@cross-deck/node 1.10.0 → 1.10.1

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as BlockVerdict, d as Breadcrumb, e as BreadcrumbCategory, f as BreadcrumbLevel, C as CROSSDECK_API_VERSION, g as CapturedError, h as Contract, i as ContractAppliesTo, j as ContractFailureInput, k as ContractPillar, l as ContractStatus, m as ContractTestRef, n as CrossdeckAuthenticationError, o as CrossdeckConfigurationError, p as CrossdeckContracts, q as CrossdeckError, r as CrossdeckErrorPayload, s as CrossdeckErrorType, t as CrossdeckInternalError, u as CrossdeckNetworkError, v as CrossdeckPermissionError, w as CrossdeckRateLimitError, x as CrossdeckServer, y as CrossdeckServerOptions, z as CrossdeckValidationError, D as DEFAULT_BASE_URL, E as DEFAULT_TIMEOUT_MS, F as Diagnostics, G as EntitlementCacheOptions, H as EntitlementMutationResult, I as EntitlementStore, J as EntitlementsListResponse, K as EntitlementsListener, L as Environment, M as ErrorCaptureConfig, N as ErrorLevel, O as EventProperties, P as ForgetResult, Q as GrantDuration, R as GrantEntitlementInput, S as GroupMembership, T as HeartbeatResponse, U as HttpRequestInfo, V as HttpResponseInfo, W as HttpRetriesConfig, X as IdentifyOptions, Y as IdentityHints, Z as IngestOptions, _ as IngestResponse, $ as OwnerStatusInput, a0 as PublicEntitlement, a1 as PurchaseResult, a2 as RequestOptions, a3 as ResolveInput, a4 as ResolveResult, a5 as RevokeEntitlementInput, a6 as RuntimeHost, a7 as RuntimeInfo, a8 as ServerEvent, a9 as StackFrame, aa as StoredEntitlements, ab as SyncPurchaseInput, ac as makeCrossdeckError } from './crossdeck-server-C4nWPQzH.mjs';
+export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as BlockVerdict, d as Breadcrumb, e as BreadcrumbCategory, f as BreadcrumbLevel, C as CROSSDECK_API_VERSION, g as CapturedError, h as Contract, i as ContractAppliesTo, j as ContractFailureInput, k as ContractPillar, l as ContractStatus, m as ContractTestRef, n as CrossdeckAuthenticationError, o as CrossdeckConfigurationError, p as CrossdeckContracts, q as CrossdeckError, r as CrossdeckErrorPayload, s as CrossdeckErrorType, t as CrossdeckInternalError, u as CrossdeckNetworkError, v as CrossdeckPermissionError, w as CrossdeckRateLimitError, x as CrossdeckServer, y as CrossdeckServerOptions, z as CrossdeckValidationError, D as DEFAULT_BASE_URL, E as DEFAULT_TIMEOUT_MS, F as Diagnostics, G as EntitlementCacheOptions, H as EntitlementMutationResult, I as EntitlementStore, J as EntitlementsListResponse, K as EntitlementsListener, L as Environment, M as ErrorCaptureConfig, N as ErrorLevel, O as EventProperties, P as ForgetResult, Q as GateInput, R as GateVerdict, S as GrantDuration, T as GrantEntitlementInput, U as GroupMembership, V as HeartbeatResponse, W as HttpRequestInfo, X as HttpResponseInfo, Y as HttpRetriesConfig, Z as IdentifyOptions, _ as IdentityHints, $ as IngestOptions, a0 as IngestResponse, a1 as OwnerStatusInput, a2 as PublicEntitlement, a3 as PurchaseResult, a4 as RequestOptions, a5 as ResolveInput, a6 as ResolveResult, a7 as RevokeEntitlementInput, a8 as RuntimeHost, a9 as RuntimeInfo, aa as ServerEvent, ab as StackFrame, ac as StoredEntitlements, ad as SyncPurchaseInput, ae as makeCrossdeckError } from './crossdeck-server-BpBVFC4O.mjs';
 import 'node:events';
 
 /**
@@ -17,7 +17,7 @@ import 'node:events';
  *
  * Do NOT edit by hand — `node scripts/sync-sdk-versions.mjs`.
  */
-declare const SDK_VERSION = "1.10.0";
+declare const SDK_VERSION = "1.10.1";
 declare const SDK_NAME = "@cross-deck/node";
 
 /**
@@ -501,7 +501,7 @@ declare function scrubPiiFromProperties(properties: Record<string, unknown>): Re
  *   - `sdk.no_durable_store`
  *   - `sdk.super_property_registered`
  */
-type DebugSignal = "sdk.configured" | "sdk.first_event_sent" | "sdk.invalid_key" | "sdk.no_identity" | "sdk.entitlement_cache_used" | "sdk.entitlement_cache_warm" | "sdk.entitlement_cache_stale" | "sdk.entitlement_store_recovered" | "sdk.no_durable_store" | "sdk.purchase_evidence_sent" | "sdk.environment_mismatch" | "sdk.sensitive_property_warning" | "sdk.property_coerced" | "sdk.flush_retry_scheduled" | "sdk.flush_permanent_failure" | "sdk.parked" | "sdk.flush_on_exit_started" | "sdk.flush_on_exit_completed" | "sdk.webhook_verified" | "sdk.runtime_detected" | "sdk.super_property_registered" | "sdk.boot_heartbeat_failed" | "sdk.resolve_missing_identity" | "sdk.resolve_failed" | "sdk.owner_status_missing_identity" | "sdk.owner_status_failed";
+type DebugSignal = "sdk.configured" | "sdk.first_event_sent" | "sdk.invalid_key" | "sdk.no_identity" | "sdk.entitlement_cache_used" | "sdk.entitlement_cache_warm" | "sdk.entitlement_cache_stale" | "sdk.entitlement_store_recovered" | "sdk.no_durable_store" | "sdk.purchase_evidence_sent" | "sdk.environment_mismatch" | "sdk.sensitive_property_warning" | "sdk.property_coerced" | "sdk.flush_retry_scheduled" | "sdk.flush_permanent_failure" | "sdk.parked" | "sdk.flush_on_exit_started" | "sdk.flush_on_exit_completed" | "sdk.webhook_verified" | "sdk.runtime_detected" | "sdk.super_property_registered" | "sdk.boot_heartbeat_failed" | "sdk.resolve_missing_identity" | "sdk.resolve_failed" | "sdk.owner_status_missing_identity" | "sdk.owner_status_failed" | "sdk.gate_missing_input" | "sdk.gate_failed";
 interface DebugContext {
     [key: string]: unknown;
 }

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as BlockVerdict, d as Breadcrumb, e as BreadcrumbCategory, f as BreadcrumbLevel, C as CROSSDECK_API_VERSION, g as CapturedError, h as Contract, i as ContractAppliesTo, j as ContractFailureInput, k as ContractPillar, l as ContractStatus, m as ContractTestRef, n as CrossdeckAuthenticationError, o as CrossdeckConfigurationError, p as CrossdeckContracts, q as CrossdeckError, r as CrossdeckErrorPayload, s as CrossdeckErrorType, t as CrossdeckInternalError, u as CrossdeckNetworkError, v as CrossdeckPermissionError, w as CrossdeckRateLimitError, x as CrossdeckServer, y as CrossdeckServerOptions, z as CrossdeckValidationError, D as DEFAULT_BASE_URL, E as DEFAULT_TIMEOUT_MS, F as Diagnostics, G as EntitlementCacheOptions, H as EntitlementMutationResult, I as EntitlementStore, J as EntitlementsListResponse, K as EntitlementsListener, L as Environment, M as ErrorCaptureConfig, N as ErrorLevel, O as EventProperties, P as ForgetResult, Q as GrantDuration, R as GrantEntitlementInput, S as GroupMembership, T as HeartbeatResponse, U as HttpRequestInfo, V as HttpResponseInfo, W as HttpRetriesConfig, X as IdentifyOptions, Y as IdentityHints, Z as IngestOptions, _ as IngestResponse, $ as OwnerStatusInput, a0 as PublicEntitlement, a1 as PurchaseResult, a2 as RequestOptions, a3 as ResolveInput, a4 as ResolveResult, a5 as RevokeEntitlementInput, a6 as RuntimeHost, a7 as RuntimeInfo, a8 as ServerEvent, a9 as StackFrame, aa as StoredEntitlements, ab as SyncPurchaseInput, ac as makeCrossdeckError } from './crossdeck-server-C4nWPQzH.js';
+export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as BlockVerdict, d as Breadcrumb, e as BreadcrumbCategory, f as BreadcrumbLevel, C as CROSSDECK_API_VERSION, g as CapturedError, h as Contract, i as ContractAppliesTo, j as ContractFailureInput, k as ContractPillar, l as ContractStatus, m as ContractTestRef, n as CrossdeckAuthenticationError, o as CrossdeckConfigurationError, p as CrossdeckContracts, q as CrossdeckError, r as CrossdeckErrorPayload, s as CrossdeckErrorType, t as CrossdeckInternalError, u as CrossdeckNetworkError, v as CrossdeckPermissionError, w as CrossdeckRateLimitError, x as CrossdeckServer, y as CrossdeckServerOptions, z as CrossdeckValidationError, D as DEFAULT_BASE_URL, E as DEFAULT_TIMEOUT_MS, F as Diagnostics, G as EntitlementCacheOptions, H as EntitlementMutationResult, I as EntitlementStore, J as EntitlementsListResponse, K as EntitlementsListener, L as Environment, M as ErrorCaptureConfig, N as ErrorLevel, O as EventProperties, P as ForgetResult, Q as GateInput, R as GateVerdict, S as GrantDuration, T as GrantEntitlementInput, U as GroupMembership, V as HeartbeatResponse, W as HttpRequestInfo, X as HttpResponseInfo, Y as HttpRetriesConfig, Z as IdentifyOptions, _ as IdentityHints, $ as IngestOptions, a0 as IngestResponse, a1 as OwnerStatusInput, a2 as PublicEntitlement, a3 as PurchaseResult, a4 as RequestOptions, a5 as ResolveInput, a6 as ResolveResult, a7 as RevokeEntitlementInput, a8 as RuntimeHost, a9 as RuntimeInfo, aa as ServerEvent, ab as StackFrame, ac as StoredEntitlements, ad as SyncPurchaseInput, ae as makeCrossdeckError } from './crossdeck-server-BpBVFC4O.js';
 import 'node:events';
 
 /**
@@ -17,7 +17,7 @@ import 'node:events';
  *
  * Do NOT edit by hand — `node scripts/sync-sdk-versions.mjs`.
  */
-declare const SDK_VERSION = "1.10.0";
+declare const SDK_VERSION = "1.10.1";
 declare const SDK_NAME = "@cross-deck/node";
 
 /**
@@ -501,7 +501,7 @@ declare function scrubPiiFromProperties(properties: Record<string, unknown>): Re
  *   - `sdk.no_durable_store`
  *   - `sdk.super_property_registered`
  */
-type DebugSignal = "sdk.configured" | "sdk.first_event_sent" | "sdk.invalid_key" | "sdk.no_identity" | "sdk.entitlement_cache_used" | "sdk.entitlement_cache_warm" | "sdk.entitlement_cache_stale" | "sdk.entitlement_store_recovered" | "sdk.no_durable_store" | "sdk.purchase_evidence_sent" | "sdk.environment_mismatch" | "sdk.sensitive_property_warning" | "sdk.property_coerced" | "sdk.flush_retry_scheduled" | "sdk.flush_permanent_failure" | "sdk.parked" | "sdk.flush_on_exit_started" | "sdk.flush_on_exit_completed" | "sdk.webhook_verified" | "sdk.runtime_detected" | "sdk.super_property_registered" | "sdk.boot_heartbeat_failed" | "sdk.resolve_missing_identity" | "sdk.resolve_failed" | "sdk.owner_status_missing_identity" | "sdk.owner_status_failed";
+type DebugSignal = "sdk.configured" | "sdk.first_event_sent" | "sdk.invalid_key" | "sdk.no_identity" | "sdk.entitlement_cache_used" | "sdk.entitlement_cache_warm" | "sdk.entitlement_cache_stale" | "sdk.entitlement_store_recovered" | "sdk.no_durable_store" | "sdk.purchase_evidence_sent" | "sdk.environment_mismatch" | "sdk.sensitive_property_warning" | "sdk.property_coerced" | "sdk.flush_retry_scheduled" | "sdk.flush_permanent_failure" | "sdk.parked" | "sdk.flush_on_exit_started" | "sdk.flush_on_exit_completed" | "sdk.webhook_verified" | "sdk.runtime_detected" | "sdk.super_property_registered" | "sdk.boot_heartbeat_failed" | "sdk.resolve_missing_identity" | "sdk.resolve_failed" | "sdk.owner_status_missing_identity" | "sdk.owner_status_failed" | "sdk.gate_missing_input" | "sdk.gate_failed";
 interface DebugContext {
     [key: string]: unknown;
 }

package/dist/index.mjs

@@ -329,7 +329,7 @@ function byteLength(s) {
 import * as https from "https";
 
 // src/_version.ts
-var SDK_VERSION = "1.10.0";
+var SDK_VERSION = "1.10.1";
 var SDK_NAME = "@cross-deck/node";
 
 // src/_diagnostic-telemetry.ts
@@ -3127,10 +3127,10 @@ var CrossdeckServer = class extends EventEmitter {
       anonymousId: input?.anonymousId ?? null,
       identityError: null
     });
-    if (!input || !input.anonymousId && !(input.userId && input.idToken)) {
+    if (!input || !input.anonymousId && !input.userId) {
       this.debug.emit(
         "sdk.resolve_missing_identity",
-        "resolve() needs anonymousId OR (userId + idToken); returning fail-open blocked:false."
+        "resolve() needs an anonymousId or a userId; returning fail-open blocked:false."
       );
       return failOpen();
     }
@@ -3215,6 +3215,60 @@ var CrossdeckServer = class extends EventEmitter {
       return { blocked: false, blockReason: null, blockedKey: null, degraded: true };
     }
   }
+  /**
+   * The brand-new-signup door (§3 of the Blocking developer guide). Block a user Crossdeck
+   * has **never seen** — at the instant they sign up — by the two strings you have then:
+   * their `email` and `ip`. There's no identity to ride yet, so {@link resolve} can't catch
+   * them; this matches `email` / domain / `ip` blocklist rules directly. Call it BEFORE you
+   * create the account; on `action: "block"`, reject the signup.
+   *
+   * **Fail-open by contract** — never throws, never blocks on uncertainty: any error →
+   * `{ action: "allow", allow: true, degraded: true }`, so a glitch can't reject a real signup.
+   *
+   * @experimental Preview — Crossdeck Trust ships with Crossdeck v2.
+   */
+  async gate(input, options) {
+    const failOpen = () => ({
+      action: "allow",
+      allow: true,
+      blockReason: null,
+      blockedKey: null,
+      degraded: true
+    });
+    if (!input || !input.email && !input.ip && !input.domain) {
+      this.debug.emit(
+        "sdk.gate_missing_input",
+        "gate() needs at least one of email / ip / domain; returning fail-open allow:true."
+      );
+      return failOpen();
+    }
+    try {
+      const raw = await this.http.request("POST", "/trust/gate", {
+        body: {
+          ...input.email ? { email: input.email } : {},
+          ...input.ip ? { ip: input.ip } : {},
+          ...input.domain ? { domain: input.domain } : {},
+          ...input.fingerprint ? { fingerprint: input.fingerprint } : {}
+        },
+        signal: options?.signal,
+        timeoutMs: options?.timeoutMs
+      });
+      const action = raw.action === "block" || raw.action === "review" ? raw.action : "allow";
+      return {
+        action,
+        allow: raw.allow !== false && action !== "block",
+        blockReason: raw.blockReason ?? null,
+        blockedKey: raw.blockedKey ?? null
+      };
+    } catch (err) {
+      this.debug.emit(
+        "sdk.gate_failed",
+        `gate() failed \u2014 fail-open allow:true. ${err instanceof Error ? err.message : String(err)}`,
+        { error: err instanceof Error ? err.message : String(err) }
+      );
+      return failOpen();
+    }
+  }
   /**
    * Synchronous entitlement check. Returns `true` iff the customer
    * has the entitlement AND the cache entry is fresh (within
@@ -4662,8 +4716,8 @@ function normaliseSecrets(input) {
 }
 
 // src/_contracts-bundled.ts
-var BUNDLED_IN = "@cross-deck/node@1.10.0";
-var SDK_VERSION2 = "1.10.0";
+var BUNDLED_IN = "@cross-deck/node@1.10.1";
+var SDK_VERSION2 = "1.10.1";
 var BUNDLED_CONTRACTS = Object.freeze([
   {
     "id": "contract-failed-payload-schema-lock",
@@ -4785,7 +4839,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
       "legal/security/index.html#diagnostic",
       "legal/sdk-data/index.html#b-diagnostic"
     ],
-    "bundledIn": "@cross-deck/node@1.10.0"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "documentation-honesty",
@@ -4817,7 +4871,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 7.1",
-    "bundledIn": "@cross-deck/node@1.10.0"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "error-envelope-shape",
@@ -4856,7 +4910,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 8 (codifies existing contract)",
-    "bundledIn": "@cross-deck/node@1.10.0"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "flush-interval-parity",
@@ -4901,7 +4955,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.3",
-    "bundledIn": "@cross-deck/node@1.10.0"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "idempotency-key-deterministic",
@@ -5006,7 +5060,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 2.2.a + 2.2.b + 2.2.c",
-    "bundledIn": "@cross-deck/node@1.10.0"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "invalid-input-rejected-natively",
@@ -5062,7 +5116,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-06-11",
     "firstRegisteredIn": "swift trap-on-input class fix \u2014 first machine-tested Swift release",
-    "bundledIn": "@cross-deck/node@1.10.0"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "node-pii-scrubber",
@@ -5101,7 +5155,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.1",
-    "bundledIn": "@cross-deck/node@1.10.0"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "node-shutdown-awaits-flush",
@@ -5134,7 +5188,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 5.4",
-    "bundledIn": "@cross-deck/node@1.10.0"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "sdk-error-codes-catalogue",
@@ -5179,7 +5233,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 6.2",
-    "bundledIn": "@cross-deck/node@1.10.0"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "sync-purchases-funnel-parity",
@@ -5212,7 +5266,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.5",
-    "bundledIn": "@cross-deck/node@1.10.0"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "verifier-timestamp-mandatory",
@@ -5266,7 +5320,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 7.2",
-    "bundledIn": "@cross-deck/node@1.10.0"
+    "bundledIn": "@cross-deck/node@1.10.1"
   }
 ]);