@microsoft/power-apps-native-common 0.1.8

package/lib/module/telemetry/OneDsTelemetryProvider.js

@@ -0,0 +1,271 @@
+"use strict";
+
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+
+import { AppInsightsCore } from '@microsoft/applicationinsights-core-js';
+import { PostChannel } from '@microsoft/1ds-post-js';
+import { generateGuid } from "../utils/GuidUtils.js";
+import { resolvePlatformInfo } from "../utils/PlatformInfoUtils.js";
+/** 1DS Aria project IDs shared by the webplayer and CLI. */
+const AriaProjectIds = {
+  Production: '5c3a61f48d7c4522912765ae7465ab5c-fb3d6606-fe59-4d6b-9bb1-5e993d889672-7138',
+  NonProduction: '3fb21f3df5c44380bf452fd710f4d50c-0e3f82aa-6d27-41d8-b727-c96b28f99992-7504',
+  Mooncake: '1c1d139788f74386bd95e752dd781371-04b4424b-e5c1-46ae-8312-28e9fa5832c0-6923',
+  GccModerate: '0d7685a948a140789ac92933d3dc2d87-2dd0c1ce-8f10-41f0-a70a-2f9e51a851c8-6823',
+  GccHigh: 'd31229fb23b0406790b9332e5f465dfc-a6b19a0e-170d-4570-bda5-f35e3668e162-7067',
+  DoD: '41cc10dad35043adbcdace2896484ab4-5ebbc1d6-04c9-486d-a6b6-e5963cd778da-7542'
+};
+
+/**
+ * Default property-to-column promotion map matching the webplayer convention.
+ * Properties matching these keys are promoted to top-level data columns;
+ * the rest go into the customDimensions JSON blob.
+ */
+const DefaultPropertyToColumn = {
+  apiId: 'apiId',
+  appSequenceNumber: 'appSequenceNumber',
+  duration: 'duration',
+  environmentId: 'environmentId',
+  httpMethod: 'httpMethod',
+  httpStatus: 'httpStatus',
+  operationName: 'operation_Name',
+  playerAppId: 'playerAppId',
+  scenarioGuid: 'scenarioGuid',
+  scenarioName: 'scenarioName',
+  scenarioResult: 'scenarioResult',
+  serverLocation: 'serverLocation',
+  url: 'url',
+  webPlayerUrl: 'webPlayerUrl'
+};
+function resolveInstrumentationKey(clusterCategory) {
+  switch (clusterCategory) {
+    case 'prod':
+    case 'firstrelease':
+    case 'ex':
+    case 'rx':
+      return AriaProjectIds.Production;
+    case 'mooncake':
+      return AriaProjectIds.Mooncake;
+    case 'gov':
+      return AriaProjectIds.GccModerate;
+    case 'high':
+      return AriaProjectIds.GccHigh;
+    case 'dod':
+      return AriaProjectIds.DoD;
+    default:
+      return AriaProjectIds.NonProduction;
+  }
+}
+function resolveCollectorUrl(clusterCategory, telemetryLocation = 'global') {
+  switch (clusterCategory) {
+    case 'mooncake':
+      return 'https://collector.azure.cn/OneCollector/1.0/';
+    case 'gov':
+    case 'high':
+      return 'https://tb.events.data.microsoft.com/OneCollector/1.0/';
+    case 'dod':
+      return 'https://pf.events.data.microsoft.com/OneCollector/1.0/';
+    case 'ex':
+      return 'https://collector.azure.eaglex.ic.gov/OneCollector/1.0/';
+    case 'rx':
+      return 'https://collector.azure.microsoft.scloud/OneCollector/1.0/';
+    default:
+      if (telemetryLocation === 'eu') {
+        return 'https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/';
+      }
+      return 'https://us-mobile.events.data.microsoft.com/OneCollector/1.0/';
+  }
+}
+function resolveAppName(clusterCategory) {
+  switch (clusterCategory) {
+    case 'local':
+    case 'dev':
+    case 'test':
+    case 'preprod':
+      return 'powerappsclientnonprod';
+    default:
+      return 'powerappsclient';
+  }
+}
+export class OneDsTelemetryProvider {
+  defaultProperties = {};
+  constructor(config) {
+    this._sessionId = generateGuid();
+    this.appName = resolveAppName(config.clusterCategory);
+    this.appVersion = config.appVersion ?? '';
+    this.clientType = config.clientType;
+    this.clusterCategory = config.clusterCategory;
+    this.deviceId = config.deviceId ?? 'react-native';
+    this.minSeverity = config.minSeverity ?? 'info';
+    const {
+      osName,
+      osVersion,
+      deviceMake,
+      deviceModel,
+      deviceType,
+      userLocale,
+      userTimeZone
+    } = resolvePlatformInfo();
+    this.osName = osName;
+    this.osVersion = osVersion;
+    this.deviceMake = deviceMake;
+    this.deviceModel = deviceModel;
+    this.deviceType = deviceType;
+    this.userLocale = userLocale;
+    this.userTimeZone = userTimeZone;
+
+    // Merge default promotion map with consumer overrides (overrides win)
+    this.propertyColumnMap = {
+      ...DefaultPropertyToColumn,
+      ...config.propertyColumnMap
+    };
+    if (config.commonProperties) {
+      Object.assign(this.defaultProperties, config.commonProperties);
+    }
+    const postChannel = new PostChannel();
+    const instrumentationKey = config.instrumentationKey ?? resolveInstrumentationKey(config.clusterCategory);
+    const collectorUrl = resolveCollectorUrl(config.clusterCategory, config.telemetryLocation);
+    const coreConfig = {
+      instrumentationKey,
+      channels: [[postChannel]]
+    };
+    coreConfig.extensionConfig = {
+      [postChannel.identifier]: {
+        // Override endpoint explicitly — PostChannel reads overrideEndpointUrl
+        // from its own extensionConfig, not from coreConfig.endpointUrl.
+        overrideEndpointUrl: collectorUrl,
+        // Use React Native's fetch instead of PostChannel's XHR path, which
+        // uses browser-specific CORS and Beacon APIs not available in RN.
+        httpXHROverride: {
+          sendPOST: (payload, oncomplete) => {
+            const headers = {
+              ...(payload.headers ?? {})
+            };
+            fetch(payload.urlString, {
+              method: 'POST',
+              headers,
+              body: typeof payload.data === 'string' ? payload.data : payload.data
+            }).then(async r => {
+              oncomplete(r.status, {});
+            }).catch(err => {
+              console.warn('[OneDsTelemetryProvider] sendPOST FAILED', err);
+              oncomplete(0, {});
+            });
+          }
+        },
+        ...config.channelConfig
+      }
+    };
+    this.core = new AppInsightsCore();
+    this.core.initialize(coreConfig, []);
+    this.core.addTelemetryInitializer(envelope => {
+      const ext = envelope.ext = envelope.ext ?? {};
+      const utc = ext['utc'] = ext['utc'] ?? {};
+      utc['eventFlags'] = (utc['eventFlags'] || 0) | 0x100000;
+      const app = ext['app'] = ext['app'] ?? {};
+      app['sesId'] = this._sessionId;
+      if (this.appVersion) app['ver'] = this.appVersion; // → AppInfo_Version
+      const os = ext['os'] = ext['os'] ?? {};
+      os['name'] = this.osName; // → DeviceInfo_OsName
+      os['ver'] = this.osVersion; // → DeviceInfo_OsVersion
+      // ext.device.make/model → DeviceInfo_Make / DeviceInfo_Model
+      // Note: localId is intentionally omitted — it requires a strict UUID format
+      // and our device_Id column in data carries the same info once resolved.
+      const device = ext['device'] = ext['device'] ?? {};
+      if (this.deviceMake) device['make'] = this.deviceMake;
+      if (this.deviceModel) device['model'] = this.deviceModel;
+      if (this.deviceType) device['deviceClass'] = this.deviceType;
+    });
+  }
+
+  /**
+   * Register a telemetry initializer that runs on every envelope before send.
+   * Use this to add Part A Common Schema extensions (ext.app, ext.web, ext.os, etc.)
+   * that require platform-specific APIs (e.g. browser info, OS info).
+   */
+  addTelemetryInitializer(initializer) {
+    this.core.addTelemetryInitializer(initializer);
+  }
+  track(event) {
+    const allProperties = {
+      ...this.defaultProperties,
+      ...event.properties
+    };
+
+    // Build data object with fixed columns matching webplayer convention
+    const data = {
+      app_Name: this.appName,
+      clientType: this.clientType,
+      clusterCategory: this.clusterCategory,
+      device_Id: this.deviceId,
+      DeviceInfo_Make: this.deviceMake,
+      ...(this.deviceModel ? {
+        DeviceInfo_Model: this.deviceModel
+      } : {}),
+      userLocale: this.userLocale || undefined,
+      userTimeZone: this.userTimeZone || undefined,
+      event_Name: event.eventName,
+      sequenceNumber: event.sequenceNumber,
+      session_Id: this._sessionId,
+      severity: event.severity,
+      timestamp: event.timestamp
+    };
+
+    // User identity promoted to top-level columns directly
+    if (this.userIdentity) {
+      data.objectId = this.userIdentity.objectId;
+      data.tenantId = this.userIdentity.tenantId;
+    }
+    if (event.duration !== undefined) {
+      data.duration = event.duration;
+    }
+
+    // Promote properties matching the column map to top-level data fields
+    // Properties are kept in allProperties so they also appear in customDimensions
+    for (const [propKey, columnName] of Object.entries(this.propertyColumnMap)) {
+      if (propKey in allProperties) {
+        data[columnName] = allProperties[propKey];
+      }
+    }
+
+    // Serialize remaining properties as customDimensions
+    data.customDimensions = JSON.stringify(allProperties);
+    const item = {
+      // 'event' routes all events to the Kusto `event` table.
+      // The actual event name is stored in data.event_Name.
+      name: 'event',
+      time: event.timestamp,
+      baseType: 'custom',
+      data
+    };
+    this.core.track(item);
+  }
+  flush() {
+    return new Promise(resolve => {
+      this.core.flush(true, () => {
+        resolve();
+      });
+    });
+  }
+  teardown() {
+    return new Promise(resolve => {
+      this.core.unload(true, () => {
+        resolve();
+      });
+    });
+  }
+  get sessionId() {
+    return this._sessionId;
+  }
+  set sessionId(value) {
+    this._sessionId = value;
+  }
+  identifyUser(identity) {
+    this.userIdentity = identity;
+  }
+  setDefaultProperty(name, value) {
+    this.defaultProperties[name] = value;
+  }
+}

package/lib/module/telemetry/TelemetrySanitizer.js

@@ -0,0 +1,94 @@
+"use strict";
+
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+
+/**
+ * Utilities for stripping PII and credentials from strings and property bags
+ * before they enter telemetry. All functions are pure and synchronous — safe
+ * to call on the hot path.
+ *
+ * Patterns detected (aligned with the CLI's ScrubUtils / CredScan KB):
+ *   - Email / UPN addresses          → '<upn>'
+ *   - Private IPv4 addresses         → '<private-ip>'
+ *   - URL query strings / fragments  → stripped (may carry tokens/user context)
+ *   - Google API keys (AIza…)        → '<credential>'
+ *   - SAS key sig= parameter         → '<credential>'
+ *   - 256-bit symmetric keys (b64)   → '<credential>'
+ *
+ * Property-bag rules:
+ *   - Keys matching a PII/credential denylist → value replaced with '<redacted>'
+ *   - String values run through sanitizeErrorString
+ */
+
+/** Matches email addresses / UPNs (simplified RFC 5322). */
+const EMAIL_RE = /[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}/g;
+
+/**
+ * Matches private / loopback IPv4 addresses (RFC 1918 + 127.0.0.0/8 +
+ * link-local 169.254.0.0/16).
+ */
+const PRIVATE_IPV4_RE = /\b(?:10\.\d{1,3}\.\d{1,3}\.\d{1,3}|172\.(?:1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3}|192\.168\.\d{1,3}\.\d{1,3}|127\.\d{1,3}\.\d{1,3}\.\d{1,3}|169\.254\.\d{1,3}\.\d{1,3})(:\d+)?\b/g;
+
+/**
+ * Google API key pattern. Aligned with CredScan KB:
+ * https://msazure.visualstudio.com/One/_git/SecEng-CredScan-Core
+ */
+const GOOGLE_API_KEY_RE = /AIza[a-z0-9_\-]{35}/gi;
+
+/**
+ * SAS key sig= parameter. Aligned with CredScan KB (modified for JS):
+ * matches `sig=` or `dsas_secret=` followed by ≥8 non-whitespace chars
+ * (excluding delimiters that would indicate a false positive).
+ */
+const SAS_KEY_SIG_RE = /(?:dsas_secret|sig)=[^#)\(<>\r\n\s'",\\_&]{8}[^#)\(<>\r\n\s'",\\_&]*/gi;
+
+/**
+ * 256-bit symmetric key in base64 (43 base64url chars + `=` pad).
+ * Aligned with CredScan KB SymmKey256 pattern.
+ */
+const SYMM_KEY_256_RE = /[a-z0-9/+]{43}=/gi;
+
+/**
+ * Property key patterns that must never appear as telemetry values.
+ * Checked case-insensitively against the full key name.
+ */
+const SENSITIVE_KEY_RE = /password|secret|token|credential|auth(?:orization)?|bearer|apikey|api[_-]key|upn|email|username|accesstoken|refreshtoken|idtoken/i;
+
+/**
+ * Redacts PII and credentials from a string.
+ * Safe to use on error messages, URL paths, and arbitrary text.
+ */
+export function sanitizeErrorString(raw) {
+  return raw.replace(EMAIL_RE, '<upn>').replace(PRIVATE_IPV4_RE, (_, port) => port ? `<private-ip>${port}` : '<private-ip>').replace(GOOGLE_API_KEY_RE, '<credential>').replace(SAS_KEY_SIG_RE, '<credential>').replace(SYMM_KEY_256_RE, '<credential>');
+}
+
+/**
+ * Strips the query string and URL fragment from a URL string, then redacts any
+ * PII/credentials in the remaining path.
+ */
+export function sanitizeUrl(url) {
+  const withoutQuery = url.replace(/[?#].*/, '');
+  return sanitizeErrorString(withoutQuery);
+}
+
+/**
+ * Returns a copy of `props` with PII and credentials scrubbed:
+ *   - Keys matching SENSITIVE_KEY_RE → value replaced with '<redacted>'
+ *   - String values run through sanitizeErrorString
+ *   - Non-string primitives passed through unchanged
+ */
+export function sanitizeProperties(props) {
+  const result = {};
+  for (const [key, value] of Object.entries(props)) {
+    if (SENSITIVE_KEY_RE.test(key)) {
+      result[key] = '<redacted>';
+    } else if (typeof value === 'string') {
+      result[key] = sanitizeErrorString(value);
+    } else {
+      result[key] = value;
+    }
+  }
+  return result;
+}

package/lib/module/telemetry/TelemetryTypes.js

@@ -0,0 +1,25 @@
+"use strict";
+
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+
+/** Canonical 1DS event names matching webplayer conventions. */
+export const TelemetryEventNames = {
+  Activity: 'PowerAppsClient.Activity',
+  Error: 'PowerAppsClient.Error',
+  StartScenario: 'PowerAppsClient.StartScenario',
+  EndScenario: 'PowerAppsClient.EndScenario'
+};
+export const ScenarioResults = {
+  Success: 'Success',
+  Failed: 'Failed',
+  SuccessWithErrors: 'SuccessWithErrors'
+};
+
+/** Telemetry data residency location. EU routes to eu-mobile collector. */
+
+/**
+ * Structural type for the 1DS telemetry envelope passed to telemetry initializers.
+ * Decouples consumers from the internal `ITelemetryItem` type.
+ */

package/lib/module/telemetry/resolveTelemetryLocation.js

@@ -0,0 +1,38 @@
+"use strict";
+
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+
+/**
+ * Power Platform BAP environment `location` field values that fall under the
+ * EU data boundary. Mirrors `EUGeoRegions` from the CLI's `Logger/Constants.ts`.
+ *
+ * Source: `metadata.properties.location` in the BAP Get Environments API response.
+ */
+const EU_BAP_LOCATIONS = new Set(['europe', 'france', 'germany', 'italy', 'poland', 'norway', 'sweden', 'switzerland', 'unitedkingdom']);
+
+/**
+ * Resolve the 1DS telemetry collector location from a Power Platform BAP
+ * environment `location` string (`environment.properties.location`).
+ * Returns `'eu'` when the location maps to the EU data boundary, routing
+ * telemetry to `eu-mobile.events.data.microsoft.com` instead of the global
+ * US collector.
+ *
+ * Mirrors the CLI's detection in `CliLogger.ts`:
+ * ```
+ * if (metadata?.properties?.location && EUGeoRegions.has(metadata.properties.location)) {
+ *   telemetryLocation = 'eu';
+ * }
+ * ```
+ *
+ * @example
+ * resolveTelemetryLocation('europe')        // → 'eu'
+ * resolveTelemetryLocation('unitedkingdom') // → 'eu'
+ * resolveTelemetryLocation('italy')         // → 'eu'
+ * resolveTelemetryLocation('unitedstates')  // → 'global'
+ */
+export function resolveTelemetryLocation(input) {
+  if (!input) return 'global';
+  return EU_BAP_LOCATIONS.has(input.trim().toLowerCase()) ? 'eu' : 'global';
+}

package/lib/module/telemetry/stringifyError.js

@@ -0,0 +1,28 @@
+"use strict";
+
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+
+import { sanitizeErrorString } from "./TelemetrySanitizer.js";
+
+/**
+ * Converts an unknown thrown value to a string suitable for telemetry.
+ * PII (email addresses, private IPv4 addresses) is redacted before the
+ * string is returned.
+ */
+export function stringifyError(error) {
+  let raw;
+  if (error instanceof Error) {
+    raw = `${error.name}: ${error.message}${error.stack ? `\n${error.stack}` : ''}`;
+  } else if (typeof error === 'string') {
+    raw = error;
+  } else {
+    try {
+      raw = JSON.stringify(error);
+    } catch {
+      raw = String(error);
+    }
+  }
+  return sanitizeErrorString(raw);
+}

package/lib/module/telemetry/suppressKnownWarnings.js

@@ -0,0 +1,25 @@
+"use strict";
+
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+
+import { LogBox } from 'react-native';
+
+/**
+ * Suppresses known noisy LogBox warnings that originate from third-party
+ * packages and are not actionable in a React Native context.
+ *
+ * Call once at app startup (e.g. in the root `_layout.tsx` or `App.tsx`)
+ * before rendering any UI.
+ *
+ * **Why these warnings appear:**
+ * - `"Deprecated API for given entry type."` — emitted by React Native's
+ *   Performance API when a caller requests an entry type (e.g. `"navigation"`,
+ *   `"resource"`) that only exists in the browser W3C spec. The
+ *   `@microsoft/power-apps` package calls `getEntriesByType('navigation')` for
+ *   app-load telemetry; on React Native the call returns `[]` harmlessly.
+ */
+export function suppressKnownWarnings() {
+  LogBox.ignoreLogs(['Deprecated API for given entry type.']);
+}

package/lib/module/types/ClusterCategory.js

@@ -0,0 +1,49 @@
+"use strict";
+
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+
+/**
+ * Identifies the Power Platform cluster environment category.
+ * Used to resolve telemetry endpoints, instrumentation keys, and collector URLs.
+ *
+ * This is the **normalised** internal form used by telemetry providers.
+ * The raw `region` string from power.config.json may differ — use
+ * `regionToClusterCategory()` to convert before passing here.
+ *
+ * Canonical power.config.json `region` values → ClusterCategory mapping:
+ *   preview     → prod
+ *   gccmoderate → gov
+ *   gcchigh     → high
+ *   (all others are identity mappings)
+ */
+
+/**
+ * All valid `region` strings accepted in power.config.json.
+ * Mirrors the `Region` type from `@microsoft/power-apps-common/services`.
+ */
+export const Regions = ['local', 'dev', 'test', 'preprod', 'preview', 'prod', 'firstrelease', 'gccmoderate', 'gcchigh', 'dod', 'mooncake', 'ex', 'rx'];
+/**
+ * Normalise a power.config.json `region` string to the internal
+ * `ClusterCategory` used by telemetry providers.
+ *
+ * Mirrors the CLI's `regionToClusterCategory` in OneDSWriter.ts:
+ *   preview     → prod       (preview ring uses production telemetry)
+ *   gccmoderate → gov        (GCC Moderate sovereign cloud)
+ *   gcchigh     → high       (GCC High sovereign cloud)
+ *   firstrelease → firstrelease (first-release prod ring)
+ *   all others  → identity
+ */
+export function regionToClusterCategory(region) {
+  switch (region) {
+    case 'preview':
+      return 'prod';
+    case 'gccmoderate':
+      return 'gov';
+    case 'gcchigh':
+      return 'high';
+    default:
+      return region;
+  }
+}

package/lib/module/utils/DeviceIdUtils.js

@@ -0,0 +1,62 @@
+"use strict";
+
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+
+import * as Application from 'expo-application';
+import * as SecureStore from 'expo-secure-store';
+import { Platform } from 'react-native';
+import { generateGuid } from "./GuidUtils.js";
+
+// Fallback key used when the platform native ID is unavailable.
+// Only alphanumeric, dots, hyphens, and underscores are valid for SecureStore.
+const DEVICE_ID_FALLBACK_KEY = 'microsoft.power-apps-native-common.device_id';
+
+/**
+ * Returns a stable device identifier, preferring platform-native IDs that
+ * survive app reinstalls:
+ *
+ * - **iOS**: `getIosIdForVendorAsync()` (IDFV) — stable while ≥1 app from the
+ *   same vendor bundle prefix is installed. Resets only when ALL vendor apps
+ *   are removed.
+ * - **Android**: `getAndroidId()` (SSAID) — scoped to the app signing key on
+ *   Android 8+; survives reinstalls as long as the signing key is unchanged.
+ *
+ * If the platform API returns null (rare edge cases: first boot, some emulators)
+ * the function falls back to a UUID persisted in `expo-secure-store`, which on
+ * iOS survives reinstalls via the Keychain and on Android is per-install only.
+ *
+ * Pass the resolved value to `OneDsTelemetryProviderConfig.deviceId` at startup.
+ *
+ * @example
+ * ```ts
+ * import { resolveDeviceId, OneDsTelemetryProvider } from '@microsoft/power-apps-native-common';
+ *
+ * const deviceId = await resolveDeviceId();
+ * const telemetry = new OneDsTelemetryProvider({ deviceId, ... });
+ * ```
+ */
+export async function resolveDeviceId() {
+  if (Platform.OS === 'ios') {
+    const idfv = await Application.getIosIdForVendorAsync();
+    if (idfv) {
+      return idfv;
+    }
+  } else if (Platform.OS === 'android') {
+    const androidId = Application.getAndroidId();
+    if (androidId) {
+      return androidId;
+    }
+  }
+
+  // Fallback: stable UUID in SecureStore (iOS: survives reinstall via Keychain;
+  // Android: per-install only, but only reached when SSAID is unavailable).
+  const existing = await SecureStore.getItemAsync(DEVICE_ID_FALLBACK_KEY);
+  if (existing) {
+    return existing;
+  }
+  const id = generateGuid();
+  await SecureStore.setItemAsync(DEVICE_ID_FALLBACK_KEY, id);
+  return id;
+}

package/lib/module/utils/GuidUtils.js

@@ -0,0 +1,19 @@
+"use strict";
+
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+
+// Must be imported before 'uuid' so that the crypto.getRandomValues polyfill is
+// in place when uuid initialises on Hermes/JSC (React Native).
+import 'react-native-get-random-values';
+import { v4 as uuidv4 } from 'uuid';
+
+/**
+ * Generates a RFC-4122 v4 GUID/UUID string.
+ * Uses the `uuid` package (backed by `react-native-get-random-values` on RN)
+ * instead of `crypto.randomUUID()` which is unavailable in Hermes/JSC.
+ */
+export function generateGuid() {
+  return uuidv4();
+}

package/lib/module/utils/PlatformInfoUtils.js

@@ -0,0 +1,55 @@
+"use strict";
+
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+
+import * as Device from 'expo-device';
+import { Platform } from 'react-native';
+// Maps expo-device DeviceType numeric enum to a readable string.
+const DEVICE_TYPE_LABEL = {
+  0: 'Unknown',
+  1: 'Phone',
+  2: 'Tablet',
+  3: 'Desktop',
+  4: 'TV'
+};
+
+/**
+ * Resolves 1DS Part A Common Schema device/OS/locale values using `expo-device`
+ * and the Intl API. Provides more accurate data than raw Platform.constants:
+ *
+ * - Correctly returns `'iPadOS'` for iPad (not `'iOS'`).
+ * - Returns human-friendly `modelName` (e.g. `'iPhone 16 Pro'`, `'Pixel 9'`).
+ * - Returns proper `manufacturer` (e.g. `'Apple'`, `'Google'`, `'Samsung'`).
+ * - Includes form-factor `deviceType` (Phone / Tablet / Desktop / TV).
+ *
+ * Safe to call once at provider construction time — all values are stable for
+ * the lifetime of the process.
+ */
+export function resolvePlatformInfo() {
+  // expo-device returns 'iOS' or 'iPadOS' on Apple platforms.
+  // On Android, osName maps to Build.VERSION.BASE_OS which can be a build
+  // fingerprint on some OEMs, so we always use the literal 'Android' there.
+  const osName = Platform.OS === 'ios' ? Device.osName ?? 'iOS' : 'Android';
+  const osVersion = Device.osVersion ?? String(Platform.Version);
+  const deviceMake = Device.manufacturer ?? (Platform.OS === 'ios' ? 'Apple' : '');
+  const deviceModel = Device.modelName ?? '';
+  const deviceType = DEVICE_TYPE_LABEL[Device.deviceType ?? 0] ?? 'Unknown';
+  let userLocale = '';
+  let userTimeZone = '';
+  try {
+    const dtf = Intl.DateTimeFormat().resolvedOptions();
+    userLocale = dtf.locale;
+    userTimeZone = dtf.timeZone;
+  } catch {/* Intl unavailable — leave empty */}
+  return {
+    osName,
+    osVersion,
+    deviceMake,
+    deviceModel,
+    deviceType,
+    userLocale,
+    userTimeZone
+  };
+}