@formo/analytics 1.29.1 → 1.30.1

package/dist/cjs/src/session/index.js

@@ -5,9 +5,21 @@
  * Handles tracking of detected wallets and identified wallet-address pairs
  * using cookies to maintain state across page loads within a session.
  */
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FormoAnalyticsSession = exports.SESSION_WALLET_IDENTIFIED_KEY = exports.SESSION_WALLET_DETECTED_KEY = void 0;
 var storage_1 = require("../storage");
+var cookiePolicy_1 = require("../storage/cookiePolicy");
 var logger_1 = require("../logger");
 /**
  * Cookie keys for session tracking
@@ -66,11 +78,9 @@ var FormoAnalyticsSession = /** @class */ (function () {
             if (rdnses.length > MAX_SESSION_ENTRIES) {
                 rdnses.splice(0, rdnses.length - MAX_SESSION_ENTRIES);
             }
-            (0, storage_1.cookie)().set(exports.SESSION_WALLET_DETECTED_KEY, rdnses.join(","), {
+            (0, storage_1.cookie)().set(exports.SESSION_WALLET_DETECTED_KEY, rdnses.join(","), __assign({ 
                 // Expires by the end of the day
-                expires: new Date(Date.now() + 86400 * 1000).toUTCString(),
-                path: "/",
-            });
+                expires: new Date(Date.now() + 86400 * 1000).toUTCString(), path: "/" }, (0, cookiePolicy_1.getIdentityCookieSecurity)()));
         }
     };
     /**
@@ -110,11 +120,9 @@ var FormoAnalyticsSession = /** @class */ (function () {
                 identifiedWallets.splice(0, identifiedWallets.length - MAX_SESSION_ENTRIES);
             }
             var newValue = identifiedWallets.join(",");
-            (0, storage_1.cookie)().set(exports.SESSION_WALLET_IDENTIFIED_KEY, newValue, {
+            (0, storage_1.cookie)().set(exports.SESSION_WALLET_IDENTIFIED_KEY, newValue, __assign({ 
                 // Expires by the end of the day
-                expires: new Date(Date.now() + 86400 * 1000).toUTCString(),
-                path: "/",
-            });
+                expires: new Date(Date.now() + 86400 * 1000).toUTCString(), path: "/" }, (0, cookiePolicy_1.getIdentityCookieSecurity)()));
             logger_1.logger.debug("Session: Marked wallet as identified", {
                 identifiedKey: identifiedKey,
                 hasRdns: !!rdns,

package/dist/cjs/src/storage/cookiePolicy.d.ts

@@ -7,4 +7,20 @@
  * @param crossSubdomain Whether cookies should be shared across subdomains.
  */
 export declare function getIdentityCookieDomain(crossSubdomain?: boolean): string;
+/**
+ * Security attributes for identity/session cookies (user-id,
+ * active-wallet, wallet-detected/identified).
+ *
+ * - `sameSite: "lax"` — first-party analytics identity. Lax keeps the
+ *   cookie on top-level navigations (so attribution survives a click-in
+ *   from another site) while blocking it on cross-site subrequests.
+ *   Strict would silently drop identity on inbound navigation.
+ * - `secure` — only on HTTPS. Setting Secure over plain HTTP (local dev)
+ *   makes the browser reject the cookie outright, so it must be
+ *   conditional.
+ */
+export declare function getIdentityCookieSecurity(): {
+    sameSite: "lax";
+    secure: boolean;
+};
 //# sourceMappingURL=cookiePolicy.d.ts.map

package/dist/cjs/src/storage/cookiePolicy.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getIdentityCookieDomain = getIdentityCookieDomain;
+exports.getIdentityCookieSecurity = getIdentityCookieSecurity;
 /**
  * Cookie domain policy — centralizes the decision of whether identity
  * cookies should be host-scoped or apex-scoped.
@@ -24,4 +25,22 @@ function getIdentityCookieDomain(crossSubdomain) {
     var domain = (0, domain_1.getApexDomain)();
     return domain ? ".".concat(domain) : "";
 }
+/**
+ * Security attributes for identity/session cookies (user-id,
+ * active-wallet, wallet-detected/identified).
+ *
+ * - `sameSite: "lax"` — first-party analytics identity. Lax keeps the
+ *   cookie on top-level navigations (so attribution survives a click-in
+ *   from another site) while blocking it on cross-site subrequests.
+ *   Strict would silently drop identity on inbound navigation.
+ * - `secure` — only on HTTPS. Setting Secure over plain HTTP (local dev)
+ *   makes the browser reject the cookie outright, so it must be
+ *   conditional.
+ */
+function getIdentityCookieSecurity() {
+    var _a;
+    var isHttps = typeof window !== "undefined" &&
+        ((_a = window.location) === null || _a === void 0 ? void 0 : _a.protocol) === "https:";
+    return { sameSite: "lax", secure: isHttps };
+}
 //# sourceMappingURL=cookiePolicy.js.map

package/dist/cjs/src/types/base.d.ts

@@ -1,7 +1,6 @@
 import { LogLevel } from "../logger";
 import { IFormoEventContext, IFormoEventProperties, SignatureStatus, TransactionStatus } from "./events";
 import { EIP1193Provider } from "./provider";
-import { ReactNode } from "react";
 import { SolanaOptions } from "../solana/types";
 export type Nullable<T> = T | null;
 export type ChainID = number;
@@ -40,7 +39,6 @@ export interface IFormoAnalytics {
         chainId?: ChainID;
         address: Address;
         message: string;
-        signatureHash?: string;
     }, properties?: IFormoEventProperties, context?: IFormoEventContext, callback?: (...args: unknown[]) => void): Promise<void>;
     transaction(params: {
         status: TransactionStatus;
@@ -222,10 +220,4 @@ export interface Options {
     errorHandler?: (err: Error) => void;
     ready?: (formo: IFormoAnalytics) => void;
 }
-export interface FormoAnalyticsProviderProps {
-    writeKey: string;
-    options?: Options;
-    disabled?: boolean;
-    children: ReactNode;
-}
 //# sourceMappingURL=base.d.ts.map

package/dist/cjs/src/types/events.d.ts

@@ -76,7 +76,6 @@ export interface SignatureAPIEvent {
     chainId: ChainID;
     address: Address;
     message: string;
-    signatureHash?: string;
 }
 export interface ConnectAPIEvent {
     type: "connect";

package/dist/cjs/src/version.d.ts

@@ -1,2 +1,2 @@
-export declare const version = "1.29.1";
+export declare const version = "1.30.1";
 //# sourceMappingURL=version.d.ts.map

package/dist/cjs/src/version.js

@@ -3,5 +3,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.version = void 0;
 // This file is auto-generated by scripts/update-version.js during npm version
 // Do not edit manually - it will be overwritten
-exports.version = '1.29.1';
+exports.version = '1.30.1';
 //# sourceMappingURL=version.js.map

package/dist/cjs/src/wagmi/WagmiEventHandler.js

@@ -173,6 +173,11 @@ var WagmiEventHandler = /** @class */ (function () {
                             chainId: chainId,
                         });
                         if (!(status === "disconnected" && prevStatus === "connected")) return [3 /*break*/, 4];
+                        // Clear central chain state regardless of autocapture so a later
+                        // event can't carry a stale excluded/!excluded chainId.
+                        this.formo.syncWalletState({
+                            chainId: this.trackingState.lastChainId,
+                        });
                         if (!this.formo.isAutocaptureEnabled("disconnect")) return [3 /*break*/, 3];
                         return [4 /*yield*/, this.formo.disconnect({
                                 chainId: this.trackingState.lastChainId,
@@ -190,6 +195,9 @@ var WagmiEventHandler = /** @class */ (function () {
                         if (!(address && chainId !== undefined)) return [3 /*break*/, 6];
                         this.trackingState.lastAddress = address;
                         this.trackingState.lastChainId = chainId;
+                        // Sync central state unconditionally so tracking.excludeChains
+                        // is enforced even when connect autocapture is disabled.
+                        this.formo.syncWalletState({ chainId: chainId, address: address });
                         if (!this.formo.isAutocaptureEnabled("connect")) return [3 /*break*/, 6];
                         connectorName = this.getConnectorName(state);
                         return [4 /*yield*/, this.formo.connect({ chainId: chainId, address: address }, __assign({}, (connectorName && { providerName: connectorName })))];
@@ -238,6 +246,9 @@ var WagmiEventHandler = /** @class */ (function () {
                             address: address,
                         });
                         this.trackingState.lastChainId = chainId;
+                        // Sync central state unconditionally so a chain switch to an
+                        // excluded chain is honored even when chain autocapture is disabled.
+                        this.formo.syncWalletState({ chainId: chainId, address: address });
                         if (!this.formo.isAutocaptureEnabled("chain")) return [3 /*break*/, 4];
                         _a.label = 1;
                     case 1:
@@ -359,14 +370,21 @@ var WagmiEventHandler = /** @class */ (function () {
             logger_1.logger.warn("WagmiEventHandler: Transaction receipt query but no hash found");
             return;
         }
-        // Retrieve stored transaction details from BROADCASTED event
-        // Normalize hash to lowercase for consistent lookup
+        // Retrieve stored transaction details from the BROADCASTED event.
+        // Normalize hash to lowercase for consistent lookup.
         var normalizedHash = transactionHash.toLowerCase();
         var pendingTx = this.pendingTransactions.get(normalizedHash);
-        // Use the original sender address from BROADCASTED event if available,
-        // otherwise fall back to current connected address.
-        // This handles wallet switches between broadcast and confirmation.
-        var address = (pendingTx === null || pendingTx === void 0 ? void 0 : pendingTx.address) || this.trackingState.lastAddress;
+        // Only emit receipt-derived events for a hash we actually observed
+        // being broadcast through this handler. The QueryClient is supplied
+        // by the host app and its cache can be written by app code or other
+        // deps, so without this gate a forged waitForTransactionReceipt
+        // entry could fabricate a confirmed/reverted transaction for an
+        // arbitrary hash. No pendingTx → not our broadcast → ignore.
+        if (!pendingTx) {
+            logger_1.logger.debug("WagmiEventHandler: Receipt for unobserved tx hash; ignoring", { transactionHash: transactionHash });
+            return;
+        }
+        var address = pendingTx.address;
         if (!address) {
             logger_1.logger.warn("WagmiEventHandler: Transaction receipt query but no address available");
             return;
@@ -374,9 +392,13 @@ var WagmiEventHandler = /** @class */ (function () {
         try {
             // Extract receipt data
             var receipt = state.data;
-            // Determine transaction status from receipt
-            // receipt.status is 'success' or 'reverted' in viem
-            var txStatus = (receipt === null || receipt === void 0 ? void 0 : receipt.status) === "reverted"
+            // Only act on an explicit on-chain outcome. A missing/unknown
+            // status must NOT be treated as a confirmation.
+            if ((receipt === null || receipt === void 0 ? void 0 : receipt.status) !== "success" && (receipt === null || receipt === void 0 ? void 0 : receipt.status) !== "reverted") {
+                logger_1.logger.debug("WagmiEventHandler: Receipt without explicit success/reverted status; ignoring", { transactionHash: transactionHash, status: receipt === null || receipt === void 0 ? void 0 : receipt.status });
+                return;
+            }
+            var txStatus = receipt.status === "reverted"
                 ? events_1.TransactionStatus.REVERTED
                 : events_1.TransactionStatus.CONFIRMED;
             logger_1.logger.info("WagmiEventHandler: Tracking transaction confirmation", {
@@ -455,15 +477,13 @@ var WagmiEventHandler = /** @class */ (function () {
             return;
         }
         try {
-            // Map Wagmi mutation status to Formo signature status
+            // Map Wagmi mutation status to Formo signature status.
             var status_1;
-            var signatureHash = void 0;
             if (state.status === "pending") {
                 status_1 = events_1.SignatureStatus.REQUESTED;
             }
             else if (state.status === "success") {
                 status_1 = events_1.SignatureStatus.CONFIRMED;
-                signatureHash = state.data;
             }
             else if (state.status === "error") {
                 status_1 = events_1.SignatureStatus.REJECTED;
@@ -471,13 +491,11 @@ var WagmiEventHandler = /** @class */ (function () {
             else {
                 return; // Ignore idle state
             }
-            // Extract message from variables
             var message = void 0;
             if (mutationType === "signMessage") {
                 message = variables.message || "";
             }
             else {
-                // For signTypedData, stringify the typed data
                 message = JSON.stringify(variables.message || variables.types || {});
             }
             logger_1.logger.info("WagmiEventHandler: Tracking signature event", {
@@ -486,7 +504,12 @@ var WagmiEventHandler = /** @class */ (function () {
                 address: address,
                 chainId: chainId,
             });
-            this.formo.signature(__assign({ status: status_1, chainId: chainId, address: address, message: message }, (signatureHash && { signatureHash: signatureHash })));
+            this.formo.signature({
+                status: status_1,
+                chainId: chainId,
+                address: address,
+                message: message,
+            });
         }
         catch (error) {
             logger_1.logger.error("WagmiEventHandler: Error handling signature mutation:", error);

package/dist/esm/src/FormoAnalytics.d.ts

@@ -136,18 +136,16 @@ export declare class FormoAnalytics implements IFormoAnalytics {
      * @param {ChainID} params.chainId
      * @param {Address} params.address
      * @param {string} params.message
-     * @param {string} params.signatureHash - only provided if status is confirmed
      * @param {IFormoEventProperties} properties
      * @param {IFormoEventContext} context
      * @param {(...args: unknown[]) => void} callback
      * @returns {Promise<void>}
      */
-    signature({ status, chainId, address, message, signatureHash, }: {
+    signature({ status, chainId, address, message, }: {
         status: SignatureStatus;
         chainId?: ChainID;
         address: Address;
         message: string;
-        signatureHash?: string;
     }, properties?: IFormoEventProperties, context?: IFormoEventContext, callback?: (...args: unknown[]) => void): Promise<void>;
     /**
      * Emits a transaction event.
@@ -381,6 +379,25 @@ export declare class FormoAnalytics implements IFormoAnalytics {
      * Clear per-chain state for a given namespace (or chainId) and sync derived state.
      */
     private clearChainState;
+    /**
+     * Sync validated wallet/chain state into the SDK's central state
+     * WITHOUT emitting an event.
+     *
+     * Integrations (e.g. the wagmi handler) must call this on every
+     * connect / chain-change / disconnect — even when the corresponding
+     * autocapture event is disabled. Otherwise `currentChainId` stays
+     * stale/undefined and `shouldTrack()`'s `tracking.excludeChains`
+     * check (which keys off `currentChainId`, not the event payload) can
+     * be bypassed, letting wallet activity on an excluded chain still be
+     * collected.
+     *
+     * - valid `address` present → record per-chain + derived state
+     * - `address` absent → clear chain state (disconnect)
+     */
+    syncWalletState(params: {
+        chainId?: ChainID;
+        address?: Address;
+    }): void;
     /**
      * Synchronize currentAddress/currentChainId from the active namespace.
      * Last-connected-chain-wins: _activeNamespace takes precedence.

package/dist/esm/src/FormoAnalytics.js

@@ -55,9 +55,9 @@ var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
     return to.concat(ar || Array.prototype.slice.call(from));
 };
 import { createStore } from "mipd";
-import { EVENTS_API_HOST, EventType, LOCAL_ANONYMOUS_ID_KEY, SESSION_USER_ID_KEY, ACTIVE_WALLET_KEY, ACTIVE_WALLET_TTL_MS, CONSENT_OPT_OUT_KEY, } from "./constants";
-import { cookie, initStorageManager } from "./storage";
-import { getIdentityCookieDomain } from "./storage/cookiePolicy";
+import { EVENTS_API_HOST, EventType, LOCAL_ANONYMOUS_ID_KEY, SESSION_USER_ID_KEY, SESSION_TRAFFIC_SOURCE_KEY, ACTIVE_WALLET_KEY, ACTIVE_WALLET_TTL_MS, CONSENT_OPT_OUT_KEY, } from "./constants";
+import { cookie, session, initStorageManager } from "./storage";
+import { getIdentityCookieDomain, getIdentityCookieSecurity, } from "./storage/cookiePolicy";
 import { EventManager } from "./event";
 import { EventQueue } from "./queue";
 import { logger, Logger } from "./logger";
@@ -82,6 +82,7 @@ var PROVIDER_SWITCH_REASONS = {
 var FormoAnalytics = /** @class */ (function () {
     function FormoAnalytics(writeKey, options) {
         if (options === void 0) { options = {}; }
+        var _this = this;
         var _a, _b, _c;
         this.writeKey = writeKey;
         this.options = options;
@@ -157,6 +158,10 @@ var FormoAnalytics = /** @class */ (function () {
             maxQueueSize: options.maxQueueSize,
             flushInterval: options.flushInterval,
             errorHandler: options.errorHandler,
+            // Hard consent gate at the queue boundary: nothing buffered is
+            // ever sent once the user has opted out, even via a timer or
+            // pagehide flush scheduled before opt-out.
+            canSend: function () { return !_this.hasOptedOutTracking(); },
         }), options);
         // Check consent status on initialization
         if (this.hasOptedOutTracking()) {
@@ -294,11 +299,25 @@ var FormoAnalytics = /** @class */ (function () {
      */
     FormoAnalytics.prototype.reset = function () {
         this.currentUserId = undefined;
+        // Clear in-memory wallet identity too. Without this, a logout/reset
+        // (also triggered by optOutTracking) still leaks the previous wallet
+        // address on subsequent track()/page() events for the rest of the
+        // page lifetime, because they fall back to currentAddress. Keep the
+        // EVM provider reference so tracking can resume on the next connect.
+        this.currentAddress = undefined;
+        this.currentChainId = undefined;
+        var evmProvider = this._chainState.evm.provider;
+        this._chainState = { evm: { provider: evmProvider }, solana: {} };
+        this._activeNamespace = undefined;
         cookie().remove(LOCAL_ANONYMOUS_ID_KEY);
         cookie().remove(SESSION_USER_ID_KEY);
         cookie().remove(SESSION_WALLET_DETECTED_KEY);
         cookie().remove(SESSION_WALLET_IDENTIFIED_KEY);
         cookie().remove(ACTIVE_WALLET_KEY);
+        // Stored traffic-source attribution (referrer/UTM) is tracking data;
+        // clear it too so reset()/optOutTracking() don't leave it to be
+        // re-attached to the next session's events.
+        session().remove(SESSION_TRAFFIC_SOURCE_KEY);
     };
     /**
      * Clean up resources and event listeners
@@ -307,6 +326,8 @@ var FormoAnalytics = /** @class */ (function () {
      */
     FormoAnalytics.prototype.cleanup = function () {
         logger.debug("FormoAnalytics: Cleaning up resources");
+        // Drop buffered events so a torn-down instance can't flush later.
+        this.eventManager.clear();
         // Clean up Wagmi handler if present
         if (this.wagmiHandler) {
             this.wagmiHandler.cleanup();
@@ -470,7 +491,6 @@ var FormoAnalytics = /** @class */ (function () {
      * @param {ChainID} params.chainId
      * @param {Address} params.address
      * @param {string} params.message
-     * @param {string} params.signatureHash - only provided if status is confirmed
      * @param {IFormoEventProperties} properties
      * @param {IFormoEventContext} context
      * @param {(...args: unknown[]) => void} callback
@@ -478,10 +498,15 @@ var FormoAnalytics = /** @class */ (function () {
      */
     FormoAnalytics.prototype.signature = function (_a, properties_1, context_1, callback_1) {
         return __awaiter(this, arguments, void 0, function (_b, properties, context, callback) {
-            var status = _b.status, chainId = _b.chainId, address = _b.address, message = _b.message, signatureHash = _b.signatureHash;
+            var status = _b.status, chainId = _b.chainId, address = _b.address, message = _b.message;
             return __generator(this, function (_c) {
                 switch (_c.label) {
-                    case 0: return [4 /*yield*/, this.trackEvent(EventType.SIGNATURE, __assign({ status: status, chainId: chainId, address: address, message: message }, (signatureHash && { signatureHash: signatureHash })), properties, context, callback)];
+                    case 0: return [4 /*yield*/, this.trackEvent(EventType.SIGNATURE, {
+                            status: status,
+                            chainId: chainId,
+                            address: address,
+                            message: message,
+                        }, properties, context, callback)];
                     case 1:
                         _c.sent();
                         return [2 /*return*/];
@@ -552,6 +577,13 @@ var FormoAnalytics = /** @class */ (function () {
                 switch (_d.label) {
                     case 0:
                         _d.trys.push([0, 12, , 13]);
+                        // identify() writes the user-id cookie and marks wallet
+                        // identification before trackEvent's consent check — gate the
+                        // whole method so an opted-out user gets no identity persistence.
+                        if (this.hasOptedOutTracking()) {
+                            logger.info("identify() skipped: user has opted out of tracking");
+                            return [2 /*return*/];
+                        }
                         if (!!params) return [3 /*break*/, 10];
                         // If no params provided, auto-identify
                         logger.info("Auto-identifying with providers:", this._providers.map(function (p) { return p.info.name; }));
@@ -627,7 +659,7 @@ var FormoAnalytics = /** @class */ (function () {
                         if (userId) {
                             this.currentUserId = userId;
                             domain = getIdentityCookieDomain(this.crossSubdomainCookies);
-                            cookie().set(SESSION_USER_ID_KEY, userId, __assign({ path: "/" }, (domain ? { domain: domain } : {})));
+                            cookie().set(SESSION_USER_ID_KEY, userId, __assign(__assign({ path: "/" }, getIdentityCookieSecurity()), (domain ? { domain: domain } : {})));
                         }
                         isAlreadyIdentified = this.session.isWalletIdentified(validAddress, rdns || "");
                         logger.debug("Identify: Checking deduplication", {
@@ -676,6 +708,12 @@ var FormoAnalytics = /** @class */ (function () {
             return __generator(this, function (_c) {
                 switch (_c.label) {
                     case 0:
+                        // detect() marks wallet detection (a cookie write) before
+                        // trackEvent's consent check — gate it on opt-out.
+                        if (this.hasOptedOutTracking()) {
+                            logger.info("detect() skipped: user has opted out of tracking");
+                            return [2 /*return*/];
+                        }
                         if (this.session.isWalletDetected(rdns))
                             return [2 /*return*/, logger.warn("Detect: Wallet ".concat(providerName, " already detected in this session"))];
                         this.session.markWalletDetected(rdns);
@@ -722,6 +760,9 @@ var FormoAnalytics = /** @class */ (function () {
         // Set opt-out flag in persistent storage using direct cookie access
         // This must be done before switching storage to ensure persistence
         setConsentFlag(this.writeKey, CONSENT_OPT_OUT_KEY, "true");
+        // Drop anything already buffered so a pending timer/pagehide flush
+        // cannot ship events after consent withdrawal.
+        this.eventManager.clear();
         this.reset();
         logger.info("Successfully opted out of tracking");
     };
@@ -1941,7 +1982,9 @@ var FormoAnalytics = /** @class */ (function () {
             });
         });
     };
-    FormoAnalytics.prototype.buildSignatureEventPayload = function (method, params, response, chainId) {
+    FormoAnalytics.prototype.buildSignatureEventPayload = function (method, params, 
+    // Intentionally not read. Kept for positional call-site arity.
+    _response, chainId) {
         var _a;
         var rawAddress = method === "personal_sign"
             ? params[1]
@@ -1958,9 +2001,10 @@ var FormoAnalytics = /** @class */ (function () {
         };
         if (method === "personal_sign") {
             var message = Buffer.from(params[0].slice(2), "hex").toString("utf8");
-            return __assign(__assign(__assign({}, basePayload), { message: message }), (response ? { signatureHash: response } : {}));
+            return __assign(__assign({}, basePayload), { message: message });
         }
-        return __assign(__assign(__assign({}, basePayload), { message: params[1] }), (response ? { signatureHash: response } : {}));
+        // eth_signTypedData*: params[1] is the full EIP-712 struct.
+        return __assign(__assign({}, basePayload), { message: params[1] });
     };
     FormoAnalytics.prototype.buildTransactionEventPayload = function (params, provider) {
         return __awaiter(this, void 0, void 0, function () {
@@ -2076,7 +2120,8 @@ var FormoAnalytics = /** @class */ (function () {
         }
         this._providerListenersMap.delete(provider);
     };
-    // Explicitly untrack a provider: remove listeners, clear wrapper flag and tracking
+    // Explicitly untrack a provider: remove listeners, clear wrapper flag
+    // and tracking
     FormoAnalytics.prototype.untrackProvider = function (provider) {
         try {
             this.removeProviderListeners(provider);
@@ -2194,6 +2239,42 @@ var FormoAnalytics = /** @class */ (function () {
         }
         this.syncDerivedState();
     };
+    /**
+     * Sync validated wallet/chain state into the SDK's central state
+     * WITHOUT emitting an event.
+     *
+     * Integrations (e.g. the wagmi handler) must call this on every
+     * connect / chain-change / disconnect — even when the corresponding
+     * autocapture event is disabled. Otherwise `currentChainId` stays
+     * stale/undefined and `shouldTrack()`'s `tracking.excludeChains`
+     * check (which keys off `currentChainId`, not the event payload) can
+     * be bypassed, letting wallet activity on an excluded chain still be
+     * collected.
+     *
+     * - valid `address` present → record per-chain + derived state
+     * - `address` absent → clear chain state (disconnect)
+     */
+    FormoAnalytics.prototype.syncWalletState = function (params) {
+        var chainId = params.chainId, address = params.address;
+        if (!address) {
+            if (chainId !== undefined && chainId !== null) {
+                this.clearChainState(chainId);
+            }
+            else {
+                this.clearChainState("evm");
+                this.clearChainState("solana");
+            }
+            return;
+        }
+        if (chainId === null || chainId === undefined)
+            return;
+        var validAddress = validateAddress(address, chainId);
+        if (!validAddress) {
+            logger.warn("syncWalletState: invalid address (\"".concat(address, "\") for chain ").concat(chainId));
+            return;
+        }
+        this.setChainState(chainId, { address: validAddress });
+    };
     /**
      * Synchronize currentAddress/currentChainId from the active namespace.
      * Last-connected-chain-wins: _activeNamespace takes precedence.
@@ -2232,10 +2313,16 @@ var FormoAnalytics = /** @class */ (function () {
      */
     FormoAnalytics.prototype.persistActiveWallet = function () {
         try {
+            // Never write an identity cookie for an opted-out user; ensure any
+            // prior snapshot is removed instead.
+            if (this.hasOptedOutTracking()) {
+                cookie().remove(ACTIVE_WALLET_KEY);
+                return;
+            }
             if (this.currentAddress) {
                 var value = JSON.stringify(__assign({ address: this.currentAddress }, (this.currentChainId !== undefined && { chainId: this.currentChainId })));
                 var domain = getIdentityCookieDomain(this.crossSubdomainCookies);
-                cookie().set(ACTIVE_WALLET_KEY, value, __assign({ path: "/", expires: new Date(Date.now() + ACTIVE_WALLET_TTL_MS).toUTCString() }, (domain ? { domain: domain } : {})));
+                cookie().set(ACTIVE_WALLET_KEY, value, __assign(__assign({ path: "/", expires: new Date(Date.now() + ACTIVE_WALLET_TTL_MS).toUTCString() }, getIdentityCookieSecurity()), (domain ? { domain: domain } : {})));
             }
             else {
                 cookie().remove(ACTIVE_WALLET_KEY);
@@ -2251,6 +2338,12 @@ var FormoAnalytics = /** @class */ (function () {
      */
     FormoAnalytics.prototype.loadActiveWallet = function () {
         try {
+            // Never restore wallet identity into memory for an opted-out user
+            // (mirrors persistActiveWallet's guard); drop any stale snapshot.
+            if (this.hasOptedOutTracking()) {
+                cookie().remove(ACTIVE_WALLET_KEY);
+                return;
+            }
             var raw = cookie().get(ACTIVE_WALLET_KEY);
             if (!raw)
                 return;

package/dist/esm/src/FormoAnalyticsProvider.d.ts

@@ -1,5 +1,11 @@
-import { FC } from "react";
-import { FormoAnalyticsProviderProps, IFormoAnalytics } from "./types";
+import { FC, ReactNode } from "react";
+import { IFormoAnalytics, Options } from "./types";
+export interface FormoAnalyticsProviderProps {
+    writeKey: string;
+    options?: Options;
+    disabled?: boolean;
+    children: ReactNode;
+}
 export declare const FormoAnalyticsContext: import("react").Context<IFormoAnalytics>;
 export declare const FormoAnalyticsProvider: FC<FormoAnalyticsProviderProps>;
 export declare const useFormo: () => IFormoAnalytics;

package/dist/esm/src/core.d.ts

@@ -0,0 +1,10 @@
+export * from "./FormoAnalytics";
+export * from "./types";
+export { formofy } from "./initialization";
+export { parsePrivyProperties } from "./privy";
+export type { PrivyUser, PrivyLinkedAccount, PrivyAccountType, PrivyProfileProperties, PrivyWalletInfo, } from "./privy";
+export { SolanaManager } from "./solana";
+export { SOLANA_CHAIN_IDS, DEFAULT_SOLANA_CHAIN_ID, isSolanaChainId, } from "./solana";
+export type { SolanaOptions, SolanaCluster } from "./solana";
+export type { SolanaClientStore, SolanaClientState } from "./solana";
+//# sourceMappingURL=core.d.ts.map

package/dist/esm/src/core.js

@@ -0,0 +1,13 @@
+// React-free entry point.
+// Use this from non-React frameworks (Angular, Vue, Svelte, vanilla JS) to
+// avoid pulling the React provider into the dependency graph.
+//
+// Equivalent to the package root entry minus FormoAnalyticsProvider/useFormo
+// and the `window.formofy = formofy` side effect.
+export * from "./FormoAnalytics";
+export * from "./types";
+export { formofy } from "./initialization";
+export { parsePrivyProperties } from "./privy";
+export { SolanaManager } from "./solana";
+export { SOLANA_CHAIN_IDS, DEFAULT_SOLANA_CHAIN_ID, isSolanaChainId, } from "./solana";
+//# sourceMappingURL=core.js.map

package/dist/esm/src/event/EventFactory.d.ts

@@ -35,7 +35,7 @@ declare class EventFactory implements IEventFactory {
     generateConnectEvent(chainId: ChainID, address: Address, properties?: IFormoEventProperties, context?: IFormoEventContext): Promise<IFormoEvent>;
     generateDisconnectEvent(chainId?: ChainID, address?: Address, properties?: IFormoEventProperties, context?: IFormoEventContext): Promise<IFormoEvent>;
     generateChainChangedEvent(chainId: ChainID, address: Address, properties?: IFormoEventProperties, context?: IFormoEventContext): Promise<IFormoEvent>;
-    generateSignatureEvent(status: SignatureStatus, chainId: ChainID, address: Address, message: string, signatureHash?: string, properties?: IFormoEventProperties, context?: IFormoEventContext): Promise<IFormoEvent>;
+    generateSignatureEvent(status: SignatureStatus, chainId: ChainID, address: Address, message: string, properties?: IFormoEventProperties, context?: IFormoEventContext): Promise<IFormoEvent>;
     generateTransactionEvent(status: TransactionStatus, chainId: ChainID, address: Address, data?: string, to?: string, value?: string, transactionHash?: string, function_name?: string, function_args?: Record<string, unknown>, properties?: IFormoEventProperties, context?: IFormoEventContext): Promise<IFormoEvent>;
     generateTrackEvent(event: string, properties?: IFormoEventProperties, context?: IFormoEventContext): Promise<IFormoEvent>;
     create(event: APIEvent, address?: Address, userId?: string): Promise<IFormoEvent>;

package/dist/esm/src/event/EventFactory.js

@@ -413,12 +413,12 @@ var EventFactory = /** @class */ (function () {
             });
         });
     };
-    EventFactory.prototype.generateSignatureEvent = function (status, chainId, address, message, signatureHash, properties, context) {
+    EventFactory.prototype.generateSignatureEvent = function (status, chainId, address, message, properties, context) {
         return __awaiter(this, void 0, void 0, function () {
             var signatureEvent;
             return __generator(this, function (_a) {
                 signatureEvent = {
-                    properties: __assign(__assign({ status: status, chainId: chainId, message: message }, (signatureHash && { signatureHash: signatureHash })), properties),
+                    properties: __assign({ status: status, chainId: chainId, message: message }, properties),
                     address: address,
                     type: "signature",
                 };
@@ -506,7 +506,7 @@ var EventFactory = /** @class */ (function () {
                     case 12:
                         formoEvent = _b.sent();
                         return [3 /*break*/, 19];
-                    case 13: return [4 /*yield*/, this.generateSignatureEvent(event.status, event.chainId, event.address, event.message, event.signatureHash, event.properties, event.context)];
+                    case 13: return [4 /*yield*/, this.generateSignatureEvent(event.status, event.chainId, event.address, event.message, event.properties, event.context)];
                     case 14:
                         formoEvent = _b.sent();
                         return [3 /*break*/, 19];