@rs-native-kit/version-check 0.1.2

package/android/src/main/java/com/rsnativekit/versioncheck/VersionCheckPackage.kt

@@ -0,0 +1,31 @@
+package com.rsnativekit.versioncheck
+
+import com.facebook.react.BaseReactPackage
+import com.facebook.react.bridge.NativeModule
+import com.facebook.react.bridge.ReactApplicationContext
+import com.facebook.react.module.model.ReactModuleInfo
+import com.facebook.react.module.model.ReactModuleInfoProvider
+import java.util.HashMap
+
+class VersionCheckPackage : BaseReactPackage() {
+  override fun getModule(name: String, reactContext: ReactApplicationContext): NativeModule? {
+    return if (name == VersionCheckModule.NAME) {
+      VersionCheckModule(reactContext)
+    } else {
+      null
+    }
+  }
+
+  override fun getReactModuleInfoProvider() = ReactModuleInfoProvider {
+    mapOf(
+      VersionCheckModule.NAME to ReactModuleInfo(
+        name = VersionCheckModule.NAME,
+        className = VersionCheckModule.NAME,
+        canOverrideExistingModule = false,
+        needsEagerInit = false,
+        isCxxModule = false,
+        isTurboModule = true
+      )
+    )
+  }
+}

package/android/src/main/java/com/rsnativekit/versioncheck/VersionCheckWorker.kt

@@ -0,0 +1,29 @@
+package com.rsnativekit.versioncheck
+
+import android.content.Context
+import android.content.Intent
+import androidx.work.Worker
+import androidx.work.WorkerParameters
+import com.facebook.react.HeadlessJsTaskService
+
+/**
+ * WorkManager Worker enqueued by VersionCheckModule.scheduleBackgroundCheck(). Runs on
+ * WorkManager's background thread pool (never the JS thread — doc 01 §10); its only job
+ * is to wake the headless JS task, which does the actual checkForUpdates() call in JS
+ * (business logic stays in the domain layer, per doc 01 §1.1 — native code never
+ * reimplements it).
+ */
+class VersionCheckWorker(context: Context, params: WorkerParameters) :
+  Worker(context, params) {
+
+  override fun doWork(): Result {
+    return try {
+      val intent = Intent(applicationContext, VersionCheckHeadlessTaskService::class.java)
+      HeadlessJsTaskService.acquireWakeLockNow(applicationContext)
+      applicationContext.startService(intent)
+      Result.success()
+    } catch (error: Exception) {
+      Result.retry()
+    }
+  }
+}

package/ios/PlatformBridge/Ed25519Verifier.swift

@@ -0,0 +1,19 @@
+import CryptoKit
+import Foundation
+
+/// Doc 03 §3.4 — Ed25519 signature verification using CryptoKit exclusively (Prompt 1
+/// §9.3: OS-provided cryptography only, no third-party crypto library). CryptoKit's
+/// `Curve25519.Signing` API is Swift-only, so this small `@objc`-exposed wrapper is what
+/// lets `ios/VersionCheck.mm` (Obj-C++) call into it via CocoaPods' auto-generated
+/// `VersionCheck-Swift.h` header — a standard mixed-language-pod interop pattern that
+/// requires no manual bridging header (bridging headers are only needed for an app
+/// target calling into Swift; for a pod, `DEFINES_MODULE` + the generated `-Swift.h`
+/// header handles it automatically once a Swift file is present in `s.source_files`).
+@objc public class Ed25519Verifier: NSObject {
+  @objc public static func verify(publicKey: Data, message: Data, signature: Data) -> Bool {
+    guard let key = try? Curve25519.Signing.PublicKey(rawRepresentation: publicKey) else {
+      return false
+    }
+    return key.isValidSignature(signature, for: message)
+  }
+}

package/ios/VersionCheck.h

@@ -0,0 +1,5 @@
+#import <VersionCheckSpec/VersionCheckSpec.h>
+
+@interface VersionCheck : NSObject <NativeVersionCheckSpec>
+
+@end

package/ios/VersionCheck.mm

@@ -0,0 +1,278 @@
+#import "VersionCheck.h"
+#import <CommonCrypto/CommonHMAC.h>
+#import <BackgroundTasks/BackgroundTasks.h>
+#import <Foundation/Foundation.h>
+#import <Security/Security.h>
+#import <UIKit/UIKit.h>
+#import <sys/utsname.h>
+
+#if __has_include("VersionCheck-Swift.h")
+#import "VersionCheck-Swift.h"
+#endif
+
+static NSString *const kVersionCheckKeychainService = @"com.rsnativekit.versioncheck";
+
+@implementation VersionCheck
+
+#pragma mark - App info
+
+- (void)getCurrentAppVersion:(RCTPromiseResolveBlock)resolve
+                      reject:(RCTPromiseRejectBlock)reject
+{
+    NSString *version = [[NSBundle mainBundle] objectForInfoDictionaryKey:@"CFBundleShortVersionString"];
+    resolve(version ?: @"");
+}
+
+- (void)getBuildNumber:(RCTPromiseResolveBlock)resolve
+                reject:(RCTPromiseRejectBlock)reject
+{
+    NSString *build = [[NSBundle mainBundle] objectForInfoDictionaryKey:@"CFBundleVersion"];
+    resolve(build ?: @"");
+}
+
+- (void)getBundleId:(RCTPromiseResolveBlock)resolve
+             reject:(RCTPromiseRejectBlock)reject
+{
+    resolve([[NSBundle mainBundle] bundleIdentifier] ?: @"");
+}
+
+#pragma mark - Device info
+
+- (void)getOsVersion:(RCTPromiseResolveBlock)resolve
+              reject:(RCTPromiseRejectBlock)reject
+{
+    resolve([[UIDevice currentDevice] systemVersion]);
+}
+
+- (void)getDeviceModel:(RCTPromiseResolveBlock)resolve
+                reject:(RCTPromiseRejectBlock)reject
+{
+    struct utsname systemInfo;
+    uname(&systemInfo);
+    NSString *identifier = [NSString stringWithCString:systemInfo.machine encoding:NSUTF8StringEncoding];
+    resolve(identifier ?: [[UIDevice currentDevice] model]);
+}
+
+- (void)getLocale:(RCTPromiseResolveBlock)resolve
+           reject:(RCTPromiseRejectBlock)reject
+{
+    resolve([[NSLocale currentLocale] localeIdentifier]);
+}
+
+#pragma mark - Key-value storage (UserDefaults)
+
+- (void)storageGet:(NSString *)key
+           resolve:(RCTPromiseResolveBlock)resolve
+            reject:(RCTPromiseRejectBlock)reject
+{
+    NSString *value = [[NSUserDefaults standardUserDefaults] stringForKey:key];
+    resolve(value ?: [NSNull null]);
+}
+
+- (void)storageSet:(NSString *)key
+             value:(NSString *)value
+           resolve:(RCTPromiseResolveBlock)resolve
+            reject:(RCTPromiseRejectBlock)reject
+{
+    [[NSUserDefaults standardUserDefaults] setObject:value forKey:key];
+    resolve(nil);
+}
+
+- (void)storageRemove:(NSString *)key
+              resolve:(RCTPromiseResolveBlock)resolve
+               reject:(RCTPromiseRejectBlock)reject
+{
+    [[NSUserDefaults standardUserDefaults] removeObjectForKey:key];
+    resolve(nil);
+}
+
+#pragma mark - Secure storage (Keychain)
+
+- (NSMutableDictionary *)keychainQueryForKey:(NSString *)key
+{
+    return [@{
+        (__bridge id)kSecClass: (__bridge id)kSecClassGenericPassword,
+        (__bridge id)kSecAttrService: kVersionCheckKeychainService,
+        (__bridge id)kSecAttrAccount: key,
+    } mutableCopy];
+}
+
+- (void)secureStorageGet:(NSString *)key
+                 resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject
+{
+    NSMutableDictionary *query = [self keychainQueryForKey:key];
+    query[(__bridge id)kSecReturnData] = @YES;
+    query[(__bridge id)kSecMatchLimit] = (__bridge id)kSecMatchLimitOne;
+
+    CFTypeRef result = NULL;
+    OSStatus status = SecItemCopyMatching((__bridge CFDictionaryRef)query, &result);
+    if (status == errSecSuccess) {
+        NSData *data = (__bridge_transfer NSData *)result;
+        NSString *value = [[NSString alloc] initWithData:data encoding:NSUTF8StringEncoding];
+        resolve(value ?: [NSNull null]);
+    } else if (status == errSecItemNotFound) {
+        resolve([NSNull null]);
+    } else {
+        reject(@"secure_storage_get_failed", @"Keychain read failed", nil);
+    }
+}
+
+- (void)secureStorageSet:(NSString *)key
+                   value:(NSString *)value
+                 resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject
+{
+    NSData *data = [value dataUsingEncoding:NSUTF8StringEncoding];
+    NSMutableDictionary *query = [self keychainQueryForKey:key];
+
+    // Overwrite semantics: delete any existing item before adding, since SecItemUpdate
+    // requires a separate attributes dictionary and delete+add is simpler/safer here.
+    SecItemDelete((__bridge CFDictionaryRef)query);
+    query[(__bridge id)kSecValueData] = data;
+    query[(__bridge id)kSecAttrAccessible] = (__bridge id)kSecAttrAccessibleAfterFirstUnlock;
+
+    OSStatus status = SecItemAdd((__bridge CFDictionaryRef)query, NULL);
+    if (status == errSecSuccess) {
+        resolve(nil);
+    } else {
+        reject(@"secure_storage_set_failed", @"Keychain write failed", nil);
+    }
+}
+
+- (void)secureStorageRemove:(NSString *)key
+                    resolve:(RCTPromiseResolveBlock)resolve
+                     reject:(RCTPromiseRejectBlock)reject
+{
+    NSMutableDictionary *query = [self keychainQueryForKey:key];
+    SecItemDelete((__bridge CFDictionaryRef)query);
+    resolve(nil);
+}
+
+#pragma mark - Signature verification (doc 03 §3.4)
+
+// Trusted key material is embedded at build time via Info.plist ("VMTrustedSigningKeys",
+// a dictionary mapping keyId -> base64 key material) rather than shipped from JS, per
+// §3.4's "embedded at build time, not hardcoded in the JS bundle" requirement. Host apps
+// add this key to their own Info.plist; if absent, verification fails closed.
+- (NSData *)resolveKeyMaterial:(NSString *)keyId
+{
+    NSDictionary *keys = [[NSBundle mainBundle] objectForInfoDictionaryKey:@"VMTrustedSigningKeys"];
+    NSString *base64 = keys[keyId];
+    if (![base64 isKindOfClass:[NSString class]]) return nil;
+    return [[NSData alloc] initWithBase64EncodedString:base64 options:0];
+}
+
+- (void)verifyEd25519:(NSString *)keyId
+        messageBase64:(NSString *)messageBase64
+      signatureBase64:(NSString *)signatureBase64
+              resolve:(RCTPromiseResolveBlock)resolve
+               reject:(RCTPromiseRejectBlock)reject
+{
+    NSData *keyMaterial = [self resolveKeyMaterial:keyId];
+    NSData *message = [[NSData alloc] initWithBase64EncodedString:messageBase64 options:0];
+    NSData *signature = [[NSData alloc] initWithBase64EncodedString:signatureBase64 options:0];
+    if (!keyMaterial || !message || !signature) {
+        resolve(@NO);
+        return;
+    }
+#if __has_include("VersionCheck-Swift.h")
+    // CryptoKit's Curve25519 API is Swift-only — bridged via Ed25519Verifier.swift,
+    // exposed to this Obj-C++ file through CocoaPods' auto-generated -Swift.h header
+    // (standard mixed-language-pod interop; no manual bridging header required).
+    BOOL valid = [Ed25519Verifier verifyWithPublicKey:keyMaterial message:message signature:signature];
+    resolve(@(valid));
+#else
+    reject(@"verify_ed25519_unavailable",
+           @"Ed25519Verifier.swift was not compiled into this pod — Ed25519 verification is unavailable on this build",
+           nil);
+#endif
+}
+
+- (void)verifyHmacSha256:(NSString *)keyId
+            messageBase64:(NSString *)messageBase64
+                 macBase64:(NSString *)macBase64
+                   resolve:(RCTPromiseResolveBlock)resolve
+                    reject:(RCTPromiseRejectBlock)reject
+{
+    NSData *keyMaterial = [self resolveKeyMaterial:keyId];
+    NSData *message = [[NSData alloc] initWithBase64EncodedString:messageBase64 options:0];
+    NSData *expectedMac = [[NSData alloc] initWithBase64EncodedString:macBase64 options:0];
+    if (!keyMaterial || !message || !expectedMac) {
+        resolve(@NO);
+        return;
+    }
+
+    unsigned char computed[CC_SHA256_DIGEST_LENGTH];
+    CCHmac(kCCHmacAlgSHA256, keyMaterial.bytes, keyMaterial.length, message.bytes, message.length, computed);
+
+    if (expectedMac.length != CC_SHA256_DIGEST_LENGTH) {
+        resolve(@NO);
+        return;
+    }
+    // Constant-time comparison.
+    const unsigned char *expectedBytes = (const unsigned char *)expectedMac.bytes;
+    unsigned char diff = 0;
+    for (NSUInteger i = 0; i < CC_SHA256_DIGEST_LENGTH; i++) {
+        diff |= computed[i] ^ expectedBytes[i];
+    }
+    resolve(@(diff == 0));
+}
+
+#pragma mark - Background scheduling (doc 01 §4.1 "scheduler" row)
+
+// BGTaskScheduler requires the host app to declare the task identifier in Info.plist
+// (`BGTaskSchedulerPermittedIdentifiers`) and enable the "Background Modes > Background
+// processing" capability — standard BGTaskScheduler integration any RN library using it
+// requires (this library cannot inject those into a consumer's Info.plist itself). The
+// scheduled task, once the OS runs it, starts a background URLSession-driven check;
+// full headless-JS-on-cold-launch parity with Android's WorkManager path is not
+// implemented in this pass — while the app process is alive this still lets iOS wake it
+// periodically to call into the already-running JS runtime via the task handler below.
+
+static NSString *const kVersionCheckBGTaskIdentifier = @"com.rsnativekit.versioncheck.refresh";
+
+- (void)scheduleBackgroundCheck:(NSString *)taskId
+                  minIntervalMs:(double)minIntervalMs
+                        resolve:(RCTPromiseResolveBlock)resolve
+                         reject:(RCTPromiseRejectBlock)reject
+{
+    if (@available(iOS 13.0, *)) {
+        BGAppRefreshTaskRequest *request = [[BGAppRefreshTaskRequest alloc] initWithIdentifier:kVersionCheckBGTaskIdentifier];
+        request.earliestBeginDate = [NSDate dateWithTimeIntervalSinceNow:(minIntervalMs / 1000.0)];
+        NSError *error = nil;
+        BOOL submitted = [[BGTaskScheduler sharedScheduler] submitTaskRequest:request error:&error];
+        if (!submitted) {
+            reject(@"schedule_background_check_failed", error.localizedDescription ?: @"BGTaskScheduler submission failed — verify BGTaskSchedulerPermittedIdentifiers in Info.plist", error);
+            return;
+        }
+        resolve(nil);
+    } else {
+        reject(@"schedule_background_check_unavailable", @"BGTaskScheduler requires iOS 13+", nil);
+    }
+}
+
+- (void)cancelBackgroundCheck:(NSString *)taskId
+                       resolve:(RCTPromiseResolveBlock)resolve
+                        reject:(RCTPromiseRejectBlock)reject
+{
+    if (@available(iOS 13.0, *)) {
+        [[BGTaskScheduler sharedScheduler] cancelTaskRequestWithIdentifier:kVersionCheckBGTaskIdentifier];
+    }
+    resolve(nil);
+}
+
+#pragma mark - TurboModule plumbing
+
+- (std::shared_ptr<facebook::react::TurboModule>)getTurboModule:
+    (const facebook::react::ObjCTurboModule::InitParams &)params
+{
+    return std::make_shared<facebook::react::NativeVersionCheckSpecJSI>(params);
+}
+
++ (NSString *)moduleName
+{
+  return @"VersionCheck";
+}
+
+@end

package/lib/module/data/cache/MemoryCacheStore.js

@@ -0,0 +1,30 @@
+"use strict";
+
+export class MemoryCacheStore {
+  entries = new Map();
+  constructor(clock, defaultTtlMs) {
+    this.clock = clock;
+    this.defaultTtlMs = defaultTtlMs;
+  }
+  async get(key) {
+    const entry = this.entries.get(key);
+    if (!entry) return null;
+    if (entry.expiresAt !== null && this.clock.now() > entry.expiresAt) {
+      this.entries.delete(key);
+      return null;
+    }
+    return entry.value;
+  }
+  async set(key, value, ttlMs) {
+    const ttl = ttlMs ?? this.defaultTtlMs;
+    const expiresAt = ttl > 0 ? this.clock.now() + ttl : null;
+    this.entries.set(key, {
+      value,
+      expiresAt
+    });
+  }
+  async invalidate(key) {
+    this.entries.delete(key);
+  }
+}
+//# sourceMappingURL=MemoryCacheStore.js.map

package/lib/module/data/cache/MemoryCacheStore.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["MemoryCacheStore","entries","Map","constructor","clock","defaultTtlMs","get","key","entry","expiresAt","now","delete","value","set","ttlMs","ttl","invalidate"],"sourceRoot":"../../../../src","sources":["data/cache/MemoryCacheStore.ts"],"mappings":";;AAQA,OAAO,MAAMA,gBAAgB,CAA8B;EACxCC,OAAO,GAAG,IAAIC,GAAG,CAAmB,CAAC;EAEtDC,WAAWA,CACQC,KAAa,EACbC,YAAoB,EACrC;IAAA,KAFiBD,KAAa,GAAbA,KAAa;IAAA,KACbC,YAAoB,GAApBA,YAAoB;EACpC;EAEH,MAAMC,GAAGA,CAACC,GAAW,EAAqB;IACxC,MAAMC,KAAK,GAAG,IAAI,CAACP,OAAO,CAACK,GAAG,CAACC,GAAG,CAAC;IACnC,IAAI,CAACC,KAAK,EAAE,OAAO,IAAI;IACvB,IAAIA,KAAK,CAACC,SAAS,KAAK,IAAI,IAAI,IAAI,CAACL,KAAK,CAACM,GAAG,CAAC,CAAC,GAAGF,KAAK,CAACC,SAAS,EAAE;MAClE,IAAI,CAACR,OAAO,CAACU,MAAM,CAACJ,GAAG,CAAC;MACxB,OAAO,IAAI;IACb;IACA,OAAOC,KAAK,CAACI,KAAK;EACpB;EAEA,MAAMC,GAAGA,CAACN,GAAW,EAAEK,KAAQ,EAAEE,KAAc,EAAiB;IAC9D,MAAMC,GAAG,GAAGD,KAAK,IAAI,IAAI,CAACT,YAAY;IACtC,MAAMI,SAAS,GAAGM,GAAG,GAAG,CAAC,GAAG,IAAI,CAACX,KAAK,CAACM,GAAG,CAAC,CAAC,GAAGK,GAAG,GAAG,IAAI;IACzD,IAAI,CAACd,OAAO,CAACY,GAAG,CAACN,GAAG,EAAE;MAAEK,KAAK;MAAEH;IAAU,CAAC,CAAC;EAC7C;EAEA,MAAMO,UAAUA,CAACT,GAAW,EAAiB;IAC3C,IAAI,CAACN,OAAO,CAACU,MAAM,CAACJ,GAAG,CAAC;EAC1B;AACF","ignoreList":[]}

package/lib/module/data/cache/PersistentCacheStore.js

@@ -0,0 +1,56 @@
+"use strict";
+
+import { CacheCorruptionException, CacheWriteException } from "../../domain/errors/VersionManagerException.js";
+export class PersistentCacheStore {
+  constructor(storage, clock, defaultTtlMs, keyPrefix = 'vm_cache_') {
+    this.storage = storage;
+    this.clock = clock;
+    this.defaultTtlMs = defaultTtlMs;
+    this.keyPrefix = keyPrefix;
+  }
+  async get(key) {
+    const raw = await this.storage.get(this.keyPrefix + key);
+    if (!raw) return null;
+    let entry;
+    try {
+      entry = JSON.parse(raw);
+    } catch (error) {
+      throw new CacheCorruptionException({
+        message: `Corrupt persistent cache entry for key "${key}"`,
+        cause: error,
+        metadata: {
+          key
+        }
+      });
+    }
+    if (entry.expiresAt !== null && this.clock.now() > entry.expiresAt) {
+      await this.storage.remove(this.keyPrefix + key);
+      return null;
+    }
+    return entry.value;
+  }
+  async set(key, value, ttlMs) {
+    const ttl = ttlMs ?? this.defaultTtlMs;
+    const expiresAt = ttl > 0 ? this.clock.now() + ttl : null;
+    const entry = {
+      value,
+      expiresAt
+    };
+    try {
+      await this.storage.set(this.keyPrefix + key, JSON.stringify(entry));
+    } catch (error) {
+      throw new CacheWriteException({
+        message: `Failed to persist cache entry for key "${key}"`,
+        cause: error,
+        retryable: true,
+        metadata: {
+          key
+        }
+      });
+    }
+  }
+  async invalidate(key) {
+    await this.storage.remove(this.keyPrefix + key);
+  }
+}
+//# sourceMappingURL=PersistentCacheStore.js.map

package/lib/module/data/cache/PersistentCacheStore.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["CacheCorruptionException","CacheWriteException","PersistentCacheStore","constructor","storage","clock","defaultTtlMs","keyPrefix","get","key","raw","entry","JSON","parse","error","message","cause","metadata","expiresAt","now","remove","value","set","ttlMs","ttl","stringify","retryable","invalidate"],"sourceRoot":"../../../../src","sources":["data/cache/PersistentCacheStore.ts"],"mappings":";;AAAA,SACEA,wBAAwB,EACxBC,mBAAmB,QACd,gDAA6C;AAUpD,OAAO,MAAMC,oBAAoB,CAA8B;EAC7DC,WAAWA,CACQC,OAAyB,EACzBC,KAAa,EACbC,YAAoB,EACpBC,SAAiB,GAAG,WAAW,EAChD;IAAA,KAJiBH,OAAyB,GAAzBA,OAAyB;IAAA,KACzBC,KAAa,GAAbA,KAAa;IAAA,KACbC,YAAoB,GAApBA,YAAoB;IAAA,KACpBC,SAAiB,GAAjBA,SAAiB;EACjC;EAEH,MAAMC,GAAGA,CAACC,GAAW,EAAqB;IACxC,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACN,OAAO,CAACI,GAAG,CAAC,IAAI,CAACD,SAAS,GAAGE,GAAG,CAAC;IACxD,IAAI,CAACC,GAAG,EAAE,OAAO,IAAI;IAErB,IAAIC,KAAwB;IAC5B,IAAI;MACFA,KAAK,GAAGC,IAAI,CAACC,KAAK,CAACH,GAAG,CAAsB;IAC9C,CAAC,CAAC,OAAOI,KAAK,EAAE;MACd,MAAM,IAAId,wBAAwB,CAAC;QACjCe,OAAO,EAAE,2CAA2CN,GAAG,GAAG;QAC1DO,KAAK,EAAEF,KAAK;QACZG,QAAQ,EAAE;UAAER;QAAI;MAClB,CAAC,CAAC;IACJ;IAEA,IAAIE,KAAK,CAACO,SAAS,KAAK,IAAI,IAAI,IAAI,CAACb,KAAK,CAACc,GAAG,CAAC,CAAC,GAAGR,KAAK,CAACO,SAAS,EAAE;MAClE,MAAM,IAAI,CAACd,OAAO,CAACgB,MAAM,CAAC,IAAI,CAACb,SAAS,GAAGE,GAAG,CAAC;MAC/C,OAAO,IAAI;IACb;IACA,OAAOE,KAAK,CAACU,KAAK;EACpB;EAEA,MAAMC,GAAGA,CAACb,GAAW,EAAEY,KAAQ,EAAEE,KAAc,EAAiB;IAC9D,MAAMC,GAAG,GAAGD,KAAK,IAAI,IAAI,CAACjB,YAAY;IACtC,MAAMY,SAAS,GAAGM,GAAG,GAAG,CAAC,GAAG,IAAI,CAACnB,KAAK,CAACc,GAAG,CAAC,CAAC,GAAGK,GAAG,GAAG,IAAI;IACzD,MAAMb,KAAwB,GAAG;MAAEU,KAAK;MAAEH;IAAU,CAAC;IACrD,IAAI;MACF,MAAM,IAAI,CAACd,OAAO,CAACkB,GAAG,CAAC,IAAI,CAACf,SAAS,GAAGE,GAAG,EAAEG,IAAI,CAACa,SAAS,CAACd,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,OAAOG,KAAK,EAAE;MACd,MAAM,IAAIb,mBAAmB,CAAC;QAC5Bc,OAAO,EAAE,0CAA0CN,GAAG,GAAG;QACzDO,KAAK,EAAEF,KAAK;QACZY,SAAS,EAAE,IAAI;QACfT,QAAQ,EAAE;UAAER;QAAI;MAClB,CAAC,CAAC;IACJ;EACF;EAEA,MAAMkB,UAAUA,CAAClB,GAAW,EAAiB;IAC3C,MAAM,IAAI,CAACL,OAAO,CAACgB,MAAM,CAAC,IAAI,CAACb,SAAS,GAAGE,GAAG,CAAC;EACjD;AACF","ignoreList":[]}

package/lib/module/data/config/ConfigCache.js

@@ -0,0 +1,29 @@
+"use strict";
+
+const STORAGE_KEY = 'vm_config_cache_v1';
+
+/**
+ * Doc 03 §4.3 — the persistent tier of the access-path cache (backs the in-process
+ * memory cache across app restarts). Stores the last config that successfully passed
+ * schema+boundary+signature validation, regardless of which tier produced it.
+ */
+export class ConfigCache {
+  constructor(storage) {
+    this.storage = storage;
+  }
+  async getLastValid() {
+    const raw = await this.storage.get(STORAGE_KEY);
+    if (!raw) return null;
+    try {
+      return JSON.parse(raw);
+    } catch {
+      // Corrupt config cache entry — treated as absent (§7.2 falls through to the next
+      // tier), not surfaced as a hard failure of the config pipeline itself.
+      return null;
+    }
+  }
+  async setLastValid(config) {
+    await this.storage.set(STORAGE_KEY, JSON.stringify(config));
+  }
+}
+//# sourceMappingURL=ConfigCache.js.map

package/lib/module/data/config/ConfigCache.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["STORAGE_KEY","ConfigCache","constructor","storage","getLastValid","raw","get","JSON","parse","setLastValid","config","set","stringify"],"sourceRoot":"../../../../src","sources":["data/config/ConfigCache.ts"],"mappings":";;AAIA,MAAMA,WAAW,GAAG,oBAAoB;;AAExC;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,WAAW,CAAyB;EAC/CC,WAAWA,CAAkBC,OAAyB,EAAE;IAAA,KAA3BA,OAAyB,GAAzBA,OAAyB;EAAG;EAEzD,MAAMC,YAAYA,CAAA,EAAiD;IACjE,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACF,OAAO,CAACG,GAAG,CAACN,WAAW,CAAC;IAC/C,IAAI,CAACK,GAAG,EAAE,OAAO,IAAI;IACrB,IAAI;MACF,OAAOE,IAAI,CAACC,KAAK,CAACH,GAAG,CAAC;IACxB,CAAC,CAAC,MAAM;MACN;MACA;MACA,OAAO,IAAI;IACb;EACF;EAEA,MAAMI,YAAYA,CAACC,MAAoC,EAAiB;IACtE,MAAM,IAAI,CAACP,OAAO,CAACQ,GAAG,CAACX,WAAW,EAAEO,IAAI,CAACK,SAAS,CAACF,MAAM,CAAC,CAAC;EAC7D;AACF","ignoreList":[]}