Declarative Device Management Enhancements (iOS/macOS 27)

import SwiftUI
import ManagedApp

// MARK: - Managed Configuration Reader
// Reads declarative app configuration pushed by the MDM server,
// including privacy consent status granted via the new consolidated prompt.

struct ManagedConfigurationView: View {
    @State private var managedConfig: [String: Any] = [:]
    @State private var privacyConsented: Bool = false
    @State private var configStatus: String = "Loading..."

    var body: some View {
        NavigationStack {
            List {
                Section("Managed Configuration") {
                    ForEach(Array(managedConfig.keys.sorted()), id: \.self) { key in
                        HStack {
                            Text(key)
                                .font(.caption)
                                .foregroundStyle(.secondary)
                            Spacer()
                            Text("\(managedConfig[key] ?? "nil")")
                                .font(.caption2)
                        }
                    }
                    if managedConfig.isEmpty {
                        Text("No managed configuration found")
                            .foregroundStyle(.secondary)
                    }
                }

                Section("Privacy Consent") {
                    Label(
                        privacyConsented ? "User consented via org prompt" : "Consent pending",
                        systemImage: privacyConsented ? "checkmark.shield.fill" : "shield"
                    )
                    .foregroundStyle(privacyConsented ? .green : .orange)
                }

                Section("Status") {
                    Text(configStatus)
                        .font(.caption)
                }
            }
            .navigationTitle("MDM App Config")
            .task {
                await loadManagedConfiguration()
            }
        }
    }

    @MainActor
    private func loadManagedConfiguration() async {
        // ManagedApp.Configuration provides declarative config pushed by MDM
        // This replaces legacy UserDefaults-based managed app config reading
        let config = ManagedApp.Configuration.current

        if let dict = config.dictionary {
            managedConfig = dict
            configStatus = "Declarative config loaded (\(dict.count) keys)"
        } else {
            configStatus = "No declarative config; may be unmanaged device"
        }

        // Check if the organization's consolidated privacy prompt was accepted.
        // When the user taps Allow in the new consolidated prompt, this returns true
        // and your app can proceed without additional permission dialogs.
        privacyConsented = config.privacyConsentGranted
    }
}

// MARK: - App Entry Point
@main
struct ManagedDemoApp: App {
    var body: some Scene {
        WindowGroup {
            ManagedConfigurationView()
        }
    }
}