aa9466aa92
Privacy/stigma layer on top of the authenticated Supabase session — re-auth on open so nobody but the user can open Rebreak. Not a login replacement. - expo-local-authentication; NSFaceIDUsageDescription in app.config - stores/appLock.ts: persisted `enabled` pref, in-memory `locked`, device- capability check (`available`), device-passcode fallback on biometric failure - AppLockGate wraps the root layout: locks immediately on `background` (not `inactive` → app-switcher peek doesn't lock), renders LockScreen while `enabled && locked && session` - LockScreen: dark brand screen, auto-prompts on mount + on return from background, "Abmelden" escape hatch (clears session → fresh login next launch) - Settings: new "Sicherheit" section, native UISwitch; enabling requires a successful biometric prompt first; row disabled + explained when device has no biometrics/passcode - de/en strings Per product call: the lock gates the whole app incl. SOS (SOS already requires an authenticated user, so there's no unauthenticated path to carve out). Cold-start: appLock init blocks the splash → `locked` is set before first paint, no flash of unlocked content. ios/ is gitignored so EAS prebuilds the new module. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
144 lines
4.7 KiB
TypeScript
144 lines
4.7 KiB
TypeScript
import { ExpoConfig, ConfigContext } from "expo/config";
|
|
|
|
export default ({ config }: ConfigContext): ExpoConfig => ({
|
|
...config,
|
|
name: "ReBreak",
|
|
slug: "rebreak",
|
|
version: "0.1.0",
|
|
orientation: "portrait",
|
|
icon: "./assets/icon.png",
|
|
scheme: "rebreak",
|
|
userInterfaceStyle: "automatic",
|
|
newArchEnabled: true,
|
|
|
|
splash: {
|
|
image: "./assets/splash.png",
|
|
resizeMode: "contain",
|
|
backgroundColor: "#0f172a",
|
|
},
|
|
|
|
ios: {
|
|
supportsTablet: true,
|
|
bundleIdentifier: "org.rebreak.app",
|
|
buildNumber: "3",
|
|
config: {
|
|
usesNonExemptEncryption: false,
|
|
},
|
|
infoPlist: {
|
|
ITSAppUsesNonExemptEncryption: false,
|
|
NSMicrophoneUsageDescription:
|
|
"Rebreak nutzt das Mikrofon für Sprachnachrichten an Lyra.",
|
|
NSPhotoLibraryUsageDescription:
|
|
"Rebreak greift auf Fotos zu, damit du sie in deinen Posts teilen kannst.",
|
|
NSPhotoLibraryAddUsageDescription:
|
|
"Rebreak speichert Bilder in deine Foto-Mediathek.",
|
|
NSFaceIDUsageDescription:
|
|
"Rebreak nutzt Face ID, um die App zu entsperren — damit niemand außer dir sie öffnen kann.",
|
|
},
|
|
},
|
|
|
|
android: {
|
|
package: "org.rebreak.app",
|
|
versionCode: 3,
|
|
adaptiveIcon: {
|
|
// Foreground muss in der ~66%-Safe-Zone bleiben (Launcher-Mask clippt den
|
|
// Außenring) → adaptive-foreground.png ist das Logo auf transparentem
|
|
// 1024er-Canvas mit ~19% Padding. Hintergrund weiss → matcht den
|
|
// Play-Console-Look (dunkles Logo auf Weiss), statt dunkel-auf-dunkel.
|
|
foregroundImage: "./assets/adaptive-foreground.png",
|
|
backgroundColor: "#ffffff",
|
|
},
|
|
permissions: [
|
|
"INTERNET",
|
|
"ACCESS_NETWORK_STATE",
|
|
"BIND_VPN_SERVICE",
|
|
"FOREGROUND_SERVICE",
|
|
"POST_NOTIFICATIONS",
|
|
"BIND_ACCESSIBILITY_SERVICE",
|
|
"RECORD_AUDIO",
|
|
],
|
|
},
|
|
|
|
plugins: [
|
|
"expo-router",
|
|
"expo-localization",
|
|
"expo-font",
|
|
"expo-web-browser",
|
|
[
|
|
"expo-build-properties",
|
|
{
|
|
ios: {
|
|
deploymentTarget: "15.1",
|
|
useFrameworks: "static",
|
|
},
|
|
android: {
|
|
minSdkVersion: 26,
|
|
compileSdkVersion: 36,
|
|
targetSdkVersion: 36,
|
|
},
|
|
},
|
|
],
|
|
// Xcode 16 + RN 0.79 fmt consteval workaround
|
|
"./plugins/with-fmt-consteval-fix",
|
|
// Xcode 14+ resource-bundle-signing fix (needed because useFrameworks: static)
|
|
"./plugins/with-resource-bundle-signing-fix",
|
|
// Phase 5: NEFilter Extension + Family Controls Entitlements (iOS)
|
|
"./plugins/with-rebreak-protection-ios",
|
|
// Phase 5: VpnService + AccessibilityService (Android)
|
|
"./plugins/with-rebreak-protection-android",
|
|
// Rive-Asset (lyra-avatar.riv) als Android raw-resource bundlen
|
|
"./plugins/with-rive-asset-android",
|
|
],
|
|
|
|
experiments: {
|
|
typedRoutes: true,
|
|
},
|
|
|
|
extra: {
|
|
eas: {
|
|
projectId: "a4f2186e-8ca5-4d38-921d-82ae96c9c086",
|
|
// EAS muss VOR dem Build wissen, dass es eine App-Extension gibt — sonst
|
|
// generiert es nur Credentials für die Haupt-App und der Xcode-Build kippt
|
|
// mit "No profiles for 'org.rebreak.app.RebreakURLFilter' were found".
|
|
// Bundle-ID + Entitlements müssen exakt zu plugins/with-rebreak-protection-ios.js
|
|
// und modules/rebreak-protection/ios/RebreakURLFilter/RebreakURLFilter.entitlements passen.
|
|
build: {
|
|
experimental: {
|
|
ios: {
|
|
appExtensions: [
|
|
{
|
|
targetName: "RebreakURLFilter",
|
|
bundleIdentifier: "org.rebreak.app.RebreakURLFilter",
|
|
entitlements: {
|
|
"com.apple.developer.networking.networkextension": [
|
|
"content-filter-provider",
|
|
],
|
|
"com.apple.security.application-groups": [
|
|
"group.org.rebreak.app",
|
|
],
|
|
},
|
|
},
|
|
],
|
|
},
|
|
},
|
|
},
|
|
},
|
|
apiUrl:
|
|
process.env.EXPO_PUBLIC_API_URL ||
|
|
process.env.API_URL ||
|
|
"https://staging.rebreak.org",
|
|
// TEMP: Staging Anon-Key + URL hardcoded für lokales Dev-Testing.
|
|
// Anon-Key ist designed für Client-Ship (RLS protectiert DB). Trotzdem:
|
|
// BFF-Migration kommt in Phase 5 — dann fliegen diese 2 Zeilen wieder raus.
|
|
supabaseUrl:
|
|
process.env.EXPO_PUBLIC_SUPABASE_URL ||
|
|
process.env.SUPABASE_URL ||
|
|
"https://db-staging.rebreak.org",
|
|
supabaseAnonKey:
|
|
process.env.EXPO_PUBLIC_SUPABASE_ANON_KEY ||
|
|
process.env.SUPABASE_KEY ||
|
|
process.env.SUPABASE_ANON_KEY ||
|
|
"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsImF1ZCI6ImF1dGhlbnRpY2F0ZWQiLCJyb2xlIjoiYW5vbiIsImV4cCI6MjA5MTAxODk1NSwiaWF0IjoxNzc1NjU4OTU1fQ.93d2r3pft2E-alf1JezqueD0l0n1dim7dGvhBN0l1Cs",
|
|
},
|
|
});
|