tempest-react-sdk 0.81.0 → 0.83.0

package/dist/http/resumable-upload.js

@@ -1,18 +1,19 @@
 import { TempestApiError as e, buildApiError as t, isApiError as n, isRetriableStatus as r } from "./errors.js";
 import { bytesToBase64 as i } from "../utils/base64.js";
-import { isTrustedCredentialTarget as a, reportSuppressedCredential as o } from "./credential-scope.js";
-import { csrfHeaders as s } from "./csrf.js";
-import { retry as c } from "./retry.js";
-import { ownerFingerprint as l } from "../utils/owner-fingerprint.js";
-import { generateIdempotencyKey as u } from "./idempotency.js";
+import { isTrustedCredentialTarget as a, reportSuppressedCredential as o, resolveRequestUrl as s } from "./credential-scope.js";
+import { csrfHeaders as c } from "./csrf.js";
+import { retry as l } from "./retry.js";
+import { sessionIdentityOf as u } from "../auth/session-identity.js";
+import { ownerFingerprint as d } from "../utils/owner-fingerprint.js";
+import { generateIdempotencyKey as ee } from "./idempotency.js";
 //#region src/http/resumable-upload.ts
-var d = "1.0.0", f = 5242880, p = class extends Error {
+var f = "1.0.0", p = 5242880, m = class extends Error {
 	reason;
 	constructor(e) {
 		super(e === "principal" ? "O usuário mudou durante o upload resumível." : "Os registros de upload resumível foram limpos durante o upload."), this.name = "ResumableUploadSupersededError", this.reason = e;
 	}
-}, m = /* @__PURE__ */ new Map(), h = /* @__PURE__ */ new WeakMap();
-function g(e) {
+}, h = /* @__PURE__ */ new Map(), g = /* @__PURE__ */ new WeakMap();
+function _(e) {
 	if (!e) return !1;
 	try {
 		let t = JSON.parse(e);
@@ -21,12 +22,12 @@ function g(e) {
 		return !1;
 	}
 }
-function _(e) {
+function v(e) {
 	return i(new TextEncoder().encode(e));
 }
-function v(e) {
+function te(e) {
 	if (!e) return null;
-	let t = Object.entries(e).map(([e, t]) => `${e} ${_(t)}`);
+	let t = Object.entries(e).map(([e, t]) => `${e} ${v(t)}`);
 	return t.length > 0 ? t.join(",") : null;
 }
 function y(e, t) {
@@ -58,20 +59,55 @@ function b(e = "tempest-upload:") {
 			t()?.removeItem(e + n);
 		},
 		clear() {
-			m.set(e, (m.get(e) ?? 0) + 1);
+			h.set(e, (h.get(e) ?? 0) + 1);
 			let n = t();
 			if (!n) return;
 			let r = [];
 			for (let t = 0; t < n.length; t += 1) {
 				let i = n.key(t);
-				i?.startsWith(e) && g(n.getItem(i)) && r.push(i);
+				i?.startsWith(e) && _(n.getItem(i)) && r.push(i);
 			}
 			for (let e of r) n.removeItem(e);
 		}
 	};
-	return h.set(n, () => m.get(e) ?? 0), n;
+	return g.set(n, () => h.get(e) ?? 0), n;
 }
-function x(t) {
+var x = "REDIRECT_REFUSED", S = "UPLOAD_OFFSET_STALLED";
+function C(e) {
+	return e.holdRedirects ? w(e) : T(e);
+}
+async function w(t) {
+	let n = new AbortController();
+	t.register(n);
+	let r;
+	try {
+		r = await fetch(t.url, {
+			method: t.method,
+			headers: t.headers,
+			body: t.body,
+			credentials: t.withCredentials ? "include" : "same-origin",
+			redirect: "manual",
+			signal: n.signal
+		});
+	} catch {
+		throw n.signal.aborted ? new DOMException("Aborted", "AbortError") : new e({
+			status: 0,
+			detail: "Falha de rede no upload resumível."
+		});
+	}
+	if (r.type === "opaqueredirect" || r.status >= 300 && r.status < 400 && r.status !== 304) throw new e({
+		status: r.status,
+		code: x,
+		detail: "Redirect não seguido: a requisição do upload levava os headers fixos."
+	});
+	let i = t.method === "HEAD" ? "" : await r.text();
+	return {
+		status: r.status,
+		text: i,
+		header: (e) => r.headers.get(e)
+	};
+}
+function T(t) {
 	return new Promise((n, r) => {
 		let i = new XMLHttpRequest();
 		i.open(t.method, t.url), i.withCredentials = t.withCredentials;
@@ -90,13 +126,13 @@ function x(t) {
 		})), i.onabort = () => r(new DOMException("Aborted", "AbortError")), t.register(i), i.send(t.body);
 	});
 }
-function S(e) {
+function E(e) {
 	let t = e.header("Upload-Offset");
 	if (t === null) return null;
 	let n = Number(t);
 	return Number.isFinite(n) && n >= 0 ? n : null;
 }
-function C(e) {
+function D(e) {
 	if (!e) return null;
 	try {
 		return JSON.parse(e);
@@ -104,37 +140,40 @@ function C(e) {
 		return e;
 	}
 }
-var w = /* @__PURE__ */ new Set([409, 412]);
-function ee(e) {
-	return !n(e) || w.has(e.status) ? !0 : r(e.status);
+var O = /* @__PURE__ */ new Set([409, 412]);
+function ne(e) {
+	return n(e) ? e.code === x ? !1 : e.code === S || O.has(e.status) ? !0 : r(e.status) : !0;
 }
-function T(n, r) {
-	let i = C(n.text), a = t(n.status, i, { get: n.header }), o = typeof i == "object" && !!i && ("detail" in i || "message" in i);
+function k(n, r) {
+	let i = D(n.text), a = t(n.status, i, { get: n.header }), o = typeof i == "object" && !!i && ("detail" in i || "message" in i);
 	return new e({
 		...a,
 		detail: o ? a.detail : r
 	});
 }
-function E(e) {
-	let t = typeof window > "u" ? void 0 : window.location.href;
+function re(e, t) {
 	try {
-		return new URL(e, t).href;
+		return new URL(e, s(t) ?? void 0).href;
 	} catch {
 		return e;
 	}
 }
-function D(t) {
-	let { endpoint: n, file: r, chunkSize: i = f, metadata: m, headers: g = {}, getToken: _, getPrincipal: C, trustedOrigins: w, withCredentials: D = !1, csrf: O, key: k = y(n, r), storage: A = b(), retry: j, onProgress: M, onStateChange: N } = t, P = "idle", F = 0, I = null, L = null, R, z = !1, B = A ? h.get(A) : void 0, V = B?.() ?? 0;
+function A(t) {
+	let { endpoint: n, file: r, chunkSize: i = p, metadata: s, headers: h = {}, getToken: _, getPrincipal: v, trustedOrigins: x, withCredentials: w = !1, csrf: T, key: D = y(n, r), storage: O = b(), retry: A, onProgress: ie, onStateChange: ae } = t, j = v ?? u(_)?.current, M = "idle", N = 0, P = null, F = null, I, L = !1, R = !1, z = O ? g.get(O) : void 0, B = z?.() ?? 0;
+	function V() {
+		if (j) return d("p", j());
+		if (_) return d("t", _());
+	}
 	function H() {
-		if (C && l("p", C()) !== R) throw new p("principal");
-		if (B && B() !== V) throw new p("cleared");
+		if (j && d("p", j()) !== I) throw new m("principal");
+		if (z && z() !== B) throw new m("cleared");
 	}
 	let U = null, W = null, G = 0;
 	function K(e) {
-		P !== e && (P = e, N?.(e));
+		M !== e && (M = e, ae?.(e));
 	}
 	function q(e) {
-		M?.({
+		ie?.({
 			loaded: e,
 			total: r.size,
 			fraction: r.size === 0 ? 1 : e / r.size,
@@ -142,124 +181,139 @@ function D(t) {
 		});
 	}
 	function J(e, t) {
-		let r = {
-			...g,
-			"Tus-Resumable": d
-		}, i = _?.();
-		return i && !("Authorization" in r) && (a(e, n, w) ? r.Authorization = `Bearer ${i}` : o(e, n)), Object.assign(r, s({
+		let r = a(e, n, x), i = {
+			...r ? h : {},
+			"Tus-Resumable": f
+		}, s = _?.();
+		return s && !("Authorization" in h) && (r ? i.Authorization = `Bearer ${s}` : o(e, n)), Object.assign(i, c({
 			method: t,
 			url: e,
 			reference: n,
-			csrf: O,
-			trustedOrigins: w,
-			headers: g
-		})), r;
+			csrf: T,
+			trustedOrigins: x,
+			headers: h
+		})), i;
 	}
 	function Y(e) {
 		W = e;
 	}
-	async function X() {
-		A && I && L && (H(), await A.set(k, {
-			url: I,
-			offset: F,
+	function X(e) {
+		return Object.keys(h).length > 0 && a(e, n, x);
+	}
+	async function Z() {
+		O && P && F && (H(), I = V(), await O.set(D, {
+			url: P,
+			offset: N,
 			size: r.size,
-			idempotencyKey: L,
+			idempotencyKey: F,
 			updatedAt: Date.now(),
-			...R === void 0 ? {} : { owner: R }
+			...I === void 0 ? {} : { owner: I }
 		}));
 	}
-	async function Z(t) {
-		let n = await x({
+	async function Q(t) {
+		let n = await C({
 			method: "HEAD",
 			url: t,
 			headers: J(t, "HEAD"),
-			withCredentials: D,
-			register: Y
+			withCredentials: w,
+			register: Y,
+			holdRedirects: X(t)
 		});
 		if (n.status === 404 || n.status === 410) throw new e({
 			status: n.status,
 			detail: "O upload expirou no servidor. Comece de novo."
 		});
-		let r = S(n);
-		if (r === null) throw T(n, "HEAD sem Upload-Offset.");
+		let r = E(n);
+		if (r === null) throw k(n, "HEAD sem Upload-Offset.");
 		return r;
 	}
-	async function te() {
-		let e = C ? l("p", C()) : void 0;
-		z && e !== R && (L = null), R = e, z = !0, V = B?.() ?? 0;
-		let t = A ? await A.get(k) : null;
-		if (t && R !== void 0 && t.owner !== R && (await A?.delete(k), t = null), t && t.size === r.size && (L = t.idempotencyKey, t.url)) try {
-			return F = await Z(t.url), I = t.url, t.url;
+	async function oe() {
+		R && (R = !1, L = !1, P = null, F = null);
+		let e = V();
+		L && j && e !== I && (F = null);
+		let t = L && !j ? P : null;
+		I = e, L = !0, B = z?.() ?? 0;
+		let i = O ? await O.get(D) : null, a = i !== null && t !== null && i.url === t;
+		if (i && I !== void 0 && i.owner !== I && !a && (await O?.delete(D), i = null), i && i.size === r.size && (F = i.idempotencyKey, i.url)) try {
+			return N = await Q(i.url), P = i.url, i.url;
 		} catch {
-			F = 0;
+			N = 0;
 		}
-		K("creating"), L ??= u(), I = null, F = 0, A && await A.set(k, {
+		K("creating"), F ??= ee(), P = null, N = 0, O && await O.set(D, {
 			url: "",
 			offset: 0,
 			size: r.size,
-			idempotencyKey: L,
+			idempotencyKey: F,
 			updatedAt: Date.now(),
-			...R === void 0 ? {} : { owner: R }
+			...I === void 0 ? {} : { owner: I }
 		});
-		let i = {
+		let o = {
 			...J(n, "POST"),
 			"Upload-Length": String(r.size),
-			"Idempotency-Key": L
-		}, a = v(m);
-		a && (i["Upload-Metadata"] = a);
-		let o = await x({
+			"Idempotency-Key": F
+		}, c = te(s);
+		c && (o["Upload-Metadata"] = c);
+		let l = await C({
 			method: "POST",
 			url: n,
-			headers: i,
-			withCredentials: D,
-			register: Y
+			headers: o,
+			withCredentials: w,
+			register: Y,
+			holdRedirects: X(n)
 		});
-		if (o.status !== 201) throw T(o, "Criação do upload recusada.");
-		let s = o.header("Location");
-		if (!s) throw T(o, "Criação do upload sem cabeçalho Location.");
-		return I = E(s), await X(), I;
+		if (l.status !== 201) throw k(l, "Criação do upload recusada.");
+		let u = l.header("Location");
+		if (!u) throw k(l, "Criação do upload sem cabeçalho Location.");
+		return P = re(u, n), await Z(), P;
 	}
-	async function ne(e, t) {
-		if (H(), t.needed && (F = await Z(e), t.needed = !1, q(F), await X(), F >= r.size)) return;
-		let n = Math.min(F + i, r.size), a = F, o = await x({
+	async function se(t, n) {
+		if (H(), n.needed && (N = await Q(t), n.needed = !1, q(N), await Z(), N >= r.size)) return;
+		let a = Math.min(N + i, r.size), o = N, s = await C({
 			method: "PATCH",
-			url: e,
+			url: t,
 			headers: {
-				...J(e, "PATCH"),
+				...J(t, "PATCH"),
 				"Content-Type": "application/offset+octet-stream",
-				"Upload-Offset": String(a)
+				"Upload-Offset": String(o)
 			},
-			body: r.slice(a, n),
-			withCredentials: D,
-			onProgress: (e) => q(Math.min(a + e, r.size)),
-			register: Y
+			body: r.slice(o, a),
+			withCredentials: w,
+			onProgress: (e) => q(Math.min(o + e, r.size)),
+			register: Y,
+			holdRedirects: X(t)
 		});
-		if (o.status === 409 || o.status === 412) throw t.needed = !0, T(o, "Offset divergente — o servidor já tinha esses bytes.");
-		if (o.status !== 204 && o.status !== 200) throw T(o, "Chunk recusado pelo servidor.");
-		F = S(o) ?? n, q(F), await X();
+		if (s.status === 409 || s.status === 412) throw n.needed = !0, k(s, "Offset divergente — o servidor já tinha esses bytes.");
+		if (s.status !== 204 && s.status !== 200) throw k(s, "Chunk recusado pelo servidor.");
+		let c = E(s);
+		if (c !== null && c <= o) throw new e({
+			status: s.status,
+			code: S,
+			detail: `O servidor confirmou o chunk sem avançar o Upload-Offset (${o} → ${c}).`
+		});
+		N = c ?? a, q(N), await Z();
 	}
-	async function re() {
+	async function ce() {
 		U = null;
-		let e = await te();
-		G = F, K("uploading"), q(F);
+		let e = await oe();
+		G = N, K("uploading"), q(N);
 		let t = { needed: !1 };
-		for (; F < r.size && !U;) await c(() => ne(e, t), {
+		for (; N < r.size && !U;) await l(() => se(e, t), {
 			retries: 5,
-			...j,
+			...A,
 			shouldRetry: (e, n) => {
-				if (U || e instanceof p || e instanceof DOMException && e.name === "AbortError") return !1;
-				let r = j?.shouldRetry?.(e, n) ?? ee(e);
+				if (U || e instanceof m || e instanceof DOMException && e.name === "AbortError") return !1;
+				let r = A?.shouldRetry?.(e, n) ?? ne(e);
 				return r && (t.needed = !0), r;
 			}
 		});
-		return U === "pause" ? (K("paused"), null) : U === "abort" ? (K("aborted"), null) : (K("done"), A && await A.delete(k), {
+		return U === "pause" ? (K("paused"), null) : U === "abort" ? (K("aborted"), null) : (K("done"), O && await O.delete(D), {
 			url: e,
 			size: r.size
 		});
 	}
-	async function Q() {
+	async function $() {
 		try {
-			return await re();
+			return await ce();
 		} catch (e) {
 			if (U !== null || e instanceof DOMException && e.name === "AbortError") return K(U === "abort" ? "aborted" : "paused"), null;
 			throw K("error"), e;
@@ -267,35 +321,36 @@ function D(t) {
 			W = null;
 		}
 	}
-	function $(e) {
+	function le(e) {
 		U = e, W?.abort(), W = null;
 	}
 	return {
-		start: Q,
-		resume: Q,
-		pause: () => $("pause"),
+		start: $,
+		resume: $,
+		pause: () => le("pause"),
 		abort: async ({ discard: e = !1 } = {}) => {
-			$("abort"), K("aborted"), e && (I && await x({
+			le("abort"), R = !0, K("aborted"), e && (P && await C({
 				method: "DELETE",
-				url: I,
-				headers: J(I, "DELETE"),
-				withCredentials: D,
-				register: () => void 0
-			}).catch(() => void 0), A && await A.delete(k));
+				url: P,
+				headers: J(P, "DELETE"),
+				withCredentials: w,
+				register: () => void 0,
+				holdRedirects: X(P)
+			}).catch(() => void 0), O && await O.delete(D));
 		},
 		get state() {
-			return P;
+			return M;
 		},
 		get offset() {
-			return F;
+			return N;
 		},
 		get url() {
-			return I;
+			return P;
 		},
-		key: k
+		key: D
 	};
 }
 //#endregion
-export { f as DEFAULT_CHUNK_SIZE, p as ResumableUploadSupersededError, d as TUS_VERSION, b as createLocalUploadStorage, D as createResumableUpload, y as uploadFingerprint };
+export { p as DEFAULT_CHUNK_SIZE, m as ResumableUploadSupersededError, f as TUS_VERSION, b as createLocalUploadStorage, A as createResumableUpload, y as uploadFingerprint };
 
 //# sourceMappingURL=resumable-upload.js.map