@palbase/web 7.2.2 → 7.3.0

package/dist/internal.d.cts

@@ -1,7 +1,7 @@
-import { P as PalbeConfig } from './analytics-facade-jyXv7Cu4.cjs';
-export { d as PalbeRuntime, e as buildRuntime } from './analytics-facade-jyXv7Cu4.cjs';
+import { P as PalbeConfig } from './analytics-facade-CQXCQSoF.cjs';
+export { d as PalbeRuntime, e as buildRuntime } from './analytics-facade-CQXCQSoF.cjs';
 import { B as BackendError } from './errors-fDoNdTrJ.cjs';
-export { P as PB, c as createBoundClient } from './pb-CfYQGEn0.cjs';
+export { P as PB, c as createBoundClient } from './pb-WAQvwCfM.cjs';
 import './storage-BPaeSG8K.cjs';
 import './pooled-flags-4GtDtsiu.js';
 

package/dist/internal.d.ts

@@ -1,7 +1,7 @@
-import { P as PalbeConfig } from './analytics-facade-DLfnVVwL.js';
-export { d as PalbeRuntime, e as buildRuntime } from './analytics-facade-DLfnVVwL.js';
+import { P as PalbeConfig } from './analytics-facade-BER0EyYT.js';
+export { d as PalbeRuntime, e as buildRuntime } from './analytics-facade-BER0EyYT.js';
 import { B as BackendError } from './errors-fDoNdTrJ.js';
-export { P as PB, c as createBoundClient } from './pb-DdzpEkPY.js';
+export { P as PB, c as createBoundClient } from './pb-BRlmBIAm.js';
 import './storage-BPaeSG8K.js';
 import './pooled-flags-4GtDtsiu.js';
 

package/dist/internal.js

@@ -6,7 +6,7 @@ import {
   createBoundClient,
   getRuntime,
   onConfigured
-} from "./chunk-IREKQSHT.js";
+} from "./chunk-YBURINUN.js";
 import "./chunk-ACCJV6FV.js";
 import "./chunk-CFDU23TB.js";
 import "./chunk-PZ5AY32C.js";

package/dist/next/client.cjs

@@ -35,6 +35,13 @@ __export(client_exports, {
 });
 module.exports = __toCommonJS(client_exports);
 
+// src/api-key.ts
+var PUBLISHABLE_API_KEY_RE = /^pb_([a-z0-9]{4,24})_c[A-Za-z0-9]{20}$/;
+function environmentRefFromPublishableApiKey(apiKey) {
+  const match = PUBLISHABLE_API_KEY_RE.exec(apiKey);
+  return match ? match[1] ?? "" : "";
+}
+
 // ../core/dist/index.js
 var CACHE_TTL_MS = 5 * 60 * 1e3;
 var PalbaseError = class extends Error {
@@ -451,6 +458,47 @@ function redactUrl(rawUrl) {
   return path.split("/").map((seg2) => isSensitiveSegment(seg2) ? ":id" : seg2).join("/");
 }
 
+// src/pow.ts
+var POW_CHALLENGE_ID_HEADER = "X-PoW-Challenge-ID";
+var POW_NONCE_HEADER = "X-PoW-Nonce";
+function asPowChallenge(details) {
+  if (typeof details !== "object" || details === null) return null;
+  const env = details;
+  if (env.error !== "pow_required") return null;
+  const c = env.challenge;
+  if (typeof c !== "object" || c === null) return null;
+  const { id, prefix, difficulty } = c;
+  if (typeof id !== "string" || typeof prefix !== "string") return null;
+  if (typeof difficulty !== "number" || !Number.isInteger(difficulty) || difficulty < 0) return null;
+  return { id, prefix, difficulty };
+}
+var encoder = new TextEncoder();
+function leadingZeroBits(hash) {
+  let bits = 0;
+  for (const byte of hash) {
+    if (byte === 0) {
+      bits += 8;
+      continue;
+    }
+    return bits + Math.clz32(byte) - 24;
+  }
+  return bits;
+}
+async function solvePowChallenge(challenge, maxIterations = 1 << 24) {
+  for (let nonce = 0; nonce < maxIterations; nonce++) {
+    const digest = await crypto.subtle.digest("SHA-256", encoder.encode(challenge.prefix + nonce));
+    if (leadingZeroBits(new Uint8Array(digest)) >= challenge.difficulty) {
+      return {
+        [POW_CHALLENGE_ID_HEADER]: challenge.id,
+        [POW_NONCE_HEADER]: String(nonce)
+      };
+    }
+  }
+  throw new Error(
+    `proof-of-work: no nonce found for difficulty ${challenge.difficulty} within ${maxIterations} attempts`
+  );
+}
+
 // src/request.ts
 var MUTATING = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH", "DELETE"]);
 var PERF_EXCLUDED_PREFIX = "/v1/analytics/";
@@ -474,11 +522,11 @@ async function palbeRequest(rt, method, path, spec = {}) {
   if (MUTATING.has(method) && !callerHasKey) {
     headers["Idempotency-Key"] = crypto.randomUUID();
   }
-  const attempt = async () => {
+  const attempt = async (extra) => {
     try {
       return await rt.http.request(method, path, {
         body: spec.body,
-        headers,
+        headers: extra ? { ...headers, ...extra } : headers,
         signal: spec.signal
       });
     } catch (e) {
@@ -513,6 +561,12 @@ async function palbeRequest(rt, method, path, spec = {}) {
       }
       res = await attempt();
     }
+    if (res.error?.status === 403 && res.error.code === "pow_required") {
+      const challenge = asPowChallenge(res.error.details);
+      if (challenge) {
+        res = await attempt(await solvePowChallenge(challenge));
+      }
+    }
   } catch (e) {
     if (!isAbort(e)) record(asPalbaseError(e)?.status ?? 0);
     throw e;
@@ -1058,7 +1112,7 @@ var AnalyticsState = class {
   idKey;
   optOutKey;
   constructor(rt) {
-    const ref = rt.config.environmentRef;
+    const ref = rt.projectRef;
     this.idKey = ref ? `palbe.analytics.id.${ref}` : "palbe.analytics.id";
     this.optOutKey = ref ? `palbe.analytics.optout.${ref}` : "palbe.analytics.optout";
     rt.auth.onAuthEvent((event) => {
@@ -1272,13 +1326,6 @@ var PalbeAnalytics = class {
   }
 };
 
-// src/api-key.ts
-var PUBLISHABLE_API_KEY_RE = /^pb_([a-z0-9]{4,24})_c[A-Za-z0-9]{20}$/;
-function environmentRefFromPublishableApiKey(apiKey) {
-  const match = PUBLISHABLE_API_KEY_RE.exec(apiKey);
-  return match ? match[1] ?? "" : "";
-}
-
 // src/auth-wire.ts
 function asWireAuthResult(raw) {
   if (typeof raw !== "object" || raw === null) return null;
@@ -2699,7 +2746,7 @@ var PalbeFlags = class {
   constructor(rt) {
     this.transport = new FlagsClient(rt.http);
     const browser = typeof document !== "undefined";
-    const ref = rt.config.environmentRef;
+    const ref = rt.projectRef;
     const options = {
       auth: palbeAuthAdapter(rt.auth),
       ...ref ? { storageKey: `palbe.flags.${ref}` } : {},
@@ -9098,15 +9145,13 @@ function defaultSessionStorage(key) {
 }
 
 // src/version.ts
-var VERSION = "7.2.2";
+var VERSION = "7.3.0";
 
 // src/runtime.ts
 function buildRuntime(config) {
-  const keyEnvironmentRef = environmentRefFromPublishableApiKey(config.apiKey);
-  if (keyEnvironmentRef === "") {
-    throw new Error("PalbeConfig.apiKey does not contain a valid publishable Environment identity");
-  } else if (config.environmentRef !== keyEnvironmentRef) {
-    throw new Error("PalbeConfig.environmentRef must match the Environment identity in apiKey");
+  const projectRef = environmentRefFromPublishableApiKey(config.apiKey);
+  if (projectRef === "") {
+    throw new Error("PalbeConfig.apiKey does not contain a valid publishable project identity");
   }
   let runtimeURL;
   try {
@@ -9114,8 +9159,8 @@ function buildRuntime(config) {
   } catch {
     throw new Error("PalbeConfig.url must be a valid URL");
   }
-  if (runtimeURL.hostname.endsWith(".palbase.studio") && runtimeURL.hostname.split(".")[0] !== config.environmentRef) {
-    throw new Error("PalbeConfig.url must match environmentRef for palbase.studio");
+  if (runtimeURL.hostname.endsWith(".palbase.studio") && runtimeURL.hostname.split(".")[0] !== projectRef) {
+    throw new Error("PalbeConfig.url must match the project identity in apiKey for palbase.studio");
   }
   const http = new HttpClient(config.apiKey, {
     url: config.url,
@@ -9125,7 +9170,7 @@ function buildRuntime(config) {
   const tokenManager = new TokenManager();
   http.tokenManager = tokenManager;
   const authClient = new AuthClient(http, tokenManager);
-  const ref = config.environmentRef;
+  const ref = projectRef;
   const storage = config.storage ?? defaultSessionStorage(ref ? `palbe.session.${ref}` : void 0);
   const persisted = storage.load();
   if (persisted) {
@@ -9170,6 +9215,7 @@ function buildRuntime(config) {
   let perf;
   const rt = {
     config,
+    projectRef,
     http,
     tokenManager,
     authClient,
@@ -9412,7 +9458,7 @@ function setupPalbeNext() {
   const config = getRuntime().config;
   __configure({
     ...config,
-    storage: cookieSessionStorage(config.environmentRef)
+    storage: cookieSessionStorage(environmentRefFromPublishableApiKey(config.apiKey))
   });
 }
 // Annotate the CommonJS export names for ESM import in node: