@tinkerlandai/indiana-react-native 0.9.2 → 0.10.1

package/native-sdk/ios/PushInstallation.swift

@@ -0,0 +1,154 @@
+import Foundation
+import CryptoKit
+import Security
+
+public enum IndianaPushPermission: String, Codable, Sendable { case unknown, denied, provisional, granted }
+public enum IndianaPushAddressKind: String, Sendable { case apnsToken = "apns_token", fcmToken = "fcm_token" }
+public struct IndianaPushObservation: Sendable {
+    public let connectionId: UUID?
+    public let kind: IndianaPushAddressKind?
+    public let token: String?
+    public let permission: IndianaPushPermission
+    public init(connectionId: UUID?, kind: IndianaPushAddressKind?, token: String?, permission: IndianaPushPermission) throws {
+        guard (connectionId == nil && kind == nil && token == nil) ||
+                (connectionId != nil && kind != nil && token != nil && (16...4096).contains(token!.utf8.count) && token!.utf8.allSatisfy({ (33...126).contains($0) })) else { throw IndianaClientError.invalidConfiguration }
+        self.connectionId = connectionId; self.kind = kind; self.token = token; self.permission = permission
+    }
+}
+public struct IndianaPushInstallationState: Decodable, Sendable {
+    public let installationId: UUID
+    public let bound: Bool
+    public let identitySeq: Int64
+    public let bindingGeneration: Int64
+    public let addressSeq: Int64
+    public let addressRevision: Int64
+    public let connectionId: UUID?
+    public let addressStatus: String?
+    public let permission: IndianaPushPermission
+    func validate(installation: UUID) throws {
+        guard installationId == installation, (1...IndianaPushIdentity.maxSequence).contains(identitySeq),
+              (1...IndianaPushIdentity.maxSequence).contains(bindingGeneration), (0...IndianaPushIdentity.maxSequence).contains(addressSeq),
+              (0...IndianaPushIdentity.maxSequence).contains(addressRevision), addressStatus == nil || ["active", "invalid"].contains(addressStatus!) else { throw IndianaClientError.invalidResponse }
+    }
+}
+/// Capture before starting asynchronous OS token work; an old callback cannot replace a newer observation.
+public struct IndianaPushObservationTicket: Sendable { let client: UUID; let identity: UUID; let observation: UUID }
+public struct IndianaPushRecoveryRequest: Decodable, Sendable {
+    public let requested: Bool
+    public let expiresAt: String
+}
+
+struct IndianaPushJournal: Codable, Sendable {
+    var installationId: UUID
+    var privateKey: Data
+    var identitySeq: Int64
+    var addressSeq: Int64
+    var detachSeq: Int64?
+    func validate() throws {
+        guard (0...IndianaPushIdentity.maxSequence).contains(identitySeq), (0...IndianaPushIdentity.maxSequence).contains(addressSeq),
+              detachSeq == nil || (detachSeq! > 0 && detachSeq! <= identitySeq),
+              (try? P256.Signing.PrivateKey(rawRepresentation: privateKey)) != nil else { throw IndianaClientError.protectedStorageUnavailable }
+    }
+}
+protocol IndianaPushJournalStorage: Sendable {
+    /// A synchronous durable write: lifecycle changes cannot cross an await before the intent is saved.
+    func transaction(_ update: (IndianaPushJournal) throws -> IndianaPushJournal) throws -> IndianaPushJournal
+}
+final class IndianaPushKeychain: IndianaPushJournalStorage, @unchecked Sendable {
+    private let service: String
+    private static let lock = NSLock()
+    init(scope: IndianaScope) { service = "\(Bundle.main.bundleIdentifier ?? "Indiana").indiana.push.v1.\(scope.projectId.uuidString.lowercased()).\(scope.environment.rawValue)" }
+    func transaction(_ update: (IndianaPushJournal) throws -> IndianaPushJournal) throws -> IndianaPushJournal {
+        Self.lock.lock(); defer { Self.lock.unlock() }
+        let query: [String: Any] = [kSecClass as String:kSecClassGenericPassword, kSecAttrService as String:service, kSecAttrAccount as String:"installation"]
+        var result: CFTypeRef?
+        let status = SecItemCopyMatching(query.merging([kSecReturnData as String:true]) { _, new in new } as CFDictionary, &result)
+        let current: IndianaPushJournal
+        if status == errSecItemNotFound {
+            current = IndianaPushJournal(installationId: UUID(), privateKey: P256.Signing.PrivateKey().rawRepresentation, identitySeq: 0, addressSeq: 0, detachSeq: nil)
+        } else {
+            guard status == errSecSuccess, let data = result as? Data, data.count <= 4096,
+                  let decoded = try? JSONDecoder().decode(IndianaPushJournal.self, from: data) else { throw IndianaClientError.protectedStorageUnavailable }
+            current = decoded
+        }
+        try current.validate()
+        let next = try update(current); try next.validate()
+        guard next.installationId == current.installationId, next.privateKey == current.privateKey,
+              next.identitySeq >= current.identitySeq, next.addressSeq >= current.addressSeq else { throw IndianaClientError.protectedStorageUnavailable }
+        if status == errSecItemNotFound || next.identitySeq != current.identitySeq || next.addressSeq != current.addressSeq || next.detachSeq != current.detachSeq {
+            let data = try JSONEncoder().encode(next)
+            let saved = status == errSecItemNotFound
+                ? SecItemAdd(query.merging([kSecValueData as String:data, kSecAttrAccessible as String:kSecAttrAccessibleWhenUnlockedThisDeviceOnly]) { _, new in new } as CFDictionary, nil)
+                : SecItemUpdate(query as CFDictionary, [kSecValueData as String:data] as CFDictionary)
+            guard saved == errSecSuccess else { throw IndianaClientError.protectedStorageUnavailable }
+        }
+        return next
+    }
+}
+
+/// Owned by the existing IndianaClient actor. No credential, transport or provider token is persisted here.
+final class IndianaPushIdentity {
+    static let maxSequence: Int64 = 9_007_199_254_740_991
+    let storage: any IndianaPushJournalStorage
+    init(storage: any IndianaPushJournalStorage) throws { self.storage = storage; _ = try state() }
+    func state() throws -> IndianaPushJournal { try storage.transaction { $0 } }
+    func reserve(detach: Bool = false) throws -> Int64 {
+        try storage.transaction { current in
+            guard current.identitySeq < Self.maxSequence else { throw IndianaClientError.protectedStorageUnavailable }
+            var next = current; next.identitySeq += 1
+            if detach { next.detachSeq = next.identitySeq }
+            return next
+        }.identitySeq
+    }
+    func reserveAddress() throws -> Int64 {
+        try storage.transaction { current in
+            guard current.addressSeq < Self.maxSequence else { throw IndianaClientError.protectedStorageUnavailable }
+            var next = current; next.addressSeq += 1; return next
+        }.addressSeq
+    }
+    func clearDetach(_ sequence: Int64) throws {
+        _ = try storage.transaction { current in var next = current; if next.detachSeq == sequence { next.detachSeq = nil }; return next }
+    }
+    func recover(remote: IndianaPushInstallationState, expected: Int64) throws -> Int64 {
+        try storage.transaction { current in
+            guard current.identitySeq == expected else { throw IndianaClientError.identityChanged }
+            let floor = max(current.identitySeq, remote.identitySeq)
+            guard floor < Self.maxSequence else { throw IndianaClientError.protectedStorageUnavailable }
+            var next = current; next.identitySeq = floor + 1; next.addressSeq = max(current.addressSeq, remote.addressSeq); return next
+        }.identitySeq
+    }
+    static func digest(_ credential: String) -> String { SHA256.hash(data: Data(credential.utf8)).map { String(format: "%02x", $0) }.joined() }
+    static func base64url(_ bytes: Data) -> String { bytes.base64EncodedString().replacingOccurrences(of: "+", with: "-").replacingOccurrences(of: "/", with: "_").replacingOccurrences(of: "=", with: "") }
+    func command(_ operation: String, scope: IndianaScope, sequence: Int64? = nil, credential: String? = nil, observation: IndianaPushObservation? = nil, challenge: String? = nil) throws -> Data {
+        let journal = try state(), key = try P256.Signing.PrivateKey(rawRepresentation: journal.privateKey)
+        let publicKey = Self.base64url(key.publicKey.derRepresentation), installation = journal.installationId.uuidString.lowercased()
+        let formatter = ISO8601DateFormatter(); formatter.formatOptions = [.withInternetDateTime, .withFractionalSeconds]
+        let issuedAt = formatter.string(from: Date())
+        var fields: [Any] = ["indiana_push_v1", operation, scope.projectId.uuidString.lowercased(), scope.environment.rawValue, installation, publicKey, issuedAt]
+        var input: [String: Any] = ["installationId":installation, "publicKey":publicKey, "issuedAt":issuedAt]
+        let null = NSNull()
+        switch operation {
+        case "bind", "detach":
+            guard let sequence else { throw IndianaClientError.invalidConfiguration }
+            fields += [sequence, "ios"]; input["sequence"] = sequence; input["platform"] = "ios"
+            if operation == "bind" { guard let credential else { throw IndianaClientError.unauthenticated }; let digest = Self.digest(credential); fields.append(digest); input["credentialDigest"] = digest }
+        case "read":
+            guard let credential else { throw IndianaClientError.unauthenticated }; let digest = Self.digest(credential); fields.append(digest); input["credentialDigest"] = digest
+        case "address", "recovery_request", "recovery_confirm":
+            guard let sequence, let credential, let observation else { throw IndianaClientError.invalidConfiguration }
+            let digest = Self.digest(credential)
+            fields += [sequence, digest, observation.connectionId?.uuidString.lowercased() as Any? ?? null, observation.kind?.rawValue as Any? ?? null, observation.token as Any? ?? null, observation.permission.rawValue]
+            input["sequence"] = sequence; input["credentialDigest"] = digest; input["connectionId"] = observation.connectionId?.uuidString.lowercased() ?? null as Any
+            input["kind"] = observation.kind?.rawValue ?? null as Any; input["token"] = observation.token ?? null as Any; input["permission"] = observation.permission.rawValue
+            if operation == "recovery_confirm" {
+                guard let challenge, (100...3500).contains(challenge.utf8.count), challenge.utf8.allSatisfy({ (48...57).contains($0) || (65...90).contains($0) || (97...122).contains($0) || $0 == 45 || $0 == 95 }) else { throw IndianaClientError.invalidConfiguration }
+                fields.append(challenge); input["challenge"] = challenge
+            }
+        default: throw IndianaClientError.invalidConfiguration
+        }
+        let bytes = try JSONSerialization.data(withJSONObject: fields, options: [.withoutEscapingSlashes])
+        input["signature"] = Self.base64url(try key.signature(for: bytes).rawRepresentation)
+        if operation == "detach" { input["projectId"] = scope.projectId.uuidString.lowercased(); input["environment"] = scope.environment.rawValue }
+        return try JSONSerialization.data(withJSONObject: input, options: [.withoutEscapingSlashes])
+    }
+}

package/native-sdk/ios/RendererNavigation.swift

@@ -0,0 +1,8 @@
+import Foundation
+
+/// Subframes can execute only the renderer bytes shipped with this SDK.
+func indianaAllowsFunnelRendererNavigation(_ offered: URL, baseURL: URL) -> Bool {
+    guard baseURL.absoluteString == "https://indiana-sdk.invalid/",
+          let expected = try? IndianaBundledWebViewResources.rendererURL() else { return false }
+    return offered.absoluteString.components(separatedBy: "#").first == expected
+}

package/native-sdk/ios/Resources.swift

@@ -0,0 +1,15 @@
+import Foundation
+
+private final class IndianaResourceBundleMarker {}
+enum IndianaResources {
+    static let bundle: Bundle = {
+        #if SWIFT_PACKAGE
+        return Bundle.module
+        #else
+        let framework = Bundle(for: IndianaResourceBundleMarker.self)
+        if let url = framework.url(forResource: "IndianaResources", withExtension: "bundle"), let bundle = Bundle(url: url) { return bundle }
+        if let url = Bundle.main.url(forResource: "IndianaResources", withExtension: "bundle"), let bundle = Bundle(url: url) { return bundle }
+        return framework
+        #endif
+    }()
+}

package/native-sdk/ios/SDKVersion.swift

@@ -0,0 +1,4 @@
+// Generated by scripts/sdk/generate-native-protocol.mjs. Do not edit.
+public enum IndianaSDK {
+    public static let version = "0.10.1"
+}

package/native-sdk/ios/StoreSubscriptionManagement.swift

@@ -0,0 +1,11 @@
+#if canImport(UIKit)
+import StoreKit
+import UIKit
+
+/// Presents the App Store's renewal management sheet. Entitlements still come from Indiana.
+public enum IndianaStoreSubscriptions {
+    @MainActor public static func manage(in scene: UIWindowScene) async throws {
+        try await AppStore.showManageSubscriptions(in: scene)
+    }
+}
+#endif

package/native-sdk/ios/WebView/THIRD_PARTY_NOTICES.txt

@@ -0,0 +1,101 @@
+# GrowthBook core
+
+MIT core port from growthbook/growthbook at ed29827a453ae6b9eba181bdf4e9280d4b670817. No enterprise-licensed code is included.
+
+Copyright (c) 2025 GrowthBook, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+# @noble/hashes 2.4.0
+
+SHA-256 for hashed saved-group membership is bundled from `@noble/hashes` 2.4.0.
+Source: https://github.com/paulmillr/noble-hashes
+
+The MIT License (MIT)
+
+Copyright (c) 2022 Paul Miller (https://paulmillr.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the “Software”), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+# dom-mutator 0.7.0
+
+GrowthBook declarative DOM mutations use the original `dom-mutator` package.
+Source: https://github.com/growthbook/dom-mutator
+
+MIT License
+
+Copyright (c) 2021 Jeremy Dorn
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+# whatwg-url-minimum 0.2.0
+
+Bundled URL implementation from https://github.com/expo/whatwg-url-minimum.
+
+MIT License
+
+Copyright (c) Phil Pluckthun,
+Copyright (c) 650 Industries, Inc. (aka Expo),
+Copyright (c) Sebastian Mayr
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.