@vercel/flags-core 1.10.2 → 1.10.3

package/dist/{chunk-WVS63L4A.cjs → chunk-EGGUENXP.cjs}

@@ -559,7 +559,7 @@ function bulkEvaluate(flags, shared) {
 }
 
 // package.json
-var version = "1.10.2";
+var version = "1.10.3";
 
 // src/lib/report-value.ts
 function internalReportValue(key, value, data) {
@@ -1089,17 +1089,26 @@ function unauthorizedMessage(sourceProjectId) {
   }
   return `unauthorized (401): this deployment is not allowed to read the flags of project "${sourceProjectId}". Check that the project is connected. See https://vercel.com/docs/flags/vercel-flags/project-connections`;
 }
+var oidcTokenMessage = [
+  "@vercel/flags-core: Failed to get OIDC token.",
+  "Are you running in a Vercel Environment where OIDC tokens are available?",
+  "Did you mean to use an SDK Key instead? Use the environment variable FLAGS or pass it directly to the client."
+].join(" ");
+var missingCredentials = /`vc link|vercel login|^The 'x-vercel-oidc-token' header is missing from the request\.$/;
+var OidcTokenError = class extends Error {
+  constructor(cause) {
+    super(oidcTokenMessage, { cause });
+    this.name = "OidcTokenError";
+  }
+};
 async function getOidcToken() {
   try {
     return await _oidc.getVercelOidcToken.call(void 0, );
-  } catch (e7) {
-    throw new Error(
-      [
-        "@vercel/flags-core: Failed to get OIDC token.",
-        "Are you running in a Vercel Environment where OIDC tokens are available?",
-        "Did you mean to use an SDK Key instead? Use the environment variable FLAGS or pass it directly to the client."
-      ].join(" ")
-    );
+  } catch (error) {
+    if (error instanceof Error && missingCredentials.test(error.message)) {
+      throw new OidcTokenError(error);
+    }
+    throw new Error(oidcTokenMessage, { cause: error });
   }
 }
 function getProjectIdFromOidcToken(oidcToken) {
@@ -1229,7 +1238,7 @@ function getRuntimeIngest() {
   try {
     const context = globalThis[FLAGS_CONTEXT_SYMBOL];
     return typeof _optionalChain([context, 'optionalAccess', _34 => _34.ingest]) === "function" ? context.ingest : void 0;
-  } catch (e8) {
+  } catch (e7) {
     return void 0;
   }
 }
@@ -1247,7 +1256,7 @@ async function getEvaluatingOidcToken(auth) {
   if (!auth.sdkKey) return void 0;
   try {
     return await _oidc.getVercelOidcToken.call(void 0, );
-  } catch (e9) {
+  } catch (e8) {
     return void 0;
   }
 }
@@ -1359,7 +1368,7 @@ var Scheduler = (_class = class {
       })();
       try {
         this.scheduleTask(this.pending);
-      } catch (e10) {
+      } catch (e9) {
       }
       this.maxTimeout = setTimeout(
         () => this.resolveScheduledFlush("max_timeout"),
@@ -1586,7 +1595,7 @@ var UsageTracker = (_class4 = class {
       void flush.finally(() => this.inflightFlushes.delete(flush));
       try {
         _optionalChain([this, 'access', _37 => _37.waitUntil, 'optionalCall', _38 => _38(flush)]);
-      } catch (e11) {
+      } catch (e10) {
       }
     } else {
       this.scheduler.scheduleFlush();
@@ -1691,7 +1700,7 @@ function debug(clientName, event, details) {
   }
   try {
     console.debug("@vercel/flags-core", { event, clientName, ..._optionalChain([details, 'optionalCall', _40 => _40()]) });
-  } catch (e12) {
+  } catch (e11) {
   }
 }
 
@@ -2030,7 +2039,7 @@ var DatafileCache = (_class5 = class {
     });
     try {
       this.waitUntil(background);
-    } catch (e13) {
+    } catch (e12) {
     }
   }
   /** Resets storage, age, and the failure deadline so a restarted client begins clean. */
@@ -2143,7 +2152,8 @@ async function fetchDatafile(options) {
         return await Promise.race([fetchAttempt(attempt + 1), aborted]);
       } catch (error) {
         signal.throwIfAborted();
-        if (attempt === maxAttempts - 1 || error instanceof DatafileHttpError && !error.retryable) {
+        if (attempt === maxAttempts - 1 || error instanceof DatafileHttpError && !error.retryable || // Retrying will not produce a token that is not there.
+        error instanceof OidcTokenError) {
           throw error instanceof Error ? error : new Error("Unknown fetch error");
         }
         debug(options.clientName, "datafile.fetch.retry", () => ({
@@ -2561,7 +2571,7 @@ async function connectStream(config, callbacks) {
             rejectInit(error);
           }
           _optionalChain([onDisconnect, 'optionalCall', _97 => _97()]);
-          abortController.abort();
+          abortController.abort(error);
           break;
         }
         if (!response.ok) {
@@ -2597,7 +2607,7 @@ async function connectStream(config, callbacks) {
               let message;
               try {
                 message = JSON.parse(line);
-              } catch (e14) {
+              } catch (e13) {
                 console.warn(
                   "@vercel/flags-core: Failed to parse stream message, skipping"
                 );
@@ -2663,7 +2673,7 @@ async function connectStream(config, callbacks) {
         }
         if (error instanceof TokenResolutionError && !initialDataReceived) {
           rejectInit(error.cause);
-          abortController.abort();
+          abortController.abort(error.cause);
           break;
         }
         if (connectionAbort.signal.reason !== PING_TIMEOUT) {
@@ -2737,7 +2747,7 @@ var StreamSource = (_class9 = class extends TypedEmitter {
         if (this.abortController === abortController) {
           this.promise = void 0;
           this.abortController = void 0;
-          this.emit("exhausted");
+          this.emit("exhausted", abortController.signal.reason);
         }
       },
       { once: true }
@@ -2798,7 +2808,7 @@ var UNKNOWN_FRESHNESS = {
   assess: () => ({ status: "unknown" })
 };
 function isUnauthorizedError(error) {
-  if (error instanceof UnauthorizedError) {
+  if (error instanceof UnauthorizedError || error instanceof OidcTokenError) {
     return true;
   }
   if (!(error instanceof Error)) {
@@ -2833,8 +2843,9 @@ var Controller = (_class10 = class {
   // Build-step deduplication
   __init23() {this.buildDataPromise = null}
   __init24() {this.buildReadTracked = false}
-  // Suppresses usage tracking while the credential is rejected. Set on a 401
-  // from any source, cleared as soon as a source delivers data again.
+  // Suppresses usage tracking while the credential is rejected or no OIDC
+  // token is available. Set on an auth failure from any source, cleared as
+  // soon as a source delivers data again.
   __init25() {this.unauthorized = false}
   constructor(options) {;_class10.prototype.__init18.call(this);_class10.prototype.__init19.call(this);_class10.prototype.__init20.call(this);_class10.prototype.__init21.call(this);_class10.prototype.__init22.call(this);_class10.prototype.__init23.call(this);_class10.prototype.__init24.call(this);_class10.prototype.__init25.call(this);_class10.prototype.__init26.call(this);_class10.prototype.__init27.call(this);_class10.prototype.__init28.call(this);_class10.prototype.__init29.call(this);_class10.prototype.__init30.call(this);_class10.prototype.__init31.call(this);_class10.prototype.__init32.call(this);_class10.prototype.__init33.call(this);_class10.prototype.__init34.call(this);
     this.options = normalizeOptions(options);
@@ -2930,10 +2941,16 @@ var Controller = (_class10 = class {
       this.transition("degraded", "stream-disconnected");
     }
   }}
-  __init31() {this.onStreamExhausted = () => {
+  __init31() {this.onStreamExhausted = (reason) => {
     if (this.state !== "streaming" && this.state !== "degraded") {
       return;
     }
+    if (isUnauthorizedError(reason)) {
+      if (this.state === "streaming") {
+        this.transition("degraded", "stream-auth-failed");
+      }
+      return;
+    }
     void this.activateFallbackSource().catch(() => {
     });
   }}
@@ -2945,7 +2962,7 @@ var Controller = (_class10 = class {
     this.onSourceError(error);
     if (this.state === "polling" && isUnauthorizedError(error)) {
       this.pollingSource.stop();
-      this.transition("degraded", "polling-unauthorized");
+      this.transition("degraded", "polling-auth-failed");
     }
   }}
   // ---------------------------------------------------------------------------
@@ -3074,7 +3091,7 @@ var Controller = (_class10 = class {
       try {
         const bundled = await this.bundledSource.tryLoad();
         if (bundled) this.cache.seed(tagData({ ...bundled }, "bundled"));
-      } catch (e15) {
+      } catch (e14) {
       }
     }
     if (this.headerSource.isEnabled()) {
@@ -3259,7 +3276,7 @@ var Controller = (_class10 = class {
     }
     try {
       await this.cache.refresh();
-    } catch (e16) {
+    } catch (e15) {
       throw this.noDefinitionsError(
         ". Initialize the client or provide a datafile."
       );
@@ -3355,6 +3372,10 @@ var Controller = (_class10 = class {
         this.transition("degraded", "stream-still-connecting");
         return;
       }
+      if (outcome === "auth-failed") {
+        this.transition("degraded", "stream-auth-failed");
+        return;
+      }
     }
     if (this.options.polling.enabled) {
       if (this.state !== "polling") {
@@ -3387,7 +3408,7 @@ var Controller = (_class10 = class {
         return "connected";
       } catch (error) {
         this.noteUnauthorized(error);
-        return "failed";
+        return isUnauthorizedError(error) ? "auth-failed" : "failed";
       }
     }
     let timeoutId;
@@ -3421,7 +3442,7 @@ var Controller = (_class10 = class {
     } catch (error) {
       clearTimeout(timeoutId);
       this.noteUnauthorized(error);
-      return "failed";
+      return isUnauthorizedError(error) ? "auth-failed" : "failed";
     }
   }
   // ---------------------------------------------------------------------------
@@ -3572,7 +3593,7 @@ var Controller = (_class10 = class {
         this.acceptLastResortFetch(await this.fetchOnce());
         this.transition("degraded", "fetched-fallback");
         return;
-      } catch (e17) {
+      } catch (e16) {
       }
     }
     throw this.noDefinitionsError(". Bundled definitions not found.");
@@ -3617,7 +3638,7 @@ var Controller = (_class10 = class {
       let fetched;
       try {
         fetched = await this.fetchOnce();
-      } catch (e18) {
+      } catch (e17) {
       }
       if (fetched) {
         const remote = this.acceptLastResortFetch(fetched);
@@ -3725,7 +3746,7 @@ function setCacheLife() {
   try {
     _cache.cacheLife.call(void 0, { revalidate: 0, expire: 0 });
     _cache.cacheLife.call(void 0, { stale: 60 });
-  } catch (e19) {
+  } catch (e18) {
   }
 }
 var cachedFns = {
@@ -3775,4 +3796,4 @@ var { flagsClient, resetDefaultFlagsClient, createClient } = make(
 
 
 exports.ResolutionReason = ResolutionReason; exports.evaluate = evaluate; exports.FallbackNotFoundError = FallbackNotFoundError; exports.FallbackEntryNotFoundError = FallbackEntryNotFoundError; exports.Controller = Controller; exports.flagsClient = flagsClient; exports.resetDefaultFlagsClient = resetDefaultFlagsClient; exports.createClient = createClient;
-//# sourceMappingURL=chunk-WVS63L4A.cjs.map
+//# sourceMappingURL=chunk-EGGUENXP.cjs.map