@palbase/web 7.2.2 → 7.3.1

package/dist/index.d.cts

@@ -1,6 +1,6 @@
-export { f as AnalyticsProperties, g as AuthChangeEvent, h as AuthState, i as AuthSuccess, A as AuthUser, j as Call, k as CallChangeCallback, l as CallParticipant, m as CallState, C as Chat, n as ChatBackend, o as ChatDraft, p as ChatKind, b as ChatMember, c as ChatMessage, q as ChatMessageKind, r as ChatRole, s as ChatState, t as CommsPrefs, F as FlagsView, M as MagicLinkResult, u as MentionRange, v as MessageDirection, N as NotifyScope, O as OAuthExchangeResult, w as PalbeAnalytics, x as PalbeAuth, y as PalbeCalls, P as PalbeConfig, z as PalbeFlags, B as PalbeMessaging, D as PalbeOAuthConfig, E as PalbeRealtime, G as PresenceState, H as RealtimeChannel, R as RealtimeConnectionState, I as RealtimeHandler, a as RealtimePayload, J as RealtimeStatus, K as RealtimeStatusSnapshot, L as RealtimeSubscription, Q as ResolvedMention, S as ResolvedReply, T as SentReceipt, U as SignInMethods, V as UnreadView, W as Unsubscribe } from './analytics-facade-jyXv7Cu4.cjs';
+export { f as AnalyticsProperties, g as AuthChangeEvent, h as AuthState, i as AuthSuccess, A as AuthUser, j as Call, k as CallChangeCallback, l as CallParticipant, m as CallState, C as Chat, n as ChatBackend, o as ChatDraft, p as ChatKind, b as ChatMember, c as ChatMessage, q as ChatMessageKind, r as ChatRole, s as ChatState, t as CommsPrefs, F as FlagsView, M as MagicLinkResult, u as MentionRange, v as MessageDirection, N as NotifyScope, O as OAuthExchangeResult, w as PalbeAnalytics, x as PalbeAuth, y as PalbeCalls, P as PalbeConfig, z as PalbeFlags, B as PalbeMessaging, D as PalbeOAuthConfig, E as PalbeRealtime, G as PresenceState, H as RealtimeChannel, R as RealtimeConnectionState, I as RealtimeHandler, a as RealtimePayload, J as RealtimeStatus, K as RealtimeStatusSnapshot, L as RealtimeSubscription, Q as ResolvedMention, S as ResolvedReply, T as SentReceipt, U as SignInMethods, V as UnreadView, W as Unsubscribe } from './analytics-facade-CQXCQSoF.cjs';
 export { B as BackendError, a as BackendErrorKind, F as FieldError, i as isBackendError } from './errors-fDoNdTrJ.cjs';
-export { C as CallOptions, P as PB, U as UploadOptions, a as UploadProgress, p as pb } from './pb-CfYQGEn0.cjs';
+export { C as CallOptions, P as PB, U as UploadOptions, a as UploadProgress, p as pb } from './pb-WAQvwCfM.cjs';
 export { P as PersistedSession, S as SessionStorageAdapter, l as localStorageSessionStorage, m as memorySessionStorage } from './storage-BPaeSG8K.cjs';
 export { F as FlagValue } from './pooled-flags-4GtDtsiu.js';
 
@@ -206,6 +206,6 @@ interface MlsGlue {
  */
 declare function initMls(): Promise<MlsGlue>;
 
-declare const VERSION = "7.2.2";
+declare const VERSION = "7.3.1";
 
 export { VERSION, initMls };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-export { f as AnalyticsProperties, g as AuthChangeEvent, h as AuthState, i as AuthSuccess, A as AuthUser, j as Call, k as CallChangeCallback, l as CallParticipant, m as CallState, C as Chat, n as ChatBackend, o as ChatDraft, p as ChatKind, b as ChatMember, c as ChatMessage, q as ChatMessageKind, r as ChatRole, s as ChatState, t as CommsPrefs, F as FlagsView, M as MagicLinkResult, u as MentionRange, v as MessageDirection, N as NotifyScope, O as OAuthExchangeResult, w as PalbeAnalytics, x as PalbeAuth, y as PalbeCalls, P as PalbeConfig, z as PalbeFlags, B as PalbeMessaging, D as PalbeOAuthConfig, E as PalbeRealtime, G as PresenceState, H as RealtimeChannel, R as RealtimeConnectionState, I as RealtimeHandler, a as RealtimePayload, J as RealtimeStatus, K as RealtimeStatusSnapshot, L as RealtimeSubscription, Q as ResolvedMention, S as ResolvedReply, T as SentReceipt, U as SignInMethods, V as UnreadView, W as Unsubscribe } from './analytics-facade-DLfnVVwL.js';
+export { f as AnalyticsProperties, g as AuthChangeEvent, h as AuthState, i as AuthSuccess, A as AuthUser, j as Call, k as CallChangeCallback, l as CallParticipant, m as CallState, C as Chat, n as ChatBackend, o as ChatDraft, p as ChatKind, b as ChatMember, c as ChatMessage, q as ChatMessageKind, r as ChatRole, s as ChatState, t as CommsPrefs, F as FlagsView, M as MagicLinkResult, u as MentionRange, v as MessageDirection, N as NotifyScope, O as OAuthExchangeResult, w as PalbeAnalytics, x as PalbeAuth, y as PalbeCalls, P as PalbeConfig, z as PalbeFlags, B as PalbeMessaging, D as PalbeOAuthConfig, E as PalbeRealtime, G as PresenceState, H as RealtimeChannel, R as RealtimeConnectionState, I as RealtimeHandler, a as RealtimePayload, J as RealtimeStatus, K as RealtimeStatusSnapshot, L as RealtimeSubscription, Q as ResolvedMention, S as ResolvedReply, T as SentReceipt, U as SignInMethods, V as UnreadView, W as Unsubscribe } from './analytics-facade-BER0EyYT.js';
 export { B as BackendError, a as BackendErrorKind, F as FieldError, i as isBackendError } from './errors-fDoNdTrJ.js';
-export { C as CallOptions, P as PB, U as UploadOptions, a as UploadProgress, p as pb } from './pb-DdzpEkPY.js';
+export { C as CallOptions, P as PB, U as UploadOptions, a as UploadProgress, p as pb } from './pb-BRlmBIAm.js';
 export { P as PersistedSession, S as SessionStorageAdapter, l as localStorageSessionStorage, m as memorySessionStorage } from './storage-BPaeSG8K.js';
 export { F as FlagValue } from './pooled-flags-4GtDtsiu.js';
 
@@ -206,6 +206,6 @@ interface MlsGlue {
  */
 declare function initMls(): Promise<MlsGlue>;
 
-declare const VERSION = "7.2.2";
+declare const VERSION = "7.3.1";
 
 export { VERSION, initMls };

package/dist/index.js

@@ -11,11 +11,11 @@ import {
   localStorageSessionStorage,
   memorySessionStorage,
   pb
-} from "./chunk-IREKQSHT.js";
+} from "./chunk-RRHJV6YD.js";
 import {
   BackendError,
   isBackendError
-} from "./chunk-ACCJV6FV.js";
+} from "./chunk-53TN7KYR.js";
 import "./chunk-CFDU23TB.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/internal.cjs

@@ -54,6 +54,45 @@ var PalbaseError = class extends Error {
     this.details = details;
   }
 };
+var POW_CHALLENGE_ID_HEADER = "X-PoW-Challenge-ID";
+var POW_NONCE_HEADER = "X-PoW-Nonce";
+function asPowChallenge(details) {
+  if (typeof details !== "object" || details === null) return null;
+  const env = details;
+  if (env.error !== "pow_required") return null;
+  const c = env.challenge;
+  if (typeof c !== "object" || c === null) return null;
+  const { id, prefix, difficulty } = c;
+  if (typeof id !== "string" || typeof prefix !== "string") return null;
+  if (typeof difficulty !== "number" || !Number.isInteger(difficulty) || difficulty < 0) return null;
+  return { id, prefix, difficulty };
+}
+var encoder = new TextEncoder();
+function leadingZeroBits(hash) {
+  let bits = 0;
+  for (const byte of hash) {
+    if (byte === 0) {
+      bits += 8;
+      continue;
+    }
+    return bits + Math.clz32(byte) - 24;
+  }
+  return bits;
+}
+async function solvePowChallenge(challenge, maxIterations = 1 << 24) {
+  for (let nonce = 0; nonce < maxIterations; nonce++) {
+    const digest = await crypto.subtle.digest("SHA-256", encoder.encode(challenge.prefix + nonce));
+    if (leadingZeroBits(new Uint8Array(digest)) >= challenge.difficulty) {
+      return {
+        [POW_CHALLENGE_ID_HEADER]: challenge.id,
+        [POW_NONCE_HEADER]: String(nonce)
+      };
+    }
+  }
+  throw new Error(
+    `proof-of-work: no nonce found for difficulty ${challenge.difficulty} within ${maxIterations} attempts`
+  );
+}
 function detectPlatform() {
   if (typeof Deno !== "undefined") {
     return "deno";
@@ -190,9 +229,9 @@ var HttpClient = class _HttpClient {
     }
     return headers;
   }
-  async executeWithRetry(method, path, options, attempt) {
+  async executeWithRetry(method, path, options, attempt, earned) {
     const url = `${this.getBaseUrl()}${path}`;
-    const headers = this.buildHeaders(options);
+    const headers = { ...this.buildHeaders(options), ...earned };
     for (const interceptor of this.interceptors) {
       await interceptor({ headers, method, path });
     }
@@ -211,7 +250,7 @@ var HttpClient = class _HttpClient {
       if (attempt < MAX_RETRIES - 1) {
         const backoff = INITIAL_BACKOFF_MS * 2 ** attempt;
         await this.delay(backoff);
-        return this.executeWithRetry(method, path, options, attempt + 1);
+        return this.executeWithRetry(method, path, options, attempt + 1, earned);
       }
       throw new PalbaseError(
         "network_error",
@@ -225,7 +264,7 @@ var HttpClient = class _HttpClient {
         const parsed = retryAfter ? Number.parseInt(retryAfter, 10) : Number.NaN;
         const delayMs = Number.isNaN(parsed) ? INITIAL_BACKOFF_MS * 2 ** attempt : Math.min(parsed * 1e3, MAX_RETRY_DELAY_MS);
         await this.delay(delayMs);
-        return this.executeWithRetry(method, path, options, attempt + 1);
+        return this.executeWithRetry(method, path, options, attempt + 1, earned);
       }
     }
     let data = null;
@@ -239,6 +278,18 @@ var HttpClient = class _HttpClient {
         errorBody = body;
       }
     }
+    if (response.status === 403 && !earned) {
+      const challenge = asPowChallenge(errorBody);
+      if (challenge) {
+        return this.executeWithRetry(
+          method,
+          path,
+          options,
+          attempt,
+          await solvePowChallenge(challenge)
+        );
+      }
+    }
     if (!response.ok) {
       return {
         data: null,
@@ -479,11 +530,11 @@ async function palbeRequest(rt, method, path, spec = {}) {
   if (MUTATING.has(method) && !callerHasKey) {
     headers["Idempotency-Key"] = crypto.randomUUID();
   }
-  const attempt = async () => {
+  const attempt = async (extra) => {
     try {
       return await rt.http.request(method, path, {
         body: spec.body,
-        headers,
+        headers: extra ? { ...headers, ...extra } : headers,
         signal: spec.signal
       });
     } catch (e) {
@@ -518,6 +569,12 @@ async function palbeRequest(rt, method, path, spec = {}) {
       }
       res = await attempt();
     }
+    if (res.error?.status === 403 && res.error.code === "pow_required") {
+      const challenge = asPowChallenge(res.error.details);
+      if (challenge) {
+        res = await attempt(await solvePowChallenge(challenge));
+      }
+    }
   } catch (e) {
     if (!isAbort(e)) record(asPalbaseError(e)?.status ?? 0);
     throw e;
@@ -1258,7 +1315,7 @@ var AnalyticsState = class {
   idKey;
   optOutKey;
   constructor(rt) {
-    const ref = rt.config.environmentRef;
+    const ref = rt.projectRef;
     this.idKey = ref ? `palbe.analytics.id.${ref}` : "palbe.analytics.id";
     this.optOutKey = ref ? `palbe.analytics.optout.${ref}` : "palbe.analytics.optout";
     rt.auth.onAuthEvent((event) => {
@@ -2899,7 +2956,7 @@ var PalbeFlags = class {
   constructor(rt) {
     this.transport = new FlagsClient(rt.http);
     const browser = typeof document !== "undefined";
-    const ref = rt.config.environmentRef;
+    const ref = rt.projectRef;
     const options = {
       auth: palbeAuthAdapter(rt.auth),
       ...ref ? { storageKey: `palbe.flags.${ref}` } : {},
@@ -9298,15 +9355,13 @@ function defaultSessionStorage(key) {
 }
 
 // src/version.ts
-var VERSION = "7.2.2";
+var VERSION = "7.3.1";
 
 // src/runtime.ts
 function buildRuntime(config) {
-  const keyEnvironmentRef = environmentRefFromPublishableApiKey(config.apiKey);
-  if (keyEnvironmentRef === "") {
-    throw new Error("PalbeConfig.apiKey does not contain a valid publishable Environment identity");
-  } else if (config.environmentRef !== keyEnvironmentRef) {
-    throw new Error("PalbeConfig.environmentRef must match the Environment identity in apiKey");
+  const projectRef = environmentRefFromPublishableApiKey(config.apiKey);
+  if (projectRef === "") {
+    throw new Error("PalbeConfig.apiKey does not contain a valid publishable project identity");
   }
   let runtimeURL;
   try {
@@ -9314,8 +9369,8 @@ function buildRuntime(config) {
   } catch {
     throw new Error("PalbeConfig.url must be a valid URL");
   }
-  if (runtimeURL.hostname.endsWith(".palbase.studio") && runtimeURL.hostname.split(".")[0] !== config.environmentRef) {
-    throw new Error("PalbeConfig.url must match environmentRef for palbase.studio");
+  if (runtimeURL.hostname.endsWith(".palbase.studio") && runtimeURL.hostname.split(".")[0] !== projectRef) {
+    throw new Error("PalbeConfig.url must match the project identity in apiKey for palbase.studio");
   }
   const http = new HttpClient(config.apiKey, {
     url: config.url,
@@ -9325,7 +9380,7 @@ function buildRuntime(config) {
   const tokenManager = new TokenManager();
   http.tokenManager = tokenManager;
   const authClient = new AuthClient(http, tokenManager);
-  const ref = config.environmentRef;
+  const ref = projectRef;
   const storage = config.storage ?? defaultSessionStorage(ref ? `palbe.session.${ref}` : void 0);
   const persisted = storage.load();
   if (persisted) {
@@ -9370,6 +9425,7 @@ function buildRuntime(config) {
   let perf;
   const rt = {
     config,
+    projectRef,
     http,
     tokenManager,
     authClient,