@evinvest/kitstart 0.16.0 → 0.17.0

package/README.md

@@ -45,7 +45,7 @@ brand's `flake.nix` is its own config plus one call — `template/flake.nix` is
 the whole of one:
 
 ```nix
-inputs.ev.url = "github:EV-invest/lib?ref=@evinvest/kitstart-v0.16.0"; # the version in package-lock.json
+inputs.ev.url = "github:EV-invest/lib?ref=@evinvest/kitstart-v0.17.0"; # the version in package-lock.json
 inputs.ev.inputs.v_flakes.follows = "v_flakes";
 
 landing = ev.lib.mkLanding {
@@ -349,11 +349,11 @@ it is the plain POST to `/quote` it always was.
   (`contact` / `need` in `qualify-first`; in `steps` each screen moved to —
   `intro`, `need`, `estimate_<input>`, `locality`, `phone`), each with `form_id`, `layout`, `experiment`,
   `variant`; `contact_intent_click {channel}` for `phone`, `whatsapp`, `sms`,
-  `callback`, with the experiment (and `forced: true` on a test visit, as
-  `location_page_view`, when the boundary has `qaCookie` — see `AbSwitcher`);
-  and on the server `lead_form_submit
+  `callback`, with the experiment; and on the server `lead_form_submit
   {form_id, channel}` and `lead_form_reject {form_id, channel, field,
-  reason}` with the posted experiment.
+  reason}` with the posted experiment. On a test visit every one of them —
+  page view, intents, funnel, booking, and the server's two when
+  `quoteRoute` has `qaCookie` — carries `forced: true` (see `AbSwitcher`).
 - **Weight.** 8.9 KB gz of first-load JS on the template's place page
   (157,287 → 166,361 B against its 158,000 B target: +5.3 %, a warning
   within the 20 % tolerance); the refusals and the shared phone rule are
@@ -921,6 +921,15 @@ adds no server path: a tap on a variant goes to the same URL with
   reads `ab_<key>` from `document.cookie` (the normal case: the page stays
   static, the server reads no cookie). `forceParam` — `ab_` by default.
   `text` — the menu's words, English by default.
+- **An experiment with no assignment is off.** The proxy assigns every
+  running experiment on the page the menu mounts on, so one with no
+  `ab_<key>` cookie (or missing from `current`) is shown `not running`
+  (`text.unassigned`), its variants disabled — the proxy would refuse the
+  force — and `–` on the chip. A test the panel only **paused** keeps its
+  visitors' cookies (dropping them would redraw everyone on resume), so the
+  brand's proxy lists paused tests for a QA browser only in the cookie
+  `<qaCookie>_off` (`ab__qa_off=lead_form,hero`); those read `not running`
+  too (`abRunning`).
 - **Turning it on, on a phone, in production:** open any page with
   `?ab_<key>=<value>`. The proxy sets the QA cookie and the chip appears;
   every visit after is tagged as a test in analytics. Outside production
@@ -938,16 +947,30 @@ adds no server path: a tap on a variant goes to the same URL with
   too. **Minimize** and **Hide** last until the next load.
 - Screenshots: the chip and its panel carry `data-ab-switcher`; hide it in the
   section stylesheet, `[data-ab-switcher] { display: none !important; }`.
-- **Pass the same `qaCookie` to `AnalyticsBoundary`.** Every tap in the menu
-  is a full reload, so a test visit would add page views to the place's
-  traffic; with the cookie set, the boundary's `location_page_view` and
-  `contact_intent_click` carry `forced: true`. Without the prop, or without
-  the cookie, the events are as before — no `forced` key at all.
+- **Pass the same `qaCookie` to `AnalyticsBoundary` and `quoteRoute`
+  (#219).** Every tap in the menu is a full reload, so a test visit would add
+  page views — and form events — to the place's traffic. The mark is the
+  sink's, not each event's: `analyticsSink(target, slug, id, qaCookie)` reads
+  the cookie at every capture and adds `forced: true` on a test visit, so the
+  boundary's page views and intents, the lead form's funnel
+  (`lead_form_view` … `lead_estimate_shown`) and the booking's
+  `lead_booking_open` / `lead_booking_done` all say it, and so will any event
+  added later. `quoteRoute`'s `qaCookie` reads the post's `Cookie` header the
+  same way for `lead_form_submit` and `lead_form_reject`. A test visit is the
+  cookie set with a non-empty value — any value — on both sides
+  (`qaVisit(cookies, name)`, exported for a brand's own server events).
+  Without the prop, or without the cookie, the events are as before — no
+  `forced` key at all.
 
   ```tsx
   <AnalyticsBoundary target={target} placeSlug={slug} qaCookie="ab__qa">
   ```
 
+  ```ts
+  // app/quote/route.ts
+  export const POST = quoteRoute(site, { env: serverEnv, notifier, unavailable, qaCookie: "ab__qa" });
+  ```
+
 The decisions are plain functions in the core (`abSwitcherVisible`,
 `abVariantUrl`, `abReset`, `abAssignments`), for a brand's own tests.
 

package/dist/core/ab-gate.js

@@ -11,7 +11,9 @@
 export function abSwitcherVisible(cookies, qaCookie, nodeEnv) {
     if (nodeEnv !== "production")
         return true;
-    // Presence and non-empty only, no decoding: every visitor runs this.
+    // Presence and non-empty only, no decoding: every visitor runs this. The
+    // rule is `qaVisit`'s (analytics.ts), copied so the switcher and the
+    // analytics island share no module; `forced.node.test.ts` holds them equal.
     return cookies.split(";").some(pair => {
         const eq = pair.indexOf("=");
         return eq > 0 && pair.slice(0, eq).trim() === qaCookie && pair.slice(eq + 1).trim() !== "";

package/dist/core/ab-switcher.d.ts

@@ -16,6 +16,14 @@ export declare const AB_FORCE_PARAM = "ab_";
 export declare function cookieValue(cookies: string, name: string): string | null;
 /** Each key's assigned variant read off the cookies; a key with none is left out. */
 export declare function abAssignments(cookies: string, keys: readonly string[]): Record<string, string>;
+/**
+ * `assigned` without the tests the brand's panel has paused. The brand's proxy
+ * lists them, for a QA browser only, in the cookie `<qaCookie>_off`
+ * (`lead_form,hero`): a paused test keeps every visitor's assignment cookie —
+ * dropping it would redraw them on resume — so its cookie alone cannot tell
+ * the menu it is off, and a force of it is refused.
+ */
+export declare function abRunning(assigned: Readonly<Record<string, string>>, cookies: string, qaCookie: string): Record<string, string>;
 /** The same page forcing `key` to `value`: the other parameters and the hash kept, an earlier force replaced. */
 export declare function abVariantUrl(href: string, key: string, value: string, forceParam?: string): string;
 export interface AbReset {

package/dist/core/ab-switcher.js

@@ -38,6 +38,17 @@ export function abAssignments(cookies, keys) {
     }
     return out;
 }
+/**
+ * `assigned` without the tests the brand's panel has paused. The brand's proxy
+ * lists them, for a QA browser only, in the cookie `<qaCookie>_off`
+ * (`lead_form,hero`): a paused test keeps every visitor's assignment cookie —
+ * dropping it would redraw them on resume — so its cookie alone cannot tell
+ * the menu it is off, and a force of it is refused.
+ */
+export function abRunning(assigned, cookies, qaCookie) {
+    const paused = new Set((cookieValue(cookies, `${qaCookie}_off`) ?? "").split(","));
+    return Object.fromEntries(Object.entries(assigned).filter(([key]) => !paused.has(key)));
+}
 /** The same page forcing `key` to `value`: the other parameters and the hash kept, an earlier force replaced. */
 export function abVariantUrl(href, key, value, forceParam = AB_FORCE_PARAM) {
     const url = new URL(href);

package/dist/core/analytics.d.ts

@@ -69,6 +69,14 @@ export interface AnalyticsTarget {
     host: string;
     brandId: string;
 }
+/**
+ * Whether a `Cookie` string — `document.cookie` or a request's header — makes
+ * the visit a test: the QA cookie is set with a non-empty value, any value.
+ * The one rule both sides apply (the sink in the browser, `quoteRoute` on the
+ * server). `abSwitcherVisible` keeps its own copy on purpose: a module the
+ * switcher shared with the analytics island cost a chunk of its own.
+ */
+export declare function qaVisit(cookies: string, qaCookie: string): boolean;
 /**
  * Cookieless by construction: a beacon sink keeps its `distinct_id` in memory,
  * writes no cookie and no storage, and needs no consent banner. `sendBeacon`
@@ -76,5 +84,13 @@ export interface AnalyticsTarget {
  * followed by the page handing the visitor to another app. `distinctId`:
  * the visitor's id, held by the caller so a lead can name it; a random one
  * per sink without it.
+ *
+ * `qaCookie`: the brand's QA cookie (`AbSwitcher`'s). Every capture then checks
+ * `cookies` — a request's `Cookie` header on the server; left out, the
+ * browser's `document.cookie`, read at that capture — and adds `forced: true`
+ * on a test visit (`qaVisit`), so no event, present or future, has to
+ * remember it. Without `qaCookie` no cookie is read and no `forced` key sent.
+ * One wrapper for both cases, not a branch: on the place page that is ~10 B
+ * gz less than returning the bare sink.
  */
-export declare function analyticsSink(target: AnalyticsTarget, locationId: string | null, distinctId?: string): AnalyticsSink;
+export declare function analyticsSink(target: AnalyticsTarget, locationId: string | null, distinctId?: string, qaCookie?: string, cookies?: string): AnalyticsSink;

package/dist/core/analytics.js

@@ -80,6 +80,19 @@ export function experimentProps(experiment, variant) {
 export function countsAsPageView(pathname) {
     return !pathname.replace(/\/+$/, "").endsWith(THANKS);
 }
+/**
+ * Whether a `Cookie` string — `document.cookie` or a request's header — makes
+ * the visit a test: the QA cookie is set with a non-empty value, any value.
+ * The one rule both sides apply (the sink in the browser, `quoteRoute` on the
+ * server). `abSwitcherVisible` keeps its own copy on purpose: a module the
+ * switcher shared with the analytics island cost a chunk of its own.
+ */
+export function qaVisit(cookies, qaCookie) {
+    return cookies.split(";").some(pair => {
+        const eq = pair.indexOf("=");
+        return eq > 0 && pair.slice(0, eq).trim() === qaCookie && pair.slice(eq + 1).trim() !== "";
+    });
+}
 /**
  * Cookieless by construction: a beacon sink keeps its `distinct_id` in memory,
  * writes no cookie and no storage, and needs no consent banner. `sendBeacon`
@@ -87,13 +100,22 @@ export function countsAsPageView(pathname) {
  * followed by the page handing the visitor to another app. `distinctId`:
  * the visitor's id, held by the caller so a lead can name it; a random one
  * per sink without it.
+ *
+ * `qaCookie`: the brand's QA cookie (`AbSwitcher`'s). Every capture then checks
+ * `cookies` — a request's `Cookie` header on the server; left out, the
+ * browser's `document.cookie`, read at that capture — and adds `forced: true`
+ * on a test visit (`qaVisit`), so no event, present or future, has to
+ * remember it. Without `qaCookie` no cookie is read and no `forced` key sent.
+ * One wrapper for both cases, not a branch: on the place page that is ~10 B
+ * gz less than returning the bare sink.
  */
-export function analyticsSink(target, locationId, distinctId) {
-    return createBeaconSink({
+export function analyticsSink(target, locationId, distinctId, qaCookie, cookies) {
+    const sink = createBeaconSink({
         key: target.key ?? undefined,
         ...(distinctId !== undefined ? { distinctId } : {}),
         host: target.host,
         allowedProps: ALLOWED_PROPS,
         globalProps: locationId ? { brand_id: target.brandId, location_id: locationId } : { brand_id: target.brandId },
     });
+    return { capture: (event, props, options) => sink.capture(event, qaCookie && qaVisit(cookies ?? document.cookie, qaCookie) ? { ...props, forced: true } : props, options) };
 }

package/dist/index.d.ts

@@ -16,8 +16,8 @@ export { checkTiming, HONEYPOT_FIELD, LEGACY_HONEYPOT_FIELDS, MIN_FILL_MS, RATE_
 export { createAcceptLead, ANALYTICS_ID_FIELD, EXPERIMENT_FIELD, FORM_ID_FIELD, leadRef, LOCALE_FIELD, LOCATION_FIELD, PRICE_CHANGED, SHOWN_CENTS_FIELD, VARIANT_FIELD, type AcceptDeps, type Outcome, type SubmitTags, } from "./core/accept.js";
 export { areaServedNodes, breadcrumbNode, businessId, businessNode, faqPageNode, offerNodes, organizationId, organizationNode, placeGraph, websiteId, type OfferInput, type PageGraphCopy, type QuestionAnswer, } from "./core/seo/ld.js";
 export { AI_CRAWLERS, ogImageUrl, robotsFor, sitemapFor, type RobotsFile, type RobotsRule, type SitemapEntry, } from "./core/seo/sitemap.js";
-export { ALLOWED_PROPS, ANALYTICS_ID, analyticsSink, countsAsPageView, EVENTS, EXPERIMENT_SLUG, experimentProps, type AnalyticsTarget, type IntentChannel, type LeadField, type LeadStep, } from "./core/analytics.js";
-export { AB_COOKIE_PREFIX, AB_FORCE_PARAM, abAssignments, abReset, abVariantUrl, cookieValue, type AbReset, } from "./core/ab-switcher.js";
+export { ALLOWED_PROPS, ANALYTICS_ID, analyticsSink, countsAsPageView, EVENTS, EXPERIMENT_SLUG, experimentProps, qaVisit, type AnalyticsTarget, type IntentChannel, type LeadField, type LeadStep, } from "./core/analytics.js";
+export { AB_COOKIE_PREFIX, AB_FORCE_PARAM, abAssignments, abRunning, abReset, abVariantUrl, cookieValue, type AbReset, } from "./core/ab-switcher.js";
 export { abSwitcherVisible } from "./core/ab-gate.js";
 export type { CallBarText, CopySlice, CoreText, PageMetaCopy, QuoteFormCopy, Said, StatusAction, StatusCopy, StatusScreenText, } from "./core/content.js";
 export { BOOKING_LIMITS, BOOKING_PROVIDERS, BOOKING_STATUSES, BookingConfigError, bookingConfigProblems, BOOKING_EXPERIMENT, bookingHref, bookingOf, bookingRequestedProperties, bookingRequestProblems, calComHostsProblems, DEFAULT_BOOKING, DEFAULT_CAL_COM_HOSTS, isBookingProvider, isLeadRef, isPageProvider, isPreferredPart, parseBookingConfig, parseBookingRequest, PREFERRED_PARTS, type BookingChoice, type BookingConfig, type BookingPrefill, type BookingProvider, type BookingRequest, type BookingRequestedProperties, type BookingRules, type BookingStatus, type OpenBookingConfig, type PageProvider, type PreferredPart, } from "./core/booking/index.js";

package/dist/index.js

@@ -16,8 +16,8 @@ export { checkTiming, HONEYPOT_FIELD, LEGACY_HONEYPOT_FIELDS, MIN_FILL_MS, RATE_
 export { createAcceptLead, ANALYTICS_ID_FIELD, EXPERIMENT_FIELD, FORM_ID_FIELD, leadRef, LOCALE_FIELD, LOCATION_FIELD, PRICE_CHANGED, SHOWN_CENTS_FIELD, VARIANT_FIELD, } from "./core/accept.js";
 export { areaServedNodes, breadcrumbNode, businessId, businessNode, faqPageNode, offerNodes, organizationId, organizationNode, placeGraph, websiteId, } from "./core/seo/ld.js";
 export { AI_CRAWLERS, ogImageUrl, robotsFor, sitemapFor, } from "./core/seo/sitemap.js";
-export { ALLOWED_PROPS, ANALYTICS_ID, analyticsSink, countsAsPageView, EVENTS, EXPERIMENT_SLUG, experimentProps, } from "./core/analytics.js";
-export { AB_COOKIE_PREFIX, AB_FORCE_PARAM, abAssignments, abReset, abVariantUrl, cookieValue, } from "./core/ab-switcher.js";
+export { ALLOWED_PROPS, ANALYTICS_ID, analyticsSink, countsAsPageView, EVENTS, EXPERIMENT_SLUG, experimentProps, qaVisit, } from "./core/analytics.js";
+export { AB_COOKIE_PREFIX, AB_FORCE_PARAM, abAssignments, abRunning, abReset, abVariantUrl, cookieValue, } from "./core/ab-switcher.js";
 export { abSwitcherVisible } from "./core/ab-gate.js";
 export { BOOKING_LIMITS, BOOKING_PROVIDERS, BOOKING_STATUSES, BookingConfigError, bookingConfigProblems, BOOKING_EXPERIMENT, bookingHref, bookingOf, bookingRequestedProperties, bookingRequestProblems, calComHostsProblems, DEFAULT_BOOKING, DEFAULT_CAL_COM_HOSTS, isBookingProvider, isLeadRef, isPageProvider, isPreferredPart, parseBookingConfig, parseBookingRequest, PREFERRED_PARTS, } from "./core/booking/index.js";
 export { brandStatusTarget, statusTarget, thanksChannel, thanksSuffix } from "./core/status.js";

package/dist/next/quote-route.d.ts

@@ -56,6 +56,13 @@ export interface QuoteRouteDeps<L extends string> {
      * `<anchor>-callback`.
      */
     anchor?: string;
+    /**
+     * The brand's QA cookie (`AnalyticsBoundary`'s and `AbSwitcher`'s
+     * `qaCookie`). A post carrying it with a value is a test visit: its
+     * `lead_form_submit` and `lead_form_reject` say `forced: true`, as the
+     * browser's events of the same visit do. Absent → no `forced` key.
+     */
+    qaCookie?: string;
     /** Work after the response; `after` from `next/server` by default. */
     defer?: (task: () => Promise<void> | void) => void;
     now?: () => number;

package/dist/next/quote-route.js

@@ -148,6 +148,9 @@ export function quoteRoute(site, deps) {
             const locale = form.get("locale");
             return unavailable(null, typeof locale === "string" && site.i18n.isLocale(locale) ? locale : site.i18n.defaultLocale);
         }
+        // The request's events, marked as the browser's are (`analyticsSink`).
+        const cookies = request.headers.get("cookie") ?? "";
+        const sinkFor = (slug) => analyticsSink({ key: env.posthogKey, host: env.posthogHost, brandId: site.brand.id }, slug, undefined, deps.qaCookie, cookies);
         const outcome = await accept(form, clientKey(request.headers, env.trustedProxy ?? DEV_TRUST), {
             insert: lead => leadStore().insert(lead),
             findSubmission: async (submissionId) => (await leadStore().findSubmission?.(submissionId)) ?? null,
@@ -165,7 +168,7 @@ export function quoteRoute(site, deps) {
                 hook.enqueue(lead, id, meta);
                 defer(() => hook.tick().then(() => undefined, error => log.error("quote: the webhook delivery after a lead failed", error)));
             },
-            capture: (lead, formId, tags) => analyticsSink({ key: env.posthogKey, host: env.posthogHost, brandId: site.brand.id }, lead.placeSlug).capture(EVENTS.leadSubmit, {
+            capture: (lead, formId, tags) => sinkFor(lead.placeSlug).capture(EVENTS.leadSubmit, {
                 form_id: formId,
                 channel: channelOf(lead),
                 ...tags,
@@ -196,7 +199,7 @@ export function quoteRoute(site, deps) {
                 const repriced = outcome.field === PRICE_CHANGED;
                 const props = { form_id: outcome.formId, channel: outcome.channel, field: outcome.field, reason: repriced ? PRICE_CHANGED : "invalid", ...tags };
                 if (env.posthogKey) {
-                    const sink = analyticsSink({ key: env.posthogKey, host: env.posthogHost, brandId: site.brand.id }, outcome.slug);
+                    const sink = sinkFor(outcome.slug);
                     defer(() => sink.capture(EVENTS.formReject, props));
                 }
                 if (scripted)

package/dist/react/AbSwitcherPanel.d.ts

@@ -3,6 +3,8 @@ import type { AbSwitcherProps } from "./ab-switcher-types.js";
  * The QA menu itself, loaded only when `AbSwitcher` lets it: a chip in a
  * corner and, on a tap, each experiment's variants. A tap on a variant is the
  * brand's own force parameter — no other way in. Minimized and hidden live in
- * memory only: a reload brings the chip back.
+ * memory only: a reload brings the chip back. An experiment no cookie assigns
+ * is off: the proxy assigns every running one on the page the menu mounts on,
+ * and would refuse a force for it, so its variants are disabled.
  */
 export declare function AbSwitcherPanel({ experiments, qaCookie, current, forceParam, className, text }: AbSwitcherProps): import("react").JSX.Element | null;

package/dist/react/AbSwitcherPanel.js

@@ -2,25 +2,27 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { Badge, Button, cn } from "@evinvest/uikit";
 import { useEffect, useRef, useState } from "react";
-import { abAssignments, abReset, abVariantUrl, AB_FORCE_PARAM } from "../core/ab-switcher.js";
+import { abAssignments, abReset, abRunning, abVariantUrl, AB_FORCE_PARAM } from "../core/ab-switcher.js";
 const TEXT = {
     title: "A/B test switcher",
     reset: "Reset",
     leave: "Leave test",
     minimize: "Minimize",
     hide: "Hide",
-    unassigned: "not assigned",
+    unassigned: "not running",
 };
 /**
  * The QA menu itself, loaded only when `AbSwitcher` lets it: a chip in a
  * corner and, on a tap, each experiment's variants. A tap on a variant is the
  * brand's own force parameter — no other way in. Minimized and hidden live in
- * memory only: a reload brings the chip back.
+ * memory only: a reload brings the chip back. An experiment no cookie assigns
+ * is off: the proxy assigns every running one on the page the menu mounts on,
+ * and would refuse a force for it, so its variants are disabled.
  */
 export function AbSwitcherPanel({ experiments, qaCookie, current, forceParam = AB_FORCE_PARAM, className, text }) {
     const t = { ...TEXT, ...text };
     const keys = experiments.map(e => e.key);
-    const [assigned] = useState(() => current ?? abAssignments(document.cookie, keys));
+    const [assigned] = useState(() => abRunning(current ?? abAssignments(document.cookie, keys), document.cookie, qaCookie));
     const [open, setOpen] = useState(false);
     const [minimized, setMinimized] = useState(false);
     const [hidden, setHidden] = useState(false);
@@ -38,9 +40,11 @@ export function AbSwitcherPanel({ experiments, qaCookie, current, forceParam = A
             document.cookie = c;
         location.replace(plan.url);
     };
+    // The first choice a tap can take gets the focus; with none, the reset.
+    const live = experiments.findIndex(e => assigned[e.key] !== undefined);
     if (hidden)
         return null;
-    return (_jsxs("div", { "data-ab-switcher": "", ref: root, className: cn("fixed right-4 bottom-4 z-40", className), children: [open && (_jsxs("div", { role: "dialog", "aria-label": t.title, className: "absolute right-0 bottom-full mb-2 flex w-80 max-w-[calc(100vw-2rem)] flex-col gap-4 rounded-md border border-border bg-popover p-3 text-ink shadow-md", children: [experiments.map((e, i) => (_jsx(ExperimentRow, { experiment: e, value: assigned[e.key], unassigned: t.unassigned, autoFocus: i === 0, onPick: v => location.assign(abVariantUrl(location.href, e.key, v, forceParam)) }, e.key))), _jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsx(Button, { variant: "primary", size: "touch", className: "flex-1", onClick: () => reset("reassign"), children: t.reset }), _jsx(Button, { variant: "outline", size: "touch", className: "flex-1", onClick: () => reset("leave"), children: t.leave })] }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { variant: "ghost", size: "touch", className: "flex-1", onClick: () => { setMinimized(true); close(true); }, children: t.minimize }), _jsx(Button, { variant: "ghost", size: "touch", className: "flex-1", onClick: () => setHidden(true), children: t.hide })] })] })), _jsxs(Button, { ref: chip, variant: "secondary", size: "touch", icon: minimized, "aria-label": t.title, "aria-expanded": open, className: cn("shadow-md", !minimized && "gap-1.5 px-3"), onClick: () => { if (open)
+    return (_jsxs("div", { "data-ab-switcher": "", ref: root, className: cn("fixed right-4 bottom-4 z-40", className), children: [open && (_jsxs("div", { role: "dialog", "aria-label": t.title, className: "absolute right-0 bottom-full mb-2 flex w-80 max-w-[calc(100vw-2rem)] flex-col gap-4 rounded-md border border-border bg-popover p-3 text-ink shadow-md", children: [experiments.map((e, i) => (_jsx(ExperimentRow, { experiment: e, value: assigned[e.key], unassigned: t.unassigned, autoFocus: i === live, onPick: v => location.assign(abVariantUrl(location.href, e.key, v, forceParam)) }, e.key))), _jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsx(Button, { variant: "primary", size: "touch", autoFocus: live < 0, className: "flex-1", onClick: () => reset("reassign"), children: t.reset }), _jsx(Button, { variant: "outline", size: "touch", className: "flex-1", onClick: () => reset("leave"), children: t.leave })] }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { variant: "ghost", size: "touch", className: "flex-1", onClick: () => { setMinimized(true); close(true); }, children: t.minimize }), _jsx(Button, { variant: "ghost", size: "touch", className: "flex-1", onClick: () => setHidden(true), children: t.hide })] })] })), _jsxs(Button, { ref: chip, variant: "secondary", size: "touch", icon: minimized, "aria-label": t.title, "aria-expanded": open, className: cn("shadow-md", !minimized && "gap-1.5 px-3"), onClick: () => { if (open)
                     close(false);
                 else {
                     setOpen(true);
@@ -72,6 +76,6 @@ function ExperimentRow({ experiment: e, value, unassigned, autoFocus, onPick })
     const labelId = `ab-switcher-${e.key}`;
     return (_jsxs("div", { role: "group", "aria-labelledby": labelId, className: "flex flex-col gap-2", children: [_jsxs("div", { className: "flex items-baseline justify-between gap-2 text-sm", children: [_jsx("span", { id: labelId, className: "font-medium text-ink", children: e.label ?? e.key }), value === undefined && _jsx("span", { className: "text-xs text-ink-soft", children: unassigned })] }), _jsx("div", { className: "flex flex-wrap gap-2", children: e.variants.map((v, i) => {
                     const on = v.value === value;
-                    return (_jsx(Button, { variant: on ? "primary" : "outline", size: "touch", "aria-pressed": on, autoFocus: autoFocus && i === 0, className: "flex-1", onClick: () => onPick(v.value), children: v.label }, v.value));
+                    return (_jsx(Button, { variant: on ? "primary" : "outline", size: "touch", "aria-pressed": on, disabled: value === undefined, autoFocus: autoFocus && i === 0, className: "flex-1", onClick: () => onPick(v.value), children: v.label }, v.value));
                 }) })] }));
 }

package/dist/react/AnalyticsBoundary.d.ts

@@ -12,9 +12,10 @@ export interface AnalyticsBoundaryProps {
     placeSlug: string | null;
     /**
      * The cookie the brand's force parameter sets (`AbSwitcher`'s `qaCookie`).
-     * A visit carrying it is a test: its page views and intents say
+     * A visit carrying it is a test: every event through the boundary's sink —
+     * page views, intents, the lead form's funnel and booking — says
      * `forced: true`, so the QA menu's reloads do not count as a place's
-     * traffic. Read in the browser at each event, never on the server.
+     * traffic. Read in the browser at each event (`analyticsSink`).
      */
     qaCookie?: string;
     children: ReactNode;

package/dist/react/AnalyticsBoundary.js

@@ -12,15 +12,6 @@ import { newSubmissionId } from "./use-lead-submit.js";
  */
 const INTENT_ATTR = "data-intent";
 const INTENTS = ["form_open", "booking", "sms", "callback"];
-/**
- * Whether the QA cookie is set with a value. Its own copy, not `ab-gate`'s:
- * a module shared with `AbSwitcher` makes Turbopack split it into a chunk of
- * its own, which costs every visitor more than these lines.
- */
-const qaVisit = (name) => document.cookie.split(";").some(c => {
-    const eq = c.indexOf("=");
-    return eq > 0 && c.slice(0, eq).trim() === name && c.slice(eq + 1).trim() !== "";
-});
 function source() {
     const utm = new URLSearchParams(window.location.search).get("utm_source");
     if (utm)
@@ -41,31 +32,27 @@ export function AnalyticsBoundary({ target, placeSlug, qaCookie, children }) {
     // One visitor for the boundary's life, in memory only: a sink rebuilt for
     // another place keeps it, and a lead posted from the page can name it.
     const [distinctId] = useState(newSubmissionId);
-    const sink = useMemo(() => analyticsSink({ key, host, brandId }, placeSlug, distinctId), [key, host, brandId, placeSlug, distinctId]);
+    const sink = useMemo(() => analyticsSink({ key, host, brandId }, placeSlug, distinctId, qaCookie), [key, host, brandId, placeSlug, distinctId, qaCookie]);
     const pathname = usePathname();
-    // Spread into an event: `{}` without the cookie, so a brand that never
-    // passes `qaCookie` sends exactly what it sent before.
-    const forced = () => (qaCookie && qaVisit(qaCookie) ? { forced: true } : {});
     useEffect(() => {
         if (!countsAsPageView(pathname))
             return;
         sink.capture(EVENTS.pageView, {
             source: source(),
             device: window.matchMedia("(max-width: 767px)").matches ? "mobile" : "desktop",
-            ...forced(),
         });
-    }, [sink, pathname, qaCookie]);
+    }, [sink, pathname]);
     useEffect(() => {
         const onClick = (event) => {
             const el = event.target instanceof Element ? event.target.closest(`[${INTENT_ATTR}]`) : null;
             const channel = el?.getAttribute(INTENT_ATTR);
             if (channel && INTENTS.some(i => i === channel))
-                sink.capture(EVENTS.intent, { channel, ...experimentOf(el), ...forced() }, { transport: "beacon" });
+                sink.capture(EVENTS.intent, { channel, ...experimentOf(el) }, { transport: "beacon" });
         };
         document.addEventListener("click", onClick, { capture: true });
         return () => document.removeEventListener("click", onClick, { capture: true });
-    }, [sink, qaCookie]);
+    }, [sink]);
     // A link inside an experiment's island (`LeadCapture`) carries the
     // assignment on itself, which is what the tracker reads.
-    return (_jsx(AnalyticsIdContext.Provider, { value: key ? distinctId : null, children: _jsx(AnalyticsSinkContext.Provider, { value: sink, children: _jsx(ContactLinkTracker, { channels: ["phone", "whatsapp"], onContact: ({ channel, data }) => sink.capture(EVENTS.intent, { channel, ...experimentProps(data["experiment"], data["variant"]), ...forced() }, { transport: "beacon" }), children: children }) }) }));
+    return (_jsx(AnalyticsIdContext.Provider, { value: key ? distinctId : null, children: _jsx(AnalyticsSinkContext.Provider, { value: sink, children: _jsx(ContactLinkTracker, { channels: ["phone", "whatsapp"], onContact: ({ channel, data }) => sink.capture(EVENTS.intent, { channel, ...experimentProps(data["experiment"], data["variant"]) }, { transport: "beacon" }), children: children }) }) }));
 }

package/dist/react/ab-switcher-types.d.ts

@@ -19,7 +19,7 @@ export interface AbSwitcherText {
     leave: string;
     minimize: string;
     hide: string;
-    /** Shown for an experiment no cookie assigns yet. */
+    /** Shown for an experiment no cookie assigns — one that is off; `not running` by default. */
     unassigned: string;
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evinvest/kitstart",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "Landing-site machinery for local-service brands: a site composition root, the Place/Presence/ServiceArea model with a publication gate, host/locale routing, schema.org and SEO builders, the lead funnel with its antispam, and analytics events. Pure core at '.', more subpaths per runtime.",
   "license": "BlueOak-1.0.0",
   "publishConfig": {

package/template/app/quote/route.ts

@@ -1,6 +1,7 @@
 import { quoteRoute } from "@evinvest/kitstart/next";
 import { TEXT } from "@/entities/content";
 import { notifier, pricing, serverEnv } from "@/shared/config/env";
+import { QA_COOKIE } from "@/shared/config/experiments";
 import { site } from "@/shared/config/site";
 
 /** The no-JS path: a plain form POST answered with a 303. */
@@ -10,6 +11,8 @@ export const POST = quoteRoute(site, {
   env: serverEnv,
   notifier,
   pricing,
+  // The layout's `AnalyticsBoundary` gets the same: a QA visit's lead says `forced: true`.
+  qaCookie: QA_COOKIE,
   unavailable: locale => {
     const t = TEXT[locale];
     const f = { place: site.brand.name, phone: site.brand.phone };

package/template/flake.nix

@@ -3,7 +3,7 @@
     v_flakes.url = "github:valeratrades/v_flakes?ref=v1.6";
     # The lib flake at the tag of the @evinvest/kitstart version in
     # package-lock.json — mkLanding refuses a mismatch.
-    ev.url = "github:EV-invest/lib?ref=@evinvest/kitstart-v0.16.0";
+    ev.url = "github:EV-invest/lib?ref=@evinvest/kitstart-v0.17.0";
     ev.inputs.v_flakes.follows = "v_flakes";
   };
 

package/template/package.json

@@ -20,7 +20,7 @@
   "dependencies": {
     "@evinvest/analytics": "^0.4.0",
     "@evinvest/i18n": "^0.9.0",
-    "@evinvest/kitstart": "^0.16.0",
+    "@evinvest/kitstart": "^0.17.0",
     "@evinvest/marketing": "^0.3.0",
     "@evinvest/uikit": "^0.26.0",
     "next": "16.3.6",

package/template/tests/e2e/ab-switcher.spec.ts

@@ -48,6 +48,8 @@ test("a new visitor gets no menu and never fetches its panel; a test visit gets
 
 test("a variant's tap forces it by the URL; the reset drops the force and keeps the visit a test", async ({ page, context, baseURL }) => {
   await asTester(context, baseURL);
+  // Assigned `a`, as a brand's proxy assigns every running experiment: one without a cookie is off in the menu.
+  await context.addCookies([{ name: "ab_lead_form", value: "a", url: baseURL ?? "" }]);
   await page.goto("/fr?utm_source=qa");
   await chip(page).click();
   await panel(page).getByRole("button", { name: "Steps" }).click();