feat: add iOS Safari web extension flow

.maestro/README.md

@@ -0,0 +1,41 @@
+# Maestro smoke flows for Safari extension fixtures
+
+These flows are intentionally small and assume you are using the local fixture pages in `Docs/safari-extension-dev-fixtures/`.
+
+## Prerequisites
+
+1. Start the local fixture server:
+
+```bash
+cd ~/_dev/ios
+python3 -m http.server 8123 -d Docs/safari-extension-dev-fixtures
+```
+
+2. Ensure the iOS simulator is booted.
+3. Ensure Safari's first-run onboarding has already been dismissed on that simulator.
+4. Install Maestro CLI according to the official docs:
+
+```bash
+curl -fsSL "https://get.maestro.mobile.dev" | bash
+```
+
+or
+
+```bash
+brew tap mobile-dev-inc/tap
+brew install mobile-dev-inc/tap/maestro
+```
+
+## Run a smoke flow
+
+```bash
+maestro test .maestro/safari-signup-smoke.yaml
+maestro test .maestro/safari-change-password-smoke.yaml
+```
+
+## Intended use
+
+These are not full product regressions yet. They are a lightweight starting point for:
+- opening the stable local fixture page
+- proving simulator + Safari + CLI wiring works
+- growing toward richer Safari extension E2E checks later

.maestro/safari-change-password-smoke.yaml

@@ -0,0 +1,13 @@
+appId: com.apple.mobilesafari
+---
+- launchApp
+- openLink: http://127.0.0.1:8123/change-password.html
+- assertVisible: Update your password
+- tapOn: Current password
+- inputText: old-secret
+- tapOn: New password
+- inputText: new-secret-123
+- tapOn: Confirm new password
+- inputText: new-secret-123
+- tapOn: Update password
+- assertVisible: Change-password fixture intercepted submit locally.

.maestro/safari-signup-smoke.yaml

@@ -0,0 +1,13 @@
+appId: com.apple.mobilesafari
+---
+- launchApp
+- openLink: http://127.0.0.1:8123/signup.html
+- assertVisible: Create your Bitwarden Safari test account
+- tapOn: Email
+- inputText: user@example.com
+- tapOn: New password
+- inputText: new-secret-123
+- tapOn: Confirm new password
+- inputText: new-secret-123
+- tapOn: Create account
+- assertVisible: Signup fixture intercepted submit locally for user@example.com.

AuthenticatorBridgeKit/AuthenticatorBridgeDataStore.swift

@@ -42,6 +42,33 @@ public final nonisolated class AuthenticatorBridgeDataStore: @unchecked Sendable
         return managedObjectModel
     }()
 
+    static func persistedStoreURL(
+        fileManager: FileManager = .default,
+        groupIdentifier: String,
+        bundleIdentifier: String? = Bundle.main.bundleIdentifier,
+        bundlePath: String = Bundle.main.bundlePath,
+        containerURLProvider: (FileManager, String) -> URL? = { fileManager, groupIdentifier in
+            fileManager.containerURL(forSecurityApplicationGroupIdentifier: groupIdentifier)
+        }
+    ) -> URL {
+        #if targetEnvironment(simulator)
+            if bundlePath.contains(".appex") {
+                let applicationSupportURL = fileManager.urls(for: .applicationSupportDirectory, in: .userDomainMask).first
+                    ?? fileManager.temporaryDirectory
+                let directoryURL = applicationSupportURL
+                    .appendingPathComponent(bundleIdentifier ?? "AuthenticatorBridgeExtension", isDirectory: true)
+                try? fileManager.createDirectory(at: directoryURL, withIntermediateDirectories: true)
+                return directoryURL.appendingPathComponent("\(authenticatorBridgeModelName).sqlite")
+            }
+        #endif
+
+        if let containerURL = containerURLProvider(fileManager, groupIdentifier) {
+            return containerURL.appendingPathComponent("\(authenticatorBridgeModelName).sqlite")
+        }
+
+        return fileManager.temporaryDirectory.appendingPathComponent("\(authenticatorBridgeModelName).sqlite")
+    }
+
     // MARK: Properties
 
     /// A thread-safe lock for `backgroundContext`. Once we have a minimum of iOS 16, we can use an
@@ -99,9 +126,7 @@ public final nonisolated class AuthenticatorBridgeDataStore: @unchecked Sendable
         case .memory:
             storeDescription = NSPersistentStoreDescription(url: URL(fileURLWithPath: "/dev/null"))
         case .persisted:
-            let storeURL = FileManager.default
-                .containerURL(forSecurityApplicationGroupIdentifier: groupIdentifier)!
-                .appendingPathComponent("\(authenticatorBridgeModelName).sqlite")
+            let storeURL = Self.persistedStoreURL(groupIdentifier: groupIdentifier)
             storeDescription = NSPersistentStoreDescription(url: storeURL)
         }
         persistentContainer.persistentStoreDescriptions = [storeDescription]

AuthenticatorBridgeKit/Tests/AuthenticatorBridgeDataStoreTests.swift

@@ -0,0 +1,37 @@
+import XCTest
+
+@testable import AuthenticatorBridgeKit
+
+final class AuthenticatorBridgeDataStoreTests: XCTestCase {
+    func test_persistedStoreURL_prefersAppGroupContainer() {
+        let subject = AuthenticatorBridgeDataStore.persistedStoreURL(
+            groupIdentifier: "group.com.8bit.bitwarden",
+            bundleIdentifier: "com.8bit.bitwarden",
+            bundlePath: "/tmp/Bitwarden.app",
+            containerURLProvider: { _, _ in URL(fileURLWithPath: "/tmp/group-container", isDirectory: true) }
+        )
+
+        XCTAssertEqual(subject.path, "/tmp/group-container/Bitwarden-Authenticator.sqlite")
+    }
+
+    func test_persistedStoreURL_fallsBackForSimulatorAppExtension() {
+        let fileManager = FileManager.default
+        let subject = AuthenticatorBridgeDataStore.persistedStoreURL(
+            fileManager: fileManager,
+            groupIdentifier: "group.com.8bit.bitwarden",
+            bundleIdentifier: "com.8bit.bitwarden.find-login-action-extension",
+            bundlePath: "/tmp/BitwardenActionExtension.appex",
+            containerURLProvider: { _, _ in nil }
+        )
+
+        let applicationSupportURL = fileManager.urls(for: .applicationSupportDirectory, in: .userDomainMask).first
+            ?? fileManager.temporaryDirectory
+        XCTAssertEqual(
+            subject.path,
+            applicationSupportURL
+                .appendingPathComponent("com.8bit.bitwarden.find-login-action-extension", isDirectory: true)
+                .appendingPathComponent("Bitwarden-Authenticator.sqlite")
+                .path
+        )
+    }
+}

AuthenticatorShared/Core/Platform/Services/StateService.swift

@@ -108,7 +108,7 @@ protocol StateService: AnyObject {
 
 /// The errors thrown from a `StateService`.
 ///
-enum StateServiceError: Error {
+enum StateServiceError: Error, NonLoggableError {
     /// There are no known accounts.
     case noAccounts
 

Bitwarden/Application/TestHelpers/Support/UITests-Info.plist

@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>CFBundleDevelopmentRegion</key>
+	<string>$(DEVELOPMENT_LANGUAGE)</string>
+	<key>CFBundleExecutable</key>
+	<string>$(EXECUTABLE_NAME)</string>
+	<key>CFBundleIdentifier</key>
+	<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
+	<key>CFBundleInfoDictionaryVersion</key>
+	<string>6.0</string>
+	<key>CFBundleName</key>
+	<string>$(PRODUCT_NAME)</string>
+	<key>CFBundlePackageType</key>
+	<string>BNDL</string>
+	<key>CFBundleShortVersionString</key>
+	<string>1.0</string>
+	<key>CFBundleVersion</key>
+	<string>1</string>
+</dict>
+</plist>