GitLab

Verified against the MyID backend: a non-UUID sessionId is rejected with code
103 before the SDK UI appears.

Three paths overwrote SDK defaults instead of leaving them alone:

- iOS assigned every appearance color unconditionally, so theming one color
  nil-ed the other eleven. MyIdAppearance seeds its own values.
- An organizationDetails carrying only a logo replaced the whole details object,
  clearing the default call-centre number. It is now forwarded only when the
  caller supplied a field, and each field is assigned individually.
- An unrecognised enum value called the setter with a guessed default. The guess
  was not always right: the SDK defaults imageFormat to JPEG while the fallback
  substituted PNG. Unknown values now skip the setter.

Android settled a promise through a plain field touched by the JS, UI and
native-modules threads, giving neither visibility nor an atomic check-then-set;
a reload racing a start could wedge the module for the rest of the process. It
is now an AtomicReference claimed with compareAndSet, and the result listener is
scoped to a flow id so a late duplicate callback cannot settle a newer promise.

iOS gained the invalidate path Android already had, confines its state to the
main queue, and extends the proxy's lifetime across the settle callback that
releases it.

Documented defaults corrected against MyIdDefaults: imageFormat is JPEG,
withSoundGuides is true, distance depends on camera shape, iOS floor is 15.1.

Covers the per-build-type Gradle fallback, the central-repository opt-out, the
arm-only ABI constraint that breaks x86 emulators, and the Android theming
path, none of which are discoverable from the API surface.

Repo becomes the myid-sdk npm package: library at root, RN 0.86.2 vanilla
example app in example/, Turbo Module codegen enabled, yarn 4 workspace.

The previous demo app targeted MyID SDK 2.x (clientId, withPassportData,
MyIdBuildMode), an API that no longer exists in 3.x, so it is removed rather
than migrated. Recoverable via the pre-rewrite tag.