yaver-feedback-react-native 0.9.4 → 0.9.6

package/src/YaverFeedback.ts

@@ -14,6 +14,7 @@ import {
   setStrictNativeAuth,
   getToken,
   getSelectedDeviceId,
+  getDogfoodAccountAccess,
   listReachableDevices,
   clearToken,
   clearSelectedDeviceId,
@@ -26,7 +27,7 @@ import {
   setQuickIconColorPreset,
   QuickIconColorPreset,
 } from './preferences';
-import { resolveSDKDogfood, type SDKDogfoodStatus } from './dogfoodPolicy';
+import { resolveSDKDogfood, type SDKDogfoodStatus, type DogfoodAccessSnapshot } from './dogfoodPolicy';
 import { YaverDeviceDogfood, type DeviceDogfoodOptions, type DeviceDogfoodSession, type DeviceDogfoodState } from './deviceDogfood';
 
 export interface DogfoodOnboardingOptions extends DeviceDogfoodOptions {
@@ -36,6 +37,13 @@ export interface DogfoodOnboardingOptions extends DeviceDogfoodOptions {
   framework?: string;
 }
 
+export type DogfoodFlowPhase = 'idle' | 'denied' | 'auth-required' | 'machine-required' | 'opening' | 'error';
+export interface DogfoodFlowState {
+  phase: DogfoodFlowPhase;
+  appId?: string;
+  error?: string;
+}
+
 function unrefTimer(timer: ReturnType<typeof setTimeout>): void {
   const maybeNodeTimer = timer as unknown as { unref?: () => void };
   if (typeof maybeNodeTimer.unref === 'function') {
@@ -179,6 +187,50 @@ let autoStartTimer: ReturnType<typeof setTimeout> | null = null;
 let reportLaunchInFlight = false;
 let crashReportInFlight = false;
 let dogfoodOnboarding: DogfoodOnboardingOptions | null = null;
+let dogfoodFlowState: DogfoodFlowState = { phase: 'idle' };
+const dogfoodFlowListeners = new Set<(state: DogfoodFlowState) => void>();
+let dogfoodShortcutAppStateSubscription: { remove: () => void } | null = null;
+let dogfoodActivationSubscription: { remove: () => void } | null = null;
+let dogfoodShortcutLaunchInFlight = false;
+let lastDogfoodActivationUrl = '';
+
+function publishDogfoodFlow(state: DogfoodFlowState): void {
+  dogfoodFlowState = state;
+  try { config?.dogfood?.onStateChange?.(state); } catch { /* host callback */ }
+  dogfoodFlowListeners.forEach((listener) => {
+    try { listener(state); } catch { /* host callbacks never break the SDK */ }
+  });
+}
+
+async function consumeNativeDogfoodShortcut(): Promise<void> {
+  if (dogfoodShortcutLaunchInFlight || !config?.dogfood?.appShortcut) return;
+  const native = (NativeModules as any)?.YaverHotReload;
+  if (typeof native?.consumeDogfoodShortcut !== 'function') return;
+  try {
+    if (!(await native.consumeDogfoodShortcut())) return;
+    dogfoodShortcutLaunchInFlight = true;
+    // Let FeedbackModal/AuthOverlay effects mount after a cold launch.
+    const timer = setTimeout(() => {
+      void YaverFeedback.openDogfood().finally(() => { dogfoodShortcutLaunchInFlight = false; });
+    }, 350);
+    unrefTimer(timer);
+  } catch {
+    dogfoodShortcutLaunchInFlight = false;
+  }
+}
+
+function handleDogfoodActivationUrl(url?: string | null): void {
+  if (!url || url === lastDogfoodActivationUrl || !config?.dogfood) return;
+  try {
+    const parsed = new URL(url);
+    if (!parsed.protocol.startsWith('yaver-dogfood-') || parsed.hostname !== 'activate') return;
+  } catch {
+    return;
+  }
+  lastDogfoodActivationUrl = url;
+  const timer = setTimeout(() => { void YaverFeedback.openDogfood(); }, 350);
+  unrefTimer(timer);
+}
 
 /** Resolve the user's relay password by validating their auth token
  *  against Convex. Used whenever we (re)build the P2PClient so a
@@ -438,6 +490,31 @@ export class YaverFeedback {
       void YaverFeedback.hydrateSession();
     }
 
+    if (config.dogfood?.appShortcut) {
+      void YaverFeedback.syncDogfoodAppShortcut();
+      void consumeNativeDogfoodShortcut();
+      try {
+        const { AppState } = require('react-native');
+        dogfoodShortcutAppStateSubscription?.remove();
+        dogfoodShortcutAppStateSubscription = AppState.addEventListener('change', (state: string) => {
+          if (state === 'active') {
+            void YaverFeedback.syncDogfoodAppShortcut();
+            void consumeNativeDogfoodShortcut();
+          }
+        });
+      } catch { /* native shortcut unavailable on web/test runtimes */ }
+    }
+    if (config.dogfood) {
+      try {
+        const { Linking } = require('react-native');
+        dogfoodActivationSubscription?.remove();
+        dogfoodActivationSubscription = Linking.addEventListener('url', ({ url }: { url: string }) => {
+          handleDogfoodActivationUrl(url);
+        });
+        void Linking.getInitialURL().then(handleDogfoodActivationUrl).catch(() => {});
+      } catch { /* linking unavailable in non-native test runtimes */ }
+    }
+
     // Create P2P client if we have a URL
     if (config.agentUrl) {
       p2pAuthToken = config.authToken ?? null;
@@ -634,7 +711,7 @@ export class YaverFeedback {
    * Sets config.agentUrl and creates P2PClient on success.
    */
   static async discoverAgent(): Promise<void> {
-    if (!config || !enabled) return;
+    if (!config || (!enabled && !dogfoodOnboarding)) return;
     if (config.agentUrl) return; // already have a URL
     if (!config.authToken) return; // need auth before discovery can succeed
 
@@ -663,7 +740,7 @@ export class YaverFeedback {
    * Returns true when a new URL was adopted.
    */
   static async reconnect(): Promise<boolean> {
-    if (!config || !enabled) return false;
+    if (!config || (!enabled && !dogfoodOnboarding)) return false;
     if (!config.authToken || !config.convexUrl) return false;
     try {
       const result = await YaverDiscovery.refreshFromConvex({
@@ -727,6 +804,7 @@ export class YaverFeedback {
     if (config.autoStartBlackBox !== false && !BlackBox.isStreaming) {
       YaverFeedback.scheduleBlackBoxAutoStart();
     }
+    await YaverFeedback.syncDogfoodAppShortcut().catch(() => false);
   }
 
   /** Returns true once the SDK has a session token it can use. */
@@ -807,17 +885,181 @@ export class YaverFeedback {
     DeviceEventEmitter.emit('yaverFeedback:startMachinePicker');
   }
 
-  /** Begin the reusable host-app Dogfood wizard. Owner OAuth and machine
-   * selection intentionally happen before installation enrollment/runtime
-   * controls because starting builds or runners is owner-level authority. */
-  static beginDogfoodOnboarding(options: DogfoodOnboardingOptions): void {
+  /** Configure Dogfood once during host init. Hosts still decide whether and
+   * where to render an affordance; `openDogfood()` owns all flow mechanics. */
+  static configureDogfood(options: DogfoodOnboardingOptions): void {
     dogfoodOnboarding = options;
-    if (!config) YaverFeedback.init({ autoLogin: true } as FeedbackConfig);
-    if (!YaverFeedback.isAuthed()) {
+  }
+
+  /**
+   * Open Dogfood using config.dogfood + the normal app identity. Cached OAuth,
+   * machine, runner and model choices are reused. The corresponding picker is
+   * shown only when a required choice is missing.
+   */
+  static async openDogfood(overrides?: Partial<DogfoodOnboardingOptions>): Promise<DogfoodFlowState> {
+    if (!config && overrides?.appId) {
+      return YaverFeedback.beginDogfoodOnboarding(overrides as DogfoodOnboardingOptions);
+    }
+    const configured = config?.dogfood;
+    const appId = overrides?.appId || configured?.appId || config?.bundleId;
+    if (!appId) {
+      const state: DogfoodFlowState = { phase: 'error', error: 'Dogfood requires an appId or FeedbackConfig.bundleId.' };
+      publishDogfoodFlow(state);
+      return state;
+    }
+    dogfoodOnboarding = {
+      appId,
+      label: overrides?.label || configured?.label || config?.projectName || appId,
+      projectName: overrides?.projectName || configured?.projectName || config?.projectName,
+      framework: overrides?.framework || configured?.framework,
+      backendUrl: overrides?.backendUrl || configured?.backendUrl,
+      secureStore: overrides?.secureStore,
+    };
+    if (configured?.canShow) {
+      // This hook is presentation policy, but it still receives the complete
+      // backend-authoritative snapshot. Passing an owner-only approximation
+      // here made legitimate approved testers fail custom `access.authorized`
+      // gates even though their exact phone key was active.
+      const access = await YaverFeedback.getDogfoodAccess();
+      try {
+        if (!(await configured.canShow(access))) {
+          const state: DogfoodFlowState = { phase: 'denied', appId };
+          publishDogfoodFlow(state);
+          return state;
+        }
+      } catch (cause) {
+        const state: DogfoodFlowState = {
+          phase: 'error',
+          appId,
+          error: cause instanceof Error ? cause.message : String(cause),
+        };
+        publishDogfoodFlow(state);
+        return state;
+      }
+    }
+    return YaverFeedback.continueDogfoodOnboarding();
+  }
+
+  /** Resolve the host-facing ACL snapshot without granting authority. This is
+   * the one endpoint custom Settings screens need for visibility/status UI. */
+  static async getDogfoodAccess(): Promise<DogfoodAccessSnapshot> {
+    const configured = config?.dogfood;
+    const appId = dogfoodOnboarding?.appId || configured?.appId || config?.bundleId;
+    if (!appId) throw new Error('Dogfood requires an appId or FeedbackConfig.bundleId.');
+    let installationId: string | undefined;
+    let deviceState: DogfoodAccessSnapshot['deviceState'] = 'unknown';
+    try {
+      const device = new YaverDeviceDogfood({
+        appId,
+        label: dogfoodOnboarding?.label || configured?.label || config?.projectName,
+        backendUrl: dogfoodOnboarding?.backendUrl || configured?.backendUrl,
+        secureStore: dogfoodOnboarding?.secureStore,
+      });
+      installationId = (await device.enrollmentInfo()).installationId;
+      deviceState = await device.status();
+    } catch {
+      // UI status must degrade to unknown; openDogfood still offers owner OAuth.
+    }
+    const token = config?.authToken || await getToken();
+    const account = token
+      ? await getDogfoodAccountAccess(appId, token, installationId)
+      : { authenticated: false, ownerAuthorized: false, installationAuthorized: false };
+    const yaverAuthenticated = account.authenticated;
+    const ownerAuthorized = account.ownerAuthorized;
+    return {
+      appId,
+      yaverAuthenticated,
+      ownerAuthorized,
+      installationId,
+      deviceState,
+      authorized: yaverAuthenticated && account.installationAuthorized && deviceState === 'active',
+    };
+  }
+
+  /** Add/remove the platform Home Screen shortcut from backend-authoritative
+   * owner/device ACL state. Static plist shortcuts are intentionally avoided:
+   * an unauthorized install must never advertise a hidden developer action. */
+  static async syncDogfoodAppShortcut(): Promise<boolean> {
+    const shortcut = config?.dogfood?.appShortcut;
+    const native = (NativeModules as any)?.YaverHotReload;
+    if (!shortcut || typeof native?.setDogfoodShortcut !== 'function') return false;
+    const access = await YaverFeedback.getDogfoodAccess();
+    let visible = access.authorized;
+    if (visible && config?.dogfood?.canShow) {
+      try {
+        visible = await config.dogfood.canShow(access);
+      } catch {
+        visible = false;
+      }
+    }
+    const label = typeof shortcut === 'object' && shortcut.label
+      ? shortcut.label
+      : `Dogfood ${config?.dogfood?.label || config?.projectName || ''}`.trim();
+    // Product contract: both a valid full Yaver account AND this phone's
+    // backend-approved app installation are required. Neither factor alone
+    // advertises the developer surface.
+    await native.setDogfoodShortcut(visible, label || 'Dogfood');
+    return visible;
+  }
+
+  /** Backwards-compatible entry point for existing integrations. */
+  static async beginDogfoodOnboarding(options: DogfoodOnboardingOptions): Promise<DogfoodFlowState> {
+    YaverFeedback.configureDogfood(options);
+    if (!config) {
+      YaverFeedback.init({
+        autoLogin: true,
+        enabled: true,
+        projectName: options.projectName || options.label,
+        bundleId: options.appId,
+      } as FeedbackConfig);
+    }
+    return YaverFeedback.continueDogfoodOnboarding();
+  }
+
+  /** Continue after OAuth or machine selection. Public so custom host UI can
+   * hand control back without recreating the SDK state machine. */
+  static async continueDogfoodOnboarding(): Promise<DogfoodFlowState> {
+    const appId = dogfoodOnboarding?.appId;
+    if (!dogfoodOnboarding || !appId) {
+      const state: DogfoodFlowState = { phase: 'error', error: 'Dogfood is not configured.' };
+      publishDogfoodFlow(state);
+      return state;
+    }
+    await YaverFeedback.hydrateSession();
+    const token = config?.authToken || await getToken();
+    const account = token
+      ? await getDogfoodAccountAccess(appId, token)
+      : { authenticated: false, ownerAuthorized: false, installationAuthorized: false };
+    // A device key is a second factor for this installation, never a
+    // replacement for a real Yaver account. Narrow installation sessions and
+    // stale/invalid cached tokens both return authenticated=false here.
+    if (!account.authenticated) {
+      const state: DogfoodFlowState = { phase: 'auth-required', appId };
+      publishDogfoodFlow(state);
       YaverFeedback.showLogin();
-      return;
+      return state;
+    }
+    if (!config?.preferredDeviceId) {
+      const state: DogfoodFlowState = { phase: 'machine-required', appId };
+      publishDogfoodFlow(state);
+      YaverFeedback.showMachinePicker();
+      return state;
     }
-    YaverFeedback.showMachinePicker();
+    const state: DogfoodFlowState = { phase: 'opening', appId };
+    publishDogfoodFlow(state);
+    const { DeviceEventEmitter } = require('react-native');
+    DeviceEventEmitter.emit('yaverFeedback:startReport');
+    return state;
+  }
+
+  static getDogfoodFlowState(): DogfoodFlowState {
+    return dogfoodFlowState;
+  }
+
+  static onDogfoodFlowState(listener: (state: DogfoodFlowState) => void): () => void {
+    dogfoodFlowListeners.add(listener);
+    listener(dogfoodFlowState);
+    return () => dogfoodFlowListeners.delete(listener);
   }
 
   static getDogfoodOnboarding(): DogfoodOnboardingOptions | null {
@@ -826,6 +1068,7 @@ export class YaverFeedback {
 
   static clearDogfoodOnboarding(): void {
     dogfoodOnboarding = null;
+    publishDogfoodFlow({ phase: 'idle' });
   }
 
   /**
@@ -847,6 +1090,7 @@ export class YaverFeedback {
     p2pClient = null;
     renderP2PClient = null;
     p2pAuthToken = null;
+    await import('./auth').then(({ saveSelectedDeviceId }) => saveSelectedDeviceId(deviceId));
     await YaverFeedback.discoverAgent();
   }
 
@@ -917,6 +1161,7 @@ export class YaverFeedback {
     p2pClient = null;
     renderP2PClient = null;
     p2pAuthToken = null;
+    await YaverFeedback.syncDogfoodAppShortcut().catch(() => false);
   }
 
   /**
@@ -1178,16 +1423,16 @@ export class YaverFeedback {
     return resolveSDKDogfood(config?.dogfood);
   }
 
-  /** One-call, account-free Dogfood bootstrap for third-party apps. On first
-   * launch it creates/proves the installation key and returns pending; after
-   * owner approval the same call obtains a short-lived scoped Yaver session
-   * and enables Dogfood UX without the host app implementing OAuth. */
+  /** One-call account-bound Dogfood bootstrap for third-party apps. The host
+   * app needs no auth backend of its own: SDK OAuth supplies the full Yaver
+   * account, then this creates/proves the installation key. Owner approval
+   * binds that account + appId + phone key before a scoped session is minted. */
   static async enableDeviceDogfood(options: DeviceDogfoodOptions): Promise<{
     status: DeviceDogfoodState;
     installationId: string;
     session: DeviceDogfoodSession | null;
   }> {
-    const client = new YaverDeviceDogfood(options);
+    const client = new YaverDeviceDogfood({ ...options, authToken: options.authToken || config?.authToken });
     let status = await client.status();
     if (status === 'unregistered' || status === 'pending' || status === 'cancelled' || status === 'revoked' || status === 'superseded') {
       const enrolled = status === 'unregistered' || status === 'pending'
@@ -1200,20 +1445,22 @@ export class YaverFeedback {
     if (!config) YaverFeedback.init({ autoLogin: false } as FeedbackConfig);
     if (config) {
       config.dogfood = {
+        ...config.dogfood,
         enabled: status === 'active' && !!session,
         appId: options.appId,
         installationId: info.installationId,
         installationStatus: status === 'active' && session ? 'active' : status === 'unregistered' ? 'pending' : status,
         label: options.label,
       };
-      // A normal Yaver OAuth session remains authoritative for the runtime
-      // wizard. Only account-free hosts adopt the narrow installation token.
-      if (session && !config.authToken) await YaverFeedback.setAuthToken(session.token);
+      // A normal full Yaver OAuth session remains authoritative for the
+      // runtime wizard. The narrow installation token is intentionally never
+      // promoted into account auth.
     }
     try {
       const { DeviceEventEmitter } = require('react-native');
       DeviceEventEmitter.emit('yaverFeedback:dogfoodChanged', { active: !!session, status });
     } catch { /* noop */ }
+    await YaverFeedback.syncDogfoodAppShortcut().catch(() => false);
     return { status, installationId: info.installationId, session };
   }
 
@@ -1768,6 +2015,11 @@ export class YaverFeedback {
     // init() stacked a second one on top.
     commandUnsubscribe?.();
     commandUnsubscribe = null;
+    dogfoodShortcutAppStateSubscription?.remove();
+    dogfoodShortcutAppStateSubscription = null;
+    dogfoodActivationSubscription?.remove();
+    dogfoodActivationSubscription = null;
+    lastDogfoodActivationUrl = '';
     // Before `enabled = false` / `config = null` below, so an in-flight retry
     // can't fire against a torn-down config.
     YaverFeedback.cancelBlackBoxAutoStart();

package/src/__tests__/NativeDogfoodShortcut.test.ts

@@ -0,0 +1,37 @@
+import { readFileSync } from 'fs';
+import { join } from 'path';
+
+const plugin = require('../../app.plugin.js') as {
+  __test: { patchDogfoodAppShortcut(contents: string): string };
+};
+
+describe('native Dogfood shortcut contract', () => {
+  it('patches cold and warm iOS shortcut delivery idempotently', () => {
+    const source = `
+public class AppDelegate: ExpoAppDelegate {
+  public override func application(
+    _ application: UIApplication,
+    didFinishLaunchingWithOptions launchOptions: [UIApplication.LaunchOptionsKey: Any]? = nil
+  ) -> Bool {
+    setupYaverHotReload()
+    return true
+  }
+}
+`;
+    const once = plugin.__test.patchDogfoodAppShortcut(source);
+    expect(once).toContain('launchOptions?[.shortcutItem]');
+    expect(once).toContain('performActionFor shortcutItem');
+    expect(once).toContain('markDogfoodShortcutPending()');
+    expect(plugin.__test.patchDogfoodAppShortcut(once)).toBe(once);
+  });
+
+  it('uses dynamic native shortcuts on both platforms', () => {
+    const ios = readFileSync(join(__dirname, '../../ios/YaverHotReload.swift'), 'utf8');
+    const android = readFileSync(join(__dirname, '../../android/src/main/java/io/yaver/feedback/YaverHotReloadModule.java'), 'utf8');
+    expect(ios).toContain('UIApplication.shared.shortcutItems');
+    expect(ios).toContain('setDogfoodShortcut');
+    expect(android).toContain('ShortcutManager');
+    expect(android).toContain('addDynamicShortcuts');
+    expect(android).toContain('consumeDogfoodShortcut');
+  });
+});

package/src/__tests__/ReportIdentity.test.ts

@@ -10,9 +10,6 @@ const mockReactNative = {
 };
 const mockExpoModule: { default: Record<string, unknown> } = { default: {} };
 
-jest.mock('react-native', () => mockReactNative);
-jest.mock('expo-constants', () => mockExpoModule, { virtual: true });
-
 /** Mirrors mobile/app.json in the Talos repo — the SDK's first external consumer. */
 const EXPO_CONFIG = {
   name: 'Talos',
@@ -29,8 +26,13 @@ function mockExpoConstants(expoConfig: unknown, extra: Record<string, unknown> =
 function loadResolve(): typeof import('../P2PClient').resolveReportIdentity {
   let resolve!: typeof import('../P2PClient').resolveReportIdentity;
   jest.isolateModules(() => {
+    // Configure the mocks inside the isolated registry. Top-level virtual
+    // mocks are sticky across Jest's worker registry and lost to the real
+    // expo-constants package after a clean npm ci, making this suite depend on
+    // file order. doMock is non-hoisted and binds these exact mutable objects
+    // immediately before P2PClient is evaluated.
     jest.doMock('react-native', () => mockReactNative);
-    jest.doMock('expo-constants', () => mockExpoModule, { virtual: true });
+    jest.doMock('expo-constants', () => mockExpoModule);
     resolve = require('../P2PClient').resolveReportIdentity;
   });
   return resolve;

package/src/__tests__/YaverFeedback.test.ts

@@ -1,4 +1,4 @@
-import { DeviceEventEmitter } from 'react-native';
+import { DeviceEventEmitter, NativeModules } from 'react-native';
 import { YaverFeedback } from '../YaverFeedback';
 
 // Mock react-native: DeviceEventEmitter for event dispatch + Platform so
@@ -9,6 +9,13 @@ jest.mock('react-native', () => ({
     addListener: jest.fn(() => ({ remove: jest.fn() })),
   },
   Platform: { OS: 'ios' },
+  NativeModules: {
+    YaverHotReload: {
+      setDogfoodShortcut: jest.fn(async () => true),
+      consumeDogfoodShortcut: jest.fn(async () => false),
+    },
+  },
+  AppState: { addEventListener: jest.fn(() => ({ remove: jest.fn() })) },
 }));
 
 // Mock Discovery
@@ -23,6 +30,12 @@ jest.mock('../auth', () => ({
   setStrictNativeAuth: jest.fn(),
   getToken: jest.fn(async () => null),
   getSelectedDeviceId: jest.fn(async () => null),
+  getDogfoodAccountAccess: jest.fn(async (_appId: string, token: string) => ({
+    authenticated: token === 'owner-token',
+    ownerAuthorized: token === 'owner-token',
+    installationAuthorized: token === 'owner-token',
+  })),
+  saveSelectedDeviceId: jest.fn(async () => {}),
   clearToken: jest.fn(async () => {}),
   clearSelectedDeviceId: jest.fn(async () => {}),
   listReachableDevices: jest.fn(async () => ({
@@ -48,22 +61,108 @@ beforeEach(() => {
   // YaverFeedback uses module-level variables (config, enabled, p2pClient).
   // We reset them by calling init with a known state or relying on isInitialized checks.
   // For a clean slate, we re-init with enabled=false then verify.
+  jest.restoreAllMocks();
   jest.clearAllMocks();
 });
 
 describe('YaverFeedback', () => {
   describe('Dogfood onboarding', () => {
-    it('starts with Yaver OAuth when the host has no session', () => {
+    it('starts with Yaver OAuth when the host has no session', async () => {
       YaverFeedback.init({ enabled: true });
-      YaverFeedback.beginDogfoodOnboarding({ appId: 'io.example.app', label: 'Example' });
+      await YaverFeedback.beginDogfoodOnboarding({ appId: 'io.example.app', label: 'Example' });
       expect(DeviceEventEmitter.emit).toHaveBeenCalledWith('yaverFeedback:startLogin');
     });
 
-    it('asks for a machine after an existing OAuth session', () => {
+    it('asks for a machine after an existing OAuth session', async () => {
       YaverFeedback.init({ enabled: true, authToken: 'owner-token' });
-      YaverFeedback.beginDogfoodOnboarding({ appId: 'io.example.app', label: 'Example' });
+      await YaverFeedback.beginDogfoodOnboarding({ appId: 'io.example.app', label: 'Example' });
       expect(DeviceEventEmitter.emit).toHaveBeenCalledWith('yaverFeedback:startMachinePicker');
     });
+
+    it('reuses the configured app identity and selected machine', async () => {
+      YaverFeedback.init({
+        enabled: true,
+        authToken: 'owner-token',
+        preferredDeviceId: 'device-1',
+        projectName: 'Example',
+        bundleId: 'io.example.app',
+        dogfood: { framework: 'expo' },
+      });
+      const state = await YaverFeedback.openDogfood();
+      expect(state).toEqual({ phase: 'opening', appId: 'io.example.app' });
+      expect(DeviceEventEmitter.emit).toHaveBeenCalledWith('yaverFeedback:startReport');
+      expect(DeviceEventEmitter.emit).not.toHaveBeenCalledWith('yaverFeedback:startMachinePicker');
+    });
+
+    it('publishes flow state for custom host UI', async () => {
+      YaverFeedback.init({ enabled: true });
+      const states: string[] = [];
+      const unsubscribe = YaverFeedback.onDogfoodFlowState((state) => states.push(state.phase));
+      await YaverFeedback.beginDogfoodOnboarding({ appId: 'io.example.app' });
+      unsubscribe();
+      expect(states[states.length - 1]).toBe('auth-required');
+    });
+
+    it('lets a host ACL hide its affordance without opening auth UI', async () => {
+      YaverFeedback.init({
+        enabled: true,
+        bundleId: 'io.example.app',
+        dogfood: { canShow: () => false },
+      });
+      const state = await YaverFeedback.openDogfood();
+      expect(state).toEqual({ phase: 'denied', appId: 'io.example.app' });
+      expect(DeviceEventEmitter.emit).not.toHaveBeenCalledWith('yaverFeedback:startLogin');
+    });
+
+    it('adds the app shortcut only for a signed-in and approved phone', async () => {
+      YaverFeedback.init({ bundleId: 'io.example.app', dogfood: {} });
+      YaverFeedback.getConfig()!.dogfood!.appShortcut = { label: 'Dogfood Example' };
+      jest.spyOn(YaverFeedback, 'getDogfoodAccess').mockResolvedValueOnce({
+        appId: 'io.example.app',
+        yaverAuthenticated: true,
+        ownerAuthorized: false,
+        installationId: 'phone-1',
+        deviceState: 'active',
+        authorized: true,
+      });
+      await YaverFeedback.syncDogfoodAppShortcut();
+      expect((NativeModules as any).YaverHotReload.setDogfoodShortcut)
+        .toHaveBeenCalledWith(true, 'Dogfood Example');
+    });
+
+    it('removes the shortcut when the phone is approved but Yaver is signed out', async () => {
+      YaverFeedback.init({ bundleId: 'io.example.app', dogfood: {} });
+      YaverFeedback.getConfig()!.dogfood!.appShortcut = true;
+      jest.spyOn(YaverFeedback, 'getDogfoodAccess').mockResolvedValueOnce({
+        appId: 'io.example.app',
+        yaverAuthenticated: false,
+        ownerAuthorized: false,
+        installationId: 'phone-1',
+        deviceState: 'active',
+        authorized: false,
+      });
+      await YaverFeedback.syncDogfoodAppShortcut();
+      expect((NativeModules as any).YaverHotReload.setDogfoodShortcut)
+        .toHaveBeenCalledWith(false, 'Dogfood');
+    });
+
+    it('applies the host presentation ACL after backend device authorization', async () => {
+      YaverFeedback.init({
+        bundleId: 'io.example.app',
+        dogfood: { appShortcut: true, canShow: async () => false },
+      });
+      jest.spyOn(YaverFeedback, 'getDogfoodAccess').mockResolvedValueOnce({
+        appId: 'io.example.app',
+        yaverAuthenticated: true,
+        ownerAuthorized: false,
+        installationId: 'phone-1',
+        deviceState: 'active',
+        authorized: true,
+      });
+      await YaverFeedback.syncDogfoodAppShortcut();
+      expect((NativeModules as any).YaverHotReload.setDogfoodShortcut)
+        .toHaveBeenCalledWith(false, 'Dogfood');
+    });
   });
 
   describe('init()', () => {

package/src/__tests__/deviceDogfood.test.ts

@@ -23,7 +23,7 @@ describe('YaverDeviceDogfood', () => {
 
   test('keeps identity stable and proves possession rather than trusting the UUID', async () => {
     const store = new MemorySecureStore();
-    const client = new YaverDeviceDogfood({ appId: 'io.example.test', secureStore: store, backendUrl: 'https://dogfood.test' });
+    const client = new YaverDeviceDogfood({ appId: 'io.example.test', authToken: 'full-yaver-token', secureStore: store, backendUrl: 'https://dogfood.test' });
     const first = await client.enrollmentInfo();
     const second = await client.enrollmentInfo();
     expect(second).toEqual(first);
@@ -45,7 +45,7 @@ describe('YaverDeviceDogfood', () => {
 
   test('re-register rotates key and installation while preserving only the logical slot', async () => {
     const store = new MemorySecureStore();
-    const client = new YaverDeviceDogfood({ appId: 'io.example.test', secureStore: store, backendUrl: 'https://dogfood.test' });
+    const client = new YaverDeviceDogfood({ appId: 'io.example.test', authToken: 'full-yaver-token', secureStore: store, backendUrl: 'https://dogfood.test' });
     const before = await client.enrollmentInfo();
     jest.spyOn(globalThis, 'fetch').mockImplementation(async (input) => {
       if (String(input).endsWith('/dogfood/enroll/start')) return response({ status: 'pending', challenge: 'rotate-nonce' });

package/src/__tests__/dogfoodPolicy.test.ts

@@ -20,7 +20,7 @@ describe('resolveSDKDogfood', () => {
     });
   });
 
-  it('supports a key-enrolled installation without an app account', () => {
+  it('supports an account-bound key-enrolled installation without an app backend', () => {
     expect(resolveSDKDogfood({ enabled: true, appId: 'io.example', installationStatus: 'active' }).code)
       .toBe('SDK_DOGFOOD_INSTALLATION_REQUIRED');
     expect(resolveSDKDogfood({ enabled: true, appId: 'io.example', installationId: 'install-1', installationStatus: 'pending' }).code)