otpless-headless-rn 2.3.0 → 3.0.0

package/README.md

@@ -44,6 +44,24 @@ useEffect(() => {
   }, []);
 ```
 
+### SSL pinning (optional)
+
+SSL pinning is **off by default**; the two-argument `initialize` call above behaves exactly as before. To opt in, pass a third `options` argument:
+
+```javascript
+headlessModule.initialize("YOUR_APPID", null, { sslPinning: 'enabled' });
+```
+
+```ts
+type OtplessSslPinning = 'enabled' | 'disabled';
+interface OtplessInitOptions { sslPinning?: OtplessSslPinning }
+initialize(appId: string, loginUri?: string | null, options?: OtplessInitOptions): void
+```
+
+When enabled, the native SDK pins the TLS certificate of `sigma.otpless.app` on both Android and iOS. If the pin does not match (for example behind an intercepting proxy such as Charles or Proxyman), the SDK **fails closed**: no request leaves the device and you receive `FAILED` with `statusCode` `5004` (see [Response Handling](#response-handling)). If your organisation runs a corporate proxy or a network allowlist, make sure `sigma.otpless.app` is reachable directly with its original certificate.
+
+Requires `io.github.otpless-tech:otpless-headless-sdk` >= 2.0.1 on Android and `OtplessBM/Core` >= 3.0.1 on iOS (both pulled in automatically by this package).
+
 # Initiate Authentication
 
 ## Phone Auth
@@ -86,8 +104,19 @@ const onHeadlessResult = (result: any) => {
       break;
     }
     case "FAILED": {
+      if (result.statusCode == 5003) {
+        // SDK initialization failed (e.g. invalid appId or network unavailable)
         console.log("SDK initialization failed");
-        // Handle SDK initialization failure
+      } else if (result.statusCode == 5004) {
+        // SSL pin validation failed. Only emitted when `initialize` was called
+        // with `{ sslPinning: 'enabled' }`. The SDK sent nothing to the server;
+        // the connection to sigma.otpless.app is being intercepted or its
+        // certificate does not match the expected pin.
+        // result.response = { errorCode: "5004", errorMessage: "SSL pin validation failed" }
+        console.log("SSL pin validation failed");
+      } else {
+        console.log("SDK failed", result.statusCode);
+      }
       break;
     }
     case "INITIATE": {

package/android/build.gradle

@@ -74,7 +74,7 @@ dependencies {
   //noinspection GradleDynamicVersion
   implementation "com.facebook.react:react-native:+"
   implementation "org.jetbrains.kotlin:kotlin-stdlib:$kotlin_version"
-  implementation ("io.github.otpless-tech:otpless-headless-sdk:0.9.0")
+  implementation ("io.github.otpless-tech:otpless-headless-sdk:2.0.1")
 }
 
 if (isNewArchitectureEnabled()) {

package/android/src/main/java/com/otplessheadlessrn/OtplessReactNativeModule.kt

@@ -13,7 +13,9 @@ import com.facebook.react.bridge.ReadableMap
 import com.facebook.react.modules.core.DeviceEventManagerModule
 import com.otpless.longclaw.tc.OTScopeRequest
 import com.otpless.v2.android.sdk.dto.OtplessResponse
+import com.otpless.v2.android.sdk.dto.OtplessSslKind
 import com.otpless.v2.android.sdk.main.OtplessSDK
+import com.otpless.v2.android.sdk.utils.BuildPlatform
 import com.otpless.v2.android.sdk.utils.OtplessUtils
 import kotlinx.coroutines.CoroutineExceptionHandler
 import kotlinx.coroutines.CoroutineScope
@@ -72,13 +74,28 @@ class OtplessHeadlessRNModule(private val reactContext: ReactApplicationContext)
   }
 
   @ReactMethod
-  fun initialize(appId: String, loginUri: String? = null) {
+  fun initialize(appId: String, loginUri: String?, sslPinning: String?, buildPlatform: String?) {
     val activity = currentActivity ?: return
+    val sslKind: OtplessSslKind =
+      if (sslPinning == "enabled") OtplessSslKind.SslEnabled else OtplessSslKind.SslDisabled
+    // Wrapper attribution, computed in JS (which owns the single source of
+    // truth for the package version) and arriving as
+    // "react-native-android-<packageVersion>". This bridge is a dumb forwarder;
+    // the literal fallback covers an older JS layer that does not send the
+    // argument, so the token can never be blank.
+    val buildPlatformToken = buildPlatform?.trim()?.takeIf { it.isNotEmpty() } ?: "react-native-android"
     ioScope.launch {
       lifecycleMutex.withLock {
+        // Tells the native SDK this session came through the React Native
+        // wrapper, so device telemetry reports
+        // platform = "otpless-headless-sdk(react-native-android-<version>)"
+        // instead of the default "otpless-headless-sdk(android)". Must be set
+        // before initialize, which is what emits the event.
+        OtplessSDK.buildPlatform = BuildPlatform(buildPlatformToken)
         OtplessSDK.initialize(
           appId = appId, activity = activity,
-          loginUri = loginUri, callback = this@OtplessHeadlessRNModule::sendHeadlessEventCallback
+          loginUri = loginUri, callback = this@OtplessHeadlessRNModule::sendHeadlessEventCallback,
+          sslKind = sslKind
         )
       }
     }

package/ios/OtplessHeadlessRN.m

@@ -5,6 +5,8 @@
 
 RCT_EXTERN_METHOD(initialize:(NSString *)appId
                   loginUri: (nullable NSString *) loginUri
+                  sslPinning: (nullable NSString *) sslPinning
+                  buildPlatform: (nullable NSString *) buildPlatform
                   )
 
 RCT_EXTERN_METHOD(start:(NSDictionary *)request)
@@ -15,10 +17,6 @@ RCT_EXTERN_METHOD(cleanup)
 
 RCT_EXTERN_METHOD(decimateAll)
 
-RCT_EXTERN_METHOD(setOneTapDataCallback)
-
-RCT_EXTERN_METHOD(performOneTap: (NSDictionary *)request)
-
 RCT_EXTERN_METHOD(authorizeViaPasskey: (NSDictionary *)request)
 
 RCT_EXTERN_METHOD(setDevLogging:(BOOL)enable)

package/ios/OtplessHeadlessRN.swift

@@ -180,20 +180,35 @@ class OtplessHeadlessRN: RCTEventEmitter, OtplessResponseDelegate {
     resolve(Otpless.shared.isSdkReady())
   }
   
-  @objc(initialize:loginUri:)
-  func initialize(appId: String, loginUri: String?) {
+  @objc(initialize:loginUri:sslPinning:buildPlatform:)
+  func initialize(appId: String, loginUri: String?, sslPinning: String?, buildPlatform: String?) {
+    let sslKind: OtplessSslKind = sslPinning == "enabled" ? .sslEnabled : .sslDisabled
+    // Wrapper attribution, computed in JS (which owns the single source of
+    // truth for the package version) and arriving as
+    // "react-native-ios-<packageVersion>". This bridge is a dumb forwarder; the
+    // literal fallback covers an older JS layer that does not send the
+    // argument, so the token can never be blank.
+    let trimmedBuildPlatform = buildPlatform?.trimmingCharacters(in: .whitespacesAndNewlines) ?? ""
+    let buildPlatformToken = trimmedBuildPlatform.isEmpty ? "react-native-ios" : trimmedBuildPlatform
     DispatchQueue.main.async {
+      // Tells the native SDK this session came through the React Native
+      // wrapper, so device telemetry reports
+      // platform = "otpless-headless(react-native-ios-<version>)" instead of
+      // the default "otpless-headless(ios)". Must be set before initialise,
+      // which is what emits the event.
       let rootViewController = UIApplication.shared.delegate?.window??.rootViewController
       if let rvc = rootViewController {
         Otpless.shared.setResponseDelegate(self)
-        Otpless.shared.initialise(withAppId: appId, loginUri: loginUri, vc: rvc)
+        Otpless.shared.setBuildPlatform(buildPlatformToken)
+        Otpless.shared.initialise(withAppId: appId, loginUri: loginUri, vc: rvc, sslKind: sslKind)
         return
       }
 
       if #available(iOS 13.0, *) {
         if let windowSceneVC = self.getRootViewControllerFromWindowScene() {
           Otpless.shared.setResponseDelegate(self)
-          Otpless.shared.initialise(withAppId: appId, loginUri: loginUri, vc: windowSceneVC)
+          Otpless.shared.setBuildPlatform(buildPlatformToken)
+          Otpless.shared.initialise(withAppId: appId, loginUri: loginUri, vc: windowSceneVC, sslKind: sslKind)
         }
       }
     }

package/lib/commonjs/index.js

@@ -8,6 +8,7 @@ var _exportNames = {
 };
 exports.OtplessHeadlessModule = void 0;
 var _reactNative = require("react-native");
+var _version = require("./version");
 var _models = require("./models");
 Object.keys(_models).forEach(function (key) {
   if (key === "default" || key === "__esModule") return;
@@ -29,6 +30,23 @@ const OtplessHeadlessRN = _reactNative.NativeModules.OtplessHeadlessRN ? _reactN
     throw new Error(LINKING_ERROR);
   }
 });
+
+/**
+ * Wrapper-attribution token sent to the native SDKs at `initialize`.
+ *
+ * Computed here, in JS, so `otplessRnVersion` is the single source of truth:
+ * the Kotlin and Swift bridges only forward whatever arrives over the bridge,
+ * instead of each hardcoding a version that would drift on every release.
+ *
+ * Emitted by the native device-telemetry event as:
+ * - Android - `otpless-headless-sdk(react-native-android-<version>)`
+ * - iOS - `otpless-headless(react-native-ios-<version>)`
+ *
+ * The `react-native-` prefix distinguishes this package from the sibling
+ * wrappers (`react-native-lite-*`, `react-native-turbo-*`), which share the
+ * same iOS telemetry prefix.
+ */
+const BUILD_PLATFORM = `react-native-${_reactNative.Platform.OS}-${_version.otplessRnVersion}`;
 class OtplessHeadlessModule {
   eventEmitter = null;
   constructor() {
@@ -38,12 +56,15 @@ class OtplessHeadlessModule {
     var _this$eventEmitter;
     (_this$eventEmitter = this.eventEmitter) === null || _this$eventEmitter === void 0 || _this$eventEmitter.removeAllListeners('OTPlessEventResult');
   }
-  initialize(appId, loginUri = null) {
+  initialize(appId, loginUri = null, options = null) {
     if (this.eventEmitter == null) {
       this.eventEmitter = new _reactNative.NativeEventEmitter(OtplessHeadlessRN);
     }
-    // call the native method
-    OtplessHeadlessRN.initialize(appId, loginUri);
+    // call the native method; sslPinning is a plain string so an older
+    // native module degrades to pinning disabled. buildPlatform is internal
+    // wrapper attribution, not a merchant-facing parameter; the native bridges
+    // fall back to a bare "react-native-<platform>" if it ever arrives blank.
+    OtplessHeadlessRN.initialize(appId, loginUri, (options === null || options === void 0 ? void 0 : options.sslPinning) ?? 'disabled', BUILD_PLATFORM);
   }
   setResponseCallback(callback) {
     var _this$eventEmitter2;

package/lib/commonjs/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["_reactNative","require","_models","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","LINKING_ERROR","Platform","select","ios","default","OtplessHeadlessRN","NativeModules","Proxy","Error","OtplessHeadlessModule","eventEmitter","constructor","clearListener","_this$eventEmitter","removeAllListeners","initialize","appId","loginUri","NativeEventEmitter","setResponseCallback","callback","_this$eventEmitter2","addListener","start","input","commitResponse","response","isWhatsappInstalledForAndroid","OS","isWhatsappInstalled","cleanup","decimateAll","toLowerCase","setDevLogging","enable","setMfaEnabled","enabled","startBackgroundAuth","config","startInBackground","setSimBindingEnabled","checkSimBindingStatus","clearSimBinding","isSdkReady","initTrueCaller","requestMap","userAuthEvent","event","providerType","fallback","providerInfo"],"sourceRoot":"../../src","sources":["index.tsx"],"mappings":";;;;;;;;;AAAA,IAAAA,YAAA,GAAAC,OAAA;AAmJA,IAAAC,OAAA,GAAAD,OAAA;AAAAE,MAAA,CAAAC,IAAA,CAAAF,OAAA,EAAAG,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAJ,OAAA,CAAAI,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAZ,OAAA,CAAAI,GAAA;IAAA;EAAA;AAAA;AA1IA,MAAMS,aAAa,GACjB,8EAA8E,GAC9EC,qBAAQ,CAACC,MAAM,CAAC;EAAEC,GAAG,EAAE,gCAAgC;EAAEC,OAAO,EAAE;AAAG,CAAC,CAAC,GACvE,sDAAsD,GACtD,+BAA+B;AAEjC,MAAMC,iBAAiB,GAAGC,0BAAa,CAACD,iBAAiB,GACrDC,0BAAa,CAACD,iBAAiB,GAC/B,IAAIE,KAAK,CACP,CAAC,CAAC,EACF;EACER,GAAGA,CAAA,EAAG;IACJ,MAAM,IAAIS,KAAK,CAACR,aAAa,CAAC;EAChC;AACF,CACF,CAAC;AAML,MAAMS,qBAAqB,CAAC;EAClBC,YAAY,GAA8B,IAAI;EAEtDC,WAAWA,CAAA,EAAG;IACZ,IAAI,CAACD,YAAY,GAAG,IAAI;EAC1B;EAEAE,aAAaA,CAAA,EAAG;IAAA,IAAAC,kBAAA;IACd,CAAAA,kBAAA,OAAI,CAACH,YAAY,cAAAG,kBAAA,eAAjBA,kBAAA,CAAmBC,kBAAkB,CAAC,oBAAoB,CAAC;EAC7D;EAEAC,UAAUA,CAACC,KAAa,EAAEC,QAAuB,GAAG,IAAI,EAAE;IACxD,IAAI,IAAI,CAACP,YAAY,IAAI,IAAI,EAAE;MAC7B,IAAI,CAACA,YAAY,GAAG,IAAIQ,+BAAkB,CAACb,iBAAiB,CAAC;IAC/D;IACA;IACAA,iBAAiB,CAACU,UAAU,CAACC,KAAK,EAAEC,QAAQ,CAAC;EAC/C;EAEAE,mBAAmBA,CAACC,QAA+B,EAAE;IAAA,IAAAC,mBAAA;IACnD,CAAAA,mBAAA,OAAI,CAACX,YAAY,cAAAW,mBAAA,eAAjBA,mBAAA,CAAmBC,WAAW,CAAC,oBAAoB,EAAEF,QAAQ,CAAC;EAChE;EAEAG,KAAKA,CAACC,KAA0B,EAAE;IAChCnB,iBAAiB,CAACkB,KAAK,CAACC,KAAK,CAAC;EAChC;EAEAC,cAAcA,CAACC,QAAa,EAAE;IAC5BrB,iBAAiB,CAACoB,cAAc,CAACC,QAAQ,CAAC;EAC5C;;EAEA;EACA,MAAMC,6BAA6BA,CAAA,EAAqB;IACtD,IAAI1B,qBAAQ,CAAC2B,EAAE,KAAK,SAAS,EAAE;MAC7B;MACA,OAAO,MAAMvB,iBAAiB,CAACwB,mBAAmB,CAAC,CAAC;IACtD,CAAC,MAAM;MACL,OAAO,KAAK;IACd;EACF;EAEAC,OAAOA,CAAA,EAAG;IACRzB,iBAAiB,CAACyB,OAAO,CAAC,CAAC;EAC7B;EAEAC,WAAWA,CAAA,EAAG;IACZ,IAAI9B,qBAAQ,CAAC2B,EAAE,CAACI,WAAW,CAAC,CAAC,KAAK,KAAK,EAAE;MACvC3B,iBAAiB,CAAC0B,WAAW,CAAC,CAAC;IACjC;EACF;EAEAE,aAAaA,CAACC,MAAe,EAAE;IAC7B7B,iBAAiB,CAAC4B,aAAa,CAACC,MAAM,CAAC;EACzC;EAEAC,aAAaA,CAACC,OAAgB,EAAE;IAC9B/B,iBAAiB,CAAC8B,aAAa,CAACC,OAAO,CAAC;EAC1C;EAEA,MAAMC,mBAAmBA,CACvBC,MAAmC,EACjB;IAClB,OAAO,MAAMjC,iBAAiB,CAACgC,mBAAmB,CAACC,MAAM,CAAC;EAC5D;EAEAC,iBAAiBA,CAACf,KAA0B,EAAE;IAC5C,IAAIvB,qBAAQ,CAAC2B,EAAE,KAAK,SAAS,EAAE;MAC7BvB,iBAAiB,CAACkC,iBAAiB,CAACf,KAAK,CAAC;IAC5C;EACF;EAEAgB,oBAAoBA,CAACJ,OAAgB,EAAE;IACrC,IAAInC,qBAAQ,CAAC2B,EAAE,KAAK,SAAS,EAAE;MAC7BvB,iBAAiB,CAACmC,oBAAoB,CAACJ,OAAO,CAAC;IACjD;EACF;EAEA,MAAMK,qBAAqBA,CAAA,EAAqB;IAC9C,IAAIxC,qBAAQ,CAAC2B,EAAE,KAAK,SAAS,EAAE;MAC7B,OAAO,MAAMvB,iBAAiB,CAACoC,qBAAqB,CAAC,CAAC;IACxD;IACA,OAAO,KAAK;EACd;EAEA,MAAMC,eAAeA,CAAA,EAAkB;IACrC,IAAIzC,qBAAQ,CAAC2B,EAAE,KAAK,SAAS,EAAE;MAC7B,MAAMvB,iBAAiB,CAACqC,eAAe,CAAC,CAAC;IAC3C;EACF;EAEA,MAAMC,UAAUA,CAAA,EAAqB;IACnC,OAAO,MAAMtC,iBAAiB,CAACsC,UAAU,CAAC,CAAC;EAC7C;EAEA,MAAMC,cAAcA,CAACC,UAAoC,EAAoB;IAC3E,IAAI5C,qBAAQ,CAAC2B,EAAE,KAAK,SAAS,EAAE;MAC7B,OAAO,MAAMvB,iBAAiB,CAACuC,cAAc,CAACC,UAAU,CAAC;IAC3D;IACA,OAAO,KAAK;EACd;EAEAC,aAAaA,CACXC,KAAuB,EACvBC,YAAiC,EACjCC,QAAiB,GAAG,KAAK,EACzBC,YAAiB,GAAG,CAAC,CAAC,EACtB;IACA7C,iBAAiB,CAACyC,aAAa,CAC7BC,KAAK,EACLE,QAAQ,EACRD,YAAY,EACZE,YACF,CAAC;EACH;AACF;AAACtD,OAAA,CAAAa,qBAAA,GAAAA,qBAAA","ignoreList":[]}
+{"version":3,"names":["_reactNative","require","_version","_models","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","LINKING_ERROR","Platform","select","ios","default","OtplessHeadlessRN","NativeModules","Proxy","Error","BUILD_PLATFORM","OS","otplessRnVersion","OtplessHeadlessModule","eventEmitter","constructor","clearListener","_this$eventEmitter","removeAllListeners","initialize","appId","loginUri","options","NativeEventEmitter","sslPinning","setResponseCallback","callback","_this$eventEmitter2","addListener","start","input","commitResponse","response","isWhatsappInstalledForAndroid","isWhatsappInstalled","cleanup","decimateAll","toLowerCase","setDevLogging","enable","setMfaEnabled","enabled","startBackgroundAuth","config","startInBackground","setSimBindingEnabled","checkSimBindingStatus","clearSimBinding","isSdkReady","initTrueCaller","requestMap","userAuthEvent","event","providerType","fallback","providerInfo"],"sourceRoot":"../../src","sources":["index.tsx"],"mappings":";;;;;;;;;AAAA,IAAAA,YAAA,GAAAC,OAAA;AASA,IAAAC,QAAA,GAAAD,OAAA;AAyKA,IAAAE,OAAA,GAAAF,OAAA;AAAAG,MAAA,CAAAC,IAAA,CAAAF,OAAA,EAAAG,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAJ,OAAA,CAAAI,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAZ,OAAA,CAAAI,GAAA;IAAA;EAAA;AAAA;AAvKA,MAAMS,aAAa,GACjB,8EAA8E,GAC9EC,qBAAQ,CAACC,MAAM,CAAC;EAAEC,GAAG,EAAE,gCAAgC;EAAEC,OAAO,EAAE;AAAG,CAAC,CAAC,GACvE,sDAAsD,GACtD,+BAA+B;AAEjC,MAAMC,iBAAiB,GAAGC,0BAAa,CAACD,iBAAiB,GACrDC,0BAAa,CAACD,iBAAiB,GAC/B,IAAIE,KAAK,CACP,CAAC,CAAC,EACF;EACER,GAAGA,CAAA,EAAG;IACJ,MAAM,IAAIS,KAAK,CAACR,aAAa,CAAC;EAChC;AACF,CACF,CAAC;;AAEL;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMS,cAAc,GAAG,gBAAgBR,qBAAQ,CAACS,EAAE,IAAIC,yBAAgB,EAAE;AAMxE,MAAMC,qBAAqB,CAAC;EAClBC,YAAY,GAA8B,IAAI;EAEtDC,WAAWA,CAAA,EAAG;IACZ,IAAI,CAACD,YAAY,GAAG,IAAI;EAC1B;EAEAE,aAAaA,CAAA,EAAG;IAAA,IAAAC,kBAAA;IACd,CAAAA,kBAAA,OAAI,CAACH,YAAY,cAAAG,kBAAA,eAAjBA,kBAAA,CAAmBC,kBAAkB,CAAC,oBAAoB,CAAC;EAC7D;EAEAC,UAAUA,CACRC,KAAa,EACbC,QAAuB,GAAG,IAAI,EAC9BC,OAAkC,GAAG,IAAI,EACzC;IACA,IAAI,IAAI,CAACR,YAAY,IAAI,IAAI,EAAE;MAC7B,IAAI,CAACA,YAAY,GAAG,IAAIS,+BAAkB,CAACjB,iBAAiB,CAAC;IAC/D;IACA;IACA;IACA;IACA;IACAA,iBAAiB,CAACa,UAAU,CAC1BC,KAAK,EACLC,QAAQ,EACR,CAAAC,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEE,UAAU,KAAI,UAAU,EACjCd,cACF,CAAC;EACH;EAEAe,mBAAmBA,CAACC,QAA+B,EAAE;IAAA,IAAAC,mBAAA;IACnD,CAAAA,mBAAA,OAAI,CAACb,YAAY,cAAAa,mBAAA,eAAjBA,mBAAA,CAAmBC,WAAW,CAAC,oBAAoB,EAAEF,QAAQ,CAAC;EAChE;EAEAG,KAAKA,CAACC,KAA0B,EAAE;IAChCxB,iBAAiB,CAACuB,KAAK,CAACC,KAAK,CAAC;EAChC;EAEAC,cAAcA,CAACC,QAAa,EAAE;IAC5B1B,iBAAiB,CAACyB,cAAc,CAACC,QAAQ,CAAC;EAC5C;;EAEA;EACA,MAAMC,6BAA6BA,CAAA,EAAqB;IACtD,IAAI/B,qBAAQ,CAACS,EAAE,KAAK,SAAS,EAAE;MAC7B;MACA,OAAO,MAAML,iBAAiB,CAAC4B,mBAAmB,CAAC,CAAC;IACtD,CAAC,MAAM;MACL,OAAO,KAAK;IACd;EACF;EAEAC,OAAOA,CAAA,EAAG;IACR7B,iBAAiB,CAAC6B,OAAO,CAAC,CAAC;EAC7B;EAEAC,WAAWA,CAAA,EAAG;IACZ,IAAIlC,qBAAQ,CAACS,EAAE,CAAC0B,WAAW,CAAC,CAAC,KAAK,KAAK,EAAE;MACvC/B,iBAAiB,CAAC8B,WAAW,CAAC,CAAC;IACjC;EACF;EAEAE,aAAaA,CAACC,MAAe,EAAE;IAC7BjC,iBAAiB,CAACgC,aAAa,CAACC,MAAM,CAAC;EACzC;EAEAC,aAAaA,CAACC,OAAgB,EAAE;IAC9BnC,iBAAiB,CAACkC,aAAa,CAACC,OAAO,CAAC;EAC1C;EAEA,MAAMC,mBAAmBA,CACvBC,MAAmC,EACjB;IAClB,OAAO,MAAMrC,iBAAiB,CAACoC,mBAAmB,CAACC,MAAM,CAAC;EAC5D;EAEAC,iBAAiBA,CAACd,KAA0B,EAAE;IAC5C,IAAI5B,qBAAQ,CAACS,EAAE,KAAK,SAAS,EAAE;MAC7BL,iBAAiB,CAACsC,iBAAiB,CAACd,KAAK,CAAC;IAC5C;EACF;EAEAe,oBAAoBA,CAACJ,OAAgB,EAAE;IACrC,IAAIvC,qBAAQ,CAACS,EAAE,KAAK,SAAS,EAAE;MAC7BL,iBAAiB,CAACuC,oBAAoB,CAACJ,OAAO,CAAC;IACjD;EACF;EAEA,MAAMK,qBAAqBA,CAAA,EAAqB;IAC9C,IAAI5C,qBAAQ,CAACS,EAAE,KAAK,SAAS,EAAE;MAC7B,OAAO,MAAML,iBAAiB,CAACwC,qBAAqB,CAAC,CAAC;IACxD;IACA,OAAO,KAAK;EACd;EAEA,MAAMC,eAAeA,CAAA,EAAkB;IACrC,IAAI7C,qBAAQ,CAACS,EAAE,KAAK,SAAS,EAAE;MAC7B,MAAML,iBAAiB,CAACyC,eAAe,CAAC,CAAC;IAC3C;EACF;EAEA,MAAMC,UAAUA,CAAA,EAAqB;IACnC,OAAO,MAAM1C,iBAAiB,CAAC0C,UAAU,CAAC,CAAC;EAC7C;EAEA,MAAMC,cAAcA,CAACC,UAAoC,EAAoB;IAC3E,IAAIhD,qBAAQ,CAACS,EAAE,KAAK,SAAS,EAAE;MAC7B,OAAO,MAAML,iBAAiB,CAAC2C,cAAc,CAACC,UAAU,CAAC;IAC3D;IACA,OAAO,KAAK;EACd;EAEAC,aAAaA,CACXC,KAAuB,EACvBC,YAAiC,EACjCC,QAAiB,GAAG,KAAK,EACzBC,YAAiB,GAAG,CAAC,CAAC,EACtB;IACAjD,iBAAiB,CAAC6C,aAAa,CAC7BC,KAAK,EACLE,QAAQ,EACRD,YAAY,EACZE,YACF,CAAC;EACH;AACF;AAAC1D,OAAA,CAAAgB,qBAAA,GAAAA,qBAAA","ignoreList":[]}

package/lib/commonjs/version.js

@@ -0,0 +1,24 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.otplessRnVersion = void 0;
+/**
+ * This package's own version, kept in lock-step with `version` in
+ * `package.json`.
+ *
+ * Internal only: this module is deliberately **not** re-exported from
+ * `src/index.tsx` (which exports `OtplessHeadlessModule` and `./models`), so it
+ * never becomes merchant-facing API. It exists so the wrapper-attribution token
+ * sent to the native SDKs at `initialize`
+ * (`react-native-android-<version>` / `react-native-ios-<version>`) has a
+ * single source of truth in TypeScript instead of being duplicated in Kotlin
+ * and Swift, where it would silently drift on every release.
+ *
+ * `src/__tests__/version.test.ts` reads `package.json` and fails if this
+ * constant falls out of sync, so a forgotten bump breaks CI rather than
+ * shipping a wrong token.
+ */
+const otplessRnVersion = exports.otplessRnVersion = '3.0.0';
+//# sourceMappingURL=version.js.map

package/lib/commonjs/version.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["otplessRnVersion","exports"],"sourceRoot":"../../src","sources":["version.ts"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMA,gBAAgB,GAAAC,OAAA,CAAAD,gBAAA,GAAG,OAAO","ignoreList":[]}

package/lib/module/index.js

@@ -1,4 +1,5 @@
 import { NativeModules, Platform, NativeEventEmitter } from 'react-native';
+import { otplessRnVersion } from './version';
 const LINKING_ERROR = `The package 'otpless-headless-rn' doesn't seem to be linked. Make sure: \n\n` + Platform.select({
   ios: "- You have run 'pod install'\n",
   default: ''
@@ -8,6 +9,23 @@ const OtplessHeadlessRN = NativeModules.OtplessHeadlessRN ? NativeModules.Otples
     throw new Error(LINKING_ERROR);
   }
 });
+
+/**
+ * Wrapper-attribution token sent to the native SDKs at `initialize`.
+ *
+ * Computed here, in JS, so `otplessRnVersion` is the single source of truth:
+ * the Kotlin and Swift bridges only forward whatever arrives over the bridge,
+ * instead of each hardcoding a version that would drift on every release.
+ *
+ * Emitted by the native device-telemetry event as:
+ * - Android - `otpless-headless-sdk(react-native-android-<version>)`
+ * - iOS - `otpless-headless(react-native-ios-<version>)`
+ *
+ * The `react-native-` prefix distinguishes this package from the sibling
+ * wrappers (`react-native-lite-*`, `react-native-turbo-*`), which share the
+ * same iOS telemetry prefix.
+ */
+const BUILD_PLATFORM = `react-native-${Platform.OS}-${otplessRnVersion}`;
 class OtplessHeadlessModule {
   eventEmitter = null;
   constructor() {
@@ -17,12 +35,15 @@ class OtplessHeadlessModule {
     var _this$eventEmitter;
     (_this$eventEmitter = this.eventEmitter) === null || _this$eventEmitter === void 0 || _this$eventEmitter.removeAllListeners('OTPlessEventResult');
   }
-  initialize(appId, loginUri = null) {
+  initialize(appId, loginUri = null, options = null) {
     if (this.eventEmitter == null) {
       this.eventEmitter = new NativeEventEmitter(OtplessHeadlessRN);
     }
-    // call the native method
-    OtplessHeadlessRN.initialize(appId, loginUri);
+    // call the native method; sslPinning is a plain string so an older
+    // native module degrades to pinning disabled. buildPlatform is internal
+    // wrapper attribution, not a merchant-facing parameter; the native bridges
+    // fall back to a bare "react-native-<platform>" if it ever arrives blank.
+    OtplessHeadlessRN.initialize(appId, loginUri, (options === null || options === void 0 ? void 0 : options.sslPinning) ?? 'disabled', BUILD_PLATFORM);
   }
   setResponseCallback(callback) {
     var _this$eventEmitter2;

package/lib/module/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["NativeModules","Platform","NativeEventEmitter","LINKING_ERROR","select","ios","default","OtplessHeadlessRN","Proxy","get","Error","OtplessHeadlessModule","eventEmitter","constructor","clearListener","_this$eventEmitter","removeAllListeners","initialize","appId","loginUri","setResponseCallback","callback","_this$eventEmitter2","addListener","start","input","commitResponse","response","isWhatsappInstalledForAndroid","OS","isWhatsappInstalled","cleanup","decimateAll","toLowerCase","setDevLogging","enable","setMfaEnabled","enabled","startBackgroundAuth","config","startInBackground","setSimBindingEnabled","checkSimBindingStatus","clearSimBinding","isSdkReady","initTrueCaller","requestMap","userAuthEvent","event","providerType","fallback","providerInfo"],"sourceRoot":"../../src","sources":["index.tsx"],"mappings":"AAAA,SAASA,aAAa,EAAEC,QAAQ,EAAEC,kBAAkB,QAAQ,cAAc;AAS1E,MAAMC,aAAa,GACjB,8EAA8E,GAC9EF,QAAQ,CAACG,MAAM,CAAC;EAAEC,GAAG,EAAE,gCAAgC;EAAEC,OAAO,EAAE;AAAG,CAAC,CAAC,GACvE,sDAAsD,GACtD,+BAA+B;AAEjC,MAAMC,iBAAiB,GAAGP,aAAa,CAACO,iBAAiB,GACrDP,aAAa,CAACO,iBAAiB,GAC/B,IAAIC,KAAK,CACP,CAAC,CAAC,EACF;EACEC,GAAGA,CAAA,EAAG;IACJ,MAAM,IAAIC,KAAK,CAACP,aAAa,CAAC;EAChC;AACF,CACF,CAAC;AAML,MAAMQ,qBAAqB,CAAC;EAClBC,YAAY,GAA8B,IAAI;EAEtDC,WAAWA,CAAA,EAAG;IACZ,IAAI,CAACD,YAAY,GAAG,IAAI;EAC1B;EAEAE,aAAaA,CAAA,EAAG;IAAA,IAAAC,kBAAA;IACd,CAAAA,kBAAA,OAAI,CAACH,YAAY,cAAAG,kBAAA,eAAjBA,kBAAA,CAAmBC,kBAAkB,CAAC,oBAAoB,CAAC;EAC7D;EAEAC,UAAUA,CAACC,KAAa,EAAEC,QAAuB,GAAG,IAAI,EAAE;IACxD,IAAI,IAAI,CAACP,YAAY,IAAI,IAAI,EAAE;MAC7B,IAAI,CAACA,YAAY,GAAG,IAAIV,kBAAkB,CAACK,iBAAiB,CAAC;IAC/D;IACA;IACAA,iBAAiB,CAACU,UAAU,CAACC,KAAK,EAAEC,QAAQ,CAAC;EAC/C;EAEAC,mBAAmBA,CAACC,QAA+B,EAAE;IAAA,IAAAC,mBAAA;IACnD,CAAAA,mBAAA,OAAI,CAACV,YAAY,cAAAU,mBAAA,eAAjBA,mBAAA,CAAmBC,WAAW,CAAC,oBAAoB,EAAEF,QAAQ,CAAC;EAChE;EAEAG,KAAKA,CAACC,KAA0B,EAAE;IAChClB,iBAAiB,CAACiB,KAAK,CAACC,KAAK,CAAC;EAChC;EAEAC,cAAcA,CAACC,QAAa,EAAE;IAC5BpB,iBAAiB,CAACmB,cAAc,CAACC,QAAQ,CAAC;EAC5C;;EAEA;EACA,MAAMC,6BAA6BA,CAAA,EAAqB;IACtD,IAAI3B,QAAQ,CAAC4B,EAAE,KAAK,SAAS,EAAE;MAC7B;MACA,OAAO,MAAMtB,iBAAiB,CAACuB,mBAAmB,CAAC,CAAC;IACtD,CAAC,MAAM;MACL,OAAO,KAAK;IACd;EACF;EAEAC,OAAOA,CAAA,EAAG;IACRxB,iBAAiB,CAACwB,OAAO,CAAC,CAAC;EAC7B;EAEAC,WAAWA,CAAA,EAAG;IACZ,IAAI/B,QAAQ,CAAC4B,EAAE,CAACI,WAAW,CAAC,CAAC,KAAK,KAAK,EAAE;MACvC1B,iBAAiB,CAACyB,WAAW,CAAC,CAAC;IACjC;EACF;EAEAE,aAAaA,CAACC,MAAe,EAAE;IAC7B5B,iBAAiB,CAAC2B,aAAa,CAACC,MAAM,CAAC;EACzC;EAEAC,aAAaA,CAACC,OAAgB,EAAE;IAC9B9B,iBAAiB,CAAC6B,aAAa,CAACC,OAAO,CAAC;EAC1C;EAEA,MAAMC,mBAAmBA,CACvBC,MAAmC,EACjB;IAClB,OAAO,MAAMhC,iBAAiB,CAAC+B,mBAAmB,CAACC,MAAM,CAAC;EAC5D;EAEAC,iBAAiBA,CAACf,KAA0B,EAAE;IAC5C,IAAIxB,QAAQ,CAAC4B,EAAE,KAAK,SAAS,EAAE;MAC7BtB,iBAAiB,CAACiC,iBAAiB,CAACf,KAAK,CAAC;IAC5C;EACF;EAEAgB,oBAAoBA,CAACJ,OAAgB,EAAE;IACrC,IAAIpC,QAAQ,CAAC4B,EAAE,KAAK,SAAS,EAAE;MAC7BtB,iBAAiB,CAACkC,oBAAoB,CAACJ,OAAO,CAAC;IACjD;EACF;EAEA,MAAMK,qBAAqBA,CAAA,EAAqB;IAC9C,IAAIzC,QAAQ,CAAC4B,EAAE,KAAK,SAAS,EAAE;MAC7B,OAAO,MAAMtB,iBAAiB,CAACmC,qBAAqB,CAAC,CAAC;IACxD;IACA,OAAO,KAAK;EACd;EAEA,MAAMC,eAAeA,CAAA,EAAkB;IACrC,IAAI1C,QAAQ,CAAC4B,EAAE,KAAK,SAAS,EAAE;MAC7B,MAAMtB,iBAAiB,CAACoC,eAAe,CAAC,CAAC;IAC3C;EACF;EAEA,MAAMC,UAAUA,CAAA,EAAqB;IACnC,OAAO,MAAMrC,iBAAiB,CAACqC,UAAU,CAAC,CAAC;EAC7C;EAEA,MAAMC,cAAcA,CAACC,UAAoC,EAAoB;IAC3E,IAAI7C,QAAQ,CAAC4B,EAAE,KAAK,SAAS,EAAE;MAC7B,OAAO,MAAMtB,iBAAiB,CAACsC,cAAc,CAACC,UAAU,CAAC;IAC3D;IACA,OAAO,KAAK;EACd;EAEAC,aAAaA,CACXC,KAAuB,EACvBC,YAAiC,EACjCC,QAAiB,GAAG,KAAK,EACzBC,YAAiB,GAAG,CAAC,CAAC,EACtB;IACA5C,iBAAiB,CAACwC,aAAa,CAC7BC,KAAK,EACLE,QAAQ,EACRD,YAAY,EACZE,YACF,CAAC;EACH;AACF;AAEA,SAASxC,qBAAqB;AAC9B,cAAc,UAAU","ignoreList":[]}
+{"version":3,"names":["NativeModules","Platform","NativeEventEmitter","otplessRnVersion","LINKING_ERROR","select","ios","default","OtplessHeadlessRN","Proxy","get","Error","BUILD_PLATFORM","OS","OtplessHeadlessModule","eventEmitter","constructor","clearListener","_this$eventEmitter","removeAllListeners","initialize","appId","loginUri","options","sslPinning","setResponseCallback","callback","_this$eventEmitter2","addListener","start","input","commitResponse","response","isWhatsappInstalledForAndroid","isWhatsappInstalled","cleanup","decimateAll","toLowerCase","setDevLogging","enable","setMfaEnabled","enabled","startBackgroundAuth","config","startInBackground","setSimBindingEnabled","checkSimBindingStatus","clearSimBinding","isSdkReady","initTrueCaller","requestMap","userAuthEvent","event","providerType","fallback","providerInfo"],"sourceRoot":"../../src","sources":["index.tsx"],"mappings":"AAAA,SAASA,aAAa,EAAEC,QAAQ,EAAEC,kBAAkB,QAAQ,cAAc;AAS1E,SAASC,gBAAgB,QAAQ,WAAW;AAE5C,MAAMC,aAAa,GACjB,8EAA8E,GAC9EH,QAAQ,CAACI,MAAM,CAAC;EAAEC,GAAG,EAAE,gCAAgC;EAAEC,OAAO,EAAE;AAAG,CAAC,CAAC,GACvE,sDAAsD,GACtD,+BAA+B;AAEjC,MAAMC,iBAAiB,GAAGR,aAAa,CAACQ,iBAAiB,GACrDR,aAAa,CAACQ,iBAAiB,GAC/B,IAAIC,KAAK,CACP,CAAC,CAAC,EACF;EACEC,GAAGA,CAAA,EAAG;IACJ,MAAM,IAAIC,KAAK,CAACP,aAAa,CAAC;EAChC;AACF,CACF,CAAC;;AAEL;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMQ,cAAc,GAAG,gBAAgBX,QAAQ,CAACY,EAAE,IAAIV,gBAAgB,EAAE;AAMxE,MAAMW,qBAAqB,CAAC;EAClBC,YAAY,GAA8B,IAAI;EAEtDC,WAAWA,CAAA,EAAG;IACZ,IAAI,CAACD,YAAY,GAAG,IAAI;EAC1B;EAEAE,aAAaA,CAAA,EAAG;IAAA,IAAAC,kBAAA;IACd,CAAAA,kBAAA,OAAI,CAACH,YAAY,cAAAG,kBAAA,eAAjBA,kBAAA,CAAmBC,kBAAkB,CAAC,oBAAoB,CAAC;EAC7D;EAEAC,UAAUA,CACRC,KAAa,EACbC,QAAuB,GAAG,IAAI,EAC9BC,OAAkC,GAAG,IAAI,EACzC;IACA,IAAI,IAAI,CAACR,YAAY,IAAI,IAAI,EAAE;MAC7B,IAAI,CAACA,YAAY,GAAG,IAAIb,kBAAkB,CAACM,iBAAiB,CAAC;IAC/D;IACA;IACA;IACA;IACA;IACAA,iBAAiB,CAACY,UAAU,CAC1BC,KAAK,EACLC,QAAQ,EACR,CAAAC,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEC,UAAU,KAAI,UAAU,EACjCZ,cACF,CAAC;EACH;EAEAa,mBAAmBA,CAACC,QAA+B,EAAE;IAAA,IAAAC,mBAAA;IACnD,CAAAA,mBAAA,OAAI,CAACZ,YAAY,cAAAY,mBAAA,eAAjBA,mBAAA,CAAmBC,WAAW,CAAC,oBAAoB,EAAEF,QAAQ,CAAC;EAChE;EAEAG,KAAKA,CAACC,KAA0B,EAAE;IAChCtB,iBAAiB,CAACqB,KAAK,CAACC,KAAK,CAAC;EAChC;EAEAC,cAAcA,CAACC,QAAa,EAAE;IAC5BxB,iBAAiB,CAACuB,cAAc,CAACC,QAAQ,CAAC;EAC5C;;EAEA;EACA,MAAMC,6BAA6BA,CAAA,EAAqB;IACtD,IAAIhC,QAAQ,CAACY,EAAE,KAAK,SAAS,EAAE;MAC7B;MACA,OAAO,MAAML,iBAAiB,CAAC0B,mBAAmB,CAAC,CAAC;IACtD,CAAC,MAAM;MACL,OAAO,KAAK;IACd;EACF;EAEAC,OAAOA,CAAA,EAAG;IACR3B,iBAAiB,CAAC2B,OAAO,CAAC,CAAC;EAC7B;EAEAC,WAAWA,CAAA,EAAG;IACZ,IAAInC,QAAQ,CAACY,EAAE,CAACwB,WAAW,CAAC,CAAC,KAAK,KAAK,EAAE;MACvC7B,iBAAiB,CAAC4B,WAAW,CAAC,CAAC;IACjC;EACF;EAEAE,aAAaA,CAACC,MAAe,EAAE;IAC7B/B,iBAAiB,CAAC8B,aAAa,CAACC,MAAM,CAAC;EACzC;EAEAC,aAAaA,CAACC,OAAgB,EAAE;IAC9BjC,iBAAiB,CAACgC,aAAa,CAACC,OAAO,CAAC;EAC1C;EAEA,MAAMC,mBAAmBA,CACvBC,MAAmC,EACjB;IAClB,OAAO,MAAMnC,iBAAiB,CAACkC,mBAAmB,CAACC,MAAM,CAAC;EAC5D;EAEAC,iBAAiBA,CAACd,KAA0B,EAAE;IAC5C,IAAI7B,QAAQ,CAACY,EAAE,KAAK,SAAS,EAAE;MAC7BL,iBAAiB,CAACoC,iBAAiB,CAACd,KAAK,CAAC;IAC5C;EACF;EAEAe,oBAAoBA,CAACJ,OAAgB,EAAE;IACrC,IAAIxC,QAAQ,CAACY,EAAE,KAAK,SAAS,EAAE;MAC7BL,iBAAiB,CAACqC,oBAAoB,CAACJ,OAAO,CAAC;IACjD;EACF;EAEA,MAAMK,qBAAqBA,CAAA,EAAqB;IAC9C,IAAI7C,QAAQ,CAACY,EAAE,KAAK,SAAS,EAAE;MAC7B,OAAO,MAAML,iBAAiB,CAACsC,qBAAqB,CAAC,CAAC;IACxD;IACA,OAAO,KAAK;EACd;EAEA,MAAMC,eAAeA,CAAA,EAAkB;IACrC,IAAI9C,QAAQ,CAACY,EAAE,KAAK,SAAS,EAAE;MAC7B,MAAML,iBAAiB,CAACuC,eAAe,CAAC,CAAC;IAC3C;EACF;EAEA,MAAMC,UAAUA,CAAA,EAAqB;IACnC,OAAO,MAAMxC,iBAAiB,CAACwC,UAAU,CAAC,CAAC;EAC7C;EAEA,MAAMC,cAAcA,CAACC,UAAoC,EAAoB;IAC3E,IAAIjD,QAAQ,CAACY,EAAE,KAAK,SAAS,EAAE;MAC7B,OAAO,MAAML,iBAAiB,CAACyC,cAAc,CAACC,UAAU,CAAC;IAC3D;IACA,OAAO,KAAK;EACd;EAEAC,aAAaA,CACXC,KAAuB,EACvBC,YAAiC,EACjCC,QAAiB,GAAG,KAAK,EACzBC,YAAiB,GAAG,CAAC,CAAC,EACtB;IACA/C,iBAAiB,CAAC2C,aAAa,CAC7BC,KAAK,EACLE,QAAQ,EACRD,YAAY,EACZE,YACF,CAAC;EACH;AACF;AAEA,SAASzC,qBAAqB;AAC9B,cAAc,UAAU","ignoreList":[]}

package/lib/module/version.js

@@ -0,0 +1,18 @@
+/**
+ * This package's own version, kept in lock-step with `version` in
+ * `package.json`.
+ *
+ * Internal only: this module is deliberately **not** re-exported from
+ * `src/index.tsx` (which exports `OtplessHeadlessModule` and `./models`), so it
+ * never becomes merchant-facing API. It exists so the wrapper-attribution token
+ * sent to the native SDKs at `initialize`
+ * (`react-native-android-<version>` / `react-native-ios-<version>`) has a
+ * single source of truth in TypeScript instead of being duplicated in Kotlin
+ * and Swift, where it would silently drift on every release.
+ *
+ * `src/__tests__/version.test.ts` reads `package.json` and fails if this
+ * constant falls out of sync, so a forgotten bump breaks CI rather than
+ * shipping a wrong token.
+ */
+export const otplessRnVersion = '3.0.0';
+//# sourceMappingURL=version.js.map

package/lib/module/version.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["otplessRnVersion"],"sourceRoot":"../../src","sources":["version.ts"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMA,gBAAgB,GAAG,OAAO","ignoreList":[]}

package/lib/typescript/index.d.ts

@@ -1,4 +1,4 @@
-import type { OtplessTruecallerRequest, OtplessAuthEvent, OtplessProviderType, OtplessRequestInput, OtplessBackgroundAuthConfig } from './models';
+import type { OtplessTruecallerRequest, OtplessAuthEvent, OtplessProviderType, OtplessRequestInput, OtplessBackgroundAuthConfig, OtplessInitOptions } from './models';
 interface OtplessResultCallback {
     (result: any): void;
 }
@@ -6,7 +6,7 @@ declare class OtplessHeadlessModule {
     private eventEmitter;
     constructor();
     clearListener(): void;
-    initialize(appId: String, loginUri?: string | null): void;
+    initialize(appId: string, loginUri?: string | null, options?: OtplessInitOptions | null): void;
     setResponseCallback(callback: OtplessResultCallback): void;
     start(input: OtplessRequestInput): void;
     commitResponse(response: any): void;

package/lib/typescript/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACnB,2BAA2B,EAC5B,MAAM,UAAU,CAAC;AAmBlB,UAAU,qBAAqB;IAC7B,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC;CACrB;AAED,cAAM,qBAAqB;IACzB,OAAO,CAAC,YAAY,CAAmC;;IAMvD,aAAa;IAIb,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,GAAG,IAAW;IAQxD,mBAAmB,CAAC,QAAQ,EAAE,qBAAqB;IAInD,KAAK,CAAC,KAAK,EAAE,mBAAmB;IAIhC,cAAc,CAAC,QAAQ,EAAE,GAAG;IAKtB,6BAA6B,IAAI,OAAO,CAAC,OAAO,CAAC;IASvD,OAAO;IAIP,WAAW;IAMX,aAAa,CAAC,MAAM,EAAE,OAAO;IAI7B,aAAa,CAAC,OAAO,EAAE,OAAO;IAIxB,mBAAmB,CACvB,MAAM,EAAE,2BAA2B,GAClC,OAAO,CAAC,OAAO,CAAC;IAInB,iBAAiB,CAAC,KAAK,EAAE,mBAAmB;IAM5C,oBAAoB,CAAC,OAAO,EAAE,OAAO;IAM/B,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC;IAOzC,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAMhC,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAI9B,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,OAAO,CAAC;IAO5E,aAAa,CACX,KAAK,EAAE,gBAAgB,EACvB,YAAY,EAAE,mBAAmB,EACjC,QAAQ,GAAE,OAAe,EACzB,YAAY,GAAE,GAAQ;CASzB;AAED,OAAO,EAAE,qBAAqB,EAAE,CAAC;AACjC,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACnB,2BAA2B,EAC3B,kBAAkB,EACnB,MAAM,UAAU,CAAC;AAqClB,UAAU,qBAAqB;IAC7B,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC;CACrB;AAED,cAAM,qBAAqB;IACzB,OAAO,CAAC,YAAY,CAAmC;;IAMvD,aAAa;IAIb,UAAU,CACR,KAAK,EAAE,MAAM,EACb,QAAQ,GAAE,MAAM,GAAG,IAAW,EAC9B,OAAO,GAAE,kBAAkB,GAAG,IAAW;IAiB3C,mBAAmB,CAAC,QAAQ,EAAE,qBAAqB;IAInD,KAAK,CAAC,KAAK,EAAE,mBAAmB;IAIhC,cAAc,CAAC,QAAQ,EAAE,GAAG;IAKtB,6BAA6B,IAAI,OAAO,CAAC,OAAO,CAAC;IASvD,OAAO;IAIP,WAAW;IAMX,aAAa,CAAC,MAAM,EAAE,OAAO;IAI7B,aAAa,CAAC,OAAO,EAAE,OAAO;IAIxB,mBAAmB,CACvB,MAAM,EAAE,2BAA2B,GAClC,OAAO,CAAC,OAAO,CAAC;IAInB,iBAAiB,CAAC,KAAK,EAAE,mBAAmB;IAM5C,oBAAoB,CAAC,OAAO,EAAE,OAAO;IAM/B,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC;IAOzC,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAMhC,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAI9B,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,OAAO,CAAC;IAO5E,aAAa,CACX,KAAK,EAAE,gBAAgB,EACvB,YAAY,EAAE,mBAAmB,EACjC,QAAQ,GAAE,OAAe,EACzB,YAAY,GAAE,GAAQ;CASzB;AAED,OAAO,EAAE,qBAAqB,EAAE,CAAC;AACjC,cAAc,UAAU,CAAC"}

package/lib/typescript/models.d.ts

@@ -46,4 +46,14 @@ export interface OtplessBackgroundAuthConfig {
 }
 export type OtplessChannelType = 'WHATSAPP' | 'GOOGLE_SDK' | 'FACEBOOK_SDK' | 'APPLE' | 'APPLE_SDK' | 'GMAIL' | 'TWITTER' | 'DISCORD' | 'SLACK' | 'FACEBOOK' | 'LINKEDIN' | 'MICROSOFT' | 'LINE' | 'LINEAR' | 'NOTION' | 'TWITCH' | 'GITHUB' | 'BITBUCKET' | 'ATLASSIAN' | 'GITLAB' | 'TRUE_CALLER';
 export type OtplessDeviceFingerprintMode = 'NONE' | 'ASYNC' | 'SYNC';
+/**
+ * SSL pinning mode for `initialize`. `'disabled'` (default) keeps the
+ * 2.3.x behaviour. `'enabled'` pins `sigma.otpless.app`; a pin mismatch
+ * (e.g. an intercepting proxy) fails closed with `FAILED` / statusCode `5004`.
+ */
+export type OtplessSslPinning = 'enabled' | 'disabled';
+export interface OtplessInitOptions {
+    /** Defaults to `'disabled'`. */
+    sslPinning?: OtplessSslPinning;
+}
 //# sourceMappingURL=models.d.ts.map

package/lib/typescript/models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/models.tsx"],"names":[],"mappings":"AAAA,MAAM,WAAW,wBAAwB;IACvC,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IAC5C,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,CAAC,EAAE,YAAY,CAAC;IAC1B,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,eAAe,CAAC,EAAE,iBAAiB,CAAC;IACpC,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,OAAO,GACf,SAAS,GACT,OAAO,GACP,SAAS,GACT,gBAAgB,GAChB,OAAO,GACP,SAAS,CAAC;AAEd,MAAM,MAAM,YAAY,GACpB,kBAAkB,GAClB,+BAA+B,GAC/B,4BAA4B,GAC5B,sBAAsB,GACtB,mBAAmB,CAAC;AAExB,MAAM,MAAM,aAAa,GAAG,sBAAsB,GAAG,wBAAwB,CAAC;AAE9E,MAAM,MAAM,cAAc,GACtB,6BAA6B,GAC7B,yBAAyB,CAAC;AAE9B,MAAM,MAAM,gBAAgB,GACxB,+BAA+B,GAC/B,kCAAkC,GAClC,gCAAgC,GAChC,wCAAwC,GACxC,mCAAmC,GACnC,sCAAsC,GACtC,kCAAkC,GAClC,iCAAiC,GACjC,yCAAyC,GACzC,8CAA8C,GAC9C,0CAA0C,GAC1C,yCAAyC,GACzC,mCAAmC,GACnC,yCAAyC,GACzC,sCAAsC,GACtC,2CAA2C,GAC3C,mCAAmC,GACnC,yCAAyC,GACzC,8CAA8C,GAC9C,2CAA2C,GAC3C,kCAAkC,GAClC,sCAAsC,GACtC,yCAAyC,GACzC,0CAA0C,GAC1C,uCAAuC,CAAC;AAE5C,MAAM,MAAM,iBAAiB,GACzB,kCAAkC,GAClC,+BAA+B,GAC/B,kCAAkC,GAClC,6CAA6C,GAC7C,+BAA+B,GAC/B,4CAA4C,GAC5C,gDAAgD,GAChD,iDAAiD,GACjD,kCAAkC,GAClC,gCAAgC,GAChC,uCAAuC,GACvC,8BAA8B,GAC9B,mCAAmC,GACnC,kCAAkC,GAClC,gCAAgC,GAChC,gDAAgD,CAAC;AAErD,MAAM,MAAM,SAAS,GACjB,kBAAkB,GAClB,mBAAmB,GACnB,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,gBAAgB,GACxB,gBAAgB,GAChB,cAAc,GACd,aAAa,CAAC;AAElB,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEvD,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qBAAqB,CAAC,EAAE,4BAA4B,CAAC;CACtD;AAED,MAAM,WAAW,2BAA2B;IAC1C,uGAAuG;IACvG,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qBAAqB,CAAC,EAAE,4BAA4B,CAAC;CACtD;AAED,MAAM,MAAM,kBAAkB,GAC1B,UAAU,GACV,YAAY,GACZ,cAAc,GACd,OAAO,GACP,WAAW,GACX,OAAO,GACP,SAAS,GACT,SAAS,GACT,OAAO,GACP,UAAU,GACV,UAAU,GACV,WAAW,GACX,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,WAAW,GACX,WAAW,GACX,QAAQ,GACR,aAAa,CAAC;AAElB,MAAM,MAAM,4BAA4B,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC"}
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/models.tsx"],"names":[],"mappings":"AAAA,MAAM,WAAW,wBAAwB;IACvC,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IAC5C,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,CAAC,EAAE,YAAY,CAAC;IAC1B,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,eAAe,CAAC,EAAE,iBAAiB,CAAC;IACpC,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,OAAO,GACf,SAAS,GACT,OAAO,GACP,SAAS,GACT,gBAAgB,GAChB,OAAO,GACP,SAAS,CAAC;AAEd,MAAM,MAAM,YAAY,GACpB,kBAAkB,GAClB,+BAA+B,GAC/B,4BAA4B,GAC5B,sBAAsB,GACtB,mBAAmB,CAAC;AAExB,MAAM,MAAM,aAAa,GAAG,sBAAsB,GAAG,wBAAwB,CAAC;AAE9E,MAAM,MAAM,cAAc,GACtB,6BAA6B,GAC7B,yBAAyB,CAAC;AAE9B,MAAM,MAAM,gBAAgB,GACxB,+BAA+B,GAC/B,kCAAkC,GAClC,gCAAgC,GAChC,wCAAwC,GACxC,mCAAmC,GACnC,sCAAsC,GACtC,kCAAkC,GAClC,iCAAiC,GACjC,yCAAyC,GACzC,8CAA8C,GAC9C,0CAA0C,GAC1C,yCAAyC,GACzC,mCAAmC,GACnC,yCAAyC,GACzC,sCAAsC,GACtC,2CAA2C,GAC3C,mCAAmC,GACnC,yCAAyC,GACzC,8CAA8C,GAC9C,2CAA2C,GAC3C,kCAAkC,GAClC,sCAAsC,GACtC,yCAAyC,GACzC,0CAA0C,GAC1C,uCAAuC,CAAC;AAE5C,MAAM,MAAM,iBAAiB,GACzB,kCAAkC,GAClC,+BAA+B,GAC/B,kCAAkC,GAClC,6CAA6C,GAC7C,+BAA+B,GAC/B,4CAA4C,GAC5C,gDAAgD,GAChD,iDAAiD,GACjD,kCAAkC,GAClC,gCAAgC,GAChC,uCAAuC,GACvC,8BAA8B,GAC9B,mCAAmC,GACnC,kCAAkC,GAClC,gCAAgC,GAChC,gDAAgD,CAAC;AAErD,MAAM,MAAM,SAAS,GACjB,kBAAkB,GAClB,mBAAmB,GACnB,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,gBAAgB,GACxB,gBAAgB,GAChB,cAAc,GACd,aAAa,CAAC;AAElB,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEvD,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qBAAqB,CAAC,EAAE,4BAA4B,CAAC;CACtD;AAED,MAAM,WAAW,2BAA2B;IAC1C,uGAAuG;IACvG,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qBAAqB,CAAC,EAAE,4BAA4B,CAAC;CACtD;AAED,MAAM,MAAM,kBAAkB,GAC1B,UAAU,GACV,YAAY,GACZ,cAAc,GACd,OAAO,GACP,WAAW,GACX,OAAO,GACP,SAAS,GACT,SAAS,GACT,OAAO,GACP,UAAU,GACV,UAAU,GACV,WAAW,GACX,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,WAAW,GACX,WAAW,GACX,QAAQ,GACR,aAAa,CAAC;AAElB,MAAM,MAAM,4BAA4B,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAErE;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,UAAU,CAAC;AAEvD,MAAM,WAAW,kBAAkB;IACjC,gCAAgC;IAChC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CAChC"}

package/lib/typescript/version.d.ts

@@ -0,0 +1,18 @@
+/**
+ * This package's own version, kept in lock-step with `version` in
+ * `package.json`.
+ *
+ * Internal only: this module is deliberately **not** re-exported from
+ * `src/index.tsx` (which exports `OtplessHeadlessModule` and `./models`), so it
+ * never becomes merchant-facing API. It exists so the wrapper-attribution token
+ * sent to the native SDKs at `initialize`
+ * (`react-native-android-<version>` / `react-native-ios-<version>`) has a
+ * single source of truth in TypeScript instead of being duplicated in Kotlin
+ * and Swift, where it would silently drift on every release.
+ *
+ * `src/__tests__/version.test.ts` reads `package.json` and fails if this
+ * constant falls out of sync, so a forgotten bump breaks CI rather than
+ * shipping a wrong token.
+ */
+export declare const otplessRnVersion = "3.0.0";
+//# sourceMappingURL=version.d.ts.map

package/lib/typescript/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,gBAAgB,UAAU,CAAC"}

package/otpless-headless-rn.podspec

@@ -17,7 +17,7 @@ Pod::Spec.new do |s|
   s.source_files = "ios/**/*.{h,m,mm,swift}"
 
   s.dependency "React-Core"
-  s.dependency 'OtplessBM/Core', '2.4.0'
+  s.dependency 'OtplessBM/Core', '3.0.1'
   s.swift_versions = ['5.5']
 
   # Don't install the dependencies when we run `pod install` in the old architecture.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "otpless-headless-rn",
-  "version": "2.3.0",
+  "version": "3.0.0",
   "description": "react native plugin for otpless headless android and ios",
   "main": "lib/commonjs/index",
   "module": "lib/module/index",
@@ -41,7 +41,10 @@
     "ios",
     "android"
   ],
-  "repository": "https://github.com/otpless-tech/react-native-headless-sdk",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/otpless-tech/react-native-headless-sdk.git"
+  },
   "author": "https://github.com/sparsh-otpless",
   "license": "MIT",
   "bugs": {

package/src/index.tsx

@@ -5,7 +5,9 @@ import type {
   OtplessProviderType,
   OtplessRequestInput,
   OtplessBackgroundAuthConfig,
+  OtplessInitOptions,
 } from './models';
+import { otplessRnVersion } from './version';
 
 const LINKING_ERROR =
   `The package 'otpless-headless-rn' doesn't seem to be linked. Make sure: \n\n` +
@@ -24,6 +26,23 @@ const OtplessHeadlessRN = NativeModules.OtplessHeadlessRN
       }
     );
 
+/**
+ * Wrapper-attribution token sent to the native SDKs at `initialize`.
+ *
+ * Computed here, in JS, so `otplessRnVersion` is the single source of truth:
+ * the Kotlin and Swift bridges only forward whatever arrives over the bridge,
+ * instead of each hardcoding a version that would drift on every release.
+ *
+ * Emitted by the native device-telemetry event as:
+ * - Android - `otpless-headless-sdk(react-native-android-<version>)`
+ * - iOS - `otpless-headless(react-native-ios-<version>)`
+ *
+ * The `react-native-` prefix distinguishes this package from the sibling
+ * wrappers (`react-native-lite-*`, `react-native-turbo-*`), which share the
+ * same iOS telemetry prefix.
+ */
+const BUILD_PLATFORM = `react-native-${Platform.OS}-${otplessRnVersion}`;
+
 interface OtplessResultCallback {
   (result: any): void;
 }
@@ -39,12 +58,24 @@ class OtplessHeadlessModule {
     this.eventEmitter?.removeAllListeners('OTPlessEventResult');
   }
 
-  initialize(appId: String, loginUri: string | null = null) {
+  initialize(
+    appId: string,
+    loginUri: string | null = null,
+    options: OtplessInitOptions | null = null
+  ) {
     if (this.eventEmitter == null) {
       this.eventEmitter = new NativeEventEmitter(OtplessHeadlessRN);
     }
-    // call the native method
-    OtplessHeadlessRN.initialize(appId, loginUri);
+    // call the native method; sslPinning is a plain string so an older
+    // native module degrades to pinning disabled. buildPlatform is internal
+    // wrapper attribution, not a merchant-facing parameter; the native bridges
+    // fall back to a bare "react-native-<platform>" if it ever arrives blank.
+    OtplessHeadlessRN.initialize(
+      appId,
+      loginUri,
+      options?.sslPinning ?? 'disabled',
+      BUILD_PLATFORM
+    );
   }
 
   setResponseCallback(callback: OtplessResultCallback) {

package/src/models.tsx

@@ -142,3 +142,15 @@ export type OtplessChannelType =
   | 'TRUE_CALLER';
 
 export type OtplessDeviceFingerprintMode = 'NONE' | 'ASYNC' | 'SYNC';
+
+/**
+ * SSL pinning mode for `initialize`. `'disabled'` (default) keeps the
+ * 2.3.x behaviour. `'enabled'` pins `sigma.otpless.app`; a pin mismatch
+ * (e.g. an intercepting proxy) fails closed with `FAILED` / statusCode `5004`.
+ */
+export type OtplessSslPinning = 'enabled' | 'disabled';
+
+export interface OtplessInitOptions {
+  /** Defaults to `'disabled'`. */
+  sslPinning?: OtplessSslPinning;
+}

package/src/version.ts

@@ -0,0 +1,17 @@
+/**
+ * This package's own version, kept in lock-step with `version` in
+ * `package.json`.
+ *
+ * Internal only: this module is deliberately **not** re-exported from
+ * `src/index.tsx` (which exports `OtplessHeadlessModule` and `./models`), so it
+ * never becomes merchant-facing API. It exists so the wrapper-attribution token
+ * sent to the native SDKs at `initialize`
+ * (`react-native-android-<version>` / `react-native-ios-<version>`) has a
+ * single source of truth in TypeScript instead of being duplicated in Kotlin
+ * and Swift, where it would silently drift on every release.
+ *
+ * `src/__tests__/version.test.ts` reads `package.json` and fails if this
+ * constant falls out of sync, so a forgotten bump breaks CI rather than
+ * shipping a wrong token.
+ */
+export const otplessRnVersion = '3.0.0';