@formo/analytics 1.29.1 → 1.30.1

package/dist/esm/src/event/EventManager.d.ts

@@ -18,6 +18,8 @@ declare class EventManager implements IEventManager {
      * @param event Incoming event data
      */
     addEvent(event: APIEvent, address?: Address, userId?: string): Promise<void>;
+    /** Drop any buffered events (consent withdrawal / teardown). */
+    clear(): void;
 }
 export { EventManager };
 //# sourceMappingURL=EventManager.d.ts.map

package/dist/esm/src/event/EventManager.js

@@ -93,6 +93,10 @@ var EventManager = /** @class */ (function () {
             });
         });
     };
+    /** Drop any buffered events (consent withdrawal / teardown). */
+    EventManager.prototype.clear = function () {
+        this.eventQueue.clear();
+    };
     return EventManager;
 }());
 export { EventManager };

package/dist/esm/src/event/type.d.ts

@@ -1,6 +1,7 @@
 import { Address, APIEvent, IFormoEvent } from "../types";
 export interface IEventManager {
     addEvent(event: APIEvent, address?: Address, userId?: string): Promise<void>;
+    clear(): void;
 }
 export interface IEventFactory {
     create(event: APIEvent, address?: Address, userId?: string): Promise<IFormoEvent>;

package/dist/esm/src/event/utils.js

@@ -11,7 +11,7 @@ var __assign = (this && this.__assign) || function () {
 };
 import { generateNativeUUID } from "../utils";
 import { cookie } from "../storage";
-import { getIdentityCookieDomain } from "../storage/cookiePolicy";
+import { getIdentityCookieDomain, getIdentityCookieSecurity, } from "../storage/cookiePolicy";
 var generateAnonymousId = function (key, crossSubdomainCookies) {
     var storedAnonymousId = cookie().get(key);
     var anonymousId = (storedAnonymousId && typeof storedAnonymousId === "string"
@@ -23,7 +23,7 @@ var generateAnonymousId = function (key, crossSubdomainCookies) {
     // domain. Note: host-only cookies on other hosts (e.g. a cookie set on
     // example.com is not visible from app.example.com) cannot be migrated
     // until the user revisits that host.
-    cookie().set(key, anonymousId, __assign({ expires: new Date(Date.now() + 1000 * 60 * 60 * 24 * 365).toUTCString(), path: "/" }, (domain ? { domain: domain } : {})));
+    cookie().set(key, anonymousId, __assign(__assign({ expires: new Date(Date.now() + 1000 * 60 * 60 * 24 * 365).toUTCString(), path: "/" }, getIdentityCookieSecurity()), (domain ? { domain: domain } : {})));
     return anonymousId;
 };
 export { generateAnonymousId };

package/dist/esm/src/index.d.ts

@@ -1,10 +1,3 @@
+export * from "./core";
 export * from "./FormoAnalyticsProvider";
-export * from "./FormoAnalytics";
-export * from "./types";
-export { parsePrivyProperties } from "./privy";
-export type { PrivyUser, PrivyLinkedAccount, PrivyAccountType, PrivyProfileProperties, PrivyWalletInfo } from "./privy";
-export { SolanaManager } from "./solana";
-export { SOLANA_CHAIN_IDS, DEFAULT_SOLANA_CHAIN_ID, isSolanaChainId } from "./solana";
-export type { SolanaOptions, SolanaCluster, } from "./solana";
-export type { SolanaClientStore, SolanaClientState, } from "./solana";
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/src/index.js

@@ -1,11 +1,6 @@
 import { formofy } from "./initialization";
+export * from "./core";
 export * from "./FormoAnalyticsProvider";
-export * from "./FormoAnalytics";
-export * from "./types";
-export { parsePrivyProperties } from "./privy";
-// Solana integration exports
-export { SolanaManager } from "./solana";
-export { SOLANA_CHAIN_IDS, DEFAULT_SOLANA_CHAIN_ID, isSolanaChainId } from "./solana";
 if (typeof window !== "undefined")
     window.formofy = formofy;
 //# sourceMappingURL=index.js.map

package/dist/esm/src/queue/EventQueue.d.ts

@@ -11,6 +11,7 @@ type Options = {
     retryCount?: number;
     errorHandler?: any;
     maxQueueSize?: number;
+    canSend?: () => boolean;
 };
 export declare class EventQueue implements IEventQueue {
     private writeKey;
@@ -21,12 +22,19 @@ export declare class EventQueue implements IEventQueue {
     private flushIntervalMs;
     private flushed;
     private maxQueueSize;
+    private queueByteSize;
     private errorHandler;
     private retryCount;
     private pendingFlush;
     private payloadHashes;
+    private canSend?;
     constructor(writeKey: string, options: Options);
     private generateMessageId;
+    /**
+     * Drop all queued data and cancel the flush timer. Called on consent
+     * withdrawal / SDK teardown so nothing buffered can be sent later.
+     */
+    clear(): void;
     enqueue(event: IFormoEvent, callback?: (...args: any) => void): Promise<void>;
     flush(callback?: (...args: any) => void, drainAll?: boolean): Promise<void | IFormoEventFlushPayload[]>;
     /**

package/dist/esm/src/queue/EventQueue.js

@@ -81,6 +81,7 @@ var EventQueue = /** @class */ (function () {
     function EventQueue(writeKey, options) {
         var _this = this;
         this.queue = [];
+        this.queueByteSize = 0; // running total of queued items' byteSize
         this.payloadHashes = new Set();
         this.onPageLeave = function (callback) {
             // To ensure the callback is only called once even if more than one events
@@ -136,6 +137,7 @@ var EventQueue = /** @class */ (function () {
         this.queue = [];
         this.writeKey = writeKey;
         this.apiHost = options.apiHost;
+        this.canSend = options.canSend;
         this.retryCount = clampNumber(options.retryCount || DEFAULT_RETRY, MAX_RETRY, MIN_RETRY);
         this.flushAt = clampNumber(options.flushAt || DEFAULT_FLUSH_AT, MAX_FLUSH_AT, MIN_FLUSH_AT);
         this.maxQueueSize = clampNumber(options.maxQueueSize || DEFAULT_QUEUE_SIZE, MAX_QUEUE_SIZE, MIN_QUEUE_SIZE);
@@ -169,13 +171,31 @@ var EventQueue = /** @class */ (function () {
             });
         });
     };
+    /**
+     * Drop all queued data and cancel the flush timer. Called on consent
+     * withdrawal / SDK teardown so nothing buffered can be sent later.
+     */
+    EventQueue.prototype.clear = function () {
+        if (this.timer) {
+            clearTimeout(this.timer);
+            this.timer = null;
+        }
+        this.queue = [];
+        this.queueByteSize = 0;
+        this.payloadHashes.clear();
+    };
     EventQueue.prototype.enqueue = function (event, callback) {
         return __awaiter(this, void 0, void 0, function () {
-            var message_id, hasReachedFlushAt, hasReachedQueueSize;
+            var message_id, queueItem, hasReachedFlushAt, hasReachedQueueSize;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
                         callback = callback || noop;
+                        // Refuse to buffer anything once consent is withdrawn.
+                        if (this.canSend && !this.canSend()) {
+                            this.clear();
+                            return [2 /*return*/];
+                        }
                         return [4 /*yield*/, this.generateMessageId(event)];
                     case 1:
                         message_id = _a.sent();
@@ -184,10 +204,18 @@ var EventQueue = /** @class */ (function () {
                             logger.warn("Event already enqueued, try again after ".concat(millisecondsToSecond(this.flushIntervalMs), " seconds."));
                             return [2 /*return*/];
                         }
-                        this.queue.push({
+                        queueItem = {
                             message: __assign(__assign({}, event), { message_id: message_id }),
                             callback: callback,
-                        });
+                            byteSize: 0,
+                        };
+                        // Measure once here (message only — JSON.stringify drops the
+                        // callback function anyway), then track the total incrementally.
+                        queueItem.byteSize = JSON.stringify({
+                            message: queueItem.message,
+                        }).length;
+                        this.queue.push(queueItem);
+                        this.queueByteSize += queueItem.byteSize;
                         logger.log("Event enqueued: ".concat(getActionDescriptor(event.type, event.properties)));
                         if (!this.flushed) {
                             this.flushed = true;
@@ -195,8 +223,7 @@ var EventQueue = /** @class */ (function () {
                             return [2 /*return*/];
                         }
                         hasReachedFlushAt = this.queue.length >= this.flushAt;
-                        hasReachedQueueSize = this.queue.reduce(function (acc, item) { return acc + JSON.stringify(item).length; }, 0) >=
-                            this.maxQueueSize;
+                        hasReachedQueueSize = this.queueByteSize >= this.maxQueueSize;
                         if (hasReachedFlushAt || hasReachedQueueSize) {
                             this.flush();
                             return [2 /*return*/];
@@ -222,6 +249,13 @@ var EventQueue = /** @class */ (function () {
                             clearTimeout(this.timer);
                             this.timer = null;
                         }
+                        // Final consent gate: a timer/pagehide flush may have been scheduled
+                        // before opt-out. Drop everything rather than send post-withdrawal.
+                        if (this.canSend && !this.canSend()) {
+                            this.clear();
+                            callback();
+                            return [2 /*return*/, Promise.resolve()];
+                        }
                         if (!this.queue.length) {
                             callback();
                             return [2 /*return*/, Promise.resolve()];
@@ -235,11 +269,17 @@ var EventQueue = /** @class */ (function () {
                     case 2:
                         items = this.queue.splice(0, drainAll ? this.queue.length : this.flushAt);
                         // Only remove hashes for flushed items so duplicate detection remains
-                        // active for events still in the queue.
+                        // active for events still in the queue. Also decrement the running
+                        // byte total by exactly what left the queue.
                         for (_i = 0, items_1 = items; _i < items_1.length; _i++) {
                             item = items_1[_i];
                             this.payloadHashes.delete(item.message.message_id);
+                            this.queueByteSize -= item.byteSize;
                         }
+                        // Re-anchor to the exact invariant when the queue empties, so any
+                        // accumulated drift can never wedge the size gate.
+                        if (this.queue.length === 0)
+                            this.queueByteSize = 0;
                         sentAt = new Date().toISOString();
                         data = items.map(function (item) { return (__assign(__assign({}, item.message), { sent_at: sentAt })); });
                         batches = this.splitIntoBatches(items, data);
@@ -342,6 +382,12 @@ var EventQueue = /** @class */ (function () {
                     case 1:
                         if (!(_i < batches_1.length)) return [3 /*break*/, 6];
                         batch = batches_1[_i];
+                        // Consent can be withdrawn while a flush is already in flight:
+                        // batches were spliced before opt-out, and split batches / retry
+                        // backoff span seconds. Re-check before every send and abandon
+                        // the remaining batches if consent was revoked mid-flush.
+                        if (this.canSend && !this.canSend())
+                            return [3 /*break*/, 6];
                         _a.label = 2;
                     case 2:
                         _a.trys.push([2, 4, , 5]);

package/dist/esm/src/queue/type.d.ts

@@ -2,5 +2,6 @@ import { IFormoEvent } from "../types";
 export interface IEventQueue {
     enqueue(event: IFormoEvent, callback?: (...args: any) => void): Promise<void>;
     flush(callback?: (...args: any) => void): Promise<any>;
+    clear(): void;
 }
 //# sourceMappingURL=type.d.ts.map

package/dist/esm/src/session/index.js

@@ -4,7 +4,19 @@
  * Handles tracking of detected wallets and identified wallet-address pairs
  * using cookies to maintain state across page loads within a session.
  */
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
 import { cookie } from "../storage";
+import { getIdentityCookieSecurity } from "../storage/cookiePolicy";
 import { logger } from "../logger";
 /**
  * Cookie keys for session tracking
@@ -63,11 +75,9 @@ var FormoAnalyticsSession = /** @class */ (function () {
             if (rdnses.length > MAX_SESSION_ENTRIES) {
                 rdnses.splice(0, rdnses.length - MAX_SESSION_ENTRIES);
             }
-            cookie().set(SESSION_WALLET_DETECTED_KEY, rdnses.join(","), {
+            cookie().set(SESSION_WALLET_DETECTED_KEY, rdnses.join(","), __assign({ 
                 // Expires by the end of the day
-                expires: new Date(Date.now() + 86400 * 1000).toUTCString(),
-                path: "/",
-            });
+                expires: new Date(Date.now() + 86400 * 1000).toUTCString(), path: "/" }, getIdentityCookieSecurity()));
         }
     };
     /**
@@ -107,11 +117,9 @@ var FormoAnalyticsSession = /** @class */ (function () {
                 identifiedWallets.splice(0, identifiedWallets.length - MAX_SESSION_ENTRIES);
             }
             var newValue = identifiedWallets.join(",");
-            cookie().set(SESSION_WALLET_IDENTIFIED_KEY, newValue, {
+            cookie().set(SESSION_WALLET_IDENTIFIED_KEY, newValue, __assign({ 
                 // Expires by the end of the day
-                expires: new Date(Date.now() + 86400 * 1000).toUTCString(),
-                path: "/",
-            });
+                expires: new Date(Date.now() + 86400 * 1000).toUTCString(), path: "/" }, getIdentityCookieSecurity()));
             logger.debug("Session: Marked wallet as identified", {
                 identifiedKey: identifiedKey,
                 hasRdns: !!rdns,

package/dist/esm/src/storage/cookiePolicy.d.ts

@@ -7,4 +7,20 @@
  * @param crossSubdomain Whether cookies should be shared across subdomains.
  */
 export declare function getIdentityCookieDomain(crossSubdomain?: boolean): string;
+/**
+ * Security attributes for identity/session cookies (user-id,
+ * active-wallet, wallet-detected/identified).
+ *
+ * - `sameSite: "lax"` — first-party analytics identity. Lax keeps the
+ *   cookie on top-level navigations (so attribution survives a click-in
+ *   from another site) while blocking it on cross-site subrequests.
+ *   Strict would silently drop identity on inbound navigation.
+ * - `secure` — only on HTTPS. Setting Secure over plain HTTP (local dev)
+ *   makes the browser reject the cookie outright, so it must be
+ *   conditional.
+ */
+export declare function getIdentityCookieSecurity(): {
+    sameSite: "lax";
+    secure: boolean;
+};
 //# sourceMappingURL=cookiePolicy.d.ts.map

package/dist/esm/src/storage/cookiePolicy.js

@@ -21,4 +21,22 @@ export function getIdentityCookieDomain(crossSubdomain) {
     var domain = getApexDomain();
     return domain ? ".".concat(domain) : "";
 }
+/**
+ * Security attributes for identity/session cookies (user-id,
+ * active-wallet, wallet-detected/identified).
+ *
+ * - `sameSite: "lax"` — first-party analytics identity. Lax keeps the
+ *   cookie on top-level navigations (so attribution survives a click-in
+ *   from another site) while blocking it on cross-site subrequests.
+ *   Strict would silently drop identity on inbound navigation.
+ * - `secure` — only on HTTPS. Setting Secure over plain HTTP (local dev)
+ *   makes the browser reject the cookie outright, so it must be
+ *   conditional.
+ */
+export function getIdentityCookieSecurity() {
+    var _a;
+    var isHttps = typeof window !== "undefined" &&
+        ((_a = window.location) === null || _a === void 0 ? void 0 : _a.protocol) === "https:";
+    return { sameSite: "lax", secure: isHttps };
+}
 //# sourceMappingURL=cookiePolicy.js.map

package/dist/esm/src/types/base.d.ts

@@ -1,7 +1,6 @@
 import { LogLevel } from "../logger";
 import { IFormoEventContext, IFormoEventProperties, SignatureStatus, TransactionStatus } from "./events";
 import { EIP1193Provider } from "./provider";
-import { ReactNode } from "react";
 import { SolanaOptions } from "../solana/types";
 export type Nullable<T> = T | null;
 export type ChainID = number;
@@ -40,7 +39,6 @@ export interface IFormoAnalytics {
         chainId?: ChainID;
         address: Address;
         message: string;
-        signatureHash?: string;
     }, properties?: IFormoEventProperties, context?: IFormoEventContext, callback?: (...args: unknown[]) => void): Promise<void>;
     transaction(params: {
         status: TransactionStatus;
@@ -222,10 +220,4 @@ export interface Options {
     errorHandler?: (err: Error) => void;
     ready?: (formo: IFormoAnalytics) => void;
 }
-export interface FormoAnalyticsProviderProps {
-    writeKey: string;
-    options?: Options;
-    disabled?: boolean;
-    children: ReactNode;
-}
 //# sourceMappingURL=base.d.ts.map

package/dist/esm/src/types/events.d.ts

@@ -76,7 +76,6 @@ export interface SignatureAPIEvent {
     chainId: ChainID;
     address: Address;
     message: string;
-    signatureHash?: string;
 }
 export interface ConnectAPIEvent {
     type: "connect";

package/dist/esm/src/version.d.ts

@@ -1,2 +1,2 @@
-export declare const version = "1.29.1";
+export declare const version = "1.30.1";
 //# sourceMappingURL=version.d.ts.map

package/dist/esm/src/version.js

@@ -1,4 +1,4 @@
 // This file is auto-generated by scripts/update-version.js during npm version
 // Do not edit manually - it will be overwritten
-export var version = '1.29.1';
+export var version = '1.30.1';
 //# sourceMappingURL=version.js.map

package/dist/esm/src/wagmi/WagmiEventHandler.js

@@ -170,6 +170,11 @@ var WagmiEventHandler = /** @class */ (function () {
                             chainId: chainId,
                         });
                         if (!(status === "disconnected" && prevStatus === "connected")) return [3 /*break*/, 4];
+                        // Clear central chain state regardless of autocapture so a later
+                        // event can't carry a stale excluded/!excluded chainId.
+                        this.formo.syncWalletState({
+                            chainId: this.trackingState.lastChainId,
+                        });
                         if (!this.formo.isAutocaptureEnabled("disconnect")) return [3 /*break*/, 3];
                         return [4 /*yield*/, this.formo.disconnect({
                                 chainId: this.trackingState.lastChainId,
@@ -187,6 +192,9 @@ var WagmiEventHandler = /** @class */ (function () {
                         if (!(address && chainId !== undefined)) return [3 /*break*/, 6];
                         this.trackingState.lastAddress = address;
                         this.trackingState.lastChainId = chainId;
+                        // Sync central state unconditionally so tracking.excludeChains
+                        // is enforced even when connect autocapture is disabled.
+                        this.formo.syncWalletState({ chainId: chainId, address: address });
                         if (!this.formo.isAutocaptureEnabled("connect")) return [3 /*break*/, 6];
                         connectorName = this.getConnectorName(state);
                         return [4 /*yield*/, this.formo.connect({ chainId: chainId, address: address }, __assign({}, (connectorName && { providerName: connectorName })))];
@@ -235,6 +243,9 @@ var WagmiEventHandler = /** @class */ (function () {
                             address: address,
                         });
                         this.trackingState.lastChainId = chainId;
+                        // Sync central state unconditionally so a chain switch to an
+                        // excluded chain is honored even when chain autocapture is disabled.
+                        this.formo.syncWalletState({ chainId: chainId, address: address });
                         if (!this.formo.isAutocaptureEnabled("chain")) return [3 /*break*/, 4];
                         _a.label = 1;
                     case 1:
@@ -356,14 +367,21 @@ var WagmiEventHandler = /** @class */ (function () {
             logger.warn("WagmiEventHandler: Transaction receipt query but no hash found");
             return;
         }
-        // Retrieve stored transaction details from BROADCASTED event
-        // Normalize hash to lowercase for consistent lookup
+        // Retrieve stored transaction details from the BROADCASTED event.
+        // Normalize hash to lowercase for consistent lookup.
         var normalizedHash = transactionHash.toLowerCase();
         var pendingTx = this.pendingTransactions.get(normalizedHash);
-        // Use the original sender address from BROADCASTED event if available,
-        // otherwise fall back to current connected address.
-        // This handles wallet switches between broadcast and confirmation.
-        var address = (pendingTx === null || pendingTx === void 0 ? void 0 : pendingTx.address) || this.trackingState.lastAddress;
+        // Only emit receipt-derived events for a hash we actually observed
+        // being broadcast through this handler. The QueryClient is supplied
+        // by the host app and its cache can be written by app code or other
+        // deps, so without this gate a forged waitForTransactionReceipt
+        // entry could fabricate a confirmed/reverted transaction for an
+        // arbitrary hash. No pendingTx → not our broadcast → ignore.
+        if (!pendingTx) {
+            logger.debug("WagmiEventHandler: Receipt for unobserved tx hash; ignoring", { transactionHash: transactionHash });
+            return;
+        }
+        var address = pendingTx.address;
         if (!address) {
             logger.warn("WagmiEventHandler: Transaction receipt query but no address available");
             return;
@@ -371,9 +389,13 @@ var WagmiEventHandler = /** @class */ (function () {
         try {
             // Extract receipt data
             var receipt = state.data;
-            // Determine transaction status from receipt
-            // receipt.status is 'success' or 'reverted' in viem
-            var txStatus = (receipt === null || receipt === void 0 ? void 0 : receipt.status) === "reverted"
+            // Only act on an explicit on-chain outcome. A missing/unknown
+            // status must NOT be treated as a confirmation.
+            if ((receipt === null || receipt === void 0 ? void 0 : receipt.status) !== "success" && (receipt === null || receipt === void 0 ? void 0 : receipt.status) !== "reverted") {
+                logger.debug("WagmiEventHandler: Receipt without explicit success/reverted status; ignoring", { transactionHash: transactionHash, status: receipt === null || receipt === void 0 ? void 0 : receipt.status });
+                return;
+            }
+            var txStatus = receipt.status === "reverted"
                 ? TransactionStatus.REVERTED
                 : TransactionStatus.CONFIRMED;
             logger.info("WagmiEventHandler: Tracking transaction confirmation", {
@@ -452,15 +474,13 @@ var WagmiEventHandler = /** @class */ (function () {
             return;
         }
         try {
-            // Map Wagmi mutation status to Formo signature status
+            // Map Wagmi mutation status to Formo signature status.
             var status_1;
-            var signatureHash = void 0;
             if (state.status === "pending") {
                 status_1 = SignatureStatus.REQUESTED;
             }
             else if (state.status === "success") {
                 status_1 = SignatureStatus.CONFIRMED;
-                signatureHash = state.data;
             }
             else if (state.status === "error") {
                 status_1 = SignatureStatus.REJECTED;
@@ -468,13 +488,11 @@ var WagmiEventHandler = /** @class */ (function () {
             else {
                 return; // Ignore idle state
             }
-            // Extract message from variables
             var message = void 0;
             if (mutationType === "signMessage") {
                 message = variables.message || "";
             }
             else {
-                // For signTypedData, stringify the typed data
                 message = JSON.stringify(variables.message || variables.types || {});
             }
             logger.info("WagmiEventHandler: Tracking signature event", {
@@ -483,7 +501,12 @@ var WagmiEventHandler = /** @class */ (function () {
                 address: address,
                 chainId: chainId,
             });
-            this.formo.signature(__assign({ status: status_1, chainId: chainId, address: address, message: message }, (signatureHash && { signatureHash: signatureHash })));
+            this.formo.signature({
+                status: status_1,
+                chainId: chainId,
+                address: address,
+                message: message,
+            });
         }
         catch (error) {
             logger.error("WagmiEventHandler: Error handling signature mutation:", error);