@adobe/alloy 2.34.1-beta.1 → 2.34.2-beta.0

package/dist/alloy.js

@@ -135,155 +135,6 @@
     return base64;
   };
 
-  /*! js-cookie v3.0.7 | MIT */
-  function assign (target) {
-    for (var i = 1; i < arguments.length; i++) {
-      var source = arguments[i];
-      for (var key in source) {
-        if (key === '__proto__') continue
-        target[key] = source[key];
-      }
-    }
-    return target
-  }
-
-  var defaultConverter = {
-    read: function (value) {
-      if (value[0] === '"') {
-        value = value.slice(1, -1);
-      }
-      return value.replace(/(%[\dA-F]{2})+/gi, decodeURIComponent)
-    },
-    write: function (value) {
-      return encodeURIComponent(value).replace(
-        /%(2[346BF]|3[AC-F]|40|5[BDE]|60|7[BCD])/g,
-        decodeURIComponent
-      )
-    }
-  };
-
-  function init(converter, defaultAttributes) {
-    function set(name, value, attributes) {
-      if (typeof document === 'undefined') {
-        return
-      }
-
-      attributes = assign({}, defaultAttributes, attributes);
-
-      if (typeof attributes.expires === 'number') {
-        attributes.expires = new Date(Date.now() + attributes.expires * 864e5);
-      }
-      if (attributes.expires) {
-        attributes.expires = attributes.expires.toUTCString();
-      }
-
-      name = encodeURIComponent(name)
-        .replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent)
-        .replace(/[()]/g, escape);
-
-      var stringifiedAttributes = '';
-      for (var attributeName in attributes) {
-        if (!attributes[attributeName]) {
-          continue
-        }
-
-        stringifiedAttributes += '; ' + attributeName;
-
-        if (attributes[attributeName] === true) {
-          continue
-        }
-
-        // Considers RFC 6265 section 5.2:
-        // ...
-        // 3.  If the remaining unparsed-attributes contains a %x3B (";")
-        //     character:
-        // Consume the characters of the unparsed-attributes up to,
-        // not including, the first %x3B (";") character.
-        // ...
-        stringifiedAttributes += '=' + attributes[attributeName].split(';')[0];
-      }
-
-      return (document.cookie =
-        name + '=' + converter.write(value, name) + stringifiedAttributes)
-    }
-
-    function get(name) {
-      if (typeof document === 'undefined' || (arguments.length && !name)) {
-        return
-      }
-
-      // To prevent the for loop in the first place assign an empty array
-      // in case there are no cookies at all.
-      var cookies = document.cookie ? document.cookie.split('; ') : [];
-      var jar = {};
-      for (var i = 0; i < cookies.length; i++) {
-        var parts = cookies[i].split('=');
-        var value = parts.slice(1).join('=');
-
-        try {
-          var found = decodeURIComponent(parts[0]);
-          if (!(found in jar)) jar[found] = converter.read(value, found);
-          if (name === found) {
-            break
-          }
-        } catch {
-          // Do nothing...
-        }
-      }
-
-      return name ? jar[name] : jar
-    }
-
-    return Object.create(
-      {
-        set,
-        get,
-        remove: function (name, attributes) {
-          set(
-            name,
-            '',
-            assign({}, attributes, {
-              expires: -1
-            })
-          );
-        },
-        withAttributes: function (attributes) {
-          return init(this.converter, assign({}, this.attributes, attributes))
-        },
-        withConverter: function (converter) {
-          return init(assign({}, this.converter, converter), this.attributes)
-        }
-      },
-      {
-        attributes: { value: Object.freeze(defaultAttributes) },
-        converter: { value: Object.freeze(converter) }
-      }
-    )
-  }
-
-  var api = init(defaultConverter, { path: '/' });
-
-  /*
-  Copyright 2019 Adobe. All rights reserved.
-  This file is licensed to you under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License. You may obtain a copy
-  of the License at http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software distributed under
-  the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
-  OF ANY KIND, either express or implied. See the License for the specific language
-  governing permissions and limitations under the License.
-  */
-
-
-
-  var cookieJar = {
-    get: api.get.bind(api),
-    set: api.set.bind(api),
-    remove: api.remove.bind(api),
-    withConverter: api.withConverter.bind(api)
-  };
-
   /*
   Copyright 2019 Adobe. All rights reserved.
   This file is licensed to you under the Apache License, Version 2.0 (the "License");
@@ -1558,7 +1409,7 @@
   */
 
 
-  var injectDoesIdentityCookieExist = ({ orgId }) => {
+  var injectDoesIdentityCookieExist = ({ orgId, cookieJar }) => {
     const identityCookieName = getNamespacedCookieName(orgId, IDENTITY);
     /**
      * Returns whether the identity cookie exists.
@@ -3403,23 +3254,6 @@
 
   var validateConfigOverride = boundObjectOf({});
 
-  /*
-  Copyright 2022 Adobe. All rights reserved.
-  This file is licensed to you under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License. You may obtain a copy
-  of the License at http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software distributed under
-  the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
-  OF ANY KIND, either express or implied. See the License for the specific language
-  governing permissions and limitations under the License.
-  */
-
-  var createGetPageLocation$1 = ({ window }) =>
-    () => {
-      return window.location;
-    };
-
   /*
   Copyright 2019 Adobe. All rights reserved.
   This file is licensed to you under the Apache License, Version 2.0 (the "License");
@@ -3436,25 +3270,34 @@
     console,
     createLogger,
     instanceName,
-    createNamespacedStorage,
     getMonitors,
+    storage,
   }) => {
-    const storage = createNamespacedStorage(`instance.${instanceName}.`);
-
-    const debugSessionValue = storage.session.getItem("debug");
-    let debugEnabled = debugSessionValue === "true";
-    let debugEnabledWritableFromConfig = debugSessionValue === null;
+    let debugEnabled = false;
+    let debugSetByUser = false;
+
+    // Restore debug state from the previous page load in this tab.
+    storage
+      .getItem("debug")
+      .then((stored) => {
+        if (stored !== null && !debugSetByUser) {
+          debugEnabled = stored === "true";
+          debugSetByUser = true;
+        }
+      })
+      .catch(() => {});
 
     const getDebugEnabled = () => debugEnabled;
-    const setDebugEnabled = (value, { fromConfig }) => {
-      if (!fromConfig || debugEnabledWritableFromConfig) {
+    const setDebugEnabled = (value, { fromConfig = false } = {}) => {
+      if (!fromConfig || !debugSetByUser) {
         debugEnabled = value;
       }
-
       if (!fromConfig) {
-        // Web storage only allows strings, so we explicitly convert to string.
-        storage.session.setItem("debug", value.toString());
-        debugEnabledWritableFromConfig = false;
+        debugSetByUser = true;
+        const result = storage.setItem("debug", String(value));
+        if (result && typeof result.then === "function") {
+          result.catch(() => {});
+        }
       }
     };
 
@@ -5607,20 +5450,28 @@
 
 
   const ASSURANCE_VALIDATION_SESSION_URL_PARAM = "adb_validation_sessionid";
-  const ASSURANCE_VALIDATION_NAMESPACE = "validation.";
-  const CLIENT_ID = "clientId";
-
-  const getOrCreateAssuranceClientId = (storage) => {
-    let clientId = storage.persistent.getItem(CLIENT_ID);
-    if (!clientId) {
-      clientId = v4();
-      storage.persistent.setItem(CLIENT_ID, clientId);
-    }
-    return clientId;
-  };
+  const CLIENT_ID_KEY = "clientId";
+
+  var createGetAssuranceValidationTokenParams = ({ getLocationSearch, storage }) => {
+    // Start with a fresh UUID as an immediate fallback, then overwrite with the
+    // persisted value once the async read resolves. Requests fired before the
+    // read settles carry the fallback UUID; all subsequent requests (and all
+    // requests on future page loads) use the stable persisted ID.
+    let clientId = v4();
+    storage
+      .getItem(CLIENT_ID_KEY)
+      .then((stored) => {
+        if (stored) {
+          clientId = stored;
+        } else {
+          const result = storage.setItem(CLIENT_ID_KEY, clientId);
+          if (result && typeof result.then === "function") {
+            result.catch(() => {});
+          }
+        }
+      })
+      .catch(() => {});
 
-  var createGetAssuranceValidationTokenParams = ({ getLocationSearch, createNamespacedStorage }) => {
-    const storage = createNamespacedStorage(ASSURANCE_VALIDATION_NAMESPACE);
     return () => {
       const parsedQuery = queryString.parse(getLocationSearch());
       const validationSessionId =
@@ -5628,7 +5479,6 @@
       if (!validationSessionId) {
         return "";
       }
-      const clientId = getOrCreateAssuranceClientId(storage);
       const validationToken = `${validationSessionId}|${clientId}`;
       return `&${queryString.stringify({
       adobeAepValidationToken: validationToken,
@@ -5814,7 +5664,7 @@
         // to the payload since they'll be automatically passed through cookie
         // headers.
         if (!isEndpointFirstParty) {
-          const cookies = cookieJar.get();
+          const cookies = cookieJar.getAll();
 
           const entries = Object.keys(cookies)
             .filter(shouldTransferCookie)
@@ -6483,40 +6333,6 @@
     };
   };
 
-  /*
-  Copyright 2025 Adobe. All rights reserved.
-  This file is licensed to you under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License. You may obtain a copy
-  of the License at http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software distributed under
-  the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
-  OF ANY KIND, either express or implied. See the License for the specific language
-  governing permissions and limitations under the License.
-  */
-
-  /* eslint-disable dot-notation */
-
-  /** @import { AlloyMonitor } from './types.js' */
-
-  /**
-   * This factory function creates a getter that combines both provided monitors
-   * and any monitors found in the global window.__alloyMonitors array.
-   *
-   * @param {Array<AlloyMonitor>} [monitors] - Optional array of monitor objects to append to the current one
-   * @returns {Function} A function that when called, returns all available monitors
-   */
-  var getMonitors = (monitors) => {
-    /** @type {Array<AlloyMonitor>} */
-    let alloyMonitors = window["__alloyMonitors"] || [];
-
-    if (monitors) {
-      alloyMonitors = alloyMonitors.concat(monitors);
-    }
-
-    return alloyMonitors;
-  };
-
   /*
   Copyright 2020 Adobe. All rights reserved.
   This file is licensed to you under the Apache License, Version 2.0 (the "License");
@@ -7017,114 +6833,6 @@
   governing permissions and limitations under the License.
   */
 
-
-  var awaitVisitorOptIn$1 = ({ logger }) => {
-    return new Promise((resolve, reject) => {
-      if (isObject(window.adobe) && isObject(window.adobe.optIn)) {
-        const optInOld = window.adobe.optIn;
-        logger.info(
-          "Delaying request while waiting for legacy opt-in to let Visitor retrieve ECID from server.",
-        );
-        optInOld.fetchPermissions(() => {
-          if (optInOld.isApproved([optInOld.Categories.ECID])) {
-            logger.info(
-              "Received legacy opt-in approval to let Visitor retrieve ECID from server.",
-            );
-            resolve();
-          } else {
-            reject(new Error("Legacy opt-in was declined."));
-          }
-        }, true);
-      } else {
-        resolve();
-      }
-    });
-  };
-
-  /*
-  Copyright 2020 Adobe. All rights reserved.
-  This file is licensed to you under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License. You may obtain a copy
-  of the License at http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software distributed under
-  the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
-  OF ANY KIND, either express or implied. See the License for the specific language
-  governing permissions and limitations under the License.
-  */
-
-
-  var getVisitor$1 = (window) => {
-    const Visitor = window.Visitor;
-    return isFunction(Visitor) && isFunction(Visitor.getInstance) && Visitor;
-  };
-
-  /*
-  Copyright 2020 Adobe. All rights reserved.
-  This file is licensed to you under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License. You may obtain a copy
-  of the License at http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software distributed under
-  the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
-  OF ANY KIND, either express or implied. See the License for the specific language
-  governing permissions and limitations under the License.
-  */
-
-
-  var injectGetEcidFromVisitor = ({ logger, orgId, awaitVisitorOptIn }) => {
-    return () => {
-      const Visitor = getVisitor$1(window);
-      if (Visitor) {
-        // Need to explicitly wait for optIn because visitor will call callback
-        // with invalid values prior to optIn being approved
-        return awaitVisitorOptIn({ logger })
-          .then(() => {
-            logger.info(
-              "Delaying request while using Visitor to retrieve ECID from server.",
-            );
-
-            return new Promise((resolve) => {
-              const visitor = Visitor.getInstance(orgId, {});
-              visitor.getMarketingCloudVisitorID((ecid) => {
-                logger.info(
-                  "Resuming previously delayed request that was waiting for ECID from Visitor.",
-                );
-                resolve(ecid);
-              }, true);
-            });
-          })
-          .catch((error) => {
-            // If consent was denied, get the ECID from experience edge. OptIn and AEP Web SDK
-            // consent should operate independently, but during id migration AEP Web SDK needs
-            // to wait for optIn object consent resolution so that only one ECID is generated.
-            if (error) {
-              logger.info(
-                `${error.message}, retrieving ECID from experience edge`,
-              );
-            } else {
-              logger.info(
-                "An error occurred while obtaining the ECID from Visitor.",
-              );
-            }
-          });
-      }
-      return Promise.resolve();
-    };
-  };
-
-  /*
-  Copyright 2020 Adobe. All rights reserved.
-  This file is licensed to you under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License. You may obtain a copy
-  of the License at http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software distributed under
-  the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
-  OF ANY KIND, either express or implied. See the License for the specific language
-  governing permissions and limitations under the License.
-  */
-
   var injectHandleResponseForIdSyncs = ({ processIdSyncs }) => {
     return (response) => {
       // no need to wait for response
@@ -7732,6 +7440,7 @@
     apexDomain,
     getBrowser,
     identity,
+    platformServices,
   }) => {
     const {
       orgId,
@@ -7739,20 +7448,24 @@
       edgeConfigOverrides: globalConfigOverrides,
     } = config;
 
-    const getEcidFromVisitor = injectGetEcidFromVisitor({
+    const getEcidFromVisitor = () =>
+      platformServices.legacy.getEcidFromVisitor({ orgId, logger });
+
+    const loggingCookieJar = createLoggingCookieJar({
       logger,
-      orgId,
-      awaitVisitorOptIn: awaitVisitorOptIn$1,
+      cookieJar: platformServices.cookie,
     });
-    const loggingCookieJar = createLoggingCookieJar({ logger, cookieJar });
     const legacyIdentity = createLegacyIdentity({
       config,
       getEcidFromVisitor,
       apexDomain,
       cookieJar: loggingCookieJar,
-      isPageSsl: window.location.protocol === "https:",
+      isPageSsl: platformServices.globals.isPageSsl(),
+    });
+    const doesIdentityCookieExist = injectDoesIdentityCookieExist({
+      orgId,
+      cookieJar: platformServices.cookie,
     });
-    const doesIdentityCookieExist = injectDoesIdentityCookieExist({ orgId });
     const getIdentity = createGetIdentity({
       sendEdgeNetworkRequest,
       createIdentityRequestPayload,
@@ -7772,8 +7485,8 @@
     });
     const addQueryStringIdentityToPayload = injectAddQueryStringIdentityToPayload(
       {
-        locationSearch: window.document.location.search,
-        locationHash: window.document.location.hash,
+        locationSearch: platformServices.globals.getLocationSearch(),
+        locationHash: platformServices.globals.getLocationHash(),
         dateProvider: () => new Date(),
         orgId,
         logger,
@@ -7839,10 +7552,10 @@
   governing permissions and limitations under the License.
   */
 
-  // The 2.34.1-beta.1 keyword will be replace at alloy build time with the package.json version.
+  // The 2.34.2-beta.0 keyword will be replace at alloy build time with the package.json version.
   // see babel-plugin-version
 
-  var libraryVersion = "2.34.1-beta.1";
+  var libraryVersion = "2.34.2-beta.0";
 
   /*
   Copyright 2019 Adobe. All rights reserved.
@@ -7935,7 +7648,7 @@
    * @param {string} params.instanceName
    * @param {Array<import('./types.js').AlloyMonitor>} [params.monitors]
    * @param {Array<Function>} params.components
-   * @param {(deps: { logger: import('./types.js').Logger }) => import('../services/index.js').PlatformServices} params.createPlatformServices
+   * @param {() => import('../services/index.js').PlatformServices} params.createPlatformServices
    */
   const createExecuteCommand = ({
     instanceName,
@@ -7943,22 +7656,21 @@
     components,
     createPlatformServices,
   }) => {
-    // `createLogController` and `createGetAssuranceValidationTokenParams` still
-    // consume sync storage, so we can't use the async storage capability here
-    // yet. Remove once those consumers are migrated.
-    const createNamespacedStorage = injectStorage(window);
+    const platformServices = createPlatformServices();
+    const allMonitors = [...platformServices.globals.getMonitors(), ...monitors];
 
     const logController = createLogController({
       console: globalThis.console,
       createLogger,
       instanceName,
-      createNamespacedStorage,
-      getMonitors: getMonitors.bind(null, monitors),
+      getMonitors: () => allMonitors,
+      storage: platformServices.storage.createNamespacedStorage(
+        `instance.${instanceName}.`,
+      ).session,
     });
 
     const { setDebugEnabled, logger, createComponentLogger } = logController;
-
-    const platformServices = createPlatformServices({ logger });
+    const network = platformServices.createNetworkService(logger);
 
     const parsedQueryString = queryString.parse(
       platformServices.globals.getLocationSearch(),
@@ -7971,13 +7683,15 @@
 
     const apexDomain = getApexDomain(
       platformServices.globals.getHostname(),
-      cookieJar,
+      platformServices.cookie,
     );
-    const fireReferrerHideableImage = injectFireReferrerHideableImage();
+    const { fireReferrerHideableImage } = platformServices.globals;
     const getAssuranceValidationTokenParams =
       createGetAssuranceValidationTokenParams({
         getLocationSearch: () => platformServices.globals.getLocationSearch(),
-        createNamespacedStorage,
+        storage: platformServices.storage.createNamespacedStorage(
+          `instance.${instanceName}.validation.`,
+        ).persistent,
       });
     const getBrowser = injectGetBrowser({
       userAgent: platformServices.globals.getUserAgent(),
@@ -7994,7 +7708,10 @@
       setDebugEnabled(options.enabled, { fromConfig: false });
     };
 
-    const loggingCookieJar = createLoggingCookieJar({ logger, cookieJar });
+    const loggingCookieJar = createLoggingCookieJar({
+      logger,
+      cookieJar: platformServices.cookie,
+    });
     const configureCommand = (options) => {
       const config = buildAndValidateConfig({
         options,
@@ -8015,10 +7732,11 @@
         apexDomain,
         dateProvider: () => new Date(),
       });
+
       const sendNetworkRequest = injectSendNetworkRequest({
         logger,
-        sendFetchRequest: platformServices.network.sendFetchRequest,
-        sendBeaconRequest: platformServices.network.sendBeaconRequest,
+        sendFetchRequest: network.sendFetchRequest,
+        sendBeaconRequest: network.sendBeaconRequest,
         isRequestRetryable,
         getRequestRetryDelay,
       });
@@ -8027,7 +7745,10 @@
       });
       const extractEdgeInfo = injectExtractEdgeInfo({ logger });
       const createResponse = injectCreateResponse({ extractEdgeInfo });
-      const getLocationHint = injectGetLocationHint({ orgId, cookieJar });
+      const getLocationHint = injectGetLocationHint({
+        orgId,
+        cookieJar: platformServices.cookie,
+      });
       const sendEdgeNetworkRequest = injectSendEdgeNetworkRequest({
         config,
         lifecycle,
@@ -8088,7 +7809,6 @@
               errorPrefix: `[${instanceName}] [${componentName}]`,
               logger: componentLogger,
             }),
-            createNamespacedStorage,
             apexDomain,
             getBrowser,
             cookieTransfer,
@@ -8213,9 +7933,13 @@
   */
 
 
-  const createAudiences = ({ logger, fireReferrerHideableImage }) => {
-    // we override the js-cookie converter to encode the cookie value similar on how it is in DIL (PDCL-10238)
-    const cookieJarWithEncoding = cookieJar.withConverter({
+  const createAudiences = ({
+    logger,
+    fireReferrerHideableImage,
+    platformServices,
+  }) => {
+    // Override the js-cookie converter to encode the cookie value similar to DIL (PDCL-10238)
+    const cookieJarWithEncoding = platformServices.cookie.withConverter({
       write: (value) => {
         return encodeURIComponent(value);
       },
@@ -8229,7 +7953,7 @@
       fireReferrerHideableImage,
       logger,
       cookieJar: loggingCookieJar,
-      isPageSsl: window.location.protocol === "https:",
+      isPageSsl: platformServices.globals.isPageSsl(),
     });
 
     const processResponse = injectProcessResponse({ processDestinations });
@@ -8307,17 +8031,26 @@
             consent.suspend();
             const consentHashes = consentHashStore.lookup(consentOptions);
             return taskQueue
-              .addTask(() => {
-                if (consentHashes.isNew()) {
+              .addTask(async () => {
+                if (await consentHashes.isNew()) {
                   return sendSetConsentRequest({
                     consentOptions,
                     identityMap,
                     edgeConfigOverrides,
                   });
                 }
-                return Promise.resolve();
+                return undefined;
               })
               .then(() => consentHashes.save())
+              .catch((error) => {
+                if (
+                  taskQueue.length === 0 &&
+                  storedConsent.read()[GENERAL] === undefined
+                ) {
+                  consent.setConsent(defaultConsentByPurpose);
+                }
+                throw error;
+              })
               .finally(readCookieIfQueueEmpty);
           },
         },
@@ -8384,21 +8117,26 @@
         };
 
         return {
-          isNew() {
-            return consentObjects.some((consentObject) => {
-              const key = getKey(consentObject);
-              const previousHash = storage.getItem(key);
-              return (
-                previousHash === null ||
-                previousHash !== getCurrentHash(consentObject)
-              );
-            });
+          async isNew() {
+            const checks = await Promise.all(
+              consentObjects.map(async (consentObject) => {
+                const key = getKey(consentObject);
+                const previousHash = await storage.getItem(key);
+                return (
+                  previousHash === null ||
+                  previousHash !== getCurrentHash(consentObject)
+                );
+              }),
+            );
+            return checks.some(Boolean);
           },
-          save() {
-            consentObjects.forEach((consentObject) => {
-              const key = getKey(consentObject);
-              storage.setItem(key, getCurrentHash(consentObject));
-            });
+          async save() {
+            await Promise.all(
+              consentObjects.map((consentObject) => {
+                const key = getKey(consentObject);
+                return storage.setItem(key, getCurrentHash(consentObject));
+              }),
+            );
           },
         };
       },
@@ -8632,13 +8370,13 @@
     config,
     consent,
     sendEdgeNetworkRequest,
-    createNamespacedStorage,
+    platformServices,
   }) => {
     const { orgId, defaultConsent } = config;
     const storedConsent = createStoredConsent({
       parseConsentCookie,
       orgId,
-      cookieJar,
+      cookieJar: platformServices.cookie,
     });
     const taskQueue = createTaskQueue();
     const sendSetConsentRequest = injectSendSetConsentRequest({
@@ -8647,14 +8385,17 @@
       sendEdgeNetworkRequest,
       edgeConfigOverrides: config.edgeConfigOverrides,
     });
-    const storage = createNamespacedStorage(
+    const storage = platformServices.storage.createNamespacedStorage(
       `${sanitizeOrgIdForCookieName(orgId)}.consentHashes.`,
     );
     const consentHashStore = createConsentHashStore({
       storage: storage.persistent,
     });
 
-    const doesIdentityCookieExist = injectDoesIdentityCookieExist({ orgId });
+    const doesIdentityCookieExist = injectDoesIdentityCookieExist({
+      orgId,
+      cookieJar: platformServices.cookie,
+    });
 
     return createComponent$4({
       storedConsent,
@@ -11048,9 +10789,10 @@
   */
 
   const createRestoreStorage = (storage, storageKey) => {
-    return (defaultValue) => {
+    return async (defaultValue) => {
       try {
-        const stored = storage.getItem(storageKey);
+        const stored = await storage.getItem(storageKey);
+        if (stored == null) return [defaultValue, 0];
         const s = JSON.parse(stored);
         return [s, stored.length];
         // eslint-disable-next-line no-empty
@@ -11061,7 +10803,10 @@
   };
 
   const createSaveStorage = (storage, storageKey) => (value) => {
-    storage.setItem(storageKey, JSON.stringify(value));
+    const result = storage.setItem(storageKey, JSON.stringify(value));
+    if (result && typeof result.then === "function") {
+      result.catch(() => {});
+    }
   };
 
   const createInMemoryStorage = () => {
@@ -11448,19 +11193,22 @@
    */
   var createEventRegistry = ({ storage, logger }) => {
     let currentStorage = storage;
-    let save;
 
+    // Initialized to safe defaults so the registry is usable immediately;
+    // setStorage updates them asynchronously when switching to persistent storage.
     /** @type {EventRegistry} */
-    let eventRegistry;
+    let eventRegistry = {};
 
     /** @type {number} */
-    let eventRegistrySize;
+    let eventRegistrySize = 0;
+
+    let save = createSaveStorage(storage, EVENT_HISTORY_STORAGE_KEY);
 
     /**
      * Sets a new storage object for the event registry
      * @param {Object} newStorage
      */
-    const setStorage = (newStorage) => {
+    const setStorage = async (newStorage) => {
       currentStorage = newStorage;
 
       const restore = createRestoreStorage(
@@ -11468,9 +11216,9 @@
         EVENT_HISTORY_STORAGE_KEY,
       );
 
-      save = createSaveStorage(currentStorage, EVENT_HISTORY_STORAGE_KEY);
+      [eventRegistry, eventRegistrySize] = await restore({});
 
-      [eventRegistry, eventRegistrySize] = restore({});
+      save = createSaveStorage(currentStorage, EVENT_HISTORY_STORAGE_KEY);
 
       if (eventRegistrySize > EVENT_HISTORY_MAX_LENGTH) {
         const eventPruner = createEventPruner();
@@ -11621,7 +11369,7 @@
   governing permissions and limitations under the License.
   */
 
-  var createContextProvider = ({ eventRegistry, window, getBrowser }) => {
+  var createContextProvider = ({ eventRegistry, getWindowContext, getBrowser }) => {
     const pageLoadTimestamp = new Date().getTime();
     const getBrowserContext = () => {
       return {
@@ -11629,17 +11377,19 @@
       };
     };
     const getPageContext = () => {
+      const { title, url } = getWindowContext();
       return {
-        title: window.title,
-        url: window.url,
-        ...parseUrl(window.url),
+        title,
+        url,
+        ...parseUrl(url),
       };
     };
 
     const getReferrerContext = () => {
+      const { referrer } = getWindowContext();
       return {
-        url: window.referrer,
-        ...parseUrl(window.referrer),
+        url: referrer,
+        ...parseUrl(referrer),
       };
     };
     const getTimeContext = () => {
@@ -11664,11 +11414,8 @@
       };
     };
 
-    const getWindowContext = () => {
-      const height = window.height;
-      const width = window.width;
-      const scrollY = window.scrollY;
-      const scrollX = window.scrollX;
+    const getViewportContext = () => {
+      const { height, width, scrollY, scrollX } = getWindowContext();
       return {
         height,
         width,
@@ -11687,7 +11434,7 @@
       return {
         ...coreGlobalContext,
         ...getTimeContext(),
-        window: getWindowContext(),
+        window: getViewportContext(),
         "~sdkver": libraryVersion,
       };
     };
@@ -12100,10 +11847,10 @@
   const createRulesEngine = ({
     config,
     eventManager,
-    createNamespacedStorage,
     consent,
     getBrowser,
     logger,
+    platformServices,
   }) => {
     const { orgId, personalizationStorageEnabled } = config;
     const collect = createCollect({
@@ -12111,7 +11858,7 @@
       mergeDecisionsMeta,
     });
 
-    const storage = createNamespacedStorage(
+    const storage = platformServices.storage.createNamespacedStorage(
       `${sanitizeOrgIdForCookieName(orgId)}.decisioning.`,
     );
     if (!personalizationStorageEnabled) {
@@ -12125,7 +11872,7 @@
     const decisionProvider = createDecisionProvider({ eventRegistry });
     const contextProvider = createContextProvider({
       eventRegistry,
-      window,
+      getWindowContext: platformServices.globals.getWindowContext,
       getBrowser,
     });
 
@@ -12149,9 +11896,7 @@
           if (personalizationStorageEnabled) {
             consent
               .awaitConsent()
-              .then(() => {
-                eventRegistry.setStorage(storage.persistent);
-              })
+              .then(() => eventRegistry.setStorage(storage.persistent))
               .catch(() => {
                 if (storage) {
                   clearLocalStorage(storage.persistent);
@@ -12684,9 +12429,8 @@
   governing permissions and limitations under the License.
   */
 
-  const getPageSurface = () => {
-    const pageLocation = createGetPageLocation$1({ window: window });
-    return buildPageSurface(pageLocation);
+  const getPageSurface = (getLocation) => {
+    return buildPageSurface(getLocation);
   };
 
   const getConciergeSessionCookie = ({ loggingCookieJar, config }) => {
@@ -12959,6 +12703,7 @@
     lifecycle,
     consent,
     session,
+    getPageLocation,
   }) => {
     const { edgeDomain, datastreamId, onBeforeEventSend, conversation } = config;
     return (options) => {
@@ -12980,7 +12725,7 @@
 
       const event = eventManager.createEvent();
       if (message || data) {
-        const pageSurface = getPageSurface();
+        const pageSurface = getPageSurface(getPageLocation);
         event.mergeQuery({
           conversation: {
             surfaces: [pageSurface],
@@ -13236,8 +12981,8 @@
     lifecycle,
     cookieTransfer,
     createResponse,
+    platformServices,
   }) => {
-    const { fetch } = window;
     const session = {
       id: getConciergeSessionCookie({ loggingCookieJar, config }),
     };
@@ -13266,13 +13011,16 @@
       sendConversationServiceRequest,
       decodeKndctrCookie,
       session,
+      getPageLocation: platformServices.globals.getPageLocation,
     });
 
     return {
       lifecycle: {
         onBeforeEvent({ event }) {
           if (config.conversation.collectSources) {
-            const parsedParams = queryString.parse(window.location.search);
+            const parsedParams = queryString.parse(
+              platformServices.globals.getLocationSearch(),
+            );
             const source = parsedParams[SOURCES_QUERY_PARAM];
             if (source) {
               event.mergeXdm({ channel: { referringSource: source } });
@@ -14860,7 +14608,7 @@
   */
 
 
-  var createCookieManager = ({ orgId, logger }) => {
+  var createCookieManager = ({ orgId, logger, cookieJar }) => {
     const loggingCookieJar = createLoggingCookieJar({ logger, cookieJar });
 
     const getCookieName = (key, useNamespace = true) =>
@@ -16392,11 +16140,13 @@
     sendEdgeNetworkRequest,
     consent,
     getBrowser,
+    platformServices,
   }) => {
     const componentConfig = config.advertising;
     const cookieManager = createCookieManager({
       orgId: config.orgId,
       logger,
+      cookieJar: platformServices.cookie,
     });
 
     // One shared iframe call — both collectSurferId and hashedIpHandler use it
@@ -21822,7 +21572,7 @@
 
 
   /**
-   * @param {{ logger: import('@adobe/alloy-core/core/types.js').Logger }} dependencies
+   * @param {{ logger: import("@adobe/alloy-core/core/types.js").Logger }} params
    * @returns {NetworkService}
    */
   const createBrowserNetworkService = ({ logger }) => {
@@ -21831,7 +21581,6 @@
     const sendBeaconRequest =
       typeof navigator.sendBeacon === "function"
         ? injectSendBeaconRequest({
-            // bind() avoids "illegal invocation" when sendBeacon loses its receiver.
             sendBeacon: navigator.sendBeacon.bind(navigator),
             sendFetchRequest,
             logger,
@@ -21914,6 +21663,134 @@
     },
   });
 
+  /*! js-cookie v3.0.7 | MIT */
+  function assign (target) {
+    for (var i = 1; i < arguments.length; i++) {
+      var source = arguments[i];
+      for (var key in source) {
+        if (key === '__proto__') continue
+        target[key] = source[key];
+      }
+    }
+    return target
+  }
+
+  var defaultConverter = {
+    read: function (value) {
+      if (value[0] === '"') {
+        value = value.slice(1, -1);
+      }
+      return value.replace(/(%[\dA-F]{2})+/gi, decodeURIComponent)
+    },
+    write: function (value) {
+      return encodeURIComponent(value).replace(
+        /%(2[346BF]|3[AC-F]|40|5[BDE]|60|7[BCD])/g,
+        decodeURIComponent
+      )
+    }
+  };
+
+  function init(converter, defaultAttributes) {
+    function set(name, value, attributes) {
+      if (typeof document === 'undefined') {
+        return
+      }
+
+      attributes = assign({}, defaultAttributes, attributes);
+
+      if (typeof attributes.expires === 'number') {
+        attributes.expires = new Date(Date.now() + attributes.expires * 864e5);
+      }
+      if (attributes.expires) {
+        attributes.expires = attributes.expires.toUTCString();
+      }
+
+      name = encodeURIComponent(name)
+        .replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent)
+        .replace(/[()]/g, escape);
+
+      var stringifiedAttributes = '';
+      for (var attributeName in attributes) {
+        if (!attributes[attributeName]) {
+          continue
+        }
+
+        stringifiedAttributes += '; ' + attributeName;
+
+        if (attributes[attributeName] === true) {
+          continue
+        }
+
+        // Considers RFC 6265 section 5.2:
+        // ...
+        // 3.  If the remaining unparsed-attributes contains a %x3B (";")
+        //     character:
+        // Consume the characters of the unparsed-attributes up to,
+        // not including, the first %x3B (";") character.
+        // ...
+        stringifiedAttributes += '=' + attributes[attributeName].split(';')[0];
+      }
+
+      return (document.cookie =
+        name + '=' + converter.write(value, name) + stringifiedAttributes)
+    }
+
+    function get(name) {
+      if (typeof document === 'undefined' || (arguments.length && !name)) {
+        return
+      }
+
+      // To prevent the for loop in the first place assign an empty array
+      // in case there are no cookies at all.
+      var cookies = document.cookie ? document.cookie.split('; ') : [];
+      var jar = {};
+      for (var i = 0; i < cookies.length; i++) {
+        var parts = cookies[i].split('=');
+        var value = parts.slice(1).join('=');
+
+        try {
+          var found = decodeURIComponent(parts[0]);
+          if (!(found in jar)) jar[found] = converter.read(value, found);
+          if (name === found) {
+            break
+          }
+        } catch {
+          // Do nothing...
+        }
+      }
+
+      return name ? jar[name] : jar
+    }
+
+    return Object.create(
+      {
+        set,
+        get,
+        remove: function (name, attributes) {
+          set(
+            name,
+            '',
+            assign({}, attributes, {
+              expires: -1
+            })
+          );
+        },
+        withAttributes: function (attributes) {
+          return init(this.converter, assign({}, this.attributes, attributes))
+        },
+        withConverter: function (converter) {
+          return init(assign({}, this.converter, converter), this.attributes)
+        }
+      },
+      {
+        attributes: { value: Object.freeze(defaultAttributes) },
+        converter: { value: Object.freeze(converter) }
+      }
+    )
+  }
+
+  var api = init(defaultConverter, { path: '/' });
+
   /*
   Copyright 2026 Adobe. All rights reserved.
   This file is licensed to you under the Apache License, Version 2.0 (the "License");
@@ -21934,8 +21811,9 @@
    * @param {{ get: Function, set: Function, remove: Function, withConverter: Function }} [jar]
    * @returns {CookieService}
    */
-  const createBrowserCookieService = (jar = cookieJar) => ({
+  const createBrowserCookieService = (jar = api) => ({
     get: (name) => jar.get(name),
+    getAll: () => jar.get(),
     set: (name, value, options) => jar.set(name, value, options),
     remove: (name, options) => {
       jar.remove(name, options);
@@ -22068,9 +21946,6 @@
   governing permissions and limitations under the License.
   */
 
-  /* eslint-disable dot-notation */
-
-  /** @import { GlobalsService } from "@adobe/alloy-core/services" */
 
   /** @returns {GlobalsService} */
   const createBrowserGlobalsService = () => ({
@@ -22081,8 +21956,21 @@
     },
     getMonitors: () => window["__alloyMonitors"] || [],
     getLocationSearch: () => window.location.search,
+    getLocationHash: () => window.location.hash,
     getUserAgent: () => window.navigator.userAgent,
     getHostname: () => window.location.hostname,
+    getPageLocation: () => window.location,
+    isPageSsl: () => window.location.protocol === "https:",
+    fireReferrerHideableImage: injectFireReferrerHideableImage(),
+    getWindowContext: () => ({
+      title: document.title,
+      url: window.location.href,
+      referrer: document.referrer,
+      height: window.innerHeight,
+      width: window.innerWidth,
+      scrollY: window.scrollY,
+      scrollX: window.scrollX,
+    }),
   });
 
   /*
@@ -22099,11 +21987,10 @@
 
 
   /**
-   * @param {{ logger: import('@adobe/alloy-core/core/types.js').Logger }} dependencies
    * @returns {PlatformServices}
    */
-  const createBrowserPlatformServices = ({ logger }) => ({
-    network: createBrowserNetworkService({ logger }),
+  const createBrowserPlatformServices = () => ({
+    createNetworkService: (logger) => createBrowserNetworkService({ logger }),
     storage: createBrowserStorageService(),
     cookie: createBrowserCookieService(),
     runtime: createBrowserRuntimeService(),
@@ -22123,10 +22010,15 @@
   governing permissions and limitations under the License.
   */
 
-  const createCustomInstance = ({ components = [], ...options } = {}) =>
+  const createCustomInstance = ({
+    components = [],
+    monitors = [],
+    ...options
+  } = {}) =>
     createCustomInstance$1(
       {
         ...options,
+        monitors,
         components: [...Object.values(allRequiredComponents), ...components],
       },
       createBrowserPlatformServices,