self/app/ios/Podfile

source "https://cdn.cocoapods.org/"

use_frameworks!
require "tmpdir"

# Resolve react_native_pods.rb with node to allow for hoisting
require Pod::Executable.execute_command("node", ["-p",
                                                 'require.resolve(
    "react-native/scripts/react_native_pods.rb",
    {paths: [process.argv[1]]},
  )', __dir__]).strip

require File.join(File.dirname(`node --print "require.resolve('expo/package.json', {paths: ['#{__dir__}/..']})"`.strip), "scripts/autolinking")

project "Self.xcodeproj"

# Define consistent iOS deployment target
IOS_DEPLOYMENT_TARGET = "15.4"

platform :ios, IOS_DEPLOYMENT_TARGET if !ENV["ACT"]
prepare_react_native_project!

flipper_enabled = ENV["NO_FLIPPER"] != "1"
flipper_config = { "Flipper" => flipper_enabled ? "~> 0.125.0" : nil }

def ios_simulator_arm64_supported?(xcframework_path)
  return false unless Dir.exist?(xcframework_path)

  Dir.children(xcframework_path).any? do |slice_name|
    slice_name.include?("simulator") && slice_name.include?("arm64")
  end
end

def simulator_arm64_audit_entries
  [
    {
      name: "FingerprintPro",
      path: "Pods/FingerprintPro/FingerprintPro.xcframework",
    },
    {
      name: "OpenSSL",
      path: "Pods/OpenSSL-Universal/Frameworks/OpenSSL.xcframework",
    },
    {
      name: "libtesseract",
      path: "Pods/SwiftyTesseract/SwiftyTesseract/libtesseract.xcframework",
    },
    {
      name: "Hermes",
      path: "Pods/hermes-engine/destroot/Library/Frameworks/universal/hermes.xcframework",
    },
  ]
end

def simulator_arm64_blockers
  simulator_arm64_audit_entries.filter_map do |entry|
    full_path = File.join(Dir.pwd, entry[:path])
    next if ios_simulator_arm64_supported?(full_path)

    "#{entry[:name]} (#{entry[:path]})"
  end
end

# Build RNFirebase pods as static frameworks so vendored Firebase XCFrameworks
# (e.g. GoogleAppMeasurement, FirebaseAnalytics) link correctly with use_frameworks!
$RNFirebaseAsStaticFramework = true

linkage = ENV["USE_FRAMEWORKS"]
if linkage != nil
  Pod::UI.puts "Configuring Pod with #{linkage}ally linked Frameworks".green
  use_frameworks! :linkage => linkage.to_sym
end

def using_https_git_auth?
  begin
    # backticks run command in shell and capture stdout, 2>&1 captures stderr as well
    auth_data = `gh auth status 2>&1`
    auth_data.include?("Logged in to github.com account") &&
      auth_data.include?("Git operations protocol: https")
  rescue => e
    # Avoid printing auth-related details in CI logs.
    false
  end
end

target "Self" do
  use_expo_modules!
  # Native module exclusion for E2E testing is handled in react-native.config.cjs
  config = use_native_modules!
  # Skip SelfNFCPassportReader for e2e testing to avoid build issues
  unless ENV["E2E_TESTING"] == "1"
    # Check if we're running in a selfxyz repo or an external fork
    is_selfxyz_repo = ENV["GITHUB_REPOSITORY"]&.start_with?("selfxyz/") || ENV["GITHUB_REPOSITORY"].nil?

    if !is_selfxyz_repo
      # External fork - use public SelfNFCPassportReader repository (placeholder)
      # TODO: Replace with actual public SelfNFCPassportReader repository URL
      nfc_repo_url = "https://github.com/PLACEHOLDER/NFCPassportReader.git"
    elsif ENV["GITHUB_ACTIONS"] == "true"
      # CI: NEVER embed credentials in URLs. Rely on workflow-provided auth via:
      # - ~/.netrc or a Git credential helper, and token masking in logs.
      nfc_repo_url = "https://github.com/selfxyz/NFCPassportReader.git"
    elsif using_https_git_auth?
      # Local development with HTTPS GitHub auth via gh - use HTTPS to private repo
      nfc_repo_url = "https://github.com/selfxyz/NFCPassportReader.git"
    else
      # Local development in selfxyz repo - use SSH to private repo
      nfc_repo_url = "git@github.com:selfxyz/NFCPassportReader.git"
    end

    pod "SelfNFCPassportReader", git: nfc_repo_url, commit: "2cdc50a5c27b75594b94b27fdc4bb6172ada0f96"
  end

  # Explicitly declare Mixpanel to ensure it's available even in E2E builds
  # (SelfNFCPassportReader also includes Mixpanel, but is skipped during E2E testing)
  pod "Mixpanel-swift", "~> 5.0.0", :modular_headers => true

  pod "QKMRZScanner"
  pod "lottie-ios"
  pod 'DiditSDK', :podspec => './local-pods/DiditSDK/DiditSDK.podspec'
  pod 'OpenSSL-Universal', '~> 1.1.1900'
  pod "SwiftQRScanner", :git => "https://github.com/vinodiOS/SwiftQRScanner"
  # RNReactNativeHapticFeedback is handled by autolinking

  use_react_native!(
    :path => config[:reactNativePath],
    :hermes_enabled => true,
    # An absolute path to your application root.
    :app_path => "#{Pod::Config.instance.installation_root}/..",
    # Flipper設定は削除
  )

  # Firebase pods removed - handled automatically by RNFirebase autolinking
  # This resolves GoogleUtilities 7.x vs 8.x version conflicts

  if flipper_enabled
    pod "RCT-Folly", :podspec => "#{config[:reactNativePath]}/third-party-podspecs/RCT-Folly.podspec"
  end

  post_install do |installer|
    simulator_arm64_blocking_pods = simulator_arm64_blockers
    use_rosetta_simulator_builds = simulator_arm64_blocking_pods.any?

    if use_rosetta_simulator_builds
      Pod::UI.puts "Using Rosetta iOS simulator builds; arm64 simulator slices missing for: #{simulator_arm64_blocking_pods.join(', ')}".yellow
    else
      Pod::UI.puts "All audited binary pods include arm64 simulator slices; enabling native arm64 iOS simulator builds.".green
    end

    installer.generated_projects.each do |project|
      project.targets.each do |target|
        if target.name == "RNZipArchive"
          target.source_build_phase.files.each do |file|
            if file.settings && file.settings["COMPILER_FLAGS"]
              file.settings["COMPILER_FLAGS"] = ""
            end
          end
        end

        target.build_configurations.each do |config|
          config.build_settings["IPHONEOS_DEPLOYMENT_TARGET"] = IOS_DEPLOYMENT_TARGET
          config.build_settings["GCC_PREPROCESSOR_DEFINITIONS"] ||= ["$(inherited)", "_LIBCPP_ENABLE_CXX17_REMOVED_UNARY_BINARY_FUNCTION"]
        end
      end
    end

    bitcode_strip_path = `xcrun --find bitcode_strip`.chop!

    def strip_bitcode_from_framework(bitcode_strip_path, framework_relative_path)
      framework_path = File.join(Dir.pwd, framework_relative_path)
      command = "#{bitcode_strip_path} #{framework_path} -r -o #{framework_path}"
      puts "Stripping bitcode: #{command}"
      system(command)
    end

    # Only strip OpenSSL bitcode if SelfNFCPassportReader is included (not in e2e testing)
    unless ENV["E2E_TESTING"] == "1"
      framework_paths = [
        "Pods/OpenSSL-Universal/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/OpenSSL",
        "Pods/OpenSSL-Universal/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/OpenSSL",
        "Pods/OpenSSL-Universal/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL",
        "Pods/OpenSSL-Universal/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/OpenSSL",
      ]

      framework_paths.each do |framework_relative_path|
        strip_bitcode_from_framework(bitcode_strip_path, framework_relative_path)
      end
    end

    # https://github.com/facebook/react-native/blob/main/packages/react-native/scripts/react_native_pods.rb#L197-L202
    react_native_post_install(
      installer,
      config[:reactNativePath],
      :mac_catalyst_enabled => false,
      # :ccache_enabled => true
    )

    installer.pods_project.targets.each do |target|
      if target.name == "RNReactNativeHapticFeedback"
        target.build_configurations.each do |config|
          config.build_settings["OTHER_LDFLAGS"] ||= ["$(inherited)"]
          config.build_settings["OTHER_LDFLAGS"] << "-framework AudioToolbox"
        end
      end

      # Fix for React Native Sentry warnings
      if target.name == "RNSentry"
        target.build_configurations.each do |config|
          config.build_settings["CLANG_WARN_NULLABLE_TO_NONNULL_CONVERSION"] = "NO"
          config.build_settings["CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF"] = "NO"
          config.build_settings["GCC_WARN_ABOUT_DEPRECATED_FUNCTIONS"] = "NO"
        end
      end

    end

    # update QKCutoutView.swift to hide OCR border
    qkCutoutView = "Pods/QKMRZScanner/QKMRZScanner/QKCutoutView.swift"
    if File.exist?(qkCutoutView)
      # Ensure the file is writable
      system("chmod u+w #{qkCutoutView}")

      text = File.read(qkCutoutView)
      # Only modify if the line exists and is not already commented
      if text.include?("addBorderAroundCutout()") && !text.include?("// addBorderAroundCutout()")
        new_text = text.gsub(/^(\s*)(addBorderAroundCutout\s*\(\s*\))/, '\1// \2')
        File.write(qkCutoutView, new_text)
      end
    end

    # Disable code signing for Pod targets to avoid conflicts with main app signing
    installer.pods_project.targets.each do |target|
      target.build_configurations.each do |config|
        config.build_settings["CODE_SIGNING_ALLOWED"] = "NO"

        # Keep the current simulator flow stable until every audited binary pod ships arm64 simulator slices.
        config.build_settings["EXCLUDED_ARCHS[sdk=iphonesimulator*]"] = use_rosetta_simulator_builds ? "arm64" : ""
      end
    end

    # Fix fmt consteval error on Xcode 26 — clang enables FMT_USE_CONSTEVAL but
    # has a bug evaluating consteval calls. Patch the detection block in base.h to
    # always resolve to 0. Safe on all Xcode versions (fmt falls back to constexpr).
    fmt_base_h = "Pods/fmt/include/fmt/base.h"
    if File.exist?(fmt_base_h)
      system("chmod u+w #{fmt_base_h}")
      text = File.read(fmt_base_h)
      unless text.include?("// Patched: force-disable FMT_USE_CONSTEVAL")
        patched = text.gsub(
          /^#  define FMT_USE_CONSTEVAL 1.*$/,
          "#  define FMT_USE_CONSTEVAL 0  // Patched: force-disable FMT_USE_CONSTEVAL"
        )
        File.write(fmt_base_h, patched) if patched != text
      end
    end

    # Add E2E_TESTING compilation condition for main app target when environment variable is set
    if ENV["E2E_TESTING"] == "1"
      # Find Self.xcodeproj and add E2E_TESTING compilation condition
      self_project_path = File.join(installer.sandbox.project_path, "../Self.xcodeproj")
      if File.exist?(self_project_path)
        project = Xcodeproj::Project.open(self_project_path)
        project.targets.each do |target|
          if target.name == "Self"
            target.build_configurations.each do |config|
              existing_conditions = config.build_settings["SWIFT_ACTIVE_COMPILATION_CONDITIONS"] || ""
              unless existing_conditions.to_s.include?("E2E_TESTING")
                config.build_settings["SWIFT_ACTIVE_COMPILATION_CONDITIONS"] = (existing_conditions.to_s + " E2E_TESTING").strip
              end
            end
          end
        end
        project.save
      end
    end
  end
end