react-native-revnix 1.6.0 → 1.8.0

package/README.md

@@ -145,6 +145,22 @@ Learn more in [A/B tests](https://www.revnix.io/docs/ab-tests).
 - **MMP forwarding** to AppsFlyer and Adjust, **ad revenue** logging and **uninstall measurement**. See [MMP attribution](https://www.revnix.io/docs/mmp-attribution), [Ad revenue](https://www.revnix.io/docs/ad-revenue) and [Uninstall measurement](https://www.revnix.io/docs/uninstall-measurement).
 - **Fraud prevention**: anonymous-IP and click-injection checks keep paid channels honest. See [Fraud prevention](https://www.revnix.io/docs/fraud-prevention).
 
+### Device integrity
+
+Pass `nativeDeviceIntegrity` so install reports carry Apple App Attest or Google Play Integrity evidence. With "Require device integrity" on in the dashboard, installs without it lose their attribution.
+
+```ts
+import { nativeDeviceIntegrity } from "react-native-revnix/store";
+
+Revnix.configure({
+  apiKey: "rvx_pk_live_…",
+  baseUrl: "https://<your-deployment>.convex.site",
+  deviceIntegrity: nativeDeviceIntegrity,
+});
+```
+
+It runs once per customer, waits at most 10 seconds and never blocks the report. Needs App Attest on iOS or Google Play services on Android; simulators and emulators send no evidence.
+
 ## Real-time analytics for your React Native app
 
 ![Revnix overview: active subscriptions, revenue and MRR over 90 days](https://www.revnix.io/sdk/react-native/analytics.png)

package/android/build.gradle

@@ -11,6 +11,7 @@ android {
 
   defaultConfig {
     minSdkVersion safeExtGet("minSdkVersion", 24)
+    consumerProguardFiles "consumer-rules.pro"
   }
 
   compileOptions {
@@ -31,4 +32,6 @@ repositories {
 dependencies {
   implementation "com.facebook.react:react-native:+"
   implementation "com.android.billingclient:billing:8.3.0"
+  implementation "com.google.android.play:integrity:1.6.0"
+  compileOnly "com.google.android.gms:play-services-ads-identifier:18.2.0"
 }

package/android/consumer-rules.pro

@@ -0,0 +1 @@
+-dontwarn com.google.android.gms.ads.identifier.**

package/android/src/main/kotlin/com/revnix/reactnative/RevnixStoreModule.kt

@@ -1,5 +1,6 @@
 package com.revnix.reactnative
 
+import android.util.Base64
 import android.util.Log
 import com.android.billingclient.api.AcknowledgePurchaseParams
 import com.android.billingclient.api.BillingClient
@@ -21,6 +22,10 @@ import com.facebook.react.bridge.ReactContextBaseJavaModule
 import com.facebook.react.bridge.ReactMethod
 import com.facebook.react.bridge.WritableMap
 import com.facebook.react.modules.core.DeviceEventManagerModule
+import com.google.android.gms.ads.identifier.AdvertisingIdClient
+import com.google.android.play.core.integrity.IntegrityManagerFactory
+import com.google.android.play.core.integrity.IntegrityTokenRequest
+import java.security.MessageDigest
 import java.util.concurrent.ConcurrentHashMap
 import java.util.concurrent.atomic.AtomicReference
 
@@ -115,6 +120,44 @@ class RevnixStoreModule(context: ReactApplicationContext) :
     }
   }
 
+  @ReactMethod
+  fun deviceIntegrity(customerId: String, promise: Promise) {
+    val nonce = Base64.encodeToString(
+      MessageDigest.getInstance("SHA-256").digest(customerId.toByteArray(Charsets.UTF_8)),
+      Base64.URL_SAFE or Base64.NO_PADDING or Base64.NO_WRAP,
+    )
+    try {
+      IntegrityManagerFactory.create(reactApplicationContext.applicationContext)
+        .requestIntegrityToken(IntegrityTokenRequest.builder().setNonce(nonce).build())
+        .addOnSuccessListener { response ->
+          promise.resolve(
+            Arguments.createMap().apply {
+              putString("platform", "android")
+              putString("token", response.token())
+            },
+          )
+        }
+        .addOnFailureListener { promise.resolve(null) }
+        .addOnCanceledListener { promise.resolve(null) }
+    } catch (err: Exception) {
+      promise.resolve(null)
+    }
+  }
+
+  @ReactMethod
+  fun advertisingId(promise: Promise) {
+    Thread {
+      try {
+        val info = AdvertisingIdClient.getAdvertisingIdInfo(reactApplicationContext.applicationContext)
+        promise.resolve(
+          info.id.takeUnless { info.isLimitAdTrackingEnabled || it == "00000000-0000-0000-0000-000000000000" },
+        )
+      } catch (err: Throwable) {
+        promise.reject("advertising_id_unavailable", err.message, err)
+      }
+    }.start()
+  }
+
   override fun onPurchasesUpdated(result: BillingResult, purchases: List<Purchase>?) {
     if (result.responseCode != BillingResponseCode.OK) {
       settle(pending.getAndSet(null) ?: return, result)

package/dist/blocks/locale.js

@@ -123,7 +123,14 @@ function localizeBlock(block, lookup) {
         case "text":
             return { ...block, text: at("text", block.text) };
         case "button":
+        case "toggle":
             return { ...block, label: at("label", block.label) };
+        case "timer":
+            return {
+                ...block,
+                format: opt("format", block.format),
+                expiredText: opt("expiredText", block.expiredText),
+            };
         case "list":
             return {
                 ...block,
@@ -184,6 +191,11 @@ function localizeBlockDoc(doc, locale) {
         ...doc,
         defaultLocale: chain[0],
         blocks: doc.blocks.map((b) => localizeBlock(b, lookup)),
+        ...(doc.screens
+            ? {
+                screens: doc.screens.map((screen) => screen.map((b) => localizeBlock(b, lookup))),
+            }
+            : {}),
     };
 }
 const LINK_LABEL_ALIASES = {

package/dist/blocks/selection.d.ts

@@ -1,4 +1,4 @@
-import type { BlockStyle, PaywallBlock, PaywallBlockDoc } from "./types.js";
+import type { BlockStyle, PaywallBlock, PaywallBlockDoc, ToggleBlock } from "./types.js";
 import type { RevnixPaywallPackage } from "../ui/RevnixPaywall.js";
 /** Where a block sits: inside the selected plan card, inside another plan
  *  card, or outside any plan card (undefined). */
@@ -9,6 +9,12 @@ export type SelectionContext = "selected" | "unselected" | undefined;
 export declare function selectedPackageId(packages: ReadonlyArray<{
     packageId: string;
 }>, ...candidates: Array<string | undefined>): string | undefined;
+export declare function toggleSelection(block: ToggleBlock, packages: ReadonlyArray<{
+    packageId: string;
+}>, selectedId: string | undefined): {
+    on: boolean;
+    target: string;
+} | null;
 /** The context a package-bearing card opens for itself and its subtree. */
 export declare function packageContext(pkg: {
     packageId: string;

package/dist/blocks/selection.js

@@ -9,6 +9,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CANVAS_MAX_WIDTH = void 0;
 exports.selectedPackageId = selectedPackageId;
+exports.toggleSelection = toggleSelection;
 exports.packageContext = packageContext;
 exports.effectiveStyle = effectiveStyle;
 exports.isVisible = isVisible;
@@ -26,6 +27,14 @@ function selectedPackageId(packages, ...candidates) {
     }
     return packages[0]?.packageId;
 }
+function toggleSelection(block, packages, selectedId) {
+    const on = packages[block.onPackageIndex];
+    const off = packages[block.offPackageIndex];
+    if (on === undefined || off === undefined)
+        return null;
+    const isOn = on.packageId === selectedId;
+    return { on: isOn, target: (isOn ? off : on).packageId };
+}
 /** The context a package-bearing card opens for itself and its subtree. */
 function packageContext(pkg, selectedId) {
     if (pkg === undefined)

package/dist/blocks/tags.d.ts

@@ -1,4 +1,5 @@
 import type { RevnixPaywallPackage } from "../ui/RevnixPaywall.js";
+import type { TimerBlock } from "./types.js";
 /** Minor units per major unit. Not every currency is a hundredth: JPY and KRW
  *  have no minor unit at all, so dividing by 100 would understate a price by
  *  100×. Intl knows each currency's exponent — ask it rather than assume.
@@ -10,3 +11,5 @@ export declare function minorUnitsForCurrency(currency: string): number;
 /** Fills a copy template from one package. `all` is the rest of the offering,
  *  which {save_percent} needs to have something to compare against. */
 export declare function resolveTags(text: string, pkg: RevnixPaywallPackage | undefined, all?: RevnixPaywallPackage[]): string;
+export declare function formatCountdown(format: string, remaining: number): string;
+export declare function timerText(block: TimerBlock, shownAt: number, now: number): string | null;

package/dist/blocks/tags.js

@@ -13,6 +13,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.minorUnitsForCurrency = minorUnitsForCurrency;
 exports.resolveTags = resolveTags;
+exports.formatCountdown = formatCountdown;
+exports.timerText = timerText;
 /** Renewal cycles, in months. Lifetime and one-time products have no cycle. */
 const MONTHS = {
     weekly: 1 / 4.345,
@@ -119,3 +121,34 @@ function resolveTags(text, pkg, all = []) {
         }
     });
 }
+function formatCountdown(format, remaining) {
+    const pad = (n) => String(n).padStart(2, "0");
+    let span = Infinity;
+    const part = (token, unit) => {
+        const value = Math.floor((remaining % span) / unit);
+        if (format.includes(token))
+            span = unit;
+        return value;
+    };
+    const days = part("{d}", 86400);
+    const hours = part("{hh}", 3600);
+    const minutes = part("{mm}", 60);
+    const seconds = part("{ss}", 1);
+    return format
+        .replace(/\{d\}/g, String(days))
+        .replace(/\{hh\}/g, pad(hours))
+        .replace(/\{mm\}/g, pad(minutes))
+        .replace(/\{ss\}/g, pad(seconds));
+}
+function timerText(block, shownAt, now) {
+    const deadline = block.endsAt !== undefined
+        ? Date.parse(block.endsAt)
+        : shownAt + (block.duration ?? 0) * 1000;
+    const remaining = Number.isNaN(deadline)
+        ? 0
+        : Math.max(0, Math.floor((deadline - now) / 1000));
+    if (remaining > 0) {
+        return formatCountdown(block.format ?? "{hh}:{mm}:{ss}", remaining);
+    }
+    return block.expiredText ?? null;
+}

package/dist/blocks/types.d.ts

@@ -112,12 +112,14 @@ export interface BlockStyle {
 /** REV-262: draw a block only while its plan card is (or is not) the selected
  *  one. Ignored outside a package card — a root block is always drawn. */
 export type BlockVisibility = "selected" | "unselected";
-export type BlockAction = "close";
+/** `close` dismisses the paywall; `next`/`back` move between onboarding
+ *  screens and only appear inside `screens`. */
+export type BlockAction = "close" | "next" | "back";
 export interface TextBlock {
     id: string;
     type: "text";
     text: string;
-    /** Tapping this block dismisses the paywall. See BlockAction. */
+    /** What tapping this block does. See BlockAction. */
     action?: BlockAction;
     style?: BlockStyle;
     /** REV-262: merged over `style`, field by field, while the block sits in a
@@ -134,7 +136,7 @@ export interface ImageBlock {
     shape?: "rect" | "circle";
     fit?: "cover" | "contain";
     placeholder?: string;
-    /** Tapping this block dismisses the paywall. See BlockAction. */
+    /** What tapping this block does. See BlockAction. */
     action?: BlockAction;
     style?: BlockStyle;
     /** REV-262: merged over `style`, field by field, while the block sits in a
@@ -182,8 +184,9 @@ export interface ButtonBlock {
     id: string;
     type: "button";
     label: string;
-    /** `close` turns this button into a dismiss ("Not now") instead of the
-     *  purchase CTA, which is what a button means by default. */
+    /** `close` turns this button into a dismiss ("Not now"), and `next`/`back`
+     *  into onboarding navigation, instead of the purchase CTA, which is what a
+     *  button means by default. */
     action?: BlockAction;
     style?: BlockStyle;
     /** REV-262: merged over `style`, field by field, while the block sits in a
@@ -229,13 +232,55 @@ export interface SpacerBlock {
     selectedStyle?: BlockStyle;
     visibility?: BlockVisibility;
 }
+/** Countdown text. `endsAt` is one deadline for everyone; `duration` counts
+ *  from the moment this paywall view opened. At zero it draws `expiredText`,
+ *  or nothing when that is absent. Tokens in `format`: {d} {hh} {mm} {ss}. */
+export interface TimerBlock {
+    id: string;
+    type: "timer";
+    endsAt?: string;
+    duration?: number;
+    format?: string;
+    expiredText?: string;
+    style?: BlockStyle;
+    selectedStyle?: BlockStyle;
+    visibility?: BlockVisibility;
+}
+/** A muted looping clip. React Native has no built-in player, so this SDK
+ *  draws `poster` in its place, sized like an image block. */
+export interface VideoBlock {
+    id: string;
+    type: "video";
+    url: string;
+    poster?: string;
+    fit?: "cover" | "contain";
+    style?: BlockStyle;
+    selectedStyle?: BlockStyle;
+    visibility?: BlockVisibility;
+}
+/** The free-trial switch: ON while package `onPackageIndex` is selected, and
+ *  tapping it selects the other one. Hidden when the offering lacks either
+ *  index. */
+export interface ToggleBlock {
+    id: string;
+    type: "toggle";
+    label: string;
+    onPackageIndex: number;
+    offPackageIndex: number;
+    style?: BlockStyle;
+    selectedStyle?: BlockStyle;
+    visibility?: BlockVisibility;
+}
 /** The one container block. `layout` picks how children are placed: column /
  *  row are flex lines, `stack` layers them (children position with
- *  style.inset or the edge offsets), and `grid` is an N-column grid. */
+ *  style.inset or the edge offsets), `grid` is an N-column grid, and
+ *  `carousel` pages through its children one swipe at a time. */
 export interface CardBlock {
     id: string;
     type: "card";
-    layout?: "column" | "row" | "stack" | "grid";
+    layout?: "column" | "row" | "stack" | "grid" | "carousel";
+    /** carousel only: seconds per page before it moves on by itself. */
+    autoAdvance?: number;
     /** Renders this container once per package in the attached offering. Its
      *  subtree reads the package through tag variables. */
     repeat?: "packages";
@@ -254,7 +299,7 @@ export interface CardBlock {
     selectedStyle?: BlockStyle;
     visibility?: BlockVisibility;
 }
-export type PaywallBlock = TextBlock | ImageBlock | ListBlock | ProductsBlock | ButtonBlock | LinksBlock | LineBlock | SpacerBlock | CardBlock;
+export type PaywallBlock = TextBlock | ImageBlock | ListBlock | ProductsBlock | ButtonBlock | LinksBlock | LineBlock | SpacerBlock | TimerBlock | VideoBlock | ToggleBlock | CardBlock;
 /** The published document: screen palette plus the block tree. */
 export interface PaywallBlockDoc {
     version: number;
@@ -269,6 +314,10 @@ export interface PaywallBlockDoc {
     accentInk: string;
     fontFamily?: string;
     blocks: PaywallBlock[];
+    /** Onboarding: intro screens shown in order before `blocks`, which stays
+     *  the last (purchase) screen. They share the doc's palette, layout and
+     *  locale table. Absent or empty = `blocks` alone. */
+    screens?: PaywallBlock[][];
     /** REV-271: the language the blocks' own copy is written in. Absent = "en".
      *  Never a key in a stored doc's `locales` — the tree IS that language's
      *  version. A localized copy names the language it was localized to. */
@@ -299,3 +348,11 @@ export declare const DESIGN_CANVAS: {
  *  bug this feature exists to fix. Two close buttons is merely ugly, so the
  *  tie breaks toward always having one. */
 export declare function hasCloseAction(blocks: PaywallBlock[]): boolean;
+export declare function onboardingScreen(doc: PaywallBlockDoc, index: number): {
+    blocks: PaywallBlock[];
+    dots?: {
+        count: number;
+        active: number;
+    };
+};
+export declare function stepScreen(doc: PaywallBlockDoc, index: number, action: BlockAction | undefined): number | undefined;

package/dist/blocks/types.js

@@ -13,6 +13,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DESIGN_CANVAS = void 0;
 exports.hasCloseAction = hasCloseAction;
+exports.onboardingScreen = onboardingScreen;
+exports.stepScreen = stepScreen;
 /** The device screen `canvas` designs are authored against. */
 exports.DESIGN_CANVAS = { width: 393, height: 852 };
 /** Does this tree author a dismiss affordance that is CERTAIN to render?
@@ -38,7 +40,26 @@ function hasCloseAction(blocks) {
         : b.type === "card"
             ? b.repeat === undefined &&
                 b.packageIndex === undefined &&
+                b.layout !== "carousel" &&
                 hasCloseAction(b.children)
             : (b.type === "text" || b.type === "image" || b.type === "button") &&
                 b.action === "close");
 }
+function onboardingScreen(doc, index) {
+    const intro = doc.screens?.[index];
+    if (intro === undefined)
+        return { blocks: doc.blocks };
+    return {
+        blocks: intro,
+        dots: { count: doc.screens.length + 1, active: index },
+    };
+}
+function stepScreen(doc, index, action) {
+    if (index >= (doc.screens?.length ?? 0))
+        return undefined;
+    if (action === "next")
+        return index + 1;
+    if (action === "back" && index > 0)
+        return index - 1;
+    return undefined;
+}

package/dist/client.d.ts

@@ -26,6 +26,8 @@ export declare class RevnixClient {
     private readonly onImplicitPaywall?;
     private readonly onDeferredDeepLink?;
     private readonly onAttribution?;
+    private readonly deviceIntegrity?;
+    private integrityRequest;
     private deferredDeepLinkClaimed;
     private landingUrl;
     private lastDeepLinkWrite;
@@ -279,6 +281,7 @@ export declare class RevnixClient {
      *  report the token dead. iOS/Android only (no-op on web),
      *  fire-and-forget. */
     setPushToken(token: string): void;
+    private reportAdvertisingId;
     /** REV-272: the two moments that happen ON a paywall, with the loop guard
      *  applied. `fromPaywallId` travels so the server can refuse to hand back
      *  the very paywall being dismissed — the backstop for a host that reports
@@ -416,6 +419,7 @@ export declare class RevnixClient {
     /** Fire-and-forget install report (REV-093). Never blocks startup and
      *  never throws — the backend absorbs retries idempotently per id. */
     private reportInstall;
+    private integrityFor;
     /** REV-268: assemble and encode the device facts once. Runtime-detected
      *  facts first, the app's `device` over them, then the three the SDK owns.
      *  `installedAt` is the first launch this storage ever saw — written on

package/dist/client.js

@@ -19,9 +19,11 @@ const PENDING_PURCHASES_KEY = "revnix.pendingPurchases";
 const PLACEMENTS_CACHE_KEY = "revnix.placements";
 const LAST_ATTRIBUTION_KEY = "revnix.lastAttribution";
 const LAST_PUSH_TOKEN_KEY = "revnix.lastPushToken";
+const LAST_AD_ID_KEY = "revnix.lastAdId";
 const EVENT_QUEUE_KEY = "revnix.eventQueue";
 const PLACEMENTS_INVALIDATED_AT_KEY = "revnix.placementsInvalidatedAt";
 const DEFAULT_TIMEOUT_MS = 10000;
+const INTEGRITY_TIMEOUT_MS = 10000;
 const EVENT_QUEUE_CAP = 1000;
 const EVENT_BATCH_SIZE = 100;
 const EVENT_FLUSH_THRESHOLD = 20;
@@ -102,6 +104,19 @@ const jittered = (ms) => ms * (0.8 + Math.random() * 0.4);
 // from memory. Short enough that a webhook-driven change is picked up within
 // half a minute; long enough that gating five screens costs one request.
 const DEFAULT_ENTITLEMENTS_TTL_MS = 30000;
+const fitsWithin = (value, max) => typeof value === "string" && value.length > 0 && value.length <= max;
+function wellFormedIntegrity(evidence) {
+    if (typeof evidence !== "object" || evidence === null)
+        return undefined;
+    const { platform, keyId, attestation, token } = evidence;
+    if (platform === "ios" && fitsWithin(keyId, 128) && fitsWithin(attestation, 16384)) {
+        return { platform, keyId, attestation };
+    }
+    if (platform === "android" && fitsWithin(token, 16384)) {
+        return { platform, token };
+    }
+    return undefined;
+}
 class RevnixClient {
     constructor(config) {
         /** True while the current id is a generated anon id living on
@@ -114,6 +129,7 @@ class RevnixClient {
         // client (dev fast-refresh re-running configure()) does not keep retrying
         // and prefetching alongside its successor.
         this.disposed = false;
+        this.integrityRequest = null;
         this.deferredDeepLinkClaimed = false;
         this.landingUrl = null;
         this.lastDeepLinkWrite = Promise.resolve();
@@ -190,12 +206,15 @@ class RevnixClient {
         this.onDiagnostic = config.onDiagnostic;
         this.onDeferredDeepLink = config.onDeferredDeepLink;
         this.onAttribution = config.onAttribution;
+        this.deviceIntegrity = config.deviceIntegrity;
         this.readYourWritesDelaysMs =
             config.readYourWritesDelaysMs ?? [250, 500, 1000, 2000];
         this.customerIdPromise = this.loadCustomerId(config.customerId);
         // C7: retry any purchases that failed to register on a previous launch, so
         // a paying user never stays locked out because a POST didn't land.
         void this.retryPendingPurchases().catch((err) => this.diag("retryPendingPurchases", err));
+        if (config.advertisingId)
+            this.reportAdvertisingId(config.advertisingId);
         const store = (0, store_js_1.getStoreAdapter)();
         if (store) {
             this.stopStoreObserver = store.observe((tx) => void this.registerStoreTransaction(store, tx).catch((err) => this.diag("storeObserver", err)));
@@ -971,6 +990,7 @@ class RevnixClient {
                 ...(attribution.campaign ? { campaign: attribution.campaign } : {}),
                 ...(attribution.adGroup ? { adGroup: attribution.adGroup } : {}),
                 ...(attribution.creative ? { creative: attribution.creative } : {}),
+                ...(await this.integrityFor(customerId)),
             });
             await this.storage.setItem(LAST_ATTRIBUTION_KEY, payload);
         })
@@ -1004,6 +1024,21 @@ class RevnixClient {
         })
             .catch((err) => this.diag("setPushToken", err));
     }
+    reportAdvertisingId(source) {
+        void Promise.resolve()
+            .then(source)
+            .then(async (value) => {
+            const id = value || null;
+            const customerId = await this.customerIdPromise;
+            const payload = JSON.stringify({ customerId, id });
+            const last = await this.storage.getItem(LAST_AD_ID_KEY);
+            if (last === payload || (id === null && last === null))
+                return;
+            await this.setAttributes({ gps_adid: id });
+            await this.storage.setItem(LAST_AD_ID_KEY, payload);
+        })
+            .catch((err) => this.diag("advertisingId", err));
+    }
     /** REV-272: the two moments that happen ON a paywall, with the loop guard
      *  applied. `fromPaywallId` travels so the server can refuse to hand back
      *  the very paywall being dismissed — the backstop for a host that reports
@@ -1226,12 +1261,13 @@ class RevnixClient {
         if (this.ephemeralAnonId)
             return;
         void this.customerIdPromise
-            .then((customerId) => this.request("POST", "/v1/installs", {
+            .then(async (customerId) => this.request("POST", "/v1/installs", {
             customerId,
             occurredAt: Date.now(),
             sdkVersion: version_js_1.SDK_VERSION,
             installReferrer: referrer.slice(0, 1024),
             ...this.installMetadata,
+            ...(await this.integrityFor(customerId)),
         }))
             .then((body) => {
             this.refreshAttribution();
@@ -1266,12 +1302,13 @@ class RevnixClient {
         if (this.ephemeralAnonId)
             return Promise.resolve(undefined);
         return this.customerIdPromise
-            .then((customerId) => this.request("POST", "/v1/installs", {
+            .then(async (customerId) => this.request("POST", "/v1/installs", {
             customerId,
             occurredAt: Date.now(),
             sdkVersion: version_js_1.SDK_VERSION,
             attributionToken: token.slice(0, 2048),
             ...this.installMetadata,
+            ...(await this.integrityFor(customerId)),
         }))
             .then((body) => {
             this.refreshAttribution();
@@ -1604,12 +1641,15 @@ class RevnixClient {
     /** Fire-and-forget install report (REV-093). Never blocks startup and
      *  never throws — the backend absorbs retries idempotently per id. */
     reportInstall(customerId) {
-        void this.request("POST", "/v1/installs", {
+        const occurredAt = Date.now();
+        void this.integrityFor(customerId)
+            .then((integrity) => this.request("POST", "/v1/installs", {
             customerId,
-            occurredAt: Date.now(),
+            occurredAt,
             sdkVersion: version_js_1.SDK_VERSION,
             ...this.installMetadata,
-        })
+            ...integrity,
+        }))
             .then((body) => {
             if (!this.ephemeralAnonId)
                 this.refreshAttribution();
@@ -1617,6 +1657,34 @@ class RevnixClient {
         })
             .catch((err) => this.diag("reportInstall", err));
     }
+    integrityFor(customerId) {
+        const source = this.deviceIntegrity;
+        if (!source)
+            return Promise.resolve({});
+        if (this.integrityRequest?.customerId !== customerId) {
+            let timer;
+            const timeout = new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new Error("device integrity timed out")), INTEGRITY_TIMEOUT_MS);
+            });
+            const body = Promise.race([
+                Promise.resolve().then(() => source(customerId)),
+                timeout,
+            ])
+                .then((evidence) => {
+                const integrity = wellFormedIntegrity(evidence);
+                if (!integrity)
+                    throw new Error("device integrity unavailable");
+                return { integrity };
+            })
+                .catch((err) => {
+                this.diag("deviceIntegrity", err);
+                return {};
+            })
+                .finally(() => clearTimeout(timer));
+            this.integrityRequest = { customerId, body };
+        }
+        return this.integrityRequest.body;
+    }
     /** REV-268: assemble and encode the device facts once. Runtime-detected
      *  facts first, the app's `device` over them, then the three the SDK owns.
      *  `installedAt` is the first launch this storage ever saw — written on

package/dist/esm/blocks/locale.js

@@ -115,7 +115,14 @@ function localizeBlock(block, lookup) {
         case "text":
             return { ...block, text: at("text", block.text) };
         case "button":
+        case "toggle":
             return { ...block, label: at("label", block.label) };
+        case "timer":
+            return {
+                ...block,
+                format: opt("format", block.format),
+                expiredText: opt("expiredText", block.expiredText),
+            };
         case "list":
             return {
                 ...block,
@@ -176,6 +183,11 @@ export function localizeBlockDoc(doc, locale) {
         ...doc,
         defaultLocale: chain[0],
         blocks: doc.blocks.map((b) => localizeBlock(b, lookup)),
+        ...(doc.screens
+            ? {
+                screens: doc.screens.map((screen) => screen.map((b) => localizeBlock(b, lookup))),
+            }
+            : {}),
     };
 }
 const LINK_LABEL_ALIASES = {

package/dist/esm/blocks/selection.js

@@ -17,6 +17,14 @@ export function selectedPackageId(packages, ...candidates) {
     }
     return packages[0]?.packageId;
 }
+export function toggleSelection(block, packages, selectedId) {
+    const on = packages[block.onPackageIndex];
+    const off = packages[block.offPackageIndex];
+    if (on === undefined || off === undefined)
+        return null;
+    const isOn = on.packageId === selectedId;
+    return { on: isOn, target: (isOn ? off : on).packageId };
+}
 /** The context a package-bearing card opens for itself and its subtree. */
 export function packageContext(pkg, selectedId) {
     if (pkg === undefined)

package/dist/esm/blocks/tags.js

@@ -115,3 +115,34 @@ export function resolveTags(text, pkg, all = []) {
         }
     });
 }
+export function formatCountdown(format, remaining) {
+    const pad = (n) => String(n).padStart(2, "0");
+    let span = Infinity;
+    const part = (token, unit) => {
+        const value = Math.floor((remaining % span) / unit);
+        if (format.includes(token))
+            span = unit;
+        return value;
+    };
+    const days = part("{d}", 86400);
+    const hours = part("{hh}", 3600);
+    const minutes = part("{mm}", 60);
+    const seconds = part("{ss}", 1);
+    return format
+        .replace(/\{d\}/g, String(days))
+        .replace(/\{hh\}/g, pad(hours))
+        .replace(/\{mm\}/g, pad(minutes))
+        .replace(/\{ss\}/g, pad(seconds));
+}
+export function timerText(block, shownAt, now) {
+    const deadline = block.endsAt !== undefined
+        ? Date.parse(block.endsAt)
+        : shownAt + (block.duration ?? 0) * 1000;
+    const remaining = Number.isNaN(deadline)
+        ? 0
+        : Math.max(0, Math.floor((deadline - now) / 1000));
+    if (remaining > 0) {
+        return formatCountdown(block.format ?? "{hh}:{mm}:{ss}", remaining);
+    }
+    return block.expiredText ?? null;
+}