@evolu/react-native 12.0.1-preview.4 → 12.0.1-preview.6

package/dist/components/EvoluAvatar.d.ts

@@ -0,0 +1,8 @@
+import { FC } from 'react';
+import { OwnerId } from '@evolu/common';
+export declare const EvoluAvatar: FC<{
+    id: OwnerId;
+    size?: number;
+    borderRadius?: number;
+}>;
+//# sourceMappingURL=EvoluAvatar.d.ts.map

package/dist/components/EvoluAvatar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EvoluAvatar.d.ts","sourceRoot":"","sources":["../../src/components/EvoluAvatar.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,EAAE,EAAW,MAAM,OAAO,CAAC;AAEpC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,eAAO,MAAM,WAAW,EAAE,EAAE,CAAC;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAgBA,CAAA"}

package/dist/components/EvoluAvatar.js

@@ -0,0 +1,14 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { View } from 'react-native';
+import { SvgXml } from 'react-native-svg';
+import { useMemo } from 'react';
+import { bloSvg } from 'blo';
+export const EvoluAvatar = ({ id, size = 32, borderRadius = 3 }) => {
+    const svg = useMemo(() => bloSvg(`0x${id}`), [id]);
+    return id ? (_jsx(View, { style: {
+            width: size,
+            height: size,
+            borderRadius,
+            overflow: 'hidden',
+        }, children: _jsx(SvgXml, { xml: svg, width: size, height: size }) })) : null;
+};

package/dist/expo-sqlite.d.ts

@@ -1,4 +1,5 @@
-import { CreateAppState, EvoluDeps } from "@evolu/common/evolu";
-export declare const createAppState: CreateAppState;
+import { EvoluDeps } from "@evolu/common/evolu";
+export * from "./components/EvoluAvatar.js";
+export declare const localAuth: import("@evolu/common").LocalAuth;
 export declare const evoluReactNativeDeps: EvoluDeps;
 //# sourceMappingURL=expo-sqlite.d.ts.map

package/dist/expo-sqlite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"expo-sqlite.d.ts","sourceRoot":"","sources":["../src/expo-sqlite.ts"],"names":[],"mappings":"AASA,OAAO,EACL,cAAc,EAId,SAAS,EACV,MAAM,qBAAqB,CAAC;AAS7B,eAAO,MAAM,cAAc,EAAE,cAI3B,CAAC;AAkBH,eAAO,MAAM,oBAAoB,EAAE,SAMlC,CAAC"}
+{"version":3,"file":"expo-sqlite.d.ts","sourceRoot":"","sources":["../src/expo-sqlite.ts"],"names":[],"mappings":"AASA,OAAO,EAGL,SAAS,EAEV,MAAM,qBAAqB,CAAC;AA2B7B,cAAc,6BAA6B,CAAC;AAE5C,eAAO,MAAM,SAAS,mCAGpB,CAAC;AAEH,eAAO,MAAM,oBAAoB,EAAE,SAMlC,CAAC"}

package/dist/expo-sqlite.js

@@ -1,31 +1,33 @@
-import { createConsole, createEnglishMnemonic, createNanoIdLib, createRandom, createRandomBytes, createTime, } from "@evolu/common";
-import { createDbWorkerForPlatform, createWebSocketSync, } from "@evolu/common/evolu";
+import { createConsole, createLocalAuth, createRandom, createRandomBytes, createTime, createWebSocket, } from "@evolu/common";
+import { createDbWorkerForPlatform, } from "@evolu/common/evolu";
 import * as Expo from "expo";
 import { createExpoSqliteDriver } from "./providers/ExpoSqliteDriver.js";
+import { createSecureStore } from "./utils/LocalAuth.js";
 import { polyfillHermes } from "./utils/Hermes.js";
 polyfillHermes();
-export const createAppState = () => ({
-    reset: () => {
-        void Expo.reloadAppAsync();
-    },
-});
-const nanoIdLib = createNanoIdLib();
 const console = createConsole();
 const time = createTime();
+const randomBytes = createRandomBytes();
 const createDbWorker = () => createDbWorkerForPlatform({
-    createSqliteDriver: createExpoSqliteDriver,
-    createSync: createWebSocketSync,
     console,
-    time,
+    createSqliteDriver: createExpoSqliteDriver,
+    createWebSocket,
     random: createRandom(),
-    nanoIdLib,
-    createMnemonic: createEnglishMnemonic,
-    createRandomBytes,
+    randomBytes,
+    time,
+});
+const reloadApp = () => {
+    void Expo.reloadAppAsync();
+};
+export * from "./components/EvoluAvatar.js";
+export const localAuth = createLocalAuth({
+    randomBytes: randomBytes,
+    secureStorage: createSecureStore(),
 });
 export const evoluReactNativeDeps = {
-    time,
-    nanoIdLib,
     console,
-    createAppState,
     createDbWorker,
+    randomBytes,
+    reloadApp,
+    time,
 };

package/dist/op-sqlite.d.ts

@@ -1,4 +1,5 @@
-import { CreateAppState, EvoluDeps } from "@evolu/common/evolu";
-export declare const createAppState: CreateAppState;
+import { EvoluDeps } from "@evolu/common/evolu";
+export * from "./components/EvoluAvatar.js";
+export declare const localAuth: import("@evolu/common").LocalAuth;
 export declare const evoluReactNativeDeps: EvoluDeps;
 //# sourceMappingURL=op-sqlite.d.ts.map

package/dist/op-sqlite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"op-sqlite.d.ts","sourceRoot":"","sources":["../src/op-sqlite.ts"],"names":[],"mappings":"AASA,OAAO,EACL,cAAc,EAId,SAAS,EACV,MAAM,qBAAqB,CAAC;AAQ7B,eAAO,MAAM,cAAc,EAAE,cAQ3B,CAAC;AAkBH,eAAO,MAAM,oBAAoB,EAAE,SAMlC,CAAC"}
+{"version":3,"file":"op-sqlite.d.ts","sourceRoot":"","sources":["../src/op-sqlite.ts"],"names":[],"mappings":"AASA,OAAO,EAGL,SAAS,EAEV,MAAM,qBAAqB,CAAC;AA+B7B,cAAc,6BAA6B,CAAC;AAE5C,eAAO,MAAM,SAAS,mCAGpB,CAAC;AAEH,eAAO,MAAM,oBAAoB,EAAE,SAMlC,CAAC"}

package/dist/op-sqlite.js

@@ -1,36 +1,38 @@
-import { createConsole, createEnglishMnemonic, createNanoIdLib, createRandom, createRandomBytes, createTime, } from "@evolu/common";
-import { createDbWorkerForPlatform, createWebSocketSync, } from "@evolu/common/evolu";
+import { createConsole, createLocalAuth, createRandom, createRandomBytes, createTime, createWebSocket, } from "@evolu/common";
+import { createDbWorkerForPlatform, } from "@evolu/common/evolu";
 import { DevSettings } from "react-native";
+import { SensitiveInfo } from "react-native-sensitive-info";
 import { createOpSqliteDriver } from "./providers/OpSqliteDriver.js";
 import { polyfillHermes } from "./utils/Hermes.js";
 polyfillHermes();
-export const createAppState = () => ({
-    reset: () => {
-        if (process.env.NODE_ENV === "development") {
-            DevSettings.reload();
-        }
-        else {
-            // TODO: reload not implemented for bare rn
-        }
-    },
-});
-const nanoIdLib = createNanoIdLib();
 const console = createConsole();
 const time = createTime();
+const randomBytes = createRandomBytes();
 const createDbWorker = () => createDbWorkerForPlatform({
-    createSqliteDriver: createOpSqliteDriver,
-    createSync: createWebSocketSync,
     console,
-    time,
+    createSqliteDriver: createOpSqliteDriver,
+    createWebSocket,
     random: createRandom(),
-    nanoIdLib,
-    createMnemonic: createEnglishMnemonic,
-    createRandomBytes,
+    randomBytes,
+    time,
+});
+const reloadApp = () => {
+    if (process.env.NODE_ENV === "development") {
+        DevSettings.reload();
+    }
+    else {
+        // TODO: reload not implemented for bare rn
+    }
+};
+export * from "./components/EvoluAvatar.js";
+export const localAuth = createLocalAuth({
+    randomBytes: randomBytes,
+    secureStorage: SensitiveInfo,
 });
 export const evoluReactNativeDeps = {
-    time,
-    nanoIdLib,
     console,
-    createAppState,
     createDbWorker,
+    randomBytes,
+    reloadApp,
+    time,
 };

package/dist/providers/ExpoSqliteDriver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ExpoSqliteDriver.d.ts","sourceRoot":"","sources":["../../src/providers/ExpoSqliteDriver.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,kBAAkB,EAGnB,MAAM,eAAe,CAAC;AAIvB,eAAO,MAAM,sBAAsB,EAAE,kBAiDpC,CAAC"}
+{"version":3,"file":"ExpoSqliteDriver.d.ts","sourceRoot":"","sources":["../../src/providers/ExpoSqliteDriver.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,kBAAkB,EAInB,MAAM,eAAe,CAAC;AAIvB,eAAO,MAAM,sBAAsB,EAAE,kBAwDpC,CAAC"}

package/dist/providers/ExpoSqliteDriver.js

@@ -1,7 +1,14 @@
-import { createPreparedStatementsCache, } from "@evolu/common";
+import { createPreparedStatementsCache, bytesToHex, } from "@evolu/common";
 import { openDatabaseSync } from "expo-sqlite";
 export const createExpoSqliteDriver = (name, options) => {
     const db = openDatabaseSync(options?.memory ? ":memory:" : `evolu1-${name}.db`);
+    if (options?.encryptionKey) {
+        db.execSync(`
+      PRAGMA cipher = 'sqlcipher';
+      PRAGMA legacy = 4;
+      PRAGMA key = "x'${bytesToHex(options.encryptionKey)}'";
+    `);
+    }
     let isDisposed = false;
     const cache = createPreparedStatementsCache((sql) => db.prepareSync(sql), (statement) => {
         statement.finalizeSync();

package/dist/providers/OpSqliteDriver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OpSqliteDriver.d.ts","sourceRoot":"","sources":["../../src/providers/OpSqliteDriver.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,kBAAkB,EAGnB,MAAM,eAAe,CAAC;AAIvB,eAAO,MAAM,oBAAoB,EAAE,kBAyDlC,CAAC"}
+{"version":3,"file":"OpSqliteDriver.d.ts","sourceRoot":"","sources":["../../src/providers/OpSqliteDriver.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,kBAAkB,EAInB,MAAM,eAAe,CAAC;AAIvB,eAAO,MAAM,oBAAoB,EAAE,kBA8DlC,CAAC"}

package/dist/providers/OpSqliteDriver.js

@@ -1,10 +1,15 @@
-import { constVoid, createPreparedStatementsCache, isSqlMutation, } from "@evolu/common";
+import { constVoid, createPreparedStatementsCache, isSqlMutation, bytesToHex, } from "@evolu/common";
 import { open } from "@op-engineering/op-sqlite";
 export const createOpSqliteDriver = (name, options) => {
     // https://op-engineering.github.io/op-sqlite/docs/configuration#in-memory
     const db = open(options?.memory
         ? { name: `inMemoryDb`, location: ":memory:" }
-        : { name: `evolu1-${name}.db` });
+        : {
+            name: `evolu1-${name}.db`,
+            ...(options?.encryptionKey && {
+                encryptionKey: `x'${bytesToHex(options.encryptionKey)}'`,
+            }),
+        });
     let isDisposed = false;
     const cache = createPreparedStatementsCache((sql) => db.prepareStatement(sql), 
     // op-sqlite doesn't have API for that

package/dist/utils/LocalAuth.d.ts

@@ -0,0 +1,3 @@
+import type { SecureStorage } from "@evolu/common";
+export declare const createSecureStore: () => SecureStorage;
+//# sourceMappingURL=LocalAuth.d.ts.map

package/dist/utils/LocalAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalAuth.d.ts","sourceRoot":"","sources":["../../src/utils/LocalAuth.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAoB,aAAa,EAAqD,MAAM,eAAe,CAAC;AAExH,eAAO,MAAM,iBAAiB,QAAO,aAwDpC,CAAC"}

package/dist/utils/LocalAuth.js

@@ -0,0 +1,110 @@
+import KVStore from 'expo-sqlite/kv-store';
+import * as SecureStore from 'expo-secure-store';
+import { AUTH_DEFAULT_OPTIONS } from '@evolu/common';
+export const createSecureStore = () => {
+    const store = {
+        setItem: async (key, value, options) => {
+            const rnsiOpts = convertOptions(options);
+            const service = options?.service ?? 'default';
+            const metadata = createMetadata(options?.accessControl === 'none');
+            await KVStore.setItem(`${service}-${key}`, '1');
+            await SecureStore.setItemAsync(key, JSON.stringify({ value, metadata }), rnsiOpts);
+            return { metadata };
+        },
+        getItem: async (key, options) => {
+            const rnsiOpts = convertOptions(options);
+            const service = options?.service ?? 'default';
+            let data;
+            try {
+                const result = await SecureStore.getItemAsync(key, rnsiOpts);
+                if (!result)
+                    return null;
+                data = JSON.parse(result);
+            }
+            catch (_error) {
+                return null;
+            }
+            return { key, service, ...data };
+        },
+        deleteItem: async (key, options) => {
+            const rnsiOpts = convertOptions(options);
+            const service = options?.service ?? 'default';
+            await Promise.all([
+                KVStore.removeItemAsync(`${service}-${key}`),
+                SecureStore.deleteItemAsync(key, rnsiOpts),
+            ]);
+            return true;
+        },
+        getAllItems: async (options) => {
+            const keys = await KVStore.getAllKeysAsync();
+            const service = options?.service ?? 'default';
+            const metadata = createMetadata(options?.accessControl === 'none');
+            return keys
+                .filter(key => key.startsWith(`${service}-`))
+                .map(key => ({ key: key.slice(service.length + 1), service, metadata }));
+        },
+        clearService: async (options) => {
+            const rnsiOpts = convertOptions(options);
+            const service = options?.service ?? 'default';
+            const items = await store.getAllItems(options);
+            await KVStore.multiRemove(items.map(item => `${service}-${item.key}`));
+            await Promise.all(items.map(async (item) => {
+                await SecureStore.deleteItemAsync(item.key, rnsiOpts);
+            }));
+        },
+    };
+    return store;
+};
+/**
+ * Create default metadata for backwards compatibility with items that don't
+ * have stored metadata.
+ */
+const createMetadata = (isSecure = true) => {
+    return {
+        backend: "keychain",
+        accessControl: isSecure ? "biometryCurrentSet" : "none",
+        securityLevel: isSecure ? "biometry" : "software",
+        timestamp: Date.now(),
+    };
+};
+function convertOptions(options) {
+    const accessGroup = options?.keychainGroup
+        ?? AUTH_DEFAULT_OPTIONS.keychainGroup
+        ?? '';
+    const keychainService = options?.service
+        ?? AUTH_DEFAULT_OPTIONS.service
+        ?? '';
+    const keychainAccessible = convertKeychainAccessible(options?.accessControl
+        ?? AUTH_DEFAULT_OPTIONS.accessControl
+        ?? 'biometryCurrentSet');
+    const authenticationPrompt = options?.authenticationPrompt?.title
+        ?? AUTH_DEFAULT_OPTIONS.authenticationPrompt?.title
+        ?? '';
+    return {
+        accessGroup,
+        keychainService,
+        keychainAccessible,
+        authenticationPrompt,
+        requireAuthentication: options?.accessControl !== 'none',
+    };
+}
+function convertKeychainAccessible(accessControl) {
+    switch (accessControl) {
+        case "none":
+            // eslint-disable-next-line @typescript-eslint/no-deprecated
+            return SecureStore.ALWAYS;
+        case "biometryCurrentSet":
+            return SecureStore.AFTER_FIRST_UNLOCK;
+        case "biometryAny":
+            return SecureStore.AFTER_FIRST_UNLOCK;
+        case "devicePasscode":
+            return SecureStore.AFTER_FIRST_UNLOCK;
+        case "secureEnclaveBiometry":
+            return SecureStore.AFTER_FIRST_UNLOCK;
+        // Exhaustive check
+        default:
+            accessControl;
+            // Default (for typescript, should never hit)
+            return SecureStore.AFTER_FIRST_UNLOCK;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evolu/react-native",
-  "version": "12.0.1-preview.4",
+  "version": "12.0.1-preview.6",
   "description": "Evolu for React Native and Expo",
   "keywords": [
     "evolu",
@@ -48,23 +48,32 @@
     "README.md"
   ],
   "devDependencies": {
-    "@op-engineering/op-sqlite": "^14.1.4",
-    "expo": "^53.0.20",
-    "expo-sqlite": "~15.2.14",
-    "react-native": "^0.79.3",
+    "@op-engineering/op-sqlite": "^15.0.3",
+    "expo": "^54.0.10",
+    "expo-secure-store": "~15.0.7",
+    "expo-sqlite": "~16.0.8",
+    "react-native": "^0.81.4",
+    "react-native-nitro-modules": "^0.31.2",
+    "react-native-sensitive-info": "^6.0.0-rc.8",
+    "react-native-svg": "^15.14.0",
+    "shx": "^0.4.0",
     "typescript": "^5.9.2",
-    "vitest": "^3.2.3",
-    "@evolu/common": "6.0.1-preview.18",
-    "@evolu/react": "9.0.1-preview.4",
+    "vitest": "^4.0.4",
+    "@evolu/common": "6.0.1-preview.23",
+    "@evolu/react": "9.0.1-preview.6",
     "@evolu/tsconfig": "0.0.2"
   },
   "peerDependencies": {
-    "@evolu/common": "^6.0.1-preview.18",
-    "@evolu/react": "^9.0.1-preview.4",
+    "@evolu/common": "^6.0.1-preview.23",
+    "@evolu/react": "^9.0.1-preview.6",
     "@op-engineering/op-sqlite": ">=12",
-    "expo": ">=52",
-    "expo-sqlite": ">=15",
-    "react-native": ">=0.76"
+    "expo": ">=54",
+    "expo-secure-store": ">=15",
+    "expo-sqlite": ">=16",
+    "react-native": ">=0.81",
+    "react-native-nitro-modules": ">=0.31",
+    "react-native-sensitive-info": ">=6",
+    "react-native-svg": ">=15"
   },
   "peerDependenciesMeta": {
     "@op-engineering/op-sqlite": {
@@ -75,6 +84,18 @@
     },
     "expo-sqlite": {
       "optional": true
+    },
+    "expo-secure-store": {
+      "optional": true
+    },
+    "react-native-nitro-modules": {
+      "optional": true
+    },
+    "react-native-sensitive-info": {
+      "optional": true
+    },
+    "react-native-svg": {
+      "optional": true
     }
   },
   "publishConfig": {

package/src/components/EvoluAvatar.tsx

@@ -0,0 +1,27 @@
+import { View } from 'react-native';
+import { SvgXml } from 'react-native-svg';
+import { FC, useMemo } from 'react';
+import { bloSvg } from 'blo';
+import { OwnerId } from '@evolu/common';
+
+export const EvoluAvatar: FC<{
+  id: OwnerId;
+  size?: number;
+  borderRadius?: number;
+}> = ({ id, size = 32, borderRadius = 3 }) => {
+  const svg = useMemo(() => bloSvg(`0x${id}`), [id]);
+  return id ? (
+    <View style={{
+      width: size,
+      height: size,
+      borderRadius,
+      overflow: 'hidden',
+    }}>
+      <SvgXml
+        xml={svg}
+        width={size}
+        height={size}
+      />
+    </View>
+  ) : null;
+}

package/src/expo-sqlite.ts

@@ -1,53 +1,55 @@
 import {
   createConsole,
-  createEnglishMnemonic,
-  createNanoIdLib,
+  createLocalAuth,
   createRandom,
   createRandomBytes,
   createTime,
+  createWebSocket,
 } from "@evolu/common";
 
 import {
-  CreateAppState,
   CreateDbWorker,
   createDbWorkerForPlatform,
-  createWebSocketSync,
   EvoluDeps,
+  ReloadApp,
 } from "@evolu/common/evolu";
 
 import * as Expo from "expo";
-
 import { createExpoSqliteDriver } from "./providers/ExpoSqliteDriver.js";
+import { createSecureStore } from "./utils/LocalAuth.js";
 import { polyfillHermes } from "./utils/Hermes.js";
 
 polyfillHermes();
 
-export const createAppState: CreateAppState = () => ({
-  reset: () => {
-    void Expo.reloadAppAsync();
-  },
-});
-
-const nanoIdLib = createNanoIdLib();
 const console = createConsole();
 const time = createTime();
+const randomBytes = createRandomBytes();
 
 const createDbWorker: CreateDbWorker = () =>
   createDbWorkerForPlatform({
-    createSqliteDriver: createExpoSqliteDriver,
-    createSync: createWebSocketSync,
     console,
-    time,
+    createSqliteDriver: createExpoSqliteDriver,
+    createWebSocket,
     random: createRandom(),
-    nanoIdLib,
-    createMnemonic: createEnglishMnemonic,
-    createRandomBytes,
+    randomBytes,
+    time,
   });
 
+const reloadApp: ReloadApp = () => {
+  void Expo.reloadAppAsync();
+};
+
+export * from "./components/EvoluAvatar.js";
+
+export const localAuth = createLocalAuth({
+  randomBytes: randomBytes,
+  secureStorage: createSecureStore(),
+});
+
 export const evoluReactNativeDeps: EvoluDeps = {
-  time,
-  nanoIdLib,
   console,
-  createAppState,
   createDbWorker,
+  randomBytes,
+  reloadApp,
+  time,
 };

package/src/op-sqlite.ts

@@ -1,56 +1,59 @@
 import {
   createConsole,
-  createEnglishMnemonic,
-  createNanoIdLib,
+  createLocalAuth,
   createRandom,
   createRandomBytes,
   createTime,
+  createWebSocket,
 } from "@evolu/common";
 
 import {
-  CreateAppState,
   CreateDbWorker,
   createDbWorkerForPlatform,
-  createWebSocketSync,
   EvoluDeps,
+  ReloadApp,
 } from "@evolu/common/evolu";
 
 import { DevSettings } from "react-native";
+import { SensitiveInfo } from "react-native-sensitive-info";
 import { createOpSqliteDriver } from "./providers/OpSqliteDriver.js";
 import { polyfillHermes } from "./utils/Hermes.js";
 
 polyfillHermes();
 
-export const createAppState: CreateAppState = () => ({
-  reset: () => {
-    if (process.env.NODE_ENV === "development") {
-      DevSettings.reload();
-    } else {
-      // TODO: reload not implemented for bare rn
-    }
-  },
-});
-
-const nanoIdLib = createNanoIdLib();
 const console = createConsole();
 const time = createTime();
+const randomBytes = createRandomBytes();
 
 const createDbWorker: CreateDbWorker = () =>
   createDbWorkerForPlatform({
-    createSqliteDriver: createOpSqliteDriver,
-    createSync: createWebSocketSync,
     console,
-    time,
+    createSqliteDriver: createOpSqliteDriver,
+    createWebSocket,
     random: createRandom(),
-    nanoIdLib,
-    createMnemonic: createEnglishMnemonic,
-    createRandomBytes,
+    randomBytes,
+    time,
   });
 
+const reloadApp: ReloadApp = () => {
+  if (process.env.NODE_ENV === "development") {
+    DevSettings.reload();
+  } else {
+    // TODO: reload not implemented for bare rn
+  }
+};
+
+export * from "./components/EvoluAvatar.js";
+
+export const localAuth = createLocalAuth({
+  randomBytes: randomBytes,
+  secureStorage: SensitiveInfo,
+});
+
 export const evoluReactNativeDeps: EvoluDeps = {
-  time,
-  nanoIdLib,
   console,
-  createAppState,
   createDbWorker,
+  randomBytes,
+  reloadApp,
+  time,
 };

package/src/providers/ExpoSqliteDriver.ts

@@ -3,6 +3,7 @@ import {
   CreateSqliteDriver,
   SqliteDriver,
   SqliteRow,
+  bytesToHex,
 } from "@evolu/common";
 
 import { openDatabaseSync, SQLiteStatement } from "expo-sqlite";
@@ -11,6 +12,13 @@ export const createExpoSqliteDriver: CreateSqliteDriver = (name, options) => {
   const db = openDatabaseSync(
     options?.memory ? ":memory:" : `evolu1-${name}.db`,
   );
+  if (options?.encryptionKey) {
+    db.execSync(`
+      PRAGMA cipher = 'sqlcipher';
+      PRAGMA legacy = 4;
+      PRAGMA key = "x'${bytesToHex(options.encryptionKey)}'";
+    `);
+  }
   let isDisposed = false;
 
   const cache = createPreparedStatementsCache<SQLiteStatement>(

package/src/providers/OpSqliteDriver.ts

@@ -5,6 +5,7 @@ import {
   CreateSqliteDriver,
   SqliteDriver,
   SqliteRow,
+  bytesToHex,
 } from "@evolu/common";
 
 import { open, PreparedStatement } from "@op-engineering/op-sqlite";
@@ -14,7 +15,12 @@ export const createOpSqliteDriver: CreateSqliteDriver = (name, options) => {
   const db = open(
     options?.memory
       ? { name: `inMemoryDb`, location: ":memory:" }
-      : { name: `evolu1-${name}.db` },
+      : {
+          name: `evolu1-${name}.db`,
+          ...(options?.encryptionKey && {
+            encryptionKey: `x'${bytesToHex(options.encryptionKey)}'`,
+          }),
+        },
   );
   let isDisposed = false;
 

package/src/utils/LocalAuth.ts

@@ -0,0 +1,118 @@
+import KVStore from 'expo-sqlite/kv-store';
+import * as SecureStore from 'expo-secure-store';
+import { AUTH_DEFAULT_OPTIONS } from '@evolu/common';
+
+import type { LocalAuthOptions, SecureStorage, SensitiveInfoItem, StorageMetadata, AccessControl } from "@evolu/common";
+
+export const createSecureStore = (): SecureStorage => {
+  const store: SecureStorage = {
+    setItem: async (key, value, options) => {
+      const rnsiOpts = convertOptions(options);
+      const service = options?.service ?? 'default';
+      const metadata = createMetadata(options?.accessControl === 'none');
+      await KVStore.setItem(`${service}-${key}`, '1');
+      await SecureStore.setItemAsync(key, JSON.stringify({value, metadata}), rnsiOpts);
+      return { metadata };
+    },
+
+    getItem: async (key, options) => {
+      const rnsiOpts = convertOptions(options);
+      const service = options?.service ?? 'default';
+      let data: {value: string; metadata: StorageMetadata};
+      try {
+        const result = await SecureStore.getItemAsync(key, rnsiOpts);
+        if (!result) return null;
+        data = JSON.parse(result) as {value: string; metadata: StorageMetadata};
+      } catch (_error) {
+        return null;
+      }
+      return { key, service, ...data };
+    },
+
+    deleteItem: async (key, options) => {
+      const rnsiOpts = convertOptions(options);
+      const service = options?.service ?? 'default';
+      await Promise.all([
+        KVStore.removeItemAsync(`${service}-${key}`),
+        SecureStore.deleteItemAsync(key, rnsiOpts),
+      ]);
+      return true;
+    },
+
+    getAllItems: async (options) => {
+      const keys = await KVStore.getAllKeysAsync();
+      const service = options?.service ?? 'default';
+      const metadata = createMetadata(options?.accessControl === 'none');
+      return keys
+        .filter(key => key.startsWith(`${service}-`))
+        .map(key => ({ key: key.slice(service.length + 1), service, metadata }));
+    },
+
+    clearService: async (options) => {
+      const rnsiOpts = convertOptions(options);
+      const service = options?.service ?? 'default';
+      const items = await store.getAllItems(options);
+      await KVStore.multiRemove(items.map(item => `${service}-${item.key}`));
+      await Promise.all(items.map(async (item) => {
+        await SecureStore.deleteItemAsync(item.key, rnsiOpts);
+      }));
+    },
+  };
+
+  return store;
+};
+
+/**
+ * Create default metadata for backwards compatibility with items that don't
+ * have stored metadata.
+ */
+const createMetadata = (isSecure = true): SensitiveInfoItem["metadata"] => {
+  return {
+    backend: "keychain",
+    accessControl: isSecure ? "biometryCurrentSet" : "none",
+    securityLevel: isSecure ? "biometry" : "software",
+    timestamp: Date.now(),
+  };
+};
+
+function convertOptions(options?: LocalAuthOptions): SecureStore.SecureStoreOptions {
+  const accessGroup = options?.keychainGroup
+    ?? AUTH_DEFAULT_OPTIONS.keychainGroup
+    ?? '';
+  const keychainService = options?.service
+    ?? AUTH_DEFAULT_OPTIONS.service
+    ?? '';
+  const keychainAccessible = convertKeychainAccessible(options?.accessControl
+    ?? AUTH_DEFAULT_OPTIONS.accessControl
+    ?? 'biometryCurrentSet');
+  const authenticationPrompt = options?.authenticationPrompt?.title
+    ?? AUTH_DEFAULT_OPTIONS.authenticationPrompt?.title
+    ?? '';
+  return {
+    accessGroup,
+    keychainService,
+    keychainAccessible,
+    authenticationPrompt,
+    requireAuthentication: options?.accessControl !== 'none',
+  };
+}
+
+function convertKeychainAccessible(accessControl: AccessControl): SecureStore.KeychainAccessibilityConstant {
+  switch (accessControl) {
+    case "none":
+      // eslint-disable-next-line @typescript-eslint/no-deprecated
+      return SecureStore.ALWAYS;
+    case "biometryCurrentSet":
+      return SecureStore.AFTER_FIRST_UNLOCK;
+    case "biometryAny":
+      return SecureStore.AFTER_FIRST_UNLOCK;
+    case "devicePasscode":
+      return SecureStore.AFTER_FIRST_UNLOCK;
+    case "secureEnclaveBiometry":
+      return SecureStore.AFTER_FIRST_UNLOCK;
+    // Exhaustive check
+    default: accessControl satisfies never;
+    // Default (for typescript, should never hit)
+    return SecureStore.AFTER_FIRST_UNLOCK;
+  }
+}