yaver-feedback-react-native 0.7.5 → 0.7.7

package/dist/FeedbackModal.js

@@ -58,9 +58,22 @@ const FeedbackModal = () => {
                 setAction('idle');
             }
         });
+        // Agent streams build / compile progress through the BlackBox
+        // SSE command channel as `command: "status"`; YaverFeedback re-emits
+        // it as `yaverFeedback:status`. Show the most recent message in the
+        // toast so a multi-second rebuild feels like "working" instead of
+        // "stuck".
+        const statusSub = react_native_1.DeviceEventEmitter.addListener('yaverFeedback:status', (payload) => {
+            if (!mountedRef.current)
+                return;
+            const msg = payload?.message || payload?.phase || '';
+            if (msg)
+                setToast(msg);
+        });
         return () => {
             mountedRef.current = false;
             sub.remove();
+            statusSub.remove();
         };
     }, []);
     const closeSoon = (0, react_1.useCallback)((delayMs = 1200) => {
@@ -92,18 +105,27 @@ const FeedbackModal = () => {
             await fn(client);
         }
         catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            // 401 / 403 "invalid token" — the cached session is stale
-            // (common after a Convex deployment migration). Sign out so
-            // the next interaction surfaces the login sheet, then bubble
-            // a readable error up to the user.
-            const authFailed = /\b(401|403)\b.*invalid token|invalid token|unauthor/i.test(msg);
+            const msg = (err instanceof Error ? err.message : String(err)) || '';
+            // Avoid unbounded `.*` in regex — on RN 0.81 / Hermes rope
+            // strings plus a background SSE reconnect, that pattern has
+            // reliably SIGSEGV'd Hermes's string-view flattening path.
+            // Split into short, literal-only alternations.
+            const lower = msg.toLowerCase();
+            const authFailed = lower.indexOf('invalid token') >= 0 ||
+                lower.indexOf('unauthor') >= 0 ||
+                lower.indexOf(' 401') >= 0 ||
+                lower.indexOf(' 403') >= 0;
             if (authFailed) {
                 await YaverFeedback_1.YaverFeedback.signOut();
                 YaverFeedback_1.YaverFeedback.showLogin();
                 throw new Error('Session expired — please sign in again.');
             }
-            const transient = /Network request failed|timeout|ECONNREFUSED|Failed to fetch|fetch failed|aborted/i.test(msg);
+            const transient = lower.indexOf('network request failed') >= 0 ||
+                lower.indexOf('econnrefused') >= 0 ||
+                lower.indexOf('failed to fetch') >= 0 ||
+                lower.indexOf('fetch failed') >= 0 ||
+                lower.indexOf('aborted') >= 0 ||
+                lower.indexOf('timeout') >= 0;
             if (!transient)
                 throw err;
             const ok = await YaverFeedback_1.YaverFeedback.reconnect();

package/dist/MachinePickerScreen.js

@@ -94,15 +94,33 @@ const YaverMachinePickerScreen = ({ token, currentDeviceId, onPick, onCancel, })
             : device.needsAuth
                 ? '#f59e0b'
                 : '#22c55e';
+        // Derive a single short status phrase the user can act on.
+        let statusLine = device.platform;
+        if (!device.isOnline) {
+            statusLine = 'Offline — start `yaver serve` on the Mac';
+        }
+        else if (device.needsAuth) {
+            statusLine =
+                'Needs pairing — open the Yaver app to adopt this machine';
+        }
+        else if (device.runnerDown) {
+            statusLine = 'Runner down — restart the coding agent on the Mac';
+        }
+        else {
+            // Happy-path subtitle: platform + optional host/share hint.
+            statusLine = device.platform;
+            if (device.isGuest && device.hostEmail) {
+                statusLine = `${statusLine} • ${device.hostEmail}`;
+            }
+            else if (device.accessScope === 'shared-scoped') {
+                statusLine = `${statusLine} • paylaşılan`;
+            }
+        }
         return (<react_native_1.TouchableOpacity key={device.deviceId} style={[styles.deviceRow, selected && styles.deviceSelected]} onPress={() => handlePick(device)}>
         <react_native_1.View style={[styles.health, { backgroundColor: healthColor }]}/>
         <react_native_1.View style={{ flex: 1 }}>
           <react_native_1.Text style={styles.deviceName}>{device.name || device.deviceId}</react_native_1.Text>
-          <react_native_1.Text style={styles.deviceMeta}>
-            {device.platform}
-            {device.isGuest && device.hostEmail ? `  •  ${device.hostEmail}` : ''}
-            {device.accessScope === 'shared-scoped' ? '  •  paylaşılan' : ''}
-          </react_native_1.Text>
+          <react_native_1.Text style={styles.deviceMeta}>{statusLine}</react_native_1.Text>
         </react_native_1.View>
         {selected && <react_native_1.Text style={styles.selectedBadge}>seçili</react_native_1.Text>}
       </react_native_1.TouchableOpacity>);

package/dist/P2PClient.js

@@ -13,21 +13,28 @@ const react_native_1 = require("react-native");
  * running on the host machine".
  */
 function friendlyReloadError(status, body) {
-    const lower = body.toLowerCase();
-    if (/connection refused|econnrefused/.test(lower) &&
-        /127\.0\.0\.1|localhost/.test(lower)) {
+    // Plain .indexOf instead of regex — short literal tests sidestep
+    // a Hermes rope-flatten SIGSEGV we saw on RN 0.81 / iOS 18.3.1
+    // when the same body was already being processed by a concurrent
+    // SSE reconnect loop.
+    const lower = (body || '').toLowerCase();
+    const hasRefused = lower.indexOf('connection refused') >= 0 ||
+        lower.indexOf('econnrefused') >= 0;
+    const hasLoopback = lower.indexOf('127.0.0.1') >= 0 || lower.indexOf('localhost') >= 0;
+    if (hasRefused && hasLoopback) {
         return ('No dev server running on your machine. ' +
             'Start Metro with `yaver dev start` or use "Screenshot & Fix" instead.');
     }
-    if (/no dev server/.test(lower) || /not running/.test(lower)) {
+    if (lower.indexOf('no dev server') >= 0 ||
+        lower.indexOf('not running') >= 0) {
         return 'No dev server running on your machine. Start Metro first.';
     }
-    if (status === 403)
+    if (status === 401 || status === 403) {
         return 'Agent rejected the session — please sign in again.';
-    if (status === 401)
-        return 'Agent rejected the session — please sign in again.';
-    if (status >= 500)
+    }
+    if (status >= 500) {
         return 'Agent hit an internal error while reloading. Check `yaver logs`.';
+    }
     return `Reload failed (${status}).`;
 }
 /**
@@ -208,52 +215,46 @@ class P2PClient {
      * via the BlackBox command channel.
      * @param mode - "dev" for hot reload, "bundle" for native bundle rebuild
      */
-    async reloadApp(mode = 'dev') {
-        // Primary path: /dev/reload — same endpoint the Yaver mobile app uses.
-        // Triggers Metro/Expo HMR synchronously and emits an SSE `reload` event
-        // on /dev/events that the FeedbackModal can subscribe to for progress.
+    async reloadApp(mode = 'bundle') {
+        // Default path: always rebuild a fresh Hermes bundle.
         //
-        // Only fall back to /dev/reload-app (the BlackBox-SSE-broadcast path)
-        // when the primary path reports "no dev server running" — that mode is
-        // really for the mobile app remotely kicking a third-party app, not
-        // for the app kicking itself.
-        const primary = await fetch(`${this.baseUrl}/dev/reload`, {
-            method: 'POST',
-            headers: { Authorization: `Bearer ${this.authToken}` },
-        });
-        if (primary.ok) {
-            return primary.json().catch(() => ({ ok: true }));
-        }
-        // Common shape of the `/dev/reload` failure when Metro isn't running
-        // on the agent's host: the agent tries to forward the reload to
-        // `http://127.0.0.1:<metroPort>/reload` and that connection refuses.
-        // In that case a JS hot-reload is simply not possible — pivot to
-        // `/dev/reload-app` in bundle mode, which rebuilds + pushes a fresh
-        // Hermes bundle without needing Metro to be alive.
-        const primaryText = await primary.text().catch(() => '');
-        const noDevServer = primary.status === 400 ||
-            primary.status === 404 ||
-            primary.status >= 500 ||
-            /connection refused|no dev server|not running|ECONNREFUSED/i.test(primaryText);
-        if (noDevServer || mode === 'bundle') {
-            const nextMode = mode === 'bundle' ? 'bundle' : 'bundle';
-            const fallback = await fetch(`${this.baseUrl}/dev/reload-app`, {
+        // Rationale: the SDK's common caller is a phone user who's not
+        // sitting at their Mac — they're doing vibe coding with an AI agent
+        // editing files on the Mac remotely, or they installed the app via
+        // TestFlight and there's no Metro running at all. A Metro-based
+        // reload would either fail (Metro offline) or — worse — serve a
+        // stale bundle because Metro can be slow to re-index fresh edits.
+        // Bundle mode always produces the correct bytecode from the current
+        // filesystem state, taking ~30–60 s, and hits /dev/reload-app which
+        // uses BlackBox SSE to push the fresh bundle URL to the device.
+        //
+        // Callers who know they want Metro HMR pass `mode='dev'` explicitly;
+        // we still honour that. Everything else defaults to bundle.
+        if (mode === 'dev') {
+            const primary = await fetch(`${this.baseUrl}/dev/reload`, {
                 method: 'POST',
-                headers: {
-                    Authorization: `Bearer ${this.authToken}`,
-                    'Content-Type': 'application/json',
-                },
-                body: JSON.stringify({ mode: nextMode }),
+                headers: { Authorization: `Bearer ${this.authToken}` },
             });
-            if (!fallback.ok) {
-                const fallbackText = await fallback.text().catch(() => '');
-                // Give the user something actionable instead of a raw Go error.
-                const friendlyFromFallback = friendlyReloadError(fallback.status, fallbackText);
-                throw new Error(friendlyFromFallback);
+            if (primary.ok) {
+                return primary.json().catch(() => ({ ok: true }));
             }
-            return fallback.json().catch(() => ({ ok: true }));
+            // Dev mode failed — fall through to bundle rebuild below rather
+            // than surfacing the raw error, so the user never has to know
+            // Metro wasn't running.
+        }
+        const res = await fetch(`${this.baseUrl}/dev/reload-app`, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${this.authToken}`,
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify({ mode: 'bundle' }),
+        });
+        if (!res.ok) {
+            const text = await res.text().catch(() => '');
+            throw new Error(friendlyReloadError(res.status, text));
         }
-        throw new Error(friendlyReloadError(primary.status, primaryText));
+        return res.json().catch(() => ({ ok: true }));
     }
     /**
      * Open a vibing session on the connected agent. Vibing is the Yaver

package/dist/YaverFeedback.js

@@ -126,9 +126,13 @@ class YaverFeedback {
                 }
             });
         }
-        // Wire up BlackBox command handlers for reload signals from the agent.
-        // This enables the vibe coder to trigger reload from the Yaver mobile app
-        // and have the third-party app (with this SDK) automatically reload.
+        // Wire up BlackBox command handlers for reload + status signals from
+        // the agent. Opens an SSE channel the agent uses to:
+        //   - broadcast reload_bundle so the phone picks up a fresh Hermes
+        //     bundle after a vibe-coding edit;
+        //   - stream build/compile progress ("Compiling bundle…", "Pushing
+        //     assets…", "Done") so the SDK can surface it like a normal
+        //     "Working…" spinner instead of a silent 60-second freeze.
         if (enabled) {
             BlackBox_1.BlackBox.onCommand((cmd) => {
                 if (cmd.command === 'reload') {
@@ -149,7 +153,36 @@ class YaverFeedback {
                         YaverFeedback.defaultReloadBundle(bundleUrl, assetsUrl);
                     }
                 }
+                else if (cmd.command === 'status') {
+                    // Pipe agent progress pings to the UI. The FeedbackModal
+                    // subscribes to this event and renders the message while a
+                    // reload / build is in flight.
+                    const message = typeof cmd.data?.message === 'string'
+                        ? cmd.data.message
+                        : '';
+                    const phase = typeof cmd.data?.phase === 'string'
+                        ? cmd.data.phase
+                        : '';
+                    const { DeviceEventEmitter } = require('react-native');
+                    DeviceEventEmitter.emit('yaverFeedback:status', {
+                        message,
+                        phase,
+                        at: Date.now(),
+                    });
+                }
             });
+            // NOTE: BlackBox.start() is intentionally NOT auto-called here.
+            // An earlier version (0.7.6) did auto-start it, and when the
+            // agent was in bootstrap / needs-auth mode — which can happen
+            // any time after `yaver serve` restarts before the user pairs —
+            // the SSE channel retried with exponential backoff on 401s,
+            // producing a tight loop of string concatenation + JSON parse
+            // that tripped a Hermes rope-string SIGSEGV on iOS 18.3.1
+            // during any other JS-thread regex work (e.g. react-native-
+            // view-shot's internal string handling during Screenshot &
+            // Fix). Host apps call BlackBox.start() explicitly once they
+            // know the agent URL + token are valid (SFMG does this inside
+            // its YaverFeedbackWidget after auth).
         }
         // NOTE: We intentionally do NOT hook ErrorUtils.setGlobalHandler().
         // Sentry, Crashlytics, Bugsnag, and other tools all compete for that

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "yaver-feedback-react-native",
-  "version": "0.7.5",
+  "version": "0.7.7",
   "description": "Visual feedback SDK for Yaver — bug reports, screen recording, voice annotations, and local-first developer workflows",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/FeedbackModal.tsx

@@ -67,9 +67,23 @@ export const FeedbackModal: React.FC = () => {
         setAction('idle');
       }
     });
+    // Agent streams build / compile progress through the BlackBox
+    // SSE command channel as `command: "status"`; YaverFeedback re-emits
+    // it as `yaverFeedback:status`. Show the most recent message in the
+    // toast so a multi-second rebuild feels like "working" instead of
+    // "stuck".
+    const statusSub = DeviceEventEmitter.addListener(
+      'yaverFeedback:status',
+      (payload: { message?: string; phase?: string }) => {
+        if (!mountedRef.current) return;
+        const msg = payload?.message || payload?.phase || '';
+        if (msg) setToast(msg);
+      },
+    );
     return () => {
       mountedRef.current = false;
       sub.remove();
+      statusSub.remove();
     };
   }, []);
 
@@ -102,18 +116,29 @@ export const FeedbackModal: React.FC = () => {
       try {
         await fn(client);
       } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        // 401 / 403 "invalid token" — the cached session is stale
-        // (common after a Convex deployment migration). Sign out so
-        // the next interaction surfaces the login sheet, then bubble
-        // a readable error up to the user.
-        const authFailed = /\b(401|403)\b.*invalid token|invalid token|unauthor/i.test(msg);
+        const msg = (err instanceof Error ? err.message : String(err)) || '';
+        // Avoid unbounded `.*` in regex — on RN 0.81 / Hermes rope
+        // strings plus a background SSE reconnect, that pattern has
+        // reliably SIGSEGV'd Hermes's string-view flattening path.
+        // Split into short, literal-only alternations.
+        const lower = msg.toLowerCase();
+        const authFailed =
+          lower.indexOf('invalid token') >= 0 ||
+          lower.indexOf('unauthor') >= 0 ||
+          lower.indexOf(' 401') >= 0 ||
+          lower.indexOf(' 403') >= 0;
         if (authFailed) {
           await YaverFeedback.signOut();
           YaverFeedback.showLogin();
           throw new Error('Session expired — please sign in again.');
         }
-        const transient = /Network request failed|timeout|ECONNREFUSED|Failed to fetch|fetch failed|aborted/i.test(msg);
+        const transient =
+          lower.indexOf('network request failed') >= 0 ||
+          lower.indexOf('econnrefused') >= 0 ||
+          lower.indexOf('failed to fetch') >= 0 ||
+          lower.indexOf('fetch failed') >= 0 ||
+          lower.indexOf('aborted') >= 0 ||
+          lower.indexOf('timeout') >= 0;
         if (!transient) throw err;
         const ok = await YaverFeedback.reconnect();
         if (!ok) throw err;

package/src/MachinePickerScreen.tsx

@@ -87,6 +87,24 @@ export const YaverMachinePickerScreen: React.FC<YaverMachinePickerProps> = ({
       : device.needsAuth
         ? '#f59e0b'
         : '#22c55e';
+    // Derive a single short status phrase the user can act on.
+    let statusLine = device.platform;
+    if (!device.isOnline) {
+      statusLine = 'Offline — start `yaver serve` on the Mac';
+    } else if (device.needsAuth) {
+      statusLine =
+        'Needs pairing — open the Yaver app to adopt this machine';
+    } else if (device.runnerDown) {
+      statusLine = 'Runner down — restart the coding agent on the Mac';
+    } else {
+      // Happy-path subtitle: platform + optional host/share hint.
+      statusLine = device.platform;
+      if (device.isGuest && device.hostEmail) {
+        statusLine = `${statusLine} • ${device.hostEmail}`;
+      } else if (device.accessScope === 'shared-scoped') {
+        statusLine = `${statusLine} • paylaşılan`;
+      }
+    }
     return (
       <TouchableOpacity
         key={device.deviceId}
@@ -96,11 +114,7 @@ export const YaverMachinePickerScreen: React.FC<YaverMachinePickerProps> = ({
         <View style={[styles.health, { backgroundColor: healthColor }]} />
         <View style={{ flex: 1 }}>
           <Text style={styles.deviceName}>{device.name || device.deviceId}</Text>
-          <Text style={styles.deviceMeta}>
-            {device.platform}
-            {device.isGuest && device.hostEmail ? `  •  ${device.hostEmail}` : ''}
-            {device.accessScope === 'shared-scoped' ? '  •  paylaşılan' : ''}
-          </Text>
+          <Text style={styles.deviceMeta}>{statusLine}</Text>
         </View>
         {selected && <Text style={styles.selectedBadge}>seçili</Text>}
       </TouchableOpacity>

package/src/P2PClient.ts

@@ -18,22 +18,34 @@ export interface FeedbackEvent {
  * running on the host machine".
  */
 function friendlyReloadError(status: number, body: string): string {
-  const lower = body.toLowerCase();
-  if (
-    /connection refused|econnrefused/.test(lower) &&
-    /127\.0\.0\.1|localhost/.test(lower)
-  ) {
+  // Plain .indexOf instead of regex — short literal tests sidestep
+  // a Hermes rope-flatten SIGSEGV we saw on RN 0.81 / iOS 18.3.1
+  // when the same body was already being processed by a concurrent
+  // SSE reconnect loop.
+  const lower = (body || '').toLowerCase();
+  const hasRefused =
+    lower.indexOf('connection refused') >= 0 ||
+    lower.indexOf('econnrefused') >= 0;
+  const hasLoopback =
+    lower.indexOf('127.0.0.1') >= 0 || lower.indexOf('localhost') >= 0;
+  if (hasRefused && hasLoopback) {
     return (
       'No dev server running on your machine. ' +
       'Start Metro with `yaver dev start` or use "Screenshot & Fix" instead.'
     );
   }
-  if (/no dev server/.test(lower) || /not running/.test(lower)) {
+  if (
+    lower.indexOf('no dev server') >= 0 ||
+    lower.indexOf('not running') >= 0
+  ) {
     return 'No dev server running on your machine. Start Metro first.';
   }
-  if (status === 403) return 'Agent rejected the session — please sign in again.';
-  if (status === 401) return 'Agent rejected the session — please sign in again.';
-  if (status >= 500) return 'Agent hit an internal error while reloading. Check `yaver logs`.';
+  if (status === 401 || status === 403) {
+    return 'Agent rejected the session — please sign in again.';
+  }
+  if (status >= 500) {
+    return 'Agent hit an internal error while reloading. Check `yaver logs`.';
+  }
   return `Reload failed (${status}).`;
 }
 
@@ -244,59 +256,47 @@ export class P2PClient {
    * via the BlackBox command channel.
    * @param mode - "dev" for hot reload, "bundle" for native bundle rebuild
    */
-  async reloadApp(mode: 'dev' | 'bundle' = 'dev'): Promise<{ ok: boolean }> {
-    // Primary path: /dev/reload — same endpoint the Yaver mobile app uses.
-    // Triggers Metro/Expo HMR synchronously and emits an SSE `reload` event
-    // on /dev/events that the FeedbackModal can subscribe to for progress.
+  async reloadApp(mode: 'dev' | 'bundle' = 'bundle'): Promise<{ ok: boolean }> {
+    // Default path: always rebuild a fresh Hermes bundle.
     //
-    // Only fall back to /dev/reload-app (the BlackBox-SSE-broadcast path)
-    // when the primary path reports "no dev server running" — that mode is
-    // really for the mobile app remotely kicking a third-party app, not
-    // for the app kicking itself.
-    const primary = await fetch(`${this.baseUrl}/dev/reload`, {
-      method: 'POST',
-      headers: { Authorization: `Bearer ${this.authToken}` },
-    });
-    if (primary.ok) {
-      return primary.json().catch(() => ({ ok: true }));
-    }
-
-    // Common shape of the `/dev/reload` failure when Metro isn't running
-    // on the agent's host: the agent tries to forward the reload to
-    // `http://127.0.0.1:<metroPort>/reload` and that connection refuses.
-    // In that case a JS hot-reload is simply not possible — pivot to
-    // `/dev/reload-app` in bundle mode, which rebuilds + pushes a fresh
-    // Hermes bundle without needing Metro to be alive.
-    const primaryText = await primary.text().catch(() => '');
-    const noDevServer =
-      primary.status === 400 ||
-      primary.status === 404 ||
-      primary.status >= 500 ||
-      /connection refused|no dev server|not running|ECONNREFUSED/i.test(primaryText);
-
-    if (noDevServer || mode === 'bundle') {
-      const nextMode = mode === 'bundle' ? 'bundle' : 'bundle';
-      const fallback = await fetch(`${this.baseUrl}/dev/reload-app`, {
+    // Rationale: the SDK's common caller is a phone user who's not
+    // sitting at their Mac — they're doing vibe coding with an AI agent
+    // editing files on the Mac remotely, or they installed the app via
+    // TestFlight and there's no Metro running at all. A Metro-based
+    // reload would either fail (Metro offline) or — worse — serve a
+    // stale bundle because Metro can be slow to re-index fresh edits.
+    // Bundle mode always produces the correct bytecode from the current
+    // filesystem state, taking ~30–60 s, and hits /dev/reload-app which
+    // uses BlackBox SSE to push the fresh bundle URL to the device.
+    //
+    // Callers who know they want Metro HMR pass `mode='dev'` explicitly;
+    // we still honour that. Everything else defaults to bundle.
+    if (mode === 'dev') {
+      const primary = await fetch(`${this.baseUrl}/dev/reload`, {
         method: 'POST',
-        headers: {
-          Authorization: `Bearer ${this.authToken}`,
-          'Content-Type': 'application/json',
-        },
-        body: JSON.stringify({ mode: nextMode }),
+        headers: { Authorization: `Bearer ${this.authToken}` },
       });
-      if (!fallback.ok) {
-        const fallbackText = await fallback.text().catch(() => '');
-        // Give the user something actionable instead of a raw Go error.
-        const friendlyFromFallback = friendlyReloadError(
-          fallback.status,
-          fallbackText,
-        );
-        throw new Error(friendlyFromFallback);
+      if (primary.ok) {
+        return primary.json().catch(() => ({ ok: true }));
       }
-      return fallback.json().catch(() => ({ ok: true }));
+      // Dev mode failed — fall through to bundle rebuild below rather
+      // than surfacing the raw error, so the user never has to know
+      // Metro wasn't running.
     }
 
-    throw new Error(friendlyReloadError(primary.status, primaryText));
+    const res = await fetch(`${this.baseUrl}/dev/reload-app`, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${this.authToken}`,
+        'Content-Type': 'application/json',
+      },
+      body: JSON.stringify({ mode: 'bundle' }),
+    });
+    if (!res.ok) {
+      const text = await res.text().catch(() => '');
+      throw new Error(friendlyReloadError(res.status, text));
+    }
+    return res.json().catch(() => ({ ok: true }));
   }
 
   /**

package/src/YaverFeedback.ts

@@ -142,9 +142,13 @@ export class YaverFeedback {
       });
     }
 
-    // Wire up BlackBox command handlers for reload signals from the agent.
-    // This enables the vibe coder to trigger reload from the Yaver mobile app
-    // and have the third-party app (with this SDK) automatically reload.
+    // Wire up BlackBox command handlers for reload + status signals from
+    // the agent. Opens an SSE channel the agent uses to:
+    //   - broadcast reload_bundle so the phone picks up a fresh Hermes
+    //     bundle after a vibe-coding edit;
+    //   - stream build/compile progress ("Compiling bundle…", "Pushing
+    //     assets…", "Done") so the SDK can surface it like a normal
+    //     "Working…" spinner instead of a silent 60-second freeze.
     if (enabled) {
       BlackBox.onCommand((cmd) => {
         if (cmd.command === 'reload') {
@@ -161,8 +165,38 @@ export class YaverFeedback {
           } else {
             YaverFeedback.defaultReloadBundle(bundleUrl, assetsUrl);
           }
+        } else if (cmd.command === 'status') {
+          // Pipe agent progress pings to the UI. The FeedbackModal
+          // subscribes to this event and renders the message while a
+          // reload / build is in flight.
+          const message =
+            typeof cmd.data?.message === 'string'
+              ? (cmd.data.message as string)
+              : '';
+          const phase =
+            typeof cmd.data?.phase === 'string'
+              ? (cmd.data.phase as string)
+              : '';
+          const { DeviceEventEmitter } = require('react-native');
+          DeviceEventEmitter.emit('yaverFeedback:status', {
+            message,
+            phase,
+            at: Date.now(),
+          });
         }
       });
+      // NOTE: BlackBox.start() is intentionally NOT auto-called here.
+      // An earlier version (0.7.6) did auto-start it, and when the
+      // agent was in bootstrap / needs-auth mode — which can happen
+      // any time after `yaver serve` restarts before the user pairs —
+      // the SSE channel retried with exponential backoff on 401s,
+      // producing a tight loop of string concatenation + JSON parse
+      // that tripped a Hermes rope-string SIGSEGV on iOS 18.3.1
+      // during any other JS-thread regex work (e.g. react-native-
+      // view-shot's internal string handling during Screenshot &
+      // Fix). Host apps call BlackBox.start() explicitly once they
+      // know the agent URL + token are valid (SFMG does this inside
+      // its YaverFeedbackWidget after auth).
     }
 
     // NOTE: We intentionally do NOT hook ErrorUtils.setGlobalHandler().