@blotout/qinto-cli 0.1.3 → 0.1.5

package/dist/worker-artifact/app-runtime/index.js

@@ -14566,7 +14566,7 @@ var actionContextFields = {
     locale: external_exports.string().min(1).max(64).optional(),
     provenance: external_exports.enum(["edge", "caller"])
   }).strict().optional(),
-  session: external_exports.object({ id: external_exports.string().min(1).max(64), isNew: external_exports.boolean() }).strict().optional()
+  session: external_exports.object({ id: external_exports.string().min(1).max(64), isNew: external_exports.boolean(), startedAt: external_exports.number().int().nonnegative().safe() }).strict().optional()
 };
 var actionContextSchema = external_exports.discriminatedUnion("source", [
   external_exports.object({ source: external_exports.literal("browser"), ...actionContextFields }).strict(),
@@ -14585,7 +14585,7 @@ var envelopeRequestSchema = external_exports.object({
     properties: external_exports.record(external_exports.string(), external_exports.unknown()),
     geo: external_exports.record(external_exports.string(), external_exports.string()).optional()
   }).strict(),
-  consent: external_exports.object({ categories: external_exports.record(external_exports.string(), external_exports.boolean()), apps: external_exports.record(external_exports.string(), external_exports.boolean()) }).strict().optional(),
+  consent: external_exports.object({ enabled: external_exports.boolean(), categories: external_exports.record(external_exports.string(), external_exports.boolean()), apps: external_exports.record(external_exports.string(), external_exports.boolean()) }).strict().optional(),
   geo: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
   // Only what this app captured or wrote for this visitor; `updatedAt` is when the current value
   // was first seen, which is the click time a CAPI `fbc` is built from.
@@ -14928,6 +14928,122 @@ var newSpanId = () => {
   return randomHex(8);
 };
 
+// ../../../libs/tail-trace/src/redact.ts
+var SENSITIVE_URL_PARAMS = /* @__PURE__ */ new Set([
+  "access_token",
+  "api_key",
+  "api_secret",
+  "client_secret",
+  "code",
+  "key",
+  "password",
+  "refresh_token",
+  "secret",
+  "session",
+  "session_id",
+  "token"
+]);
+var PARAM_MATCHER = /(^|[?&])([^=&?\s]+)=[^&\s]*/g;
+var SENSITIVE_KEY_STEMS = [
+  "apikey",
+  "authorization",
+  "bearer",
+  "credential",
+  "passwd",
+  "password",
+  "privatekey",
+  "secret",
+  "sessionid",
+  "signature",
+  "token"
+];
+var isSensitiveKey = (key) => {
+  const normalized = key.toLowerCase().replaceAll(/[^a-z0-9]/g, "");
+  return SENSITIVE_KEY_STEMS.some((stem) => normalized.includes(stem));
+};
+var redactedJson = (value, redact) => {
+  if (Array.isArray(value)) {
+    return value.map((entry) => redactedJson(entry, redact));
+  }
+  if (typeof value === "object" && value !== null) {
+    return Object.fromEntries(
+      Object.entries(value).map(([key, entry]) => {
+        return [key, isSensitiveKey(key) ? "[REDACTED]" : redactedJson(entry, redact)];
+      })
+    );
+  }
+  return typeof value === "string" ? redact(value) : value;
+};
+var redactedBody = (value, redact) => {
+  let parsed;
+  try {
+    parsed = JSON.parse(value);
+  } catch {
+    return redact(value);
+  }
+  return typeof parsed === "object" && parsed !== null ? JSON.stringify(redactedJson(parsed, redact)) : redact(value);
+};
+var percentEncoded = (secret) => {
+  try {
+    return [encodeURIComponent(secret)];
+  } catch {
+    return [];
+  }
+};
+var encodings = (secret) => {
+  const form = String(new URLSearchParams({ v: secret })).slice(2);
+  return [.../* @__PURE__ */ new Set([secret, JSON.stringify(secret).slice(1, -1), form, ...percentEncoded(secret)])];
+};
+var redactUrlParams = (value) => {
+  return value.replaceAll(PARAM_MATCHER, (match, separator, param) => {
+    return SENSITIVE_URL_PARAMS.has(param.toLowerCase()) ? `${separator}${param}=[REDACTED]` : match;
+  });
+};
+var mappedAttrs = (attrs, redact) => {
+  const redacted = {};
+  for (const [key, value] of Object.entries(attrs)) {
+    redacted[key] = typeof value === "string" ? redact(value) : value;
+  }
+  return redacted;
+};
+var redactAttrs = (attrs) => {
+  return mappedAttrs(attrs, redactUrlParams);
+};
+var redactedEvent = (event, redact) => {
+  return {
+    ...event,
+    name: redact(event.name),
+    ...event.attrs === void 0 ? {} : { attrs: mappedAttrs(event.attrs, redact) }
+  };
+};
+var redactedSpan = (span, redact) => {
+  return {
+    ...span,
+    name: redact(span.name),
+    ...span.attrs === void 0 ? {} : { attrs: mappedAttrs(span.attrs, redact) },
+    ...span.events === void 0 ? {} : { events: span.events.map((event) => redactedEvent(event, redact)) },
+    ...span.error === void 0 ? {} : { error: redact(span.error) }
+  };
+};
+var redactSpans = (spans, redact) => {
+  return spans.map((span) => {
+    return redactedSpan(span, redact);
+  });
+};
+var spanRedactor = (secrets) => {
+  const forms = secrets.flatMap(encodings);
+  const known = (value) => {
+    let redacted = redactUrlParams(value);
+    for (const form of forms) {
+      redacted = redacted.replaceAll(form, "[REDACTED]");
+    }
+    return redacted;
+  };
+  return (value) => {
+    return redactedBody(value, known);
+  };
+};
+
 // ../../../libs/tail-trace/src/scope.ts
 import { AsyncLocalStorage } from "node:async_hooks";
 var scopes = new AsyncLocalStorage();
@@ -14984,7 +15100,7 @@ var logRecord = (record2) => {
   console.log(formatSpansRecord(record2));
 };
 var runInvocation = async (input, run) => {
-  const buffer = { spans: [], flushed: false };
+  const buffer = { spans: [], flushed: false, pending: [] };
   const traceId = input.trace?.traceId ?? newTraceId();
   const root = startSpan({ traceId, parent: input.trace?.parent, name: input.name, attrs: input.attrs });
   try {
@@ -14995,10 +15111,12 @@ var runInvocation = async (input, run) => {
     throw error51;
   } finally {
     root.end = Date.now();
+    await Promise.allSettled(buffer.pending);
     buffer.spans.push(root);
     buffer.flushed = true;
     const emit = input.emit ?? logRecord;
-    emit(budgetSpans(buffer.spans, input.budget ?? MAX_SPANS_BYTES));
+    const spans = input.redact === void 0 ? buffer.spans : redactSpans(buffer.spans, input.redact);
+    emit(budgetSpans(spans, input.budget ?? MAX_SPANS_BYTES));
   }
 };
 
@@ -15031,54 +15149,6 @@ var parseTraceContext = (header) => {
   return { traceId: parsed["traceId"], ...parent === void 0 ? {} : { parent } };
 };
 
-// ../../../libs/tail-trace/src/redact.ts
-var SENSITIVE_URL_PARAMS = /* @__PURE__ */ new Set([
-  "access_token",
-  "api_key",
-  "api_secret",
-  "client_secret",
-  "code",
-  "key",
-  "password",
-  "refresh_token",
-  "secret",
-  "session",
-  "session_id",
-  "token"
-]);
-var PARAM_MATCHER = /(^|[?&])([^=&?\s]+)=[^&\s]*/g;
-var redactUrlParams = (value) => {
-  return value.replaceAll(PARAM_MATCHER, (match, separator, param) => {
-    return SENSITIVE_URL_PARAMS.has(param.toLowerCase()) ? `${separator}${param}=[REDACTED]` : match;
-  });
-};
-var redactAttrs = (attrs) => {
-  const redacted = {};
-  for (const [key, value] of Object.entries(attrs)) {
-    redacted[key] = typeof value === "string" ? redactUrlParams(value) : value;
-  }
-  return redacted;
-};
-var redactedEvent = (event) => {
-  return {
-    ...event,
-    name: redactUrlParams(event.name),
-    ...event.attrs === void 0 ? {} : { attrs: redactAttrs(event.attrs) }
-  };
-};
-var redactedSpan = (span) => {
-  return {
-    ...span,
-    name: redactUrlParams(span.name),
-    ...span.attrs === void 0 ? {} : { attrs: redactAttrs(span.attrs) },
-    ...span.events === void 0 ? {} : { events: span.events.map(redactedEvent) },
-    ...span.error === void 0 ? {} : { error: redactUrlParams(span.error) }
-  };
-};
-var redactAppSpans = (record2) => {
-  return { ...record2, spans: record2.spans.map(redactedSpan) };
-};
-
 // ../../../libs/tail-trace/src/trace.ts
 var traced = async (name, options, run) => {
   const scope = currentScope();
@@ -15099,22 +15169,37 @@ var traced = async (name, options, run) => {
     }
   }
 };
-var liveSpan = () => {
+var liveScope = () => {
   const scope = currentScope();
   if (scope === void 0 || scope.buffer.flushed) {
     return void 0;
   }
-  return scope.span;
+  return scope;
 };
 var setSpanAttributes = (attrs) => {
-  const span = liveSpan();
+  const span = liveScope()?.span;
   if (span === void 0) {
     return;
   }
   span.attrs = { ...span.attrs, ...attrs };
 };
+var deferSpanAttributes = (values) => {
+  const scope = liveScope();
+  if (scope === void 0) {
+    return;
+  }
+  scope.buffer.pending.push(
+    // The continuation inherits the async context it was registered in, so this lands on the span
+    // that was current when the capture began, not on whatever is current when the value arrives.
+    values.then((attrs) => {
+      if (attrs !== void 0) {
+        setSpanAttributes(attrs);
+      }
+    })
+  );
+};
 var addSpanEvent = (name, options = {}) => {
-  const span = liveSpan();
+  const span = liveScope()?.span;
   if (span === void 0) {
     return;
   }
@@ -15127,6 +15212,34 @@ var addSpanEvent = (name, options = {}) => {
   span.events = [...span.events ?? [], event];
 };
 
+// src/read-body.ts
+var MAX_ENVELOPE_BYTES = 1024 * 1024;
+var readBody = async (request, maxBytes = MAX_ENVELOPE_BYTES) => {
+  const reader = request.body?.getReader();
+  if (reader === void 0) {
+    return "";
+  }
+  const chunks = [];
+  let received = 0;
+  let result = await reader.read();
+  while (!result.done) {
+    received += result.value.byteLength;
+    if (received > maxBytes) {
+      await reader.cancel();
+      return null;
+    }
+    chunks.push(result.value);
+    result = await reader.read();
+  }
+  const bytes = new Uint8Array(received);
+  let offset = 0;
+  for (const chunk of chunks) {
+    bytes.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return new TextDecoder().decode(bytes);
+};
+
 // src/apps-client.ts
 var BROKER_URL = "https://site/__qinto/rpc";
 var channelFetch = (env, init) => {
@@ -15146,7 +15259,20 @@ var askBroker = async (env, name, body) => {
       headers[TRACE_HEADER] = serializeTraceContext(trace);
     }
     const response = await channelFetch(env, { method: "POST", headers, body: JSON.stringify(body) });
-    const answer = await response.json();
+    const raw = await readBody(response, MAX_RESPONSE_BYTES + 8 * 1024);
+    if (raw === null) {
+      throw new Error("the broker response exceeds the size cap");
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch {
+      throw new Error("the broker returned invalid JSON");
+    }
+    if (typeof parsed !== "object" || parsed === null) {
+      throw new Error("the broker returned invalid JSON");
+    }
+    const answer = parsed;
     if (answer.error !== void 0 || !response.ok) {
       throw new Error(answer.error ?? `the broker answered ${response.status}`);
     }
@@ -15198,6 +15324,18 @@ var brokerContextWrite = async (env, userId, writes) => {
     throw new Error(`the platform declined the ${declined.map((write) => write.level).join(" and ")} context write`);
   }
 };
+var brokerFactsRead = async (env, userId, input = {}) => {
+  const continuation = "cursor" in input;
+  const answer = await askBroker(env, "apps.facts read", {
+    v: ENVELOPE_VERSION,
+    kind: "factsRead",
+    slug: callerSlug(env),
+    key: env.QINTO_INTERNAL_KEY,
+    userId,
+    ...continuation ? { cursor: input.cursor } : { query: input }
+  });
+  return { items: answer.items ?? [], nextCursor: answer.nextCursor ?? null };
+};
 var brokerActive = async (env, input) => {
   let response;
   try {
@@ -15334,6 +15472,26 @@ var projectAppValues = (env, kinds) => {
   }
   return { appVariables, appSecrets };
 };
+var secretValues = (env) => {
+  const { variableKinds, appVariableKinds } = contextKindsOf(env);
+  const values = /* @__PURE__ */ new Set();
+  for (const [name, byOrd] of parseVariableMaps(env)) {
+    if (variableKinds[name] !== "secret") {
+      continue;
+    }
+    for (const value of Object.values(byOrd)) {
+      if (typeof value === "string" && value !== "") {
+        values.add(value);
+      }
+    }
+  }
+  for (const value of Object.values(projectAppValues(env, appVariableKinds).appSecrets)) {
+    if (value !== "") {
+      values.add(value);
+    }
+  }
+  return [...values];
+};
 var projectInstallValues = (maps, kinds, ord) => {
   const variables = {};
   const secrets = {};
@@ -15471,6 +15629,23 @@ var buildStartWorkflow = (stamp) => {
     return workflow.create({ ...options, params: stampParams(stamp, params) });
   };
 };
+var buildUiStartWorkflow = (subject, installs) => {
+  return async (workflow, params, options) => {
+    const target = installs.find((install) => {
+      return install.id === options?.installId;
+    });
+    if (options?.installId !== void 0) {
+      if (target === void 0) {
+        throw new Error(`No install ${options.installId} on this site.`);
+      }
+      if (!target.enabled) {
+        throw new Error(`Install ${options.installId} is not enabled on this site.`);
+      }
+    }
+    const stamp = target === void 0 ? subject : { ...subject, ord: target.ord, installId: target.id, installLabel: target.label };
+    return workflow.create({ id: options?.id, params: stampParams(stamp, params) });
+  };
+};
 var readStamp = (payload) => {
   const params = payload;
   const stamp = params?.q;
@@ -15616,6 +15791,11 @@ var buildContext = ({
         }
       }
     },
+    facts: {
+      list: (input) => {
+        return brokerFactsRead(env, envelope.user.anonId, input);
+      }
+    },
     context: {
       private: {
         entry: envelope.context?.private ?? null,
@@ -15638,40 +15818,12 @@ var buildContext = ({
 // src/install-span.ts
 var installSpan = (install, run) => {
   return traced(
-    `install #${install.ord}`,
+    install.label,
     { attrs: { "app.install_id": install.id, "app.install_ord": install.ord, "app.install_label": install.label } },
     run
   );
 };
 
-// src/read-body.ts
-var MAX_ENVELOPE_BYTES = 1024 * 1024;
-var readBody = async (request, maxBytes = MAX_ENVELOPE_BYTES) => {
-  const reader = request.body?.getReader();
-  if (reader === void 0) {
-    return "";
-  }
-  const chunks = [];
-  let received = 0;
-  let result = await reader.read();
-  while (!result.done) {
-    received += result.value.byteLength;
-    if (received > maxBytes) {
-      await reader.cancel();
-      return null;
-    }
-    chunks.push(result.value);
-    result = await reader.read();
-  }
-  const bytes = new Uint8Array(received);
-  let offset = 0;
-  for (const chunk of chunks) {
-    bytes.set(chunk, offset);
-    offset += chunk.byteLength;
-  }
-  return new TextDecoder().decode(bytes);
-};
-
 // src/responses.ts
 var MAX_ERROR_MESSAGE_LENGTH = 2048;
 var json2 = (status, body) => {
@@ -16024,15 +16176,9 @@ var appSlug = (context) => {
     return "app";
   }
 };
-var headerValue = (record2) => {
-  const redacted = redactAppSpans(record2);
-  const rebudgeted = budgetSpans(redacted.spans, APP_SPANS_JSON_BUDGET);
-  const truncated = (record2.truncated ?? 0) + (rebudgeted.truncated ?? 0);
-  return serializeAppSpans({ spans: rebudgeted.spans, ...truncated === 0 ? {} : { truncated } });
-};
 var withSpans = (response, record2) => {
   const headers = new Headers(response.headers);
-  headers.set(APP_SPANS_HEADER, headerValue(record2));
+  headers.set(APP_SPANS_HEADER, serializeAppSpans(record2));
   return new Response(response.body, { status: response.status, statusText: response.statusText, headers });
 };
 var runAppInvocation = async (input, handle) => {
@@ -16043,6 +16189,7 @@ var runAppInvocation = async (input, handle) => {
         name: appSlug(input.context),
         trace: parseTraceContext(input.request.headers.get(TRACE_HEADER)),
         budget: APP_SPANS_JSON_BUDGET,
+        redact: spanRedactor(input.secrets),
         emit: (emitted) => {
           record2 = emitted;
         }
@@ -16056,19 +16203,84 @@ var runAppInvocation = async (input, handle) => {
 };
 
 // src/traced-fetch.ts
+var MAX_BODY_CHARS = 65536;
+var TOO_LARGE = `[not recorded: the body is over ${MAX_BODY_CHARS} characters]`;
+var INCOMPLETE = "[not recorded: the body did not finish arriving]";
+var READ_BUDGET_MS = 100;
 var requestParts = (input, init) => {
   if (input instanceof Request) {
     return { method: init?.method ?? input.method, url: input.url };
   }
   return { method: init?.method ?? "GET", url: String(input) };
 };
+var abandon = (reader) => {
+  void Promise.allSettled([reader.cancel()]);
+};
+var capturedBody = async (open) => {
+  let timer;
+  try {
+    const body = open();
+    if (body === null) {
+      return void 0;
+    }
+    const reader = body.getReader();
+    const decoder2 = new TextDecoder();
+    const expired = new Promise((resolve) => {
+      timer = setTimeout(() => resolve(null), READ_BUDGET_MS);
+    });
+    let text = "";
+    for (; ; ) {
+      const read = await Promise.race([reader.read(), expired]);
+      if (read === null) {
+        abandon(reader);
+        return INCOMPLETE;
+      }
+      if (read.done) {
+        break;
+      }
+      text += decoder2.decode(read.value, { stream: true });
+      if (text.length > MAX_BODY_CHARS) {
+        abandon(reader);
+        return TOO_LARGE;
+      }
+    }
+    return text === "" ? void 0 : text;
+  } catch {
+    return void 0;
+  } finally {
+    clearTimeout(timer);
+  }
+};
+var requestBody = (input, init) => {
+  const body = init?.body;
+  if (body === void 0) {
+    return input instanceof Request ? capturedBody(() => input.clone().body) : Promise.resolve(void 0);
+  }
+  if (body instanceof ReadableStream) {
+    return Promise.resolve(void 0);
+  }
+  return capturedBody(() => new Request("https://qinto.invalid", { method: "POST", body }).body);
+};
+var responseBody = (response) => {
+  if ((response.headers.get("content-type") ?? "").startsWith("text/event-stream")) {
+    return Promise.resolve(void 0);
+  }
+  return capturedBody(() => response.clone().body);
+};
+var bodyAttribute = async (key, body) => {
+  const text = await body;
+  return text === void 0 ? void 0 : { [key]: text };
+};
 var installTracedFetch = () => {
   const original = globalThis.fetch.bind(globalThis);
   globalThis.fetch = async (input, init) => {
     const { method, url: url2 } = requestParts(input, init);
+    const sent = requestBody(input, init);
     return traced(`${method} ${new URL(url2).host}`, { attrs: { "http.request.method": method, "url.full": url2 } }, async () => {
+      deferSpanAttributes(bodyAttribute("http.request.body", sent));
       const response = await original(input, init);
       setSpanAttributes({ "http.response.status_code": response.status });
+      deferSpanAttributes(bodyAttribute("http.response.body", responseBody(response)));
       return response;
     });
   };
@@ -16140,12 +16352,10 @@ var dispatchUi = async ({ request, env, versions }) => {
     installs: projectAllInstallValues(maps, variableKinds, context.installs),
     settings: buildSettings({ env, ticket: context.writeTicket }),
     // The panel's viewer is a portal user, not a visitor, so a workflow it starts carries no subject.
-    startWorkflow: buildStartWorkflow({
-      ord: context.install.ord,
-      installId: context.install.id,
-      installLabel: context.install.label,
-      anonId: null
-    }),
+    startWorkflow: buildUiStartWorkflow(
+      { ord: context.install.ord, installId: context.install.id, installLabel: context.install.label, anonId: null },
+      context.installs
+    ),
     variables,
     secrets,
     appVariables,
@@ -16415,6 +16625,7 @@ var createRuntime = (input) => {
         {
           request,
           context: env.APP_CONTEXT,
+          secrets: secretValues(env),
           failure: () => {
             return jsonError(500, "the app failed");
           }

package/dist/worker-artifact/main/{9301296b51353552dafe33a97c95e9755e6108db-q.js.txt → 9dcfd236748459af038da772477100c4bb0223b7-q.js.txt}

@@ -1 +1 @@
-(function(){var e=class extends Error{constructor(e){super(e),this.name=`QintoError`}},t=class extends e{constructor(e){super(e),this.name=`QintoTimeoutError`}},n=class extends e{constructor(e){super(e),this.name=`QintoEnvironmentError`}},r=`0123456789ABCDEFGHJKMNPQRSTVWXYZ`,i=e=>{let t=new Uint8Array(e);return globalThis.crypto.getRandomValues(t),t},a=e=>{let t=e,n=``;for(let e=0;e<10;e++)n=r.charAt(t%32)+n,t=Math.floor(t/32);let a=``,o=0,s=0;for(let e of i(10))for(o=o<<8|e,s+=8;s>=5;)s-=5,a+=r.charAt(o>>>s&31);return n+a},o=(e=Date.now())=>`evt_${a(e)}_${e}`,s=(e,t)=>{if(e!==void 0)return e;let n=t?.orderId;return typeof n==`string`&&n!==``?n:o()},c=()=>globalThis.document!==void 0,l=[`necessary`,`functional`,`analytics`,`marketing`,`salesOfData`],u=(e,t,n)=>n===void 0||!l.some(e=>e===n)?!1:n===`necessary`||e!==null&&e.categories[n]===!0&&e.apps[t]!==!1,d=()=>{},f=100,p=1024,m=32*1024,h=(e,t,n,r)=>!r||u(e,t,n),g=e=>Object.values(e.config?.apps??{}).some(e=>e.category!==`necessary`||e.capture!==void 0),ee=(e,t)=>{let{app:n,install:r,topic:i,to:a}=e;return typeof n!=`string`||typeof i!=`string`||r!==void 0&&typeof r!=`string`||t&&!(Array.isArray(a)&&a.every(e=>typeof e==`string`))},te=(e,t,n,r)=>r===null?e.slug===t&&(n===void 0||n===e.installId):r.has(e.slug),_=(e,t)=>{console.error(`[Qinto] A handler of app "${e.slug}" (install "${e.installId}") failed.`,t)},v=(e,t,n)=>{for(let r of t)try{let t=r(n);t instanceof Promise&&t.catch(t=>{_(e,t)})}catch(t){_(e,t)}},y=(e,t,n,r)=>{e.activated.add(r.id);let i={slug:t,installId:r.id,eventHandlers:[],consentHandlers:[],pushHandlers:[],sharedContextHandlers:[]};e.instances.push(i);let a={variables:r.variables,install:{id:r.id,label:r.label},track:(t,n)=>{e.client.track(t,n).catch(d)},onEvent:e=>{i.eventHandlers.push(e)},onConsent:e=>{i.consentHandlers.push(e)},onPush:e=>{i.pushHandlers.push(e)},onSharedContext:n=>{if(e.target.config?.apps?.[t]?.sharedContext!==!0){console.error(`[Qinto] App "${t}" reads shared context without declaring the sharedContext capability.`);return}i.sharedContextHandlers.push(n),e.sharedContext!==null&&S(e,t)&&v(i,[n],e.sharedContext)}};try{n(a)}catch(e){console.error(`[Qinto] App "${t}" failed to activate install "${r.id}".`,e)}},b=(e,t,n)=>{if(!h(e.consent,t,e.target.config?.apps?.[t]?.category,e.target.config?.consentConfiguration?.enabled===!0))return;let r=((`_appInstalls`in e.target?e.target._appInstalls:void 0)?.[t]??[]).filter(t=>!e.activated.has(t.id));if(r.length===0)return;let i=n.factory;if(i===void 0){try{i=n.loader()}catch(e){i=null,console.error(`[Qinto] App "${t}" failed to load.`,e)}e.apps.set(t,{...n,factory:i})}if(i!==null)for(let n of r)y(e,t,i,n)},x=(e,t,n)=>h(n,t,e.target.config?.apps?.[t]?.category,e.target.config?.consentConfiguration?.enabled===!0),S=(e,t)=>x(e,t,e.consent)?e.sharedContextConsent===void 0||x(e,t,e.sharedContextConsent):!1,C=e=>{let{categories:t,apps:n}=e;if(!(typeof t!=`object`||!t||typeof n!=`object`||!n))return{categories:t,apps:n}},w=(e,t)=>{let n=e;n.consent=t,n.sharedContextConsent=void 0;for(let n of e.instances)v(n,n.consentHandlers,t);e.onConsentSettled?.(t);for(let[t,n]of e.apps)b(e,t,n)},T=async e=>{try{w(e,await e.client.getConsent())}catch(e){console.error(`[Qinto] The apps consent read failed.`,e)}},ne=e=>{let t;try{t=JSON.stringify(e)}catch{return}if(!(t===void 0||new TextEncoder().encode(t).length>p))return JSON.parse(t)},re=e=>{let t={};for(let n of e){if(n.settled!==n.total||n.values.length!==1)continue;let e=ne(n.values[0]);if(e===void 0)continue;let r={...t[n.instance.slug]??{},[n.instance.installId]:e},i={...t,[n.instance.slug]:r};new TextEncoder().encode(JSON.stringify(i)).length<=m&&(t[n.instance.slug]=r)}return Object.keys(t).length===0?void 0:t},E=async(e,t)=>{e.onPageEvent?.(e.consent);let n=[],r=[];for(let i of e.instances){if(!h(e.consent,i.slug,e.target.config?.apps?.[i.slug]?.category,e.target.config?.consentConfiguration?.enabled===!0))continue;if(e.target.config?.apps?.[i.slug]?.eventResults?.includes(t.type)!==!0){v(i,i.eventHandlers,t);continue}let a={instance:i,total:i.eventHandlers.length,settled:0,values:[]};n.push(a);for(let e of i.eventHandlers){let n;try{n=e(t)}catch(e){a.settled+=1,_(i,e);continue}r.push(Promise.resolve(n).then(e=>{a.settled+=1,e!==void 0&&a.values.push(e)},e=>{a.settled+=1,_(i,e)}))}}if(r.length>0){let e=d,t=new Promise(t=>{e=t}),n=setTimeout(e,f);await Promise.race([Promise.all(r),t]),clearTimeout(n)}return re(n)},ie=e=>{let{client:t}=e;return{track:async(n,r,i)=>{let a=s(i?.eventId,r),o=t.actionContext(),c=await E(e,{type:`track`,event:n,eventId:a,properties:r??{}});return await t.submitTrack({event:n,eventId:a,properties:r,context:o,appResults:c}),{eventId:a}},identify:async(n,r)=>{let i=t.actionContext(),a=await E(e,{type:`identify`,event:`identify`,properties:n??{}});return t.submitIdentify({traits:n,id:r,context:i,appResults:a})},alias:t.alias,consent:async n=>{if(await t.submitConsent(n,t.actionContext()),e.onConsentMutation?.(),g(e.target)){let t=e;t.consent=null,await T(e)}},getAnonId:t.getAnonId,getConsent:t.getConsent,getSession:t.getSession,close:t.close}},ae=(e,t)=>{let n=new Map,r=null,i=null,a=e=>{let[t,i]=e;if(n.has(t))return;let a={loader:i};n.set(t,a),r?.(t,a)},o=e,s=`_apps`in o?o._apps:void 0,c=Array.isArray(s)?s:[];c.push=(...e)=>{for(let t of e)a(t);return 0},o._apps=c;for(let e of c.splice(0))a(e);return{sharedContext:e=>{let{context:t}=e;if(typeof t!=`object`||!t||Array.isArray(t)){console.error(`[Qinto] The server sent a malformed shared context.`,e);return}let n=i;if(n===null)return;n.sharedContext=t;let r=C(e),a=r??n.consent;n.sharedContextConsent=r;for(let e of n.instances)x(n,e.slug,a)&&v(e,e.sharedContextHandlers,n.sharedContext)},push:e=>{let{app:t,install:n,topic:r,scope:a,to:o}=e,s=a===`site`;if(ee(e,s)){console.error(`[Qinto] The server sent a malformed app push.`,e);return}let c=i;if(c===null)return;let l=s?new Set(o):null,u={topic:r,data:e.data,from:t};for(let e of c.instances)te(e,t,n,l)&&h(c.consent,e.slug,c.target.config?.apps?.[e.slug]?.category,c.target.config?.consentConfiguration?.enabled===!0)&&v(e,e.pushHandlers,u)},connect:async a=>{let o={target:e,client:a,apps:n,instances:[],activated:new Set,consent:null,sharedContext:i?.sharedContext??null,sharedContextConsent:i?.sharedContextConsent,onConsentSettled:t?.onConsentSettled,onConsentMutation:t?.onConsentMutation,onPageEvent:t?.onPageEvent};i=o,r=(e,t)=>{b(o,e,t),o.consent===null&&o.target.config?.consentConfiguration?.enabled===!0&&o.target.config?.apps?.[e]?.category!==`necessary`&&T(o)};for(let[e,t]of n)b(o,e,t);return e.config?.consentConfiguration?.enabled===!0&&g(e)?await T(o):o.onConsentSettled?.(o.consent),ie(o)}}},oe=`PageView`,D=()=>{},se=e=>{e.config?.autoCapture?.pageLoad===!0&&e.q.push([`track`,[oe],D,D])},O=512,k=1440*60*1e3,A=e=>Object.fromEntries(Object.entries(e).map(([e,t])=>[e,Object.fromEntries(Object.entries(t).map(([e,t])=>[e,t.value]))])),j=(e,t)=>`qinto:cap:${encodeURIComponent(e)}:${encodeURIComponent(t)}`,M=e=>{try{let t=window.sessionStorage.getItem(e);if(t===null)return null;let n=JSON.parse(t);return typeof n.at!=`number`||typeof n.anonId!=`string`||typeof n.apps!=`object`||n.apps===null||Date.now()-n.at>k?null:{at:n.at,anonId:n.anonId,apps:n.apps}}catch{return null}},N=(e,t)=>{try{window.sessionStorage.setItem(e,JSON.stringify(t))}catch{}},P=e=>{try{window.sessionStorage.removeItem(e)}catch{}},F=e=>{try{return decodeURIComponent(e)}catch{return e}},I=()=>{let e={};for(let t of document.cookie.split(`;`)){let n=t.indexOf(`=`);n>0&&(e[t.slice(0,n).trim()]=F(t.slice(n+1)))}return e},L=(e,t)=>{let n={};for(let r of e.queryParams){let e=t.params.get(r);e!==null&&e.length<=O&&(n[r]={value:e,source:`query`})}for(let r of e.cookies){let e=t.cookies[r];e!==void 0&&e.length<=O&&(n[r]={value:e,source:`cookie`})}return n},R=(e,t)=>{let n={params:new URLSearchParams(window.location.search),cookies:I()},r={};for(let[i,a]of Object.entries(e.config?.apps??{})){if(a.capture===void 0||!u(t,i,a.category))continue;let e=L(a.capture,n);Object.keys(e).length>0&&(r[i]=e)}return r},z=(e,t)=>{let n={};for(let[r,i]of Object.entries(e)){let e=t[r]??{},a={};for(let[t,n]of Object.entries(i))(e[t]?.value!==n.value||e[t]?.source!==n.source)&&(a[t]=n);Object.keys(a).length>0&&(n[r]=a)}return n},B=(e,t,n,r)=>{let i=j(r,n),a=M(i),o=a?.apps??{},s=a?.anonId??null,c=a===null,l={},u=0,d=(e,t)=>{s!==null&&s!==e.anonId&&(o={}),s=e.anonId;let n=new Set(Object.entries(e.accepted).flatMap(([e,t])=>t.map(t=>`${e}\u0000${t}`)));for(let[e,r]of Object.entries(t))for(let[t,i]of Object.entries(r))n.has(`${e}\u0000${t}`)&&(o[e]={...o[e],[t]:i});N(i,{at:Date.now(),anonId:s,apps:o})},f=null,p=()=>{u+=1,o={},l={},P(i)},m=n=>{if(f=n,!c)return;let r=z(R(e,n),{...o,...l});if(Object.keys(r).length===0)return;let i=u;l={...l,...r},t(A(r)).then(e=>{i===u&&d(e,r)}).catch(()=>{}).finally(()=>{l={}})};return{settled:e=>{m(e)},needsAnon:()=>!c,observedAnon:e=>{(e===null||s!==null&&s!==e)&&p(),s=e,c=!0,m(f)},clear:p}},V=Symbol.for(`qinto.connectGate`),H=()=>{},U=e=>{let t=globalThis,n=(t[V]??Promise.resolve()).then(e);return t[V]=n.then(H,H),n},W=class extends e{constructor(e){super(e),this.name=`QintoProtocolError`}},G=e=>{if(typeof e!=`string`)return null;let t;try{t=JSON.parse(e)}catch{return null}if(typeof t!=`object`||!t)return null;let n=t;return n.t===`ack`||n.t===`error`||n.t===`consentState`||n.t===`session`||n.t===`captureAck`||n.t===`appPush`||n.t===`sharedContext`?t:null},K=e=>{if(e.t===`consentState`)return{categories:e.categories,apps:e.apps};if(e.t===`session`)return{anonId:e.anonId,globalId:e.globalId};if(e.t===`captureAck`)return{anonId:e.anonId,accepted:e.accepted}},ce=e=>{let n=new Map,r=e=>{let t=n.get(e);if(t!==void 0)return clearTimeout(t.timer),n.delete(e),t};return{submit:r=>new Promise((i,a)=>{let o={frame:r,sent:e.send(r),resolve:i,reject:a,timer:setTimeout(()=>{n.delete(r.ref),a(new t(`The Qinto request timed out.`))},e.requestTimeoutMs)};n.set(r.ref,o)}),flush:()=>{for(let t of n.values())t.sent||=e.send(t.frame)},deliver:e=>{let t=e.ref===void 0?void 0:r(e.ref);if(t!==void 0){if(e.t===`error`){t.reject(new W(e.message));return}t.resolve(K(e))}},rejectAll:e=>{let t=[...n.values()];n.clear();for(let n of t)clearTimeout(n.timer),n.reject(e)}}},le=e=>new WebSocket(e),ue=500,de=3e4,fe=`session not initialized`,pe=(e,t)=>{let n=Math.min(ue*2**e,de);return Math.round(n/2+n/2*t)},me=(e,t)=>e.t===`appPush`?(t.onAppPush?.(e),!0):e.t===`sharedContext`?(t.onSharedContext?.(e),!0):!1,he=e=>{let t=`${e.destination.replace(/\/+$/,``)}/open`,n=null,r=null,i=0,a=null,o=ce({send:e=>n===null||n.readyState!==1?!1:(n.send(JSON.stringify(e)),!0),requestTimeoutMs:e.requestTimeoutMs}),s=t=>{e.onError?.(t)},c=()=>{if(r!==null&&(clearTimeout(r),r=null),n!==null){let e=n;n=null,e.close()}o.rejectAll(new W(`connection closed`))},l=()=>{let u=le(t);n=u,u.onopen=()=>{i=0;let e=a;a=null,o.flush(),e?.resolve()},u.onmessage=t=>{let n=G(t.data);if(n===null){s(new W(`invalid message`));return}me(n,e)||(`anonId`in n&&typeof n.anonId==`string`&&e.onAnonId?.(n.anonId),o.deliver(n),n.t===`error`&&n.message===fe&&u.close())},u.onerror=()=>{s(new W(`connection closed`))},u.onclose=()=>{if(n!==u)return;n=null;let e=a;if(e!==null){a=null,c(),e.reject(new W(`connection closed`));return}o.rejectAll(new W(`connection closed`)),r=setTimeout(()=>{r=null,l()},pe(i,Math.random())),i+=1}};return{connect:()=>new Promise((e,t)=>{a={resolve:e,reject:t},l()}),submit:e=>o.submit(e),close:()=>{c()}}},ge=1e4,_e=()=>{let e=0;return()=>(e+=1,`q${e}`)},ve=(e,t)=>{let n=`qinto:visit:${e.replace(/\/+$/,``)}:${t}`,r,i=!1;try{let e=sessionStorage.getItem(n);e===null||!/^vis_[0-9a-f-]{36}$/.test(e)?(r=`vis_${crypto.randomUUID()}`,sessionStorage.setItem(n,r),i=!0):r=e}catch{r=`vis_${crypto.randomUUID()}`,i=!0}return()=>{let e={id:r,isNew:i};return i=!1,e}},ye=(e,t,n,r)=>{let i=null,a=ve(n,r),o=()=>{let e=document.referrer;return{occurredAt:Date.now(),page:{url:window.location.href,...e===``?{}:{referrer:e}},session:a()}},c=async()=>{let n=await e.submit({t:`getSession`,ref:t()});return i=n.anonId,n};return{actionContext:o,submitIdentify:async({traits:n,id:r,context:i,appResults:a})=>{await e.submit({t:`identify`,ref:t(),traits:n,id:r,context:i,appResults:a})},submitTrack:async({event:n,eventId:r,properties:i,context:a,appResults:o})=>{await e.submit({t:`track`,ref:t(),event:n,eventId:r,properties:i,context:a,appResults:o})},submitConsent:async(n,r)=>{await e.submit({t:`consent`,ref:t(),categories:n.categories,apps:n.apps,context:r})},identify:async(n,r)=>{await e.submit({t:`identify`,ref:t(),traits:n,id:r,context:o()})},track:async(n,r,i)=>{let a=s(i?.eventId,r);return await e.submit({t:`track`,ref:t(),event:n,eventId:a,properties:r,context:o()}),{eventId:a}},alias:async n=>{await e.submit({t:`alias`,ref:t(),customId:n})},consent:async n=>{await e.submit({t:`consent`,ref:t(),categories:n.categories,apps:n.apps,context:o()})},getConsent:async()=>await e.submit({t:`getConsent`,ref:t()}),getSession:c,getAnonId:async()=>(i===null&&await c(),i),close:()=>{e.close()}}},be=async e=>{if(!c())throw new n(`You are calling init() in a server environment. Use createClient from @blotout/qinto-sdk-server there.`);let t=he({destination:e.destination,requestTimeoutMs:e.requestTimeoutMs??ge,onError:e.onError,onAppPush:e.onAppPush,onSharedContext:e.onSharedContext,onAnonId:e.onAnonId});await U(()=>t.connect());let r=_e();return{client:ye(t,r,e.destination,e.globalName??`qinto`),submitCapture:async e=>await t.submit({t:`capture`,ref:r(),apps:e})}},xe=[`then`,`ready`,`config`],q=()=>{},Se=(e,t)=>(...n)=>{let r=new Promise((r,i)=>{e.q.push([t,n,r,i])});return r.catch(q),r},J=e=>{let t=e;return t._q=1,t.q=[],new Proxy(t,{get:(e,n)=>typeof n!=`string`||xe.includes(n)||n in t?Reflect.get(t,n):(t[n]=Se(t,n),t[n])})},Ce=()=>{let e=document.currentScript?.dataset.qintoGlobal;return typeof e==`string`&&e!==``?e:`qinto`},we=e=>typeof e==`object`&&!!e&&e._q===1,Y=(e=`qinto`)=>{let t=globalThis;if(e in t){let n=t[e];if(!we(n))return null;let r=Array.isArray(n.q)?n:J(n);return r!==n&&Object.defineProperty(t,e,{value:r,writable:!0,enumerable:!0,configurable:!0}),r}let n=J({});return Object.defineProperty(t,e,{value:n,writable:!0,enumerable:!0,configurable:!0}),n},Te=(t,n)=>async(r,i)=>{let a=Reflect.get(t,r);if(typeof a!=`function`)throw new e(`[Qinto] ${n}.${r} is not a method of this tag.`);return a.apply(t,Array.from(i))},Ee=e=>()=>Promise.reject(e),X=(e,t)=>{let[n,r,i,a]=t;e(n,r).then(i,a)},De=e=>{let t=[];return t.push=(...t)=>{for(let n of t)X(e,n);return 0},t},Oe=(e,t,n=`window.qinto`)=>{let r=e.ready;if(r!==void 0)return r;let i=e,a=e=>{let t=i.q;i.q=De(e);for(let n of t)X(e,n)},o=t().then(e=>{a(Te(e,n))},e=>{throw a(Ee(e)),e});return o.catch(q),i.ready=o,o},Z=Ce(),Q=Y(Z),$=`window.${Z}`;if(Q!==null&&Q.ready===void 0){let e=null,t=ae(Q,{onConsentSettled:t=>{e?.settled(t)},onConsentMutation:()=>{e?.clear()},onPageEvent:t=>{e?.settled(t)}});se(Q),Oe(Q,async()=>{let n=Q.config?.destination;if(typeof n!=`string`||n===``)throw Error(`[Qinto] ${$}.config.destination is missing.`);let r=await be({destination:n,globalName:Z,onAppPush:t.push,onSharedContext:t.sharedContext,onAnonId:t=>{e?.observedAnon(t)}});e=B(Q,r.submitCapture,n,Z);let i=await t.connect(r.client);return e.needsAnon()&&e.observedAnon((await r.client.getSession()).anonId),i},$)}})();
+(function(){var e=class extends Error{constructor(e){super(e),this.name=`QintoError`}},t=class extends e{constructor(e){super(e),this.name=`QintoTimeoutError`}},n=class extends e{constructor(e){super(e),this.name=`QintoEnvironmentError`}},r=`0123456789ABCDEFGHJKMNPQRSTVWXYZ`,i=e=>{let t=new Uint8Array(e);return globalThis.crypto.getRandomValues(t),t},a=e=>{let t=e,n=``;for(let e=0;e<10;e++)n=r.charAt(t%32)+n,t=Math.floor(t/32);let a=``,o=0,s=0;for(let e of i(10))for(o=o<<8|e,s+=8;s>=5;)s-=5,a+=r.charAt(o>>>s&31);return n+a},o=(e=Date.now())=>`evt_${a(e)}_${e}`,s=(e,t)=>{if(e!==void 0)return e;let n=t?.orderId;return typeof n==`string`&&n!==``?n:o()},c=()=>globalThis.document!==void 0,l=[`necessary`,`functional`,`analytics`,`marketing`,`salesOfData`],u=(e,t,n)=>n===void 0||!l.some(e=>e===n)?!1:n===`necessary`||e!==null&&e.categories[n]===!0&&e.apps[t]!==!1,d=()=>{},f=100,p=1024,m=32*1024,h=(e,t,n,r)=>!r||u(e,t,n),g=e=>Object.values(e.config?.apps??{}).some(e=>e.category!==`necessary`||e.capture!==void 0),ee=(e,t)=>{let{app:n,install:r,topic:i,to:a}=e;return typeof n!=`string`||typeof i!=`string`||r!==void 0&&typeof r!=`string`||t&&!(Array.isArray(a)&&a.every(e=>typeof e==`string`))},te=(e,t,n,r)=>r===null?e.slug===t&&(n===void 0||n===e.installId):r.has(e.slug),_=(e,t)=>{console.error(`[Qinto] A handler of app "${e.slug}" (install "${e.installId}") failed.`,t)},v=(e,t,n)=>{for(let r of t)try{let t=r(n);t instanceof Promise&&t.catch(t=>{_(e,t)})}catch(t){_(e,t)}},y=(e,t,n,r)=>{e.activated.add(r.id);let i={slug:t,installId:r.id,eventHandlers:[],consentHandlers:[],pushHandlers:[],sharedContextHandlers:[]};e.instances.push(i);let a={variables:r.variables,install:{id:r.id,label:r.label},track:(t,n)=>{e.client.track(t,n).catch(d)},onEvent:e=>{i.eventHandlers.push(e)},onConsent:e=>{i.consentHandlers.push(e)},onPush:e=>{i.pushHandlers.push(e)},onSharedContext:n=>{if(e.target.config?.apps?.[t]?.sharedContext!==!0){console.error(`[Qinto] App "${t}" reads shared context without declaring the sharedContext capability.`);return}i.sharedContextHandlers.push(n),e.sharedContext!==null&&S(e,t)&&v(i,[n],e.sharedContext)}};try{n(a)}catch(e){console.error(`[Qinto] App "${t}" failed to activate install "${r.id}".`,e)}},b=(e,t,n)=>{if(!h(e.consent,t,e.target.config?.apps?.[t]?.category,e.target.config?.consentConfiguration?.enabled===!0))return;let r=((`_appInstalls`in e.target?e.target._appInstalls:void 0)?.[t]??[]).filter(t=>!e.activated.has(t.id));if(r.length===0)return;let i=n.factory;if(i===void 0){try{i=n.loader()}catch(e){i=null,console.error(`[Qinto] App "${t}" failed to load.`,e)}e.apps.set(t,{...n,factory:i})}if(i!==null)for(let n of r)y(e,t,i,n)},x=(e,t,n)=>h(n,t,e.target.config?.apps?.[t]?.category,e.target.config?.consentConfiguration?.enabled===!0),S=(e,t)=>x(e,t,e.consent)?e.sharedContextConsent===void 0||x(e,t,e.sharedContextConsent):!1,C=e=>{let{categories:t,apps:n}=e;if(!(typeof t!=`object`||!t||typeof n!=`object`||!n))return{categories:t,apps:n}},w=(e,t)=>{let n=e;n.consent=t,n.sharedContextConsent=void 0;for(let n of e.instances)v(n,n.consentHandlers,t);e.onConsentSettled?.(t);for(let[t,n]of e.apps)b(e,t,n)},T=async e=>{try{w(e,await e.client.getConsent())}catch(e){console.error(`[Qinto] The apps consent read failed.`,e)}},ne=e=>{let t;try{t=JSON.stringify(e)}catch{return}if(!(t===void 0||new TextEncoder().encode(t).length>p))return JSON.parse(t)},re=e=>{let t={};for(let n of e){if(n.settled!==n.total||n.values.length!==1)continue;let e=ne(n.values[0]);if(e===void 0)continue;let r={...t[n.instance.slug]??{},[n.instance.installId]:e},i={...t,[n.instance.slug]:r};new TextEncoder().encode(JSON.stringify(i)).length<=m&&(t[n.instance.slug]=r)}return Object.keys(t).length===0?void 0:t},E=async(e,t)=>{e.onPageEvent?.(e.consent);let n=[],r=[];for(let i of e.instances){if(!h(e.consent,i.slug,e.target.config?.apps?.[i.slug]?.category,e.target.config?.consentConfiguration?.enabled===!0))continue;if(e.target.config?.apps?.[i.slug]?.eventResults?.includes(t.type)!==!0){v(i,i.eventHandlers,t);continue}let a={instance:i,total:i.eventHandlers.length,settled:0,values:[]};n.push(a);for(let e of i.eventHandlers){let n;try{n=e(t)}catch(e){a.settled+=1,_(i,e);continue}r.push(Promise.resolve(n).then(e=>{a.settled+=1,e!==void 0&&a.values.push(e)},e=>{a.settled+=1,_(i,e)}))}}if(r.length>0){let e=d,t=new Promise(t=>{e=t}),n=setTimeout(e,f);await Promise.race([Promise.all(r),t]),clearTimeout(n)}return re(n)},ie=e=>{let{client:t}=e;return{track:async(n,r,i)=>{let a=s(i?.eventId,r),o=t.actionContext(),c=await E(e,{type:`track`,event:n,eventId:a,properties:r??{}});return await t.submitTrack({event:n,eventId:a,properties:r,context:o,appResults:c}),{eventId:a}},identify:async(n,r)=>{let i=t.actionContext(),a=await E(e,{type:`identify`,event:`identify`,properties:n??{}});return t.submitIdentify({traits:n,id:r,context:i,appResults:a})},alias:t.alias,consent:async n=>{if(await t.submitConsent(n,t.actionContext()),e.onConsentMutation?.(),g(e.target)){let t=e;t.consent=null,await T(e)}},getAnonId:t.getAnonId,getConsent:t.getConsent,getSession:t.getSession,close:t.close}},ae=(e,t)=>{let n=new Map,r=null,i=null,a=e=>{let[t,i]=e;if(n.has(t))return;let a={loader:i};n.set(t,a),r?.(t,a)},o=e,s=`_apps`in o?o._apps:void 0,c=Array.isArray(s)?s:[];c.push=(...e)=>{for(let t of e)a(t);return 0},o._apps=c;for(let e of c.splice(0))a(e);return{sharedContext:e=>{let{context:t}=e;if(typeof t!=`object`||!t||Array.isArray(t)){console.error(`[Qinto] The server sent a malformed shared context.`,e);return}let n=i;if(n===null)return;n.sharedContext=t;let r=C(e),a=r??n.consent;n.sharedContextConsent=r;for(let e of n.instances)x(n,e.slug,a)&&v(e,e.sharedContextHandlers,n.sharedContext)},push:e=>{let{app:t,install:n,topic:r,scope:a,to:o}=e,s=a===`site`;if(ee(e,s)){console.error(`[Qinto] The server sent a malformed app push.`,e);return}let c=i;if(c===null)return;let l=s?new Set(o):null,u={topic:r,data:e.data,from:t};for(let e of c.instances)te(e,t,n,l)&&h(c.consent,e.slug,c.target.config?.apps?.[e.slug]?.category,c.target.config?.consentConfiguration?.enabled===!0)&&v(e,e.pushHandlers,u)},connect:async a=>{let o={target:e,client:a,apps:n,instances:[],activated:new Set,consent:null,sharedContext:i?.sharedContext??null,sharedContextConsent:i?.sharedContextConsent,onConsentSettled:t?.onConsentSettled,onConsentMutation:t?.onConsentMutation,onPageEvent:t?.onPageEvent};i=o,r=(e,t)=>{b(o,e,t),o.consent===null&&o.target.config?.consentConfiguration?.enabled===!0&&o.target.config?.apps?.[e]?.category!==`necessary`&&T(o)};for(let[e,t]of n)b(o,e,t);return e.config?.consentConfiguration?.enabled===!0&&g(e)?await T(o):o.onConsentSettled?.(o.consent),ie(o)}}},oe=`PageView`,D=()=>{},se=e=>{e.config?.autoCapture?.pageLoad===!0&&e.q.push([`track`,[oe],D,D])},O=512,k=1440*60*1e3,A=e=>Object.fromEntries(Object.entries(e).map(([e,t])=>[e,Object.fromEntries(Object.entries(t).map(([e,t])=>[e,t.value]))])),j=(e,t)=>`qinto:cap:${encodeURIComponent(e)}:${encodeURIComponent(t)}`,M=e=>{try{let t=window.sessionStorage.getItem(e);if(t===null)return null;let n=JSON.parse(t);return typeof n.at!=`number`||typeof n.anonId!=`string`||typeof n.apps!=`object`||n.apps===null||Date.now()-n.at>k?null:{at:n.at,anonId:n.anonId,apps:n.apps}}catch{return null}},N=(e,t)=>{try{window.sessionStorage.setItem(e,JSON.stringify(t))}catch{}},P=e=>{try{window.sessionStorage.removeItem(e)}catch{}},F=e=>{try{return decodeURIComponent(e)}catch{return e}},I=()=>{let e={};for(let t of document.cookie.split(`;`)){let n=t.indexOf(`=`);n>0&&(e[t.slice(0,n).trim()]=F(t.slice(n+1)))}return e},L=(e,t)=>{let n={};for(let r of e.queryParams){let e=t.params.get(r);e!==null&&e.length<=O&&(n[r]={value:e,source:`query`})}for(let r of e.cookies){let e=t.cookies[r];e!==void 0&&e.length<=O&&(n[r]={value:e,source:`cookie`})}return n},R=(e,t)=>{let n={params:new URLSearchParams(window.location.search),cookies:I()},r={};for(let[i,a]of Object.entries(e.config?.apps??{})){if(a.capture===void 0||!u(t,i,a.category))continue;let e=L(a.capture,n);Object.keys(e).length>0&&(r[i]=e)}return r},z=(e,t)=>{let n={};for(let[r,i]of Object.entries(e)){let e=t[r]??{},a={};for(let[t,n]of Object.entries(i))(e[t]?.value!==n.value||e[t]?.source!==n.source)&&(a[t]=n);Object.keys(a).length>0&&(n[r]=a)}return n},B=(e,t,n,r)=>{let i=j(r,n),a=M(i),o=a?.apps??{},s=a?.anonId??null,c=a===null,l={},u=0,d=(e,t)=>{s!==null&&s!==e.anonId&&(o={}),s=e.anonId;let n=new Set(Object.entries(e.accepted).flatMap(([e,t])=>t.map(t=>`${e}\u0000${t}`)));for(let[e,r]of Object.entries(t))for(let[t,i]of Object.entries(r))n.has(`${e}\u0000${t}`)&&(o[e]={...o[e],[t]:i});N(i,{at:Date.now(),anonId:s,apps:o})},f=null,p=()=>{u+=1,o={},l={},P(i)},m=n=>{if(f=n,!c)return;let r=z(R(e,n),{...o,...l});if(Object.keys(r).length===0)return;let i=u;l={...l,...r},t(A(r)).then(e=>{i===u&&d(e,r)}).catch(()=>{}).finally(()=>{l={}})};return{settled:e=>{m(e)},needsAnon:()=>!c,observedAnon:e=>{(e===null||s!==null&&s!==e)&&p(),s=e,c=!0,m(f)},clear:p}},V=Symbol.for(`qinto.connectGate`),H=()=>{},U=e=>{let t=globalThis,n=(t[V]??Promise.resolve()).then(e);return t[V]=n.then(H,H),n},W=class extends e{constructor(e){super(e),this.name=`QintoProtocolError`}},G=e=>{if(typeof e!=`string`)return null;let t;try{t=JSON.parse(e)}catch{return null}if(typeof t!=`object`||!t)return null;let n=t;return n.t===`ack`||n.t===`error`||n.t===`consentState`||n.t===`session`||n.t===`captureAck`||n.t===`appPush`||n.t===`sharedContext`?t:null},K=e=>{if(e.t===`consentState`)return{categories:e.categories,apps:e.apps};if(e.t===`session`)return{anonId:e.anonId,globalId:e.globalId};if(e.t===`captureAck`)return{anonId:e.anonId,accepted:e.accepted}},ce=e=>{let n=new Map,r=e=>{let t=n.get(e);if(t!==void 0)return clearTimeout(t.timer),n.delete(e),t};return{submit:r=>new Promise((i,a)=>{let o={frame:r,sent:e.send(r),resolve:i,reject:a,timer:setTimeout(()=>{n.delete(r.ref),a(new t(`The Qinto request timed out.`))},e.requestTimeoutMs)};n.set(r.ref,o)}),flush:()=>{for(let t of n.values())t.sent||=e.send(t.frame)},deliver:e=>{let t=e.ref===void 0?void 0:r(e.ref);if(t!==void 0){if(e.t===`error`){t.reject(new W(e.message));return}t.resolve(K(e))}},rejectAll:e=>{let t=[...n.values()];n.clear();for(let n of t)clearTimeout(n.timer),n.reject(e)}}},le=e=>new WebSocket(e),ue=500,de=3e4,fe=`session not initialized`,pe=(e,t)=>{let n=Math.min(ue*2**e,de);return Math.round(n/2+n/2*t)},me=(e,t)=>e.t===`appPush`?(t.onAppPush?.(e),!0):e.t===`sharedContext`?(t.onSharedContext?.(e),!0):!1,he=e=>{let t=`${e.destination.replace(/\/+$/,``)}/open`,n=null,r=null,i=0,a=null,o=ce({send:e=>n===null||n.readyState!==1?!1:(n.send(JSON.stringify(e)),!0),requestTimeoutMs:e.requestTimeoutMs}),s=t=>{e.onError?.(t)},c=()=>{if(r!==null&&(clearTimeout(r),r=null),n!==null){let e=n;n=null,e.close()}o.rejectAll(new W(`connection closed`))},l=()=>{let u=le(t);n=u,u.onopen=()=>{i=0;let e=a;a=null,o.flush(),e?.resolve()},u.onmessage=t=>{let n=G(t.data);if(n===null){s(new W(`invalid message`));return}me(n,e)||(`anonId`in n&&typeof n.anonId==`string`&&e.onAnonId?.(n.anonId),o.deliver(n),n.t===`error`&&n.message===fe&&u.close())},u.onerror=()=>{s(new W(`connection closed`))},u.onclose=()=>{if(n!==u)return;n=null;let e=a;if(e!==null){a=null,c(),e.reject(new W(`connection closed`));return}o.rejectAll(new W(`connection closed`)),r=setTimeout(()=>{r=null,l()},pe(i,Math.random())),i+=1}};return{connect:()=>new Promise((e,t)=>{a={resolve:e,reject:t},l()}),submit:e=>o.submit(e),close:()=>{c()}}},ge=1e4,_e=()=>{let e=0;return()=>(e+=1,`q${e}`)},ve=(e,t)=>{let n=`qinto:visit:${e.replace(/\/+$/,``)}:${t}`,r,i=!1;try{let e=sessionStorage.getItem(n),t=e===null?null:JSON.parse(e);t===null||typeof t.id!=`string`||!/^vis_[0-9a-f-]{36}$/.test(t.id)||!Number.isSafeInteger(t.startedAt)||t.startedAt<0?(r={id:`vis_${crypto.randomUUID()}`,startedAt:Date.now()},sessionStorage.setItem(n,JSON.stringify(r)),i=!0):r={id:t.id,startedAt:t.startedAt}}catch{r={id:`vis_${crypto.randomUUID()}`,startedAt:Date.now()},i=!0}return()=>{let e={...r,isNew:i};return i=!1,e}},ye=(e,t,n,r)=>{let i=null,a=ve(n,r),o=()=>{let e=document.referrer;return{occurredAt:Date.now(),page:{url:window.location.href,...e===``?{}:{referrer:e}},session:a()}},c=async()=>{let n=await e.submit({t:`getSession`,ref:t()});return i=n.anonId,n};return{actionContext:o,submitIdentify:async({traits:n,id:r,context:i,appResults:a})=>{await e.submit({t:`identify`,ref:t(),traits:n,id:r,context:i,appResults:a})},submitTrack:async({event:n,eventId:r,properties:i,context:a,appResults:o})=>{await e.submit({t:`track`,ref:t(),event:n,eventId:r,properties:i,context:a,appResults:o})},submitConsent:async(n,r)=>{await e.submit({t:`consent`,ref:t(),categories:n.categories,apps:n.apps,context:r})},identify:async(n,r)=>{await e.submit({t:`identify`,ref:t(),traits:n,id:r,context:o()})},track:async(n,r,i)=>{let a=s(i?.eventId,r);return await e.submit({t:`track`,ref:t(),event:n,eventId:a,properties:r,context:o()}),{eventId:a}},alias:async n=>{await e.submit({t:`alias`,ref:t(),customId:n})},consent:async n=>{await e.submit({t:`consent`,ref:t(),categories:n.categories,apps:n.apps,context:o()})},getConsent:async()=>await e.submit({t:`getConsent`,ref:t()}),getSession:c,getAnonId:async()=>(i===null&&await c(),i),close:()=>{e.close()}}},be=async e=>{if(!c())throw new n(`You are calling init() in a server environment. Use createClient from @blotout/qinto-sdk-server there.`);let t=he({destination:e.destination,requestTimeoutMs:e.requestTimeoutMs??ge,onError:e.onError,onAppPush:e.onAppPush,onSharedContext:e.onSharedContext,onAnonId:e.onAnonId});await U(()=>t.connect());let r=_e();return{client:ye(t,r,e.destination,e.globalName??`qinto`),submitCapture:async e=>await t.submit({t:`capture`,ref:r(),apps:e})}},xe=[`then`,`ready`,`config`],q=()=>{},Se=(e,t)=>(...n)=>{let r=new Promise((r,i)=>{e.q.push([t,n,r,i])});return r.catch(q),r},J=e=>{let t=e;return t._q=1,t.q=[],new Proxy(t,{get:(e,n)=>typeof n!=`string`||xe.includes(n)||n in t?Reflect.get(t,n):(t[n]=Se(t,n),t[n])})},Ce=()=>{let e=document.currentScript?.dataset.qintoGlobal;return typeof e==`string`&&e!==``?e:`qinto`},we=e=>typeof e==`object`&&!!e&&e._q===1,Y=(e=`qinto`)=>{let t=globalThis;if(e in t){let n=t[e];if(!we(n))return null;let r=Array.isArray(n.q)?n:J(n);return r!==n&&Object.defineProperty(t,e,{value:r,writable:!0,enumerable:!0,configurable:!0}),r}let n=J({});return Object.defineProperty(t,e,{value:n,writable:!0,enumerable:!0,configurable:!0}),n},Te=(t,n)=>async(r,i)=>{let a=Reflect.get(t,r);if(typeof a!=`function`)throw new e(`[Qinto] ${n}.${r} is not a method of this tag.`);return a.apply(t,Array.from(i))},Ee=e=>()=>Promise.reject(e),X=(e,t)=>{let[n,r,i,a]=t;e(n,r).then(i,a)},De=e=>{let t=[];return t.push=(...t)=>{for(let n of t)X(e,n);return 0},t},Oe=(e,t,n=`window.qinto`)=>{let r=e.ready;if(r!==void 0)return r;let i=e,a=e=>{let t=i.q;i.q=De(e);for(let n of t)X(e,n)},o=t().then(e=>{a(Te(e,n))},e=>{throw a(Ee(e)),e});return o.catch(q),i.ready=o,o},Z=Ce(),Q=Y(Z),$=`window.${Z}`;if(Q!==null&&Q.ready===void 0){let e=null,t=ae(Q,{onConsentSettled:t=>{e?.settled(t)},onConsentMutation:()=>{e?.clear()},onPageEvent:t=>{e?.settled(t)}});se(Q),Oe(Q,async()=>{let n=Q.config?.destination;if(typeof n!=`string`||n===``)throw Error(`[Qinto] ${$}.config.destination is missing.`);let r=await be({destination:n,globalName:Z,onAppPush:t.push,onSharedContext:t.sharedContext,onAnonId:t=>{e?.observedAnon(t)}});e=B(Q,r.submitCapture,n,Z);let i=await t.connect(r.client);return e.needsAnon()&&e.observedAnon((await r.client.getSession()).anonId),i},$)}})();