@onekeyfe/react-native-sni-connect 3.0.71 → 3.0.73

package/README.md

@@ -14,7 +14,21 @@ This package is published as part of the OneKey `app-modules` workspace:
 yarn add @onekeyfe/react-native-sni-connect
 ```
 
-iOS: run `pod install`. Android autolinks.
+iOS: add Aliyun's spec repo and make `EMASCurl` modular in your app Podfile,
+then run `pod install`:
+
+```ruby
+source 'https://github.com/CocoaPods/Specs.git'
+source 'https://github.com/aliyun/aliyun-specs.git'
+
+target 'YourApp' do
+  # React Native autolinks SniConnect. This explicit pod keeps Swift
+  # `import EMASCurl` visible when building static libraries.
+  pod 'EMASCurl', :modular_headers => true
+end
+```
+
+Android autolinks.
 
 ## Usage
 
@@ -24,8 +38,15 @@ import {
   cancelRequest,
   cancelAllRequests,
   clearDNSCache,
+  isProxyActiveForUrl,
 } from '@onekeyfe/react-native-sni-connect';
 
+const proxyActive = await isProxyActiveForUrl('https://example.com/api/v1/ping');
+if (proxyActive) {
+  // Product adapters should avoid entering SNI mode when a per-URL/system proxy
+  // is active. Low-level SNI requests still bypass proxies directly.
+}
+
 const res = await request({
   // requestId is optional; required only if you want to cancel the request.
   requestId: 'health-check-1',
@@ -47,9 +68,31 @@ await cancelAllRequests();
 await clearDNSCache();
 ```
 
+`multiValueHeaders` preserves repeated response headers when the native transport
+exposes them as raw entries. On iOS, EMASCurl 1.5.5 currently hands this module a
+`HTTPURLResponse` dictionary view, so duplicate header names may already be
+collapsed by the transport before this adapter can observe them. Full duplicate
+header preservation on iOS requires an EMASCurl version that exposes the raw
+response header list.
+
+## Specification
+
+The behavior of the SNI connect module is governed by a normative,
+platform-agnostic standard that all implementations (iOS, Android, Node/Desktop,
+shared JS adapters, and any future platform) must conform to:
+
+**-> [OneKey SNI Connect Standard (OSCS)](./SPEC.md)**
+
+Any change to request validation, destination pinning, TLS validation, redirect
+handling, cancellation, response shape, or cache behavior must be checked
+against OSCS.
+When an implementation and the standard disagree, the implementation is wrong.
+
 ### Security notes
 
 - The request scheme is always `https` on port `443`; `path` cannot override scheme, host or port.
+- `isProxyActiveForUrl(url)` is a preflight probe for adapters. It does not enable proxying;
+  native SNI transport still bypasses system proxy configuration.
 - `ip` must be an IPv4/IPv6 literal that routes to a public destination; loopback, private,
   link-local (incl. cloud metadata), CGNAT, multicast and reserved ranges are rejected.
 - Header names/values containing CR/LF/control characters are rejected; the `Host` header is

package/SniConnect.podspec

@@ -16,8 +16,8 @@ Pod::Spec.new do |s|
   s.static_framework = true
 
   s.source_files = [
-    "ios/**/*.{swift}",
-    "ios/**/*.{m,mm}"
+    "ios/*.{swift}",
+    "ios/*.{m,mm}"
   ]
 
   s.dependency 'React-Core'

package/android/build.gradle

@@ -65,4 +65,5 @@ dependencies {
   implementation "com.facebook.react:react-android"
   implementation "org.jetbrains.kotlin:kotlin-stdlib:$kotlin_version"
   implementation "com.squareup.okhttp3:okhttp:4.12.0"
+  testImplementation "junit:junit:4.13.2"
 }

package/android/src/main/java/com/sniconnect/SniConnectLogger.kt

@@ -40,6 +40,26 @@ internal object SniConnectLogger {
   @JvmStatic
   fun error(message: String) = log("error", message, android.util.Log.ERROR)
 
+  fun event(name: String, vararg fields: Pair<String, Any?>): String =
+    (listOf("event" to name) + fields).joinToString(separator = " ") { (key, value) ->
+      "$key=${sanitize(value)}"
+    }
+
+  fun shortHash(value: String?): String {
+    if (value.isNullOrEmpty()) return "none"
+    var hash = 0xcbf29ce484222325UL
+    value.encodeToByteArray().forEach { byte ->
+      hash = hash xor byte.toUByte().toULong()
+      hash *= 0x100000001b3UL
+    }
+    return hash.toString(16).padStart(16, '0').take(12)
+  }
+
+  fun elapsedMs(startedAtMs: Long): Long =
+    (android.os.SystemClock.elapsedRealtime() - startedAtMs).coerceAtLeast(0)
+
+  fun ipFamily(ip: String): String = if (ip.contains(":")) "ipv6" else "ipv4"
+
   private fun log(level: String, message: String, androidLogLevel: Int) {
     val method = methods?.get(level)
     if (method != null) {
@@ -50,6 +70,17 @@ internal object SniConnectLogger {
         // Fall through to android.util.Log
       }
     }
-    android.util.Log.println(androidLogLevel, TAG, message)
+    try {
+      android.util.Log.println(androidLogLevel, TAG, message)
+    } catch (_: RuntimeException) {
+      // Android JVM unit tests do not mock android.util.Log.
+    }
   }
+
+  private fun sanitize(value: Any?): String =
+    value?.toString()
+      ?.replace('\n', '_')
+      ?.replace('\r', '_')
+      ?.replace(' ', '_')
+      ?: "none"
 }