react-native-device-integrity 0.1.0 → 0.2.1

package/lib/module/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["checkIntegrity","useDeviceIntegrity"],"sourceRoot":"../../src","sources":["index.tsx"],"mappings":";;AAAA,SAASA,cAAc,QAAQ,kBAAkB;AACjD,SAASC,kBAAkB,QAAQ,yBAAsB","ignoreList":[]}
+{"version":3,"names":["checkIntegrity","useDeviceIntegrity","SIGNAL_IDS"],"sourceRoot":"../../src","sources":["index.tsx"],"mappings":";;AAAA,SAASA,cAAc,QAAQ,kBAAkB;AACjD,SAASC,kBAAkB,QAAQ,yBAAsB;AACzD,SAASC,UAAU,QAAQ,YAAS","ignoreList":[]}

package/lib/module/resolveStatus.js

@@ -1,6 +1,9 @@
 "use strict";
 
 const SIGNAL_CATEGORIES = new Set(['jailbreak', 'root', 'hooking', 'debugger', 'emulator', 'tamper', 'environment']);
+
+/** Default compromising set: every category except emulator. */
+const DEFAULT_COMPROMISING_CATEGORIES = ['jailbreak', 'root', 'hooking', 'debugger', 'tamper', 'environment'];
 function coerceCategory(category) {
   if (typeof category === 'string' && SIGNAL_CATEGORIES.has(category)) {
     return category;
@@ -24,10 +27,42 @@ function normalizeSignal(raw) {
     description
   };
 }
+function resolveCompromisingCategories(options) {
+  const base = options.policy?.compromisingCategories != null ? options.policy.compromisingCategories : DEFAULT_COMPROMISING_CATEGORIES;
+  const set = new Set(base);
+  if (options.treatEmulatorAsCompromised === true) {
+    set.add('emulator');
+  }
+  return set;
+}
+function partitionIgnored(signals, ignore) {
+  if (ignore == null || ignore.length === 0) {
+    return {
+      active: signals,
+      ignored: []
+    };
+  }
+  const ignoreSet = new Set(ignore);
+  const active = [];
+  const ignored = [];
+  for (const signal of signals) {
+    if (ignoreSet.has(signal.id)) {
+      ignored.push(signal);
+    } else {
+      active.push(signal);
+    }
+  }
+  return {
+    active,
+    ignored
+  };
+}
 function malformed(platform, error) {
   return {
     status: 'unknown',
     signals: [],
+    ignored: [],
+    durationMs: 0,
     platform,
     reason: 'native_error',
     error
@@ -37,6 +72,7 @@ function malformed(platform, error) {
 /**
  * Maps a native integrity report + options to the public IntegrityResult.
  * Compromise evidence wins over incomplete runs; incomplete/malformed never become 'clean'.
+ * `durationMs` is set to 0 here — `checkIntegrity` overwrites with measured wall time.
  */
 export function resolveStatus(report, options = {}, platform) {
   if (report === null || typeof report !== 'object' || Array.isArray(report)) {
@@ -46,15 +82,20 @@ export function resolveStatus(report, options = {}, platform) {
   if (!Array.isArray(nativeReport.signals)) {
     return malformed(platform, 'Malformed native integrity report');
   }
-  const signals = nativeReport.signals.map(normalizeSignal);
+  const allSignals = nativeReport.signals.map(normalizeSignal);
+  const {
+    active: signals,
+    ignored
+  } = partitionIgnored(allSignals, options.ignore);
   const completed = nativeReport.completed === true;
-  const treatEmulatorAsCompromised = options.treatEmulatorAsCompromised === true;
-  const hasNonEmulatorSignal = signals.some(signal => signal.category !== 'emulator');
-  const hasEmulatorSignal = signals.some(signal => signal.category === 'emulator');
-  if (hasNonEmulatorSignal || hasEmulatorSignal && treatEmulatorAsCompromised) {
+  const compromising = resolveCompromisingCategories(options);
+  const hasCompromisingSignal = signals.some(signal => compromising.has(signal.category));
+  if (hasCompromisingSignal) {
     return {
       status: 'compromised',
       signals,
+      ignored,
+      durationMs: 0,
       platform
     };
   }
@@ -63,6 +104,8 @@ export function resolveStatus(report, options = {}, platform) {
     return {
       status: 'unknown',
       signals,
+      ignored,
+      durationMs: 0,
       platform,
       reason
     };
@@ -70,6 +113,8 @@ export function resolveStatus(report, options = {}, platform) {
   return {
     status: 'clean',
     signals,
+    ignored,
+    durationMs: 0,
     platform
   };
 }

package/lib/module/resolveStatus.js.map

@@ -1 +1 @@
-{"version":3,"names":["SIGNAL_CATEGORIES","Set","coerceCategory","category","has","normalizeSignal","raw","id","description","signal","length","malformed","platform","error","status","signals","reason","resolveStatus","report","options","Array","isArray","nativeReport","map","completed","treatEmulatorAsCompromised","hasNonEmulatorSignal","some","hasEmulatorSignal"],"sourceRoot":"../../src","sources":["resolveStatus.ts"],"mappings":";;AASA,MAAMA,iBAAsC,GAAG,IAAIC,GAAG,CAAC,CACrD,WAAW,EACX,MAAM,EACN,SAAS,EACT,UAAU,EACV,UAAU,EACV,QAAQ,EACR,aAAa,CACd,CAAC;AAEF,SAASC,cAAcA,CAACC,QAAiB,EAAkB;EACzD,IAAI,OAAOA,QAAQ,KAAK,QAAQ,IAAIH,iBAAiB,CAACI,GAAG,CAACD,QAAQ,CAAC,EAAE;IACnE,OAAOA,QAAQ;EACjB;EACA,OAAO,aAAa;AACtB;AAEA,SAASE,eAAeA,CAACC,GAAY,EAAU;EAC7C,IAAIA,GAAG,KAAK,IAAI,IAAI,OAAOA,GAAG,KAAK,QAAQ,EAAE;IAC3C,OAAO;MACLC,EAAE,EAAE,gBAAgB;MACpBJ,QAAQ,EAAE,aAAa;MACvBK,WAAW,EAAE;IACf,CAAC;EACH;EAEA,MAAMC,MAAM,GAAGH,GAA8B;EAC7C,MAAMC,EAAE,GACN,OAAOE,MAAM,CAACF,EAAE,KAAK,QAAQ,IAAIE,MAAM,CAACF,EAAE,CAACG,MAAM,GAAG,CAAC,GACjDD,MAAM,CAACF,EAAE,GACT,gBAAgB;EACtB,MAAMC,WAAW,GACf,OAAOC,MAAM,CAACD,WAAW,KAAK,QAAQ,GAAGC,MAAM,CAACD,WAAW,GAAG,EAAE;EAElE,OAAO;IACLD,EAAE;IACFJ,QAAQ,EAAED,cAAc,CAACO,MAAM,CAACN,QAAQ,CAAC;IACzCK;EACF,CAAC;AACH;AAEA,SAASG,SAASA,CAChBC,QAA4B,EAC5BC,KAAa,EACI;EACjB,OAAO;IACLC,MAAM,EAAE,SAAS;IACjBC,OAAO,EAAE,EAAE;IACXH,QAAQ;IACRI,MAAM,EAAE,cAAc;IACtBH;EACF,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASI,aAAaA,CAC3BC,MAAe,EACfC,OAA8B,GAAG,CAAC,CAAC,EACnCP,QAA4B,EACX;EACjB,IAAIM,MAAM,KAAK,IAAI,IAAI,OAAOA,MAAM,KAAK,QAAQ,IAAIE,KAAK,CAACC,OAAO,CAACH,MAAM,CAAC,EAAE;IAC1E,OAAOP,SAAS,CAACC,QAAQ,EAAE,mCAAmC,CAAC;EACjE;EAEA,MAAMU,YAAY,GAAGJ,MAAiC;EAEtD,IAAI,CAACE,KAAK,CAACC,OAAO,CAACC,YAAY,CAACP,OAAO,CAAC,EAAE;IACxC,OAAOJ,SAAS,CAACC,QAAQ,EAAE,mCAAmC,CAAC;EACjE;EAEA,MAAMG,OAAO,GAAGO,YAAY,CAACP,OAAO,CAACQ,GAAG,CAAClB,eAAe,CAAC;EACzD,MAAMmB,SAAS,GAAGF,YAAY,CAACE,SAAS,KAAK,IAAI;EACjD,MAAMC,0BAA0B,GAC9BN,OAAO,CAACM,0BAA0B,KAAK,IAAI;EAE7C,MAAMC,oBAAoB,GAAGX,OAAO,CAACY,IAAI,CACtClB,MAAM,IAAKA,MAAM,CAACN,QAAQ,KAAK,UAClC,CAAC;EACD,MAAMyB,iBAAiB,GAAGb,OAAO,CAACY,IAAI,CACnClB,MAAM,IAAKA,MAAM,CAACN,QAAQ,KAAK,UAClC,CAAC;EAED,IACEuB,oBAAoB,IACnBE,iBAAiB,IAAIH,0BAA2B,EACjD;IACA,OAAO;MACLX,MAAM,EAAE,aAAa;MACrBC,OAAO;MACPH;IACF,CAAC;EACH;EAEA,IAAI,CAACY,SAAS,EAAE;IACd,MAAMR,MAAqB,GACzBM,YAAY,CAACN,MAAM,KAAK,iBAAiB,GACrC,iBAAiB,GACjB,YAAY;IAElB,OAAO;MACLF,MAAM,EAAE,SAAS;MACjBC,OAAO;MACPH,QAAQ;MACRI;IACF,CAAC;EACH;EAEA,OAAO;IACLF,MAAM,EAAE,OAAO;IACfC,OAAO;IACPH;EACF,CAAC;AACH","ignoreList":[]}
+{"version":3,"names":["SIGNAL_CATEGORIES","Set","DEFAULT_COMPROMISING_CATEGORIES","coerceCategory","category","has","normalizeSignal","raw","id","description","signal","length","resolveCompromisingCategories","options","base","policy","compromisingCategories","set","treatEmulatorAsCompromised","add","partitionIgnored","signals","ignore","active","ignored","ignoreSet","push","malformed","platform","error","status","durationMs","reason","resolveStatus","report","Array","isArray","nativeReport","allSignals","map","completed","compromising","hasCompromisingSignal","some"],"sourceRoot":"../../src","sources":["resolveStatus.ts"],"mappings":";;AAUA,MAAMA,iBAAsC,GAAG,IAAIC,GAAG,CAAC,CACrD,WAAW,EACX,MAAM,EACN,SAAS,EACT,UAAU,EACV,UAAU,EACV,QAAQ,EACR,aAAa,CACd,CAAC;;AAEF;AACA,MAAMC,+BAA0D,GAAG,CACjE,WAAW,EACX,MAAM,EACN,SAAS,EACT,UAAU,EACV,QAAQ,EACR,aAAa,CACd;AAED,SAASC,cAAcA,CAACC,QAAiB,EAAkB;EACzD,IAAI,OAAOA,QAAQ,KAAK,QAAQ,IAAIJ,iBAAiB,CAACK,GAAG,CAACD,QAAQ,CAAC,EAAE;IACnE,OAAOA,QAAQ;EACjB;EACA,OAAO,aAAa;AACtB;AAEA,SAASE,eAAeA,CAACC,GAAY,EAAU;EAC7C,IAAIA,GAAG,KAAK,IAAI,IAAI,OAAOA,GAAG,KAAK,QAAQ,EAAE;IAC3C,OAAO;MACLC,EAAE,EAAE,gBAAgB;MACpBJ,QAAQ,EAAE,aAAa;MACvBK,WAAW,EAAE;IACf,CAAC;EACH;EAEA,MAAMC,MAAM,GAAGH,GAA8B;EAC7C,MAAMC,EAAE,GACN,OAAOE,MAAM,CAACF,EAAE,KAAK,QAAQ,IAAIE,MAAM,CAACF,EAAE,CAACG,MAAM,GAAG,CAAC,GACjDD,MAAM,CAACF,EAAE,GACT,gBAAgB;EACtB,MAAMC,WAAW,GACf,OAAOC,MAAM,CAACD,WAAW,KAAK,QAAQ,GAAGC,MAAM,CAACD,WAAW,GAAG,EAAE;EAElE,OAAO;IACLD,EAAE;IACFJ,QAAQ,EAAED,cAAc,CAACO,MAAM,CAACN,QAAQ,CAAC;IACzCK;EACF,CAAC;AACH;AAEA,SAASG,6BAA6BA,CACpCC,OAA8B,EACD;EAC7B,MAAMC,IAAI,GACRD,OAAO,CAACE,MAAM,EAAEC,sBAAsB,IAAI,IAAI,GAC1CH,OAAO,CAACE,MAAM,CAACC,sBAAsB,GACrCd,+BAA+B;EAErC,MAAMe,GAAG,GAAG,IAAIhB,GAAG,CAAiBa,IAAI,CAAC;EAEzC,IAAID,OAAO,CAACK,0BAA0B,KAAK,IAAI,EAAE;IAC/CD,GAAG,CAACE,GAAG,CAAC,UAAU,CAAC;EACrB;EAEA,OAAOF,GAAG;AACZ;AAEA,SAASG,gBAAgBA,CACvBC,OAAiB,EACjBC,MAA8B,EACW;EACzC,IAAIA,MAAM,IAAI,IAAI,IAAIA,MAAM,CAACX,MAAM,KAAK,CAAC,EAAE;IACzC,OAAO;MAAEY,MAAM,EAAEF,OAAO;MAAEG,OAAO,EAAE;IAAG,CAAC;EACzC;EAEA,MAAMC,SAAS,GAAG,IAAIxB,GAAG,CAASqB,MAAM,CAAC;EACzC,MAAMC,MAAgB,GAAG,EAAE;EAC3B,MAAMC,OAAiB,GAAG,EAAE;EAE5B,KAAK,MAAMd,MAAM,IAAIW,OAAO,EAAE;IAC5B,IAAII,SAAS,CAACpB,GAAG,CAACK,MAAM,CAACF,EAAE,CAAC,EAAE;MAC5BgB,OAAO,CAACE,IAAI,CAAChB,MAAM,CAAC;IACtB,CAAC,MAAM;MACLa,MAAM,CAACG,IAAI,CAAChB,MAAM,CAAC;IACrB;EACF;EAEA,OAAO;IAAEa,MAAM;IAAEC;EAAQ,CAAC;AAC5B;AAEA,SAASG,SAASA,CAChBC,QAA4B,EAC5BC,KAAa,EACI;EACjB,OAAO;IACLC,MAAM,EAAE,SAAS;IACjBT,OAAO,EAAE,EAAE;IACXG,OAAO,EAAE,EAAE;IACXO,UAAU,EAAE,CAAC;IACbH,QAAQ;IACRI,MAAM,EAAE,cAAc;IACtBH;EACF,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASI,aAAaA,CAC3BC,MAAe,EACfrB,OAA8B,GAAG,CAAC,CAAC,EACnCe,QAA4B,EACX;EACjB,IAAIM,MAAM,KAAK,IAAI,IAAI,OAAOA,MAAM,KAAK,QAAQ,IAAIC,KAAK,CAACC,OAAO,CAACF,MAAM,CAAC,EAAE;IAC1E,OAAOP,SAAS,CAACC,QAAQ,EAAE,mCAAmC,CAAC;EACjE;EAEA,MAAMS,YAAY,GAAGH,MAAiC;EAEtD,IAAI,CAACC,KAAK,CAACC,OAAO,CAACC,YAAY,CAAChB,OAAO,CAAC,EAAE;IACxC,OAAOM,SAAS,CAACC,QAAQ,EAAE,mCAAmC,CAAC;EACjE;EAEA,MAAMU,UAAU,GAAGD,YAAY,CAAChB,OAAO,CAACkB,GAAG,CAACjC,eAAe,CAAC;EAC5D,MAAM;IAAEiB,MAAM,EAAEF,OAAO;IAAEG;EAAQ,CAAC,GAAGJ,gBAAgB,CACnDkB,UAAU,EACVzB,OAAO,CAACS,MACV,CAAC;EACD,MAAMkB,SAAS,GAAGH,YAAY,CAACG,SAAS,KAAK,IAAI;EACjD,MAAMC,YAAY,GAAG7B,6BAA6B,CAACC,OAAO,CAAC;EAE3D,MAAM6B,qBAAqB,GAAGrB,OAAO,CAACsB,IAAI,CAAEjC,MAAM,IAChD+B,YAAY,CAACpC,GAAG,CAACK,MAAM,CAACN,QAAQ,CAClC,CAAC;EAED,IAAIsC,qBAAqB,EAAE;IACzB,OAAO;MACLZ,MAAM,EAAE,aAAa;MACrBT,OAAO;MACPG,OAAO;MACPO,UAAU,EAAE,CAAC;MACbH;IACF,CAAC;EACH;EAEA,IAAI,CAACY,SAAS,EAAE;IACd,MAAMR,MAAqB,GACzBK,YAAY,CAACL,MAAM,KAAK,iBAAiB,GACrC,iBAAiB,GACjB,YAAY;IAElB,OAAO;MACLF,MAAM,EAAE,SAAS;MACjBT,OAAO;MACPG,OAAO;MACPO,UAAU,EAAE,CAAC;MACbH,QAAQ;MACRI;IACF,CAAC;EACH;EAEA,OAAO;IACLF,MAAM,EAAE,OAAO;IACfT,OAAO;IACPG,OAAO;IACPO,UAAU,EAAE,CAAC;IACbH;EACF,CAAC;AACH","ignoreList":[]}

package/lib/module/types.js

@@ -1,4 +1,7 @@
 "use strict";
 
-export {};
+/**
+ * Stable public signal ids. Unknown future ids remain accepted on `Signal.id`.
+ */
+export const SIGNAL_IDS = ['simulator', 'jailbreak_files', 'jailbreak_url_schemes', 'jailbreak_symlinks', 'jailbreak_writable_system', 'hooking_libraries', 'hooking_dyld_insert', 'debugger_attached', 'emulator', 'root_su_binary', 'root_management_apps', 'root_magisk_files', 'root_test_keys', 'root_dangerous_props', 'root_rw_system', 'hooking_frida', 'hooking_xposed', 'tamper_signature_mismatch', 'tamper_untrusted_installer', 'tamper_binary_decrypted', 'tamper_team_id_mismatch'];
 //# sourceMappingURL=types.js.map

package/lib/module/types.js.map

@@ -1 +1 @@
-{"version":3,"names":[],"sourceRoot":"../../src","sources":["types.ts"],"mappings":"","ignoreList":[]}
+{"version":3,"names":["SIGNAL_IDS"],"sourceRoot":"../../src","sources":["types.ts"],"mappings":";;AAaA;AACA;AACA;AACA,OAAO,MAAMA,UAAU,GAAG,CACxB,WAAW,EACX,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,UAAU,EACV,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EACzB,yBAAyB,CACjB","ignoreList":[]}

package/lib/module/useDeviceIntegrity.js

@@ -3,9 +3,24 @@
 import { useCallback, useEffect, useRef, useState } from 'react';
 import { AppState } from 'react-native';
 import { checkIntegrity } from './checkIntegrity';
+/**
+ * Stable serialization of options that affect the check. Inline object literals
+ * with the same values must not retrigger the effect.
+ */
+function optionsKey(options) {
+  return JSON.stringify({
+    treatEmulatorAsCompromised: options.treatEmulatorAsCompromised === true,
+    timeoutMs: options.timeoutMs,
+    ignore: options.ignore,
+    policy: options.policy,
+    android: options.android,
+    ios: options.ios
+  });
+}
 export function useDeviceIntegrity(options = {}) {
-  const treatEmulatorAsCompromised = options.treatEmulatorAsCompromised;
-  const timeoutMs = options.timeoutMs;
+  const key = optionsKey(options);
+  const optionsRef = useRef(options);
+  optionsRef.current = options;
   const [result, setResult] = useState(null);
   const [loading, setLoading] = useState(true);
   const requestIdRef = useRef(0);
@@ -14,16 +29,15 @@ export function useDeviceIntegrity(options = {}) {
   const run = useCallback(async () => {
     const requestId = ++requestIdRef.current;
     setLoading(true);
-    const next = await checkIntegrity({
-      treatEmulatorAsCompromised,
-      timeoutMs
-    });
+    const next = await checkIntegrity(optionsRef.current);
     if (mountedRef.current && requestId === requestIdRef.current) {
       setResult(next);
       setLoading(false);
     }
     return next;
-  }, [treatEmulatorAsCompromised, timeoutMs]);
+    // `key` is the by-value options fingerprint (not used in the body; optionsRef is).
+    // eslint-disable-next-line react-hooks/exhaustive-deps -- equal-by-value options
+  }, [key]);
   useEffect(() => {
     mountedRef.current = true;
     run().catch(() => {

package/lib/module/useDeviceIntegrity.js.map

@@ -1 +1 @@
-{"version":3,"names":["useCallback","useEffect","useRef","useState","AppState","checkIntegrity","useDeviceIntegrity","options","treatEmulatorAsCompromised","timeoutMs","result","setResult","loading","setLoading","requestIdRef","mountedRef","appStateRef","currentState","run","requestId","current","next","catch","onChange","nextState","previous","subscription","addEventListener","remove","refresh","status","signals"],"sourceRoot":"../../src","sources":["useDeviceIntegrity.ts"],"mappings":";;AAAA,SAASA,WAAW,EAAEC,SAAS,EAAEC,MAAM,EAAEC,QAAQ,QAAQ,OAAO;AAChE,SAASC,QAAQ,QAA6B,cAAc;AAC5D,SAASC,cAAc,QAAQ,kBAAkB;AAgBjD,OAAO,SAASC,kBAAkBA,CAChCC,OAA8B,GAAG,CAAC,CAAC,EACT;EAC1B,MAAMC,0BAA0B,GAAGD,OAAO,CAACC,0BAA0B;EACrE,MAAMC,SAAS,GAAGF,OAAO,CAACE,SAAS;EAEnC,MAAM,CAACC,MAAM,EAAEC,SAAS,CAAC,GAAGR,QAAQ,CAAyB,IAAI,CAAC;EAClE,MAAM,CAACS,OAAO,EAAEC,UAAU,CAAC,GAAGV,QAAQ,CAAC,IAAI,CAAC;EAE5C,MAAMW,YAAY,GAAGZ,MAAM,CAAC,CAAC,CAAC;EAC9B,MAAMa,UAAU,GAAGb,MAAM,CAAC,IAAI,CAAC;EAC/B,MAAMc,WAAW,GAAGd,MAAM,CAACE,QAAQ,CAACa,YAAY,CAAC;EAEjD,MAAMC,GAAG,GAAGlB,WAAW,CAAC,YAAsC;IAC5D,MAAMmB,SAAS,GAAG,EAAEL,YAAY,CAACM,OAAO;IACxCP,UAAU,CAAC,IAAI,CAAC;IAEhB,MAAMQ,IAAI,GAAG,MAAMhB,cAAc,CAAC;MAChCG,0BAA0B;MAC1BC;IACF,CAAC,CAAC;IAEF,IAAIM,UAAU,CAACK,OAAO,IAAID,SAAS,KAAKL,YAAY,CAACM,OAAO,EAAE;MAC5DT,SAAS,CAACU,IAAI,CAAC;MACfR,UAAU,CAAC,KAAK,CAAC;IACnB;IAEA,OAAOQ,IAAI;EACb,CAAC,EAAE,CAACb,0BAA0B,EAAEC,SAAS,CAAC,CAAC;EAE3CR,SAAS,CAAC,MAAM;IACdc,UAAU,CAACK,OAAO,GAAG,IAAI;IACzBF,GAAG,CAAC,CAAC,CAACI,KAAK,CAAC,MAAM;MAChB;IAAA,CACD,CAAC;IAEF,OAAO,MAAM;MACXP,UAAU,CAACK,OAAO,GAAG,KAAK;IAC5B,CAAC;EACH,CAAC,EAAE,CAACF,GAAG,CAAC,CAAC;EAETjB,SAAS,CAAC,MAAM;IACd,MAAMsB,QAAQ,GAAIC,SAAyB,IAAK;MAC9C,MAAMC,QAAQ,GAAGT,WAAW,CAACI,OAAO;MACpCJ,WAAW,CAACI,OAAO,GAAGI,SAAS;MAE/B,IACE,CAACC,QAAQ,KAAK,YAAY,IAAIA,QAAQ,KAAK,UAAU,KACrDD,SAAS,KAAK,QAAQ,EACtB;QACAN,GAAG,CAAC,CAAC,CAACI,KAAK,CAAC,MAAM;UAChB;QAAA,CACD,CAAC;MACJ;IACF,CAAC;IAED,MAAMI,YAAY,GAAGtB,QAAQ,CAACuB,gBAAgB,CAAC,QAAQ,EAAEJ,QAAQ,CAAC;IAClE,OAAO,MAAM;MACXG,YAAY,CAACE,MAAM,CAAC,CAAC;IACvB,CAAC;EACH,CAAC,EAAE,CAACV,GAAG,CAAC,CAAC;EAET,MAAMW,OAAO,GAAG7B,WAAW,CAAC,MAAgC;IAC1D,OAAOkB,GAAG,CAAC,CAAC;EACd,CAAC,EAAE,CAACA,GAAG,CAAC,CAAC;EAET,OAAO;IACLY,MAAM,EAAEpB,MAAM,EAAEoB,MAAM,IAAI,SAAS;IACnCC,OAAO,EAAErB,MAAM,EAAEqB,OAAO,IAAI,EAAE;IAC9BrB,MAAM;IACNE,OAAO;IACPiB;EACF,CAAC;AACH","ignoreList":[]}
+{"version":3,"names":["useCallback","useEffect","useRef","useState","AppState","checkIntegrity","optionsKey","options","JSON","stringify","treatEmulatorAsCompromised","timeoutMs","ignore","policy","android","ios","useDeviceIntegrity","key","optionsRef","current","result","setResult","loading","setLoading","requestIdRef","mountedRef","appStateRef","currentState","run","requestId","next","catch","onChange","nextState","previous","subscription","addEventListener","remove","refresh","status","signals"],"sourceRoot":"../../src","sources":["useDeviceIntegrity.ts"],"mappings":";;AAAA,SAASA,WAAW,EAAEC,SAAS,EAAEC,MAAM,EAAEC,QAAQ,QAAQ,OAAO;AAChE,SAASC,QAAQ,QAA6B,cAAc;AAC5D,SAASC,cAAc,QAAQ,kBAAkB;AAgBjD;AACA;AACA;AACA;AACA,SAASC,UAAUA,CAACC,OAA8B,EAAU;EAC1D,OAAOC,IAAI,CAACC,SAAS,CAAC;IACpBC,0BAA0B,EAAEH,OAAO,CAACG,0BAA0B,KAAK,IAAI;IACvEC,SAAS,EAAEJ,OAAO,CAACI,SAAS;IAC5BC,MAAM,EAAEL,OAAO,CAACK,MAAM;IACtBC,MAAM,EAAEN,OAAO,CAACM,MAAM;IACtBC,OAAO,EAAEP,OAAO,CAACO,OAAO;IACxBC,GAAG,EAAER,OAAO,CAACQ;EACf,CAAC,CAAC;AACJ;AAEA,OAAO,SAASC,kBAAkBA,CAChCT,OAA8B,GAAG,CAAC,CAAC,EACT;EAC1B,MAAMU,GAAG,GAAGX,UAAU,CAACC,OAAO,CAAC;EAC/B,MAAMW,UAAU,GAAGhB,MAAM,CAACK,OAAO,CAAC;EAClCW,UAAU,CAACC,OAAO,GAAGZ,OAAO;EAE5B,MAAM,CAACa,MAAM,EAAEC,SAAS,CAAC,GAAGlB,QAAQ,CAAyB,IAAI,CAAC;EAClE,MAAM,CAACmB,OAAO,EAAEC,UAAU,CAAC,GAAGpB,QAAQ,CAAC,IAAI,CAAC;EAE5C,MAAMqB,YAAY,GAAGtB,MAAM,CAAC,CAAC,CAAC;EAC9B,MAAMuB,UAAU,GAAGvB,MAAM,CAAC,IAAI,CAAC;EAC/B,MAAMwB,WAAW,GAAGxB,MAAM,CAACE,QAAQ,CAACuB,YAAY,CAAC;EAEjD,MAAMC,GAAG,GAAG5B,WAAW,CAAC,YAAsC;IAC5D,MAAM6B,SAAS,GAAG,EAAEL,YAAY,CAACL,OAAO;IACxCI,UAAU,CAAC,IAAI,CAAC;IAEhB,MAAMO,IAAI,GAAG,MAAMzB,cAAc,CAACa,UAAU,CAACC,OAAO,CAAC;IAErD,IAAIM,UAAU,CAACN,OAAO,IAAIU,SAAS,KAAKL,YAAY,CAACL,OAAO,EAAE;MAC5DE,SAAS,CAACS,IAAI,CAAC;MACfP,UAAU,CAAC,KAAK,CAAC;IACnB;IAEA,OAAOO,IAAI;IACX;IACA;EACF,CAAC,EAAE,CAACb,GAAG,CAAC,CAAC;EAEThB,SAAS,CAAC,MAAM;IACdwB,UAAU,CAACN,OAAO,GAAG,IAAI;IACzBS,GAAG,CAAC,CAAC,CAACG,KAAK,CAAC,MAAM;MAChB;IAAA,CACD,CAAC;IAEF,OAAO,MAAM;MACXN,UAAU,CAACN,OAAO,GAAG,KAAK;IAC5B,CAAC;EACH,CAAC,EAAE,CAACS,GAAG,CAAC,CAAC;EAET3B,SAAS,CAAC,MAAM;IACd,MAAM+B,QAAQ,GAAIC,SAAyB,IAAK;MAC9C,MAAMC,QAAQ,GAAGR,WAAW,CAACP,OAAO;MACpCO,WAAW,CAACP,OAAO,GAAGc,SAAS;MAE/B,IACE,CAACC,QAAQ,KAAK,YAAY,IAAIA,QAAQ,KAAK,UAAU,KACrDD,SAAS,KAAK,QAAQ,EACtB;QACAL,GAAG,CAAC,CAAC,CAACG,KAAK,CAAC,MAAM;UAChB;QAAA,CACD,CAAC;MACJ;IACF,CAAC;IAED,MAAMI,YAAY,GAAG/B,QAAQ,CAACgC,gBAAgB,CAAC,QAAQ,EAAEJ,QAAQ,CAAC;IAClE,OAAO,MAAM;MACXG,YAAY,CAACE,MAAM,CAAC,CAAC;IACvB,CAAC;EACH,CAAC,EAAE,CAACT,GAAG,CAAC,CAAC;EAET,MAAMU,OAAO,GAAGtC,WAAW,CAAC,MAAgC;IAC1D,OAAO4B,GAAG,CAAC,CAAC;EACd,CAAC,EAAE,CAACA,GAAG,CAAC,CAAC;EAET,OAAO;IACLW,MAAM,EAAEnB,MAAM,EAAEmB,MAAM,IAAI,SAAS;IACnCC,OAAO,EAAEpB,MAAM,EAAEoB,OAAO,IAAI,EAAE;IAC9BpB,MAAM;IACNE,OAAO;IACPgB;EACF,CAAC;AACH","ignoreList":[]}

package/lib/typescript/src/NativeDeviceIntegrity.d.ts

@@ -1,4 +1,4 @@
-import { type TurboModule } from 'react-native';
+import type { TurboModule } from 'react-native';
 export type NativeSignal = {
     id: string;
     category: string;
@@ -10,7 +10,7 @@ export type NativeIntegrityReport = {
     signals: NativeSignal[];
 };
 export interface Spec extends TurboModule {
-    checkIntegrity(): Promise<NativeIntegrityReport>;
+    checkIntegrity(options: Object): Promise<NativeIntegrityReport>;
 }
 declare const _default: Spec | null | undefined;
 export default _default;

package/lib/typescript/src/NativeDeviceIntegrity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NativeDeviceIntegrity.d.ts","sourceRoot":"","sources":["../../../src/NativeDeviceIntegrity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAErE,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,YAAY,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,WAAW,IAAK,SAAQ,WAAW;IACvC,cAAc,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAClD;;AAED,wBAAgE"}
+{"version":3,"file":"NativeDeviceIntegrity.d.ts","sourceRoot":"","sources":["../../../src/NativeDeviceIntegrity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,YAAY,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,WAAW,IAAK,SAAQ,WAAW;IAGvC,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACjE;;AAED,wBAAgE"}

package/lib/typescript/src/checkIntegrity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkIntegrity.d.ts","sourceRoot":"","sources":["../../../src/checkIntegrity.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,YAAS,CAAC;AAEtE;;GAEG;AACH,wBAAsB,cAAc,CAClC,QAAQ,CAAC,EAAE,qBAAqB,GAC/B,OAAO,CAAC,eAAe,CAAC,CAO1B"}
+{"version":3,"file":"checkIntegrity.d.ts","sourceRoot":"","sources":["../../../src/checkIntegrity.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,YAAS,CAAC;AAEtE;;GAEG;AACH,wBAAsB,cAAc,CAClC,QAAQ,CAAC,EAAE,qBAAqB,GAC/B,OAAO,CAAC,eAAe,CAAC,CAS1B"}

package/lib/typescript/src/checkIntegrity.native.d.ts

@@ -1,3 +1,9 @@
 import type { CheckIntegrityOptions, IntegrityResult } from './types.js';
+/**
+ * Build the native options bag: only `android` / `ios`, with sanitized fields.
+ * Missing fields are omitted. A list that is provided but unusable (wrong type,
+ * no strings) is sent as a blank entry so the check fails closed as incomplete.
+ */
+export declare function sanitizeNativeOptions(options: CheckIntegrityOptions): Record<string, unknown>;
 export declare function checkIntegrity(options?: CheckIntegrityOptions): Promise<IntegrityResult>;
 //# sourceMappingURL=checkIntegrity.native.d.ts.map

package/lib/typescript/src/checkIntegrity.native.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkIntegrity.native.d.ts","sourceRoot":"","sources":["../../../src/checkIntegrity.native.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,YAAS,CAAC;AA8BtE,wBAAsB,cAAc,CAClC,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,eAAe,CAAC,CAoD1B"}
+{"version":3,"file":"checkIntegrity.native.d.ts","sourceRoot":"","sources":["../../../src/checkIntegrity.native.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,YAAS,CAAC;AA2DtE;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,qBAAqB,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiCzB;AAYD,wBAAsB,cAAc,CAClC,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,eAAe,CAAC,CAoE1B"}

package/lib/typescript/src/index.d.ts

@@ -1,4 +1,5 @@
 export { checkIntegrity } from './checkIntegrity';
 export { useDeviceIntegrity } from './useDeviceIntegrity.js';
-export type { CheckIntegrityOptions, IntegrityResult, IntegrityStatus, Signal, SignalCategory, UnknownReason, } from './types.js';
+export { SIGNAL_IDS } from './types.js';
+export type { AndroidIntegrityOptions, CheckIntegrityOptions, IntegrityPolicy, IntegrityResult, IntegrityStatus, IosIntegrityOptions, Signal, SignalCategory, SignalId, UnknownReason, } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/lib/typescript/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAsB,CAAC;AAC1D,YAAY,EACV,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,MAAM,EACN,cAAc,EACd,aAAa,GACd,MAAM,YAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAsB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,YAAS,CAAC;AACrC,YAAY,EACV,uBAAuB,EACvB,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,MAAM,EACN,cAAc,EACd,QAAQ,EACR,aAAa,GACd,MAAM,YAAS,CAAC"}

package/lib/typescript/src/resolveStatus.d.ts

@@ -3,6 +3,7 @@ import type { CheckIntegrityOptions, IntegrityResult } from './types.js';
 /**
  * Maps a native integrity report + options to the public IntegrityResult.
  * Compromise evidence wins over incomplete runs; incomplete/malformed never become 'clean'.
+ * `durationMs` is set to 0 here — `checkIntegrity` overwrites with measured wall time.
  */
 export declare function resolveStatus(report: unknown, options: CheckIntegrityOptions | undefined, platform: typeof Platform.OS): IntegrityResult;
 //# sourceMappingURL=resolveStatus.d.ts.map

package/lib/typescript/src/resolveStatus.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolveStatus.d.ts","sourceRoot":"","sources":["../../../src/resolveStatus.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EAIhB,MAAM,YAAS,CAAC;AAwDjB;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,qBAAqB,YAAK,EACnC,QAAQ,EAAE,OAAO,QAAQ,CAAC,EAAE,GAC3B,eAAe,CAqDjB"}
+{"version":3,"file":"resolveStatus.d.ts","sourceRoot":"","sources":["../../../src/resolveStatus.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EAKhB,MAAM,YAAS,CAAC;AA4GjB;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,qBAAqB,YAAK,EACnC,QAAQ,EAAE,OAAO,QAAQ,CAAC,EAAE,GAC3B,eAAe,CAwDjB"}

package/lib/typescript/src/types.d.ts

@@ -1,8 +1,14 @@
 import type { Platform } from 'react-native';
 export type IntegrityStatus = 'clean' | 'compromised' | 'unknown';
 export type SignalCategory = 'jailbreak' | 'root' | 'hooking' | 'debugger' | 'emulator' | 'tamper' | 'environment';
+/**
+ * Stable public signal ids. Unknown future ids remain accepted on `Signal.id`.
+ */
+export declare const SIGNAL_IDS: readonly ["simulator", "jailbreak_files", "jailbreak_url_schemes", "jailbreak_symlinks", "jailbreak_writable_system", "hooking_libraries", "hooking_dyld_insert", "debugger_attached", "emulator", "root_su_binary", "root_management_apps", "root_magisk_files", "root_test_keys", "root_dangerous_props", "root_rw_system", "hooking_frida", "hooking_xposed", "tamper_signature_mismatch", "tamper_untrusted_installer", "tamper_binary_decrypted", "tamper_team_id_mismatch"];
+export type SignalId = (typeof SIGNAL_IDS)[number];
 export interface Signal {
-    id: string;
+    /** Known ids autocomplete; unknown future ids are still accepted. */
+    id: SignalId | (string & {});
     category: SignalCategory;
     description: string;
 }
@@ -10,14 +16,55 @@ export type UnknownReason = 'unsupported_platform' | 'native_module_unavailable'
 export interface IntegrityResult {
     status: IntegrityStatus;
     signals: Signal[];
+    /** Signals removed by `ignore` — never affect status. Always present. */
+    ignored: Signal[];
+    /** Wall time of the check in JS (monotonic when available). 0 on unsupported platforms. */
+    durationMs: number;
     platform: typeof Platform.OS;
     reason?: UnknownReason;
     error?: string;
 }
+export interface AndroidIntegrityOptions {
+    /** SHA-256 digests of expected signing certificates (hex; colons/whitespace optional). */
+    expectedSigningCertificates?: string[];
+    /** Package names of allowed installers (e.g. `com.android.vending`). */
+    allowedInstallers?: string[];
+}
+export interface IosIntegrityOptions {
+    /** Expected Apple Team IDs (keychain access-group prefix). */
+    expectedTeamIds?: string[];
+    /** When true, require the main executable to be encrypted (App Store / TestFlight). */
+    requireEncryptedBinary?: boolean;
+}
+export interface IntegrityPolicy {
+    /**
+     * Categories that make status `'compromised'`.
+     * When omitted, defaults to every category except `'emulator'`.
+     */
+    compromisingCategories?: SignalCategory[];
+}
 export interface CheckIntegrityOptions {
-    /** Treat emulator/simulator signals as compromising. Default false (reported, but status stays 'clean'). */
+    /**
+     * Treat emulator/simulator signals as compromising. Default false (reported,
+     * but status stays 'clean' unless the category is otherwise in the policy set).
+     * Shorthand that unions `'emulator'` into the compromising category set.
+     */
     treatEmulatorAsCompromised?: boolean;
     /** Resolve as 'unknown' with reason 'timeout' if native does not answer in time. Default 10000 ms. */
     timeoutMs?: number;
+    /**
+     * Signal ids to exclude from status resolution. Matching signals move to
+     * `result.ignored` and never affect status.
+     */
+    ignore?: SignalId[];
+    /**
+     * Status policy. `compromisingCategories` replaces the default set when
+     * provided; `treatEmulatorAsCompromised` is unioned in when both are set.
+     */
+    policy?: IntegrityPolicy;
+    /** Android-only tamper options forwarded to native when provided. */
+    android?: AndroidIntegrityOptions;
+    /** iOS-only tamper options forwarded to native when provided. */
+    ios?: IosIntegrityOptions;
 }
 //# sourceMappingURL=types.d.ts.map

package/lib/typescript/src/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;AAElE,MAAM,MAAM,cAAc,GACtB,WAAW,GACX,MAAM,GACN,SAAS,GACT,UAAU,GACV,UAAU,GACV,QAAQ,GACR,aAAa,CAAC;AAElB,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GACrB,sBAAsB,GACtB,2BAA2B,GAC3B,cAAc,GACd,SAAS,GACT,YAAY,GACZ,iBAAiB,CAAC;AAEtB,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,4GAA4G;IAC5G,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,sGAAsG;IACtG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;AAElE,MAAM,MAAM,cAAc,GACtB,WAAW,GACX,MAAM,GACN,SAAS,GACT,UAAU,GACV,UAAU,GACV,QAAQ,GACR,aAAa,CAAC;AAElB;;GAEG;AACH,eAAO,MAAM,UAAU,mdAsBb,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,MAAM,WAAW,MAAM;IACrB,qEAAqE;IACrE,EAAE,EAAE,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC7B,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GACrB,sBAAsB,GACtB,2BAA2B,GAC3B,cAAc,GACd,SAAS,GACT,YAAY,GACZ,iBAAiB,CAAC;AAEtB,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,yEAAyE;IACzE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2FAA2F;IAC3F,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,0FAA0F;IAC1F,2BAA2B,CAAC,EAAE,MAAM,EAAE,CAAC;IACvC,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,uFAAuF;IACvF,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,cAAc,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,sGAAsG;IACtG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;IACpB;;;OAGG;IACH,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,qEAAqE;IACrE,OAAO,CAAC,EAAE,uBAAuB,CAAC;IAClC,iEAAiE;IACjE,GAAG,CAAC,EAAE,mBAAmB,CAAC;CAC3B"}

package/lib/typescript/src/useDeviceIntegrity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useDeviceIntegrity.d.ts","sourceRoot":"","sources":["../../../src/useDeviceIntegrity.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,MAAM,EACP,MAAM,YAAS,CAAC;AAEjB,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;CACzC,CAAC;AAEF,wBAAgB,kBAAkB,CAChC,OAAO,GAAE,qBAA0B,GAClC,wBAAwB,CAuE1B"}
+{"version":3,"file":"useDeviceIntegrity.d.ts","sourceRoot":"","sources":["../../../src/useDeviceIntegrity.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,MAAM,EACP,MAAM,YAAS,CAAC;AAEjB,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;CACzC,CAAC;AAiBF,wBAAgB,kBAAkB,CAChC,OAAO,GAAE,qBAA0B,GAClC,wBAAwB,CAuE1B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-device-integrity",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "description": "Jailbreak, root, hooking, debugger and emulator detection for React Native and Expo",
   "main": "./lib/module/index.js",
   "types": "./lib/typescript/src/index.d.ts",
@@ -10,6 +10,11 @@
       "types": "./lib/typescript/src/index.d.ts",
       "default": "./lib/module/index.js"
     },
+    "./jest": {
+      "types": "./jest/index.d.ts",
+      "default": "./jest/index.js"
+    },
+    "./app.plugin.js": "./app.plugin.js",
     "./package.json": "./package.json"
   },
   "files": [
@@ -18,6 +23,7 @@
     "android",
     "ios",
     "cpp",
+    "jest",
     "app.plugin.js",
     "plugin/build",
     "*.podspec",
@@ -42,7 +48,8 @@
     "typecheck": "tsc && tsc -p plugin --noEmit",
     "lint": "eslint \"**/*.{js,ts,tsx}\"",
     "test": "jest",
-    "release": "release-it --only-version"
+    "release": "release-it --only-version",
+    "check:exports": "node -e \"for (const s of ['react-native-device-integrity/app.plugin.js','react-native-device-integrity/jest','react-native-device-integrity/package.json']) require.resolve(s); console.log('exports ok')\""
   },
   "keywords": [
     "react-native",
@@ -153,7 +160,8 @@
       "<rootDir>/plugin/build"
     ],
     "testPathIgnorePatterns": [
-      "<rootDir>/plugin/build"
+      "<rootDir>/plugin/build",
+      "<rootDir>/jest"
     ],
     "collectCoverageFrom": [
       "src/**/*.{ts,tsx}",
@@ -206,5 +214,8 @@
       "eslint"
     ],
     "version": "0.63.1"
+  },
+  "resolutions": {
+    "release-it/undici": "7.29.1"
   }
 }

package/src/NativeDeviceIntegrity.ts

@@ -1,4 +1,5 @@
-import { TurboModuleRegistry, type TurboModule } from 'react-native';
+import type { TurboModule } from 'react-native';
+import { TurboModuleRegistry } from 'react-native';
 
 export type NativeSignal = {
   id: string;
@@ -13,7 +14,9 @@ export type NativeIntegrityReport = {
 };
 
 export interface Spec extends TurboModule {
-  checkIntegrity(): Promise<NativeIntegrityReport>;
+  // `Object` (not CodegenTypes.UnsafeObject) so older codegen versions, e.g.
+  // React Native 0.79, can parse the spec. Codegen maps it to a generic object.
+  checkIntegrity(options: Object): Promise<NativeIntegrityReport>;
 }
 
 export default TurboModuleRegistry.get<Spec>('DeviceIntegrity');

package/src/checkIntegrity.native.ts

@@ -12,6 +12,15 @@ class IntegrityTimeoutError extends Error {
   }
 }
 
+function nowMs(): number {
+  const perf = (globalThis as { performance?: { now?: () => number } })
+    .performance;
+  if (perf != null && typeof perf.now === 'function') {
+    return perf.now();
+  }
+  return Date.now();
+}
+
 function withTimeout<T>(promise: Promise<T>, timeoutMs: number): Promise<T> {
   return new Promise<T>((resolve, reject) => {
     const timer = setTimeout(() => {
@@ -31,6 +40,78 @@ function withTimeout<T>(promise: Promise<T>, timeoutMs: number): Promise<T> {
   });
 }
 
+// A blank entry makes native treat the check as configured but unusable,
+// so it reports the run as incomplete instead of skipping the check.
+const UNUSABLE_LIST = [''];
+
+function stringArray(value: unknown): string[] | undefined {
+  if (value == null) {
+    return undefined;
+  }
+  if (!Array.isArray(value)) {
+    return UNUSABLE_LIST;
+  }
+  const strings = value.filter(
+    (item): item is string => typeof item === 'string'
+  );
+  if (value.length > 0 && strings.length === 0) {
+    return UNUSABLE_LIST;
+  }
+  return strings;
+}
+
+/**
+ * Build the native options bag: only `android` / `ios`, with sanitized fields.
+ * Missing fields are omitted. A list that is provided but unusable (wrong type,
+ * no strings) is sent as a blank entry so the check fails closed as incomplete.
+ */
+export function sanitizeNativeOptions(
+  options: CheckIntegrityOptions
+): Record<string, unknown> {
+  const native: Record<string, unknown> = {};
+
+  if (options.android != null && typeof options.android === 'object') {
+    const android: Record<string, unknown> = {};
+    const certs = stringArray(options.android.expectedSigningCertificates);
+    if (certs != null) {
+      android.expectedSigningCertificates = certs;
+    }
+    const installers = stringArray(options.android.allowedInstallers);
+    if (installers != null) {
+      android.allowedInstallers = installers;
+    }
+    if (Object.keys(android).length > 0) {
+      native.android = android;
+    }
+  }
+
+  if (options.ios != null && typeof options.ios === 'object') {
+    const ios: Record<string, unknown> = {};
+    const teamIds = stringArray(options.ios.expectedTeamIds);
+    if (teamIds != null) {
+      ios.expectedTeamIds = teamIds;
+    }
+    if (typeof options.ios.requireEncryptedBinary === 'boolean') {
+      ios.requireEncryptedBinary = options.ios.requireEncryptedBinary;
+    }
+    if (Object.keys(ios).length > 0) {
+      native.ios = ios;
+    }
+  }
+
+  return native;
+}
+
+function withDuration(
+  result: IntegrityResult,
+  startedAt: number
+): IntegrityResult {
+  return {
+    ...result,
+    durationMs: Math.max(0, nowMs() - startedAt),
+  };
+}
+
 export async function checkIntegrity(
   options: CheckIntegrityOptions = {}
 ): Promise<IntegrityResult> {
@@ -38,6 +119,8 @@ export async function checkIntegrity(
     return {
       status: 'unknown',
       signals: [],
+      ignored: [],
+      durationMs: 0,
       platform: Platform.OS,
       reason: 'unsupported_platform',
     };
@@ -47,27 +130,36 @@ export async function checkIntegrity(
     return {
       status: 'unknown',
       signals: [],
+      ignored: [],
+      durationMs: 0,
       platform: Platform.OS,
       reason: 'native_module_unavailable',
     };
   }
 
   const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const startedAt = nowMs();
+  const nativeOptions = sanitizeNativeOptions(options);
 
   try {
     const report = await withTimeout(
-      NativeDeviceIntegrity.checkIntegrity(),
+      NativeDeviceIntegrity.checkIntegrity(nativeOptions),
       timeoutMs
     );
-    return resolveStatus(report, options, Platform.OS);
+    return withDuration(resolveStatus(report, options, Platform.OS), startedAt);
   } catch (error) {
     if (error instanceof IntegrityTimeoutError) {
-      return {
-        status: 'unknown',
-        signals: [],
-        platform: Platform.OS,
-        reason: 'timeout',
-      };
+      return withDuration(
+        {
+          status: 'unknown',
+          signals: [],
+          ignored: [],
+          durationMs: 0,
+          platform: Platform.OS,
+          reason: 'timeout',
+        },
+        startedAt
+      );
     }
 
     const message =
@@ -77,12 +169,17 @@ export async function checkIntegrity(
           ? error
           : 'Native integrity check failed';
 
-    return {
-      status: 'unknown',
-      signals: [],
-      platform: Platform.OS,
-      reason: 'native_error',
-      error: message,
-    };
+    return withDuration(
+      {
+        status: 'unknown',
+        signals: [],
+        ignored: [],
+        durationMs: 0,
+        platform: Platform.OS,
+        reason: 'native_error',
+        error: message,
+      },
+      startedAt
+    );
   }
 }

package/src/checkIntegrity.ts

@@ -10,6 +10,8 @@ export async function checkIntegrity(
   return {
     status: 'unknown',
     signals: [],
+    ignored: [],
+    durationMs: 0,
     platform: Platform.OS,
     reason: 'unsupported_platform',
   };

package/src/index.tsx

@@ -1,10 +1,15 @@
 export { checkIntegrity } from './checkIntegrity';
 export { useDeviceIntegrity } from './useDeviceIntegrity';
+export { SIGNAL_IDS } from './types';
 export type {
+  AndroidIntegrityOptions,
   CheckIntegrityOptions,
+  IntegrityPolicy,
   IntegrityResult,
   IntegrityStatus,
+  IosIntegrityOptions,
   Signal,
   SignalCategory,
+  SignalId,
   UnknownReason,
 } from './types';