@cross-deck/react-native 1.5.0 → 1.5.3

package/dist/index.d.mts

@@ -489,8 +489,8 @@ declare const CrossdeckContracts: {
     readonly byId: (id: string) => Contract | undefined;
     readonly byPillar: (pillar: ContractPillar) => readonly Contract[];
     readonly withStatus: (status: ContractStatus) => readonly Contract[];
-    readonly sdkVersion: "1.5.0";
-    readonly bundledIn: "@cross-deck/react-native@1.5.0";
+    readonly sdkVersion: "1.5.3";
+    readonly bundledIn: "@cross-deck/react-native@1.5.3";
     /**
      * Resolve a failing test back to the contract it exercises.
      * Used by test-framework hooks to find the contract id of a
@@ -499,9 +499,22 @@ declare const CrossdeckContracts: {
      */
     readonly findByTestName: (name: string) => Contract | undefined;
 };
-/** Input to {@link Crossdeck.reportContractFailure}. */
+/**
+ * Input to {@link Crossdeck.reportContractFailure}.
+ *
+ * SCHEMA-LOCK: this interface's field set is exhaustively named. No
+ * free-form `extra: Record<string, unknown>` — the schema-lock
+ * contract at
+ * `contracts/diagnostics/contract-failed-payload-schema-lock.json`
+ * forbids unbounded fields.
+ */
 interface ContractFailureInput {
     contractId: string;
+    /**
+     * Short categorical-ish label — the SDK convention is to keep
+     * this under 128 chars and stable across runs. Never an
+     * end-user-supplied string.
+     */
     failureReason: string;
     runContext: "ci" | "dogfood" | "customer-app";
     runId: string;
@@ -509,7 +522,11 @@ interface ContractFailureInput {
         file: string;
         name: string;
     };
-    extra?: Record<string, unknown>;
+    /**
+     * Optional coarse device class, e.g. "ios-phone", "android-tablet".
+     * A categorical bucket, not a device identifier.
+     */
+    deviceClass?: string;
 }
 
 /**
@@ -763,10 +780,14 @@ declare class CrossdeckClient {
      * synchronously.
      */
     /**
-     * Emit `crossdeck.contract_failed` with the canonical property
-     * shape. Same wire shape every Crossdeck SDK uses for contract
-     * verification telemetry — see `contracts/README.md`. No new
-     * endpoint, goes through the standard track() pipeline.
+     * Emit `crossdeck.contract_failed` to the Crossdeck reliability
+     * endpoint — single-fire, one-way, never visible in the customer's
+     * dashboard. Goes over a dedicated HTTP path with the reliability
+     * publishable key embedded at build time; the customer's track()
+     * pipeline never carries `crossdeck.*` events. This is the
+     * independent-controller flow described in Privacy Policy §6
+     * ("Flow B"). The wire shape is fixed by the schema-lock contract
+     * at `contracts/diagnostics/contract-failed-payload-schema-lock.json`.
      */
     reportContractFailure(input: ContractFailureInput): void;
     track(name: string, properties?: EventProperties): void;
@@ -991,7 +1012,7 @@ declare class AsyncStorageAdapter implements KeyValueStorage {
  *
  * Do NOT edit by hand — `node scripts/sync-sdk-versions.mjs`.
  */
-declare const SDK_VERSION = "1.4.2";
+declare const SDK_VERSION = "1.5.3";
 declare const SDK_NAME = "@cross-deck/react-native";
 
 /**

package/dist/index.d.ts

@@ -489,8 +489,8 @@ declare const CrossdeckContracts: {
     readonly byId: (id: string) => Contract | undefined;
     readonly byPillar: (pillar: ContractPillar) => readonly Contract[];
     readonly withStatus: (status: ContractStatus) => readonly Contract[];
-    readonly sdkVersion: "1.5.0";
-    readonly bundledIn: "@cross-deck/react-native@1.5.0";
+    readonly sdkVersion: "1.5.3";
+    readonly bundledIn: "@cross-deck/react-native@1.5.3";
     /**
      * Resolve a failing test back to the contract it exercises.
      * Used by test-framework hooks to find the contract id of a
@@ -499,9 +499,22 @@ declare const CrossdeckContracts: {
      */
     readonly findByTestName: (name: string) => Contract | undefined;
 };
-/** Input to {@link Crossdeck.reportContractFailure}. */
+/**
+ * Input to {@link Crossdeck.reportContractFailure}.
+ *
+ * SCHEMA-LOCK: this interface's field set is exhaustively named. No
+ * free-form `extra: Record<string, unknown>` — the schema-lock
+ * contract at
+ * `contracts/diagnostics/contract-failed-payload-schema-lock.json`
+ * forbids unbounded fields.
+ */
 interface ContractFailureInput {
     contractId: string;
+    /**
+     * Short categorical-ish label — the SDK convention is to keep
+     * this under 128 chars and stable across runs. Never an
+     * end-user-supplied string.
+     */
     failureReason: string;
     runContext: "ci" | "dogfood" | "customer-app";
     runId: string;
@@ -509,7 +522,11 @@ interface ContractFailureInput {
         file: string;
         name: string;
     };
-    extra?: Record<string, unknown>;
+    /**
+     * Optional coarse device class, e.g. "ios-phone", "android-tablet".
+     * A categorical bucket, not a device identifier.
+     */
+    deviceClass?: string;
 }
 
 /**
@@ -763,10 +780,14 @@ declare class CrossdeckClient {
      * synchronously.
      */
     /**
-     * Emit `crossdeck.contract_failed` with the canonical property
-     * shape. Same wire shape every Crossdeck SDK uses for contract
-     * verification telemetry — see `contracts/README.md`. No new
-     * endpoint, goes through the standard track() pipeline.
+     * Emit `crossdeck.contract_failed` to the Crossdeck reliability
+     * endpoint — single-fire, one-way, never visible in the customer's
+     * dashboard. Goes over a dedicated HTTP path with the reliability
+     * publishable key embedded at build time; the customer's track()
+     * pipeline never carries `crossdeck.*` events. This is the
+     * independent-controller flow described in Privacy Policy §6
+     * ("Flow B"). The wire shape is fixed by the schema-lock contract
+     * at `contracts/diagnostics/contract-failed-payload-schema-lock.json`.
      */
     reportContractFailure(input: ContractFailureInput): void;
     track(name: string, properties?: EventProperties): void;
@@ -991,7 +1012,7 @@ declare class AsyncStorageAdapter implements KeyValueStorage {
  *
  * Do NOT edit by hand — `node scripts/sync-sdk-versions.mjs`.
  */
-declare const SDK_VERSION = "1.4.2";
+declare const SDK_VERSION = "1.5.3";
 declare const SDK_NAME = "@cross-deck/react-native";
 
 /**

package/dist/index.mjs

@@ -71,7 +71,7 @@ function typeMapForStatus(status) {
 }
 
 // src/_version.ts
-var SDK_VERSION = "1.4.2";
+var SDK_VERSION = "1.5.3";
 var SDK_NAME = "@cross-deck/react-native";
 
 // src/http.ts
@@ -1692,6 +1692,56 @@ var BreadcrumbBuffer = class {
   }
 };
 
+// src/_diagnostic-telemetry.ts
+var DIAGNOSTIC_TELEMETRY_ENDPOINT = "https://api.cross-deck.com/v1/sdk/diagnostic";
+var DIAGNOSTIC_TELEMETRY_PUBLISHABLE_KEY = "cd_pub_live_9490e7aa029c432abf";
+function isDiagnosticTelemetryEnabled() {
+  return !DIAGNOSTIC_TELEMETRY_PUBLISHABLE_KEY.startsWith(
+    "cd_pub_RELIABILITY_PLACEHOLDER"
+  );
+}
+var DIAGNOSTIC_TELEMETRY_ALLOWED_KEYS = /* @__PURE__ */ new Set([
+  "contract_id",
+  "sdk_version",
+  "sdk_platform",
+  "failure_reason",
+  "run_context",
+  "run_id",
+  "test_file",
+  "test_name",
+  "device_class"
+]);
+function filterDiagnosticPayload(payload) {
+  const filtered = {};
+  for (const [k, v] of Object.entries(payload)) {
+    if (DIAGNOSTIC_TELEMETRY_ALLOWED_KEYS.has(k) && typeof v === "string") {
+      filtered[k] = v;
+    }
+  }
+  return filtered;
+}
+function sendDiagnosticTelemetry(payload) {
+  if (!isDiagnosticTelemetryEnabled()) return;
+  const filtered = filterDiagnosticPayload(payload);
+  if (Object.keys(filtered).length === 0) return;
+  const body = JSON.stringify(filtered);
+  const f = globalThis.fetch;
+  if (typeof f !== "function") return;
+  try {
+    void f(DIAGNOSTIC_TELEMETRY_ENDPOINT, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${DIAGNOSTIC_TELEMETRY_PUBLISHABLE_KEY}`,
+        "Crossdeck-Sdk-Version": `${SDK_NAME}@${SDK_VERSION}`
+      },
+      body
+    }).catch(() => {
+    });
+  } catch {
+  }
+}
+
 // src/stack-parser.ts
 function parseStack(stack) {
   if (!stack || typeof stack !== "string") return [];
@@ -2624,13 +2674,17 @@ var CrossdeckClient = class {
    * synchronously.
    */
   /**
-   * Emit `crossdeck.contract_failed` with the canonical property
-   * shape. Same wire shape every Crossdeck SDK uses for contract
-   * verification telemetry — see `contracts/README.md`. No new
-   * endpoint, goes through the standard track() pipeline.
+   * Emit `crossdeck.contract_failed` to the Crossdeck reliability
+   * endpoint — single-fire, one-way, never visible in the customer's
+   * dashboard. Goes over a dedicated HTTP path with the reliability
+   * publishable key embedded at build time; the customer's track()
+   * pipeline never carries `crossdeck.*` events. This is the
+   * independent-controller flow described in Privacy Policy §6
+   * ("Flow B"). The wire shape is fixed by the schema-lock contract
+   * at `contracts/diagnostics/contract-failed-payload-schema-lock.json`.
    */
   reportContractFailure(input) {
-    const props = {
+    const payload = {
       contract_id: input.contractId,
       sdk_version: SDK_VERSION,
       sdk_platform: "react-native",
@@ -2639,15 +2693,13 @@ var CrossdeckClient = class {
       run_id: input.runId
     };
     if (input.testRef) {
-      props.test_file = input.testRef.file;
-      props.test_name = input.testRef.name;
+      payload.test_file = input.testRef.file;
+      payload.test_name = input.testRef.name;
     }
-    if (input.extra) {
-      for (const [k, v] of Object.entries(input.extra)) {
-        if (props[k] === void 0) props[k] = v;
-      }
+    if (input.deviceClass) {
+      payload.device_class = input.deviceClass;
     }
-    this.track("crossdeck.contract_failed", props);
+    sendDiagnosticTelemetry(payload);
   }
   track(name, properties) {
     const s = this.requireStarted();
@@ -3003,9 +3055,131 @@ function detectPlatform() {
 }
 
 // src/_contracts-bundled.ts
-var BUNDLED_IN = "@cross-deck/react-native@1.5.0";
-var SDK_VERSION2 = "1.5.0";
+var BUNDLED_IN = "@cross-deck/react-native@1.5.3";
+var SDK_VERSION2 = "1.5.3";
 var BUNDLED_CONTRACTS = Object.freeze([
+  {
+    "id": "contract-failed-payload-schema-lock",
+    "pillar": "diagnostics",
+    "status": "enforced",
+    "claim": "The `crossdeck.contract_failed` event payload contains ONLY the named diagnostic fields and never any end-user personal data. The wire shape is fixed \u2014 adding a new field requires (1) a pull request that updates this contract's `allowedFields` set, (2) a Privacy Policy \xA76 amendment, and (3) the Customer Disclosure Template / SDK Data Collection Reference \xA7B updates. Per-SDK assertion tests enforce the field set on every release. The `verification_phase` field is a categorical bucket \u2014 values are restricted to `boot` (the SDK self-test ran on Crossdeck.start) or `hot_path` (a verifier observed a real customer-triggered operation). The categorical nature is what preserves the diagnostic-only-not-personal classification. This is the structural guarantee that backs the independent-controller lawful basis in the Privacy Policy: the payload remains diagnostic-only, not personal, so the legitimate-interest analysis stays valid as the SDK evolves.",
+    "appliesTo": [
+      "web",
+      "node",
+      "swift",
+      "android",
+      "react-native"
+    ],
+    "allowedFields": {
+      "required": [
+        "contract_id",
+        "sdk_version",
+        "sdk_platform",
+        "failure_reason",
+        "run_context",
+        "run_id"
+      ],
+      "optional": [
+        "test_file",
+        "test_name",
+        "device_class",
+        "verification_phase"
+      ],
+      "forbidden": [
+        "anonymousId",
+        "developerUserId",
+        "crossdeckCustomerId",
+        "email",
+        "ip",
+        "user_agent",
+        "message",
+        "stack",
+        "stack_trace",
+        "frames",
+        "exception_message",
+        "url",
+        "path",
+        "screen",
+        "title",
+        "label",
+        "text",
+        "ariaLabel",
+        "accessibilityLabel",
+        "contentDescription",
+        "session_id",
+        "sessionId"
+      ]
+    },
+    "transport": "Telemetry is single-fire to the Crossdeck reliability endpoint only \u2014 NOT the customer's appId. The customer's track() pipeline never carries `crossdeck.*` events; the customer's dashboard never shows individual contract failures. Operational telemetry flows one-way to the Crossdeck operations team for SDK reliability purposes (legitimate interest, independent-controller flow per Privacy Policy \xA76). The reliability endpoint is hardcoded at SDK build time; the publishable key for the reliability project is embedded as a constant and rejects writes that don't match the schema.",
+    "codeRef": [
+      "sdks/web/src/crossdeck.ts",
+      "sdks/node/src/crossdeck-server.ts",
+      "sdks/swift/Sources/Crossdeck/Crossdeck.swift",
+      "sdks/swift/Sources/Crossdeck/_DiagnosticTelemetry.swift",
+      "sdks/android/crossdeck/src/main/kotlin/com/crossdeck/Crossdeck.kt",
+      "sdks/android/crossdeck/src/main/kotlin/com/crossdeck/_DiagnosticTelemetry.kt",
+      "sdks/react-native/src/crossdeck.ts",
+      "backend/src/api/v1-sdk-diagnostic.ts",
+      "sdks/web/src/_diagnostic-telemetry.ts",
+      "sdks/node/src/_diagnostic-telemetry.ts",
+      "sdks/react-native/src/_diagnostic-telemetry.ts"
+    ],
+    "testRef": [
+      {
+        "file": "sdks/web/tests/contract-failed-schema-lock.test.ts",
+        "name": "reportContractFailure payload conforms to schema-lock"
+      },
+      {
+        "file": "sdks/node/tests/contract-failed-schema-lock.test.ts",
+        "name": "reportContractFailure payload conforms to schema-lock"
+      },
+      {
+        "file": "sdks/swift/Tests/CrossdeckTests/ContractFailedSchemaLockTests.swift",
+        "name": "test_reportContractFailure_payloadFieldsAreInAllowList"
+      },
+      {
+        "file": "sdks/swift/Tests/CrossdeckTests/ContractFailedSchemaLockTests.swift",
+        "name": "test_reportContractFailure_doesNotEnterCustomerTrackPipeline"
+      },
+      {
+        "file": "sdks/android/crossdeck/src/test/kotlin/com/crossdeck/ContractFailedSchemaLockTest.kt",
+        "name": "reportContractFailure payload conforms to schema-lock"
+      },
+      {
+        "file": "sdks/android/crossdeck/src/test/kotlin/com/crossdeck/ContractFailedSchemaLockTest.kt",
+        "name": "reportContractFailure does not enter customer track pipeline"
+      },
+      {
+        "file": "sdks/react-native/tests/contract-failed-schema-lock.test.ts",
+        "name": "reportContractFailure payload conforms to schema-lock"
+      },
+      {
+        "file": "backend/tests/unit/v1-sdk-diagnostic.test.ts",
+        "name": "forbidden fields are enumerated in the schema-lock contract"
+      },
+      {
+        "file": "backend/tests/unit/v1-sdk-diagnostic.test.ts",
+        "name": "required fields are enumerated in the schema-lock contract"
+      },
+      {
+        "file": "backend/tests/unit/v1-sdk-diagnostic.test.ts",
+        "name": "regression guard: never returns a raw IP"
+      },
+      {
+        "file": "backend/tests/unit/v1-sdk-diagnostic.test.ts",
+        "name": "verification_phase is in the optional field set"
+      }
+    ],
+    "registeredAt": "2026-05-27",
+    "firstRegisteredIn": "Diagnostic telemetry single-fire + schema-lock \u2014 independent-controller flow",
+    "privacyReferences": [
+      "legal/privacy/index.html#sdk-diagnostic",
+      "legal/customer-disclosure/index.html#flow-b",
+      "legal/security/index.html#diagnostic",
+      "legal/sdk-data/index.html#b-diagnostic"
+    ],
+    "bundledIn": "@cross-deck/react-native@1.5.3"
+  },
   {
     "id": "error-envelope-shape",
     "pillar": "errors",
@@ -3043,7 +3217,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 8 (codifies existing contract)",
-    "bundledIn": "@cross-deck/react-native@1.5.0"
+    "bundledIn": "@cross-deck/react-native@1.5.3"
   },
   {
     "id": "flush-interval-parity",
@@ -3088,7 +3262,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.3",
-    "bundledIn": "@cross-deck/react-native@1.5.0"
+    "bundledIn": "@cross-deck/react-native@1.5.3"
   },
   {
     "id": "idempotency-key-deterministic",
@@ -3193,7 +3367,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 2.2.a + 2.2.b + 2.2.c",
-    "bundledIn": "@cross-deck/react-native@1.5.0"
+    "bundledIn": "@cross-deck/react-native@1.5.3"
   },
   {
     "id": "init-reentry-drains-prior-queue",
@@ -3220,7 +3394,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 5.5",
-    "bundledIn": "@cross-deck/react-native@1.5.0"
+    "bundledIn": "@cross-deck/react-native@1.5.3"
   },
   {
     "id": "per-user-cache-isolation",
@@ -3299,7 +3473,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 1.3 (web/RN) + dogfood-gap fix (swift + android)",
-    "bundledIn": "@cross-deck/react-native@1.5.0"
+    "bundledIn": "@cross-deck/react-native@1.5.3"
   },
   {
     "id": "rn-session-id-enrichment",
@@ -3332,7 +3506,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.4",
-    "bundledIn": "@cross-deck/react-native@1.5.0"
+    "bundledIn": "@cross-deck/react-native@1.5.3"
   },
   {
     "id": "sync-purchases-funnel-parity",
@@ -3365,7 +3539,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.5",
-    "bundledIn": "@cross-deck/react-native@1.5.0"
+    "bundledIn": "@cross-deck/react-native@1.5.3"
   }
 ]);