@arbidocs/client 0.5.76 → 0.5.78

package/dist/index.js

@@ -1518,6 +1518,88 @@ function createAutoReloginMiddleware(config) {
   };
 }
 
+// src/middleware/request-dedup.ts
+function authTokenOf(input, init) {
+  if (input instanceof Request) {
+    const fromRequest = input.headers.get("authorization");
+    if (fromRequest) return fromRequest;
+  }
+  if (init?.headers) {
+    return new Headers(init.headers).get("authorization") ?? "";
+  }
+  return "";
+}
+function createDedupFetch(originalFetch) {
+  const inFlightRequests = /* @__PURE__ */ new Map();
+  return function dedupFetch(input, init) {
+    const method = (init?.method ?? (input instanceof Request ? input.method : "GET")).toUpperCase();
+    if (method !== "GET") {
+      return originalFetch(input, init);
+    }
+    const url = input instanceof Request ? input.url : String(input);
+    const key = `GET:${url}\0${authTokenOf(input, init)}`;
+    const existing = inFlightRequests.get(key);
+    if (existing) {
+      return existing.then((r) => r.clone());
+    }
+    const promise = originalFetch(input, init).finally(() => {
+      inFlightRequests.delete(key);
+    });
+    inFlightRequests.set(key, promise);
+    return promise.then((r) => r.clone());
+  };
+}
+
+// src/middleware/settings-write-breaker.ts
+var WINDOW_MS = 6e4;
+var MAX_WRITES_PER_WINDOW = 30;
+var SETTINGS_WRITE_BREAKER_CODE = "CLIENT_SETTINGS_WRITE_BREAKER";
+function isSettingsWrite(input, init) {
+  const method = (input instanceof Request ? input.method : init?.method ?? "GET").toUpperCase();
+  if (method !== "PATCH") return false;
+  const url = input instanceof Request ? input.url : String(input);
+  try {
+    const base = typeof location !== "undefined" ? location.origin : "http://localhost";
+    return new URL(url, base).pathname.endsWith("/v1/user/settings");
+  } catch {
+    return false;
+  }
+}
+function breakerResponse() {
+  return new Response(
+    JSON.stringify({
+      detail: {
+        code: SETTINGS_WRITE_BREAKER_CODE,
+        message: "Too many settings updates from this tab \u2014 write dropped by the client circuit breaker."
+      }
+    }),
+    { status: 429, headers: { "Content-Type": "application/json" } }
+  );
+}
+function createSettingsWriteBreakerFetch(originalFetch) {
+  let acceptedAt = [];
+  let trippedThisEpisode = false;
+  return function settingsWriteBreakerFetch(input, init) {
+    if (!isSettingsWrite(input, init)) {
+      return originalFetch(input, init);
+    }
+    const now = Date.now();
+    acceptedAt = acceptedAt.filter((t) => now - t < WINDOW_MS);
+    if (acceptedAt.length >= MAX_WRITES_PER_WINDOW) {
+      if (!trippedThisEpisode) {
+        trippedThisEpisode = true;
+        console.error(
+          `[settings-write-breaker] over ${MAX_WRITES_PER_WINDOW} PATCH /v1/user/settings in ${WINDOW_MS / 1e3}s \u2014 dropping further writes. This indicates a client-side write loop.`
+        );
+      }
+      return Promise.resolve(breakerResponse());
+    }
+    trippedThisEpisode = false;
+    acceptedAt.push(now);
+    return originalFetch(input, init);
+  };
+}
+
 // src/relogin/handler.ts
 var RELOGIN_COOLDOWN_MS = 5e3;
 function createReloginHandler(deps) {
@@ -2058,11 +2140,12 @@ function createTransport(options) {
   const baseUrlOption = options.baseUrl;
   const base = typeof baseUrlOption === "function" ? baseUrlOption : () => baseUrlOption;
   const transport = createHttpTransport(options.transport);
-  const retryFetch = createRetryFetch(transport.fetch);
+  const guardedFetch = createSettingsWriteBreakerFetch(createDedupFetch(transport.fetch));
+  const retryFetch = createRetryFetch(guardedFetch);
   const gate = createSessionGate();
   const sessionFetch = gatedFetch(gate, retryFetch);
   const http = {
-    fetch: gatedFetch(gate, transport.fetch),
+    fetch: gatedFetch(gate, guardedFetch),
     customFetch: transport.customFetch,
     withFetch: (adapter) => gatedFetch(gate, transport.withFetch(adapter))
   };
@@ -2423,6 +2506,6 @@ var logger = {
   }
 };
 
-export { ACCESS_TOKEN_STORAGE_KEY, API_PREFIX, CALL_KEY_BYTES, CHAT_KEY_BYTES, ENCRYPTED_RECOVERY_KEY_SIZE, RECOVERY_KEY_ERRORS, SECURE_MAIL_KEY_BYTES, UNENCRYPTED_RECOVERY_KEY_SIZE, authRequestError, base64Decode, base64Encode, base64ToBytes, base64UrlToBytes, browserSessionStateStorage, buildCallFragment, buildCallLink, buildWebSocketUrl, bytesToBase64, bytesToBase64Url, canPersistSession, changePassword, clearAllData, clearSession, computeSharedSecret, configureLogger, createAllWorkspacesOpener, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createHttpTransport, createMemorySessionPersistence, createOfflineSealer, createRecoveryFile, createRecoveryUrl, createReloginHandler, createSessionManager, createWorkspaceKeys, createWorkspaceOpens, createWorkspaceReopener, decodeCallKey, decodeSecureMailKey, decryptCallTitle, decryptFile, decryptMessage, decryptMessageWithSharedSecret, decryptRecoveryKey, decryptWithChatKey, deriveDirectChatKey, deriveEncryptionKeypairFromSigning, derivePublicKey, disconnectSso, encodeCallKey, encryptCallTitle, encryptFile, encryptMessage, encryptMessageWithSharedSecret, encryptRecoveryKey, encryptWithChatKey, encryptionKeypairFromSigningKey, generateCallKey, generateChatKey, generateIdentityKeypair, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRegistrationCredentials, generateUserKeypairs, getRecoveryKeyFilename, getSession, getUserEncryptionKeypair, hasSession, identityFromLoginResponse, initSodium, initializeDatabase, isAbortError, isEncryptedRecoveryKey, isMessageType, logger, openCallKeyOf, openSealedCallKey, openSealedChatKey, openSecureMail, parseCallFragment, parseRecoveryUrl, parseServerMessage, passwordChangeErrorMessage, prewarmKeyPairs, readSessionClaims, requestSsoDisconnectCode, saveSession, sealCallKey, sealCallKeyForPeers, sealChatKey, sealKeyForSession, sealSecureMail, sealedBoxDecrypt, sealedBoxEncrypt, secureMailClaim, signMessage, unlockIdentityWithPassword, unwrapIdentityKey, unwrapWorkspaceKey, updateWrappedIdentityKey, validateRecoveryKeyFile, workspaceKeyRequiredOf, wrapIdentityKey };
+export { ACCESS_TOKEN_STORAGE_KEY, API_PREFIX, CALL_KEY_BYTES, CHAT_KEY_BYTES, ENCRYPTED_RECOVERY_KEY_SIZE, RECOVERY_KEY_ERRORS, SECURE_MAIL_KEY_BYTES, SETTINGS_WRITE_BREAKER_CODE, UNENCRYPTED_RECOVERY_KEY_SIZE, authRequestError, base64Decode, base64Encode, base64ToBytes, base64UrlToBytes, browserSessionStateStorage, buildCallFragment, buildCallLink, buildWebSocketUrl, bytesToBase64, bytesToBase64Url, canPersistSession, changePassword, clearAllData, clearSession, computeSharedSecret, configureLogger, createAllWorkspacesOpener, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createHttpTransport, createMemorySessionPersistence, createOfflineSealer, createRecoveryFile, createRecoveryUrl, createReloginHandler, createSessionManager, createWorkspaceKeys, createWorkspaceOpens, createWorkspaceReopener, decodeCallKey, decodeSecureMailKey, decryptCallTitle, decryptFile, decryptMessage, decryptMessageWithSharedSecret, decryptRecoveryKey, decryptWithChatKey, deriveDirectChatKey, deriveEncryptionKeypairFromSigning, derivePublicKey, disconnectSso, encodeCallKey, encryptCallTitle, encryptFile, encryptMessage, encryptMessageWithSharedSecret, encryptRecoveryKey, encryptWithChatKey, encryptionKeypairFromSigningKey, generateCallKey, generateChatKey, generateIdentityKeypair, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRegistrationCredentials, generateUserKeypairs, getRecoveryKeyFilename, getSession, getUserEncryptionKeypair, hasSession, identityFromLoginResponse, initSodium, initializeDatabase, isAbortError, isEncryptedRecoveryKey, isMessageType, logger, openCallKeyOf, openSealedCallKey, openSealedChatKey, openSecureMail, parseCallFragment, parseRecoveryUrl, parseServerMessage, passwordChangeErrorMessage, prewarmKeyPairs, readSessionClaims, requestSsoDisconnectCode, saveSession, sealCallKey, sealCallKeyForPeers, sealChatKey, sealKeyForSession, sealSecureMail, sealedBoxDecrypt, sealedBoxEncrypt, secureMailClaim, signMessage, unlockIdentityWithPassword, unwrapIdentityKey, unwrapWorkspaceKey, updateWrappedIdentityKey, validateRecoveryKeyFile, workspaceKeyRequiredOf, wrapIdentityKey };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map