@vercel/flags-core 1.10.1 → 1.10.3

package/dist/{chunk-ZY7CHPJG.js → chunk-OIOT7N7A.js}

@@ -559,7 +559,7 @@ function bulkEvaluate(flags, shared) {
 }
 
 // package.json
-var version = "1.10.1";
+var version = "1.10.3";
 
 // src/lib/report-value.ts
 function internalReportValue(key, value, data) {
@@ -1087,19 +1087,28 @@ function unauthorizedMessage(sourceProjectId) {
   if (!sourceProjectId) {
     return "unauthorized (401)";
   }
-  return `unauthorized (401): this deployment is not allowed to read the flags of project "${sourceProjectId}". Check that the project is connected.`;
+  return `unauthorized (401): this deployment is not allowed to read the flags of project "${sourceProjectId}". Check that the project is connected. See https://vercel.com/docs/flags/vercel-flags/project-connections`;
 }
+var oidcTokenMessage = [
+  "@vercel/flags-core: Failed to get OIDC token.",
+  "Are you running in a Vercel Environment where OIDC tokens are available?",
+  "Did you mean to use an SDK Key instead? Use the environment variable FLAGS or pass it directly to the client."
+].join(" ");
+var missingCredentials = /`vc link|vercel login|^The 'x-vercel-oidc-token' header is missing from the request\.$/;
+var OidcTokenError = class extends Error {
+  constructor(cause) {
+    super(oidcTokenMessage, { cause });
+    this.name = "OidcTokenError";
+  }
+};
 async function getOidcToken() {
   try {
     return await getVercelOidcToken();
-  } catch {
-    throw new Error(
-      [
-        "@vercel/flags-core: Failed to get OIDC token.",
-        "Are you running in a Vercel Environment where OIDC tokens are available?",
-        "Did you mean to use an SDK Key instead? Use the environment variable FLAGS or pass it directly to the client."
-      ].join(" ")
-    );
+  } catch (error) {
+    if (error instanceof Error && missingCredentials.test(error.message)) {
+      throw new OidcTokenError(error);
+    }
+    throw new Error(oidcTokenMessage, { cause: error });
   }
 }
 function getProjectIdFromOidcToken(oidcToken) {
@@ -1142,13 +1151,24 @@ var Authentication = class {
     }
     return await getOidcToken();
   }
-  async resolveBundledDefinitionsLookup() {
+  getStaticBundledDefinitionsLookup() {
     if (this.sdkKey) {
       return { type: "sdk-key", sdkKey: this.sdkKey };
     }
     if (this.sourceProjectId) {
       return { type: "project-id", projectId: this.sourceProjectId };
     }
+    const projectId = process.env.VERCEL_PROJECT_ID;
+    if (projectId) {
+      return { type: "project-id", projectId };
+    }
+    return void 0;
+  }
+  async resolveBundledDefinitionsLookup() {
+    const lookup = this.getStaticBundledDefinitionsLookup();
+    if (lookup) {
+      return lookup;
+    }
     const oidcToken = await this.resolveToken();
     return {
       type: "project-id",
@@ -1658,6 +1678,13 @@ var BundledSource = class {
     }
     return void 0;
   }
+  /**
+   * Starts reading bundled definitions without waiting for the result.
+   */
+  preload() {
+    this.getResult().catch(() => {
+    });
+  }
   getResult() {
     if (!this.promise) {
       this.promise = this.options.readBundledDefinitions(this.options.auth);
@@ -2125,7 +2152,8 @@ async function fetchDatafile(options) {
         return await Promise.race([fetchAttempt(attempt + 1), aborted]);
       } catch (error) {
         signal.throwIfAborted();
-        if (attempt === maxAttempts - 1 || error instanceof DatafileHttpError && !error.retryable) {
+        if (attempt === maxAttempts - 1 || error instanceof DatafileHttpError && !error.retryable || // Retrying will not produce a token that is not there.
+        error instanceof OidcTokenError) {
           throw error instanceof Error ? error : new Error("Unknown fetch error");
         }
         debug(options.clientName, "datafile.fetch.retry", () => ({
@@ -2543,7 +2571,7 @@ async function connectStream(config, callbacks) {
             rejectInit(error);
           }
           onDisconnect?.();
-          abortController.abort();
+          abortController.abort(error);
           break;
         }
         if (!response.ok) {
@@ -2645,7 +2673,7 @@ async function connectStream(config, callbacks) {
         }
         if (error instanceof TokenResolutionError && !initialDataReceived) {
           rejectInit(error.cause);
-          abortController.abort();
+          abortController.abort(error.cause);
           break;
         }
         if (connectionAbort.signal.reason !== PING_TIMEOUT) {
@@ -2719,7 +2747,7 @@ var StreamSource = class extends TypedEmitter {
         if (this.abortController === abortController) {
           this.promise = void 0;
           this.abortController = void 0;
-          this.emit("exhausted");
+          this.emit("exhausted", abortController.signal.reason);
         }
       },
       { once: true }
@@ -2780,7 +2808,7 @@ var UNKNOWN_FRESHNESS = {
   assess: () => ({ status: "unknown" })
 };
 function isUnauthorizedError(error) {
-  if (error instanceof UnauthorizedError) {
+  if (error instanceof UnauthorizedError || error instanceof OidcTokenError) {
     return true;
   }
   if (!(error instanceof Error)) {
@@ -2815,8 +2843,9 @@ var Controller = class {
   // Build-step deduplication
   buildDataPromise = null;
   buildReadTracked = false;
-  // Suppresses usage tracking while the credential is rejected. Set on a 401
-  // from any source, cleared as soon as a source delivers data again.
+  // Suppresses usage tracking while the credential is rejected or no OIDC
+  // token is available. Set on an auth failure from any source, cleared as
+  // soon as a source delivers data again.
   unauthorized = false;
   constructor(options) {
     this.options = normalizeOptions(options);
@@ -2853,6 +2882,9 @@ var Controller = class {
       auth: this.options.auth,
       readBundledDefinitions
     });
+    if (!this.options.datafile && this.options.auth.getStaticBundledDefinitionsLookup()) {
+      this.bundledSource.preload();
+    }
     this.wireSourceEvents();
     if (this.options.datafile) {
       this.cache.seed(tagData({ ...this.options.datafile }, "provided"));
@@ -2909,10 +2941,16 @@ var Controller = class {
       this.transition("degraded", "stream-disconnected");
     }
   };
-  onStreamExhausted = () => {
+  onStreamExhausted = (reason) => {
     if (this.state !== "streaming" && this.state !== "degraded") {
       return;
     }
+    if (isUnauthorizedError(reason)) {
+      if (this.state === "streaming") {
+        this.transition("degraded", "stream-auth-failed");
+      }
+      return;
+    }
     void this.activateFallbackSource().catch(() => {
     });
   };
@@ -2924,7 +2962,7 @@ var Controller = class {
     this.onSourceError(error);
     if (this.state === "polling" && isUnauthorizedError(error)) {
       this.pollingSource.stop();
-      this.transition("degraded", "polling-unauthorized");
+      this.transition("degraded", "polling-auth-failed");
     }
   };
   // ---------------------------------------------------------------------------
@@ -3334,6 +3372,10 @@ var Controller = class {
         this.transition("degraded", "stream-still-connecting");
         return;
       }
+      if (outcome === "auth-failed") {
+        this.transition("degraded", "stream-auth-failed");
+        return;
+      }
     }
     if (this.options.polling.enabled) {
       if (this.state !== "polling") {
@@ -3366,7 +3408,7 @@ var Controller = class {
         return "connected";
       } catch (error) {
         this.noteUnauthorized(error);
-        return "failed";
+        return isUnauthorizedError(error) ? "auth-failed" : "failed";
       }
     }
     let timeoutId;
@@ -3400,7 +3442,7 @@ var Controller = class {
     } catch (error) {
       clearTimeout(timeoutId);
       this.noteUnauthorized(error);
-      return "failed";
+      return isUnauthorizedError(error) ? "auth-failed" : "failed";
     }
   }
   // ---------------------------------------------------------------------------
@@ -3754,4 +3796,4 @@ export {
   resetDefaultFlagsClient,
   createClient
 };
-//# sourceMappingURL=chunk-ZY7CHPJG.js.map
+//# sourceMappingURL=chunk-OIOT7N7A.js.map