@cross-deck/web 1.5.1 → 1.5.3

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { P as PublicEntitlement, C as CrossdeckOptions, I as IdentifyOptions, A as AliasResult, G as GroupTraits, E as EventProperties, a as PurchaseResult, H as HeartbeatResponse, D as Diagnostics, K as KeyValueStorage } from './types-Bu3jbmdq.mjs';
-export { b as AuditRail, c as AutoTrackOptions, d as EntitlementsListResponse, e as Environment, f as Platform } from './types-Bu3jbmdq.mjs';
+import { P as PublicEntitlement, C as CrossdeckOptions, I as IdentifyOptions, A as AliasResult, G as GroupTraits, E as EventProperties, a as PurchaseResult, H as HeartbeatResponse, D as Diagnostics, K as KeyValueStorage } from './types-B9sxUuKh.mjs';
+export { b as AuditRail, c as AutoTrackOptions, d as EntitlementsListResponse, e as Environment, f as Platform } from './types-B9sxUuKh.mjs';
 
 /**
  * Durable last-known-good cache of the customer's entitlements.
@@ -232,9 +232,9 @@ declare const CrossdeckContracts: {
     /** Filter by lifecycle status. */
     readonly withStatus: (status: ContractStatus) => readonly Contract[];
     /** Semver of the SDK release these contracts were bundled with. */
-    readonly sdkVersion: "1.5.0";
+    readonly sdkVersion: "1.5.3";
     /** Fully-qualified bundle identifier — e.g. `@cross-deck/web@1.4.2`. */
-    readonly bundledIn: "@cross-deck/web@1.5.0";
+    readonly bundledIn: "@cross-deck/web@1.5.3";
     /**
      * Resolve a failing test back to the contract it exercises.
      * Used by test-framework hooks (Vitest `afterEach`, XCTest
@@ -251,9 +251,15 @@ declare const CrossdeckContracts: {
 /**
  * Input to {@link Crossdeck.reportContractFailure}. Lets a test
  * harness / dogfood app / customer integration report a contract
- * violation back to Crossdeck through the standard `track()` API
- * with a typed property bag — no new ingest endpoint, no bespoke
- * code, just a `crossdeck.contract_failed` custom event.
+ * violation back to Crossdeck on the dedicated reliability channel —
+ * single-fire, never visible in the customer's dashboard.
+ *
+ * SCHEMA-LOCK: this interface's field set is exhaustively named. No
+ * free-form `extra: Record<string, unknown>` — the schema-lock
+ * contract at
+ * `contracts/diagnostics/contract-failed-payload-schema-lock.json`
+ * forbids unbounded fields. Adding a field requires a PR that
+ * amends the contract first, then the public interface.
  *
  * `sdk_version` and `sdk_platform` are auto-stamped by the SDK so
  * every emitted event carries them correctly without the caller
@@ -262,7 +268,11 @@ declare const CrossdeckContracts: {
 interface ContractFailureInput {
     /** Stable contract id (`per-user-cache-isolation` etc.). */
     contractId: string;
-    /** Human-readable failure reason — the assertion message. */
+    /**
+     * Short categorical-ish label — the SDK convention is to keep this
+     * under 128 chars and stable across runs (so dashboards can group).
+     * Never an end-user-supplied string.
+     */
     failureReason: string;
     /**
      * Where the failure was observed:
@@ -285,8 +295,11 @@ interface ContractFailureInput {
         file: string;
         name: string;
     };
-    /** Optional extra properties merged into the event payload. */
-    extra?: Record<string, unknown>;
+    /**
+     * Optional coarse device class, e.g. "desktop", "mobile-web",
+     * "ssr". A categorical bucket, not a device identifier.
+     */
+    deviceClass?: string;
 }
 
 /**
@@ -431,6 +444,9 @@ interface CapturedError {
 
 declare class CrossdeckClient {
     private state;
+    private verifiers;
+    private verifierReporter;
+    private verifierCtx;
     /**
      * Boot the SDK. Idempotent — calling init twice with the same options
      * is a no-op; calling with different options replaces the previous
@@ -441,6 +457,22 @@ declare class CrossdeckClient {
      * mismatched env fails fast at boot rather than at first event-flush.
      */
     init(options: CrossdeckOptions): void;
+    /**
+     * Fetch /v1/config from the backend and apply any per-app verifier
+     * overrides set in the dashboard, then fire the boot self-test
+     * once with the FINAL resolved flags.
+     *
+     * Precedence (also documented at the call site in init()):
+     *   code option > dashboard remote config > DEBUG/RELEASE default
+     *
+     * Code wins so engineers retain ultimate control; dashboard is the
+     * no-deploy operational lever for QA / staging soaks.
+     *
+     * Never throws — a /v1/config failure surfaces as "stick with the
+     * synchronous defaults that init() already applied" and the boot
+     * self-test runs only if code > default resolves true.
+     */
+    private bootstrapVerifierLayerRemote;
     /**
      * @deprecated Use `init()` instead. NorthStar §4 standardised the
      * lifecycle method name across SDKs as `init` (formerly `start` /
@@ -640,11 +672,14 @@ declare class CrossdeckClient {
      * call flush().
      */
     /**
-     * Emit `crossdeck.contract_failed` with the canonical property
-     * shape (`contract_id`, `sdk_version`, `sdk_platform`,
-     * `failure_reason`, `run_context`, `run_id`). Goes through the
-     * standard track() pipeline — same consent gate, same queue,
-     * same ingest, no new endpoint.
+     * Emit `crossdeck.contract_failed` to the Crossdeck reliability
+     * endpoint — single-fire, one-way, never visible in the customer's
+     * dashboard. Goes over a dedicated HTTP path with the reliability
+     * publishable key embedded at build time; the customer's track()
+     * pipeline never carries `crossdeck.*` events. This is the
+     * independent-controller flow described in Privacy Policy §6
+     * ("Flow B"). The wire shape is fixed by the schema-lock contract
+     * at `contracts/diagnostics/contract-failed-payload-schema-lock.json`.
      *
      * Wire the call from a test hook, dogfood failure path, or
      * customer contract-verification harness; see
@@ -851,7 +886,7 @@ declare class MemoryStorage implements KeyValueStorage {
  *
  * Do NOT edit by hand — `node scripts/sync-sdk-versions.mjs`.
  */
-declare const SDK_VERSION = "1.4.2";
+declare const SDK_VERSION = "1.5.3";
 declare const SDK_NAME = "@cross-deck/web";
 
 /**

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { P as PublicEntitlement, C as CrossdeckOptions, I as IdentifyOptions, A as AliasResult, G as GroupTraits, E as EventProperties, a as PurchaseResult, H as HeartbeatResponse, D as Diagnostics, K as KeyValueStorage } from './types-Bu3jbmdq.js';
-export { b as AuditRail, c as AutoTrackOptions, d as EntitlementsListResponse, e as Environment, f as Platform } from './types-Bu3jbmdq.js';
+import { P as PublicEntitlement, C as CrossdeckOptions, I as IdentifyOptions, A as AliasResult, G as GroupTraits, E as EventProperties, a as PurchaseResult, H as HeartbeatResponse, D as Diagnostics, K as KeyValueStorage } from './types-B9sxUuKh.js';
+export { b as AuditRail, c as AutoTrackOptions, d as EntitlementsListResponse, e as Environment, f as Platform } from './types-B9sxUuKh.js';
 
 /**
  * Durable last-known-good cache of the customer's entitlements.
@@ -232,9 +232,9 @@ declare const CrossdeckContracts: {
     /** Filter by lifecycle status. */
     readonly withStatus: (status: ContractStatus) => readonly Contract[];
     /** Semver of the SDK release these contracts were bundled with. */
-    readonly sdkVersion: "1.5.0";
+    readonly sdkVersion: "1.5.3";
     /** Fully-qualified bundle identifier — e.g. `@cross-deck/web@1.4.2`. */
-    readonly bundledIn: "@cross-deck/web@1.5.0";
+    readonly bundledIn: "@cross-deck/web@1.5.3";
     /**
      * Resolve a failing test back to the contract it exercises.
      * Used by test-framework hooks (Vitest `afterEach`, XCTest
@@ -251,9 +251,15 @@ declare const CrossdeckContracts: {
 /**
  * Input to {@link Crossdeck.reportContractFailure}. Lets a test
  * harness / dogfood app / customer integration report a contract
- * violation back to Crossdeck through the standard `track()` API
- * with a typed property bag — no new ingest endpoint, no bespoke
- * code, just a `crossdeck.contract_failed` custom event.
+ * violation back to Crossdeck on the dedicated reliability channel —
+ * single-fire, never visible in the customer's dashboard.
+ *
+ * SCHEMA-LOCK: this interface's field set is exhaustively named. No
+ * free-form `extra: Record<string, unknown>` — the schema-lock
+ * contract at
+ * `contracts/diagnostics/contract-failed-payload-schema-lock.json`
+ * forbids unbounded fields. Adding a field requires a PR that
+ * amends the contract first, then the public interface.
  *
  * `sdk_version` and `sdk_platform` are auto-stamped by the SDK so
  * every emitted event carries them correctly without the caller
@@ -262,7 +268,11 @@ declare const CrossdeckContracts: {
 interface ContractFailureInput {
     /** Stable contract id (`per-user-cache-isolation` etc.). */
     contractId: string;
-    /** Human-readable failure reason — the assertion message. */
+    /**
+     * Short categorical-ish label — the SDK convention is to keep this
+     * under 128 chars and stable across runs (so dashboards can group).
+     * Never an end-user-supplied string.
+     */
     failureReason: string;
     /**
      * Where the failure was observed:
@@ -285,8 +295,11 @@ interface ContractFailureInput {
         file: string;
         name: string;
     };
-    /** Optional extra properties merged into the event payload. */
-    extra?: Record<string, unknown>;
+    /**
+     * Optional coarse device class, e.g. "desktop", "mobile-web",
+     * "ssr". A categorical bucket, not a device identifier.
+     */
+    deviceClass?: string;
 }
 
 /**
@@ -431,6 +444,9 @@ interface CapturedError {
 
 declare class CrossdeckClient {
     private state;
+    private verifiers;
+    private verifierReporter;
+    private verifierCtx;
     /**
      * Boot the SDK. Idempotent — calling init twice with the same options
      * is a no-op; calling with different options replaces the previous
@@ -441,6 +457,22 @@ declare class CrossdeckClient {
      * mismatched env fails fast at boot rather than at first event-flush.
      */
     init(options: CrossdeckOptions): void;
+    /**
+     * Fetch /v1/config from the backend and apply any per-app verifier
+     * overrides set in the dashboard, then fire the boot self-test
+     * once with the FINAL resolved flags.
+     *
+     * Precedence (also documented at the call site in init()):
+     *   code option > dashboard remote config > DEBUG/RELEASE default
+     *
+     * Code wins so engineers retain ultimate control; dashboard is the
+     * no-deploy operational lever for QA / staging soaks.
+     *
+     * Never throws — a /v1/config failure surfaces as "stick with the
+     * synchronous defaults that init() already applied" and the boot
+     * self-test runs only if code > default resolves true.
+     */
+    private bootstrapVerifierLayerRemote;
     /**
      * @deprecated Use `init()` instead. NorthStar §4 standardised the
      * lifecycle method name across SDKs as `init` (formerly `start` /
@@ -640,11 +672,14 @@ declare class CrossdeckClient {
      * call flush().
      */
     /**
-     * Emit `crossdeck.contract_failed` with the canonical property
-     * shape (`contract_id`, `sdk_version`, `sdk_platform`,
-     * `failure_reason`, `run_context`, `run_id`). Goes through the
-     * standard track() pipeline — same consent gate, same queue,
-     * same ingest, no new endpoint.
+     * Emit `crossdeck.contract_failed` to the Crossdeck reliability
+     * endpoint — single-fire, one-way, never visible in the customer's
+     * dashboard. Goes over a dedicated HTTP path with the reliability
+     * publishable key embedded at build time; the customer's track()
+     * pipeline never carries `crossdeck.*` events. This is the
+     * independent-controller flow described in Privacy Policy §6
+     * ("Flow B"). The wire shape is fixed by the schema-lock contract
+     * at `contracts/diagnostics/contract-failed-payload-schema-lock.json`.
      *
      * Wire the call from a test hook, dogfood failure path, or
      * customer contract-verification harness; see
@@ -851,7 +886,7 @@ declare class MemoryStorage implements KeyValueStorage {
  *
  * Do NOT edit by hand — `node scripts/sync-sdk-versions.mjs`.
  */
-declare const SDK_VERSION = "1.4.2";
+declare const SDK_VERSION = "1.5.3";
 declare const SDK_NAME = "@cross-deck/web";
 
 /**