@datalyr/web 1.0.6 → 1.1.0

package/dist/datalyr.cjs.js

@@ -1,5 +1,5 @@
 /**
- * @datalyr/web v1.0.6
+ * @datalyr/web v1.1.0
  * Datalyr Web SDK - Modern attribution tracking for web applications
  * (c) 2025 Datalyr Inc.
  * Released under the MIT License
@@ -163,7 +163,16 @@ class CookieStorage {
         const value = `; ${document.cookie}`;
         const parts = value.split(`; ${name}=`);
         if (parts.length === 2) {
-            return ((_a = parts.pop()) === null || _a === void 0 ? void 0 : _a.split(';').shift()) || null;
+            const rawValue = ((_a = parts.pop()) === null || _a === void 0 ? void 0 : _a.split(';').shift()) || null;
+            if (rawValue) {
+                try {
+                    return decodeURIComponent(rawValue);
+                }
+                catch (_b) {
+                    // Return raw value if decoding fails (backwards compatibility)
+                    return rawValue;
+                }
+            }
         }
         return null;
     }
@@ -397,6 +406,33 @@ function isGlobalPrivacyControlEnabled() {
     return navigator.globalPrivacyControl === true ||
         window.globalPrivacyControl === true;
 }
+/**
+ * Get root domain for cross-subdomain tracking
+ */
+function getRootDomain() {
+    const hostname = window.location.hostname;
+    // Handle localhost and IP addresses
+    if (hostname === 'localhost' ||
+        hostname.match(/^[0-9]{1,3}\./) || // IPv4
+        hostname.match(/^\[?[0-9a-fA-F:]+\]?$/)) { // IPv6
+        return hostname;
+    }
+    // Get root domain (last two parts: example.com)
+    const parts = hostname.split('.');
+    if (parts.length >= 2) {
+        // Handle .co.uk, .com.au, etc
+        const tld = parts[parts.length - 1];
+        const sld = parts[parts.length - 2];
+        // Common two-part TLDs
+        const twoPartTlds = ['co.uk', 'com.au', 'co.nz', 'co.jp', 'co.in', 'co.za'];
+        const lastTwo = `${sld}.${tld}`;
+        if (twoPartTlds.includes(lastTwo) && parts.length >= 3) {
+            return '.' + parts.slice(-3).join('.');
+        }
+        return '.' + parts.slice(-2).join('.');
+    }
+    return hostname;
+}
 /**
  * Get referrer data
  */
@@ -460,13 +496,61 @@ class IdentityManager {
      * Get or create anonymous ID (device/browser identifier)
      */
     getOrCreateAnonymousId() {
-        let anonymousId = storage.get('dl_anonymous_id');
-        if (!anonymousId) {
-            anonymousId = `anon_${generateUUID()}`;
+        // 1. Check root domain cookie first (works across subdomains)
+        let anonymousId = cookies.get('__dl_visitor_id');
+        if (anonymousId) {
+            // Found in cookie - sync to localStorage
             storage.set('dl_anonymous_id', anonymousId);
-        }
+            return anonymousId;
+        }
+        // 2. Check localStorage (fallback for cookie issues)
+        anonymousId = storage.get('dl_anonymous_id');
+        if (anonymousId) {
+            // Found in localStorage - set root domain cookie
+            this.setRootDomainCookie('__dl_visitor_id', anonymousId);
+            return anonymousId;
+        }
+        // 3. Generate new ID
+        anonymousId = `anon_${generateUUID()}`;
+        // 4. Store in both cookie (primary) and localStorage (backup)
+        this.setRootDomainCookie('__dl_visitor_id', anonymousId);
+        storage.set('dl_anonymous_id', anonymousId);
         return anonymousId;
     }
+    /**
+     * Set a root domain cookie for cross-subdomain tracking
+     */
+    setRootDomainCookie(name, value) {
+        try {
+            const rootDomain = getRootDomain();
+            const secure = location.protocol === 'https:' ? '; Secure' : '';
+            const encodedValue = encodeURIComponent(value);
+            // Set cookie with root domain, 1 year expiry
+            document.cookie = `${name}=${encodedValue}; domain=${rootDomain}; path=/; max-age=31536000; SameSite=Lax${secure}`;
+            // Verify cookie was set successfully (cookies.get already decodes)
+            const verifyValue = cookies.get(name);
+            if (verifyValue === value) {
+                console.log(`[Datalyr] Set root domain cookie: ${name} on domain: ${rootDomain}`);
+            }
+            else {
+                // Fallback: try without domain (current subdomain only)
+                document.cookie = `${name}=${encodedValue}; path=/; max-age=31536000; SameSite=Lax${secure}`;
+                console.log(`[Datalyr] Set cookie without domain (fallback): ${name}`);
+            }
+        }
+        catch (e) {
+            console.error('[Datalyr] Error setting root domain cookie:', e);
+            // Still try to set without domain as fallback
+            try {
+                const secure = location.protocol === 'https:' ? '; Secure' : '';
+                const encodedValue = encodeURIComponent(value);
+                document.cookie = `${name}=${encodedValue}; path=/; max-age=31536000; SameSite=Lax${secure}`;
+            }
+            catch (fallbackError) {
+                console.error('[Datalyr] Failed to set cookie even without domain:', fallbackError);
+            }
+        }
+    }
     /**
      * Get stored user ID from previous session
      */
@@ -560,6 +644,8 @@ class IdentityManager {
         // Generate new anonymous ID for privacy
         this.anonymousId = `anon_${generateUUID()}`;
         storage.set('dl_anonymous_id', this.anonymousId);
+        // Update root domain cookie with new ID
+        this.setRootDomainCookie('__dl_visitor_id', this.anonymousId);
     }
     /**
      * Get all identity fields for event payload
@@ -1539,24 +1625,40 @@ class FingerprintCollector {
     }
     /**
      * Collect minimal fingerprint data (privacy-friendly)
+     * Matches browser tag minimal fingerprinting approach
      */
     collectMinimal() {
-        return {
+        const fp = {
             timezone: this.getTimezone(),
             language: navigator.language || null,
-            platform: navigator.platform || null,
-            canvasEnabled: false,
-            localStorageAvailable: this.testStorage('localStorage'),
-            sessionStorageAvailable: this.testStorage('sessionStorage')
+            screen_bucket: this.getScreenBucket(),
+            dnt: (navigator.doNotTrack === '1' || window.globalPrivacyControl === true) || null,
+            userAgent: navigator.userAgent || null
         };
+        // User-Agent Client Hints (modern browsers)
+        if ('userAgentData' in navigator) {
+            const uaData = navigator.userAgentData;
+            fp.userAgentData = {
+                brands: uaData.brands || [],
+                mobile: uaData.mobile || false,
+                platform: uaData.platform || null
+            };
+        }
+        return fp;
     }
     /**
      * Collect standard fingerprint data
+     * PRIVACY: Minimal data collection matching browser tag approach
+     * Only collects data necessary for basic analytics and attribution
      */
     collectStandard() {
         const fingerprint = {};
         try {
-            // Basic browser data
+            // PRIVACY: Only collect minimal data needed for attribution
+            fingerprint.timezone = this.getTimezone();
+            fingerprint.language = navigator.language || null;
+            fingerprint.screen_bucket = this.getScreenBucket();
+            fingerprint.dnt = (navigator.doNotTrack === '1' || window.globalPrivacyControl === true) || null;
             fingerprint.userAgent = navigator.userAgent || null;
             // User-Agent Client Hints (modern browsers)
             if ('userAgentData' in navigator) {
@@ -1567,125 +1669,14 @@ class FingerprintCollector {
                     platform: uaData.platform || null
                 };
             }
-            // Language settings
-            fingerprint.language = navigator.language || null;
-            fingerprint.languages = navigator.languages ?
-                navigator.languages.slice(0, 2) : null; // Limit to 2 for privacy
-            // Platform and browser features
-            fingerprint.platform = navigator.platform || null;
-            fingerprint.cookieEnabled = navigator.cookieEnabled || null;
-            fingerprint.doNotTrack = navigator.doNotTrack || null;
-            // Hardware (coarsened for privacy)
-            fingerprint.hardwareConcurrency = this.coarsenHardwareConcurrency();
-            fingerprint.deviceMemory = this.coarsenDeviceMemory();
-            fingerprint.maxTouchPoints = navigator.maxTouchPoints > 0 ? 'touch' : 'no-touch';
-            // Screen (coarsened)
-            fingerprint.screenResolution = this.getScreenResolution();
-            fingerprint.colorDepth = screen.colorDepth || null;
-            fingerprint.pixelRatio = this.coarsenPixelRatio();
-            // Timezone
-            fingerprint.timezone = this.getTimezone();
-            fingerprint.timezoneOffset = this.coarsenTimezoneOffset();
-            // Canvas fingerprinting disabled for privacy
-            fingerprint.canvasEnabled = false;
-            // Plugins count only (not details for privacy)
-            fingerprint.pluginsCount = navigator.plugins ? navigator.plugins.length : null;
-            // Storage availability
-            fingerprint.localStorageAvailable = this.testStorage('localStorage');
-            fingerprint.sessionStorageAvailable = this.testStorage('sessionStorage');
-            fingerprint.indexedDBAvailable = this.testIndexedDB();
-            // Add cached heavy fingerprint data if available
-            if (this.heavyFingerprintDone) {
-                Object.assign(fingerprint, this.fingerprintCache);
-            }
         }
         catch (e) {
             console.warn('[Datalyr] Error collecting fingerprint:', e);
         }
         return fingerprint;
     }
-    /**
-     * Collect heavy fingerprint data (WebGL, Audio)
-     * Called lazily on first event to improve page load performance
-     */
-    collectHeavyFingerprint() {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (this.heavyFingerprintDone || this.privacyMode === 'strict') {
-                return;
-            }
-            try {
-                // WebGL fingerprinting
-                const webglData = this.getWebGLFingerprint();
-                if (webglData) {
-                    this.fingerprintCache.webglVendor = webglData.vendor;
-                    this.fingerprintCache.webglRenderer = webglData.renderer;
-                }
-                // Audio fingerprinting
-                const audioData = yield this.getAudioFingerprint();
-                if (audioData) {
-                    this.fingerprintCache.audioSampleRate = audioData.sampleRate;
-                    this.fingerprintCache.audioState = audioData.state;
-                    this.fingerprintCache.audioMaxChannels = audioData.maxChannels;
-                }
-                this.heavyFingerprintDone = true;
-            }
-            catch (e) {
-                console.warn('[Datalyr] Heavy fingerprinting failed:', e);
-            }
-        });
-    }
-    /**
-     * Get WebGL fingerprint
-     */
-    getWebGLFingerprint() {
-        try {
-            const canvas = document.createElement('canvas');
-            const gl = canvas.getContext('webgl') || canvas.getContext('experimental-webgl');
-            if (!gl)
-                return null;
-            const debugInfo = gl.getExtension('WEBGL_debug_renderer_info');
-            if (!debugInfo) {
-                return {
-                    vendor: gl.getParameter(gl.VENDOR) || 'unknown',
-                    renderer: gl.getParameter(gl.RENDERER) || 'unknown'
-                };
-            }
-            return {
-                vendor: gl.getParameter(debugInfo.UNMASKED_VENDOR_WEBGL) || 'unknown',
-                renderer: gl.getParameter(debugInfo.UNMASKED_RENDERER_WEBGL) || 'unknown'
-            };
-        }
-        catch (_a) {
-            return null;
-        }
-    }
-    /**
-     * Get audio fingerprint
-     */
-    getAudioFingerprint() {
-        return __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            try {
-                const AudioContext = window.AudioContext || window.webkitAudioContext;
-                if (!AudioContext)
-                    return null;
-                const audioCtx = new AudioContext();
-                const result = {
-                    sampleRate: audioCtx.sampleRate || null,
-                    state: audioCtx.state || null,
-                    maxChannels: ((_a = audioCtx.destination) === null || _a === void 0 ? void 0 : _a.maxChannelCount) || null
-                };
-                // Close context to free resources
-                if (audioCtx.close) {
-                    yield audioCtx.close();
-                }
-                return result;
-            }
-            catch (_b) {
-                return null;
-            }
-        });
-    }
+    // PRIVACY: Heavy fingerprinting (WebGL, Audio) removed
+    // Minimal fingerprinting only for privacy compliance
     /**
      * Get timezone
      */
@@ -1698,10 +1689,13 @@ class FingerprintCollector {
         }
     }
     /**
-     * Get screen resolution (coarsened)
+     * Get coarse screen bucket for basic device classification
+     * Rounds to nearest 100px for privacy
      */
-    getScreenResolution() {
+    getScreenBucket() {
         try {
+            if (!window.screen)
+                return null;
             const width = Math.round(screen.width / 100) * 100;
             const height = Math.round(screen.height / 100) * 100;
             return `${width}x${height}`;
@@ -1710,96 +1704,8 @@ class FingerprintCollector {
             return null;
         }
     }
-    /**
-     * Coarsen hardware concurrency for privacy
-     */
-    coarsenHardwareConcurrency() {
-        try {
-            const cores = navigator.hardwareConcurrency;
-            if (!cores)
-                return null;
-            return cores > 8 ? '8+' : cores;
-        }
-        catch (_a) {
-            return null;
-        }
-    }
-    /**
-     * Coarsen device memory for privacy
-     */
-    coarsenDeviceMemory() {
-        try {
-            const memory = navigator.deviceMemory;
-            if (!memory)
-                return null;
-            return memory > 4 ? '4+' : memory;
-        }
-        catch (_a) {
-            return null;
-        }
-    }
-    /**
-     * Coarsen pixel ratio for privacy
-     */
-    coarsenPixelRatio() {
-        try {
-            const ratio = window.devicePixelRatio;
-            if (!ratio)
-                return null;
-            // Round to common values
-            if (ratio <= 1)
-                return '1';
-            if (ratio <= 1.5)
-                return '1.5';
-            if (ratio <= 2)
-                return '2';
-            if (ratio <= 3)
-                return '3';
-            return '3+';
-        }
-        catch (_a) {
-            return null;
-        }
-    }
-    /**
-     * Coarsen timezone offset for privacy
-     */
-    coarsenTimezoneOffset() {
-        try {
-            const offset = new Date().getTimezoneOffset();
-            // Round to nearest 30 minutes
-            return Math.round(offset / 30) * 30;
-        }
-        catch (_a) {
-            return null;
-        }
-    }
-    /**
-     * Test if storage is available
-     */
-    testStorage(type) {
-        try {
-            const storage = window[type];
-            const testKey = '__dl_test__';
-            storage.setItem(testKey, '1');
-            storage.removeItem(testKey);
-            return true;
-        }
-        catch (_a) {
-            return false;
-        }
-    }
-    /**
-     * Test if IndexedDB is available
-     */
-    testIndexedDB() {
-        try {
-            return !!window.indexedDB;
-        }
-        catch (_a) {
-            return false;
-        }
-    }
+    // PRIVACY: Unused helper methods removed (coarsen functions, storage tests)
+    // Minimal fingerprinting only
     /**
      * Generate fingerprint hash
      */
@@ -2439,13 +2345,7 @@ class Datalyr {
         if (!this.shouldTrack())
             return;
         try {
-            // Collect heavy fingerprint on first event (lazy loading)
-            if (!this.heavyFingerprintCollected && this.config.enableFingerprinting) {
-                this.heavyFingerprintCollected = true;
-                this.fingerprint.collectHeavyFingerprint().catch(err => {
-                    this.log('Heavy fingerprint collection failed:', err);
-                });
-            }
+            // PRIVACY: Heavy fingerprinting removed - using minimal fingerprinting only
             // Update session activity
             this.session.updateActivity(eventName);
             // Create event payload