@cross-deck/node 1.5.3 → 1.7.0

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as Breadcrumb, d as BreadcrumbCategory, e as BreadcrumbLevel, C as CROSSDECK_API_VERSION, f as CapturedError, g as Contract, h as ContractAppliesTo, i as ContractFailureInput, j as ContractPillar, k as ContractStatus, l as ContractTestRef, m as CrossdeckAuthenticationError, n as CrossdeckConfigurationError, o as CrossdeckContracts, p as CrossdeckError, q as CrossdeckErrorPayload, r as CrossdeckErrorType, s as CrossdeckInternalError, t as CrossdeckNetworkError, u as CrossdeckPermissionError, v as CrossdeckRateLimitError, w as CrossdeckServer, x as CrossdeckServerOptions, y as CrossdeckValidationError, D as DEFAULT_BASE_URL, z as DEFAULT_TIMEOUT_MS, E as Diagnostics, F as EntitlementCacheOptions, G as EntitlementMutationResult, H as EntitlementStore, I as EntitlementsListResponse, J as EntitlementsListener, K as Environment, L as ErrorCaptureConfig, M as ErrorLevel, N as EventProperties, O as ForgetResult, P as GrantDuration, Q as GrantEntitlementInput, R as GroupMembership, S as HeartbeatResponse, T as HttpRequestInfo, U as HttpResponseInfo, V as HttpRetriesConfig, W as IdentifyOptions, X as IdentityHints, Y as IngestOptions, Z as IngestResponse, _ as PublicEntitlement, $ as PurchaseResult, a0 as RequestOptions, a1 as RevokeEntitlementInput, a2 as RuntimeHost, a3 as RuntimeInfo, a4 as ServerEvent, a5 as StackFrame, a6 as StoredEntitlements, a7 as SyncPurchaseInput, a8 as makeCrossdeckError } from './crossdeck-server-BFTTwCEP.mjs';
+export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as Breadcrumb, d as BreadcrumbCategory, e as BreadcrumbLevel, C as CROSSDECK_API_VERSION, f as CapturedError, g as Contract, h as ContractAppliesTo, i as ContractFailureInput, j as ContractPillar, k as ContractStatus, l as ContractTestRef, m as CrossdeckAuthenticationError, n as CrossdeckConfigurationError, o as CrossdeckContracts, p as CrossdeckError, q as CrossdeckErrorPayload, r as CrossdeckErrorType, s as CrossdeckInternalError, t as CrossdeckNetworkError, u as CrossdeckPermissionError, v as CrossdeckRateLimitError, w as CrossdeckServer, x as CrossdeckServerOptions, y as CrossdeckValidationError, D as DEFAULT_BASE_URL, z as DEFAULT_TIMEOUT_MS, E as Diagnostics, F as EntitlementCacheOptions, G as EntitlementMutationResult, H as EntitlementStore, I as EntitlementsListResponse, J as EntitlementsListener, K as Environment, L as ErrorCaptureConfig, M as ErrorLevel, N as EventProperties, O as ForgetResult, P as GrantDuration, Q as GrantEntitlementInput, R as GroupMembership, S as HeartbeatResponse, T as HttpRequestInfo, U as HttpResponseInfo, V as HttpRetriesConfig, W as IdentifyOptions, X as IdentityHints, Y as IngestOptions, Z as IngestResponse, _ as PublicEntitlement, $ as PurchaseResult, a0 as RequestOptions, a1 as RevokeEntitlementInput, a2 as RuntimeHost, a3 as RuntimeInfo, a4 as ServerEvent, a5 as StackFrame, a6 as StoredEntitlements, a7 as SyncPurchaseInput, a8 as makeCrossdeckError } from './crossdeck-server-DYawt4eT.mjs';
 import 'node:events';
 
 /**
@@ -17,7 +17,7 @@ import 'node:events';
  *
  * Do NOT edit by hand — `node scripts/sync-sdk-versions.mjs`.
  */
-declare const SDK_VERSION = "1.5.3";
+declare const SDK_VERSION = "1.7.0";
 declare const SDK_NAME = "@cross-deck/node";
 
 /**
@@ -51,7 +51,7 @@ interface ErrorCodeEntry {
     /** The string thrown as `CrossdeckError.code`. */
     code: string;
     /** Broad category — `CrossdeckError.type`. */
-    type: "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "internal_error" | "network_error" | "configuration_error";
+    type: "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "version_error" | "internal_error" | "network_error" | "configuration_error";
     /** One-sentence description. Surfaced verbatim in dashboards. */
     description: string;
     /** What the developer should do. Imperative phrasing. */
@@ -271,6 +271,12 @@ declare const _CROSSDECK_ERROR_CODES: readonly [{
     readonly description: "A field is present but the value failed validation.";
     readonly resolution: "Read error.message for the field + reason. SDK-managed call sites should never emit this — file a bug if you do.";
     readonly retryable: false;
+}, {
+    readonly code: "sdk_version_unsupported";
+    readonly type: "version_error";
+    readonly description: "HTTP 426 — your installed SDK sends an event format the server no longer accepts. The data is good; only the wire dialect is too old. The SDK PARKS automatically: events are held in memory and deliver once you upgrade and restart.";
+    readonly resolution: "Update @cross-deck/node to at least the version in error.minVersion and restart — the held queue backfills. See https://cross-deck.com/docs/sdk-event-durability/.";
+    readonly retryable: false;
 }];
 /**
  * Literal union of every code documented in `CROSSDECK_ERROR_CODES`.
@@ -495,7 +501,7 @@ declare function scrubPiiFromProperties(properties: Record<string, unknown>): Re
  *   - `sdk.no_durable_store`
  *   - `sdk.super_property_registered`
  */
-type DebugSignal = "sdk.configured" | "sdk.first_event_sent" | "sdk.invalid_key" | "sdk.no_identity" | "sdk.entitlement_cache_used" | "sdk.entitlement_cache_warm" | "sdk.entitlement_cache_stale" | "sdk.entitlement_store_recovered" | "sdk.no_durable_store" | "sdk.purchase_evidence_sent" | "sdk.environment_mismatch" | "sdk.sensitive_property_warning" | "sdk.property_coerced" | "sdk.flush_retry_scheduled" | "sdk.flush_permanent_failure" | "sdk.flush_on_exit_started" | "sdk.flush_on_exit_completed" | "sdk.webhook_verified" | "sdk.runtime_detected" | "sdk.super_property_registered" | "sdk.boot_heartbeat_failed";
+type DebugSignal = "sdk.configured" | "sdk.first_event_sent" | "sdk.invalid_key" | "sdk.no_identity" | "sdk.entitlement_cache_used" | "sdk.entitlement_cache_warm" | "sdk.entitlement_cache_stale" | "sdk.entitlement_store_recovered" | "sdk.no_durable_store" | "sdk.purchase_evidence_sent" | "sdk.environment_mismatch" | "sdk.sensitive_property_warning" | "sdk.property_coerced" | "sdk.flush_retry_scheduled" | "sdk.flush_permanent_failure" | "sdk.parked" | "sdk.flush_on_exit_started" | "sdk.flush_on_exit_completed" | "sdk.webhook_verified" | "sdk.runtime_detected" | "sdk.super_property_registered" | "sdk.boot_heartbeat_failed";
 interface DebugContext {
     [key: string]: unknown;
 }

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as Breadcrumb, d as BreadcrumbCategory, e as BreadcrumbLevel, C as CROSSDECK_API_VERSION, f as CapturedError, g as Contract, h as ContractAppliesTo, i as ContractFailureInput, j as ContractPillar, k as ContractStatus, l as ContractTestRef, m as CrossdeckAuthenticationError, n as CrossdeckConfigurationError, o as CrossdeckContracts, p as CrossdeckError, q as CrossdeckErrorPayload, r as CrossdeckErrorType, s as CrossdeckInternalError, t as CrossdeckNetworkError, u as CrossdeckPermissionError, v as CrossdeckRateLimitError, w as CrossdeckServer, x as CrossdeckServerOptions, y as CrossdeckValidationError, D as DEFAULT_BASE_URL, z as DEFAULT_TIMEOUT_MS, E as Diagnostics, F as EntitlementCacheOptions, G as EntitlementMutationResult, H as EntitlementStore, I as EntitlementsListResponse, J as EntitlementsListener, K as Environment, L as ErrorCaptureConfig, M as ErrorLevel, N as EventProperties, O as ForgetResult, P as GrantDuration, Q as GrantEntitlementInput, R as GroupMembership, S as HeartbeatResponse, T as HttpRequestInfo, U as HttpResponseInfo, V as HttpRetriesConfig, W as IdentifyOptions, X as IdentityHints, Y as IngestOptions, Z as IngestResponse, _ as PublicEntitlement, $ as PurchaseResult, a0 as RequestOptions, a1 as RevokeEntitlementInput, a2 as RuntimeHost, a3 as RuntimeInfo, a4 as ServerEvent, a5 as StackFrame, a6 as StoredEntitlements, a7 as SyncPurchaseInput, a8 as makeCrossdeckError } from './crossdeck-server-BFTTwCEP.js';
+export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as Breadcrumb, d as BreadcrumbCategory, e as BreadcrumbLevel, C as CROSSDECK_API_VERSION, f as CapturedError, g as Contract, h as ContractAppliesTo, i as ContractFailureInput, j as ContractPillar, k as ContractStatus, l as ContractTestRef, m as CrossdeckAuthenticationError, n as CrossdeckConfigurationError, o as CrossdeckContracts, p as CrossdeckError, q as CrossdeckErrorPayload, r as CrossdeckErrorType, s as CrossdeckInternalError, t as CrossdeckNetworkError, u as CrossdeckPermissionError, v as CrossdeckRateLimitError, w as CrossdeckServer, x as CrossdeckServerOptions, y as CrossdeckValidationError, D as DEFAULT_BASE_URL, z as DEFAULT_TIMEOUT_MS, E as Diagnostics, F as EntitlementCacheOptions, G as EntitlementMutationResult, H as EntitlementStore, I as EntitlementsListResponse, J as EntitlementsListener, K as Environment, L as ErrorCaptureConfig, M as ErrorLevel, N as EventProperties, O as ForgetResult, P as GrantDuration, Q as GrantEntitlementInput, R as GroupMembership, S as HeartbeatResponse, T as HttpRequestInfo, U as HttpResponseInfo, V as HttpRetriesConfig, W as IdentifyOptions, X as IdentityHints, Y as IngestOptions, Z as IngestResponse, _ as PublicEntitlement, $ as PurchaseResult, a0 as RequestOptions, a1 as RevokeEntitlementInput, a2 as RuntimeHost, a3 as RuntimeInfo, a4 as ServerEvent, a5 as StackFrame, a6 as StoredEntitlements, a7 as SyncPurchaseInput, a8 as makeCrossdeckError } from './crossdeck-server-DYawt4eT.js';
 import 'node:events';
 
 /**
@@ -17,7 +17,7 @@ import 'node:events';
  *
  * Do NOT edit by hand — `node scripts/sync-sdk-versions.mjs`.
  */
-declare const SDK_VERSION = "1.5.3";
+declare const SDK_VERSION = "1.7.0";
 declare const SDK_NAME = "@cross-deck/node";
 
 /**
@@ -51,7 +51,7 @@ interface ErrorCodeEntry {
     /** The string thrown as `CrossdeckError.code`. */
     code: string;
     /** Broad category — `CrossdeckError.type`. */
-    type: "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "internal_error" | "network_error" | "configuration_error";
+    type: "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "version_error" | "internal_error" | "network_error" | "configuration_error";
     /** One-sentence description. Surfaced verbatim in dashboards. */
     description: string;
     /** What the developer should do. Imperative phrasing. */
@@ -271,6 +271,12 @@ declare const _CROSSDECK_ERROR_CODES: readonly [{
     readonly description: "A field is present but the value failed validation.";
     readonly resolution: "Read error.message for the field + reason. SDK-managed call sites should never emit this — file a bug if you do.";
     readonly retryable: false;
+}, {
+    readonly code: "sdk_version_unsupported";
+    readonly type: "version_error";
+    readonly description: "HTTP 426 — your installed SDK sends an event format the server no longer accepts. The data is good; only the wire dialect is too old. The SDK PARKS automatically: events are held in memory and deliver once you upgrade and restart.";
+    readonly resolution: "Update @cross-deck/node to at least the version in error.minVersion and restart — the held queue backfills. See https://cross-deck.com/docs/sdk-event-durability/.";
+    readonly retryable: false;
 }];
 /**
  * Literal union of every code documented in `CROSSDECK_ERROR_CODES`.
@@ -495,7 +501,7 @@ declare function scrubPiiFromProperties(properties: Record<string, unknown>): Re
  *   - `sdk.no_durable_store`
  *   - `sdk.super_property_registered`
  */
-type DebugSignal = "sdk.configured" | "sdk.first_event_sent" | "sdk.invalid_key" | "sdk.no_identity" | "sdk.entitlement_cache_used" | "sdk.entitlement_cache_warm" | "sdk.entitlement_cache_stale" | "sdk.entitlement_store_recovered" | "sdk.no_durable_store" | "sdk.purchase_evidence_sent" | "sdk.environment_mismatch" | "sdk.sensitive_property_warning" | "sdk.property_coerced" | "sdk.flush_retry_scheduled" | "sdk.flush_permanent_failure" | "sdk.flush_on_exit_started" | "sdk.flush_on_exit_completed" | "sdk.webhook_verified" | "sdk.runtime_detected" | "sdk.super_property_registered" | "sdk.boot_heartbeat_failed";
+type DebugSignal = "sdk.configured" | "sdk.first_event_sent" | "sdk.invalid_key" | "sdk.no_identity" | "sdk.entitlement_cache_used" | "sdk.entitlement_cache_warm" | "sdk.entitlement_cache_stale" | "sdk.entitlement_store_recovered" | "sdk.no_durable_store" | "sdk.purchase_evidence_sent" | "sdk.environment_mismatch" | "sdk.sensitive_property_warning" | "sdk.property_coerced" | "sdk.flush_retry_scheduled" | "sdk.flush_permanent_failure" | "sdk.parked" | "sdk.flush_on_exit_started" | "sdk.flush_on_exit_completed" | "sdk.webhook_verified" | "sdk.runtime_detected" | "sdk.super_property_registered" | "sdk.boot_heartbeat_failed";
 interface DebugContext {
     [key: string]: unknown;
 }

package/dist/index.mjs

@@ -8,6 +8,8 @@ var CrossdeckError = class _CrossdeckError extends Error {
   requestId;
   status;
   retryAfterMs;
+  minVersion;
+  surface;
   constructor(payload) {
     super(payload.message);
     this.name = "CrossdeckError";
@@ -16,6 +18,8 @@ var CrossdeckError = class _CrossdeckError extends Error {
     this.requestId = payload.requestId;
     this.status = payload.status;
     this.retryAfterMs = payload.retryAfterMs;
+    this.minVersion = payload.minVersion;
+    this.surface = payload.surface;
     Object.setPrototypeOf(this, _CrossdeckError.prototype);
   }
   /**
@@ -37,6 +41,8 @@ var CrossdeckError = class _CrossdeckError extends Error {
       requestId: this.requestId,
       status: this.status,
       retryAfterMs: this.retryAfterMs,
+      minVersion: this.minVersion,
+      surface: this.surface,
       stack: this.stack
     };
   }
@@ -127,7 +133,10 @@ async function crossdeckErrorFromResponse(res) {
       message: envelope.message ?? `HTTP ${res.status}`,
       requestId: envelope.request_id ?? requestId,
       status: res.status,
-      retryAfterMs
+      retryAfterMs,
+      // PARK metadata, present only on a 426 / sdk_version_unsupported body.
+      minVersion: typeof envelope.minVersion === "string" ? envelope.minVersion : void 0,
+      surface: typeof envelope.surface === "string" ? envelope.surface : void 0
     });
   }
   return makeCrossdeckError({
@@ -320,7 +329,7 @@ function byteLength(s) {
 import * as https from "https";
 
 // src/_version.ts
-var SDK_VERSION = "1.5.3";
+var SDK_VERSION = "1.7.0";
 var SDK_NAME = "@cross-deck/node";
 
 // src/_diagnostic-telemetry.ts
@@ -340,7 +349,12 @@ var DIAGNOSTIC_TELEMETRY_ALLOWED_KEYS = /* @__PURE__ */ new Set([
   "run_id",
   "test_file",
   "test_name",
-  "device_class"
+  "device_class",
+  // verification_phase — categorical `boot` / `hot_path` bucket set by the
+  // runtime contract verifier layer. Declared in the shared diagnostics
+  // contract (contracts/diagnostics/contract-failed-payload-schema-lock.json)
+  // and carried by web/swift; node had drifted by omitting it.
+  "verification_phase"
 ]);
 function filterDiagnosticPayload(payload) {
   const filtered = {};
@@ -833,6 +847,16 @@ var EventQueue = class {
   cancelTimer = null;
   firstFlushFired = false;
   nextRetryAt = null;
+  /**
+   * PARK state (HTTP 426 / `sdk_version_unsupported`). Once parked, the
+   * queue stops flushing — retrying a known-too-old payload only wastes
+   * bandwidth and drips pointless rejects into the server logs until the
+   * process restarts on an upgraded SDK. In-memory: a fresh process starts
+   * unparked, retries once, and either delivers (upgraded) or re-parks.
+   */
+  parked = false;
+  /** One developer-facing console warning per process — never per-event spam. */
+  parkWarned = false;
   retry;
   /**
    * Stable Idempotency-Key for the current in-flight batch. Minted
@@ -885,6 +909,7 @@ var EventQueue = class {
    * this one settles. Strict ordering preserved.
    */
   async flush() {
+    if (this.parked) return null;
     let batch;
     let batchId;
     if (this.pendingBatch !== null && this.pendingBatchId !== null) {
@@ -904,6 +929,11 @@ var EventQueue = class {
     try {
       const env = this.cfg.envelope();
       const body = {
+        // Event Envelope v1 §1 — schema/wire version the server uses to
+        // decide whether it can parse this payload. Integer 1; only bumped
+        // on a breaking wire change. Distinct from sdk.version (which
+        // answers "which build?") — two questions, two fields.
+        envelopeVersion: 1,
         events: batch,
         sdk: env.sdk
       };
@@ -927,6 +957,28 @@ var EventQueue = class {
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       this.lastError = message;
+      if (isVersionRejected(err)) {
+        this.parked = true;
+        this.buffer = [...batch, ...this.buffer];
+        if (this.buffer.length > HARD_BUFFER_CAP) {
+          const overflow = this.buffer.length - HARD_BUFFER_CAP;
+          this.buffer.splice(0, overflow);
+          this.dropped += overflow;
+        }
+        this.pendingBatch = null;
+        this.pendingBatchId = null;
+        this.inFlight -= batch.length;
+        this.cfg.onBufferChange?.(this.buffer.length);
+        const minVersion = versionRejectionFloor(err);
+        if (!this.parkWarned) {
+          this.parkWarned = true;
+          console.warn(
+            `[Crossdeck] SDK outdated \u2014 the server is no longer accepting this version's event format. Events are PARKED in memory (held, not lost across this process) and will deliver once you update @cross-deck/node${minVersion ? ` to >= ${minVersion}` : ""} and restart. A restart before upgrade clears them \u2014 configure a disk queue for cross-restart durability.`
+          );
+        }
+        this.cfg.onParked?.({ minVersion, surface: versionRejectionSurface(err) });
+        return null;
+      }
       if (isPermanent4xx(err)) {
         const droppedCount = batch.length;
         this.pendingBatch = null;
@@ -1025,8 +1077,22 @@ function isPermanent4xx(err) {
   if (typeof status !== "number" || !Number.isFinite(status)) return false;
   if (status < 400 || status >= 500) return false;
   if (status === 408 || status === 429) return false;
+  if (status === 426) return false;
   return true;
 }
+function isVersionRejected(err) {
+  if (!err || typeof err !== "object") return false;
+  if (err.status === 426) return true;
+  return err.code === "sdk_version_unsupported";
+}
+function versionRejectionFloor(err) {
+  const v = err?.minVersion;
+  return typeof v === "string" && v.length > 0 ? v : void 0;
+}
+function versionRejectionSurface(err) {
+  const v = err?.surface;
+  return typeof v === "string" && v.length > 0 ? v : void 0;
+}
 function defaultScheduler(fn, ms) {
   const id = setTimeout(fn, ms);
   if (typeof id.unref === "function") {
@@ -1888,6 +1954,25 @@ function runtimeInfoToProperties(info) {
   if (info.appVersion) out.appVersion = info.appVersion;
   return out;
 }
+function buildEventContext(info, sdkName, sdkVersion) {
+  const ctx = {
+    // Common fields (spec §4, all platforms)
+    os: info.platform,
+    osVersion: info.platformRelease,
+    appVersion: info.appVersion ?? null,
+    sdkName,
+    sdkVersion,
+    // locale / timezone: Node has no process-level locale by default;
+    // surface them from the environment if available, otherwise null.
+    locale: typeof process !== "undefined" && process.env["LANG"] || null,
+    timezone: typeof Intl !== "undefined" && Intl.DateTimeFormat().resolvedOptions().timeZone || null,
+    // Node-specific runtime context (spec §4 Node section)
+    nodeVersion: info.nodeVersion,
+    host: info.host,
+    region: info.region ?? null
+  };
+  return ctx;
+}
 
 // src/flush-on-exit.ts
 var SIGNALS = ["SIGTERM", "SIGINT"];
@@ -2555,6 +2640,8 @@ var CrossdeckServer = class extends EventEmitter {
   processAnonymousId;
   runtime;
   runtimeProperties;
+  /** Envelope v1 §4 context object — built once at SDK init, reused on every event. */
+  eventContext;
   breadcrumbs;
   eventQueue;
   errorTracker;
@@ -2572,6 +2659,23 @@ var CrossdeckServer = class extends EventEmitter {
    */
   entitlementStore;
   debug;
+  /**
+   * Event Envelope v1 §3 — per-session monotonic sequence counter.
+   *
+   * Node has no mobile "session" lifecycle (no app launch / background /
+   * foreground). We model a session as the SDK instance lifetime: the
+   * counter starts at 0 on construction and increments once per
+   * `track()` call. `session.started` is the boot-telemetry event
+   * (the first `track()` called from `emitBootTelemetryEvent()`), so
+   * the seq will be 0 for that event, matching the spec's "reset to 0
+   * at session.started" clause — by construction, it's the zeroth event
+   * of this instance's lifecycle.
+   *
+   * The counter persists for the entire process lifetime of the SDK
+   * instance (spec §3 clause 1: background/foreground does not reset).
+   * A new `CrossdeckServer` construction is the only reset (new session).
+   */
+  sessionSeq = 0;
   /**
    * Alias map — `developerUserId` / `anonymousId` → canonical
    * `crossdeckCustomerId`. Populated by `getEntitlements()` so a
@@ -2631,6 +2735,7 @@ var CrossdeckServer = class extends EventEmitter {
       appVersion: options.appVersion
     });
     this.runtimeProperties = runtimeInfoToProperties(this.runtime);
+    this.eventContext = buildEventContext(this.runtime, SDK_NAME, this.sdkVersion);
     this.breadcrumbs = new BreadcrumbBuffer(options.breadcrumbsMaxSize ?? 50);
     this.superProps = new SuperPropertyStore();
     this.entitlementCache = new EntitlementCache({
@@ -2691,6 +2796,13 @@ var CrossdeckServer = class extends EventEmitter {
           error: info.lastError
         });
       },
+      onParked: (info) => {
+        this.debug.emit(
+          "sdk.parked",
+          `[crossdeck] SDK parked \u2014 server no longer accepts this version's event format. Events held (paused, not lost); update @cross-deck/node${info.minVersion ? ` to >= ${info.minVersion}` : ""} and restart to resume.`,
+          { ...info }
+        );
+      },
       onFirstFlushSuccess: () => {
         this.debug.emit("sdk.first_event_sent", "First batch landed.");
       }
@@ -3082,7 +3194,6 @@ var CrossdeckServer = class extends EventEmitter {
       }
     }
     const properties = {
-      ...this.runtimeProperties,
       ...this.superProps.getSuperProperties(),
       ...sanitized
     };
@@ -3091,10 +3202,14 @@ var CrossdeckServer = class extends EventEmitter {
       properties.$groups = groupIds;
     }
     const identity = this.resolveIdentity(event);
+    const seq = this.sessionSeq++;
+    const timestamp = event.timestamp ?? Date.now();
     const queued = {
       eventId: event.eventId ?? mintId("evt", 8),
       name: event.name,
-      timestamp: event.timestamp ?? Date.now(),
+      timestamp,
+      seq,
+      context: this.eventContext,
       properties,
       ...identity
     };
@@ -3133,6 +3248,8 @@ var CrossdeckServer = class extends EventEmitter {
     }
     const normalized = events.map((event) => this.normalizeIngestEvent(event));
     const body = {
+      // Event Envelope v1 §1 — wire version (parity with the queue path).
+      envelopeVersion: 1,
       events: normalized,
       sdk: { name: SDK_NAME, version: this.sdkVersion },
       // Match the queue's batch envelope (see event-queue.ts) — backend
@@ -4260,6 +4377,13 @@ var _CROSSDECK_ERROR_CODES = Object.freeze([
     description: "A field is present but the value failed validation.",
     resolution: "Read error.message for the field + reason. SDK-managed call sites should never emit this \u2014 file a bug if you do.",
     retryable: false
+  },
+  {
+    code: "sdk_version_unsupported",
+    type: "version_error",
+    description: "HTTP 426 \u2014 your installed SDK sends an event format the server no longer accepts. The data is good; only the wire dialect is too old. The SDK PARKS automatically: events are held in memory and deliver once you upgrade and restart.",
+    resolution: "Update @cross-deck/node to at least the version in error.minVersion and restart \u2014 the held queue backfills. See https://cross-deck.com/docs/sdk-event-durability/.",
+    retryable: false
   }
 ]);
 function isCrossdeckErrorCode(code) {
@@ -4391,8 +4515,8 @@ function normaliseSecrets(input) {
 }
 
 // src/_contracts-bundled.ts
-var BUNDLED_IN = "@cross-deck/node@1.5.3";
-var SDK_VERSION2 = "1.5.3";
+var BUNDLED_IN = "@cross-deck/node@1.6.0";
+var SDK_VERSION2 = "1.6.0";
 var BUNDLED_CONTRACTS = Object.freeze([
   {
     "id": "contract-failed-payload-schema-lock",
@@ -4514,7 +4638,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
       "legal/security/index.html#diagnostic",
       "legal/sdk-data/index.html#b-diagnostic"
     ],
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "documentation-honesty",
@@ -4546,7 +4670,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 7.1",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "error-envelope-shape",
@@ -4585,7 +4709,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 8 (codifies existing contract)",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "flush-interval-parity",
@@ -4630,7 +4754,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.3",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "idempotency-key-deterministic",
@@ -4735,7 +4859,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 2.2.a + 2.2.b + 2.2.c",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "node-pii-scrubber",
@@ -4774,7 +4898,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.1",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "node-shutdown-awaits-flush",
@@ -4807,7 +4931,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 5.4",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "sdk-error-codes-catalogue",
@@ -4821,9 +4945,14 @@ var BUNDLED_CONTRACTS = Object.freeze([
     "codeRef": [
       "sdks/web/src/error-codes.ts",
       "sdks/node/src/error-codes.ts",
+      "sdks/web/src/_contract-verifiers.ts",
       "backend/src/api/v1-errors.ts"
     ],
     "testRef": [
+      {
+        "file": "sdks/web/tests/contract-verifiers.test.ts",
+        "name": "sdk-error-codes-catalogue covers every backend wire code with remediation"
+      },
       {
         "file": "sdks/web/tests/error-codes-backfill.test.ts",
         "name": "includes backend code"
@@ -4847,7 +4976,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 6.2",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "sync-purchases-funnel-parity",
@@ -4880,7 +5009,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.5",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "verifier-timestamp-mandatory",
@@ -4934,7 +5063,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 7.2",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   }
 ]);