@djangocfg/api 2.1.626 → 2.1.628

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@djangocfg/api",
-  "version": "2.1.626",
+  "version": "2.1.628",
   "description": "Auto-generated TypeScript API client with React hooks, SWR integration, and Zod validation for Django REST Framework backends",
   "keywords": [
     "django",
@@ -91,7 +91,7 @@
     "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@djangocfg/typescript-config": "^2.1.626",
+    "@djangocfg/typescript-config": "^2.1.628",
     "@testing-library/react": "^16.3.3",
     "@types/node": "^25.9.5",
     "@types/react": "19.3.0",

package/src/auth/__tests__/trace.test.ts

@@ -1,7 +1,7 @@
 // @vitest-environment jsdom
 import { beforeEach, describe, expect, it } from 'vitest';
 
-import { authTrace, clearAuthTrace, dumpAuthTrace, readAuthTrace } from '../trace';
+import { authTrace, clearAuthTrace, dumpAuthTrace, readAuthTrace, registerAuthCopy } from '../trace';
 
 describe('auth trace', () => {
   beforeEach(() => {
@@ -9,6 +9,18 @@ describe('auth trace', () => {
     clearAuthTrace();
   });
 
+  it('loading the module does not count a copy; registerAuthCopy does, and a second one is a dup', () => {
+    const g = globalThis as Record<string, unknown>;
+    delete g.__cfgAuthCopies;
+    registerAuthCopy();
+    expect(g.__cfgAuthCopies).toBe(1);
+    expect(readAuthTrace().some((e) => e.ev === 'dup.copy')).toBe(false);
+    registerAuthCopy();
+    expect(g.__cfgAuthCopies).toBe(2);
+    expect(readAuthTrace().some((e) => e.ev === 'dup.copy')).toBe(true);
+    delete g.__cfgAuthCopies;
+  });
+
   it('drops sensitive keys and cuts long strings', () => {
     authTrace('x', { token: 'abc', email: 'a@b.c', otp: '123456', path: '/auth', long: 'y'.repeat(300), ok: true });
     const f = readAuthTrace()[0]!.f!;

package/src/auth/index.ts

@@ -29,6 +29,8 @@ export * from './constants';
 
 // Persisted auth trace: `authTrace(ev, fields)` and the readers behind `window.__cfgAuth`.
 export * from './trace';
+import { registerAuthCopy } from './trace';
+registerAuthCopy();
 
 // Contexts
 export * from './context';

package/src/auth/trace.ts

@@ -233,8 +233,9 @@ export function installAuthTrace(): void {
  * Count the copies of this package in the page. More than one means the bundle holds duplicates (pnpm peer-set
  * variants, a dual ESM/CJS load): the contexts are shared (`sharedContext`), but the build should still be fixed.
  * Visible as `dup.copy` in the trace and once in the console.
+ * Called once by the auth entry (`src/auth/index.ts`), not by this module (see below).
  */
-function registerCopy(): void {
+export function registerAuthCopy(): void {
   if (!hasWindow) return;
   const g = globalThis as Record<string, unknown>;
   const n = ((g.__cfgAuthCopies as number | undefined) ?? 0) + 1;
@@ -247,7 +248,9 @@ function registerCopy(): void {
     }
   }
 }
-registerCopy();
+// NOT called here: `src/index.ts` and `src/auth/index.ts` are separate bundles that each carry this module, so
+// counting at load made every healthy page report `copies: 2`. `src/auth/index.ts` (the client entry, which holds
+// the contexts that must be single) calls `registerAuthCopy()`, so only a second copy of that entry counts.
 
 // The reader is installed as soon as the package loads, so a trace exists from the first event.
 installAuthTrace();