@descope/sdk-mixins 0.25.0 → 0.26.1

package/dist/cjs/index.js

@@ -28,6 +28,8 @@ var injectStyleMixin = require('./mixins/injectStyleMixin.js');
 var cspNonceMixin = require('./mixins/cspNonceMixin.js');
 var telemetryMixin = require('./mixins/telemetryMixin/telemetryMixin.js');
 var flowInputMixin = require('./mixins/flowInputMixin/flowInputMixin.js');
+var componentsConditionsMixin = require('./mixins/componentsConditionsMixin/componentsConditionsMixin.js');
+var applier = require('./mixins/componentsConditionsMixin/applier.js');
 
 
 
@@ -60,4 +62,7 @@ exports.injectStyleMixin = injectStyleMixin.injectStyleMixin;
 exports.cspNonceMixin = cspNonceMixin.cspNonceMixin;
 exports.telemetryMixin = telemetryMixin.telemetryMixin;
 exports.flowInputMixin = flowInputMixin.flowInputMixin;
+exports.componentsConditionsMixin = componentsConditionsMixin.componentsConditionsMixin;
+exports.applyComponentsState = applier.applyComponentsState;
+exports.clearComponentsState = applier.clearComponentsState;
 //# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/cjs/mixins/componentsConditionsMixin/applier.js

@@ -0,0 +1,71 @@
+'use strict';
+
+// Applies server-computed component conditions (hide / disable / read-only) to a
+// widget's DOM. Mirrors the flow web-component applier, but targets widget
+// components by their `data-id` (widgets address components that way) and hides
+// via inline style + the `hidden` attribute rather than a `.hidden` class, which
+// widgets do not inject into their shadow DOM.
+const ATTR_SELECTOR_ESCAPE_PATTERN = /(["\\])/g;
+// CSS.escape with a narrow fallback for environments that lack it.
+function escapeSelector(value) {
+    if (typeof CSS !== 'undefined' && typeof CSS.escape === 'function') {
+        return CSS.escape(value);
+    }
+    return value.replace(ATTR_SELECTOR_ESCAPE_PATTERN, '\\$1');
+}
+// IDs can repeat, so match all.
+function findComponents(root, id) {
+    return Array.from(root.querySelectorAll(`[data-id="${escapeSelector(id)}"]`));
+}
+function applyAction(el, action) {
+    var _a;
+    switch (action) {
+        case 'hide':
+            el.setAttribute('hidden', '');
+            (_a = el.style) === null || _a === void 0 ? void 0 : _a.setProperty('display', 'none', 'important');
+            break;
+        case 'disable':
+            el.setAttribute('disabled', 'true');
+            break;
+        case 'read-only':
+            el.setAttribute('readonly', 'true');
+            break;
+        // Unknown action - ignore. A bad action shouldn't make it past the server.
+    }
+}
+function clearAction(el, action) {
+    var _a;
+    switch (action) {
+        case 'hide':
+            el.removeAttribute('hidden');
+            (_a = el.style) === null || _a === void 0 ? void 0 : _a.removeProperty('display');
+            break;
+        case 'disable':
+            el.removeAttribute('disabled');
+            break;
+        case 'read-only':
+            el.removeAttribute('readonly');
+            break;
+        // no-op
+    }
+}
+/** Applies the componentId -> action map to the matching elements under root. */
+function applyComponentsState(root, componentsState) {
+    if (!root || !componentsState)
+        return;
+    Object.entries(componentsState).forEach(([id, action]) => {
+        findComponents(root, id).forEach((el) => applyAction(el, action));
+    });
+}
+/** Reverts a previously-applied componentId -> action map. */
+function clearComponentsState(root, componentsState) {
+    if (!root || !componentsState)
+        return;
+    Object.entries(componentsState).forEach(([id, action]) => {
+        findComponents(root, id).forEach((el) => clearAction(el, action));
+    });
+}
+
+exports.applyComponentsState = applyComponentsState;
+exports.clearComponentsState = clearComponentsState;
+//# sourceMappingURL=applier.js.map

package/dist/cjs/mixins/componentsConditionsMixin/applier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applier.js","sources":["../../../../src/mixins/componentsConditionsMixin/applier.ts"],"sourcesContent":["// Applies server-computed component conditions (hide / disable / read-only) to a\n// widget's DOM. Mirrors the flow web-component applier, but targets widget\n// components by their `data-id` (widgets address components that way) and hides\n// via inline style + the `hidden` attribute rather than a `.hidden` class, which\n// widgets do not inject into their shadow DOM.\n\nconst ATTR_SELECTOR_ESCAPE_PATTERN = /([\"\\\\])/g;\n\n// CSS.escape with a narrow fallback for environments that lack it.\nfunction escapeSelector(value: string): string {\n  if (typeof CSS !== 'undefined' && typeof CSS.escape === 'function') {\n    return CSS.escape(value);\n  }\n  return value.replace(ATTR_SELECTOR_ESCAPE_PATTERN, '\\\\$1');\n}\n\n// IDs can repeat, so match all.\nfunction findComponents(root: ParentNode, id: string): Element[] {\n  return Array.from(root.querySelectorAll(`[data-id=\"${escapeSelector(id)}\"]`));\n}\n\nfunction applyAction(el: Element, action: string): void {\n  switch (action) {\n    case 'hide':\n      el.setAttribute('hidden', '');\n      (el as HTMLElement).style?.setProperty('display', 'none', 'important');\n      break;\n    case 'disable':\n      el.setAttribute('disabled', 'true');\n      break;\n    case 'read-only':\n      el.setAttribute('readonly', 'true');\n      break;\n    default:\n    // Unknown action - ignore. A bad action shouldn't make it past the server.\n  }\n}\n\nfunction clearAction(el: Element, action: string): void {\n  switch (action) {\n    case 'hide':\n      el.removeAttribute('hidden');\n      (el as HTMLElement).style?.removeProperty('display');\n      break;\n    case 'disable':\n      el.removeAttribute('disabled');\n      break;\n    case 'read-only':\n      el.removeAttribute('readonly');\n      break;\n    default:\n    // no-op\n  }\n}\n\n/** Applies the componentId -> action map to the matching elements under root. */\nexport function applyComponentsState(\n  root: ParentNode | null | undefined,\n  componentsState: Record<string, string> | undefined,\n): void {\n  if (!root || !componentsState) return;\n  Object.entries(componentsState).forEach(([id, action]) => {\n    findComponents(root, id).forEach((el) => applyAction(el, action));\n  });\n}\n\n/** Reverts a previously-applied componentId -> action map. */\nexport function clearComponentsState(\n  root: ParentNode | null | undefined,\n  componentsState: Record<string, string> | undefined,\n): void {\n  if (!root || !componentsState) return;\n  Object.entries(componentsState).forEach(([id, action]) => {\n    findComponents(root, id).forEach((el) => clearAction(el, action));\n  });\n}\n"],"names":[],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AAEA,MAAM,4BAA4B,GAAG,UAAU,CAAC;AAEhD;AACA,SAAS,cAAc,CAAC,KAAa,EAAA;AACnC,IAAA,IAAI,OAAO,GAAG,KAAK,WAAW,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE;AAClE,QAAA,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KAC1B;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED;AACA,SAAS,cAAc,CAAC,IAAgB,EAAE,EAAU,EAAA;AAClD,IAAA,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAa,UAAA,EAAA,cAAc,CAAC,EAAE,CAAC,CAAI,EAAA,CAAA,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,WAAW,CAAC,EAAW,EAAE,MAAc,EAAA;;IAC9C,QAAQ,MAAM;AACZ,QAAA,KAAK,MAAM;AACT,YAAA,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC9B,YAAA,CAAA,EAAA,GAAC,EAAkB,CAAC,KAAK,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAE,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;YACvE,MAAM;AACR,QAAA,KAAK,SAAS;AACZ,YAAA,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACpC,MAAM;AACR,QAAA,KAAK,WAAW;AACd,YAAA,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACpC,MAAM;;KAGT;AACH,CAAC;AAED,SAAS,WAAW,CAAC,EAAW,EAAE,MAAc,EAAA;;IAC9C,QAAQ,MAAM;AACZ,QAAA,KAAK,MAAM;AACT,YAAA,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC7B,CAAC,EAAA,GAAA,EAAkB,CAAC,KAAK,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAE,cAAc,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM;AACR,QAAA,KAAK,SAAS;AACZ,YAAA,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM;AACR,QAAA,KAAK,WAAW;AACd,YAAA,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM;;KAGT;AACH,CAAC;AAED;AACgB,SAAA,oBAAoB,CAClC,IAAmC,EACnC,eAAmD,EAAA;AAEnD,IAAA,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe;QAAE,OAAO;AACtC,IAAA,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,KAAI;QACvD,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AACpE,KAAC,CAAC,CAAC;AACL,CAAC;AAED;AACgB,SAAA,oBAAoB,CAClC,IAAmC,EACnC,eAAmD,EAAA;AAEnD,IAAA,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe;QAAE,OAAO;AACtC,IAAA,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,KAAI;QACvD,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AACpE,KAAC,CAAC,CAAC;AACL;;;;;"}

package/dist/cjs/mixins/componentsConditionsMixin/componentsConditionsMixin.js

@@ -0,0 +1,103 @@
+'use strict';
+
+var tslib = require('tslib');
+var sdkHelpers = require('@descope/sdk-helpers');
+var loggerMixin = require('../loggerMixin/loggerMixin.js');
+var initElementMixin = require('../initElementMixin.js');
+var applier = require('./applier.js');
+
+const COMPONENTS_STATE_PATH = '/v1/mgmt/widget/components-state';
+/**
+ * Shared widget mixin that fetches the server-computed component conditions
+ * verdict for the current user and applies hide/disable/read-only to the widget
+ * DOM. Server-side only - no client-side re-evaluation. Compose it LAST in a
+ * widget's initMixin so its init wraps the widget's render.
+ *
+ * It reuses the widget's existing web-js-sdk httpClient (`this.api.httpClient`),
+ * so `apiMixin` must be composed and `createSdk` must return `httpClient`. A
+ * missing client is a wiring mistake, surfaced loudly (throw) rather than
+ * silently rendering everything; a runtime fetch failure fails open instead.
+ */
+const componentsConditionsMixin = sdkHelpers.createSingletonMixin((superclass) => {
+    var _ComponentsConditionsMixinClass_instances, _ComponentsConditionsMixinClass_statePromise, _ComponentsConditionsMixinClass_appliedState, _ComponentsConditionsMixinClass_requireHttpClient, _ComponentsConditionsMixinClass_fetchComponentsState, _a;
+    // NB: do not compose initLifecycleMixin here - its empty init() has no
+    // super.init() call and would shadow the widget's render init.
+    const BaseClass = sdkHelpers.compose(loggerMixin.loggerMixin, initElementMixin.initElementMixin)(superclass);
+    return _a = class ComponentsConditionsMixinClass extends BaseClass {
+            constructor() {
+                super(...arguments);
+                _ComponentsConditionsMixinClass_instances.add(this);
+                _ComponentsConditionsMixinClass_statePromise.set(this, void 0);
+                _ComponentsConditionsMixinClass_appliedState.set(this, {});
+            }
+            async init() {
+                var _b, _c;
+                if (this.getAttribute('mock') === 'true') {
+                    // Mock mode (demos / e2e) has no backend - skip the fetch, hide nothing.
+                    tslib.__classPrivateFieldSet(this, _ComponentsConditionsMixinClass_statePromise, Promise.resolve({}), "f");
+                    await ((_b = super.init) === null || _b === void 0 ? void 0 : _b.call(this));
+                    return;
+                }
+                // Resolve the client up front so a wiring mistake throws before the
+                // fetch's fail-open path can swallow it.
+                const httpClient = tslib.__classPrivateFieldGet(this, _ComponentsConditionsMixinClass_instances, "m", _ComponentsConditionsMixinClass_requireHttpClient).call(this);
+                // Fire immediately so it overlaps the page/data fetch super.init runs.
+                tslib.__classPrivateFieldSet(this, _ComponentsConditionsMixinClass_statePromise, tslib.__classPrivateFieldGet(this, _ComponentsConditionsMixinClass_instances, "m", _ComponentsConditionsMixinClass_fetchComponentsState).call(this, httpClient), "f");
+                await ((_c = super.init) === null || _c === void 0 ? void 0 : _c.call(this));
+            }
+            async onWidgetRootReady() {
+                var _b, _c;
+                // @ts-expect-error onWidgetRootReady is provided by the widget's initWidgetRootMixin
+                await ((_b = super.onWidgetRootReady) === null || _b === void 0 ? void 0 : _b.call(this));
+                // Apply once the DOM exists and component values are populated, before the
+                // widget dispatches 'ready'. Awaiting here bounds any added latency to
+                // max(0, conditionsFetch - pageFetch).
+                tslib.__classPrivateFieldSet(this, _ComponentsConditionsMixinClass_appliedState, (_c = (await tslib.__classPrivateFieldGet(this, _ComponentsConditionsMixinClass_statePromise, "f"))) !== null && _c !== void 0 ? _c : {}, "f");
+                applier.applyComponentsState(this.contentRootElement, tslib.__classPrivateFieldGet(this, _ComponentsConditionsMixinClass_appliedState, "f"));
+            }
+            /**
+             * Re-fetch and re-apply after the widget mutates data the conditions read
+             * (e.g. a profile save). Public hook for the upcoming re-evaluate-on-mutation
+             * work - no widget wires it to its mutating flows yet.
+             */
+            async reevaluateComponentsState() {
+                const httpClient = tslib.__classPrivateFieldGet(this, _ComponentsConditionsMixinClass_instances, "m", _ComponentsConditionsMixinClass_requireHttpClient).call(this);
+                applier.clearComponentsState(this.contentRootElement, tslib.__classPrivateFieldGet(this, _ComponentsConditionsMixinClass_appliedState, "f"));
+                tslib.__classPrivateFieldSet(this, _ComponentsConditionsMixinClass_appliedState, await tslib.__classPrivateFieldGet(this, _ComponentsConditionsMixinClass_instances, "m", _ComponentsConditionsMixinClass_fetchComponentsState).call(this, httpClient), "f");
+                applier.applyComponentsState(this.contentRootElement, tslib.__classPrivateFieldGet(this, _ComponentsConditionsMixinClass_appliedState, "f"));
+            }
+        },
+        _ComponentsConditionsMixinClass_statePromise = new WeakMap(),
+        _ComponentsConditionsMixinClass_appliedState = new WeakMap(),
+        _ComponentsConditionsMixinClass_instances = new WeakSet(),
+        _ComponentsConditionsMixinClass_requireHttpClient = function _ComponentsConditionsMixinClass_requireHttpClient() {
+            var _b;
+            const httpClient = (_b = this.api) === null || _b === void 0 ? void 0 : _b.httpClient;
+            if (!httpClient) {
+                // Developer misconfiguration (apiMixin not composed, or createSdk does
+                // not expose httpClient) - fail loud so it is caught in development.
+                throw new Error('componentsConditionsMixin: the widget sdk must expose `httpClient`. Compose apiMixin and return `webSdk.httpClient` from createSdk.');
+            }
+            return httpClient;
+        },
+        _ComponentsConditionsMixinClass_fetchComponentsState = async function _ComponentsConditionsMixinClass_fetchComponentsState(httpClient) {
+            var _b;
+            try {
+                const res = await httpClient.get(COMPONENTS_STATE_PATH);
+                if (!(res === null || res === void 0 ? void 0 : res.ok))
+                    return {};
+                const body = await res.json();
+                return (_b = body === null || body === void 0 ? void 0 : body.componentsState) !== null && _b !== void 0 ? _b : {};
+            }
+            catch (e) {
+                // Fail open: render everything. UI hiding is presentation, not access
+                // control - sensitive data stays gated by the widget's data API.
+                this.logger.debug('components-conditions: failed to fetch, showing all components', e === null || e === void 0 ? void 0 : e.message);
+                return {};
+            }
+        },
+        _a;
+});
+
+exports.componentsConditionsMixin = componentsConditionsMixin;
+//# sourceMappingURL=componentsConditionsMixin.js.map

package/dist/cjs/mixins/componentsConditionsMixin/componentsConditionsMixin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"componentsConditionsMixin.js","sources":["../../../../src/mixins/componentsConditionsMixin/componentsConditionsMixin.ts"],"sourcesContent":["import { compose, createSingletonMixin } from '@descope/sdk-helpers';\nimport { loggerMixin } from '../loggerMixin';\nimport { initElementMixin } from '../initElementMixin';\nimport { applyComponentsState, clearComponentsState } from './applier';\n\ntype ComponentsState = Record<string, string>;\n\nconst COMPONENTS_STATE_PATH = '/v1/mgmt/widget/components-state';\n\n// The widget's sdk (built by apiMixin) is expected to expose the client here.\ninterface ComponentsConditionsHost {\n  api?: { httpClient?: ConditionsHttpClient };\n}\n\n// Minimal client contract the mixin needs. Widgets expose their existing\n// web-js-sdk httpClient (the same instance used for every other API call),\n// narrowed to this so no web-js-sdk/core-js-sdk type leaks into the widget's\n// public sdk surface. Declared last (with the mixin) to satisfy import/exports-last.\nexport interface ConditionsHttpClient {\n  get: (path: string) => Promise<Response>;\n}\n\n/**\n * Shared widget mixin that fetches the server-computed component conditions\n * verdict for the current user and applies hide/disable/read-only to the widget\n * DOM. Server-side only - no client-side re-evaluation. Compose it LAST in a\n * widget's initMixin so its init wraps the widget's render.\n *\n * It reuses the widget's existing web-js-sdk httpClient (`this.api.httpClient`),\n * so `apiMixin` must be composed and `createSdk` must return `httpClient`. A\n * missing client is a wiring mistake, surfaced loudly (throw) rather than\n * silently rendering everything; a runtime fetch failure fails open instead.\n */\nexport const componentsConditionsMixin = createSingletonMixin(\n  <T extends CustomElementConstructor>(superclass: T) => {\n    // NB: do not compose initLifecycleMixin here - its empty init() has no\n    // super.init() call and would shadow the widget's render init.\n    const BaseClass = compose(loggerMixin, initElementMixin)(superclass);\n\n    return class ComponentsConditionsMixinClass extends BaseClass {\n      #statePromise?: Promise<ComponentsState>;\n\n      #appliedState: ComponentsState = {};\n\n      #requireHttpClient(): ConditionsHttpClient {\n        const httpClient = (this as unknown as ComponentsConditionsHost).api\n          ?.httpClient;\n        if (!httpClient) {\n          // Developer misconfiguration (apiMixin not composed, or createSdk does\n          // not expose httpClient) - fail loud so it is caught in development.\n          throw new Error(\n            'componentsConditionsMixin: the widget sdk must expose `httpClient`. Compose apiMixin and return `webSdk.httpClient` from createSdk.',\n          );\n        }\n        return httpClient;\n      }\n\n      async #fetchComponentsState(\n        httpClient: ConditionsHttpClient,\n      ): Promise<ComponentsState> {\n        try {\n          const res = await httpClient.get(COMPONENTS_STATE_PATH);\n          if (!res?.ok) return {};\n          const body = await res.json();\n          return body?.componentsState ?? {};\n        } catch (e) {\n          // Fail open: render everything. UI hiding is presentation, not access\n          // control - sensitive data stays gated by the widget's data API.\n          this.logger.debug(\n            'components-conditions: failed to fetch, showing all components',\n            (e as Error)?.message,\n          );\n          return {};\n        }\n      }\n\n      async init() {\n        if (this.getAttribute('mock') === 'true') {\n          // Mock mode (demos / e2e) has no backend - skip the fetch, hide nothing.\n          this.#statePromise = Promise.resolve({});\n          await super.init?.();\n          return;\n        }\n        // Resolve the client up front so a wiring mistake throws before the\n        // fetch's fail-open path can swallow it.\n        const httpClient = this.#requireHttpClient();\n        // Fire immediately so it overlaps the page/data fetch super.init runs.\n        this.#statePromise = this.#fetchComponentsState(httpClient);\n        await super.init?.();\n      }\n\n      async onWidgetRootReady() {\n        // @ts-expect-error onWidgetRootReady is provided by the widget's initWidgetRootMixin\n        await super.onWidgetRootReady?.();\n        // Apply once the DOM exists and component values are populated, before the\n        // widget dispatches 'ready'. Awaiting here bounds any added latency to\n        // max(0, conditionsFetch - pageFetch).\n        this.#appliedState = (await this.#statePromise) ?? {};\n        applyComponentsState(this.contentRootElement, this.#appliedState);\n      }\n\n      /**\n       * Re-fetch and re-apply after the widget mutates data the conditions read\n       * (e.g. a profile save). Public hook for the upcoming re-evaluate-on-mutation\n       * work - no widget wires it to its mutating flows yet.\n       */\n      async reevaluateComponentsState() {\n        const httpClient = this.#requireHttpClient();\n        clearComponentsState(this.contentRootElement, this.#appliedState);\n        this.#appliedState = await this.#fetchComponentsState(httpClient);\n        applyComponentsState(this.contentRootElement, this.#appliedState);\n      }\n    };\n  },\n);\n"],"names":["createSingletonMixin","compose","loggerMixin","initElementMixin","__classPrivateFieldSet","__classPrivateFieldGet","applyComponentsState","clearComponentsState"],"mappings":";;;;;;;;AAOA,MAAM,qBAAqB,GAAG,kCAAkC,CAAC;AAejE;;;;;;;;;;AAUG;MACU,yBAAyB,GAAGA,+BAAoB,CAC3D,CAAqC,UAAa,KAAI;;;;IAGpD,MAAM,SAAS,GAAGC,kBAAO,CAACC,uBAAW,EAAEC,iCAAgB,CAAC,CAAC,UAAU,CAAC,CAAC;IAErE,OAAO,EAAA,GAAA,MAAM,8BAA+B,SAAQ,SAAS,CAAA;AAAtD,YAAA,WAAA,GAAA;;;gBACL,4CAAyC,CAAA,GAAA,CAAA,IAAA,EAAA,KAAA,CAAA,CAAA,CAAA;AAEzC,gBAAA,4CAAA,CAAA,GAAA,CAAA,IAAA,EAAiC,EAAE,CAAC,CAAA;aAsErC;AApCC,YAAA,MAAM,IAAI,GAAA;;gBACR,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,MAAM,EAAE;;oBAExCC,4BAAA,CAAA,IAAI,gDAAiB,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAA,GAAA,CAAA,CAAC;AACzC,oBAAA,OAAM,CAAA,EAAA,GAAA,KAAK,CAAC,IAAI,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,IAAA,CAAA,IAAA,CAAI,CAAA,CAAC;oBACrB,OAAO;iBACR;;;gBAGD,MAAM,UAAU,GAAGC,4BAAA,CAAA,IAAI,oGAAmB,CAAvB,IAAA,CAAA,IAAI,CAAqB,CAAC;;gBAE7CD,4BAAA,CAAA,IAAI,EAAiB,4CAAA,EAAAC,4BAAA,CAAA,IAAI,EAAA,yCAAA,EAAA,GAAA,EAAA,oDAAA,CAAsB,CAA1B,IAAA,CAAA,IAAI,EAAuB,UAAU,CAAC,EAAA,GAAA,CAAA,CAAC;AAC5D,gBAAA,OAAM,CAAA,EAAA,GAAA,KAAK,CAAC,IAAI,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,IAAA,CAAA,IAAA,CAAI,CAAA,CAAC;aACtB;AAED,YAAA,MAAM,iBAAiB,GAAA;;;AAErB,gBAAA,OAAM,CAAA,EAAA,GAAA,KAAK,CAAC,iBAAiB,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,IAAA,CAAA,IAAA,CAAI,CAAA,CAAC;;;;AAIlC,gBAAAD,4BAAA,CAAA,IAAI,EAAA,4CAAA,EAAiB,CAAA,EAAA,IAAC,MAAMC,4BAAA,CAAA,IAAI,EAAA,4CAAA,EAAA,GAAA,CAAc,CAAC,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAI,EAAE,EAAA,GAAA,CAAA,CAAC;gBACtDC,4BAAoB,CAAC,IAAI,CAAC,kBAAkB,EAAED,4BAAA,CAAA,IAAI,EAAc,4CAAA,EAAA,GAAA,CAAA,CAAC,CAAC;aACnE;AAED;;;;AAIG;AACH,YAAA,MAAM,yBAAyB,GAAA;gBAC7B,MAAM,UAAU,GAAGA,4BAAA,CAAA,IAAI,oGAAmB,CAAvB,IAAA,CAAA,IAAI,CAAqB,CAAC;gBAC7CE,4BAAoB,CAAC,IAAI,CAAC,kBAAkB,EAAEF,4BAAA,CAAA,IAAI,EAAc,4CAAA,EAAA,GAAA,CAAA,CAAC,CAAC;AAClE,gBAAAD,4BAAA,CAAA,IAAI,EAAA,4CAAA,EAAiB,MAAMC,4BAAA,CAAA,IAAI,EAAA,yCAAA,EAAA,GAAA,EAAA,oDAAA,CAAsB,CAA1B,IAAA,CAAA,IAAI,EAAuB,UAAU,CAAC,EAAA,GAAA,CAAA,CAAC;gBAClEC,4BAAoB,CAAC,IAAI,CAAC,kBAAkB,EAAED,4BAAA,CAAA,IAAI,EAAc,4CAAA,EAAA,GAAA,CAAA,CAAC,CAAC;aACnE;AACF,SAAA;;;;;;YAnEG,MAAM,UAAU,GAAG,CAAC,EAAA,GAAA,IAA4C,CAAC,GAAG,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAChE,UAAU,CAAC;YACf,IAAI,CAAC,UAAU,EAAE;;;AAGf,gBAAA,MAAM,IAAI,KAAK,CACb,qIAAqI,CACtI,CAAC;aACH;AACD,YAAA,OAAO,UAAU,CAAC;SACnB;AAED,QAAA,oDAAA,GAAA,oEACE,UAAgC,EAAA;;AAEhC,YAAA,IAAI;gBACF,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;gBACxD,IAAI,EAAC,GAAG,KAAA,IAAA,IAAH,GAAG,KAAH,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,GAAG,CAAE,EAAE,CAAA;AAAE,oBAAA,OAAO,EAAE,CAAC;AACxB,gBAAA,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,OAAO,CAAA,EAAA,GAAA,IAAI,KAAA,IAAA,IAAJ,IAAI,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAJ,IAAI,CAAE,eAAe,MAAI,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAA,EAAE,CAAC;aACpC;YAAC,OAAO,CAAC,EAAE;;;AAGV,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,gEAAgE,EAC/D,CAAW,KAAA,IAAA,IAAX,CAAC,KAAD,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,CAAC,CAAY,OAAO,CACtB,CAAC;AACF,gBAAA,OAAO,EAAE,CAAC;aACX;SACF;AAsCD,QAAA,EAAA,CAAA;AACJ,CAAC;;;;"}

package/dist/cjs/mixins/telemetryMixin/telemetryMixin.js

@@ -200,14 +200,40 @@ const telemetryMixin = sdkHelpers.createSingletonMixin((superclass) => {
             // The backend ships telemetry nested under `projectConfig` in config.json.
             const resolvedConfig = await this.config;
             const beTelemetry = (_b = resolvedConfig === null || resolvedConfig === void 0 ? void 0 : resolvedConfig.projectConfig) === null || _b === void 0 ? void 0 : _b.telemetry;
-            const sampleRate = Number(process.env.DESCOPE_TELEMETRY_SESSION_SAMPLE_RATE);
-            const fallback = {
-                enabled: (process.env.DESCOPE_TELEMETRY_ENABLED || '').toLowerCase() ===
-                    'true',
-                rumConfig: Object.assign({ applicationId: process.env.DESCOPE_TELEMETRY_APPLICATION_ID || '', identityPoolId: process.env.DESCOPE_TELEMETRY_IDENTITY_POOL_ID || '', region: process.env.DESCOPE_TELEMETRY_REGION || '', sessionSampleRate: Number.isFinite(sampleRate) && sampleRate > 0 ? sampleRate : 1 }, (process.env.DESCOPE_TELEMETRY_GUEST_ROLE_ARN && {
-                    guestRoleArn: process.env.DESCOPE_TELEMETRY_GUEST_ROLE_ARN,
-                })),
-            };
+            // The DESCOPE_TELEMETRY_* reads below are build-time env tokens: the WC
+            // app build substitutes them from .env (rollup.config.app.mjs) and the
+            // WC lib build strips them to "" (stubEnvInProd). But @descope/sdk-mixins
+            // ships its own dist with these tokens RAW, so a non-WC consumer that
+            // bundles this file for the browser hits a bare `process`, which is
+            // undefined there -> "ReferenceError: process is not defined".
+            // Wrap the reads in try/catch: this keeps the literal `process.env.*`
+            // tokens intact (so the WC build-time replace/strip still match them),
+            // while falling back to an empty config wherever `process` doesn't
+            // exist. Real config comes from the backend (projectConfig.telemetry).
+            let fallback;
+            try {
+                const sampleRate = Number(process.env.DESCOPE_TELEMETRY_SESSION_SAMPLE_RATE);
+                fallback = {
+                    enabled: (process.env.DESCOPE_TELEMETRY_ENABLED || '').toLowerCase() ===
+                        'true',
+                    rumConfig: Object.assign({ applicationId: process.env.DESCOPE_TELEMETRY_APPLICATION_ID || '', identityPoolId: process.env.DESCOPE_TELEMETRY_IDENTITY_POOL_ID || '', region: process.env.DESCOPE_TELEMETRY_REGION || '', sessionSampleRate: Number.isFinite(sampleRate) && sampleRate > 0 ? sampleRate : 1 }, (process.env.DESCOPE_TELEMETRY_GUEST_ROLE_ARN && {
+                        guestRoleArn: process.env.DESCOPE_TELEMETRY_GUEST_ROLE_ARN,
+                    })),
+                };
+            }
+            catch (_c) {
+                // `process` is not defined (browser, no build-time replacement).
+                // No .env fallback here - rely on the backend telemetry config.
+                fallback = {
+                    enabled: false,
+                    rumConfig: {
+                        applicationId: '',
+                        identityPoolId: '',
+                        region: '',
+                        sessionSampleRate: 1,
+                    },
+                };
+            }
             const cfg = Object.assign(Object.assign(Object.assign({}, fallback), beTelemetry), { rumConfig: Object.assign(Object.assign({}, fallback.rumConfig), beTelemetry === null || beTelemetry === void 0 ? void 0 : beTelemetry.rumConfig), capture: tslib.__classPrivateFieldGet(this, _TelemetryMixinClass_instances, "m", _TelemetryMixinClass_resolveCapture).call(this, beTelemetry === null || beTelemetry === void 0 ? void 0 : beTelemetry.capture) });
             // If enabled but a required RUM credential is missing (empty from both
             // the BE block and the .env fallback), disable rather than hand AwsRum

package/dist/cjs/mixins/telemetryMixin/telemetryMixin.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetryMixin.js","sources":["../../../../src/mixins/telemetryMixin/telemetryMixin.ts"],"sourcesContent":["import { compose, createSingletonMixin } from '@descope/sdk-helpers';\nimport { injectNpmLibMixin } from '../injectNpmLibMixin';\nimport { loggerMixin } from '../loggerMixin';\nimport { TelemetryConfig } from '../configMixin/types';\nimport {\n  DEBUG_LOGS_LIB_NAME,\n  JS_FILE_PATH,\n  LOCAL_STORAGE_OVERRIDE,\n} from './constants';\nimport { initLifecycleMixin } from '../initLifecycleMixin';\nimport { configMixin } from '../configMixin';\nimport { projectIdMixin } from '../projectIdMixin';\nimport { flowIdMixin } from '../flowIdMixin';\n\n// Human-readable delay formatter. Picks the largest unit that fits so logs\n// read as \"30 minutes\" / \"2 days\" instead of \"1800 seconds\" / \"172800 seconds\".\nfunction formatDelay(ms: number): string {\n  const s = Math.floor(ms / 1000);\n  if (s < 60) return `${s} seconds`;\n  const m = Math.floor(s / 60);\n  if (m < 60) return `${m} minutes`;\n  const h = Math.floor(m / 60);\n  if (h < 24) return `${h} hours`;\n  return `${Math.floor(h / 24)} days`;\n}\n\n// Extend global window to include DescopeDebugLogs (UMD global)\ndeclare global {\n  interface Window {\n    DescopeDebugLogs?: new (config: any, context: any, logger?: any) => any;\n  }\n}\n\nexport const telemetryMixin = createSingletonMixin(\n  <T extends CustomElementConstructor>(superclass: T) => {\n    const BaseClass = compose(\n      injectNpmLibMixin,\n      loggerMixin,\n      initLifecycleMixin,\n      configMixin,\n      projectIdMixin,\n      flowIdMixin,\n    )(superclass);\n\n    return class TelemetryMixinClass extends BaseClass {\n      #telemetryManager: any = null;\n      #telemetryInitialized = false;\n      #expirationTimeoutId: NodeJS.Timeout | null = null;\n\n      async #initializeTelemetry(\n        config: TelemetryConfig,\n        context: {\n          projectId: string;\n          flowId?: string;\n          sdkVersion?: string;\n        },\n      ) {\n        if (!config?.enabled) {\n          this.logger.debug('Telemetry is disabled, skipping initialization');\n          return;\n        }\n\n        if (this.#telemetryInitialized) {\n          this.logger.debug('Telemetry already initialized');\n          return;\n        }\n\n        if (config.expiration && Date.now() >= config.expiration) {\n          this.logger.info(\n            `Telemetry expiration time has passed (${new Date(\n              config.expiration,\n            ).toISOString()}), skipping initialization`,\n          );\n          return;\n        }\n\n        try {\n          this.logger.debug('Initializing telemetry...');\n          const version = config.version || 'latest';\n\n          await this.injectNpmLib(DEBUG_LOGS_LIB_NAME, version, JS_FILE_PATH, [\n            LOCAL_STORAGE_OVERRIDE,\n          ]);\n\n          const TelemetryManager = window.DescopeDebugLogs;\n          if (!TelemetryManager) {\n            throw new Error(\n              'DescopeDebugLogs not found after loading @descope/debug-logs. ' +\n                'This likely means the UMD build failed to load from CDN.',\n            );\n          }\n\n          this.#telemetryManager = new TelemetryManager(\n            {\n              enabled: true,\n              rumConfig: config.rumConfig,\n              capture: config.capture,\n            },\n            {\n              projectId: context.projectId,\n              flowId: context.flowId,\n              version: context.sdkVersion || '1.0.0',\n            },\n            this.logger,\n          );\n\n          // The TelemetryManager constructor swallows RUM-client init errors\n          // (it sets an internal failure flag instead of throwing). Confirm it\n          // actually came up before flagging success - otherwise we'd log\n          // \"initialized\" and, because #initializeTelemetry early-returns once\n          // #telemetryInitialized is true, permanently block any retry.\n          if (!this.#telemetryManager.isReady()) {\n            this.logger.error(\n              'Telemetry manager failed to initialize (RUM client not ready)',\n            );\n            this.#telemetryManager = null;\n            return;\n          }\n\n          this.#telemetryInitialized = true;\n\n          this.logger.info('Telemetry initialized successfully');\n\n          if (config.expiration) {\n            this.#scheduleExpirationShutdown(config.expiration);\n          }\n        } catch (error) {\n          this.logger.error('Failed to initialize telemetry:', error);\n          this.#telemetryInitialized = false;\n        }\n      }\n\n      /**\n       * Schedule automatic telemetry shutdown at expiration time\n       * @param expirationMs - Unix timestamp in milliseconds when telemetry should expire\n       */\n      #scheduleExpirationShutdown(expirationMs: number) {\n        const now = Date.now();\n        const timeUntilExpiration = expirationMs - now;\n\n        if (timeUntilExpiration <= 0) {\n          this.logger.info('Telemetry expiration time reached, shutting down');\n          this.#shutdownTelemetry();\n          return;\n        }\n\n        // setTimeout's max safe delay is ~24.8 days; cap at 1 day so a\n        // mis-set expiration far in the future doesn't underflow to 0.\n        const MAX_TIMEOUT = 86400000;\n        const delay = Math.min(timeUntilExpiration, MAX_TIMEOUT);\n\n        if (timeUntilExpiration > MAX_TIMEOUT) {\n          this.logger.warn(\n            `Telemetry expiration is beyond maximum timeout (${formatDelay(\n              timeUntilExpiration,\n            )}). Setting to maximum.`,\n          );\n        }\n\n        this.logger.info(\n          `Telemetry will expire at ${new Date(\n            expirationMs,\n          ).toISOString()} (in ${formatDelay(delay)})`,\n        );\n\n        this.#expirationTimeoutId = setTimeout(() => {\n          this.logger.info('Telemetry expiration time reached, shutting down');\n          this.#shutdownTelemetry();\n        }, delay);\n      }\n\n      #shutdownTelemetry() {\n        if (this.#expirationTimeoutId) {\n          clearTimeout(this.#expirationTimeoutId);\n          this.#expirationTimeoutId = null;\n        }\n\n        if (this.#telemetryManager) {\n          try {\n            this.logger.debug('Shutting down telemetry...');\n            this.#telemetryManager.shutdown();\n            this.#telemetryManager = null;\n            this.#telemetryInitialized = false;\n            this.logger.info('Telemetry shutdown complete');\n          } catch (error) {\n            this.logger.error('Error shutting down telemetry:', error);\n          }\n        }\n      }\n\n      /**\n       * Get the telemetry manager instance (for advanced usage)\n       */\n      get telemetryManager() {\n        return this.#telemetryManager;\n      }\n\n      // A RUM client needs applicationId, identityPoolId and region. If any is\n      // missing, AwsRum either throws at construction or silently records\n      // nothing, so we treat the config as unusable.\n      #isRumConfigComplete(rumConfig?: TelemetryConfig['rumConfig']): boolean {\n        return Boolean(\n          rumConfig?.applicationId &&\n            rumConfig?.identityPoolId &&\n            rumConfig?.region,\n        );\n      }\n\n      async #getTelemetryConfig(): Promise<TelemetryConfig> {\n        // Prefer telemetry config shipped by the backend in the project's\n        // config.json. Otherwise, fall back to values from\n        // packages/sdks/web-component/.env (DESCOPE_TELEMETRY_* — substituted\n        // at WC build time via rollup.config.app.mjs). We MERGE rather than\n        // replace so the backend can override individual fields (e.g. just\n        // expiration) without re-stating every credential.\n        // The backend ships telemetry nested under `projectConfig` in config.json.\n        const resolvedConfig = await this.config;\n        const beTelemetry = resolvedConfig?.projectConfig?.telemetry;\n\n        const sampleRate = Number(\n          process.env.DESCOPE_TELEMETRY_SESSION_SAMPLE_RATE,\n        );\n\n        const fallback: NonNullable<TelemetryConfig> = {\n          enabled:\n            (process.env.DESCOPE_TELEMETRY_ENABLED || '').toLowerCase() ===\n            'true',\n          rumConfig: {\n            applicationId: process.env.DESCOPE_TELEMETRY_APPLICATION_ID || '',\n            identityPoolId:\n              process.env.DESCOPE_TELEMETRY_IDENTITY_POOL_ID || '',\n            region: process.env.DESCOPE_TELEMETRY_REGION || '',\n            sessionSampleRate:\n              Number.isFinite(sampleRate) && sampleRate > 0 ? sampleRate : 1,\n            ...(process.env.DESCOPE_TELEMETRY_GUEST_ROLE_ARN && {\n              guestRoleArn: process.env.DESCOPE_TELEMETRY_GUEST_ROLE_ARN,\n            }),\n          },\n        };\n\n        const cfg: NonNullable<TelemetryConfig> = {\n          ...fallback,\n          ...beTelemetry,\n          rumConfig: {\n            ...fallback.rumConfig,\n            ...beTelemetry?.rumConfig,\n          },\n          capture: this.#resolveCapture(beTelemetry?.capture),\n        };\n\n        // If enabled but a required RUM credential is missing (empty from both\n        // the BE block and the .env fallback), disable rather than hand AwsRum\n        // an empty applicationId/identityPoolId/region — that would either\n        // throw at construction or silently no-op with no session recorded.\n        if (cfg.enabled && !this.#isRumConfigComplete(cfg.rumConfig)) {\n          this.logger.warn(\n            'Telemetry enabled but rumConfig is incomplete (applicationId/identityPoolId/region required). Skipping initialization.',\n          );\n          cfg.enabled = false;\n        }\n\n        // Safety cap: when no backend telemetry config is present at all,\n        // end the session after 5 minutes so dev sessions don't leak. Once\n        // the backend owns the config it controls expiration explicitly.\n        if (!beTelemetry) {\n          cfg.expiration = Date.now() + 5 * 60 * 1000;\n          this.logger.debug(\n            'No backend telemetry config present; applying a 5-minute safety cap on the session.',\n          );\n        }\n\n        return cfg;\n      }\n\n      /**\n       * The backend can't serialize a DOM element reference, so we always\n       * inject this.shadowRoot here. Respect an explicit `dom: false`.\n       */\n      #resolveCapture(\n        beCapture: NonNullable<TelemetryConfig>['capture'],\n      ): NonNullable<TelemetryConfig>['capture'] {\n        // `network: true` = capture ALL network traffic. We used to default to\n        // `{ urlFilter: [] }` but the two network paths had inverted semantics\n        // for the empty array: the custom NetworkPlugin treated it as\n        // \"capture everything\", while AWS RUM's built-in HTTP telemetry\n        // treated it as \"capture nothing\". `true` is consistent — both paths\n        // capture all by default. BE can override with a narrow filter later.\n        const domSetting = beCapture?.dom;\n        if (domSetting === false) {\n          return {\n            console: true,\n            network: true,\n            navigation: true,\n            ...beCapture,\n            dom: false,\n          };\n        }\n        return {\n          console: true,\n          network: true,\n          navigation: true,\n          ...beCapture,\n          dom: {\n            throttleMs: 2000,\n            ...(typeof domSetting === 'object' ? domSetting : {}),\n            rootElement: this.shadowRoot as any,\n          },\n        };\n      }\n\n      updateTelemetryContext(context: Record<string, any>) {\n        if (this.#telemetryManager) {\n          try {\n            this.#telemetryManager.updateContext(context);\n          } catch (error) {\n            // Fail silently - telemetry errors should never break the web-component\n            this.logger.error('Error updating telemetry context:', error);\n          }\n        }\n      }\n\n      #telemetryReady: Promise<void> | null = null;\n\n      async init() {\n        // super.init() FIRST so downstream mixins finish setup and the\n        // SDK's user-facing paint isn't blocked on our CDN load or the\n        // `this.config` fetch. Kick off telemetry as its OWN promise chain\n        // stored on the instance. NOT awaited here — tests using\n        // jest.useFakeTimers can't advance the fetch chain, and blocking on\n        // it would freeze the render. Failures are caught so telemetry\n        // errors can never break the SDK's boot.\n        await super.init?.();\n        const sdkVersion = (this as any).sdkVersion || '1.0.0';\n        this.#telemetryReady = this.#getTelemetryConfig()\n          .then((config) =>\n            this.#initializeTelemetry(config as any, {\n              projectId: this.projectId,\n              flowId: this.flowId,\n              sdkVersion,\n            }),\n          )\n          .catch((error) => {\n            this.logger.error('Failed to start telemetry:', error);\n          });\n      }\n\n      // Test hook: resolves once telemetry init has settled (success or\n      // caught error). Not part of the public SDK contract.\n      get telemetryReady(): Promise<void> {\n        return this.#telemetryReady ?? Promise.resolve();\n      }\n\n      disconnectedCallback() {\n        super.disconnectedCallback?.();\n        this.#shutdownTelemetry();\n      }\n    };\n  },\n);\n"],"names":["createSingletonMixin","compose","injectNpmLibMixin","loggerMixin","initLifecycleMixin","configMixin","projectIdMixin","flowIdMixin","__classPrivateFieldGet","__classPrivateFieldSet","DEBUG_LOGS_LIB_NAME","JS_FILE_PATH","LOCAL_STORAGE_OVERRIDE"],"mappings":";;;;;;;;;;;;AAcA;AACA;AACA,SAAS,WAAW,CAAC,EAAU,EAAA;IAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,CAAA,EAAG,CAAC,CAAA,QAAA,CAAU,CAAC;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,CAAA,EAAG,CAAC,CAAA,QAAA,CAAU,CAAC;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,CAAA,EAAG,CAAC,CAAA,MAAA,CAAQ,CAAC;IAChC,OAAO,CAAA,EAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA,KAAA,CAAO,CAAC;AACtC,CAAC;MASY,cAAc,GAAGA,+BAAoB,CAChD,CAAqC,UAAa,KAAI;;AACpD,IAAA,MAAM,SAAS,GAAGC,kBAAO,CACvBC,mCAAiB,EACjBC,uBAAW,EACXC,qCAAkB,EAClBC,uBAAW,EACXC,6BAAc,EACdC,uBAAW,CACZ,CAAC,UAAU,CAAC,CAAC;IAEd,OAAO,EAAA,GAAA,MAAM,mBAAoB,SAAQ,SAAS,CAAA;AAA3C,YAAA,WAAA,GAAA;;;AACL,gBAAA,qCAAA,CAAA,GAAA,CAAA,IAAA,EAAyB,IAAI,CAAC,CAAA;AAC9B,gBAAA,yCAAA,CAAA,GAAA,CAAA,IAAA,EAAwB,KAAK,CAAC,CAAA;AAC9B,gBAAA,wCAAA,CAAA,GAAA,CAAA,IAAA,EAA8C,IAAI,CAAC,CAAA;AAkRnD,gBAAA,mCAAA,CAAA,GAAA,CAAA,IAAA,EAAwC,IAAI,CAAC,CAAA;aAmC9C;AAtKC;;AAEG;AACH,YAAA,IAAI,gBAAgB,GAAA;gBAClB,OAAOC,4BAAA,CAAA,IAAI,EAAA,qCAAA,EAAA,GAAA,CAAkB,CAAC;aAC/B;AAmHD,YAAA,sBAAsB,CAAC,OAA4B,EAAA;AACjD,gBAAA,IAAIA,4BAAA,CAAA,IAAI,EAAkB,qCAAA,EAAA,GAAA,CAAA,EAAE;AAC1B,oBAAA,IAAI;AACF,wBAAAA,4BAAA,CAAA,IAAI,EAAkB,qCAAA,EAAA,GAAA,CAAA,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;qBAC/C;oBAAC,OAAO,KAAK,EAAE;;wBAEd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;qBAC/D;iBACF;aACF;AAID,YAAA,MAAM,IAAI,GAAA;;;;;;;;;AAQR,gBAAA,OAAM,CAAA,EAAA,GAAA,KAAK,CAAC,IAAI,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,IAAA,CAAA,IAAA,CAAI,CAAA,CAAC;AACrB,gBAAA,MAAM,UAAU,GAAI,IAAY,CAAC,UAAU,IAAI,OAAO,CAAC;AACvD,gBAAAC,4BAAA,CAAA,IAAI,EAAmB,mCAAA,EAAAD,4BAAA,CAAA,IAAI,EAAoB,8BAAA,EAAA,GAAA,EAAA,uCAAA,CAAA,CAAA,IAAA,CAAxB,IAAI,CAAsB;AAC9C,qBAAA,IAAI,CAAC,CAAC,MAAM,KACXA,4BAAA,CAAA,IAAI,EAAqB,8BAAA,EAAA,GAAA,EAAA,wCAAA,CAAA,CAAA,IAAA,CAAzB,IAAI,EAAsB,MAAa,EAAE;oBACvC,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU;AACX,iBAAA,CAAC,CACH;AACA,qBAAA,KAAK,CAAC,CAAC,KAAK,KAAI;oBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;iBACxD,CAAC,MAAA,CAAC;aACN;;;AAID,YAAA,IAAI,cAAc,GAAA;;gBAChB,OAAO,CAAA,EAAA,GAAAA,6BAAA,IAAI,EAAA,mCAAA,EAAA,GAAA,CAAgB,mCAAI,OAAO,CAAC,OAAO,EAAE,CAAC;aAClD;YAED,oBAAoB,GAAA;;AAClB,gBAAA,CAAA,EAAA,GAAA,KAAK,CAAC,oBAAoB,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,IAAA,CAAA,IAAA,CAAI,CAAC;AAC/B,gBAAAA,4BAAA,CAAA,IAAI,EAAA,8BAAA,EAAA,GAAA,EAAA,sCAAA,CAAmB,CAAvB,IAAA,CAAA,IAAI,CAAqB,CAAC;aAC3B;AACF,SAAA;;;;;;mDAnTC,eAAK,wCAAA,CACH,MAAuB,EACvB,OAIC,EAAA;YAED,IAAI,EAAC,MAAM,KAAN,IAAA,IAAA,MAAM,KAAN,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,MAAM,CAAE,OAAO,CAAA,EAAE;AACpB,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBACpE,OAAO;aACR;AAED,YAAA,IAAIA,4BAAA,CAAA,IAAI,EAAsB,yCAAA,EAAA,GAAA,CAAA,EAAE;AAC9B,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACnD,OAAO;aACR;AAED,YAAA,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE;AACxD,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAAA,sCAAA,EAAyC,IAAI,IAAI,CAC/C,MAAM,CAAC,UAAU,CAClB,CAAC,WAAW,EAAE,CAAA,0BAAA,CAA4B,CAC5C,CAAC;gBACF,OAAO;aACR;AAED,YAAA,IAAI;AACF,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAC/C,gBAAA,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC;gBAE3C,MAAM,IAAI,CAAC,YAAY,CAACE,6BAAmB,EAAE,OAAO,EAAEC,sBAAY,EAAE;oBAClEC,gCAAsB;AACvB,iBAAA,CAAC,CAAC;AAEH,gBAAA,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBACjD,IAAI,CAAC,gBAAgB,EAAE;oBACrB,MAAM,IAAI,KAAK,CACb,gEAAgE;AAC9D,wBAAA,0DAA0D,CAC7D,CAAC;iBACH;AAED,gBAAAH,4BAAA,CAAA,IAAI,EAAA,qCAAA,EAAqB,IAAI,gBAAgB,CAC3C;AACE,oBAAA,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,EACD;oBACE,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;AACtB,oBAAA,OAAO,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO;AACvC,iBAAA,EACD,IAAI,CAAC,MAAM,CACZ,MAAA,CAAC;;;;;;gBAOF,IAAI,CAACD,6BAAA,IAAI,EAAA,qCAAA,EAAA,GAAA,CAAkB,CAAC,OAAO,EAAE,EAAE;AACrC,oBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,+DAA+D,CAChE,CAAC;AACF,oBAAAC,4BAAA,CAAA,IAAI,EAAA,qCAAA,EAAqB,IAAI,EAAA,GAAA,CAAA,CAAC;oBAC9B,OAAO;iBACR;AAED,gBAAAA,4BAAA,CAAA,IAAI,EAAA,yCAAA,EAAyB,IAAI,EAAA,GAAA,CAAA,CAAC;AAElC,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;AAEvD,gBAAA,IAAI,MAAM,CAAC,UAAU,EAAE;oBACrBD,4BAAA,CAAA,IAAI,uFAA4B,CAAhC,IAAA,CAAA,IAAI,EAA6B,MAAM,CAAC,UAAU,CAAC,CAAC;iBACrD;aACF;YAAC,OAAO,KAAK,EAAE;gBACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;AAC5D,gBAAAC,4BAAA,CAAA,IAAI,EAAA,yCAAA,EAAyB,KAAK,EAAA,GAAA,CAAA,CAAC;aACpC;SACF;mHAM2B,YAAoB,EAAA;AAC9C,YAAA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AACvB,YAAA,MAAM,mBAAmB,GAAG,YAAY,GAAG,GAAG,CAAC;AAE/C,YAAA,IAAI,mBAAmB,IAAI,CAAC,EAAE;AAC5B,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;AACrE,gBAAAD,4BAAA,CAAA,IAAI,EAAA,8BAAA,EAAA,GAAA,EAAA,sCAAA,CAAmB,CAAvB,IAAA,CAAA,IAAI,CAAqB,CAAC;gBAC1B,OAAO;aACR;;;YAID,MAAM,WAAW,GAAG,QAAQ,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;AAEzD,YAAA,IAAI,mBAAmB,GAAG,WAAW,EAAE;AACrC,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAAA,gDAAA,EAAmD,WAAW,CAC5D,mBAAmB,CACpB,CAAwB,sBAAA,CAAA,CAC1B,CAAC;aACH;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAA4B,yBAAA,EAAA,IAAI,IAAI,CAClC,YAAY,CACb,CAAC,WAAW,EAAE,CAAQ,KAAA,EAAA,WAAW,CAAC,KAAK,CAAC,CAAG,CAAA,CAAA,CAC7C,CAAC;AAEF,YAAAC,4BAAA,CAAA,IAAI,EAAA,wCAAA,EAAwB,UAAU,CAAC,MAAK;AAC1C,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;AACrE,gBAAAD,4BAAA,CAAA,IAAI,EAAA,8BAAA,EAAA,GAAA,EAAA,sCAAA,CAAmB,CAAvB,IAAA,CAAA,IAAI,CAAqB,CAAC;AAC5B,aAAC,EAAE,KAAK,CAAC,EAAA,GAAA,CAAA,CAAC;SACX;;AAGC,YAAA,IAAIA,4BAAA,CAAA,IAAI,EAAqB,wCAAA,EAAA,GAAA,CAAA,EAAE;AAC7B,gBAAA,YAAY,CAACA,4BAAA,CAAA,IAAI,EAAA,wCAAA,EAAA,GAAA,CAAqB,CAAC,CAAC;AACxC,gBAAAC,4BAAA,CAAA,IAAI,EAAA,wCAAA,EAAwB,IAAI,EAAA,GAAA,CAAA,CAAC;aAClC;AAED,YAAA,IAAID,4BAAA,CAAA,IAAI,EAAkB,qCAAA,EAAA,GAAA,CAAA,EAAE;AAC1B,gBAAA,IAAI;AACF,oBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAChD,oBAAAA,4BAAA,CAAA,IAAI,EAAA,qCAAA,EAAA,GAAA,CAAkB,CAAC,QAAQ,EAAE,CAAC;AAClC,oBAAAC,4BAAA,CAAA,IAAI,EAAA,qCAAA,EAAqB,IAAI,EAAA,GAAA,CAAA,CAAC;AAC9B,oBAAAA,4BAAA,CAAA,IAAI,EAAA,yCAAA,EAAyB,KAAK,EAAA,GAAA,CAAA,CAAC;AACnC,oBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;iBACjD;gBAAC,OAAO,KAAK,EAAE;oBACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;iBAC5D;aACF;SACF;qGAYoB,SAAwC,EAAA;YAC3D,OAAO,OAAO,CACZ,CAAA,SAAS,aAAT,SAAS,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAT,SAAS,CAAE,aAAa;AACtB,iBAAA,SAAS,aAAT,SAAS,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAT,SAAS,CAAE,cAAc,CAAA;iBACzB,SAAS,KAAA,IAAA,IAAT,SAAS,KAAT,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,SAAS,CAAE,MAAM,CAAA,CACpB,CAAC;SACH;kDAED,eAAK,uCAAA,GAAA;;;;;;;;;AAQH,YAAA,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;AACzC,YAAA,MAAM,WAAW,GAAG,CAAA,EAAA,GAAA,cAAc,KAAd,IAAA,IAAA,cAAc,KAAd,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,cAAc,CAAE,aAAa,MAAE,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,SAAS,CAAC;YAE7D,MAAM,UAAU,GAAG,MAAM,CACvB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAClD,CAAC;AAEF,YAAA,MAAM,QAAQ,GAAiC;AAC7C,gBAAA,OAAO,EACL,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,EAAE,WAAW,EAAE;oBAC3D,MAAM;gBACR,SAAS,EAAA,MAAA,CAAA,MAAA,CAAA,EACP,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,EAAE,EACjE,cAAc,EACZ,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,EAAE,EACtD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,EAClD,iBAAiB,EACf,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,GAAG,UAAU,GAAG,CAAC,EAAA,GAC5D,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI;AAClD,oBAAA,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,gCAAgC;AAC3D,iBAAA,EACF;aACF,CAAC;AAEF,YAAA,MAAM,GAAG,GACJ,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,EAAA,EAAA,QAAQ,CACR,EAAA,WAAW,KACd,SAAS,EAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,EAAA,EACJ,QAAQ,CAAC,SAAS,CAClB,EAAA,WAAW,KAAX,IAAA,IAAA,WAAW,uBAAX,WAAW,CAAE,SAAS,CAAA,EAE3B,OAAO,EAAED,4BAAA,CAAA,IAAI,EAAA,8BAAA,EAAA,GAAA,EAAA,mCAAA,CAAgB,MAApB,IAAI,EAAiB,WAAW,KAAA,IAAA,IAAX,WAAW,KAAX,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,WAAW,CAAE,OAAO,CAAC,GACpD,CAAC;;;;;AAMF,YAAA,IAAI,GAAG,CAAC,OAAO,IAAI,CAACA,6BAAA,IAAI,EAAA,8BAAA,EAAA,GAAA,EAAA,wCAAA,CAAqB,CAAzB,IAAA,CAAA,IAAI,EAAsB,GAAG,CAAC,SAAS,CAAC,EAAE;AAC5D,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,wHAAwH,CACzH,CAAC;AACF,gBAAA,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC;aACrB;;;;YAKD,IAAI,CAAC,WAAW,EAAE;AAChB,gBAAA,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,qFAAqF,CACtF,CAAC;aACH;AAED,YAAA,OAAO,GAAG,CAAC;SACZ;2FAOC,SAAkD,EAAA;;;;;;;YAQlD,MAAM,UAAU,GAAG,SAAS,KAAA,IAAA,IAAT,SAAS,KAAT,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,SAAS,CAAE,GAAG,CAAC;AAClC,YAAA,IAAI,UAAU,KAAK,KAAK,EAAE;AACxB,gBAAA,OAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,EACE,OAAO,EAAE,IAAI,EACb,OAAO,EAAE,IAAI,EACb,UAAU,EAAE,IAAI,EACb,EAAA,SAAS,KACZ,GAAG,EAAE,KAAK,EACV,CAAA,CAAA;aACH;AACD,YAAA,OAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,EACE,OAAO,EAAE,IAAI,EACb,OAAO,EAAE,IAAI,EACb,UAAU,EAAE,IAAI,IACb,SAAS,CAAA,EAAA,EACZ,GAAG,EACD,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,EAAA,UAAU,EAAE,IAAI,EAAA,GACZ,OAAO,UAAU,KAAK,QAAQ,GAAG,UAAU,GAAG,EAAE,EACpD,EAAA,EAAA,WAAW,EAAE,IAAI,CAAC,UAAiB,EAErC,CAAA,EAAA,CAAA,CAAA;SACH;AAgDD,QAAA,EAAA,CAAA;AACJ,CAAC;;;;"}
+{"version":3,"file":"telemetryMixin.js","sources":["../../../../src/mixins/telemetryMixin/telemetryMixin.ts"],"sourcesContent":["import { compose, createSingletonMixin } from '@descope/sdk-helpers';\nimport { injectNpmLibMixin } from '../injectNpmLibMixin';\nimport { loggerMixin } from '../loggerMixin';\nimport { TelemetryConfig } from '../configMixin/types';\nimport {\n  DEBUG_LOGS_LIB_NAME,\n  JS_FILE_PATH,\n  LOCAL_STORAGE_OVERRIDE,\n} from './constants';\nimport { initLifecycleMixin } from '../initLifecycleMixin';\nimport { configMixin } from '../configMixin';\nimport { projectIdMixin } from '../projectIdMixin';\nimport { flowIdMixin } from '../flowIdMixin';\n\n// Human-readable delay formatter. Picks the largest unit that fits so logs\n// read as \"30 minutes\" / \"2 days\" instead of \"1800 seconds\" / \"172800 seconds\".\nfunction formatDelay(ms: number): string {\n  const s = Math.floor(ms / 1000);\n  if (s < 60) return `${s} seconds`;\n  const m = Math.floor(s / 60);\n  if (m < 60) return `${m} minutes`;\n  const h = Math.floor(m / 60);\n  if (h < 24) return `${h} hours`;\n  return `${Math.floor(h / 24)} days`;\n}\n\n// Extend global window to include DescopeDebugLogs (UMD global)\ndeclare global {\n  interface Window {\n    DescopeDebugLogs?: new (config: any, context: any, logger?: any) => any;\n  }\n}\n\nexport const telemetryMixin = createSingletonMixin(\n  <T extends CustomElementConstructor>(superclass: T) => {\n    const BaseClass = compose(\n      injectNpmLibMixin,\n      loggerMixin,\n      initLifecycleMixin,\n      configMixin,\n      projectIdMixin,\n      flowIdMixin,\n    )(superclass);\n\n    return class TelemetryMixinClass extends BaseClass {\n      #telemetryManager: any = null;\n      #telemetryInitialized = false;\n      #expirationTimeoutId: NodeJS.Timeout | null = null;\n\n      async #initializeTelemetry(\n        config: TelemetryConfig,\n        context: {\n          projectId: string;\n          flowId?: string;\n          sdkVersion?: string;\n        },\n      ) {\n        if (!config?.enabled) {\n          this.logger.debug('Telemetry is disabled, skipping initialization');\n          return;\n        }\n\n        if (this.#telemetryInitialized) {\n          this.logger.debug('Telemetry already initialized');\n          return;\n        }\n\n        if (config.expiration && Date.now() >= config.expiration) {\n          this.logger.info(\n            `Telemetry expiration time has passed (${new Date(\n              config.expiration,\n            ).toISOString()}), skipping initialization`,\n          );\n          return;\n        }\n\n        try {\n          this.logger.debug('Initializing telemetry...');\n          const version = config.version || 'latest';\n\n          await this.injectNpmLib(DEBUG_LOGS_LIB_NAME, version, JS_FILE_PATH, [\n            LOCAL_STORAGE_OVERRIDE,\n          ]);\n\n          const TelemetryManager = window.DescopeDebugLogs;\n          if (!TelemetryManager) {\n            throw new Error(\n              'DescopeDebugLogs not found after loading @descope/debug-logs. ' +\n                'This likely means the UMD build failed to load from CDN.',\n            );\n          }\n\n          this.#telemetryManager = new TelemetryManager(\n            {\n              enabled: true,\n              rumConfig: config.rumConfig,\n              capture: config.capture,\n            },\n            {\n              projectId: context.projectId,\n              flowId: context.flowId,\n              version: context.sdkVersion || '1.0.0',\n            },\n            this.logger,\n          );\n\n          // The TelemetryManager constructor swallows RUM-client init errors\n          // (it sets an internal failure flag instead of throwing). Confirm it\n          // actually came up before flagging success - otherwise we'd log\n          // \"initialized\" and, because #initializeTelemetry early-returns once\n          // #telemetryInitialized is true, permanently block any retry.\n          if (!this.#telemetryManager.isReady()) {\n            this.logger.error(\n              'Telemetry manager failed to initialize (RUM client not ready)',\n            );\n            this.#telemetryManager = null;\n            return;\n          }\n\n          this.#telemetryInitialized = true;\n\n          this.logger.info('Telemetry initialized successfully');\n\n          if (config.expiration) {\n            this.#scheduleExpirationShutdown(config.expiration);\n          }\n        } catch (error) {\n          this.logger.error('Failed to initialize telemetry:', error);\n          this.#telemetryInitialized = false;\n        }\n      }\n\n      /**\n       * Schedule automatic telemetry shutdown at expiration time\n       * @param expirationMs - Unix timestamp in milliseconds when telemetry should expire\n       */\n      #scheduleExpirationShutdown(expirationMs: number) {\n        const now = Date.now();\n        const timeUntilExpiration = expirationMs - now;\n\n        if (timeUntilExpiration <= 0) {\n          this.logger.info('Telemetry expiration time reached, shutting down');\n          this.#shutdownTelemetry();\n          return;\n        }\n\n        // setTimeout's max safe delay is ~24.8 days; cap at 1 day so a\n        // mis-set expiration far in the future doesn't underflow to 0.\n        const MAX_TIMEOUT = 86400000;\n        const delay = Math.min(timeUntilExpiration, MAX_TIMEOUT);\n\n        if (timeUntilExpiration > MAX_TIMEOUT) {\n          this.logger.warn(\n            `Telemetry expiration is beyond maximum timeout (${formatDelay(\n              timeUntilExpiration,\n            )}). Setting to maximum.`,\n          );\n        }\n\n        this.logger.info(\n          `Telemetry will expire at ${new Date(\n            expirationMs,\n          ).toISOString()} (in ${formatDelay(delay)})`,\n        );\n\n        this.#expirationTimeoutId = setTimeout(() => {\n          this.logger.info('Telemetry expiration time reached, shutting down');\n          this.#shutdownTelemetry();\n        }, delay);\n      }\n\n      #shutdownTelemetry() {\n        if (this.#expirationTimeoutId) {\n          clearTimeout(this.#expirationTimeoutId);\n          this.#expirationTimeoutId = null;\n        }\n\n        if (this.#telemetryManager) {\n          try {\n            this.logger.debug('Shutting down telemetry...');\n            this.#telemetryManager.shutdown();\n            this.#telemetryManager = null;\n            this.#telemetryInitialized = false;\n            this.logger.info('Telemetry shutdown complete');\n          } catch (error) {\n            this.logger.error('Error shutting down telemetry:', error);\n          }\n        }\n      }\n\n      /**\n       * Get the telemetry manager instance (for advanced usage)\n       */\n      get telemetryManager() {\n        return this.#telemetryManager;\n      }\n\n      // A RUM client needs applicationId, identityPoolId and region. If any is\n      // missing, AwsRum either throws at construction or silently records\n      // nothing, so we treat the config as unusable.\n      #isRumConfigComplete(rumConfig?: TelemetryConfig['rumConfig']): boolean {\n        return Boolean(\n          rumConfig?.applicationId &&\n            rumConfig?.identityPoolId &&\n            rumConfig?.region,\n        );\n      }\n\n      async #getTelemetryConfig(): Promise<TelemetryConfig> {\n        // Prefer telemetry config shipped by the backend in the project's\n        // config.json. Otherwise, fall back to values from\n        // packages/sdks/web-component/.env (DESCOPE_TELEMETRY_* — substituted\n        // at WC build time via rollup.config.app.mjs). We MERGE rather than\n        // replace so the backend can override individual fields (e.g. just\n        // expiration) without re-stating every credential.\n        // The backend ships telemetry nested under `projectConfig` in config.json.\n        const resolvedConfig = await this.config;\n        const beTelemetry = resolvedConfig?.projectConfig?.telemetry;\n\n        // The DESCOPE_TELEMETRY_* reads below are build-time env tokens: the WC\n        // app build substitutes them from .env (rollup.config.app.mjs) and the\n        // WC lib build strips them to \"\" (stubEnvInProd). But @descope/sdk-mixins\n        // ships its own dist with these tokens RAW, so a non-WC consumer that\n        // bundles this file for the browser hits a bare `process`, which is\n        // undefined there -> \"ReferenceError: process is not defined\".\n        // Wrap the reads in try/catch: this keeps the literal `process.env.*`\n        // tokens intact (so the WC build-time replace/strip still match them),\n        // while falling back to an empty config wherever `process` doesn't\n        // exist. Real config comes from the backend (projectConfig.telemetry).\n        let fallback: NonNullable<TelemetryConfig>;\n        try {\n          const sampleRate = Number(\n            process.env.DESCOPE_TELEMETRY_SESSION_SAMPLE_RATE,\n          );\n\n          fallback = {\n            enabled:\n              (process.env.DESCOPE_TELEMETRY_ENABLED || '').toLowerCase() ===\n              'true',\n            rumConfig: {\n              applicationId: process.env.DESCOPE_TELEMETRY_APPLICATION_ID || '',\n              identityPoolId:\n                process.env.DESCOPE_TELEMETRY_IDENTITY_POOL_ID || '',\n              region: process.env.DESCOPE_TELEMETRY_REGION || '',\n              sessionSampleRate:\n                Number.isFinite(sampleRate) && sampleRate > 0 ? sampleRate : 1,\n              ...(process.env.DESCOPE_TELEMETRY_GUEST_ROLE_ARN && {\n                guestRoleArn: process.env.DESCOPE_TELEMETRY_GUEST_ROLE_ARN,\n              }),\n            },\n          };\n        } catch {\n          // `process` is not defined (browser, no build-time replacement).\n          // No .env fallback here - rely on the backend telemetry config.\n          fallback = {\n            enabled: false,\n            rumConfig: {\n              applicationId: '',\n              identityPoolId: '',\n              region: '',\n              sessionSampleRate: 1,\n            },\n          };\n        }\n\n        const cfg: NonNullable<TelemetryConfig> = {\n          ...fallback,\n          ...beTelemetry,\n          rumConfig: {\n            ...fallback.rumConfig,\n            ...beTelemetry?.rumConfig,\n          },\n          capture: this.#resolveCapture(beTelemetry?.capture),\n        };\n\n        // If enabled but a required RUM credential is missing (empty from both\n        // the BE block and the .env fallback), disable rather than hand AwsRum\n        // an empty applicationId/identityPoolId/region — that would either\n        // throw at construction or silently no-op with no session recorded.\n        if (cfg.enabled && !this.#isRumConfigComplete(cfg.rumConfig)) {\n          this.logger.warn(\n            'Telemetry enabled but rumConfig is incomplete (applicationId/identityPoolId/region required). Skipping initialization.',\n          );\n          cfg.enabled = false;\n        }\n\n        // Safety cap: when no backend telemetry config is present at all,\n        // end the session after 5 minutes so dev sessions don't leak. Once\n        // the backend owns the config it controls expiration explicitly.\n        if (!beTelemetry) {\n          cfg.expiration = Date.now() + 5 * 60 * 1000;\n          this.logger.debug(\n            'No backend telemetry config present; applying a 5-minute safety cap on the session.',\n          );\n        }\n\n        return cfg;\n      }\n\n      /**\n       * The backend can't serialize a DOM element reference, so we always\n       * inject this.shadowRoot here. Respect an explicit `dom: false`.\n       */\n      #resolveCapture(\n        beCapture: NonNullable<TelemetryConfig>['capture'],\n      ): NonNullable<TelemetryConfig>['capture'] {\n        // `network: true` = capture ALL network traffic. We used to default to\n        // `{ urlFilter: [] }` but the two network paths had inverted semantics\n        // for the empty array: the custom NetworkPlugin treated it as\n        // \"capture everything\", while AWS RUM's built-in HTTP telemetry\n        // treated it as \"capture nothing\". `true` is consistent — both paths\n        // capture all by default. BE can override with a narrow filter later.\n        const domSetting = beCapture?.dom;\n        if (domSetting === false) {\n          return {\n            console: true,\n            network: true,\n            navigation: true,\n            ...beCapture,\n            dom: false,\n          };\n        }\n        return {\n          console: true,\n          network: true,\n          navigation: true,\n          ...beCapture,\n          dom: {\n            throttleMs: 2000,\n            ...(typeof domSetting === 'object' ? domSetting : {}),\n            rootElement: this.shadowRoot as any,\n          },\n        };\n      }\n\n      updateTelemetryContext(context: Record<string, any>) {\n        if (this.#telemetryManager) {\n          try {\n            this.#telemetryManager.updateContext(context);\n          } catch (error) {\n            // Fail silently - telemetry errors should never break the web-component\n            this.logger.error('Error updating telemetry context:', error);\n          }\n        }\n      }\n\n      #telemetryReady: Promise<void> | null = null;\n\n      async init() {\n        // super.init() FIRST so downstream mixins finish setup and the\n        // SDK's user-facing paint isn't blocked on our CDN load or the\n        // `this.config` fetch. Kick off telemetry as its OWN promise chain\n        // stored on the instance. NOT awaited here — tests using\n        // jest.useFakeTimers can't advance the fetch chain, and blocking on\n        // it would freeze the render. Failures are caught so telemetry\n        // errors can never break the SDK's boot.\n        await super.init?.();\n        const sdkVersion = (this as any).sdkVersion || '1.0.0';\n        this.#telemetryReady = this.#getTelemetryConfig()\n          .then((config) =>\n            this.#initializeTelemetry(config as any, {\n              projectId: this.projectId,\n              flowId: this.flowId,\n              sdkVersion,\n            }),\n          )\n          .catch((error) => {\n            this.logger.error('Failed to start telemetry:', error);\n          });\n      }\n\n      // Test hook: resolves once telemetry init has settled (success or\n      // caught error). Not part of the public SDK contract.\n      get telemetryReady(): Promise<void> {\n        return this.#telemetryReady ?? Promise.resolve();\n      }\n\n      disconnectedCallback() {\n        super.disconnectedCallback?.();\n        this.#shutdownTelemetry();\n      }\n    };\n  },\n);\n"],"names":["createSingletonMixin","compose","injectNpmLibMixin","loggerMixin","initLifecycleMixin","configMixin","projectIdMixin","flowIdMixin","__classPrivateFieldGet","__classPrivateFieldSet","DEBUG_LOGS_LIB_NAME","JS_FILE_PATH","LOCAL_STORAGE_OVERRIDE"],"mappings":";;;;;;;;;;;;AAcA;AACA;AACA,SAAS,WAAW,CAAC,EAAU,EAAA;IAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,CAAA,EAAG,CAAC,CAAA,QAAA,CAAU,CAAC;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,CAAA,EAAG,CAAC,CAAA,QAAA,CAAU,CAAC;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,CAAA,EAAG,CAAC,CAAA,MAAA,CAAQ,CAAC;IAChC,OAAO,CAAA,EAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA,KAAA,CAAO,CAAC;AACtC,CAAC;MASY,cAAc,GAAGA,+BAAoB,CAChD,CAAqC,UAAa,KAAI;;AACpD,IAAA,MAAM,SAAS,GAAGC,kBAAO,CACvBC,mCAAiB,EACjBC,uBAAW,EACXC,qCAAkB,EAClBC,uBAAW,EACXC,6BAAc,EACdC,uBAAW,CACZ,CAAC,UAAU,CAAC,CAAC;IAEd,OAAO,EAAA,GAAA,MAAM,mBAAoB,SAAQ,SAAS,CAAA;AAA3C,YAAA,WAAA,GAAA;;;AACL,gBAAA,qCAAA,CAAA,GAAA,CAAA,IAAA,EAAyB,IAAI,CAAC,CAAA;AAC9B,gBAAA,yCAAA,CAAA,GAAA,CAAA,IAAA,EAAwB,KAAK,CAAC,CAAA;AAC9B,gBAAA,wCAAA,CAAA,GAAA,CAAA,IAAA,EAA8C,IAAI,CAAC,CAAA;AA2SnD,gBAAA,mCAAA,CAAA,GAAA,CAAA,IAAA,EAAwC,IAAI,CAAC,CAAA;aAmC9C;AA/LC;;AAEG;AACH,YAAA,IAAI,gBAAgB,GAAA;gBAClB,OAAOC,4BAAA,CAAA,IAAI,EAAA,qCAAA,EAAA,GAAA,CAAkB,CAAC;aAC/B;AA4ID,YAAA,sBAAsB,CAAC,OAA4B,EAAA;AACjD,gBAAA,IAAIA,4BAAA,CAAA,IAAI,EAAkB,qCAAA,EAAA,GAAA,CAAA,EAAE;AAC1B,oBAAA,IAAI;AACF,wBAAAA,4BAAA,CAAA,IAAI,EAAkB,qCAAA,EAAA,GAAA,CAAA,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;qBAC/C;oBAAC,OAAO,KAAK,EAAE;;wBAEd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;qBAC/D;iBACF;aACF;AAID,YAAA,MAAM,IAAI,GAAA;;;;;;;;;AAQR,gBAAA,OAAM,CAAA,EAAA,GAAA,KAAK,CAAC,IAAI,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,IAAA,CAAA,IAAA,CAAI,CAAA,CAAC;AACrB,gBAAA,MAAM,UAAU,GAAI,IAAY,CAAC,UAAU,IAAI,OAAO,CAAC;AACvD,gBAAAC,4BAAA,CAAA,IAAI,EAAmB,mCAAA,EAAAD,4BAAA,CAAA,IAAI,EAAoB,8BAAA,EAAA,GAAA,EAAA,uCAAA,CAAA,CAAA,IAAA,CAAxB,IAAI,CAAsB;AAC9C,qBAAA,IAAI,CAAC,CAAC,MAAM,KACXA,4BAAA,CAAA,IAAI,EAAqB,8BAAA,EAAA,GAAA,EAAA,wCAAA,CAAA,CAAA,IAAA,CAAzB,IAAI,EAAsB,MAAa,EAAE;oBACvC,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU;AACX,iBAAA,CAAC,CACH;AACA,qBAAA,KAAK,CAAC,CAAC,KAAK,KAAI;oBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;iBACxD,CAAC,MAAA,CAAC;aACN;;;AAID,YAAA,IAAI,cAAc,GAAA;;gBAChB,OAAO,CAAA,EAAA,GAAAA,6BAAA,IAAI,EAAA,mCAAA,EAAA,GAAA,CAAgB,mCAAI,OAAO,CAAC,OAAO,EAAE,CAAC;aAClD;YAED,oBAAoB,GAAA;;AAClB,gBAAA,CAAA,EAAA,GAAA,KAAK,CAAC,oBAAoB,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,IAAA,CAAA,IAAA,CAAI,CAAC;AAC/B,gBAAAA,4BAAA,CAAA,IAAI,EAAA,8BAAA,EAAA,GAAA,EAAA,sCAAA,CAAmB,CAAvB,IAAA,CAAA,IAAI,CAAqB,CAAC;aAC3B;AACF,SAAA;;;;;;mDA5UC,eAAK,wCAAA,CACH,MAAuB,EACvB,OAIC,EAAA;YAED,IAAI,EAAC,MAAM,KAAN,IAAA,IAAA,MAAM,KAAN,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,MAAM,CAAE,OAAO,CAAA,EAAE;AACpB,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBACpE,OAAO;aACR;AAED,YAAA,IAAIA,4BAAA,CAAA,IAAI,EAAsB,yCAAA,EAAA,GAAA,CAAA,EAAE;AAC9B,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACnD,OAAO;aACR;AAED,YAAA,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE;AACxD,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAAA,sCAAA,EAAyC,IAAI,IAAI,CAC/C,MAAM,CAAC,UAAU,CAClB,CAAC,WAAW,EAAE,CAAA,0BAAA,CAA4B,CAC5C,CAAC;gBACF,OAAO;aACR;AAED,YAAA,IAAI;AACF,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAC/C,gBAAA,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC;gBAE3C,MAAM,IAAI,CAAC,YAAY,CAACE,6BAAmB,EAAE,OAAO,EAAEC,sBAAY,EAAE;oBAClEC,gCAAsB;AACvB,iBAAA,CAAC,CAAC;AAEH,gBAAA,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBACjD,IAAI,CAAC,gBAAgB,EAAE;oBACrB,MAAM,IAAI,KAAK,CACb,gEAAgE;AAC9D,wBAAA,0DAA0D,CAC7D,CAAC;iBACH;AAED,gBAAAH,4BAAA,CAAA,IAAI,EAAA,qCAAA,EAAqB,IAAI,gBAAgB,CAC3C;AACE,oBAAA,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,EACD;oBACE,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;AACtB,oBAAA,OAAO,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO;AACvC,iBAAA,EACD,IAAI,CAAC,MAAM,CACZ,MAAA,CAAC;;;;;;gBAOF,IAAI,CAACD,6BAAA,IAAI,EAAA,qCAAA,EAAA,GAAA,CAAkB,CAAC,OAAO,EAAE,EAAE;AACrC,oBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,+DAA+D,CAChE,CAAC;AACF,oBAAAC,4BAAA,CAAA,IAAI,EAAA,qCAAA,EAAqB,IAAI,EAAA,GAAA,CAAA,CAAC;oBAC9B,OAAO;iBACR;AAED,gBAAAA,4BAAA,CAAA,IAAI,EAAA,yCAAA,EAAyB,IAAI,EAAA,GAAA,CAAA,CAAC;AAElC,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;AAEvD,gBAAA,IAAI,MAAM,CAAC,UAAU,EAAE;oBACrBD,4BAAA,CAAA,IAAI,uFAA4B,CAAhC,IAAA,CAAA,IAAI,EAA6B,MAAM,CAAC,UAAU,CAAC,CAAC;iBACrD;aACF;YAAC,OAAO,KAAK,EAAE;gBACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;AAC5D,gBAAAC,4BAAA,CAAA,IAAI,EAAA,yCAAA,EAAyB,KAAK,EAAA,GAAA,CAAA,CAAC;aACpC;SACF;mHAM2B,YAAoB,EAAA;AAC9C,YAAA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AACvB,YAAA,MAAM,mBAAmB,GAAG,YAAY,GAAG,GAAG,CAAC;AAE/C,YAAA,IAAI,mBAAmB,IAAI,CAAC,EAAE;AAC5B,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;AACrE,gBAAAD,4BAAA,CAAA,IAAI,EAAA,8BAAA,EAAA,GAAA,EAAA,sCAAA,CAAmB,CAAvB,IAAA,CAAA,IAAI,CAAqB,CAAC;gBAC1B,OAAO;aACR;;;YAID,MAAM,WAAW,GAAG,QAAQ,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;AAEzD,YAAA,IAAI,mBAAmB,GAAG,WAAW,EAAE;AACrC,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAAA,gDAAA,EAAmD,WAAW,CAC5D,mBAAmB,CACpB,CAAwB,sBAAA,CAAA,CAC1B,CAAC;aACH;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAA4B,yBAAA,EAAA,IAAI,IAAI,CAClC,YAAY,CACb,CAAC,WAAW,EAAE,CAAQ,KAAA,EAAA,WAAW,CAAC,KAAK,CAAC,CAAG,CAAA,CAAA,CAC7C,CAAC;AAEF,YAAAC,4BAAA,CAAA,IAAI,EAAA,wCAAA,EAAwB,UAAU,CAAC,MAAK;AAC1C,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;AACrE,gBAAAD,4BAAA,CAAA,IAAI,EAAA,8BAAA,EAAA,GAAA,EAAA,sCAAA,CAAmB,CAAvB,IAAA,CAAA,IAAI,CAAqB,CAAC;AAC5B,aAAC,EAAE,KAAK,CAAC,EAAA,GAAA,CAAA,CAAC;SACX;;AAGC,YAAA,IAAIA,4BAAA,CAAA,IAAI,EAAqB,wCAAA,EAAA,GAAA,CAAA,EAAE;AAC7B,gBAAA,YAAY,CAACA,4BAAA,CAAA,IAAI,EAAA,wCAAA,EAAA,GAAA,CAAqB,CAAC,CAAC;AACxC,gBAAAC,4BAAA,CAAA,IAAI,EAAA,wCAAA,EAAwB,IAAI,EAAA,GAAA,CAAA,CAAC;aAClC;AAED,YAAA,IAAID,4BAAA,CAAA,IAAI,EAAkB,qCAAA,EAAA,GAAA,CAAA,EAAE;AAC1B,gBAAA,IAAI;AACF,oBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAChD,oBAAAA,4BAAA,CAAA,IAAI,EAAA,qCAAA,EAAA,GAAA,CAAkB,CAAC,QAAQ,EAAE,CAAC;AAClC,oBAAAC,4BAAA,CAAA,IAAI,EAAA,qCAAA,EAAqB,IAAI,EAAA,GAAA,CAAA,CAAC;AAC9B,oBAAAA,4BAAA,CAAA,IAAI,EAAA,yCAAA,EAAyB,KAAK,EAAA,GAAA,CAAA,CAAC;AACnC,oBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;iBACjD;gBAAC,OAAO,KAAK,EAAE;oBACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;iBAC5D;aACF;SACF;qGAYoB,SAAwC,EAAA;YAC3D,OAAO,OAAO,CACZ,CAAA,SAAS,aAAT,SAAS,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAT,SAAS,CAAE,aAAa;AACtB,iBAAA,SAAS,aAAT,SAAS,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAT,SAAS,CAAE,cAAc,CAAA;iBACzB,SAAS,KAAA,IAAA,IAAT,SAAS,KAAT,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,SAAS,CAAE,MAAM,CAAA,CACpB,CAAC;SACH;kDAED,eAAK,uCAAA,GAAA;;;;;;;;;AAQH,YAAA,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;AACzC,YAAA,MAAM,WAAW,GAAG,CAAA,EAAA,GAAA,cAAc,KAAd,IAAA,IAAA,cAAc,KAAd,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,cAAc,CAAE,aAAa,MAAE,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,SAAS,CAAC;;;;;;;;;;;AAY7D,YAAA,IAAI,QAAsC,CAAC;AAC3C,YAAA,IAAI;gBACF,MAAM,UAAU,GAAG,MAAM,CACvB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAClD,CAAC;AAEF,gBAAA,QAAQ,GAAG;AACT,oBAAA,OAAO,EACL,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,EAAE,WAAW,EAAE;wBAC3D,MAAM;oBACR,SAAS,EAAA,MAAA,CAAA,MAAA,CAAA,EACP,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,EAAE,EACjE,cAAc,EACZ,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,EAAE,EACtD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,EAClD,iBAAiB,EACf,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,GAAG,UAAU,GAAG,CAAC,EAAA,GAC5D,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI;AAClD,wBAAA,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,gCAAgC;AAC3D,qBAAA,EACF;iBACF,CAAC;aACH;AAAC,YAAA,OAAA,EAAA,EAAM;;;AAGN,gBAAA,QAAQ,GAAG;AACT,oBAAA,OAAO,EAAE,KAAK;AACd,oBAAA,SAAS,EAAE;AACT,wBAAA,aAAa,EAAE,EAAE;AACjB,wBAAA,cAAc,EAAE,EAAE;AAClB,wBAAA,MAAM,EAAE,EAAE;AACV,wBAAA,iBAAiB,EAAE,CAAC;AACrB,qBAAA;iBACF,CAAC;aACH;AAED,YAAA,MAAM,GAAG,GACJ,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,EAAA,EAAA,QAAQ,CACR,EAAA,WAAW,KACd,SAAS,EAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,EAAA,EACJ,QAAQ,CAAC,SAAS,CAClB,EAAA,WAAW,KAAX,IAAA,IAAA,WAAW,uBAAX,WAAW,CAAE,SAAS,CAAA,EAE3B,OAAO,EAAED,4BAAA,CAAA,IAAI,EAAA,8BAAA,EAAA,GAAA,EAAA,mCAAA,CAAgB,MAApB,IAAI,EAAiB,WAAW,KAAA,IAAA,IAAX,WAAW,KAAX,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,WAAW,CAAE,OAAO,CAAC,GACpD,CAAC;;;;;AAMF,YAAA,IAAI,GAAG,CAAC,OAAO,IAAI,CAACA,6BAAA,IAAI,EAAA,8BAAA,EAAA,GAAA,EAAA,wCAAA,CAAqB,CAAzB,IAAA,CAAA,IAAI,EAAsB,GAAG,CAAC,SAAS,CAAC,EAAE;AAC5D,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,wHAAwH,CACzH,CAAC;AACF,gBAAA,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC;aACrB;;;;YAKD,IAAI,CAAC,WAAW,EAAE;AAChB,gBAAA,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,qFAAqF,CACtF,CAAC;aACH;AAED,YAAA,OAAO,GAAG,CAAC;SACZ;2FAOC,SAAkD,EAAA;;;;;;;YAQlD,MAAM,UAAU,GAAG,SAAS,KAAA,IAAA,IAAT,SAAS,KAAT,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,SAAS,CAAE,GAAG,CAAC;AAClC,YAAA,IAAI,UAAU,KAAK,KAAK,EAAE;AACxB,gBAAA,OAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,EACE,OAAO,EAAE,IAAI,EACb,OAAO,EAAE,IAAI,EACb,UAAU,EAAE,IAAI,EACb,EAAA,SAAS,KACZ,GAAG,EAAE,KAAK,EACV,CAAA,CAAA;aACH;AACD,YAAA,OAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,EACE,OAAO,EAAE,IAAI,EACb,OAAO,EAAE,IAAI,EACb,UAAU,EAAE,IAAI,IACb,SAAS,CAAA,EAAA,EACZ,GAAG,EACD,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,MAAA,CAAA,EAAA,UAAU,EAAE,IAAI,EAAA,GACZ,OAAO,UAAU,KAAK,QAAQ,GAAG,UAAU,GAAG,EAAE,EACpD,EAAA,EAAA,WAAW,EAAE,IAAI,CAAC,UAAiB,EAErC,CAAA,EAAA,CAAA,CAAA;SACH;AAgDD,QAAA,EAAA,CAAA;AACJ,CAAC;;;;"}

package/dist/esm/index.js

@@ -26,4 +26,6 @@ export { injectStyleMixin } from './mixins/injectStyleMixin.js';
 export { cspNonceMixin } from './mixins/cspNonceMixin.js';
 export { telemetryMixin } from './mixins/telemetryMixin/telemetryMixin.js';
 export { flowInputMixin } from './mixins/flowInputMixin/flowInputMixin.js';
+export { componentsConditionsMixin } from './mixins/componentsConditionsMixin/componentsConditionsMixin.js';
+export { applyComponentsState, clearComponentsState } from './mixins/componentsConditionsMixin/applier.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/esm/mixins/componentsConditionsMixin/applier.js

@@ -0,0 +1,68 @@
+// Applies server-computed component conditions (hide / disable / read-only) to a
+// widget's DOM. Mirrors the flow web-component applier, but targets widget
+// components by their `data-id` (widgets address components that way) and hides
+// via inline style + the `hidden` attribute rather than a `.hidden` class, which
+// widgets do not inject into their shadow DOM.
+const ATTR_SELECTOR_ESCAPE_PATTERN = /(["\\])/g;
+// CSS.escape with a narrow fallback for environments that lack it.
+function escapeSelector(value) {
+    if (typeof CSS !== 'undefined' && typeof CSS.escape === 'function') {
+        return CSS.escape(value);
+    }
+    return value.replace(ATTR_SELECTOR_ESCAPE_PATTERN, '\\$1');
+}
+// IDs can repeat, so match all.
+function findComponents(root, id) {
+    return Array.from(root.querySelectorAll(`[data-id="${escapeSelector(id)}"]`));
+}
+function applyAction(el, action) {
+    var _a;
+    switch (action) {
+        case 'hide':
+            el.setAttribute('hidden', '');
+            (_a = el.style) === null || _a === void 0 ? void 0 : _a.setProperty('display', 'none', 'important');
+            break;
+        case 'disable':
+            el.setAttribute('disabled', 'true');
+            break;
+        case 'read-only':
+            el.setAttribute('readonly', 'true');
+            break;
+        // Unknown action - ignore. A bad action shouldn't make it past the server.
+    }
+}
+function clearAction(el, action) {
+    var _a;
+    switch (action) {
+        case 'hide':
+            el.removeAttribute('hidden');
+            (_a = el.style) === null || _a === void 0 ? void 0 : _a.removeProperty('display');
+            break;
+        case 'disable':
+            el.removeAttribute('disabled');
+            break;
+        case 'read-only':
+            el.removeAttribute('readonly');
+            break;
+        // no-op
+    }
+}
+/** Applies the componentId -> action map to the matching elements under root. */
+function applyComponentsState(root, componentsState) {
+    if (!root || !componentsState)
+        return;
+    Object.entries(componentsState).forEach(([id, action]) => {
+        findComponents(root, id).forEach((el) => applyAction(el, action));
+    });
+}
+/** Reverts a previously-applied componentId -> action map. */
+function clearComponentsState(root, componentsState) {
+    if (!root || !componentsState)
+        return;
+    Object.entries(componentsState).forEach(([id, action]) => {
+        findComponents(root, id).forEach((el) => clearAction(el, action));
+    });
+}
+
+export { applyComponentsState, clearComponentsState };
+//# sourceMappingURL=applier.js.map

package/dist/esm/mixins/componentsConditionsMixin/applier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applier.js","sources":["../../../../src/mixins/componentsConditionsMixin/applier.ts"],"sourcesContent":["// Applies server-computed component conditions (hide / disable / read-only) to a\n// widget's DOM. Mirrors the flow web-component applier, but targets widget\n// components by their `data-id` (widgets address components that way) and hides\n// via inline style + the `hidden` attribute rather than a `.hidden` class, which\n// widgets do not inject into their shadow DOM.\n\nconst ATTR_SELECTOR_ESCAPE_PATTERN = /([\"\\\\])/g;\n\n// CSS.escape with a narrow fallback for environments that lack it.\nfunction escapeSelector(value: string): string {\n  if (typeof CSS !== 'undefined' && typeof CSS.escape === 'function') {\n    return CSS.escape(value);\n  }\n  return value.replace(ATTR_SELECTOR_ESCAPE_PATTERN, '\\\\$1');\n}\n\n// IDs can repeat, so match all.\nfunction findComponents(root: ParentNode, id: string): Element[] {\n  return Array.from(root.querySelectorAll(`[data-id=\"${escapeSelector(id)}\"]`));\n}\n\nfunction applyAction(el: Element, action: string): void {\n  switch (action) {\n    case 'hide':\n      el.setAttribute('hidden', '');\n      (el as HTMLElement).style?.setProperty('display', 'none', 'important');\n      break;\n    case 'disable':\n      el.setAttribute('disabled', 'true');\n      break;\n    case 'read-only':\n      el.setAttribute('readonly', 'true');\n      break;\n    default:\n    // Unknown action - ignore. A bad action shouldn't make it past the server.\n  }\n}\n\nfunction clearAction(el: Element, action: string): void {\n  switch (action) {\n    case 'hide':\n      el.removeAttribute('hidden');\n      (el as HTMLElement).style?.removeProperty('display');\n      break;\n    case 'disable':\n      el.removeAttribute('disabled');\n      break;\n    case 'read-only':\n      el.removeAttribute('readonly');\n      break;\n    default:\n    // no-op\n  }\n}\n\n/** Applies the componentId -> action map to the matching elements under root. */\nexport function applyComponentsState(\n  root: ParentNode | null | undefined,\n  componentsState: Record<string, string> | undefined,\n): void {\n  if (!root || !componentsState) return;\n  Object.entries(componentsState).forEach(([id, action]) => {\n    findComponents(root, id).forEach((el) => applyAction(el, action));\n  });\n}\n\n/** Reverts a previously-applied componentId -> action map. */\nexport function clearComponentsState(\n  root: ParentNode | null | undefined,\n  componentsState: Record<string, string> | undefined,\n): void {\n  if (!root || !componentsState) return;\n  Object.entries(componentsState).forEach(([id, action]) => {\n    findComponents(root, id).forEach((el) => clearAction(el, action));\n  });\n}\n"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AAEA,MAAM,4BAA4B,GAAG,UAAU,CAAC;AAEhD;AACA,SAAS,cAAc,CAAC,KAAa,EAAA;AACnC,IAAA,IAAI,OAAO,GAAG,KAAK,WAAW,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE;AAClE,QAAA,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KAC1B;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED;AACA,SAAS,cAAc,CAAC,IAAgB,EAAE,EAAU,EAAA;AAClD,IAAA,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAa,UAAA,EAAA,cAAc,CAAC,EAAE,CAAC,CAAI,EAAA,CAAA,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,WAAW,CAAC,EAAW,EAAE,MAAc,EAAA;;IAC9C,QAAQ,MAAM;AACZ,QAAA,KAAK,MAAM;AACT,YAAA,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC9B,YAAA,CAAA,EAAA,GAAC,EAAkB,CAAC,KAAK,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAE,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;YACvE,MAAM;AACR,QAAA,KAAK,SAAS;AACZ,YAAA,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACpC,MAAM;AACR,QAAA,KAAK,WAAW;AACd,YAAA,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACpC,MAAM;;KAGT;AACH,CAAC;AAED,SAAS,WAAW,CAAC,EAAW,EAAE,MAAc,EAAA;;IAC9C,QAAQ,MAAM;AACZ,QAAA,KAAK,MAAM;AACT,YAAA,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC7B,CAAC,EAAA,GAAA,EAAkB,CAAC,KAAK,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAE,cAAc,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM;AACR,QAAA,KAAK,SAAS;AACZ,YAAA,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM;AACR,QAAA,KAAK,WAAW;AACd,YAAA,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM;;KAGT;AACH,CAAC;AAED;AACgB,SAAA,oBAAoB,CAClC,IAAmC,EACnC,eAAmD,EAAA;AAEnD,IAAA,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe;QAAE,OAAO;AACtC,IAAA,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,KAAI;QACvD,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AACpE,KAAC,CAAC,CAAC;AACL,CAAC;AAED;AACgB,SAAA,oBAAoB,CAClC,IAAmC,EACnC,eAAmD,EAAA;AAEnD,IAAA,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe;QAAE,OAAO;AACtC,IAAA,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,KAAI;QACvD,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AACpE,KAAC,CAAC,CAAC;AACL;;;;"}

package/dist/esm/mixins/componentsConditionsMixin/componentsConditionsMixin.js

@@ -0,0 +1,101 @@
+import { __classPrivateFieldSet, __classPrivateFieldGet } from 'tslib';
+import { createSingletonMixin, compose } from '@descope/sdk-helpers';
+import { loggerMixin } from '../loggerMixin/loggerMixin.js';
+import { initElementMixin } from '../initElementMixin.js';
+import { applyComponentsState, clearComponentsState } from './applier.js';
+
+const COMPONENTS_STATE_PATH = '/v1/mgmt/widget/components-state';
+/**
+ * Shared widget mixin that fetches the server-computed component conditions
+ * verdict for the current user and applies hide/disable/read-only to the widget
+ * DOM. Server-side only - no client-side re-evaluation. Compose it LAST in a
+ * widget's initMixin so its init wraps the widget's render.
+ *
+ * It reuses the widget's existing web-js-sdk httpClient (`this.api.httpClient`),
+ * so `apiMixin` must be composed and `createSdk` must return `httpClient`. A
+ * missing client is a wiring mistake, surfaced loudly (throw) rather than
+ * silently rendering everything; a runtime fetch failure fails open instead.
+ */
+const componentsConditionsMixin = createSingletonMixin((superclass) => {
+    var _ComponentsConditionsMixinClass_instances, _ComponentsConditionsMixinClass_statePromise, _ComponentsConditionsMixinClass_appliedState, _ComponentsConditionsMixinClass_requireHttpClient, _ComponentsConditionsMixinClass_fetchComponentsState, _a;
+    // NB: do not compose initLifecycleMixin here - its empty init() has no
+    // super.init() call and would shadow the widget's render init.
+    const BaseClass = compose(loggerMixin, initElementMixin)(superclass);
+    return _a = class ComponentsConditionsMixinClass extends BaseClass {
+            constructor() {
+                super(...arguments);
+                _ComponentsConditionsMixinClass_instances.add(this);
+                _ComponentsConditionsMixinClass_statePromise.set(this, void 0);
+                _ComponentsConditionsMixinClass_appliedState.set(this, {});
+            }
+            async init() {
+                var _b, _c;
+                if (this.getAttribute('mock') === 'true') {
+                    // Mock mode (demos / e2e) has no backend - skip the fetch, hide nothing.
+                    __classPrivateFieldSet(this, _ComponentsConditionsMixinClass_statePromise, Promise.resolve({}), "f");
+                    await ((_b = super.init) === null || _b === void 0 ? void 0 : _b.call(this));
+                    return;
+                }
+                // Resolve the client up front so a wiring mistake throws before the
+                // fetch's fail-open path can swallow it.
+                const httpClient = __classPrivateFieldGet(this, _ComponentsConditionsMixinClass_instances, "m", _ComponentsConditionsMixinClass_requireHttpClient).call(this);
+                // Fire immediately so it overlaps the page/data fetch super.init runs.
+                __classPrivateFieldSet(this, _ComponentsConditionsMixinClass_statePromise, __classPrivateFieldGet(this, _ComponentsConditionsMixinClass_instances, "m", _ComponentsConditionsMixinClass_fetchComponentsState).call(this, httpClient), "f");
+                await ((_c = super.init) === null || _c === void 0 ? void 0 : _c.call(this));
+            }
+            async onWidgetRootReady() {
+                var _b, _c;
+                // @ts-expect-error onWidgetRootReady is provided by the widget's initWidgetRootMixin
+                await ((_b = super.onWidgetRootReady) === null || _b === void 0 ? void 0 : _b.call(this));
+                // Apply once the DOM exists and component values are populated, before the
+                // widget dispatches 'ready'. Awaiting here bounds any added latency to
+                // max(0, conditionsFetch - pageFetch).
+                __classPrivateFieldSet(this, _ComponentsConditionsMixinClass_appliedState, (_c = (await __classPrivateFieldGet(this, _ComponentsConditionsMixinClass_statePromise, "f"))) !== null && _c !== void 0 ? _c : {}, "f");
+                applyComponentsState(this.contentRootElement, __classPrivateFieldGet(this, _ComponentsConditionsMixinClass_appliedState, "f"));
+            }
+            /**
+             * Re-fetch and re-apply after the widget mutates data the conditions read
+             * (e.g. a profile save). Public hook for the upcoming re-evaluate-on-mutation
+             * work - no widget wires it to its mutating flows yet.
+             */
+            async reevaluateComponentsState() {
+                const httpClient = __classPrivateFieldGet(this, _ComponentsConditionsMixinClass_instances, "m", _ComponentsConditionsMixinClass_requireHttpClient).call(this);
+                clearComponentsState(this.contentRootElement, __classPrivateFieldGet(this, _ComponentsConditionsMixinClass_appliedState, "f"));
+                __classPrivateFieldSet(this, _ComponentsConditionsMixinClass_appliedState, await __classPrivateFieldGet(this, _ComponentsConditionsMixinClass_instances, "m", _ComponentsConditionsMixinClass_fetchComponentsState).call(this, httpClient), "f");
+                applyComponentsState(this.contentRootElement, __classPrivateFieldGet(this, _ComponentsConditionsMixinClass_appliedState, "f"));
+            }
+        },
+        _ComponentsConditionsMixinClass_statePromise = new WeakMap(),
+        _ComponentsConditionsMixinClass_appliedState = new WeakMap(),
+        _ComponentsConditionsMixinClass_instances = new WeakSet(),
+        _ComponentsConditionsMixinClass_requireHttpClient = function _ComponentsConditionsMixinClass_requireHttpClient() {
+            var _b;
+            const httpClient = (_b = this.api) === null || _b === void 0 ? void 0 : _b.httpClient;
+            if (!httpClient) {
+                // Developer misconfiguration (apiMixin not composed, or createSdk does
+                // not expose httpClient) - fail loud so it is caught in development.
+                throw new Error('componentsConditionsMixin: the widget sdk must expose `httpClient`. Compose apiMixin and return `webSdk.httpClient` from createSdk.');
+            }
+            return httpClient;
+        },
+        _ComponentsConditionsMixinClass_fetchComponentsState = async function _ComponentsConditionsMixinClass_fetchComponentsState(httpClient) {
+            var _b;
+            try {
+                const res = await httpClient.get(COMPONENTS_STATE_PATH);
+                if (!(res === null || res === void 0 ? void 0 : res.ok))
+                    return {};
+                const body = await res.json();
+                return (_b = body === null || body === void 0 ? void 0 : body.componentsState) !== null && _b !== void 0 ? _b : {};
+            }
+            catch (e) {
+                // Fail open: render everything. UI hiding is presentation, not access
+                // control - sensitive data stays gated by the widget's data API.
+                this.logger.debug('components-conditions: failed to fetch, showing all components', e === null || e === void 0 ? void 0 : e.message);
+                return {};
+            }
+        },
+        _a;
+});
+
+export { componentsConditionsMixin };
+//# sourceMappingURL=componentsConditionsMixin.js.map