@sendoracloud/sdk-react-native 1.19.0 → 1.23.0

package/app.plugin.js

@@ -0,0 +1,85 @@
+// Sendora Expo config plugin — auto-wires deep-link associated domains so games
+// (and any RN app) don't hand-edit iOS entitlements / Android manifests.
+//
+// Usage in app.json / app.config.js:
+//   { "plugins": [["@sendoracloud/sdk-react-native", { "linkSubdomain": "wordhurdle" }]] }
+//   // → applinks:wordhurdle.sendoracloud.app  (iOS) + autoVerify App Link (Android)
+// Full host / BYO custom domain (combines with linkSubdomain):
+//   [["@sendoracloud/sdk-react-native", { "linkDomains": ["links.wordhurdle.com"] }]]
+//
+// - iOS: adds `applinks:<host>` to com.apple.developer.associated-domains.
+// - Android: adds an `autoVerify` App Links <intent-filter> (https + host) to
+//   the main activity.
+//
+// Game Center / Play Games native config is a SEPARATE plugin in the optional
+// companion package `@sendoracloud/sdk-react-native-gaming` (so non-gaming apps
+// don't pull the Play Games dependency).
+//
+// SAFE / backward-compatible: opt-in + build-time only (runs during
+// `expo prebuild`), so it never touches an already-built or already-installed
+// app. Both platforms MERGE + dedupe — an app that already declared its domains
+// (or lists others) keeps them; adopting the plugin re-adds the same entries
+// idempotently. `createRunOncePlugin` guards against double-application.
+//
+// ESM (the package is `type: module`) — requires Expo SDK 50+ (ESM config
+// plugins). The bug-prone transforms live in ./plugin/apply.js (pure,
+// unit-tested); this file just wires them into the Expo mod pipeline.
+import {
+  withEntitlementsPlist,
+  withAndroidManifest,
+  AndroidConfig,
+  createRunOncePlugin,
+  WarningAggregator,
+} from "@expo/config-plugins";
+import { createRequire } from "node:module";
+import {
+  resolveHosts,
+  mergeAssociatedDomains,
+  findMainActivity,
+  addAppLinkIntentFilters,
+} from "./plugin/apply.js";
+
+const pkg = createRequire(import.meta.url)("./package.json");
+const ASSOCIATED_DOMAINS_KEY = "com.apple.developer.associated-domains";
+
+function withSendoraIosAssociatedDomains(config, hosts) {
+  return withEntitlementsPlist(config, (cfg) => {
+    cfg.modResults[ASSOCIATED_DOMAINS_KEY] = mergeAssociatedDomains(
+      cfg.modResults[ASSOCIATED_DOMAINS_KEY],
+      hosts,
+    );
+    return cfg;
+  });
+}
+
+function withSendoraAndroidAppLinks(config, hosts) {
+  return withAndroidManifest(config, (cfg) => {
+    const app = AndroidConfig.Manifest.getMainApplicationOrThrow(cfg.modResults);
+    const main = findMainActivity(app.activity);
+    if (!main) {
+      WarningAggregator.addWarningAndroid(
+        pkg.name,
+        "No main activity found — skipped App Links intent filters.",
+      );
+      return cfg;
+    }
+    addAppLinkIntentFilters(main, hosts);
+    return cfg;
+  });
+}
+
+const withSendora = (config, props) => {
+  const hosts = resolveHosts(props);
+  if (hosts.length === 0) {
+    WarningAggregator.addWarningIOS(
+      pkg.name,
+      "No linkSubdomain / linkDomains configured — no associated domains added. Pass { linkSubdomain: '<handle>' } to wire deep links. (Game Center / Play Games config lives in @sendoracloud/sdk-react-native-gaming.)",
+    );
+    return config;
+  }
+  config = withSendoraIosAssociatedDomains(config, hosts);
+  config = withSendoraAndroidAppLinks(config, hosts);
+  return config;
+};
+
+export default createRunOncePlugin(withSendora, pkg.name, pkg.version);

package/dist/index.cjs

@@ -43,7 +43,7 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 var import_react_native_get_random_values = require("react-native-get-random-values");
-var import_react_native4 = require("react-native");
+var import_react_native5 = require("react-native");
 
 // src/storage.ts
 var PREFIX = "sendora_";
@@ -200,8 +200,8 @@ var Storage = class {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.19.0",
-  description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
+  version: "1.23.0",
+  description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
   module: "./dist/index.js",
@@ -222,7 +222,9 @@ var package_default = {
     "dist",
     "examples",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "app.plugin.js",
+    "plugin"
   ],
   keywords: [
     "sendora",
@@ -254,7 +256,7 @@ var package_default = {
   scripts: {
     build: "tsup src/index.ts src/contact-widget.tsx --format esm,cjs --dts --clean --external react --external react-native --external react-native-webview",
     typecheck: "tsc --noEmit",
-    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts"
+    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts"
   },
   devDependencies: {
     "@types/react": "^19.2.16",
@@ -367,8 +369,34 @@ async function request(opts, method, path, body, extraHeaders, reqOpts) {
   return res;
 }
 
-// src/auth.ts
+// src/native.ts
 var import_react_native = require("react-native");
+function requireOptionalNativeModule(name) {
+  try {
+    const g = globalThis;
+    const m = g?.expo?.modules?.[name];
+    if (m && typeof m === "object") return m;
+  } catch {
+  }
+  try {
+    const g = globalThis;
+    const nm = import_react_native.NativeModules;
+    const proxy = g?.expo?.modules?.NativeModulesProxy ?? nm?.NativeUnimoduleProxy;
+    const consts = proxy?.modulesConstants?.[name];
+    if (consts && typeof consts === "object") return consts;
+  } catch {
+  }
+  try {
+    const nm = import_react_native.NativeModules;
+    const m = nm?.[name];
+    if (m && typeof m === "object") return m;
+  } catch {
+  }
+  return void 0;
+}
+
+// src/auth.ts
+var import_react_native2 = require("react-native");
 var TOKEN_KEY = "auth_access_token";
 var TOKEN_EXPIRES_KEY = "auth_access_expires";
 var REFRESH_KEY = "auth_refresh_token";
@@ -403,6 +431,48 @@ var AuthError = class extends Error {
     this.code = code;
   }
 };
+var GAME_AUTH_NATIVE_MODULE = "SendoraGameAuth";
+async function fetchGameCenterPayloadNative() {
+  const mod = requireOptionalNativeModule(GAME_AUTH_NATIVE_MODULE);
+  const fn = mod?.fetchGameCenterIdentity;
+  if (typeof fn !== "function") {
+    throw new AuthError(
+      "GAME_CENTER_UNAVAILABLE",
+      "Game Center native module not found. Install @sendoracloud/sdk-react-native-gaming, add its config plugin ({ gameCenter: true }), and run `npx expo prebuild` (or EAS Build) \u2014 Game Center sign-in needs a Dev Client, not Expo Go. Or pass a payload from your own GameKit module."
+    );
+  }
+  const raw = await fn.call(mod);
+  return coerceGameCenterPayload(raw);
+}
+function coerceGameCenterPayload(raw) {
+  const r = raw ?? {};
+  const publicKeyUrl = typeof r.publicKeyUrl === "string" ? r.publicKeyUrl : "";
+  const signature = typeof r.signature === "string" ? r.signature : "";
+  const salt = typeof r.salt === "string" ? r.salt : "";
+  const teamPlayerId = typeof r.teamPlayerId === "string" ? r.teamPlayerId : "";
+  const bundleId = typeof r.bundleId === "string" ? r.bundleId : "";
+  const timestamp = typeof r.timestamp === "number" ? r.timestamp : Number(r.timestamp);
+  if (!publicKeyUrl || !signature || !salt || !teamPlayerId || !bundleId || !Number.isFinite(timestamp)) {
+    throw new AuthError("GAME_CENTER_INVALID_PAYLOAD", "Game Center returned an incomplete identity payload.");
+  }
+  return { publicKeyUrl, signature, salt, timestamp, teamPlayerId, bundleId };
+}
+async function fetchPlayGamesAuthCodeNative() {
+  const mod = requireOptionalNativeModule(GAME_AUTH_NATIVE_MODULE);
+  const fn = mod?.fetchServerAuthCode;
+  if (typeof fn !== "function") {
+    throw new AuthError(
+      "PLAY_GAMES_UNAVAILABLE",
+      "Play Games native module not found. Install @sendoracloud/sdk-react-native-gaming, add its config plugin ({ playGamesWebClientId, playGamesProjectId }), and run `npx expo prebuild` (or EAS Build) \u2014 Play Games sign-in needs a Dev Client, not Expo Go. Or pass a serverAuthCode from your own Play Games module."
+    );
+  }
+  const raw = await fn.call(mod);
+  const serverAuthCode = typeof raw?.serverAuthCode === "string" ? raw.serverAuthCode : "";
+  if (!serverAuthCode) {
+    throw new AuthError("PLAY_GAMES_INVALID_PAYLOAD", "Play Games returned no server auth code.");
+  }
+  return { serverAuthCode };
+}
 var Auth = class {
   constructor(hooks) {
     this.user = null;
@@ -705,8 +775,10 @@ var Auth = class {
         if (stashed) prevAnonRefreshToken = stashed;
       }
       if (this.user !== null) await this.wipeLocalIdentity();
-      const payload = { ...input };
+      const { link, ...socialInput } = input;
+      const payload = { ...socialInput };
       if (prevAnonRefreshToken) payload.prevAnonRefreshToken = prevAnonRefreshToken;
+      if (link) payload.linkAnonymous = true;
       const res = await post(
         { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
         "/api/v1/auth-service/login/social",
@@ -729,8 +801,8 @@ var Auth = class {
       return parsed.data.user;
     });
   }
-  signInWithGoogle(code, redirectUri) {
-    return this.loginSocial({ provider: "google", code, redirectUri });
+  signInWithGoogle(code, redirectUri, link) {
+    return this.loginSocial({ provider: "google", code, redirectUri, link });
   }
   signInWithGitHub(code, redirectUri) {
     return this.loginSocial({ provider: "github", code, redirectUri });
@@ -750,6 +822,72 @@ var Auth = class {
   signInWithDiscord(code, redirectUri) {
     return this.loginSocial({ provider: "discord", code, redirectUri });
   }
+  signInWithGameCenter(payloadOrOpts, maybeOpts) {
+    const path = "/api/v1/auth-service/login/game-center";
+    if (payloadOrOpts && "publicKeyUrl" in payloadOrOpts) {
+      return this.gameIdentitySignIn(path, { ...payloadOrOpts }, maybeOpts?.link);
+    }
+    const link = payloadOrOpts?.link;
+    return this.gameIdentitySignIn(
+      path,
+      async () => await fetchGameCenterPayloadNative(),
+      link
+    );
+  }
+  signInWithPlayGames(payloadOrOpts, maybeOpts) {
+    const path = "/api/v1/auth-service/login/play-games";
+    if (payloadOrOpts && "serverAuthCode" in payloadOrOpts) {
+      const { serverAuthCode } = payloadOrOpts;
+      return this.gameIdentitySignIn(path, { serverAuthCode }, maybeOpts?.link);
+    }
+    const link = payloadOrOpts?.link;
+    return this.gameIdentitySignIn(
+      path,
+      async () => await fetchPlayGamesAuthCodeNative(),
+      link
+    );
+  }
+  /**
+   * Shared gaming-identity sign-in. Mirrors `loginSocial`'s anon-takeover +
+   * ADR-025 link-in-place handling: reads the anon refresh BEFORE wiping local
+   * identity, forwards it as `prevAnonRefreshToken`, and opts into
+   * `linkAnonymous` when `link` is set. `persist()` fires `onDeviceTakeover`
+   * centrally from `retiredAnonUserId`.
+   */
+  gameIdentitySignIn(path, identityBody, link) {
+    return this.serialize(async () => {
+      const body = typeof identityBody === "function" ? await identityBody() : identityBody;
+      let prevAnonRefreshToken;
+      if (this.user?.isAnonymous) {
+        const stashed = this.hooks.storage.get(REFRESH_KEY);
+        if (stashed) prevAnonRefreshToken = stashed;
+      }
+      if (this.user !== null) await this.wipeLocalIdentity();
+      const payload = { ...body };
+      if (prevAnonRefreshToken) payload.prevAnonRefreshToken = prevAnonRefreshToken;
+      if (link) payload.linkAnonymous = true;
+      const res = await post(
+        { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+        path,
+        payload
+      );
+      if (!res) throw new AuthError("NETWORK_ERROR", "Network request failed");
+      let parsed;
+      try {
+        parsed = await res.json();
+      } catch {
+        throw new AuthError("PARSE_ERROR", `HTTP ${res.status}`);
+      }
+      if (!res.ok || !parsed.success || !isAuthApiResponse(parsed.data)) {
+        throw new AuthError(
+          parsed.error?.code ?? "GAME_LOGIN_FAILED",
+          parsed.error?.message ?? "Game sign-in failed"
+        );
+      }
+      this.persist(parsed.data);
+      return parsed.data.user;
+    });
+  }
   /**
    * Read the stored anon refresh token if (and only if) the local
    * subject is currently anonymous. Used by every identified-session
@@ -1229,7 +1367,7 @@ var Auth = class {
       void tick();
     }, TICK_MS);
     try {
-      const subscription = import_react_native.AppState?.addEventListener?.("change", (state) => {
+      const subscription = import_react_native2.AppState?.addEventListener?.("change", (state) => {
         if (state === "active") {
           this.resetRefreshState();
           void tick();
@@ -1390,7 +1528,7 @@ function decodeJwtPayload(token) {
 }
 
 // src/links.ts
-var import_react_native2 = require("react-native");
+var import_react_native3 = require("react-native");
 var LinkError = class extends Error {
   constructor(code, message, statusCode = 0, details) {
     super(message);
@@ -1469,10 +1607,10 @@ function dynRequire(id) {
 }
 function loadRn() {
   return {
-    Platform: import_react_native2.Platform,
-    Dimensions: import_react_native2.Dimensions,
-    NativeModules: import_react_native2.NativeModules,
-    Linking: import_react_native2.Linking
+    Platform: import_react_native3.Platform,
+    Dimensions: import_react_native3.Dimensions,
+    NativeModules: import_react_native3.NativeModules,
+    Linking: import_react_native3.Linking
   };
 }
 function readTimezone() {
@@ -1968,7 +2106,7 @@ var Links = class {
 };
 
 // src/auto-track.ts
-var import_react_native3 = require("react-native");
+var import_react_native4 = require("react-native");
 var DEFAULT_IDLE_MS = 30 * 60 * 1e3;
 function resolveFlags(cfg) {
   if (cfg === false) {
@@ -2013,7 +2151,7 @@ function installAutoTrack(args) {
     args.fire("app.opened", { sessionId });
   }
   if (flags.appBackground || flags.engagement) {
-    const AppState = import_react_native3.AppState;
+    const AppState = import_react_native4.AppState;
     if (AppState && typeof AppState.addEventListener === "function") {
       const handler = (state) => {
         ensureSession(true);
@@ -2112,13 +2250,13 @@ function byteLength(s) {
 }
 function buildDeviceContext(appVersion, appBuild) {
   try {
-    const os = import_react_native4.Platform?.OS;
+    const os = import_react_native5.Platform?.OS;
     if (os !== "ios" && os !== "android") return void 0;
-    const isPad = os === "ios" && import_react_native4.Platform.isPad === true;
+    const isPad = os === "ios" && import_react_native5.Platform.isPad === true;
     return {
       type: isPad ? "tablet" : "mobile",
       os: os === "ios" ? "iOS" : "Android",
-      osVersion: String(import_react_native4.Platform.Version ?? ""),
+      osVersion: String(import_react_native5.Platform.Version ?? ""),
       model: expoDeviceModel(),
       appVersion: resolveAppVersion(appVersion),
       appBuild: resolveAppBuild(appBuild)
@@ -2128,27 +2266,7 @@ function buildDeviceContext(appVersion, appBuild) {
   }
 }
 function expoModule(name) {
-  try {
-    const g = globalThis;
-    const m = g?.expo?.modules?.[name];
-    if (m && typeof m === "object") return m;
-  } catch {
-  }
-  try {
-    const g = globalThis;
-    const nm = import_react_native4.NativeModules;
-    const proxy = g?.expo?.modules?.NativeModulesProxy ?? nm?.NativeUnimoduleProxy;
-    const consts = proxy?.modulesConstants?.[name];
-    if (consts && typeof consts === "object") return consts;
-  } catch {
-  }
-  try {
-    const nm = import_react_native4.NativeModules;
-    const m = nm?.[name];
-    if (m && typeof m === "object") return m;
-  } catch {
-  }
-  return void 0;
+  return requireOptionalNativeModule(name);
 }
 function expoApplicationVersion() {
   const a = expoModule("ExpoApplication");

package/dist/index.d.cts

@@ -230,16 +230,15 @@ declare class Storage {
  * so a UI double-submit can't mint two anonymous users or interleave
  * a signIn + signOut.
  *
- * Tokens (including the refresh token) persist in AsyncStorage, not
- * the iOS Keychain / Android Keystore. AsyncStorage is unencrypted
- * app-sandbox storage: readable by anyone with filesystem/backup
- * access to a jailbroken/rooted or unlocked device, but isolated from
- * other apps by the OS sandbox. There is NO `secureStorage` adapter
- * option today — earlier docs claimed a Keychain/SecureStore-backed
- * adapter that was never implemented. If you ship a follow-up that
- * moves the refresh token to expo-secure-store / react-native-keychain
- * (optional peer dep, Metro-resolvable static import — never an inline
- * require), keep the `auth_refresh_token` storage key for back-compat.
+ * Tokens (including the refresh token) persist in AsyncStorage BY
+ * DEFAULT — unencrypted app-sandbox storage: isolated from other apps
+ * by the OS sandbox, but readable with filesystem/backup access to a
+ * jailbroken/rooted or unlocked device (OWASP MASVS-L1). Since 1.18.0 an
+ * OPTIONAL `secureStorage` adapter (`Sendora.init({ secureStorage })`,
+ * wired in index.ts) routes the SECURE_KEYS (refresh/access/user) through
+ * an app-supplied Keychain / Keystore adapter, with transparent
+ * plaintext→secure migration; omit it and behaviour is unchanged. The
+ * `auth_refresh_token` storage key stays frozen for back-compat either way.
  *
  * Response payloads are validated non-empty before persisting so a
  * malformed/MITM'd response can't install an `id = ""` user.
@@ -262,6 +261,22 @@ interface AuthTokens {
     expiresIn: number;
     tokenType: string;
 }
+/**
+ * Apple Game Center identity payload — the exact shape the Sendora backend
+ * verifies, produced by `GKLocalPlayer.local.fetchItems(forIdentityVerification-
+ * Signature:)`. `signature`/`salt` are base64; `timestamp` is GameKit's
+ * ms-since-epoch. The bundled native module returns this from
+ * `fetchGameCenterIdentity()`; you can also build it from your own GameKit
+ * module and pass it to `signInWithGameCenter(payload)`.
+ */
+interface GameCenterPayload {
+    publicKeyUrl: string;
+    signature: string;
+    salt: string;
+    timestamp: number;
+    teamPlayerId: string;
+    bundleId: string;
+}
 declare class EmailAlreadyTakenError extends Error {
     constructor(message?: string);
 }
@@ -478,8 +493,17 @@ declare class Auth {
             firstName?: string;
             lastName?: string;
         };
+        /**
+         * ADR-025 link-in-place opt-in. When this device is anonymous and you set
+         * `link: true`, an anon→social upgrade KEEPS the same user id (sub) — the
+         * anon account is promoted in place (like Firebase linkWithCredential)
+         * instead of a device-takeover that mints a new id. No effect when the
+         * device isn't anonymous, or when the social identity already belongs to
+         * another account (collision → falls back to takeover/merge).
+         */
+        link?: boolean;
     }): Promise<AuthUser>;
-    signInWithGoogle(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithGoogle(code: string, redirectUri: string, link?: boolean): Promise<AuthUser>;
     signInWithGitHub(code: string, redirectUri: string): Promise<AuthUser>;
     signInWithApple(input: {
         idToken?: string;
@@ -489,11 +513,65 @@ declare class Auth {
             firstName?: string;
             lastName?: string;
         };
+        /** ADR-025: keep the same user id on an anon→Apple upgrade. See `loginSocial`. */
+        link?: boolean;
     }): Promise<AuthUser>;
     signInWithMicrosoft(code: string, redirectUri: string): Promise<AuthUser>;
     signInWithLinkedIn(code: string, redirectUri: string): Promise<AuthUser>;
     signInWithFacebook(code: string, redirectUri: string): Promise<AuthUser>;
     signInWithDiscord(code: string, redirectUri: string): Promise<AuthUser>;
+    /**
+     * Apple Game Center sign-in (email-less, iOS-only).
+     *
+     * **No-arg (1.23.0, recommended):** `signInWithGameCenter()` drives Game
+     * Center natively via the `@sendoracloud/sdk-react-native-gaming` companion
+     * (`fetchItems(forIdentityVerificationSignature:)`, base64 signature/salt,
+     * `teamPlayerID`, bundle id) and posts the result. Needs that companion + its
+     * config plugin `{ gameCenter: true }` + a Dev Client — NOT Expo Go.
+     *
+     * **Explicit:** `signInWithGameCenter(payload)` posts a payload you obtained
+     * from your OWN GameKit module (works anywhere, incl. bare RN).
+     *
+     * `link: true` KEEPS the same user id when upgrading an anonymous device
+     * (ADR-025 link-in-place); no effect off-anon or on a collision.
+     */
+    signInWithGameCenter(opts?: {
+        link?: boolean;
+    }): Promise<AuthUser>;
+    signInWithGameCenter(payload: GameCenterPayload, opts?: {
+        link?: boolean;
+    }): Promise<AuthUser>;
+    /**
+     * Google Play Games sign-in (email-less, Android-only).
+     *
+     * **No-arg (1.23.0, recommended):** `signInWithPlayGames()` drives Play Games
+     * natively via the `@sendoracloud/sdk-react-native-gaming` companion
+     * (`requestServerSideAccess(webClientId, false)`, web client id read from the
+     * config-plugin manifest meta-data) and posts the `serverAuthCode`. Needs that
+     * companion + its plugin `{ playGamesWebClientId, playGamesProjectId }` + a Dev
+     * Client — NOT Expo Go.
+     *
+     * **Explicit:** `signInWithPlayGames({ serverAuthCode })` posts a code you
+     * obtained from your OWN Play Games module.
+     *
+     * `link: true` = ADR-025 link-in-place (same user id on an anon upgrade).
+     */
+    signInWithPlayGames(opts?: {
+        link?: boolean;
+    }): Promise<AuthUser>;
+    signInWithPlayGames(payload: {
+        serverAuthCode: string;
+    }, opts?: {
+        link?: boolean;
+    }): Promise<AuthUser>;
+    /**
+     * Shared gaming-identity sign-in. Mirrors `loginSocial`'s anon-takeover +
+     * ADR-025 link-in-place handling: reads the anon refresh BEFORE wiping local
+     * identity, forwards it as `prevAnonRefreshToken`, and opts into
+     * `linkAnonymous` when `link` is set. `persist()` fires `onDeviceTakeover`
+     * centrally from `retiredAnonUserId`.
+     */
+    private gameIdentitySignIn;
     /**
      * Read the stored anon refresh token if (and only if) the local
      * subject is currently anonymous. Used by every identified-session

package/dist/index.d.ts

@@ -230,16 +230,15 @@ declare class Storage {
  * so a UI double-submit can't mint two anonymous users or interleave
  * a signIn + signOut.
  *
- * Tokens (including the refresh token) persist in AsyncStorage, not
- * the iOS Keychain / Android Keystore. AsyncStorage is unencrypted
- * app-sandbox storage: readable by anyone with filesystem/backup
- * access to a jailbroken/rooted or unlocked device, but isolated from
- * other apps by the OS sandbox. There is NO `secureStorage` adapter
- * option today — earlier docs claimed a Keychain/SecureStore-backed
- * adapter that was never implemented. If you ship a follow-up that
- * moves the refresh token to expo-secure-store / react-native-keychain
- * (optional peer dep, Metro-resolvable static import — never an inline
- * require), keep the `auth_refresh_token` storage key for back-compat.
+ * Tokens (including the refresh token) persist in AsyncStorage BY
+ * DEFAULT — unencrypted app-sandbox storage: isolated from other apps
+ * by the OS sandbox, but readable with filesystem/backup access to a
+ * jailbroken/rooted or unlocked device (OWASP MASVS-L1). Since 1.18.0 an
+ * OPTIONAL `secureStorage` adapter (`Sendora.init({ secureStorage })`,
+ * wired in index.ts) routes the SECURE_KEYS (refresh/access/user) through
+ * an app-supplied Keychain / Keystore adapter, with transparent
+ * plaintext→secure migration; omit it and behaviour is unchanged. The
+ * `auth_refresh_token` storage key stays frozen for back-compat either way.
  *
  * Response payloads are validated non-empty before persisting so a
  * malformed/MITM'd response can't install an `id = ""` user.
@@ -262,6 +261,22 @@ interface AuthTokens {
     expiresIn: number;
     tokenType: string;
 }
+/**
+ * Apple Game Center identity payload — the exact shape the Sendora backend
+ * verifies, produced by `GKLocalPlayer.local.fetchItems(forIdentityVerification-
+ * Signature:)`. `signature`/`salt` are base64; `timestamp` is GameKit's
+ * ms-since-epoch. The bundled native module returns this from
+ * `fetchGameCenterIdentity()`; you can also build it from your own GameKit
+ * module and pass it to `signInWithGameCenter(payload)`.
+ */
+interface GameCenterPayload {
+    publicKeyUrl: string;
+    signature: string;
+    salt: string;
+    timestamp: number;
+    teamPlayerId: string;
+    bundleId: string;
+}
 declare class EmailAlreadyTakenError extends Error {
     constructor(message?: string);
 }
@@ -478,8 +493,17 @@ declare class Auth {
             firstName?: string;
             lastName?: string;
         };
+        /**
+         * ADR-025 link-in-place opt-in. When this device is anonymous and you set
+         * `link: true`, an anon→social upgrade KEEPS the same user id (sub) — the
+         * anon account is promoted in place (like Firebase linkWithCredential)
+         * instead of a device-takeover that mints a new id. No effect when the
+         * device isn't anonymous, or when the social identity already belongs to
+         * another account (collision → falls back to takeover/merge).
+         */
+        link?: boolean;
     }): Promise<AuthUser>;
-    signInWithGoogle(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithGoogle(code: string, redirectUri: string, link?: boolean): Promise<AuthUser>;
     signInWithGitHub(code: string, redirectUri: string): Promise<AuthUser>;
     signInWithApple(input: {
         idToken?: string;
@@ -489,11 +513,65 @@ declare class Auth {
             firstName?: string;
             lastName?: string;
         };
+        /** ADR-025: keep the same user id on an anon→Apple upgrade. See `loginSocial`. */
+        link?: boolean;
     }): Promise<AuthUser>;
     signInWithMicrosoft(code: string, redirectUri: string): Promise<AuthUser>;
     signInWithLinkedIn(code: string, redirectUri: string): Promise<AuthUser>;
     signInWithFacebook(code: string, redirectUri: string): Promise<AuthUser>;
     signInWithDiscord(code: string, redirectUri: string): Promise<AuthUser>;
+    /**
+     * Apple Game Center sign-in (email-less, iOS-only).
+     *
+     * **No-arg (1.23.0, recommended):** `signInWithGameCenter()` drives Game
+     * Center natively via the `@sendoracloud/sdk-react-native-gaming` companion
+     * (`fetchItems(forIdentityVerificationSignature:)`, base64 signature/salt,
+     * `teamPlayerID`, bundle id) and posts the result. Needs that companion + its
+     * config plugin `{ gameCenter: true }` + a Dev Client — NOT Expo Go.
+     *
+     * **Explicit:** `signInWithGameCenter(payload)` posts a payload you obtained
+     * from your OWN GameKit module (works anywhere, incl. bare RN).
+     *
+     * `link: true` KEEPS the same user id when upgrading an anonymous device
+     * (ADR-025 link-in-place); no effect off-anon or on a collision.
+     */
+    signInWithGameCenter(opts?: {
+        link?: boolean;
+    }): Promise<AuthUser>;
+    signInWithGameCenter(payload: GameCenterPayload, opts?: {
+        link?: boolean;
+    }): Promise<AuthUser>;
+    /**
+     * Google Play Games sign-in (email-less, Android-only).
+     *
+     * **No-arg (1.23.0, recommended):** `signInWithPlayGames()` drives Play Games
+     * natively via the `@sendoracloud/sdk-react-native-gaming` companion
+     * (`requestServerSideAccess(webClientId, false)`, web client id read from the
+     * config-plugin manifest meta-data) and posts the `serverAuthCode`. Needs that
+     * companion + its plugin `{ playGamesWebClientId, playGamesProjectId }` + a Dev
+     * Client — NOT Expo Go.
+     *
+     * **Explicit:** `signInWithPlayGames({ serverAuthCode })` posts a code you
+     * obtained from your OWN Play Games module.
+     *
+     * `link: true` = ADR-025 link-in-place (same user id on an anon upgrade).
+     */
+    signInWithPlayGames(opts?: {
+        link?: boolean;
+    }): Promise<AuthUser>;
+    signInWithPlayGames(payload: {
+        serverAuthCode: string;
+    }, opts?: {
+        link?: boolean;
+    }): Promise<AuthUser>;
+    /**
+     * Shared gaming-identity sign-in. Mirrors `loginSocial`'s anon-takeover +
+     * ADR-025 link-in-place handling: reads the anon refresh BEFORE wiping local
+     * identity, forwards it as `prevAnonRefreshToken`, and opts into
+     * `linkAnonymous` when `link` is set. `persist()` fires `onDeviceTakeover`
+     * centrally from `retiredAnonUserId`.
+     */
+    private gameIdentitySignIn;
     /**
      * Read the stored anon refresh token if (and only if) the local
      * subject is currently anonymous. Used by every identified-session

package/dist/index.js

@@ -1,6 +1,6 @@
 // src/index.ts
 import "react-native-get-random-values";
-import { Platform, NativeModules } from "react-native";
+import { Platform } from "react-native";
 
 // src/storage.ts
 var PREFIX = "sendora_";
@@ -157,8 +157,8 @@ var Storage = class {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.19.0",
-  description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
+  version: "1.23.0",
+  description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
   module: "./dist/index.js",
@@ -179,7 +179,9 @@ var package_default = {
     "dist",
     "examples",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "app.plugin.js",
+    "plugin"
   ],
   keywords: [
     "sendora",
@@ -211,7 +213,7 @@ var package_default = {
   scripts: {
     build: "tsup src/index.ts src/contact-widget.tsx --format esm,cjs --dts --clean --external react --external react-native --external react-native-webview",
     typecheck: "tsc --noEmit",
-    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts"
+    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts"
   },
   devDependencies: {
     "@types/react": "^19.2.16",
@@ -324,6 +326,32 @@ async function request(opts, method, path, body, extraHeaders, reqOpts) {
   return res;
 }
 
+// src/native.ts
+import { NativeModules } from "react-native";
+function requireOptionalNativeModule(name) {
+  try {
+    const g = globalThis;
+    const m = g?.expo?.modules?.[name];
+    if (m && typeof m === "object") return m;
+  } catch {
+  }
+  try {
+    const g = globalThis;
+    const nm = NativeModules;
+    const proxy = g?.expo?.modules?.NativeModulesProxy ?? nm?.NativeUnimoduleProxy;
+    const consts = proxy?.modulesConstants?.[name];
+    if (consts && typeof consts === "object") return consts;
+  } catch {
+  }
+  try {
+    const nm = NativeModules;
+    const m = nm?.[name];
+    if (m && typeof m === "object") return m;
+  } catch {
+  }
+  return void 0;
+}
+
 // src/auth.ts
 import { AppState as RnAppState } from "react-native";
 var TOKEN_KEY = "auth_access_token";
@@ -360,6 +388,48 @@ var AuthError = class extends Error {
     this.code = code;
   }
 };
+var GAME_AUTH_NATIVE_MODULE = "SendoraGameAuth";
+async function fetchGameCenterPayloadNative() {
+  const mod = requireOptionalNativeModule(GAME_AUTH_NATIVE_MODULE);
+  const fn = mod?.fetchGameCenterIdentity;
+  if (typeof fn !== "function") {
+    throw new AuthError(
+      "GAME_CENTER_UNAVAILABLE",
+      "Game Center native module not found. Install @sendoracloud/sdk-react-native-gaming, add its config plugin ({ gameCenter: true }), and run `npx expo prebuild` (or EAS Build) \u2014 Game Center sign-in needs a Dev Client, not Expo Go. Or pass a payload from your own GameKit module."
+    );
+  }
+  const raw = await fn.call(mod);
+  return coerceGameCenterPayload(raw);
+}
+function coerceGameCenterPayload(raw) {
+  const r = raw ?? {};
+  const publicKeyUrl = typeof r.publicKeyUrl === "string" ? r.publicKeyUrl : "";
+  const signature = typeof r.signature === "string" ? r.signature : "";
+  const salt = typeof r.salt === "string" ? r.salt : "";
+  const teamPlayerId = typeof r.teamPlayerId === "string" ? r.teamPlayerId : "";
+  const bundleId = typeof r.bundleId === "string" ? r.bundleId : "";
+  const timestamp = typeof r.timestamp === "number" ? r.timestamp : Number(r.timestamp);
+  if (!publicKeyUrl || !signature || !salt || !teamPlayerId || !bundleId || !Number.isFinite(timestamp)) {
+    throw new AuthError("GAME_CENTER_INVALID_PAYLOAD", "Game Center returned an incomplete identity payload.");
+  }
+  return { publicKeyUrl, signature, salt, timestamp, teamPlayerId, bundleId };
+}
+async function fetchPlayGamesAuthCodeNative() {
+  const mod = requireOptionalNativeModule(GAME_AUTH_NATIVE_MODULE);
+  const fn = mod?.fetchServerAuthCode;
+  if (typeof fn !== "function") {
+    throw new AuthError(
+      "PLAY_GAMES_UNAVAILABLE",
+      "Play Games native module not found. Install @sendoracloud/sdk-react-native-gaming, add its config plugin ({ playGamesWebClientId, playGamesProjectId }), and run `npx expo prebuild` (or EAS Build) \u2014 Play Games sign-in needs a Dev Client, not Expo Go. Or pass a serverAuthCode from your own Play Games module."
+    );
+  }
+  const raw = await fn.call(mod);
+  const serverAuthCode = typeof raw?.serverAuthCode === "string" ? raw.serverAuthCode : "";
+  if (!serverAuthCode) {
+    throw new AuthError("PLAY_GAMES_INVALID_PAYLOAD", "Play Games returned no server auth code.");
+  }
+  return { serverAuthCode };
+}
 var Auth = class {
   constructor(hooks) {
     this.user = null;
@@ -662,8 +732,10 @@ var Auth = class {
         if (stashed) prevAnonRefreshToken = stashed;
       }
       if (this.user !== null) await this.wipeLocalIdentity();
-      const payload = { ...input };
+      const { link, ...socialInput } = input;
+      const payload = { ...socialInput };
       if (prevAnonRefreshToken) payload.prevAnonRefreshToken = prevAnonRefreshToken;
+      if (link) payload.linkAnonymous = true;
       const res = await post(
         { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
         "/api/v1/auth-service/login/social",
@@ -686,8 +758,8 @@ var Auth = class {
       return parsed.data.user;
     });
   }
-  signInWithGoogle(code, redirectUri) {
-    return this.loginSocial({ provider: "google", code, redirectUri });
+  signInWithGoogle(code, redirectUri, link) {
+    return this.loginSocial({ provider: "google", code, redirectUri, link });
   }
   signInWithGitHub(code, redirectUri) {
     return this.loginSocial({ provider: "github", code, redirectUri });
@@ -707,6 +779,72 @@ var Auth = class {
   signInWithDiscord(code, redirectUri) {
     return this.loginSocial({ provider: "discord", code, redirectUri });
   }
+  signInWithGameCenter(payloadOrOpts, maybeOpts) {
+    const path = "/api/v1/auth-service/login/game-center";
+    if (payloadOrOpts && "publicKeyUrl" in payloadOrOpts) {
+      return this.gameIdentitySignIn(path, { ...payloadOrOpts }, maybeOpts?.link);
+    }
+    const link = payloadOrOpts?.link;
+    return this.gameIdentitySignIn(
+      path,
+      async () => await fetchGameCenterPayloadNative(),
+      link
+    );
+  }
+  signInWithPlayGames(payloadOrOpts, maybeOpts) {
+    const path = "/api/v1/auth-service/login/play-games";
+    if (payloadOrOpts && "serverAuthCode" in payloadOrOpts) {
+      const { serverAuthCode } = payloadOrOpts;
+      return this.gameIdentitySignIn(path, { serverAuthCode }, maybeOpts?.link);
+    }
+    const link = payloadOrOpts?.link;
+    return this.gameIdentitySignIn(
+      path,
+      async () => await fetchPlayGamesAuthCodeNative(),
+      link
+    );
+  }
+  /**
+   * Shared gaming-identity sign-in. Mirrors `loginSocial`'s anon-takeover +
+   * ADR-025 link-in-place handling: reads the anon refresh BEFORE wiping local
+   * identity, forwards it as `prevAnonRefreshToken`, and opts into
+   * `linkAnonymous` when `link` is set. `persist()` fires `onDeviceTakeover`
+   * centrally from `retiredAnonUserId`.
+   */
+  gameIdentitySignIn(path, identityBody, link) {
+    return this.serialize(async () => {
+      const body = typeof identityBody === "function" ? await identityBody() : identityBody;
+      let prevAnonRefreshToken;
+      if (this.user?.isAnonymous) {
+        const stashed = this.hooks.storage.get(REFRESH_KEY);
+        if (stashed) prevAnonRefreshToken = stashed;
+      }
+      if (this.user !== null) await this.wipeLocalIdentity();
+      const payload = { ...body };
+      if (prevAnonRefreshToken) payload.prevAnonRefreshToken = prevAnonRefreshToken;
+      if (link) payload.linkAnonymous = true;
+      const res = await post(
+        { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+        path,
+        payload
+      );
+      if (!res) throw new AuthError("NETWORK_ERROR", "Network request failed");
+      let parsed;
+      try {
+        parsed = await res.json();
+      } catch {
+        throw new AuthError("PARSE_ERROR", `HTTP ${res.status}`);
+      }
+      if (!res.ok || !parsed.success || !isAuthApiResponse(parsed.data)) {
+        throw new AuthError(
+          parsed.error?.code ?? "GAME_LOGIN_FAILED",
+          parsed.error?.message ?? "Game sign-in failed"
+        );
+      }
+      this.persist(parsed.data);
+      return parsed.data.user;
+    });
+  }
   /**
    * Read the stored anon refresh token if (and only if) the local
    * subject is currently anonymous. Used by every identified-session
@@ -2090,27 +2228,7 @@ function buildDeviceContext(appVersion, appBuild) {
   }
 }
 function expoModule(name) {
-  try {
-    const g = globalThis;
-    const m = g?.expo?.modules?.[name];
-    if (m && typeof m === "object") return m;
-  } catch {
-  }
-  try {
-    const g = globalThis;
-    const nm = NativeModules;
-    const proxy = g?.expo?.modules?.NativeModulesProxy ?? nm?.NativeUnimoduleProxy;
-    const consts = proxy?.modulesConstants?.[name];
-    if (consts && typeof consts === "object") return consts;
-  } catch {
-  }
-  try {
-    const nm = NativeModules;
-    const m = nm?.[name];
-    if (m && typeof m === "object") return m;
-  } catch {
-  }
-  return void 0;
+  return requireOptionalNativeModule(name);
 }
 function expoApplicationVersion() {
   const a = expoModule("ExpoApplication");

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "1.19.0",
-  "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
+  "version": "1.23.0",
+  "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
@@ -22,7 +22,9 @@
     "dist",
     "examples",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "app.plugin.js",
+    "plugin"
   ],
   "keywords": [
     "sendora",
@@ -54,7 +56,7 @@
   "scripts": {
     "build": "tsup src/index.ts src/contact-widget.tsx --format esm,cjs --dts --clean --external react --external react-native --external react-native-webview",
     "typecheck": "tsc --noEmit",
-    "test": "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts"
+    "test": "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts"
   },
   "devDependencies": {
     "@types/react": "^19.2.16",

package/plugin/apply.js

@@ -0,0 +1,73 @@
+// Pure, dependency-free helpers for the Sendora Expo config plugin
+// (../app.plugin.js). Extracted so the bug-prone logic (host resolution,
+// merge/dedupe, no-clobber) is unit-testable WITHOUT `@expo/config-plugins`,
+// which only exists in the consumer's Expo prebuild environment.
+//
+// ESM — the package is `type: module`.
+
+/** Resolve the deduped host list from the plugin props. */
+export function resolveHosts(props) {
+  const hosts = new Set();
+  if (props && typeof props.linkSubdomain === "string" && props.linkSubdomain.trim()) {
+    hosts.add(`${props.linkSubdomain.trim()}.sendoracloud.app`);
+  }
+  if (props && Array.isArray(props.linkDomains)) {
+    for (const d of props.linkDomains) {
+      if (typeof d === "string" && d.trim()) hosts.add(d.trim());
+    }
+  }
+  return Array.from(hosts);
+}
+
+/**
+ * Merge `applinks:<host>` entries into an existing associated-domains array,
+ * preserving anything already there (no clobber) and deduping.
+ */
+export function mergeAssociatedDomains(existing, hosts) {
+  const base = Array.isArray(existing) ? existing : [];
+  const applinks = hosts.map((h) => `applinks:${h}`);
+  return Array.from(new Set([...base, ...applinks]));
+}
+
+/** Pick the launcher/main activity from an AndroidManifest application node. */
+export function findMainActivity(activities) {
+  const list = Array.isArray(activities) ? activities : [];
+  return (
+    list.find(
+      (a) =>
+        (a.$ && a.$["android:name"] === ".MainActivity") ||
+        (a["intent-filter"] || []).some((f) =>
+          (f.action || []).some(
+            (ac) => ac.$ && ac.$["android:name"] === "android.intent.action.MAIN",
+          ),
+        ),
+    ) ||
+    list[0] ||
+    null
+  );
+}
+
+/**
+ * Add an autoVerify App Links `<intent-filter>` (https + host) to the activity
+ * for each host, skipping hosts already present. Mutates + returns the activity.
+ */
+export function addAppLinkIntentFilters(mainActivity, hosts) {
+  if (!mainActivity) return mainActivity;
+  mainActivity["intent-filter"] = mainActivity["intent-filter"] || [];
+  for (const host of hosts) {
+    const already = mainActivity["intent-filter"].some((f) =>
+      (f.data || []).some((d) => d.$ && d.$["android:host"] === host),
+    );
+    if (already) continue;
+    mainActivity["intent-filter"].push({
+      $: { "android:autoVerify": "true" },
+      action: [{ $: { "android:name": "android.intent.action.VIEW" } }],
+      category: [
+        { $: { "android:name": "android.intent.category.DEFAULT" } },
+        { $: { "android:name": "android.intent.category.BROWSABLE" } },
+      ],
+      data: [{ $: { "android:scheme": "https", "android:host": host } }],
+    });
+  }
+  return mainActivity;
+}