fix: handle Universal Link and interstitial deep links in app URL listener

- Add handleUniversalLinkDeepLink for fliq.linkforty.com/s URLs (cold + warm start)
- Handle fliq:// scheme URLs with encrypted params from interstitial page
- Fix ITSAppUsesNonExemptEncryption to false (encryption is exempt)

Author: onamfc

app.json

@@ -20,7 +20,7 @@
         "applinks:fliq.linkforty.com"
       ],
       "infoPlist": {
-        "ITSAppUsesNonExemptEncryption": true
+        "ITSAppUsesNonExemptEncryption": false
       },
       "privacyManifests": {
         "NSPrivacyAccessedAPITypes": [

app/_layout.tsx

@@ -11,7 +11,7 @@ import { Pressable, Text } from 'react-native';
 import { GestureHandlerRootView } from 'react-native-gesture-handler';
 import * as Linking from 'expo-linking';
 import { initializeSDK, onDeepLink, onDeferredDeepLink, trackEvent } from '@/lib/sdk';
-import { handleSDKDeepLink, handleSchemeDeepLink } from '@/lib/deep-link-router';
+import { handleSDKDeepLink, handleSchemeDeepLink, handleUniversalLinkDeepLink } from '@/lib/deep-link-router';
 import { isOnboardingComplete } from '@/lib/settings';
 import { fetchPushMessage } from '@/lib/push';
 import { saveMessage } from '@/lib/storage';
@@ -132,13 +132,18 @@ export default function RootLayout() {
         const subscription = Linking.addEventListener('url', ({ url }) => {
           if (url.startsWith('fliq://open')) {
             handleSchemeDeepLink(url);
+          } else if (url.includes('fliq.linkforty.com/s') || (url.startsWith('fliq://') && url.includes('e='))) {
+            // Universal Links (fliq.linkforty.com) and interstitial scheme URLs (fliq://?e=...&n=...#key)
+            handleUniversalLinkDeepLink(url);
           }
         });
 
-        // Check if app was cold-launched via fliq:// scheme
+        // Check if app was cold-launched via deep link
         Linking.getInitialURL().then((initialUrl) => {
           if (initialUrl?.startsWith('fliq://open')) {
             handleSchemeDeepLink(initialUrl);
+          } else if (initialUrl?.includes('fliq.linkforty.com/s') || (initialUrl?.startsWith('fliq://') && initialUrl?.includes('e='))) {
+            handleUniversalLinkDeepLink(initialUrl);
           }
         });
 

lib/deep-link-router.ts

@@ -2,6 +2,7 @@ import { router } from 'expo-router';
 import { saveMessage } from './storage';
 import { trackEvent } from './sdk';
 import { getSettings } from './settings';
+import { parseDeepLink } from './deeplink';
 import { decrypt, isEncryptedPayload, extractKeyFromFragment } from './crypto';
 import type { Message } from './types';
 import type { DeepLinkData } from '@linkforty/mobile-sdk-expo';
@@ -163,6 +164,39 @@ export async function handleSchemeDeepLink(url: string): Promise<void> {
   }
 }
 
+/**
+ * Handle a Universal Link deep link (https://fliq.linkforty.com/s?...).
+ * Parses the encrypted or legacy URL, decrypts the message, saves it,
+ * and navigates to the reveal screen. Works for both cold and warm starts.
+ */
+export async function handleUniversalLinkDeepLink(url: string): Promise<void> {
+  try {
+    const payload = parseDeepLink(url);
+    if (!payload) return;
+
+    const id = Date.now().toString(36) + Math.random().toString(36).slice(2, 8);
+    const msg: Message = {
+      id,
+      content: payload.content,
+      revealStyle: payload.revealStyle,
+      senderName: payload.senderName,
+      createdAt: new Date().toISOString(),
+      isRead: false,
+      direction: 'received',
+    };
+
+    await saveMessage(msg);
+    trackEvent('message_received', {
+      revealStyle: msg.revealStyle,
+      source: 'universal_link',
+    });
+
+    navigateToReveal(id);
+  } catch {
+    // Silently fail — user will see inbox
+  }
+}
+
 function navigateToReveal(id: string): void {
   try {
     router.replace(`/reveal/${id}`);