@arbidocs/client 0.5.76 → 0.5.78

package/dist/index.cjs

@@ -1525,6 +1525,88 @@ function createAutoReloginMiddleware(config) {
   };
 }
 
+// src/middleware/request-dedup.ts
+function authTokenOf(input, init) {
+  if (input instanceof Request) {
+    const fromRequest = input.headers.get("authorization");
+    if (fromRequest) return fromRequest;
+  }
+  if (init?.headers) {
+    return new Headers(init.headers).get("authorization") ?? "";
+  }
+  return "";
+}
+function createDedupFetch(originalFetch) {
+  const inFlightRequests = /* @__PURE__ */ new Map();
+  return function dedupFetch(input, init) {
+    const method = (init?.method ?? (input instanceof Request ? input.method : "GET")).toUpperCase();
+    if (method !== "GET") {
+      return originalFetch(input, init);
+    }
+    const url = input instanceof Request ? input.url : String(input);
+    const key = `GET:${url}\0${authTokenOf(input, init)}`;
+    const existing = inFlightRequests.get(key);
+    if (existing) {
+      return existing.then((r) => r.clone());
+    }
+    const promise = originalFetch(input, init).finally(() => {
+      inFlightRequests.delete(key);
+    });
+    inFlightRequests.set(key, promise);
+    return promise.then((r) => r.clone());
+  };
+}
+
+// src/middleware/settings-write-breaker.ts
+var WINDOW_MS = 6e4;
+var MAX_WRITES_PER_WINDOW = 30;
+var SETTINGS_WRITE_BREAKER_CODE = "CLIENT_SETTINGS_WRITE_BREAKER";
+function isSettingsWrite(input, init) {
+  const method = (input instanceof Request ? input.method : init?.method ?? "GET").toUpperCase();
+  if (method !== "PATCH") return false;
+  const url = input instanceof Request ? input.url : String(input);
+  try {
+    const base = typeof location !== "undefined" ? location.origin : "http://localhost";
+    return new URL(url, base).pathname.endsWith("/v1/user/settings");
+  } catch {
+    return false;
+  }
+}
+function breakerResponse() {
+  return new Response(
+    JSON.stringify({
+      detail: {
+        code: SETTINGS_WRITE_BREAKER_CODE,
+        message: "Too many settings updates from this tab \u2014 write dropped by the client circuit breaker."
+      }
+    }),
+    { status: 429, headers: { "Content-Type": "application/json" } }
+  );
+}
+function createSettingsWriteBreakerFetch(originalFetch) {
+  let acceptedAt = [];
+  let trippedThisEpisode = false;
+  return function settingsWriteBreakerFetch(input, init) {
+    if (!isSettingsWrite(input, init)) {
+      return originalFetch(input, init);
+    }
+    const now = Date.now();
+    acceptedAt = acceptedAt.filter((t) => now - t < WINDOW_MS);
+    if (acceptedAt.length >= MAX_WRITES_PER_WINDOW) {
+      if (!trippedThisEpisode) {
+        trippedThisEpisode = true;
+        console.error(
+          `[settings-write-breaker] over ${MAX_WRITES_PER_WINDOW} PATCH /v1/user/settings in ${WINDOW_MS / 1e3}s \u2014 dropping further writes. This indicates a client-side write loop.`
+        );
+      }
+      return Promise.resolve(breakerResponse());
+    }
+    trippedThisEpisode = false;
+    acceptedAt.push(now);
+    return originalFetch(input, init);
+  };
+}
+
 // src/relogin/handler.ts
 var RELOGIN_COOLDOWN_MS = 5e3;
 function createReloginHandler(deps) {
@@ -2065,11 +2147,12 @@ function createTransport(options) {
   const baseUrlOption = options.baseUrl;
   const base = typeof baseUrlOption === "function" ? baseUrlOption : () => baseUrlOption;
   const transport = createHttpTransport(options.transport);
-  const retryFetch = createRetryFetch(transport.fetch);
+  const guardedFetch = createSettingsWriteBreakerFetch(createDedupFetch(transport.fetch));
+  const retryFetch = createRetryFetch(guardedFetch);
   const gate = createSessionGate();
   const sessionFetch = gatedFetch(gate, retryFetch);
   const http = {
-    fetch: gatedFetch(gate, transport.fetch),
+    fetch: gatedFetch(gate, guardedFetch),
     customFetch: transport.customFetch,
     withFetch: (adapter) => gatedFetch(gate, transport.withFetch(adapter))
   };
@@ -2437,6 +2520,7 @@ exports.CHAT_KEY_BYTES = CHAT_KEY_BYTES;
 exports.ENCRYPTED_RECOVERY_KEY_SIZE = ENCRYPTED_RECOVERY_KEY_SIZE;
 exports.RECOVERY_KEY_ERRORS = RECOVERY_KEY_ERRORS;
 exports.SECURE_MAIL_KEY_BYTES = SECURE_MAIL_KEY_BYTES;
+exports.SETTINGS_WRITE_BREAKER_CODE = SETTINGS_WRITE_BREAKER_CODE;
 exports.UNENCRYPTED_RECOVERY_KEY_SIZE = UNENCRYPTED_RECOVERY_KEY_SIZE;
 exports.authRequestError = authRequestError;
 exports.base64Decode = base64Decode;