@cross-deck/web 1.6.1 → 1.6.3

package/CHANGELOG.md

@@ -2,6 +2,49 @@
 
 All notable changes to `@cross-deck/web` will be documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.6.3] — 2026-06-01
+
+Patch — error-capture noise reduction. The fetch wrapper raised an
+`HTTPError(status 0)` for **every** failed request, including the opaque
+`TypeError` an adblocker, an offline device, or an aborted navigation
+produces. Per the Fetch spec these are indistinguishable from a real outage,
+so `status 0` is the single biggest false-alarm source in browser error
+tracking — a developer's own adblocker blocking a first-party asset would
+page as a production error. No public API change.
+
+**Status-0 network failures from unambiguous client noise are no longer
+reported.** A new internal predicate suppresses three cases: `AbortError`
+(navigation / explicit cancel), offline (`navigator.onLine === false`), and
+**same-origin** failures — the page itself loaded from that origin, so it's
+demonstrably reachable; a status-0 there is client-side blocking, not a
+server fault. Genuine same-origin server failures still surface as 5xx on
+the success path. **Cross-origin outages still report** — real signal is
+kept, only the noise is dropped. The request breadcrumb still fires
+regardless, so context is preserved on other errors.
+
+## [1.6.2] — 2026-05-31
+
+Patch — session-boundary correctness. A stored session could span a gap
+longer than the 30-minute inactivity window in two cases the resume logic
+missed, fragmenting journey grouping. Both are now fixed. No public API
+change; `session.ended` emission timing changes as described, so read
+before upgrading if you have downstream logic keyed on it.
+
+**A tab left open and idle, then used again, no longer stretches one
+session across the gap.** `markActivity()` now rolls to a new session when
+an event lands after the 30-minute window has lapsed — covering the case
+the page-load and tab-return resume checks miss entirely (a tab kept open
+and idle, then interacted with, with no visibility transition). A single
+stored session can no longer contain a >30-minute gap.
+
+**Returning to a long-idle tab no longer back-dates `session.ended`.** The
+visibility-resume path emitted `session.ended` at the moment of return —
+more than 30 minutes after the session's last real event — which itself
+opened an intra-session gap. The prior session now ends implicitly (its
+end inferred from its last event), consistent with the page-load resume
+path. If you key downstream logic on `session.ended`, note it no longer
+fires on a >30-minute tab-return.
+
 ## [1.6.1] — 2026-05-30
 
 Minor — two autocapture fidelity fixes, plus a repair to the release

package/dist/contracts.json

@@ -1,10 +1,10 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "generatedAt": "2026-05-30T11:19:57.350Z",
+  "generatedAt": "2026-06-01T07:38:09.435Z",
   "sdk": "@cross-deck/web",
-  "sdkVersion": "1.6.1",
-  "bundledIn": "@cross-deck/web@1.6.1",
-  "count": 8,
+  "sdkVersion": "1.6.3",
+  "bundledIn": "@cross-deck/web@1.6.3",
+  "count": 9,
   "contracts": [
     {
       "id": "contract-failed-payload-schema-lock",
@@ -126,7 +126,7 @@
         "legal/security/index.html#diagnostic",
         "legal/sdk-data/index.html#b-diagnostic"
       ],
-      "bundledIn": "@cross-deck/web@1.6.1"
+      "bundledIn": "@cross-deck/web@1.6.3"
     },
     {
       "id": "error-envelope-shape",
@@ -165,7 +165,7 @@
       ],
       "registeredAt": "2026-05-26",
       "firstRegisteredIn": "bank-grade reconciliation v1.4.0 — phase 8 (codifies existing contract)",
-      "bundledIn": "@cross-deck/web@1.6.1"
+      "bundledIn": "@cross-deck/web@1.6.3"
     },
     {
       "id": "flush-interval-parity",
@@ -210,7 +210,7 @@
       ],
       "registeredAt": "2026-05-26",
       "firstRegisteredIn": "bank-grade reconciliation v1.4.0 — phase 3.3",
-      "bundledIn": "@cross-deck/web@1.6.1"
+      "bundledIn": "@cross-deck/web@1.6.3"
     },
     {
       "id": "idempotency-key-deterministic",
@@ -315,7 +315,7 @@
       ],
       "registeredAt": "2026-05-26",
       "firstRegisteredIn": "bank-grade reconciliation v1.4.0 — phase 2.2.a + 2.2.b + 2.2.c",
-      "bundledIn": "@cross-deck/web@1.6.1"
+      "bundledIn": "@cross-deck/web@1.6.3"
     },
     {
       "id": "init-reentry-drains-prior-queue",
@@ -342,7 +342,7 @@
       ],
       "registeredAt": "2026-05-26",
       "firstRegisteredIn": "bank-grade reconciliation v1.4.0 — phase 5.5",
-      "bundledIn": "@cross-deck/web@1.6.1"
+      "bundledIn": "@cross-deck/web@1.6.3"
     },
     {
       "id": "per-user-cache-isolation",
@@ -421,7 +421,7 @@
       ],
       "registeredAt": "2026-05-26",
       "firstRegisteredIn": "bank-grade reconciliation v1.4.0 — phase 1.3 (web/RN) + dogfood-gap fix (swift + android)",
-      "bundledIn": "@cross-deck/web@1.6.1"
+      "bundledIn": "@cross-deck/web@1.6.3"
     },
     {
       "id": "sdk-error-codes-catalogue",
@@ -435,9 +435,14 @@
       "codeRef": [
         "sdks/web/src/error-codes.ts",
         "sdks/node/src/error-codes.ts",
+        "sdks/web/src/_contract-verifiers.ts",
         "backend/src/api/v1-errors.ts"
       ],
       "testRef": [
+        {
+          "file": "sdks/web/tests/contract-verifiers.test.ts",
+          "name": "sdk-error-codes-catalogue covers every backend wire code with remediation"
+        },
         {
           "file": "sdks/web/tests/error-codes-backfill.test.ts",
           "name": "includes backend code"
@@ -461,7 +466,48 @@
       ],
       "registeredAt": "2026-05-26",
       "firstRegisteredIn": "bank-grade reconciliation v1.4.0 — phase 6.2",
-      "bundledIn": "@cross-deck/web@1.6.1"
+      "bundledIn": "@cross-deck/web@1.6.3"
+    },
+    {
+      "id": "super-property-merge-precedence",
+      "pillar": "analytics",
+      "status": "enforced",
+      "claim": "Every Crossdeck SDK merges event properties with the precedence device < super < caller (caller-supplied values win over registered super-properties, which win over auto-attached device info). Pre-v1.4.0 Swift had it INVERTED (super < device < caller — device clobbered super), so a `register('plan', 'pro')` super-property was silently overridden by auto-attached device fields whenever keys collided. Cross-SDK funnel queries on super-property keys returned different answers per platform.",
+      "appliesTo": [
+        "web",
+        "swift"
+      ],
+      "codeRef": [
+        "sdks/web/src/super-properties.ts",
+        "sdks/web/src/_contract-verifiers.ts",
+        "sdks/swift/Sources/Crossdeck/EventPropertyMerge.swift",
+        "sdks/swift/Sources/Crossdeck/Crossdeck.swift"
+      ],
+      "testRef": [
+        {
+          "file": "sdks/web/tests/contract-verifiers.test.ts",
+          "name": "super-property-merge-precedence verifies caller > super > device"
+        },
+        {
+          "file": "sdks/swift/Tests/CrossdeckTests/EventPropertyMergeTests.swift",
+          "name": "test_super_overrides_device"
+        },
+        {
+          "file": "sdks/swift/Tests/CrossdeckTests/EventPropertyMergeTests.swift",
+          "name": "test_caller_overrides_super"
+        },
+        {
+          "file": "sdks/swift/Tests/CrossdeckTests/EventPropertyMergeTests.swift",
+          "name": "test_full_precedence_chain"
+        },
+        {
+          "file": "sdks/swift/Tests/CrossdeckTests/EventPropertyMergeTests.swift",
+          "name": "test_matchesWebNodeRNPrecedence"
+        }
+      ],
+      "registeredAt": "2026-05-26",
+      "firstRegisteredIn": "bank-grade reconciliation v1.4.0 — phase 3.2",
+      "bundledIn": "@cross-deck/web@1.6.3"
     },
     {
       "id": "sync-purchases-funnel-parity",
@@ -494,7 +540,7 @@
       ],
       "registeredAt": "2026-05-26",
       "firstRegisteredIn": "bank-grade reconciliation v1.4.0 — phase 3.5",
-      "bundledIn": "@cross-deck/web@1.6.1"
+      "bundledIn": "@cross-deck/web@1.6.3"
     }
   ]
 }