@reekon-tools/react-native-pdf-canvas 0.2.0 → 0.2.1

package/PdfCanvas.podspec

@@ -1,6 +1,7 @@
 require "json"
 
 package = JSON.parse(File.read(File.join(__dir__, "package.json")))
+pdfium = JSON.parse(File.read(File.join(__dir__, "scripts", "pdfium-manifest.json")))
 
 # FETCH PDFIUM WHILE THE PODSPEC IS EVALUATED.
 #
@@ -50,10 +51,17 @@ Pod::Spec.new do |s|
   s.authors      = { "REEKON Tools" => "hello@reekon.tools" }
   s.source       = { :git => "https://gitlab.com/reekon-tools/software/rock-pro/react-native-pdf-canvas.git", :tag => "#{s.version}" }
 
-  # 13.0 is the floor of the PDFium dylib bblanchon ships (MinimumOSVersion in
-  # the framework's Info.plist is written to match). Nothing in this pod needs
-  # anything newer.
-  s.platforms    = { :ios => "13.0" }
+  # THE FLOOR IS THE ENGINE'S, NOT OURS. Nothing this pod compiles needs anything
+  # newer than iOS 13, but the vendored PDFium dylib is built for whatever
+  # `ios_deployment_target` bblanchon used (17.0 since 2026-08-14), and that is
+  # what dyld enforces on the device and what App Store processing checks
+  # against the framework's Info.plist (ITMS-90208). The value is declared once
+  # in scripts/pdfium-manifest.json, verified against every slice's Mach-O by
+  # fetch-pdfium.mjs above, and written into the framework plist from the same
+  # field — so it is read here rather than restated. Declaring it as the pod's
+  # platform makes a host with a lower deployment target fail at `pod install`
+  # ("PdfCanvas does not support iOS 16.4") instead of at upload.
+  s.platforms    = { :ios => pdfium["iosMinimumOSVersion"] }
   s.requires_arc = true
 
   # THE CORE IS C++ AND SHARED WITH ANDROID: `native/core` is compiled into this

package/README.md

@@ -80,6 +80,11 @@ during CocoaPods podspec evaluation; Android retrieves it from a Gradle task. Ai
 may direct `PDFCANVAS_PDFIUM_CACHE` or `PDFCANVAS_PDFIUM_MIRROR` at a local copy, which is still
 verified against the manifest.
 
+The prebuilt engine sets the native floors: **iOS 17.0** (`iosMinimumOSVersion` in the manifest,
+declared by the pod and checked against the dylib at fetch time) and **Android API 24**. A host app
+with a lower iOS deployment target fails at `pod install`; raise the target rather than the
+framework's plist, since the dylib will not load on older systems either.
+
 ## Installation
 
 ```sh

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reekon-tools/react-native-pdf-canvas",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "PDF pages as Skia images, drawn at exact doc-space rects inside somebody else's transform. One PDFium engine on iOS, Android and web. Owns no canvas, no gestures, no viewport state.",
   "author": "REEKON Tools",
   "license": "Apache-2.0",

package/scripts/fetch-pdfium.mjs

@@ -283,13 +283,56 @@ async function android() {
  * ios
  * ------------------------------------------------------------------ */
 
+/**
+ * The minimum iOS version a Mach-O was built for, read from its LC_BUILD_VERSION
+ * (`minos`) via `vtool`. A fat binary prints one block per architecture; every
+ * slice must agree or the number is meaningless, so disagreement is an error.
+ *
+ * THIS IS THE FLOOR, NOT A GUESS. App Store processing compares the
+ * `MinimumOSVersion` a framework's Info.plist declares against what its binary
+ * was actually built for and rejects the upload (ITMS-90208) when the plist
+ * claims a lower floor. The first PDFium release of this package hardcoded
+ * 13.0 — a number inherited from the CoreGraphics era and from the upstream
+ * xcframework script this mirrors — while the dylib said 17.0, and the very
+ * first TestFlight upload was rejected. The plist is now written from the
+ * binary, and the manifest's declared value is checked against it, so the two
+ * cannot drift apart again.
+ */
+function machOMinimumOS(binary) {
+  const text = execFileSync('xcrun', ['vtool', '-show-build', binary], {
+    encoding: 'utf8',
+  });
+  const found = new Set();
+  for (const line of text.split('\n')) {
+    const m = /^\s*minos\s+(\d+(?:\.\d+)*)\s*$/.exec(line);
+    if (m) found.add(m[1]);
+  }
+  if (found.size === 0) {
+    throw new Error(
+      `${binary} has no LC_BUILD_VERSION minos; cannot determine its iOS floor.`,
+    );
+  }
+  if (found.size > 1) {
+    throw new Error(
+      `${binary} slices disagree about their iOS floor: ${[...found].join(', ')}.`,
+    );
+  }
+  return [...found][0];
+}
+
 /**
  * Wraps a bare dylib as an iOS `PDFium.framework` (shallow bundle) so it can be
  * embedded and code-signed like any other framework. Mirrors what
  * espresso3389/pdfium-xcframework's build.sh does, minus the macOS/Catalyst
  * slices this package does not ship.
  */
-function makeIosFramework(dylib, frameworkDir, headersDir, platform) {
+function makeIosFramework(
+  dylib,
+  frameworkDir,
+  headersDir,
+  platform,
+  minimumOSVersion,
+) {
   resetDir(frameworkDir);
   const binary = join(frameworkDir, 'PDFium');
   cpSync(dylib, binary);
@@ -328,7 +371,7 @@ function makeIosFramework(dylib, frameworkDir, headersDir, platform) {
     <string>${platform}</string>
   </array>
   <key>MinimumOSVersion</key>
-  <string>13.0</string>
+  <string>${minimumOSVersion}</string>
 </dict>
 </plist>
 `,
@@ -343,7 +386,18 @@ async function ios() {
     );
   }
   const out = join(outputRoot, 'ios');
-  const key = manifest.release;
+  const declaredMinOS = manifest.iosMinimumOSVersion;
+  if (
+    typeof declaredMinOS !== 'string' ||
+    !/^\d+(\.\d+)*$/.test(declaredMinOS)
+  ) {
+    throw new Error(
+      'pdfium-manifest.json must declare iosMinimumOSVersion (e.g. "17.0").',
+    );
+  }
+  // The floor is part of the stamp so an output assembled by an older script
+  // (which wrote a hardcoded plist) is rebuilt rather than trusted.
+  const key = `${manifest.release} ios-min=${declaredMinOS}`;
   if (isFresh(out, key)) {
     console.log(`[pdfium] ios: ${manifest.release} already present`);
     return;
@@ -362,6 +416,22 @@ async function ios() {
     extract(await fetchArtifact(name), dir);
     slices[name] = dir;
   }
+  // Every slice must have been built for the floor the manifest declares. A
+  // mismatch means the release was bumped without re-reading its args.gn: fix the
+  // manifest (and tell every consumer, whose deployment target must be >= it).
+  for (const name of Object.keys(slices)) {
+    const actual = machOMinimumOS(join(slices[name], 'lib', 'libpdfium.dylib'));
+    if (actual !== declaredMinOS) {
+      throw new Error(
+        `${name} in ${manifest.release} was built for iOS ${actual}, but ` +
+          `pdfium-manifest.json declares iosMinimumOSVersion "${declaredMinOS}". ` +
+          'Update the manifest to the real floor; consumers must raise their ' +
+          'deployment target to match before they can ship this release.',
+      );
+    }
+  }
+  console.log(`[pdfium] ios: every slice is built for iOS ${declaredMinOS}`);
+
   copyHeaders(
     join(slices['ios-device-arm64'], 'include'),
     join(out, 'include'),
@@ -393,12 +463,14 @@ async function ios() {
     deviceFramework,
     join(out, 'include'),
     'iPhoneOS',
+    declaredMinOS,
   );
   makeIosFramework(
     simulatorFat,
     simulatorFramework,
     join(out, 'include'),
     'iPhoneSimulator',
+    declaredMinOS,
   );
 
   const xcframework = join(out, 'PDFium.xcframework');

package/scripts/pdfium-manifest.json

@@ -3,6 +3,8 @@
   "release": "chromium/8044",
   "version": "144.0.8044.0",
   "baseUrl": "https://github.com/bblanchon/pdfium-binaries/releases/download",
+  "//iosMinimumOSVersion": "THE iOS FLOOR THIS RELEASE'S DYLIB WAS BUILT FOR (`ios_deployment_target` in the tarball's args.gn, `minos` in the Mach-O LC_BUILD_VERSION). It is declared here, not discovered, so that bumping the release forces whoever bumps it to look: fetch-pdfium.mjs reads the real value out of every iOS slice with `vtool` and refuses to assemble the framework if any slice disagrees with this line. The same value is written into PDFium.framework/Info.plist as MinimumOSVersion — App Store processing rejects a framework whose plist claims a lower floor than its binary (ITMS-90208) — and is the floor PdfCanvas.podspec declares, so a host app whose deployment target is lower fails at `pod install` with a CocoaPods platform error instead of at upload. bblanchon pins 17.0 for non-V8 builds since 2026-08-14; before that the floor tracked Chromium's default and was never below 17.4 in 2025-2026. A host that must ship below this value needs a PDFium built with a lower ios_deployment_target, not a smaller number here.",
+  "iosMinimumOSVersion": "17.0",
   "//artifacts": "Keyed by the bblanchon artifact name minus the `pdfium-` prefix and `.tgz` suffix. The android/ios/mac/win/linux entries are the plain (non-V8, non-XFA) builds: this package runs no JavaScript inside a PDF and XFA forms are out of scope, and the V8 builds are ~4x the size for nothing.",
   "artifacts": {
     "android-arm": {