@gradial/aci 0.1.52-rc.34 → 0.1.52-rc.40

package/CHANGELOG.md

@@ -1,5 +1,46 @@
 # Changelog
 
+## 0.1.52-rc.40
+
+### Fixed
+
+- Mimic pages retain Next hydration and native 404 rendering while the hosting
+  platform owns their private response and session banner. Browser measurement
+  stays disabled for the lifetime of each mimic document, including after its
+  cookie expires or another tab exits the session. Rebuild and redeploy sites
+  with this SDK and the matching hosting platform to pick up the fix.
+
+## 0.1.52-rc.38
+
+### Migration required
+
+- Link secondary experiment goals with `goalIds` instead of the retired
+  `goalRefs` field. Remove `goalRefs` from authored documents and authoring
+  integrations; `primaryGoalRef` remains supported. See the
+  [secondary-goal migration](./migrations/experiment-goal-ids.md).
+
+## 0.1.52-rc.37
+
+### Removed
+
+- Unused edge identity helpers and types. The shared runtime retains the
+  production identity and routing behavior.
+
+## 0.1.52-rc.36
+
+### Removed
+
+- The unused compact route-record codec and static compose terminal target.
+  Static delivery selects complete HTML through the shared edge runtime.
+
+## 0.1.52-rc.35
+
+### Fixed
+
+- Next returns HTTP 404 for missing native assets and API endpoints that reach
+  the CMS catch-all without a routed release, including `/favicon.ico`, instead
+  of failing metadata and page rendering with a release-selection error.
+
 ## 0.1.52-rc.34
 
 ### Changed

package/README.md

@@ -1,6 +1,6 @@
 # Agentic Content Infrastructure SDK
 
-`@gradial/aci` `0.1.52-rc.34` is a pre-1.0 public-surface reset for the ACI
+`@gradial/aci` `0.1.52-rc.40` is a pre-1.0 public-surface reset for the ACI
 client SDK. Breaking changes from the old `0.1.x` accidental surface are
 intentional: the root import is framework-neutral, framework runtime behavior is
 behind explicit subpaths, and the first required customer path is React/Next.
@@ -8,7 +8,7 @@ behind explicit subpaths, and the first required customer path is React/Next.
 ## Install
 
 ```bash
-npm install @gradial/aci@0.1.52-rc.34 zod@^4
+npm install @gradial/aci@0.1.52-rc.40 zod@^4
 ```
 
 ## Root Import
@@ -137,13 +137,13 @@ host bundles select and serve immutable release artifacts.
 The first RC scaffold path is Next:
 
 ```bash
-npx @gradial/aci@0.1.52-rc.34 init my-site --template next-starter
+npx @gradial/aci@0.1.52-rc.40 init my-site --template next-starter
 ```
 
 List available templates:
 
 ```bash
-npx @gradial/aci@0.1.52-rc.34 init --list
+npx @gradial/aci@0.1.52-rc.40 init --list
 ```
 
 ## Personalization: The One-Tag Install

package/dist/audience-data-models.d.ts

@@ -428,7 +428,6 @@ export declare const experimentDataModel: import("./index.js").DataModelContract
     }, z.core.$strict>>;
     primaryGoalRef: z.ZodOptional<z.ZodString>;
     primaryGoalId: z.ZodOptional<z.ZodString>;
-    goalRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
     goalIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
     promotedArmId: z.ZodOptional<z.ZodString>;
     promotedAt: z.ZodOptional<z.ZodString>;
@@ -490,7 +489,6 @@ export declare const experimentationDataModels: (import("./index.js").DataModelC
     }, z.core.$strict>>;
     primaryGoalRef: z.ZodOptional<z.ZodString>;
     primaryGoalId: z.ZodOptional<z.ZodString>;
-    goalRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
     goalIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
     promotedArmId: z.ZodOptional<z.ZodString>;
     promotedAt: z.ZodOptional<z.ZodString>;
@@ -923,7 +921,6 @@ export declare const audienceDataModels: (import("./index.js").DataModelContract
     }, z.core.$strict>>;
     primaryGoalRef: z.ZodOptional<z.ZodString>;
     primaryGoalId: z.ZodOptional<z.ZodString>;
-    goalRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
     goalIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
     promotedArmId: z.ZodOptional<z.ZodString>;
     promotedAt: z.ZodOptional<z.ZodString>;

package/dist/audience-data-models.js

@@ -385,7 +385,6 @@ export const experimentDataModel = defineDataModel({
         }).strict().optional(),
         primaryGoalRef: z.string().optional(),
         primaryGoalId: z.string().optional(),
-        goalRefs: z.array(z.string().regex(/\S/, 'entries must be non-blank')).optional(),
         goalIds: z.array(z.string().regex(/\S/, 'entries must be non-blank')).optional(),
         promotedArmId: z.string().optional(),
         promotedAt: z.string().optional(),

package/dist/collect/aci.js

@@ -1 +1 @@
-"use strict";(()=>{var Me=Object.defineProperty;var je=(t,e,n)=>e in t?Me(t,e,{enumerable:!0,configurable:!0,writable:!0,value:n}):t[e]=n;var b=(t,e,n)=>je(t,typeof e!="symbol"?e+"":e,n);var We="experiment.exposure",Ge='script[type="application/json"][data-aci-assignments]';function H(t){if(typeof t!="object"||t===null)return null;let e=t,n=e.experimentId,r=e.armId,o=e.allocationVersion;return typeof n!="string"||n===""||typeof r!="string"||r===""||typeof o!="string"?null:{experimentId:n,armId:r,allocationVersion:o}}function M(t,e){try{let n=t.querySelector(Ge);if(!n)return[];let r=n.textContent;if(r==null||r.trim()==="")return[];let o=JSON.parse(r);if(typeof o!="object"||o===null)return e==null||e("capture",{reason:"assignments_malformed"}),[];let i=o;if(i.v!==1||!Array.isArray(i.experiments))return e==null||e("capture",{reason:"assignments_malformed"}),[];let s=[];for(let a of i.experiments){let c=H(a);c&&!s.some(u=>u.experimentId===c.experimentId)&&s.push(c)}return s}catch(n){return e==null||e("capture",{reason:"assignments_parse_failed",error:String(n)}),[]}}function ne(t,e){if(!e||t.experiments!==void 0)return t;let n=e.getActiveAssignments();return n.length===0?t:{...t,experiments:n}}function te(t){let e=[],n=new Set,r,o=i=>{e=(i!=null?i:M(t.document,t.debug)).map(s=>({...s}));for(let s of e)n.has(s.experimentId)||(n.add(s.experimentId),r==null||r({eventName:We,url:t.window.location.href,experiments:[{experimentId:s.experimentId,armId:s.armId,allocationVersion:s.allocationVersion}]}))};return{getActiveAssignments:()=>e.map(i=>({...i})),start(i){r=i,o()},clear(){e=[]},rearm(i){n.clear(),o(i)}}}var L="data-aci-event",ze="data-aci-on",re="data-aci-prop-",qe="data-aci-refresh",oe="custom.";function j(t){if(typeof t!="string")return;let e=t.trim().toLowerCase();if(!(e===""||/[\s/]/.test(e)))return e.startsWith(oe)?e:oe+e}function $e(t){let e;for(let n of Array.from(t.attributes)){if(!n.name.startsWith(re))continue;let r=n.name.slice(re.length);r!==""&&((e!=null?e:e={})[r]=n.value)}return e}function ie(t,e,n){let r=j(t.getAttribute(L));if(r===void 0){n==null||n("capture",{reason:"malformed_declaration",attr:L});return}return{eventName:r,url:e,properties:$e(t)}}function se(t){var e,n;return(n=(e=t.getAttribute(ze))==null?void 0:e.trim().toLowerCase())!=null?n:"click"}function ae(t,e,n){var d;let{document:r,debug:o}=e,i=(d=r.defaultView)==null?void 0:d.location;r.addEventListener("click",p=>{var f,g;try{let m=p.target;if((f=m==null?void 0:m.closest)==null?void 0:f.call(m,`[${qe}]`)){n==null||n();return}let l=(g=m==null?void 0:m.closest)==null?void 0:g.call(m,`[${L}]`);if(!l||se(l)!=="click")return;let h=ie(l,i==null?void 0:i.href,o);h&&t(h)}catch(m){o==null||o("capture",{reason:"click_handler_failed",error:String(m)})}});let s=e.intersectionObserver;if(typeof s!="function")return;let a=Array.from(r.querySelectorAll(`[${L}]`)).filter(p=>se(p)==="visible");if(a.length===0)return;let c=new WeakSet,u=new s((p,f)=>{try{for(let g of p){if(!g.isIntersecting||g.intersectionRatio<.5||c.has(g.target))continue;c.add(g.target),f.unobserve(g.target);let m=ie(g.target,i==null?void 0:i.href,o);m&&t(m)}}catch(g){o==null||o("capture",{reason:"visible_handler_failed",error:String(g)})}},{threshold:.5});for(let p of a)u.observe(p)}function W(t){return typeof t=="object"&&t!==null&&!Array.isArray(t)}function ce(t,e,n){let r=(...s)=>{try{let[a,...c]=s;if(a==="navigation-complete"){let u=c[0];if(!W(u)||typeof u.url!="string"||!/^https?:\/\//.test(u.url)||!Array.isArray(u.assignments)||u.assignments.length>16){n==null||n("capture",{reason:"malformed_navigation_completion"});return}let d=[];for(let p of u.assignments){let f=H(p);if(!f||d.some(g=>g.experimentId===f.experimentId)){n==null||n("capture",{reason:"malformed_navigation_completion"});return}d.push(f)}e.navigationComplete({url:u.url,assignments:d});return}if(a==="track"){let u=j(c[0]);if(u===void 0){n==null||n("capture",{reason:"malformed_track_name",name:c[0]});return}let d=c[1];if(d!==void 0&&!W(d)){n==null||n("capture",{reason:"malformed_track_properties",name:u});return}e.track(u,d);return}if(a==="consent"){let u=c[0];if(!W(u)){n==null||n("consent",{reason:"malformed_consent_envelope"});return}e.consent({p:u.p,src:u.src});return}n==null||n("capture",{reason:"unknown_command",command:a})}catch(a){n==null||n("capture",{reason:"command_failed",error:String(a)})}},o=t.aci,i=o==null?void 0:o.q;if(t.aci=r,i!=null)for(let s of Array.from(i)){let a=Array.from(s);r(...a)}}var ue="0123456789ABCDEFGHJKMNPQRSTVWXYZ";function Ue(t){globalThis.crypto.getRandomValues(t)}function A(t,e){let n=t!=null?t:Date.now(),r="";for(let c=0;c<10;c++)r=ue[n%32]+r,n=Math.floor(n/32);let o=new Uint8Array(10);(e!=null?e:Ue)(o);let i="",s=0,a=0;for(let c of o)for(s=s<<8|c,a+=8;a>=5;)i+=ue[s>>>a-5&31],a-=5;return r+i}var Xe=60*1024,Ke=100,Ye=5e3,le='{"envelopeId":"',de='","events":[',fe="]}",Je=26,I=le.length+Je+de.length+fe.length,Ze=new TextEncoder,Qe=t=>Ze.encode(t).length,O=class{constructor(e){b(this,"options");b(this,"maxBytes");b(this,"queue",[]);b(this,"queuedBytes",0);b(this,"flushing",!1);b(this,"intervalId");var n;this.options=e,this.maxBytes=(n=e.maxBatchBytes)!=null?n:Xe}get pending(){return this.queue.length}push(e){let n=JSON.stringify(e),r=Qe(n);this.queue.push({json:n,bytes:r,eventId:e.eventId}),this.queuedBytes+=r,!this.flushing&&this.envelopeBytes()>=this.maxBytes&&this.flush()}flush(){var e,n;if(!this.flushing){this.flushing=!0;try{(n=(e=this.options).onTick)==null||n.call(e),this.drain()}finally{this.flushing=!1}}}start(){var o,i,s,a;let e=(o=this.options.timers)!=null?o:{setInterval:(c,u)=>setInterval(c,u),clearInterval:c=>clearInterval(c)};this.intervalId=e.setInterval(()=>this.flush(),(i=this.options.flushIntervalMs)!=null?i:Ye);let n=(s=this.options.documentTarget)!=null?s:typeof document!="undefined"?document:void 0;n==null||n.addEventListener("visibilitychange",()=>{n.visibilityState==="hidden"&&this.flush()});let r=(a=this.options.windowTarget)!=null?a:typeof window!="undefined"?window:void 0;r==null||r.addEventListener("pagehide",()=>this.flush()),this.flush()}stop(){if(this.intervalId!==void 0){let e=this.options.timers;e?e.clearInterval(this.intervalId):clearInterval(this.intervalId),this.intervalId=void 0}}envelopeBytes(){let e=this.queue.length>1?this.queue.length-1:0;return I+this.queuedBytes+e}drain(){var e,n,r;for(;this.queue.length>0;){let o=this.queue[0];if(I+o.bytes>this.maxBytes){this.queue.shift(),this.queuedBytes-=o.bytes,(n=(e=this.options).debug)==null||n.call(e,"flush",{reason:"oversize_event",eventId:o.eventId,bytes:o.bytes});continue}let i=[],s=I;for(;this.queue.length>0;){let c=this.queue[0];if(I+c.bytes>this.maxBytes||i.length>=Ke)break;let u=s+c.bytes+(i.length>0?1:0);if(u>this.maxBytes)break;i.push(c.json),s=u,this.queue.shift(),this.queuedBytes-=c.bytes}if(i.length===0)continue;let a=((r=this.options.createEnvelopeId)!=null?r:A)();this.options.send(le+a+de+i.join(",")+fe)}}};var G=new TextEncoder,en=2048,nn=32,tn=128,rn=512,on=2147483647,sn=/^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,9}))?(Z|[+-]\d{2}:\d{2})$/,an=/^[\t\n\v\f\r ]+|[\t\n\v\f\r ]+$/g,cn=new Set(["true","all","granted","yes","personalization","personalized"]);function x(t,e=!0){let n=S(t);if(!n)return null;if(e)try{n=decodeURIComponent(n)}catch{}if(n=S(n),!n||G.encode(n).byteLength>en)return null;if(cn.has(n.toLowerCase()))return{version:0,purposes:["personalization"],grantedAt:""};try{let r=JSON.parse(n),o=typeof r.t=="string"?r.t:"";return!Number.isInteger(r.v)||r.v<0||r.v>on||!Array.isArray(r.p)||r.p.length>nn||!r.p.every(i=>typeof i=="string")||r.p.some(i=>G.encode(i).byteLength>tn)||r.t!==void 0&&r.t!==null&&(typeof r.t!="string"||r.t===""||!un(r.t))||r.src!==void 0&&r.src!==null&&typeof r.src!="string"||typeof r.src=="string"&&G.encode(r.src).byteLength>rn?null:{version:r.v,purposes:r.p,grantedAt:o,source:typeof r.src=="string"?r.src:void 0}}catch{return null}}function z(t){return(t==null?void 0:t.purposes.some(e=>S(e).toLowerCase()==="personalization"))||!1}function S(t){return t.replace(an,"")}function un(t){let e=sn.exec(t);if(!e||Number.isNaN(Date.parse(t)))return!1;let n=Number(e[1]),r=Number(e[2]),o=Number(e[3]),i=Number(e[4]),s=Number(e[5]),a=Number(e[6]);if(r<1||r>12||o<1||o>ln(n,r)||i>23||s>59||a>59)return!1;let c=e[8];return c==="Z"||Number(c.slice(1,3))<=23&&Number(c.slice(4,6))<=59}function ln(t,e){return e===2?t%4===0&&(t%100!==0||t%400===0)?29:28:[4,6,9,11].includes(e)?30:31}var $="personalization",q="aci_consent",U=1,dn=365*24*60*60;function fn(t,e){var r;let n=`${q}=${t.encoded}; Path=/; Max-Age=${dn}; SameSite=Lax`;((r=e.document.location)==null?void 0:r.protocol)==="https:"&&(n+="; Secure"),e.document.cookie=n}function N(t,e,n){var o,i;let r=pn(t,e,n.now);return r===null?!1:(z(r.snapshot)||(o=n.gapBuffer)==null||o.purge(),fn(r,n),(i=n.onDecision)==null||i.call(n),!0)}function P(t){for(let e of t.cookie.split(";")){let n=S(e);if(n.startsWith(q+"="))return n.slice(q.length+1)}}function pe(t){return t===void 0||t===""?!1:z(x(t,!0))}function me(t){var r;if(!Array.isArray(t))return;let e=[];for(let o of t){if(typeof o!="string")return;e.push(S(o))}let n=JSON.stringify({v:U,p:e});return(r=x(n,!1))==null?void 0:r.purposes}function ge(t){var o;if(t!==void 0&&typeof t!="string")return;let e=typeof t=="string"?S(t):"",r=JSON.stringify({v:U,p:[],src:e===""?"manual":e});return(o=x(r,!1))==null?void 0:o.source}function pn(t,e,n){try{let r=JSON.stringify({v:U,p:t,t:new Date((n!=null?n:Date.now)()).toISOString(),src:e}),o=x(r,!1);return o===null?null:{encoded:encodeURIComponent(r),snapshot:o}}catch{return null}}var mn="data-aci-consent-banner";var gn="data-aci-consent-banner-mount",ve="aci:consent-banner-decided";function vn(t){return P(t)!==void 0}function he(t){return vn(t)?!1:t.querySelector(`[${gn}], [${mn}]`)!==null}var hn=new Set(["c15t","onetrust","cookiebot","trustarc","manual"]);function D(t,e){var o;let n=(o=t==null?void 0:t.getAttribute)==null?void 0:o.call(t,e);if(n==null)return;let r=n.trim();return r===""?void 0:r}function be(t){var r;let e=(r=D(t,"data-aci-consent"))==null?void 0:r.toLowerCase(),n=e!==void 0&&hn.has(e)?e:"manual";return{site:D(t,"data-aci-site"),preset:n,categories:D(t,"data-aci-consent-categories"),debug:D(t,"data-aci-debug")==="1"}}function Ee(t,e,n){if(!t)return()=>{};let r=e!=null?e:(i=>console.debug("[aci]",i)),o=n!=null?n:Date.now;return(i,s)=>{try{r({t:o(),kind:i,detail:s})}catch{}}}var R=class{constructor(e){b(this,"events",[]);b(this,"now");b(this,"debug");var n;this.now=(n=e==null?void 0:e.now)!=null?n:Date.now,this.debug=e==null?void 0:e.debug}push(e){var n;if(this.expire(),this.events.length>=50){(n=this.debug)==null||n.call(this,"buffer",{reason:"consent_hold_cap_drop_newest",eventId:e.eventId});return}this.events.push({event:e,heldAt:this.now()})}size(){return this.events.length}release(){this.expire();let e=this.events.map(n=>n.event);return this.events=[],e}discard(e){var n;this.events.length>0&&((n=this.debug)==null||n.call(this,"buffer",{reason:`consent_hold_discarded_${e}`,count:this.events.length})),this.events=[]}expire(){var r;let e=this.now()-18e5,n=0;for(;n<this.events.length&&this.events[n].heldAt<e;)n+=1;n>0&&(this.events.splice(0,n),(r=this.debug)==null||r.call(this,"buffer",{reason:"consent_hold_expired",count:n}))}};function ye(t,e){var r;if(t.size()===0||!e.decided())return;if(!e.grants()){t.discard("denied");return}let n=t.release();for(let o of n)e.batcher.push(o);(r=e.debug)==null||r.call(e,"buffer",{reason:"consent_hold_released",count:n.length})}var bn="cmp-",En=/^[a-z0-9._-]+$/,yn={c15t:"measurement,marketing",onetrust:"c0002,c0004",cookiebot:"statistics,marketing",trustarc:"functional,advertising"};function X(t,e){let n=e!=null?e:yn[t];if(n===void 0)return null;let r=n.split(",").map(o=>o.trim().toLowerCase()).filter(o=>o!=="");if(r.length===0)return null;for(let o of r)if(!En.test(o))return null;return r}function Cn(t,e){return e.filter(r=>r in t.categories).some(r=>t.categories[r]===!0)?[$]:[]}function _(t,e,n){var r,o,i,s;try{let a=X(e,n.categories);if(a===null){(r=n.debug)==null||r.call(n,"consent",{reason:"unparseable_mapping",preset:e});return}if(a.filter(d=>d in t.categories).length===0){(o=n.debug)==null||o.call(n,"consent",{reason:"unmappable_cmp_state",preset:e});return}let u=Cn(t,a);N(u,bn+e,{document:n.document,gapBuffer:n.gapBuffer,now:n.now,onDecision:n.onDecision}),(i=n.debug)==null||i.call(n,"consent",{reason:"written",preset:e,purposes:u})}catch(a){(s=n.debug)==null||s.call(n,"consent",{reason:"consent_bridge_failed",preset:e,error:String(a)})}}var Ce=250,kn=1e4;function w(t,e,n){var s;let r=(s=n==null?void 0:n.scheduler)!=null?s:{setTimeout:(a,c)=>setTimeout(a,c),clearTimeout:a=>clearTimeout(a)},o=Math.floor(kn/Ce),i=()=>{var c,u;let a;try{a=t()}catch(d){(c=n==null?void 0:n.debug)==null||c.call(n,"consent",{reason:"cmp_read_failed",error:String(d)});return}if(a!==void 0){e(a);return}if(o-=1,o<=0){(u=n==null?void 0:n.debug)==null||u.call(n,"consent",{reason:"cmp_not_found"});return}r.setTimeout(i,Ce)};i()}function y(t,e){try{e()}catch(n){t==null||t("consent",{reason:"adapter_failed",error:String(n)})}}var _n="c15t";function wn(t){if(typeof t!="object"||t===null)return;let e={};for(let[n,r]of Object.entries(t))typeof r=="boolean"&&(e[n.toLowerCase()]=r);return{categories:e}}function Sn(t,e){return typeof t=="object"&&t!==null?"consents"in t?t.consents:t:e.consents}function ke(t){w(()=>{let e=t.window.c15t;return typeof e=="object"&&e!==null?e:void 0},e=>{y(t.debug,()=>{var r;let n=o=>{let i=wn(o);i&&_(i,_n,t)};n(e.consents),(r=e.onConsentChange)==null||r.call(e,o=>y(t.debug,()=>n(Sn(o,e))))})},t)}var An="cookiebot",xn=["CookiebotOnConsentReady","CookiebotOnAccept","CookiebotOnDecline"];function _e(t){let e=t.Cookiebot;return typeof e=="object"&&e!==null?e:void 0}function Nn(t){if(typeof t!="object"||t===null)return;let e={};for(let[n,r]of Object.entries(t))typeof r=="boolean"&&(e[n.toLowerCase()]=r);return{categories:e}}function we(t){let e=()=>{let r=_e(t.window);if(!r||r.hasResponse!==!0)return;let o=Nn(r.consent);o&&_(o,An,t)},n=t.window;if(typeof n.addEventListener=="function")for(let r of xn)n.addEventListener(r,()=>y(t.debug,e));w(()=>_e(t.window),()=>y(t.debug,e),t)}var Se="onetrust",Pn=/^c\d{4}$/;function Tn(t,e){let n={};for(let r of t.split(",")){let o=r.trim().toLowerCase();o!==""&&(n[o]=!0)}for(let r of e!=null?e:[])!(r in n)&&Pn.test(r)&&(n[r]=!1);return{categories:n}}function Ae(t){let e=t.window,n=()=>{let o=e.OnetrustActiveGroups;if(typeof o!="string")return;let i=X(Se,t.categories);_(Tn(o,i),Se,t)},r=e.OptanonWrapper;e.OptanonWrapper=()=>{if(typeof r=="function")try{r()}catch{}y(t.debug,n)},w(()=>{let o=e.OnetrustActiveGroups;return typeof o=="string"?o:void 0},()=>y(t.debug,n),t)}var Ln="trustarc",In={required:1,functional:2,advertising:3},xe="PrivacyManagerAPI";function Ne(t){let e=t.truste,n=e==null?void 0:e.cma,r=n==null?void 0:n.callApi;return typeof r=="function"?r.bind(n):void 0}function On(t){if(typeof t!="object"||t===null)return;let e=t.consentDecision;if(typeof e!="number"||!Number.isFinite(e)||e<1)return;let n={};for(let[r,o]of Object.entries(In))n[r]=e>=o;return{categories:n}}function Dn(t){return typeof t=="string"?t.includes(xe):typeof t=="object"&&t!==null&&xe in t}function Rn(t){let e=t.location;return typeof(e==null?void 0:e.hostname)=="string"?e.hostname:void 0}function Pe(t){let e=()=>{let r=Ne(t.window);if(!r)return;let o=On(r("getConsentDecision",Rn(t.window)));o&&_(o,Ln,t)},n=t.window;typeof n.addEventListener=="function"&&n.addEventListener("message",r=>y(t.debug,()=>{Dn(r==null?void 0:r.data)&&e()})),w(()=>Ne(t.window),()=>y(t.debug,e),t)}var B="aci:buf";var Te="aci_m",F=class{constructor(e){b(this,"events",[]);b(this,"storage");b(this,"debug");this.debug=e==null?void 0:e.debug,this.storage=e==null?void 0:e.storage}push(e){var n;this.events=this.restore(),this.events.push(e),this.events.length>50&&(this.events.splice(0,this.events.length-50),(n=this.debug)==null||n.call(this,"buffer",{reason:"cap_drop_oldest"})),this.persist()}drain(){let e=this.restore();return this.events=[],this.persist(),e}purge(){var e;this.events=this.restore(),this.events.length>0&&((e=this.debug)==null||e.call(this,"buffer",{reason:"purged",count:this.events.length})),this.events=[],this.persist()}size(){return this.restore().length}restore(){var r;let e=this.storage;if(!e)return this.events;let n;try{n=e.getItem(B)}catch(o){return this.storage=void 0,(r=this.debug)==null||r.call(this,"buffer",{reason:"storage_unavailable",error:String(o)}),[]}if(n==null)return[];try{let o=JSON.parse(n);if(Array.isArray(o))return o}catch{}try{e.removeItem(B)}catch{this.storage=void 0}return[]}persist(){var n;let e=this.storage;if(e)try{this.events.length===0?e.removeItem(B):e.setItem(B,JSON.stringify(this.events)),this.events=[]}catch(r){this.storage=void 0,(n=this.debug)==null||n.call(this,"buffer",{reason:"storage_unavailable",error:String(r)})}}};function Le(t){for(let e of t.cookie.split(";")){let n=e.trim();if(n.startsWith(Te+"="))return n.slice(Te.length+1)!==""}return!1}function Ie(t,e){var n;if(e.consentHold&&((n=e.consentPending)!=null&&n.call(e))){e.consentHold.push(t);return}if(e.grants()&&!e.marker()){e.gapBuffer.push(t);return}e.batcher.push(t)}function K(t,e,n,r){if(t.size()===0||!n())return;let o=t.drain();for(let i of o)e.push(i);r==null||r("buffer",{reason:"flushed",count:o.length})}var Bn="rum.link_click";function Oe(t,e){var i;let{document:n,debug:r}=e,o=(i=n.defaultView)==null?void 0:i.location;n.addEventListener("click",s=>{var a,c,u;try{let d=s.target,p=(a=d==null?void 0:d.closest)==null?void 0:a.call(d,"a[href]");if(!p)return;let f=p;t({eventName:Bn,url:o==null?void 0:o.href,properties:{linkText:(u=(c=f.textContent)==null?void 0:c.trim())!=null?u:"",linkHref:f.href}})}catch(d){r==null||r("capture",{reason:"link_click_failed",error:String(d)})}},{capture:!0})}var Fn="rum.page_view";function V(t){let e=t.indexOf("#");return e===-1?t:t.slice(0,e)}function De(t,e,n=()=>{}){let r=V(t.location.href),o=r,i=!1,s=()=>{let c=V(t.location.href);c!==r&&(r=c,i=!0,n())},a=t.history;for(let c of["pushState","replaceState"]){let u=a[c].bind(a);a[c]=(...d)=>{let p=u(...d);return s(),p}}return t.addEventListener("popstate",s),{complete({url:c,assignments:u}){let d=V(t.location.href);if(V(c)===d&&(s(),!(!i&&o===d))){i=!1,o=d;for(let p of e)p(u)}}}}function Re(t,e){let n=()=>t({eventName:Fn,url:e.location.href,referrer:e.document.referrer});return n(),n}var Y="/collect";function Be(t,e){let n=e==null?void 0:e.debug,r=e!==void 0&&"navigator"in e?e.navigator:globalThis.navigator,o=e!==void 0&&"fetch"in e?e.fetch:globalThis.fetch,i;try{i=new Blob([t],{type:"text/plain"})}catch{n==null||n("flush",{reason:"no_blob"});return}if(r!=null&&r.sendBeacon)try{if(r.sendBeacon(Y,i))return}catch{}if(!o){n==null||n("flush",{reason:"no_transport"});return}try{o(Y,{method:"POST",body:i,keepalive:!0}).catch(s=>{n==null||n("flush",{reason:"fetch_failed",error:String(s)})})}catch(s){n==null||n("flush",{reason:"fetch_failed",error:String(s)})}}function Fe(t){var n,r;let e=t!==void 0&&"fetch"in t?t.fetch:globalThis.fetch;if(!e)return Promise.resolve(!1);try{let o=((n=t==null?void 0:t.createEnvelopeId)!=null?n:A)(),i=new Blob([`{"envelopeId":"${o}","events":[]}`],{type:"text/plain"});return e(Y,{method:"POST",body:i,keepalive:!0,credentials:"same-origin"}).then(s=>{var a;return typeof s=="object"&&s!==null&&"ok"in s&&s.ok===!1?((a=t==null?void 0:t.debug)==null||a.call(t,"flush",{reason:"refresh_failed",status:"not_ok"}),!1):!0}).catch(s=>{var a;return(a=t==null?void 0:t.debug)==null||a.call(t,"flush",{reason:"refresh_failed",error:String(s)}),!1})}catch(o){return(r=t==null?void 0:t.debug)==null||r.call(t,"flush",{reason:"refresh_failed",error:String(o)}),Promise.resolve(!1)}}var Vn="rum.variation_view",J="data-aci-variation";function Ve(t,e){var u,d,p;let{document:n,debug:r}=e,o=e.MutationObserver;if(typeof o!="function")return;let i=(u=n.defaultView)==null?void 0:u.location,s=new WeakSet,a=f=>{let g=f.getAttribute(J);g!=null&&(s.has(f)||(s.add(f),t({eventName:Vn,url:i==null?void 0:i.href,properties:{variantKey:g}})))},c=f=>{try{f.hasAttribute(J)&&a(f);for(let g of Array.from(f.querySelectorAll(`[${J}]`)))a(g)}catch(g){r==null||r("capture",{reason:"variation_scan_failed",error:String(g)})}};try{let f=(d=n.body)!=null?d:n.documentElement;f&&c(f)}catch(f){r==null||r("capture",{reason:"variation_initial_scan_failed",error:String(f)})}try{let f=(p=n.body)!=null?p:n.documentElement;if(!f)return;new o(m=>{try{for(let E of m)for(let l=0;l<E.addedNodes.length;l++){let h=E.addedNodes[l];if((h==null?void 0:h.nodeType)!==1)continue;let C=h.element;C&&c(C)}}catch(E){r==null||r("capture",{reason:"variation_observer_failed",error:String(E)})}}).observe(f,{subtree:!0,childList:!0})}catch(f){r==null||r("capture",{reason:"variation_observe_failed",error:String(f)})}}var Hn="rum.web_vital";function He(t,e){var g,m,E;let n=e.PerformanceObserver;if(typeof n!="function")return;let{performance:r,debug:o}=e,i=(m=(g=e.window)==null?void 0:g.location)==null?void 0:m.href,s=e.document,a=new Set,c=(l,h)=>{a.has(l)||(a.add(l),t({eventName:Hn,url:i,properties:{vitalName:l,vitalValue:h}}))};try{let l=r==null?void 0:r.getEntriesByType("navigation")[0];l&&typeof l.responseStart=="number"&&typeof l.requestStart=="number"&&c("TTFB",l.responseStart-l.requestStart)}catch(l){o==null||o("capture",{reason:"ttfb_failed",error:String(l)})}let u=0,d=0,p=(l,h)=>{try{new n(T=>{try{for(let v of T.getEntries())h(v)}catch(v){o==null||o("capture",{reason:`${l}_handler_failed`,error:String(v)})}}).observe({type:l,buffered:!0})}catch(C){o==null||o("capture",{reason:`${l}_observe_failed`,error:String(C)})}};p("largest-contentful-paint",l=>{c("LCP",l.startTime)}),p("first-input",l=>{c("FID",l.startTime)}),p("layout-shift",l=>{var h;l.hadRecentInput||(u+=(h=l.value)!=null?h:0)}),p("event",l=>{var C;let h=(C=l.value)!=null?C:0;h>d&&(d=h)}),p("paint",l=>{l.name==="first-contentful-paint"&&c("FCP",l.startTime)});let f=()=>{try{a.has("CLS")||c("CLS",u),a.has("INP")||c("INP",d)}catch(l){o==null||o("capture",{reason:"visibility_handler_failed",error:String(l)})}};s&&s.addEventListener("visibilitychange",()=>{s.visibilityState==="hidden"&&f()}),(E=e.window)==null||E.addEventListener("pagehide",f)}var Z={c15t:ke,onetrust:Ae,cookiebot:we,trustarc:Pe};function Mn(t){var e,n;return typeof((e=t.navigator)==null?void 0:e.sendBeacon)=="function"&&typeof t.IntersectionObserver=="function"&&typeof((n=t.crypto)==null?void 0:n.getRandomValues)=="function"}function jn(t){try{return t.sessionStorage}catch{return}}function Wn(t){var o;let e=t!=null?t:typeof window!="undefined"?window:void 0;if(!e||e.__aci_loaded||(e.__aci_loaded=!0,!Mn(e)))return;let n=be(e.document.currentScript),r=Ee(n.debug);try{let i=e.document,s=new F({storage:jn(e),debug:r}),a=()=>{try{return pe(P(i))}catch{return!1}},c=()=>{try{return Le(i)}catch{return!1}},u=()=>{try{return P(i)!==void 0}catch{return!1}},d=n.preset==="manual"?()=>{try{return he(i)}catch{return!1}}:()=>!0,p=new R({debug:r}),f=()=>!u()&&!c()&&d(),g={navigator:e.navigator,fetch:typeof e.fetch=="function"?e.fetch.bind(e):void 0,debug:r},m;m=new O({send:v=>Be(v,g),debug:r,onTick:()=>{ye(p,{decided:u,grants:a,batcher:m,debug:r}),K(s,m,c,r)},timers:{setInterval:(v,k)=>e.setInterval(v,k),clearInterval:v=>e.clearInterval(v)},documentTarget:i,windowTarget:e});let E=te({document:i,window:e,debug:r}),l=v=>{Ie({...ne(v,E),eventId:A(void 0,k=>e.crypto.getRandomValues(k))},{grants:a,marker:c,gapBuffer:s,batcher:m,consentHold:p,consentPending:f})},h=()=>m.flush();i.addEventListener(ve,h),E.start(l);let C=()=>{},T=De(e,[v=>E.rearm(v),()=>C()],()=>E.clear());i.addEventListener("astro:page-load",()=>T.complete({url:e.location.href,assignments:M(i,r)})),ce(e,{navigationComplete:v=>T.complete(v),track:(v,k)=>l({eventName:v,properties:k,url:e.location.href}),consent:({p:v,src:k})=>{let Q=me(v);if(Q===void 0){r("consent",{reason:"malformed_purposes"});return}let ee=ge(k);if(ee===void 0){r("consent",{reason:"malformed_source"});return}N(Q,ee,{document:i,gapBuffer:s,onDecision:h})||r("consent",{reason:"oversized_envelope"})}},r),C=Re(l,e),ae(l,{document:i,intersectionObserver:e.IntersectionObserver,debug:r},()=>{Fe(g).then(v=>{v&&e.location.reload()})}),Oe(l,{document:i,debug:r}),He(l,{performance:e.performance,PerformanceObserver:e.PerformanceObserver,window:e,document:i,debug:r}),Ve(l,{document:i,MutationObserver:e.MutationObserver,debug:r}),n.preset!=="manual"&&((o=Z[n.preset])==null||o.call(Z,{window:e,document:i,categories:n.categories,gapBuffer:s,onDecision:h,debug:r,scheduler:{setTimeout:(v,k)=>e.setTimeout(v,k),clearTimeout:v=>e.clearTimeout(v)}})),m.start(),e.addEventListener("pagehide",()=>p.discard("unload")),K(s,m,c,r),r("init",{config:n})}catch(i){r("init",{error:String(i)})}}Wn();})();
+"use strict";(()=>{var je=Object.defineProperty;var We=(t,e,n)=>e in t?je(t,e,{enumerable:!0,configurable:!0,writable:!0,value:n}):t[e]=n;var E=(t,e,n)=>We(t,typeof e!="symbol"?e+"":e,n);var Ge="experiment.exposure",ze='script[type="application/json"][data-aci-assignments]';function M(t){if(typeof t!="object"||t===null)return null;let e=t,n=e.experimentId,r=e.armId,o=e.allocationVersion;return typeof n!="string"||n===""||typeof r!="string"||r===""||typeof o!="string"?null:{experimentId:n,armId:r,allocationVersion:o}}function j(t,e){try{let n=t.querySelector(ze);if(!n)return[];let r=n.textContent;if(r==null||r.trim()==="")return[];let o=JSON.parse(r);if(typeof o!="object"||o===null)return e==null||e("capture",{reason:"assignments_malformed"}),[];let i=o;if(i.v!==1||!Array.isArray(i.experiments))return e==null||e("capture",{reason:"assignments_malformed"}),[];let s=[];for(let a of i.experiments){let c=M(a);c&&!s.some(u=>u.experimentId===c.experimentId)&&s.push(c)}return s}catch(n){return e==null||e("capture",{reason:"assignments_parse_failed",error:String(n)}),[]}}function te(t,e){if(!e||t.experiments!==void 0)return t;let n=e.getActiveAssignments();return n.length===0?t:{...t,experiments:n}}function re(t){let e=[],n=new Set,r,o=i=>{e=(i!=null?i:j(t.document,t.debug)).map(s=>({...s}));for(let s of e)n.has(s.experimentId)||(n.add(s.experimentId),r==null||r({eventName:Ge,url:t.window.location.href,experiments:[{experimentId:s.experimentId,armId:s.armId,allocationVersion:s.allocationVersion}]}))};return{getActiveAssignments:()=>e.map(i=>({...i})),start(i){r=i,o()},clear(){e=[]},rearm(i){n.clear(),o(i)}}}var I="data-aci-event",qe="data-aci-on",oe="data-aci-prop-",$e="data-aci-refresh",ie="custom.";function W(t){if(typeof t!="string")return;let e=t.trim().toLowerCase();if(!(e===""||/[\s/]/.test(e)))return e.startsWith(ie)?e:ie+e}function Ue(t){let e;for(let n of Array.from(t.attributes)){if(!n.name.startsWith(oe))continue;let r=n.name.slice(oe.length);r!==""&&((e!=null?e:e={})[r]=n.value)}return e}function se(t,e,n){let r=W(t.getAttribute(I));if(r===void 0){n==null||n("capture",{reason:"malformed_declaration",attr:I});return}return{eventName:r,url:e,properties:Ue(t)}}function ae(t){var e,n;return(n=(e=t.getAttribute(qe))==null?void 0:e.trim().toLowerCase())!=null?n:"click"}function ce(t,e,n){var d;let{document:r,debug:o}=e,i=(d=r.defaultView)==null?void 0:d.location;r.addEventListener("click",p=>{var f,m;try{let v=p.target;if((f=v==null?void 0:v.closest)==null?void 0:f.call(v,`[${$e}]`)){n==null||n();return}let l=(m=v==null?void 0:v.closest)==null?void 0:m.call(v,`[${I}]`);if(!l||ae(l)!=="click")return;let g=se(l,i==null?void 0:i.href,o);g&&t(g)}catch(v){o==null||o("capture",{reason:"click_handler_failed",error:String(v)})}});let s=e.intersectionObserver;if(typeof s!="function")return;let a=Array.from(r.querySelectorAll(`[${I}]`)).filter(p=>ae(p)==="visible");if(a.length===0)return;let c=new WeakSet,u=new s((p,f)=>{try{for(let m of p){if(!m.isIntersecting||m.intersectionRatio<.5||c.has(m.target))continue;c.add(m.target),f.unobserve(m.target);let v=se(m.target,i==null?void 0:i.href,o);v&&t(v)}}catch(m){o==null||o("capture",{reason:"visible_handler_failed",error:String(m)})}},{threshold:.5});for(let p of a)u.observe(p)}function G(t){return typeof t=="object"&&t!==null&&!Array.isArray(t)}function ue(t,e,n){let r=(...s)=>{try{let[a,...c]=s;if(a==="navigation-complete"){let u=c[0];if(!G(u)||typeof u.url!="string"||!/^https?:\/\//.test(u.url)||!Array.isArray(u.assignments)||u.assignments.length>16){n==null||n("capture",{reason:"malformed_navigation_completion"});return}let d=[];for(let p of u.assignments){let f=M(p);if(!f||d.some(m=>m.experimentId===f.experimentId)){n==null||n("capture",{reason:"malformed_navigation_completion"});return}d.push(f)}e.navigationComplete({url:u.url,assignments:d});return}if(a==="track"){let u=W(c[0]);if(u===void 0){n==null||n("capture",{reason:"malformed_track_name",name:c[0]});return}let d=c[1];if(d!==void 0&&!G(d)){n==null||n("capture",{reason:"malformed_track_properties",name:u});return}e.track(u,d);return}if(a==="consent"){let u=c[0];if(!G(u)){n==null||n("consent",{reason:"malformed_consent_envelope"});return}e.consent({p:u.p,src:u.src});return}n==null||n("capture",{reason:"unknown_command",command:a})}catch(a){n==null||n("capture",{reason:"command_failed",error:String(a)})}},o=t.aci,i=o==null?void 0:o.q;if(t.aci=r,i!=null)for(let s of Array.from(i)){let a=Array.from(s);r(...a)}}var le="0123456789ABCDEFGHJKMNPQRSTVWXYZ";function Xe(t){globalThis.crypto.getRandomValues(t)}function x(t,e){let n=t!=null?t:Date.now(),r="";for(let c=0;c<10;c++)r=le[n%32]+r,n=Math.floor(n/32);let o=new Uint8Array(10);(e!=null?e:Xe)(o);let i="",s=0,a=0;for(let c of o)for(s=s<<8|c,a+=8;a>=5;)i+=le[s>>>a-5&31],a-=5;return r+i}var Ke=60*1024,Ye=100,Je=5e3,de='{"envelopeId":"',fe='","events":[',pe="]}",Ze=26,O=de.length+Ze+fe.length+pe.length,Qe=new TextEncoder,en=t=>Qe.encode(t).length,D=class{constructor(e){E(this,"options");E(this,"maxBytes");E(this,"queue",[]);E(this,"queuedBytes",0);E(this,"flushing",!1);E(this,"intervalId");var n;this.options=e,this.maxBytes=(n=e.maxBatchBytes)!=null?n:Ke}get pending(){return this.queue.length}push(e){let n=JSON.stringify(e),r=en(n);this.queue.push({json:n,bytes:r,eventId:e.eventId}),this.queuedBytes+=r,!this.flushing&&this.envelopeBytes()>=this.maxBytes&&this.flush()}flush(){var e,n;if(!this.flushing){this.flushing=!0;try{(n=(e=this.options).onTick)==null||n.call(e),this.drain()}finally{this.flushing=!1}}}start(){var o,i,s,a;let e=(o=this.options.timers)!=null?o:{setInterval:(c,u)=>setInterval(c,u),clearInterval:c=>clearInterval(c)};this.intervalId=e.setInterval(()=>this.flush(),(i=this.options.flushIntervalMs)!=null?i:Je);let n=(s=this.options.documentTarget)!=null?s:typeof document!="undefined"?document:void 0;n==null||n.addEventListener("visibilitychange",()=>{n.visibilityState==="hidden"&&this.flush()});let r=(a=this.options.windowTarget)!=null?a:typeof window!="undefined"?window:void 0;r==null||r.addEventListener("pagehide",()=>this.flush()),this.flush()}stop(){if(this.intervalId!==void 0){let e=this.options.timers;e?e.clearInterval(this.intervalId):clearInterval(this.intervalId),this.intervalId=void 0}}envelopeBytes(){let e=this.queue.length>1?this.queue.length-1:0;return O+this.queuedBytes+e}drain(){var e,n,r;for(;this.queue.length>0;){let o=this.queue[0];if(O+o.bytes>this.maxBytes){this.queue.shift(),this.queuedBytes-=o.bytes,(n=(e=this.options).debug)==null||n.call(e,"flush",{reason:"oversize_event",eventId:o.eventId,bytes:o.bytes});continue}let i=[],s=O;for(;this.queue.length>0;){let c=this.queue[0];if(O+c.bytes>this.maxBytes||i.length>=Ye)break;let u=s+c.bytes+(i.length>0?1:0);if(u>this.maxBytes)break;i.push(c.json),s=u,this.queue.shift(),this.queuedBytes-=c.bytes}if(i.length===0)continue;let a=((r=this.options.createEnvelopeId)!=null?r:x)();this.options.send(de+a+fe+i.join(",")+pe)}}};var z=new TextEncoder,nn=2048,tn=32,rn=128,on=512,sn=2147483647,an=/^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,9}))?(Z|[+-]\d{2}:\d{2})$/,cn=/^[\t\n\v\f\r ]+|[\t\n\v\f\r ]+$/g,un=new Set(["true","all","granted","yes","personalization","personalized"]);function N(t,e=!0){let n=S(t);if(!n)return null;if(e)try{n=decodeURIComponent(n)}catch{}if(n=S(n),!n||z.encode(n).byteLength>nn)return null;if(un.has(n.toLowerCase()))return{version:0,purposes:["personalization"],grantedAt:""};try{let r=JSON.parse(n),o=typeof r.t=="string"?r.t:"";return!Number.isInteger(r.v)||r.v<0||r.v>sn||!Array.isArray(r.p)||r.p.length>tn||!r.p.every(i=>typeof i=="string")||r.p.some(i=>z.encode(i).byteLength>rn)||r.t!==void 0&&r.t!==null&&(typeof r.t!="string"||r.t===""||!ln(r.t))||r.src!==void 0&&r.src!==null&&typeof r.src!="string"||typeof r.src=="string"&&z.encode(r.src).byteLength>on?null:{version:r.v,purposes:r.p,grantedAt:o,source:typeof r.src=="string"?r.src:void 0}}catch{return null}}function q(t){return(t==null?void 0:t.purposes.some(e=>S(e).toLowerCase()==="personalization"))||!1}function S(t){return t.replace(cn,"")}function ln(t){let e=an.exec(t);if(!e||Number.isNaN(Date.parse(t)))return!1;let n=Number(e[1]),r=Number(e[2]),o=Number(e[3]),i=Number(e[4]),s=Number(e[5]),a=Number(e[6]);if(r<1||r>12||o<1||o>dn(n,r)||i>23||s>59||a>59)return!1;let c=e[8];return c==="Z"||Number(c.slice(1,3))<=23&&Number(c.slice(4,6))<=59}function dn(t,e){return e===2?t%4===0&&(t%100!==0||t%400===0)?29:28:[4,6,9,11].includes(e)?30:31}var U="personalization",$="aci_consent",X=1,fn=365*24*60*60;function pn(t,e){var r;let n=`${$}=${t.encoded}; Path=/; Max-Age=${fn}; SameSite=Lax`;((r=e.document.location)==null?void 0:r.protocol)==="https:"&&(n+="; Secure"),e.document.cookie=n}function P(t,e,n){var o,i;let r=mn(t,e,n.now);return r===null?!1:(q(r.snapshot)||(o=n.gapBuffer)==null||o.purge(),pn(r,n),(i=n.onDecision)==null||i.call(n),!0)}function T(t){for(let e of t.cookie.split(";")){let n=S(e);if(n.startsWith($+"="))return n.slice($.length+1)}}function me(t){return t===void 0||t===""?!1:q(N(t,!0))}function ge(t){var r;if(!Array.isArray(t))return;let e=[];for(let o of t){if(typeof o!="string")return;e.push(S(o))}let n=JSON.stringify({v:X,p:e});return(r=N(n,!1))==null?void 0:r.purposes}function ve(t){var o;if(t!==void 0&&typeof t!="string")return;let e=typeof t=="string"?S(t):"",r=JSON.stringify({v:X,p:[],src:e===""?"manual":e});return(o=N(r,!1))==null?void 0:o.source}function mn(t,e,n){try{let r=JSON.stringify({v:X,p:t,t:new Date((n!=null?n:Date.now)()).toISOString(),src:e}),o=N(r,!1);return o===null?null:{encoded:encodeURIComponent(r),snapshot:o}}catch{return null}}var gn="data-aci-consent-banner";var vn="data-aci-consent-banner-mount",he="aci:consent-banner-decided";function hn(t){return T(t)!==void 0}function be(t){return hn(t)?!1:t.querySelector(`[${vn}], [${gn}]`)!==null}var bn=new Set(["c15t","onetrust","cookiebot","trustarc","manual"]);function R(t,e){var o;let n=(o=t==null?void 0:t.getAttribute)==null?void 0:o.call(t,e);if(n==null)return;let r=n.trim();return r===""?void 0:r}function Ee(t){var r;let e=(r=R(t,"data-aci-consent"))==null?void 0:r.toLowerCase(),n=e!==void 0&&bn.has(e)?e:"manual";return{site:R(t,"data-aci-site"),preset:n,categories:R(t,"data-aci-consent-categories"),debug:R(t,"data-aci-debug")==="1"}}function ye(t,e,n){if(!t)return()=>{};let r=e!=null?e:(i=>console.debug("[aci]",i)),o=n!=null?n:Date.now;return(i,s)=>{try{r({t:o(),kind:i,detail:s})}catch{}}}var B=class{constructor(e){E(this,"events",[]);E(this,"now");E(this,"debug");var n;this.now=(n=e==null?void 0:e.now)!=null?n:Date.now,this.debug=e==null?void 0:e.debug}push(e){var n;if(this.expire(),this.events.length>=50){(n=this.debug)==null||n.call(this,"buffer",{reason:"consent_hold_cap_drop_newest",eventId:e.eventId});return}this.events.push({event:e,heldAt:this.now()})}size(){return this.events.length}release(){this.expire();let e=this.events.map(n=>n.event);return this.events=[],e}discard(e){var n;this.events.length>0&&((n=this.debug)==null||n.call(this,"buffer",{reason:`consent_hold_discarded_${e}`,count:this.events.length})),this.events=[]}expire(){var r;let e=this.now()-18e5,n=0;for(;n<this.events.length&&this.events[n].heldAt<e;)n+=1;n>0&&(this.events.splice(0,n),(r=this.debug)==null||r.call(this,"buffer",{reason:"consent_hold_expired",count:n}))}};function Ce(t,e){var r;if(t.size()===0||!e.decided())return;if(!e.grants()){t.discard("denied");return}let n=t.release();for(let o of n)e.batcher.push(o);(r=e.debug)==null||r.call(e,"buffer",{reason:"consent_hold_released",count:n.length})}var En="cmp-",yn=/^[a-z0-9._-]+$/,Cn={c15t:"measurement,marketing",onetrust:"c0002,c0004",cookiebot:"statistics,marketing",trustarc:"functional,advertising"};function K(t,e){let n=e!=null?e:Cn[t];if(n===void 0)return null;let r=n.split(",").map(o=>o.trim().toLowerCase()).filter(o=>o!=="");if(r.length===0)return null;for(let o of r)if(!yn.test(o))return null;return r}function kn(t,e){return e.filter(r=>r in t.categories).some(r=>t.categories[r]===!0)?[U]:[]}function _(t,e,n){var r,o,i,s;try{let a=K(e,n.categories);if(a===null){(r=n.debug)==null||r.call(n,"consent",{reason:"unparseable_mapping",preset:e});return}if(a.filter(d=>d in t.categories).length===0){(o=n.debug)==null||o.call(n,"consent",{reason:"unmappable_cmp_state",preset:e});return}let u=kn(t,a);P(u,En+e,{document:n.document,gapBuffer:n.gapBuffer,now:n.now,onDecision:n.onDecision}),(i=n.debug)==null||i.call(n,"consent",{reason:"written",preset:e,purposes:u})}catch(a){(s=n.debug)==null||s.call(n,"consent",{reason:"consent_bridge_failed",preset:e,error:String(a)})}}var ke=250,_n=1e4;function w(t,e,n){var s;let r=(s=n==null?void 0:n.scheduler)!=null?s:{setTimeout:(a,c)=>setTimeout(a,c),clearTimeout:a=>clearTimeout(a)},o=Math.floor(_n/ke),i=()=>{var c,u;let a;try{a=t()}catch(d){(c=n==null?void 0:n.debug)==null||c.call(n,"consent",{reason:"cmp_read_failed",error:String(d)});return}if(a!==void 0){e(a);return}if(o-=1,o<=0){(u=n==null?void 0:n.debug)==null||u.call(n,"consent",{reason:"cmp_not_found"});return}r.setTimeout(i,ke)};i()}function C(t,e){try{e()}catch(n){t==null||t("consent",{reason:"adapter_failed",error:String(n)})}}var wn="c15t";function Sn(t){if(typeof t!="object"||t===null)return;let e={};for(let[n,r]of Object.entries(t))typeof r=="boolean"&&(e[n.toLowerCase()]=r);return{categories:e}}function An(t,e){return typeof t=="object"&&t!==null?"consents"in t?t.consents:t:e.consents}function _e(t){w(()=>{let e=t.window.c15t;return typeof e=="object"&&e!==null?e:void 0},e=>{C(t.debug,()=>{var r;let n=o=>{let i=Sn(o);i&&_(i,wn,t)};n(e.consents),(r=e.onConsentChange)==null||r.call(e,o=>C(t.debug,()=>n(An(o,e))))})},t)}var xn="cookiebot",Nn=["CookiebotOnConsentReady","CookiebotOnAccept","CookiebotOnDecline"];function we(t){let e=t.Cookiebot;return typeof e=="object"&&e!==null?e:void 0}function Pn(t){if(typeof t!="object"||t===null)return;let e={};for(let[n,r]of Object.entries(t))typeof r=="boolean"&&(e[n.toLowerCase()]=r);return{categories:e}}function Se(t){let e=()=>{let r=we(t.window);if(!r||r.hasResponse!==!0)return;let o=Pn(r.consent);o&&_(o,xn,t)},n=t.window;if(typeof n.addEventListener=="function")for(let r of Nn)n.addEventListener(r,()=>C(t.debug,e));w(()=>we(t.window),()=>C(t.debug,e),t)}var Ae="onetrust",Tn=/^c\d{4}$/;function Ln(t,e){let n={};for(let r of t.split(",")){let o=r.trim().toLowerCase();o!==""&&(n[o]=!0)}for(let r of e!=null?e:[])!(r in n)&&Tn.test(r)&&(n[r]=!1);return{categories:n}}function xe(t){let e=t.window,n=()=>{let o=e.OnetrustActiveGroups;if(typeof o!="string")return;let i=K(Ae,t.categories);_(Ln(o,i),Ae,t)},r=e.OptanonWrapper;e.OptanonWrapper=()=>{if(typeof r=="function")try{r()}catch{}C(t.debug,n)},w(()=>{let o=e.OnetrustActiveGroups;return typeof o=="string"?o:void 0},()=>C(t.debug,n),t)}var In="trustarc",On={required:1,functional:2,advertising:3},Ne="PrivacyManagerAPI";function Pe(t){let e=t.truste,n=e==null?void 0:e.cma,r=n==null?void 0:n.callApi;return typeof r=="function"?r.bind(n):void 0}function Dn(t){if(typeof t!="object"||t===null)return;let e=t.consentDecision;if(typeof e!="number"||!Number.isFinite(e)||e<1)return;let n={};for(let[r,o]of Object.entries(On))n[r]=e>=o;return{categories:n}}function Rn(t){return typeof t=="string"?t.includes(Ne):typeof t=="object"&&t!==null&&Ne in t}function Bn(t){let e=t.location;return typeof(e==null?void 0:e.hostname)=="string"?e.hostname:void 0}function Te(t){let e=()=>{let r=Pe(t.window);if(!r)return;let o=Dn(r("getConsentDecision",Bn(t.window)));o&&_(o,In,t)},n=t.window;typeof n.addEventListener=="function"&&n.addEventListener("message",r=>C(t.debug,()=>{Rn(r==null?void 0:r.data)&&e()})),w(()=>Pe(t.window),()=>C(t.debug,e),t)}var F="aci:buf";var Le="aci_m",V=class{constructor(e){E(this,"events",[]);E(this,"storage");E(this,"debug");this.debug=e==null?void 0:e.debug,this.storage=e==null?void 0:e.storage}push(e){var n;this.events=this.restore(),this.events.push(e),this.events.length>50&&(this.events.splice(0,this.events.length-50),(n=this.debug)==null||n.call(this,"buffer",{reason:"cap_drop_oldest"})),this.persist()}drain(){let e=this.restore();return this.events=[],this.persist(),e}purge(){var e;this.events=this.restore(),this.events.length>0&&((e=this.debug)==null||e.call(this,"buffer",{reason:"purged",count:this.events.length})),this.events=[],this.persist()}size(){return this.restore().length}restore(){var r;let e=this.storage;if(!e)return this.events;let n;try{n=e.getItem(F)}catch(o){return this.storage=void 0,(r=this.debug)==null||r.call(this,"buffer",{reason:"storage_unavailable",error:String(o)}),[]}if(n==null)return[];try{let o=JSON.parse(n);if(Array.isArray(o))return o}catch{}try{e.removeItem(F)}catch{this.storage=void 0}return[]}persist(){var n;let e=this.storage;if(e)try{this.events.length===0?e.removeItem(F):e.setItem(F,JSON.stringify(this.events)),this.events=[]}catch(r){this.storage=void 0,(n=this.debug)==null||n.call(this,"buffer",{reason:"storage_unavailable",error:String(r)})}}};function Ie(t){for(let e of t.cookie.split(";")){let n=e.trim();if(n.startsWith(Le+"="))return n.slice(Le.length+1)!==""}return!1}function Oe(t,e){var n;if(e.consentHold&&((n=e.consentPending)!=null&&n.call(e))){e.consentHold.push(t);return}if(e.grants()&&!e.marker()){e.gapBuffer.push(t);return}e.batcher.push(t)}function Y(t,e,n,r){if(t.size()===0||!n())return;let o=t.drain();for(let i of o)e.push(i);r==null||r("buffer",{reason:"flushed",count:o.length})}var Fn="rum.link_click";function De(t,e){var i;let{document:n,debug:r}=e,o=(i=n.defaultView)==null?void 0:i.location;n.addEventListener("click",s=>{var a,c,u;try{let d=s.target,p=(a=d==null?void 0:d.closest)==null?void 0:a.call(d,"a[href]");if(!p)return;let f=p;t({eventName:Fn,url:o==null?void 0:o.href,properties:{linkText:(u=(c=f.textContent)==null?void 0:c.trim())!=null?u:"",linkHref:f.href}})}catch(d){r==null||r("capture",{reason:"link_click_failed",error:String(d)})}},{capture:!0})}var Vn="rum.page_view";function H(t){let e=t.indexOf("#");return e===-1?t:t.slice(0,e)}function Re(t,e,n=()=>{}){let r=H(t.location.href),o=r,i=!1,s=()=>{let c=H(t.location.href);c!==r&&(r=c,i=!0,n())},a=t.history;for(let c of["pushState","replaceState"]){let u=a[c].bind(a);a[c]=(...d)=>{let p=u(...d);return s(),p}}return t.addEventListener("popstate",s),{complete({url:c,assignments:u}){let d=H(t.location.href);if(H(c)===d&&(s(),!(!i&&o===d))){i=!1,o=d;for(let p of e)p(u)}}}}function Be(t,e){let n=()=>t({eventName:Vn,url:e.location.href,referrer:e.document.referrer});return n(),n}var J="/collect";function Fe(t,e){let n=e==null?void 0:e.debug,r=e!==void 0&&"navigator"in e?e.navigator:globalThis.navigator,o=e!==void 0&&"fetch"in e?e.fetch:globalThis.fetch,i;try{i=new Blob([t],{type:"text/plain"})}catch{n==null||n("flush",{reason:"no_blob"});return}if(r!=null&&r.sendBeacon)try{if(r.sendBeacon(J,i))return}catch{}if(!o){n==null||n("flush",{reason:"no_transport"});return}try{o(J,{method:"POST",body:i,keepalive:!0}).catch(s=>{n==null||n("flush",{reason:"fetch_failed",error:String(s)})})}catch(s){n==null||n("flush",{reason:"fetch_failed",error:String(s)})}}function Ve(t){var n,r;let e=t!==void 0&&"fetch"in t?t.fetch:globalThis.fetch;if(!e)return Promise.resolve(!1);try{let o=((n=t==null?void 0:t.createEnvelopeId)!=null?n:x)(),i=new Blob([`{"envelopeId":"${o}","events":[]}`],{type:"text/plain"});return e(J,{method:"POST",body:i,keepalive:!0,credentials:"same-origin"}).then(s=>{var a;return typeof s=="object"&&s!==null&&"ok"in s&&s.ok===!1?((a=t==null?void 0:t.debug)==null||a.call(t,"flush",{reason:"refresh_failed",status:"not_ok"}),!1):!0}).catch(s=>{var a;return(a=t==null?void 0:t.debug)==null||a.call(t,"flush",{reason:"refresh_failed",error:String(s)}),!1})}catch(o){return(r=t==null?void 0:t.debug)==null||r.call(t,"flush",{reason:"refresh_failed",error:String(o)}),Promise.resolve(!1)}}var Hn="rum.variation_view",Z="data-aci-variation";function He(t,e){var u,d,p;let{document:n,debug:r}=e,o=e.MutationObserver;if(typeof o!="function")return;let i=(u=n.defaultView)==null?void 0:u.location,s=new WeakSet,a=f=>{let m=f.getAttribute(Z);m!=null&&(s.has(f)||(s.add(f),t({eventName:Hn,url:i==null?void 0:i.href,properties:{variantKey:m}})))},c=f=>{try{f.hasAttribute(Z)&&a(f);for(let m of Array.from(f.querySelectorAll(`[${Z}]`)))a(m)}catch(m){r==null||r("capture",{reason:"variation_scan_failed",error:String(m)})}};try{let f=(d=n.body)!=null?d:n.documentElement;f&&c(f)}catch(f){r==null||r("capture",{reason:"variation_initial_scan_failed",error:String(f)})}try{let f=(p=n.body)!=null?p:n.documentElement;if(!f)return;new o(v=>{try{for(let b of v)for(let l=0;l<b.addedNodes.length;l++){let g=b.addedNodes[l];if((g==null?void 0:g.nodeType)!==1)continue;let y=g.element;y&&c(y)}}catch(b){r==null||r("capture",{reason:"variation_observer_failed",error:String(b)})}}).observe(f,{subtree:!0,childList:!0})}catch(f){r==null||r("capture",{reason:"variation_observe_failed",error:String(f)})}}var Mn="rum.web_vital";function Me(t,e){var m,v,b;let n=e.PerformanceObserver;if(typeof n!="function")return;let{performance:r,debug:o}=e,i=(v=(m=e.window)==null?void 0:m.location)==null?void 0:v.href,s=e.document,a=new Set,c=(l,g)=>{a.has(l)||(a.add(l),t({eventName:Mn,url:i,properties:{vitalName:l,vitalValue:g}}))};try{let l=r==null?void 0:r.getEntriesByType("navigation")[0];l&&typeof l.responseStart=="number"&&typeof l.requestStart=="number"&&c("TTFB",l.responseStart-l.requestStart)}catch(l){o==null||o("capture",{reason:"ttfb_failed",error:String(l)})}let u=0,d=0,p=(l,g)=>{try{new n(L=>{try{for(let A of L.getEntries())g(A)}catch(A){o==null||o("capture",{reason:`${l}_handler_failed`,error:String(A)})}}).observe({type:l,buffered:!0})}catch(y){o==null||o("capture",{reason:`${l}_observe_failed`,error:String(y)})}};p("largest-contentful-paint",l=>{c("LCP",l.startTime)}),p("first-input",l=>{c("FID",l.startTime)}),p("layout-shift",l=>{var g;l.hadRecentInput||(u+=(g=l.value)!=null?g:0)}),p("event",l=>{var y;let g=(y=l.value)!=null?y:0;g>d&&(d=g)}),p("paint",l=>{l.name==="first-contentful-paint"&&c("FCP",l.startTime)});let f=()=>{try{a.has("CLS")||c("CLS",u),a.has("INP")||c("INP",d)}catch(l){o==null||o("capture",{reason:"visibility_handler_failed",error:String(l)})}};s&&s.addEventListener("visibilitychange",()=>{s.visibilityState==="hidden"&&f()}),(b=e.window)==null||b.addEventListener("pagehide",f)}var Q={c15t:_e,onetrust:xe,cookiebot:Se,trustarc:Te};function jn(t){var e,n;return typeof((e=t.navigator)==null?void 0:e.sendBeacon)=="function"&&typeof t.IntersectionObserver=="function"&&typeof((n=t.crypto)==null?void 0:n.getRandomValues)=="function"}function Wn(t){try{return t.sessionStorage}catch{return}}function Gn(t){var i;let e=t!=null?t:typeof window!="undefined"?window:void 0;if(!e||e.__aci_loaded||(e.__aci_loaded=!0,!jn(e)))return;let n=e.__aci_measurement_disabled===!0,r=Ee(e.document.currentScript),o=ye(r.debug);try{let s=e.document,a=new V({storage:Wn(e),debug:o}),c=()=>{try{return me(T(s))}catch{return!1}},u=()=>{try{return Ie(s)}catch{return!1}},d=()=>{try{return T(s)!==void 0}catch{return!1}},p=r.preset==="manual"?()=>{try{return be(s)}catch{return!1}}:()=>!0,f=new B({debug:o}),m=()=>!d()&&!u()&&p(),v={navigator:e.navigator,fetch:typeof e.fetch=="function"?e.fetch.bind(e):void 0,debug:o},b;b=new D({send:h=>Fe(h,v),debug:o,onTick:()=>{n||(Ce(f,{decided:d,grants:c,batcher:b,debug:o}),Y(a,b,u,o))},timers:{setInterval:(h,k)=>e.setInterval(h,k),clearInterval:h=>e.clearInterval(h)},documentTarget:s,windowTarget:e});let l=re({document:s,window:e,debug:o}),g=h=>{n||Oe({...te(h,l),eventId:x(void 0,k=>e.crypto.getRandomValues(k))},{grants:c,marker:u,gapBuffer:a,batcher:b,consentHold:f,consentPending:m})},y=()=>b.flush();s.addEventListener(he,y),l.start(g);let L=()=>{},A=Re(e,[h=>l.rearm(h),()=>L()],()=>l.clear());s.addEventListener("astro:page-load",()=>A.complete({url:e.location.href,assignments:j(s,o)})),ue(e,{navigationComplete:h=>A.complete(h),track:(h,k)=>g({eventName:h,properties:k,url:e.location.href}),consent:({p:h,src:k})=>{let ee=ge(h);if(ee===void 0){o("consent",{reason:"malformed_purposes"});return}let ne=ve(k);if(ne===void 0){o("consent",{reason:"malformed_source"});return}P(ee,ne,{document:s,gapBuffer:a,onDecision:y})||o("consent",{reason:"oversized_envelope"})}},o),L=Be(g,e),ce(g,{document:s,intersectionObserver:e.IntersectionObserver,debug:o},()=>{n||Ve(v).then(h=>{h&&e.location.reload()})}),De(g,{document:s,debug:o}),Me(g,{performance:e.performance,PerformanceObserver:e.PerformanceObserver,window:e,document:s,debug:o}),He(g,{document:s,MutationObserver:e.MutationObserver,debug:o}),r.preset!=="manual"&&((i=Q[r.preset])==null||i.call(Q,{window:e,document:s,categories:r.categories,gapBuffer:a,onDecision:y,debug:o,scheduler:{setTimeout:(h,k)=>e.setTimeout(h,k),clearTimeout:h=>e.clearTimeout(h)}})),b.start(),e.addEventListener("pagehide",()=>f.discard("unload")),n||Y(a,b,u,o),o("init",{config:r})}catch(s){o("init",{error:String(s)})}}Gn();})();

package/dist/collect/aci.js.sha256

@@ -1 +1 @@
-f9c19e96f671a17edb4cd0a767da4233a1b7d859947092eaf84f4c3386773fd0
+c330eb304d6a7aa01375646c97c67be0f68ce9137974da03aa339696e0f01de6

package/dist/collect/index.js

@@ -55,6 +55,9 @@ export function init(win) {
     w.__aci_loaded = true;
     if (!hasBaseline(w))
         return;
+    // Snapshot before exposures or queued commands. Cookie expiry, hydration
+    // and BFCache never turn this synthetic document into a genuine visit.
+    const measurementDisabled = w.__aci_measurement_disabled === true;
     const cfg = readTagConfig(w.document.currentScript);
     const debug = createDebug(cfg.debug);
     try {
@@ -119,6 +122,8 @@ export function init(win) {
             // and then the marker (so a mint by another tab or navigation is
             // noticed). Held events are older than gap-buffered ones: release first.
             onTick: () => {
+                if (measurementDisabled)
+                    return;
                 resolveConsentHold(consentHold, { decided, grants, batcher, debug });
                 maybeFlushGapBuffer(gapBuffer, batcher, marker, debug);
             },
@@ -135,6 +140,8 @@ export function init(win) {
         // exists before emit can run; exposures flow at start() below.
         const assignments = createAssignments({ document: doc, window: w, debug });
         const emit = (event) => {
+            if (measurementDisabled)
+                return;
             routeEvent({
                 ...withAssignmentContext(event, assignments),
                 eventId: ulid(undefined, (bytes) => w.crypto.getRandomValues(bytes)),
@@ -187,6 +194,8 @@ export function init(win) {
             intersectionObserver: w.IntersectionObserver,
             debug,
         }, () => {
+            if (measurementDisabled)
+                return;
             void refreshClaims(transportEnv).then((refreshed) => {
                 if (refreshed)
                     w.location.reload();
@@ -224,7 +233,8 @@ export function init(win) {
         // has already released a hold whose decision exists; whatever remains is
         // undecided and never leaves the page.
         w.addEventListener("pagehide", () => consentHold.discard("unload"));
-        maybeFlushGapBuffer(gapBuffer, batcher, marker, debug);
+        if (!measurementDisabled)
+            maybeFlushGapBuffer(gapBuffer, batcher, marker, debug);
         debug("init", { config: cfg });
     }
     catch (err) {

package/dist/internal/domain/edge/identity.d.ts

@@ -1,4 +1,4 @@
-import type { IdentitySigningKeys, SigningKey, CookieMutation, ConsentSnapshot, ConsentSignals } from './types.js';
+import type { IdentitySigningKeys, SigningKey, ConsentSnapshot, ConsentSignals } from './types.js';
 export declare const DEFAULT_IDENTITY_TTL_SECONDS: number;
 export declare function parseCookieHeader(value: string | null): Map<string, string>;
 export declare function consentSignals(request: Request, cookies: Map<string, string>): ConsentSignals;
@@ -9,10 +9,7 @@ export declare function verifyIdentityCookie(value: string, keys: IdentitySignin
 export declare function signIdentity(rawID: string, key: SigningKey): Promise<string>;
 export declare function randomIdentity(random?: (length: number) => Uint8Array): string;
 export declare function identityHashHex(namespace: string, value: string): Promise<string>;
-export declare function sha256Hex(value: string): Promise<string>;
 export declare function verifyClaims(value: string, keys: Record<string, string>, now: Date): Promise<Record<string, unknown> | null>;
-export declare function cookieMutation(name: string, value: string, maxAge: number, now: Date, secure: boolean, httpOnly: boolean): CookieMutation;
-export declare function expireCookie(name: string, secure: boolean): CookieMutation;
 export declare function verifyHMAC(value: string, signature: string, secret: string): Promise<boolean>;
 export declare function hmacSHA256(value: string, secret: string): Promise<string>;
 export declare function base64URLEncode(bytes: Uint8Array): string;

package/dist/internal/domain/edge/identity.js

@@ -5,7 +5,6 @@
 // - Consent signal extraction (GPC/DNT + portable consent envelope)
 // - Identity cookie verification and minting (aci_id)
 // - Claims cookie verification (aci_claims)
-// - Cookie mutation helpers
 //
 // Shared by every static edge adapter; this logic has no SDK host wrapper.
 // internal/domain/audience/runtime/collect.ts imports from here as well.
@@ -143,10 +142,6 @@ export async function identityHashHex(namespace, value) {
     const digest = await crypto.subtle.digest('SHA-256', encoder.encode(`${namespace.trim().toLowerCase()}\x00${value.trim()}`));
     return bytesToHex(new Uint8Array(digest));
 }
-export async function sha256Hex(value) {
-    const digest = await crypto.subtle.digest('SHA-256', encoder.encode(value));
-    return bytesToHex(new Uint8Array(digest));
-}
 function bytesToHex(bytes) {
     let value = '';
     for (const byte of bytes)
@@ -174,17 +169,6 @@ export async function verifyClaims(value, keys, now) {
         return null;
     }
 }
-// ── Cookie mutation helpers ──
-export function cookieMutation(name, value, maxAge, now, secure, httpOnly) {
-    return {
-        name,
-        value,
-        options: { path: '/', httpOnly, secure, sameSite: 'lax', maxAge, expires: new Date(now.getTime() + maxAge * 1000) },
-    };
-}
-export function expireCookie(name, secure) {
-    return { name, value: '', options: { path: '/', httpOnly: true, secure, sameSite: 'lax', maxAge: 0, expires: new Date(0) } };
-}
 // ── Internal crypto helpers ──
 // verifyHMAC returns a verdict about the signature, which is the only visitor
 // input here: a malformed or wrong signature is `false`. A fault importing the

package/dist/internal/domain/edge/index.d.ts

@@ -2,5 +2,4 @@ export * from './types.js';
 export * from './personalization-core.js';
 export * from './identity.js';
 export * from './mimic_token.js';
-export * from './compose.js';
 export { resolvePersonalizationRequest, } from './resolve.js';

package/dist/internal/domain/edge/index.js

@@ -4,5 +4,4 @@ export * from './types.js';
 export * from './personalization-core.js';
 export * from './identity.js';
 export * from './mimic_token.js';
-export * from './compose.js';
 export { resolvePersonalizationRequest, } from './resolve.js';

package/dist/internal/domain/edge/personalization-core.js

@@ -4,8 +4,7 @@
 //
 // This is the pure decision algorithm — no I/O, no cookies, no identity
 // minting. The caller resolves identity and claims, then calls this.
-import { variantValuesFromKey } from './record/codec.js';
-import { canonicalVariantKey } from './variant_key.js';
+import { canonicalVariantKey, variantValuesFromKey } from './variant_key.js';
 import { personalizationSelection } from './personalization_index.js';
 export { preparePersonalizationRoute } from './personalization_index.js';
 export class PersonalizationResolutionError extends Error {
@@ -171,8 +170,8 @@ function experimentEligible(item, claims, selectedLegAudienceId) {
 // contentbuild planner's leg factors, candidates, and Lookup. A
 // selected-mode experiment with an unresolved eligibility audience is a
 // factor of no leg, base included. Both inputs are canonical by variant-key
-// construction (the record codec and the strict document decode pre-trim
-// them), so this comparison needs no normalization — the Go twin's TrimSpace
+// construction (the variant-key reader and the strict document decode
+// pre-trim them), so this comparison needs no normalization — the Go twin's TrimSpace
 // is defensive only and never changes the outcome.
 function selectedModeFactorOf(item, legAudienceId) {
     const audienceID = String(item.eligibilityAudienceId || '').trim();
@@ -385,7 +384,7 @@ function validateExpressionMembers(path, group, members, depth, diagnostics) {
 // topLevel carries nesting's one asymmetry: the top envelope always records
 // both group rows because they express the scope's empty-envelope policy,
 // while a nested node records only for a list it carries members in — which
-// also keeps the trace stable across a codec that drops empty lists.
+// also keeps the trace stable across a serialization that drops empty lists.
 function qualifyRequestExpression(all, any, resolve, trace, path = 'expression', topLevel = true) {
     let qualified = true;
     for (const [group, members] of [['all', all], ['any', any]]) {

package/dist/internal/domain/edge/personalization_index.js

@@ -1,5 +1,4 @@
-import { variantValuesFromKey } from './record/codec.js';
-import { compareUTF8 } from './variant_key.js';
+import { compareUTF8, variantValuesFromKey } from './variant_key.js';
 const preparedSelection = Symbol('prepared personalization selection');
 // Call once when an immutable partition is decoded. The derived index is a
 // non-enumerable symbol property, so it cannot alter any serialized record.

package/dist/internal/domain/edge/types.d.ts

@@ -33,20 +33,6 @@ export interface EdgeRouteEntry {
     dispatch: EdgeDispatch;
     variants?: Record<string, EdgeRouteVariant>;
 }
-export interface CollectSDKEntry {
-    hash: string;
-    path: string;
-}
-export interface EdgeRouteManifest {
-    manifestVersion: string;
-    releaseId: string;
-    siteId: string;
-    routes: Record<string, EdgeRouteEntry>;
-    experiments?: Record<string, PersonalizationExperiment>;
-    collectSdk?: CollectSDKEntry;
-    notFoundPage?: string;
-    errorPage?: string;
-}
 export interface PersonalizationRequestContext {
     path: string;
     query: Record<string, string[]>;
@@ -141,18 +127,6 @@ export interface IdentitySigningKeys {
     current: SigningKey;
     previous?: SigningKey;
 }
-export interface CookieMutation {
-    name: string;
-    value: string;
-    options: {
-        path: '/';
-        httpOnly?: boolean;
-        secure?: boolean;
-        sameSite: 'lax';
-        maxAge: number;
-        expires?: Date;
-    };
-}
 export interface ConsentSnapshot {
     version: number;
     purposes: string[];
@@ -219,15 +193,4 @@ export interface PersonalizationResolution {
         forced?: boolean;
     }>;
 }
-export interface CompositionDescriptor {
-    layoutArtifact: string;
-    fragments?: Record<string, string>;
-}
-export type SelectedTargetKind = 'direct' | 'compose' | 'render';
-export interface SelectedTarget {
-    kind: SelectedTargetKind;
-    path: string;
-    digest: string;
-    composition?: CompositionDescriptor;
-}
 export { IdentityErasureFencedError } from '../../platform/collectionstore/errors.js';

package/dist/internal/domain/edge/variant_key.d.ts

@@ -1,3 +1,4 @@
 export declare function compareUTF8(left: string, right: string): number;
 export declare function canonicalVariantKey(values: Record<string, string>): string;
 export declare function parseVariantKey(key: string): Record<string, string>;
+export declare function variantValuesFromKey(key: string): Record<string, string>;

package/dist/internal/domain/edge/variant_key.js

@@ -39,6 +39,18 @@ export function parseVariantKey(key) {
         throw new Error('variant key is not canonically ordered');
     return values;
 }
+// Lenient reader for a route record's variant key when the record carries no
+// variantValues. Unlike parseVariantKey it never throws and also accepts `&`
+// as a separator, so it is not interchangeable with the canonical parser.
+export function variantValuesFromKey(key) {
+    const values = {};
+    for (const part of String(key || '').replace(/&/g, ';').split(';')) {
+        const sep = part.indexOf('=');
+        if (sep > 0)
+            values[part.slice(0, sep).trim()] = part.slice(sep + 1).trim();
+    }
+    return values;
+}
 function validToken(value) {
     return value !== '' && value !== '.' && value !== '..' && !/[\p{White_Space};=/]/u.test(value);
 }

package/dist/next/page.d.ts

@@ -34,7 +34,8 @@ export interface CreatePageOptions {
  * to `/__r/{releaseId}/{targetRef}`. The target ref selects the exact immutable
  * base or variant page while its prefix identifies the logical public route.
  * createPage passes both identities to the content loader, giving each target
- * a distinct CDN cache key without sending selection headers into Next.
+ * a distinct CDN cache key without sending selection headers into Next. The
+ * mimic response is decorated by the hosting platform after rendering.
  *
  * Dev pass-through (ACI_CONTENT_PROVIDER=file): the middleware passes
  * requests through unrewritten, so `/` arrives with an empty/undefined

package/dist/next/page.js

@@ -1,9 +1,7 @@
 import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
 import { notFound } from 'next/navigation.js';
-import { headers } from 'next/headers.js';
 import { Fragment } from 'react';
 import { PageNotFoundError, getRenderInput, getLayout, getFragment, } from './server.js';
-import { MIMIC_BANNER_HEADER, decodeMimicBanner } from '../mimic/core.js';
 import { routeMetadataForContent, resolveSlots, } from '../content/index.js';
 import { renderBlocks } from './render.js';
 import { AssignmentsScript } from './assignments-script.js';
@@ -34,7 +32,8 @@ import { parseHostedPageTarget } from './hosted-page-target.js';
  * to `/__r/{releaseId}/{targetRef}`. The target ref selects the exact immutable
  * base or variant page while its prefix identifies the logical public route.
  * createPage passes both identities to the content loader, giving each target
- * a distinct CDN cache key without sending selection headers into Next.
+ * a distinct CDN cache key without sending selection headers into Next. The
+ * mimic response is decorated by the hosting platform after rendering.
  *
  * Dev pass-through (ACI_CONTENT_PROVIDER=file): the middleware passes
  * requests through unrewritten, so `/` arrives with an empty/undefined
@@ -86,7 +85,7 @@ export function createPage(registry, options) {
                 }
                 return (_jsx(Fragment, { children: renderedBlocks }, slot.name));
             }));
-            return (_jsxs(_Fragment, { children: [renderedSlots.filter(Boolean), _jsx(AssignmentsScript, { page: input.page }), _jsx(CollectScript, { siteConfig: input.siteConfig }), _jsx(MimicBanner, { html: await readMimicBannerHTML() }), renderProofContent
+            return (_jsxs(_Fragment, { children: [renderedSlots.filter(Boolean), _jsx(AssignmentsScript, { page: input.page }), _jsx(CollectScript, { siteConfig: input.siteConfig }), renderProofContent
                         ? _jsx("meta", { name: "aci-render-proof", content: renderProofContent })
                         : null] }));
         }
@@ -102,6 +101,8 @@ export function createPage(registry, options) {
         default: CatchAllPage,
     };
 }
+// Immutable render identity, shared by ordinary and platform-fetched HTML.
+const SHARED_RENDER_SEGMENT = '__r';
 /**
  * Resolves the logical route and releaseId from Next.js catch-all params.
  *
@@ -121,7 +122,7 @@ export function createPage(registry, options) {
 export async function resolveRouteAndRelease(params) {
     const resolved = await params;
     const slug = resolved.slug ?? [];
-    if (slug.length >= 2 && slug[0] === '__r') {
+    if (slug.length >= 2 && slug[0] === SHARED_RENDER_SEGMENT) {
         const releaseId = decodeURIComponent(slug[1]);
         if (!releaseId || releaseId.includes('/') || releaseId === '.' || releaseId === '..') {
             return { route: '/' };
@@ -135,6 +136,14 @@ export async function resolveRouteAndRelease(params) {
             pageRef: target.pageRef,
         };
     }
+    // These namespaces belong to native Next/static/API handlers. A missing
+    // file can fall through to this catch-all without the hosting router's
+    // release selection; it is a native 404, not a CMS content request. The
+    // shared resolver guards both page rendering and generateMetadata.
+    if (slug[0] === 'favicon.ico'
+        || ['assets', '_astro', '_next', 'api'].includes(slug[0])) {
+        notFound();
+    }
     const route = routeFromSlug(slug);
     return { route };
 }
@@ -143,23 +152,3 @@ function routeFromSlug(slug) {
         return '/';
     return `/${slug.join('/')}/`;
 }
-// The middleware emits the banner HTML in a reserved request header only
-// after validating a signed mimic token; viewer-forged copies are stripped at
-// the dispatch gate (specs/features/audience-mimic REQ-4). The header read
-// happens here (the page already awaits request-scoped data) so the banner
-// itself stays a synchronous leaf.
-async function readMimicBannerHTML() {
-    try {
-        const current = await headers();
-        return decodeMimicBanner(current.get(MIMIC_BANNER_HEADER) || '');
-    }
-    catch {
-        // headers() has no request context in static generation and unit tests.
-        return '';
-    }
-}
-function MimicBanner({ html }) {
-    if (!html)
-        return null;
-    return _jsx("div", { dangerouslySetInnerHTML: { __html: html } });
-}

package/dist/next/release-context.d.ts

@@ -1,6 +1,7 @@
 /**
  * The release identity of a request the hosting router rewrote to
- * `/__r/{releaseId}/…`. The catch-all reads the release from that path; Next
+ * `/__r/{releaseId}/…`. The
+ * catch-all reads the release from that path; Next
  * code that receives no route params (the not-found seat, release-less SDK
  * reads such as a secondary `getPage('/blog')`) reads it from this header.
  *

package/dist/next/release-context.js

@@ -2,7 +2,8 @@ import { createHmac, timingSafeEqual } from 'node:crypto';
 import { headers } from 'next/headers.js';
 /**
  * The release identity of a request the hosting router rewrote to
- * `/__r/{releaseId}/…`. The catch-all reads the release from that path; Next
+ * `/__r/{releaseId}/…`. The
+ * catch-all reads the release from that path; Next
  * code that receives no route params (the not-found seat, release-less SDK
  * reads such as a secondary `getPage('/blog')`) reads it from this header.
  *

package/migrations/experiment-goal-ids.md

@@ -0,0 +1,43 @@
+# Secondary experiment goals use goalIds
+
+`goalIds` is the supported field for secondary experiment goal links. The
+API rejects an experiment document containing `goalRefs`, including an empty
+array or `null`, rather than silently discarding its saved goal links. The
+SDK authoring model no longer declares `goalRefs`.
+
+## Convert the field
+
+In experiment `props`, replace reference strings with the corresponding bare
+goal IDs and remove `goalRefs` entirely.
+
+Before:
+
+```json
+{
+  "goalRefs": ["$ref:data/conversion-goals/request-demo"]
+}
+```
+
+After:
+
+```json
+{
+  "goalIds": ["request-demo"]
+}
+```
+
+Preserve the linked goal set and the primary goal. `primaryGoalId` and
+`primaryGoalRef` remain supported; this migration concerns only the secondary
+list.
+
+## Upgrade existing content
+
+Check experiment documents, seeds, templates, and authoring integrations for
+`goalRefs`. If any existing content uses it, submit the spelling change
+through the normal content API while the preceding API version still accepts
+both spellings, and validate the resulting experiment before upgrading the
+API image that retires `goalRefs`. Existing horizon and settled-goal rules
+continue to apply.
+
+If no document or authoring integration uses `goalRefs`, no content migration
+is needed. Use `goalIds` for new secondary-goal links.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gradial/aci",
-  "version": "0.1.52-rc.34",
+  "version": "0.1.52-rc.40",
   "repository": {
     "type": "git",
     "url": "https://github.com/gradial/bare-metal-go.git",
@@ -160,11 +160,11 @@
     "zod": "^4.0.0"
   },
   "optionalDependencies": {
-    "@gradial/aci-cli-darwin-arm64": "0.1.52-rc.34",
-    "@gradial/aci-cli-darwin-x64": "0.1.52-rc.34",
-    "@gradial/aci-cli-linux-arm64": "0.1.52-rc.34",
-    "@gradial/aci-cli-linux-x64": "0.1.52-rc.34",
-    "@gradial/aci-cli-win32-arm64": "0.1.52-rc.34",
-    "@gradial/aci-cli-win32-x64": "0.1.52-rc.34"
+    "@gradial/aci-cli-darwin-arm64": "0.1.52-rc.40",
+    "@gradial/aci-cli-darwin-x64": "0.1.52-rc.40",
+    "@gradial/aci-cli-linux-arm64": "0.1.52-rc.40",
+    "@gradial/aci-cli-linux-x64": "0.1.52-rc.40",
+    "@gradial/aci-cli-win32-arm64": "0.1.52-rc.40",
+    "@gradial/aci-cli-win32-x64": "0.1.52-rc.40"
   }
 }

package/dist/internal/domain/edge/compose.d.ts

@@ -1,24 +0,0 @@
-export interface ObjectReader {
-    readObject(path: string): Promise<Uint8Array>;
-}
-export interface ComposeObjectRef {
-    path: string;
-    digest: string;
-}
-export interface ComposeSlot {
-    name: string;
-    required: boolean;
-    placeholder: string;
-    parts: ComposeObjectRef[];
-}
-export interface ComposeEnvelope {
-    schema: 'gradial.compose-envelope.v1';
-    algorithm: 'aci-html-compose-v1';
-    shell: ComposeObjectRef;
-    slots: ComposeSlot[];
-}
-export declare function composeEnvelope(reader: ObjectReader, envelopePath: string, envelopeDigest: string): Promise<{
-    html: string;
-    contentType: string;
-}>;
-export declare function validateEnvelope(envelope: unknown): ComposeEnvelope;

package/dist/internal/domain/edge/compose.js

@@ -1,89 +0,0 @@
-const decoder = new TextDecoder('utf-8', { fatal: true });
-export async function composeEnvelope(reader, envelopePath, envelopeDigest) {
-    const envelopeBytes = await reader.readObject(envelopePath);
-    await requireDigest(envelopeBytes, envelopeDigest, 'compose envelope');
-    let parsed;
-    try {
-        parsed = JSON.parse(decoder.decode(envelopeBytes));
-    }
-    catch {
-        throw new Error('compose envelope is malformed');
-    }
-    const envelope = validateEnvelope(parsed);
-    const shellBytes = await reader.readObject(envelope.shell.path);
-    await requireDigest(shellBytes, envelope.shell.digest, 'compose shell');
-    let html = decoder.decode(shellBytes);
-    for (const slot of envelope.slots) {
-        if (occurrences(html, slot.placeholder) !== 1) {
-            throw new Error(`compose slot ${JSON.stringify(slot.name)} placeholder must occur exactly once`);
-        }
-        if (slot.required && slot.parts.length === 0) {
-            throw new Error(`compose slot ${JSON.stringify(slot.name)} is required`);
-        }
-        const parts = [];
-        for (const part of slot.parts) {
-            const bytes = await reader.readObject(part.path);
-            await requireDigest(bytes, part.digest, `compose slot ${slot.name}`);
-            parts.push(decoder.decode(bytes));
-        }
-        html = html.replace(slot.placeholder, parts.join(''));
-    }
-    if (html.includes('<!--ACI_SLOT:')) {
-        throw new Error('compose shell has unresolved slots');
-    }
-    return { html, contentType: 'text/html; charset=utf-8' };
-}
-export function validateEnvelope(envelope) {
-    if (!envelope || typeof envelope !== 'object') {
-        throw new Error('compose envelope is malformed');
-    }
-    const obj = envelope;
-    if (obj.schema !== 'gradial.compose-envelope.v1'
-        || obj.algorithm !== 'aci-html-compose-v1'
-        || !Array.isArray(obj.slots)) {
-        throw new Error('compose envelope is malformed');
-    }
-    const env = envelope;
-    validateRef(env.shell);
-    const names = new Set();
-    for (const slot of env.slots) {
-        if (!slot || !/^[A-Za-z][A-Za-z0-9_-]*$/.test(slot.name) || names.has(slot.name)) {
-            throw new Error('compose slot is malformed');
-        }
-        names.add(slot.name);
-        if (slot.placeholder !== `<!--ACI_SLOT:${slot.name}-->` || !Array.isArray(slot.parts)) {
-            throw new Error(`compose slot ${JSON.stringify(slot.name)} is malformed`);
-        }
-        for (const part of slot.parts)
-            validateRef(part);
-    }
-    return env;
-}
-function validateRef(ref) {
-    const path = String(ref?.path || '');
-    if (!path || path.includes('\\') || path.split('/').some((part) => !part || part === '.' || part === '..')) {
-        throw new Error('compose object path is invalid');
-    }
-    if (!/^[0-9a-f]{64}$/.test(String(ref.digest || '').toLowerCase())) {
-        throw new Error('compose object digest is invalid');
-    }
-}
-async function requireDigest(bytes, want, label) {
-    const ab = new ArrayBuffer(bytes.byteLength);
-    new Uint8Array(ab).set(bytes);
-    const actual = Array.from(new Uint8Array(await crypto.subtle.digest('SHA-256', ab)), (byte) => byte.toString(16).padStart(2, '0')).join('');
-    if (actual !== want.toLowerCase())
-        throw new Error(`${label} digest mismatch`);
-}
-function occurrences(value, needle) {
-    let count = 0;
-    let offset = 0;
-    while (true) {
-        offset = value.indexOf(needle, offset);
-        if (offset < 0)
-            break;
-        count += 1;
-        offset += needle.length;
-    }
-    return count;
-}

package/dist/internal/domain/edge/record/codec.d.ts

@@ -1,45 +0,0 @@
-import type { EdgeRouteEntry } from '../types.js';
-/**
- * Unique sentinel object returned by expand functions on failure.
- * Callers check `result === INVALID`. Never throws.
- */
-export declare const INVALID: unique symbol;
-export type Invalid = typeof INVALID;
-interface CompactDispatch {
-    k: 's';
-    ap: string;
-}
-interface CompactCondition {
-    f?: string;
-    o?: string;
-    w?: unknown;
-    a?: CompactCondition[];
-    n?: CompactCondition[];
-}
-interface CompactRule {
-    a?: CompactCondition[];
-    n?: CompactCondition[];
-}
-export declare const COMPACT_MAX_DEPTH = 32;
-interface CompactVariant {
-    pr?: number;
-    r?: CompactRule;
-    d?: CompactDispatch;
-    vk?: string;
-    vv?: Record<string, string>;
-}
-export interface CompactRouteRecord {
-    s?: number;
-    p: string;
-    d: CompactDispatch;
-    v?: Record<string, CompactVariant>;
-    x?: string[];
-}
-export declare function projectRouteRecord(entry: EdgeRouteEntry): CompactRouteRecord;
-export declare function expandRouteRecord(raw: unknown): EdgeRouteEntry | Invalid;
-export declare const MARKER = "{\"s\":1,\"e\":1}";
-export declare function isMarker(raw: string): boolean;
-export declare function canonicalSerialize(value: unknown): string;
-export declare function variantValuesFromKey(key: string): Record<string, string>;
-export declare function pathHash16(path: string): string;
-export {};

package/dist/internal/domain/edge/record/codec.js

@@ -1,319 +0,0 @@
-// Compact JSON codec for edge-decisioning route records.
-//
-// project(): canonical → compact (short field names via alias table, omit defaults)
-// expand():  compact → canonical (reverse, never throws — returns INVALID sentinel on failure)
-//
-// Laws (property-tested):
-//   expand(project(r)) ≡ normalize(r)
-//   expand() never throws — malformed input → INVALID
-//   Unknown field code on expand = invalid data (→ base + alarm)
-//
-// The alias table is the single source of truth (schema/alias-table.v1.json).
-// These codecs are hand-written from it; cross-language round-trip tests
-// enforce drift between the Go and TS implementations.
-//
-// Failure is represented by the exported INVALID sentinel (a unique object).
-// Expand functions return the value directly on success, or INVALID on failure.
-// Callers check `result === INVALID`. This avoids the {ok,value,reason}
-// wrapper in the byte-constrained runtime.
-// ── INVALID sentinel ─────────────────────────────────────────────────
-/**
- * Unique sentinel object returned by expand functions on failure.
- * Callers check `result === INVALID`. Never throws.
- */
-export const INVALID = Symbol();
-const te = new TextEncoder();
-// ── Alias table (hand-mirrored from schema/alias-table.v1.json) ──────
-const FIELD_ALIASES = {
-    schema: 's', path: 'p', dispatch: 'd', variants: 'v', experiments: 'x',
-    priority: 'pr', kind: 'k', rule: 'r', all: 'a', any: 'n', field: 'f',
-    operator: 'o', value: 'w', audiences: 'au', segments: 'sg',
-    classification: 'c', arms: 'ar', id: 'id', status: 'st',
-    allocationVersion: 'av', salt: 'sl', allocationBasisPoints: 'ab',
-    variantKey: 'vk', variantValues: 'vv', artifactPath: 'ap',
-    displayName: 'dn', primaryGoalId: 'pg', goalIds: 'gl', role: 'ro',
-};
-const DISPATCH_KIND_TO_COMPACT = {
-    'static-direct': 's',
-};
-const DISPATCH_KIND_FROM_COMPACT = {
-    s: 'static-direct',
-};
-const OPERATOR_TO_COMPACT = {
-    equals: 'eq', contains: 'ct', startsWith: 'sw', exists: 'ex',
-    greaterThan: 'gt', greaterThanOrEqual: 'ge', lessThan: 'lt', lessThanOrEqual: 'le',
-    before: 'bf', after: 'af', between: 'bt', in: 'in',
-};
-const OPERATOR_FROM_COMPACT = {
-    eq: 'equals', ct: 'contains', sw: 'startsWith', ex: 'exists',
-    gt: 'greaterThan', ge: 'greaterThanOrEqual', lt: 'lessThan', le: 'lessThanOrEqual',
-    bf: 'before', af: 'after', bt: 'between', in: 'in',
-};
-// Compact type guard — reduces minified bytes vs repeated typeof+null+isArray checks
-function isObj(v) {
-    return typeof v === 'object' && v !== null && !Array.isArray(v);
-}
-function projectDispatch(dispatch) {
-    if (dispatch.kind !== 'static-direct' || !dispatch.artifactPath) {
-        throw new Error('edge dispatch must name one static artifact');
-    }
-    return { k: DISPATCH_KIND_TO_COMPACT[dispatch.kind], ap: dispatch.artifactPath };
-}
-function expandDispatch(raw) {
-    if (raw == null)
-        return undefined;
-    if (!isObj(raw))
-        return INVALID;
-    const kind = DISPATCH_KIND_FROM_COMPACT[raw.k];
-    const artifactPath = raw.ap;
-    if (kind !== 'static-direct' || typeof artifactPath !== 'string' || artifactPath.length === 0)
-        return INVALID;
-    return { kind, artifactPath };
-}
-// Structural recursion guard, deliberately looser than the authored MaxDepth
-// (5) the validators enforce. The codec's job is to bound adversarial
-// recursion in a byte-constrained runtime; the authored contract is
-// validation's. Keeping it looser is what lets an over-depth expression
-// round-trip and be rejected by validation identically in every runtime,
-// rather than being erased by the codec first (ADR 0040).
-export const COMPACT_MAX_DEPTH = 32;
-// A member carrying all/any is an envelope, not a condition — the same
-// presence rule the evaluators apply, so the codec cannot disagree with them
-// about what a member is.
-function isGroupMember(cond) {
-    return !!cond && (cond.all !== undefined || cond.any !== undefined);
-}
-function projectCondition(cond, depth) {
-    // Projection runs at publish time in a trusted context behind write-time
-    // validation: a malformed condition or an operator with no compact token is
-    // vocabulary/codec drift, and silently dropping the condition would ship a
-    // rule missing a leaf — MORE permissive than authored (ADR 0038). The same
-    // reasoning covers a group node: dropping one publishes a rule the author
-    // did not write. Expansion stays fail-closed for already-deployed bundles.
-    if (!cond) {
-        throw new Error('edge rule condition must name a field and operator');
-    }
-    if (isGroupMember(cond)) {
-        if (depth > COMPACT_MAX_DEPTH) {
-            throw new Error('edge rule nests deeper than the codec can project');
-        }
-        if (cond.field !== undefined || cond.operator !== undefined || cond.value !== undefined) {
-            throw new Error('edge rule member mixes group and leaf keys');
-        }
-        const group = {};
-        if (cond.all && cond.all.length > 0)
-            group.a = cond.all.map((member) => projectCondition(member, depth + 1));
-        if (cond.any && cond.any.length > 0)
-            group.n = cond.any.map((member) => projectCondition(member, depth + 1));
-        if (!group.a && !group.n) {
-            throw new Error('edge rule group must include at least one member');
-        }
-        return group;
-    }
-    if (!cond.field || !cond.operator) {
-        throw new Error('edge rule condition must name a field and operator');
-    }
-    const compactOp = OPERATOR_TO_COMPACT[cond.operator];
-    if (!compactOp) {
-        throw new Error(`edge rule operator has no compact token: ${cond.operator}`);
-    }
-    const result = { f: cond.field, o: compactOp };
-    if (cond.value !== undefined)
-        result.w = cond.value;
-    return result;
-}
-function expandCondition(raw, depth) {
-    if (!isObj(raw))
-        return INVALID;
-    if (raw.a !== undefined || raw.n !== undefined) {
-        if (depth > COMPACT_MAX_DEPTH)
-            return INVALID;
-        // A member cannot be both: expanding a mixed record would hand the
-        // evaluator something neither a group nor a condition.
-        if (raw.f !== undefined || raw.o !== undefined || raw.w !== undefined)
-            return INVALID;
-        const group = {};
-        for (const [compact, key] of [['a', 'all'], ['n', 'any']]) {
-            if (raw[compact] === undefined)
-                continue;
-            if (!Array.isArray(raw[compact]))
-                return INVALID;
-            const members = [];
-            for (const member of raw[compact]) {
-                const expanded = expandCondition(member, depth + 1);
-                if (expanded === INVALID)
-                    return INVALID;
-                members.push(expanded);
-            }
-            group[key] = members;
-        }
-        // Length, not truthiness: [] is truthy, so a group whose only list is
-        // empty would otherwise expand into a member with no predicate at all.
-        if ((group.all?.length || 0) + (group.any?.length || 0) === 0)
-            return INVALID;
-        return group;
-    }
-    const f = raw.f;
-    const co = raw.o;
-    if (typeof f !== 'string')
-        return INVALID;
-    const op = OPERATOR_FROM_COMPACT[co];
-    if (!op)
-        return INVALID;
-    const c = { field: f, operator: op };
-    if (raw.w !== undefined)
-        c.value = raw.w;
-    return c;
-}
-function projectRule(rule) {
-    if (!rule)
-        return undefined;
-    const result = {};
-    if (rule.all && rule.all.length > 0)
-        result.a = rule.all.map((cond) => projectCondition(cond, 1));
-    if (rule.any && rule.any.length > 0)
-        result.n = rule.any.map((cond) => projectCondition(cond, 1));
-    if (!result.a && !result.n)
-        return undefined;
-    return result;
-}
-function expandRule(raw) {
-    if (raw == null)
-        return undefined;
-    if (!isObj(raw))
-        return INVALID;
-    const rule = {};
-    if (Array.isArray(raw.a))
-        for (const c of raw.a) {
-            const r = expandCondition(c, 1);
-            if (r === INVALID)
-                return INVALID;
-            if (r)
-                (rule.all = rule.all || []).push(r);
-        }
-    if (Array.isArray(raw.n))
-        for (const c of raw.n) {
-            const r = expandCondition(c, 1);
-            if (r === INVALID)
-                return INVALID;
-            if (r)
-                (rule.any = rule.any || []).push(r);
-        }
-    if (!rule.all && !rule.any)
-        return undefined;
-    return rule;
-}
-function projectVariant(variant) {
-    const result = {};
-    if (variant.priority)
-        result.pr = variant.priority;
-    if (variant.rule)
-        result.r = projectRule(variant.rule);
-    result.d = projectDispatch(variant.dispatch);
-    if (variant.variantValues && Object.keys(variant.variantValues).length > 0)
-        result.vv = variant.variantValues;
-    return result;
-}
-function expandVariant(raw) {
-    if (!isObj(raw))
-        return INVALID;
-    const obj = raw;
-    if (obj.d === undefined)
-        return INVALID;
-    const dispatchResult = expandDispatch(obj.d);
-    if (dispatchResult === INVALID || !dispatchResult)
-        return INVALID;
-    const variant = { variantKey: '', dispatch: dispatchResult };
-    if (typeof obj.pr === 'number')
-        variant.priority = obj.pr;
-    if (obj.r !== undefined) {
-        const ruleResult = expandRule(obj.r);
-        if (ruleResult === INVALID)
-            return INVALID;
-        if (ruleResult)
-            variant.rule = ruleResult;
-    }
-    if (isObj(obj.vv))
-        variant.variantValues = obj.vv;
-    return variant;
-}
-export function projectRouteRecord(entry) {
-    const result = { p: entry.pattern, d: projectDispatch(entry.dispatch) };
-    result.s = 1;
-    if (entry.variants && Object.keys(entry.variants).length > 0) {
-        result.v = {};
-        for (const [key, variant] of Object.entries(entry.variants))
-            result.v[key] = projectVariant(variant);
-    }
-    return result;
-}
-export function expandRouteRecord(raw) {
-    if (!isObj(raw))
-        return INVALID;
-    const obj = raw;
-    if (obj.s !== undefined && obj.s !== 1)
-        return INVALID;
-    const path = obj.p;
-    if (typeof path !== 'string')
-        return INVALID;
-    if (obj.d === undefined)
-        return INVALID;
-    const dispatchResult = expandDispatch(obj.d);
-    if (dispatchResult === INVALID || !dispatchResult)
-        return INVALID;
-    const entry = { pattern: path, priority: 0, dispatch: dispatchResult };
-    if (obj.v !== undefined) {
-        if (!isObj(obj.v))
-            return INVALID;
-        entry.variants = {};
-        for (const [key, variantRaw] of Object.entries(obj.v)) {
-            const variantResult = expandVariant(variantRaw);
-            if (variantResult === INVALID)
-                return INVALID;
-            const variant = variantResult;
-            variant.variantKey = key;
-            if (!variant.variantValues)
-                variant.variantValues = variantValuesFromKey(key);
-            entry.variants[key] = variant;
-        }
-    }
-    return entry;
-}
-// ── Marker (tri-state: record | marker | absent) ─────────────────────
-export const MARKER = '{"s":1,"e":1}';
-export function isMarker(raw) {
-    return raw === MARKER;
-}
-// ── Serialization helpers ────────────────────────────────────────────
-export function canonicalSerialize(value) {
-    return JSON.stringify(sortKeys(value));
-}
-function sortKeys(value) {
-    if (value === null || typeof value !== 'object')
-        return value;
-    if (Array.isArray(value))
-        return value.map(sortKeys);
-    const sorted = {};
-    for (const key of Object.keys(value).sort())
-        sorted[key] = sortKeys(value[key]);
-    return sorted;
-}
-// ── VariantKey parsing ───────────────────────────────────────────────
-export function variantValuesFromKey(key) {
-    const values = {};
-    for (const part of String(key || '').replace(/&/g, ';').split(';')) {
-        const sep = part.indexOf('=');
-        if (sep > 0)
-            values[part.slice(0, sep).trim()] = part.slice(sep + 1).trim();
-    }
-    return values;
-}
-// ── Path hashing (FNV-1a-32, hex 16 chars) ───────────────────────────
-export function pathHash16(path) {
-    let hash = 0x811c9dc5;
-    for (const byte of te.encode(path)) {
-        hash ^= byte;
-        hash = Math.imul(hash, 0x01000193) >>> 0;
-    }
-    return hash.toString(16).padStart(8, '0') + '00000000';
-}

package/dist/mimic/core.d.ts

@@ -1,2 +0,0 @@
-export declare const MIMIC_BANNER_HEADER = "x-aci-mimic-banner";
-export declare function decodeMimicBanner(encoded: string): string;

package/dist/mimic/core.js

@@ -1,31 +0,0 @@
-// View-as-audience mimic banner contract (specs/features/audience-mimic).
-// The platform edge router (internal/domain/hosting/runtime/mimic.ts) owns
-// the mimic session — token validation, cookies, redirects, and banner
-// creation. On body-less SSR rewrites it forwards the rendered banner to the
-// framework host via MIMIC_BANNER_HEADER; this module is the framework-side
-// leg that decodes it (the MimicBanner component in next/page.tsx). The
-// middleware strips any inbound copy of the header and sets it only for a
-// validated session, so the decoded HTML is trusted as authored.
-//
-// The SDK-side token validator that used to live here served the retired
-// Next personalization-host lane (ADR 0041); the Go/TS validators in
-// internal/domain/edge remain pinned by the shared vector file.
-export const MIMIC_BANNER_HEADER = 'x-aci-mimic-banner';
-export function decodeMimicBanner(encoded) {
-    try {
-        return new TextDecoder().decode(base64URLToBytes(encoded));
-    }
-    catch {
-        return '';
-    }
-}
-function base64URLToBytes(value) {
-    const base64 = value.replace(/-/g, '+').replace(/_/g, '/');
-    const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, '=');
-    const binary = atob(padded);
-    const bytes = new Uint8Array(binary.length);
-    for (let i = 0; i < binary.length; i++) {
-        bytes[i] = binary.charCodeAt(i);
-    }
-    return bytes;
-}