@spotify-confidence/openfeature-server-provider-local 0.15.2 → 0.16.0

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+## [0.16.0](https://github.com/spotify/confidence-resolver/compare/openfeature-provider-js-v0.15.2...openfeature-provider-js-v0.16.0) (2026-07-08)
+
+
+### Features
+
+* **js:** decrypt CDN state on host instead of in WASM ([#475](https://github.com/spotify/confidence-resolver/issues/475)) ([99d0f29](https://github.com/spotify/confidence-resolver/commit/99d0f29c60161eb2840d45949b655909a1434973))
+* **js:** publish flag evaluations to window global for session recording ([#445](https://github.com/spotify/confidence-resolver/issues/445)) ([475195b](https://github.com/spotify/confidence-resolver/commit/475195bb6ce3a4c274399193d50cc926bf12d4ba))
+* **js:** support encrypted CDN resolver state ([#457](https://github.com/spotify/confidence-resolver/issues/457)) ([eb37c72](https://github.com/spotify/confidence-resolver/commit/eb37c72d8f22619abb50cbae8fede8ce74c87ea1))
+
+
+### Bug Fixes
+
+* **providers:** flush logs before state update to reduce WASM memory growth ([#469](https://github.com/spotify/confidence-resolver/issues/469)) ([633b269](https://github.com/spotify/confidence-resolver/commit/633b2695e50e7ffff5a3d3b0140fe7bb200ceead))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * rust-guest bumped from 0.2.5 to 0.3.0
+
 ## [0.15.2](https://github.com/spotify/confidence-resolver/compare/openfeature-provider-js-v0.15.1...openfeature-provider-js-v0.15.2) (2026-06-17)
 
 

package/dist/client.js

@@ -146,6 +146,14 @@ function evaluateAssignment(resolvedValue, defaultValue, path) {
 	}
 	return resolvedValue;
 }
+function publishFlagEvaluation(name, variant) {
+	if (typeof window === "undefined") return;
+	window.__confidence ??= {};
+	const confidence = window.__confidence;
+	confidence.flags ??= {};
+	if (confidence.flags[name]?.variant === variant) return;
+	confidence.flags[name] = { variant };
+}
 const ConfidenceContext = createContext(null);
 const warnedFlags = /* @__PURE__ */ new Set();
 function ConfidenceClientProvider({ bundle, apply, children }) {
@@ -178,10 +186,12 @@ function useFlagDetails(flagKey, defaultValue, options) {
 	const autoExpose = options?.expose !== false;
 	const doExpose = useCallback(() => {
 		if (resolution.shouldApply) ctx?.apply(baseFlagName);
+		if (resolution.variant) publishFlagEvaluation(`flags/${baseFlagName}`, resolution.variant);
 	}, [
 		ctx,
 		baseFlagName,
-		resolution.shouldApply
+		resolution.shouldApply,
+		resolution.variant
 	]);
 	useEffect(() => {
 		if (autoExpose) doExpose();

package/dist/index.fetch.d.ts

@@ -486,6 +486,8 @@ type FlagBundle$1 = FlagBundle;
 interface SnapshotConfig {}
 interface ProviderOptions {
   flagClientSecret: string;
+  /** Hex-encoded AES-256 encryption key for decrypting CDN state. */
+  encryptionKey?: string;
   initializeTimeout?: number;
   /** Interval in milliseconds between state polling updates. Defaults to 30000ms. */
   stateUpdateInterval?: number;

package/dist/index.fetch.js

@@ -1434,7 +1434,7 @@ function isObject(value) {
 function isSet$3(value) {
 	return value !== null && value !== void 0;
 }
-const VERSION = "0.15.2";
+const VERSION = "0.16.0";
 const NOOP_LOG_FN = Object.assign(() => {}, { enabled: false });
 const debugBackend = loadDebug();
 const logger$2 = new class LoggerImpl {
@@ -1586,6 +1586,12 @@ function base64FromBytes$1(arr) {
 		return globalThis.btoa(bin.join(""));
 	}
 }
+function hexToBytes(hex) {
+	if (hex.length % 2 !== 0) throw new Error("Hex string must have an even number of characters");
+	const bytes = new Uint8Array(hex.length / 2);
+	for (let i = 0; i < hex.length; i += 2) bytes[i / 2] = parseInt(hex.substring(i, i + 2), 16);
+	return bytes;
+}
 const logger$3 = logger$2.getLogger("fetch");
 let Fetch;
 (function(_Fetch) {
@@ -2879,6 +2885,7 @@ var ConfidenceServerProviderLocal = class ConfidenceServerProviderLocal {
 		else this.materializationStore = null;
 	}
 	async initialize(context) {
+		if (!this.options.encryptionKey) logger$1.warn("No encryptionKey provided. Falling back to unencrypted state. An encryption key will be required in an upcoming version.");
 		const signal = this.main.signal;
 		const initialUpdateSignal = AbortSignal.any([signal, timeoutSignal(this.options.initializeTimeout ?? DEFAULT_INITIALIZE_TIMEOUT)]);
 		try {
@@ -2991,7 +2998,9 @@ var ConfidenceServerProviderLocal = class ConfidenceServerProviderLocal {
 		}
 	}
 	async updateState(signal) {
-		const cdnUrl = `https://confidence-resolver-state-cdn.spotifycdn.com/${await sha256Hex(this.options.flagClientSecret)}`;
+		const hashHex = await sha256Hex(this.options.flagClientSecret);
+		const { encryptionKey } = this.options;
+		const cdnUrl = `https://confidence-resolver-state-cdn.spotifycdn.com/${encryptionKey ? `${hashHex}.enc` : hashHex}`;
 		const headers = new Headers();
 		if (this.stateEtag) headers.set("If-None-Match", this.stateEtag);
 		const resp = await this.fetch(cdnUrl, {
@@ -3002,11 +3011,16 @@ var ConfidenceServerProviderLocal = class ConfidenceServerProviderLocal {
 		if (!resp.ok) throw new Error(`Failed to fetch state: ${resp.status} ${resp.statusText}`);
 		this.stateEtag = resp.headers.get("etag");
 		const bytes = new Uint8Array(await resp.arrayBuffer());
-		const stateRequest = SetResolverStateRequest.decode(bytes);
-		stateRequest.sdk = {
+		const sdk = {
 			id: SdkId.SDK_ID_JS_LOCAL_SERVER_PROVIDER,
 			version: VERSION
 		};
+		try {
+			await this.flush(signal);
+		} catch {}
+		const plaintext = encryptionKey ? await decryptAesGcm(bytes, hexToBytes(encryptionKey)) : bytes;
+		const stateRequest = SetResolverStateRequest.decode(plaintext);
+		stateRequest.sdk = sdk;
 		this.resolver.setResolverState(stateRequest);
 	}
 	async flush(signal) {
@@ -3087,6 +3101,18 @@ var ConfidenceServerProviderLocal = class ConfidenceServerProviderLocal {
 		this.resolver.applyFlags(request);
 	}
 };
+async function decryptAesGcm(data, rawKey) {
+	const NONCE_LEN = 12;
+	if (data.length < NONCE_LEN) throw new Error("Encrypted state too short (missing nonce)");
+	const iv = data.buffer.slice(data.byteOffset, data.byteOffset + NONCE_LEN);
+	const ciphertext = data.buffer.slice(data.byteOffset + NONCE_LEN, data.byteOffset + data.byteLength);
+	const key = await crypto.subtle.importKey("raw", rawKey.buffer, "AES-GCM", false, ["decrypt"]);
+	const plaintext = await crypto.subtle.decrypt({
+		name: "AES-GCM",
+		iv
+	}, key, ciphertext);
+	return new Uint8Array(plaintext);
+}
 function reasonStringToEnum(reason) {
 	switch (reason) {
 		case "MATCH": return ResolveReason.RESOLVE_REASON_MATCH;

package/dist/index.inlined.d.ts

@@ -486,6 +486,8 @@ type FlagBundle$1 = FlagBundle;
 interface SnapshotConfig {}
 interface ProviderOptions {
   flagClientSecret: string;
+  /** Hex-encoded AES-256 encryption key for decrypting CDN state. */
+  encryptionKey?: string;
   initializeTimeout?: number;
   /** Interval in milliseconds between state polling updates. Defaults to 30000ms. */
   stateUpdateInterval?: number;