@ankhorage/expo-runtime 2.4.0 → 2.5.1

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @ankhorage/expo-runtime
 
+## 2.5.1
+
+### Patch Changes
+
+- f616cdf: Fix brokered OAuth host detection so custom native, development-client, and standalone builds are not misclassified as Expo Go.
+
+## 2.5.0
+
+### Minor Changes
+
+- b6541d8: Add runtime readiness detection that rejects Expo Go for brokered native OAuth and requires a custom development or standalone build with the configured app scheme.
+
 ## 2.4.0
 
 ### Minor Changes

package/README.md

@@ -3,7 +3,7 @@
 
 # EXPO-RUNTIME
 
-![license: MIT](././paradox/badges/license.svg) ![npm: v2.2.0](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
+![license: MIT](././paradox/badges/license.svg) ![npm: v2.4.0](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
 
 Declarative runtime integration for Expo apps: maps app capabilities to permissions, packages, config plugins, providers, and adapters
 

package/dist/oauthBrowserRuntime.d.ts

@@ -0,0 +1,4 @@
+import { type ExpoOAuthBrowserRuntimeReadiness } from './oauthBrowserRuntimeCore';
+export type { ExpoOAuthBrowserRuntimeReadiness } from './oauthBrowserRuntimeCore';
+export declare function resolveExpoOAuthBrowserRuntimeReadiness(): ExpoOAuthBrowserRuntimeReadiness;
+//# sourceMappingURL=oauthBrowserRuntime.d.ts.map

package/dist/oauthBrowserRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthBrowserRuntime.d.ts","sourceRoot":"","sources":["../src/oauthBrowserRuntime.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,gCAAgC,EAEtC,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EAAE,gCAAgC,EAAE,MAAM,2BAA2B,CAAC;AAElF,wBAAgB,uCAAuC,IAAI,gCAAgC,CAM1F"}

package/dist/oauthBrowserRuntime.js

@@ -0,0 +1,10 @@
+import Constants from 'expo-constants';
+import { resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment, } from './oauthBrowserRuntimeCore';
+export function resolveExpoOAuthBrowserRuntimeReadiness() {
+    return resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment({
+        appOwnership: Constants.appOwnership,
+        executionEnvironment: Constants.executionEnvironment,
+        expoGoConfig: Constants.expoGoConfig,
+    });
+}
+//# sourceMappingURL=oauthBrowserRuntime.js.map

package/dist/oauthBrowserRuntime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthBrowserRuntime.js","sourceRoot":"","sources":["../src/oauthBrowserRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,gBAAgB,CAAC;AAEvC,OAAO,EAEL,sDAAsD,GACvD,MAAM,2BAA2B,CAAC;AAInC,MAAM,UAAU,uCAAuC;IACrD,OAAO,sDAAsD,CAAC;QAC5D,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;QACpD,YAAY,EAAE,SAAS,CAAC,YAAY;KACrC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import Constants from 'expo-constants';\n\nimport {\n  type ExpoOAuthBrowserRuntimeReadiness,\n  resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment,\n} from './oauthBrowserRuntimeCore';\n\nexport type { ExpoOAuthBrowserRuntimeReadiness } from './oauthBrowserRuntimeCore';\n\nexport function resolveExpoOAuthBrowserRuntimeReadiness(): ExpoOAuthBrowserRuntimeReadiness {\n  return resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment({\n    appOwnership: Constants.appOwnership,\n    executionEnvironment: Constants.executionEnvironment,\n    expoGoConfig: Constants.expoGoConfig,\n  });\n}\n"]}

package/dist/oauthBrowserRuntimeCore.d.ts

@@ -0,0 +1,14 @@
+export type ExpoOAuthBrowserRuntimeReadiness = {
+    readonly status: 'ready';
+} | {
+    readonly status: 'unsupported';
+    readonly reason: 'expo-go';
+    readonly message: string;
+};
+export interface ExpoOAuthBrowserRuntimeEnvironment {
+    readonly appOwnership: unknown;
+    readonly executionEnvironment: unknown;
+    readonly expoGoConfig: unknown;
+}
+export declare function resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment(environment: ExpoOAuthBrowserRuntimeEnvironment): ExpoOAuthBrowserRuntimeReadiness;
+//# sourceMappingURL=oauthBrowserRuntimeCore.d.ts.map

package/dist/oauthBrowserRuntimeCore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthBrowserRuntimeCore.d.ts","sourceRoot":"","sources":["../src/oauthBrowserRuntimeCore.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gCAAgC,GACxC;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC5B;IACE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC;AAED,wBAAgB,sDAAsD,CACpE,WAAW,EAAE,kCAAkC,GAC9C,gCAAgC,CAWlC"}

package/dist/oauthBrowserRuntimeCore.js

@@ -0,0 +1,11 @@
+export function resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment(environment) {
+    if (environment.appOwnership !== 'expo') {
+        return { status: 'ready' };
+    }
+    return {
+        status: 'unsupported',
+        reason: 'expo-go',
+        message: 'Brokered OAuth requires a development or standalone build with the configured app scheme; Expo Go cannot provide a stable OAuth callback scheme.',
+    };
+}
+//# sourceMappingURL=oauthBrowserRuntimeCore.js.map

package/dist/oauthBrowserRuntimeCore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthBrowserRuntimeCore.js","sourceRoot":"","sources":["../src/oauthBrowserRuntimeCore.ts"],"names":[],"mappings":"AAcA,MAAM,UAAU,sDAAsD,CACpE,WAA+C;IAE/C,IAAI,WAAW,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QACxC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,SAAS;QACjB,OAAO,EACL,kJAAkJ;KACrJ,CAAC;AACJ,CAAC","sourcesContent":["export type ExpoOAuthBrowserRuntimeReadiness =\n  | { readonly status: 'ready' }\n  | {\n      readonly status: 'unsupported';\n      readonly reason: 'expo-go';\n      readonly message: string;\n    };\n\nexport interface ExpoOAuthBrowserRuntimeEnvironment {\n  readonly appOwnership: unknown;\n  readonly executionEnvironment: unknown;\n  readonly expoGoConfig: unknown;\n}\n\nexport function resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment(\n  environment: ExpoOAuthBrowserRuntimeEnvironment,\n): ExpoOAuthBrowserRuntimeReadiness {\n  if (environment.appOwnership !== 'expo') {\n    return { status: 'ready' };\n  }\n\n  return {\n    status: 'unsupported',\n    reason: 'expo-go',\n    message:\n      'Brokered OAuth requires a development or standalone build with the configured app scheme; Expo Go cannot provide a stable OAuth callback scheme.',\n  };\n}\n"]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ankhorage/expo-runtime",
   "type": "module",
-  "version": "2.4.0",
+  "version": "2.5.1",
   "description": "Declarative runtime integration for Expo apps: maps app capabilities to permissions, packages, config plugins, providers, and adapters",
   "homepage": "https://github.com/ankhorage/expo-runtime#readme",
   "bugs": {
@@ -55,6 +55,13 @@
       "import": "./dist/oauthBrowserTransport.js",
       "default": "./dist/oauthBrowserTransport.js"
     },
+    "./oauth-browser-runtime": {
+      "react-native": "./src/oauthBrowserRuntime.ts",
+      "browser": "./src/oauthBrowserRuntime.ts",
+      "types": "./src/oauthBrowserRuntime.ts",
+      "import": "./dist/oauthBrowserRuntime.js",
+      "default": "./dist/oauthBrowserRuntime.js"
+    },
     "./media-picker": {
       "react-native": "./src/mediaPicker/index.ts",
       "browser": "./src/mediaPicker/index.ts",
@@ -92,6 +99,7 @@
     "@ankhorage/zora": "^2.8.7",
     "expo": "~54.0.34",
     "expo-camera": "~17.0.10",
+    "expo-constants": "~18.0.13",
     "expo-document-picker": "~14.0.8",
     "expo-file-system": "~19.0.23",
     "expo-image-picker": "~17.0.11",
@@ -99,6 +107,9 @@
     "react-native": "0.81.5"
   },
   "peerDependenciesMeta": {
+    "expo-constants": {
+      "optional": true
+    },
     "expo-document-picker": {
       "optional": true
     },
@@ -119,6 +130,7 @@
     "@types/react": "^19.2.14",
     "expo": "~54.0.34",
     "expo-camera": "~17.0.10",
+    "expo-constants": "~18.0.13",
     "expo-document-picker": "~14.0.8",
     "expo-file-system": "~19.0.23",
     "expo-image-picker": "~17.0.11",

package/src/oauthBrowserRuntime.test.ts

@@ -0,0 +1,60 @@
+import { describe, expect, test } from 'bun:test';
+
+import { resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment } from './oauthBrowserRuntimeCore';
+
+describe('Expo OAuth browser runtime readiness', () => {
+  test('allows an SDK 54 custom native build with an embedded Expo config', () => {
+    expect(
+      resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment({
+        appOwnership: null,
+        executionEnvironment: 'bare',
+        expoGoConfig: { name: 'Auth5 Native OAuth Smoke' },
+      }),
+    ).toEqual({ status: 'ready' });
+  });
+
+  test('allows a development client store-client runtime', () => {
+    expect(
+      resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment({
+        appOwnership: null,
+        executionEnvironment: 'storeClient',
+        expoGoConfig: null,
+      }),
+    ).toEqual({ status: 'ready' });
+  });
+
+  test('allows a standalone runtime', () => {
+    expect(
+      resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment({
+        appOwnership: null,
+        executionEnvironment: 'standalone',
+        expoGoConfig: null,
+      }),
+    ).toEqual({ status: 'ready' });
+  });
+
+  test('rejects Expo Go with an actionable development-build requirement', () => {
+    expect(
+      resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment({
+        appOwnership: 'expo',
+        executionEnvironment: 'storeClient',
+        expoGoConfig: { debuggerHost: '127.0.0.1:8081' },
+      }),
+    ).toEqual({
+      status: 'unsupported',
+      reason: 'expo-go',
+      message:
+        'Brokered OAuth requires a development or standalone build with the configured app scheme; Expo Go cannot provide a stable OAuth callback scheme.',
+    });
+  });
+
+  test('does not serialize Expo runtime configuration into readiness output', () => {
+    const readiness = resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment({
+      appOwnership: 'expo',
+      executionEnvironment: 'storeClient',
+      expoGoConfig: { secretLikeValue: 'do-not-echo' },
+    });
+
+    expect(JSON.stringify(readiness)).not.toContain('do-not-echo');
+  });
+});

package/src/oauthBrowserRuntime.ts

@@ -0,0 +1,16 @@
+import Constants from 'expo-constants';
+
+import {
+  type ExpoOAuthBrowserRuntimeReadiness,
+  resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment,
+} from './oauthBrowserRuntimeCore';
+
+export type { ExpoOAuthBrowserRuntimeReadiness } from './oauthBrowserRuntimeCore';
+
+export function resolveExpoOAuthBrowserRuntimeReadiness(): ExpoOAuthBrowserRuntimeReadiness {
+  return resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment({
+    appOwnership: Constants.appOwnership,
+    executionEnvironment: Constants.executionEnvironment,
+    expoGoConfig: Constants.expoGoConfig,
+  });
+}

package/src/oauthBrowserRuntimeCore.ts

@@ -0,0 +1,28 @@
+export type ExpoOAuthBrowserRuntimeReadiness =
+  | { readonly status: 'ready' }
+  | {
+      readonly status: 'unsupported';
+      readonly reason: 'expo-go';
+      readonly message: string;
+    };
+
+export interface ExpoOAuthBrowserRuntimeEnvironment {
+  readonly appOwnership: unknown;
+  readonly executionEnvironment: unknown;
+  readonly expoGoConfig: unknown;
+}
+
+export function resolveExpoOAuthBrowserRuntimeReadinessFromEnvironment(
+  environment: ExpoOAuthBrowserRuntimeEnvironment,
+): ExpoOAuthBrowserRuntimeReadiness {
+  if (environment.appOwnership !== 'expo') {
+    return { status: 'ready' };
+  }
+
+  return {
+    status: 'unsupported',
+    reason: 'expo-go',
+    message:
+      'Brokered OAuth requires a development or standalone build with the configured app scheme; Expo Go cannot provide a stable OAuth callback scheme.',
+  };
+}