react-native-revnix 1.6.0 → 1.7.0

package/dist/esm/client.js

@@ -15,9 +15,11 @@ const PENDING_PURCHASES_KEY = "revnix.pendingPurchases";
 const PLACEMENTS_CACHE_KEY = "revnix.placements";
 const LAST_ATTRIBUTION_KEY = "revnix.lastAttribution";
 const LAST_PUSH_TOKEN_KEY = "revnix.lastPushToken";
+const LAST_AD_ID_KEY = "revnix.lastAdId";
 const EVENT_QUEUE_KEY = "revnix.eventQueue";
 const PLACEMENTS_INVALIDATED_AT_KEY = "revnix.placementsInvalidatedAt";
 const DEFAULT_TIMEOUT_MS = 10000;
+const INTEGRITY_TIMEOUT_MS = 10000;
 const EVENT_QUEUE_CAP = 1000;
 const EVENT_BATCH_SIZE = 100;
 const EVENT_FLUSH_THRESHOLD = 20;
@@ -98,6 +100,19 @@ const jittered = (ms) => ms * (0.8 + Math.random() * 0.4);
 // from memory. Short enough that a webhook-driven change is picked up within
 // half a minute; long enough that gating five screens costs one request.
 const DEFAULT_ENTITLEMENTS_TTL_MS = 30000;
+const fitsWithin = (value, max) => typeof value === "string" && value.length > 0 && value.length <= max;
+function wellFormedIntegrity(evidence) {
+    if (typeof evidence !== "object" || evidence === null)
+        return undefined;
+    const { platform, keyId, attestation, token } = evidence;
+    if (platform === "ios" && fitsWithin(keyId, 128) && fitsWithin(attestation, 16384)) {
+        return { platform, keyId, attestation };
+    }
+    if (platform === "android" && fitsWithin(token, 16384)) {
+        return { platform, token };
+    }
+    return undefined;
+}
 export class RevnixClient {
     constructor(config) {
         /** True while the current id is a generated anon id living on
@@ -110,6 +125,7 @@ export class RevnixClient {
         // client (dev fast-refresh re-running configure()) does not keep retrying
         // and prefetching alongside its successor.
         this.disposed = false;
+        this.integrityRequest = null;
         this.deferredDeepLinkClaimed = false;
         this.landingUrl = null;
         this.lastDeepLinkWrite = Promise.resolve();
@@ -186,12 +202,15 @@ export class RevnixClient {
         this.onDiagnostic = config.onDiagnostic;
         this.onDeferredDeepLink = config.onDeferredDeepLink;
         this.onAttribution = config.onAttribution;
+        this.deviceIntegrity = config.deviceIntegrity;
         this.readYourWritesDelaysMs =
             config.readYourWritesDelaysMs ?? [250, 500, 1000, 2000];
         this.customerIdPromise = this.loadCustomerId(config.customerId);
         // C7: retry any purchases that failed to register on a previous launch, so
         // a paying user never stays locked out because a POST didn't land.
         void this.retryPendingPurchases().catch((err) => this.diag("retryPendingPurchases", err));
+        if (config.advertisingId)
+            this.reportAdvertisingId(config.advertisingId);
         const store = getStoreAdapter();
         if (store) {
             this.stopStoreObserver = store.observe((tx) => void this.registerStoreTransaction(store, tx).catch((err) => this.diag("storeObserver", err)));
@@ -967,6 +986,7 @@ export class RevnixClient {
                 ...(attribution.campaign ? { campaign: attribution.campaign } : {}),
                 ...(attribution.adGroup ? { adGroup: attribution.adGroup } : {}),
                 ...(attribution.creative ? { creative: attribution.creative } : {}),
+                ...(await this.integrityFor(customerId)),
             });
             await this.storage.setItem(LAST_ATTRIBUTION_KEY, payload);
         })
@@ -1000,6 +1020,21 @@ export class RevnixClient {
         })
             .catch((err) => this.diag("setPushToken", err));
     }
+    reportAdvertisingId(source) {
+        void Promise.resolve()
+            .then(source)
+            .then(async (value) => {
+            const id = value || null;
+            const customerId = await this.customerIdPromise;
+            const payload = JSON.stringify({ customerId, id });
+            const last = await this.storage.getItem(LAST_AD_ID_KEY);
+            if (last === payload || (id === null && last === null))
+                return;
+            await this.setAttributes({ gps_adid: id });
+            await this.storage.setItem(LAST_AD_ID_KEY, payload);
+        })
+            .catch((err) => this.diag("advertisingId", err));
+    }
     /** REV-272: the two moments that happen ON a paywall, with the loop guard
      *  applied. `fromPaywallId` travels so the server can refuse to hand back
      *  the very paywall being dismissed — the backstop for a host that reports
@@ -1222,12 +1257,13 @@ export class RevnixClient {
         if (this.ephemeralAnonId)
             return;
         void this.customerIdPromise
-            .then((customerId) => this.request("POST", "/v1/installs", {
+            .then(async (customerId) => this.request("POST", "/v1/installs", {
             customerId,
             occurredAt: Date.now(),
             sdkVersion: SDK_VERSION,
             installReferrer: referrer.slice(0, 1024),
             ...this.installMetadata,
+            ...(await this.integrityFor(customerId)),
         }))
             .then((body) => {
             this.refreshAttribution();
@@ -1262,12 +1298,13 @@ export class RevnixClient {
         if (this.ephemeralAnonId)
             return Promise.resolve(undefined);
         return this.customerIdPromise
-            .then((customerId) => this.request("POST", "/v1/installs", {
+            .then(async (customerId) => this.request("POST", "/v1/installs", {
             customerId,
             occurredAt: Date.now(),
             sdkVersion: SDK_VERSION,
             attributionToken: token.slice(0, 2048),
             ...this.installMetadata,
+            ...(await this.integrityFor(customerId)),
         }))
             .then((body) => {
             this.refreshAttribution();
@@ -1600,12 +1637,15 @@ export class RevnixClient {
     /** Fire-and-forget install report (REV-093). Never blocks startup and
      *  never throws — the backend absorbs retries idempotently per id. */
     reportInstall(customerId) {
-        void this.request("POST", "/v1/installs", {
+        const occurredAt = Date.now();
+        void this.integrityFor(customerId)
+            .then((integrity) => this.request("POST", "/v1/installs", {
             customerId,
-            occurredAt: Date.now(),
+            occurredAt,
             sdkVersion: SDK_VERSION,
             ...this.installMetadata,
-        })
+            ...integrity,
+        }))
             .then((body) => {
             if (!this.ephemeralAnonId)
                 this.refreshAttribution();
@@ -1613,6 +1653,34 @@ export class RevnixClient {
         })
             .catch((err) => this.diag("reportInstall", err));
     }
+    integrityFor(customerId) {
+        const source = this.deviceIntegrity;
+        if (!source)
+            return Promise.resolve({});
+        if (this.integrityRequest?.customerId !== customerId) {
+            let timer;
+            const timeout = new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new Error("device integrity timed out")), INTEGRITY_TIMEOUT_MS);
+            });
+            const body = Promise.race([
+                Promise.resolve().then(() => source(customerId)),
+                timeout,
+            ])
+                .then((evidence) => {
+                const integrity = wellFormedIntegrity(evidence);
+                if (!integrity)
+                    throw new Error("device integrity unavailable");
+                return { integrity };
+            })
+                .catch((err) => {
+                this.diag("deviceIntegrity", err);
+                return {};
+            })
+                .finally(() => clearTimeout(timer));
+            this.integrityRequest = { customerId, body };
+        }
+        return this.integrityRequest.body;
+    }
     /** REV-268: assemble and encode the device facts once. Runtime-detected
      *  facts first, the app's `device` over them, then the three the SDK owns.
      *  `installedAt` is the first launch this storage ever saw — written on

package/dist/esm/store/index.js

@@ -18,5 +18,12 @@ export const RevnixStore = native
         finish: missing,
         observe: () => () => { },
     };
+/** Pass as `deviceIntegrity` in the Revnix config: App Attest on iOS, Play
+ *  Integrity on Android, via the RevnixStore native module. Resolves null
+ *  where the device or build cannot produce evidence. */
+export const nativeDeviceIntegrity = (customerId) => native?.deviceIntegrity?.(customerId) ?? Promise.resolve(null);
+/** Pass as `advertisingId` in the Revnix config: the Google Advertising ID
+ *  on Android, via the RevnixStore native module. Resolves null on iOS. */
+export const nativeAdvertisingId = () => native?.advertisingId?.() ?? Promise.resolve(null);
 if (native)
     setStoreAdapter(RevnixStore);

package/dist/esm/ui/RevnixBlockPaywall.js

@@ -17,13 +17,13 @@
 // RevnixPaywall delegates here whenever a config carries `blocks`, so apps
 // get designed paywalls without changing a line of their integration.
 import * as React from "react";
-import { ActivityIndicator, Image, Linking, Platform, Pressable, ScrollView, StatusBar, Text, View, } from "react-native";
+import { ActivityIndicator, Image, Linking, Platform, Pressable, ScrollView, StatusBar, Switch, Text, View, } from "react-native";
 import { gradientFallbackColor, isGradient, parseGradient, resolveColor, surfaceSolid, withAlpha, } from "../blocks/color.js";
 import { DEFAULT_FONT_SIZE, hairlineColor, inherit, inheritedTextStyle, toTextStyle, toViewStyle, } from "../blocks/style.js";
 import { backgroundLayers, coverPlacement, } from "../blocks/background.js";
 import { detectLocale, linkLabels, localizeBlockDoc } from "../blocks/locale.js";
-import { resolveTags } from "../blocks/tags.js";
-import { canvasMetrics, effectiveStyle, isVisible, packageContext, selectedPackageId, } from "../blocks/selection.js";
+import { resolveTags, timerText } from "../blocks/tags.js";
+import { canvasMetrics, effectiveStyle, isVisible, packageContext, selectedPackageId, toggleSelection, } from "../blocks/selection.js";
 import { DESIGN_CANVAS, hasCloseAction, } from "../blocks/types.js";
 /** CSS angle (0 = up, 90 = right) → RN gradient start/end points. */
 function angleToPoints(angle) {
@@ -259,6 +259,56 @@ function BlockText({ text, style, ctx, inherited, onPress, }) {
     }
     return React.createElement(View, { style: toViewStyle(style, styleCtx) }, body);
 }
+function Timer({ block, style, ctx, inherited, }) {
+    const [now, setNow] = React.useState(Date.now);
+    React.useEffect(() => {
+        const id = setInterval(() => setNow(Date.now()), 1000);
+        return () => clearInterval(id);
+    }, []);
+    const text = timerText(block, ctx.shownAt, now);
+    if (text === null)
+        return null;
+    return React.createElement(BlockText, { text: text, style: style, ctx: ctx, inherited: inherited });
+}
+function Carousel({ pages, autoAdvance, doc, }) {
+    const scroller = React.useRef(null);
+    const [size, setSize] = React.useState({ width: 0, height: 0 });
+    const [page, setPage] = React.useState(0);
+    React.useEffect(() => {
+        if (!autoAdvance || size.width === 0 || pages.length < 2)
+            return;
+        const id = setInterval(() => {
+            scroller.current?.scrollTo({
+                x: ((page + 1) % pages.length) * size.width,
+                animated: true,
+            });
+        }, autoAdvance * 1000);
+        return () => clearInterval(id);
+    }, [autoAdvance, size.width, page, pages.length]);
+    return (React.createElement(View, { style: { flex: 1 }, onLayout: (e) => setSize({
+            width: e.nativeEvent.layout.width,
+            height: e.nativeEvent.layout.height,
+        }) },
+        React.createElement(ScrollView, { ref: scroller, horizontal: true, pagingEnabled: true, showsHorizontalScrollIndicator: false, scrollEventThrottle: 16, onScroll: (e) => {
+                if (size.width > 0) {
+                    setPage(Math.round(e.nativeEvent.contentOffset.x / size.width));
+                }
+            } }, pages.map((node, i) => (React.createElement(View, { key: i, style: size }, node)))),
+        pages.length > 1 ? (React.createElement(View, { pointerEvents: "none", style: {
+                position: "absolute",
+                bottom: 8,
+                left: 0,
+                right: 0,
+                flexDirection: "row",
+                justifyContent: "center",
+                gap: 6,
+            } }, pages.map((_, i) => (React.createElement(View, { key: i, style: {
+                width: 6,
+                height: 6,
+                borderRadius: 3,
+                backgroundColor: i === page ? doc.accent : withAlpha(doc.textColor, 0.3),
+            } }))))) : null));
+}
 /** The press handler for a block the design marks as the close, or undefined
  *  when it is not one (or the host wired no dismissal). One helper so text,
  *  image and button blocks cannot drift on what "action: close" means. */
@@ -363,6 +413,11 @@ function gridTracks(block) {
 }
 function Block({ block, ctx, pkg, inherited, selection, }) {
     const { doc } = ctx;
+    React.useEffect(() => {
+        if (block.type === "video") {
+            ctx.onDiagnostic?.("video drawn as its poster: no built-in player");
+        }
+    }, [block.type]);
     const styleCtx = { ...ctx.style, fontSize: inherited.fontSize };
     // A pinned card judges its own context; every other block inherits the
     // nearest plan card's. (A repeat card is judged per instance below.)
@@ -385,9 +440,27 @@ function Block({ block, ctx, pkg, inherited, selection, }) {
     switch (block.type) {
         case "text":
             return (React.createElement(BlockText, { text: resolveTags(block.text, pkg, ctx.packages), style: style, ctx: ctx, inherited: inherited, onPress: closePress(block, ctx) }));
-        case "image": {
-            const url = block.url || ctx.heroImageUrl;
-            const round = block.shape === "circle";
+        case "timer":
+            return React.createElement(Timer, { block: block, style: style, ctx: ctx, inherited: inherited });
+        case "toggle": {
+            const toggle = toggleSelection(block, ctx.packages, ctx.selectedId);
+            if (!toggle)
+                return null;
+            const flip = () => ctx.onSelect(toggle.target);
+            return (React.createElement(Pressable, { accessibilityRole: "switch", accessibilityState: { checked: toggle.on }, onPress: flip, style: [{ flexDirection: "row", alignItems: "center", gap: 12 }, view] },
+                React.createElement(BlockFill, { block: block, ctx: ctx }),
+                React.createElement(Text, { style: [
+                        { flex: 1 },
+                        inheritedTextStyle(text, ctx.style),
+                        textOnly(style, styleCtx),
+                    ] }, resolveTags(block.label, ctx.packages.find((p) => p.packageId === ctx.selectedId), ctx.packages)),
+                React.createElement(Switch, { value: toggle.on, onValueChange: flip, trackColor: { true: doc.accent } })));
+        }
+        case "image":
+        case "video": {
+            const image = block.type === "image";
+            const url = image ? block.url || ctx.heroImageUrl : block.poster;
+            const round = image && block.shape === "circle";
             const s = style;
             // A converted design sizes its own slot; the 160pt default is only for
             // a slot dropped into a flow column, and must not fight it.
@@ -400,7 +473,7 @@ function Block({ block, ctx, pkg, inherited, selection, }) {
             // An icon the design marks as the close (REV-252). Same rule as text:
             // the whole box is the target, and the style lands on the Pressable so
             // a pinned icon keeps its offsets.
-            const closeImage = closePress(block, ctx);
+            const closeImage = image ? closePress(block, ctx) : undefined;
             const ImageBox = closeImage ? Pressable : View;
             return (React.createElement(ImageBox, { accessibilityRole: closeImage ? "button" : undefined, accessibilityLabel: closeImage ? "Close" : undefined, hitSlop: closeImage ? 8 : undefined, onPress: closeImage, style: [
                     sized ? null : { height: 160 },
@@ -408,11 +481,11 @@ function Block({ block, ctx, pkg, inherited, selection, }) {
                     view,
                 ] },
                 React.createElement(BlockFill, { block: block, ctx: ctx }),
-                url ? (React.createElement(Image, { source: { uri: url }, resizeMode: block.fit ?? "cover", style: { width: "100%", height: "100%" } })) : (React.createElement(View, { style: {
+                url ? (React.createElement(Image, { source: { uri: url }, resizeMode: block.fit ?? "cover", style: { width: "100%", height: "100%" } })) : image ? (React.createElement(View, { style: {
                         width: "100%",
                         height: "100%",
                         backgroundColor: withAlpha("#7d879b", 0.2),
-                    } }))));
+                    } })) : null));
         }
         case "list":
             return (React.createElement(View, { style: [{ flexDirection: "column", gap: style?.gap ?? 8 }, view] },
@@ -521,20 +594,23 @@ function Block({ block, ctx, pkg, inherited, selection, }) {
             return (React.createElement(View, { style: [block.flex ? { flexGrow: 1 } : { height: 16 }, view] }));
         case "card": {
             const layout = block.layout ?? "column";
+            const carousel = layout === "carousel";
             const base = layout === "stack"
                 ? { position: "relative" }
-                : layout === "grid"
-                    ? {
-                        position: "relative",
-                        flexDirection: "row",
-                        flexWrap: "wrap",
-                        gap: style?.gap ?? 10,
-                    }
-                    : {
-                        position: "relative",
-                        flexDirection: layout === "row" ? "row" : "column",
-                        gap: style?.gap ?? 10,
-                    };
+                : carousel
+                    ? { position: "relative", overflow: "hidden" }
+                    : layout === "grid"
+                        ? {
+                            position: "relative",
+                            flexDirection: "row",
+                            flexWrap: "wrap",
+                            gap: style?.gap ?? 10,
+                        }
+                        : {
+                            position: "relative",
+                            flexDirection: layout === "row" ? "row" : "column",
+                            gap: style?.gap ?? 10,
+                        };
             const tracks = layout === "grid" ? gridTracks(block) : null;
             const renderChildren = (context, childSelection, childText = text) => block.children.map((child, i) => {
                 const node = (React.createElement(Block, { key: child.id, block: child, ctx: ctx, pkg: context, inherited: childText, selection: childSelection }));
@@ -578,6 +654,9 @@ function Block({ block, ctx, pkg, inherited, selection, }) {
                 base,
                 layout === "stack" ? null : { borderRadius: 16 },
                 view,
+                carousel
+                    ? { height: typeof style?.height === "number" ? style.height : 220 }
+                    : null,
             ];
             const cardPackage = block.packageIndex !== undefined
                 ? (ctx.packages[block.packageIndex] ?? pkg)
@@ -586,7 +665,7 @@ function Block({ block, ctx, pkg, inherited, selection, }) {
             // how hand-styled plan rows (a highlighted annual beside a plain
             // monthly) become tappable without a products block.
             const pinned = block.packageIndex !== undefined && cardPackage !== undefined;
-            return (React.createElement(CardBox, { style: boxStyle, fill: style?.fill, doc: doc, gradient: ctx.gradient, radius: style?.radius ?? (layout === "stack" ? undefined : 16), onPress: pinned ? () => ctx.onSelect(cardPackage.packageId) : undefined }, renderChildren(cardPackage, context)));
+            return (React.createElement(CardBox, { style: boxStyle, fill: style?.fill, doc: doc, gradient: ctx.gradient, radius: style?.radius ?? (layout === "stack" ? undefined : 16), onPress: pinned ? () => ctx.onSelect(cardPackage.packageId) : undefined }, carousel ? (React.createElement(Carousel, { pages: renderChildren(cardPackage, context), autoAdvance: block.autoAdvance, doc: doc })) : (renderChildren(cardPackage, context))));
         }
     }
 }
@@ -598,6 +677,7 @@ export function RevnixBlockPaywall(props) {
     // re-runs on every selection tap.
     const doc = React.useMemo(() => localizeBlockDoc(props.doc, props.locale ?? detectLocale()), [props.doc, props.locale]);
     const [internalSelected, setInternalSelected] = React.useState(undefined);
+    const [shownAt] = React.useState(Date.now);
     // Contract §1: host → own tap → design highlight → first package, each
     // only when the offering carries it.
     const selectedId = selectedPackageId(packages, props.selectedPackageId, internalSelected, props.highlightPackageId);
@@ -639,6 +719,7 @@ export function RevnixBlockPaywall(props) {
         onDiagnostic: props.onDiagnostic,
         style: styleCtx,
         loading: props.loading === true,
+        shownAt,
     };
     const children = doc.blocks.map((block) => (React.createElement(Block, { key: block.id, block: block, ctx: ctx, pkg: packages.find((p) => p.packageId === selectedId) ?? packages[0], inherited: rootText })));
     // REV-252: the renderer's own close, drawn only for a design that authors

package/dist/esm/version.js

@@ -1,4 +1,4 @@
 // L3: the single source of the SDK version inside src/. Must match
 // package.json "version" — version.test.ts fails the build when they drift
 // (they had: client.ts said 0.7.0 while the package shipped 0.9.0).
-export const SDK_VERSION = "1.6.0";
+export const SDK_VERSION = "1.7.0";

package/dist/index.d.ts

@@ -9,7 +9,7 @@ export { memoryStorage, generateAnonymousId } from "./storage.js";
 export { SDK_VERSION } from "./version.js";
 export { DEVICE_HEADER, encodeDeviceHeader } from "./device.js";
 export { browserLifecycle, DEFAULT_SESSION_TIMEOUT_MS, HOST_CALL_PLACEMENT, IMPLICIT_PLACEMENTS, PREVIEW_PLACEMENT_KEY, type ImplicitPlacement, type ImplicitSkipReason, type ImplicitTrigger, type ImplicitTriggerResponse, type RevnixLifecycle, } from "./implicit.js";
-export type { AdRevenue, AliasResult, CustomerEntitlements, DeviceFacts, Entitlement, EntitlementSource, Environment, IdentifyResult, IdentifyStrategy, IdentityInfo, ImplicitResolution, LastDeepLink, MmpAttribution, MmpProvider, PaywallConfig, PaywallInteraction, PaywallPurchaseOutcome, PlacementOffering, PlacementPackage, PlacementPaywall, PlacementProduct, PlacementResolution, RegisterPurchaseInput, RegisterPurchaseResult, RevnixAttribution, RevnixConfig, RevnixDiagnostic, RevnixStorage, Store, } from "./types.js";
+export type { AdRevenue, AliasResult, CustomerEntitlements, DeviceFacts, Entitlement, EntitlementSource, Environment, IdentifyResult, IdentifyStrategy, IdentityInfo, ImplicitResolution, IntegrityEvidence, LastDeepLink, MmpAttribution, MmpProvider, PaywallConfig, PaywallInteraction, PaywallPurchaseOutcome, PlacementOffering, PlacementPackage, PlacementPaywall, PlacementProduct, PlacementResolution, RegisterPurchaseInput, RegisterPurchaseResult, RevnixAttribution, RevnixConfig, RevnixDiagnostic, RevnixStorage, Store, } from "./types.js";
 /** Singleton facade — configure once at app start, then import `Revnix`
  *  anywhere. Prefer constructing RevnixClient directly in tests. */
 export declare const Revnix: {

package/dist/store/index.d.ts

@@ -1,2 +1,10 @@
 import { type StoreAdapter } from "../store.js";
+import type { RevnixConfig } from "../types.js";
 export declare const RevnixStore: StoreAdapter;
+/** Pass as `deviceIntegrity` in the Revnix config: App Attest on iOS, Play
+ *  Integrity on Android, via the RevnixStore native module. Resolves null
+ *  where the device or build cannot produce evidence. */
+export declare const nativeDeviceIntegrity: NonNullable<RevnixConfig["deviceIntegrity"]>;
+/** Pass as `advertisingId` in the Revnix config: the Google Advertising ID
+ *  on Android, via the RevnixStore native module. Resolves null on iOS. */
+export declare const nativeAdvertisingId: NonNullable<RevnixConfig["advertisingId"]>;

package/dist/store/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RevnixStore = void 0;
+exports.nativeAdvertisingId = exports.nativeDeviceIntegrity = exports.RevnixStore = void 0;
 const react_native_1 = require("react-native");
 const store_js_1 = require("../store.js");
 const native = react_native_1.NativeModules.RevnixStore;
@@ -21,5 +21,14 @@ exports.RevnixStore = native
         finish: missing,
         observe: () => () => { },
     };
+/** Pass as `deviceIntegrity` in the Revnix config: App Attest on iOS, Play
+ *  Integrity on Android, via the RevnixStore native module. Resolves null
+ *  where the device or build cannot produce evidence. */
+const nativeDeviceIntegrity = (customerId) => native?.deviceIntegrity?.(customerId) ?? Promise.resolve(null);
+exports.nativeDeviceIntegrity = nativeDeviceIntegrity;
+/** Pass as `advertisingId` in the Revnix config: the Google Advertising ID
+ *  on Android, via the RevnixStore native module. Resolves null on iOS. */
+const nativeAdvertisingId = () => native?.advertisingId?.() ?? Promise.resolve(null);
+exports.nativeAdvertisingId = nativeAdvertisingId;
 if (native)
     (0, store_js_1.setStoreAdapter)(exports.RevnixStore);

package/dist/types.d.ts

@@ -129,7 +129,39 @@ export interface RevnixConfig {
      *  Never throws into your app: an exception from this handler is reported
      *  through `onDiagnostic` and swallowed. */
     onAttribution?: (attribution: RevnixAttribution) => void;
+    /** Opt-in device integrity evidence (Apple App Attest / Google Play
+     *  Integrity) attached to every install report and `setAttribution` call.
+     *  Pair it with the dashboard's "Require device integrity" setting, which
+     *  strips attribution from installs that arrive without evidence. In React
+     *  Native pass `nativeDeviceIntegrity` from "react-native-revnix/store";
+     *  it needs iOS 14+ with App Attest, or Google Play services on Android.
+     *  Simulators and emulators return nothing.
+     *
+     *  Called at most once per customer id and bounded to 10s. A rejection,
+     *  timeout, or missing/malformed result sends the request without
+     *  evidence and reports `op: "deviceIntegrity"` through `onDiagnostic`. */
+    deviceIntegrity?: (customerId: string) => Promise<IntegrityEvidence | null | undefined>;
+    /** Google Advertising ID source, stored on the customer as `gps_adid` at
+     *  launch and resent only when it changes. In React Native pass
+     *  `nativeAdvertisingId` from "react-native-revnix/store"; it needs
+     *  `play-services-ads-identifier` and the `AD_ID` permission in the app and
+     *  answers null on iOS and on opt-out, and rejects when the id cannot be
+     *  read. A null answer deletes a previously stored `gps_adid`; a
+     *  rejection changes nothing and reports `op: "advertisingId"`. */
+    advertisingId?: () => Promise<string | null | undefined>;
 }
+/** Device integrity evidence for `POST /v1/installs` and `/v1/attribution`.
+ *  iOS: an App Attest key id and its attestation (standard base64) over
+ *  SHA-256 of the customer id. Android: a classic Play Integrity token whose
+ *  nonce is base64url (no padding) of SHA-256 of the customer id. */
+export type IntegrityEvidence = {
+    platform: "ios";
+    keyId: string;
+    attestation: string;
+} | {
+    platform: "android";
+    token: string;
+};
 /** AT11: the install-attribution verdict — GET
  *  /v1/customers/{id}/attribution. `installMatch: "unknown"` (no install
  *  recorded yet, a normal cold-start race) is never sent to hosts as such;