@advenue/react-native 0.6.5 → 0.7.0

package/dist/index.cjs

@@ -63,21 +63,12 @@ __export(index_exports, {
   getIosNative: () => getIosNative,
   parseDirectLink: () => parseDirectLink,
   resolveAdvertisingId: () => resolveAdvertisingId,
-  resolveClipboardMatch: () => resolveClipboardMatch,
   trackInstall: () => trackInstall
 });
 module.exports = __toCommonJS(index_exports);
 var import_install_referrer = require("@advenue/install-referrer");
 var import_sdk_core = require("@advenue/sdk-core");
 
-// ../shared/src/match-token.ts
-var MATCH_TOKEN_PREFIX = "advmatch:";
-function parseMatchToken(raw) {
-  if (!raw || !raw.startsWith(MATCH_TOKEN_PREFIX)) return null;
-  const id = raw.slice(MATCH_TOKEN_PREFIX.length).trim();
-  return /^[A-Za-z0-9_-]{1,128}$/.test(id) ? id : null;
-}
-
 // ../signing/src/index.ts
 var K = new Uint32Array([
   1116352408,
@@ -230,7 +221,7 @@ function sha256Hex(message) {
 // package.json
 var package_default = {
   name: "@advenue/react-native",
-  version: "0.6.5",
+  version: "0.7.0",
   description: "Advenue MMP React Native SDK \u2014 attribution, install tracking, and deep links (bundled iOS/Android Expo native modules)",
   type: "module",
   license: "MIT",
@@ -366,6 +357,19 @@ function getPlatformOS() {
     return null;
   }
 }
+function getOsVersion() {
+  try {
+    const rn = (0, import_native_require.requireReactNative)();
+    if (!rn) return null;
+    if (rn.Platform.OS === "android") {
+      const release = rn.Platform.constants?.Release;
+      return release != null ? String(release) : null;
+    }
+    return rn.Platform.Version != null ? String(rn.Platform.Version) : null;
+  } catch {
+    return null;
+  }
+}
 function getAppState() {
   try {
     const rn = (0, import_native_require.requireReactNative)();
@@ -466,24 +470,6 @@ function collectDeviceInfo(natives) {
   }
   return {};
 }
-async function resolveClipboardMatch() {
-  const client = active();
-  if (client.getRequireConsent() && !client.getTrackingConsent()) return null;
-  const ios = getIosNative();
-  if (!ios || typeof ios.getPasteboardMatchToken !== "function") {
-    return null;
-  }
-  let token;
-  try {
-    token = ios.getPasteboardMatchToken();
-  } catch (err) {
-    reportError("enrich.clipboardMatch", err);
-    return null;
-  }
-  const matchId = parseMatchToken(token);
-  if (!matchId) return null;
-  return client.exchangeClipboardMatch(matchId);
-}
 function applyAppState(client, status) {
   if (status === "active") {
     client.notifyAppActive();
@@ -557,7 +543,14 @@ var Advenue = {
     installFlagStore = storage;
     secureStore = secureMod ? createSecureStore(secureMod) : createNativeSecureStore(iosMod);
     const deviceId = rest.deviceId ?? await (0, import_sdk_core.resolveDurableDeviceId)(storage, secureStore ?? void 0);
-    instance = new import_sdk_core.AdvenueClient({ ...rest, platform, deviceId, storage });
+    const osVersion = rest.osVersion ?? getOsVersion() ?? void 0;
+    instance = new import_sdk_core.AdvenueClient({
+      ...rest,
+      platform,
+      deviceId,
+      storage,
+      ...osVersion ? { osVersion } : {}
+    });
     instance.debugLog(`SDK v${package_default.version} \u2014 events -> ${configuredEndpoint}`);
     void resolveAdvertisingId().catch((err) => reportError("enrich.advertisingId", err));
     const deviceInfo = collectDeviceInfo({
@@ -596,9 +589,9 @@ var Advenue = {
         deepLinkSub = setupDeepLinks({
           getInitialURL: () => linking.getInitialURL(),
           addUrlListener: (handler) => linking.addEventListener("url", (e) => handler(e.url)),
-          // Deferred waterfall: clipboard (deterministic) first, then the
-          // server-side conversion poll (IDFA / probabilistic).
-          resolveDeferred: async () => await resolveClipboardMatch() ?? client.resolveDeferredDeepLink(),
+          // Deferred deep link: server-side conversion poll (deterministic ids
+          // where available, probabilistic otherwise).
+          resolveDeferred: () => client.resolveDeferredDeepLink(),
           onDeepLink
         });
         deepLinkSub.ready.catch((err) => reportError("deepLink.resolve", err));
@@ -822,6 +815,5 @@ async function trackInstall() {
   getIosNative,
   parseDirectLink,
   resolveAdvertisingId,
-  resolveClipboardMatch,
   trackInstall
 });

package/dist/index.d.cts

@@ -132,8 +132,6 @@ interface AdvenueIosNativeModule {
     getAdvertisingId(): Promise<string | null>;
     /** Vendor-scoped device id (IDFV) — available without ATT; a fallback anchor. */
     getIdentifierForVendor(): string | null;
-    /** Clipboard match token (advmatch:<id>) for deterministic deferred deep linking; null if absent. */
-    getPasteboardMatchToken(): string | null;
     /**
      * G3.2n — App Attest. Generates (or reuses a keychain-cached) DCAppAttest
      * key, computes clientDataHash = SHA-256(challenge), and calls
@@ -239,14 +237,6 @@ declare function collectDeviceInfo(natives: {
         getDeviceInfo?: () => Partial<DeviceInfo>;
     } | null;
 }): DeviceInfo;
-/**
- * iOS clipboard-match deferred deep linking: reads the `advmatch:<id>` token the
- * link redirector wrote to the pasteboard and exchanges it for the deep link — a
- * DETERMINISTIC match (no IDFA, no fingerprinting). Returns null off iOS, when
- * there's no token, or without consent. (Reading the pasteboard shows the iOS
- * paste banner — the user-visible, privacy-forward deferred path.)
- */
-declare function resolveClipboardMatch(): Promise<DeepLink | null>;
 interface RNAdvenueConfig extends Omit<AdvenueConfig, 'storage' | 'platform'> {
     /**
      * Auto-detected from React Native's `Platform.OS` — omit it. Pass explicitly
@@ -343,4 +333,4 @@ declare const Advenue: {
  */
 declare function trackInstall(): Promise<void>;
 
-export { Advenue, type AdvenueAndroidNativeModule, type AdvenueDeviceInfo, type AdvenueIosNativeModule, type InstallReferrerResult, type MMKVLike, type MetaInstallReferrerResult, type RNAdvenueConfig, type SecureStoreLike, type TrackingAuthorizationStatus, applyAppState, collectDeviceInfo, createMMKVStorage, createSecureStore, getAndroidNative, getIosNative, parseDirectLink, resolveAdvertisingId, resolveClipboardMatch, trackInstall };
+export { Advenue, type AdvenueAndroidNativeModule, type AdvenueDeviceInfo, type AdvenueIosNativeModule, type InstallReferrerResult, type MMKVLike, type MetaInstallReferrerResult, type RNAdvenueConfig, type SecureStoreLike, type TrackingAuthorizationStatus, applyAppState, collectDeviceInfo, createMMKVStorage, createSecureStore, getAndroidNative, getIosNative, parseDirectLink, resolveAdvertisingId, trackInstall };

package/dist/index.d.ts

@@ -132,8 +132,6 @@ interface AdvenueIosNativeModule {
     getAdvertisingId(): Promise<string | null>;
     /** Vendor-scoped device id (IDFV) — available without ATT; a fallback anchor. */
     getIdentifierForVendor(): string | null;
-    /** Clipboard match token (advmatch:<id>) for deterministic deferred deep linking; null if absent. */
-    getPasteboardMatchToken(): string | null;
     /**
      * G3.2n — App Attest. Generates (or reuses a keychain-cached) DCAppAttest
      * key, computes clientDataHash = SHA-256(challenge), and calls
@@ -239,14 +237,6 @@ declare function collectDeviceInfo(natives: {
         getDeviceInfo?: () => Partial<DeviceInfo>;
     } | null;
 }): DeviceInfo;
-/**
- * iOS clipboard-match deferred deep linking: reads the `advmatch:<id>` token the
- * link redirector wrote to the pasteboard and exchanges it for the deep link — a
- * DETERMINISTIC match (no IDFA, no fingerprinting). Returns null off iOS, when
- * there's no token, or without consent. (Reading the pasteboard shows the iOS
- * paste banner — the user-visible, privacy-forward deferred path.)
- */
-declare function resolveClipboardMatch(): Promise<DeepLink | null>;
 interface RNAdvenueConfig extends Omit<AdvenueConfig, 'storage' | 'platform'> {
     /**
      * Auto-detected from React Native's `Platform.OS` — omit it. Pass explicitly
@@ -343,4 +333,4 @@ declare const Advenue: {
  */
 declare function trackInstall(): Promise<void>;
 
-export { Advenue, type AdvenueAndroidNativeModule, type AdvenueDeviceInfo, type AdvenueIosNativeModule, type InstallReferrerResult, type MMKVLike, type MetaInstallReferrerResult, type RNAdvenueConfig, type SecureStoreLike, type TrackingAuthorizationStatus, applyAppState, collectDeviceInfo, createMMKVStorage, createSecureStore, getAndroidNative, getIosNative, parseDirectLink, resolveAdvertisingId, resolveClipboardMatch, trackInstall };
+export { Advenue, type AdvenueAndroidNativeModule, type AdvenueDeviceInfo, type AdvenueIosNativeModule, type InstallReferrerResult, type MMKVLike, type MetaInstallReferrerResult, type RNAdvenueConfig, type SecureStoreLike, type TrackingAuthorizationStatus, applyAppState, collectDeviceInfo, createMMKVStorage, createSecureStore, getAndroidNative, getIosNative, parseDirectLink, resolveAdvertisingId, trackInstall };

package/dist/index.js

@@ -65,14 +65,6 @@ import {
   resolveDurableDeviceId
 } from "@advenue/sdk-core";
 
-// ../shared/src/match-token.ts
-var MATCH_TOKEN_PREFIX = "advmatch:";
-function parseMatchToken(raw) {
-  if (!raw || !raw.startsWith(MATCH_TOKEN_PREFIX)) return null;
-  const id = raw.slice(MATCH_TOKEN_PREFIX.length).trim();
-  return /^[A-Za-z0-9_-]{1,128}$/.test(id) ? id : null;
-}
-
 // ../signing/src/index.ts
 var K = new Uint32Array([
   1116352408,
@@ -225,7 +217,7 @@ function sha256Hex(message) {
 // package.json
 var package_default = {
   name: "@advenue/react-native",
-  version: "0.6.5",
+  version: "0.7.0",
   description: "Advenue MMP React Native SDK \u2014 attribution, install tracking, and deep links (bundled iOS/Android Expo native modules)",
   type: "module",
   license: "MIT",
@@ -361,6 +353,19 @@ function getPlatformOS() {
     return null;
   }
 }
+function getOsVersion() {
+  try {
+    const rn = (0, import_native_require.requireReactNative)();
+    if (!rn) return null;
+    if (rn.Platform.OS === "android") {
+      const release = rn.Platform.constants?.Release;
+      return release != null ? String(release) : null;
+    }
+    return rn.Platform.Version != null ? String(rn.Platform.Version) : null;
+  } catch {
+    return null;
+  }
+}
 function getAppState() {
   try {
     const rn = (0, import_native_require.requireReactNative)();
@@ -461,24 +466,6 @@ function collectDeviceInfo(natives) {
   }
   return {};
 }
-async function resolveClipboardMatch() {
-  const client = active();
-  if (client.getRequireConsent() && !client.getTrackingConsent()) return null;
-  const ios = getIosNative();
-  if (!ios || typeof ios.getPasteboardMatchToken !== "function") {
-    return null;
-  }
-  let token;
-  try {
-    token = ios.getPasteboardMatchToken();
-  } catch (err) {
-    reportError("enrich.clipboardMatch", err);
-    return null;
-  }
-  const matchId = parseMatchToken(token);
-  if (!matchId) return null;
-  return client.exchangeClipboardMatch(matchId);
-}
 function applyAppState(client, status) {
   if (status === "active") {
     client.notifyAppActive();
@@ -552,7 +539,14 @@ var Advenue = {
     installFlagStore = storage;
     secureStore = secureMod ? createSecureStore(secureMod) : createNativeSecureStore(iosMod);
     const deviceId = rest.deviceId ?? await resolveDurableDeviceId(storage, secureStore ?? void 0);
-    instance = new AdvenueClient({ ...rest, platform, deviceId, storage });
+    const osVersion = rest.osVersion ?? getOsVersion() ?? void 0;
+    instance = new AdvenueClient({
+      ...rest,
+      platform,
+      deviceId,
+      storage,
+      ...osVersion ? { osVersion } : {}
+    });
     instance.debugLog(`SDK v${package_default.version} \u2014 events -> ${configuredEndpoint}`);
     void resolveAdvertisingId().catch((err) => reportError("enrich.advertisingId", err));
     const deviceInfo = collectDeviceInfo({
@@ -591,9 +585,9 @@ var Advenue = {
         deepLinkSub = setupDeepLinks({
           getInitialURL: () => linking.getInitialURL(),
           addUrlListener: (handler) => linking.addEventListener("url", (e) => handler(e.url)),
-          // Deferred waterfall: clipboard (deterministic) first, then the
-          // server-side conversion poll (IDFA / probabilistic).
-          resolveDeferred: async () => await resolveClipboardMatch() ?? client.resolveDeferredDeepLink(),
+          // Deferred deep link: server-side conversion poll (deterministic ids
+          // where available, probabilistic otherwise).
+          resolveDeferred: () => client.resolveDeferredDeepLink(),
           onDeepLink
         });
         deepLinkSub.ready.catch((err) => reportError("deepLink.resolve", err));
@@ -816,6 +810,5 @@ export {
   getIosNative,
   parseDirectLink,
   resolveAdvertisingId,
-  resolveClipboardMatch,
   trackInstall
 };

package/ios/AdvenueIos.podspec

@@ -17,4 +17,8 @@ Pod::Spec.new do |s|
   s.dependency 'ExpoModulesCore'
 
   s.source_files = '**/*.{h,m,swift}'
+  # Apple privacy manifest (required since May 2024 for SDKs that persist
+  # state / collect device info) — shipped as a resource bundle so Xcode
+  # aggregates it into the app's privacy report.
+  s.resource_bundles = { 'AdvenueIos_Privacy' => ['PrivacyInfo.xcprivacy'] }
 end

package/ios/AdvenueIosModule.swift

@@ -137,17 +137,6 @@ public class AdvenueIosModule: Module {
       return Self.onMainSync { UIDevice.current.identifierForVendor?.uuidString }
     }
 
-    // Reads our clipboard match token (advmatch:<id>) written by the link
-    // redirector, for deterministic deferred deep linking. Returns ONLY our
-    // token, never arbitrary clipboard contents. (Reading the pasteboard shows
-    // the iOS paste notification — expected, user-visible, deterministic path.)
-    Function("getPasteboardMatchToken") { () -> String? in
-      return Self.onMainSync { () -> String? in
-        guard let s = UIPasteboard.general.string, s.hasPrefix("advmatch:") else { return nil }
-        return s
-      }
-    }
-
     // G3.3 — DeviceCheck token. Calls DCDevice.current.generateToken to obtain
     // the opaque base64 token that identifies this physical device to the Apple
     // DeviceCheck API. The server uses it (with the per-app DeviceCheck key) to

package/ios/PrivacyInfo.xcprivacy

@@ -0,0 +1,56 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <!-- The SDK itself does not track (no fingerprinting; IDFA collection is
+       app-mediated via the ATT prompt) and calls no tracking domains. -->
+  <key>NSPrivacyTracking</key>
+  <false/>
+  <key>NSPrivacyTrackingDomains</key>
+  <array/>
+  <key>NSPrivacyCollectedDataTypes</key>
+  <array>
+    <!-- Durable SDK device id (Keychain-backed) — attribution/analytics. -->
+    <dict>
+      <key>NSPrivacyCollectedDataType</key>
+      <string>NSPrivacyCollectedDataTypeDeviceID</string>
+      <key>NSPrivacyCollectedDataTypeLinked</key>
+      <true/>
+      <key>NSPrivacyCollectedDataTypeTracking</key>
+      <false/>
+      <key>NSPrivacyCollectedDataTypePurposes</key>
+      <array>
+        <string>NSPrivacyCollectedDataTypePurposeAppFunctionality</string>
+        <string>NSPrivacyCollectedDataTypePurposeAnalytics</string>
+      </array>
+    </dict>
+    <!-- Coarse device characteristics (model, OS version, locale, screen) —
+         event enrichment / attribution corroboration. -->
+    <dict>
+      <key>NSPrivacyCollectedDataType</key>
+      <string>NSPrivacyCollectedDataTypeOtherDataTypes</string>
+      <key>NSPrivacyCollectedDataTypeLinked</key>
+      <true/>
+      <key>NSPrivacyCollectedDataTypeTracking</key>
+      <false/>
+      <key>NSPrivacyCollectedDataTypePurposes</key>
+      <array>
+        <string>NSPrivacyCollectedDataTypePurposeAnalytics</string>
+      </array>
+    </dict>
+  </array>
+  <key>NSPrivacyAccessedAPITypes</key>
+  <array>
+    <!-- CA92.1: UserDefaults is read/written only for this app's own SDK
+         state (device id mirror, install flag, consent). -->
+    <dict>
+      <key>NSPrivacyAccessedAPIType</key>
+      <string>NSPrivacyAccessedAPICategoryUserDefaults</string>
+      <key>NSPrivacyAccessedAPITypeReasons</key>
+      <array>
+        <string>CA92.1</string>
+      </array>
+    </dict>
+  </array>
+</dict>
+</plist>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@advenue/react-native",
-  "version": "0.6.5",
+  "version": "0.7.0",
   "description": "Advenue MMP React Native SDK — attribution, install tracking, and deep links (bundled iOS/Android Expo native modules)",
   "type": "module",
   "license": "MIT",
@@ -29,7 +29,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@advenue/install-referrer": "0.2.0",
+    "@advenue/install-referrer": "0.3.0",
     "@advenue/sdk-core": "0.4.0"
   },
   "peerDependencies": {

package/src/index.ts

@@ -17,7 +17,6 @@ import {
   type TrackOptions,
   resolveDurableDeviceId,
 } from '@advenue/sdk-core';
-import { parseMatchToken } from '@advenue/shared/match-token';
 import { sha256Hex } from '@advenue/signing';
 import pkg from '../package.json' with { type: 'json' };
 import { type DeepLinkHandle, setupDeepLinks } from './deep-links';
@@ -28,6 +27,7 @@ import {
   getAppState,
   getIosNative,
   getLinking,
+  getOsVersion,
   getPlatformOS,
 } from './native';
 import { createNativeSecureStore, createNativeStorage } from './native-storage';
@@ -149,37 +149,6 @@ export function collectDeviceInfo(natives: {
   return {};
 }
 
-/**
- * iOS clipboard-match deferred deep linking: reads the `advmatch:<id>` token the
- * link redirector wrote to the pasteboard and exchanges it for the deep link — a
- * DETERMINISTIC match (no IDFA, no fingerprinting). Returns null off iOS, when
- * there's no token, or without consent. (Reading the pasteboard shows the iOS
- * paste banner — the user-visible, privacy-forward deferred path.)
- */
-export async function resolveClipboardMatch(): Promise<DeepLink | null> {
-  const client = active();
-  if (client.getRequireConsent() && !client.getTrackingConsent()) return null;
-  const ios = getIosNative();
-  if (
-    !ios ||
-    typeof (ios as { getPasteboardMatchToken?: unknown }).getPasteboardMatchToken !== 'function'
-  ) {
-    return null;
-  }
-  let token: string | null;
-  try {
-    token = ios.getPasteboardMatchToken();
-  } catch (err) {
-    // Native pasteboard read failed (bridge error, MDM restriction) — deferred
-    // resolution falls through to the server-side conversion poll.
-    reportError('enrich.clipboardMatch', err);
-    return null;
-  }
-  const matchId = parseMatchToken(token);
-  if (!matchId) return null;
-  return client.exchangeClipboardMatch(matchId);
-}
-
 export interface RNAdvenueConfig extends Omit<AdvenueConfig, 'storage' | 'platform'> {
   /**
    * Auto-detected from React Native's `Platform.OS` — omit it. Pass explicitly
@@ -371,7 +340,16 @@ export const Advenue = {
     secureStore = secureMod ? createSecureStore(secureMod) : createNativeSecureStore(iosMod);
     const deviceId =
       rest.deviceId ?? (await resolveDurableDeviceId(storage, secureStore ?? undefined));
-    instance = new AdvenueClient({ ...rest, platform, deviceId, storage });
+    // Auto-collect the OS release version — it feeds the server's normalized
+    // probabilistic fingerprint (spec D1); an explicit config value wins.
+    const osVersion = rest.osVersion ?? getOsVersion() ?? undefined;
+    instance = new AdvenueClient({
+      ...rest,
+      platform,
+      deviceId,
+      storage,
+      ...(osVersion ? { osVersion } : {}),
+    });
     // One-line ground truth for "which SDK build talks to which host" — the
     // exact questions a silent integration always raises first.
     instance.debugLog(`SDK v${pkg.version} — events -> ${configuredEndpoint}`);
@@ -421,10 +399,9 @@ export const Advenue = {
         deepLinkSub = setupDeepLinks({
           getInitialURL: () => linking.getInitialURL(),
           addUrlListener: (handler) => linking.addEventListener('url', (e) => handler(e.url)),
-          // Deferred waterfall: clipboard (deterministic) first, then the
-          // server-side conversion poll (IDFA / probabilistic).
-          resolveDeferred: async () =>
-            (await resolveClipboardMatch()) ?? client.resolveDeferredDeepLink(),
+          // Deferred deep link: server-side conversion poll (deterministic ids
+          // where available, probabilistic otherwise).
+          resolveDeferred: () => client.resolveDeferredDeepLink(),
           onDeepLink,
         });
         // Cold-start resolution is fire-and-forget: a failure (Linking or the

package/src/native-types.ts

@@ -123,8 +123,6 @@ export interface AdvenueIosNativeModule {
   getAdvertisingId(): Promise<string | null>;
   /** Vendor-scoped device id (IDFV) — available without ATT; a fallback anchor. */
   getIdentifierForVendor(): string | null;
-  /** Clipboard match token (advmatch:<id>) for deterministic deferred deep linking; null if absent. */
-  getPasteboardMatchToken(): string | null;
   /**
    * G3.2n — App Attest. Generates (or reuses a keychain-cached) DCAppAttest
    * key, computes clientDataHash = SHA-256(challenge), and calls

package/src/native.ts

@@ -44,6 +44,29 @@ export function getPlatformOS(): string | null {
   }
 }
 
+/**
+ * OS *release* version for attribution matching: iOS `Platform.Version` is the
+ * system version string ('18.2'); Android `Platform.Version` is the API LEVEL
+ * (34) — sending it would break the server's normalized fingerprint (the
+ * click-side browser UA says "Android 14"), so Android reads
+ * `Platform.constants.Release` and degrades to null when it's absent.
+ */
+export function getOsVersion(): string | null {
+  try {
+    const rn = requireReactNative() as {
+      Platform: { OS: string; Version?: unknown; constants?: { Release?: unknown } };
+    } | null;
+    if (!rn) return null;
+    if (rn.Platform.OS === 'android') {
+      const release = rn.Platform.constants?.Release;
+      return release != null ? String(release) : null;
+    }
+    return rn.Platform.Version != null ? String(rn.Platform.Version) : null;
+  } catch {
+    return null;
+  }
+}
+
 /** Subscription handle returned by AppState.addEventListener. */
 export interface AppStateSubscription {
   remove(): void;