@sendoracloud/sdk-react-native 1.7.0 → 1.8.1

package/dist/index.cjs

@@ -222,7 +222,7 @@ async function request(opts, method, path, body, extraHeaders, reqOpts) {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.7.0",
+  version: "1.8.1",
   description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
@@ -857,6 +857,53 @@ var Auth = class {
       this.bearerHeaders()
     );
   }
+  /**
+   * Delete the signed-in user's account (Apple App Store Guideline 5.1.1(v)).
+   * Honors the project's configured grace period:
+   *   - `"purged"`  — hard-deleted immediately (grace = 0).
+   *   - `"pending"` — deactivated + all sessions revoked now; hard-deleted at
+   *     `scheduledPurgeAt`. The user can CANCEL by signing back in before then.
+   * Either outcome wipes local identity (the server has already revoked the
+   * session). Requires a signed-in user. Throws on a non-2xx response.
+   *
+   * Resolves a FRESH access token via `getAccessToken()` first (refreshing if
+   * the cached one expired) — unlike the other Bearer calls this is a one-shot
+   * destructive action, so a 401 from a stale token would silently strand the
+   * user with an undeleted account. A stale `this.accessToken` was the cause of
+   * the 401s seen in prod when a user tapped "delete" after the app sat idle.
+   */
+  async deleteAccount() {
+    const token = await this.getAccessToken();
+    if (!token) {
+      throw new AuthError("NOT_SIGNED_IN", "Sign in before deleting your account");
+    }
+    const res = await del(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/me",
+      { Authorization: `Bearer ${token}` }
+    );
+    if (!res || !res.ok) {
+      throw new Error(`deleteAccount failed${res ? ` (HTTP ${res.status})` : " (network error)"}`);
+    }
+    let out = {
+      status: "pending",
+      scheduledPurgeAt: null,
+      graceDays: 0
+    };
+    try {
+      const parsed = await res.json();
+      if (parsed.data?.status) {
+        out = {
+          status: parsed.data.status,
+          scheduledPurgeAt: parsed.data.scheduledPurgeAt ?? null,
+          graceDays: parsed.data.graceDays ?? 0
+        };
+      }
+    } catch {
+    }
+    await this.wipeLocalIdentity();
+    return out;
+  }
   // ============================================================
   // OIDC SSO
   // ============================================================

package/dist/index.d.cts

@@ -345,6 +345,26 @@ declare class Auth {
     }>>;
     revokeSession(sessionId: string): Promise<void>;
     revokeAllSessions(): Promise<void>;
+    /**
+     * Delete the signed-in user's account (Apple App Store Guideline 5.1.1(v)).
+     * Honors the project's configured grace period:
+     *   - `"purged"`  — hard-deleted immediately (grace = 0).
+     *   - `"pending"` — deactivated + all sessions revoked now; hard-deleted at
+     *     `scheduledPurgeAt`. The user can CANCEL by signing back in before then.
+     * Either outcome wipes local identity (the server has already revoked the
+     * session). Requires a signed-in user. Throws on a non-2xx response.
+     *
+     * Resolves a FRESH access token via `getAccessToken()` first (refreshing if
+     * the cached one expired) — unlike the other Bearer calls this is a one-shot
+     * destructive action, so a 401 from a stale token would silently strand the
+     * user with an undeleted account. A stale `this.accessToken` was the cause of
+     * the 401s seen in prod when a user tapped "delete" after the app sat idle.
+     */
+    deleteAccount(): Promise<{
+        status: "purged" | "pending";
+        scheduledPurgeAt: string | null;
+        graceDays: number;
+    }>;
     /**
      * Start OIDC sign-in. Returns the IdP's authorization URL — caller
      * opens it via React Native's `Linking.openURL()` (or

package/dist/index.d.ts

@@ -345,6 +345,26 @@ declare class Auth {
     }>>;
     revokeSession(sessionId: string): Promise<void>;
     revokeAllSessions(): Promise<void>;
+    /**
+     * Delete the signed-in user's account (Apple App Store Guideline 5.1.1(v)).
+     * Honors the project's configured grace period:
+     *   - `"purged"`  — hard-deleted immediately (grace = 0).
+     *   - `"pending"` — deactivated + all sessions revoked now; hard-deleted at
+     *     `scheduledPurgeAt`. The user can CANCEL by signing back in before then.
+     * Either outcome wipes local identity (the server has already revoked the
+     * session). Requires a signed-in user. Throws on a non-2xx response.
+     *
+     * Resolves a FRESH access token via `getAccessToken()` first (refreshing if
+     * the cached one expired) — unlike the other Bearer calls this is a one-shot
+     * destructive action, so a 401 from a stale token would silently strand the
+     * user with an undeleted account. A stale `this.accessToken` was the cause of
+     * the 401s seen in prod when a user tapped "delete" after the app sat idle.
+     */
+    deleteAccount(): Promise<{
+        status: "purged" | "pending";
+        scheduledPurgeAt: string | null;
+        graceDays: number;
+    }>;
     /**
      * Start OIDC sign-in. Returns the IdP's authorization URL — caller
      * opens it via React Native's `Linking.openURL()` (or

package/dist/index.js

@@ -179,7 +179,7 @@ async function request(opts, method, path, body, extraHeaders, reqOpts) {
 // package.json
 var package_default = {
   name: "@sendoracloud/sdk-react-native",
-  version: "1.7.0",
+  version: "1.8.1",
   description: "Sendora Cloud React Native + Expo SDK \u2014 analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
   type: "module",
   main: "./dist/index.cjs",
@@ -814,6 +814,53 @@ var Auth = class {
       this.bearerHeaders()
     );
   }
+  /**
+   * Delete the signed-in user's account (Apple App Store Guideline 5.1.1(v)).
+   * Honors the project's configured grace period:
+   *   - `"purged"`  — hard-deleted immediately (grace = 0).
+   *   - `"pending"` — deactivated + all sessions revoked now; hard-deleted at
+   *     `scheduledPurgeAt`. The user can CANCEL by signing back in before then.
+   * Either outcome wipes local identity (the server has already revoked the
+   * session). Requires a signed-in user. Throws on a non-2xx response.
+   *
+   * Resolves a FRESH access token via `getAccessToken()` first (refreshing if
+   * the cached one expired) — unlike the other Bearer calls this is a one-shot
+   * destructive action, so a 401 from a stale token would silently strand the
+   * user with an undeleted account. A stale `this.accessToken` was the cause of
+   * the 401s seen in prod when a user tapped "delete" after the app sat idle.
+   */
+  async deleteAccount() {
+    const token = await this.getAccessToken();
+    if (!token) {
+      throw new AuthError("NOT_SIGNED_IN", "Sign in before deleting your account");
+    }
+    const res = await del(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/me",
+      { Authorization: `Bearer ${token}` }
+    );
+    if (!res || !res.ok) {
+      throw new Error(`deleteAccount failed${res ? ` (HTTP ${res.status})` : " (network error)"}`);
+    }
+    let out = {
+      status: "pending",
+      scheduledPurgeAt: null,
+      graceDays: 0
+    };
+    try {
+      const parsed = await res.json();
+      if (parsed.data?.status) {
+        out = {
+          status: parsed.data.status,
+          scheduledPurgeAt: parsed.data.scheduledPurgeAt ?? null,
+          graceDays: parsed.data.graceDays ?? 0
+        };
+      }
+    } catch {
+    }
+    await this.wipeLocalIdentity();
+    return out;
+  }
   // ============================================================
   // OIDC SSO
   // ============================================================

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "1.7.0",
+  "version": "1.8.1",
   "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth, deep links (Branch / Firebase Dynamic Links parity). Auth + analytics + deep links work in Expo Go; push token registration requires a Dev Client (EAS Build or `npx expo prebuild`).",
   "type": "module",
   "main": "./dist/index.cjs",