@sekyro/react-native 0.0.0-stage → 0.1.0-rc.1

package/ios/RCTSekyroReactNative.mm

@@ -0,0 +1,57 @@
+// @sekyro/react-native — iOS TurboModule: rebuilds a plain dictionary from the codegen struct and hands it to
+// SekyroRNBridge (Swift). Never logs the config: the client token is a bearer credential.
+#import "RCTSekyroReactNative.h"
+#if __has_include(<SekyroReactNative/SekyroReactNative-Swift.h>)
+#import <SekyroReactNative/SekyroReactNative-Swift.h>
+#else
+#import "SekyroReactNative-Swift.h"
+#endif
+
+@implementation RCTSekyroReactNative
+
++ (NSString *)moduleName { return @"SekyroReactNative"; }
+
+- (std::shared_ptr<facebook::react::TurboModule>)getTurboModule:(const facebook::react::ObjCTurboModule::InitParams &)params {
+  return std::make_shared<facebook::react::NativeSekyroReactNativeSpecJSI>(params);
+}
+
+- (NSString *)nativeVersion { return [SekyroRNBridge nativeVersion]; }
+
+- (void)start:(JS::NativeSekyroReactNative::NativeConfig &)config
+      resolve:(RCTPromiseResolveBlock)resolve
+       reject:(RCTPromiseRejectBlock)reject {
+  // The struct is only valid during this call: copy everything out first.
+  NSMutableDictionary *d = [NSMutableDictionary new];
+  if (config.clientToken()) d[@"clientToken"] = config.clientToken();
+  if (config.apiOrigin()) d[@"apiOrigin"] = config.apiOrigin();
+  if (config.locale()) d[@"locale"] = config.locale();
+  if (config.fontFamily()) d[@"fontFamily"] = config.fontFamily();
+  if (config.darkMode()) d[@"darkMode"] = config.darkMode();
+  if (config.radius().has_value()) d[@"radius"] = @(config.radius().value());
+  id strings = config.strings();
+  if ([strings isKindOfClass:[NSDictionary class]]) d[@"strings"] = strings;
+  if (config.colors().has_value()) {
+    auto c = config.colors().value();
+    NSMutableDictionary *colors = [NSMutableDictionary new];
+    if (c.brand()) colors[@"brand"] = c.brand();
+    if (c.brandFg()) colors[@"brandFg"] = c.brandFg();
+    if (c.bg()) colors[@"bg"] = c.bg();
+    if (c.surface()) colors[@"surface"] = c.surface();
+    if (c.fg()) colors[@"fg"] = c.fg();
+    if (c.fgMuted()) colors[@"fgMuted"] = c.fgMuted();
+    if (c.border()) colors[@"border"] = c.border();
+    if (c.danger()) colors[@"danger"] = c.danger();
+    if (c.success()) colors[@"success"] = c.success();
+    if (c.warning()) colors[@"warning"] = c.warning();
+    d[@"colors"] = colors;
+  }
+  __weak RCTSekyroReactNative *weakSelf = self;
+  dispatch_async(dispatch_get_main_queue(), ^{
+    NSString *error = [SekyroRNBridge start:d
+        onEvent:^(NSDictionary *event) { [weakSelf emitOnEvent:event]; }
+        completion:^(NSDictionary *result) { resolve(result); }];
+    if (error) reject(error, error, nil);
+  });
+}
+
+@end

package/ios/SekyroRNBridge.swift

@@ -0,0 +1,108 @@
+// @sekyro/react-native — Swift side of the iOS TurboModule (RCTSekyroReactNative.mm calls it).
+import Foundation
+import SekyroKit
+import UIKit
+
+@objc(SekyroRNBridge)
+public final class SekyroRNBridge: NSObject {
+    @MainActor private static var running = false
+    @MainActor private static var seq: Int32 = 0
+
+    @objc public static func nativeVersion() -> String { "ios \(Sekyro.sdkVersion)" }
+
+    struct InvalidConfig: Error {}
+
+    /// The JS layer validated the config; this re-checks the shape. Never logs it (the token is a bearer credential).
+    static func parse(_ d: NSDictionary) throws -> SekyroConfig {
+        guard let token = d["clientToken"] as? String, !token.isEmpty else { throw InvalidConfig() }
+        var origin: URL?
+        if let raw = d["apiOrigin"] as? String {
+            guard let url = URL(string: raw), url.scheme == "https" || url.host == "localhost" || url.host == "127.0.0.1" else { throw InvalidConfig() }
+            origin = url
+        }
+        let preferred = Locale.preferredLanguages.lazy.map { String($0.prefix(2)) }.first { ["ar", "fr", "en"].contains($0) }
+        let locale = SekyroLocale(rawValue: (d["locale"] as? String) ?? preferred ?? "fr") ?? .fr
+        let colors = d["colors"] as? [String: Any] ?? [:]
+        func color(_ key: String) throws -> SekyroColor? {
+            guard let value = colors[key] else { return nil }
+            guard let hex = value as? String, let c = SekyroColor(hex: hex) else { throw InvalidConfig() }
+            return c
+        }
+        let mode: SekyroDarkMode
+        switch d["darkMode"] as? String {
+        case "light": mode = .light
+        case "dark": mode = .dark
+        default: mode = .system
+        }
+        var radius: CGFloat?
+        if let r = d["radius"] as? NSNumber {
+            guard (0...32).contains(r.doubleValue) else { throw InvalidConfig() }
+            radius = CGFloat(truncating: r)
+        }
+        let strings = (d["strings"] as? [String: Any] ?? [:]).compactMapValues { $0 as? String }
+        let theme = SekyroTheme(
+            brand: try color("brand"), brandFg: try color("brandFg"), background: try color("bg"), surface: try color("surface"),
+            foreground: try color("fg"), foregroundMuted: try color("fgMuted"), border: try color("border"),
+            danger: try color("danger"), success: try color("success"), warning: try color("warning"),
+            cornerRadius: radius, fontFamily: d["fontFamily"] as? String, darkMode: mode, strings: strings)
+        return SekyroConfig(clientToken: token, apiOrigin: origin, locale: locale, theme: theme)
+    }
+
+    static func wire(_ result: SekyroResult) -> NSDictionary {
+        switch result {
+        case .finished(let sessionId, let status):
+            return ["status": "finished", "sessionId": sessionId, "displayStatus": status.rawValue]
+        case .cancelled:
+            return ["status": "cancelled"]
+        case .failed(let code):
+            return ["status": "failed", "code": code]
+        }
+    }
+
+    /// Presents the drop-in. Returns nil when started, else an error code (`invalid_config`, `no_activity`, `flow_in_progress`).
+    @MainActor @objc public static func start(_ config: NSDictionary,
+                                              onEvent: @escaping (NSDictionary) -> Void,
+                                              completion: @escaping (NSDictionary) -> Void) -> String? {
+        guard let parsed = try? parse(config) else { return "invalid_config" }
+        guard !running else { return "flow_in_progress" }
+        // UIKit only logs (and never calls back) when the presenter is off-window, mid-transition or
+        // already presenting — refuse up front so the promise can never stay pending.
+        guard let presenter = topViewController(), canPresent(from: presenter) else { return "no_activity" }
+        running = true
+        Sekyro.start(from: presenter, config: parsed, onEvent: { event in
+            seq &+= 1
+            switch event {
+            case .step(let step, let reason):
+                var e: [String: Any] = ["type": "step", "step": step.rawValue, "seq": NSNumber(value: seq)]
+                if let reason { e["retryReason"] = reason }
+                onEvent(e as NSDictionary)
+            case .waitingForNetwork:
+                onEvent(["type": "waiting_for_network", "seq": NSNumber(value: seq)])
+            }
+        }, completion: { result in
+            running = false
+            completion(wire(result))
+        })
+        return nil
+    }
+
+    @MainActor private static func topViewController() -> UIViewController? {
+        let scenes = UIApplication.shared.connectedScenes.compactMap { $0 as? UIWindowScene }
+        let foreground = scenes.filter { $0.activationState == .foregroundActive }
+        // The key window across every foreground scene first, then any foreground window, then any scene.
+        let window = foreground.lazy.flatMap { $0.windows }.first { $0.isKeyWindow }
+            ?? foreground.lazy.flatMap { $0.windows }.first
+            ?? scenes.first?.windows.first
+        var top = window?.rootViewController
+        while let presented = top?.presentedViewController, !presented.isBeingDismissed { top = presented }
+        return top
+    }
+
+    /// True when `presenter` can present right now (in a window, not transitioning, not presenting).
+    @MainActor static func canPresent(from presenter: UIViewController) -> Bool {
+        presenter.viewIfLoaded?.window != nil
+            && !presenter.isBeingPresented
+            && !presenter.isBeingDismissed
+            && presenter.presentedViewController == nil
+    }
+}

package/package.json

@@ -1,6 +1,105 @@
 {
   "name": "@sekyro/react-native",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0-rc.1",
+  "private": false,
+  "description": "Sekyro AI eKYC for React Native — glue over the binary Android and iOS SDKs (New Architecture)",
+  "license": "SEE LICENSE IN LICENSE",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/IBTIKAR-Technologies/ibtikar-identity.git",
+    "directory": "sekyro-mobile/react-native"
+  },
+  "keywords": [
+    "sekyro",
+    "kyc",
+    "ekyc",
+    "identity-verification",
+    "nfc",
+    "react-native",
+    "turbomodule",
+    "mauritania"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "react-native": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    },
+    "./app.plugin.js": "./app.plugin.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "src/specs",
+    "android/build.gradle",
+    "android/src/main",
+    "ios",
+    "SekyroReactNative.podspec",
+    "scripts/sekyro_pods.rb",
+    "app.plugin.js",
+    "plugin",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE",
+    "sbom.cdx.json"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "jest --maxWorkers=2",
+    "build": "tsup && node -e \"const f=require('fs');f.renameSync('dist/index.d.ts','dist/index.d.cts');f.renameSync('dist/index.d.mts','dist/index.d.ts');f.writeFileSync('dist/package.json','{\\\"type\\\":\\\"module\\\"}\\n')\"",
+    "api:report": "api-extractor run --local",
+    "api:check": "api-extractor run"
+  },
+  "peerDependencies": {
+    "react": ">=18.3",
+    "react-native": ">=0.76"
+  },
+  "devDependencies": {
+    "@expo/config-plugins": "54.0.2",
+    "@microsoft/api-extractor": "7.52.10",
+    "@react-native/babel-preset": "0.84.1",
+    "@testing-library/react-native": "13.3.3",
+    "@types/jest": "29.5.14",
+    "@types/react": "19.2.2",
+    "jest": "29.7.0",
+    "react": "19.2.3",
+    "react-native": "0.84.1",
+    "react-test-renderer": "19.2.3",
+    "ts-jest": "29.4.4",
+    "tsup": "8.5.0",
+    "typescript": "5.9.3"
+  },
+  "codegenConfig": {
+    "name": "RNSekyroReactNativeSpec",
+    "type": "modules",
+    "jsSrcsDir": "src/specs",
+    "android": {
+      "javaPackageName": "ai.sekyro.reactnative"
+    },
+    "ios": {
+      "modulesProvider": {
+        "SekyroReactNative": "RCTSekyroReactNative"
+      }
+    }
+  },
+  "sekyro": {
+    "android": "0.1.0-rc.2",
+    "ios": "0.1.0-rc.2"
+  }
+}

package/plugin/android.js

@@ -0,0 +1,24 @@
+// Android needs no manifest edits: the sekyro-ui AAR manifest merges CAMERA, NFC, the optional
+// features and SekyroActivity. The only requirement checked here is the core's minSdk.
+const MIN_SDK = 24;
+
+/** @param {Record<string, any>} config @returns {number | undefined} */
+function buildPropertiesMinSdk(config) {
+  for (const entry of config.plugins ?? []) {
+    if (Array.isArray(entry) && entry[0] === 'expo-build-properties') {
+      const value = entry[1]?.android?.minSdkVersion;
+      if (value !== undefined) return Number(value);
+    }
+  }
+  return undefined;
+}
+
+/** @param {Record<string, any>} config */
+function assertMinSdk(config) {
+  const minSdk = buildPropertiesMinSdk(config);
+  if (minSdk !== undefined && !(minSdk >= MIN_SDK)) {
+    throw new Error(`@sekyro/react-native needs Android minSdkVersion >= ${MIN_SDK} (expo-build-properties sets ${minSdk})`);
+  }
+}
+
+module.exports = { assertMinSdk, MIN_SDK };

package/plugin/index.js

@@ -0,0 +1,76 @@
+// Expo config plugin: plugins: [['@sekyro/react-native', { nfc: true, appAttest: 'production' }]]
+
+/** `expo/config-plugins` (Expo's documented re-export, resolvable from the app) before `@expo/config-plugins`. */
+function loadConfigPlugins() {
+  try {
+    return require('expo/config-plugins');
+  } catch {
+    return require('@expo/config-plugins');
+  }
+}
+const {
+  withInfoPlist,
+  withEntitlementsPlist,
+  withDangerousMod,
+  withAndroidManifest,
+  createRunOncePlugin,
+} = loadConfigPlugins();
+const fs = require('node:fs');
+const path = require('node:path');
+const ios = require('./ios');
+const { assertMinSdk } = require('./android');
+const pkg = require('../package.json');
+
+const KNOWN = new Set(['nfc', 'appAttest', 'cameraPermission', 'nfcPermission']);
+
+function validate(options) {
+  if (typeof options !== 'object' || options === null || Array.isArray(options)) {
+    throw new Error('@sekyro/react-native plugin: options must be an object');
+  }
+  for (const k of Object.keys(options)) {
+    if (!KNOWN.has(k)) throw new Error(`@sekyro/react-native plugin: unknown option "${k}"`);
+  }
+  if (options.nfc !== undefined && typeof options.nfc !== 'boolean') {
+    throw new Error('@sekyro/react-native plugin: nfc must be a boolean');
+  }
+  if (options.appAttest !== undefined && !['production', 'development', false].includes(options.appAttest)) {
+    throw new Error("@sekyro/react-native plugin: appAttest must be 'production', 'development' or false");
+  }
+  for (const k of ['cameraPermission', 'nfcPermission']) {
+    if (options[k] !== undefined && (typeof options[k] !== 'string' || options[k].length === 0)) {
+      throw new Error(`@sekyro/react-native plugin: ${k} must be a non-empty string`);
+    }
+  }
+}
+
+/**
+ * @param {import('@expo/config-plugins').ExportedConfig} config
+ * @param {import('./ios').SekyroPluginOptions} [options]
+ */
+function withSekyro(config, options = {}) {
+  validate(options ?? {});
+  const opts = options ?? {};
+  config = withInfoPlist(config, (c) => {
+    c.modResults = ios.withSekyroInfoPlist(c.modResults, opts);
+    return c;
+  });
+  config = withEntitlementsPlist(config, (c) => {
+    c.modResults = ios.withSekyroEntitlements(c.modResults, opts);
+    return c;
+  });
+  config = withDangerousMod(config, [
+    'ios',
+    (c) => {
+      const file = path.join(c.modRequest.platformProjectRoot, 'Podfile');
+      fs.writeFileSync(file, ios.addSekyroPod(fs.readFileSync(file, 'utf8')));
+      return c;
+    },
+  ]);
+  config = withAndroidManifest(config, (c) => {
+    assertMinSdk(c);
+    return c;
+  });
+  return config;
+}
+
+module.exports = createRunOncePlugin(withSekyro, pkg.name, pkg.version);

package/plugin/ios.js

@@ -0,0 +1,61 @@
+// Pure helpers for the Expo config plugin (iOS). No Expo imports, so they are unit-testable.
+const AIDS = ['A0000002471001', 'A0000002472001']; // ICAO eMRTD LDS1 application + its alternate (Plan 3 sample)
+const AID_KEY = 'com.apple.developer.nfc.readersession.iso7816.select-identifiers';
+const NFC_FORMATS_KEY = 'com.apple.developer.nfc.readersession.formats';
+const APP_ATTEST_KEY = 'com.apple.developer.devicecheck.appattest-environment';
+
+/**
+ * @typedef {object} SekyroPluginOptions
+ * @property {boolean} [nfc] Read the document chip (default true).
+ * @property {'production' | 'development' | false} [appAttest] App Attest environment (default 'production').
+ * @property {string} [cameraPermission] NSCameraUsageDescription when the app has none.
+ * @property {string} [nfcPermission] NFCReaderUsageDescription when the app has none.
+ */
+
+/**
+ * @param {Record<string, any>} plist
+ * @param {SekyroPluginOptions} [options]
+ * @returns {Record<string, any>}
+ */
+function withSekyroInfoPlist(plist, { nfc = true, cameraPermission, nfcPermission } = {}) {
+  const out = { ...plist };
+  out.NSCameraUsageDescription ??=
+    cameraPermission ?? 'The camera is used to capture your face and your identity document for verification.';
+  if (nfc) {
+    out.NFCReaderUsageDescription ??= nfcPermission ?? 'NFC is used to read the chip of your passport or identity card.';
+    out[AID_KEY] = [...new Set([...(out[AID_KEY] ?? []), ...AIDS])];
+  }
+  return out;
+}
+
+/**
+ * @param {Record<string, any>} ent
+ * @param {SekyroPluginOptions} [options]
+ * @returns {Record<string, any>}
+ */
+function withSekyroEntitlements(ent, { nfc = true, appAttest = 'production' } = {}) {
+  const out = { ...ent };
+  if (nfc) out[NFC_FORMATS_KEY] = [...new Set([...(out[NFC_FORMATS_KEY] ?? []), 'TAG'])];
+  if (appAttest) out[APP_ATTEST_KEY] = appAttest;
+  return out;
+}
+
+const REQUIRE = `require Pod::Executable.execute_command('node', ['-p', 'require.resolve("@sekyro/react-native/package.json", {paths: [process.argv[1]]})', __dir__]).strip.sub(/package\\.json$/, 'scripts/sekyro_pods.rb')`;
+
+/**
+ * @param {string} podfile
+ * @returns {string}
+ */
+function addSekyroPod(podfile) {
+  if (podfile.includes('sekyro_kit_pod!')) return podfile;
+  const anchor = /(config = use_native_modules!.*\n)/;
+  if (!anchor.test(podfile)) {
+    throw new Error(
+      '@sekyro/react-native plugin: the Podfile has no `config = use_native_modules!` line — add `sekyro_kit_pod!` to your target by hand',
+    );
+  }
+  const withPod = podfile.replace(anchor, `$1  sekyro_kit_pod!\n`);
+  return withPod.includes(REQUIRE) ? withPod : `${REQUIRE}\n${withPod}`;
+}
+
+module.exports = { withSekyroInfoPlist, withSekyroEntitlements, addSekyroPod, AIDS };

package/sbom.cdx.json

@@ -0,0 +1,153 @@
+{
+  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.6",
+  "version": 1,
+  "metadata": {
+    "tools": {
+      "components": [
+        {
+          "type": "application",
+          "name": "npm",
+          "version": "11.12.1"
+        },
+        {
+          "type": "library",
+          "name": "cyclonedx-library",
+          "group": "@cyclonedx",
+          "version": "10.3.0",
+          "author": "Jan Kowalleck",
+          "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).",
+          "licenses": [
+            {
+              "license": {
+                "id": "Apache-2.0"
+              }
+            }
+          ],
+          "externalReferences": [
+            {
+              "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues",
+              "type": "issue-tracker",
+              "comment": "as detected from PackageJson property \"bugs.url\""
+            },
+            {
+              "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git",
+              "type": "vcs",
+              "comment": "as detected from PackageJson property \"repository.url\""
+            },
+            {
+              "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme",
+              "type": "website",
+              "comment": "as detected from PackageJson property \"homepage\""
+            }
+          ],
+          "properties": [
+            {
+              "name": "cdx:npm:package:constraint:engine:node",
+              "value": ">=20.18.0"
+            }
+          ]
+        },
+        {
+          "type": "application",
+          "name": "cyclonedx-npm",
+          "group": "@cyclonedx",
+          "version": "6.0.1",
+          "author": "Jan Kowalleck",
+          "description": "Create CycloneDX Software Bill of Materials (SBOM) from NPM projects.",
+          "licenses": [
+            {
+              "license": {
+                "id": "Apache-2.0"
+              }
+            }
+          ],
+          "externalReferences": [
+            {
+              "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues",
+              "type": "issue-tracker",
+              "comment": "as detected from PackageJson property \"bugs.url\""
+            },
+            {
+              "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git",
+              "type": "vcs",
+              "comment": "as detected from PackageJson property \"repository.url\""
+            },
+            {
+              "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme",
+              "type": "website",
+              "comment": "as detected from PackageJson property \"homepage\""
+            }
+          ],
+          "properties": [
+            {
+              "name": "cdx:npm:package:constraint:engine:node",
+              "value": ">=20.18.0"
+            },
+            {
+              "name": "cdx:npm:package:constraint:engine:npm",
+              "value": ">=9"
+            }
+          ]
+        }
+      ]
+    },
+    "component": {
+      "type": "application",
+      "name": "react-native",
+      "group": "@sekyro",
+      "version": "0.1.0-rc.1",
+      "bom-ref": "@sekyro/react-native@0.1.0-rc.1",
+      "description": "Sekyro AI eKYC for React Native — glue over the binary Android and iOS SDKs (New Architecture)",
+      "licenses": [
+        {
+          "license": {
+            "name": "SEE LICENSE IN LICENSE",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40sekyro/react-native@0.1.0-rc.1?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2FIBTIKAR-Technologies%2Fibtikar-identity.git%23sekyro-mobile%2Freact-native",
+      "externalReferences": [
+        {
+          "url": "https://github.com/IBTIKAR-Technologies/ibtikar-identity/issues",
+          "type": "issue-tracker",
+          "comment": "as detected from PackageJson property \"bugs.url\""
+        },
+        {
+          "url": "git+https://github.com/IBTIKAR-Technologies/ibtikar-identity.git#sekyro-mobile/react-native",
+          "type": "vcs",
+          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
+        },
+        {
+          "url": "https://github.com/IBTIKAR-Technologies/ibtikar-identity#readme",
+          "type": "website",
+          "comment": "as detected from PackageJson property \"homepage\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:constraint:engine:node",
+          "value": ">=20"
+        },
+        {
+          "name": "cdx:npm:package:path",
+          "value": ""
+        }
+      ]
+    },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ]
+  },
+  "components": [],
+  "dependencies": [
+    {
+      "ref": "@sekyro/react-native@0.1.0-rc.1"
+    }
+  ]
+}

package/scripts/sekyro_pods.rb

@@ -0,0 +1,27 @@
+# @sekyro/react-native — declares where the binary SekyroKit pod comes from. In the app's Podfile:
+#
+#   require Pod::Executable.execute_command('node', ['-p',
+#     'require.resolve("@sekyro/react-native/package.json", {paths: [process.argv[1]]})', __dir__]).strip.sub(/package\.json$/, 'scripts/sekyro_pods.rb')
+#
+#   target 'YourApp' do
+#     config = use_native_modules!
+#     sekyro_kit_pod!
+#     ...
+#
+# Default: the podspec of the public sekyro-ios-dist repo at the pinned tag (it downloads the signed
+# XCFramework zip from assets.sekyro.ai and checks its sha256). Development: SEKYRO_KIT_PATH=<dir> uses a
+# `make-dist.sh <pin> --local` tree instead.
+require 'json'
+
+def sekyro_kit_pod!
+  pkg = JSON.parse(File.read(File.join(__dir__, '..', 'package.json')))
+  version = pkg.fetch('sekyro').fetch('ios')
+  local = ENV['SEKYRO_KIT_PATH']
+  if local && !local.strip.empty?
+    Pod::UI.puts "[Sekyro] SekyroKit #{version} from the local dist #{local} (development only)".yellow
+    pod 'SekyroKit', :path => local
+  else
+    # :podspec, not :git — a :git pod is built from the repo checkout, and the binary is not in the repo.
+    pod 'SekyroKit', :podspec => "https://raw.githubusercontent.com/IBTIKAR-Technologies/sekyro-ios-dist/#{version}/SekyroKit.podspec"
+  end
+end

package/src/specs/NativeSekyroReactNative.ts

@@ -0,0 +1,46 @@
+// Shipped as source on purpose: RN codegen reads it when the app builds. Types only, no logic.
+import type { TurboModule } from 'react-native';
+import { TurboModuleRegistry } from 'react-native';
+// Deep type import: the codegen of RN 0.76–0.84 resolves these names (CodegenTypes is re-exported
+// from 'react-native' only from 0.80). For this package's own tsc, types/codegen-types.d.ts
+// supplies the TypeScript declarations that newer RN releases no longer ship at this path.
+import type { Double, EventEmitter, Int32, UnsafeObject } from 'react-native/Libraries/Types/CodegenTypes';
+
+export type NativeColors = {
+  brand?: string;
+  brandFg?: string;
+  bg?: string;
+  surface?: string;
+  fg?: string;
+  fgMuted?: string;
+  border?: string;
+  danger?: string;
+  success?: string;
+  warning?: string;
+};
+
+export type NativeConfig = {
+  clientToken: string;
+  apiOrigin?: string;
+  locale?: string;
+  colors?: NativeColors;
+  radius?: Double;
+  fontFamily?: string;
+  darkMode?: string;
+  /** Flat catalog-key → text map for the active locale. */
+  strings?: UnsafeObject;
+};
+
+export type NativeResult = { status: string; sessionId?: string; displayStatus?: string; code?: string };
+
+export type NativeEvent = { type: string; step?: string; retryReason?: string; seq: Int32 };
+
+export interface Spec extends TurboModule {
+  start(config: NativeConfig): Promise<NativeResult>;
+  nativeVersion(): string;
+  readonly onEvent: EventEmitter<NativeEvent>;
+}
+
+// `get`, not `getEnforcing`: importing the package must not throw in an app without the native
+// module (Expo Go, web, a missing pod install); `startSekyro` then rejects `unsupported_platform`.
+export default TurboModuleRegistry.get<Spec>('SekyroReactNative');