@genn-inc/cluebase-frontend-sdk 0.0.3 → 0.0.6

package/README.md

@@ -31,6 +31,27 @@ environment.
 appends `/api/v1/ingest/browser-tokens` and the canonical browser observation
 batch path internally.
 
+## Content Security Policy requirement
+
+The SDK converts each OpenTelemetry span through a WebAssembly module, so a
+host page that sends a `Content-Security-Policy` header must allow it:
+
+- `script-src` must include `'wasm-unsafe-eval'`. Without it the browser blocks
+  `WebAssembly.instantiate` and the module never initializes. `'unsafe-eval'`
+  also works but is a far wider grant, so prefer `'wasm-unsafe-eval'`.
+- `connect-src` must allow the origin that serves the bundled
+  `cluebase_sdk_core_wasm_bg.wasm` asset (usually `'self'`), because the module
+  is fetched at runtime relative to the SDK bundle.
+- `connect-src` must also allow the Cluebase API origin (`endpoint`, by default
+  `https://api.cluebase.io`).
+
+Bundlers must emit the `.wasm` asset. Webpack 5, Vite, and Next.js do this
+automatically for the `new URL(..., import.meta.url)` form the SDK uses.
+
+If the module fails to initialize, every span export is dropped and counted as
+a dropped span; the SDK does not fall back to a JavaScript implementation.
+Verify the policy in a staging environment before launch.
+
 ## Responsibility boundary
 
 - SDK captures browser signals and applies local minimization where the signal is obviously high-risk.

package/dist/_generated/{identity-pii-policy.d.ts → identity-pii-policy-text-contains.d.ts}

@@ -35,4 +35,4 @@ export declare const passesLuhn: (digits: string) => boolean;
  * 保管されます。値**そのもの**が識別子かを問いたい面は、もう一方の面
  * （whole_value_is_pii）を使ってください。
  */
-export declare const detectIdentityPII: (value: string) => string | null;
+export declare const detectTextContainsPII: (value: string) => string | null;

package/dist/_generated/{identity-pii-policy.js → identity-pii-policy-text-contains.js}

@@ -80,7 +80,7 @@ const DIGIT_RUN_MATCHERS = {
  * 保管されます。値**そのもの**が識別子かを問いたい面は、もう一方の面
  * （whole_value_is_pii）を使ってください。
  */
-export const detectIdentityPII = (value) => {
+export const detectTextContainsPII = (value) => {
     if (typeof value !== "string" || value.length === 0)
         return null;
     const trimmed = value.trim();

package/dist/_generated/identity-pii-policy-whole-value.d.ts

@@ -0,0 +1,37 @@
+/** 見る順序。先に当たった種類を返します。 */
+export declare const PII_CATEGORY_ORDER: readonly ["email", "ssn", "phone", "credit_card"];
+/** 電子メールの形。 */
+export declare const PII_EMAIL_PATTERN = "^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}$";
+/** 社会保障番号の形。 */
+export declare const PII_SSN_PATTERN = "^\\d{3}-\\d{2}-\\d{4}$";
+/** 電話とみなす桁数の範囲と、求める区切り。 */
+export declare const PII_PHONE_MIN_DIGITS = 7;
+export declare const PII_PHONE_MAX_DIGITS = 15;
+export declare const PII_PHONE_SEPARATOR_PATTERN = "[+().\\-\\s]";
+/** 支払い用の番号とみなす桁数の範囲。Luhn の検算を必ず通します。 */
+export declare const PII_CREDIT_CARD_MIN_DIGITS = 13;
+export declare const PII_CREDIT_CARD_MAX_DIGITS = 19;
+/** 電話の見た目として許す文字だけでできているか。 */
+export declare const PII_PHONE_SHAPE_PATTERN = "^[+()0-9.\\-\\s]+$";
+/** 支払い用の番号の見た目として許す文字だけでできているか。 */
+export declare const PII_CREDIT_CARD_SHAPE_PATTERN = "^[0-9\\s\\-]+$";
+/** 伏せた値の形。同じ入力なら配る部品 3 つとも同じ値になります。 */
+export declare const PII_HASH_PREFIX = "cluebase_pii_hashed:";
+export declare const PII_HASH_HEX_LENGTH = 32;
+/** どの面の規則か（読み手が取り違えないため）。 */
+export declare const PII_SURFACE: "whole_value_is_pii";
+/**
+ * Luhn の検算。支払い用の番号らしさを、無作為な数字の並びと分けます。
+ *
+ * **手順もここから出します。** 桁数と綴りだけを正本化して手順を手書きで残すと、
+ * 同じ算法が 4 か所（受付側と配る部品 3 つ）に残ります。実際に残っていました。
+ */
+export declare const passesLuhn: (digits: string) => boolean;
+/**
+ * この値**そのもの**が個人情報か。両端まで含めて照合します。
+ *
+ * 途中に埋もれた形は拾いません（拾うと利用者の不透明な識別子を巻き込み、
+ * 紐付けが黙って壊れます）。文字列が個人情報を**含む**かを問いたい面は、
+ * もう一方の面（text_contains_pii）を使ってください。
+ */
+export declare const detectWholeValuePII: (value: string) => string | null;

package/dist/_generated/identity-pii-policy-whole-value.js

@@ -0,0 +1,106 @@
+// 自動生成です。**手で編集しないでください。**
+//
+// 正本: packages/cluebase-shared/src/ingest/identity-pii-policy.v1.json
+// 出し直す: node scripts/generate-shared-contract-tables.mjs
+//
+// 正本を直したらこの file も一緒に commit してください。CI が
+// `node scripts/generate-shared-contract-tables.mjs --check` で照合し、ずれていれば落とします。
+/** 見る順序。先に当たった種類を返します。 */
+export const PII_CATEGORY_ORDER = [
+    "email",
+    "ssn",
+    "phone",
+    "credit_card",
+];
+/** 電子メールの形。 */
+export const PII_EMAIL_PATTERN = "^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}$";
+/** 社会保障番号の形。 */
+export const PII_SSN_PATTERN = "^\\d{3}-\\d{2}-\\d{4}$";
+/** 電話とみなす桁数の範囲と、求める区切り。 */
+export const PII_PHONE_MIN_DIGITS = 7;
+export const PII_PHONE_MAX_DIGITS = 15;
+export const PII_PHONE_SEPARATOR_PATTERN = "[+().\\-\\s]";
+/** 支払い用の番号とみなす桁数の範囲。Luhn の検算を必ず通します。 */
+export const PII_CREDIT_CARD_MIN_DIGITS = 13;
+export const PII_CREDIT_CARD_MAX_DIGITS = 19;
+/** 電話の見た目として許す文字だけでできているか。 */
+export const PII_PHONE_SHAPE_PATTERN = "^[+()0-9.\\-\\s]+$";
+/** 支払い用の番号の見た目として許す文字だけでできているか。 */
+export const PII_CREDIT_CARD_SHAPE_PATTERN = "^[0-9\\s\\-]+$";
+/** 伏せた値の形。同じ入力なら配る部品 3 つとも同じ値になります。 */
+export const PII_HASH_PREFIX = "cluebase_pii_hashed:";
+export const PII_HASH_HEX_LENGTH = 32;
+/** どの面の規則か（読み手が取り違えないため）。 */
+export const PII_SURFACE = "whole_value_is_pii";
+/**
+ * Luhn の検算。支払い用の番号らしさを、無作為な数字の並びと分けます。
+ *
+ * **手順もここから出します。** 桁数と綴りだけを正本化して手順を手書きで残すと、
+ * 同じ算法が 4 か所（受付側と配る部品 3 つ）に残ります。実際に残っていました。
+ */
+export const passesLuhn = (digits) => {
+    let sum = 0;
+    let doubleDigit = false;
+    for (let index = digits.length - 1; index >= 0; index -= 1) {
+        let digit = Number(digits[index]);
+        if (doubleDigit) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+        doubleDigit = !doubleDigit;
+    }
+    return sum % 10 === 0;
+};
+const EMAIL_RE = new RegExp(PII_EMAIL_PATTERN);
+const SSN_RE = new RegExp(PII_SSN_PATTERN);
+const PHONE_SHAPE_RE = new RegExp(PII_PHONE_SHAPE_PATTERN);
+const PHONE_SEPARATOR_RE = new RegExp(PII_PHONE_SEPARATOR_PATTERN);
+const CREDIT_CARD_SHAPE_RE = new RegExp(PII_CREDIT_CARD_SHAPE_PATTERN);
+const digitsOf = (value) => value.replace(/[^0-9]/g, "");
+const MATCHERS = {
+    email: (value) => EMAIL_RE.test(value),
+    ssn: (value) => SSN_RE.test(value),
+    phone: (value) => {
+        const digits = digitsOf(value);
+        if (digits.length < PII_PHONE_MIN_DIGITS)
+            return false;
+        if (digits.length > PII_PHONE_MAX_DIGITS)
+            return false;
+        // 電話の見た目でない文字（英字など）が混ざっていたら電話ではありません。
+        if (!PHONE_SHAPE_RE.test(value))
+            return false;
+        // 区切りを 1 つ以上求めます。求めないと "10000000" のような整数の主キーを
+        // 電話とみなし、利用者の識別子が黙って伏せられて後段の突合が壊れます。
+        return PHONE_SEPARATOR_RE.test(value);
+    },
+    credit_card: (value) => {
+        const digits = digitsOf(value);
+        if (digits.length < PII_CREDIT_CARD_MIN_DIGITS)
+            return false;
+        if (digits.length > PII_CREDIT_CARD_MAX_DIGITS)
+            return false;
+        if (!CREDIT_CARD_SHAPE_RE.test(value))
+            return false;
+        return passesLuhn(digits);
+    },
+};
+/**
+ * この値**そのもの**が個人情報か。両端まで含めて照合します。
+ *
+ * 途中に埋もれた形は拾いません（拾うと利用者の不透明な識別子を巻き込み、
+ * 紐付けが黙って壊れます）。文字列が個人情報を**含む**かを問いたい面は、
+ * もう一方の面（text_contains_pii）を使ってください。
+ */
+export const detectWholeValuePII = (value) => {
+    if (typeof value !== "string" || value.length === 0)
+        return null;
+    const trimmed = value.trim();
+    // 見る順序は正本が決めます。ここには書きません。
+    for (const category of PII_CATEGORY_ORDER) {
+        if (MATCHERS[category]?.(trimmed))
+            return category;
+    }
+    return null;
+};

package/dist/_generated/otel-span-conversion.js

@@ -1,10 +1,3 @@
-// 自動生成です。**手で編集しないでください。**
-//
-// 正本: packages/cluebase-backend-contract/src/delivery/otel-span-conversion.source.ts
-// 出し直す: node scripts/generate-shared-contract-tables.mjs
-//
-// 正本を直したらこの file も一緒に commit してください。CI が
-// `node scripts/generate-shared-contract-tables.mjs --check` で照合し、ずれていれば落とします。
 export function hrTimeToUnixNano(time) {
     if (!time)
         return `${Date.now()}000000`;
@@ -20,8 +13,7 @@ export function nanosToIso(nanos) {
         if (Number.isFinite(ms) && ms > 0)
             return new Date(ms).toISOString();
     }
-    catch {
-    }
+    catch { }
     return new Date().toISOString();
 }
 export function attrString(attributes, key) {

package/dist/context/browser-storage.js

@@ -19,7 +19,6 @@ export const resolveWebStorage = (kind, probeKey) => {
             return storage;
         }
     }
-    catch {
-    }
+    catch { }
     return createMemoryStorage();
 };

package/dist/context/environment.js

@@ -1,5 +1,5 @@
 import { toPathTemplate } from "../exporter/path-template.js";
-import { detectIdentityPII } from "../exporter/sanitize.js";
+import { detectTextContainsPII } from "../exporter/sanitize.js";
 import { stripQueryAndHashFromUrl } from "../provider/sdk-input-normalization.js";
 const firstMatch = (userAgent, pattern) => {
     const match = pattern.exec(userAgent);
@@ -136,7 +136,7 @@ const sanitizeReferrer = (value) => {
             .split("/")
             .map((segment) => {
             try {
-                return detectIdentityPII(decodeURIComponent(segment)) === null
+                return detectTextContainsPII(decodeURIComponent(segment)) === null
                     ? segment
                     : ":id";
             }
@@ -218,7 +218,9 @@ export class EnvironmentManager {
     safeContextTraits() {
         try {
             const traits = this.options.contextTraitsProvider?.() ?? {};
-            return typeof traits === "object" && traits !== null && !Array.isArray(traits)
+            return typeof traits === "object" &&
+                traits !== null &&
+                !Array.isArray(traits)
                 ? traits
                 : {};
         }

package/dist/context/identity.js

@@ -1,6 +1,6 @@
 import { generateAnonymousId } from "../exporter/event-id.js";
 import { STORAGE_KEYS } from "../provider/constants.js";
-import { resolveWebStorage, } from "./browser-storage.js";
+import { resolveWebStorage } from "./browser-storage.js";
 const CONTEXT_ID_TRAIT_KEYS = new Set([
     "accountId",
     "account_id",
@@ -89,8 +89,7 @@ export class IdentityManager {
         try {
             this.storage.setItem(STORAGE_KEYS.userId, userId);
         }
-        catch {
-        }
+        catch { }
     }
     clearUser() {
         this.state.userId = null;
@@ -98,8 +97,7 @@ export class IdentityManager {
         try {
             this.storage.removeItem(STORAGE_KEYS.userId);
         }
-        catch {
-        }
+        catch { }
     }
     rotateAnonymousId() {
         const anonymousId = generateAnonymousId();
@@ -107,8 +105,7 @@ export class IdentityManager {
         try {
             this.storage.setItem(STORAGE_KEYS.anonymousId, anonymousId);
         }
-        catch {
-        }
+        catch { }
         return anonymousId;
     }
     reset() {
@@ -122,8 +119,7 @@ export class IdentityManager {
             try {
                 this.storage.setItem(STORAGE_KEYS.anonymousId, anonymousId);
             }
-            catch {
-            }
+            catch { }
         }
         const userId = this.storage.getItem(STORAGE_KEYS.userId);
         return {

package/dist/context/organization.d.ts

@@ -1,6 +1,6 @@
 import type { OrganizationContext } from "../provider/types.js";
-import { type ContextTraitInput } from "./identity.js";
 import { type StorageLike } from "./browser-storage.js";
+import { type ContextTraitInput } from "./identity.js";
 export declare class OrganizationManager {
     private readonly storage;
     private state;

package/dist/context/organization.js

@@ -1,9 +1,10 @@
 import { STORAGE_KEYS } from "../provider/constants.js";
+import { resolveWebStorage } from "./browser-storage.js";
 import { sanitizeContextTraits, } from "./identity.js";
-import { resolveWebStorage, } from "./browser-storage.js";
 export class OrganizationManager {
     constructor(storage) {
-        this.storage = storage ?? resolveWebStorage("local", "cluebase:organization_probe");
+        this.storage =
+            storage ?? resolveWebStorage("local", "cluebase:organization_probe");
         this.state = this.loadState();
     }
     getContext() {
@@ -22,8 +23,7 @@ export class OrganizationManager {
         try {
             this.storage.setItem(STORAGE_KEYS.organizationId, organizationId);
         }
-        catch {
-        }
+        catch { }
     }
     reset() {
         this.state = {
@@ -33,8 +33,7 @@ export class OrganizationManager {
         try {
             this.storage.removeItem(STORAGE_KEYS.organizationId);
         }
-        catch {
-        }
+        catch { }
     }
     loadState() {
         const organizationId = this.storage.getItem(STORAGE_KEYS.organizationId);
@@ -43,8 +42,7 @@ export class OrganizationManager {
                 this.storage.setItem(STORAGE_KEYS.organizationId, organizationId);
             }
         }
-        catch {
-        }
+        catch { }
         return {
             organizationId,
             traits: {},

package/dist/context/session.js

@@ -1,6 +1,6 @@
 import { generateSessionId } from "../exporter/event-id.js";
 import { DEFAULT_SESSION_TIMEOUT_MS, STORAGE_KEYS, } from "../provider/constants.js";
-import { resolveWebStorage, } from "./browser-storage.js";
+import { resolveWebStorage } from "./browser-storage.js";
 const parseMs = (value) => {
     if (!value) {
         return null;
@@ -14,7 +14,8 @@ const parseMs = (value) => {
 export class SessionManager {
     constructor(timeoutMs = DEFAULT_SESSION_TIMEOUT_MS, storage) {
         this.timeoutMs = timeoutMs;
-        this.storage = storage ?? resolveWebStorage("session", "cluebase:session_probe");
+        this.storage =
+            storage ?? resolveWebStorage("session", "cluebase:session_probe");
         this.context = this.loadState();
     }
     getContext() {
@@ -58,8 +59,7 @@ export class SessionManager {
         try {
             this.storage.setItem(STORAGE_KEYS.sessionLastActivityAt, String(nowMs));
         }
-        catch {
-        }
+        catch { }
     }
     endSession(nowMs = Date.now()) {
         if (!this.context.sessionId || !this.context.startedAtMs) {
@@ -89,8 +89,7 @@ export class SessionManager {
             this.storage.setItem(STORAGE_KEYS.sessionStartedAt, String(nowMs));
             this.storage.setItem(STORAGE_KEYS.sessionLastActivityAt, String(nowMs));
         }
-        catch {
-        }
+        catch { }
         return sessionId;
     }
     clear() {
@@ -104,8 +103,7 @@ export class SessionManager {
             this.storage.removeItem(STORAGE_KEYS.sessionStartedAt);
             this.storage.removeItem(STORAGE_KEYS.sessionLastActivityAt);
         }
-        catch {
-        }
+        catch { }
     }
     loadState() {
         const sessionId = this.storage.getItem(STORAGE_KEYS.sessionId);

package/dist/context/tab.js

@@ -1,6 +1,6 @@
 import { generateEventId, generateTabId } from "../exporter/event-id.js";
 import { STORAGE_KEYS } from "../provider/constants.js";
-import { resolveWebStorage, } from "./browser-storage.js";
+import { resolveWebStorage } from "./browser-storage.js";
 const TAB_CLAIM_KEY_PREFIX = "cluebase:tab_claim:";
 const TAB_CLAIM_TTL_MS = 5 * 60 * 1000;
 const DOCUMENT_CLAIM_ID = `doc_${generateEventId()}`;
@@ -13,8 +13,7 @@ const resolveClaimStorage = () => {
             return globalThis.localStorage;
         }
     }
-    catch {
-    }
+    catch { }
     return null;
 };
 const parseTabClaim = (value) => {
@@ -31,13 +30,13 @@ const parseTabClaim = (value) => {
             };
         }
     }
-    catch {
-    }
+    catch { }
     return null;
 };
 export class TabManager {
     constructor(storage, options) {
-        this.storage = storage ?? resolveWebStorage("session", "cluebase:tab_probe");
+        this.storage =
+            storage ?? resolveWebStorage("session", "cluebase:tab_probe");
         this.claimStorage =
             options && "claimStorage" in options
                 ? (options.claimStorage ?? null)
@@ -61,8 +60,7 @@ export class TabManager {
         try {
             this.storage.setItem(STORAGE_KEYS.tabId, tabId);
         }
-        catch {
-        }
+        catch { }
         return tabId;
     }
     isClaimedByAnotherDocument(tabId) {
@@ -85,8 +83,7 @@ export class TabManager {
                 expiresAt: this.now() + TAB_CLAIM_TTL_MS,
             }));
         }
-        catch {
-        }
+        catch { }
     }
     installLifecycleCleanup() {
         if (!this.bindLifecycleEvents || !this.claimStorage) {
@@ -106,7 +103,6 @@ export class TabManager {
             globalThis.addEventListener("pagehide", cleanup, { once: true });
             globalThis.addEventListener("beforeunload", cleanup, { once: true });
         }
-        catch {
-        }
+        catch { }
     }
 }

package/dist/context/trace.js

@@ -66,7 +66,8 @@ export class TraceManager {
     endFrontendAction(interactionId) {
         if (!this.activeInteraction)
             return;
-        if (interactionId && this.activeInteraction.interactionId !== interactionId) {
+        if (interactionId &&
+            this.activeInteraction.interactionId !== interactionId) {
             return;
         }
         this.recentInteraction = {

package/dist/exporter/batch.d.ts

@@ -1,8 +1,8 @@
 import type { InternalMetricsStore } from "../internal/metrics.js";
 import type { CluebaseConsentState, IngestUsageGovernorFeedback } from "../provider/types.js";
 import { type CollectionPermit } from "./browser-outbox.js";
-import { DiagnosticStore, type DiagnosticsSnapshot } from "./diagnostics.js";
 import type { IngestClient } from "./client.js";
+import { DiagnosticStore, type DiagnosticsSnapshot } from "./diagnostics.js";
 import type { BrowserSourceEvent } from "./source-event.js";
 export type BatchIngestClient = Pick<IngestClient, "send" | "hasUsableBrowserToken" | "createBatchEnvelopeMetadata" | "measurePayloadBytes">;
 export type BatchTransportOptions = {
@@ -10,6 +10,7 @@ export type BatchTransportOptions = {
     flushIntervalMs: number;
     maxPayloadBytes: number;
     flushThresholdBytes?: number;
+    maxSize?: number;
     client: BatchIngestClient;
     metrics?: InternalMetricsStore;
     queueMaxBytes?: number;
@@ -30,6 +31,7 @@ export declare class BatchTransport {
     private readonly flushIntervalMs;
     private readonly maxPayloadBytes;
     private readonly flushThresholdBytes;
+    private readonly maxSize;
     private readonly metrics;
     private readonly diagnostics;
     private readonly onGovernorFeedback;

package/dist/exporter/batch.js

@@ -1,4 +1,4 @@
-import { CONSENT_DENIED_ABORT_REASON } from "../provider/constants.js";
+import { CONSENT_DENIED_ABORT_REASON, DEFAULT_CONFIG, } from "../provider/constants.js";
 import { BrowserOutbox, } from "./browser-outbox.js";
 import { ownEvent } from "./browser-outbox-records.js";
 import { DiagnosticStore } from "./diagnostics.js";
@@ -21,6 +21,7 @@ export class BatchTransport {
         this.flushIntervalMs = Math.max(100, options.flushIntervalMs);
         this.maxPayloadBytes = Math.max(1024, options.maxPayloadBytes);
         this.flushThresholdBytes = Math.min(this.maxPayloadBytes, Math.max(1024, options.flushThresholdBytes ?? Math.floor(this.maxPayloadBytes * 0.8)));
+        this.maxSize = Math.max(1, options.maxSize ?? DEFAULT_CONFIG.batch.maxSize);
         this.client = options.client;
         this.metrics = options.metrics ?? null;
         this.diagnostics = options.diagnostics ?? new DiagnosticStore();
@@ -111,7 +112,8 @@ export class BatchTransport {
                 void this.flush();
                 return;
             }
-            if (this.outbox.estimatedDraftBytes((events, metadata) => this.client.measurePayloadBytes([...events], metadata), this.client.createBatchEnvelopeMetadata()) >= this.flushThresholdBytes) {
+            if (this.outbox.draftCount() >= this.maxSize ||
+                this.outbox.estimatedDraftBytes((events, metadata) => this.client.measurePayloadBytes([...events], metadata), this.client.createBatchEnvelopeMetadata()) >= this.flushThresholdBytes) {
                 void this.flush();
             }
         });
@@ -355,14 +357,8 @@ export class BatchTransport {
             this.recordPendingBatchCount();
             return "break";
         }
-        if (result.partial) {
-            if (this.lifecycle === "closing")
-                this.closeHadTerminalDisposition = true;
-            this.diagnostics.record({
-                code: "intentional_drop",
-                count: result.droppedEventCount ?? 0,
-                batch_fingerprint: this.diagnostics.batchFingerprint(batch.diagnosticCanonicalBytes),
-            });
+        if (result.partial && this.lifecycle === "closing") {
+            this.closeHadTerminalDisposition = true;
         }
         this.recordPendingBatchCount();
         return "continue";

package/dist/exporter/browser-outbox-records.d.ts

@@ -1,5 +1,5 @@
-import type { BatchEnvelopeMetadata } from "./client.js";
 import type { CluebaseConsentState } from "../provider/types.js";
+import type { BatchEnvelopeMetadata } from "./client.js";
 import { type BrowserSourceEvent } from "./source-event.js";
 export type StorageLike = Pick<Storage, "getItem" | "setItem" | "removeItem" | "key"> & {
     readonly length: number;

package/dist/exporter/browser-outbox-records.js

@@ -188,7 +188,9 @@ export const withoutChecksum = (record) => {
 export const parseRecord = (raw, projectHash) => {
     try {
         const value = JSON.parse(raw);
-        if (!isRecord(value) || value.storageVersion !== 2 || value.projectHash !== projectHash)
+        if (!isRecord(value) ||
+            value.storageVersion !== 2 ||
+            value.projectHash !== projectHash)
             return null;
         const checksumSha256 = value.checksumSha256;
         if (typeof checksumSha256 !== "string")
@@ -204,11 +206,14 @@ export const parseRecord = (raw, projectHash) => {
 };
 const isValidRecord = (value) => {
     const base = typeof value.createdAt === "string" &&
-        (typeof value.recordVerifierSha256 === "string" || value.recordVerifierSha256 === null);
+        (typeof value.recordVerifierSha256 === "string" ||
+            value.recordVerifierSha256 === null);
     if (!base)
         return false;
     if (value.kind === "consent") {
-        return ((value.state === "granted" || value.state === "denied" || value.state === "unknown") &&
+        return ((value.state === "granted" ||
+            value.state === "denied" ||
+            value.state === "unknown") &&
             typeof value.collectionGeneration === "string" &&
             typeof value.legacyImportBlocked === "boolean" &&
             typeof value.updatedAt === "string" &&
@@ -225,7 +230,8 @@ const isValidRecord = (value) => {
             isBrowserSourceSignalEvent(value.event));
     }
     if (value.kind === "legacy_tombstone") {
-        return typeof value.eventKeyHash === "string" && typeof value.importedAt === "string";
+        return (typeof value.eventKeyHash === "string" &&
+            typeof value.importedAt === "string");
     }
     if (value.kind === "pending" || value.kind === "split_plan") {
         if (typeof value.batchId !== "string" ||
@@ -291,7 +297,8 @@ export const draftRecordKey = (prefix, eventKeyHash) => `${prefix}draft:${eventK
 export const pendingRecordKey = (prefix, batchId) => `${prefix}pending:${keyHash(batchId)}`;
 export const tombstoneRecordKey = (prefix, eventKeyHash) => `${prefix}legacy-tombstone:${eventKeyHash}`;
 export const browserEventsByteLength = (events) => events.reduce((total, event) => total + new TextEncoder().encode(JSON.stringify(event)).byteLength, 0);
-export const outboxEventCount = (drafts, pending) => drafts.length + pending.reduce((count, record) => count + record.events.length, 0);
+export const outboxEventCount = (drafts, pending) => drafts.length +
+    pending.reduce((count, record) => count + record.events.length, 0);
 export const hasLegacyTombstone = (draft, tombstones) => tombstones.some((record) => record.eventKeyHash === draft.eventKeyHash &&
     record.recordVerifierSha256 === draft.recordVerifierSha256);
 export const createGeneration = () => typeof crypto !== "undefined" && typeof crypto.randomUUID === "function"
@@ -299,7 +306,9 @@ export const createGeneration = () => typeof crypto !== "undefined" && typeof cr
     : `${Date.now()}-${Math.random()}`;
 export const readStorage = () => {
     try {
-        return typeof localStorage === "undefined" ? null : localStorage;
+        return typeof localStorage === "undefined"
+            ? null
+            : localStorage;
     }
     catch {
         return null;

package/dist/exporter/browser-outbox.d.ts

@@ -1,10 +1,10 @@
 import type { InternalMetricsStore } from "../internal/metrics.js";
 import type { CluebaseConsentState } from "../provider/types.js";
+import { type CollectionPermit, type PendingBrowserBatch, type StorageLike } from "./browser-outbox-records.js";
 import type { BatchEnvelopeMetadata } from "./client.js";
 import { DiagnosticStore } from "./diagnostics.js";
 import type { BrowserSourceEvent } from "./source-event.js";
-import { type CollectionPermit, type PendingBrowserBatch, type StorageLike } from "./browser-outbox-records.js";
-export type { CollectionPermit, OwnedBrowserEvent, PendingBrowserBatch } from "./browser-outbox-records.js";
+export type { CollectionPermit, OwnedBrowserEvent, PendingBrowserBatch, } from "./browser-outbox-records.js";
 export type ConsentTransition = {
     readonly state: CluebaseConsentState;
     readonly generation: string;
@@ -62,6 +62,7 @@ export declare class BrowserOutbox {
     private persistCommittedConsent;
     addDraft(event: BrowserSourceEvent, permit?: CollectionPermit): boolean;
     estimatedDraftBytes(measure: (events: readonly BrowserSourceEvent[], metadata: BatchEnvelopeMetadata) => number, metadata: BatchEnvelopeMetadata): number;
+    draftCount(): number;
     prepareFence(input: {
         readonly maxPayloadBytes: number;
         readonly createMetadata: () => BatchEnvelopeMetadata;
@@ -85,6 +86,8 @@ export declare class BrowserOutbox {
     private resolvePermit;
     private initializeConsentForDelivery;
     private enforceCapacity;
+    private dropOldestPendingForCapacity;
+    private forciblyRemovePendingRecord;
     private purgeAll;
     clearMemory(): void;
     private restore;