@layers/amba-react-native 4.3.0 → 4.3.1

package/README.md

@@ -16,6 +16,8 @@ npm install @layers/amba-react-native @react-native-async-storage/async-storage
 npx expo install @layers/amba-react-native @react-native-async-storage/async-storage
 ```
 
+The SDK installs a secure `crypto.getRandomValues` for you through `react-native-get-random-values`, one of its dependencies; no import is needed. Bare React Native (and Expo SDK 50 to 53 builds) link only the native modules listed in your app's `package.json`, so add it there too (`npm install react-native-get-random-values`, then `npx pod-install`). Expo Go and Expo SDK 54+ builds need nothing.
+
 ## Configure + first call
 
 ```tsx

package/dist/index.cjs

@@ -504,17 +504,71 @@ function mapHttpError(response, rawBody, isJson) {
 	}
 }
 
+//#endregion
+//#region src/secure-random.ts
+/**
+* The production loader. The `require` call must stay a string literal; see
+* the module comment.
+*/
+function loadGetRandomValuesPolyfill() {
+	require("react-native-get-random-values");
+}
+function globalObject() {
+	return globalThis;
+}
+function currentGetRandomValues() {
+	const crypto = globalObject().crypto;
+	const grv = crypto?.getRandomValues;
+	return crypto && typeof grv === "function" ? grv : null;
+}
+function probe(grv) {
+	try {
+		const crypto = globalObject().crypto;
+		return grv.call(crypto, new Uint8Array(1)) instanceof Uint8Array;
+	} catch {
+		return false;
+	}
+}
+let attempted = false;
+/**
+* Makes `globalThis.crypto.getRandomValues` available when the runtime can
+* supply a secure one. Returns whether it is available afterwards.
+*
+* The polyfill is loaded at most once per JS runtime. A later call still
+* reports true when the app installs a secure implementation itself.
+*/
+function ensureSecureRandom(load = loadGetRandomValuesPolyfill) {
+	if (currentGetRandomValues()) return true;
+	if (attempted) return false;
+	attempted = true;
+	const g = globalObject();
+	const hadCrypto = Object.prototype.hasOwnProperty.call(g, "crypto");
+	const priorCrypto = g.crypto;
+	try {
+		load();
+	} catch {}
+	const installed = currentGetRandomValues();
+	if (installed && probe(installed)) return true;
+	try {
+		if (!hadCrypto) delete g.crypto;
+		else if (g.crypto === priorCrypto && priorCrypto) delete priorCrypto.getRandomValues;
+		else g.crypto = priorCrypto;
+	} catch {}
+	return false;
+}
+
 //#endregion
 //#region src/uuid.ts
 /** Thrown when the runtime has no `crypto.getRandomValues`. */
 var SecureRandomUnavailableError = class extends Error {
 	code = "SECURE_RANDOM_UNAVAILABLE";
 	constructor() {
-		super("Amba needs crypto.getRandomValues to generate identifiers, and this runtime does not provide it. Install react-native-get-random-values and import it on the first line of your app's entry file, before any Amba import: import 'react-native-get-random-values';");
+		super("Amba needs crypto.getRandomValues to generate identifiers, and this runtime does not provide it. The SDK loads react-native-get-random-values for you, and its native module is missing from this build. Add the package to your app's package.json so the native module is linked (Expo: `npx expo install react-native-get-random-values`; bare React Native: `npm install react-native-get-random-values`, then `npx pod-install`) and rebuild the native app. No import is needed.");
 		this.name = "SecureRandomUnavailableError";
 	}
 };
 function secureGetRandomValues() {
+	ensureSecureRandom();
 	const crypto = globalThis.crypto;
 	const grv = crypto?.getRandomValues;
 	if (!crypto || typeof grv !== "function") throw new SecureRandomUnavailableError();
@@ -3063,7 +3117,7 @@ function delay(ms) {
 //#endregion
 //#region src/index.ts
 /** SDK semver — burned in at build time. Bump alongside package.json. */
-const SDK_VERSION = "4.3.0";
+const SDK_VERSION = "4.3.1";
 /** The most events held at once; the oldest goes first past it. */
 const MAX_HELD_EVENTS = 500;
 /**