@active-reach/web-sdk 1.3.1 → 1.4.0

package/dist/governance/murmur3.d.ts

@@ -0,0 +1,43 @@
+/**
+ * MurmurHash3 x86-32 — deterministic, byte-identical with Python `mmh3.hash`.
+ *
+ * We hand-roll rather than pull a dep because (a) our bundle-budget is
+ * aggressive for storefront first-paint, and (b) this is the authoritative
+ * cross-language hash for the event-governance bloom filter — any behavior
+ * drift between Python and JS produces silent FP-rate spikes in prod.
+ *
+ * Contract:
+ *   • Input is a JS string. It is UTF-8 encoded via TextEncoder before hashing.
+ *   • Output is an unsigned 32-bit integer (0 .. 2^32-1).
+ *   • Matches `mmh3.hash(s.encode('utf-8'), seed=seed, signed=False)` in
+ *     Python exactly — verified by libs/shared-types/bloom-test-vectors.json
+ *     in CI.
+ *
+ * Reference: Austin Appleby, MurmurHash3 (public domain).
+ *   https://github.com/aappleby/smhasher/blob/master/src/MurmurHash3.cpp
+ *
+ * Implementation notes:
+ *   • All arithmetic on 32-bit ints. JS does bitwise ops on 32-bit ints natively;
+ *     `Math.imul` gives us correct 32-bit multiplication without overflow.
+ *   • We use `>>> 0` to coerce to unsigned after every step that could produce
+ *     a negative or >32-bit value.
+ *   • UTF-8 encoding matters — a naive `charCodeAt` loop would mis-hash any
+ *     string with non-ASCII characters (e.g. emoji, accented chars) and the
+ *     Python side would disagree. We always encode via TextEncoder first.
+ */
+/**
+ * Compute MurmurHash3 x86-32 of a UTF-8 encoded string.
+ *
+ * @param input  The string to hash.
+ * @param seed   32-bit unsigned seed.
+ * @returns      Unsigned 32-bit integer hash.
+ */
+export declare function murmurhash3_x86_32(input: string, seed?: number): number;
+/**
+ * Compute MurmurHash3 x86-32 over a byte buffer directly.
+ *
+ * Exposed for callers that already have UTF-8 bytes and want to skip the
+ * encode step (e.g., internal bloom-hash paths).
+ */
+export declare function murmurhash3_bytes(bytes: Uint8Array, seed?: number): number;
+//# sourceMappingURL=murmur3.d.ts.map

package/dist/governance/murmur3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"murmur3.d.ts","sourceRoot":"","sources":["../../src/governance/murmur3.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAKH;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,MAAU,GAAG,MAAM,CAI1E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,GAAE,MAAU,GAAG,MAAM,CA+C7E"}

package/dist/governance/name-governor.d.ts

@@ -0,0 +1,88 @@
+/**
+ * NameGovernor — client-side event-name cap enforcement.
+ *
+ * The governor consumes an `EventGovernanceHint` from the bootstrap response
+ * and decides whether to let a `track()` call proceed to the network or drop
+ * it locally.
+ *
+ * Why this exists:
+ *   Without it, a page that calls `track('new_btn_' + Date.now())` in a
+ *   render loop would (a) pass the local rate-limiter if within burst, (b)
+ *   force the gateway to ask control-plane for a verdict on every unique
+ *   name, and (c) amplify the CP `/event-governance/check` load quadratically
+ *   in the number of tabs firing the same bug. The bloom filter gives the
+ *   SDK enough information to drop novel names locally once the org hits
+ *   its cap, collapsing the amplification to zero.
+ *
+ * Design constraints:
+ *   • FAIL-OPEN — missing hint (Enterprise org, Redis outage) lets every
+ *     name through. The gateway is still the authoritative cap.
+ *   • FALSE-POSITIVE-SAFE — if the bloom says "known" for a name that isn't
+ *     actually registered, we send to gateway and the gateway's exact check
+ *     catches it. FPs cost one round trip, not a cap bypass.
+ *   • LOCAL-MEMO — a novel name that has already charged `remainingNewNames`
+ *     in this tab must NOT charge again on subsequent calls within the same
+ *     hint TTL. Without this, `track('new_btn_click')` fired 50 times would
+ *     drain 50 from the counter and block every OTHER legitimate novel name.
+ *     See `localNovelNames`.
+ *
+ * See docs/architecture/RFC_2026_04_SDK_GOVERNANCE_HINTS.md §3.3.
+ */
+/** Shape of the hint delivered by `/v1/sdk/bootstrap`. */
+export interface EventGovernanceHint {
+    bloom_algo: string;
+    seed_a: number;
+    seed_b: number;
+    k: number;
+    m: number;
+    bloom_b64: string;
+    remaining_new_names: number | null;
+    ttl_seconds: number;
+}
+export interface DropReport {
+    /** Map of event_name → count of local drops since last drain. */
+    events: Record<string, number>;
+    /** Total events dropped across all names (sum of values). */
+    total: number;
+    /** When the report window started (ms since epoch). */
+    since: number;
+}
+export declare class NameGovernor {
+    private bloom;
+    private remainingNewNames;
+    /**
+     * Names this SDK instance has seen AS NOVEL and already charged against
+     * `remainingNewNames`. Reset on every `ingestHint()` so we don't leak
+     * accounting across hint refreshes.
+     */
+    private localNovelNames;
+    /** Coalesced telemetry — flushed to the transport via drainDropReport(). */
+    private droppedSinceLastReport;
+    private reportWindowStart;
+    private hasWarnedThisSession;
+    /**
+     * Ingest a freshly-bootstrapped hint. Call on every successful bootstrap.
+     * Passing `null` disables governance (fail-open).
+     */
+    ingestHint(hint: EventGovernanceHint | null): void;
+    /**
+     * Decide whether a `track()` call should proceed.
+     *
+     * Returns true  = send to network (rate-limiter still runs after).
+     * Returns false = drop locally; caller should return early.
+     */
+    shouldSend(eventName: string): boolean;
+    /**
+     * Snapshot + reset the dropped-names counter. Called by the telemetry
+     * beacon on batch flush so the gateway gets visibility into client-side
+     * drops for ops dashboards.
+     */
+    drainDropReport(): DropReport | null;
+    /** @internal */
+    _debugState(): {
+        hasBloom: boolean;
+        remaining: number;
+        localNovel: number;
+    };
+}
+//# sourceMappingURL=name-governor.d.ts.map

package/dist/governance/name-governor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"name-governor.d.ts","sourceRoot":"","sources":["../../src/governance/name-governor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,0DAA0D;AAC1D,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;CACf;AAeD,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAA4B;IACzC,OAAO,CAAC,iBAAiB,CAAoB;IAE7C;;;;OAIG;IACH,OAAO,CAAC,eAAe,CAA0B;IAEjD,4EAA4E;IAC5E,OAAO,CAAC,sBAAsB,CAAkC;IAChE,OAAO,CAAC,iBAAiB,CAAsB;IAC/C,OAAO,CAAC,oBAAoB,CAAS;IAErC;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,GAAG,IAAI;IA0BlD;;;;;OAKG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAiCtC;;;;OAIG;IACH,eAAe,IAAI,UAAU,GAAG,IAAI;IAkBpC,gBAAgB;IAChB,WAAW,IAAI;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE;CAO5E"}

package/dist/inapp/AegisInAppManager.d.ts

@@ -51,6 +51,7 @@ export interface AegisInAppConfig {
     userId?: string;
     contactId?: string;
     organizationId?: string;
+    propertyId?: string;
     debugMode?: boolean;
     enableSSE?: boolean;
 }
@@ -60,6 +61,7 @@ export declare class AegisInAppManager {
     private userId?;
     private contactId?;
     private organizationId?;
+    private propertyId?;
     private debugMode;
     private enableSSE;
     private campaigns;

package/dist/inapp/AegisInAppManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AegisInAppManager.d.ts","sourceRoot":"","sources":["../../src/inapp/AegisInAppManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,aAAa,GAAG,mBAAmB,GAAG,OAAO,GAAG,KAAK,CAAC;IAC7F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE;QACV,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,uBAAuB,CAAC,EAAE,MAAM,CAAC;QACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,cAAc,CAAC,EAAE;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,CAAC;IACF,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,cAAc,CAAC,CAAS;IAChC,OAAO,CAAC,SAAS,CAAU;IAC3B,OAAO,CAAC,SAAS,CAAU;IAE3B,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,WAAW,CAAC,CAAc;IAClC,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,oBAAoB,CAAK;gBAErB,MAAM,EAAE,gBAAgB;IAa9B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAqBjC,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAKlC,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IASxC,OAAO,CAAC,UAAU;IAwDlB,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,gBAAgB;YAkBV,gBAAgB;IA6D9B,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,SAAS;IAOjB,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,sBAAsB;IAQ9B,OAAO,CAAC,eAAe;IA0CvB;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAuCzB,OAAO,CAAC,eAAe;IAyDvB,OAAO,CAAC,oBAAoB;IAkF5B,OAAO,CAAC,gBAAgB;IA6CxB,OAAO,CAAC,eAAe;IA+CvB,OAAO,CAAC,UAAU;IAiFlB,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,eAAe;IAkBvB,OAAO,CAAC,cAAc;IAWtB,OAAO,CAAC,YAAY;IAiHpB,OAAO,CAAC,WAAW;IAkHnB,OAAO,CAAC,gBAAgB;IA6GxB,OAAO,CAAC,sBAAsB;IAyH9B,OAAO,CAAC,WAAW;IAwGnB,OAAO,CAAC,SAAS;IAiHjB,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,aAAa;IA8IrB,OAAO,CAAC,kBAAkB;IAqC1B,OAAO,CAAC,WAAW;IAgBnB,OAAO,CAAC,aAAa;IAqBrB;;;;;;;;;;;OAWG;YACW,UAAU;IA2CxB,OAAO,CAAC,GAAG;IAMX,OAAO,CAAC,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI;CA2BpD"}
+{"version":3,"file":"AegisInAppManager.d.ts","sourceRoot":"","sources":["../../src/inapp/AegisInAppManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,aAAa,GAAG,mBAAmB,GAAG,OAAO,GAAG,KAAK,CAAC;IAC7F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE;QACV,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,uBAAuB,CAAC,EAAE,MAAM,CAAC;QACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,cAAc,CAAC,EAAE;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,CAAC;IACF,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IAKxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,cAAc,CAAC,CAAS;IAChC,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAU;IAC3B,OAAO,CAAC,SAAS,CAAU;IAE3B,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,WAAW,CAAC,CAAc;IAClC,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,oBAAoB,CAAK;gBAErB,MAAM,EAAE,gBAAgB;IAc9B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAqBjC,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAKlC,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IASxC,OAAO,CAAC,UAAU;IAwDlB,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,gBAAgB;YAkBV,gBAAgB;IAiE9B,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,SAAS;IAOjB,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,sBAAsB;IAQ9B,OAAO,CAAC,eAAe;IA0CvB;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAuCzB,OAAO,CAAC,eAAe;IAyDvB,OAAO,CAAC,oBAAoB;IAkF5B,OAAO,CAAC,gBAAgB;IA6CxB,OAAO,CAAC,eAAe;IA+CvB,OAAO,CAAC,UAAU;IAiFlB,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,eAAe;IAkBvB,OAAO,CAAC,cAAc;IAWtB,OAAO,CAAC,YAAY;IAiHpB,OAAO,CAAC,WAAW;IAkHnB,OAAO,CAAC,gBAAgB;IA6GxB,OAAO,CAAC,sBAAsB;IAyH9B,OAAO,CAAC,WAAW;IAwGnB,OAAO,CAAC,SAAS;IAiHjB,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,aAAa;IA8IrB,OAAO,CAAC,kBAAkB;IAqC1B,OAAO,CAAC,WAAW;IAgBnB,OAAO,CAAC,aAAa;IAqBrB;;;;;;;;;;;OAWG;YACW,UAAU;IA2CxB,OAAO,CAAC,GAAG;IAMX,OAAO,CAAC,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI;CA2BpD"}

package/dist/index.d.ts

@@ -20,8 +20,12 @@ export { SdkConfigPoller } from './core/sdk-config-poller';
 export type { SdkConfig, SdkConfigPollerOptions, ConfigChangeCallback } from './core/sdk-config-poller';
 export { AegisWebPush } from './push/AegisWebPush';
 export type { AegisWebPushConfig, AegisAPIClient, ContactIdentity, PushEventTracker, } from './push/AegisWebPush';
+export { bootstrap, readFirstPartyCookie, writeFirstPartyCookie, deriveDeviceFingerprint, BootstrapError, } from './core/bootstrap';
+export type { BootstrapRequest, BootstrapResult } from './core/bootstrap';
 export { RateLimiter } from './core/rate-limiter';
 export type { RateLimiterOptions } from './core/rate-limiter';
+export { NameGovernor, BloomFilter, murmurhash3_x86_32 } from './governance';
+export type { EventGovernanceHint, DropReport, BloomFilterParams } from './governance';
 export { EcommerceTracker } from './ecommerce';
 export type { EcommerceProduct, EcommerceCart, EcommerceCheckout, EcommerceOrder, EcommerceCoupon, EcommerceSearch, EcommerceProductList, EcommerceWishlist, EcommercePromotion, } from './ecommerce';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEzC,QAAA,MAAM,KAAK,OAAc,CAAC;AAE1B,eAAe,KAAK,CAAC;AAErB,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5E,YAAY,EACV,UAAU,EACV,UAAU,EACV,aAAa,EACb,SAAS,EACT,UAAU,EACV,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,aAAa,GACd,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACtD,YAAY,EACV,kBAAkB,EAClB,eAAe,EACf,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,oBAAoB,GACrB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,YAAY,EACV,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,YAAY,EAAE,SAAS,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAExG,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAQ9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEzC,QAAA,MAAM,KAAK,OAAc,CAAC;AAE1B,eAAe,KAAK,CAAC;AAErB,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5E,YAAY,EACV,UAAU,EACV,UAAU,EACV,aAAa,EACb,SAAS,EACT,UAAU,EACV,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,aAAa,GACd,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACtD,YAAY,EACV,kBAAkB,EAClB,eAAe,EACf,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,oBAAoB,GACrB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,YAAY,EACV,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,YAAY,EAAE,SAAS,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAExG,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAE1E,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAK9D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC7E,YAAY,EAAE,mBAAmB,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAQvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,5 +1,5 @@
-import { l as logger, A as Aegis } from "./analytics-B0JfoAJs.mjs";
-import { E, R } from "./analytics-B0JfoAJs.mjs";
+import { l as logger, A as Aegis } from "./analytics-D9BAnJAu.mjs";
+import { B, E, N, R, m } from "./analytics-D9BAnJAu.mjs";
 import { AegisWebPush } from "./push/AegisWebPush.js";
 function debounce(func, wait) {
   let timeoutId = null;
@@ -37,6 +37,7 @@ class AegisInAppManager {
     this.userId = config.userId;
     this.contactId = config.contactId;
     this.organizationId = config.organizationId;
+    this.propertyId = config.propertyId;
     this.debugMode = config.debugMode || false;
     this.enableSSE = config.enableSSE === true;
   }
@@ -154,6 +155,9 @@ class AegisInAppManager {
       if (this.organizationId) {
         headers["X-Organization-ID"] = this.organizationId;
       }
+      if (this.propertyId) {
+        headers["X-Property-Id"] = this.propertyId;
+      }
       const abAssignments = this.getABAssignments();
       if (Object.keys(abAssignments).length > 0) {
         headers["X-AB-Assignments"] = btoa(JSON.stringify(abAssignments));
@@ -379,12 +383,12 @@ class AegisInAppManager {
       const update = () => {
         const diff = Math.max(0, target - Date.now());
         const h = String(Math.floor(diff / 36e5)).padStart(2, "0");
-        const m = String(Math.floor(diff % 36e5 / 6e4)).padStart(2, "0");
+        const m2 = String(Math.floor(diff % 36e5 / 6e4)).padStart(2, "0");
         const s = String(Math.floor(diff % 6e4 / 1e3)).padStart(2, "0");
         const spans = digits.querySelectorAll("span");
         if (spans.length >= 5) {
           spans[0].textContent = h;
-          spans[2].textContent = m;
+          spans[2].textContent = m2;
           spans[4].textContent = s;
         }
         if (diff > 0) requestAnimationFrame(update);
@@ -1460,11 +1464,11 @@ function renderPreview(config) {
     debugMode: false,
     enableSSE: false
   });
-  const m = manager;
-  m.trackEvent = async () => {
+  const m2 = manager;
+  m2.trackEvent = async () => {
   };
-  m.addAnimationStyles();
-  m.displayCampaign(config);
+  m2.addAnimationStyles();
+  m2.displayCampaign(config);
 }
 class AegisPlacementManager {
   constructor(config) {
@@ -4347,6 +4351,79 @@ class SdkConfigPoller {
     }
   }
 }
+const COOKIE_NAME = "aegis_fpc";
+const COOKIE_MAX_AGE_DAYS = 365 * 2;
+class BootstrapError extends Error {
+  constructor(status, message) {
+    super(message);
+    this.status = status;
+    this.name = "BootstrapError";
+  }
+}
+function readFirstPartyCookie() {
+  if (typeof document === "undefined") return null;
+  const match = document.cookie.match(new RegExp(`(?:^|;\\s*)${COOKIE_NAME}=([^;]+)`));
+  return match ? decodeURIComponent(match[1]) : null;
+}
+function writeFirstPartyCookie(cookieId) {
+  if (typeof document === "undefined") return;
+  const expires = /* @__PURE__ */ new Date();
+  expires.setDate(expires.getDate() + COOKIE_MAX_AGE_DAYS);
+  document.cookie = `${COOKIE_NAME}=${encodeURIComponent(cookieId)};expires=${expires.toUTCString()};path=/;SameSite=Lax`;
+  try {
+    window.localStorage.setItem(COOKIE_NAME, cookieId);
+  } catch {
+  }
+}
+async function bootstrap(apiHost, req) {
+  const body = { writeKey: req.writeKey };
+  if (req.currentOrigin) body.currentOrigin = req.currentOrigin;
+  if (req.firstPartyCookieId) body.firstPartyCookieId = req.firstPartyCookieId;
+  if (req.attestationToken) body.attestationToken = req.attestationToken;
+  if (req.userAgent) body.userAgent = req.userAgent;
+  const url = `${apiHost.replace(/\/$/, "")}/v1/sdk/bootstrap`;
+  const doFetch = async () => fetch(url, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(body),
+    credentials: "omit"
+  });
+  let resp = await doFetch();
+  if (resp.status >= 500) {
+    await new Promise((r) => setTimeout(r, 750));
+    resp = await doFetch();
+  }
+  if (resp.status === 401) {
+    throw new BootstrapError(401, "writeKey not recognized or revoked");
+  }
+  if (resp.status === 403) {
+    throw new BootstrapError(403, "Origin validation failed — this writeKey is bound to a different property");
+  }
+  if (!resp.ok) {
+    throw new BootstrapError(resp.status, `Bootstrap failed: HTTP ${resp.status}`);
+  }
+  const json = await resp.json();
+  writeFirstPartyCookie(json.firstPartyCookieId);
+  return json;
+}
+async function deriveDeviceFingerprint(firstPartyCookieId) {
+  const ua = typeof navigator !== "undefined" ? navigator.userAgent : "";
+  const platform = typeof navigator !== "undefined" ? navigator.platform || "" : "";
+  const language = typeof navigator !== "undefined" ? navigator.language || "" : "";
+  const input = `${firstPartyCookieId}|${ua}|${platform}|${language}`;
+  if (typeof crypto !== "undefined" && crypto.subtle) {
+    const bytes = new TextEncoder().encode(input);
+    const hash = await crypto.subtle.digest("SHA-256", bytes);
+    const hex = Array.from(new Uint8Array(hash)).map((b) => b.toString(16).padStart(2, "0")).join("");
+    return hex;
+  }
+  let h = 2166136261;
+  for (let i = 0; i < input.length; i++) {
+    h ^= input.charCodeAt(i);
+    h = h + ((h << 1) + (h << 4) + (h << 7) + (h << 8) + (h << 24)) >>> 0;
+  }
+  return `fnv-${h.toString(16)}`;
+}
 const aegis = new Aegis();
 export {
   Aegis,
@@ -4354,13 +4431,21 @@ export {
   AegisPlacementManager,
   AegisWebPush,
   AegisWidgetManager,
+  B as BloomFilter,
+  BootstrapError,
   E as EcommerceTracker,
+  N as NameGovernor,
   R as RateLimiter,
   SdkConfigPoller,
   TriggerEngine,
+  bootstrap,
   debounce,
   aegis as default,
+  deriveDeviceFingerprint,
+  m as murmurhash3_x86_32,
+  readFirstPartyCookie,
   renderPreview,
-  throttle
+  throttle,
+  writeFirstPartyCookie
 };
 //# sourceMappingURL=index.js.map