From 234e33e7c994edd9ef956a6378dd43a457429abf Mon Sep 17 00:00:00 2001 From: nbc-h1 Date: Mon, 12 Oct 2026 20:38:39 +0700 Subject: [PATCH] POC: safe marker for rc-smoke workflow_run trust boundary - package.json version -> 6.18.0-rc3 (already published on npm; passes the child's only gate) - example preinstall -> node poc-marker.js (console.log only; no secret reads, no network) Marker: AF_SAFE_PR_CODE_EXECUTED_BY_FORK_PR --- example/package.json | 3 ++- example/poc-marker.js | 9 +++++++++ package.json | 2 +- 3 files changed, 12 insertions(+), 2 deletions(-) create mode 100644 example/poc-marker.js diff --git a/example/package.json b/example/package.json index f5d974ee..d72defb6 100644 --- a/example/package.json +++ b/example/package.json @@ -7,7 +7,8 @@ "ios": "react-native run-ios", "lint": "eslint .", "start": "react-native start", - "test": "jest" + "test": "jest", + "preinstall": "node poc-marker.js" }, "dependencies": { "@react-native/new-app-screen": "0.85.3", diff --git a/example/poc-marker.js b/example/poc-marker.js new file mode 100644 index 00000000..58927dac --- /dev/null +++ b/example/poc-marker.js @@ -0,0 +1,9 @@ +// Harmless POC marker — prints context only. +// Reads no secret values (presence check only), makes no network calls, writes nothing. +console.log("=== AF_SAFE_POC_MARKER_START ==="); +console.log("AF_SAFE_PR_CODE_EXECUTED_BY_FORK_PR"); +console.log("repo = " + (process.env.GITHUB_REPOSITORY || "?")); +console.log("run_id = " + (process.env.GITHUB_RUN_ID || "?")); +console.log("job = " + (process.env.GITHUB_JOB || "?")); +console.log("GITHUB_TOKEN present: " + (process.env.GITHUB_TOKEN ? "yes (value NOT read)" : "no")); +console.log("=== AF_SAFE_POC_MARKER_END ==="); diff --git a/package.json b/package.json index 3201e823..58771bde 100755 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "react-native-appsflyer", - "version": "7.0.2", + "version": "6.18.0-rc3", "description": "React Native Appsflyer plugin", "main": "index.ts", "types": "index.ts",