@cap-kit/integrity 8.0.0-next.6

package/ios/Sources/IntegrityPlugin/ui/IntegrityBlockViewController.swift

@@ -0,0 +1,143 @@
+import UIKit
+import WebKit
+
+/**
+ Dedicated view controller used to present the integrity block page.
+
+ ROLE:
+ This view controller is a pure UI component responsible for rendering
+ a blocking screen when the host application decides to interrupt
+ normal execution due to integrity-related conditions.
+
+ Responsibilities:
+ - Display a developer-provided HTML block page
+ - Support both remote URLs and bundled local assets
+ - Preserve query parameters for diagnostic or UX purposes
+ - Optionally allow user dismissal when explicitly enabled
+
+ This controller:
+ - is presented explicitly by the Integrity plugin
+ - never performs integrity checks
+ - never decides when it should be shown
+
+ Security note:
+ - By default, the block page is NOT dismissible
+ - Dismissal must be explicitly enabled by the host application
+ */
+final class IntegrityBlockViewController: UIViewController {
+
+    // MARK: - Properties
+
+    /// URL or local asset path provided by the plugin.
+    /// Can include optional query parameters.
+    private let url: String
+
+    /// Whether the block page can be dismissed by the user.
+    /// When false, interactive dismissal is explicitly disabled.
+    private let dismissible: Bool
+
+    // MARK: - Initialization
+
+    /**
+     Designated initializer.
+
+     - Parameters:
+     - url: Remote URL or local asset path to load.
+     - dismissible: Whether the user is allowed to dismiss the block page.
+     */
+    init(url: String, dismissible: Bool) {
+        self.url = url
+        self.dismissible = dismissible
+        super.init(nibName: nil, bundle: nil)
+
+        // Prevent swipe-to-dismiss gestures unless explicitly allowed.
+        // This ensures the block page cannot be bypassed unintentionally.
+        self.isModalInPresentation = !dismissible
+    }
+
+    required init?(coder: NSCoder) {
+        fatalError("init(coder:) has not been implemented")
+    }
+
+    // MARK: - Lifecycle
+
+    override func viewDidLoad() {
+        super.viewDidLoad()
+
+        view.backgroundColor = .systemBackground
+
+        // Navigation bar (dismissible mode only) ------------------------------
+
+        // When dismissal is enabled, expose an explicit Close button.
+        // This is the ONLY supported way to dismiss a modal view controller on iOS.
+        if dismissible {
+            let closeButton = UIBarButtonItem(
+                title: "Close",
+                style: .done,
+                target: self,
+                action: #selector(closeTapped)
+            )
+            navigationItem.rightBarButtonItem = closeButton
+        }
+
+        // WebView setup -------------------------------------------------------
+
+        // Create an isolated WKWebView instance to render the block page.
+        // No custom message handlers or JS bridges are attached.
+        let configuration = WKWebViewConfiguration()
+        let webView = WKWebView(frame: .zero, configuration: configuration)
+
+        webView.translatesAutoresizingMaskIntoConstraints = false
+        view.addSubview(webView)
+
+        NSLayoutConstraint.activate([
+            webView.topAnchor.constraint(equalTo: view.topAnchor),
+            webView.bottomAnchor.constraint(equalTo: view.bottomAnchor),
+            webView.leadingAnchor.constraint(equalTo: view.leadingAnchor),
+            webView.trailingAnchor.constraint(equalTo: view.trailingAnchor)
+        ])
+
+        // URL handling --------------------------------------------------------
+
+        // Remote URLs (http / https) are loaded directly via URLRequest.
+        if url.starts(with: "http"), let remoteURL = URL(string: url) {
+            webView.load(URLRequest(url: remoteURL))
+            return
+        }
+
+        // Local asset loading with query support ------------------------------
+
+        // Example:
+        //   url = "public/integrity-block.html?reason=integrity_failed"
+
+        let parts = url.split(separator: "?", maxSplits: 1)
+        let assetPath = String(parts[0])
+        let query = parts.count > 1 ? "?\(parts[1])" : ""
+
+        guard
+            let fileURL = Bundle.main.url(forResource: assetPath, withExtension: nil),
+            let html = try? String(contentsOf: fileURL, encoding: .utf8)
+        else {
+            // Fail silently if the asset cannot be loaded.
+            // The plugin layer is responsible for validating inputs.
+            return
+        }
+
+        // Create a synthetic base URL to preserve:
+        // - window.location.search (query parameters)
+        // - relative paths inside the HTML document
+        let baseURL = fileURL.deletingLastPathComponent()
+        let fakeURL = URL(string: baseURL.absoluteString + "/" + assetPath + query)
+
+        webView.loadHTMLString(html, baseURL: fakeURL)
+    }
+
+    // MARK: - Actions
+
+    /**
+     Dismisses the block page when dismissal is explicitly allowed.
+     */
+    @objc private func closeTapped() {
+        dismiss(animated: true)
+    }
+}

package/ios/Tests/IntegrityPluginTests/IntegrityPluginTests.swift

@@ -0,0 +1,10 @@
+import XCTest
+@testable import Integrity
+
+/**
+ Basic functional tests for the Integrity plugin native implementation.
+
+ These tests validate the core behavior of the implementation
+ independently from the Capacitor bridge.
+ */
+class IntegrityPluginTests: XCTestCase {}

package/package.json

@@ -0,0 +1,106 @@
+{
+  "name": "@cap-kit/integrity",
+  "version": "8.0.0-next.6",
+  "description": "Runtime integrity and environment signal detection for Capacitor v8 applications.",
+  "type": "module",
+  "private": false,
+  "engines": {
+    "node": ">=24.0.0",
+    "pnpm": ">=10.0.0"
+  },
+  "main": "dist/plugin.cjs.js",
+  "module": "dist/esm/index.js",
+  "types": "dist/esm/index.d.ts",
+  "unpkg": "dist/plugin.js",
+  "files": [
+    "android/src/main/",
+    "android/build.gradle",
+    "dist/",
+    "ios/Sources",
+    "ios/Tests",
+    "Package.swift",
+    "CapKitIntegrity.podspec",
+    "LICENSE"
+  ],
+  "author": "CapKit Team",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cap-kit/capacitor-plugins.git",
+    "directory": "packages/integrity"
+  },
+  "bugs": {
+    "url": "https://github.com/cap-kit/capacitor-plugins/issues"
+  },
+  "homepage": "https://github.com/cap-kit/capacitor-plugins/tree/main/packages/integrity#readme",
+  "keywords": [
+    "capacitor",
+    "capacitor-plugin",
+    "cap-kit",
+    "mobile",
+    "native",
+    "ios",
+    "android",
+    "integrity",
+    "environment",
+    "detection",
+    "root",
+    "jailbreak",
+    "emulator",
+    "security-signals"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@capacitor/cli": "^8.0.2",
+    "@capacitor/android": "^8.0.2",
+    "@capacitor/core": "^8.0.2",
+    "@capacitor/docgen": "^0.3.1",
+    "@capacitor/ios": "^8.0.2",
+    "@eslint/eslintrc": "^3.3.3",
+    "@eslint/js": "^9.39.2",
+    "eslint": "^9.39.2",
+    "eslint-plugin-import": "^2.32.0",
+    "globals": "^17.3.0",
+    "prettier": "^3.8.1",
+    "prettier-plugin-java": "^2.8.1",
+    "rimraf": "^6.1.2",
+    "rollup": "^4.57.1",
+    "swiftlint": "^2.0.0",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.54.0"
+  },
+  "peerDependencies": {
+    "@capacitor/core": ">=8.0.2"
+  },
+  "capacitor": {
+    "ios": {
+      "src": "ios"
+    },
+    "android": {
+      "src": "android"
+    }
+  },
+  "scripts": {
+    "verify": "pnpm run verify:ios && pnpm run verify:android && pnpm run verify:web",
+    "verify:ios": "node ./scripts/sync-version.js && xcodebuild -scheme CapKitIntegrity -destination generic/platform=iOS",
+    "verify:android": "cd android && ./gradlew clean build && cd ..",
+    "verify:web": "pnpm run build",
+    "lint:android": "cd android && ./gradlew ktlintCheck",
+    "fmt:android": "cd android && ./gradlew ktlintFormat",
+    "lint": "pnpm run eslint . && pnpm run swiftlint lint --strict || true && pnpm run lint:android || true",
+    "format:check": "prettier --check \"**/*.{css,html,ts,js,java}\" --plugin=prettier-plugin-java",
+    "format": "eslint --fix . && prettier --write \"**/*.{css,html,ts,js,java}\" --plugin=prettier-plugin-java && pnpm run swiftlint --fix --format && pnpm run fmt:android",
+    "eslint": "eslint",
+    "prettier": "prettier \"**/*.{css,html,ts,js,java}\" --plugin=prettier-plugin-java",
+    "swiftlint": "node-swiftlint lint ios/Sources",
+    "docgen": "docgen --api IntegrityPlugin --output-readme README.md --output-json dist/docs.json",
+    "build": "node ./scripts/sync-version.js && pnpm run clean && pnpm run docgen && tsc && rollup -c rollup.config.mjs",
+    "clean": "rimraf ./dist",
+    "watch": "tsc --watch",
+    "test": "pnpm run verify",
+    "removePacked": "rimraf -g cap-kit-integrity-*.tgz",
+    "publish:locally": "pnpm run removePacked && pnpm run build && pnpm pack"
+  }
+}