@active-reach/web-sdk 1.37.0 → 1.38.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { S as Storage, l as logger, A as Aegis } from "./analytics-Qyzk8JaB.mjs";
-import { B, E, N, R, U, m } from "./analytics-Qyzk8JaB.mjs";
+import { S as Storage, r as redactUrl, l as logger, A as Aegis } from "./analytics-Cz1ZBOxH.mjs";
+import { B, E, N, R, U, m } from "./analytics-Cz1ZBOxH.mjs";
 import { AegisWebPush } from "./push/AegisWebPush.js";
 function debounce(func, wait) {
   let timeoutId = null;
@@ -26,6 +26,13 @@ function throttle(func, limit) {
   };
 }
 const PDP_SKU_RE = /\/p\/([^/?#]+)/;
+function productPath(sku) {
+  const encoded = encodeURIComponent(sku).replace(
+    /[!'()*]/g,
+    (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`
+  );
+  return `/p/${encoded}`;
+}
 function parseAction(actionUrl, meta) {
   const url = (actionUrl ?? "").trim();
   const m2 = meta ?? {};
@@ -61,7 +68,7 @@ function parseAction(actionUrl, meta) {
       case "open-product":
       case "product": {
         const sku = params.get("sku") || m2.sku || void 0;
-        return { type: "open_product", sku, productId: m2.product_id, url: sku ? `/p/${sku}` : void 0 };
+        return { type: "open_product", sku, productId: m2.product_id, url: sku ? productPath(sku) : void 0 };
       }
       default:
         return { type: "custom", name: verb || "unknown", payload: Object.fromEntries(params) };
@@ -96,7 +103,7 @@ function parseAction(actionUrl, meta) {
   }
   return { type: "dismiss" };
 }
-function fallbackUrlForAction(a, productUrl = (sku) => `/p/${encodeURIComponent(sku)}`) {
+function fallbackUrlForAction(a, productUrl = productPath) {
   switch (a.type) {
     case "navigate":
       return a.url;
@@ -652,9 +659,11 @@ function appendRatingThanks(wrap, el2, ctx, fg, accent, isHigh) {
     cta.textContent = el2.rating_high_cta || "Leave a review";
     cta.style.cssText = `margin:4px auto 0;display:block;padding:9px 18px;border:none;border-radius:999px;background:${accent};color:#fff;font-size:13px;font-weight:800;cursor:pointer;`;
     cta.addEventListener("click", () => {
+      var _a;
       ctx.trackEvent(ctx.campaign.id, "clicked", {
         meta: { element: "rating_input", cta: "high_review" }
       });
+      void ((_a = ctx.submitResponse) == null ? void 0 : _a.call(ctx, "review_redirect", { cta: "high_review" }));
       if (ctx.navigate) ctx.navigate(url, "cta");
       else window.location.href = url;
     });
@@ -821,6 +830,7 @@ function buildProductRatingListElement(el2, ctx, fg) {
   const orderId = slot.getAttribute("data-order-id");
   const billCode = slot.getAttribute("data-bill-code");
   const token = slot.getAttribute("data-token");
+  const reviewsViaPage = Boolean(slot.getAttribute("data-reviews-url"));
   const reviewsUrl = slot.getAttribute("data-reviews-url") || el2.rating_high_url || null;
   const scale = typeof el2.rating_scale === "number" && el2.rating_scale >= 2 && el2.rating_scale <= 10 ? Math.floor(el2.rating_scale) : 5;
   const showThumb = el2.show_thumbnail !== false && el2.rating_layout !== "compact";
@@ -1071,6 +1081,12 @@ function buildProductRatingListElement(el2, ctx, fg) {
       a.href = ctx.sanitizeUrl(reviewsUrl) || "#";
       a.textContent = el2.rating_high_cta || "Share a review";
       a.style.cssText = `display:inline-block;margin-top:6px;font-size:12px;font-weight:700;color:${accent};text-decoration:none;`;
+      if (!reviewsViaPage) {
+        a.addEventListener("click", () => {
+          var _a2;
+          void ((_a2 = ctx.submitResponse) == null ? void 0 : _a2.call(ctx, "review_redirect", { cta: "item_rating_review" }));
+        });
+      }
       ack.appendChild(a);
     }
     wrap.appendChild(ack);
@@ -1247,9 +1263,11 @@ function appendNpsThanks(wrap, el2, ctx, fg, accent, isPromoter) {
     cta.textContent = el2.nps_promoter_cta || "Leave a review";
     cta.style.cssText = `margin:4px auto 0;display:block;padding:9px 18px;border:none;border-radius:999px;background:${accent};color:#fff;font-size:13px;font-weight:800;cursor:pointer;`;
     cta.addEventListener("click", () => {
+      var _a;
       ctx.trackEvent(ctx.campaign.id, "clicked", {
         meta: { element: "nps", cta: "promoter_review" }
       });
+      void ((_a = ctx.submitResponse) == null ? void 0 : _a.call(ctx, "review_redirect", { cta: "promoter_review" }));
       if (ctx.navigate) ctx.navigate(url, "cta");
       else window.location.href = url;
     });
@@ -4937,7 +4955,7 @@ class TriggerEngine {
         this.exitIntentFired = true;
         this.emit("exit_intent", {
           client_y: event.clientY,
-          page_url: window.location.href,
+          page_url: redactUrl(window.location.href),
           time_on_page: this.pageLoadTime ? (Date.now() - this.pageLoadTime) / 1e3 : 0
         });
       }
@@ -4958,7 +4976,7 @@ class TriggerEngine {
             scroll_velocity: velocity,
             scroll_distance: distance,
             current_position: currentY,
-            page_url: window.location.href,
+            page_url: redactUrl(window.location.href),
             time_on_page: this.pageLoadTime ? (Date.now() - this.pageLoadTime) / 1e3 : 0
           });
           this.scrollVelocityCooldownTimer = window.setTimeout(() => {
@@ -4972,12 +4990,12 @@ class TriggerEngine {
     this.handleVisibilityChange = () => {
       if (document.hidden) {
         this.emit("visibility_hidden", {
-          page_url: window.location.href,
+          page_url: redactUrl(window.location.href),
           time_on_page: this.pageLoadTime ? (Date.now() - this.pageLoadTime) / 1e3 : 0
         });
       } else {
         this.emit("visibility_visible", {
-          page_url: window.location.href
+          page_url: redactUrl(window.location.href)
         });
       }
     };
@@ -4988,7 +5006,7 @@ class TriggerEngine {
       this.backButtonFired = true;
       window.history.pushState(null, "", window.location.href);
       this.emit("back_button", {
-        page_url: window.location.href,
+        page_url: redactUrl(window.location.href),
         time_on_page: this.pageLoadTime ? (Date.now() - this.pageLoadTime) / 1e3 : 0
       });
     };
@@ -5016,7 +5034,7 @@ class TriggerEngine {
       const timerId = window.setTimeout(() => {
         this.emit(`time_on_page_${seconds}`, {
           seconds,
-          page_url: window.location.href
+          page_url: redactUrl(window.location.href)
         });
         this.timeOnPageTargets.delete(seconds);
       }, seconds * 1e3);
@@ -5936,6 +5954,54 @@ function renderReviewsOverlay(ctx, creds) {
   document.body.appendChild(overlay);
   renderReviewsInline(ctx, body, creds);
 }
+const RETURNING_MARKER_KEY = "aegis_returning_user";
+const SESSION_VERDICT_KEY = "aegis_new_visitor_session";
+let cachedVerdict = null;
+function readSessionVerdict() {
+  try {
+    if (typeof sessionStorage === "undefined") return null;
+    const stored = sessionStorage.getItem(SESSION_VERDICT_KEY);
+    if (stored === "1") return true;
+    if (stored === "0") return false;
+    return null;
+  } catch {
+    return null;
+  }
+}
+function writeSessionVerdict(verdict) {
+  try {
+    if (typeof sessionStorage === "undefined") return;
+    sessionStorage.setItem(SESSION_VERDICT_KEY, verdict ? "1" : "0");
+  } catch {
+  }
+}
+function readMarkerVerdict() {
+  try {
+    if (typeof localStorage === "undefined") return false;
+    return localStorage.getItem(RETURNING_MARKER_KEY) === null;
+  } catch {
+    return false;
+  }
+}
+function isNewVisitor() {
+  if (cachedVerdict !== null) return cachedVerdict;
+  const sessionVerdict = readSessionVerdict();
+  if (sessionVerdict !== null) {
+    cachedVerdict = sessionVerdict;
+    return cachedVerdict;
+  }
+  cachedVerdict = readMarkerVerdict();
+  writeSessionVerdict(cachedVerdict);
+  return cachedVerdict;
+}
+function markReturningVisitor() {
+  isNewVisitor();
+  try {
+    if (typeof localStorage === "undefined") return;
+    localStorage.setItem(RETURNING_MARKER_KEY, "1");
+  } catch {
+  }
+}
 function readAnonIdFromStorage$1() {
   if (typeof document === "undefined") return void 0;
   try {
@@ -5945,6 +6011,11 @@ function readAnonIdFromStorage$1() {
     return void 0;
   }
 }
+const JOURNEY_ACK_ACTION = {
+  impression: "viewed",
+  clicked: "clicked",
+  dismissed: "dismissed"
+};
 function svgNode(svg) {
   try {
     const doc = new DOMParser().parseFromString(svg, "image/svg+xml");
@@ -5956,6 +6027,7 @@ function svgNode(svg) {
   }
 }
 const productIdentityCache = /* @__PURE__ */ new WeakMap();
+const UUID_SHAPE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function productIdentitiesFor(campaign) {
   const ic = campaign == null ? void 0 : campaign.interactive_config;
   const cards = ic && Array.isArray(ic.cards) ? ic.cards : [];
@@ -5966,11 +6038,18 @@ function productIdentitiesFor(campaign) {
   const seen = /* @__PURE__ */ new Set();
   for (const card of cards.slice(0, 24)) {
     const meta = (card == null ? void 0 : card.metadata) || {};
-    const identity = String(meta.product_id || "").trim() || String(meta.sku || "").trim() || String(meta.platform_product_id || "").trim();
+    const rawId = String(meta.product_id || "").trim();
+    const rawSku = String(meta.sku || "").trim();
+    const platformId = String(meta.platform_product_id || "").trim();
+    const productId = UUID_SHAPE.test(rawId) ? rawId : "";
+    const sku = rawSku && !UUID_SHAPE.test(rawSku) ? rawSku : rawId && !productId ? rawId : "";
+    const identity = productId || sku || platformId;
     if (!identity || seen.has(identity)) continue;
     seen.add(identity);
     items.push({
-      product_id: identity,
+      ...productId ? { product_id: productId } : {},
+      ...sku ? { sku } : {},
+      ...!productId && !sku && platformId ? { platform_product_id: platformId } : {},
       name: String((card == null ? void 0 : card.title) || identity),
       quantity: 1
     });
@@ -5981,7 +6060,7 @@ function productIdentitiesFor(campaign) {
 }
 const _AegisInAppManager = class _AegisInAppManager {
   constructor(config) {
-    this.productUrl = (sku) => `/p/${encodeURIComponent(sku)}`;
+    this.productUrl = productPath;
     this.campaigns = [];
     this.displayedCampaigns = /* @__PURE__ */ new Set();
     this._displaySizeMul = 1;
@@ -6007,6 +6086,8 @@ const _AegisInAppManager = class _AegisInAppManager {
     this.slotUnfilledBeaconed = /* @__PURE__ */ new Set();
     this.slotUnfilledSweepTimer = null;
     this._pushOptInLoading = false;
+    this.journeyStepByCampaign = /* @__PURE__ */ new Map();
+    this.journeyAcks = /* @__PURE__ */ new Set();
     this.writeKey = config.writeKey;
     this.apiHost = config.apiHost || "https://api.aegis.ai";
     this.userId = config.userId ?? readAnonIdFromStorage$1();
@@ -6112,13 +6193,13 @@ const _AegisInAppManager = class _AegisInAppManager {
       this.log("AegisInApp already initialized");
       return;
     }
-    if (typeof localStorage !== "undefined") {
-      localStorage.setItem("aegis_returning_user", "1");
-      try {
+    markReturningVisitor();
+    try {
+      if (typeof localStorage !== "undefined") {
         const pv = parseInt(localStorage.getItem("aegis_pv_count") || "0", 10);
         localStorage.setItem("aegis_pv_count", String(pv + 1));
-      } catch {
       }
+    } catch {
     }
     ensureInAppFont();
     await this.refreshCampaigns();
@@ -6495,9 +6576,11 @@ const _AegisInAppManager = class _AegisInAppManager {
     try {
       const context = new URLSearchParams({
         device_type: this.detectDeviceType(),
-        page_url: typeof window !== "undefined" ? window.location.pathname + window.location.search : "/"
+        // Credential params keep their key and lose their value, so a
+        // `*placed=1*` / `*?step=cart*` rule still matches.
+        page_url: typeof window !== "undefined" ? redactUrl(window.location.pathname + window.location.search) : "/"
       });
-      context.set("is_new_user", this.isNewUser() ? "true" : "false");
+      context.set("is_new_user", isNewVisitor() ? "true" : "false");
       if (this.currentSurface) {
         context.set("current_surface", this.currentSurface);
       }
@@ -6579,28 +6662,29 @@ const _AegisInAppManager = class _AegisInAppManager {
     if (/iPad|Tablet/i.test(ua)) return "tablet";
     return "desktop";
   }
-  isNewUser() {
-    if (typeof localStorage === "undefined") return true;
-    return !localStorage.getItem("aegis_returning_user");
-  }
   // --- A/B Assignment Persistence (Critical Fix C) ---
+  // Both A/B helpers sit on the campaign-fetch path, so blocked storage
+  // (where even `typeof localStorage` throws) must not abort the fetch.
   getABAssignments() {
-    if (typeof localStorage === "undefined") return {};
     try {
+      if (typeof localStorage === "undefined") return {};
       return JSON.parse(localStorage.getItem("aegis_ab_assignments") || "{}");
     } catch {
       return {};
     }
   }
   processABAssignments(campaigns) {
-    if (typeof localStorage === "undefined") return;
     const stored = this.getABAssignments();
     for (const campaign of campaigns) {
       if (campaign.assigned_variant_id) {
         stored[campaign.id] = campaign.assigned_variant_id;
       }
     }
-    localStorage.setItem("aegis_ab_assignments", JSON.stringify(stored));
+    try {
+      if (typeof localStorage === "undefined") return;
+      localStorage.setItem("aegis_ab_assignments", JSON.stringify(stored));
+    } catch {
+    }
   }
   getVariantId(campaignId) {
     const assignments = this.getABAssignments();
@@ -11864,6 +11948,67 @@ const _AegisInAppManager = class _AegisInAppManager {
     } catch (error) {
       this.log(`Error tracking event: ${error}`, "error");
     }
+    const step = (trackedCampaign == null ? void 0 : trackedCampaign.journey_step_execution_id) || this.journeyStepByCampaign.get(campaignId);
+    const ackAction = JOURNEY_ACK_ACTION[eventType];
+    if (step) {
+      this.journeyStepByCampaign.set(campaignId, step);
+      if (ackAction) void this.ackJourneyQueueItem(step, ackAction);
+    }
+  }
+  /**
+   * POST /v1/in-app/widgets/{step}/ack — the canonical writer of a queue row's
+   * seen-state (the same endpoint the Android and iOS SDKs call). Fail-soft by
+   * construction: it runs after the render, is never awaited by it, and never
+   * throws. A network error or 5xx is retried once; if that also fails the key
+   * is released, so the next render of the (still re-served) message tries
+   * again. A 4xx is the server's answer and is not retried. The server side is
+   * idempotent — a repeated action is answered `late_arrival` and writes
+   * nothing — so a duplicate ack is harmless.
+   */
+  async ackJourneyQueueItem(step, action, attempt = 0) {
+    const key = `${step}:${action}`;
+    if (attempt === 0) {
+      if (this.journeyAcks.has(key)) return;
+      this.journeyAcks.add(key);
+    }
+    const headers = {
+      "Content-Type": "application/json",
+      "X-Aegis-Write-Key": this.writeKey
+    };
+    if (this.organizationId) headers["X-Organization-ID"] = this.organizationId;
+    if (this.userId) headers["X-User-ID"] = this.userId;
+    if (this.contactId) headers["X-Contact-ID"] = this.contactId;
+    let retryable = true;
+    try {
+      const response = await fetch(
+        `${this.apiHost}/v1/in-app/widgets/${encodeURIComponent(step)}/ack`,
+        {
+          method: "POST",
+          headers,
+          body: JSON.stringify({ action }),
+          credentials: "include",
+          // A click usually navigates away at once; keepalive lets the ack
+          // outlive the page instead of being cancelled with it.
+          keepalive: true
+        }
+      );
+      if (response.ok) {
+        this.log(`Acknowledged queued message ${step}: ${action}`);
+        return;
+      }
+      retryable = response.status >= 500 || response.status === 408 || response.status === 429;
+      this.log(`Queue ack ${action} for ${step} failed: HTTP ${response.status}`, "warn");
+    } catch (error) {
+      this.log(`Queue ack ${action} for ${step} failed: ${error}`, "warn");
+    }
+    if (!retryable) return;
+    if (attempt === 0) {
+      setTimeout(() => {
+        void this.ackJourneyQueueItem(step, action, 1);
+      }, _AegisInAppManager.JOURNEY_ACK_RETRY_MS);
+      return;
+    }
+    this.journeyAcks.delete(key);
   }
   log(message, level = "log") {
     if (this.debugMode) {
@@ -11914,6 +12059,7 @@ _AegisInAppManager.KNOWN_SURFACES = /* @__PURE__ */ new Set([
   "external_mobile_screen"
 ]);
 _AegisInAppManager.SERVED_DEDUP_PREFIX = "aegis_served_fired:";
+_AegisInAppManager.JOURNEY_ACK_RETRY_MS = 2e3;
 let AegisInAppManager = _AegisInAppManager;
 function renderPreview(config, opts) {
   document.querySelectorAll(
@@ -12632,9 +12778,10 @@ class PrefetchBundleClient {
     const ctx = this.contextProvider();
     const qs = new URLSearchParams();
     if (ctx.device_type) qs.set("device_type", ctx.device_type);
-    if (ctx.page_url) qs.set("page_url", ctx.page_url);
+    if (ctx.page_url) qs.set("page_url", redactUrl(ctx.page_url));
     if (ctx.geo) qs.set("geo", ctx.geo);
-    qs.set("is_new_user", ctx.is_new_user ? "true" : "false");
+    const isNewUser = ctx.is_new_user ?? isNewVisitor();
+    qs.set("is_new_user", isNewUser ? "true" : "false");
     const url = `${this.apiHost}/v1/sdk/prefetch-bundle?${qs.toString()}`;
     const headers = {
       "X-Aegis-Write-Key": this.writeKey,
@@ -13516,8 +13663,8 @@ class AegisWidgetManager {
       cart_items: this.cartData.cart_items,
       user_email: this.userId,
       abandoned_at: (/* @__PURE__ */ new Date()).toISOString(),
-      page_url: window.location.href,
-      referrer: document.referrer
+      page_url: redactUrl(window.location.href),
+      referrer: redactUrl(document.referrer)
     };
     const beaconUrl = `${this.apiHost}/v1/widgets/beacon/cart-abandoned`;
     if (navigator.sendBeacon) {
@@ -14021,7 +14168,9 @@ class AegisWidgetManager {
       cart_total: ((_c = data.cart) == null ? void 0 : _c.cart_total) || 0,
       cart_currency: ((_d = data.cart) == null ? void 0 : _d.cart_currency) || "USD",
       cart_items: ((_e = data.cart) == null ? void 0 : _e.cart_items) || [],
-      cart_url: window.location.href,
+      // Redacted: a stored cart URL is re-sent later as a recovery link, and a
+      // credential in it (`?t=` / `?k=`) must not outlive this page view.
+      cart_url: redactUrl(window.location.href),
       platform: "web",
       geo_region: geoRegion,
       device_type: deviceType,
@@ -15137,7 +15286,7 @@ const _AegisMessageRuntime = class _AegisMessageRuntime {
     var _a;
     this.initialized = false;
     {
-      const v = "1.37.0";
+      const v = "1.38.0";
       try {
         globalThis.__AEGIS_SDK_VERSION__ = v;
       } catch {