@crowdedkingdoms/crowdyjs 13.9.0 → 14.1.0

package/dist/session.js

@@ -8,6 +8,10 @@ export class BrowserLocalStorageTokenStore {
     constructor(key = 'crowdyjs:token') {
         this.key = key;
     }
+    /** The key a game's app-scoped token belongs under. Per game, on purpose. */
+    static appKey(basePath) {
+        return `crowdyjs:app:${basePath}`;
+    }
     get() {
         if (typeof localStorage === 'undefined')
             return null;
@@ -24,6 +28,25 @@ export class BrowserLocalStorageTokenStore {
         localStorage.removeItem(this.key);
     }
 }
+/**
+ * The key an IDENTITY session token belongs under: one per origin, shared by every
+ * game on it.
+ *
+ * WHY THIS EXISTS AS A NAMED CONSTANT. Games were storing their credential under
+ * `'crowdyjs:app:' + import.meta.env.BASE_URL` — the game's own PATH — so two games on
+ * `crowdy.games` had different keys on the SAME origin and could not see each other's
+ * login. What was stored was an app token anyway, which is per-game by definition, so
+ * there was nothing cross-app to share even if the key had matched. A player who
+ * signed in for one game was anonymous to the next and got bounced back to the portal.
+ *
+ * The schema split makes the fix structural rather than a workaround: the identity
+ * session token is now its own object with its own lifetime, so it belongs under one
+ * origin-wide key, while app tokens stay per-game. The storage split mirrors the
+ * database split.
+ *
+ * Deliberately NOT parameterised by BASE_URL. That parameter was the bug.
+ */
+BrowserLocalStorageTokenStore.SESSION_KEY = 'crowdyjs:session';
 /**
  * In-memory token holder with change notifications and optional persistence via
  * a {@link TokenStore}. Setting the token fans out to every {@link onChange}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crowdedkingdoms/crowdyjs",
-  "version": "13.9.0",
+  "version": "14.1.0",
   "description": "Browser-first Crowded Kingdoms SDK with GraphQL, realtime, and local Rust authoring support",
   "type": "module",
   "main": "dist/index.js",