fix: 4 blocking bugs — iOS target 17.0, debug prints→Logger, PG SSL dynamic, Keychain group runtime

Author: datlechin

TableProMobile/TableProMobile.xcodeproj/project.pbxproj

@@ -1705,7 +1705,7 @@
 				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
 				GCC_WARN_UNUSED_FUNCTION = YES;
 				GCC_WARN_UNUSED_VARIABLE = YES;
-				IPHONEOS_DEPLOYMENT_TARGET = 26.4;
+				IPHONEOS_DEPLOYMENT_TARGET = 17.0;
 				LOCALIZATION_PREFERS_STRING_CATALOGS = YES;
 				MTL_ENABLE_DEBUG_INFO = INCLUDE_SOURCE;
 				MTL_FAST_MATH = YES;
@@ -1763,7 +1763,7 @@
 				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
 				GCC_WARN_UNUSED_FUNCTION = YES;
 				GCC_WARN_UNUSED_VARIABLE = YES;
-				IPHONEOS_DEPLOYMENT_TARGET = 26.4;
+				IPHONEOS_DEPLOYMENT_TARGET = 17.0;
 				LOCALIZATION_PREFERS_STRING_CATALOGS = YES;
 				MTL_ENABLE_DEBUG_INFO = NO;
 				MTL_FAST_MATH = YES;

TableProMobile/TableProMobile/Drivers/PostgreSQLDriver.swift

@@ -17,24 +17,26 @@ final class PostgreSQLDriver: DatabaseDriver, @unchecked Sendable {
     private let user: String
     private let password: String
     private let database: String
+    private let sslEnabled: Bool
 
     var supportsSchemas: Bool { true }
     private(set) var currentSchema: String? = "public"
     var supportsTransactions: Bool { true }
     private(set) var serverVersion: String?
 
-    init(host: String, port: Int, user: String, password: String, database: String) {
+    init(host: String, port: Int, user: String, password: String, database: String, sslEnabled: Bool = false) {
         self.host = host
         self.port = port
         self.user = user
         self.password = password
         self.database = database
+        self.sslEnabled = sslEnabled
     }
 
     // MARK: - Connection
 
     func connect() async throws {
-        try await actor.connect(host: host, port: port, user: user, password: password, database: database)
+        try await actor.connect(host: host, port: port, user: user, password: password, database: database, sslEnabled: sslEnabled)
         serverVersion = await actor.serverVersion()
     }
 
@@ -274,14 +276,15 @@ final class PostgreSQLDriver: DatabaseDriver, @unchecked Sendable {
 private actor PostgreSQLActor {
     private var conn: OpaquePointer?
 
-    func connect(host: String, port: Int, user: String, password: String, database: String) throws {
+    func connect(host: String, port: Int, user: String, password: String, database: String, sslEnabled: Bool = false) throws {
         let escapedHost = escapeConnParam(host)
         let escapedUser = escapeConnParam(user)
         let escapedPass = escapeConnParam(password)
         let escapedDb = escapeConnParam(database)
+        let sslmode = sslEnabled ? "require" : "disable"
 
         let connStr = "host='\(escapedHost)' port='\(port)' dbname='\(escapedDb)' " +
-            "user='\(escapedUser)' password='\(escapedPass)' connect_timeout='10' sslmode='disable'"
+            "user='\(escapedUser)' password='\(escapedPass)' connect_timeout='10' sslmode='\(sslmode)'"
 
         let connection = PQconnectdb(connStr)
 

TableProMobile/TableProMobile/Platform/IOSDriverFactory.swift

@@ -26,7 +26,8 @@ final class IOSDriverFactory: DriverFactory {
                 port: connection.port,
                 user: connection.username,
                 password: password ?? "",
-                database: connection.database
+                database: connection.database,
+                sslEnabled: connection.sslEnabled
             )
         case .redis:
             let dbIndex = Int(connection.database) ?? 0

TableProMobile/TableProMobile/Platform/KeychainSecureStore.swift

@@ -9,9 +9,32 @@ import TableProDatabase
 
 final class KeychainSecureStore: SecureStore {
     private let serviceName = "com.TablePro"
-    private let accessGroup = "D7HJ5TFYCU.com.TablePro.shared"
+    private let accessGroup: String
+
+    private static func resolveAccessGroup() -> String {
+        // Read team ID prefix from provisioning at runtime
+        if let seedID = Bundle.main.infoDictionary?["AppIdentifierPrefix"] as? String {
+            return "\(seedID)com.TablePro.shared"
+        }
+        // Fallback: query Keychain for the app's default access group
+        let query: [String: Any] = [
+            kSecClass as String: kSecClassGenericPassword,
+            kSecAttrAccount as String: "__accessgroup_probe__",
+            kSecReturnAttributes as String: true,
+        ]
+        var result: AnyObject?
+        SecItemAdd(query as CFDictionary, &result)
+        SecItemDelete(query as CFDictionary)
+        if let attrs = result as? [String: Any],
+           let group = attrs[kSecAttrAccessGroup as String] as? String {
+            let prefix = group.components(separatedBy: ".").first ?? ""
+            return "\(prefix).com.TablePro.shared"
+        }
+        return "D7HJ5TFYCU.com.TablePro.shared"
+    }
 
     init() {
+        self.accessGroup = Self.resolveAccessGroup()
         migrateFromOldServiceIfNeeded()
     }
 

TableProMobile/TableProMobile/Sync/IOSSyncCoordinator.swift

@@ -6,11 +6,14 @@
 import CloudKit
 import Foundation
 import Observation
+import os
 import TableProModels
 import TableProSync
 
 @MainActor @Observable
 final class IOSSyncCoordinator {
+    private static let logger = Logger(subsystem: "com.TablePro.Mobile", category: "Sync")
+
     var status: SyncStatus = .idle
     var lastSyncDate: Date?
 
@@ -44,10 +47,10 @@ final class IOSSyncCoordinator {
 
             try await getEngine().ensureZoneExists()
             let remoteChanges = try await pull()
-            print("SYNC: pulled \(remoteChanges.changed.count) changed, \(remoteChanges.deletedIDs.count) deleted")
+            Self.logger.info("Pulled \(remoteChanges.changed.count) changed, \(remoteChanges.deletedIDs.count) deleted")
             try await push(localConnections: localConnections)
             let merged = merge(local: localConnections, remote: remoteChanges)
-            print("SYNC: local=\(localConnections.count), merged=\(merged.count)")
+            Self.logger.info("Merged: local=\(localConnections.count), result=\(merged.count)")
             onConnectionsChanged?(merged)
 
             metadata.lastSyncDate = Date()