@croct/plug 0.23.0 → 0.24.0

package/api/fetchContent.d.cts

@@ -2,7 +2,7 @@ import { DynamicContentOptions as DynamicContentOptions$1, StaticContentOptions
 import { ApiKey } from '@croct/sdk/apiKey';
 import { Logger } from '@croct/sdk/logging';
 import { JsonObject, JsonValue } from '@croct/json/mutable';
-import { F as FetchResponse } from '../plug-CPsFBGem.cjs';
+import { F as FetchResponse } from '../plug-CIEbOxqZ.cjs';
 import { SlotContent, VersionedSlotId } from '../slot.cjs';
 import '@croct/sdk/facade/sessionFacade';
 import '@croct/sdk/facade/userFacade';

package/api/fetchContent.d.ts

@@ -2,7 +2,7 @@ import { DynamicContentOptions as DynamicContentOptions$1, StaticContentOptions
 import { ApiKey } from '@croct/sdk/apiKey';
 import { Logger } from '@croct/sdk/logging';
 import { JsonObject, JsonValue } from '@croct/json/mutable';
-import { F as FetchResponse } from '../plug-aoj2L27K.js';
+import { F as FetchResponse } from '../plug-DV00uIb1.js';
 import { SlotContent, VersionedSlotId } from '../slot.js';
 import '@croct/sdk/facade/sessionFacade';
 import '@croct/sdk/facade/userFacade';

package/api/index.d.cts

@@ -1,6 +1,6 @@
 export { EvaluationOptions, evaluate } from './evaluate.cjs';
 export { DynamicContentOptions, FetchOptions, StaticContentOptions, fetchContent } from './fetchContent.cjs';
-export { F as FetchResponse } from '../plug-CPsFBGem.cjs';
+export { F as FetchResponse } from '../plug-CIEbOxqZ.cjs';
 import '@croct/sdk/evaluator';
 import '@croct/sdk/apiKey';
 import '@croct/sdk/logging';

package/api/index.d.ts

@@ -1,6 +1,6 @@
 export { EvaluationOptions, evaluate } from './evaluate.js';
 export { DynamicContentOptions, FetchOptions, StaticContentOptions, fetchContent } from './fetchContent.js';
-export { F as FetchResponse } from '../plug-aoj2L27K.js';
+export { F as FetchResponse } from '../plug-DV00uIb1.js';
 import '@croct/sdk/evaluator';
 import '@croct/sdk/apiKey';
 import '@croct/sdk/logging';

package/constants.cjs

@@ -24,11 +24,11 @@ __export(constants_exports, {
   PREVIEW_WIDGET_URL: () => PREVIEW_WIDGET_URL
 });
 module.exports = __toCommonJS(constants_exports);
-const CDN_URL = "https://cdn.croct.io/js/v1/lib/plug.js";
-const PLAYGROUND_ORIGIN = "https://play.croct.com";
-const PLAYGROUND_CONNECT_URL = "https://play.croct.com/connect.html";
-const PREVIEW_WIDGET_ORIGIN = "https://cdn.croct.io";
-const PREVIEW_WIDGET_URL = "https://cdn.croct.io/js/v1/lib/plug/widget-0.23.0.html";
+const CDN_URL = "";
+const PLAYGROUND_ORIGIN = "";
+const PLAYGROUND_CONNECT_URL = "";
+const PREVIEW_WIDGET_ORIGIN = "";
+const PREVIEW_WIDGET_URL = "";
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   CDN_URL,

package/constants.d.cts

@@ -1,7 +1,7 @@
-declare const CDN_URL = "https://cdn.croct.io/js/v1/lib/plug.js";
-declare const PLAYGROUND_ORIGIN = "https://play.croct.com";
-declare const PLAYGROUND_CONNECT_URL = "https://play.croct.com/connect.html";
-declare const PREVIEW_WIDGET_ORIGIN = "https://cdn.croct.io";
-declare const PREVIEW_WIDGET_URL = "https://cdn.croct.io/js/v1/lib/plug/widget-0.23.0.html";
+declare const CDN_URL = "";
+declare const PLAYGROUND_ORIGIN = "";
+declare const PLAYGROUND_CONNECT_URL = "";
+declare const PREVIEW_WIDGET_ORIGIN = "";
+declare const PREVIEW_WIDGET_URL = "";
 
 export { CDN_URL, PLAYGROUND_CONNECT_URL, PLAYGROUND_ORIGIN, PREVIEW_WIDGET_ORIGIN, PREVIEW_WIDGET_URL };

package/constants.d.ts

@@ -1,7 +1,7 @@
-declare const CDN_URL = "https://cdn.croct.io/js/v1/lib/plug.js";
-declare const PLAYGROUND_ORIGIN = "https://play.croct.com";
-declare const PLAYGROUND_CONNECT_URL = "https://play.croct.com/connect.html";
-declare const PREVIEW_WIDGET_ORIGIN = "https://cdn.croct.io";
-declare const PREVIEW_WIDGET_URL = "https://cdn.croct.io/js/v1/lib/plug/widget-0.23.0.html";
+declare const CDN_URL = "";
+declare const PLAYGROUND_ORIGIN = "";
+declare const PLAYGROUND_CONNECT_URL = "";
+declare const PREVIEW_WIDGET_ORIGIN = "";
+declare const PREVIEW_WIDGET_URL = "";
 
 export { CDN_URL, PLAYGROUND_CONNECT_URL, PLAYGROUND_ORIGIN, PREVIEW_WIDGET_ORIGIN, PREVIEW_WIDGET_URL };

package/constants.js

@@ -1,8 +1,8 @@
-const CDN_URL = "https://cdn.croct.io/js/v1/lib/plug.js";
-const PLAYGROUND_ORIGIN = "https://play.croct.com";
-const PLAYGROUND_CONNECT_URL = "https://play.croct.com/connect.html";
-const PREVIEW_WIDGET_ORIGIN = "https://cdn.croct.io";
-const PREVIEW_WIDGET_URL = "https://cdn.croct.io/js/v1/lib/plug/widget-0.23.0.html";
+const CDN_URL = "";
+const PLAYGROUND_ORIGIN = "";
+const PLAYGROUND_CONNECT_URL = "";
+const PREVIEW_WIDGET_ORIGIN = "";
+const PREVIEW_WIDGET_URL = "";
 export {
   CDN_URL,
   PLAYGROUND_CONNECT_URL,

package/global.d.d.cts

@@ -1,4 +1,4 @@
-import { P as Plug } from './plug-CPsFBGem.cjs';
+import { P as Plug, a as PluginFactory } from './plug-CIEbOxqZ.cjs';
 import '@croct/sdk/facade/sessionFacade';
 import '@croct/sdk/facade/userFacade';
 import '@croct/sdk/facade/trackerFacade';
@@ -27,5 +27,6 @@ declare global {
     interface Window {
         croct?: Plug;
         onCroctLoad: CroctCallback | undefined;
+        croctPlugins?: Record<string, PluginFactory>;
     }
 }

package/global.d.d.ts

@@ -1,4 +1,4 @@
-import { P as Plug } from './plug-aoj2L27K.js';
+import { P as Plug, a as PluginFactory } from './plug-DV00uIb1.js';
 import '@croct/sdk/facade/sessionFacade';
 import '@croct/sdk/facade/userFacade';
 import '@croct/sdk/facade/trackerFacade';
@@ -27,5 +27,6 @@ declare global {
     interface Window {
         croct?: Plug;
         onCroctLoad: CroctCallback | undefined;
+        croctPlugins?: Record<string, PluginFactory>;
     }
 }

package/index.d.cts

@@ -1,5 +1,5 @@
-import { G as GlobalPlug } from './plug-CPsFBGem.cjs';
-export { C as Configuration, F as FetchResponse, P as Plug } from './plug-CPsFBGem.cjs';
+import { G as GlobalPlug } from './plug-CIEbOxqZ.cjs';
+export { C as Configuration, F as FetchResponse, P as Plug } from './plug-CIEbOxqZ.cjs';
 import '@croct/sdk/facade/sessionFacade';
 import '@croct/sdk/facade/userFacade';
 import '@croct/sdk/facade/trackerFacade';

package/index.d.ts

@@ -1,5 +1,5 @@
-import { G as GlobalPlug } from './plug-aoj2L27K.js';
-export { C as Configuration, F as FetchResponse, P as Plug } from './plug-aoj2L27K.js';
+import { G as GlobalPlug } from './plug-DV00uIb1.js';
+export { C as Configuration, F as FetchResponse, P as Plug } from './plug-DV00uIb1.js';
 import '@croct/sdk/facade/sessionFacade';
 import '@croct/sdk/facade/userFacade';
 import '@croct/sdk/facade/trackerFacade';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@croct/plug",
-  "version": "0.23.0",
+  "version": "0.24.0",
   "description": "A fully-featured devkit for building natively personalized applications.",
   "license": "MIT",
   "author": {
@@ -103,4 +103,4 @@
     "**/*.cts",
     "**/*.map"
   ]
-}
+}

package/{plug-CPsFBGem.d.cts → plug-CIEbOxqZ.d.cts}

@@ -15,6 +15,7 @@ import { Tab } from '@croct/sdk/tab';
 import { CidAssigner } from '@croct/sdk/cid';
 import { Logger } from '@croct/sdk/logging';
 
+declare function isReservedPluginName(name: string): boolean;
 interface PluginSdk {
     readonly version: string;
     readonly appId: string;
@@ -32,6 +33,9 @@ interface PluginSdk {
     getTabStorage(...namespace: string[]): Storage;
     getBrowserStorage(...namespace: string[]): Storage;
 }
+declare namespace PluginSdk {
+    function register(name: string, factory: PluginFactory): void;
+}
 interface PluginArguments<T = any> {
     options: T;
     sdk: PluginSdk;
@@ -84,6 +88,37 @@ declare class GlobalPlug implements Plug {
     constructor();
     extend(name: string, plugin: PluginFactory): void;
     plug(configuration?: Configuration): void;
+    /**
+     * Registers plugins declared on the `window.croctPlugins` global registry.
+     *
+     * Plugins already present are registered eagerly so they are enabled as part
+     * of the regular initialization. The registry is then replaced with a proxy
+     * that registers and enables any plugin declared after the plug is loaded,
+     * making the registration order irrelevant.
+     *
+     * The proxy traps the captured session: once the plug is unplugged or plugged
+     * again, the `this.instance === context.sdk` check turns it inert, so no
+     * registry state has to be reset on the instance.
+     */
+    private watchPluginRegistry;
+    /**
+     * Registers a plugin factory declared on the global registry.
+     *
+     * Unlike {@link extend}, conflicts are tolerated so a single malformed or
+     * duplicated declaration cannot prevent the plug from initializing. A factory
+     * already registered under the same name is silently ignored, allowing the
+     * registry to be safely re-scanned across re-plugs.
+     *
+     * @returns Whether the factory was newly registered.
+     */
+    private registerExternalPlugin;
+    /**
+     * Instantiates and enables a single plugin.
+     *
+     * @returns A promise that resolves once the plugin is enabled, or nothing if
+     *          the plugin is synchronous, disabled, or could not be initialized.
+     */
+    private enablePlugin;
     get initialized(): boolean;
     get plugged(): Promise<this>;
     get flushed(): Promise<this>;
@@ -106,4 +141,4 @@ declare class GlobalPlug implements Plug {
     unplug(): Promise<void>;
 }
 
-export { type Configuration as C, type FetchResponse as F, GlobalPlug as G, type Plug as P, type Plugin as a, type PluginArguments as b, type PluginFactory as c, type PluginSdk as d, type FetchOptions as e, type PluginConfigurations as f };
+export { type Configuration as C, type FetchResponse as F, GlobalPlug as G, type Plug as P, type PluginFactory as a, type Plugin as b, type PluginArguments as c, PluginSdk as d, type FetchOptions as e, type PluginConfigurations as f, isReservedPluginName as i };

package/{plug-aoj2L27K.d.ts → plug-DV00uIb1.d.ts}

@@ -15,6 +15,7 @@ import { Tab } from '@croct/sdk/tab';
 import { CidAssigner } from '@croct/sdk/cid';
 import { Logger } from '@croct/sdk/logging';
 
+declare function isReservedPluginName(name: string): boolean;
 interface PluginSdk {
     readonly version: string;
     readonly appId: string;
@@ -32,6 +33,9 @@ interface PluginSdk {
     getTabStorage(...namespace: string[]): Storage;
     getBrowserStorage(...namespace: string[]): Storage;
 }
+declare namespace PluginSdk {
+    function register(name: string, factory: PluginFactory): void;
+}
 interface PluginArguments<T = any> {
     options: T;
     sdk: PluginSdk;
@@ -84,6 +88,37 @@ declare class GlobalPlug implements Plug {
     constructor();
     extend(name: string, plugin: PluginFactory): void;
     plug(configuration?: Configuration): void;
+    /**
+     * Registers plugins declared on the `window.croctPlugins` global registry.
+     *
+     * Plugins already present are registered eagerly so they are enabled as part
+     * of the regular initialization. The registry is then replaced with a proxy
+     * that registers and enables any plugin declared after the plug is loaded,
+     * making the registration order irrelevant.
+     *
+     * The proxy traps the captured session: once the plug is unplugged or plugged
+     * again, the `this.instance === context.sdk` check turns it inert, so no
+     * registry state has to be reset on the instance.
+     */
+    private watchPluginRegistry;
+    /**
+     * Registers a plugin factory declared on the global registry.
+     *
+     * Unlike {@link extend}, conflicts are tolerated so a single malformed or
+     * duplicated declaration cannot prevent the plug from initializing. A factory
+     * already registered under the same name is silently ignored, allowing the
+     * registry to be safely re-scanned across re-plugs.
+     *
+     * @returns Whether the factory was newly registered.
+     */
+    private registerExternalPlugin;
+    /**
+     * Instantiates and enables a single plugin.
+     *
+     * @returns A promise that resolves once the plugin is enabled, or nothing if
+     *          the plugin is synchronous, disabled, or could not be initialized.
+     */
+    private enablePlugin;
     get initialized(): boolean;
     get plugged(): Promise<this>;
     get flushed(): Promise<this>;
@@ -106,4 +141,4 @@ declare class GlobalPlug implements Plug {
     unplug(): Promise<void>;
 }
 
-export { type Configuration as C, type FetchResponse as F, GlobalPlug as G, type Plug as P, type Plugin as a, type PluginArguments as b, type PluginFactory as c, type PluginSdk as d, type FetchOptions as e, type PluginConfigurations as f };
+export { type Configuration as C, type FetchResponse as F, GlobalPlug as G, type Plug as P, type PluginFactory as a, type Plugin as b, type PluginArguments as c, PluginSdk as d, type FetchOptions as e, type PluginConfigurations as f, isReservedPluginName as i };

package/plug.cjs

@@ -26,11 +26,16 @@ var import_validation = require("@croct/sdk/validation");
 var import_token = require("@croct/sdk/token");
 var import_sdk = require("@croct/sdk");
 var import_content = require("@croct/content");
+var import_plugin = require('./plugin.cjs');
 var import_constants = require('./constants.cjs');
 var import_preview = require('./plugins/preview/index.cjs');
 var import_autoTracking = require('./plugins/autoTracking/index.cjs');
 var import_globalVariable = require('./plugins/globalVariable/index.cjs');
 const PLUGIN_NAMESPACE = "Plugin";
+const objectHasOwnProperty = Object.prototype.hasOwnProperty;
+function hasOwn(target, property) {
+  return objectHasOwnProperty.call(target, property);
+}
 function detectAppId() {
   const script = window.document.querySelector(`script[src^='${import_constants.CDN_URL}']`);
   if (!(script instanceof HTMLScriptElement)) {
@@ -51,7 +56,10 @@ const _GlobalPlug = class _GlobalPlug {
     });
   }
   extend(name, plugin) {
-    if (this.pluginFactories[name] !== void 0) {
+    if ((0, import_plugin.isReservedPluginName)(name)) {
+      throw new Error(`The plugin name "${name}" is reserved and cannot be used.`);
+    }
+    if (hasOwn(this.pluginFactories, name)) {
       throw new Error(`Another plugin is already registered with name "${name}".`);
     }
     this.pluginFactories[name] = plugin;
@@ -91,76 +99,166 @@ const _GlobalPlug = class _GlobalPlug {
         'It is strongly recommended omitting the "appId" option when using the application-specific tag as it is detected automatically.'
       );
     }
+    const configurations = plugins ?? {};
+    const context = {
+      sdk,
+      appId,
+      logger
+    };
+    this.watchPluginRegistry(context, configurations);
     const pending = [];
     const defaultEnabledPlugins = Object.fromEntries(
       Object.keys(this.pluginFactories).map((name) => [name, true])
     );
-    for (const [name, options] of Object.entries({ ...defaultEnabledPlugins, ...plugins })) {
-      logger.debug(`Initializing plugin "${name}"...`);
-      const factory = this.pluginFactories[name];
-      if (factory === void 0) {
-        logger.error(`Plugin "${name}" is not registered.`);
-        continue;
-      }
-      if (typeof options !== "boolean" && (options === null || typeof options !== "object")) {
-        logger.error(
-          `Invalid options for plugin "${name}", expected either boolean or object but got ${(0, import_validation.describe)(options)}`
-        );
-        continue;
-      }
-      if (options === false) {
-        logger.warn(`Plugin "${name}" is declared but not enabled`);
-        continue;
-      }
-      const args = {
-        options: options === true ? {} : options,
-        sdk: {
-          version: import_sdk.VERSION,
-          appId,
-          plug: this,
-          tracker: sdk.tracker,
-          evaluator: sdk.evaluator,
-          user: sdk.user,
-          session: sdk.session,
-          tab: sdk.context.getTab(),
-          userTokenStore: {
-            getToken: sdk.getToken.bind(sdk),
-            setToken: sdk.setToken.bind(sdk)
-          },
-          previewTokenStore: sdk.previewTokenStore,
-          cidAssigner: sdk.cidAssigner,
-          eventManager: sdk.eventManager,
-          getLogger: (...namespace) => sdk.getLogger(PLUGIN_NAMESPACE, name, ...namespace),
-          getTabStorage: (...namespace) => sdk.getTabStorage(PLUGIN_NAMESPACE, name, ...namespace),
-          getBrowserStorage: (...namespace) => sdk.getBrowserStorage(PLUGIN_NAMESPACE, name, ...namespace)
-        }
-      };
-      let plugin;
-      try {
-        plugin = factory(args);
-      } catch (error) {
-        logger.error(`Failed to initialize plugin "${name}": ${(0, import_error.formatCause)(error)}`);
-        continue;
+    for (const [name, options] of Object.entries({ ...defaultEnabledPlugins, ...configurations })) {
+      const promise = this.enablePlugin(name, options, context);
+      if (promise instanceof Promise) {
+        pending.push(promise);
       }
-      logger.debug(`Plugin "${name}" initialized`);
-      if (typeof plugin !== "object") {
-        continue;
-      }
-      this.plugins[name] = plugin;
-      const promise = plugin.enable();
-      if (!(promise instanceof Promise)) {
-        logger.debug(`Plugin "${name}" enabled`);
-        continue;
-      }
-      pending.push(
-        promise.then(() => logger.debug(`Plugin "${name}" enabled`)).catch((error) => logger.error(`Failed to enable plugin "${name}": ${(0, import_error.formatCause)(error)}`))
-      );
     }
     Promise.all(pending).then(() => {
       this.initialize();
       logger.debug("Initialization complete");
     });
   }
+  /**
+   * Registers plugins declared on the `window.croctPlugins` global registry.
+   *
+   * Plugins already present are registered eagerly so they are enabled as part
+   * of the regular initialization. The registry is then replaced with a proxy
+   * that registers and enables any plugin declared after the plug is loaded,
+   * making the registration order irrelevant.
+   *
+   * The proxy traps the captured session: once the plug is unplugged or plugged
+   * again, the `this.instance === context.sdk` check turns it inert, so no
+   * registry state has to be reset on the instance.
+   */
+  watchPluginRegistry(context, configurations) {
+    const { sdk, logger } = context;
+    const registry = { ...window.croctPlugins };
+    for (const [name, factory] of Object.entries(registry)) {
+      this.registerExternalPlugin(name, factory, logger);
+    }
+    window.croctPlugins = new Proxy(registry, {
+      set: (target, property, factory) => {
+        const result = Reflect.set(target, property, factory);
+        if (result && this.instance === sdk && typeof property === "string") {
+          if (this.registerExternalPlugin(property, factory, logger)) {
+            const options = hasOwn(configurations, property) ? configurations[property] : true;
+            void this.enablePlugin(property, options, context);
+          }
+        }
+        return result;
+      },
+      deleteProperty: (target, property) => {
+        if (this.instance === sdk && typeof property === "string" && hasOwn(this.pluginFactories, property)) {
+          logger.error(
+            `Plugin "${property}" cannot be unregistered; it will remain registered until the page is reloaded.`
+          );
+        }
+        return Reflect.deleteProperty(target, property);
+      }
+    });
+  }
+  /**
+   * Registers a plugin factory declared on the global registry.
+   *
+   * Unlike {@link extend}, conflicts are tolerated so a single malformed or
+   * duplicated declaration cannot prevent the plug from initializing. A factory
+   * already registered under the same name is silently ignored, allowing the
+   * registry to be safely re-scanned across re-plugs.
+   *
+   * @returns Whether the factory was newly registered.
+   */
+  registerExternalPlugin(name, factory, logger) {
+    if ((0, import_plugin.isReservedPluginName)(name)) {
+      logger.error(`The plugin name "${name}" is reserved and cannot be used, ignoring it.`);
+      return false;
+    }
+    if (typeof factory !== "function") {
+      logger.error(`The plugin "${name}" declared globally is not a valid factory, ignoring it.`);
+      return false;
+    }
+    const registered = hasOwn(this.pluginFactories, name) ? this.pluginFactories[name] : void 0;
+    if (registered !== void 0) {
+      if (registered !== factory) {
+        logger.warn(`Plugin "${name}" is already registered, ignoring global registration.`);
+      }
+      return false;
+    }
+    this.pluginFactories[name] = factory;
+    return true;
+  }
+  /**
+   * Instantiates and enables a single plugin.
+   *
+   * @returns A promise that resolves once the plugin is enabled, or nothing if
+   *          the plugin is synchronous, disabled, or could not be initialized.
+   */
+  enablePlugin(name, options, context) {
+    const { sdk, appId, logger } = context;
+    if ((0, import_plugin.isReservedPluginName)(name)) {
+      logger.error(`The plugin name "${name}" is reserved and cannot be used, ignoring it.`);
+      return;
+    }
+    logger.debug(`Initializing plugin "${name}"...`);
+    const factory = hasOwn(this.pluginFactories, name) ? this.pluginFactories[name] : void 0;
+    if (factory === void 0) {
+      logger.error(`Plugin "${name}" is not registered.`);
+      return;
+    }
+    if (typeof options !== "boolean" && (options === null || typeof options !== "object")) {
+      logger.error(
+        `Invalid options for plugin "${name}", expected either boolean or object but got ${(0, import_validation.describe)(options)}`
+      );
+      return;
+    }
+    if (options === false) {
+      logger.warn(`Plugin "${name}" is declared but not enabled`);
+      return;
+    }
+    const args = {
+      options: options === true ? {} : options,
+      sdk: {
+        version: import_sdk.VERSION,
+        appId,
+        plug: this,
+        tracker: sdk.tracker,
+        evaluator: sdk.evaluator,
+        user: sdk.user,
+        session: sdk.session,
+        tab: sdk.context.getTab(),
+        userTokenStore: {
+          getToken: sdk.getToken.bind(sdk),
+          setToken: sdk.setToken.bind(sdk)
+        },
+        previewTokenStore: sdk.previewTokenStore,
+        cidAssigner: sdk.cidAssigner,
+        eventManager: sdk.eventManager,
+        getLogger: (...namespace) => sdk.getLogger(PLUGIN_NAMESPACE, name, ...namespace),
+        getTabStorage: (...namespace) => sdk.getTabStorage(PLUGIN_NAMESPACE, name, ...namespace),
+        getBrowserStorage: (...namespace) => sdk.getBrowserStorage(PLUGIN_NAMESPACE, name, ...namespace)
+      }
+    };
+    let plugin;
+    try {
+      plugin = factory(args);
+    } catch (error) {
+      logger.error(`Failed to initialize plugin "${name}": ${(0, import_error.formatCause)(error)}`);
+      return;
+    }
+    logger.debug(`Plugin "${name}" initialized`);
+    if (typeof plugin !== "object") {
+      return;
+    }
+    this.plugins[name] = plugin;
+    const promise = plugin.enable();
+    if (!(promise instanceof Promise)) {
+      logger.debug(`Plugin "${name}" enabled`);
+      return;
+    }
+    return promise.then(() => logger.debug(`Plugin "${name}" enabled`)).catch((error) => logger.error(`Failed to enable plugin "${name}": ${(0, import_error.formatCause)(error)}`));
+  }
   get initialized() {
     return this.instance !== void 0;
   }

package/plug.d.cts

@@ -7,7 +7,7 @@ import '@croct/sdk/utilityTypes';
 import '@croct/sdk/trackingEvents';
 import '@croct/sdk/facade/contentFetcherFacade';
 import '@croct/sdk/contentFetcher';
-export { C as Configuration, e as FetchOptions, F as FetchResponse, G as GlobalPlug, P as Plug, f as PluginConfigurations } from './plug-CPsFBGem.cjs';
+export { C as Configuration, e as FetchOptions, F as FetchResponse, G as GlobalPlug, P as Plug, f as PluginConfigurations } from './plug-CIEbOxqZ.cjs';
 import './slot.cjs';
 import '@croct/json/mutable';
 import '@croct/sdk/token';

package/plug.d.ts

@@ -7,7 +7,7 @@ import '@croct/sdk/utilityTypes';
 import '@croct/sdk/trackingEvents';
 import '@croct/sdk/facade/contentFetcherFacade';
 import '@croct/sdk/contentFetcher';
-export { C as Configuration, e as FetchOptions, F as FetchResponse, G as GlobalPlug, P as Plug, f as PluginConfigurations } from './plug-aoj2L27K.js';
+export { C as Configuration, e as FetchOptions, F as FetchResponse, G as GlobalPlug, P as Plug, f as PluginConfigurations } from './plug-DV00uIb1.js';
 import './slot.js';
 import '@croct/json/mutable';
 import '@croct/sdk/token';

package/plug.js

@@ -4,11 +4,16 @@ import { describe } from "@croct/sdk/validation";
 import { Token } from "@croct/sdk/token";
 import { VERSION } from "@croct/sdk";
 import { loadSlotContent } from "@croct/content";
+import { isReservedPluginName } from "./plugin.js";
 import { CDN_URL } from "./constants.js";
 import { factory as previewPluginFactory } from "./plugins/preview/index.js";
 import { factory as autoTrackingPluginFactory } from "./plugins/autoTracking/index.js";
 import { factory as globalVariablePluginFactory } from "./plugins/globalVariable/index.js";
 const PLUGIN_NAMESPACE = "Plugin";
+const objectHasOwnProperty = Object.prototype.hasOwnProperty;
+function hasOwn(target, property) {
+  return objectHasOwnProperty.call(target, property);
+}
 function detectAppId() {
   const script = window.document.querySelector(`script[src^='${CDN_URL}']`);
   if (!(script instanceof HTMLScriptElement)) {
@@ -29,7 +34,10 @@ const _GlobalPlug = class _GlobalPlug {
     });
   }
   extend(name, plugin) {
-    if (this.pluginFactories[name] !== void 0) {
+    if (isReservedPluginName(name)) {
+      throw new Error(`The plugin name "${name}" is reserved and cannot be used.`);
+    }
+    if (hasOwn(this.pluginFactories, name)) {
       throw new Error(`Another plugin is already registered with name "${name}".`);
     }
     this.pluginFactories[name] = plugin;
@@ -69,76 +77,166 @@ const _GlobalPlug = class _GlobalPlug {
         'It is strongly recommended omitting the "appId" option when using the application-specific tag as it is detected automatically.'
       );
     }
+    const configurations = plugins ?? {};
+    const context = {
+      sdk,
+      appId,
+      logger
+    };
+    this.watchPluginRegistry(context, configurations);
     const pending = [];
     const defaultEnabledPlugins = Object.fromEntries(
       Object.keys(this.pluginFactories).map((name) => [name, true])
     );
-    for (const [name, options] of Object.entries({ ...defaultEnabledPlugins, ...plugins })) {
-      logger.debug(`Initializing plugin "${name}"...`);
-      const factory = this.pluginFactories[name];
-      if (factory === void 0) {
-        logger.error(`Plugin "${name}" is not registered.`);
-        continue;
-      }
-      if (typeof options !== "boolean" && (options === null || typeof options !== "object")) {
-        logger.error(
-          `Invalid options for plugin "${name}", expected either boolean or object but got ${describe(options)}`
-        );
-        continue;
-      }
-      if (options === false) {
-        logger.warn(`Plugin "${name}" is declared but not enabled`);
-        continue;
-      }
-      const args = {
-        options: options === true ? {} : options,
-        sdk: {
-          version: VERSION,
-          appId,
-          plug: this,
-          tracker: sdk.tracker,
-          evaluator: sdk.evaluator,
-          user: sdk.user,
-          session: sdk.session,
-          tab: sdk.context.getTab(),
-          userTokenStore: {
-            getToken: sdk.getToken.bind(sdk),
-            setToken: sdk.setToken.bind(sdk)
-          },
-          previewTokenStore: sdk.previewTokenStore,
-          cidAssigner: sdk.cidAssigner,
-          eventManager: sdk.eventManager,
-          getLogger: (...namespace) => sdk.getLogger(PLUGIN_NAMESPACE, name, ...namespace),
-          getTabStorage: (...namespace) => sdk.getTabStorage(PLUGIN_NAMESPACE, name, ...namespace),
-          getBrowserStorage: (...namespace) => sdk.getBrowserStorage(PLUGIN_NAMESPACE, name, ...namespace)
-        }
-      };
-      let plugin;
-      try {
-        plugin = factory(args);
-      } catch (error) {
-        logger.error(`Failed to initialize plugin "${name}": ${formatCause(error)}`);
-        continue;
+    for (const [name, options] of Object.entries({ ...defaultEnabledPlugins, ...configurations })) {
+      const promise = this.enablePlugin(name, options, context);
+      if (promise instanceof Promise) {
+        pending.push(promise);
       }
-      logger.debug(`Plugin "${name}" initialized`);
-      if (typeof plugin !== "object") {
-        continue;
-      }
-      this.plugins[name] = plugin;
-      const promise = plugin.enable();
-      if (!(promise instanceof Promise)) {
-        logger.debug(`Plugin "${name}" enabled`);
-        continue;
-      }
-      pending.push(
-        promise.then(() => logger.debug(`Plugin "${name}" enabled`)).catch((error) => logger.error(`Failed to enable plugin "${name}": ${formatCause(error)}`))
-      );
     }
     Promise.all(pending).then(() => {
       this.initialize();
       logger.debug("Initialization complete");
     });
   }
+  /**
+   * Registers plugins declared on the `window.croctPlugins` global registry.
+   *
+   * Plugins already present are registered eagerly so they are enabled as part
+   * of the regular initialization. The registry is then replaced with a proxy
+   * that registers and enables any plugin declared after the plug is loaded,
+   * making the registration order irrelevant.
+   *
+   * The proxy traps the captured session: once the plug is unplugged or plugged
+   * again, the `this.instance === context.sdk` check turns it inert, so no
+   * registry state has to be reset on the instance.
+   */
+  watchPluginRegistry(context, configurations) {
+    const { sdk, logger } = context;
+    const registry = { ...window.croctPlugins };
+    for (const [name, factory] of Object.entries(registry)) {
+      this.registerExternalPlugin(name, factory, logger);
+    }
+    window.croctPlugins = new Proxy(registry, {
+      set: (target, property, factory) => {
+        const result = Reflect.set(target, property, factory);
+        if (result && this.instance === sdk && typeof property === "string") {
+          if (this.registerExternalPlugin(property, factory, logger)) {
+            const options = hasOwn(configurations, property) ? configurations[property] : true;
+            void this.enablePlugin(property, options, context);
+          }
+        }
+        return result;
+      },
+      deleteProperty: (target, property) => {
+        if (this.instance === sdk && typeof property === "string" && hasOwn(this.pluginFactories, property)) {
+          logger.error(
+            `Plugin "${property}" cannot be unregistered; it will remain registered until the page is reloaded.`
+          );
+        }
+        return Reflect.deleteProperty(target, property);
+      }
+    });
+  }
+  /**
+   * Registers a plugin factory declared on the global registry.
+   *
+   * Unlike {@link extend}, conflicts are tolerated so a single malformed or
+   * duplicated declaration cannot prevent the plug from initializing. A factory
+   * already registered under the same name is silently ignored, allowing the
+   * registry to be safely re-scanned across re-plugs.
+   *
+   * @returns Whether the factory was newly registered.
+   */
+  registerExternalPlugin(name, factory, logger) {
+    if (isReservedPluginName(name)) {
+      logger.error(`The plugin name "${name}" is reserved and cannot be used, ignoring it.`);
+      return false;
+    }
+    if (typeof factory !== "function") {
+      logger.error(`The plugin "${name}" declared globally is not a valid factory, ignoring it.`);
+      return false;
+    }
+    const registered = hasOwn(this.pluginFactories, name) ? this.pluginFactories[name] : void 0;
+    if (registered !== void 0) {
+      if (registered !== factory) {
+        logger.warn(`Plugin "${name}" is already registered, ignoring global registration.`);
+      }
+      return false;
+    }
+    this.pluginFactories[name] = factory;
+    return true;
+  }
+  /**
+   * Instantiates and enables a single plugin.
+   *
+   * @returns A promise that resolves once the plugin is enabled, or nothing if
+   *          the plugin is synchronous, disabled, or could not be initialized.
+   */
+  enablePlugin(name, options, context) {
+    const { sdk, appId, logger } = context;
+    if (isReservedPluginName(name)) {
+      logger.error(`The plugin name "${name}" is reserved and cannot be used, ignoring it.`);
+      return;
+    }
+    logger.debug(`Initializing plugin "${name}"...`);
+    const factory = hasOwn(this.pluginFactories, name) ? this.pluginFactories[name] : void 0;
+    if (factory === void 0) {
+      logger.error(`Plugin "${name}" is not registered.`);
+      return;
+    }
+    if (typeof options !== "boolean" && (options === null || typeof options !== "object")) {
+      logger.error(
+        `Invalid options for plugin "${name}", expected either boolean or object but got ${describe(options)}`
+      );
+      return;
+    }
+    if (options === false) {
+      logger.warn(`Plugin "${name}" is declared but not enabled`);
+      return;
+    }
+    const args = {
+      options: options === true ? {} : options,
+      sdk: {
+        version: VERSION,
+        appId,
+        plug: this,
+        tracker: sdk.tracker,
+        evaluator: sdk.evaluator,
+        user: sdk.user,
+        session: sdk.session,
+        tab: sdk.context.getTab(),
+        userTokenStore: {
+          getToken: sdk.getToken.bind(sdk),
+          setToken: sdk.setToken.bind(sdk)
+        },
+        previewTokenStore: sdk.previewTokenStore,
+        cidAssigner: sdk.cidAssigner,
+        eventManager: sdk.eventManager,
+        getLogger: (...namespace) => sdk.getLogger(PLUGIN_NAMESPACE, name, ...namespace),
+        getTabStorage: (...namespace) => sdk.getTabStorage(PLUGIN_NAMESPACE, name, ...namespace),
+        getBrowserStorage: (...namespace) => sdk.getBrowserStorage(PLUGIN_NAMESPACE, name, ...namespace)
+      }
+    };
+    let plugin;
+    try {
+      plugin = factory(args);
+    } catch (error) {
+      logger.error(`Failed to initialize plugin "${name}": ${formatCause(error)}`);
+      return;
+    }
+    logger.debug(`Plugin "${name}" initialized`);
+    if (typeof plugin !== "object") {
+      return;
+    }
+    this.plugins[name] = plugin;
+    const promise = plugin.enable();
+    if (!(promise instanceof Promise)) {
+      logger.debug(`Plugin "${name}" enabled`);
+      return;
+    }
+    return promise.then(() => logger.debug(`Plugin "${name}" enabled`)).catch((error) => logger.error(`Failed to enable plugin "${name}": ${formatCause(error)}`));
+  }
   get initialized() {
     return this.instance !== void 0;
   }

package/plugin.cjs

@@ -2,6 +2,10 @@ var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
     for (let key of __getOwnPropNames(from))
@@ -12,4 +16,33 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var plugin_exports = {};
+__export(plugin_exports, {
+  PluginSdk: () => PluginSdk,
+  isReservedPluginName: () => isReservedPluginName
+});
 module.exports = __toCommonJS(plugin_exports);
+const RESERVED_PLUGIN_NAMES = ["__proto__", "constructor", "prototype"];
+function isReservedPluginName(name) {
+  return RESERVED_PLUGIN_NAMES.includes(name);
+}
+var PluginSdk;
+((PluginSdk2) => {
+  function register(name, factory) {
+    if (isReservedPluginName(name)) {
+      throw new Error(`The plugin name "${name}" is reserved and cannot be used.`);
+    }
+    if (typeof window === "undefined") {
+      return;
+    }
+    if (window.croctPlugins === void 0) {
+      window.croctPlugins = {};
+    }
+    window.croctPlugins[name] = factory;
+  }
+  PluginSdk2.register = register;
+})(PluginSdk || (PluginSdk = {}));
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  PluginSdk,
+  isReservedPluginName
+});

package/plugin.d.cts

@@ -2,7 +2,7 @@ import '@croct/sdk/token';
 import '@croct/sdk/facade/evaluatorFacade';
 import '@croct/sdk/facade/trackerFacade';
 import './sdk/index.cjs';
-export { a as Plugin, b as PluginArguments, c as PluginFactory, d as PluginSdk } from './plug-CPsFBGem.cjs';
+export { b as Plugin, c as PluginArguments, a as PluginFactory, d as PluginSdk, i as isReservedPluginName } from './plug-CIEbOxqZ.cjs';
 import '@croct/sdk/facade/userFacade';
 import '@croct/sdk/facade/sessionFacade';
 import '@croct/sdk/tab';

package/plugin.d.ts

@@ -2,7 +2,7 @@ import '@croct/sdk/token';
 import '@croct/sdk/facade/evaluatorFacade';
 import '@croct/sdk/facade/trackerFacade';
 import './sdk/index.js';
-export { a as Plugin, b as PluginArguments, c as PluginFactory, d as PluginSdk } from './plug-aoj2L27K.js';
+export { b as Plugin, c as PluginArguments, a as PluginFactory, d as PluginSdk, i as isReservedPluginName } from './plug-DV00uIb1.js';
 import '@croct/sdk/facade/userFacade';
 import '@croct/sdk/facade/sessionFacade';
 import '@croct/sdk/tab';

package/plugin.js

@@ -0,0 +1,24 @@
+const RESERVED_PLUGIN_NAMES = ["__proto__", "constructor", "prototype"];
+function isReservedPluginName(name) {
+  return RESERVED_PLUGIN_NAMES.includes(name);
+}
+var PluginSdk;
+((PluginSdk2) => {
+  function register(name, factory) {
+    if (isReservedPluginName(name)) {
+      throw new Error(`The plugin name "${name}" is reserved and cannot be used.`);
+    }
+    if (typeof window === "undefined") {
+      return;
+    }
+    if (window.croctPlugins === void 0) {
+      window.croctPlugins = {};
+    }
+    window.croctPlugins[name] = factory;
+  }
+  PluginSdk2.register = register;
+})(PluginSdk || (PluginSdk = {}));
+export {
+  PluginSdk,
+  isReservedPluginName
+};

package/plugins/autoTracking/index.d.cts

@@ -1,4 +1,4 @@
-import { a as Plugin, b as PluginArguments } from '../../plug-CPsFBGem.cjs';
+import { b as Plugin, c as PluginArguments } from '../../plug-CIEbOxqZ.cjs';
 import { TrackerFacade } from '@croct/sdk/facade/trackerFacade';
 import { Tab } from '@croct/sdk/tab';
 import '@croct/sdk/facade/sessionFacade';

package/plugins/autoTracking/index.d.ts

@@ -1,4 +1,4 @@
-import { a as Plugin, b as PluginArguments } from '../../plug-aoj2L27K.js';
+import { b as Plugin, c as PluginArguments } from '../../plug-DV00uIb1.js';
 import { TrackerFacade } from '@croct/sdk/facade/trackerFacade';
 import { Tab } from '@croct/sdk/tab';
 import '@croct/sdk/facade/sessionFacade';

package/plugins/globalVariable/index.d.cts

@@ -1,4 +1,4 @@
-import { P as Plug, a as Plugin, b as PluginArguments } from '../../plug-CPsFBGem.cjs';
+import { P as Plug, b as Plugin, c as PluginArguments } from '../../plug-CIEbOxqZ.cjs';
 import '@croct/sdk/facade/sessionFacade';
 import '@croct/sdk/facade/userFacade';
 import '@croct/sdk/facade/trackerFacade';

package/plugins/globalVariable/index.d.ts

@@ -1,4 +1,4 @@
-import { P as Plug, a as Plugin, b as PluginArguments } from '../../plug-aoj2L27K.js';
+import { P as Plug, b as Plugin, c as PluginArguments } from '../../plug-DV00uIb1.js';
 import '@croct/sdk/facade/sessionFacade';
 import '@croct/sdk/facade/userFacade';
 import '@croct/sdk/facade/trackerFacade';

package/plugins/preview/index.d.cts

@@ -1,5 +1,5 @@
 import { Logger } from '@croct/sdk/logging';
-import { a as Plugin, c as PluginFactory } from '../../plug-CPsFBGem.cjs';
+import { b as Plugin, a as PluginFactory } from '../../plug-CIEbOxqZ.cjs';
 import { TokenStore } from '@croct/sdk/token';
 import '@croct/sdk/facade/sessionFacade';
 import '@croct/sdk/facade/userFacade';

package/plugins/preview/index.d.ts

@@ -1,5 +1,5 @@
 import { Logger } from '@croct/sdk/logging';
-import { a as Plugin, c as PluginFactory } from '../../plug-aoj2L27K.js';
+import { b as Plugin, a as PluginFactory } from '../../plug-DV00uIb1.js';
 import { TokenStore } from '@croct/sdk/token';
 import '@croct/sdk/facade/sessionFacade';
 import '@croct/sdk/facade/userFacade';