@craft-native/ios 0.0.173 → 0.0.174

package/README.md

@@ -120,7 +120,7 @@ ordinary native children while preserving the shared flex layout contract.
 Keyboard frame changes update the native controller's additional safe area, so
 focused inputs and responsive `onLayout` measurements move with the keyboard.
 
-The opt-in `native` renderer hosts compiled `.stx` screens in JavaScriptCore and renders their `View`, `SafeAreaView`, `Text`, `Button`, `Link`, `Checkbox`, `TextInput`, `Picker`, `DatePicker`, `Switch`, `Slider`, `ActivityIndicator`, `Icon`, `Image`, `Video`, `ScrollView`, `SectionList`, and recycling `FlatList` nodes as UIKit controls. `Icon` uses SF Symbols with the shared symbol/name contract and accessibility metadata. `SectionList` uses the same native scroll host for ordinary `.stx` slot children; grouped section data should use `FlatList` until the section-data protocol is available. `FlatList` uses `UICollectionView` with stable keyed rows, incremental diffs, grids, horizontal and inverted layouts, list chrome, and end-reached pagination. Native views support `onLayout` callbacks with point-based frame measurements that refresh after safe-area or orientation changes. Flex items support `flex`, `flexGrow`, `flexShrink`, and numeric `flexBasis` for main-axis space distribution. Native screens also expose the versioned capability bridge: JSON storage and SQLite survive relaunch, lifecycle and deep-link events are scoped to the top route, and local notifications use `UNUserNotificationCenter`. Enable each capability in `craft.config.json`; disabled calls preserve Craft's `CAPABILITY_DISABLED` rejection code and every request has deterministic timeout/cancellation behavior. The default remains `web`; existing iOS apps are unchanged. `Checkbox` supports controlled `checked`/`value`, indeterminate state, and boolean `onValueChange`; `Picker` renders `<select>`/`<option>` values with `onValueChange` or `onChange`; `DatePicker` emits local date/time values plus ISO and millisecond timestamps; `Switch` supports state-aware `trackColor`, `thumbColor`, and iOS `ios_backgroundColor`; `Slider` supports track/thumb tint props and `step` snapping; `Image` reports load lifecycle events and structured failures; `Video` uses an `AVPlayerViewController` attached to the native screen for URI playback, native controls, and route-safe teardown. The portable component, capability, list, style, image-source, event, accessibility, and reconciliation behavior is specified in the [Native STX guide](../../docs/guides/native-stx.md).
+The opt-in `native` renderer hosts compiled `.stx` screens in JavaScriptCore and renders their `View`, `SafeAreaView`, `Text`, `Button`, `Link`, `Checkbox`, `TextInput`, `Picker`, `DatePicker`, `Switch`, `Slider`, `ActivityIndicator`, `Icon`, `Image`, `Video`, `Map`, `ScrollView`, `SectionList`, and recycling `FlatList` nodes as UIKit controls. `Map` uses MapKit for trail polylines and marker taps; its overlays carry flat latitude/longitude `geometry` arrays and can fit the visible region to their bounds. `Icon` uses SF Symbols with the shared symbol/name contract and accessibility metadata. `SectionList` uses the same native scroll host for ordinary `.stx` slot children; grouped section data should use `FlatList` until the section-data protocol is available. `FlatList` uses `UICollectionView` with stable keyed rows, incremental diffs, grids, horizontal and inverted layouts, list chrome, and end-reached pagination. Native views support `onLayout` callbacks with point-based frame measurements that refresh after safe-area or orientation changes. Flex items support `flex`, `flexGrow`, `flexShrink`, and numeric `flexBasis` for main-axis space distribution. Native screens also expose the versioned capability bridge: JSON storage and SQLite survive relaunch, lifecycle and deep-link events are scoped to the top route, and local notifications use `UNUserNotificationCenter`. Enable each capability in `craft.config.json`; disabled calls preserve Craft's `CAPABILITY_DISABLED` rejection code and every request has deterministic timeout/cancellation behavior. The default remains `web`; existing iOS apps are unchanged. `Checkbox` supports controlled `checked`/`value`, indeterminate state, and boolean `onValueChange`; `Picker` renders `<select>`/`<option>` values with `onValueChange` or `onChange`; `DatePicker` emits local date/time values plus ISO and millisecond timestamps; `Switch` supports state-aware `trackColor`, `thumbColor`, and iOS `ios_backgroundColor`; `Slider` supports track/thumb tint props and `step` snapping; `Image` reports load lifecycle events and structured failures; `Video` uses an `AVPlayerViewController` attached to the native screen for URI playback, native controls, and route-safe teardown. The portable component, capability, list, style, image-source, event, accessibility, and reconciliation behavior is specified in the [Native STX guide](../../docs/guides/native-stx.md).
 
 ```bash
 craft ios init NativeDemo --renderer native --output ./ios-native
@@ -131,6 +131,17 @@ craft ios run --output ./ios-native --simulator
 
 `stx native compile` is part of the [stx](https://github.com/stacksjs/stx) CLI (`@stacksjs/stx`); build tools can call `compileNativeBundle` from `@stacksjs/stx/native` instead. A runnable screen is in [`fixtures/native-screen/Screen.stx`](./fixtures/native-screen/Screen.stx). In native mode, the app never instantiates `WKWebView`; a missing `dist/native-screen.js` fails the build rather than silently opening the web placeholder.
 
+Keep application repositories free of handwritten Swift with the built-in audit:
+
+```bash
+craft-ios audit-sources --app-root .
+```
+
+The command ignores Craft's generated `storage/framework/mobile` tree, build
+output, and dependencies. It exits non-zero and lists the relative paths when
+an app owns a `.swift` file; use the exported `assertNoApplicationSwiftSources`
+function when the check belongs inside an existing TypeScript test.
+
 Native screen updates use the versioned mutation protocol when the bundle
 supports it and fall back to whole-document rendering for older bundles.
 Updates reconcile the UIKit tree by sibling-scoped `key` (or `testID` for
@@ -163,6 +174,23 @@ The optional Liquid Glass tab-bar styling is compiler-gated for Xcode 26/Swift 6
 
 The iOS host overlays `craft.config.json` on its defaults. Missing or `null` capability flags stay disabled; explicitly set a flag to `true` to enable it. Both the Swift host and Zig bridge reject malformed values and fall back to all capabilities disabled.
 
+Native passkeys require both `enablePasskeys: true` and a matching
+`webcredentials:<host>` entry in `associatedDomains`:
+
+```json
+{
+  "renderer": "native",
+  "enablePasskeys": true,
+  "associatedDomains": ["webcredentials:login.example.com"]
+}
+```
+
+The native STX screen calls `craft.passkeys.isAvailable()`, `create(options)`,
+or `get(options)`. The host validates the relying-party id against those
+associated domains before showing Apple's `ASAuthorization` sheet; a passkey
+request for another host is rejected. The server remains responsible for
+generating the challenge and verifying the returned WebAuthn response.
+
 Edit `craft.config.json` in your iOS project:
 
 ```json
@@ -189,6 +217,8 @@ Edit `craft.config.json` in your iOS project:
   "enableFilePicker": true,
   "enableFileDownload": true,
   "enableSocialAuth": true,
+  "enablePasskeys": true,
+  "associatedDomains": ["webcredentials:login.example.com"],
   "enableAudioRecording": true,
   "enableVideoRecording": true,
   "enableMotionSensors": true,

package/dist/cli.js

@@ -3,23 +3,72 @@
 
 // src/cli.ts
 import { parseArgs } from "util";
+import { resolve as resolve2 } from "path";
 
 // src/index.ts
-import { cpSync, existsSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "fs";
-import { dirname as dirname2, join as join2, resolve } from "path";
+import { cpSync, existsSync, mkdirSync, readFileSync, readdirSync as readdirSync2, rmSync, statSync, writeFileSync } from "fs";
+import { dirname as dirname2, join as join3, resolve } from "path";
 var {$ } = globalThis.Bun;
 
+// src/source-audit.ts
+import { readdirSync } from "fs";
+import { join, relative, sep } from "path";
+var defaultIgnoredPaths = [
+  ".git",
+  "node_modules",
+  "dist",
+  "build",
+  "storage/framework/mobile"
+];
+function normalisePath(path) {
+  return path.split(sep).join("/");
+}
+function isIgnored(path, ignoredPaths) {
+  const normalised = normalisePath(path);
+  return ignoredPaths.some((ignored) => {
+    const prefix = normalisePath(ignored).replace(/\/+$/, "");
+    return normalised === prefix || normalised.startsWith(`${prefix}/`);
+  });
+}
+function visit(root, current, ignoredPaths, found) {
+  for (const entry of readdirSync(current, { withFileTypes: true })) {
+    const absolute = join(current, entry.name);
+    const relativePath = relative(root, absolute);
+    if (isIgnored(relativePath, ignoredPaths))
+      continue;
+    if (entry.isDirectory()) {
+      visit(root, absolute, ignoredPaths, found);
+      continue;
+    }
+    if (entry.isFile() && entry.name.endsWith(".swift"))
+      found.push(normalisePath(relativePath));
+  }
+}
+function findApplicationSwiftSources(root, options = {}) {
+  const ignoredPaths = [...defaultIgnoredPaths, ...options.ignoredPaths ?? []];
+  const found = [];
+  visit(root, root, ignoredPaths, found);
+  return found.sort();
+}
+function assertNoApplicationSwiftSources(root, options = {}) {
+  const sources = findApplicationSwiftSources(root, options);
+  if (sources.length > 0) {
+    throw new Error(`Application-owned Swift sources found:
+${sources.map((path) => `- ${path}`).join(`
+`)}`);
+  }
+}
 // src/testing.ts
-import { dirname, join } from "path";
-var templates = join(dirname(import.meta.dir), "templates/testing");
+import { dirname, join as join2 } from "path";
+var templates = join2(dirname(import.meta.dir), "templates/testing");
 
 // src/index.ts
-var TEMPLATES_DIR = join2(dirname2(import.meta.dir), "templates");
+var TEMPLATES_DIR = join3(dirname2(import.meta.dir), "templates");
 function resolveCraftVersion(startDir = import.meta.dir) {
   let directory = resolve(startDir);
   while (true) {
     try {
-      const packageJSON = JSON.parse(readFileSync(join2(directory, "package.json"), "utf8"));
+      const packageJSON = JSON.parse(readFileSync(join3(directory, "package.json"), "utf8"));
       if (packageJSON.name === "@craft-native/ios" && typeof packageJSON.version === "string" && packageJSON.version.length > 0)
         return packageJSON.version;
     } catch {}
@@ -171,7 +220,7 @@ function hybridConfigProblems(config) {
 function installNativeBundle(source, output) {
   if (!existsSync(source))
     throw new Error(`Native bundle not found: ${source}`);
-  const destination = join2(output, "dist", "native-screen.js");
+  const destination = join3(output, "dist", "native-screen.js");
   mkdirSync(dirname2(destination), { recursive: true });
   if (resolve(source) !== resolve(destination))
     cpSync(source, destination);
@@ -203,6 +252,7 @@ var DEFAULT_CONFIG = {
   enableFilePicker: false,
   enableFileDownload: false,
   enableSocialAuth: false,
+  enablePasskeys: false,
   enableAudioRecording: false,
   enableVideoRecording: false,
   enableMotionSensors: false,
@@ -547,20 +597,20 @@ function writeOpaqueIcon(source, target) {
   }
 }
 function renderAssetCatalog(output, config) {
-  const catalog = join2(output, "Assets.xcassets");
-  const appIcon = join2(catalog, "AppIcon.appiconset");
-  const launchBackground = join2(catalog, "LaunchBackground.colorset");
+  const catalog = join3(output, "Assets.xcassets");
+  const appIcon = join3(catalog, "AppIcon.appiconset");
+  const launchBackground = join3(catalog, "LaunchBackground.colorset");
   mkdirSync(appIcon, { recursive: true });
   mkdirSync(launchBackground, { recursive: true });
-  writeFileSync(join2(catalog, "Contents.json"), `${JSON.stringify({ info: { author: "xcode", version: 1 } }, null, 2)}
+  writeFileSync(join3(catalog, "Contents.json"), `${JSON.stringify({ info: { author: "xcode", version: 1 } }, null, 2)}
 `);
   const iconFilename = config.appIconPath ? "AppIcon-1024.png" : undefined;
   if (config.appIconPath) {
     if (!existsSync(config.appIconPath))
       throw new Error(`App icon not found: ${config.appIconPath}`);
-    writeOpaqueIcon(config.appIconPath, join2(appIcon, iconFilename));
+    writeOpaqueIcon(config.appIconPath, join3(appIcon, iconFilename));
   }
-  writeFileSync(join2(appIcon, "Contents.json"), `${JSON.stringify({
+  writeFileSync(join3(appIcon, "Contents.json"), `${JSON.stringify({
     images: iconFilename ? [{
       filename: iconFilename,
       idiom: "universal",
@@ -587,7 +637,7 @@ function renderAssetCatalog(output, config) {
       idiom: "universal"
     });
   }
-  writeFileSync(join2(launchBackground, "Contents.json"), `${JSON.stringify({
+  writeFileSync(join3(launchBackground, "Contents.json"), `${JSON.stringify({
     colors,
     info: { author: "xcode", version: 1 }
   }, null, 2)}
@@ -596,7 +646,7 @@ function renderAssetCatalog(output, config) {
 }
 var LAUNCH_LOGO = "LaunchLogo";
 function renderLaunchLogo(catalog, config) {
-  const imageset = join2(catalog, `${LAUNCH_LOGO}.imageset`);
+  const imageset = join3(catalog, `${LAUNCH_LOGO}.imageset`);
   rmSync(imageset, { recursive: true, force: true });
   if (!config.splashImagePath)
     return;
@@ -612,14 +662,14 @@ function renderLaunchLogo(catalog, config) {
     if (extension === "svg" || extension === "pdf")
       vector = true;
     const filename = `${LAUNCH_LOGO}${dark ? "-dark" : ""}.${extension}`;
-    cpSync(source, join2(imageset, filename));
+    cpSync(source, join3(imageset, filename));
     images.push({
       ...dark ? { appearances: [{ appearance: "luminosity", value: "dark" }] } : {},
       filename,
       idiom: "universal"
     });
   }
-  writeFileSync(join2(imageset, "Contents.json"), `${JSON.stringify({
+  writeFileSync(join3(imageset, "Contents.json"), `${JSON.stringify({
     images,
     info: { author: "xcode", version: 1 },
     ...vector ? { properties: { "preserves-vector-representation": true } } : {}
@@ -733,15 +783,15 @@ function syncWebAssets(source, output) {
   const sourcePath = resolve(source);
   if (!existsSync(sourcePath))
     throw new Error(`Web asset path not found: ${source}`);
-  const distDir = join2(output, "dist");
+  const distDir = join3(output, "dist");
   rmSync(distDir, { recursive: true, force: true });
   mkdirSync(distDir, { recursive: true });
   if (statSync(sourcePath).isDirectory()) {
     cpSync(sourcePath, distDir, { recursive: true });
   } else {
-    cpSync(sourcePath, join2(distDir, "index.html"));
+    cpSync(sourcePath, join3(distDir, "index.html"));
   }
-  if (!existsSync(join2(distDir, "index.html"))) {
+  if (!existsSync(join3(distDir, "index.html"))) {
     throw new Error(`Web asset directory must contain index.html: ${source}`);
   }
 }
@@ -763,32 +813,32 @@ var RUNTIME_ARCHIVES = {
 };
 async function installRuntime(output, runtimeDir) {
   const resolved = Object.entries(RUNTIME_ARCHIVES).map(([sdk, archives]) => {
-    const present = archives.filter((a) => existsSync(join2(runtimeDir, a)));
+    const present = archives.filter((a) => existsSync(join3(runtimeDir, a)));
     if (present.length === 0) {
       throw new Error(`${runtimeDir} has none of ${archives.join(", ")}. ` + `Run \`zig build build-ios-all\` in packages/zig and point at its zig-out/lib.`);
     }
     return { sdk, archives, present };
   });
-  const dest = join2(output, "Runtime");
+  const dest = join3(output, "Runtime");
   rmSync(dest, { recursive: true, force: true });
   for (const { sdk, archives, present } of resolved) {
-    const sdkDir = join2(dest, sdk);
+    const sdkDir = join3(dest, sdk);
     mkdirSync(sdkDir, { recursive: true });
-    const target = join2(sdkDir, "libcraft-ios.a");
+    const target = join3(sdkDir, "libcraft-ios.a");
     if (present.length === 1) {
       const missing = archives.filter((a) => !present.includes(a));
       if (missing.length > 0) {
         console.warn(`   \u26A0 ${sdk}: only ${present[0]} was found; ${missing.join(", ")} is missing. ` + `The generated project will not link on the other architecture.`);
       }
-      cpSync(join2(runtimeDir, present[0]), target);
+      cpSync(join3(runtimeDir, present[0]), target);
     } else {
-      await $`lipo -create ${present.map((a) => join2(runtimeDir, a))} -output ${target}`.quiet();
+      await $`lipo -create ${present.map((a) => join3(runtimeDir, a))} -output ${target}`.quiet();
     }
   }
   return true;
 }
 async function refreshRuntime(output, override) {
-  if (!existsSync(join2(output, "Runtime")))
+  if (!existsSync(join3(output, "Runtime")))
     return;
   const dir = resolveRuntimeDir(override);
   if (!dir) {
@@ -809,34 +859,34 @@ function writeShell(output, config) {
   if (!config.appName || !/^[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)+$/.test(config.bundleId))
     throw new Error("The iOS shell needs an appName and a valid bundleId in craft.config.json.");
   const name = productName(config.appName);
-  mkdirSync(join2(output, "Sources"), { recursive: true });
-  mkdirSync(join2(output, "Shared"), { recursive: true });
-  const swiftTemplate = readFileSync(join2(TEMPLATES_DIR, "CraftApp.swift"), "utf-8");
+  mkdirSync(join3(output, "Sources"), { recursive: true });
+  mkdirSync(join3(output, "Shared"), { recursive: true });
+  const swiftTemplate = readFileSync(join3(TEMPLATES_DIR, "CraftApp.swift"), "utf-8");
   const swiftSource = swiftTemplate.replace(/CraftApp/g, `${name}App`).replace(/\{\{BUNDLE_ID\}\}/g, config.bundleId).replace(/\{\{CRAFT_VERSION\}\}/g, CRAFT_VERSION);
-  writeFileSync(join2(output, "Sources", `${name}App.swift`), swiftSource);
-  cpSync(join2(TEMPLATES_DIR, "CraftNativeScreen.swift"), join2(output, "Sources", "CraftNativeScreen.swift"));
-  cpSync(join2(TEMPLATES_DIR, "CraftNativeFlatList.swift"), join2(output, "Sources", "CraftNativeFlatList.swift"));
-  cpSync(join2(TEMPLATES_DIR, "CraftNativeActions.swift"), join2(output, "Sources", "CraftNativeActions.swift"));
-  cpSync(join2(TEMPLATES_DIR, "CraftHealth.swift"), join2(output, "Sources", "CraftHealth.swift"));
-  cpSync(join2(TEMPLATES_DIR, "CraftMusic.swift"), join2(output, "Sources", "CraftMusic.swift"));
-  cpSync(join2(TEMPLATES_DIR, "CraftHeartRate.swift"), join2(output, "Sources", "CraftHeartRate.swift"));
-  cpSync(join2(TEMPLATES_DIR, "CraftScheduledWorkouts.swift"), join2(output, "Sources", "CraftScheduledWorkouts.swift"));
-  cpSync(join2(TEMPLATES_DIR, "CraftNativeMutation.swift"), join2(output, "Sources", "CraftNativeMutation.swift"));
-  cpSync(join2(TEMPLATES_DIR, "CraftNativeUI.swift"), join2(output, "Sources", "CraftNativeUI.swift"));
-  cpSync(join2(TEMPLATES_DIR, "CraftNativeServices.swift"), join2(output, "Sources", "CraftNativeServices.swift"));
-  cpSync(join2(TEMPLATES_DIR, "CraftNativeFiles.swift"), join2(output, "Sources", "CraftNativeFiles.swift"));
-  cpSync(join2(TEMPLATES_DIR, "CraftWebAudio.swift"), join2(output, "Sources", "CraftWebAudio.swift"));
-  cpSync(join2(TEMPLATES_DIR, "CraftHybrid.swift"), join2(output, "Sources", "CraftHybrid.swift"));
-  cpSync(join2(TEMPLATES_DIR, "CraftActivityAttributes.swift"), join2(output, "Shared", "CraftActivityAttributes.swift"));
+  writeFileSync(join3(output, "Sources", `${name}App.swift`), swiftSource);
+  cpSync(join3(TEMPLATES_DIR, "CraftNativeScreen.swift"), join3(output, "Sources", "CraftNativeScreen.swift"));
+  cpSync(join3(TEMPLATES_DIR, "CraftNativeFlatList.swift"), join3(output, "Sources", "CraftNativeFlatList.swift"));
+  cpSync(join3(TEMPLATES_DIR, "CraftNativeActions.swift"), join3(output, "Sources", "CraftNativeActions.swift"));
+  cpSync(join3(TEMPLATES_DIR, "CraftHealth.swift"), join3(output, "Sources", "CraftHealth.swift"));
+  cpSync(join3(TEMPLATES_DIR, "CraftMusic.swift"), join3(output, "Sources", "CraftMusic.swift"));
+  cpSync(join3(TEMPLATES_DIR, "CraftHeartRate.swift"), join3(output, "Sources", "CraftHeartRate.swift"));
+  cpSync(join3(TEMPLATES_DIR, "CraftScheduledWorkouts.swift"), join3(output, "Sources", "CraftScheduledWorkouts.swift"));
+  cpSync(join3(TEMPLATES_DIR, "CraftNativeMutation.swift"), join3(output, "Sources", "CraftNativeMutation.swift"));
+  cpSync(join3(TEMPLATES_DIR, "CraftNativeUI.swift"), join3(output, "Sources", "CraftNativeUI.swift"));
+  cpSync(join3(TEMPLATES_DIR, "CraftNativeServices.swift"), join3(output, "Sources", "CraftNativeServices.swift"));
+  cpSync(join3(TEMPLATES_DIR, "CraftNativeFiles.swift"), join3(output, "Sources", "CraftNativeFiles.swift"));
+  cpSync(join3(TEMPLATES_DIR, "CraftWebAudio.swift"), join3(output, "Sources", "CraftWebAudio.swift"));
+  cpSync(join3(TEMPLATES_DIR, "CraftHybrid.swift"), join3(output, "Sources", "CraftHybrid.swift"));
+  cpSync(join3(TEMPLATES_DIR, "CraftActivityAttributes.swift"), join3(output, "Shared", "CraftActivityAttributes.swift"));
   for (const [enabled, folder, template, filename] of [
     [config.enableLiveActivities, "WidgetExtension", "CraftLiveActivityWidget.swift.template", `${name}LiveActivity.swift`],
     [config.enableWatchApp, "WatchExtension", "CraftWatchApp.swift.template", `${name}WatchApp.swift`]
   ]) {
     if (!enabled)
       continue;
-    mkdirSync(join2(output, folder), { recursive: true });
-    const source = readFileSync(join2(TEMPLATES_DIR, template), "utf8").replace(/\{\{APP_NAME\}\}/g, name);
-    writeFileSync(join2(output, folder, filename), source);
+    mkdirSync(join3(output, folder), { recursive: true });
+    const source = readFileSync(join3(TEMPLATES_DIR, template), "utf8").replace(/\{\{APP_NAME\}\}/g, name);
+    writeFileSync(join3(output, folder, filename), source);
   }
 }
 async function init(options) {
@@ -846,9 +896,9 @@ async function init(options) {
 \u26A1 Initializing Craft iOS project: ${displayName}`);
   console.log(`   Output: ${output}
 `);
-  const dirs = [output, join2(output, "Sources"), join2(output, "Shared"), join2(output, "dist")];
+  const dirs = [output, join3(output, "Sources"), join3(output, "Shared"), join3(output, "dist")];
   if (options.config?.enableWatchApp)
-    dirs.push(join2(output, "WatchApp"), join2(output, "WatchExtension"));
+    dirs.push(join3(output, "WatchApp"), join3(output, "WatchExtension"));
   for (const dir of dirs) {
     if (!existsSync(dir)) {
       mkdirSync(dir, { recursive: true });
@@ -875,15 +925,15 @@ async function init(options) {
 `));
   if (Object.keys(config.shareStorage ?? {}).length)
     config.enableSecureStorage = true;
-  writeFileSync(join2(output, "craft.config.json"), JSON.stringify(config, null, 2));
+  writeFileSync(join3(output, "craft.config.json"), JSON.stringify(config, null, 2));
   writeShell(output, config);
-  const infoPlistTemplate = readFileSync(join2(TEMPLATES_DIR, "Info.plist.template"), "utf-8");
+  const infoPlistTemplate = readFileSync(join3(TEMPLATES_DIR, "Info.plist.template"), "utf-8");
   const infoPlist = infoPlistTemplate.replace(/\{\{APP_NAME\}\}/g, xmlEscape(displayName)).replace(/\{\{BUNDLE_ID\}\}/g, finalBundleId).replace(/\{\{VERSION\}\}/g, config.version || "1.0.0").replace(/\{\{BUILD_NUMBER\}\}/g, config.buildNumber || "1").replace(/\{\{UI_STYLE\}\}/g, renderAppearance(config).interfaceStyle).replace(/\{\{STATUS_BAR_STYLE\}\}/g, renderAppearance(config).statusBarStyle).replace(/\{\{ORIENTATIONS\}\}/g, renderOrientations(config)).replace(/\{\{USAGE_DESCRIPTIONS\}\}/g, renderUsageDescriptions(config)).replace(/\{\{URL_TYPES\}\}/g, renderUrlTypes(config)).replace(/\{\{APP_BOUND_DOMAINS\}\}/g, renderAppBoundDomains(config)).replace(/\{\{BACKGROUND_MODES\}\}/g, renderBackgroundModes(config)).replace(/\{\{BACKGROUND_TASK_IDENTIFIERS\}\}/g, renderBackgroundTaskIdentifiers(config)).replace(/\{\{LAUNCH_SCREEN\}\}/g, renderLaunchScreen(config)).replace(/\{\{NON_EXEMPT_ENCRYPTION\}\}/g, config.usesNonExemptEncryption ? "true" : "false").replace(/\{\{LIVE_ACTIVITY_SUPPORT\}\}/g, config.enableLiveActivities ? `    <key>NSSupportsLiveActivities</key>
     <true/>
     <key>NSSupportsLiveActivitiesFrequentUpdates</key>
     <true/>` : "");
-  writeFileSync(join2(output, "Info.plist"), infoPlist);
-  const projectYmlTemplate = readFileSync(join2(TEMPLATES_DIR, "project.yml.template"), "utf-8");
+  writeFileSync(join3(output, "Info.plist"), infoPlist);
+  const projectYmlTemplate = readFileSync(join3(TEMPLATES_DIR, "project.yml.template"), "utf-8");
   const nativeDependencies = [];
   if (config.enableLiveActivities)
     nativeDependencies.push(`      - target: ${name}LiveActivity`);
@@ -940,30 +990,30 @@ async function init(options) {
   if (hasRuntime) {
     console.log("   Linked the Zig runtime from", runtimeDir);
   } else {
-    rmSync(join2(output, "Runtime"), { recursive: true, force: true });
+    rmSync(join3(output, "Runtime"), { recursive: true, force: true });
   }
   const projectYml = projectYmlTemplate.replace(/\{\{CRAFT_RUNTIME_SETTINGS\}\}/g, hasRuntime ? renderRuntimeSettings() : "").replace(/\{\{FEATURE_SETTINGS\}\}/g, renderFeatureSettings(config)).replace(/\{\{APP_NAME\}\}/g, name).replace(/\{\{BUNDLE_ID\}\}/g, finalBundleId).replace(/\{\{BUNDLE_ID_PREFIX\}\}/g, bundleIdPrefix).replace(/\{\{VERSION\}\}/g, config.version || "1.0.0").replace(/\{\{BUILD_NUMBER\}\}/g, config.buildNumber || "1").replace(/\{\{IOS_VERSION\}\}/g, config.iosVersion || "15.0").replace(/\{\{DEVICE_FAMILIES\}\}/g, renderDeviceFamilies(config)).replace(/\{\{TEAM_ID\}\}/g, teamId || "").replace(/\{\{NATIVE_DEPENDENCIES\}\}/g, nativeDependencies.length ? `    dependencies:
 ${nativeDependencies.join(`
 `)}` : "").replace(/\{\{NATIVE_TARGETS\}\}/g, nativeTargets.join(`
 `));
-  writeFileSync(join2(output, "project.yml"), projectYml);
-  writeFileSync(join2(output, "Craft.entitlements"), renderEntitlements(config));
-  writeFileSync(join2(output, "PrivacyInfo.xcprivacy"), renderPrivacyManifest(config));
+  writeFileSync(join3(output, "project.yml"), projectYml);
+  writeFileSync(join3(output, "Craft.entitlements"), renderEntitlements(config));
+  writeFileSync(join3(output, "PrivacyInfo.xcprivacy"), renderPrivacyManifest(config));
   renderAssetCatalog(output, config);
   if (config.enableLiveActivities) {
-    mkdirSync(join2(output, "WidgetExtension"), { recursive: true });
-    const widgetInfo = readFileSync(join2(TEMPLATES_DIR, "WidgetExtension.Info.plist"), "utf8");
-    writeFileSync(join2(output, "WidgetExtension", "Info.plist"), widgetInfo);
+    mkdirSync(join3(output, "WidgetExtension"), { recursive: true });
+    const widgetInfo = readFileSync(join3(TEMPLATES_DIR, "WidgetExtension.Info.plist"), "utf8");
+    writeFileSync(join3(output, "WidgetExtension", "Info.plist"), widgetInfo);
   }
   if (config.enableWatchApp) {
-    const watchInfo = readFileSync(join2(TEMPLATES_DIR, "WatchApp.Info.plist.template"), "utf8").replace(/\{\{APP_NAME\}\}/g, xmlEscape(displayName)).replace(/\{\{BUNDLE_ID\}\}/g, finalBundleId);
-    writeFileSync(join2(output, "WatchApp", "Info.plist"), watchInfo);
-    writeFileSync(join2(output, "WatchApp", "Watch.entitlements"), renderWatchEntitlements(config));
-    const watchExtensionInfo = readFileSync(join2(TEMPLATES_DIR, "WatchExtension.Info.plist.template"), "utf8").replace(/\{\{APP_NAME\}\}/g, xmlEscape(displayName)).replace(/\{\{BUNDLE_ID\}\}/g, finalBundleId);
-    writeFileSync(join2(output, "WatchExtension", "Info.plist"), watchExtensionInfo);
-    writeFileSync(join2(output, "WatchExtension", "Watch.entitlements"), renderWatchEntitlements(config));
+    const watchInfo = readFileSync(join3(TEMPLATES_DIR, "WatchApp.Info.plist.template"), "utf8").replace(/\{\{APP_NAME\}\}/g, xmlEscape(displayName)).replace(/\{\{BUNDLE_ID\}\}/g, finalBundleId);
+    writeFileSync(join3(output, "WatchApp", "Info.plist"), watchInfo);
+    writeFileSync(join3(output, "WatchApp", "Watch.entitlements"), renderWatchEntitlements(config));
+    const watchExtensionInfo = readFileSync(join3(TEMPLATES_DIR, "WatchExtension.Info.plist.template"), "utf8").replace(/\{\{APP_NAME\}\}/g, xmlEscape(displayName)).replace(/\{\{BUNDLE_ID\}\}/g, finalBundleId);
+    writeFileSync(join3(output, "WatchExtension", "Info.plist"), watchExtensionInfo);
+    writeFileSync(join3(output, "WatchExtension", "Watch.entitlements"), renderWatchEntitlements(config));
   }
-  writeFileSync(join2(output, "dist", "index.html"), renderOfflinePage(config));
+  writeFileSync(join3(output, "dist", "index.html"), renderOfflinePage(config));
   if (usesNativeBundle(config)) {
     if (config.nativeBundle)
       installNativeBundle(config.nativeBundle, output);
@@ -990,7 +1040,7 @@ async function build(options) {
   const { htmlPath, nativeBundlePath, devServer, output, generateProject = true } = options;
   console.log(`
 \uD83D\uDCE6 Building Craft iOS project...`);
-  const configPath = join2(output, "craft.config.json");
+  const configPath = join3(output, "craft.config.json");
   if (!existsSync(configPath)) {
     throw new Error(`No craft.config.json found in ${output}. Run 'craft ios init' first.`);
   }
@@ -1005,7 +1055,7 @@ async function build(options) {
     const bundle = nativeBundlePath ?? config.nativeBundle;
     if (bundle)
       installNativeBundle(bundle, output);
-    if (!existsSync(join2(output, "dist", "native-screen.js"))) {
+    if (!existsSync(join3(output, "dist", "native-screen.js"))) {
       throw new Error("Native iOS mode needs dist/native-screen.js. Compile a .stx screen with `stx native compile` first.");
     }
   } else if (nativeBundlePath && !isHybrid(config)) {
@@ -1031,7 +1081,7 @@ async function build(options) {
     if (bundle) {
       installNativeBundle(bundle, output);
       console.log(`   Native screens: ${bundle} \u2192 dist/native-screen.js`);
-    } else if (!existsSync(join2(output, "dist", "native-screen.js"))) {
+    } else if (!existsSync(join3(output, "dist", "native-screen.js"))) {
       console.warn("   \u26A0 nativeScreens is set but there is no native bundle: every path opens in the web view.");
     }
   }
@@ -1056,12 +1106,12 @@ async function build(options) {
 }
 async function open(options) {
   const { output } = options;
-  const files = readdirSync(output);
+  const files = readdirSync2(output);
   const xcodeproj = files.find((f) => f.endsWith(".xcodeproj"));
   if (!xcodeproj) {
     throw new Error(`No Xcode project found in ${output}. Run 'craft ios build' first.`);
   }
-  const projectPath = join2(output, xcodeproj);
+  const projectPath = join3(output, xcodeproj);
   console.log(`\uD83D\uDE80 Opening ${xcodeproj}...`);
   await $`open ${projectPath}`;
 }
@@ -1102,7 +1152,7 @@ async function showSimulator() {
   const selected = await $`xcode-select -p`.quiet().nothrow();
   const developer = selected.exitCode === 0 ? selected.stdout.toString().trim() : "";
   if (developer) {
-    const app = join2(developer, "Applications", "Simulator.app");
+    const app = join3(developer, "Applications", "Simulator.app");
     if (existsSync(app)) {
       await $`open ${app}`.quiet().nothrow();
       return;
@@ -1113,14 +1163,14 @@ async function showSimulator() {
 async function run(options) {
   const { simulator, output } = options;
   await build({ output });
-  const files = readdirSync(output);
+  const files = readdirSync2(output);
   const xcodeproj = files.find((f) => f.endsWith(".xcodeproj"));
   if (!xcodeproj) {
     throw new Error(`No Xcode project found in ${output}`);
   }
-  const projectPath = join2(output, xcodeproj);
+  const projectPath = join3(output, xcodeproj);
   const appName = xcodeproj.replace(".xcodeproj", "");
-  const configPath = join2(output, "craft.config.json");
+  const configPath = join3(output, "craft.config.json");
   if (!existsSync(configPath))
     throw new Error(`No craft.config.json found in ${output}. Run 'craft-ios init' first.`);
   const config = JSON.parse(readFileSync(configPath, "utf-8"));
@@ -1133,8 +1183,8 @@ async function run(options) {
     console.log(`   Device: ${device.name} (${device.runtime})`);
     try {
       await bootSimulator(device);
-      const derivedData = join2(output, "build");
-      const product = join2(derivedData, "Build", "Products", "Debug-iphonesimulator", `${appName}.app`);
+      const derivedData = join3(output, "build");
+      const product = join3(derivedData, "Build", "Products", "Debug-iphonesimulator", `${appName}.app`);
       await $`xcodebuild -project ${projectPath} -scheme ${appName} -configuration Debug -destination ${`id=${device.udid}`} -derivedDataPath ${derivedData} build`;
       if (!existsSync(product)) {
         throw new Error(`xcodebuild reported success but ${product} does not exist. ` + "The scheme may build a different product name than the project.");
@@ -1171,6 +1221,7 @@ var { values, positionals } = parseArgs({
     "html-path": { type: "string" },
     "native-bundle": { type: "string" },
     "dev-server": { type: "string", short: "d" },
+    "app-root": { type: "string" },
     output: { type: "string", short: "o" },
     simulator: { type: "boolean", short: "s" }
   },
@@ -1187,6 +1238,7 @@ Usage:
 Commands:
   init <name>     Initialize a new iOS project
   build           Build web assets and generate Xcode project
+  audit-sources   Fail when the app owns Swift outside Craft's generated output
   open            Open Xcode project
   run             Build and run on simulator
 
@@ -1198,6 +1250,7 @@ Options:
   --html-path <path>        Path to HTML file or directory
   --native-bundle <path>    JavaScript bundle from \`stx native compile\`
   -d, --dev-server <url>    Development server URL
+  --app-root <dir>          Application root for audit-sources (default: .)
   -o, --output <dir>        Output directory (default: ./ios)
   -s, --simulator           Run on simulator instead of device
   -h, --help                Show help
@@ -1208,6 +1261,7 @@ Examples:
   craft-ios build --html-path ./dist/index.html
   craft-ios init MyApp --renderer native
   craft-ios build --native-bundle ./screen.js
+  craft-ios audit-sources --app-root .
   craft-ios build --dev-server http://localhost:3456
   craft-ios run --simulator
 `);
@@ -1237,6 +1291,12 @@ async function main() {
           output: values.output || "./ios"
         });
         break;
+      case "audit-sources": {
+        const root = resolve2(values["app-root"] || ".");
+        assertNoApplicationSwiftSources(root);
+        console.log(`\u2705 No application-owned Swift sources found in ${root}`);
+        break;
+      }
       case "open":
         await open({
           output: values.output || "./ios"

package/dist/index.d.ts

@@ -47,6 +47,8 @@ export interface CraftConfig {
     enableFilePicker?: boolean;
     enableFileDownload?: boolean;
     enableSocialAuth?: boolean;
+    /** Native passkeys; requires a matching `webcredentials:` associated domain. */
+    enablePasskeys?: boolean;
     enableAudioRecording?: boolean;
     enableVideoRecording?: boolean;
     enableMotionSensors?: boolean;

package/dist/index.js

@@ -380,6 +380,7 @@ var DEFAULT_CONFIG = {
   enableFilePicker: false,
   enableFileDownload: false,
   enableSocialAuth: false,
+  enablePasskeys: false,
   enableAudioRecording: false,
   enableVideoRecording: false,
   enableMotionSensors: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@craft-native/ios",
-  "version": "0.0.173",
+  "version": "0.0.174",
   "homepage": "https://github.com/craft-native/craft/tree/main/packages/ios#readme",
   "repository": {
     "type": "git",

package/templates/CraftApp.swift

@@ -1239,6 +1239,9 @@ struct CraftConfig: Codable {
     var enableFilePicker: Bool = false
     var enableFileDownload: Bool = false
     var enableSocialAuth: Bool = false
+    /// Native passkeys through AuthenticationServices. Requires a matching
+    /// `webcredentials:` associated-domain entry.
+    var enablePasskeys: Bool = false
     var enableAudioRecording: Bool = false
     var enableVideoRecording: Bool = false
     var enableMotionSensors: Bool = false
@@ -1264,6 +1267,8 @@ struct CraftConfig: Codable {
     var enableScheduledWorkouts: Bool = false
     var devServerURL: String? = nil
     var trustedOrigins: [String] = []
+    /// Domains allowed to back native passkey relying-party identifiers.
+    var associatedDomains: [String] = []
     /// The longest the launch splash stays up when the page neither says it is
     /// ready nor paints.
     var splashMaxSeconds: Double = 3