@scalebun/react-native 1.4.0 → 1.5.0

package/dist/scalebun.slim.js

@@ -492,7 +492,7 @@ var SDK_VERSION;
 var init_version = __esm({
   "lib/module/core/constants/version.js"() {
     "use strict";
-    SDK_VERSION = "1.4.0";
+    SDK_VERSION = "1.5.0";
   }
 });
 
@@ -5331,6 +5331,10 @@ function enableDebug(config) {
       __DEV__ && logger.debug("Debug already enabled, skipping");
       return;
     }
+    if (!__DEV__ && !config.allowInRelease) {
+      logger.warn("[ScaleBun] Debug connection refused in a release build. The debug transport is unencrypted (ws://) and carries captured traffic and the shared secret in cleartext, so it is development-only by default. If you genuinely need it in a release build, set `allowInRelease: true` \u2014 and do not ship that to users.");
+      return;
+    }
     if (!isDevToolsBundled()) {
       logger.warn("[ScaleBun] debugConnection was configured, but the desktop-debugger tooling is not in this bundle. It is excluded by default (the ScaleBun desktop app is not yet released); opt in with `withScaleBun(config, { features: { devTools: true } })` in metro.config.js. All other SDK behaviour is unaffected.");
       return;
@@ -5854,89 +5858,6 @@ var init_NativeScaleBunPerformance = __esm({
   }
 });
 
-// lib/module/analytics/batching.js
-function chunkEvents(events, size = MAX_BATCH_EVENTS) {
-  const cap = Math.max(1, Math.min(size, MAX_BATCH_EVENTS));
-  if (events.length <= cap) return events.length ? [events.slice()] : [];
-  const out = [];
-  for (let i = 0; i < events.length; i += cap) {
-    out.push(events.slice(i, i + cap));
-  }
-  return out;
-}
-function clampBatchSize(configured, fallback) {
-  const n = typeof configured === "number" && configured > 0 ? configured : fallback;
-  return Math.max(1, Math.min(n, MAX_BATCH_EVENTS));
-}
-function batchIdempotencyKey(eventIds) {
-  let h = 2166136261;
-  const joined = eventIds.join("
");
-  for (let i = 0; i < joined.length; i++) {
-    h ^= joined.charCodeAt(i);
-    h = Math.imul(h, 16777619) >>> 0;
-  }
-  return `sdk-${eventIds.length}-${h.toString(16).padStart(8, "0")}`;
-}
-var MAX_BATCH_EVENTS;
-var init_batching = __esm({
-  "lib/module/analytics/batching.js"() {
-    "use strict";
-    MAX_BATCH_EVENTS = 500;
-  }
-});
-
-// lib/module/analytics/automaticEvents.js
-function compactProperties(properties) {
-  const out = {
-    capture_source: "automatic"
-  };
-  for (const [key, value] of Object.entries(properties ?? {})) {
-    if (value !== void 0) out[key] = value;
-  }
-  return out;
-}
-function emitAutomaticEvent(name, properties) {
-  const event = {
-    name,
-    properties: compactProperties(properties)
-  };
-  if (listeners.size === 0) {
-    pending3.push(event);
-    if (pending3.length > MAX_PENDING2) pending3.shift();
-    return;
-  }
-  for (const listener of listeners) {
-    try {
-      listener(event);
-    } catch {
-    }
-  }
-}
-function subscribeAutomaticEvents(listener) {
-  listeners.add(listener);
-  if (pending3.length > 0) {
-    const buffered = pending3.splice(0, pending3.length);
-    for (const event of buffered) {
-      try {
-        listener(event);
-      } catch {
-      }
-    }
-  }
-  return () => {
-    listeners.delete(listener);
-  };
-}
-var listeners, pending3, MAX_PENDING2;
-var init_automaticEvents = __esm({
-  "lib/module/analytics/automaticEvents.js"() {
-    "use strict";
-    listeners = /* @__PURE__ */ new Set();
-    pending3 = [];
-    MAX_PENDING2 = 50;
-  }
-});
-
 // lib/module/crypto/hmacSha256.js
 function utf8(str3) {
   const out = [];
@@ -6053,6 +5974,89 @@ var init_hmacSha256 = __esm({
   }
 });
 
+// lib/module/analytics/batching.js
+function chunkEvents(events, size = MAX_BATCH_EVENTS) {
+  const cap = Math.max(1, Math.min(size, MAX_BATCH_EVENTS));
+  if (events.length <= cap) return events.length ? [events.slice()] : [];
+  const out = [];
+  for (let i = 0; i < events.length; i += cap) {
+    out.push(events.slice(i, i + cap));
+  }
+  return out;
+}
+function clampBatchSize(configured, fallback) {
+  const n = typeof configured === "number" && configured > 0 ? configured : fallback;
+  return Math.max(1, Math.min(n, MAX_BATCH_EVENTS));
+}
+function batchIdempotencyKey(eventIds) {
+  let h = 2166136261;
+  const joined = eventIds.join("
");
+  for (let i = 0; i < joined.length; i++) {
+    h ^= joined.charCodeAt(i);
+    h = Math.imul(h, 16777619) >>> 0;
+  }
+  return `sdk-${eventIds.length}-${h.toString(16).padStart(8, "0")}`;
+}
+var MAX_BATCH_EVENTS;
+var init_batching = __esm({
+  "lib/module/analytics/batching.js"() {
+    "use strict";
+    MAX_BATCH_EVENTS = 500;
+  }
+});
+
+// lib/module/analytics/automaticEvents.js
+function compactProperties(properties) {
+  const out = {
+    capture_source: "automatic"
+  };
+  for (const [key, value] of Object.entries(properties ?? {})) {
+    if (value !== void 0) out[key] = value;
+  }
+  return out;
+}
+function emitAutomaticEvent(name, properties) {
+  const event = {
+    name,
+    properties: compactProperties(properties)
+  };
+  if (listeners.size === 0) {
+    pending3.push(event);
+    if (pending3.length > MAX_PENDING2) pending3.shift();
+    return;
+  }
+  for (const listener of listeners) {
+    try {
+      listener(event);
+    } catch {
+    }
+  }
+}
+function subscribeAutomaticEvents(listener) {
+  listeners.add(listener);
+  if (pending3.length > 0) {
+    const buffered = pending3.splice(0, pending3.length);
+    for (const event of buffered) {
+      try {
+        listener(event);
+      } catch {
+      }
+    }
+  }
+  return () => {
+    listeners.delete(listener);
+  };
+}
+var listeners, pending3, MAX_PENDING2;
+var init_automaticEvents = __esm({
+  "lib/module/analytics/automaticEvents.js"() {
+    "use strict";
+    listeners = /* @__PURE__ */ new Set();
+    pending3 = [];
+    MAX_PENDING2 = 50;
+  }
+});
+
 // lib/module/analytics/EventTracker.js
 function uuid() {
   return "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (c) => {
@@ -6418,6 +6422,38 @@ var init_EventTracker = __esm({
   }
 });
 
+// lib/module/core/id/installationId.js
+function resolveInstallationId() {
+  try {
+    const storage3 = createStorageBackend();
+    const existing = storage3.get(K_INSTALLATION_ID);
+    if (existing) return existing;
+    const id = `inst-${randomSegment()}${randomSegment()}`;
+    storage3.set(K_INSTALLATION_ID, id);
+    return id;
+  } catch {
+    return `inst-ephemeral-${randomSegment()}`;
+  }
+}
+function randomSegment() {
+  try {
+    const g = globalThis;
+    if (g.crypto?.getRandomValues) {
+      const bytes = g.crypto.getRandomValues(new Uint8Array(6));
+      return Array.from(bytes).map((b) => b.toString(36).padStart(2, "0")).join("").slice(0, 8);
+    }
+  } catch {
+  }
+  return Math.random().toString(36).slice(2, 10).padEnd(8, "0");
+}
+var init_installationId = __esm({
+  "lib/module/core/id/installationId.js"() {
+    "use strict";
+    init_StorageBackend();
+    init_EventTracker();
+  }
+});
+
 // lib/module/features/engage/engageSignals.js
 var EngageSignalBus, engageSignals;
 var init_engageSignals = __esm({
@@ -6877,18 +6913,6 @@ function subscribeNativeProgress(onTick) {
     };
   }
 }
-function resolveInstallationId() {
-  try {
-    const storage3 = createStorageBackend();
-    const existing = storage3.get(K_INSTALLATION_ID);
-    if (existing) return existing;
-    const id = `inst-${Math.random().toString(36).slice(2, 10)}${Math.random().toString(36).slice(2, 10)}`;
-    storage3.set(K_INSTALLATION_ID, id);
-    return id;
-  } catch {
-    return `inst-ephemeral-${Math.random().toString(36).slice(2, 10)}`;
-  }
-}
 async function deliverOtaEvents(params) {
   const events = otaEventEmitter.flush();
   if (!events.length) return;
@@ -6938,7 +6962,7 @@ var init_OtaOrchestrator = __esm({
     init_OtaEventEmitter();
     init_geoCountry();
     init_deviceAttributes();
-    init_EventTracker();
+    init_installationId();
     init_signature();
     init_environment();
     init_retry();
@@ -12172,6 +12196,7 @@ function decodeManual(base64) {
 }
 
 // lib/module/features/session/BackendSessionAdapter.js
+init_installationId();
 init_version();
 init_bridgeAdapter();
 init_nativeModule();
@@ -12307,6 +12332,13 @@ var BackendSessionAdapter = class _BackendSessionAdapter {
       const payload = {
         sessionId: session.sessionId,
         deviceId: session.deviceId,
+        // The canonical per-install id — the SAME value OTA events are
+        // reported under, and a DIFFERENT value from deviceId. The
+        // backend stores it on the Device so release health can join a
+        // bundle's installs to that device's sessions. Without it, crash
+        // impact for a release resolves to "no data" for every device
+        // that never registered for push.
+        installationId: resolveInstallationId(),
         startedAt: session.startedAt,
         // Link the recording row to the always-on analytics row so the
         // dashboard can join them. track() events land on the analytics