@scalebun/react-native 1.13.0 → 2.0.1

package/lib/commonjs/public/ScaleBunFacade.js

@@ -175,7 +175,7 @@ class ScaleBunFacade {
           const realQueue = _container.coreContainer.get('PersistentQueue');
           const buffered = this._preInitBuffer.popBatch(this._preInitBuffer.length());
           if (buffered.length > 0) {
-            __DEV__ && _internalLogger.logger.debug(`[ScaleBun] Draining ${buffered.length} pre-init events into persistent queue`);
+            _internalLogger.logger.debug(`[ScaleBun] Draining ${buffered.length} pre-init events into persistent queue`);
             for (const envelope of buffered) {
               realQueue.add(envelope);
             }
@@ -215,17 +215,11 @@ class ScaleBunFacade {
   /**
    * Boot the OTA orchestrator when the init config asks for it.
    *
-   * `publicSigningKey` / `publicSigningKeys` are honoured here so signature
-   * enforcement is reachable from configuration alone. The list form exists
-   * for key ROTATION: a build pinning [old, new] keeps verifying while the
-   * server moves to the new key, so replacing a key never needs an emergency
-   * store release. Both fields merge (deduplicated) into one pinned set.
-   *
-   * Verification comes from `ota.verifySignature` when supplied, else the
-   * built-in @noble-based verifier (optional peers). Pinning keys with
-   * NEITHER available is fail-CLOSED by design (signature.ts) — an update
-   * that cannot be verified is not installed. We say that out loud rather
-   * than letting the app discover it as a silent no-update condition.
+   * Signature enforcement is no longer configured from JS. Signed releases are
+   * verified and staged in NATIVE code against RSA keys embedded in the app
+   * package (SB-OTA-RSA-SHA256-V1); unsigned releases keep working on SHA-256
+   * integrity. There are no signing-key or `verifySignature` options to pass
+   * through — the host embeds its trusted keys natively.
    */
   _maybeStartOta(rawConfig) {
     const ota = rawConfig?.ota;
@@ -237,42 +231,12 @@ class ScaleBunFacade {
       const {
         otaOrchestrator
       } = require('../features/ota/OtaOrchestrator');
-      const rawSingle = ota.publicSigningKey;
-      const rawList = ota.publicSigningKeys;
-      const publicKeys = Array.from(new Set([...(typeof rawSingle === 'string' && rawSingle ? [rawSingle] : []), ...(Array.isArray(rawList) ? rawList : [])].filter(k => typeof k === 'string' && k.trim().length > 0)));
-      // Signing was REQUESTED if a usable key exists, or the host passed a
-      // keys array at all — an empty one included. `publicSigningKeys: []`
-      // is a broken attempt to enable signing, and it must flow through to
-      // signature.ts's fail-closed handling, not silently disable signing.
-      const signingRequested = publicKeys.length > 0 || Array.isArray(rawList);
-      const verifier = ota.verifySignature;
-      if (signingRequested && typeof verifier !== 'function') {
-        // A host verifier is optional since the built-in one landed — the
-        // old unconditional warning here told every correctly-configured
-        // app that its updates would be rejected. Warn only when neither
-        // verifier can actually be resolved.
-        // eslint-disable-next-line @typescript-eslint/no-var-requires
-        const {
-          getBuiltinVerifier
-        } = require('../features/ota/crypto/builtinVerifier');
-        if (!getBuiltinVerifier()) {
-          _internalLogger.logger.warn('[ScaleBun] A signing key is pinned but no signature verifier is available. ' + 'Signature checking is fail-closed: updates will be REJECTED until one exists. ' + 'Install the optional peers `@noble/ed25519` + `@noble/hashes` (no further ' + 'code needed), or supply `ota.verifySignature`.');
-        }
-      }
       // `healthyAfterMs` is the field BootGuardConfig actually declares.
       // This passed `healthyTimeoutMs`, which nothing reads, so a host that
       // tuned the boot-guard window silently got the 10s default instead.
       // Both spellings are accepted so the older one keeps working.
       const healthyAfterMs = typeof ota.healthyAfterMs === 'number' ? ota.healthyAfterMs : typeof ota.healthyTimeoutMs === 'number' ? ota.healthyTimeoutMs : undefined;
       otaOrchestrator.init({
-        ...(signingRequested ? {
-          signature: {
-            // Single key stays a plain string — the shape every
-            // existing consumer and test already handles.
-            publicKey: publicKeys.length === 1 ? publicKeys[0] : publicKeys,
-            verifier
-          }
-        } : {}),
         ...(healthyAfterMs !== undefined ? {
           healthyAfterMs
         } : {})
@@ -339,7 +303,9 @@ class ScaleBunFacade {
       }
       const clientKey = this._clientKey;
       const apiUrl = this._apiBaseUrl;
-      if (!clientKey || !apiUrl) return;
+      if (!clientKey || !apiUrl) {
+        return;
+      }
       this._otaCheckInFlight = true;
       try {
         const info = await _bridgeAdapter.bridgeAdapter.getDeviceInfo();
@@ -396,7 +362,7 @@ class ScaleBunFacade {
       if (!dbgConfig) return;
       dbgConfig.__skipDeprecationWarning = true;
       this.enableDebug(dbgConfig);
-      __DEV__ && _internalLogger.logger.info('[ScaleBun] Debug auto-connected via init({ debug }).');
+      _internalLogger.logger.info('[ScaleBun] Debug auto-connected via init({ debug }).');
     } catch (err) {
       _internalLogger.logger.warn('[ScaleBun] Auto debug connection failed:', err?.message);
     }
@@ -413,7 +379,7 @@ class ScaleBunFacade {
       const apiBaseUrl = this._apiBaseUrl;
       if (!enabled || !appId || !clientKey || !apiBaseUrl) {
         if (enabled && !appId) {
-          __DEV__ && _internalLogger.logger.info('[ScaleBun] Envelope event tracking disabled — no appId in init config.');
+          _internalLogger.logger.info('[ScaleBun] Envelope event tracking disabled — no appId in init config.');
         }
         return;
       }
@@ -465,7 +431,7 @@ class ScaleBunFacade {
         onEvent: (eventName, revenue) => this._skanManager?.onEvent(eventName, revenue)
       });
       this._eventTracker.start();
-      __DEV__ && _internalLogger.logger.info('[ScaleBun] Envelope event tracking started → /v1/batch.');
+      _internalLogger.logger.info('[ScaleBun] Envelope event tracking started → /v1/batch.');
 
       // Complete the device context from the native bridge.
       //
@@ -1147,7 +1113,7 @@ class ScaleBunFacade {
       const cfg = await (this._getEngageTransport()?.fetchEngageConfig(context) ?? Promise.resolve(null));
       const messages = cfg?.inAppMessages ?? [];
       const previews = messages.filter(m => m.preview === true || m.isTest === true);
-      __DEV__ && _internalLogger.logger.info(`[Engage] debugFetchInAppMessages → ${messages.length} message(s), ${previews.length} test preview(s)`);
+      _internalLogger.logger.info(`[Engage] debugFetchInAppMessages → ${messages.length} message(s), ${previews.length} test preview(s)`);
       return messages;
     },
     /** Upload a survey/NPS/feedback response (idempotent, rides the outbox). */
@@ -1432,7 +1398,7 @@ class ScaleBunFacade {
         _internalLogger.logger.warn('SDK not initialized. Event dropped:', name);
         return;
       }
-      __DEV__ && _internalLogger.logger.debug('Tracking event:', name);
+      _internalLogger.logger.debug('Tracking event:', name);
 
       // Fan this event out to the Engage trigger engine. Same single funnel,
       // extra observer — lets behavioral triggers (custom_event, failed_action,
@@ -1605,7 +1571,7 @@ class ScaleBunFacade {
         await Promise.all([this._eventTracker?.flush() ?? Promise.resolve(), adapter?.flushAnalytics() ?? Promise.resolve()]);
         return;
       }
-      __DEV__ && _internalLogger.logger.debug('Flushing events from persistent queue...');
+      _internalLogger.logger.debug('Flushing events from persistent queue...');
       const httpClient = _container.coreContainer.get('HttpClient');
       await (0, _flushQueue.flushQueue)(this._getQueue(), httpClient, (0, _deviceId.getDeviceId)());
     });
@@ -1628,9 +1594,9 @@ class ScaleBunFacade {
       const bootstrapPerfFeature = (0, _debug.getPerformanceFeature)();
       if (bootstrapPerfFeature) {
         this._performanceFeature = bootstrapPerfFeature;
-        __DEV__ && _internalLogger.logger.debug('Performance feature linked from bootstrap');
+        _internalLogger.logger.debug('Performance feature linked from bootstrap');
       }
-      __DEV__ && _internalLogger.logger.info('Debug enabled');
+      _internalLogger.logger.info('Debug enabled');
     });
   }
 
@@ -1782,14 +1748,14 @@ class ScaleBunFacade {
         return false;
       }
       sm.startSession(metadata);
-      __DEV__ && _internalLogger.logger.info('session.start() ✅ sessionId:', sm.currentSessionId);
+      _internalLogger.logger.info('session.start() ✅ sessionId:', sm.currentSessionId);
       return true;
     },
     end: reason => {
       const sm = _SessionManager.SessionManager.getExistingInstance();
       if (!sm || !sm.isActive) return false;
       sm.endSession(reason);
-      __DEV__ && _internalLogger.logger.info('session.end() ✅');
+      _internalLogger.logger.info('session.end() ✅');
       return true;
     },
     emitEvent: (type, data) => {
@@ -1847,7 +1813,7 @@ class ScaleBunFacade {
         ...this._privacyConfig,
         ...config
       };
-      __DEV__ && _internalLogger.logger.debug('[report] Privacy config updated');
+      _internalLogger.logger.debug('[report] Privacy config updated');
     },
     /** Set branding for exported reports. */
     setBranding: config => {
@@ -1855,7 +1821,7 @@ class ScaleBunFacade {
         ...this._brandingConfig,
         ...config
       };
-      __DEV__ && _internalLogger.logger.debug('[report] Branding config updated');
+      _internalLogger.logger.debug('[report] Branding config updated');
     },
     /** Get current privacy config. */
     getPrivacy: () => ({
@@ -1910,9 +1876,9 @@ class ScaleBunFacade {
           AutoScreenDetector
         } = require('../features/navigation/AutoScreenDetector');
         AutoScreenDetector.getInstance().setNavigationRef(ref);
-        __DEV__ && _internalLogger.logger.info('[ScaleBun] Navigation ref set → auto screen detection active');
+        _internalLogger.logger.info('[ScaleBun] Navigation ref set → auto screen detection active');
       } catch (err) {
-        __DEV__ && _internalLogger.logger.debug('[ScaleBun] Navigation ref stashed (detector not ready):', err?.message);
+        _internalLogger.logger.debug('[ScaleBun] Navigation ref stashed (detector not ready):', err?.message);
       }
     });
   }

package/lib/module/bootstrap/SDKBootstrapper.js

@@ -75,6 +75,15 @@ export class SDKBootstrapper {
     // apiBaseUrl is LOCKED: whatever an integrator passed (or the schema default) is
     // discarded here so the SDK can never be repointed away from the ScaleBun cloud.
     // Change DEFAULT_API_BASE_URL at build time to target a different backend.
+    // Say so when we discard it. The value was accepted by the schema, silently
+    // overwritten here, and the SDK then talked to a different server than the
+    // integrator configured — with no log, no warning, and no error. Someone
+    // pointing the SDK at a staging or local backend would watch requests arrive
+    // at production and have nothing to go on.
+    const requestedApiBaseUrl = rawConfig?.apiBaseUrl;
+    if (typeof requestedApiBaseUrl === 'string' && requestedApiBaseUrl && requestedApiBaseUrl !== DEFAULT_API_BASE_URL) {
+      logger.warn(`[ScaleBun] Ignoring apiBaseUrl '${requestedApiBaseUrl}' — the endpoint is ` + `locked at build time and this build targets ${DEFAULT_API_BASE_URL}. To ` + `target another backend, change DEFAULT_API_BASE_URL in the SDK source and ` + `rebuild.`);
+    }
     this.config.apiBaseUrl = DEFAULT_API_BASE_URL;
     // Explicit logLevel wins; otherwise debug:true implies verbose 'debug'.
     if (this.config.logLevel) {
@@ -314,6 +323,27 @@ export class SDKBootstrapper {
     await this.featureRegistry.initializeAll(featureContext);
 
     // ── Session Replay Initialization (Core) ───────────────
+    /**
+    * RN-3 zero-config scroll instrumentation, opt-in.
+    *
+    * Placed before replay init because it patches a module export and must be in place before the
+    * host renders its first scroll view. Reports rather than assumes: the equivalent React
+    * Navigation hook once claimed success it had not verified and left a whole pipeline silently
+    * empty, so a failure here is said out loud with a reason an integrator can act on.
+    */
+    if (this.config.autoInstrumentScrollViews === true) {
+      try {
+        const {
+          autoInstrumentScrollViews
+        } = require('../features/journey/autoInstrumentScroll');
+        const outcome = autoInstrumentScrollViews();
+        if (!outcome.installed) {
+          logger.warn('[Bootstrap] autoInstrumentScrollViews was requested but could not be ' + 'installed: ' + outcome.reason + ' — taps will carry no content depth.');
+        } else {
+          __DEV__ && logger.debug('[Bootstrap] ScrollView auto-instrumentation installed');
+        }
+      } catch {/* no-throw */}
+    }
     if (features.replay !== false) {
       try {
         __DEV__ && logger.debug('[Bootstrap] Initializing unified SessionManager');

package/lib/module/core/config/schema.js

@@ -269,6 +269,22 @@ const SHAPE = {
     }
   },
   captureInteractionHeatmap: bool(true),
+  /**
+   * RN-3 zero-config: patch React Native's ScrollView export so EVERY scroll view reports its
+   * offset, not just ones wrapped in ScaleBunScrollView.
+   *
+   * DEFAULT FALSE, unlike captureInteractionHeatmap above, and the difference is deliberate.
+   * That flag changes what the SDK records about the host; this one changes what the HOST
+   * RENDERS — every scroll view in the app, including ones inside third-party libraries the app
+   * did not write, starts routing through an SDK component. The failure mode is not a wrong
+   * number in a dashboard, it is the host's UI behaving differently because an analytics SDK
+   * replaced a primitive. That is a decision an integrator makes deliberately, not one they
+   * discover afterwards.
+   *
+   * With it off, a plain <ScrollView> yields no content depth and the tap says so
+   * (scroll_source: 'none') rather than defaulting its offset to 0.
+   */
+  autoInstrumentScrollViews: bool(false),
   // Opt-in: intercept console.* and ship the lines to the Diagnose → Logs lane in SaaS
   // mode. OFF by default — console output can carry PII/secrets and adds ingest volume,
   // so capturing it is the host's explicit choice, not a silent default. When true and a
@@ -285,18 +301,9 @@ const SHAPE = {
         kind: 'str',
         opt: true
       },
-      publicSigningKey: {
-        kind: 'str',
-        opt: true
-      },
-      // Rotation support: several pinned keys, any of which may verify a
-      // bundle. Ship a build pinning [old, new], re-sign server-side with
-      // new, drop old next release — no emergency store submission when a
-      // key must be replaced. Merged with publicSigningKey by the facade.
-      publicSigningKeys: {
-        kind: 'strArr',
-        opt: true
-      },
+      // No signing-key fields: signed releases are verified natively against
+      // RSA keys embedded in the app package (SB-OTA-RSA-SHA256-V1). JS must
+      // not supply a trusted key.
       mandatoryBlocksUi: bool(false)
     }
   }

package/lib/module/core/constants/version.js

@@ -8,5 +8,5 @@
  * value, so a stale one makes a rollout unobservable — which is the exact problem sending an SDK
  * version was introduced to solve.
  */
-export const SDK_VERSION = '1.13.0';
+export const SDK_VERSION = '2.0.1';
 //# sourceMappingURL=version.js.map