@vercel/flags-core 1.9.0-ea4d7de-20260922121332 → 1.9.0

package/dist/{chunk-L6QJOXJN.cjs → chunk-PGKH4XQ7.cjs}

@@ -1,4 +1,4 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } async function _asyncNullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return await rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class; var _class2; var _class3; var _class4; var _class5; var _class6; var _class7;var __defProp = Object.defineProperty;
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class; var _class2; var _class3; var _class4; var _class5; var _class6;var __defProp = Object.defineProperty;
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
@@ -73,7 +73,7 @@ function getSplitBoundaries(outcome) {
 function getCompiledRegex(rhs) {
   const cached = compiledRegexCache.get(rhs);
   if (cached) return cached;
-  const compiled = new RegExp(rhs.pattern, rhs.flags.replace(/[gy]/, ""));
+  const compiled = new RegExp(rhs.pattern, rhs.flags.replace(/[gy]/g, ""));
   compiledRegexCache.set(rhs, compiled);
   return compiled;
 }
@@ -450,7 +450,7 @@ function resolveOutcome(params, outcome) {
           break;
         }
       }
-      if (exhausted) currentPromille = PROMILLE_SCALE;
+      if (exhausted) currentPromille = _nullishCoalesce(outcome.finalPromille, () => ( PROMILLE_SCALE));
       if (currentPromille <= 0) {
         return {
           ...rollFromVariant,
@@ -576,7 +576,7 @@ function bulkEvaluate(flags, shared) {
 }
 
 // package.json
-var version = "1.9.0-ea4d7de-20260922121332";
+var version = "1.9.0";
 
 // src/lib/report-value.ts
 function internalReportValue(key, value, data) {
@@ -1040,6 +1040,126 @@ async function readBundledDefinitions(auth) {
 // src/utils/ingest.ts
 var _oidc = require('@vercel/oidc');
 
+// src/controller/auth.ts
+
+
+// src/utils/sdk-keys.ts
+var SDK_KEY_REGEX = /^vf_(?:server|client)_/;
+function isValidSdkKey(value) {
+  return SDK_KEY_REGEX.test(value);
+}
+var PROJECT_ID_REGEX = /^[A-Za-z0-9_]{1,64}$/;
+function isValidProjectId(value) {
+  return PROJECT_ID_REGEX.test(value);
+}
+function parseFlagsConnectionString(text) {
+  if (SDK_KEY_REGEX.test(text)) return { sdkKey: text, projectId: null };
+  if (!text.startsWith("flags:")) return null;
+  try {
+    const params = new URLSearchParams(text.slice(6));
+    return {
+      sdkKey: params.get("sdkKey") || null,
+      projectId: params.get("projectId") || null
+    };
+  } catch (e5) {
+    return null;
+  }
+}
+
+// src/controller/auth.ts
+var SOURCE_PROJECT_HEADER = "X-Vercel-Flags-Project-Id";
+function authHeaders(token, sourceProjectId) {
+  return {
+    Authorization: `Bearer ${token}`,
+    ...sourceProjectId ? { [SOURCE_PROJECT_HEADER]: sourceProjectId } : null
+  };
+}
+function unauthorizedMessage(sourceProjectId) {
+  if (!sourceProjectId) return "unauthorized (401)";
+  return `unauthorized (401): this deployment is not allowed to read the flags of project "${sourceProjectId}". Check the connection string and that the project is connected.`;
+}
+async function getOidcToken() {
+  try {
+    return await _oidc.getVercelOidcToken.call(void 0, );
+  } catch (e6) {
+    throw new Error(
+      [
+        "@vercel/flags-core: Failed to get OIDC token.",
+        "Are you running in a Vercel Environment where OIDC tokens are available?",
+        "Did you mean to use an SDK Key instead? Use the environment variable FLAGS or pass it directly to the client."
+      ].join(" ")
+    );
+  }
+}
+function getProjectIdFromOidcToken(oidcToken) {
+  const tokenParts = oidcToken.split(".");
+  if (tokenParts.length !== 3 || !tokenParts[1]) {
+    throw new Error("@vercel/flags-core: Invalid OIDC token");
+  }
+  const payload = JSON.parse(
+    Buffer.from(tokenParts[1], "base64url").toString("utf8")
+  );
+  if (typeof payload.project_id !== "string" || !payload.project_id) {
+    throw new Error(
+      "@vercel/flags-core: Missing project_id claim in OIDC token"
+    );
+  }
+  return payload.project_id;
+}
+var Authentication = class {
+  
+  
+  constructor(sdkKeyOrConnectionString) {
+    if (sdkKeyOrConnectionString !== void 0) {
+      if (typeof sdkKeyOrConnectionString !== "string") {
+        throw new Error(
+          `@vercel/flags-core: Invalid sdkKey. Expected string, got ${typeof sdkKeyOrConnectionString}`
+        );
+      }
+      const parsed = parseFlagsConnectionString(sdkKeyOrConnectionString);
+      if (_optionalChain([parsed, 'optionalAccess', _31 => _31.sdkKey]) && parsed.projectId) {
+        throw new Error(
+          "@vercel/flags-core: A connection string must contain either sdkKey or projectId, not both"
+        );
+      }
+      if (_optionalChain([parsed, 'optionalAccess', _32 => _32.sdkKey])) {
+        if (!isValidSdkKey(parsed.sdkKey)) {
+          throw new Error("@vercel/flags-core: Missing sdkKey");
+        }
+        this.sdkKey = parsed.sdkKey;
+      } else if (_optionalChain([parsed, 'optionalAccess', _33 => _33.projectId])) {
+        if (!isValidProjectId(parsed.projectId)) {
+          throw new Error(
+            "@vercel/flags-core: Invalid projectId in connection string"
+          );
+        }
+        this.sourceProjectId = parsed.projectId;
+      } else {
+        throw new Error("@vercel/flags-core: Missing sdkKey");
+      }
+    }
+  }
+  async resolveToken() {
+    if (this.sdkKey) {
+      return this.sdkKey;
+    }
+    return await getOidcToken();
+  }
+  async resolveBundledDefinitionsLookup() {
+    if (this.sdkKey) {
+      return { type: "sdk-key", sdkKey: this.sdkKey };
+    }
+    if (this.sourceProjectId) {
+      return { type: "project-id", projectId: this.sourceProjectId };
+    }
+    const oidcToken = await this.resolveToken();
+    return {
+      type: "project-id",
+      projectId: getProjectIdFromOidcToken(oidcToken)
+    };
+  }
+};
+
 // src/utils/backoff.ts
 var DEFAULT_BASE_MS = 250;
 var DEFAULT_CAP_MS = 5e3;
@@ -1055,12 +1175,26 @@ function getJitteredWaitMs(baseMs, ratio) {
   return Math.floor(min + Math.random() * span);
 }
 
+// src/utils/runtime-ingest.ts
+var FLAGS_CONTEXT_SYMBOL = /* @__PURE__ */ Symbol.for("@vercel/flags-context");
+function getRuntimeIngestFor(auth) {
+  return auth.sourceProjectId ? void 0 : getRuntimeIngest();
+}
+function getRuntimeIngest() {
+  try {
+    const context = globalThis[FLAGS_CONTEXT_SYMBOL];
+    return typeof _optionalChain([context, 'optionalAccess', _34 => _34.ingest]) === "function" ? context.ingest : void 0;
+  } catch (e7) {
+    return void 0;
+  }
+}
+
 // src/utils/ingest.ts
 var MAX_RETRIES = 3;
 var MAX_EVENTS_PER_REQUEST = 2e3;
 var EVALUATING_OIDC_TOKEN_HEADER = "X-Vercel-Flags-OIDC-Token";
 var FLUSH_REASON_HEADER = "X-Vercel-Flags-Flush-Reason";
-var isDebugMode = _optionalChain([process, 'access', _31 => _31.env, 'access', _32 => _32.DEBUG, 'optionalAccess', _33 => _33.includes, 'call', _34 => _34("@vercel/flags-core")]);
+var isDebugMode = _optionalChain([process, 'access', _35 => _35.env, 'access', _36 => _36.DEBUG, 'optionalAccess', _37 => _37.includes, 'call', _38 => _38("@vercel/flags-core")]);
 var debugLog = (...args) => {
   if (!isDebugMode) return;
   console.log(...args);
@@ -1069,7 +1203,7 @@ async function getEvaluatingOidcToken(auth) {
   if (!auth.sdkKey) return void 0;
   try {
     return await _oidc.getVercelOidcToken.call(void 0, );
-  } catch (e5) {
+  } catch (e8) {
     return void 0;
   }
 }
@@ -1078,7 +1212,7 @@ async function getIngestHeaders(options, flushReason) {
   const evaluatingOidcToken = await getEvaluatingOidcToken(options.auth);
   return {
     "Content-Type": "application/json",
-    Authorization: `Bearer ${token}`,
+    ...authHeaders(token, options.auth.sourceProjectId),
     "User-Agent": `VercelFlagsCore/${version}`,
     [FLUSH_REASON_HEADER]: flushReason,
     ..._nullishCoalesce(options.metricEnvironment, () => ( process.env.VERCEL_ENV)) ? {
@@ -1088,8 +1222,28 @@ async function getIngestHeaders(options, flushReason) {
     ...isDebugMode ? { "x-vercel-debug-ingest": "1" } : null
   };
 }
+function getRuntimeIngestHeaders(options, flushReason) {
+  return {
+    "Content-Type": "application/json",
+    ...options.auth.sdkKey ? { Authorization: `Bearer ${options.auth.sdkKey}` } : null,
+    "User-Agent": `VercelFlagsCore/${version}`,
+    [FLUSH_REASON_HEADER]: flushReason,
+    ..._nullishCoalesce(options.metricEnvironment, () => ( process.env.VERCEL_ENV)) ? {
+      "X-Vercel-Env": _nullishCoalesce(options.metricEnvironment, () => ( process.env.VERCEL_ENV))
+    } : null,
+    ...isDebugMode ? { "x-vercel-debug-ingest": "1" } : null
+  };
+}
 async function sendIngestEvents(options, events, flushId, flushReason) {
-  const eventsToSend = events.map((event) => event.ingestEvent());
+  let eventsToSend = events.map((event) => event.ingestEvent());
+  const runtimeIngest = getRuntimeIngestFor(options.auth);
+  if (runtimeIngest) {
+    const headers = getRuntimeIngestHeaders(options, flushReason);
+    eventsToSend = eventsToSend.filter(
+      (event) => !runtimeIngest({ headers, body: [event] })
+    );
+    if (eventsToSend.length === 0) return;
+  }
   for (let i = 0; i < eventsToSend.length; i += MAX_EVENTS_PER_REQUEST) {
     await sendIngestChunk(
       options,
@@ -1139,7 +1293,7 @@ var SYMBOL_FOR_REQ_CONTEXT = /* @__PURE__ */ Symbol.for("@vercel/request-context
 var fromSymbol = globalThis;
 function getRequestContext() {
   try {
-    const ctx = _optionalChain([fromSymbol, 'access', _35 => _35[SYMBOL_FOR_REQ_CONTEXT], 'optionalAccess', _36 => _36.get, 'optionalCall', _37 => _37()]);
+    const ctx = _optionalChain([fromSymbol, 'access', _39 => _39[SYMBOL_FOR_REQ_CONTEXT], 'optionalAccess', _40 => _40.get, 'optionalCall', _41 => _41()]);
     if (ctx && Object.hasOwn(ctx, "headers")) {
       return {
         ctx,
@@ -1147,7 +1301,7 @@ function getRequestContext() {
       };
     }
     return { ctx, headers: void 0 };
-  } catch (e6) {
+  } catch (e9) {
     return { ctx: void 0, headers: void 0 };
   }
 }
@@ -1179,7 +1333,7 @@ var Scheduler = (_class = class {
       })();
       try {
         this.scheduleTask(this.pending);
-      } catch (e7) {
+      } catch (e10) {
       }
       this.maxTimeout = setTimeout(
         () => this.resolveScheduledFlush("max_timeout"),
@@ -1206,7 +1360,7 @@ var Scheduler = (_class = class {
   }
   resolveScheduledFlush(reason) {
     this.clearTimeouts();
-    _optionalChain([this, 'access', _38 => _38.resolveWait, 'optionalCall', _39 => _39(reason)]);
+    _optionalChain([this, 'access', _42 => _42.resolveWait, 'optionalCall', _43 => _43(reason)]);
   }
   reset() {
     this.pending = null;
@@ -1325,11 +1479,14 @@ var UsageTracker = (_class4 = class {
   __init7() {this.flushCount = 0}
   
   
-  __init8() {this.trackedRequests = /* @__PURE__ */ new WeakSet()}
-  __init9() {this.readEvents = []}
-  __init10() {this.evaluationEvents = /* @__PURE__ */ new Map()}
-  constructor(options) {;_class4.prototype.__init7.call(this);_class4.prototype.__init8.call(this);_class4.prototype.__init9.call(this);_class4.prototype.__init10.call(this);
+  
+  __init8() {this.inflightFlushes = /* @__PURE__ */ new Set()}
+  __init9() {this.trackedRequests = /* @__PURE__ */ new WeakSet()}
+  __init10() {this.readEvents = []}
+  __init11() {this.evaluationEvents = /* @__PURE__ */ new Map()}
+  constructor(options) {;_class4.prototype.__init7.call(this);_class4.prototype.__init8.call(this);_class4.prototype.__init9.call(this);_class4.prototype.__init10.call(this);_class4.prototype.__init11.call(this);
     this.options = options;
+    this.waitUntil = options.waitUntil;
     this.scheduler = new Scheduler(
       (reason) => this.flushEvents(reason),
       options.waitUntil
@@ -1342,6 +1499,7 @@ var UsageTracker = (_class4 = class {
   async shutdown() {
     await this.scheduler.shutdown();
     await this.flushEvents("shutdown");
+    await Promise.all([...this.inflightFlushes]);
   }
   /**
    * Tracks a config read event. Deduplicates by request context.
@@ -1353,7 +1511,7 @@ var UsageTracker = (_class4 = class {
       if (this.trackedRequests.has(ctx)) return;
       this.trackedRequests.add(ctx);
       this.readEvents.push(new FlagsConfigReadEvent(headers, options));
-      this.scheduler.scheduleFlush();
+      this.requestFlush();
     } catch (error) {
       console.error("@vercel/flags-core: Failed to record event:", error);
     }
@@ -1377,7 +1535,7 @@ var UsageTracker = (_class4 = class {
           new FlagsEvaluationEvent(bucketedOptions)
         );
       }
-      this.scheduler.scheduleFlush();
+      this.requestFlush();
     } catch (error) {
       console.error(
         "@vercel/flags-core: Failed to record evaluation event:",
@@ -1385,6 +1543,25 @@ var UsageTracker = (_class4 = class {
       );
     }
   }
+  /**
+   * Flushes immediately when the runtime provides an ingest transport,
+   * otherwise falls back to the time-based scheduler.
+   */
+  requestFlush() {
+    if (getRuntimeIngestFor(this.options.auth)) {
+      const flush = this.flushEvents("immediate").catch((error) => {
+        console.error("@vercel/flags-core: Failed to flush events:", error);
+      });
+      this.inflightFlushes.add(flush);
+      void flush.finally(() => this.inflightFlushes.delete(flush));
+      try {
+        _optionalChain([this, 'access', _44 => _44.waitUntil, 'optionalCall', _45 => _45(flush)]);
+      } catch (e11) {
+      }
+    } else {
+      this.scheduler.scheduleFlush();
+    }
+  }
   /**
    * Send all events to the ingest service
    */
@@ -1457,7 +1634,7 @@ var BundledSource = class {
    */
   async tryLoad() {
     const result = await this.getResult();
-    if (_optionalChain([result, 'optionalAccess', _40 => _40.state]) === "ok" && result.definitions) {
+    if (_optionalChain([result, 'optionalAccess', _46 => _46.state]) === "ok" && result.definitions) {
       return result.definitions;
     }
     return void 0;
@@ -1472,192 +1649,91 @@ var BundledSource = class {
 
 // src/controller/fetch-datafile.ts
 var DEFAULT_FETCH_TIMEOUT_MS = 1e4;
+var DEFAULT_MAX_ATTEMPTS = 3;
+var DatafileHttpError = class extends Error {
+  constructor(status, statusText) {
+    super(`Failed to fetch data: ${statusText}`);
+    this.status = status;
+  }
+  
+  get retryable() {
+    return this.status === 408 || this.status === 429 || this.status >= 500;
+  }
+};
 async function fetchDatafile(options) {
-  const token = await options.auth.resolveToken();
+  _optionalChain([options, 'access', _47 => _47.signal, 'optionalAccess', _48 => _48.throwIfAborted, 'call', _49 => _49()]);
+  const maxAttempts = _nullishCoalesce(options.maxAttempts, () => ( DEFAULT_MAX_ATTEMPTS));
+  if (!Number.isInteger(maxAttempts) || maxAttempts < 1) {
+    throw new Error("maxAttempts must be a positive integer");
+  }
   const controller = new AbortController();
+  const { signal } = controller;
+  let rejectAbort;
+  const aborted = new Promise((_, reject) => {
+    rejectAbort = reject;
+  });
+  const onAbort = () => rejectAbort(signal.reason);
+  signal.addEventListener("abort", onAbort, { once: true });
+  const onExternalAbort = () => controller.abort(_optionalChain([options, 'access', _50 => _50.signal, 'optionalAccess', _51 => _51.reason]));
+  _optionalChain([options, 'access', _52 => _52.signal, 'optionalAccess', _53 => _53.addEventListener, 'call', _54 => _54("abort", onExternalAbort, { once: true })]);
   const timeoutId = setTimeout(
-    () => controller.abort(),
+    () => controller.abort(
+      new Error("@vercel/flags-core: Datafile fetch deadline exceeded")
+    ),
     DEFAULT_FETCH_TIMEOUT_MS
   );
-  const onExternalAbort = () => controller.abort();
-  if (options.signal) {
-    if (options.signal.aborted) {
-      clearTimeout(timeoutId);
-      throw new Error("Fetch aborted");
-    }
-    options.signal.addEventListener("abort", onExternalAbort, { once: true });
-  }
-  try {
+  let delay;
+  const fetchAttempt = async () => {
+    const token = await options.auth.resolveToken();
+    signal.throwIfAborted();
     const res = await options.fetch(`${options.host}/v1/datafile`, {
       headers: {
-        Authorization: `Bearer ${token}`,
+        ...authHeaders(token, options.auth.sourceProjectId),
         "User-Agent": `VercelFlagsCore/${version}`,
         ...process.env.VERCEL_ENV ? { "X-Vercel-Env": process.env.VERCEL_ENV } : null
       },
-      signal: controller.signal
+      signal
     });
-    clearTimeout(timeoutId);
-    _optionalChain([options, 'access', _41 => _41.signal, 'optionalAccess', _42 => _42.removeEventListener, 'call', _43 => _43("abort", onExternalAbort)]);
+    signal.throwIfAborted();
     if (!res.ok) {
-      throw new Error(`Failed to fetch data: ${res.statusText}`);
-    }
-    return res.json();
-  } catch (error) {
-    clearTimeout(timeoutId);
-    _optionalChain([options, 'access', _44 => _44.signal, 'optionalAccess', _45 => _45.removeEventListener, 'call', _46 => _46("abort", onExternalAbort)]);
-    throw error instanceof Error ? error : new Error("Unknown fetch error");
-  }
-}
-
-// src/controller/tagged-data.ts
-function tagData(data, origin) {
-  const tagged = { ...data, _origin: origin };
-  if (origin === "fetched" || origin === "poll" || origin === "stream") {
-    tagged.fetchedAt = Date.now();
-  } else if (typeof data.fetchedAt !== "number" || !Number.isFinite(data.fetchedAt) || data.fetchedAt < 0) {
-    delete tagged.fetchedAt;
-  }
-  return tagged;
-}
-function originToMetricsSource(origin) {
-  switch (origin) {
-    case "stream":
-    case "poll":
-    case "provided":
-      return "in-memory";
-    case "fetched":
-      return "remote";
-    case "bundled":
-      return "embedded";
-  }
-}
-
-// src/controller/typed-emitter.ts
-var TypedEmitter = (_class5 = class {constructor() { _class5.prototype.__init11.call(this); }
-  __init11() {this.handlers = /* @__PURE__ */ new Map()}
-  on(event, handler) {
-    let set = this.handlers.get(event);
-    if (!set) {
-      set = /* @__PURE__ */ new Set();
-      this.handlers.set(event, set);
-    }
-    set.add(handler);
-  }
-  off(event, handler) {
-    _optionalChain([this, 'access', _47 => _47.handlers, 'access', _48 => _48.get, 'call', _49 => _49(event), 'optionalAccess', _50 => _50.delete, 'call', _51 => _51(handler)]);
-  }
-  emit(event, ...args) {
-    const set = this.handlers.get(event);
-    if (set) {
-      for (const handler of set) {
-        handler(...args);
-      }
+      void _optionalChain([res, 'access', _55 => _55.body, 'optionalAccess', _56 => _56.cancel, 'call', _57 => _57(), 'access', _58 => _58.catch, 'call', _59 => _59(() => {
+      })]);
+      throw new DatafileHttpError(
+        res.status,
+        res.status === 401 && options.auth.sourceProjectId ? unauthorizedMessage(options.auth.sourceProjectId) : res.statusText
+      );
     }
-  }
-}, _class5);
-
-// src/controller/header-source.ts
-var HeaderSource = (_class6 = class extends TypedEmitter {
-  
-  
-  
-  __init12() {this.highestObserved = 0}
-  
-  constructor(options) {
-    super();_class6.prototype.__init12.call(this);;
-    this.options = options;
-  }
-  fetchDatafile() {
-    if (this.promise) return this.promise;
-    const abortController = new AbortController();
-    this.abortController = abortController;
-    this.promise = fetchDatafile({
-      ...this.options,
-      signal: abortController.signal
-    }).then((data) => {
-      abortController.signal.throwIfAborted();
-      this.emit("data", data);
-      return data;
-    }).finally(() => {
-      if (this.abortController === abortController) {
-        this.promise = void 0;
-        this.abortController = void 0;
+    const data = await res.json();
+    signal.throwIfAborted();
+    return data;
+  };
+  try {
+    for (let attempt = 0; ; attempt++) {
+      if (attempt > 0) {
+        await Promise.race([
+          new Promise((resolve) => {
+            delay = setTimeout(resolve, 100 * 2 ** (attempt - 1));
+          }),
+          aborted
+        ]);
       }
-    });
-    return this.promise;
-  }
-  getUpdatedAtHeader(projectId, header) {
-    if (!header) {
-      return;
-    }
-    const prefix = `flags_${projectId}=`;
-    const value = _optionalChain([header, 'access', _52 => _52.split, 'call', _53 => _53(";"), 'access', _54 => _54.map, 'call', _55 => _55((part) => part.trim()), 'access', _56 => _56.find, 'call', _57 => _57((part) => part.startsWith(prefix)), 'optionalAccess', _58 => _58.slice, 'call', _59 => _59(prefix.length)]);
-    const timestamp = Number(value);
-    return Number.isFinite(timestamp) && timestamp > 0 ? timestamp : void 0;
-  }
-  async resolveData(currentData, updatedAtHeader) {
-    if (!currentData.configUpdatedAt) {
-      return;
-    }
-    if (!updatedAtHeader) {
-      return;
-    }
-    const currentUpdatedAt = Number(currentData.configUpdatedAt);
-    if (updatedAtHeader <= currentUpdatedAt) {
-      return [currentData, "HIT"];
-    }
-    const freshAt = Math.max(
-      _nullishCoalesce(currentData.fetchedAt, () => ( -Infinity)),
-      _optionalChain([this, 'access', _60 => _60.lastSeen, 'optionalAccess', _61 => _61.version]) === currentUpdatedAt ? this.lastSeen.at : -Infinity
-    );
-    const { staleWhileRevalidateMs } = this.options;
-    if (staleWhileRevalidateMs > 0 && Date.now() - freshAt <= staleWhileRevalidateMs) {
-      const pending = this.fetchDatafile();
-      const signal = _optionalChain([this, 'access', _62 => _62.abortController, 'optionalAccess', _63 => _63.signal]);
-      const background = pending.catch((error) => {
-        if (!_optionalChain([signal, 'optionalAccess', _64 => _64.aborted])) {
-          console.error("@vercel/flags-core: Header refresh failed:", error);
-        }
-      });
+      signal.throwIfAborted();
       try {
-        this.options.waitUntil(background);
-      } catch (e8) {
+        return await Promise.race([fetchAttempt(), aborted]);
+      } catch (error) {
+        signal.throwIfAborted();
+        if (attempt === maxAttempts - 1 || error instanceof DatafileHttpError && !error.retryable) {
+          throw error instanceof Error ? error : new Error("Unknown fetch error");
+        }
       }
-      return [currentData, "STALE"];
-    }
-    const data = await this.fetchDatafile();
-    return [tagData(data, "fetched"), "MISS"];
-  }
-  observe(version2, currentVersion) {
-    this.highestObserved = Math.max(this.highestObserved, version2);
-    if (version2 !== currentVersion || version2 !== this.highestObserved) return;
-    this.lastSeen = { version: version2, at: Date.now() };
-  }
-  async read(currentData) {
-    const { headers } = getRequestContext();
-    const header = _nullishCoalesce(_optionalChain([headers, 'optionalAccess', _65 => _65["x-vercel-flags-config-versions"]]), () => ( _optionalChain([headers, 'optionalAccess', _66 => _66["flags-config-versions"]])));
-    const data = await _asyncNullishCoalesce(currentData, async () => ( tagData(await this.fetchDatafile(), "fetched")));
-    const updatedAtHeader = this.getUpdatedAtHeader(data.projectId, header);
-    if (updatedAtHeader) {
-      this.observe(updatedAtHeader, Number(data.configUpdatedAt));
     }
-    if (!currentData) return [data, "MISS"];
-    return this.resolveData(currentData, updatedAtHeader);
-  }
-  isAvailable() {
-    return this.options.vercel && (this.options.stream.enabled || this.options.polling.enabled);
-  }
-  /**
-   * Abort the current header-driven fetch and discard its pending work.
-   */
-  stop() {
-    _optionalChain([this, 'access', _67 => _67.abortController, 'optionalAccess', _68 => _68.abort, 'call', _69 => _69()]);
-    this.abortController = void 0;
-    this.promise = void 0;
-    this.lastSeen = void 0;
-    this.highestObserved = 0;
+  } finally {
+    clearTimeout(timeoutId);
+    clearTimeout(delay);
+    signal.removeEventListener("abort", onAbort);
+    _optionalChain([options, 'access', _60 => _60.signal, 'optionalAccess', _61 => _61.removeEventListener, 'call', _62 => _62("abort", onExternalAbort)]);
   }
-}, _class6);
+}
 
 // src/controller/normalized-options.ts
 
@@ -1665,7 +1741,6 @@ var DEFAULT_STREAM_INIT_TIMEOUT_MS = 3e3;
 var DEFAULT_POLLING_INTERVAL_MS = 3e4;
 var MIN_POLLING_INTERVAL_MS = 3e4;
 var DEFAULT_POLLING_INIT_TIMEOUT_MS = 3e3;
-var DEFAULT_STALE_WHILE_REVALIDATE_MS = 1e4;
 function normalizeOptions(options) {
   const autoDetectedBuildStep = process.env.CI === "1" || process.env.NEXT_PHASE === "phase-production-build";
   const buildStep = _nullishCoalesce(options.buildStep, () => ( autoDetectedBuildStep));
@@ -1698,19 +1773,11 @@ function normalizeOptions(options) {
       initTimeoutMs: options.polling.initTimeoutMs
     };
   }
-  const staleWhileRevalidateMs = _nullishCoalesce(options.staleWhileRevalidateMs, () => ( DEFAULT_STALE_WHILE_REVALIDATE_MS));
-  if (!Number.isFinite(staleWhileRevalidateMs) || staleWhileRevalidateMs < 0) {
-    throw new Error(
-      "@vercel/flags-core: staleWhileRevalidateMs must be a finite, non-negative number."
-    );
-  }
   return {
     auth: options.auth,
     datafile: options.datafile,
     stream,
     polling,
-    vercel: _nullishCoalesce(options.vercel, () => ( process.env.VERCEL === "1")),
-    staleWhileRevalidateMs,
     buildStep,
     fetch: _nullishCoalesce(options.fetch, () => ( globalThis.fetch)),
     waitUntil: _nullishCoalesce(options.waitUntil, () => ( _functions.waitUntil)),
@@ -1721,6 +1788,35 @@ function normalizeOptions(options) {
   };
 }
 
+// src/controller/typed-emitter.ts
+var TypedEmitter = (_class5 = class {constructor() { _class5.prototype.__init12.call(this); }
+  __init12() {this.handlers = /* @__PURE__ */ new Map()}
+  on(event, handler) {
+    let set = this.handlers.get(event);
+    if (!set) {
+      set = /* @__PURE__ */ new Set();
+      this.handlers.set(event, set);
+    }
+    set.add(handler);
+  }
+  off(event, handler) {
+    const set = this.handlers.get(event);
+    if (!set) return;
+    set.delete(handler);
+    if (set.size === 0) {
+      this.handlers.delete(event);
+    }
+  }
+  emit(event, ...args) {
+    const set = this.handlers.get(event);
+    if (set) {
+      for (const handler of set) {
+        handler(...args);
+      }
+    }
+  }
+}, _class5);
+
 // src/controller/polling-source.ts
 var PollingSource = class extends TypedEmitter {
   
@@ -1735,14 +1831,17 @@ var PollingSource = class extends TypedEmitter {
    * Emits 'data' on success, 'error' on failure.
    */
   async poll() {
-    if (_optionalChain([this, 'access', _70 => _70.abortController, 'optionalAccess', _71 => _71.signal, 'access', _72 => _72.aborted])) return;
+    if (_optionalChain([this, 'access', _63 => _63.abortController, 'optionalAccess', _64 => _64.signal, 'access', _65 => _65.aborted])) return;
+    this.abortController ??= new AbortController();
+    const controller = this.abortController;
     try {
       const data = await fetchDatafile({
         ...this.config,
-        signal: _optionalChain([this, 'access', _73 => _73.abortController, 'optionalAccess', _74 => _74.signal])
+        signal: controller.signal
       });
       this.emit("data", data);
     } catch (error) {
+      controller.signal.throwIfAborted();
       const err = error instanceof Error ? error : new Error("Unknown poll error");
       this.emit("error", err);
     }
@@ -1754,9 +1853,9 @@ var PollingSource = class extends TypedEmitter {
    */
   startInterval() {
     if (this.intervalId) return;
-    this.abortController = new AbortController();
     this.intervalId = setInterval(
-      () => void this.poll(),
+      () => void this.poll().catch(() => {
+      }),
       this.config.polling.intervalMs
     );
   }
@@ -1768,7 +1867,7 @@ var PollingSource = class extends TypedEmitter {
       clearInterval(this.intervalId);
       this.intervalId = void 0;
     }
-    _optionalChain([this, 'access', _75 => _75.abortController, 'optionalAccess', _76 => _76.abort, 'call', _77 => _77()]);
+    _optionalChain([this, 'access', _66 => _66.abortController, 'optionalAccess', _67 => _67.abort, 'call', _68 => _68()]);
     this.abortController = void 0;
   }
 };
@@ -1797,8 +1896,8 @@ function backoff(retryCount) {
   return delay + Math.random() * 1e3;
 }
 var UnauthorizedError = class extends Error {
-  constructor() {
-    super("stream: unauthorized (401)");
+  constructor(sourceProjectId) {
+    super(`stream: ${unauthorizedMessage(sourceProjectId)}`);
     this.name = "UnauthorizedError";
   }
 };
@@ -1847,7 +1946,7 @@ async function connectStream(config, callbacks) {
         if (pingTimeoutId !== void 0) clearTimeout(pingTimeoutId);
         if (!initialDataReceived) return;
         pingTimeoutId = setTimeout(() => {
-          _optionalChain([responseBody, 'optionalAccess', _78 => _78.cancel, 'call', _79 => _79(), 'access', _80 => _80.catch, 'call', _81 => _81(() => {
+          _optionalChain([responseBody, 'optionalAccess', _69 => _69.cancel, 'call', _70 => _70(), 'access', _71 => _71.catch, 'call', _72 => _72(() => {
           })]);
           connectionAbort.abort();
         }, PING_TIMEOUT_MS);
@@ -1858,7 +1957,7 @@ async function connectStream(config, callbacks) {
           throw new TokenResolutionError(error);
         });
         const headers = {
-          Authorization: `Bearer ${token}`,
+          ...authHeaders(token, config.sourceProjectId),
           "User-Agent": `VercelFlagsCore/${version}`,
           "X-Retry-Attempt": String(retryCount)
         };
@@ -1869,7 +1968,7 @@ async function connectStream(config, callbacks) {
         if (vercelEnv) {
           headers["X-Vercel-Env"] = vercelEnv;
         }
-        const revision = _optionalChain([config, 'access', _82 => _82.revision, 'optionalCall', _83 => _83()]);
+        const revision = _optionalChain([config, 'access', _73 => _73.revision, 'optionalCall', _74 => _74()]);
         if (revision !== void 0) {
           headers["X-Revision"] = String(revision);
         }
@@ -1880,7 +1979,7 @@ async function connectStream(config, callbacks) {
         if (!response.ok) {
           if (response.status === 401) {
             if (!initialDataReceived) {
-              rejectInit(new UnauthorizedError());
+              rejectInit(new UnauthorizedError(config.sourceProjectId));
             }
             abortController.abort();
             break;
@@ -1915,7 +2014,7 @@ async function connectStream(config, callbacks) {
               let message;
               try {
                 message = JSON.parse(line);
-              } catch (e9) {
+              } catch (e12) {
                 console.warn(
                   "@vercel/flags-core: Failed to parse stream message, skipping"
                 );
@@ -1931,7 +2030,7 @@ async function connectStream(config, callbacks) {
                 resetPingTimeout();
               }
               if (message.type === "primed") {
-                _optionalChain([onPrimed, 'optionalCall', _84 => _84(message)]);
+                _optionalChain([onPrimed, 'optionalCall', _75 => _75(message)]);
                 retryCount = 0;
                 if (!initialDataReceived) {
                   initialDataReceived = true;
@@ -1954,7 +2053,7 @@ async function connectStream(config, callbacks) {
         clearTimeout(pingTimeoutId);
         abortController.signal.removeEventListener("abort", onMainAbort);
         if (!abortController.signal.aborted) {
-          _optionalChain([onDisconnect, 'optionalCall', _85 => _85()]);
+          _optionalChain([onDisconnect, 'optionalCall', _76 => _76()]);
           retryCount++;
           const elapsed = Date.now() - lastAttemptTime;
           const minGap = Math.max(0, BASE_RETRY_DELAY_MS - elapsed);
@@ -1975,7 +2074,7 @@ async function connectStream(config, callbacks) {
         if (!connectionAbort.signal.aborted) {
           lastError = error;
         }
-        _optionalChain([onDisconnect, 'optionalCall', _86 => _86()]);
+        _optionalChain([onDisconnect, 'optionalCall', _77 => _77()]);
         retryCount++;
         const elapsed = Date.now() - lastAttemptTime;
         const minGap = Math.max(0, BASE_RETRY_DELAY_MS - elapsed);
@@ -2024,6 +2123,7 @@ var StreamSource = class extends TypedEmitter {
         {
           host: this.options.host,
           resolveToken: () => this.options.auth.resolveToken(),
+          sourceProjectId: this.options.auth.sourceProjectId,
           abortController,
           fetch: this.options.fetch,
           revision: this.revision
@@ -2054,12 +2154,29 @@ var StreamSource = class extends TypedEmitter {
    * Stop the stream connection.
    */
   stop() {
-    _optionalChain([this, 'access', _87 => _87.abortController, 'optionalAccess', _88 => _88.abort, 'call', _89 => _89()]);
+    _optionalChain([this, 'access', _78 => _78.abortController, 'optionalAccess', _79 => _79.abort, 'call', _80 => _80()]);
     this.abortController = void 0;
     this.promise = void 0;
   }
 };
 
+// src/controller/tagged-data.ts
+function tagData(data, origin) {
+  return Object.assign(data, { _origin: origin });
+}
+function originToMetricsSource(origin) {
+  switch (origin) {
+    case "stream":
+    case "poll":
+    case "provided":
+      return "in-memory";
+    case "fetched":
+      return "remote";
+    case "bundled":
+      return "embedded";
+  }
+}
+
 // src/controller/index.ts
 function parseConfigUpdatedAt(value) {
   if (typeof value === "number") return value;
@@ -2069,7 +2186,7 @@ function parseConfigUpdatedAt(value) {
   }
   return void 0;
 }
-var Controller = (_class7 = class {
+var Controller = (_class6 = class {
   
   // State machine
   __init13() {this.state = "idle"}
@@ -2077,34 +2194,33 @@ var Controller = (_class7 = class {
   
   // Memoized data spread for read() / getDatafile().
   // Rebuilt only when `this.data` reference changes (e.g. on stream/poll update).
-  // Holds the result of stripping internal metadata; metrics are appended per-call.
+  // Holds the result of stripping `_origin`; metrics are appended per-call.
   __init14() {this.dataViewSource = void 0}
   __init15() {this.dataViewBase = void 0}
   // Sources (I/O delegates)
   
   
   
-  
   // Usage tracking
   
   __init16() {this.isFirstGetData = true}
   // Build-step deduplication
   __init17() {this.buildDataPromise = null}
   __init18() {this.buildReadTracked = false}
-  // Suppresses usage tracking when the SDK key is unauthorized
+  // Suppresses usage tracking while the credential is rejected. Set on a 401
+  // from any source, cleared as soon as a source delivers data again.
   __init19() {this.unauthorized = false}
-  constructor(options) {;_class7.prototype.__init13.call(this);_class7.prototype.__init14.call(this);_class7.prototype.__init15.call(this);_class7.prototype.__init16.call(this);_class7.prototype.__init17.call(this);_class7.prototype.__init18.call(this);_class7.prototype.__init19.call(this);_class7.prototype.__init20.call(this);_class7.prototype.__init21.call(this);_class7.prototype.__init22.call(this);_class7.prototype.__init23.call(this);_class7.prototype.__init24.call(this);_class7.prototype.__init25.call(this);_class7.prototype.__init26.call(this);
+  constructor(options) {;_class6.prototype.__init13.call(this);_class6.prototype.__init14.call(this);_class6.prototype.__init15.call(this);_class6.prototype.__init16.call(this);_class6.prototype.__init17.call(this);_class6.prototype.__init18.call(this);_class6.prototype.__init19.call(this);_class6.prototype.__init20.call(this);_class6.prototype.__init21.call(this);_class6.prototype.__init22.call(this);_class6.prototype.__init23.call(this);_class6.prototype.__init24.call(this);_class6.prototype.__init25.call(this);
     this.options = normalizeOptions(options);
     this.streamSource = new StreamSource(
       this.options,
-      () => _optionalChain([this, 'access', _90 => _90.data, 'optionalAccess', _91 => _91.revision])
+      () => _optionalChain([this, 'access', _81 => _81.data, 'optionalAccess', _82 => _82.revision])
     );
     this.pollingSource = new PollingSource(this.options);
     this.bundledSource = new BundledSource({
       auth: this.options.auth,
       readBundledDefinitions
     });
-    this.headerSource = new HeaderSource(this.options);
     this.wireSourceEvents();
     if (this.options.datafile) {
       this.data = tagData(this.options.datafile, "provided");
@@ -2113,11 +2229,13 @@ var Controller = (_class7 = class {
   }
   // Source event handlers (stored for cleanup)
   __init20() {this.onStreamData = (data) => {
+    this.unauthorized = false;
     if (this.isNewerData(data)) {
       this.data = tagData(data, "stream");
     }
   }}
   __init21() {this.onStreamPrimed = () => {
+    this.unauthorized = false;
     if (this.state === "degraded" || this.state === "initializing:stream") {
       this.transition("streaming");
     }
@@ -2133,18 +2251,15 @@ var Controller = (_class7 = class {
     }
   }}
   __init24() {this.onPollData = (data) => {
+    this.unauthorized = false;
     if (this.isNewerData(data)) {
       this.data = tagData(data, "poll");
     }
   }}
   __init25() {this.onPollError = (error) => {
+    this.noteUnauthorized(error);
     console.error("@vercel/flags-core: Poll failed:", error);
   }}
-  __init26() {this.onFetchedData = (data) => {
-    if (this.isNewerData(data)) {
-      this.data = tagData(data, "fetched");
-    }
-  }}
   // ---------------------------------------------------------------------------
   // Source event wiring
   // ---------------------------------------------------------------------------
@@ -2155,7 +2270,6 @@ var Controller = (_class7 = class {
     this.streamSource.on("disconnected", this.onStreamDisconnected);
     this.pollingSource.on("data", this.onPollData);
     this.pollingSource.on("error", this.onPollError);
-    this.headerSource.on("data", this.onFetchedData);
   }
   unwireSourceEvents() {
     this.streamSource.off("data", this.onStreamData);
@@ -2164,7 +2278,6 @@ var Controller = (_class7 = class {
     this.streamSource.off("disconnected", this.onStreamDisconnected);
     this.pollingSource.off("data", this.onPollData);
     this.pollingSource.off("error", this.onPollError);
-    this.headerSource.off("data", this.onFetchedData);
   }
   // ---------------------------------------------------------------------------
   // State machine
@@ -2182,8 +2295,6 @@ var Controller = (_class7 = class {
         return "streaming";
       case "polling":
         return "polling";
-      case "vercel":
-        return "vercel";
       default:
         return "offline";
     }
@@ -2197,7 +2308,6 @@ var Controller = (_class7 = class {
    * Build step: datafile → bundled → one-time fetch
    * Streaming mode: stream → datafile → bundled
    * Polling mode (no stream): poll → datafile → bundled
-   * Vercel mode: datafile → bundled; fetch only on a read
    * Offline mode (neither): datafile → bundled → one-time fetch
    */
   async initialize() {
@@ -2211,20 +2321,13 @@ var Controller = (_class7 = class {
       this.data = tagData(this.options.datafile, "provided");
     }
     if (!this.data) {
-      this.transition("initializing:fallback");
-      let bundled;
       try {
-        bundled = await this.bundledSource.tryLoad();
-      } catch (e10) {
-      }
-      if (this.state === "shutdown") {
-        throw new Error("@vercel/flags-core: Client is shut down");
+        const bundled = await this.bundledSource.tryLoad();
+        if (bundled) {
+          this.data = tagData(bundled, "bundled");
+        }
+      } catch (e13) {
       }
-      if (bundled) this.data = tagData(bundled, "bundled");
-    }
-    if (this.headerSource.isAvailable()) {
-      this.transition("vercel");
-      return;
     }
     if (this.data) {
       if (this.options.stream.enabled) {
@@ -2290,7 +2393,6 @@ var Controller = (_class7 = class {
     this.unwireSourceEvents();
     this.streamSource.stop();
     this.pollingSource.stop();
-    this.headerSource.stop();
     this.data = this.options.datafile ? tagData(this.options.datafile, "provided") : void 0;
     this.transition("shutdown");
     await this.usageTracker.shutdown();
@@ -2326,9 +2428,10 @@ var Controller = (_class7 = class {
           this.data = tagData(fetched, "fetched");
           result = this.data;
           cacheStatus = "MISS";
-        } catch (e11) {
-          throw new Error(
-            "@vercel/flags-core: No flag definitions available. Initialize the client or provide a datafile."
+        } catch (error) {
+          this.noteUnauthorized(error);
+          throw this.noDefinitionsError(
+            ". Initialize the client or provide a datafile."
           );
         }
       }
@@ -2371,10 +2474,6 @@ var Controller = (_class7 = class {
     if (this.options.buildStep) {
       return this.resolveDataForBuildStep();
     }
-    if (this.state === "vercel") {
-      const result = await this.headerSource.read(this.data);
-      if (result) return result;
-    }
     if (this.data) {
       const cacheStatus = this.isConnected ? "HIT" : "STALE";
       return [this.data, cacheStatus];
@@ -2394,9 +2493,7 @@ var Controller = (_class7 = class {
         await this.streamSource.start();
         return true;
       } catch (error) {
-        if (error instanceof UnauthorizedError) {
-          this.unauthorized = true;
-        }
+        this.noteUnauthorized(error);
         return false;
       }
     }
@@ -2424,9 +2521,7 @@ var Controller = (_class7 = class {
       return true;
     } catch (error) {
       clearTimeout(timeoutId);
-      if (error instanceof Error && error.message.includes("401")) {
-        this.unauthorized = true;
-      }
+      this.noteUnauthorized(error);
       return false;
     }
   }
@@ -2449,7 +2544,7 @@ var Controller = (_class7 = class {
           return true;
         }
         return false;
-      } catch (e12) {
+      } catch (e14) {
         return false;
       }
     }
@@ -2474,11 +2569,16 @@ var Controller = (_class7 = class {
         return true;
       }
       return false;
-    } catch (e13) {
+    } catch (e15) {
       clearTimeout(timeoutId);
       return false;
     }
   }
+  noteUnauthorized(error) {
+    if (error instanceof UnauthorizedError || error instanceof Error && error.message.includes("401")) {
+      this.unauthorized = true;
+    }
+  }
   // ---------------------------------------------------------------------------
   // Build step helpers
   // ---------------------------------------------------------------------------
@@ -2524,10 +2624,11 @@ var Controller = (_class7 = class {
         fetch: this.options.fetch
       });
       return tagData(fetched, "fetched");
-    } catch (e14) {
+    } catch (error) {
+      this.noteUnauthorized(error);
     }
-    throw new Error(
-      "@vercel/flags-core: No flag definitions available during build. Provide a datafile or bundled definitions."
+    throw this.noDefinitionsError(
+      " during build. Provide a datafile or bundled definitions."
     );
   }
   // ---------------------------------------------------------------------------
@@ -2558,11 +2659,20 @@ var Controller = (_class7 = class {
         this.data = tagData(fetched, "fetched");
         this.transition("degraded");
         return;
-      } catch (e15) {
+      } catch (e16) {
       }
     }
-    throw new Error(
-      "@vercel/flags-core: No flag definitions available. Bundled definitions not found."
+    throw this.noDefinitionsError(". Bundled definitions not found.");
+  }
+  /**
+   * `detail` continues the sentence "No flag definitions available", so it
+   * starts with either "." or " during build.".
+   */
+  noDefinitionsError(detail) {
+    const { sourceProjectId } = this.options.auth;
+    const reason = this.unauthorized && sourceProjectId ? ` Request was ${unauthorizedMessage(sourceProjectId)}` : "";
+    return new Error(
+      `@vercel/flags-core: No flag definitions available${detail}${reason}`
     );
   }
   /**
@@ -2610,11 +2720,11 @@ var Controller = (_class7 = class {
         this.data = tagData(fetched, "fetched");
         this.transition("degraded");
         return [this.data, "MISS"];
-      } catch (e16) {
+      } catch (e17) {
       }
     }
-    throw new Error(
-      "@vercel/flags-core: No flag definitions available. Provide a datafile or bundled definitions."
+    throw this.noDefinitionsError(
+      ". Provide a datafile or bundled definitions."
     );
   }
   // ---------------------------------------------------------------------------
@@ -2662,11 +2772,11 @@ var Controller = (_class7 = class {
       duration: Date.now() - startTime,
       mode: mode === "streaming" ? "stream" : mode === "polling" ? "poll" : mode
     };
-    const configUpdatedAt = _optionalChain([this, 'access', _92 => _92.data, 'optionalAccess', _93 => _93.configUpdatedAt]);
+    const configUpdatedAt = _optionalChain([this, 'access', _83 => _83.data, 'optionalAccess', _84 => _84.configUpdatedAt]);
     if (typeof configUpdatedAt === "number") {
       trackOptions.configUpdatedAt = configUpdatedAt;
     }
-    const revision = _optionalChain([this, 'access', _94 => _94.data, 'optionalAccess', _95 => _95.revision]);
+    const revision = _optionalChain([this, 'access', _85 => _85.data, 'optionalAccess', _86 => _86.revision]);
     if (typeof revision === "number") {
       trackOptions.revision = revision;
     }
@@ -2685,89 +2795,7 @@ var Controller = (_class7 = class {
       clientName: _nullishCoalesce(options.clientName, () => ( this.options.clientName))
     });
   }
-}, _class7);
-
-// src/controller/auth.ts
-
-
-// src/utils/sdk-keys.ts
-var SDK_KEY_REGEX = /^vf_(?:server|client)_/;
-function parseSdkKeyFromFlagsConnectionString(text) {
-  if (SDK_KEY_REGEX.test(text)) return text;
-  try {
-    if (!text.startsWith("flags:")) return null;
-    const params = new URLSearchParams(text.slice(6));
-    const sdkKey = params.get("sdkKey");
-    if (sdkKey && SDK_KEY_REGEX.test(sdkKey)) return sdkKey;
-  } catch (e17) {
-  }
-  return null;
-}
-
-// src/controller/auth.ts
-async function getOidcToken() {
-  try {
-    return await _oidc.getVercelOidcToken.call(void 0, );
-  } catch (e18) {
-    throw new Error(
-      [
-        "@vercel/flags-core: Failed to get OIDC token.",
-        "Are you running in a Vercel Environment where OIDC tokens are available?",
-        "Did you mean to use an SDK Key instead? Use the environment variable FLAGS or pass it directly to the client."
-      ].join(" ")
-    );
-  }
-}
-function getProjectIdFromOidcToken(oidcToken) {
-  const tokenParts = oidcToken.split(".");
-  if (tokenParts.length !== 3 || !tokenParts[1]) {
-    throw new Error("@vercel/flags-core: Invalid OIDC token");
-  }
-  const payload = JSON.parse(
-    Buffer.from(tokenParts[1], "base64url").toString("utf8")
-  );
-  if (typeof payload.project_id !== "string" || !payload.project_id) {
-    throw new Error(
-      "@vercel/flags-core: Missing project_id claim in OIDC token"
-    );
-  }
-  return payload.project_id;
-}
-var Authentication = class {
-  
-  constructor(sdkKeyOrConnectionString) {
-    if (sdkKeyOrConnectionString !== void 0) {
-      if (typeof sdkKeyOrConnectionString !== "string") {
-        throw new Error(
-          `@vercel/flags-core: Invalid sdkKey. Expected string, got ${typeof sdkKeyOrConnectionString}`
-        );
-      }
-      const parsed = parseSdkKeyFromFlagsConnectionString(
-        sdkKeyOrConnectionString
-      );
-      if (!parsed) {
-        throw new Error("@vercel/flags-core: Missing sdkKey");
-      }
-      this.sdkKey = parsed;
-    }
-  }
-  async resolveToken() {
-    if (this.sdkKey) {
-      return this.sdkKey;
-    }
-    return await getOidcToken();
-  }
-  async resolveBundledDefinitionsLookup() {
-    if (this.sdkKey) {
-      return { type: "sdk-key", sdkKey: this.sdkKey };
-    }
-    const oidcToken = await this.resolveToken();
-    return {
-      type: "project-id",
-      projectId: getProjectIdFromOidcToken(oidcToken)
-    };
-  }
-};
+}, _class6);
 
 // src/index.make.ts
 function make(createRawClient, defaults) {
@@ -2786,7 +2814,11 @@ function make(createRawClient, defaults) {
     });
     return createRawClient({
       controller,
-      origin: { provider: "vercel", sdkKey: auth.sdkKey },
+      origin: {
+        provider: "vercel",
+        sdkKey: auth.sdkKey,
+        ...auth.sourceProjectId ? { projectId: auth.sourceProjectId } : null
+      },
       waitUntil: waitUntil3,
       ...experimental_reportExposures ? { experimental_reportExposures } : {}
     });
@@ -2838,4 +2870,4 @@ var {
 
 
 exports.ResolutionReason = ResolutionReason; exports.evaluate = evaluate; exports.FallbackNotFoundError = FallbackNotFoundError; exports.FallbackEntryNotFoundError = FallbackEntryNotFoundError; exports.Controller = Controller; exports.flagsClient = flagsClient; exports.resetDefaultFlagsClient = resetDefaultFlagsClient; exports.createClient = createClient;
-//# sourceMappingURL=chunk-L6QJOXJN.cjs.map
+//# sourceMappingURL=chunk-PGKH4XQ7.cjs.map