@smileid/usesmileid_vision_document 12.0.1 → 12.1.0

package/plugin/build/lib/podfile.js

@@ -1,102 +1,16 @@
-"use strict";
-// Injects an idempotent Ruby block into the Expo-generated Podfile's
-// `post_install` hook. The block runs at `pod install` time and wires
-// the Smile ID Swift Package into the autogenerated Pods.xcodeproj
-// for a specific bridge pod target — Pods.xcodeproj only exists at
-// pod-install time, so this is the only hook that can mutate it.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.injectPodfileSpmBlock = injectPodfileSpmBlock;
-const BEGIN_PREFIX = "# === BEGIN smileid-spm:";
-const END_PREFIX = "# === END smileid-spm:";
-/**
- * Idempotently injects an SPM-linking Ruby block into the Podfile's
- * top-level `post_install` block. Re-running on an already-injected
- * Podfile rewrites the same marker block in place (so version /
- * product changes flow through cleanly on the next prebuild).
- */
-function injectPodfileSpmBlock(podfile, options) {
-    validateRubySafe(options);
-    const block = renderBlock(options);
-    const beginMarker = `${BEGIN_PREFIX} ${options.marker} ===`;
-    const endMarker = `${END_PREFIX} ${options.marker} ===`;
-    const blockRegex = new RegExp(`${escapeRegExp(beginMarker)}[\\s\\S]*?${escapeRegExp(endMarker)}`, "m");
-    if (blockRegex.test(podfile)) {
-        return podfile.replace(blockRegex, block);
-    }
-    // Inject at the *start* of the post_install body — right after
-    // `post_install do |installer|`. We tried matching the closing
-    // `end` pair instead, but a second plugin running on a Podfile
-    // already mutated by the first sees a non-flat body and the
-    // non-greedy `end…end` match latches onto inner block ends,
-    // nesting the second injection inside the first. Anchoring on
-    // the opening line removes that failure mode entirely. Order
-    // relative to `react_native_post_install` doesn't matter because
-    // CocoaPods persists the Pods project at the end of pod install
-    // regardless of what we explicitly save mid-block.
-    const headerRegex = /(post_install\s+do\s*\|\s*installer\s*\|)\r?\n/;
-    const headerMatch = podfile.match(headerRegex);
-    if (!headerMatch || headerMatch.index === undefined) {
-        throw new Error("[smileid-spm] Could not locate `post_install do |installer|` in Podfile. " +
-            "Refusing to append a top-level post_install hook because CocoaPods only honors one — adding a second " +
-            "would silently override the React Native post-install plumbing. Restore the Expo Podfile template " +
-            "or wire the SPM block in manually.");
-    }
-    const insertAt = headerMatch.index + headerMatch[0].length;
-    const indented = block
-        .split("\n")
-        .map((line) => (line.length > 0 ? `    ${line}` : line))
-        .join("\n") + "\n";
-    return podfile.slice(0, insertAt) + indented + podfile.slice(insertAt);
-}
-// All injected strings flow into single-quoted Ruby literals. We
-// reject characters that could break out of those literals so a
-// typo in the bridge plugin can't produce code that runs during
-// `pod install`. Rejected: single-quote, backslash, control chars.
-function validateRubySafe(options) {
-    const fields = [
-        ["marker", options.marker],
-        ["package.url", options.package.url],
-        ["podTarget", options.podTarget],
-    ];
-    for (const product of options.products) {
-        fields.push(["products[*]", product]);
-    }
-    switch (options.package.requirement.kind) {
-        case "upToNextMajorVersion":
-        case "upToNextMinorVersion":
-            fields.push([
-                "requirement.minimumVersion",
-                options.package.requirement.minimumVersion,
-            ]);
-            break;
-        case "exactVersion":
-            fields.push(["requirement.version", options.package.requirement.version]);
-            break;
-        case "branch":
-            fields.push(["requirement.branch", options.package.requirement.branch]);
-            break;
-    }
-    for (const [name, value] of fields) {
-        if (/['\\\n\r\t]/.test(value)) {
-            throw new Error(`[smileid-spm] Refusing to inject Podfile block: '${name}' contains an unsafe character (got: ${JSON.stringify(value)}).`);
-        }
-    }
-}
-function renderBlock(options) {
-    const beginMarker = `${BEGIN_PREFIX} ${options.marker} ===`;
-    const endMarker = `${END_PREFIX} ${options.marker} ===`;
-    const requirement = renderRequirement(options.package.requirement);
-    const productList = options.products.map((p) => `'${p}'`).join(", ");
-    return `${beginMarker}
-# Wires ${options.package.url} into Pods.xcodeproj and links its
-# products to the '${options.podTarget}' pod target so the Swift
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.injectPodfileSpmBlock=injectPodfileSpmBlock,exports.injectPodfileKameraLinkBlock=injectPodfileKameraLinkBlock,exports.injectPodfileSignatureDedupBlock=injectPodfileSignatureDedupBlock;const signature_dedup_1=require("./signature_dedup"),BEGIN_PREFIX="# === BEGIN smileid-spm:",END_PREFIX="# === END smileid-spm:",SIGNATURE_DEDUP_MARKER="usesmileid_signature_dedup",KAMERA_LINK_MARKER="kamera_spm";function injectPodfileSpmBlock(e,r){return validateRubySafe(r),injectMarkerBlock(e,r.marker,renderBlock(r))}function injectPodfileKameraLinkBlock(e){return injectMarkerBlock(e,KAMERA_LINK_MARKER,renderKameraLinkBlock())}function injectPodfileSignatureDedupBlock(e){return injectMarkerBlock(e,SIGNATURE_DEDUP_MARKER,renderSignatureDedupBlock())}function injectMarkerBlock(e,r,a){const t=`${BEGIN_PREFIX} ${r} ===`,n=`${END_PREFIX} ${r} ===`,s=new RegExp(`([ \\t]*)${escapeRegExp(t)}[\\s\\S]*?${escapeRegExp(n)}`,"m"),o=e.match(s);if(o)return e.replace(s,()=>indentBlock(a,o[1]??""));const p=/(post_install\s+do\s*\|\s*installer\s*\|)\r?\n/,i=e.match(p);if(!i||i.index===void 0)throw new Error("[smileid-spm] Could not locate `post_install do |installer|` in Podfile. Refusing to append a top-level post_install hook because CocoaPods only honors one \u2014 adding a second would silently override the React Native post-install plumbing. Restore the Expo Podfile template or wire the SPM block in manually.");const d=i.index+i[0].length,c=`${indentBlock(a,"    ")}
+`;return e.slice(0,d)+c+e.slice(d)}function indentBlock(e,r){return e.split(`
+`).map(a=>a.length>0?`${r}${a}`:a).join(`
+`)}function validateRubySafe(e){const r=[["marker",e.marker],["package.url",e.package.url],["podTarget",e.podTarget]];for(const a of e.products)r.push(["products[*]",a]);switch(e.package.requirement.kind){case"upToNextMajorVersion":case"upToNextMinorVersion":r.push(["requirement.minimumVersion",e.package.requirement.minimumVersion]);break;case"exactVersion":r.push(["requirement.version",e.package.requirement.version]);break;case"branch":r.push(["requirement.branch",e.package.requirement.branch]);break}for(const[a,t]of r)if(/['"#\\\n\r\t]/.test(t))throw new Error(`[smileid-spm] Refusing to inject Podfile block: '${a}' contains an unsafe character (got: ${JSON.stringify(t)}).`)}function renderBlock(e){const r=`${BEGIN_PREFIX} ${e.marker} ===`,a=`${END_PREFIX} ${e.marker} ===`,t=renderRequirement(e.package.requirement),n=e.products.map(o=>`'${o}'`).join(", "),s=e.required?`raise "[smileid-spm] Pod target #{target_name} is missing from Pods.xcodeproj, so #{product_names.join(', ')} cannot be linked and the Smile ID bridge will not compile. Check that '@smileid/usesmileid_bridge' is installed and that its npm package ships its 'ios' directory."`:'Pod::UI.warn "[smileid-spm] Pod target #{target_name} not found; skipping SPM link."';return`${r}
+# Wires ${e.package.url} into Pods.xcodeproj and links its
+# products to the '${e.podTarget}' pod target so the Swift
 # bridge code can \`import\` them. Idempotent across pod installs.
 #
 # UUIDs are minted via SecureRandom rather than \`pods_project.new\`
 # because \`prepare_react_native_project!\` sets
 # \`:deterministic_uuids => false\`. With that flag off, CocoaPods
 # skips its predictabilize step and \`stabilize_target_uuids\` resets
-# \`@generated_uuids\` to a tiny leftover pool — so any post_install
+# \`@generated_uuids\` to a tiny leftover pool \u2014 so any post_install
 # call to \`pods_project.new\` restarts the sequential index near 0
 # and re-mints UUIDs already in use. The collision then runs through
 # \`add_referrer\`, which clobbers \`objects_by_uuid[uuid]\` and
@@ -106,10 +20,10 @@ function renderBlock(options) {
 # hex IDs can't collide with the 14-char cocoapods scheme.
 begin
   pods_project = installer.pods_project
-  spm_url = '${options.package.url}'
-  spm_requirement = ${requirement}
-  product_names = [${productList}]
-  target_name = '${options.podTarget}'
+  spm_url = '${e.package.url}'
+  spm_requirement = ${t}
+  product_names = [${n}]
+  target_name = '${e.podTarget}'
 
   smileid_spm_safe_uuid = lambda do |project|
     loop do
@@ -132,7 +46,7 @@ begin
 
   target = pods_project.targets.find { |t| t.name == target_name }
   if target.nil?
-    Pod::UI.warn "[smileid-spm] Pod target #{target_name} not found; skipping SPM link."
+    ${s}
   else
     product_names.each do |product_name|
       already = target.package_product_dependencies.any? do |d|
@@ -153,28 +67,184 @@ begin
       bf.product_ref = dep
       target.frameworks_build_phase.files << bf
     end
+
+    # Every linking static pod absorbs ios-spm's source-target objects and the
+    # app's -ObjC link then sees duplicates \u2014 the app keeps the single copy.
+    strip_name = '[smileid-spm] Strip absorbed SPM source objects'
+    unless target.shell_script_build_phases.any? { |p| p.name == strip_name }
+      # \`new_shell_script_build_phase\` mints through \`pods_project.new\`, whose
+      # reset index (see above) hands out 46EB2E00000000 \u2014 the rootObject's own
+      # UUID \u2014 and the overwrite makes Xcode reject the project as damaged.
+      phase_uuid = smileid_spm_safe_uuid.call(pods_project)
+      phase = Xcodeproj::Project::Object::PBXShellScriptBuildPhase.new(pods_project, phase_uuid)
+      phase.initialize_defaults
+      phase.name = strip_name
+      target.build_phases << phase
+      phase.shell_script = <<~'STRIPSH'
+        set -u
+        A="\${TARGET_BUILD_DIR}/\${EXECUTABLE_PATH}"
+        [ -f "$A" ] || exit 0
+        strip_obj() {
+          ar -t "$1" 2>/dev/null | grep -q "^$2$" || return 0
+          ar -d "$1" "$2" && ranlib "$1" 2>/dev/null || true
+        }
+        ARCHS_IN=$(lipo -archs "$A" 2>/dev/null || true)
+        for OBJ in UseSmileIDSentrySupport.o UseSmileIDLottieSupport.o UseSmileIDKameraSupport.o; do
+          if [ "$(echo "$ARCHS_IN" | wc -w)" -gt 1 ]; then
+            THIN=""
+            for ARCH in $ARCHS_IN; do
+              lipo -thin "$ARCH" "$A" -output "$A.$ARCH"
+              strip_obj "$A.$ARCH" "$OBJ"
+              THIN="$THIN $A.$ARCH"
+            done
+            lipo -create $THIN -output "$A"
+            rm -f $THIN
+          else
+            strip_obj "$A" "$OBJ"
+          fi
+        done
+      STRIPSH
+    end
   end
 
   pods_project.save
 rescue => e
-  Pod::UI.warn "[smileid-spm] Failed to link SPM products for ${options.podTarget}: #{e.message}"
+  Pod::UI.warn "[smileid-spm] Failed to link SPM products for ${e.podTarget}: #{e.message}"
+  raise
+end
+${a}`}function renderKameraLinkBlock(){return`${BEGIN_PREFIX} ${KAMERA_LINK_MARKER} ===
+# Links kamera-spm's Kamera / KameraVision products into the kamera-rn pod target (and
+# KameraTesting into kamera-testing when present) with the helper @smileid/kamera ships,
+# pinned at the installed package's own version. The Smile ID SDK binaries link
+# Kamera.framework dynamically and ios-spm declares kamera-spm for the app, so the pod
+# must take Kamera from that same package rather than vendor a second copy.
+require 'json'
+require 'securerandom'
+begin
+  kamera_package_json = \`node --print "require.resolve('@smileid/kamera/package.json')"\`.strip
+  if kamera_package_json.empty?
+    raise "[smileid-spm] @smileid/kamera is not installed, so its kamera-rn pod cannot be linked to kamera-spm."
+  end
+  kamera_spm_helper = File.join(File.dirname(kamera_package_json), 'ios', 'kamera_spm_link.rb')
+  if File.exist?(kamera_spm_helper)
+    require kamera_spm_helper
+    # The Smile ID provider pods import Kamera themselves. A SwiftPM product linked into the
+    # kamera-rn target does not reach the pods that depend on it the way a vendored framework's
+    # search path did, so those targets take the product directly (absent ones are skipped).
+    kamera_spm_link!(installer, targets: KAMERA_SPM_TARGETS.merge(
+      'UseSmileIDVisionFaceExpo' => %w[Kamera],
+      'UseSmileIDVisionDocumentExpo' => %w[Kamera],
+    ))
+    # Two things only the app's own project can do, exactly as it does for ios-spm:
+    # 1. CocoaPods rewrites the Pods project after post_install and drops the package
+    #    references the helper attaches to it (the product dependencies survive), so Xcode
+    #    resolves kamera-spm only if a project in the workspace still lists it \u2014 otherwise
+    #    the build stops at "Missing package product 'Kamera'".
+    # 2. Kamera and KameraVision are dynamic frameworks. Linked into static pod targets they
+    #    are never embedded, and the app dies in dyld ("Library not loaded:
+    #    @rpath/Kamera.framework/Kamera"). Xcode embeds a binary product only for an app
+    #    target that depends on it, so the app target takes both products directly.
+    kamera_spm_url = 'https://github.com/smileidentity/kamera-spm'
+    kamera_spm_version = JSON.parse(File.read(kamera_package_json))['version'].sub(/-SNAPSHOT.*$/, '')
+    kamera_spm_app_products = %w[Kamera KameraVision]
+    # A reference an app added by hand may spell the same repository differently (.git suffix,
+    # trailing slash, case); a second reference to one repository fails Xcode's resolution.
+    normalize_url = ->(url) { url.to_s.downcase.chomp('/').sub(/\\.git\\z/, '') }
+    installer.aggregate_targets.group_by(&:user_project).each do |user_project, aggregate_targets|
+      next if user_project.nil? # integrate_targets: false \u2014 nothing to register on
+      # SecureRandom, not user_project.new: React Native's prepare_react_native_project!
+      # leaves Xcodeproj's UUID pool unusable for objects minted in post_install.
+      new_uuid = lambda do
+        loop do
+          candidate = SecureRandom.hex(12).upcase
+          break candidate unless user_project.objects_by_uuid.key?(candidate)
+        end
+      end
+      changed = false
+      ref = user_project.root_object.package_references.find do |r|
+        r.respond_to?(:repositoryURL) && normalize_url.call(r.repositoryURL) == normalize_url.call(kamera_spm_url)
+      end
+      unless ref
+        ref = Xcodeproj::Project::Object::XCRemoteSwiftPackageReference.new(user_project, new_uuid.call)
+        ref.initialize_defaults
+        ref.repositoryURL = kamera_spm_url
+        user_project.root_object.package_references << ref
+        changed = true
+      end
+      requirement = { 'kind' => 'exactVersion', 'version' => kamera_spm_version }
+      if ref.requirement != requirement
+        ref.requirement = requirement
+        changed = true
+      end
+      app_targets = aggregate_targets.flat_map(&:user_targets).uniq.select do |t|
+        t.respond_to?(:product_type) && t.product_type == 'com.apple.product-type.application'
+      end
+      app_targets.each do |app_target|
+        kamera_spm_app_products.each do |product_name|
+          next if app_target.package_product_dependencies.any? { |d| d.package == ref && d.product_name == product_name }
+          dep = Xcodeproj::Project::Object::XCSwiftPackageProductDependency.new(user_project, new_uuid.call)
+          dep.initialize_defaults
+          dep.package = ref
+          dep.product_name = product_name
+          app_target.package_product_dependencies << dep
+          build_file = Xcodeproj::Project::Object::PBXBuildFile.new(user_project, new_uuid.call)
+          build_file.initialize_defaults
+          build_file.product_ref = dep
+          app_target.frameworks_build_phase.files << build_file
+          changed = true
+        end
+      end
+      next unless changed
+      user_project.save
+      Pod::UI.puts "[smileid-spm] #{File.basename(user_project.path)}: #{app_targets.map(&:name).join(', ')} link kamera-spm #{kamera_spm_version} (#{kamera_spm_app_products.join(', ')}) so Xcode resolves and embeds it"
+    end
+  else
+    # Releases before the helper vendor Kamera.xcframework themselves, so the pod still
+    # compiles; but the app then embeds that copy next to the one ios-spm resolves.
+    Pod::UI.warn "[smileid-spm] @smileid/kamera at #{File.dirname(kamera_package_json)} ships no ios/kamera_spm_link.rb " \\
+      "(it still vendors Kamera.xcframework). Upgrade to a release that depends on kamera-spm so the app carries one Kamera.framework."
+  end
+rescue => e
+  Pod::UI.warn "[smileid-spm] Failed to link kamera-spm into the kamera pods: #{e.message}"
+  raise
+end
+${END_PREFIX} ${KAMERA_LINK_MARKER} ===`}function renderSignatureDedupBlock(){return`${BEGIN_PREFIX} ${SIGNATURE_DEDUP_MARKER} ===
+# For apps whose \`ios/\` is hand-maintained, so no config plugin ever runs.
+# UUIDs come from SecureRandom for the same reason as above.
+begin
+  dedup_name = '${signature_dedup_1.SIGNATURE_DEDUP_PHASE_NAME}'
+  smileid_dedup_safe_uuid = lambda do |project|
+    loop do
+      candidate = SecureRandom.hex(12).upcase
+      return candidate unless project.objects_by_uuid.key?(candidate)
+    end
+  end
+
+  installer.aggregate_targets.each do |aggregate_target|
+    user_project = aggregate_target.user_project
+    next unless user_project
+
+    added = false
+    aggregate_target.user_targets.each do |user_target|
+      next if user_target.shell_script_build_phases.any? { |p| p.name == dedup_name }
+
+      phase = Xcodeproj::Project::Object::PBXShellScriptBuildPhase.new(
+        user_project, smileid_dedup_safe_uuid.call(user_project)
+      )
+      phase.initialize_defaults
+      phase.name = dedup_name
+      phase.always_out_of_date = '1'
+      phase.shell_script = <<~'SMILEIDDEDUP'
+${indentBlock(signature_dedup_1.SIGNATURE_DEDUP_SCRIPT,"        ")}
+      SMILEIDDEDUP
+      user_target.build_phases << phase
+      added = true
+    end
+
+    user_project.save if added
+  end
+rescue => e
+  Pod::UI.warn "[smileid-spm] Failed to add the XCFramework signature dedup phase: #{e.message}"
   raise
 end
-${endMarker}`;
-}
-function renderRequirement(req) {
-    switch (req.kind) {
-        case "upToNextMajorVersion":
-            return `{ kind: 'upToNextMajorVersion', minimumVersion: '${req.minimumVersion}' }`;
-        case "upToNextMinorVersion":
-            return `{ kind: 'upToNextMinorVersion', minimumVersion: '${req.minimumVersion}' }`;
-        case "exactVersion":
-            return `{ kind: 'exactVersion', version: '${req.version}' }`;
-        case "branch":
-            return `{ kind: 'branch', branch: '${req.branch}' }`;
-    }
-}
-function escapeRegExp(s) {
-    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-//# sourceMappingURL=podfile.js.map
+${END_PREFIX} ${SIGNATURE_DEDUP_MARKER} ===`}function renderRequirement(e){switch(e.kind){case"upToNextMajorVersion":return`{ kind: 'upToNextMajorVersion', minimumVersion: '${e.minimumVersion}' }`;case"upToNextMinorVersion":return`{ kind: 'upToNextMinorVersion', minimumVersion: '${e.minimumVersion}' }`;case"exactVersion":return`{ kind: 'exactVersion', version: '${e.version}' }`;case"branch":return`{ kind: 'branch', branch: '${e.branch}' }`}}function escapeRegExp(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}

package/plugin/build/lib/signature_dedup.d.ts

@@ -0,0 +1,14 @@
+import { XcodeProject } from "expo/config-plugins";
+export declare const SIGNATURE_DEDUP_PHASE_NAME = "[smileid-spm] Dedupe XCFramework signatures";
+export declare const SIGNATURE_DEDUP_SCRIPT: string;
+/**
+ * Appends the dedup phase, idempotently by name so both vision plugins and
+ * repeated prebuilds converge on one. It goes last because every pod target
+ * must have staged its signatures before it runs.
+ */
+export declare function ensureSignatureDedupPhase(project: XcodeProject, targetName: string): void;
+/**
+ * Stops Xcode recording XCFramework signatures at all — the escape hatch behind
+ * `iosSignatureAggregation: "disabled"`.
+ */
+export declare function disableSignatureAggregation(project: XcodeProject, targetName: string): void;

package/plugin/build/lib/signature_dedup.js

@@ -0,0 +1,2 @@
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.SIGNATURE_DEDUP_SCRIPT=exports.SIGNATURE_DEDUP_PHASE_NAME=void 0,exports.ensureSignatureDedupPhase=ensureSignatureDedupPhase,exports.disableSignatureAggregation=disableSignatureAggregation;const spm_1=require("./spm");exports.SIGNATURE_DEDUP_PHASE_NAME="[smileid-spm] Dedupe XCFramework signatures",exports.SIGNATURE_DEDUP_SCRIPT=["# Archive assembly sweeps staged *.signature files into one filename-keyed","# folder and aborts on the first duplicate; keep exactly one per name.","set -u",'case "${BUILT_PRODUCTS_DIR:-}" in',"  */ArchiveIntermediates/*) ;;","  *) exit 0 ;;","esac",'seen=" "','for sig in "${BUILT_PRODUCTS_DIR}"/*/*.xcframework-*.signature; do','  [ -e "$sig" ] || continue','  name=$(basename "$sig")','  if [ -e "${BUILT_PRODUCTS_DIR}/${name}" ]; then','    rm -rf "$sig"',"  else",'    case "$seen" in','      *" ${name} "*) rm -rf "$sig" ;;','      *) seen="${seen}${name} " ;;',"    esac","  fi","done","exit 0"].join(`
+`);function ensureSignatureDedupPhase(e,i){const s=(0,spm_1.findNativeTarget)(e,i);if(!s)throw new Error(`[smileid-spm] Native target '${i}' not found in Xcode project.`);const t=(0,spm_1.section)(e,"PBXShellScriptBuildPhase");if(s.obj.buildPhases.some(n=>{const o=t[n.value];return o!==void 0&&typeof o=="object"&&o!==null&&o.name?.replace(/^"|"$/g,"")===exports.SIGNATURE_DEDUP_PHASE_NAME}))return;const r=(0,spm_1.generateUuid)(e);t[r]={isa:"PBXShellScriptBuildPhase",name:`"${exports.SIGNATURE_DEDUP_PHASE_NAME}"`,shellPath:"/bin/sh",shellScript:JSON.stringify(exports.SIGNATURE_DEDUP_SCRIPT),alwaysOutOfDate:"1",buildActionMask:"2147483647",files:[],inputPaths:[],outputPaths:[],runOnlyForDeploymentPostprocessing:"0"},t[`${r}_comment`]=exports.SIGNATURE_DEDUP_PHASE_NAME,s.obj.buildPhases.push({value:r,comment:exports.SIGNATURE_DEDUP_PHASE_NAME})}function disableSignatureAggregation(e,i){const s=(0,spm_1.findNativeTarget)(e,i);if(!s)throw new Error(`[smileid-spm] Native target '${i}' not found in Xcode project.`);const t=s.obj.buildConfigurationList;if(!t)throw new Error(`[smileid-spm] Native target '${i}' has no build configuration list.`);const u=(0,spm_1.section)(e,"XCConfigurationList"),r=(0,spm_1.section)(e,"XCBuildConfiguration"),n=u[t];if(!n||typeof n!="object"||!n.buildConfigurations)throw new Error(`[smileid-spm] Build configuration list for '${i}' is unreadable.`);for(const o of n.buildConfigurations){const a=r[o.value];!a||typeof a!="object"||(a.buildSettings??={},a.buildSettings.ENABLE_SIGNATURE_AGGREGATION="NO")}}

package/plugin/build/lib/spm.d.ts

@@ -1,4 +1,4 @@
-import { XcodeProject } from "@expo/config-plugins";
+import { XcodeProject } from "expo/config-plugins";
 export interface SpmPackage {
     /** Remote git URL of the Swift Package, e.g. `https://github.com/smileidentity/ios-spm`. */
     url: string;
@@ -31,3 +31,24 @@ export interface SpmTargetLink {
  * multiple plugins can compose without conflict.
  */
 export declare function linkSpmPackage(project: XcodeProject, pkg: SpmPackage, link: SpmTargetLink): void;
+export interface NativeTarget {
+    uuid: string;
+    obj: PbxNativeTarget;
+}
+interface PbxNativeTarget {
+    isa: "PBXNativeTarget";
+    name: string;
+    packageProductDependencies?: Array<{
+        value: string;
+        comment?: string;
+    }>;
+    buildPhases: Array<{
+        value: string;
+        comment?: string;
+    }>;
+    buildConfigurationList?: string;
+}
+export declare function section<T>(project: XcodeProject, isa: string): Record<string, T>;
+export declare function generateUuid(project: XcodeProject): string;
+export declare function findNativeTarget(project: XcodeProject, name: string): NativeTarget | undefined;
+export {};

package/plugin/build/lib/spm.js

@@ -1,196 +1 @@
-"use strict";
-// Shared plumbing for wiring a remote Swift Package into both the
-// consuming Expo app's Xcode project and the autogenerated CocoaPods
-// project for a specific bridge pod target.
-//
-// Why this exists: `expo-modules-autolinking@55.0.x`'s
-// `RawModuleConfigApple` schema does not surface a `dependencies`
-// field, so listing SPM products in `expo-module.config.json` is a
-// silent no-op. This module fills that gap.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.linkSpmPackage = linkSpmPackage;
-/**
- * Adds (or reuses) a remote Swift Package reference on the given
- * Xcode project and links the requested products to the target.
- * Idempotent: existing package refs and product deps are reused so
- * multiple plugins can compose without conflict.
- */
-function linkSpmPackage(project, pkg, link) {
-    const pkgRef = upsertPackageReference(project, pkg);
-    const target = findNativeTarget(project, link.targetName);
-    if (!target) {
-        throw new Error(`[smileid-spm] Native target '${link.targetName}' not found in Xcode project.`);
-    }
-    for (const product of link.products) {
-        upsertProductDependency(project, target.uuid, pkgRef, product);
-    }
-}
-function objects(project) {
-    const hash = project.hash.project.objects;
-    return hash;
-}
-function section(project, isa) {
-    const objs = objects(project);
-    if (!objs[isa]) {
-        objs[isa] = {};
-    }
-    return objs[isa];
-}
-function generateUuid(project) {
-    return project.generateUuid();
-}
-function upsertPackageReference(project, pkg) {
-    const refs = section(project, "XCRemoteSwiftPackageReference");
-    for (const [uuid, ref] of Object.entries(refs)) {
-        if (uuid.endsWith("_comment"))
-            continue;
-        if (typeof ref !== "object" || ref === null)
-            continue;
-        if (ref.repositoryURL?.replace(/^"|"$/g, "") === pkg.url) {
-            return { uuid };
-        }
-    }
-    const uuid = generateUuid(project);
-    refs[uuid] = {
-        isa: "XCRemoteSwiftPackageReference",
-        repositoryURL: `"${pkg.url}"`,
-        requirement: serializeRequirement(pkg.requirement),
-    };
-    refs[`${uuid}_comment`] =
-        `XCRemoteSwiftPackageReference "${repoName(pkg.url)}"`;
-    // Attach to the PBXProject's packageReferences list.
-    const projectSection = section(project, "PBXProject");
-    for (const [projUuid, proj] of Object.entries(projectSection)) {
-        if (projUuid.endsWith("_comment"))
-            continue;
-        if (typeof proj !== "object" || proj === null)
-            continue;
-        if (proj.isa !== "PBXProject")
-            continue;
-        proj.packageReferences ??= [];
-        if (!proj.packageReferences.some((r) => r.value === uuid)) {
-            proj.packageReferences.push({
-                value: uuid,
-                comment: `XCRemoteSwiftPackageReference "${repoName(pkg.url)}"`,
-            });
-        }
-    }
-    return { uuid };
-}
-function upsertProductDependency(project, targetUuid, pkgRef, productName) {
-    const targetSection = section(project, "PBXNativeTarget");
-    const target = targetSection[targetUuid];
-    if (!target || typeof target !== "object") {
-        throw new Error(`[smileid-spm] Target ${targetUuid} disappeared between lookups.`);
-    }
-    const productDeps = section(project, "XCSwiftPackageProductDependency");
-    // Each target owns its own XCSwiftPackageProductDependency entry —
-    // sharing one across targets is not how Xcode writes pbxproj and
-    // would cause downstream tools (and re-runs of this plugin) to
-    // silently drop the second target's binding. Look up the dep
-    // *within this target's* packageProductDependencies, never globally.
-    target.packageProductDependencies ??= [];
-    let depUuid = target.packageProductDependencies.find((d) => {
-        const entry = productDeps[d.value];
-        return (entry !== undefined &&
-            typeof entry === "object" &&
-            entry !== null &&
-            entry.package === pkgRef.uuid &&
-            entry.productName === productName);
-    })?.value;
-    if (!depUuid) {
-        depUuid = generateUuid(project);
-        productDeps[depUuid] = {
-            isa: "XCSwiftPackageProductDependency",
-            package: pkgRef.uuid,
-            productName,
-        };
-        productDeps[`${depUuid}_comment`] = productName;
-        target.packageProductDependencies.push({
-            value: depUuid,
-            comment: productName,
-        });
-    }
-    ensureFrameworkLink(project, target, depUuid, productName);
-}
-function ensureFrameworkLink(project, target, productDepUuid, productName) {
-    const frameworksPhase = findFrameworksBuildPhase(project, target);
-    if (!frameworksPhase) {
-        throw new Error(`[smileid-spm] Target '${target.name}' has no PBXFrameworksBuildPhase; cannot link ${productName}.`);
-    }
-    const buildFiles = section(project, "PBXBuildFile");
-    // Scope the existence check to *this target's* frameworks phase.
-    // A globally-scoped check would early-return when a sibling target
-    // already linked the same product, leaving this target unlinked.
-    frameworksPhase.obj.files ??= [];
-    for (const fileRef of frameworksPhase.obj.files) {
-        const bf = buildFiles[fileRef.value];
-        if (bf !== undefined &&
-            typeof bf === "object" &&
-            bf !== null &&
-            bf.productRef === productDepUuid) {
-            return;
-        }
-    }
-    const buildFileUuid = generateUuid(project);
-    buildFiles[buildFileUuid] = {
-        isa: "PBXBuildFile",
-        productRef: productDepUuid,
-    };
-    buildFiles[`${buildFileUuid}_comment`] =
-        `${productName} in Frameworks`;
-    frameworksPhase.obj.files.push({
-        value: buildFileUuid,
-        comment: `${productName} in Frameworks`,
-    });
-}
-function findFrameworksBuildPhase(project, target) {
-    const phaseSection = section(project, "PBXFrameworksBuildPhase");
-    for (const phaseRef of target.buildPhases) {
-        const phase = phaseSection[phaseRef.value];
-        if (phase &&
-            typeof phase === "object" &&
-            phase.isa === "PBXFrameworksBuildPhase") {
-            return { uuid: phaseRef.value, obj: phase };
-        }
-    }
-    return undefined;
-}
-function findNativeTarget(project, name) {
-    const targets = section(project, "PBXNativeTarget");
-    for (const [uuid, t] of Object.entries(targets)) {
-        if (uuid.endsWith("_comment"))
-            continue;
-        if (typeof t !== "object" || t === null)
-            continue;
-        if (t.isa !== "PBXNativeTarget")
-            continue;
-        if (t.name === name || t.name === `"${name}"`) {
-            return { uuid, obj: t };
-        }
-    }
-    return undefined;
-}
-function serializeRequirement(req) {
-    switch (req.kind) {
-        case "upToNextMajorVersion":
-            return {
-                kind: "upToNextMajorVersion",
-                minimumVersion: req.minimumVersion,
-            };
-        case "upToNextMinorVersion":
-            return {
-                kind: "upToNextMinorVersion",
-                minimumVersion: req.minimumVersion,
-            };
-        case "exactVersion":
-            return { kind: "exactVersion", version: req.version };
-        case "branch":
-            return { kind: "branch", branch: req.branch };
-    }
-}
-function repoName(url) {
-    const match = url.replace(/\.git$/, "").match(/\/([^/]+)$/);
-    return match?.[1] ?? url;
-}
-//# sourceMappingURL=spm.js.map
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.linkSpmPackage=linkSpmPackage,exports.section=section,exports.generateUuid=generateUuid,exports.findNativeTarget=findNativeTarget;function linkSpmPackage(e,n,o){const t=upsertPackageReference(e,n),i=findNativeTarget(e,o.targetName);if(!i)throw new Error(`[smileid-spm] Native target '${o.targetName}' not found in Xcode project.`);for(const c of o.products)upsertProductDependency(e,i.uuid,t,c)}function objects(e){return e.hash.project.objects}function section(e,n){const o=objects(e);return o[n]||(o[n]={}),o[n]}function generateUuid(e){return e.generateUuid()}function upsertPackageReference(e,n){const o=section(e,"XCRemoteSwiftPackageReference");for(const[c,r]of Object.entries(o))if(!c.endsWith("_comment")&&!(typeof r!="object"||r===null)&&r.repositoryURL?.replace(/^"|"$/g,"")===n.url)return{uuid:c};const t=generateUuid(e);o[t]={isa:"XCRemoteSwiftPackageReference",repositoryURL:`"${n.url}"`,requirement:serializeRequirement(n.requirement)},o[`${t}_comment`]=`XCRemoteSwiftPackageReference "${repoName(n.url)}"`;const i=section(e,"PBXProject");for(const[c,r]of Object.entries(i))c.endsWith("_comment")||typeof r!="object"||r===null||r.isa==="PBXProject"&&(r.packageReferences??=[],r.packageReferences.some(s=>s.value===t)||r.packageReferences.push({value:t,comment:`XCRemoteSwiftPackageReference "${repoName(n.url)}"`}));return{uuid:t}}function upsertProductDependency(e,n,o,t){const c=section(e,"PBXNativeTarget")[n];if(!c||typeof c!="object")throw new Error(`[smileid-spm] Target ${n} disappeared between lookups.`);const r=section(e,"XCSwiftPackageProductDependency");c.packageProductDependencies??=[];let s=c.packageProductDependencies.find(a=>{const u=r[a.value];return u!==void 0&&typeof u=="object"&&u!==null&&u.package===o.uuid&&u.productName===t})?.value;s||(s=generateUuid(e),r[s]={isa:"XCSwiftPackageProductDependency",package:o.uuid,productName:t},r[`${s}_comment`]=t,c.packageProductDependencies.push({value:s,comment:t})),ensureFrameworkLink(e,c,s,t)}function ensureFrameworkLink(e,n,o,t){const i=findFrameworksBuildPhase(e,n);if(!i)throw new Error(`[smileid-spm] Target '${n.name}' has no PBXFrameworksBuildPhase; cannot link ${t}.`);const c=section(e,"PBXBuildFile");i.obj.files??=[];for(const s of i.obj.files){const a=c[s.value];if(a!==void 0&&typeof a=="object"&&a!==null&&a.productRef===o)return}const r=generateUuid(e);c[r]={isa:"PBXBuildFile",productRef:o},c[`${r}_comment`]=`${t} in Frameworks`,i.obj.files.push({value:r,comment:`${t} in Frameworks`})}function findFrameworksBuildPhase(e,n){const o=section(e,"PBXFrameworksBuildPhase");for(const t of n.buildPhases){const i=o[t.value];if(i&&typeof i=="object"&&i.isa==="PBXFrameworksBuildPhase")return{uuid:t.value,obj:i}}}function findNativeTarget(e,n){const o=section(e,"PBXNativeTarget");for(const[t,i]of Object.entries(o))if(!t.endsWith("_comment")&&!(typeof i!="object"||i===null)&&i.isa==="PBXNativeTarget"&&(i.name===n||i.name===`"${n}"`))return{uuid:t,obj:i}}function serializeRequirement(e){switch(e.kind){case"upToNextMajorVersion":return{kind:"upToNextMajorVersion",minimumVersion:e.minimumVersion};case"upToNextMinorVersion":return{kind:"upToNextMinorVersion",minimumVersion:e.minimumVersion};case"exactVersion":return{kind:"exactVersion",version:e.version};case"branch":return{kind:"branch",branch:e.branch}}}function repoName(e){return e.replace(/\.git$/,"").match(/\/([^/]+)$/)?.[1]??e}

package/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AAGpC;;;;;;;;;;;;;;;;;GAiBG;AACH;;;;GAIG;AACH,eAAO,MAAM,mCAAmC;;;CAGtC,CAAC;AAEX,eAAO,MAAM,wBAAwB,mEAKnC,CAAC;AAEH,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AAEpF;;;;;;;;;;;;;;;;;GAiBG;AACH;;;;GAIG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,gBAAgB,EAAE,0BAA0B;IAC5C,wBAAwB,EAAE,wCAAwC;CAC1D,CAAC;AAEX,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;IACjE,gBAAgB,EAAE,mCAAmC,CAAC,gBAAgB;IACtE,wBAAwB,EACtB,mCAAmC,CAAC,wBAAwB;IAC9D,IAAI,EAAE,UAAU;CACjB,CAAC,CAAC"}