@dif.sh/sdk 0.2.0

package/README.md

@@ -0,0 +1,133 @@
+# @dif.sh/sdk
+
+Client SDK for [dif.sh](https://dif.sh). Handles two things:
+
+1. **Experiment assignment** — picks the variant for each user and fires a
+   deterministic exposure event.
+2. **Metric tracking** — fires conversion / outcome events to dif.sh Cloud
+   so the analysis layer can compute lift.
+
+## Install
+
+```sh
+npm install @dif.sh/sdk
+```
+
+## Initialize once, at app boot
+
+```ts
+import { dif } from "@dif.sh/sdk";
+
+dif.init({
+  project: "acme-shop",
+  publishableKey: "dif_pk_live_…", // browser-safe write key
+  userId: () => currentUser?.id ?? null,
+});
+```
+
+Get a publishable key from your project's Settings → Keys tab in dif.sh
+Cloud. Publishable keys are safe to embed in browser bundles; they can only
+write to `/v1/track` and `/v1/exposure` and are scoped by origin allowlist.
+
+## Experiment assignment
+
+```ts
+const cta = dif("checkout-cta-v2", {
+  control: () => "Place order",
+  variant_a: () => "Get it today",
+});
+
+// at the render site
+<button>{cta()}</button>;
+```
+
+You normally don't write the `dif(...)` call by hand — `dif build` emits a
+generated module with one typed export per active experiment. Import the
+named export and call it:
+
+```ts
+import { checkoutCta } from "../.dif/generated/client";
+<button>{checkoutCta()}</button>;
+```
+
+Variant resolution is deterministic, sticky per user, and byte-compatible
+with `dif-core` (Rust). One exposure event fires per `(experiment, user)`
+per session.
+
+## Metric tracking
+
+```ts
+// Simple conversion
+dif.track("completed_checkout");
+
+// Revenue with value
+dif.track("revenue", { value: 49, currency: "USD" });
+
+// With overrides
+dif.track("article_read", {
+  userId: "u_42",                 // override the configured resolver
+  props: { article_id: "a_91" },  // arbitrary extras
+});
+```
+
+Calls are fire-and-forget: one HTTP POST per event using `fetch` with
+`keepalive: true`. The call never throws — bad analytics must not crash a
+render. When `publishableKey` isn't configured, the call logs to
+`console.debug` and drops.
+
+## Server-side
+
+For server-side tracking (route handlers, server actions, background jobs)
+import `DifServer` from the `/server` subpath. It takes a **secret** token
+(`dif_<env>_…`), not a publishable key:
+
+```ts
+import { DifServer } from "@dif.sh/sdk/server";
+
+const dif = new DifServer({ apiKey: process.env.DIF_KEY });
+
+await dif.track({
+  metric: "completed_checkout",
+  userId: user.id,
+  value: 49,
+  currency: "USD",
+});
+```
+
+Never put a secret token in a browser bundle. They authenticate as the
+project (read-only on most routes, write to ingest), and leaked secrets
+must be rotated immediately via the Keys settings.
+
+## React
+
+The `@dif.sh/react` package provides a `<DifProvider>` and a `useDif()`
+hook so React apps can call `track` from anywhere in the tree:
+
+```tsx
+import { DifProvider, useDif } from "@dif.sh/react";
+
+<DifProvider config={{ project: "acme-shop", publishableKey: "dif_pk_live_…" }}>
+  <App />
+</DifProvider>;
+
+// inside a component
+const { track } = useDif();
+useEffect(() => track("completed_checkout"), []);
+```
+
+## What this package does, what it doesn't
+
+**Does:**
+- Variant lookup against the generated experiment spec.
+- Deterministic SHA-256 bucketing — byte-compatible with `dif-core` (Rust).
+- Audience predicate evaluation + exclusion-group resolution.
+- One exposure event per `(experiment, user)` per session, to a configurable sink.
+- Metric tracking (`dif.track`) to dif.sh Cloud, browser + server.
+
+**Does not (in v0):**
+- Batch events. Each call is one HTTP POST.
+- Retry on failure. Browser drops; server warns.
+- Buffer offline. If the request fails, the event is gone.
+- Compute lift, p-values, or any analytics. That's the cloud's job.
+
+See [../../PLAN.md](../../PLAN.md) for the architectural rationale.

package/dist/bucket.d.ts

@@ -0,0 +1,25 @@
+/** Bucket namespace — must match `dif_core::BUCKET_NAMESPACE`. */
+export declare const BUCKET_NAMESPACE = "dif.sh/v1";
+/**
+ * Compute the deterministic 16-byte salt for an experiment id, returned as
+ * a 32-character lowercase hex string. Mirrors `salt_for` in Rust.
+ *
+ * The runtime SDK does **not** call this — the generated `client.ts`
+ * embeds the precomputed salt. This export exists for the fixture test
+ * and for tooling that wants to verify the embed.
+ */
+export declare function saltFor(experimentId: string): string;
+/**
+ * Compute the bucket (0..9999) for a user under the given salt.
+ *
+ * @param saltHex 32-character lowercase hex. Embedded in the generated file.
+ * @param userId  user id string; UTF-8 encoded before hashing.
+ */
+export declare function bucket(saltHex: string, userId: string): number;
+/**
+ * Pick the variant corresponding to a bucket given the experiment's declared
+ * variants and weights. Returns `null` if weights don't sum to 100 (which
+ * `dif validate` should have caught at build time).
+ */
+export declare function selectVariant(variants: readonly string[], weights: Record<string, number>, bucketValue: number): string | null;
+//# sourceMappingURL=bucket.d.ts.map

package/dist/bucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket.d.ts","sourceRoot":"","sources":["../src/bucket.ts"],"names":[],"mappings":"AAcA,kEAAkE;AAClE,eAAO,MAAM,gBAAgB,cAAc,CAAC;AAK5C;;;;;;;GAOG;AACH,wBAAgB,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAQpD;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAY9D;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,IAAI,CAQf"}

package/dist/bucket.js

@@ -0,0 +1,68 @@
+// TS port of `dif_core::bucket`. Must produce byte-identical buckets for
+// every entry in `crates/dif-core/tests/fixtures/bucket_tests.json` — the
+// fixture test in `bucket.test.ts` enforces that contract.
+//
+// Algorithm:
+//   1. SHA-256 of (salt || user_id)         — salt is 16 raw bytes, user_id UTF-8
+//   2. Take the first 2 bytes as a big-endian u16
+//   3. Modulo 10_000 → bucket in [0, 10_000)
+//
+// Variant selection walks variants in declared order, accumulating
+// `weight * 100`; first variant whose cumulative crosses the bucket wins.
+import { sha256, bytesToHex, hexToBytes } from "./sha256.js";
+/** Bucket namespace — must match `dif_core::BUCKET_NAMESPACE`. */
+export const BUCKET_NAMESPACE = "dif.sh/v1";
+/** UTF-8 encoder. Reused so we don't allocate one per call. */
+const TE = new TextEncoder();
+/**
+ * Compute the deterministic 16-byte salt for an experiment id, returned as
+ * a 32-character lowercase hex string. Mirrors `salt_for` in Rust.
+ *
+ * The runtime SDK does **not** call this — the generated `client.ts`
+ * embeds the precomputed salt. This export exists for the fixture test
+ * and for tooling that wants to verify the embed.
+ */
+export function saltFor(experimentId) {
+    const ns = TE.encode(BUCKET_NAMESPACE);
+    const id = TE.encode(experimentId);
+    const buf = new Uint8Array(ns.length + id.length);
+    buf.set(ns);
+    buf.set(id, ns.length);
+    const digest = sha256(buf);
+    return bytesToHex(digest.subarray(0, 16));
+}
+/**
+ * Compute the bucket (0..9999) for a user under the given salt.
+ *
+ * @param saltHex 32-character lowercase hex. Embedded in the generated file.
+ * @param userId  user id string; UTF-8 encoded before hashing.
+ */
+export function bucket(saltHex, userId) {
+    const salt = hexToBytes(saltHex);
+    if (salt.length !== 16) {
+        throw new Error(`expected 16-byte salt, got ${salt.length}`);
+    }
+    const user = TE.encode(userId);
+    const buf = new Uint8Array(salt.length + user.length);
+    buf.set(salt);
+    buf.set(user, salt.length);
+    const digest = sha256(buf);
+    const pair = ((digest[0] << 8) | digest[1]) >>> 0;
+    return pair % 10_000;
+}
+/**
+ * Pick the variant corresponding to a bucket given the experiment's declared
+ * variants and weights. Returns `null` if weights don't sum to 100 (which
+ * `dif validate` should have caught at build time).
+ */
+export function selectVariant(variants, weights, bucketValue) {
+    let cumulative = 0;
+    for (const variant of variants) {
+        const w = weights[variant] ?? 0;
+        cumulative += w * 100;
+        if (bucketValue < cumulative)
+            return variant;
+    }
+    return null;
+}
+//# sourceMappingURL=bucket.js.map

package/dist/bucket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket.js","sourceRoot":"","sources":["../src/bucket.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,0EAA0E;AAC1E,2DAA2D;AAC3D,EAAE;AACF,aAAa;AACb,kFAAkF;AAClF,kDAAkD;AAClD,6CAA6C;AAC7C,EAAE;AACF,mEAAmE;AACnE,0EAA0E;AAE1E,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE7D,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAE5C,+DAA+D;AAC/D,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;AAE7B;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CAAC,YAAoB;IAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACZ,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CAAC,OAAe,EAAE,MAAc;IACpD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACtD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,IAAI,GAAG,MAAM,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,QAA2B,EAC3B,OAA+B,EAC/B,WAAmB;IAEnB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChC,UAAU,IAAI,CAAC,GAAG,GAAG,CAAC;QACtB,IAAI,WAAW,GAAG,UAAU;YAAE,OAAO,OAAO,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,16 @@
+import type { AttributeBag, DifConfig, DifInitConfig, Sink } from "./types.js";
+export type { DifInitConfig };
+export interface ResolvedState {
+    project: string | null;
+    publishableKey: string | null;
+    apiUrl: string;
+    userId: () => string | null;
+    attributes: () => AttributeBag;
+    sinks: Sink[];
+    enabled: boolean;
+}
+export declare function setState(cfg: DifInitConfig | DifConfig): void;
+export declare function getState(): ResolvedState | null;
+/** Test-only. */
+export declare function resetState(): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAE/E,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,YAAY,CAAC;IAC/B,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAMD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,aAAa,GAAG,SAAS,GAAG,IAAI,CAa7D;AAED,wBAAgB,QAAQ,IAAI,aAAa,GAAG,IAAI,CAE/C;AAED,iBAAiB;AACjB,wBAAgB,UAAU,IAAI,IAAI,CAEjC"}

package/dist/config.js

@@ -0,0 +1,32 @@
+// Module-singleton runtime config for @dif.sh/sdk.
+//
+// `dif.init(cfg)` calls setState(cfg); `dif()` and `dif.track()` read it via
+// getState(). One config per bundle; calling init again overwrites. This is
+// intentional — there is only one "current user" per app instance.
+let state = null;
+const DEFAULT_API_URL = "https://api.dif.sh";
+export function setState(cfg) {
+    const merged = cfg;
+    const sinkVal = merged.sink;
+    const sinks = sinkVal === undefined ? [] : Array.isArray(sinkVal) ? sinkVal : [sinkVal];
+    state = {
+        project: merged.project ?? null,
+        publishableKey: merged.publishableKey ?? null,
+        apiUrl: stripTrailing(merged.apiUrl ?? DEFAULT_API_URL),
+        userId: merged.userId ?? (() => null),
+        attributes: merged.attributes ?? (() => ({})),
+        sinks,
+        enabled: merged.enabled !== false,
+    };
+}
+export function getState() {
+    return state;
+}
+/** Test-only. */
+export function resetState() {
+    state = null;
+}
+function stripTrailing(url) {
+    return url.replace(/\/+$/, "");
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,mEAAmE;AAgBnE,IAAI,KAAK,GAAyB,IAAI,CAAC;AAEvC,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAE7C,MAAM,UAAU,QAAQ,CAAC,GAA8B;IACrD,MAAM,MAAM,GAAG,GAAoB,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5B,MAAM,KAAK,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACxF,KAAK,GAAG;QACN,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QAC/B,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;QAC7C,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC;QACvD,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QACrC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7C,KAAK;QACL,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,KAAK;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,UAAU;IACxB,KAAK,GAAG,IAAI,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC"}

package/dist/core.d.ts

@@ -0,0 +1,20 @@
+import type { ExperimentSpec } from "./types.js";
+/**
+ * Register an experiment spec into the runtime registry. Called by the
+ * generated `.dif/generated/client.ts` file; customer code should not call
+ * this directly. The name is stable — the codegen emits this exact identifier.
+ */
+export declare function __register(spec: ExperimentSpec): void;
+/** Test-only: clear the registry + state. Not exported from the package index. */
+export declare function __resetRegistry(): void;
+/**
+ * Customer API. Looks up the experiment spec, resolves the user's assignment,
+ * fires an exposure event, and returns a thunk that yields the matching
+ * branch's value.
+ *
+ * Unknown experiment ids fall back to the first declared branch. `dif build`
+ * catches these as orphan refs at compile time; the runtime fallback exists
+ * so a missed cleanup doesn't crash production.
+ */
+export declare function difCall<V extends string, R>(id: string, branches: Record<V, () => R>): () => R;
+//# sourceMappingURL=core.d.ts.map

package/dist/core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAQjD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAErD;AAED,kFAAkF;AAClF,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED;;;;;;;;GAQG;AACH,wBAAgB,OAAO,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,EACzC,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GAC3B,MAAM,CAAC,CAKT"}

package/dist/core.js

@@ -0,0 +1,70 @@
+// Experiment-assignment core. Lifted from the old @dif.sh/sdk index.ts
+// substantively unchanged — the only swap is reading config via getState()
+// instead of a module-local `currentConfig` variable.
+import { bucket, selectVariant } from "./bucket.js";
+import { fireExposure } from "./exposure.js";
+import { getState } from "./config.js";
+/** Experiment specs the generated file has registered. */
+const registry = new Map();
+/**
+ * Register an experiment spec into the runtime registry. Called by the
+ * generated `.dif/generated/client.ts` file; customer code should not call
+ * this directly. The name is stable — the codegen emits this exact identifier.
+ */
+export function __register(spec) {
+    registry.set(spec.id, spec);
+}
+/** Test-only: clear the registry + state. Not exported from the package index. */
+export function __resetRegistry() {
+    registry.clear();
+}
+/**
+ * Customer API. Looks up the experiment spec, resolves the user's assignment,
+ * fires an exposure event, and returns a thunk that yields the matching
+ * branch's value.
+ *
+ * Unknown experiment ids fall back to the first declared branch. `dif build`
+ * catches these as orphan refs at compile time; the runtime fallback exists
+ * so a missed cleanup doesn't crash production.
+ */
+export function difCall(id, branches) {
+    return () => {
+        const variant = resolve(id, branches);
+        return branches[variant]();
+    };
+}
+/**
+ * Pick the variant for one call. The full resolution flow:
+ *
+ *   1. Unknown id → fall back to the first declared branch.
+ *   2. Disabled / no user / config missing → control variant, no exposure.
+ *   3. Audience predicate misses → control variant, no exposure.
+ *   4. Otherwise: bucket, pick by cumulative weight, fire one exposure event.
+ */
+function resolve(id, branches) {
+    const spec = registry.get(id);
+    const variantKeys = Object.keys(branches);
+    if (variantKeys.length === 0) {
+        throw new Error(`dif("${id}"): branches map is empty`);
+    }
+    if (!spec) {
+        return variantKeys[0];
+    }
+    const state = getState();
+    if (!state || state.enabled === false) {
+        return spec.variants[0];
+    }
+    const userId = state.userId();
+    if (userId === null) {
+        return spec.variants[0];
+    }
+    const attrs = state.attributes();
+    if (!spec.audience(attrs)) {
+        return spec.variants[0];
+    }
+    const b = bucket(spec.salt, userId);
+    const picked = selectVariant(spec.variants, spec.weights, b) ?? spec.variants[0];
+    fireExposure(spec, picked, userId, b, state.sinks);
+    return picked;
+}
+//# sourceMappingURL=core.js.map

package/dist/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,2EAA2E;AAC3E,sDAAsD;AAGtD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,0DAA0D;AAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEnD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAoB;IAC7C,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,eAAe;IAC7B,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,OAAO,CACrB,EAAU,EACV,QAA4B;IAE5B,OAAO,GAAG,EAAE;QACV,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,OAAO,CAAsB,EAAU,EAAE,QAA4B;IAC5E,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAQ,CAAC;IACjD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,WAAW,CAAC,CAAC,CAAM,CAAC;IAC7B,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAM,CAAC;IAC/B,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;IAC9B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAM,CAAC;IAC/B,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;IACjC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAM,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjF,YAAY,CAAC,IAAI,EAAE,MAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,MAAW,CAAC;AACrB,CAAC"}

package/dist/exposure.d.ts

@@ -0,0 +1,7 @@
+import type { ExperimentSpec, Sink } from "./types.js";
+/**
+ * Fire one exposure event across every configured sink. Idempotent per
+ * (experiment, user) for the lifetime of the module.
+ */
+export declare function fireExposure(spec: ExperimentSpec, variant: string, userId: string, bucket: number, sinks: Sink[]): void;
+//# sourceMappingURL=exposure.d.ts.map

package/dist/exposure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exposure.d.ts","sourceRoot":"","sources":["../src/exposure.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAiB,IAAI,EAAE,MAAM,YAAY,CAAC;AAOtE;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,IAAI,EAAE,GACZ,IAAI,CAwBN"}

package/dist/exposure.js

@@ -0,0 +1,34 @@
+// Exposure event firing — render-time, deduped per session per (experiment, user).
+const SOURCE = "@dif.sh/sdk@0.2.0";
+/** Per-session dedupe set. Cleared on page nav (the module is per-page). */
+const fired = new Set();
+/**
+ * Fire one exposure event across every configured sink. Idempotent per
+ * (experiment, user) for the lifetime of the module.
+ */
+export function fireExposure(spec, variant, userId, bucket, sinks) {
+    const dedupeKey = `${spec.id}::${userId}`;
+    if (fired.has(dedupeKey))
+        return;
+    fired.add(dedupeKey);
+    const event = {
+        event: "dif.exposure",
+        experiment: spec.id,
+        variant,
+        user_id: userId,
+        surface: spec.surface,
+        bucket,
+        fired_at: Date.now(),
+        source: SOURCE,
+    };
+    for (const sink of sinks) {
+        try {
+            sink.emit(event);
+        }
+        catch {
+            // Sinks must never throw. If one does, swallow — bad analytics must
+            // not crash a render.
+        }
+    }
+}
+//# sourceMappingURL=exposure.js.map

package/dist/exposure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exposure.js","sourceRoot":"","sources":["../src/exposure.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAInF,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAEnC,4EAA4E;AAC5E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;AAEhC;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAoB,EACpB,OAAe,EACf,MAAc,EACd,MAAc,EACd,KAAa;IAEb,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC1C,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO;IACjC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAErB,MAAM,KAAK,GAAkB;QAC3B,KAAK,EAAE,cAAc;QACrB,UAAU,EAAE,IAAI,CAAC,EAAE;QACnB,OAAO;QACP,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM;QACN,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;QACpB,MAAM,EAAE,MAAM;KACf,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,sBAAsB;QACxB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,27 @@
+import { __register } from "./core.js";
+import { type DifInitConfig } from "./config.js";
+import type { DifConfig, TrackProps } from "./types.js";
+/** Public type of the `dif` export. Function call signature + method bag. */
+export interface DifFn {
+    <V extends string, R>(id: string, branches: Record<V, () => R>): () => R;
+    /** Initialize the SDK. Call once at app boot. */
+    init(config: DifInitConfig): void;
+    /** Fire a metric event. */
+    track(metric: string, opts?: TrackProps): void;
+    /**
+     * Legacy alias for {@link DifFn.init}. Accepts the older config shape.
+     * @deprecated Use `dif.init(...)`.
+     */
+    configure(config: DifConfig | DifInitConfig): void;
+}
+declare function configure(config: DifConfig | DifInitConfig): void;
+export declare const dif: DifFn;
+export { configure };
+export { __register };
+export declare function __reset(): void;
+export type { AttrValue, AttributeBag, AudienceFn, DifConfig, DifInitConfig, ExperimentSpec, ExposureEvent, MetricEvent, Sink, TrackProps, UserIdFn, } from "./types.js";
+export { webhookSink } from "./sinks/webhook.js";
+export { segmentSink } from "./sinks/segment.js";
+export { amplitudeSink } from "./sinks/amplitude.js";
+export { mixpanelSink } from "./sinks/mixpanel.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAW,UAAU,EAAmB,MAAM,WAAW,CAAC;AACjE,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExD,6EAA6E;AAC7E,MAAM,WAAW,KAAK;IACpB,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IACzE,iDAAiD;IACjD,IAAI,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAClC,2BAA2B;IAC3B,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/C;;;OAGG;IACH,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,IAAI,CAAC;CACpD;AAMD,iBAAS,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,IAAI,CAE1D;AAED,eAAO,MAAM,GAAG,EAAE,KAIhB,CAAC;AAIH,OAAO,EAAE,SAAS,EAAE,CAAC;AAGrB,OAAO,EAAE,UAAU,EAAE,CAAC;AACtB,wBAAgB,OAAO,IAAI,IAAI,CAG9B;AAGD,YAAY,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,SAAS,EACT,aAAa,EACb,cAAc,EACd,aAAa,EACb,WAAW,EACX,IAAI,EACJ,UAAU,EACV,QAAQ,GACT,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -0,0 +1,33 @@
+// @dif.sh/sdk — browser entrypoint.
+//
+// `dif` is a callable object: it works as a function for experiment assignment
+// AND carries methods for init / track. This lets the cloud-page snippets
+// (`dif.init`, `dif.track`) coexist with existing call sites (`dif("id", branches)`).
+import { difCall, __register, __resetRegistry } from "./core.js";
+import { setState, resetState } from "./config.js";
+import { track } from "./track.js";
+function init(config) {
+    setState(config);
+}
+function configure(config) {
+    setState(config);
+}
+export const dif = Object.assign(difCall, {
+    init,
+    track,
+    configure,
+});
+// Legacy named export so customer code that imported `configure` directly
+// still compiles after the rename. Same body as `dif.configure`.
+export { configure };
+// Internal hooks (used by the generated client.ts + tests).
+export { __register };
+export function __reset() {
+    __resetRegistry();
+    resetState();
+}
+export { webhookSink } from "./sinks/webhook.js";
+export { segmentSink } from "./sinks/segment.js";
+export { amplitudeSink } from "./sinks/amplitude.js";
+export { mixpanelSink } from "./sinks/mixpanel.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,EAAE;AACF,+EAA+E;AAC/E,0EAA0E;AAC1E,sFAAsF;AAEtF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAsB,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAiBnC,SAAS,IAAI,CAAC,MAAqB;IACjC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,MAAiC;IAClD,QAAQ,CAAC,MAAM,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAU,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;IAC/C,IAAI;IACJ,KAAK;IACL,SAAS;CACV,CAAC,CAAC;AAEH,0EAA0E;AAC1E,iEAAiE;AACjE,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB,4DAA4D;AAC5D,OAAO,EAAE,UAAU,EAAE,CAAC;AACtB,MAAM,UAAU,OAAO;IACrB,eAAe,EAAE,CAAC;IAClB,UAAU,EAAE,CAAC;AACf,CAAC;AAgBD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,28 @@
+export interface DifServerConfig {
+    /** Secret bearer token: dif_<env>_<prefix>_<secret>. */
+    apiKey: string;
+    /** Optional project slug stamp; not used by the cloud but useful in logs. */
+    project?: string;
+    /** Cloud base URL. Defaults to https://api.dif.sh. */
+    apiUrl?: string;
+    /** Overrides the SDK's "source" stamp on emitted events. */
+    source?: string;
+}
+export interface TrackInput {
+    metric: string;
+    userId: string;
+    value?: number;
+    currency?: string;
+    unit?: string;
+    firedAt?: number;
+    idempotencyKey?: string;
+    props?: Record<string, unknown>;
+}
+export declare class DifServer {
+    private readonly apiKey;
+    private readonly apiUrl;
+    private readonly source;
+    constructor(cfg: DifServerConfig);
+    track(input: TrackInput): Promise<void>;
+}
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEpB,GAAG,EAAE,eAAe;IAO1B,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CA+B9C"}

package/dist/server.js

@@ -0,0 +1,56 @@
+// Server entrypoint — `@dif.sh/sdk/server`.
+//
+//   import { DifServer } from "@dif.sh/sdk/server";
+//   const dif = new DifServer({ apiKey: process.env.DIF_KEY });
+//   await dif.track({ metric: "completed_checkout", userId: user.id });
+//
+// Fire-and-forget HTTP POST to /v1/track. No batching, no retries in v0 — one
+// call per event. The bearer is a secret token (dif_<env>_…), never a
+// publishable key.
+const DEFAULT_API_URL = "https://api.dif.sh";
+const DEFAULT_SOURCE = "@dif.sh/sdk@0.2.0";
+export class DifServer {
+    apiKey;
+    apiUrl;
+    source;
+    constructor(cfg) {
+        if (!cfg.apiKey)
+            throw new Error("DifServer: apiKey is required");
+        this.apiKey = cfg.apiKey;
+        this.apiUrl = (cfg.apiUrl ?? DEFAULT_API_URL).replace(/\/+$/, "");
+        this.source = cfg.source ?? DEFAULT_SOURCE;
+    }
+    async track(input) {
+        const url = `${this.apiUrl}/v1/track`;
+        const payload = {
+            metric: input.metric,
+            user_id: input.userId,
+            value: input.value,
+            currency: input.currency,
+            unit: input.unit,
+            fired_at: input.firedAt ?? Date.now(),
+            idempotency_key: input.idempotencyKey,
+            source: this.source,
+            props: input.props,
+        };
+        try {
+            const res = await fetch(url, {
+                method: "POST",
+                headers: {
+                    "content-type": "application/json",
+                    authorization: `Bearer ${this.apiKey}`,
+                },
+                body: JSON.stringify(payload),
+            });
+            if (!res.ok && typeof console !== "undefined") {
+                console.warn(`[dif] track ${input.metric} → ${res.status}`);
+            }
+        }
+        catch (err) {
+            if (typeof console !== "undefined") {
+                console.warn(`[dif] track ${input.metric} failed`, err);
+            }
+        }
+    }
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,oDAAoD;AACpD,gEAAgE;AAChE,wEAAwE;AACxE,EAAE;AACF,8EAA8E;AAC9E,sEAAsE;AACtE,mBAAmB;AAEnB,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAC7C,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAwB3C,MAAM,OAAO,SAAS;IACH,MAAM,CAAS;IACf,MAAM,CAAS;IACf,MAAM,CAAS;IAEhC,YAAY,GAAoB;QAC9B,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,cAAc,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC3B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,WAAW,CAAC;QACtC,MAAM,OAAO,GAAG;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE;YACrC,eAAe,EAAE,KAAK,CAAC,cAAc;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;iBACvC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;gBAC9C,OAAO,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,MAAM,SAAS,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/sha256.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Hash `data` and return the 32-byte digest. Pure, sync, no dependencies.
+ */
+export declare function sha256(data: Uint8Array): Uint8Array;
+/** Hex-encode a byte array. Lowercase, no separators. */
+export declare function bytesToHex(bytes: Uint8Array): string;
+/** Parse a lowercase-hex string into a byte array. Throws on bad input. */
+export declare function hexToBytes(hex: string): Uint8Array;
+//# sourceMappingURL=sha256.d.ts.map

package/dist/sha256.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.d.ts","sourceRoot":"","sources":["../src/sha256.ts"],"names":[],"mappings":"AAoCA;;GAEG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CA8EnD;AAED,yDAAyD;AACzD,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAMpD;AAED,2EAA2E;AAC3E,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAalD"}

package/dist/sha256.js

@@ -0,0 +1,124 @@
+// Minimal sync SHA-256.
+//
+// Why inline this instead of Web Crypto or Node's `crypto`?
+// - `crypto.subtle.digest` is async, which would force `dif()` to be async
+//   too. `dif()` is called at render time; making it async would mean every
+//   call site is async-aware. Non-starter.
+// - Node's `crypto` works in Node only. The SDK runs in browsers as well.
+//
+// So we ship our own. The algorithm is RFC 6234 / FIPS 180-4, ~120 lines,
+// passes the standard test vectors. The TS port matches `sha2::Sha256` in
+// the Rust crate byte-for-byte; the bucketing fixture catches any drift.
+const K = new Uint32Array([
+    0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1,
+    0x923f82a4, 0xab1c5ed5, 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3,
+    0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, 0xe49b69c1, 0xefbe4786,
+    0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+    0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147,
+    0x06ca6351, 0x14292967, 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13,
+    0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, 0xa2bfe8a1, 0xa81a664b,
+    0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+    0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a,
+    0x5b9cca4f, 0x682e6ff3, 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208,
+    0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
+]);
+const INITIAL_H = new Uint32Array([
+    0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c,
+    0x1f83d9ab, 0x5be0cd19,
+]);
+/** Right-rotate a 32-bit unsigned integer. */
+function rotr(x, n) {
+    return ((x >>> n) | (x << (32 - n))) >>> 0;
+}
+/**
+ * Hash `data` and return the 32-byte digest. Pure, sync, no dependencies.
+ */
+export function sha256(data) {
+    const len = data.length;
+    const bitLen = BigInt(len) * 8n;
+    // Padding: append 0x80, then zeros, then 8-byte big-endian length so the
+    // total is a multiple of 64 bytes.
+    const padLen = -(len + 9) & 63;
+    const totalLen = len + 1 + padLen + 8;
+    const padded = new Uint8Array(totalLen);
+    padded.set(data);
+    padded[len] = 0x80;
+    const padView = new DataView(padded.buffer);
+    padView.setBigUint64(totalLen - 8, bitLen, /* littleEndian */ false);
+    const h = new Uint32Array(INITIAL_H);
+    const w = new Uint32Array(64);
+    for (let blockStart = 0; blockStart < totalLen; blockStart += 64) {
+        // Message schedule.
+        for (let t = 0; t < 16; t++) {
+            const off = blockStart + t * 4;
+            w[t] =
+                ((padded[off] << 24) |
+                    (padded[off + 1] << 16) |
+                    (padded[off + 2] << 8) |
+                    padded[off + 3]) >>>
+                    0;
+        }
+        for (let t = 16; t < 64; t++) {
+            const wm15 = w[t - 15];
+            const wm2 = w[t - 2];
+            const s0 = rotr(wm15, 7) ^ rotr(wm15, 18) ^ (wm15 >>> 3);
+            const s1 = rotr(wm2, 17) ^ rotr(wm2, 19) ^ (wm2 >>> 10);
+            w[t] = (w[t - 16] + s0 + w[t - 7] + s1) >>> 0;
+        }
+        let a = h[0], b = h[1], c = h[2], d = h[3], e = h[4], f = h[5], g = h[6], hh = h[7];
+        for (let t = 0; t < 64; t++) {
+            const S1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+            const ch = (e & f) ^ (~e & g);
+            const t1 = (hh + S1 + ch + K[t] + w[t]) >>> 0;
+            const S0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
+            const maj = (a & b) ^ (a & c) ^ (b & c);
+            const t2 = (S0 + maj) >>> 0;
+            hh = g;
+            g = f;
+            f = e;
+            e = (d + t1) >>> 0;
+            d = c;
+            c = b;
+            b = a;
+            a = (t1 + t2) >>> 0;
+        }
+        h[0] = (h[0] + a) >>> 0;
+        h[1] = (h[1] + b) >>> 0;
+        h[2] = (h[2] + c) >>> 0;
+        h[3] = (h[3] + d) >>> 0;
+        h[4] = (h[4] + e) >>> 0;
+        h[5] = (h[5] + f) >>> 0;
+        h[6] = (h[6] + g) >>> 0;
+        h[7] = (h[7] + hh) >>> 0;
+    }
+    const out = new Uint8Array(32);
+    const outView = new DataView(out.buffer);
+    for (let i = 0; i < 8; i++) {
+        outView.setUint32(i * 4, h[i], /* littleEndian */ false);
+    }
+    return out;
+}
+/** Hex-encode a byte array. Lowercase, no separators. */
+export function bytesToHex(bytes) {
+    let out = "";
+    for (const b of bytes) {
+        out += b.toString(16).padStart(2, "0");
+    }
+    return out;
+}
+/** Parse a lowercase-hex string into a byte array. Throws on bad input. */
+export function hexToBytes(hex) {
+    if (hex.length % 2 !== 0) {
+        throw new Error(`hex string has odd length: ${hex.length}`);
+    }
+    const out = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < out.length; i++) {
+        const byte = parseInt(hex.substring(i * 2, i * 2 + 2), 16);
+        if (Number.isNaN(byte)) {
+            throw new Error(`invalid hex byte at offset ${i * 2}`);
+        }
+        out[i] = byte;
+    }
+    return out;
+}
+//# sourceMappingURL=sha256.js.map

package/dist/sha256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.js","sourceRoot":"","sources":["../src/sha256.ts"],"names":[],"mappings":"AAAA,wBAAwB;AACxB,EAAE;AACF,4DAA4D;AAC5D,2EAA2E;AAC3E,4EAA4E;AAC5E,2CAA2C;AAC3C,0EAA0E;AAC1E,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,yEAAyE;AAEzE,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC;IACxB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAC/C,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,WAAW,CAAC;IAChC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU;CACvB,CAAC,CAAC;AAEH,8CAA8C;AAC9C,SAAS,IAAI,CAAC,CAAS,EAAE,CAAS;IAChC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,MAAM,CAAC,IAAgB;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;IACxB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IAEhC,yEAAyE;IACzE,mCAAmC;IACnC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACnB,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,CAAC,YAAY,CAAC,QAAQ,GAAG,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAErE,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAE9B,KAAK,IAAI,UAAU,GAAG,CAAC,EAAE,UAAU,GAAG,QAAQ,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;QACjE,oBAAoB;QACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC,CAAC;gBACF,CAAC,CAAC,MAAM,CAAC,GAAG,CAAE,IAAI,EAAE,CAAC;oBACnB,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC;oBACxB,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC;oBACvB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC;oBACnB,CAAC,CAAC;QACN,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,CAAC;YACxB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACtB,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;YACzD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,EACX,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,EACT,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,EACT,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,EACT,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,EACT,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,EACT,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,EACT,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAEb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5B,EAAE,GAAG,CAAC,CAAC;YACP,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/sinks/amplitude.d.ts

@@ -0,0 +1,11 @@
+import type { Sink } from "../types.js";
+/** Minimal Amplitude surface. */
+interface AmplitudeLike {
+    track(event: string, properties?: Record<string, unknown>): void;
+}
+/**
+ * Forward events to an Amplitude-shaped client.
+ */
+export declare function amplitudeSink(amplitude: AmplitudeLike): Sink;
+export {};
+//# sourceMappingURL=amplitude.d.ts.map

package/dist/sinks/amplitude.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"amplitude.d.ts","sourceRoot":"","sources":["../../src/sinks/amplitude.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAiB,IAAI,EAAE,MAAM,aAAa,CAAC;AAEvD,iCAAiC;AACjC,UAAU,aAAa;IACrB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAClE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI,CAO5D"}

package/dist/sinks/amplitude.js

@@ -0,0 +1,13 @@
+// Amplitude sink.
+/**
+ * Forward events to an Amplitude-shaped client.
+ */
+export function amplitudeSink(amplitude) {
+    return {
+        kind: "amplitude",
+        emit(event) {
+            amplitude.track(event.event, { ...event });
+        },
+    };
+}
+//# sourceMappingURL=amplitude.js.map

package/dist/sinks/amplitude.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"amplitude.js","sourceRoot":"","sources":["../../src/sinks/amplitude.ts"],"names":[],"mappings":"AAAA,kBAAkB;AASlB;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,SAAwB;IACpD,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,IAAI,CAAC,KAAoB;YACvB,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/sinks/index.d.ts

@@ -0,0 +1,5 @@
+export { webhookSink } from "./webhook.js";
+export { segmentSink } from "./segment.js";
+export { amplitudeSink } from "./amplitude.js";
+export { mixpanelSink } from "./mixpanel.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/sinks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sinks/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC"}

package/dist/sinks/index.js

@@ -0,0 +1,7 @@
+// Public re-exports of bundled sinks. Customers can also implement their own
+// — anything matching the `Sink` interface.
+export { webhookSink } from "./webhook.js";
+export { segmentSink } from "./segment.js";
+export { amplitudeSink } from "./amplitude.js";
+export { mixpanelSink } from "./mixpanel.js";
+//# sourceMappingURL=index.js.map

package/dist/sinks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sinks/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,4CAA4C;AAE5C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC"}

package/dist/sinks/mixpanel.d.ts

@@ -0,0 +1,11 @@
+import type { Sink } from "../types.js";
+/** Minimal Mixpanel surface. */
+interface MixpanelLike {
+    track(event: string, properties?: Record<string, unknown>): void;
+}
+/**
+ * Forward events to a Mixpanel-shaped client.
+ */
+export declare function mixpanelSink(mixpanel: MixpanelLike): Sink;
+export {};
+//# sourceMappingURL=mixpanel.d.ts.map

package/dist/sinks/mixpanel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mixpanel.d.ts","sourceRoot":"","sources":["../../src/sinks/mixpanel.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAiB,IAAI,EAAE,MAAM,aAAa,CAAC;AAEvD,gCAAgC;AAChC,UAAU,YAAY;IACpB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAClE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAOzD"}

package/dist/sinks/mixpanel.js

@@ -0,0 +1,13 @@
+// Mixpanel sink.
+/**
+ * Forward events to a Mixpanel-shaped client.
+ */
+export function mixpanelSink(mixpanel) {
+    return {
+        kind: "mixpanel",
+        emit(event) {
+            mixpanel.track(event.event, { ...event });
+        },
+    };
+}
+//# sourceMappingURL=mixpanel.js.map

package/dist/sinks/mixpanel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mixpanel.js","sourceRoot":"","sources":["../../src/sinks/mixpanel.ts"],"names":[],"mappings":"AAAA,iBAAiB;AASjB;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,QAAsB;IACjD,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,IAAI,CAAC,KAAoB;YACvB,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAC5C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/sinks/segment.d.ts

@@ -0,0 +1,11 @@
+import type { Sink } from "../types.js";
+/** Minimal Segment surface we depend on. */
+interface SegmentLike {
+    track(event: string, properties: Record<string, unknown>): void;
+}
+/**
+ * Forward events to a Segment-shaped client (e.g. `window.analytics`).
+ */
+export declare function segmentSink(analytics: SegmentLike): Sink;
+export {};
+//# sourceMappingURL=segment.d.ts.map

package/dist/sinks/segment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"segment.d.ts","sourceRoot":"","sources":["../../src/sinks/segment.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAiB,IAAI,EAAE,MAAM,aAAa,CAAC;AAEvD,4CAA4C;AAC5C,UAAU,WAAW;IACnB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACjE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,WAAW,GAAG,IAAI,CAOxD"}

package/dist/sinks/segment.js

@@ -0,0 +1,13 @@
+// Segment sink — `analytics.track("dif.exposure", { ... })`.
+/**
+ * Forward events to a Segment-shaped client (e.g. `window.analytics`).
+ */
+export function segmentSink(analytics) {
+    return {
+        kind: "segment",
+        emit(event) {
+            analytics.track(event.event, { ...event });
+        },
+    };
+}
+//# sourceMappingURL=segment.js.map

package/dist/sinks/segment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"segment.js","sourceRoot":"","sources":["../../src/sinks/segment.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAS7D;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,SAAsB;IAChD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI,CAAC,KAAoB;YACvB,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/sinks/webhook.d.ts

@@ -0,0 +1,7 @@
+import type { Sink } from "../types.js";
+/**
+ * POST every event as JSON to `url`. Fire-and-forget; uses `navigator.sendBeacon`
+ * when available so the request survives page nav.
+ */
+export declare function webhookSink(url: string): Sink;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/sinks/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/sinks/webhook.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAiB,IAAI,EAAE,MAAM,aAAa,CAAC;AAEvD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAiB7C"}

package/dist/sinks/webhook.js

@@ -0,0 +1,24 @@
+// POSTs the raw event JSON to a URL. The lowest-common-denominator sink.
+/**
+ * POST every event as JSON to `url`. Fire-and-forget; uses `navigator.sendBeacon`
+ * when available so the request survives page nav.
+ */
+export function webhookSink(url) {
+    return {
+        kind: "webhook",
+        emit(event) {
+            const body = JSON.stringify(event);
+            if (typeof navigator !== "undefined" && "sendBeacon" in navigator) {
+                navigator.sendBeacon(url, body);
+                return;
+            }
+            void fetch(url, {
+                method: "POST",
+                headers: { "content-type": "application/json" },
+                body,
+                keepalive: true,
+            });
+        },
+    };
+}
+//# sourceMappingURL=webhook.js.map

package/dist/sinks/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/sinks/webhook.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAIzE;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI,CAAC,KAAoB;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,OAAO,SAAS,KAAK,WAAW,IAAI,YAAY,IAAI,SAAS,EAAE,CAAC;gBAClE,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,KAAK,KAAK,CAAC,GAAG,EAAE;gBACd,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI;gBACJ,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/track.d.ts

@@ -0,0 +1,3 @@
+import type { TrackProps } from "./types.js";
+export declare function track(metric: string, opts?: TrackProps): void;
+//# sourceMappingURL=track.d.ts.map

package/dist/track.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"track.d.ts","sourceRoot":"","sources":["../src/track.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAI7C,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,IAAI,CA6CjE"}

package/dist/track.js

@@ -0,0 +1,61 @@
+// Browser metric tracking. Mirrors the cloud-page snippet:
+//
+//   dif.track("completed_checkout");
+//   dif.track("revenue", { value: 49, currency: "USD" });
+//
+// Implementation notes:
+//  - `navigator.sendBeacon` cannot set custom headers, and we need to send
+//    `Authorization: Bearer <publishableKey>`. So we always use
+//    `fetch` with `keepalive: true`. First call per page may trigger a CORS
+//    preflight; subsequent calls reuse the cached preflight up to 24h.
+//  - The call is fire-and-forget. We never throw at the customer's call site —
+//    analytics must not crash a render.
+//  - Without a configured publishableKey, we log to console.debug and drop.
+//    This matches the sample app's pre-SDK behavior and keeps dev ergonomic.
+import { getState } from "./config.js";
+const SOURCE = "@dif.sh/sdk@0.2.0";
+export function track(metric, opts = {}) {
+    const state = getState();
+    if (!state || state.enabled === false)
+        return;
+    const userId = opts.userId ?? state.userId();
+    if (!userId) {
+        // Can't attribute; drop. The cloud expects a user_id on every event.
+        return;
+    }
+    if (!state.publishableKey) {
+        if (typeof console !== "undefined") {
+            console.debug("[dif] track (no publishableKey, dropped)", metric, opts);
+        }
+        return;
+    }
+    const url = `${state.apiUrl}/v1/track`;
+    const body = JSON.stringify({
+        metric,
+        user_id: userId,
+        value: opts.value,
+        currency: opts.currency,
+        unit: opts.unit,
+        fired_at: opts.firedAt ?? Date.now(),
+        idempotency_key: opts.idempotencyKey,
+        source: opts.source ?? SOURCE,
+        props: opts.props,
+    });
+    try {
+        void fetch(url, {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                authorization: `Bearer ${state.publishableKey}`,
+            },
+            body,
+            keepalive: true,
+        }).catch(() => {
+            // Swallow — analytics must never throw at the call site.
+        });
+    }
+    catch {
+        // Synchronous throws (e.g. fetch undefined in unusual envs) are also swallowed.
+    }
+}
+//# sourceMappingURL=track.js.map

package/dist/track.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"track.js","sourceRoot":"","sources":["../src/track.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,EAAE;AACF,qCAAqC;AACrC,0DAA0D;AAC1D,EAAE;AACF,wBAAwB;AACxB,2EAA2E;AAC3E,gEAAgE;AAChE,4EAA4E;AAC5E,uEAAuE;AACvE,+EAA+E;AAC/E,wCAAwC;AACxC,4EAA4E;AAC5E,6EAA6E;AAE7E,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAEnC,MAAM,UAAU,KAAK,CAAC,MAAc,EAAE,OAAmB,EAAE;IACzD,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO;IAE9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,qEAAqE;QACrE,OAAO;IACT,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1B,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;YACnC,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,WAAW,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,MAAM;QACN,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE;QACpC,eAAe,EAAE,IAAI,CAAC,cAAc;QACpC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,KAAK,KAAK,CAAC,GAAG,EAAE;YACd,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,cAAc,EAAE;aAChD;YACD,IAAI;YACJ,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,yDAAyD;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;IAClF,CAAC;AACH,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,121 @@
+/** A user-id resolver. Returns null when no user is identified. */
+export type UserIdFn = () => string | null;
+/** One audience attribute, scalar. */
+export type AttrValue = string | number | boolean | null;
+/** The bag of attributes the SDK consults when evaluating audience predicates. */
+export type AttributeBag = Record<string, AttrValue>;
+/** Audience predicate function — generated by `dif build`. */
+export type AudienceFn = (attrs: Record<string, unknown>) => boolean;
+/**
+ * Legacy configuration shape accepted by `dif.configure(...)` (the alias kept
+ * for backwards compatibility). New code should pass {@link DifInitConfig} to
+ * `dif.init(...)` instead.
+ *
+ * @deprecated Use {@link DifInitConfig} via `dif.init()`.
+ */
+export interface DifConfig {
+    /** How to look up the current user id at call time. */
+    userId: UserIdFn;
+    /** How to read audience attributes. Defaults to an empty bag. */
+    attributes?: () => AttributeBag;
+    /** One or more exposure sinks. */
+    sink: Sink | Sink[];
+    /** Global kill switch. Defaults to true. */
+    enabled?: boolean;
+}
+/** Configuration passed to `dif.init(...)`. Superset of {@link DifConfig}. */
+export interface DifInitConfig {
+    /** Cloud project slug. Required when posting events to dif.sh Cloud. */
+    project?: string;
+    /** Browser-side write key (dif_pk_…). Safe to embed in bundles. */
+    publishableKey?: string;
+    /** Cloud base URL. Defaults to https://api.dif.sh. */
+    apiUrl?: string;
+    /** How to look up the current user id at call time. */
+    userId?: UserIdFn;
+    /** How to read audience attributes. Defaults to an empty bag. */
+    attributes?: () => AttributeBag;
+    /** One or more exposure sinks. */
+    sink?: Sink | Sink[];
+    /** Global kill switch. Defaults to true. */
+    enabled?: boolean;
+}
+/** Anything that can receive an exposure event. */
+export interface Sink {
+    /** Sink identifier — for logs / dedupe. */
+    readonly kind: string;
+    /** Send one event. Must not throw — it should swallow + log internally. */
+    emit(event: ExposureEvent): void;
+}
+/** Exposure event shape emitted to the configured sinks. */
+export interface ExposureEvent {
+    /** Always `"dif.exposure"`. */
+    event: "dif.exposure";
+    /** Experiment id. */
+    experiment: string;
+    /** Variant id chosen for this user. */
+    variant: string;
+    /** User id at the time of firing. */
+    user_id: string;
+    /** Surface the experiment runs on. */
+    surface: string;
+    /** Resolved bucket 0..9999. Surfaced for debugging. */
+    bucket: number;
+    /** Unix milliseconds. */
+    fired_at: number;
+    /** SDK version, e.g. `"@dif.sh/sdk@0.2.0"`. */
+    source: string;
+}
+/** Optional properties on a `dif.track(metric, props)` call. */
+export interface TrackProps {
+    /** Numeric value carried by the metric (revenue cents, duration ms, etc.). */
+    value?: number;
+    /** ISO currency code (`USD`, `EUR`, …) — pairs with `value` for revenue. */
+    currency?: string;
+    /** Unit hint for non-currency values (e.g. `ms`, `count`). */
+    unit?: string;
+    /** Override the configured userId resolver for this call. */
+    userId?: string;
+    /** Override the event timestamp (defaults to now). */
+    firedAt?: number;
+    /** Caller-supplied idempotency key for safe retries. */
+    idempotencyKey?: string;
+    /** Override the SDK's "source" stamp. */
+    source?: string;
+    /** Arbitrary additional properties forwarded to the cloud as `props`. */
+    props?: Record<string, unknown>;
+}
+/** Metric event shape sent to the cloud's `/v1/track` endpoint. */
+export interface MetricEvent {
+    metric: string;
+    user_id: string;
+    value?: number;
+    currency?: string;
+    unit?: string;
+    fired_at: number;
+    source: string;
+    idempotency_key?: string;
+    props?: Record<string, unknown>;
+}
+/**
+ * The shape `dif build` emits into `.dif/generated/client.ts`. The generated
+ * file calls {@link __register} once per active experiment with one of these.
+ * Customers should never construct these by hand.
+ */
+export interface ExperimentSpec {
+    /** Experiment id. Matches the `.md` filename stem. */
+    id: string;
+    /** Surface this experiment runs on. */
+    surface: string;
+    /** Variants in declared order. */
+    variants: readonly string[];
+    /** Hex salt computed by `dif-core` from the experiment id. */
+    salt: string;
+    /** Per-variant weight, 0..100. Sum is 100. */
+    weights: Record<string, number>;
+    /** Exclusion-group key, or null. */
+    exclusionGroup: string | null;
+    /** Compiled audience predicate. */
+    audience: AudienceFn;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,mEAAmE;AACnE,MAAM,MAAM,QAAQ,GAAG,MAAM,MAAM,GAAG,IAAI,CAAC;AAE3C,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAEzD,kFAAkF;AAClF,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AAErD,8DAA8D;AAC9D,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,uDAAuD;IACvD,MAAM,EAAE,QAAQ,CAAC;IACjB,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,YAAY,CAAC;IAChC,kCAAkC;IAClC,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC;IACpB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,YAAY,CAAC;IAChC,kCAAkC;IAClC,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC;IACrB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,mDAAmD;AACnD,MAAM,WAAW,IAAI;IACnB,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;CAClC;AAED,4DAA4D;AAC5D,MAAM,WAAW,aAAa;IAC5B,+BAA+B;IAC/B,KAAK,EAAE,cAAc,CAAC;IACtB,qBAAqB;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,gEAAgE;AAChE,MAAM,WAAW,UAAU;IACzB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,mEAAmE;AACnE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,oCAAoC;IACpC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mCAAmC;IACnC,QAAQ,EAAE,UAAU,CAAC;CACtB"}

package/dist/types.js

@@ -0,0 +1,5 @@
+// Public types for @dif.sh/sdk.
+// Kept in their own file so customer code can import them without dragging
+// in the runtime.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,2EAA2E;AAC3E,kBAAkB"}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@dif.sh/sdk",
+  "version": "0.2.0",
+  "description": "Client SDK for dif.sh — experiment assignment + metric tracking.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "import": "./dist/server.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "node --test --import tsx src/*.test.ts",
+    "lint": "tsc --noEmit",
+    "prepublishOnly": "npm run lint && npm test && npm run build"
+  },
+  "engines": {
+    "node": ">=20.6"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/dif-sh/dif.git",
+    "directory": "cli/packages/sdk"
+  },
+  "keywords": [
+    "experimentation",
+    "ab-testing",
+    "feature-flags",
+    "analytics",
+    "metrics",
+    "dif.sh"
+  ],
+  "devDependencies": {
+    "typescript": "^5.4.0",
+    "tsx": "^4.7.0"
+  }
+}