@koolbase/react-native 9.0.0 → 9.1.0

package/README.md

@@ -897,14 +897,17 @@ await Koolbase.messaging.registerToken({
   token: fcmToken,
   platform: 'android', // or 'ios'
 });
+```
 
-// Send to a specific device
-await Koolbase.messaging.send({
-  to: deviceToken,
-  title: 'Your order is ready',
-  body: 'Pick up at counter 3',
-  data: { order_id: '123' },
-});
+Sending is server-initiated — from your backend or a Koolbase Function with a
+secret `kb_live_` key, never the app (the publishable key ships in your bundle
+and can't send). See the [Cloud Messaging docs](https://docs.koolbase.com/sdk/messaging).
+
+```bash
+curl -X POST https://api.koolbase.com/v1/messaging/send \
+  -H "Authorization: Bearer kb_live_..." \
+  -H "Content-Type: application/json" \
+  --data '{"project_id":"...","token":"...","title":"Your order is ready","body":"Pick up at counter 3"}'
 ```
 
 ---

package/dist/analytics.d.ts

@@ -21,6 +21,4 @@ export declare class KoolbaseAnalytics {
     reset(): void;
     flush(): Promise<void>;
     dispose(): Promise<void>;
-    private getOrCreateDeviceId;
-    private generateUUID;
 }

package/dist/analytics.js

@@ -1,11 +1,8 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.KoolbaseAnalytics = void 0;
-const async_storage_1 = __importDefault(require("@react-native-async-storage/async-storage"));
 const react_native_1 = require("react-native");
+const device_id_1 = require("./device-id");
 // ─── KoolbaseAnalytics ───────────────────────────────────────────────────────
 const SDK_VERSION = '1.3.0';
 const DEVICE_ID_KEY = 'koolbase:device_id';
@@ -25,7 +22,7 @@ class KoolbaseAnalytics {
     async init(appVersion) {
         if (this.initialized)
             return;
-        this.deviceId = await this.getOrCreateDeviceId();
+        this.deviceId = await (0, device_id_1.getOrCreateDeviceId)();
         this.sessionId = `${this.deviceId}-${Date.now()}`;
         this.appVersion = appVersion ?? '1.0.0';
         // Auto flush on app background
@@ -113,26 +110,5 @@ class KoolbaseAnalytics {
         this.track('session_end');
         await this.flush();
     }
-    // ─── Device ID ────────────────────────────────────────────────────────────
-    async getOrCreateDeviceId() {
-        try {
-            const existing = await async_storage_1.default.getItem(DEVICE_ID_KEY);
-            if (existing)
-                return existing;
-            const newId = this.generateUUID();
-            await async_storage_1.default.setItem(DEVICE_ID_KEY, newId);
-            return newId;
-        }
-        catch {
-            return this.generateUUID();
-        }
-    }
-    generateUUID() {
-        return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, (c) => {
-            const r = (Math.random() * 16) | 0;
-            const v = c === 'x' ? r : (r & 0x3) | 0x8;
-            return v.toString(16);
-        });
-    }
 }
 exports.KoolbaseAnalytics = KoolbaseAnalytics;

package/dist/device-id.d.ts

@@ -0,0 +1 @@
+export declare function getOrCreateDeviceId(): Promise<string>;

package/dist/device-id.js

@@ -0,0 +1,60 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOrCreateDeviceId = getOrCreateDeviceId;
+const async_storage_1 = __importDefault(require("@react-native-async-storage/async-storage"));
+// Single source of the anonymous device identifier for the whole SDK.
+// Generated once, persisted, and shared by messaging (registration keying),
+// feature flags (rollout bucketing: stableHash(deviceId + ":" + key) % 100),
+// code push (targeting), and analytics. Previously each subsystem was handed a
+// hardcoded 'rn-device' literal, so every RN device collided on one messaging
+// registration row and bucketed identically for every rollout — a 10% flag was
+// on for everyone or no one, never 10%.
+//
+// The id is anonymous, not a secret: what matters is uniform DISTRIBUTION so
+// hash(id) % 100 is even, not unpredictability. We use crypto.getRandomValues
+// when the runtime provides it (best distribution, no modulo bias) and fall
+// back to Math.random otherwise — mirroring the runtime-guarded crypto use
+// already in code-push.ts, and adding no dependency (per the SDK's stated
+// preference against a crypto-grade UUID dependency for non-security ids).
+const DEVICE_ID_KEY = 'koolbase:device_id';
+let _cached = null;
+async function getOrCreateDeviceId() {
+    if (_cached)
+        return _cached;
+    try {
+        const existing = await async_storage_1.default.getItem(DEVICE_ID_KEY);
+        if (existing) {
+            _cached = existing;
+            return existing;
+        }
+        const newId = generateUUID();
+        await async_storage_1.default.setItem(DEVICE_ID_KEY, newId);
+        _cached = newId;
+        return newId;
+    }
+    catch {
+        // Storage unavailable — return an ephemeral (unpersisted) id so the SDK
+        // stays functional rather than throwing. Not stable across launches.
+        return generateUUID();
+    }
+}
+// UUID v4. Uses crypto.getRandomValues where available for uniform,
+// modulo-bias-free bytes; Math.random fallback keeps it dependency-free.
+function generateUUID() {
+    const bytes = new Uint8Array(16);
+    const c = typeof crypto !== 'undefined' ? crypto : undefined;
+    if (c && typeof c.getRandomValues === 'function') {
+        c.getRandomValues(bytes);
+    }
+    else {
+        for (let i = 0; i < 16; i++)
+            bytes[i] = (Math.random() * 256) | 0;
+    }
+    bytes[6] = (bytes[6] & 0x0f) | 0x40; // version 4
+    bytes[8] = (bytes[8] & 0x3f) | 0x80; // variant
+    const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}

package/dist/index.d.ts

@@ -4,7 +4,7 @@ import { KoolbaseAnalytics } from './analytics';
 import { KoolbaseMessaging } from './messaging';
 export { KoolbaseMessaging } from './messaging';
 export { KoolbaseAppleAuth } from './apple-auth';
-export type { RegisterTokenOptions, SendOptions } from './messaging';
+export type { RegisterTokenOptions } from './messaging';
 import { FlowResult } from './logic-engine';
 export { KoolbaseAnalytics } from './analytics';
 export type { FlowResult } from './logic-engine';

package/dist/index.js

@@ -13,12 +13,8 @@ var __createBinding = (this && this.__createBinding) || (Object.create ? (functi
 var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SmsConfigMissingError = exports.PhoneAlreadyLinkedError = exports.OtpRateLimitError = exports.OtpMaxAttemptsError = exports.OtpInvalidError = exports.OtpExpiredError = exports.InvalidPhoneNumberError = exports.NetworkError = exports.RateLimitError = exports.UnlockTokenInvalidError = exports.AccountLockedError = exports.TokenRevokedError = exports.SessionExpiredError = exports.WeakPasswordError = exports.UserDisabledError = exports.EmailAlreadyInUseError = exports.InvalidCredentialsError = exports.KoolbaseAuthError = exports.SecureAuthStorage = exports.RestoreResult = exports.koolbaseSdkVersion = exports.Koolbase = exports.KoolbaseStorage = exports.KoolbaseRealtime = exports.KoolbaseFunctions = exports.KoolbaseFlags = exports.KoolbaseDatabase = exports.KoolbaseAuth = exports.KoolbaseCodePush = exports.KoolbaseAnalytics = exports.KoolbaseAppleAuth = exports.KoolbaseMessaging = void 0;
-const async_storage_1 = __importDefault(require("@react-native-async-storage/async-storage"));
 const auth_1 = require("./auth");
 Object.defineProperty(exports, "KoolbaseAuth", { enumerable: true, get: function () { return auth_1.KoolbaseAuth; } });
 const code_push_1 = require("./code-push");
@@ -43,6 +39,7 @@ const realtime_1 = require("./realtime");
 Object.defineProperty(exports, "KoolbaseRealtime", { enumerable: true, get: function () { return realtime_1.KoolbaseRealtime; } });
 const storage_1 = require("./storage");
 Object.defineProperty(exports, "KoolbaseStorage", { enumerable: true, get: function () { return storage_1.KoolbaseStorage; } });
+const device_id_1 = require("./device-id");
 __exportStar(require("./types"), exports);
 __exportStar(require("./auth-errors"), exports);
 __exportStar(require("./database-errors"), exports);
@@ -72,13 +69,16 @@ exports.Koolbase = {
         _storage = new storage_1.KoolbaseStorage(config, () => _auth?.validAccessToken() ?? Promise.resolve(null));
         _realtime = new realtime_1.KoolbaseRealtime(config, () => _auth?.validAccessToken() ?? Promise.resolve(null));
         _functions = new functions_1.KoolbaseFunctions(config, () => _auth?.validAccessToken() ?? Promise.resolve(null));
-        _flags = new flags_1.KoolbaseFlags(config, 'rn-device');
+        // One anonymous device id for the whole SDK — bucketing (flags), targeting
+        // (code push), and registration keying (messaging) must all agree on it.
+        const deviceId = await (0, device_id_1.getOrCreateDeviceId)();
+        _flags = new flags_1.KoolbaseFlags(config, deviceId);
         _codePush = new code_push_1.KoolbaseCodePush(config, config.codePushChannel ?? 'stable');
         // Initialize code push — loads cached bundle then checks in background
         await _codePush.init({
             appVersion: '1.0.0', // override with your app version
             platform: 'react-native',
-            deviceId: 'rn-device',
+            deviceId,
         });
         // Initialize analytics
         if (config.analyticsEnabled !== false) {
@@ -88,8 +88,7 @@ exports.Koolbase = {
         // Initialize messaging
         if (config.messagingEnabled !== false) {
             _messaging = new messaging_1.KoolbaseMessaging(config);
-            const storedDeviceId = await async_storage_1.default.getItem('koolbase:device_id');
-            _messaging.setDeviceId(storedDeviceId ?? 'rn-device');
+            _messaging.setDeviceId(deviceId);
         }
         _initialized = true;
     },

package/dist/messaging.d.ts

@@ -4,17 +4,10 @@ export interface RegisterTokenOptions {
     platform: 'android' | 'ios';
     userId?: string;
 }
-export interface SendOptions {
-    to: string;
-    title: string;
-    body: string;
-    data?: Record<string, unknown>;
-}
 export declare class KoolbaseMessaging {
     private config;
     private deviceId;
     constructor(config: KoolbaseConfig);
     setDeviceId(deviceId: string): void;
     registerToken(options: RegisterTokenOptions): Promise<boolean>;
-    send(options: SendOptions): Promise<boolean>;
 }

package/dist/messaging.js

@@ -32,27 +32,5 @@ class KoolbaseMessaging {
             return false;
         }
     }
-    // ─── Send notification ────────────────────────────────────────────────────
-    async send(options) {
-        try {
-            const response = await fetch(`${this.config.baseUrl}/v1/messaging/send`, {
-                method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                    'x-api-key': this.config.publicKey,
-                },
-                body: JSON.stringify({
-                    token: options.to,
-                    title: options.title,
-                    body: options.body,
-                    data: options.data ?? {},
-                }),
-            });
-            return response.ok;
-        }
-        catch {
-            return false;
-        }
-    }
 }
 exports.KoolbaseMessaging = KoolbaseMessaging;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@koolbase/react-native",
-  "version": "9.0.0",
+  "version": "9.1.0",
   "description": "React Native SDK for Koolbase — auth, database, storage, realtime, feature flags, and functions in one package.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",