yaver-feedback-react-native 0.7.1 → 0.7.3

package/dist/FeedbackModal.js

@@ -93,6 +93,16 @@ const FeedbackModal = () => {
         }
         catch (err) {
             const msg = err instanceof Error ? err.message : String(err);
+            // 401 / 403 "invalid token" — the cached session is stale
+            // (common after a Convex deployment migration). Sign out so
+            // the next interaction surfaces the login sheet, then bubble
+            // a readable error up to the user.
+            const authFailed = /\b(401|403)\b.*invalid token|invalid token|unauthor/i.test(msg);
+            if (authFailed) {
+                await YaverFeedback_1.YaverFeedback.signOut();
+                YaverFeedback_1.YaverFeedback.showLogin();
+                throw new Error('Session expired — please sign in again.');
+            }
             const transient = /Network request failed|timeout|ECONNREFUSED|Failed to fetch|fetch failed|aborted/i.test(msg);
             if (!transient)
                 throw err;

package/dist/MachinePickerScreen.js

@@ -79,14 +79,19 @@ const YaverMachinePickerScreen = ({ token, currentDeviceId, onPick, onCancel, })
     };
     const renderDevice = (device) => {
         const selected = device.deviceId === currentDeviceId;
-        // Match the Yaver mobile app: HEARTBEAT_STALE_MS is 90 s. Using
-        // 60 s here flashed yellow on a single missed agent beat even
-        // though the Mac was up.
-        const stale = device.lastHeartbeat > 0 &&
-            Date.now() - device.lastHeartbeat > 90000;
+        // Trust Convex's `isOnline` — the backend already gates it on a
+        // fresh 90 s heartbeat (see backend/convex/devices.ts
+        // deriveIsOnline). Re-checking on the client produced false
+        // yellows from phone↔backend clock skew around the 89-90 s mark.
+        //
+        // `runnerDown` intentionally does NOT flip the dot. That flag
+        // tracks whether the AI runner (claude-code, aider, ...) is
+        // healthy — a separate concern from "can I reach this machine?"
+        // Mobile app surfaces runner issues via a separate badge, not
+        // this dot. Picker's job is reachability, nothing more.
         const healthColor = !device.isOnline
             ? '#ef4444'
-            : device.needsAuth || device.runnerDown || stale
+            : device.needsAuth
                 ? '#f59e0b'
                 : '#22c55e';
         return (<react_native_1.TouchableOpacity key={device.deviceId} style={[styles.deviceRow, selected && styles.deviceSelected]} onPress={() => handlePick(device)}>

package/dist/auth.d.ts

@@ -15,7 +15,7 @@
  * Mobile-only. A web equivalent will ship as a separate `yaver-web-feedback`
  * package; do not import this module from a browser bundle.
  */
-export declare const DEFAULT_CONVEX_SITE_URL = "https://shocking-echidna-394.eu-west-1.convex.site";
+export declare const DEFAULT_CONVEX_SITE_URL = "https://perceptive-minnow-557.eu-west-1.convex.site";
 export declare const DEFAULT_WEB_BASE_URL = "https://yaver.io";
 /** Override the Convex site URL + web base (staging vs prod). */
 export declare function configureAuthEndpoints(opts: {

package/dist/auth.js

@@ -63,7 +63,12 @@ catch {
 const TOKEN_KEY = 'yaver_feedback_auth_token';
 const USER_KEY = 'yaver_feedback_user';
 const DEVICE_KEY = 'yaver_feedback_selected_device';
-exports.DEFAULT_CONVEX_SITE_URL = 'https://shocking-echidna-394.eu-west-1.convex.site';
+// Source of truth: mobile/src/lib/constants.ts → CONVEX_SITE_URL.
+// The yaver-io Convex deployment was migrated from shocking-echidna-394
+// to perceptive-minnow-557; sessions minted against the old deployment
+// don't validate on agents that point at the new one, producing a 403
+// "invalid token" from the agent's authSDK middleware.
+exports.DEFAULT_CONVEX_SITE_URL = 'https://perceptive-minnow-557.eu-west-1.convex.site';
 exports.DEFAULT_WEB_BASE_URL = 'https://yaver.io';
 let convexSiteUrl = exports.DEFAULT_CONVEX_SITE_URL;
 let webBaseUrl = exports.DEFAULT_WEB_BASE_URL;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "yaver-feedback-react-native",
-  "version": "0.7.1",
+  "version": "0.7.3",
   "description": "Visual feedback SDK for Yaver — bug reports, screen recording, voice annotations, and local-first developer workflows",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/FeedbackModal.tsx

@@ -103,6 +103,16 @@ export const FeedbackModal: React.FC = () => {
         await fn(client);
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
+        // 401 / 403 "invalid token" — the cached session is stale
+        // (common after a Convex deployment migration). Sign out so
+        // the next interaction surfaces the login sheet, then bubble
+        // a readable error up to the user.
+        const authFailed = /\b(401|403)\b.*invalid token|invalid token|unauthor/i.test(msg);
+        if (authFailed) {
+          await YaverFeedback.signOut();
+          YaverFeedback.showLogin();
+          throw new Error('Session expired — please sign in again.');
+        }
         const transient = /Network request failed|timeout|ECONNREFUSED|Failed to fetch|fetch failed|aborted/i.test(msg);
         if (!transient) throw err;
         const ok = await YaverFeedback.reconnect();

package/src/MachinePickerScreen.tsx

@@ -72,15 +72,19 @@ export const YaverMachinePickerScreen: React.FC<YaverMachinePickerProps> = ({
 
   const renderDevice = (device: RemoteDevice) => {
     const selected = device.deviceId === currentDeviceId;
-    // Match the Yaver mobile app: HEARTBEAT_STALE_MS is 90 s. Using
-    // 60 s here flashed yellow on a single missed agent beat even
-    // though the Mac was up.
-    const stale =
-      device.lastHeartbeat > 0 &&
-      Date.now() - device.lastHeartbeat > 90_000;
+    // Trust Convex's `isOnline` — the backend already gates it on a
+    // fresh 90 s heartbeat (see backend/convex/devices.ts
+    // deriveIsOnline). Re-checking on the client produced false
+    // yellows from phone↔backend clock skew around the 89-90 s mark.
+    //
+    // `runnerDown` intentionally does NOT flip the dot. That flag
+    // tracks whether the AI runner (claude-code, aider, ...) is
+    // healthy — a separate concern from "can I reach this machine?"
+    // Mobile app surfaces runner issues via a separate badge, not
+    // this dot. Picker's job is reachability, nothing more.
     const healthColor = !device.isOnline
       ? '#ef4444'
-      : device.needsAuth || device.runnerDown || stale
+      : device.needsAuth
         ? '#f59e0b'
         : '#22c55e';
     return (

package/src/auth.ts

@@ -67,8 +67,13 @@ const TOKEN_KEY = 'yaver_feedback_auth_token';
 const USER_KEY = 'yaver_feedback_user';
 const DEVICE_KEY = 'yaver_feedback_selected_device';
 
+// Source of truth: mobile/src/lib/constants.ts → CONVEX_SITE_URL.
+// The yaver-io Convex deployment was migrated from shocking-echidna-394
+// to perceptive-minnow-557; sessions minted against the old deployment
+// don't validate on agents that point at the new one, producing a 403
+// "invalid token" from the agent's authSDK middleware.
 export const DEFAULT_CONVEX_SITE_URL =
-  'https://shocking-echidna-394.eu-west-1.convex.site';
+  'https://perceptive-minnow-557.eu-west-1.convex.site';
 export const DEFAULT_WEB_BASE_URL = 'https://yaver.io';
 
 let convexSiteUrl = DEFAULT_CONVEX_SITE_URL;