@goliapkg/sentori-react-native 0.7.2 → 0.7.3

package/lib/mask.js

@@ -1,125 +1,36 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// Phase 42 sub-D.09/10 + Phase 48 sub-B — mark UI regions as "do not
-// screenshot" AND actually redact them at capture time.
+// v0.7.3 — mask discovery via consumer-supplied query callback.
 //
-// `<MaskRegion>` renders its children normally, plus a black overlay
-// `<View>` that sits on top of them with `opacity: 0`. Right before
-// `captureScreenshot()` calls into react-native-view-shot, the SDK
-// flips every registered overlay to `opacity: 1` (black square covers
-// the children), captures, then flips back to `opacity: 0` so the
-// user never sees the overlay. The overlay uses `pointerEvents="none"`
-// so it never intercepts touches.
+// The SDK does not own a registry of masked regions. The host app
+// keeps its own (e.g. a `Set<string>` updated as `<Maskable>`
+// components mount/unmount) and hands the SDK a thunk that returns
+// the current list of native-IDs to redact. The SDK calls the thunk
+// once per screenshot capture — cheap, called rarely, only on error.
 //
-// `setMaskedNode(ref)` is the imperative escape hatch for views you
-// can't wrap. We can't inject an overlay into a foreign view, so the
-// imperative path falls back to setting the registered view's own
-// `opacity: 0` for the capture window — content underneath may show
-// through, but that beats sending the sensitive content to the server.
-// Prefer `<MaskRegion>` when you control the subtree.
-import { useEffect, useRef } from 'react';
-import { StyleSheet, View } from 'react-native';
-const _maskedRefs = new Set();
-const _maskedOverlays = new Set();
-const _maskedNativeIds = new Set();
+// Why this shape: a logging SDK should never live on the render
+// path. Earlier iterations exported `<MaskRegion>` (React component)
+// and `setMaskedNode` (imperative ref helper), which forced every
+// PII-bearing UI file to import from the SDK and put SDK bugs in
+// the user's render tree. This module is JS-only — no React, no JSX,
+// no native module touch — so swapping or removing the SDK doesn't
+// affect rendering.
+let _query = null;
 /**
- * Imperative registration: pass a ref obtained via `useRef()` /
- * `createRef()` to a `<View>` you want hidden from screenshots.
- */
-export function setMaskedNode(node) {
-    if (!node || typeof node.setNativeProps !== 'function')
-        return;
-    _maskedRefs.add(node);
-}
-export function unsetMaskedNode(node) {
-    if (!node)
-        return;
-    _maskedRefs.delete(node);
-}
-/** Returns the current set of registered masked nodes + nativeIDs.
- *  Read by the native screenshotter layer (iOS / Android sub-E / F). */
-export function getMaskedRegions() {
-    return { nativeIds: _maskedNativeIds, overlays: _maskedOverlays, refs: _maskedRefs };
-}
-/**
- * Phase 48 sub-B — engage masking right before screenshot capture.
- * Returns a function the caller must invoke once capture is done so
- * the user never sees the black overlays.
- *
- * Two paths:
- *   - Overlays from `<MaskRegion>`: flip opacity 0 → 1 (cover children).
- *   - Imperative refs from `setMaskedNode`: flip opacity 1 → 0 on the
- *     view itself (whole subtree disappears for one frame).
+ * Register a callback the SDK calls right before each screenshot
+ * capture. Return the native-IDs (the `nativeID` prop on the RN
+ * `<View>`) that should be blacked-out in the captured image.
  *
- * All `setNativeProps` calls are best-effort — a failure on one
- * doesn't block the others or the capture.
+ * Idempotent: a second call replaces the first. Pass `null` (or
+ * call `clearMaskQuery`) to detach.
  */
-export function engageMasks() {
-    const overlaysEngaged = [];
-    for (const o of _maskedOverlays) {
-        try {
-            o.setNativeProps?.({ style: { opacity: 1 } });
-            overlaysEngaged.push(o);
-        }
-        catch {
-            // skip
-        }
-    }
-    const refsEngaged = [];
-    for (const r of _maskedRefs) {
-        try {
-            r.setNativeProps?.({ style: { opacity: 0 } });
-            refsEngaged.push(r);
-        }
-        catch {
-            // skip
-        }
-    }
-    return () => {
-        for (const o of overlaysEngaged) {
-            try {
-                o.setNativeProps?.({ style: { opacity: 0 } });
-            }
-            catch {
-                // skip
-            }
-        }
-        for (const r of refsEngaged) {
-            try {
-                r.setNativeProps?.({ style: { opacity: 1 } });
-            }
-            catch {
-                // skip
-            }
-        }
-    };
+export function registerMaskQuery(query) {
+    _query = query;
 }
-/**
- * Declarative redaction. `<MaskRegion>{children}</MaskRegion>` keeps
- * the children visible in normal flight; under capture the overlay's
- * opacity is flipped to 1 and the children are hidden behind a black
- * square in the rendered screenshot.
- */
-export function MaskRegion({ children, nativeID, ...rest }) {
-    const idRef = useRef(nativeID ?? `sentori-mask-${Math.random().toString(36).slice(2, 10)}`);
-    const overlayRef = useRef(null);
-    useEffect(() => {
-        const id = idRef.current;
-        _maskedNativeIds.add(id);
-        const overlay = overlayRef.current;
-        if (overlay)
-            _maskedOverlays.add(overlay);
-        return () => {
-            _maskedNativeIds.delete(id);
-            if (overlay)
-                _maskedOverlays.delete(overlay);
-        };
-    }, []);
-    return (_jsxs(View, { collapsable: false, nativeID: idRef.current, ...rest, children: [children, _jsx(View, { pointerEvents: "none", ref: overlayRef, style: [StyleSheet.absoluteFill, { backgroundColor: '#000', opacity: 0 }] })] }));
+/** Unregister. Mostly for tests / teardown. */
+export function clearMaskQuery() {
+    _query = null;
 }
-/** Test-only — flush registration tables. */
-export function __resetMaskedRegionsForTests() {
-    _maskedRefs.clear();
-    _maskedOverlays.clear();
-    _maskedNativeIds.clear();
+/** Internal — read by `handlers/screenshot.ts` at capture time. */
+export function getRegisteredMaskQuery() {
+    return _query;
 }
 //# sourceMappingURL=mask.js.map

package/lib/mask.js.map

@@ -1 +1 @@
-{"version":3,"file":"mask.js","sourceRoot":"","sources":["../src/mask.tsx"],"names":[],"mappings":";AAAA,qEAAqE;AACrE,wDAAwD;AACxD,EAAE;AACF,qEAAqE;AACrE,oEAAoE;AACpE,mEAAmE;AACnE,sEAAsE;AACtE,kEAAkE;AAClE,uEAAuE;AACvE,kCAAkC;AAClC,EAAE;AACF,oEAAoE;AACpE,qEAAqE;AACrE,kEAAkE;AAClE,oEAAoE;AACpE,uEAAuE;AACvE,sDAAsD;AAEtD,OAAc,EAAkB,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAkB,MAAM,cAAc,CAAC;AAQhE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAY,CAAC;AACxC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAY,CAAC;AAC5C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE3C;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAA+B;IAC3D,IAAI,CAAC,IAAI,IAAI,OAAQ,IAAiB,CAAC,cAAc,KAAK,UAAU;QAAE,OAAO;IAC7E,WAAW,CAAC,GAAG,CAAC,IAAgB,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAA+B;IAC7D,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,WAAW,CAAC,MAAM,CAAC,IAAgB,CAAC,CAAC;AACvC,CAAC;AAED;wEACwE;AACxE,MAAM,UAAU,gBAAgB;IAK9B,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AACvF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,eAAe,GAAe,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,CAAC,CAAC,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9C,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAe,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,CAAC,CAAC,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9C,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;IACH,CAAC;IACD,OAAO,GAAG,EAAE;QACV,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,CAAC,CAAC,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,CAAC,CAAC,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,EACzB,QAAQ,EACR,QAAQ,EACR,GAAG,IAAI,EACgD;IACvD,MAAM,KAAK,GAAG,MAAM,CAClB,QAAQ,IAAI,gBAAgB,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CACtE,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,CAAc,IAAI,CAAC,CAAC;IAE7C,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;QACzB,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,UAAU,CAAC,OAA0B,CAAC;QACtD,IAAI,OAAO;YAAE,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,GAAG,EAAE;YACV,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,OAAO;gBAAE,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,CACL,MAAC,IAAI,IAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,KAAM,IAAI,aACxD,QAAQ,EACT,KAAC,IAAI,IACH,aAAa,EAAC,MAAM,EACpB,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,GACzE,IACG,CACR,CAAC;AACJ,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,4BAA4B;IAC1C,WAAW,CAAC,KAAK,EAAE,CAAC;IACpB,eAAe,CAAC,KAAK,EAAE,CAAC;IACxB,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"mask.js","sourceRoot":"","sources":["../src/mask.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,EAAE;AACF,kEAAkE;AAClE,8DAA8D;AAC9D,mEAAmE;AACnE,oEAAoE;AACpE,qEAAqE;AACrE,EAAE;AACF,gEAAgE;AAChE,qEAAqE;AACrE,kEAAkE;AAClE,iEAAiE;AACjE,qEAAqE;AACrE,mEAAmE;AACnE,oBAAoB;AAIpB,IAAI,MAAM,GAAqB,IAAI,CAAC;AAEpC;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAgB;IAChD,MAAM,GAAG,KAAK,CAAC;AACjB,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,cAAc;IAC5B,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,sBAAsB;IACpC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/lib/native.d.ts

@@ -37,4 +37,19 @@ export declare function startAnrWatchdog(options?: {
     timeoutMs?: number;
 }): void;
 export declare function stopAnrWatchdog(): void;
+/**
+ * v0.7.3 — drives the native screenshot path. JS side passes the
+ * current list of mask `nativeID`s (read from the consumer's
+ * registered mask query); native renders + redacts.
+ *
+ * Returns `null` on every failure mode: no native module bound
+ * (jest, bun test, web), method missing (older native build still
+ * deployed), capture failed (no key window, timed out, etc.).
+ * Callers must treat `null` as "no screenshot this round" — the
+ * error event still ships, just without a thumbnail.
+ */
+export declare function captureNativeScreenshotWithMask(maskedIds: string[]): Promise<null | {
+    base64: string;
+    mediaType: string;
+}>;
 //# sourceMappingURL=native.d.ts.map

package/lib/native.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"native.d.ts","sourceRoot":"","sources":["../src/native.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA0CH,wBAAgB,eAAe,CAAC,MAAM,EAAE;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,IAAI,CAMP;AAED,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAQ5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAMzC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IACzC,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,GAAG,IAAI,CAMP;AAED,wBAAgB,eAAe,IAAI,IAAI,CAMtC"}
+{"version":3,"file":"native.d.ts","sourceRoot":"","sources":["../src/native.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAsDH,wBAAgB,eAAe,CAAC,MAAM,EAAE;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,IAAI,CAMP;AAED,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAQ5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAMzC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IACzC,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,GAAG,IAAI,CAMP;AAED,wBAAgB,eAAe,IAAI,IAAI,CAMtC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,+BAA+B,CACnD,SAAS,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,IAAI,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAQvD"}

package/lib/native.js

@@ -80,4 +80,26 @@ export function stopAnrWatchdog() {
         // ignore
     }
 }
+/**
+ * v0.7.3 — drives the native screenshot path. JS side passes the
+ * current list of mask `nativeID`s (read from the consumer's
+ * registered mask query); native renders + redacts.
+ *
+ * Returns `null` on every failure mode: no native module bound
+ * (jest, bun test, web), method missing (older native build still
+ * deployed), capture failed (no key window, timed out, etc.).
+ * Callers must treat `null` as "no screenshot this round" — the
+ * error event still ships, just without a thumbnail.
+ */
+export async function captureNativeScreenshotWithMask(maskedIds) {
+    const n = native();
+    if (!n?.captureScreenshotWithMask)
+        return null;
+    try {
+        return await n.captureScreenshotWithMask(maskedIds);
+    }
+    catch {
+        return null;
+    }
+}
 //# sourceMappingURL=native.js.map

package/lib/native.js.map

@@ -1 +1 @@
-{"version":3,"file":"native.js","sourceRoot":"","sources":["../src/native.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA2BH,IAAI,OAA+C,CAAA;AAEnD,SAAS,MAAM;IACb,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAA;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,mBAAmB,CAEvC,CAAA;QACD,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAsB,SAAS,CAAC,CAAA;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAI/B;IACC,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAA;IAClB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACjB,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,CAAC,YAAY,EAAE,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,sBAAsB,EAAE,EAAE,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAIhC;IACC,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,gBAAgB,EAAE,CAAC,OAAO,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,eAAe,EAAE,EAAE,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC"}
+{"version":3,"file":"native.js","sourceRoot":"","sources":["../src/native.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAuCH,IAAI,OAA+C,CAAA;AAEnD,SAAS,MAAM;IACb,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAA;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,mBAAmB,CAEvC,CAAA;QACD,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAsB,SAAS,CAAC,CAAA;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAI/B;IACC,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAA;IAClB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACjB,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,CAAC,YAAY,EAAE,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,sBAAsB,EAAE,EAAE,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAIhC;IACC,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,gBAAgB,EAAE,CAAC,OAAO,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,eAAe,EAAE,EAAE,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,SAAmB;IAEnB,MAAM,CAAC,GAAG,MAAM,EAAE,CAAA;IAClB,IAAI,CAAC,CAAC,EAAE,yBAAyB;QAAE,OAAO,IAAI,CAAA;IAC9C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goliapkg/sentori-react-native",
-  "version": "0.7.2",
+  "version": "0.7.3",
   "description": "Sentori SDK for React Native \u2014 JS-layer error capture, native crash handlers (iOS / Android), batched transport, fetch + react-navigation tracing.",
   "license": "MIT",
   "homepage": "https://sentori.golia.jp",
@@ -41,8 +41,7 @@
   "peerDependencies": {
     "expo-modules-core": ">=2.0",
     "react": ">=18",
-    "react-native": ">=0.74",
-    "react-native-view-shot": ">=3.8"
+    "react-native": ">=0.74"
   },
   "peerDependenciesMeta": {
     "@react-native-async-storage/async-storage": {
@@ -50,15 +49,11 @@
     },
     "expo-modules-core": {
       "optional": true
-    },
-    "react-native-view-shot": {
-      "optional": true
     }
   },
   "optionalDependencies": {
     "@react-native-async-storage/async-storage": ">=1.23",
-    "expo-modules-core": ">=2.0",
-    "react-native-view-shot": ">=3.8"
+    "expo-modules-core": ">=2.0"
   },
   "devDependencies": {
     "@types/bun": "latest",

package/src/__tests__/screenshot.test.ts

@@ -3,15 +3,13 @@ import { afterEach, beforeEach, describe, expect, mock, test } from 'bun:test';
 import { setConfig, __resetForTests as resetConfig } from '../config';
 import { uploadAttachment } from '../transport';
 
-// Phase 42 sub-D.13 — unit coverage for the upload pipeline.
+// Unit coverage for the upload pipeline.
 //
-// `captureScreenshot()` itself goes through react-native-view-shot
-// + RN's InteractionManager, neither of which exist in the bun:test
-// runtime, so we test it indirectly: `uploadAttachment` is the
-// non-RN-API surface and that's what we hit hardest. The
-// `requestAnimationFrame` / InteractionManager perf gating is a
-// runtime concern asserted via manual smoke + the iOS / Android
-// XCTest / instrumentation tests in sub-E / sub-F.
+// `captureScreenshot()` itself goes through the native module
+// (v0.7.3+) which doesn't exist in the bun:test runtime, so we
+// test it indirectly: `uploadAttachment` is the non-RN-API surface
+// and that's what we hit hardest. The native render + mask redaction
+// is exercised by the iOS XCTest / Android instrumentation tests.
 
 const origFetch = globalThis.fetch;
 afterEach(() => {

package/src/handlers/screenshot.ts

@@ -1,63 +1,32 @@
-// Phase 42 sub-D.03/04 — capture a screenshot of the current view tree
-// on `captureException`. Off-main-thread, best-effort, opt-in.
+// v0.7.3 — capture a screenshot of the current view tree on
+// `captureException`. Off-main-thread, best-effort, opt-in.
 //
-// Performance contract (sub-D.04):
-//   - Yield one paint via `requestAnimationFrame` before snapshotting
-//     so the screenshot reflects post-error UI state, not the frame
-//     that was already half-laid-out.
-//   - Capped output: 480 px on the longest edge, JPEG q=70. Typical
-//     payload 30-80 KB; multipart hard cap is 500 KB.
-//   - On any failure we silently return null. The error event still
-//     goes to the server; the user just doesn't see a thumbnail.
+// JS owns the registry of which regions to redact: the host app
+// passes a thunk via `sentori.registerMaskQuery(() => string[])` that
+// returns the `nativeID`s currently mounted as masked. We call it
+// once per capture and forward the list to the native module, which
+// renders the bitmap and paints black rectangles over the matching
+// subviews in a single pass.
 //
-// `react-native-view-shot` is an OPTIONAL peer. We `require()` it
-// lazily so apps that don't install it never pay the bundle cost
-// or fail at import time. Without it, `captureScreenshot()` returns
-// `null` immediately.
+// History: pre-v0.7.3 went through `react-native-view-shot` (peer
+// dep) and used a JS-side overlay-opacity trick (`<MaskRegion>` /
+// `setMaskedNode`) to hide PII before snapshotting. That design put
+// the SDK on the render path; a single SDK bug could break the host
+// app's UI. v0.7.3 cuts that coupling — the SDK no longer ships
+// React components, and the screenshot path runs entirely through
+// the native module already used for native-crash captures.
 //
-// 2026-05-15 — dropped `InteractionManager.runAfterInteractions`.
-// RN's docs mark `InteractionManager` as deprecated and recommend
-// `requestIdleCallback`, but `requestIdleCallback` doesn't actually
-// exist in RN (it's a web API), so the deprecation print is
-// unactionable for SDK consumers. The defensive "wait for the active
-// gesture batch to drain" semantics it provided is not reachable
-// from a screenshot triggered on captureException — by the time an
-// error fires, the user is between actions, not mid-gesture — so
-// removing it has no observable effect except silencing the warning.
-// The `requestAnimationFrame` calls below still guarantee one paint
-// commit before captureRef snapshots.
-
-import { engageMasks } from '../mask';
-
-type CaptureRef = (
-  // Phase 42: the lib accepts a React ref or — when we pass `undefined` —
-  // shoots the root window. We always go for the root (no per-component
-  // ref) so the screenshot lines up with what the user just saw.
-  refOrUndefined: undefined,
-  opts: {
-    format?: 'jpg' | 'png' | 'webm';
-    quality?: number;
-    result?: 'base64' | 'data-uri' | 'tmpfile';
-    width?: number;
-    height?: number;
-  },
-) => Promise<string>;
-
-type ViewShotModule = { captureRef?: CaptureRef; default?: { captureRef?: CaptureRef } };
-
-function loadCaptureRef(): CaptureRef | null {
-  try {
-    // eslint-disable-next-line @typescript-eslint/no-require-imports
-    const mod = require('react-native-view-shot') as ViewShotModule;
-    return mod.captureRef ?? mod.default?.captureRef ?? null;
-  } catch {
-    return null;
-  }
-}
+// Performance:
+//   - Yield one paint via `requestAnimationFrame` before the native
+//     call so post-error UI state has committed.
+//   - 480 px on the longest edge, JPEG q=70 (iOS) / WEBP_LOSSY q=70
+//     (Android 11+). Typical payload 30-80 KB; multipart hard cap
+//     is 500 KB.
+//   - On any failure we silently return null. The error event still
+//     goes to the server; the user just doesn't see a thumbnail.
 
-const MAX_LONG_EDGE_PX = 480;
-const WEBP_QUALITY = 0.7;
-const CAPTURE_TIMEOUT_MS = 1500;
+import { getRegisteredMaskQuery } from '../mask';
+import { captureNativeScreenshotWithMask } from '../native';
 
 /** What `captureScreenshot()` hands back when it succeeds. */
 export type ScreenshotBlob = {
@@ -67,74 +36,34 @@ export type ScreenshotBlob = {
 
 /**
  * Take one screenshot, yielding the JS thread first. Returns null on
- * any error (missing peer dep, native side refused, timeout, etc.).
- * Caller is responsible for opt-in checks (`config.screenshotsEnabled`).
+ * any error (no native module bound, native side refused, capture
+ * timed out, etc.). Caller is responsible for opt-in checks
+ * (`config.screenshotsEnabled`).
  */
 export async function captureScreenshot(): Promise<ScreenshotBlob | null> {
-  const captureRef = loadCaptureRef();
-  if (!captureRef) return null;
-
   // Yield one paint frame so the post-error UI has committed before
-  // we ask the OS to snapshot it. The previous
-  // `InteractionManager.runAfterInteractions` step was removed: see
-  // file header — its replacement (`requestIdleCallback`) doesn't
-  // exist in RN, and on captureException the user is between actions
-  // anyway, so the gesture-batch-drain semantics never came into
-  // play in practice.
-  await new Promise<void>((resolve) => {
-    requestAnimationFrame(() => resolve());
-  });
-
-  // Phase 48 sub-B — flip every registered MaskRegion overlay to
-  // opacity 1 (black covers the children) and every imperative
-  // setMaskedNode ref to opacity 0 (subtree disappears). Held for
-  // exactly one frame's worth of capture, then restored.
-  const restoreMasks = engageMasks();
-  // Yield one more frame so the overlay paint reaches the screen
-  // before captureRef snapshots. Without this the overlay opacity
-  // change is queued but the screenshotter may see the previous
-  // frame.
+  // we ask the OS to snapshot it.
   await new Promise<void>((resolve) => {
     requestAnimationFrame(() => resolve());
   });
 
-  try {
-    const base64 = await withTimeout(
-      captureRef(undefined, {
-        format: 'jpg',
-        quality: WEBP_QUALITY,
-        result: 'base64',
-        // Long-edge cap. RN view-shot scales preserving aspect ratio
-        // when only one dimension is set.
-        width: MAX_LONG_EDGE_PX,
-      }),
-      CAPTURE_TIMEOUT_MS,
-    );
-    restoreMasks();
-    if (!base64) return null;
-    // view-shot doesn't ship a WebP encoder on every RN version.
-    // JPEG q=70 fits the budget too (typical 40-100 KB) and every
-    // version handles it identically. We can swap to WebP once the
-    // RN minimum we support has it everywhere.
-    return { base64, mediaType: 'image/jpeg' };
-  } catch {
-    restoreMasks();
-    return null;
+  // Read the consumer-supplied mask query once per capture. If
+  // the host never called `registerMaskQuery`, no mask is applied
+  // and the full screenshot ships — sane default: SDK does nothing
+  // unless told to.
+  const query = getRegisteredMaskQuery();
+  let maskedIds: string[] = [];
+  if (query) {
+    try {
+      maskedIds = query();
+    } catch {
+      // A throwing query is the host's bug, not ours; skip mask
+      // rather than skip the screenshot.
+      maskedIds = [];
+    }
   }
-}
 
-function withTimeout<T>(p: Promise<T>, ms: number): Promise<T | null> {
-  return new Promise((resolve) => {
-    const t = setTimeout(() => resolve(null as unknown as T), ms);
-    p.then(
-      (v) => {
-        clearTimeout(t);
-        resolve(v);
-      },
-      () => {
-        clearTimeout(t);
-        resolve(null as unknown as T);
-      },
-    );
-  });
+  const result = await captureNativeScreenshotWithMask(maskedIds);
+  if (!result) return null;
+  return { base64: result.base64, mediaType: result.mediaType };
 }

package/src/index.ts

@@ -2,7 +2,7 @@ import { init } from './init';
 import { addBreadcrumb } from './breadcrumbs';
 import { setUser, getUser, captureError, captureException, captureStep } from './capture';
 import { ErrorBoundary } from './error-boundary';
-import { MaskRegion, setMaskedNode, unsetMaskedNode } from './mask';
+import { clearMaskQuery, registerMaskQuery } from './mask';
 import {
   endSession,
   markSessionCrashed,
@@ -18,9 +18,8 @@ export const sentori = {
   captureException,
   captureStep,
   ErrorBoundary,
-  MaskRegion,
-  setMaskedNode,
-  unsetMaskedNode,
+  registerMaskQuery,
+  clearMaskQuery,
   startSession,
   endSession,
   markSessionCrashed,
@@ -38,7 +37,7 @@ export {
   setUser,
 } from './capture';
 export { ErrorBoundary } from './error-boundary';
-export { MaskRegion, setMaskedNode, unsetMaskedNode } from './mask';
+export { clearMaskQuery, registerMaskQuery } from './mask';
 export {
   startAnrWatchdog,
   stopAnrWatchdog,

package/src/init.ts

@@ -33,10 +33,14 @@ export type InitOptions = {
      *  foreground (`AppState` → `active`), ends it on background.
      *  Drives crash-free rate. Set `false` to opt out. */
     sessions?: boolean;
-    /** Phase 42 sub-D.07: capture a screenshot of the current screen
-     *  on `captureException`. Opt-in — requires `react-native-view-shot`
-     *  installed and `<MaskRegion>` placed over any sensitive UI. The
-     *  image is webp q=70 480 px max, < 100 KB typical. */
+    /** Capture a screenshot of the current screen on
+     *  `captureException`. Opt-in. The capture runs through the
+     *  bundled native module — no extra peer dep required since
+     *  v0.7.3. To redact PII regions, register a mask query via
+     *  `sentori.registerMaskQuery(() => string[])` and put
+     *  `nativeID="..."` on the `<View>`s the SDK should black out.
+     *  The image is webp q=70 / jpeg q=70 at 480 px max, < 100 KB
+     *  typical. */
     screenshot?: boolean;
     /** Phase 46: record the last N steps (route changes, custom
      *  breadcrumbs) leading up to a crash. On `captureException`

package/src/mask.ts

@@ -0,0 +1,41 @@
+// v0.7.3 — mask discovery via consumer-supplied query callback.
+//
+// The SDK does not own a registry of masked regions. The host app
+// keeps its own (e.g. a `Set<string>` updated as `<Maskable>`
+// components mount/unmount) and hands the SDK a thunk that returns
+// the current list of native-IDs to redact. The SDK calls the thunk
+// once per screenshot capture — cheap, called rarely, only on error.
+//
+// Why this shape: a logging SDK should never live on the render
+// path. Earlier iterations exported `<MaskRegion>` (React component)
+// and `setMaskedNode` (imperative ref helper), which forced every
+// PII-bearing UI file to import from the SDK and put SDK bugs in
+// the user's render tree. This module is JS-only — no React, no JSX,
+// no native module touch — so swapping or removing the SDK doesn't
+// affect rendering.
+
+type MaskQuery = () => string[];
+
+let _query: MaskQuery | null = null;
+
+/**
+ * Register a callback the SDK calls right before each screenshot
+ * capture. Return the native-IDs (the `nativeID` prop on the RN
+ * `<View>`) that should be blacked-out in the captured image.
+ *
+ * Idempotent: a second call replaces the first. Pass `null` (or
+ * call `clearMaskQuery`) to detach.
+ */
+export function registerMaskQuery(query: MaskQuery): void {
+  _query = query;
+}
+
+/** Unregister. Mostly for tests / teardown. */
+export function clearMaskQuery(): void {
+  _query = null;
+}
+
+/** Internal — read by `handlers/screenshot.ts` at capture time. */
+export function getRegisteredMaskQuery(): MaskQuery | null {
+  return _query;
+}

package/src/native.ts

@@ -11,6 +11,18 @@ type SentoriNativeModule = {
     release: string
     token: string
   }) => void
+  /**
+   * v0.7.3 — JS-triggered screenshot with consumer-supplied mask IDs.
+   * `maskedIds` are RN `nativeID` strings; native walks the view
+   * tree, finds each subview by identifier, and paints a black
+   * rectangle over its frame in the captured bitmap. Resolves to
+   * `null` if there's no key window / API < 24 (Android) / render
+   * timed out. Replaced the previous `react-native-view-shot`
+   * peer-dep path.
+   */
+  captureScreenshotWithMask?: (
+    maskedIds: string[],
+  ) => Promise<null | { base64: string; mediaType: string }>
   /**
    * Phase 22 sub-D / sub-E: cross-platform main-thread watchdog.
    * Android: 5 s / 1 s defaults (matches the OS ANR threshold).
@@ -114,3 +126,26 @@ export function stopAnrWatchdog(): void {
     // ignore
   }
 }
+
+/**
+ * v0.7.3 — drives the native screenshot path. JS side passes the
+ * current list of mask `nativeID`s (read from the consumer's
+ * registered mask query); native renders + redacts.
+ *
+ * Returns `null` on every failure mode: no native module bound
+ * (jest, bun test, web), method missing (older native build still
+ * deployed), capture failed (no key window, timed out, etc.).
+ * Callers must treat `null` as "no screenshot this round" — the
+ * error event still ships, just without a thumbnail.
+ */
+export async function captureNativeScreenshotWithMask(
+  maskedIds: string[],
+): Promise<null | { base64: string; mediaType: string }> {
+  const n = native()
+  if (!n?.captureScreenshotWithMask) return null
+  try {
+    return await n.captureScreenshotWithMask(maskedIds)
+  } catch {
+    return null
+  }
+}