@usergist/feedback-react-native 0.1.2 → 0.2.0-beta.1

package/dist/UserGist.js

@@ -1,28 +1,28 @@
-// UserGist — public singleton facade.
-//
-// Philosophy:
-//  - `init()` remains synchronous and backwards compatible. `initAsync()` can
-//    bind a server-proven identity before any lifecycle event is emitted.
-//  - All public methods catch their own errors and report via debug. The
-//    SDK never throws across its boundary.
-//  - Track is synchronous for the caller: it enqueues, schedules a flush,
-//    and runs the trigger matcher — zero awaits.
+import { userPropertiesUpdateSchema } from '@usergist/sdk-core/mobile';
+import { hydratePushDedupe } from './internal/push-dedupe.js';
 import { REQUEST_COMMENTED_EVENT_NAME, REQUEST_COMMENT_EDITED_EVENT_NAME, REQUEST_COMMENT_DELETED_EVENT_NAME, } from '@usergist/sdk-core/mobile';
 import { asEventProps, clearAllState, createEngine, emitAppOpenWhenConsentReady, emitAppVersionChanged, ensureHydrated, enqueueAndEvaluate, flushNow, flushMutations, pollInstructions, refreshTargetingRules, recordServerBackedEventLocally, submitResponse, } from './internal/engine.js';
 import { setDebugEnabled, reportError, debugLog, logTrace, getTraces, setDiagnosticHandler, } from './internal/debug.js';
 import { DEFAULT_THEME, mergeTheme } from './ui/theme.js';
 import { createSurveyStore } from './internal/survey-store.js';
-import { UserGistPushNative, onTokenReceived, onNotificationReceived, onNotificationOpened, onTokenError, } from './native/push-bridge.js';
+import { UserGistPushNative, onTokenReceived, onNotificationReceived, onNotificationOpened, onNotificationDisplayed, onNotificationDismissed, onTokenError, } from './native/push-bridge.js';
 import { Push } from './Push.js';
 import { AppState, Platform } from 'react-native';
-import { generateEventId, validateIdentifyTransition } from './internal/identity.js';
-import { configureStorageAdapter, } from './internal/storage.js';
+import { generateEventId, validateIdentifyTransition, } from './internal/identity.js';
+import { configureStorageAdapter, STORAGE_KEYS, } from './internal/storage.js';
 import { surveyCompletionOutcome } from './internal/survey-completion.js';
 import { USERGIST_SDK_VERSION } from './internal/context.js';
 let engine = null;
+let pushRegistrationQueue = Promise.resolve();
+function serializePushRegistration(operation) {
+    const task = pushRegistrationQueue.then(operation);
+    pushRegistrationQueue = task.catch(() => undefined);
+    return task;
+}
 let runtimeStarted = false;
 let runtimeStartPromise = null;
 let resetPromise = null;
+const surveyStarts = new Map();
 let surveyStore = null;
 let surveyHandlers = {};
 let inAppHandlers = {};
@@ -37,6 +37,46 @@ function ensureRequestsCache() {
     }
     return requestsCache;
 }
+function requestSessionIsCurrent(e) {
+    const generation = e.resetGeneration;
+    const consentVersion = e.consent.get().version;
+    const identity = e.identity.get();
+    return () => !e.resetting &&
+        generation === e.resetGeneration &&
+        consentVersion === e.consent.get().version &&
+        e.consent.allowsFeedback() &&
+        identity.anonymousId === e.identity.get().anonymousId &&
+        identity.externalId === e.identity.get().externalId;
+}
+async function syncNativePushState(e, push = e.consent.allowsPush()) {
+    const anonymousId = e.identity.get().anonymousId;
+    const generation = e.resetGeneration;
+    const version = e.consent.get().version;
+    const operation = nativeStateQueue.then(async () => {
+        if (generation !== e.resetGeneration ||
+            anonymousId !== e.identity.get().anonymousId ||
+            version !== e.consent.get().version)
+            return;
+        await UserGistPushNative.syncState({
+            writeKey: e.config.writeKey,
+            apiUrl: e.config.apiUrl,
+            anonymousId,
+            push: push && !e.resetting,
+        });
+    });
+    nativeStateQueue = operation.catch(() => undefined);
+    await operation;
+}
+let nativeStateQueue = Promise.resolve();
+async function disableNativePushForConsent(e, version) {
+    const operation = nativeStateQueue.then(async () => {
+        if (e.consent.get().version !== version || e.consent.allowsPush())
+            return;
+        await UserGistPushNative.disablePush();
+    });
+    nativeStateQueue = operation.catch(() => undefined);
+    await operation;
+}
 function requireEngine() {
     if (!engine) {
         throw new Error('UserGist.init must be called before using the SDK');
@@ -46,8 +86,10 @@ function requireEngine() {
 function ensureEngine(config) {
     if (engine)
         return engine;
-    engine = createEngine(config);
-    surveyStore = createSurveyStore(config.writeKey);
+    // A host-owned invitation is not a survey start. Only automatic rendering
+    // requests a session bundled with the delivery authorization.
+    engine = createEngine(config, () => !surveyHandlers.onInvite);
+    surveyStore = createSurveyStore(config.writeKey, () => engine.identity.get());
     return engine;
 }
 async function startRuntime(e) {
@@ -116,7 +158,9 @@ function attachEnginePushListeners() {
             try {
                 const platform = (p.platform === 'ios' ? 'ios' : 'android');
                 await UserGist.registerPushToken(p.token, platform, {
-                    environment: lastEnablePushOptions?.environment ?? defaultEnvironment(),
+                    environment: lastEnablePushOptions?.environment ??
+                        (await UserGistPushNative.defaultEnvironment()) ??
+                        defaultEnvironment(),
                 });
             }
             catch (err) {
@@ -130,12 +174,19 @@ function attachEnginePushListeners() {
     onNotificationReceived((p) => {
         forwardToPushHandler(p, 'received');
     });
+    onNotificationDisplayed((p) => forwardToPushHandler(p, 'displayed'));
+    onNotificationDismissed((p) => forwardToPushHandler(p, 'dismissed'));
     onNotificationOpened((p) => {
         forwardToPushHandler(p, 'opened');
     });
 }
 function forwardToPushHandler(p, kind) {
+    if (!engine?.consent.allowsPush() || engine.resetting)
+        return;
     const data = p.data ?? {};
+    if (data.usergist_anonymous_id &&
+        data.usergist_anonymous_id !== engine.identity.get().anonymousId)
+        return;
     if (p.deliveryId) {
         ;
         data.usergist_delivery_id = p.deliveryId;
@@ -151,7 +202,16 @@ function forwardToPushHandler(p, kind) {
         };
         Object.assign(userInfo, data);
         if (kind === 'received') {
-            Push.handleReceived({ userInfo, notification: { title: p.title, body: p.body } });
+            Push.handleReceived({
+                userInfo,
+                notification: { title: p.title, body: p.body },
+            });
+        }
+        else if (kind === 'displayed') {
+            Push.handleDisplayed({ userInfo });
+        }
+        else if (kind === 'dismissed') {
+            Push.handleDismissed({ userInfo });
         }
         else {
             Push.handleOpened({ userInfo, actionIdentifier: p.actionIdentifier });
@@ -163,7 +223,16 @@ function forwardToPushHandler(p, kind) {
             dataStr[k] = String(v);
         }
         if (kind === 'received') {
-            Push.handleReceived({ data: dataStr, notification: { title: p.title, body: p.body } });
+            Push.handleReceived({
+                data: dataStr,
+                notification: { title: p.title, body: p.body },
+            });
+        }
+        else if (kind === 'displayed') {
+            Push.handleDisplayed({ data: dataStr });
+        }
+        else if (kind === 'dismissed') {
+            Push.handleDismissed({ data: dataStr });
         }
         else {
             Push.handleOpened({ data: dataStr, actionIdentifier: p.actionIdentifier });
@@ -193,9 +262,9 @@ export const UserGist = {
     init(config) {
         void UserGist.initAsync(config);
     },
-    /** Defer campaign UI without stopping analytics or closing active UI. */
+    /** Defer campaign UI without interrupting analytics or an active modal. */
     pausePresentation() { engine?.presentation.setPaused(true); },
-    /** Call after startup loading and navigation have completed. */
+    /** Call after the host's loaded screen and navigation are ready. */
     resumePresentation() { engine?.presentation.setPaused(false); },
     __internal_presentationGate() { return requireEngine().presentation; },
     async initAsync(config, initialIdentity) {
@@ -207,6 +276,8 @@ export const UserGist = {
                 if (result !== 'synced')
                     return result;
             }
+            await hydratePushDedupe(e.config.writeKey, e.identity.get().anonymousId);
+            await syncNativePushState(e);
             await startRuntime(e);
             return 'synced';
         }
@@ -226,14 +297,20 @@ export const UserGist = {
             }
             const e = requireEngine();
             await ensureHydrated(e);
+            if (e.resetting)
+                return 'rejected';
             const identity = e.identity.get();
             const pendingIdentity = e.mutations.peek();
-            const transition = validateIdentifyTransition(identity.externalId, pendingIdentity?.kind === 'identify' ? pendingIdentity.payload.externalId : null, userId);
+            const transition = validateIdentifyTransition(identity.externalId, pendingIdentity?.kind === 'identify'
+                ? pendingIdentity.payload.externalId
+                : null, userId);
             if (transition === 'reset_required') {
                 reportError('identify rejected: call reset() before switching users');
                 return 'rejected';
             }
-            const cleanProps = e.consent.allowsAnalytics() ? asEventProps(properties) : undefined;
+            const cleanProps = e.consent.allowsAnalytics()
+                ? asEventProps(properties)
+                : undefined;
             if (transition === 'already_identified' &&
                 (!cleanProps || Object.keys(cleanProps).length === 0)) {
                 return 'synced';
@@ -257,6 +334,7 @@ export const UserGist = {
                 debugLog('identify is saved locally and pending retry');
                 return 'queued';
             }
+            await syncNativePushState(e);
             void UserGist.rebindPushToken(userId);
             return 'synced';
         }
@@ -265,6 +343,33 @@ export const UserGist = {
             return 'rejected';
         }
     },
+    /** Update the current user, including anonymous users. Durable and retried on reconnect. */
+    async setUserProperties(properties, unset = []) {
+        try {
+            const e = requireEngine();
+            const generation = e.resetGeneration;
+            await ensureHydrated(e);
+            if (e !== engine ||
+                e.resetting ||
+                e.resetGeneration !== generation ||
+                !e.consent.allowsAnalytics())
+                return 'rejected';
+            const update = userPropertiesUpdateSchema.parse({
+                mutationId: generateEventId(),
+                set: properties,
+                unset: [...unset],
+            });
+            const mutationId = await e.mutations.enqueue('user-properties', 'analytics', { ...update, anonymousId: e.identity.get().anonymousId });
+            const result = await flushMutations(e);
+            if (result.permanentlyRejectedIds.has(mutationId))
+                return 'rejected';
+            return e.mutations.has(mutationId) ? 'queued' : 'synced';
+        }
+        catch (error) {
+            reportError('setUserProperties failed', error);
+            return 'rejected';
+        }
+    },
     track(eventName, properties) {
         try {
             if (typeof eventName !== 'string' || eventName.length === 0) {
@@ -287,7 +392,29 @@ export const UserGist = {
             if (purposes.survey === false)
                 e.presentation.invalidate('survey');
             await ensureHydrated(e);
+            if (e.resetting)
+                return false;
             const next = await e.consent.set(purposes);
+            if (e.resetting || next.version !== e.consent.get().version)
+                return false;
+            if (!next.feedback) {
+                requestsCache = null;
+                e.events.emit('dismissRequests', undefined);
+            }
+            await syncNativePushState(e);
+            if (e.resetting || next.version !== e.consent.get().version)
+                return false;
+            if (purposes.push === false) {
+                lastEnablePushOptions = null;
+                await pushRegistrationQueue;
+                if (e.resetting || next.version !== e.consent.get().version)
+                    return false;
+                if (e.lastPushToken)
+                    await UserGist.invalidatePushToken(e.lastPushToken);
+                await disableNativePushForConsent(e, next.version);
+            }
+            if (e.resetting || next.version !== e.consent.get().version)
+                return false;
             const id = e.identity.get();
             try {
                 await e.transport.consent({
@@ -328,13 +455,19 @@ export const UserGist = {
             e.resetting = true;
             e.resetGeneration += 1;
             e.presentation.invalidate();
+            requestsCache = null;
+            lastEnablePushOptions = null;
             e.events.emit('resetSurfaces', undefined);
             const operation = (async () => {
                 await ensureHydrated(e);
+                await syncNativePushState(e, false);
+                await pushRegistrationQueue;
                 if (e.lastPushToken)
                     await UserGist.invalidatePushToken(e.lastPushToken);
                 await UserGistPushNative.disablePush().catch(() => undefined);
                 await clearAllState(e);
+                await surveyStore?.clear();
+                await hydratePushDedupe(e.config.writeKey, e.identity.get().anonymousId);
             })();
             const finalized = operation
                 .catch((err) => reportError('reset failed', err))
@@ -453,42 +586,53 @@ export const UserGist = {
                 return;
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsPush())
-                return;
-            // Consent is enforced server-side (the register-token route reads
-            // consent_log and refuses if push was explicitly declined). We no
-            // longer short-circuit here because the host app typically calls
-            // setConsent and registerPushToken in parallel; racing the local
-            // consent hydration is not our problem to solve.
-            const id = e.identity.get();
-            const environment = opts?.environment ??
-                (e.config.environment === 'production' ? 'production' : 'sandbox');
-            const registrationKey = [
-                id.anonymousId,
-                id.externalId ?? '',
-                platform,
-                environment,
-                token,
-            ].join(':');
-            if (e.lastPushRegistrationKey === registrationKey &&
-                Date.now() - e.lastPushRegistrationAt < 24 * 60 * 60_000)
+            if (!e.consent.allowsPush() || e.resetting)
                 return;
-            await e.transport.pushRegisterToken({
-                anonymousId: id.anonymousId,
-                externalId: id.externalId ?? null,
-                token,
-                platform,
-                environment,
-                language: undefined,
-                timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
-                appVersion: undefined,
-                sdkVersion: `rn-${USERGIST_SDK_VERSION}`,
-                optIn: true,
+            const generation = e.resetGeneration;
+            await serializePushRegistration(async () => {
+                if (e.resetting ||
+                    generation !== e.resetGeneration ||
+                    !e.consent.allowsPush())
+                    return;
+                const id = e.identity.get();
+                const environment = opts?.environment ??
+                    (await UserGistPushNative.defaultEnvironment()) ??
+                    (e.config.environment === 'production' ? 'production' : 'sandbox');
+                const registrationKey = [
+                    id.anonymousId,
+                    id.externalId ?? '',
+                    platform,
+                    environment,
+                    token,
+                ].join(':');
+                if (e.lastPushRegistrationKey === registrationKey &&
+                    Date.now() - e.lastPushRegistrationAt < 24 * 60 * 60_000)
+                    return;
+                if (e.resetting ||
+                    generation !== e.resetGeneration ||
+                    !e.consent.allowsPush())
+                    return;
+                // Persist before the request so logout can invalidate a token even when
+                // the response is lost or the process exits after the server accepts it.
+                e.lastPushToken = token;
+                await e.storage.setJson(STORAGE_KEYS.pushToken, token);
+                await e.transport.pushRegisterToken({
+                    anonymousId: id.anonymousId,
+                    externalId: id.externalId ?? null,
+                    token,
+                    platform,
+                    environment,
+                    language: undefined,
+                    timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+                    appVersion: undefined,
+                    sdkVersion: `rn-${USERGIST_SDK_VERSION}`,
+                    optIn: true,
+                });
+                e.lastPushToken = token;
+                e.lastPushRegistrationKey = registrationKey;
+                e.lastPushRegistrationAt = Date.now();
+                debugLog('push token registered with server');
             });
-            e.lastPushToken = token;
-            e.lastPushRegistrationKey = registrationKey;
-            e.lastPushRegistrationAt = Date.now();
-            debugLog('push token registered with server');
         }
         catch (err) {
             reportError('registerPushToken failed', err);
@@ -501,6 +645,8 @@ export const UserGist = {
             const e = requireEngine();
             await ensureHydrated(e);
             const id = e.identity.get();
+            e.lastPushRegistrationKey = null;
+            e.lastPushRegistrationAt = 0;
             await e.transport.pushInvalidateToken({
                 anonymousId: id.anonymousId,
                 token,
@@ -520,14 +666,22 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            const id = e.identity.get();
-            const token = e.lastPushToken;
-            if (!token)
-                return;
-            await e.transport.pushRebind({
-                anonymousId: id.anonymousId,
-                externalId,
-                token,
+            const generation = e.resetGeneration;
+            await serializePushRegistration(async () => {
+                if (generation !== e.resetGeneration)
+                    return;
+                const id = e.identity.get();
+                const token = e.lastPushToken;
+                if (!token ||
+                    e.resetting ||
+                    !e.consent.allowsPush() ||
+                    id.externalId !== externalId)
+                    return;
+                await e.transport.pushRebind({
+                    anonymousId: id.anonymousId,
+                    externalId,
+                    token,
+                });
             });
         }
         catch (err) {
@@ -618,6 +772,36 @@ export const UserGist = {
     // react-native-onesignal, WonderPush, or any other push SDK.
     async enablePush(opts) {
         try {
+            const e = requireEngine();
+            await ensureHydrated(e);
+            if (!e.consent.allowsPush() || e.resetting)
+                return {
+                    granted: false,
+                    status: 'not_determined',
+                    platform: Platform.OS === 'ios' ? 'ios' : 'android',
+                    error: 'consent_required',
+                };
+            const generation = e.resetGeneration;
+            const consentVersion = e.consent.get().version;
+            const current = () => !e.resetting &&
+                generation === e.resetGeneration &&
+                consentVersion === e.consent.get().version &&
+                e.consent.allowsPush();
+            const cancelled = () => ({
+                granted: false,
+                status: 'not_determined',
+                platform: Platform.OS === 'ios' ? 'ios' : 'android',
+                error: 'session_changed',
+            });
+            opts = {
+                ...opts,
+                environment: opts?.environment ??
+                    (await UserGistPushNative.defaultEnvironment()) ??
+                    defaultEnvironment(),
+            };
+            await syncNativePushState(e);
+            if (!current())
+                return cancelled();
             if (!enginePushListenersAttached)
                 attachEnginePushListeners();
             // Snapshot the caller's options so the AppState foreground listener
@@ -628,12 +812,16 @@ export const UserGist = {
                 installDelegateProxy: opts?.installDelegateProxy,
             };
             const result = await UserGistPushNative.enablePush(opts ?? {});
+            // Reset/withdrawal owns native cleanup. An old permission callback must
+            // not disable a new account's subsequently enabled notification adapter.
+            if (!current())
+                return cancelled();
             // Server-side registration runs on the tokenReceived event; if the
             // native module already had a cached token it surfaces here.
             if (result.granted && result.token) {
                 const platform = (result.platform === 'ios' ? 'ios' : 'android');
                 await UserGist.registerPushToken(result.token, platform, {
-                    environment: opts?.environment ?? (defaultEnvironment()),
+                    environment: opts?.environment ?? defaultEnvironment(),
                 });
             }
             return result;
@@ -642,23 +830,19 @@ export const UserGist = {
             reportError('enablePush failed', err);
             return {
                 granted: false,
-                status: 'denied',
-                platform: (typeof navigator === 'object' && navigator.product === 'ReactNative' ? 'ios' : 'android'),
+                status: 'not_determined',
+                error: 'push_setup_failed',
+                platform: Platform.OS === 'ios' ? 'ios' : 'android',
             };
         }
     },
     async disablePush() {
+        lastEnablePushOptions = null;
         try {
-            const e = engine;
-            if (e?.lastPushToken)
-                await UserGist.invalidatePushToken(e.lastPushToken);
-            await UserGistPushNative.disablePush();
-            if (e) {
-                e.lastPushToken = null;
-                e.lastPushRegistrationKey = null;
-                e.lastPushRegistrationAt = 0;
-                void UserGist.setConsent({ push: false });
-            }
+            if (engine)
+                await UserGist.setConsent({ push: false });
+            else
+                await UserGistPushNative.disablePush();
         }
         catch (err) {
             reportError('disablePush failed', err);
@@ -717,10 +901,20 @@ export const UserGist = {
                 debugLog('openSurvey: survey consent not granted; ignoring');
                 return;
             }
+            const generation = e.resetGeneration;
+            const identity = e.identity.get();
+            const consentVersion = e.consent.get().version;
+            const invitation = await e.surveyInvitations.find(surveyId);
+            if (e.resetting || e.resetGeneration !== generation ||
+                !e.consent.allowsSurvey() || e.consent.get().version !== consentVersion ||
+                e.identity.get().anonymousId !== identity.anonymousId ||
+                e.identity.get().externalId !== identity.externalId)
+                return;
             e.events.emit('showSurvey', {
                 surveyId,
-                source: context?.source ?? 'on_demand',
+                source: context?.source ?? invitation?.source ?? 'on_demand',
                 ...(context?.language ? { language: context.language } : {}),
+                ...(invitation ? { survey: invitation.survey, attempt: invitation.attempt } : {}),
             });
         }
         catch (err) {
@@ -738,7 +932,8 @@ export const UserGist = {
             const e = requireEngine();
             await ensureHydrated(e);
             // Accept URLs of the shape `*://*/s/<token>` or `*survey=<token>`.
-            const match = url.match(/\/s\/([A-Za-z0-9._-]+)/) ?? url.match(/[?&]survey=([A-Za-z0-9._-]+)/);
+            const match = url.match(/\/s\/([A-Za-z0-9._-]+)/) ??
+                url.match(/[?&]survey=([A-Za-z0-9._-]+)/);
             if (!match || !match[1])
                 return false;
             const token = match[1];
@@ -755,7 +950,10 @@ export const UserGist = {
                 debugLog('survey link resolved but consent required — awaiting consent');
                 return false;
             }
-            e.events.emit('showSurvey', { surveyId: resolved.surveyId, source: 'link' });
+            e.events.emit('showSurvey', {
+                surveyId: resolved.surveyId,
+                source: 'link',
+            });
             return true;
         }
         catch (err) {
@@ -808,6 +1006,9 @@ export const UserGist = {
             reportError('reportSurveyShown failed', err);
         }
     },
+    __internal_surveyOpenFailed(surveyId) {
+        engine?.surveyMatcher.cancelPending(surveyId);
+    },
     __internal_armedSurveyById(surveyId) {
         // Local-fire fast-path. If the survey-rules-cache already has the
         // full survey content (because the matcher just fired), the
@@ -828,6 +1029,11 @@ export const UserGist = {
             const e = requireEngine();
             await ensureHydrated(e);
             const id = e.identity.get();
+            const pending = await surveyStore?.findForSurvey(surveyId);
+            if (pending?.survey &&
+                Date.now() - pending.startedAt <
+                    pending.survey.saveResumeWindowSeconds * 1000)
+                return pending.survey;
             return await e.transport.surveyGet({
                 surveyId,
                 anonymousId: id.anonymousId,
@@ -840,52 +1046,169 @@ export const UserGist = {
             return null;
         }
     },
-    async __internal_createAttempt(surveyId, source, language) {
+    async __internal_createAttempt(surveyId, source, language, presentationId, content, preparedAttempt) {
+        const active = requireEngine();
+        const identity = active.identity.get();
+        const key = JSON.stringify([
+            active.resetGeneration,
+            identity.anonymousId,
+            identity.externalId,
+            surveyId,
+            language,
+            presentationId,
+            preparedAttempt?.attemptId,
+        ]);
+        const pending = surveyStarts.get(key);
+        if (pending)
+            return pending;
+        const operation = (async () => {
+            try {
+                const e = requireEngine();
+                await ensureHydrated(e);
+                const id = e.identity.get();
+                const generation = e.resetGeneration;
+                const consentVersion = e.consent.get().version;
+                const current = () => !e.resetting &&
+                    e.resetGeneration === generation &&
+                    e.consent.allowsSurvey() &&
+                    e.consent.get().version === consentVersion &&
+                    e.identity.get().anonymousId === id.anonymousId &&
+                    e.identity.get().externalId === id.externalId;
+                if (!current())
+                    return null;
+                const saved = await surveyStore?.findForSurvey(surveyId);
+                if (!current())
+                    return null;
+                // Resuming a durable device session preserves its original content and
+                // answers. Never replace it with a stale network snapshot.
+                if (!preparedAttempt &&
+                    (!presentationId || saved?.attemptId === presentationId) &&
+                    saved?.survey &&
+                    Date.now() - saved.startedAt <
+                        saved.survey.saveResumeWindowSeconds * 1000) {
+                    if (saved.startRequest)
+                        await e.mutations.enqueue('survey-start', 'survey', { surveyId, body: saved.startRequest }, `survey-start:${saved.attemptId}`);
+                    if (!current())
+                        return null;
+                    void flushMutations(e);
+                    return {
+                        attemptId: saved.attemptId,
+                        startQuestionId: saved.survey.flow.startQuestionId,
+                        currentQuestionId: saved.currentQuestionId,
+                        snapshot: saved.snapshot,
+                        resumed: true,
+                        resolvedContent: saved.survey,
+                    };
+                }
+                const armed = !language && !presentationId
+                    ? e.surveyRules.getById(surveyId)
+                    : null;
+                const grant = armed?.localStart &&
+                    Date.parse(armed.localStart.expiresAt) > Date.now()
+                    ? armed.localStart
+                    : null;
+                const body = {
+                    presentationId,
+                    anonymousId: id.anonymousId,
+                    externalId: id.externalId ?? null,
+                    source,
+                    ...(language ? { language } : {}),
+                    sdkVersion: `rn-${USERGIST_SDK_VERSION}`,
+                    platform: e.context.platform(),
+                    ...(presentationId || grant || source === 'triggered' || source === 'scheduled'
+                        ? { resume: false, clientAttemptId: presentationId ?? generateEventId() }
+                        : { resume: true }),
+                    ...(grant
+                        ? {
+                            localStart: {
+                                token: grant.token,
+                                startedAt: new Date().toISOString(),
+                            },
+                        }
+                        : {}),
+                };
+                const res = preparedAttempt ??
+                    (grant && armed
+                        ? {
+                            attemptId: body.clientAttemptId,
+                            startQuestionId: armed.survey.flow.startQuestionId,
+                            currentQuestionId: armed.survey.flow.startQuestionId,
+                            progressSnapshot: {},
+                            resumed: false,
+                            resolvedContent: armed.survey,
+                        }
+                        : await e.transport.surveyCreateAttempt(surveyId, body));
+                if (!current())
+                    return null;
+                await surveyStore?.upsert({
+                    anonymousId: id.anonymousId,
+                    externalId: id.externalId,
+                    survey: res.resolvedContent ?? content,
+                    ...(grant && !preparedAttempt ? { startRequest: body } : {}),
+                    surveyId,
+                    attemptId: res.attemptId,
+                    startedAt: Date.now(),
+                    currentQuestionId: res.currentQuestionId,
+                    snapshot: (res.progressSnapshot ??
+                        {}),
+                    language: language ?? null,
+                });
+                if (!current())
+                    return null;
+                if (presentationId) {
+                    await e.surveyInvitations.remove(presentationId);
+                    if (!current())
+                        return null;
+                }
+                if (grant && !preparedAttempt) {
+                    await e.mutations.enqueue('survey-start', 'survey', { surveyId, body }, `survey-start:${res.attemptId}`);
+                    if (!current())
+                        return null;
+                    void flushMutations(e);
+                }
+                return {
+                    attemptId: res.attemptId,
+                    startQuestionId: res.startQuestionId,
+                    currentQuestionId: res.currentQuestionId,
+                    snapshot: (res.progressSnapshot ??
+                        {}),
+                    resumed: res.resumed,
+                    resolvedContent: res.resolvedContent,
+                };
+            }
+            catch (err) {
+                reportError('createAttempt failed', err);
+                return null;
+            }
+        })();
+        surveyStarts.set(key, operation);
         try {
-            const e = requireEngine();
-            await ensureHydrated(e);
-            // Give a previously deferred completion a chance to reach the server
-            // before asking it to create or resume another attempt.
-            await flushMutations(e);
-            const id = e.identity.get();
-            const res = await e.transport.surveyCreateAttempt(surveyId, {
-                anonymousId: id.anonymousId,
-                externalId: id.externalId ?? null,
-                source,
-                ...(language ? { language } : {}),
-                sdkVersion: `rn-${USERGIST_SDK_VERSION}`,
-            });
-            await surveyStore?.upsert({
-                surveyId,
-                attemptId: res.attemptId,
-                startedAt: Date.now(),
-                currentQuestionId: res.currentQuestionId,
-                snapshot: (res.progressSnapshot ?? {}),
-                language: language ?? null,
-            });
-            return {
-                attemptId: res.attemptId,
-                startQuestionId: res.startQuestionId,
-                currentQuestionId: res.currentQuestionId,
-                snapshot: (res.progressSnapshot ?? {}),
-                resumed: res.resumed,
-            };
+            return await operation;
         }
-        catch (err) {
-            reportError('createAttempt failed', err);
-            return null;
+        finally {
+            if (surveyStarts.get(key) === operation)
+                surveyStarts.delete(key);
         }
     },
     async __internal_saveProgress(attemptId, currentQuestionId, snapshot) {
         // Persist the resume point before attempting the network. Progress is
         // best-effort transport; losing connectivity must not lose local answers.
+        const e = requireEngine();
+        if (e.resetting || !e.consent.allowsSurvey())
+            return;
+        const generation = e.resetGeneration;
+        const pending = (await surveyStore?.list())?.find((a) => a.attemptId === attemptId);
+        if (!pending || e.resetting || e.resetGeneration !== generation)
+            return;
         await surveyStore?.updateProgress(attemptId, currentQuestionId, snapshot);
         try {
-            const e = requireEngine();
-            await e.transport.surveyUpdateProgress(attemptId, {
-                currentQuestionId,
-                progressSnapshot: snapshot,
+            if (e.resetting || e.resetGeneration !== generation)
+                return;
+            await e.mutations.enqueue('survey-progress', 'survey', {
+                attemptId,
+                body: { currentQuestionId, progressSnapshot: snapshot },
             });
+            void flushMutations(e);
         }
         catch (err) {
             // Completion can win a race with an in-flight progress PATCH, making a
@@ -925,7 +1248,9 @@ export const UserGist = {
                 throw new Error('Survey submission was rejected by the server');
             }
             if (outcome === 'deferred') {
-                debugLog('survey completion saved locally; delivery deferred', { attemptId });
+                debugLog('survey completion saved locally; delivery deferred', {
+                    attemptId,
+                });
             }
             // Once the completion is durably queued, the attempt must not reopen as
             // resumable work. The mutation queue owns delivery from this point.
@@ -962,6 +1287,9 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
+            if (e.resetting || !e.consent.allowsFeedback())
+                return { items: [], nextCursor: null };
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const result = await e.transport.requestsList({
                 anonymousId: id.anonymousId,
@@ -973,6 +1301,8 @@ export const UserGist = {
                 cursor: options.cursor ?? null,
                 limit: options.limit,
             });
+            if (!current())
+                return { items: [], nextCursor: null };
             ensureRequestsCache().upsertList(result.items.map((s) => ({
                 id: s.id,
                 appId: '',
@@ -1000,7 +1330,9 @@ export const UserGist = {
     submitRequest(title, description, callback) {
         try {
             const e = requireEngine();
-            if (typeof title !== 'string' || title.length === 0 || title.length > 120) {
+            if (typeof title !== 'string' ||
+                title.length === 0 ||
+                title.length > 120) {
                 callback?.(new Error('title required, max 120 chars'));
                 return;
             }
@@ -1013,10 +1345,11 @@ export const UserGist = {
             void (async () => {
                 try {
                     await ensureHydrated(e);
-                    if (!e.consent.allowsFeedback()) {
+                    if (e.resetting || !e.consent.allowsFeedback()) {
                         callback?.(new Error('feedback consent required'));
                         return;
                     }
+                    const current = requestSessionIsCurrent(e);
                     const id = e.identity.get();
                     const req = await e.transport.requestSubmit({
                         idempotencyKey: generateEventId(),
@@ -1025,6 +1358,10 @@ export const UserGist = {
                         title,
                         description,
                     });
+                    if (!current()) {
+                        callback?.(new Error('Request cancelled by identity or consent change'));
+                        return;
+                    }
                     ensureRequestsCache().upsert(req);
                     recordServerBackedEventLocally(e, '$request_submitted');
                     requestsHandlers.onSubmit?.(req);
@@ -1044,11 +1381,12 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
             const cache = ensureRequestsCache();
             const rollback = cache.applyOptimisticVote(requestId, vote);
             try {
+                const current = requestSessionIsCurrent(e);
                 const id = e.identity.get();
                 const result = await e.transport.requestVote({
                     requestId,
@@ -1056,6 +1394,10 @@ export const UserGist = {
                     externalId: id.externalId ?? null,
                     vote,
                 });
+                if (!current()) {
+                    rollback();
+                    return;
+                }
                 cache.commitVote(requestId, result);
                 recordServerBackedEventLocally(e, vote ? '$request_upvoted' : '$request_unupvoted');
                 requestsHandlers.onVote?.(result);
@@ -1073,11 +1415,12 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
             const cache = ensureRequestsCache();
             const rollback = cache.applyOptimisticFollow(requestId, follow);
             try {
+                const current = requestSessionIsCurrent(e);
                 const id = e.identity.get();
                 const result = await e.transport.requestFollow({
                     requestId,
@@ -1085,6 +1428,10 @@ export const UserGist = {
                     externalId: id.externalId ?? null,
                     follow,
                 });
+                if (!current()) {
+                    rollback();
+                    return;
+                }
                 cache.commitFollow(requestId, result);
                 recordServerBackedEventLocally(e, follow ? '$request_followed' : '$request_unfollowed');
                 requestsHandlers.onFollow?.(result);
@@ -1108,9 +1455,11 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return null;
-            return await e.transport.requestBranding();
+            const current = requestSessionIsCurrent(e);
+            const branding = await e.transport.requestBranding();
+            return current() ? branding : null;
         }
         catch (err) {
             reportError('getRequestBranding failed', err);
@@ -1127,14 +1476,17 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return null;
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const req = await e.transport.requestGet({
                 requestId,
                 anonymousId: id.anonymousId,
                 externalId: id.externalId ?? null,
             });
+            if (!current())
+                return null;
             ensureRequestsCache().upsert(req);
             return req;
         }
@@ -1146,7 +1498,7 @@ export const UserGist = {
     openRequestsBoard() {
         try {
             const e = requireEngine();
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
             e.events.emit('showRequestsBoard', undefined);
         }
@@ -1157,7 +1509,7 @@ export const UserGist = {
     openRequestDetail(requestId) {
         try {
             const e = requireEngine();
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
             e.events.emit('showRequestDetail', { requestId });
         }
@@ -1174,15 +1526,16 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return [];
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const result = await e.transport.requestCommentsList({
                 requestId,
                 anonymousId: id.anonymousId,
                 externalId: id.externalId ?? null,
             });
-            return result.items;
+            return current() ? result.items : [];
         }
         catch (err) {
             reportError('getComments failed', err);
@@ -1195,8 +1548,9 @@ export const UserGist = {
             const e = requireEngine();
             validateCommentBody(body);
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return null;
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const comment = await e.transport.requestCommentPost({
                 idempotencyKey: generateEventId(),
@@ -1205,6 +1559,8 @@ export const UserGist = {
                 externalId: id.externalId ?? null,
                 body,
             });
+            if (!current())
+                return null;
             recordServerBackedEventLocally(e, REQUEST_COMMENTED_EVENT_NAME);
             return comment;
         }
@@ -1219,8 +1575,9 @@ export const UserGist = {
             const e = requireEngine();
             validateCommentBody(body);
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return null;
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             const comment = await e.transport.requestCommentEdit({
                 requestId,
@@ -1228,6 +1585,8 @@ export const UserGist = {
                 anonymousId: id.anonymousId,
                 body,
             });
+            if (!current())
+                return null;
             recordServerBackedEventLocally(e, REQUEST_COMMENT_EDITED_EVENT_NAME);
             return comment;
         }
@@ -1241,14 +1600,17 @@ export const UserGist = {
         try {
             const e = requireEngine();
             await ensureHydrated(e);
-            if (!e.consent.allowsFeedback())
+            if (e.resetting || !e.consent.allowsFeedback())
                 return;
+            const current = requestSessionIsCurrent(e);
             const id = e.identity.get();
             await e.transport.requestCommentDelete({
                 requestId,
                 commentId,
                 anonymousId: id.anonymousId,
             });
+            if (!current())
+                return;
             recordServerBackedEventLocally(e, REQUEST_COMMENT_DELETED_EVENT_NAME);
         }
         catch (err) {