@datalyr/web 1.0.6 → 1.1.0

package/dist/datalyr.js

@@ -1,5 +1,5 @@
 /**
- * @datalyr/web v1.0.6
+ * @datalyr/web v1.1.0
  * Datalyr Web SDK - Modern attribution tracking for web applications
  * (c) 2025 Datalyr Inc.
  * Released under the MIT License
@@ -164,7 +164,16 @@ var Datalyr = (function () {
             const value = `; ${document.cookie}`;
             const parts = value.split(`; ${name}=`);
             if (parts.length === 2) {
-                return ((_a = parts.pop()) === null || _a === void 0 ? void 0 : _a.split(';').shift()) || null;
+                const rawValue = ((_a = parts.pop()) === null || _a === void 0 ? void 0 : _a.split(';').shift()) || null;
+                if (rawValue) {
+                    try {
+                        return decodeURIComponent(rawValue);
+                    }
+                    catch (_b) {
+                        // Return raw value if decoding fails (backwards compatibility)
+                        return rawValue;
+                    }
+                }
             }
             return null;
         }
@@ -398,6 +407,33 @@ var Datalyr = (function () {
         return navigator.globalPrivacyControl === true ||
             window.globalPrivacyControl === true;
     }
+    /**
+     * Get root domain for cross-subdomain tracking
+     */
+    function getRootDomain() {
+        const hostname = window.location.hostname;
+        // Handle localhost and IP addresses
+        if (hostname === 'localhost' ||
+            hostname.match(/^[0-9]{1,3}\./) || // IPv4
+            hostname.match(/^\[?[0-9a-fA-F:]+\]?$/)) { // IPv6
+            return hostname;
+        }
+        // Get root domain (last two parts: example.com)
+        const parts = hostname.split('.');
+        if (parts.length >= 2) {
+            // Handle .co.uk, .com.au, etc
+            const tld = parts[parts.length - 1];
+            const sld = parts[parts.length - 2];
+            // Common two-part TLDs
+            const twoPartTlds = ['co.uk', 'com.au', 'co.nz', 'co.jp', 'co.in', 'co.za'];
+            const lastTwo = `${sld}.${tld}`;
+            if (twoPartTlds.includes(lastTwo) && parts.length >= 3) {
+                return '.' + parts.slice(-3).join('.');
+            }
+            return '.' + parts.slice(-2).join('.');
+        }
+        return hostname;
+    }
     /**
      * Get referrer data
      */
@@ -461,13 +497,61 @@ var Datalyr = (function () {
          * Get or create anonymous ID (device/browser identifier)
          */
         getOrCreateAnonymousId() {
-            let anonymousId = storage.get('dl_anonymous_id');
-            if (!anonymousId) {
-                anonymousId = `anon_${generateUUID()}`;
+            // 1. Check root domain cookie first (works across subdomains)
+            let anonymousId = cookies.get('__dl_visitor_id');
+            if (anonymousId) {
+                // Found in cookie - sync to localStorage
                 storage.set('dl_anonymous_id', anonymousId);
-            }
+                return anonymousId;
+            }
+            // 2. Check localStorage (fallback for cookie issues)
+            anonymousId = storage.get('dl_anonymous_id');
+            if (anonymousId) {
+                // Found in localStorage - set root domain cookie
+                this.setRootDomainCookie('__dl_visitor_id', anonymousId);
+                return anonymousId;
+            }
+            // 3. Generate new ID
+            anonymousId = `anon_${generateUUID()}`;
+            // 4. Store in both cookie (primary) and localStorage (backup)
+            this.setRootDomainCookie('__dl_visitor_id', anonymousId);
+            storage.set('dl_anonymous_id', anonymousId);
             return anonymousId;
         }
+        /**
+         * Set a root domain cookie for cross-subdomain tracking
+         */
+        setRootDomainCookie(name, value) {
+            try {
+                const rootDomain = getRootDomain();
+                const secure = location.protocol === 'https:' ? '; Secure' : '';
+                const encodedValue = encodeURIComponent(value);
+                // Set cookie with root domain, 1 year expiry
+                document.cookie = `${name}=${encodedValue}; domain=${rootDomain}; path=/; max-age=31536000; SameSite=Lax${secure}`;
+                // Verify cookie was set successfully (cookies.get already decodes)
+                const verifyValue = cookies.get(name);
+                if (verifyValue === value) {
+                    console.log(`[Datalyr] Set root domain cookie: ${name} on domain: ${rootDomain}`);
+                }
+                else {
+                    // Fallback: try without domain (current subdomain only)
+                    document.cookie = `${name}=${encodedValue}; path=/; max-age=31536000; SameSite=Lax${secure}`;
+                    console.log(`[Datalyr] Set cookie without domain (fallback): ${name}`);
+                }
+            }
+            catch (e) {
+                console.error('[Datalyr] Error setting root domain cookie:', e);
+                // Still try to set without domain as fallback
+                try {
+                    const secure = location.protocol === 'https:' ? '; Secure' : '';
+                    const encodedValue = encodeURIComponent(value);
+                    document.cookie = `${name}=${encodedValue}; path=/; max-age=31536000; SameSite=Lax${secure}`;
+                }
+                catch (fallbackError) {
+                    console.error('[Datalyr] Failed to set cookie even without domain:', fallbackError);
+                }
+            }
+        }
         /**
          * Get stored user ID from previous session
          */
@@ -561,6 +645,8 @@ var Datalyr = (function () {
             // Generate new anonymous ID for privacy
             this.anonymousId = `anon_${generateUUID()}`;
             storage.set('dl_anonymous_id', this.anonymousId);
+            // Update root domain cookie with new ID
+            this.setRootDomainCookie('__dl_visitor_id', this.anonymousId);
         }
         /**
          * Get all identity fields for event payload
@@ -1540,24 +1626,40 @@ var Datalyr = (function () {
         }
         /**
          * Collect minimal fingerprint data (privacy-friendly)
+         * Matches browser tag minimal fingerprinting approach
          */
         collectMinimal() {
-            return {
+            const fp = {
                 timezone: this.getTimezone(),
                 language: navigator.language || null,
-                platform: navigator.platform || null,
-                canvasEnabled: false,
-                localStorageAvailable: this.testStorage('localStorage'),
-                sessionStorageAvailable: this.testStorage('sessionStorage')
+                screen_bucket: this.getScreenBucket(),
+                dnt: (navigator.doNotTrack === '1' || window.globalPrivacyControl === true) || null,
+                userAgent: navigator.userAgent || null
             };
+            // User-Agent Client Hints (modern browsers)
+            if ('userAgentData' in navigator) {
+                const uaData = navigator.userAgentData;
+                fp.userAgentData = {
+                    brands: uaData.brands || [],
+                    mobile: uaData.mobile || false,
+                    platform: uaData.platform || null
+                };
+            }
+            return fp;
         }
         /**
          * Collect standard fingerprint data
+         * PRIVACY: Minimal data collection matching browser tag approach
+         * Only collects data necessary for basic analytics and attribution
          */
         collectStandard() {
             const fingerprint = {};
             try {
-                // Basic browser data
+                // PRIVACY: Only collect minimal data needed for attribution
+                fingerprint.timezone = this.getTimezone();
+                fingerprint.language = navigator.language || null;
+                fingerprint.screen_bucket = this.getScreenBucket();
+                fingerprint.dnt = (navigator.doNotTrack === '1' || window.globalPrivacyControl === true) || null;
                 fingerprint.userAgent = navigator.userAgent || null;
                 // User-Agent Client Hints (modern browsers)
                 if ('userAgentData' in navigator) {
@@ -1568,125 +1670,14 @@ var Datalyr = (function () {
                         platform: uaData.platform || null
                     };
                 }
-                // Language settings
-                fingerprint.language = navigator.language || null;
-                fingerprint.languages = navigator.languages ?
-                    navigator.languages.slice(0, 2) : null; // Limit to 2 for privacy
-                // Platform and browser features
-                fingerprint.platform = navigator.platform || null;
-                fingerprint.cookieEnabled = navigator.cookieEnabled || null;
-                fingerprint.doNotTrack = navigator.doNotTrack || null;
-                // Hardware (coarsened for privacy)
-                fingerprint.hardwareConcurrency = this.coarsenHardwareConcurrency();
-                fingerprint.deviceMemory = this.coarsenDeviceMemory();
-                fingerprint.maxTouchPoints = navigator.maxTouchPoints > 0 ? 'touch' : 'no-touch';
-                // Screen (coarsened)
-                fingerprint.screenResolution = this.getScreenResolution();
-                fingerprint.colorDepth = screen.colorDepth || null;
-                fingerprint.pixelRatio = this.coarsenPixelRatio();
-                // Timezone
-                fingerprint.timezone = this.getTimezone();
-                fingerprint.timezoneOffset = this.coarsenTimezoneOffset();
-                // Canvas fingerprinting disabled for privacy
-                fingerprint.canvasEnabled = false;
-                // Plugins count only (not details for privacy)
-                fingerprint.pluginsCount = navigator.plugins ? navigator.plugins.length : null;
-                // Storage availability
-                fingerprint.localStorageAvailable = this.testStorage('localStorage');
-                fingerprint.sessionStorageAvailable = this.testStorage('sessionStorage');
-                fingerprint.indexedDBAvailable = this.testIndexedDB();
-                // Add cached heavy fingerprint data if available
-                if (this.heavyFingerprintDone) {
-                    Object.assign(fingerprint, this.fingerprintCache);
-                }
             }
             catch (e) {
                 console.warn('[Datalyr] Error collecting fingerprint:', e);
             }
             return fingerprint;
         }
-        /**
-         * Collect heavy fingerprint data (WebGL, Audio)
-         * Called lazily on first event to improve page load performance
-         */
-        collectHeavyFingerprint() {
-            return __awaiter(this, void 0, void 0, function* () {
-                if (this.heavyFingerprintDone || this.privacyMode === 'strict') {
-                    return;
-                }
-                try {
-                    // WebGL fingerprinting
-                    const webglData = this.getWebGLFingerprint();
-                    if (webglData) {
-                        this.fingerprintCache.webglVendor = webglData.vendor;
-                        this.fingerprintCache.webglRenderer = webglData.renderer;
-                    }
-                    // Audio fingerprinting
-                    const audioData = yield this.getAudioFingerprint();
-                    if (audioData) {
-                        this.fingerprintCache.audioSampleRate = audioData.sampleRate;
-                        this.fingerprintCache.audioState = audioData.state;
-                        this.fingerprintCache.audioMaxChannels = audioData.maxChannels;
-                    }
-                    this.heavyFingerprintDone = true;
-                }
-                catch (e) {
-                    console.warn('[Datalyr] Heavy fingerprinting failed:', e);
-                }
-            });
-        }
-        /**
-         * Get WebGL fingerprint
-         */
-        getWebGLFingerprint() {
-            try {
-                const canvas = document.createElement('canvas');
-                const gl = canvas.getContext('webgl') || canvas.getContext('experimental-webgl');
-                if (!gl)
-                    return null;
-                const debugInfo = gl.getExtension('WEBGL_debug_renderer_info');
-                if (!debugInfo) {
-                    return {
-                        vendor: gl.getParameter(gl.VENDOR) || 'unknown',
-                        renderer: gl.getParameter(gl.RENDERER) || 'unknown'
-                    };
-                }
-                return {
-                    vendor: gl.getParameter(debugInfo.UNMASKED_VENDOR_WEBGL) || 'unknown',
-                    renderer: gl.getParameter(debugInfo.UNMASKED_RENDERER_WEBGL) || 'unknown'
-                };
-            }
-            catch (_a) {
-                return null;
-            }
-        }
-        /**
-         * Get audio fingerprint
-         */
-        getAudioFingerprint() {
-            return __awaiter(this, void 0, void 0, function* () {
-                var _a;
-                try {
-                    const AudioContext = window.AudioContext || window.webkitAudioContext;
-                    if (!AudioContext)
-                        return null;
-                    const audioCtx = new AudioContext();
-                    const result = {
-                        sampleRate: audioCtx.sampleRate || null,
-                        state: audioCtx.state || null,
-                        maxChannels: ((_a = audioCtx.destination) === null || _a === void 0 ? void 0 : _a.maxChannelCount) || null
-                    };
-                    // Close context to free resources
-                    if (audioCtx.close) {
-                        yield audioCtx.close();
-                    }
-                    return result;
-                }
-                catch (_b) {
-                    return null;
-                }
-            });
-        }
+        // PRIVACY: Heavy fingerprinting (WebGL, Audio) removed
+        // Minimal fingerprinting only for privacy compliance
         /**
          * Get timezone
          */
@@ -1699,10 +1690,13 @@ var Datalyr = (function () {
             }
         }
         /**
-         * Get screen resolution (coarsened)
+         * Get coarse screen bucket for basic device classification
+         * Rounds to nearest 100px for privacy
          */
-        getScreenResolution() {
+        getScreenBucket() {
             try {
+                if (!window.screen)
+                    return null;
                 const width = Math.round(screen.width / 100) * 100;
                 const height = Math.round(screen.height / 100) * 100;
                 return `${width}x${height}`;
@@ -1711,96 +1705,8 @@ var Datalyr = (function () {
                 return null;
             }
         }
-        /**
-         * Coarsen hardware concurrency for privacy
-         */
-        coarsenHardwareConcurrency() {
-            try {
-                const cores = navigator.hardwareConcurrency;
-                if (!cores)
-                    return null;
-                return cores > 8 ? '8+' : cores;
-            }
-            catch (_a) {
-                return null;
-            }
-        }
-        /**
-         * Coarsen device memory for privacy
-         */
-        coarsenDeviceMemory() {
-            try {
-                const memory = navigator.deviceMemory;
-                if (!memory)
-                    return null;
-                return memory > 4 ? '4+' : memory;
-            }
-            catch (_a) {
-                return null;
-            }
-        }
-        /**
-         * Coarsen pixel ratio for privacy
-         */
-        coarsenPixelRatio() {
-            try {
-                const ratio = window.devicePixelRatio;
-                if (!ratio)
-                    return null;
-                // Round to common values
-                if (ratio <= 1)
-                    return '1';
-                if (ratio <= 1.5)
-                    return '1.5';
-                if (ratio <= 2)
-                    return '2';
-                if (ratio <= 3)
-                    return '3';
-                return '3+';
-            }
-            catch (_a) {
-                return null;
-            }
-        }
-        /**
-         * Coarsen timezone offset for privacy
-         */
-        coarsenTimezoneOffset() {
-            try {
-                const offset = new Date().getTimezoneOffset();
-                // Round to nearest 30 minutes
-                return Math.round(offset / 30) * 30;
-            }
-            catch (_a) {
-                return null;
-            }
-        }
-        /**
-         * Test if storage is available
-         */
-        testStorage(type) {
-            try {
-                const storage = window[type];
-                const testKey = '__dl_test__';
-                storage.setItem(testKey, '1');
-                storage.removeItem(testKey);
-                return true;
-            }
-            catch (_a) {
-                return false;
-            }
-        }
-        /**
-         * Test if IndexedDB is available
-         */
-        testIndexedDB() {
-            try {
-                return !!window.indexedDB;
-            }
-            catch (_a) {
-                return false;
-            }
-        }
+        // PRIVACY: Unused helper methods removed (coarsen functions, storage tests)
+        // Minimal fingerprinting only
         /**
          * Generate fingerprint hash
          */
@@ -2440,13 +2346,7 @@ var Datalyr = (function () {
             if (!this.shouldTrack())
                 return;
             try {
-                // Collect heavy fingerprint on first event (lazy loading)
-                if (!this.heavyFingerprintCollected && this.config.enableFingerprinting) {
-                    this.heavyFingerprintCollected = true;
-                    this.fingerprint.collectHeavyFingerprint().catch(err => {
-                        this.log('Heavy fingerprint collection failed:', err);
-                    });
-                }
+                // PRIVACY: Heavy fingerprinting removed - using minimal fingerprinting only
                 // Update session activity
                 this.session.updateActivity(eventName);
                 // Create event payload