4.16.2

.github/workflows/tests.yml

@@ -5,6 +5,7 @@ on:
     paths:
       - '.github/workflows/tests.yml'
       - 'project.yml'
+      - 'scripts/**'
       - '**/*.swift'
       - '!Examples/**'
   workflow_dispatch:
@@ -33,4 +34,10 @@ jobs:
         uses: xavierLowmiller/xcodegen-action@1.2.3
       - name: Run Tests
         run: |
-          xcodebuild -project SuperwallKit.xcodeproj -scheme SuperwallKit -sdk iphonesimulator -destination 'platform=iOS Simulator,OS=latest,name=iPhone 17 Pro' test
+          xcodebuild -project SuperwallKit.xcodeproj -scheme SuperwallKit -sdk iphonesimulator -destination 'platform=iOS Simulator,OS=latest,name=iPhone 17 Pro' -derivedDataPath .build test
+      # Whether a permission API name reaches the shipped binary is invisible to the
+      # test suite — it depends on what the compiler emits, not on what the code
+      # returns. Scan the binary the tests just built.
+      - name: Scan for privacy API signatures
+        run: |
+          ./scripts/scan-privacy-signatures.sh .build/Build/Products/Debug-iphonesimulator/SuperwallKit.framework/SuperwallKit

CHANGELOG.md

@@ -2,6 +2,24 @@
 
 The changelog for `SuperwallKit`. Also see the [releases](https://github.com/superwall/Superwall-iOS/releases) on GitHub.
 
+## 4.16.2
+
+### Enhancements
+
+- Adds the user's system-wide text size (Dynamic Type) as three device attributes for use in paywalls and audience filters: `fontScale`, `fontSize`, and `preferredContentSizeCategory`.
+- Links subscriptions to the user server-side after successful purchase or restore.
+
+### Fixes
+
+- Fixes network requests that can never succeed, such as those with an invalid API key, taking up to a minute to fail instead of failing straight away. Timeouts and server errors still retry as before.
+- Fixes failed network requests being reported as a decoding error rather than the HTTP error that actually occurred.
+- Fixes issue where the paywall debugger wouldn't work for accounts with many paywalls.
+- Fixes network requests on iOS 16 and earlier briefly waiting on the main thread.
+- Fixes Main Thread Checker warnings caused by reading the device's interface style and text size from a background thread.
+- Prevents unused App Tracking Transparency support from triggering App Store Connect tracking warnings.
+- Stops Apple's microphone, location, and contacts class and selector names appearing in your app's binary when you don't use those permissions.
+- Fixes the app's accent color resetting to the system blue when configuring the SDK from a SwiftUI `App` initializer.
+
 ## 4.16.1
 
 ### Enhancements

Sources/SuperwallKit/Config/Options/SuperwallOptions.swift

@@ -216,6 +216,24 @@ public final class SuperwallOptions: NSObject, Encodable {
       }
     }
 
+    /// Host for the Superwall V2 API (the `apps/api` Cloudflare Worker), whose
+    /// routes live under a `/v2/` path.
+    ///
+    /// This is a DIFFERENT host from ``baseHost`` (the legacy v1 API on
+    /// `api.superwall.me`): the V2 API is served from the `superwall.com`
+    /// domain — `api.superwall.com` in production and `api.superwall.dev` in the
+    /// developer/staging environment.
+    var apiV2Host: String {
+      switch self {
+      case .developer:
+        return "api.superwall.dev"
+      case .local:
+        return "localhost:3001"
+      default:
+        return "api.superwall.com"
+      }
+    }
+
     /// The base URL for the Superwall dashboard.
     var dashboardBaseUrl: String {
       switch self {

Sources/SuperwallKit/Debug/DebugViewController.swift

@@ -118,7 +118,11 @@ final class DebugViewController: UIViewController {
   var paywallDatabaseId: String?
 	var paywallIdentifier: String?
   var paywall: Paywall?
-  var paywalls: [Paywall] = []
+  /// Backs the "Your Paywalls" picker.
+  ///
+  /// Populated from `GET /v2/paywalls/preview-list`. Empty when the request fails or the app
+  /// has a single paywall, in which case the picker declines to open.
+  var previewPaywalls: [PaywallSummary] = []
   var previewViewContent: UIView?
   private var cancellable: AnyCancellable?
   private var initialLocaleIdentifier: String?
@@ -156,6 +160,7 @@ final class DebugViewController: UIViewController {
     initialLocaleIdentifier = Superwall.shared.options.localeIdentifier
     addSubviews()
     Task { await loadPreview() }
+    Task { await loadPreviewPaywalls() }
   }
 
   private func addSubviews() {
@@ -204,32 +209,30 @@ final class DebugViewController: UIViewController {
   func loadPreview() async {
     activityIndicator.startAnimating()
     previewViewContent?.removeFromSuperview()
+    await finishLoadingPreview()
+  }
+
+	func finishLoadingPreview() async {
+		var paywallId: String?
 
-    if paywalls.isEmpty {
+		if let paywallIdentifier = paywallIdentifier {
+			paywallId = paywallIdentifier
+		} else if let paywallDatabaseId = paywallDatabaseId {
+      // Resolve the numeric database id from the deep link to the paywall's
+      // identifier (slug) with a single lookup.
       do {
-        paywalls = try await network.getPaywalls()
-        await finishLoadingPreview()
+        let resolution = try await network.resolvePaywallIdentifier(forDatabaseId: paywallDatabaseId)
+        paywallId = resolution.identifier
+        paywallIdentifier = resolution.identifier
       } catch {
         Logger.debug(
           logLevel: .error,
           scope: .debugViewController,
-          message: "Failed to Fetch Paywalls",
+          message: "Failed to Resolve Paywall",
           error: error
         )
+        return
       }
-    } else {
-      await finishLoadingPreview()
-    }
-  }
-
-	func finishLoadingPreview() async {
-		var paywallId: String?
-
-		if let paywallIdentifier = paywallIdentifier {
-			paywallId = paywallIdentifier
-		} else if let paywallDatabaseId = paywallDatabaseId {
-			paywallId = paywalls.first { $0.databaseId == paywallDatabaseId }?.identifier
-			paywallIdentifier = paywallId
     } else {
       return
     }
@@ -310,20 +313,49 @@ final class DebugViewController: UIViewController {
     }
   }
 
-  @objc func pressedPreview() {
-    guard let id = paywallDatabaseId else { return }
+  /// Populates the "Your Paywalls" picker from the application in the debugger's
+  /// preview token.
+  ///
+  /// Kicked off from `viewDidLoad` alongside — not after — the preview load, so
+  /// the picker is available even when the requested paywall fails to render.
+  /// Best-effort: a failure leaves `previewPaywalls` empty and `pressedPreview`
+  /// declines to open, which is the behaviour before this was restored.
+  private func loadPreviewPaywalls() async {
+    do {
+      let list = try await network.listPreviewPaywalls()
+      previewPaywalls = list.data
+    } catch {
+      Logger.debug(
+        logLevel: .warn,
+        scope: .debugViewController,
+        message: "Failed to Load Paywall Picker",
+        info: nil,
+        error: error
+      )
+    }
+  }
 
-    let options: [AlertOption] = paywalls.map { paywall in
+  @objc func pressedPreview() {
+    // Open whenever there is something to switch *to*. That covers an empty list
+    // (the request failed) and a single-entry list whose one paywall is already
+    // on screen, without gating on `paywallDatabaseId` — which is nil when the
+    // deep link carried no `paywall_id` and nothing rendered. That is precisely
+    // when the picker is most useful, so it must not be inert then.
+    guard previewPaywalls.contains(where: { $0.id != paywallDatabaseId }) else { return }
+
+    let options: [AlertOption] = previewPaywalls.map { paywall in
       var name = paywall.name
 
-      if id == paywall.databaseId {
+      // Optional comparison: with no paywall on screen nothing is marked, which
+      // is correct rather than a case to guard against.
+      if paywall.id == paywallDatabaseId {
         name = "\(name) ✓"
       }
 
       let alert = AlertOption(
         title: name,
         action: { [weak self] in
-          self?.paywallDatabaseId = paywall.databaseId
+          self?.paywallDatabaseId = paywall.id
           self?.paywallIdentifier = paywall.identifier
           Task { await self?.loadPreview() }
         },

Sources/SuperwallKit/Debug/SWBounceButton.swift

@@ -27,8 +27,17 @@ final class SWBounceButton: UIButton {
         self.activityIndicator.startAnimating()
         self.isEnabled = false
       } else {
-        self.setTitle(oldTitle, for: .normal)
-        self.oldTitle = ""
+        // `didSet` fires on every assignment, not just on a change, so
+        // `showLoading = false` can arrive when loading was never started (or
+        // was already ended). `oldTitle` is empty in that case, and restoring
+        // it unconditionally would blank a perfectly good title — e.g. the
+        // debugger's "Preview" button vanishes when a second terminal state
+        // (skipped, then presentationError) lands on an already-idle button.
+        // Only restore when there is a saved title to restore.
+        if !oldTitle.isEmpty {
+          self.setTitle(oldTitle, for: .normal)
+          self.oldTitle = ""
+        }
         self.activityIndicator.stopAnimating()
         self.isEnabled = true
       }

Sources/SuperwallKit/Misc/Constants.swift

@@ -18,5 +18,5 @@ let sdkVersion = """
 */
 
 let sdkVersion = """
-4.16.1
+4.16.2
 """

Sources/SuperwallKit/Misc/Extensions/Task+Retrying.swift

@@ -30,6 +30,12 @@ extension Task where Failure == Error {
               if let (_, response) = result as? (Data, URLResponse),
                 let httpResponse = response as? HTTPURLResponse,
                 !(200...299).contains(httpResponse.statusCode) {
+                // A client error won't succeed on retry, so hand the response back
+                // for the caller to map rather than burning the whole backoff
+                // schedule on a request that can only fail the same way.
+                if TaskRetryLogic.isTerminal(statusCode: httpResponse.statusCode) {
+                  return result
+                }
                 throw URLError(.badServerResponse)
               }
               return result

Sources/SuperwallKit/Misc/Extensions/UIApplication+ActiveWindow.swift

@@ -29,4 +29,25 @@ extension UIApplication {
     let windows = sharedApplication.connectedScenes.flatMap { ($0 as? UIWindowScene)?.windows ?? [] }
     return windows.first { $0.isKeyWindow } ?? windows.first
   }
+
+  /// The scene behind ``activeWindow``, using the same activation-state priority.
+  ///
+  /// Preferred over the window for trait observation: a window's
+  /// `overrideUserInterfaceStyle` doesn't propagate up to its scene, so the scene's
+  /// `userInterfaceStyle` follows the system the way `UIScreen.main` does. It also
+  /// outlives the individual windows it hosts.
+  var activeWindowScene: UIWindowScene? {
+    guard let sharedApplication = UIApplication.sharedApplication else {
+      return nil
+    }
+    if let windowScene = sharedApplication.connectedScenes
+      .first(where: { $0.activationState == .foregroundActive }) as? UIWindowScene {
+      return windowScene
+    }
+    if let windowScene = sharedApplication.connectedScenes
+      .first(where: { $0.activationState == .foregroundInactive }) as? UIWindowScene {
+      return windowScene
+    }
+    return sharedApplication.connectedScenes.compactMap { $0 as? UIWindowScene }.first
+  }
 }

Sources/SuperwallKit/Models/Paywall/Paywall.swift

@@ -8,10 +8,6 @@
 
 import UIKit
 
-struct Paywalls: Decodable {
-  var paywalls: [Paywall]
-}
-
 struct Paywall: Codable {
   /// The id of the paywall in the database.
   var databaseId: String

Sources/SuperwallKit/Models/Paywall/PaywallPreviewList.swift

@@ -0,0 +1,14 @@
+//
+//  PaywallPreviewList.swift
+//  SuperwallKit
+//
+//  Created by Yusuf Tör on 30/07/2026.
+//
+
+import Foundation
+
+/// The response from `GET /v2/paywalls/preview-list`.
+struct PaywallPreviewList: Decodable {
+  /// The paywalls available to preview, capped server-side.
+  let data: [PaywallSummary]
+}

Sources/SuperwallKit/Models/Paywall/PaywallSummary.swift

@@ -0,0 +1,21 @@
+//
+//  PaywallSummary.swift
+//  SuperwallKit
+//
+//  Created by Yusuf Tör on 30/07/2026.
+//
+
+import Foundation
+
+/// The minimal paywall metadata the debug/preview flow needs: enough to fetch
+/// and label a paywall.
+struct PaywallSummary: Decodable {
+  /// The id of the paywall in the database.
+  let id: String
+
+  /// The identifier (slug) of the paywall, used to fetch the full paywall.
+  let identifier: String
+
+  /// The display name of the paywall.
+  let name: String
+}

Sources/SuperwallKit/Network/API.swift

@@ -13,6 +13,7 @@ enum EndpointHost {
   case enrichment
   case adServices
   case subscriptionsApi
+  case paywallsV2
   case mmp
 }
 
@@ -35,6 +36,7 @@ struct Api {
   let enrichment: Enrichment
   let adServices: AdServices
   let subscriptionsApi: SubscriptionsAPI
+  let paywallsV2: PaywallsV2
   let mmp: MMP
 
   init(networkEnvironment: SuperwallOptions.NetworkEnvironment) {
@@ -43,6 +45,7 @@ struct Api {
     enrichment = Enrichment(networkEnvironment: networkEnvironment)
     adServices = AdServices(networkEnvironment: networkEnvironment)
     subscriptionsApi = SubscriptionsAPI(networkEnvironment: networkEnvironment)
+    paywallsV2 = PaywallsV2(networkEnvironment: networkEnvironment)
     mmp = MMP(networkEnvironment: networkEnvironment)
   }
 
@@ -58,6 +61,8 @@ struct Api {
       return adServices
     case .subscriptionsApi:
       return subscriptionsApi
+    case .paywallsV2:
+      return paywallsV2
     case .mmp:
       return mmp
     }
@@ -115,6 +120,19 @@ struct Api {
     }
   }
 
+  /// The Superwall V2 API, served under a `/v2/` path on `api.superwall.com`
+  /// (production) / `api.superwall.dev` (developer). See
+  /// `NetworkEnvironment.apiV2Host`.
+  struct PaywallsV2: ApiHostConfig {
+    let networkEnvironment: SuperwallOptions.NetworkEnvironment
+    var host: String { return networkEnvironment.apiV2Host }
+    var path: String { return "/v2/" }
+
+    init(networkEnvironment: SuperwallOptions.NetworkEnvironment) {
+      self.networkEnvironment = networkEnvironment
+    }
+  }
+
   struct MMP: ApiHostConfig {
     let networkEnvironment: SuperwallOptions.NetworkEnvironment
     var host: String { return networkEnvironment.mmpHost }