@usergist/feedback-react-native 0.2.0-beta.0 → 0.2.0-beta.2

package/dist/UserGist.js

@@ -1,3 +1,7 @@
+import { drainRevocations, hasPendingRevocations } from './internal/session-revocations.js';
+import { setPushSubscriptionStateHandler, pushSubscriptionChanged } from './internal/push-subscription.js';
+import { cancelIdentityRecovery, identityChanged, setIdentityStateHandler, setSubjectTokenProvider, getIdentityState } from './internal/identity-lifecycle.js';
+import { userPropertiesUpdateSchema } from '@usergist/sdk-core/mobile';
 import { hydratePushDedupe } from './internal/push-dedupe.js';
 import { REQUEST_COMMENTED_EVENT_NAME, REQUEST_COMMENT_EDITED_EVENT_NAME, REQUEST_COMMENT_DELETED_EVENT_NAME, } from '@usergist/sdk-core/mobile';
 import { asEventProps, clearAllState, createEngine, emitAppOpenWhenConsentReady, emitAppVersionChanged, ensureHydrated, enqueueAndEvaluate, flushNow, flushMutations, pollInstructions, refreshTargetingRules, recordServerBackedEventLocally, submitResponse, } from './internal/engine.js';
@@ -7,7 +11,7 @@ import { createSurveyStore } from './internal/survey-store.js';
 import { UserGistPushNative, onTokenReceived, onNotificationReceived, onNotificationOpened, onNotificationDisplayed, onNotificationDismissed, onTokenError, } from './native/push-bridge.js';
 import { Push } from './Push.js';
 import { AppState, Platform } from 'react-native';
-import { generateEventId, validateIdentifyTransition } from './internal/identity.js';
+import { generateEventId, validateIdentifyTransition, } from './internal/identity.js';
 import { configureStorageAdapter, STORAGE_KEYS, } from './internal/storage.js';
 import { surveyCompletionOutcome } from './internal/survey-completion.js';
 import { USERGIST_SDK_VERSION } from './internal/context.js';
@@ -21,6 +25,7 @@ function serializePushRegistration(operation) {
 let runtimeStarted = false;
 let runtimeStartPromise = null;
 let resetPromise = null;
+const surveyStarts = new Map();
 let surveyStore = null;
 let surveyHandlers = {};
 let inAppHandlers = {};
@@ -39,8 +44,10 @@ function requestSessionIsCurrent(e) {
     const generation = e.resetGeneration;
     const consentVersion = e.consent.get().version;
     const identity = e.identity.get();
-    return () => !e.resetting && generation === e.resetGeneration &&
-        consentVersion === e.consent.get().version && e.consent.allowsFeedback() &&
+    return () => !e.resetting &&
+        generation === e.resetGeneration &&
+        consentVersion === e.consent.get().version &&
+        e.consent.allowsFeedback() &&
         identity.anonymousId === e.identity.get().anonymousId &&
         identity.externalId === e.identity.get().externalId;
 }
@@ -49,9 +56,16 @@ async function syncNativePushState(e, push = e.consent.allowsPush()) {
     const generation = e.resetGeneration;
     const version = e.consent.get().version;
     const operation = nativeStateQueue.then(async () => {
-        if (generation !== e.resetGeneration || anonymousId !== e.identity.get().anonymousId || version !== e.consent.get().version)
+        if (generation !== e.resetGeneration ||
+            anonymousId !== e.identity.get().anonymousId ||
+            version !== e.consent.get().version)
             return;
-        await UserGistPushNative.syncState({ writeKey: e.config.writeKey, apiUrl: e.config.apiUrl, anonymousId, push: push && !e.resetting });
+        await UserGistPushNative.syncState({
+            writeKey: e.config.writeKey,
+            apiUrl: e.config.apiUrl,
+            anonymousId,
+            push: push && !e.resetting,
+        });
     });
     nativeStateQueue = operation.catch(() => undefined);
     await operation;
@@ -75,8 +89,24 @@ function requireEngine() {
 function ensureEngine(config) {
     if (engine)
         return engine;
-    engine = createEngine(config);
-    surveyStore = createSurveyStore(config.writeKey);
+    // A host-owned invitation is not a survey start. Only automatic rendering
+    // requests a session bundled with the delivery authorization.
+    engine = createEngine(config, () => !surveyHandlers.onInvite);
+    const pushEngine = engine;
+    pushEngine.retryPushRegistration = async () => {
+        if (pushEngine.resetting)
+            return;
+        const saved = await pushEngine.storage.getJson(STORAGE_KEYS.pushDevice);
+        if (!saved)
+            return;
+        pushEngine.pushTokenAvailable = true;
+        if (pushEngine !== engine || pushEngine.resetting)
+            return;
+        pushSubscriptionChanged(pushEngine);
+        if (pushEngine.consent.allowsPush())
+            await registerPushDevice(saved.token, saved.platform, { environment: saved.environment }, true);
+    };
+    surveyStore = createSurveyStore(config.writeKey, () => engine.identity.get());
     return engine;
 }
 async function startRuntime(e) {
@@ -145,7 +175,9 @@ function attachEnginePushListeners() {
             try {
                 const platform = (p.platform === 'ios' ? 'ios' : 'android');
                 await UserGist.registerPushToken(p.token, platform, {
-                    environment: lastEnablePushOptions?.environment ?? await UserGistPushNative.defaultEnvironment() ?? defaultEnvironment(),
+                    environment: lastEnablePushOptions?.environment ??
+                        (await UserGistPushNative.defaultEnvironment()) ??
+                        defaultEnvironment(),
                 });
             }
             catch (err) {
@@ -159,8 +191,8 @@ function attachEnginePushListeners() {
     onNotificationReceived((p) => {
         forwardToPushHandler(p, 'received');
     });
-    onNotificationDisplayed(p => forwardToPushHandler(p, 'displayed'));
-    onNotificationDismissed(p => forwardToPushHandler(p, 'dismissed'));
+    onNotificationDisplayed((p) => forwardToPushHandler(p, 'displayed'));
+    onNotificationDismissed((p) => forwardToPushHandler(p, 'dismissed'));
     onNotificationOpened((p) => {
         forwardToPushHandler(p, 'opened');
     });
@@ -169,7 +201,8 @@ function forwardToPushHandler(p, kind) {
     if (!engine?.consent.allowsPush() || engine.resetting)
         return;
     const data = p.data ?? {};
-    if (data.usergist_anonymous_id && data.usergist_anonymous_id !== engine.identity.get().anonymousId)
+    if (data.usergist_anonymous_id &&
+        data.usergist_anonymous_id !== engine.identity.get().anonymousId)
         return;
     if (p.deliveryId) {
         ;
@@ -186,7 +219,10 @@ function forwardToPushHandler(p, kind) {
         };
         Object.assign(userInfo, data);
         if (kind === 'received') {
-            Push.handleReceived({ userInfo, notification: { title: p.title, body: p.body } });
+            Push.handleReceived({
+                userInfo,
+                notification: { title: p.title, body: p.body },
+            });
         }
         else if (kind === 'displayed') {
             Push.handleDisplayed({ userInfo });
@@ -204,7 +240,10 @@ function forwardToPushHandler(p, kind) {
             dataStr[k] = String(v);
         }
         if (kind === 'received') {
-            Push.handleReceived({ data: dataStr, notification: { title: p.title, body: p.body } });
+            Push.handleReceived({
+                data: dataStr,
+                notification: { title: p.title, body: p.body },
+            });
         }
         else if (kind === 'displayed') {
             Push.handleDisplayed({ data: dataStr });
@@ -240,6 +279,11 @@ export const UserGist = {
     init(config) {
         void UserGist.initAsync(config);
     },
+    /** Defer campaign UI without interrupting analytics or an active modal. */
+    pausePresentation() { engine?.presentation.setPaused(true); },
+    /** Call after the host's loaded screen and navigation are ready. */
+    resumePresentation() { engine?.presentation.setPaused(false); },
+    __internal_presentationGate() { return requireEngine().presentation; },
     async initAsync(config, initialIdentity) {
         try {
             const e = ensureEngine(config);
@@ -259,6 +303,10 @@ export const UserGist = {
             return 'rejected';
         }
     },
+    setPushSubscriptionStateHandler,
+    setIdentityStateHandler,
+    setSubjectTokenProvider,
+    getIdentityState,
     identify(userId, properties, subjectToken) {
         void UserGist.identifyAsync(userId, properties, subjectToken);
     },
@@ -269,18 +317,26 @@ export const UserGist = {
                 return 'rejected';
             }
             const e = requireEngine();
+            const generation = e.resetGeneration;
             await ensureHydrated(e);
-            if (e.resetting)
+            if (e.resetting || e.resetGeneration !== generation)
                 return 'rejected';
             const identity = e.identity.get();
             const pendingIdentity = e.mutations.peek();
-            const transition = validateIdentifyTransition(identity.externalId, pendingIdentity?.kind === 'identify' ? pendingIdentity.payload.externalId : null, userId);
+            const transition = validateIdentifyTransition(identity.externalId, pendingIdentity?.kind === 'identify'
+                ? pendingIdentity.payload.externalId
+                : null, userId);
             if (transition === 'reset_required') {
                 reportError('identify rejected: call reset() before switching users');
                 return 'rejected';
             }
-            const cleanProps = e.consent.allowsAnalytics() ? asEventProps(properties) : undefined;
+            const cleanProps = e.consent.allowsAnalytics()
+                ? (properties && Object.keys(properties).length
+                    ? userPropertiesUpdateSchema.parse({ mutationId: generateEventId(), set: properties }).set
+                    : undefined)
+                : undefined;
             if (transition === 'already_identified' &&
+                (!subjectToken || subjectToken === e.subjectToken) &&
                 (!cleanProps || Object.keys(cleanProps).length === 0)) {
                 return 'synced';
             }
@@ -288,6 +344,7 @@ export const UserGist = {
                 reportError('identify requires a server-minted subject token');
                 return 'rejected';
             }
+            identityChanged(e, 'identifying');
             const mutationId = await e.mutations.enqueue('identify', 'essential', {
                 subjectToken,
                 anonymousId: identity.anonymousId,
@@ -295,7 +352,10 @@ export const UserGist = {
                 ...(cleanProps ? { properties: cleanProps } : {}),
             }, `identify:${userId}`);
             const result = await flushMutations(e);
+            if (e.resetting || e.resetGeneration !== generation)
+                return 'rejected';
             if (result.permanentlyRejectedIds.has(mutationId)) {
+                identityChanged(e, 'rejected');
                 reportError('identify was rejected by the server');
                 return 'rejected';
             }
@@ -312,6 +372,33 @@ export const UserGist = {
             return 'rejected';
         }
     },
+    /** Update the current user, including anonymous users. Durable and retried on reconnect. */
+    async setUserProperties(properties, unset = []) {
+        try {
+            const e = requireEngine();
+            const generation = e.resetGeneration;
+            await ensureHydrated(e);
+            if (e !== engine ||
+                e.resetting ||
+                e.resetGeneration !== generation ||
+                !e.consent.allowsAnalytics())
+                return 'rejected';
+            const update = userPropertiesUpdateSchema.parse({
+                mutationId: generateEventId(),
+                set: properties,
+                unset: [...unset],
+            });
+            const mutationId = await e.mutations.enqueue('user-properties', 'analytics', { ...update, anonymousId: e.identity.get().anonymousId });
+            const result = await flushMutations(e);
+            if (result.permanentlyRejectedIds.has(mutationId))
+                return 'rejected';
+            return e.mutations.has(mutationId) ? 'queued' : 'synced';
+        }
+        catch (error) {
+            reportError('setUserProperties failed', error);
+            return 'rejected';
+        }
+    },
     track(eventName, properties) {
         try {
             if (typeof eventName !== 'string' || eventName.length === 0) {
@@ -329,6 +416,10 @@ export const UserGist = {
     async setConsent(purposes) {
         try {
             const e = requireEngine();
+            if (purposes.feedback === false)
+                e.presentation.invalidate('feedback');
+            if (purposes.survey === false)
+                e.presentation.invalidate('survey');
             await ensureHydrated(e);
             if (e.resetting)
                 return false;
@@ -348,7 +439,7 @@ export const UserGist = {
                 if (e.resetting || next.version !== e.consent.get().version)
                     return false;
                 if (e.lastPushToken)
-                    await UserGist.invalidatePushToken(e.lastPushToken);
+                    await invalidatePushDevice(e.lastPushToken, true);
                 await disableNativePushForConsent(e, next.version);
             }
             if (e.resetting || next.version !== e.consent.get().version)
@@ -372,6 +463,9 @@ export const UserGist = {
                 reportError('transport.consent failed', err);
                 return false;
             }
+            pushSubscriptionChanged(e);
+            if (next.push)
+                void e.retryPushRegistration?.().catch(error => reportError('push registration deferred', error));
             if (next.feedback || next.survey) {
                 await refreshTargetingRules(e, true);
             }
@@ -388,27 +482,30 @@ export const UserGist = {
     reset() {
         try {
             const e = requireEngine();
-            if (e.resetting)
-                return resetPromise ?? Promise.resolve();
+            if (resetPromise)
+                return resetPromise;
             e.resetting = true;
+            identityChanged(e, 'resetting');
+            pushSubscriptionChanged(e);
             e.resetGeneration += 1;
+            e.transport.cancelAll();
+            cancelIdentityRecovery(e);
+            e.presentation.invalidate();
             requestsCache = null;
             lastEnablePushOptions = null;
             e.events.emit('resetSurfaces', undefined);
             const operation = (async () => {
                 await ensureHydrated(e);
                 await syncNativePushState(e, false);
-                await pushRegistrationQueue;
-                if (e.lastPushToken)
-                    await UserGist.invalidatePushToken(e.lastPushToken);
-                await UserGistPushNative.disablePush().catch(() => undefined);
+                void UserGistPushNative.disablePush().catch(() => undefined);
                 await clearAllState(e);
+                await surveyStore?.clear();
                 await hydratePushDedupe(e.config.writeKey, e.identity.get().anonymousId);
             })();
             const finalized = operation
-                .catch((err) => reportError('reset failed', err))
+                .then(() => { e.resetting = false; pushSubscriptionChanged(e); })
+                .catch((err) => { identityChanged(e, 'reset-failed'); reportError('reset failed', err); throw err; })
                 .finally(() => {
-                e.resetting = false;
                 if (resetPromise === finalized)
                     resetPromise = null;
             });
@@ -517,75 +614,10 @@ export const UserGist = {
         }
     },
     async registerPushToken(token, platform, opts) {
-        try {
-            if (!token)
-                return;
-            const e = requireEngine();
-            await ensureHydrated(e);
-            if (!e.consent.allowsPush() || e.resetting)
-                return;
-            const generation = e.resetGeneration;
-            await serializePushRegistration(async () => {
-                if (e.resetting || generation !== e.resetGeneration || !e.consent.allowsPush())
-                    return;
-                const id = e.identity.get();
-                const environment = opts?.environment ?? await UserGistPushNative.defaultEnvironment() ??
-                    (e.config.environment === 'production' ? 'production' : 'sandbox');
-                const registrationKey = [
-                    id.anonymousId,
-                    id.externalId ?? '',
-                    platform,
-                    environment,
-                    token,
-                ].join(':');
-                if (e.lastPushRegistrationKey === registrationKey &&
-                    Date.now() - e.lastPushRegistrationAt < 24 * 60 * 60_000)
-                    return;
-                if (e.resetting || generation !== e.resetGeneration || !e.consent.allowsPush())
-                    return;
-                // Persist before the request so logout can invalidate a token even when
-                // the response is lost or the process exits after the server accepts it.
-                e.lastPushToken = token;
-                await e.storage.setJson(STORAGE_KEYS.pushToken, token);
-                await e.transport.pushRegisterToken({
-                    anonymousId: id.anonymousId,
-                    externalId: id.externalId ?? null,
-                    token,
-                    platform,
-                    environment,
-                    language: undefined,
-                    timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
-                    appVersion: undefined,
-                    sdkVersion: `rn-${USERGIST_SDK_VERSION}`,
-                    optIn: true,
-                });
-                e.lastPushToken = token;
-                e.lastPushRegistrationKey = registrationKey;
-                e.lastPushRegistrationAt = Date.now();
-                debugLog('push token registered with server');
-            });
-        }
-        catch (err) {
-            reportError('registerPushToken failed', err);
-        }
+        await registerPushDevice(token, platform, opts);
     },
     async invalidatePushToken(token) {
-        try {
-            if (!token)
-                return;
-            const e = requireEngine();
-            await ensureHydrated(e);
-            const id = e.identity.get();
-            e.lastPushRegistrationKey = null;
-            e.lastPushRegistrationAt = 0;
-            await e.transport.pushInvalidateToken({
-                anonymousId: id.anonymousId,
-                token,
-            });
-        }
-        catch (err) {
-            reportError('invalidatePushToken failed', err);
-        }
+        await invalidatePushDevice(token);
     },
     /**
      * Re-bind the latest registered device token to a newly-identified user.
@@ -603,7 +635,10 @@ export const UserGist = {
                     return;
                 const id = e.identity.get();
                 const token = e.lastPushToken;
-                if (!token || e.resetting || !e.consent.allowsPush() || id.externalId !== externalId)
+                if (!token ||
+                    e.resetting ||
+                    !e.consent.allowsPush() ||
+                    id.externalId !== externalId)
                     return;
                 await e.transport.pushRebind({
                     anonymousId: id.anonymousId,
@@ -703,12 +738,30 @@ export const UserGist = {
             const e = requireEngine();
             await ensureHydrated(e);
             if (!e.consent.allowsPush() || e.resetting)
-                return { granted: false, status: 'not_determined', platform: Platform.OS === 'ios' ? 'ios' : 'android', error: 'consent_required' };
+                return {
+                    granted: false,
+                    status: 'not_determined',
+                    platform: Platform.OS === 'ios' ? 'ios' : 'android',
+                    error: 'consent_required',
+                };
             const generation = e.resetGeneration;
             const consentVersion = e.consent.get().version;
-            const current = () => !e.resetting && generation === e.resetGeneration && consentVersion === e.consent.get().version && e.consent.allowsPush();
-            const cancelled = () => ({ granted: false, status: 'not_determined', platform: Platform.OS === 'ios' ? 'ios' : 'android', error: 'session_changed' });
-            opts = { ...opts, environment: opts?.environment ?? await UserGistPushNative.defaultEnvironment() ?? defaultEnvironment() };
+            const current = () => !e.resetting &&
+                generation === e.resetGeneration &&
+                consentVersion === e.consent.get().version &&
+                e.consent.allowsPush();
+            const cancelled = () => ({
+                granted: false,
+                status: 'not_determined',
+                platform: Platform.OS === 'ios' ? 'ios' : 'android',
+                error: 'session_changed',
+            });
+            opts = {
+                ...opts,
+                environment: opts?.environment ??
+                    (await UserGistPushNative.defaultEnvironment()) ??
+                    defaultEnvironment(),
+            };
             await syncNativePushState(e);
             if (!current())
                 return cancelled();
@@ -731,7 +784,7 @@ export const UserGist = {
             if (result.granted && result.token) {
                 const platform = (result.platform === 'ios' ? 'ios' : 'android');
                 await UserGist.registerPushToken(result.token, platform, {
-                    environment: opts?.environment ?? (defaultEnvironment()),
+                    environment: opts?.environment ?? defaultEnvironment(),
                 });
             }
             return result;
@@ -811,10 +864,20 @@ export const UserGist = {
                 debugLog('openSurvey: survey consent not granted; ignoring');
                 return;
             }
+            const generation = e.resetGeneration;
+            const identity = e.identity.get();
+            const consentVersion = e.consent.get().version;
+            const invitation = await e.surveyInvitations.find(surveyId);
+            if (e.resetting || e.resetGeneration !== generation ||
+                !e.consent.allowsSurvey() || e.consent.get().version !== consentVersion ||
+                e.identity.get().anonymousId !== identity.anonymousId ||
+                e.identity.get().externalId !== identity.externalId)
+                return;
             e.events.emit('showSurvey', {
                 surveyId,
-                source: context?.source ?? 'on_demand',
+                source: context?.source ?? invitation?.source ?? 'on_demand',
                 ...(context?.language ? { language: context.language } : {}),
+                ...(invitation ? { survey: invitation.survey, attempt: invitation.attempt } : {}),
             });
         }
         catch (err) {
@@ -832,21 +895,28 @@ export const UserGist = {
             const e = requireEngine();
             await ensureHydrated(e);
             // Accept URLs of the shape `*://*/s/<token>` or `*survey=<token>`.
-            const match = url.match(/\/s\/([A-Za-z0-9._-]+)/) ?? url.match(/[?&]survey=([A-Za-z0-9._-]+)/);
+            const match = url.match(/\/s\/([A-Za-z0-9._-]+)/) ??
+                url.match(/[?&]survey=([A-Za-z0-9._-]+)/);
             if (!match || !match[1])
                 return false;
             const token = match[1];
+            const presentationIsValid = e.presentation.validator('survey');
             const id = e.identity.get();
             const resolved = await e.transport.surveyResolveLink({
                 token,
                 anonymousId: id.anonymousId,
                 externalId: id.externalId ?? null,
             });
+            if (!presentationIsValid() || !e.consent.allowsSurvey())
+                return false;
             if (resolved.consentRequired) {
                 debugLog('survey link resolved but consent required — awaiting consent');
                 return false;
             }
-            e.events.emit('showSurvey', { surveyId: resolved.surveyId, source: 'link' });
+            e.events.emit('showSurvey', {
+                surveyId: resolved.surveyId,
+                source: 'link',
+            });
             return true;
         }
         catch (err) {
@@ -899,6 +969,9 @@ export const UserGist = {
             reportError('reportSurveyShown failed', err);
         }
     },
+    __internal_surveyOpenFailed(surveyId) {
+        engine?.surveyMatcher.cancelPending(surveyId);
+    },
     __internal_armedSurveyById(surveyId) {
         // Local-fire fast-path. If the survey-rules-cache already has the
         // full survey content (because the matcher just fired), the
@@ -919,6 +992,11 @@ export const UserGist = {
             const e = requireEngine();
             await ensureHydrated(e);
             const id = e.identity.get();
+            const pending = await surveyStore?.findForSurvey(surveyId);
+            if (pending?.survey &&
+                Date.now() - pending.startedAt <
+                    pending.survey.saveResumeWindowSeconds * 1000)
+                return pending.survey;
             return await e.transport.surveyGet({
                 surveyId,
                 anonymousId: id.anonymousId,
@@ -931,52 +1009,169 @@ export const UserGist = {
             return null;
         }
     },
-    async __internal_createAttempt(surveyId, source, language) {
+    async __internal_createAttempt(surveyId, source, language, presentationId, content, preparedAttempt) {
+        const active = requireEngine();
+        const identity = active.identity.get();
+        const key = JSON.stringify([
+            active.resetGeneration,
+            identity.anonymousId,
+            identity.externalId,
+            surveyId,
+            language,
+            presentationId,
+            preparedAttempt?.attemptId,
+        ]);
+        const pending = surveyStarts.get(key);
+        if (pending)
+            return pending;
+        const operation = (async () => {
+            try {
+                const e = requireEngine();
+                await ensureHydrated(e);
+                const id = e.identity.get();
+                const generation = e.resetGeneration;
+                const consentVersion = e.consent.get().version;
+                const current = () => !e.resetting &&
+                    e.resetGeneration === generation &&
+                    e.consent.allowsSurvey() &&
+                    e.consent.get().version === consentVersion &&
+                    e.identity.get().anonymousId === id.anonymousId &&
+                    e.identity.get().externalId === id.externalId;
+                if (!current())
+                    return null;
+                const saved = await surveyStore?.findForSurvey(surveyId);
+                if (!current())
+                    return null;
+                // Resuming a durable device session preserves its original content and
+                // answers. Never replace it with a stale network snapshot.
+                if (!preparedAttempt &&
+                    (!presentationId || saved?.attemptId === presentationId) &&
+                    saved?.survey &&
+                    Date.now() - saved.startedAt <
+                        saved.survey.saveResumeWindowSeconds * 1000) {
+                    if (saved.startRequest)
+                        await e.mutations.enqueue('survey-start', 'survey', { surveyId, body: saved.startRequest }, `survey-start:${saved.attemptId}`);
+                    if (!current())
+                        return null;
+                    void flushMutations(e);
+                    return {
+                        attemptId: saved.attemptId,
+                        startQuestionId: saved.survey.flow.startQuestionId,
+                        currentQuestionId: saved.currentQuestionId,
+                        snapshot: saved.snapshot,
+                        resumed: true,
+                        resolvedContent: saved.survey,
+                    };
+                }
+                const armed = !language && !presentationId
+                    ? e.surveyRules.getById(surveyId)
+                    : null;
+                const grant = armed?.localStart &&
+                    Date.parse(armed.localStart.expiresAt) > Date.now()
+                    ? armed.localStart
+                    : null;
+                const body = {
+                    presentationId,
+                    anonymousId: id.anonymousId,
+                    externalId: id.externalId ?? null,
+                    source,
+                    ...(language ? { language } : {}),
+                    sdkVersion: `rn-${USERGIST_SDK_VERSION}`,
+                    platform: e.context.platform(),
+                    ...(presentationId || grant || source === 'triggered' || source === 'scheduled'
+                        ? { resume: false, clientAttemptId: presentationId ?? generateEventId() }
+                        : { resume: true }),
+                    ...(grant
+                        ? {
+                            localStart: {
+                                token: grant.token,
+                                startedAt: new Date().toISOString(),
+                            },
+                        }
+                        : {}),
+                };
+                const res = preparedAttempt ??
+                    (grant && armed
+                        ? {
+                            attemptId: body.clientAttemptId,
+                            startQuestionId: armed.survey.flow.startQuestionId,
+                            currentQuestionId: armed.survey.flow.startQuestionId,
+                            progressSnapshot: {},
+                            resumed: false,
+                            resolvedContent: armed.survey,
+                        }
+                        : await e.transport.surveyCreateAttempt(surveyId, body));
+                if (!current())
+                    return null;
+                await surveyStore?.upsert({
+                    anonymousId: id.anonymousId,
+                    externalId: id.externalId,
+                    survey: res.resolvedContent ?? content,
+                    ...(grant && !preparedAttempt ? { startRequest: body } : {}),
+                    surveyId,
+                    attemptId: res.attemptId,
+                    startedAt: Date.now(),
+                    currentQuestionId: res.currentQuestionId,
+                    snapshot: (res.progressSnapshot ??
+                        {}),
+                    language: language ?? null,
+                });
+                if (!current())
+                    return null;
+                if (presentationId) {
+                    await e.surveyInvitations.remove(presentationId);
+                    if (!current())
+                        return null;
+                }
+                if (grant && !preparedAttempt) {
+                    await e.mutations.enqueue('survey-start', 'survey', { surveyId, body }, `survey-start:${res.attemptId}`);
+                    if (!current())
+                        return null;
+                    void flushMutations(e);
+                }
+                return {
+                    attemptId: res.attemptId,
+                    startQuestionId: res.startQuestionId,
+                    currentQuestionId: res.currentQuestionId,
+                    snapshot: (res.progressSnapshot ??
+                        {}),
+                    resumed: res.resumed,
+                    resolvedContent: res.resolvedContent,
+                };
+            }
+            catch (err) {
+                reportError('createAttempt failed', err);
+                return null;
+            }
+        })();
+        surveyStarts.set(key, operation);
         try {
-            const e = requireEngine();
-            await ensureHydrated(e);
-            // Give a previously deferred completion a chance to reach the server
-            // before asking it to create or resume another attempt.
-            await flushMutations(e);
-            const id = e.identity.get();
-            const res = await e.transport.surveyCreateAttempt(surveyId, {
-                anonymousId: id.anonymousId,
-                externalId: id.externalId ?? null,
-                source,
-                ...(language ? { language } : {}),
-                sdkVersion: `rn-${USERGIST_SDK_VERSION}`,
-            });
-            await surveyStore?.upsert({
-                surveyId,
-                attemptId: res.attemptId,
-                startedAt: Date.now(),
-                currentQuestionId: res.currentQuestionId,
-                snapshot: (res.progressSnapshot ?? {}),
-                language: language ?? null,
-            });
-            return {
-                attemptId: res.attemptId,
-                startQuestionId: res.startQuestionId,
-                currentQuestionId: res.currentQuestionId,
-                snapshot: (res.progressSnapshot ?? {}),
-                resumed: res.resumed,
-            };
+            return await operation;
         }
-        catch (err) {
-            reportError('createAttempt failed', err);
-            return null;
+        finally {
+            if (surveyStarts.get(key) === operation)
+                surveyStarts.delete(key);
         }
     },
     async __internal_saveProgress(attemptId, currentQuestionId, snapshot) {
         // Persist the resume point before attempting the network. Progress is
         // best-effort transport; losing connectivity must not lose local answers.
+        const e = requireEngine();
+        if (e.resetting || !e.consent.allowsSurvey())
+            return;
+        const generation = e.resetGeneration;
+        const pending = (await surveyStore?.list())?.find((a) => a.attemptId === attemptId);
+        if (!pending || e.resetting || e.resetGeneration !== generation)
+            return;
         await surveyStore?.updateProgress(attemptId, currentQuestionId, snapshot);
         try {
-            const e = requireEngine();
-            await e.transport.surveyUpdateProgress(attemptId, {
-                currentQuestionId,
-                progressSnapshot: snapshot,
+            if (e.resetting || e.resetGeneration !== generation)
+                return;
+            await e.mutations.enqueue('survey-progress', 'survey', {
+                attemptId,
+                body: { currentQuestionId, progressSnapshot: snapshot },
             });
+            void flushMutations(e);
         }
         catch (err) {
             // Completion can win a race with an in-flight progress PATCH, making a
@@ -1016,7 +1211,9 @@ export const UserGist = {
                 throw new Error('Survey submission was rejected by the server');
             }
             if (outcome === 'deferred') {
-                debugLog('survey completion saved locally; delivery deferred', { attemptId });
+                debugLog('survey completion saved locally; delivery deferred', {
+                    attemptId,
+                });
             }
             // Once the completion is durably queued, the attempt must not reopen as
             // resumable work. The mutation queue owns delivery from this point.
@@ -1096,7 +1293,9 @@ export const UserGist = {
     submitRequest(title, description, callback) {
         try {
             const e = requireEngine();
-            if (typeof title !== 'string' || title.length === 0 || title.length > 120) {
+            if (typeof title !== 'string' ||
+                title.length === 0 ||
+                title.length > 120) {
                 callback?.(new Error('title required, max 120 chars'));
                 return;
             }
@@ -1382,4 +1581,97 @@ export const UserGist = {
         }
     },
 };
+/** Registration and invalidation share an ordered lane. Automatic retries may
+ * consume a retained token, but must never recreate an invalidated candidate. */
+async function registerPushDevice(token, platform, opts, retry = false) {
+    try {
+        if (!token)
+            return;
+        const e = requireEngine();
+        if (e.resetting)
+            return;
+        const generation = e.resetGeneration;
+        await serializePushRegistration(async () => {
+            await ensureHydrated(e);
+            if (e.resetting || generation !== e.resetGeneration)
+                return;
+            const environment = opts?.environment ?? (await UserGistPushNative.defaultEnvironment()) ??
+                (e.config.environment === 'production' ? 'production' : 'sandbox');
+            if (e.resetting || generation !== e.resetGeneration)
+                return;
+            const descriptor = { token, platform, environment };
+            const stored = await e.storage.getJson(STORAGE_KEYS.pushDevice);
+            if (JSON.stringify(stored) !== JSON.stringify(descriptor)) {
+                if (retry)
+                    return;
+                await e.storage.setJsonStrict(STORAGE_KEYS.pushDevice, descriptor);
+            }
+            e.pushTokenAvailable = true;
+            pushSubscriptionChanged(e);
+            if (!e.consent.allowsPush())
+                return;
+            await drainRevocations(e);
+            if (await hasPendingRevocations(e) || e.resetting || generation !== e.resetGeneration || !e.consent.allowsPush())
+                return;
+            const id = e.identity.get();
+            const registrationKey = [id.anonymousId, id.externalId ?? '', platform, environment, token].join(':');
+            if (e.lastPushRegistrationKey === registrationKey && Date.now() - e.lastPushRegistrationAt < 24 * 60 * 60_000)
+                return;
+            // Persist before delivery so logout still owns a token if its response is lost.
+            e.lastPushToken = token;
+            await e.storage.setJson(STORAGE_KEYS.pushToken, token);
+            if (e.resetting || generation !== e.resetGeneration || !e.consent.allowsPush())
+                return;
+            const registration = await e.transport.pushRegisterToken({
+                anonymousId: id.anonymousId, externalId: id.externalId ?? null,
+                token, platform, environment, timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+                sdkVersion: `rn-${USERGIST_SDK_VERSION}`, optIn: true,
+            });
+            if (e.resetting || generation !== e.resetGeneration || !e.consent.allowsPush())
+                return;
+            if (!(registration && typeof registration === 'object' && 'registered' in registration && registration.registered === true)) {
+                pushSubscriptionChanged(e);
+                return;
+            }
+            e.lastPushRegistrationKey = registrationKey;
+            e.lastPushRegistrationAt = Date.now();
+            pushSubscriptionChanged(e);
+            debugLog('push token registered with server');
+        });
+    }
+    catch (err) {
+        reportError('registerPushToken failed', err);
+    }
+}
+async function invalidatePushDevice(token, retainDevice = false) {
+    try {
+        if (!token)
+            return;
+        const e = requireEngine();
+        const generation = e.resetGeneration;
+        await serializePushRegistration(async () => {
+            await ensureHydrated(e);
+            if (e.resetting || generation !== e.resetGeneration)
+                return;
+            const saved = await e.storage.getJson(STORAGE_KEYS.pushDevice);
+            if (saved?.token === token) {
+                // Retire the automatic retry candidate before invalidating it remotely.
+                if (!retainDevice)
+                    await e.storage.setJsonStrict(STORAGE_KEYS.pushDevice, null);
+                e.pushTokenAvailable = retainDevice;
+                e.lastPushRegistrationKey = null;
+                e.lastPushRegistrationAt = 0;
+            }
+            if (e.lastPushToken === token) {
+                await e.storage.setJsonStrict(STORAGE_KEYS.pushToken, null);
+                e.lastPushToken = null;
+            }
+            pushSubscriptionChanged(e);
+            await e.transport.pushInvalidateToken({ anonymousId: e.identity.get().anonymousId, token });
+        });
+    }
+    catch (err) {
+        reportError('invalidatePushToken failed', err);
+    }
+}
 //# sourceMappingURL=UserGist.js.map