@algorandfoundation/react-native-passkey-autofill 1.0.0-canary.19 → 1.0.0-canary.20

package/CHANGELOG.md

@@ -1,3 +1,9 @@
+# [1.0.0-canary.20](https://github.com/algorandfoundation/react-native-passkey-autofill/compare/v1.0.0-canary.19...v1.0.0-canary.20) (2026-06-10)
+
+### Bug Fixes
+
+- **Android:** improve setting intent handling, gradle includes pickFirst for MMKV. ([27af9e4](https://github.com/algorandfoundation/react-native-passkey-autofill/commit/27af9e470fb2d53f375422b246e3f8d72329b2c0))
+
 # [1.0.0-canary.19](https://github.com/algorandfoundation/react-native-passkey-autofill/compare/v1.0.0-canary.18...v1.0.0-canary.19) (2026-06-09)
 
 ### Bug Fixes

package/android/build.gradle

@@ -52,6 +52,7 @@ android {
   }
   packagingOptions {
     pickFirst '**/libc++_shared.so'
+    pickFirst '**/libmmkv.so'
   }
 }
 

package/android/src/main/java/co/algorand/passkeyautofill/ReactNativePasskeyAutofillModule.kt

@@ -4,12 +4,11 @@ import expo.modules.kotlin.modules.Module
 import expo.modules.kotlin.modules.ModuleDefinition
 import co.algorand.passkeyautofill.credentials.CredentialRepository
 import co.algorand.passkeyautofill.service.PasskeyAutofillCredentialProviderService
-import co.algorand.passkeyautofill.service.PasskeyAutofillCredentialProviderService.Companion.KEY_LAST_INVOKED_AT_MS
-import com.tencent.mmkv.MMKV
 import android.content.ComponentName
 import android.content.Context
 import android.content.Intent
 import android.net.Uri
+import android.os.Build
 import android.provider.Settings
 import android.util.Log
 import org.bouncycastle.jce.provider.BouncyCastleProvider
@@ -159,33 +158,43 @@ class ReactNativePasskeyAutofillModule : Module() {
    * Returns `true` when this app's [PasskeyAutofillCredentialProviderService]
    * is registered as an active credential provider for the current user.
    *
-   * Android stores the enabled credential providers as a colon-separated list
-   * of flattened [ComponentName]s in the `credential_service` and
-   * `credential_service_primary` Secure settings (API 34+). However those
-   * keys are `@hide` on Android 12+, so reading them from a regular app
-   * throws `SecurityException`. We therefore combine two signals:
+   * On API 34+ (UpsideDownCake) we use the official
+   * [android.credentials.CredentialManager.isEnabledCredentialProviderService]
+   * API, which reflects the user's current toggle in Settings in real time.
    *
-   *  1. Best-effort: try [Settings.Secure.getString]; if it returns the
-   *     expected component we know for sure we're the provider.
-   *  2. Fallback: inspect the MMKV timestamp written by the service itself
-   *     whenever the system routes a `BeginCreate/BeginGetCredentialRequest`
-   *     to it ([PasskeyAutofillCredentialProviderService.KEY_LAST_INVOKED_AT_MS]).
-   *     The Credential Manager only routes requests to *enabled* providers,
-   *     so a non-zero stamp is proof that we were selected at least once.
+   * On older devices we fall back to a best-effort read of the `@hide`
+   * `credential_service` / `credential_service_primary` Secure settings. These
+   * typically throw `SecurityException` for non-system apps on Android 12+,
+   * in which case we conservatively return `false` rather than guess.
    */
   private fun isProviderEnabled(context: Context): Boolean {
-    val expected = ComponentName(
+    val component = ComponentName(
       context.packageName,
       PasskeyAutofillCredentialProviderService::class.java.name,
-    ).flattenToString()
+    )
+    val expected = component.flattenToString()
+
+    // Preferred path (API 34+, UpsideDownCake): ask the platform
+    // `CredentialManager` system service whether our component is enabled.
+    // This is the official, real-time-accurate signal and is trusted
+    // exclusively on supported OS versions.
+    if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.UPSIDE_DOWN_CAKE) {
+      return try {
+        val cm = context.getSystemService(android.credentials.CredentialManager::class.java)
+        cm != null && cm.isEnabledCredentialProviderService(component)
+      } catch (e: Throwable) {
+        Log.d("ReactNativePasskeyAutofill", "CredentialManager.isEnabledCredentialProviderService failed: ${e.message}")
+        false
+      }
+    }
+
+    // Pre-API-34 best-effort: try the (often `@hide`) Secure settings keys.
     val resolver = context.contentResolver
     val keys = arrayOf("credential_service", "credential_service_primary")
     for (key in keys) {
       val value = try {
         Settings.Secure.getString(resolver, key)
       } catch (e: SecurityException) {
-        // `credential_service[_primary]` are @hide on Android 12+; fall
-        // through to the MMKV stamp check below.
         Log.d("ReactNativePasskeyAutofill", "Secure key $key not readable: ${e.message}")
         null
       } ?: continue
@@ -194,14 +203,7 @@ class ReactNativePasskeyAutofillModule : Module() {
         value.contains(expected, ignoreCase = true)
       if (enabled) return true
     }
-    // Fallback: look for a timestamp written by our CredentialProviderService.
-    return try {
-      MMKV.initialize(context)
-      (MMKV.defaultMMKV()?.decodeLong(KEY_LAST_INVOKED_AT_MS, 0L) ?: 0L) > 0L
-    } catch (e: Exception) {
-      Log.w("ReactNativePasskeyAutofill", "Failed to read provider stamp: ${e.message}")
-      false
-    }
+    return false
   }
 
   /**
@@ -210,8 +212,34 @@ class ReactNativePasskeyAutofillModule : Module() {
    * the credential provider screen is not available on the device.
    */
   private fun openCredentialProviderSettings(context: Context): Boolean {
+    // The system action for the Credential Manager provider picker is
+    // `android.settings.CREDENTIAL_PROVIDER` (`Settings.ACTION_CREDENTIAL_PROVIDER`,
+    // API 34+). Some OEM Settings builds additionally accept a
+    // `:settings:fragment_args_key` extra so the screen scrolls directly to
+    // our app's row instead of the generic list. We also include a legacy
+    // autofill-service picker fallback for devices where the Credential
+    // Manager screen isn't a directly launchable activity.
+    val component = ComponentName(
+      context.packageName,
+      PasskeyAutofillCredentialProviderService::class.java.name,
+    ).flattenToString()
     val intents = listOf(
+      // Preferred: Credential Manager provider settings, deep-linked to our row.
+      Intent("android.settings.CREDENTIAL_PROVIDER").apply {
+        putExtra(":settings:fragment_args_key", component)
+        putExtra(
+          ":settings:show_fragment_args",
+          android.os.Bundle().apply { putString(":settings:fragment_args_key", component) },
+        )
+      },
+      // Same screen without the deep-link extras (some OEMs ignore them).
       Intent("android.settings.CREDENTIAL_PROVIDER"),
+      // Legacy / fallback: the system autofill provider picker, which on
+      // pre-14 devices is the closest "pick a passkey provider" screen.
+      Intent(Settings.ACTION_REQUEST_SET_AUTOFILL_SERVICE).apply {
+        data = Uri.parse("package:${context.packageName}")
+      },
+      // Last-resort fallback: this app's details page.
       Intent(Settings.ACTION_APPLICATION_DETAILS_SETTINGS).apply {
         data = Uri.fromParts("package", context.packageName, null)
       },

package/app.plugin.js

@@ -3,6 +3,7 @@ const {
   withEntitlementsPlist,
   withInfoPlist,
   withStringsXml,
+  withAppBuildGradle,
   withProjectBuildGradle,
   withMainApplication,
   withDangerousMod,
@@ -718,7 +719,34 @@ const withPasskeyAutofill = (config, props = {}) => {
     return config;
   });
 
-  // 3. Add local Maven repository for local AAR
+  // 3. Inject `pickFirst '**/libmmkv.so'` into the consumer app's
+  // `android/app/build.gradle`. The native `libmmkv.so` is bundled by both
+  // this module (via `io.github.zhongwuzw:mmkv`) and `react-native-mmkv`
+  // (which also depends on the same artifact, sometimes pinned to a different
+  // version). When two copies end up on the merged-libs path, AGP fails
+  // `mergeDebugNativeLibs` with: "2 files found with path
+  // 'lib/<abi>/libmmkv.so'". Picking the first occurrence is safe because
+  // the `com.tencent.mmkv.MMKV` Java surface we touch is ABI-stable across
+  // the 2.x range.
+  config = withAppBuildGradle(config, (config) => {
+    const marker = "pickFirst '**/libmmkv.so'";
+    if (config.modResults.contents.includes(marker)) {
+      return config;
+    }
+    let contents = config.modResults.contents;
+    if (/packagingOptions\s*\{/.test(contents)) {
+      contents = contents.replace(/packagingOptions\s*\{/, `packagingOptions {\n        ${marker}`);
+    } else if (/android\s*\{/.test(contents)) {
+      contents = contents.replace(
+        /android\s*\{/,
+        `android {\n    packagingOptions {\n        ${marker}\n    }\n`,
+      );
+    }
+    config.modResults.contents = contents;
+    return config;
+  });
+
+  // 4. Add local Maven repository for local AAR
   config = withProjectBuildGradle(config, (config) => {
     if (config.modResults.contents.includes("android/libs/repo")) {
       return config;

package/build/ReactNativePasskeyAutofillModule.d.ts

@@ -7,14 +7,25 @@ declare class ReactNativePasskeyAutofillModule extends NativeModule<ReactNativeP
     configureIntentActions(getPasskeyAction: string, createPasskeyAction: string): Promise<void>;
     clearCredentials(): Promise<void>;
     deleteCredential(credentialId: string): Promise<void>;
+    /**
+     * iOS: returns the identities currently published to the AutoFill
+     * `ASCredentialIdentityStore`. Android: no-op returning `[]` because the
+     * native Credential Provider service reads credentials directly from MMKV
+     * and there is no separate identity store to query.
+     */
     getStoredCredentials(): Promise<PasskeyAutofillCredentialIdentity[]>;
+    /**
+     * iOS: returns diagnostic strings from the AutoFill extension.
+     * Android: no-op returning `[]`.
+     */
     getDiagnostics(): Promise<string[]>;
     /**
      * Replaces the iOS AutoFill passkey identity store with credentials
      * available to the native Credential Provider extension. Each item must
      * include a credential id, relying party (`relyingPartyIdentifier`,
      * `rpId`, or `origin`), user handle, and P-256 private key material.
-     * Android ignores this method because the provider reads MMKV directly.
+     * Android ignores this method (no-op) because the provider reads MMKV
+     * directly.
      */
     replaceCredentialIdentities(credentials: PasskeyAutofillCredentialIdentity[]): Promise<void>;
     refreshCredentialIdentities(): Promise<void>;
@@ -33,6 +44,6 @@ declare class ReactNativePasskeyAutofillModule extends NativeModule<ReactNativeP
      */
     openProviderSettings(): Promise<boolean>;
 }
-declare const _default: ReactNativePasskeyAutofillModule;
-export default _default;
+declare const nativeModule: ReactNativePasskeyAutofillModule;
+export default nativeModule;
 //# sourceMappingURL=ReactNativePasskeyAutofillModule.d.ts.map

package/build/ReactNativePasskeyAutofillModule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ReactNativePasskeyAutofillModule.d.ts","sourceRoot":"","sources":["../src/ReactNativePasskeyAutofillModule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAuB,MAAM,MAAM,CAAC;AAEzD,OAAO,EACL,iCAAiC,EACjC,sCAAsC,EACvC,MAAM,oCAAoC,CAAC;AAE5C,OAAO,OAAO,gCAAiC,SAAQ,YAAY,CAAC,sCAAsC,CAAC;IACzG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3C,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACzC,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IACxC,sBAAsB,CAAC,gBAAgB,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAC5F,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IACjC,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACrD,oBAAoB,IAAI,OAAO,CAAC,iCAAiC,EAAE,CAAC;IACpE,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IACnC;;;;;;OAMG;IACH,2BAA2B,CAAC,WAAW,EAAE,iCAAiC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAC5F,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;IAC5C;;;;;;OAMG;IACH,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC;IACpC;;;;OAIG;IACH,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC;CACzC;;AAGD,wBAAmG"}
+{"version":3,"file":"ReactNativePasskeyAutofillModule.d.ts","sourceRoot":"","sources":["../src/ReactNativePasskeyAutofillModule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAuB,MAAM,MAAM,CAAC;AAGzD,OAAO,EACL,iCAAiC,EACjC,sCAAsC,EACvC,MAAM,oCAAoC,CAAC;AAE5C,OAAO,OAAO,gCAAiC,SAAQ,YAAY,CAAC,sCAAsC,CAAC;IACzG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3C,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACzC,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IACxC,sBAAsB,CAAC,gBAAgB,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAC5F,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IACjC,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACrD;;;;;OAKG;IACH,oBAAoB,IAAI,OAAO,CAAC,iCAAiC,EAAE,CAAC;IACpE;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IACnC;;;;;;;OAOG;IACH,2BAA2B,CAAC,WAAW,EAAE,iCAAiC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAC5F,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;IAC5C;;;;;;OAMG;IACH,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC;IACpC;;;;OAIG;IACH,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC;CACzC;AAGD,QAAA,MAAM,YAAY,kCAEjB,CAAC;AAoBF,eAAe,YAAY,CAAC"}

package/build/ReactNativePasskeyAutofillModule.js

@@ -1,4 +1,23 @@
 import { requireNativeModule } from "expo";
+import { Platform } from "react-native";
 // This call loads the native module object from the JSI.
-export default requireNativeModule("ReactNativePasskeyAutofill");
+const nativeModule = requireNativeModule("ReactNativePasskeyAutofill");
+// A handful of methods are only implemented in the iOS native module because
+// they interact with `ASCredentialIdentityStore`, which has no Android
+// equivalent (the Android Credential Provider service reads credentials
+// directly from MMKV on each request).
+if (Platform.OS === "android") {
+    const noops = {
+        replaceCredentialIdentities: () => Promise.resolve(),
+        refreshCredentialIdentities: () => Promise.resolve(),
+        getStoredCredentials: () => Promise.resolve([]),
+        getDiagnostics: () => Promise.resolve([]),
+    };
+    for (const name of Object.keys(noops)) {
+        if (typeof nativeModule[name] !== "function") {
+            nativeModule[name] = noops[name];
+        }
+    }
+}
+export default nativeModule;
 //# sourceMappingURL=ReactNativePasskeyAutofillModule.js.map

package/build/ReactNativePasskeyAutofillModule.js.map

@@ -1 +1 @@
-{"version":3,"file":"ReactNativePasskeyAutofillModule.js","sourceRoot":"","sources":["../src/ReactNativePasskeyAutofillModule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAyCzD,yDAAyD;AACzD,eAAe,mBAAmB,CAAmC,4BAA4B,CAAC,CAAC","sourcesContent":["import { NativeModule, requireNativeModule } from \"expo\";\n\nimport {\n  PasskeyAutofillCredentialIdentity,\n  ReactNativePasskeyAutofillModuleEvents,\n} from \"./ReactNativePasskeyAutofill.types\";\n\ndeclare class ReactNativePasskeyAutofillModule extends NativeModule<ReactNativePasskeyAutofillModuleEvents> {\n  setMasterKey(secret: string): Promise<void>;\n  setHdRootKeyId(id: string): Promise<void>;\n  getHdRootKeyId(): Promise<string | null>;\n  configureIntentActions(getPasskeyAction: string, createPasskeyAction: string): Promise<void>;\n  clearCredentials(): Promise<void>;\n  deleteCredential(credentialId: string): Promise<void>;\n  getStoredCredentials(): Promise<PasskeyAutofillCredentialIdentity[]>;\n  getDiagnostics(): Promise<string[]>;\n  /**\n   * Replaces the iOS AutoFill passkey identity store with credentials\n   * available to the native Credential Provider extension. Each item must\n   * include a credential id, relying party (`relyingPartyIdentifier`,\n   * `rpId`, or `origin`), user handle, and P-256 private key material.\n   * Android ignores this method because the provider reads MMKV directly.\n   */\n  replaceCredentialIdentities(credentials: PasskeyAutofillCredentialIdentity[]): Promise<void>;\n  refreshCredentialIdentities(): Promise<void>;\n  /**\n   * Resolves to `true` when this app is registered as the active\n   * credential/autofill provider on the current device (Android 14+\n   * credential provider or iOS AutoFill). Useful for gating passkey UI\n   * and for E2E tests that need to confirm the prompt that appears\n   * belongs to this provider and not a third party.\n   */\n  isProviderActive(): Promise<boolean>;\n  /**\n   * Opens the OS credential/autofill provider settings screen so the\n   * user can enable this app as the active provider. Resolves to `true`\n   * if a settings screen could be launched, `false` otherwise.\n   */\n  openProviderSettings(): Promise<boolean>;\n}\n\n// This call loads the native module object from the JSI.\nexport default requireNativeModule<ReactNativePasskeyAutofillModule>(\"ReactNativePasskeyAutofill\");\n"]}
+{"version":3,"file":"ReactNativePasskeyAutofillModule.js","sourceRoot":"","sources":["../src/ReactNativePasskeyAutofillModule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,mBAAmB,EAAE,MAAM,MAAM,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAoDxC,yDAAyD;AACzD,MAAM,YAAY,GAAG,mBAAmB,CACtC,4BAA4B,CAC7B,CAAC;AAEF,6EAA6E;AAC7E,uEAAuE;AACvE,wEAAwE;AACxE,uCAAuC;AACvC,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;IAC9B,MAAM,KAAK,GAA6D;QACtE,2BAA2B,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;QACpD,2BAA2B,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;QACpD,oBAAoB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;KAC1C,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,IAAI,OAAQ,YAAmD,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YACpF,YAAmD,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;AACH,CAAC;AAED,eAAe,YAAY,CAAC","sourcesContent":["import { NativeModule, requireNativeModule } from \"expo\";\nimport { Platform } from \"react-native\";\n\nimport {\n  PasskeyAutofillCredentialIdentity,\n  ReactNativePasskeyAutofillModuleEvents,\n} from \"./ReactNativePasskeyAutofill.types\";\n\ndeclare class ReactNativePasskeyAutofillModule extends NativeModule<ReactNativePasskeyAutofillModuleEvents> {\n  setMasterKey(secret: string): Promise<void>;\n  setHdRootKeyId(id: string): Promise<void>;\n  getHdRootKeyId(): Promise<string | null>;\n  configureIntentActions(getPasskeyAction: string, createPasskeyAction: string): Promise<void>;\n  clearCredentials(): Promise<void>;\n  deleteCredential(credentialId: string): Promise<void>;\n  /**\n   * iOS: returns the identities currently published to the AutoFill\n   * `ASCredentialIdentityStore`. Android: no-op returning `[]` because the\n   * native Credential Provider service reads credentials directly from MMKV\n   * and there is no separate identity store to query.\n   */\n  getStoredCredentials(): Promise<PasskeyAutofillCredentialIdentity[]>;\n  /**\n   * iOS: returns diagnostic strings from the AutoFill extension.\n   * Android: no-op returning `[]`.\n   */\n  getDiagnostics(): Promise<string[]>;\n  /**\n   * Replaces the iOS AutoFill passkey identity store with credentials\n   * available to the native Credential Provider extension. Each item must\n   * include a credential id, relying party (`relyingPartyIdentifier`,\n   * `rpId`, or `origin`), user handle, and P-256 private key material.\n   * Android ignores this method (no-op) because the provider reads MMKV\n   * directly.\n   */\n  replaceCredentialIdentities(credentials: PasskeyAutofillCredentialIdentity[]): Promise<void>;\n  refreshCredentialIdentities(): Promise<void>;\n  /**\n   * Resolves to `true` when this app is registered as the active\n   * credential/autofill provider on the current device (Android 14+\n   * credential provider or iOS AutoFill). Useful for gating passkey UI\n   * and for E2E tests that need to confirm the prompt that appears\n   * belongs to this provider and not a third party.\n   */\n  isProviderActive(): Promise<boolean>;\n  /**\n   * Opens the OS credential/autofill provider settings screen so the\n   * user can enable this app as the active provider. Resolves to `true`\n   * if a settings screen could be launched, `false` otherwise.\n   */\n  openProviderSettings(): Promise<boolean>;\n}\n\n// This call loads the native module object from the JSI.\nconst nativeModule = requireNativeModule<ReactNativePasskeyAutofillModule>(\n  \"ReactNativePasskeyAutofill\",\n);\n\n// A handful of methods are only implemented in the iOS native module because\n// they interact with `ASCredentialIdentityStore`, which has no Android\n// equivalent (the Android Credential Provider service reads credentials\n// directly from MMKV on each request).\nif (Platform.OS === \"android\") {\n  const noops: Record<string, (...args: unknown[]) => Promise<unknown>> = {\n    replaceCredentialIdentities: () => Promise.resolve(),\n    refreshCredentialIdentities: () => Promise.resolve(),\n    getStoredCredentials: () => Promise.resolve([]),\n    getDiagnostics: () => Promise.resolve([]),\n  };\n  for (const name of Object.keys(noops)) {\n    if (typeof (nativeModule as unknown as Record<string, unknown>)[name] !== \"function\") {\n      (nativeModule as unknown as Record<string, unknown>)[name] = noops[name];\n    }\n  }\n}\n\nexport default nativeModule;\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@algorandfoundation/react-native-passkey-autofill",
-  "version": "1.0.0-canary.19",
+  "version": "1.0.0-canary.20",
   "description": "Passkey AutoFill React Native",
   "keywords": [
     "@algorandfoundation/react-native-passkey-autofill",
@@ -51,36 +51,36 @@
     "@algorandfoundation/react-native-keystore": "1.0.0-canary.12"
   },
   "devDependencies": {
-    "@expo/config-plugins": "~55.0.8",
+    "@expo/config-plugins": "~55.0.10",
     "@expo/npm-proofread": "^1.0.1",
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/exec": "^7.1.0",
     "@semantic-release/git": "^10.0.1",
-    "@semantic-release/github": "^12.0.6",
+    "@semantic-release/github": "^12.0.8",
     "@semantic-release/npm": "^13.1.5",
     "@types/jest": "^29.5.14",
-    "@types/node": "^22.19.17",
-    "@types/react": "~19.2.10",
+    "@types/node": "^22.19.20",
+    "@types/react": "~19.2.16",
     "appium": "^2.19.0",
     "appium-uiautomator2-driver": "^3.10.0",
     "appium-xcuitest-driver": "^9.10.5",
     "eslint": "^9.39.4",
-    "expo": "~55.0.17",
-    "expo-doctor": "^1.18.19",
+    "expo": "55.0.17",
+    "expo-doctor": "^1.19.8",
     "expo-module-scripts": "^55.0.2",
     "jest": "^29.7.0",
     "lefthook": "2.1.4",
     "oxfmt": "^0.43.0",
-    "oxlint": "^1.60.0",
+    "oxlint": "^1.68.0",
     "prettier": "^3.8.3",
     "react": "19.2.0",
     "react-native": "0.83.6",
     "semantic-release": "^25.0.3",
     "start-server-and-test": "^2.1.5",
-    "ts-jest": "^29.4.9",
+    "ts-jest": "^29.4.11",
     "ts-node": "^10.9.2",
     "typescript": "~5.9.3",
-    "webdriverio": "^9.27.0"
+    "webdriverio": "^9.27.2"
   },
   "peerDependencies": {
     "expo": "*",
@@ -114,26 +114,26 @@
       "react-native-quick-crypto": "1.0.19",
       "expo": "55.0.17",
       "ajv@>=7.0.0-alpha.0 <8.18.0": ">=8.18.0",
-      "axios@>=1.0.0 <1.12.0": ">=1.12.0",
-      "axios@>=1.0.0 <1.15.0": ">=1.15.0",
-      "axios@>=1.0.0 <=1.13.4": ">=1.13.5",
+      "axios@>=1.0.0 <1.16.0": ">=1.16.0",
       "basic-ftp@<=5.2.2": ">=5.3.0",
+      "brace-expansion@>=5.0.0 <5.0.6": ">=5.0.6",
       "diff@>=6.0.0 <8.0.3": ">=8.0.3",
+      "fast-uri@<=3.1.1": ">=3.1.2",
       "fast-xml-parser@<5.7.0": ">=5.7.0",
       "form-data@>=4.0.0 <4.0.4": ">=4.0.4",
       "glob@>=10.2.0 <10.5.0": ">=10.5.0",
       "lodash@<=4.17.23": ">=4.18.0",
-      "lodash@>=4.0.0 <=4.17.22": ">=4.17.23",
-      "lodash@>=4.0.0 <=4.17.23": ">=4.18.0",
       "on-headers@<1.1.0": ">=1.1.0",
       "path-to-regexp@<0.1.13": "0.1.13",
       "path-to-regexp@>=8.0.0 <8.4.0": ">=8.4.0",
       "postcss@<8.5.10": ">=8.5.10",
-      "qs@<6.14.1": ">=6.14.1",
-      "qs@>=6.7.0 <=6.14.1": ">=6.14.2",
+      "qs@<6.15.2": ">=6.15.2",
+      "shell-quote@>=1.1.0 <=1.8.3": ">=1.8.4",
       "uuid@<14.0.0": ">=14.0.0",
+      "ws@>=8.0.0 <8.20.1": ">=8.20.1",
       "yaml@>=2.0.0 <2.8.3": ">=2.8.3",
-      "yauzl@=3.2.0": ">=3.2.1"
+      "yauzl@=3.2.0": ">=3.2.1",
+      "@babel/plugin-transform-modules-systemjs@>=7.12.0 <=7.29.3": ">=7.29.4"
     }
   }
 }

package/src/ReactNativePasskeyAutofillModule.ts

@@ -1,4 +1,5 @@
 import { NativeModule, requireNativeModule } from "expo";
+import { Platform } from "react-native";
 
 import {
   PasskeyAutofillCredentialIdentity,
@@ -12,14 +13,25 @@ declare class ReactNativePasskeyAutofillModule extends NativeModule<ReactNativeP
   configureIntentActions(getPasskeyAction: string, createPasskeyAction: string): Promise<void>;
   clearCredentials(): Promise<void>;
   deleteCredential(credentialId: string): Promise<void>;
+  /**
+   * iOS: returns the identities currently published to the AutoFill
+   * `ASCredentialIdentityStore`. Android: no-op returning `[]` because the
+   * native Credential Provider service reads credentials directly from MMKV
+   * and there is no separate identity store to query.
+   */
   getStoredCredentials(): Promise<PasskeyAutofillCredentialIdentity[]>;
+  /**
+   * iOS: returns diagnostic strings from the AutoFill extension.
+   * Android: no-op returning `[]`.
+   */
   getDiagnostics(): Promise<string[]>;
   /**
    * Replaces the iOS AutoFill passkey identity store with credentials
    * available to the native Credential Provider extension. Each item must
    * include a credential id, relying party (`relyingPartyIdentifier`,
    * `rpId`, or `origin`), user handle, and P-256 private key material.
-   * Android ignores this method because the provider reads MMKV directly.
+   * Android ignores this method (no-op) because the provider reads MMKV
+   * directly.
    */
   replaceCredentialIdentities(credentials: PasskeyAutofillCredentialIdentity[]): Promise<void>;
   refreshCredentialIdentities(): Promise<void>;
@@ -40,4 +52,26 @@ declare class ReactNativePasskeyAutofillModule extends NativeModule<ReactNativeP
 }
 
 // This call loads the native module object from the JSI.
-export default requireNativeModule<ReactNativePasskeyAutofillModule>("ReactNativePasskeyAutofill");
+const nativeModule = requireNativeModule<ReactNativePasskeyAutofillModule>(
+  "ReactNativePasskeyAutofill",
+);
+
+// A handful of methods are only implemented in the iOS native module because
+// they interact with `ASCredentialIdentityStore`, which has no Android
+// equivalent (the Android Credential Provider service reads credentials
+// directly from MMKV on each request).
+if (Platform.OS === "android") {
+  const noops: Record<string, (...args: unknown[]) => Promise<unknown>> = {
+    replaceCredentialIdentities: () => Promise.resolve(),
+    refreshCredentialIdentities: () => Promise.resolve(),
+    getStoredCredentials: () => Promise.resolve([]),
+    getDiagnostics: () => Promise.resolve([]),
+  };
+  for (const name of Object.keys(noops)) {
+    if (typeof (nativeModule as unknown as Record<string, unknown>)[name] !== "function") {
+      (nativeModule as unknown as Record<string, unknown>)[name] = noops[name];
+    }
+  }
+}
+
+export default nativeModule;