lemma-sdk 0.2.22 → 0.2.23

package/dist/auth.d.ts

@@ -109,6 +109,7 @@ export declare class AuthManager {
      * This helps recover when signout/session-expiry paths leave local markers behind.
      */
     private clearFrontendSessionMarkers;
+    private applyUnauthenticatedState;
     private clearInjectedToken;
     private rawSignOutViaBackend;
     /**

package/dist/auth.js

@@ -278,6 +278,12 @@ export class AuthManager {
             }
         }
     }
+    applyUnauthenticatedState() {
+        this.clearFrontendSessionMarkers();
+        const next = { status: "unauthenticated", user: null };
+        this.setState(next);
+        return next;
+    }
     clearInjectedToken() {
         this.injectedToken = null;
         clearTestingToken();
@@ -386,16 +392,11 @@ export class AuthManager {
             const response = await fetch(`${this.apiUrl}/users/me`, this.getRequestInit({ method: "GET" }));
             // Only 401 means not authenticated — 403 means authenticated but forbidden
             if (response.status === 401) {
-                this.clearFrontendSessionMarkers();
-                const next = { status: "unauthenticated", user: null };
-                this.setState(next);
-                return next;
+                return this.applyUnauthenticatedState();
             }
             if (!response.ok) {
                 // For non-401 errors on /users/me, treat as unauthenticated (conservative)
-                const next = { status: "unauthenticated", user: null };
-                this.setState(next);
-                return next;
+                return this.applyUnauthenticatedState();
             }
             const user = (await response.json());
             const next = { status: "authenticated", user };
@@ -403,9 +404,7 @@ export class AuthManager {
             return next;
         }
         catch {
-            const next = { status: "unauthenticated", user: null };
-            this.setState(next);
-            return next;
+            return this.applyUnauthenticatedState();
         }
     }
     /**
@@ -413,8 +412,7 @@ export class AuthManager {
      * Does NOT redirect — call redirectToAuth() explicitly if desired.
      */
     markUnauthenticated() {
-        this.clearFrontendSessionMarkers();
-        this.setState({ status: "unauthenticated", user: null });
+        this.applyUnauthenticatedState();
     }
     /**
      * Sign out the current user session.
@@ -442,6 +440,9 @@ export class AuthManager {
                 // best effort fallback only
             }
         }
+        // Always clear frontend markers on logout attempt, even if backend session
+        // cleanup is partial. This avoids stale local "EXISTS" signals.
+        this.clearFrontendSessionMarkers();
         const isAuthenticated = await this.isAuthenticatedViaCookie();
         if (!isAuthenticated) {
             this.markUnauthenticated();

package/dist/browser/lemma-client.js

@@ -461,6 +461,12 @@ class AuthManager {
             }
         }
     }
+    applyUnauthenticatedState() {
+        this.clearFrontendSessionMarkers();
+        const next = { status: "unauthenticated", user: null };
+        this.setState(next);
+        return next;
+    }
     clearInjectedToken() {
         this.injectedToken = null;
         clearTestingToken();
@@ -569,16 +575,11 @@ class AuthManager {
             const response = await fetch(`${this.apiUrl}/users/me`, this.getRequestInit({ method: "GET" }));
             // Only 401 means not authenticated — 403 means authenticated but forbidden
             if (response.status === 401) {
-                this.clearFrontendSessionMarkers();
-                const next = { status: "unauthenticated", user: null };
-                this.setState(next);
-                return next;
+                return this.applyUnauthenticatedState();
             }
             if (!response.ok) {
                 // For non-401 errors on /users/me, treat as unauthenticated (conservative)
-                const next = { status: "unauthenticated", user: null };
-                this.setState(next);
-                return next;
+                return this.applyUnauthenticatedState();
             }
             const user = (await response.json());
             const next = { status: "authenticated", user };
@@ -586,9 +587,7 @@ class AuthManager {
             return next;
         }
         catch {
-            const next = { status: "unauthenticated", user: null };
-            this.setState(next);
-            return next;
+            return this.applyUnauthenticatedState();
         }
     }
     /**
@@ -596,8 +595,7 @@ class AuthManager {
      * Does NOT redirect — call redirectToAuth() explicitly if desired.
      */
     markUnauthenticated() {
-        this.clearFrontendSessionMarkers();
-        this.setState({ status: "unauthenticated", user: null });
+        this.applyUnauthenticatedState();
     }
     /**
      * Sign out the current user session.
@@ -625,6 +623,9 @@ class AuthManager {
                 // best effort fallback only
             }
         }
+        // Always clear frontend markers on logout attempt, even if backend session
+        // cleanup is partial. This avoids stale local "EXISTS" signals.
+        this.clearFrontendSessionMarkers();
         const isAuthenticated = await this.isAuthenticatedViaCookie();
         if (!isAuthenticated) {
             this.markUnauthenticated();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lemma-sdk",
-  "version": "0.2.22",
+  "version": "0.2.23",
   "description": "Official TypeScript SDK for Lemma pod-scoped APIs",
   "type": "module",
   "main": "dist/index.js",