@genn-inc/cluebase-frontend-sdk 0.0.6 → 0.0.9

package/dist/index.js

@@ -97,14 +97,16 @@ const cluebase = {
             internalSdk.setOrganization(groupKey, traits);
         });
     },
+    link(input) {
+        safeCall("link", () => {
+            internalSdk.link(input);
+        });
+    },
     linkExternalAccount(namespace, externalId) {
         safeCall("linkExternalAccount", () => {
             internalSdk.linkExternalAccount(namespace, externalId);
         });
     },
-    logout() {
-        safeCall("logout", () => internalSdk.logout());
-    },
     reset() {
         safeCall("reset", () => internalSdk.reset());
     },

package/dist/instrumentation/network.d.ts

@@ -9,7 +9,7 @@ export declare const createCluebaseNetworkPropagator: () => TextMapPropagator;
 export declare const startNetworkCapture: (context: CaptureModuleContext, options?: {
     tracerProvider?: TracerProvider;
     deniedKeys?: readonly string[];
-    ignoreUrlPrefixes?: string[];
+    ignoreUrlPrefixes?: readonly string[];
     tracePropagationOrigins?: string[];
     createRequestTraceContext?: (input?: RequestTraceContextInput) => RequestTraceContext;
 }) => CaptureStopHandle;

package/dist/instrumentation/network.js

@@ -497,6 +497,23 @@ export const startNetworkCapture = (context, options = {}) => {
         flush: async () => {
             await waitForFetchSpanEnd();
         },
+        refreshIgnoreUrlPrefixes: () => {
+            if (activeCapture !== capture)
+                return;
+            const ignoreUrls = urlPrefixPatterns(capture.ignoreUrlPrefixes);
+            if (fetchInstrumentation) {
+                fetchInstrumentation.setConfig({
+                    ...fetchInstrumentation.getConfig(),
+                    ignoreUrls,
+                });
+            }
+            if (xhrInstrumentation) {
+                xhrInstrumentation.setConfig({
+                    ...xhrInstrumentation.getConfig(),
+                    ignoreUrls,
+                });
+            }
+        },
         stop: () => {
             if (activeCapture !== capture)
                 return;

package/dist/provider/_version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION: "0.0.6";
+export declare const SDK_VERSION: "0.0.9";

package/dist/provider/_version.js

@@ -1,3 +1,3 @@
 // This file is generated by scripts/generate-version-module.mjs.
 // Do NOT edit by hand. The source of truth is `package.json` `version`.
-export const SDK_VERSION = "0.0.6";
+export const SDK_VERSION = "0.0.9";

package/dist/provider/config.js

@@ -1,3 +1,4 @@
+import { CANONICAL_BROWSER_INGEST_PATH, CLUEBASE_API_V1_PREFIX, } from "../_generated/ingest-routes.js";
 import { ALWAYS_DENIED_KEYS, DEFAULT_API_BASE_URL, DEFAULT_CONFIG, DEFAULT_FRONTEND_SOURCE_IDENTIFIER, MAX_DIAGNOSTIC_TTL_MS, } from "./constants.js";
 import { SDK_COLLECTION_MODE } from "./contracts.js";
 const normalizeKeyList = (keys) => {
@@ -74,6 +75,12 @@ export const parseSendableUrl = (value) => {
         return null;
     }
 };
+const isExtendableIngestPath = (pathname) => {
+    const path = pathname.endsWith("/") ? pathname.slice(0, -1) : pathname;
+    return (path === "" ||
+        path.endsWith(CLUEBASE_API_V1_PREFIX) ||
+        path.endsWith(CANONICAL_BROWSER_INGEST_PATH));
+};
 const normalizeConfiguredEndpoint = (value) => parseSendableUrl(value)?.toString() ?? "";
 const normalizeTracePropagationOrigin = (value) => {
     const trimmed = value.trim();
@@ -101,7 +108,6 @@ export const resolveConfig = (options) => {
     return {
         endpoint: originalEndpoint,
         originalEndpoint,
-        localSetupCheckEndpoint: null,
         projectKey: options.projectKey?.trim() ?? "",
         producerId: DEFAULT_FRONTEND_SOURCE_IDENTIFIER,
         autocapture: options.autocapture ?? DEFAULT_CONFIG.autocapture,
@@ -138,8 +144,15 @@ export const resolveConfig = (options) => {
 };
 export const validateConfig = (config) => {
     const issues = [];
-    if (!config.endpoint) {
-        issues.push("endpoint is required");
+    const endpoint = parseSendableUrl(config.endpoint);
+    if (!endpoint) {
+        issues.push("endpoint must be an absolute http(s) url with a host, such as https://api.cluebase.io");
+    }
+    else if (endpoint.search || endpoint.hash) {
+        issues.push("endpoint must not carry a query string or fragment; pass the api base url only");
+    }
+    else if (!isExtendableIngestPath(endpoint.pathname)) {
+        issues.push(`endpoint path cannot be extended to ${CANONICAL_BROWSER_INGEST_PATH}; pass the api base url, the ${CLUEBASE_API_V1_PREFIX} base, or the canonical ingest path`);
     }
     if (!config.projectKey) {
         issues.push("projectKey is required");

package/dist/provider/constants.js

@@ -41,7 +41,6 @@ export const MAX_SANITIZE_DEPTH = 20;
 export const DEFAULT_CONFIG = {
     endpoint: "",
     originalEndpoint: "",
-    localSetupCheckEndpoint: null,
     projectKey: "",
     producerId: DEFAULT_FRONTEND_SOURCE_IDENTIFIER,
     autocapture: true,

package/dist/provider/contracts.d.ts

@@ -47,5 +47,7 @@ export declare const PARAMETER_CAPTURE_MODE: {
     readonly maskedFingerprint: "masked_fingerprint";
     readonly forbidden: "forbidden";
     readonly truncated: "truncated";
+    readonly encrypted: "encrypted";
+    readonly plain: "plain";
 };
 export type ParameterCaptureMode = (typeof PARAMETER_CAPTURE_MODE)[keyof typeof PARAMETER_CAPTURE_MODE];

package/dist/provider/contracts.js

@@ -43,4 +43,6 @@ export const PARAMETER_CAPTURE_MODE = {
     maskedFingerprint: "masked_fingerprint",
     forbidden: "forbidden",
     truncated: "truncated",
+    encrypted: "encrypted",
+    plain: "plain",
 };

package/dist/provider/lifecycle-event-dedup.d.ts

@@ -0,0 +1,7 @@
+import type { CanonicalJsonValue } from "./types.js";
+export type LifecycleEventIdentity = Readonly<Record<string, CanonicalJsonValue>>;
+export declare class LifecycleEventDedup {
+    private readonly seenAtMs;
+    shouldEmit(identity: LifecycleEventIdentity): boolean;
+    clear(): void;
+}

package/dist/provider/lifecycle-event-dedup.js

@@ -0,0 +1,31 @@
+import { canonicalize } from "json-canonicalize";
+const LIFECYCLE_DEDUPE_TTL_MS = 300000;
+const LIFECYCLE_DEDUPE_MAX_ENTRIES = 4096;
+export class LifecycleEventDedup {
+    constructor() {
+        this.seenAtMs = new Map();
+    }
+    shouldEmit(identity) {
+        const key = canonicalize(identity);
+        const now = Date.now();
+        for (const [seenKey, seenAt] of this.seenAtMs) {
+            if (now - seenAt > LIFECYCLE_DEDUPE_TTL_MS) {
+                this.seenAtMs.delete(seenKey);
+            }
+        }
+        if (this.seenAtMs.has(key)) {
+            this.seenAtMs.set(key, now);
+            return false;
+        }
+        if (this.seenAtMs.size >= LIFECYCLE_DEDUPE_MAX_ENTRIES) {
+            const oldest = [...this.seenAtMs.entries()].sort((left, right) => left[1] - right[1])[0]?.[0];
+            if (oldest !== undefined)
+                this.seenAtMs.delete(oldest);
+        }
+        this.seenAtMs.set(key, now);
+        return true;
+    }
+    clear() {
+        this.seenAtMs.clear();
+    }
+}

package/dist/provider/sdk-encryption-store.d.ts

@@ -0,0 +1,7 @@
+export type SdkEncryptionConfig = {
+    readonly keyVersion: number;
+    readonly publicKey: string;
+};
+export declare const applyDeliveredSdkEncryption: (value: unknown) => void;
+export declare const resetSdkEncryption: () => void;
+export declare const currentSdkEncryption: () => SdkEncryptionConfig | null;

package/dist/provider/sdk-encryption-store.js

@@ -0,0 +1,15 @@
+import { ingestSdkEncryptionSchema } from "../exporter/delivery-response-contract.js";
+let appliedEncryption = null;
+export const applyDeliveredSdkEncryption = (value) => {
+    const parsed = ingestSdkEncryptionSchema.safeParse(value);
+    appliedEncryption = parsed.success
+        ? {
+            keyVersion: parsed.data.key_version,
+            publicKey: parsed.data.public_key,
+        }
+        : null;
+};
+export const resetSdkEncryption = () => {
+    appliedEncryption = null;
+};
+export const currentSdkEncryption = () => appliedEncryption;

package/dist/provider/sdk-event-pipeline.d.ts

@@ -6,7 +6,7 @@ import type { TabManager } from "../context/tab.js";
 import { TraceManager } from "../context/trace.js";
 import type { BatchTransport } from "../exporter/batch.js";
 import type { InternalMetricsStore } from "../internal/metrics.js";
-import type { CluebaseConsentState, CluebaseContext, CluebaseInternalLogger, IngestUsageGovernorFeedback, RawCapturedEvent, ResolvedCluebaseConfig } from "./types.js";
+import type { CluebaseConsentState, CluebaseContext, CluebaseInternalLogger, RawCapturedEvent, ResolvedCluebaseConfig } from "./types.js";
 export declare const OFFICIAL_CUSTOM_EVENT_NAME: {
     readonly identityIdentified: "identity_identified";
     readonly identityReset: "identity_reset";
@@ -33,7 +33,6 @@ export declare const getSessionCaptureEligibility: (transport: BatchTransport) =
 export declare class ProviderEventPipeline {
     private runtime;
     private currentViewId;
-    private usageGovernorFeedback;
     private sessionCaptureEligible;
     private unregisterSessionCaptureEligibility;
     configure(runtime: ProviderEventPipelineRuntime): void;
@@ -48,7 +47,6 @@ export declare class ProviderEventPipeline {
         tabId: string | null;
     };
     enqueueRawEvent(event: RawCapturedEvent, skipSessionTouch?: boolean): void;
-    applyUsageGovernorFeedback(feedback: IngestUsageGovernorFeedback | null | undefined): void;
     refreshSessionCaptureEligibility(): void;
     buildContext(event?: RawCapturedEvent): CluebaseContext;
     private attachInteractionContext;

package/dist/provider/sdk-event-pipeline.js

@@ -6,7 +6,6 @@ import { sanitizeObject, } from "../exporter/sanitize.js";
 import { FRONTEND_EVENT_NAME } from "./contracts.js";
 import { shouldSampleSession } from "./sampling.js";
 import { stripQueryAndHashFromUrl, toStringOrNull, toSubjectProfile, } from "./sdk-input-normalization.js";
-import { DEFAULT_INGEST_USAGE_GOVERNOR_FEEDBACK, hasUsageGovernorFeedbackChanged, isCostCapabilityDisabled, normalizeIngestUsageGovernorFeedback, } from "./usage-governor.js";
 const TRACE_ROOT_EVENTS = new Set([
     "page_view",
     "route_change",
@@ -76,7 +75,6 @@ export class ProviderEventPipeline {
     constructor() {
         this.runtime = null;
         this.currentViewId = null;
-        this.usageGovernorFeedback = DEFAULT_INGEST_USAGE_GOVERNOR_FEEDBACK;
         this.sessionCaptureEligible = true;
         this.unregisterSessionCaptureEligibility = null;
     }
@@ -86,14 +84,12 @@ export class ProviderEventPipeline {
         this.unregisterSessionCaptureEligibility =
             registerSessionCaptureEligibility(runtime.transport, () => this.sessionCaptureEligible);
         this.currentViewId = generateViewId();
-        this.usageGovernorFeedback = DEFAULT_INGEST_USAGE_GOVERNOR_FEEDBACK;
         this.refreshSessionCaptureEligibility();
     }
     clearRuntime() {
         this.unregisterSessionCaptureEligibility?.();
         this.unregisterSessionCaptureEligibility = null;
         this.runtime = null;
-        this.usageGovernorFeedback = DEFAULT_INGEST_USAGE_GOVERNOR_FEEDBACK;
         this.sessionCaptureEligible = true;
     }
     resetViewId() {
@@ -150,10 +146,6 @@ export class ProviderEventPipeline {
                     runtime.internalMetrics.increment("sampling_dropped_count", droppedCount);
                 }
             }
-            if (isCostCapabilityDisabled(this.usageGovernorFeedback, "event_collection")) {
-                runtime.internalMetrics.increment("dropped_count");
-                return;
-            }
             const sourceSignal = rawEventToSourceSignalEvent(eventWithLocation, {
                 context,
                 resource: createFrontendResourceAttributes(runtime.config),
@@ -188,13 +180,6 @@ export class ProviderEventPipeline {
             });
         }
     }
-    applyUsageGovernorFeedback(feedback) {
-        const nextFeedback = normalizeIngestUsageGovernorFeedback(feedback);
-        if (!hasUsageGovernorFeedbackChanged(this.usageGovernorFeedback, nextFeedback)) {
-            return;
-        }
-        this.usageGovernorFeedback = nextFeedback;
-    }
     refreshSessionCaptureEligibility() {
         const config = this.runtime?.config;
         if (!config) {

package/dist/provider/sdk-otel-pipeline.d.ts

@@ -6,8 +6,9 @@ type CreateCluebaseOtelPipelineOptions = {
     resolved: ResolvedCluebaseConfig;
     getTransport: () => BatchTransport | null;
     getContext: () => CluebaseContext;
+    ignoreUrlPrefixes: readonly string[];
 };
-export declare const createCluebaseOtelPipeline: ({ resolved, getTransport, getContext, }: CreateCluebaseOtelPipelineOptions) => CluebaseOtelProvider | null;
+export declare const createCluebaseOtelPipeline: ({ resolved, getTransport, getContext, ignoreUrlPrefixes, }: CreateCluebaseOtelPipelineOptions) => CluebaseOtelProvider | null;
 export declare const shutdownCluebaseOtelProvider: (provider: CluebaseOtelProvider | null) => void;
 export declare const shutdownCluebaseOtelProviderAsync: (provider: CluebaseOtelProvider | null) => Promise<void>;
 export declare const forceFlushCluebaseOtelProvider: (provider: CluebaseOtelProvider | null, signal?: AbortSignal) => Promise<void>;

package/dist/provider/sdk-otel-pipeline.js

@@ -2,7 +2,6 @@ import { context, propagation, trace } from "@opentelemetry/api";
 import { resourceFromAttributes } from "@opentelemetry/resources";
 import { BatchSpanProcessor } from "@opentelemetry/sdk-trace-base";
 import { WebTracerProvider } from "@opentelemetry/sdk-trace-web";
-import { resolveBrowserTokenEndpoint, resolveCanonicalIngestEndpoint, } from "../exporter/client.js";
 import { createFrontendResourceAttributes } from "../exporter/frontend-resource.js";
 import { ObservationSourceEventExporter } from "../exporter/observation-source-event-exporter.js";
 import { createCluebaseNetworkPropagator } from "../instrumentation/network.js";
@@ -16,7 +15,7 @@ const getTracerDelegate = (provider) => {
     const candidate = provider;
     return candidate.getDelegate?.();
 };
-export const createCluebaseOtelPipeline = ({ resolved, getTransport, getContext, }) => {
+export const createCluebaseOtelPipeline = ({ resolved, getTransport, getContext, ignoreUrlPrefixes, }) => {
     if (!getTransport()) {
         return null;
     }
@@ -58,15 +57,7 @@ export const createCluebaseOtelPipeline = ({ resolved, getTransport, getContext,
         },
         getContext,
         deniedKeys: resolved.privacy?.deniedKeys ?? [],
-        ignoreUrlPrefixes: [
-            resolveCanonicalIngestEndpoint(resolved.endpoint),
-            resolveCanonicalIngestEndpoint(resolved.originalEndpoint),
-            resolveBrowserTokenEndpoint(resolved.endpoint),
-            resolveBrowserTokenEndpoint(resolved.originalEndpoint),
-            ...(resolved.localSetupCheckEndpoint
-                ? [resolved.localSetupCheckEndpoint]
-                : []),
-        ].filter((url) => typeof url === "string" && url.length > 0),
+        ignoreUrlPrefixes,
     });
     const provider = new WebTracerProvider({
         resource,

package/dist/provider/sdk-runtime-surfaces.d.ts

@@ -1,6 +1,6 @@
 import { TraceManager } from "../context/trace.js";
 import type { BatchTransport } from "../exporter/batch.js";
-import { type IngestClient } from "../exporter/client.js";
+import type { IngestClient } from "../exporter/client.js";
 import type { InternalMetricsStore } from "../internal/metrics.js";
 import { type CluebaseOtelProvider } from "./sdk-otel-pipeline.js";
 import type { CaptureModuleContext, CluebaseConsentState, CluebaseInternalLogger, RawCapturedEvent, ResolvedCluebaseConfig } from "./types.js";
@@ -41,7 +41,8 @@ export declare class ProviderRuntimeSurfaces {
     constructor(options: ProviderRuntimeSurfacesOptions);
     buildCaptureContext(): CaptureModuleContext;
     warmupBrowserToken(client: IngestClient): void;
-    startCaptureModules(config: ResolvedCluebaseConfig): void;
+    refreshIgnoreUrlPrefixes(): void;
+    startCaptureModules(config: ResolvedCluebaseConfig, ignoreUrlPrefixes: readonly string[]): void;
     stopCaptureModules(): void;
     abortBrowserTokenWarmup(): void;
     flushCaptureSummaries(reason: string): Promise<void>;

package/dist/provider/sdk-runtime-surfaces.js

@@ -1,5 +1,4 @@
 import { TraceManager } from "../context/trace.js";
-import { resolveBrowserTokenEndpoint, resolveCanonicalIngestEndpoint, } from "../exporter/client.js";
 import { startActionCapture } from "../instrumentation/action.js";
 import { startDragCapture } from "../instrumentation/drag.js";
 import { startErrorCapture } from "../instrumentation/error.js";
@@ -88,7 +87,12 @@ export class ProviderRuntimeSurfaces {
             }
         });
     }
-    startCaptureModules(config) {
+    refreshIgnoreUrlPrefixes() {
+        for (const handle of this.captureHandles) {
+            handle.refreshIgnoreUrlPrefixes?.();
+        }
+    }
+    startCaptureModules(config, ignoreUrlPrefixes) {
         const captureContext = this.buildCaptureContext();
         const handles = [];
         handles.push(startInputCapture(captureContext));
@@ -101,10 +105,7 @@ export class ProviderRuntimeSurfaces {
             handles.push(startNetworkCapture(captureContext, {
                 tracerProvider: this.getTracerProvider() ?? undefined,
                 deniedKeys: config.privacy.deniedKeys,
-                ignoreUrlPrefixes: [
-                    resolveCanonicalIngestEndpoint(config.endpoint),
-                    resolveBrowserTokenEndpoint(config.endpoint),
-                ],
+                ignoreUrlPrefixes,
                 tracePropagationOrigins: config.network.tracePropagationOrigins,
                 createRequestTraceContext: (input) => {
                     const traceManager = this.getTraceManager();

package/dist/provider/sdk.js

@@ -12,6 +12,7 @@ import { initSdkCoreWasm } from "../exporter/sdk-core-wasm.js";
 import { InternalMetricsStore } from "../internal/metrics.js";
 import { isConfigValid, resolveConfig, validateConfig } from "./config.js";
 import { DEFAULT_BATCH_FLUSH_THRESHOLD_BYTES, DEFAULT_CONSENT, DEFAULT_MAX_BATCH_QUEUE_BYTES, DEFAULT_MAX_BATCH_QUEUE_ITEMS, SDK_VERSION, } from "./constants.js";
+import { LifecycleEventDedup } from "./lifecycle-event-dedup.js";
 import { getSdkErrorDetails, reportSdkError } from "./sdk-error.js";
 import { OFFICIAL_CUSTOM_EVENT_NAME, ProviderEventPipeline, readCurrentLifecycleUrl, } from "./sdk-event-pipeline.js";
 import { isValidPublicCustomEventName, normalizeProfileAvatarUrl, normalizePublicIdentityId, toStringOrNull, } from "./sdk-input-normalization.js";
@@ -48,6 +49,8 @@ class CluebaseBrowserSdkImpl {
         this.environmentManager = null;
         this.traceManager = null;
         this.diagnostics = new DiagnosticStore();
+        this.lifecycleDedup = new LifecycleEventDedup();
+        this.ingestUrlPrefixes = [];
         this.transport = null;
         this.tracerProvider = null;
         this.logger = logger;
@@ -99,7 +102,6 @@ class CluebaseBrowserSdkImpl {
             const nextSignature = JSON.stringify({
                 endpoint: resolved.endpoint,
                 originalEndpoint: resolved.originalEndpoint,
-                localSetupCheckEndpoint: resolved.localSetupCheckEndpoint,
                 projectKey: resolved.projectKey,
                 producerId: resolved.producerId,
                 autocapture: resolved.autocapture,
@@ -122,6 +124,7 @@ class CluebaseBrowserSdkImpl {
             this.shutdown();
             this.internalMetrics.reset();
             this.diagnostics = new DiagnosticStore();
+            this.lifecycleDedup.clear();
             this.config = resolved;
             this.initSignature = nextSignature;
             this.identityManager = new IdentityManager();
@@ -143,6 +146,9 @@ class CluebaseBrowserSdkImpl {
                 schemaVersion: 1,
                 metrics: this.internalMetrics,
                 diagnostics: this.diagnostics,
+                onEndpointsResolved: (endpoints) => {
+                    this.adoptIngestUrlPrefixes(endpoints);
+                },
             });
             this.transport = new BatchTransport({
                 client: ingestClient,
@@ -154,12 +160,13 @@ class CluebaseBrowserSdkImpl {
                 queueMaxBytes: DEFAULT_MAX_BATCH_QUEUE_BYTES,
                 queueMaxItems: DEFAULT_MAX_BATCH_QUEUE_ITEMS,
                 projectKey: resolved.projectKey,
+                endpoint: resolved.endpoint,
+                sdkVersion: SDK_VERSION,
+                sourceSchemaVersion: "1",
+                sdkRequest: "browser",
                 initialConsent: this.consent,
                 metrics: this.internalMetrics,
                 diagnostics: this.diagnostics,
-                onGovernorFeedback: (feedback) => {
-                    this.applyUsageGovernorFeedback(feedback);
-                },
             });
             this.consent = this.transport.currentConsent();
             this.transport.start();
@@ -186,6 +193,7 @@ class CluebaseBrowserSdkImpl {
                 resolved,
                 getTransport: () => this.transport,
                 getContext: () => this.buildContext(),
+                ignoreUrlPrefixes: this.ingestUrlPrefixes,
             });
             this.initialized = true;
             this.refreshSessionCaptureEligibility();
@@ -248,6 +256,16 @@ class CluebaseBrowserSdkImpl {
             const sanitizedTraits = this.sanitizeIdentifyTraits(traits);
             const subjectProfileKeys = safeProfileKeys(traits, this.config?.privacy.deniedKeys ?? []);
             this.identityManager.identify(sanitizedUserId, sanitizedTraits);
+            if (!this.lifecycleDedup.shouldEmit({
+                action: "identify",
+                userId: sanitizedUserId,
+                anonymousId: previousAnonymousId,
+                organizationId: this.organizationManager?.getContext().organizationId ?? null,
+                subjectTraits: this.identityManager.getContext().traits,
+                profileKeys: subjectProfileKeys,
+            })) {
+                return;
+            }
             this.enqueueOfficialCustomEvent(OFFICIAL_CUSTOM_EVENT_NAME.identityIdentified, {
                 identity_action: "identify",
                 profile_keys: subjectProfileKeys,
@@ -279,9 +297,20 @@ class CluebaseBrowserSdkImpl {
                 return;
             }
             const sanitizedOrgId = this.sanitizeIdentityValue("organizationId", normalizedOrganizationId);
-            const previousUserId = this.identityManager?.getContext().userId ?? null;
+            const identityBeforeGroup = this.identityManager?.getContext();
+            const previousUserId = identityBeforeGroup?.userId ?? null;
             const organizationProfileKeys = safeProfileKeys(traits, this.config?.privacy.deniedKeys ?? []);
             this.organizationManager.setOrganization(sanitizedOrgId, traits);
+            if (!this.lifecycleDedup.shouldEmit({
+                action: "associate_organization",
+                userId: previousUserId,
+                anonymousId: identityBeforeGroup?.anonymousId ?? null,
+                organizationId: sanitizedOrgId,
+                organizationTraits: this.organizationManager.getContext().traits,
+                profileKeys: organizationProfileKeys,
+            })) {
+                return;
+            }
             this.enqueueOfficialCustomEvent(OFFICIAL_CUSTOM_EVENT_NAME.organizationAssociated, {
                 organization_action: "associate",
                 profile_keys: organizationProfileKeys,
@@ -298,6 +327,22 @@ class CluebaseBrowserSdkImpl {
             });
         }
     }
+    link(input) {
+        if (!this.ensureInitializedForPublicCall("link")) {
+            return;
+        }
+        const subject = input?.subject;
+        if (subject?.type !== "organization") {
+            this.warnPublicDrop("link", "subject.type must be 'organization'");
+            return;
+        }
+        const organizationId = normalizePublicIdentityId(subject.id);
+        if (!organizationId) {
+            this.warnPublicDrop("link", "subject.id must be a non-empty string");
+            return;
+        }
+        this.emitExternalLink("link", organizationId, input?.external?.namespace, input?.external?.id);
+    }
     linkExternalAccount(namespace, externalId) {
         if (!this.ensureInitializedForPublicCall("linkExternalAccount")) {
             return;
@@ -306,21 +351,32 @@ class CluebaseBrowserSdkImpl {
             this.warnPublicDrop("linkExternalAccount", "organization manager is unavailable");
             return;
         }
+        const organizationId = this.organizationManager.getContext().organizationId;
+        if (!organizationId) {
+            this.warnPublicDrop("linkExternalAccount", "setOrganization must be called before linkExternalAccount");
+            return;
+        }
+        this.emitExternalLink("linkExternalAccount", organizationId, namespace, externalId);
+    }
+    emitExternalLink(publicCallName, organizationId, namespace, externalId) {
         try {
-            const organizationId = this.organizationManager.getContext().organizationId;
-            if (!organizationId) {
-                this.warnPublicDrop("linkExternalAccount", "setOrganization must be called before linkExternalAccount");
-                return;
-            }
             const normalizedNamespace = normalizePublicIdentityId(namespace);
             const normalizedExternalId = normalizePublicIdentityId(externalId);
             if (!normalizedNamespace || !normalizedExternalId) {
-                this.warnPublicDrop("linkExternalAccount", "namespace and externalId must be non-empty strings");
+                this.warnPublicDrop(publicCallName, "namespace and externalId must be non-empty strings");
                 return;
             }
             const sanitizedExternalId = this.sanitizeIdentityValue("externalId", normalizedExternalId);
+            if (!this.lifecycleDedup.shouldEmit({
+                action: "link",
+                organizationId,
+                externalNamespace: normalizedNamespace,
+                externalId: sanitizedExternalId,
+            })) {
+                return;
+            }
             this.enqueueOfficialCustomEvent(OFFICIAL_CUSTOM_EVENT_NAME.externalAccountLinked, {
-                identity_action: "link_external_account",
+                identity_action: "link",
                 external_namespace: normalizedNamespace,
             }, false, {
                 link_type: "canonical_subject_to_external",
@@ -331,36 +387,12 @@ class CluebaseBrowserSdkImpl {
             this.flushLifecycleEvents();
         }
         catch {
-            this.logger.error("linkExternalAccount failed", {
+            this.logger.error(`${publicCallName} failed`, {
                 error_code: "sdk_operation_failed",
             });
         }
     }
     reset() {
-        if (!this.initialized) {
-            return;
-        }
-        try {
-            const previousUserId = this.identityManager?.getContext().userId ?? null;
-            const previousOrganizationId = this.organizationManager?.getContext().organizationId ?? null;
-            this.enqueueOfficialCustomEvent(OFFICIAL_CUSTOM_EVENT_NAME.identityReset, {
-                identity_action: "reset",
-            }, false, {
-                link_type: "logout",
-                user_id: previousUserId,
-                organization_id: previousOrganizationId,
-            });
-        }
-        catch {
-            this.logger.error("reset failed", {
-                error_code: "sdk_operation_failed",
-            });
-        }
-        finally {
-            this.resetSessionState();
-        }
-    }
-    logout() {
         if (!this.initialized) {
             return;
         }
@@ -376,7 +408,7 @@ class CluebaseBrowserSdkImpl {
             });
         }
         catch {
-            this.logger.error("logout failed", {
+            this.logger.error("reset failed", {
                 error_code: "sdk_operation_failed",
             });
         }
@@ -441,6 +473,9 @@ class CluebaseBrowserSdkImpl {
         });
     }
     setConsent(consent) {
+        if (this.consent !== consent) {
+            this.lifecycleDedup.clear();
+        }
         this.consent = consent;
         if (!this.initialized) {
             return;
@@ -538,21 +573,15 @@ class CluebaseBrowserSdkImpl {
         void this.transport?.flush();
     }
     async flush() {
-        const deadline = this.transport?.beginFlushDeadline();
-        try {
-            await awaitUntilDeadline(this.flushCaptureSummaries("manual_flush"), deadline?.signal);
-            await forceFlushCluebaseOtelProvider(this.tracerProvider, deadline?.signal);
-            await this.transport?.flush(deadline);
-        }
-        finally {
-            this.transport?.endFlushDeadline(deadline);
-        }
+        await this.flushCaptureSummaries("manual_flush");
+        await forceFlushCluebaseOtelProvider(this.tracerProvider);
+        await this.transport?.flush();
     }
     async close() {
-        const closeSignal = this.transport?.beginClose();
-        await awaitUntilDeadline(this.flushCaptureSummaries("close"), closeSignal);
+        this.transport?.beginClose();
+        await this.flushCaptureSummaries("close");
         this.stopCaptureModules();
-        await forceFlushCluebaseOtelProvider(this.tracerProvider, closeSignal ?? undefined);
+        await forceFlushCluebaseOtelProvider(this.tracerProvider);
         await this.transport?.close();
         if (this.transport?.getDiagnostics().lifecycle === "closing_failed") {
             await this.shutdownAsync();
@@ -563,11 +592,19 @@ class CluebaseBrowserSdkImpl {
     warmupBrowserToken(client) {
         this.runtimeSurfaces.warmupBrowserToken(client);
     }
+    adoptIngestUrlPrefixes(endpoints) {
+        for (const url of [endpoints.ingestBatchUrl, endpoints.browserTokenUrl]) {
+            if (url.length > 0 && !this.ingestUrlPrefixes.includes(url)) {
+                this.ingestUrlPrefixes.push(url);
+            }
+        }
+        this.runtimeSurfaces.refreshIgnoreUrlPrefixes();
+    }
     startCaptureModules() {
         if (!this.config) {
             return;
         }
-        this.runtimeSurfaces.startCaptureModules(this.config);
+        this.runtimeSurfaces.startCaptureModules(this.config, this.ingestUrlPrefixes);
     }
     stopCaptureModules() {
         this.runtimeSurfaces.stopCaptureModules();
@@ -575,9 +612,6 @@ class CluebaseBrowserSdkImpl {
     async flushCaptureSummaries(reason) {
         await this.runtimeSurfaces.flushCaptureSummaries(reason);
     }
-    applyUsageGovernorFeedback(feedback) {
-        this.eventPipeline.applyUsageGovernorFeedback(feedback);
-    }
     buildContext() {
         return this.eventPipeline.buildContext();
     }