@active-reach/web-sdk 1.37.0 → 1.39.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { S as Storage, l as logger, A as Aegis } from "./analytics-Qyzk8JaB.mjs";
-import { B, E, N, R, U, m } from "./analytics-Qyzk8JaB.mjs";
+import { S as Storage, r as redactUrl, l as logger, A as Aegis } from "./analytics-DoHdxjjh.mjs";
+import { B, E, N, R, U, m } from "./analytics-DoHdxjjh.mjs";
 import { AegisWebPush } from "./push/AegisWebPush.js";
 function debounce(func, wait) {
   let timeoutId = null;
@@ -26,6 +26,13 @@ function throttle(func, limit) {
   };
 }
 const PDP_SKU_RE = /\/p\/([^/?#]+)/;
+function productPath(sku) {
+  const encoded = encodeURIComponent(sku).replace(
+    /[!'()*]/g,
+    (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`
+  );
+  return `/p/${encoded}`;
+}
 function parseAction(actionUrl, meta) {
   const url = (actionUrl ?? "").trim();
   const m2 = meta ?? {};
@@ -61,7 +68,7 @@ function parseAction(actionUrl, meta) {
       case "open-product":
       case "product": {
         const sku = params.get("sku") || m2.sku || void 0;
-        return { type: "open_product", sku, productId: m2.product_id, url: sku ? `/p/${sku}` : void 0 };
+        return { type: "open_product", sku, productId: m2.product_id, url: sku ? productPath(sku) : void 0 };
       }
       default:
         return { type: "custom", name: verb || "unknown", payload: Object.fromEntries(params) };
@@ -96,7 +103,7 @@ function parseAction(actionUrl, meta) {
   }
   return { type: "dismiss" };
 }
-function fallbackUrlForAction(a, productUrl = (sku) => `/p/${encodeURIComponent(sku)}`) {
+function fallbackUrlForAction(a, productUrl = productPath) {
   switch (a.type) {
     case "navigate":
       return a.url;
@@ -652,9 +659,11 @@ function appendRatingThanks(wrap, el2, ctx, fg, accent, isHigh) {
     cta.textContent = el2.rating_high_cta || "Leave a review";
     cta.style.cssText = `margin:4px auto 0;display:block;padding:9px 18px;border:none;border-radius:999px;background:${accent};color:#fff;font-size:13px;font-weight:800;cursor:pointer;`;
     cta.addEventListener("click", () => {
+      var _a;
       ctx.trackEvent(ctx.campaign.id, "clicked", {
         meta: { element: "rating_input", cta: "high_review" }
       });
+      void ((_a = ctx.submitResponse) == null ? void 0 : _a.call(ctx, "review_redirect", { cta: "high_review" }));
       if (ctx.navigate) ctx.navigate(url, "cta");
       else window.location.href = url;
     });
@@ -821,6 +830,7 @@ function buildProductRatingListElement(el2, ctx, fg) {
   const orderId = slot.getAttribute("data-order-id");
   const billCode = slot.getAttribute("data-bill-code");
   const token = slot.getAttribute("data-token");
+  const reviewsViaPage = Boolean(slot.getAttribute("data-reviews-url"));
   const reviewsUrl = slot.getAttribute("data-reviews-url") || el2.rating_high_url || null;
   const scale = typeof el2.rating_scale === "number" && el2.rating_scale >= 2 && el2.rating_scale <= 10 ? Math.floor(el2.rating_scale) : 5;
   const showThumb = el2.show_thumbnail !== false && el2.rating_layout !== "compact";
@@ -1071,6 +1081,12 @@ function buildProductRatingListElement(el2, ctx, fg) {
       a.href = ctx.sanitizeUrl(reviewsUrl) || "#";
       a.textContent = el2.rating_high_cta || "Share a review";
       a.style.cssText = `display:inline-block;margin-top:6px;font-size:12px;font-weight:700;color:${accent};text-decoration:none;`;
+      if (!reviewsViaPage) {
+        a.addEventListener("click", () => {
+          var _a2;
+          void ((_a2 = ctx.submitResponse) == null ? void 0 : _a2.call(ctx, "review_redirect", { cta: "item_rating_review" }));
+        });
+      }
       ack.appendChild(a);
     }
     wrap.appendChild(ack);
@@ -1247,9 +1263,11 @@ function appendNpsThanks(wrap, el2, ctx, fg, accent, isPromoter) {
     cta.textContent = el2.nps_promoter_cta || "Leave a review";
     cta.style.cssText = `margin:4px auto 0;display:block;padding:9px 18px;border:none;border-radius:999px;background:${accent};color:#fff;font-size:13px;font-weight:800;cursor:pointer;`;
     cta.addEventListener("click", () => {
+      var _a;
       ctx.trackEvent(ctx.campaign.id, "clicked", {
         meta: { element: "nps", cta: "promoter_review" }
       });
+      void ((_a = ctx.submitResponse) == null ? void 0 : _a.call(ctx, "review_redirect", { cta: "promoter_review" }));
       if (ctx.navigate) ctx.navigate(url, "cta");
       else window.location.href = url;
     });
@@ -1393,8 +1411,11 @@ function buildProgressElement(el2, ctx, accent, muted) {
     return code && M[code] || "";
   };
   const threshold = () => {
+    var _a;
     if (typeof el2.threshold === "number" && el2.threshold > 0) return el2.threshold;
     if (el2.threshold_source === "free_delivery_setting") {
+      const fromCart = ctx.getCartState && ((_a = ctx.getCartState()) == null ? void 0 : _a.freeDeliveryAbove);
+      if (typeof fromCart === "number" && fromCart > 0) return fromCart;
       const v = Number(props()["cart.free_delivery_above"]);
       if (v > 0) return v;
     }
@@ -1429,6 +1450,11 @@ function buildProgressElement(el2, ctx, accent, muted) {
     var _a;
     const th = threshold();
     const cur = readCur();
+    if (th <= 0 && el2.threshold_source === "free_delivery_setting") {
+      wrap.style.display = "none";
+      return;
+    }
+    wrap.style.display = "flex";
     const { pct, complete } = computeProgress({ threshold: th, current: cur });
     bar.style.width = `${pct}%`;
     const labeled = cardProgressSubLabel({
@@ -3195,10 +3221,11 @@ function fillBar(accent, pct, h = 8) {
 }
 function renderStreak(ctx) {
   const ic = ctx.campaign.interactive_config || {};
+  const count = num(ic.streak_count, 0);
+  if (count <= 0) return;
   const s = openGameModal(ctx, "aegis-in-app-streak");
-  const count = num(ic.streak_count, 5);
   const goal = num(ic.streak_goal, count + 1);
-  const reward = str$1(ic.streak_reward_text, "Come back tomorrow to keep it going.");
+  const reward = str$1(ic.streak_reward_text, "Order today to keep it going.");
   const days = ["M", "T", "W", "T", "F", "S", "S"];
   s.content.appendChild(gEl("div", "font-size:44px;line-height:1", "🔥"));
   s.content.appendChild(gEl("div", "font-size:22px;font-weight:800;margin:4px 0 2px", `${count}-day streak!`));
@@ -3215,11 +3242,13 @@ function renderStreak(ctx) {
   note.appendChild(gEl("b", "", `Day ${goal}`));
   note.appendChild(document.createTextNode(" unlocks a reward."));
   s.content.appendChild(note);
-  s.ctaButton(str$1(ic.streak_cta_text, "Keep my streak"), () => {
+  const hasUrl = Boolean(str$1(ctx.campaign.action_url));
+  s.ctaButton(str$1(ic.streak_cta_text, hasUrl ? "Order today" : "Got it"), () => {
     var _a, _b, _c;
     (_a = ctx.haptic) == null ? void 0 : _a.call(ctx, 20);
     (_b = ctx.playReaction) == null ? void 0 : _b.call(ctx, s.card, "affirm");
     void ((_c = ctx.submitResponse) == null ? void 0 : _c.call(ctx, "streak", { streak_count: count }));
+    if (!hasUrl) s.dismiss();
   });
 }
 function renderMilestone(ctx) {
@@ -4937,7 +4966,7 @@ class TriggerEngine {
         this.exitIntentFired = true;
         this.emit("exit_intent", {
           client_y: event.clientY,
-          page_url: window.location.href,
+          page_url: redactUrl(window.location.href),
           time_on_page: this.pageLoadTime ? (Date.now() - this.pageLoadTime) / 1e3 : 0
         });
       }
@@ -4958,7 +4987,7 @@ class TriggerEngine {
             scroll_velocity: velocity,
             scroll_distance: distance,
             current_position: currentY,
-            page_url: window.location.href,
+            page_url: redactUrl(window.location.href),
             time_on_page: this.pageLoadTime ? (Date.now() - this.pageLoadTime) / 1e3 : 0
           });
           this.scrollVelocityCooldownTimer = window.setTimeout(() => {
@@ -4972,12 +5001,12 @@ class TriggerEngine {
     this.handleVisibilityChange = () => {
       if (document.hidden) {
         this.emit("visibility_hidden", {
-          page_url: window.location.href,
+          page_url: redactUrl(window.location.href),
           time_on_page: this.pageLoadTime ? (Date.now() - this.pageLoadTime) / 1e3 : 0
         });
       } else {
         this.emit("visibility_visible", {
-          page_url: window.location.href
+          page_url: redactUrl(window.location.href)
         });
       }
     };
@@ -4988,7 +5017,7 @@ class TriggerEngine {
       this.backButtonFired = true;
       window.history.pushState(null, "", window.location.href);
       this.emit("back_button", {
-        page_url: window.location.href,
+        page_url: redactUrl(window.location.href),
         time_on_page: this.pageLoadTime ? (Date.now() - this.pageLoadTime) / 1e3 : 0
       });
     };
@@ -5016,7 +5045,7 @@ class TriggerEngine {
       const timerId = window.setTimeout(() => {
         this.emit(`time_on_page_${seconds}`, {
           seconds,
-          page_url: window.location.href
+          page_url: redactUrl(window.location.href)
         });
         this.timeOnPageTargets.delete(seconds);
       }, seconds * 1e3);
@@ -5936,6 +5965,54 @@ function renderReviewsOverlay(ctx, creds) {
   document.body.appendChild(overlay);
   renderReviewsInline(ctx, body, creds);
 }
+const RETURNING_MARKER_KEY = "aegis_returning_user";
+const SESSION_VERDICT_KEY = "aegis_new_visitor_session";
+let cachedVerdict = null;
+function readSessionVerdict() {
+  try {
+    if (typeof sessionStorage === "undefined") return null;
+    const stored = sessionStorage.getItem(SESSION_VERDICT_KEY);
+    if (stored === "1") return true;
+    if (stored === "0") return false;
+    return null;
+  } catch {
+    return null;
+  }
+}
+function writeSessionVerdict(verdict) {
+  try {
+    if (typeof sessionStorage === "undefined") return;
+    sessionStorage.setItem(SESSION_VERDICT_KEY, verdict ? "1" : "0");
+  } catch {
+  }
+}
+function readMarkerVerdict() {
+  try {
+    if (typeof localStorage === "undefined") return false;
+    return localStorage.getItem(RETURNING_MARKER_KEY) === null;
+  } catch {
+    return false;
+  }
+}
+function isNewVisitor() {
+  if (cachedVerdict !== null) return cachedVerdict;
+  const sessionVerdict = readSessionVerdict();
+  if (sessionVerdict !== null) {
+    cachedVerdict = sessionVerdict;
+    return cachedVerdict;
+  }
+  cachedVerdict = readMarkerVerdict();
+  writeSessionVerdict(cachedVerdict);
+  return cachedVerdict;
+}
+function markReturningVisitor() {
+  isNewVisitor();
+  try {
+    if (typeof localStorage === "undefined") return;
+    localStorage.setItem(RETURNING_MARKER_KEY, "1");
+  } catch {
+  }
+}
 function readAnonIdFromStorage$1() {
   if (typeof document === "undefined") return void 0;
   try {
@@ -5945,6 +6022,11 @@ function readAnonIdFromStorage$1() {
     return void 0;
   }
 }
+const JOURNEY_ACK_ACTION = {
+  impression: "viewed",
+  clicked: "clicked",
+  dismissed: "dismissed"
+};
 function svgNode(svg) {
   try {
     const doc = new DOMParser().parseFromString(svg, "image/svg+xml");
@@ -5956,6 +6038,7 @@ function svgNode(svg) {
   }
 }
 const productIdentityCache = /* @__PURE__ */ new WeakMap();
+const UUID_SHAPE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function productIdentitiesFor(campaign) {
   const ic = campaign == null ? void 0 : campaign.interactive_config;
   const cards = ic && Array.isArray(ic.cards) ? ic.cards : [];
@@ -5966,11 +6049,18 @@ function productIdentitiesFor(campaign) {
   const seen = /* @__PURE__ */ new Set();
   for (const card of cards.slice(0, 24)) {
     const meta = (card == null ? void 0 : card.metadata) || {};
-    const identity = String(meta.product_id || "").trim() || String(meta.sku || "").trim() || String(meta.platform_product_id || "").trim();
+    const rawId = String(meta.product_id || "").trim();
+    const rawSku = String(meta.sku || "").trim();
+    const platformId = String(meta.platform_product_id || "").trim();
+    const productId = UUID_SHAPE.test(rawId) ? rawId : "";
+    const sku = rawSku && !UUID_SHAPE.test(rawSku) ? rawSku : rawId && !productId ? rawId : "";
+    const identity = productId || sku || platformId;
     if (!identity || seen.has(identity)) continue;
     seen.add(identity);
     items.push({
-      product_id: identity,
+      ...productId ? { product_id: productId } : {},
+      ...sku ? { sku } : {},
+      ...!productId && !sku && platformId ? { platform_product_id: platformId } : {},
       name: String((card == null ? void 0 : card.title) || identity),
       quantity: 1
     });
@@ -5981,7 +6071,7 @@ function productIdentitiesFor(campaign) {
 }
 const _AegisInAppManager = class _AegisInAppManager {
   constructor(config) {
-    this.productUrl = (sku) => `/p/${encodeURIComponent(sku)}`;
+    this.productUrl = productPath;
     this.campaigns = [];
     this.displayedCampaigns = /* @__PURE__ */ new Set();
     this._displaySizeMul = 1;
@@ -6007,10 +6097,13 @@ const _AegisInAppManager = class _AegisInAppManager {
     this.slotUnfilledBeaconed = /* @__PURE__ */ new Set();
     this.slotUnfilledSweepTimer = null;
     this._pushOptInLoading = false;
+    this.journeyStepByCampaign = /* @__PURE__ */ new Map();
+    this.journeyAcks = /* @__PURE__ */ new Set();
     this.writeKey = config.writeKey;
     this.apiHost = config.apiHost || "https://api.aegis.ai";
     this.userId = config.userId ?? readAnonIdFromStorage$1();
     this.contactId = config.contactId;
+    this.contactToken = config.contactToken;
     this.organizationId = config.organizationId;
     this.propertyId = config.propertyId;
     this.debugMode = config.debugMode || false;
@@ -6112,13 +6205,13 @@ const _AegisInAppManager = class _AegisInAppManager {
       this.log("AegisInApp already initialized");
       return;
     }
-    if (typeof localStorage !== "undefined") {
-      localStorage.setItem("aegis_returning_user", "1");
-      try {
+    markReturningVisitor();
+    try {
+      if (typeof localStorage !== "undefined") {
         const pv = parseInt(localStorage.getItem("aegis_pv_count") || "0", 10);
         localStorage.setItem("aegis_pv_count", String(pv + 1));
-      } catch {
       }
+    } catch {
     }
     ensureInAppFont();
     await this.refreshCampaigns();
@@ -6225,9 +6318,10 @@ const _AegisInAppManager = class _AegisInAppManager {
     this.userId = userId;
     this.refreshCampaigns();
   }
-  updateContactId(contactId) {
+  updateContactId(contactId, contactToken) {
     var _a;
     this.contactId = contactId;
+    this.contactToken = contactToken;
     (_a = this.activeWebChat) == null ? void 0 : _a.updateContactId(contactId);
     this.disconnectSSE();
     if (this.enableSSE && this.organizationId) {
@@ -6495,9 +6589,11 @@ const _AegisInAppManager = class _AegisInAppManager {
     try {
       const context = new URLSearchParams({
         device_type: this.detectDeviceType(),
-        page_url: typeof window !== "undefined" ? window.location.pathname + window.location.search : "/"
+        // Credential params keep their key and lose their value, so a
+        // `*placed=1*` / `*?step=cart*` rule still matches.
+        page_url: typeof window !== "undefined" ? redactUrl(window.location.pathname + window.location.search) : "/"
       });
-      context.set("is_new_user", this.isNewUser() ? "true" : "false");
+      context.set("is_new_user", isNewVisitor() ? "true" : "false");
       if (this.currentSurface) {
         context.set("current_surface", this.currentSurface);
       }
@@ -6579,28 +6675,29 @@ const _AegisInAppManager = class _AegisInAppManager {
     if (/iPad|Tablet/i.test(ua)) return "tablet";
     return "desktop";
   }
-  isNewUser() {
-    if (typeof localStorage === "undefined") return true;
-    return !localStorage.getItem("aegis_returning_user");
-  }
   // --- A/B Assignment Persistence (Critical Fix C) ---
+  // Both A/B helpers sit on the campaign-fetch path, so blocked storage
+  // (where even `typeof localStorage` throws) must not abort the fetch.
   getABAssignments() {
-    if (typeof localStorage === "undefined") return {};
     try {
+      if (typeof localStorage === "undefined") return {};
       return JSON.parse(localStorage.getItem("aegis_ab_assignments") || "{}");
     } catch {
       return {};
     }
   }
   processABAssignments(campaigns) {
-    if (typeof localStorage === "undefined") return;
     const stored = this.getABAssignments();
     for (const campaign of campaigns) {
       if (campaign.assigned_variant_id) {
         stored[campaign.id] = campaign.assigned_variant_id;
       }
     }
-    localStorage.setItem("aegis_ab_assignments", JSON.stringify(stored));
+    try {
+      if (typeof localStorage === "undefined") return;
+      localStorage.setItem("aegis_ab_assignments", JSON.stringify(stored));
+    } catch {
+    }
   }
   getVariantId(campaignId) {
     const assignments = this.getABAssignments();
@@ -7454,6 +7551,23 @@ const _AegisInAppManager = class _AegisInAppManager {
       b.textContent = campaign.body;
       body.appendChild(b);
     }
+    const _profileKeys = /* @__PURE__ */ new Set(["first_name", "email", "date_of_birth"]);
+    const _collectsProfile = fields.some(
+      (f) => typeof f.maps_to === "string" && _profileKeys.has(f.maps_to)
+    );
+    if (_collectsProfile && this.organizationId && this.writeKey) {
+      const earn = document.createElement("div");
+      earn.style.cssText = "font-size: 11px; font-weight: 600; opacity: 0.75; margin-top: -4px;";
+      body.appendChild(earn);
+      void fetch(`${this.apiHost}/v1/in-app/earn-hint?rule_type=profile_complete`, {
+        headers: { "X-Aegis-Write-Key": this.writeKey, "X-Organization-ID": this.organizationId }
+      }).then((r) => r.ok ? r.json() : null).then((d) => {
+        if (!d || d.enabled !== true || !(Number(d.points) > 0)) return;
+        const name = typeof d.points_name === "string" ? d.points_name : "points";
+        earn.textContent = `Earn ${Number(d.points)} ${name} for completing your profile`;
+      }).catch(() => {
+      });
+    }
     const inputs = /* @__PURE__ */ new Map();
     const requiredKeys = /* @__PURE__ */ new Set();
     const ctrlCss = `padding: 9px 11px; border-radius: 9px; border: 1px solid ${text}33; background: ${text}0d; color: ${text}; font-size: 13px; width: 100%; box-sizing: border-box; font-family: inherit;`;
@@ -7560,6 +7674,7 @@ const _AegisInAppManager = class _AegisInAppManager {
         "X-Organization-ID": this.organizationId
       };
       if (this.contactId) headers["X-Contact-ID"] = this.contactId;
+      if (this.contactId && this.contactToken) headers["X-Contact-Token"] = this.contactToken;
       const variantId = campaign.assigned_variant_id;
       const res = await fetch(`${this.apiHost}/v1/in-app/responses`, {
         method: "POST",
@@ -7569,6 +7684,9 @@ const _AegisInAppManager = class _AegisInAppManager {
           campaign_id: campaign.id,
           response_type: "form",
           contact_id: this.contactId,
+          // The device id, so a play before login joins the person once they
+          // log in (RP1, Aman 2026-09-27). `user_id` may be the brand's own id.
+          anonymous_id: readAnonIdFromStorage$1(),
           user_id: this.userId,
           variant_id: variantId,
           platform: "web",
@@ -7595,6 +7713,7 @@ const _AegisInAppManager = class _AegisInAppManager {
         "X-Organization-ID": this.organizationId
       };
       if (this.contactId) headers["X-Contact-ID"] = this.contactId;
+      if (this.contactId && this.contactToken) headers["X-Contact-Token"] = this.contactToken;
       const variantId = campaign.assigned_variant_id;
       const res = await fetch(`${this.apiHost}/v1/in-app/responses`, {
         method: "POST",
@@ -7604,6 +7723,9 @@ const _AegisInAppManager = class _AegisInAppManager {
           campaign_id: campaign.id,
           response_type: responseType,
           contact_id: this.contactId,
+          // The device id, so a play before login joins the person once they
+          // log in (RP1, Aman 2026-09-27). `user_id` may be the brand's own id.
+          anonymous_id: readAnonIdFromStorage$1(),
           user_id: this.userId,
           variant_id: variantId,
           platform: "web",
@@ -11797,12 +11919,14 @@ const _AegisInAppManager = class _AegisInAppManager {
       if (this.userId) headers["X-User-ID"] = this.userId;
       if (this.contactId) headers["X-Contact-ID"] = this.contactId;
       const workspaceId = (_a = this.getWorkspaceId) == null ? void 0 : _a.call(this);
+      const storedAnonId = readAnonIdFromStorage$1();
+      const identifiedUserId = this.userId && this.userId !== storedAnonId ? this.userId : void 0;
       const body = {
         campaign_id: campaignId,
         event_type: eventType,
-        user_id: this.userId,
+        user_id: identifiedUserId,
         contact_id: this.contactId,
-        anonymous_id: this.userId,
+        anonymous_id: storedAnonId,
         platform: "web",
         workspace_id: workspaceId,
         // Per-surface traffic (PROPERTY_IN_APP_TAB_SURFACE_BREAKDOWN_TRACKER
@@ -11864,6 +11988,67 @@ const _AegisInAppManager = class _AegisInAppManager {
     } catch (error) {
       this.log(`Error tracking event: ${error}`, "error");
     }
+    const step = (trackedCampaign == null ? void 0 : trackedCampaign.journey_step_execution_id) || this.journeyStepByCampaign.get(campaignId);
+    const ackAction = JOURNEY_ACK_ACTION[eventType];
+    if (step) {
+      this.journeyStepByCampaign.set(campaignId, step);
+      if (ackAction) void this.ackJourneyQueueItem(step, ackAction);
+    }
+  }
+  /**
+   * POST /v1/in-app/widgets/{step}/ack — the canonical writer of a queue row's
+   * seen-state (the same endpoint the Android and iOS SDKs call). Fail-soft by
+   * construction: it runs after the render, is never awaited by it, and never
+   * throws. A network error or 5xx is retried once; if that also fails the key
+   * is released, so the next render of the (still re-served) message tries
+   * again. A 4xx is the server's answer and is not retried. The server side is
+   * idempotent — a repeated action is answered `late_arrival` and writes
+   * nothing — so a duplicate ack is harmless.
+   */
+  async ackJourneyQueueItem(step, action, attempt = 0) {
+    const key = `${step}:${action}`;
+    if (attempt === 0) {
+      if (this.journeyAcks.has(key)) return;
+      this.journeyAcks.add(key);
+    }
+    const headers = {
+      "Content-Type": "application/json",
+      "X-Aegis-Write-Key": this.writeKey
+    };
+    if (this.organizationId) headers["X-Organization-ID"] = this.organizationId;
+    if (this.userId) headers["X-User-ID"] = this.userId;
+    if (this.contactId) headers["X-Contact-ID"] = this.contactId;
+    let retryable = true;
+    try {
+      const response = await fetch(
+        `${this.apiHost}/v1/in-app/widgets/${encodeURIComponent(step)}/ack`,
+        {
+          method: "POST",
+          headers,
+          body: JSON.stringify({ action }),
+          credentials: "include",
+          // A click usually navigates away at once; keepalive lets the ack
+          // outlive the page instead of being cancelled with it.
+          keepalive: true
+        }
+      );
+      if (response.ok) {
+        this.log(`Acknowledged queued message ${step}: ${action}`);
+        return;
+      }
+      retryable = response.status >= 500 || response.status === 408 || response.status === 429;
+      this.log(`Queue ack ${action} for ${step} failed: HTTP ${response.status}`, "warn");
+    } catch (error) {
+      this.log(`Queue ack ${action} for ${step} failed: ${error}`, "warn");
+    }
+    if (!retryable) return;
+    if (attempt === 0) {
+      setTimeout(() => {
+        void this.ackJourneyQueueItem(step, action, 1);
+      }, _AegisInAppManager.JOURNEY_ACK_RETRY_MS);
+      return;
+    }
+    this.journeyAcks.delete(key);
   }
   log(message, level = "log") {
     if (this.debugMode) {
@@ -11914,6 +12099,7 @@ _AegisInAppManager.KNOWN_SURFACES = /* @__PURE__ */ new Set([
   "external_mobile_screen"
 ]);
 _AegisInAppManager.SERVED_DEDUP_PREFIX = "aegis_served_fired:";
+_AegisInAppManager.JOURNEY_ACK_RETRY_MS = 2e3;
 let AegisInAppManager = _AegisInAppManager;
 function renderPreview(config, opts) {
   document.querySelectorAll(
@@ -12632,9 +12818,10 @@ class PrefetchBundleClient {
     const ctx = this.contextProvider();
     const qs = new URLSearchParams();
     if (ctx.device_type) qs.set("device_type", ctx.device_type);
-    if (ctx.page_url) qs.set("page_url", ctx.page_url);
+    if (ctx.page_url) qs.set("page_url", redactUrl(ctx.page_url));
     if (ctx.geo) qs.set("geo", ctx.geo);
-    qs.set("is_new_user", ctx.is_new_user ? "true" : "false");
+    const isNewUser = ctx.is_new_user ?? isNewVisitor();
+    qs.set("is_new_user", isNewUser ? "true" : "false");
     const url = `${this.apiHost}/v1/sdk/prefetch-bundle?${qs.toString()}`;
     const headers = {
       "X-Aegis-Write-Key": this.writeKey,
@@ -13516,8 +13703,8 @@ class AegisWidgetManager {
       cart_items: this.cartData.cart_items,
       user_email: this.userId,
       abandoned_at: (/* @__PURE__ */ new Date()).toISOString(),
-      page_url: window.location.href,
-      referrer: document.referrer
+      page_url: redactUrl(window.location.href),
+      referrer: redactUrl(document.referrer)
     };
     const beaconUrl = `${this.apiHost}/v1/widgets/beacon/cart-abandoned`;
     if (navigator.sendBeacon) {
@@ -13916,6 +14103,37 @@ class AegisWidgetManager {
       box-sizing: border-box;
     `;
     form.appendChild(nameInput);
+    const collectBirthday = config.collect_birthday === true;
+    let birthdayInput = null;
+    if (collectBirthday) {
+      const birthdayId = `aegis-spin-dob-${widgetId}`;
+      const birthdayLabel = document.createElement("label");
+      birthdayLabel.htmlFor = birthdayId;
+      birthdayLabel.textContent = "Birthday (optional) — for a birthday treat";
+      birthdayLabel.style.cssText = `
+        display: block;
+        font-size: 12px;
+        font-weight: 600;
+        opacity: 0.75;
+        margin-bottom: 4px;
+        color: ${this.sanitizeColor(textColor)};
+      `;
+      form.appendChild(birthdayLabel);
+      birthdayInput = document.createElement("input");
+      birthdayInput.id = birthdayId;
+      birthdayInput.type = "date";
+      birthdayInput.max = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+      birthdayInput.style.cssText = `
+        width: 100%;
+        padding: 14px;
+        border: 2px solid #ddd;
+        border-radius: 8px;
+        font-size: 16px;
+        margin-bottom: 12px;
+        box-sizing: border-box;
+      `;
+      form.appendChild(birthdayInput);
+    }
     const submitButton = document.createElement("button");
     submitButton.type = "submit";
     submitButton.textContent = "Spin the Wheel!";
@@ -13946,6 +14164,7 @@ class AegisWidgetManager {
       const phone = phoneInput.value.trim();
       const email = emailInput.value.trim();
       const name = nameInput.value.trim();
+      const dateOfBirth = birthdayInput ? birthdayInput.value.trim() : "";
       if (!this.validatePhone(phone)) {
         errorMessage.textContent = "Please enter a valid phone number (e.g., +1234567890)";
         errorMessage.style.display = "block";
@@ -13966,6 +14185,7 @@ class AegisWidgetManager {
             phone,
             email,
             name,
+            dateOfBirth,
             cart,
             widgetId
           });
@@ -14016,12 +14236,17 @@ class AegisWidgetManager {
       phone: data.phone.replace(/[\s()-]/g, ""),
       email: data.email || void 0,
       name: data.name || void 0,
+      // Omitted when blank — the server distinguishes "not given" from a value
+      // it could not parse, and neither is an empty string.
+      date_of_birth: data.dateOfBirth || void 0,
       cart_id: ((_a = data.cart) == null ? void 0 : _a.cart_id) || `web_${Date.now()}`,
       cart_token: (_b = data.cart) == null ? void 0 : _b.cart_id,
       cart_total: ((_c = data.cart) == null ? void 0 : _c.cart_total) || 0,
       cart_currency: ((_d = data.cart) == null ? void 0 : _d.cart_currency) || "USD",
       cart_items: ((_e = data.cart) == null ? void 0 : _e.cart_items) || [],
-      cart_url: window.location.href,
+      // Redacted: a stored cart URL is re-sent later as a recovery link, and a
+      // credential in it (`?t=` / `?k=`) must not outlive this page view.
+      cart_url: redactUrl(window.location.href),
       platform: "web",
       geo_region: geoRegion,
       device_type: deviceType,
@@ -15137,7 +15362,7 @@ const _AegisMessageRuntime = class _AegisMessageRuntime {
     var _a;
     this.initialized = false;
     {
-      const v = "1.37.0";
+      const v = "1.39.0";
       try {
         globalThis.__AEGIS_SDK_VERSION__ = v;
       } catch {
@@ -15185,6 +15410,7 @@ const _AegisMessageRuntime = class _AegisMessageRuntime {
       apiHost: config.apiHost,
       userId: config.userId,
       contactId: config.contactId,
+      contactToken: config.contactToken,
       organizationId: config.organizationId,
       propertyId: config.propertyId,
       debugMode: config.debugMode,
@@ -15268,10 +15494,10 @@ const _AegisMessageRuntime = class _AegisMessageRuntime {
    * wait — callers that care about the fetched state await on the
    * returned promise.
    */
-  async updateContactId(contactId) {
+  async updateContactId(contactId, contactToken) {
     var _a, _b, _c;
     this.contactId = contactId;
-    (_b = (_a = this.inApp).updateContactId) == null ? void 0 : _b.call(_a, contactId);
+    (_b = (_a = this.inApp).updateContactId) == null ? void 0 : _b.call(_a, contactId, contactToken);
     (_c = this.chat) == null ? void 0 : _c.updateContactId(contactId);
     await this.widgets.updateContactId(contactId);
     void this.contactScores.fetchForContact(contactId);