@palbase/web 7.2.1 → 7.3.0

package/dist/index.cjs

@@ -181,6 +181,47 @@ function redactUrl(rawUrl) {
   return path.split("/").map((seg2) => isSensitiveSegment(seg2) ? ":id" : seg2).join("/");
 }
 
+// src/pow.ts
+var POW_CHALLENGE_ID_HEADER = "X-PoW-Challenge-ID";
+var POW_NONCE_HEADER = "X-PoW-Nonce";
+function asPowChallenge(details) {
+  if (typeof details !== "object" || details === null) return null;
+  const env = details;
+  if (env.error !== "pow_required") return null;
+  const c = env.challenge;
+  if (typeof c !== "object" || c === null) return null;
+  const { id, prefix, difficulty } = c;
+  if (typeof id !== "string" || typeof prefix !== "string") return null;
+  if (typeof difficulty !== "number" || !Number.isInteger(difficulty) || difficulty < 0) return null;
+  return { id, prefix, difficulty };
+}
+var encoder = new TextEncoder();
+function leadingZeroBits(hash) {
+  let bits = 0;
+  for (const byte of hash) {
+    if (byte === 0) {
+      bits += 8;
+      continue;
+    }
+    return bits + Math.clz32(byte) - 24;
+  }
+  return bits;
+}
+async function solvePowChallenge(challenge, maxIterations = 1 << 24) {
+  for (let nonce = 0; nonce < maxIterations; nonce++) {
+    const digest = await crypto.subtle.digest("SHA-256", encoder.encode(challenge.prefix + nonce));
+    if (leadingZeroBits(new Uint8Array(digest)) >= challenge.difficulty) {
+      return {
+        [POW_CHALLENGE_ID_HEADER]: challenge.id,
+        [POW_NONCE_HEADER]: String(nonce)
+      };
+    }
+  }
+  throw new Error(
+    `proof-of-work: no nonce found for difficulty ${challenge.difficulty} within ${maxIterations} attempts`
+  );
+}
+
 // src/request.ts
 var MUTATING = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH", "DELETE"]);
 var PERF_EXCLUDED_PREFIX = "/v1/analytics/";
@@ -204,11 +245,11 @@ async function palbeRequest(rt, method, path, spec = {}) {
   if (MUTATING.has(method) && !callerHasKey) {
     headers["Idempotency-Key"] = crypto.randomUUID();
   }
-  const attempt = async () => {
+  const attempt = async (extra) => {
     try {
       return await rt.http.request(method, path, {
         body: spec.body,
-        headers,
+        headers: extra ? { ...headers, ...extra } : headers,
         signal: spec.signal
       });
     } catch (e) {
@@ -243,6 +284,12 @@ async function palbeRequest(rt, method, path, spec = {}) {
       }
       res = await attempt();
     }
+    if (res.error?.status === 403 && res.error.code === "pow_required") {
+      const challenge = asPowChallenge(res.error.details);
+      if (challenge) {
+        res = await attempt(await solvePowChallenge(challenge));
+      }
+    }
   } catch (e) {
     if (!isAbort(e)) record(asPalbaseError(e)?.status ?? 0);
     throw e;
@@ -1856,7 +1903,7 @@ var PalbeFlags = class {
   constructor(rt) {
     this.transport = new FlagsClient(rt.http);
     const browser = typeof document !== "undefined";
-    const ref = rt.config.environmentRef;
+    const ref = rt.projectRef;
     const options = {
       auth: palbeAuthAdapter(rt.auth),
       ...ref ? { storageKey: `palbe.flags.${ref}` } : {},
@@ -7911,7 +7958,7 @@ function localStorageSessionStorage(key = DEFAULT_KEY) {
 }
 
 // src/version.ts
-var VERSION = "7.2.1";
+var VERSION = "7.3.0";
 
 // src/internal.ts
 function getRuntime() {