,10 @@ export const UserGist = {
                 ...(cleanProps ? { properties: cleanProps } : {}),
             }, `identify:${userId}`);
             const result = await flushMutations(e);
+            if (e.resetting || e.resetGeneration !== generation)
+                return 'rejected';
             if (result.permanentlyRejectedIds.has(mutationId)) {
+                identityChanged(e, 'rejected');
                 reportError('identify was rejected by the server');
                 return 'rejected';
             }
@@ -260,6 +311,33 @@ export const UserGist = {
             return 'rejected';
         }
     },
+    /** Update the current user, including anonymous users. Durable and retried on reconnect. */
+    async setUserProperties(properties, unset = []) {
+        try {
+            const e = requireEngine();
+            const generation = e.resetGeneration;
+            await ensureHydrated(e);
+            if (e !== engine ||
+                e.resetting ||
+                e.resetGeneration !== generation ||
+                !e.consent.allowsAnalytics())
+                return 'rejected';
+            const update = userPropertiesUpdateSchema.parse({
+                mutationId: generateEventId(),
+                set: properties,
+                unset: [...unset],
+            });
+            const mutationId = await e.mutations.enqueue('user-properties', 'analytics', { ...update, anonymousId: e.identity.get().anonymousId });
+            const result = await flushMutations(e);
+            if (result.permanentlyRejectedIds.has(mutationId))
+                return 'rejected';
+            return e.mutations.has(mutationId) ? 'queued' : 'synced';
+        }
+        catch (error) {
+            reportError('setUserProperties failed', error);
+            return 'rejected';
+        }
+    },
     track(eventName, properties) {
         try {
             if (typeof eventName !== 'string' || eventName.length === 0) {
@@ -277,8 +355,34 @@ export const UserGist = {
     async setConsent(purposes) {
         try {
             const e = requireEngine();
+            if (purposes.feedback === false)
+                e.presentation.invalidate('feedback');
+            if (purposes.survey === false)
+                e.presentation.invalidate('survey');
             await ensureHydrated(e);
+            if (e.resetting)
+                return false;
             const next = await e.consent.set(purposes);
+            if (e.resetting || next.version !== e.consent.get().version)
+                return false;
+            if (!next.feedback) {
+                requestsCache = null;
+                e.events.emit('dismissRequests', undefined);
+            }
+            if (e.resetting || next.version !== e.consent.get().version)
+                return false;
+            if (purposes.push === false) {
+                lastEnablePushOptions = null;
+                await pushRegistrationQueue;
+                if (e.resetting || next.version !== e.consent.get().version)
+                    return false;
+                if (e.lastPushToken)
+                    await invalidatePushDevice(e.lastPushToken, true);
+                if (!e.consent.allowsPush())
+                    await UserGistPushNative.disablePush();
+            }
+            if (e.resetting || next.version !== e.consent.get().version)
+                return false;
             const id = e.identity.get();
             try {
                 await e.transport.consent({
@@ -298,6 +402,9 @@ export const UserGist = {
                 reportError('transport.consent failed', err);
                 return false;
             }
+            pushSubscriptionChanged(e);
+            if (next.push)
+                void e.retryPushRegistration?.().catch(error => reportError('push registration deferred', error));
             if (next.feedback || next.survey) {
                 await refreshTargetingRules(e, true);
             }
@@ -314,22 +421,27 @@ export const UserGist = {
     reset() {
         try {
             const e = requireEngine();
-            if (e.resetting)
-                return resetPromise ?? Promise.resolve();
+            if (resetPromise)
+                return resetPromise;
             e.resetting = true;
+            identityChanged(e, 'resetting');
+            pushSubscriptionChanged(e);
+            lastEnablePushOptions = null;
             e.resetGeneration += 1;
+            e.transport.cancelAll();
+            cancelIdentityRecovery(e);
+            e.presentation.invalidate();
             e.events.emit('resetSurfaces', undefined);
             const operation = (async () => {
                 await ensureHydrated(e);
-                if (e.lastPushToken)
-                    await UserGist.invalidatePushToken(e.lastPushToken);
-                await UserGistPushNative.disablePush().catch(() => undefined);
+                void UserGistPushNative.disablePush().catch(() => undefined);
                 await clearAllState(e);
+                requestsCache = null;
             })();
             const finalized = operation
-                .catch((err) => reportError('reset failed', err))
+                .then(() => { e.resetting = false; pushSubscriptionChanged(e); })
+                .catch((err) => { identityChanged(e, 'reset-failed'); reportError('reset failed', err); throw err; })
                 .finally(() => {
-                e.resetting = false;
                 if (resetPromise === finalized)
                     resetPromise = null;
             });
@@ -438,67 +550,10 @@ export const UserGist = {
         }
     },
     async registerPushToken(token, platform, opts) {
-        try {
-            if (!token)
-                return;
-            const e = requireEngine();
-            await ensureHydrated(e);
-            if (!e.consent.allowsPush())
-                return;
-            // Consent is enforced server-side (the register-token route reads
-            // consent_log and refuses if push was explicitly declined). We no
-            // longer short-circuit here because the host app typically calls
-            // setConsent and registerPushToken in parallel; racing the local
-            // consent hydration is not our problem to solve.
-            const id = e.identity.get();
-            const environment = opts?.environment ??
-                (e.config.environment === 'production' ? 'production' : 'sandbox');
-            const registrationKey = [
-                id.anonymousId,
-                id.externalId ?? '',
-                platform,
-                environment,
-                token,
-            ].join(':');
-            if (e.lastPushRegistrationKey === registrationKey &&
-                Date.now() - e.lastPushRegistrationAt < 24 * 60 * 60_000)
-                return;
-            await e.transport.pushRegisterToken({
-                anonymousId: id.anonymousId,
-                externalId: id.externalId ?? null,
-                token,
-                platform,
-                environment,
-                language: undefined,
-                timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
-                appVersion: undefined,
-                sdkVersion: `rn-${USERGIST_SDK_VERSION}`,
-                optIn: true,
-            });
-            e.lastPushToken = token;
-            e.lastPushRegistrationKey = registrationKey;
-            e.lastPushRegistrationAt = Date.now();
-            debugLog('push token registered with server');
-        }
-        catch (err) {
-            reportError('registerPushToken failed', err);
-        }
+        await registerPushDevice(token, platform, opts);
     },
     async invalidatePushToken(token) {
-        try {
-            if (!token)
-                return;
-            const e = requireEngine();
-            await ensureHydrated(e);
-            const id = e.identity.get();
-            await e.transport.pushInvalidateToken({
-                anonymousId: id.anonymousId,
-                token,
-            });
-        }
-        catch (err) {
-            reportError('invalidatePushToken failed', err);
-        }
+        await invalidatePushDevice(token);
     },
     /**
      * Re-bind the latest registered device token to a newly-identified user.
@@ -608,6 +663,34 @@ export const UserGist = {
     // react-native-onesignal, WonderPush, or any other push SDK.
     async enablePush(opts) {
         try {
+            const e = requireEngine();
+            await ensureHydrated(e);
+            if (!e.consent.allowsPush() || e.resetting)
+                return {
+                    granted: false,
+                    status: 'not_determined',
+                    platform: Platform.OS === 'ios' ? 'ios' : 'android',
+                    error: 'consent_required',
+                };
+            const generation = e.resetGeneration;
+            const consentVersion = e.consent.get().version;
+            const current = () => !e.resetting &&
+                generation === e.resetGeneration &&
+                consentVersion === e.consent.get().version &&
+                e.consent.allowsPush();
+            const cancelled = () => ({
+                granted: false,
+                status: 'not_determined',
+                platform: Platform.OS === 'ios' ? 'ios' : 'android',
+                error: 'session_changed',
+            });
+            opts = {
+                ...opts,
+                environment: opts?.environment ??
+                    defaultEnvironment(),
+            };
+            if (!current())
+                return cancelled();
             if (!enginePushListenersAttached)
                 attachEnginePushListeners();
             // Snapshot the caller's options so the AppState foreground listener
@@ -618,12 +701,16 @@ export const UserGist = {
                 installDelegateProxy: opts?.installDelegateProxy,
             };
             const result = await UserGistPushNative.enablePush(opts ?? {});
+            // Reset/withdrawal owns native cleanup. An old permission callback must
+            // not disable a new account's subsequently enabled notification adapter.
+            if (!current())
+                return cancelled();
             // Server-side registration runs on the tokenReceived event; if the
             // native module already had a cached token it surfaces here.
             if (result.granted && result.token) {
                 const platform = (result.platform === 'ios' ? 'ios' : 'android');
                 await UserGist.registerPushToken(result.token, platform, {
-                    environment: opts?.environment ?? (defaultEnvironment()),
+                    environment: opts?.environment ?? defaultEnvironment(),
                 });
             }
             return result;
@@ -632,23 +719,19 @@ export const UserGist = {
             reportError('enablePush failed', err);
             return {
                 granted: false,
-                status: 'denied',
-                platform: (typeof navigator === 'object' && navigator.product === 'ReactNative' ? 'ios' : 'android'),
+                status: 'not_determined',
+                error: 'push_setup_failed',
+                platform: Platform.OS === 'ios' ? 'ios' : 'android',
             };
         }
     },
     async disablePush() {
+        lastEnablePushOptions = null;
         try {
-            const e = engine;
-            if (e?.lastPushToken)
-                await UserGist.invalidatePushToken(e.lastPushToken);
-            await UserGistPushNative.disablePush();
-            if (e) {
-                e.lastPushToken = null;
-                e.lastPushRegistrationKey = null;
-                e.lastPushRegistrationAt = 0;
-                void UserGist.setConsent({ push: false });
-            }
+            if (engine)
+                await UserGist.setConsent({ push: false });
+            else
+                await UserGistPushNative.disablePush();
         }
         catch (err) {
             reportError('disablePush failed', err);
@@ -732,12 +815,15 @@ export const UserGist = {
             if (!match || !match[1])
                 return false;
             const token = match[1];
+            const presentationIsValid = e.presentation.validator('survey');
             const id = e.identity.get();
             const resolved = await e.transport.surveyResolveLink({
                 token,
                 anonymousId: id.anonymousId,
                 externalId: id.externalId ?? null,
             });
+            if (!presentationIsValid() || !e.consent.allowsSurvey())
+                return false;
             if (resolved.consentRequired) {
                 debugLog('survey link resolved but consent required — awaiting consent');
                 return false;
@@ -949,6 +1035,9 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
+            if (e.resetting || !e.consent.allowsFeedback())
+                return { items: [], nextCursor: null };
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const result = await e.transport.requestsList({
                 anonymousId: id.anonymousId,
@@ -960,6 +1049,8 @@ export const UserGist = {
                 cursor: options.cursor ?? null,
                 limit: options.limit,
             });
+            if (!current())
+                return { items: [], nextCursor: null };
             ensureRequestsCache().upsertList(result.items.map((s) => ({
                 id: s.id,
                 appId: '',
@@ -987,7 +1078,9 @@ export const UserGist = {
     submitRequest(title, description, callback) {
         try {
             const e = requireEngine();
-            if (typeof title !== 'string' || title.length === 0 || title.length > 120) {
+            if (typeof title !== 'string' ||
+                title.length === 0 ||
+                title.length > 120) {
                 callback?.(new Error('title required, max 120 chars'));
                 return;
             }
@@ -1000,10 +1093,11 @@ export const UserGist = {
             void (async () => {
                 try {
                     await ensureHydrated(e);
-                    if (!e.consent.allowsFeedback()) {
+                    if (e.resetting || !e.consent.allowsFeedback()) {
                         callback?.(new Error('feedback consent required'));
                         return;
                     }
+                    const current = requestSessionIsCurrent(e);
                     const id = e.identity.get();
                     const req = await e.transport.requestSubmit({
                         idempotencyKey: generateEventId(),
@@ -1012,6 +1106,10 @@ export const UserGist = {
                         title,
                         description,
                     });
+                    if (!current()) {
+                        callback?.(new Error('Request cancelled by identity or consent change'));
+                        return;
+                    }
                     ensureRequestsCache().upsert(req);
                     recordServerBackedEventLocally(e, '$request_submitted');
                     requestsHandlers.onSubmit?.(req);
@@ -1031,11 +1129,12 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
             const cache = ensureRequestsCache();
             const rollback = cache.applyOptimisticVote(requestId, vote);
             try {
+                const current = requestSessionIsCurrent(e);
                 const id = e.identity.get();
                 const result = await e.transport.requestVote({
                     requestId,
@@ -1043,6 +1142,10 @@ export const UserGist = {
                     externalId: id.externalId ?? null,
                     vote,
                 });
+                if (!current()) {
+                    rollback();
+                    return;
+                }
                 cache.commitVote(requestId, result);
                 recordServerBackedEventLocally(e, vote ? '$request_upvoted' : '$request_unupvoted');
                 requestsHandlers.onVote?.(result);
@@ -1060,11 +1163,12 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
             const cache = ensureRequestsCache();
             const rollback = cache.applyOptimisticFollow(requestId, follow);
             try {
+                const current = requestSessionIsCurrent(e);
                 const id = e.identity.get();
                 const result = await e.transport.requestFollow({
                     requestId,
@@ -1072,6 +1176,10 @@ export const UserGist = {
                     externalId: id.externalId ?? null,
                     follow,
                 });
+                if (!current()) {
+                    rollback();
+                    return;
+                }
                 cache.commitFollow(requestId, result);
                 recordServerBackedEventLocally(e, follow ? '$request_followed' : '$request_unfollowed');
                 requestsHandlers.onFollow?.(result);
@@ -1095,9 +1203,11 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return null;
-            return await e.transport.requestBranding();
+            const current = requestSessionIsCurrent(e);
+            const branding = await e.transport.requestBranding();
+            return current() ? branding : null;
         }
         catch (err) {
             reportError('getRequestBranding failed', err);
@@ -1114,14 +1224,17 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return null;
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const req = await e.transport.requestGet({
                 requestId,
                 anonymousId: id.anonymousId,
                 externalId: id.externalId ?? null,
             });
+            if (!current())
+                return null;
             ensureRequestsCache().upsert(req);
             return req;
         }
@@ -1133,7 +1246,7 @@ export const UserGist = {
     openRequestsBoard() {
         try {
             const e = requireEngine();
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
             e.events.emit('showRequestsBoard', undefined);
         }
@@ -1144,7 +1257,7 @@ export const UserGist = {
     openRequestDetail(requestId) {
         try {
             const e = requireEngine();
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
             e.events.emit('showRequestDetail', { requestId });
         }
@@ -1161,15 +1274,16 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return [];
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const result = await e.transport.requestCommentsList({
                 requestId,
                 anonymousId: id.anonymousId,
                 externalId: id.externalId ?? null,
             });
-            return result.items;
+            return current() ? result.items : [];
         }
         catch (err) {
             reportError('getComments failed', err);
@@ -1182,8 +1296,9 @@ export const UserGist = {
             const e = requireEngine();
             validateCommentBody(body);
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return null;
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const comment = await e.transport.requestCommentPost({
                 idempotencyKey: generateEventId(),
@@ -1192,6 +1307,8 @@ export const UserGist = {
                 externalId: id.externalId ?? null,
                 body,
             });
+            if (!current())
+                return null;
             recordServerBackedEventLocally(e, REQUEST_COMMENTED_EVENT_NAME);
             return comment;
         }
@@ -1206,8 +1323,9 @@ export const UserGist = {
             const e = requireEngine();
             validateCommentBody(body);
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return null;
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const comment = await e.transport.requestCommentEdit({
                 requestId,
@@ -1215,6 +1333,8 @@ export const UserGist = {
                 anonymousId: id.anonymousId,
                 body,
             });
+            if (!current())
+                return null;
             recordServerBackedEventLocally(e, REQUEST_COMMENT_EDITED_EVENT_NAME);
             return comment;
         }
@@ -1228,14 +1348,17 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             await e.transport.requestCommentDelete({
                 requestId,
                 commentId,
                 anonymousId: id.anonymousId,
             });
+            if (!current())
+                return;
             recordServerBackedEventLocally(e, REQUEST_COMMENT_DELETED_EVENT_NAME);
         }
         catch (err) {
@@ -1243,4 +1366,97 @@ export const UserGist = {
         }
     },
 };
+/** Registration and invalidation share an ordered lane. Automatic retries may
+ * consume a retained token, but must never recreate an invalidated candidate. */
+async function registerPushDevice(token, platform, opts, retry = false) {
+    try {
+        if (!token)
+            return;
+        const e = requireEngine();
+        if (e.resetting)
+            return;
+        const generation = e.resetGeneration;
+        await serializePushRegistration(async () => {
+            await ensureHydrated(e);
+            if (e.resetting || generation !== e.resetGeneration)
+                return;
+            const environment = opts?.environment ??
+                (e.config.environment === 'production' ? 'production' : 'sandbox');
+            if (e.resetting || generation !== e.resetGeneration)
+                return;
+            const descriptor = { token, platform, environment };
+            const stored = await e.storage.getJson(STORAGE_KEYS.pushDevice);
+            if (JSON.stringify(stored) !== JSON.stringify(descriptor)) {
+                if (retry)
+                    return;
+                await e.storage.setJsonStrict(STORAGE_KEYS.pushDevice, descriptor);
+            }
+            e.pushTokenAvailable = true;
+            pushSubscriptionChanged(e);
+            if (!e.consent.allowsPush())
+                return;
+            await drainRevocations(e);
+            if (await hasPendingRevocations(e) || e.resetting || generation !== e.resetGeneration || !e.consent.allowsPush())
+                return;
+            const id = e.identity.get();
+            const registrationKey = [id.anonymousId, id.externalId ?? '', platform, environment, token].join(':');
+            if (e.lastPushRegistrationKey === registrationKey && Date.now() - e.lastPushRegistrationAt < 24 * 60 * 60_000)
+                return;
+            // Persist before delivery so logout still owns a token if its response is lost.
+            e.lastPushToken = token;
+            await e.storage.setJson(STORAGE_KEYS.pushToken, token);
+            if (e.resetting || generation !== e.resetGeneration || !e.consent.allowsPush())
+                return;
+            const registration = await e.transport.pushRegisterToken({
+                anonymousId: id.anonymousId, externalId: id.externalId ?? null,
+                token, platform, environment, timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+                sdkVersion: `rn-${USERGIST_SDK_VERSION}`, optIn: true,
+            });
+            if (e.resetting || generation !== e.resetGeneration || !e.consent.allowsPush())
+                return;
+            if (!(registration && typeof registration === 'object' && 'registered' in registration && registration.registered === true)) {
+                pushSubscriptionChanged(e);
+                return;
+            }
+            e.lastPushRegistrationKey = registrationKey;
+            e.lastPushRegistrationAt = Date.now();
+            pushSubscriptionChanged(e);
+            debugLog('push token registered with server');
+        });
+    }
+    catch (err) {
+        reportError('registerPushToken failed', err);
+    }
+}
+async function invalidatePushDevice(token, retainDevice = false) {
+    try {
+        if (!token)
+            return;
+        const e = requireEngine();
+        const generation = e.resetGeneration;
+        await serializePushRegistration(async () => {
+            await ensureHydrated(e);
+            if (e.resetting || generation !== e.resetGeneration)
+                return;
+            const saved = await e.storage.getJson(STORAGE_KEYS.pushDevice);
+            if (saved?.token === token) {
+                // Retire the automatic retry candidate before invalidating it remotely.
+                if (!retainDevice)
+                    await e.storage.setJsonStrict(STORAGE_KEYS.pushDevice, null);
+                e.pushTokenAvailable = retainDevice;
+                e.lastPushRegistrationKey = null;
+                e.lastPushRegistrationAt = 0;
+            }
+            if (e.lastPushToken === token) {
+                await e.storage.setJsonStrict(STORAGE_KEYS.pushToken, null);
+                e.lastPushToken = null;
+            }
+            pushSubscriptionChanged(e);
+            await e.transport.pushInvalidateToken({ anonymousId: e.identity.get().anonymousId, token });
+        });
+    }
+    catch (err) {
+        reportError('invalidatePushToken failed', err);
+    }
+}
 //# sourceMappingURL=UserGist.js.map