@palbase/web 4.0.0 → 4.0.2

package/dist/index.cjs

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,11 +17,19 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/index.ts
-var index_exports = {};
-__export(index_exports, {
+var src_exports = {};
+__export(src_exports, {
   BackendError: () => BackendError,
   PalbeAnalytics: () => PalbeAnalytics,
   PalbeAuth: () => PalbeAuth,
@@ -35,7 +45,7 @@ __export(index_exports, {
   memorySessionStorage: () => memorySessionStorage,
   pb: () => pb
 });
-module.exports = __toCommonJS(index_exports);
+module.exports = __toCommonJS(src_exports);
 
 // ../core/dist/index.js
 var CACHE_TTL_MS = 5 * 60 * 1e3;
@@ -177,6 +187,11 @@ var PERF_EXCLUDED_PREFIX = "/v1/analytics/";
 function isSelfTraced(path) {
   return path.startsWith(PERF_EXCLUDED_PREFIX);
 }
+function isSessionKilled(status, code) {
+  if (status === 401) return code === "session_revoked";
+  if (status === 403) return code === "subject_fenced" || code === "subject_erased";
+  return false;
+}
 function nowMs() {
   return typeof performance !== "undefined" && typeof performance.now === "function" ? performance.now() : Date.now();
 }
@@ -212,7 +227,7 @@ async function palbeRequest(rt, method, path, spec = {}) {
   let res;
   try {
     res = await attempt();
-    if (res.error?.status === 401 && rt.tokenManager.getRefreshToken() && rt.tokenManager.refreshFunction) {
+    if (res.error?.status === 401 && res.error.code !== "session_revoked" && rt.tokenManager.getRefreshToken() && rt.tokenManager.refreshFunction) {
       try {
         await rt.tokenManager.refreshSession();
       } catch (refreshErr) {
@@ -232,6 +247,9 @@ async function palbeRequest(rt, method, path, spec = {}) {
     if (!isAbort(e)) record(asPalbaseError(e)?.status ?? 0);
     throw e;
   }
+  if (res.error && isSessionKilled(res.error.status, res.error.code)) {
+    rt.auth.reactiveTeardown();
+  }
   record(res.error?.status ?? 200);
   return unwrap(res);
 }
@@ -459,7 +477,8 @@ var PalbeAuth = class {
         if (!this.signedInState) return;
         this.signedInState = false;
         this.cachedUser = null;
-        const reason = this.signingOut ? "userInitiated" : "sessionExpired";
+        const reason = this.nextSignOutReason ?? (this.signingOut ? "userInitiated" : "sessionExpired");
+        this.nextSignOutReason = null;
         this.emitState({ status: "signedOut" });
         this.emitEvent({ type: "signedOut", reason });
       } else if (event === "TOKEN_REFRESHED") {
@@ -472,6 +491,10 @@ var PalbeAuth = class {
   rt;
   cachedUser = null;
   signingOut = false;
+  // Explicit signedOut reason pinned for the NEXT session clear (deleteAccount /
+  // reactiveTeardown set it before clearSession; the SIGNED_OUT handler consumes
+  // it exactly once, then resets to null → normal signOut/expiry split resumes).
+  nextSignOutReason = null;
   signingIn = false;
   // suppresses AuthClient's TOKEN_REFRESHED during re-signIn
   signedInState = false;
@@ -519,6 +542,45 @@ var PalbeAuth = class {
       this.cachedUser = null;
     }
   }
+  /**
+   * Self-service account erasure ("right to be forgotten"). Calls palauth
+   * `DELETE /auth/user` (session-authed + fresh re-auth): password users pass
+   * `{ password }`; passwordless/OAuth users rely on a freshly stepped-up
+   * session. On 202 the erasure workflow is durably queued AND every session is
+   * already revoked server-side — so we tear down local state (mirroring
+   * `signOut()`'s clear, minus the pointless `/logout`) and emit
+   * `signedOut{reason:'accountDeleted'}`.
+   *
+   * On 401 `reauth_required` / 503 `not_configured` (or `erasure_unavailable`)
+   * the request throws BEFORE the teardown line, so the local session is left
+   * fully intact — the deletion did not happen and the user is still signed in.
+   */
+  async deleteAccount(params = {}) {
+    const res = await palbeRequest(this.rt, "DELETE", "/auth/user", {
+      body: params.password ? { password: params.password } : {}
+    });
+    this.nextSignOutReason = "accountDeleted";
+    this.rt.tokenManager.clearSession();
+    this.rt.storage.clear();
+    this.cachedUser = null;
+    return { erasureId: res.erasure_id };
+  }
+  /**
+   * @internal — invoked by the transport choke point (`request.ts`), not app code.
+   * Reactive teardown when the server reports the session is gone: a 403
+   * `subject_fenced`/`subject_erased` (subject being erased) or a 401
+   * `session_revoked`. Clears local state and emits
+   * `signedOut{reason:'sessionInvalid'}` exactly once (deduped by
+   * `signedInState`). An ordinary 403 authz denial does NOT reach here —
+   * `request.ts` matches only the exact session-kill codes.
+   */
+  reactiveTeardown() {
+    if (!this.signedInState) return;
+    this.nextSignOutReason = "sessionInvalid";
+    this.rt.tokenManager.clearSession();
+    this.rt.storage.clear();
+    this.cachedUser = null;
+  }
   async getUser() {
     const raw = await palbeRequest(this.rt, "GET", "/auth/user");
     return mapWireUser(raw);
@@ -5458,31 +5520,29 @@ function date_now() {
 }
 
 // src/messaging/wasm/loader.ts
-var import_meta = {};
 var GLUE_MODULE = "./palbe_mls_bg.js";
 var SNIPPET_MODULE = "./snippets/mls-rs-core-f99cdecbb456b09c/inline0.js";
 var inflight = null;
 var ready = null;
-async function loadWasmModule() {
-  const wasmUrl = new URL("./pkg/palbe_mls_bg.wasm", import_meta.url);
-  if (wasmUrl.protocol === "file:") {
-    const fsSpecifier = ["node", "fs/promises"].join(":");
-    const { readFile } = await import(
-      /* webpackIgnore: true */
-      fsSpecifier
-    );
-    const bytes = await readFile(wasmUrl);
-    return WebAssembly.compile(bytes);
+function decodeBase64(encoded) {
+  if (typeof encoded !== "string" || encoded.length === 0 || typeof globalThis.atob !== "function") {
+    throw new Error("palbe-mls WASM asset is invalid");
   }
-  const response = await fetch(wasmUrl);
-  if (typeof WebAssembly.compileStreaming === "function") {
-    try {
-      return await WebAssembly.compileStreaming(Promise.resolve(response));
-    } catch {
-    }
+  let binary;
+  try {
+    binary = globalThis.atob(encoded);
+  } catch {
+    throw new Error("palbe-mls WASM asset is invalid");
+  }
+  const bytes = new Uint8Array(binary.length);
+  for (let index = 0; index < binary.length; index += 1) {
+    bytes[index] = binary.charCodeAt(index);
   }
-  const buffer = await response.arrayBuffer();
-  return WebAssembly.compile(buffer);
+  return bytes.buffer;
+}
+async function loadWasmModule() {
+  const asset = await import("#palbase-mls-wasm");
+  return WebAssembly.compile(decodeBase64(asset.default));
 }
 function buildImports() {
   return {
@@ -5493,7 +5553,7 @@ function buildImports() {
 function initMls() {
   if (ready) return Promise.resolve(ready);
   if (inflight) return inflight;
-  inflight = (async () => {
+  const attempt = (async () => {
     const module2 = await loadWasmModule();
     const instance = await WebAssembly.instantiate(module2, buildImports());
     const setWasm = __wbg_set_wasm;
@@ -5512,7 +5572,11 @@ function initMls() {
     ready = g;
     return g;
   })();
-  return inflight;
+  inflight = attempt;
+  void attempt.catch(() => {
+    if (inflight === attempt) inflight = null;
+  });
+  return attempt;
 }
 function requireMls() {
   if (!ready) {
@@ -7621,7 +7685,7 @@ function localStorageSessionStorage(key = DEFAULT_KEY) {
 }
 
 // src/version.ts
-var VERSION = "4.0.0";
+var VERSION = "4.0.2";
 
 // src/internal.ts
 function getRuntime() {