Fast diagnosisWhen first contact fails
Keep the safe provider request identity, resolved package/runtime versions, platform logs, and exact reproduction steps. Never attach credentials or private location payloads.
SignalLikely causeNext actionA fresh machine cannot reproduce the signed buildUnpinned Node/Cordova/plugin/native build inputs, removed repositories, certificates, or generated native edits are part of the hidden build.
Capture the entire toolchain manifest and generated-project changes before feature work; if dependencies are unavailable, prioritize the migration seam and replacement cohort.
Authentication or entitlement is rejectedThe credential class, restriction, account region, host/path generation, package application, or subscribed capability does not match.
Do not try another credential shape blindly. Capture the safe status/request identity and reconcile the exact contract in the developer console or support packet.
The sample works once but not after reload, backgrounding, or a second runLifecycle ownership, listener disposal, token/session refresh, saved state, or a singleton initialization boundary is incomplete.
Instrument create/ready/cancel/destroy transitions and prove one owner before adding product behavior.