@qafka/react-native 2.8.1 → 2.8.2

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.ht
 
 ## [Unreleased]
 
+## [2.8.2] — 2026-11-12
+
+### Fixed
+
+- Android emulator in development builds: initialization failed with `Attestation failed: 401 — Root certificate is not a Google attestation root`, because emulators report Android 8+ but have no hardware-backed keystore. In development builds (`__DEV__`) the SDK now detects the emulator and continues without attestation, the same way it already does on the iOS simulator. Use a TEST API key there; PRODUCTION keys still require an attested session. Release builds are unchanged and keep attesting on every device. Requires a native rebuild.
+
 ## [2.8.1] — 2026-10-06
 
 ### Added

package/android/src/main/java/com/qafka/attestation/QafkaAttestationModule.kt

@@ -27,9 +27,31 @@ class QafkaAttestationModule(reactContext: ReactApplicationContext) :
             "bundleId" to bundleId,
             "appVersion" to appVersion,
             "deviceModel" to deviceModel,
+            "isEmulator" to isEmulator(),
         )
     }
 
+    // Emulators have no TEE, so their attestation chain is rooted in a
+    // software root that the backend rejects. JS uses this only in
+    // development builds to fall back to the unsupported-device path.
+    private fun isEmulator(): Boolean {
+        val fingerprint = Build.FINGERPRINT ?: ""
+        val hardware = Build.HARDWARE ?: ""
+        val product = Build.PRODUCT ?: ""
+        val model = Build.MODEL ?: ""
+        return fingerprint.startsWith("generic") ||
+            fingerprint.startsWith("unknown") ||
+            fingerprint.contains("emulator") ||
+            hardware == "goldfish" ||
+            hardware == "ranchu" ||
+            product.startsWith("sdk") ||
+            product.contains("_sdk") ||
+            product.contains("emulator") ||
+            product.contains("simulator") ||
+            model.contains("Emulator") ||
+            model.contains("Android SDK built for")
+    }
+
     @ReactMethod
     fun isSupported(promise: Promise) {
         // Key Attestation requires Android 8.0+ (API 26) for hardware-backed

package/dist/native/QafkaAttestation.d.ts

@@ -14,6 +14,11 @@ export interface QafkaDeviceInfo {
  */
 export declare function getDeviceInfo(): QafkaDeviceInfo;
 export declare function isAttestationAvailable(): boolean;
+/**
+ * True when the native module reports an Android emulator. iOS simulators
+ * already report `isSupported() === false`, so they never need this flag.
+ */
+export declare function isEmulator(): boolean;
 export declare function isSupported(): Promise<boolean>;
 export declare function generateKey(): Promise<string>;
 export declare function attestKey(keyId: string, challengeBase64: string): Promise<string>;

package/dist/native/QafkaAttestation.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Platform = void 0;
 exports.getDeviceInfo = getDeviceInfo;
 exports.isAttestationAvailable = isAttestationAvailable;
+exports.isEmulator = isEmulator;
 exports.isSupported = isSupported;
 exports.generateKey = generateKey;
 exports.attestKey = attestKey;
@@ -31,6 +32,14 @@ function getDeviceInfo() {
 function isAttestationAvailable() {
     return NativeAttestation !== null;
 }
+/**
+ * True when the native module reports an Android emulator. iOS simulators
+ * already report `isSupported() === false`, so they never need this flag.
+ */
+function isEmulator() {
+    const mod = react_native_1.NativeModules.QafkaAttestation;
+    return mod?.isEmulator === true;
+}
 async function isSupported() {
     if (!NativeAttestation)
         return false;

package/dist/services/AttestationManager.js

@@ -74,12 +74,18 @@ class AttestationManager {
         // is essential for diagnosing release-build failures where the JS-side
         // error overlay only shows a generic "App configuration error".
         this.log(`[Qafka:init] platform=${react_native_1.Platform.OS} moduleLinked=${moduleLinked}`, `[Qafka:init] platform=${react_native_1.Platform.OS} url=${this.config.apiUrl} moduleLinked=${moduleLinked}`);
-        const supported = await NativeAttestation.isSupported();
-        this.log(`[Qafka:init] isSupported=${supported}`);
+        // Android emulators report Android 8+ but cannot produce a Google-rooted
+        // attestation. Only development builds treat them as unsupported; release
+        // builds keep attesting so an emulator is never let through unverified.
+        const devEmulator = __DEV__ && react_native_1.Platform.OS === 'android' && NativeAttestation.isEmulator();
+        const supported = devEmulator ? false : await NativeAttestation.isSupported();
+        this.log(`[Qafka:init] isSupported=${supported} devEmulator=${devEmulator}`);
         if (!supported) {
             const reason = !moduleLinked
                 ? `the QafkaAttestation native module is not registered (rebuild your app after installing the SDK)`
-                : `this device does not support attestation (Android 8.0+ / iOS 14+ required)`;
+                : devEmulator
+                    ? `Android emulators cannot produce hardware-backed attestation; use a TEST API key`
+                    : `this device does not support attestation (Android 8.0+ / iOS 14+ required)`;
             if (__DEV__) {
                 console.warn(`[Qafka] Attestation unavailable in this dev environment (${reason}). ` +
                     `Continuing without it; see the Qafka docs for local development setup.`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qafka/react-native",
-  "version": "2.8.1",
+  "version": "2.8.2",
   "description": "Drop-in AI assistant for React Native: chat, voice, and tool execution with screen-aware navigation.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",