<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>keychain-access-groups</key>
	<array>
		<string>ABDCDE124.com.groupName.shared</string>
	</array>
</dict>
</plist>

import Flutter
import UIKit

@main
@objc class AppDelegate: FlutterAppDelegate, FlutterImplicitEngineDelegate {
  override func application(
    _ application: UIApplication,
    didFinishLaunchingWithOptions launchOptions: [UIApplication.LaunchOptionsKey: Any]?
  ) -> Bool {
    return super.application(application, didFinishLaunchingWithOptions: launchOptions)
  }

  func didInitializeImplicitFlutterEngine(_ engineBridge: FlutterImplicitEngineBridge) {
    GeneratedPluginRegistrant.register(with: engineBridge.pluginRegistry)

    let channel = FlutterMethodChannel(name: "tech.codex.shared_auth/token",
                                       binaryMessenger: engineBridge.applicationRegistrar.messenger())
    channel.setMethodCallHandler({
      [weak self] (call: FlutterMethodCall, result: @escaping FlutterResult) -> Void in
      if (call.method == "getSharedKeychainGroupId") {
        let teamID = self?.getTeamID() ?? "ABDSDa125"
        result("\(teamID).com.codex.shared")
      } else {
        result(FlutterMethodNotImplemented)
      }
    })
  }

  private func getTeamID() -> String? {
    let query: [String: Any] = [
      kSecClass as String: kSecClassGenericPassword,
      kSecAttrAccount as String: "bundleSeedID",
      kSecAttrService as String: "bundleSeedID",
      kSecReturnAttributes as String: true
    ]
    
    var result: AnyObject?
    var status = SecItemCopyMatching(query as CFDictionary, &result)
    
    if status == errSecItemNotFound {
      status = SecItemAdd(query as CFDictionary, nil)
      if status == errSecSuccess {
        status = SecItemCopyMatching(query as CFDictionary, &result)
      }
    }
    
    if status == errSecSuccess, let dict = result as? [String: Any], let accessGroup = dict[kSecAttrAccessGroup as String] as? String {
      let components = accessGroup.components(separatedBy: ".")
      if !components.isEmpty {
        return components[0]
      }
    }
    return nil
  }
}

import 'dart:io';
import 'package:flutter/services.dart';
import 'package:shared_preferences/shared_preferences.dart';
import 'package:flutter_secure_storage/flutter_secure_storage.dart';

class CacheHelper {
  static const String _keyOnboardingCompleted = 'onboarding_completed';
  static const String _keyFirstLaunch = 'is_first_launch';
  static const String _refreshTokenKey = 'refresh_token';
  static const String _accessTokenKey = 'access_token';
  static const String _darkModeKey = 'is_dark_mode';

  static FlutterSecureStorage? _secureStorageInstance;
  static const _channel = MethodChannel('tech.codex.shared_auth/token');

  static Future<FlutterSecureStorage> _getSecureStorage() async {
    if (_secureStorageInstance != null) return _secureStorageInstance!;

    String groupId = 'ABDCDE124.com.groupName.shared';
    try {
      if (Platform.isIOS) {
        final String? resolvedGroupId = await _channel.invokeMethod<String>('getSharedKeychainGroupId');
        if (resolvedGroupId != null && resolvedGroupId.isNotEmpty) {
          groupId = resolvedGroupId;
          print('CacheHelper: Resolved iOS Shared Keychain Group ID: $groupId');
        }
      }
    } catch (e) {
      print('CacheHelper: Error resolving shared keychain group: $e');
    }

    _secureStorageInstance = FlutterSecureStorage(
      iOptions: IOSOptions(
        groupId: groupId,
      ),
    );
    return _secureStorageInstance!;
  }

  // Save access token to both shared preferences and shared secure keychain
  static Future<void> saveAccessToken(String token) async {
    final prefs = await SharedPreferences.getInstance();
    await prefs.setString(_accessTokenKey, token);
    try {
      final secureStorage = await _getSecureStorage();
      print('CacheHelper: Writing access_token to shared Keychain...');
      await secureStorage.write(key: _accessTokenKey, value: token);
      print('CacheHelper: Successfully wrote access_token to shared Keychain: "$token"');
    } catch (e) {
      print('CacheHelper: Failed to write access_token to shared Keychain. Error: $e');
    }
  }

  // Get access token (prioritizing shared secure keychain, fallback to shared preferences)
  static Future<String?> getAccessToken() async {
    try {
      final secureStorage = await _getSecureStorage();
      print('CacheHelper: Reading access_token from shared Keychain...');
      final token = await secureStorage.read(key: _accessTokenKey);
      print('CacheHelper: Read access_token from shared Keychain: "$token"');
      if (token != null && token.isNotEmpty) return token;
    } catch (e) {
      print('CacheHelper: Failed to read access_token from shared Keychain. Error: $e');
    }
    print('CacheHelper: Secure keychain access_token is empty/failed, falling back to SharedPreferences...');
    final prefs = await SharedPreferences.getInstance();
    final token = prefs.getString(_accessTokenKey);
    print('CacheHelper: Read access_token from SharedPreferences: "$token"');
    return token;
  }
}

import 'dart:io';
import 'package:flutter/services.dart';
import 'package:flutter_secure_storage/flutter_secure_storage.dart';

class SecureStorageHelper {
  static const String _accessTokenKey = 'access_token';
  static const String _refreshTokenKey = 'refresh_token';

  static FlutterSecureStorage? _secureStorageInstance;
  static const _channel = MethodChannel('tech.codex.shared_auth/token');

  static Future<FlutterSecureStorage> _getSecureStorage() async {
    if (_secureStorageInstance != null) return _secureStorageInstance!;

    String groupId = 'ABDCDE124.com.groupName.shared';
    try {
      if (Platform.isIOS) {
        final String? resolvedGroupId = await _channel.invokeMethod<String>('getSharedKeychainGroupId');
        if (resolvedGroupId != null && resolvedGroupId.isNotEmpty) {
          groupId = resolvedGroupId;
          print('SecureStorageHelper: Resolved iOS Shared Keychain Group ID: $groupId');
        }
      }
    } catch (e) {
      print('SecureStorageHelper: Error resolving shared keychain group: $e');
    }

    _secureStorageInstance = FlutterSecureStorage(
      iOptions: IOSOptions(
        groupId: groupId,
      ),
    );
    return _secureStorageInstance!;
  }

  // Save access token
  static Future<void> saveAccessToken(String token) async {
    try {
      final secureStorage = await _getSecureStorage();
      print('SecureStorageHelper: Writing access_token to shared Keychain...');
      await secureStorage.write(key: _accessTokenKey, value: token);
      print('SecureStorageHelper: Successfully wrote access_token: "$token"');
    } catch (e) {
      print('SecureStorageHelper: Failed to write access_token. Error: $e');
    }
  }

  // Get access token
  static Future<String?> getAccessToken() async {
    try {
      final secureStorage = await _getSecureStorage();
      print('SecureStorageHelper: Reading access_token from shared Keychain...');
      final token = await secureStorage.read(key: _accessTokenKey);
      print('SecureStorageHelper: Read access_token from shared Keychain: "$token"');
      return token;
    } catch (e) {
      print('SecureStorageHelper: Failed to read access_token from shared Keychain. Error: $e');
      return null;
    }
  }
}