@sendoracloud/sdk-react-native 1.31.0 → 1.33.0

package/dist/index.cjs

@@ -202,7 +202,7 @@ var Storage = class {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.31.0",
+  version: "1.33.0",
   description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
@@ -614,6 +614,7 @@ var Auth = class {
     this.deletionCancelledListeners = /* @__PURE__ */ new Set();
     this.authStateListeners = /* @__PURE__ */ new Set();
     this.lastDeletionCancelled = null;
+    this.lastAnonRetirement = null;
     this.lastTakeover = null;
     /**
      * Anon refresh token captured at `signIn()` time, stashed keyed to the
@@ -807,6 +808,19 @@ var Auth = class {
   getLastDeletionCancelled() {
     return this.lastDeletionCancelled;
   }
+  /**
+   * What the last sign-in did with this device's guest account, or null if no
+   * sign-in has happened this session (s58.278).
+   *
+   * The one worth acting on is `"preserved"`: a guest account was presented,
+   * was NOT retired, and is therefore still alive server-side — so "recover
+   * your other account" is a real offer rather than a guess. `"retired"` means
+   * migrate from `onDeviceTakeover`'s id; `"none"` means there was nothing to
+   * reconcile. Cleared on signOut.
+   */
+  getLastAnonRetirement() {
+    return this.lastAnonRetirement;
+  }
   /** Internal — fan out deletion-cancelled to subscribers + cache the latest. */
   fireDeletionCancelled(userId) {
     const evt = { userId, at: /* @__PURE__ */ new Date() };
@@ -1889,6 +1903,7 @@ var Auth = class {
         retiredAnonUserId: data.retiredAnonUserId
       });
     }
+    if (data.anonRetirement) this.lastAnonRetirement = data.anonRetirement;
     if (data.reactivatedFromDeletion) {
       this.fireDeletionCancelled(data.user.id);
       this.emitAuthState({ event: "deletion_cancelled", user: data.user });
@@ -1925,6 +1940,7 @@ var Auth = class {
     this.accessExpiresAt = 0;
     this.lastTakeover = null;
     this.lastDeletionCancelled = null;
+    this.lastAnonRetirement = null;
     this.pendingAnonTakeover = null;
     this.hooks.storage.remove(USER_KEY);
     this.hooks.storage.remove(TOKEN_KEY);

package/dist/index.d.cts

@@ -298,6 +298,8 @@ interface GameCenterPayload {
     teamPlayerId: string;
     bundleId: string;
 }
+/** @see AuthApiResponse.anonRetirement */
+type AnonRetirementOutcome = "retired" | "preserved" | "none";
 declare class EmailAlreadyTakenError extends Error {
     constructor(message?: string);
 }
@@ -348,20 +350,27 @@ declare class CredentialInUseError extends Error {
 }
 /**
  * What a sign-in should do when the credential you present already belongs to
- * an account (1.30.0).
+ * an account.
  *
- * - `"adopt"` (default — and what every earlier release did unconditionally):
- *   sign in to that account. This is the reinstall-recovery path: a Game Center
- *   / Play Games player identity survives a reinstall server-side, so the
- *   "collision" is usually the SAME person's earlier account. If this device is
- *   anonymous, that anonymous account is retired — **its row is deleted** — and
- *   `onDeviceTakeover` fires with its id.
- * - `"reject"`: throw `CredentialInUseError` and change nothing at all. Use it
- *   when the local anonymous session holds progress you are not willing to
- *   trade. Mirrors Firebase `linkWithCredential`
- *   (`auth/credential-already-in-use`) and Supabase `linkIdentity`.
+ * **You usually want the default — omit this.** Since 1.32.0 the default is
+ * safe by construction: adopt the other account silently when nothing would be
+ * destroyed, and refuse when something would be.
  *
- * `"reject"` blocks the switch; it does not merge the two accounts. To offer
+ * - **Fresh install / no guest session** → nothing to lose, so it adopts. This
+ *   is the reinstall-recovery path: a Game Center / Play Games identity
+ *   survives a reinstall server-side, so the "collision" is usually the SAME
+ *   person's earlier account, and they get it back. Never refused.
+ * - **Live guest session** → adopting would retire it (**its row is deleted**
+ *   and `onDeviceTakeover` fires). Refused with `CredentialInUseError` so you
+ *   can ask the player instead of the SDK guessing on their behalf.
+ *
+ * Override in either direction:
+ *
+ * - `"adopt"` — always adopt, even when it deletes the guest account. This is
+ *   what every release before 1.30.0 did unconditionally.
+ * - `"reject"` — always throw on a collision, even a harmless one.
+ *
+ * ⚠ A refusal blocks the switch; it does not merge the two accounts. To offer
  * "use my other account", catch the error and re-call with `"adopt"`, then
  * migrate your own data from `onDeviceTakeover`'s `retiredAnonUserId`.
  */
@@ -377,7 +386,8 @@ type GameSignInOptions = {
     link?: boolean;
     /**
      * What to do when the player identity already belongs to an account.
-     * Default `"adopt"`. See {@link CredentialCollisionPolicy}.
+     * **Omit it** — the default refuses only when a live guest session would be
+     * deleted. See {@link CredentialCollisionPolicy}.
      */
     onCredentialInUse?: CredentialCollisionPolicy;
 };
@@ -526,6 +536,7 @@ declare class Auth {
     private deletionCancelledListeners;
     private authStateListeners;
     private lastDeletionCancelled;
+    private lastAnonRetirement;
     private lastTakeover;
     /**
      * Anon refresh token captured at `signIn()` time, stashed keyed to the
@@ -648,6 +659,17 @@ declare class Auth {
     onDeletionCancelled(listener: (evt: DeletionCancelledEvent) => void): () => void;
     /** The most recent deletion-cancelled event this session, or null. Cleared on signOut. */
     getLastDeletionCancelled(): DeletionCancelledEvent | null;
+    /**
+     * What the last sign-in did with this device's guest account, or null if no
+     * sign-in has happened this session (s58.278).
+     *
+     * The one worth acting on is `"preserved"`: a guest account was presented,
+     * was NOT retired, and is therefore still alive server-side — so "recover
+     * your other account" is a real offer rather than a guess. `"retired"` means
+     * migrate from `onDeviceTakeover`'s id; `"none"` means there was nothing to
+     * reconcile. Cleared on signOut.
+     */
+    getLastAnonRetirement(): AnonRetirementOutcome | null;
     /** Internal — fan out deletion-cancelled to subscribers + cache the latest. */
     private fireDeletionCancelled;
     /**
@@ -766,9 +788,9 @@ declare class Auth {
         link?: boolean;
         /**
          * What to do if this social identity (or its verified email) already
-         * belongs to an account. Default `"adopt"` = sign in to it, retiring this
-         * device's anonymous account. `"reject"` throws `CredentialInUseError` and
-         * leaves everything untouched. See {@link CredentialCollisionPolicy}.
+         * belongs to an account. **Omit it** — the default adopts when nothing
+         * would be destroyed and refuses when a live guest session would be
+         * deleted. See {@link CredentialCollisionPolicy}.
          */
         onCredentialInUse?: CredentialCollisionPolicy;
     }): Promise<AuthUser>;
@@ -1896,4 +1918,4 @@ declare class SendoraSDK {
 }
 declare const SendoraCloud: SendoraSDK;
 
-export { AlreadyIdentifiedError, type AttachLinkingApiOptions, Auth, AuthError, type AuthErrorKind, type AuthSignedOutReason, type AuthStateChange, type AuthTokens, type AuthUser, type CredentialCollisionPolicy, CredentialInUseError, type DeletionCancelledEvent, type DeviceTakeoverEvent, EmailAlreadyTakenError, type GameSignInOptions, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, type LinkedIdentitiesResponse, type LinkedIdentity, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };
+export { AlreadyIdentifiedError, type AnonRetirementOutcome, type AttachLinkingApiOptions, Auth, AuthError, type AuthErrorKind, type AuthSignedOutReason, type AuthStateChange, type AuthTokens, type AuthUser, type CredentialCollisionPolicy, CredentialInUseError, type DeletionCancelledEvent, type DeviceTakeoverEvent, EmailAlreadyTakenError, type GameSignInOptions, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, type LinkedIdentitiesResponse, type LinkedIdentity, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };

package/dist/index.d.ts

@@ -298,6 +298,8 @@ interface GameCenterPayload {
     teamPlayerId: string;
     bundleId: string;
 }
+/** @see AuthApiResponse.anonRetirement */
+type AnonRetirementOutcome = "retired" | "preserved" | "none";
 declare class EmailAlreadyTakenError extends Error {
     constructor(message?: string);
 }
@@ -348,20 +350,27 @@ declare class CredentialInUseError extends Error {
 }
 /**
  * What a sign-in should do when the credential you present already belongs to
- * an account (1.30.0).
+ * an account.
  *
- * - `"adopt"` (default — and what every earlier release did unconditionally):
- *   sign in to that account. This is the reinstall-recovery path: a Game Center
- *   / Play Games player identity survives a reinstall server-side, so the
- *   "collision" is usually the SAME person's earlier account. If this device is
- *   anonymous, that anonymous account is retired — **its row is deleted** — and
- *   `onDeviceTakeover` fires with its id.
- * - `"reject"`: throw `CredentialInUseError` and change nothing at all. Use it
- *   when the local anonymous session holds progress you are not willing to
- *   trade. Mirrors Firebase `linkWithCredential`
- *   (`auth/credential-already-in-use`) and Supabase `linkIdentity`.
+ * **You usually want the default — omit this.** Since 1.32.0 the default is
+ * safe by construction: adopt the other account silently when nothing would be
+ * destroyed, and refuse when something would be.
  *
- * `"reject"` blocks the switch; it does not merge the two accounts. To offer
+ * - **Fresh install / no guest session** → nothing to lose, so it adopts. This
+ *   is the reinstall-recovery path: a Game Center / Play Games identity
+ *   survives a reinstall server-side, so the "collision" is usually the SAME
+ *   person's earlier account, and they get it back. Never refused.
+ * - **Live guest session** → adopting would retire it (**its row is deleted**
+ *   and `onDeviceTakeover` fires). Refused with `CredentialInUseError` so you
+ *   can ask the player instead of the SDK guessing on their behalf.
+ *
+ * Override in either direction:
+ *
+ * - `"adopt"` — always adopt, even when it deletes the guest account. This is
+ *   what every release before 1.30.0 did unconditionally.
+ * - `"reject"` — always throw on a collision, even a harmless one.
+ *
+ * ⚠ A refusal blocks the switch; it does not merge the two accounts. To offer
  * "use my other account", catch the error and re-call with `"adopt"`, then
  * migrate your own data from `onDeviceTakeover`'s `retiredAnonUserId`.
  */
@@ -377,7 +386,8 @@ type GameSignInOptions = {
     link?: boolean;
     /**
      * What to do when the player identity already belongs to an account.
-     * Default `"adopt"`. See {@link CredentialCollisionPolicy}.
+     * **Omit it** — the default refuses only when a live guest session would be
+     * deleted. See {@link CredentialCollisionPolicy}.
      */
     onCredentialInUse?: CredentialCollisionPolicy;
 };
@@ -526,6 +536,7 @@ declare class Auth {
     private deletionCancelledListeners;
     private authStateListeners;
     private lastDeletionCancelled;
+    private lastAnonRetirement;
     private lastTakeover;
     /**
      * Anon refresh token captured at `signIn()` time, stashed keyed to the
@@ -648,6 +659,17 @@ declare class Auth {
     onDeletionCancelled(listener: (evt: DeletionCancelledEvent) => void): () => void;
     /** The most recent deletion-cancelled event this session, or null. Cleared on signOut. */
     getLastDeletionCancelled(): DeletionCancelledEvent | null;
+    /**
+     * What the last sign-in did with this device's guest account, or null if no
+     * sign-in has happened this session (s58.278).
+     *
+     * The one worth acting on is `"preserved"`: a guest account was presented,
+     * was NOT retired, and is therefore still alive server-side — so "recover
+     * your other account" is a real offer rather than a guess. `"retired"` means
+     * migrate from `onDeviceTakeover`'s id; `"none"` means there was nothing to
+     * reconcile. Cleared on signOut.
+     */
+    getLastAnonRetirement(): AnonRetirementOutcome | null;
     /** Internal — fan out deletion-cancelled to subscribers + cache the latest. */
     private fireDeletionCancelled;
     /**
@@ -766,9 +788,9 @@ declare class Auth {
         link?: boolean;
         /**
          * What to do if this social identity (or its verified email) already
-         * belongs to an account. Default `"adopt"` = sign in to it, retiring this
-         * device's anonymous account. `"reject"` throws `CredentialInUseError` and
-         * leaves everything untouched. See {@link CredentialCollisionPolicy}.
+         * belongs to an account. **Omit it** — the default adopts when nothing
+         * would be destroyed and refuses when a live guest session would be
+         * deleted. See {@link CredentialCollisionPolicy}.
          */
         onCredentialInUse?: CredentialCollisionPolicy;
     }): Promise<AuthUser>;
@@ -1896,4 +1918,4 @@ declare class SendoraSDK {
 }
 declare const SendoraCloud: SendoraSDK;
 
-export { AlreadyIdentifiedError, type AttachLinkingApiOptions, Auth, AuthError, type AuthErrorKind, type AuthSignedOutReason, type AuthStateChange, type AuthTokens, type AuthUser, type CredentialCollisionPolicy, CredentialInUseError, type DeletionCancelledEvent, type DeviceTakeoverEvent, EmailAlreadyTakenError, type GameSignInOptions, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, type LinkedIdentitiesResponse, type LinkedIdentity, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };
+export { AlreadyIdentifiedError, type AnonRetirementOutcome, type AttachLinkingApiOptions, Auth, AuthError, type AuthErrorKind, type AuthSignedOutReason, type AuthStateChange, type AuthTokens, type AuthUser, type CredentialCollisionPolicy, CredentialInUseError, type DeletionCancelledEvent, type DeviceTakeoverEvent, EmailAlreadyTakenError, type GameSignInOptions, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, type LinkedIdentitiesResponse, type LinkedIdentity, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };

package/dist/index.js

@@ -157,7 +157,7 @@ var Storage = class {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.31.0",
+  version: "1.33.0",
   description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
@@ -569,6 +569,7 @@ var Auth = class {
     this.deletionCancelledListeners = /* @__PURE__ */ new Set();
     this.authStateListeners = /* @__PURE__ */ new Set();
     this.lastDeletionCancelled = null;
+    this.lastAnonRetirement = null;
     this.lastTakeover = null;
     /**
      * Anon refresh token captured at `signIn()` time, stashed keyed to the
@@ -762,6 +763,19 @@ var Auth = class {
   getLastDeletionCancelled() {
     return this.lastDeletionCancelled;
   }
+  /**
+   * What the last sign-in did with this device's guest account, or null if no
+   * sign-in has happened this session (s58.278).
+   *
+   * The one worth acting on is `"preserved"`: a guest account was presented,
+   * was NOT retired, and is therefore still alive server-side — so "recover
+   * your other account" is a real offer rather than a guess. `"retired"` means
+   * migrate from `onDeviceTakeover`'s id; `"none"` means there was nothing to
+   * reconcile. Cleared on signOut.
+   */
+  getLastAnonRetirement() {
+    return this.lastAnonRetirement;
+  }
   /** Internal — fan out deletion-cancelled to subscribers + cache the latest. */
   fireDeletionCancelled(userId) {
     const evt = { userId, at: /* @__PURE__ */ new Date() };
@@ -1844,6 +1858,7 @@ var Auth = class {
         retiredAnonUserId: data.retiredAnonUserId
       });
     }
+    if (data.anonRetirement) this.lastAnonRetirement = data.anonRetirement;
     if (data.reactivatedFromDeletion) {
       this.fireDeletionCancelled(data.user.id);
       this.emitAuthState({ event: "deletion_cancelled", user: data.user });
@@ -1880,6 +1895,7 @@ var Auth = class {
     this.accessExpiresAt = 0;
     this.lastTakeover = null;
     this.lastDeletionCancelled = null;
+    this.lastAnonRetirement = null;
     this.pendingAnonTakeover = null;
     this.hooks.storage.remove(USER_KEY);
     this.hooks.storage.remove(TOKEN_KEY);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "1.31.0",
+  "version": "1.33.0",
   "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   "type": "module",
   "main": "./dist/index.cjs",