@sekyro/react-native 0.0.0-stage → 0.1.0-rc.1

package/CHANGELOG.md

@@ -0,0 +1,13 @@
+# @sekyro/react-native
+
+## 0.1.0-rc.1
+
+### Minor Changes
+
+- e9dd971: Flow model 2026-10-23 (SDK spec §3.7): the native Android and iOS drop-ins render the three-section flow (contact → identity → live photo) with consent as one line on the first screen, the phone-or-email choice, the identity summary before the live photo, the document chip as its own method, and one camera session for the live photo with the ICAO portrait. Step events report the new `SekyroStep` values `'contact_choice'`, `'identity_summary'` (never the details shown) and `'portrait'` (with the server's `icao_*` reason as `retryReason`); `'consent'` is no longer emitted (consent is one line on the first screen). **Migration (TypeScript):** code that switches exhaustively over `SekyroStep` must add the three new branches.
+- 088fa55: National eID (SDK spec §3.2; Houwiyeti in Mauritania): the native Android and iOS drop-ins now run the eID screens, and step events report them as the new `SekyroStep` value `'eid'` (with the server's `eid_*` reason as `retryReason`). **Migration (TypeScript):** code that switches exhaustively over `SekyroStep` must add an `'eid'` branch.
+- f52408e: First release candidate of the React Native SDK: `startSekyro()` and `<SekyroFlow>` over the native Android (Maven Central) and iOS (`sekyro-ios-dist`) SDKs 0.1.0-rc.2, step events, theming and string overrides, Expo config plugin. New Architecture only (React Native ≥ 0.76).
+
+### Patch Changes
+
+- 45f639f: Licence: the SDKs are now under the Sekyro AI SDK License of Ibtikar Technologies, Inc. (https://sekyro.ai/en/legal/sdk-license, also in French and Arabic). `package.json#license` is `SEE LICENSE IN LICENSE`, and each package's `LICENSE` summarises the licence and links to it. `@sekyro/web` now also ships `THIRD-PARTY-NOTICES.txt` with the MIT notice of the bundled scanic document detector and the MIT/NCSA notice of the Emscripten glue in its OCR worker.

package/LICENSE

@@ -0,0 +1,29 @@
+Sekyro AI SDK License (proprietary)
+
+Copyright (c) 2026 Ibtikar Technologies, Inc. All rights reserved.
+
+This SDK is proprietary software of Ibtikar Technologies, Inc., licensed
+only under the Sekyro AI SDK License:
+https://sekyro.ai/en/legal/sdk-license
+(in French: https://sekyro.ai/fr/legal/sdk-license,
+in Arabic: https://sekyro.ai/ar/legal/sdk-license).
+
+In short, and subject to the full license:
+
+- You may use the SDK only with a Sekyro AI account, a customer agreement
+  with Ibtikar Technologies, Inc. and valid API keys, to integrate the
+  Sekyro AI services into your own applications. You may distribute it to
+  your end users only as embedded in those applications.
+- You may not use it with another identity verification provider, modify it
+  beyond the configuration and theming it exposes, reverse engineer,
+  decompile or disassemble it (except where the law expressly allows it),
+  circumvent its security, attestation, license checks or usage metering,
+  or distribute or sublicense it on its own.
+- Open-source components keep their own licenses. See the third-party
+  notices shipped with this SDK.
+- The SDK is provided "as is", without warranty, except as your customer
+  agreement provides. The license is governed by the laws of the State of
+  Delaware, USA. If this license and your customer agreement conflict,
+  the customer agreement prevails.
+
+Questions: contact@sekyro.ai

package/README.md

@@ -1,3 +1,77 @@
-# Temporary Holding Version
+# @sekyro/react-native
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Sekyro AI eKYC for React Native: a thin TurboModule over the binary Sekyro Android and iOS SDKs.
+The native drop-in runs the whole flow (consent, document, NFC chip, liveness) full screen and
+returns a display-only result. Read the decision on your server (webhooks or `sessions.get`).
+
+Requirements: React Native 0.76 or later with the New Architecture, Android minSdk 24, iOS 15.
+
+## Install
+
+```sh
+npm install @sekyro/react-native
+```
+
+### iOS (Podfile)
+
+The pod depends on `SekyroKit`, which is not on CocoaPods trunk. Declare its source once in the
+app target, after `use_native_modules!`:
+
+```ruby
+require Pod::Executable.execute_command('node', ['-p',
+  'require.resolve("@sekyro/react-native/package.json", {paths: [process.argv[1]]})', __dir__]
+).strip.sub(/package\.json$/, 'scripts/sekyro_pods.rb')
+
+target 'App' do
+  config = use_native_modules!
+  sekyro_kit_pod!
+  # ...
+end
+```
+
+Add `NSCameraUsageDescription` and, for chip reading, `NFCReaderUsageDescription`, the ISO 7816
+identifiers `A0000002471001` and `A0000002472001`, and the NFC `TAG` entitlement.
+
+### Android (Gradle)
+
+The native core comes from Maven Central (`ai.sekyro:sekyro-bom` + `ai.sekyro:sekyro-ui`), so
+`mavenCentral()` must be in your repositories. Set `minSdkVersion` to 24 or more. The core's
+manifest merges the camera and NFC permissions and `SekyroActivity`; nothing else to add.
+
+### Expo
+
+```json
+{ "plugins": [["@sekyro/react-native", { "nfc": true, "appAttest": "production" }]] }
+```
+
+Then `npx expo prebuild`. Options: `nfc` (default `true`), `appAttest`
+(`'production'` | `'development'` | `false`), `cameraPermission`, `nfcPermission`.
+
+## Use
+
+```tsx
+import { startSekyro } from '@sekyro/react-native';
+
+const result = await startSekyro({
+  clientToken, // from your backend: sekyro.sessions.create()
+  locale: 'fr',
+  theme: { colors: { brand: '#0F68B1' }, radius: 12 },
+  onEvent: (e) => console.log(e.type), // step telemetry, no personal data
+});
+// { status: 'finished', sessionId, displayStatus } | { status: 'cancelled' } | { status: 'failed', code }
+```
+
+Or declaratively: `<SekyroFlow clientToken={token} onResult={setResult} />` (renders nothing).
+
+Never log the `clientToken`; it is a one-time bearer credential.
+
+While a flow runs, the wrapper owns the native SDK's process-wide event listener
+(`Sekyro.setEventListener` on Android, the drop-in's `onEvent` on iOS) and clears it when the
+flow ends, so a listener your app set natively is replaced for that time. A flow interrupted
+because the React instance was torn down resolves `{ status: 'failed', code: 'flow_interrupted' }`.
+
+Full guide: [React Native guide](https://docs.sekyro.ai/en/mobile/react-native).
+
+## License
+
+Proprietary: the [Sekyro AI SDK License](https://sekyro.ai/en/legal/sdk-license). See [LICENSE](./LICENSE).

package/SekyroReactNative.podspec

@@ -0,0 +1,22 @@
+# @sekyro/react-native — iOS glue (TurboModule over the binary SekyroKit.xcframework).
+require 'json'
+package = JSON.parse(File.read(File.join(__dir__, 'package.json')))
+
+Pod::Spec.new do |s|
+  s.name          = 'SekyroReactNative'
+  s.version       = package['version']
+  s.summary       = package['description']
+  s.homepage      = 'https://sekyro.ai'
+  s.license       = { :type => 'Proprietary', :file => 'LICENSE' }
+  s.authors       = 'Ibtikar Technologies, Inc.'
+  s.platforms     = { :ios => '15.1' }
+  s.source        = { :http => "https://registry.npmjs.org/@sekyro/react-native/-/react-native-#{package['version']}.tgz" }
+  s.source_files  = 'ios/**/*.{h,mm,swift}'
+  # The TurboModule header imports the C++ codegen header: keep it out of the module umbrella that Swift imports.
+  s.private_header_files = 'ios/RCTSekyroReactNative.h'
+  s.swift_version = '5.9'
+  # The binary core, pinned by package.json#sekyro.ios. WHERE it comes from is declared in the app's Podfile
+  # by `sekyro_kit_pod!` (scripts/sekyro_pods.rb): the public sekyro-ios-dist podspec, or a local dist tree.
+  s.dependency 'SekyroKit', package['sekyro']['ios']
+  install_modules_dependencies(s)
+end

package/android/build.gradle

@@ -0,0 +1,38 @@
+// @sekyro/react-native — Android glue (TurboModule over the binary ai.sekyro:sekyro-ui drop-in).
+// The Sekyro SDK itself is a Maven dependency pinned by package.json#sekyro.android: no AAR ships in npm.
+import groovy.json.JsonSlurper
+
+def pkg = new JsonSlurper().parse(file("../package.json"))
+def safeExtGet = { prop, fallback -> rootProject.ext.has(prop) ? rootProject.ext.get(prop) : fallback }
+
+// Development only: resolve ai.sekyro from ~/.m2 after `./gradlew publishToMavenLocal` in sekyro-mobile/android.
+// The app resolves its runtime classpath with ITS repositories, so the content-filtered repo is added to every project.
+// `-Psekyro.version=<v>` overrides the pin (a local publish is versioned VERSION_NAME, e.g. 0.1.0-SNAPSHOT).
+def sekyroLocal = rootProject.findProperty("sekyro.mavenLocal") == "true"
+def sekyroVersion = rootProject.findProperty("sekyro.version") ?: pkg.sekyro.android
+if (sekyroLocal) {
+  rootProject.allprojects { repositories { mavenLocal { content { includeGroup "ai.sekyro" } } } }
+}
+
+apply plugin: "com.android.library"
+apply plugin: "org.jetbrains.kotlin.android"
+apply plugin: "com.facebook.react"
+
+android {
+  namespace "ai.sekyro.reactnative"
+  compileSdk safeExtGet("compileSdkVersion", 36)
+  defaultConfig { minSdk Math.max(24, safeExtGet("minSdkVersion", 24) as int) }
+  compileOptions { sourceCompatibility JavaVersion.VERSION_17; targetCompatibility JavaVersion.VERSION_17 }
+  testOptions { unitTests.includeAndroidResources = true }
+}
+
+kotlin { jvmToolchain(17) }
+
+dependencies {
+  implementation "com.facebook.react:react-android"
+  implementation platform("ai.sekyro:sekyro-bom:${sekyroVersion}")
+  implementation "ai.sekyro:sekyro-ui"
+  testImplementation "junit:junit:4.13.2"
+  testImplementation "org.robolectric:robolectric:4.15.1"
+  testImplementation "androidx.test:core:1.6.1"
+}

package/android/src/main/AndroidManifest.xml

@@ -0,0 +1,3 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Permissions (camera, NFC), optional features and SekyroActivity come from the Sekyro AARs' merged manifests. -->
+<manifest />

package/android/src/main/java/ai/sekyro/reactnative/ConfigMapper.kt

@@ -0,0 +1,73 @@
+package ai.sekyro.reactnative
+
+import ai.sekyro.SekyroConfig
+import ai.sekyro.SekyroLocale
+import ai.sekyro.SekyroResult
+import ai.sekyro.SekyroTheme
+import ai.sekyro.core.DisplayStatus
+import com.facebook.react.bridge.Arguments
+import com.facebook.react.bridge.ReadableMap
+import com.facebook.react.bridge.ReadableType
+import com.facebook.react.bridge.WritableMap
+
+/** JS wire ↔ Sekyro types. The JS layer validated the config; this re-checks the shape and never logs it. */
+internal object ConfigMapper {
+    private val HEX = Regex("^#[0-9a-fA-F]{6}$")
+
+    private fun ReadableMap.str(key: String): String? =
+        if (hasKey(key) && !isNull(key) && getType(key) == ReadableType.String) getString(key) else null
+
+    private fun color(map: ReadableMap?, key: String): Int? {
+        val hex = map?.str(key) ?: return null
+        require(HEX.matches(hex)) { "invalid_config" }
+        return (0xFF000000 or hex.substring(1).toLong(16)).toInt()
+    }
+
+    fun toConfig(m: ReadableMap): SekyroConfig {
+        val token = m.str("clientToken").orEmpty()
+        require(token.isNotEmpty()) { "invalid_config" }
+        val colors = if (m.hasKey("colors") && !m.isNull("colors")) m.getMap("colors") else null
+        val radius = if (m.hasKey("radius") && !m.isNull("radius")) m.getDouble("radius") else null
+        require(radius == null || radius in 0.0..32.0) { "invalid_config" }
+        val darkMode = m.str("darkMode")
+        val hasTheme = colors != null || radius != null || darkMode != null
+        val theme = if (!hasTheme) null else SekyroTheme(
+            brand = color(colors, "brand"), brandFg = color(colors, "brandFg"),
+            radiusDp = radius?.toInt(),
+            darkMode = when (darkMode) {
+                "light" -> SekyroTheme.DarkMode.LIGHT; "dark" -> SekyroTheme.DarkMode.DARK; else -> SekyroTheme.DarkMode.SYSTEM
+            },
+            bg = color(colors, "bg"), surface = color(colors, "surface"), fg = color(colors, "fg"),
+            fgMuted = color(colors, "fgMuted"), danger = color(colors, "danger"),
+            success = color(colors, "success"), warning = color(colors, "warning"),
+        ).also { color(colors, "border") } // `border` (validated) and `fontFamily`: not themable on Android in 0.1 (README).
+        val strings = if (m.hasKey("strings") && !m.isNull("strings")) {
+            m.getMap("strings")?.toHashMap().orEmpty().mapNotNull { (k, v) -> (v as? String)?.let { k to it } }.toMap()
+        } else emptyMap()
+        return SekyroConfig(
+            clientToken = token,
+            apiOrigin = m.str("apiOrigin"),
+            locale = when (m.str("locale")) {
+                "ar" -> SekyroLocale.AR; "fr" -> SekyroLocale.FR; "en" -> SekyroLocale.EN; else -> null
+            },
+            theme = theme,
+            strings = strings,
+        )
+    }
+
+    /** [into] is injectable so JVM tests can use a JavaOnlyMap (Arguments.createMap() needs the RN native libs). */
+    fun toWire(r: SekyroResult, into: WritableMap = Arguments.createMap()): WritableMap = into.apply {
+        when (r) {
+            is SekyroResult.Finished -> {
+                putString("status", "finished"); putString("sessionId", r.sessionId)
+                // EXPIRED stays on the wire; the JS layer maps it to { status: 'failed', code: 'session_expired' } (iOS parity).
+                putString("displayStatus", when (r.displayStatus) {
+                    DisplayStatus.APPROVED -> "approved"; DisplayStatus.REVIEW_PENDING -> "review_pending"
+                    DisplayStatus.REJECTED -> "rejected"; DisplayStatus.EXPIRED -> "expired"
+                })
+            }
+            SekyroResult.Cancelled -> putString("status", "cancelled")
+            is SekyroResult.Failed -> { putString("status", "failed"); putString("code", r.code) }
+        }
+    }
+}

package/android/src/main/java/ai/sekyro/reactnative/SekyroReactNativeModule.kt

@@ -0,0 +1,107 @@
+package ai.sekyro.reactnative
+
+import ai.sekyro.Sekyro
+import ai.sekyro.SekyroContract
+import ai.sekyro.SekyroEvent
+import ai.sekyro.SekyroResult
+import ai.sekyro.core.SekyroVersion
+import android.app.Activity
+import android.content.Intent
+import com.facebook.react.bridge.Arguments
+import com.facebook.react.bridge.BaseActivityEventListener
+import com.facebook.react.bridge.Promise
+import com.facebook.react.bridge.ReactApplicationContext
+import com.facebook.react.bridge.ReadableMap
+import com.facebook.react.bridge.UiThreadUtil
+import com.facebook.react.bridge.WritableMap
+import java.util.concurrent.atomic.AtomicBoolean
+import java.util.concurrent.atomic.AtomicInteger
+
+/**
+ * `SekyroReactNative` TurboModule: presents the native drop-in (SekyroActivity) and forwards its step events.
+ * Never logs the config (the client token is a bearer credential).
+ *
+ * The result comes back through React Native's activity-event routing (`startActivityForResult` +
+ * [BaseActivityEventListener]), not an activity-result registry callback: when the RN host activity is
+ * recreated while SekyroActivity is on top (configuration change, "Don't keep activities"), the recreated
+ * `ReactActivity` still forwards `onActivityResult` to this module, so the promise always settles and the
+ * module never stays locked. If the React instance itself is torn down mid-flow, [invalidate] settles it as
+ * `failed / flow_interrupted`.
+ */
+class SekyroReactNativeModule(context: ReactApplicationContext) : NativeSekyroReactNativeSpec(context) {
+    private val running = AtomicBoolean(false)
+    private val seq = AtomicInteger(0)
+    @Volatile private var pending: Promise? = null
+
+    private val activityListener = object : BaseActivityEventListener() {
+        override fun onActivityResult(activity: Activity, requestCode: Int, resultCode: Int, data: Intent?) {
+            if (requestCode != REQUEST_CODE) return
+            settle(SekyroContract().parseResult(resultCode, data))
+        }
+    }
+
+    init {
+        context.addActivityEventListener(activityListener)
+    }
+
+    override fun getName(): String = NAME
+
+    override fun nativeVersion(): String = "android ${SekyroVersion.name}"
+
+    override fun start(config: ReadableMap, promise: Promise) {
+        val parsed = try { ConfigMapper.toConfig(config) } catch (_: IllegalArgumentException) {
+            promise.reject("invalid_config", "invalid config"); return
+        }
+        val activity = reactApplicationContext.currentActivity
+            ?: run { promise.reject("no_activity", "no foreground activity"); return }
+        if (!running.compareAndSet(false, true)) { promise.reject("flow_in_progress", "a Sekyro flow is already running"); return }
+        UiThreadUtil.runOnUiThread {
+            try {
+                if (activity.isFinishing || activity.isDestroyed) throw IllegalStateException("activity is finishing")
+                pending = promise
+                Sekyro.setEventListener { event -> emitOnEvent(toWire(event)) }
+                activity.startActivityForResult(SekyroContract().createIntent(activity, parsed), REQUEST_CODE)
+            } catch (_: Exception) {
+                // e.g. the activity is finishing, or the drop-in activity cannot be resolved.
+                pending = null
+                Sekyro.setEventListener(null)
+                running.set(false)
+                promise.reject("no_activity", "the foreground activity cannot launch the flow")
+            }
+        }
+    }
+
+    /** Settle the running flow once (a duplicate or late result is ignored). */
+    private fun settle(result: SekyroResult) {
+        val p = pending ?: return
+        pending = null
+        Sekyro.setEventListener(null)
+        running.set(false)
+        p.resolve(ConfigMapper.toWire(result))
+    }
+
+    private fun toWire(e: SekyroEvent): WritableMap = Arguments.createMap().apply {
+        putInt("seq", seq.incrementAndGet())
+        when (e) {
+            is SekyroEvent.Step -> {
+                putString("type", "step"); putString("step", e.step.wire)
+                e.retryReason?.let { putString("retryReason", it) }
+            }
+            SekyroEvent.WaitingForNetwork -> putString("type", "waiting_for_network")
+        }
+    }
+
+    override fun invalidate() {
+        reactApplicationContext.removeActivityEventListener(activityListener)
+        // The React instance is going away with a flow still open: settle it rather than leak it.
+        settle(SekyroResult.Failed("flow_interrupted"))
+        Sekyro.setEventListener(null)
+        super.invalidate()
+    }
+
+    companion object {
+        const val NAME = "SekyroReactNative"
+        /** Activity request code of the drop-in (any 16-bit value unique to this module). */
+        private const val REQUEST_CODE = 0x5E4B
+    }
+}

package/android/src/main/java/ai/sekyro/reactnative/SekyroReactNativePackage.kt

@@ -0,0 +1,26 @@
+package ai.sekyro.reactnative
+
+import com.facebook.react.BaseReactPackage
+import com.facebook.react.bridge.NativeModule
+import com.facebook.react.bridge.ReactApplicationContext
+import com.facebook.react.module.model.ReactModuleInfo
+import com.facebook.react.module.model.ReactModuleInfoProvider
+
+/** Autolinked by the React Native CLI (New Architecture: a TurboModule). */
+class SekyroReactNativePackage : BaseReactPackage() {
+    override fun getModule(name: String, reactContext: ReactApplicationContext): NativeModule? =
+        if (name == SekyroReactNativeModule.NAME) SekyroReactNativeModule(reactContext) else null
+
+    override fun getReactModuleInfoProvider(): ReactModuleInfoProvider = ReactModuleInfoProvider {
+        mapOf(
+            SekyroReactNativeModule.NAME to ReactModuleInfo(
+                SekyroReactNativeModule.NAME,
+                SekyroReactNativeModule::class.java.name,
+                false, // canOverrideExistingModule
+                false, // needsEagerInit
+                false, // isCxxModule
+                true, // isTurboModule
+            ),
+        )
+    }
+}

package/app.plugin.js

@@ -0,0 +1 @@
+module.exports = require('./plugin');

package/dist/index.cjs

@@ -0,0 +1 @@
+"use strict";var u=Object.defineProperty;var N=Object.getOwnPropertyDescriptor;var w=Object.getOwnPropertyNames;var h=Object.prototype.hasOwnProperty;var C=(e,r)=>{for(var t in r)u(e,t,{get:r[t],enumerable:!0})},O=(e,r,t,n)=>{if(r&&typeof r=="object"||typeof r=="function")for(let i of w(r))!h.call(e,i)&&i!==t&&u(e,i,{get:()=>r[i],enumerable:!(n=N(r,i))||n.enumerable});return e};var x=e=>O(u({},"__esModule",{value:!0}),e);var A={};C(A,{SDK_VERSION:()=>R,SekyroError:()=>l,SekyroFlow:()=>E,nativeVersion:()=>_,startSekyro:()=>f});module.exports=x(A);var S=require("react-native"),d=S.TurboModuleRegistry.get("SekyroReactNative");var l=class extends Error{code;constructor(r,t=r){super(t),this.name="SekyroError",this.code=r}};var b=500,T=new Set(["ar","fr","en"]),F=["brand","brandFg","bg","surface","fg","fgMuted","border","danger","success","warning"],I=new Set(["clientToken","apiOrigin","locale","theme","strings","onEvent"]),D=/^#[0-9a-fA-F]{6}$/,V=/^http:\/\/(localhost|127\.0\.0\.1|10\.0\.2\.2)(:\d+)?$/,a=e=>{throw new l("invalid_config",`invalid config: ${e}`)};function k(e){(typeof e!="object"||e===null)&&a("config");for(let n of Object.keys(e))I.has(n)||a(`unknown key "${n.slice(0,32)}"`);(typeof e.clientToken!="string"||e.clientToken.length===0)&&a("clientToken");let r={clientToken:e.clientToken};e.apiOrigin!==void 0&&(typeof e.apiOrigin=="string"&&(/^https:\/\/[a-z0-9.-]+(:\d+)?$/i.test(e.apiOrigin)||__DEV__&&V.test(e.apiOrigin))||a("apiOrigin"),r.apiOrigin=e.apiOrigin),e.locale!==void 0&&(T.has(e.locale)||a("locale"),r.locale=e.locale);let t=e.theme;if(t){if(t.colors){let n={};for(let[i,s]of Object.entries(t.colors))s!==void 0&&((!F.includes(i)||typeof s!="string"||!D.test(s))&&a(`theme.colors.${i.slice(0,32)}`),n[i]=s);r.colors=n}t.radius!==void 0&&((typeof t.radius!="number"||!Number.isFinite(t.radius)||t.radius<0||t.radius>32)&&a("theme.radius"),r.radius=t.radius),t.fontFamily!==void 0&&((typeof t.fontFamily!="string"||!/^[\w .-]{1,64}$/.test(t.fontFamily))&&a("theme.fontFamily"),r.fontFamily=t.fontFamily),t.darkMode!==void 0&&(["system","light","dark"].includes(t.darkMode)||a("theme.darkMode"),r.darkMode=t.darkMode)}if(e.strings){e.locale||a("strings need locale");let n=e.strings[e.locale]??{},i={},s=Object.entries(n).filter(([,o])=>o!==void 0);s.length>b&&a("strings (too many overrides)");for(let[o,y]of s)/^[a-zA-Z0-9_.]{1,96}$/.test(o)||a("strings key"),(typeof y!="string"||y.length>2e3)&&a(`strings.${o}`),i[o]=y;r.strings=i}return r}var M=new Set(["method","phone_otp","email_otp","registry","document","nfc","liveness","processing","result","update_required","eid","contact_choice","identity_summary","portrait"]);function g(e){if(e.type==="waiting_for_network")return{type:"waiting_for_network"};if(e.type!=="step"||!M.has(e.step))return null;let r=e.step,t=typeof e.retryReason=="string"&&/^[a-z0-9_]{1,64}$/.test(e.retryReason)?e.retryReason:void 0;return t?{type:"step",step:r,retryReason:t}:{type:"step",step:r}}var $=new Set(["approved","review_pending","rejected"]);function m(e){if(e.status==="cancelled")return{status:"cancelled"};if(e.status==="failed")return{status:"failed",code:e.code||"unknown_error"};if(e.status==="finished"&&e.sessionId){if(e.displayStatus==="expired")return{status:"failed",code:"session_expired"};if($.has(e.displayStatus))return{status:"finished",sessionId:e.sessionId,displayStatus:e.displayStatus}}return{status:"failed",code:"unknown_error"}}function v(){if(!d)throw new l("unsupported_platform","the SekyroReactNative native module is not linked (New Architecture app, pod install / Gradle sync)");return d}var c=!1,j=new Set(["no_activity","unsupported_platform","flow_in_progress","invalid_config"]);async function f(e){let r=k(e),t=v();if(c)throw new l("flow_in_progress");c=!0;let n=e.onEvent,i=n?t.onEvent(s=>{let o=g(s);o&&n(o)}):void 0;try{return m(await t.start(r))}catch(s){let o=s?.code;if(typeof o=="string"&&j.has(o))throw new l(o);return{status:"failed",code:"unknown_error"}}finally{i?.remove(),c=!1}}function _(){return v().nativeVersion()}var p=require("react");function E(e){let r=(0,p.useRef)(null),t=(0,p.useRef)(e);return t.current=e,(0,p.useEffect)(()=>{if(r.current===e.clientToken)return;r.current=e.clientToken;let{onResult:n,onEvent:i,...s}=t.current;f({...s,onEvent:o=>t.current.onEvent?.(o)}).then(o=>t.current.onResult(o),o=>t.current.onResult({status:"failed",code:o instanceof l?o.code:"unknown_error"}))},[e.clientToken]),null}var R="0.1.0-rc.1";0&&(module.exports={SDK_VERSION,SekyroError,SekyroFlow,nativeVersion,startSekyro});

package/dist/index.d.cts

@@ -0,0 +1,99 @@
+/** UI language of the native flow. @public */
+type SekyroLocale = 'ar' | 'fr' | 'en';
+/** Themeable colour roles, shared by the Android and iOS cores. @public */
+type SekyroColorRole = 'brand' | 'brandFg' | 'bg' | 'surface' | 'fg' | 'fgMuted' | 'border' | 'danger' | 'success' | 'warning';
+/** Runtime theme applied over the native defaults. @public */
+interface SekyroTheme {
+    /** `'#RRGGBB'` per role. */
+    colors?: Partial<Record<SekyroColorRole, string>>;
+    /** Corner radius in dp / pt, 0–32. */
+    radius?: number;
+    /** iOS only in 0.1 (Android ignores it). */
+    fontFamily?: string;
+    /** Colour scheme; `'system'` follows the device. */
+    darkMode?: 'system' | 'light' | 'dark';
+}
+/**
+ * Screen of the native flow, as reported by step events (`eid`: the national eID sign-in, SDK spec §3.2).
+ * Flow model 2026-10-23: `contact_choice` (phone or email), `identity_summary` (check the details read — the event never
+ * carries them), `portrait` (the ICAO portrait on its own). `consent` is never emitted (consent is one line on the first
+ * screen); it stays in the union only because the public API may only grow. @public
+ */
+type SekyroStep = 'consent' | 'method' | 'phone_otp' | 'email_otp' | 'registry' | 'document' | 'nfc' | 'liveness' | 'processing' | 'result' | 'update_required' | 'eid' | 'contact_choice' | 'identity_summary' | 'portrait';
+/** Telemetry only; carries no personal data. @public */
+type SekyroEvent = {
+    type: 'step';
+    step: SekyroStep;
+    retryReason?: string;
+} | {
+    type: 'waiting_for_network';
+};
+/** Options for {@link startSekyro}. @public */
+interface SekyroConfig {
+    /** One-time session token from your backend (`sessions.create`). Never logged. */
+    clientToken: string;
+    /** e.g. `'https://api-staging.sekyro.ai'`; defaults to production. */
+    apiOrigin?: string;
+    /** UI language of the flow; required when `strings` is set. */
+    locale?: SekyroLocale;
+    /** Colours, radius, font and colour scheme. */
+    theme?: SekyroTheme;
+    /** Catalog-key overrides per locale; only `strings[locale]` is used, so `locale` is required. */
+    strings?: Partial<Record<SekyroLocale, Record<string, string>>>;
+    /** Step telemetry of this flow only (no personal data). */
+    onEvent?: (event: SekyroEvent) => void;
+}
+/** What the end user was shown; not the decision. @public */
+type SekyroDisplayStatus = 'approved' | 'review_pending' | 'rejected';
+/** Display-only outcome; read the decision server-side (webhooks / `sessions.get`). @public */
+type SekyroResult = {
+    status: 'finished';
+    sessionId: string;
+    displayStatus: SekyroDisplayStatus;
+} | {
+    status: 'cancelled';
+} | {
+    status: 'failed';
+    code: string;
+};
+
+/**
+ * Present the Sekyro drop-in full screen. Resolves a display-only result; read the decision
+ * server-side. Rejects only with a {@link SekyroError} (programmer errors).
+ * @public
+ */
+declare function startSekyro(config: SekyroConfig): Promise<SekyroResult>;
+/**
+ * Version of the bundled native core: `'android 0.1.0-rc.2'` / `'ios 0.1.0-rc.2'`.
+ * @public
+ */
+declare function nativeVersion(): string;
+
+/** Props of {@link SekyroFlow}: the config plus result and event callbacks. @public */
+type SekyroFlowProps = Omit<SekyroConfig, 'onEvent'> & {
+    onResult: (result: SekyroResult) => void;
+    onEvent?: (event: SekyroEvent) => void;
+};
+/**
+ * Declarative drop-in: presents the native flow full screen on mount and renders nothing.
+ * Mount it once per session; to restart, remount with a new `clientToken`.
+ * @public
+ */
+declare function SekyroFlow(props: SekyroFlowProps): null;
+
+/** Programmer errors only. Flow outcomes resolve as a {@link SekyroResult}. @public */
+type SekyroErrorCode = 'invalid_config' | 'flow_in_progress' | 'no_activity' | 'unsupported_platform';
+/** Thrown (rejected) by {@link startSekyro} on a programmer error. @public */
+declare class SekyroError extends Error {
+    /** Machine-readable cause. */
+    readonly code: SekyroErrorCode;
+    constructor(code: SekyroErrorCode, message?: string);
+}
+
+/**
+ * Version of this npm package.
+ * @public
+ */
+declare const SDK_VERSION: string;
+
+export { SDK_VERSION, type SekyroColorRole, type SekyroConfig, type SekyroDisplayStatus, SekyroError, type SekyroErrorCode, type SekyroEvent, SekyroFlow, type SekyroFlowProps, type SekyroLocale, type SekyroResult, type SekyroStep, type SekyroTheme, nativeVersion, startSekyro };

package/dist/index.d.ts

@@ -0,0 +1,99 @@
+/** UI language of the native flow. @public */
+type SekyroLocale = 'ar' | 'fr' | 'en';
+/** Themeable colour roles, shared by the Android and iOS cores. @public */
+type SekyroColorRole = 'brand' | 'brandFg' | 'bg' | 'surface' | 'fg' | 'fgMuted' | 'border' | 'danger' | 'success' | 'warning';
+/** Runtime theme applied over the native defaults. @public */
+interface SekyroTheme {
+    /** `'#RRGGBB'` per role. */
+    colors?: Partial<Record<SekyroColorRole, string>>;
+    /** Corner radius in dp / pt, 0–32. */
+    radius?: number;
+    /** iOS only in 0.1 (Android ignores it). */
+    fontFamily?: string;
+    /** Colour scheme; `'system'` follows the device. */
+    darkMode?: 'system' | 'light' | 'dark';
+}
+/**
+ * Screen of the native flow, as reported by step events (`eid`: the national eID sign-in, SDK spec §3.2).
+ * Flow model 2026-10-23: `contact_choice` (phone or email), `identity_summary` (check the details read — the event never
+ * carries them), `portrait` (the ICAO portrait on its own). `consent` is never emitted (consent is one line on the first
+ * screen); it stays in the union only because the public API may only grow. @public
+ */
+type SekyroStep = 'consent' | 'method' | 'phone_otp' | 'email_otp' | 'registry' | 'document' | 'nfc' | 'liveness' | 'processing' | 'result' | 'update_required' | 'eid' | 'contact_choice' | 'identity_summary' | 'portrait';
+/** Telemetry only; carries no personal data. @public */
+type SekyroEvent = {
+    type: 'step';
+    step: SekyroStep;
+    retryReason?: string;
+} | {
+    type: 'waiting_for_network';
+};
+/** Options for {@link startSekyro}. @public */
+interface SekyroConfig {
+    /** One-time session token from your backend (`sessions.create`). Never logged. */
+    clientToken: string;
+    /** e.g. `'https://api-staging.sekyro.ai'`; defaults to production. */
+    apiOrigin?: string;
+    /** UI language of the flow; required when `strings` is set. */
+    locale?: SekyroLocale;
+    /** Colours, radius, font and colour scheme. */
+    theme?: SekyroTheme;
+    /** Catalog-key overrides per locale; only `strings[locale]` is used, so `locale` is required. */
+    strings?: Partial<Record<SekyroLocale, Record<string, string>>>;
+    /** Step telemetry of this flow only (no personal data). */
+    onEvent?: (event: SekyroEvent) => void;
+}
+/** What the end user was shown; not the decision. @public */
+type SekyroDisplayStatus = 'approved' | 'review_pending' | 'rejected';
+/** Display-only outcome; read the decision server-side (webhooks / `sessions.get`). @public */
+type SekyroResult = {
+    status: 'finished';
+    sessionId: string;
+    displayStatus: SekyroDisplayStatus;
+} | {
+    status: 'cancelled';
+} | {
+    status: 'failed';
+    code: string;
+};
+
+/**
+ * Present the Sekyro drop-in full screen. Resolves a display-only result; read the decision
+ * server-side. Rejects only with a {@link SekyroError} (programmer errors).
+ * @public
+ */
+declare function startSekyro(config: SekyroConfig): Promise<SekyroResult>;
+/**
+ * Version of the bundled native core: `'android 0.1.0-rc.2'` / `'ios 0.1.0-rc.2'`.
+ * @public
+ */
+declare function nativeVersion(): string;
+
+/** Props of {@link SekyroFlow}: the config plus result and event callbacks. @public */
+type SekyroFlowProps = Omit<SekyroConfig, 'onEvent'> & {
+    onResult: (result: SekyroResult) => void;
+    onEvent?: (event: SekyroEvent) => void;
+};
+/**
+ * Declarative drop-in: presents the native flow full screen on mount and renders nothing.
+ * Mount it once per session; to restart, remount with a new `clientToken`.
+ * @public
+ */
+declare function SekyroFlow(props: SekyroFlowProps): null;
+
+/** Programmer errors only. Flow outcomes resolve as a {@link SekyroResult}. @public */
+type SekyroErrorCode = 'invalid_config' | 'flow_in_progress' | 'no_activity' | 'unsupported_platform';
+/** Thrown (rejected) by {@link startSekyro} on a programmer error. @public */
+declare class SekyroError extends Error {
+    /** Machine-readable cause. */
+    readonly code: SekyroErrorCode;
+    constructor(code: SekyroErrorCode, message?: string);
+}
+
+/**
+ * Version of this npm package.
+ * @public
+ */
+declare const SDK_VERSION: string;
+
+export { SDK_VERSION, type SekyroColorRole, type SekyroConfig, type SekyroDisplayStatus, SekyroError, type SekyroErrorCode, type SekyroEvent, SekyroFlow, type SekyroFlowProps, type SekyroLocale, type SekyroResult, type SekyroStep, type SekyroTheme, nativeVersion, startSekyro };

package/dist/index.js

@@ -0,0 +1 @@
+import{TurboModuleRegistry as m}from"react-native";var f=m.get("SekyroReactNative");var a=class extends Error{code;constructor(r,t=r){super(t),this.name="SekyroError",this.code=r}};var v=500,_=new Set(["ar","fr","en"]),E=["brand","brandFg","bg","surface","fg","fgMuted","border","danger","success","warning"],R=new Set(["clientToken","apiOrigin","locale","theme","strings","onEvent"]),N=/^#[0-9a-fA-F]{6}$/,w=/^http:\/\/(localhost|127\.0\.0\.1|10\.0\.2\.2)(:\d+)?$/,i=e=>{throw new a("invalid_config",`invalid config: ${e}`)};function d(e){(typeof e!="object"||e===null)&&i("config");for(let s of Object.keys(e))R.has(s)||i(`unknown key "${s.slice(0,32)}"`);(typeof e.clientToken!="string"||e.clientToken.length===0)&&i("clientToken");let r={clientToken:e.clientToken};e.apiOrigin!==void 0&&(typeof e.apiOrigin=="string"&&(/^https:\/\/[a-z0-9.-]+(:\d+)?$/i.test(e.apiOrigin)||__DEV__&&w.test(e.apiOrigin))||i("apiOrigin"),r.apiOrigin=e.apiOrigin),e.locale!==void 0&&(_.has(e.locale)||i("locale"),r.locale=e.locale);let t=e.theme;if(t){if(t.colors){let s={};for(let[l,n]of Object.entries(t.colors))n!==void 0&&((!E.includes(l)||typeof n!="string"||!N.test(n))&&i(`theme.colors.${l.slice(0,32)}`),s[l]=n);r.colors=s}t.radius!==void 0&&((typeof t.radius!="number"||!Number.isFinite(t.radius)||t.radius<0||t.radius>32)&&i("theme.radius"),r.radius=t.radius),t.fontFamily!==void 0&&((typeof t.fontFamily!="string"||!/^[\w .-]{1,64}$/.test(t.fontFamily))&&i("theme.fontFamily"),r.fontFamily=t.fontFamily),t.darkMode!==void 0&&(["system","light","dark"].includes(t.darkMode)||i("theme.darkMode"),r.darkMode=t.darkMode)}if(e.strings){e.locale||i("strings need locale");let s=e.strings[e.locale]??{},l={},n=Object.entries(s).filter(([,o])=>o!==void 0);n.length>v&&i("strings (too many overrides)");for(let[o,p]of n)/^[a-zA-Z0-9_.]{1,96}$/.test(o)||i("strings key"),(typeof p!="string"||p.length>2e3)&&i(`strings.${o}`),l[o]=p;r.strings=l}return r}var h=new Set(["method","phone_otp","email_otp","registry","document","nfc","liveness","processing","result","update_required","eid","contact_choice","identity_summary","portrait"]);function c(e){if(e.type==="waiting_for_network")return{type:"waiting_for_network"};if(e.type!=="step"||!h.has(e.step))return null;let r=e.step,t=typeof e.retryReason=="string"&&/^[a-z0-9_]{1,64}$/.test(e.retryReason)?e.retryReason:void 0;return t?{type:"step",step:r,retryReason:t}:{type:"step",step:r}}var C=new Set(["approved","review_pending","rejected"]);function S(e){if(e.status==="cancelled")return{status:"cancelled"};if(e.status==="failed")return{status:"failed",code:e.code||"unknown_error"};if(e.status==="finished"&&e.sessionId){if(e.displayStatus==="expired")return{status:"failed",code:"session_expired"};if(C.has(e.displayStatus))return{status:"finished",sessionId:e.sessionId,displayStatus:e.displayStatus}}return{status:"failed",code:"unknown_error"}}function k(){if(!f)throw new a("unsupported_platform","the SekyroReactNative native module is not linked (New Architecture app, pod install / Gradle sync)");return f}var y=!1,O=new Set(["no_activity","unsupported_platform","flow_in_progress","invalid_config"]);async function u(e){let r=d(e),t=k();if(y)throw new a("flow_in_progress");y=!0;let s=e.onEvent,l=s?t.onEvent(n=>{let o=c(n);o&&s(o)}):void 0;try{return S(await t.start(r))}catch(n){let o=n?.code;if(typeof o=="string"&&O.has(o))throw new a(o);return{status:"failed",code:"unknown_error"}}finally{l?.remove(),y=!1}}function x(){return k().nativeVersion()}import{useEffect as b,useRef as g}from"react";function T(e){let r=g(null),t=g(e);return t.current=e,b(()=>{if(r.current===e.clientToken)return;r.current=e.clientToken;let{onResult:s,onEvent:l,...n}=t.current;u({...n,onEvent:o=>t.current.onEvent?.(o)}).then(o=>t.current.onResult(o),o=>t.current.onResult({status:"failed",code:o instanceof a?o.code:"unknown_error"}))},[e.clientToken]),null}var F="0.1.0-rc.1";export{F as SDK_VERSION,a as SekyroError,T as SekyroFlow,x as nativeVersion,u as startSekyro};

package/dist/package.json

@@ -0,0 +1 @@
+{"type":"module"}

package/ios/RCTSekyroReactNative.h

@@ -0,0 +1,5 @@
+// @sekyro/react-native — iOS TurboModule (New Architecture only).
+#import <RNSekyroReactNativeSpec/RNSekyroReactNativeSpec.h>
+
+@interface RCTSekyroReactNative : NativeSekyroReactNativeSpecBase <NativeSekyroReactNativeSpec>
+@end