@sendoracloud/sdk-react-native 0.18.9 → 0.20.0

package/dist/index.cjs

@@ -236,6 +236,15 @@ var Auth = class {
     this.accessExpiresAt = 0;
     this.inflight = Promise.resolve();
     this.refreshInflight = null;
+    /**
+     * Proactive refresh (s58.72). Fires when access-token age crosses
+     * ~80% of TTL. Pairs with the AppState foreground listener so a
+     * backgrounded app coming back to active state immediately runs
+     * a tick — much better UX than waiting 60s for the next interval.
+     * Stopped on signOut() / wipeLocalIdentity().
+     */
+    this.proactiveRefreshTimer = null;
+    this.proactiveRefreshAppStateUnsub = null;
     this.hooks = hooks;
     this.readyPromise = new Promise((res) => {
       this.resolveReady = res;
@@ -784,12 +793,25 @@ var Auth = class {
    */
   async refreshAccessToken() {
     if (this.refreshInflight) return this.refreshInflight;
-    const refresh = this.hooks.storage.get(REFRESH_KEY);
-    if (!refresh) return null;
+    const refreshSnapshot = this.hooks.storage.get(REFRESH_KEY);
+    if (!refreshSnapshot) return null;
     this.refreshInflight = (async () => {
       try {
+        const current = this.hooks.storage.get(REFRESH_KEY);
+        if (current && current !== refreshSnapshot) {
+          const freshAccess = this.hooks.storage.get(TOKEN_KEY);
+          const freshExpiresStr = this.hooks.storage.get(TOKEN_EXPIRES_KEY);
+          if (freshAccess && freshExpiresStr) {
+            const freshExpires = Number(freshExpiresStr);
+            if (Number.isFinite(freshExpires) && freshExpires > Date.now()) {
+              this.accessToken = freshAccess;
+              this.accessExpiresAt = freshExpires;
+              return freshAccess;
+            }
+          }
+        }
         const data = await this.callAuth("/api/v1/auth-service/token/refresh", {
-          refreshToken: refresh
+          refreshToken: current ?? refreshSnapshot
         });
         this.accessToken = data.tokens.accessToken;
         this.accessExpiresAt = Date.now() + data.tokens.expiresIn * 1e3;
@@ -808,6 +830,46 @@ var Auth = class {
     })();
     return this.refreshInflight;
   }
+  startProactiveRefreshCron() {
+    if (this.proactiveRefreshTimer) return;
+    const PROACTIVE_TARGET_PCT = 0.8;
+    const TICK_MS = 6e4;
+    const JITTER_MS = 3e4;
+    const tick = async () => {
+      if (!this.accessToken || !this.accessExpiresAt) return;
+      const now = Date.now();
+      const lifetimeMs = this.accessExpiresAt - now;
+      if (lifetimeMs <= 0) return;
+      const guessOriginalMs = Math.max(lifetimeMs, 5 * 6e4);
+      const fireWhenRemainingMs = guessOriginalMs * (1 - PROACTIVE_TARGET_PCT) + (Math.random() * JITTER_MS * 2 - JITTER_MS);
+      if (lifetimeMs <= fireWhenRemainingMs) {
+        await this.refreshAccessToken();
+      }
+    };
+    this.proactiveRefreshTimer = setInterval(() => {
+      void tick();
+    }, TICK_MS);
+    try {
+      const RN = require("react-native");
+      const subscription = RN.AppState?.addEventListener?.("change", (state) => {
+        if (state === "active") void tick();
+      });
+      if (subscription) {
+        this.proactiveRefreshAppStateUnsub = () => subscription.remove();
+      }
+    } catch {
+    }
+  }
+  stopProactiveRefreshCron() {
+    if (this.proactiveRefreshTimer) {
+      clearInterval(this.proactiveRefreshTimer);
+      this.proactiveRefreshTimer = null;
+    }
+    if (this.proactiveRefreshAppStateUnsub) {
+      this.proactiveRefreshAppStateUnsub();
+      this.proactiveRefreshAppStateUnsub = null;
+    }
+  }
   /**
    * Returns the currently-stored refresh token (or null when signed out).
    * Primary use: capture the anonymous refresh token BEFORE calling
@@ -909,6 +971,7 @@ var Auth = class {
     this.hooks.storage.set(TOKEN_EXPIRES_KEY, String(this.accessExpiresAt));
     this.hooks.storage.set(REFRESH_KEY, data.tokens.refreshToken);
     this.hooks.onIdentityChange(data.user.id);
+    this.startProactiveRefreshCron();
   }
   async wipeLocalIdentity() {
     this.user = null;
@@ -918,6 +981,7 @@ var Auth = class {
     this.hooks.storage.remove(TOKEN_KEY);
     this.hooks.storage.remove(TOKEN_EXPIRES_KEY);
     this.hooks.storage.remove(REFRESH_KEY);
+    this.stopProactiveRefreshCron();
     await this.hooks.onAnonymousWipe();
   }
 };
@@ -1858,6 +1922,14 @@ var SendoraSDK = class {
    * `sendora.push.registerToken(...)` works consistently across all 5 SDKs.
    * Backed by the same registerPushToken() implementation; kept top-level
    * too for backwards compatibility with the s47 release.
+   *
+   * Tier 3 (s58.70): added `liveActivities.startToken()` and
+   * `geofences.{list,recordEvent}()`. These are JS-side shims around
+   * the backend wire calls — the native bridge work (ActivityKit on
+   * iOS, CoreLocation geofencing, Android NotificationCompat + Geo
+   * APIs) still lives in your app code. Once your native side has
+   * the activity push token / geofence trigger in hand, hand it to
+   * the SDK and we'll persist + dispatch server-side.
    */
   get push() {
     const self = this;
@@ -1872,6 +1944,88 @@ var SendoraSDK = class {
           "/push/track-open",
           body
         );
+      },
+      liveActivities: {
+        /**
+         * Report a freshly-started iOS Live Activity (or Android Live
+         * Update on Android 14+) push token to Sendora so server-side
+         * `PATCH /push/live-activities/:id/update` calls can dispatch
+         * via APNs (iOS) or FCM data-only (Android).
+         *
+         * Host app calls this once per Activity lifecycle, right
+         * after `Activity.pushTokenUpdates` (iOS) or your Android
+         * NotificationCompat setup hands you the push token.
+         */
+        startToken: async (input) => {
+          if (!self.config) throw new Error("[sendoracloud] init() must complete before push.liveActivities.startToken().");
+          const res = await post(
+            { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+            "/push/live-activities/start-token",
+            {
+              pushToken: input.pushToken,
+              activityType: input.activityType,
+              platform: input.platform ?? "ios",
+              externalId: input.externalId,
+              userId: input.userId,
+              attributes: input.attributes ?? {},
+              contentState: input.contentState ?? {},
+              bundleId: input.bundleId
+            }
+          );
+          if (!res || !res.ok) {
+            throw new Error(`[sendoracloud] live-activity start-token failed (HTTP ${res?.status ?? "network"}).`);
+          }
+          const parsed = await res.json();
+          const data = parsed?.data;
+          if (!data?.id) throw new Error("[sendoracloud] live-activity start-token: server returned no id.");
+          return { id: data.id, status: data.status ?? "active" };
+        }
+      },
+      geofences: {
+        /**
+         * Fetch the enabled geofences for this device. The SDK doesn't
+         * register them with the OS — that's app-side native work
+         * (CLLocationManager.startMonitoring on iOS, GeofencingClient
+         * on Android). Sort order is server-controlled by priority
+         * asc so the caller can clamp to the OS cap (iOS 20, Android
+         * 100) by truncating the list.
+         */
+        list: async () => {
+          if (!self.config) throw new Error("[sendoracloud] init() must complete before push.geofences.list().");
+          const res = await getJson(
+            { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+            "/push/geofences/list-for-device"
+          );
+          if (!res || !res.ok) {
+            throw new Error(`[sendoracloud] geofences list failed (HTTP ${res?.status ?? "network"}).`);
+          }
+          const parsed = await res.json();
+          return parsed?.data ?? [];
+        },
+        /**
+         * Report a geofence enter / exit / dwell event. Backend writes
+         * a `geofence.<kind>` event row + fires any workflows triggered
+         * on that geofence id. Call from the native handler that
+         * receives the OS region notification.
+         */
+        recordEvent: async (input) => {
+          if (!self.config) throw new Error("[sendoracloud] init() must complete before push.geofences.recordEvent().");
+          const res = await post(
+            { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+            "/push/geofences/event",
+            {
+              geofenceId: input.geofenceId,
+              kind: input.kind,
+              lat: input.lat,
+              lng: input.lng,
+              accuracyMeters: input.accuracyMeters,
+              dwellSeconds: input.dwellSeconds
+            }
+          );
+          if (!res || !res.ok) {
+            throw new Error(`[sendoracloud] geofence event failed (HTTP ${res?.status ?? "network"}).`);
+          }
+        }
       }
     };
   }

package/dist/index.d.cts

@@ -312,6 +312,17 @@ declare class Auth {
      * surface NOT_SIGNED_IN to the host app instead of looping.
      */
     private refreshAccessToken;
+    /**
+     * Proactive refresh (s58.72). Fires when access-token age crosses
+     * ~80% of TTL. Pairs with the AppState foreground listener so a
+     * backgrounded app coming back to active state immediately runs
+     * a tick — much better UX than waiting 60s for the next interval.
+     * Stopped on signOut() / wipeLocalIdentity().
+     */
+    private proactiveRefreshTimer;
+    private proactiveRefreshAppStateUnsub;
+    private startProactiveRefreshCron;
+    private stopProactiveRefreshCron;
     /**
      * Returns the currently-stored refresh token (or null when signed out).
      * Primary use: capture the anonymous refresh token BEFORE calling
@@ -759,10 +770,54 @@ declare class SendoraSDK {
      * `sendora.push.registerToken(...)` works consistently across all 5 SDKs.
      * Backed by the same registerPushToken() implementation; kept top-level
      * too for backwards compatibility with the s47 release.
+     *
+     * Tier 3 (s58.70): added `liveActivities.startToken()` and
+     * `geofences.{list,recordEvent}()`. These are JS-side shims around
+     * the backend wire calls — the native bridge work (ActivityKit on
+     * iOS, CoreLocation geofencing, Android NotificationCompat + Geo
+     * APIs) still lives in your app code. Once your native side has
+     * the activity push token / geofence trigger in hand, hand it to
+     * the SDK and we'll persist + dispatch server-side.
      */
     get push(): {
         registerToken: (reg: PushTokenRegistration) => Promise<PushTokenReceipt>;
         trackOpen: (sendId: string, clickAction?: string) => Promise<void>;
+        liveActivities: {
+            startToken: (input: {
+                pushToken: string;
+                activityType: string;
+                platform?: "ios" | "android";
+                externalId?: string;
+                userId?: string;
+                attributes?: Record<string, unknown>;
+                contentState?: Record<string, unknown>;
+                bundleId?: string;
+            }) => Promise<{
+                id: string;
+                status: string;
+            }>;
+        };
+        geofences: {
+            list: () => Promise<Array<{
+                id: string;
+                name: string;
+                lat: number;
+                lng: number;
+                radiusMeters: number;
+                priority: number;
+                enabled: boolean;
+                triggerOn: string[];
+                properties?: Record<string, unknown>;
+            }>>;
+            recordEvent: (input: {
+                geofenceId: string;
+                kind: "enter" | "exit" | "dwell";
+                lat?: number;
+                lng?: number;
+                accuracyMeters?: number;
+                dwellSeconds?: number;
+            }) => Promise<void>;
+        };
     };
     /**
      * Attribution namespace — mobile install + deferred deep-link reporting.

package/dist/index.d.ts

@@ -312,6 +312,17 @@ declare class Auth {
      * surface NOT_SIGNED_IN to the host app instead of looping.
      */
     private refreshAccessToken;
+    /**
+     * Proactive refresh (s58.72). Fires when access-token age crosses
+     * ~80% of TTL. Pairs with the AppState foreground listener so a
+     * backgrounded app coming back to active state immediately runs
+     * a tick — much better UX than waiting 60s for the next interval.
+     * Stopped on signOut() / wipeLocalIdentity().
+     */
+    private proactiveRefreshTimer;
+    private proactiveRefreshAppStateUnsub;
+    private startProactiveRefreshCron;
+    private stopProactiveRefreshCron;
     /**
      * Returns the currently-stored refresh token (or null when signed out).
      * Primary use: capture the anonymous refresh token BEFORE calling
@@ -759,10 +770,54 @@ declare class SendoraSDK {
      * `sendora.push.registerToken(...)` works consistently across all 5 SDKs.
      * Backed by the same registerPushToken() implementation; kept top-level
      * too for backwards compatibility with the s47 release.
+     *
+     * Tier 3 (s58.70): added `liveActivities.startToken()` and
+     * `geofences.{list,recordEvent}()`. These are JS-side shims around
+     * the backend wire calls — the native bridge work (ActivityKit on
+     * iOS, CoreLocation geofencing, Android NotificationCompat + Geo
+     * APIs) still lives in your app code. Once your native side has
+     * the activity push token / geofence trigger in hand, hand it to
+     * the SDK and we'll persist + dispatch server-side.
      */
     get push(): {
         registerToken: (reg: PushTokenRegistration) => Promise<PushTokenReceipt>;
         trackOpen: (sendId: string, clickAction?: string) => Promise<void>;
+        liveActivities: {
+            startToken: (input: {
+                pushToken: string;
+                activityType: string;
+                platform?: "ios" | "android";
+                externalId?: string;
+                userId?: string;
+                attributes?: Record<string, unknown>;
+                contentState?: Record<string, unknown>;
+                bundleId?: string;
+            }) => Promise<{
+                id: string;
+                status: string;
+            }>;
+        };
+        geofences: {
+            list: () => Promise<Array<{
+                id: string;
+                name: string;
+                lat: number;
+                lng: number;
+                radiusMeters: number;
+                priority: number;
+                enabled: boolean;
+                triggerOn: string[];
+                properties?: Record<string, unknown>;
+            }>>;
+            recordEvent: (input: {
+                geofenceId: string;
+                kind: "enter" | "exit" | "dwell";
+                lat?: number;
+                lng?: number;
+                accuracyMeters?: number;
+                dwellSeconds?: number;
+            }) => Promise<void>;
+        };
     };
     /**
      * Attribution namespace — mobile install + deferred deep-link reporting.

package/dist/index.js

@@ -1,3 +1,10 @@
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+
 // src/index.ts
 import "react-native-get-random-values";
 
@@ -193,6 +200,15 @@ var Auth = class {
     this.accessExpiresAt = 0;
     this.inflight = Promise.resolve();
     this.refreshInflight = null;
+    /**
+     * Proactive refresh (s58.72). Fires when access-token age crosses
+     * ~80% of TTL. Pairs with the AppState foreground listener so a
+     * backgrounded app coming back to active state immediately runs
+     * a tick — much better UX than waiting 60s for the next interval.
+     * Stopped on signOut() / wipeLocalIdentity().
+     */
+    this.proactiveRefreshTimer = null;
+    this.proactiveRefreshAppStateUnsub = null;
     this.hooks = hooks;
     this.readyPromise = new Promise((res) => {
       this.resolveReady = res;
@@ -741,12 +757,25 @@ var Auth = class {
    */
   async refreshAccessToken() {
     if (this.refreshInflight) return this.refreshInflight;
-    const refresh = this.hooks.storage.get(REFRESH_KEY);
-    if (!refresh) return null;
+    const refreshSnapshot = this.hooks.storage.get(REFRESH_KEY);
+    if (!refreshSnapshot) return null;
     this.refreshInflight = (async () => {
       try {
+        const current = this.hooks.storage.get(REFRESH_KEY);
+        if (current && current !== refreshSnapshot) {
+          const freshAccess = this.hooks.storage.get(TOKEN_KEY);
+          const freshExpiresStr = this.hooks.storage.get(TOKEN_EXPIRES_KEY);
+          if (freshAccess && freshExpiresStr) {
+            const freshExpires = Number(freshExpiresStr);
+            if (Number.isFinite(freshExpires) && freshExpires > Date.now()) {
+              this.accessToken = freshAccess;
+              this.accessExpiresAt = freshExpires;
+              return freshAccess;
+            }
+          }
+        }
         const data = await this.callAuth("/api/v1/auth-service/token/refresh", {
-          refreshToken: refresh
+          refreshToken: current ?? refreshSnapshot
         });
         this.accessToken = data.tokens.accessToken;
         this.accessExpiresAt = Date.now() + data.tokens.expiresIn * 1e3;
@@ -765,6 +794,46 @@ var Auth = class {
     })();
     return this.refreshInflight;
   }
+  startProactiveRefreshCron() {
+    if (this.proactiveRefreshTimer) return;
+    const PROACTIVE_TARGET_PCT = 0.8;
+    const TICK_MS = 6e4;
+    const JITTER_MS = 3e4;
+    const tick = async () => {
+      if (!this.accessToken || !this.accessExpiresAt) return;
+      const now = Date.now();
+      const lifetimeMs = this.accessExpiresAt - now;
+      if (lifetimeMs <= 0) return;
+      const guessOriginalMs = Math.max(lifetimeMs, 5 * 6e4);
+      const fireWhenRemainingMs = guessOriginalMs * (1 - PROACTIVE_TARGET_PCT) + (Math.random() * JITTER_MS * 2 - JITTER_MS);
+      if (lifetimeMs <= fireWhenRemainingMs) {
+        await this.refreshAccessToken();
+      }
+    };
+    this.proactiveRefreshTimer = setInterval(() => {
+      void tick();
+    }, TICK_MS);
+    try {
+      const RN = __require("react-native");
+      const subscription = RN.AppState?.addEventListener?.("change", (state) => {
+        if (state === "active") void tick();
+      });
+      if (subscription) {
+        this.proactiveRefreshAppStateUnsub = () => subscription.remove();
+      }
+    } catch {
+    }
+  }
+  stopProactiveRefreshCron() {
+    if (this.proactiveRefreshTimer) {
+      clearInterval(this.proactiveRefreshTimer);
+      this.proactiveRefreshTimer = null;
+    }
+    if (this.proactiveRefreshAppStateUnsub) {
+      this.proactiveRefreshAppStateUnsub();
+      this.proactiveRefreshAppStateUnsub = null;
+    }
+  }
   /**
    * Returns the currently-stored refresh token (or null when signed out).
    * Primary use: capture the anonymous refresh token BEFORE calling
@@ -866,6 +935,7 @@ var Auth = class {
     this.hooks.storage.set(TOKEN_EXPIRES_KEY, String(this.accessExpiresAt));
     this.hooks.storage.set(REFRESH_KEY, data.tokens.refreshToken);
     this.hooks.onIdentityChange(data.user.id);
+    this.startProactiveRefreshCron();
   }
   async wipeLocalIdentity() {
     this.user = null;
@@ -875,6 +945,7 @@ var Auth = class {
     this.hooks.storage.remove(TOKEN_KEY);
     this.hooks.storage.remove(TOKEN_EXPIRES_KEY);
     this.hooks.storage.remove(REFRESH_KEY);
+    this.stopProactiveRefreshCron();
     await this.hooks.onAnonymousWipe();
   }
 };
@@ -1820,6 +1891,14 @@ var SendoraSDK = class {
    * `sendora.push.registerToken(...)` works consistently across all 5 SDKs.
    * Backed by the same registerPushToken() implementation; kept top-level
    * too for backwards compatibility with the s47 release.
+   *
+   * Tier 3 (s58.70): added `liveActivities.startToken()` and
+   * `geofences.{list,recordEvent}()`. These are JS-side shims around
+   * the backend wire calls — the native bridge work (ActivityKit on
+   * iOS, CoreLocation geofencing, Android NotificationCompat + Geo
+   * APIs) still lives in your app code. Once your native side has
+   * the activity push token / geofence trigger in hand, hand it to
+   * the SDK and we'll persist + dispatch server-side.
    */
   get push() {
     const self = this;
@@ -1834,6 +1913,88 @@ var SendoraSDK = class {
           "/push/track-open",
           body
         );
+      },
+      liveActivities: {
+        /**
+         * Report a freshly-started iOS Live Activity (or Android Live
+         * Update on Android 14+) push token to Sendora so server-side
+         * `PATCH /push/live-activities/:id/update` calls can dispatch
+         * via APNs (iOS) or FCM data-only (Android).
+         *
+         * Host app calls this once per Activity lifecycle, right
+         * after `Activity.pushTokenUpdates` (iOS) or your Android
+         * NotificationCompat setup hands you the push token.
+         */
+        startToken: async (input) => {
+          if (!self.config) throw new Error("[sendoracloud] init() must complete before push.liveActivities.startToken().");
+          const res = await post(
+            { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+            "/push/live-activities/start-token",
+            {
+              pushToken: input.pushToken,
+              activityType: input.activityType,
+              platform: input.platform ?? "ios",
+              externalId: input.externalId,
+              userId: input.userId,
+              attributes: input.attributes ?? {},
+              contentState: input.contentState ?? {},
+              bundleId: input.bundleId
+            }
+          );
+          if (!res || !res.ok) {
+            throw new Error(`[sendoracloud] live-activity start-token failed (HTTP ${res?.status ?? "network"}).`);
+          }
+          const parsed = await res.json();
+          const data = parsed?.data;
+          if (!data?.id) throw new Error("[sendoracloud] live-activity start-token: server returned no id.");
+          return { id: data.id, status: data.status ?? "active" };
+        }
+      },
+      geofences: {
+        /**
+         * Fetch the enabled geofences for this device. The SDK doesn't
+         * register them with the OS — that's app-side native work
+         * (CLLocationManager.startMonitoring on iOS, GeofencingClient
+         * on Android). Sort order is server-controlled by priority
+         * asc so the caller can clamp to the OS cap (iOS 20, Android
+         * 100) by truncating the list.
+         */
+        list: async () => {
+          if (!self.config) throw new Error("[sendoracloud] init() must complete before push.geofences.list().");
+          const res = await getJson(
+            { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+            "/push/geofences/list-for-device"
+          );
+          if (!res || !res.ok) {
+            throw new Error(`[sendoracloud] geofences list failed (HTTP ${res?.status ?? "network"}).`);
+          }
+          const parsed = await res.json();
+          return parsed?.data ?? [];
+        },
+        /**
+         * Report a geofence enter / exit / dwell event. Backend writes
+         * a `geofence.<kind>` event row + fires any workflows triggered
+         * on that geofence id. Call from the native handler that
+         * receives the OS region notification.
+         */
+        recordEvent: async (input) => {
+          if (!self.config) throw new Error("[sendoracloud] init() must complete before push.geofences.recordEvent().");
+          const res = await post(
+            { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+            "/push/geofences/event",
+            {
+              geofenceId: input.geofenceId,
+              kind: input.kind,
+              lat: input.lat,
+              lng: input.lng,
+              accuracyMeters: input.accuracyMeters,
+              dwellSeconds: input.dwellSeconds
+            }
+          );
+          if (!res || !res.ok) {
+            throw new Error(`[sendoracloud] geofence event failed (HTTP ${res?.status ?? "network"}).`);
+          }
+        }
       }
     };
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "0.18.9",
+  "version": "0.20.0",
   "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
   "type": "module",
   "main": "./dist/index.cjs",