@advenue/react-native 1.0.0 → 1.0.1

package/android/src/main/java/expo/modules/advenue/AdvenueAndroidModule.kt

@@ -44,7 +44,6 @@ class AdvenueAndroidModule : Module() {
         AdvenueConfig(
           apiKey = apiKey,
           endpoint = (options["endpoint"] as? String) ?: DEFAULT_ENDPOINT,
-          appVersion = options["appVersion"] as? String,
           requireConsent = (options["requireConsent"] as? Boolean) ?: false,
           batchSize = (options["batchSize"] as? Number)?.toInt() ?: 20,
           flushIntervalMs = (options["flushIntervalMs"] as? Number)?.toLong() ?: 15_000L,

package/android/src/main/kotlin/io/advenue/Advenue.kt

@@ -30,6 +30,7 @@ import io.advenue.core.extractAemCampaignIds
 import io.advenue.core.tcfToConsent
 import io.advenue.platform.collectDeviceInfo
 import io.advenue.platform.readTcf
+import io.advenue.platform.readAppVersion
 import io.advenue.platform.collectEnrichment
 import io.advenue.platform.sha256Hex
 import io.advenue.platform.resolveIdentity
@@ -256,6 +257,14 @@ internal class FacadeState {
     // Replace-and-shut-down, never add.
     stop()
 
+    // The SDK resolves the app version itself (readAppVersion); a config value
+    // is ignored — and said so, rather than looking like it took effect.
+    if (config.appVersion != null) {
+      config.onError(
+        "config.ignored:appVersion",
+        IllegalArgumentException("appVersion is resolved by the SDK and has no effect"),
+      )
+    }
     val scoped = InstallScopedStore(application)
     val prefs = PreferencesStore(application)
     val uuid = SystemUuids()
@@ -292,12 +301,13 @@ internal class FacadeState {
             platform = "android",
             deviceId = identity.deviceId,
             installationId = identity.installationId,
-            appVersion = config.appVersion,
+            appVersion = readAppVersion(application),
             osVersion = Build.VERSION.RELEASE,
             sdkVersion = (config.sdkVersion ?: AdvenueVersion.CURRENT).take(32),
             requireConsent = config.requireConsent,
             sessionWindowMs = config.sessionWindowMs,
             batchSize = config.batchSize,
+            piiScrubEnabled = config.piiScrubEnabled,
           ),
         store = CompositeStore(prefs, scoped),
         clock = SystemClock(),
@@ -368,6 +378,8 @@ internal class FacadeState {
               gaid = enrichment.gaid,
               androidId = null,
               appInstanceId = enrichment.appInstanceId,
+              // B2: bayrak artık düşürülmüyor — olaya işlenir.
+              limitAdTracking = enrichment.limitAdTracking,
             ),
           )
           // Device metadata rides the install, where Meta CAPI reads it.
@@ -458,7 +470,10 @@ internal class FacadeState {
   }
 
   private fun sendDeepLink(url: String) {
-    submit(Command.Track("deep_link", mapOf("url" to url), "custom"))
+    // B3: ham query gönderilmez — token/e-posta query'de taşınır. AEM
+    // ayrıştırması ve sourceUrlHash TAM url'den yapılır (aşağıda), yalnızca
+    // gönderilen `url` özelliği scheme+host+path'e indirgenir.
+    submit(Command.Track("deep_link", mapOf("url" to stripUrlQuery(url)), "custom"))
 
     // Meta AEM: a link from Meta carries al_applink_data with an opaque,
     // Meta-encrypted campaign_ids blob. Emitted at most once per URL — the
@@ -482,6 +497,7 @@ internal class FacadeState {
   private fun queryValue(url: String, name: String): String? =
     runCatching { android.net.Uri.parse(url).getQueryParameter(name) }.getOrNull()
 
+
   /** Test surface: how many links are waiting for `initialize`. */
   val bufferedDeepLinkCount: Int
     get() = synchronized(lock) { pendingDeepLinks.size }
@@ -547,3 +563,12 @@ internal class FacadeState {
     val app: Application?,
   )
 }
+
+/**
+ * B3: deep-link URL'sinden query+fragment atılır (token/e-posta taşınır).
+ * Saf dize işlemi — Android çalıştırıcısı gerekmez, JVM testinde de çalışır.
+ */
+internal fun stripUrlQuery(url: String): String {
+  val cut = url.indexOfAny(charArrayOf('?', '#'))
+  return if (cut >= 0) url.substring(0, cut) else url
+}

package/android/src/main/kotlin/io/advenue/AdvenueConfig.kt

@@ -12,6 +12,7 @@ public data class AdvenueConfig
 constructor(
   val apiKey: String,
   val endpoint: String = DEFAULT_ENDPOINT,
+  /** Ignored: the SDK reads the app version from the package itself. Setting it reports `config.ignored:appVersion` through [onError]. Removed in the next major. */
   val appVersion: String? = null,
   val requireConsent: Boolean = false,
   val sessionWindowMs: Long = DEFAULT_SESSION_WINDOW_MS,
@@ -53,7 +54,24 @@ constructor(
    * iOS has no equivalent. A field on the Swift config would do nothing.
    */
   val fbAppId: String? = null,
+  /**
+   * B1: track properties PII scrub'u. Varsayılan-açık; yalnızca açıkça
+   * kapatın (dokümante risk — ham PII ingest'e gider). Swift ile aynı.
+   */
+  val piiScrubEnabled: Boolean = true,
+  /**
+   * B5: testler için `http://` izni. Üretimde kapalı tutun — açık `http://`
+   * API anahtarı dahil tüm olayları şifresiz taşır.
+   */
+  val allowInsecureHttp: Boolean = false,
 ) {
+  init {
+    // B5: şemasız endpoint fail-fast — geçersiz şema transportta değil,
+    // kurulumda yakalanır.
+    require(allowInsecureHttp || endpoint.startsWith("https://")) {
+      "Advenue endpoint must use https:// (set allowInsecureHttp only for tests)"
+    }
+  }
   /**
    * Java-friendly builder. Kotlin's named and default arguments are invisible
    * from Java, and both incumbents are Java-first — a Kotlin SDK that is painful
@@ -64,6 +82,7 @@ constructor(
 
     public fun endpoint(value: String): Builder = apply { config = config.copy(endpoint = value) }
 
+    /** Ignored — see [AdvenueConfig.appVersion]. */
     public fun appVersion(value: String?): Builder = apply {
       config = config.copy(appVersion = value)
     }
@@ -98,6 +117,14 @@ constructor(
       config = config.copy(fbAppId = value)
     }
 
+    public fun piiScrubEnabled(value: Boolean): Builder = apply {
+      config = config.copy(piiScrubEnabled = value)
+    }
+
+    public fun allowInsecureHttp(value: Boolean): Builder = apply {
+      config = config.copy(allowInsecureHttp = value)
+    }
+
     public fun build(): AdvenueConfig = config
   }
 }

package/android/src/main/kotlin/io/advenue/core/CommandPipe.kt

@@ -19,6 +19,8 @@ internal sealed class Command {
     val gaid: String?,
     val androidId: String?,
     val appInstanceId: String?,
+    /** B2: reklam kimliği rıza bayrağı — toplanıp düşürülüyordu. */
+    val limitAdTracking: Boolean? = null,
   ) : Command()
 
   internal data class SetAppInstanceId(val id: String?) : Command()
@@ -121,7 +123,12 @@ internal class CommandPipe(
       is Command.SetConsent -> engine.setConsent(command.granted)
       is Command.SetUserId -> engine.setUserId(command.id)
       is Command.SetIdentity ->
-        engine.setIdentity(command.gaid, command.androidId, command.appInstanceId)
+        engine.setIdentity(
+          command.gaid,
+          command.androidId,
+          command.appInstanceId,
+          limitAdTracking = command.limitAdTracking,
+        )
       is Command.SetAppInstanceId -> engine.setAppInstanceId(command.id)
       is Command.TrackInstall -> engine.trackInstall(command.properties)
       is Command.SetConsentData -> engine.setConsentData(command.consent)

package/android/src/main/kotlin/io/advenue/core/Engine.kt

@@ -39,6 +39,9 @@ internal data class EngineConfig(
   val batchSize: Int = 20,
   val retryBaseMs: Double = 1_000.0,
   val retryCapMs: Double = 60_000.0,
+  /** B1: track properties PII scrub'u. Varsayılan-açık; yalnızca açık bayrakla
+   *  kapatılır (opt-out) ve bu dokümante risklidir. Swift EngineConfig ile aynı. */
+  val piiScrubEnabled: Boolean = true,
 )
 
 /**
@@ -72,6 +75,8 @@ internal class AdvenueEngine(
   private var gaid: String? = null
   private var androidId: String? = null
   private var appInstanceId: String? = null
+  /** B2: rıza bayrağı — her olaya işlenir, persist edilmez (kimlik gibi). */
+  private var limitAdTracking: Boolean? = null
   private var consentData: Consent? = readConsentData()
   private var pushToken: String? = null
   private var pushProvider: String? = null
@@ -90,7 +95,9 @@ internal class AdvenueEngine(
       onError("track.rejected:$rejection", IngestError(400))
       return false
     }
-    queue.enqueue(newEvent(type = type, name = name, properties = properties))
+    // B1: PII scrub (Swift PIIScrub ile aynı sözleşme).
+    val scrubbed = if (config.piiScrubEnabled) PiiScrub.scrub(properties) else properties
+    queue.enqueue(newEvent(type = type, name = name, properties = scrubbed))
     return true
   }
 
@@ -146,6 +153,12 @@ internal class AdvenueEngine(
     (parseJson(store.getString(CONSENT_DATA_KEY) ?: "") as? Map<*, *>)?.let(Consent::fromMap)
 
   public fun setUserId(id: String?) {
+    // B6: 128 üstü id tüm batch'i 400'e düşürür (ingest bütün-batch ayrıştırır).
+    // Reddet, persist etme, onError ile bildir (Limits.kt deseni).
+    if (id != null && id.length > MAX_USER_ID_LENGTH) {
+      onError("account.setUserId:id_too_long", IngestError(400))
+      return
+    }
     customerUserId = id
     if (id != null) store.setString(USER_ID_KEY, id) else store.remove(USER_ID_KEY)
   }
@@ -160,11 +173,13 @@ internal class AdvenueEngine(
     androidId: String?,
     appInstanceId: String?,
     idfa: String? = null,
+    limitAdTracking: Boolean? = null,
   ) {
     this.gaid = gaid
     this.androidId = androidId
     this.appInstanceId = appInstanceId
     this.idfa = idfa
+    this.limitAdTracking = limitAdTracking
   }
 
   /**
@@ -189,7 +204,9 @@ internal class AdvenueEngine(
   public fun trackInstall(properties: Map<String, Any?>? = null): Boolean {
     if (forgotten || (config.requireConsent && !consent)) return false
     if (store.getString(INSTALL_SENT_KEY) == "1") return false
-    queue.enqueue(newEvent(type = "install", name = "install", properties = properties))
+    // B1: install properties de scrub kapsamındadır.
+    val scrubbed = if (config.piiScrubEnabled) PiiScrub.scrub(properties) else properties
+    queue.enqueue(newEvent(type = "install", name = "install", properties = scrubbed))
     store.setString(INSTALL_SENT_KEY, "1")
     return true
   }
@@ -231,6 +248,10 @@ internal class AdvenueEngine(
         DEVICE_ID_KEY,
         INSTALLATION_ID_KEY,
         INSTALL_SENT_KEY,
+        // queue.clear() above persists an empty blob synchronously; remove it
+        // so erasure leaves no queue file behind either. Safe to do last:
+        // `forgotten` stops every later enqueue, so nothing rewrites it.
+        QUEUE_KEY,
       )) {
       store.remove(key)
     }
@@ -402,6 +423,7 @@ internal class AdvenueEngine(
       customerUserId = customerUserId,
       idfa = idfa,
       gaid = gaid,
+      limitAdTracking = limitAdTracking,
       androidId = androidId,
       appInstanceId = appInstanceId,
       consent = consentData?.toMap(),

package/android/src/main/kotlin/io/advenue/core/Limits.kt

@@ -22,6 +22,9 @@ package io.advenue.core
 /** `clientEventSchema.name` — z.string().min(1).max(128). */
 internal const val MAX_NAME_LENGTH: Int = 128
 
+/** `customerUserId` — z.string().max(128). Üstü batch'i 400'e düşürür. */
+internal const val MAX_USER_ID_LENGTH: Int = 128
+
 /** `propertiesSchema` — at most this many keys. */
 internal const val MAX_PROPERTIES_KEYS: Int = 50
 

package/android/src/main/kotlin/io/advenue/core/PiiScrub.kt

@@ -0,0 +1,77 @@
+package io.advenue.core
+
+/**
+ * B1: track properties PII scrubbing (varsayılan-açık) — Swift `PIIScrub`
+ * ile aynı sözleşme. Anahtar-adı tabanlı + değer-örüntü tabanlı eşleşen
+ * değerler gönderilmeden önce kaldırılır; ham değer ağa çıkmaz.
+ */
+internal object PiiScrub {
+  private val blockedKeys: Set<String> = setOf(
+    "email", "emailaddress", "emailadres", "eposta", "mail",
+    "phone", "phonenumber", "mobile", "mobilenumber", "mobil",
+    "telefon", "telefonno", "tel", "telno", "gsm",
+    "firstname", "lastname", "ad", "soyad", "adsoyad", "adisoyadi",
+    "fullname", "namesurname", "isim", "isimsoyisim",
+  )
+
+  private val blockedSubstrings: List<String> = listOf(
+    "email", "phone", "telefon", "soyad", "adsoyad", "firstname", "lastname",
+    "fullname",
+  )
+
+  private val emailRegex =
+    Regex("[A-Z0-9._%+-]+@[A-Z0-9.-]+\\.[A-Z]{2,}", RegexOption.IGNORE_CASE)
+
+  private val phoneChars: Set<Char> = "+0123456789 \t.-()".toSet()
+
+  internal fun normalizeKey(key: String): String =
+    key.lowercase().filter { it.isLetterOrDigit() }
+
+  internal fun isSensitiveKey(key: String): Boolean {
+    val normalized = normalizeKey(key)
+    if (blockedKeys.contains(normalized)) return true
+    return blockedSubstrings.any { normalized.contains(it) }
+  }
+
+  /**
+   * Telefon sezgiseli (Swift ile aynı): çapasız alt-dize araması YOK.
+   * Değerin TÜMÜ telefon karakterlerinden oluşmalı ve rakam sayısı
+   * E.164 aralığında (10–15) olmalı.
+   */
+  internal fun looksLikePhone(value: String): Boolean {
+    val trimmed = value.trim()
+    if (trimmed.isEmpty()) return false
+    if (!trimmed.all { phoneChars.contains(it) }) return false
+    val first = trimmed.first()
+    val last = trimmed.last()
+    if (!(first == '+' || first.isDigit()) || !last.isDigit()) return false
+    return trimmed.count { it.isDigit() } in 10..15
+  }
+
+  internal fun isSensitiveValue(value: String): Boolean =
+    emailRegex.containsMatchIn(value) || looksLikePhone(value)
+
+  private fun scrubValue(value: Any?): Any? =
+    when (value) {
+      is String -> if (isSensitiveValue(value)) null else value
+      is Map<*, *> -> {
+        @Suppress("UNCHECKED_CAST")
+        val cleaned = scrub(value as Map<String, Any?>) ?: return null
+        cleaned
+      }
+      is List<*> -> value.mapNotNull { scrubValue(it) }
+      else -> value
+    }
+
+  /** PII taşıyan girdileri kaldırır. Girdi null ise null döner. */
+  internal fun scrub(properties: Map<String, Any?>?): Map<String, Any?>? {
+    if (properties == null) return null
+    val kept = LinkedHashMap<String, Any?>(properties.size)
+    for ((key, value) in properties) {
+      if (isSensitiveKey(key)) continue
+      val cleaned = scrubValue(value) ?: continue
+      kept[key] = cleaned
+    }
+    return kept
+  }
+}

package/android/src/main/kotlin/io/advenue/platform/Collectors.kt

@@ -103,6 +103,20 @@ internal fun tcfFrom(gdprApplies: Int?, purposeConsents: String?): Map<String, A
  * source is unavailable — a misleading zero is worse than a missing value,
  * because downstream it is indistinguishable from a real measurement.
  */
+/**
+ * The app's own version (`versionName`) for every event's top-level
+ * `appVersion`. Resolved here, never taken from the app: the React Native 0.x
+ * layer filled it this way, and 1.0 relying on the config instead left every
+ * event unversioned (2026-09-19). Null when the package manager can't answer.
+ */
+internal fun readAppVersion(context: Context): String? =
+  runCatching {
+      @Suppress("DEPRECATION")
+      context.packageManager.getPackageInfo(context.packageName, 0).versionName
+    }
+    .getOrNull()
+    ?.takeIf { it.isNotBlank() }
+
 internal fun collectDeviceInfo(context: Context): Map<String, Any?> {
   val map = LinkedHashMap<String, Any?>()
   map["model"] = Build.MODEL

package/android/src/main/kotlin/io/advenue/platform/InstallScopedStore.kt

@@ -4,6 +4,7 @@ import android.content.Context
 import io.advenue.core.DEVICE_ID_KEY
 import io.advenue.core.INSTALLATION_ID_KEY
 import io.advenue.core.INSTALL_SENT_KEY
+import io.advenue.core.QUEUE_KEY
 import java.io.File
 
 /**
@@ -83,6 +84,10 @@ internal class InstallScopedStore(context: Context) : ScopedStore {
         DEVICE_ID_KEY to "advenue-device-id",
         INSTALLATION_ID_KEY to "advenue-installation-id",
         INSTALL_SENT_KEY to "advenue-install-sent",
+        // B4: kuyruk blob'u (GAID'li olay gövdeleri) yedekten çıkar — geri
+        // yüklenen kuyruk hem PII sızıntısı hem de bayat olay yağmurudur.
+        // Eski SharedPreferences anahtarı ilk okumada migrate edilir.
+        QUEUE_KEY to "advenue-queue",
       )
 
     /** The keys this store owns; everything else belongs in [PreferencesStore]. */

package/dist/index.cjs

@@ -65,7 +65,7 @@ module.exports = __toCommonJS(index_exports);
 // package.json
 var package_default = {
   name: "@advenue/react-native",
-  version: "1.0.0",
+  version: "1.0.1",
   description: "Advenue MMP React Native SDK \u2014 attribution, install tracking, and deep links (bundled iOS/Android Expo native modules)",
   type: "module",
   license: "MIT",
@@ -214,7 +214,13 @@ function getLinking() {
 }
 
 // src/index.ts
-var IGNORED_OPTIONS = ["mmkv", "secureStore", "sdkConfigFetcher", "tcfDataCollection"];
+var IGNORED_OPTIONS = [
+  "mmkv",
+  "secureStore",
+  "sdkConfigFetcher",
+  "tcfDataCollection",
+  "appVersion"
+];
 var started = false;
 var deepLinkSub = null;
 var errorSub = null;
@@ -268,7 +274,6 @@ var Advenue = {
     call("bridgeInitialize", {
       apiKey: config.apiKey,
       endpoint: config.endpoint,
-      appVersion: config.appVersion,
       requireConsent: config.requireConsent ?? false,
       batchSize: config.batchSize,
       flushIntervalMs: config.flushIntervalMs,

package/dist/index.d.cts

@@ -55,6 +55,11 @@ interface AdvenueConfig {
     apiKey: string;
     endpoint?: string;
     platform?: 'ios' | 'android' | 'web' | string;
+    /**
+     * @deprecated Ignored: the native SDK resolves the app version from the
+     * package/bundle. Passing it reports `config.ignored:appVersion` via
+     * `onError`. Removed in the next major.
+     */
     appVersion?: string;
     osVersion?: string;
     /** Gates every event on `setTrackingConsent(true)`. */
@@ -80,7 +85,6 @@ type TrackingAuthorizationStatus = 'authorized' | 'denied' | 'restricted' | 'not
 interface BridgeInitOptions {
     apiKey: string;
     endpoint?: string;
-    appVersion?: string;
     requireConsent: boolean;
     batchSize?: number;
     flushIntervalMs?: number;

package/dist/index.d.ts

@@ -55,6 +55,11 @@ interface AdvenueConfig {
     apiKey: string;
     endpoint?: string;
     platform?: 'ios' | 'android' | 'web' | string;
+    /**
+     * @deprecated Ignored: the native SDK resolves the app version from the
+     * package/bundle. Passing it reports `config.ignored:appVersion` via
+     * `onError`. Removed in the next major.
+     */
     appVersion?: string;
     osVersion?: string;
     /** Gates every event on `setTrackingConsent(true)`. */
@@ -80,7 +85,6 @@ type TrackingAuthorizationStatus = 'authorized' | 'denied' | 'restricted' | 'not
 interface BridgeInitOptions {
     apiKey: string;
     endpoint?: string;
-    appVersion?: string;
     requireConsent: boolean;
     batchSize?: number;
     flushIntervalMs?: number;

package/dist/index.js

@@ -54,7 +54,7 @@ var require_native_require = __commonJS({
 // package.json
 var package_default = {
   name: "@advenue/react-native",
-  version: "1.0.0",
+  version: "1.0.1",
   description: "Advenue MMP React Native SDK \u2014 attribution, install tracking, and deep links (bundled iOS/Android Expo native modules)",
   type: "module",
   license: "MIT",
@@ -203,7 +203,13 @@ function getLinking() {
 }
 
 // src/index.ts
-var IGNORED_OPTIONS = ["mmkv", "secureStore", "sdkConfigFetcher", "tcfDataCollection"];
+var IGNORED_OPTIONS = [
+  "mmkv",
+  "secureStore",
+  "sdkConfigFetcher",
+  "tcfDataCollection",
+  "appVersion"
+];
 var started = false;
 var deepLinkSub = null;
 var errorSub = null;
@@ -257,7 +263,6 @@ var Advenue = {
     call("bridgeInitialize", {
       apiKey: config.apiKey,
       endpoint: config.endpoint,
-      appVersion: config.appVersion,
       requireConsent: config.requireConsent ?? false,
       batchSize: config.batchSize,
       flushIntervalMs: config.flushIntervalMs,

package/ios/AdvenueIosModule.swift

@@ -37,7 +37,6 @@ public class AdvenueIosModule: Module {
       var config = AdvenueConfig(
         apiKey: app,
         endpoint: (options["endpoint"] as? String) ?? DEFAULT_ENDPOINT,
-        appVersion: options["appVersion"] as? String,
         requireConsent: (options["requireConsent"] as? Bool) ?? false,
         signingSecret: options["signingSecret"] as? String,
         onError: { [weak self] context, error in

package/ios/vendor/Advenue/Advenue.swift

@@ -208,12 +208,30 @@ final class FacadeState: @unchecked Sendable {
     _ config: AdvenueConfig,
     transport: (any EventTransport)? = nil,
     sources: EnrichmentSources? = nil,
-    skan skanReporter: (any SkanReporter)? = nil
+    skan skanReporter: (any SkanReporter)? = nil,
+    appVersion readVersion: () -> String? = readAppVersion
   ) {
     // Replace-and-shut-down, never add.
     stop()
 
-    let store = UserDefaultsStore()
+    // The SDK resolves the app version itself (readAppVersion); a config value
+    // is ignored — and said so, rather than looking like it took effect.
+    if config.appVersion != nil {
+      config.onError(
+        "config.ignored:appVersion",
+        IngestError(status: 0))
+    }
+
+    // B4: kuyruk blob'u Caches dosyalarına (yedek dışı); UserDefaults'ta
+    // kalan eski blob ilk okumada migrate edilir. Caches yoksa UserDefaults
+    // geri dönüşüdür — yedek kapsamı açılır ama SDK çalışır (fail-open, loglanır).
+    let store: any KeyValueStore
+    if let files = CacheFileStore.caches() {
+      store = CompositeStore(files: files)
+    } else {
+      store = UserDefaultsStore()
+      config.onError("store.cache_unavailable", IngestError(status: 0))
+    }
     let secure = KeychainStore()
     let uuid = SystemUUIDs()
 
@@ -245,7 +263,7 @@ final class FacadeState: @unchecked Sendable {
     let engine = AdvenueEngine(
       config: EngineConfig(
         apiKey: config.apiKey, platform: "ios", deviceId: deviceId,
-        installationId: installationId, appVersion: config.appVersion,
+        installationId: installationId, appVersion: readVersion(),
         osVersion: osVersion,
         sdkVersion: String((config.sdkVersion ?? AdvenueVersion.current).prefix(32)),
         requireConsent: config.requireConsent, sessionWindowMs: config.sessionWindowMs,
@@ -357,7 +375,8 @@ final class FacadeState: @unchecked Sendable {
       self?.submit(
         .setIdentity(
           idfa: enrichment.idfa, vendorId: enrichment.vendorId,
-          appInstanceId: enrichment.appInstanceId))
+          appInstanceId: enrichment.appInstanceId,
+          limitAdTracking: enrichment.limitAdTracking))
       self?.submit(.setDeviceInfo(collectDeviceInfo()))
       // The CMP writes TCF to the standard defaults, and reading it is the
       // difference between shipping a real consent signal and shipping none.
@@ -487,10 +506,27 @@ final class FacadeState: @unchecked Sendable {
     return pendingDeepLinks.count
   }
 
+  /// B3: deep-link URL'sinden query+fragment atılır. URLComponents
+  /// çözümlenemezse ham dizenin `?`/`#` öncesi alınır (asla ham query sızmaz).
+  func stripUrlQuery(_ url: URL) -> String {
+    if var components = URLComponents(url: url, resolvingAgainstBaseURL: false) {
+      components.query = nil
+      components.fragment = nil
+      if let stripped = components.string { return stripped }
+    }
+    let raw = url.absoluteString
+    if let cut = raw.firstIndex(where: { $0 == "?" || $0 == "#" }) {
+      return String(raw[..<cut])
+    }
+    return raw
+  }
+
   private func send(_ url: URL) {
+    // B3: ham query gönderilmez — token/e-posta query'de taşınır. AEM
+    // ayrıştırması ve hash TAM url'den yapılır (aşağıda).
     submit(
       .track(
-        name: "deep_link", properties: ["url": .string(url.absoluteString)], type: "custom"))
+        name: "deep_link", properties: ["url": .string(stripUrlQuery(url))], type: "custom"))
 
     // Meta AEM: a link from Meta carries al_applink_data with an opaque,
     // Meta-encrypted campaign_ids blob. Emitted at most once per URL — the same

package/ios/vendor/Advenue/AdvenueConfig.swift

@@ -3,6 +3,8 @@ import Foundation
 public struct AdvenueConfig: Sendable {
   public var apiKey: String
   public var endpoint: String
+  /// Ignored: the SDK reads the app version from the bundle itself. Setting it
+  /// reports `config.ignored:appVersion` through `onError`. Removed in the next major.
   public var appVersion: String?
   public var requireConsent: Bool
   public var sessionWindowMs: Int64
@@ -41,6 +43,12 @@ public struct AdvenueConfig: Sendable {
   /// the whole batch down with a 400, so it is truncated rather than sent.
   public var sdkVersion: String?
 
+  /// B5: `https://` şema kuralı. Fail-fast `precondition` ile kurulumda
+  /// yakalanır; kuralın kendisi test edilebilir saf fonksiyondur.
+  public static func isSecureEndpoint(_ endpoint: String) -> Bool {
+    endpoint.lowercased().hasPrefix("https://")
+  }
+
   public init(
     apiKey: String,
     endpoint: String = DEFAULT_ENDPOINT,
@@ -52,8 +60,12 @@ public struct AdvenueConfig: Sendable {
     signingSecret: String? = nil,
     conversionValues: ConversionValueConfig? = nil,
     onError: @escaping @Sendable (String, any Error) -> Void = { _, _ in },
-    sdkVersion: String? = nil
+    sdkVersion: String? = nil,
+    allowInsecureHttp: Bool = false
   ) {
+    precondition(
+      allowInsecureHttp || Self.isSecureEndpoint(endpoint),
+      "Advenue endpoint must use https:// (allowInsecureHttp is test-only)")
     self.apiKey = apiKey
     self.endpoint = endpoint
     self.appVersion = appVersion

package/ios/vendor/AdvenueCore/Engine.swift

@@ -147,6 +147,8 @@ public actor AdvenueEngine {
     event.sdkVersion = config.sdkVersion
     event.customerUserId = customerUserId
     event.idfa = idfa
+    // B2: rıza bayrağı olaya işlenir.
+    event.limitAdTracking = limitAdTracking
     event.vendorId = vendorId
     event.appInstanceId = appInstanceId
     event.consent = consentData
@@ -163,10 +165,17 @@ public actor AdvenueEngine {
   /// Identity attached to every subsequent event. Not persisted: it is
   /// re-resolved each launch, because ATT status and the vendor id can both
   /// change between them.
-  public func setIdentity(idfa: String?, vendorId: String?, appInstanceId: String?) {
+  /// B2: rıza bayrağı — her olaya işlenir, persist edilmez (kimlik gibi).
+  private var limitAdTracking: Bool?
+
+  public func setIdentity(
+    idfa: String?, vendorId: String?, appInstanceId: String?,
+    limitAdTracking: Bool? = nil
+  ) {
     self.idfa = idfa
     self.vendorId = vendorId
     self.appInstanceId = appInstanceId
+    self.limitAdTracking = limitAdTracking
   }
 
   /// The Firebase App Instance ID alone. Separate from `setIdentity` because it
@@ -206,6 +215,8 @@ public actor AdvenueEngine {
     event.sdkVersion = config.sdkVersion
     event.customerUserId = customerUserId
     event.idfa = idfa
+    // B2: rıza bayrağı install olayına da işlenir.
+    event.limitAdTracking = limitAdTracking
     event.vendorId = vendorId
     event.appInstanceId = appInstanceId
     event.consent = consentData
@@ -347,6 +358,11 @@ public actor AdvenueEngine {
 
 
   public func setUserId(_ id: String?) {
+    // B6: 128 üstü id tüm batch'i 400'e düşürür. Reddet, persist etme.
+    if let id, id.count > 128 {
+      onError("account.setUserId:id_too_long", IngestError(status: 400))
+      return
+    }
     customerUserId = id
     if let id {
       store.set(id, forKey: USER_ID_KEY)
@@ -368,7 +384,9 @@ public actor AdvenueEngine {
     pushToken = nil
     pushProvider = nil
     customerUserId = nil
-    for key in [CONSENT_KEY, CONSENT_DATA_KEY, SESSION_STATE_KEY, USER_ID_KEY] {
+    // QUEUE_KEY last: queue.clear() above persists an empty blob synchronously,
+    // and `forgotten` stops every later enqueue, so nothing rewrites it.
+    for key in [CONSENT_KEY, CONSENT_DATA_KEY, SESSION_STATE_KEY, USER_ID_KEY, QUEUE_KEY] {
       store.removeObject(forKey: key)
     }
   }
@@ -477,7 +495,7 @@ public enum Command: Sendable {
   case foreground
   case background
   case flush
-  case setIdentity(idfa: String?, vendorId: String?, appInstanceId: String?)
+  case setIdentity(idfa: String?, vendorId: String?, appInstanceId: String?, limitAdTracking: Bool? = nil)
   case setAppInstanceId(String?)
   case setConsentData(Consent?)
   case setPushToken(token: String?, provider: String?)
@@ -543,8 +561,10 @@ public final class CommandPipe: @unchecked Sendable {
       await engine.notifyBackground()
     case .flush:
       await engine.flush()
-    case .setIdentity(let idfa, let vendorId, let appInstanceId):
-      await engine.setIdentity(idfa: idfa, vendorId: vendorId, appInstanceId: appInstanceId)
+    case .setIdentity(let idfa, let vendorId, let appInstanceId, let limitAdTracking):
+      await engine.setIdentity(
+        idfa: idfa, vendorId: vendorId, appInstanceId: appInstanceId,
+        limitAdTracking: limitAdTracking)
     case .setAppInstanceId(let id):
       await engine.setAppInstanceId(id)
     case .trackInstall(let token, let attestation, let challenge):

package/ios/vendor/AdvenuePlatform/CacheFileStore.swift

@@ -0,0 +1,90 @@
+import Foundation
+
+/// B4: dosya destekli anahtar-değer deposu. Caches dizini iCloud/yedek
+/// kapsamı dışındadır — kuyruk blob'u (reklam kimlikli olay gövdeleri)
+/// yedek imajına sızmaz. Linux taşınabilirliği için yalnızca Foundation.
+public struct CacheFileStore: KeyValueStore, @unchecked Sendable {
+  private let directory: URL
+  private let fileManager = FileManager.default
+
+  /// - Parameter directory: Kök dizin. Üretimde Caches/advenue kullanılır;
+  ///   testler geçici dizin verir.
+  public init(directory: URL) {
+    self.directory = directory
+  }
+
+  public static func caches() -> CacheFileStore? {
+    guard
+      let base = FileManager.default.urls(for: .cachesDirectory, in: .userDomainMask).first
+    else { return nil }
+    let directory = base.appendingPathComponent("advenue", isDirectory: true)
+    try? FileManager.default.createDirectory(
+      at: directory, withIntermediateDirectories: true)
+    return CacheFileStore(directory: directory)
+  }
+
+  private func file(forKey key: String) -> URL {
+    // Anahtar dosya adı olur — boş/kök kaçışı engellenir.
+    let safe = key.replacingOccurrences(of: "/", with: "_")
+    return directory.appendingPathComponent(safe, isDirectory: false)
+  }
+
+  public func string(forKey key: String) -> String? {
+    try? String(contentsOf: file(forKey: key), encoding: .utf8)
+  }
+
+  public func set(_ value: String, forKey key: String) {
+    try? fileManager.createDirectory(
+      at: directory, withIntermediateDirectories: true)
+    try? value.write(to: file(forKey: key), atomically: true, encoding: .utf8)
+  }
+
+  public func removeObject(forKey key: String) {
+    try? fileManager.removeItem(at: file(forKey: key))
+  }
+}
+
+/// B4: bileşik depo — kuyruk blob'u dosyalara (yedek dışı), geri kalan
+/// UserDefaults'a. Android `CompositeStore` ile aynı yönlendirme.
+/// Eski UserDefaults anahtarı ilk okumada migrate edilir (RN uyumluluğu).
+public struct CompositeStore: KeyValueStore, @unchecked Sendable {
+  private let defaults: UserDefaultsStore
+  private let files: CacheFileStore
+  private let fileKeys: Set<String>
+
+  public init(
+    defaults: UserDefaultsStore = UserDefaultsStore(),
+    files: CacheFileStore,
+    fileKeys: Set<String> = [QUEUE_KEY]
+  ) {
+    self.defaults = defaults
+    self.files = files
+    self.fileKeys = fileKeys
+  }
+
+  public func string(forKey key: String) -> String? {
+    guard fileKeys.contains(key) else { return defaults.string(forKey: key) }
+    if let hit = files.string(forKey: key) { return hit }
+    // Tek seferlik geriye dönük migrate: RN/önceki sürüm UserDefaults'ta bıraktı.
+    guard let legacy = defaults.string(forKey: key) else { return nil }
+    files.set(legacy, forKey: key)
+    defaults.removeObject(forKey: key)
+    return legacy
+  }
+
+  public func set(_ value: String, forKey key: String) {
+    if fileKeys.contains(key) {
+      files.set(value, forKey: key)
+    } else {
+      defaults.set(value, forKey: key)
+    }
+  }
+
+  public func removeObject(forKey key: String) {
+    if fileKeys.contains(key) {
+      files.removeObject(forKey: key)
+    } else {
+      defaults.removeObject(forKey: key)
+    }
+  }
+}

package/ios/vendor/AdvenuePlatform/DeviceInfo.swift

@@ -4,6 +4,18 @@ import Foundation
   import UIKit
 #endif
 
+/// The app's own version (`CFBundleShortVersionString`) for every event's
+/// top-level `appVersion`. Resolved by the SDK, never taken from the app: the
+/// React Native 0.x layer filled it this way, and 1.0 relying on the config
+/// instead left every event unversioned (2026-09-19). Nil when the bundle has
+/// no version.
+public func readAppVersion() -> String? {
+  guard let short = Bundle.main.infoDictionary?["CFBundleShortVersionString"] as? String,
+    !short.isEmpty
+  else { return nil }
+  return short
+}
+
 /// Device metadata for Meta CAPI `extinfo`.
 ///
 /// Best-effort per field: a field is **omitted**, never defaulted, when its

package/ios/vendor/AdvenuePlatform/InstallEnrichment.swift

@@ -13,11 +13,14 @@ public struct Enrichment: Sendable, Equatable {
   public var vendorId: String?
   public var appInstanceId: String?
   public var adservicesToken: String?
+  /// B2: reklam takibi sınırlama bayrağı — düşürülüyordu, artık olaya işlenir.
+  public var limitAdTracking: Bool
 
   public init(
     idfa: String? = nil, vendorId: String? = nil,
     appInstanceId: String? = nil, adservicesToken: String? = nil,
-    attestation: AttestationResult? = nil, attestationChallenge: String? = nil
+    attestation: AttestationResult? = nil, attestationChallenge: String? = nil,
+    limitAdTracking: Bool = false
   ) {
     self.attestation = attestation
     self.attestationChallenge = attestationChallenge
@@ -25,6 +28,7 @@ public struct Enrichment: Sendable, Equatable {
     self.vendorId = vendorId
     self.appInstanceId = appInstanceId
     self.adservicesToken = adservicesToken
+    self.limitAdTracking = limitAdTracking
   }
 }
 
@@ -34,6 +38,9 @@ public struct Enrichment: Sendable, Equatable {
 public struct EnrichmentSources: Sendable {
   public var searchAdsToken: @Sendable () async -> String?
   public var advertisingId: @Sendable () -> (idfa: String?, vendorId: String?)
+  /// B2: ATT sınırlama bayrağı. Ayrı kapanış — advertisingId demetini
+  /// değiştirmek mevcut sahte kaynakları kırardı.
+  public var limitAdTracking: @Sendable () -> Bool
   public var appInstanceId: @Sendable () async -> String?
   /// Returns the attested challenge and its result, or nil. Every failure path
   /// — unsupported device, challenge fetch, attest — yields nil, because an
@@ -46,12 +53,14 @@ public struct EnrichmentSources: Sendable {
     appInstanceId: @escaping @Sendable () async -> String?,
     attestation: @escaping @Sendable () async -> (challenge: String, result: AttestationResult)? = {
       nil
-    }
+    },
+    limitAdTracking: @escaping @Sendable () -> Bool = { false }
   ) {
     self.searchAdsToken = searchAdsToken
     self.advertisingId = advertisingId
     self.appInstanceId = appInstanceId
     self.attestation = attestation
+    self.limitAdTracking = limitAdTracking
   }
 
   /// Production wiring. `AdvertisingIdentity.advertisingId` already returns nil
@@ -68,7 +77,8 @@ public struct EnrichmentSources: Sendable {
         return (idfa: identity.advertisingId, vendorId: identity.vendorId)
       },
       appInstanceId: { await appInstanceIdProvider?() },
-      attestation: { await attestation?() })
+      attestation: { await attestation?() },
+      limitAdTracking: { AdvertisingIdentity().limitAdTracking })
   }
 }
 
@@ -85,7 +95,9 @@ public func collectEnrichment(
 ) async -> Enrichment {
   // Synchronous reads; no reason to race them.
   let ids = sources.advertisingId()
-  var result = Enrichment(idfa: ids.idfa, vendorId: ids.vendorId)
+  var result = Enrichment(
+    idfa: ids.idfa, vendorId: ids.vendorId,
+    limitAdTracking: sources.limitAdTracking())
 
   await withTaskGroup(of: (String, String?).self) { group in
     group.addTask { ("adservices", await sources.searchAdsToken()) }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@advenue/react-native",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Advenue MMP React Native SDK — attribution, install tracking, and deep links (bundled iOS/Android Expo native modules)",
   "type": "module",
   "license": "MIT",
@@ -30,6 +30,12 @@
   "publishConfig": {
     "access": "public"
   },
+  "scripts": {
+    "build": "node scripts/vendor-natives.mjs && node scripts/check-vendored-swift.mjs && tsup && node scripts/check-dist.mjs",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run --minWorkers=1 --maxWorkers=2 && node --test scripts/vendor-natives.test.mjs && node scripts/vendor-natives.mjs && node scripts/check-vendored-swift.mjs",
+    "vendor": "node scripts/vendor-natives.mjs"
+  },
   "dependencies": {},
   "peerDependencies": {
     "@expo/config-plugins": ">=8",
@@ -50,11 +56,5 @@
     "typescript": "^5.7.2",
     "vitest": "^2.1.8"
   },
-  "react-native": "./dist/index.cjs",
-  "scripts": {
-    "build": "node scripts/vendor-natives.mjs && node scripts/check-vendored-swift.mjs && tsup && node scripts/check-dist.mjs",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run --minWorkers=1 --maxWorkers=2 && node --test scripts/vendor-natives.test.mjs && node scripts/vendor-natives.mjs && node scripts/check-vendored-swift.mjs",
-    "vendor": "node scripts/vendor-natives.mjs"
-  }
-}
+  "react-native": "./dist/index.cjs"
+}

package/src/index.ts

@@ -27,7 +27,15 @@ export type {
 } from './native-types';
 
 /** Options this package used to act on and the native SDKs now decide. */
-const IGNORED_OPTIONS = ['mmkv', 'secureStore', 'sdkConfigFetcher', 'tcfDataCollection'] as const;
+// appVersion joins them: the native SDK resolves it from the package/bundle
+// (as the 0.x JS layer did), so a config value would only shadow the real one.
+const IGNORED_OPTIONS = [
+  'mmkv',
+  'secureStore',
+  'sdkConfigFetcher',
+  'tcfDataCollection',
+  'appVersion',
+] as const;
 
 export interface RNAdvenueConfig extends AdvenueConfig {
   /** Meta app id, for the Meta install referrer on Android. */
@@ -131,7 +139,6 @@ export const Advenue = {
     call('bridgeInitialize', {
       apiKey: config.apiKey,
       endpoint: config.endpoint,
-      appVersion: config.appVersion,
       requireConsent: config.requireConsent ?? false,
       batchSize: config.batchSize,
       flushIntervalMs: config.flushIntervalMs,

package/src/native-types.ts

@@ -19,7 +19,6 @@ export type TrackingAuthorizationStatus =
 export interface BridgeInitOptions {
   apiKey: string;
   endpoint?: string;
-  appVersion?: string;
   requireConsent: boolean;
   batchSize?: number;
   flushIntervalMs?: number;

package/src/types.ts

@@ -60,6 +60,11 @@ export interface AdvenueConfig {
   apiKey: string;
   endpoint?: string;
   platform?: 'ios' | 'android' | 'web' | string;
+  /**
+   * @deprecated Ignored: the native SDK resolves the app version from the
+   * package/bundle. Passing it reports `config.ignored:appVersion` via
+   * `onError`. Removed in the next major.
+   */
   appVersion?: string;
   osVersion?: string;
   /** Gates every event on `setTrackingConsent(true)`. */