fix(mobile): release QA fixes (#4410)

* fix(mobile): keep Copy Link sign-in label on one line on Android

* fix(mobile): reset org context and last-active instance on sign-out

The organization provider mounts above the auth gate and never remounts,
so the previous user's in-memory org id kept being sent after a different
account signed in, causing a 401/sign-out loop. Reset it when the token
clears. Also clear the last-active-chat-instance key and its module cache,
which leaked across accounts the same way.

* fix(mobile): drop default cloud-agent platform filter on agents list

* fix(mobile): stop native text selection competing with long-press copy

Markdown message text defaulted to selectable, so a long press on iOS
spawned the native copy callout on top of the copy action sheet. Message
text is now non-selectable (matching kilo-chat); tool-card outputs stay
selectable since the sheet does not collect them.

* fix(mobile): reserve subagent running-tool line to avoid layout shift

* fix(cloud-agent-sdk): subscribe the upgrade watcher so read-only sessions go live

The watcher from #4390 retained the user-web socket but never subscribed
to the session, and the server only pushes sessions.heartbeat and
subscribe-triggered sessions.list re-sends to subscribed sockets — so the
upgrade trigger never arrived and a session opened inside the heartbeat
registration window stayed read-only forever.

* fix(cloud-agent-sdk): resume cloud-agent reconnects from a replay cursor

Reconnects requested replay=false and relied on a snapshot refetch for
catch-up, so events streamed while the socket was dead (including the
terminal session.status) were lost if the snapshot had not caught up —
truncated messages and a stuck busy indicator after foregrounding. Track
the last wire eventId and reconnect with fromId so the DO replays exactly
the missed events; the snapshot refetch remains only as the no-cursor
fallback, since replaying a stale snapshot over cursor-replayed events
would regress content.

* fix(cloud-agent-sdk): heal CLI session reconnect gaps

CLI sessions have no server-side event log, so a reconnect only streams
events from now and the snapshot store lags the live stream — parts
finalized while the socket was dead were in neither, and a terminal idle
status fired during the gap left the busy indicator stuck. Re-fetch the
snapshot once more shortly after reconnect, and forward the per-session
idle/busy status that heartbeats already carry so activity self-corrects.

* fix(mobile): address review feedback and start-session silent no-op

- Toast the specific missing field when Start Session is tapped instead
  of a silently disabled button
- Reset the heartbeat status dedup on CLI disconnect so an unchanged
  post-reconnect status still clears the disconnected UI state
- Gate the org-context storage load on the auth token so an in-flight
  read cannot reinstate the previous user's org id after sign-out
- Serialize last-active-instance persistence writes so a sign-out clear
  cannot be overtaken by an in-flight set

Author: iscekic

apps/mobile/src/app/(app)/agent-chat/new.tsx

@@ -80,7 +80,6 @@ export default function NewSessionScreen() {
 
   // Prompt ref (uncontrolled TextInput on iOS)
   const promptRef = useRef('');
-  const [hasPrompt, setHasPrompt] = useState(false);
   const [promptInputWidth, setPromptInputWidth] = useState(0);
   const promptMeasure = useTextHeight({
     minHeight: PROMPT_INPUT_MIN_HEIGHT,
@@ -163,7 +162,16 @@ export default function NewSessionScreen() {
   const handleCreate = useCallback(async () => {
     const prompt = promptRef.current.trim();
     // The backend requires a non-empty prompt even when attachments are present.
-    if (!prompt || !selectedRepo || !model) {
+    if (!prompt) {
+      toast.error('Enter a prompt first.');
+      return;
+    }
+    if (!selectedRepo) {
+      toast.error('Select a repository first.');
+      return;
+    }
+    if (!model) {
+      toast.error('Select a model first.');
       return;
     }
     if (attachments.isUploading) {
@@ -245,8 +253,6 @@ export default function NewSessionScreen() {
     attachments,
   ]);
 
-  const canStart = hasPrompt && selectedRepo.length > 0 && model.length > 0 && !isCreating;
-
   const { addCandidates } = attachments;
   const handleAddAttachment = useCallback(async () => {
     addCandidates(await pickAgentAttachments());
@@ -303,7 +309,6 @@ export default function NewSessionScreen() {
               onChangeText={text => {
                 promptRef.current = text;
                 promptMeasure.setText(text);
-                setHasPrompt(text.trim().length > 0);
               }}
               onLayout={handlePromptInputLayout}
               scrollEnabled={promptMeasure.height >= PROMPT_INPUT_MAX_HEIGHT}
@@ -374,7 +379,7 @@ export default function NewSessionScreen() {
         <Button
           size="lg"
           className="mt-6"
-          disabled={!canStart}
+          disabled={isCreating}
           onPress={() => {
             void handleCreate();
           }}

apps/mobile/src/components/agents/child-session-section.tsx

@@ -152,10 +152,16 @@ export function ChildSessionSection({
           <Text className="text-sm text-foreground" numberOfLines={1}>
             {subtitle}
           </Text>
-          {currentTool ? (
-            <Text className="text-xs text-muted-foreground" numberOfLines={1}>
-              <Text className="text-xs text-agent-sky">{currentTool.tool}</Text>
-              {currentTool.context ? ` ${currentTool.context}` : ''}
+          {isRunning ? (
+            <Text className="text-xs leading-4 text-muted-foreground" numberOfLines={1}>
+              {currentTool ? (
+                <>
+                  <Text className="text-xs leading-4 text-agent-sky">{currentTool.tool}</Text>
+                  {currentTool.context ? ` ${currentTool.context}` : ''}
+                </>
+              ) : (
+                ' '
+              )}
             </Text>
           ) : null}
         </View>

apps/mobile/src/components/agents/message-bubble.tsx

@@ -58,7 +58,9 @@ export function MessageBubble({
         accessibilityHint="Long press to copy message text"
       >
         <Bubble side="user">
-          {textContent ? <MarkdownText value={textContent} variant="user" /> : null}
+          {textContent ? (
+            <MarkdownText value={textContent} variant="user" selectable={false} />
+          ) : null}
           {fileParts.map(part => (
             <FilePartRenderer key={part.id} part={part} />
           ))}

apps/mobile/src/components/agents/text-part-renderer.tsx

@@ -9,5 +9,7 @@ export function TextPartRenderer({ text }: Readonly<TextPartRendererProps>) {
     return null;
   }
 
-  return <MarkdownText value={text} variant="assistant" />;
+  // selectable={false}: the message Pressable's long-press copy sheet and iOS
+  // native text selection would both trigger on the same gesture otherwise.
+  return <MarkdownText value={text} variant="assistant" selectable={false} />;
 }

apps/mobile/src/components/login-screen.tsx

@@ -130,7 +130,7 @@ export function LoginScreen() {
                 }}
                 accessibilityLabel="Copy sign-in link"
               >
-                <Text>Copy Link</Text>
+                <Text numberOfLines={1}>Copy Link</Text>
               </Button>
             </View>
             <Button variant="ghost" onPress={cancel} accessibilityLabel="Cancel sign in">

apps/mobile/src/lib/auth/auth-context.tsx

@@ -14,6 +14,7 @@ import { queryClient } from '@/lib/query-client';
 import { setTrpcUnauthorizedHandler } from '@/lib/auth/trpc-unauthorized';
 import { clearAgentModelPreference } from '@/lib/hooks/use-persisted-agent-model';
 import { clearReasoningPreference } from '@/lib/hooks/use-reasoning-preference';
+import { clearLastActiveInstance } from '@/lib/last-active-instance';
 import { resetPurchaseErrorToastDedup } from '@/lib/kilo-pass/use-store-kilo-pass-purchase';
 import {
   AUTH_TOKEN_KEY,
@@ -63,6 +64,7 @@ export function AuthProvider({ children }: { readonly children: ReactNode }) {
     await SecureStore.deleteItemAsync(ORGANIZATION_STORAGE_KEY);
     await SecureStore.deleteItemAsync(SESSION_FILTERS_KEY);
     await SecureStore.deleteItemAsync(NOTIFICATION_PROMPT_SEEN_KEY);
+    await clearLastActiveInstance();
     clearAgentModelPreference();
     clearReasoningPreference();
     queryClient.clear();

apps/mobile/src/lib/hooks/use-persisted-agent-session-filters.ts

@@ -10,11 +10,10 @@ type AgentSessionFilters = {
 
 type FiltersUpdater = AgentSessionFilters | ((prev: AgentSessionFilters) => AgentSessionFilters);
 type StringArrayUpdater = string[] | ((prev: string[]) => string[]);
-const DEFAULT_PLATFORM_FILTER = ['cloud-agent'];
 
 function createDefaultFilters(): AgentSessionFilters {
   return {
-    platformFilter: [...DEFAULT_PLATFORM_FILTER],
+    platformFilter: [],
     projectFilter: [],
   };
 }

apps/mobile/src/lib/last-active-instance.ts

@@ -4,6 +4,27 @@ import { LAST_ACTIVE_INSTANCE_KEY } from '@/lib/storage-keys';
 
 let cached: string | null = null;
 
+// Persistence writes are serialized so a sign-out clear can never be
+// overtaken by an in-flight set, which would leak the previous account's
+// sandbox id into the next cold start.
+let writeQueue: Promise<void> | null = null;
+
+async function enqueueWrite(op: () => Promise<void>): Promise<void> {
+  const previous = writeQueue;
+  const next = (async () => {
+    if (previous) {
+      try {
+        await previous;
+      } catch {
+        // An earlier failed write must not block the queue.
+      }
+    }
+    await op();
+  })();
+  writeQueue = next;
+  await next;
+}
+
 export async function loadLastActiveInstance(): Promise<void> {
   const stored = await SecureStore.getItemAsync(LAST_ACTIVE_INSTANCE_KEY);
   cached ??= stored;
@@ -15,5 +36,14 @@ export function getLastActiveInstance(): string | null {
 
 export async function setLastActiveInstance(sandboxId: string): Promise<void> {
   cached = sandboxId;
-  await SecureStore.setItemAsync(LAST_ACTIVE_INSTANCE_KEY, sandboxId);
+  await enqueueWrite(async () => {
+    await SecureStore.setItemAsync(LAST_ACTIVE_INSTANCE_KEY, sandboxId);
+  });
+}
+
+export async function clearLastActiveInstance(): Promise<void> {
+  cached = null;
+  await enqueueWrite(async () => {
+    await SecureStore.deleteItemAsync(LAST_ACTIVE_INSTANCE_KEY);
+  });
 }

apps/mobile/src/lib/organization-context.tsx

@@ -9,6 +9,7 @@ import {
   useState,
 } from 'react';
 
+import { useAuth } from '@/lib/auth/auth-context';
 import { ORGANIZATION_STORAGE_KEY } from '@/lib/storage-keys';
 
 type OrganizationContextValue = {
@@ -21,10 +22,21 @@ type OrganizationContextValue = {
 const OrganizationContext = createContext<OrganizationContextValue | undefined>(undefined);
 
 export function OrganizationProvider({ children }: { readonly children: ReactNode }) {
+  const { token } = useAuth();
   const [organizationId, setOrgState] = useState<string | null>(null);
   const [isLoaded, setIsLoaded] = useState(false);
 
+  // The provider mounts above the auth gate and never remounts, so the
+  // in-memory selection must be reset when the session ends — otherwise the
+  // previous user's org id keeps being sent after a different account signs in.
+  // Loading from storage is gated on the same token so a sign-out cancels any
+  // in-flight read that would otherwise reinstate the previous user's org id.
   useEffect(() => {
+    if (!token) {
+      setOrgState(null);
+      setIsLoaded(true);
+      return undefined;
+    }
     let cancelled = false;
     const load = async () => {
       try {
@@ -42,7 +54,7 @@ export function OrganizationProvider({ children }: { readonly children: ReactNod
     return () => {
       cancelled = true;
     };
-  }, []);
+  }, [token]);
 
   const setOrganizationId = useCallback((id: string | null) => {
     setOrgState(id);

apps/web/src/lib/cloud-agent-sdk/cli-live-transport.test.ts

@@ -142,6 +142,32 @@ describe('CliLiveTransport unified user web connection', () => {
     transport.destroy();
   });
 
+  it('re-forwards an unchanged heartbeat status after a disconnect', () => {
+    const { userWebConnection, transport, serviceEvents } = createTransportWithSinks();
+    transport.connect();
+
+    const heartbeat = (sessions: Array<{ id: string; status: string; title: string }>) => {
+      userWebConnection.emitSystem({
+        event: 'sessions.heartbeat',
+        data: { connectionId: 'owner', sessions },
+      });
+    };
+
+    heartbeat([{ id: KILO_SESSION_ID, status: 'idle', title: 'Tracked' }]);
+    heartbeat([]);
+    heartbeat([{ id: KILO_SESSION_ID, status: 'idle', title: 'Tracked' }]);
+
+    // idle → stopped(disconnected) → idle again: the post-reconnect status must
+    // be forwarded even though it matches the pre-disconnect one, because only
+    // a session.status event clears the disconnected UI state.
+    expect(serviceEvents).toEqual([
+      { type: 'session.status', sessionId: KILO_SESSION_ID, status: { type: 'idle' } },
+      { type: 'stopped', reason: 'disconnected' },
+      { type: 'session.status', sessionId: KILO_SESSION_ID, status: { type: 'idle' } },
+    ]);
+    transport.destroy();
+  });
+
   it('buffers chat during initial snapshot replay but does not delay service events', async () => {
     let resolveSnapshot: ((snapshot: SessionSnapshot) => void) | undefined;
     const fetchSnapshot = jest.fn(