@cross-deck/web 1.10.2 → 1.11.1

package/dist/error-codes.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "generatedAt": "2026-07-22T08:22:09.095Z",
+  "generatedAt": "2026-07-23T05:41:37.690Z",
   "sdk": "@cross-deck/web",
   "codes": [
     {

package/dist/index.cjs

@@ -104,7 +104,7 @@ function typeMapForStatus(status) {
 }
 
 // src/_version.ts
-var SDK_VERSION = "1.10.2";
+var SDK_VERSION = "1.11.1";
 var SDK_NAME = "@cross-deck/web";
 
 // src/http.ts
@@ -1332,6 +1332,7 @@ var CookieStorage = class {
     this.maxAgeSec = options?.maxAgeSec ?? 63072e3;
     this.secure = options?.secure ?? defaultSecure();
     this.sameSite = options?.sameSite ?? "Lax";
+    this.domain = options?.domain || void 0;
   }
   getItem(key) {
     if (!hasDocument()) return null;
@@ -1358,6 +1359,7 @@ var CookieStorage = class {
       `Max-Age=${this.maxAgeSec}`,
       `SameSite=${this.sameSite}`
     ];
+    if (this.domain) parts.push(`Domain=${this.domain}`);
     if (this.secure) parts.push("Secure");
     try {
       doc.cookie = parts.join("; ");
@@ -1373,6 +1375,7 @@ var CookieStorage = class {
       "Max-Age=0",
       `SameSite=${this.sameSite}`
     ];
+    if (this.domain) parts.push(`Domain=${this.domain}`);
     if (this.secure) parts.push("Secure");
     try {
       doc.cookie = parts.join("; ");
@@ -1380,6 +1383,34 @@ var CookieStorage = class {
     }
   }
 };
+function resolveCookieDomain(config) {
+  if (config === void 0 || config === "none" || config === "") return void 0;
+  if (config !== "auto") {
+    const d = config.trim().toLowerCase();
+    return d.startsWith(".") ? d : `.${d}`;
+  }
+  if (!hasDocument()) return void 0;
+  const doc = globalThis.document;
+  const loc = globalThis.location;
+  const host = (loc?.hostname ?? "").toLowerCase();
+  if (!host || host === "localhost" || /^\d{1,3}(\.\d{1,3}){3}$/.test(host) || host.indexOf(".") === -1) {
+    return void 0;
+  }
+  const labels = host.split(".");
+  for (let i = labels.length - 2; i >= 0; i--) {
+    const candidate = "." + labels.slice(i).join(".");
+    const testKey = "__cd_domain_probe";
+    try {
+      doc.cookie = `${testKey}=1; Domain=${candidate}; Path=/; SameSite=Lax`;
+      const accepted = doc.cookie.indexOf(`${testKey}=1`) !== -1;
+      doc.cookie = `${testKey}=; Domain=${candidate}; Path=/; Max-Age=0; SameSite=Lax`;
+      if (accepted) return candidate;
+    } catch {
+      return void 0;
+    }
+  }
+  return void 0;
+}
 function detectDefaultStorage() {
   try {
     const ls = globalThis.localStorage;
@@ -3843,7 +3874,18 @@ function isInAppFrame(filename) {
   if (/\/crossdeck\.umd\.min\.js$/.test(filename)) return false;
   return true;
 }
+var BROWSER_INJECTED_GLOBAL = /(__firefox__|__gCrWeb|zaloJSV2)/;
+function injectedGlobalName(message) {
+  const m = BROWSER_INJECTED_GLOBAL.exec(message ?? "");
+  return m ? m[1] : null;
+}
+function demoteVendorInjectedFrames(frames, message) {
+  if (!injectedGlobalName(message)) return frames;
+  return frames.map((f) => f.in_app ? { ...f, in_app: false } : f);
+}
 function fingerprintError(message, frames, location2) {
+  const injected = injectedGlobalName(message);
+  if (injected) return djb2Hex(`injected-global:${injected}`);
   const inAppFrames = frames.filter((f) => f.in_app).slice(0, 3);
   const parts = [
     (message || "").slice(0, 200),
@@ -4200,7 +4242,7 @@ var ErrorTracker = class {
     const payload = coerceErrorPayload(err);
     const message = (payload.message || event.message || "Unknown error").slice(0, 1024);
     const stack = err instanceof Error ? err.stack ?? null : null;
-    const frames = parseStack(stack);
+    const frames = demoteVendorInjectedFrames(parseStack(stack), message);
     const errorType = payload.errorType ?? null;
     const context = payload.extras ? { ...this.opts.getContext(), __error_extras: payload.extras } : this.opts.getContext();
     return {
@@ -4232,7 +4274,7 @@ var ErrorTracker = class {
     const payload = coerceErrorPayload(err);
     const message = (payload.message || "Unknown error").slice(0, 1024);
     const stack = err instanceof Error ? err.stack ?? null : null;
-    const frames = parseStack(stack);
+    const frames = demoteVendorInjectedFrames(parseStack(stack), message);
     const errorType = payload.errorType ?? null;
     const context = payload.extras ? { ...this.opts.getContext(), __error_extras: payload.extras } : this.opts.getContext();
     return {
@@ -4648,7 +4690,7 @@ var CrossdeckClient = class {
     const effectiveStorage = persistIdentity ? storage : new MemoryStorage();
     const useCookieRedundancy = persistIdentity && !options.storage && // honour caller's adapter choice
     typeof globalThis.document !== "undefined";
-    const cookieStore = useCookieRedundancy ? new CookieStorage() : void 0;
+    const cookieStore = useCookieRedundancy ? new CookieStorage({ domain: resolveCookieDomain(options.cookieDomain ?? "auto") }) : void 0;
     const identity = new IdentityStore(effectiveStorage, opts.storagePrefix, cookieStore);
     const entitlements = new EntitlementCache(
       effectiveStorage,