@tinkerlandai/indiana-react-native 0.8.5 → 0.9.2

package/README.md

@@ -1,13 +1,13 @@
 # Indiana React Native SDK
 
-These examples use SDK 0.8.4 with `https://api.dev.tinker.cash` and that deployment's test App credentials (protocol 0.8). Check [environment state](../../docs/development-status.md) before changing targets. Set the API origin explicitly: the SDK default is production.
+These examples target SDK 0.9.1 and protocol 0.9 at `https://api.tinker.cash`, using a Sandbox App and credentials issued by the production deployment. Sandbox still contains production data; do not reuse credentials from the separate test deployment. Confirm runtime readiness in [environment state](../../docs/development-status.md) before running them.
 
 Customer identity, holdings, entitlement checks and backend-mediated usage reporting for React Native 0.79+ / Metro 0.82+. This independent npm package uses Fetch and AbortController. It needs no DOM, WebView, native linking or React peer dependency. It does not include store purchases or Funnel native UI.
 
 Install the exact package version:
 
 ```sh
-npm install --save-exact @tinkerlandai/indiana-react-native@0.8.4
+npm install --save-exact @tinkerlandai/indiana-react-native@0.9.1
 ```
 
 ```ts
@@ -15,7 +15,7 @@ import { createIndianaReactNative } from "@tinkerlandai/indiana-react-native";
 
 const indiana = createIndianaReactNative({
   scope: { projectId: "YOUR_APP_UUID", environment: "sandbox" },
-  baseUrl: "https://api.dev.tinker.cash",
+  baseUrl: "https://api.tinker.cash",
   usageReporter: async (command) => {
     const response = await fetch("https://your-app.example/api/usage", {
       method: "POST",
@@ -30,8 +30,8 @@ const indiana = createIndianaReactNative({
   },
 });
 
-// Your backend issues a Customer Token for its authenticated app user.
-indiana.identify(customerToken);
+// Your backend issues a complete Access/Refresh pair for its authenticated user.
+indiana.identify(session);
 const holdings = await indiana.readHoldings();
 const entitlement = await indiana.checkEntitlement({
   requirement: {
@@ -50,6 +50,6 @@ indiana.reset();
 
 Never ship a Server Key in the app. `usageReporter` receives only a validated usage command. Your backend authenticates its own app session, selects the Customer and invokes the server SDK with its Server Key; return that SDK's complete usage response unchanged. Preserve the event's idempotency key across retries. The SDK validates response schema and App/environment and rejects results if identity changes while reporting. The callback owns its network timeout and retry policy.
 
-Credentials stay in memory. Call `reset()` at logout. Customer creation and token issuance belong on your backend. The existing `@tinkerlandai/indiana-sdk/react-native` subpath uses the same source implementation; install only one entry in an application.
+Credentials stay in memory. Passing the complete session pair enables automatic refresh shared by concurrent requests; a bare Access Token requires host-managed renewal. Successful rotation preserves identity; a definitive refresh refusal or expired Refresh Token clears it and stops usage reporting until a new verified login. Call `reset()` at logout. Customer creation and token issuance belong on your backend. The existing `@tinkerlandai/indiana-sdk/react-native` subpath uses the same source implementation; install only one entry in an application.
 
 Package versions use the shared `sdk-vX.Y.Z` release. The package includes ESM, CommonJS and TypeScript declarations and a portable URL parser for React Native hosts whose built-in URL is incomplete. It does not replace application globals; its only runtime dependency is Zod. See the repository's [mobile integration guide](https://github.com/tinkerlandai/Indiana/blob/main/docs/mobile-sdk.md) and [release commands](https://github.com/tinkerlandai/Indiana/blob/main/docs/automated-releases.md).