react-native-intune 0.1.0-alpha.1

package/lib/typescript/src/internal/decode.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Turning what the bridge hands us into the public types.
+ *
+ * Everything crossing the bridge is `Object` because Codegen accepts nothing richer, so
+ * this is where it becomes typed. Two rules hold throughout:
+ *
+ *   - **A value we do not recognise never throws.** An SDK update that adds a status
+ *     must not crash a shipped app, so unknown strings fall back rather than raise.
+ *   - **A missing field gets a deliberate default**, chosen per field. For policy that
+ *     means permissive, not `false`: reporting `false` would hide functionality nothing
+ *     is restricting.
+ */
+import { EnrollmentStatus, ResetStage, type AuthAccount, type AuthResult, type BrokerStatus, type EnrollmentResult, type IntuneState, type PolicySnapshot, type ResetReason, type RestartReason } from '../types.js';
+export declare function str(value: unknown, fallback?: string): string;
+export declare function nullableStr(value: unknown): string | null;
+/**
+ * Accepts `0` and `1` as well as real booleans.
+ *
+ * Not laziness — defence against a genuine bridge nuance. In C, `a || b` has type `int`,
+ * so `@(someBool || otherBool)` on the native side boxes an NSNumber holding an integer
+ * and arrives here as the number `1`, not `true`. A strict check turns that into the
+ * `fallback`, which is how `brokerAvailable` came back `false` on a device that had a
+ * broker installed — a wrong answer, silently, in a public API field.
+ *
+ * The native side was fixed, but this stays: a wrong boolean is worse than a tolerant
+ * decoder, and nothing distinguishes "native sent 1" from "native sent true" in a way a
+ * consumer should care about. Anything that is neither still takes the fallback.
+ */
+/**
+ * Narrows a restart reason, falling back to `unknown` rather than passing a raw string
+ * through. A reason a future SDK adds must not break a shipped app — the app still has a
+ * restart to perform either way.
+ */
+export declare function toRestartReason(value: unknown): RestartReason;
+export declare function bool(value: unknown, fallback?: boolean): boolean;
+export declare function strArray(value: unknown): string[];
+export declare function strRecord(value: unknown): Record<string, string>;
+export declare function toEnrollmentStatus(value: unknown): EnrollmentStatus;
+/** Null rather than a guess: an unrecognised reason is not worth acting on. */
+export declare function toResetReason(value: unknown): ResetReason | null;
+export declare function toResetStage(value: unknown): ResetStage | null;
+export declare function toEnrollmentResult(raw: object): EnrollmentResult;
+export declare function toIntuneState(raw: object): IntuneState;
+export declare function toPolicySnapshot(raw: object): PolicySnapshot;
+export declare function toBrokerStatus(raw: object): BrokerStatus;
+export declare function toAuthResult(raw: object): AuthResult;
+export declare function toAuthAccount(raw: object): AuthAccount;
+//# sourceMappingURL=decode.d.ts.map

package/lib/typescript/src/internal/decode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode.d.ts","sourceRoot":"","sources":["../../../../src/internal/decode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,aAAU,CAAC;AAIlB,wBAAgB,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,SAAK,GAAG,MAAM,CAEzD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAEzD;AAED;;;;;;;;;;;;GAYG;AACH;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAE7D;AAED,wBAAgB,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,UAAQ,GAAG,OAAO,CAQ9D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAIjD;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOhE;AAMD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAInE;AAcD,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAIhE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI,CAI9D;AAID,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAShE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAWtD;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAW5D;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CASxD;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAWpD;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAOtD"}

package/lib/typescript/src/internal/emitter.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The one emitter instance, constructed at import time.
+ *
+ * Import time and not on first use, deliberately: a service-initiated wipe can arrive
+ * before the app has called anything at all, and native queues events until JS
+ * subscribes. An emitter created lazily would miss the very events that matter most
+ * (SPEC §4.4).
+ */
+import { NativeEventEmitter } from 'react-native';
+export declare const emitter: NativeEventEmitter<Readonly<Record<string, readonly Object[]>>>;
+//# sourceMappingURL=emitter.d.ts.map

package/lib/typescript/src/internal/emitter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emitter.d.ts","sourceRoot":"","sources":["../../../../src/internal/emitter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAIlD,eAAO,MAAM,OAAO,iEAAuC,CAAC"}

package/lib/typescript/src/internal/errors.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Rejections. Every one carries a stable code from SPEC §13.6 — never a raw platform
+ * error, because a code is something a consumer can branch on and a platform message is
+ * not.
+ */
+import type { IntuneErrorCode } from '../types.js';
+export declare class IntuneError extends Error {
+    readonly code: IntuneErrorCode;
+    readonly nativeCode?: string;
+    readonly nativeMessage?: string;
+    constructor(code: IntuneErrorCode, message: string, native?: {
+        nativeCode?: string;
+        nativeMessage?: string;
+    });
+}
+/**
+ * The UPN-based SDK APIs are deprecated, so the module identifies accounts by object ID
+ * only (SPEC §13.2). Catching a UPN here gives a named error at the call site instead of
+ * an opaque SDK failure minutes later, in a tenant you cannot reach.
+ */
+export declare function assertAccountId(accountId: string): void;
+//# sourceMappingURL=errors.d.ts.map

package/lib/typescript/src/internal/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../src/internal/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAU,CAAC;AAEhD,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;gBAG9B,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE;CAQ3D;AAKD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAQvD"}

package/lib/typescript/src/types.d.ts

@@ -0,0 +1,317 @@
+/**
+ * Public types and enums. Hand-written, unlike `NativeIntune.ts` which Codegen reads.
+ *
+ * The split exists because Codegen accepts only `boolean | number | string | Object |
+ * Array | Promise | void` and no literal unions, so the bridge spec has to stay loose.
+ * Everything strict lives here and in `index.ts`. Nothing in the public API is `any`.
+ *
+ * This file is the semver contract described in SPEC §13. Adding to it is a minor;
+ * changing or removing anything is a major. `PolicySnapshot.raw` is explicitly excluded.
+ */
+/**
+ * Normalized enrollment outcome. The two platforms report different enums — iOS 28
+ * codes, Android 10 — and both are mapped onto this set natively. See SPEC §4.1 for the
+ * full table; `EnrollmentResult.nativeCode` always carries the raw platform constant.
+ *
+ * The blocking distinction in SPEC §8 is load-bearing and easy to get backwards:
+ * `NotLicensed` and `NotTargeted` must NOT block the user, `Failed` must.
+ */
+export declare enum EnrollmentStatus {
+    Succeeded = "succeeded",
+    /** Tenant is MAM-enabled but the user has no Intune licence. Must NOT block. */
+    NotLicensed = "notLicensed",
+    /** Licensed, but no App Protection Policy targets the user. Must NOT block. */
+    NotTargeted = "notTargeted",
+    /** Licensed and targeted, but enrollment failed. This one DOES block. */
+    Failed = "failed",
+    /** Android reports this itself; on iOS it is our own state while the delegate is pending. */
+    Pending = "pending",
+    AuthorizationNeeded = "authorizationNeeded",
+    /** Android only. iOS uses Authenticator as a broker and has no equivalent code. */
+    CompanyPortalRequired = "companyPortalRequired",
+    WrongUser = "wrongUser",
+    Unenrolled = "unenrolled",
+    UnenrollmentFailed = "unenrollmentFailed",
+    /**
+     * Any native value the mapping does not cover. Unknown values map here rather than
+     * throwing, so an SDK update that adds a status cannot crash a shipped app.
+     */
+    Unknown = "unknown"
+}
+/** Journal stage of an unfinished reset. See SPEC §7. */
+export declare enum ResetStage {
+    Unregistering = "unregistering",
+    CleaningAuth = "cleaningAuth",
+    CleaningLocal = "cleaningLocal"
+}
+/**
+ * iOS `MaxFileProtectionLevel`. The default makes protected files unreadable roughly ten
+ * seconds after the device locks, which breaks local databases; an app with lock-screen
+ * UI wants `CompleteUntilFirstUserAuthentication`. See SPEC §5.2.
+ */
+export declare enum FileProtectionLevel {
+    Complete = "complete",
+    CompleteUnlessOpen = "completeUnlessOpen",
+    CompleteUntilFirstUserAuthentication = "completeUntilFirstUserAuthentication",
+    None = "none"
+}
+/** Why a reset was started. Recorded in the journal and surfaced in `getDiagnostics`. */
+export type ResetReason = 'logout' | 'tenant_changed' | 'intune_disabled' | 'remote_wipe' | 'account_switch' | 'support_reset' | 'resume';
+/**
+ * Who owns MSAL. `builtin` is the module (SPEC §3.1) and the default. `external` is for
+ * apps that already have their own MSAL and supply MAM tokens via `setTokenProvider`;
+ * it is a supported mode, not a documentation fallback.
+ */
+export type AuthMode = 'builtin' | 'external';
+export type IntuneConfig = {
+    /** Entra application (client) ID, GUID. */
+    clientId: string;
+    /** Entra directory (tenant) ID, GUID. */
+    tenantId: string;
+    /** e.g. `https://login.microsoftonline.com/<tenantId>` */
+    authority: string;
+    /** Must match the platform format — see the README. */
+    redirectUri: string;
+    /** Default `'builtin'`. */
+    authMode?: AuthMode;
+    /** Default `false`. */
+    verboseLogging?: boolean;
+    /** iOS only. Default `false`. See SPEC §5.2 and open question O-C. */
+    restartHandledByApp?: boolean;
+    /** iOS only. Default `Complete`, which is the SDK's own default. */
+    maxFileProtectionLevel?: FileProtectionLevel;
+    /** Android only. Default `__DEV__`. Throws on integration bugs, so never ship it on. */
+    strictMode?: boolean;
+    /**
+     * iOS only. MSAL's keychain access group. Leave unset unless the app already uses a
+     * custom one: the module sets `ADALCacheKeychainGroupOverride` from this same value in
+     * the same code path, so the two can never disagree (SPEC §5.1.2).
+     */
+    keychainGroupOverride?: string;
+    /** Default `true`, matching the SDK. Set `false` to opt out of Microsoft telemetry. */
+    telemetryEnabled?: boolean;
+    /**
+     * Colours for the screens the SDK draws itself — the PIN prompt, the blur overlay, the
+     * policy and diagnostics screens. Anything left unset keeps Microsoft's default.
+     *
+     * These are the SDK's own UI, not yours: it renders them over your app and you cannot
+     * restyle them any other way (SPEC §15 P4).
+     */
+    branding?: Branding;
+};
+/** Hex strings, e.g. `#1B5E20`. */
+export type Branding = {
+    background?: string;
+    foreground?: string;
+    accent?: string;
+    secondaryBackground?: string;
+    secondaryForeground?: string;
+};
+export type SignInPrompt = 'selectAccount' | 'login' | 'consent' | 'whenRequired';
+export type SignInParams = {
+    /** Scopes for your own API. The MAM service scopes are added internally. */
+    scopes?: string[];
+    /** Pre-fill the account, e.g. from an email field. */
+    loginHint?: string;
+    prompt?: SignInPrompt;
+};
+export type AcquireTokenParams = {
+    scopes: string[];
+    accountId?: string;
+};
+export type AuthResult = {
+    /** Entra object ID. This is what `enroll` takes — never the UPN. */
+    accountId: string;
+    tenantId: string;
+    /** UPN. Display only; never log or persist it (SPEC §16, CLAUDE.md rule 3). */
+    username: string;
+    /** For the scopes you asked for. Never the MAM service token. */
+    accessToken: string;
+    idToken: string | null;
+    /** Unix seconds. */
+    expiresOn: number;
+    scopes: string[];
+};
+export type AuthAccount = {
+    accountId: string;
+    tenantId: string;
+    username: string;
+};
+export type EnrollParams = {
+    /** Entra object ID. Never a UPN — that is what `upn` below is for. */
+    accountId: string;
+    /**
+     * **Android, `authMode: 'external'` only.** `registerAccountForMAM` takes the UPN as
+     * well as the object ID and will not accept null for it, and in `external` mode the
+     * module has no MSAL cache to resolve one from.
+     *
+     * Leave it unset in `builtin` mode — the module reads it from its own MSAL account.
+     * iOS never needs it: `registerAndEnrollAccountId:` takes the object ID alone and the
+     * SDK resolves the UPN itself. See SPEC §6.3.
+     */
+    upn?: string;
+};
+export type EnrollInteractiveParams = {
+    /**
+     * The account's UPN. Leave unset to let the SDK ask for it — it shows its own sign-in
+     * screen either way.
+     */
+    upn?: string;
+};
+export type SignOutParams = {
+    accountId: string;
+    /** Also runs the full reset sequence. On Android the process may terminate. */
+    wipeIntune: boolean;
+};
+export type BrokerStatus = {
+    /** Any usable broker is present. */
+    brokerAvailable: boolean;
+    companyPortalInstalled: boolean;
+    /** iOS only; always `false` on Android. */
+    authenticatorInstalled: boolean;
+    /** `true` on Android — enrollment is impossible without a broker. */
+    required: boolean;
+};
+export type EnrollmentResult = {
+    status: EnrollmentStatus;
+    accountId: string | null;
+    /** Raw platform constant *name*, e.g. `LicensedNotTargeted`. For support bundles. */
+    nativeCode: string;
+    /** SDK debug string. Safe to log — contains no token. */
+    nativeMessage: string;
+    restartRequired: boolean;
+};
+/**
+ * The reconciliation primitive, and the intended way to drive this module. Read it at
+ * launch, compare against what your backend says the state should be, act on the
+ * difference. Do not drive enrollment from lifecycle hooks: the process can die
+ * mid-operation and only a state comparison recovers from that. See SPEC §13.2.
+ */
+export type IntuneState = {
+    configured: boolean;
+    configuredTenantId: string | null;
+    registeredAccountIds: string[];
+    enrolledAccountId: string | null;
+    /** `null` means no account is registered. */
+    status: EnrollmentStatus | null;
+    /** Non-null means a reset is unfinished and must be resumed (SPEC §7). */
+    pendingReset: ResetStage | null;
+    /**
+     * Why that unfinished reset started, from the journal.
+     *
+     * Pass it back as `reset({ reason })` when resuming, so the reset handler sees what
+     * actually happened rather than `'resume'`. It is the difference between telling a user
+     * their administrator revoked access and telling them nothing — and on the path that
+     * matters most, a service-initiated wipe, the process dies before the handler ever runs
+     * in the original call, so the resume is the only place it can be said.
+     */
+    pendingResetReason: ResetReason | null;
+};
+export type ResetParams = {
+    wipe: boolean;
+    reason: ResetReason;
+};
+/**
+ * Only what an app needs to adapt its own UI — hiding an export button, disabling a
+ * share sheet. **PIN prompts, screenshot blocking and encryption are enforced inside the
+ * SDK and never surface here.** Do not try to implement enforcement from these booleans.
+ *
+ * Deliberately short: every field is a support obligation.
+ *
+ * There is no clipboard field, and there cannot be one. Neither platform exposes a
+ * clipboard policy getter — the restriction is enforced inside the SDK and is not
+ * queryable — so `canSaveToPersonal` and `canOpenFromUnmanaged` serve the same
+ * "adapt your UI" purpose using values both platforms can actually answer (SPEC §4.3).
+ *
+ * When no policy applies, every field is permissive rather than `false`: reporting
+ * `false` would hide functionality that nothing is restricting.
+ */
+export type PolicySnapshot = {
+    isManaged: boolean;
+    /** Save into the app's own storage. */
+    canSaveToLocal: boolean;
+    /**
+     * Save out to a personal, unmanaged destination. Gate an export or "save a copy"
+     * control on this.
+     */
+    canSaveToPersonal: boolean;
+    /** Bring data in from an unmanaged location. Gate an import control on this. */
+    canOpenFromUnmanaged: boolean;
+    screenshotAllowed: boolean;
+    /**
+     * Everything else the SDK reports. **Excluded from semver** — unstable, debug only.
+     * Anything you come to depend on must be promoted to a typed field first.
+     */
+    raw: Record<string, string>;
+};
+/** Opaque key/value for support bundles. Contains no tokens and no UPNs. */
+export type Diagnostics = Record<string, string>;
+/** Payload of a native-initiated MAM service token request. See SPEC §13.4. */
+export type TokenRequest = {
+    resourceId: string;
+    tenantId: string;
+    authority: string;
+    accountId: string;
+};
+/**
+ * Return the access token, or `null` to signal "cannot get a token right now". Runs on a
+ * background thread's behalf, and the SDK may ask with no JS call in flight.
+ */
+export type TokenProvider = (request: TokenRequest) => Promise<string | null> | string | null;
+export type ResetHandlerContext = {
+    reason: ResetReason;
+    accountId: string | null;
+};
+/** Clear the app's own local data. If it throws, the journal stays open and retries. */
+export type ResetHandler = (context: ResetHandlerContext) => Promise<void> | void;
+export type WipeRequest = {
+    accountId: string | null;
+};
+/**
+ * Why the SDK wants the app restarted.
+ *
+ * One value today, because that is the only case the SDK reports: policy arrived for the
+ * first time. Typed as a union rather than `string` so a consumer can switch on it, with
+ * `unknown` for a value a future SDK adds — an unrecognised reason must not break a
+ * shipped app, and a restart is still a restart.
+ */
+export type RestartReason = 'policyAppliedFirstTime' | 'unknown';
+export type RestartRequest = {
+    reason: RestartReason;
+};
+/** Event names and their payloads, used to type the emitter in `index.ts`. */
+export type IntuneEvents = {
+    enrollmentResult: EnrollmentResult;
+    policyChanged: PolicySnapshot;
+    unenrollmentResult: EnrollmentResult;
+    wipeRequested: WipeRequest;
+    restartRequired: RestartRequest;
+    tokenRequest: TokenRequest & {
+        requestId: string;
+    };
+    brokerStatusChanged: BrokerStatus;
+};
+/**
+ * Stable rejection codes. A non-success enrollment *status* is data and resolves; these
+ * mean the caller did something wrong or the environment is broken. See SPEC §13.6.
+ *
+ * `E_NATIVE` appearing in logs is a signal to extend the native mapping table, not an
+ * acceptable steady state.
+ */
+export type IntuneErrorCode = 'E_NOT_CONFIGURED' | 'E_RESET_REQUIRED' | 'E_SDK_UNAVAILABLE' | 'E_BROKER_MISSING' | 'E_INVALID_ACCOUNT_ID' | 'E_TOKEN_PROVIDER_FAILED' | 'E_TOKEN_PROVIDER_MISSING' | 'E_EXTERNAL_AUTH_MODE' | 'E_INTERACTION_REQUIRED' | 'E_NO_ACTIVITY' | 'E_USER_CANCELLED' | 'E_RESET_IN_PROGRESS' | 'E_ALREADY_ENROLLED' | 'E_NOT_NEEDED'
+/**
+ * `configure()` disagrees with the host app's Info.plist. iOS only. Raised for a
+ * hardcoded `ADAL*` identity key next to a runtime override (the known cause of
+ * enrollment failing with `AuthRequired`), or for a `keychainGroupOverride` /
+ * `maxFileProtectionLevel` that the plist does not match — neither of those two has a
+ * runtime setter, so the module can only refuse to let them disagree.
+ */
+ | 'E_PLIST_CONFLICT'
+/**
+ * Android only. `MAMEnrollmentManager.registerAccountForMAM` requires the account's
+ * UPN as well as its object ID, and nothing can supply it until the module's own MSAL
+ * sign-in lands (SPEC §3, spike S-3). iOS is unaffected —
+ * `registerAndEnrollAccountId:` takes the object ID alone.
+ */
+ | 'E_UPN_REQUIRED' | 'E_NATIVE';
+//# sourceMappingURL=types.d.ts.map

package/lib/typescript/src/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH;;;;;;;GAOG;AACH,oBAAY,gBAAgB;IAC1B,SAAS,cAAc;IACvB,gFAAgF;IAChF,WAAW,gBAAgB;IAC3B,+EAA+E;IAC/E,WAAW,gBAAgB;IAC3B,yEAAyE;IACzE,MAAM,WAAW;IACjB,6FAA6F;IAC7F,OAAO,YAAY;IACnB,mBAAmB,wBAAwB;IAC3C,mFAAmF;IACnF,qBAAqB,0BAA0B;IAC/C,SAAS,cAAc;IACvB,UAAU,eAAe;IACzB,kBAAkB,uBAAuB;IACzC;;;OAGG;IACH,OAAO,YAAY;CACpB;AAED,yDAAyD;AACzD,oBAAY,UAAU;IACpB,aAAa,kBAAkB;IAC/B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;CAChC;AAED;;;;GAIG;AACH,oBAAY,mBAAmB;IAC7B,QAAQ,aAAa;IACrB,kBAAkB,uBAAuB;IACzC,oCAAoC,yCAAyC;IAC7E,IAAI,SAAS;CACd;AAED,yFAAyF;AACzF,MAAM,MAAM,WAAW,GACnB,QAAQ,GACR,gBAAgB,GAChB,iBAAiB,GACjB,aAAa,GACb,gBAAgB,GAChB,eAAe,GACf,QAAQ,CAAC;AAEb;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAI9C,MAAM,MAAM,YAAY,GAAG;IACzB,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,uBAAuB;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,sEAAsE;IACtE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,oEAAoE;IACpE,sBAAsB,CAAC,EAAE,mBAAmB,CAAC;IAC7C,wFAAwF;IACxF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,uFAAuF;IACvF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB,CAAC;AAEF,mCAAmC;AACnC,MAAM,MAAM,QAAQ,GAAG;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAIF,MAAM,MAAM,YAAY,GACtB,eAAe,GAAG,OAAO,GAAG,SAAS,GAAG,cAAc,CAAC;AAEzD,MAAM,MAAM,YAAY,GAAG;IACzB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC;AAIF,MAAM,MAAM,YAAY,GAAG;IACzB,oCAAoC;IACpC,eAAe,EAAE,OAAO,CAAC;IACzB,sBAAsB,EAAE,OAAO,CAAC;IAChC,2CAA2C;IAC3C,sBAAsB,EAAE,OAAO,CAAC;IAChC,qEAAqE;IACrE,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qFAAqF;IACrF,UAAU,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,6CAA6C;IAC7C,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAChC,0EAA0E;IAC1E,YAAY,EAAE,UAAU,GAAG,IAAI,CAAC;IAChC;;;;;;;;OAQG;IACH,kBAAkB,EAAE,WAAW,GAAG,IAAI,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;CACrB,CAAC;AAIF;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,uCAAuC;IACvC,cAAc,EAAE,OAAO,CAAC;IACxB;;;OAGG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gFAAgF;IAChF,oBAAoB,EAAE,OAAO,CAAC;IAC9B,iBAAiB,EAAE,OAAO,CAAC;IAC3B;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B,CAAC;AAEF,4EAA4E;AAC5E,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAIjD,+EAA+E;AAC/E,MAAM,MAAM,YAAY,GAAG;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,CAC1B,OAAO,EAAE,YAAY,KAClB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;AAE5C,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,wFAAwF;AACxF,MAAM,MAAM,YAAY,GAAG,CACzB,OAAO,EAAE,mBAAmB,KACzB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAE1B,MAAM,MAAM,WAAW,GAAG;IAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,wBAAwB,GAAG,SAAS,CAAC;AAEjE,MAAM,MAAM,cAAc,GAAG;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAEvD,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GAAG;IACzB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,aAAa,EAAE,cAAc,CAAC;IAC9B,kBAAkB,EAAE,gBAAgB,CAAC;IACrC,aAAa,EAAE,WAAW,CAAC;IAC3B,eAAe,EAAE,cAAc,CAAC;IAChC,YAAY,EAAE,YAAY,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,mBAAmB,EAAE,YAAY,CAAC;CACnC,CAAC;AAIF;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GACvB,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,GAClB,sBAAsB,GACtB,yBAAyB,GACzB,0BAA0B,GAC1B,sBAAsB,GACtB,wBAAwB,GACxB,eAAe,GACf,kBAAkB,GAClB,qBAAqB,GACrB,oBAAoB,GACpB,cAAc;AAChB;;;;;;GAMG;GACD,kBAAkB;AACpB;;;;;GAKG;GACD,gBAAgB,GAChB,UAAU,CAAC"}

package/package.json

@@ -0,0 +1,204 @@
+{
+  "name": "react-native-intune",
+  "version": "0.1.0-alpha.1",
+  "description": "Microsoft Intune app protection policies (MAM) for React Native",
+  "main": "./lib/module/index.js",
+  "types": "./lib/typescript/src/index.d.ts",
+  "exports": {
+    ".": {
+      "react-native-intune-source": "./src/index.ts",
+      "types": "./lib/typescript/src/index.d.ts",
+      "default": "./lib/module/index.js"
+    },
+    "./app.plugin.js": "./app.plugin.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "src",
+    "lib",
+    "android",
+    "ios",
+    "*.podspec",
+    "app.plugin.js",
+    "plugin",
+    "scripts",
+    "sdk-versions.json",
+    "sdk-lock.json",
+    "!vendor",
+    "!ios/build",
+    "!ios/generated",
+    "!android/build",
+    "!android/generated",
+    "!android/gradle",
+    "!android/gradlew",
+    "!android/gradlew.bat",
+    "!android/local.properties",
+    "!**/__tests__",
+    "!**/__fixtures__",
+    "!**/__mocks__",
+    "!**/.*",
+    "LICENSE",
+    "NOTICE",
+    "!website"
+  ],
+  "scripts": {
+    "fetch-sdks": "node scripts/fetch-sdks.mjs",
+    "postinstall": "node scripts/fetch-sdks.mjs --soft --quiet",
+    "example": "yarn workspace react-native-intune-example",
+    "clean": "del-cli android/build example/android/build example/android/app/build example/ios/build lib",
+    "prepare": "bob build",
+    "typecheck": "yarn workspace react-native-intune-example ensure-tenant && tsc",
+    "test": "jest",
+    "release": "release-it --only-version",
+    "lint": "eslint \"**/*.{js,ts,tsx}\""
+  },
+  "keywords": [
+    "react-native",
+    "ios",
+    "android"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/bayazetyan/react-native-intune.git"
+  },
+  "author": "Artashes Bayazetyan <bayazetyan@gmail.com> (https://github.com/bayazetyan/react-native-intune)",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/bayazetyan/react-native-intune/issues"
+  },
+  "homepage": "https://github.com/bayazetyan/react-native-intune#readme",
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/"
+  },
+  "devDependencies": {
+    "@commitlint/config-conventional": "^21.0.2",
+    "@eslint/compat": "^2.1.0",
+    "@eslint/eslintrc": "^3.3.5",
+    "@eslint/js": "^10.0.1",
+    "@jest/globals": "^29.7.0",
+    "@react-native/babel-preset": "0.85.0",
+    "@react-native/eslint-config": "0.85.0",
+    "@react-native/jest-preset": "0.85.0",
+    "@release-it/conventional-changelog": "^11.0.1",
+    "@types/react": "^19.2.0",
+    "commitlint": "^21.0.2",
+    "del-cli": "^7.0.0",
+    "eslint": "^9.39.4",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-ft-flow": "^3.0.11",
+    "eslint-plugin-prettier": "^5.5.6",
+    "jest": "^29.7.0",
+    "lefthook": "^2.1.9",
+    "prettier": "^3.8.3",
+    "react": "19.2.3",
+    "react-native": "0.85.0",
+    "react-native-builder-bob": "^0.43.0",
+    "release-it": "^20.2.0",
+    "turbo": "^2.9.16",
+    "typescript": "^6.0.3"
+  },
+  "peerDependencies": {
+    "@expo/config-plugins": ">=7",
+    "react": "*",
+    "react-native": "*"
+  },
+  "workspaces": [
+    "example",
+    "website"
+  ],
+  "packageManager": "yarn@4.11.0",
+  "react-native-builder-bob": {
+    "source": "src",
+    "output": "lib",
+    "targets": [
+      [
+        "module",
+        {
+          "esm": true
+        }
+      ],
+      [
+        "typescript",
+        {
+          "project": "tsconfig.build.json"
+        }
+      ]
+    ]
+  },
+  "codegenConfig": {
+    "name": "RNIntuneSpec",
+    "type": "modules",
+    "jsSrcsDir": "src",
+    "android": {
+      "javaPackageName": "com.reactnativeintune"
+    }
+  },
+  "jest": {
+    "preset": "@react-native/jest-preset",
+    "testEnvironmentOptions": {
+      "customExportConditions": [
+        "require",
+        "react-native",
+        "<%- project.sourceCondition -%>"
+      ]
+    },
+    "modulePathIgnorePatterns": [
+      "<rootDir>/example/node_modules",
+      "<rootDir>/lib/"
+    ]
+  },
+  "commitlint": {
+    "extends": [
+      "@commitlint/config-conventional"
+    ]
+  },
+  "release-it": {
+    "git": {
+      "commitMessage": "chore: release ${version}",
+      "tagName": "v${version}"
+    },
+    "npm": {
+      "publish": false
+    },
+    "github": {
+      "release": true
+    },
+    "plugins": {
+      "@release-it/conventional-changelog": {
+        "preset": {
+          "name": "angular"
+        }
+      }
+    },
+    "_comment": "npm.publish is false on purpose: release-it prepares the release — version, changelog, commit, tag, GitHub release — and .github/workflows/publish.yml does the publishing when the tag lands. A release should not be able to come from a laptop with whatever happened to be in its working tree."
+  },
+  "prettier": {
+    "quoteProps": "consistent",
+    "singleQuote": true,
+    "tabWidth": 2,
+    "trailingComma": "es5",
+    "useTabs": false
+  },
+  "create-react-native-library": {
+    "type": "turbo-module",
+    "languages": "kotlin-objc",
+    "tools": [
+      "jest",
+      "lefthook",
+      "release-it",
+      "eslint"
+    ],
+    "version": "0.63.0"
+  },
+  "bin": {
+    "react-native-intune": "scripts/cli.mjs"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "peerDependenciesMeta": {
+    "@expo/config-plugins": {
+      "optional": true
+    }
+  }
+}