@kharon-labs/browser 0.0.0-stage → 0.1.0

package/dist/tracker.cjs

@@ -0,0 +1,170 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// packages/browser/src/tracker.ts
+var tracker_exports = {};
+__export(tracker_exports, {
+  COLLECT_PATH: () => COLLECT_PATH,
+  PIN_KEY: () => PIN_KEY,
+  SESSION_KEY: () => SESSION_KEY,
+  startTracker: () => startTracker
+});
+module.exports = __toCommonJS(tracker_exports);
+
+// src/engine/analytics/beacon.ts
+var BEACON_VERSION = 1;
+var MAX_BEACON_EVENTS = 50;
+var SLOT_ATTRIBUTES = {
+  slot: "data-ge-slot",
+  variant: "data-ge-variant",
+  counterfactual: "data-ge-counterfactual",
+  /** Why the slot shows what it shows (matched, default, holdout). For debugging; not sent. */
+  reason: "data-ge-reason"
+};
+
+// packages/browser/src/tracker.ts
+var COLLECT_PATH = "/api/collect";
+var SESSION_KEY = "ge_sid";
+var PIN_KEY = "ge_pin";
+var VISIBLE_RATIO = 0.5;
+var FLUSH_INTERVAL_MS = 2e3;
+function startTracker({
+  pageId,
+  configVersion,
+  endpoint = COLLECT_PATH,
+  root = document,
+  match,
+  envelope = (events) => ({ v: BEACON_VERSION, events, ...match ? { m: match } : {} }),
+  crossOrigin = false
+}) {
+  const win = root.defaultView ?? window;
+  const sessionId = sessionIdFor(win);
+  const queue = [];
+  const seenSlots = /* @__PURE__ */ new Set();
+  const push = (type, body) => {
+    queue.push({ type, sessionId, ...body });
+    if (queue.length >= MAX_BEACON_EVENTS) flush();
+  };
+  const flush = () => {
+    while (queue.length) send(win, endpoint, envelope(queue.splice(0, MAX_BEACON_EVENTS)), crossOrigin);
+  };
+  push("page_view", { pageId, configVersion });
+  const slots = Array.from(root.querySelectorAll(`[${SLOT_ATTRIBUTES.slot}]`));
+  const observer = "IntersectionObserver" in win ? new win.IntersectionObserver(
+    (entries) => {
+      for (const entry of entries) {
+        if (!entry.isIntersecting || entry.intersectionRatio < VISIBLE_RATIO) continue;
+        const slot = readSlot(entry.target);
+        observer?.unobserve(entry.target);
+        if (!slot || seenSlots.has(slot.slotId)) continue;
+        seenSlots.add(slot.slotId);
+        push("slot_impression", slot);
+      }
+    },
+    { threshold: VISIBLE_RATIO }
+  ) : null;
+  for (const slot of slots) observer?.observe(slot);
+  const interaction = (action) => (event) => {
+    const slot = closestSlot(event.target);
+    if (slot) push("interaction", { slotId: slot.slotId, variantId: slot.variantId, action });
+  };
+  const onClick = interaction("click");
+  const onCopy = interaction("copy");
+  const onToggle = (event) => {
+    if (event.target.open) interaction("expand")(event);
+  };
+  const onSubmit = (event) => {
+    const goal = event.target.closest?.("form")?.getAttribute("data-ge-goal");
+    if (goal) conversion(goal);
+  };
+  const onHide = () => {
+    if (root.visibilityState === "hidden") flush();
+  };
+  const conversion = (goal, value) => {
+    push("conversion", value === void 0 ? { goal } : { goal, value });
+    flush();
+  };
+  root.addEventListener("click", onClick, true);
+  root.addEventListener("copy", onCopy, true);
+  root.addEventListener("toggle", onToggle, true);
+  root.addEventListener("submit", onSubmit, true);
+  root.addEventListener("visibilitychange", onHide);
+  win.addEventListener("pagehide", flush);
+  const timer = win.setInterval(flush, FLUSH_INTERVAL_MS);
+  return {
+    conversion,
+    flush,
+    stop({ discard = false } = {}) {
+      if (discard) queue.length = 0;
+      flush();
+      observer?.disconnect();
+      win.clearInterval(timer);
+      root.removeEventListener("click", onClick, true);
+      root.removeEventListener("copy", onCopy, true);
+      root.removeEventListener("toggle", onToggle, true);
+      root.removeEventListener("submit", onSubmit, true);
+      root.removeEventListener("visibilitychange", onHide);
+      win.removeEventListener("pagehide", flush);
+    }
+  };
+}
+function readSlot(el) {
+  const slotId = el.getAttribute(SLOT_ATTRIBUTES.slot);
+  if (!slotId) return null;
+  return {
+    slotId,
+    variantId: el.getAttribute(SLOT_ATTRIBUTES.variant) || null,
+    counterfactualVariantId: el.getAttribute(SLOT_ATTRIBUTES.counterfactual) || null
+  };
+}
+function closestSlot(target) {
+  const el = target instanceof Element ? target.closest(`[${SLOT_ATTRIBUTES.slot}]`) : null;
+  return el ? readSlot(el) : null;
+}
+function sessionIdFor(win) {
+  try {
+    const existing = win.sessionStorage.getItem(SESSION_KEY);
+    if (existing) return existing;
+    const id = uuid(win);
+    win.sessionStorage.setItem(SESSION_KEY, id);
+    return id;
+  } catch {
+    return uuid(win);
+  }
+}
+function uuid(win) {
+  if (typeof win.crypto.randomUUID === "function") return win.crypto.randomUUID();
+  const b = win.crypto.getRandomValues(new Uint8Array(16));
+  b[6] = b[6] & 15 | 64;
+  b[8] = b[8] & 63 | 128;
+  const hex = Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+function send(win, endpoint, payload, crossOrigin) {
+  const body = JSON.stringify(payload);
+  const type = crossOrigin ? "text/plain" : "application/json";
+  if (win.navigator.sendBeacon?.(endpoint, new Blob([body], { type }))) return;
+  void win.fetch(endpoint, {
+    method: "POST",
+    body,
+    keepalive: true,
+    credentials: crossOrigin ? "omit" : "same-origin",
+    headers: { "content-type": type }
+  }).catch((error) => console.warn("[ge] analytics beacon failed", error));
+}

package/dist/tracker.d.ts

@@ -0,0 +1,95 @@
+type SignalSource = "campaign_link" | "form_email" | "known_visitor" | "reverse_ip" | "referrer";
+interface BaseEvent {
+	siteId: string;
+	visitorId: string;
+	sessionId: string;
+	/** Epoch milliseconds, stamped by the collector (not the browser) to avoid clock skew. */
+	ts: number;
+	/**
+	 * The company identity resolution matched the visitor to, by domain, stamped by the collector from
+	 * the server-signed match token. Null when resolve matched no company; absent when unknown (no valid
+	 * token, e.g. an older SDK, or stored before stamping).
+	 * Firmographics are joined from the company source at report time.
+	 */
+	companyDomain?: string | null;
+	/** The evidence behind that match (a campaign link, reverse IP…), so reports can weigh or exclude it. */
+	companySource?: SignalSource | null;
+}
+interface PageViewEvent extends BaseEvent {
+	type: "page_view";
+	pageId: string;
+	/** Site config version that was resolved, so results are attributable to what was live. */
+	configVersion: number;
+}
+interface SlotImpressionEvent extends BaseEvent {
+	type: "slot_impression";
+	slotId: string;
+	variantId: string | null;
+	/** Set for holdout visitors: the variant withheld from them. See Decision.counterfactualVariantId. */
+	counterfactualVariantId: string | null;
+}
+interface InteractionEvent extends BaseEvent {
+	type: "interaction";
+	slotId: string;
+	variantId: string | null;
+	action: "click" | "hover" | "copy" | "expand";
+}
+interface ConversionEvent extends BaseEvent {
+	type: "conversion";
+	goal: string;
+	value?: number;
+}
+type AnalyticsEvent = PageViewEvent | SlotImpressionEvent | InteractionEvent | ConversionEvent;
+type ServerStamped = "siteId" | "visitorId" | "ts" | "companyDomain" | "companySource";
+type BeaconEvent = {
+	[K in AnalyticsEvent["type"]]: Omit<Extract<AnalyticsEvent, {
+		type: K;
+	}>, ServerStamped>;
+}[AnalyticsEvent["type"]];
+export declare const COLLECT_PATH = "/api/collect";
+/** sessionStorage key for the tab's session id. Removed when a visitor withdraws consent. */
+export declare const SESSION_KEY = "ge_sid";
+/**
+ * sessionStorage key for the config pin (set by the client, not the tracker): the tab keeps the copy
+ * it started with when someone publishes, until a rollback. Stored and removed with the visitor id.
+ */
+export declare const PIN_KEY = "ge_pin";
+export interface TrackerOptions {
+	pageId: string;
+	configVersion: number;
+	endpoint?: string;
+	root?: Document;
+	/**
+	 * The server-signed match token for this page view (hosted: rendered by the page). Sent with every
+	 * batch of the default envelope so the collector can stamp the matched company. Opaque.
+	 */
+	match?: string;
+	/**
+	 * Wraps a batch of events into the request body. Defaults to beacon v1, which the same-origin
+	 * collector stamps with the visitor from its own cookie.
+	 */
+	envelope?: (events: BeaconEvent[]) => object;
+	/**
+	 * The collector is on another origin (snippet mode). Bodies go as `text/plain` without cookies,
+	 * so the browser sends them without a CORS preflight.
+	 */
+	crossOrigin?: boolean;
+}
+export interface Tracker {
+	/** Record that a workspace goal fired. Flushes at once, since a conversion often precedes navigation. */
+	conversion(goal: string, value?: number): void;
+	flush(): void;
+	/** Stops measuring. Queued events are sent, unless `discard` (consent was withdrawn). */
+	stop(options?: {
+		discard?: boolean;
+	}): void;
+}
+/**
+ * The client half of the measurement pipeline. Sends one page view, one impression per slot once at
+ * least half of it is on screen, interactions inside slots, and conversions (forms marked
+ * `data-ge-goal`, or `conversion()`). Events are batched and sent with `sendBeacon` so a closing tab
+ * still delivers them.
+ */
+export declare function startTracker({ pageId, configVersion, endpoint, root, match, envelope, crossOrigin, }: TrackerOptions): Tracker;
+
+export {};

package/dist/tracker.js

@@ -0,0 +1,147 @@
+// src/engine/analytics/beacon.ts
+var BEACON_VERSION = 1;
+var MAX_BEACON_EVENTS = 50;
+var SLOT_ATTRIBUTES = {
+  slot: "data-ge-slot",
+  variant: "data-ge-variant",
+  counterfactual: "data-ge-counterfactual",
+  /** Why the slot shows what it shows (matched, default, holdout). For debugging; not sent. */
+  reason: "data-ge-reason"
+};
+
+// packages/browser/src/tracker.ts
+var COLLECT_PATH = "/api/collect";
+var SESSION_KEY = "ge_sid";
+var PIN_KEY = "ge_pin";
+var VISIBLE_RATIO = 0.5;
+var FLUSH_INTERVAL_MS = 2e3;
+function startTracker({
+  pageId,
+  configVersion,
+  endpoint = COLLECT_PATH,
+  root = document,
+  match,
+  envelope = (events) => ({ v: BEACON_VERSION, events, ...match ? { m: match } : {} }),
+  crossOrigin = false
+}) {
+  const win = root.defaultView ?? window;
+  const sessionId = sessionIdFor(win);
+  const queue = [];
+  const seenSlots = /* @__PURE__ */ new Set();
+  const push = (type, body) => {
+    queue.push({ type, sessionId, ...body });
+    if (queue.length >= MAX_BEACON_EVENTS) flush();
+  };
+  const flush = () => {
+    while (queue.length) send(win, endpoint, envelope(queue.splice(0, MAX_BEACON_EVENTS)), crossOrigin);
+  };
+  push("page_view", { pageId, configVersion });
+  const slots = Array.from(root.querySelectorAll(`[${SLOT_ATTRIBUTES.slot}]`));
+  const observer = "IntersectionObserver" in win ? new win.IntersectionObserver(
+    (entries) => {
+      for (const entry of entries) {
+        if (!entry.isIntersecting || entry.intersectionRatio < VISIBLE_RATIO) continue;
+        const slot = readSlot(entry.target);
+        observer?.unobserve(entry.target);
+        if (!slot || seenSlots.has(slot.slotId)) continue;
+        seenSlots.add(slot.slotId);
+        push("slot_impression", slot);
+      }
+    },
+    { threshold: VISIBLE_RATIO }
+  ) : null;
+  for (const slot of slots) observer?.observe(slot);
+  const interaction = (action) => (event) => {
+    const slot = closestSlot(event.target);
+    if (slot) push("interaction", { slotId: slot.slotId, variantId: slot.variantId, action });
+  };
+  const onClick = interaction("click");
+  const onCopy = interaction("copy");
+  const onToggle = (event) => {
+    if (event.target.open) interaction("expand")(event);
+  };
+  const onSubmit = (event) => {
+    const goal = event.target.closest?.("form")?.getAttribute("data-ge-goal");
+    if (goal) conversion(goal);
+  };
+  const onHide = () => {
+    if (root.visibilityState === "hidden") flush();
+  };
+  const conversion = (goal, value) => {
+    push("conversion", value === void 0 ? { goal } : { goal, value });
+    flush();
+  };
+  root.addEventListener("click", onClick, true);
+  root.addEventListener("copy", onCopy, true);
+  root.addEventListener("toggle", onToggle, true);
+  root.addEventListener("submit", onSubmit, true);
+  root.addEventListener("visibilitychange", onHide);
+  win.addEventListener("pagehide", flush);
+  const timer = win.setInterval(flush, FLUSH_INTERVAL_MS);
+  return {
+    conversion,
+    flush,
+    stop({ discard = false } = {}) {
+      if (discard) queue.length = 0;
+      flush();
+      observer?.disconnect();
+      win.clearInterval(timer);
+      root.removeEventListener("click", onClick, true);
+      root.removeEventListener("copy", onCopy, true);
+      root.removeEventListener("toggle", onToggle, true);
+      root.removeEventListener("submit", onSubmit, true);
+      root.removeEventListener("visibilitychange", onHide);
+      win.removeEventListener("pagehide", flush);
+    }
+  };
+}
+function readSlot(el) {
+  const slotId = el.getAttribute(SLOT_ATTRIBUTES.slot);
+  if (!slotId) return null;
+  return {
+    slotId,
+    variantId: el.getAttribute(SLOT_ATTRIBUTES.variant) || null,
+    counterfactualVariantId: el.getAttribute(SLOT_ATTRIBUTES.counterfactual) || null
+  };
+}
+function closestSlot(target) {
+  const el = target instanceof Element ? target.closest(`[${SLOT_ATTRIBUTES.slot}]`) : null;
+  return el ? readSlot(el) : null;
+}
+function sessionIdFor(win) {
+  try {
+    const existing = win.sessionStorage.getItem(SESSION_KEY);
+    if (existing) return existing;
+    const id = uuid(win);
+    win.sessionStorage.setItem(SESSION_KEY, id);
+    return id;
+  } catch {
+    return uuid(win);
+  }
+}
+function uuid(win) {
+  if (typeof win.crypto.randomUUID === "function") return win.crypto.randomUUID();
+  const b = win.crypto.getRandomValues(new Uint8Array(16));
+  b[6] = b[6] & 15 | 64;
+  b[8] = b[8] & 63 | 128;
+  const hex = Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+function send(win, endpoint, payload, crossOrigin) {
+  const body = JSON.stringify(payload);
+  const type = crossOrigin ? "text/plain" : "application/json";
+  if (win.navigator.sendBeacon?.(endpoint, new Blob([body], { type }))) return;
+  void win.fetch(endpoint, {
+    method: "POST",
+    body,
+    keepalive: true,
+    credentials: crossOrigin ? "omit" : "same-origin",
+    headers: { "content-type": type }
+  }).catch((error) => console.warn("[ge] analytics beacon failed", error));
+}
+export {
+  COLLECT_PATH,
+  PIN_KEY,
+  SESSION_KEY,
+  startTracker
+};

package/dist/v1.js

@@ -0,0 +1 @@
+"use strict";(()=>{var Te=Object.defineProperty;var Ve=(e,t)=>{for(var n in t)Te(e,n,{get:t[n],enumerable:!0})};var ee={};Ve(ee,{ANTI_FLICKER_SNIPPET:()=>me,DEFAULT_API_BASE:()=>X,DEFAULT_TIMEOUT_MS:()=>U,VISITOR_COOKIE:()=>R,antiFlickerStart:()=>q,applyDecision:()=>J,conversion:()=>We,createClient:()=>F,hashSlotDefaults:()=>O,init:()=>Q,isWritable:()=>Z,pageIdFor:()=>Y,parseResolveResponse:()=>$,refresh:()=>qe,reveal:()=>B,scanSlots:()=>W,setConsent:()=>He});var d={slot:"data-ge-slot",variant:"data-ge-variant",counterfactual:"data-ge-counterfactual",reason:"data-ge-reason"};var Oe="/api/collect",D="ge_sid",w="ge_pin",ne=.5,Ce=2e3;function re({pageId:e,configVersion:t,endpoint:n=Oe,root:o=document,match:r,envelope:s=c=>({v:1,events:c,...r?{m:r}:{}}),crossOrigin:a=!1}){let c=o.defaultView??window,u=be(c),f=[],h=new Set,A=(l,p)=>{f.push({type:l,sessionId:u,...p}),f.length>=50&&m()},m=()=>{for(;f.length;)Pe(c,n,s(f.splice(0,50)),a)};A("page_view",{pageId:e,configVersion:t});let i=Array.from(o.querySelectorAll(`[${d.slot}]`)),v="IntersectionObserver"in c?new c.IntersectionObserver(l=>{for(let p of l){if(!p.isIntersecting||p.intersectionRatio<ne)continue;let g=se(p.target);v?.unobserve(p.target),!(!g||h.has(g.slotId))&&(h.add(g.slotId),A("slot_impression",g))}},{threshold:ne}):null;for(let l of i)v?.observe(l);let I=l=>p=>{let g=ke(p.target);g&&A("interaction",{slotId:g.slotId,variantId:g.variantId,action:l})},C=I("click"),_=I("copy"),N=l=>{l.target.open&&I("expand")(l)},k=l=>{let p=l.target.closest?.("form")?.getAttribute("data-ge-goal");p&&b(p)},x=()=>{o.visibilityState==="hidden"&&m()},b=(l,p)=>{A("conversion",p===void 0?{goal:l}:{goal:l,value:p}),m()};o.addEventListener("click",C,!0),o.addEventListener("copy",_,!0),o.addEventListener("toggle",N,!0),o.addEventListener("submit",k,!0),o.addEventListener("visibilitychange",x),c.addEventListener("pagehide",m);let y=c.setInterval(m,Ce);return{conversion:b,flush:m,stop({discard:l=!1}={}){l&&(f.length=0),m(),v?.disconnect(),c.clearInterval(y),o.removeEventListener("click",C,!0),o.removeEventListener("copy",_,!0),o.removeEventListener("toggle",N,!0),o.removeEventListener("submit",k,!0),o.removeEventListener("visibilitychange",x),c.removeEventListener("pagehide",m)}}}function se(e){let t=e.getAttribute(d.slot);return t?{slotId:t,variantId:e.getAttribute(d.variant)||null,counterfactualVariantId:e.getAttribute(d.counterfactual)||null}:null}function ke(e){let t=e instanceof Element?e.closest(`[${d.slot}]`):null;return t?se(t):null}function be(e){try{let t=e.sessionStorage.getItem(D);if(t)return t;let n=oe(e);return e.sessionStorage.setItem(D,n),n}catch{return oe(e)}}function oe(e){if(typeof e.crypto.randomUUID=="function")return e.crypto.randomUUID();let t=e.crypto.getRandomValues(new Uint8Array(16));t[6]=t[6]&15|64,t[8]=t[8]&63|128;let n=Array.from(t,o=>o.toString(16).padStart(2,"0")).join("");return`${n.slice(0,8)}-${n.slice(8,12)}-${n.slice(12,16)}-${n.slice(16,20)}-${n.slice(20)}`}function Pe(e,t,n,o){let r=JSON.stringify(n),s=o?"text/plain":"application/json";e.navigator.sendBeacon?.(t,new Blob([r],{type:s}))||e.fetch(t,{method:"POST",body:r,keepalive:!0,credentials:o?"omit":"same-origin",headers:{"content-type":s}}).catch(a=>console.warn("[ge] analytics beacon failed",a))}var S="ge_preview";var ie=/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;function T(e){return typeof e=="string"&&ie.test(e)}function O(e){let t=JSON.stringify(Object.keys(e).sort().map(o=>[o,e[o]])),n=2166136261;for(let o=0;o<t.length;o++)n^=t.charCodeAt(o),n=Math.imul(n,16777619);return(n>>>0).toString(16).padStart(8,"0")}var ce="/api/v1/resolve",le="/api/v1/collect",Be=["matched","default","holdout"];function $(e){if(!M(e)||e.v!==1||!M(e.decisions)||!Number.isSafeInteger(e.configVersion)||typeof e.persist!="boolean")return null;let t=T(e.vid)?e.vid:void 0,n=e.persist&&t!==void 0,o=n&&typeof e.pin=="string"&&/^\d{1,9}\.\d{1,9}$/.test(e.pin)?e.pin:void 0,r={};for(let[a,c]of Object.entries(e.decisions)){let u=Le(c);u&&(r[a]=u)}let s=n&&typeof e.m=="string"&&e.m.length<=1024?e.m:void 0;return e.preview===!0?{v:1,configVersion:e.configVersion,persist:!1,preview:!0,decisions:r}:{v:1,configVersion:e.configVersion,persist:n,vid:t,...o?{pin:o}:{},decisions:r,...s?{m:s}:{}}}function Le(e){if(!M(e)||!M(e.content)||!ae(e.variantId)||!ae(e.counterfactualVariantId)||!Be.includes(e.reason))return null;let t={};for(let[n,o]of Object.entries(e.content))typeof o=="string"&&(t[n]=o);return{variantId:e.variantId,counterfactualVariantId:e.counterfactualVariantId,reason:e.reason,content:t}}function M(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function ae(e){return e===null||typeof e=="string"}var X="https://kharonlabs.com",U=500,Ne=5e3,R="ge_vid",De=365*24*60*60;function F(e){let t=e.root??document,n=t.defaultView??window,o=(e.apiBase??X).replace(/\/+$/,""),r=new Set,s=e.consent??"unknown",a=!1,c,u=null,f=!1,h=(i=!1)=>{u?.stop({discard:i}),u=null},A=()=>{a=!1,c=void 0,h(!0),Ke(t,R,e.cookieDomain);try{n.sessionStorage.removeItem(D),n.sessionStorage.removeItem(w)}catch{}},m=i=>{if(i.preview){f=!0,h(!0);return}i.persist&&i.vid&&s!=="denied"?(a=!0,c=i.m,K(t,R)!==i.vid&&$e(t,R,i.vid,e.cookieDomain),i.pin&&ue(n,w,i.pin)):(a||K(t,R))&&A()};return{get consent(){return s},async resolve(i,v=Date.now()+Ne){let I=K(t,R),C=pe(n,w),_=we(n),N={v:1,key:e.key,...T(I)?{vid:I}:{},...C?{pin:C}:{},url:_.url,referrer:t.referrer,slots:i.map(y=>({id:y.id,h:O(y.defaults)})),consent:s,gpc:n.navigator.globalPrivacyControl===!0},k=v-Date.now();if(k<=0||typeof n.fetch!="function")return null;let x=typeof AbortController=="function"?new AbortController:null,b;try{let y=n.fetch(o+ce,{method:"POST",body:JSON.stringify(N),credentials:"omit",signal:x?.signal}),l=new Promise(_e=>{b=setTimeout(()=>{x?.abort(),_e(null)},k)}),p=await Promise.race([y,l]);if(!p)return null;if(!p.ok)return console.warn(`[kharon] resolve answered ${p.status}; keeping defaults`),null;let g=$(await Promise.race([p.json(),l]));return!g||Date.now()>v?null:(g.preview&&_.token?ue(n,S,_.token):!g.preview&&_.token&&Me(n,S),m(g),g)}catch(y){return x?.signal.aborted||console.warn("[kharon] resolve failed; keeping defaults",y),null}finally{clearTimeout(b)}},adopt:m,track(i){h();let v=K(t,R);f||!a||!T(v)||(u=re({pageId:e.pageId??Y(n.location.pathname),configVersion:i,endpoint:o+le,root:t,crossOrigin:!0,envelope:I=>({v:2,key:e.key,vid:v,consent:s,events:I,...c?{m:c}:{}})}))},setConsent(i){if(i!==s){s=i,i==="denied"&&A();for(let v of r)v(i)}},onConsentChange(i){return r.add(i),()=>r.delete(i)},conversion(i,v){u?.conversion(i,v)},stop:()=>h()}}function Y(e){return e.split("/").map(n=>n.replace(/[^A-Za-z0-9_:-]/g,"")).filter(Boolean).join(".").slice(0,128)||"home"}function K(e,t){for(let n of e.cookie.split(";")){let[o,...r]=n.trim().split("=");if(o===t)try{return decodeURIComponent(r.join("="))}catch{return}}}function pe(e,t){try{return e.sessionStorage.getItem(t)}catch{return null}}function we(e){let t=e.location.href,n;try{n=new URL(t)}catch{return{url:t,token:null}}let o=n.searchParams.get(S);if(o)return{url:t,token:o};let r=pe(e,S);return r?(n.searchParams.set(S,r),{url:n.toString(),token:r}):{url:t,token:null}}function Me(e,t){try{e.sessionStorage.removeItem(t)}catch{}}function ue(e,t,n){try{e.sessionStorage.setItem(t,n)}catch{}}function de(e,t){let n=e.location?.protocol==="https:"?"; Secure":"";return`; Path=/; SameSite=Lax${t?`; Domain=${t}`:""}${n}`}function $e(e,t,n,o){e.cookie=`${t}=${encodeURIComponent(n)}; Max-Age=${De}${de(e,o)}`}function Ke(e,t,n){e.cookie=`${t}=; Max-Age=0${de(e,n)}`}var fe="data-ge-field",ge="data-ge-attr",G="kharon-af",me=`<style id="${G}">[${d.slot}]{visibility:hidden!important}</style><script>window.__kharonAf=Date.now();setTimeout(function(){var s=document.getElementById("${G}");s&&s.parentNode.removeChild(s)},500)<\/script>`,Ue=new Set(["href","src","action","formaction","poster","cite","xlink:href"]),Fe=/^(on|style$|srcdoc$|srcset$)/,H=new WeakMap,P="#text";function Ee(e,t){return t===null?(e.textContent??"").trim():e.getAttribute(t)}function Ie(e,t){let n=H.get(e);return n?.has(t??P)?n.get(t??P):Ee(e,t)}function ve(e,t,n){let o=H.get(e);o||H.set(e,o=new Map),o.has(t??P)||o.set(t??P,Ee(e,t)),t===null?e.textContent=n??"":n===null?e.removeAttribute(t):e.setAttribute(t,n)}function W(e){let t=new Map;for(let n of Se(e)){let o=n.getAttribute(d.slot);if(t.has(o))continue;let r={};for(let s of Re(n))s.field in r||(r[s.field]=Ie(s.el,s.attr)??"");t.set(o,{id:o,defaults:r})}return[...t.values()]}function ye(e,t){for(let n of Se(e)){let o=t.decisions[n.getAttribute(d.slot)];o&&J(n,o,e.baseURI)}}function J(e,t,n){for(let{el:o,field:r,attr:s}of Re(e)){let a=t.content[r];typeof a=="string"&&(s===null||Z(s,a,n))?ve(o,s,a):H.get(o)?.has(s??P)&&ve(o,s,Ie(o,s))}e.setAttribute(d.variant,t.variantId??""),e.setAttribute(d.counterfactual,t.counterfactualVariantId??""),e.setAttribute(d.reason,t.reason)}function B(e){e.getElementById(G)?.remove()}function q(e){let t=e.defaultView?.__kharonAf;return typeof t=="number"?t:void 0}function Z(e,t,n){let o=e.toLowerCase();if(Fe.test(o))return!1;if(!Ue.has(o))return!0;try{let{protocol:r}=new URL(t,n);return r==="http:"||r==="https:"}catch{return!1}}function Se(e){return Array.from(e.querySelectorAll(`[${d.slot}]`))}function Re(e){let t=[],n=[e,...Array.from(e.querySelectorAll(`[${fe}],[${ge}]`))];for(let o of n){if(o!==e&&o.closest(`[${d.slot}]`)!==e)continue;let r=o.getAttribute(fe);r&&t.push({el:o,field:r,attr:null});for(let s of(o.getAttribute(ge)??"").split(",")){let a=s.lastIndexOf(":"),c=s.slice(0,a).trim(),u=s.slice(a+1).trim();a>0&&c&&u&&t.push({el:o,field:u,attr:c})}}return t}var E=null,he;function Q(e){if(E)return console.warn("[kharon] init called twice; keeping the first instance"),E;let t=e.root??document,n=e.timeoutMs??U,o=F({...e,consent:he??e.consent}),r=async u=>{try{let f=await o.resolve(W(t),u);f&&ye(t,f),B(t),f&&o.track(f.configVersion)}catch(f){B(t),console.warn("[kharon] personalization failed; keeping defaults",f)}},a=new Promise(u=>{t.readyState!=="loading"?u():t.addEventListener("DOMContentLoaded",()=>u(),{once:!0})}).then(()=>r((q(t)??Date.now())+n));o.onConsentChange(u=>{u==="granted"&&(a=a.then(()=>r()))});let c={client:o,get ready(){return a},setConsent:o.setConsent,conversion:o.conversion,refresh(){return a=a.then(()=>r(Date.now()+n)),a},stop(){o.stop(),E===c&&(E=null)}};return E=c,c}function He(e){E?E.setConsent(e):he=e}function We(e,t){E?.conversion(e,t)}function qe(){return E?.refresh()??Promise.resolve()}var je=["granted","denied","unknown"],L=document.currentScript;window.kharon=ee;var Ae=L?.getAttribute("data-key");L&&Ae&&Q({key:Ae,apiBase:L.getAttribute("data-api")??new URL(L.src).origin,consent:je.find(e=>e===L.getAttribute("data-consent"))});})();

package/package.json

@@ -1,6 +1,34 @@
 {
   "name": "@kharon-labs/browser",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Personalize slots on any website with Kharon Labs: swaps in the variant for each visitor and measures lift against a holdout.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/alexarmenciu/growth-engine.git",
+    "directory": "packages/browser"
+  },
+  "homepage": "https://kharonlabs.com",
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./tracker": {
+      "types": "./dist/tracker.d.ts",
+      "import": "./dist/tracker.js",
+      "require": "./dist/tracker.cjs"
+    }
+  },
+  "files": ["dist"],
+  "browserslist": ["defaults"],
+  "publishConfig": {
+    "access": "public"
+  }
+}