react-native-intune 0.1.0-alpha.1

package/lib/module/api/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NativeIntune","assertAccountId","toAuthAccount","toAuthResult","enroll","signIn","params","signInSilent","acquireToken","getAccounts","accounts","map","signOut","accountId","signInAndEnroll","auth","enrollment"],"sourceRoot":"../../../src","sources":["api/auth.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAOA,YAAY,MAAM,oBAAiB;AAC1C,SAASC,eAAe,QAAQ,uBAAoB;AACpD,SAASC,aAAa,EAAEC,YAAY,QAAQ,uBAAoB;AAChE,SAASC,MAAM,QAAQ,iBAAc;AAUrC;AACA;AACA;AACA;AACA,OAAO,eAAeC,MAAMA,CAACC,MAAoB,GAAG,CAAC,CAAC,EAAuB;EAC3E,OAAOH,YAAY,CAAC,MAAMH,YAAY,CAACK,MAAM,CAACC,MAAM,CAAC,CAAC;AACxD;;AAEA;AACA;AACA;AACA;AACA,OAAO,eAAeC,YAAYA,CAChCD,MAAoB,GAAG,CAAC,CAAC,EACJ;EACrB,OAAOH,YAAY,CAAC,MAAMH,YAAY,CAACO,YAAY,CAACD,MAAM,CAAC,CAAC;AAC9D;;AAEA;AACA,OAAO,eAAeE,YAAYA,CAChCF,MAA0B,EACL;EACrB,OAAOH,YAAY,CAAC,MAAMH,YAAY,CAACQ,YAAY,CAACF,MAAM,CAAC,CAAC;AAC9D;;AAEA;AACA;AACA;AACA;AACA,OAAO,eAAeG,WAAWA,CAAA,EAA2B;EAC1D,MAAMC,QAAQ,GAAG,MAAMV,YAAY,CAACS,WAAW,CAAC,CAAC;EACjD,OAAOC,QAAQ,CAACC,GAAG,CAACT,aAAa,CAAC;AACpC;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASU,OAAOA,CAACN,MAAqB,EAAiB;EAC5DL,eAAe,CAACK,MAAM,CAACO,SAAS,CAAC;EACjC,OAAOb,YAAY,CAACY,OAAO,CAACN,MAAM,CAAC;AACrC;;AAEA;AACA,OAAO,eAAeQ,eAAeA,CACnCR,MAAoB,GAAG,CAAC,CAAC,EACoC;EAC7D,MAAMS,IAAI,GAAG,MAAMV,MAAM,CAACC,MAAM,CAAC;EACjC,MAAMU,UAAU,GAAG,MAAMZ,MAAM,CAAC;IAAES,SAAS,EAAEE,IAAI,CAACF;EAAU,CAAC,CAAC;EAC9D,OAAO;IAAEE,IAAI;IAAEC;EAAW,CAAC;AAC7B","ignoreList":[]}

package/lib/module/api/enrollment.js

@@ -0,0 +1,104 @@
+"use strict";
+
+/**
+ * Enrollment, state, and the reset sequence.
+ *
+ * The theme running through all three: **the SDK reports asynchronously and the process
+ * may not survive**. Nothing here resolves from a call returning, and nothing assumes
+ * the next line will run.
+ */
+
+import NativeIntune from "../NativeIntune.js";
+import { assertAccountId } from "../internal/errors.js";
+import { toEnrollmentResult, toIntuneState } from "../internal/decode.js";
+let resetHandler = null;
+
+/**
+ * Clears the app's own local data during a reset. The module cannot do this for you — it
+ * does not know what you store or where.
+ *
+ * Registered rather than passed to `reset` because a reset can be *resumed* at launch
+ * from the journal, with no `reset` call in flight (SPEC §7).
+ */
+export function setResetHandler(handler) {
+  resetHandler = handler;
+}
+
+/**
+ * Resolves with a result for every outcome including failures — a non-success status is
+ * data, not an exception. It only rejects for programming errors.
+ *
+ * Expect seconds, and a spinner: the promise settles when the SDK reports through its
+ * delegate or notification, not when the underlying call returns.
+ *
+ * Read SPEC §8 before branching on `status`. `NotLicensed` and `NotTargeted` must not
+ * block the user; `Failed` must.
+ */
+export async function enroll(params) {
+  assertAccountId(params.accountId);
+  return toEnrollmentResult(
+  // '' rather than undefined: the Codegen spec has no optionals, so "not known" has to
+  // be a value the native side can recognise.
+  await NativeIntune.enroll({
+    accountId: params.accountId,
+    upn: params.upn ?? ''
+  }));
+}
+
+/**
+ * **iOS only.** Hands the whole sign-in to the SDK: it shows its own credential screen,
+ * signs the user in, and enrolls them. No MSAL on our side, which is why this works
+ * before the built-in auth layer exists.
+ *
+ * Rejects with `E_SDK_UNAVAILABLE` on Android — `registerAccountForMAM` there always
+ * needs a token supplied by the app, so there is nothing equivalent to call.
+ *
+ * Like `enroll`, it resolves with a result for every outcome including failures.
+ */
+export async function enrollInteractive(params = {}) {
+  return toEnrollmentResult(await NativeIntune.enrollInteractive({
+    upn: params.upn ?? ''
+  }));
+}
+
+/**
+ * The reconciliation primitive, and the intended way to drive this module. Call it at
+ * launch, compare against what your backend says the state should be, act on the
+ * difference. It never rejects.
+ */
+export async function getState() {
+  return toIntuneState(await NativeIntune.getState());
+}
+
+/**
+ * Unregisters, unenrolls, optionally wipes corporate data, and clears the runtime
+ * configuration.
+ *
+ * **The process is expected to terminate during this call on Android** (SPEC §7). Do not
+ * write code after `await reset(...)` that must run — put the continuation in the
+ * launch-time reconciliation and let the journal resume it.
+ */
+export async function reset(params) {
+  // The order below is SPEC §7's, and it is not the intuitive one. The unregister has to
+  // happen before anything purges the account's tokens, and on Android the process is
+  // expected to die during it — so local cleanup cannot come first, and cannot be
+  // assumed to run at all. The journal carries the sequence across that death: if the
+  // native call never returns, the next launch sees `pendingReset` and calls reset()
+  // again with reason 'resume', landing back here.
+  const state = await getState().catch(() => null);
+  const accountId = state?.enrolledAccountId ?? null;
+  await NativeIntune.reset(params);
+
+  // Reached only if the process survived.
+  const handler = resetHandler;
+  if (handler !== null) {
+    // Deliberately not caught: if the app cannot clear its own data, the journal stays
+    // open and the reset is retried next launch rather than being marked done.
+    await handler({
+      reason: params.reason,
+      accountId
+    });
+  }
+  await NativeIntune.completeReset();
+}
+//# sourceMappingURL=enrollment.js.map

package/lib/module/api/enrollment.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NativeIntune","assertAccountId","toEnrollmentResult","toIntuneState","resetHandler","setResetHandler","handler","enroll","params","accountId","upn","enrollInteractive","getState","reset","state","catch","enrolledAccountId","reason","completeReset"],"sourceRoot":"../../../src","sources":["api/enrollment.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAOA,YAAY,MAAM,oBAAiB;AAC1C,SAASC,eAAe,QAAQ,uBAAoB;AACpD,SAASC,kBAAkB,EAAEC,aAAa,QAAQ,uBAAoB;AAUtE,IAAIC,YAAiC,GAAG,IAAI;;AAE5C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,eAAeA,CAACC,OAA4B,EAAQ;EAClEF,YAAY,GAAGE,OAAO;AACxB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,MAAMA,CAACC,MAAoB,EAA6B;EAC5EP,eAAe,CAACO,MAAM,CAACC,SAAS,CAAC;EACjC,OAAOP,kBAAkB;EACvB;EACA;EACA,MAAMF,YAAY,CAACO,MAAM,CAAC;IACxBE,SAAS,EAAED,MAAM,CAACC,SAAS;IAC3BC,GAAG,EAAEF,MAAM,CAACE,GAAG,IAAI;EACrB,CAAC,CACH,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,iBAAiBA,CACrCH,MAA+B,GAAG,CAAC,CAAC,EACT;EAC3B,OAAON,kBAAkB,CACvB,MAAMF,YAAY,CAACW,iBAAiB,CAAC;IAAED,GAAG,EAAEF,MAAM,CAACE,GAAG,IAAI;EAAG,CAAC,CAChE,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeE,QAAQA,CAAA,EAAyB;EACrD,OAAOT,aAAa,CAAC,MAAMH,YAAY,CAACY,QAAQ,CAAC,CAAC,CAAC;AACrD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,KAAKA,CAACL,MAAmB,EAAiB;EAC9D;EACA;EACA;EACA;EACA;EACA;EACA,MAAMM,KAAK,GAAG,MAAMF,QAAQ,CAAC,CAAC,CAACG,KAAK,CAAC,MAAM,IAAI,CAAC;EAChD,MAAMN,SAAS,GAAGK,KAAK,EAAEE,iBAAiB,IAAI,IAAI;EAElD,MAAMhB,YAAY,CAACa,KAAK,CAACL,MAAM,CAAC;;EAEhC;EACA,MAAMF,OAAO,GAAGF,YAAY;EAC5B,IAAIE,OAAO,KAAK,IAAI,EAAE;IACpB;IACA;IACA,MAAMA,OAAO,CAAC;MAAEW,MAAM,EAAET,MAAM,CAACS,MAAM;MAAER;IAAU,CAAC,CAAC;EACrD;EAEA,MAAMT,YAAY,CAACkB,aAAa,CAAC,CAAC;AACpC","ignoreList":[]}

package/lib/module/api/events.js

@@ -0,0 +1,50 @@
+"use strict";
+
+/**
+ * Typed subscriptions.
+ *
+ * Every one of these can fire without the app having called anything: the SDK enrolls on
+ * its own retry schedule, an administrator can change policy, and a wipe is
+ * service-initiated. Subscribe at startup, not when you happen to be waiting (SPEC §4.4).
+ */
+
+import { emitter } from "../internal/emitter.js";
+import { nullableStr, toBrokerStatus, toEnrollmentResult, toPolicySnapshot, toRestartReason } from "../internal/decode.js";
+function subscribe(event, decode, listener) {
+  return emitter.addListener(event, raw => listener(decode(raw)));
+}
+
+/** Also fires for the SDK's own background enrollment retries, which have no caller. */
+export function onEnrollmentResult(listener) {
+  return subscribe('enrollmentResult', toEnrollmentResult, listener);
+}
+
+/** The terminal state of a reset. */
+export function onUnenrollmentResult(listener) {
+  return subscribe('unenrollmentResult', toEnrollmentResult, listener);
+}
+
+/** An administrator changed policy — re-read whatever UI you gate on it. */
+export function onPolicyChanged(listener) {
+  return subscribe('policyChanged', toPolicySnapshot, listener);
+}
+
+/** The user installed or removed Company Portal. */
+export function onBrokerStatusChanged(listener) {
+  return subscribe('brokerStatusChanged', toBrokerStatus, listener);
+}
+
+/** **Service-initiated.** Can arrive with no prior app call at all. */
+export function onWipeRequested(listener) {
+  return subscribe('wipeRequested', raw => ({
+    accountId: nullableStr(raw.accountId)
+  }), listener);
+}
+
+/** iOS, on first policy application. See `configure({ restartHandledByApp })`. */
+export function onRestartRequired(listener) {
+  return subscribe('restartRequired', raw => ({
+    reason: toRestartReason(raw.reason)
+  }), listener);
+}
+//# sourceMappingURL=events.js.map

package/lib/module/api/events.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["emitter","nullableStr","toBrokerStatus","toEnrollmentResult","toPolicySnapshot","toRestartReason","subscribe","event","decode","listener","addListener","raw","onEnrollmentResult","onUnenrollmentResult","onPolicyChanged","onBrokerStatusChanged","onWipeRequested","accountId","onRestartRequired","reason"],"sourceRoot":"../../../src","sources":["api/events.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA,SAASA,OAAO,QAAQ,wBAAqB;AAC7C,SACEC,WAAW,EACXC,cAAc,EACdC,kBAAkB,EAClBC,gBAAgB,EAChBC,eAAe,QACV,uBAAoB;AAS3B,SAASC,SAASA,CAChBC,KAAQ,EACRC,MAAwC,EACxCC,QAA4C,EACvB;EACrB,OAAOT,OAAO,CAACU,WAAW,CAACH,KAAK,EAAGI,GAAW,IAAKF,QAAQ,CAACD,MAAM,CAACG,GAAG,CAAC,CAAC,CAAC;AAC3E;;AAEA;AACA,OAAO,SAASC,kBAAkBA,CAChCH,QAA4C,EACvB;EACrB,OAAOH,SAAS,CAAC,kBAAkB,EAAEH,kBAAkB,EAAEM,QAAQ,CAAC;AACpE;;AAEA;AACA,OAAO,SAASI,oBAAoBA,CAClCJ,QAA4C,EACvB;EACrB,OAAOH,SAAS,CAAC,oBAAoB,EAAEH,kBAAkB,EAAEM,QAAQ,CAAC;AACtE;;AAEA;AACA,OAAO,SAASK,eAAeA,CAC7BL,QAA0C,EACrB;EACrB,OAAOH,SAAS,CAAC,eAAe,EAAEF,gBAAgB,EAAEK,QAAQ,CAAC;AAC/D;;AAEA;AACA,OAAO,SAASM,qBAAqBA,CACnCN,QAAwC,EACnB;EACrB,OAAOH,SAAS,CAAC,qBAAqB,EAAEJ,cAAc,EAAEO,QAAQ,CAAC;AACnE;;AAEA;AACA,OAAO,SAASO,eAAeA,CAC7BP,QAAyD,EACpC;EACrB,OAAOH,SAAS,CACd,eAAe,EACdK,GAAG,KAAM;IACRM,SAAS,EAAEhB,WAAW,CAAEU,GAAG,CAA6BM,SAAS;EACnE,CAAC,CAAC,EACFR,QACF,CAAC;AACH;;AAEA;AACA,OAAO,SAASS,iBAAiBA,CAC/BT,QAA2C,EACtB;EACrB,OAAOH,SAAS,CACd,iBAAiB,EAChBK,GAAG,KAAM;IACRQ,MAAM,EAAEd,eAAe,CAAEM,GAAG,CAA6BQ,MAAM;EACjE,CAAC,CAAC,EACFV,QACF,CAAC;AACH","ignoreList":[]}

package/lib/module/api/lifecycle.js

@@ -0,0 +1,73 @@
+"use strict";
+
+/**
+ * Setup, and the two questions worth asking before it: is the SDK usable at all, and is
+ * a broker present.
+ */
+
+import NativeIntune from "../NativeIntune.js";
+import { toBrokerStatus } from "../internal/decode.js";
+import { FileProtectionLevel } from "../types.js";
+
+/**
+ * Configures the SDK for one customer tenant. Every other method rejects with
+ * `E_NOT_CONFIGURED` until this resolves.
+ *
+ * Two things it will refuse rather than paper over:
+ *
+ *   - a different `tenantId` than the active one — `E_RESET_REQUIRED`, because silently
+ *     reconfiguring would leave the old tenant enrolled, and the iOS runtime overrides
+ *     persist across restarts so the mismatch would survive a relaunch;
+ *   - an `Info.plist` that disagrees with it — `E_PLIST_CONFLICT`, see SPEC §5.1.2.
+ */
+export function configure(config) {
+  // Every optional becomes a concrete value here, so the native side never has to guess
+  // a default and the two platforms cannot drift apart on what the default was.
+  return NativeIntune.configure({
+    clientId: config.clientId,
+    tenantId: config.tenantId,
+    authority: config.authority,
+    redirectUri: config.redirectUri,
+    authMode: config.authMode ?? 'builtin',
+    verboseLogging: config.verboseLogging ?? false,
+    restartHandledByApp: config.restartHandledByApp ?? false,
+    maxFileProtectionLevel: config.maxFileProtectionLevel ?? FileProtectionLevel.Complete,
+    // Throws on integration bugs that would otherwise leave data unprotected, so it is
+    // on in development and must never ship enabled.
+    strictMode: config.strictMode ?? __DEV__,
+    keychainGroupOverride: config.keychainGroupOverride ?? '',
+    telemetryEnabled: config.telemetryEnabled ?? true,
+    // Flattened because Codegen takes no nested optionals. '' means "leave the SDK's
+    // own default alone", which is not the same as a colour.
+    brandingBackground: config.branding?.background ?? '',
+    brandingForeground: config.branding?.foreground ?? '',
+    brandingAccent: config.branding?.accent ?? '',
+    brandingSecondaryBackground: config.branding?.secondaryBackground ?? '',
+    brandingSecondaryForeground: config.branding?.secondaryForeground ?? ''
+  });
+}
+
+/**
+ * SDK linked and platform prerequisites met. Gate the whole Intune path on this so a
+ * misbuilt binary degrades instead of crashing.
+ */
+export function isSupported() {
+  return NativeIntune.isSupported();
+}
+
+/**
+ * Answerable before `configure`, on purpose — the app needs it to decide whether to
+ * prompt for a broker install.
+ *
+ * A false negative here usually means a missing manifest entry rather than a missing
+ * app: `LSApplicationQueriesSchemes` on iOS, `<queries>` on Android 11+.
+ */
+export async function getBrokerStatus() {
+  return toBrokerStatus(await NativeIntune.getBrokerStatus());
+}
+
+/** Rejects with `E_NOT_NEEDED` when a broker is already present. */
+export function openBrokerInstall() {
+  return NativeIntune.openBrokerInstall();
+}
+//# sourceMappingURL=lifecycle.js.map

package/lib/module/api/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NativeIntune","toBrokerStatus","FileProtectionLevel","configure","config","clientId","tenantId","authority","redirectUri","authMode","verboseLogging","restartHandledByApp","maxFileProtectionLevel","Complete","strictMode","__DEV__","keychainGroupOverride","telemetryEnabled","brandingBackground","branding","background","brandingForeground","foreground","brandingAccent","accent","brandingSecondaryBackground","secondaryBackground","brandingSecondaryForeground","secondaryForeground","isSupported","getBrokerStatus","openBrokerInstall"],"sourceRoot":"../../../src","sources":["api/lifecycle.ts"],"mappings":";;AAAA;AACA;AACA;AACA;;AAEA,OAAOA,YAAY,MAAM,oBAAiB;AAC1C,SAASC,cAAc,QAAQ,uBAAoB;AACnD,SACEC,mBAAmB,QAGd,aAAU;;AAEjB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,SAASA,CAACC,MAAoB,EAAiB;EAC7D;EACA;EACA,OAAOJ,YAAY,CAACG,SAAS,CAAC;IAC5BE,QAAQ,EAAED,MAAM,CAACC,QAAQ;IACzBC,QAAQ,EAAEF,MAAM,CAACE,QAAQ;IACzBC,SAAS,EAAEH,MAAM,CAACG,SAAS;IAC3BC,WAAW,EAAEJ,MAAM,CAACI,WAAW;IAC/BC,QAAQ,EAAEL,MAAM,CAACK,QAAQ,IAAI,SAAS;IACtCC,cAAc,EAAEN,MAAM,CAACM,cAAc,IAAI,KAAK;IAC9CC,mBAAmB,EAAEP,MAAM,CAACO,mBAAmB,IAAI,KAAK;IACxDC,sBAAsB,EACpBR,MAAM,CAACQ,sBAAsB,IAAIV,mBAAmB,CAACW,QAAQ;IAC/D;IACA;IACAC,UAAU,EAAEV,MAAM,CAACU,UAAU,IAAIC,OAAO;IACxCC,qBAAqB,EAAEZ,MAAM,CAACY,qBAAqB,IAAI,EAAE;IACzDC,gBAAgB,EAAEb,MAAM,CAACa,gBAAgB,IAAI,IAAI;IACjD;IACA;IACAC,kBAAkB,EAAEd,MAAM,CAACe,QAAQ,EAAEC,UAAU,IAAI,EAAE;IACrDC,kBAAkB,EAAEjB,MAAM,CAACe,QAAQ,EAAEG,UAAU,IAAI,EAAE;IACrDC,cAAc,EAAEnB,MAAM,CAACe,QAAQ,EAAEK,MAAM,IAAI,EAAE;IAC7CC,2BAA2B,EAAErB,MAAM,CAACe,QAAQ,EAAEO,mBAAmB,IAAI,EAAE;IACvEC,2BAA2B,EAAEvB,MAAM,CAACe,QAAQ,EAAES,mBAAmB,IAAI;EACvE,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASC,WAAWA,CAAA,EAAqB;EAC9C,OAAO7B,YAAY,CAAC6B,WAAW,CAAC,CAAC;AACnC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,eAAeA,CAAA,EAA0B;EAC7D,OAAO7B,cAAc,CAAC,MAAMD,YAAY,CAAC8B,eAAe,CAAC,CAAC,CAAC;AAC7D;;AAEA;AACA,OAAO,SAASC,iBAAiBA,CAAA,EAAkB;EACjD,OAAO/B,YAAY,CAAC+B,iBAAiB,CAAC,CAAC;AACzC","ignoreList":[]}

package/lib/module/api/policy.js

@@ -0,0 +1,23 @@
+"use strict";
+
+/**
+ * Reading policy, and reading the module's own state for a support bundle.
+ */
+
+import NativeIntune from "../NativeIntune.js";
+import { strRecord, toPolicySnapshot } from "../internal/decode.js";
+/**
+ * For adapting your own UI — hiding an export button, disabling a share sheet.
+ *
+ * **PIN prompts, screenshot blocking and encryption are enforced inside the SDK and
+ * never surface here.** Do not attempt to implement enforcement from these booleans.
+ */
+export async function getPolicy() {
+  return toPolicySnapshot(await NativeIntune.getPolicy());
+}
+
+/** Safe to attach to a support ticket: no tokens, no UPNs. */
+export async function getDiagnostics() {
+  return strRecord(await NativeIntune.getDiagnostics());
+}
+//# sourceMappingURL=policy.js.map

package/lib/module/api/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NativeIntune","strRecord","toPolicySnapshot","getPolicy","getDiagnostics"],"sourceRoot":"../../../src","sources":["api/policy.ts"],"mappings":";;AAAA;AACA;AACA;;AAEA,OAAOA,YAAY,MAAM,oBAAiB;AAC1C,SAASC,SAAS,EAAEC,gBAAgB,QAAQ,uBAAoB;AAGhE;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,SAASA,CAAA,EAA4B;EACzD,OAAOD,gBAAgB,CAAC,MAAMF,YAAY,CAACG,SAAS,CAAC,CAAC,CAAC;AACzD;;AAEA;AACA,OAAO,eAAeC,cAAcA,CAAA,EAAyB;EAC3D,OAAOH,SAAS,CAAC,MAAMD,YAAY,CAACI,cAAc,CAAC,CAAC,CAAC;AACvD","ignoreList":[]}

package/lib/module/api/tokenProvider.js

@@ -0,0 +1,80 @@
+"use strict";
+
+/**
+ * The MAM service token bridge (SPEC §13.4).
+ *
+ * The SDK asks for this token on a background thread, including on its own retry
+ * schedule when no JS call is in flight — which is why it is a registration rather than
+ * a callback parameter on `enroll`.
+ *
+ * The token never leaves the module: the provider's answer goes to native, native hands
+ * it to the SDK, and it is never logged or returned to JS (CLAUDE.md rule 9).
+ */
+
+import NativeIntune from "../NativeIntune.js";
+import { emitter } from "../internal/emitter.js";
+import { str } from "../internal/decode.js";
+let tokenProvider = null;
+
+/**
+ * Registers the provider for `authMode: 'external'`. Return `null` from it to say
+ * "cannot get a token right now" — the SDK treats that as needing authorization rather
+ * than as a hard failure.
+ */
+export function setTokenProvider(provider) {
+  tokenProvider = provider;
+}
+
+/**
+ * Subscribed at import time, not from `setTokenProvider`.
+ *
+ * If nothing answers, the SDK waits until the native timeout — 45s on iOS, and on
+ * Android that is a *held background thread*. Replying "no provider" immediately turns a
+ * stall into a fast, named failure.
+ */
+emitter.addListener('tokenRequest', raw => {
+  const r = raw;
+  const requestId = str(r.requestId);
+  const request = {
+    resourceId: str(r.resourceId),
+    tenantId: str(r.tenantId),
+    authority: str(r.authority),
+    accountId: str(r.accountId)
+  };
+  const active = tokenProvider;
+  if (active === null) {
+    NativeIntune.rejectToken({
+      requestId,
+      reason: "No token provider is registered. In authMode 'external' the app must call " + 'setTokenProvider() before enrolling.'
+    });
+    return;
+  }
+  const respond = async () => {
+    try {
+      const token = await active(request);
+      if (typeof token === 'string' && token.length > 0) {
+        NativeIntune.resolveToken({
+          requestId,
+          token
+        });
+      } else {
+        NativeIntune.rejectToken({
+          requestId,
+          reason: 'token provider returned no token'
+        });
+      }
+    } catch (e) {
+      // The message reaches getDiagnostics and support logs, so pass the message and not
+      // the error object — a nested response body can carry a token.
+      NativeIntune.rejectToken({
+        requestId,
+        reason: e instanceof Error ? e.message : 'token provider threw'
+      });
+    }
+  };
+
+  // Nothing upstream can observe this promise: the SDK is waiting on the native side,
+  // and every path above already answers it.
+  respond().catch(() => {});
+});
+//# sourceMappingURL=tokenProvider.js.map

package/lib/module/api/tokenProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NativeIntune","emitter","str","tokenProvider","setTokenProvider","provider","addListener","raw","r","requestId","request","resourceId","tenantId","authority","accountId","active","rejectToken","reason","respond","token","length","resolveToken","e","Error","message","catch"],"sourceRoot":"../../../src","sources":["api/tokenProvider.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAOA,YAAY,MAAM,oBAAiB;AAC1C,SAASC,OAAO,QAAQ,wBAAqB;AAC7C,SAASC,GAAG,QAAQ,uBAAoB;AAGxC,IAAIC,aAAmC,GAAG,IAAI;;AAE9C;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,gBAAgBA,CAACC,QAA8B,EAAQ;EACrEF,aAAa,GAAGE,QAAQ;AAC1B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACAJ,OAAO,CAACK,WAAW,CAAC,cAAc,EAAGC,GAAW,IAAK;EACnD,MAAMC,CAAC,GAAGD,GAA8B;EACxC,MAAME,SAAS,GAAGP,GAAG,CAACM,CAAC,CAACC,SAAS,CAAC;EAClC,MAAMC,OAAqB,GAAG;IAC5BC,UAAU,EAAET,GAAG,CAACM,CAAC,CAACG,UAAU,CAAC;IAC7BC,QAAQ,EAAEV,GAAG,CAACM,CAAC,CAACI,QAAQ,CAAC;IACzBC,SAAS,EAAEX,GAAG,CAACM,CAAC,CAACK,SAAS,CAAC;IAC3BC,SAAS,EAAEZ,GAAG,CAACM,CAAC,CAACM,SAAS;EAC5B,CAAC;EAED,MAAMC,MAAM,GAAGZ,aAAa;EAC5B,IAAIY,MAAM,KAAK,IAAI,EAAE;IACnBf,YAAY,CAACgB,WAAW,CAAC;MACvBP,SAAS;MACTQ,MAAM,EACJ,4EAA4E,GAC5E;IACJ,CAAC,CAAC;IACF;EACF;EAEA,MAAMC,OAAO,GAAG,MAAAA,CAAA,KAAY;IAC1B,IAAI;MACF,MAAMC,KAAK,GAAG,MAAMJ,MAAM,CAACL,OAAO,CAAC;MACnC,IAAI,OAAOS,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACC,MAAM,GAAG,CAAC,EAAE;QACjDpB,YAAY,CAACqB,YAAY,CAAC;UAAEZ,SAAS;UAAEU;QAAM,CAAC,CAAC;MACjD,CAAC,MAAM;QACLnB,YAAY,CAACgB,WAAW,CAAC;UACvBP,SAAS;UACTQ,MAAM,EAAE;QACV,CAAC,CAAC;MACJ;IACF,CAAC,CAAC,OAAOK,CAAC,EAAE;MACV;MACA;MACAtB,YAAY,CAACgB,WAAW,CAAC;QACvBP,SAAS;QACTQ,MAAM,EAAEK,CAAC,YAAYC,KAAK,GAAGD,CAAC,CAACE,OAAO,GAAG;MAC3C,CAAC,CAAC;IACJ;EACF,CAAC;;EAED;EACA;EACAN,OAAO,CAAC,CAAC,CAACO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC","ignoreList":[]}

package/lib/module/index.js

@@ -0,0 +1,82 @@
+"use strict";
+
+/**
+ * Public API for react-native-intune. See SPEC §13 for the reference — a method that
+ * exists here but not there does not exist, and the two change in the same commit.
+ *
+ * This file is deliberately only a surface. The work is one directory down:
+ *
+ * ```
+ * src/
+ *   NativeIntune.ts        Codegen spec — the only file Codegen reads, deliberately loose
+ *   types.ts               every public type and enum
+ *   api/
+ *     lifecycle.ts         configure, isSupported, broker presence
+ *     auth.ts              sign-in, tokens for your own API   (authMode 'builtin')
+ *     enrollment.ts        enroll, getState, reset
+ *     policy.ts            getPolicy, getDiagnostics
+ *     events.ts            subscriptions
+ *     tokenProvider.ts     the MAM service token bridge       (authMode 'external')
+ *   internal/
+ *     decode.ts            bridge Object -> typed, with deliberate fallbacks
+ *     errors.ts            IntuneError and the accountId guard
+ *     emitter.ts           the single NativeEventEmitter
+ * ```
+ *
+ * Both import styles work and neither is preferred:
+ *
+ * ```ts
+ * import Intune from 'react-native-intune';          Intune.configure(...)
+ * import { configure } from 'react-native-intune';   configure(...)
+ * ```
+ */
+
+export * from "./types.js";
+export { IntuneError } from "./internal/errors.js";
+import { configure, getBrokerStatus, isSupported, openBrokerInstall } from "./api/lifecycle.js";
+import { acquireToken, getAccounts, signIn, signInAndEnroll, signInSilent, signOut } from "./api/auth.js";
+import { enroll, enrollInteractive, getState, reset, setResetHandler } from "./api/enrollment.js";
+import { getDiagnostics, getPolicy } from "./api/policy.js";
+import { onBrokerStatusChanged, onEnrollmentResult, onPolicyChanged, onRestartRequired, onUnenrollmentResult, onWipeRequested } from "./api/events.js";
+import { setTokenProvider } from "./api/tokenProvider.js";
+export {
+// setup
+configure, isSupported, getBrokerStatus, openBrokerInstall,
+// auth — authMode 'builtin'
+signIn, signInSilent, signInAndEnroll, acquireToken, getAccounts, signOut,
+// enrollment and reset
+enroll, enrollInteractive, getState, reset, setResetHandler,
+// policy
+getPolicy, getDiagnostics,
+// token bridge — authMode 'external'
+setTokenProvider,
+// events
+onEnrollmentResult, onUnenrollmentResult, onPolicyChanged, onWipeRequested, onRestartRequired, onBrokerStatusChanged };
+const Intune = {
+  configure,
+  isSupported,
+  getBrokerStatus,
+  openBrokerInstall,
+  signIn,
+  signInSilent,
+  signInAndEnroll,
+  acquireToken,
+  getAccounts,
+  signOut,
+  enroll,
+  enrollInteractive,
+  getState,
+  reset,
+  setResetHandler,
+  getPolicy,
+  getDiagnostics,
+  setTokenProvider,
+  onEnrollmentResult,
+  onUnenrollmentResult,
+  onPolicyChanged,
+  onWipeRequested,
+  onRestartRequired,
+  onBrokerStatusChanged
+};
+export default Intune;
+//# sourceMappingURL=index.js.map

package/lib/module/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["IntuneError","configure","getBrokerStatus","isSupported","openBrokerInstall","acquireToken","getAccounts","signIn","signInAndEnroll","signInSilent","signOut","enroll","enrollInteractive","getState","reset","setResetHandler","getDiagnostics","getPolicy","onBrokerStatusChanged","onEnrollmentResult","onPolicyChanged","onRestartRequired","onUnenrollmentResult","onWipeRequested","setTokenProvider","Intune"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,cAAc,YAAS;AACvB,SAASA,WAAW,QAAQ,sBAAmB;AAE/C,SACEC,SAAS,EACTC,eAAe,EACfC,WAAW,EACXC,iBAAiB,QACZ,oBAAiB;AACxB,SACEC,YAAY,EACZC,WAAW,EACXC,MAAM,EACNC,eAAe,EACfC,YAAY,EACZC,OAAO,QACF,eAAY;AACnB,SACEC,MAAM,EACNC,iBAAiB,EACjBC,QAAQ,EACRC,KAAK,EACLC,eAAe,QACV,qBAAkB;AACzB,SAASC,cAAc,EAAEC,SAAS,QAAQ,iBAAc;AACxD,SACEC,qBAAqB,EACrBC,kBAAkB,EAClBC,eAAe,EACfC,iBAAiB,EACjBC,oBAAoB,EACpBC,eAAe,QACV,iBAAc;AACrB,SAASC,gBAAgB,QAAQ,wBAAqB;AAEtD;AACE;AACAvB,SAAS,EACTE,WAAW,EACXD,eAAe,EACfE,iBAAiB;AACjB;AACAG,MAAM,EACNE,YAAY,EACZD,eAAe,EACfH,YAAY,EACZC,WAAW,EACXI,OAAO;AACP;AACAC,MAAM,EACNC,iBAAiB,EACjBC,QAAQ,EACRC,KAAK,EACLC,eAAe;AACf;AACAE,SAAS,EACTD,cAAc;AACd;AACAQ,gBAAgB;AAChB;AACAL,kBAAkB,EAClBG,oBAAoB,EACpBF,eAAe,EACfG,eAAe,EACfF,iBAAiB,EACjBH,qBAAqB;AAGvB,MAAMO,MAAM,GAAG;EACbxB,SAAS;EACTE,WAAW;EACXD,eAAe;EACfE,iBAAiB;EACjBG,MAAM;EACNE,YAAY;EACZD,eAAe;EACfH,YAAY;EACZC,WAAW;EACXI,OAAO;EACPC,MAAM;EACNC,iBAAiB;EACjBC,QAAQ;EACRC,KAAK;EACLC,eAAe;EACfE,SAAS;EACTD,cAAc;EACdQ,gBAAgB;EAChBL,kBAAkB;EAClBG,oBAAoB;EACpBF,eAAe;EACfG,eAAe;EACfF,iBAAiB;EACjBH;AACF,CAAU;AAEV,eAAeO,MAAM","ignoreList":[]}

package/lib/module/internal/decode.js

@@ -0,0 +1,153 @@
+"use strict";
+
+/**
+ * Turning what the bridge hands us into the public types.
+ *
+ * Everything crossing the bridge is `Object` because Codegen accepts nothing richer, so
+ * this is where it becomes typed. Two rules hold throughout:
+ *
+ *   - **A value we do not recognise never throws.** An SDK update that adds a status
+ *     must not crash a shipped app, so unknown strings fall back rather than raise.
+ *   - **A missing field gets a deliberate default**, chosen per field. For policy that
+ *     means permissive, not `false`: reporting `false` would hide functionality nothing
+ *     is restricting.
+ */
+
+import { Platform } from 'react-native';
+import { EnrollmentStatus, ResetStage } from "../types.js";
+
+// ---------------------------------------------------------------- primitives
+
+export function str(value, fallback = '') {
+  return typeof value === 'string' ? value : fallback;
+}
+export function nullableStr(value) {
+  return typeof value === 'string' && value.length > 0 ? value : null;
+}
+
+/**
+ * Accepts `0` and `1` as well as real booleans.
+ *
+ * Not laziness — defence against a genuine bridge nuance. In C, `a || b` has type `int`,
+ * so `@(someBool || otherBool)` on the native side boxes an NSNumber holding an integer
+ * and arrives here as the number `1`, not `true`. A strict check turns that into the
+ * `fallback`, which is how `brokerAvailable` came back `false` on a device that had a
+ * broker installed — a wrong answer, silently, in a public API field.
+ *
+ * The native side was fixed, but this stays: a wrong boolean is worse than a tolerant
+ * decoder, and nothing distinguishes "native sent 1" from "native sent true" in a way a
+ * consumer should care about. Anything that is neither still takes the fallback.
+ */
+/**
+ * Narrows a restart reason, falling back to `unknown` rather than passing a raw string
+ * through. A reason a future SDK adds must not break a shipped app — the app still has a
+ * restart to perform either way.
+ */
+export function toRestartReason(value) {
+  return value === 'policyAppliedFirstTime' ? value : 'unknown';
+}
+export function bool(value, fallback = false) {
+  if (typeof value === 'boolean') {
+    return value;
+  }
+  if (value === 1 || value === 0) {
+    return value === 1;
+  }
+  return fallback;
+}
+export function strArray(value) {
+  return Array.isArray(value) ? value.filter(v => typeof v === 'string') : [];
+}
+export function strRecord(value) {
+  if (typeof value !== 'object' || value === null) return {};
+  const out = {};
+  for (const [k, v] of Object.entries(value)) {
+    out[k] = typeof v === 'string' ? v : String(v);
+  }
+  return out;
+}
+
+// ---------------------------------------------------------------- enums
+
+const ENROLLMENT_STATUSES = new Set(Object.values(EnrollmentStatus));
+export function toEnrollmentStatus(value) {
+  return typeof value === 'string' && ENROLLMENT_STATUSES.has(value) ? value : EnrollmentStatus.Unknown;
+}
+const RESET_STAGES = new Set(Object.values(ResetStage));
+const RESET_REASONS = new Set(['logout', 'tenant_changed', 'intune_disabled', 'remote_wipe', 'account_switch', 'support_reset', 'resume']);
+
+/** Null rather than a guess: an unrecognised reason is not worth acting on. */
+export function toResetReason(value) {
+  return typeof value === 'string' && RESET_REASONS.has(value) ? value : null;
+}
+export function toResetStage(value) {
+  return typeof value === 'string' && RESET_STAGES.has(value) ? value : null;
+}
+
+// ---------------------------------------------------------------- objects
+
+export function toEnrollmentResult(raw) {
+  const r = raw;
+  return {
+    status: toEnrollmentStatus(r.status),
+    accountId: nullableStr(r.accountId),
+    nativeCode: str(r.nativeCode),
+    nativeMessage: str(r.nativeMessage),
+    restartRequired: bool(r.restartRequired)
+  };
+}
+export function toIntuneState(raw) {
+  const r = raw;
+  return {
+    configured: bool(r.configured),
+    configuredTenantId: nullableStr(r.configuredTenantId),
+    registeredAccountIds: strArray(r.registeredAccountIds),
+    enrolledAccountId: nullableStr(r.enrolledAccountId),
+    status: r.status == null ? null : toEnrollmentStatus(r.status),
+    pendingReset: toResetStage(r.pendingReset),
+    pendingResetReason: toResetReason(r.pendingResetReason)
+  };
+}
+export function toPolicySnapshot(raw) {
+  const r = raw;
+  return {
+    isManaged: bool(r.isManaged),
+    // Permissive defaults: an unmanaged app restricts nothing.
+    canSaveToLocal: bool(r.canSaveToLocal, true),
+    canSaveToPersonal: bool(r.canSaveToPersonal, true),
+    canOpenFromUnmanaged: bool(r.canOpenFromUnmanaged, true),
+    screenshotAllowed: bool(r.screenshotAllowed, true),
+    raw: strRecord(r.raw)
+  };
+}
+export function toBrokerStatus(raw) {
+  const r = raw;
+  return {
+    brokerAvailable: bool(r.brokerAvailable),
+    companyPortalInstalled: bool(r.companyPortalInstalled),
+    authenticatorInstalled: bool(r.authenticatorInstalled),
+    // Android cannot enroll without a broker; iOS can.
+    required: bool(r.required, Platform.OS === 'android')
+  };
+}
+export function toAuthResult(raw) {
+  const r = raw;
+  return {
+    accountId: str(r.accountId),
+    tenantId: str(r.tenantId),
+    username: str(r.username),
+    accessToken: str(r.accessToken),
+    idToken: nullableStr(r.idToken),
+    expiresOn: typeof r.expiresOn === 'number' ? r.expiresOn : 0,
+    scopes: strArray(r.scopes)
+  };
+}
+export function toAuthAccount(raw) {
+  const r = raw;
+  return {
+    accountId: str(r.accountId),
+    tenantId: str(r.tenantId),
+    username: str(r.username)
+  };
+}
+//# sourceMappingURL=decode.js.map

package/lib/module/internal/decode.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Platform","EnrollmentStatus","ResetStage","str","value","fallback","nullableStr","length","toRestartReason","bool","strArray","Array","isArray","filter","v","strRecord","out","k","Object","entries","String","ENROLLMENT_STATUSES","Set","values","toEnrollmentStatus","has","Unknown","RESET_STAGES","RESET_REASONS","toResetReason","toResetStage","toEnrollmentResult","raw","r","status","accountId","nativeCode","nativeMessage","restartRequired","toIntuneState","configured","configuredTenantId","registeredAccountIds","enrolledAccountId","pendingReset","pendingResetReason","toPolicySnapshot","isManaged","canSaveToLocal","canSaveToPersonal","canOpenFromUnmanaged","screenshotAllowed","toBrokerStatus","brokerAvailable","companyPortalInstalled","authenticatorInstalled","required","OS","toAuthResult","tenantId","username","accessToken","idToken","expiresOn","scopes","toAuthAccount"],"sourceRoot":"../../../src","sources":["internal/decode.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,QAAQ,QAAQ,cAAc;AAEvC,SACEC,gBAAgB,EAChBC,UAAU,QASL,aAAU;;AAEjB;;AAEA,OAAO,SAASC,GAAGA,CAACC,KAAc,EAAEC,QAAQ,GAAG,EAAE,EAAU;EACzD,OAAO,OAAOD,KAAK,KAAK,QAAQ,GAAGA,KAAK,GAAGC,QAAQ;AACrD;AAEA,OAAO,SAASC,WAAWA,CAACF,KAAc,EAAiB;EACzD,OAAO,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACG,MAAM,GAAG,CAAC,GAAGH,KAAK,GAAG,IAAI;AACrE;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASI,eAAeA,CAACJ,KAAc,EAAiB;EAC7D,OAAOA,KAAK,KAAK,wBAAwB,GAAGA,KAAK,GAAG,SAAS;AAC/D;AAEA,OAAO,SAASK,IAAIA,CAACL,KAAc,EAAEC,QAAQ,GAAG,KAAK,EAAW;EAC9D,IAAI,OAAOD,KAAK,KAAK,SAAS,EAAE;IAC9B,OAAOA,KAAK;EACd;EACA,IAAIA,KAAK,KAAK,CAAC,IAAIA,KAAK,KAAK,CAAC,EAAE;IAC9B,OAAOA,KAAK,KAAK,CAAC;EACpB;EACA,OAAOC,QAAQ;AACjB;AAEA,OAAO,SAASK,QAAQA,CAACN,KAAc,EAAY;EACjD,OAAOO,KAAK,CAACC,OAAO,CAACR,KAAK,CAAC,GACvBA,KAAK,CAACS,MAAM,CAAEC,CAAC,IAAkB,OAAOA,CAAC,KAAK,QAAQ,CAAC,GACvD,EAAE;AACR;AAEA,OAAO,SAASC,SAASA,CAACX,KAAc,EAA0B;EAChE,IAAI,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,IAAI,EAAE,OAAO,CAAC,CAAC;EAC1D,MAAMY,GAA2B,GAAG,CAAC,CAAC;EACtC,KAAK,MAAM,CAACC,CAAC,EAAEH,CAAC,CAAC,IAAII,MAAM,CAACC,OAAO,CAACf,KAAgC,CAAC,EAAE;IACrEY,GAAG,CAACC,CAAC,CAAC,GAAG,OAAOH,CAAC,KAAK,QAAQ,GAAGA,CAAC,GAAGM,MAAM,CAACN,CAAC,CAAC;EAChD;EACA,OAAOE,GAAG;AACZ;;AAEA;;AAEA,MAAMK,mBAAmB,GAAG,IAAIC,GAAG,CAASJ,MAAM,CAACK,MAAM,CAACtB,gBAAgB,CAAC,CAAC;AAE5E,OAAO,SAASuB,kBAAkBA,CAACpB,KAAc,EAAoB;EACnE,OAAO,OAAOA,KAAK,KAAK,QAAQ,IAAIiB,mBAAmB,CAACI,GAAG,CAACrB,KAAK,CAAC,GAC7DA,KAAK,GACNH,gBAAgB,CAACyB,OAAO;AAC9B;AAEA,MAAMC,YAAY,GAAG,IAAIL,GAAG,CAASJ,MAAM,CAACK,MAAM,CAACrB,UAAU,CAAC,CAAC;AAE/D,MAAM0B,aAAa,GAAG,IAAIN,GAAG,CAAS,CACpC,QAAQ,EACR,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,QAAQ,CACT,CAAC;;AAEF;AACA,OAAO,SAASO,aAAaA,CAACzB,KAAc,EAAsB;EAChE,OAAO,OAAOA,KAAK,KAAK,QAAQ,IAAIwB,aAAa,CAACH,GAAG,CAACrB,KAAK,CAAC,GACvDA,KAAK,GACN,IAAI;AACV;AAEA,OAAO,SAAS0B,YAAYA,CAAC1B,KAAc,EAAqB;EAC9D,OAAO,OAAOA,KAAK,KAAK,QAAQ,IAAIuB,YAAY,CAACF,GAAG,CAACrB,KAAK,CAAC,GACtDA,KAAK,GACN,IAAI;AACV;;AAEA;;AAEA,OAAO,SAAS2B,kBAAkBA,CAACC,GAAW,EAAoB;EAChE,MAAMC,CAAC,GAAGD,GAA8B;EACxC,OAAO;IACLE,MAAM,EAAEV,kBAAkB,CAACS,CAAC,CAACC,MAAM,CAAC;IACpCC,SAAS,EAAE7B,WAAW,CAAC2B,CAAC,CAACE,SAAS,CAAC;IACnCC,UAAU,EAAEjC,GAAG,CAAC8B,CAAC,CAACG,UAAU,CAAC;IAC7BC,aAAa,EAAElC,GAAG,CAAC8B,CAAC,CAACI,aAAa,CAAC;IACnCC,eAAe,EAAE7B,IAAI,CAACwB,CAAC,CAACK,eAAe;EACzC,CAAC;AACH;AAEA,OAAO,SAASC,aAAaA,CAACP,GAAW,EAAe;EACtD,MAAMC,CAAC,GAAGD,GAA8B;EACxC,OAAO;IACLQ,UAAU,EAAE/B,IAAI,CAACwB,CAAC,CAACO,UAAU,CAAC;IAC9BC,kBAAkB,EAAEnC,WAAW,CAAC2B,CAAC,CAACQ,kBAAkB,CAAC;IACrDC,oBAAoB,EAAEhC,QAAQ,CAACuB,CAAC,CAACS,oBAAoB,CAAC;IACtDC,iBAAiB,EAAErC,WAAW,CAAC2B,CAAC,CAACU,iBAAiB,CAAC;IACnDT,MAAM,EAAED,CAAC,CAACC,MAAM,IAAI,IAAI,GAAG,IAAI,GAAGV,kBAAkB,CAACS,CAAC,CAACC,MAAM,CAAC;IAC9DU,YAAY,EAAEd,YAAY,CAACG,CAAC,CAACW,YAAY,CAAC;IAC1CC,kBAAkB,EAAEhB,aAAa,CAACI,CAAC,CAACY,kBAAkB;EACxD,CAAC;AACH;AAEA,OAAO,SAASC,gBAAgBA,CAACd,GAAW,EAAkB;EAC5D,MAAMC,CAAC,GAAGD,GAA8B;EACxC,OAAO;IACLe,SAAS,EAAEtC,IAAI,CAACwB,CAAC,CAACc,SAAS,CAAC;IAC5B;IACAC,cAAc,EAAEvC,IAAI,CAACwB,CAAC,CAACe,cAAc,EAAE,IAAI,CAAC;IAC5CC,iBAAiB,EAAExC,IAAI,CAACwB,CAAC,CAACgB,iBAAiB,EAAE,IAAI,CAAC;IAClDC,oBAAoB,EAAEzC,IAAI,CAACwB,CAAC,CAACiB,oBAAoB,EAAE,IAAI,CAAC;IACxDC,iBAAiB,EAAE1C,IAAI,CAACwB,CAAC,CAACkB,iBAAiB,EAAE,IAAI,CAAC;IAClDnB,GAAG,EAAEjB,SAAS,CAACkB,CAAC,CAACD,GAAG;EACtB,CAAC;AACH;AAEA,OAAO,SAASoB,cAAcA,CAACpB,GAAW,EAAgB;EACxD,MAAMC,CAAC,GAAGD,GAA8B;EACxC,OAAO;IACLqB,eAAe,EAAE5C,IAAI,CAACwB,CAAC,CAACoB,eAAe,CAAC;IACxCC,sBAAsB,EAAE7C,IAAI,CAACwB,CAAC,CAACqB,sBAAsB,CAAC;IACtDC,sBAAsB,EAAE9C,IAAI,CAACwB,CAAC,CAACsB,sBAAsB,CAAC;IACtD;IACAC,QAAQ,EAAE/C,IAAI,CAACwB,CAAC,CAACuB,QAAQ,EAAExD,QAAQ,CAACyD,EAAE,KAAK,SAAS;EACtD,CAAC;AACH;AAEA,OAAO,SAASC,YAAYA,CAAC1B,GAAW,EAAc;EACpD,MAAMC,CAAC,GAAGD,GAA8B;EACxC,OAAO;IACLG,SAAS,EAAEhC,GAAG,CAAC8B,CAAC,CAACE,SAAS,CAAC;IAC3BwB,QAAQ,EAAExD,GAAG,CAAC8B,CAAC,CAAC0B,QAAQ,CAAC;IACzBC,QAAQ,EAAEzD,GAAG,CAAC8B,CAAC,CAAC2B,QAAQ,CAAC;IACzBC,WAAW,EAAE1D,GAAG,CAAC8B,CAAC,CAAC4B,WAAW,CAAC;IAC/BC,OAAO,EAAExD,WAAW,CAAC2B,CAAC,CAAC6B,OAAO,CAAC;IAC/BC,SAAS,EAAE,OAAO9B,CAAC,CAAC8B,SAAS,KAAK,QAAQ,GAAG9B,CAAC,CAAC8B,SAAS,GAAG,CAAC;IAC5DC,MAAM,EAAEtD,QAAQ,CAACuB,CAAC,CAAC+B,MAAM;EAC3B,CAAC;AACH;AAEA,OAAO,SAASC,aAAaA,CAACjC,GAAW,EAAe;EACtD,MAAMC,CAAC,GAAGD,GAA8B;EACxC,OAAO;IACLG,SAAS,EAAEhC,GAAG,CAAC8B,CAAC,CAACE,SAAS,CAAC;IAC3BwB,QAAQ,EAAExD,GAAG,CAAC8B,CAAC,CAAC0B,QAAQ,CAAC;IACzBC,QAAQ,EAAEzD,GAAG,CAAC8B,CAAC,CAAC2B,QAAQ;EAC1B,CAAC;AACH","ignoreList":[]}

package/lib/module/internal/emitter.js

@@ -0,0 +1,15 @@
+"use strict";
+
+/**
+ * The one emitter instance, constructed at import time.
+ *
+ * Import time and not on first use, deliberately: a service-initiated wipe can arrive
+ * before the app has called anything at all, and native queues events until JS
+ * subscribes. An emitter created lazily would miss the very events that matter most
+ * (SPEC §4.4).
+ */
+
+import { NativeEventEmitter } from 'react-native';
+import NativeIntune from "../NativeIntune.js";
+export const emitter = new NativeEventEmitter(NativeIntune);
+//# sourceMappingURL=emitter.js.map

package/lib/module/internal/emitter.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NativeEventEmitter","NativeIntune","emitter"],"sourceRoot":"../../../src","sources":["internal/emitter.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,kBAAkB,QAAQ,cAAc;AAEjD,OAAOC,YAAY,MAAM,oBAAiB;AAE1C,OAAO,MAAMC,OAAO,GAAG,IAAIF,kBAAkB,CAACC,YAAY,CAAC","ignoreList":[]}