@smileid/usesmileid_vision_document 12.0.0 → 12.0.2

package/CHANGELOG.md

@@ -1,3 +1,11 @@
+## 12.0.2
+
+See the repository CHANGELOG for the 12.0.2 release notes.
+
+## 12.0.1
+
+See the repository CHANGELOG for the 12.0.1 release notes.
+
 ## 12.0.0
 
 First stable release of the Smile ID v12 SDK. Provides the iOS Apple Vision document detection module for `usesmileid`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smileid/usesmileid_vision_document",
-  "version": "12.0.0",
+  "version": "12.0.2",
   "description": "Apple Vision document detection implementation for the UseSmileID React Native (Expo) SDK.",
   "homepage": "https://usesmileid.com",
   "repository": {
@@ -48,8 +48,8 @@
     "CHANGELOG.md"
   ],
   "dependencies": {
-    "@smileid/usesmileid_bridge": "12.0.0",
-    "@smileid/usesmileid_platform_interface": "12.0.0"
+    "@smileid/usesmileid_platform_interface": "12.0.2",
+    "@smileid/usesmileid_bridge": "12.0.2"
   },
   "peerDependencies": {
     "expo": ">=56.0.0",
@@ -57,8 +57,8 @@
     "react-native": ">=0.83.0"
   },
   "devDependencies": {
-    "@expo/config-plugins": "^56.0.8",
     "@types/node": "^25.9.1",
+    "expo": "^56.0.9",
     "expo-modules-core": "^56.0.15",
     "react-native": "^0.85.3",
     "typescript": "^6.0.3"

package/plugin/build/index.d.ts

@@ -1,3 +1,3 @@
-import { ConfigPlugin } from "@expo/config-plugins";
+import { ConfigPlugin } from "expo/config-plugins";
 declare const withVisionDocumentSpm: ConfigPlugin;
 export default withVisionDocumentSpm;

package/plugin/build/index.js

@@ -46,11 +46,14 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-const config_plugins_1 = require("@expo/config-plugins");
+const config_plugins_1 = require("expo/config-plugins");
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
+const deployment_target_1 = require("./lib/deployment_target");
 const podfile_1 = require("./lib/podfile");
 const spm_1 = require("./lib/spm");
+// The lowest the Expo iOS template and the pods alongside it still compile at.
+const IOS_DEPLOYMENT_TARGET = "16.4";
 // Pinned to the exact `12.0.0` release tag — `from: 12.0.0`
 // would not resolve because `ios-spm` publishes pre-release tags (e.g.
 // `12.0.0`), and SPM excludes pre-release tags from open-ended
@@ -59,13 +62,20 @@ const SMILE_ID_PACKAGE = {
     url: "https://github.com/smileidentity/ios-spm",
     requirement: {
         kind: "exactVersion",
-        version: "12.0.0",
+        version: "12.0.2",
     },
 };
 const POD_TARGET = "UseSmileIDVisionDocumentExpo";
 const SPM_PRODUCTS = ["UseSmileIDVisionDocument", "UseSmileIDBridge"];
 const PODFILE_MARKER = "usesmileid_vision_document";
+// Nothing else links the bridge's own pod target, so without this block its
+// `import UseSmileIDBridge` fails. Both vision plugins emit it; the injection is
+// idempotent per marker, so installing both is harmless.
+const BRIDGE_POD_TARGET = "UseSmileIDBridgeExpo";
+const BRIDGE_SPM_PRODUCTS = ["UseSmileIDBridge"];
+const BRIDGE_PODFILE_MARKER = "usesmileid_bridge";
 const withVisionDocumentSpm = (config) => {
+    config = (0, deployment_target_1.withIosDeploymentTargetFloor)(config, IOS_DEPLOYMENT_TARGET);
     // 1. Add the package + products to the host app's Xcode project so
     //    Xcode resolves the binary xcframeworks and embeds them in the
     //    .app at link time.
@@ -89,12 +99,19 @@ const withVisionDocumentSpm = (config) => {
         (config) => {
             const podfilePath = path.join(config.modRequest.platformProjectRoot, "Podfile");
             const original = fs.readFileSync(podfilePath, "utf-8");
-            const next = (0, podfile_1.injectPodfileSpmBlock)(original, {
+            let next = (0, podfile_1.injectPodfileSpmBlock)(original, {
                 marker: PODFILE_MARKER,
                 package: SMILE_ID_PACKAGE,
                 podTarget: POD_TARGET,
                 products: [...SPM_PRODUCTS],
             });
+            next = (0, podfile_1.injectPodfileSpmBlock)(next, {
+                marker: BRIDGE_PODFILE_MARKER,
+                package: SMILE_ID_PACKAGE,
+                podTarget: BRIDGE_POD_TARGET,
+                products: [...BRIDGE_SPM_PRODUCTS],
+                required: true,
+            });
             if (next !== original) {
                 fs.writeFileSync(podfilePath, next);
             }

package/plugin/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,iEAAiE;AACjE,0DAA0D;AAC1D,qEAAqE;AACrE,2CAA2C;AAC3C,mEAAmE;AACnE,wEAAwE;AACxE,2EAA2E;AAC3E,EAAE;AACF,oDAAoD;AACpD,oEAAoE;AACpE,sEAAsE;AACtE,oEAAoE;AACpE,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAE9B,yDAI8B;AAC9B,uCAAyB;AACzB,2CAA6B;AAE7B,2CAAsD;AACtD,mCAAuD;AAEvD,4DAA4D;AAC5D,uEAAuE;AACvE,+DAA+D;AAC/D,8BAA8B;AAC9B,MAAM,gBAAgB,GAAe;IACnC,GAAG,EAAE,0CAA0C;IAC/C,WAAW,EAAE;QACX,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,QAAQ;KAClB;CACF,CAAC;AAEF,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAClD,MAAM,YAAY,GAAG,CAAC,0BAA0B,EAAE,kBAAkB,CAAU,CAAC;AAC/E,MAAM,cAAc,GAAG,4BAA4B,CAAC;AAEpD,MAAM,qBAAqB,GAAiB,CAAC,MAAM,EAAE,EAAE;IACrD,mEAAmE;IACnE,mEAAmE;IACnE,wBAAwB;IACxB,MAAM,GAAG,IAAA,iCAAgB,EAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;QACJ,CAAC;QACD,IAAA,oBAAc,EAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,EAAE;YAClD,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,CAAC,GAAG,YAAY,CAAC;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,iEAAiE;IACjE,+DAA+D;IAC/D,oEAAoE;IACpE,MAAM,GAAG,IAAA,iCAAgB,EAAC,MAAM,EAAE;QAChC,KAAK;QACL,CAAC,MAAM,EAAE,EAAE;YACT,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAC3B,MAAM,CAAC,UAAU,CAAC,mBAAmB,EACrC,SAAS,CACV,CAAC;YACF,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,IAAA,+BAAqB,EAAC,QAAQ,EAAE;gBAC3C,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,gBAAgB;gBACzB,SAAS,EAAE,UAAU;gBACrB,QAAQ,EAAE,CAAC,GAAG,YAAY,CAAC;aAC5B,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,kBAAe,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,iEAAiE;AACjE,0DAA0D;AAC1D,qEAAqE;AACrE,2CAA2C;AAC3C,mEAAmE;AACnE,wEAAwE;AACxE,2EAA2E;AAC3E,EAAE;AACF,oDAAoD;AACpD,oEAAoE;AACpE,sEAAsE;AACtE,oEAAoE;AACpE,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAE9B,wDAI6B;AAC7B,uCAAyB;AACzB,2CAA6B;AAE7B,+DAAuE;AACvE,2CAAsD;AACtD,mCAAuD;AAEvD,+EAA+E;AAC/E,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC,4DAA4D;AAC5D,uEAAuE;AACvE,+DAA+D;AAC/D,8BAA8B;AAC9B,MAAM,gBAAgB,GAAe;IACnC,GAAG,EAAE,0CAA0C;IAC/C,WAAW,EAAE;QACX,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,QAAQ;KAClB;CACF,CAAC;AAEF,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAClD,MAAM,YAAY,GAAG,CAAC,0BAA0B,EAAE,kBAAkB,CAAU,CAAC;AAC/E,MAAM,cAAc,GAAG,4BAA4B,CAAC;AAEpD,4EAA4E;AAC5E,iFAAiF;AACjF,yDAAyD;AACzD,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACjD,MAAM,mBAAmB,GAAG,CAAC,kBAAkB,CAAU,CAAC;AAC1D,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAElD,MAAM,qBAAqB,GAAiB,CAAC,MAAM,EAAE,EAAE;IACrD,MAAM,GAAG,IAAA,gDAA4B,EAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAErE,mEAAmE;IACnE,mEAAmE;IACnE,wBAAwB;IACxB,MAAM,GAAG,IAAA,iCAAgB,EAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;QACJ,CAAC;QACD,IAAA,oBAAc,EAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,EAAE;YAClD,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,CAAC,GAAG,YAAY,CAAC;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,iEAAiE;IACjE,+DAA+D;IAC/D,oEAAoE;IACpE,MAAM,GAAG,IAAA,iCAAgB,EAAC,MAAM,EAAE;QAChC,KAAK;QACL,CAAC,MAAM,EAAE,EAAE;YACT,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAC3B,MAAM,CAAC,UAAU,CAAC,mBAAmB,EACrC,SAAS,CACV,CAAC;YACF,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,IAAI,GAAG,IAAA,+BAAqB,EAAC,QAAQ,EAAE;gBACzC,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,gBAAgB;gBACzB,SAAS,EAAE,UAAU;gBACrB,QAAQ,EAAE,CAAC,GAAG,YAAY,CAAC;aAC5B,CAAC,CAAC;YACH,IAAI,GAAG,IAAA,+BAAqB,EAAC,IAAI,EAAE;gBACjC,MAAM,EAAE,qBAAqB;gBAC7B,OAAO,EAAE,gBAAgB;gBACzB,SAAS,EAAE,iBAAiB;gBAC5B,QAAQ,EAAE,CAAC,GAAG,mBAAmB,CAAC;gBAClC,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,kBAAe,qBAAqB,CAAC"}

package/plugin/build/lib/deployment_target.d.ts

@@ -0,0 +1,5 @@
+import { type ConfigPlugin } from "expo/config-plugins";
+/** Sets `ios.deploymentTarget` to `minimum` unless the project already asks for a higher one. */
+export declare const withIosDeploymentTargetFloor: ConfigPlugin<string>;
+/** Pure form of the edit the plugin makes to the Podfile properties. */
+export declare function raiseDeploymentTarget(properties: Readonly<Record<string, string>>, minimum: string): Record<string, string>;

package/plugin/build/lib/deployment_target.js

@@ -0,0 +1,39 @@
+"use strict";
+// The Podfile prebuild generates reads `ios.deploymentTarget` from
+// `ios/Podfile.properties.json`, which nothing the SDK publishes used to set.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withIosDeploymentTargetFloor = void 0;
+exports.raiseDeploymentTarget = raiseDeploymentTarget;
+const config_plugins_1 = require("expo/config-plugins");
+/** Sets `ios.deploymentTarget` to `minimum` unless the project already asks for a higher one. */
+const withIosDeploymentTargetFloor = (config, minimum) => (0, config_plugins_1.withPodfileProperties)(config, (config) => {
+    config.modResults = raiseDeploymentTarget(config.modResults, minimum);
+    return config;
+});
+exports.withIosDeploymentTargetFloor = withIosDeploymentTargetFloor;
+/** Pure form of the edit the plugin makes to the Podfile properties. */
+function raiseDeploymentTarget(properties, minimum) {
+    const current = properties["ios.deploymentTarget"];
+    if (current !== undefined && compareVersions(current, minimum) >= 0) {
+        return { ...properties };
+    }
+    return { ...properties, "ios.deploymentTarget": minimum };
+}
+// An unparseable component sorts as 0 so a bad value in a partner's project is
+// overwritten rather than crashing prebuild.
+function compareVersions(left, right) {
+    const leftParts = left.split(".");
+    const rightParts = right.split(".");
+    for (let i = 0; i < Math.max(leftParts.length, rightParts.length); i++) {
+        const difference = toNumber(leftParts[i] ?? "0") - toNumber(rightParts[i] ?? "0");
+        if (difference !== 0) {
+            return difference;
+        }
+    }
+    return 0;
+}
+function toNumber(part) {
+    const parsed = Number.parseInt(part, 10);
+    return Number.isNaN(parsed) ? 0 : parsed;
+}
+//# sourceMappingURL=deployment_target.js.map

package/plugin/build/lib/deployment_target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment_target.js","sourceRoot":"","sources":["../../src/lib/deployment_target.ts"],"names":[],"mappings":";AAAA,mEAAmE;AACnE,8EAA8E;;;AAe9E,sDASC;AAtBD,wDAA+E;AAE/E,iGAAiG;AAC1F,MAAM,4BAA4B,GAAyB,CAChE,MAAM,EACN,OAAO,EACP,EAAE,CACF,IAAA,sCAAqB,EAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;IACvC,MAAM,CAAC,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC;AAPQ,QAAA,4BAA4B,gCAOpC;AAEL,wEAAwE;AACxE,SAAgB,qBAAqB,CACnC,UAA4C,EAC5C,OAAe;IAEf,MAAM,OAAO,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAC;IACnD,IAAI,OAAO,KAAK,SAAS,IAAI,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,GAAG,UAAU,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,GAAG,UAAU,EAAE,sBAAsB,EAAE,OAAO,EAAE,CAAC;AAC5D,CAAC;AAED,+EAA+E;AAC/E,6CAA6C;AAC7C,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvE,MAAM,UAAU,GACd,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACjE,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC"}

package/plugin/build/lib/podfile.d.ts

@@ -7,6 +7,8 @@ export interface PodfileLinkOptions {
     podTarget: string;
     /** SPM library product names to link to the pod target. */
     products: string[];
+    /** Fail `pod install` when the target is absent — a warning there reads as success. */
+    required?: boolean;
 }
 /**
  * Idempotently injects an SPM-linking Ruby block into the Podfile's

package/plugin/build/lib/podfile.js

@@ -19,9 +19,13 @@ function injectPodfileSpmBlock(podfile, options) {
     const block = renderBlock(options);
     const beginMarker = `${BEGIN_PREFIX} ${options.marker} ===`;
     const endMarker = `${END_PREFIX} ${options.marker} ===`;
-    const blockRegex = new RegExp(`${escapeRegExp(beginMarker)}[\\s\\S]*?${escapeRegExp(endMarker)}`, "m");
-    if (blockRegex.test(podfile)) {
-        return podfile.replace(blockRegex, block);
+    // The indentation is captured so a rewrite can restore it; dropping it would
+    // make every prebuild rewrite the Podfile.
+    const blockRegex = new RegExp(`([ \\t]*)${escapeRegExp(beginMarker)}[\\s\\S]*?${escapeRegExp(endMarker)}`, "m");
+    const existing = podfile.match(blockRegex);
+    if (existing) {
+        // A replacer function, so `$` in the Ruby block is never a replacement pattern.
+        return podfile.replace(blockRegex, () => indentBlock(block, existing[1] ?? ""));
     }
     // Inject at the *start* of the post_install body — right after
     // `post_install do |installer|`. We tried matching the closing
@@ -42,16 +46,19 @@ function injectPodfileSpmBlock(podfile, options) {
             "or wire the SPM block in manually.");
     }
     const insertAt = headerMatch.index + headerMatch[0].length;
-    const indented = block
-        .split("\n")
-        .map((line) => (line.length > 0 ? `    ${line}` : line))
-        .join("\n") + "\n";
+    const indented = `${indentBlock(block, "    ")}\n`;
     return podfile.slice(0, insertAt) + indented + podfile.slice(insertAt);
 }
-// All injected strings flow into single-quoted Ruby literals. We
-// reject characters that could break out of those literals so a
-// typo in the bridge plugin can't produce code that runs during
-// `pod install`. Rejected: single-quote, backslash, control chars.
+function indentBlock(block, prefix) {
+    return block
+        .split("\n")
+        .map((line) => (line.length > 0 ? `${prefix}${line}` : line))
+        .join("\n");
+}
+// Injected strings land in Ruby literals, so a typo here could otherwise become
+// code that runs during `pod install`. `#` and `"` are rejected alongside `'`,
+// `\` and control chars because the diagnostics are double-quoted, where Ruby
+// evaluates `#{...}`.
 function validateRubySafe(options) {
     const fields = [
         ["marker", options.marker],
@@ -77,7 +84,7 @@ function validateRubySafe(options) {
             break;
     }
     for (const [name, value] of fields) {
-        if (/['\\\n\r\t]/.test(value)) {
+        if (/['"#\\\n\r\t]/.test(value)) {
             throw new Error(`[smileid-spm] Refusing to inject Podfile block: '${name}' contains an unsafe character (got: ${JSON.stringify(value)}).`);
         }
     }
@@ -87,6 +94,9 @@ function renderBlock(options) {
     const endMarker = `${END_PREFIX} ${options.marker} ===`;
     const requirement = renderRequirement(options.package.requirement);
     const productList = options.products.map((p) => `'${p}'`).join(", ");
+    const missingTarget = options.required
+        ? `raise "[smileid-spm] Pod target #{target_name} is missing from Pods.xcodeproj, so #{product_names.join(', ')} cannot be linked and the Smile ID bridge will not compile. Check that '@smileid/usesmileid_bridge' is installed and that its npm package ships its 'ios' directory."`
+        : `Pod::UI.warn "[smileid-spm] Pod target #{target_name} not found; skipping SPM link."`;
     return `${beginMarker}
 # Wires ${options.package.url} into Pods.xcodeproj and links its
 # products to the '${options.podTarget}' pod target so the Swift
@@ -132,7 +142,7 @@ begin
 
   target = pods_project.targets.find { |t| t.name == target_name }
   if target.nil?
-    Pod::UI.warn "[smileid-spm] Pod target #{target_name} not found; skipping SPM link."
+    ${missingTarget}
   else
     product_names.each do |product_name|
       already = target.package_product_dependencies.any? do |d|
@@ -153,6 +163,37 @@ begin
       bf.product_ref = dep
       target.frameworks_build_phase.files << bf
     end
+
+    # Every linking static pod absorbs ios-spm's source-target objects and the
+    # app's -ObjC link then sees duplicates — the app keeps the single copy.
+    strip_name = '[smileid-spm] Strip absorbed SPM source objects'
+    unless target.shell_script_build_phases.any? { |p| p.name == strip_name }
+      phase = target.new_shell_script_build_phase(strip_name)
+      phase.shell_script = <<~'STRIPSH'
+        set -u
+        A="\${TARGET_BUILD_DIR}/\${EXECUTABLE_PATH}"
+        [ -f "$A" ] || exit 0
+        strip_obj() {
+          ar -t "$1" 2>/dev/null | grep -q "^$2$" || return 0
+          ar -d "$1" "$2" && ranlib "$1" 2>/dev/null || true
+        }
+        ARCHS_IN=$(lipo -archs "$A" 2>/dev/null || true)
+        for OBJ in UseSmileIDSentrySupport.o UseSmileIDLottieSupport.o; do
+          if [ "$(echo "$ARCHS_IN" | wc -w)" -gt 1 ]; then
+            THIN=""
+            for ARCH in $ARCHS_IN; do
+              lipo -thin "$ARCH" "$A" -output "$A.$ARCH"
+              strip_obj "$A.$ARCH" "$OBJ"
+              THIN="$THIN $A.$ARCH"
+            done
+            lipo -create $THIN -output "$A"
+            rm -f $THIN
+          else
+            strip_obj "$A" "$OBJ"
+          fi
+        done
+      STRIPSH
+    end
   end
 
   pods_project.save

package/plugin/build/lib/podfile.js.map

@@ -1 +1 @@
-{"version":3,"file":"podfile.js","sourceRoot":"","sources":["../../src/lib/podfile.ts"],"names":[],"mappings":";AAAA,qEAAqE;AACrE,sEAAsE;AACtE,mEAAmE;AACnE,mEAAmE;AACnE,iEAAiE;;AAuBjE,sDA6CC;AAhED,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAChD,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAY5C;;;;;GAKG;AACH,SAAgB,qBAAqB,CACnC,OAAe,EACf,OAA2B;IAE3B,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE1B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,GAAG,YAAY,IAAI,OAAO,CAAC,MAAM,MAAM,CAAC;IAC5D,MAAM,SAAS,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,MAAM,MAAM,CAAC;IAExD,MAAM,UAAU,GAAG,IAAI,MAAM,CAC3B,GAAG,YAAY,CAAC,WAAW,CAAC,aAAa,YAAY,CAAC,SAAS,CAAC,EAAE,EAClE,GAAG,CACJ,CAAC;IACF,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,+DAA+D;IAC/D,+DAA+D;IAC/D,+DAA+D;IAC/D,4DAA4D;IAC5D,4DAA4D;IAC5D,8DAA8D;IAC9D,6DAA6D;IAC7D,iEAAiE;IACjE,gEAAgE;IAChE,mDAAmD;IACnD,MAAM,WAAW,GAAG,gDAAgD,CAAC;IACrE,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,2EAA2E;YACzE,uGAAuG;YACvG,oGAAoG;YACpG,oCAAoC,CACvC,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3D,MAAM,QAAQ,GACZ,KAAK;SACF,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACvD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED,iEAAiE;AACjE,gEAAgE;AAChE,gEAAgE;AAChE,mEAAmE;AACnE,SAAS,gBAAgB,CAAC,OAA2B;IACnD,MAAM,MAAM,GAA4B;QACtC,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;QAC1B,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QACpC,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC;KACjC,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,QAAQ,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACzC,KAAK,sBAAsB,CAAC;QAC5B,KAAK,sBAAsB;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,4BAA4B;gBAC5B,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,cAAc;aAC3C,CAAC,CAAC;YACH,MAAM;QACR,KAAK,cAAc;YACjB,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1E,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACxE,MAAM;IACV,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,oDAAoD,IAAI,wCAAwC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAC1H,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAA2B;IAC9C,MAAM,WAAW,GAAG,GAAG,YAAY,IAAI,OAAO,CAAC,MAAM,MAAM,CAAC;IAC5D,MAAM,SAAS,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,MAAM,MAAM,CAAC;IACxD,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAErE,OAAO,GAAG,WAAW;UACb,OAAO,CAAC,OAAO,CAAC,GAAG;qBACR,OAAO,CAAC,SAAS;;;;;;;;;;;;;;;;;eAiBvB,OAAO,CAAC,OAAO,CAAC,GAAG;sBACZ,WAAW;qBACZ,WAAW;mBACb,OAAO,CAAC,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gEAgD4B,OAAO,CAAC,SAAS;;;EAG/E,SAAS,EAAE,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAmB;IAC5C,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,sBAAsB;YACzB,OAAO,oDAAoD,GAAG,CAAC,cAAc,KAAK,CAAC;QACrF,KAAK,sBAAsB;YACzB,OAAO,oDAAoD,GAAG,CAAC,cAAc,KAAK,CAAC;QACrF,KAAK,cAAc;YACjB,OAAO,qCAAqC,GAAG,CAAC,OAAO,KAAK,CAAC;QAC/D,KAAK,QAAQ;YACX,OAAO,8BAA8B,GAAG,CAAC,MAAM,KAAK,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}
+{"version":3,"file":"podfile.js","sourceRoot":"","sources":["../../src/lib/podfile.ts"],"names":[],"mappings":";AAAA,qEAAqE;AACrE,sEAAsE;AACtE,mEAAmE;AACnE,mEAAmE;AACnE,iEAAiE;;AAyBjE,sDA+CC;AApED,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAChD,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAc5C;;;;;GAKG;AACH,SAAgB,qBAAqB,CACnC,OAAe,EACf,OAA2B;IAE3B,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE1B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,GAAG,YAAY,IAAI,OAAO,CAAC,MAAM,MAAM,CAAC;IAC5D,MAAM,SAAS,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,MAAM,MAAM,CAAC;IAExD,6EAA6E;IAC7E,2CAA2C;IAC3C,MAAM,UAAU,GAAG,IAAI,MAAM,CAC3B,YAAY,YAAY,CAAC,WAAW,CAAC,aAAa,YAAY,CAAC,SAAS,CAAC,EAAE,EAC3E,GAAG,CACJ,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,QAAQ,EAAE,CAAC;QACb,gFAAgF;QAChF,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,CACtC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CACtC,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,+DAA+D;IAC/D,+DAA+D;IAC/D,4DAA4D;IAC5D,4DAA4D;IAC5D,8DAA8D;IAC9D,6DAA6D;IAC7D,iEAAiE;IACjE,gEAAgE;IAChE,mDAAmD;IACnD,MAAM,WAAW,GAAG,gDAAgD,CAAC;IACrE,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,2EAA2E;YACzE,uGAAuG;YACvG,oGAAoG;YACpG,oCAAoC,CACvC,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3D,MAAM,QAAQ,GAAG,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC;IACnD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,MAAc;IAChD,OAAO,KAAK;SACT,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SAC5D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,sBAAsB;AACtB,SAAS,gBAAgB,CAAC,OAA2B;IACnD,MAAM,MAAM,GAA4B;QACtC,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;QAC1B,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QACpC,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC;KACjC,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,QAAQ,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACzC,KAAK,sBAAsB,CAAC;QAC5B,KAAK,sBAAsB;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,4BAA4B;gBAC5B,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,cAAc;aAC3C,CAAC,CAAC;YACH,MAAM;QACR,KAAK,cAAc;YACjB,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1E,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACxE,MAAM;IACV,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,oDAAoD,IAAI,wCAAwC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAC1H,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAA2B;IAC9C,MAAM,WAAW,GAAG,GAAG,YAAY,IAAI,OAAO,CAAC,MAAM,MAAM,CAAC;IAC5D,MAAM,SAAS,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,MAAM,MAAM,CAAC;IACxD,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ;QACpC,CAAC,CAAC,oRAAoR;QACtR,CAAC,CAAC,sFAAsF,CAAC;IAE3F,OAAO,GAAG,WAAW;UACb,OAAO,CAAC,OAAO,CAAC,GAAG;qBACR,OAAO,CAAC,SAAS;;;;;;;;;;;;;;;;;eAiBvB,OAAO,CAAC,OAAO,CAAC,GAAG;sBACZ,WAAW;qBACZ,WAAW;mBACb,OAAO,CAAC,SAAS;;;;;;;;;;;;;;;;;;;;;;;MAuB9B,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gEAwD6C,OAAO,CAAC,SAAS;;;EAG/E,SAAS,EAAE,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAmB;IAC5C,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,sBAAsB;YACzB,OAAO,oDAAoD,GAAG,CAAC,cAAc,KAAK,CAAC;QACrF,KAAK,sBAAsB;YACzB,OAAO,oDAAoD,GAAG,CAAC,cAAc,KAAK,CAAC;QACrF,KAAK,cAAc;YACjB,OAAO,qCAAqC,GAAG,CAAC,OAAO,KAAK,CAAC;QAC/D,KAAK,QAAQ;YACX,OAAO,8BAA8B,GAAG,CAAC,MAAM,KAAK,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/plugin/build/lib/spm.d.ts

@@ -1,4 +1,4 @@
-import { XcodeProject } from "@expo/config-plugins";
+import { XcodeProject } from "expo/config-plugins";
 export interface SpmPackage {
     /** Remote git URL of the Swift Package, e.g. `https://github.com/smileidentity/ios-spm`. */
     url: string;

package/plugin/src/__tests__/deployment_target.test.ts

@@ -0,0 +1,41 @@
+import { describe, expect, it } from "vitest";
+
+import { raiseDeploymentTarget } from "../lib/deployment_target";
+
+describe("raiseDeploymentTarget", () => {
+  it("sets the floor when the project declares nothing", () => {
+    expect(raiseDeploymentTarget({}, "16.4")).toEqual({
+      "ios.deploymentTarget": "16.4",
+    });
+  });
+
+  it("raises a target below the floor", () => {
+    expect(
+      raiseDeploymentTarget({ "ios.deploymentTarget": "15.0" }, "16.4"),
+    ).toEqual({ "ios.deploymentTarget": "16.4" });
+  });
+
+  it("leaves a higher target the partner chose alone", () => {
+    expect(
+      raiseDeploymentTarget({ "ios.deploymentTarget": "18.0" }, "16.4"),
+    ).toEqual({ "ios.deploymentTarget": "18.0" });
+  });
+
+  it("compares components numerically rather than as text", () => {
+    expect(
+      raiseDeploymentTarget({ "ios.deploymentTarget": "16.10" }, "16.4"),
+    ).toEqual({ "ios.deploymentTarget": "16.10" });
+  });
+
+  it("overwrites a value it cannot parse", () => {
+    expect(
+      raiseDeploymentTarget({ "ios.deploymentTarget": "latest" }, "16.4"),
+    ).toEqual({ "ios.deploymentTarget": "16.4" });
+  });
+
+  it("preserves unrelated Podfile properties", () => {
+    expect(
+      raiseDeploymentTarget({ "expo.jsEngine": "hermes" }, "16.4"),
+    ).toEqual({ "expo.jsEngine": "hermes", "ios.deploymentTarget": "16.4" });
+  });
+});

package/plugin/src/__tests__/podfile.test.ts

@@ -0,0 +1,138 @@
+import { describe, expect, it } from "vitest";
+
+import { injectPodfileSpmBlock } from "../lib/podfile";
+import type { SpmPackage } from "../lib/spm";
+
+const PACKAGE: SpmPackage = {
+  url: "https://github.com/smileidentity/ios-spm",
+  requirement: { kind: "exactVersion", version: "12.0.1" },
+};
+
+const PODFILE = `platform :ios, podfile_properties['ios.deploymentTarget']
+
+target 'sample' do
+  use_expo_modules!
+  config = use_native_modules!
+
+  post_install do |installer|
+    react_native_post_install(
+      installer,
+      config[:reactNativePath],
+    )
+  end
+end
+`;
+
+function injectProvider(podfile: string): string {
+  return injectPodfileSpmBlock(podfile, {
+    marker: "usesmileid_vision_document",
+    package: PACKAGE,
+    podTarget: "UseSmileIDVisionDocumentExpo",
+    products: ["UseSmileIDVisionDocument", "UseSmileIDBridge"],
+  });
+}
+
+function injectBridge(podfile: string): string {
+  return injectPodfileSpmBlock(podfile, {
+    marker: "usesmileid_bridge",
+    package: PACKAGE,
+    podTarget: "UseSmileIDBridgeExpo",
+    products: ["UseSmileIDBridge"],
+    required: true,
+  });
+}
+
+describe("injectPodfileSpmBlock", () => {
+  it("keeps the provider and bridge blocks as two separate regions", () => {
+    const result = injectBridge(injectProvider(PODFILE));
+
+    expect(result).toContain(
+      "# === BEGIN smileid-spm: usesmileid_vision_document",
+    );
+    expect(result).toContain("# === BEGIN smileid-spm: usesmileid_bridge");
+    expect(result).toContain("target_name = 'UseSmileIDVisionDocumentExpo'");
+    expect(result).toContain("target_name = 'UseSmileIDBridgeExpo'");
+  });
+
+  it("nests neither block inside the other", () => {
+    const result = injectBridge(injectProvider(PODFILE));
+
+    const order = [
+      result.indexOf("# === BEGIN smileid-spm: usesmileid_bridge"),
+      result.indexOf("# === END smileid-spm: usesmileid_bridge"),
+      result.indexOf("# === BEGIN smileid-spm: usesmileid_vision_document"),
+      result.indexOf("# === END smileid-spm: usesmileid_vision_document"),
+    ];
+    expect(order.every((index) => index >= 0)).toBe(true);
+    expect(order[1]).toBeLessThan(order[2]);
+  });
+
+  it("leaves the React Native post-install call in place", () => {
+    const result = injectBridge(injectProvider(PODFILE));
+
+    expect(result).toContain("react_native_post_install(");
+    expect(result.match(/post_install do \|installer\|/g)).toHaveLength(1);
+  });
+
+  it("is idempotent for both blocks", () => {
+    const once = injectBridge(injectProvider(PODFILE));
+
+    expect(injectBridge(injectProvider(once))).toBe(once);
+  });
+
+  it("fails pod install when a required pod target is missing", () => {
+    const result = injectBridge(PODFILE);
+
+    const bridgeBlock = blockFor(result, "usesmileid_bridge");
+    expect(bridgeBlock).toContain('raise "[smileid-spm] Pod target');
+    expect(bridgeBlock).not.toContain("skipping SPM link");
+  });
+
+  it("only warns when a non-required pod target is missing", () => {
+    const result = injectProvider(PODFILE);
+
+    const providerBlock = blockFor(result, "usesmileid_vision_document");
+    expect(providerBlock).toContain("skipping SPM link");
+    expect(providerBlock).not.toContain('raise "[smileid-spm] Pod target');
+  });
+
+  it("refuses to inject without a post_install hook to anchor on", () => {
+    expect(() => injectProvider("target 'sample' do\nend\n")).toThrow(
+      /post_install/,
+    );
+  });
+
+  it("rejects a pod target that could break out of the Ruby literal", () => {
+    expect(() =>
+      injectPodfileSpmBlock(PODFILE, {
+        marker: "usesmileid_bridge",
+        package: PACKAGE,
+        podTarget: "Bridge'; system('rm -rf /')  #",
+        products: ["UseSmileIDBridge"],
+      }),
+    ).toThrow(/unsafe character/);
+  });
+
+  // The diagnostics are double-quoted Ruby, where `#{...}` evaluates.
+  it.each([
+    ["interpolation", "Bridge#{`rm -rf /`}"],
+    ["double quote", 'Bridge"'],
+  ])("rejects a pod target carrying a Ruby %s", (_label, podTarget) => {
+    expect(() =>
+      injectPodfileSpmBlock(PODFILE, {
+        marker: "usesmileid_bridge",
+        package: PACKAGE,
+        podTarget,
+        products: ["UseSmileIDBridge"],
+      }),
+    ).toThrow(/unsafe character/);
+  });
+});
+
+function blockFor(podfile: string, marker: string): string {
+  const begin = podfile.indexOf(`# === BEGIN smileid-spm: ${marker} ===`);
+  const end = podfile.indexOf(`# === END smileid-spm: ${marker} ===`);
+  expect(begin).toBeGreaterThanOrEqual(0);
+  expect(end).toBeGreaterThan(begin);
+  return podfile.slice(begin, end);
+}

package/plugin/src/index.ts

@@ -16,13 +16,17 @@ import {
   ConfigPlugin,
   withDangerousMod,
   withXcodeProject,
-} from "@expo/config-plugins";
+} from "expo/config-plugins";
 import * as fs from "fs";
 import * as path from "path";
 
+import { withIosDeploymentTargetFloor } from "./lib/deployment_target";
 import { injectPodfileSpmBlock } from "./lib/podfile";
 import { linkSpmPackage, SpmPackage } from "./lib/spm";
 
+// The lowest the Expo iOS template and the pods alongside it still compile at.
+const IOS_DEPLOYMENT_TARGET = "16.4";
+
 // Pinned to the exact `12.0.0` release tag — `from: 12.0.0`
 // would not resolve because `ios-spm` publishes pre-release tags (e.g.
 // `12.0.0`), and SPM excludes pre-release tags from open-ended
@@ -31,7 +35,7 @@ const SMILE_ID_PACKAGE: SpmPackage = {
   url: "https://github.com/smileidentity/ios-spm",
   requirement: {
     kind: "exactVersion",
-    version: "12.0.0",
+    version: "12.0.2",
   },
 };
 
@@ -39,7 +43,16 @@ const POD_TARGET = "UseSmileIDVisionDocumentExpo";
 const SPM_PRODUCTS = ["UseSmileIDVisionDocument", "UseSmileIDBridge"] as const;
 const PODFILE_MARKER = "usesmileid_vision_document";
 
+// Nothing else links the bridge's own pod target, so without this block its
+// `import UseSmileIDBridge` fails. Both vision plugins emit it; the injection is
+// idempotent per marker, so installing both is harmless.
+const BRIDGE_POD_TARGET = "UseSmileIDBridgeExpo";
+const BRIDGE_SPM_PRODUCTS = ["UseSmileIDBridge"] as const;
+const BRIDGE_PODFILE_MARKER = "usesmileid_bridge";
+
 const withVisionDocumentSpm: ConfigPlugin = (config) => {
+  config = withIosDeploymentTargetFloor(config, IOS_DEPLOYMENT_TARGET);
+
   // 1. Add the package + products to the host app's Xcode project so
   //    Xcode resolves the binary xcframeworks and embeds them in the
   //    .app at link time.
@@ -69,12 +82,19 @@ const withVisionDocumentSpm: ConfigPlugin = (config) => {
         "Podfile",
       );
       const original = fs.readFileSync(podfilePath, "utf-8");
-      const next = injectPodfileSpmBlock(original, {
+      let next = injectPodfileSpmBlock(original, {
         marker: PODFILE_MARKER,
         package: SMILE_ID_PACKAGE,
         podTarget: POD_TARGET,
         products: [...SPM_PRODUCTS],
       });
+      next = injectPodfileSpmBlock(next, {
+        marker: BRIDGE_PODFILE_MARKER,
+        package: SMILE_ID_PACKAGE,
+        podTarget: BRIDGE_POD_TARGET,
+        products: [...BRIDGE_SPM_PRODUCTS],
+        required: true,
+      });
       if (next !== original) {
         fs.writeFileSync(podfilePath, next);
       }

package/plugin/src/lib/deployment_target.ts

@@ -0,0 +1,46 @@
+// The Podfile prebuild generates reads `ios.deploymentTarget` from
+// `ios/Podfile.properties.json`, which nothing the SDK publishes used to set.
+
+import { type ConfigPlugin, withPodfileProperties } from "expo/config-plugins";
+
+/** Sets `ios.deploymentTarget` to `minimum` unless the project already asks for a higher one. */
+export const withIosDeploymentTargetFloor: ConfigPlugin<string> = (
+  config,
+  minimum,
+) =>
+  withPodfileProperties(config, (config) => {
+    config.modResults = raiseDeploymentTarget(config.modResults, minimum);
+    return config;
+  });
+
+/** Pure form of the edit the plugin makes to the Podfile properties. */
+export function raiseDeploymentTarget(
+  properties: Readonly<Record<string, string>>,
+  minimum: string,
+): Record<string, string> {
+  const current = properties["ios.deploymentTarget"];
+  if (current !== undefined && compareVersions(current, minimum) >= 0) {
+    return { ...properties };
+  }
+  return { ...properties, "ios.deploymentTarget": minimum };
+}
+
+// An unparseable component sorts as 0 so a bad value in a partner's project is
+// overwritten rather than crashing prebuild.
+function compareVersions(left: string, right: string): number {
+  const leftParts = left.split(".");
+  const rightParts = right.split(".");
+  for (let i = 0; i < Math.max(leftParts.length, rightParts.length); i++) {
+    const difference =
+      toNumber(leftParts[i] ?? "0") - toNumber(rightParts[i] ?? "0");
+    if (difference !== 0) {
+      return difference;
+    }
+  }
+  return 0;
+}
+
+function toNumber(part: string): number {
+  const parsed = Number.parseInt(part, 10);
+  return Number.isNaN(parsed) ? 0 : parsed;
+}

package/plugin/src/lib/podfile.ts

@@ -17,6 +17,8 @@ export interface PodfileLinkOptions {
   podTarget: string;
   /** SPM library product names to link to the pod target. */
   products: string[];
+  /** Fail `pod install` when the target is absent — a warning there reads as success. */
+  required?: boolean;
 }
 
 /**
@@ -35,12 +37,18 @@ export function injectPodfileSpmBlock(
   const beginMarker = `${BEGIN_PREFIX} ${options.marker} ===`;
   const endMarker = `${END_PREFIX} ${options.marker} ===`;
 
+  // The indentation is captured so a rewrite can restore it; dropping it would
+  // make every prebuild rewrite the Podfile.
   const blockRegex = new RegExp(
-    `${escapeRegExp(beginMarker)}[\\s\\S]*?${escapeRegExp(endMarker)}`,
+    `([ \\t]*)${escapeRegExp(beginMarker)}[\\s\\S]*?${escapeRegExp(endMarker)}`,
     "m",
   );
-  if (blockRegex.test(podfile)) {
-    return podfile.replace(blockRegex, block);
+  const existing = podfile.match(blockRegex);
+  if (existing) {
+    // A replacer function, so `$` in the Ruby block is never a replacement pattern.
+    return podfile.replace(blockRegex, () =>
+      indentBlock(block, existing[1] ?? ""),
+    );
   }
 
   // Inject at the *start* of the post_install body — right after
@@ -64,18 +72,21 @@ export function injectPodfileSpmBlock(
     );
   }
   const insertAt = headerMatch.index + headerMatch[0].length;
-  const indented =
-    block
-      .split("\n")
-      .map((line) => (line.length > 0 ? `    ${line}` : line))
-      .join("\n") + "\n";
+  const indented = `${indentBlock(block, "    ")}\n`;
   return podfile.slice(0, insertAt) + indented + podfile.slice(insertAt);
 }
 
-// All injected strings flow into single-quoted Ruby literals. We
-// reject characters that could break out of those literals so a
-// typo in the bridge plugin can't produce code that runs during
-// `pod install`. Rejected: single-quote, backslash, control chars.
+function indentBlock(block: string, prefix: string): string {
+  return block
+    .split("\n")
+    .map((line) => (line.length > 0 ? `${prefix}${line}` : line))
+    .join("\n");
+}
+
+// Injected strings land in Ruby literals, so a typo here could otherwise become
+// code that runs during `pod install`. `#` and `"` are rejected alongside `'`,
+// `\` and control chars because the diagnostics are double-quoted, where Ruby
+// evaluates `#{...}`.
 function validateRubySafe(options: PodfileLinkOptions): void {
   const fields: Array<[string, string]> = [
     ["marker", options.marker],
@@ -101,7 +112,7 @@ function validateRubySafe(options: PodfileLinkOptions): void {
       break;
   }
   for (const [name, value] of fields) {
-    if (/['\\\n\r\t]/.test(value)) {
+    if (/['"#\\\n\r\t]/.test(value)) {
       throw new Error(
         `[smileid-spm] Refusing to inject Podfile block: '${name}' contains an unsafe character (got: ${JSON.stringify(value)}).`,
       );
@@ -114,6 +125,9 @@ function renderBlock(options: PodfileLinkOptions): string {
   const endMarker = `${END_PREFIX} ${options.marker} ===`;
   const requirement = renderRequirement(options.package.requirement);
   const productList = options.products.map((p) => `'${p}'`).join(", ");
+  const missingTarget = options.required
+    ? `raise "[smileid-spm] Pod target #{target_name} is missing from Pods.xcodeproj, so #{product_names.join(', ')} cannot be linked and the Smile ID bridge will not compile. Check that '@smileid/usesmileid_bridge' is installed and that its npm package ships its 'ios' directory."`
+    : `Pod::UI.warn "[smileid-spm] Pod target #{target_name} not found; skipping SPM link."`;
 
   return `${beginMarker}
 # Wires ${options.package.url} into Pods.xcodeproj and links its
@@ -160,7 +174,7 @@ begin
 
   target = pods_project.targets.find { |t| t.name == target_name }
   if target.nil?
-    Pod::UI.warn "[smileid-spm] Pod target #{target_name} not found; skipping SPM link."
+    ${missingTarget}
   else
     product_names.each do |product_name|
       already = target.package_product_dependencies.any? do |d|
@@ -181,6 +195,37 @@ begin
       bf.product_ref = dep
       target.frameworks_build_phase.files << bf
     end
+
+    # Every linking static pod absorbs ios-spm's source-target objects and the
+    # app's -ObjC link then sees duplicates — the app keeps the single copy.
+    strip_name = '[smileid-spm] Strip absorbed SPM source objects'
+    unless target.shell_script_build_phases.any? { |p| p.name == strip_name }
+      phase = target.new_shell_script_build_phase(strip_name)
+      phase.shell_script = <<~'STRIPSH'
+        set -u
+        A="\${TARGET_BUILD_DIR}/\${EXECUTABLE_PATH}"
+        [ -f "$A" ] || exit 0
+        strip_obj() {
+          ar -t "$1" 2>/dev/null | grep -q "^$2$" || return 0
+          ar -d "$1" "$2" && ranlib "$1" 2>/dev/null || true
+        }
+        ARCHS_IN=$(lipo -archs "$A" 2>/dev/null || true)
+        for OBJ in UseSmileIDSentrySupport.o UseSmileIDLottieSupport.o; do
+          if [ "$(echo "$ARCHS_IN" | wc -w)" -gt 1 ]; then
+            THIN=""
+            for ARCH in $ARCHS_IN; do
+              lipo -thin "$ARCH" "$A" -output "$A.$ARCH"
+              strip_obj "$A.$ARCH" "$OBJ"
+              THIN="$THIN $A.$ARCH"
+            done
+            lipo -create $THIN -output "$A"
+            rm -f $THIN
+          else
+            strip_obj "$A" "$OBJ"
+          fi
+        done
+      STRIPSH
+    end
   end
 
   pods_project.save

package/plugin/src/lib/spm.ts

@@ -7,7 +7,7 @@
 // field, so listing SPM products in `expo-module.config.json` is a
 // silent no-op. This module fills that gap.
 
-import { XcodeProject } from "@expo/config-plugins";
+import { XcodeProject } from "expo/config-plugins";
 
 export interface SpmPackage {
   /** Remote git URL of the Swift Package, e.g. `https://github.com/smileidentity/ios-spm`. */

package/plugin/tsconfig.json

@@ -15,5 +15,10 @@
     "composite": false
   },
   "include": ["src/**/*"],
-  "exclude": ["build", "node_modules"]
+  "exclude": [
+    "src/**/*.test.ts",
+    "src/**/__tests__/**",
+    "build",
+    "node_modules"
+  ]
 }