@webority/mobile-core 0.0.25 → 0.0.27

package/LICENSE.txt

@@ -0,0 +1,9 @@
+Copyright (c) Webority Technologies. All rights reserved.
+
+This software and its NuGet packages are the proprietary and confidential property
+of Webority Technologies. They are published publicly only for the convenience of
+Webority's own projects and internal consumption.
+
+No license or right to use, copy, modify, merge, publish, distribute, sublicense,
+or create derivative works is granted to any third party. Unauthorized use,
+reproduction, or distribution is prohibited.

package/README.md

@@ -47,3 +47,16 @@ keeps push on calls `enablePush` at each start.
 
 Storage and network status stay on the main barrel but load no package on their own. Wire them at
 startup with `setStorageImplementation` and `setNetworkStatusImplementation` if you want them.
+
+## Quiet requests and log redaction
+
+Both HTTP clients log a failed response through `Logger.error`. For a call whose failure the app
+handles itself, pass `skipErrorLog: true` in the axios config and the clients stay silent:
+
+```ts
+await userClient.get('/status', { skipErrorLog: true });
+```
+
+`Logger` masks secrets in every message and argument before any sink sees them: `Bearer` tokens,
+JWT-shaped strings, and the values of keys named `token`, `accessToken`, `refreshToken`,
+`password` and `authorization` (any case) in objects and JSON strings.

package/lib/commonjs/api/publicClient.js

@@ -7,6 +7,7 @@ exports.default = void 0;
 var _axios = _interopRequireDefault(require("axios"));
 var _index = require("../config/index.js");
 var _index2 = require("../logger/index.js");
+require("../types/axios.js");
 var _baseUrl = require("./baseUrl.js");
 var _curl = require("./curl.js");
 var _multipart = require("./multipart.js");
@@ -58,6 +59,9 @@ publicClient.interceptors.response.use(response => {
 }, error => {
   if (_axios.default.isAxiosError(error)) {
     const originalRequest = error.config;
+    if (originalRequest?.skipErrorLog) {
+      return Promise.reject(error);
+    }
     if (!error.response) {
       _index2.Logger.error(`Network error or no response from server: ${error.message}, URL: ${originalRequest?.url}`);
     } else {

package/lib/commonjs/api/retry.js

@@ -16,10 +16,26 @@ exports.isRetryableStatus = exports.attachRetry = void 0;
  */
 const isRetryableStatus = status => typeof status === 'number' && (status === 429 || status >= 500 && status <= 599);
 exports.isRetryableStatus = isRetryableStatus;
+const IDEMPOTENT_METHODS = new Set(['get', 'head', 'options', 'put', 'delete']);
+
+/**
+ * The same reasoning reaches status codes on a write. A 500 on a POST or PATCH
+ * can follow a partial commit, so replaying it can duplicate the record; only
+ * 429 and 503 say the server refused the request before doing the work. A
+ * request that knows its write is safe to repeat passes its own `shouldRetry`.
+ */
+const isRetryableFailure = error => {
+  const status = error.response?.status;
+  if (!isRetryableStatus(status)) {
+    return false;
+  }
+  const method = (error.config?.method ?? 'get').toLowerCase();
+  return IDEMPOTENT_METHODS.has(method) || status === 429 || status === 503;
+};
 const DEFAULT_POLICY = {
   retries: 3,
   retryDelayMs: attempt => attempt <= 1 ? 0 : 2 ** attempt * 1000,
-  shouldRetry: error => isRetryableStatus(error.response?.status),
+  shouldRetry: isRetryableFailure,
   onRetry: () => undefined
 };
 const waitOrAbort = (delay, signal) => new Promise(resolve => {

package/lib/commonjs/api/userClient.js

@@ -27,6 +27,7 @@ var _authStore = require("../auth/authStore.js");
 var _index = require("../config/index.js");
 var _index2 = require("../logger/index.js");
 var _networkStatus = require("../network/networkStatus.js");
+require("../types/axios.js");
 var _baseUrl = require("./baseUrl.js");
 var _curl = require("./curl.js");
 var _multipart = require("./multipart.js");
@@ -46,6 +47,9 @@ class RequestOfflineError extends Error {
   constructor(message = 'Request blocked: device is offline') {
     super(message);
     this.name = 'RequestOfflineError';
+    // Babel's class transform can drop the prototype link, which makes
+    // `instanceof RequestOfflineError` false in the transpiled build.
+    Object.setPrototypeOf(this, RequestOfflineError.prototype);
   }
 }
 
@@ -153,7 +157,7 @@ userClient.interceptors.request.use(async config => {
   // Reject before any network call when the device is known to be offline.
   // Unknown connectivity (netinfo not installed, or undetermined) is treated
   // as online — never block a request on an unavailable probe.
-  const network = await (0, _networkStatus.getNetworkStatus)();
+  const network = await (0, _networkStatus.getLastKnownNetworkStatus)();
   if (network.isConnected === false) {
     _index2.Logger.warn(`Request blocked: device is offline. URL: ${config.url}`);
     return Promise.reject(new RequestOfflineError());
@@ -208,7 +212,9 @@ userClient.interceptors.response.use(response => response, async error => {
   const axiosError = error;
   const originalRequest = axiosError.config;
   if (!axiosError.response) {
-    _index2.Logger.error(`Network error or no response from server: ${axiosError.message}, URL: ${originalRequest?.url}`);
+    if (!originalRequest?.skipErrorLog) {
+      _index2.Logger.error(`Network error or no response from server: ${axiosError.message}, URL: ${originalRequest?.url}`);
+    }
     return Promise.reject(error);
   }
   if (axiosError.response.status === 401 && originalRequest && !originalRequest._retry) {
@@ -250,7 +256,9 @@ userClient.interceptors.response.use(response => response, async error => {
       return Promise.reject(err);
     }
   }
-  _index2.Logger.error(`Response error: ${axiosError.response?.data ?? axiosError.message}, URL: ${originalRequest?.url}, Status: ${axiosError.response.status}`);
+  if (!originalRequest?.skipErrorLog) {
+    _index2.Logger.error(`Response error: ${axiosError.response?.data ?? axiosError.message}, URL: ${originalRequest?.url}, Status: ${axiosError.response.status}`);
+  }
   return Promise.reject(error);
 });
 var _default = exports.default = userClient;

package/lib/commonjs/auth/authStore.js

@@ -87,6 +87,24 @@ const expoSecureStoreBackend = {
   }
 };
 const resolveBackend = () => backend ?? expoSecureStoreBackend;
+
+/**
+ * Every request reads the access token, and a secure-store read is a native
+ * keychain/keystore decrypt. Reads are therefore served from memory, written
+ * through by `storeToken` and dropped by `removeToken`. `generation` moves on
+ * every write, removal and backend swap, so a read that started before one of
+ * those cannot cache the value it saw.
+ */
+const memo = new Map();
+let generation = 0;
+const forget = key => {
+  generation += 1;
+  if (key === undefined) {
+    memo.clear();
+  } else {
+    memo.delete(key);
+  }
+};
 const requireBackend = op => {
   const b = resolveBackend();
   if (!b) {
@@ -104,6 +122,7 @@ const requireBackend = op => {
  */
 const setKeychainImplementation = impl => {
   backend = impl;
+  forget();
 };
 
 /**
@@ -114,6 +133,7 @@ const storeToken = async (key, token, expiry) => {
   // Never log the token or expiry values: Logger forwards to whatever remote
   // sink the app wired (Crashlytics/Sentry), so a token here leaves the device.
   _index.Logger.info(`Storing token for key: ${key}`);
+  forget(key);
   try {
     const data = JSON.stringify({
       token,
@@ -122,8 +142,14 @@ const storeToken = async (key, token, expiry) => {
     await requireBackend('store a token').setGenericPassword('token', data, {
       service: key
     });
+    forget(key);
+    memo.set(key, {
+      token,
+      expiry
+    });
     _index.Logger.info(`Token stored successfully for key: ${key}`);
   } catch (error) {
+    forget(key);
     // Log AND rethrow. Swallowing this told the caller the token was persisted
     // when it was not, so an app would show a signed-in user holding a token
     // that never reached the keychain — the session then dies at the next
@@ -162,6 +188,10 @@ const parseTokenData = credentials => {
  * Retrieve token and check if expired.
  */
 const getToken = async key => {
+  if (memo.has(key)) {
+    return memo.get(key) ?? null;
+  }
+  const seen = generation;
   try {
     const credentials = await requireBackend('read a token').getGenericPassword({
       service: key
@@ -170,24 +200,24 @@ const getToken = async key => {
     // token, and every authenticated request, image and download asks for one.
     // Warning here put three info lines and a warning into the log, and into the
     // remote crash sink, on every one of those calls.
-    if (!credentials) {
-      return null;
+    let value = null;
+    if (credentials) {
+      const parsedData = parseTokenData(credentials);
+      if (parsedData) {
+        value = {
+          token: parsedData.token,
+          expiry: parsedData.expiry
+        };
+      } else {
+        // Something IS stored and it is not a token. That is corruption worth
+        // hearing about, and it is a different event from having no token.
+        _index.Logger.warn(`Stored credentials for key "${key}" are not a valid token; ignoring them.`);
+      }
     }
-    const parsedData = parseTokenData(credentials);
-    if (!parsedData) {
-      // Something IS stored and it is not a token. That is corruption worth
-      // hearing about, and it is a different event from having no token.
-      _index.Logger.warn(`Stored credentials for key "${key}" are not a valid token; ignoring them.`);
-      return null;
+    if (seen === generation) {
+      memo.set(key, value);
     }
-    const {
-      token,
-      expiry
-    } = parsedData;
-    return {
-      token,
-      expiry
-    };
+    return value;
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     // Both spellings matter. Android throws "Key permanently invalidated" when
@@ -211,6 +241,7 @@ const getToken = async key => {
  */
 exports.getToken = getToken;
 const removeToken = async key => {
+  forget(key);
   try {
     await requireBackend('remove a token').resetGenericPassword({
       service: key
@@ -226,6 +257,8 @@ const removeToken = async key => {
       return;
     }
     _index.Logger.error(`Failed to remove token for key: ${key}`, error);
+  } finally {
+    forget(key);
   }
 };
 exports.removeToken = removeToken;

package/lib/commonjs/config/index.js

@@ -3,7 +3,7 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.getConfig = void 0;
+exports.getConfig = exports.DEFAULT_LOG_LEVEL = void 0;
 exports.getConfigValue = getConfigValue;
 exports.setConfig = exports.resetConfig = void 0;
 /**
@@ -11,10 +11,16 @@ exports.setConfig = exports.resetConfig = void 0;
  * Provides a flexible way to inject configuration without hard dependencies
  */
 
+/**
+ * Info lines (each token refresh, each unauthorised URL) reach the device log
+ * and any remote sink, so a release build that sets nothing logs warnings and
+ * errors only.
+ */
+const DEFAULT_LOG_LEVEL = exports.DEFAULT_LOG_LEVEL = __DEV__ ? 'info' : 'warn';
 const DEFAULT_CONFIG = {
   baseUrl: null,
   loggingEnabled: true,
-  logLevel: 'info',
+  logLevel: DEFAULT_LOG_LEVEL,
   environment: 'Development',
   country: 'in',
   appId: null,

package/lib/commonjs/formatters/currency.js

@@ -4,6 +4,7 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.formatCurrency = void 0;
+var _intlCache = require("./intlCache.js");
 const hasIntlNumber = () => typeof Intl !== 'undefined' && typeof Intl.NumberFormat === 'function';
 const indianGroupingFallback = (n, fractionDigits) => {
   // Indian numbering: 1,23,45,678.90 (last 3 digits, then groups of 2).
@@ -41,7 +42,7 @@ const formatCurrency = (amount, options = {}) => {
   const minFrac = minimumFractionDigits ?? (Number.isInteger(amount) ? 0 : 2);
   if (hasIntlNumber()) {
     try {
-      const formatted = new Intl.NumberFormat(locale, {
+      const formatted = (0, _intlCache.numberFormat)(locale, {
         style: 'currency',
         currency,
         minimumFractionDigits: minFrac,

package/lib/commonjs/formatters/date.js

@@ -4,6 +4,7 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.formatTime = exports.formatRelativeTime = exports.formatDateTime = exports.formatDate = void 0;
+var _intlCache = require("./intlCache.js");
 const toDate = value => {
   if (value instanceof Date) {
     return Number.isNaN(value.getTime()) ? null : value;
@@ -52,7 +53,7 @@ const formatDate = (value, style = 'medium', locale = 'en-IN') => {
   }
   if (hasIntl()) {
     try {
-      return new Intl.DateTimeFormat(locale, {
+      return (0, _intlCache.dateTimeFormat)(locale, {
         dateStyle: style
       }).format(d);
     } catch {
@@ -73,7 +74,7 @@ const formatTime = (value, style = 'short', locale = 'en-IN') => {
   }
   if (hasIntl()) {
     try {
-      return new Intl.DateTimeFormat(locale, {
+      return (0, _intlCache.dateTimeFormat)(locale, {
         timeStyle: style
       }).format(d);
     } catch {
@@ -94,7 +95,7 @@ const formatDateTime = (value, dateStyle = 'medium', timeStyle = 'short', locale
   }
   if (hasIntl()) {
     try {
-      return new Intl.DateTimeFormat(locale, {
+      return (0, _intlCache.dateTimeFormat)(locale, {
         dateStyle,
         timeStyle
       }).format(d);
@@ -152,9 +153,7 @@ const formatRelativeTime = (value, base = new Date(), locale = 'en-IN') => {
   const Rtf = hasIntl() ? Intl.RelativeTimeFormat : undefined;
   if (typeof Rtf === 'function') {
     try {
-      return new Rtf(locale, {
-        numeric: 'auto'
-      }).format(amount, unit);
+      return (0, _intlCache.relativeTimeFormat)(Rtf, locale).format(amount, unit);
     } catch {
       /* fall through */
     }

package/lib/commonjs/formatters/dateMath.js

@@ -4,6 +4,7 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.startOfDay = exports.isSameDay = exports.isDateBefore = exports.isDateAfter = exports.formatTimeInZone = exports.formatTimeInWindowsZone = exports.formatTime12h = exports.formatDatePattern = exports.formatDateISO = exports.formatDateDDMMMYYYY = exports.diffMs = exports.addDays = void 0;
+var _intlCache = require("./intlCache.js");
 var _windowsToIanaTable = require("./windowsToIanaTable.js");
 const toDate = value => {
   if (value instanceof Date) {
@@ -277,7 +278,7 @@ const formatTimeInZone = (value, ianaTimeZone) => {
     // answer available, not a genuine timezone conversion.
     return formatTime12h(d);
   }
-  const parts = new Intl.DateTimeFormat('en-US', {
+  const parts = (0, _intlCache.dateTimeFormat)('en-US', {
     timeZone: ianaTimeZone,
     hour: 'numeric',
     minute: '2-digit',

package/lib/commonjs/formatters/intlCache.js

@@ -0,0 +1,37 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.relativeTimeFormat = exports.numberFormat = exports.dateTimeFormat = void 0;
+/**
+ * Building an Intl formatter costs far more than using one (and on Hermes for
+ * Android it goes through ICU over JNI), while list rows and slider frames call
+ * the formatters many times with the same arguments. Formatters are therefore
+ * built once per locale and options. The limit only guards against unbounded
+ * input such as arbitrary time zones; real apps use a handful of keys.
+ */
+const LIMIT = 100;
+const cached = (cache, key, create) => {
+  let formatter = cache.get(key);
+  if (formatter === undefined) {
+    formatter = create();
+    if (cache.size >= LIMIT) {
+      cache.clear();
+    }
+    cache.set(key, formatter);
+  }
+  return formatter;
+};
+const numberFormats = new Map();
+const dateTimeFormats = new Map();
+const relativeTimeFormats = new Map();
+const numberFormat = (locale, options = {}) => cached(numberFormats, `${locale}|${JSON.stringify(options)}`, () => new Intl.NumberFormat(locale, options));
+exports.numberFormat = numberFormat;
+const dateTimeFormat = (locale, options) => cached(dateTimeFormats, `${locale}|${JSON.stringify(options)}`, () => new Intl.DateTimeFormat(locale, options));
+exports.dateTimeFormat = dateTimeFormat;
+const relativeTimeFormat = (RelativeTimeFormat, locale) => cached(relativeTimeFormats, locale, () => new RelativeTimeFormat(locale, {
+  numeric: 'auto'
+}));
+exports.relativeTimeFormat = relativeTimeFormat;
+//# sourceMappingURL=intlCache.js.map

package/lib/commonjs/formatters/number.js

@@ -4,6 +4,7 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.formatPercent = exports.formatNumber = exports.formatCompactNumber = void 0;
+var _intlCache = require("./intlCache.js");
 const hasIntlNumber = () => typeof Intl !== 'undefined' && typeof Intl.NumberFormat === 'function';
 
 /**
@@ -20,7 +21,7 @@ const formatNumber = (value, fractionDigits, locale = 'en-IN') => {
         opts.minimumFractionDigits = fractionDigits;
         opts.maximumFractionDigits = fractionDigits;
       }
-      return new Intl.NumberFormat(locale, opts).format(value);
+      return (0, _intlCache.numberFormat)(locale, opts).format(value);
     } catch {
       /* fall through */
     }
@@ -40,7 +41,7 @@ const formatPercent = (value, fractionDigits = 0, asRatio = true, locale = 'en-I
   const ratio = asRatio ? value : value / 100;
   if (hasIntlNumber()) {
     try {
-      return new Intl.NumberFormat(locale, {
+      return (0, _intlCache.numberFormat)(locale, {
         style: 'percent',
         minimumFractionDigits: fractionDigits,
         maximumFractionDigits: fractionDigits
@@ -63,7 +64,7 @@ const formatCompactNumber = (value, locale = 'en-IN') => {
   }
   if (hasIntlNumber()) {
     try {
-      return new Intl.NumberFormat(locale, {
+      return (0, _intlCache.numberFormat)(locale, {
         notation: 'compact',
         maximumFractionDigits: 1
       }).format(value);

package/lib/commonjs/index.js

@@ -117,6 +117,12 @@ Object.defineProperty(exports, "diffMs", {
     return _index3.diffMs;
   }
 });
+Object.defineProperty(exports, "encodeBase64", {
+  enumerable: true,
+  get: function () {
+    return _base.encodeBase64;
+  }
+});
 Object.defineProperty(exports, "formatCompactNumber", {
   enumerable: true,
   get: function () {
@@ -501,6 +507,12 @@ Object.defineProperty(exports, "publicClient", {
     return _publicClient.default;
   }
 });
+Object.defineProperty(exports, "refreshAccessToken", {
+  enumerable: true,
+  get: function () {
+    return _tokenRefresh.refreshAccessToken;
+  }
+});
 Object.defineProperty(exports, "removeToken", {
   enumerable: true,
   get: function () {
@@ -612,6 +624,7 @@ Object.defineProperty(exports, "validatePhoneNumberLength", {
 var _curl = require("./api/curl.js");
 var _publicClient = _interopRequireDefault(require("./api/publicClient.js"));
 var _retry = require("./api/retry.js");
+var _tokenRefresh = require("./api/tokenRefresh.js");
 var _userClient = _interopRequireWildcard(require("./api/userClient.js"));
 var _authStore = require("./auth/authStore.js");
 var _jwt = require("./auth/jwt.js");
@@ -623,6 +636,7 @@ var _initUserAuth = require("./initUserAuth.js");
 var _index4 = require("./logger/index.js");
 var _index5 = require("./network/index.js");
 var _index6 = require("./storage/index.js");
+var _base = require("./utils/base64.js");
 var _index7 = require("./validators/index.js");
 var _index8 = require("./versionCheck/index.js");
 function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }

package/lib/commonjs/initSDK.js

@@ -39,7 +39,7 @@ const initWebority = config => {
   (0, _index.setConfig)({
     baseUrl: config.baseUrl,
     loggingEnabled: config.loggingEnabled ?? true,
-    logLevel: config.logLevel || 'info',
+    logLevel: config.logLevel || _index.DEFAULT_LOG_LEVEL,
     environment: config.environment || 'Development',
     country: (config.country || 'in').toLowerCase(),
     appId: config.appId ?? null,

package/lib/commonjs/logger/index.js

@@ -5,6 +5,7 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.setRemoteLogger = exports.setDeviceContext = exports.getDeviceContext = exports.configureLogger = exports.Logger = void 0;
 var _index = require("../config/index.js");
+var _redact = require("./redact.js");
 // ANSI color codes
 const Colors = {
   RESET: '\x1b[0m',
@@ -209,21 +210,27 @@ const forwardErrorToRemote = (err, context) => {
   }
   safe(() => remote?.recordError?.(err, buildErrorContext(context, suppressedCount)));
 };
-const logInfo = (message, ...optionalParams) => {
+const logInfo = (rawMessage, ...rawParams) => {
+  const message = (0, _redact.redactString)(rawMessage);
+  const optionalParams = (0, _redact.redact)(rawParams);
   if (!isEnabled() || !isLogLevelAllowed(LogLevels.INFO.level)) {
     return;
   }
   console.info(`${LogLevels.INFO.color}[INFO]: ${message}${Colors.RESET}`, ...optionalParams);
   safe(() => remote?.log?.('info', message, optionalParams));
 };
-const logWarning = (message, ...optionalParams) => {
+const logWarning = (rawMessage, ...rawParams) => {
+  const message = (0, _redact.redactString)(rawMessage);
+  const optionalParams = (0, _redact.redact)(rawParams);
   if (!isEnabled() || !isLogLevelAllowed(LogLevels.WARN.level)) {
     return;
   }
   console.warn(`${LogLevels.WARN.color}[WARNING]: ${message}${Colors.RESET}`, ...optionalParams);
   safe(() => remote?.log?.('warn', message, optionalParams));
 };
-const logError = (message, ...optionalParams) => {
+const logError = (rawMessage, ...rawParams) => {
+  const message = (0, _redact.redactString)(rawMessage);
+  const optionalParams = (0, _redact.redact)(rawParams);
   if (isEnabled() && isLogLevelAllowed(LogLevels.ERROR.level)) {
     console.error(`${LogLevels.ERROR.color}[ERROR]: ${message}${Colors.RESET}`, ...optionalParams);
   }
@@ -239,14 +246,17 @@ const logError = (message, ...optionalParams) => {
     });
   }
 };
-const breadcrumb = (message, data) => {
+const breadcrumb = (rawMessage, rawData) => {
+  const message = (0, _redact.redactString)(rawMessage);
+  const data = (0, _redact.redact)(rawData);
   if (isEnabled() && isLogLevelAllowed('info')) {
     console.info(`${Colors.BLUE}[BREADCRUMB]: ${message}${Colors.RESET}`, data ?? '');
   }
   safe(() => remote?.breadcrumb?.(message, data));
 };
-const recordError = (error, context) => {
-  const err = toErrorObject(error);
+const recordError = (error, rawContext) => {
+  const err = (0, _redact.redact)(toErrorObject(error));
+  const context = (0, _redact.redact)(rawContext);
   if (isEnabled() && isLogLevelAllowed('error')) {
     console.error(`${Colors.RED_BOLD}[RECORDED]: ${err.message}${Colors.RESET}`, context ?? '');
   }

package/lib/commonjs/logger/redact.js

@@ -0,0 +1,50 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.redactString = exports.redact = void 0;
+const REDACTED = '[REDACTED]';
+const SECRET_KEYS = /^(token|accesstoken|refreshtoken|password|authorization)$/i;
+const BEARER = /\bBearer\s+[A-Za-z0-9._~+/-]+=*/gi;
+const JWT = /\beyJ[A-Za-z0-9_-]*\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]*/g;
+const KEYED_VALUE = /(["']?(?:token|accessToken|refreshToken|password|authorization)["']?\s*[:=]\s*)(?:"(?:[^"\\]|\\.)*"|'[^']*'|[^\s,;&}]+)/gi;
+const MAX_DEPTH = 6;
+const redactString = input => input.replace(BEARER, `Bearer ${REDACTED}`).replace(JWT, REDACTED).replace(KEYED_VALUE, (_match, prefix) => `${prefix}"${REDACTED}"`);
+exports.redactString = redactString;
+const redactInner = (value, depth, seen) => {
+  if (typeof value === 'string') {
+    return redactString(value);
+  }
+  if (value === null || typeof value !== 'object') {
+    return value;
+  }
+  if (value instanceof Error) {
+    value.message = redactString(value.message);
+    if (value.stack) {
+      value.stack = redactString(value.stack);
+    }
+    return value;
+  }
+  if (depth >= MAX_DEPTH || seen.has(value)) {
+    return value;
+  }
+  seen.add(value);
+  if (Array.isArray(value)) {
+    return value.map(item => redactInner(item, depth + 1, seen));
+  }
+  const proto = Object.getPrototypeOf(value);
+  if (proto !== Object.prototype && proto !== null) {
+    return value;
+  }
+  const out = {};
+  for (const [key, item] of Object.entries(value)) {
+    out[key] = SECRET_KEYS.test(key) ? REDACTED : redactInner(item, depth + 1, seen);
+  }
+  return out;
+};
+
+/** Returns a copy with secrets masked; Errors are masked in place so identity and stack survive. */
+const redact = value => redactInner(value, 0, new WeakSet());
+exports.redact = redact;
+//# sourceMappingURL=redact.js.map

package/lib/commonjs/network/networkStatus.js

@@ -3,7 +3,7 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.useNetworkStatus = exports.setNetworkStatusImplementation = exports.getNetworkStatus = exports.addNetworkStatusListener = void 0;
+exports.useNetworkStatus = exports.setNetworkStatusImplementation = exports.getNetworkStatus = exports.getLastKnownNetworkStatus = exports.addNetworkStatusListener = void 0;
 var ExpoNetwork = _interopRequireWildcard(require("expo-network"));
 var _react = require("react");
 var _index = require("../logger/index.js");
@@ -23,6 +23,13 @@ const DEFAULT_STATUS = {
  * One backend also means one behaviour, rather than each app choosing.
  */
 let override = null;
+let lastKnown = null;
+let stopFollowing = null;
+const stopFollowingNetwork = () => {
+  stopFollowing?.();
+  stopFollowing = null;
+  lastKnown = null;
+};
 
 /**
  * Replace the backend. Intended for TESTS and for the showcase, which uses it
@@ -31,6 +38,7 @@ let override = null;
  */
 const setNetworkStatusImplementation = impl => {
   override = impl;
+  stopFollowingNetwork();
 };
 exports.setNetworkStatusImplementation = setNetworkStatusImplementation;
 const resolveNetInfo = () => override ?? expoNetworkBackend;
@@ -103,11 +111,41 @@ const addNetworkStatusListener = listener => {
   return ni.addEventListener(state => listener(normalize(state)));
 };
 
+/**
+ * The connectivity the HTTP client checks before every request. One listener,
+ * attached on first use, keeps it current, so a request costs no native probe:
+ * one probe seeds the value and the listener's events replace it.
+ */
+exports.addNetworkStatusListener = addNetworkStatusListener;
+const getLastKnownNetworkStatus = async () => {
+  if (!stopFollowing) {
+    try {
+      stopFollowing = addNetworkStatusListener(status => {
+        lastKnown = status;
+      });
+    } catch (error) {
+      _index.Logger.error('[network] could not follow network changes', error);
+      return getNetworkStatus();
+    }
+  }
+  if (lastKnown) {
+    return lastKnown;
+  }
+  const following = stopFollowing;
+  const probed = await getNetworkStatus();
+  if (stopFollowing !== following) {
+    return probed;
+  }
+  // An event that arrived during the probe is newer than the probe.
+  lastKnown ??= probed;
+  return lastKnown;
+};
+
 /**
  * React hook that returns the current network status and re-renders on change.
  * Reports an optimistic online default when NetInfo is not installed.
  */
-exports.addNetworkStatusListener = addNetworkStatusListener;
+exports.getLastKnownNetworkStatus = getLastKnownNetworkStatus;
 const useNetworkStatus = () => {
   const [status, setStatus] = (0, _react.useState)(DEFAULT_STATUS);
   (0, _react.useEffect)(() => {

package/lib/commonjs/types/axios.js

@@ -0,0 +1,4 @@
+"use strict";
+
+require("axios");
+//# sourceMappingURL=axios.js.map