@proveanything/smartlinks 1.3.45 → 1.3.46

package/dist/docs/API_SUMMARY.md

@@ -1,6 +1,6 @@
 # Smartlinks API Summary
 
-Version: 1.3.45  |  Generated: 2026-02-19T14:43:39.335Z
+Version: 1.3.46  |  Generated: 2026-02-19T21:09:09.402Z
 
 This is a concise summary of all available API functions and types.
 
@@ -87,7 +87,10 @@ Return whether proxy mode is currently enabled.
   extraHeaders?: Record<string, string>
   iframeAutoResize?: boolean // default true when in iframe
   logger?: Logger // optional console-like or function to enable verbose logging
-}) → `void`
+  /**
+   * When true, bypasses the idempotency guard and forces a full re-initialization.
+   * Use only when you intentionally need to reset all SDK state (e.g. in tests or
+   * when switching accounts) → `void`
 Call this once (e.g. at app startup) to configure baseURL/auth.
 
 **setNgrokSkipBrowserWarning**(flag: boolean) → `void`
@@ -102,6 +105,9 @@ Allows setting the bearerToken at runtime (e.g. after login/logout).
 **getBaseURL**() → `string | null`
 Get the currently configured API base URL. Returns null if initializeApi() has not been called yet.
 
+**isInitialized**() → `boolean`
+Returns true if initializeApi() has been called at least once. Useful for guards in widgets or shared modules that want to skip initialization when another module has already done it. ```ts if (!isInitialized()) { initializeApi({ baseURL: 'https://smartlinks.app/api/v1' }) } ```
+
 **proxyUploadFormData**(path: string,
   formData: FormData,
   onProgress?: (percent: number) → `void`

package/dist/http.d.ts

@@ -16,6 +16,13 @@ export declare function initializeApi(options: {
     extraHeaders?: Record<string, string>;
     iframeAutoResize?: boolean;
     logger?: Logger;
+    /**
+     * When true, bypasses the idempotency guard and forces a full re-initialization.
+     * Use only when you intentionally need to reset all SDK state (e.g. in tests or
+     * when switching accounts). In normal application code, prefer letting the guard
+     * protect runtime state such as login tokens.
+     */
+    force?: boolean;
 }): void;
 /** Enable/disable automatic "ngrok-skip-browser-warning" header. */
 export declare function setNgrokSkipBrowserWarning(flag: boolean): void;
@@ -30,6 +37,19 @@ export declare function setBearerToken(token: string | undefined): void;
  * Returns null if initializeApi() has not been called yet.
  */
 export declare function getBaseURL(): string | null;
+/**
+ * Returns true if initializeApi() has been called at least once.
+ * Useful for guards in widgets or shared modules that want to skip
+ * initialization when another module has already done it.
+ *
+ * @example
+ * ```ts
+ * if (!isInitialized()) {
+ *   initializeApi({ baseURL: 'https://smartlinks.app/api/v1' })
+ * }
+ * ```
+ */
+export declare function isInitialized(): boolean;
 /**
  * Upload a FormData payload via proxy with progress events using chunked postMessage.
  * Parent is expected to implement the counterpart protocol.

package/dist/http.js

@@ -20,6 +20,8 @@ let bearerToken = undefined;
 let proxyMode = false;
 let ngrokSkipBrowserWarning = false;
 let extraHeadersGlobal = {};
+/** Whether initializeApi has been successfully called at least once. */
+let initialized = false;
 let logger;
 function logDebug(...args) {
     if (!logger)
@@ -169,9 +171,32 @@ function normalizeErrorResponse(responseBody, statusCode) {
 import { iframe } from './iframe';
 export function initializeApi(options) {
     // Normalize baseURL by removing trailing slashes.
-    baseURL = options.baseURL.replace(/\/+$/g, "");
+    const normalizedBaseURL = options.baseURL.replace(/\/+$/g, "");
+    // ------------------------------------------------------------------
+    // Firebase-style idempotency guard
+    // If we have already been initialized with the same baseURL and the
+    // caller is not forcing a reset, return immediately.  This prevents
+    // any module – widget, component, or re-rendered page – from
+    // accidentally wiping runtime state such as a bearerToken that was
+    // set by auth.login() after the first initialization.
+    // ------------------------------------------------------------------
+    if (initialized && !options.force && baseURL === normalizedBaseURL) {
+        logDebug('[smartlinks] initializeApi: already initialized with this baseURL – skipping.', { baseURL });
+        return;
+    }
+    baseURL = normalizedBaseURL;
     apiKey = options.apiKey;
-    bearerToken = options.bearerToken;
+    // Only overwrite bearerToken when the caller explicitly supplies one,
+    // OR when this is the very first initialization (start with a clean slate).
+    // Re-initialization calls that omit bearerToken must NOT clear a token that
+    // was acquired at runtime (e.g. from a successful auth.login()).
+    if (options.bearerToken !== undefined) {
+        bearerToken = options.bearerToken;
+    }
+    else if (!initialized) {
+        bearerToken = undefined;
+    }
+    // else: preserve the existing runtime bearerToken.
     proxyMode = !!options.proxyMode;
     // Auto-enable ngrok skip header if domain contains .ngrok.io and user did not explicitly set the flag.
     // Infer ngrok usage from common domains (.ngrok.io or .ngrok-free.dev)
@@ -185,6 +210,7 @@ export function initializeApi(options) {
         iframe.enableAutoIframeResize();
     }
     logger = options.logger;
+    initialized = true;
     logDebug('[smartlinks] initializeApi', {
         baseURL,
         proxyMode,
@@ -215,6 +241,21 @@ export function setBearerToken(token) {
 export function getBaseURL() {
     return baseURL;
 }
+/**
+ * Returns true if initializeApi() has been called at least once.
+ * Useful for guards in widgets or shared modules that want to skip
+ * initialization when another module has already done it.
+ *
+ * @example
+ * ```ts
+ * if (!isInitialized()) {
+ *   initializeApi({ baseURL: 'https://smartlinks.app/api/v1' })
+ * }
+ * ```
+ */
+export function isInitialized() {
+    return initialized;
+}
 // Map of pending proxy requests: id -> {resolve, reject}
 const proxyPending = {};
 function generateProxyId() {

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { initializeApi, request, sendCustomProxyMessage } from "./http";
+export { initializeApi, isInitialized, request, sendCustomProxyMessage } from "./http";
 export * from "./api";
 export * from "./types";
 export { iframe } from "./iframe";

package/dist/index.js

@@ -1,6 +1,6 @@
 // src/index.ts
 // Top-level entrypoint of the npm package. Re-export initializeApi + all namespaces.
-export { initializeApi, request, sendCustomProxyMessage } from "./http";
+export { initializeApi, isInitialized, request, sendCustomProxyMessage } from "./http";
 export * from "./api";
 export * from "./types";
 // Iframe namespace

package/docs/API_SUMMARY.md

@@ -1,6 +1,6 @@
 # Smartlinks API Summary
 
-Version: 1.3.45  |  Generated: 2026-02-19T14:43:39.335Z
+Version: 1.3.46  |  Generated: 2026-02-19T21:09:09.402Z
 
 This is a concise summary of all available API functions and types.
 
@@ -87,7 +87,10 @@ Return whether proxy mode is currently enabled.
   extraHeaders?: Record<string, string>
   iframeAutoResize?: boolean // default true when in iframe
   logger?: Logger // optional console-like or function to enable verbose logging
-}) → `void`
+  /**
+   * When true, bypasses the idempotency guard and forces a full re-initialization.
+   * Use only when you intentionally need to reset all SDK state (e.g. in tests or
+   * when switching accounts) → `void`
 Call this once (e.g. at app startup) to configure baseURL/auth.
 
 **setNgrokSkipBrowserWarning**(flag: boolean) → `void`
@@ -102,6 +105,9 @@ Allows setting the bearerToken at runtime (e.g. after login/logout).
 **getBaseURL**() → `string | null`
 Get the currently configured API base URL. Returns null if initializeApi() has not been called yet.
 
+**isInitialized**() → `boolean`
+Returns true if initializeApi() has been called at least once. Useful for guards in widgets or shared modules that want to skip initialization when another module has already done it. ```ts if (!isInitialized()) { initializeApi({ baseURL: 'https://smartlinks.app/api/v1' }) } ```
+
 **proxyUploadFormData**(path: string,
   formData: FormData,
   onProgress?: (percent: number) → `void`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proveanything/smartlinks",
-  "version": "1.3.45",
+  "version": "1.3.46",
   "description": "Official JavaScript/TypeScript SDK for the Smartlinks API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",