@proveanything/smartlinks 2.0.0-alpha.5 → 2.0.1

package/dist/api/authKit.d.ts

@@ -54,6 +54,24 @@ export declare namespace authKit {
     function googleLogin(clientId: string, idToken: string, trustedDeviceToken?: string): Promise<AuthLoginResponse>;
     /** Google OAuth login via server-side authorization code (public). */
     function googleCodeLogin(clientId: string, code: string, redirectUri: string): Promise<AuthLoginResponse>;
+    /**
+     * Sign in with LinkedIn (OpenID Connect) via a server-side authorization code (public).
+     *
+     * LinkedIn has no client-side ID-token SDK, so this is always the authorization-code flow:
+     * redirect the browser to LinkedIn's authorize endpoint, then pass the returned one-time
+     * `code` (and the exact `redirectUri` used) here — the server exchanges it (with the app's
+     * client secret) and verifies the id_token. Mirrors {@link googleCodeLogin}: on success the
+     * bearer token is stored and the cache invalidated.
+     *
+     * Notable error codes (thrown as `SmartlinksApiError`, read via `err.errorCode`):
+     * - `MISSING_LINKEDIN_CODE` (400), `LINKEDIN_AUTH_NOT_CONFIGURED` (400),
+     *   `INVALID_LINKEDIN_TOKEN` (400), `LINKEDIN_AUTH_FAILED` (500)
+     * - `ACCOUNT_EXISTS_UNVERIFIED` (409) — same shared verified-to-verified linking policy as
+     *   {@link googleLogin}/{@link appleLogin}.
+     *
+     * Gated by step-up MFA — see {@link login} for the `MFA_REQUIRED` error shape.
+     */
+    function linkedInLogin(clientId: string, code: string, redirectUri: string, trustedDeviceToken?: string): Promise<AuthLoginResponse>;
     /**
      * Sign in with Apple via an Apple identity token (public).
      *

package/dist/api/authKit.js

@@ -83,6 +83,32 @@ export var authKit;
         return res;
     }
     authKit.googleCodeLogin = googleCodeLogin;
+    /**
+     * Sign in with LinkedIn (OpenID Connect) via a server-side authorization code (public).
+     *
+     * LinkedIn has no client-side ID-token SDK, so this is always the authorization-code flow:
+     * redirect the browser to LinkedIn's authorize endpoint, then pass the returned one-time
+     * `code` (and the exact `redirectUri` used) here — the server exchanges it (with the app's
+     * client secret) and verifies the id_token. Mirrors {@link googleCodeLogin}: on success the
+     * bearer token is stored and the cache invalidated.
+     *
+     * Notable error codes (thrown as `SmartlinksApiError`, read via `err.errorCode`):
+     * - `MISSING_LINKEDIN_CODE` (400), `LINKEDIN_AUTH_NOT_CONFIGURED` (400),
+     *   `INVALID_LINKEDIN_TOKEN` (400), `LINKEDIN_AUTH_FAILED` (500)
+     * - `ACCOUNT_EXISTS_UNVERIFIED` (409) — same shared verified-to-verified linking policy as
+     *   {@link googleLogin}/{@link appleLogin}.
+     *
+     * Gated by step-up MFA — see {@link login} for the `MFA_REQUIRED` error shape.
+     */
+    async function linkedInLogin(clientId, code, redirectUri, trustedDeviceToken) {
+        const res = await post(`/authkit/${encodeURIComponent(clientId)}/auth/linkedin`, { code, redirectUri, trustedDeviceToken });
+        if (res.token) {
+            setBearerToken(res.token);
+            invalidateCache();
+        }
+        return res;
+    }
+    authKit.linkedInLogin = linkedInLogin;
     /**
      * Sign in with Apple via an Apple identity token (public).
      *

package/dist/docs/API_SUMMARY.md

@@ -1,6 +1,6 @@
 # Smartlinks API Summary
 
-Version: 2.0.0-alpha.5  |  Generated: 2026-09-14T19:49:23.024Z
+Version: 2.0.1  |  Generated: 2026-09-16T05:23:18.331Z
 
 This is a concise summary of all available API functions and types.
 
@@ -9353,6 +9353,9 @@ Google OAuth login via ID token (public). Gated by step-up MFA — see {@link lo
 **googleCodeLogin**(clientId: string, code: string, redirectUri: string) → `Promise<AuthLoginResponse>`
 Google OAuth login via server-side authorization code (public).
 
+**linkedInLogin**(clientId: string, code: string, redirectUri: string, trustedDeviceToken?: string) → `Promise<AuthLoginResponse>`
+Sign in with LinkedIn (OpenID Connect) via a server-side authorization code (public). LinkedIn has no client-side ID-token SDK, so this is always the authorization-code flow: redirect the browser to LinkedIn's authorize endpoint, then pass the returned one-time `code` (and the exact `redirectUri` used) here — the server exchanges it (with the app's client secret) and verifies the id_token. Mirrors {@link googleCodeLogin}: on success the bearer token is stored and the cache invalidated. Notable error codes (thrown as `SmartlinksApiError`, read via `err.errorCode`): - `MISSING_LINKEDIN_CODE` (400), `LINKEDIN_AUTH_NOT_CONFIGURED` (400), `INVALID_LINKEDIN_TOKEN` (400), `LINKEDIN_AUTH_FAILED` (500) - `ACCOUNT_EXISTS_UNVERIFIED` (409) — same shared verified-to-verified linking policy as {@link googleLogin}/{@link appleLogin}. Gated by step-up MFA — see {@link login} for the `MFA_REQUIRED` error shape.
+
 **appleLogin**(clientId: string, identityToken: string, opts?: AppleLoginOptions) → `Promise<AuthLoginResponse>`
 Sign in with Apple via an Apple identity token (public). Mirrors {@link googleLogin}. On success the returned bearer token is stored automatically and the cache is invalidated. Notable error codes (thrown as `SmartlinksApiError`, read via `err.errorCode`): - `MISSING_APPLE_TOKEN` (400), `APPLE_AUTH_NOT_CONFIGURED` (400), `INVALID_APPLE_TOKEN` (401), `APPLE_AUTH_FAILED` (500) - `ACCOUNT_EXISTS_UNVERIFIED` (409) — an unverified account already owns this email; the server refuses to silently link. `err.details.requiresEmailVerification` is `true`. Recoverable: the user should sign in with their password (or reset it), then link Apple from settings. **The same 409 can now come back from {@link googleLogin}** under the shared verified-to-verified linking policy. Gated by step-up MFA — see {@link login} for the `MFA_REQUIRED` error shape. Pass `opts.trustedDeviceToken` to skip the challenge on a recognized device.
 

package/dist/http.d.ts

@@ -1,3 +1,10 @@
+type Logger = {
+    debug?: (...args: any[]) => void;
+    info?: (...args: any[]) => void;
+    warn?: (...args: any[]) => void;
+    error?: (...args: any[]) => void;
+    log?: (...args: any[]) => void;
+} | ((...args: any[]) => void);
 /** Snapshot of cache counters + current keys. Call from the console via `window.__slHttpDiag()`. */
 export declare function getHttpCacheDiagnostics(): {
     size: number;
@@ -18,13 +25,6 @@ export declare function getHttpCacheDiagnostics(): {
 };
 /** Reset the diagnostics counters (does not touch the cache itself). */
 export declare function resetHttpCacheDiagnostics(): void;
-type Logger = {
-    debug?: (...args: any[]) => void;
-    info?: (...args: any[]) => void;
-    warn?: (...args: any[]) => void;
-    error?: (...args: any[]) => void;
-    log?: (...args: any[]) => void;
-} | ((...args: any[]) => void);
 /** Return whether proxy mode is currently enabled. */
 export declare function isProxyEnabled(): boolean;
 export declare function initializeApi(options: {

package/dist/http.js

@@ -79,6 +79,7 @@ const TOKEN_STORAGE_KEY = 'sl:token';
 let cachePersistenceTtlMs = 7 * 24 * 60 * 60000;
 /** When true (default), serve stale L2 data via SmartlinksOfflineError on network failure. */
 let cacheServeStaleOnOffline = true;
+let logger;
 const httpCacheStats = {
     l1Hits: 0, inflightDedups: 0, l2Hits: 0, networkFetches: 0, skips: 0,
     clears: 0, lastClearReason: null, lastClearAt: 0,
@@ -278,7 +279,6 @@ function isNetworkError(err) {
     // fetch() throws TypeError on network failure; SmartlinksApiError is not a TypeError
     return err instanceof TypeError;
 }
-let logger;
 function logDebug(...args) {
     if (!logger)
         return;

package/dist/openapi.yaml

@@ -8842,6 +8842,32 @@ paths:
           description: Unauthorized
         404:
           description: Not found
+  /authkit/{clientId}/auth/linkedin:
+    post:
+      tags:
+        - authKit
+      summary: authKit.linkedInLogin
+      operationId: authKit_linkedInLogin
+      security: []
+      parameters:
+        - name: clientId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/AuthLoginResponse"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
   /authkit/{clientId}/auth/login:
     post:
       tags:

package/docs/API_SUMMARY.md

@@ -1,6 +1,6 @@
 # Smartlinks API Summary
 
-Version: 2.0.0-alpha.5  |  Generated: 2026-09-14T19:49:23.024Z
+Version: 2.0.1  |  Generated: 2026-09-16T05:23:18.331Z
 
 This is a concise summary of all available API functions and types.
 
@@ -9353,6 +9353,9 @@ Google OAuth login via ID token (public). Gated by step-up MFA — see {@link lo
 **googleCodeLogin**(clientId: string, code: string, redirectUri: string) → `Promise<AuthLoginResponse>`
 Google OAuth login via server-side authorization code (public).
 
+**linkedInLogin**(clientId: string, code: string, redirectUri: string, trustedDeviceToken?: string) → `Promise<AuthLoginResponse>`
+Sign in with LinkedIn (OpenID Connect) via a server-side authorization code (public). LinkedIn has no client-side ID-token SDK, so this is always the authorization-code flow: redirect the browser to LinkedIn's authorize endpoint, then pass the returned one-time `code` (and the exact `redirectUri` used) here — the server exchanges it (with the app's client secret) and verifies the id_token. Mirrors {@link googleCodeLogin}: on success the bearer token is stored and the cache invalidated. Notable error codes (thrown as `SmartlinksApiError`, read via `err.errorCode`): - `MISSING_LINKEDIN_CODE` (400), `LINKEDIN_AUTH_NOT_CONFIGURED` (400), `INVALID_LINKEDIN_TOKEN` (400), `LINKEDIN_AUTH_FAILED` (500) - `ACCOUNT_EXISTS_UNVERIFIED` (409) — same shared verified-to-verified linking policy as {@link googleLogin}/{@link appleLogin}. Gated by step-up MFA — see {@link login} for the `MFA_REQUIRED` error shape.
+
 **appleLogin**(clientId: string, identityToken: string, opts?: AppleLoginOptions) → `Promise<AuthLoginResponse>`
 Sign in with Apple via an Apple identity token (public). Mirrors {@link googleLogin}. On success the returned bearer token is stored automatically and the cache is invalidated. Notable error codes (thrown as `SmartlinksApiError`, read via `err.errorCode`): - `MISSING_APPLE_TOKEN` (400), `APPLE_AUTH_NOT_CONFIGURED` (400), `INVALID_APPLE_TOKEN` (401), `APPLE_AUTH_FAILED` (500) - `ACCOUNT_EXISTS_UNVERIFIED` (409) — an unverified account already owns this email; the server refuses to silently link. `err.details.requiresEmailVerification` is `true`. Recoverable: the user should sign in with their password (or reset it), then link Apple from settings. **The same 409 can now come back from {@link googleLogin}** under the shared verified-to-verified linking policy. Gated by step-up MFA — see {@link login} for the `MFA_REQUIRED` error shape. Pass `opts.trustedDeviceToken` to skip the challenge on a recognized device.
 

package/openapi.yaml

@@ -8842,6 +8842,32 @@ paths:
           description: Unauthorized
         404:
           description: Not found
+  /authkit/{clientId}/auth/linkedin:
+    post:
+      tags:
+        - authKit
+      summary: authKit.linkedInLogin
+      operationId: authKit_linkedInLogin
+      security: []
+      parameters:
+        - name: clientId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/AuthLoginResponse"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
   /authkit/{clientId}/auth/login:
     post:
       tags:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proveanything/smartlinks",
-  "version": "2.0.0-alpha.5",
+  "version": "2.0.1",
   "description": "Official JavaScript/TypeScript SDK for the Smartlinks API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",