@cross-deck/node 1.6.0 → 1.8.0

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as Breadcrumb, d as BreadcrumbCategory, e as BreadcrumbLevel, C as CROSSDECK_API_VERSION, f as CapturedError, g as Contract, h as ContractAppliesTo, i as ContractFailureInput, j as ContractPillar, k as ContractStatus, l as ContractTestRef, m as CrossdeckAuthenticationError, n as CrossdeckConfigurationError, o as CrossdeckContracts, p as CrossdeckError, q as CrossdeckErrorPayload, r as CrossdeckErrorType, s as CrossdeckInternalError, t as CrossdeckNetworkError, u as CrossdeckPermissionError, v as CrossdeckRateLimitError, w as CrossdeckServer, x as CrossdeckServerOptions, y as CrossdeckValidationError, D as DEFAULT_BASE_URL, z as DEFAULT_TIMEOUT_MS, E as Diagnostics, F as EntitlementCacheOptions, G as EntitlementMutationResult, H as EntitlementStore, I as EntitlementsListResponse, J as EntitlementsListener, K as Environment, L as ErrorCaptureConfig, M as ErrorLevel, N as EventProperties, O as ForgetResult, P as GrantDuration, Q as GrantEntitlementInput, R as GroupMembership, S as HeartbeatResponse, T as HttpRequestInfo, U as HttpResponseInfo, V as HttpRetriesConfig, W as IdentifyOptions, X as IdentityHints, Y as IngestOptions, Z as IngestResponse, _ as PublicEntitlement, $ as PurchaseResult, a0 as RequestOptions, a1 as RevokeEntitlementInput, a2 as RuntimeHost, a3 as RuntimeInfo, a4 as ServerEvent, a5 as StackFrame, a6 as StoredEntitlements, a7 as SyncPurchaseInput, a8 as makeCrossdeckError } from './crossdeck-server-C1Ue0rv4.mjs';
+export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as Breadcrumb, d as BreadcrumbCategory, e as BreadcrumbLevel, C as CROSSDECK_API_VERSION, f as CapturedError, g as Contract, h as ContractAppliesTo, i as ContractFailureInput, j as ContractPillar, k as ContractStatus, l as ContractTestRef, m as CrossdeckAuthenticationError, n as CrossdeckConfigurationError, o as CrossdeckContracts, p as CrossdeckError, q as CrossdeckErrorPayload, r as CrossdeckErrorType, s as CrossdeckInternalError, t as CrossdeckNetworkError, u as CrossdeckPermissionError, v as CrossdeckRateLimitError, w as CrossdeckServer, x as CrossdeckServerOptions, y as CrossdeckValidationError, D as DEFAULT_BASE_URL, z as DEFAULT_TIMEOUT_MS, E as Diagnostics, F as EntitlementCacheOptions, G as EntitlementMutationResult, H as EntitlementStore, I as EntitlementsListResponse, J as EntitlementsListener, K as Environment, L as ErrorCaptureConfig, M as ErrorLevel, N as EventProperties, O as ForgetResult, P as GrantDuration, Q as GrantEntitlementInput, R as GroupMembership, S as HeartbeatResponse, T as HttpRequestInfo, U as HttpResponseInfo, V as HttpRetriesConfig, W as IdentifyOptions, X as IdentityHints, Y as IngestOptions, Z as IngestResponse, _ as PublicEntitlement, $ as PurchaseResult, a0 as RequestOptions, a1 as RevokeEntitlementInput, a2 as RuntimeHost, a3 as RuntimeInfo, a4 as ServerEvent, a5 as StackFrame, a6 as StoredEntitlements, a7 as SyncPurchaseInput, a8 as makeCrossdeckError } from './crossdeck-server-D9RvKxgA.mjs';
 import 'node:events';
 
 /**
@@ -17,7 +17,7 @@ import 'node:events';
  *
  * Do NOT edit by hand — `node scripts/sync-sdk-versions.mjs`.
  */
-declare const SDK_VERSION = "1.6.0";
+declare const SDK_VERSION = "1.8.0";
 declare const SDK_NAME = "@cross-deck/node";
 
 /**
@@ -51,7 +51,7 @@ interface ErrorCodeEntry {
     /** The string thrown as `CrossdeckError.code`. */
     code: string;
     /** Broad category — `CrossdeckError.type`. */
-    type: "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "internal_error" | "network_error" | "configuration_error";
+    type: "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "version_error" | "internal_error" | "network_error" | "configuration_error";
     /** One-sentence description. Surfaced verbatim in dashboards. */
     description: string;
     /** What the developer should do. Imperative phrasing. */
@@ -271,6 +271,12 @@ declare const _CROSSDECK_ERROR_CODES: readonly [{
     readonly description: "A field is present but the value failed validation.";
     readonly resolution: "Read error.message for the field + reason. SDK-managed call sites should never emit this — file a bug if you do.";
     readonly retryable: false;
+}, {
+    readonly code: "sdk_version_unsupported";
+    readonly type: "version_error";
+    readonly description: "HTTP 426 — your installed SDK sends an event format the server no longer accepts. The data is good; only the wire dialect is too old. The SDK PARKS automatically: events are held in memory and deliver once you upgrade and restart.";
+    readonly resolution: "Update @cross-deck/node to at least the version in error.minVersion and restart — the held queue backfills. See https://cross-deck.com/docs/sdk-event-durability/.";
+    readonly retryable: false;
 }];
 /**
  * Literal union of every code documented in `CROSSDECK_ERROR_CODES`.
@@ -495,7 +501,7 @@ declare function scrubPiiFromProperties(properties: Record<string, unknown>): Re
  *   - `sdk.no_durable_store`
  *   - `sdk.super_property_registered`
  */
-type DebugSignal = "sdk.configured" | "sdk.first_event_sent" | "sdk.invalid_key" | "sdk.no_identity" | "sdk.entitlement_cache_used" | "sdk.entitlement_cache_warm" | "sdk.entitlement_cache_stale" | "sdk.entitlement_store_recovered" | "sdk.no_durable_store" | "sdk.purchase_evidence_sent" | "sdk.environment_mismatch" | "sdk.sensitive_property_warning" | "sdk.property_coerced" | "sdk.flush_retry_scheduled" | "sdk.flush_permanent_failure" | "sdk.flush_on_exit_started" | "sdk.flush_on_exit_completed" | "sdk.webhook_verified" | "sdk.runtime_detected" | "sdk.super_property_registered" | "sdk.boot_heartbeat_failed";
+type DebugSignal = "sdk.configured" | "sdk.first_event_sent" | "sdk.invalid_key" | "sdk.no_identity" | "sdk.entitlement_cache_used" | "sdk.entitlement_cache_warm" | "sdk.entitlement_cache_stale" | "sdk.entitlement_store_recovered" | "sdk.no_durable_store" | "sdk.purchase_evidence_sent" | "sdk.environment_mismatch" | "sdk.sensitive_property_warning" | "sdk.property_coerced" | "sdk.flush_retry_scheduled" | "sdk.flush_permanent_failure" | "sdk.parked" | "sdk.flush_on_exit_started" | "sdk.flush_on_exit_completed" | "sdk.webhook_verified" | "sdk.runtime_detected" | "sdk.super_property_registered" | "sdk.boot_heartbeat_failed";
 interface DebugContext {
     [key: string]: unknown;
 }

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as Breadcrumb, d as BreadcrumbCategory, e as BreadcrumbLevel, C as CROSSDECK_API_VERSION, f as CapturedError, g as Contract, h as ContractAppliesTo, i as ContractFailureInput, j as ContractPillar, k as ContractStatus, l as ContractTestRef, m as CrossdeckAuthenticationError, n as CrossdeckConfigurationError, o as CrossdeckContracts, p as CrossdeckError, q as CrossdeckErrorPayload, r as CrossdeckErrorType, s as CrossdeckInternalError, t as CrossdeckNetworkError, u as CrossdeckPermissionError, v as CrossdeckRateLimitError, w as CrossdeckServer, x as CrossdeckServerOptions, y as CrossdeckValidationError, D as DEFAULT_BASE_URL, z as DEFAULT_TIMEOUT_MS, E as Diagnostics, F as EntitlementCacheOptions, G as EntitlementMutationResult, H as EntitlementStore, I as EntitlementsListResponse, J as EntitlementsListener, K as Environment, L as ErrorCaptureConfig, M as ErrorLevel, N as EventProperties, O as ForgetResult, P as GrantDuration, Q as GrantEntitlementInput, R as GroupMembership, S as HeartbeatResponse, T as HttpRequestInfo, U as HttpResponseInfo, V as HttpRetriesConfig, W as IdentifyOptions, X as IdentityHints, Y as IngestOptions, Z as IngestResponse, _ as PublicEntitlement, $ as PurchaseResult, a0 as RequestOptions, a1 as RevokeEntitlementInput, a2 as RuntimeHost, a3 as RuntimeInfo, a4 as ServerEvent, a5 as StackFrame, a6 as StoredEntitlements, a7 as SyncPurchaseInput, a8 as makeCrossdeckError } from './crossdeck-server-C1Ue0rv4.js';
+export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as Breadcrumb, d as BreadcrumbCategory, e as BreadcrumbLevel, C as CROSSDECK_API_VERSION, f as CapturedError, g as Contract, h as ContractAppliesTo, i as ContractFailureInput, j as ContractPillar, k as ContractStatus, l as ContractTestRef, m as CrossdeckAuthenticationError, n as CrossdeckConfigurationError, o as CrossdeckContracts, p as CrossdeckError, q as CrossdeckErrorPayload, r as CrossdeckErrorType, s as CrossdeckInternalError, t as CrossdeckNetworkError, u as CrossdeckPermissionError, v as CrossdeckRateLimitError, w as CrossdeckServer, x as CrossdeckServerOptions, y as CrossdeckValidationError, D as DEFAULT_BASE_URL, z as DEFAULT_TIMEOUT_MS, E as Diagnostics, F as EntitlementCacheOptions, G as EntitlementMutationResult, H as EntitlementStore, I as EntitlementsListResponse, J as EntitlementsListener, K as Environment, L as ErrorCaptureConfig, M as ErrorLevel, N as EventProperties, O as ForgetResult, P as GrantDuration, Q as GrantEntitlementInput, R as GroupMembership, S as HeartbeatResponse, T as HttpRequestInfo, U as HttpResponseInfo, V as HttpRetriesConfig, W as IdentifyOptions, X as IdentityHints, Y as IngestOptions, Z as IngestResponse, _ as PublicEntitlement, $ as PurchaseResult, a0 as RequestOptions, a1 as RevokeEntitlementInput, a2 as RuntimeHost, a3 as RuntimeInfo, a4 as ServerEvent, a5 as StackFrame, a6 as StoredEntitlements, a7 as SyncPurchaseInput, a8 as makeCrossdeckError } from './crossdeck-server-D9RvKxgA.js';
 import 'node:events';
 
 /**
@@ -17,7 +17,7 @@ import 'node:events';
  *
  * Do NOT edit by hand — `node scripts/sync-sdk-versions.mjs`.
  */
-declare const SDK_VERSION = "1.6.0";
+declare const SDK_VERSION = "1.8.0";
 declare const SDK_NAME = "@cross-deck/node";
 
 /**
@@ -51,7 +51,7 @@ interface ErrorCodeEntry {
     /** The string thrown as `CrossdeckError.code`. */
     code: string;
     /** Broad category — `CrossdeckError.type`. */
-    type: "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "internal_error" | "network_error" | "configuration_error";
+    type: "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "version_error" | "internal_error" | "network_error" | "configuration_error";
     /** One-sentence description. Surfaced verbatim in dashboards. */
     description: string;
     /** What the developer should do. Imperative phrasing. */
@@ -271,6 +271,12 @@ declare const _CROSSDECK_ERROR_CODES: readonly [{
     readonly description: "A field is present but the value failed validation.";
     readonly resolution: "Read error.message for the field + reason. SDK-managed call sites should never emit this — file a bug if you do.";
     readonly retryable: false;
+}, {
+    readonly code: "sdk_version_unsupported";
+    readonly type: "version_error";
+    readonly description: "HTTP 426 — your installed SDK sends an event format the server no longer accepts. The data is good; only the wire dialect is too old. The SDK PARKS automatically: events are held in memory and deliver once you upgrade and restart.";
+    readonly resolution: "Update @cross-deck/node to at least the version in error.minVersion and restart — the held queue backfills. See https://cross-deck.com/docs/sdk-event-durability/.";
+    readonly retryable: false;
 }];
 /**
  * Literal union of every code documented in `CROSSDECK_ERROR_CODES`.
@@ -495,7 +501,7 @@ declare function scrubPiiFromProperties(properties: Record<string, unknown>): Re
  *   - `sdk.no_durable_store`
  *   - `sdk.super_property_registered`
  */
-type DebugSignal = "sdk.configured" | "sdk.first_event_sent" | "sdk.invalid_key" | "sdk.no_identity" | "sdk.entitlement_cache_used" | "sdk.entitlement_cache_warm" | "sdk.entitlement_cache_stale" | "sdk.entitlement_store_recovered" | "sdk.no_durable_store" | "sdk.purchase_evidence_sent" | "sdk.environment_mismatch" | "sdk.sensitive_property_warning" | "sdk.property_coerced" | "sdk.flush_retry_scheduled" | "sdk.flush_permanent_failure" | "sdk.flush_on_exit_started" | "sdk.flush_on_exit_completed" | "sdk.webhook_verified" | "sdk.runtime_detected" | "sdk.super_property_registered" | "sdk.boot_heartbeat_failed";
+type DebugSignal = "sdk.configured" | "sdk.first_event_sent" | "sdk.invalid_key" | "sdk.no_identity" | "sdk.entitlement_cache_used" | "sdk.entitlement_cache_warm" | "sdk.entitlement_cache_stale" | "sdk.entitlement_store_recovered" | "sdk.no_durable_store" | "sdk.purchase_evidence_sent" | "sdk.environment_mismatch" | "sdk.sensitive_property_warning" | "sdk.property_coerced" | "sdk.flush_retry_scheduled" | "sdk.flush_permanent_failure" | "sdk.parked" | "sdk.flush_on_exit_started" | "sdk.flush_on_exit_completed" | "sdk.webhook_verified" | "sdk.runtime_detected" | "sdk.super_property_registered" | "sdk.boot_heartbeat_failed";
 interface DebugContext {
     [key: string]: unknown;
 }

package/dist/index.mjs

@@ -8,6 +8,8 @@ var CrossdeckError = class _CrossdeckError extends Error {
   requestId;
   status;
   retryAfterMs;
+  minVersion;
+  surface;
   constructor(payload) {
     super(payload.message);
     this.name = "CrossdeckError";
@@ -16,6 +18,8 @@ var CrossdeckError = class _CrossdeckError extends Error {
     this.requestId = payload.requestId;
     this.status = payload.status;
     this.retryAfterMs = payload.retryAfterMs;
+    this.minVersion = payload.minVersion;
+    this.surface = payload.surface;
     Object.setPrototypeOf(this, _CrossdeckError.prototype);
   }
   /**
@@ -37,6 +41,8 @@ var CrossdeckError = class _CrossdeckError extends Error {
       requestId: this.requestId,
       status: this.status,
       retryAfterMs: this.retryAfterMs,
+      minVersion: this.minVersion,
+      surface: this.surface,
       stack: this.stack
     };
   }
@@ -127,7 +133,10 @@ async function crossdeckErrorFromResponse(res) {
       message: envelope.message ?? `HTTP ${res.status}`,
       requestId: envelope.request_id ?? requestId,
       status: res.status,
-      retryAfterMs
+      retryAfterMs,
+      // PARK metadata, present only on a 426 / sdk_version_unsupported body.
+      minVersion: typeof envelope.minVersion === "string" ? envelope.minVersion : void 0,
+      surface: typeof envelope.surface === "string" ? envelope.surface : void 0
     });
   }
   return makeCrossdeckError({
@@ -320,7 +329,7 @@ function byteLength(s) {
 import * as https from "https";
 
 // src/_version.ts
-var SDK_VERSION = "1.6.0";
+var SDK_VERSION = "1.8.0";
 var SDK_NAME = "@cross-deck/node";
 
 // src/_diagnostic-telemetry.ts
@@ -340,7 +349,12 @@ var DIAGNOSTIC_TELEMETRY_ALLOWED_KEYS = /* @__PURE__ */ new Set([
   "run_id",
   "test_file",
   "test_name",
-  "device_class"
+  "device_class",
+  // verification_phase — categorical `boot` / `hot_path` bucket set by the
+  // runtime contract verifier layer. Declared in the shared diagnostics
+  // contract (contracts/diagnostics/contract-failed-payload-schema-lock.json)
+  // and carried by web/swift; node had drifted by omitting it.
+  "verification_phase"
 ]);
 function filterDiagnosticPayload(payload) {
   const filtered = {};
@@ -833,6 +847,16 @@ var EventQueue = class {
   cancelTimer = null;
   firstFlushFired = false;
   nextRetryAt = null;
+  /**
+   * PARK state (HTTP 426 / `sdk_version_unsupported`). Once parked, the
+   * queue stops flushing — retrying a known-too-old payload only wastes
+   * bandwidth and drips pointless rejects into the server logs until the
+   * process restarts on an upgraded SDK. In-memory: a fresh process starts
+   * unparked, retries once, and either delivers (upgraded) or re-parks.
+   */
+  parked = false;
+  /** One developer-facing console warning per process — never per-event spam. */
+  parkWarned = false;
   retry;
   /**
    * Stable Idempotency-Key for the current in-flight batch. Minted
@@ -885,6 +909,7 @@ var EventQueue = class {
    * this one settles. Strict ordering preserved.
    */
   async flush() {
+    if (this.parked) return null;
     let batch;
     let batchId;
     if (this.pendingBatch !== null && this.pendingBatchId !== null) {
@@ -932,6 +957,28 @@ var EventQueue = class {
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       this.lastError = message;
+      if (isVersionRejected(err)) {
+        this.parked = true;
+        this.buffer = [...batch, ...this.buffer];
+        if (this.buffer.length > HARD_BUFFER_CAP) {
+          const overflow = this.buffer.length - HARD_BUFFER_CAP;
+          this.buffer.splice(0, overflow);
+          this.dropped += overflow;
+        }
+        this.pendingBatch = null;
+        this.pendingBatchId = null;
+        this.inFlight -= batch.length;
+        this.cfg.onBufferChange?.(this.buffer.length);
+        const minVersion = versionRejectionFloor(err);
+        if (!this.parkWarned) {
+          this.parkWarned = true;
+          console.warn(
+            `[Crossdeck] SDK outdated \u2014 the server is no longer accepting this version's event format. Events are PARKED in memory (held, not lost across this process) and will deliver once you update @cross-deck/node${minVersion ? ` to >= ${minVersion}` : ""} and restart. A restart before upgrade clears them \u2014 configure a disk queue for cross-restart durability.`
+          );
+        }
+        this.cfg.onParked?.({ minVersion, surface: versionRejectionSurface(err) });
+        return null;
+      }
       if (isPermanent4xx(err)) {
         const droppedCount = batch.length;
         this.pendingBatch = null;
@@ -1030,8 +1077,22 @@ function isPermanent4xx(err) {
   if (typeof status !== "number" || !Number.isFinite(status)) return false;
   if (status < 400 || status >= 500) return false;
   if (status === 408 || status === 429) return false;
+  if (status === 426) return false;
   return true;
 }
+function isVersionRejected(err) {
+  if (!err || typeof err !== "object") return false;
+  if (err.status === 426) return true;
+  return err.code === "sdk_version_unsupported";
+}
+function versionRejectionFloor(err) {
+  const v = err?.minVersion;
+  return typeof v === "string" && v.length > 0 ? v : void 0;
+}
+function versionRejectionSurface(err) {
+  const v = err?.surface;
+  return typeof v === "string" && v.length > 0 ? v : void 0;
+}
 function defaultScheduler(fn, ms) {
   const id = setTimeout(fn, ms);
   if (typeof id.unref === "function") {
@@ -1314,6 +1375,7 @@ var ErrorTracker = class {
   installFetchWrap() {
     const origFetch = globalThis.fetch;
     if (typeof origFetch !== "function") return;
+    if (origFetch.__crossdeckWrapped__) return;
     const tracker = this;
     const wrapped = async (...args) => {
       const input = args[0];
@@ -1354,6 +1416,7 @@ var ErrorTracker = class {
         throw err;
       }
     };
+    wrapped.__crossdeckWrapped__ = true;
     globalThis.fetch = wrapped;
     this.cleanups.push(() => {
       if (globalThis.fetch === wrapped) globalThis.fetch = origFetch;
@@ -2559,6 +2622,9 @@ function safeJson(obj) {
 
 // src/crossdeck-server.ts
 var CrossdeckServer = class extends EventEmitter {
+  // `!` (definite assignment): these are assigned on the real construction path,
+  // but the singleton guard in the constructor can `return` an existing instance
+  // before reaching them — that early return is the only path that skips them.
   http;
   sdkVersion;
   baseUrl;
@@ -2654,6 +2720,13 @@ var CrossdeckServer = class extends EventEmitter {
     this.appId = options.appId;
     this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;
     this.env = inferEnvFromKey(options.secretKey);
+    const _store = globalThis;
+    const _singletonKey = `${options.secretKey}|${this.appId ?? ""}|${this.baseUrl}`;
+    _store.__crossdeckServers__ ??= /* @__PURE__ */ new Map();
+    const _existing = _store.__crossdeckServers__.get(_singletonKey);
+    if (_existing) {
+      return _existing;
+    }
     this.secretKeyPrefix = maskSecretKey(options.secretKey);
     this.scrubPii = options.scrubPii !== false;
     this.http = new HttpClient({
@@ -2735,6 +2808,13 @@ var CrossdeckServer = class extends EventEmitter {
           error: info.lastError
         });
       },
+      onParked: (info) => {
+        this.debug.emit(
+          "sdk.parked",
+          `[crossdeck] SDK parked \u2014 server no longer accepts this version's event format. Events held (paused, not lost); update @cross-deck/node${info.minVersion ? ` to >= ${info.minVersion}` : ""} and restart to resume.`,
+          { ...info }
+        );
+      },
       onFirstFlushSuccess: () => {
         this.debug.emit("sdk.first_event_sent", "First batch landed.");
       }
@@ -2788,6 +2868,17 @@ var CrossdeckServer = class extends EventEmitter {
         this.emitBootTelemetryEvent();
       });
     }
+    _store.__crossdeckServers__.set(_singletonKey, this);
+  }
+  /**
+   * Clear the process-wide singleton cache. The SDK hands back the SAME instance
+   * for the same credentials (the Next.js / serverless re-instantiation guard in
+   * the constructor); this resets that so the next `new CrossdeckServer()` builds a
+   * fresh instance. For TESTS (per-test isolation) and bespoke hot-reload teardown
+   * only — production code never needs it.
+   */
+  static clearSingletonCache() {
+    globalThis.__crossdeckServers__?.clear();
   }
   /**
    * Emit the honest "no cold-start durability" warning when the runtime
@@ -4309,6 +4400,13 @@ var _CROSSDECK_ERROR_CODES = Object.freeze([
     description: "A field is present but the value failed validation.",
     resolution: "Read error.message for the field + reason. SDK-managed call sites should never emit this \u2014 file a bug if you do.",
     retryable: false
+  },
+  {
+    code: "sdk_version_unsupported",
+    type: "version_error",
+    description: "HTTP 426 \u2014 your installed SDK sends an event format the server no longer accepts. The data is good; only the wire dialect is too old. The SDK PARKS automatically: events are held in memory and deliver once you upgrade and restart.",
+    resolution: "Update @cross-deck/node to at least the version in error.minVersion and restart \u2014 the held queue backfills. See https://cross-deck.com/docs/sdk-event-durability/.",
+    retryable: false
   }
 ]);
 function isCrossdeckErrorCode(code) {
@@ -4440,8 +4538,8 @@ function normaliseSecrets(input) {
 }
 
 // src/_contracts-bundled.ts
-var BUNDLED_IN = "@cross-deck/node@1.6.0";
-var SDK_VERSION2 = "1.6.0";
+var BUNDLED_IN = "@cross-deck/node@1.8.0";
+var SDK_VERSION2 = "1.8.0";
 var BUNDLED_CONTRACTS = Object.freeze([
   {
     "id": "contract-failed-payload-schema-lock",
@@ -4563,7 +4661,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
       "legal/security/index.html#diagnostic",
       "legal/sdk-data/index.html#b-diagnostic"
     ],
-    "bundledIn": "@cross-deck/node@1.6.0"
+    "bundledIn": "@cross-deck/node@1.8.0"
   },
   {
     "id": "documentation-honesty",
@@ -4595,7 +4693,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 7.1",
-    "bundledIn": "@cross-deck/node@1.6.0"
+    "bundledIn": "@cross-deck/node@1.8.0"
   },
   {
     "id": "error-envelope-shape",
@@ -4634,7 +4732,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 8 (codifies existing contract)",
-    "bundledIn": "@cross-deck/node@1.6.0"
+    "bundledIn": "@cross-deck/node@1.8.0"
   },
   {
     "id": "flush-interval-parity",
@@ -4679,7 +4777,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.3",
-    "bundledIn": "@cross-deck/node@1.6.0"
+    "bundledIn": "@cross-deck/node@1.8.0"
   },
   {
     "id": "idempotency-key-deterministic",
@@ -4784,7 +4882,63 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 2.2.a + 2.2.b + 2.2.c",
-    "bundledIn": "@cross-deck/node@1.6.0"
+    "bundledIn": "@cross-deck/node@1.8.0"
+  },
+  {
+    "id": "invalid-input-rejected-natively",
+    "pillar": "errors",
+    "status": "enforced",
+    "claim": "No public SDK API ever crashes the host app, and invalid input never reaches the wire. Invalid input (empty event name, empty userId, out-of-range config such as a non-positive breadcrumb capacity, NaN/Infinity/oversize/cyclic property values) is rejected at the call site WITHOUT a fatal trap. The signalling IDIOM is per-language and intentionally NOT uniform: Web, Node, and React Native THROW a typed CrossdeckError synchronously (code missing_event_name / missing_user_id / invalid_request_error) \u2014 a normal, catchable JavaScript convention where an uncaught throw logs and the app continues; Swift DROPS with a debug-log signal (track_dropped / identify_dropped) to match its non-throwing fire-and-forget surface, and exposes the throwing equivalent only via identifyAndWait(userId:). What is UNIFORM is the invariant, not the mechanism: every SDK rejects the same inputs, no public fire-and-forget API contains a fatalError / assertionFailure / precondition reachable from customer input, and no rejected input is enqueued or transmitted. Swift additionally proves this in BOTH debug and release configuration, because precondition fires under -O while assertionFailure does not. The bug class this contract closes was never the per-language difference \u2014 it was the UNDECLARED difference: each SDK's public API documentation must state its own semantics explicitly (TS docs: 'throws on empty name'; Swift docs: 'drops and logs').",
+    "appliesTo": [
+      "web",
+      "node",
+      "react-native",
+      "swift"
+    ],
+    "codeRef": [
+      "sdks/web/src/crossdeck.ts",
+      "sdks/node/src/crossdeck-server.ts",
+      "sdks/react-native/src/crossdeck.ts",
+      "sdks/swift/Sources/Crossdeck/Crossdeck.swift",
+      "sdks/swift/Sources/Crossdeck/Breadcrumbs.swift"
+    ],
+    "testRef": [
+      {
+        "file": "sdks/web/tests/crossdeck.test.ts",
+        "name": "track with empty name throws synchronously"
+      },
+      {
+        "file": "sdks/web/tests/crossdeck.test.ts",
+        "name": "rejects empty userId"
+      },
+      {
+        "file": "sdks/node/tests/crossdeck-server.test.ts",
+        "name": "track() throws CrossdeckError with code 'missing_event_name' when event name is empty"
+      },
+      {
+        "file": "sdks/react-native/tests/crossdeck.test.ts",
+        "name": "track('') throws CrossdeckError(missing_event_name) synchronously"
+      },
+      {
+        "file": "sdks/react-native/tests/crossdeck.test.ts",
+        "name": "identify('') rejects with CrossdeckError(missing_user_id)"
+      },
+      {
+        "file": "sdks/swift/Tests/CrossdeckTests/CrossdeckPublicAPITests.swift",
+        "name": "test_track_dropsEmptyName"
+      },
+      {
+        "file": "sdks/swift/Tests/CrossdeckTests/CrossdeckPublicAPITests.swift",
+        "name": "test_identifyAndWait_rejectsEmptyId"
+      },
+      {
+        "file": "sdks/swift/Tests/CrossdeckTests/PublicAPIInputSafetyTests.swift",
+        "name": "test_start_withZeroBreadcrumbCapacity_doesNotTrap"
+      }
+    ],
+    "registeredAt": "2026-06-11",
+    "firstRegisteredIn": "swift trap-on-input class fix \u2014 first machine-tested Swift release",
+    "bundledIn": "@cross-deck/node@1.8.0"
   },
   {
     "id": "node-pii-scrubber",
@@ -4823,7 +4977,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.1",
-    "bundledIn": "@cross-deck/node@1.6.0"
+    "bundledIn": "@cross-deck/node@1.8.0"
   },
   {
     "id": "node-shutdown-awaits-flush",
@@ -4856,7 +5010,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 5.4",
-    "bundledIn": "@cross-deck/node@1.6.0"
+    "bundledIn": "@cross-deck/node@1.8.0"
   },
   {
     "id": "sdk-error-codes-catalogue",
@@ -4901,7 +5055,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 6.2",
-    "bundledIn": "@cross-deck/node@1.6.0"
+    "bundledIn": "@cross-deck/node@1.8.0"
   },
   {
     "id": "sync-purchases-funnel-parity",
@@ -4934,7 +5088,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.5",
-    "bundledIn": "@cross-deck/node@1.6.0"
+    "bundledIn": "@cross-deck/node@1.8.0"
   },
   {
     "id": "verifier-timestamp-mandatory",
@@ -4988,7 +5142,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 7.2",
-    "bundledIn": "@cross-deck/node@1.6.0"
+    "bundledIn": "@cross-deck/node@1.8.0"
   }
 ]);