@sendoracloud/sdk-react-native 1.25.0 → 1.27.0

package/dist/index.cjs

@@ -202,7 +202,7 @@ var Storage = class {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.25.0",
+  version: "1.27.0",
   description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
@@ -510,6 +510,8 @@ var Auth = class {
     this.refreshFailureCount = 0;
     this.refreshCooldownUntil = 0;
     this.takeoverListeners = /* @__PURE__ */ new Set();
+    this.deletionCancelledListeners = /* @__PURE__ */ new Set();
+    this.lastDeletionCancelled = null;
     this.lastTakeover = null;
     /**
      * Anon refresh token captured at `signIn()` time, stashed keyed to the
@@ -622,6 +624,36 @@ var Auth = class {
       }
     }
   }
+  /**
+   * Subscribe to deletion-cancelled events (s58.269): fires when a sign-in
+   * cancelled a pending self-service account deletion within its grace window
+   * (the account is restored, same user_id). Use it to show "your account
+   * deletion was cancelled" + reconcile local state. Fires from signIn /
+   * loginSocial / signInWithGameCenter / signInWithPlayGames. Returns an
+   * unsubscribe function; listener errors are swallowed (best-effort).
+   */
+  onDeletionCancelled(listener) {
+    this.deletionCancelledListeners.add(listener);
+    return () => {
+      this.deletionCancelledListeners.delete(listener);
+    };
+  }
+  /** The most recent deletion-cancelled event this session, or null. Cleared on signOut. */
+  getLastDeletionCancelled() {
+    return this.lastDeletionCancelled;
+  }
+  /** Internal — fan out deletion-cancelled to subscribers + cache the latest. */
+  fireDeletionCancelled(userId) {
+    const evt = { userId, at: /* @__PURE__ */ new Date() };
+    this.lastDeletionCancelled = evt;
+    for (const fn of this.deletionCancelledListeners) {
+      try {
+        fn(evt);
+      } catch (err) {
+        if (this.hooks.debug) console.warn("[sendoracloud] onDeletionCancelled listener threw", err);
+      }
+    }
+  }
   /**
    * Returns a VALID (non-expired) access token, or null.
    *
@@ -952,6 +984,36 @@ var Auth = class {
     this.user = user;
     this.hooks.storage.set(USER_KEY, JSON.stringify(user));
   }
+  /**
+   * List the auth methods/identities linked to the current account (ADR-030
+   * read side, s58.270). Returns every social/gaming identity on this account
+   * plus a `hasPassword` flag — the cross-device / reinstall-durable source of
+   * truth for a "Connected: Game Center · Google" UI (an on-device tracker
+   * misses a link made on another device). Bearer-gated network read (NOT a
+   * cache read — `getUserSync()` only holds the primary `signupMethod`/
+   * `lastLoginMethod`). Resolves a FRESH access token first (mirrors
+   * `deleteAccount`). Firebase `user.providerData` / Supabase `user.identities`.
+   */
+  async listLinkedIdentities() {
+    const token = await this.getAccessToken();
+    if (!token) throw new AuthError("NOT_SIGNED_IN", "Sign in before listing linked identities");
+    const res = await getJson(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/me/identities",
+      { Authorization: `Bearer ${token}` }
+    );
+    if (!res || !res.ok) throw new AuthError("NETWORK_ERROR", "Failed to list linked identities");
+    let parsed;
+    try {
+      parsed = await res.json();
+    } catch {
+      throw new AuthError("PARSE_ERROR", `HTTP ${res.status}`);
+    }
+    if (!parsed.success || !parsed.data) {
+      throw new AuthError(parsed.error?.code ?? "IDENTITIES_FAILED", parsed.error?.message ?? "Failed to list linked identities");
+    }
+    return { identities: parsed.data.identities ?? [], hasPassword: Boolean(parsed.data.hasPassword) };
+  }
   /**
    * Shared gaming-identity sign-in. Mirrors `loginSocial`'s anon-takeover +
    * ADR-025 link-in-place handling: reads the anon refresh BEFORE wiping local
@@ -1599,12 +1661,16 @@ var Auth = class {
     if (data.retiredAnonUserId) {
       this.fireDeviceTakeover(data.retiredAnonUserId, data.user.id);
     }
+    if (data.reactivatedFromDeletion) {
+      this.fireDeletionCancelled(data.user.id);
+    }
   }
   async wipeLocalIdentity() {
     this.user = null;
     this.accessToken = null;
     this.accessExpiresAt = 0;
     this.lastTakeover = null;
+    this.lastDeletionCancelled = null;
     this.pendingAnonTakeover = null;
     this.hooks.storage.remove(USER_KEY);
     this.hooks.storage.remove(TOKEN_KEY);

package/dist/index.d.cts

@@ -310,6 +310,17 @@ declare class AlreadyIdentifiedError extends Error {
 declare class CredentialInUseError extends Error {
     constructor(message?: string);
 }
+/** One credential linked to an account (ADR-030 read side, s58.270). */
+type LinkedIdentity = {
+    provider: string;
+    email: string | null;
+    linkedAt: string;
+};
+/** Response of `auth.listLinkedIdentities()` — the full connected-account set. */
+type LinkedIdentitiesResponse = {
+    identities: LinkedIdentity[];
+    hasPassword: boolean;
+};
 declare class AuthError extends Error {
     code: string;
     constructor(code: string, message: string);
@@ -344,6 +355,17 @@ interface DeviceTakeoverEvent {
     /** Local clock at the time the SDK observed the event. */
     at: Date;
 }
+/**
+ * Detail handed to `onDeletionCancelled` subscribers (s58.269). Fires once
+ * per sign-in that cancelled a pending self-service deletion within grace —
+ * the account is restored with the SAME user_id.
+ */
+interface DeletionCancelledEvent {
+    /** The restored user_id (unchanged — this is a status flip, not a remap). */
+    userId: string;
+    /** Local clock at the time the SDK observed the event. */
+    at: Date;
+}
 declare class Auth {
     private hooks;
     private user;
@@ -365,6 +387,8 @@ declare class Auth {
     private refreshFailureCount;
     private refreshCooldownUntil;
     private takeoverListeners;
+    private deletionCancelledListeners;
+    private lastDeletionCancelled;
     private lastTakeover;
     /**
      * Anon refresh token captured at `signIn()` time, stashed keyed to the
@@ -434,6 +458,19 @@ declare class Auth {
     getLastDeviceTakeover(): DeviceTakeoverEvent | null;
     /** Internal — fan out to subscribers + cache the latest. */
     private fireDeviceTakeover;
+    /**
+     * Subscribe to deletion-cancelled events (s58.269): fires when a sign-in
+     * cancelled a pending self-service account deletion within its grace window
+     * (the account is restored, same user_id). Use it to show "your account
+     * deletion was cancelled" + reconcile local state. Fires from signIn /
+     * loginSocial / signInWithGameCenter / signInWithPlayGames. Returns an
+     * unsubscribe function; listener errors are swallowed (best-effort).
+     */
+    onDeletionCancelled(listener: (evt: DeletionCancelledEvent) => void): () => void;
+    /** The most recent deletion-cancelled event this session, or null. Cleared on signOut. */
+    getLastDeletionCancelled(): DeletionCancelledEvent | null;
+    /** Internal — fan out deletion-cancelled to subscribers + cache the latest. */
+    private fireDeletionCancelled;
     /**
      * Returns a VALID (non-expired) access token, or null.
      *
@@ -650,6 +687,17 @@ declare class Auth {
      * user object + its storage copy are updated (no token/identity rotation).
      */
     private updateLocalUser;
+    /**
+     * List the auth methods/identities linked to the current account (ADR-030
+     * read side, s58.270). Returns every social/gaming identity on this account
+     * plus a `hasPassword` flag — the cross-device / reinstall-durable source of
+     * truth for a "Connected: Game Center · Google" UI (an on-device tracker
+     * misses a link made on another device). Bearer-gated network read (NOT a
+     * cache read — `getUserSync()` only holds the primary `signupMethod`/
+     * `lastLoginMethod`). Resolves a FRESH access token first (mirrors
+     * `deleteAccount`). Firebase `user.providerData` / Supabase `user.identities`.
+     */
+    listLinkedIdentities(): Promise<LinkedIdentitiesResponse>;
     /**
      * Shared gaming-identity sign-in. Mirrors `loginSocial`'s anon-takeover +
      * ADR-025 link-in-place handling: reads the anon refresh BEFORE wiping local
@@ -1625,4 +1673,4 @@ declare class SendoraSDK {
 }
 declare const SendoraCloud: SendoraSDK;
 
-export { AlreadyIdentifiedError, type AttachLinkingApiOptions, Auth, AuthError, type AuthTokens, type AuthUser, CredentialInUseError, EmailAlreadyTakenError, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };
+export { AlreadyIdentifiedError, type AttachLinkingApiOptions, Auth, AuthError, type AuthTokens, type AuthUser, CredentialInUseError, EmailAlreadyTakenError, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, type LinkedIdentitiesResponse, type LinkedIdentity, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };

package/dist/index.d.ts

@@ -310,6 +310,17 @@ declare class AlreadyIdentifiedError extends Error {
 declare class CredentialInUseError extends Error {
     constructor(message?: string);
 }
+/** One credential linked to an account (ADR-030 read side, s58.270). */
+type LinkedIdentity = {
+    provider: string;
+    email: string | null;
+    linkedAt: string;
+};
+/** Response of `auth.listLinkedIdentities()` — the full connected-account set. */
+type LinkedIdentitiesResponse = {
+    identities: LinkedIdentity[];
+    hasPassword: boolean;
+};
 declare class AuthError extends Error {
     code: string;
     constructor(code: string, message: string);
@@ -344,6 +355,17 @@ interface DeviceTakeoverEvent {
     /** Local clock at the time the SDK observed the event. */
     at: Date;
 }
+/**
+ * Detail handed to `onDeletionCancelled` subscribers (s58.269). Fires once
+ * per sign-in that cancelled a pending self-service deletion within grace —
+ * the account is restored with the SAME user_id.
+ */
+interface DeletionCancelledEvent {
+    /** The restored user_id (unchanged — this is a status flip, not a remap). */
+    userId: string;
+    /** Local clock at the time the SDK observed the event. */
+    at: Date;
+}
 declare class Auth {
     private hooks;
     private user;
@@ -365,6 +387,8 @@ declare class Auth {
     private refreshFailureCount;
     private refreshCooldownUntil;
     private takeoverListeners;
+    private deletionCancelledListeners;
+    private lastDeletionCancelled;
     private lastTakeover;
     /**
      * Anon refresh token captured at `signIn()` time, stashed keyed to the
@@ -434,6 +458,19 @@ declare class Auth {
     getLastDeviceTakeover(): DeviceTakeoverEvent | null;
     /** Internal — fan out to subscribers + cache the latest. */
     private fireDeviceTakeover;
+    /**
+     * Subscribe to deletion-cancelled events (s58.269): fires when a sign-in
+     * cancelled a pending self-service account deletion within its grace window
+     * (the account is restored, same user_id). Use it to show "your account
+     * deletion was cancelled" + reconcile local state. Fires from signIn /
+     * loginSocial / signInWithGameCenter / signInWithPlayGames. Returns an
+     * unsubscribe function; listener errors are swallowed (best-effort).
+     */
+    onDeletionCancelled(listener: (evt: DeletionCancelledEvent) => void): () => void;
+    /** The most recent deletion-cancelled event this session, or null. Cleared on signOut. */
+    getLastDeletionCancelled(): DeletionCancelledEvent | null;
+    /** Internal — fan out deletion-cancelled to subscribers + cache the latest. */
+    private fireDeletionCancelled;
     /**
      * Returns a VALID (non-expired) access token, or null.
      *
@@ -650,6 +687,17 @@ declare class Auth {
      * user object + its storage copy are updated (no token/identity rotation).
      */
     private updateLocalUser;
+    /**
+     * List the auth methods/identities linked to the current account (ADR-030
+     * read side, s58.270). Returns every social/gaming identity on this account
+     * plus a `hasPassword` flag — the cross-device / reinstall-durable source of
+     * truth for a "Connected: Game Center · Google" UI (an on-device tracker
+     * misses a link made on another device). Bearer-gated network read (NOT a
+     * cache read — `getUserSync()` only holds the primary `signupMethod`/
+     * `lastLoginMethod`). Resolves a FRESH access token first (mirrors
+     * `deleteAccount`). Firebase `user.providerData` / Supabase `user.identities`.
+     */
+    listLinkedIdentities(): Promise<LinkedIdentitiesResponse>;
     /**
      * Shared gaming-identity sign-in. Mirrors `loginSocial`'s anon-takeover +
      * ADR-025 link-in-place handling: reads the anon refresh BEFORE wiping local
@@ -1625,4 +1673,4 @@ declare class SendoraSDK {
 }
 declare const SendoraCloud: SendoraSDK;
 
-export { AlreadyIdentifiedError, type AttachLinkingApiOptions, Auth, AuthError, type AuthTokens, type AuthUser, CredentialInUseError, EmailAlreadyTakenError, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };
+export { AlreadyIdentifiedError, type AttachLinkingApiOptions, Auth, AuthError, type AuthTokens, type AuthUser, CredentialInUseError, EmailAlreadyTakenError, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, type LinkedIdentitiesResponse, type LinkedIdentity, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };

package/dist/index.js

@@ -157,7 +157,7 @@ var Storage = class {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.25.0",
+  version: "1.27.0",
   description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
@@ -465,6 +465,8 @@ var Auth = class {
     this.refreshFailureCount = 0;
     this.refreshCooldownUntil = 0;
     this.takeoverListeners = /* @__PURE__ */ new Set();
+    this.deletionCancelledListeners = /* @__PURE__ */ new Set();
+    this.lastDeletionCancelled = null;
     this.lastTakeover = null;
     /**
      * Anon refresh token captured at `signIn()` time, stashed keyed to the
@@ -577,6 +579,36 @@ var Auth = class {
       }
     }
   }
+  /**
+   * Subscribe to deletion-cancelled events (s58.269): fires when a sign-in
+   * cancelled a pending self-service account deletion within its grace window
+   * (the account is restored, same user_id). Use it to show "your account
+   * deletion was cancelled" + reconcile local state. Fires from signIn /
+   * loginSocial / signInWithGameCenter / signInWithPlayGames. Returns an
+   * unsubscribe function; listener errors are swallowed (best-effort).
+   */
+  onDeletionCancelled(listener) {
+    this.deletionCancelledListeners.add(listener);
+    return () => {
+      this.deletionCancelledListeners.delete(listener);
+    };
+  }
+  /** The most recent deletion-cancelled event this session, or null. Cleared on signOut. */
+  getLastDeletionCancelled() {
+    return this.lastDeletionCancelled;
+  }
+  /** Internal — fan out deletion-cancelled to subscribers + cache the latest. */
+  fireDeletionCancelled(userId) {
+    const evt = { userId, at: /* @__PURE__ */ new Date() };
+    this.lastDeletionCancelled = evt;
+    for (const fn of this.deletionCancelledListeners) {
+      try {
+        fn(evt);
+      } catch (err) {
+        if (this.hooks.debug) console.warn("[sendoracloud] onDeletionCancelled listener threw", err);
+      }
+    }
+  }
   /**
    * Returns a VALID (non-expired) access token, or null.
    *
@@ -907,6 +939,36 @@ var Auth = class {
     this.user = user;
     this.hooks.storage.set(USER_KEY, JSON.stringify(user));
   }
+  /**
+   * List the auth methods/identities linked to the current account (ADR-030
+   * read side, s58.270). Returns every social/gaming identity on this account
+   * plus a `hasPassword` flag — the cross-device / reinstall-durable source of
+   * truth for a "Connected: Game Center · Google" UI (an on-device tracker
+   * misses a link made on another device). Bearer-gated network read (NOT a
+   * cache read — `getUserSync()` only holds the primary `signupMethod`/
+   * `lastLoginMethod`). Resolves a FRESH access token first (mirrors
+   * `deleteAccount`). Firebase `user.providerData` / Supabase `user.identities`.
+   */
+  async listLinkedIdentities() {
+    const token = await this.getAccessToken();
+    if (!token) throw new AuthError("NOT_SIGNED_IN", "Sign in before listing linked identities");
+    const res = await getJson(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/me/identities",
+      { Authorization: `Bearer ${token}` }
+    );
+    if (!res || !res.ok) throw new AuthError("NETWORK_ERROR", "Failed to list linked identities");
+    let parsed;
+    try {
+      parsed = await res.json();
+    } catch {
+      throw new AuthError("PARSE_ERROR", `HTTP ${res.status}`);
+    }
+    if (!parsed.success || !parsed.data) {
+      throw new AuthError(parsed.error?.code ?? "IDENTITIES_FAILED", parsed.error?.message ?? "Failed to list linked identities");
+    }
+    return { identities: parsed.data.identities ?? [], hasPassword: Boolean(parsed.data.hasPassword) };
+  }
   /**
    * Shared gaming-identity sign-in. Mirrors `loginSocial`'s anon-takeover +
    * ADR-025 link-in-place handling: reads the anon refresh BEFORE wiping local
@@ -1554,12 +1616,16 @@ var Auth = class {
     if (data.retiredAnonUserId) {
       this.fireDeviceTakeover(data.retiredAnonUserId, data.user.id);
     }
+    if (data.reactivatedFromDeletion) {
+      this.fireDeletionCancelled(data.user.id);
+    }
   }
   async wipeLocalIdentity() {
     this.user = null;
     this.accessToken = null;
     this.accessExpiresAt = 0;
     this.lastTakeover = null;
+    this.lastDeletionCancelled = null;
     this.pendingAnonTakeover = null;
     this.hooks.storage.remove(USER_KEY);
     this.hooks.storage.remove(TOKEN_KEY);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "1.25.0",
+  "version": "1.27.0",
   "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   "type": "module",
   "main": "./dist/index.cjs",