@dl2app/react-native 0.1.0 → 0.1.1

package/README.md

@@ -11,7 +11,7 @@ DL2 deep links for React Native and Expo.
 ## Requirements
 
 - React Native 0.74 or newer, old or new architecture.
-- Expo SDK 51 or newer, or a bare React Native app with Expo Modules installed.
+- Expo SDK 51 or newer, or a bare React Native app with Expo Modules. Version 0.1.1 was compiled for Android and iOS in a fresh Expo SDK 57 app.
 - A development build. **Expo Go does not work**, because the SDK has native code and your app needs its own associated domains.
 
 ## Install
@@ -42,14 +42,14 @@ Plugin options:
 | --- | --- | --- |
 | `subdomain` | none | Your DL2 project subdomain. Adds `myapp.dl2.app` and `myapp-alt.dl2.app`. |
 | `domains` | `[]` | Custom domains. Without `subdomain`, list every host here, including the `-alt` one. |
-| `iosDeveloperMode` | `false` | Adds `?mode=developer` to the iOS entries. Use it for development builds only. |
+| `iosDeveloperMode` | `false` | Adds `?mode=developer` to the iOS entries the plugin adds (entries you already list are left as they are). Use it for development builds only. |
 | `androidAutoVerify` | `true` | Adds `android:autoVerify="true"` to the intent filter. |
 | `uriScheme` | none | Also registers a custom scheme such as `myapp`. |
 | `rootDomain` | `dl2.app` | Only for self-hosted DL2. |
 
 You need `subdomain` or at least one entry in `domains`. The plugin stops the build with a message that says what to change when an option is wrong, for example a host written with `https://`.
 
-The plugin adds to `ios.associatedDomains`, `android.intentFilters` and `scheme`. It keeps the entries you already have and is safe to run any number of times. The Play Install Referrer library comes with the SDK's own Gradle file, so there is nothing to add for it.
+The plugin adds to `ios.associatedDomains`, `android.intentFilters` and `scheme`. It keeps the entries you already have and is safe to run any number of times. An existing https intent filter only counts as covering a host when it is not limited to a path, port or type. The Play Install Referrer library comes with the SDK's own Gradle file, so there is nothing to add for it.
 
 Always include the `-alt` host. Pages on your main link host use it for their "Open in app" button: iOS only opens an app from a tap that crosses to a different domain.
 
@@ -140,6 +140,8 @@ type DL2LinkEvent = {
 - Links that arrive before any listener is registered are kept (up to 20) and delivered to the first listener.
 - The same URL within 2 seconds is delivered once.
 - If the DL2 API cannot be reached within 3 seconds, the event is built from the URL itself (`path` and `params` from the URL, empty `data`), so your app still navigates.
+- A link in your own `uriScheme` is always built from the URL, without a request: DL2 only stores https links.
+- Android: a link is not delivered again when the app is reopened from Recents after its process was stopped.
 
 ### `DL2.getInitialLink()` returns `Promise<DL2LinkEvent | null>`
 
@@ -156,7 +158,8 @@ Records an event, for example `DL2.track("purchase", { value: 19.99, currency: "
 - Returns at once. Events are sent in order in the background.
 - Offline, events wait in a queue that survives app restarts. The queue holds 100 events; beyond that the oldest are dropped.
 - Failed deliveries are retried after 2, 4, 8 seconds and so on, up to 5 minutes apart. `DL2.flush()` tries immediately.
-- Delivery is at least once: after a timeout an event can arrive twice. Events are stamped with the time the server receives them.
+- Delivery is at least once: after a timeout an event can be sent twice. Each event carries an `event_id` made when it is queued, the same on every retry, so the server can count it once. Events are stamped with the time the server receives them.
+- An event the server rejects (a 4xx answer other than 429) is dropped and reported through `onError`.
 
 ### `DL2.createLink({ path, data?, og?, utm? })` returns `Promise<{ url } | null>`
 
@@ -205,7 +208,9 @@ DL2.configure({ ..., deferred: { useClipboard: true } });
 1. `configure` loads or creates the install ID (stored in `UserDefaults` on iOS, `SharedPreferences` on Android).
 2. If the app was opened by a DL2 link, that link is used. On a first launch it is reported with `POST /v1/sdk/open` (`launch_url` set); later with `POST /v1/sdk/resolve`.
 3. Otherwise, on first launch only, the SDK asks `POST /v1/sdk/open` whether this install came from a link. Android sends the Play install referrer, which is exact. iOS is matched on network and device signals; DL2 returns nothing rather than risk giving a user someone else's link.
-4. If the device is offline on first launch, the check is tried again on the next launch, three launches at most.
+4. If the device is offline on first launch, or the API answers 429 or 5xx, the check is tried again on the next launch, three launches at most.
+5. When the app was installed more than 24 hours ago (for example when the SDK arrives in an app update), the first-launch call carries `skip_fingerprint: true`: the install is recorded and exact matches (Play install referrer, clipboard) still work, but it is not matched on network and device signals.
+6. Android: when a backup or device transfer restores the SDK's storage into a new install, the restored install ID, first-launch flag and queued events are discarded and the launch counts as a first launch.
 
 ## Troubleshooting
 
@@ -266,7 +271,7 @@ What the SDK sends to DL2:
 
 The SDK does not read the IDFA or the Android advertising ID, does not use any other device identifier, does not track users across apps or sites, and DL2 does not sell or share this data. You do not need the App Tracking Transparency prompt for DL2.
 
-The package includes `ios/PrivacyInfo.xcprivacy` (no tracking, no tracking domains, `UserDefaults` reason `CA92.1`). Xcode merges it into your app's privacy report.
+The package includes `ios/PrivacyInfo.xcprivacy` (no tracking, no tracking domains, `UserDefaults` reason `CA92.1`, file timestamp reason `C617.1`: the creation date of the app's own Library directory, read as the install time). Xcode merges it into your app's privacy report.
 
 ### App Store: App Privacy answers
 

package/android/build.gradle

@@ -1,7 +1,7 @@
 apply plugin: 'com.android.library'
 
 group = 'app.dl2.reactnative'
-version = '0.1.0'
+version = '0.1.1'
 
 def expoModulesCorePlugin = new File(project(":expo-modules-core").projectDir.absolutePath, "ExpoModulesCorePlugin.gradle")
 apply from: expoModulesCorePlugin
@@ -14,7 +14,7 @@ android {
   namespace "app.dl2.reactnative"
   defaultConfig {
     versionCode 1
-    versionName "0.1.0"
+    versionName "0.1.1"
   }
 }
 

package/android/src/main/java/app/dl2/reactnative/DL2Module.kt

@@ -1,6 +1,7 @@
 package app.dl2.reactnative
 
 import android.content.Context
+import android.content.Intent
 import android.content.SharedPreferences
 import android.os.Build
 import com.android.installreferrer.api.InstallReferrerClient
@@ -14,7 +15,8 @@ import java.util.TimeZone
 import java.util.UUID
 import java.util.concurrent.atomic.AtomicBoolean
 
-// Key-value storage, device info and the Play Install Referrer. Nothing else.
+// Key-value storage, device info, the install time, the launch intent's history flag and the
+// Play Install Referrer. Nothing else.
 class DL2Module : Module() {
   private val context: Context
     get() = appContext.reactContext ?: throw Exceptions.ReactContextLost()
@@ -53,6 +55,20 @@ class DL2Module : Module() {
       )
     }
 
+    // When the app was installed, in ms since epoch. An update keeps it; a reinstall or a
+    // restore onto another device does not.
+    AsyncFunction("getInstalledAt") {
+      val ctx = context
+      ctx.packageManager.getPackageInfo(ctx.packageName, 0).firstInstallTime.toDouble()
+    }
+
+    // True when the activity was reopened from Recents: its intent is the one from the original
+    // launch, so the URL in it was already delivered.
+    AsyncFunction("isLaunchedFromHistory") {
+      val flags = appContext.currentActivity?.intent?.flags ?: 0
+      (flags and Intent.FLAG_ACTIVITY_LAUNCHED_FROM_HISTORY) != 0
+    }
+
     // Resolves with the referrer string, or null when Play has none. Read once, then cached.
     AsyncFunction("getInstallReferrer") { promise: Promise ->
       val cached = prefs.getString(REFERRER_KEY, null)
@@ -66,36 +82,47 @@ class DL2Module : Module() {
           promise.resolve(value)
         }
       }
+      var client: InstallReferrerClient? = null
+      val end = {
+        try {
+          client?.endConnection()
+        } catch (e: Exception) {
+          // already closed
+        }
+      }
       try {
-        val client = InstallReferrerClient.newBuilder(context).build()
-        client.startConnection(object : InstallReferrerStateListener {
+        val c = InstallReferrerClient.newBuilder(context).build()
+        client = c
+        c.startConnection(object : InstallReferrerStateListener {
           override fun onInstallReferrerSetupFinished(responseCode: Int) {
-            var referrer: String? = null
-            try {
-              if (responseCode == InstallReferrerClient.InstallReferrerResponse.OK) {
-                referrer = client.installReferrer?.installReferrer
-                if (referrer != null) {
-                  prefs.edit().putString(REFERRER_KEY, referrer).apply()
-                }
-              }
-            } catch (e: Exception) {
-              referrer = null
-            } finally {
+            // Called on the main thread, and reading the referrer is a call into the Play
+            // Store's process: do it on a thread of its own.
+            Thread {
+              var referrer: String? = null
               try {
-                client.endConnection()
+                if (responseCode == InstallReferrerClient.InstallReferrerResponse.OK) {
+                  referrer = c.installReferrer?.installReferrer
+                  if (referrer != null) {
+                    prefs.edit().putString(REFERRER_KEY, referrer).apply()
+                  }
+                }
               } catch (e: Exception) {
-                // already closed
+                referrer = null
+              } finally {
+                end()
               }
-            }
-            finish(referrer)
+              finish(referrer)
+            }.start()
           }
 
           override fun onInstallReferrerServiceDisconnected() {
+            end()
             finish(null)
           }
         })
       } catch (e: Exception) {
         // No Play Store on this device (emulator image, Huawei, sideloaded build).
+        end()
         finish(null)
       }
     }

package/build/plugin/src/withDL2.d.ts

@@ -51,7 +51,7 @@ export type ExpoConfigLike = {
 };
 /** Validates the plugin options and returns the full host list. Throws with a fix in the message. */
 export declare function normalizeOptions(raw: unknown): NormalizedOptions;
-/** Adds `applinks:` entries, keeping every entry the app already has. */
+/** Adds `applinks:` entries, keeping every entry the app already has exactly as it is. */
 export declare function mergeAssociatedDomains(existing: unknown, domains: string[], developerMode: boolean): string[];
 /** Adds one https intent filter for the hosts that are not covered yet, and one for the scheme. */
 export declare function mergeIntentFilters(existing: unknown, domains: string[], autoVerify: boolean, uriScheme: string | null): IntentFilter[];

package/build/plugin/src/withDL2.js

@@ -94,16 +94,14 @@ function normalizeOptions(raw) {
         uriScheme,
     };
 }
-/** Adds `applinks:` entries, keeping every entry the app already has. */
+/** Adds `applinks:` entries, keeping every entry the app already has exactly as it is. */
 function mergeAssociatedDomains(existing, domains, developerMode) {
     const out = Array.isArray(existing) ? existing.filter((e) => typeof e === "string") : [];
     for (const d of domains) {
-        const wanted = `applinks:${d}${developerMode ? "?mode=developer" : ""}`;
-        const i = out.findIndex((e) => e.split("?")[0].toLowerCase() === `applinks:${d}`);
-        if (i < 0)
-            out.push(wanted);
-        else
-            out[i] = wanted; // same host already listed: only the mode can differ
+        // A host the app already lists keeps its own mode: the option only applies to entries added here.
+        if (out.some((e) => e.split("?")[0].toLowerCase() === `applinks:${d}`))
+            continue;
+        out.push(`applinks:${d}${developerMode ? "?mode=developer" : ""}`);
     }
     return out;
 }
@@ -113,6 +111,11 @@ function list(v) {
 function isBrowsableView(f) {
     return f.action === "VIEW" && list(f.category).indexOf("BROWSABLE") >= 0;
 }
+const RESTRICTIONS = ["port", "path", "pathPrefix", "pathPattern", "pathSuffix", "pathAdvancedPattern", "mimeType"];
+/** Android applies every path, port and type in a filter to all of its hosts, so one of them narrows the whole filter. */
+function isRestricted(f) {
+    return list(f.data).some((d) => RESTRICTIONS.some((k) => d[k] !== undefined && d[k] !== null && d[k] !== ""));
+}
 /** Adds one https intent filter for the hosts that are not covered yet, and one for the scheme. */
 function mergeIntentFilters(existing, domains, autoVerify, uriScheme) {
     const out = Array.isArray(existing) ? existing.slice() : [];
@@ -121,8 +124,10 @@ function mergeIntentFilters(existing, domains, autoVerify, uriScheme) {
     for (const f of out) {
         if (!f || !isBrowsableView(f))
             continue;
+        // A filter limited to some paths does not open every link of the host.
+        const open = !isRestricted(f);
         for (const d of list(f.data)) {
-            if (d.scheme === "https" && typeof d.host === "string" && (!autoVerify || f.autoVerify === true))
+            if (open && d.scheme === "https" && typeof d.host === "string" && (!autoVerify || f.autoVerify === true))
                 covered.add(d.host.toLowerCase());
             if (d.scheme && !d.host)
                 schemes.add(d.scheme);

package/build/src/core.d.ts

@@ -1,5 +1,5 @@
 import type { DL2Config, DL2CreateLinkInput, DL2DebugInfo, DL2Deps, DL2LinkEvent, DL2TrackOptions } from "./types";
-export declare const SDK_VERSION = "0.1.0";
+export declare const SDK_VERSION = "0.1.1";
 type Listener = (event: DL2LinkEvent) => void;
 type Parsed = {
     scheme: string;

package/build/src/core.js

@@ -4,12 +4,15 @@ exports.SDK_VERSION = void 0;
 exports.parseUrl = parseUrl;
 exports.extractClipboardToken = extractClipboardToken;
 exports.createDL2 = createDL2;
-exports.SDK_VERSION = "0.1.0";
+exports.SDK_VERSION = "0.1.1";
 const K_ID = "install_id";
 const K_DONE = "first_launch_done";
 const K_ATTEMPTS = "open_attempts";
 const K_QUEUE = "event_queue";
 const K_REFERRER = "install_referrer";
+const K_INSTALLED_AT = "installed_at";
+// Everything that belongs to one install. Dropped when storage turns out to come from another.
+const INSTALL_KEYS = [K_ID, K_DONE, K_ATTEMPTS, K_QUEUE, K_REFERRER];
 const RESOLVE_TIMEOUT_MS = 3000;
 const EVENT_TIMEOUT_MS = 5000;
 const REFERRER_TIMEOUT_MS = 1500;
@@ -19,6 +22,8 @@ const MAX_PENDING_LINKS = 20;
 const MAX_OPEN_ATTEMPTS = 3;
 const RETRY_BASE_MS = 2000;
 const RETRY_MAX_MS = 300000;
+// The server's longest fingerprint window. An older install can only be matched exactly.
+const MAX_MATCH_WINDOW_MS = 24 * 60 * 60 * 1000;
 function mkErr(code, message, cause, status) {
     const e = { code, message };
     if (cause !== undefined)
@@ -89,11 +94,14 @@ function createDL2(deps) {
     let gen = 0;
     let installId = null;
     let firstLaunch = false;
+    let skipFingerprint = false;
     let storageOk = true;
     let matched = false;
     let info = null;
     let ready = null;
     let initial = null;
+    // The first-launch check that runs beside a launch link in the app's own scheme.
+    let recording = null;
     let sub = null;
     const listeners = new Set();
     let pending = [];
@@ -350,7 +358,7 @@ function createDL2(deps) {
         info = { osVersion: native.osVersion || "", appId: native.appId || "", appVersion: native.appVersion || "", lang: lang || "", tz: tz || "" };
         return info;
     }
-    /** Request body of POST /v1/sdk/open. Every field is always present. */
+    /** Request body of POST /v1/sdk/open. Every field is always present, except skip_fingerprint. */
     async function openBody(extra) {
         const d = await deviceInfo();
         let screen = { w: 0, h: 0, dpr: 1 };
@@ -360,7 +368,7 @@ function createDL2(deps) {
         catch {
             /* keep defaults */
         }
-        return {
+        const body = {
             install_id: installId,
             is_first_launch: firstLaunch,
             platform: deps.platform,
@@ -375,10 +383,14 @@ function createDL2(deps) {
             clipboard_token: extra.clipboard_token || null,
             launch_url: extra.launch_url || null,
         };
+        return skipFingerprint ? { ...body, skip_fingerprint: true } : body;
     }
-    /** True when the server answered, so there is no point asking again on the next launch. */
+    /**
+     * True when the server gave a final answer, so there is no point asking again on the next
+     * launch. A 429 or 5xx is not one: like the native SDKs, the check is tried on a later launch.
+     */
     function answered(e) {
-        return !(isErr(e) && (e.code === "network" || e.code === "timeout"));
+        return !retryable(e);
     }
     async function finishFirstLaunch(serverAnswered) {
         if (!firstLaunch || !storageOk)
@@ -389,7 +401,7 @@ function createDL2(deps) {
             await removeItem(K_ATTEMPTS);
         }
         else {
-            // Offline on first launch: ask again next launch, a few times at most.
+            // Offline or the server is struggling: ask again next launch, a few times at most.
             await setItem(K_ATTEMPTS, String(attempts));
         }
     }
@@ -412,6 +424,15 @@ function createDL2(deps) {
             if (ready)
                 await ready;
             const first = isInitial && firstLaunch;
+            if (source === "uri_scheme") {
+                // The server only knows https links: the event comes from the URL, with no round trip.
+                // On a first launch runInitial() still records the install.
+                if (g !== gen)
+                    return null;
+                const event = toEvent(null, url, source, first);
+                emit(event);
+                return event;
+            }
             let payload = null;
             let ok = false;
             try {
@@ -422,7 +443,7 @@ function createDL2(deps) {
                     ok = true;
                 }
                 else {
-                    payload = await call("/v1/sdk/resolve", { url, source }, RESOLVE_TIMEOUT_MS);
+                    payload = await call("/v1/sdk/resolve", { url, source, install_id: installId }, RESOLVE_TIMEOUT_MS);
                     lastResolveResponse = payload;
                 }
             }
@@ -444,7 +465,32 @@ function createDL2(deps) {
         });
         return lastHandled;
     }
+    /** Install time from the native module, in ms since epoch. Null when it cannot be read. */
+    async function installedAt() {
+        try {
+            const t = deps.native && deps.native.getInstalledAt ? await deps.native.getInstalledAt() : null;
+            return typeof t === "number" && isFinite(t) && t > 0 ? t : null;
+        }
+        catch {
+            return null;
+        }
+    }
     async function init(g) {
+        const installed = await installedAt();
+        // Android backup and device transfer restore the SDK's storage into a new install. The
+        // install time gives that away: start over, or the deferred link is lost and two devices
+        // share one install_id. iOS has no real install time, only a directory date, so it is not
+        // trusted for this.
+        if (installed !== null && deps.platform === "android") {
+            const stamp = await getItem(K_INSTALLED_AT);
+            if (stamp !== null && stamp !== String(installed)) {
+                log("storage was restored from another install: starting fresh");
+                for (const k of INSTALL_KEYS)
+                    await removeItem(k);
+            }
+            if (stamp !== String(installed) && storageOk)
+                await setItem(K_INSTALLED_AT, String(installed));
+        }
         let id = await getItem(K_ID);
         if (!id) {
             try {
@@ -470,8 +516,17 @@ function createDL2(deps) {
         // Without working storage every launch would look like the first one and could claim
         // someone else's link, so deferred matching is skipped.
         firstLaunch = storageOk && !!deps.native && done !== "1";
-        if (Array.isArray(stored))
-            queue = stored.concat(queue).slice(-MAX_QUEUED_EVENTS);
+        // Installed long ago and only now running the SDK (it shipped in an app update): a
+        // fingerprint match could only be somebody else's click. Exact matches still apply.
+        skipFingerprint = installed !== null && now() - installed > MAX_MATCH_WINDOW_MS;
+        if (Array.isArray(stored)) {
+            const old = stored.filter((e) => !!e && typeof e === "object" && typeof e.name === "string");
+            // Events stored by a version that had no event_id get one now.
+            for (const e of old)
+                if (typeof e.event_id !== "string" || !e.event_id)
+                    e.event_id = fallbackUuid(random);
+            queue = old.concat(queue).slice(-MAX_QUEUED_EVENTS);
+        }
         if (!deps.native) {
             report(mkErr("unknown", "DL2 native module not found. Rebuild the app (Expo Go is not supported); deferred links are off."), "configure");
         }
@@ -489,11 +544,37 @@ function createDL2(deps) {
         }
         if (g !== gen || !cfg)
             return null;
+        if (url && deps.platform === "android" && deps.native && deps.native.isLaunchedFromHistory) {
+            // Reopened from Recents after the process died: Android hands back the intent of the
+            // original launch, and its link was already delivered then.
+            try {
+                if (await deps.native.isLaunchedFromHistory())
+                    url = null;
+            }
+            catch {
+                /* unknown: treat the URL as new */
+            }
+            if (g !== gen || !cfg)
+                return null;
+        }
+        const parsed = url ? parseUrl(url) : null;
         const handled = url ? handleUrl(url, true) : undefined;
-        if (handled)
+        if (handled) {
+            if (firstLaunch && parsed && sourceOf(parsed) === "uri_scheme") {
+                // Handled without the server, so the install is recorded by the usual first-launch
+                // call. The app already has its link: a deferred match is not delivered on top of it.
+                recording = firstOpen(g, false).then(() => undefined, (e) => report(e, "configure"));
+            }
             return handled;
+        }
         if (!firstLaunch)
             return null;
+        return firstOpen(g, true);
+    }
+    /** The first-launch POST /v1/sdk/open without a launch URL: records the install and asks for a deferred link. */
+    async function firstOpen(g, deliver) {
+        if (!cfg)
+            return null;
         if (!cfg.deferred) {
             await finishFirstLaunch(true);
             return null;
@@ -518,7 +599,10 @@ function createDL2(deps) {
             ok = true;
             if (g === gen && r && r.match) {
                 matched = true;
-                event = toEvent(r.match, null, "deferred", true);
+                if (deliver)
+                    event = toEvent(r.match, null, "deferred", true);
+                else
+                    log("deferred match not delivered: the app was opened by a link");
             }
         }
         catch (e) {
@@ -559,6 +643,8 @@ function createDL2(deps) {
             // Wait for the launch check so the server knows this install before its first event.
             if (initial)
                 await initial;
+            if (recording)
+                await recording;
             while (queue.length && g === gen && cfg) {
                 const e = queue[0];
                 try {
@@ -694,7 +780,10 @@ function createDL2(deps) {
             if (!p)
                 throw mkErr("link_not_found", "resolve() needs a full URL such as https://myapp.dl2.app/abc");
             const source = sourceOf(p);
-            const payload = await call("/v1/sdk/resolve", { url, source }, RESOLVE_TIMEOUT_MS);
+            // The app's own scheme never reaches the server: it has no such links.
+            if (source === "uri_scheme" && isOurs(p))
+                return toEvent(null, url, source, false);
+            const payload = await call("/v1/sdk/resolve", { url, source, install_id: installId }, RESOLVE_TIMEOUT_MS);
             lastResolveResponse = payload;
             return toEvent(payload, url, source, false);
         });
@@ -706,7 +795,7 @@ function createDL2(deps) {
             if (typeof name !== "string" || !name.trim())
                 throw mkErr("unknown", "track() needs an event name");
             const o = options || {};
-            const e = { name: name.trim() };
+            const e = { event_id: fallbackUuid(random), name: name.trim() };
             if (typeof o.value === "number" && isFinite(o.value))
                 e.value = o.value;
             if (typeof o.currency === "string" && o.currency)
@@ -717,7 +806,9 @@ function createDL2(deps) {
             if (queue.length > MAX_QUEUED_EVENTS)
                 queue.shift(); // bounded: the oldest event goes first
             persistQueue();
-            flush().catch(() => undefined);
+            // While a retry is waiting, the new event goes out with it: the backoff holds.
+            if (!retryTimer)
+                flush().catch(() => undefined);
         });
     }
     function createLink(input) {
@@ -726,7 +817,18 @@ function createDL2(deps) {
                 throw mkErr("not_configured", "Call DL2.configure() before createLink()");
             if (!input || typeof input.path !== "string")
                 throw mkErr("unknown", "createLink() needs a path");
-            const r = await call("/v1/sdk/links", input, EVENT_TIMEOUT_MS);
+            // The API takes the preview fields flat (og_title, …), not as the nested `og` object.
+            const { og, ...rest } = input;
+            const body = { ...rest };
+            if (og && typeof og === "object") {
+                if (og.title)
+                    body.og_title = og.title;
+                if (og.description)
+                    body.og_description = og.description;
+                if (og.image)
+                    body.og_image_url = og.image;
+            }
+            const r = await call("/v1/sdk/links", body, EVENT_TIMEOUT_MS);
             if (!r || typeof r.url !== "string")
                 throw mkErr("unknown", "The server did not return a link URL");
             return { url: r.url };
@@ -779,8 +881,10 @@ function createDL2(deps) {
             cfg = null;
             ready = null;
             initial = null;
+            recording = null;
             installId = null;
             firstLaunch = false;
+            skipFingerprint = false;
             storageOk = true;
             matched = false;
             info = null;
@@ -791,7 +895,7 @@ function createDL2(deps) {
             lastHandled = null;
             lastOpenResponse = null;
             lastResolveResponse = null;
-            for (const k of [K_ID, K_DONE, K_ATTEMPTS, K_QUEUE, K_REFERRER])
+            for (const k of [...INSTALL_KEYS, K_INSTALLED_AT])
                 await removeItem(k);
         });
     }

package/build/src/types.d.ts

@@ -83,6 +83,16 @@ export interface DL2Native {
     /** Android: Play Install Referrer string. iOS: always null. */
     getInstallReferrer(): Promise<string | null>;
     getDeviceInfo(): Promise<DL2DeviceInfo>;
+    /**
+     * When the app was installed, in ms since epoch, or null when unknown. Android: the package's
+     * firstInstallTime. iOS: the creation date of the app's data container.
+     */
+    getInstalledAt?(): Promise<number | null>;
+    /**
+     * Android: true when the activity was reopened from Recents, so its intent (and the URL in it)
+     * is the one from the original launch. iOS does not have it.
+     */
+    isLaunchedFromHistory?(): Promise<boolean>;
     uuid?(): Promise<string>;
 }
 export type DL2FetchResponse = {

package/ios/DL2Module.swift

@@ -1,7 +1,7 @@
 import ExpoModulesCore
 import UIKit
 
-// Key-value storage, device info and the system paste button. Nothing else.
+// Key-value storage, device info, the install time and the system paste button. Nothing else.
 // The clipboard is never read here: text only arrives when the user taps DL2PasteButtonView.
 public class DL2Module: Module {
   private var store: UserDefaults {
@@ -43,6 +43,15 @@ public class DL2Module: Module {
       ]
     }
 
+    // When the app was installed, in ms since epoch. iOS has no API for it; the data
+    // container's Library directory is created with the install. Nil when it cannot be read.
+    AsyncFunction("getInstalledAt") { () -> Double? in
+      guard let dir = FileManager.default.urls(for: .libraryDirectory, in: .userDomainMask).first,
+            let created = (try? FileManager.default.attributesOfItem(atPath: dir.path))?[.creationDate] as? Date
+      else { return nil }
+      return (created.timeIntervalSince1970 * 1000).rounded()
+    }
+
     View(DL2PasteButtonView.self) {
       Events("onPaste")
     }

package/ios/{DL2.podspec → DL2ReactNative.podspec}

@@ -3,7 +3,7 @@ require 'json'
 package = JSON.parse(File.read(File.join(__dir__, '..', 'package.json')))
 
 Pod::Spec.new do |s|
-  s.name           = 'DL2'
+  s.name           = 'DL2ReactNative'
   s.version        = package['version']
   s.summary        = package['description']
   s.description    = package['description']
@@ -18,5 +18,5 @@ Pod::Spec.new do |s|
   s.dependency 'ExpoModulesCore'
 
   s.source_files = '*.swift'
-  s.resource_bundles = { 'DL2_Privacy' => ['PrivacyInfo.xcprivacy'] }
+  s.resource_bundles = { 'DL2ReactNative_Privacy' => ['PrivacyInfo.xcprivacy'] }
 end

package/ios/PrivacyInfo.xcprivacy

@@ -62,6 +62,15 @@
 				<string>CA92.1</string>
 			</array>
 		</dict>
+		<!-- File timestamp: the creation date of the app's own Library directory, read as the install time. -->
+		<dict>
+			<key>NSPrivacyAccessedAPIType</key>
+			<string>NSPrivacyAccessedAPICategoryFileTimestamp</string>
+			<key>NSPrivacyAccessedAPITypeReasons</key>
+			<array>
+				<string>C617.1</string>
+			</array>
+		</dict>
 	</array>
 </dict>
 </plist>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dl2app/react-native",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "DL2App deep links for React Native and Expo: universal links, app links, deferred deep links and events.",
   "license": "MIT",
   "homepage": "https://dl2.app/docs",

package/plugin/src/withDL2.ts

@@ -120,14 +120,13 @@ export function normalizeOptions(raw: unknown): NormalizedOptions {
   };
 }
 
-/** Adds `applinks:` entries, keeping every entry the app already has. */
+/** Adds `applinks:` entries, keeping every entry the app already has exactly as it is. */
 export function mergeAssociatedDomains(existing: unknown, domains: string[], developerMode: boolean): string[] {
   const out: string[] = Array.isArray(existing) ? existing.filter((e): e is string => typeof e === "string") : [];
   for (const d of domains) {
-    const wanted = `applinks:${d}${developerMode ? "?mode=developer" : ""}`;
-    const i = out.findIndex((e) => e.split("?")[0].toLowerCase() === `applinks:${d}`);
-    if (i < 0) out.push(wanted);
-    else out[i] = wanted; // same host already listed: only the mode can differ
+    // A host the app already lists keeps its own mode: the option only applies to entries added here.
+    if (out.some((e) => e.split("?")[0].toLowerCase() === `applinks:${d}`)) continue;
+    out.push(`applinks:${d}${developerMode ? "?mode=developer" : ""}`);
   }
   return out;
 }
@@ -140,6 +139,13 @@ function isBrowsableView(f: IntentFilter): boolean {
   return f.action === "VIEW" && list(f.category).indexOf("BROWSABLE") >= 0;
 }
 
+const RESTRICTIONS = ["port", "path", "pathPrefix", "pathPattern", "pathSuffix", "pathAdvancedPattern", "mimeType"];
+
+/** Android applies every path, port and type in a filter to all of its hosts, so one of them narrows the whole filter. */
+function isRestricted(f: IntentFilter): boolean {
+  return list(f.data).some((d) => RESTRICTIONS.some((k) => d[k] !== undefined && d[k] !== null && d[k] !== ""));
+}
+
 /** Adds one https intent filter for the hosts that are not covered yet, and one for the scheme. */
 export function mergeIntentFilters(existing: unknown, domains: string[], autoVerify: boolean, uriScheme: string | null): IntentFilter[] {
   const out: IntentFilter[] = Array.isArray(existing) ? (existing as IntentFilter[]).slice() : [];
@@ -147,8 +153,10 @@ export function mergeIntentFilters(existing: unknown, domains: string[], autoVer
   const schemes = new Set<string>();
   for (const f of out) {
     if (!f || !isBrowsableView(f)) continue;
+    // A filter limited to some paths does not open every link of the host.
+    const open = !isRestricted(f);
     for (const d of list(f.data)) {
-      if (d.scheme === "https" && typeof d.host === "string" && (!autoVerify || f.autoVerify === true)) covered.add(d.host.toLowerCase());
+      if (open && d.scheme === "https" && typeof d.host === "string" && (!autoVerify || f.autoVerify === true)) covered.add(d.host.toLowerCase());
       if (d.scheme && !d.host) schemes.add(d.scheme);
     }
   }

package/src/core.ts

@@ -11,13 +11,16 @@ import type {
   DL2TrackOptions,
 } from "./types";
 
-export const SDK_VERSION = "0.1.0";
+export const SDK_VERSION = "0.1.1";
 
 const K_ID = "install_id";
 const K_DONE = "first_launch_done";
 const K_ATTEMPTS = "open_attempts";
 const K_QUEUE = "event_queue";
 const K_REFERRER = "install_referrer";
+const K_INSTALLED_AT = "installed_at";
+// Everything that belongs to one install. Dropped when storage turns out to come from another.
+const INSTALL_KEYS = [K_ID, K_DONE, K_ATTEMPTS, K_QUEUE, K_REFERRER];
 
 const RESOLVE_TIMEOUT_MS = 3000;
 const EVENT_TIMEOUT_MS = 5000;
@@ -28,9 +31,13 @@ const MAX_PENDING_LINKS = 20;
 const MAX_OPEN_ATTEMPTS = 3;
 const RETRY_BASE_MS = 2000;
 const RETRY_MAX_MS = 300000;
+// The server's longest fingerprint window. An older install can only be matched exactly.
+const MAX_MATCH_WINDOW_MS = 24 * 60 * 60 * 1000;
 
 type Listener = (event: DL2LinkEvent) => void;
-type QueuedEvent = { name: string; value?: number; currency?: string; props?: Record<string, unknown> };
+// event_id is made once, when the event is queued: a retry of a request that did arrive sends
+// the same id, so the server can count the event once.
+type QueuedEvent = { event_id?: string; name: string; value?: number; currency?: string; props?: Record<string, unknown> };
 type Parsed = { scheme: string; host: string; path: string; params: Record<string, string> };
 type Payload = {
   source?: string;
@@ -123,11 +130,14 @@ export function createDL2(deps: DL2Deps) {
   let gen = 0;
   let installId: string | null = null;
   let firstLaunch = false;
+  let skipFingerprint = false;
   let storageOk = true;
   let matched = false;
   let info: DL2DeviceInfo | null = null;
   let ready: Promise<void> | null = null;
   let initial: Promise<DL2LinkEvent | null> | null = null;
+  // The first-launch check that runs beside a launch link in the app's own scheme.
+  let recording: Promise<void> | null = null;
   let sub: { remove(): void } | null = null;
   const listeners = new Set<Listener>();
   let pending: DL2LinkEvent[] = [];
@@ -373,7 +383,7 @@ export function createDL2(deps: DL2Deps) {
     return info;
   }
 
-  /** Request body of POST /v1/sdk/open. Every field is always present. */
+  /** Request body of POST /v1/sdk/open. Every field is always present, except skip_fingerprint. */
   async function openBody(extra: { install_referrer?: string | null; clipboard_token?: string | null; launch_url?: string | null }) {
     const d = await deviceInfo();
     let screen = { w: 0, h: 0, dpr: 1 };
@@ -382,7 +392,7 @@ export function createDL2(deps: DL2Deps) {
     } catch {
       /* keep defaults */
     }
-    return {
+    const body = {
       install_id: installId,
       is_first_launch: firstLaunch,
       platform: deps.platform,
@@ -397,11 +407,15 @@ export function createDL2(deps: DL2Deps) {
       clipboard_token: extra.clipboard_token || null,
       launch_url: extra.launch_url || null,
     };
+    return skipFingerprint ? { ...body, skip_fingerprint: true } : body;
   }
 
-  /** True when the server answered, so there is no point asking again on the next launch. */
+  /**
+   * True when the server gave a final answer, so there is no point asking again on the next
+   * launch. A 429 or 5xx is not one: like the native SDKs, the check is tried on a later launch.
+   */
   function answered(e: unknown): boolean {
-    return !(isErr(e) && (e.code === "network" || e.code === "timeout"));
+    return !retryable(e);
   }
 
   async function finishFirstLaunch(serverAnswered: boolean) {
@@ -411,7 +425,7 @@ export function createDL2(deps: DL2Deps) {
       await setItem(K_DONE, "1");
       await removeItem(K_ATTEMPTS);
     } else {
-      // Offline on first launch: ask again next launch, a few times at most.
+      // Offline or the server is struggling: ask again next launch, a few times at most.
       await setItem(K_ATTEMPTS, String(attempts));
     }
   }
@@ -432,6 +446,14 @@ export function createDL2(deps: DL2Deps) {
     lastHandled = (async () => {
       if (ready) await ready;
       const first = isInitial && firstLaunch;
+      if (source === "uri_scheme") {
+        // The server only knows https links: the event comes from the URL, with no round trip.
+        // On a first launch runInitial() still records the install.
+        if (g !== gen) return null;
+        const event = toEvent(null, url, source, first);
+        emit(event);
+        return event;
+      }
       let payload: Payload | null = null;
       let ok = false;
       try {
@@ -441,7 +463,7 @@ export function createDL2(deps: DL2Deps) {
           payload = (r && r.match) || null;
           ok = true;
         } else {
-          payload = await call("/v1/sdk/resolve", { url, source }, RESOLVE_TIMEOUT_MS);
+          payload = await call("/v1/sdk/resolve", { url, source, install_id: installId }, RESOLVE_TIMEOUT_MS);
           lastResolveResponse = payload;
         }
       } catch (e) {
@@ -461,7 +483,30 @@ export function createDL2(deps: DL2Deps) {
     return lastHandled;
   }
 
+  /** Install time from the native module, in ms since epoch. Null when it cannot be read. */
+  async function installedAt(): Promise<number | null> {
+    try {
+      const t = deps.native && deps.native.getInstalledAt ? await deps.native.getInstalledAt() : null;
+      return typeof t === "number" && isFinite(t) && t > 0 ? t : null;
+    } catch {
+      return null;
+    }
+  }
+
   async function init(g: number) {
+    const installed = await installedAt();
+    // Android backup and device transfer restore the SDK's storage into a new install. The
+    // install time gives that away: start over, or the deferred link is lost and two devices
+    // share one install_id. iOS has no real install time, only a directory date, so it is not
+    // trusted for this.
+    if (installed !== null && deps.platform === "android") {
+      const stamp = await getItem(K_INSTALLED_AT);
+      if (stamp !== null && stamp !== String(installed)) {
+        log("storage was restored from another install: starting fresh");
+        for (const k of INSTALL_KEYS) await removeItem(k);
+      }
+      if (stamp !== String(installed) && storageOk) await setItem(K_INSTALLED_AT, String(installed));
+    }
     let id = await getItem(K_ID);
     if (!id) {
       try {
@@ -484,7 +529,15 @@ export function createDL2(deps: DL2Deps) {
     // Without working storage every launch would look like the first one and could claim
     // someone else's link, so deferred matching is skipped.
     firstLaunch = storageOk && !!deps.native && done !== "1";
-    if (Array.isArray(stored)) queue = (stored as QueuedEvent[]).concat(queue).slice(-MAX_QUEUED_EVENTS);
+    // Installed long ago and only now running the SDK (it shipped in an app update): a
+    // fingerprint match could only be somebody else's click. Exact matches still apply.
+    skipFingerprint = installed !== null && now() - installed > MAX_MATCH_WINDOW_MS;
+    if (Array.isArray(stored)) {
+      const old = (stored as QueuedEvent[]).filter((e) => !!e && typeof e === "object" && typeof e.name === "string");
+      // Events stored by a version that had no event_id get one now.
+      for (const e of old) if (typeof e.event_id !== "string" || !e.event_id) e.event_id = fallbackUuid(random);
+      queue = old.concat(queue).slice(-MAX_QUEUED_EVENTS);
+    }
     if (!deps.native) {
       report(
         mkErr("unknown", "DL2 native module not found. Rebuild the app (Expo Go is not supported); deferred links are off."),
@@ -503,9 +556,36 @@ export function createDL2(deps: DL2Deps) {
       report(mkErr("unknown", "Linking.getInitialURL failed", e), "configure");
     }
     if (g !== gen || !cfg) return null;
+    if (url && deps.platform === "android" && deps.native && deps.native.isLaunchedFromHistory) {
+      // Reopened from Recents after the process died: Android hands back the intent of the
+      // original launch, and its link was already delivered then.
+      try {
+        if (await deps.native.isLaunchedFromHistory()) url = null;
+      } catch {
+        /* unknown: treat the URL as new */
+      }
+      if (g !== gen || !cfg) return null;
+    }
+    const parsed = url ? parseUrl(url) : null;
     const handled = url ? handleUrl(url, true) : undefined;
-    if (handled) return handled;
+    if (handled) {
+      if (firstLaunch && parsed && sourceOf(parsed) === "uri_scheme") {
+        // Handled without the server, so the install is recorded by the usual first-launch
+        // call. The app already has its link: a deferred match is not delivered on top of it.
+        recording = firstOpen(g, false).then(
+          () => undefined,
+          (e) => report(e, "configure"),
+        );
+      }
+      return handled;
+    }
     if (!firstLaunch) return null;
+    return firstOpen(g, true);
+  }
+
+  /** The first-launch POST /v1/sdk/open without a launch URL: records the install and asks for a deferred link. */
+  async function firstOpen(g: number, deliver: boolean): Promise<DL2LinkEvent | null> {
+    if (!cfg) return null;
     if (!cfg.deferred) {
       await finishFirstLaunch(true);
       return null;
@@ -529,7 +609,8 @@ export function createDL2(deps: DL2Deps) {
       ok = true;
       if (g === gen && r && r.match) {
         matched = true;
-        event = toEvent(r.match, null, "deferred", true);
+        if (deliver) event = toEvent(r.match, null, "deferred", true);
+        else log("deferred match not delivered: the app was opened by a link");
       }
     } catch (e) {
       ok = answered(e);
@@ -567,6 +648,7 @@ export function createDL2(deps: DL2Deps) {
     flushing = (async () => {
       // Wait for the launch check so the server knows this install before its first event.
       if (initial) await initial;
+      if (recording) await recording;
       while (queue.length && g === gen && cfg) {
         const e = queue[0];
         try {
@@ -698,7 +780,9 @@ export function createDL2(deps: DL2Deps) {
       const p = parseUrl(url);
       if (!p) throw mkErr("link_not_found", "resolve() needs a full URL such as https://myapp.dl2.app/abc");
       const source = sourceOf(p);
-      const payload = await call("/v1/sdk/resolve", { url, source }, RESOLVE_TIMEOUT_MS);
+      // The app's own scheme never reaches the server: it has no such links.
+      if (source === "uri_scheme" && isOurs(p)) return toEvent(null, url, source, false);
+      const payload = await call("/v1/sdk/resolve", { url, source, install_id: installId }, RESOLVE_TIMEOUT_MS);
       lastResolveResponse = payload;
       return toEvent(payload, url, source, false);
     });
@@ -709,14 +793,15 @@ export function createDL2(deps: DL2Deps) {
       if (!cfg) throw mkErr("not_configured", "Call DL2.configure() before track()");
       if (typeof name !== "string" || !name.trim()) throw mkErr("unknown", "track() needs an event name");
       const o = options || {};
-      const e: QueuedEvent = { name: name.trim() };
+      const e: QueuedEvent = { event_id: fallbackUuid(random), name: name.trim() };
       if (typeof o.value === "number" && isFinite(o.value)) e.value = o.value;
       if (typeof o.currency === "string" && o.currency) e.currency = o.currency.toUpperCase();
       if (o.props && typeof o.props === "object") e.props = JSON.parse(JSON.stringify(o.props));
       queue.push(e);
       if (queue.length > MAX_QUEUED_EVENTS) queue.shift(); // bounded: the oldest event goes first
       persistQueue();
-      flush().catch(() => undefined);
+      // While a retry is waiting, the new event goes out with it: the backoff holds.
+      if (!retryTimer) flush().catch(() => undefined);
     });
   }
 
@@ -724,7 +809,15 @@ export function createDL2(deps: DL2Deps) {
     return guardAsync("createLink", null, async () => {
       if (!cfg) throw mkErr("not_configured", "Call DL2.configure() before createLink()");
       if (!input || typeof input.path !== "string") throw mkErr("unknown", "createLink() needs a path");
-      const r = await call("/v1/sdk/links", input, EVENT_TIMEOUT_MS);
+      // The API takes the preview fields flat (og_title, …), not as the nested `og` object.
+      const { og, ...rest } = input;
+      const body: Record<string, unknown> = { ...rest };
+      if (og && typeof og === "object") {
+        if (og.title) body.og_title = og.title;
+        if (og.description) body.og_description = og.description;
+        if (og.image) body.og_image_url = og.image;
+      }
+      const r = await call("/v1/sdk/links", body, EVENT_TIMEOUT_MS);
       if (!r || typeof r.url !== "string") throw mkErr("unknown", "The server did not return a link URL");
       return { url: r.url };
     });
@@ -770,8 +863,10 @@ export function createDL2(deps: DL2Deps) {
       cfg = null;
       ready = null;
       initial = null;
+      recording = null;
       installId = null;
       firstLaunch = false;
+      skipFingerprint = false;
       storageOk = true;
       matched = false;
       info = null;
@@ -782,7 +877,7 @@ export function createDL2(deps: DL2Deps) {
       lastHandled = null;
       lastOpenResponse = null;
       lastResolveResponse = null;
-      for (const k of [K_ID, K_DONE, K_ATTEMPTS, K_QUEUE, K_REFERRER]) await removeItem(k);
+      for (const k of [...INSTALL_KEYS, K_INSTALLED_AT]) await removeItem(k);
     });
   }
 

package/src/types.ts

@@ -92,6 +92,16 @@ export interface DL2Native {
   /** Android: Play Install Referrer string. iOS: always null. */
   getInstallReferrer(): Promise<string | null>;
   getDeviceInfo(): Promise<DL2DeviceInfo>;
+  /**
+   * When the app was installed, in ms since epoch, or null when unknown. Android: the package's
+   * firstInstallTime. iOS: the creation date of the app's data container.
+   */
+  getInstalledAt?(): Promise<number | null>;
+  /**
+   * Android: true when the activity was reopened from Recents, so its intent (and the URL in it)
+   * is the one from the original launch. iOS does not have it.
+   */
+  isLaunchedFromHistory?(): Promise<boolean>;
   uuid?(): Promise<string>;
 }