@sendoracloud/sdk-react-native 1.0.3 → 1.0.5

package/dist/index.cjs

@@ -237,6 +237,8 @@ var Auth = class {
     this.accessExpiresAt = 0;
     this.inflight = Promise.resolve();
     this.refreshInflight = null;
+    this.takeoverListeners = /* @__PURE__ */ new Set();
+    this.lastTakeover = null;
     /**
      * Proactive refresh (s58.72). Fires when access-token age crosses
      * ~80% of TTL. Pairs with the AppState foreground listener so a
@@ -299,6 +301,47 @@ var Auth = class {
   getCurrentUser() {
     return this.user;
   }
+  /**
+   * Subscribe to device-takeover events (s58.111+). Backend retires
+   * the anonymous user_id whenever a previously-anon device signs in
+   * to an identified account. Use this to clean up any local mirror
+   * keyed by the anonymous id — your own users table, an analytics
+   * cache, an audience filter — without needing a webhook receiver.
+   *
+   * Listener is invoked from `signIn`, `loginSocial`, `verifyMagicLink`,
+   * `verifyEmailOtp`, `passkey authentication`, and SSO completion
+   * (via `consumeSsoFragment`). Returns an unsubscribe function.
+   *
+   * Listeners are best-effort: errors thrown inside them are swallowed
+   * + logged in dev mode. Auth state never depends on listener success.
+   */
+  onDeviceTakeover(listener) {
+    this.takeoverListeners.add(listener);
+    return () => {
+      this.takeoverListeners.delete(listener);
+    };
+  }
+  /**
+   * Inspect the most recent device-takeover event observed by the
+   * SDK. Cleared on signOut. Returns null when no takeover has
+   * happened during this session — useful for late subscribers or
+   * post-sign-in side-effects (e.g. app-launch hydrate).
+   */
+  getLastDeviceTakeover() {
+    return this.lastTakeover;
+  }
+  /** Internal — fan out to subscribers + cache the latest. */
+  fireDeviceTakeover(retiredAnonUserId, identifiedUserId) {
+    const evt = { retiredAnonUserId, identifiedUserId, at: /* @__PURE__ */ new Date() };
+    this.lastTakeover = evt;
+    for (const fn of this.takeoverListeners) {
+      try {
+        fn(evt);
+      } catch (err) {
+        if (this.hooks.debug) console.warn("[sendoracloud] onDeviceTakeover listener threw", err);
+      }
+    }
+  }
   /**
    * Returns a non-expired access token or null. If the cached token
    * is expired but a refresh token exists, transparently refreshes
@@ -684,10 +727,13 @@ var Auth = class {
    * call `consumeSsoFragment(url)` on the captured URL.
    */
   async startSso(returnTo) {
+    const prevAnonRefreshToken = this.readPrevAnonRefreshToken();
+    const body = { returnTo };
+    if (prevAnonRefreshToken) body.prevAnonRefreshToken = prevAnonRefreshToken;
     const res = await post(
       { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
       "/api/v1/auth-service/sso/oidc/start",
-      { returnTo }
+      body
     );
     if (!res || !res.ok) throw new AuthError("SSO_START_FAILED", `HTTP ${res?.status ?? "network"}`);
     const parsed = await res.json();
@@ -707,10 +753,13 @@ var Auth = class {
    * and SAML fragments transparently.
    */
   async startSaml(returnTo) {
+    const prevAnonRefreshToken = this.readPrevAnonRefreshToken();
+    const body = { returnTo };
+    if (prevAnonRefreshToken) body.prevAnonRefreshToken = prevAnonRefreshToken;
     const res = await post(
       { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
       "/api/v1/auth-service/sso/saml/start",
-      { returnTo }
+      body
     );
     if (!res || !res.ok) throw new AuthError("SAML_START_FAILED", `HTTP ${res?.status ?? "network"}`);
     const parsed = await res.json();
@@ -735,6 +784,7 @@ var Auth = class {
       if (err) throw new AuthError("SSO_FAILED", decodeURIComponent(err));
       const refresh = params.get("sendora_oidc_token") ?? params.get("sendora_saml_token");
       if (!refresh) throw new AuthError("SSO_NO_TOKEN", "Callback URL has no SSO token");
+      const retiredAnonUserId = params.get("sendora_retired_anon");
       const res = await post(
         { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
         "/api/v1/auth-service/token/refresh",
@@ -763,7 +813,8 @@ var Auth = class {
           refreshToken: newRefresh,
           expiresIn,
           tokenType: "Bearer"
-        }
+        },
+        ...retiredAnonUserId ? { retiredAnonUserId } : {}
       });
       return user;
     });
@@ -1004,11 +1055,15 @@ var Auth = class {
     this.hooks.storage.set(REFRESH_KEY, data.tokens.refreshToken);
     this.hooks.onIdentityChange(data.user.id);
     this.startProactiveRefreshCron();
+    if (data.retiredAnonUserId) {
+      this.fireDeviceTakeover(data.retiredAnonUserId, data.user.id);
+    }
   }
   async wipeLocalIdentity() {
     this.user = null;
     this.accessToken = null;
     this.accessExpiresAt = 0;
+    this.lastTakeover = null;
     this.hooks.storage.remove(USER_KEY);
     this.hooks.storage.remove(TOKEN_KEY);
     this.hooks.storage.remove(TOKEN_EXPIRES_KEY);

package/dist/index.d.cts

@@ -99,6 +99,19 @@ interface AuthHooks {
     publicKey: string;
     debug: boolean;
 }
+/**
+ * Detail handed to onDeviceTakeover subscribers. Fires once per
+ * signIn / loginSocial / verifyMagicLink / verifyEmailOtp /
+ * passkey-auth / SSO completion that retires an anonymous row.
+ */
+interface DeviceTakeoverEvent {
+    /** The anonymous user_id Sendora just hard-deleted. */
+    retiredAnonUserId: string;
+    /** The identified user_id that took the device over. */
+    identifiedUserId: string;
+    /** Local clock at the time the SDK observed the event. */
+    at: Date;
+}
 declare class Auth {
     private hooks;
     private user;
@@ -106,6 +119,8 @@ declare class Auth {
     private accessExpiresAt;
     private inflight;
     private refreshInflight;
+    private takeoverListeners;
+    private lastTakeover;
     /**
      * Resolves when the parent SDK has finished its async init() —
      * AsyncStorage hydrated + auth.hydrate() restored the cached
@@ -142,6 +157,30 @@ declare class Auth {
      */
     hydrate(): void;
     getCurrentUser(): AuthUser | null;
+    /**
+     * Subscribe to device-takeover events (s58.111+). Backend retires
+     * the anonymous user_id whenever a previously-anon device signs in
+     * to an identified account. Use this to clean up any local mirror
+     * keyed by the anonymous id — your own users table, an analytics
+     * cache, an audience filter — without needing a webhook receiver.
+     *
+     * Listener is invoked from `signIn`, `loginSocial`, `verifyMagicLink`,
+     * `verifyEmailOtp`, `passkey authentication`, and SSO completion
+     * (via `consumeSsoFragment`). Returns an unsubscribe function.
+     *
+     * Listeners are best-effort: errors thrown inside them are swallowed
+     * + logged in dev mode. Auth state never depends on listener success.
+     */
+    onDeviceTakeover(listener: (evt: DeviceTakeoverEvent) => void): () => void;
+    /**
+     * Inspect the most recent device-takeover event observed by the
+     * SDK. Cleared on signOut. Returns null when no takeover has
+     * happened during this session — useful for late subscribers or
+     * post-sign-in side-effects (e.g. app-launch hydrate).
+     */
+    getLastDeviceTakeover(): DeviceTakeoverEvent | null;
+    /** Internal — fan out to subscribers + cache the latest. */
+    private fireDeviceTakeover;
     /**
      * Returns a non-expired access token or null. If the cached token
      * is expired but a refresh token exists, transparently refreshes

package/dist/index.d.ts

@@ -99,6 +99,19 @@ interface AuthHooks {
     publicKey: string;
     debug: boolean;
 }
+/**
+ * Detail handed to onDeviceTakeover subscribers. Fires once per
+ * signIn / loginSocial / verifyMagicLink / verifyEmailOtp /
+ * passkey-auth / SSO completion that retires an anonymous row.
+ */
+interface DeviceTakeoverEvent {
+    /** The anonymous user_id Sendora just hard-deleted. */
+    retiredAnonUserId: string;
+    /** The identified user_id that took the device over. */
+    identifiedUserId: string;
+    /** Local clock at the time the SDK observed the event. */
+    at: Date;
+}
 declare class Auth {
     private hooks;
     private user;
@@ -106,6 +119,8 @@ declare class Auth {
     private accessExpiresAt;
     private inflight;
     private refreshInflight;
+    private takeoverListeners;
+    private lastTakeover;
     /**
      * Resolves when the parent SDK has finished its async init() —
      * AsyncStorage hydrated + auth.hydrate() restored the cached
@@ -142,6 +157,30 @@ declare class Auth {
      */
     hydrate(): void;
     getCurrentUser(): AuthUser | null;
+    /**
+     * Subscribe to device-takeover events (s58.111+). Backend retires
+     * the anonymous user_id whenever a previously-anon device signs in
+     * to an identified account. Use this to clean up any local mirror
+     * keyed by the anonymous id — your own users table, an analytics
+     * cache, an audience filter — without needing a webhook receiver.
+     *
+     * Listener is invoked from `signIn`, `loginSocial`, `verifyMagicLink`,
+     * `verifyEmailOtp`, `passkey authentication`, and SSO completion
+     * (via `consumeSsoFragment`). Returns an unsubscribe function.
+     *
+     * Listeners are best-effort: errors thrown inside them are swallowed
+     * + logged in dev mode. Auth state never depends on listener success.
+     */
+    onDeviceTakeover(listener: (evt: DeviceTakeoverEvent) => void): () => void;
+    /**
+     * Inspect the most recent device-takeover event observed by the
+     * SDK. Cleared on signOut. Returns null when no takeover has
+     * happened during this session — useful for late subscribers or
+     * post-sign-in side-effects (e.g. app-launch hydrate).
+     */
+    getLastDeviceTakeover(): DeviceTakeoverEvent | null;
+    /** Internal — fan out to subscribers + cache the latest. */
+    private fireDeviceTakeover;
     /**
      * Returns a non-expired access token or null. If the cached token
      * is expired but a refresh token exists, transparently refreshes

package/dist/index.js

@@ -194,6 +194,8 @@ var Auth = class {
     this.accessExpiresAt = 0;
     this.inflight = Promise.resolve();
     this.refreshInflight = null;
+    this.takeoverListeners = /* @__PURE__ */ new Set();
+    this.lastTakeover = null;
     /**
      * Proactive refresh (s58.72). Fires when access-token age crosses
      * ~80% of TTL. Pairs with the AppState foreground listener so a
@@ -256,6 +258,47 @@ var Auth = class {
   getCurrentUser() {
     return this.user;
   }
+  /**
+   * Subscribe to device-takeover events (s58.111+). Backend retires
+   * the anonymous user_id whenever a previously-anon device signs in
+   * to an identified account. Use this to clean up any local mirror
+   * keyed by the anonymous id — your own users table, an analytics
+   * cache, an audience filter — without needing a webhook receiver.
+   *
+   * Listener is invoked from `signIn`, `loginSocial`, `verifyMagicLink`,
+   * `verifyEmailOtp`, `passkey authentication`, and SSO completion
+   * (via `consumeSsoFragment`). Returns an unsubscribe function.
+   *
+   * Listeners are best-effort: errors thrown inside them are swallowed
+   * + logged in dev mode. Auth state never depends on listener success.
+   */
+  onDeviceTakeover(listener) {
+    this.takeoverListeners.add(listener);
+    return () => {
+      this.takeoverListeners.delete(listener);
+    };
+  }
+  /**
+   * Inspect the most recent device-takeover event observed by the
+   * SDK. Cleared on signOut. Returns null when no takeover has
+   * happened during this session — useful for late subscribers or
+   * post-sign-in side-effects (e.g. app-launch hydrate).
+   */
+  getLastDeviceTakeover() {
+    return this.lastTakeover;
+  }
+  /** Internal — fan out to subscribers + cache the latest. */
+  fireDeviceTakeover(retiredAnonUserId, identifiedUserId) {
+    const evt = { retiredAnonUserId, identifiedUserId, at: /* @__PURE__ */ new Date() };
+    this.lastTakeover = evt;
+    for (const fn of this.takeoverListeners) {
+      try {
+        fn(evt);
+      } catch (err) {
+        if (this.hooks.debug) console.warn("[sendoracloud] onDeviceTakeover listener threw", err);
+      }
+    }
+  }
   /**
    * Returns a non-expired access token or null. If the cached token
    * is expired but a refresh token exists, transparently refreshes
@@ -641,10 +684,13 @@ var Auth = class {
    * call `consumeSsoFragment(url)` on the captured URL.
    */
   async startSso(returnTo) {
+    const prevAnonRefreshToken = this.readPrevAnonRefreshToken();
+    const body = { returnTo };
+    if (prevAnonRefreshToken) body.prevAnonRefreshToken = prevAnonRefreshToken;
     const res = await post(
       { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
       "/api/v1/auth-service/sso/oidc/start",
-      { returnTo }
+      body
     );
     if (!res || !res.ok) throw new AuthError("SSO_START_FAILED", `HTTP ${res?.status ?? "network"}`);
     const parsed = await res.json();
@@ -664,10 +710,13 @@ var Auth = class {
    * and SAML fragments transparently.
    */
   async startSaml(returnTo) {
+    const prevAnonRefreshToken = this.readPrevAnonRefreshToken();
+    const body = { returnTo };
+    if (prevAnonRefreshToken) body.prevAnonRefreshToken = prevAnonRefreshToken;
     const res = await post(
       { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
       "/api/v1/auth-service/sso/saml/start",
-      { returnTo }
+      body
     );
     if (!res || !res.ok) throw new AuthError("SAML_START_FAILED", `HTTP ${res?.status ?? "network"}`);
     const parsed = await res.json();
@@ -692,6 +741,7 @@ var Auth = class {
       if (err) throw new AuthError("SSO_FAILED", decodeURIComponent(err));
       const refresh = params.get("sendora_oidc_token") ?? params.get("sendora_saml_token");
       if (!refresh) throw new AuthError("SSO_NO_TOKEN", "Callback URL has no SSO token");
+      const retiredAnonUserId = params.get("sendora_retired_anon");
       const res = await post(
         { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
         "/api/v1/auth-service/token/refresh",
@@ -720,7 +770,8 @@ var Auth = class {
           refreshToken: newRefresh,
           expiresIn,
           tokenType: "Bearer"
-        }
+        },
+        ...retiredAnonUserId ? { retiredAnonUserId } : {}
       });
       return user;
     });
@@ -961,11 +1012,15 @@ var Auth = class {
     this.hooks.storage.set(REFRESH_KEY, data.tokens.refreshToken);
     this.hooks.onIdentityChange(data.user.id);
     this.startProactiveRefreshCron();
+    if (data.retiredAnonUserId) {
+      this.fireDeviceTakeover(data.retiredAnonUserId, data.user.id);
+    }
   }
   async wipeLocalIdentity() {
     this.user = null;
     this.accessToken = null;
     this.accessExpiresAt = 0;
+    this.lastTakeover = null;
     this.hooks.storage.remove(USER_KEY);
     this.hooks.storage.remove(TOKEN_KEY);
     this.hooks.storage.remove(TOKEN_EXPIRES_KEY);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
   "type": "module",
   "main": "./dist/index.cjs",