feat(core): improve mobile perf (#15317)

#### PR Dependency Tree


* **PR #15317** 👈

This tree was auto-generated by
[Charcoal](https://github.com/danerwilliams/charcoal)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Virtualized mobile navigation with shell navigation and interactive
swipe menus; coordinated mobile back handling with interactive
phases/state restoration.
* Added shared auth request proxy and message-port based token handling
across mobile and worker flows.
* **Bug Fixes**
  * Hydrated remote worker error stacks for calls and observable errors.
* Improved SQLite FTS/indexer and nbstore optional text handling;
refined docs-search ref parsing and notification loading/retry.
* **Refactor / UX**
* Modal focus-preservation and pointer behavior updates; improved mobile
menu controls and back gesture plugins.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

packages/frontend/apps/ios/src/nbstore.worker.ts

@@ -1,5 +1,7 @@
 import './setup-worker';
 
+import { MessagePortAuthProvider } from '@affine/mobile-shared/auth/channel';
+import { installAuthRequestProxy } from '@affine/mobile-shared/auth/request';
 import { broadcastChannelStorages } from '@affine/nbstore/broadcast-channel';
 import {
   cloudStorages,
@@ -18,53 +20,19 @@ import {
 import { type MessageCommunicapable, OpConsumer } from '@toeverything/infra/op';
 import { AsyncCall } from 'async-call-rpc';
 
-let authTokenPort: MessagePort | undefined;
-const terminalAuthErrors = new Set([
-  'ACCESS_TOKEN_INVALID',
-  'AUTH_SESSION_EXPIRED',
-  'AUTH_SESSION_REVOKED',
-  'REFRESH_TOKEN_INVALID',
-  'REFRESH_TOKEN_REUSED',
-  'UNSUPPORTED_CLIENT_VERSION',
-  'AUTH_SESSION_EMPTY',
-]);
-const pendingTokenRequests = new Map<
-  string,
-  {
-    resolve: (token: string | null) => void;
-    reject: (error: Error) => void;
-  }
->();
+const authProvider = new MessagePortAuthProvider();
+installAuthRequestProxy(authProvider);
 
 configureSocketAuthMethod((endpoint, cb) => {
-  getValidAccessToken(endpoint)
+  authProvider
+    .getValidAccessToken(endpoint)
     .then(token => cb(token ? { token, tokenType: 'jwt' } : {}))
     .catch(() => cb({ error: 'AUTH_SESSION_TEMPORARILY_UNAVAILABLE' }));
 });
 
 globalThis.addEventListener('message', e => {
   if (e.data.type === 'auth-access-token-channel') {
-    authTokenPort = e.ports[0] as MessagePort;
-    authTokenPort.addEventListener('message', e => {
-      const { id, token, error } = e.data as {
-        id?: string;
-        token?: string | null;
-        error?: string;
-      };
-      if (!id) return;
-      const pending = pendingTokenRequests.get(id);
-      if (error) {
-        if (terminalAuthErrors.has(error)) {
-          pending?.resolve(null);
-        } else {
-          pending?.reject(new Error(error));
-        }
-      } else {
-        pending?.resolve(token ?? null);
-      }
-      pendingTokenRequests.delete(id);
-    });
-    authTokenPort.start();
+    authProvider.setPort(e.ports[0] as MessagePort);
     return;
   }
 
@@ -94,31 +62,6 @@ globalThis.addEventListener('message', e => {
   }
 });
 
-function getValidAccessToken(endpoint: string) {
-  if (!authTokenPort) {
-    return Promise.resolve(null);
-  }
-
-  const id = `${Date.now()}:${Math.random()}`;
-  return new Promise<string | null>((resolve, reject) => {
-    const timeout = setTimeout(() => {
-      pendingTokenRequests.delete(id);
-      reject(new Error('AUTH_SESSION_TEMPORARILY_UNAVAILABLE'));
-    }, 5000);
-    pendingTokenRequests.set(id, {
-      resolve: token => {
-        clearTimeout(timeout);
-        resolve(token);
-      },
-      reject: error => {
-        clearTimeout(timeout);
-        reject(error);
-      },
-    });
-    authTokenPort?.postMessage({ id, endpoint });
-  });
-}
-
 const consumer = new OpConsumer<WorkerManagerOps>(
   globalThis as MessageCommunicapable
 );