react-native-device-integrity 0.1.0 → 0.2.0

package/ios/DITamperChecks.m

@@ -0,0 +1,304 @@
+// Independent implementation informed by OWASP MASTG (MASVS-RESILIENCE-2
+// app integrity); no code copied.
+
+#import "DITamperChecks.h"
+
+#import <Security/Security.h>
+#import <mach-o/dyld.h>
+#import <mach-o/loader.h>
+#import <string.h>
+
+@implementation DITamperChecks
+
++ (void)addSignalId:(NSString *)signalId
+            category:(NSString *)category
+         description:(NSString *)description
+             signals:(NSMutableArray<NSDictionary *> *)signals
+             seenIds:(NSMutableSet<NSString *> *)seenIds
+{
+  if ([seenIds containsObject:signalId]) {
+    return;
+  }
+  [seenIds addObject:signalId];
+  [signals addObject:@{
+    @"id" : signalId,
+    @"category" : category,
+    @"description" : description,
+  }];
+}
+
++ (void)runWithConfig:(NSDictionary *)config
+              signals:(NSMutableArray<NSDictionary *> *)signals
+              seenIds:(NSMutableSet<NSString *> *)seenIds
+            completed:(BOOL *)completed
+{
+  if (config == nil || config.count == 0) {
+    return;
+  }
+
+#if TARGET_OS_SIMULATOR
+  // Simulator: App Store encryption and Team ID from keychain access groups
+  // are not meaningful on the host Mac — skip by design (not incomplete).
+  (void)signals;
+  (void)seenIds;
+  (void)completed;
+  return;
+#else
+
+  NSArray *expectedTeamIds = config[@"expectedTeamIds"];
+  if ([expectedTeamIds isKindOfClass:[NSArray class]] && expectedTeamIds.count == 0) {
+    // Configured without a usable Team ID: the check cannot run.
+    if (completed != NULL) {
+      *completed = NO;
+    }
+  } else if ([expectedTeamIds isKindOfClass:[NSArray class]]) {
+    @try {
+      BOOL couldNotRun = NO;
+      NSString *teamId = [self currentTeamIdCouldNotRun:&couldNotRun];
+      if (couldNotRun) {
+        if (completed != NULL) {
+          *completed = NO;
+        }
+      } else if (teamId == nil || ![self teamId:teamId matchesExpected:expectedTeamIds]) {
+        [self addSignalId:@"tamper_team_id_mismatch"
+                 category:@"tamper"
+              description:@"The app Team ID does not match an expected value"
+                  signals:signals
+                  seenIds:seenIds];
+      }
+    } @catch (__unused NSException *exception) {
+      if (completed != NULL) {
+        *completed = NO;
+      }
+    }
+  }
+
+  NSNumber *requireEncrypted = config[@"requireEncryptedBinary"];
+  if ([requireEncrypted isKindOfClass:[NSNumber class]] && [requireEncrypted boolValue]) {
+    @try {
+      if ([self isMainExecutableDecryptedOrMissingEncryption]) {
+        [self addSignalId:@"tamper_binary_decrypted"
+                 category:@"tamper"
+              description:@"The main executable does not appear to be encrypted"
+                  signals:signals
+                  seenIds:seenIds];
+      }
+    } @catch (__unused NSException *exception) {
+      if (completed != NULL) {
+        *completed = NO;
+      }
+    }
+  }
+#endif
+}
+
+#pragma mark - Team ID (keychain access group)
+
+/*
+ * Public-API Team ID lookup: a Keychain generic-password item's
+ * kSecAttrAccessGroup is of the form "TEAMID.<app-id>". Adding (if needed)
+ * and querying such an item, then reading that attribute, yields the Team
+ * ID prefix without private APIs. Keychain APIs are not on Apple's
+ * required-reason API list. The temporary item is deleted after the query.
+ */
++ (nullable NSString *)currentTeamIdCouldNotRun:(BOOL *)couldNotRun
+{
+  if (couldNotRun != NULL) {
+    *couldNotRun = NO;
+  }
+
+  NSString *bundleId = [[NSBundle mainBundle] bundleIdentifier];
+  if (bundleId.length == 0) {
+    bundleId = @"unknown";
+  }
+  NSString *service =
+      [NSString stringWithFormat:@"%@.deviceintegrity.teamid", bundleId];
+
+  NSDictionary *query = @{
+    (__bridge id)kSecClass : (__bridge id)kSecClassGenericPassword,
+    (__bridge id)kSecAttrService : service,
+    (__bridge id)kSecReturnAttributes : @YES,
+  };
+
+  CFTypeRef result = NULL;
+  OSStatus status = SecItemCopyMatching((__bridge CFDictionaryRef)query, &result);
+
+  if (status == errSecItemNotFound) {
+    NSDictionary *add = @{
+      (__bridge id)kSecClass : (__bridge id)kSecClassGenericPassword,
+      (__bridge id)kSecAttrService : service,
+      (__bridge id)kSecAttrAccessible :
+          (__bridge id)kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly,
+      (__bridge id)kSecValueData : [@"di" dataUsingEncoding:NSUTF8StringEncoding],
+    };
+    status = SecItemAdd((__bridge CFDictionaryRef)add, NULL);
+    if (status != errSecSuccess) {
+      if (couldNotRun != NULL) {
+        *couldNotRun = YES;
+      }
+      return nil;
+    }
+    result = NULL;
+    status = SecItemCopyMatching((__bridge CFDictionaryRef)query, &result);
+  }
+
+  if (status != errSecSuccess || result == NULL) {
+    if (couldNotRun != NULL) {
+      *couldNotRun = YES;
+    }
+    [self deleteTeamIdItemWithService:service];
+    return nil;
+  }
+
+  NSDictionary *attrs = (__bridge_transfer NSDictionary *)result;
+  NSString *accessGroup = attrs[(__bridge id)kSecAttrAccessGroup];
+
+  [self deleteTeamIdItemWithService:service];
+
+  if (![accessGroup isKindOfClass:[NSString class]] || accessGroup.length == 0) {
+    if (couldNotRun != NULL) {
+      *couldNotRun = YES;
+    }
+    return nil;
+  }
+
+  NSRange dot = [accessGroup rangeOfString:@"."];
+  if (dot.location == NSNotFound || dot.location == 0) {
+    if (couldNotRun != NULL) {
+      *couldNotRun = YES;
+    }
+    return nil;
+  }
+
+  NSString *prefix = [[accessGroup substringToIndex:dot.location]
+      stringByTrimmingCharactersInSet:[NSCharacterSet whitespaceAndNewlineCharacterSet]];
+  if (prefix.length == 0) {
+    if (couldNotRun != NULL) {
+      *couldNotRun = YES;
+    }
+    return nil;
+  }
+  return prefix;
+}
+
++ (void)deleteTeamIdItemWithService:(NSString *)service
+{
+  NSDictionary *del = @{
+    (__bridge id)kSecClass : (__bridge id)kSecClassGenericPassword,
+    (__bridge id)kSecAttrService : service,
+  };
+  SecItemDelete((__bridge CFDictionaryRef)del);
+}
+
++ (BOOL)teamId:(NSString *)teamId matchesExpected:(NSArray *)expectedTeamIds
+{
+  for (id raw in expectedTeamIds) {
+    if (![raw isKindOfClass:[NSString class]]) {
+      continue;
+    }
+    NSString *expected = [(NSString *)raw
+        stringByTrimmingCharactersInSet:[NSCharacterSet whitespaceAndNewlineCharacterSet]];
+    if (expected.length == 0) {
+      continue;
+    }
+    // Team IDs are uppercase alphanumerics; compare case-sensitively.
+    if ([teamId isEqualToString:expected]) {
+      return YES;
+    }
+  }
+  return NO;
+}
+
+#pragma mark - Binary encryption (LC_ENCRYPTION_INFO)
+
++ (const struct mach_header *)mainExecutableHeader
+{
+  NSString *execPath = [[NSBundle mainBundle] executablePath];
+  const char *execPathC = execPath.fileSystemRepresentation;
+
+  // Prefer image 0 when its path matches the main bundle executable.
+  const char *image0Name = _dyld_get_image_name(0);
+  if (image0Name != NULL && execPathC != NULL && strcmp(image0Name, execPathC) == 0) {
+    return _dyld_get_image_header(0);
+  }
+
+  // Otherwise find the MH_EXECUTE image (or path match).
+  uint32_t count = _dyld_image_count();
+  for (uint32_t i = 0; i < count; i++) {
+    const struct mach_header *header = _dyld_get_image_header(i);
+    if (header == NULL) {
+      continue;
+    }
+    if (header->filetype == MH_EXECUTE) {
+      return header;
+    }
+    const char *name = _dyld_get_image_name(i);
+    if (name != NULL && execPathC != NULL && strcmp(name, execPathC) == 0) {
+      return header;
+    }
+  }
+
+  // Last resort: image 0 is conventionally the main executable.
+  return _dyld_get_image_header(0);
+}
+
++ (BOOL)isMainExecutableDecryptedOrMissingEncryption
+{
+  const struct mach_header *header = [self mainExecutableHeader];
+  if (header == NULL) {
+    // Cannot inspect — treat as incomplete via exception path; return NO here
+    // and let the caller mark incomplete only on throw. Missing header means
+    // we could not run the check.
+    @throw [NSException exceptionWithName:@"DITamperChecksException"
+                                   reason:@"main executable header unavailable"
+                                 userInfo:nil];
+  }
+
+  BOOL is64 = (header->magic == MH_MAGIC_64 || header->magic == MH_CIGAM_64);
+  BOOL is32 = (header->magic == MH_MAGIC || header->magic == MH_CIGAM);
+  if (!is64 && !is32) {
+    @throw [NSException exceptionWithName:@"DITamperChecksException"
+                                   reason:@"unrecognized mach-o magic"
+                                 userInfo:nil];
+  }
+
+  uint32_t ncmds = 0;
+  const struct load_command *cmd = NULL;
+
+  if (is64) {
+    const struct mach_header_64 *h64 = (const struct mach_header_64 *)header;
+    ncmds = h64->ncmds;
+    cmd = (const struct load_command *)(h64 + 1);
+  } else {
+    ncmds = header->ncmds;
+    cmd = (const struct load_command *)(header + 1);
+  }
+
+  BOOL found = NO;
+  for (uint32_t i = 0; i < ncmds; i++) {
+    if (cmd->cmdsize == 0) {
+      break;
+    }
+    if (cmd->cmd == LC_ENCRYPTION_INFO_64) {
+      const struct encryption_info_command_64 *enc =
+          (const struct encryption_info_command_64 *)cmd;
+      found = YES;
+      if (enc->cryptid == 0) {
+        return YES;
+      }
+    } else if (cmd->cmd == LC_ENCRYPTION_INFO) {
+      const struct encryption_info_command *enc =
+          (const struct encryption_info_command *)cmd;
+      found = YES;
+      if (enc->cryptid == 0) {
+        return YES;
+      }
+    }
+    cmd = (const struct load_command *)((const uint8_t *)cmd + cmd->cmdsize);
+  }
+
+  // Missing encryption load command ⇒ treat as decrypted / not encrypted.
+  return !found;
+}
+
+@end

package/ios/DeviceIntegrity.mm

@@ -14,13 +14,65 @@
   return @"DeviceIntegrity";
 }
 
-- (void)checkIntegrity:(RCTPromiseResolveBlock)resolve
+/**
+ * Defensively parse options[@"ios"]. Wrong types / empty arrays ⇒ not
+ * configured (check does not run, report is not incomplete).
+ */
+static NSDictionary *DIParseIOSConfig(NSDictionary *options)
+{
+  if (![options isKindOfClass:[NSDictionary class]]) {
+    return nil;
+  }
+
+  id iosRaw = options[@"ios"];
+  if (![iosRaw isKindOfClass:[NSDictionary class]]) {
+    return nil;
+  }
+  NSDictionary *ios = (NSDictionary *)iosRaw;
+  NSMutableDictionary *config = [NSMutableDictionary dictionary];
+
+  id teamIdsRaw = ios[@"expectedTeamIds"];
+  if ([teamIdsRaw isKindOfClass:[NSArray class]]) {
+    NSMutableArray<NSString *> *valid = [NSMutableArray array];
+    for (id item in (NSArray *)teamIdsRaw) {
+      if (![item isKindOfClass:[NSString class]]) {
+        continue;
+      }
+      NSString *trimmed = [(NSString *)item
+          stringByTrimmingCharactersInSet:[NSCharacterSet whitespaceAndNewlineCharacterSet]];
+      if (trimmed.length > 0) {
+        [valid addObject:trimmed];
+      }
+    }
+    // Keep an empty list when values were given but none are usable, so the
+    // check reports incomplete instead of silently not running.
+    if (valid.count > 0 || ((NSArray *)teamIdsRaw).count > 0) {
+      config[@"expectedTeamIds"] = [valid copy];
+    }
+  }
+
+  id requireEncRaw = ios[@"requireEncryptedBinary"];
+  if ([requireEncRaw isKindOfClass:[NSNumber class]] &&
+      [(NSNumber *)requireEncRaw boolValue]) {
+    config[@"requireEncryptedBinary"] = @YES;
+  }
+
+  if (config.count == 0) {
+    return nil;
+  }
+  return [config copy];
+}
+
+- (void)checkIntegrity:(NSDictionary *)options
+               resolve:(RCTPromiseResolveBlock)resolve
                 reject:(RCTPromiseRejectBlock)reject
 {
   @try {
-    [DIIntegrityChecks runWithCompletion:^(NSDictionary *report) {
-      resolve(report);
-    }];
+    NSDictionary *iosConfig = DIParseIOSConfig(options);
+    [DIIntegrityChecks runWithIOSConfig:iosConfig
+                             completion:^(NSDictionary *report) {
+                               resolve(report);
+                             }];
   } @catch (NSException *exception) {
     reject(@"E_INTEGRITY", exception.reason ?: @"Unexpected integrity check failure", nil);
   }

package/jest/index.d.ts

@@ -0,0 +1,39 @@
+import type {
+  CheckIntegrityOptions,
+  IntegrityResult,
+  IntegrityStatus,
+  Signal,
+  SignalId,
+} from '../src/types';
+
+export type {
+  CheckIntegrityOptions,
+  IntegrityResult,
+  IntegrityStatus,
+  Signal,
+  SignalId,
+};
+
+export declare const SIGNAL_IDS: readonly SignalId[];
+
+export type UseDeviceIntegrityResult = {
+  status: IntegrityStatus;
+  signals: Signal[];
+  result: IntegrityResult;
+  loading: false;
+  refresh: () => Promise<IntegrityResult>;
+};
+
+export declare function checkIntegrity(
+  options?: CheckIntegrityOptions
+): Promise<IntegrityResult>;
+
+export declare function useDeviceIntegrity(
+  options?: CheckIntegrityOptions
+): UseDeviceIntegrityResult;
+
+export declare function setMockIntegrityResult(
+  partial: Partial<IntegrityResult>
+): void;
+
+export declare function resetMockIntegrity(): void;

package/jest/index.js

@@ -0,0 +1,100 @@
+'use strict';
+
+/**
+ * Jest mock for `react-native-device-integrity`.
+ *
+ * Usage in a test file:
+ *
+ *   jest.mock(
+ *     'react-native-device-integrity',
+ *     () => require('react-native-device-integrity/jest')
+ *   );
+ */
+
+const SIGNAL_IDS = Object.freeze([
+  'simulator',
+  'jailbreak_files',
+  'jailbreak_url_schemes',
+  'jailbreak_symlinks',
+  'jailbreak_writable_system',
+  'hooking_libraries',
+  'hooking_dyld_insert',
+  'debugger_attached',
+  'emulator',
+  'root_su_binary',
+  'root_management_apps',
+  'root_magisk_files',
+  'root_test_keys',
+  'root_dangerous_props',
+  'root_rw_system',
+  'hooking_frida',
+  'hooking_xposed',
+  'tamper_signature_mismatch',
+  'tamper_untrusted_installer',
+  'tamper_binary_decrypted',
+  'tamper_team_id_mismatch',
+]);
+
+function defaultResult() {
+  return {
+    status: 'clean',
+    signals: [],
+    ignored: [],
+    platform: 'ios',
+    durationMs: 0,
+  };
+}
+
+let mockResult = defaultResult();
+
+function cloneResult(result) {
+  return {
+    ...result,
+    signals: Array.isArray(result.signals) ? result.signals.slice() : [],
+    ignored: Array.isArray(result.ignored) ? result.ignored.slice() : [],
+  };
+}
+
+function setMockIntegrityResult(partial) {
+  mockResult = {
+    ...mockResult,
+    ...partial,
+    signals:
+      partial && Object.prototype.hasOwnProperty.call(partial, 'signals')
+        ? partial.signals
+        : mockResult.signals,
+    ignored:
+      partial && Object.prototype.hasOwnProperty.call(partial, 'ignored')
+        ? partial.ignored
+        : mockResult.ignored,
+  };
+}
+
+function resetMockIntegrity() {
+  mockResult = defaultResult();
+}
+
+function checkIntegrity() {
+  return Promise.resolve(cloneResult(mockResult));
+}
+
+function useDeviceIntegrity() {
+  const result = cloneResult(mockResult);
+  return {
+    status: result.status,
+    signals: result.signals,
+    result,
+    loading: false,
+    refresh: function refresh() {
+      return checkIntegrity();
+    },
+  };
+}
+
+module.exports = {
+  SIGNAL_IDS,
+  checkIntegrity,
+  useDeviceIntegrity,
+  setMockIntegrityResult,
+  resetMockIntegrity,
+};

package/lib/module/NativeDeviceIntegrity.js.map

@@ -1 +1 @@
-{"version":3,"names":["TurboModuleRegistry","get"],"sourceRoot":"../../src","sources":["NativeDeviceIntegrity.ts"],"mappings":";;AAAA,SAASA,mBAAmB,QAA0B,cAAc;AAkBpE,eAAeA,mBAAmB,CAACC,GAAG,CAAO,iBAAiB,CAAC","ignoreList":[]}
+{"version":3,"names":["TurboModuleRegistry","get"],"sourceRoot":"../../src","sources":["NativeDeviceIntegrity.ts"],"mappings":";;AACA,SAASA,mBAAmB,QAAQ,cAAc;AAoBlD,eAAeA,mBAAmB,CAACC,GAAG,CAAO,iBAAiB,CAAC","ignoreList":[]}

package/lib/module/checkIntegrity.js

@@ -8,6 +8,8 @@ export async function checkIntegrity(_options) {
   return {
     status: 'unknown',
     signals: [],
+    ignored: [],
+    durationMs: 0,
     platform: Platform.OS,
     reason: 'unsupported_platform'
   };

package/lib/module/checkIntegrity.js.map

@@ -1 +1 @@
-{"version":3,"names":["Platform","checkIntegrity","_options","status","signals","platform","OS","reason"],"sourceRoot":"../../src","sources":["checkIntegrity.ts"],"mappings":";;AAAA,SAASA,QAAQ,QAAQ,cAAc;AAGvC;AACA;AACA;AACA,OAAO,eAAeC,cAAcA,CAClCC,QAAgC,EACN;EAC1B,OAAO;IACLC,MAAM,EAAE,SAAS;IACjBC,OAAO,EAAE,EAAE;IACXC,QAAQ,EAAEL,QAAQ,CAACM,EAAE;IACrBC,MAAM,EAAE;EACV,CAAC;AACH","ignoreList":[]}
+{"version":3,"names":["Platform","checkIntegrity","_options","status","signals","ignored","durationMs","platform","OS","reason"],"sourceRoot":"../../src","sources":["checkIntegrity.ts"],"mappings":";;AAAA,SAASA,QAAQ,QAAQ,cAAc;AAGvC;AACA;AACA;AACA,OAAO,eAAeC,cAAcA,CAClCC,QAAgC,EACN;EAC1B,OAAO;IACLC,MAAM,EAAE,SAAS;IACjBC,OAAO,EAAE,EAAE;IACXC,OAAO,EAAE,EAAE;IACXC,UAAU,EAAE,CAAC;IACbC,QAAQ,EAAEP,QAAQ,CAACQ,EAAE;IACrBC,MAAM,EAAE;EACV,CAAC;AACH","ignoreList":[]}

package/lib/module/checkIntegrity.native.js

@@ -10,6 +10,13 @@ class IntegrityTimeoutError extends Error {
     this.name = 'IntegrityTimeoutError';
   }
 }
+function nowMs() {
+  const perf = globalThis.performance;
+  if (perf != null && typeof perf.now === 'function') {
+    return perf.now();
+  }
+  return Date.now();
+}
 function withTimeout(promise, timeoutMs) {
   return new Promise((resolve, reject) => {
     const timer = setTimeout(() => {
@@ -24,11 +31,73 @@ function withTimeout(promise, timeoutMs) {
     });
   });
 }
+
+// A blank entry makes native treat the check as configured but unusable,
+// so it reports the run as incomplete instead of skipping the check.
+const UNUSABLE_LIST = [''];
+function stringArray(value) {
+  if (value == null) {
+    return undefined;
+  }
+  if (!Array.isArray(value)) {
+    return UNUSABLE_LIST;
+  }
+  const strings = value.filter(item => typeof item === 'string');
+  if (value.length > 0 && strings.length === 0) {
+    return UNUSABLE_LIST;
+  }
+  return strings;
+}
+
+/**
+ * Build the native options bag: only `android` / `ios`, with sanitized fields.
+ * Missing fields are omitted. A list that is provided but unusable (wrong type,
+ * no strings) is sent as a blank entry so the check fails closed as incomplete.
+ */
+export function sanitizeNativeOptions(options) {
+  const native = {};
+  if (options.android != null && typeof options.android === 'object') {
+    const android = {};
+    const certs = stringArray(options.android.expectedSigningCertificates);
+    if (certs != null) {
+      android.expectedSigningCertificates = certs;
+    }
+    const installers = stringArray(options.android.allowedInstallers);
+    if (installers != null) {
+      android.allowedInstallers = installers;
+    }
+    if (Object.keys(android).length > 0) {
+      native.android = android;
+    }
+  }
+  if (options.ios != null && typeof options.ios === 'object') {
+    const ios = {};
+    const teamIds = stringArray(options.ios.expectedTeamIds);
+    if (teamIds != null) {
+      ios.expectedTeamIds = teamIds;
+    }
+    if (typeof options.ios.requireEncryptedBinary === 'boolean') {
+      ios.requireEncryptedBinary = options.ios.requireEncryptedBinary;
+    }
+    if (Object.keys(ios).length > 0) {
+      native.ios = ios;
+    }
+  }
+  return native;
+}
+function withDuration(result, startedAt) {
+  return {
+    ...result,
+    durationMs: Math.max(0, nowMs() - startedAt)
+  };
+}
 export async function checkIntegrity(options = {}) {
   if (Platform.OS !== 'ios' && Platform.OS !== 'android') {
     return {
       status: 'unknown',
       signals: [],
+      ignored: [],
+      durationMs: 0,
       platform: Platform.OS,
       reason: 'unsupported_platform'
     };
@@ -37,31 +106,39 @@ export async function checkIntegrity(options = {}) {
     return {
       status: 'unknown',
       signals: [],
+      ignored: [],
+      durationMs: 0,
       platform: Platform.OS,
       reason: 'native_module_unavailable'
     };
   }
   const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const startedAt = nowMs();
+  const nativeOptions = sanitizeNativeOptions(options);
   try {
-    const report = await withTimeout(NativeDeviceIntegrity.checkIntegrity(), timeoutMs);
-    return resolveStatus(report, options, Platform.OS);
+    const report = await withTimeout(NativeDeviceIntegrity.checkIntegrity(nativeOptions), timeoutMs);
+    return withDuration(resolveStatus(report, options, Platform.OS), startedAt);
   } catch (error) {
     if (error instanceof IntegrityTimeoutError) {
-      return {
+      return withDuration({
         status: 'unknown',
         signals: [],
+        ignored: [],
+        durationMs: 0,
         platform: Platform.OS,
         reason: 'timeout'
-      };
+      }, startedAt);
     }
     const message = error instanceof Error ? error.message : typeof error === 'string' ? error : 'Native integrity check failed';
-    return {
+    return withDuration({
       status: 'unknown',
       signals: [],
+      ignored: [],
+      durationMs: 0,
       platform: Platform.OS,
       reason: 'native_error',
       error: message
-    };
+    }, startedAt);
   }
 }
 //# sourceMappingURL=checkIntegrity.native.js.map

package/lib/module/checkIntegrity.native.js.map

@@ -1 +1 @@
-{"version":3,"names":["Platform","NativeDeviceIntegrity","resolveStatus","DEFAULT_TIMEOUT_MS","IntegrityTimeoutError","Error","constructor","name","withTimeout","promise","timeoutMs","Promise","resolve","reject","timer","setTimeout","then","value","clearTimeout","error","checkIntegrity","options","OS","status","signals","platform","reason","report","message"],"sourceRoot":"../../src","sources":["checkIntegrity.native.ts"],"mappings":";;AAAA,SAASA,QAAQ,QAAQ,cAAc;AACvC,OAAOC,qBAAqB,MAAM,4BAAyB;AAC3D,SAASC,aAAa,QAAQ,oBAAiB;AAG/C,MAAMC,kBAAkB,GAAG,MAAM;AAEjC,MAAMC,qBAAqB,SAASC,KAAK,CAAC;EACxCC,WAAWA,CAAA,EAAG;IACZ,KAAK,CAAC,kCAAkC,CAAC;IACzC,IAAI,CAACC,IAAI,GAAG,uBAAuB;EACrC;AACF;AAEA,SAASC,WAAWA,CAAIC,OAAmB,EAAEC,SAAiB,EAAc;EAC1E,OAAO,IAAIC,OAAO,CAAI,CAACC,OAAO,EAAEC,MAAM,KAAK;IACzC,MAAMC,KAAK,GAAGC,UAAU,CAAC,MAAM;MAC7BF,MAAM,CAAC,IAAIT,qBAAqB,CAAC,CAAC,CAAC;IACrC,CAAC,EAAEM,SAAS,CAAC;IAEbD,OAAO,CAACO,IAAI,CACTC,KAAK,IAAK;MACTC,YAAY,CAACJ,KAAK,CAAC;MACnBF,OAAO,CAACK,KAAK,CAAC;IAChB,CAAC,EACAE,KAAc,IAAK;MAClBD,YAAY,CAACJ,KAAK,CAAC;MACnBD,MAAM,CAACM,KAAK,CAAC;IACf,CACF,CAAC;EACH,CAAC,CAAC;AACJ;AAEA,OAAO,eAAeC,cAAcA,CAClCC,OAA8B,GAAG,CAAC,CAAC,EACT;EAC1B,IAAIrB,QAAQ,CAACsB,EAAE,KAAK,KAAK,IAAItB,QAAQ,CAACsB,EAAE,KAAK,SAAS,EAAE;IACtD,OAAO;MACLC,MAAM,EAAE,SAAS;MACjBC,OAAO,EAAE,EAAE;MACXC,QAAQ,EAAEzB,QAAQ,CAACsB,EAAE;MACrBI,MAAM,EAAE;IACV,CAAC;EACH;EAEA,IAAIzB,qBAAqB,IAAI,IAAI,EAAE;IACjC,OAAO;MACLsB,MAAM,EAAE,SAAS;MACjBC,OAAO,EAAE,EAAE;MACXC,QAAQ,EAAEzB,QAAQ,CAACsB,EAAE;MACrBI,MAAM,EAAE;IACV,CAAC;EACH;EAEA,MAAMhB,SAAS,GAAGW,OAAO,CAACX,SAAS,IAAIP,kBAAkB;EAEzD,IAAI;IACF,MAAMwB,MAAM,GAAG,MAAMnB,WAAW,CAC9BP,qBAAqB,CAACmB,cAAc,CAAC,CAAC,EACtCV,SACF,CAAC;IACD,OAAOR,aAAa,CAACyB,MAAM,EAAEN,OAAO,EAAErB,QAAQ,CAACsB,EAAE,CAAC;EACpD,CAAC,CAAC,OAAOH,KAAK,EAAE;IACd,IAAIA,KAAK,YAAYf,qBAAqB,EAAE;MAC1C,OAAO;QACLmB,MAAM,EAAE,SAAS;QACjBC,OAAO,EAAE,EAAE;QACXC,QAAQ,EAAEzB,QAAQ,CAACsB,EAAE;QACrBI,MAAM,EAAE;MACV,CAAC;IACH;IAEA,MAAME,OAAO,GACXT,KAAK,YAAYd,KAAK,GAClBc,KAAK,CAACS,OAAO,GACb,OAAOT,KAAK,KAAK,QAAQ,GACvBA,KAAK,GACL,+BAA+B;IAEvC,OAAO;MACLI,MAAM,EAAE,SAAS;MACjBC,OAAO,EAAE,EAAE;MACXC,QAAQ,EAAEzB,QAAQ,CAACsB,EAAE;MACrBI,MAAM,EAAE,cAAc;MACtBP,KAAK,EAAES;IACT,CAAC;EACH;AACF","ignoreList":[]}
+{"version":3,"names":["Platform","NativeDeviceIntegrity","resolveStatus","DEFAULT_TIMEOUT_MS","IntegrityTimeoutError","Error","constructor","name","nowMs","perf","globalThis","performance","now","Date","withTimeout","promise","timeoutMs","Promise","resolve","reject","timer","setTimeout","then","value","clearTimeout","error","UNUSABLE_LIST","stringArray","undefined","Array","isArray","strings","filter","item","length","sanitizeNativeOptions","options","native","android","certs","expectedSigningCertificates","installers","allowedInstallers","Object","keys","ios","teamIds","expectedTeamIds","requireEncryptedBinary","withDuration","result","startedAt","durationMs","Math","max","checkIntegrity","OS","status","signals","ignored","platform","reason","nativeOptions","report","message"],"sourceRoot":"../../src","sources":["checkIntegrity.native.ts"],"mappings":";;AAAA,SAASA,QAAQ,QAAQ,cAAc;AACvC,OAAOC,qBAAqB,MAAM,4BAAyB;AAC3D,SAASC,aAAa,QAAQ,oBAAiB;AAG/C,MAAMC,kBAAkB,GAAG,MAAM;AAEjC,MAAMC,qBAAqB,SAASC,KAAK,CAAC;EACxCC,WAAWA,CAAA,EAAG;IACZ,KAAK,CAAC,kCAAkC,CAAC;IACzC,IAAI,CAACC,IAAI,GAAG,uBAAuB;EACrC;AACF;AAEA,SAASC,KAAKA,CAAA,EAAW;EACvB,MAAMC,IAAI,GAAIC,UAAU,CACrBC,WAAW;EACd,IAAIF,IAAI,IAAI,IAAI,IAAI,OAAOA,IAAI,CAACG,GAAG,KAAK,UAAU,EAAE;IAClD,OAAOH,IAAI,CAACG,GAAG,CAAC,CAAC;EACnB;EACA,OAAOC,IAAI,CAACD,GAAG,CAAC,CAAC;AACnB;AAEA,SAASE,WAAWA,CAAIC,OAAmB,EAAEC,SAAiB,EAAc;EAC1E,OAAO,IAAIC,OAAO,CAAI,CAACC,OAAO,EAAEC,MAAM,KAAK;IACzC,MAAMC,KAAK,GAAGC,UAAU,CAAC,MAAM;MAC7BF,MAAM,CAAC,IAAIf,qBAAqB,CAAC,CAAC,CAAC;IACrC,CAAC,EAAEY,SAAS,CAAC;IAEbD,OAAO,CAACO,IAAI,CACTC,KAAK,IAAK;MACTC,YAAY,CAACJ,KAAK,CAAC;MACnBF,OAAO,CAACK,KAAK,CAAC;IAChB,CAAC,EACAE,KAAc,IAAK;MAClBD,YAAY,CAACJ,KAAK,CAAC;MACnBD,MAAM,CAACM,KAAK,CAAC;IACf,CACF,CAAC;EACH,CAAC,CAAC;AACJ;;AAEA;AACA;AACA,MAAMC,aAAa,GAAG,CAAC,EAAE,CAAC;AAE1B,SAASC,WAAWA,CAACJ,KAAc,EAAwB;EACzD,IAAIA,KAAK,IAAI,IAAI,EAAE;IACjB,OAAOK,SAAS;EAClB;EACA,IAAI,CAACC,KAAK,CAACC,OAAO,CAACP,KAAK,CAAC,EAAE;IACzB,OAAOG,aAAa;EACtB;EACA,MAAMK,OAAO,GAAGR,KAAK,CAACS,MAAM,CACzBC,IAAI,IAAqB,OAAOA,IAAI,KAAK,QAC5C,CAAC;EACD,IAAIV,KAAK,CAACW,MAAM,GAAG,CAAC,IAAIH,OAAO,CAACG,MAAM,KAAK,CAAC,EAAE;IAC5C,OAAOR,aAAa;EACtB;EACA,OAAOK,OAAO;AAChB;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASI,qBAAqBA,CACnCC,OAA8B,EACL;EACzB,MAAMC,MAA+B,GAAG,CAAC,CAAC;EAE1C,IAAID,OAAO,CAACE,OAAO,IAAI,IAAI,IAAI,OAAOF,OAAO,CAACE,OAAO,KAAK,QAAQ,EAAE;IAClE,MAAMA,OAAgC,GAAG,CAAC,CAAC;IAC3C,MAAMC,KAAK,GAAGZ,WAAW,CAACS,OAAO,CAACE,OAAO,CAACE,2BAA2B,CAAC;IACtE,IAAID,KAAK,IAAI,IAAI,EAAE;MACjBD,OAAO,CAACE,2BAA2B,GAAGD,KAAK;IAC7C;IACA,MAAME,UAAU,GAAGd,WAAW,CAACS,OAAO,CAACE,OAAO,CAACI,iBAAiB,CAAC;IACjE,IAAID,UAAU,IAAI,IAAI,EAAE;MACtBH,OAAO,CAACI,iBAAiB,GAAGD,UAAU;IACxC;IACA,IAAIE,MAAM,CAACC,IAAI,CAACN,OAAO,CAAC,CAACJ,MAAM,GAAG,CAAC,EAAE;MACnCG,MAAM,CAACC,OAAO,GAAGA,OAAO;IAC1B;EACF;EAEA,IAAIF,OAAO,CAACS,GAAG,IAAI,IAAI,IAAI,OAAOT,OAAO,CAACS,GAAG,KAAK,QAAQ,EAAE;IAC1D,MAAMA,GAA4B,GAAG,CAAC,CAAC;IACvC,MAAMC,OAAO,GAAGnB,WAAW,CAACS,OAAO,CAACS,GAAG,CAACE,eAAe,CAAC;IACxD,IAAID,OAAO,IAAI,IAAI,EAAE;MACnBD,GAAG,CAACE,eAAe,GAAGD,OAAO;IAC/B;IACA,IAAI,OAAOV,OAAO,CAACS,GAAG,CAACG,sBAAsB,KAAK,SAAS,EAAE;MAC3DH,GAAG,CAACG,sBAAsB,GAAGZ,OAAO,CAACS,GAAG,CAACG,sBAAsB;IACjE;IACA,IAAIL,MAAM,CAACC,IAAI,CAACC,GAAG,CAAC,CAACX,MAAM,GAAG,CAAC,EAAE;MAC/BG,MAAM,CAACQ,GAAG,GAAGA,GAAG;IAClB;EACF;EAEA,OAAOR,MAAM;AACf;AAEA,SAASY,YAAYA,CACnBC,MAAuB,EACvBC,SAAiB,EACA;EACjB,OAAO;IACL,GAAGD,MAAM;IACTE,UAAU,EAAEC,IAAI,CAACC,GAAG,CAAC,CAAC,EAAE9C,KAAK,CAAC,CAAC,GAAG2C,SAAS;EAC7C,CAAC;AACH;AAEA,OAAO,eAAeI,cAAcA,CAClCnB,OAA8B,GAAG,CAAC,CAAC,EACT;EAC1B,IAAIpC,QAAQ,CAACwD,EAAE,KAAK,KAAK,IAAIxD,QAAQ,CAACwD,EAAE,KAAK,SAAS,EAAE;IACtD,OAAO;MACLC,MAAM,EAAE,SAAS;MACjBC,OAAO,EAAE,EAAE;MACXC,OAAO,EAAE,EAAE;MACXP,UAAU,EAAE,CAAC;MACbQ,QAAQ,EAAE5D,QAAQ,CAACwD,EAAE;MACrBK,MAAM,EAAE;IACV,CAAC;EACH;EAEA,IAAI5D,qBAAqB,IAAI,IAAI,EAAE;IACjC,OAAO;MACLwD,MAAM,EAAE,SAAS;MACjBC,OAAO,EAAE,EAAE;MACXC,OAAO,EAAE,EAAE;MACXP,UAAU,EAAE,CAAC;MACbQ,QAAQ,EAAE5D,QAAQ,CAACwD,EAAE;MACrBK,MAAM,EAAE;IACV,CAAC;EACH;EAEA,MAAM7C,SAAS,GAAGoB,OAAO,CAACpB,SAAS,IAAIb,kBAAkB;EACzD,MAAMgD,SAAS,GAAG3C,KAAK,CAAC,CAAC;EACzB,MAAMsD,aAAa,GAAG3B,qBAAqB,CAACC,OAAO,CAAC;EAEpD,IAAI;IACF,MAAM2B,MAAM,GAAG,MAAMjD,WAAW,CAC9Bb,qBAAqB,CAACsD,cAAc,CAACO,aAAa,CAAC,EACnD9C,SACF,CAAC;IACD,OAAOiC,YAAY,CAAC/C,aAAa,CAAC6D,MAAM,EAAE3B,OAAO,EAAEpC,QAAQ,CAACwD,EAAE,CAAC,EAAEL,SAAS,CAAC;EAC7E,CAAC,CAAC,OAAO1B,KAAK,EAAE;IACd,IAAIA,KAAK,YAAYrB,qBAAqB,EAAE;MAC1C,OAAO6C,YAAY,CACjB;QACEQ,MAAM,EAAE,SAAS;QACjBC,OAAO,EAAE,EAAE;QACXC,OAAO,EAAE,EAAE;QACXP,UAAU,EAAE,CAAC;QACbQ,QAAQ,EAAE5D,QAAQ,CAACwD,EAAE;QACrBK,MAAM,EAAE;MACV,CAAC,EACDV,SACF,CAAC;IACH;IAEA,MAAMa,OAAO,GACXvC,KAAK,YAAYpB,KAAK,GAClBoB,KAAK,CAACuC,OAAO,GACb,OAAOvC,KAAK,KAAK,QAAQ,GACvBA,KAAK,GACL,+BAA+B;IAEvC,OAAOwB,YAAY,CACjB;MACEQ,MAAM,EAAE,SAAS;MACjBC,OAAO,EAAE,EAAE;MACXC,OAAO,EAAE,EAAE;MACXP,UAAU,EAAE,CAAC;MACbQ,QAAQ,EAAE5D,QAAQ,CAACwD,EAAE;MACrBK,MAAM,EAAE,cAAc;MACtBpC,KAAK,EAAEuC;IACT,CAAC,EACDb,SACF,CAAC;EACH;AACF","ignoreList":[]}

package/lib/module/index.js

@@ -2,4 +2,5 @@
 
 export { checkIntegrity } from './checkIntegrity';
 export { useDeviceIntegrity } from "./useDeviceIntegrity.js";
+export { SIGNAL_IDS } from "./types.js";
 //# sourceMappingURL=index.js.map