@palbase/web 1.10.0 → 2.0.1

package/dist/internal.d.cts

@@ -1,10 +1,10 @@
-import { P as PalbeConfig, d as PalbeRuntime } from './analytics-facade-B7vujhPJ.cjs';
-export { e as buildRuntime } from './analytics-facade-B7vujhPJ.cjs';
+import { P as PalbeConfig, d as PalbeRuntime } from './analytics-facade-ChlBRcLZ.cjs';
+export { e as buildRuntime } from './analytics-facade-ChlBRcLZ.cjs';
 import { B as BackendError } from './errors-fDoNdTrJ.cjs';
-export { P as PB, c as createBoundClient } from './pb-6965XULp.cjs';
+export { P as PB, c as createBoundClient } from './pb-B_6o5p79.cjs';
 import 'livekit-client';
 import './storage-BPaeSG8K.cjs';
-import './pooled-flags-Bwq4usn0.js';
+import './pooled-flags-4GtDtsiu.js';
 
 interface EndpointDescriptor {
     method: string;

package/dist/internal.d.ts

@@ -1,10 +1,10 @@
-import { P as PalbeConfig, d as PalbeRuntime } from './analytics-facade-CHh5EGC2.js';
-export { e as buildRuntime } from './analytics-facade-CHh5EGC2.js';
+import { P as PalbeConfig, d as PalbeRuntime } from './analytics-facade-G0il4NrT.js';
+export { e as buildRuntime } from './analytics-facade-G0il4NrT.js';
 import { B as BackendError } from './errors-fDoNdTrJ.js';
-export { P as PB, c as createBoundClient } from './pb-ChNq987M.js';
+export { P as PB, c as createBoundClient } from './pb-nPBhqhJr.js';
 import 'livekit-client';
 import './storage-BPaeSG8K.js';
-import './pooled-flags-Bwq4usn0.js';
+import './pooled-flags-4GtDtsiu.js';
 
 interface EndpointDescriptor {
     method: string;

package/dist/internal.js

@@ -6,7 +6,7 @@ import {
   createBoundClient,
   getRuntime,
   onConfigured
-} from "./chunk-4ZJHHXD3.js";
+} from "./chunk-AIPUO4QX.js";
 import "./chunk-PZ5AY32C.js";
 export {
   __configure,

package/dist/next/client.cjs

@@ -443,12 +443,6 @@ async function palbeRequest(rt, method, path, spec = {}) {
   if (MUTATING.has(method) && !callerHasKey) {
     headers["Idempotency-Key"] = crypto.randomUUID();
   }
-  if (rt.appIdentifier !== "") {
-    const callerHasBundle = Object.keys(headers).some(
-      (k) => k.toLowerCase() === "x-palbase-bundle"
-    );
-    if (!callerHasBundle) headers["X-Palbase-Bundle"] = rt.appIdentifier;
-  }
   const attempt = async () => {
     try {
       return await rt.http.request(method, path, {
@@ -1237,23 +1231,6 @@ var PalbeAnalytics = class {
   }
 };
 
-// src/app-config.ts
-function loadAppConfig(raw) {
-  if (typeof raw !== "object" || raw === null) {
-    throw new Error("app_config_invalid: expected a JSON object");
-  }
-  const r = raw;
-  const str = (k) => typeof r[k] === "string" ? r[k] : "";
-  return { appId: str("app_id"), identifier: str("identifier"), envPreset: str("env_preset") };
-}
-function assertOriginMatches(cfg, runtimeOrigin) {
-  if (cfg.identifier === "") return;
-  if (runtimeOrigin === "") return;
-  if (runtimeOrigin !== cfg.identifier) {
-    throw new Error(`app_config_mismatch: expected origin ${cfg.identifier}, got ${runtimeOrigin}`);
-  }
-}
-
 // src/auth-wire.ts
 function asWireAuthResult(raw) {
   if (typeof raw !== "object" || raw === null) return null;
@@ -1815,6 +1792,19 @@ var PalbeCalls = class {
 
 // ../modules/flags/dist/index.js
 var FLAG_NAME_RE = /^[a-zA-Z0-9_-]+$/;
+function flagEnabled(value) {
+  if (typeof value === "boolean") return value;
+  return value != null && value !== 0 && value !== "";
+}
+function flagVariant(value) {
+  return typeof value === "string" ? { name: value } : null;
+}
+function mapResponse(res, fn) {
+  if (res.error || res.data == null) {
+    return { ...res, data: null };
+  }
+  return { ...res, data: fn(res.data) };
+}
 var FlagsClient = class {
   httpClient;
   getCurrentUserId;
@@ -1834,10 +1824,11 @@ var FlagsClient = class {
         `Invalid flag name: "${flagName}". Flag names must match ${FLAG_NAME_RE.source}`
       );
     }
-    const params = this.buildContextParams(context);
-    const query = params.toString();
-    const path = `/v1/flags/${flagName}/enabled${query ? `?${query}` : ""}`;
-    return this.httpClient.request("GET", path);
+    const res = await this.httpClient.request(
+      "GET",
+      this.mergedPath(context)
+    );
+    return mapResponse(res, (snap) => flagEnabled(snap.values?.[flagName]));
   }
   async getVariant(flagName, context) {
     if (!FLAG_NAME_RE.test(flagName)) {
@@ -1845,16 +1836,29 @@ var FlagsClient = class {
         `Invalid flag name: "${flagName}". Flag names must match ${FLAG_NAME_RE.source}`
       );
     }
-    const params = this.buildContextParams(context);
-    const query = params.toString();
-    const path = `/v1/flags/${flagName}/variant${query ? `?${query}` : ""}`;
-    return this.httpClient.request("GET", path);
+    const res = await this.httpClient.request(
+      "GET",
+      this.mergedPath(context)
+    );
+    if (res.error || res.data == null) {
+      return { ...res, data: null };
+    }
+    return { ...res, data: flagVariant(res.data.values?.[flagName]) };
   }
   async getAll(context) {
-    const params = this.buildContextParams(context);
-    const query = params.toString();
-    const path = `/v1/flags${query ? `?${query}` : ""}`;
-    return this.httpClient.request("GET", path);
+    const res = await this.httpClient.request(
+      "GET",
+      this.mergedPath(context)
+    );
+    return mapResponse(res, (snap) => {
+      const values = snap.values ?? {};
+      return Object.keys(values).map((name) => {
+        const value = values[name];
+        const flag = { name, enabled: flagEnabled(value) };
+        if (typeof value === "string") flag.variant = { name: value };
+        return flag;
+      });
+    });
   }
   /**
    * Cold-start read: the full merged flag set for the current auth identity.
@@ -1953,15 +1957,16 @@ var FlagsClient = class {
       }
     };
   }
-  buildContextParams(context) {
-    const params = new URLSearchParams();
-    if (context?.userId) {
-      params.set("userId", context.userId);
-    }
-    if (context?.properties) {
-      params.set("properties", JSON.stringify(context.properties));
-    }
-    return params;
+  /**
+   * Resolve the merged-read path for a context. With `context.userId` present the
+   * read targets that specific user's merged view (`/v1/user-flags/users/{id}`, a
+   * privileged cross-user read); otherwise the current auth user's view
+   * (`/v1/user-flags`). `context.properties` has no server-side targeting support
+   * in the user-flags module and is ignored.
+   */
+  mergedPath(context) {
+    const uid = context?.userId;
+    return uid ? `/v1/user-flags/users/${encodeURIComponent(uid)}` : "/v1/user-flags";
   }
 };
 var DEFAULT_POLL_MS = 3e4;
@@ -2423,7 +2428,7 @@ var PalbeFlags = class {
    *
    * DEVIATION from iOS sync-cache parity: the platform does not propagate
    * variant metadata into the user-flags snapshot/delta cache, so this is an
-   * ASYNC transport read (`GET /v1/flags/{key}/variant`), not a cache lookup.
+   * ASYNC transport read (derived from `GET /v1/user-flags`), not a cache lookup.
    */
   async getVariant(key) {
     let res;
@@ -8063,6 +8068,14 @@ function observeWebVitals(record) {
   };
 }
 
+// src/runtime-metadata.ts
+var APP_METADATA_HEADER = "X-Palbase-Bundle";
+function applyBrowserOriginHeader(headers) {
+  if (Object.keys(headers).some((key) => key.toLowerCase() === "x-palbase-bundle")) return;
+  const origin = typeof window !== "undefined" && typeof window.location !== "undefined" ? window.location.origin : "";
+  if (origin !== "") headers[APP_METADATA_HEADER] = origin;
+}
+
 // src/realtime/anon-token.ts
 var REFRESH_SKEW_MS = 6e4;
 var AnonTokenProvider = class {
@@ -8105,11 +8118,16 @@ var AnonTokenProvider = class {
    */
   async mint() {
     const base = this.rt.config.url.replace(/\/+$/, "");
+    const headers = {
+      apikey: this.rt.config.apiKey,
+      ...this.rt.config.headers
+    };
+    applyBrowserOriginHeader(headers);
     let response;
     try {
       response = await fetch(`${base}/auth/anonymous`, {
         method: "POST",
-        headers: { apikey: this.rt.config.apiKey }
+        headers
       });
     } catch (e) {
       throw new BackendError("network", {
@@ -8750,17 +8768,15 @@ function defaultSessionStorage(key) {
 }
 
 // src/version.ts
-var VERSION = "1.10.0";
+var VERSION = "2.0.1";
 
 // src/runtime.ts
 function buildRuntime(config) {
-  const appIdentifier = config.identifier ?? "";
-  const runtimeOrigin = typeof window !== "undefined" && typeof window.location !== "undefined" ? window.location.origin : "";
-  assertOriginMatches(loadAppConfig({ identifier: appIdentifier }), runtimeOrigin);
   const http = new HttpClient(config.apiKey, {
     url: config.url,
     headers: { "X-Client-Info": `palbe-web/${VERSION}`, ...config.headers }
   });
+  http.addInterceptor(({ headers }) => applyBrowserOriginHeader(headers));
   const tokenManager = new TokenManager();
   http.tokenManager = tokenManager;
   const authClient = new AuthClient(http, tokenManager);
@@ -8809,7 +8825,6 @@ function buildRuntime(config) {
   let perf;
   const rt = {
     config,
-    appIdentifier,
     http,
     tokenManager,
     authClient,