Function ManagedAPIProvider

src/browser/contexts/API.tsx:184–656

(props: Omit<APIProviderProps, "client">)

}

function ManagedAPIProvider(props: Omit<APIProviderProps, "client">) {
  const [state, setState] = useState<ConnectionState>({ status: "connecting" });
  const [authToken, setAuthToken] = useState<string | null>(() => {
    const urlParams = new URLSearchParams(window.location.search);
    const urlToken = urlParams.get("token")?.trim();
    if (urlToken) {
      setStoredAuthToken(urlToken);
      // Strip token from URL so it doesn't leak into bookmarks, browser
      // history, PWA launch URLs, or Referer headers.
      const cleanUrl = new URL(window.location.href);
      cleanUrl.searchParams.delete("token");
      window.history.replaceState({}, "", cleanUrl.pathname + cleanUrl.search);
      return urlToken;
    }

    return getStoredAuthToken();
  });

  const cleanupRef = useRef<(() => void) | null>(null);
  const hasConnectedRef = useRef(false);
  const reconnectAttemptRef = useRef(0);
  const reconnectTimeoutRef = useRef<ReturnType<typeof setTimeout> | null>(null);
  const scheduleReconnectRef = useRef<(() => void) | null>(null);
  const consecutivePingFailuresRef = useRef(0);
  const connectionIdRef = useRef(0);
  const forceReconnectInProgressRef = useRef(false);
  const livenessPingsInFlightCountRef = useRef(0);
  const lastInboundBrowserFrameAtRef = useRef(0);

  // When we decide the user needs to provide a token, stop the reconnect loop.
  //
  // Otherwise, the WebSocket close event (triggered by cleanup()) can schedule a reconnect
  // which immediately flips the UI back to "reconnecting", causing the AuthTokenModal
  // to flicker.
  const authRequiredRef = useRef(false);

  const authProbeAttemptedRef = useRef(false);
  const wsFactory = useMemo(
    () => props.createWebSocket ?? ((url: string) => new WebSocket(url)),
    [props.createWebSocket]
  );

  const connect = useCallback(
    (token: string | null) => {
      const connectionId = ++connectionIdRef.current;
      // Reset per-connection inbound traffic tracking so stale timestamps from a prior
      // socket cannot suppress liveness pings on the next connection.
      lastInboundBrowserFrameAtRef.current = 0;
      livenessPingsInFlightCountRef.current = 0;

      authRequiredRef.current = false;

      // This connect() call supersedes any prior pending reconnect or active connection.
      if (reconnectTimeoutRef.current) {
        clearTimeout(reconnectTimeoutRef.current);
        reconnectTimeoutRef.current = null;
      }