@cross-deck/web 1.6.3 → 1.7.0

package/dist/error-codes.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "generatedAt": "2026-06-01T07:38:09.406Z",
+  "generatedAt": "2026-06-10T12:59:26.148Z",
   "sdk": "@cross-deck/web",
   "codes": [
     {

package/dist/index.cjs

@@ -99,7 +99,7 @@ function typeMapForStatus(status) {
 }
 
 // src/_version.ts
-var SDK_VERSION = "1.6.3";
+var SDK_VERSION = "1.7.0";
 var SDK_NAME = "@cross-deck/web";
 
 // src/http.ts
@@ -1015,9 +1015,13 @@ var EventQueue = class {
       const env = this.cfg.envelope();
       const result = await this.cfg.http.request("POST", "/events", {
         body: {
-          // NorthStar §13.1 batch envelope. The backend validates these
-          // against the API-key-resolved app and rejects mismatches
-          // loudly (env_mismatch).
+          // Event Envelope v1 batch envelope (backend/docs/
+          // event-envelope-spec-v1.md §1). `envelopeVersion` is the
+          // schema/wire version the server parses against ("can I parse
+          // this?") and is DISTINCT from `sdk.version` ("which build is in
+          // the wild?") — two questions, two fields, never conflated. The
+          // backend refuses payloads with a missing/unknown envelopeVersion.
+          envelopeVersion: 1,
           appId: env.appId,
           environment: env.environment,
           sdk: env.sdk,
@@ -1472,6 +1476,15 @@ var AutoTracker = class {
     this.cleanups = [];
     /** Last time we flushed lastActivityAt to storage (throttle gate). */
     this.lastPersistAt = 0;
+    /**
+     * Event Envelope v1 §3 — per-session monotonic sequence counter.
+     * The single owner of the seq counter lives here, alongside all other
+     * session state. Incremented atomically at track() time (via nextSeq()),
+     * reset to 0 whenever a new session boundary is crossed (startNewSession
+     * path + resetSession). Persists across background/foreground within a
+     * session — only a real session boundary (not a tab hide/show) resets it.
+     */
+    this._sessionSeq = 0;
     /**
      * Stable per-page-view identifier. Minted at every `page.viewed`
      * emission and attached to every subsequent event until the next
@@ -1556,6 +1569,20 @@ var AutoTracker = class {
   get currentAcquisition() {
     return this.session?.acquisition ?? EMPTY_ACQUISITION;
   }
+  /**
+   * Event Envelope v1 §3 — return the next seq value for the current session
+   * and advance the counter. Called SYNCHRONOUSLY at track() time, before any
+   * async dispatch, so the seq assignment order is deterministic (call order,
+   * not scheduler luck). The counter is reset to 0 at every session boundary;
+   * it is NOT reset by tab hide/show (spec §3 clause 1: backgrounding does not
+   * reset seq). When no session is active (Node, before init, after uninstall),
+   * returns 0 and leaves the counter unchanged — fallback, not an error.
+   */
+  nextSeq() {
+    const seq = this._sessionSeq;
+    this._sessionSeq += 1;
+    return seq;
+  }
   // ---------- sessions ----------
   installSessionTracking() {
     const now = Date.now();
@@ -1607,6 +1634,7 @@ var AutoTracker = class {
   }
   startNewSession() {
     const now = Date.now();
+    this._sessionSeq = 0;
     return {
       sessionId: mintSessionId(),
       startedAt: now,
@@ -2335,6 +2363,40 @@ function writeJson(storage, key, value) {
   }
 }
 
+// src/internal-opt-out.ts
+var INTERNAL_OPT_OUT_PROPERTY = "$crossdeck_internal";
+var STORAGE_KEY = "crossdeck.internalOptOut";
+function localStore() {
+  try {
+    return typeof localStorage !== "undefined" ? localStorage : null;
+  } catch {
+    return null;
+  }
+}
+function processInternalOptOutUrl() {
+  try {
+    const search = typeof location !== "undefined" ? location.search : "";
+    const params = new URLSearchParams(search || "");
+    if (!params.has("crossdeck_internal")) return;
+    const store = localStore();
+    if (!store) return;
+    const v = params.get("crossdeck_internal");
+    if (v === "1" || v === "true") {
+      store.setItem(STORAGE_KEY, "1");
+    } else if (v === "0" || v === "false") {
+      store.removeItem(STORAGE_KEY);
+    }
+  } catch {
+  }
+}
+function isInternalOptOut() {
+  try {
+    return localStore()?.getItem(STORAGE_KEY) === "1";
+  } catch {
+    return false;
+  }
+}
+
 // src/web-vitals.ts
 var WebVitalsTracker = class {
   constructor(cfg, report) {
@@ -3695,18 +3757,18 @@ function isInAppFrame(filename) {
   if (/\/crossdeck\.umd\.min\.js$/.test(filename)) return false;
   return true;
 }
-function fingerprintError(message, frames, location) {
+function fingerprintError(message, frames, location2) {
   const inAppFrames = frames.filter((f) => f.in_app).slice(0, 3);
   const parts = [
     (message || "").slice(0, 200),
     ...inAppFrames.map((f) => `${f.function}@${f.filename}:${f.lineno}`)
   ];
-  if (inAppFrames.length === 0 && location) {
+  if (inAppFrames.length === 0 && location2) {
     const loc = [
-      location.errorType ?? "",
-      location.filename ?? "",
-      location.lineno ?? "",
-      location.colno ?? ""
+      location2.errorType ?? "",
+      location2.filename ?? "",
+      location2.lineno ?? "",
+      location2.colno ?? ""
     ].join(":");
     if (loc !== ":::") parts.push(loc);
   }
@@ -4552,6 +4614,7 @@ var CrossdeckClient = class {
       persistIdentity ? effectiveStorage : new MemoryStorage(),
       opts.storagePrefix
     );
+    processInternalOptOutUrl();
     const consent = new ConsentManager({ respectDnt: options.respectDnt === true });
     if (consent.isDntDenied) {
       debug.emit(
@@ -5205,8 +5268,27 @@ var CrossdeckClient = class {
         );
       }
     }
+    const seq = s.autoTracker?.nextSeq() ?? 0;
+    const occurrenceTimestamp = Date.now();
     s.autoTracker?.markActivity();
-    const enriched = { ...s.deviceInfo };
+    const wireContext = {};
+    const di = s.deviceInfo;
+    if (di.os) wireContext.os = di.os;
+    if (di.osVersion) wireContext.osVersion = di.osVersion;
+    const appVer = s.options.appVersion;
+    if (appVer) wireContext.appVersion = appVer;
+    wireContext.sdkName = SDK_NAME;
+    wireContext.sdkVersion = s.options.sdkVersion;
+    if (di.locale) wireContext.locale = di.locale;
+    if (di.timezone) wireContext.timezone = di.timezone;
+    if (di.browser) wireContext.browser = di.browser;
+    if (di.browserVersion) wireContext.browserVersion = di.browserVersion;
+    const enriched = {};
+    if (di.screenWidth !== void 0) enriched.screenWidth = di.screenWidth;
+    if (di.screenHeight !== void 0) enriched.screenHeight = di.screenHeight;
+    if (di.viewportWidth !== void 0) enriched.viewportWidth = di.viewportWidth;
+    if (di.viewportHeight !== void 0) enriched.viewportHeight = di.viewportHeight;
+    if (di.devicePixelRatio !== void 0) enriched.devicePixelRatio = di.devicePixelRatio;
     const sessionId = s.autoTracker?.currentSessionId;
     if (sessionId) enriched.sessionId = sessionId;
     const pageviewId = s.autoTracker?.currentPageviewId;
@@ -5237,11 +5319,16 @@ var CrossdeckClient = class {
       enriched.$groups = groupIds;
     }
     Object.assign(enriched, validation.properties);
+    if (isInternalOptOut()) {
+      enriched[INTERNAL_OPT_OUT_PROPERTY] = true;
+    }
     const finalProperties = s.scrubPii ? scrubPiiFromProperties(enriched) : enriched;
     const event = {
       eventId: this.mintEventId(),
       name,
-      timestamp: Date.now(),
+      timestamp: occurrenceTimestamp,
+      seq,
+      context: wireContext,
       properties: finalProperties
     };
     Object.assign(event, this.identityHintForEvent());
@@ -5596,8 +5683,8 @@ function installUnloadFlush(onUnload) {
 }
 
 // src/_contracts-bundled.ts
-var BUNDLED_IN = "@cross-deck/web@1.6.3";
-var SDK_VERSION2 = "1.6.3";
+var BUNDLED_IN = "@cross-deck/web@1.7.0";
+var SDK_VERSION2 = "1.7.0";
 var BUNDLED_CONTRACTS = Object.freeze([
   {
     "id": "contract-failed-payload-schema-lock",
@@ -5719,7 +5806,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
       "legal/security/index.html#diagnostic",
       "legal/sdk-data/index.html#b-diagnostic"
     ],
-    "bundledIn": "@cross-deck/web@1.6.3",
+    "bundledIn": "@cross-deck/web@1.7.0",
     "runtimeVerified": true
   },
   {
@@ -5759,7 +5846,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 8 (codifies existing contract)",
-    "bundledIn": "@cross-deck/web@1.6.3",
+    "bundledIn": "@cross-deck/web@1.7.0",
     "runtimeVerified": true
   },
   {
@@ -5805,7 +5892,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.3",
-    "bundledIn": "@cross-deck/web@1.6.3",
+    "bundledIn": "@cross-deck/web@1.7.0",
     "runtimeVerified": true
   },
   {
@@ -5911,7 +5998,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 2.2.a + 2.2.b + 2.2.c",
-    "bundledIn": "@cross-deck/web@1.6.3",
+    "bundledIn": "@cross-deck/web@1.7.0",
     "runtimeVerified": true
   },
   {
@@ -5939,7 +6026,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 5.5",
-    "bundledIn": "@cross-deck/web@1.6.3",
+    "bundledIn": "@cross-deck/web@1.7.0",
     "runtimeVerified": false
   },
   {
@@ -6019,7 +6106,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 1.3 (web/RN) + dogfood-gap fix (swift + android)",
-    "bundledIn": "@cross-deck/web@1.6.3",
+    "bundledIn": "@cross-deck/web@1.7.0",
     "runtimeVerified": true
   },
   {
@@ -6065,7 +6152,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 6.2",
-    "bundledIn": "@cross-deck/web@1.6.3",
+    "bundledIn": "@cross-deck/web@1.7.0",
     "runtimeVerified": true
   },
   {
@@ -6107,7 +6194,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.2",
-    "bundledIn": "@cross-deck/web@1.6.3",
+    "bundledIn": "@cross-deck/web@1.7.0",
     "runtimeVerified": true
   },
   {
@@ -6141,7 +6228,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.5",
-    "bundledIn": "@cross-deck/web@1.6.3",
+    "bundledIn": "@cross-deck/web@1.7.0",
     "runtimeVerified": false
   }
 ]);