@usergist/feedback-react-native 0.1.1 → 0.2.0-beta.0

package/dist/UserGist.js

@@ -1,25 +1,23 @@
-// UserGist — public singleton facade.
-//
-// Philosophy:
-//  - `init()` remains synchronous and backwards compatible. `initAsync()` can
-//    bind a server-proven identity before any lifecycle event is emitted.
-//  - All public methods catch their own errors and report via debug. The
-//    SDK never throws across its boundary.
-//  - Track is synchronous for the caller: it enqueues, schedules a flush,
-//    and runs the trigger matcher — zero awaits.
+import { hydratePushDedupe } from './internal/push-dedupe.js';
 import { REQUEST_COMMENTED_EVENT_NAME, REQUEST_COMMENT_EDITED_EVENT_NAME, REQUEST_COMMENT_DELETED_EVENT_NAME, } from '@usergist/sdk-core/mobile';
 import { asEventProps, clearAllState, createEngine, emitAppOpenWhenConsentReady, emitAppVersionChanged, ensureHydrated, enqueueAndEvaluate, flushNow, flushMutations, pollInstructions, refreshTargetingRules, recordServerBackedEventLocally, submitResponse, } from './internal/engine.js';
 import { setDebugEnabled, reportError, debugLog, logTrace, getTraces, setDiagnosticHandler, } from './internal/debug.js';
 import { DEFAULT_THEME, mergeTheme } from './ui/theme.js';
 import { createSurveyStore } from './internal/survey-store.js';
-import { UserGistPushNative, onTokenReceived, onNotificationReceived, onNotificationOpened, onTokenError, } from './native/push-bridge.js';
+import { UserGistPushNative, onTokenReceived, onNotificationReceived, onNotificationOpened, onNotificationDisplayed, onNotificationDismissed, onTokenError, } from './native/push-bridge.js';
 import { Push } from './Push.js';
 import { AppState, Platform } from 'react-native';
 import { generateEventId, validateIdentifyTransition } from './internal/identity.js';
-import { configureStorageAdapter, } from './internal/storage.js';
+import { configureStorageAdapter, STORAGE_KEYS, } from './internal/storage.js';
 import { surveyCompletionOutcome } from './internal/survey-completion.js';
 import { USERGIST_SDK_VERSION } from './internal/context.js';
 let engine = null;
+let pushRegistrationQueue = Promise.resolve();
+function serializePushRegistration(operation) {
+    const task = pushRegistrationQueue.then(operation);
+    pushRegistrationQueue = task.catch(() => undefined);
+    return task;
+}
 let runtimeStarted = false;
 let runtimeStartPromise = null;
 let resetPromise = null;
@@ -37,6 +35,37 @@ function ensureRequestsCache() {
     }
     return requestsCache;
 }
+function requestSessionIsCurrent(e) {
+    const generation = e.resetGeneration;
+    const consentVersion = e.consent.get().version;
+    const identity = e.identity.get();
+    return () => !e.resetting && generation === e.resetGeneration &&
+        consentVersion === e.consent.get().version && e.consent.allowsFeedback() &&
+        identity.anonymousId === e.identity.get().anonymousId &&
+        identity.externalId === e.identity.get().externalId;
+}
+async function syncNativePushState(e, push = e.consent.allowsPush()) {
+    const anonymousId = e.identity.get().anonymousId;
+    const generation = e.resetGeneration;
+    const version = e.consent.get().version;
+    const operation = nativeStateQueue.then(async () => {
+        if (generation !== e.resetGeneration || anonymousId !== e.identity.get().anonymousId || version !== e.consent.get().version)
+            return;
+        await UserGistPushNative.syncState({ writeKey: e.config.writeKey, apiUrl: e.config.apiUrl, anonymousId, push: push && !e.resetting });
+    });
+    nativeStateQueue = operation.catch(() => undefined);
+    await operation;
+}
+let nativeStateQueue = Promise.resolve();
+async function disableNativePushForConsent(e, version) {
+    const operation = nativeStateQueue.then(async () => {
+        if (e.consent.get().version !== version || e.consent.allowsPush())
+            return;
+        await UserGistPushNative.disablePush();
+    });
+    nativeStateQueue = operation.catch(() => undefined);
+    await operation;
+}
 function requireEngine() {
     if (!engine) {
         throw new Error('UserGist.init must be called before using the SDK');
@@ -116,7 +145,7 @@ function attachEnginePushListeners() {
             try {
                 const platform = (p.platform === 'ios' ? 'ios' : 'android');
                 await UserGist.registerPushToken(p.token, platform, {
-                    environment: lastEnablePushOptions?.environment ?? defaultEnvironment(),
+                    environment: lastEnablePushOptions?.environment ?? await UserGistPushNative.defaultEnvironment() ?? defaultEnvironment(),
                 });
             }
             catch (err) {
@@ -130,12 +159,18 @@ function attachEnginePushListeners() {
     onNotificationReceived((p) => {
         forwardToPushHandler(p, 'received');
     });
+    onNotificationDisplayed(p => forwardToPushHandler(p, 'displayed'));
+    onNotificationDismissed(p => forwardToPushHandler(p, 'dismissed'));
     onNotificationOpened((p) => {
         forwardToPushHandler(p, 'opened');
     });
 }
 function forwardToPushHandler(p, kind) {
+    if (!engine?.consent.allowsPush() || engine.resetting)
+        return;
     const data = p.data ?? {};
+    if (data.usergist_anonymous_id && data.usergist_anonymous_id !== engine.identity.get().anonymousId)
+        return;
     if (p.deliveryId) {
         ;
         data.usergist_delivery_id = p.deliveryId;
@@ -153,6 +188,12 @@ function forwardToPushHandler(p, kind) {
         if (kind === 'received') {
             Push.handleReceived({ userInfo, notification: { title: p.title, body: p.body } });
         }
+        else if (kind === 'displayed') {
+            Push.handleDisplayed({ userInfo });
+        }
+        else if (kind === 'dismissed') {
+            Push.handleDismissed({ userInfo });
+        }
         else {
             Push.handleOpened({ userInfo, actionIdentifier: p.actionIdentifier });
         }
@@ -165,6 +206,12 @@ function forwardToPushHandler(p, kind) {
         if (kind === 'received') {
             Push.handleReceived({ data: dataStr, notification: { title: p.title, body: p.body } });
         }
+        else if (kind === 'displayed') {
+            Push.handleDisplayed({ data: dataStr });
+        }
+        else if (kind === 'dismissed') {
+            Push.handleDismissed({ data: dataStr });
+        }
         else {
             Push.handleOpened({ data: dataStr, actionIdentifier: p.actionIdentifier });
         }
@@ -202,6 +249,8 @@ export const UserGist = {
                 if (result !== 'synced')
                     return result;
             }
+            await hydratePushDedupe(e.config.writeKey, e.identity.get().anonymousId);
+            await syncNativePushState(e);
             await startRuntime(e);
             return 'synced';
         }
@@ -221,6 +270,8 @@ export const UserGist = {
             }
             const e = requireEngine();
             await ensureHydrated(e);
+            if (e.resetting)
+                return 'rejected';
             const identity = e.identity.get();
             const pendingIdentity = e.mutations.peek();
             const transition = validateIdentifyTransition(identity.externalId, pendingIdentity?.kind === 'identify' ? pendingIdentity.payload.externalId : null, userId);
@@ -252,6 +303,7 @@ export const UserGist = {
                 debugLog('identify is saved locally and pending retry');
                 return 'queued';
             }
+            await syncNativePushState(e);
             void UserGist.rebindPushToken(userId);
             return 'synced';
         }
@@ -278,7 +330,29 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
+            if (e.resetting)
+                return false;
             const next = await e.consent.set(purposes);
+            if (e.resetting || next.version !== e.consent.get().version)
+                return false;
+            if (!next.feedback) {
+                requestsCache = null;
+                e.events.emit('dismissRequests', undefined);
+            }
+            await syncNativePushState(e);
+            if (e.resetting || next.version !== e.consent.get().version)
+                return false;
+            if (purposes.push === false) {
+                lastEnablePushOptions = null;
+                await pushRegistrationQueue;
+                if (e.resetting || next.version !== e.consent.get().version)
+                    return false;
+                if (e.lastPushToken)
+                    await UserGist.invalidatePushToken(e.lastPushToken);
+                await disableNativePushForConsent(e, next.version);
+            }
+            if (e.resetting || next.version !== e.consent.get().version)
+                return false;
             const id = e.identity.get();
             try {
                 await e.transport.consent({
@@ -318,13 +392,18 @@ export const UserGist = {
                 return resetPromise ?? Promise.resolve();
             e.resetting = true;
             e.resetGeneration += 1;
+            requestsCache = null;
+            lastEnablePushOptions = null;
             e.events.emit('resetSurfaces', undefined);
             const operation = (async () => {
                 await ensureHydrated(e);
+                await syncNativePushState(e, false);
+                await pushRegistrationQueue;
                 if (e.lastPushToken)
                     await UserGist.invalidatePushToken(e.lastPushToken);
                 await UserGistPushNative.disablePush().catch(() => undefined);
                 await clearAllState(e);
+                await hydratePushDedupe(e.config.writeKey, e.identity.get().anonymousId);
             })();
             const finalized = operation
                 .catch((err) => reportError('reset failed', err))
@@ -443,42 +522,48 @@ export const UserGist = {
                 return;
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsPush())
-                return;
-            // Consent is enforced server-side (the register-token route reads
-            // consent_log and refuses if push was explicitly declined). We no
-            // longer short-circuit here because the host app typically calls
-            // setConsent and registerPushToken in parallel; racing the local
-            // consent hydration is not our problem to solve.
-            const id = e.identity.get();
-            const environment = opts?.environment ??
-                (e.config.environment === 'production' ? 'production' : 'sandbox');
-            const registrationKey = [
-                id.anonymousId,
-                id.externalId ?? '',
-                platform,
-                environment,
-                token,
-            ].join(':');
-            if (e.lastPushRegistrationKey === registrationKey &&
-                Date.now() - e.lastPushRegistrationAt < 24 * 60 * 60_000)
+            if (!e.consent.allowsPush() || e.resetting)
                 return;
-            await e.transport.pushRegisterToken({
-                anonymousId: id.anonymousId,
-                externalId: id.externalId ?? null,
-                token,
-                platform,
-                environment,
-                language: undefined,
-                timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
-                appVersion: undefined,
-                sdkVersion: `rn-${USERGIST_SDK_VERSION}`,
-                optIn: true,
+            const generation = e.resetGeneration;
+            await serializePushRegistration(async () => {
+                if (e.resetting || generation !== e.resetGeneration || !e.consent.allowsPush())
+                    return;
+                const id = e.identity.get();
+                const environment = opts?.environment ?? await UserGistPushNative.defaultEnvironment() ??
+                    (e.config.environment === 'production' ? 'production' : 'sandbox');
+                const registrationKey = [
+                    id.anonymousId,
+                    id.externalId ?? '',
+                    platform,
+                    environment,
+                    token,
+                ].join(':');
+                if (e.lastPushRegistrationKey === registrationKey &&
+                    Date.now() - e.lastPushRegistrationAt < 24 * 60 * 60_000)
+                    return;
+                if (e.resetting || generation !== e.resetGeneration || !e.consent.allowsPush())
+                    return;
+                // Persist before the request so logout can invalidate a token even when
+                // the response is lost or the process exits after the server accepts it.
+                e.lastPushToken = token;
+                await e.storage.setJson(STORAGE_KEYS.pushToken, token);
+                await e.transport.pushRegisterToken({
+                    anonymousId: id.anonymousId,
+                    externalId: id.externalId ?? null,
+                    token,
+                    platform,
+                    environment,
+                    language: undefined,
+                    timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+                    appVersion: undefined,
+                    sdkVersion: `rn-${USERGIST_SDK_VERSION}`,
+                    optIn: true,
+                });
+                e.lastPushToken = token;
+                e.lastPushRegistrationKey = registrationKey;
+                e.lastPushRegistrationAt = Date.now();
+                debugLog('push token registered with server');
             });
-            e.lastPushToken = token;
-            e.lastPushRegistrationKey = registrationKey;
-            e.lastPushRegistrationAt = Date.now();
-            debugLog('push token registered with server');
         }
         catch (err) {
             reportError('registerPushToken failed', err);
@@ -491,6 +576,8 @@ export const UserGist = {
             const e = requireEngine();
             await ensureHydrated(e);
             const id = e.identity.get();
+            e.lastPushRegistrationKey = null;
+            e.lastPushRegistrationAt = 0;
             await e.transport.pushInvalidateToken({
                 anonymousId: id.anonymousId,
                 token,
@@ -510,14 +597,19 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            const id = e.identity.get();
-            const token = e.lastPushToken;
-            if (!token)
-                return;
-            await e.transport.pushRebind({
-                anonymousId: id.anonymousId,
-                externalId,
-                token,
+            const generation = e.resetGeneration;
+            await serializePushRegistration(async () => {
+                if (generation !== e.resetGeneration)
+                    return;
+                const id = e.identity.get();
+                const token = e.lastPushToken;
+                if (!token || e.resetting || !e.consent.allowsPush() || id.externalId !== externalId)
+                    return;
+                await e.transport.pushRebind({
+                    anonymousId: id.anonymousId,
+                    externalId,
+                    token,
+                });
             });
         }
         catch (err) {
@@ -608,6 +700,18 @@ export const UserGist = {
     // react-native-onesignal, WonderPush, or any other push SDK.
     async enablePush(opts) {
         try {
+            const e = requireEngine();
+            await ensureHydrated(e);
+            if (!e.consent.allowsPush() || e.resetting)
+                return { granted: false, status: 'not_determined', platform: Platform.OS === 'ios' ? 'ios' : 'android', error: 'consent_required' };
+            const generation = e.resetGeneration;
+            const consentVersion = e.consent.get().version;
+            const current = () => !e.resetting && generation === e.resetGeneration && consentVersion === e.consent.get().version && e.consent.allowsPush();
+            const cancelled = () => ({ granted: false, status: 'not_determined', platform: Platform.OS === 'ios' ? 'ios' : 'android', error: 'session_changed' });
+            opts = { ...opts, environment: opts?.environment ?? await UserGistPushNative.defaultEnvironment() ?? defaultEnvironment() };
+            await syncNativePushState(e);
+            if (!current())
+                return cancelled();
             if (!enginePushListenersAttached)
                 attachEnginePushListeners();
             // Snapshot the caller's options so the AppState foreground listener
@@ -618,6 +722,10 @@ export const UserGist = {
                 installDelegateProxy: opts?.installDelegateProxy,
             };
             const result = await UserGistPushNative.enablePush(opts ?? {});
+            // Reset/withdrawal owns native cleanup. An old permission callback must
+            // not disable a new account's subsequently enabled notification adapter.
+            if (!current())
+                return cancelled();
             // Server-side registration runs on the tokenReceived event; if the
             // native module already had a cached token it surfaces here.
             if (result.granted && result.token) {
@@ -632,23 +740,19 @@ export const UserGist = {
             reportError('enablePush failed', err);
             return {
                 granted: false,
-                status: 'denied',
-                platform: (typeof navigator === 'object' && navigator.product === 'ReactNative' ? 'ios' : 'android'),
+                status: 'not_determined',
+                error: 'push_setup_failed',
+                platform: Platform.OS === 'ios' ? 'ios' : 'android',
             };
         }
     },
     async disablePush() {
+        lastEnablePushOptions = null;
         try {
-            const e = engine;
-            if (e?.lastPushToken)
-                await UserGist.invalidatePushToken(e.lastPushToken);
-            await UserGistPushNative.disablePush();
-            if (e) {
-                e.lastPushToken = null;
-                e.lastPushRegistrationKey = null;
-                e.lastPushRegistrationAt = 0;
-                void UserGist.setConsent({ push: false });
-            }
+            if (engine)
+                await UserGist.setConsent({ push: false });
+            else
+                await UserGistPushNative.disablePush();
         }
         catch (err) {
             reportError('disablePush failed', err);
@@ -949,6 +1053,9 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
+            if (e.resetting || !e.consent.allowsFeedback())
+                return { items: [], nextCursor: null };
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const result = await e.transport.requestsList({
                 anonymousId: id.anonymousId,
@@ -960,6 +1067,8 @@ export const UserGist = {
                 cursor: options.cursor ?? null,
                 limit: options.limit,
             });
+            if (!current())
+                return { items: [], nextCursor: null };
             ensureRequestsCache().upsertList(result.items.map((s) => ({
                 id: s.id,
                 appId: '',
@@ -1000,10 +1109,11 @@ export const UserGist = {
             void (async () => {
                 try {
                     await ensureHydrated(e);
-                    if (!e.consent.allowsFeedback()) {
+                    if (e.resetting || !e.consent.allowsFeedback()) {
                         callback?.(new Error('feedback consent required'));
                         return;
                     }
+                    const current = requestSessionIsCurrent(e);
                     const id = e.identity.get();
                     const req = await e.transport.requestSubmit({
                         idempotencyKey: generateEventId(),
@@ -1012,6 +1122,10 @@ export const UserGist = {
                         title,
                         description,
                     });
+                    if (!current()) {
+                        callback?.(new Error('Request cancelled by identity or consent change'));
+                        return;
+                    }
                     ensureRequestsCache().upsert(req);
                     recordServerBackedEventLocally(e, '$request_submitted');
                     requestsHandlers.onSubmit?.(req);
@@ -1031,11 +1145,12 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
             const cache = ensureRequestsCache();
             const rollback = cache.applyOptimisticVote(requestId, vote);
             try {
+                const current = requestSessionIsCurrent(e);
                 const id = e.identity.get();
                 const result = await e.transport.requestVote({
                     requestId,
@@ -1043,6 +1158,10 @@ export const UserGist = {
                     externalId: id.externalId ?? null,
                     vote,
                 });
+                if (!current()) {
+                    rollback();
+                    return;
+                }
                 cache.commitVote(requestId, result);
                 recordServerBackedEventLocally(e, vote ? '$request_upvoted' : '$request_unupvoted');
                 requestsHandlers.onVote?.(result);
@@ -1060,11 +1179,12 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
             const cache = ensureRequestsCache();
             const rollback = cache.applyOptimisticFollow(requestId, follow);
             try {
+                const current = requestSessionIsCurrent(e);
                 const id = e.identity.get();
                 const result = await e.transport.requestFollow({
                     requestId,
@@ -1072,6 +1192,10 @@ export const UserGist = {
                     externalId: id.externalId ?? null,
                     follow,
                 });
+                if (!current()) {
+                    rollback();
+                    return;
+                }
                 cache.commitFollow(requestId, result);
                 recordServerBackedEventLocally(e, follow ? '$request_followed' : '$request_unfollowed');
                 requestsHandlers.onFollow?.(result);
@@ -1095,9 +1219,11 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return null;
-            return await e.transport.requestBranding();
+            const current = requestSessionIsCurrent(e);
+            const branding = await e.transport.requestBranding();
+            return current() ? branding : null;
         }
         catch (err) {
             reportError('getRequestBranding failed', err);
@@ -1114,14 +1240,17 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return null;
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const req = await e.transport.requestGet({
                 requestId,
                 anonymousId: id.anonymousId,
                 externalId: id.externalId ?? null,
             });
+            if (!current())
+                return null;
             ensureRequestsCache().upsert(req);
             return req;
         }
@@ -1133,7 +1262,7 @@ export const UserGist = {
     openRequestsBoard() {
         try {
             const e = requireEngine();
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
             e.events.emit('showRequestsBoard', undefined);
         }
@@ -1144,7 +1273,7 @@ export const UserGist = {
     openRequestDetail(requestId) {
         try {
             const e = requireEngine();
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
             e.events.emit('showRequestDetail', { requestId });
         }
@@ -1161,15 +1290,16 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return [];
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const result = await e.transport.requestCommentsList({
                 requestId,
                 anonymousId: id.anonymousId,
                 externalId: id.externalId ?? null,
             });
-            return result.items;
+            return current() ? result.items : [];
         }
         catch (err) {
             reportError('getComments failed', err);
@@ -1182,8 +1312,9 @@ export const UserGist = {
             const e = requireEngine();
             validateCommentBody(body);
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return null;
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const comment = await e.transport.requestCommentPost({
                 idempotencyKey: generateEventId(),
@@ -1192,6 +1323,8 @@ export const UserGist = {
                 externalId: id.externalId ?? null,
                 body,
             });
+            if (!current())
+                return null;
             recordServerBackedEventLocally(e, REQUEST_COMMENTED_EVENT_NAME);
             return comment;
         }
@@ -1206,8 +1339,9 @@ export const UserGist = {
             const e = requireEngine();
             validateCommentBody(body);
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return null;
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const comment = await e.transport.requestCommentEdit({
                 requestId,
@@ -1215,6 +1349,8 @@ export const UserGist = {
                 anonymousId: id.anonymousId,
                 body,
             });
+            if (!current())
+                return null;
             recordServerBackedEventLocally(e, REQUEST_COMMENT_EDITED_EVENT_NAME);
             return comment;
         }
@@ -1228,14 +1364,17 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             await e.transport.requestCommentDelete({
                 requestId,
                 commentId,
                 anonymousId: id.anonymousId,
             });
+            if (!current())
+                return;
             recordServerBackedEventLocally(e, REQUEST_COMMENT_DELETED_EVENT_NAME);
         }
         catch (err) {