@cross-deck/node 1.5.0 → 1.5.1

package/dist/index.cjs

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,6 +17,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/index.ts
@@ -364,10 +374,85 @@ function byteLength(s) {
   return s.length * 4;
 }
 
+// src/_diagnostic-telemetry.ts
+var https = __toESM(require("https"));
+
 // src/_version.ts
-var SDK_VERSION = "1.4.2";
+var SDK_VERSION = "1.5.1";
 var SDK_NAME = "@cross-deck/node";
 
+// src/_diagnostic-telemetry.ts
+var DIAGNOSTIC_TELEMETRY_ENDPOINT = "https://api.cross-deck.com/v1/sdk/diagnostic";
+var DIAGNOSTIC_TELEMETRY_PUBLISHABLE_KEY = "cd_pub_RELIABILITY_PLACEHOLDER_TO_BE_PROVISIONED";
+function isDiagnosticTelemetryEnabled() {
+  return !DIAGNOSTIC_TELEMETRY_PUBLISHABLE_KEY.startsWith(
+    "cd_pub_RELIABILITY_PLACEHOLDER"
+  );
+}
+var DIAGNOSTIC_TELEMETRY_ALLOWED_KEYS = /* @__PURE__ */ new Set([
+  "contract_id",
+  "sdk_version",
+  "sdk_platform",
+  "failure_reason",
+  "run_context",
+  "run_id",
+  "test_file",
+  "test_name",
+  "device_class"
+]);
+function filterDiagnosticPayload(payload) {
+  const filtered = {};
+  for (const [k, v] of Object.entries(payload)) {
+    if (DIAGNOSTIC_TELEMETRY_ALLOWED_KEYS.has(k) && typeof v === "string") {
+      filtered[k] = v;
+    }
+  }
+  return filtered;
+}
+function sendDiagnosticTelemetry(payload) {
+  if (!isDiagnosticTelemetryEnabled()) return;
+  const filtered = filterDiagnosticPayload(payload);
+  if (Object.keys(filtered).length === 0) return;
+  const body = JSON.stringify(filtered);
+  let parsed;
+  try {
+    parsed = new URL(DIAGNOSTIC_TELEMETRY_ENDPOINT);
+  } catch {
+    return;
+  }
+  try {
+    const req = https.request({
+      method: "POST",
+      hostname: parsed.hostname,
+      port: parsed.port || 443,
+      path: parsed.pathname + parsed.search,
+      // Short timeout — reliability telemetry must never stall the
+      // host server. A failed POST is acceptable; a hung POST is not.
+      timeout: 5e3,
+      headers: {
+        "Content-Type": "application/json",
+        "Content-Length": Buffer.byteLength(body, "utf8").toString(),
+        Authorization: `Bearer ${DIAGNOSTIC_TELEMETRY_PUBLISHABLE_KEY}`,
+        "Crossdeck-Sdk-Version": `${SDK_NAME}@${SDK_VERSION}`
+      }
+    });
+    req.on("error", () => {
+    });
+    req.on("timeout", () => {
+      try {
+        req.destroy();
+      } catch {
+      }
+    });
+    req.on("response", (res) => {
+      res.resume();
+    });
+    req.write(body);
+    req.end();
+  } catch {
+  }
+}
+
 // src/http.ts
 var DEFAULT_BASE_URL = "https://api.cross-deck.com/v1";
 var DEFAULT_TIMEOUT_MS = 15e3;
@@ -3007,14 +3092,17 @@ var CrossdeckServer = class extends import_node_events.EventEmitter {
    *     auto-fill, the event would be rejected at queue enqueue.
    */
   /**
-   * Emit `crossdeck.contract_failed` with the canonical property
-   * shape. Same wire shape every Crossdeck SDK uses for contract
-   * verification telemetry — see `contracts/README.md` for the
-   * full pattern. No new endpoint, no special path; goes through
-   * the standard server-side `track()` pipeline.
+   * Emit `crossdeck.contract_failed` to the Crossdeck reliability
+   * endpoint — single-fire, one-way, never visible in the customer's
+   * dashboard. Goes over a dedicated HTTP path with the reliability
+   * publishable key embedded at build time; the customer's track()
+   * pipeline never carries `crossdeck.*` events. This is the
+   * independent-controller flow described in Privacy Policy §6
+   * ("Flow B"). The wire shape is fixed by the schema-lock contract
+   * at `contracts/diagnostics/contract-failed-payload-schema-lock.json`.
    */
   reportContractFailure(input) {
-    const props = {
+    const payload = {
       contract_id: input.contractId,
       sdk_version: SDK_VERSION,
       sdk_platform: "node",
@@ -3023,20 +3111,13 @@ var CrossdeckServer = class extends import_node_events.EventEmitter {
       run_id: input.runId
     };
     if (input.testRef) {
-      props.test_file = input.testRef.file;
-      props.test_name = input.testRef.name;
+      payload.test_file = input.testRef.file;
+      payload.test_name = input.testRef.name;
     }
-    if (input.extra) {
-      for (const [k, v] of Object.entries(input.extra)) {
-        if (props[k] === void 0) props[k] = v;
-      }
+    if (input.deviceClass) {
+      payload.device_class = input.deviceClass;
     }
-    this.track({
-      name: "crossdeck.contract_failed",
-      properties: props
-      // No identity hint — these events are about the SDK / dogfood
-      // run itself, not a specific end-user.
-    });
+    sendDiagnosticTelemetry(payload);
   }
   track(event) {
     if (!event.name) {
@@ -4368,9 +4449,131 @@ function normaliseSecrets(input) {
 }
 
 // src/_contracts-bundled.ts
-var BUNDLED_IN = "@cross-deck/node@1.5.0";
-var SDK_VERSION2 = "1.5.0";
+var BUNDLED_IN = "@cross-deck/node@1.5.1";
+var SDK_VERSION2 = "1.5.1";
 var BUNDLED_CONTRACTS = Object.freeze([
+  {
+    "id": "contract-failed-payload-schema-lock",
+    "pillar": "diagnostics",
+    "status": "enforced",
+    "claim": "The `crossdeck.contract_failed` event payload contains ONLY the named diagnostic fields and never any end-user personal data. The wire shape is fixed \u2014 adding a new field requires (1) a pull request that updates this contract's `allowedFields` set, (2) a Privacy Policy \xA76 amendment, and (3) the Customer Disclosure Template / SDK Data Collection Reference \xA7B updates. Per-SDK assertion tests enforce the field set on every release. The `verification_phase` field is a categorical bucket \u2014 values are restricted to `boot` (the SDK self-test ran on Crossdeck.start) or `hot_path` (a verifier observed a real customer-triggered operation). The categorical nature is what preserves the diagnostic-only-not-personal classification. This is the structural guarantee that backs the independent-controller lawful basis in the Privacy Policy: the payload remains diagnostic-only, not personal, so the legitimate-interest analysis stays valid as the SDK evolves.",
+    "appliesTo": [
+      "web",
+      "node",
+      "swift",
+      "android",
+      "react-native"
+    ],
+    "allowedFields": {
+      "required": [
+        "contract_id",
+        "sdk_version",
+        "sdk_platform",
+        "failure_reason",
+        "run_context",
+        "run_id"
+      ],
+      "optional": [
+        "test_file",
+        "test_name",
+        "device_class",
+        "verification_phase"
+      ],
+      "forbidden": [
+        "anonymousId",
+        "developerUserId",
+        "crossdeckCustomerId",
+        "email",
+        "ip",
+        "user_agent",
+        "message",
+        "stack",
+        "stack_trace",
+        "frames",
+        "exception_message",
+        "url",
+        "path",
+        "screen",
+        "title",
+        "label",
+        "text",
+        "ariaLabel",
+        "accessibilityLabel",
+        "contentDescription",
+        "session_id",
+        "sessionId"
+      ]
+    },
+    "transport": "Telemetry is single-fire to the Crossdeck reliability endpoint only \u2014 NOT the customer's appId. The customer's track() pipeline never carries `crossdeck.*` events; the customer's dashboard never shows individual contract failures. Operational telemetry flows one-way to the Crossdeck operations team for SDK reliability purposes (legitimate interest, independent-controller flow per Privacy Policy \xA76). The reliability endpoint is hardcoded at SDK build time; the publishable key for the reliability project is embedded as a constant and rejects writes that don't match the schema.",
+    "codeRef": [
+      "sdks/web/src/crossdeck.ts",
+      "sdks/node/src/crossdeck-server.ts",
+      "sdks/swift/Sources/Crossdeck/Crossdeck.swift",
+      "sdks/swift/Sources/Crossdeck/_DiagnosticTelemetry.swift",
+      "sdks/android/crossdeck/src/main/kotlin/com/crossdeck/Crossdeck.kt",
+      "sdks/android/crossdeck/src/main/kotlin/com/crossdeck/_DiagnosticTelemetry.kt",
+      "sdks/react-native/src/crossdeck.ts",
+      "backend/src/api/v1-sdk-diagnostic.ts",
+      "sdks/web/src/_diagnostic-telemetry.ts",
+      "sdks/node/src/_diagnostic-telemetry.ts",
+      "sdks/react-native/src/_diagnostic-telemetry.ts"
+    ],
+    "testRef": [
+      {
+        "file": "sdks/web/tests/contract-failed-schema-lock.test.ts",
+        "name": "reportContractFailure payload conforms to schema-lock"
+      },
+      {
+        "file": "sdks/node/tests/contract-failed-schema-lock.test.ts",
+        "name": "reportContractFailure payload conforms to schema-lock"
+      },
+      {
+        "file": "sdks/swift/Tests/CrossdeckTests/ContractFailedSchemaLockTests.swift",
+        "name": "test_reportContractFailure_payloadFieldsAreInAllowList"
+      },
+      {
+        "file": "sdks/swift/Tests/CrossdeckTests/ContractFailedSchemaLockTests.swift",
+        "name": "test_reportContractFailure_doesNotEnterCustomerTrackPipeline"
+      },
+      {
+        "file": "sdks/android/crossdeck/src/test/kotlin/com/crossdeck/ContractFailedSchemaLockTest.kt",
+        "name": "reportContractFailure payload conforms to schema-lock"
+      },
+      {
+        "file": "sdks/android/crossdeck/src/test/kotlin/com/crossdeck/ContractFailedSchemaLockTest.kt",
+        "name": "reportContractFailure does not enter customer track pipeline"
+      },
+      {
+        "file": "sdks/react-native/tests/contract-failed-schema-lock.test.ts",
+        "name": "reportContractFailure payload conforms to schema-lock"
+      },
+      {
+        "file": "backend/tests/unit/v1-sdk-diagnostic.test.ts",
+        "name": "forbidden fields are enumerated in the schema-lock contract"
+      },
+      {
+        "file": "backend/tests/unit/v1-sdk-diagnostic.test.ts",
+        "name": "required fields are enumerated in the schema-lock contract"
+      },
+      {
+        "file": "backend/tests/unit/v1-sdk-diagnostic.test.ts",
+        "name": "regression guard: never returns a raw IP"
+      },
+      {
+        "file": "backend/tests/unit/v1-sdk-diagnostic.test.ts",
+        "name": "verification_phase is in the optional field set"
+      }
+    ],
+    "registeredAt": "2026-05-27",
+    "firstRegisteredIn": "Diagnostic telemetry single-fire + schema-lock \u2014 independent-controller flow",
+    "privacyReferences": [
+      "legal/privacy/index.html#sdk-diagnostic",
+      "legal/customer-disclosure/index.html#flow-b",
+      "legal/security/index.html#diagnostic",
+      "legal/sdk-data/index.html#b-diagnostic"
+    ],
+    "bundledIn": "@cross-deck/node@1.5.1"
+  },
   {
     "id": "documentation-honesty",
     "pillar": "webhooks",
@@ -4401,7 +4604,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 7.1",
-    "bundledIn": "@cross-deck/node@1.5.0"
+    "bundledIn": "@cross-deck/node@1.5.1"
   },
   {
     "id": "error-envelope-shape",
@@ -4440,7 +4643,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 8 (codifies existing contract)",
-    "bundledIn": "@cross-deck/node@1.5.0"
+    "bundledIn": "@cross-deck/node@1.5.1"
   },
   {
     "id": "flush-interval-parity",
@@ -4485,7 +4688,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.3",
-    "bundledIn": "@cross-deck/node@1.5.0"
+    "bundledIn": "@cross-deck/node@1.5.1"
   },
   {
     "id": "idempotency-key-deterministic",
@@ -4590,7 +4793,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 2.2.a + 2.2.b + 2.2.c",
-    "bundledIn": "@cross-deck/node@1.5.0"
+    "bundledIn": "@cross-deck/node@1.5.1"
   },
   {
     "id": "node-pii-scrubber",
@@ -4629,7 +4832,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.1",
-    "bundledIn": "@cross-deck/node@1.5.0"
+    "bundledIn": "@cross-deck/node@1.5.1"
   },
   {
     "id": "node-shutdown-awaits-flush",
@@ -4662,7 +4865,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 5.4",
-    "bundledIn": "@cross-deck/node@1.5.0"
+    "bundledIn": "@cross-deck/node@1.5.1"
   },
   {
     "id": "sdk-error-codes-catalogue",
@@ -4702,7 +4905,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 6.2",
-    "bundledIn": "@cross-deck/node@1.5.0"
+    "bundledIn": "@cross-deck/node@1.5.1"
   },
   {
     "id": "sync-purchases-funnel-parity",
@@ -4735,7 +4938,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.5",
-    "bundledIn": "@cross-deck/node@1.5.0"
+    "bundledIn": "@cross-deck/node@1.5.1"
   },
   {
     "id": "verifier-timestamp-mandatory",
@@ -4789,7 +4992,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 7.2",
-    "bundledIn": "@cross-deck/node@1.5.0"
+    "bundledIn": "@cross-deck/node@1.5.1"
   }
 ]);