Forward hasItem options; change iOS auth errors

Stop normalizing storage options in useHasSecret and pass the provided SensitiveInfoOptions straight to hasItem. Update unit tests to assert the forwarded options and the native getAllItems call signature. On iOS, remove the early-return that suppressed errSecInteractionNotAllowed/errSecAuthFailed when allowAuthentication was false so those statuses now raise the runtime error instead of returning nil.

Author: mCodex

ios/HybridSensitiveInfo.swift

@@ -407,7 +407,6 @@ public final class HybridSensitiveInfo: HybridSensitiveInfoSpec {
     case errSecItemNotFound:
       return nil
     case errSecInteractionNotAllowed, errSecAuthFailed:
-      if !allowAuthentication { return nil }
       throw runtimeError(for: status, operation: "fetch")
     default:
       throw runtimeError(for: status, operation: "fetch")

src/__tests__/core.storage.test.ts

@@ -288,6 +288,10 @@ describe('core/storage', () => {
 			authenticationPrompt: prompt,
 		})
 		expect(normalizePromptedReadOptions).not.toHaveBeenCalled()
+		expect(nativeHandle.getAllItems).toHaveBeenCalledWith({
+			includeValues: false,
+			service: 'normalized',
+		} as SensitiveInfoEnumerateRequest)
 	})
 
 	it('clears a service via native call', async () => {

src/__tests__/hooks.useHasSecret.test.tsx

@@ -34,26 +34,25 @@ describe('useHasSecret', () => {
 		expect(mockedHasItem).toHaveBeenCalledWith('token', { service: 'auth' })
 	})
 
-	it('keeps existence checks silent when prompt options are provided', async () => {
+	it('forwards existence options to the silent hasItem boundary', async () => {
 		mockedHasItem.mockResolvedValueOnce(true)
+		const options = {
+			service: 'auth',
+			accessControl: 'biometryCurrentSet' as const,
+			authenticationPrompt: { title: 'Unlock' },
+		}
 
 		renderHook(
 			({ opts }: { opts: Parameters<typeof useHasSecret>[1] }) =>
 				useHasSecret('token', opts),
 			{
-				initialProps: {
-					opts: {
-						service: 'auth',
-						accessControl: 'biometryCurrentSet',
-						authenticationPrompt: { title: 'Unlock' },
-					},
-				},
+				initialProps: { opts: options },
 			}
 		)
 
 		await waitFor(() => expect(mockedHasItem).toHaveBeenCalled())
 
-		expect(mockedHasItem).toHaveBeenCalledWith('token', { service: 'auth' })
+		expect(mockedHasItem).toHaveBeenCalledWith('token', options)
 	})
 
 	it('skips querying when requested', async () => {

src/hooks/useHasSecret.ts

@@ -1,6 +1,5 @@
 import { useCallback } from 'react'
 import { hasItem } from '../core/storage'
-import { normalizeStorageScopeOptions } from '../internal/options'
 import type { SensitiveInfoOptions } from '../sensitive-info.nitro'
 import type { AsyncState } from './types'
 import useAsyncQuery from './useAsyncQuery'
@@ -44,8 +43,7 @@ export function useHasSecret(
 	options?: UseHasSecretOptions
 ): UseHasSecretResult {
 	const runner = useCallback(
-		(request: SensitiveInfoOptions) =>
-			hasItem(key, normalizeStorageScopeOptions(request)),
+		(request: SensitiveInfoOptions) => hasItem(key, request),
 		[key]
 	)
 	return useAsyncQuery<boolean, UseHasSecretOptions>(