@spacelr/sdk 0.9.0 → 0.9.2

package/dist/index.d.mts

@@ -372,12 +372,13 @@ type AuthLostListener = (reason: AuthLostReason) => void;
 declare class TokenManager {
     private storage;
     private refreshBufferSeconds;
+    private refreshLockName;
     private refreshCallback;
     private refreshPromise;
     private tokenRefreshedListeners;
     private authLostListeners;
     private authLostEmitted;
-    constructor(storage?: TokenStorage, refreshBufferSeconds?: number);
+    constructor(storage?: TokenStorage, refreshBufferSeconds?: number, refreshLockName?: string);
     setRefreshCallback(callback: RefreshCallback): void;
     getAccessToken(): Promise<string | null>;
     setTokens(tokens: StoredTokens): Promise<void>;
@@ -398,6 +399,9 @@ declare class TokenManager {
     private shouldRefresh;
     private tryRefresh;
     private executeRefresh;
+    private doRefresh;
+    private safeGetTokens;
+    private withCrossTabLock;
     private emitTokenRefreshed;
 }
 
@@ -1702,6 +1706,14 @@ interface SpacelrClient {
     setTokens(tokens: StoredTokens): Promise<void>;
     /** Clear stored tokens and reset auth-loss state. */
     clearTokens(): Promise<void>;
+    /**
+     * Whether a session (a stored token set) currently exists in the configured
+     * TokenStorage. Use this to distinguish "genuinely logged out" from
+     * "maybe-restorable" without reading the storage backend directly — so it
+     * works with any TokenStorage (memory, IndexedDB, …), not just the default
+     * localStorage one.
+     */
+    hasStoredSession(): Promise<boolean>;
     /** Disconnect realtime WebSocket (if connected) */
     disconnect(): void;
     /**

package/dist/index.d.ts

@@ -372,12 +372,13 @@ type AuthLostListener = (reason: AuthLostReason) => void;
 declare class TokenManager {
     private storage;
     private refreshBufferSeconds;
+    private refreshLockName;
     private refreshCallback;
     private refreshPromise;
     private tokenRefreshedListeners;
     private authLostListeners;
     private authLostEmitted;
-    constructor(storage?: TokenStorage, refreshBufferSeconds?: number);
+    constructor(storage?: TokenStorage, refreshBufferSeconds?: number, refreshLockName?: string);
     setRefreshCallback(callback: RefreshCallback): void;
     getAccessToken(): Promise<string | null>;
     setTokens(tokens: StoredTokens): Promise<void>;
@@ -398,6 +399,9 @@ declare class TokenManager {
     private shouldRefresh;
     private tryRefresh;
     private executeRefresh;
+    private doRefresh;
+    private safeGetTokens;
+    private withCrossTabLock;
     private emitTokenRefreshed;
 }
 
@@ -1702,6 +1706,14 @@ interface SpacelrClient {
     setTokens(tokens: StoredTokens): Promise<void>;
     /** Clear stored tokens and reset auth-loss state. */
     clearTokens(): Promise<void>;
+    /**
+     * Whether a session (a stored token set) currently exists in the configured
+     * TokenStorage. Use this to distinguish "genuinely logged out" from
+     * "maybe-restorable" without reading the storage backend directly — so it
+     * works with any TokenStorage (memory, IndexedDB, …), not just the default
+     * localStorage one.
+     */
+    hasStoredSession(): Promise<boolean>;
     /** Disconnect realtime WebSocket (if connected) */
     disconnect(): void;
     /**

package/dist/index.js

@@ -428,7 +428,7 @@ var BrowserTokenStorage = class {
 
 // libs/sdk/src/core/token-manager.ts
 var TokenManager = class {
-  constructor(storage, refreshBufferSeconds = 60) {
+  constructor(storage, refreshBufferSeconds = 60, refreshLockName = "spacelr_token_refresh") {
     this.refreshCallback = null;
     this.refreshPromise = null;
     this.tokenRefreshedListeners = /* @__PURE__ */ new Set();
@@ -439,6 +439,7 @@ var TokenManager = class {
     this.authLostEmitted = false;
     this.storage = storage ?? new MemoryTokenStorage();
     this.refreshBufferSeconds = refreshBufferSeconds;
+    this.refreshLockName = refreshLockName;
   }
   setRefreshCallback(callback) {
     this.refreshCallback = callback;
@@ -468,7 +469,7 @@ var TokenManager = class {
     this.authLostEmitted = false;
   }
   async getStoredTokens() {
-    return this.storage.getTokens();
+    return this.safeGetTokens();
   }
   /**
    * Force a refresh using the current stored refresh token.
@@ -535,9 +536,18 @@ var TokenManager = class {
     }
   }
   async executeRefresh(refreshToken) {
+    return this.withCrossTabLock(() => this.doRefresh(refreshToken));
+  }
+  async doRefresh(refreshToken) {
     const callback = this.refreshCallback;
+    const current = await this.safeGetTokens();
+    if (current && current.refreshToken && current.refreshToken !== refreshToken && !this.isTokenExpired(current)) {
+      this.emitTokenRefreshed(current);
+      return current;
+    }
+    const activeRefreshToken = current?.refreshToken || refreshToken;
     try {
-      const newTokens = await callback(refreshToken);
+      const newTokens = await callback(activeRefreshToken);
       await this.storage.setTokens(newTokens);
       this.emitTokenRefreshed(newTokens);
       return newTokens;
@@ -546,6 +556,22 @@ var TokenManager = class {
       throw error;
     }
   }
+  async safeGetTokens() {
+    try {
+      return await this.storage.getTokens();
+    } catch {
+      return null;
+    }
+  }
+  withCrossTabLock(fn) {
+    const locks = typeof navigator !== "undefined" ? navigator.locks : void 0;
+    if (!locks) return fn();
+    try {
+      return locks.request(this.refreshLockName, fn);
+    } catch {
+      return fn();
+    }
+  }
   emitTokenRefreshed(tokens) {
     for (const listener of this.tokenRefreshedListeners) {
       try {
@@ -1304,6 +1330,16 @@ function localStorageCursorStorage(prefix = "spacelr:cursor:") {
 }
 
 // libs/sdk/src/modules/auth.module.ts
+function mapProfile(u) {
+  const name = u.name ?? ([u.firstName, u.lastName].filter(Boolean).join(" ") || void 0) ?? u.displayName;
+  return {
+    id: u.id ?? u._id ?? u.userId ?? u.sub ?? "",
+    email: u.email ?? "",
+    username: u.username,
+    name,
+    roles: u.roles ?? []
+  };
+}
 var AuthModule = class {
   constructor(http, tokenManager, config) {
     this.stateListeners = /* @__PURE__ */ new Set();
@@ -1427,11 +1463,12 @@ var AuthModule = class {
     });
   }
   async getProfile() {
-    return this.http.request({
+    const data = await this.http.request({
       method: "GET",
       path: "/auth/me",
       authenticated: true
     });
+    return mapProfile(data.user ?? data);
   }
   async logout() {
     try {
@@ -3063,7 +3100,8 @@ function createClient(config) {
   const tokenStorage = config.tokenStorage ?? (typeof window !== "undefined" && typeof window.localStorage !== "undefined" ? new BrowserTokenStorage() : new MemoryTokenStorage());
   const tokenManager = new TokenManager(
     tokenStorage,
-    config.refreshBufferSeconds ?? 60
+    config.refreshBufferSeconds ?? 60,
+    `spacelr_token_refresh:${config.projectId}`
   );
   const httpClient = new HttpClient(config, tokenManager);
   const realtime = new RealtimeClient({
@@ -3090,6 +3128,9 @@ function createClient(config) {
     clearTokens() {
       return tokenManager.clearTokens();
     },
+    hasStoredSession() {
+      return tokenManager.getStoredTokens().then((tokens) => !!tokens);
+    },
     disconnect() {
       realtime.disconnect();
     },