@palbase/web 2.0.1 → 4.0.0

package/dist/index.d.cts

@@ -1,9 +1,8 @@
-export { f as AnalyticsProperties, g as AuthChangeEvent, h as AuthState, i as AuthSuccess, A as AuthUser, j as Call, k as CallChangeCallback, l as CallParticipant, m as CallState, C as Chat, n as ChatBackend, o as ChatDraft, p as ChatKind, b as ChatMember, c as ChatMessage, q as ChatMessageKind, r as ChatRole, s as ChatState, t as CommsPrefs, F as FlagsView, M as MagicLinkResult, u as MentionRange, v as MessageDirection, N as NotifyScope, O as OAuthExchangeResult, w as PalbeAnalytics, x as PalbeAuth, y as PalbeCalls, P as PalbeConfig, z as PalbeFlags, B as PalbeMessaging, D as PalbeOAuthConfig, E as PalbeRealtime, G as PresenceState, H as RealtimeChannel, R as RealtimeConnectionState, I as RealtimeHandler, a as RealtimePayload, J as RealtimeStatus, K as RealtimeStatusSnapshot, L as RealtimeSubscription, Q as ResolvedMention, S as ResolvedReply, T as SentReceipt, U as UnreadView, V as Unsubscribe } from './analytics-facade-ChlBRcLZ.cjs';
+export { f as AnalyticsProperties, g as AuthChangeEvent, h as AuthState, i as AuthSuccess, A as AuthUser, j as Call, k as CallChangeCallback, l as CallParticipant, m as CallState, C as Chat, n as ChatBackend, o as ChatDraft, p as ChatKind, b as ChatMember, c as ChatMessage, q as ChatMessageKind, r as ChatRole, s as ChatState, t as CommsPrefs, F as FlagsView, M as MagicLinkResult, u as MentionRange, v as MessageDirection, N as NotifyScope, O as OAuthExchangeResult, w as PalbeAnalytics, x as PalbeAuth, y as PalbeCalls, P as PalbeConfig, z as PalbeFlags, B as PalbeMessaging, D as PalbeOAuthConfig, E as PalbeRealtime, G as PresenceState, H as RealtimeChannel, R as RealtimeConnectionState, I as RealtimeHandler, a as RealtimePayload, J as RealtimeStatus, K as RealtimeStatusSnapshot, L as RealtimeSubscription, Q as ResolvedMention, S as ResolvedReply, T as SentReceipt, U as UnreadView, V as Unsubscribe } from './analytics-facade-DwOtlXPP.cjs';
 export { B as BackendError, a as BackendErrorKind, F as FieldError, i as isBackendError } from './errors-fDoNdTrJ.cjs';
-export { C as CallOptions, P as PB, U as UploadOptions, a as UploadProgress, p as pb } from './pb-B_6o5p79.cjs';
+export { C as CallOptions, P as PB, U as UploadOptions, a as UploadProgress, p as pb } from './pb-C9v5dEO6.cjs';
 export { P as PersistedSession, S as SessionStorageAdapter, l as localStorageSessionStorage, m as memorySessionStorage } from './storage-BPaeSG8K.cjs';
 export { F as FlagValue } from './pooled-flags-4GtDtsiu.js';
-import 'livekit-client';
 
 /* tslint:disable */
 /* eslint-disable */
@@ -207,6 +206,6 @@ interface MlsGlue {
  */
 declare function initMls(): Promise<MlsGlue>;
 
-declare const VERSION = "2.0.1";
+declare const VERSION = "4.0.0";
 
 export { VERSION, initMls };

package/dist/index.d.ts

@@ -1,9 +1,8 @@
-export { f as AnalyticsProperties, g as AuthChangeEvent, h as AuthState, i as AuthSuccess, A as AuthUser, j as Call, k as CallChangeCallback, l as CallParticipant, m as CallState, C as Chat, n as ChatBackend, o as ChatDraft, p as ChatKind, b as ChatMember, c as ChatMessage, q as ChatMessageKind, r as ChatRole, s as ChatState, t as CommsPrefs, F as FlagsView, M as MagicLinkResult, u as MentionRange, v as MessageDirection, N as NotifyScope, O as OAuthExchangeResult, w as PalbeAnalytics, x as PalbeAuth, y as PalbeCalls, P as PalbeConfig, z as PalbeFlags, B as PalbeMessaging, D as PalbeOAuthConfig, E as PalbeRealtime, G as PresenceState, H as RealtimeChannel, R as RealtimeConnectionState, I as RealtimeHandler, a as RealtimePayload, J as RealtimeStatus, K as RealtimeStatusSnapshot, L as RealtimeSubscription, Q as ResolvedMention, S as ResolvedReply, T as SentReceipt, U as UnreadView, V as Unsubscribe } from './analytics-facade-G0il4NrT.js';
+export { f as AnalyticsProperties, g as AuthChangeEvent, h as AuthState, i as AuthSuccess, A as AuthUser, j as Call, k as CallChangeCallback, l as CallParticipant, m as CallState, C as Chat, n as ChatBackend, o as ChatDraft, p as ChatKind, b as ChatMember, c as ChatMessage, q as ChatMessageKind, r as ChatRole, s as ChatState, t as CommsPrefs, F as FlagsView, M as MagicLinkResult, u as MentionRange, v as MessageDirection, N as NotifyScope, O as OAuthExchangeResult, w as PalbeAnalytics, x as PalbeAuth, y as PalbeCalls, P as PalbeConfig, z as PalbeFlags, B as PalbeMessaging, D as PalbeOAuthConfig, E as PalbeRealtime, G as PresenceState, H as RealtimeChannel, R as RealtimeConnectionState, I as RealtimeHandler, a as RealtimePayload, J as RealtimeStatus, K as RealtimeStatusSnapshot, L as RealtimeSubscription, Q as ResolvedMention, S as ResolvedReply, T as SentReceipt, U as UnreadView, V as Unsubscribe } from './analytics-facade-Nk6J9Ncm.js';
 export { B as BackendError, a as BackendErrorKind, F as FieldError, i as isBackendError } from './errors-fDoNdTrJ.js';
-export { C as CallOptions, P as PB, U as UploadOptions, a as UploadProgress, p as pb } from './pb-nPBhqhJr.js';
+export { C as CallOptions, P as PB, U as UploadOptions, a as UploadProgress, p as pb } from './pb-FG_nV7NR.js';
 export { P as PersistedSession, S as SessionStorageAdapter, l as localStorageSessionStorage, m as memorySessionStorage } from './storage-BPaeSG8K.js';
 export { F as FlagValue } from './pooled-flags-4GtDtsiu.js';
-import 'livekit-client';
 
 /* tslint:disable */
 /* eslint-disable */
@@ -207,6 +206,6 @@ interface MlsGlue {
  */
 declare function initMls(): Promise<MlsGlue>;
 
-declare const VERSION = "2.0.1";
+declare const VERSION = "4.0.0";
 
 export { VERSION, initMls };

package/dist/index.js

@@ -13,8 +13,8 @@ import {
   localStorageSessionStorage,
   memorySessionStorage,
   pb
-} from "./chunk-AIPUO4QX.js";
-import "./chunk-PZ5AY32C.js";
+} from "./chunk-NP4NIY7A.js";
+import "./chunk-S7NAY3MW.js";
 export {
   BackendError,
   PalbeAnalytics,

package/dist/internal.cjs

@@ -45,18 +45,9 @@ var PalbaseError = class extends Error {
   }
 };
 var PALBASE_DEFAULT_HOST = "api.palbase.studio";
-var REF_LEN = 8;
-var BASE62_RE = /^[0-9A-Za-z]+$/;
-function parseProjectRef(apiKey) {
-  if (apiKey.length < 13) return null;
-  if (!apiKey.startsWith("pb_")) return null;
-  if (apiKey[11] !== "_") return null;
-  const ref = apiKey.slice(3, 11);
-  if (ref.length !== REF_LEN) return null;
-  if (!BASE62_RE.test(ref)) return null;
-  const scope = apiKey[12];
-  if (scope !== "c") return null;
-  return ref;
+var API_KEY_RE = /^pb_([a-z0-9]+)_c[A-Za-z0-9]{20}$/;
+function parseEnvironmentRef(apiKey) {
+  return API_KEY_RE.exec(apiKey)?.[1] ?? null;
 }
 var MAX_RETRIES = 3;
 var INITIAL_BACKOFF_MS = 200;
@@ -86,8 +77,7 @@ var HttpClient = class _HttpClient {
    * with the parent at runtime — later changes on the parent propagate to
    * the scope and vice versa.
    *
-   * Typical use: tagging admin calls with `x-palbase-project: <ref>` so the
-   * gateway can route them to the correct project's data plane.
+   * Typical use: adding an Environment-routing header for an admin call.
    */
   withHeaders(extra) {
     const mergedHeaders = { ...this.options?.headers ?? {}, ...extra };
@@ -128,10 +118,10 @@ var HttpClient = class _HttpClient {
     if (this.options?.url) {
       return this.options.url;
     }
-    if (this.apiKey && parseProjectRef(this.apiKey) === null) {
+    if (this.apiKey && parseEnvironmentRef(this.apiKey) === null) {
       throw new PalbaseError(
         "invalid_api_key",
-        'Invalid API key format. Expected pb_{ref}_{scope}{random}. For dev/staging pass `url: "https://api.dev.palbase.studio"` via options.',
+        'Invalid API key format. Expected pb_{environment_ref}_c{20_base62_chars}. For dev/staging pass `url: "https://api.dev.palbase.studio"` via options.',
         0
       );
     }
@@ -144,10 +134,6 @@ var HttpClient = class _HttpClient {
     const effectiveKey = this.apiKey;
     if (effectiveKey) {
       headers["apikey"] = effectiveKey;
-      const ref = parseProjectRef(effectiveKey);
-      if (ref) {
-        headers["X-Project-Ref"] = ref;
-      }
     }
     const token = this.tokenManager?.getAccessToken();
     if (token) {
@@ -1153,13 +1139,6 @@ var AuthClient = class {
   }
 };
 
-// src/api-key.ts
-var API_KEY_RE = /^pb_([^_]+)_[cs][A-Za-z0-9]{20}$/;
-function endpointRefFromApiKey(apiKey) {
-  const m = API_KEY_RE.exec(apiKey);
-  return m ? m[1] ?? "" : "";
-}
-
 // src/analytics-facade.ts
 var EVENT_NAME_RE = /^[a-zA-Z$][a-zA-Z0-9_.:$-]{0,63}$/;
 var FLUSH_AT = 20;
@@ -1217,7 +1196,7 @@ var AnalyticsState = class {
   idKey;
   optOutKey;
   constructor(rt) {
-    const ref = endpointRefFromApiKey(rt.config.apiKey);
+    const ref = rt.config.environmentRef;
     this.idKey = ref ? `palbe.analytics.id.${ref}` : "palbe.analytics.id";
     this.optOutKey = ref ? `palbe.analytics.optout.${ref}` : "palbe.analytics.optout";
     rt.auth.onAuthEvent((event) => {
@@ -1431,6 +1410,13 @@ var PalbeAnalytics = class {
   }
 };
 
+// src/api-key.ts
+var PUBLISHABLE_API_KEY_RE = /^pb_([a-z0-9]+)_c[A-Za-z0-9]{20}$/;
+function environmentRefFromPublishableApiKey(apiKey) {
+  const match = PUBLISHABLE_API_KEY_RE.exec(apiKey);
+  return match ? match[1] ?? "" : "";
+}
+
 // src/auth-wire.ts
 function asWireAuthResult(raw) {
   if (typeof raw !== "object" || raw === null) return null;
@@ -1778,19 +1764,29 @@ var PalbeAuth = class {
 
 // src/calls/facade.ts
 var import_livekit_client = require("livekit-client");
-var Call = class {
+var Call = class _Call {
   id;
   _state = "connecting";
   _participants = /* @__PURE__ */ new Map();
   _listeners = /* @__PURE__ */ new Set();
   _room;
   _keyProvider;
-  /** @internal — obtain via PalbeCalls.start() / .accept() */
+  // PRIVATE constructor + `@internal` factory: the media-engine types (`Room`,
+  // `ExternalE2EEKeyProvider`) appear ONLY on a private constructor and an
+  // `@internal` static factory, both of which `stripInternal` (set in this
+  // package's tsconfig) removes from the emitted public `.d.ts`. So no engine type
+  // ever reaches the public API surface — the same "no engine type in the public
+  // interface" contract the iOS SDK enforces. Consumers obtain a `Call` only
+  // through `pb.calls.start()` / `.accept()`.
   constructor(callId, room, keyProvider) {
     this.id = callId;
     this._room = room;
     this._keyProvider = keyProvider;
-    this._wireRoomEvents();
+    this._wireMediaEvents();
+  }
+  /** @internal — facade-only factory; stripped from the public `.d.ts`. */
+  static _create(callId, room, keyProvider) {
+    return new _Call(callId, room, keyProvider);
   }
   // ─── State ──────────────────────────────────────────────────────────────
   get state() {
@@ -1800,9 +1796,9 @@ var Call = class {
   get participants() {
     return Array.from(this._participants.values());
   }
-  get localParticipant() {
-    return this._room.localParticipant;
-  }
+  // (No `localParticipant` accessor: it would return a raw media-engine participant
+  // object and leak the engine type onto the public API. Local mic/camera control is
+  // exposed engine-agnostically via `mute()` / `setCamera()` below.)
   // ─── Subscribe ──────────────────────────────────────────────────────────
   /**
    * Subscribe to call changes (state + participant updates).
@@ -1826,7 +1822,7 @@ var Call = class {
   /**
    * Set a raw frame encryption key (ArrayBuffer) for this call.
    * Design seam for SP-1.x web-MLS: call this with the MLS exporter secret
-   * to enable frame-level E2EE via ExternalE2EEKeyProvider.
+   * to enable frame-level E2EE via the media engine's external key provider.
    *
    * NOTE: The room must have been opened with `e2ee` options for this to take
    * effect. Currently calls connect WITHOUT e2ee — see module docstring.
@@ -1836,7 +1832,7 @@ var Call = class {
   async setMediaKey(key) {
     await this._keyProvider.setKey(key);
   }
-  /** Leave the call and disconnect from the LiveKit room. */
+  /** Leave the call and disconnect from the media room. */
   async leave() {
     await this._room.disconnect();
     this._setState("ended");
@@ -1878,7 +1874,7 @@ var Call = class {
     }
     this._emit();
   }
-  _wireRoomEvents() {
+  _wireMediaEvents() {
     this._room.on(import_livekit_client.RoomEvent.Connected, () => {
       this._setState("active");
     }).on(
@@ -1919,9 +1915,9 @@ var PalbeCalls = class {
    *
    * @param groupId  - Messaging group display-id (`grp_<uuidv7>`)
    * @param media    - Which media tracks to publish (default: audio + video)
-   * @returns        A `Call` in `connecting` state; transitions to `active` once LiveKit connects.
+   * @returns        A `Call` in `connecting` state; transitions to `active` once the media room connects.
    *
-   * @throws BackendError('network', { code: 'call_service_unavailable' })  if LiveKit SFU is down (503)
+   * @throws BackendError('network', { code: 'call_service_unavailable' })  if the SFU is down (503)
    * @throws BackendError('forbidden', { code: 'not_group_member' })       if the caller is not a member (403)
    * @throws BackendError('conflict', { code: 'call_room_full' })          if the room is full (409)
    */
@@ -1978,7 +1974,7 @@ var PalbeCalls = class {
       adaptiveStream: true,
       dynacast: true
     });
-    const call = new Call(callId, room, keyProvider);
+    const call = Call._create(callId, room, keyProvider);
     await room.connect(edgeUrl, token);
     if (media.includes("audio")) {
       await room.localParticipant.setMicrophoneEnabled(true);
@@ -2571,7 +2567,7 @@ var PalbeFlags = class {
   constructor(rt) {
     this.transport = new FlagsClient(rt.http);
     const browser = typeof document !== "undefined";
-    const ref = endpointRefFromApiKey(rt.config.apiKey);
+    const ref = rt.config.environmentRef;
     const options = {
       auth: palbeAuthAdapter(rt.auth),
       ...ref ? { storageKey: `palbe.flags.${ref}` } : {},
@@ -8311,7 +8307,7 @@ var AnonTokenProvider = class {
   }
   /**
    * Raw fetch, deliberately NOT through HttpClient/palbeRequest: the mint
-   * must carry the project apikey and NEVER a Bearer (iOS keeps
+   * must carry the Environment API key and NEVER a Bearer (iOS keeps
    * `/auth/anonymous` on the unauthenticated-path list), and HttpClient's
    * pre-flight would try to refresh a stale session before an anon mint —
    * exactly the entanglement this provider exists to avoid.
@@ -8968,10 +8964,25 @@ function defaultSessionStorage(key) {
 }
 
 // src/version.ts
-var VERSION = "2.0.1";
+var VERSION = "4.0.0";
 
 // src/runtime.ts
 function buildRuntime(config) {
+  const keyEnvironmentRef = environmentRefFromPublishableApiKey(config.apiKey);
+  if (keyEnvironmentRef === "") {
+    throw new Error("PalbeConfig.apiKey does not contain a valid publishable Environment identity");
+  } else if (config.environmentRef !== keyEnvironmentRef) {
+    throw new Error("PalbeConfig.environmentRef must match the Environment identity in apiKey");
+  }
+  let runtimeURL;
+  try {
+    runtimeURL = new URL(config.url);
+  } catch {
+    throw new Error("PalbeConfig.url must be a valid URL");
+  }
+  if (runtimeURL.hostname.endsWith(".palbase.studio") && runtimeURL.hostname.split(".")[0] !== config.environmentRef) {
+    throw new Error("PalbeConfig.url must match environmentRef for palbase.studio");
+  }
   const http = new HttpClient(config.apiKey, {
     url: config.url,
     headers: { "X-Client-Info": `palbe-web/${VERSION}`, ...config.headers }
@@ -8980,7 +8991,7 @@ function buildRuntime(config) {
   const tokenManager = new TokenManager();
   http.tokenManager = tokenManager;
   const authClient = new AuthClient(http, tokenManager);
-  const ref = endpointRefFromApiKey(config.apiKey);
+  const ref = config.environmentRef;
   const storage = config.storage ?? defaultSessionStorage(ref ? `palbe.session.${ref}` : void 0);
   const persisted = storage.load();
   if (persisted) {