@gradial/aci 0.1.52-rc.16 → 0.1.52-rc.21

package/dist/edge/expression-capabilities.v1.js

@@ -0,0 +1,165 @@
+// GENERATED by scripts/generate-expression-capabilities.go — DO NOT EDIT.
+// Regenerate: make expression-capabilities
+//
+// The published capability discovery schema for the personalization
+// expression contract (ADR 0038), generated from the Go vocabulary tables
+// and drift-gated in CI against the canonical JSON artifact at
+// internal/domain/personalization/expression/schema/.
+export const expressionCapabilities = {
+    "schemaVersion": 1,
+    "contract": "personalization-expression",
+    "maxConditions": 64,
+    "maxDepth": 5,
+    "maxInValues": 32,
+    "grammars": {
+        "number": "^-?(0|[1-9][0-9]*)(\\.[0-9]+)?([eE][+-]?[0-9]+)?$",
+        "timestamp": "^(\\d{4})-(\\d{2})-(\\d{2})T(\\d{2}):(\\d{2}):(\\d{2})(\\.\\d{1,9})?(Z|[+-]\\d{2}:\\d{2})$"
+    },
+    "operators": [
+        {
+            "name": "equals",
+            "operand": "scalar",
+            "compact": "eq"
+        },
+        {
+            "name": "contains",
+            "operand": "scalar",
+            "compact": "ct"
+        },
+        {
+            "name": "startsWith",
+            "operand": "scalar",
+            "compact": "sw"
+        },
+        {
+            "name": "exists",
+            "operand": "optionalBoolean",
+            "compact": "ex"
+        },
+        {
+            "name": "greaterThan",
+            "operand": "number",
+            "compact": "gt"
+        },
+        {
+            "name": "greaterThanOrEqual",
+            "operand": "number",
+            "compact": "ge"
+        },
+        {
+            "name": "lessThan",
+            "operand": "number",
+            "compact": "lt"
+        },
+        {
+            "name": "lessThanOrEqual",
+            "operand": "number",
+            "compact": "le"
+        },
+        {
+            "name": "before",
+            "operand": "timestamp",
+            "compact": "bf"
+        },
+        {
+            "name": "after",
+            "operand": "timestamp",
+            "compact": "af"
+        },
+        {
+            "name": "between",
+            "operand": "range",
+            "compact": "bt",
+            "range": {
+                "memberTypes": [
+                    "number",
+                    "timestamp"
+                ],
+                "homogeneous": true,
+                "inclusive": true
+            }
+        },
+        {
+            "name": "in",
+            "operand": "scalarList",
+            "compact": "in",
+            "maxValues": 32
+        }
+    ],
+    "scopes": [
+        {
+            "scope": "request",
+            "allowsEmpty": false,
+            "fields": [
+                {
+                    "field": "referrer"
+                },
+                {
+                    "field": "query.*"
+                },
+                {
+                    "field": "header.*"
+                },
+                {
+                    "field": "cookie.*"
+                },
+                {
+                    "field": "geo.*"
+                },
+                {
+                    "field": "utm.*"
+                },
+                {
+                    "field": "device.class",
+                    "operators": [
+                        "equals",
+                        "in",
+                        "exists"
+                    ],
+                    "values": [
+                        "desktop",
+                        "mobile",
+                        "tablet",
+                        "unknown"
+                    ]
+                },
+                {
+                    "field": "time.now",
+                    "operators": [
+                        "before",
+                        "after",
+                        "between",
+                        "exists"
+                    ],
+                    "instant": true
+                },
+                {
+                    "field": "audience.memberships",
+                    "operators": [
+                        "equals",
+                        "in",
+                        "exists"
+                    ]
+                }
+            ]
+        },
+        {
+            "scope": "event",
+            "allowsEmpty": true,
+            "fields": [
+                {
+                    "field": "referrer"
+                },
+                {
+                    "field": "page.path"
+                },
+                {
+                    "field": "properties.*"
+                },
+                {
+                    "field": "utm.*"
+                }
+            ]
+        }
+    ]
+};

package/dist/internal/domain/edge/identity.js

@@ -8,7 +8,7 @@
 // - Cookie mutation helpers
 //
 // Shared by every static edge adapter; this logic has no SDK host wrapper.
-// internal/domain/audience/runtime/identity.ts imports from here as well.
+// internal/domain/audience/runtime/collect.ts imports from here as well.
 const encoder = new TextEncoder();
 const decoder = new TextDecoder();
 // ── Constants ──

package/dist/internal/domain/edge/mimic_token.js

@@ -3,8 +3,7 @@
 // Same HS256 envelope and signing key as preview; the scope claim makes the
 // tokens non-interchangeable (D-6). This validator is the twin of
 // internal/domain/edge/routing/mimic.go, pinned by the shared vector file
-// (internal/domain/edge/routing/testdata/mimic_token_vectors.json); the SDK
-// mirror for framework hosts is packages/sdk/src/mimic/core.ts.
+// (internal/domain/edge/routing/testdata/mimic_token_vectors.json).
 export const MIMIC_MAX_MEMBERSHIPS = 32;
 export const MIMIC_MAX_TOKEN_BYTES = 2048;
 export async function validateMimicToken(token, signingKey, siteId) {

package/dist/internal/domain/edge/personalization-core.d.ts

@@ -1,5 +1,4 @@
-import type { PersonalizationRequestContext, PersonalizationClaims, PersonalizationVariant, PersonalizationRoute, PersonalizationExperiment, PersonalizationIdentity, PersonalizationDecision, ClassificationData, Classification, EdgeRouteEntry } from './types.js';
-export declare function selectPersonalizationVariant(request: PersonalizationRequestContext, route: PersonalizationRoute | null, claims: PersonalizationClaims | null, experiments?: Record<string, PersonalizationExperiment>, identity?: PersonalizationIdentity): PersonalizationVariant | null;
+import type { PersonalizationRequestContext, PersonalizationClaims, PersonalizationRoute, PersonalizationExperiment, PersonalizationIdentity, PersonalizationDecision, ClassificationData, Classification, EdgeRouteEntry } from './types.js';
 export declare function resolvePersonalizationDecision(request: PersonalizationRequestContext, route: PersonalizationRoute | null, claims: PersonalizationClaims | null, experiments?: Record<string, PersonalizationExperiment>, identity?: PersonalizationIdentity): PersonalizationDecision;
 export type ExpressionFactStatus = 'present' | 'absent' | 'unavailable';
 export interface ExpressionFact {
@@ -23,6 +22,7 @@ export interface ExpressionLeafTrace {
     reason: 'matched' | 'not_matched' | 'absent' | 'unavailable';
 }
 export interface ExpressionGroupTrace {
+    path: string;
     group: 'all' | 'any';
     total: number;
     matched: number;
@@ -43,6 +43,9 @@ export declare function evaluateRequestExpression(rule: {
     all?: unknown[];
     any?: unknown[];
 }, resolve: (field: string) => ExpressionFact): RequestExpressionResult;
+export declare const EXPRESSION_OPERATORS: string[];
+export declare const EXPRESSION_NUMBER_GRAMMAR: RegExp;
+export declare const EXPRESSION_TIMESTAMP_GRAMMAR: RegExp;
 /**
  * Phase 1: Classify the visitor against all release-level rules.
  *
@@ -60,13 +63,20 @@ export declare function classify(ctx: PersonalizationRequestContext, data: Class
  * Phase 2: Decide the winning variant for a specific route.
  *
  * Uses the classification from Phase 1 for cheap set-membership lookups.
- * No rule evaluation — just set membership and priority comparison.
+ * Audience/segment rules were already evaluated in Phase 1; the one rule
+ * evaluated here is an experiment arm variant's own rule, because the arm
+ * assignment is candidacy, not entitlement (ADR 0040).
  *
  * @param record        The route entry (path, dispatch, variants)
  * @param classification The visitor's classification from Phase 1
+ * @param ctx           The request context (signal facts + rejection sink)
+ * @param claims        The verified claims the caller already holds — the
+ *                      same object passed to classify() — so an arm variant's
+ *                      audience.memberships rule resolves identically to the
+ *                      resolver path and fails closed without it (ADR 0039).
  * @returns The decision — winning variant + experiment assignment, or nulls
  */
-export declare function decide(record: EdgeRouteEntry, classification: Classification, ctx: PersonalizationRequestContext): PersonalizationDecision;
+export declare function decide(record: EdgeRouteEntry, classification: Classification, ctx: PersonalizationRequestContext, claims?: PersonalizationClaims | null): PersonalizationDecision;
 export declare const DEVICE_CLASSES: string[];
 /**
  * Classifies the request's device class from its own headers. Returns '' when