@hexclave/shared 1.0.41 → 1.0.43

package/dist/interface/client-interface.js

@@ -1,5 +1,4 @@
-Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_chunk = require('../chunk-BE-pF4vm.js');
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let ___utils_errors_js = require("../utils/errors.js");
 let ___utils_objects_js = require("../utils/objects.js");
 let ___utils_strings_js = require("../utils/strings.js");
@@ -12,7 +11,6 @@ let ___utils_crypto_js = require("../utils/crypto.js");
 let ___utils_globals_js = require("../utils/globals.js");
 let ___utils_http_js = require("../utils/http.js");
 let ___utils_promises_js = require("../utils/promises.js");
-
 //#region ../../node_modules/.pnpm/oauth4webapi@3.8.5/node_modules/oauth4webapi/build/index.js
 let USER_AGENT;
 if (typeof navigator === "undefined" || !navigator.userAgent?.startsWith?.("Mozilla/5.0 ")) USER_AGENT = `oauth4webapi/v3.8.5`;
@@ -261,14 +259,10 @@ var WWWAuthenticateChallengeError = class extends Error {
 		Error.captureStackTrace?.(this, this.constructor);
 	}
 };
-const tokenMatch = "[a-zA-Z0-9!#$%&\\'\\*\\+\\-\\.\\^_`\\|~]+";
-const token68Match = "[a-zA-Z0-9\\-\\._\\~\\+\\/]+={0,2}";
-const quotedParamMatcher = "(" + tokenMatch + ")\\s*=\\s*\"((?:[^\"\\\\]|\\\\[\\s\\S])*)\"";
-const paramMatcher = "(" + tokenMatch + ")\\s*=\\s*([a-zA-Z0-9!#$%&\\'\\*\\+\\-\\.\\^_`\\|~]+)";
-const schemeRE = new RegExp("^[,\\s]*(" + tokenMatch + ")");
-const quotedParamRE = new RegExp("^[,\\s]*" + quotedParamMatcher + "[,\\s]*(.*)");
-const unquotedParamRE = new RegExp("^[,\\s]*" + paramMatcher + "[,\\s]*(.*)");
-const token68ParamRE = new RegExp("^(" + token68Match + ")(?:$|[,\\s])(.*)");
+const schemeRE = /* @__PURE__ */ new RegExp("^[,\\s]*([a-zA-Z0-9!#$%&\\'\\*\\+\\-\\.\\^_`\\|~]+)");
+const quotedParamRE = /* @__PURE__ */ new RegExp("^[,\\s]*([a-zA-Z0-9!#$%&\\'\\*\\+\\-\\.\\^_`\\|~]+)\\s*=\\s*\"((?:[^\"\\\\]|\\\\[\\s\\S])*)\"[,\\s]*(.*)");
+const unquotedParamRE = /* @__PURE__ */ new RegExp("^[,\\s]*([a-zA-Z0-9!#$%&\\'\\*\\+\\-\\.\\^_`\\|~]+)\\s*=\\s*([a-zA-Z0-9!#$%&\\'\\*\\+\\-\\.\\^_`\\|~]+)[,\\s]*(.*)");
+const token68ParamRE = /* @__PURE__ */ new RegExp("^([a-zA-Z0-9\\-\\._\\~\\+\\/]+={0,2})(?:$|[,\\s])(.*)");
 function parseWwwAuthenticateChallenges(response) {
 	if (!looseInstanceOf(response, Response)) throw CodedTypeError("\"response\" must be an instance of Response", ERR_INVALID_ARG_TYPE);
 	const header = response.headers.get("www-authenticate");
@@ -753,7 +747,6 @@ async function getResponseJsonBody(response, check = assertApplicationJson) {
 	return json;
 }
 const _expectedIssuer = Symbol();
-
 //#endregion
 //#region src/interface/client-interface.ts
 const botChallengeKnownErrors = [___known_errors_js.KnownErrors.BotChallengeRequired, ___known_errors_js.KnownErrors.BotChallengeFailed];
@@ -783,7 +776,7 @@ function getBotChallengeRequestFields(botChallenge, context) {
 		bot_challenge_phase: "invisible"
 	};
 }
-async function encodeAnalyticsBody(jsonBody, options) {
+async function encodeGzipJsonBody(jsonBody, options) {
 	if (options.keepalive) return {
 		body: jsonBody,
 		contentType: "application/json"
@@ -1070,10 +1063,11 @@ var HexclaveClientInterface = class {
 	}
 	async sendSessionReplayBatch(body, session, options) {
 		try {
+			const encoded = await encodeGzipJsonBody(body, { keepalive: options.keepalive });
 			const response = await this.sendClientRequest("/session-replays/batch", {
 				method: "POST",
-				headers: { "Content-Type": "application/json" },
-				body,
+				headers: { "Content-Type": encoded.contentType },
+				body: encoded.body,
 				keepalive: options.keepalive
 			}, session, "client", this.getAnalyticsApiUrl(), {
 				maxAttempts: 1,
@@ -1086,7 +1080,7 @@ var HexclaveClientInterface = class {
 	}
 	async sendAnalyticsEventBatch(body, session, options) {
 		try {
-			const encoded = await encodeAnalyticsBody(body, { keepalive: options.keepalive });
+			const encoded = await encodeGzipJsonBody(body, { keepalive: options.keepalive });
 			const response = await this.sendClientRequest("/analytics/events/batch", {
 				method: "POST",
 				headers: { "Content-Type": encoded.contentType },
@@ -1136,6 +1130,16 @@ var HexclaveClientInterface = class {
 		let url = (apiUrlOverride ?? this.getApiUrl()) + path;
 		if (url.endsWith("/")) url = url.slice(0, -1);
 		const params = {
+			/**
+			* This fetch may be cross-origin, in which case we don't want to send cookies of the
+			* original origin (this is the default behavior of `credentials`).
+			*
+			* To help debugging, also omit cookies on same-origin, so we don't accidentally
+			* implement reliance on cookies anywhere.
+			*
+			* However, Cloudflare Workers don't actually support `credentials`, so we only set it
+			* if Cloudflare-exclusive globals are not detected. https://github.com/cloudflare/workers-sdk/issues/2514
+			*/
 			..."WebSocketPair" in ___utils_globals_js.globalVar ? {} : { credentials: "omit" },
 			...options,
 			headers: {
@@ -1148,11 +1152,22 @@ var HexclaveClientInterface = class {
 				"X-Hexclave-Allow-Anonymous-User": "true",
 				..."publishableClientKey" in this.options && this.options.publishableClientKey ? { "X-Hexclave-Publishable-Client-Key": this.options.publishableClientKey } : {},
 				...adminTokenObj ? { "X-Hexclave-Admin-Access-Token": adminTokenObj.accessToken.token } : {},
+				/**
+				* Next.js until v15 would cache fetch requests by default, and forcefully disabling it was nearly impossible.
+				*
+				* This header is used to change the cache key and hence always disable it, because we do our own caching.
+				*
+				* When we drop support for Next.js <15, we may be able to remove this header, but please make sure that this is
+				* the case (I haven't actually tested.)
+				*/
 				"X-Hexclave-Random-Nonce": (0, ___utils_crypto_js.generateSecureRandomString)(),
 				"ngrok-skip-browser-warning": "true",
 				...this.options.extraRequestHeaders,
 				...options.headers
 			},
+			/**
+			* Cloudflare Workers does not support cache, so don't pass it there
+			*/
 			..."WebSocketPair" in ___utils_globals_js.globalVar ? {} : { cache: "no-store" }
 		};
 		const startTime = performance.now();
@@ -1942,7 +1957,7 @@ var HexclaveClientInterface = class {
 		}, internalProjectSession);
 	}
 };
-
 //#endregion
 exports.HexclaveClientInterface = HexclaveClientInterface;
+
 //# sourceMappingURL=client-interface.js.map