@sendoracloud/sdk-react-native 1.6.0 → 1.6.2

package/dist/index.cjs

@@ -219,6 +219,82 @@ async function request(opts, method, path, body, extraHeaders, reqOpts) {
   return res;
 }
 
+// package.json
+var package_default = {
+  name: "@sendoracloud/sdk-react-native",
+  version: "1.6.2",
+  description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
+  type: "module",
+  main: "./dist/index.cjs",
+  module: "./dist/index.js",
+  types: "./dist/index.d.ts",
+  exports: {
+    ".": {
+      types: "./dist/index.d.ts",
+      import: "./dist/index.js",
+      require: "./dist/index.cjs"
+    },
+    "./contact-widget": {
+      types: "./dist/contact-widget.d.ts",
+      import: "./dist/contact-widget.js",
+      require: "./dist/contact-widget.cjs"
+    }
+  },
+  files: [
+    "dist",
+    "examples",
+    "README.md",
+    "LICENSE"
+  ],
+  keywords: [
+    "sendora",
+    "react-native",
+    "expo",
+    "analytics",
+    "tracking",
+    "customer-engagement"
+  ],
+  dependencies: {
+    "react-native-get-random-values": "^1.11.0"
+  },
+  peerDependencies: {
+    "@react-native-async-storage/async-storage": ">=1.17.0",
+    "react-native": ">=0.70.0",
+    "react-native-webview": ">=13.0.0"
+  },
+  peerDependenciesMeta: {
+    "@react-native-async-storage/async-storage": {
+      optional: false
+    },
+    "react-native": {
+      optional: false
+    },
+    "react-native-webview": {
+      optional: true
+    }
+  },
+  scripts: {
+    build: "tsup src/index.ts src/contact-widget.tsx --format esm,cjs --dts --clean --external react --external react-native --external react-native-webview",
+    typecheck: "tsc --noEmit"
+  },
+  devDependencies: {
+    "@types/react": "^19.2.16",
+    "react-native": "^0.85.3",
+    "react-native-webview": "^13.16.1",
+    tsup: "^8.0.0",
+    typescript: "^5.0.0"
+  },
+  license: "MIT",
+  repository: {
+    type: "git",
+    url: "https://github.com/sendoracloud/sdk-react-native"
+  },
+  homepage: "https://sendoracloud.com/sdks"
+};
+
+// src/version.ts
+var SDK_VERSION = package_default.version;
+
 // src/auth.ts
 var import_react_native = require("react-native");
 var TOKEN_KEY = "auth_access_token";
@@ -277,6 +353,14 @@ var Auth = class {
     this.refreshCooldownUntil = 0;
     this.takeoverListeners = /* @__PURE__ */ new Set();
     this.lastTakeover = null;
+    /**
+     * Anon refresh token captured at `signIn()` time, stashed keyed to the
+     * issued `mfaChallengeToken` so the later `challengeMfa()` can forward it
+     * for device-takeover (s58.111). Before this, the MFA branch wiped the anon
+     * identity before the challenge resolved → the takeover hint was lost → one
+     * device ended with two user_ids + duplicate pushes (audit s58.203 fix).
+     */
+    this.pendingAnonTakeover = null;
     /**
      * Proactive refresh (s58.72). Fires when access-token age crosses
      * ~80% of TTL. Pairs with the AppState foreground listener so a
@@ -496,12 +580,7 @@ var Auth = class {
    */
   signIn(email, password) {
     return this.serialize(async () => {
-      let prevAnonRefreshToken;
-      if (this.user?.isAnonymous) {
-        const stashed = this.hooks.storage.get(REFRESH_KEY);
-        if (stashed) prevAnonRefreshToken = stashed;
-      }
-      if (this.user !== null) await this.wipeLocalIdentity();
+      const prevAnonRefreshToken = this.readPrevAnonRefreshToken();
       const res = await post(
         { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
         "/api/v1/auth-service/login",
@@ -519,12 +598,16 @@ var Auth = class {
       }
       const r = parsed.data;
       if (r.mfaRequired === true && typeof r.mfaChallengeToken === "string") {
+        if (prevAnonRefreshToken) {
+          this.pendingAnonTakeover = { challengeToken: r.mfaChallengeToken, prevAnonRefreshToken };
+        }
         const u = r.user;
         return { mfaRequired: true, mfaChallengeToken: r.mfaChallengeToken, userId: u?.id ?? "" };
       }
       if (!isAuthApiResponse(parsed.data)) {
         throw new AuthError(parsed.error?.code ?? "AUTH_ERROR", parsed.error?.message ?? "Login failed");
       }
+      if (this.user !== null) await this.wipeLocalIdentity();
       this.persist(parsed.data);
       return parsed.data.user;
     });
@@ -606,13 +689,15 @@ var Auth = class {
    */
   challengeMfa(mfaChallengeToken, code) {
     return this.serialize(async () => {
-      const prevAnonRefreshToken = this.readPrevAnonRefreshToken();
+      const stashed = this.pendingAnonTakeover?.challengeToken === mfaChallengeToken ? this.pendingAnonTakeover.prevAnonRefreshToken : void 0;
+      const prevAnonRefreshToken = stashed ?? this.readPrevAnonRefreshToken();
       const body = {
         challengeToken: mfaChallengeToken,
         code
       };
       if (prevAnonRefreshToken) body.prevAnonRefreshToken = prevAnonRefreshToken;
       const data = await this.callAuth("/api/v1/auth-service/mfa/challenge", body);
+      if (this.user !== null) await this.wipeLocalIdentity();
       this.persist(data);
       return data.user;
     });
@@ -1152,6 +1237,7 @@ var Auth = class {
     this.accessToken = null;
     this.accessExpiresAt = 0;
     this.lastTakeover = null;
+    this.pendingAnonTakeover = null;
     this.hooks.storage.remove(USER_KEY);
     this.hooks.storage.remove(TOKEN_KEY);
     this.hooks.storage.remove(TOKEN_EXPIRES_KEY);
@@ -1839,7 +1925,6 @@ function installAutoTrack(args) {
 }
 
 // src/index.ts
-var SDK_VERSION = "1.0.0";
 var DEFAULT_API_URL = "https://api.sendoracloud.com";
 var ANON_KEY = "anon_id";
 var USER_ID_KEY = "user_id";
@@ -2149,7 +2234,13 @@ var SendoraSDK = class {
       { apiUrl: this.config.apiUrl, publicKey: this.config.publicKey, debug: this.debug },
       "/api/v1/push/tokens",
       {
-        userId: this.userId,
+        // Conditional spread — the backend's registerPushTokenSchema makes
+        // userId `.optional()`, which accepts a missing key but REJECTS
+        // `null` (422 "userId: Expected string, received null"). Anonymous
+        // installs (pre-identify()) carry a null userId, so OMIT the field
+        // rather than send null — anon devices must still be able to
+        // register. Mirrors the same conditional-spread sendEvent() uses.
+        ...this.userId ? { userId: this.userId } : {},
         anonymousId: this.anonId,
         token: reg.token,
         platform: reg.platform,
@@ -2191,7 +2282,7 @@ var SendoraSDK = class {
         if (clickAction !== void 0) body.clickAction = clickAction;
         await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/push/track-open",
+          "/api/v1/push/track-open",
           body
         );
       },
@@ -2210,7 +2301,7 @@ var SendoraSDK = class {
           if (!self.config) throw new Error("[sendoracloud] init() must complete before push.liveActivities.startToken().");
           const res = await post(
             { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-            "/push/live-activities/start-token",
+            "/api/v1/push/live-activities/start-token",
             {
               pushToken: input.pushToken,
               activityType: input.activityType,
@@ -2244,7 +2335,7 @@ var SendoraSDK = class {
           if (!self.config) throw new Error("[sendoracloud] init() must complete before push.geofences.list().");
           const res = await getJson(
             { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-            "/push/geofences/list-for-device"
+            "/api/v1/push/geofences/list-for-device"
           );
           if (!res || !res.ok) {
             throw new Error(`[sendoracloud] geofences list failed (HTTP ${res?.status ?? "network"}).`);
@@ -2262,7 +2353,7 @@ var SendoraSDK = class {
           if (!self.config) throw new Error("[sendoracloud] init() must complete before push.geofences.recordEvent().");
           const res = await post(
             { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-            "/push/geofences/event",
+            "/api/v1/push/geofences/event",
             {
               geofenceId: input.geofenceId,
               kind: input.kind,
@@ -2306,7 +2397,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before attribution.reportInstall().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/attribution/install",
+          "/api/v1/attribution/install",
           input ?? {}
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] attribution.reportInstall failed (${res?.status ?? "network"})`);
@@ -2318,7 +2409,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before attribution.checkDeferred().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/attribution/deferred",
+          "/api/v1/attribution/deferred",
           input ?? {}
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] attribution.checkDeferred failed (${res?.status ?? "network"})`);
@@ -2352,7 +2443,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before support.createTicket().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/support/tickets",
+          "/api/v1/support/tickets",
           input
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] support.createTicket failed (${res?.status ?? "network"})`);
@@ -2364,7 +2455,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before support.submitCsat().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/support/csat",
+          "/api/v1/support/csat",
           input
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] support.submitCsat failed (${res?.status ?? "network"})`);
@@ -2377,11 +2468,12 @@ var SendoraSDK = class {
         const token = await self.auth.getAccessToken();
         if (!token) return 0;
         try {
-          const res = await fetch(
-            `${self.config.apiUrl}/api/v1/widgets/${encodeURIComponent(widgetId)}/my-tickets/unread-count`,
-            { headers: { Authorization: `Bearer ${token}` } }
+          const res = await getJson(
+            { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+            `/api/v1/widgets/${encodeURIComponent(widgetId)}/my-tickets/unread-count`,
+            { Authorization: `Bearer ${token}` }
           );
-          if (!res.ok) return 0;
+          if (!res || !res.ok) return 0;
           const parsed = await res.json();
           return parsed?.data?.count ?? 0;
         } catch {
@@ -2410,12 +2502,11 @@ var SendoraSDK = class {
         if (!input.query || input.query.trim().length === 0) return [];
         const params = new URLSearchParams({ query: input.query });
         if (input.limit) params.set("limit", String(input.limit));
-        const url = `${self.config.apiUrl}/api/v1/kb/search?${params.toString()}`;
-        const res = await fetch(url, {
-          method: "GET",
-          headers: { "x-api-key": self.config.publicKey }
-        });
-        if (!res.ok) throw new Error(`[sendoracloud] kb.search failed (${res.status})`);
+        const res = await getJson(
+          { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+          `/api/v1/kb/search?${params.toString()}`
+        );
+        if (!res || !res.ok) throw new Error(`[sendoracloud] kb.search failed (${res?.status ?? "network"})`);
         const parsed = await res.json();
         if (!parsed.success || !Array.isArray(parsed.data)) {
           throw new Error("[sendoracloud] kb.search: bad response");
@@ -2453,7 +2544,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before consent.record().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/consent/record",
+          "/api/v1/consent/record",
           input
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] consent.record failed (${res?.status ?? "network"})`);
@@ -2465,7 +2556,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before consent.requestDeletion().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/consent/deletion-request",
+          "/api/v1/consent/deletion-request",
           input
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] consent.requestDeletion failed (${res?.status ?? "network"})`);
@@ -2501,11 +2592,11 @@ var SendoraSDK = class {
       fetchConfig: async (surveyId) => {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before surveys.fetchConfig().");
         if (typeof surveyId !== "string" || surveyId.length === 0) return null;
-        const url = `${self.config.apiUrl}/api/v1/surveys/${encodeURIComponent(surveyId)}/config`;
-        const res = await fetch(url, {
-          method: "GET",
-          headers: { "x-api-key": self.config.publicKey }
-        });
+        const res = await getJson(
+          { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+          `/api/v1/surveys/${encodeURIComponent(surveyId)}/config`
+        );
+        if (!res) return null;
         if (res.status === 404) return null;
         if (!res.ok) throw new Error(`[sendoracloud] surveys.fetchConfig failed (${res.status})`);
         const parsed = await res.json();
@@ -2516,7 +2607,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before surveys.submitResponse().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/surveys/responses",
+          "/api/v1/surveys/responses",
           { completed: true, ...input }
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] surveys.submitResponse failed (${res?.status ?? "network"})`);
@@ -2550,12 +2641,11 @@ var SendoraSDK = class {
     return {
       fetchActive: async () => {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before messages.fetchActive().");
-        const url = `${self.config.apiUrl}/api/v1/in-app-messages/active`;
-        const res = await fetch(url, {
-          method: "GET",
-          headers: { "x-api-key": self.config.publicKey }
-        });
-        if (!res.ok) throw new Error(`[sendoracloud] messages.fetchActive failed (${res.status})`);
+        const res = await getJson(
+          { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+          "/api/v1/in-app-messages/active"
+        );
+        if (!res || !res.ok) throw new Error(`[sendoracloud] messages.fetchActive failed (${res?.status ?? "network"})`);
         const parsed = await res.json();
         if (!parsed.success || !Array.isArray(parsed.data)) {
           throw new Error("[sendoracloud] messages.fetchActive: bad response");
@@ -2566,7 +2656,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before messages.recordImpression().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/in-app-messages/impressions",
+          "/api/v1/in-app-messages/impressions",
           input
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] messages.recordImpression failed (${res?.status ?? "network"})`);
@@ -2604,7 +2694,7 @@ var SendoraSDK = class {
         };
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/feature-flags/evaluate",
+          "/api/v1/feature-flags/evaluate",
           body
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] flags.evaluate failed (${res?.status ?? "network"})`);
@@ -2621,7 +2711,7 @@ var SendoraSDK = class {
         };
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/feature-flags/evaluate-all",
+          "/api/v1/feature-flags/evaluate-all",
           body
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] flags.evaluateAll failed (${res?.status ?? "network"})`);
@@ -2656,7 +2746,7 @@ var SendoraSDK = class {
         };
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/chatbot/message",
+          "/api/v1/chatbot/message",
           body
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] chatbot.sendMessage failed (${res?.status ?? "network"})`);

package/dist/index.d.cts

@@ -50,9 +50,16 @@ declare class Storage {
  * so a UI double-submit can't mint two anonymous users or interleave
  * a signIn + signOut.
  *
- * Tokens persist via the configured secure-storage adapter (defaults
- * to AsyncStorage; consumers handling sensitive accounts should pass
- * a Keychain / SecureStore-backed adapter via `secureStorage`).
+ * Tokens (including the refresh token) persist in AsyncStorage, not
+ * the iOS Keychain / Android Keystore. AsyncStorage is unencrypted
+ * app-sandbox storage: readable by anyone with filesystem/backup
+ * access to a jailbroken/rooted or unlocked device, but isolated from
+ * other apps by the OS sandbox. There is NO `secureStorage` adapter
+ * option today — earlier docs claimed a Keychain/SecureStore-backed
+ * adapter that was never implemented. If you ship a follow-up that
+ * moves the refresh token to expo-secure-store / react-native-keychain
+ * (optional peer dep, Metro-resolvable static import — never an inline
+ * require), keep the `auth_refresh_token` storage key for back-compat.
  *
  * Response payloads are validated non-empty before persisting so a
  * malformed/MITM'd response can't install an `id = ""` user.
@@ -134,6 +141,14 @@ declare class Auth {
     private refreshCooldownUntil;
     private takeoverListeners;
     private lastTakeover;
+    /**
+     * Anon refresh token captured at `signIn()` time, stashed keyed to the
+     * issued `mfaChallengeToken` so the later `challengeMfa()` can forward it
+     * for device-takeover (s58.111). Before this, the MFA branch wiped the anon
+     * identity before the challenge resolved → the takeover hint was lost → one
+     * device ended with two user_ids + duplicate pushes (audit s58.203 fix).
+     */
+    private pendingAnonTakeover;
     /**
      * Resolves when the parent SDK has finished its async init() —
      * AsyncStorage hydrated + auth.hydrate() restored the cached

package/dist/index.d.ts

@@ -50,9 +50,16 @@ declare class Storage {
  * so a UI double-submit can't mint two anonymous users or interleave
  * a signIn + signOut.
  *
- * Tokens persist via the configured secure-storage adapter (defaults
- * to AsyncStorage; consumers handling sensitive accounts should pass
- * a Keychain / SecureStore-backed adapter via `secureStorage`).
+ * Tokens (including the refresh token) persist in AsyncStorage, not
+ * the iOS Keychain / Android Keystore. AsyncStorage is unencrypted
+ * app-sandbox storage: readable by anyone with filesystem/backup
+ * access to a jailbroken/rooted or unlocked device, but isolated from
+ * other apps by the OS sandbox. There is NO `secureStorage` adapter
+ * option today — earlier docs claimed a Keychain/SecureStore-backed
+ * adapter that was never implemented. If you ship a follow-up that
+ * moves the refresh token to expo-secure-store / react-native-keychain
+ * (optional peer dep, Metro-resolvable static import — never an inline
+ * require), keep the `auth_refresh_token` storage key for back-compat.
  *
  * Response payloads are validated non-empty before persisting so a
  * malformed/MITM'd response can't install an `id = ""` user.
@@ -134,6 +141,14 @@ declare class Auth {
     private refreshCooldownUntil;
     private takeoverListeners;
     private lastTakeover;
+    /**
+     * Anon refresh token captured at `signIn()` time, stashed keyed to the
+     * issued `mfaChallengeToken` so the later `challengeMfa()` can forward it
+     * for device-takeover (s58.111). Before this, the MFA branch wiped the anon
+     * identity before the challenge resolved → the takeover hint was lost → one
+     * device ended with two user_ids + duplicate pushes (audit s58.203 fix).
+     */
+    private pendingAnonTakeover;
     /**
      * Resolves when the parent SDK has finished its async init() —
      * AsyncStorage hydrated + auth.hydrate() restored the cached

package/dist/index.js

@@ -176,6 +176,82 @@ async function request(opts, method, path, body, extraHeaders, reqOpts) {
   return res;
 }
 
+// package.json
+var package_default = {
+  name: "@sendoracloud/sdk-react-native",
+  version: "1.6.2",
+  description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
+  type: "module",
+  main: "./dist/index.cjs",
+  module: "./dist/index.js",
+  types: "./dist/index.d.ts",
+  exports: {
+    ".": {
+      types: "./dist/index.d.ts",
+      import: "./dist/index.js",
+      require: "./dist/index.cjs"
+    },
+    "./contact-widget": {
+      types: "./dist/contact-widget.d.ts",
+      import: "./dist/contact-widget.js",
+      require: "./dist/contact-widget.cjs"
+    }
+  },
+  files: [
+    "dist",
+    "examples",
+    "README.md",
+    "LICENSE"
+  ],
+  keywords: [
+    "sendora",
+    "react-native",
+    "expo",
+    "analytics",
+    "tracking",
+    "customer-engagement"
+  ],
+  dependencies: {
+    "react-native-get-random-values": "^1.11.0"
+  },
+  peerDependencies: {
+    "@react-native-async-storage/async-storage": ">=1.17.0",
+    "react-native": ">=0.70.0",
+    "react-native-webview": ">=13.0.0"
+  },
+  peerDependenciesMeta: {
+    "@react-native-async-storage/async-storage": {
+      optional: false
+    },
+    "react-native": {
+      optional: false
+    },
+    "react-native-webview": {
+      optional: true
+    }
+  },
+  scripts: {
+    build: "tsup src/index.ts src/contact-widget.tsx --format esm,cjs --dts --clean --external react --external react-native --external react-native-webview",
+    typecheck: "tsc --noEmit"
+  },
+  devDependencies: {
+    "@types/react": "^19.2.16",
+    "react-native": "^0.85.3",
+    "react-native-webview": "^13.16.1",
+    tsup: "^8.0.0",
+    typescript: "^5.0.0"
+  },
+  license: "MIT",
+  repository: {
+    type: "git",
+    url: "https://github.com/sendoracloud/sdk-react-native"
+  },
+  homepage: "https://sendoracloud.com/sdks"
+};
+
+// src/version.ts
+var SDK_VERSION = package_default.version;
+
 // src/auth.ts
 import { AppState as RnAppState } from "react-native";
 var TOKEN_KEY = "auth_access_token";
@@ -234,6 +310,14 @@ var Auth = class {
     this.refreshCooldownUntil = 0;
     this.takeoverListeners = /* @__PURE__ */ new Set();
     this.lastTakeover = null;
+    /**
+     * Anon refresh token captured at `signIn()` time, stashed keyed to the
+     * issued `mfaChallengeToken` so the later `challengeMfa()` can forward it
+     * for device-takeover (s58.111). Before this, the MFA branch wiped the anon
+     * identity before the challenge resolved → the takeover hint was lost → one
+     * device ended with two user_ids + duplicate pushes (audit s58.203 fix).
+     */
+    this.pendingAnonTakeover = null;
     /**
      * Proactive refresh (s58.72). Fires when access-token age crosses
      * ~80% of TTL. Pairs with the AppState foreground listener so a
@@ -453,12 +537,7 @@ var Auth = class {
    */
   signIn(email, password) {
     return this.serialize(async () => {
-      let prevAnonRefreshToken;
-      if (this.user?.isAnonymous) {
-        const stashed = this.hooks.storage.get(REFRESH_KEY);
-        if (stashed) prevAnonRefreshToken = stashed;
-      }
-      if (this.user !== null) await this.wipeLocalIdentity();
+      const prevAnonRefreshToken = this.readPrevAnonRefreshToken();
       const res = await post(
         { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
         "/api/v1/auth-service/login",
@@ -476,12 +555,16 @@ var Auth = class {
       }
       const r = parsed.data;
       if (r.mfaRequired === true && typeof r.mfaChallengeToken === "string") {
+        if (prevAnonRefreshToken) {
+          this.pendingAnonTakeover = { challengeToken: r.mfaChallengeToken, prevAnonRefreshToken };
+        }
         const u = r.user;
         return { mfaRequired: true, mfaChallengeToken: r.mfaChallengeToken, userId: u?.id ?? "" };
       }
       if (!isAuthApiResponse(parsed.data)) {
         throw new AuthError(parsed.error?.code ?? "AUTH_ERROR", parsed.error?.message ?? "Login failed");
       }
+      if (this.user !== null) await this.wipeLocalIdentity();
       this.persist(parsed.data);
       return parsed.data.user;
     });
@@ -563,13 +646,15 @@ var Auth = class {
    */
   challengeMfa(mfaChallengeToken, code) {
     return this.serialize(async () => {
-      const prevAnonRefreshToken = this.readPrevAnonRefreshToken();
+      const stashed = this.pendingAnonTakeover?.challengeToken === mfaChallengeToken ? this.pendingAnonTakeover.prevAnonRefreshToken : void 0;
+      const prevAnonRefreshToken = stashed ?? this.readPrevAnonRefreshToken();
       const body = {
         challengeToken: mfaChallengeToken,
         code
       };
       if (prevAnonRefreshToken) body.prevAnonRefreshToken = prevAnonRefreshToken;
       const data = await this.callAuth("/api/v1/auth-service/mfa/challenge", body);
+      if (this.user !== null) await this.wipeLocalIdentity();
       this.persist(data);
       return data.user;
     });
@@ -1109,6 +1194,7 @@ var Auth = class {
     this.accessToken = null;
     this.accessExpiresAt = 0;
     this.lastTakeover = null;
+    this.pendingAnonTakeover = null;
     this.hooks.storage.remove(USER_KEY);
     this.hooks.storage.remove(TOKEN_KEY);
     this.hooks.storage.remove(TOKEN_EXPIRES_KEY);
@@ -1801,7 +1887,6 @@ function installAutoTrack(args) {
 }
 
 // src/index.ts
-var SDK_VERSION = "1.0.0";
 var DEFAULT_API_URL = "https://api.sendoracloud.com";
 var ANON_KEY = "anon_id";
 var USER_ID_KEY = "user_id";
@@ -2111,7 +2196,13 @@ var SendoraSDK = class {
       { apiUrl: this.config.apiUrl, publicKey: this.config.publicKey, debug: this.debug },
       "/api/v1/push/tokens",
       {
-        userId: this.userId,
+        // Conditional spread — the backend's registerPushTokenSchema makes
+        // userId `.optional()`, which accepts a missing key but REJECTS
+        // `null` (422 "userId: Expected string, received null"). Anonymous
+        // installs (pre-identify()) carry a null userId, so OMIT the field
+        // rather than send null — anon devices must still be able to
+        // register. Mirrors the same conditional-spread sendEvent() uses.
+        ...this.userId ? { userId: this.userId } : {},
         anonymousId: this.anonId,
         token: reg.token,
         platform: reg.platform,
@@ -2153,7 +2244,7 @@ var SendoraSDK = class {
         if (clickAction !== void 0) body.clickAction = clickAction;
         await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/push/track-open",
+          "/api/v1/push/track-open",
           body
         );
       },
@@ -2172,7 +2263,7 @@ var SendoraSDK = class {
           if (!self.config) throw new Error("[sendoracloud] init() must complete before push.liveActivities.startToken().");
           const res = await post(
             { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-            "/push/live-activities/start-token",
+            "/api/v1/push/live-activities/start-token",
             {
               pushToken: input.pushToken,
               activityType: input.activityType,
@@ -2206,7 +2297,7 @@ var SendoraSDK = class {
           if (!self.config) throw new Error("[sendoracloud] init() must complete before push.geofences.list().");
           const res = await getJson(
             { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-            "/push/geofences/list-for-device"
+            "/api/v1/push/geofences/list-for-device"
           );
           if (!res || !res.ok) {
             throw new Error(`[sendoracloud] geofences list failed (HTTP ${res?.status ?? "network"}).`);
@@ -2224,7 +2315,7 @@ var SendoraSDK = class {
           if (!self.config) throw new Error("[sendoracloud] init() must complete before push.geofences.recordEvent().");
           const res = await post(
             { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-            "/push/geofences/event",
+            "/api/v1/push/geofences/event",
             {
               geofenceId: input.geofenceId,
               kind: input.kind,
@@ -2268,7 +2359,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before attribution.reportInstall().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/attribution/install",
+          "/api/v1/attribution/install",
           input ?? {}
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] attribution.reportInstall failed (${res?.status ?? "network"})`);
@@ -2280,7 +2371,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before attribution.checkDeferred().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/attribution/deferred",
+          "/api/v1/attribution/deferred",
           input ?? {}
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] attribution.checkDeferred failed (${res?.status ?? "network"})`);
@@ -2314,7 +2405,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before support.createTicket().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/support/tickets",
+          "/api/v1/support/tickets",
           input
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] support.createTicket failed (${res?.status ?? "network"})`);
@@ -2326,7 +2417,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before support.submitCsat().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/support/csat",
+          "/api/v1/support/csat",
           input
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] support.submitCsat failed (${res?.status ?? "network"})`);
@@ -2339,11 +2430,12 @@ var SendoraSDK = class {
         const token = await self.auth.getAccessToken();
         if (!token) return 0;
         try {
-          const res = await fetch(
-            `${self.config.apiUrl}/api/v1/widgets/${encodeURIComponent(widgetId)}/my-tickets/unread-count`,
-            { headers: { Authorization: `Bearer ${token}` } }
+          const res = await getJson(
+            { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+            `/api/v1/widgets/${encodeURIComponent(widgetId)}/my-tickets/unread-count`,
+            { Authorization: `Bearer ${token}` }
           );
-          if (!res.ok) return 0;
+          if (!res || !res.ok) return 0;
           const parsed = await res.json();
           return parsed?.data?.count ?? 0;
         } catch {
@@ -2372,12 +2464,11 @@ var SendoraSDK = class {
         if (!input.query || input.query.trim().length === 0) return [];
         const params = new URLSearchParams({ query: input.query });
         if (input.limit) params.set("limit", String(input.limit));
-        const url = `${self.config.apiUrl}/api/v1/kb/search?${params.toString()}`;
-        const res = await fetch(url, {
-          method: "GET",
-          headers: { "x-api-key": self.config.publicKey }
-        });
-        if (!res.ok) throw new Error(`[sendoracloud] kb.search failed (${res.status})`);
+        const res = await getJson(
+          { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+          `/api/v1/kb/search?${params.toString()}`
+        );
+        if (!res || !res.ok) throw new Error(`[sendoracloud] kb.search failed (${res?.status ?? "network"})`);
         const parsed = await res.json();
         if (!parsed.success || !Array.isArray(parsed.data)) {
           throw new Error("[sendoracloud] kb.search: bad response");
@@ -2415,7 +2506,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before consent.record().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/consent/record",
+          "/api/v1/consent/record",
           input
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] consent.record failed (${res?.status ?? "network"})`);
@@ -2427,7 +2518,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before consent.requestDeletion().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/consent/deletion-request",
+          "/api/v1/consent/deletion-request",
           input
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] consent.requestDeletion failed (${res?.status ?? "network"})`);
@@ -2463,11 +2554,11 @@ var SendoraSDK = class {
       fetchConfig: async (surveyId) => {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before surveys.fetchConfig().");
         if (typeof surveyId !== "string" || surveyId.length === 0) return null;
-        const url = `${self.config.apiUrl}/api/v1/surveys/${encodeURIComponent(surveyId)}/config`;
-        const res = await fetch(url, {
-          method: "GET",
-          headers: { "x-api-key": self.config.publicKey }
-        });
+        const res = await getJson(
+          { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+          `/api/v1/surveys/${encodeURIComponent(surveyId)}/config`
+        );
+        if (!res) return null;
         if (res.status === 404) return null;
         if (!res.ok) throw new Error(`[sendoracloud] surveys.fetchConfig failed (${res.status})`);
         const parsed = await res.json();
@@ -2478,7 +2569,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before surveys.submitResponse().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/surveys/responses",
+          "/api/v1/surveys/responses",
           { completed: true, ...input }
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] surveys.submitResponse failed (${res?.status ?? "network"})`);
@@ -2512,12 +2603,11 @@ var SendoraSDK = class {
     return {
       fetchActive: async () => {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before messages.fetchActive().");
-        const url = `${self.config.apiUrl}/api/v1/in-app-messages/active`;
-        const res = await fetch(url, {
-          method: "GET",
-          headers: { "x-api-key": self.config.publicKey }
-        });
-        if (!res.ok) throw new Error(`[sendoracloud] messages.fetchActive failed (${res.status})`);
+        const res = await getJson(
+          { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
+          "/api/v1/in-app-messages/active"
+        );
+        if (!res || !res.ok) throw new Error(`[sendoracloud] messages.fetchActive failed (${res?.status ?? "network"})`);
         const parsed = await res.json();
         if (!parsed.success || !Array.isArray(parsed.data)) {
           throw new Error("[sendoracloud] messages.fetchActive: bad response");
@@ -2528,7 +2618,7 @@ var SendoraSDK = class {
         if (!self.config) throw new Error("[sendoracloud] init() must complete before messages.recordImpression().");
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/in-app-messages/impressions",
+          "/api/v1/in-app-messages/impressions",
           input
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] messages.recordImpression failed (${res?.status ?? "network"})`);
@@ -2566,7 +2656,7 @@ var SendoraSDK = class {
         };
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/feature-flags/evaluate",
+          "/api/v1/feature-flags/evaluate",
           body
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] flags.evaluate failed (${res?.status ?? "network"})`);
@@ -2583,7 +2673,7 @@ var SendoraSDK = class {
         };
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/feature-flags/evaluate-all",
+          "/api/v1/feature-flags/evaluate-all",
           body
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] flags.evaluateAll failed (${res?.status ?? "network"})`);
@@ -2618,7 +2708,7 @@ var SendoraSDK = class {
         };
         const res = await post(
           { apiUrl: self.config.apiUrl, publicKey: self.config.publicKey, debug: self.debug },
-          "/chatbot/message",
+          "/api/v1/chatbot/message",
           body
         );
         if (!res || !res.ok) throw new Error(`[sendoracloud] chatbot.sendMessage failed (${res?.status ?? "network"})`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "1.6.0",
+  "version": "1.6.2",
   "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
   "type": "module",
   "main": "./dist/index.cjs",