@vercel/flags-core 1.10.2 → 1.10.3

package/dist/{chunk-7A7RG7ST.js → chunk-OIOT7N7A.js}

@@ -559,7 +559,7 @@ function bulkEvaluate(flags, shared) {
 }
 
 // package.json
-var version = "1.10.2";
+var version = "1.10.3";
 
 // src/lib/report-value.ts
 function internalReportValue(key, value, data) {
@@ -1089,17 +1089,26 @@ function unauthorizedMessage(sourceProjectId) {
   }
   return `unauthorized (401): this deployment is not allowed to read the flags of project "${sourceProjectId}". Check that the project is connected. See https://vercel.com/docs/flags/vercel-flags/project-connections`;
 }
+var oidcTokenMessage = [
+  "@vercel/flags-core: Failed to get OIDC token.",
+  "Are you running in a Vercel Environment where OIDC tokens are available?",
+  "Did you mean to use an SDK Key instead? Use the environment variable FLAGS or pass it directly to the client."
+].join(" ");
+var missingCredentials = /`vc link|vercel login|^The 'x-vercel-oidc-token' header is missing from the request\.$/;
+var OidcTokenError = class extends Error {
+  constructor(cause) {
+    super(oidcTokenMessage, { cause });
+    this.name = "OidcTokenError";
+  }
+};
 async function getOidcToken() {
   try {
     return await getVercelOidcToken();
-  } catch {
-    throw new Error(
-      [
-        "@vercel/flags-core: Failed to get OIDC token.",
-        "Are you running in a Vercel Environment where OIDC tokens are available?",
-        "Did you mean to use an SDK Key instead? Use the environment variable FLAGS or pass it directly to the client."
-      ].join(" ")
-    );
+  } catch (error) {
+    if (error instanceof Error && missingCredentials.test(error.message)) {
+      throw new OidcTokenError(error);
+    }
+    throw new Error(oidcTokenMessage, { cause: error });
   }
 }
 function getProjectIdFromOidcToken(oidcToken) {
@@ -2143,7 +2152,8 @@ async function fetchDatafile(options) {
         return await Promise.race([fetchAttempt(attempt + 1), aborted]);
       } catch (error) {
         signal.throwIfAborted();
-        if (attempt === maxAttempts - 1 || error instanceof DatafileHttpError && !error.retryable) {
+        if (attempt === maxAttempts - 1 || error instanceof DatafileHttpError && !error.retryable || // Retrying will not produce a token that is not there.
+        error instanceof OidcTokenError) {
           throw error instanceof Error ? error : new Error("Unknown fetch error");
         }
         debug(options.clientName, "datafile.fetch.retry", () => ({
@@ -2561,7 +2571,7 @@ async function connectStream(config, callbacks) {
             rejectInit(error);
           }
           onDisconnect?.();
-          abortController.abort();
+          abortController.abort(error);
           break;
         }
         if (!response.ok) {
@@ -2663,7 +2673,7 @@ async function connectStream(config, callbacks) {
         }
         if (error instanceof TokenResolutionError && !initialDataReceived) {
           rejectInit(error.cause);
-          abortController.abort();
+          abortController.abort(error.cause);
           break;
         }
         if (connectionAbort.signal.reason !== PING_TIMEOUT) {
@@ -2737,7 +2747,7 @@ var StreamSource = class extends TypedEmitter {
         if (this.abortController === abortController) {
           this.promise = void 0;
           this.abortController = void 0;
-          this.emit("exhausted");
+          this.emit("exhausted", abortController.signal.reason);
         }
       },
       { once: true }
@@ -2798,7 +2808,7 @@ var UNKNOWN_FRESHNESS = {
   assess: () => ({ status: "unknown" })
 };
 function isUnauthorizedError(error) {
-  if (error instanceof UnauthorizedError) {
+  if (error instanceof UnauthorizedError || error instanceof OidcTokenError) {
     return true;
   }
   if (!(error instanceof Error)) {
@@ -2833,8 +2843,9 @@ var Controller = class {
   // Build-step deduplication
   buildDataPromise = null;
   buildReadTracked = false;
-  // Suppresses usage tracking while the credential is rejected. Set on a 401
-  // from any source, cleared as soon as a source delivers data again.
+  // Suppresses usage tracking while the credential is rejected or no OIDC
+  // token is available. Set on an auth failure from any source, cleared as
+  // soon as a source delivers data again.
   unauthorized = false;
   constructor(options) {
     this.options = normalizeOptions(options);
@@ -2930,10 +2941,16 @@ var Controller = class {
       this.transition("degraded", "stream-disconnected");
     }
   };
-  onStreamExhausted = () => {
+  onStreamExhausted = (reason) => {
     if (this.state !== "streaming" && this.state !== "degraded") {
       return;
     }
+    if (isUnauthorizedError(reason)) {
+      if (this.state === "streaming") {
+        this.transition("degraded", "stream-auth-failed");
+      }
+      return;
+    }
     void this.activateFallbackSource().catch(() => {
     });
   };
@@ -2945,7 +2962,7 @@ var Controller = class {
     this.onSourceError(error);
     if (this.state === "polling" && isUnauthorizedError(error)) {
       this.pollingSource.stop();
-      this.transition("degraded", "polling-unauthorized");
+      this.transition("degraded", "polling-auth-failed");
     }
   };
   // ---------------------------------------------------------------------------
@@ -3355,6 +3372,10 @@ var Controller = class {
         this.transition("degraded", "stream-still-connecting");
         return;
       }
+      if (outcome === "auth-failed") {
+        this.transition("degraded", "stream-auth-failed");
+        return;
+      }
     }
     if (this.options.polling.enabled) {
       if (this.state !== "polling") {
@@ -3387,7 +3408,7 @@ var Controller = class {
         return "connected";
       } catch (error) {
         this.noteUnauthorized(error);
-        return "failed";
+        return isUnauthorizedError(error) ? "auth-failed" : "failed";
       }
     }
     let timeoutId;
@@ -3421,7 +3442,7 @@ var Controller = class {
     } catch (error) {
       clearTimeout(timeoutId);
       this.noteUnauthorized(error);
-      return "failed";
+      return isUnauthorizedError(error) ? "auth-failed" : "failed";
     }
   }
   // ---------------------------------------------------------------------------
@@ -3775,4 +3796,4 @@ export {
   resetDefaultFlagsClient,
   createClient
 };
-//# sourceMappingURL=chunk-7A7RG7ST.js.map
+//# sourceMappingURL=chunk-OIOT7N7A.js.map