@dotbots-boutique/auth-sdk 1.0.13 → 1.0.15

package/dist/cjs/index.js

@@ -257,15 +257,23 @@ class DotBotsAuth {
         this.listeners = new Map();
         this.cachedUser = null;
         this.initialized = false;
+        this.initializePromise = null;
         this.config = config;
         this.environment = this.detectEnvironment();
         console.warn(`[DotBotsAuth] SDK v${DotBotsAuth.SDK_VERSION} — env: ${this.environment}, appId: ${config.appId}`);
-        const marketplaceOrigin = config.marketplaceOrigin ?? 'https://dotbots.boutique';
+        this.marketplaceOrigin = config.marketplaceOrigin ?? 'https://dotbots.boutique';
         this.tokenManager = new TokenManager(config, this.environment, () => this.emit('tokenRefreshed'), () => this.emit('sessionExpired'), () => this.proxyConfigManager.getBaseUrl());
-        this.postMessageHandler = new PostMessageHandler(marketplaceOrigin);
+        this.postMessageHandler = new PostMessageHandler(this.marketplaceOrigin);
         this.proxyConfigManager = new ProxyConfigManager(config.apiUrl, config.appId, this.environment);
     }
     async initialize() {
+        // Idempotency guard — safe to call multiple times (React StrictMode)
+        if (this.initializePromise)
+            return this.initializePromise;
+        this.initializePromise = this._doInitialize();
+        return this.initializePromise;
+    }
+    async _doInitialize() {
         // Step 1 — Fetch proxy config
         await this.proxyConfigManager.fetchConfig();
         // Step 2 — Authenticate
@@ -276,6 +284,21 @@ class DotBotsAuth {
             await this.initializeStandalone();
         }
         this.initialized = true;
+        // Listen for user switch (new auth code from marketplace after init)
+        window.addEventListener('message', async (event) => {
+            if (event.origin !== this.marketplaceOrigin)
+                return;
+            if (event.data?.type !== 'DOTBOTS_AUTH_CODE')
+                return;
+            if (!this.initialized)
+                return;
+            console.warn(`[DotBotsAuth] Received new DOTBOTS_AUTH_CODE — user switch`);
+            this.initializePromise = null;
+            this.cachedUser = null;
+            this.tokenManager.clear();
+            await this.tokenManager.exchangeCode(event.data.code);
+            this.emit('userChanged');
+        });
     }
     async getUser() {
         this.assertInitialized();
@@ -448,7 +471,7 @@ class DotBotsAuth {
         }
     }
 }
-DotBotsAuth.SDK_VERSION = '1.0.13';
+DotBotsAuth.SDK_VERSION = '1.0.15';
 
 exports.DotBotsAuth = DotBotsAuth;
 exports.DotBotsAuthError = DotBotsAuthError;

package/dist/esm/index.js

@@ -255,15 +255,23 @@ class DotBotsAuth {
         this.listeners = new Map();
         this.cachedUser = null;
         this.initialized = false;
+        this.initializePromise = null;
         this.config = config;
         this.environment = this.detectEnvironment();
         console.warn(`[DotBotsAuth] SDK v${DotBotsAuth.SDK_VERSION} — env: ${this.environment}, appId: ${config.appId}`);
-        const marketplaceOrigin = config.marketplaceOrigin ?? 'https://dotbots.boutique';
+        this.marketplaceOrigin = config.marketplaceOrigin ?? 'https://dotbots.boutique';
         this.tokenManager = new TokenManager(config, this.environment, () => this.emit('tokenRefreshed'), () => this.emit('sessionExpired'), () => this.proxyConfigManager.getBaseUrl());
-        this.postMessageHandler = new PostMessageHandler(marketplaceOrigin);
+        this.postMessageHandler = new PostMessageHandler(this.marketplaceOrigin);
         this.proxyConfigManager = new ProxyConfigManager(config.apiUrl, config.appId, this.environment);
     }
     async initialize() {
+        // Idempotency guard — safe to call multiple times (React StrictMode)
+        if (this.initializePromise)
+            return this.initializePromise;
+        this.initializePromise = this._doInitialize();
+        return this.initializePromise;
+    }
+    async _doInitialize() {
         // Step 1 — Fetch proxy config
         await this.proxyConfigManager.fetchConfig();
         // Step 2 — Authenticate
@@ -274,6 +282,21 @@ class DotBotsAuth {
             await this.initializeStandalone();
         }
         this.initialized = true;
+        // Listen for user switch (new auth code from marketplace after init)
+        window.addEventListener('message', async (event) => {
+            if (event.origin !== this.marketplaceOrigin)
+                return;
+            if (event.data?.type !== 'DOTBOTS_AUTH_CODE')
+                return;
+            if (!this.initialized)
+                return;
+            console.warn(`[DotBotsAuth] Received new DOTBOTS_AUTH_CODE — user switch`);
+            this.initializePromise = null;
+            this.cachedUser = null;
+            this.tokenManager.clear();
+            await this.tokenManager.exchangeCode(event.data.code);
+            this.emit('userChanged');
+        });
     }
     async getUser() {
         this.assertInitialized();
@@ -446,6 +469,6 @@ class DotBotsAuth {
         }
     }
 }
-DotBotsAuth.SDK_VERSION = '1.0.13';
+DotBotsAuth.SDK_VERSION = '1.0.15';
 
 export { DotBotsAuth, DotBotsAuthError };

package/dist/types/DotBotsAuth.d.ts

@@ -5,12 +5,15 @@ export declare class DotBotsAuth {
     private readonly tokenManager;
     private readonly postMessageHandler;
     private readonly proxyConfigManager;
+    private readonly marketplaceOrigin;
     private readonly listeners;
     private cachedUser;
     private initialized;
-    static readonly SDK_VERSION = "1.0.13";
+    private initializePromise;
+    static readonly SDK_VERSION = "1.0.15";
     constructor(config: DotBotsConfig);
     initialize(): Promise<void>;
+    private _doInitialize;
     getUser(): Promise<DotBotsUser>;
     can(permission: string): boolean;
     canAll(permissions: string[]): boolean;

package/dist/types/index.js

@@ -255,15 +255,23 @@ class DotBotsAuth {
         this.listeners = new Map();
         this.cachedUser = null;
         this.initialized = false;
+        this.initializePromise = null;
         this.config = config;
         this.environment = this.detectEnvironment();
         console.warn(`[DotBotsAuth] SDK v${DotBotsAuth.SDK_VERSION} — env: ${this.environment}, appId: ${config.appId}`);
-        const marketplaceOrigin = config.marketplaceOrigin ?? 'https://dotbots.boutique';
+        this.marketplaceOrigin = config.marketplaceOrigin ?? 'https://dotbots.boutique';
         this.tokenManager = new TokenManager(config, this.environment, () => this.emit('tokenRefreshed'), () => this.emit('sessionExpired'), () => this.proxyConfigManager.getBaseUrl());
-        this.postMessageHandler = new PostMessageHandler(marketplaceOrigin);
+        this.postMessageHandler = new PostMessageHandler(this.marketplaceOrigin);
         this.proxyConfigManager = new ProxyConfigManager(config.apiUrl, config.appId, this.environment);
     }
     async initialize() {
+        // Idempotency guard — safe to call multiple times (React StrictMode)
+        if (this.initializePromise)
+            return this.initializePromise;
+        this.initializePromise = this._doInitialize();
+        return this.initializePromise;
+    }
+    async _doInitialize() {
         // Step 1 — Fetch proxy config
         await this.proxyConfigManager.fetchConfig();
         // Step 2 — Authenticate
@@ -274,6 +282,21 @@ class DotBotsAuth {
             await this.initializeStandalone();
         }
         this.initialized = true;
+        // Listen for user switch (new auth code from marketplace after init)
+        window.addEventListener('message', async (event) => {
+            if (event.origin !== this.marketplaceOrigin)
+                return;
+            if (event.data?.type !== 'DOTBOTS_AUTH_CODE')
+                return;
+            if (!this.initialized)
+                return;
+            console.warn(`[DotBotsAuth] Received new DOTBOTS_AUTH_CODE — user switch`);
+            this.initializePromise = null;
+            this.cachedUser = null;
+            this.tokenManager.clear();
+            await this.tokenManager.exchangeCode(event.data.code);
+            this.emit('userChanged');
+        });
     }
     async getUser() {
         this.assertInitialized();
@@ -446,6 +469,6 @@ class DotBotsAuth {
         }
     }
 }
-DotBotsAuth.SDK_VERSION = '1.0.13';
+DotBotsAuth.SDK_VERSION = '1.0.15';
 
 export { DotBotsAuth, DotBotsAuthError };

package/dist/types/types.d.ts

@@ -40,7 +40,7 @@ export interface DotBotsProxyConfig {
     cacheTtl: number;
 }
 export type ProxyFeature = 'cache' | 'localdb' | 'webhooks' | 'ratelimit';
-export type DotBotsAuthEvent = 'tokenRefreshed' | 'loggedOut' | 'sessionExpired' | 'userLoaded' | 'charged';
+export type DotBotsAuthEvent = 'tokenRefreshed' | 'loggedOut' | 'sessionExpired' | 'userLoaded' | 'charged' | 'userChanged';
 export type DotBotsAuthErrorCode = 'IFRAME_TIMEOUT' | 'CODE_EXPIRED' | 'UNAUTHORIZED' | 'REFRESH_FAILED' | 'NETWORK_ERROR' | 'NOT_INITIALIZED' | 'PROXY_UNAVAILABLE' | 'PAYMENT_FAILED';
 export interface TokenPair {
     accessToken: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dotbots-boutique/auth-sdk",
-  "version": "1.0.13",
+  "version": "1.0.15",
   "description": "Authentication SDK for DotBots marketplace apps",
   "license": "MIT",
   "type": "module",