react-native-revnix 1.5.0 → 1.7.0

package/README.md

@@ -145,6 +145,22 @@ Learn more in [A/B tests](https://www.revnix.io/docs/ab-tests).
 - **MMP forwarding** to AppsFlyer and Adjust, **ad revenue** logging and **uninstall measurement**. See [MMP attribution](https://www.revnix.io/docs/mmp-attribution), [Ad revenue](https://www.revnix.io/docs/ad-revenue) and [Uninstall measurement](https://www.revnix.io/docs/uninstall-measurement).
 - **Fraud prevention**: anonymous-IP and click-injection checks keep paid channels honest. See [Fraud prevention](https://www.revnix.io/docs/fraud-prevention).
 
+### Device integrity
+
+Pass `nativeDeviceIntegrity` so install reports carry Apple App Attest or Google Play Integrity evidence. With "Require device integrity" on in the dashboard, installs without it lose their attribution.
+
+```ts
+import { nativeDeviceIntegrity } from "react-native-revnix/store";
+
+Revnix.configure({
+  apiKey: "rvx_pk_live_…",
+  baseUrl: "https://<your-deployment>.convex.site",
+  deviceIntegrity: nativeDeviceIntegrity,
+});
+```
+
+It runs once per customer, waits at most 10 seconds and never blocks the report. Needs App Attest on iOS or Google Play services on Android; simulators and emulators send no evidence.
+
 ## Real-time analytics for your React Native app
 
 ![Revnix overview: active subscriptions, revenue and MRR over 90 days](https://www.revnix.io/sdk/react-native/analytics.png)

package/android/build.gradle

@@ -11,6 +11,7 @@ android {
 
   defaultConfig {
     minSdkVersion safeExtGet("minSdkVersion", 24)
+    consumerProguardFiles "consumer-rules.pro"
   }
 
   compileOptions {
@@ -31,4 +32,6 @@ repositories {
 dependencies {
   implementation "com.facebook.react:react-native:+"
   implementation "com.android.billingclient:billing:8.3.0"
+  implementation "com.google.android.play:integrity:1.6.0"
+  compileOnly "com.google.android.gms:play-services-ads-identifier:18.2.0"
 }

package/android/consumer-rules.pro

@@ -0,0 +1 @@
+-dontwarn com.google.android.gms.ads.identifier.**

package/android/src/main/kotlin/com/revnix/reactnative/RevnixStoreModule.kt

@@ -1,5 +1,6 @@
 package com.revnix.reactnative
 
+import android.util.Base64
 import android.util.Log
 import com.android.billingclient.api.AcknowledgePurchaseParams
 import com.android.billingclient.api.BillingClient
@@ -21,6 +22,10 @@ import com.facebook.react.bridge.ReactContextBaseJavaModule
 import com.facebook.react.bridge.ReactMethod
 import com.facebook.react.bridge.WritableMap
 import com.facebook.react.modules.core.DeviceEventManagerModule
+import com.google.android.gms.ads.identifier.AdvertisingIdClient
+import com.google.android.play.core.integrity.IntegrityManagerFactory
+import com.google.android.play.core.integrity.IntegrityTokenRequest
+import java.security.MessageDigest
 import java.util.concurrent.ConcurrentHashMap
 import java.util.concurrent.atomic.AtomicReference
 
@@ -115,6 +120,44 @@ class RevnixStoreModule(context: ReactApplicationContext) :
     }
   }
 
+  @ReactMethod
+  fun deviceIntegrity(customerId: String, promise: Promise) {
+    val nonce = Base64.encodeToString(
+      MessageDigest.getInstance("SHA-256").digest(customerId.toByteArray(Charsets.UTF_8)),
+      Base64.URL_SAFE or Base64.NO_PADDING or Base64.NO_WRAP,
+    )
+    try {
+      IntegrityManagerFactory.create(reactApplicationContext.applicationContext)
+        .requestIntegrityToken(IntegrityTokenRequest.builder().setNonce(nonce).build())
+        .addOnSuccessListener { response ->
+          promise.resolve(
+            Arguments.createMap().apply {
+              putString("platform", "android")
+              putString("token", response.token())
+            },
+          )
+        }
+        .addOnFailureListener { promise.resolve(null) }
+        .addOnCanceledListener { promise.resolve(null) }
+    } catch (err: Exception) {
+      promise.resolve(null)
+    }
+  }
+
+  @ReactMethod
+  fun advertisingId(promise: Promise) {
+    Thread {
+      try {
+        val info = AdvertisingIdClient.getAdvertisingIdInfo(reactApplicationContext.applicationContext)
+        promise.resolve(
+          info.id.takeUnless { info.isLimitAdTrackingEnabled || it == "00000000-0000-0000-0000-000000000000" },
+        )
+      } catch (err: Throwable) {
+        promise.reject("advertising_id_unavailable", err.message, err)
+      }
+    }.start()
+  }
+
   override fun onPurchasesUpdated(result: BillingResult, purchases: List<Purchase>?) {
     if (result.responseCode != BillingResponseCode.OK) {
       settle(pending.getAndSet(null) ?: return, result)

package/dist/blocks/locale.js

@@ -123,7 +123,14 @@ function localizeBlock(block, lookup) {
         case "text":
             return { ...block, text: at("text", block.text) };
         case "button":
+        case "toggle":
             return { ...block, label: at("label", block.label) };
+        case "timer":
+            return {
+                ...block,
+                format: opt("format", block.format),
+                expiredText: opt("expiredText", block.expiredText),
+            };
         case "list":
             return {
                 ...block,

package/dist/blocks/selection.d.ts

@@ -1,4 +1,4 @@
-import type { BlockStyle, PaywallBlock, PaywallBlockDoc } from "./types.js";
+import type { BlockStyle, PaywallBlock, PaywallBlockDoc, ToggleBlock } from "./types.js";
 import type { RevnixPaywallPackage } from "../ui/RevnixPaywall.js";
 /** Where a block sits: inside the selected plan card, inside another plan
  *  card, or outside any plan card (undefined). */
@@ -9,6 +9,12 @@ export type SelectionContext = "selected" | "unselected" | undefined;
 export declare function selectedPackageId(packages: ReadonlyArray<{
     packageId: string;
 }>, ...candidates: Array<string | undefined>): string | undefined;
+export declare function toggleSelection(block: ToggleBlock, packages: ReadonlyArray<{
+    packageId: string;
+}>, selectedId: string | undefined): {
+    on: boolean;
+    target: string;
+} | null;
 /** The context a package-bearing card opens for itself and its subtree. */
 export declare function packageContext(pkg: {
     packageId: string;

package/dist/blocks/selection.js

@@ -9,6 +9,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CANVAS_MAX_WIDTH = void 0;
 exports.selectedPackageId = selectedPackageId;
+exports.toggleSelection = toggleSelection;
 exports.packageContext = packageContext;
 exports.effectiveStyle = effectiveStyle;
 exports.isVisible = isVisible;
@@ -26,6 +27,14 @@ function selectedPackageId(packages, ...candidates) {
     }
     return packages[0]?.packageId;
 }
+function toggleSelection(block, packages, selectedId) {
+    const on = packages[block.onPackageIndex];
+    const off = packages[block.offPackageIndex];
+    if (on === undefined || off === undefined)
+        return null;
+    const isOn = on.packageId === selectedId;
+    return { on: isOn, target: (isOn ? off : on).packageId };
+}
 /** The context a package-bearing card opens for itself and its subtree. */
 function packageContext(pkg, selectedId) {
     if (pkg === undefined)

package/dist/blocks/tags.d.ts

@@ -1,4 +1,5 @@
 import type { RevnixPaywallPackage } from "../ui/RevnixPaywall.js";
+import type { TimerBlock } from "./types.js";
 /** Minor units per major unit. Not every currency is a hundredth: JPY and KRW
  *  have no minor unit at all, so dividing by 100 would understate a price by
  *  100×. Intl knows each currency's exponent — ask it rather than assume.
@@ -10,3 +11,5 @@ export declare function minorUnitsForCurrency(currency: string): number;
 /** Fills a copy template from one package. `all` is the rest of the offering,
  *  which {save_percent} needs to have something to compare against. */
 export declare function resolveTags(text: string, pkg: RevnixPaywallPackage | undefined, all?: RevnixPaywallPackage[]): string;
+export declare function formatCountdown(format: string, remaining: number): string;
+export declare function timerText(block: TimerBlock, shownAt: number, now: number): string | null;

package/dist/blocks/tags.js

@@ -13,6 +13,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.minorUnitsForCurrency = minorUnitsForCurrency;
 exports.resolveTags = resolveTags;
+exports.formatCountdown = formatCountdown;
+exports.timerText = timerText;
 /** Renewal cycles, in months. Lifetime and one-time products have no cycle. */
 const MONTHS = {
     weekly: 1 / 4.345,
@@ -119,3 +121,34 @@ function resolveTags(text, pkg, all = []) {
         }
     });
 }
+function formatCountdown(format, remaining) {
+    const pad = (n) => String(n).padStart(2, "0");
+    let span = Infinity;
+    const part = (token, unit) => {
+        const value = Math.floor((remaining % span) / unit);
+        if (format.includes(token))
+            span = unit;
+        return value;
+    };
+    const days = part("{d}", 86400);
+    const hours = part("{hh}", 3600);
+    const minutes = part("{mm}", 60);
+    const seconds = part("{ss}", 1);
+    return format
+        .replace(/\{d\}/g, String(days))
+        .replace(/\{hh\}/g, pad(hours))
+        .replace(/\{mm\}/g, pad(minutes))
+        .replace(/\{ss\}/g, pad(seconds));
+}
+function timerText(block, shownAt, now) {
+    const deadline = block.endsAt !== undefined
+        ? Date.parse(block.endsAt)
+        : shownAt + (block.duration ?? 0) * 1000;
+    const remaining = Number.isNaN(deadline)
+        ? 0
+        : Math.max(0, Math.floor((deadline - now) / 1000));
+    if (remaining > 0) {
+        return formatCountdown(block.format ?? "{hh}:{mm}:{ss}", remaining);
+    }
+    return block.expiredText ?? null;
+}

package/dist/blocks/types.d.ts

@@ -229,13 +229,55 @@ export interface SpacerBlock {
     selectedStyle?: BlockStyle;
     visibility?: BlockVisibility;
 }
+/** Countdown text. `endsAt` is one deadline for everyone; `duration` counts
+ *  from the moment this paywall view opened. At zero it draws `expiredText`,
+ *  or nothing when that is absent. Tokens in `format`: {d} {hh} {mm} {ss}. */
+export interface TimerBlock {
+    id: string;
+    type: "timer";
+    endsAt?: string;
+    duration?: number;
+    format?: string;
+    expiredText?: string;
+    style?: BlockStyle;
+    selectedStyle?: BlockStyle;
+    visibility?: BlockVisibility;
+}
+/** A muted looping clip. React Native has no built-in player, so this SDK
+ *  draws `poster` in its place, sized like an image block. */
+export interface VideoBlock {
+    id: string;
+    type: "video";
+    url: string;
+    poster?: string;
+    fit?: "cover" | "contain";
+    style?: BlockStyle;
+    selectedStyle?: BlockStyle;
+    visibility?: BlockVisibility;
+}
+/** The free-trial switch: ON while package `onPackageIndex` is selected, and
+ *  tapping it selects the other one. Hidden when the offering lacks either
+ *  index. */
+export interface ToggleBlock {
+    id: string;
+    type: "toggle";
+    label: string;
+    onPackageIndex: number;
+    offPackageIndex: number;
+    style?: BlockStyle;
+    selectedStyle?: BlockStyle;
+    visibility?: BlockVisibility;
+}
 /** The one container block. `layout` picks how children are placed: column /
  *  row are flex lines, `stack` layers them (children position with
- *  style.inset or the edge offsets), and `grid` is an N-column grid. */
+ *  style.inset or the edge offsets), `grid` is an N-column grid, and
+ *  `carousel` pages through its children one swipe at a time. */
 export interface CardBlock {
     id: string;
     type: "card";
-    layout?: "column" | "row" | "stack" | "grid";
+    layout?: "column" | "row" | "stack" | "grid" | "carousel";
+    /** carousel only: seconds per page before it moves on by itself. */
+    autoAdvance?: number;
     /** Renders this container once per package in the attached offering. Its
      *  subtree reads the package through tag variables. */
     repeat?: "packages";
@@ -254,7 +296,7 @@ export interface CardBlock {
     selectedStyle?: BlockStyle;
     visibility?: BlockVisibility;
 }
-export type PaywallBlock = TextBlock | ImageBlock | ListBlock | ProductsBlock | ButtonBlock | LinksBlock | LineBlock | SpacerBlock | CardBlock;
+export type PaywallBlock = TextBlock | ImageBlock | ListBlock | ProductsBlock | ButtonBlock | LinksBlock | LineBlock | SpacerBlock | TimerBlock | VideoBlock | ToggleBlock | CardBlock;
 /** The published document: screen palette plus the block tree. */
 export interface PaywallBlockDoc {
     version: number;

package/dist/blocks/types.js

@@ -38,6 +38,7 @@ function hasCloseAction(blocks) {
         : b.type === "card"
             ? b.repeat === undefined &&
                 b.packageIndex === undefined &&
+                b.layout !== "carousel" &&
                 hasCloseAction(b.children)
             : (b.type === "text" || b.type === "image" || b.type === "button") &&
                 b.action === "close");

package/dist/client.d.ts

@@ -1,4 +1,5 @@
 import type { AdRevenue, AliasResult, CustomerEntitlements, IdentifyResult, IdentifyStrategy, IdentityInfo, LastDeepLink, MmpAttribution, PaywallInteraction, PlacementResolution, RegisterPurchaseInput, RegisterPurchaseResult, RevnixAttribution, RevnixConfig } from "./types.js";
+export declare function paywallImageUrls(value: unknown): string[];
 export declare class RevnixClient {
     private readonly apiKey;
     private readonly baseUrl;
@@ -25,6 +26,8 @@ export declare class RevnixClient {
     private readonly onImplicitPaywall?;
     private readonly onDeferredDeepLink?;
     private readonly onAttribution?;
+    private readonly deviceIntegrity?;
+    private integrityRequest;
     private deferredDeepLinkClaimed;
     private landingUrl;
     private lastDeepLinkWrite;
@@ -56,6 +59,9 @@ export declare class RevnixClient {
      *  /v1/installs uses, and independent of the device header (which an app
      *  can turn off entirely). */
     private freshInstall;
+    private eventFlush;
+    private eventTimer;
+    private eventRetryAt;
     constructor(config: RevnixConfig);
     /** The id every call is made as: the stored identified/canonical id, or a
      *  generated-and-persisted anonymous id (rvx_anon_…) on first launch. */
@@ -105,7 +111,8 @@ export declare class RevnixClient {
     private postPurchase;
     /** C7: retry purchases that failed to register and were persisted locally.
      *  Runs automatically at construction; call again when connectivity returns.
-     *  Idempotent and safe to call repeatedly. */
+     *  Idempotent and safe to call repeatedly. Purchases queued more than 30
+     *  days ago are dropped with a diagnostic. */
     retryPendingPurchases(): Promise<void>;
     private freshEntitlements;
     private inflightEntitlements;
@@ -150,12 +157,22 @@ export declare class RevnixClient {
      *  RevnixAuthError locally, before any network call, like identify(). */
     getIdentity(): Promise<IdentityInfo>;
     /** Resolve a named in-app location to the currently published offering —
-     *  the one-line paywall call. REV-157: reads the network first and caches
-     *  the result; if that read FAILS (offline / incident) it falls back to the
-     *  last cached resolution with `stale: true`, so the paywall renders the
-     *  last published version rather than not at all. Throws only when there
-     *  is nothing cached. */
+     *  the one-line paywall call. Served instantly from a cache under 24 h old
+     *  that was fetched for this customer since the last `setAttributes` or
+     *  purchase, refreshed in the background. Otherwise reads the network and
+     *  caches the result; if that read FAILS (offline / incident) it falls back
+     *  to the last cached resolution with `stale: true`, so the paywall renders
+     *  the last published version rather than not at all. Throws only when
+     *  there is nothing cached. A deliberate rejection seen by the background
+     *  refresh drops the cache, so the next resolve throws it. */
     resolvePlacement(placementKey: string): Promise<PlacementResolution>;
+    /** Fetch these placements now so the next `resolvePlacement` answers from
+     *  the cache. Never throws; failures report to `onDiagnostic`. Paywall
+     *  images are warmed by `prefetchPaywallImages` from
+     *  `react-native-revnix/ui`. */
+    preload(placementKeys: string[]): Promise<void>;
+    private refreshPlacement;
+    private fetchPlacement;
     /** REV-157: the last resolution cached for `placementKey`, with NO network
      *  call — for an instant, offline-safe paywall at launch. Always
      *  `stale: true`; follow with resolvePlacement() to revalidate. Null if
@@ -207,7 +224,8 @@ export declare class RevnixClient {
      *    - `restore` — restore purchases was tapped
      *    - `error` — the paywall itself failed (config, products, render)
      *
-     *  Fire-and-forget like the other beacons: never blocks, never throws.
+     *  Queued and sent in batches (see `flushEvents`): resolves once queued,
+     *  never throws.
      *
      *  `viewId` is the id `logPaywallShown` returned for THIS display. Passing
      *  it is what threads the whole life of one impression together and puts
@@ -233,15 +251,28 @@ export declare class RevnixClient {
         message?: string;
         /** Idempotency key for this occurrence; defaults to `viewId`. */
         eventId?: string;
-    }): void;
+    }): Promise<void>;
     /** Reports one ad impression's payout (POST /v1/ad-revenue).
      *  Fire-and-forget like the other beacons: never blocks, never throws. */
     logAdRevenue(input: AdRevenue): void;
     /** Reports one custom in-app event (POST /v1/events), not for purchases.
-     *  Fire-and-forget like the other beacons: never blocks, never throws. */
+     *  Queued and sent in batches (see `flushEvents`): resolves once queued,
+     *  never throws. */
     track(event: string, properties?: Record<string, string | number | boolean>, options?: {
         eventId?: string;
-    }): void;
+    }): Promise<void>;
+    /** Send every queued `track` and paywall interaction event now. Events are
+     *  otherwise sent in batches: at 20 queued, 10 s after the first, when the
+     *  app goes to the background, and on the next launch. Never throws; a
+     *  transient failure keeps the events and holds further sends for 30 s. */
+    flushEvents(): Promise<void>;
+    private readEvents;
+    private mutateEvents;
+    private enqueueEvent;
+    private armEventTimer;
+    private startEventFlush;
+    private runEventFlush;
+    private removeEvents;
     /** PT11: forward an MMP's attribution callback (Adjust, AppsFlyer, …) so
      *  Revnix credits revenue to the right network/campaign. */
     setAttribution(attribution: MmpAttribution): void;
@@ -250,6 +281,7 @@ export declare class RevnixClient {
      *  report the token dead. iOS/Android only (no-op on web),
      *  fire-and-forget. */
     setPushToken(token: string): void;
+    private reportAdvertisingId;
     /** REV-272: the two moments that happen ON a paywall, with the loop guard
      *  applied. `fromPaywallId` travels so the server can refuse to hand back
      *  the very paywall being dismissed — the backstop for a host that reports
@@ -361,6 +393,7 @@ export declare class RevnixClient {
      *  cold start to ONE paywall. Never throws past its caller's catch. */
     private triggerImplicit;
     private consumePreviousSessionMs;
+    private subscribeLifecycle;
     /** REV-272: the launch-time moments, plus the foreground listener that
      *  `session_start` is built on.
      *
@@ -386,6 +419,7 @@ export declare class RevnixClient {
     /** Fire-and-forget install report (REV-093). Never blocks startup and
      *  never throws — the backend absorbs retries idempotently per id. */
     private reportInstall;
+    private integrityFor;
     /** REV-268: assemble and encode the device facts once. Runtime-detected
      *  facts first, the app's `device` over them, then the three the SDK owns.
      *  `installedAt` is the first launch this storage ever saw — written on
@@ -405,7 +439,12 @@ export declare class RevnixClient {
     private readPlacementMap;
     private readPlacementCache;
     private writePlacementCache;
-    private queueLock;
+    private deletePlacementCache;
+    private mutatePlacements;
+    private placementsInvalidatedAt;
+    private invalidatePlacements;
+    private storageLock;
+    private withStorageLock;
     private mutateQueue;
     private readPurchaseQueue;
     private writePurchaseQueue;