@sanctum-key/react-native-sdk 1.0.60 → 1.0.62

package/README.md

@@ -12,6 +12,7 @@ A comprehensive React Native SDK for identity verification (KYC — Know Your Cu
 ✅ **File Upload** with validation  
 ✅ **Custom Overlays** and instructions  
 ✅ **Permission Management** with graceful fallbacks  
+✅ **Device Integrity Checks** for rooted/jailbroken devices, developer mode, and emulators
 ✅ **Multi-Platform Support** (iOS, Android, Web)  
 ✅ **TypeScript Support** with full type definitions  
 ✅ **Expo Config Plugin** for easy setup  
@@ -170,6 +171,39 @@ const styles = StyleSheet.create({
 });
 ```
 
+## Device Security
+
+On Android and iOS, the KYC flow checks device integrity before loading a template or starting a session. In `PRODUCTION`, rooted or jailbroken devices, Android developer mode, attached debuggers, and emulators/simulators are blocked by default. In non-production environments the SDK reports the result without blocking, so development builds can still run.
+
+You can observe the result or override individual rules:
+
+```tsx
+<LaunchSanctumKeyKYC
+  // ...other required props
+  deviceSecurityPolicy={{
+    blockCompromisedDevices: true,
+    blockDeveloperMode: true,
+    blockEmulators: true,
+    failClosed: true,
+  }}
+  onDeviceSecurityCheck={(result) => {
+    console.log('Device security:', result);
+  }}
+/>
+```
+
+The check can also be called independently:
+
+```ts
+import { checkDeviceSecurity } from '@sanctum-key/react-native-sdk';
+
+const result = await checkDeviceSecurity();
+```
+
+Apple does not expose a public API that reports the iOS Developer Mode setting. On iOS, the SDK therefore detects an attached debugger and reports `developerModeCheckSupported: false`; jailbreak and simulator checks still run normally.
+
+Because this feature includes native Kotlin and Swift code, rebuild the Android/iOS application after upgrading the SDK. A Metro reload is not sufficient, and Expo Go cannot provide the native checker.
+
 
 ## Supported Document Types
 

package/android/build/.transforms/ac63f648699cdd4b91e6ee06476f2a70/results.bin

@@ -0,0 +1 @@
+o/classes

package/android/build/intermediates/aapt_friendly_merged_manifests/debug/processDebugManifest/aapt/AndroidManifest.xml

@@ -52,6 +52,15 @@
         android:name="android.hardware.camera.autofocus"
         android:required="false" />
 
+    <!-- Specific package visibility used by the device-integrity check. -->
+    <queries>
+        <package android:name="com.topjohnwu.magisk" />
+        <package android:name="eu.chainfire.supersu" />
+        <package android:name="com.noshufou.android.su" />
+        <package android:name="com.koushikdutta.superuser" />
+        <package android:name="com.thirdparty.superuser" />
+    </queries>
+
     <application android:requestLegacyExternalStorage="false" >
 
         <!-- FileProvider pour partager les fichiers -->

package/android/build/intermediates/incremental/debug/packageDebugResources/compile-file-map.properties

@@ -1,2 +1,2 @@
-#Mon Aug 24 17:26:25 EAT 2026
+#Wed Sep 30 09:07:57 EAT 2026
 kyc.sanctumkey.com.sanctum-key-react-native-sdk-main-6\:/xml/file_paths.xml=/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/build/intermediates/packaged_res/debug/packageDebugResources/xml/file_paths.xml

package/android/build/intermediates/manifest_merge_blame_file/debug/processDebugManifest/manifest-merger-blame-debug-report.txt

@@ -83,28 +83,48 @@
 53        android:required="false" />
 53-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:33:68-92
 54
-55    <application android:requestLegacyExternalStorage="false" >
-55-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:35:5-47:19
-55-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:36:9-53
-56
-57        <!-- FileProvider pour partager les fichiers -->
-58        <provider
-58-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:38:9-46:20
-59            android:name="androidx.core.content.FileProvider"
-59-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:39:13-62
-60            android:authorities="${applicationId}.fileprovider"
-60-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:40:13-64
-61            android:exported="false"
-61-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:41:13-37
-62            android:grantUriPermissions="true" >
-62-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:42:13-47
-63            <meta-data
-63-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:43:13-45:54
-64                android:name="android.support.FILE_PROVIDER_PATHS"
-64-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:44:17-67
-65                android:resource="@xml/file_paths" />
-65-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:45:17-51
-66        </provider>
-67    </application>
-68
-69</manifest>
+55    <!-- Specific package visibility used by the device-integrity check. -->
+56    <queries>
+56-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:36:5-42:15
+57        <package android:name="com.topjohnwu.magisk" />
+57-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:37:9-56
+57-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:37:18-53
+58        <package android:name="eu.chainfire.supersu" />
+58-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:38:9-56
+58-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:38:18-53
+59        <package android:name="com.noshufou.android.su" />
+59-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:39:9-59
+59-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:39:18-56
+60        <package android:name="com.koushikdutta.superuser" />
+60-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:40:9-62
+60-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:40:18-59
+61        <package android:name="com.thirdparty.superuser" />
+61-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:41:9-60
+61-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:41:18-57
+62    </queries>
+63
+64    <application android:requestLegacyExternalStorage="false" >
+64-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:44:5-56:19
+64-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:45:9-53
+65
+66        <!-- FileProvider pour partager les fichiers -->
+67        <provider
+67-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:47:9-55:20
+68            android:name="androidx.core.content.FileProvider"
+68-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:48:13-62
+69            android:authorities="${applicationId}.fileprovider"
+69-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:49:13-64
+70            android:exported="false"
+70-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:50:13-37
+71            android:grantUriPermissions="true" >
+71-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:51:13-47
+72            <meta-data
+72-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:52:13-54:54
+73                android:name="android.support.FILE_PROVIDER_PATHS"
+73-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:53:17-67
+74                android:resource="@xml/file_paths" />
+74-->/Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:54:17-51
+75        </provider>
+76    </application>
+77
+78</manifest>

package/android/build/intermediates/merged_manifest/debug/processDebugManifest/AndroidManifest.xml

@@ -52,6 +52,15 @@
         android:name="android.hardware.camera.autofocus"
         android:required="false" />
 
+    <!-- Specific package visibility used by the device-integrity check. -->
+    <queries>
+        <package android:name="com.topjohnwu.magisk" />
+        <package android:name="eu.chainfire.supersu" />
+        <package android:name="com.noshufou.android.su" />
+        <package android:name="com.koushikdutta.superuser" />
+        <package android:name="com.thirdparty.superuser" />
+    </queries>
+
     <application android:requestLegacyExternalStorage="false" >
 
         <!-- FileProvider pour partager les fichiers -->

package/android/build/kotlin/compileDebugKotlin/cacheable/caches-jvm/lookups/counters.tab

@@ -1,2 +1,2 @@
-6
+2
 0

package/android/build/outputs/logs/manifest-merger-debug-report.txt

@@ -1,7 +1,7 @@
 -- Merging decision tree log ---
 manifest
-ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:2:1-49:12
-INJECTED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:2:1-49:12
+ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:2:1-58:12
+INJECTED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:2:1-58:12
 	package
 		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:4:5-33
 		INJECTED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml
@@ -71,26 +71,48 @@ ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/m
 		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:33:68-92
 	android:name
 		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:33:19-67
+queries
+ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:36:5-42:15
+package#com.topjohnwu.magisk
+ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:37:9-56
+	android:name
+		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:37:18-53
+package#eu.chainfire.supersu
+ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:38:9-56
+	android:name
+		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:38:18-53
+package#com.noshufou.android.su
+ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:39:9-59
+	android:name
+		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:39:18-56
+package#com.koushikdutta.superuser
+ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:40:9-62
+	android:name
+		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:40:18-59
+package#com.thirdparty.superuser
+ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:41:9-60
+	android:name
+		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:41:18-57
 application
-ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:35:5-47:19
+ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:44:5-56:19
 	android:requestLegacyExternalStorage
-		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:36:9-53
+		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:45:9-53
 provider#androidx.core.content.FileProvider
-ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:38:9-46:20
+ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:47:9-55:20
 	android:grantUriPermissions
-		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:42:13-47
+		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:51:13-47
 	android:authorities
-		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:40:13-64
+		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:49:13-64
 	android:exported
-		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:41:13-37
+		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:50:13-37
 	android:name
-		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:39:13-62
+		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:48:13-62
 meta-data#android.support.FILE_PROVIDER_PATHS
-ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:43:13-45:54
+ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:52:13-54:54
 	android:resource
-		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:45:17-51
+		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:54:17-51
 	android:name
-		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:44:17-67
+		ADDED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml:53:17-67
 uses-sdk
 INJECTED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml reason: use-sdk injection requested
 INJECTED from /Users/chengo/Projects/KYC-User-Frontend/sanctumkey-sdk/android/src/main/AndroidManifest.xml

package/android/src/main/AndroidManifest.xml

@@ -32,6 +32,15 @@
     <uses-feature android:name="android.hardware.camera" android:required="true" />
     <uses-feature android:name="android.hardware.camera.autofocus" android:required="false" />
 
+    <!-- Specific package visibility used by the device-integrity check. -->
+    <queries>
+        <package android:name="com.topjohnwu.magisk" />
+        <package android:name="eu.chainfire.supersu" />
+        <package android:name="com.noshufou.android.su" />
+        <package android:name="com.koushikdutta.superuser" />
+        <package android:name="com.thirdparty.superuser" />
+    </queries>
+
     <application
         android:requestLegacyExternalStorage="false">
         <!-- FileProvider pour partager les fichiers -->