@arsel.sa/web-sdk 1.0.0 → 1.2.0

package/dist/arsel.js

@@ -1,51 +1,62 @@
-const G = "arsel";
-const w = "events";
-let I = null;
-function Q() {
-  return I || (I = new Promise((e, t) => {
-    const n = indexedDB.open(G, 1);
+const Ye = "arsel";
+const S = {
+  events: "events",
+  inAppBeacons: "inapp_beacons"
+};
+let H = null;
+function Je() {
+  return H || (H = new Promise((e, t) => {
+    const n = indexedDB.open(Ye, 2);
     n.onupgradeneeded = () => {
       const i = n.result;
-      i.objectStoreNames.contains("kv") || i.createObjectStore("kv"), i.objectStoreNames.contains(w) || i.createObjectStore(w, { keyPath: "id", autoIncrement: !0 });
+      i.objectStoreNames.contains("kv") || i.createObjectStore("kv");
+      for (const r of Object.values(S))
+        i.objectStoreNames.contains(r) || i.createObjectStore(r, { keyPath: "id", autoIncrement: !0 });
     }, n.onsuccess = () => e(n.result), n.onerror = () => t(n.error);
-  }), I);
+  }), H);
 }
-function y(e, t, n) {
-  return Q().then(
-    (i) => new Promise((s, a) => {
-      const o = n(i.transaction(e, t).objectStore(e));
-      o.onsuccess = () => s(o.result), o.onerror = () => a(o.error);
+function P(e, t, n) {
+  return Je().then(
+    (i) => new Promise((r, s) => {
+      const a = n(i.transaction(e, t).objectStore(e));
+      a.onsuccess = () => r(a.result), a.onerror = () => s(a.error);
     })
   );
 }
 function c(e) {
-  return y("kv", "readonly", (t) => t.get(e)).then(
+  return P("kv", "readonly", (t) => t.get(e)).then(
     (t) => t ?? null
   );
 }
 function u(e, t) {
-  return y("kv", "readwrite", (n) => n.put(t, e));
+  return P("kv", "readwrite", (n) => n.put(t, e));
 }
-function A(e) {
-  return y("kv", "readwrite", (t) => t.delete(e));
+function L(e) {
+  return P("kv", "readwrite", (t) => t.delete(e));
 }
-function ee(e, t) {
-  return y(
-    w,
+function De(e, t, n = "") {
+  return P(
+    e,
     "readwrite",
-    (n) => n.add({ body: e, idempotencyKey: t, createdAtMs: Date.now() })
+    (i) => i.add({ body: t, idempotencyKey: n, createdAtMs: Date.now() })
   );
 }
-function te() {
-  return y(w, "readonly", (e) => e.getAll());
+function le(e) {
+  return P(e, "readonly", (t) => t.getAll());
 }
-function ne(e) {
-  return y(w, "readwrite", (t) => t.delete(e));
+function ue(e, t) {
+  return P(e, "readwrite", (n) => n.delete(t));
 }
-function re() {
-  return y(w, "readonly", (e) => e.count());
+function Oe(e) {
+  return P(e, "readonly", (t) => t.count());
 }
-const r = {
+async function Ge(e, t) {
+  const n = await le(e);
+  if (!(n.length <= t))
+    for (const i of n.slice(0, n.length - t))
+      i.id !== void 0 && await ue(e, i.id);
+}
+const o = {
   clientKey: "client_key",
   baseUrl: "base_url",
   anonymousId: "anonymous_id",
@@ -56,47 +67,59 @@ const r = {
   deviceSecret: "device_secret",
   vapidKeyVersion: "vapid_key_version",
   endpoint: "endpoint",
+  subscriptionStatus: "subscription_status",
+  installReported: "install_reported",
   sessionStartedAt: "session_started_at",
   backgroundedAt: "backgrounded_at",
   lastResponseCode: "last_response_code",
   lastResponsePath: "last_response_path",
-  lastResponseAtMs: "last_response_at"
+  lastResponseAtMs: "last_response_at",
+  /** `{ bundleVersion, ttlSeconds, fetchedAtMs, messages }` — the cached bundle. */
+  inAppBundle: "inapp_bundle",
+  /** messageId -> lifetime counters. Survives `reset()`: it describes the device. */
+  inAppState: "inapp_state",
+  /**
+   * `{ startedAt, counts }`. Persisted rather than held in memory so
+   * `maxPerSession` survives a navigation — on a multi-page site an in-memory
+   * counter makes the cap per-page, which is not a cap at all.
+   */
+  inAppSession: "inapp_session"
 };
-async function T() {
-  const e = await c(r.anonymousId);
+async function X() {
+  const e = await c(o.anonymousId);
   if (e) return e;
   const t = crypto.randomUUID();
-  return await u(r.anonymousId, t), t;
+  return await u(o.anonymousId, t), t;
 }
-async function ie() {
+async function Ze() {
   const e = crypto.randomUUID();
-  return await u(r.anonymousId, e), e;
+  return await u(o.anonymousId, e), e;
 }
-const K = "1.0.0", W = { "X-Arsel-SDK": `web/${K}` }, f = {
+const j = "1.2.0", Re = { "X-Arsel-SDK": `web/${j}` }, y = {
   success: "success",
   retryable: "retryable",
   permanent: "permanent",
   reauth: "reauth"
-}, O = -1;
-function se(e, t) {
-  return e >= 200 && e <= 299 ? f.success : e === 408 || e === 429 || e >= 500 && e <= 599 ? f.retryable : t && (e === 401 || e === 403 || e === 404) ? f.reauth : e === 404 ? f.retryable : f.permanent;
+}, J = -1;
+function Me(e, t) {
+  return e >= 200 && e <= 299 ? y.success : e === 408 || e === 429 || e >= 500 && e <= 599 ? y.retryable : t && (e === 401 || e === 403 || e === 404) ? y.reauth : e === 404 ? y.retryable : y.permanent;
 }
-async function N(e, t) {
+async function G(e, t) {
   try {
     await Promise.all([
-      u(r.lastResponseCode, t),
-      u(r.lastResponsePath, e),
-      u(r.lastResponseAtMs, Date.now())
+      u(o.lastResponseCode, t),
+      u(o.lastResponsePath, e),
+      u(o.lastResponseAtMs, Date.now())
     ]);
   } catch {
   }
 }
-async function R(e, t, n, i = {}, s = !1) {
-  let a;
+async function z(e, t, n, i = {}, r = !1) {
+  let s;
   try {
-    a = await fetch(e + t, {
+    s = await fetch(e + t, {
       method: "POST",
-      headers: { "Content-Type": "application/json", ...W, ...i },
+      headers: { "Content-Type": "application/json", ...Re, ...i },
       body: JSON.stringify(n),
       // The SDK never relies on cookies, and sending them would attach a
       // first-party session to a cross-origin call for no reason.
@@ -104,30 +127,42 @@ async function R(e, t, n, i = {}, s = !1) {
       keepalive: !0
     });
   } catch {
-    return await N(t, O), { result: f.retryable, code: O, body: null };
+    return await G(t, J), { result: y.retryable, code: J, body: null };
   }
-  await N(t, a.status);
-  const o = se(a.status, s);
+  await G(t, s.status);
+  const a = Me(s.status, r);
   let l = null;
   try {
-    l = await a.json();
+    l = await s.json();
   } catch {
   }
-  return { result: o, code: a.status, body: l };
+  return { result: a, code: s.status, body: l };
 }
-async function B(e, t) {
+async function de(e, t, n = {}, i = !1, r = {}) {
+  let s;
   try {
-    const n = await fetch(e + t, {
+    s = await fetch(e + t, {
+      ...r,
       credentials: "omit",
-      headers: W
+      headers: { ...Re, ...n }
     });
-    return await N(t, n.status), n.ok ? await n.json() : null;
   } catch {
-    return await N(t, O), null;
+    return await G(t, J), { result: y.retryable, code: J, body: null };
+  }
+  await G(t, s.status);
+  let a = null;
+  try {
+    a = await s.json();
+  } catch {
   }
+  return {
+    result: Me(s.status, i),
+    code: s.status,
+    body: a
+  };
 }
-const ae = "/v1/events/send", v = "arsel.", oe = `${v}session_start`, ce = `${v}session_end`, le = `${v}identify`, ue = 80, de = 128, fe = 255, U = 50, pe = 8, V = 64 * 1024;
-function D(e, t) {
+const Qe = "/v1/events/send", x = "arsel.", et = `${x}session_start`, tt = `${x}session_end`, nt = `${x}identify`, it = `${x}app_installed`, rt = `${x}screen_view`, ot = 80, st = 128, at = 255, ge = 50, ct = 8, ve = 64 * 1024;
+function se(e, t) {
   if (e === null) return null;
   const n = typeof e;
   if (n === "string" || n === "boolean") return e;
@@ -135,466 +170,1172 @@ function D(e, t) {
   if (n === "bigint") return String(e);
   if (e instanceof Date)
     return Number.isNaN(e.getTime()) ? void 0 : e.toISOString();
-  if (n !== "object" || t >= pe) return;
+  if (n !== "object" || t >= ct) return;
   if (Array.isArray(e))
-    return e.map((s) => D(s, t + 1) ?? null);
+    return e.map((r) => se(r, t + 1) ?? null);
   const i = {};
-  for (const [s, a] of Object.entries(e)) {
-    if (!s) continue;
-    const o = D(a, t + 1);
-    o !== void 0 && (i[s] = o);
+  for (const [r, s] of Object.entries(e)) {
+    if (!r) continue;
+    const a = se(s, t + 1);
+    a !== void 0 && (i[r] = a);
   }
   return i;
 }
-function ye(e) {
+function lt(e) {
   const t = {};
   let n = 2, i = !1;
-  for (const [s, a] of Object.entries(e ?? {})) {
-    if (!s) continue;
-    const o = D(a, 0);
-    if (o === void 0) continue;
-    const l = s.length + JSON.stringify(o).length + 6;
-    if (n + l > V) {
+  for (const [r, s] of Object.entries(e ?? {})) {
+    if (!r) continue;
+    const a = se(s, 0);
+    if (a === void 0) continue;
+    const l = r.length + JSON.stringify(a).length + 6;
+    if (n + l > ve) {
       i = !0;
       continue;
     }
-    n += l, t[s] = o;
+    n += l, t[r] = a;
   }
   return i && console.warn(
-    `[arsel] event data exceeded ${V} serialized bytes — oversized properties were dropped`
+    `[arsel] event data exceeded ${ve} serialized bytes — oversized properties were dropped`
   ), t;
 }
-async function we(e, t, n) {
-  const [i, s, a, o] = await Promise.all([
-    T(),
-    c(r.externalId),
-    c(r.email),
-    c(r.phoneNumber)
+async function ut(e, t, n) {
+  const [i, r, s, a] = await Promise.all([
+    X(),
+    c(o.externalId),
+    c(o.email),
+    c(o.phoneNumber)
   ]), l = {
-    event: e.slice(0, ue),
+    event: e.slice(0, ot),
     // Always sent, even once identified: it is what the backend merges FROM.
-    anonymous_id: i.slice(0, de),
-    data: ye(t),
+    anonymous_id: i.slice(0, st),
+    data: lt(t),
     timestamp: new Date(n).toISOString()
   };
-  return s && (l.external_id = s.slice(0, fe)), a && (l.email = a), o && (l.phone_number = o), JSON.stringify(l);
+  return r && (l.external_id = r.slice(0, at)), s && (l.email = s), a && (l.phone_number = a), JSON.stringify(l);
 }
-async function g(e, t, n = Date.now()) {
-  await ee(await we(e, t, n), crypto.randomUUID()), S().catch(() => {
+async function k(e, t, n = Date.now()) {
+  await De(S.events, await ut(e, t, n), crypto.randomUUID()), V().catch(() => {
   });
 }
-let h = null;
-function S() {
-  return h || (h = he().finally(() => {
-    h = null;
-  }), h);
+let $ = null;
+function V() {
+  return $ || ($ = pt().finally(() => {
+    $ = null;
+  }), $);
 }
-function me(e) {
+function dt(e) {
   const t = e[0].idempotencyKey;
   return e.length === 1 ? t : `${t}:${e[e.length - 1].idempotencyKey}:${e.length}`;
 }
-function be(e, t, n) {
+function ft(e, t, n) {
   e.some(
-    (s) => s.external_id || s.email || s.phone_number
+    (r) => r.external_id || r.email || r.phone_number
   ) && console.error(
     `[arsel] ${e.length} event(s) carrying identifiers were rejected permanently (HTTP ${t}) and dropped. Response: ${JSON.stringify(n)}`
   );
 }
-async function he() {
+async function pt() {
   const [e, t] = await Promise.all([
-    c(r.clientKey),
-    c(r.baseUrl)
+    c(o.clientKey),
+    c(o.baseUrl)
   ]);
   if (!(!e || !t))
     for (; ; ) {
-      const n = await te();
+      const n = await le(S.events);
       if (n.length === 0) return;
-      for (let i = 0; i < n.length; i += U) {
-        const s = n.slice(i, i + U), a = s.map(
+      for (let i = 0; i < n.length; i += ge) {
+        const r = n.slice(i, i + ge), s = r.map(
           (l) => JSON.parse(l.body)
-        ), o = await R(
+        ), a = await z(
           t,
-          ae,
-          s.length === 1 ? a[0] : { events: a },
+          Qe,
+          r.length === 1 ? s[0] : { events: s },
           {
             Authorization: `Bearer ${e}`,
-            "Idempotency-Key": me(s)
+            "Idempotency-Key": dt(r)
           }
         );
-        if (o.result === f.retryable) return;
-        o.result !== f.success && be(a, o.code, o.body);
-        for (const l of s)
-          l.id !== void 0 && await ne(l.id);
+        if (a.result === y.retryable) return;
+        a.result !== y.success && ft(s, a.code, a.body);
+        for (const l of r)
+          l.id !== void 0 && await ue(S.events, l.id);
       }
     }
 }
-function C(e) {
+const ee = 1e3, mt = 720 * 60 * 60 * ee, yt = 500, Se = 50, bt = 86400, ht = 900, q = {
+  maxPerSession: 1,
+  maxLifetime: 3,
+  minSecondsBetween: 86400,
+  delaySeconds: 0
+}, wt = [
+  "MODAL",
+  "BANNER_TOP",
+  "BANNER_BOTTOM",
+  "IMAGE_ONLY"
+];
+let fe = !1, d = null, h = {}, v = { startedAt: 0, counts: {} }, F = null, K = null, Be = !1, ie = null, _ = null, Ue = !1, Ae = !1;
+function N(e) {
+  Ue && console.info(`[arsel] in-app: ${e}`);
+}
+async function gt(e) {
+  fe = !0, Ue = e;
+  const [t, n, i] = await Promise.all([
+    c(o.inAppBundle),
+    c(o.inAppState),
+    c(o.inAppSession)
+  ]);
+  d = t, h = n ?? {}, v = i ?? { startedAt: 0, counts: {} }, await Ke(), await te();
+}
+function vt(e) {
+  _ = e;
+}
+function St(e) {
+  Be = e, e && ae();
+}
+function At() {
+  return {
+    messages: (d == null ? void 0 : d.messages.length) ?? 0,
+    bundleVersion: (d == null ? void 0 : d.bundleVersion) ?? null,
+    fetchedAtMs: (d == null ? void 0 : d.fetchedAtMs) ?? null
+  };
+}
+function Et() {
+  return Oe(S.inAppBeacons);
+}
+async function Ce() {
+  d = null, await L(o.inAppBundle), fe && await te(!0);
+}
+function It() {
+  te(!0);
+}
+function te(e = !1) {
+  return ie ?? (ie = _t(e).finally(() => {
+    ie = null;
+  })), ie;
+}
+async function _t(e) {
+  if (!fe) return;
+  const t = Date.now();
+  if (!e && d && t - d.fetchedAtMs < d.ttlSeconds * ee)
+    return;
+  const n = await $e();
+  if (!n) return;
+  const i = Nt(n.clientKey, n.installationId), r = {
+    "X-Arsel-Device-Auth": n.deviceSecret
+  }, s = !!(d != null && d.bundleVersion);
+  s && (r["If-None-Match"] = `"${(d == null ? void 0 : d.bundleVersion) ?? ""}"`);
+  let a = await Ee(n.baseUrl, i, r);
+  if (a.code === Lt && s && Ae && (N("conditional request failed; retrying without If-None-Match"), delete r["If-None-Match"], a = await Ee(n.baseUrl, i, r)), a.code === Kt) {
+    d && (d = { ...d, fetchedAtMs: t }, await u(o.inAppBundle, d));
+    return;
+  }
+  if (a.result !== y.success || !a.body)
+    return;
+  s || (Ae = !0);
+  const l = xt(a.body, t);
+  l && (d = l, await u(o.inAppBundle, d), await Ct(l, t));
+}
+function Ee(e, t, n) {
+  return de(e, t, n, !0, {
+    // Without no-store the browser revalidates on its own against the response's
+    // ETag + Cache-Control and hands back a synthesized 200; the manually-set
+    // If-None-Match never reaches the server and 304 never happens.
+    cache: "no-store"
+  });
+}
+function Nt(e, t) {
+  const n = encodeURIComponent(e), i = encodeURIComponent(t);
+  return `/api/v1/orgs/${n}/in-app/bundle?installationId=${i}`;
+}
+async function $e() {
+  const [e, t, n, i] = await Promise.all([
+    c(o.clientKey),
+    c(o.baseUrl),
+    c(o.installationId),
+    c(o.deviceSecret)
+  ]);
+  return !e || !t || !n || !i ? null : { clientKey: e, baseUrl: t, installationId: n, deviceSecret: i };
+}
+function xt(e, t) {
+  if (typeof (e == null ? void 0 : e.bundleVersion) != "string")
+    return N("response carried no bundleVersion"), null;
+  e.contractVersion !== void 0 && e.contractVersion !== 1 && N(`unknown contractVersion ${String(e.contractVersion)}; proceeding`);
+  const n = Array.isArray(e.messages) ? e.messages : [], i = [];
+  for (const s of n) {
+    const a = kt(s);
+    a && i.push(a);
+  }
+  n.length !== i.length && N(`dropped ${n.length - i.length} unrenderable message(s)`);
+  const r = O(e.ttlSeconds);
+  return {
+    bundleVersion: e.bundleVersion,
+    ttlSeconds: r && r > 0 ? r : ht,
+    fetchedAtMs: t,
+    messages: i
+  };
+}
+function kt(e) {
+  if (!D(e)) return null;
+  const t = m(e.campaignId), n = m(e.messageId), i = m(e.layout), r = D(e.content) ? e.content : null, s = r ? m(r.headline) : void 0;
+  if (!t || !n || !i || !r || !s)
+    return N("message missing a required field"), null;
+  if (!wt.includes(i))
+    return N(`layout ${i} is not renderable on web`), null;
+  const a = D(e.trigger) ? e.trigger : {}, l = D(e.displayRules) ? e.displayRules : {};
+  return {
+    campaignId: t,
+    messageId: n,
+    variantKey: m(e.variantKey) ?? "default",
+    priority: O(e.priority) ?? 0,
+    expiresAtMs: $t(e.expiresAt),
+    triggerType: m(a.type) ?? "APP_OPEN",
+    triggerEventName: m(a.eventName) ?? null,
+    triggerProperties: D(a.properties) ? a.properties : null,
+    displayRules: {
+      maxPerSession: O(l.maxPerSession) ?? q.maxPerSession,
+      maxLifetime: O(l.maxLifetime) ?? q.maxLifetime,
+      minSecondsBetween: O(l.minSecondsBetween) ?? q.minSecondsBetween,
+      delaySeconds: O(l.delaySeconds) ?? q.delaySeconds
+    },
+    layout: i,
+    content: {
+      headline: s,
+      body: m(r.body) ?? "",
+      imageUrl: m(r.imageUrl),
+      backgroundColor: m(r.backgroundColor),
+      textColor: m(r.textColor),
+      // Absent means "not suppressed"; only an explicit false hides it.
+      showCloseButton: r.showCloseButton !== !1
+    },
+    // `buttons` arrives as null, not [], when a campaign has none.
+    buttons: Array.isArray(e.buttons) ? e.buttons.map(Pt).filter((w) => w !== null) : []
+  };
+}
+function Pt(e) {
+  if (!D(e)) return null;
+  const t = m(e.buttonId), n = m(e.label), i = m(e.action);
+  return !t || !n || !i ? null : {
+    buttonId: t,
+    label: n,
+    action: i,
+    value: m(e.value),
+    style: m(e.style) === "SECONDARY" ? "SECONDARY" : "PRIMARY"
+  };
+}
+function Tt(e, t, n, i) {
+  if (Be || F !== null || !d) return null;
+  for (const r of d.messages) {
+    if (r.triggerType !== t || t !== "APP_OPEN" && r.triggerEventName !== n || !Dt(r.triggerProperties, i)) continue;
+    const s = h[r.messageId];
+    if (r.expiresAtMs !== null && r.expiresAtMs <= e) {
+      Ut(r);
+      continue;
+    }
+    if (!(((s == null ? void 0 : s.shown) ?? 0) >= r.displayRules.maxLifetime) && !((v.counts[r.messageId] ?? 0) >= r.displayRules.maxPerSession) && !(s && e - s.lastShownAtMs < r.displayRules.minSecondsBetween * ee))
+      return r;
+  }
+  return null;
+}
+function Dt(e, t) {
+  if (!e) return !0;
+  const n = t;
+  for (const [i, r] of Object.entries(e))
+    if (String(n[i]) !== String(r)) return !1;
+  return !0;
+}
+function pe(e, t, n = {}) {
+  try {
+    const i = Tt(Date.now(), e, t, n);
+    if (!i) return;
+    F = i.messageId, Le = t;
+    const r = i.displayRules.delaySeconds * ee;
+    if (r <= 0) {
+      _ == null || _(i);
+      return;
+    }
+    K = setTimeout(() => {
+      K = null, _ == null || _(i);
+    }, r);
+  } catch (i) {
+    N(`observe failed: ${i instanceof Error ? i.message : "unknown"}`), F = null;
+  }
+}
+let Le = null;
+function Ot() {
+  return Le;
+}
+function Ie() {
+  Ke().then(() => {
+    pe("APP_OPEN", null, {});
+  });
+}
+function ae() {
+  K !== null && (clearTimeout(K), K = null, F = null);
+}
+function _e() {
+  F = null;
+}
+async function Rt(e, t) {
+  const n = Date.now(), i = h[e.messageId] ?? {
+    shown: 0,
+    lastShownAtMs: 0,
+    lastSeenInBundleAtMs: n
+  };
+  h = {
+    ...h,
+    [e.messageId]: { ...i, shown: i.shown + 1, lastShownAtMs: n }
+  }, v = {
+    ...v,
+    counts: {
+      ...v.counts,
+      [e.messageId]: (v.counts[e.messageId] ?? 0) + 1
+    }
+  }, await Promise.all([
+    u(o.inAppState, h),
+    u(o.inAppSession, v)
+  ]), await ne(e, "impression", { triggerEventName: t });
+}
+async function Mt(e, t) {
+  await ne(e, "clicked", { buttonId: t });
+}
+async function Bt(e, t) {
+  await ne(e, "dismissed", {
+    visibleSeconds: Math.max(
+      0,
+      Math.min(bt, Math.round(t))
+    )
+  });
+}
+function Ut(e) {
+  const t = h[e.messageId];
+  t != null && t.expiredReported || (h = {
+    ...h,
+    [e.messageId]: {
+      shown: (t == null ? void 0 : t.shown) ?? 0,
+      lastShownAtMs: (t == null ? void 0 : t.lastShownAtMs) ?? 0,
+      lastSeenInBundleAtMs: (t == null ? void 0 : t.lastSeenInBundleAtMs) ?? Date.now(),
+      expiredReported: !0
+    }
+  }, u(o.inAppState, h), ne(e, "expired", {}));
+}
+async function ne(e, t, n) {
+  const i = {
+    messageId: e.messageId,
+    campaignId: e.campaignId,
+    eventType: t,
+    // Stamped when it HAPPENED, not at flush: a beacon that waits out an offline
+    // spell would otherwise land in the wrong hour bucket.
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    variantKey: e.variantKey
+  };
+  n.buttonId && (i.buttonId = n.buttonId), n.visibleSeconds !== void 0 && (i.visibleSeconds = n.visibleSeconds), n.triggerEventName && (i.triggerEventName = n.triggerEventName), await De(S.inAppBeacons, JSON.stringify(i)), await Ge(S.inAppBeacons, yt), Y();
+}
+async function Y() {
+  const e = await $e();
+  if (!e) return;
+  const t = await le(S.inAppBeacons);
+  if (t.length === 0) return;
+  const n = `/api/v1/orgs/${encodeURIComponent(e.clientKey)}/in-app/events`;
+  for (let i = 0; i < t.length; i += Se) {
+    const r = t.slice(i, i + Se);
+    if ((await z(
+      e.baseUrl,
+      n,
+      {
+        installationId: e.installationId,
+        events: r.map((a) => JSON.parse(a.body))
+      },
+      { "X-Arsel-Device-Auth": e.deviceSecret },
+      !0
+    )).result === y.retryable) return;
+    for (const a of r)
+      a.id !== void 0 && await ue(S.inAppBeacons, a.id);
+  }
+}
+async function Ct(e, t) {
+  const n = new Set(e.messages.map((r) => r.messageId)), i = {};
+  for (const [r, s] of Object.entries(h)) {
+    const a = n.has(r) ? t : s.lastSeenInBundleAtMs;
+    t - a > mt || (i[r] = { ...s, lastSeenInBundleAtMs: a });
+  }
+  h = i, await u(o.inAppState, h);
+}
+async function Ke() {
+  const e = await c(o.sessionStartedAt) ?? 0;
+  v.startedAt !== e && (v = { startedAt: e, counts: {} }, await u(o.inAppSession, v));
+}
+function D(e) {
+  return typeof e == "object" && e !== null && !Array.isArray(e);
+}
+function m(e) {
+  return typeof e == "string" && e.length > 0 ? e : void 0;
+}
+function O(e) {
+  return typeof e == "number" && Number.isFinite(e) ? e : void 0;
+}
+function $t(e) {
+  if (typeof e != "string") return null;
+  const t = Date.parse(e);
+  return Number.isNaN(t) ? null : t;
+}
+const Lt = -1, Kt = 304, Vt = 2147483e3, re = 44, Ne = /^#[0-9a-fA-F]{3,8}$/, Ft = 0.6;
+let xe = null, Wt = 0;
+function Xt(e, t, n) {
+  const i = e.layout === "MODAL", r = Date.now(), s = `arsel-iam-${Wt += 1}`, a = document.createElement("div");
+  a.setAttribute("data-arsel-inapp", "");
+  const l = a.attachShadow({ mode: "closed" });
+  tn(l), a.style.setProperty("z-index", String(t.zIndex || Vt)), a.style.setProperty("isolation", "isolate"), a.setAttribute("data-layout", e.layout), a.setAttribute("dir", Zt());
+  const w = document.activeElement instanceof HTMLElement ? document.activeElement : null, f = document.createElement("div");
+  f.className = "panel", f.tabIndex = -1, i ? (f.setAttribute("role", "dialog"), f.setAttribute("aria-modal", "true"), f.setAttribute("aria-labelledby", `${s}-h`), e.content.body && f.setAttribute("aria-describedby", `${s}-b`)) : (f.setAttribute("role", "status"), f.setAttribute("aria-live", "polite"));
+  const A = Qt(e);
+  A.background && f.style.setProperty("background", A.background), A.text && f.style.setProperty("color", A.text);
+  let C = !1;
+  const E = (p) => {
+    var g, we;
+    C || (C = !0, document.removeEventListener("keydown", T, !0), a.remove(), w != null && w.isConnected ? w.focus() : i && ((we = (g = document.body).focus) == null || we.call(g)), p === "dismiss" && n.onDismiss((Date.now() - r) / 1e3));
+  }, T = (p) => {
+    p.key === "Escape" && (p.stopPropagation(), E("dismiss"));
+  };
+  if (e.layout === "IMAGE_ONLY" && e.content.imageUrl)
+    f.append(zt(e, () => qe(e)));
+  else {
+    e.content.imageUrl && f.append(jt(e.content.imageUrl, e.content.headline));
+    const p = document.createElement("h2");
+    if (p.id = `${s}-h`, p.className = "headline", p.textContent = e.content.headline, f.append(p), e.content.body) {
+      const g = document.createElement("p");
+      g.id = `${s}-b`, g.className = "body", g.textContent = e.content.body, f.append(g);
+    }
+  }
+  if (e.buttons.length > 0 && f.append(Ht(e, n, E)), (e.content.showCloseButton || !e.buttons.some((p) => p.action === "DISMISS")) && f.append(Jt(t.closeLabel, () => E("dismiss"))), i) {
+    const p = document.createElement("div");
+    p.className = "backdrop", e.content.showCloseButton && p.addEventListener("click", () => E("dismiss")), l.append(p);
+  }
+  l.append(f), document.body.append(a), i ? (f.focus({ preventScroll: !0 }), l.addEventListener("keydown", (p) => {
+    p instanceof KeyboardEvent && Gt(p, l);
+  })) : (f.textContent, f.setAttribute("aria-busy", "true"), requestAnimationFrame(() => {
+    f.removeAttribute("aria-busy");
+  })), document.addEventListener("keydown", T, !0), requestAnimationFrame(() => {
+    C || !a.isConnected || document.visibilityState === "visible" && n.onImpression();
+  });
+  function qe(p) {
+    const g = p.buttons[0];
+    if (!g) {
+      E("dismiss");
+      return;
+    }
+    n.onButton(g), E("button");
+  }
+  return { close: E, root: l };
+}
+function jt(e, t) {
+  const n = document.createElement("figure");
+  n.className = "figure";
+  const i = document.createElement("img");
+  return i.src = e, i.alt = t, i.loading = "eager", i.decoding = "async", i.referrerPolicy = "no-referrer", i.addEventListener("error", () => n.remove()), n.append(i), n;
+}
+function zt(e, t) {
+  const n = document.createElement("button");
+  n.type = "button", n.className = "image-only";
+  const i = document.createElement("img");
+  return i.src = e.content.imageUrl ?? "", i.alt = e.content.headline, i.loading = "eager", i.decoding = "async", i.referrerPolicy = "no-referrer", n.append(i), n.addEventListener("click", t), n;
+}
+function Ht(e, t, n) {
+  const i = document.createElement("div");
+  i.className = "buttons";
+  for (const r of e.buttons) {
+    const s = r.action === "URL" && r.value ? qt(r) : Yt(r);
+    s.addEventListener("click", () => {
+      r.action !== "DISMISS" && t.onButton(r), n(r.action === "DISMISS" ? "dismiss" : "button"), r.action === "DEEP_LINK" && r.value && location.assign(r.value);
+    }), i.append(s);
+  }
+  return i;
+}
+function qt(e) {
+  const t = document.createElement("a");
+  return t.href = e.value ?? "#", t.target = "_blank", t.rel = "noopener noreferrer", t.className = `cta ${e.style.toLowerCase()}`, t.textContent = e.label, t;
+}
+function Yt(e) {
+  const t = document.createElement("button");
+  return t.type = "button", t.className = `cta ${e.style.toLowerCase()}`, t.textContent = e.label, t;
+}
+function Jt(e, t) {
+  const n = document.createElement("button");
+  return n.type = "button", n.className = "close", n.setAttribute("aria-label", e), n.textContent = "×", n.addEventListener("click", t), n;
+}
+function Gt(e, t) {
+  if (e.key !== "Tab") return;
+  const n = [
+    ...t.querySelectorAll("button, a[href]")
+  ].filter((a) => !a.hasAttribute("disabled"));
+  if (n.length === 0) return;
+  const i = n[0], r = n[n.length - 1];
+  if (!i || !r) return;
+  const s = t.activeElement;
+  if (e.shiftKey && s === i) {
+    e.preventDefault(), r.focus();
+    return;
+  }
+  !e.shiftKey && s === r && (e.preventDefault(), i.focus());
+}
+function Zt() {
+  const e = document.documentElement.getAttribute("dir");
+  if (e) return e;
+  try {
+    return getComputedStyle(document.documentElement).direction || "ltr";
+  } catch {
+    return "ltr";
+  }
+}
+function Qt(e) {
+  const t = Ne.test(e.content.backgroundColor ?? "") ? e.content.backgroundColor : void 0, n = Ne.test(e.content.textColor ?? "") ? e.content.textColor : void 0;
+  return t && !n ? { background: t, text: en(t) > Ft ? "#101010" : "#FFFFFF" } : { background: t, text: n };
+}
+function en(e) {
+  const t = e.slice(1), n = t.length === 3 ? t.split("").map((a) => a + a).join("") : t.slice(0, 6), i = parseInt(n.slice(0, 2), 16) / 255, r = parseInt(n.slice(2, 4), 16) / 255, s = parseInt(n.slice(4, 6), 16) / 255;
+  return 0.2126 * i + 0.7152 * r + 0.0722 * s;
+}
+function tn(e) {
+  if ("adoptedStyleSheets" in Document.prototype && typeof CSSStyleSheet == "function")
+    try {
+      xe ?? (xe = nn()), e.adoptedStyleSheets = [xe];
+      return;
+    } catch {
+    }
+  const t = document.createElement("style");
+  t.textContent = Ve, e.append(t);
+}
+function nn() {
+  const e = new CSSStyleSheet();
+  return e.replaceSync(Ve), e;
+}
+const Ve = `
+:host {
+  all: initial;
+  display: block;
+  position: fixed;
+  inset: 0;
+  pointer-events: none;
+  font-family: system-ui, -apple-system, "Segoe UI", Roboto, sans-serif;
+  line-height: 1.5;
+  color: #101010;
+}
+.backdrop {
+  position: fixed;
+  inset: 0;
+  background: rgba(0, 0, 0, 0.45);
+  pointer-events: auto;
+}
+.panel {
+  position: fixed;
+  box-sizing: border-box;
+  pointer-events: auto;
+  background: #ffffff;
+  border-radius: 12px;
+  padding: 20px;
+  box-shadow: 0 10px 40px rgba(0, 0, 0, 0.2);
+  max-height: calc(100vh - 32px);
+  overflow-y: auto;
+}
+:host([data-layout="MODAL"]) .panel {
+  inset-inline-start: 50%;
+  top: 50%;
+  transform: translate(-50%, -50%);
+  width: min(calc(100vw - 32px), 420px);
+}
+:host([dir="rtl"][data-layout="MODAL"]) .panel {
+  transform: translate(50%, -50%);
+}
+:host([data-layout="BANNER_TOP"]) .panel,
+:host([data-layout="BANNER_BOTTOM"]) .panel {
+  inset-inline: 16px;
+  margin-inline: auto;
+  max-width: min(calc(100vw - 32px), 560px);
+}
+:host([data-layout="BANNER_TOP"]) .panel {
+  top: 16px;
+  padding-top: calc(20px + env(safe-area-inset-top));
+}
+:host([data-layout="BANNER_BOTTOM"]) .panel {
+  bottom: 16px;
+  padding-bottom: calc(20px + env(safe-area-inset-bottom));
+}
+:host([data-layout="IMAGE_ONLY"]) .panel {
+  inset-inline-start: 50%;
+  top: 50%;
+  transform: translate(-50%, -50%);
+  padding: 0;
+  background: transparent;
+  box-shadow: none;
+}
+.figure { margin: 0 0 12px; }
+.figure img, .image-only img {
+  display: block;
+  width: 100%;
+  height: auto;
+  border-radius: 8px;
+}
+.image-only {
+  display: block;
+  padding: 0;
+  border: 0;
+  background: none;
+  cursor: pointer;
+  width: min(calc(100vw - 32px), 420px);
+}
+.headline { margin: 0 0 8px; font-size: 18px; font-weight: 600; }
+.body { margin: 0 0 16px; font-size: 15px; }
+.buttons { display: flex; gap: 8px; flex-wrap: wrap; }
+.cta {
+  flex: 1 1 auto;
+  min-height: ${re}px;
+  padding: 10px 16px;
+  border-radius: 8px;
+  border: 1px solid currentColor;
+  font: inherit;
+  cursor: pointer;
+  text-align: center;
+  text-decoration: none;
+}
+.cta.primary { background: #101010; color: #ffffff; border-color: #101010; }
+.cta.secondary { background: transparent; color: inherit; }
+.close {
+  position: absolute;
+  top: 4px;
+  inset-inline-end: 4px;
+  min-width: ${re}px;
+  min-height: ${re}px;
+  border: 0;
+  background: none;
+  color: inherit;
+  font-size: 22px;
+  line-height: 1;
+  cursor: pointer;
+}
+@media (prefers-reduced-motion: reduce) {
+  .panel { animation: none; transition: none; }
+}
+`;
+async function rn(e) {
+  await c(o.installReported) || (await u(o.installReported, !0), !e && await k(it, {
+    sdk_version: j,
+    platform: "web"
+  }));
+}
+async function on() {
+  const [e, t] = await Promise.all([
+    c(o.anonymousId),
+    c(o.installationId)
+  ]);
+  return !!e || !!t;
+}
+const me = "REVOKED";
+function sn(e) {
   const t = e.replace(/-/g, "+").replace(/_/g, "/"), n = atob(t + "=".repeat((4 - t.length % 4) % 4)), i = new Uint8Array(n.length);
-  for (let s = 0; s < n.length; s += 1) i[s] = n.charCodeAt(s);
+  for (let r = 0; r < n.length; r += 1) i[r] = n.charCodeAt(r);
   return i.buffer;
 }
-function b() {
+function B() {
   return typeof navigator < "u" && "serviceWorker" in navigator && typeof PushManager < "u" && typeof Notification < "u";
 }
-function F(e) {
+function Fe(e) {
   return `/api/v1/orgs/${e}/push/web/config`;
 }
-function X(e) {
+function ye(e) {
   return `/api/v1/orgs/${e}/push/subscriptions`;
 }
-const H = 1e4;
-let m = "none", E = null, k = null;
-function ve() {
-  m = "external";
+const We = 1e4;
+let M = "none", W = null, Z = null;
+function an() {
+  M = "external";
 }
-async function ge(e) {
-  if (b()) {
-    m = "managed";
+async function cn(e) {
+  if (B()) {
+    M = "managed";
     try {
-      E = await navigator.serviceWorker.register(e), k = null;
+      W = await navigator.serviceWorker.register(e), Z = null;
     } catch (t) {
-      E = null, k = `service worker registration failed for '${e}': ${String(t)}. Check that the file is deployed and served with a JavaScript content type.`;
+      W = null, Z = `service worker registration failed for '${e}': ${String(t)}. Check that the file is deployed and served with a JavaScript content type.`;
     }
   }
 }
-function Se(e, t) {
+function ln(e, t) {
   return e.active ? Promise.resolve(e) : new Promise((n, i) => {
-    const s = setTimeout(() => {
+    const r = setTimeout(() => {
       i(
         new Error(
           `service worker did not activate within ${t}ms — check the worker script for load errors in DevTools → Application → Service Workers`
         )
       );
-    }, t), a = (l) => {
+    }, t), s = (l) => {
       l.addEventListener("statechange", () => {
-        l.state === "activated" ? (clearTimeout(s), n(e)) : l.state === "redundant" && (clearTimeout(s), i(
+        l.state === "activated" ? (clearTimeout(r), n(e)) : l.state === "redundant" && (clearTimeout(r), i(
           new Error(
             "service worker became redundant before activating — its script likely failed to parse"
           )
         ));
       });
-    }, o = e.installing ?? e.waiting;
-    o ? a(o) : e.addEventListener("updatefound", () => {
-      e.installing && a(e.installing);
+    }, a = e.installing ?? e.waiting;
+    a ? s(a) : e.addEventListener("updatefound", () => {
+      e.installing && s(e.installing);
     });
   });
 }
-function Ee(e, t, n) {
+function un(e, t, n) {
   return Promise.race([
     e,
-    new Promise((i, s) => {
-      setTimeout(() => s(new Error(n)), t);
+    new Promise((i, r) => {
+      setTimeout(() => r(new Error(n)), t);
     })
   ]);
 }
-async function $(e = H) {
-  if (m === "none")
+async function be(e = We) {
+  if (M === "none")
     throw new Error(
       "push is not configured — pass serviceWorkerPath to init(), or serviceWorker: 'external' if your own service worker imports arsel-sw.js"
     );
-  if (m === "external")
-    return Ee(
+  if (M === "external")
+    return un(
       navigator.serviceWorker.ready,
       e,
       `no service worker became active within ${e}ms — with serviceWorker: 'external', your own worker must be registered and must importScripts arsel-sw.js`
     );
-  if (k) throw new Error(k);
-  if (!E)
+  if (Z) throw new Error(Z);
+  if (!W)
     throw new Error("service worker registration has not completed");
-  return Se(E, e);
+  return ln(W, e);
 }
-async function _e(e = H) {
+async function dn(e = We) {
   try {
-    return await $(e), null;
+    return await be(e), null;
   } catch (t) {
     return t instanceof Error ? t.message : String(t);
   }
 }
-async function Ie() {
+async function Xe(e, t) {
+  try {
+    return await e.pushManager.subscribe({
+      // Non-negotiable: the Push API only accepts a userVisibleOnly subscription
+      // in Chrome, and silent push is what the restriction exists to prevent.
+      userVisibleOnly: !0,
+      applicationServerKey: sn(t)
+    });
+  } catch (n) {
+    return console.error(
+      `[arsel] push subscribe failed: ${n instanceof Error ? n.message : n}`
+    ), null;
+  }
+}
+async function fn() {
   const [e, t] = await Promise.all([
-    c(r.clientKey),
-    c(r.baseUrl)
+    c(o.clientKey),
+    c(o.baseUrl)
   ]);
-  if (!e || !t || !b()) return !1;
-  const n = await B(t, F(e));
+  if (!e || !t || !B()) return !1;
+  const { body: n } = await de(
+    t,
+    Fe(e)
+  );
   if (!(n != null && n.vapidPublicKey)) return !1;
   let i;
   try {
-    i = await $();
-  } catch (a) {
-    return console.error(`[arsel] ${a instanceof Error ? a.message : a}`), !1;
-  }
-  const s = await i.pushManager.subscribe({
-    // Non-negotiable: the Push API only accepts a userVisibleOnly subscription
-    // in Chrome, and silent push is what the restriction exists to prevent.
-    userVisibleOnly: !0,
-    applicationServerKey: C(n.vapidPublicKey)
-  });
-  return L(s, n.keyVersion);
-}
-async function L(e, t) {
-  var _;
-  const [n, i, s] = await Promise.all([
-    c(r.clientKey),
-    c(r.baseUrl),
-    T()
+    i = await be();
+  } catch (s) {
+    return console.error(`[arsel] ${s instanceof Error ? s.message : s}`), !1;
+  }
+  const r = await Xe(i, n.vapidPublicKey);
+  return r ? je(r, n.keyVersion) : !1;
+}
+async function je(e, t) {
+  var f, A;
+  const [n, i, r] = await Promise.all([
+    c(o.clientKey),
+    c(o.baseUrl),
+    X()
   ]);
   if (!n || !i) return !1;
-  let a = await c(r.installationId);
-  a || (a = crypto.randomUUID(), await u(r.installationId, a));
-  const o = e.toJSON(), l = await R(
+  let s = await c(o.installationId);
+  s || (s = crypto.randomUUID(), await u(o.installationId, s));
+  const a = e.toJSON(), l = await z(
     i,
-    X(n),
+    ye(n),
     {
-      installationId: a,
+      installationId: s,
       platform: "web",
-      endpoint: o.endpoint,
-      keys: o.keys,
+      endpoint: a.endpoint,
+      keys: a.keys,
       // The same id the events API sends — it is what binds this subscription
       // to the contact the browser's events resolve to.
-      anonymousId: s,
+      anonymousId: r,
       enablementStatus: Notification.permission === "granted" ? "AUTHORIZED" : "DENIED",
       deviceTimezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
       deviceLocale: navigator.language
     }
   );
-  return l.result !== f.success ? !1 : ((_ = l.body) != null && _.deviceSecret && await u(r.deviceSecret, l.body.deviceSecret), await u(r.vapidKeyVersion, t), await u(r.endpoint, o.endpoint ?? null), !0);
+  if (l.result !== y.success) return !1;
+  (f = l.body) != null && f.deviceSecret && await u(o.deviceSecret, l.body.deviceSecret), await u(o.vapidKeyVersion, t), await u(o.endpoint, a.endpoint ?? null);
+  const w = ((A = l.body) == null ? void 0 : A.status) ?? null;
+  return await u(o.subscriptionStatus, w), w !== me;
 }
-async function Ae() {
+async function pn() {
   const [e, t, n, i] = await Promise.all([
-    c(r.clientKey),
-    c(r.baseUrl),
-    c(r.installationId),
-    c(r.deviceSecret)
+    c(o.clientKey),
+    c(o.baseUrl),
+    c(o.installationId),
+    c(o.deviceSecret)
   ]);
-  return !e || !t || !n || !i ? !1 : (await R(
+  return !e || !t || !n || !i || (await z(
     t,
-    `${X(e)}/unsubscribe`,
+    `${ye(e)}/unsubscribe`,
     { installationId: n },
     { "X-Arsel-Device-Auth": i },
     !0
-  )).result === f.success;
+  )).result !== y.success ? !1 : (await u(o.subscriptionStatus, me), !0);
 }
-async function Ne() {
-  if (m === "none" || !b() || Notification.permission !== "granted") return;
+async function mn() {
+  if (M === "none" || !B() || Notification.permission !== "granted") return;
   const [e, t] = await Promise.all([
-    c(r.clientKey),
-    c(r.baseUrl)
+    c(o.clientKey),
+    c(o.baseUrl)
   ]);
   if (!e || !t) return;
-  const n = await B(t, F(e));
+  const { body: n } = await de(
+    t,
+    Fe(e)
+  );
   if (!(n != null && n.vapidPublicKey)) return;
   let i;
   try {
-    i = await $();
+    i = await be();
   } catch {
     return;
   }
-  const s = await i.pushManager.getSubscription(), a = await c(r.vapidKeyVersion);
-  if (s && a === n.keyVersion) return;
-  s && await s.unsubscribe().catch(() => !1);
-  const o = await i.pushManager.subscribe({
-    userVisibleOnly: !0,
-    applicationServerKey: C(n.vapidPublicKey)
-  });
-  await L(o, n.keyVersion);
+  const r = await i.pushManager.getSubscription(), s = await c(o.vapidKeyVersion);
+  if (r && s === n.keyVersion) return;
+  r && await r.unsubscribe().catch(() => !1);
+  const a = await Xe(i, n.vapidPublicKey);
+  a && await je(a, n.keyVersion);
 }
-async function ke() {
-  if (!b()) return !1;
+async function yn() {
+  if (!B() || await c(o.subscriptionStatus) === me)
+    return !1;
   try {
-    const e = m === "managed" ? E : await navigator.serviceWorker.getRegistration();
+    const e = M === "managed" ? W : await navigator.serviceWorker.getRegistration();
     return e ? await e.pushManager.getSubscription() !== null : !1;
   } catch {
     return !1;
   }
 }
-const Pe = 30 * 6e4;
-async function z(e = Date.now()) {
-  const t = await c(r.sessionStartedAt) ?? 0, n = await c(r.backgroundedAt) ?? 0;
+function bn() {
+  return oe ?? (oe = hn().finally(() => {
+    oe = null;
+  })), oe;
+}
+let oe = null;
+async function hn() {
+  var s;
+  const [e, t, n] = await Promise.all([
+    c(o.clientKey),
+    c(o.baseUrl),
+    X()
+  ]);
+  if (!e || !t) return !1;
+  if (await c(o.deviceSecret)) return !0;
+  let i = await c(o.installationId);
+  i || (i = crypto.randomUUID(), await u(o.installationId, i));
+  const r = await z(
+    t,
+    ye(e),
+    {
+      installationId: i,
+      platform: "web",
+      anonymousId: n,
+      // Truthful: no prompt has been shown. Reporting DENIED would mark the
+      // device unreachable for push it was never asked about.
+      enablementStatus: "NOT_DETERMINED",
+      deviceTimezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+      deviceLocale: navigator.language
+    }
+  );
+  return r.code === 403 ? (console.error(
+    "[arsel] this origin is not on the organization's allowed origins list — in-app messaging is disabled"
+  ), !1) : r.result !== y.success ? !1 : ((s = r.body) != null && s.deviceSecret && await u(o.deviceSecret, r.body.deviceSecret), !0);
+}
+const wn = 30 * 6e4;
+async function ze(e = Date.now()) {
+  const t = await c(o.sessionStartedAt) ?? 0, n = await c(o.backgroundedAt) ?? 0;
   if (t !== 0) {
-    if (n === 0 || e - n < Pe) return;
-    await g(
-      ce,
+    if (n === 0 || e - n < wn) return;
+    await k(
+      tt,
       { duration_seconds: Math.round((n - t) / 1e3) },
       n
     );
   }
-  await u(r.sessionStartedAt, e), await u(r.backgroundedAt, 0), await g(oe, {}, e);
+  await u(o.sessionStartedAt, e), await u(o.backgroundedAt, 0), await k(et, {}, e);
 }
-async function x(e = Date.now()) {
-  (await c(r.sessionStartedAt) ?? 0) !== 0 && await u(r.backgroundedAt, e);
+async function ke(e = Date.now()) {
+  (await c(o.sessionStartedAt) ?? 0) !== 0 && await u(o.backgroundedAt, e);
 }
-function Te() {
+function gn(e) {
   typeof document > "u" || (document.addEventListener("visibilitychange", () => {
-    document.visibilityState === "visible" ? z() : x();
-  }), window.addEventListener("pagehide", () => void x()));
+    document.visibilityState === "visible" ? ze().then(() => e == null ? void 0 : e()) : ke();
+  }), window.addEventListener("pagehide", () => void ke()));
 }
-let d = null, J = !1;
-function p(e) {
-  J && console.info(`[arsel] ${e}`);
+let b = null, ce = !1, R = null;
+function I(e) {
+  ce && console.info(`[arsel] ${e}`);
 }
-const Ke = /^\+[1-9]\d{6,14}$/, Oe = /^[^\s@]+@[^\s@]+\.[^\s@]+$/, M = 100;
-let P = [], j = !1;
-function De() {
-  typeof window < "u" && window.addEventListener("online", () => void S().catch(() => {
+const vn = /^\+[1-9]\d{6,14}$/, Sn = /^[^\s@]+@[^\s@]+\.[^\s@]+$/, Pe = 100;
+let Q = [], Te = !1;
+function An() {
+  typeof navigator < "u" && navigator.serviceWorker && navigator.serviceWorker.addEventListener("message", (e) => {
+    const t = e.data;
+    (t == null ? void 0 : t.type) === "arsel_iam_sync" && It();
+  }), typeof window < "u" && (window.addEventListener("online", () => {
+    V().catch(() => {
+    }), Y().catch(() => {
+    });
+  }), window.addEventListener("pagehide", () => {
+    ae(), Y().catch(() => {
+    });
   })), typeof document < "u" && document.addEventListener("visibilitychange", () => {
-    document.visibilityState === "visible" && S().catch(() => {
+    if (document.visibilityState === "visible") {
+      V().catch(() => {
+      }), te().catch(() => {
+      });
+      return;
+    }
+    ae(), Y().catch(() => {
     });
   });
 }
-function Re(e) {
-  return d || (d = (async () => {
-    var a;
-    if (!e.clientKey) throw new Error("Arsel: clientKey is required");
-    const t = /^http:\/\/(localhost|127\.0\.0\.1)(:\d+)?(\/|$)/.test(
-      e.baseUrl ?? ""
-    );
-    if (!((a = e.baseUrl) != null && a.startsWith("https://")) && !t)
-      throw new Error("Arsel: baseUrl must be HTTPS (http is allowed for localhost only)");
-    J = e.debug ?? !1;
-    const n = e.baseUrl.replace(/\/+$/, "");
+function U() {
+  return R === null;
+}
+function En(e) {
+  var n, i;
+  if (!((n = e.clientKey) != null && n.trim()))
+    return "clientKey is required (the org's publishable pub_… key)";
+  if (!e.clientKey.startsWith("pub_"))
+    return "clientKey should be the publishable pub_… key — never a secret API key";
+  const t = /^http:\/\/(localhost|127\.0\.0\.1)(:\d+)?(\/|$)/.test(
+    e.baseUrl ?? ""
+  );
+  if (!((i = e.baseUrl) != null && i.startsWith("https://")) && !t)
+    return "baseUrl must be HTTPS (http is allowed for localhost only)";
+  try {
+    new URL(e.baseUrl);
+  } catch {
+    return "baseUrl is not a valid URL";
+  }
+  return null;
+}
+function In(e) {
+  return b || (b = (async () => {
+    if (ce = e.debug ?? !1, R = En(e), R) {
+      console.error(`[arsel] not started — ${R}`);
+      return;
+    }
+    const t = e.baseUrl.replace(/\/+$/, "");
     await Promise.all([
-      u(r.clientKey, e.clientKey),
-      u(r.baseUrl, n)
-    ]), await T();
-    const i = P;
-    P = [];
-    for (const o of i)
-      await g(o.name, o.properties, o.timestampMs);
-    e.serviceWorker === "external" ? ve() : e.serviceWorkerPath && await ge(e.serviceWorkerPath), Te(), De();
-    const s = typeof document < "u" ? document : void 0;
-    (s == null ? void 0 : s.visibilityState) === "visible" && s.prerendering !== !0 && await z(), S(), Ne(), p(`initialized (sdk ${K})`);
-  })(), d);
-}
-async function $e(e, t = {}) {
+      u(o.clientKey, e.clientKey),
+      u(o.baseUrl, t)
+    ]);
+    const n = await on();
+    await X(), await rn(n);
+    const i = Q;
+    Q = [];
+    for (const l of i)
+      await k(l.name, l.properties, l.timestampMs);
+    e.serviceWorker === "external" ? an() : e.serviceWorkerPath && await cn(e.serviceWorkerPath);
+    const r = Mn(e.inApp);
+    gn(r ? Ie : void 0), An();
+    const s = typeof document < "u" ? document : void 0, a = (s == null ? void 0 : s.visibilityState) === "visible" && s.prerendering !== !0;
+    a && await ze(), r && (vt(Bn(r)), await bn() && (await gt(ce), a && Ie())), V().catch(() => {
+    }), mn().catch(() => {
+    }), I(`initialized (sdk ${j})`);
+  })(), b);
+}
+async function He(e, t = {}) {
   const n = e == null ? void 0 : e.trim();
   if (!n) {
-    p("track() called with a blank event name — ignoring");
+    I("track() called with a blank event name — ignoring");
     return;
   }
-  if (n.startsWith(v)) {
-    p(`'${v}' is reserved for the SDK — ignoring '${n}'`);
+  if (n.startsWith(x)) {
+    I(`'${x}' is reserved for the SDK — ignoring '${n}'`);
     return;
   }
-  if (!d) {
-    if (P.length >= M) {
-      j || (j = !0, console.warn(
-        `[arsel] more than ${M} events tracked before init() — dropping the rest. Call init() earlier.`
+  if (!b) {
+    if (Q.length >= Pe) {
+      Te || (Te = !0, console.warn(
+        `[arsel] more than ${Pe} events tracked before init() — dropping the rest. Call init() earlier.`
       ));
       return;
     }
-    P.push({ name: n, properties: t, timestampMs: Date.now() });
+    Q.push({ name: n, properties: t, timestampMs: Date.now() });
     return;
   }
-  await d, await g(n, t);
+  await b, U() && (await k(n, t), pe("CUSTOM_EVENT", n, t));
+}
+async function _n(e, t = {}) {
+  const n = e == null ? void 0 : e.trim();
+  if (!n) {
+    I("screen() called with a blank name — ignoring");
+    return;
+  }
+  await b, await k(rt, { ...t, screen_name: n }), pe("SCREEN_VIEW", n, t);
+}
+function Nn(e) {
+  St(e);
 }
-async function Ue(e) {
-  await d;
+async function xn(e) {
+  if (await b, !U()) return;
   let { email: t, phoneNumber: n } = e ?? {};
   const i = e == null ? void 0 : e.externalId;
-  if (t && !Oe.test(t) && (console.error(`[arsel] identify(): '${t}' is not a valid email address — ignored`), t = void 0), n && !Ke.test(n) && (console.error(
+  if (t && !Sn.test(t) && (console.error(`[arsel] identify(): '${t}' is not a valid email address — ignored`), t = void 0), n && !vn.test(n) && (console.error(
     `[arsel] identify(): '${n}' is not E.164 (e.g. +966501234567) — ignored`
   ), n = void 0), !i && !t && !n) {
-    p("identify() needs at least one of externalId, email or phoneNumber");
+    I("identify() needs at least one of externalId, email or phoneNumber");
     return;
   }
-  i && await u(r.externalId, i), t && await u(r.email, t), n && await u(r.phoneNumber, n), await g(le, {});
+  i && await u(o.externalId, i), t && await u(o.email, t), n && await u(o.phoneNumber, n), await k(nt, {}), await Ce();
 }
-async function Ve() {
-  await d, await Promise.all([
-    A(r.externalId),
-    A(r.email),
-    A(r.phoneNumber),
-    A(r.sessionStartedAt)
-  ]), await ie(), p("identity reset");
+async function kn() {
+  await b, U() && (await Promise.all([
+    L(o.externalId),
+    L(o.email),
+    L(o.phoneNumber),
+    L(o.sessionStartedAt)
+  ]), await Ze(), await Ce(), I("identity reset"));
 }
-async function xe() {
-  await d;
-  const e = await Ae();
-  return p(e ? "push opt-out recorded" : "push opt-out not sent — no registration to revoke"), e;
+async function Pn() {
+  if (await b, !U()) return !1;
+  const e = await pn();
+  return I(e ? "push opt-out recorded" : "push opt-out not sent — no registration to revoke"), e;
 }
-async function Me() {
-  if (await d, !b()) return !1;
-  const e = await _e();
+async function Tn() {
+  if (await b, !U() || !B()) return !1;
+  const e = await dn();
   if (e)
     return console.error(`[arsel] promptForPush(): ${e}`), !1;
   const t = await Notification.requestPermission();
-  return t !== "granted" ? (p(`notification permission: ${t}`), !1) : Ie();
+  return t !== "granted" ? (I(`notification permission: ${t}`), !1) : fn();
 }
-async function je() {
-  return await d, T();
+async function Dn() {
+  return await b, X();
 }
-async function We() {
+async function On() {
   const [
     e,
     t,
     n,
     i,
+    r,
     s,
     a,
-    o,
     l,
-    _,
-    q,
-    Y,
-    Z
+    w,
+    f,
+    A,
+    C,
+    E
   ] = await Promise.all([
-    c(r.anonymousId),
-    c(r.externalId),
-    c(r.email),
-    c(r.phoneNumber),
-    c(r.installationId),
-    c(r.deviceSecret),
-    c(r.vapidKeyVersion),
-    re(),
-    ke(),
-    c(r.lastResponseCode),
-    c(r.lastResponsePath),
-    c(r.lastResponseAtMs)
-  ]);
+    c(o.anonymousId),
+    c(o.externalId),
+    c(o.email),
+    c(o.phoneNumber),
+    c(o.installationId),
+    c(o.deviceSecret),
+    c(o.vapidKeyVersion),
+    Oe(S.events),
+    yn(),
+    c(o.subscriptionStatus),
+    c(o.lastResponseCode),
+    c(o.lastResponsePath),
+    c(o.lastResponseAtMs)
+  ]), T = At(), he = await Et().catch(() => 0);
   return {
-    sdkVersion: K,
-    initialized: d !== null,
+    sdkVersion: j,
+    initialized: b !== null && R === null,
+    configError: R,
+    inAppMessages: T.messages,
+    inAppBundleVersion: T.bundleVersion,
+    inAppFetchedAtMs: T.fetchedAtMs,
+    pendingInAppBeacons: he,
     anonymousId: e,
     hasAssertedIdentity: !!(t || n || i),
-    installationId: s,
-    hasDeviceSecret: !!a,
+    installationId: r,
+    hasDeviceSecret: !!s,
     pendingEvents: l,
-    permission: b() ? Notification.permission : "unsupported",
-    isSubscribed: _,
-    vapidKeyVersion: o,
-    lastResponseCode: q,
-    lastResponsePath: Y,
-    lastResponseAtMs: Z
+    permission: B() ? Notification.permission : "unsupported",
+    isSubscribed: w,
+    subscriptionStatus: f,
+    vapidKeyVersion: a,
+    lastResponseCode: A,
+    lastResponsePath: C,
+    lastResponseAtMs: E
   };
 }
-async function Be() {
-  await d, await S();
-}
-const Ce = {
-  init: Re,
-  track: $e,
-  identify: Ue,
-  reset: Ve,
-  optOut: xe,
-  promptForPush: Me,
-  getAnonymousId: je,
-  diagnostics: We,
-  flushNow: Be,
-  SDK_VERSION: K
+async function Rn() {
+  await b, U() && await V();
+}
+const Cn = {
+  init: In,
+  track: He,
+  screen: _n,
+  suppressInAppMessages: Nn,
+  identify: xn,
+  reset: kn,
+  optOut: Pn,
+  promptForPush: Tn,
+  getAnonymousId: Dn,
+  diagnostics: On,
+  flushNow: Rn,
+  SDK_VERSION: j
 };
+function Mn(e) {
+  if (e === !1) return;
+  const t = typeof e == "object" && e !== null ? e : {};
+  return {
+    zIndex: t.zIndex ?? Un,
+    closeLabel: t.closeLabel ?? "Close"
+  };
+}
+function Bn(e) {
+  return (t) => {
+    const n = Ot();
+    try {
+      Xt(t, e, {
+        onImpression: () => void Rt(t, n),
+        onButton: (i) => {
+          Mt(t, i.buttonId), i.action === "CUSTOM_EVENT" && i.value && He(i.value);
+        },
+        onDismiss: (i) => {
+          Bt(t, i), _e();
+        }
+      });
+    } catch (i) {
+      I(`in-app render failed: ${i instanceof Error ? i.message : ""}`), _e();
+    }
+  };
+}
+const Un = 2147483e3;
 export {
-  Ce as Arsel,
-  K as SDK_VERSION,
-  Ce as default,
-  We as diagnostics,
-  Be as flushNow,
-  je as getAnonymousId,
-  Ue as identify,
-  Re as init,
-  xe as optOut,
-  Me as promptForPush,
-  Ve as reset,
-  $e as track
+  Cn as Arsel,
+  j as SDK_VERSION,
+  Cn as default,
+  On as diagnostics,
+  Rn as flushNow,
+  Dn as getAnonymousId,
+  xn as identify,
+  In as init,
+  Pn as optOut,
+  Tn as promptForPush,
+  kn as reset,
+  _n as screen,
+  Nn as suppressInAppMessages,
+  He as track
 };
 //# sourceMappingURL=arsel.js.map