@sendoracloud/sdk-react-native 1.34.0 → 1.35.0

package/dist/index.cjs

@@ -208,7 +208,7 @@ var Storage = class {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.34.0",
+  version: "1.35.0",
   description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
@@ -264,7 +264,7 @@ var package_default = {
   scripts: {
     build: "tsup src/index.ts src/contact-widget.tsx --format esm,cjs --dts --clean --external react --external react-native --external react-native-webview",
     typecheck: "tsc --noEmit",
-    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts && tsx test/token-expiry.test.ts"
+    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts && tsx test/token-expiry.test.ts && tsx test/unlink.test.ts"
   },
   devDependencies: {
     "@types/react": "^19.2.16",
@@ -494,6 +494,8 @@ function classifyAuthErrorKind(code, status) {
       return "account_locked";
     case "CREDENTIAL_IN_USE":
       return "credential_in_use";
+    case "LAST_CREDENTIAL":
+      return "last_credential";
     case "NOT_ANONYMOUS":
     case "FORBIDDEN_NON_ANONYMOUS":
       return "already_identified";
@@ -1333,6 +1335,56 @@ var Auth = class {
     }
     return { identities: parsed.data.identities ?? [], hasPassword: Boolean(parsed.data.hasPassword) };
   }
+  /**
+   * Remove one linked provider from the signed-in account.
+   *
+   * The write half of `listLinkedIdentities()` — what a "Disconnect" button
+   * next to each entry on a Connected Accounts screen calls.
+   *
+   * ⚠ The server REFUSES to remove the last way into the account, with
+   * `AuthError` `code: "LAST_CREDENTIAL"` / `kind: "last_credential"`. An
+   * account with no credentials still exists and still holds the user's data,
+   * but nothing can ever authenticate into it again — so this is a permanent
+   * lockout, not an inconvenience. A password counts as a credential.
+   *
+   * Prefer to prevent the tap rather than explain the refusal: read
+   * `listLinkedIdentities()` and disable Disconnect when
+   * `identities.length + (hasPassword ? 1 : 0) <= 1`. The error is the
+   * backstop, not the UX.
+   *
+   * Throws `NOT_SIGNED_IN` when there is no session, and `NOT_FOUND` when the
+   * provider is not linked to this account. Removing an already-absent
+   * provider is NOT treated as success — a silent no-op would let a buggy
+   * screen report "disconnected" for a credential that is still attached.
+   */
+  async unlink(provider) {
+    const token = await this.getAccessToken();
+    if (!token) throw new AuthError("NOT_SIGNED_IN", "Sign in before unlinking an identity");
+    const res = await del(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      `/api/v1/auth-service/me/identities/${encodeURIComponent(provider)}`,
+      { Authorization: `Bearer ${token}` }
+    );
+    if (!res) throw new AuthError("NETWORK_ERROR", "Failed to unlink identity");
+    let parsed;
+    try {
+      parsed = await res.json();
+    } catch {
+      throw new AuthError("PARSE_ERROR", `HTTP ${res.status}`);
+    }
+    if (!parsed.success || !parsed.data) {
+      throw new AuthError(
+        parsed.error?.code ?? "UNLINK_FAILED",
+        parsed.error?.message ?? "Failed to unlink identity",
+        { status: res.status }
+      );
+    }
+    return {
+      provider: parsed.data.provider ?? provider,
+      removed: Number(parsed.data.removed ?? 0),
+      remaining: Number(parsed.data.remaining ?? 0)
+    };
+  }
   /**
    * Shared gaming-identity sign-in. Mirrors `loginSocial`'s anon-takeover +
    * ADR-025 link-in-place handling: reads the anon refresh BEFORE wiping local

package/dist/index.d.cts

@@ -442,6 +442,19 @@ type LinkedIdentitiesResponse = {
     identities: LinkedIdentity[];
     hasPassword: boolean;
 };
+/**
+ * Result of removing one provider from the signed-in account.
+ *
+ * `removed` can exceed 1: an account may hold more than one row for a provider
+ * (distinct provider user ids across projects), and unlinking takes all of them
+ * — the floor counts them all as leaving, so reporting only one would be a lie
+ * a caller could act on.
+ */
+type UnlinkResult = {
+    provider: string;
+    removed: number;
+    remaining: number;
+};
 /**
  * Closed set of auth failure categories (1.28.0). Branch on `kind` instead of
  * string-matching the ~20 raw `code`s the backend and transport can produce.
@@ -451,7 +464,7 @@ type LinkedIdentitiesResponse = {
  * OTP, a dismissed Game Center sheet and a 429 all leave `getUserSync()` and
  * the stored refresh token exactly as they were.
  */
-type AuthErrorKind = "network" | "server" | "rate_limited" | "invalid_credential" | "account_locked" | "credential_in_use" | "already_identified" | "cancelled" | "config" | "unknown";
+type AuthErrorKind = "network" | "server" | "rate_limited" | "invalid_credential" | "account_locked" | "credential_in_use" | "last_credential" | "already_identified" | "cancelled" | "config" | "unknown";
 declare class AuthError extends Error {
     code: string;
     /**
@@ -1034,6 +1047,29 @@ declare class Auth {
      * `deleteAccount`). Firebase `user.providerData` / Supabase `user.identities`.
      */
     listLinkedIdentities(): Promise<LinkedIdentitiesResponse>;
+    /**
+     * Remove one linked provider from the signed-in account.
+     *
+     * The write half of `listLinkedIdentities()` — what a "Disconnect" button
+     * next to each entry on a Connected Accounts screen calls.
+     *
+     * ⚠ The server REFUSES to remove the last way into the account, with
+     * `AuthError` `code: "LAST_CREDENTIAL"` / `kind: "last_credential"`. An
+     * account with no credentials still exists and still holds the user's data,
+     * but nothing can ever authenticate into it again — so this is a permanent
+     * lockout, not an inconvenience. A password counts as a credential.
+     *
+     * Prefer to prevent the tap rather than explain the refusal: read
+     * `listLinkedIdentities()` and disable Disconnect when
+     * `identities.length + (hasPassword ? 1 : 0) <= 1`. The error is the
+     * backstop, not the UX.
+     *
+     * Throws `NOT_SIGNED_IN` when there is no session, and `NOT_FOUND` when the
+     * provider is not linked to this account. Removing an already-absent
+     * provider is NOT treated as success — a silent no-op would let a buggy
+     * screen report "disconnected" for a credential that is still attached.
+     */
+    unlink(provider: string): Promise<UnlinkResult>;
     /**
      * Shared gaming-identity sign-in. Mirrors `loginSocial`'s anon-takeover +
      * ADR-025 link-in-place handling: reads the anon refresh BEFORE wiping local
@@ -2038,4 +2074,4 @@ declare class SendoraSDK {
 }
 declare const SendoraCloud: SendoraSDK;
 
-export { AlreadyIdentifiedError, type AnonRetirementOutcome, type AttachLinkingApiOptions, Auth, AuthError, type AuthErrorKind, type AuthSignedOutReason, type AuthStateChange, type AuthTokens, type AuthUser, type CredentialCollisionPolicy, CredentialInUseError, type DeletionCancelledEvent, type DeviceTakeoverEvent, EmailAlreadyTakenError, type GameSignInOptions, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, type LinkedIdentitiesResponse, type LinkedIdentity, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };
+export { AlreadyIdentifiedError, type AnonRetirementOutcome, type AttachLinkingApiOptions, Auth, AuthError, type AuthErrorKind, type AuthSignedOutReason, type AuthStateChange, type AuthTokens, type AuthUser, type CredentialCollisionPolicy, CredentialInUseError, type DeletionCancelledEvent, type DeviceTakeoverEvent, EmailAlreadyTakenError, type GameSignInOptions, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, type LinkedIdentitiesResponse, type LinkedIdentity, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, type UnlinkResult, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };

package/dist/index.d.ts

@@ -442,6 +442,19 @@ type LinkedIdentitiesResponse = {
     identities: LinkedIdentity[];
     hasPassword: boolean;
 };
+/**
+ * Result of removing one provider from the signed-in account.
+ *
+ * `removed` can exceed 1: an account may hold more than one row for a provider
+ * (distinct provider user ids across projects), and unlinking takes all of them
+ * — the floor counts them all as leaving, so reporting only one would be a lie
+ * a caller could act on.
+ */
+type UnlinkResult = {
+    provider: string;
+    removed: number;
+    remaining: number;
+};
 /**
  * Closed set of auth failure categories (1.28.0). Branch on `kind` instead of
  * string-matching the ~20 raw `code`s the backend and transport can produce.
@@ -451,7 +464,7 @@ type LinkedIdentitiesResponse = {
  * OTP, a dismissed Game Center sheet and a 429 all leave `getUserSync()` and
  * the stored refresh token exactly as they were.
  */
-type AuthErrorKind = "network" | "server" | "rate_limited" | "invalid_credential" | "account_locked" | "credential_in_use" | "already_identified" | "cancelled" | "config" | "unknown";
+type AuthErrorKind = "network" | "server" | "rate_limited" | "invalid_credential" | "account_locked" | "credential_in_use" | "last_credential" | "already_identified" | "cancelled" | "config" | "unknown";
 declare class AuthError extends Error {
     code: string;
     /**
@@ -1034,6 +1047,29 @@ declare class Auth {
      * `deleteAccount`). Firebase `user.providerData` / Supabase `user.identities`.
      */
     listLinkedIdentities(): Promise<LinkedIdentitiesResponse>;
+    /**
+     * Remove one linked provider from the signed-in account.
+     *
+     * The write half of `listLinkedIdentities()` — what a "Disconnect" button
+     * next to each entry on a Connected Accounts screen calls.
+     *
+     * ⚠ The server REFUSES to remove the last way into the account, with
+     * `AuthError` `code: "LAST_CREDENTIAL"` / `kind: "last_credential"`. An
+     * account with no credentials still exists and still holds the user's data,
+     * but nothing can ever authenticate into it again — so this is a permanent
+     * lockout, not an inconvenience. A password counts as a credential.
+     *
+     * Prefer to prevent the tap rather than explain the refusal: read
+     * `listLinkedIdentities()` and disable Disconnect when
+     * `identities.length + (hasPassword ? 1 : 0) <= 1`. The error is the
+     * backstop, not the UX.
+     *
+     * Throws `NOT_SIGNED_IN` when there is no session, and `NOT_FOUND` when the
+     * provider is not linked to this account. Removing an already-absent
+     * provider is NOT treated as success — a silent no-op would let a buggy
+     * screen report "disconnected" for a credential that is still attached.
+     */
+    unlink(provider: string): Promise<UnlinkResult>;
     /**
      * Shared gaming-identity sign-in. Mirrors `loginSocial`'s anon-takeover +
      * ADR-025 link-in-place handling: reads the anon refresh BEFORE wiping local
@@ -2038,4 +2074,4 @@ declare class SendoraSDK {
 }
 declare const SendoraCloud: SendoraSDK;
 
-export { AlreadyIdentifiedError, type AnonRetirementOutcome, type AttachLinkingApiOptions, Auth, AuthError, type AuthErrorKind, type AuthSignedOutReason, type AuthStateChange, type AuthTokens, type AuthUser, type CredentialCollisionPolicy, CredentialInUseError, type DeletionCancelledEvent, type DeviceTakeoverEvent, EmailAlreadyTakenError, type GameSignInOptions, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, type LinkedIdentitiesResponse, type LinkedIdentity, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };
+export { AlreadyIdentifiedError, type AnonRetirementOutcome, type AttachLinkingApiOptions, Auth, AuthError, type AuthErrorKind, type AuthSignedOutReason, type AuthStateChange, type AuthTokens, type AuthUser, type CredentialCollisionPolicy, CredentialInUseError, type DeletionCancelledEvent, type DeviceTakeoverEvent, EmailAlreadyTakenError, type GameSignInOptions, type IdentifyTraits, type LinkCreateInput, type LinkCreateResult, type LinkData, LinkError, type LinkErrorCode, type LinkMatchInput, type LinkOpenedEvent, type LinkOpenedHandler, type LinkStats, type LinkedIdentitiesResponse, type LinkedIdentity, Links, type PushTokenReceipt, type PushTokenRegistration, SendoraCloud, type SendoraConfig, type TrackProperties, type UnlinkResult, computeDeviceFingerprint, SendoraCloud as default, extractShortcodeFromUrl, getPlayInstallReferrer };

package/dist/index.js

@@ -163,7 +163,7 @@ var Storage = class {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.34.0",
+  version: "1.35.0",
   description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
@@ -219,7 +219,7 @@ var package_default = {
   scripts: {
     build: "tsup src/index.ts src/contact-widget.tsx --format esm,cjs --dts --clean --external react --external react-native --external react-native-webview",
     typecheck: "tsc --noEmit",
-    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts && tsx test/token-expiry.test.ts"
+    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts && tsx test/token-expiry.test.ts && tsx test/unlink.test.ts"
   },
   devDependencies: {
     "@types/react": "^19.2.16",
@@ -449,6 +449,8 @@ function classifyAuthErrorKind(code, status) {
       return "account_locked";
     case "CREDENTIAL_IN_USE":
       return "credential_in_use";
+    case "LAST_CREDENTIAL":
+      return "last_credential";
     case "NOT_ANONYMOUS":
     case "FORBIDDEN_NON_ANONYMOUS":
       return "already_identified";
@@ -1288,6 +1290,56 @@ var Auth = class {
     }
     return { identities: parsed.data.identities ?? [], hasPassword: Boolean(parsed.data.hasPassword) };
   }
+  /**
+   * Remove one linked provider from the signed-in account.
+   *
+   * The write half of `listLinkedIdentities()` — what a "Disconnect" button
+   * next to each entry on a Connected Accounts screen calls.
+   *
+   * ⚠ The server REFUSES to remove the last way into the account, with
+   * `AuthError` `code: "LAST_CREDENTIAL"` / `kind: "last_credential"`. An
+   * account with no credentials still exists and still holds the user's data,
+   * but nothing can ever authenticate into it again — so this is a permanent
+   * lockout, not an inconvenience. A password counts as a credential.
+   *
+   * Prefer to prevent the tap rather than explain the refusal: read
+   * `listLinkedIdentities()` and disable Disconnect when
+   * `identities.length + (hasPassword ? 1 : 0) <= 1`. The error is the
+   * backstop, not the UX.
+   *
+   * Throws `NOT_SIGNED_IN` when there is no session, and `NOT_FOUND` when the
+   * provider is not linked to this account. Removing an already-absent
+   * provider is NOT treated as success — a silent no-op would let a buggy
+   * screen report "disconnected" for a credential that is still attached.
+   */
+  async unlink(provider) {
+    const token = await this.getAccessToken();
+    if (!token) throw new AuthError("NOT_SIGNED_IN", "Sign in before unlinking an identity");
+    const res = await del(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      `/api/v1/auth-service/me/identities/${encodeURIComponent(provider)}`,
+      { Authorization: `Bearer ${token}` }
+    );
+    if (!res) throw new AuthError("NETWORK_ERROR", "Failed to unlink identity");
+    let parsed;
+    try {
+      parsed = await res.json();
+    } catch {
+      throw new AuthError("PARSE_ERROR", `HTTP ${res.status}`);
+    }
+    if (!parsed.success || !parsed.data) {
+      throw new AuthError(
+        parsed.error?.code ?? "UNLINK_FAILED",
+        parsed.error?.message ?? "Failed to unlink identity",
+        { status: res.status }
+      );
+    }
+    return {
+      provider: parsed.data.provider ?? provider,
+      removed: Number(parsed.data.removed ?? 0),
+      remaining: Number(parsed.data.remaining ?? 0)
+    };
+  }
   /**
    * Shared gaming-identity sign-in. Mirrors `loginSocial`'s anon-takeover +
    * ADR-025 link-in-place handling: reads the anon refresh BEFORE wiping local

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "1.34.0",
+  "version": "1.35.0",
   "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -56,7 +56,7 @@
   "scripts": {
     "build": "tsup src/index.ts src/contact-widget.tsx --format esm,cjs --dts --clean --external react --external react-native --external react-native-webview",
     "typecheck": "tsc --noEmit",
-    "test": "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts && tsx test/token-expiry.test.ts"
+    "test": "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts && tsx test/token-expiry.test.ts && tsx test/unlink.test.ts"
   },
   "devDependencies": {
     "@types/react": "^19.2.16",