@cross-deck/web 1.8.0 → 1.9.0

package/dist/error-codes.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "generatedAt": "2026-06-11T07:13:22.322Z",
+  "generatedAt": "2026-06-24T10:42:10.345Z",
   "sdk": "@cross-deck/web",
   "codes": [
     {

package/dist/index.cjs

@@ -104,7 +104,7 @@ function typeMapForStatus(status) {
 }
 
 // src/_version.ts
-var SDK_VERSION = "1.8.0";
+var SDK_VERSION = "1.9.0";
 var SDK_NAME = "@cross-deck/web";
 
 // src/http.ts
@@ -1405,6 +1405,16 @@ function hasDocument() {
   return typeof globalThis.document !== "undefined";
 }
 
+// src/read-cost-bridge.ts
+var BUCKETS_BRIDGE_KEY = "__crossdeckBucketsBridge__";
+function bridgeReadCost(ctx) {
+  try {
+    const setter = globalThis[BUCKETS_BRIDGE_KEY];
+    if (typeof setter === "function") setter(ctx);
+  } catch {
+  }
+}
+
 // src/device-info.ts
 function isBrowser() {
   return typeof globalThis.window !== "undefined" && typeof globalThis.document !== "undefined" && typeof globalThis.navigator !== "undefined";
@@ -4894,6 +4904,7 @@ var CrossdeckClient = class {
         message: "identify(userId) requires a non-empty userId."
       });
     }
+    bridgeReadCost({ actor: userId });
     if (!s.consent.analytics) {
       s.debug.emit(
         "sdk.consent_denied",
@@ -5546,6 +5557,7 @@ var CrossdeckClient = class {
     }
     this.state.autoTracker?.uninstall();
     this.state.identity.reset();
+    bridgeReadCost({ actor: void 0 });
     this.state.entitlements.clearAll();
     this.state.events.reset();
     this.state.superProps.clear();
@@ -5636,6 +5648,23 @@ var CrossdeckClient = class {
     const s = this.requireStarted();
     return s.identity.crossdeckCustomerId ?? s.developerUserId ?? s.identity.anonymousId;
   }
+  /**
+   * The device-scoped anonymous id the SDK minted on first boot and persists
+   * across launches (stable until reset()). Public accessor so a server-to-
+   * server flow or a block/suspension gate can pass the device identity to
+   * POST /v1/resolve without reaching into private storage.
+   *
+   * Returns `null` BEFORE init() — there is no anon id yet, and a gate that
+   * fires during early app boot should get a clean falsy, not a throw. (This is
+   * deliberately softer than getCheckoutReference(), which requires init.)
+   *
+   * Note: /v1/resolve also accepts a VERIFIED identity (userId + idToken)
+   * without an anonymousId, and that path is higher-trust — prefer it where the
+   * user is authenticated.
+   */
+  getAnonymousId() {
+    return this.state ? this.state.identity.anonymousId : null;
+  }
   // ---------- private helpers ----------
   requireStarted() {
     if (!this.state) {