RealUnitCH · JonnyLuca · Aug 29, 2026 · Aug 29, 2026 · Aug 29, 2026 · Aug 29, 2026
diff --git a/.github/workflows/handbook-build-check.yaml b/.github/workflows/handbook-build-check.yaml
@@ -92,8 +92,8 @@ jobs:
           set -euo pipefail
           bash scripts/assemble-handbook-screenshots.sh /tmp/handbook-shots
           count=$(ls -1 /tmp/handbook-shots/*.png | wc -l | tr -d ' ')
-          if [ "$count" != "284" ]; then
-            echo "expected 284 screenshots, got $count" >&2
+          if [ "$count" != "299" ]; then
+            echo "expected 299 screenshots, got $count" >&2
             exit 1
           fi
 
@@ -173,11 +173,11 @@ jobs:
             exit 1
           fi
 
-          # Screenshots dir must contain all 284 PNGs assembled from Goldens.
+          # Screenshots dir must contain all 299 PNGs assembled from Goldens.
           # Hit one of them through the auth gate to verify wiring end-to-end.
           # Mix of the original 01-61 range and the 62-269 batch (every Golden
           # baseline) so a regression in either half surfaces here.
-          for name in 01-welcome 11-dashboard 26-terms 35-dashboard-with-balance 46-buy-kyc-required 52-sell-unknown-error 53-buy-payment-details 61-kyc-registration-tax-tin-error 62-welcome-page-android 219-settings-security-page-default 268-phone-number-field-default 269-dashboard-insider-unlocked 270-handbook-persona-dca 275-handbook-persona-exit-1j; do
+          for name in 01-welcome 11-dashboard 26-terms 35-dashboard-with-balance 46-buy-kyc-required 52-sell-unknown-error 53-buy-payment-details 61-kyc-registration-tax-tin-error 62-welcome-page-android 219-settings-security-page-default 268-phone-number-field-default 269-dashboard-insider-unlocked 270-handbook-persona-dca 275-handbook-persona-exit-1j 276-referral-overview 282-referral-payout-row 283-referral-terms-readonly 287-kyc-registration-referral-recognized 288-transaction-history-referral-payout 289-dashboard-referral-entry-and-payout 290-kyc-registration-referral-promo; do
             code=$(curl -s -o /dev/null -w '%{http_code}' -u "${HANDBOOK_USER:-x}:${HANDBOOK_PASS:-x}" "http://127.0.0.1:8080/screenshots/${name}.png")
             # 200 (auth happens to match) or 401 (auth fails but file exists)
             # both prove the file is on disk. 404 means it was not assembled.

diff --git a/.maestro/handbook/11-dashboard.yaml b/.maestro/handbook/11-dashboard.yaml
@@ -35,3 +35,9 @@ appId: swiss.realunit.app
 - extendedWaitUntil:
     visible: 'RealUnit kaufen'
     timeout: 30000
+# Fresh handbook wallet is not a verified shareholder with 70 REALU
+# (TB Ziff. 2, analog Verkaufen). The dashboard card must stay off this
+# screen; 289-dashboard-referral-entry-and-payout is golden-only.
+- extendedWaitUntil:
+    notVisible: 'Erhalte 20 REALU pro Weiterempfehlung'
+    timeout: 10000
diff --git a/.maestro/handbook/12-settings.yaml b/.maestro/handbook/12-settings.yaml
@@ -24,3 +24,13 @@ appId: swiss.realunit.app
 - extendedWaitUntil:
     visible: 'Einstellungen'
     timeout: 30000
+# Same gate as the dashboard card. Wait for a settings tile that does not
+# depend on the referral API, then assert Empfehlungen is still absent so
+# a late summary 200 cannot have opened the tile on a fresh wallet.
+- extendedWaitUntil:
+    visible:
+      text: '.*Rechtsdokumente.*'
+    timeout: 15000
+- extendedWaitUntil:
+    notVisible: 'Empfehlungen'
+    timeout: 8000
diff --git a/.maestro/handbook/20-settings-legal-documents.yaml b/.maestro/handbook/20-settings-legal-documents.yaml
@@ -39,3 +39,20 @@ appId: swiss.realunit.app
     visible:
       text: '.*Dokumente der Aktionariat AG.*'
     timeout: 30000
+# Last tile is the 14.08 Teilnahmebedingungen (Ziff. 2–11). On a phone it can
+# sit below the fold, so scroll it into view, then restore Aktionariat so
+# flow 21 can tap that entry.
+- scrollUntilVisible:
+    element:
+      text: '.*Teilnahmebedingungen Referral-Programm.*'
+    direction: DOWN
+    timeout: 15000
+- extendedWaitUntil:
+    visible:
+      text: '.*Teilnahmebedingungen Referral-Programm.*'
+    timeout: 10000
+- scrollUntilVisible:
+    element:
+      text: '.*Dokumente der Aktionariat AG.*'
+    direction: UP
+    timeout: 15000
diff --git a/analysis_options.yaml b/analysis_options.yaml
@@ -10,3 +10,9 @@ linter:
     avoid_print: true
     prefer_const_constructors: true
     prefer_single_quotes: true
+analyzer:
+  exclude:
+    - build/**
+    - android/**
+    - ios/**
+    - macos/**
diff --git a/android/app/build.gradle b/android/app/build.gradle
@@ -14,7 +14,7 @@ if (keystorePropertiesFile.exists()) {
 android {
     namespace = "swiss.realunit.app"
     compileSdk =  36
-    ndkVersion = "29.0.13113456 rc1"
+    ndkVersion = "29.0.13113456"
 
     compileOptions {
         sourceCompatibility = JavaVersion.VERSION_1_8
@@ -64,3 +64,7 @@ android {
 flutter {
     source = "../.."
 }
+
+dependencies {
+    implementation "com.android.installreferrer:installreferrer:2.2"
+}
diff --git a/android/app/proguard-rules.pro b/android/app/proguard-rules.pro
@@ -18,4 +18,7 @@
 
 # SumSub SDK general keep rules                                     
 -keep class com.sumsub.** { *; }                                    
--dontwarn com.sumsub.**  
+-dontwarn com.sumsub.**
+
+# Play Install Referrer (invite code across a fresh Android install)
+-keep class com.android.installreferrer.** { *; }  
diff --git a/android/app/src/debug/AndroidManifest.xml b/android/app/src/debug/AndroidManifest.xml
@@ -4,4 +4,32 @@
          to allow setting breakpoints, to provide hot reload, etc.
     -->
     <uses-permission android:name="android.permission.INTERNET"/>
+    <!-- Staging App Links. Kept out of the release autoVerify filter so a
+         missing https://dev.realunit.app/.well-known/assetlinks.json cannot
+         fail Play verification for realunit.app. -->
+    <application>
+        <activity android:name=".MainActivity">
+            <intent-filter android:autoVerify="true">
+                <action android:name="android.intent.action.VIEW"/>
+                <category android:name="android.intent.category.DEFAULT"/>
+                <category android:name="android.intent.category.BROWSABLE"/>
+                <data
+                    android:scheme="https"
+                    android:host="dev.realunit.app"
+                    android:pathPrefix="/invite/"/>
+                <data
+                    android:scheme="https"
+                    android:host="dev.realunit.app"
+                    android:pathPrefix="/promo/"/>
+                <data
+                    android:scheme="https"
+                    android:host="dev.realunit.app"
+                    android:path="/invite"/>
+                <data
+                    android:scheme="https"
+                    android:host="dev.realunit.app"
+                    android:path="/promo"/>
+            </intent-filter>
+        </activity>
+    </application>
 </manifest>
diff --git a/android/app/src/main/AndroidManifest.xml b/android/app/src/main/AndroidManifest.xml
@@ -54,6 +54,52 @@
                 <category android:name="android.intent.category.BROWSABLE"/>
                 <data android:scheme="realunit-wallet"/>
             </intent-filter>
+            <!-- HTTPS App Links for invite and promo codes (verified against
+                 Digital Asset Links). autoVerify checks every host in this
+                 filter: a missing assetlinks.json on any of them fails the
+                 whole filter, so release only lists realunit.app / www.
+                 Trailing slash on pathPrefix is required: "/invite" as a
+                 prefix would also match "/invitee". Exact android:path
+                 covers bare /invite?code=. Custom-scheme filter above still
+                 covers realunit-wallet://invite|promo/{code}. Staging
+                 host lives in debug/profile manifests. -->
+            <intent-filter android:autoVerify="true">
+                <action android:name="android.intent.action.VIEW"/>
+                <category android:name="android.intent.category.DEFAULT"/>
+                <category android:name="android.intent.category.BROWSABLE"/>
+                <data
+                    android:scheme="https"
+                    android:host="realunit.app"
+                    android:pathPrefix="/invite/"/>
+                <data
+                    android:scheme="https"
+                    android:host="realunit.app"
+                    android:pathPrefix="/promo/"/>
+                <data
+                    android:scheme="https"
+                    android:host="realunit.app"
+                    android:path="/invite"/>
+                <data
+                    android:scheme="https"
+                    android:host="realunit.app"
+                    android:path="/promo"/>
+                <data
+                    android:scheme="https"
+                    android:host="www.realunit.app"
+                    android:pathPrefix="/invite/"/>
+                <data
+                    android:scheme="https"
+                    android:host="www.realunit.app"
+                    android:pathPrefix="/promo/"/>
+                <data
+                    android:scheme="https"
+                    android:host="www.realunit.app"
+                    android:path="/invite"/>
+                <data
+                    android:scheme="https"
+                    android:host="www.realunit.app"
+                    android:path="/promo"/>
+            </intent-filter>
         </activity>
         <!-- Don't delete the meta-data below.
              This is used by the Flutter tool to generate GeneratedPluginRegistrant.java -->

diff --git a/android/app/src/main/kotlin/swiss/dfx/realunit/MainActivity.kt b/android/app/src/main/kotlin/swiss/dfx/realunit/MainActivity.kt
@@ -1,5 +1,64 @@
 package swiss.realunit.app
 
+import android.os.Handler
+import android.os.Looper
+import com.android.installreferrer.api.InstallReferrerClient
+import com.android.installreferrer.api.InstallReferrerStateListener
 import io.flutter.embedding.android.FlutterFragmentActivity
+import io.flutter.embedding.engine.FlutterEngine
+import io.flutter.plugin.common.MethodChannel
 
-class MainActivity: FlutterFragmentActivity()
+class MainActivity : FlutterFragmentActivity() {
+    private val installReferrerChannel = "swiss.realunit.app/install_referrer"
+
+    override fun configureFlutterEngine(flutterEngine: FlutterEngine) {
+        super.configureFlutterEngine(flutterEngine)
+        MethodChannel(flutterEngine.dartExecutor.binaryMessenger, installReferrerChannel)
+            .setMethodCallHandler { call, result ->
+                if (call.method != "readInstallReferrer") {
+                    result.notImplemented()
+                    return@setMethodCallHandler
+                }
+                readInstallReferrer(result)
+            }
+    }
+
+    private fun readInstallReferrer(result: MethodChannel.Result) {
+        val client = InstallReferrerClient.newBuilder(this).build()
+        val main = Handler(Looper.getMainLooper())
+        var replied = false
+
+        fun reply(value: String?) {
+            if (replied) return
+            replied = true
+            result.success(value)
+            try {
+                client.endConnection()
+            } catch (_: Exception) {
+            }
+        }
+
+        main.postDelayed({ reply(null) }, 3000)
+        try {
+            client.startConnection(
+                object : InstallReferrerStateListener {
+                    override fun onInstallReferrerSetupFinished(responseCode: Int) {
+                        if (responseCode != InstallReferrerClient.InstallReferrerResponse.OK) {
+                            reply(null)
+                            return
+                        }
+                        try {
+                            reply(client.installReferrer.installReferrer)
+                        } catch (_: Exception) {
+                            reply(null)
+                        }
+                    }
+
+                    override fun onInstallReferrerServiceDisconnected() {}
+                },
+            )
+        } catch (_: Exception) {
+            reply(null)
+        }
+    }
+}
diff --git a/android/app/src/profile/AndroidManifest.xml b/android/app/src/profile/AndroidManifest.xml
@@ -4,4 +4,29 @@
          to allow setting breakpoints, to provide hot reload, etc.
     -->
     <uses-permission android:name="android.permission.INTERNET"/>
+    <application>
+        <activity android:name=".MainActivity">
+            <intent-filter android:autoVerify="true">
+                <action android:name="android.intent.action.VIEW"/>
+                <category android:name="android.intent.category.DEFAULT"/>
+                <category android:name="android.intent.category.BROWSABLE"/>
+                <data
+                    android:scheme="https"
+                    android:host="dev.realunit.app"
+                    android:pathPrefix="/invite/"/>
+                <data
+                    android:scheme="https"
+                    android:host="dev.realunit.app"
+                    android:pathPrefix="/promo/"/>
+                <data
+                    android:scheme="https"
+                    android:host="dev.realunit.app"
+                    android:path="/invite"/>
+                <data
+                    android:scheme="https"
+                    android:host="dev.realunit.app"
+                    android:path="/promo"/>
+            </intent-filter>
+        </activity>
+    </application>
 </manifest>
diff --git a/android/gradle.properties b/android/gradle.properties
@@ -1,3 +1,7 @@
 org.gradle.jvmargs=-Xmx4G -XX:MaxMetaspaceSize=2G -XX:+HeapDumpOnOutOfMemoryError
 android.useAndroidX=true
 android.enableJetifier=true
+# This builtInKotlin flag was added automatically by Flutter migrator
+android.builtInKotlin=false
+# This newDsl flag was added automatically by Flutter migrator
+android.newDsl=false
diff --git a/android/gradle/wrapper/gradle-wrapper.properties b/android/gradle/wrapper/gradle-wrapper.properties
@@ -2,4 +2,4 @@ distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.13-all.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.14-all.zip
diff --git a/assets/languages/strings_de.arb b/assets/languages/strings_de.arb
@@ -267,6 +267,55 @@
   "receiver": "Empfänger",
   "recoveryWords": "Wiederherstellungs-Wörter",
   "recoveryWordsInvalid": "Wiederherstellungs-Wörter ungültig",
+  "referralAlreadyBound": "Du hast bereits einen Einladungs- oder Promo-Code eingelöst.",
+  "referralAlreadyRegistered": "Diese Einladung gilt nur für neue Kundinnen und Kunden.",
+  "referralChfAtSharePrice": "≈ ${chf} zum ${label}",
+  "referralCodeChecking": "Code wird geprüft…",
+  "referralCodeDescription": "Optional. Über den Einladungslink wird der Code automatisch übernommen; hier kannst du ihn auch manuell eingeben.",
+  "referralCodeHeading": "Hast du einen Empfehlungscode?",
+  "referralCodeHint": "Einladungs- oder Promo-Code",
+  "referralCodeInvalid": "Dieser Code ist ungültig oder abgelaufen.",
+  "referralCodeInvalidTitle": "Link ungültig oder abgelaufen",
+  "referralCodeOptional": "Einladungs- oder Promo-Code (optional)",
+  "referralCodeSpent": "Dieser Einladungs- oder Promo-Code wurde bereits verwendet.",
+  "referralCodeSpentTitle": "Code bereits eingelöst",
+  "referralCodeUnavailable": "Wir konnten den Code gerade nicht prüfen. Bitte versuche es später erneut.",
+  "referralCopied": "Kopiert",
+  "referralCopyInviteLink": "Einladungslink kopieren",
+  "referralCreateInvite": "Einladungslink erstellen",
+  "referralCreateInviteDescription": "Gib den Vornamen der Person ein, die du einladen möchtest.",
+  "referralCreating": "Einladung wird erstellt…",
+  "referralGuestName": "Name der eingeladenen Person",
+  "referralGuestNameRequired": "Bitte den Vornamen der eingeladenen Person eingeben.",
+  "referralInviteRecognized": "Einladung von ${inviter} erkannt. ${inviter} erhält seine Prämie automatisch, sobald du verifiziert bist und deinen ersten Kauf abgeschlossen hast.",
+  "referralInvitesLoading": "Offene Einladungen werden geladen…",
+  "referralInviteUrlLabel": "Persönlicher Einladungslink",
+  "referralLoading": "Empfehlungen werden geladen…",
+  "referralNotEligible": "Das Empfehlungsprogramm steht verifizierten Aktionären mit dem erforderlichen Bestand zur Verfügung.",
+  "referralOpenInvitesExpire": "Offene Einladungen verfallen nach 3 Monaten.",
+  "referralOverviewHint": "20 REALU pro Weiterempfehlung, sobald der erste Kauf erfolgreich abgewickelt ist.",
+  "referralOverviewTitle": "Deine Empfehlungen",
+  "referralPayout": "Empfehlungsprämie",
+  "referralPayoutChf": "CHF ${chf} zum Zeitpunkt der Gutschrift",
+  "referralPromoTitle": "Aktion",
+  "referralQuarterCap": "In diesem Quartal sind keine weiteren Prämien möglich.",
+  "referrals": "Empfehlungen",
+  "referralSelfReferral": "Du kannst deine eigene Einladung nicht einlösen.",
+  "referralShareInviteLink": "Einladungslink versenden",
+  "referralSharePrice": "Aktienkurs",
+  "referralShareText": "Hey ${guestName}, ${hostName} lädt dich ein zu RealUnit: ${url}",
+  "referralShareTextNoName": "${hostName} lädt dich ein zu RealUnit: ${url}",
+  "referralsSubtitle": "Erhalte 20 REALU pro Weiterempfehlung",
+  "referralStatusCredited": "Gutgeschrieben",
+  "referralStatusOpen": "Offen",
+  "referralTermsAccepting": "Teilnahmebedingungen werden akzeptiert…",
+  "referralTermsCheckbox": "Ich habe die Teilnahmebedingungen gelesen und akzeptiert",
+  "referralTermsLoading": "Teilnahmebedingungen werden geladen…",
+  "referralTermsRequired": "Bitte zuerst die Teilnahmebedingungen akzeptieren.",
+  "referralTermsTitle": "Teilnahmebedingungen Referral-Programm",
+  "referralTotalReceived": "Insgesamt erhalten",
+  "referralYourInvite": "Deine Einladung",
+  "referralYourInviteFor": "Deine Einladung für ${guestName}",
   "refresh": "Aktualisieren",
   "registerAccountType": "Kontotyp",
   "registerCitizenship": "Staatsangehörigkeit",