@sendoracloud/sdk-react-native 1.29.0 → 1.31.0

package/dist/index.cjs

@@ -202,7 +202,7 @@ var Storage = class {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.29.0",
+  version: "1.31.0",
   description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
@@ -258,7 +258,7 @@ var package_default = {
   scripts: {
     build: "tsup src/index.ts src/contact-widget.tsx --format esm,cjs --dts --clean --external react --external react-native --external react-native-webview",
     typecheck: "tsc --noEmit",
-    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts"
+    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts"
   },
   devDependencies: {
     "@types/react": "^19.2.16",
@@ -435,11 +435,37 @@ var AlreadyIdentifiedError = class extends Error {
   }
 };
 var CredentialInUseError = class extends Error {
-  constructor(message = "This credential is already linked to a different account") {
+  constructor(message = "This credential is already linked to a different account", opts) {
     super(message);
+    /** Always `"CREDENTIAL_IN_USE"`. */
+    this.code = "CREDENTIAL_IN_USE";
+    /**
+     * Always `"credential_in_use"`. Carried so this can be handled in the same
+     * `switch (err.kind)` as every other auth failure.
+     *
+     * NOTE this class deliberately does NOT extend `AuthError` — widening
+     * `instanceof AuthError` to include it would silently re-route an upgrading
+     * app that checks `AuthError` before this class. The taxonomy fields are
+     * duplicated instead.
+     */
+    this.kind = "credential_in_use";
+    /** Always false — a different account owns it; retrying changes nothing. */
+    this.retryable = false;
     this.name = "CredentialInUseError";
+    this.provider = opts?.provider;
+    this.collision = opts?.collision;
+    this.status = opts?.status;
   }
 };
+function readCollisionDetails(parsed) {
+  const details = parsed?.error?.details;
+  if (!details || typeof details !== "object") return {};
+  const d = details;
+  return {
+    provider: typeof d.provider === "string" ? d.provider : void 0,
+    collision: d.collision === "identity" || d.collision === "email" ? d.collision : void 0
+  };
+}
 var RETRYABLE_KINDS = /* @__PURE__ */ new Set([
   "network",
   "server",
@@ -671,9 +697,21 @@ var Auth = class {
    * keyed by the anonymous id — your own users table, an analytics
    * cache, an audience filter — without needing a webhook receiver.
    *
-   * Listener is invoked from `signIn`, `loginSocial`, `verifyMagicLink`,
-   * `verifyEmailOtp`, `passkey authentication`, and SSO completion
-   * (via `consumeSsoFragment`). Returns an unsubscribe function.
+   * Fires on EVERY identified sign-in path — `signIn`, `loginSocial`,
+   * `signInWithGameCenter`, `signInWithPlayGames`, `challengeMfa`,
+   * `verifyMagicLink`, `verifyEmailOtp`, passkey authentication, and SSO
+   * completion (`consumeSsoFragment`) — because it is fired centrally from
+   * `persist()` whenever the response carries `retiredAnonUserId`.
+   *
+   * ⚠ The two gaming paths are the ones that matter most here, and were
+   * missing from this list before 1.31.0. When the presented player identity
+   * already belongs to another account, the sign-in ADOPTS that account and
+   * the anonymous account on this device is retired — its row is DELETED
+   * server-side. This listener is the only client-side signal that happened;
+   * the call itself resolves successfully. If you would rather it not happen
+   * at all, pass `onCredentialInUse: "reject"`.
+   *
+   * Returns an unsubscribe function.
    *
    * Listeners are best-effort: errors thrown inside them are swallowed
    * + logged in dev mode. Auth state never depends on listener success.
@@ -971,10 +1009,11 @@ var Auth = class {
   loginSocial(input) {
     return this.serialize(async () => {
       const prevAnonRefreshToken = this.readPrevAnonRefreshToken();
-      const { link, ...socialInput } = input;
+      const { link, onCredentialInUse, ...socialInput } = input;
       const payload = { ...socialInput };
       if (prevAnonRefreshToken) payload.prevAnonRefreshToken = prevAnonRefreshToken;
       if (link) payload.linkAnonymous = true;
+      if (onCredentialInUse) payload.onCredentialInUse = onCredentialInUse;
       const res = await post(
         { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
         "/api/v1/auth-service/login/social",
@@ -988,6 +1027,12 @@ var Auth = class {
         throw new AuthError("PARSE_ERROR", `HTTP ${res.status}`, { status: res.status });
       }
       if (!res.ok || !parsed.success || !isAuthApiResponse(parsed.data)) {
+        if (parsed.error?.code === "CREDENTIAL_IN_USE") {
+          throw new CredentialInUseError(parsed.error.message, {
+            ...readCollisionDetails(parsed),
+            status: res.status
+          });
+        }
         throw new AuthError(
           parsed.error?.code ?? "SOCIAL_LOGIN_FAILED",
           parsed.error?.message ?? "Social login failed",
@@ -1023,26 +1068,24 @@ var Auth = class {
   signInWithGameCenter(payloadOrOpts, maybeOpts) {
     const path = "/api/v1/auth-service/login/game-center";
     if (payloadOrOpts && "publicKeyUrl" in payloadOrOpts) {
-      return this.gameIdentitySignIn(path, { ...payloadOrOpts }, maybeOpts?.link);
+      return this.gameIdentitySignIn(path, { ...payloadOrOpts }, maybeOpts);
     }
-    const link = payloadOrOpts?.link;
     return this.gameIdentitySignIn(
       path,
       async () => await fetchGameCenterPayloadNative(),
-      link
+      payloadOrOpts
     );
   }
   signInWithPlayGames(payloadOrOpts, maybeOpts) {
     const path = "/api/v1/auth-service/login/play-games";
     if (payloadOrOpts && "serverAuthCode" in payloadOrOpts) {
       const { serverAuthCode } = payloadOrOpts;
-      return this.gameIdentitySignIn(path, { serverAuthCode }, maybeOpts?.link);
+      return this.gameIdentitySignIn(path, { serverAuthCode }, maybeOpts);
     }
-    const link = payloadOrOpts?.link;
     return this.gameIdentitySignIn(
       path,
       async () => await fetchPlayGamesAuthCodeNative(),
-      link
+      payloadOrOpts
     );
   }
   // ============================================================
@@ -1117,12 +1160,21 @@ var Auth = class {
     }
     if (!res.ok || !parsed.success || !parsed.data) {
       const code = parsed.error?.code ?? `HTTP_${res.status}`;
-      if (code === "CREDENTIAL_IN_USE") throw new CredentialInUseError(parsed.error?.message);
+      if (code === "CREDENTIAL_IN_USE") {
+        throw new CredentialInUseError(parsed.error?.message, {
+          ...readCollisionDetails(parsed),
+          status: res.status
+        });
+      }
       throw new AuthError(code, parsed.error?.message ?? "Failed to link credential", {
         status: res.status,
         retryAfterSeconds: readRetryAfterSeconds(parsed)
       });
     }
+    if (parsed.data.upgraded && isAuthApiResponse(parsed.data)) {
+      this.persist(parsed.data);
+      return parsed.data.user;
+    }
     if (parsed.data.user) this.updateLocalUser(parsed.data.user);
     return parsed.data.user ?? this.user;
   }
@@ -1171,13 +1223,16 @@ var Auth = class {
    * `linkAnonymous` when `link` is set. `persist()` fires `onDeviceTakeover`
    * centrally from `retiredAnonUserId`.
    */
-  gameIdentitySignIn(path, identityBody, link) {
+  gameIdentitySignIn(path, identityBody, opts) {
+    const link = opts?.link;
+    const onCredentialInUse = opts?.onCredentialInUse;
     return this.serialize(async () => {
       const body = typeof identityBody === "function" ? await identityBody() : identityBody;
       const prevAnonRefreshToken = this.readPrevAnonRefreshToken();
       const payload = { ...body };
       if (prevAnonRefreshToken) payload.prevAnonRefreshToken = prevAnonRefreshToken;
       if (link) payload.linkAnonymous = true;
+      if (onCredentialInUse) payload.onCredentialInUse = onCredentialInUse;
       const res = await post(
         { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
         path,
@@ -1191,6 +1246,12 @@ var Auth = class {
         throw new AuthError("PARSE_ERROR", `HTTP ${res.status}`, { status: res.status });
       }
       if (!res.ok || !parsed.success || !isAuthApiResponse(parsed.data)) {
+        if (parsed.error?.code === "CREDENTIAL_IN_USE") {
+          throw new CredentialInUseError(parsed.error.message, {
+            ...readCollisionDetails(parsed),
+            status: res.status
+          });
+        }
         throw new AuthError(
           parsed.error?.code ?? "GAME_LOGIN_FAILED",
           parsed.error?.message ?? "Game sign-in failed",

package/dist/index.d.cts

@@ -317,8 +317,70 @@ declare class AlreadyIdentifiedError extends Error {
  * account instead, or link a different credential.
  */
 declare class CredentialInUseError extends Error {
-    constructor(message?: string);
+    /** Always `"CREDENTIAL_IN_USE"`. */
+    readonly code = "CREDENTIAL_IN_USE";
+    /**
+     * Always `"credential_in_use"`. Carried so this can be handled in the same
+     * `switch (err.kind)` as every other auth failure.
+     *
+     * NOTE this class deliberately does NOT extend `AuthError` — widening
+     * `instanceof AuthError` to include it would silently re-route an upgrading
+     * app that checks `AuthError` before this class. The taxonomy fields are
+     * duplicated instead.
+     */
+    readonly kind: "credential_in_use";
+    /** Always false — a different account owns it; retrying changes nothing. */
+    readonly retryable = false;
+    /** The provider whose credential collided, when the server named it. */
+    readonly provider?: string;
+    /**
+     * Which collision this was: `"identity"` = that exact provider identity is
+     * already linked to another account; `"email"` = the provider's verified
+     * email already belongs to one. Absent on older backends.
+     */
+    readonly collision?: "identity" | "email";
+    readonly status?: number;
+    constructor(message?: string, opts?: {
+        provider?: string;
+        collision?: "identity" | "email";
+        status?: number;
+    });
 }
+/**
+ * What a sign-in should do when the credential you present already belongs to
+ * an account (1.30.0).
+ *
+ * - `"adopt"` (default — and what every earlier release did unconditionally):
+ *   sign in to that account. This is the reinstall-recovery path: a Game Center
+ *   / Play Games player identity survives a reinstall server-side, so the
+ *   "collision" is usually the SAME person's earlier account. If this device is
+ *   anonymous, that anonymous account is retired — **its row is deleted** — and
+ *   `onDeviceTakeover` fires with its id.
+ * - `"reject"`: throw `CredentialInUseError` and change nothing at all. Use it
+ *   when the local anonymous session holds progress you are not willing to
+ *   trade. Mirrors Firebase `linkWithCredential`
+ *   (`auth/credential-already-in-use`) and Supabase `linkIdentity`.
+ *
+ * `"reject"` blocks the switch; it does not merge the two accounts. To offer
+ * "use my other account", catch the error and re-call with `"adopt"`, then
+ * migrate your own data from `onDeviceTakeover`'s `retiredAnonUserId`.
+ */
+type CredentialCollisionPolicy = "adopt" | "reject";
+/** Options for the Game Center / Play Games sign-in methods. */
+type GameSignInOptions = {
+    /**
+     * ADR-025 link-in-place. When this device is anonymous and the player
+     * identity is BRAND NEW, the anonymous account is promoted in place and the
+     * user id (sub) is preserved. Has no effect on a collision — see
+     * `onCredentialInUse` for that case.
+     */
+    link?: boolean;
+    /**
+     * What to do when the player identity already belongs to an account.
+     * Default `"adopt"`. See {@link CredentialCollisionPolicy}.
+     */
+    onCredentialInUse?: CredentialCollisionPolicy;
+};
 /** One credential linked to an account (ADR-030 read side, s58.270). */
 type LinkedIdentity = {
     provider: string;
@@ -521,9 +583,21 @@ declare class Auth {
      * keyed by the anonymous id — your own users table, an analytics
      * cache, an audience filter — without needing a webhook receiver.
      *
-     * Listener is invoked from `signIn`, `loginSocial`, `verifyMagicLink`,
-     * `verifyEmailOtp`, `passkey authentication`, and SSO completion
-     * (via `consumeSsoFragment`). Returns an unsubscribe function.
+     * Fires on EVERY identified sign-in path — `signIn`, `loginSocial`,
+     * `signInWithGameCenter`, `signInWithPlayGames`, `challengeMfa`,
+     * `verifyMagicLink`, `verifyEmailOtp`, passkey authentication, and SSO
+     * completion (`consumeSsoFragment`) — because it is fired centrally from
+     * `persist()` whenever the response carries `retiredAnonUserId`.
+     *
+     * ⚠ The two gaming paths are the ones that matter most here, and were
+     * missing from this list before 1.31.0. When the presented player identity
+     * already belongs to another account, the sign-in ADOPTS that account and
+     * the anonymous account on this device is retired — its row is DELETED
+     * server-side. This listener is the only client-side signal that happened;
+     * the call itself resolves successfully. If you would rather it not happen
+     * at all, pass `onCredentialInUse: "reject"`.
+     *
+     * Returns an unsubscribe function.
      *
      * Listeners are best-effort: errors thrown inside them are swallowed
      * + logged in dev mode. Auth state never depends on listener success.
@@ -690,6 +764,13 @@ declare class Auth {
          * another account (collision → falls back to takeover/merge).
          */
         link?: boolean;
+        /**
+         * What to do if this social identity (or its verified email) already
+         * belongs to an account. Default `"adopt"` = sign in to it, retiring this
+         * device's anonymous account. `"reject"` throws `CredentialInUseError` and
+         * leaves everything untouched. See {@link CredentialCollisionPolicy}.
+         */
+        onCredentialInUse?: CredentialCollisionPolicy;
     }): Promise<AuthUser>;
     signInWithGoogle(code: string, redirectUri: string, link?: boolean): Promise<AuthUser>;
     signInWithGitHub(code: string, redirectUri: string): Promise<AuthUser>;
@@ -723,12 +804,8 @@ declare class Auth {
      * `link: true` KEEPS the same user id when upgrading an anonymous device
      * (ADR-025 link-in-place); no effect off-anon or on a collision.
      */
-    signInWithGameCenter(opts?: {
-        link?: boolean;
-    }): Promise<AuthUser>;
-    signInWithGameCenter(payload: GameCenterPayload, opts?: {
-        link?: boolean;
-    }): Promise<AuthUser>;
+    signInWithGameCenter(opts?: GameSignInOptions): Promise<AuthUser>;
+    signInWithGameCenter(payload: GameCenterPayload, opts?: GameSignInOptions): Promise<AuthUser>;
     /**
      * Google Play Games sign-in (email-less, Android-only).
      *
@@ -744,14 +821,10 @@ declare class Auth {
      *
      * `link: true` = ADR-025 link-in-place (same user id on an anon upgrade).
      */
-    signInWithPlayGames(opts?: {
-        link?: boolean;
-    }): Promise<AuthUser>;
+    signInWithPlayGames(opts?: GameSignInOptions): Promise<AuthUser>;
     signInWithPlayGames(payload: {
         serverAuthCode: string;
-    }, opts?: {
-        link?: boolean;
-    }): Promise<AuthUser>;
+    }, opts?: GameSignInOptions): Promise<AuthUser>;
     /** Link email + password to the current account (sub preserved). */
     linkEmailPassword(email: string, password: string): Promise<AuthUser>;
     /** Link an OAuth social identity (verified idToken or code) to the current account. */
@@ -1823,4 +1896,4 @@ declare class SendoraSDK {
 }
 declare const SendoraCloud: SendoraSDK;
 
-export { AlreadyIdentifiedError, type AttachLinkingApiOptions, Auth, AuthError, type AuthErrorKind, type AuthSignedOutReason, type AuthStateChange, type AuthTokens, type AuthUser, CredentialInUseError, type DeletionCancelledEvent, type DeviceTakeoverEvent, EmailAlreadyTakenError, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, type LinkedIdentitiesResponse, type LinkedIdentity, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };
+export { AlreadyIdentifiedError, type AttachLinkingApiOptions, Auth, AuthError, type AuthErrorKind, type AuthSignedOutReason, type AuthStateChange, type AuthTokens, type AuthUser, type CredentialCollisionPolicy, CredentialInUseError, type DeletionCancelledEvent, type DeviceTakeoverEvent, EmailAlreadyTakenError, type GameSignInOptions, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, type LinkedIdentitiesResponse, type LinkedIdentity, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };

package/dist/index.d.ts

@@ -317,8 +317,70 @@ declare class AlreadyIdentifiedError extends Error {
  * account instead, or link a different credential.
  */
 declare class CredentialInUseError extends Error {
-    constructor(message?: string);
+    /** Always `"CREDENTIAL_IN_USE"`. */
+    readonly code = "CREDENTIAL_IN_USE";
+    /**
+     * Always `"credential_in_use"`. Carried so this can be handled in the same
+     * `switch (err.kind)` as every other auth failure.
+     *
+     * NOTE this class deliberately does NOT extend `AuthError` — widening
+     * `instanceof AuthError` to include it would silently re-route an upgrading
+     * app that checks `AuthError` before this class. The taxonomy fields are
+     * duplicated instead.
+     */
+    readonly kind: "credential_in_use";
+    /** Always false — a different account owns it; retrying changes nothing. */
+    readonly retryable = false;
+    /** The provider whose credential collided, when the server named it. */
+    readonly provider?: string;
+    /**
+     * Which collision this was: `"identity"` = that exact provider identity is
+     * already linked to another account; `"email"` = the provider's verified
+     * email already belongs to one. Absent on older backends.
+     */
+    readonly collision?: "identity" | "email";
+    readonly status?: number;
+    constructor(message?: string, opts?: {
+        provider?: string;
+        collision?: "identity" | "email";
+        status?: number;
+    });
 }
+/**
+ * What a sign-in should do when the credential you present already belongs to
+ * an account (1.30.0).
+ *
+ * - `"adopt"` (default — and what every earlier release did unconditionally):
+ *   sign in to that account. This is the reinstall-recovery path: a Game Center
+ *   / Play Games player identity survives a reinstall server-side, so the
+ *   "collision" is usually the SAME person's earlier account. If this device is
+ *   anonymous, that anonymous account is retired — **its row is deleted** — and
+ *   `onDeviceTakeover` fires with its id.
+ * - `"reject"`: throw `CredentialInUseError` and change nothing at all. Use it
+ *   when the local anonymous session holds progress you are not willing to
+ *   trade. Mirrors Firebase `linkWithCredential`
+ *   (`auth/credential-already-in-use`) and Supabase `linkIdentity`.
+ *
+ * `"reject"` blocks the switch; it does not merge the two accounts. To offer
+ * "use my other account", catch the error and re-call with `"adopt"`, then
+ * migrate your own data from `onDeviceTakeover`'s `retiredAnonUserId`.
+ */
+type CredentialCollisionPolicy = "adopt" | "reject";
+/** Options for the Game Center / Play Games sign-in methods. */
+type GameSignInOptions = {
+    /**
+     * ADR-025 link-in-place. When this device is anonymous and the player
+     * identity is BRAND NEW, the anonymous account is promoted in place and the
+     * user id (sub) is preserved. Has no effect on a collision — see
+     * `onCredentialInUse` for that case.
+     */
+    link?: boolean;
+    /**
+     * What to do when the player identity already belongs to an account.
+     * Default `"adopt"`. See {@link CredentialCollisionPolicy}.
+     */
+    onCredentialInUse?: CredentialCollisionPolicy;
+};
 /** One credential linked to an account (ADR-030 read side, s58.270). */
 type LinkedIdentity = {
     provider: string;
@@ -521,9 +583,21 @@ declare class Auth {
      * keyed by the anonymous id — your own users table, an analytics
      * cache, an audience filter — without needing a webhook receiver.
      *
-     * Listener is invoked from `signIn`, `loginSocial`, `verifyMagicLink`,
-     * `verifyEmailOtp`, `passkey authentication`, and SSO completion
-     * (via `consumeSsoFragment`). Returns an unsubscribe function.
+     * Fires on EVERY identified sign-in path — `signIn`, `loginSocial`,
+     * `signInWithGameCenter`, `signInWithPlayGames`, `challengeMfa`,
+     * `verifyMagicLink`, `verifyEmailOtp`, passkey authentication, and SSO
+     * completion (`consumeSsoFragment`) — because it is fired centrally from
+     * `persist()` whenever the response carries `retiredAnonUserId`.
+     *
+     * ⚠ The two gaming paths are the ones that matter most here, and were
+     * missing from this list before 1.31.0. When the presented player identity
+     * already belongs to another account, the sign-in ADOPTS that account and
+     * the anonymous account on this device is retired — its row is DELETED
+     * server-side. This listener is the only client-side signal that happened;
+     * the call itself resolves successfully. If you would rather it not happen
+     * at all, pass `onCredentialInUse: "reject"`.
+     *
+     * Returns an unsubscribe function.
      *
      * Listeners are best-effort: errors thrown inside them are swallowed
      * + logged in dev mode. Auth state never depends on listener success.
@@ -690,6 +764,13 @@ declare class Auth {
          * another account (collision → falls back to takeover/merge).
          */
         link?: boolean;
+        /**
+         * What to do if this social identity (or its verified email) already
+         * belongs to an account. Default `"adopt"` = sign in to it, retiring this
+         * device's anonymous account. `"reject"` throws `CredentialInUseError` and
+         * leaves everything untouched. See {@link CredentialCollisionPolicy}.
+         */
+        onCredentialInUse?: CredentialCollisionPolicy;
     }): Promise<AuthUser>;
     signInWithGoogle(code: string, redirectUri: string, link?: boolean): Promise<AuthUser>;
     signInWithGitHub(code: string, redirectUri: string): Promise<AuthUser>;
@@ -723,12 +804,8 @@ declare class Auth {
      * `link: true` KEEPS the same user id when upgrading an anonymous device
      * (ADR-025 link-in-place); no effect off-anon or on a collision.
      */
-    signInWithGameCenter(opts?: {
-        link?: boolean;
-    }): Promise<AuthUser>;
-    signInWithGameCenter(payload: GameCenterPayload, opts?: {
-        link?: boolean;
-    }): Promise<AuthUser>;
+    signInWithGameCenter(opts?: GameSignInOptions): Promise<AuthUser>;
+    signInWithGameCenter(payload: GameCenterPayload, opts?: GameSignInOptions): Promise<AuthUser>;
     /**
      * Google Play Games sign-in (email-less, Android-only).
      *
@@ -744,14 +821,10 @@ declare class Auth {
      *
      * `link: true` = ADR-025 link-in-place (same user id on an anon upgrade).
      */
-    signInWithPlayGames(opts?: {
-        link?: boolean;
-    }): Promise<AuthUser>;
+    signInWithPlayGames(opts?: GameSignInOptions): Promise<AuthUser>;
     signInWithPlayGames(payload: {
         serverAuthCode: string;
-    }, opts?: {
-        link?: boolean;
-    }): Promise<AuthUser>;
+    }, opts?: GameSignInOptions): Promise<AuthUser>;
     /** Link email + password to the current account (sub preserved). */
     linkEmailPassword(email: string, password: string): Promise<AuthUser>;
     /** Link an OAuth social identity (verified idToken or code) to the current account. */
@@ -1823,4 +1896,4 @@ declare class SendoraSDK {
 }
 declare const SendoraCloud: SendoraSDK;
 
-export { AlreadyIdentifiedError, type AttachLinkingApiOptions, Auth, AuthError, type AuthErrorKind, type AuthSignedOutReason, type AuthStateChange, type AuthTokens, type AuthUser, CredentialInUseError, type DeletionCancelledEvent, type DeviceTakeoverEvent, EmailAlreadyTakenError, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, type LinkedIdentitiesResponse, type LinkedIdentity, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };
+export { AlreadyIdentifiedError, type AttachLinkingApiOptions, Auth, AuthError, type AuthErrorKind, type AuthSignedOutReason, type AuthStateChange, type AuthTokens, type AuthUser, type CredentialCollisionPolicy, CredentialInUseError, type DeletionCancelledEvent, type DeviceTakeoverEvent, EmailAlreadyTakenError, type GameSignInOptions, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, type LinkedIdentitiesResponse, type LinkedIdentity, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };

package/dist/index.js

@@ -157,7 +157,7 @@ var Storage = class {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.29.0",
+  version: "1.31.0",
   description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
@@ -213,7 +213,7 @@ var package_default = {
   scripts: {
     build: "tsup src/index.ts src/contact-widget.tsx --format esm,cjs --dts --clean --external react --external react-native --external react-native-webview",
     typecheck: "tsc --noEmit",
-    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts"
+    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts"
   },
   devDependencies: {
     "@types/react": "^19.2.16",
@@ -390,11 +390,37 @@ var AlreadyIdentifiedError = class extends Error {
   }
 };
 var CredentialInUseError = class extends Error {
-  constructor(message = "This credential is already linked to a different account") {
+  constructor(message = "This credential is already linked to a different account", opts) {
     super(message);
+    /** Always `"CREDENTIAL_IN_USE"`. */
+    this.code = "CREDENTIAL_IN_USE";
+    /**
+     * Always `"credential_in_use"`. Carried so this can be handled in the same
+     * `switch (err.kind)` as every other auth failure.
+     *
+     * NOTE this class deliberately does NOT extend `AuthError` — widening
+     * `instanceof AuthError` to include it would silently re-route an upgrading
+     * app that checks `AuthError` before this class. The taxonomy fields are
+     * duplicated instead.
+     */
+    this.kind = "credential_in_use";
+    /** Always false — a different account owns it; retrying changes nothing. */
+    this.retryable = false;
     this.name = "CredentialInUseError";
+    this.provider = opts?.provider;
+    this.collision = opts?.collision;
+    this.status = opts?.status;
   }
 };
+function readCollisionDetails(parsed) {
+  const details = parsed?.error?.details;
+  if (!details || typeof details !== "object") return {};
+  const d = details;
+  return {
+    provider: typeof d.provider === "string" ? d.provider : void 0,
+    collision: d.collision === "identity" || d.collision === "email" ? d.collision : void 0
+  };
+}
 var RETRYABLE_KINDS = /* @__PURE__ */ new Set([
   "network",
   "server",
@@ -626,9 +652,21 @@ var Auth = class {
    * keyed by the anonymous id — your own users table, an analytics
    * cache, an audience filter — without needing a webhook receiver.
    *
-   * Listener is invoked from `signIn`, `loginSocial`, `verifyMagicLink`,
-   * `verifyEmailOtp`, `passkey authentication`, and SSO completion
-   * (via `consumeSsoFragment`). Returns an unsubscribe function.
+   * Fires on EVERY identified sign-in path — `signIn`, `loginSocial`,
+   * `signInWithGameCenter`, `signInWithPlayGames`, `challengeMfa`,
+   * `verifyMagicLink`, `verifyEmailOtp`, passkey authentication, and SSO
+   * completion (`consumeSsoFragment`) — because it is fired centrally from
+   * `persist()` whenever the response carries `retiredAnonUserId`.
+   *
+   * ⚠ The two gaming paths are the ones that matter most here, and were
+   * missing from this list before 1.31.0. When the presented player identity
+   * already belongs to another account, the sign-in ADOPTS that account and
+   * the anonymous account on this device is retired — its row is DELETED
+   * server-side. This listener is the only client-side signal that happened;
+   * the call itself resolves successfully. If you would rather it not happen
+   * at all, pass `onCredentialInUse: "reject"`.
+   *
+   * Returns an unsubscribe function.
    *
    * Listeners are best-effort: errors thrown inside them are swallowed
    * + logged in dev mode. Auth state never depends on listener success.
@@ -926,10 +964,11 @@ var Auth = class {
   loginSocial(input) {
     return this.serialize(async () => {
       const prevAnonRefreshToken = this.readPrevAnonRefreshToken();
-      const { link, ...socialInput } = input;
+      const { link, onCredentialInUse, ...socialInput } = input;
       const payload = { ...socialInput };
       if (prevAnonRefreshToken) payload.prevAnonRefreshToken = prevAnonRefreshToken;
       if (link) payload.linkAnonymous = true;
+      if (onCredentialInUse) payload.onCredentialInUse = onCredentialInUse;
       const res = await post(
         { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
         "/api/v1/auth-service/login/social",
@@ -943,6 +982,12 @@ var Auth = class {
         throw new AuthError("PARSE_ERROR", `HTTP ${res.status}`, { status: res.status });
       }
       if (!res.ok || !parsed.success || !isAuthApiResponse(parsed.data)) {
+        if (parsed.error?.code === "CREDENTIAL_IN_USE") {
+          throw new CredentialInUseError(parsed.error.message, {
+            ...readCollisionDetails(parsed),
+            status: res.status
+          });
+        }
         throw new AuthError(
           parsed.error?.code ?? "SOCIAL_LOGIN_FAILED",
           parsed.error?.message ?? "Social login failed",
@@ -978,26 +1023,24 @@ var Auth = class {
   signInWithGameCenter(payloadOrOpts, maybeOpts) {
     const path = "/api/v1/auth-service/login/game-center";
     if (payloadOrOpts && "publicKeyUrl" in payloadOrOpts) {
-      return this.gameIdentitySignIn(path, { ...payloadOrOpts }, maybeOpts?.link);
+      return this.gameIdentitySignIn(path, { ...payloadOrOpts }, maybeOpts);
     }
-    const link = payloadOrOpts?.link;
     return this.gameIdentitySignIn(
       path,
       async () => await fetchGameCenterPayloadNative(),
-      link
+      payloadOrOpts
     );
   }
   signInWithPlayGames(payloadOrOpts, maybeOpts) {
     const path = "/api/v1/auth-service/login/play-games";
     if (payloadOrOpts && "serverAuthCode" in payloadOrOpts) {
       const { serverAuthCode } = payloadOrOpts;
-      return this.gameIdentitySignIn(path, { serverAuthCode }, maybeOpts?.link);
+      return this.gameIdentitySignIn(path, { serverAuthCode }, maybeOpts);
     }
-    const link = payloadOrOpts?.link;
     return this.gameIdentitySignIn(
       path,
       async () => await fetchPlayGamesAuthCodeNative(),
-      link
+      payloadOrOpts
     );
   }
   // ============================================================
@@ -1072,12 +1115,21 @@ var Auth = class {
     }
     if (!res.ok || !parsed.success || !parsed.data) {
       const code = parsed.error?.code ?? `HTTP_${res.status}`;
-      if (code === "CREDENTIAL_IN_USE") throw new CredentialInUseError(parsed.error?.message);
+      if (code === "CREDENTIAL_IN_USE") {
+        throw new CredentialInUseError(parsed.error?.message, {
+          ...readCollisionDetails(parsed),
+          status: res.status
+        });
+      }
       throw new AuthError(code, parsed.error?.message ?? "Failed to link credential", {
         status: res.status,
         retryAfterSeconds: readRetryAfterSeconds(parsed)
       });
     }
+    if (parsed.data.upgraded && isAuthApiResponse(parsed.data)) {
+      this.persist(parsed.data);
+      return parsed.data.user;
+    }
     if (parsed.data.user) this.updateLocalUser(parsed.data.user);
     return parsed.data.user ?? this.user;
   }
@@ -1126,13 +1178,16 @@ var Auth = class {
    * `linkAnonymous` when `link` is set. `persist()` fires `onDeviceTakeover`
    * centrally from `retiredAnonUserId`.
    */
-  gameIdentitySignIn(path, identityBody, link) {
+  gameIdentitySignIn(path, identityBody, opts) {
+    const link = opts?.link;
+    const onCredentialInUse = opts?.onCredentialInUse;
     return this.serialize(async () => {
       const body = typeof identityBody === "function" ? await identityBody() : identityBody;
       const prevAnonRefreshToken = this.readPrevAnonRefreshToken();
       const payload = { ...body };
       if (prevAnonRefreshToken) payload.prevAnonRefreshToken = prevAnonRefreshToken;
       if (link) payload.linkAnonymous = true;
+      if (onCredentialInUse) payload.onCredentialInUse = onCredentialInUse;
       const res = await post(
         { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
         path,
@@ -1146,6 +1201,12 @@ var Auth = class {
         throw new AuthError("PARSE_ERROR", `HTTP ${res.status}`, { status: res.status });
       }
       if (!res.ok || !parsed.success || !isAuthApiResponse(parsed.data)) {
+        if (parsed.error?.code === "CREDENTIAL_IN_USE") {
+          throw new CredentialInUseError(parsed.error.message, {
+            ...readCollisionDetails(parsed),
+            status: res.status
+          });
+        }
         throw new AuthError(
           parsed.error?.code ?? "GAME_LOGIN_FAILED",
           parsed.error?.message ?? "Game sign-in failed",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "1.29.0",
-  "description": "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
+  "version": "1.31.0",
+  "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
@@ -56,7 +56,7 @@
   "scripts": {
     "build": "tsup src/index.ts src/contact-widget.tsx --format esm,cjs --dts --clean --external react --external react-native --external react-native-webview",
     "typecheck": "tsc --noEmit",
-    "test": "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts"
+    "test": "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts"
   },
   "devDependencies": {
     "@types/react": "^19.2.16",