@palbase/web 1.7.0 → 1.8.0

package/dist/next/index.d.cts

@@ -1,6 +1,6 @@
 import { NextRequest, NextResponse } from 'next/server';
-import { P as PB } from '../pb-D4HyUbpb.cjs';
-import '../analytics-facade-9GPSKnVG.cjs';
+import { P as PB } from '../pb-BwQwp411.cjs';
+import '../analytics-facade-DfJ420F5.cjs';
 import 'livekit-client';
 import '../storage-BPaeSG8K.cjs';
 import './pooled-flags-Bwq4usn0.js';

package/dist/next/index.d.ts

@@ -1,6 +1,6 @@
 import { NextRequest, NextResponse } from 'next/server';
-import { P as PB } from '../pb-BvfCJZux.js';
-import '../analytics-facade-CQJ3b-zB.js';
+import { P as PB } from '../pb-C1v9ErPy.js';
+import '../analytics-facade-CgURkjpP.js';
 import 'livekit-client';
 import '../storage-BPaeSG8K.js';
 import './pooled-flags-Bwq4usn0.js';

package/dist/next/index.js

@@ -13,7 +13,7 @@ import {
   createBoundClient,
   endpointRefFromApiKey,
   getRuntime
-} from "../chunk-QRO632M7.js";
+} from "../chunk-AWVNDAMG.js";
 
 // src/next/shared.ts
 function requireGlobalConfig(hint) {

package/dist/{pb-D4HyUbpb.d.cts → pb-BwQwp411.d.cts}

@@ -1,4 +1,4 @@
-import { t as PalbeAuth, w as PalbeFlags, z as PalbeRealtime, P as PalbeAnalytics, u as PalbeCalls, x as PalbeMessaging, T as PalbeRuntime } from './analytics-facade-9GPSKnVG.cjs';
+import { t as PalbeAuth, w as PalbeFlags, z as PalbeRealtime, P as PalbeAnalytics, u as PalbeCalls, x as PalbeMessaging, W as PalbePerf, T as PalbeRuntime } from './analytics-facade-DfJ420F5.cjs';
 
 interface CallOptions {
     headers?: Record<string, string>;
@@ -42,6 +42,14 @@ interface PB {
     readonly analytics: PalbeAnalytics;
     readonly calls: PalbeCalls;
     readonly messaging: PalbeMessaging;
+    /** The PalPerf surface: custom traces (`startTrace`) + the buffered flush of
+     * network/app-start/custom items. `pb.perf.record(...)` is also how the
+     * runtime feeds the cold-start measurement in. */
+    readonly perf: PalbePerf;
+    /** Mark (or unmark) this client's traffic as test — flips the facade's flag
+     * so every subsequent perf flush carries `X-Palbase-Test-Device: 1` (the
+     * SAME header the iOS SDK sends; the server reads it → `is_test_traffic`). */
+    setTestDevice(on: boolean): void;
 }
 declare const pb: PB;
 /**

package/dist/{pb-BvfCJZux.d.ts → pb-C1v9ErPy.d.ts}

@@ -1,4 +1,4 @@
-import { t as PalbeAuth, w as PalbeFlags, z as PalbeRealtime, P as PalbeAnalytics, u as PalbeCalls, x as PalbeMessaging, T as PalbeRuntime } from './analytics-facade-CQJ3b-zB.js';
+import { t as PalbeAuth, w as PalbeFlags, z as PalbeRealtime, P as PalbeAnalytics, u as PalbeCalls, x as PalbeMessaging, W as PalbePerf, T as PalbeRuntime } from './analytics-facade-CgURkjpP.js';
 
 interface CallOptions {
     headers?: Record<string, string>;
@@ -42,6 +42,14 @@ interface PB {
     readonly analytics: PalbeAnalytics;
     readonly calls: PalbeCalls;
     readonly messaging: PalbeMessaging;
+    /** The PalPerf surface: custom traces (`startTrace`) + the buffered flush of
+     * network/app-start/custom items. `pb.perf.record(...)` is also how the
+     * runtime feeds the cold-start measurement in. */
+    readonly perf: PalbePerf;
+    /** Mark (or unmark) this client's traffic as test — flips the facade's flag
+     * so every subsequent perf flush carries `X-Palbase-Test-Device: 1` (the
+     * SAME header the iOS SDK sends; the server reads it → `is_test_traffic`). */
+    setTestDevice(on: boolean): void;
 }
 declare const pb: PB;
 /**

package/dist/react/index.cjs

@@ -152,14 +152,47 @@ function unwrap(res) {
   return res.data;
 }
 
+// src/perf/url-redactor.ts
+var ID_SEGMENT = /^(?:\d+|[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$/;
+var EMAIL_SEGMENT = /(?:@|%40)/i;
+function isSensitiveSegment(seg) {
+  return ID_SEGMENT.test(seg) || EMAIL_SEGMENT.test(seg);
+}
+function redactUrl(rawUrl) {
+  let path = rawUrl;
+  try {
+    path = new URL(rawUrl).pathname;
+  } catch {
+    const q = path.indexOf("?");
+    if (q >= 0) path = path.slice(0, q);
+  }
+  return path.split("/").map((seg) => isSensitiveSegment(seg) ? ":id" : seg).join("/");
+}
+
 // src/request.ts
 var MUTATING = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH", "DELETE"]);
+var PERF_EXCLUDED_PREFIX = "/v1/analytics/";
+function isSelfTraced(path) {
+  return path.startsWith(PERF_EXCLUDED_PREFIX);
+}
+function nowMs() {
+  return typeof performance !== "undefined" && typeof performance.now === "function" ? performance.now() : Date.now();
+}
+function isAbort(e) {
+  return e instanceof Error && e.name === "AbortError";
+}
 async function palbeRequest(rt, method, path, spec = {}) {
   const headers = { ...spec.headers };
   const callerHasKey = Object.keys(headers).some((k) => k.toLowerCase() === "idempotency-key");
   if (MUTATING.has(method) && !callerHasKey) {
     headers["Idempotency-Key"] = crypto.randomUUID();
   }
+  if (rt.appIdentifier !== "") {
+    const callerHasBundle = Object.keys(headers).some(
+      (k) => k.toLowerCase() === "x-palbase-bundle"
+    );
+    if (!callerHasBundle) headers["X-Palbase-Bundle"] = rt.appIdentifier;
+  }
   const attempt = async () => {
     try {
       return await rt.http.request(method, path, {
@@ -172,21 +205,38 @@ async function palbeRequest(rt, method, path, spec = {}) {
       throw pe ? fromPalbaseError(pe) : e;
     }
   };
-  let res = await attempt();
-  if (res.error?.status === 401 && rt.tokenManager.getRefreshToken() && rt.tokenManager.refreshFunction) {
-    try {
-      await rt.tokenManager.refreshSession();
-    } catch (refreshErr) {
-      const pe = asPalbaseError(refreshErr);
-      const status = pe?.status ?? 0;
-      if (status === 400 || status === 401 || status === 403) {
-        rt.tokenManager.clearSession();
-        throw fromPalbaseError(res.error);
+  const traced = !isSelfTraced(path) && rt.perf !== void 0;
+  const startedAt = traced ? nowMs() : 0;
+  let recorded = false;
+  const record = (status) => {
+    if (!traced || recorded) return;
+    recorded = true;
+    rt.perf.recordNetwork(method, redactUrl(path), status, nowMs() - startedAt);
+  };
+  let res;
+  try {
+    res = await attempt();
+    if (res.error?.status === 401 && rt.tokenManager.getRefreshToken() && rt.tokenManager.refreshFunction) {
+      try {
+        await rt.tokenManager.refreshSession();
+      } catch (refreshErr) {
+        const pe = asPalbaseError(refreshErr);
+        const status = pe?.status ?? 0;
+        if (status === 400 || status === 401 || status === 403) {
+          rt.tokenManager.clearSession();
+          record(res.error.status);
+          throw fromPalbaseError(res.error);
+        }
+        record(pe?.status ?? 0);
+        throw pe ? fromPalbaseError(pe) : refreshErr;
       }
-      throw pe ? fromPalbaseError(pe) : refreshErr;
+      res = await attempt();
     }
-    res = await attempt();
+  } catch (e) {
+    if (!isAbort(e)) record(asPalbaseError(e)?.status ?? 0);
+    throw e;
   }
+  record(res.error?.status ?? 200);
   return unwrap(res);
 }
 
@@ -297,7 +347,7 @@ function getNamespace(name) {
 }
 
 // src/version.ts
-var VERSION = "1.7.0";
+var VERSION = "1.8.0";
 
 // src/call.ts
 async function callEndpoint(resolveRt, name, input, options) {
@@ -476,6 +526,12 @@ function createClientProxy(resolveRt, nsAccessor) {
     },
     get messaging() {
       return resolveRt().messaging;
+    },
+    get perf() {
+      return resolveRt().perf;
+    },
+    setTestDevice(on) {
+      resolveRt().perf.setTestDevice(on);
     }
   };
   return new Proxy(base, {