@proveanything/smartlinks 1.14.4 → 1.14.6

package/dist/api/auth.js

@@ -1,4 +1,4 @@
-import { post, request, setBearerToken, getApiHeaders, hasAuthCredentials, isProxyEnabled } from "../http";
+import { post, request, setBearerToken, getApiHeaders, hasAuthCredentials, isProxyEnabled, invalidateCache } from "../http";
 import { SmartlinksApiError } from "../types/error";
 const DEFAULT_AUTH_LOCATION_CACHE_KEY = 'smartlinks.auth.location';
 const DEFAULT_AUTH_LOCATION_TTL_MS = 30 * 60 * 1000;
@@ -80,6 +80,7 @@ export var auth;
     async function login(email, password) {
         const res = await post("/public/auth/login", { email, password });
         setBearerToken(res.bearerToken);
+        invalidateCache();
         return res;
     }
     auth.login = login;
@@ -88,6 +89,7 @@ export var auth;
      */
     function logout() {
         setBearerToken(undefined);
+        invalidateCache();
     }
     auth.logout = logout;
     /**
@@ -103,6 +105,7 @@ export var auth;
         const result = await post("/public/auth/verify", {}, headers);
         if (token && result.valid) {
             setBearerToken(token);
+            invalidateCache();
         }
         return result;
     }
@@ -131,8 +134,10 @@ export var auth;
     async function registerUser(user) {
         // Use the provided token, or the one from getApiHeaders
         const res = await post("/public/auth/register", user);
-        if (res.bearerToken)
+        if (res.bearerToken) {
             setBearerToken(res.bearerToken);
+            invalidateCache();
+        }
         return res;
     }
     auth.registerUser = registerUser;

package/dist/api/authKit.js

@@ -1,4 +1,4 @@
-import { request, post, put, del, setBearerToken } from "../http";
+import { request, post, put, del, setBearerToken, invalidateCache } from "../http";
 /**
  * Namespace containing helper functions for the new AuthKit API.
  * Legacy collection-based authKit helpers retained (marked as *Legacy*).
@@ -11,8 +11,10 @@ export var authKit;
     /** Login with email + password (public). */
     async function login(clientId, email, password) {
         const res = await post(`/authkit/${encodeURIComponent(clientId)}/auth/login`, { email, password });
-        if (res.token)
+        if (res.token) {
             setBearerToken(res.token);
+            invalidateCache();
+        }
         return res;
     }
     authKit.login = login;
@@ -24,16 +26,20 @@ export var authKit;
     /** Google OAuth login via ID token (public). */
     async function googleLogin(clientId, idToken) {
         const res = await post(`/authkit/${encodeURIComponent(clientId)}/auth/google`, { idToken });
-        if (res.token)
+        if (res.token) {
             setBearerToken(res.token);
+            invalidateCache();
+        }
         return res;
     }
     authKit.googleLogin = googleLogin;
     /** Google OAuth login via server-side authorization code (public). */
     async function googleCodeLogin(clientId, code, redirectUri) {
         const res = await post(`/authkit/${encodeURIComponent(clientId)}/auth/google-code`, { code, redirectUri });
-        if (res.token)
+        if (res.token) {
             setBearerToken(res.token);
+            invalidateCache();
+        }
         return res;
     }
     authKit.googleCodeLogin = googleCodeLogin;
@@ -45,8 +51,10 @@ export var authKit;
     /** Verify a magic link token and authenticate/create the user (public). */
     async function verifyMagicLink(clientId, token) {
         const res = await post(`/authkit/${encodeURIComponent(clientId)}/auth/magic-link/verify`, { token });
-        if (res.token)
+        if (res.token) {
             setBearerToken(res.token);
+            invalidateCache();
+        }
         return res;
     }
     authKit.verifyMagicLink = verifyMagicLink;
@@ -59,6 +67,7 @@ export var authKit;
     async function verifyPhoneCode(clientId, phoneNumber, code) {
         const res = await post(`/authkit/${encodeURIComponent(clientId)}/auth/phone/verify`, { phoneNumber, code });
         setBearerToken(res.token);
+        invalidateCache();
         return res;
     }
     authKit.verifyPhoneCode = verifyPhoneCode;
@@ -82,6 +91,7 @@ export var authKit;
     async function exchangeWhatsAppSession(clientId, token, sessionKey) {
         const res = await post(`/authkit/${encodeURIComponent(clientId)}/auth/whatsapp/exchange-session`, { token, sessionKey });
         setBearerToken(res.token);
+        invalidateCache();
         return res;
     }
     authKit.exchangeWhatsAppSession = exchangeWhatsAppSession;
@@ -143,8 +153,10 @@ export var authKit;
     /** Update the authenticated user's profile and replace the bearer token when refreshed claims are returned. */
     async function updateProfile(clientId, data) {
         const res = await post(`/authkit/${encodeURIComponent(clientId)}/account/update-profile`, data);
-        if (res.token)
+        if (res.token) {
             setBearerToken(res.token);
+            invalidateCache();
+        }
         return res;
     }
     authKit.updateProfile = updateProfile;
@@ -158,8 +170,10 @@ export var authKit;
     authKit.changeEmail = changeEmail;
     async function verifyEmailChange(clientId, token) {
         const res = await post(`/authkit/${encodeURIComponent(clientId)}/account/verify-email-change`, { token });
-        if (res.token)
+        if (res.token) {
             setBearerToken(res.token);
+            invalidateCache();
+        }
         return res;
     }
     authKit.verifyEmailChange = verifyEmailChange;

package/dist/docs/API_SUMMARY.md

@@ -1,6 +1,6 @@
 # Smartlinks API Summary
 
-Version: 1.14.4  |  Generated: 2026-05-16T11:56:46.429Z
+Version: 1.14.6  |  Generated: 2026-05-16T13:22:01.199Z
 
 This is a concise summary of all available API functions and types.
 
@@ -150,9 +150,9 @@ Return whether proxy mode is currently enabled.
   iframeAutoResize?: boolean // default true when in iframe
   logger?: Logger // optional console-like or function to enable verbose logging
   /**
-   * When true, bypasses the idempotency guard and forces a full re-initialization.
-   * Use only when you intentionally need to reset all SDK state (e.g. in tests or
-   * when switching accounts) → `void`
+   * When true, the bearer token is automatically saved to localStorage after login
+   * and restored on the next page load. Eliminates the need to manually persist
+   * the token across refreshes. Clear it by calling setBearerToken(undefined) → `void`
 Call this once (e.g. at app startup) to configure baseURL/auth.
 
 **setNgrokSkipBrowserWarning**(flag: boolean) → `void`

package/dist/http.d.ts

@@ -16,6 +16,12 @@ export declare function initializeApi(options: {
     extraHeaders?: Record<string, string>;
     iframeAutoResize?: boolean;
     logger?: Logger;
+    /**
+     * When true, the bearer token is automatically saved to localStorage after login
+     * and restored on the next page load. Eliminates the need to manually persist
+     * the token across refreshes. Clear it by calling setBearerToken(undefined) or logout().
+     */
+    persistToken?: boolean;
     /**
      * When true, bypasses the idempotency guard and forces a full re-initialization.
      * Use only when you intentionally need to reset all SDK state (e.g. in tests or

package/dist/http.js

@@ -48,13 +48,16 @@ function getSourceDomain() {
 const httpCache = new Map();
 let cacheEnabled = true;
 /** Default TTL used when no per-resource rule matches (milliseconds). */
-let cacheDefaultTtlMs = 60000; // 60 seconds
+let cacheDefaultTtlMs = 15000; // 15 seconds
 /** Maximum number of entries before the oldest (LRU) entry is evicted. */
 let cacheMaxEntries = 200;
 /** Persistence backend for the L2 cache. 'none' (default) disables IndexedDB persistence. */
 let cachePersistence = 'none';
 /** When true (default), clear in-memory and sessionStorage caches on page load/refresh. */
 let cacheClearOnPageLoad = true;
+/** When true, the bearer token is saved to localStorage and restored automatically on init. */
+let tokenPersistenceEnabled = true;
+const TOKEN_STORAGE_KEY = 'sl:token';
 /**
  * How long L2 (IndexedDB) entries are considered valid as an offline stale fallback,
  * measured from the original network fetch time (default: 7 days).
@@ -137,6 +140,11 @@ function clearSessionCachesOnPageLoad() {
 // Auto-clear session caches on page load (browser only)
 if (typeof window !== 'undefined' && cacheClearOnPageLoad) {
     clearSessionCachesOnPageLoad();
+    // Also clear on bfcache restoration (mobile browsers restore JS context without reloading)
+    window.addEventListener('pageshow', (e) => {
+        if (e.persisted)
+            clearSessionCachesOnPageLoad();
+    });
 }
 /**
  * Return cached data for a key if it exists and is within TTL.
@@ -339,6 +347,7 @@ function normalizeErrorResponse(responseBody, statusCode) {
  */
 import { iframe } from './iframe';
 export function initializeApi(options) {
+    var _a;
     // Normalize baseURL by removing trailing slashes.
     const normalizedBaseURL = options.baseURL.replace(/\/+$/g, "");
     // ------------------------------------------------------------------
@@ -355,6 +364,9 @@ export function initializeApi(options) {
     }
     baseURL = normalizedBaseURL;
     apiKey = options.apiKey;
+    // Enable token persistence before restoring the token.
+    if (options.persistToken !== undefined)
+        tokenPersistenceEnabled = options.persistToken;
     // Only overwrite bearerToken when the caller explicitly supplies one,
     // OR when this is the very first initialization (start with a clean slate).
     // Re-initialization calls that omit bearerToken must NOT clear a token that
@@ -363,7 +375,13 @@ export function initializeApi(options) {
         bearerToken = options.bearerToken;
     }
     else if (!initialized) {
-        bearerToken = undefined;
+        // On first init with no explicit token, restore from localStorage if persistence is on.
+        if (tokenPersistenceEnabled && typeof localStorage !== 'undefined') {
+            bearerToken = (_a = localStorage.getItem(TOKEN_STORAGE_KEY)) !== null && _a !== void 0 ? _a : undefined;
+        }
+        else {
+            bearerToken = undefined;
+        }
     }
     // else: preserve the existing runtime bearerToken.
     proxyMode = !!options.proxyMode;
@@ -413,6 +431,21 @@ export function setBearerToken(token) {
     if (token === bearerToken)
         return;
     bearerToken = token;
+    // Persist or clear from localStorage when token persistence is enabled.
+    if (tokenPersistenceEnabled && typeof localStorage !== 'undefined') {
+        if (token) {
+            try {
+                localStorage.setItem(TOKEN_STORAGE_KEY, token);
+            }
+            catch (_a) { }
+        }
+        else {
+            try {
+                localStorage.removeItem(TOKEN_STORAGE_KEY);
+            }
+            catch (_b) { }
+        }
+    }
     httpCache.clear();
     if (cachePersistence !== 'none')
         idbClear().catch(() => { });

package/docs/API_SUMMARY.md

@@ -1,6 +1,6 @@
 # Smartlinks API Summary
 
-Version: 1.14.4  |  Generated: 2026-05-16T11:56:46.429Z
+Version: 1.14.6  |  Generated: 2026-05-16T13:22:01.199Z
 
 This is a concise summary of all available API functions and types.
 
@@ -150,9 +150,9 @@ Return whether proxy mode is currently enabled.
   iframeAutoResize?: boolean // default true when in iframe
   logger?: Logger // optional console-like or function to enable verbose logging
   /**
-   * When true, bypasses the idempotency guard and forces a full re-initialization.
-   * Use only when you intentionally need to reset all SDK state (e.g. in tests or
-   * when switching accounts) → `void`
+   * When true, the bearer token is automatically saved to localStorage after login
+   * and restored on the next page load. Eliminates the need to manually persist
+   * the token across refreshes. Clear it by calling setBearerToken(undefined) → `void`
 Call this once (e.g. at app startup) to configure baseURL/auth.
 
 **setNgrokSkipBrowserWarning**(flag: boolean) → `void`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proveanything/smartlinks",
-  "version": "1.14.4",
+  "version": "1.14.6",
   "description": "Official JavaScript/TypeScript SDK for the Smartlinks API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",