@cross-deck/web 1.11.1 → 1.12.1

package/dist/error-codes.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "generatedAt": "2026-07-23T05:41:37.690Z",
+  "generatedAt": "2026-07-24T12:01:24.353Z",
   "sdk": "@cross-deck/web",
   "codes": [
     {

package/dist/index.cjs

@@ -104,7 +104,7 @@ function typeMapForStatus(status) {
 }
 
 // src/_version.ts
-var SDK_VERSION = "1.11.1";
+var SDK_VERSION = "1.12.1";
 var SDK_NAME = "@cross-deck/web";
 
 // src/http.ts
@@ -1594,6 +1594,7 @@ var AutoTracker = class {
     this.pageviewId = null;
     this.storage = opts?.storage ?? null;
     this.sessionKey = opts?.storageKey ?? SESSION_STORAGE_KEY;
+    this.cookieStorage = opts?.cookieStorage ?? null;
   }
   install() {
     if (!isBrowserSafe()) return;
@@ -1745,9 +1746,74 @@ var AutoTracker = class {
       lastActivityAt: now,
       hiddenAt: null,
       endedSent: false,
-      acquisition: captureAcquisition()
+      acquisition: this.resolveAcquisition()
     };
   }
+  /**
+   * Session acquisition, with FIRST-TOUCH survival across sessions.
+   *
+   * WHY: `captureAcquisition()` reads the CURRENT page. That is correct for a
+   * fresh arrival, but a session boundary (30-min idle, or a return visit next
+   * week) starts a new session — and a visitor returning directly has no utm_*
+   * and no click id, so the acquisition that actually WON them was silently
+   * replaced with empty. Someone who arrives from LinkedIn on Monday, returns
+   * direct on Tuesday and signs up on Wednesday converted with no source at all.
+   *
+   * That is exactly the question the product exists to answer — "where did this
+   * PAYING CUSTOMER come from" — so origin has to outlive the session that
+   * captured it. We persist the first touch that carried a real signal and,
+   * whenever a later session arrives with nothing, fall back to it.
+   *
+   * Deliberately NOT last-touch-wins: a real new campaign click overwrites
+   * nothing, it simply records a newer touch for that session while the stored
+   * first touch stays put. Write-once by design.
+   */
+  resolveAcquisition() {
+    const current = captureAcquisition();
+    if (!this.storage && !this.cookieStorage) return current;
+    const key = `${this.sessionKey}_origin_first`;
+    const readFirstTouch = () => {
+      try {
+        const v = this.storage?.getItem(key);
+        if (v) return v;
+      } catch {
+      }
+      try {
+        return this.cookieStorage?.getItem(key) ?? null;
+      } catch {
+        return null;
+      }
+    };
+    const writeFirstTouch = (v) => {
+      try {
+        this.storage?.setItem(key, v);
+      } catch {
+      }
+      try {
+        this.cookieStorage?.setItem(key, v);
+      } catch {
+      }
+    };
+    const hasSignal = (a) => Boolean(a.utm_source || a.utm_medium || a.utm_campaign || a.utm_content || a.utm_term || a.gclid || a.fbclid || a.msclkid || a.ttclid || a.li_fat_id || a.twclid);
+    try {
+      if (hasSignal(current)) {
+        if (readFirstTouch() === null) writeFirstTouch(JSON.stringify(current));
+        return current;
+      }
+      const raw = readFirstTouch();
+      if (raw) {
+        const stored = JSON.parse(raw);
+        return {
+          ...EMPTY_ACQUISITION,
+          ...stored,
+          // Referrer always describes THIS visit, never the remembered one.
+          referrer: current.referrer
+        };
+      }
+    } catch {
+    }
+    return current;
+  }
   /**
    * Read the persisted session continuity record. Returns null on no
    * storage, no record, malformed JSON, or a record missing its required
@@ -2743,7 +2809,7 @@ var BreadcrumbBuffer = class {
 
 // src/_diagnostic-telemetry.ts
 var DIAGNOSTIC_TELEMETRY_ENDPOINT = "https://api.cross-deck.com/v1/events";
-var DIAGNOSTIC_TELEMETRY_PUBLISHABLE_KEY = "cd_pub_live_9490e7aa029c432abf";
+var DIAGNOSTIC_TELEMETRY_PUBLISHABLE_KEY = "cd_pub_live_eea2f84dbb834a45b7";
 function isDiagnosticTelemetryEnabled() {
   return !DIAGNOSTIC_TELEMETRY_PUBLISHABLE_KEY.startsWith(
     "cd_pub_RELIABILITY_PLACEHOLDER"
@@ -4794,7 +4860,15 @@ var CrossdeckClient = class {
         // a visit survives full-page navigations (multi-page sites
         // re-install the SDK on every page) and honours the same consent
         // posture — MemoryStorage when identity persistence is off.
-        { storage: effectiveStorage, storageKey: opts.storagePrefix + "session" }
+        // cookieStorage is the SAME registrable-domain cookie identity uses.
+        // First-touch origin rides it so the campaign that won a visitor on the
+        // marketing site is still known when they land on the app subdomain —
+        // localStorage alone is per-origin and would lose it at exactly that hop.
+        {
+          storage: effectiveStorage,
+          storageKey: opts.storagePrefix + "session",
+          cookieStorage: cookieStore ?? void 0
+        }
       );
       this.state.autoTracker = tracker;
       tracker.install();
@@ -5640,7 +5714,7 @@ var CrossdeckClient = class {
       }
     }
     this.state.autoTracker?.uninstall();
-    this.state.identity.reset();
+    if (this.state.developerUserId) this.state.identity.reset();
     bridgeReadCost({ actor: void 0 });
     this.state.entitlements.clearAll();
     this.state.events.reset();
@@ -5874,8 +5948,8 @@ function installUnloadFlush(onUnload) {
 }
 
 // src/_contracts-bundled.ts
-var BUNDLED_IN = "@cross-deck/web@1.8.0";
-var SDK_VERSION2 = "1.8.0";
+var BUNDLED_IN = "@cross-deck/web@1.12.0";
+var SDK_VERSION2 = "1.12.0";
 var BUNDLED_CONTRACTS = Object.freeze([
   {
     "id": "contract-failed-payload-schema-lock",
@@ -5997,7 +6071,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
       "legal/security/index.html#diagnostic",
       "legal/sdk-data/index.html#b-diagnostic"
     ],
-    "bundledIn": "@cross-deck/web@1.8.0",
+    "bundledIn": "@cross-deck/web@1.12.0",
     "runtimeVerified": true
   },
   {
@@ -6037,7 +6111,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 8 (codifies existing contract)",
-    "bundledIn": "@cross-deck/web@1.8.0",
+    "bundledIn": "@cross-deck/web@1.12.0",
     "runtimeVerified": true
   },
   {
@@ -6083,7 +6157,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.3",
-    "bundledIn": "@cross-deck/web@1.8.0",
+    "bundledIn": "@cross-deck/web@1.12.0",
     "runtimeVerified": true
   },
   {
@@ -6189,7 +6263,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 2.2.a + 2.2.b + 2.2.c",
-    "bundledIn": "@cross-deck/web@1.8.0",
+    "bundledIn": "@cross-deck/web@1.12.0",
     "runtimeVerified": true
   },
   {
@@ -6217,7 +6291,64 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 5.5",
-    "bundledIn": "@cross-deck/web@1.8.0",
+    "bundledIn": "@cross-deck/web@1.12.0",
+    "runtimeVerified": false
+  },
+  {
+    "id": "invalid-input-rejected-natively",
+    "pillar": "errors",
+    "status": "enforced",
+    "claim": "No public SDK API ever crashes the host app, and invalid input never reaches the wire. Invalid input (empty event name, empty userId, out-of-range config such as a non-positive breadcrumb capacity, NaN/Infinity/oversize/cyclic property values) is rejected at the call site WITHOUT a fatal trap. The signalling IDIOM is per-language and intentionally NOT uniform: Web, Node, and React Native THROW a typed CrossdeckError synchronously (code missing_event_name / missing_user_id / invalid_request_error) \u2014 a normal, catchable JavaScript convention where an uncaught throw logs and the app continues; Swift DROPS with a debug-log signal (track_dropped / identify_dropped) to match its non-throwing fire-and-forget surface, and exposes the throwing equivalent only via identifyAndWait(userId:). What is UNIFORM is the invariant, not the mechanism: every SDK rejects the same inputs, no public fire-and-forget API contains a fatalError / assertionFailure / precondition reachable from customer input, and no rejected input is enqueued or transmitted. Swift additionally proves this in BOTH debug and release configuration, because precondition fires under -O while assertionFailure does not. The bug class this contract closes was never the per-language difference \u2014 it was the UNDECLARED difference: each SDK's public API documentation must state its own semantics explicitly (TS docs: 'throws on empty name'; Swift docs: 'drops and logs').",
+    "appliesTo": [
+      "web",
+      "node",
+      "react-native",
+      "swift"
+    ],
+    "codeRef": [
+      "sdks/web/src/crossdeck.ts",
+      "sdks/node/src/crossdeck-server.ts",
+      "sdks/react-native/src/crossdeck.ts",
+      "sdks/swift/Sources/Crossdeck/Crossdeck.swift",
+      "sdks/swift/Sources/Crossdeck/Breadcrumbs.swift"
+    ],
+    "testRef": [
+      {
+        "file": "sdks/web/tests/crossdeck.test.ts",
+        "name": "track with empty name throws synchronously"
+      },
+      {
+        "file": "sdks/web/tests/crossdeck.test.ts",
+        "name": "rejects empty userId"
+      },
+      {
+        "file": "sdks/node/tests/crossdeck-server.test.ts",
+        "name": "track() throws CrossdeckError with code 'missing_event_name' when event name is empty"
+      },
+      {
+        "file": "sdks/react-native/tests/crossdeck.test.ts",
+        "name": "track('') throws CrossdeckError(missing_event_name) synchronously"
+      },
+      {
+        "file": "sdks/react-native/tests/crossdeck.test.ts",
+        "name": "identify('') rejects with CrossdeckError(missing_user_id)"
+      },
+      {
+        "file": "sdks/swift/Tests/CrossdeckTests/CrossdeckPublicAPITests.swift",
+        "name": "test_track_dropsEmptyName"
+      },
+      {
+        "file": "sdks/swift/Tests/CrossdeckTests/CrossdeckPublicAPITests.swift",
+        "name": "test_identifyAndWait_rejectsEmptyId"
+      },
+      {
+        "file": "sdks/swift/Tests/CrossdeckTests/PublicAPIInputSafetyTests.swift",
+        "name": "test_start_withZeroBreadcrumbCapacity_doesNotTrap"
+      }
+    ],
+    "registeredAt": "2026-06-11",
+    "firstRegisteredIn": "swift trap-on-input class fix \u2014 first machine-tested Swift release",
+    "bundledIn": "@cross-deck/web@1.12.0",
     "runtimeVerified": false
   },
   {
@@ -6297,7 +6428,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 1.3 (web/RN) + dogfood-gap fix (swift + android)",
-    "bundledIn": "@cross-deck/web@1.8.0",
+    "bundledIn": "@cross-deck/web@1.12.0",
     "runtimeVerified": true
   },
   {
@@ -6343,7 +6474,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 6.2",
-    "bundledIn": "@cross-deck/web@1.8.0",
+    "bundledIn": "@cross-deck/web@1.12.0",
     "runtimeVerified": true
   },
   {
@@ -6385,7 +6516,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.2",
-    "bundledIn": "@cross-deck/web@1.8.0",
+    "bundledIn": "@cross-deck/web@1.12.0",
     "runtimeVerified": true
   },
   {
@@ -6419,7 +6550,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.5",
-    "bundledIn": "@cross-deck/web@1.8.0",
+    "bundledIn": "@cross-deck/web@1.12.0",
     "runtimeVerified": false
   }
 ]);