@symbiote-native/secure-store 0.0.1 → 0.2.0

package/build/angular/index.js

@@ -1,4 +1,4 @@
 // @symbiote-native/secure-store/angular: the Angular entry over the framework-agnostic core.
 // Same reasoning as the React/Vue entries — no per-instance state or event stream to wrap in a
 // service, so this is a plain re-export.
-export * from '../core';
+export * from '../core/index.js';

package/build/core/index.js

@@ -1 +1 @@
-export { AFTER_FIRST_UNLOCK, AFTER_FIRST_UNLOCK_THIS_DEVICE_ONLY, ALWAYS, ALWAYS_THIS_DEVICE_ONLY, WHEN_PASSCODE_SET_THIS_DEVICE_ONLY, WHEN_UNLOCKED, WHEN_UNLOCKED_THIS_DEVICE_ONLY, isAvailableAsync, getItemAsync, getItem, setItemAsync, setItem, deleteItemAsync, canUseBiometricAuthentication, } from './secure-store';
+export { AFTER_FIRST_UNLOCK, AFTER_FIRST_UNLOCK_THIS_DEVICE_ONLY, ALWAYS, ALWAYS_THIS_DEVICE_ONLY, WHEN_PASSCODE_SET_THIS_DEVICE_ONLY, WHEN_UNLOCKED, WHEN_UNLOCKED_THIS_DEVICE_ONLY, isAvailableAsync, getItemAsync, getItem, setItemAsync, setItem, deleteItemAsync, canUseBiometricAuthentication, } from './secure-store.js';

package/build/core/secure-store.js

@@ -1,5 +1,5 @@
 import { UnavailabilityError } from 'expo-modules-core';
-import { expoSecureStore } from './native-module';
+import { expoSecureStore } from './native-module.js';
 const NATIVE_MODULE_NAME = 'expo-secure-store';
 // Alphanumerics plus ".", "-" and "_": the same set the native side validates against, so an
 // invalid key fails here with a readable message instead of deep inside the keychain call.

package/build/react/index.js

@@ -2,4 +2,4 @@
 // Upstream ships free functions and seven constants, no per-instance state and no event stream
 // — there is nothing for a hook to wrap, so this is a plain re-export, the same shape
 // packages/local-auth's React entry has for the same reason.
-export * from '../core';
+export * from '../core/index.js';

package/build/svelte/index.d.ts

@@ -0,0 +1 @@
+export * from '../core';

package/build/svelte/index.js

@@ -0,0 +1,6 @@
+// @symbiote-native/secure-store/svelte: the Svelte entry over the framework-agnostic core.
+// Upstream ships free functions and seven constants, no per-instance state and no event stream
+// — there is nothing for a rune to wrap, so this is a plain re-export. Svelte's lifecycle
+// bucket is `runes/` (adapters/svelte/src/runes — never React's `hooks` or Vue's
+// `composables`), and this package has none to fill.
+export * from '../core/index.js';

package/build/vue/index.js

@@ -1,4 +1,4 @@
 // @symbiote-native/secure-store/vue: the Vue entry over the framework-agnostic core. Same
 // reasoning as the React entry — no per-instance state or event stream to wire onto Vue's
 // reactivity, so this is a plain re-export.
-export * from '../core';
+export * from '../core/index.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symbiote-native/secure-store",
-  "version": "0.0.1",
+  "version": "0.2.0",
   "description": "expo-secure-store wrapped for SymbioteNative — one framework-agnostic core, built once and reachable from the React, Vue, and Angular adapters. Encrypted key-value storage in the iOS Keychain and the Android Keystore, optionally gated behind biometrics.",
   "license": "MIT",
   "repository": {
@@ -30,6 +30,10 @@
       "types": "./build/react/index.d.ts",
       "default": "./build/react/index.js"
     },
+    "./svelte": {
+      "types": "./build/svelte/index.d.ts",
+      "default": "./build/svelte/index.js"
+    },
     "./angular": {
       "types": "./build-ngc/angular/index.d.ts",
       "react-native": "./build-ngc/angular/index.js",
@@ -40,7 +44,10 @@
     "src",
     "build",
     "build-ngc",
-    "native-link.json"
+    "native-link.json",
+    "!src/**/*.test.*",
+    "!src/**/*.spec.*",
+    "!src/**/*.detox.*"
   ],
   "publishConfig": {
     "access": "public"
@@ -50,15 +57,17 @@
     "expo-modules-core": "57.0.5"
   },
   "peerDependencies": {
+    "@symbiote-native/angular": ">=0.6.2",
     "@symbiote-native/engine": ">=0.1.7",
+    "@symbiote-native/react": ">=0.2.8",
+    "@symbiote-native/svelte": ">=0.1.0",
+    "@symbiote-native/vue": ">=0.3.8",
     "@angular/core": ">=20",
     "@vue/runtime-core": "^3.5.13",
     "react": ">=19.0.0",
     "react-native": ">=0.86",
-    "vue": ">=3.5.0",
-    "@symbiote-native/react": "0.2.8",
-    "@symbiote-native/angular": "0.6.1",
-    "@symbiote-native/vue": "0.3.8"
+    "svelte": ">=5.56.0",
+    "vue": ">=3.5.0"
   },
   "peerDependenciesMeta": {
     "@symbiote-native/angular": {
@@ -67,6 +76,9 @@
     "@symbiote-native/react": {
       "optional": true
     },
+    "@symbiote-native/svelte": {
+      "optional": true
+    },
     "@symbiote-native/vue": {
       "optional": true
     },
@@ -79,24 +91,29 @@
     "react": {
       "optional": true
     },
+    "svelte": {
+      "optional": true
+    },
     "vue": {
       "optional": true
     }
   },
   "devDependencies": {
-    "@angular/compiler": "^22",
-    "@angular/compiler-cli": "^22",
-    "@angular/core": "^22",
+    "@angular/compiler": "~22.0.8",
+    "@angular/compiler-cli": "~22.0.8",
+    "@angular/core": "~22.0.8",
     "@types/node": "^26.0.0",
     "@types/react": "^19.2.0",
     "@vue/runtime-core": "^3.5.13",
     "react": "19.2.3",
+    "svelte": "^5.56.0",
     "typescript": "~6.0.0",
-    "@symbiote-native/engine": "0.1.7",
+    "@symbiote-native/angular": "0.7.0",
+    "@symbiote-native/engine": "0.2.0",
+    "@symbiote-native/react": "0.3.0",
+    "@symbiote-native/svelte": "0.2.0",
     "@symbiote-native/test-utils": "0.1.6",
-    "@symbiote-native/react": "0.2.8",
-    "@symbiote-native/angular": "0.6.1",
-    "@symbiote-native/vue": "0.3.8"
+    "@symbiote-native/vue": "0.4.0"
   },
   "scripts": {
     "typecheck": "tsc --build",

package/src/svelte/index.ts

@@ -0,0 +1,6 @@
+// @symbiote-native/secure-store/svelte: the Svelte entry over the framework-agnostic core.
+// Upstream ships free functions and seven constants, no per-instance state and no event stream
+// — there is nothing for a rune to wrap, so this is a plain re-export. Svelte's lifecycle
+// bucket is `runes/` (adapters/svelte/src/runes — never React's `hooks` or Vue's
+// `composables`), and this package has none to fill.
+export * from '../core';

package/src/core/secure-store.test.ts

@@ -1,146 +0,0 @@
-import { afterEach, describe, expect, it, vi } from 'vitest';
-
-const FAKE_NATIVE_SECURE_STORE = {
-  AFTER_FIRST_UNLOCK: 1,
-  WHEN_UNLOCKED: 5,
-  getValueWithKeyAsync: vi.fn(async () => 'stored'),
-  getValueWithKeySync: vi.fn(() => 'stored'),
-  setValueWithKeyAsync: vi.fn(async () => true),
-  setValueWithKeySync: vi.fn(() => true),
-  deleteValueWithKeyAsync: vi.fn(async () => undefined),
-  canUseBiometricAuthentication: vi.fn(() => true),
-};
-
-// The real ExpoSecureStore native module only exists on device — resolving it via
-// requireNativeModule() at import time would throw in this headless run, so the module-lookup
-// file is faked in place of expo-modules-core's runtime resolution, the same pattern
-// packages/local-auth/src/core/local-authentication.test.ts uses.
-vi.mock('./native-module', () => ({
-  expoSecureStore: FAKE_NATIVE_SECURE_STORE,
-}));
-
-// expo-modules-core's real entry transitively imports 'react-native', whose Flow-typed source
-// Vitest's Oxc transform can't parse — so only the members used as values are faked.
-vi.mock('expo-modules-core', () => ({
-  UnavailabilityError: class UnavailabilityError extends Error {
-    constructor(moduleName: string, propertyName: string) {
-      super(`${propertyName} is not available on ${moduleName}`);
-    }
-  },
-}));
-
-const {
-  AFTER_FIRST_UNLOCK,
-  WHEN_UNLOCKED,
-  isAvailableAsync,
-  getItemAsync,
-  getItem,
-  setItemAsync,
-  setItem,
-  deleteItemAsync,
-  canUseBiometricAuthentication,
-} = await import('./secure-store');
-
-afterEach(() => {
-  vi.clearAllMocks();
-});
-
-describe('keychain accessibility constants', () => {
-  it('come from the native module rather than being hardcoded', () => {
-    expect(AFTER_FIRST_UNLOCK).toBe(1);
-    expect(WHEN_UNLOCKED).toBe(5);
-  });
-});
-
-describe('isAvailableAsync', () => {
-  it('reports availability from the presence of the native read method', async () => {
-    await expect(isAvailableAsync()).resolves.toBe(true);
-  });
-});
-
-describe('getItemAsync', () => {
-  it('passes the key and options straight through', async () => {
-    await expect(getItemAsync('token', { keychainService: 'auth' })).resolves.toBe('stored');
-    expect(FAKE_NATIVE_SECURE_STORE.getValueWithKeyAsync).toHaveBeenCalledWith('token', {
-      keychainService: 'auth',
-    });
-  });
-
-  it('defaults the options to an empty object', async () => {
-    await getItemAsync('token');
-    expect(FAKE_NATIVE_SECURE_STORE.getValueWithKeyAsync).toHaveBeenCalledWith('token', {});
-  });
-
-  it('throws an UnavailabilityError-shaped error when the native method is absent', async () => {
-    const { getValueWithKeyAsync: native } = FAKE_NATIVE_SECURE_STORE;
-    // @ts-expect-error -- simulating a platform where the native module has no such method
-    FAKE_NATIVE_SECURE_STORE.getValueWithKeyAsync = undefined;
-
-    await expect(getItemAsync('token')).rejects.toThrow(
-      'getItemAsync is not available on expo-secure-store',
-    );
-
-    FAKE_NATIVE_SECURE_STORE.getValueWithKeyAsync = native;
-  });
-});
-
-describe('setItemAsync', () => {
-  it('passes value, key and options in the native argument order', async () => {
-    await setItemAsync('token', 'secret', { requireAuthentication: true });
-    expect(FAKE_NATIVE_SECURE_STORE.setValueWithKeyAsync).toHaveBeenCalledWith('secret', 'token', {
-      requireAuthentication: true,
-    });
-  });
-});
-
-describe('the synchronous pair', () => {
-  it('reads and writes through the sync native methods', () => {
-    expect(getItem('token')).toBe('stored');
-    setItem('token', 'secret');
-    expect(FAKE_NATIVE_SECURE_STORE.getValueWithKeySync).toHaveBeenCalledWith('token', {});
-    expect(FAKE_NATIVE_SECURE_STORE.setValueWithKeySync).toHaveBeenCalledWith(
-      'secret',
-      'token',
-      {},
-    );
-  });
-});
-
-describe('deleteItemAsync', () => {
-  it('delegates to the native module', async () => {
-    await deleteItemAsync('token');
-    expect(FAKE_NATIVE_SECURE_STORE.deleteValueWithKeyAsync).toHaveBeenCalledWith('token', {});
-  });
-});
-
-describe('canUseBiometricAuthentication', () => {
-  it('delegates to the native module', () => {
-    expect(canUseBiometricAuthentication()).toBe(true);
-  });
-});
-
-// Validation happens before the native call so a bad key fails with a readable message here
-// rather than deep inside the keychain, and the native module is never handed junk.
-describe('key and value validation', () => {
-  it.each([
-    ['', 'empty'],
-    ['has space', 'a space'],
-    ['sla/sh', 'a slash'],
-    ['💥', 'an emoji'],
-  ])('rejects %j (%s)', async key => {
-    await expect(getItemAsync(key)).rejects.toThrow(/Invalid key provided to SecureStore/);
-    expect(FAKE_NATIVE_SECURE_STORE.getValueWithKeyAsync).not.toHaveBeenCalled();
-  });
-
-  it.each(['token', 'com.example.token', 'my-token', 'my_token'])('accepts %j', async key => {
-    await expect(getItemAsync(key)).resolves.toBe('stored');
-  });
-
-  it('rejects a non-string value before reaching the native module', async () => {
-    // @ts-expect-error -- the guard exists precisely for callers without type checking
-    await expect(setItemAsync('token', { a: 1 })).rejects.toThrow(
-      /Values must be strings; consider JSON-encoding/,
-    );
-    expect(FAKE_NATIVE_SECURE_STORE.setValueWithKeyAsync).not.toHaveBeenCalled();
-  });
-});