pulse-updates 1.1.0 → 1.2.0

package/lib/typescript/init.d.ts

@@ -22,7 +22,8 @@
  * reliably on both platforms, and a version guessed wrong aims a rollout at the wrong
  * installs — a targeting bug that looks like a rollout that "did not work".
  */
-import { type ConfigStorage, type ConfigValue } from './config';
+import { fetchConfig, type ConfigStorage, type ConfigValue, type ConfigSignature, getConfigInfo, getConfigBoolean, getConfigNumber, getConfigString, getConfigJson } from './config';
+import { getTrackingInfo, type TrackedEventInput } from './track';
 export interface InitPulseOptions {
     /** Where Pulse lives, e.g. https://pulse.example.com — no path. */
     apiUrl: string;
@@ -38,6 +39,8 @@ export interface InitPulseOptions {
     storage?: ConfigStorage;
     /** The store build, e.g. "5.2.0". Needed to target a rollout at a version. */
     appVersion?: string;
+    /** Locale override. When omitted the installed RN locale adapter is detected. */
+    language?: string;
     /**
      * A stable id for this install. Left out, one is minted and persisted.
      *
@@ -50,6 +53,16 @@ export interface InitPulseOptions {
     getUserId?: () => string | undefined;
     /** Attributes a rule can target — a plan, a storefront. Keep them few and stable. */
     getUserAttributes?: () => Record<string, string> | undefined;
+    /** Initial analytics consent or a live consent reader. Defaults to granted for compatibility. */
+    analyticsConsent?: boolean | (() => boolean);
+    /** Privacy guardrails applied to every track() call. */
+    eventPropertyAllowlist?: readonly string[];
+    redactEventProperties?: readonly string[];
+    /** Signed config uses the same Ed25519 public key as OTA updates. */
+    signingPublicKey?: string;
+    signingKeyId?: string;
+    requireConfigSignature?: boolean;
+    verifyConfigSignature?: (canonicalPayload: string, signature: ConfigSignature) => boolean | Promise<boolean>;
     /** Foreground poll interval for the config. 0 disables it; launch and resume still fetch. */
     pollIntervalMs?: number;
     /** How often queued events are sent. Default 10s. */
@@ -64,10 +77,44 @@ export interface InitPulseOptions {
     onIgnoredEvents?: (events: string[]) => void;
     onError?: (error: unknown) => void;
 }
-/** Wires config and events, and returns the context the two share. */
-export declare function initPulse(opts: InitPulseOptions): {
+export interface PulseHealth {
+    appSlug: string;
+    deviceId: string;
+    config: ReturnType<typeof getConfigInfo>;
+    events: ReturnType<typeof getTrackingInfo>;
+    analyticsConsent: boolean;
+}
+export interface PulseClient {
     deviceId: string;
     configUrl: string;
     trackUrl: string;
-};
+    track: (event: string, props?: TrackedEventInput['props'], time?: Date) => void;
+    flush: () => Promise<number>;
+    setUser: (userId?: string, attributes?: Record<string, string>) => void;
+    clearUser: () => void;
+    setAnalyticsConsent: (granted: boolean) => void;
+    resetInstallId: () => string;
+    health: () => PulseHealth;
+    config: {
+        boolean: typeof getConfigBoolean;
+        number: typeof getConfigNumber;
+        string: typeof getConfigString;
+        json: typeof getConfigJson;
+        refresh: typeof fetchConfig;
+    };
+    dispose: () => Promise<void>;
+}
+export interface AsyncPulseStorage {
+    getItem(key: string): Promise<string | null>;
+    setItem(key: string, value: string): Promise<void>;
+}
+/** Wires config and events, and returns the context the two share. */
+export declare function initPulse(opts: InitPulseOptions): PulseClient;
+/**
+ * AsyncStorage-friendly one-call setup. It preloads only Pulse's three app-scoped
+ * records, then exposes the same synchronous hot-path API as initPulse.
+ */
+export declare function initPulseAsync(opts: Omit<InitPulseOptions, 'storage'> & {
+    storage: AsyncPulseStorage;
+}): Promise<PulseClient>;
 //# sourceMappingURL=init.d.ts.map

package/lib/typescript/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAKL,KAAK,aAAa,EAClB,KAAK,WAAW,EACjB,MAAM,UAAU,CAAC;AAGlB,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IAEf,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAEhB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEvC;;;;OAIG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC;IAExB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,8FAA8F;IAC9F,SAAS,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAErC,qFAAqF;IACrF,iBAAiB,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAE7D,6FAA6F;IAC7F,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,yEAAyE;IACzE,QAAQ,CAAC,EAAE;QAAE,gBAAgB,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK;YAAE,MAAM,EAAE,MAAM,IAAI,CAAA;SAAE,CAAA;KAAE,CAAC;IAE9G,qFAAqF;IACrF,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IAE7C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACpC;AAID,sEAAsE;AACtE,wBAAgB,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CA2C3G"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAEL,WAAW,EAGX,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,aAAa,EACd,MAAM,UAAU,CAAC;AAClB,OAAO,EAIL,eAAe,EAEf,KAAK,iBAAiB,EACvB,MAAM,SAAS,CAAC;AAEjB,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IAEf,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAEhB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEvC;;;;OAIG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC;IAExB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,8FAA8F;IAC9F,SAAS,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAErC,qFAAqF;IACrF,iBAAiB,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAE7D,iGAAiG;IACjG,gBAAgB,CAAC,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAC;IAE7C,wDAAwD;IACxD,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE1C,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,qBAAqB,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE7G,6FAA6F;IAC7F,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,yEAAyE;IACzE,QAAQ,CAAC,EAAE;QAAE,gBAAgB,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK;YAAE,MAAM,EAAE,MAAM,IAAI,CAAA;SAAE,CAAA;KAAE,CAAC;IAE9G,qFAAqF;IACrF,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IAE7C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACpC;AAID,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;IACzC,MAAM,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;IAC3C,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC;IAChF,KAAK,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;IACxE,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,mBAAmB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAChD,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,MAAM,EAAE,MAAM,WAAW,CAAC;IAC1B,MAAM,EAAE;QACN,OAAO,EAAE,OAAO,gBAAgB,CAAC;QACjC,MAAM,EAAE,OAAO,eAAe,CAAC;QAC/B,MAAM,EAAE,OAAO,eAAe,CAAC;QAC/B,IAAI,EAAE,OAAO,aAAa,CAAC;QAC3B,OAAO,EAAE,OAAO,WAAW,CAAC;KAC7B,CAAC;IACF,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD;AAKD,sEAAsE;AACtE,wBAAgB,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,WAAW,CAmI7D;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,GAAG;IAAE,OAAO,EAAE,iBAAiB,CAAA;CAAE,GACvE,OAAO,CAAC,WAAW,CAAC,CAkBtB"}

package/lib/typescript/track.d.ts

@@ -19,7 +19,7 @@
  * lost is a row missing from an average, and a request that blocks the app is a bug
  * everybody sees.
  */
-import type { ConfigContext } from './config';
+import type { ConfigContext, ConfigStorage } from './config';
 export interface TrackOptions {
     /**
      * The config url this app already uses (…/pulse/config/{slug}) or the track url
@@ -36,8 +36,29 @@ export interface TrackOptions {
     maxBatch?: number;
     /** Events held before the oldest are dropped. Default 500. */
     maxQueue?: number;
+    /** Persists the outbox across process death. Use the same storage passed to initPulse. */
+    storage?: ConfigStorage;
+    /** App-scoped persistence key. initPulse supplies one automatically. */
+    storageKey?: string;
+    /** Per-request timeout. Default 10s. */
+    timeoutMs?: number;
+    /** Maximum delivery attempts before an event is dropped. Default 10. */
+    maxAttempts?: number;
+    /** Return false until analytics consent exists. No event is retained before consent. */
+    hasConsent?: () => boolean;
+    /** Only these property keys may leave the process. */
+    propertyAllowlist?: readonly string[];
+    /** These allowed properties are replaced with "[REDACTED]". */
+    redactProperties?: readonly string[];
+    /** Foreground/background lifecycle used for a best-effort final flush. */
+    appState?: {
+        addEventListener: (type: 'change', handler: (state: string) => void) => {
+            remove: () => void;
+        };
+    };
     /** Called with the event keys the server did not recognise. */
     onIgnored?: (events: string[]) => void;
+    onDropped?: (count: number, reason: 'queue-full' | 'max-attempts' | 'no-consent') => void;
     onError?: (error: unknown) => void;
 }
 export interface TrackedEventInput {
@@ -62,5 +83,12 @@ export declare function track(event: string, props?: TrackedEventInput['props'],
 export declare function flushEvents(): Promise<number>;
 /** How many events are waiting — for a caller that wants to flush before backgrounding. */
 export declare function pendingEventCount(): number;
+export declare function getTrackingInfo(): {
+    queueDepth: number;
+    sending: boolean;
+    nextAttemptAt: number;
+};
+/** Stop timers and listeners while preserving the durable outbox. */
+export declare function disposeTracking(): void;
 export declare function stopTracking(): void;
 //# sourceMappingURL=track.d.ts.map

package/lib/typescript/track.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"track.d.ts","sourceRoot":"","sources":["../../src/track.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,aAAa,CAAC;IAEjC,wDAAwD;IACxD,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IAEvC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAyBD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAG1D;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CAe1F;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CA6CnD;AAED,2FAA2F;AAC3F,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,YAAY,IAAI,IAAI,CAQnC"}
+{"version":3,"file":"track.d.ts","sourceRoot":"","sources":["../../src/track.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE7D,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,aAAa,CAAC;IAEjC,wDAAwD;IACxD,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,0FAA0F;IAC1F,OAAO,CAAC,EAAE,aAAa,CAAC;IAExB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,wFAAwF;IACxF,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC;IAE3B,sDAAsD;IACtD,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEtC,+DAA+D;IAC/D,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAErC,0EAA0E;IAC1E,QAAQ,CAAC,EAAE;QAAE,gBAAgB,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK;YAAE,MAAM,EAAE,MAAM,IAAI,CAAA;SAAE,CAAA;KAAE,CAAC;IAE9G,+DAA+D;IAC/D,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IAEvC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,cAAc,GAAG,YAAY,KAAK,IAAI,CAAC;IAE1F,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAiCD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAS1D;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CA2B1F;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CA8DnD;AAED,2FAA2F;AAC3F,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,eAAe,IAAI;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB,CAEA;AAED,qEAAqE;AACrE,wBAAgB,eAAe,IAAI,IAAI,CAStC;AAED,wBAAgB,YAAY,IAAI,IAAI,CAMnC"}

package/lib/typescript/usePulseUpdates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"usePulseUpdates.d.ts","sourceRoot":"","sources":["../../src/usePulseUpdates.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAEnF,MAAM,WAAW,qBAAqB;IAEpC,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,aAAa,GAAG,IAAI,CAAC;IAC/B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAGrB,eAAe,EAAE,aAAa,GAAG,IAAI,CAAC;IACtC,gBAAgB,EAAE,aAAa,GAAG,IAAI,CAAC;IACvC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAGpB,cAAc,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjD,cAAc,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjD,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED,wBAAgB,eAAe,IAAI,qBAAqB,CA0GvD"}
+{"version":3,"file":"usePulseUpdates.d.ts","sourceRoot":"","sources":["../../src/usePulseUpdates.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAEnF,MAAM,WAAW,qBAAqB;IAEpC,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,aAAa,GAAG,IAAI,CAAC;IAC/B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAGrB,eAAe,EAAE,aAAa,GAAG,IAAI,CAAC;IACtC,gBAAgB,EAAE,aAAa,GAAG,IAAI,CAAC;IACvC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAGpB,cAAc,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjD,cAAc,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjD,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED,wBAAgB,eAAe,IAAI,qBAAqB,CA+GvD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pulse-updates",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "OTA updates for React Native - lightweight alternative to expo-updates",
   "main": "lib/commonjs/index.js",
   "module": "lib/module/index.js",
@@ -17,6 +17,9 @@
     "android/src",
     "android/build.gradle",
     "scripts",
+    "app.plugin.js",
+    "SECURITY.md",
+    "logo.png",
     "pulse-updates.podspec",
     "react-native.config.js",
     "!**/__tests__"
@@ -44,13 +47,21 @@
   "author": "Pulse Updates",
   "license": "MIT",
   "peerDependencies": {
+    "@expo/config-plugins": ">=8.0.0",
     "react": ">=18.2.0",
     "react-native": ">=0.76.0"
   },
+  "peerDependenciesMeta": {
+    "@expo/config-plugins": { "optional": true }
+  },
+  "dependencies": {
+    "tweetnacl": "1.0.3"
+  },
   "devDependencies": {
     "@types/react": "^18.2.0",
+    "@types/react-native": "^0.72.0",
     "react": "^18.2.0",
-    "react-native": "^0.83.0",
+    "react-native": "^0.73.0",
     "react-native-builder-bob": "^0.23.0",
     "typescript": "^5.0.0"
   },
@@ -68,4 +79,4 @@
       ]
     ]
   }
-}
+}

package/scripts/publish.mjs

@@ -1086,10 +1086,19 @@ async function publish(options) {
  */
 async function registerCapabilities(options) {
   const config = loadConfig(options);
-  const bundlePath = options['bundle'] || options['embedded-bundle'];
-  if (!bundlePath) {
-    throw new Error('Provide --bundle <path to the embedded JS bundle> (the bundle built into the app binary).');
+  if (!config.platform || !['ios', 'android'].includes(config.platform)) {
+    throw new Error('Platform is required. Pass --platform ios or --platform android.');
   }
+  if (!config.runtimeVersion) {
+    throw new Error('Runtime version is required. Pass --runtime-version or configure it in the native project.');
+  }
+  if (!config.apiUrl) {
+    throw new Error('API URL is required. Set --api-url, PULSE_API_URL, or the native PulseUpdatesURL.');
+  }
+  if (!config.apiKey) {
+    throw new Error('API key is required. Set --api-key, PULSE_API_KEY, or pulse.config.json.');
+  }
+  const bundlePath = resolveCapabilitiesBundle(options, config);
   const nativeModules = extractNativeModules(bundlePath);
   log(`Registering ${nativeModules.length} native module(s) for ${config.runtimeVersion}/${config.platform}`);
   const res = await fetch(`${config.apiUrl}/api/capabilities`, {
@@ -1107,6 +1116,27 @@ async function registerCapabilities(options) {
   logSuccess(`Capabilities registered (${nativeModules.length} native modules)`);
 }
 
+/**
+ * Resolve the embedded bundle used for the capability snapshot. A release pipeline
+ * can pass the exact bundle it just put in the binary; local and CI adoption can use
+ * the zero-config path, which builds the same production Metro graph first.
+ */
+export function resolveCapabilitiesBundle(options, config, bundleFactory = createBundle) {
+  const explicit = options.bundle || options['embedded-bundle'];
+  if (explicit) {
+    const resolved = path.resolve(explicit);
+    if (!fs.existsSync(resolved)) throw new Error(`Capability bundle not found: ${resolved}`);
+    return resolved;
+  }
+
+  logStep('1/2', `Building the ${config.platform} production bundle for capability discovery...`);
+  return bundleFactory(
+    config.platform,
+    path.resolve(config.bundleDir || './dist'),
+    config.entryFile || 'index.ts'
+  );
+}
+
 
 /**
  * The experiments an app is running, and how their split is holding.
@@ -1293,6 +1323,34 @@ ${colors.cyan}App${colors.reset} (PUBLIC — set in Info.plist / AndroidManifest
 `);
 }
 
+/** Generate small app-local contracts from a reviewable schema file. */
+export function generateContracts(options) {
+  const schemaPath = path.resolve(options.schema || 'pulse.schema.json');
+  const outputPath = path.resolve(options.output || 'src/pulse.generated.ts');
+  if (!fs.existsSync(schemaPath)) {
+    throw new Error(`Schema not found: ${schemaPath}. Create pulse.schema.json or pass --schema.`);
+  }
+  const schema = JSON.parse(fs.readFileSync(schemaPath, 'utf8'));
+  const scalar = (value) => ({ boolean: 'boolean', number: 'number', string: 'string', json: 'unknown' }[value] || 'unknown');
+  const objectType = (shape = {}) => `{ ${Object.entries(shape).map(([key, value]) => `${JSON.stringify(key)}?: ${scalar(value)}`).join('; ')} }`;
+  const configEntries = Object.entries(schema.config || {});
+  const eventEntries = Object.entries(schema.events || {});
+  const actionEntries = Object.entries(schema.actions || {});
+  const output = `/* Generated by pulse-updates generate. Do not edit by hand. */\n` +
+    `import type { TrackedEventInput, DecisionAction } from 'pulse-updates';\n\n` +
+    `export interface PulseConfigSchema {\n${configEntries.map(([key, value]) => `  ${JSON.stringify(key)}: ${scalar(value)};`).join('\n')}\n}\n\n` +
+    `export interface PulseEventSchema {\n${eventEntries.map(([key, value]) => `  ${JSON.stringify(key)}: ${objectType(value)};`).join('\n')}\n}\n\n` +
+    `export type PulseEventKey = keyof PulseEventSchema;\n` +
+    `export type PulseTypedEvent<K extends PulseEventKey> = { event: K; props: PulseEventSchema[K]; time?: Date };\n\n` +
+    `export type PulseAction = ${actionEntries.length > 0
+      ? actionEntries.map(([key, value]) => `(DecisionAction & { kind: ${JSON.stringify(key)} } & ${objectType(value)})`).join(' | ')
+      : 'DecisionAction'};\n` +
+    `export type PulseTrack = <K extends PulseEventKey>(event: K, props?: PulseEventSchema[K], time?: TrackedEventInput['time']) => void;\n`;
+  fs.mkdirSync(path.dirname(outputPath), { recursive: true });
+  fs.writeFileSync(outputPath, output);
+  logSuccess(`Generated ${path.relative(process.cwd(), outputPath)} from ${path.relative(process.cwd(), schemaPath)}`);
+}
+
 /**
  * Show help
  */
@@ -1307,6 +1365,7 @@ ${colors.cyan}Commands:${colors.reset}
   publish                 Create bundle and publish update to server
   keygen                  Generate an Ed25519 signing keypair (server + app config)
   register-capabilities   Record the embedded bundle's native capability set (crash-prediction)
+  generate                Generate typed config/event/action contracts from pulse.schema.json
 
 ${colors.cyan}Options:${colors.reset}
   --api-url <url>         API server URL (auto-detected from native config)
@@ -1315,6 +1374,7 @@ ${colors.cyan}Options:${colors.reset}
   --runtime-version <v>   Runtime version (auto-detected from native config)
   --channel <channel>     Release channel (default: production)
   --bundle-dir <dir>      Output directory (default: ./dist)
+  --bundle <file>         Embedded bundle for register-capabilities (otherwise built automatically)
   --entry-file <file>     Entry file (default: index.ts)
   --skip-bundle           Skip bundle creation (use existing)
   --dry-run               Build + validate locally without creating a release on the server
@@ -1326,6 +1386,8 @@ ${colors.cyan}Options:${colors.reset}
   --build <number>        Build number (shown in version, e.g., 1.0.0.42)
   --message <msg>         Release message/notes
   --key-id <id>           Key id for keygen (default: auto-generated)
+  --schema <file>         Contract schema for generate (default: pulse.schema.json)
+  --output <file>         Generated TypeScript file (default: src/pulse.generated.ts)
 
 ${colors.cyan}Experiments:${colors.reset}
   pulse-updates experiments                       List them, with the split each one got
@@ -1388,6 +1450,9 @@ async function main() {
       case 'keygen':
         keygen(options);
         break;
+      case 'generate':
+        generateContracts(options);
+        break;
       case 'help':
       case '--help':
       case '-h':

package/src/NativePulseUpdates.ts

@@ -43,6 +43,7 @@ export interface Spec extends TurboModule {
 
   markAppReady(): Promise<void>;
   reportLaunchFailure(reason: string): Promise<void>;
+  verifySignatureAsync(canonicalPayload: string, alg: string, keyId: string, signature: string): Promise<boolean>;
 
   // Event emitter
   addListener(eventName: string): void;

package/src/PulseUpdates.ts

@@ -16,6 +16,42 @@ let _isEmbeddedLaunch = true;
 let _manifest: PulseManifest | null = null;
 let _createdAt: Date | null = null;
 let _localAssets: Record<string, string> | null = null;
+const stateListeners = new Set<() => void>();
+
+export interface PulseNativeState {
+  isEnabled: boolean;
+  updateId: string | null;
+  runtimeVersion: string | null;
+  channel: string | null;
+  isEmbeddedLaunch: boolean;
+  manifest: PulseManifest | null;
+  createdAt: Date | null;
+  localAssets: Record<string, string> | null;
+}
+
+/** A stable read surface for React and for diagnostics. */
+export function getUpdatesState(): PulseNativeState {
+  return {
+    isEnabled: _isEnabled,
+    updateId: _updateId,
+    runtimeVersion: _runtimeVersion,
+    channel: _channel,
+    isEmbeddedLaunch: _isEmbeddedLaunch,
+    manifest: _manifest,
+    createdAt: _createdAt,
+    localAssets: _localAssets,
+  };
+}
+
+/** Subscribe to native-state refreshes without depending on mutable ES exports. */
+export function onUpdatesStateChange(listener: () => void): () => void {
+  stateListeners.add(listener);
+  return () => stateListeners.delete(listener);
+}
+
+function notifyStateListeners(): void {
+  for (const listener of stateListeners) listener();
+}
 
 /**
  * Configure pulse-updates with the given options.
@@ -51,6 +87,9 @@ export function configure(config: PulseUpdatesConfig): void {
   _isConfigured = true;
   _isEnabled = config.enabled;
   _runtimeVersion = config.runtimeVersion;
+  isEnabled = _isEnabled;
+  runtimeVersion = _runtimeVersion;
+  notifyStateListeners();
 }
 
 /**
@@ -133,6 +172,7 @@ export async function refreshStateAsync(): Promise<void> {
     // Read localAssets map for asset resolution
     _localAssets = state.localAssets ?? null;
     localAssets = _localAssets;
+    notifyStateListeners();
   } catch (error) {
     console.warn('[PulseUpdates] Failed to refresh state:', error);
     // Keep current values on error
@@ -241,6 +281,20 @@ export async function reportLaunchFailure(reason: string): Promise<void> {
   await PulseUpdatesModule.reportLaunchFailure(reason);
 }
 
+/** Verify config/decision payloads with the public key already pinned in native config. */
+export async function verifyConfigSignatureAsync(
+  canonicalPayload: string,
+  signature: { alg: string; keyId: string; sig: string },
+): Promise<boolean> {
+  if (!PulseUpdatesModule?.verifySignatureAsync) return false;
+  return PulseUpdatesModule.verifySignatureAsync(
+    canonicalPayload,
+    signature.alg,
+    signature.keyId,
+    signature.sig,
+  );
+}
+
 /**
  * Get the build number from the current update's metadata.
  */