@sriinnu/runic 2.0.0 → 2.11.2

package/Sources/RunicCore/Sync/SyncProtocol.swift

@@ -1,287 +0,0 @@
-import CloudKit
-import Foundation
-
-// MARK: - Sync Protocol Definitions
-
-/// Protocol defining the core synchronization engine interface
-///
-/// This protocol abstracts the synchronization logic to allow for different
-/// implementations (CloudKit, custom server, etc.) while maintaining a
-/// consistent API for syncing data across devices.
-public protocol SyncEngine: Sendable {
-    /// Synchronizes local data with remote storage
-    ///
-    /// - Parameter options: Configuration options for this sync operation
-    /// - Returns: Result indicating success or failure with error details
-    func sync(options: SyncOptions) async -> Result<SyncResult, SyncError>
-
-    /// Pushes local changes to remote storage
-    ///
-    /// - Parameter records: Array of records to push
-    /// - Returns: Result containing pushed record identifiers or error
-    func push(records: [SyncableRecord]) async -> Result<[String], SyncError>
-
-    /// Fetches changes from remote storage
-    ///
-    /// - Parameter recordTypes: Array of record type names to fetch
-    /// - Returns: Result containing fetched records or error
-    func fetch(recordTypes: [String]) async -> Result<[SyncableRecord], SyncError>
-
-    /// Deletes records from remote storage
-    ///
-    /// - Parameter recordIDs: Array of record identifiers to delete
-    /// - Returns: Result containing deleted record identifiers or error
-    func delete(recordIDs: [String]) async -> Result<[String], SyncError>
-
-    /// Resets sync state and clears all remote data
-    ///
-    /// - Warning: This operation is destructive and cannot be undone
-    /// - Returns: Result indicating success or failure
-    func resetSync() async -> Result<Void, SyncError>
-}
-
-// MARK: - Syncable Record Protocol
-
-/// Protocol for objects that can be synchronized across devices
-///
-/// Conform to this protocol to enable CloudKit synchronization for your data types.
-public protocol SyncableRecord: Sendable, Codable {
-    /// Unique identifier for the record
-    var recordID: String { get }
-
-    /// Type name used for CloudKit record type
-    var recordType: String { get }
-
-    /// Version number for conflict resolution
-    var version: Int { get }
-
-    /// Last modification timestamp
-    var modifiedAt: Date { get }
-
-    /// Device identifier that last modified this record
-    var lastModifiedDeviceID: String? { get }
-
-    /// Converts the record to a CloudKit CKRecord
-    ///
-    /// - Returns: CloudKit record representation
-    func toCKRecord() throws -> CKRecord
-
-    /// Creates a record from a CloudKit CKRecord
-    ///
-    /// - Parameter ckRecord: CloudKit record to convert
-    /// - Returns: Initialized syncable record
-    static func fromCKRecord(_ ckRecord: CKRecord) throws -> Self
-}
-
-// MARK: - Sync Conflict Resolver Protocol
-
-/// Protocol for resolving conflicts when multiple devices modify the same record
-///
-/// Implement this protocol to define custom conflict resolution strategies
-/// beyond the default last-write-wins behavior.
-public protocol SyncConflictResolverProtocol: Sendable {
-    /// Resolves a conflict between local and remote versions of a record
-    ///
-    /// - Parameters:
-    ///   - local: The local version of the conflicting record
-    ///   - remote: The remote version of the conflicting record
-    ///   - strategy: The conflict resolution strategy to apply
-    /// - Returns: The resolved record that should be kept
-    func resolve(
-        local: SyncableRecord,
-        remote: SyncableRecord,
-        strategy: ConflictResolutionStrategy) async -> SyncableRecord
-}
-
-// MARK: - Sync Observer Protocol
-
-/// Protocol for observing synchronization events
-///
-/// Implement this protocol to receive notifications about sync state changes,
-/// progress updates, and completion events.
-public protocol SyncObserver: AnyObject, Sendable {
-    /// Called when synchronization begins
-    func syncDidStart()
-
-    /// Called when synchronization progress updates
-    ///
-    /// - Parameters:
-    ///   - current: Number of records processed
-    ///   - total: Total number of records to process
-    func syncDidProgress(current: Int, total: Int)
-
-    /// Called when synchronization completes successfully
-    ///
-    /// - Parameter result: The sync result containing statistics
-    func syncDidComplete(result: SyncResult)
-
-    /// Called when synchronization fails
-    ///
-    /// - Parameter error: The error that caused the failure
-    func syncDidFail(error: SyncError)
-}
-
-// MARK: - Supporting Types
-
-/// Configuration options for sync operations
-public struct SyncOptions: Sendable {
-    /// Whether to force a full sync, ignoring change tracking
-    public let forceFullSync: Bool
-
-    /// Maximum number of records to sync in a single batch
-    public let batchSize: Int
-
-    /// Conflict resolution strategy to use
-    public let conflictStrategy: ConflictResolutionStrategy
-
-    /// Whether to sync in background mode
-    public let backgroundMode: Bool
-
-    /// Timeout interval for sync operations
-    public let timeout: TimeInterval
-
-    /// Whether to encrypt sensitive data
-    public let encryptSensitiveData: Bool
-
-    public init(
-        forceFullSync: Bool = false,
-        batchSize: Int = 100,
-        conflictStrategy: ConflictResolutionStrategy = .lastWriteWins,
-        backgroundMode: Bool = false,
-        timeout: TimeInterval = 60.0,
-        encryptSensitiveData: Bool = true)
-    {
-        self.forceFullSync = forceFullSync
-        self.batchSize = batchSize
-        self.conflictStrategy = conflictStrategy
-        self.backgroundMode = backgroundMode
-        self.timeout = timeout
-        self.encryptSensitiveData = encryptSensitiveData
-    }
-}
-
-/// Result of a sync operation with statistics
-public struct SyncResult: Sendable {
-    /// Number of records successfully pushed
-    public let pushedCount: Int
-
-    /// Number of records successfully fetched
-    public let fetchedCount: Int
-
-    /// Number of conflicts resolved
-    public let conflictsResolved: Int
-
-    /// Number of records deleted
-    public let deletedCount: Int
-
-    /// Timestamp when sync completed
-    public let completedAt: Date
-
-    /// Duration of the sync operation
-    public let duration: TimeInterval
-
-    /// Any non-fatal warnings encountered
-    public let warnings: [String]
-
-    public init(
-        pushedCount: Int = 0,
-        fetchedCount: Int = 0,
-        conflictsResolved: Int = 0,
-        deletedCount: Int = 0,
-        completedAt: Date = Date(),
-        duration: TimeInterval = 0,
-        warnings: [String] = [])
-    {
-        self.pushedCount = pushedCount
-        self.fetchedCount = fetchedCount
-        self.conflictsResolved = conflictsResolved
-        self.deletedCount = deletedCount
-        self.completedAt = completedAt
-        self.duration = duration
-        self.warnings = warnings
-    }
-}
-
-/// Conflict resolution strategies
-public enum ConflictResolutionStrategy: String, Codable, Sendable {
-    /// Keep the most recently modified record (default)
-    case lastWriteWins
-
-    /// Keep the local version
-    case preferLocal
-
-    /// Keep the remote version
-    case preferRemote
-
-    /// Keep the version with higher version number
-    case highestVersion
-
-    /// Merge both versions (requires custom merge logic)
-    case merge
-}
-
-/// Errors that can occur during synchronization
-public enum SyncError: Error, Sendable {
-    /// iCloud account is not available
-    case iCloudAccountUnavailable
-
-    /// Network connection is not available
-    case networkUnavailable
-
-    /// CloudKit quota exceeded
-    case quotaExceeded
-
-    /// Record format is invalid
-    case invalidRecordFormat(String)
-
-    /// Sync operation timed out
-    case timeout
-
-    /// Authentication failed
-    case authenticationFailed
-
-    /// Conflict could not be resolved
-    case conflictResolutionFailed(String)
-
-    /// Generic CloudKit error
-    case cloudKitError(Error)
-
-    /// Encryption/decryption failed
-    case encryptionFailed(String)
-
-    /// Unknown error occurred
-    case unknown(Error)
-
-    public var localizedDescription: String {
-        switch self {
-        case .iCloudAccountUnavailable:
-            "iCloud account is not available. Please sign in to iCloud in Settings."
-        case .networkUnavailable:
-            "Network connection is not available. Sync will retry when online."
-        case .quotaExceeded:
-            "iCloud storage quota exceeded. Please free up space or upgrade your plan."
-        case let .invalidRecordFormat(details):
-            "Invalid record format: \(details)"
-        case .timeout:
-            "Sync operation timed out. Please try again."
-        case .authenticationFailed:
-            "Authentication failed. Please sign in again."
-        case let .conflictResolutionFailed(details):
-            "Failed to resolve conflict: \(details)"
-        case let .cloudKitError(error):
-            "CloudKit error: \(error.localizedDescription)"
-        case let .encryptionFailed(details):
-            "Encryption failed: \(details)"
-        case let .unknown(error):
-            "Unknown error: \(error.localizedDescription)"
-        }
-    }
-}
-
-/// Priority levels for sync operations
-public enum SyncPriority: Int, Sendable {
-    case low = 0
-    case normal = 1
-    case high = 2
-    case critical = 3
-}

package/Sources/RunicCore/Sync/SyncRecord.swift

@@ -1,402 +0,0 @@
-import CloudKit
-import CryptoKit
-import Foundation
-import LocalAuthentication
-
-// MARK: - CloudKit Record Type Constants
-
-/// CloudKit record type identifiers
-public enum CloudKitRecordType {
-    public static let usageSnapshot = "UsageSnapshot"
-    public static let userPreferences = "UserPreferences"
-    public static let alertConfiguration = "AlertConfiguration"
-    public static let syncMetadata = "SyncMetadata"
-}
-
-// MARK: - Usage Snapshot Sync Record
-
-/// Syncable usage snapshot record for cross-device synchronization
-///
-/// This record encapsulates usage data that can be synchronized across
-/// devices using CloudKit, with support for encryption and versioning.
-public struct UsageSnapshotSyncRecord: SyncableRecord {
-    public let recordID: String
-    public let recordType: String = CloudKitRecordType.usageSnapshot
-    public let version: Int
-    public let modifiedAt: Date
-    public let lastModifiedDeviceID: String?
-
-    // Usage data
-    public let providerID: String
-    public let primaryUsed: Int
-    public let primaryLimit: Int?
-    public let secondaryUsed: Int?
-    public let secondaryLimit: Int?
-    public let costUSD: Double?
-    public let accountEmail: String?
-    public let updatedAt: Date
-
-    // Metadata
-    public let deviceName: String
-    public let platform: String
-
-    public init(
-        recordID: String = UUID().uuidString,
-        version: Int = 1,
-        modifiedAt: Date = Date(),
-        lastModifiedDeviceID: String? = nil,
-        providerID: String,
-        primaryUsed: Int,
-        primaryLimit: Int?,
-        secondaryUsed: Int? = nil,
-        secondaryLimit: Int? = nil,
-        costUSD: Double? = nil,
-        accountEmail: String? = nil,
-        updatedAt: Date = Date(),
-        deviceName: String,
-        platform: String)
-    {
-        self.recordID = recordID
-        self.version = version
-        self.modifiedAt = modifiedAt
-        self.lastModifiedDeviceID = lastModifiedDeviceID
-        self.providerID = providerID
-        self.primaryUsed = primaryUsed
-        self.primaryLimit = primaryLimit
-        self.secondaryUsed = secondaryUsed
-        self.secondaryLimit = secondaryLimit
-        self.costUSD = costUSD
-        self.accountEmail = accountEmail
-        self.updatedAt = updatedAt
-        self.deviceName = deviceName
-        self.platform = platform
-    }
-
-    public func toCKRecord() throws -> CKRecord {
-        let record = CKRecord(recordType: recordType, recordID: CKRecord.ID(recordName: self.recordID))
-
-        record["version"] = self.version as CKRecordValue
-        record["modifiedAt"] = self.modifiedAt as CKRecordValue
-        record["lastModifiedDeviceID"] = self.lastModifiedDeviceID as? CKRecordValue
-        record["providerID"] = self.providerID as CKRecordValue
-        record["primaryUsed"] = self.primaryUsed as CKRecordValue
-        record["primaryLimit"] = self.primaryLimit as? CKRecordValue
-        record["secondaryUsed"] = self.secondaryUsed as? CKRecordValue
-        record["secondaryLimit"] = self.secondaryLimit as? CKRecordValue
-        record["costUSD"] = self.costUSD as? CKRecordValue
-        record["updatedAt"] = self.updatedAt as CKRecordValue
-        record["deviceName"] = self.deviceName as CKRecordValue
-        record["platform"] = self.platform as CKRecordValue
-
-        // Encrypt sensitive data
-        if let email = accountEmail {
-            let encrypted = try encryptString(email)
-            record["accountEmail"] = encrypted as CKRecordValue
-        }
-
-        return record
-    }
-
-    public static func fromCKRecord(_ ckRecord: CKRecord) throws -> UsageSnapshotSyncRecord {
-        guard let version = ckRecord["version"] as? Int,
-              let modifiedAt = ckRecord["modifiedAt"] as? Date,
-              let providerID = ckRecord["providerID"] as? String,
-              let primaryUsed = ckRecord["primaryUsed"] as? Int,
-              let updatedAt = ckRecord["updatedAt"] as? Date,
-              let deviceName = ckRecord["deviceName"] as? String,
-              let platform = ckRecord["platform"] as? String
-        else {
-            throw SyncError.invalidRecordFormat("Missing required fields in UsageSnapshot")
-        }
-
-        var accountEmail: String?
-        if let encryptedEmail = ckRecord["accountEmail"] as? String {
-            accountEmail = try? decryptString(encryptedEmail)
-        }
-
-        return UsageSnapshotSyncRecord(
-            recordID: ckRecord.recordID.recordName,
-            version: version,
-            modifiedAt: modifiedAt,
-            lastModifiedDeviceID: ckRecord["lastModifiedDeviceID"] as? String,
-            providerID: providerID,
-            primaryUsed: primaryUsed,
-            primaryLimit: ckRecord["primaryLimit"] as? Int,
-            secondaryUsed: ckRecord["secondaryUsed"] as? Int,
-            secondaryLimit: ckRecord["secondaryLimit"] as? Int,
-            costUSD: ckRecord["costUSD"] as? Double,
-            accountEmail: accountEmail,
-            updatedAt: updatedAt,
-            deviceName: deviceName,
-            platform: platform)
-    }
-}
-
-// MARK: - User Preferences Sync Record
-
-/// Syncable user preferences record
-///
-/// Stores user preferences and settings that should be synchronized
-/// across all devices where the user is signed in.
-public struct UserPreferencesSyncRecord: SyncableRecord {
-    public let recordID: String
-    public let recordType: String = CloudKitRecordType.userPreferences
-    public let version: Int
-    public let modifiedAt: Date
-    public let lastModifiedDeviceID: String?
-
-    // Preferences
-    public let refreshInterval: TimeInterval
-    public let enabledProviders: [String]
-    public let notificationsEnabled: Bool
-    public let autoRefreshEnabled: Bool
-    public let theme: String
-    public let displayFormat: String
-
-    public init(
-        recordID: String = "user-preferences",
-        version: Int = 1,
-        modifiedAt: Date = Date(),
-        lastModifiedDeviceID: String? = nil,
-        refreshInterval: TimeInterval = 300,
-        enabledProviders: [String] = [],
-        notificationsEnabled: Bool = true,
-        autoRefreshEnabled: Bool = true,
-        theme: String = "system",
-        displayFormat: String = "compact")
-    {
-        self.recordID = recordID
-        self.version = version
-        self.modifiedAt = modifiedAt
-        self.lastModifiedDeviceID = lastModifiedDeviceID
-        self.refreshInterval = refreshInterval
-        self.enabledProviders = enabledProviders
-        self.notificationsEnabled = notificationsEnabled
-        self.autoRefreshEnabled = autoRefreshEnabled
-        self.theme = theme
-        self.displayFormat = displayFormat
-    }
-
-    public func toCKRecord() throws -> CKRecord {
-        let record = CKRecord(recordType: recordType, recordID: CKRecord.ID(recordName: self.recordID))
-
-        record["version"] = self.version as CKRecordValue
-        record["modifiedAt"] = self.modifiedAt as CKRecordValue
-        record["lastModifiedDeviceID"] = self.lastModifiedDeviceID as? CKRecordValue
-        record["refreshInterval"] = self.refreshInterval as CKRecordValue
-        record["enabledProviders"] = self.enabledProviders as CKRecordValue
-        record["notificationsEnabled"] = (self.notificationsEnabled ? 1 : 0) as CKRecordValue
-        record["autoRefreshEnabled"] = (self.autoRefreshEnabled ? 1 : 0) as CKRecordValue
-        record["theme"] = self.theme as CKRecordValue
-        record["displayFormat"] = self.displayFormat as CKRecordValue
-
-        return record
-    }
-
-    public static func fromCKRecord(_ ckRecord: CKRecord) throws -> UserPreferencesSyncRecord {
-        guard let version = ckRecord["version"] as? Int,
-              let modifiedAt = ckRecord["modifiedAt"] as? Date,
-              let refreshInterval = ckRecord["refreshInterval"] as? Double,
-              let enabledProviders = ckRecord["enabledProviders"] as? [String],
-              let notificationsEnabled = ckRecord["notificationsEnabled"] as? Int,
-              let autoRefreshEnabled = ckRecord["autoRefreshEnabled"] as? Int,
-              let theme = ckRecord["theme"] as? String,
-              let displayFormat = ckRecord["displayFormat"] as? String
-        else {
-            throw SyncError.invalidRecordFormat("Missing required fields in UserPreferences")
-        }
-
-        return UserPreferencesSyncRecord(
-            recordID: ckRecord.recordID.recordName,
-            version: version,
-            modifiedAt: modifiedAt,
-            lastModifiedDeviceID: ckRecord["lastModifiedDeviceID"] as? String,
-            refreshInterval: refreshInterval,
-            enabledProviders: enabledProviders,
-            notificationsEnabled: notificationsEnabled == 1,
-            autoRefreshEnabled: autoRefreshEnabled == 1,
-            theme: theme,
-            displayFormat: displayFormat)
-    }
-}
-
-// MARK: - Alert Configuration Sync Record
-
-/// Syncable alert configuration record
-///
-/// Stores alert thresholds and notification settings that should be
-/// consistent across all user devices.
-public struct AlertConfigurationSyncRecord: SyncableRecord {
-    public let recordID: String
-    public let recordType: String = CloudKitRecordType.alertConfiguration
-    public let version: Int
-    public let modifiedAt: Date
-    public let lastModifiedDeviceID: String?
-
-    // Alert settings
-    public let providerID: String
-    public let warningThreshold: Double
-    public let criticalThreshold: Double
-    public let notificationChannels: [String]
-    public let enabled: Bool
-
-    public init(
-        recordID: String = UUID().uuidString,
-        version: Int = 1,
-        modifiedAt: Date = Date(),
-        lastModifiedDeviceID: String? = nil,
-        providerID: String,
-        warningThreshold: Double = 0.75,
-        criticalThreshold: Double = 0.90,
-        notificationChannels: [String] = ["system"],
-        enabled: Bool = true)
-    {
-        self.recordID = recordID
-        self.version = version
-        self.modifiedAt = modifiedAt
-        self.lastModifiedDeviceID = lastModifiedDeviceID
-        self.providerID = providerID
-        self.warningThreshold = warningThreshold
-        self.criticalThreshold = criticalThreshold
-        self.notificationChannels = notificationChannels
-        self.enabled = enabled
-    }
-
-    public func toCKRecord() throws -> CKRecord {
-        let record = CKRecord(recordType: recordType, recordID: CKRecord.ID(recordName: self.recordID))
-
-        record["version"] = self.version as CKRecordValue
-        record["modifiedAt"] = self.modifiedAt as CKRecordValue
-        record["lastModifiedDeviceID"] = self.lastModifiedDeviceID as? CKRecordValue
-        record["providerID"] = self.providerID as CKRecordValue
-        record["warningThreshold"] = self.warningThreshold as CKRecordValue
-        record["criticalThreshold"] = self.criticalThreshold as CKRecordValue
-        record["notificationChannels"] = self.notificationChannels as CKRecordValue
-        record["enabled"] = (self.enabled ? 1 : 0) as CKRecordValue
-
-        return record
-    }
-
-    public static func fromCKRecord(_ ckRecord: CKRecord) throws -> AlertConfigurationSyncRecord {
-        guard let version = ckRecord["version"] as? Int,
-              let modifiedAt = ckRecord["modifiedAt"] as? Date,
-              let providerID = ckRecord["providerID"] as? String,
-              let warningThreshold = ckRecord["warningThreshold"] as? Double,
-              let criticalThreshold = ckRecord["criticalThreshold"] as? Double,
-              let notificationChannels = ckRecord["notificationChannels"] as? [String],
-              let enabled = ckRecord["enabled"] as? Int
-        else {
-            throw SyncError.invalidRecordFormat("Missing required fields in AlertConfiguration")
-        }
-
-        return AlertConfigurationSyncRecord(
-            recordID: ckRecord.recordID.recordName,
-            version: version,
-            modifiedAt: modifiedAt,
-            lastModifiedDeviceID: ckRecord["lastModifiedDeviceID"] as? String,
-            providerID: providerID,
-            warningThreshold: warningThreshold,
-            criticalThreshold: criticalThreshold,
-            notificationChannels: notificationChannels,
-            enabled: enabled == 1)
-    }
-}
-
-// MARK: - Encryption Helpers
-
-/// Encrypts a string using AES-GCM encryption
-///
-/// - Parameter plaintext: The string to encrypt
-/// - Returns: Base64-encoded encrypted string with nonce prepended
-/// - Throws: SyncError.encryptionFailed if encryption fails
-private func encryptString(_ plaintext: String) throws -> String {
-    guard let data = plaintext.data(using: .utf8) else {
-        throw SyncError.encryptionFailed("Failed to convert string to data")
-    }
-
-    let key = getOrCreateEncryptionKey()
-    let sealed = try AES.GCM.seal(data, using: key)
-
-    guard let combined = sealed.combined else {
-        throw SyncError.encryptionFailed("Failed to create sealed box")
-    }
-
-    return combined.base64EncodedString()
-}
-
-/// Decrypts a string that was encrypted with encryptString
-///
-/// - Parameter encrypted: Base64-encoded encrypted string
-/// - Returns: Decrypted plaintext string
-/// - Throws: SyncError.encryptionFailed if decryption fails
-private func decryptString(_ encrypted: String) throws -> String {
-    guard let combined = Data(base64Encoded: encrypted) else {
-        throw SyncError.encryptionFailed("Failed to decode base64")
-    }
-
-    let key = getOrCreateEncryptionKey()
-    let sealedBox = try AES.GCM.SealedBox(combined: combined)
-    let decrypted = try AES.GCM.open(sealedBox, using: key)
-
-    guard let plaintext = String(data: decrypted, encoding: .utf8) else {
-        throw SyncError.encryptionFailed("Failed to convert decrypted data to string")
-    }
-
-    return plaintext
-}
-
-/// Retrieves or creates an encryption key for sensitive data
-///
-/// The key is stored securely in the Keychain and persists across app launches.
-///
-/// - Returns: SymmetricKey for AES-GCM encryption
-private func getOrCreateEncryptionKey() -> SymmetricKey {
-    let keychainKey = "com.runic.sync.encryption.key"
-
-    // Try to load existing key from Keychain
-    if let keyData = loadFromKeychain(key: keychainKey) {
-        return SymmetricKey(data: keyData)
-    }
-
-    // Generate new key
-    let key = SymmetricKey(size: .bits256)
-    let keyData = key.withUnsafeBytes { Data($0) }
-
-    // Store in Keychain
-    saveToKeychain(key: keychainKey, data: keyData)
-
-    return key
-}
-
-private func saveToKeychain(key: String, data: Data) {
-    let query: [String: Any] = [
-        kSecClass as String: kSecClassGenericPassword,
-        kSecAttrService as String: "com.sriinnu.athena.Runic",
-        kSecAttrAccount as String: key,
-        kSecUseDataProtectionKeychain as String: true,
-        kSecValueData as String: data,
-        kSecAttrAccessible as String: kSecAttrAccessibleAfterFirstUnlock,
-    ]
-    SecItemDelete(query as CFDictionary)
-    SecItemAdd(query as CFDictionary, nil)
-}
-
-private func loadFromKeychain(key: String) -> Data? {
-    var query: [String: Any] = [
-        kSecClass as String: kSecClassGenericPassword,
-        kSecAttrService as String: "com.sriinnu.athena.Runic",
-        kSecAttrAccount as String: key,
-        kSecUseDataProtectionKeychain as String: true,
-        kSecUseAuthenticationUI as String: "kSecUseAuthenticationUIFail" as CFString,
-        kSecReturnData as String: true,
-    ]
-    let authContext = LAContext()
-    authContext.interactionNotAllowed = true
-    query[kSecUseAuthenticationContext as String] = authContext
-    var result: AnyObject?
-    let status = SecItemCopyMatching(query as CFDictionary, &result)
-    if status == errSecInteractionNotAllowed {
-        return nil
-    }
-    return status == errSecSuccess ? result as? Data : nil
-}