This repository contains independent mobile reference apps. Do not add a proprietary ZipQuantum SDK.
- Read
contracts/mobile-v1.schema.jsonand the target platform README. - Copy the platform's
.env.exampleor generated config template; never commit real tokens or signing material. - Run
scripts/validate.ps1on Windows orscripts/validate.shon macOS/Linux. - Treat every validation error as blocking. Do not weaken Associated Domains, App Links, TLS, token binding, or explicit paste consent to make a test pass.
- iOS deferred recovery begins only from a visible
UIPasteControlaction. - Android deferred recovery uses Play Install Referrer parameters
zq_tokenandzq_host. route_ack.receiptis opaque. Never decode, persist, print, or replay it.- Send
route_openedonly after the app has displayed its destination route. - No IDFA, App Set ID, Android advertising ID, IDFV, fingerprint, or cross-app identity.
- Example values use
example.com; replace them with dashboard-verified values.
ios-swiftui/: SwiftUI example and XcodeGen definition.android-kotlin/: Jetpack Compose example.react-native/: React Native TypeScript example with auditable native adapters.flutter/: Flutter/Dart example with auditable native adapters.tauri/: Tauri 2 webview app plus a narrow native deferred-link plugin.contracts/: machine-readable API shapes.docs/: human and agent integration guidance.scripts/: non-interactive validation entrypoints.
Prefer small reviewable changes. Update tests and documentation with behavior changes.