@sendoracloud/sdk-react-native 1.36.0 → 1.39.0

package/dist/index.cjs

@@ -228,7 +228,7 @@ var Storage = class {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.36.0",
+  version: "1.39.0",
   description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
@@ -284,7 +284,7 @@ var package_default = {
   scripts: {
     build: "tsup src/index.ts src/contact-widget.tsx --format esm,cjs --dts --clean --external react --external react-native --external react-native-webview",
     typecheck: "tsc --noEmit",
-    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts && tsx test/token-expiry.test.ts && tsx test/unlink.test.ts"
+    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts && tsx test/token-expiry.test.ts && tsx test/unlink.test.ts && tsx test/deferred-match.test.ts && tsx test/anon-id-stability.test.ts && tsx test/event-queue.test.ts"
   },
   devDependencies: {
     "@types/react": "^19.2.16",
@@ -2156,7 +2156,7 @@ var Auth = class {
     this.hooks.storage.remove(TOKEN_EXPIRES_KEY);
     this.hooks.storage.remove(REFRESH_KEY);
     this.stopProactiveRefreshCron();
-    await this.hooks.onAnonymousWipe();
+    await this.hooks.onAnonymousWipe(reason);
     if (reason !== "replaced") {
       this.emitAuthState({ event: "signed_out", user: null, reason });
     }
@@ -2627,33 +2627,31 @@ var Links = class {
     }
   }
   /**
-   * Cold-launch deferred deep link match. When neither `fingerprintHash` nor
-   * `installReferrer` is supplied, the SDK auto-discovers:
-   *   - Android: probes `react-native-play-install-referrer` (preferred — 100%
-   *     accurate when present).
-   *   - Otherwise: computes the canonical device fingerprint hash.
+   * Cold-launch deferred deep-link match.
+   *
+   * ⚠ NO IMPLICIT FINGERPRINTING (compliance). This used to compute a device
+   * fingerprint on iOS when you passed no signal; it no longer does — Apple
+   * prohibits deriving a device identifier from device signals for attribution
+   * (App Store 5.1.2 / DPLA §3.3.9), regardless of ATT, and doing it on-device is
+   * exactly that. Signal resolution now:
+   *   - Android: probes `react-native-play-install-referrer` — deterministic, the
+   *     preferred and compliant path.
+   *   - iOS: no deterministic signal exists (the App Store has no install referrer).
+   *     With `allowProbabilisticMatch: true` the server matches on a coarse
+   *     IP + time window (OFF by default — see `LinkMatchInput`). Otherwise this
+   *     returns `null` and you route the user through your normal onboarding UX —
+   *     which is the expected iOS cold-launch outcome, not an error.
    *
    * Fires `onLinkOpened` with `isDeferred: true` on success.
    */
   async matchDeferred(input = {}) {
-    let fingerprintHash = input.fingerprintHash;
+    const fingerprintHash = input.fingerprintHash;
     let installReferrer = input.installReferrer;
     if (!fingerprintHash && !installReferrer) {
       installReferrer = await getPlayInstallReferrer() ?? void 0;
-      if (!installReferrer) {
-        try {
-          fingerprintHash = await computeDeviceFingerprint();
-        } catch (err) {
-          if (this.deps.debug) console.warn("[sendoracloud] fingerprint compute failed:", err);
-        }
-      }
-    }
-    if (!fingerprintHash && !installReferrer) {
-      throw new LinkError(
-        "INVALID_INPUT",
-        "links.matchDeferred: install `react-native-play-install-referrer` for Android, or ensure web crypto / expo-crypto is available for iOS fingerprint compute."
-      );
     }
+    const canMatch = !!fingerprintHash || !!installReferrer || input.allowProbabilisticMatch === true;
+    if (!canMatch) return null;
     const body = {};
     if (fingerprintHash) body.fingerprintHash = fingerprintHash;
     if (installReferrer) body.installReferrer = installReferrer;
@@ -2857,10 +2855,139 @@ function installAutoTrack(args) {
   };
 }
 
+// src/event-queue.ts
+var MAX_QUEUE = 500;
+var MAX_ATTEMPTS = 50;
+var BASE_BACKOFF_MS = 1e3;
+var MAX_BACKOFF_MS = 6e4;
+var EventQueue = class {
+  constructor(deps) {
+    this.deps = deps;
+    this.q = [];
+    this.flushing = false;
+    this.failures = 0;
+    this.timer = null;
+    this.now = deps.now ?? Date.now;
+    this.setTimer = deps.setTimer ?? ((fn, ms) => setTimeout(fn, ms));
+    this.clearTimer = deps.clearTimer ?? ((t) => clearTimeout(t));
+  }
+  /** Load any events left unsent by a previous launch. Call once, after storage
+   *  hydrate. Then `flush()` to attempt delivery. */
+  hydrate() {
+    try {
+      const raw = this.deps.load();
+      if (!raw) return;
+      const parsed = JSON.parse(raw);
+      if (Array.isArray(parsed)) {
+        this.q = parsed.filter((e) => !!e && typeof e === "object" && "body" in e).slice(-MAX_QUEUE);
+      }
+    } catch {
+      this.q = [];
+    }
+  }
+  /** Enqueue an event and trigger a (caught) flush. NEVER throws. */
+  enqueue(body) {
+    this.q.push({ body, attempts: 0 });
+    if (this.q.length > MAX_QUEUE) this.q.splice(0, this.q.length - MAX_QUEUE);
+    this.persist();
+    this.scheduleFlush(0);
+  }
+  /** Flush immediately, resetting backoff — for app foreground. NEVER throws. */
+  flushNow() {
+    this.failures = 0;
+    if (this.timer) {
+      this.clearTimer(this.timer);
+      this.timer = null;
+    }
+    void this.flush();
+  }
+  /** Drop everything (e.g. on a hard reset). */
+  clear() {
+    this.q = [];
+    if (this.timer) {
+      this.clearTimer(this.timer);
+      this.timer = null;
+    }
+    this.persist();
+  }
+  persist() {
+    try {
+      this.deps.save(JSON.stringify(this.q));
+    } catch {
+    }
+  }
+  scheduleFlush(ms) {
+    if (this.timer || this.flushing) return;
+    this.timer = this.setTimer(() => {
+      this.timer = null;
+      void this.flush();
+    }, ms);
+  }
+  /**
+   * Drain the queue FIFO. Removes an event only when the server ACCEPTED it (2xx)
+   * or PERMANENTLY refused it (a 4xx that a retry can't fix). Keeps it — and stops
+   * draining — on a transient failure (timeout throw, network null, 408/429/5xx),
+   * then arms a capped-exponential-backoff retry. The entire post lives inside the
+   * try/catch, so `NetworkTimeoutError` can never surface as an unhandled rejection.
+   */
+  async flush() {
+    if (this.flushing || this.q.length === 0) return;
+    this.flushing = true;
+    try {
+      while (this.q.length > 0) {
+        const ev = this.q[0];
+        let outcome;
+        try {
+          const res = await this.deps.post(ev.body);
+          outcome = classify(res);
+        } catch {
+          outcome = "retry";
+        }
+        if (outcome === "ok" || outcome === "drop") {
+          this.q.shift();
+          this.failures = 0;
+          this.persist();
+          continue;
+        }
+        ev.attempts += 1;
+        if (ev.attempts >= MAX_ATTEMPTS) {
+          if (this.deps.debug) {
+            console.warn(`[sendoracloud] event dropped after ${MAX_ATTEMPTS} attempts`);
+          }
+          this.q.shift();
+          this.persist();
+          continue;
+        }
+        this.persist();
+        this.failures += 1;
+        break;
+      }
+    } finally {
+      this.flushing = false;
+    }
+    if (this.q.length > 0) {
+      const backoff = Math.min(MAX_BACKOFF_MS, BASE_BACKOFF_MS * 2 ** Math.max(0, this.failures - 1));
+      this.scheduleFlush(backoff);
+    }
+  }
+  /** Test/introspection only. */
+  get size() {
+    return this.q.length;
+  }
+};
+function classify(res) {
+  if (res === null) return "retry";
+  if (res.ok) return "ok";
+  const s = res.status;
+  if (s === 408 || s === 429 || s >= 500) return "retry";
+  return "drop";
+}
+
 // src/index.ts
 var DEFAULT_API_URL = "https://api.sendoracloud.com";
 var ANON_KEY = "anon_id";
 var USER_ID_KEY = "user_id";
+var EVENT_QUEUE_KEY = "event_queue";
 var SCHEMA_VERSION_KEY = "schema_version";
 var SCHEMA_VERSION = "1";
 var AUTH_HYDRATE_KEYS = [
@@ -3007,6 +3134,7 @@ var SendoraSDK = class {
     this.debug = false;
     this.sessionId = "";
     this.autoTrackCleanup = null;
+    this.eventQueue = null;
     // --- Engagement time (foreground-only, Wave 75) ---
     this.engEnabled = false;
     this.engScreen = null;
@@ -3066,6 +3194,7 @@ var SendoraSDK = class {
       ANON_KEY,
       USER_ID_KEY,
       SCHEMA_VERSION_KEY,
+      EVENT_QUEUE_KEY,
       ...AUTH_HYDRATE_KEYS
     ]);
     if (!this.storage.get(SCHEMA_VERSION_KEY)) {
@@ -3101,9 +3230,11 @@ var SendoraSDK = class {
         if (userId) this.storage.set(USER_ID_KEY, userId);
         else this.storage.remove(USER_ID_KEY);
       },
-      onAnonymousWipe: async () => {
-        this.anonId = uuid();
-        this.storage.set(ANON_KEY, this.anonId);
+      onAnonymousWipe: async (reason) => {
+        if (reason === "user" || reason === "account_deleted") {
+          this.anonId = uuid();
+          this.storage.set(ANON_KEY, this.anonId);
+        }
         this.userId = null;
         this.storage.remove(USER_ID_KEY);
       }
@@ -3117,6 +3248,18 @@ var SendoraSDK = class {
       androidPackageName: this.config.androidPackageName,
       linkDomain: this.config.linkDomain
     });
+    this.eventQueue = new EventQueue({
+      post: (body) => post(
+        { apiUrl: this.config.apiUrl, publicKey: this.config.publicKey, debug: this.debug },
+        "/api/v1/events",
+        body
+      ).then((res) => res === null ? null : { ok: res.ok, status: res.status }),
+      load: () => this.storage.get(EVENT_QUEUE_KEY) ?? null,
+      save: (json) => this.storage.set(EVENT_QUEUE_KEY, json),
+      debug: this.debug
+    });
+    this.eventQueue.hydrate();
+    this.eventQueue.flushNow();
     this.ready = true;
     if (config.autoTrack !== false) {
       this.engEnabled = config.autoTrack === true || config.autoTrack === void 0 || config.autoTrack.engagement !== false;
@@ -3128,8 +3271,10 @@ var SendoraSDK = class {
           this.sessionId = id;
         },
         onForeground: (active) => {
-          if (active) this.engResume();
-          else this.engFlush();
+          if (active) {
+            this.engResume();
+            this.eventQueue?.flushNow();
+          } else this.engFlush();
         }
       });
     }
@@ -3209,7 +3354,7 @@ var SendoraSDK = class {
     }
     this.userId = userId;
     this.storage.set(USER_ID_KEY, userId);
-    void this.sendEvent("identify", {
+    this.sendEvent("identify", {
       userId,
       traits: traits ?? {}
     });
@@ -3226,7 +3371,7 @@ var SendoraSDK = class {
         throw new Error(`[sendoracloud] properties exceed ${MAX_PROPERTIES_BYTES} bytes.`);
       }
     }
-    void this.sendEvent("track", {
+    this.sendEvent("track", {
       eventType,
       properties: properties ?? {}
     });
@@ -3238,7 +3383,7 @@ var SendoraSDK = class {
       throw new Error("[sendoracloud] screen name must be a 1-256 char string.");
     }
     this.engFlush();
-    void this.sendEvent("screen", {
+    this.sendEvent("screen", {
       eventType: "screen.viewed",
       properties: { screenName: name, ...properties ?? {} }
     });
@@ -3266,7 +3411,7 @@ var SendoraSDK = class {
     if (ms < MIN_ENGAGEMENT_MS) return;
     if (ms > MAX_ENGAGEMENT_MS) ms = MAX_ENGAGEMENT_MS;
     try {
-      void this.sendEvent("track", {
+      this.sendEvent("track", {
         eventType: "app.engagement",
         properties: { durationMs: Math.round(ms), screen: this.engScreen, sessionId: this.sessionId }
       });
@@ -3850,6 +3995,7 @@ var SendoraSDK = class {
     await this.auth.signOut().catch(() => void 0);
     this.userId = null;
     this.sessionId = "";
+    this.eventQueue?.clear();
     await this.storage.clearAll();
     this.storage.set(ANON_KEY, this.anonId);
   }
@@ -3861,34 +4007,42 @@ var SendoraSDK = class {
       this.autoTrackCleanup = null;
     }
   }
-  async sendEvent(kind, payload) {
+  /**
+   * Build an event body and hand it to the persisted queue for delivery.
+   *
+   * ⚠ SYNCHRONOUS + NEVER THROWS (1.39.0). Before this, it was `async` and did
+   * `await post(...)` with no try/catch; `http.ts` THROWS `NetworkTimeoutError` on
+   * its 30 s abort, and every caller discarded the promise with `void` — so a slow
+   * `/api/v1/events` request became an unhandled rejection in the host's crash
+   * reporter AND the event was lost. Now the queue owns delivery: it retries with
+   * backoff, persists across launches, and swallows every transport failure. A
+   * rejection can no longer escape (so `engFlush`'s "never throws" try/catch is
+   * finally true), and a slow network delays events instead of dropping them.
+   */
+  sendEvent(kind, payload) {
     if (!this.config) return;
     if (!this.consentGranted) return;
     const device = buildDeviceContext(this.config.appVersion, this.config.appBuild);
-    await post(
-      { apiUrl: this.config.apiUrl, publicKey: this.config.publicKey, debug: this.debug },
-      "/api/v1/events",
-      {
-        ...this.config.projectId ? { projectId: this.config.projectId } : {},
-        module: kind === "identify" ? "profiles" : "analytics",
-        eventType: payload.eventType ?? (kind === "identify" ? "identify" : "track"),
-        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        ...this.userId ? { userId: this.userId } : {},
-        anonymousId: this.anonId,
-        // Top-level sessionId so backend `events.session_id` populates (powers
-        // the Audience "Sessions & engagement" metrics). Set by auto-track;
-        // blank until the first auto event of the launch → omitted when empty.
-        ...this.sessionId ? { sessionId: this.sessionId } : {},
-        properties: payload.properties ?? {},
-        context: {
-          platform: "react-native",
-          sdk: { name: "@sendoracloud/sdk-react-native", version: SDK_VERSION },
-          ...device ? { device } : {},
-          ...this.config.environment ? { environment: this.config.environment } : {},
-          ...kind === "identify" ? { traits: payload.traits } : {}
-        }
+    this.eventQueue?.enqueue({
+      ...this.config.projectId ? { projectId: this.config.projectId } : {},
+      module: kind === "identify" ? "profiles" : "analytics",
+      eventType: payload.eventType ?? (kind === "identify" ? "identify" : "track"),
+      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+      ...this.userId ? { userId: this.userId } : {},
+      anonymousId: this.anonId,
+      // Top-level sessionId so backend `events.session_id` populates (powers
+      // the Audience "Sessions & engagement" metrics). Set by auto-track;
+      // blank until the first auto event of the launch → omitted when empty.
+      ...this.sessionId ? { sessionId: this.sessionId } : {},
+      properties: payload.properties ?? {},
+      context: {
+        platform: "react-native",
+        sdk: { name: "@sendoracloud/sdk-react-native", version: SDK_VERSION },
+        ...device ? { device } : {},
+        ...this.config.environment ? { environment: this.config.environment } : {},
+        ...kind === "identify" ? { traits: payload.traits } : {}
       }
-    );
+    });
   }
   assertReady() {
     if (!this.ready || !this.config) {

package/dist/index.d.cts

@@ -497,12 +497,15 @@ interface AuthHooks {
      *  identity (analytics userId, push token registration, etc). */
     onIdentityChange: (userId: string | null) => void;
     /**
-     * Called when the SDK switches from one identity to another via
-     * signIn() or non-anonymous signUp(). The parent rotates anonId
-     * + drops any pending events so the new user can't carry over
-     * orphaned attribution.
-     */
-    onAnonymousWipe: () => Promise<void>;
+     * Called from `wipeLocalIdentity` whenever the local session is cleared. The
+     * `reason` lets the parent decide whether to rotate the anonymous analytics id:
+     * it rotates ONLY at a person-boundary ("user" = explicit signOut,
+     * "account_deleted"), never on a successful sign-in/upgrade ("replaced") or an
+     * involuntary session death ("session_expired") — those are the same person, and
+     * the anon id must survive so pre-auth analytics link to them (Firebase-FID
+     * semantics; the industry norm).
+     */
+    onAnonymousWipe: (reason: WipeReason) => Promise<void>;
     apiUrl: string;
     publicKey: string;
     debug: boolean;
@@ -565,6 +568,12 @@ type AuthStateChange = {
     user: AuthUser | null;
 };
 type AuthStateListener = (change: AuthStateChange) => void;
+/**
+ * Internal marker for a wipe that is immediately followed by a `persist()` of
+ * a NEW session (the sign-in success path). Not a sign-out — emitting one
+ * would make every successful sign-in look like a logout to subscribers.
+ */
+type WipeReason = AuthSignedOutReason | "replaced";
 declare class Auth {
     private hooks;
     private user;
@@ -1400,11 +1409,33 @@ interface LinkOpenedEvent<T extends LinkData = LinkData> {
 }
 type LinkOpenedHandler<T extends LinkData = LinkData> = (event: LinkOpenedEvent<T>) => void;
 interface LinkMatchInput {
-    /** Hex-encoded SHA-256 — pass output of `computeDeviceFingerprint()`. */
+    /**
+     * Hex-encoded SHA-256 device fingerprint.
+     *
+     * ⚠ **Do not supply this on iOS.** Apple prohibits deriving a device identifier
+     * from device signals for attribution (App Store 5.1.2 / DPLA §3.3.9), and it
+     * does not care which side of the network computed it — passing a hash you built
+     * on-device is the same practice. The SDK no longer computes one for you (it used
+     * to, implicitly, on iOS). Left here for the rare Android/self-hosted caller that
+     * has a legitimate deterministic hash; on iOS, omit it.
+     */
     fingerprintHash?: string;
     /** Raw Play Install Referrer. Sendora probes
      *  `react-native-play-install-referrer` automatically when this is omitted. */
     installReferrer?: string;
+    /**
+     * Opt in to probabilistic matching on iOS.
+     *
+     * iOS has no deterministic deferred-install signal (no install referrer), and the
+     * SDK will not fingerprint the device. The only remaining matcher is the server's
+     * coarse IP + timestamp window — the same class of practice Apple scrutinises, and
+     * it collides across a shared NAT / iCloud Private Relay. So it is **off by
+     * default**: without this flag, `matchDeferred()` on iOS matches nothing and
+     * returns `null` (route the user through your normal onboarding UX). Set it only
+     * if you accept the accuracy and compliance trade-off. No effect on Android, where
+     * the Play Install Referrer is deterministic.
+     */
+    allowProbabilisticMatch?: boolean;
     iosBundleId?: string;
     androidPackageName?: string;
 }
@@ -1437,12 +1468,14 @@ interface LinkStats {
  */
 declare function extractShortcodeFromUrl(url: string, linkDomain?: string): string | null;
 /**
- * Canonical device-fingerprint recipe. Identical byte-for-byte across the
- * RN / iOS / Android SDKs so a click logged from one platform and an
- * install completing on another won't accidentally match.
+ * Canonical device-fingerprint recipe (`${platform}|${screenW}x${screenH}|${timezone}|${locale}`
+ * → lowercase hex SHA-256), identical across the RN / iOS / Android SDKs.
  *
- * Input: `${platform}|${screenW}x${screenH}|${timezone}|${locale}`
- * Output: lowercase hex SHA-256.
+ * @deprecated ⚠ Do not use on iOS. Apple prohibits deriving a device identifier
+ * from device signals for attribution (App Store 5.1.2 / DPLA §3.3.9), regardless
+ * of ATT — and this is exactly that. `matchDeferred()` no longer calls it
+ * implicitly. It is retained only for an Android/self-hosted caller with a
+ * legitimate deterministic use, and is slated for removal in a future major.
  */
 declare function computeDeviceFingerprint(): Promise<string>;
 /** Probe optional `react-native-play-install-referrer` peer. Returns the
@@ -1511,11 +1544,20 @@ declare class Links {
      */
     handleUniversalLink(url: string): Promise<boolean>;
     /**
-     * Cold-launch deferred deep link match. When neither `fingerprintHash` nor
-     * `installReferrer` is supplied, the SDK auto-discovers:
-     *   - Android: probes `react-native-play-install-referrer` (preferred — 100%
-     *     accurate when present).
-     *   - Otherwise: computes the canonical device fingerprint hash.
+     * Cold-launch deferred deep-link match.
+     *
+     * ⚠ NO IMPLICIT FINGERPRINTING (compliance). This used to compute a device
+     * fingerprint on iOS when you passed no signal; it no longer does — Apple
+     * prohibits deriving a device identifier from device signals for attribution
+     * (App Store 5.1.2 / DPLA §3.3.9), regardless of ATT, and doing it on-device is
+     * exactly that. Signal resolution now:
+     *   - Android: probes `react-native-play-install-referrer` — deterministic, the
+     *     preferred and compliant path.
+     *   - iOS: no deterministic signal exists (the App Store has no install referrer).
+     *     With `allowProbabilisticMatch: true` the server matches on a coarse
+     *     IP + time window (OFF by default — see `LinkMatchInput`). Otherwise this
+     *     returns `null` and you route the user through your normal onboarding UX —
+     *     which is the expected iOS cold-launch outcome, not an error.
      *
      * Fires `onLinkOpened` with `isDeferred: true` on success.
      */
@@ -1582,6 +1624,7 @@ declare class SendoraSDK {
     private debug;
     private sessionId;
     private autoTrackCleanup;
+    private eventQueue;
     private engEnabled;
     private engScreen;
     private engAccumMs;
@@ -2086,6 +2129,18 @@ declare class SendoraSDK {
     reset(): Promise<void>;
     /** Tear down auto-track listeners. Call in test harnesses. */
     destroy(): void;
+    /**
+     * Build an event body and hand it to the persisted queue for delivery.
+     *
+     * ⚠ SYNCHRONOUS + NEVER THROWS (1.39.0). Before this, it was `async` and did
+     * `await post(...)` with no try/catch; `http.ts` THROWS `NetworkTimeoutError` on
+     * its 30 s abort, and every caller discarded the promise with `void` — so a slow
+     * `/api/v1/events` request became an unhandled rejection in the host's crash
+     * reporter AND the event was lost. Now the queue owns delivery: it retries with
+     * backoff, persists across launches, and swallows every transport failure. A
+     * rejection can no longer escape (so `engFlush`'s "never throws" try/catch is
+     * finally true), and a slow network delays events instead of dropping them.
+     */
     private sendEvent;
     private assertReady;
 }

package/dist/index.d.ts

@@ -497,12 +497,15 @@ interface AuthHooks {
      *  identity (analytics userId, push token registration, etc). */
     onIdentityChange: (userId: string | null) => void;
     /**
-     * Called when the SDK switches from one identity to another via
-     * signIn() or non-anonymous signUp(). The parent rotates anonId
-     * + drops any pending events so the new user can't carry over
-     * orphaned attribution.
-     */
-    onAnonymousWipe: () => Promise<void>;
+     * Called from `wipeLocalIdentity` whenever the local session is cleared. The
+     * `reason` lets the parent decide whether to rotate the anonymous analytics id:
+     * it rotates ONLY at a person-boundary ("user" = explicit signOut,
+     * "account_deleted"), never on a successful sign-in/upgrade ("replaced") or an
+     * involuntary session death ("session_expired") — those are the same person, and
+     * the anon id must survive so pre-auth analytics link to them (Firebase-FID
+     * semantics; the industry norm).
+     */
+    onAnonymousWipe: (reason: WipeReason) => Promise<void>;
     apiUrl: string;
     publicKey: string;
     debug: boolean;
@@ -565,6 +568,12 @@ type AuthStateChange = {
     user: AuthUser | null;
 };
 type AuthStateListener = (change: AuthStateChange) => void;
+/**
+ * Internal marker for a wipe that is immediately followed by a `persist()` of
+ * a NEW session (the sign-in success path). Not a sign-out — emitting one
+ * would make every successful sign-in look like a logout to subscribers.
+ */
+type WipeReason = AuthSignedOutReason | "replaced";
 declare class Auth {
     private hooks;
     private user;
@@ -1400,11 +1409,33 @@ interface LinkOpenedEvent<T extends LinkData = LinkData> {
 }
 type LinkOpenedHandler<T extends LinkData = LinkData> = (event: LinkOpenedEvent<T>) => void;
 interface LinkMatchInput {
-    /** Hex-encoded SHA-256 — pass output of `computeDeviceFingerprint()`. */
+    /**
+     * Hex-encoded SHA-256 device fingerprint.
+     *
+     * ⚠ **Do not supply this on iOS.** Apple prohibits deriving a device identifier
+     * from device signals for attribution (App Store 5.1.2 / DPLA §3.3.9), and it
+     * does not care which side of the network computed it — passing a hash you built
+     * on-device is the same practice. The SDK no longer computes one for you (it used
+     * to, implicitly, on iOS). Left here for the rare Android/self-hosted caller that
+     * has a legitimate deterministic hash; on iOS, omit it.
+     */
     fingerprintHash?: string;
     /** Raw Play Install Referrer. Sendora probes
      *  `react-native-play-install-referrer` automatically when this is omitted. */
     installReferrer?: string;
+    /**
+     * Opt in to probabilistic matching on iOS.
+     *
+     * iOS has no deterministic deferred-install signal (no install referrer), and the
+     * SDK will not fingerprint the device. The only remaining matcher is the server's
+     * coarse IP + timestamp window — the same class of practice Apple scrutinises, and
+     * it collides across a shared NAT / iCloud Private Relay. So it is **off by
+     * default**: without this flag, `matchDeferred()` on iOS matches nothing and
+     * returns `null` (route the user through your normal onboarding UX). Set it only
+     * if you accept the accuracy and compliance trade-off. No effect on Android, where
+     * the Play Install Referrer is deterministic.
+     */
+    allowProbabilisticMatch?: boolean;
     iosBundleId?: string;
     androidPackageName?: string;
 }
@@ -1437,12 +1468,14 @@ interface LinkStats {
  */
 declare function extractShortcodeFromUrl(url: string, linkDomain?: string): string | null;
 /**
- * Canonical device-fingerprint recipe. Identical byte-for-byte across the
- * RN / iOS / Android SDKs so a click logged from one platform and an
- * install completing on another won't accidentally match.
+ * Canonical device-fingerprint recipe (`${platform}|${screenW}x${screenH}|${timezone}|${locale}`
+ * → lowercase hex SHA-256), identical across the RN / iOS / Android SDKs.
  *
- * Input: `${platform}|${screenW}x${screenH}|${timezone}|${locale}`
- * Output: lowercase hex SHA-256.
+ * @deprecated ⚠ Do not use on iOS. Apple prohibits deriving a device identifier
+ * from device signals for attribution (App Store 5.1.2 / DPLA §3.3.9), regardless
+ * of ATT — and this is exactly that. `matchDeferred()` no longer calls it
+ * implicitly. It is retained only for an Android/self-hosted caller with a
+ * legitimate deterministic use, and is slated for removal in a future major.
  */
 declare function computeDeviceFingerprint(): Promise<string>;
 /** Probe optional `react-native-play-install-referrer` peer. Returns the
@@ -1511,11 +1544,20 @@ declare class Links {
      */
     handleUniversalLink(url: string): Promise<boolean>;
     /**
-     * Cold-launch deferred deep link match. When neither `fingerprintHash` nor
-     * `installReferrer` is supplied, the SDK auto-discovers:
-     *   - Android: probes `react-native-play-install-referrer` (preferred — 100%
-     *     accurate when present).
-     *   - Otherwise: computes the canonical device fingerprint hash.
+     * Cold-launch deferred deep-link match.
+     *
+     * ⚠ NO IMPLICIT FINGERPRINTING (compliance). This used to compute a device
+     * fingerprint on iOS when you passed no signal; it no longer does — Apple
+     * prohibits deriving a device identifier from device signals for attribution
+     * (App Store 5.1.2 / DPLA §3.3.9), regardless of ATT, and doing it on-device is
+     * exactly that. Signal resolution now:
+     *   - Android: probes `react-native-play-install-referrer` — deterministic, the
+     *     preferred and compliant path.
+     *   - iOS: no deterministic signal exists (the App Store has no install referrer).
+     *     With `allowProbabilisticMatch: true` the server matches on a coarse
+     *     IP + time window (OFF by default — see `LinkMatchInput`). Otherwise this
+     *     returns `null` and you route the user through your normal onboarding UX —
+     *     which is the expected iOS cold-launch outcome, not an error.
      *
      * Fires `onLinkOpened` with `isDeferred: true` on success.
      */
@@ -1582,6 +1624,7 @@ declare class SendoraSDK {
     private debug;
     private sessionId;
     private autoTrackCleanup;
+    private eventQueue;
     private engEnabled;
     private engScreen;
     private engAccumMs;
@@ -2086,6 +2129,18 @@ declare class SendoraSDK {
     reset(): Promise<void>;
     /** Tear down auto-track listeners. Call in test harnesses. */
     destroy(): void;
+    /**
+     * Build an event body and hand it to the persisted queue for delivery.
+     *
+     * ⚠ SYNCHRONOUS + NEVER THROWS (1.39.0). Before this, it was `async` and did
+     * `await post(...)` with no try/catch; `http.ts` THROWS `NetworkTimeoutError` on
+     * its 30 s abort, and every caller discarded the promise with `void` — so a slow
+     * `/api/v1/events` request became an unhandled rejection in the host's crash
+     * reporter AND the event was lost. Now the queue owns delivery: it retries with
+     * backoff, persists across launches, and swallows every transport failure. A
+     * rejection can no longer escape (so `engFlush`'s "never throws" try/catch is
+     * finally true), and a slow network delays events instead of dropping them.
+     */
     private sendEvent;
     private assertReady;
 }

package/dist/index.js

@@ -183,7 +183,7 @@ var Storage = class {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.36.0",
+  version: "1.39.0",
   description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
@@ -239,7 +239,7 @@ var package_default = {
   scripts: {
     build: "tsup src/index.ts src/contact-widget.tsx --format esm,cjs --dts --clean --external react --external react-native --external react-native-webview",
     typecheck: "tsc --noEmit",
-    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts && tsx test/token-expiry.test.ts && tsx test/unlink.test.ts"
+    test: "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts && tsx test/token-expiry.test.ts && tsx test/unlink.test.ts && tsx test/deferred-match.test.ts && tsx test/anon-id-stability.test.ts && tsx test/event-queue.test.ts"
   },
   devDependencies: {
     "@types/react": "^19.2.16",
@@ -2111,7 +2111,7 @@ var Auth = class {
     this.hooks.storage.remove(TOKEN_EXPIRES_KEY);
     this.hooks.storage.remove(REFRESH_KEY);
     this.stopProactiveRefreshCron();
-    await this.hooks.onAnonymousWipe();
+    await this.hooks.onAnonymousWipe(reason);
     if (reason !== "replaced") {
       this.emitAuthState({ event: "signed_out", user: null, reason });
     }
@@ -2587,33 +2587,31 @@ var Links = class {
     }
   }
   /**
-   * Cold-launch deferred deep link match. When neither `fingerprintHash` nor
-   * `installReferrer` is supplied, the SDK auto-discovers:
-   *   - Android: probes `react-native-play-install-referrer` (preferred — 100%
-   *     accurate when present).
-   *   - Otherwise: computes the canonical device fingerprint hash.
+   * Cold-launch deferred deep-link match.
+   *
+   * ⚠ NO IMPLICIT FINGERPRINTING (compliance). This used to compute a device
+   * fingerprint on iOS when you passed no signal; it no longer does — Apple
+   * prohibits deriving a device identifier from device signals for attribution
+   * (App Store 5.1.2 / DPLA §3.3.9), regardless of ATT, and doing it on-device is
+   * exactly that. Signal resolution now:
+   *   - Android: probes `react-native-play-install-referrer` — deterministic, the
+   *     preferred and compliant path.
+   *   - iOS: no deterministic signal exists (the App Store has no install referrer).
+   *     With `allowProbabilisticMatch: true` the server matches on a coarse
+   *     IP + time window (OFF by default — see `LinkMatchInput`). Otherwise this
+   *     returns `null` and you route the user through your normal onboarding UX —
+   *     which is the expected iOS cold-launch outcome, not an error.
    *
    * Fires `onLinkOpened` with `isDeferred: true` on success.
    */
   async matchDeferred(input = {}) {
-    let fingerprintHash = input.fingerprintHash;
+    const fingerprintHash = input.fingerprintHash;
     let installReferrer = input.installReferrer;
     if (!fingerprintHash && !installReferrer) {
       installReferrer = await getPlayInstallReferrer() ?? void 0;
-      if (!installReferrer) {
-        try {
-          fingerprintHash = await computeDeviceFingerprint();
-        } catch (err) {
-          if (this.deps.debug) console.warn("[sendoracloud] fingerprint compute failed:", err);
-        }
-      }
-    }
-    if (!fingerprintHash && !installReferrer) {
-      throw new LinkError(
-        "INVALID_INPUT",
-        "links.matchDeferred: install `react-native-play-install-referrer` for Android, or ensure web crypto / expo-crypto is available for iOS fingerprint compute."
-      );
     }
+    const canMatch = !!fingerprintHash || !!installReferrer || input.allowProbabilisticMatch === true;
+    if (!canMatch) return null;
     const body = {};
     if (fingerprintHash) body.fingerprintHash = fingerprintHash;
     if (installReferrer) body.installReferrer = installReferrer;
@@ -2817,10 +2815,139 @@ function installAutoTrack(args) {
   };
 }
 
+// src/event-queue.ts
+var MAX_QUEUE = 500;
+var MAX_ATTEMPTS = 50;
+var BASE_BACKOFF_MS = 1e3;
+var MAX_BACKOFF_MS = 6e4;
+var EventQueue = class {
+  constructor(deps) {
+    this.deps = deps;
+    this.q = [];
+    this.flushing = false;
+    this.failures = 0;
+    this.timer = null;
+    this.now = deps.now ?? Date.now;
+    this.setTimer = deps.setTimer ?? ((fn, ms) => setTimeout(fn, ms));
+    this.clearTimer = deps.clearTimer ?? ((t) => clearTimeout(t));
+  }
+  /** Load any events left unsent by a previous launch. Call once, after storage
+   *  hydrate. Then `flush()` to attempt delivery. */
+  hydrate() {
+    try {
+      const raw = this.deps.load();
+      if (!raw) return;
+      const parsed = JSON.parse(raw);
+      if (Array.isArray(parsed)) {
+        this.q = parsed.filter((e) => !!e && typeof e === "object" && "body" in e).slice(-MAX_QUEUE);
+      }
+    } catch {
+      this.q = [];
+    }
+  }
+  /** Enqueue an event and trigger a (caught) flush. NEVER throws. */
+  enqueue(body) {
+    this.q.push({ body, attempts: 0 });
+    if (this.q.length > MAX_QUEUE) this.q.splice(0, this.q.length - MAX_QUEUE);
+    this.persist();
+    this.scheduleFlush(0);
+  }
+  /** Flush immediately, resetting backoff — for app foreground. NEVER throws. */
+  flushNow() {
+    this.failures = 0;
+    if (this.timer) {
+      this.clearTimer(this.timer);
+      this.timer = null;
+    }
+    void this.flush();
+  }
+  /** Drop everything (e.g. on a hard reset). */
+  clear() {
+    this.q = [];
+    if (this.timer) {
+      this.clearTimer(this.timer);
+      this.timer = null;
+    }
+    this.persist();
+  }
+  persist() {
+    try {
+      this.deps.save(JSON.stringify(this.q));
+    } catch {
+    }
+  }
+  scheduleFlush(ms) {
+    if (this.timer || this.flushing) return;
+    this.timer = this.setTimer(() => {
+      this.timer = null;
+      void this.flush();
+    }, ms);
+  }
+  /**
+   * Drain the queue FIFO. Removes an event only when the server ACCEPTED it (2xx)
+   * or PERMANENTLY refused it (a 4xx that a retry can't fix). Keeps it — and stops
+   * draining — on a transient failure (timeout throw, network null, 408/429/5xx),
+   * then arms a capped-exponential-backoff retry. The entire post lives inside the
+   * try/catch, so `NetworkTimeoutError` can never surface as an unhandled rejection.
+   */
+  async flush() {
+    if (this.flushing || this.q.length === 0) return;
+    this.flushing = true;
+    try {
+      while (this.q.length > 0) {
+        const ev = this.q[0];
+        let outcome;
+        try {
+          const res = await this.deps.post(ev.body);
+          outcome = classify(res);
+        } catch {
+          outcome = "retry";
+        }
+        if (outcome === "ok" || outcome === "drop") {
+          this.q.shift();
+          this.failures = 0;
+          this.persist();
+          continue;
+        }
+        ev.attempts += 1;
+        if (ev.attempts >= MAX_ATTEMPTS) {
+          if (this.deps.debug) {
+            console.warn(`[sendoracloud] event dropped after ${MAX_ATTEMPTS} attempts`);
+          }
+          this.q.shift();
+          this.persist();
+          continue;
+        }
+        this.persist();
+        this.failures += 1;
+        break;
+      }
+    } finally {
+      this.flushing = false;
+    }
+    if (this.q.length > 0) {
+      const backoff = Math.min(MAX_BACKOFF_MS, BASE_BACKOFF_MS * 2 ** Math.max(0, this.failures - 1));
+      this.scheduleFlush(backoff);
+    }
+  }
+  /** Test/introspection only. */
+  get size() {
+    return this.q.length;
+  }
+};
+function classify(res) {
+  if (res === null) return "retry";
+  if (res.ok) return "ok";
+  const s = res.status;
+  if (s === 408 || s === 429 || s >= 500) return "retry";
+  return "drop";
+}
+
 // src/index.ts
 var DEFAULT_API_URL = "https://api.sendoracloud.com";
 var ANON_KEY = "anon_id";
 var USER_ID_KEY = "user_id";
+var EVENT_QUEUE_KEY = "event_queue";
 var SCHEMA_VERSION_KEY = "schema_version";
 var SCHEMA_VERSION = "1";
 var AUTH_HYDRATE_KEYS = [
@@ -2967,6 +3094,7 @@ var SendoraSDK = class {
     this.debug = false;
     this.sessionId = "";
     this.autoTrackCleanup = null;
+    this.eventQueue = null;
     // --- Engagement time (foreground-only, Wave 75) ---
     this.engEnabled = false;
     this.engScreen = null;
@@ -3026,6 +3154,7 @@ var SendoraSDK = class {
       ANON_KEY,
       USER_ID_KEY,
       SCHEMA_VERSION_KEY,
+      EVENT_QUEUE_KEY,
       ...AUTH_HYDRATE_KEYS
     ]);
     if (!this.storage.get(SCHEMA_VERSION_KEY)) {
@@ -3061,9 +3190,11 @@ var SendoraSDK = class {
         if (userId) this.storage.set(USER_ID_KEY, userId);
         else this.storage.remove(USER_ID_KEY);
       },
-      onAnonymousWipe: async () => {
-        this.anonId = uuid();
-        this.storage.set(ANON_KEY, this.anonId);
+      onAnonymousWipe: async (reason) => {
+        if (reason === "user" || reason === "account_deleted") {
+          this.anonId = uuid();
+          this.storage.set(ANON_KEY, this.anonId);
+        }
         this.userId = null;
         this.storage.remove(USER_ID_KEY);
       }
@@ -3077,6 +3208,18 @@ var SendoraSDK = class {
       androidPackageName: this.config.androidPackageName,
       linkDomain: this.config.linkDomain
     });
+    this.eventQueue = new EventQueue({
+      post: (body) => post(
+        { apiUrl: this.config.apiUrl, publicKey: this.config.publicKey, debug: this.debug },
+        "/api/v1/events",
+        body
+      ).then((res) => res === null ? null : { ok: res.ok, status: res.status }),
+      load: () => this.storage.get(EVENT_QUEUE_KEY) ?? null,
+      save: (json) => this.storage.set(EVENT_QUEUE_KEY, json),
+      debug: this.debug
+    });
+    this.eventQueue.hydrate();
+    this.eventQueue.flushNow();
     this.ready = true;
     if (config.autoTrack !== false) {
       this.engEnabled = config.autoTrack === true || config.autoTrack === void 0 || config.autoTrack.engagement !== false;
@@ -3088,8 +3231,10 @@ var SendoraSDK = class {
           this.sessionId = id;
         },
         onForeground: (active) => {
-          if (active) this.engResume();
-          else this.engFlush();
+          if (active) {
+            this.engResume();
+            this.eventQueue?.flushNow();
+          } else this.engFlush();
         }
       });
     }
@@ -3169,7 +3314,7 @@ var SendoraSDK = class {
     }
     this.userId = userId;
     this.storage.set(USER_ID_KEY, userId);
-    void this.sendEvent("identify", {
+    this.sendEvent("identify", {
       userId,
       traits: traits ?? {}
     });
@@ -3186,7 +3331,7 @@ var SendoraSDK = class {
         throw new Error(`[sendoracloud] properties exceed ${MAX_PROPERTIES_BYTES} bytes.`);
       }
     }
-    void this.sendEvent("track", {
+    this.sendEvent("track", {
       eventType,
       properties: properties ?? {}
     });
@@ -3198,7 +3343,7 @@ var SendoraSDK = class {
       throw new Error("[sendoracloud] screen name must be a 1-256 char string.");
     }
     this.engFlush();
-    void this.sendEvent("screen", {
+    this.sendEvent("screen", {
       eventType: "screen.viewed",
       properties: { screenName: name, ...properties ?? {} }
     });
@@ -3226,7 +3371,7 @@ var SendoraSDK = class {
     if (ms < MIN_ENGAGEMENT_MS) return;
     if (ms > MAX_ENGAGEMENT_MS) ms = MAX_ENGAGEMENT_MS;
     try {
-      void this.sendEvent("track", {
+      this.sendEvent("track", {
         eventType: "app.engagement",
         properties: { durationMs: Math.round(ms), screen: this.engScreen, sessionId: this.sessionId }
       });
@@ -3810,6 +3955,7 @@ var SendoraSDK = class {
     await this.auth.signOut().catch(() => void 0);
     this.userId = null;
     this.sessionId = "";
+    this.eventQueue?.clear();
     await this.storage.clearAll();
     this.storage.set(ANON_KEY, this.anonId);
   }
@@ -3821,34 +3967,42 @@ var SendoraSDK = class {
       this.autoTrackCleanup = null;
     }
   }
-  async sendEvent(kind, payload) {
+  /**
+   * Build an event body and hand it to the persisted queue for delivery.
+   *
+   * ⚠ SYNCHRONOUS + NEVER THROWS (1.39.0). Before this, it was `async` and did
+   * `await post(...)` with no try/catch; `http.ts` THROWS `NetworkTimeoutError` on
+   * its 30 s abort, and every caller discarded the promise with `void` — so a slow
+   * `/api/v1/events` request became an unhandled rejection in the host's crash
+   * reporter AND the event was lost. Now the queue owns delivery: it retries with
+   * backoff, persists across launches, and swallows every transport failure. A
+   * rejection can no longer escape (so `engFlush`'s "never throws" try/catch is
+   * finally true), and a slow network delays events instead of dropping them.
+   */
+  sendEvent(kind, payload) {
     if (!this.config) return;
     if (!this.consentGranted) return;
     const device = buildDeviceContext(this.config.appVersion, this.config.appBuild);
-    await post(
-      { apiUrl: this.config.apiUrl, publicKey: this.config.publicKey, debug: this.debug },
-      "/api/v1/events",
-      {
-        ...this.config.projectId ? { projectId: this.config.projectId } : {},
-        module: kind === "identify" ? "profiles" : "analytics",
-        eventType: payload.eventType ?? (kind === "identify" ? "identify" : "track"),
-        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        ...this.userId ? { userId: this.userId } : {},
-        anonymousId: this.anonId,
-        // Top-level sessionId so backend `events.session_id` populates (powers
-        // the Audience "Sessions & engagement" metrics). Set by auto-track;
-        // blank until the first auto event of the launch → omitted when empty.
-        ...this.sessionId ? { sessionId: this.sessionId } : {},
-        properties: payload.properties ?? {},
-        context: {
-          platform: "react-native",
-          sdk: { name: "@sendoracloud/sdk-react-native", version: SDK_VERSION },
-          ...device ? { device } : {},
-          ...this.config.environment ? { environment: this.config.environment } : {},
-          ...kind === "identify" ? { traits: payload.traits } : {}
-        }
+    this.eventQueue?.enqueue({
+      ...this.config.projectId ? { projectId: this.config.projectId } : {},
+      module: kind === "identify" ? "profiles" : "analytics",
+      eventType: payload.eventType ?? (kind === "identify" ? "identify" : "track"),
+      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+      ...this.userId ? { userId: this.userId } : {},
+      anonymousId: this.anonId,
+      // Top-level sessionId so backend `events.session_id` populates (powers
+      // the Audience "Sessions & engagement" metrics). Set by auto-track;
+      // blank until the first auto event of the launch → omitted when empty.
+      ...this.sessionId ? { sessionId: this.sessionId } : {},
+      properties: payload.properties ?? {},
+      context: {
+        platform: "react-native",
+        sdk: { name: "@sendoracloud/sdk-react-native", version: SDK_VERSION },
+        ...device ? { device } : {},
+        ...this.config.environment ? { environment: this.config.environment } : {},
+        ...kind === "identify" ? { traits: payload.traits } : {}
       }
-    );
+    });
   }
   assertReady() {
     if (!this.ready || !this.config) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "1.36.0",
+  "version": "1.39.0",
   "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth (incl. Game Center / Play Games), deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push-token registration and the no-arg Game Center / Play Games sign-in require a Dev Client (EAS Build or `npx expo prebuild`).",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -56,7 +56,7 @@
   "scripts": {
     "build": "tsup src/index.ts src/contact-widget.tsx --format esm,cjs --dts --clean --external react --external react-native --external react-native-webview",
     "typecheck": "tsc --noEmit",
-    "test": "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts && tsx test/token-expiry.test.ts && tsx test/unlink.test.ts"
+    "test": "tsx test/secure-storage.test.ts && tsx test/integration-storage.test.ts && tsx test/plugin.test.ts && tsx test/game-auth.test.ts && tsx test/link.test.ts && tsx test/session-preservation.test.ts && tsx test/credential-collision.test.ts && tsx test/token-expiry.test.ts && tsx test/unlink.test.ts && tsx test/deferred-match.test.ts && tsx test/anon-id-stability.test.ts && tsx test/event-queue.test.ts"
   },
   "devDependencies": {
     "@types/react": "^19.2.16",