@palbase/web 7.3.4 → 7.3.5

package/dist/next/index.js

@@ -1,6 +1,6 @@
 import {
   importNextServer
-} from "../chunk-IVD6BP5Z.js";
+} from "../chunk-HT5SNA5H.js";
 import {
   SESSION_COOKIE_ATTRS,
   clearedSessionCookieNames,
@@ -14,10 +14,10 @@ import {
   buildRuntime,
   createBoundClient,
   getRuntime
-} from "../chunk-PYJ3CMA2.js";
+} from "../chunk-2VURERR2.js";
 import {
   BackendError
-} from "../chunk-RAP37ILS.js";
+} from "../chunk-6DGCUHSO.js";
 import {
   environmentRefFromApiKey,
   environmentRefFromPublishableApiKey

package/dist/next/proxy.js

@@ -1,6 +1,6 @@
 import {
   importNextServer
-} from "../chunk-IVD6BP5Z.js";
+} from "../chunk-HT5SNA5H.js";
 import {
   SESSION_COOKIE_ATTRS,
   clearedSessionCookieNames,
@@ -9,7 +9,7 @@ import {
 } from "../chunk-6VGKMNXO.js";
 import {
   BackendError
-} from "../chunk-RAP37ILS.js";
+} from "../chunk-6DGCUHSO.js";
 import {
   environmentRefFromPublishableApiKey
 } from "../chunk-CFDU23TB.js";

package/dist/react/index.cjs

@@ -63,6 +63,28 @@ function asPowChallenge(details) {
   return { id, prefix, difficulty };
 }
 var encoder = new TextEncoder();
+var hasher = null;
+async function digester() {
+  if (hasher) return hasher;
+  const runtime = globalThis;
+  const nodeish = runtime.process?.versions?.node !== void 0 || runtime.process?.versions?.bun !== void 0;
+  if (nodeish) {
+    try {
+      const mod = await import(
+        /* @vite-ignore */
+        `${"node:"}crypto`
+      );
+      if (typeof mod.createHash === "function") {
+        const createHash = mod.createHash;
+        hasher = (input) => new Uint8Array(createHash("sha256").update(input).digest());
+        return hasher;
+      }
+    } catch {
+    }
+  }
+  hasher = async (input) => new Uint8Array(await crypto.subtle.digest("SHA-256", encoder.encode(input)));
+  return hasher;
+}
 var now = () => typeof performance !== "undefined" && typeof performance.now === "function" ? performance.now() : Date.now();
 function leadingZeroBits(hash) {
   let bits = 0;
@@ -79,14 +101,19 @@ var MAX_POW_DIFFICULTY = 24;
 function powBudget(difficulty) {
   return 8 * 2 ** difficulty;
 }
-var POW_DEADLINE_MS = 12e4;
+var POW_TIME_BUDGET_MS = 12e4;
+var CALIBRATION_WARMUP = 1024;
+var CALIBRATION_END = 9216;
 async function solvePowChallenge(challenge, maxIterations = powBudget(challenge.difficulty), signal) {
   if (challenge.difficulty > MAX_POW_DIFFICULTY) {
     throw new Error(
       `proof-of-work: refusing difficulty ${challenge.difficulty}; this client attempts at most ${MAX_POW_DIFFICULTY}, which is the highest a Palbase stack issues`
     );
   }
-  const deadline = now() + POW_DEADLINE_MS;
+  const digest = await digester();
+  let warmedAt = 0;
+  let calibrated = false;
+  let deadline = Number.POSITIVE_INFINITY;
   for (let nonce = 0; nonce < maxIterations; nonce++) {
     if ((nonce & 1023) === 0) {
       if (signal?.aborted) {
@@ -94,12 +121,27 @@ async function solvePowChallenge(challenge, maxIterations = powBudget(challenge.
       }
       if (now() > deadline) {
         throw new Error(
-          `proof-of-work: gave up after ${POW_DEADLINE_MS / 1e3}s at difficulty ${challenge.difficulty} (${nonce} attempts)`
+          `proof-of-work: gave up on difficulty ${challenge.difficulty} after ${POW_TIME_BUDGET_MS / 1e3}s and ${nonce.toLocaleString()} attempts \u2014 the tail this run drew is longer than the allowance`
+        );
+      }
+    }
+    if (nonce === CALIBRATION_WARMUP) {
+      warmedAt = now();
+    }
+    if (!calibrated && nonce === CALIBRATION_END) {
+      calibrated = true;
+      const elapsed = Math.max(now() - warmedAt, 1e-3);
+      const rate = (CALIBRATION_END - CALIBRATION_WARMUP) / (elapsed / 1e3);
+      const expectedMs = 2 ** challenge.difficulty / rate * 1e3;
+      if (expectedMs > POW_TIME_BUDGET_MS) {
+        throw new Error(
+          `proof-of-work: difficulty ${challenge.difficulty} needs about ${Math.round(expectedMs / 1e3)}s here (${Math.round(rate).toLocaleString()} digests/s) and this client allows ${POW_TIME_BUDGET_MS / 1e3}s; refusing before spending the time rather than after`
         );
       }
+      deadline = now() + (POW_TIME_BUDGET_MS - (now() - warmedAt));
     }
-    const digest = await crypto.subtle.digest("SHA-256", encoder.encode(challenge.prefix + nonce));
-    if (leadingZeroBits(new Uint8Array(digest)) >= challenge.difficulty) {
+    const hash = await digest(challenge.prefix + nonce);
+    if (leadingZeroBits(hash) >= challenge.difficulty) {
       return {
         [POW_CHALLENGE_ID_HEADER]: challenge.id,
         [POW_NONCE_HEADER]: String(nonce)
@@ -424,7 +466,7 @@ function applyBrowserOriginHeader(headers) {
 }
 
 // src/version.ts
-var VERSION = "7.3.4";
+var VERSION = "7.3.5";
 
 // src/call.ts
 async function callEndpoint(resolveRt, name, input, options) {