react-native-revnix 1.6.0 → 1.7.0

package/dist/ui/RevnixBlockPaywall.js

@@ -295,6 +295,56 @@ function BlockText({ text, style, ctx, inherited, onPress, }) {
     }
     return React.createElement(react_native_1.View, { style: (0, style_js_1.toViewStyle)(style, styleCtx) }, body);
 }
+function Timer({ block, style, ctx, inherited, }) {
+    const [now, setNow] = React.useState(Date.now);
+    React.useEffect(() => {
+        const id = setInterval(() => setNow(Date.now()), 1000);
+        return () => clearInterval(id);
+    }, []);
+    const text = (0, tags_js_1.timerText)(block, ctx.shownAt, now);
+    if (text === null)
+        return null;
+    return React.createElement(BlockText, { text: text, style: style, ctx: ctx, inherited: inherited });
+}
+function Carousel({ pages, autoAdvance, doc, }) {
+    const scroller = React.useRef(null);
+    const [size, setSize] = React.useState({ width: 0, height: 0 });
+    const [page, setPage] = React.useState(0);
+    React.useEffect(() => {
+        if (!autoAdvance || size.width === 0 || pages.length < 2)
+            return;
+        const id = setInterval(() => {
+            scroller.current?.scrollTo({
+                x: ((page + 1) % pages.length) * size.width,
+                animated: true,
+            });
+        }, autoAdvance * 1000);
+        return () => clearInterval(id);
+    }, [autoAdvance, size.width, page, pages.length]);
+    return (React.createElement(react_native_1.View, { style: { flex: 1 }, onLayout: (e) => setSize({
+            width: e.nativeEvent.layout.width,
+            height: e.nativeEvent.layout.height,
+        }) },
+        React.createElement(react_native_1.ScrollView, { ref: scroller, horizontal: true, pagingEnabled: true, showsHorizontalScrollIndicator: false, scrollEventThrottle: 16, onScroll: (e) => {
+                if (size.width > 0) {
+                    setPage(Math.round(e.nativeEvent.contentOffset.x / size.width));
+                }
+            } }, pages.map((node, i) => (React.createElement(react_native_1.View, { key: i, style: size }, node)))),
+        pages.length > 1 ? (React.createElement(react_native_1.View, { pointerEvents: "none", style: {
+                position: "absolute",
+                bottom: 8,
+                left: 0,
+                right: 0,
+                flexDirection: "row",
+                justifyContent: "center",
+                gap: 6,
+            } }, pages.map((_, i) => (React.createElement(react_native_1.View, { key: i, style: {
+                width: 6,
+                height: 6,
+                borderRadius: 3,
+                backgroundColor: i === page ? doc.accent : (0, color_js_1.withAlpha)(doc.textColor, 0.3),
+            } }))))) : null));
+}
 /** The press handler for a block the design marks as the close, or undefined
  *  when it is not one (or the host wired no dismissal). One helper so text,
  *  image and button blocks cannot drift on what "action: close" means. */
@@ -399,6 +449,11 @@ function gridTracks(block) {
 }
 function Block({ block, ctx, pkg, inherited, selection, }) {
     const { doc } = ctx;
+    React.useEffect(() => {
+        if (block.type === "video") {
+            ctx.onDiagnostic?.("video drawn as its poster: no built-in player");
+        }
+    }, [block.type]);
     const styleCtx = { ...ctx.style, fontSize: inherited.fontSize };
     // A pinned card judges its own context; every other block inherits the
     // nearest plan card's. (A repeat card is judged per instance below.)
@@ -421,9 +476,27 @@ function Block({ block, ctx, pkg, inherited, selection, }) {
     switch (block.type) {
         case "text":
             return (React.createElement(BlockText, { text: (0, tags_js_1.resolveTags)(block.text, pkg, ctx.packages), style: style, ctx: ctx, inherited: inherited, onPress: closePress(block, ctx) }));
-        case "image": {
-            const url = block.url || ctx.heroImageUrl;
-            const round = block.shape === "circle";
+        case "timer":
+            return React.createElement(Timer, { block: block, style: style, ctx: ctx, inherited: inherited });
+        case "toggle": {
+            const toggle = (0, selection_js_1.toggleSelection)(block, ctx.packages, ctx.selectedId);
+            if (!toggle)
+                return null;
+            const flip = () => ctx.onSelect(toggle.target);
+            return (React.createElement(react_native_1.Pressable, { accessibilityRole: "switch", accessibilityState: { checked: toggle.on }, onPress: flip, style: [{ flexDirection: "row", alignItems: "center", gap: 12 }, view] },
+                React.createElement(BlockFill, { block: block, ctx: ctx }),
+                React.createElement(react_native_1.Text, { style: [
+                        { flex: 1 },
+                        (0, style_js_1.inheritedTextStyle)(text, ctx.style),
+                        textOnly(style, styleCtx),
+                    ] }, (0, tags_js_1.resolveTags)(block.label, ctx.packages.find((p) => p.packageId === ctx.selectedId), ctx.packages)),
+                React.createElement(react_native_1.Switch, { value: toggle.on, onValueChange: flip, trackColor: { true: doc.accent } })));
+        }
+        case "image":
+        case "video": {
+            const image = block.type === "image";
+            const url = image ? block.url || ctx.heroImageUrl : block.poster;
+            const round = image && block.shape === "circle";
             const s = style;
             // A converted design sizes its own slot; the 160pt default is only for
             // a slot dropped into a flow column, and must not fight it.
@@ -436,7 +509,7 @@ function Block({ block, ctx, pkg, inherited, selection, }) {
             // An icon the design marks as the close (REV-252). Same rule as text:
             // the whole box is the target, and the style lands on the Pressable so
             // a pinned icon keeps its offsets.
-            const closeImage = closePress(block, ctx);
+            const closeImage = image ? closePress(block, ctx) : undefined;
             const ImageBox = closeImage ? react_native_1.Pressable : react_native_1.View;
             return (React.createElement(ImageBox, { accessibilityRole: closeImage ? "button" : undefined, accessibilityLabel: closeImage ? "Close" : undefined, hitSlop: closeImage ? 8 : undefined, onPress: closeImage, style: [
                     sized ? null : { height: 160 },
@@ -444,11 +517,11 @@ function Block({ block, ctx, pkg, inherited, selection, }) {
                     view,
                 ] },
                 React.createElement(BlockFill, { block: block, ctx: ctx }),
-                url ? (React.createElement(react_native_1.Image, { source: { uri: url }, resizeMode: block.fit ?? "cover", style: { width: "100%", height: "100%" } })) : (React.createElement(react_native_1.View, { style: {
+                url ? (React.createElement(react_native_1.Image, { source: { uri: url }, resizeMode: block.fit ?? "cover", style: { width: "100%", height: "100%" } })) : image ? (React.createElement(react_native_1.View, { style: {
                         width: "100%",
                         height: "100%",
                         backgroundColor: (0, color_js_1.withAlpha)("#7d879b", 0.2),
-                    } }))));
+                    } })) : null));
         }
         case "list":
             return (React.createElement(react_native_1.View, { style: [{ flexDirection: "column", gap: style?.gap ?? 8 }, view] },
@@ -557,20 +630,23 @@ function Block({ block, ctx, pkg, inherited, selection, }) {
             return (React.createElement(react_native_1.View, { style: [block.flex ? { flexGrow: 1 } : { height: 16 }, view] }));
         case "card": {
             const layout = block.layout ?? "column";
+            const carousel = layout === "carousel";
             const base = layout === "stack"
                 ? { position: "relative" }
-                : layout === "grid"
-                    ? {
-                        position: "relative",
-                        flexDirection: "row",
-                        flexWrap: "wrap",
-                        gap: style?.gap ?? 10,
-                    }
-                    : {
-                        position: "relative",
-                        flexDirection: layout === "row" ? "row" : "column",
-                        gap: style?.gap ?? 10,
-                    };
+                : carousel
+                    ? { position: "relative", overflow: "hidden" }
+                    : layout === "grid"
+                        ? {
+                            position: "relative",
+                            flexDirection: "row",
+                            flexWrap: "wrap",
+                            gap: style?.gap ?? 10,
+                        }
+                        : {
+                            position: "relative",
+                            flexDirection: layout === "row" ? "row" : "column",
+                            gap: style?.gap ?? 10,
+                        };
             const tracks = layout === "grid" ? gridTracks(block) : null;
             const renderChildren = (context, childSelection, childText = text) => block.children.map((child, i) => {
                 const node = (React.createElement(Block, { key: child.id, block: child, ctx: ctx, pkg: context, inherited: childText, selection: childSelection }));
@@ -614,6 +690,9 @@ function Block({ block, ctx, pkg, inherited, selection, }) {
                 base,
                 layout === "stack" ? null : { borderRadius: 16 },
                 view,
+                carousel
+                    ? { height: typeof style?.height === "number" ? style.height : 220 }
+                    : null,
             ];
             const cardPackage = block.packageIndex !== undefined
                 ? (ctx.packages[block.packageIndex] ?? pkg)
@@ -622,7 +701,7 @@ function Block({ block, ctx, pkg, inherited, selection, }) {
             // how hand-styled plan rows (a highlighted annual beside a plain
             // monthly) become tappable without a products block.
             const pinned = block.packageIndex !== undefined && cardPackage !== undefined;
-            return (React.createElement(CardBox, { style: boxStyle, fill: style?.fill, doc: doc, gradient: ctx.gradient, radius: style?.radius ?? (layout === "stack" ? undefined : 16), onPress: pinned ? () => ctx.onSelect(cardPackage.packageId) : undefined }, renderChildren(cardPackage, context)));
+            return (React.createElement(CardBox, { style: boxStyle, fill: style?.fill, doc: doc, gradient: ctx.gradient, radius: style?.radius ?? (layout === "stack" ? undefined : 16), onPress: pinned ? () => ctx.onSelect(cardPackage.packageId) : undefined }, carousel ? (React.createElement(Carousel, { pages: renderChildren(cardPackage, context), autoAdvance: block.autoAdvance, doc: doc })) : (renderChildren(cardPackage, context))));
         }
     }
 }
@@ -634,6 +713,7 @@ function RevnixBlockPaywall(props) {
     // re-runs on every selection tap.
     const doc = React.useMemo(() => (0, locale_js_1.localizeBlockDoc)(props.doc, props.locale ?? (0, locale_js_1.detectLocale)()), [props.doc, props.locale]);
     const [internalSelected, setInternalSelected] = React.useState(undefined);
+    const [shownAt] = React.useState(Date.now);
     // Contract §1: host → own tap → design highlight → first package, each
     // only when the offering carries it.
     const selectedId = (0, selection_js_1.selectedPackageId)(packages, props.selectedPackageId, internalSelected, props.highlightPackageId);
@@ -675,6 +755,7 @@ function RevnixBlockPaywall(props) {
         onDiagnostic: props.onDiagnostic,
         style: styleCtx,
         loading: props.loading === true,
+        shownAt,
     };
     const children = doc.blocks.map((block) => (React.createElement(Block, { key: block.id, block: block, ctx: ctx, pkg: packages.find((p) => p.packageId === selectedId) ?? packages[0], inherited: rootText })));
     // REV-252: the renderer's own close, drawn only for a design that authors

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "1.6.0";
+export declare const SDK_VERSION = "1.7.0";

package/dist/version.js

@@ -4,4 +4,4 @@ exports.SDK_VERSION = void 0;
 // L3: the single source of the SDK version inside src/. Must match
 // package.json "version" — version.test.ts fails the build when they drift
 // (they had: client.ts said 0.7.0 while the package shipped 0.9.0).
-exports.SDK_VERSION = "1.6.0";
+exports.SDK_VERSION = "1.7.0";

package/ios/RevnixStore.m

@@ -15,4 +15,8 @@ RCT_EXTERN_METHOD(finish:(NSString *)transactionId
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
+RCT_EXTERN_METHOD(deviceIntegrity:(NSString *)customerId
+                  resolver:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
 @end

package/ios/RevnixStore.swift

@@ -1,3 +1,5 @@
+import CryptoKit
+import DeviceCheck
 import Foundation
 import React
 import StoreKit
@@ -88,6 +90,33 @@ class RevnixStore: RCTEventEmitter {
     }
   }
 
+  @objc(deviceIntegrity:resolver:rejecter:)
+  func deviceIntegrity(
+    _ customerId: String,
+    resolver resolve: @escaping RCTPromiseResolveBlock,
+    rejecter reject: @escaping RCTPromiseRejectBlock
+  ) {
+    let service = DCAppAttestService.shared
+    guard service.isSupported else {
+      resolve(nil)
+      return
+    }
+    Task {
+      do {
+        let keyId = try await service.generateKey()
+        let clientDataHash = Data(SHA256.hash(data: Data(customerId.utf8)))
+        let attestation = try await service.attestKey(keyId, clientDataHash: clientDataHash)
+        resolve([
+          "platform": "ios",
+          "keyId": keyId,
+          "attestation": attestation.base64EncodedString(),
+        ])
+      } catch {
+        resolve(nil)
+      }
+    }
+  }
+
   private static func payload(_ verification: VerificationResult<Transaction>) -> [String: Any] {
     let transaction = verification.unsafePayloadValue
     var payload: [String: Any] = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-revnix",
-  "version": "1.6.0",
+  "version": "1.7.0",
   "description": "Revnix SDK for React, React Native & Next.js: purchase registration, entitlements, identity, and placements over the Revnix /v1 API.",
   "license": "MIT",
   "repository": {

package/src/blocks/locale.ts

@@ -125,7 +125,14 @@ function localizeBlock(
     case "text":
       return { ...block, text: at("text", block.text) };
     case "button":
+    case "toggle":
       return { ...block, label: at("label", block.label) };
+    case "timer":
+      return {
+        ...block,
+        format: opt("format", block.format),
+        expiredText: opt("expiredText", block.expiredText),
+      };
     case "list":
       return {
         ...block,

package/src/blocks/selection.ts

@@ -11,6 +11,7 @@ import type {
   CardBlock,
   PaywallBlock,
   PaywallBlockDoc,
+  ToggleBlock,
 } from "./types.js";
 import { DESIGN_CANVAS } from "./types.js";
 import { resolveTags } from "./tags.js";
@@ -33,6 +34,18 @@ export function selectedPackageId(
   return packages[0]?.packageId;
 }
 
+export function toggleSelection(
+  block: ToggleBlock,
+  packages: ReadonlyArray<{ packageId: string }>,
+  selectedId: string | undefined
+): { on: boolean; target: string } | null {
+  const on = packages[block.onPackageIndex];
+  const off = packages[block.offPackageIndex];
+  if (on === undefined || off === undefined) return null;
+  const isOn = on.packageId === selectedId;
+  return { on: isOn, target: (isOn ? off : on).packageId };
+}
+
 /** The context a package-bearing card opens for itself and its subtree. */
 export function packageContext(
   pkg: { packageId: string } | undefined,

package/src/blocks/tags.ts

@@ -11,6 +11,7 @@
 // approximated — a wrong price must never reach a customer silently.
 
 import type { RevnixPaywallPackage } from "../ui/RevnixPaywall.js";
+import type { TimerBlock } from "./types.js";
 
 /** Renewal cycles, in months. Lifetime and one-time products have no cycle. */
 const MONTHS: Record<string, number | undefined> = {
@@ -123,3 +124,40 @@ export function resolveTags(
     }
   });
 }
+
+export function formatCountdown(format: string, remaining: number): string {
+  const pad = (n: number) => String(n).padStart(2, "0");
+  let span = Infinity;
+  const part = (token: string, unit: number) => {
+    const value = Math.floor((remaining % span) / unit);
+    if (format.includes(token)) span = unit;
+    return value;
+  };
+  const days = part("{d}", 86400);
+  const hours = part("{hh}", 3600);
+  const minutes = part("{mm}", 60);
+  const seconds = part("{ss}", 1);
+  return format
+    .replace(/\{d\}/g, String(days))
+    .replace(/\{hh\}/g, pad(hours))
+    .replace(/\{mm\}/g, pad(minutes))
+    .replace(/\{ss\}/g, pad(seconds));
+}
+
+export function timerText(
+  block: TimerBlock,
+  shownAt: number,
+  now: number,
+): string | null {
+  const deadline =
+    block.endsAt !== undefined
+      ? Date.parse(block.endsAt)
+      : shownAt + (block.duration ?? 0) * 1000;
+  const remaining = Number.isNaN(deadline)
+    ? 0
+    : Math.max(0, Math.floor((deadline - now) / 1000));
+  if (remaining > 0) {
+    return formatCountdown(block.format ?? "{hh}:{mm}:{ss}", remaining);
+  }
+  return block.expiredText ?? null;
+}

package/src/blocks/types.ts

@@ -257,13 +257,58 @@ export interface SpacerBlock {
   visibility?: BlockVisibility;
 }
 
+/** Countdown text. `endsAt` is one deadline for everyone; `duration` counts
+ *  from the moment this paywall view opened. At zero it draws `expiredText`,
+ *  or nothing when that is absent. Tokens in `format`: {d} {hh} {mm} {ss}. */
+export interface TimerBlock {
+  id: string;
+  type: "timer";
+  endsAt?: string;
+  duration?: number;
+  format?: string;
+  expiredText?: string;
+  style?: BlockStyle;
+  selectedStyle?: BlockStyle;
+  visibility?: BlockVisibility;
+}
+
+/** A muted looping clip. React Native has no built-in player, so this SDK
+ *  draws `poster` in its place, sized like an image block. */
+export interface VideoBlock {
+  id: string;
+  type: "video";
+  url: string;
+  poster?: string;
+  fit?: "cover" | "contain";
+  style?: BlockStyle;
+  selectedStyle?: BlockStyle;
+  visibility?: BlockVisibility;
+}
+
+/** The free-trial switch: ON while package `onPackageIndex` is selected, and
+ *  tapping it selects the other one. Hidden when the offering lacks either
+ *  index. */
+export interface ToggleBlock {
+  id: string;
+  type: "toggle";
+  label: string;
+  onPackageIndex: number;
+  offPackageIndex: number;
+  style?: BlockStyle;
+  selectedStyle?: BlockStyle;
+  visibility?: BlockVisibility;
+}
+
 /** The one container block. `layout` picks how children are placed: column /
  *  row are flex lines, `stack` layers them (children position with
- *  style.inset or the edge offsets), and `grid` is an N-column grid. */
+ *  style.inset or the edge offsets), `grid` is an N-column grid, and
+ *  `carousel` pages through its children one swipe at a time. */
 export interface CardBlock {
   id: string;
   type: "card";
-  layout?: "column" | "row" | "stack" | "grid";
+  layout?: "column" | "row" | "stack" | "grid" | "carousel";
+  /** carousel only: seconds per page before it moves on by itself. */
+  autoAdvance?: number;
   /** Renders this container once per package in the attached offering. Its
    *  subtree reads the package through tag variables. */
   repeat?: "packages";
@@ -292,6 +337,9 @@ export type PaywallBlock =
   | LinksBlock
   | LineBlock
   | SpacerBlock
+  | TimerBlock
+  | VideoBlock
+  | ToggleBlock
   | CardBlock;
 
 /** The published document: screen palette plus the block tree. */
@@ -345,6 +393,7 @@ export function hasCloseAction(blocks: PaywallBlock[]): boolean {
       : b.type === "card"
         ? b.repeat === undefined &&
           b.packageIndex === undefined &&
+          b.layout !== "carousel" &&
           hasCloseAction(b.children)
         : (b.type === "text" || b.type === "image" || b.type === "button") &&
           b.action === "close"

package/src/client.ts

@@ -45,6 +45,7 @@ import type {
   IdentifyResult,
   IdentifyStrategy,
   IdentityInfo,
+  IntegrityEvidence,
   LastDeepLink,
   MmpAttribution,
   PaywallInteraction,
@@ -67,9 +68,11 @@ const PENDING_PURCHASES_KEY = "revnix.pendingPurchases";
 const PLACEMENTS_CACHE_KEY = "revnix.placements";
 const LAST_ATTRIBUTION_KEY = "revnix.lastAttribution";
 const LAST_PUSH_TOKEN_KEY = "revnix.lastPushToken";
+const LAST_AD_ID_KEY = "revnix.lastAdId";
 const EVENT_QUEUE_KEY = "revnix.eventQueue";
 const PLACEMENTS_INVALIDATED_AT_KEY = "revnix.placementsInvalidatedAt";
 const DEFAULT_TIMEOUT_MS = 10_000;
+const INTEGRITY_TIMEOUT_MS = 10_000;
 const EVENT_QUEUE_CAP = 1000;
 const EVENT_BATCH_SIZE = 100;
 const EVENT_FLUSH_THRESHOLD = 20;
@@ -200,6 +203,21 @@ const jittered = (ms: number) => ms * (0.8 + Math.random() * 0.4);
 // half a minute; long enough that gating five screens costs one request.
 const DEFAULT_ENTITLEMENTS_TTL_MS = 30_000;
 
+const fitsWithin = (value: unknown, max: number): value is string =>
+  typeof value === "string" && value.length > 0 && value.length <= max;
+
+function wellFormedIntegrity(evidence: unknown): IntegrityEvidence | undefined {
+  if (typeof evidence !== "object" || evidence === null) return undefined;
+  const { platform, keyId, attestation, token } = evidence as Record<string, unknown>;
+  if (platform === "ios" && fitsWithin(keyId, 128) && fitsWithin(attestation, 16_384)) {
+    return { platform, keyId, attestation };
+  }
+  if (platform === "android" && fitsWithin(token, 16_384)) {
+    return { platform, token };
+  }
+  return undefined;
+}
+
 export class RevnixClient {
   private readonly apiKey: string;
   private readonly baseUrl: string;
@@ -244,6 +262,11 @@ export class RevnixClient {
   private readonly onImplicitPaywall?: RevnixConfig["onImplicitPaywall"];
   private readonly onDeferredDeepLink?: RevnixConfig["onDeferredDeepLink"];
   private readonly onAttribution?: RevnixConfig["onAttribution"];
+  private readonly deviceIntegrity?: RevnixConfig["deviceIntegrity"];
+  private integrityRequest: {
+    customerId: string;
+    body: Promise<{ integrity?: IntegrityEvidence }>;
+  } | null = null;
   private deferredDeepLinkClaimed = false;
   private landingUrl: string | null = null;
   private lastDeepLinkWrite: Promise<void> = Promise.resolve();
@@ -316,6 +339,7 @@ export class RevnixClient {
     this.onDiagnostic = config.onDiagnostic;
     this.onDeferredDeepLink = config.onDeferredDeepLink;
     this.onAttribution = config.onAttribution;
+    this.deviceIntegrity = config.deviceIntegrity;
     this.readYourWritesDelaysMs =
       config.readYourWritesDelaysMs ?? [250, 500, 1000, 2000];
     this.customerIdPromise = this.loadCustomerId(config.customerId);
@@ -324,6 +348,7 @@ export class RevnixClient {
     void this.retryPendingPurchases().catch((err) =>
       this.diag("retryPendingPurchases", err)
     );
+    if (config.advertisingId) this.reportAdvertisingId(config.advertisingId);
     const store = getStoreAdapter();
     if (store) {
       this.stopStoreObserver = store.observe((tx) =>
@@ -1247,6 +1272,7 @@ export class RevnixClient {
           ...(attribution.campaign ? { campaign: attribution.campaign } : {}),
           ...(attribution.adGroup ? { adGroup: attribution.adGroup } : {}),
           ...(attribution.creative ? { creative: attribution.creative } : {}),
+          ...(await this.integrityFor(customerId)),
         });
         await this.storage.setItem(LAST_ATTRIBUTION_KEY, payload);
       })
@@ -1283,6 +1309,23 @@ export class RevnixClient {
       .catch((err) => this.diag("setPushToken", err));
   }
 
+  private reportAdvertisingId(
+    source: NonNullable<RevnixConfig["advertisingId"]>
+  ): void {
+    void Promise.resolve()
+      .then(source)
+      .then(async (value) => {
+        const id = value || null;
+        const customerId = await this.customerIdPromise;
+        const payload = JSON.stringify({ customerId, id });
+        const last = await this.storage.getItem(LAST_AD_ID_KEY);
+        if (last === payload || (id === null && last === null)) return;
+        await this.setAttributes({ gps_adid: id });
+        await this.storage.setItem(LAST_AD_ID_KEY, payload);
+      })
+      .catch((err) => this.diag("advertisingId", err));
+  }
+
   /** REV-272: the two moments that happen ON a paywall, with the loop guard
    *  applied. `fromPaywallId` travels so the server can refuse to hand back
    *  the very paywall being dismissed — the backstop for a host that reports
@@ -1519,13 +1562,14 @@ export class RevnixClient {
     // one-launch phantoms. Same guard, same reason, as triggerImplicit.
     if (this.ephemeralAnonId) return;
     void this.customerIdPromise
-      .then((customerId) =>
+      .then(async (customerId) =>
         this.request<InstallResponse>("POST", "/v1/installs", {
           customerId,
           occurredAt: Date.now(),
           sdkVersion: SDK_VERSION,
           installReferrer: referrer.slice(0, 1024),
           ...this.installMetadata,
+          ...(await this.integrityFor(customerId)),
         })
       )
       .then((body) => {
@@ -1560,13 +1604,14 @@ export class RevnixClient {
     if (this.disposed || token.trim().length === 0) return Promise.resolve(undefined);
     if (this.ephemeralAnonId) return Promise.resolve(undefined);
     return this.customerIdPromise
-      .then((customerId) =>
+      .then(async (customerId) =>
         this.request<InstallResponse>("POST", "/v1/installs", {
           customerId,
           occurredAt: Date.now(),
           sdkVersion: SDK_VERSION,
           attributionToken: token.slice(0, 2048),
           ...this.installMetadata,
+          ...(await this.integrityFor(customerId)),
         })
       )
       .then((body) => {
@@ -1921,12 +1966,17 @@ export class RevnixClient {
   /** Fire-and-forget install report (REV-093). Never blocks startup and
    *  never throws — the backend absorbs retries idempotently per id. */
   private reportInstall(customerId: string): void {
-    void this.request<InstallResponse>("POST", "/v1/installs", {
-      customerId,
-      occurredAt: Date.now(),
-      sdkVersion: SDK_VERSION,
-      ...this.installMetadata,
-    })
+    const occurredAt = Date.now();
+    void this.integrityFor(customerId)
+      .then((integrity) =>
+        this.request<InstallResponse>("POST", "/v1/installs", {
+          customerId,
+          occurredAt,
+          sdkVersion: SDK_VERSION,
+          ...this.installMetadata,
+          ...integrity,
+        })
+      )
       .then((body) => {
         if (!this.ephemeralAnonId) this.refreshAttribution();
         return this.deliverDeferredDeepLink(body.deferredDeepLink);
@@ -1934,6 +1984,38 @@ export class RevnixClient {
       .catch((err) => this.diag("reportInstall", err));
   }
 
+  private integrityFor(
+    customerId: string
+  ): Promise<{ integrity?: IntegrityEvidence }> {
+    const source = this.deviceIntegrity;
+    if (!source) return Promise.resolve({});
+    if (this.integrityRequest?.customerId !== customerId) {
+      let timer: ReturnType<typeof setTimeout> | undefined;
+      const timeout = new Promise<never>((_, reject) => {
+        timer = setTimeout(
+          () => reject(new Error("device integrity timed out")),
+          INTEGRITY_TIMEOUT_MS
+        );
+      });
+      const body = Promise.race([
+        Promise.resolve().then(() => source(customerId)),
+        timeout,
+      ])
+        .then((evidence) => {
+          const integrity = wellFormedIntegrity(evidence);
+          if (!integrity) throw new Error("device integrity unavailable");
+          return { integrity };
+        })
+        .catch((err: unknown) => {
+          this.diag("deviceIntegrity", err);
+          return {};
+        })
+        .finally(() => clearTimeout(timer));
+      this.integrityRequest = { customerId, body };
+    }
+    return this.integrityRequest.body;
+  }
+
   /** REV-268: assemble and encode the device facts once. Runtime-detected
    *  facts first, the app's `device` over them, then the three the SDK owns.
    *  `installedAt` is the first launch this storage ever saw — written on

package/src/index.ts

@@ -44,6 +44,7 @@ export type {
   IdentifyStrategy,
   IdentityInfo,
   ImplicitResolution,
+  IntegrityEvidence,
   LastDeepLink,
   MmpAttribution,
   MmpProvider,

package/src/store/index.ts

@@ -5,11 +5,14 @@ import {
   type StoreAdapter,
   type StoreTransaction,
 } from "../store.js";
+import type { IntegrityEvidence, RevnixConfig } from "../types.js";
 
 interface NativeRevnixStore {
   purchase(productId: string, customerId: string): Promise<StoreTransaction | null>;
   restore(): Promise<StoreTransaction[]>;
   finish(transactionId: string): Promise<void>;
+  deviceIntegrity?(customerId: string): Promise<IntegrityEvidence | null>;
+  advertisingId?(): Promise<string | null>;
 }
 
 const native: NativeRevnixStore | undefined = NativeModules.RevnixStore;
@@ -41,4 +44,16 @@ export const RevnixStore: StoreAdapter = native
       observe: () => () => {},
     };
 
+/** Pass as `deviceIntegrity` in the Revnix config: App Attest on iOS, Play
+ *  Integrity on Android, via the RevnixStore native module. Resolves null
+ *  where the device or build cannot produce evidence. */
+export const nativeDeviceIntegrity: NonNullable<RevnixConfig["deviceIntegrity"]> = (
+  customerId
+) => native?.deviceIntegrity?.(customerId) ?? Promise.resolve(null);
+
+/** Pass as `advertisingId` in the Revnix config: the Google Advertising ID
+ *  on Android, via the RevnixStore native module. Resolves null on iOS. */
+export const nativeAdvertisingId: NonNullable<RevnixConfig["advertisingId"]> = () =>
+  native?.advertisingId?.() ?? Promise.resolve(null);
+
 if (native) setStoreAdapter(RevnixStore);