@palbase/web 4.0.0 → 4.0.1

package/dist/_mls-wasm.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/messaging/wasm/asset.ts"],"sourcesContent":["import encodedWasm from './pkg/palbe_mls_bg.wasm';\n\n// Built as a private package-import target. Keeping the bytes in their own\n// lazily imported JavaScript module lets browser bundlers carry/split the MLS\n// engine without a public-path convention, while Node ESM and CJS resolve the\n// exact same package-owned bytes.\nexport default encodedWasm;\n"],"mappings":";;;;;;AAMA,IAAO,gBAAQ;","names":[]}

package/dist/{chunk-S7NAY3MW.js → chunk-NXEPAEF5.js}

@@ -1,9 +1,3 @@
-var __defProp = Object.defineProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-
 // src/api-key.ts
 var API_KEY_RE = /^pb_([a-z0-9]+)_[cs][A-Za-z0-9]{20}$/;
 var PUBLISHABLE_API_KEY_RE = /^pb_([a-z0-9]+)_c[A-Za-z0-9]{20}$/;
@@ -17,8 +11,7 @@ function environmentRefFromPublishableApiKey(apiKey) {
 }
 
 export {
-  __export,
   environmentRefFromApiKey,
   environmentRefFromPublishableApiKey
 };
-//# sourceMappingURL=chunk-S7NAY3MW.js.map
+//# sourceMappingURL=chunk-NXEPAEF5.js.map

package/dist/{chunk-S7NAY3MW.js.map → chunk-NXEPAEF5.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/api-key.ts"],"sourcesContent":["/**\n * `pb_<environmentRef>_<scope><random>` → environmentRef ('' if malformed).\n * Utility for callers that only have a raw key. App-bound runtime storage and\n * palbe/next cookie naming use the explicit `PalbeConfig.environmentRef` emitted\n * by `palbe-gen`.\n *\n * The key is shape-validated (prefix `pb`, non-empty environmentRef, and a\n * `<scope><20-base62-random>` secret segment where scope ∈ {c,s}) before a ref\n * is returned. A structurally-invalid key returns '' so session storage stays\n * UNSCOPED rather than getting bound to a partially-parsed ref — a loose parse\n * (e.g. `pb_victim_cXX`) must not scope persisted sessions to `victim` and\n * hydrate a session belonging to a different, real key. The backend remains the\n * authority that rejects a bad key on the first request; this keeps the client's\n * local session-storage scoping honest. (Audit finding apikey-ref-mismatch.)\n */\nconst API_KEY_RE = /^pb_([a-z0-9]+)_[cs][A-Za-z0-9]{20}$/;\nconst PUBLISHABLE_API_KEY_RE = /^pb_([a-z0-9]+)_c[A-Za-z0-9]{20}$/;\n\nexport function environmentRefFromApiKey(apiKey: string): string {\n  const m = API_KEY_RE.exec(apiKey);\n  return m ? (m[1] ?? '') : '';\n}\n\n/** Internal app-runtime parser: browser config accepts publishable keys only. */\nexport function environmentRefFromPublishableApiKey(apiKey: string): string {\n  const match = PUBLISHABLE_API_KEY_RE.exec(apiKey);\n  return match ? (match[1] ?? '') : '';\n}\n"],"mappings":";;;;;;;AAeA,IAAM,aAAa;AACnB,IAAM,yBAAyB;AAExB,SAAS,yBAAyB,QAAwB;AAC/D,QAAM,IAAI,WAAW,KAAK,MAAM;AAChC,SAAO,IAAK,EAAE,CAAC,KAAK,KAAM;AAC5B;AAGO,SAAS,oCAAoC,QAAwB;AAC1E,QAAM,QAAQ,uBAAuB,KAAK,MAAM;AAChD,SAAO,QAAS,MAAM,CAAC,KAAK,KAAM;AACpC;","names":[]}
+{"version":3,"sources":["../src/api-key.ts"],"sourcesContent":["/**\n * `pb_<environmentRef>_<scope><random>` → environmentRef ('' if malformed).\n * Utility for callers that only have a raw key. App-bound runtime storage and\n * palbe/next cookie naming use the explicit `PalbeConfig.environmentRef` emitted\n * by `palbe-gen`.\n *\n * The key is shape-validated (prefix `pb`, non-empty environmentRef, and a\n * `<scope><20-base62-random>` secret segment where scope ∈ {c,s}) before a ref\n * is returned. A structurally-invalid key returns '' so session storage stays\n * UNSCOPED rather than getting bound to a partially-parsed ref — a loose parse\n * (e.g. `pb_victim_cXX`) must not scope persisted sessions to `victim` and\n * hydrate a session belonging to a different, real key. The backend remains the\n * authority that rejects a bad key on the first request; this keeps the client's\n * local session-storage scoping honest. (Audit finding apikey-ref-mismatch.)\n */\nconst API_KEY_RE = /^pb_([a-z0-9]+)_[cs][A-Za-z0-9]{20}$/;\nconst PUBLISHABLE_API_KEY_RE = /^pb_([a-z0-9]+)_c[A-Za-z0-9]{20}$/;\n\nexport function environmentRefFromApiKey(apiKey: string): string {\n  const m = API_KEY_RE.exec(apiKey);\n  return m ? (m[1] ?? '') : '';\n}\n\n/** Internal app-runtime parser: browser config accepts publishable keys only. */\nexport function environmentRefFromPublishableApiKey(apiKey: string): string {\n  const match = PUBLISHABLE_API_KEY_RE.exec(apiKey);\n  return match ? (match[1] ?? '') : '';\n}\n"],"mappings":";AAeA,IAAM,aAAa;AACnB,IAAM,yBAAyB;AAExB,SAAS,yBAAyB,QAAwB;AAC/D,QAAM,IAAI,WAAW,KAAK,MAAM;AAChC,SAAO,IAAK,EAAE,CAAC,KAAK,KAAM;AAC5B;AAGO,SAAS,oCAAoC,QAAwB;AAC1E,QAAM,QAAQ,uBAAuB,KAAK,MAAM;AAChD,SAAO,QAAS,MAAM,CAAC,KAAK,KAAM;AACpC;","names":[]}

package/dist/chunk-PZ5AY32C.js

@@ -0,0 +1,10 @@
+var __defProp = Object.defineProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+
+export {
+  __export
+};
+//# sourceMappingURL=chunk-PZ5AY32C.js.map

package/dist/chunk-PZ5AY32C.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/{chunk-NP4NIY7A.js → chunk-TGDS6VMT.js}

@@ -1,7 +1,9 @@
 import {
-  __export,
   environmentRefFromPublishableApiKey
-} from "./chunk-S7NAY3MW.js";
+} from "./chunk-NXEPAEF5.js";
+import {
+  __export
+} from "./chunk-PZ5AY32C.js";
 
 // ../core/dist/index.js
 var CACHE_TTL_MS = 5 * 60 * 1e3;
@@ -6432,26 +6434,25 @@ var GLUE_MODULE = "./palbe_mls_bg.js";
 var SNIPPET_MODULE = "./snippets/mls-rs-core-f99cdecbb456b09c/inline0.js";
 var inflight = null;
 var ready = null;
-async function loadWasmModule() {
-  const wasmUrl = new URL("./pkg/palbe_mls_bg.wasm", import.meta.url);
-  if (wasmUrl.protocol === "file:") {
-    const fsSpecifier = ["node", "fs/promises"].join(":");
-    const { readFile } = await import(
-      /* webpackIgnore: true */
-      fsSpecifier
-    );
-    const bytes = await readFile(wasmUrl);
-    return WebAssembly.compile(bytes);
+function decodeBase64(encoded) {
+  if (typeof encoded !== "string" || encoded.length === 0 || typeof globalThis.atob !== "function") {
+    throw new Error("palbe-mls WASM asset is invalid");
   }
-  const response = await fetch(wasmUrl);
-  if (typeof WebAssembly.compileStreaming === "function") {
-    try {
-      return await WebAssembly.compileStreaming(Promise.resolve(response));
-    } catch {
-    }
+  let binary;
+  try {
+    binary = globalThis.atob(encoded);
+  } catch {
+    throw new Error("palbe-mls WASM asset is invalid");
+  }
+  const bytes = new Uint8Array(binary.length);
+  for (let index = 0; index < binary.length; index += 1) {
+    bytes[index] = binary.charCodeAt(index);
   }
-  const buffer = await response.arrayBuffer();
-  return WebAssembly.compile(buffer);
+  return bytes.buffer;
+}
+async function loadWasmModule() {
+  const asset = await import("#palbase-mls-wasm");
+  return WebAssembly.compile(decodeBase64(asset.default));
 }
 function buildImports() {
   return {
@@ -6462,7 +6463,7 @@ function buildImports() {
 function initMls() {
   if (ready) return Promise.resolve(ready);
   if (inflight) return inflight;
-  inflight = (async () => {
+  const attempt = (async () => {
     const module2 = await loadWasmModule();
     const instance = await WebAssembly.instantiate(module2, buildImports());
     const setWasm = __wbg_set_wasm;
@@ -6481,7 +6482,11 @@ function initMls() {
     ready = g;
     return g;
   })();
-  return inflight;
+  inflight = attempt;
+  void attempt.catch(() => {
+    if (inflight === attempt) inflight = null;
+  });
+  return attempt;
 }
 function requireMls() {
   if (!ready) {
@@ -8934,7 +8939,7 @@ function defaultSessionStorage(key) {
 }
 
 // src/version.ts
-var VERSION = "4.0.0";
+var VERSION = "4.0.1";
 
 // src/runtime.ts
 function buildRuntime(config) {
@@ -9361,4 +9366,4 @@ export {
   pb,
   createBoundClient
 };
-//# sourceMappingURL=chunk-NP4NIY7A.js.map
+//# sourceMappingURL=chunk-TGDS6VMT.js.map