yaver-feedback-react-native 0.9.4 → 0.9.7

package/README.md

@@ -113,31 +113,46 @@ still require the user's normal Yaver authentication.
 
 ### Device-enrolled Dogfood for apps without their own OAuth/backend
 
-Mount `FeedbackModal`, then call the reusable wizard from the host app's
-Settings button:
+Mount `FeedbackModal` once and configure the ACL-backed dynamic app shortcut.
+No permanent Settings row or shake gesture is required:
 
 ```tsx
-YaverFeedback.beginDogfoodOnboarding({
-  appId: 'io.example.app',
-  label: 'Example',
+YaverFeedback.init({
+  enabled: true,
+  trigger: 'manual',
+  quickIcon: 'off',
+  disableShakeGesture: true,
+  bundleId: 'io.example.app',
   projectName: 'example',
-  framework: 'expo',
+  dogfood: {
+    label: 'Example',
+    framework: 'expo',
+    appShortcut: { label: 'Dogfood Example' },
+    // Optional host presentation ACL. Backend account + phone-key approval
+    // remains mandatory even when this returns true.
+    canShow: (access) => appUser.isAdmin && access.authorized,
+  },
 });
 ```
 
-The wizard runs Yaver OAuth first, then machine, coding runner/model, project,
-and Browser/Hermes/WebRTC selection. It renders raw build logs and exposes the
-ready preview. The app also creates a random installation ID and an Ed25519 key
-inside SecureStore. The ID is a public handle, not a credential: enrollment
-and each short session require a server challenge signed by the private key.
-An owner approves, cancels, or revokes the installation from Yaver Settings or
-MCP. Re-registering rotates the key/ID, preserves only the logical local slot,
-and supersedes that slot's prior active generation without disabling another
-phone.
+For first-time setup, a signed-in user opens the app from Yaver's Dogfood app
+catalog. The public deep link contains no token. The SDK runs stateful Yaver
+OAuth, machine, coding runner/model, project, and Browser/Hermes/WebRTC setup.
+After the owner approves that exact account + app ID + phone key, iOS and
+Android add the long-press shortcut. Signing out, revocation, or host ACL denial
+removes it on the next foreground sync.
+
+The app creates a random installation ID and Ed25519 key inside SecureStore.
+The ID is a public handle, not a credential: enrollment and each short session
+require a server challenge signed by the private key. An owner approves,
+cancels, or revokes from Yaver mobile, CLI, or MCP. Re-registering rotates the
+key/ID, preserves only the logical local slot, and atomically supersedes that
+slot's prior active generation when the replacement is approved, without
+disabling another phone.
 
 Install `expo-secure-store` and `expo-crypto` in Expo hosts. Bare React Native
 hosts may provide a `secureStore` implementation. Runtime/build controls still
-require full Yaver OAuth; the account-free installation token defaults to
+require full Yaver OAuth; the account-bound installation token defaults to
 `feedback` + `blackbox` and cannot be rotated into a long-lived owner token.
 
 ### Embeddable Dogfood runtime

package/android/src/main/java/io/yaver/feedback/YaverHotReloadModule.java

@@ -2,7 +2,12 @@ package io.yaver.feedback;
 
 import android.app.Activity;
 import android.content.Context;
+import android.content.Intent;
 import android.content.SharedPreferences;
+import android.content.pm.ShortcutInfo;
+import android.content.pm.ShortcutManager;
+import android.graphics.drawable.Icon;
+import android.os.Build;
 import android.os.Handler;
 import android.os.Looper;
 import android.util.Log;
@@ -25,6 +30,7 @@ import java.io.InputStream;
 import java.net.HttpURLConnection;
 import java.net.URL;
 import java.util.concurrent.Executors;
+import java.util.Collections;
 
 /**
  * Hot reload native module for the Yaver Feedback SDK (Android).
@@ -45,6 +51,8 @@ public class YaverHotReloadModule extends ReactContextBaseJavaModule {
     private static final String PREFS_KEY_BOOT_ATTEMPTS = "boot_attempts";
     private static final String PREFS_KEY_BUNDLE_MTIME = "bundle_mtime";
     private static final int MAX_BOOT_ATTEMPTS = 3;
+    private static final String DOGFOOD_SHORTCUT_ID = "io.yaver.feedback.dogfood";
+    private static final String DOGFOOD_SHORTCUT_EXTRA = "io.yaver.feedback.DOGFOOD";
 
     public YaverHotReloadModule(ReactApplicationContext context) {
         super(context);
@@ -153,6 +161,57 @@ public class YaverHotReloadModule extends ReactContextBaseJavaModule {
         promise.resolve(true);
     }
 
+    /** Dynamic shortcut: only JS, after backend ACL resolution, may add it. */
+    @ReactMethod
+    public void setDogfoodShortcut(boolean enabled, String label, Promise promise) {
+        try {
+            if (Build.VERSION.SDK_INT < Build.VERSION_CODES.N_MR1) {
+                promise.resolve(false);
+                return;
+            }
+            Context context = getReactApplicationContext();
+            ShortcutManager manager = context.getSystemService(ShortcutManager.class);
+            if (manager == null) {
+                promise.resolve(false);
+                return;
+            }
+            manager.removeDynamicShortcuts(Collections.singletonList(DOGFOOD_SHORTCUT_ID));
+            if (enabled) {
+                Intent intent = context.getPackageManager().getLaunchIntentForPackage(context.getPackageName());
+                if (intent == null) throw new IllegalStateException("App launch intent unavailable");
+                intent.setAction(DOGFOOD_SHORTCUT_EXTRA);
+                intent.putExtra(DOGFOOD_SHORTCUT_EXTRA, true);
+                ShortcutInfo shortcut = new ShortcutInfo.Builder(context, DOGFOOD_SHORTCUT_ID)
+                        .setShortLabel(label == null || label.trim().isEmpty() ? "Dogfood" : label)
+                        .setLongLabel(label == null || label.trim().isEmpty() ? "Dogfood" : label)
+                        .setIcon(Icon.createWithResource(context, android.R.drawable.ic_media_play))
+                        .setIntent(intent)
+                        .build();
+                manager.addDynamicShortcuts(Collections.singletonList(shortcut));
+            }
+            promise.resolve(enabled);
+        } catch (Exception error) {
+            promise.reject("DOGFOOD_SHORTCUT_FAILED", error.getMessage(), error);
+        }
+    }
+
+    @ReactMethod
+    public void consumeDogfoodShortcut(Promise promise) {
+        Activity activity = getCurrentActivity();
+        if (activity == null || activity.getIntent() == null) {
+            promise.resolve(false);
+            return;
+        }
+        Intent intent = activity.getIntent();
+        boolean pending = DOGFOOD_SHORTCUT_EXTRA.equals(intent.getAction())
+                || intent.getBooleanExtra(DOGFOOD_SHORTCUT_EXTRA, false);
+        if (pending) {
+            intent.removeExtra(DOGFOOD_SHORTCUT_EXTRA);
+            intent.setAction(Intent.ACTION_MAIN);
+        }
+        promise.resolve(pending);
+    }
+
     /**
      * Recreate the React Native context with the new bundle.
      */

package/app.plugin.js

@@ -20,6 +20,7 @@ const {
   withXcodeProject,
   withAppDelegate,
   withMainApplication,
+  withMainActivity,
   withDangerousMod,
   createRunOncePlugin,
 } = require(configPluginsPath);
@@ -38,6 +39,14 @@ function withYaverFeedbackIOS(config) {
       config.modResults.NSMicrophoneUsageDescription =
         "Used for voice annotations in feedback reports during development";
     }
+    const bundleId = config.ios?.bundleIdentifier;
+    if (bundleId) {
+      const scheme = `yaver-dogfood-${bundleId.toLowerCase().replace(/[^a-z0-9.-]/g, "-")}`;
+      const urlTypes = config.modResults.CFBundleURLTypes || [];
+      const exists = urlTypes.some((entry) => Array.isArray(entry.CFBundleURLSchemes) && entry.CFBundleURLSchemes.includes(scheme));
+      if (!exists) urlTypes.push({ CFBundleURLName: `${bundleId}.yaver-dogfood`, CFBundleURLSchemes: [scheme] });
+      config.modResults.CFBundleURLTypes = urlTypes;
+    }
     return config;
   });
 }
@@ -78,6 +87,28 @@ function withYaverFeedbackAndroid(config) {
       }
     }
 
+    const packageName = config.android?.package;
+    const mainActivity = manifest.application?.[0]?.activity?.find((activity) =>
+      activity.$?.["android:name"]?.endsWith("MainActivity")
+    );
+    if (packageName && mainActivity) {
+      const scheme = `yaver-dogfood-${packageName.toLowerCase().replace(/[^a-z0-9.-]/g, "-")}`;
+      mainActivity["intent-filter"] = mainActivity["intent-filter"] || [];
+      const exists = mainActivity["intent-filter"].some((filter) =>
+        filter.data?.some((data) => data.$?.["android:scheme"] === scheme)
+      );
+      if (!exists) {
+        mainActivity["intent-filter"].push({
+          action: [{ $: { "android:name": "android.intent.action.VIEW" } }],
+          category: [
+            { $: { "android:name": "android.intent.category.DEFAULT" } },
+            { $: { "android:name": "android.intent.category.BROWSABLE" } },
+          ],
+          data: [{ $: { "android:scheme": scheme, "android:host": "activate" } }],
+        });
+      }
+    }
+
     return config;
   });
 }
@@ -183,8 +214,10 @@ function withYaverAppDelegateHook(config) {
   return withAppDelegate(config, (config) => {
     const contents = config.modResults.contents;
 
-    // Only patch if not already patched
+    // Existing consumers may already have the hot-reload hook from an older
+    // SDK. Still apply newer, independently-versioned native contracts.
     if (contents.includes("YaverHotReload")) {
+      config.modResults.contents = patchDogfoodAppShortcut(contents);
       return config;
     }
 
@@ -326,11 +359,136 @@ function withYaverAppDelegateHook(config) {
       patched = patched.replace("return setupYaverHotReload()", "setupYaverHotReload()");
     }
 
-    config.modResults.contents = patched;
+    config.modResults.contents = patchDogfoodAppShortcut(patched);
     return config;
   });
 }
 
+/** Wire the dynamic iOS Home Screen shortcut into the SDK native module.
+ * The shortcut itself is created at runtime only after backend ACL success;
+ * this hook merely consumes a user-selected action on warm/cold launch. */
+function patchDogfoodAppShortcut(contents) {
+  if (contents.includes("Yaver Feedback SDK Dogfood Shortcut")) return contents;
+  let patched = contents;
+
+  // Cold launch: UIKit supplies the shortcut in launchOptions before RN/JS.
+  const setupAnchor = "    setupYaverHotReload()";
+  if (patched.includes(setupAnchor)) {
+    patched = patched.replace(
+      setupAnchor,
+      `    if let yaverShortcut = launchOptions?[.shortcutItem] as? UIApplicationShortcutItem,
+       yaverShortcut.type == YaverHotReload.dogfoodShortcutType {
+      YaverHotReload.markDogfoodShortcutPending()
+    }
+${setupAnchor}`
+    );
+  }
+
+  const classCloseIndex = findAppDelegateClassClose(patched);
+  if (classCloseIndex > 0) {
+    const handler = `
+  // MARK: - Yaver Feedback SDK Dogfood Shortcut
+
+  public override func application(
+    _ application: UIApplication,
+    performActionFor shortcutItem: UIApplicationShortcutItem,
+    completionHandler: @escaping (Bool) -> Void
+  ) {
+    if shortcutItem.type == YaverHotReload.dogfoodShortcutType {
+      YaverHotReload.markDogfoodShortcutPending()
+      completionHandler(true)
+      return
+    }
+    super.application(application, performActionFor: shortcutItem, completionHandler: completionHandler)
+  }
+`;
+    patched = patched.slice(0, classCloseIndex) + handler + patched.slice(classCloseIndex);
+  }
+  return patched;
+}
+
+/** Scene-based iOS apps receive Home Screen quick actions through their
+ * UIWindowSceneDelegate, not AppDelegate. A CarPlay scene manifest is enough
+ * to opt an otherwise ordinary Expo app into that lifecycle, so patch the
+ * phone scene delegate when a host has one. */
+function withYaverSceneDelegateShortcut(config) {
+  return withDangerousMod(config, [
+    "ios",
+    (config) => {
+      const appName = config.modRequest.projectName;
+      if (!appName) return config;
+      const sourceDir = path.join(config.modRequest.platformProjectRoot, appName);
+      if (!fs.existsSync(sourceDir)) return config;
+
+      for (const entry of fs.readdirSync(sourceDir, { withFileTypes: true })) {
+        if (!entry.isFile() || !entry.name.endsWith("SceneDelegate.swift")) continue;
+        const sourcePath = path.join(sourceDir, entry.name);
+        const source = fs.readFileSync(sourcePath, "utf8");
+        if (!source.includes("UIWindowSceneDelegate")) continue;
+        const patched = patchDogfoodSceneDelegate(source);
+        if (patched !== source) fs.writeFileSync(sourcePath, patched);
+      }
+      return config;
+    },
+  ]);
+}
+
+function patchDogfoodSceneDelegate(contents) {
+  if (contents.includes("Yaver Feedback SDK Dogfood Scene Shortcut")) return contents;
+
+  let patched = insertAtEndOfMethod(
+    contents,
+    "options connectionOptions: UIScene.ConnectionOptions",
+    `
+    // Yaver Feedback SDK Dogfood Scene Shortcut: cold launch.
+    if let yaverShortcut = connectionOptions.shortcutItem,
+       yaverShortcut.type == YaverHotReload.dogfoodShortcutType {
+      YaverHotReload.markDogfoodShortcutPending()
+    }
+`
+  );
+
+  // A custom scene delegate may already forward quick actions to the patched
+  // AppDelegate. Keep that host-owned behavior instead of declaring a second
+  // method with the same Swift selector.
+  if (patched.includes("performActionFor shortcutItem")) return patched;
+
+  const classCloseIndex = findWindowSceneDelegateClassClose(patched);
+  if (classCloseIndex < 0) return patched;
+  const handler = `
+  // MARK: - Yaver Feedback SDK Dogfood Scene Shortcut
+
+  func windowScene(
+    _ windowScene: UIWindowScene,
+    performActionFor shortcutItem: UIApplicationShortcutItem,
+    completionHandler: @escaping (Bool) -> Void
+  ) {
+    guard shortcutItem.type == YaverHotReload.dogfoodShortcutType else {
+      completionHandler(false)
+      return
+    }
+    YaverHotReload.markDogfoodShortcutPending()
+    completionHandler(true)
+  }
+`;
+  return patched.slice(0, classCloseIndex) + handler + patched.slice(classCloseIndex);
+}
+
+function findWindowSceneDelegateClassClose(contents) {
+  const headerMatch = contents.match(/class\s+\w+\s*:[^{]*UIWindowSceneDelegate[^{]*\{/);
+  if (!headerMatch) return -1;
+  const bodyStart = headerMatch.index + headerMatch[0].length - 1;
+  let depth = 0;
+  for (let i = bodyStart; i < contents.length; i++) {
+    if (contents[i] === "{") depth++;
+    else if (contents[i] === "}") {
+      depth--;
+      if (depth === 0) return i;
+    }
+  }
+  return -1;
+}
+
 // Locate the closing brace of `class AppDelegate: ...` in an Expo
 // Swift AppDelegate file. Returns the index of the matching `}` for
 // the AppDelegate class's opening `{`, or -1 if not found. We need
@@ -404,6 +562,33 @@ function withYaverAndroidHotReload(config) {
     return config;
   });
 
+  // ReactActivity forwards warm-launch intents to RN but does not update
+  // Activity.getIntent(). The native module consumes the explicit shortcut
+  // extra from getIntent(), so retain the latest intent for warm launches.
+  config = withMainActivity(config, (config) => {
+    let contents = config.modResults.contents;
+    if (contents.includes("yaverDogfoodShortcutIntent")) return config;
+    const classClose = contents.lastIndexOf("}");
+    if (classClose < 0) return config;
+    const method = config.modResults.language === "kt"
+      ? `
+  // Yaver Feedback SDK: retain dynamic Dogfood shortcut warm-launch intent.
+  override fun onNewIntent(yaverDogfoodShortcutIntent: android.content.Intent) {
+    setIntent(yaverDogfoodShortcutIntent)
+    super.onNewIntent(yaverDogfoodShortcutIntent)
+  }
+`
+      : `
+  // Yaver Feedback SDK: retain dynamic Dogfood shortcut warm-launch intent.
+  @Override public void onNewIntent(android.content.Intent yaverDogfoodShortcutIntent) {
+    setIntent(yaverDogfoodShortcutIntent);
+    super.onNewIntent(yaverDogfoodShortcutIntent);
+  }
+`;
+    config.modResults.contents = contents.slice(0, classClose) + method + contents.slice(classClose);
+    return config;
+  });
+
   return config;
 }
 
@@ -608,14 +793,26 @@ function withYaverFeedback(config, props) {
   if (enableHotReload) {
     config = withYaverHotReloadNativeModule(config);
     config = withYaverAppDelegateHook(config);
+    config = withYaverSceneDelegateShortcut(config);
     config = withYaverAndroidHotReload(config);
   }
 
   return config;
 }
 
-module.exports = createRunOncePlugin(
+const yaverFeedbackPlugin = createRunOncePlugin(
   withYaverFeedback,
   pkg.name,
   pkg.version
 );
+
+// Pure transforms are exposed for contract tests only. Keeping the test at the
+// config-plugin seam catches template drift before a consumer discovers it in
+// an archive build.
+yaverFeedbackPlugin.__test = {
+  patchDogfoodAppShortcut,
+  patchDogfoodSceneDelegate,
+  findAppDelegateClassClose,
+  findWindowSceneDelegateClassClose,
+};
+module.exports = yaverFeedbackPlugin;

package/dist/AuthOverlay.js

@@ -89,12 +89,23 @@ const AuthOverlay = () => {
     const handleLoggedIn = async (newToken) => {
         setToken(newToken);
         await YaverFeedback_1.YaverFeedback.setAuthToken(newToken);
-        openPicker();
+        if (YaverFeedback_1.YaverFeedback.getDogfoodOnboarding()) {
+            closeAll();
+            await YaverFeedback_1.YaverFeedback.continueDogfoodOnboarding();
+        }
+        else {
+            openPicker();
+        }
     };
     const handleDevicePicked = async (device) => {
         await YaverFeedback_1.YaverFeedback.setPreferredDevice(device.deviceId);
         closeAll();
-        react_native_1.DeviceEventEmitter.emit('yaverFeedback:startReport');
+        if (YaverFeedback_1.YaverFeedback.getDogfoodOnboarding()) {
+            await YaverFeedback_1.YaverFeedback.continueDogfoodOnboarding();
+        }
+        else {
+            react_native_1.DeviceEventEmitter.emit('yaverFeedback:startReport');
+        }
     };
     return (<>
       <react_native_1.Modal visible={loginVisible} animationType="slide" presentationStyle="fullScreen" onRequestClose={closeAll}>

package/dist/FeedbackModal.js

@@ -236,8 +236,17 @@ const FeedbackModal = () => {
                 || projects[0]
                 || null;
             setDogfoodProject((current) => current && projects.some((item) => item.path === current.path) ? current : preferred);
-            if (preferred)
-                setDogfoodLane((0, DogfoodRuntime_1.defaultDogfoodLane)(preferred.framework || onboarding.framework || 'expo'));
+            if (preferred) {
+                const framework = preferred.framework || onboarding.framework || 'expo';
+                const capabilities = await client.getDogfoodRemoteRuntimeCapabilities(preferred.path, framework).catch(() => null);
+                const nativeRuntimeAvailable = !!capabilities?.targets.some((target) => target.enabled && target.id !== 'browser-window');
+                if (mountedRef.current)
+                    setDogfoodNativeAvailable(nativeRuntimeAvailable);
+                const savedLane = await (0, preferences_1.getPreferredDogfoodLane)(onboarding.appId);
+                const savedSupported = (0, DogfoodRuntime_1.dogfoodLaneOptions)(framework, { nativeRuntimeAvailable })
+                    .some((option) => option.lane === savedLane && option.supported);
+                setDogfoodLane(savedLane && savedSupported ? savedLane : (0, DogfoodRuntime_1.defaultDogfoodLane)(framework));
+            }
         }
         catch (cause) {
             if (mountedRef.current)
@@ -468,8 +477,12 @@ const FeedbackModal = () => {
     (0, react_1.useEffect)(() => {
         mountedRef.current = true;
         const sub = react_native_1.DeviceEventEmitter.addListener('yaverFeedback:startReport', () => {
-            if (YaverFeedback_1.YaverFeedback.isEnabled()) {
-                const onboarding = YaverFeedback_1.YaverFeedback.getDogfoodOnboarding();
+            const onboarding = YaverFeedback_1.YaverFeedback.getDogfoodOnboarding();
+            // Explicit Dogfood remains usable when passive capture/shake is off.
+            // The host still owns visibility; server OAuth/device signatures own
+            // authority. Keeping this event path independent avoids toggling the
+            // user's feedback preference merely to open Developer Mode.
+            if (YaverFeedback_1.YaverFeedback.isEnabled() || onboarding) {
                 const directDogfood = YaverFeedback_1.YaverFeedback.getDogfoodStatus().active;
                 setDogfoodActive(directDogfood);
                 setVisible(true);
@@ -1003,6 +1016,14 @@ const FeedbackModal = () => {
     const readyRunnerCount = runnerCards.filter((row) => row.ready || row.authConfigured).length;
     const missingRunnerCount = runnerCards.filter((row) => !row.installed).length;
     const needsAuthRunnerCount = runnerCards.filter((row) => row.installed && !row.authConfigured && !row.ready).length;
+    const selectedDogfoodRunner = preferredRunner
+        ? runnerCards.find((row) => row.id === preferredRunner) ?? null
+        : null;
+    const dogfoodRunnerReady = !!selectedDogfoodRunner
+        && (selectedDogfoodRunner.ready || selectedDogfoodRunner.authConfigured);
+    const dogfoodModelReady = !selectedDogfoodRunner?.models?.length
+        || !!preferredModel && selectedDogfoodRunner.models.some((model) => model.id === preferredModel);
+    const dogfoodStartBlocked = !dogfoodProject || !dogfoodRunnerReady || !dogfoodModelReady;
     // Once the user fires off a vibe task, swap the entire modal body
     // for the live chat screen. The chat manages its own SSE
     // subscription, multi-turn follow-ups, and Reload button. Closing
@@ -1102,9 +1123,40 @@ const FeedbackModal = () => {
                             <react_native_1.Text style={[styles.dogfoodChoiceText, dogfoodProject?.path === project.path && styles.dogfoodChoiceTextSelected]}>{project.name}</react_native_1.Text>
                           </react_native_1.Pressable>))}
                       </react_native_1.ScrollView>
+                      <react_native_1.Text style={styles.dogfoodStepLabel}>Coding agent</react_native_1.Text>
+                      <react_native_1.View style={styles.dogfoodChoiceRow}>
+                        {runnerCards.filter((row) => row.ready || row.authConfigured).map((row) => (<react_native_1.Pressable key={row.id} onPress={() => {
+                            const nextModel = row.models?.find((model) => model.isDefault)?.id || row.models?.[0]?.id || '';
+                            setPreferredRunnerState(row.id);
+                            setPreferredModelState(nextModel);
+                            void (0, preferences_1.setPreferredRunner)(row.id);
+                            void (0, preferences_1.setPreferredModel)(nextModel || null);
+                        }} style={[styles.dogfoodChoice, preferredRunner === row.id && styles.dogfoodChoiceSelected]} accessibilityRole="button" accessibilityState={{ selected: preferredRunner === row.id }} accessibilityLabel={`Use ${row.name} for Dogfood`}>
+                            <react_native_1.Text style={[styles.dogfoodChoiceText, preferredRunner === row.id && styles.dogfoodChoiceTextSelected]}>{row.name}</react_native_1.Text>
+                          </react_native_1.Pressable>))}
+                      </react_native_1.View>
+                      {readyRunnerCount === 0 ? (<react_native_1.Text style={styles.dogfoodWizardHint}>Sign in or configure a coding agent under Coding Agents below.</react_native_1.Text>) : null}
+                      {selectedDogfoodRunner?.models?.length ? (<>
+                          <react_native_1.Text style={styles.dogfoodStepLabel}>Model</react_native_1.Text>
+                          <react_native_1.ScrollView horizontal showsHorizontalScrollIndicator={false} contentContainerStyle={styles.dogfoodChoiceRow}>
+                            {selectedDogfoodRunner.models.map((model) => (<react_native_1.Pressable key={model.id} onPress={() => {
+                                setPreferredModelState(model.id);
+                                void (0, preferences_1.setPreferredModel)(model.id);
+                            }} style={[styles.dogfoodChoice, preferredModel === model.id && styles.dogfoodChoiceSelected]} accessibilityRole="button" accessibilityState={{ selected: preferredModel === model.id }} accessibilityLabel={`Use ${model.name || model.id} model for Dogfood`}>
+                                <react_native_1.Text style={[styles.dogfoodChoiceText, preferredModel === model.id && styles.dogfoodChoiceTextSelected]}>{model.name || model.id}</react_native_1.Text>
+                              </react_native_1.Pressable>))}
+                          </react_native_1.ScrollView>
+                        </>) : null}
                       <react_native_1.Text style={styles.dogfoodStepLabel}>Runtime lane</react_native_1.Text>
                       <react_native_1.View style={styles.dogfoodChoiceRow}>
-                        {(0, DogfoodRuntime_1.dogfoodLaneOptions)(dogfoodProject?.framework || YaverFeedback_1.YaverFeedback.getDogfoodOnboarding()?.framework || 'expo', { nativeRuntimeAvailable: dogfoodNativeAvailable }).map((option) => (<react_native_1.Pressable key={option.lane} onPress={() => option.supported && setDogfoodLane(option.lane)} style={[
+                        {(0, DogfoodRuntime_1.dogfoodLaneOptions)(dogfoodProject?.framework || YaverFeedback_1.YaverFeedback.getDogfoodOnboarding()?.framework || 'expo', { nativeRuntimeAvailable: dogfoodNativeAvailable }).map((option) => (<react_native_1.Pressable key={option.lane} onPress={() => {
+                            if (!option.supported)
+                                return;
+                            setDogfoodLane(option.lane);
+                            const appId = YaverFeedback_1.YaverFeedback.getDogfoodOnboarding()?.appId;
+                            if (appId)
+                                void (0, preferences_1.setPreferredDogfoodLane)(appId, option.lane);
+                        }} style={[
                             styles.dogfoodChoice,
                             dogfoodLane === option.lane && styles.dogfoodChoiceSelected,
                             !option.supported && styles.actionBtnDisabled,
@@ -1113,9 +1165,9 @@ const FeedbackModal = () => {
                           </react_native_1.Pressable>))}
                       </react_native_1.View>
                       <react_native_1.Text style={styles.dogfoodWizardHint}>
-                        Runner: {[preferredRunner || 'automatic', preferredModel].filter(Boolean).join(' · ')}. Change it under Coding Agents below.
+                        {[preferredRunner || 'Choose a coding agent', preferredModel].filter(Boolean).join(' · ')}
                       </react_native_1.Text>
-                      <ActionRow label={dogfoodRuntime && !['idle', 'ready', 'failed', 'stopped'].includes(dogfoodRuntime.phase) ? dogfoodRuntime.message : 'Start Dogfood'} tint="#818cf8" onPress={() => void startDogfoodRuntime()} disabled={!dogfoodProject || !!(dogfoodRuntime && !['idle', 'ready', 'failed', 'stopped'].includes(dogfoodRuntime.phase))} busy={!!dogfoodRuntime && !['idle', 'ready', 'failed', 'stopped'].includes(dogfoodRuntime.phase)}/>
+                      <ActionRow label={dogfoodRuntime && !['idle', 'ready', 'failed', 'stopped'].includes(dogfoodRuntime.phase) ? dogfoodRuntime.message : 'Start Dogfood'} tint="#818cf8" onPress={() => void startDogfoodRuntime()} disabled={dogfoodStartBlocked || !!(dogfoodRuntime && !['idle', 'ready', 'failed', 'stopped'].includes(dogfoodRuntime.phase))} busy={!!dogfoodRuntime && !['idle', 'ready', 'failed', 'stopped'].includes(dogfoodRuntime.phase)}/>
                       {dogfoodRuntime ? (<react_native_1.View style={styles.dogfoodConsole}>
                           <react_native_1.Text style={styles.dogfoodConsoleStatus}>{dogfoodRuntime.message}</react_native_1.Text>
                           {dogfoodRuntime.logs.slice(-80).map((line, index) => (<react_native_1.Text key={`${line.at}-${index}`} selectable style={styles.dogfoodConsoleLine}>{line.text}</react_native_1.Text>))}
@@ -1258,6 +1310,15 @@ const FeedbackModal = () => {
                   </react_native_1.Pressable>
                 </react_native_1.View>)}
 
+              {YaverFeedback_1.YaverFeedback.isAuthed() ? (<react_native_1.Pressable onPress={() => {
+                    void YaverFeedback_1.YaverFeedback.signOut().then(() => {
+                        handleClose();
+                        YaverFeedback_1.YaverFeedback.showLogin();
+                    });
+                }} style={({ pressed }) => [styles.yaverSignOutBtn, pressed && styles.buttonPressed]} accessibilityRole="button" accessibilityLabel="Sign out of Yaver">
+                  <react_native_1.Text style={styles.yaverSignOutText}>Sign out of Yaver</react_native_1.Text>
+                </react_native_1.Pressable>) : null}
+
               <react_native_1.View style={styles.iconSelector}>
                 <react_native_1.Text style={styles.iconSelectorTitle}>Quick Icon Color</react_native_1.Text>
                 <react_native_1.Text style={styles.iconSelectorText}>
@@ -1414,6 +1475,8 @@ const styles = react_native_1.StyleSheet.create({
     dogfoodConsoleError: { color: '#fca5a5', fontSize: 11, lineHeight: 16, marginTop: 5 },
     dogfoodOpenPreview: { alignSelf: 'flex-start', borderRadius: 9, paddingHorizontal: 11, paddingVertical: 8, marginTop: 6, backgroundColor: '#6555df' },
     dogfoodOpenPreviewText: { color: '#fff', fontSize: 12, fontWeight: '800' },
+    yaverSignOutBtn: { alignSelf: 'flex-start', paddingHorizontal: 4, paddingVertical: 8 },
+    yaverSignOutText: { color: '#b42318', fontSize: 13, fontWeight: '700' },
     reloadRow: {
         gap: 4,
     },

package/dist/YaverFeedback.d.ts

@@ -2,7 +2,7 @@ import { FeedbackConfig, CapturedError } from './types';
 import { P2PClient } from './P2PClient';
 import { CaptureStoreScreenshotsOptions, CaptureStoreScreenshotsResult } from './storeShots';
 import { QuickIconColorPreset } from './preferences';
-import { type SDKDogfoodStatus } from './dogfoodPolicy';
+import { type SDKDogfoodStatus, type DogfoodAccessSnapshot } from './dogfoodPolicy';
 import { type DeviceDogfoodOptions, type DeviceDogfoodSession, type DeviceDogfoodState } from './deviceDogfood';
 export interface DogfoodOnboardingOptions extends DeviceDogfoodOptions {
     /** Hint used to preselect the matching project returned by the owner machine. */
@@ -10,6 +10,12 @@ export interface DogfoodOnboardingOptions extends DeviceDogfoodOptions {
     /** Framework fallback when the machine has not classified the project yet. */
     framework?: string;
 }
+export type DogfoodFlowPhase = 'idle' | 'denied' | 'auth-required' | 'machine-required' | 'opening' | 'error';
+export interface DogfoodFlowState {
+    phase: DogfoodFlowPhase;
+    appId?: string;
+    error?: string;
+}
 /**
  * Main entry point for the Yaver Feedback SDK.
  * Call `YaverFeedback.init()` once at app startup.
@@ -108,10 +114,29 @@ export declare class YaverFeedback {
      * an active session; no-ops otherwise.
      */
     static showMachinePicker(): void;
-    /** Begin the reusable host-app Dogfood wizard. Owner OAuth and machine
-     * selection intentionally happen before installation enrollment/runtime
-     * controls because starting builds or runners is owner-level authority. */
-    static beginDogfoodOnboarding(options: DogfoodOnboardingOptions): void;
+    /** Configure Dogfood once during host init. Hosts still decide whether and
+     * where to render an affordance; `openDogfood()` owns all flow mechanics. */
+    static configureDogfood(options: DogfoodOnboardingOptions): void;
+    /**
+     * Open Dogfood using config.dogfood + the normal app identity. Cached OAuth,
+     * machine, runner and model choices are reused. The corresponding picker is
+     * shown only when a required choice is missing.
+     */
+    static openDogfood(overrides?: Partial<DogfoodOnboardingOptions>): Promise<DogfoodFlowState>;
+    /** Resolve the host-facing ACL snapshot without granting authority. This is
+     * the one endpoint custom Settings screens need for visibility/status UI. */
+    static getDogfoodAccess(): Promise<DogfoodAccessSnapshot>;
+    /** Add/remove the platform Home Screen shortcut from backend-authoritative
+     * owner/device ACL state. Static plist shortcuts are intentionally avoided:
+     * an unauthorized install must never advertise a hidden developer action. */
+    static syncDogfoodAppShortcut(): Promise<boolean>;
+    /** Backwards-compatible entry point for existing integrations. */
+    static beginDogfoodOnboarding(options: DogfoodOnboardingOptions): Promise<DogfoodFlowState>;
+    /** Continue after OAuth or machine selection. Public so custom host UI can
+     * hand control back without recreating the SDK state machine. */
+    static continueDogfoodOnboarding(): Promise<DogfoodFlowState>;
+    static getDogfoodFlowState(): DogfoodFlowState;
+    static onDogfoodFlowState(listener: (state: DogfoodFlowState) => void): () => void;
     static getDogfoodOnboarding(): DogfoodOnboardingOptions | null;
     static clearDogfoodOnboarding(): void;
     /**
@@ -215,10 +240,10 @@ export declare class YaverFeedback {
     static getConfig(): FeedbackConfig | null;
     /** Current third-party SDK mode. Fails closed unless enabled + account match. */
     static getDogfoodStatus(): SDKDogfoodStatus;
-    /** One-call, account-free Dogfood bootstrap for third-party apps. On first
-     * launch it creates/proves the installation key and returns pending; after
-     * owner approval the same call obtains a short-lived scoped Yaver session
-     * and enables Dogfood UX without the host app implementing OAuth. */
+    /** One-call account-bound Dogfood bootstrap for third-party apps. The host
+     * app needs no auth backend of its own: SDK OAuth supplies the full Yaver
+     * account, then this creates/proves the installation key. Owner approval
+     * binds that account + appId + phone key before a scoped session is minted. */
     static enableDeviceDogfood(options: DeviceDogfoodOptions): Promise<{
         status: DeviceDogfoodState;
         installationId: string;