Vendor the SDK's SwiftPM-only deps as a pre-built static binary

The modern ZcashLightClientKit SDK pulls grpc-swift (1.24+), SwiftNIO, SwiftProtobuf and SQLite.swift via SwiftPM only -- grpc-swift's CocoaPods releases stopped at 1.8.0, so it can no longer be a CocoaPods dependency. Consuming the SDK via spm_dependency would force the entire host app onto dynamic frameworks.

Instead, scripts/buildVendoredDeps.ts pre-builds those leaf dependencies into one Release static lib per platform (device arm64; simulator arm64+x86_64, matching the libzcashlc baseline) plus their Swift/C modules, under ios/vendored/ -- generated by 'npm run update-sources' and shipped in the npm tarball. Dependency versions are pinned to the SDK's Package.resolved (-disableAutomaticPackageResolution). The ZcashLightClientKit source keeps compiling in-pod exactly as before, and the host app stays on static frameworks.

The binary .swiftmodule format only loads under the exact Swift compiler that produced it (library-evolution .swiftinterface is unavailable: swift-nio doesn't compile under evolution), so the build stamps ios/vendored/swift-version.txt and the podspec fails fast with rebuild instructions when the consuming Xcode doesn't match.

Note: sqlite3 is not part of this binary -- SQLite.swift on Apple platforms links the system sqlite3 module, so there is nothing to exclude. Edge's pre-existing duplicate-sqlite3 ld warnings come from libzcashlc vs libpiratelc (both Rust cores embed sqlite3) and are unrelated to this change.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: peachbits

.gitignore

@@ -2,6 +2,7 @@
 /android/build/
 /ios/libzcashlc.xcframework/
 /ios/ZCashLightClientKit/
+/ios/vendored/
 /ios/zcashlc.h
 /lib/
 /tmp/

react-native-zcash.podspec

@@ -2,6 +2,40 @@ require "json"
 
 package = JSON.parse(File.read(File.join(__dir__, "package.json")))
 
+# Each bundled C dep module (ios/vendored/cmodules/<Name>/ — headers +
+# module.modulemap) becomes one relative clang include path, so the in-pod
+# ZcashLightClientKit source can resolve the C modules that the pre-built Swift
+# dependency modules (SwiftNIO / GRPC) import.
+cmodule_flags = Dir.glob(File.join(__dir__, "ios/vendored/cmodules/*"))
+  .select { |p| File.directory?(p) }
+  .map { |p| "-Xcc -I\"$(PODS_TARGET_SRCROOT)/ios/vendored/cmodules/#{File.basename(p)}\"" }
+  .join(" ")
+
+# The pre-built Swift modules under ios/vendored/ are only readable by the
+# EXACT Swift compiler that produced them (the binary .swiftmodule format is
+# not stable across compilers, and the stable alternative — library-evolution
+# .swiftinterface — is unavailable because swift-nio rejects evolution builds
+# by upstream policy; see apple/swift-nio#2470/#2897, closed "not planned").
+# Fail fast with instructions instead of letting the build die later on a
+# cryptic "module compiled with Swift X cannot be imported by Swift Y" error.
+stamp_path = File.join(__dir__, "ios/vendored/swift-version.txt")
+if File.exist?(stamp_path)
+  built_with = File.read(stamp_path).strip
+  local_swift = `xcrun swift --version 2>/dev/null`[/swiftlang-[0-9.]+/]
+  if !built_with.empty? && !local_swift.nil? && built_with != local_swift
+    raise <<~MSG
+      react-native-zcash: the prebuilt Swift dependency modules in ios/vendored/
+      were built with #{built_with}, but this machine's Swift compiler is
+      #{local_swift}. Binary .swiftmodule files only load under the exact
+      compiler that produced them.
+
+      Fix: rebuild the vendored dependencies with your toolchain:
+        cd node_modules/react-native-zcash && npm run update-sources
+      (or switch to the Xcode whose Swift is #{built_with})
+    MSG
+  end
+end
+
 Pod::Spec.new do |s|
   s.name         = package['name']
   s.version      = package['version']
@@ -10,11 +44,15 @@ Pod::Spec.new do |s|
   s.license      = package['license']
   s.authors      = package['author']
 
-  s.platform     = :ios, "13.0"
+  s.platform     = :ios, "16.0"
   s.source = {
     :git => "https://github.com/EdgeApp/react-native-zcash.git",
     :tag => "v#{s.version}"
   }
+
+  # The bridge + the vendored ZcashLightClientKit Swift source, compiled in-pod
+  # as ONE module (so the bridge uses SDK types directly — see copySwift in
+  # scripts/updateSources.ts).
   s.source_files =
     "ios/react-native-zcash-Bridging-Header.h",
     "ios/RNZcash.m",
@@ -25,10 +63,41 @@ Pod::Spec.new do |s|
     "zcash-mainnet" => "ios/ZCashLightClientKit/Resources/checkpoints/mainnet/*.json",
     "zcash-testnet" => "ios/ZCashLightClientKit/Resources/checkpoints/testnet/*.json"
   }
-  s.vendored_frameworks = "ios/libzcashlc.xcframework"
 
   s.dependency "MnemonicSwift", "~> 2.2"
-  s.dependency "gRPC-Swift", "~> 1.8"
-  s.dependency "SQLite.swift/standalone", "~> 0.14"
   s.dependency "React-Core"
+
+  # The Rust core (a binaryTarget on the SDK's GitHub release):
+  s.vendored_frameworks = "ios/libzcashlc.xcframework"
+
+  # ---------------------------------------------------------------------------
+  # The SDK's SwiftPM-only dependencies (grpc-swift, SwiftNIO, SwiftProtobuf,
+  # SQLite.swift) pre-built into one static lib per platform, plus their Swift
+  # and C modules. grpc-swift 1.24+ ships SwiftPM-only with no podspec, so these
+  # can no longer be CocoaPods `dependency`s; vendoring them as a static binary
+  # keeps the host app on STATIC frameworks (consuming the SDK via
+  # spm_dependency would force the whole app onto dynamic frameworks).
+  #
+  # sqlite3 is not in this binary: on Apple platforms SQLite.swift has no C-shim
+  # target — it imports the system `sqlite3` clang module — so its sqlite3_*
+  # references resolve at app link time from whatever the host links (in Edge,
+  # its own sqlite pod and/or the sqlite embedded in libzcashlc). Note: Edge's
+  # pre-existing duplicate-sqlite3 ld warnings come from libzcashlc vs
+  # react-native-piratechain's libpiratelc (both Rust cores embed sqlite3) and
+  # are unrelated to this package's deps binary.
+  #
+  # Regenerate ios/vendored/ with `npm run update-sources`
+  # (scripts/buildVendoredDeps.ts).
+  # ---------------------------------------------------------------------------
+  s.preserve_paths = "ios/vendored/**/*"
+  s.pod_target_xcconfig = {
+    "SWIFT_INCLUDE_PATHS" => "\"$(PODS_TARGET_SRCROOT)/ios/vendored/modules\"",
+    "OTHER_SWIFT_FLAGS" => cmodule_flags,
+    # force_load the matching slice so the deps' Swift type metadata / protocol
+    # conformances (referenced by the SDK source) aren't dead-stripped:
+    "OTHER_LDFLAGS[sdk=iphoneos*]" =>
+      "-force_load \"$(PODS_TARGET_SRCROOT)/ios/vendored/libZcashDeps-ios-arm64.a\"",
+    "OTHER_LDFLAGS[sdk=iphonesimulator*]" =>
+      "-force_load \"$(PODS_TARGET_SRCROOT)/ios/vendored/libZcashDeps-ios-arm64-simulator.a\""
+  }
 end