chore: make installed package smaller

Author: akosidencio

CHANGELOG.md

@@ -3,6 +3,21 @@
 All notable changes to this project are documented here. This project follows
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 1.0.1 — 2026-08-13
+
+Packaging only. No source, API or behaviour changes — upgrading from 1.0.0 is
+safe and requires nothing.
+
+### Changed
+
+- **The installed package is about 40% smaller.** Sourcemaps no longer inline the
+  original TypeScript via `sourcesContent`, which had made them roughly 62% of
+  the unpacked size. Stack traces still resolve to the original file and line;
+  only stepping through source needs the repository, which is public.
+- **The UMD build no longer ships a sourcemap.** It is the minified `<script>`
+  bundle for CDN use and its map was the single largest file in the package. The
+  ESM and CJS builds that real projects import still ship theirs.
+
 ## 1.0.0 — 2026-08-13
 
 First stable release, and a rewrite. The 0.1.x line kept the JWT in a

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkgrid/react-starter-auth",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Secure JWT authentication for React and Next.js — HttpOnly server sessions, verified tokens, CSRF built in.",
   "keywords": [
     "react",

rollup.config.mjs

@@ -36,6 +36,15 @@ const licenseBanner = license({
   },
 });
 
+/**
+ * Sourcemaps without the embedded original source.
+ *
+ * `sourcesContent` inlines every `.ts` file into the maps, which made them ~62%
+ * of the installed package. Stack traces still resolve to the original file and
+ * line; only the "view source" step needs the repository, which is public.
+ */
+const sourcemapExcludeSources = true;
+
 export default [
   // ESM + CJS. Declarations are emitted here only, from tsconfig.build.json,
   // which excludes __tests__ so test typings stay out of the tarball.
@@ -46,13 +55,15 @@ export default [
         dir: './dist',
         format: 'esm',
         sourcemap: true,
+        sourcemapExcludeSources,
         entryFileNames: '[name].mjs',
         chunkFileNames: 'shared/[name]-[hash].mjs',
       },
       {
         dir: './dist',
         format: 'cjs',
         sourcemap: true,
+        sourcemapExcludeSources,
         exports: 'named',
         entryFileNames: '[name].cjs',
         chunkFileNames: 'shared/[name]-[hash].cjs',
@@ -75,7 +86,10 @@ export default [
         file: './dist/index.umd.js',
         format: 'umd',
         name: 'ReactStarterAuth',
-        sourcemap: true,
+        // No map for the UMD build: it is the minified <script> bundle for CDN
+        // use, and its map was the single largest file in the package. The ESM
+        // and CJS builds that real projects import still ship theirs.
+        sourcemap: false,
         exports: 'named',
         globals,
       },