@blotout/qinto-cli 0.1.25 → 0.1.26

package/dist/worker-artifact/main/index.js

@@ -20818,6 +20818,7 @@ var APP_FLOWS = ["transform", "destination"];
 var TRANSFORM_ACTION_TYPES = ["track", "identify"];
 var EVENT_ACTION_TYPES = ["track", "identify", "consent"];
 var BROWSER_RESULT_ACTION_TYPES = ["track", "identify"];
+var BROWSER_HOOKS = ["transform"];
 var APP_LIFECYCLE_TYPES = ["installed", "configurationChanged", "enabled", "disabled", "versionChanged", "uninstalled"];
 var API_CAPABILITIES = ["track", "identify", "alias", "consentWrite", "consentRead", "propertiesRead", "sessionRead"];
 var DATA_CAPABILITIES = [
@@ -20828,7 +20829,8 @@ var DATA_CAPABILITIES = [
   "eventContext",
   "sharedContext",
   "facts",
-  "identity"
+  "identity",
+  "siteInstalls"
 ];
 var MAX_APP_VARIABLES = 32;
 var MAX_APP_SCOPE_VARIABLES = 16;
@@ -21106,7 +21108,8 @@ var baseSchema = external_exports.object({
   browser: external_exports.object({
     entry: external_exports.string().min(1).max(255).optional(),
     capture: captureSchema.optional(),
-    eventResults: external_exports.array(external_exports.enum(BROWSER_RESULT_ACTION_TYPES)).max(BROWSER_RESULT_ACTION_TYPES.length).optional()
+    eventResults: external_exports.array(external_exports.enum(BROWSER_RESULT_ACTION_TYPES)).max(BROWSER_RESULT_ACTION_TYPES.length).optional(),
+    hooks: external_exports.array(external_exports.enum(BROWSER_HOOKS)).max(BROWSER_HOOKS.length).optional()
   }).strict().optional().meta({
     description: "The app's browser surface: an optional entry for the bundle that ships inside the site's q.js, and the query params and cookies it declares for capture."
   }),
@@ -21410,6 +21413,15 @@ var validateCapture = /* @__PURE__ */ __name((manifest, ctx) => {
     }
   }
 }, "validateCapture");
+var validateBrowserHooks = /* @__PURE__ */ __name((manifest, ctx) => {
+  const hooks = manifest.browser?.hooks ?? [];
+  if (hooks.length > 0 && manifest.browser?.entry === void 0) {
+    ctx.addIssue({ code: "custom", path: ["browser", "hooks"], message: "hooks needs a browser entry" });
+  }
+  if (hooks.includes("transform") && !manifest.flows.includes("transform")) {
+    ctx.addIssue({ code: "custom", path: ["browser", "hooks"], message: "The browser transform hook needs the transform flow" });
+  }
+}, "validateBrowserHooks");
 var validateRpc = /* @__PURE__ */ __name((manifest, ctx) => {
   const exposes = manifest.rpc?.exposes ?? [];
   uniqueOrIssue(
@@ -21470,6 +21482,7 @@ var appManifestSchema = baseSchema.superRefine((manifest, ctx) => {
   validatePipelines(manifest, ctx);
   validateEndpoints(manifest, ctx);
   validateCapture(manifest, ctx);
+  validateBrowserHooks(manifest, ctx);
   validateRpc(manifest, ctx);
   validateEvents(manifest, ctx);
   validateOauth(manifest, ctx);
@@ -21502,6 +21515,7 @@ var MAX_APPS_Q_BYTES = 4 * 1024 * 1024;
 var ENVELOPE_VERSION = 3;
 var ENVELOPE_ERROR_CODES = ["invalid_arguments"];
 var MAX_INSTALLS_PER_APP = 15;
+var MAX_APPS_PER_DOMAIN = 50;
 var MAX_EMITS_PER_INSTALL = 10;
 var MAX_PUSHES_PER_INSTALL = 10;
 var MAX_CAPTURE_WRITES_PER_INSTALL = 10;
@@ -21517,6 +21531,10 @@ var MAX_RESPONSE_BYTES = 1024 * 1024;
 var MAX_RPC_BYTES = 128 * 1024;
 var installSchema = external_exports.object({ id: external_exports.string().min(1).max(64), ord: external_exports.number().int().min(1), label: external_exports.string().max(100) }).strict();
 var emitSchema = external_exports.object({ type: external_exports.literal("track"), occurredAt: external_exports.number().int().nonnegative().safe(), payload: external_exports.record(external_exports.string(), external_exports.unknown()) }).strict();
+var installRuleSchema = external_exports.object({
+  mode: external_exports.enum(["except", "only"]),
+  installIds: external_exports.array(external_exports.string().min(1).max(64)).max(MAX_APPS_PER_DOMAIN * MAX_INSTALLS_PER_APP)
+}).strict();
 var pushSchema = external_exports.object({ topic: external_exports.string().min(1).max(64), data: external_exports.unknown(), broadcast: external_exports.enum(PUSH_BROADCASTS).optional() }).strict().refine((push) => {
   return new TextEncoder().encode(JSON.stringify(push.data ?? null)).length <= MAX_PUSH_BYTES;
 }, "Push data exceeds the per-message size cap");
@@ -21603,7 +21621,11 @@ var envelopeRequestSchema = external_exports.object({
 var envelopeResponseSchema = external_exports.object({
   v: external_exports.literal(ENVELOPE_VERSION),
   // Transform invocations only: pass the action through, drop it, or replace its payload (§5.4).
-  result: external_exports.union([external_exports.literal("pass"), external_exports.literal("drop"), external_exports.object({ payload: external_exports.record(external_exports.string(), external_exports.unknown()) }).strict()]).optional(),
+  result: external_exports.union([
+    external_exports.literal("pass"),
+    external_exports.literal("drop"),
+    external_exports.object({ payload: external_exports.record(external_exports.string(), external_exports.unknown()).optional(), installs: installRuleSchema.optional() }).strict()
+  ]).optional(),
   effects: external_exports.array(effectGroupSchema).optional(),
   rpc: external_exports.object({ result: external_exports.unknown() }).strict().refine((rpc) => {
     return new TextEncoder().encode(JSON.stringify(rpc.result ?? null)).length <= MAX_RPC_BYTES;
@@ -21901,6 +21923,16 @@ var aggregateEndpointOutcomes = /* @__PURE__ */ __name((outcomes) => {
   return { status: failed ? 502 : 200 };
 }, "aggregateEndpointOutcomes");
 
+// ../../libs/app-envelope/src/install-rule.ts
+var intersectInstallRules = /* @__PURE__ */ __name((a, b) => {
+  if (a.mode === "except" && b.mode === "except") {
+    return { mode: "except", installIds: [.../* @__PURE__ */ new Set([...a.installIds, ...b.installIds])] };
+  }
+  const [only, other] = a.mode === "only" ? [a, b] : [b, a];
+  const listed = new Set(other.installIds);
+  return { mode: "only", installIds: only.installIds.filter((id) => listed.has(id) === (other.mode === "only")) };
+}, "intersectInstallRules");
+
 // ../../libs/app-envelope/src/observability.ts
 var APP_OBSERVABILITY_HEADER = "x-qinto-app-observability";
 var APP_OBSERVABILITY_VERSION = 1;
@@ -21970,6 +22002,12 @@ var parseAppObservability = /* @__PURE__ */ __name((header) => {
 var UI_CONTEXT_HEADER = "x-qinto-ui-context";
 var MAX_UI_BODY_BYTES = 1024 * 1024;
 var uiInstallSchema = external_exports.object({ id: external_exports.string().min(1).max(64), ord: external_exports.number().int().min(1), label: external_exports.string().max(100), enabled: external_exports.boolean() }).strict();
+var siteInstallSchema = external_exports.object({
+  id: external_exports.string().min(1).max(64),
+  appSlug: external_exports.string().min(1).max(30),
+  appName: external_exports.string().min(1).max(100),
+  label: external_exports.string().max(100)
+}).strict();
 var uiContextSchema = external_exports.object({
   version: external_exports.string().min(1).max(32),
   viewer: external_exports.object({
@@ -21980,8 +22018,35 @@ var uiContextSchema = external_exports.object({
   }).strict(),
   install: uiInstallSchema,
   installs: external_exports.array(uiInstallSchema).min(1).max(MAX_INSTALLS_PER_APP),
+  siteInstalls: external_exports.array(siteInstallSchema).max(MAX_APPS_PER_DOMAIN * MAX_INSTALLS_PER_APP).optional(),
   writeTicket: external_exports.string().min(1).max(2048).optional()
 }).strict();
+var MAX_UI_SITE_INSTALLS_BYTES = 64 * 1024;
+var asciiJson = /* @__PURE__ */ __name((value) => {
+  return JSON.stringify(value).replace(/[\u007f-\uffff]/g, (char) => `\\u${char.charCodeAt(0).toString(16).padStart(4, "0")}`);
+}, "asciiJson");
+var encodeUiContext = /* @__PURE__ */ __name((context) => {
+  return asciiJson(context);
+}, "encodeUiContext");
+var bySlugThenOrd = /* @__PURE__ */ __name((a, b) => {
+  if (a.appSlug !== b.appSlug) {
+    return a.appSlug < b.appSlug ? -1 : 1;
+  }
+  return a.ord - b.ord;
+}, "bySlugThenOrd");
+var boundSiteInstalls = /* @__PURE__ */ __name((installs) => {
+  const listed = [];
+  let bytes = 2;
+  for (const { id, appSlug, appName, label } of [...installs].sort(bySlugThenOrd)) {
+    const install = { id, appSlug, appName, label };
+    bytes += asciiJson(install).length + 1;
+    if (bytes > MAX_UI_SITE_INSTALLS_BYTES) {
+      break;
+    }
+    listed.push(install);
+  }
+  return listed;
+}, "boundSiteInstalls");
 
 // ../../node_modules/.pnpm/hono@4.13.5/node_modules/hono/dist/compose.js
 var compose = /* @__PURE__ */ __name((middleware, onError, onNotFound) => {
@@ -26322,6 +26387,10 @@ var phoneIdentifier = /* @__PURE__ */ __name((raw2) => {
   const identifier = { type: "phone", value: normalizePhone(raw2) };
   return isValidIdentifier(identifier) ? identifier : void 0;
 }, "phoneIdentifier");
+var customIdentifier = /* @__PURE__ */ __name((raw2) => {
+  const identifier = { type: "custom", value: raw2.trim() };
+  return isValidIdentifier(identifier) ? identifier : void 0;
+}, "customIdentifier");
 var classifyIdentifier = /* @__PURE__ */ __name((raw2) => {
   const identifier = emailIdentifier(raw2) ?? (raw2.trim().startsWith("+") ? phoneIdentifier(raw2) : void 0);
   return identifier ?? { type: "custom", value: raw2.trim() };
@@ -27375,22 +27444,80 @@ var handleCurrencyRates = /* @__PURE__ */ __name(async (ctx) => {
   return Response.json(current);
 }, "handleCurrencyRates");
 
-// src/apps/emit-payload.ts
-var emitPayloadSchema = external_exports.object({
-  event: external_exports.string().min(1),
-  eventId: external_exports.string().min(1).optional(),
-  properties: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
-}).strict();
-var emittedEventId = /* @__PURE__ */ __name((eventId, properties2) => {
-  if (eventId !== void 0) {
-    return eventId;
+// src/id-graph/upsert.ts
+var identifierValue = external_exports.string().min(1).max(256).optional();
+var traitValue = external_exports.string().max(256).optional();
+var personUpsertSchema = external_exports.object({
+  email: identifierValue,
+  phone: identifierValue,
+  customId: identifierValue,
+  firstName: traitValue,
+  lastName: traitValue,
+  city: traitValue,
+  state: traitValue,
+  zip: traitValue,
+  country: traitValue,
+  observedAt: external_exports.number().int().nonnegative().safe().optional()
+}).strict().refine((person2) => person2.email !== void 0 || person2.phone !== void 0 || person2.customId !== void 0);
+var IDENTIFIER_PARSERS = { email: emailIdentifier, phone: phoneIdentifier, customId: customIdentifier };
+var TRAIT_KEYS = {
+  email: "email",
+  phone: "phone",
+  firstName: "first_name",
+  lastName: "last_name",
+  city: "city",
+  state: "state",
+  zip: "postal_code",
+  country: "country"
+};
+var upsertIdentifiers = /* @__PURE__ */ __name((upsert) => {
+  return Object.entries(IDENTIFIER_PARSERS).flatMap(([field, parse4]) => {
+    const raw2 = upsert[field];
+    if (raw2 === void 0) {
+      return [];
+    }
+    const identifier = parse4(raw2);
+    if (identifier === void 0) {
+      addSpanEvent("invalid identifier ignored", { level: "warn", attrs: { field } });
+      return [];
+    }
+    return [identifier];
+  });
+}, "upsertIdentifiers");
+var upsertTraits = /* @__PURE__ */ __name((upsert) => {
+  const traits = {};
+  for (const [field, key] of Object.entries(TRAIT_KEYS)) {
+    const value = upsert[field];
+    if (value !== void 0) {
+      traits[key] = value;
+    }
   }
-  const orderId = properties2?.["orderId"];
-  if (typeof orderId === "string" && orderId !== "") {
-    return orderId;
+  return traits;
+}, "upsertTraits");
+var upsertPerson = /* @__PURE__ */ __name(async (env, upsert) => {
+  const [routing, ...others] = upsertIdentifiers(upsert);
+  if (routing === void 0) {
+    return null;
   }
-  return `evt_${ulid3()}`;
-}, "emittedEventId");
+  const candidate = generateUserId();
+  const { anonId } = await claimAnon(env, routing, candidate);
+  const receivedAt = Date.now();
+  const observedAt = upsert.observedAt ?? receivedAt;
+  const action = buildAction({
+    type: "identify",
+    userId: anonId,
+    source: "app",
+    identifier: routing,
+    identifiers: others,
+    graphOnly: true,
+    observedAt,
+    receivedAt,
+    payload: { traits: upsertTraits(upsert) },
+    context: { source: "app", occurredAt: observedAt, offline: false, replay: false }
+  });
+  await ingest(env, action);
+  return { anonId, created: anonId === candidate };
+}, "upsertPerson");
 
 // src/apps/rate-limit.ts
 var limiterAbsenceLogged = false;
@@ -27407,6 +27534,49 @@ var rateLimited = /* @__PURE__ */ __name(async (env, key, binding = "BROKER_RATE
   return !outcome.success;
 }, "rateLimited");
 
+// src/apps/broker-identity.ts
+var identityUpsertBody = external_exports.object({
+  ...identityFields,
+  kind: external_exports.literal("identityUpsert"),
+  person: personUpsertSchema
+}).strict();
+var identityGranted = /* @__PURE__ */ __name((slug) => {
+  return siteRegistry().registry.apps[slug]?.data.includes(IDENTITY_CAPABILITY) === true;
+}, "identityGranted");
+var identityPermissionDenied = /* @__PURE__ */ __name(() => {
+  return Response.json({ error: "identity_permission_denied" }, { status: 403 });
+}, "identityPermissionDenied");
+var handleIdentityUpsert = /* @__PURE__ */ __name(async (env, body) => {
+  if (!identityGranted(body.slug)) {
+    return identityPermissionDenied();
+  }
+  if (await rateLimited(env, `${body.slug}::identity-upsert`)) {
+    return Response.json({ error: "rate_limited" }, { status: 429 });
+  }
+  const upserted = await upsertPerson(env, body.person);
+  if (upserted === null) {
+    return Response.json({ error: "invalid_identifier" }, { status: 400 });
+  }
+  return Response.json(upserted);
+}, "handleIdentityUpsert");
+
+// src/apps/emit-payload.ts
+var emitPayloadSchema = external_exports.object({
+  event: external_exports.string().min(1),
+  eventId: external_exports.string().min(1).optional(),
+  properties: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
+}).strict();
+var emittedEventId = /* @__PURE__ */ __name((eventId, properties2) => {
+  if (eventId !== void 0) {
+    return eventId;
+  }
+  const orderId = properties2?.["orderId"];
+  if (typeof orderId === "string" && orderId !== "") {
+    return orderId;
+  }
+  return `evt_${ulid3()}`;
+}, "emittedEventId");
+
 // src/apps/broker-track.ts
 var trackBody = external_exports.object({
   ...identityFields,
@@ -27414,6 +27584,7 @@ var trackBody = external_exports.object({
   source: external_exports.enum(APP_HANDLER_SOURCES),
   userId: external_exports.string().min(1).max(64),
   installId: external_exports.string().min(1).max(64),
+  installs: installRuleSchema.optional(),
   event: emitSchema
 }).strict();
 var handleTrack = /* @__PURE__ */ __name(async (env, body) => {
@@ -27444,7 +27615,8 @@ var handleTrack = /* @__PURE__ */ __name(async (env, body) => {
     userId: body.userId,
     source: body.source,
     payload: { event, eventId: emittedEventId(eventId, properties2), properties: properties2 ?? {} },
-    context: { source: "app", occurredAt: body.event.occurredAt, offline: false, replay: false }
+    context: { source: "app", occurredAt: body.event.occurredAt, offline: false, replay: false },
+    ...body.installs === void 0 ? {} : { installs: body.installs }
   });
   await ingest(env, action, site);
   return Response.json({ accepted: true }, { status: 202 });
@@ -28653,6 +28825,7 @@ var brokerBody = external_exports.discriminatedUnion("kind", [
   contextWriteBody,
   factsReadBody,
   identityReadBody,
+  identityUpsertBody,
   currencyRatesBody,
   trackBody
 ]);
@@ -28721,9 +28894,6 @@ var forbidden = /* @__PURE__ */ __name(() => {
 var factsPermissionDenied = /* @__PURE__ */ __name(() => {
   return Response.json({ error: "facts_permission_denied" }, { status: 403 });
 }, "factsPermissionDenied");
-var identityPermissionDenied = /* @__PURE__ */ __name(() => {
-  return Response.json({ error: "identity_permission_denied" }, { status: 403 });
-}, "identityPermissionDenied");
 var handlePush = /* @__PURE__ */ __name(async (env, body) => {
   if (new TextEncoder().encode(JSON.stringify(body.data ?? null)).length > MAX_PUSH_BYTES) {
     return invalidBody();
@@ -28963,8 +29133,7 @@ var handleFactsRead = /* @__PURE__ */ __name(async (env, body) => {
   return Response.json({ items: page.items, nextCursor });
 }, "handleFactsRead");
 var handleIdentityRead = /* @__PURE__ */ __name(async (env, body) => {
-  const app2 = siteRegistry().registry.apps[body.slug];
-  if (app2 === void 0 || !app2.data.includes(IDENTITY_CAPABILITY)) {
+  if (!identityGranted(body.slug)) {
     return identityPermissionDenied();
   }
   if (await rateLimited(env, `${body.slug}::identity`)) {
@@ -29041,6 +29210,9 @@ var handleBroker = /* @__PURE__ */ __name(async (request, env, ctx) => {
     case "identityRead": {
       return handleIdentityRead(env, body);
     }
+    case "identityUpsert": {
+      return handleIdentityUpsert(env, body);
+    }
     case "currencyRates": {
       return handleCurrencyRates(ctx);
     }
@@ -30171,6 +30343,19 @@ var preflight = /* @__PURE__ */ __name((origin) => {
 var uiInstall = /* @__PURE__ */ __name((install) => {
   return { id: install.id, ord: install.ord, label: install.label, enabled: install.enabled ?? install.active };
 }, "uiInstall");
+var otherAppInstalls = /* @__PURE__ */ __name((ownSlug) => {
+  const installs = Object.entries(siteRegistry().registry.apps).flatMap(([appSlug, entry]) => {
+    if (appSlug === ownSlug) {
+      return [];
+    }
+    return entry.installs.filter((install) => install.enabled ?? install.active).map((install) => ({ id: install.id, appSlug, appName: entry.name, label: install.label, ord: install.ord }));
+  });
+  const listed = boundSiteInstalls(installs);
+  if (listed.length < installs.length) {
+    addSpanEvent("app ui site installs trimmed", { level: "warn", attrs: { app: ownSlug, listed: listed.length, total: installs.length } });
+  }
+  return listed;
+}, "otherAppInstalls");
 var runForwardToApp2 = /* @__PURE__ */ __name(async (c, input2) => {
   const { slug, origin, app: app2, install, viewer, writeTicket, body } = input2;
   const context = invocationContext(c.env);
@@ -30194,9 +30379,10 @@ var runForwardToApp2 = /* @__PURE__ */ __name(async (c, input2) => {
     viewer,
     install: uiInstall(install),
     installs: app2.installs.map(uiInstall),
+    ...app2.data.includes("siteInstalls") ? { siteInstalls: otherAppInstalls(slug) } : {},
     ...writeTicket === void 0 ? {} : { writeTicket }
   };
-  headers.set(UI_CONTEXT_HEADER, JSON.stringify(uiContext));
+  headers.set(UI_CONTEXT_HEADER, encodeUiContext(uiContext));
   const trace = currentTraceContext();
   if (trace !== void 0) {
     headers.set(TRACE_HEADER, serializeTraceContext(trace));
@@ -31038,14 +31224,14 @@ var open2 = /* @__PURE__ */ __name(async (c) => {
 
 // browser-artifact/meta.json
 var meta_default = {
-  version: "0.1.11",
-  gitSha: "bb87bca6d3b96627f24bc0c29675f2f19680ce60",
-  builtAt: "2026-09-28T04:35:01.606Z",
-  hash: "e32dfe041826d6daaa3682d1f5cac137ffcc6a24f55bfef1a936f7e3ef4cde12"
+  version: "0.1.13",
+  gitSha: "21a2eff7e038bc98c8c087656c9793c8f3a82434",
+  builtAt: "2026-10-01T08:32:14.748Z",
+  hash: "3d5d7fe29d7e160413d4cb0e08de724613f89eb314feed6d5d1ec2e7473f7afd"
 };
 
 // src/paths/q-js.ts
-import qScript from "./944c722e73fe144b1067da970f87716a835c697e-q.js.txt";
+import qScript from "./61afaba4cf160e30ef4b71a7ce30a398f71f13e8-q.js.txt";
 
 // src/apps-q.ts
 import appsQScript from "./apps-q.json";
@@ -31532,7 +31718,11 @@ var trackBody2 = external_exports.object({
     description: "Free-form properties describing the event; omit it when the event name alone says everything.",
     example: { orderId: "9241", value: 129.9, currency: "USD" }
   }),
-  context: serverActionContextField
+  context: serverActionContextField,
+  installs: installRuleSchema.optional().openapi({
+    description: "Which of the site\u2019s app installs receive the event: `except` delivers to every install but the listed ids, `only` to the listed ids alone. An unknown id is ignored, and an empty `only` list reaches no install while the event is still stored when it qualifies. Omit it to deliver to every install.",
+    example: { mode: "except", installIds: ["3f2a9c1e-8b4d-4e2a-9f6c-1d7b5e0a4c83"] }
+  })
 }).strict().openapi("TrackRequest", { description: "An event the user performed, with optional free-form properties." });
 var definition10 = createRoute({
   method: "post",
@@ -31562,12 +31752,18 @@ var definition10 = createRoute({
   }
 });
 var track = createApiRouter().openapi(definition10, async (c) => {
-  const { identifier, event, eventId, properties: properties2, context } = c.req.valid("json");
+  const { identifier, event, eventId, properties: properties2, context, installs } = c.req.valid("json");
   try {
     const id = await submitAction(
       c.env,
       identifier,
-      { type: "track", source: c.get("actionSource"), payload: { event, eventId, properties: properties2 ?? {} }, context },
+      {
+        type: "track",
+        source: c.get("actionSource"),
+        payload: { event, eventId, properties: properties2 ?? {} },
+        context,
+        ...installs === void 0 ? {} : { installs }
+      },
       c.req.raw
     );
     return respond(c, acceptedResponse, { ok: true, id });
@@ -31606,6 +31802,9 @@ var gatePasses = /* @__PURE__ */ __name((entry, trigger, consent2, enforced) =>
 }, "gatePasses");
 var eligibleApps = /* @__PURE__ */ __name((registry3, trigger, consent2, enforced) => {
   const location = visitorLocation(trigger);
+  const rule = trigger.kind === "event" && trigger.action.type === "track" ? trigger.action.installs : void 0;
+  const listed = new Set(rule?.installIds);
+  const keepListed = rule?.mode === "only";
   const targets = [];
   const geoSkipped = [];
   for (const slug of registry3.order) {
@@ -31615,7 +31814,7 @@ var eligibleApps = /* @__PURE__ */ __name((registry3, trigger, consent2, enforce
     }
     const { runs, skipped } = geoRunnableInstalls(slug, app2, location);
     geoSkipped.push(...skipped);
-    const installs = runs.map(({ id, ord, label }) => ({ id, ord, label }));
+    const installs = runs.filter((install) => listed.has(install.id) === keepListed).map(({ id, ord, label }) => ({ id, ord, label }));
     if (installs.length === 0) {
       continue;
     }
@@ -31625,7 +31824,6 @@ var eligibleApps = /* @__PURE__ */ __name((registry3, trigger, consent2, enforce
 }, "eligibleApps");
 
 // src/apps/fan-out.ts
-var MAX_APPS_PER_DOMAIN = 50;
 var fanOutToApps = /* @__PURE__ */ __name(async (env, { trigger, snapshot, trace }, { deliverEffects }) => {
   const { registry: registry3, error: error61 } = siteRegistry();
   const { targets, geoSkipped } = eligibleApps(registry3, trigger, snapshot.consent, consentEnforced(env));
@@ -31750,6 +31948,16 @@ var withReplacedPayload = /* @__PURE__ */ __name((entry, action, payload) => {
   }
   return { ...action, payload: parsed.data };
 }, "withReplacedPayload");
+var applyTransformResult = /* @__PURE__ */ __name((entry, action, { payload, installs }) => {
+  const replaced = payload === void 0 ? action : withReplacedPayload(entry, action, payload);
+  if (installs === void 0) {
+    return replaced;
+  }
+  if (replaced.type !== "track") {
+    throw entryFailure(entry, "an identify transform cannot set an install rule");
+  }
+  return { ...replaced, installs: replaced.installs === void 0 ? installs : intersectInstallRules(replaced.installs, installs) };
+}, "applyTransformResult");
 var postTransform = /* @__PURE__ */ __name(async (env, entry, post, dataPoints) => {
   let response;
   try {
@@ -31896,7 +32104,7 @@ var runTransformChain = /* @__PURE__ */ __name(async (env, { action, snapshot, d
         return { dropped: true, effects: collected };
       }
       if (verdict.result !== "pass") {
-        current = withReplacedPayload(entry, current, verdict.result.payload);
+        current = applyTransformResult(entry, current, verdict.result);
       }
     }
     return { dropped: false, action: current, effects: collected };
@@ -33145,7 +33353,8 @@ var trackFrame = external_exports.object({
   eventId: external_exports.string().min(1),
   properties: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
   context: browserContextFrame,
-  appResults: browserResults.optional()
+  appResults: browserResults.optional(),
+  installs: installRuleSchema.optional()
 }).strict();
 var aliasFrame = external_exports.object({
   t: external_exports.literal("alias"),
@@ -33270,7 +33479,8 @@ var actionFromFrame = /* @__PURE__ */ __name((frame, userId, connection = {}) =>
         context: browserActionContext(frame.context, host, session2),
         browserResults: frame.appResults,
         geo,
-        host
+        host,
+        ...frame.installs === void 0 ? {} : { installs: frame.installs }
       });
     }
     case "alias": {
@@ -33843,16 +34053,9 @@ var AnonDO = class extends DurableObject2 {
     );
     seedMeta(this.kv, current.userId, current.receivedAt);
     touchActivity(this.kv, current.receivedAt);
-    let novelIdentifier = false;
-    if (current.identifier) {
-      novelIdentifier = upsertIdentifier(
-        this.sql,
-        { ...current.identifier, source: current.source, firstSeenAt: current.receivedAt },
-        this.identifiersMirror
-      );
-      if (novelIdentifier && linkedGlobalId(this.kv) !== null) {
-        recordSyncDebt(this.kv, "link");
-      }
+    const novelIdentifier = this.recordIdentifiers(current);
+    if (novelIdentifier && linkedGlobalId(this.kv) !== null) {
+      recordSyncDebt(this.kv, "link");
     }
     try {
       if (current.type === "alias") {
@@ -33866,7 +34069,9 @@ var AnonDO = class extends DurableObject2 {
       } else {
         await this.ingestConsent(current);
       }
-      this.appFanOut({ kind: "event", action: current }, current.userId, context);
+      if (current.type !== "identify" || current.graphOnly !== true) {
+        this.appFanOut({ kind: "event", action: current }, current.userId, context);
+      }
       this.releaseTransformEmissions(releaseEmissions);
     } finally {
       if (novelIdentifier) {
@@ -33874,6 +34079,17 @@ var AnonDO = class extends DurableObject2 {
       }
     }
   }
+  recordIdentifiers(action) {
+    const identifiers = [
+      ...action.identifier ? [action.identifier] : [],
+      ...action.type === "identify" ? action.identifiers ?? [] : []
+    ];
+    let novel = false;
+    for (const identifier of identifiers) {
+      novel = upsertIdentifier(this.sql, { ...identifier, source: action.source, firstSeenAt: action.receivedAt }, this.identifiersMirror) || novel;
+    }
+    return novel;
+  }
   // null means a transform dropped the action: the turn succeeds with nothing persisted (§5.4).
   // The chain runs on the originating site's worker, against its apps and key master; only the
   // collected effects come back, and they are released here, past the turn outcome, so a delivery
@@ -34061,7 +34277,7 @@ var AnonDO = class extends DurableObject2 {
   }
   async ingestIdentify(action) {
     const classified = await traced("pii.classify", {}, () => {
-      const result = classifyTraits(action.payload.traits, action.receivedAt);
+      const result = classifyTraits(action.payload.traits, action.observedAt ?? action.receivedAt);
       for (const key of result.dropped) {
         addSpanEvent("invalid pii trait ignored", { level: "warn", attrs: { "action.id": action.actionId, key } });
       }

package/dist/worker-artifact/version.json

@@ -1,8 +1,8 @@
 {
   "main": {
-    "version": "0.1.8",
-    "gitSha": "980d4090b9558f84f1a60a302f7d069e4f33065d",
-    "builtAt": "2026-09-30T13:03:42.976Z",
+    "version": "0.1.9",
+    "gitSha": "ffbdbe7148d4aba3072a6c3c857e69f0557b0ec5",
+    "builtAt": "2026-10-01T08:37:00.893Z",
     "compatibilityDate": "2026-06-23",
     "compatibilityFlags": [
       "nodejs_compat"
@@ -10,8 +10,8 @@
     "mainModule": "index.js",
     "modules": [
       {
-        "name": "944c722e73fe144b1067da970f87716a835c697e-q.js.txt",
-        "path": "main/944c722e73fe144b1067da970f87716a835c697e-q.js.txt",
+        "name": "61afaba4cf160e30ef4b71a7ce30a398f71f13e8-q.js.txt",
+        "path": "main/61afaba4cf160e30ef4b71a7ce30a398f71f13e8-q.js.txt",
         "contentType": "text/plain"
       },
       {
@@ -39,9 +39,9 @@
     ]
   },
   "app-runtime": {
-    "version": "0.1.6",
-    "gitSha": "9259277de3d7879928d4e829094916cedb0acb58",
-    "builtAt": "2026-09-30T13:03:45.923Z",
+    "version": "0.1.7",
+    "gitSha": "403986012db0fea5975162b971aca874682f3184",
+    "builtAt": "2026-10-01T08:37:02.873Z",
     "compatibilityDate": "2026-06-23",
     "compatibilityFlags": [
       "nodejs_compat",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blotout/qinto-cli",
-  "version": "0.1.25",
+  "version": "0.1.26",
   "type": "module",
   "description": "Qinto CLI: authenticate against the Qinto platform and operate it from the terminal or from an agent.",
   "repository": {

package/dist/worker-artifact/main/944c722e73fe144b1067da970f87716a835c697e-q.js.txt

@@ -1 +0,0 @@
-(function(){var e=()=>{},t=t=>{t.config?.autoCapture?.pageLoad===!0&&t.q.push([`track`,[`PageView`],e,e])},n=class extends Error{constructor(e){super(e),this.name=`QintoError`}},r=class extends n{constructor(e){super(e),this.name=`QintoTimeoutError`}},i=(e=Date.now())=>`evt_${globalThis.crypto.randomUUID()}_${e}`,a=(e,t)=>{if(e!==void 0)return e;let n=t?.orderId;return typeof n==`string`&&n!==``?n:i()},o=[`necessary`,`functional`,`analytics`,`marketing`,`salesOfData`],s=[`then`,`ready`,`config`],c=()=>{},l=(e,t)=>(...n)=>{let r=new Promise((r,i)=>{e.q.push([t,n,r,i])});return r.catch(c),r},u=e=>{let t=e;return t._q=1,t.q=[],new Proxy(t,{get:(e,n)=>typeof n!=`string`||s.includes(n)||n in t?Reflect.get(t,n):(t[n]=l(t,n),t[n])})},d=()=>{let e=document.currentScript?.dataset.qintoGlobal;return typeof e==`string`&&e!==``?e:`qinto`},f=e=>typeof e==`object`&&!!e&&e._q===1,p=(e=`qinto`)=>{let t=globalThis;if(e in t){let n=t[e];if(!f(n))return null;let r=Array.isArray(n.q)?n:u(n);return r!==n&&Object.defineProperty(t,e,{value:r,writable:!0,enumerable:!0,configurable:!0}),r}let n=u({});return Object.defineProperty(t,e,{value:n,writable:!0,enumerable:!0,configurable:!0}),n},m=(e,t)=>async(r,i)=>{let a=Reflect.get(e,r);if(typeof a!=`function`)throw new n(`[Qinto] ${t}.${r} is not a method of this tag.`);return a.apply(e,Array.from(i))},h=e=>()=>Promise.reject(e),g=(e,t)=>{let[n,r,i,a]=t;e(n,r).then(i,a)},ee=e=>{let t=[];return t.push=(...t)=>{for(let n of t)g(e,n);return 0},t},_=(e,t,n=`window.qinto`)=>{let r=e.ready;if(r!==void 0)return r;let i=e,a=e=>{let t=i.q;i.q=ee(e);for(let n of t)g(e,n)},o=t().then(e=>{a(m(e,n))},e=>{throw a(h(e)),e});return o.catch(c),i.ready=o,o},v=(e,t,n)=>n===void 0||!o.some(e=>e===n)?!1:n===`necessary`||e!==null&&e.categories[n]===!0&&e.apps[t]!==!1,y=()=>{},te=100,ne=1024,re=32768,b=(e,t,n)=>e.target.config?.consentConfiguration?.enabled!==!0||v(n,t,e.target.config?.apps?.[t]?.category),x=e=>Object.values(e.config?.apps??{}).some(e=>e.category!==`necessary`||e.capture!==void 0),S=(e,t)=>{let{app:n,install:r,topic:i,to:a}=e;return typeof n!=`string`||typeof i!=`string`||r!==void 0&&typeof r!=`string`||t&&!(Array.isArray(a)&&a.every(e=>typeof e==`string`))},ie=(e,t,n,r)=>r===null?e.slug===t&&(n===void 0||n===e.installId):r.has(e.slug),C=(e,t)=>{console.error(`[Qinto] A handler of app "${e.slug}" (install "${e.installId}") failed.`,t)},w=(e,t,n)=>{for(let r of t)try{let t=r(n);t instanceof Promise&&t.catch(t=>{C(e,t)})}catch(t){C(e,t)}},ae=(e,t,n,r)=>{e.activated.add(r.id);let i={slug:t,installId:r.id,eventHandlers:[],consentHandlers:[],pushHandlers:[],sharedContextHandlers:[]};e.instances.push(i);let a={variables:r.variables,install:{id:r.id,label:r.label},getSession:async()=>{let n=await e.client.getSession();return e.target.config?.apps?.[t]?.geo===!0?n:{...n,ip:null,geo:null}},track:(t,n)=>{e.client.track(t,n).catch(y)},onEvent:e=>{i.eventHandlers.push(e)},onConsent:e=>{i.consentHandlers.push(e)},onPush:e=>{i.pushHandlers.push(e)},fetch:async(n,i)=>{let a=new URL(`${e.client.destination}/app/${t}${n}`);if(!n.startsWith(`/`)||!a.pathname.startsWith(`/app/${t}/`))throw TypeError(`[Qinto] App "${t}" fetched "${n}"; the path must be absolute and stay inside the app.`);let o=new Headers(i?.headers);return o.set(`x-qinto-install`,r.id),fetch(a,{...i,headers:o,credentials:`include`})},onSharedContext:n=>{if(e.target.config?.apps?.[t]?.sharedContext!==!0){console.error(`[Qinto] App "${t}" reads shared context without declaring the sharedContext capability.`);return}i.sharedContextHandlers.push(n),e.sharedContext!==null&&oe(e,t)&&w(i,[n],e.sharedContext)}};try{n(a)}catch(e){console.error(`[Qinto] App "${t}" failed to activate install "${r.id}".`,e)}},T=(e,t,n)=>{if(!b(e,t,e.consent))return;let r=((`_appInstalls`in e.target?e.target._appInstalls:void 0)?.[t]??[]).filter(t=>!e.activated.has(t.id));if(r.length===0)return;let i=n.factory;if(i===void 0){try{i=n.loader()}catch(e){i=null,console.error(`[Qinto] App "${t}" failed to load.`,e)}e.apps.set(t,{...n,factory:i})}if(i!==null)for(let n of r)ae(e,t,i,n)},oe=(e,t)=>b(e,t,e.consent)?e.sharedContextConsent===void 0||b(e,t,e.sharedContextConsent):!1,se=e=>{let{categories:t,apps:n}=e;if(typeof t==`object`&&t&&typeof n==`object`&&n)return{categories:t,apps:n}},ce=(e,t)=>{let n=e;n.consent=t,n.sharedContextConsent=void 0;for(let n of e.instances)w(n,n.consentHandlers,t);e.onConsentSettled?.(t);for(let[t,n]of e.apps)T(e,t,n)},E=async e=>{try{ce(e,await e.client.getConsent())}catch(e){console.error(`[Qinto] The apps consent read failed.`,e)}},D=e=>{let t;try{t=JSON.stringify(e)}catch{return}if(!(t===void 0||new TextEncoder().encode(t).length>ne))return JSON.parse(t)},O=e=>{let t={};for(let n of e){if(n.settled!==n.total||n.values.length!==1)continue;let e=D(n.values[0]);if(e===void 0)continue;let r={...t[n.instance.slug]??{},[n.instance.installId]:e},i={...t,[n.instance.slug]:r};new TextEncoder().encode(JSON.stringify(i)).length<=re&&(t[n.instance.slug]=r)}return Object.keys(t).length===0?void 0:t},k=async(e,t)=>{e.onPageEvent?.(e.consent);let n=[],r=[];for(let i of e.instances){if(!b(e,i.slug,e.consent))continue;if(e.target.config?.apps?.[i.slug]?.eventResults?.includes(t.type)!==!0){w(i,i.eventHandlers,t);continue}let a={instance:i,total:i.eventHandlers.length,settled:0,values:[]};n.push(a);for(let e of i.eventHandlers){let n;try{n=e(t)}catch(e){a.settled+=1,C(i,e);continue}r.push(Promise.resolve(n).then(e=>{a.settled+=1,e!==void 0&&a.values.push(e)},e=>{a.settled+=1,C(i,e)}))}}if(r.length>0){let e=y,t=new Promise(t=>{e=t}),n=setTimeout(e,te);await Promise.race([Promise.all(r),t]),clearTimeout(n)}return O(n)},A=e=>{let{client:t}=e;return{track:async(n,r,i)=>{let o=a(i?.eventId,r),s=t.actionContext(),c=await k(e,{type:`track`,event:n,eventId:o,properties:r??{}});return await t.submitTrack({event:n,eventId:o,properties:r,context:s,appResults:c}),{eventId:o}},identify:async(n,r)=>{let i=t.actionContext(),a=await k(e,{type:`identify`,event:`identify`,properties:n??{}});return t.submitIdentify({traits:n,id:r,context:i,appResults:a})},alias:t.alias,consent:async n=>{if(await t.submitConsent(n,t.actionContext()),e.onConsentMutation?.(),x(e.target)){let t=e;t.consent=null,await E(e)}},getAnonId:t.getAnonId,getConsent:t.getConsent,getSession:t.getSession,close:t.close}},j=(e,t)=>{let n=new Map,r=null,i=null,a=e=>{let[t,i]=e;if(n.has(t))return;let a={loader:i};n.set(t,a),r?.(t,a)},o=e,s=`_apps`in o?o._apps:void 0,c=Array.isArray(s)?s:[];c.push=(...e)=>{for(let t of e)a(t);return 0},o._apps=c;for(let e of c.splice(0))a(e);return{sharedContext:e=>{let{context:t}=e;if(typeof t!=`object`||!t||Array.isArray(t)){console.error(`[Qinto] The server sent a malformed shared context.`,e);return}let n=i;if(n===null)return;n.sharedContext=t;let r=se(e),a=r??n.consent;n.sharedContextConsent=r;for(let e of n.instances)b(n,e.slug,a)&&w(e,e.sharedContextHandlers,n.sharedContext)},push:e=>{let{app:t,install:n,topic:r,scope:a,to:o}=e,s=a===`site`;if(S(e,s)){console.error(`[Qinto] The server sent a malformed app push.`,e);return}let c=i;if(c===null)return;let l=s?new Set(o):null,u={topic:r,data:e.data,from:t};for(let e of c.instances)ie(e,t,n,l)&&b(c,e.slug,c.consent)&&w(e,e.pushHandlers,u)},connect:async a=>{let o={target:e,client:a,apps:n,instances:[],activated:new Set,consent:null,sharedContext:i?.sharedContext??null,sharedContextConsent:i?.sharedContextConsent,onConsentSettled:t?.onConsentSettled,onConsentMutation:t?.onConsentMutation,onPageEvent:t?.onPageEvent};i=o,r=(e,t)=>{T(o,e,t),o.consent===null&&o.target.config?.consentConfiguration?.enabled===!0&&o.target.config?.apps?.[e]?.category!==`necessary`&&E(o)};for(let[e,t]of n)T(o,e,t);return e.config?.consentConfiguration?.enabled===!0&&x(e)?await E(o):o.onConsentSettled?.(o.consent),A(o)}}},M=512,N=864e5,P=e=>Object.fromEntries(Object.entries(e).map(([e,t])=>[e,Object.fromEntries(Object.entries(t).map(([e,t])=>[e,t.value]))])),F=(e,t)=>`qinto:cap:${encodeURIComponent(e)}:${encodeURIComponent(t)}`,I=e=>{try{let t=window.sessionStorage.getItem(e);if(t===null)return null;let n=JSON.parse(t);return typeof n.at!=`number`||typeof n.anonId!=`string`||typeof n.apps!=`object`||n.apps===null||Date.now()-n.at>N?null:{at:n.at,anonId:n.anonId,apps:n.apps}}catch{return null}},L=(e,t)=>{try{window.sessionStorage.setItem(e,JSON.stringify(t))}catch{}},R=e=>{try{window.sessionStorage.removeItem(e)}catch{}},z=e=>{try{return decodeURIComponent(e)}catch{return e}},B=()=>{let e={};for(let t of document.cookie.split(`;`)){let n=t.indexOf(`=`);n>0&&(e[t.slice(0,n).trim()]=z(t.slice(n+1)))}return e},V=(e,t)=>{let n={};for(let r of e.queryParams){let e=t.params.get(r);e!==null&&e.length<=M&&(n[r]={value:e,source:`query`})}for(let r of e.cookies){let e=t.cookies[r];e!==void 0&&e.length<=M&&(n[r]={value:e,source:`cookie`})}return n},H=(e,t)=>{let n={params:new URLSearchParams(window.location.search),cookies:B()},r={};for(let[i,a]of Object.entries(e.config?.apps??{})){if(a.capture===void 0||!v(t,i,a.category))continue;let e=V(a.capture,n);Object.keys(e).length>0&&(r[i]=e)}return r},U=(e,t)=>{let n={};for(let[r,i]of Object.entries(e)){let e=t[r]??{},a={};for(let[t,n]of Object.entries(i))(e[t]?.value!==n.value||e[t]?.source!==n.source)&&(a[t]=n);Object.keys(a).length>0&&(n[r]=a)}return n},W=(e,t,n,r)=>{let i=F(r,n),a=I(i),o=a?.apps??{},s=a?.anonId??null,c=a===null,l={},u=0,d=(e,t)=>{s!==null&&s!==e.anonId&&(o={}),s=e.anonId;let n=new Set(Object.entries(e.accepted).flatMap(([e,t])=>t.map(t=>`${e}\u0000${t}`)));for(let[e,r]of Object.entries(t))for(let[t,i]of Object.entries(r))n.has(`${e}\u0000${t}`)&&(o[e]={...o[e],[t]:i});L(i,{at:Date.now(),anonId:s,apps:o})},f=null,p=()=>{u+=1,o={},l={},R(i)},m=n=>{if(f=n,!c)return;let r=U(H(e,n),{...o,...l});if(Object.keys(r).length===0)return;let i=u;l={...l,...r},t(P(r)).then(e=>{i===u&&d(e,r)}).catch(()=>{}).finally(()=>{l={}})};return{settled:e=>{m(e)},needsAnon:()=>!c,observedAnon:e=>{(e===null||s!==null&&s!==e)&&p(),s=e,c=!0,m(f)},clear:p}},G=Symbol.for(`qinto.connectGate`),K=()=>{},le=e=>{let t=globalThis,n=(t[G]??Promise.resolve()).then(e);return t[G]=n.then(K,K),n},q=class extends n{constructor(e){super(e),this.name=`QintoProtocolError`}},ue=e=>{if(typeof e!=`string`)return null;let t;try{t=JSON.parse(e)}catch{return null}if(typeof t!=`object`||!t)return null;let n=t;return n.t===`ack`||n.t===`error`||n.t===`consentState`||n.t===`session`||n.t===`captureAck`||n.t===`appPush`||n.t===`sharedContext`?t:null},de=e=>{if(e.t===`consentState`)return{categories:e.categories,apps:e.apps};if(e.t===`session`)return{anonId:e.anonId,globalId:e.globalId,ip:e.ip,geo:e.geo};if(e.t===`captureAck`)return{anonId:e.anonId,accepted:e.accepted}},fe=e=>{let t=new Map,n=e=>{let n=t.get(e);if(n!==void 0)return clearTimeout(n.timer),t.delete(e),n};return{submit:n=>new Promise((i,a)=>{let o={frame:n,sent:e.send(n),resolve:i,reject:a,timer:setTimeout(()=>{t.delete(n.ref),a(new r(`The Qinto request timed out.`))},e.requestTimeoutMs)};t.set(n.ref,o)}),flush:()=>{for(let n of t.values())n.sent||=e.send(n.frame)},deliver:e=>{let t=e.ref===void 0?void 0:n(e.ref);if(t!==void 0){if(e.t===`error`){t.reject(new q(e.message));return}t.resolve(de(e))}},rejectAll:e=>{let n=[...t.values()];t.clear();for(let t of n)clearTimeout(t.timer),t.reject(e)}}},J=()=>{let e=document.referrer;return{url:window.location.href,...e===``?{}:{referrer:e}}},pe=e=>new WebSocket(e),me=500,he=3e4,Y=4096,ge=8192,_e=(e,t)=>{if(t.url.length>Y)return e;let n=new URLSearchParams({url:t.url});t.referrer!==void 0&&t.referrer.length<=Y&&n.set(`referrer`,t.referrer);let r=`${e}?${n}`;return r.length<=ge?r:e},ve=`session not initialized`,ye=(e,t)=>{let n=Math.min(me*2**e,he);return Math.round(n/2+n/2*t)},be=(e,t)=>e.t===`appPush`?(t.onAppPush?.(e),!0):e.t===`sharedContext`&&(t.onSharedContext?.(e),!0),xe=e=>{let t=`${e.destination.replace(/\/+$/,``)}/open`,n=null,r=null,i=0,a=null,o=fe({send:e=>n===null||n.readyState!==1?!1:(n.send(JSON.stringify(e)),!0),requestTimeoutMs:e.requestTimeoutMs}),s=t=>{e.onError?.(t)},c=()=>{if(r!==null&&(clearTimeout(r),r=null),n!==null){let e=n;n=null,e.close()}o.rejectAll(new q(`connection closed`))},l=()=>{let u=pe(_e(t,J()));n=u,u.onopen=()=>{i=0;let e=a;a=null,o.flush(),e?.resolve()},u.onmessage=t=>{let n=ue(t.data);if(n===null){s(new q(`invalid message`));return}be(n,e)||(`anonId`in n&&typeof n.anonId==`string`&&e.onAnonId?.(n.anonId),o.deliver(n),n.t===`error`&&n.message===ve&&u.close())},u.onerror=()=>{s(new q(`connection closed`))},u.onclose=()=>{if(n!==u)return;n=null;let e=a;if(e!==null){a=null,c(),e.reject(new q(`connection closed`));return}o.rejectAll(new q(`connection closed`)),r=setTimeout(()=>{r=null,l()},ye(i,Math.random())),i+=1}};return{connect:()=>new Promise((e,t)=>{a={resolve:e,reject:t},l()}),submit:e=>o.submit(e),close:()=>{c()}}},Se=1e4,Ce=()=>{let e=0;return()=>(e+=1,`q${e}`)},X=(e,t,n)=>{let r=null,i=()=>({occurredAt:Date.now(),page:J()}),o=async()=>{let n=await e.submit({t:`getSession`,ref:t()});return r=n.anonId,n};return{destination:n.replace(/\/+$/,``),actionContext:i,submitIdentify:async({traits:n,id:r,context:i,appResults:a})=>{await e.submit({t:`identify`,ref:t(),traits:n,id:r,context:i,appResults:a})},submitTrack:async({event:n,eventId:r,properties:i,context:a,appResults:o})=>{await e.submit({t:`track`,ref:t(),event:n,eventId:r,properties:i,context:a,appResults:o})},submitConsent:async(n,r)=>{await e.submit({t:`consent`,ref:t(),categories:n.categories,apps:n.apps,context:r})},track:async(n,r,o)=>{let s=a(o?.eventId,r);return await e.submit({t:`track`,ref:t(),event:n,eventId:s,properties:r,context:i()}),{eventId:s}},alias:async n=>{await e.submit({t:`alias`,ref:t(),alias:n})},getConsent:async()=>await e.submit({t:`getConsent`,ref:t()}),getSession:o,getAnonId:async()=>(r===null&&await o(),r),close:async()=>{e.close()}}},we=async e=>{let t=xe({destination:e.destination,requestTimeoutMs:e.requestTimeoutMs??Se,onError:e.onError,onAppPush:e.onAppPush,onSharedContext:e.onSharedContext,onAnonId:e.onAnonId});await le(()=>t.connect());let n=Ce();return{client:X(t,n,e.destination),submitCapture:async e=>await t.submit({t:`capture`,ref:n(),apps:e})}},Te=(e,t)=>{let n=null,r=j(e,{onConsentSettled:e=>{n?.settled(e)},onConsentMutation:()=>{n?.clear()},onPageEvent:e=>{n?.settled(e)}});return{connect:async i=>{let a=await we({...i,onAppPush:r.push,onSharedContext:r.sharedContext,onAnonId:e=>{n?.observedAnon(e)}});n=W(e,a.submitCapture,i.destination,t);let o=await r.connect(a.client);return n.needsAnon()&&n.observedAnon((await a.client.getSession()).anonId),o}}},Z=d(),Q=p(Z),$=`window.${Z}`;if(Q!==null&&Q.ready===void 0){let e=Te(Q,Z);t(Q),_(Q,async()=>{let t=Q.config?.destination;if(typeof t!=`string`||t===``)throw Error(`[Qinto] ${$}.config.destination is missing.`);return e.connect({destination:t})},$)}})();