@appattest/react-native 0.1.0

package/lib/commonjs/index.js

@@ -0,0 +1,245 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = exports.ErrorCode = exports.AppAttestError = exports.AppAttest = void 0;
+exports.useAllSecrets = useAllSecrets;
+exports.useAppAttestState = useAppAttestState;
+exports.useSecret = useSecret;
+var _react = require("react");
+var _reactNative = require("react-native");
+var _NativeAppAttest = _interopRequireDefault(require("./NativeAppAttest"));
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+/**
+ * @appattest/react-native — public API.
+ *
+ * Surface mirrors the Swift SDK's bridge translation:
+ *   - AppAttest.start() — fire-and-forget setup (zero-arg)
+ *   - AppAttest.getSecret(name) — Promise<string | null>
+ *   - AppAttest.getAllSecrets() — Promise<Record<string, string>>
+ *   - AppAttest.getState() — Promise<AppAttestState>
+ *   - AppAttest.waitForReady() — Promise<void>
+ *   - AppAttest.retry() — Promise<void>
+ *   - AppAttest.addStateListener(fn) — (state) => void; returns unsubscribe
+ *   - AppAttest.setDebugMode
+ *
+ * React hooks (idiomatic for RN consumers):
+ *   - useSecret(name) — string | null, re-renders on rotation
+ *   - useAllSecrets() — Record<string, string>, re-renders on rotation
+ *   - useAppAttestState() — AppAttestState, re-renders on transition
+ *
+ * There is no sandbox-mode modal logic. Developers handle their
+ * own UX for `.subscriptionRequired` / `.creditsRequired` / `.unavailable`.
+ */
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+const eventEmitter = new _reactNative.NativeEventEmitter(_reactNative.NativeModules.RNAppAttest);
+
+/**
+ * Lifecycle state. Mirrors `AppAttestClient.State` on the native side.
+ */
+
+/**
+ * Typed error thrown by every method. `code` matches the Swift SDK's
+ * `AppAttestError.code` one-for-one.
+ */
+class AppAttestError extends Error {
+  /** For `subscription_required`: URL to (re)start the project subscription. */
+
+  /** For `credits_required`: URL to top up the project balance. */
+
+  constructor(code, message, extras) {
+    super(message);
+    this.name = 'AppAttestError';
+    this.code = code;
+    this.subscribeUrl = extras?.subscribeUrl;
+    this.topupUrl = extras?.topupUrl;
+    this.nativeError = extras?.nativeError;
+  }
+
+  /**
+   * Single accessor for the dashboard URL regardless of code. Returns
+   * `subscribeUrl` for `subscription_required`, `topupUrl` for
+   * `credits_required`, else `undefined`.
+   */
+  get actionUrl() {
+    return this.subscribeUrl ?? this.topupUrl;
+  }
+}
+
+/** Stable string codes. Match Swift `AppAttestError.code` one-for-one. */
+exports.AppAttestError = AppAttestError;
+const ErrorCode = exports.ErrorCode = {
+  SubscriptionRequired: 'subscription_required',
+  CreditsRequired: 'credits_required',
+  AttestationRejected: 'attestation_rejected',
+  ServiceUnavailable: 'service_unavailable',
+  Network: 'network',
+  DebugModeReleaseBlocked: 'debug_mode_release_blocked',
+  InvalidArgument: 'invalid_argument'
+};
+function buildError(e, native) {
+  return new AppAttestError(e.code ?? 'internal_error', e.message ?? String(native), {
+    subscribeUrl: e.userInfo?.subscribeUrl ?? e.subscribeUrl,
+    topupUrl: e.userInfo?.topupUrl ?? e.topupUrl,
+    nativeError: native
+  });
+}
+async function wrap(p) {
+  try {
+    return await p;
+  } catch (err) {
+    throw buildError(err, err);
+  }
+}
+function decodeState(raw) {
+  const error = raw.error ? buildError(raw.error, raw.error) : undefined;
+  return {
+    name: raw.name,
+    error
+  };
+}
+const AppAttest = exports.AppAttest = {
+  /**
+   * Synchronous, idempotent setup. Zero-argument. Apple's AAGUID
+   * determines the bucket (sandbox vs production) server-side; the SDK
+   * is bucket-blind.
+   */
+  start() {
+    return wrap(_NativeAppAttest.default.start());
+  },
+  /** Awaits a terminal state. Resolves on `ready`; rejects with
+   *  AppAttestError on subscriptionRequired / creditsRequired / unavailable. */
+  waitForReady() {
+    return wrap(_NativeAppAttest.default.waitForReady());
+  },
+  /** Re-runs the background sync. */
+  retry() {
+    return wrap(_NativeAppAttest.default.retry());
+  },
+  /** Wipes stored credentials and secrets. */
+  reset() {
+    return wrap(_NativeAppAttest.default.reset());
+  },
+  /**
+   * Invalidate the cached secrets bundle and immediately sync. Keeps
+   * attestation credentials. Forces a 200 on the next sync, which
+   * consumes one credit on the production bucket.
+   *
+   * Use this for host-app "force refresh" / "sync now" UX. For wiping
+   * everything (including attestation), see ``reset()``.
+   */
+  invalidateBundle() {
+    return wrap(_NativeAppAttest.default.invalidateBundle());
+  },
+  /** Returns the secret for `name`, or `null`. */
+  getSecret(name) {
+    return wrap(_NativeAppAttest.default.getSecret(name));
+  },
+  /** Snapshot of every synced secret. */
+  getAllSecrets() {
+    return wrap(_NativeAppAttest.default.getAllSecrets());
+  },
+  /** Current state snapshot. */
+  async getState() {
+    const raw = await wrap(_NativeAppAttest.default.getState());
+    return decodeState(raw);
+  },
+  /** Subscribe to state transitions. Returns an unsubscribe fn. */
+  addStateListener(listener) {
+    const subscription = eventEmitter.addListener('stateChanged', raw => {
+      listener(decodeState(raw));
+    });
+    return () => subscription.remove();
+  },
+  /** Set runtime mode. `'production'` (or `null`) is default. */
+  setDebugMode(mode, stubs) {
+    return wrap(_NativeAppAttest.default.setDebugMode(mode, stubs ?? null));
+  }
+
+  // setApiBaseUrl is not exposed — the base URL is hardcoded in the Swift
+  // SDK. There is no runtime override path from JavaScript.
+};
+
+// MARK: - React hooks
+
+/**
+ * React hook returning the current value of `secrets[name]`. Re-renders
+ * the host component whenever the underlying value changes (e.g. after
+ * a foreground rotation pulled new data).
+ */
+function useSecret(name) {
+  const [value, setValue] = (0, _react.useState)(null);
+  (0, _react.useEffect)(() => {
+    let active = true;
+    AppAttest.getSecret(name).then(v => {
+      if (active) setValue(v);
+    }).catch(() => {});
+    const unsubscribe = AppAttest.addStateListener(async s => {
+      if (s.name === 'ready') {
+        try {
+          const v = await AppAttest.getSecret(name);
+          if (active) setValue(v);
+        } catch {/* ignore */}
+      }
+    });
+    return () => {
+      active = false;
+      unsubscribe();
+    };
+  }, [name]);
+  return value;
+}
+
+/**
+ * React hook returning every synced secret. Re-renders on rotation.
+ */
+function useAllSecrets() {
+  const [all, setAll] = (0, _react.useState)({});
+  (0, _react.useEffect)(() => {
+    let active = true;
+    AppAttest.getAllSecrets().then(v => {
+      if (active) setAll(v);
+    }).catch(() => {});
+    const unsubscribe = AppAttest.addStateListener(async s => {
+      if (s.name === 'ready') {
+        try {
+          const v = await AppAttest.getAllSecrets();
+          if (active) setAll(v);
+        } catch {/* ignore */}
+      }
+    });
+    return () => {
+      active = false;
+      unsubscribe();
+    };
+  }, []);
+  return all;
+}
+
+/**
+ * React hook returning the current `AppAttestState`. Re-renders on
+ * every transition.
+ */
+function useAppAttestState() {
+  const [state, setState] = (0, _react.useState)({
+    name: 'initializing'
+  });
+  (0, _react.useEffect)(() => {
+    let active = true;
+    AppAttest.getState().then(s => {
+      if (active) setState(s);
+    }).catch(() => {});
+    const unsubscribe = AppAttest.addStateListener(s => {
+      if (active) setState(s);
+    });
+    return () => {
+      active = false;
+      unsubscribe();
+    };
+  }, []);
+  return state;
+}
+var _default = exports.default = AppAttest;
+//# sourceMappingURL=index.js.map

package/lib/commonjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_react","require","_reactNative","_NativeAppAttest","_interopRequireDefault","e","__esModule","default","eventEmitter","NativeEventEmitter","NativeModules","RNAppAttest","AppAttestError","Error","constructor","code","message","extras","name","subscribeUrl","topupUrl","nativeError","actionUrl","exports","ErrorCode","SubscriptionRequired","CreditsRequired","AttestationRejected","ServiceUnavailable","Network","DebugModeReleaseBlocked","InvalidArgument","buildError","native","String","userInfo","wrap","p","err","decodeState","raw","error","undefined","AppAttest","start","NativeAppAttest","waitForReady","retry","reset","invalidateBundle","getSecret","getAllSecrets","getState","addStateListener","listener","subscription","addListener","remove","setDebugMode","mode","stubs","useSecret","value","setValue","useState","useEffect","active","then","v","catch","unsubscribe","s","useAllSecrets","all","setAll","useAppAttestState","state","setState","_default"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;;;;;;;;AAsBA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AACA,IAAAE,gBAAA,GAAAC,sBAAA,CAAAH,OAAA;AAAgD,SAAAG,uBAAAC,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAxBhD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA;AACA,MAAMG,YAAY,GAAG,IAAIC,+BAAkB,CAACC,0BAAa,CAACC,WAAkB,CAAC;;AAE7E;AACA;AACA;;AAeA;AACA;AACA;AACA;AACO,MAAMC,cAAc,SAASC,KAAK,CAAC;EAExC;;EAEA;;EAIAC,WAAWA,CACTC,IAAY,EACZC,OAAe,EACfC,MAIC,EACD;IACA,KAAK,CAACD,OAAO,CAAC;IACd,IAAI,CAACE,IAAI,GAAG,gBAAgB;IAC5B,IAAI,CAACH,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACI,YAAY,GAAGF,MAAM,EAAEE,YAAY;IACxC,IAAI,CAACC,QAAQ,GAAGH,MAAM,EAAEG,QAAQ;IAChC,IAAI,CAACC,WAAW,GAAGJ,MAAM,EAAEI,WAAW;EACxC;;EAEA;AACF;AACA;AACA;AACA;EACE,IAAIC,SAASA,CAAA,EAAuB;IAClC,OAAO,IAAI,CAACH,YAAY,IAAI,IAAI,CAACC,QAAQ;EAC3C;AACF;;AAEA;AAAAG,OAAA,CAAAX,cAAA,GAAAA,cAAA;AACO,MAAMY,SAAS,GAAAD,OAAA,CAAAC,SAAA,GAAG;EACvBC,oBAAoB,EAAE,uBAAuB;EAC7CC,eAAe,EAAE,kBAAkB;EACnCC,mBAAmB,EAAE,sBAAsB;EAC3CC,kBAAkB,EAAE,qBAAqB;EACzCC,OAAO,EAAE,SAAS;EAClBC,uBAAuB,EAAE,4BAA4B;EACrDC,eAAe,EAAE;AACnB,CAAU;AAkBV,SAASC,UAAUA,CAAC3B,CAAgB,EAAE4B,MAAe,EAAkB;EACrE,OAAO,IAAIrB,cAAc,CAACP,CAAC,CAACU,IAAI,IAAI,gBAAgB,EAAEV,CAAC,CAACW,OAAO,IAAIkB,MAAM,CAACD,MAAM,CAAC,EAAE;IACjFd,YAAY,EAAEd,CAAC,CAAC8B,QAAQ,EAAEhB,YAAY,IAAId,CAAC,CAACc,YAAY;IACxDC,QAAQ,EAAEf,CAAC,CAAC8B,QAAQ,EAAEf,QAAQ,IAAIf,CAAC,CAACe,QAAQ;IAC5CC,WAAW,EAAEY;EACf,CAAC,CAAC;AACJ;AAEA,eAAeG,IAAIA,CAAIC,CAAa,EAAc;EAChD,IAAI;IACF,OAAO,MAAMA,CAAC;EAChB,CAAC,CAAC,OAAOC,GAAG,EAAE;IACZ,MAAMN,UAAU,CAACM,GAAG,EAAmBA,GAAG,CAAC;EAC7C;AACF;AAOA,SAASC,WAAWA,CAACC,GAAmB,EAAkB;EACxD,MAAMC,KAAK,GAAGD,GAAG,CAACC,KAAK,GAAGT,UAAU,CAACQ,GAAG,CAACC,KAAK,EAAED,GAAG,CAACC,KAAK,CAAC,GAAGC,SAAS;EACtE,OAAO;IAAExB,IAAI,EAAEsB,GAAG,CAACtB,IAA0B;IAAEuB;EAAM,CAAC;AACxD;AAEO,MAAME,SAAS,GAAApB,OAAA,CAAAoB,SAAA,GAAG;EACvB;AACF;AACA;AACA;AACA;EACEC,KAAKA,CAAA,EAAkB;IACrB,OAAOR,IAAI,CAACS,wBAAe,CAACD,KAAK,CAAC,CAAC,CAAC;EACtC,CAAC;EAED;AACF;EACEE,YAAYA,CAAA,EAAkB;IAC5B,OAAOV,IAAI,CAACS,wBAAe,CAACC,YAAY,CAAC,CAAC,CAAC;EAC7C,CAAC;EAED;EACAC,KAAKA,CAAA,EAAkB;IACrB,OAAOX,IAAI,CAACS,wBAAe,CAACE,KAAK,CAAC,CAAC,CAAC;EACtC,CAAC;EAED;EACAC,KAAKA,CAAA,EAAkB;IACrB,OAAOZ,IAAI,CAACS,wBAAe,CAACG,KAAK,CAAC,CAAC,CAAC;EACtC,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACEC,gBAAgBA,CAAA,EAAkB;IAChC,OAAOb,IAAI,CAACS,wBAAe,CAACI,gBAAgB,CAAC,CAAC,CAAC;EACjD,CAAC;EAED;EACAC,SAASA,CAAChC,IAAY,EAA0B;IAC9C,OAAOkB,IAAI,CAACS,wBAAe,CAACK,SAAS,CAAChC,IAAI,CAAC,CAAC;EAC9C,CAAC;EAED;EACAiC,aAAaA,CAAA,EAAoC;IAC/C,OAAOf,IAAI,CAACS,wBAAe,CAACM,aAAa,CAAC,CAAC,CAAC;EAC9C,CAAC;EAED;EACA,MAAMC,QAAQA,CAAA,EAA4B;IACxC,MAAMZ,GAAG,GAAG,MAAMJ,IAAI,CAACS,wBAAe,CAACO,QAAQ,CAAC,CAAC,CAAC;IAClD,OAAOb,WAAW,CAACC,GAAqB,CAAC;EAC3C,CAAC;EAED;EACAa,gBAAgBA,CAACC,QAAyC,EAAc;IACtE,MAAMC,YAAY,GAAG/C,YAAY,CAACgD,WAAW,CAAC,cAAc,EAAGhB,GAAG,IAAK;MACrEc,QAAQ,CAACf,WAAW,CAACC,GAAqB,CAAC,CAAC;IAC9C,CAAC,CAAC;IACF,OAAO,MAAMe,YAAY,CAACE,MAAM,CAAC,CAAC;EACpC,CAAC;EAED;EACAC,YAAYA,CAACC,IAAsB,EAAEC,KAA8B,EAAiB;IAClF,OAAOxB,IAAI,CAACS,wBAAe,CAACa,YAAY,CAACC,IAAI,EAAEC,KAAK,IAAI,IAAI,CAAC,CAAC;EAChE;;EAEA;EACA;AACF,CAAC;;AAED;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASC,SAASA,CAAC3C,IAAY,EAAiB;EACrD,MAAM,CAAC4C,KAAK,EAAEC,QAAQ,CAAC,GAAG,IAAAC,eAAQ,EAAgB,IAAI,CAAC;EACvD,IAAAC,gBAAS,EAAC,MAAM;IACd,IAAIC,MAAM,GAAG,IAAI;IACjBvB,SAAS,CAACO,SAAS,CAAChC,IAAI,CAAC,CAACiD,IAAI,CAAEC,CAAC,IAAK;MAAE,IAAIF,MAAM,EAAEH,QAAQ,CAACK,CAAC,CAAC;IAAE,CAAC,CAAC,CAACC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACnF,MAAMC,WAAW,GAAG3B,SAAS,CAACU,gBAAgB,CAAC,MAAOkB,CAAC,IAAK;MAC1D,IAAIA,CAAC,CAACrD,IAAI,KAAK,OAAO,EAAE;QACtB,IAAI;UACF,MAAMkD,CAAC,GAAG,MAAMzB,SAAS,CAACO,SAAS,CAAChC,IAAI,CAAC;UACzC,IAAIgD,MAAM,EAAEH,QAAQ,CAACK,CAAC,CAAC;QACzB,CAAC,CAAC,MAAM,CAAE;MACZ;IACF,CAAC,CAAC;IACF,OAAO,MAAM;MACXF,MAAM,GAAG,KAAK;MACdI,WAAW,CAAC,CAAC;IACf,CAAC;EACH,CAAC,EAAE,CAACpD,IAAI,CAAC,CAAC;EACV,OAAO4C,KAAK;AACd;;AAEA;AACA;AACA;AACO,SAASU,aAAaA,CAAA,EAA2B;EACtD,MAAM,CAACC,GAAG,EAAEC,MAAM,CAAC,GAAG,IAAAV,eAAQ,EAAyB,CAAC,CAAC,CAAC;EAC1D,IAAAC,gBAAS,EAAC,MAAM;IACd,IAAIC,MAAM,GAAG,IAAI;IACjBvB,SAAS,CAACQ,aAAa,CAAC,CAAC,CAACgB,IAAI,CAAEC,CAAC,IAAK;MAAE,IAAIF,MAAM,EAAEQ,MAAM,CAACN,CAAC,CAAC;IAAE,CAAC,CAAC,CAACC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACjF,MAAMC,WAAW,GAAG3B,SAAS,CAACU,gBAAgB,CAAC,MAAOkB,CAAC,IAAK;MAC1D,IAAIA,CAAC,CAACrD,IAAI,KAAK,OAAO,EAAE;QACtB,IAAI;UACF,MAAMkD,CAAC,GAAG,MAAMzB,SAAS,CAACQ,aAAa,CAAC,CAAC;UACzC,IAAIe,MAAM,EAAEQ,MAAM,CAACN,CAAC,CAAC;QACvB,CAAC,CAAC,MAAM,CAAE;MACZ;IACF,CAAC,CAAC;IACF,OAAO,MAAM;MACXF,MAAM,GAAG,KAAK;MACdI,WAAW,CAAC,CAAC;IACf,CAAC;EACH,CAAC,EAAE,EAAE,CAAC;EACN,OAAOG,GAAG;AACZ;;AAEA;AACA;AACA;AACA;AACO,SAASE,iBAAiBA,CAAA,EAAmB;EAClD,MAAM,CAACC,KAAK,EAAEC,QAAQ,CAAC,GAAG,IAAAb,eAAQ,EAAiB;IAAE9C,IAAI,EAAE;EAAe,CAAC,CAAC;EAC5E,IAAA+C,gBAAS,EAAC,MAAM;IACd,IAAIC,MAAM,GAAG,IAAI;IACjBvB,SAAS,CAACS,QAAQ,CAAC,CAAC,CAACe,IAAI,CAAEI,CAAC,IAAK;MAAE,IAAIL,MAAM,EAAEW,QAAQ,CAACN,CAAC,CAAC;IAAE,CAAC,CAAC,CAACF,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,MAAMC,WAAW,GAAG3B,SAAS,CAACU,gBAAgB,CAAEkB,CAAC,IAAK;MACpD,IAAIL,MAAM,EAAEW,QAAQ,CAACN,CAAC,CAAC;IACzB,CAAC,CAAC;IACF,OAAO,MAAM;MACXL,MAAM,GAAG,KAAK;MACdI,WAAW,CAAC,CAAC;IACf,CAAC;EACH,CAAC,EAAE,EAAE,CAAC;EACN,OAAOM,KAAK;AACd;AAAC,IAAAE,QAAA,GAAAvD,OAAA,CAAAhB,OAAA,GAEcoC,SAAS","ignoreList":[]}

package/lib/commonjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/lib/module/NativeAppAttest.js

@@ -0,0 +1,17 @@
+"use strict";
+
+/**
+ * TurboModule spec for the AppAttest iOS native module.
+ *
+ * Codegen reads this file. The shape is restricted to what TurboModule
+ * codegen can serialize (primitives, Object, arrays of primitives,
+ * Promises, null).
+ *
+ * Errors: rejection objects carry `{ code, message,
+ * subscribeUrl?, topupUrl? }`. The TS wrapper in `index.ts` translates
+ * these into `AppAttestError`.
+ */
+
+import { TurboModuleRegistry } from 'react-native';
+export default TurboModuleRegistry.getEnforcing('RNAppAttest');
+//# sourceMappingURL=NativeAppAttest.js.map

package/lib/module/NativeAppAttest.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["TurboModuleRegistry","getEnforcing"],"sourceRoot":"../../src","sources":["NativeAppAttest.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,mBAAmB,QAAQ,cAAc;AAyDlD,eAAeA,mBAAmB,CAACC,YAAY,CAAO,aAAa,CAAC","ignoreList":[]}

package/lib/module/index.js

@@ -0,0 +1,237 @@
+"use strict";
+
+/**
+ * @appattest/react-native — public API.
+ *
+ * Surface mirrors the Swift SDK's bridge translation:
+ *   - AppAttest.start() — fire-and-forget setup (zero-arg)
+ *   - AppAttest.getSecret(name) — Promise<string | null>
+ *   - AppAttest.getAllSecrets() — Promise<Record<string, string>>
+ *   - AppAttest.getState() — Promise<AppAttestState>
+ *   - AppAttest.waitForReady() — Promise<void>
+ *   - AppAttest.retry() — Promise<void>
+ *   - AppAttest.addStateListener(fn) — (state) => void; returns unsubscribe
+ *   - AppAttest.setDebugMode
+ *
+ * React hooks (idiomatic for RN consumers):
+ *   - useSecret(name) — string | null, re-renders on rotation
+ *   - useAllSecrets() — Record<string, string>, re-renders on rotation
+ *   - useAppAttestState() — AppAttestState, re-renders on transition
+ *
+ * There is no sandbox-mode modal logic. Developers handle their
+ * own UX for `.subscriptionRequired` / `.creditsRequired` / `.unavailable`.
+ */
+
+import { useEffect, useState } from 'react';
+import { NativeEventEmitter, NativeModules } from 'react-native';
+import NativeAppAttest from './NativeAppAttest';
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+const eventEmitter = new NativeEventEmitter(NativeModules.RNAppAttest);
+
+/**
+ * Lifecycle state. Mirrors `AppAttestClient.State` on the native side.
+ */
+
+/**
+ * Typed error thrown by every method. `code` matches the Swift SDK's
+ * `AppAttestError.code` one-for-one.
+ */
+export class AppAttestError extends Error {
+  /** For `subscription_required`: URL to (re)start the project subscription. */
+
+  /** For `credits_required`: URL to top up the project balance. */
+
+  constructor(code, message, extras) {
+    super(message);
+    this.name = 'AppAttestError';
+    this.code = code;
+    this.subscribeUrl = extras?.subscribeUrl;
+    this.topupUrl = extras?.topupUrl;
+    this.nativeError = extras?.nativeError;
+  }
+
+  /**
+   * Single accessor for the dashboard URL regardless of code. Returns
+   * `subscribeUrl` for `subscription_required`, `topupUrl` for
+   * `credits_required`, else `undefined`.
+   */
+  get actionUrl() {
+    return this.subscribeUrl ?? this.topupUrl;
+  }
+}
+
+/** Stable string codes. Match Swift `AppAttestError.code` one-for-one. */
+export const ErrorCode = {
+  SubscriptionRequired: 'subscription_required',
+  CreditsRequired: 'credits_required',
+  AttestationRejected: 'attestation_rejected',
+  ServiceUnavailable: 'service_unavailable',
+  Network: 'network',
+  DebugModeReleaseBlocked: 'debug_mode_release_blocked',
+  InvalidArgument: 'invalid_argument'
+};
+function buildError(e, native) {
+  return new AppAttestError(e.code ?? 'internal_error', e.message ?? String(native), {
+    subscribeUrl: e.userInfo?.subscribeUrl ?? e.subscribeUrl,
+    topupUrl: e.userInfo?.topupUrl ?? e.topupUrl,
+    nativeError: native
+  });
+}
+async function wrap(p) {
+  try {
+    return await p;
+  } catch (err) {
+    throw buildError(err, err);
+  }
+}
+function decodeState(raw) {
+  const error = raw.error ? buildError(raw.error, raw.error) : undefined;
+  return {
+    name: raw.name,
+    error
+  };
+}
+export const AppAttest = {
+  /**
+   * Synchronous, idempotent setup. Zero-argument. Apple's AAGUID
+   * determines the bucket (sandbox vs production) server-side; the SDK
+   * is bucket-blind.
+   */
+  start() {
+    return wrap(NativeAppAttest.start());
+  },
+  /** Awaits a terminal state. Resolves on `ready`; rejects with
+   *  AppAttestError on subscriptionRequired / creditsRequired / unavailable. */
+  waitForReady() {
+    return wrap(NativeAppAttest.waitForReady());
+  },
+  /** Re-runs the background sync. */
+  retry() {
+    return wrap(NativeAppAttest.retry());
+  },
+  /** Wipes stored credentials and secrets. */
+  reset() {
+    return wrap(NativeAppAttest.reset());
+  },
+  /**
+   * Invalidate the cached secrets bundle and immediately sync. Keeps
+   * attestation credentials. Forces a 200 on the next sync, which
+   * consumes one credit on the production bucket.
+   *
+   * Use this for host-app "force refresh" / "sync now" UX. For wiping
+   * everything (including attestation), see ``reset()``.
+   */
+  invalidateBundle() {
+    return wrap(NativeAppAttest.invalidateBundle());
+  },
+  /** Returns the secret for `name`, or `null`. */
+  getSecret(name) {
+    return wrap(NativeAppAttest.getSecret(name));
+  },
+  /** Snapshot of every synced secret. */
+  getAllSecrets() {
+    return wrap(NativeAppAttest.getAllSecrets());
+  },
+  /** Current state snapshot. */
+  async getState() {
+    const raw = await wrap(NativeAppAttest.getState());
+    return decodeState(raw);
+  },
+  /** Subscribe to state transitions. Returns an unsubscribe fn. */
+  addStateListener(listener) {
+    const subscription = eventEmitter.addListener('stateChanged', raw => {
+      listener(decodeState(raw));
+    });
+    return () => subscription.remove();
+  },
+  /** Set runtime mode. `'production'` (or `null`) is default. */
+  setDebugMode(mode, stubs) {
+    return wrap(NativeAppAttest.setDebugMode(mode, stubs ?? null));
+  }
+
+  // setApiBaseUrl is not exposed — the base URL is hardcoded in the Swift
+  // SDK. There is no runtime override path from JavaScript.
+};
+
+// MARK: - React hooks
+
+/**
+ * React hook returning the current value of `secrets[name]`. Re-renders
+ * the host component whenever the underlying value changes (e.g. after
+ * a foreground rotation pulled new data).
+ */
+export function useSecret(name) {
+  const [value, setValue] = useState(null);
+  useEffect(() => {
+    let active = true;
+    AppAttest.getSecret(name).then(v => {
+      if (active) setValue(v);
+    }).catch(() => {});
+    const unsubscribe = AppAttest.addStateListener(async s => {
+      if (s.name === 'ready') {
+        try {
+          const v = await AppAttest.getSecret(name);
+          if (active) setValue(v);
+        } catch {/* ignore */}
+      }
+    });
+    return () => {
+      active = false;
+      unsubscribe();
+    };
+  }, [name]);
+  return value;
+}
+
+/**
+ * React hook returning every synced secret. Re-renders on rotation.
+ */
+export function useAllSecrets() {
+  const [all, setAll] = useState({});
+  useEffect(() => {
+    let active = true;
+    AppAttest.getAllSecrets().then(v => {
+      if (active) setAll(v);
+    }).catch(() => {});
+    const unsubscribe = AppAttest.addStateListener(async s => {
+      if (s.name === 'ready') {
+        try {
+          const v = await AppAttest.getAllSecrets();
+          if (active) setAll(v);
+        } catch {/* ignore */}
+      }
+    });
+    return () => {
+      active = false;
+      unsubscribe();
+    };
+  }, []);
+  return all;
+}
+
+/**
+ * React hook returning the current `AppAttestState`. Re-renders on
+ * every transition.
+ */
+export function useAppAttestState() {
+  const [state, setState] = useState({
+    name: 'initializing'
+  });
+  useEffect(() => {
+    let active = true;
+    AppAttest.getState().then(s => {
+      if (active) setState(s);
+    }).catch(() => {});
+    const unsubscribe = AppAttest.addStateListener(s => {
+      if (active) setState(s);
+    });
+    return () => {
+      active = false;
+      unsubscribe();
+    };
+  }, []);
+  return state;
+}
+export default AppAttest;
+//# sourceMappingURL=index.js.map

package/lib/module/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useEffect","useState","NativeEventEmitter","NativeModules","NativeAppAttest","eventEmitter","RNAppAttest","AppAttestError","Error","constructor","code","message","extras","name","subscribeUrl","topupUrl","nativeError","actionUrl","ErrorCode","SubscriptionRequired","CreditsRequired","AttestationRejected","ServiceUnavailable","Network","DebugModeReleaseBlocked","InvalidArgument","buildError","e","native","String","userInfo","wrap","p","err","decodeState","raw","error","undefined","AppAttest","start","waitForReady","retry","reset","invalidateBundle","getSecret","getAllSecrets","getState","addStateListener","listener","subscription","addListener","remove","setDebugMode","mode","stubs","useSecret","value","setValue","active","then","v","catch","unsubscribe","s","useAllSecrets","all","setAll","useAppAttestState","state","setState"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,SAAS,EAAEC,QAAQ,QAAQ,OAAO;AAC3C,SAASC,kBAAkB,EAAEC,aAAa,QAAQ,cAAc;AAChE,OAAOC,eAAe,MAAM,mBAAmB;;AAE/C;AACA,MAAMC,YAAY,GAAG,IAAIH,kBAAkB,CAACC,aAAa,CAACG,WAAkB,CAAC;;AAE7E;AACA;AACA;;AAeA;AACA;AACA;AACA;AACA,OAAO,MAAMC,cAAc,SAASC,KAAK,CAAC;EAExC;;EAEA;;EAIAC,WAAWA,CACTC,IAAY,EACZC,OAAe,EACfC,MAIC,EACD;IACA,KAAK,CAACD,OAAO,CAAC;IACd,IAAI,CAACE,IAAI,GAAG,gBAAgB;IAC5B,IAAI,CAACH,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACI,YAAY,GAAGF,MAAM,EAAEE,YAAY;IACxC,IAAI,CAACC,QAAQ,GAAGH,MAAM,EAAEG,QAAQ;IAChC,IAAI,CAACC,WAAW,GAAGJ,MAAM,EAAEI,WAAW;EACxC;;EAEA;AACF;AACA;AACA;AACA;EACE,IAAIC,SAASA,CAAA,EAAuB;IAClC,OAAO,IAAI,CAACH,YAAY,IAAI,IAAI,CAACC,QAAQ;EAC3C;AACF;;AAEA;AACA,OAAO,MAAMG,SAAS,GAAG;EACvBC,oBAAoB,EAAE,uBAAuB;EAC7CC,eAAe,EAAE,kBAAkB;EACnCC,mBAAmB,EAAE,sBAAsB;EAC3CC,kBAAkB,EAAE,qBAAqB;EACzCC,OAAO,EAAE,SAAS;EAClBC,uBAAuB,EAAE,4BAA4B;EACrDC,eAAe,EAAE;AACnB,CAAU;AAkBV,SAASC,UAAUA,CAACC,CAAgB,EAAEC,MAAe,EAAkB;EACrE,OAAO,IAAIrB,cAAc,CAACoB,CAAC,CAACjB,IAAI,IAAI,gBAAgB,EAAEiB,CAAC,CAAChB,OAAO,IAAIkB,MAAM,CAACD,MAAM,CAAC,EAAE;IACjFd,YAAY,EAAEa,CAAC,CAACG,QAAQ,EAAEhB,YAAY,IAAIa,CAAC,CAACb,YAAY;IACxDC,QAAQ,EAAEY,CAAC,CAACG,QAAQ,EAAEf,QAAQ,IAAIY,CAAC,CAACZ,QAAQ;IAC5CC,WAAW,EAAEY;EACf,CAAC,CAAC;AACJ;AAEA,eAAeG,IAAIA,CAAIC,CAAa,EAAc;EAChD,IAAI;IACF,OAAO,MAAMA,CAAC;EAChB,CAAC,CAAC,OAAOC,GAAG,EAAE;IACZ,MAAMP,UAAU,CAACO,GAAG,EAAmBA,GAAG,CAAC;EAC7C;AACF;AAOA,SAASC,WAAWA,CAACC,GAAmB,EAAkB;EACxD,MAAMC,KAAK,GAAGD,GAAG,CAACC,KAAK,GAAGV,UAAU,CAACS,GAAG,CAACC,KAAK,EAAED,GAAG,CAACC,KAAK,CAAC,GAAGC,SAAS;EACtE,OAAO;IAAExB,IAAI,EAAEsB,GAAG,CAACtB,IAA0B;IAAEuB;EAAM,CAAC;AACxD;AAEA,OAAO,MAAME,SAAS,GAAG;EACvB;AACF;AACA;AACA;AACA;EACEC,KAAKA,CAAA,EAAkB;IACrB,OAAOR,IAAI,CAAC3B,eAAe,CAACmC,KAAK,CAAC,CAAC,CAAC;EACtC,CAAC;EAED;AACF;EACEC,YAAYA,CAAA,EAAkB;IAC5B,OAAOT,IAAI,CAAC3B,eAAe,CAACoC,YAAY,CAAC,CAAC,CAAC;EAC7C,CAAC;EAED;EACAC,KAAKA,CAAA,EAAkB;IACrB,OAAOV,IAAI,CAAC3B,eAAe,CAACqC,KAAK,CAAC,CAAC,CAAC;EACtC,CAAC;EAED;EACAC,KAAKA,CAAA,EAAkB;IACrB,OAAOX,IAAI,CAAC3B,eAAe,CAACsC,KAAK,CAAC,CAAC,CAAC;EACtC,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACEC,gBAAgBA,CAAA,EAAkB;IAChC,OAAOZ,IAAI,CAAC3B,eAAe,CAACuC,gBAAgB,CAAC,CAAC,CAAC;EACjD,CAAC;EAED;EACAC,SAASA,CAAC/B,IAAY,EAA0B;IAC9C,OAAOkB,IAAI,CAAC3B,eAAe,CAACwC,SAAS,CAAC/B,IAAI,CAAC,CAAC;EAC9C,CAAC;EAED;EACAgC,aAAaA,CAAA,EAAoC;IAC/C,OAAOd,IAAI,CAAC3B,eAAe,CAACyC,aAAa,CAAC,CAAC,CAAC;EAC9C,CAAC;EAED;EACA,MAAMC,QAAQA,CAAA,EAA4B;IACxC,MAAMX,GAAG,GAAG,MAAMJ,IAAI,CAAC3B,eAAe,CAAC0C,QAAQ,CAAC,CAAC,CAAC;IAClD,OAAOZ,WAAW,CAACC,GAAqB,CAAC;EAC3C,CAAC;EAED;EACAY,gBAAgBA,CAACC,QAAyC,EAAc;IACtE,MAAMC,YAAY,GAAG5C,YAAY,CAAC6C,WAAW,CAAC,cAAc,EAAGf,GAAG,IAAK;MACrEa,QAAQ,CAACd,WAAW,CAACC,GAAqB,CAAC,CAAC;IAC9C,CAAC,CAAC;IACF,OAAO,MAAMc,YAAY,CAACE,MAAM,CAAC,CAAC;EACpC,CAAC;EAED;EACAC,YAAYA,CAACC,IAAsB,EAAEC,KAA8B,EAAiB;IAClF,OAAOvB,IAAI,CAAC3B,eAAe,CAACgD,YAAY,CAACC,IAAI,EAAEC,KAAK,IAAI,IAAI,CAAC,CAAC;EAChE;;EAEA;EACA;AACF,CAAC;;AAED;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,SAASA,CAAC1C,IAAY,EAAiB;EACrD,MAAM,CAAC2C,KAAK,EAAEC,QAAQ,CAAC,GAAGxD,QAAQ,CAAgB,IAAI,CAAC;EACvDD,SAAS,CAAC,MAAM;IACd,IAAI0D,MAAM,GAAG,IAAI;IACjBpB,SAAS,CAACM,SAAS,CAAC/B,IAAI,CAAC,CAAC8C,IAAI,CAAEC,CAAC,IAAK;MAAE,IAAIF,MAAM,EAAED,QAAQ,CAACG,CAAC,CAAC;IAAE,CAAC,CAAC,CAACC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACnF,MAAMC,WAAW,GAAGxB,SAAS,CAACS,gBAAgB,CAAC,MAAOgB,CAAC,IAAK;MAC1D,IAAIA,CAAC,CAAClD,IAAI,KAAK,OAAO,EAAE;QACtB,IAAI;UACF,MAAM+C,CAAC,GAAG,MAAMtB,SAAS,CAACM,SAAS,CAAC/B,IAAI,CAAC;UACzC,IAAI6C,MAAM,EAAED,QAAQ,CAACG,CAAC,CAAC;QACzB,CAAC,CAAC,MAAM,CAAE;MACZ;IACF,CAAC,CAAC;IACF,OAAO,MAAM;MACXF,MAAM,GAAG,KAAK;MACdI,WAAW,CAAC,CAAC;IACf,CAAC;EACH,CAAC,EAAE,CAACjD,IAAI,CAAC,CAAC;EACV,OAAO2C,KAAK;AACd;;AAEA;AACA;AACA;AACA,OAAO,SAASQ,aAAaA,CAAA,EAA2B;EACtD,MAAM,CAACC,GAAG,EAAEC,MAAM,CAAC,GAAGjE,QAAQ,CAAyB,CAAC,CAAC,CAAC;EAC1DD,SAAS,CAAC,MAAM;IACd,IAAI0D,MAAM,GAAG,IAAI;IACjBpB,SAAS,CAACO,aAAa,CAAC,CAAC,CAACc,IAAI,CAAEC,CAAC,IAAK;MAAE,IAAIF,MAAM,EAAEQ,MAAM,CAACN,CAAC,CAAC;IAAE,CAAC,CAAC,CAACC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACjF,MAAMC,WAAW,GAAGxB,SAAS,CAACS,gBAAgB,CAAC,MAAOgB,CAAC,IAAK;MAC1D,IAAIA,CAAC,CAAClD,IAAI,KAAK,OAAO,EAAE;QACtB,IAAI;UACF,MAAM+C,CAAC,GAAG,MAAMtB,SAAS,CAACO,aAAa,CAAC,CAAC;UACzC,IAAIa,MAAM,EAAEQ,MAAM,CAACN,CAAC,CAAC;QACvB,CAAC,CAAC,MAAM,CAAE;MACZ;IACF,CAAC,CAAC;IACF,OAAO,MAAM;MACXF,MAAM,GAAG,KAAK;MACdI,WAAW,CAAC,CAAC;IACf,CAAC;EACH,CAAC,EAAE,EAAE,CAAC;EACN,OAAOG,GAAG;AACZ;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASE,iBAAiBA,CAAA,EAAmB;EAClD,MAAM,CAACC,KAAK,EAAEC,QAAQ,CAAC,GAAGpE,QAAQ,CAAiB;IAAEY,IAAI,EAAE;EAAe,CAAC,CAAC;EAC5Eb,SAAS,CAAC,MAAM;IACd,IAAI0D,MAAM,GAAG,IAAI;IACjBpB,SAAS,CAACQ,QAAQ,CAAC,CAAC,CAACa,IAAI,CAAEI,CAAC,IAAK;MAAE,IAAIL,MAAM,EAAEW,QAAQ,CAACN,CAAC,CAAC;IAAE,CAAC,CAAC,CAACF,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,MAAMC,WAAW,GAAGxB,SAAS,CAACS,gBAAgB,CAAEgB,CAAC,IAAK;MACpD,IAAIL,MAAM,EAAEW,QAAQ,CAACN,CAAC,CAAC;IACzB,CAAC,CAAC;IACF,OAAO,MAAM;MACXL,MAAM,GAAG,KAAK;MACdI,WAAW,CAAC,CAAC;IACf,CAAC;EACH,CAAC,EAAE,EAAE,CAAC;EACN,OAAOM,KAAK;AACd;AAEA,eAAe9B,SAAS","ignoreList":[]}

package/lib/typescript/NativeAppAttest.d.ts

@@ -0,0 +1,54 @@
+/**
+ * TurboModule spec for the AppAttest iOS native module.
+ *
+ * Codegen reads this file. The shape is restricted to what TurboModule
+ * codegen can serialize (primitives, Object, arrays of primitives,
+ * Promises, null).
+ *
+ * Errors: rejection objects carry `{ code, message,
+ * subscribeUrl?, topupUrl? }`. The TS wrapper in `index.ts` translates
+ * these into `AppAttestError`.
+ */
+import type { TurboModule } from 'react-native';
+export interface Spec extends TurboModule {
+    /** Synchronous, idempotent setup. Zero-argument (bucket is
+     *  AAGUID-derived server-side). */
+    start(): Promise<void>;
+    /** Awaits the next terminal state. Resolves on `ready`; rejects on
+     *  subscriptionRequired / creditsRequired / unavailable. */
+    waitForReady(): Promise<void>;
+    /** Re-runs the background sync. */
+    retry(): Promise<void>;
+    /** Wipes stored credentials and secrets. */
+    reset(): Promise<void>;
+    /** Invalidate the cached secrets bundle and immediately sync. Keeps
+     *  attestation; forces a 200 (1 credit on production). */
+    invalidateBundle(): Promise<void>;
+    /** Synchronous-feeling secret lookup. Returns `null` if not yet
+     *  synced or absent. */
+    getSecret(name: string): Promise<string | null>;
+    /** Snapshot of every synced secret as `{ [name]: value }`. */
+    getAllSecrets(): Promise<{
+        [key: string]: string;
+    }>;
+    /** Current state as `{ name, error? }`. */
+    getState(): Promise<{
+        name: string;
+        error?: {
+            code: string;
+            message: string;
+            subscribeUrl?: string;
+            topupUrl?: string;
+        };
+    }>;
+    /** `null` / `'production'` for production; `'local'` for the DEBUG-only
+     *  stub mode. `'local'` requires `stubs`. */
+    setDebugMode(name: string | null, stubs: {
+        [key: string]: string;
+    } | null): Promise<void>;
+    addListener(eventName: string): void;
+    removeListeners(count: number): void;
+}
+declare const _default: Spec;
+export default _default;
+//# sourceMappingURL=NativeAppAttest.d.ts.map

package/lib/typescript/NativeAppAttest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NativeAppAttest.d.ts","sourceRoot":"","sources":["../../src/NativeAppAttest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,MAAM,WAAW,IAAK,SAAQ,WAAW;IAGvC;uCACmC;IACnC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;gEAC4D;IAC5D,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9B,mCAAmC;IACnC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB,4CAA4C;IAC5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;8DAC0D;IAC1D,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAIlC;4BACwB;IACxB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAEhD,8DAA8D;IAC9D,aAAa,IAAI,OAAO,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC,CAAC;IAEpD,2CAA2C;IAC3C,QAAQ,IAAI,OAAO,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE;YACN,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,MAAM,CAAC;YAChB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;SACnB,CAAC;KACH,CAAC,CAAC;IAIH;iDAC6C;IAC7C,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAM1F,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;;AAED,wBAAqE"}