@virex-tech/paywallo-sdk 2.6.0 → 2.6.2

package/README.md

@@ -25,6 +25,17 @@ npm install expo-tracking-transparency
 
 This enables the ATT prompt ("Allow this app to track your activity?"). Without it, the SDK skips IDFA collection — everything else works normally.
 
+### Optional: Facebook `_fbp` on Android
+
+For `fb_anon_id` (the `_fbp` cookie proxy used by Meta attribution) to work correctly on Android, the host app must declare the Facebook Android SDK as a runtime dependency:
+
+```gradle
+// android/app/build.gradle
+implementation 'com.facebook.android:facebook-android-sdk:latest.release'
+```
+
+The SDK references the Facebook Android SDK as `compileOnly` (to avoid forcing it on all apps). If the host does **not** include it as `implementation`, `metaBridge.getAnonymousID()` returns `null` and the SDK falls back to a locally-generated `PW_<uuid>`. This local ID is **not recognised by Meta** as a `_fbp` value, so Facebook attribution will not benefit from cookie matching on Android. When debug mode is enabled, the SDK logs a warning when this fallback is triggered.
+
 ## Quick start
 
 ### 1. Wrap your app

package/android/build.gradle

@@ -49,7 +49,7 @@ repositories {
 dependencies {
     implementation "com.facebook.react:react-native:+"
     implementation "org.jetbrains.kotlin:kotlin-stdlib:${safeExtGet('kotlinVersion', '2.0.21')}"
-    implementation "com.android.billingclient:billing-ktx:7.0.0"
+    implementation "com.android.billingclient:billing-ktx:8.0.0"
     implementation "org.jetbrains.kotlinx:kotlinx-coroutines-core:1.7.3"
     implementation "org.jetbrains.kotlinx:kotlinx-coroutines-android:1.7.3"
     compileOnly "com.facebook.android:facebook-android-sdk:17.+"
@@ -57,4 +57,5 @@ dependencies {
     // 1.1.0+ required for MasterKey.Builder API used in PaywalloStorageModule.
     // 1.0.0 only ships the deprecated MasterKeys.getOrCreate(...) static helper.
     implementation "androidx.security:security-crypto:1.1.0"
+    implementation "com.google.android.gms:play-services-ads-identifier:18.0.1"
 }

package/android/src/main/AndroidManifest.xml

@@ -16,6 +16,13 @@
     -->
     <uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
 
+    <!--
+        AD_ID (Android 13+) — sem essa permissão o Google Play Services devolve
+        o GAID como all-zeros, quebrando o madid do Meta CAPI. O merge de manifest
+        propaga pro app host automaticamente.
+    -->
+    <uses-permission android:name="com.google.android.gms.permission.AD_ID" />
+
     <application>
         <!--
             PaywalloFirebaseMessagingService handles FCM token refresh and message delivery.

package/android/src/main/java/com/paywallo/sdk/PaywalloAdvertisingIdModule.kt

@@ -0,0 +1,55 @@
+package com.paywallo.sdk
+
+import com.facebook.react.bridge.Promise
+import com.facebook.react.bridge.ReactApplicationContext
+import com.facebook.react.bridge.ReactContextBaseJavaModule
+import com.facebook.react.bridge.ReactMethod
+import java.util.concurrent.Executors
+
+private val ALL_ZEROS = "00000000-0000-0000-0000-000000000000"
+
+class PaywalloAdvertisingIdModule(private val reactContext: ReactApplicationContext) :
+    ReactContextBaseJavaModule(reactContext) {
+
+    private val executor = Executors.newSingleThreadExecutor()
+
+    override fun getName() = "PaywalloAdvertisingId"
+
+    // invalidate() is the post-TurboModule replacement for onCatalystInstanceDestroy.
+    // Shuts down the background executor to avoid thread leak on bridge reload.
+    override fun invalidate() {
+        executor.shutdown()
+        super.invalidate()
+    }
+
+    @ReactMethod
+    fun getAdvertisingId(promise: Promise) {
+        // AdvertisingIdClient.getAdvertisingIdInfo() is blocking and must NOT run
+        // on the main thread — run on a background executor instead.
+        executor.execute {
+            try {
+                val info = com.google.android.gms.ads.identifier.AdvertisingIdClient
+                    .getAdvertisingIdInfo(reactApplicationContext)
+
+                if (info.isLimitAdTrackingEnabled) {
+                    // User opted out of ad tracking — honour their choice.
+                    promise.resolve(null)
+                    return@execute
+                }
+
+                val id = info.id
+                if (id == null || id == ALL_ZEROS) {
+                    promise.resolve(null)
+                } else {
+                    promise.resolve(id)
+                }
+            } catch (t: Throwable) {
+                // Catches GooglePlayServicesNotAvailableException,
+                // GooglePlayServicesRepairableException, NoClassDefFoundError,
+                // IOException, and any other runtime failure.
+                // Never reject/crash — gracefully return null.
+                promise.resolve(null)
+            }
+        }
+    }
+}

package/android/src/main/java/com/paywallo/sdk/PaywalloSdkPackage.kt

@@ -11,8 +11,9 @@ class PaywalloSdkPackage : ReactPackage {
             PaywalloStoreKitModule(reactContext),
             PaywalloFBBridgeModule(reactContext),
             PaywalloStorageModule(reactContext),
-PaywalloNotificationsModule(reactContext),
-            PaywalloEnvModule(reactContext)
+            PaywalloNotificationsModule(reactContext),
+            PaywalloEnvModule(reactContext),
+            PaywalloAdvertisingIdModule(reactContext)
         )
     }
 

package/android/src/main/java/com/paywallo/sdk/PaywalloStoreKitModule.kt

@@ -56,7 +56,12 @@ class PaywalloStoreKitModule(private val reactContext: ReactApplicationContext)
         if (billingClient == null || billingClient?.isReady != true) {
             billingClient = BillingClient.newBuilder(reactContext)
                 .setListener(this)
-                .enablePendingPurchases()
+                // A Billing 7 depreciou e a 8 REMOVEU o enablePendingPurchases() sem argumento.
+                // Um app que traz a billing 8 por outra dependência (ex.: Superwall) resolve a
+                // versão mais alta no Gradle e a chamada antiga vira NoSuchMethodError em runtime.
+                .enablePendingPurchases(
+                    PendingPurchasesParams.newBuilder().enableOneTimeProducts().build()
+                )
                 .build()
         }
         return billingClient!!
@@ -173,10 +178,12 @@ class PaywalloStoreKitModule(private val reactContext: ReactApplicationContext)
             .build()
 
         return suspendCancellableCoroutine { cont ->
-            client.queryProductDetailsAsync(params) { result, detailsList ->
+            // Na Billing 8 o callback passou a receber QueryProductDetailsResult em vez da
+            // lista direta — a assinatura antiga não existe mais em runtime.
+            client.queryProductDetailsAsync(params) { result, detailsResult ->
                 if (cont.isActive) {
                     if (result.responseCode == BillingClient.BillingResponseCode.OK) {
-                        cont.resume(detailsList ?: emptyList()) {}
+                        cont.resume(detailsResult.productDetailsList) {}
                     } else {
                         cont.resume(emptyList()) {}
                     }

package/dist/index.d.mts

@@ -346,6 +346,7 @@ interface IdentifyOptions {
     lastName?: string;
     dateOfBirth?: string;
     gender?: "m" | "f";
+    zipCode?: string;
 }
 interface TrackEventOptions {
     properties?: UserProperties;
@@ -407,9 +408,12 @@ interface EventContext {
 /**
  * Event priority controls flush semantics:
  *
- * - `"critical"` → flushed as a batch-of-1 on the next microtask (via
- *   `queueMicrotask`). Used for events where loss is unacceptable:
- *   `transaction`, `identify`, `lifecycle {type: "install"}`,
+ * - `"critical"` → posted as a batch-of-1 immediately, and `track()` awaits
+ *   the post before resolving. `PostFn` (`ApiClient.postWithQueue`) performs
+ *   a write-ahead journal to `OfflineQueue` for critical events before any
+ *   network attempt, so by the time `track()` resolves the event is durable
+ *   on disk — not just handed off to a microtask. Used for events where loss
+ *   is unacceptable: `transaction`, `identify`, `lifecycle {type: "install"}`,
  *   `subscription_*`, `refund`, `checkout_started`.
  * - `"normal"` → buffered and flushed on a rolling window (whichever fires
  *   first): `BATCH_MAX_SIZE` events OR `BATCH_FLUSH_MS`. Used for events
@@ -535,6 +539,7 @@ declare class ApiClient {
         lastName?: string;
         dateOfBirth?: string;
         gender?: string;
+        zipCode?: string;
     }): Promise<void>;
     getVariant(flagKey: string, distinctId: string): Promise<FlagVariant>;
     getPaywall(placement: string): Promise<PaywallConfig | null>;
@@ -559,6 +564,7 @@ interface IdentityState {
     lastName: string | null;
     dateOfBirth: string | null;
     gender: string | null;
+    zipCode: string | null;
 }
 declare class IdentityManager {
     private deviceId;
@@ -570,6 +576,7 @@ declare class IdentityManager {
     private lastName;
     private dateOfBirth;
     private gender;
+    private zipCode;
     private apiClient;
     private secureStorage;
     private debug;

package/dist/index.d.ts

@@ -346,6 +346,7 @@ interface IdentifyOptions {
     lastName?: string;
     dateOfBirth?: string;
     gender?: "m" | "f";
+    zipCode?: string;
 }
 interface TrackEventOptions {
     properties?: UserProperties;
@@ -407,9 +408,12 @@ interface EventContext {
 /**
  * Event priority controls flush semantics:
  *
- * - `"critical"` → flushed as a batch-of-1 on the next microtask (via
- *   `queueMicrotask`). Used for events where loss is unacceptable:
- *   `transaction`, `identify`, `lifecycle {type: "install"}`,
+ * - `"critical"` → posted as a batch-of-1 immediately, and `track()` awaits
+ *   the post before resolving. `PostFn` (`ApiClient.postWithQueue`) performs
+ *   a write-ahead journal to `OfflineQueue` for critical events before any
+ *   network attempt, so by the time `track()` resolves the event is durable
+ *   on disk — not just handed off to a microtask. Used for events where loss
+ *   is unacceptable: `transaction`, `identify`, `lifecycle {type: "install"}`,
  *   `subscription_*`, `refund`, `checkout_started`.
  * - `"normal"` → buffered and flushed on a rolling window (whichever fires
  *   first): `BATCH_MAX_SIZE` events OR `BATCH_FLUSH_MS`. Used for events
@@ -535,6 +539,7 @@ declare class ApiClient {
         lastName?: string;
         dateOfBirth?: string;
         gender?: string;
+        zipCode?: string;
     }): Promise<void>;
     getVariant(flagKey: string, distinctId: string): Promise<FlagVariant>;
     getPaywall(placement: string): Promise<PaywallConfig | null>;
@@ -559,6 +564,7 @@ interface IdentityState {
     lastName: string | null;
     dateOfBirth: string | null;
     gender: string | null;
+    zipCode: string | null;
 }
 declare class IdentityManager {
     private deviceId;
@@ -570,6 +576,7 @@ declare class IdentityManager {
     private lastName;
     private dateOfBirth;
     private gender;
+    private zipCode;
     private apiClient;
     private secureStorage;
     private debug;