@kharon-labs/browser 0.0.0-stage → 0.2.0

package/dist/tracker.cjs

@@ -0,0 +1,228 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// packages/browser/src/tracker.ts
+var tracker_exports = {};
+__export(tracker_exports, {
+  COLLECT_PATH: () => COLLECT_PATH,
+  PIN_KEY: () => PIN_KEY,
+  SESSION_KEY: () => SESSION_KEY,
+  startTracker: () => startTracker
+});
+module.exports = __toCommonJS(tracker_exports);
+
+// src/engine/analytics/touch.ts
+var MAX_TOUCH_VALUE = 100;
+var CLICK_ID_PARAMS = {
+  gclid: "google",
+  gbraid: "google",
+  wbraid: "google",
+  msclkid: "microsoft",
+  fbclid: "meta",
+  li_fat_id: "linkedin",
+  ttclid: "tiktok",
+  twclid: "x"
+};
+var CLICK_ID_KINDS = new Set(Object.values(CLICK_ID_PARAMS));
+var UTM_FIELDS = ["source", "medium", "campaign", "term", "content"];
+var KHARON_LINK_PARAM = "ge_co";
+function touchFromUrl(url, referrer) {
+  const touch = {};
+  let page;
+  try {
+    page = new URL(url);
+  } catch {
+    return touch;
+  }
+  for (const field of UTM_FIELDS) {
+    const value = clean(page.searchParams.get(`utm_${field}`));
+    if (value) touch[field] = value;
+  }
+  for (const [param, kind] of Object.entries(CLICK_ID_PARAMS)) {
+    if (page.searchParams.get(param)) {
+      touch.clickId = kind;
+      break;
+    }
+  }
+  if (page.searchParams.get(KHARON_LINK_PARAM)) touch.kharonLink = true;
+  const from = referrerHost(referrer);
+  if (from && from !== bareHost(page.hostname)) touch.referrer = from;
+  return touch;
+}
+function clean(value) {
+  const trimmed = value?.replace(/[\u0000-\u001f\u007f]/g, "").trim();
+  return trimmed ? trimmed.slice(0, MAX_TOUCH_VALUE) : null;
+}
+function referrerHost(referrer) {
+  if (!referrer) return null;
+  try {
+    const { protocol, hostname } = new URL(referrer);
+    return protocol === "http:" || protocol === "https:" ? bareHost(hostname) : null;
+  } catch {
+    return null;
+  }
+}
+function bareHost(hostname) {
+  return hostname.toLowerCase().replace(/^www\./, "");
+}
+
+// src/engine/analytics/beacon.ts
+var BEACON_VERSION = 1;
+var MAX_BEACON_EVENTS = 50;
+var SLOT_ATTRIBUTES = {
+  slot: "data-ge-slot",
+  variant: "data-ge-variant",
+  counterfactual: "data-ge-counterfactual",
+  /** Why the slot shows what it shows (matched, default, holdout). For debugging; not sent. */
+  reason: "data-ge-reason",
+  /** Which step of the fallback ladder chose the content (exact, near, segment, default). Sent on impressions. */
+  rung: "data-ge-rung"
+};
+
+// packages/browser/src/tracker.ts
+var COLLECT_PATH = "/api/collect";
+var SESSION_KEY = "ge_sid";
+var PIN_KEY = "ge_pin";
+var VISIBLE_RATIO = 0.5;
+var FLUSH_INTERVAL_MS = 2e3;
+function startTracker({
+  pageId,
+  configVersion,
+  endpoint = COLLECT_PATH,
+  root = document,
+  match,
+  envelope = (events) => ({ v: BEACON_VERSION, events, ...match ? { m: match } : {} }),
+  crossOrigin = false
+}) {
+  const win = root.defaultView ?? window;
+  const { id: sessionId, started } = sessionFor(win);
+  const queue = [];
+  const seenSlots = /* @__PURE__ */ new Set();
+  const push = (type, body) => {
+    queue.push({ type, sessionId, ...body });
+    if (queue.length >= MAX_BEACON_EVENTS) flush();
+  };
+  const flush = () => {
+    while (queue.length) send(win, endpoint, envelope(queue.splice(0, MAX_BEACON_EVENTS)), crossOrigin);
+  };
+  push("page_view", started ? { pageId, configVersion, touch: touchFromUrl(win.location.href, root.referrer) } : { pageId, configVersion });
+  const slots = Array.from(root.querySelectorAll(`[${SLOT_ATTRIBUTES.slot}]`));
+  const observer = "IntersectionObserver" in win ? new win.IntersectionObserver(
+    (entries) => {
+      for (const entry of entries) {
+        if (!entry.isIntersecting || entry.intersectionRatio < VISIBLE_RATIO) continue;
+        const slot = readSlot(entry.target);
+        observer?.unobserve(entry.target);
+        if (!slot || seenSlots.has(slot.slotId)) continue;
+        seenSlots.add(slot.slotId);
+        push("slot_impression", slot);
+      }
+    },
+    { threshold: VISIBLE_RATIO }
+  ) : null;
+  for (const slot of slots) observer?.observe(slot);
+  const interaction = (action) => (event) => {
+    const slot = closestSlot(event.target);
+    if (slot) push("interaction", { slotId: slot.slotId, variantId: slot.variantId, action });
+  };
+  const onClick = interaction("click");
+  const onCopy = interaction("copy");
+  const onToggle = (event) => {
+    if (event.target.open) interaction("expand")(event);
+  };
+  const onSubmit = (event) => {
+    const goal = event.target.closest?.("form")?.getAttribute("data-ge-goal");
+    if (goal) conversion(goal);
+  };
+  const onHide = () => {
+    if (root.visibilityState === "hidden") flush();
+  };
+  const conversion = (goal, value) => {
+    push("conversion", value === void 0 ? { goal } : { goal, value });
+    flush();
+  };
+  root.addEventListener("click", onClick, true);
+  root.addEventListener("copy", onCopy, true);
+  root.addEventListener("toggle", onToggle, true);
+  root.addEventListener("submit", onSubmit, true);
+  root.addEventListener("visibilitychange", onHide);
+  win.addEventListener("pagehide", flush);
+  const timer = win.setInterval(flush, FLUSH_INTERVAL_MS);
+  return {
+    conversion,
+    flush,
+    stop({ discard = false } = {}) {
+      if (discard) queue.length = 0;
+      flush();
+      observer?.disconnect();
+      win.clearInterval(timer);
+      root.removeEventListener("click", onClick, true);
+      root.removeEventListener("copy", onCopy, true);
+      root.removeEventListener("toggle", onToggle, true);
+      root.removeEventListener("submit", onSubmit, true);
+      root.removeEventListener("visibilitychange", onHide);
+      win.removeEventListener("pagehide", flush);
+    }
+  };
+}
+function readSlot(el) {
+  const slotId = el.getAttribute(SLOT_ATTRIBUTES.slot);
+  if (!slotId) return null;
+  return {
+    slotId,
+    variantId: el.getAttribute(SLOT_ATTRIBUTES.variant) || null,
+    counterfactualVariantId: el.getAttribute(SLOT_ATTRIBUTES.counterfactual) || null,
+    ...el.getAttribute(SLOT_ATTRIBUTES.rung) ? { rung: el.getAttribute(SLOT_ATTRIBUTES.rung) } : {}
+  };
+}
+function closestSlot(target) {
+  const el = target instanceof Element ? target.closest(`[${SLOT_ATTRIBUTES.slot}]`) : null;
+  return el ? readSlot(el) : null;
+}
+function sessionFor(win) {
+  try {
+    const existing = win.sessionStorage.getItem(SESSION_KEY);
+    if (existing) return { id: existing, started: false };
+    const id = uuid(win);
+    win.sessionStorage.setItem(SESSION_KEY, id);
+    return { id, started: true };
+  } catch {
+    return { id: uuid(win), started: true };
+  }
+}
+function uuid(win) {
+  if (typeof win.crypto.randomUUID === "function") return win.crypto.randomUUID();
+  const b = win.crypto.getRandomValues(new Uint8Array(16));
+  b[6] = b[6] & 15 | 64;
+  b[8] = b[8] & 63 | 128;
+  const hex = Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+function send(win, endpoint, payload, crossOrigin) {
+  const body = JSON.stringify(payload);
+  const type = crossOrigin ? "text/plain" : "application/json";
+  if (win.navigator.sendBeacon?.(endpoint, new Blob([body], { type }))) return;
+  void win.fetch(endpoint, {
+    method: "POST",
+    body,
+    keepalive: true,
+    credentials: crossOrigin ? "omit" : "same-origin",
+    headers: { "content-type": type }
+  }).catch((error) => console.warn("[ge] analytics beacon failed", error));
+}

package/dist/tracker.d.ts

@@ -0,0 +1,130 @@
+type SignalSource = "campaign_link" | "form_email" | "known_visitor" | "reverse_ip" | "referrer";
+type DecisionRung = "exact" | "near" | "segment" | "default";
+interface Touch$1 {
+	/** `utm_source`, `utm_medium`, … as tagged, trimmed to `MAX_TOUCH_VALUE` characters. */
+	source?: string;
+	medium?: string;
+	campaign?: string;
+	term?: string;
+	content?: string;
+	/** Which ad network's click id the URL carried (`gclid` → `google`). The id itself is dropped. */
+	clickId?: ClickIdKind;
+	/** The landing URL was one of our campaign links (`?ge_co=`). */
+	kharonLink?: true;
+	/** Host of an external referring page, lowercased and without `www.`. */
+	referrer?: string;
+}
+declare const CLICK_ID_PARAMS: {
+	readonly gclid: "google";
+	readonly gbraid: "google";
+	readonly wbraid: "google";
+	readonly msclkid: "microsoft";
+	readonly fbclid: "meta";
+	readonly li_fat_id: "linkedin";
+	readonly ttclid: "tiktok";
+	readonly twclid: "x";
+};
+type ClickIdKind = (typeof CLICK_ID_PARAMS)[keyof typeof CLICK_ID_PARAMS];
+interface BaseEvent {
+	siteId: string;
+	visitorId: string;
+	sessionId: string;
+	/** Epoch milliseconds, stamped by the collector (not the browser) to avoid clock skew. */
+	ts: number;
+	/**
+	 * The company identity resolution matched the visitor to, by domain, stamped by the collector from
+	 * the server-signed match token. Null when resolve matched no company; absent when unknown (no valid
+	 * token, e.g. an older SDK, or stored before stamping).
+	 * Firmographics are joined from the company source at report time.
+	 */
+	companyDomain?: string | null;
+	/** The evidence behind that match (a campaign link, reverse IP…), so reports can weigh or exclude it. */
+	companySource?: SignalSource | null;
+}
+interface PageViewEvent extends BaseEvent {
+	type: "page_view";
+	pageId: string;
+	/** Site config version that was resolved, so results are attributable to what was live. */
+	configVersion: number;
+	/**
+	 * How the session arrived, on its first page view only (`{}` for a direct visit). Absent on later
+	 * page views and from trackers older than signup attribution.
+	 */
+	touch?: Touch$1;
+}
+interface SlotImpressionEvent extends BaseEvent {
+	type: "slot_impression";
+	slotId: string;
+	variantId: string | null;
+	/** Set for holdout visitors: the variant withheld from them. See Decision.counterfactualVariantId. */
+	counterfactualVariantId: string | null;
+	/** The fallback-ladder step behind the decision (Decision.rung). Absent from older scripts and events. */
+	rung?: DecisionRung;
+}
+interface InteractionEvent extends BaseEvent {
+	type: "interaction";
+	slotId: string;
+	variantId: string | null;
+	action: "click" | "hover" | "copy" | "expand";
+}
+interface ConversionEvent extends BaseEvent {
+	type: "conversion";
+	goal: string;
+	value?: number;
+	/** `server`: confirmed by the site's backend (`POST /api/v1/signups`), not reported by the page. */
+	source?: "server";
+}
+type AnalyticsEvent = PageViewEvent | SlotImpressionEvent | InteractionEvent | ConversionEvent;
+type ServerStamped = "siteId" | "visitorId" | "ts" | "companyDomain" | "companySource" | "source";
+type BeaconEvent = {
+	[K in AnalyticsEvent["type"]]: Omit<Extract<AnalyticsEvent, {
+		type: K;
+	}>, ServerStamped>;
+}[AnalyticsEvent["type"]];
+export declare const COLLECT_PATH = "/api/collect";
+/** sessionStorage key for the tab's session id. Removed when a visitor withdraws consent. */
+export declare const SESSION_KEY = "ge_sid";
+/**
+ * sessionStorage key for the config pin (set by the client, not the tracker): the tab keeps the copy
+ * it started with when someone publishes, until a rollback. Stored and removed with the visitor id.
+ */
+export declare const PIN_KEY = "ge_pin";
+export interface TrackerOptions {
+	pageId: string;
+	configVersion: number;
+	endpoint?: string;
+	root?: Document;
+	/**
+	 * The server-signed match token for this page view (hosted: rendered by the page). Sent with every
+	 * batch of the default envelope so the collector can stamp the matched company. Opaque.
+	 */
+	match?: string;
+	/**
+	 * Wraps a batch of events into the request body. Defaults to beacon v1, which the same-origin
+	 * collector stamps with the visitor from its own cookie.
+	 */
+	envelope?: (events: BeaconEvent[]) => object;
+	/**
+	 * The collector is on another origin (snippet mode). Bodies go as `text/plain` without cookies,
+	 * so the browser sends them without a CORS preflight.
+	 */
+	crossOrigin?: boolean;
+}
+export interface Tracker {
+	/** Record that a workspace goal fired. Flushes at once, since a conversion often precedes navigation. */
+	conversion(goal: string, value?: number): void;
+	flush(): void;
+	/** Stops measuring. Queued events are sent, unless `discard` (consent was withdrawn). */
+	stop(options?: {
+		discard?: boolean;
+	}): void;
+}
+/**
+ * The client half of the measurement pipeline. Sends one page view, one impression per slot once at
+ * least half of it is on screen, interactions inside slots, and conversions (forms marked
+ * `data-ge-goal`, or `conversion()`). Events are batched and sent with `sendBeacon` so a closing tab
+ * still delivers them.
+ */
+export declare function startTracker({ pageId, configVersion, endpoint, root, match, envelope, crossOrigin, }: TrackerOptions): Tracker;
+
+export {};

package/dist/tracker.js

@@ -0,0 +1,205 @@
+// src/engine/analytics/touch.ts
+var MAX_TOUCH_VALUE = 100;
+var CLICK_ID_PARAMS = {
+  gclid: "google",
+  gbraid: "google",
+  wbraid: "google",
+  msclkid: "microsoft",
+  fbclid: "meta",
+  li_fat_id: "linkedin",
+  ttclid: "tiktok",
+  twclid: "x"
+};
+var CLICK_ID_KINDS = new Set(Object.values(CLICK_ID_PARAMS));
+var UTM_FIELDS = ["source", "medium", "campaign", "term", "content"];
+var KHARON_LINK_PARAM = "ge_co";
+function touchFromUrl(url, referrer) {
+  const touch = {};
+  let page;
+  try {
+    page = new URL(url);
+  } catch {
+    return touch;
+  }
+  for (const field of UTM_FIELDS) {
+    const value = clean(page.searchParams.get(`utm_${field}`));
+    if (value) touch[field] = value;
+  }
+  for (const [param, kind] of Object.entries(CLICK_ID_PARAMS)) {
+    if (page.searchParams.get(param)) {
+      touch.clickId = kind;
+      break;
+    }
+  }
+  if (page.searchParams.get(KHARON_LINK_PARAM)) touch.kharonLink = true;
+  const from = referrerHost(referrer);
+  if (from && from !== bareHost(page.hostname)) touch.referrer = from;
+  return touch;
+}
+function clean(value) {
+  const trimmed = value?.replace(/[\u0000-\u001f\u007f]/g, "").trim();
+  return trimmed ? trimmed.slice(0, MAX_TOUCH_VALUE) : null;
+}
+function referrerHost(referrer) {
+  if (!referrer) return null;
+  try {
+    const { protocol, hostname } = new URL(referrer);
+    return protocol === "http:" || protocol === "https:" ? bareHost(hostname) : null;
+  } catch {
+    return null;
+  }
+}
+function bareHost(hostname) {
+  return hostname.toLowerCase().replace(/^www\./, "");
+}
+
+// src/engine/analytics/beacon.ts
+var BEACON_VERSION = 1;
+var MAX_BEACON_EVENTS = 50;
+var SLOT_ATTRIBUTES = {
+  slot: "data-ge-slot",
+  variant: "data-ge-variant",
+  counterfactual: "data-ge-counterfactual",
+  /** Why the slot shows what it shows (matched, default, holdout). For debugging; not sent. */
+  reason: "data-ge-reason",
+  /** Which step of the fallback ladder chose the content (exact, near, segment, default). Sent on impressions. */
+  rung: "data-ge-rung"
+};
+
+// packages/browser/src/tracker.ts
+var COLLECT_PATH = "/api/collect";
+var SESSION_KEY = "ge_sid";
+var PIN_KEY = "ge_pin";
+var VISIBLE_RATIO = 0.5;
+var FLUSH_INTERVAL_MS = 2e3;
+function startTracker({
+  pageId,
+  configVersion,
+  endpoint = COLLECT_PATH,
+  root = document,
+  match,
+  envelope = (events) => ({ v: BEACON_VERSION, events, ...match ? { m: match } : {} }),
+  crossOrigin = false
+}) {
+  const win = root.defaultView ?? window;
+  const { id: sessionId, started } = sessionFor(win);
+  const queue = [];
+  const seenSlots = /* @__PURE__ */ new Set();
+  const push = (type, body) => {
+    queue.push({ type, sessionId, ...body });
+    if (queue.length >= MAX_BEACON_EVENTS) flush();
+  };
+  const flush = () => {
+    while (queue.length) send(win, endpoint, envelope(queue.splice(0, MAX_BEACON_EVENTS)), crossOrigin);
+  };
+  push("page_view", started ? { pageId, configVersion, touch: touchFromUrl(win.location.href, root.referrer) } : { pageId, configVersion });
+  const slots = Array.from(root.querySelectorAll(`[${SLOT_ATTRIBUTES.slot}]`));
+  const observer = "IntersectionObserver" in win ? new win.IntersectionObserver(
+    (entries) => {
+      for (const entry of entries) {
+        if (!entry.isIntersecting || entry.intersectionRatio < VISIBLE_RATIO) continue;
+        const slot = readSlot(entry.target);
+        observer?.unobserve(entry.target);
+        if (!slot || seenSlots.has(slot.slotId)) continue;
+        seenSlots.add(slot.slotId);
+        push("slot_impression", slot);
+      }
+    },
+    { threshold: VISIBLE_RATIO }
+  ) : null;
+  for (const slot of slots) observer?.observe(slot);
+  const interaction = (action) => (event) => {
+    const slot = closestSlot(event.target);
+    if (slot) push("interaction", { slotId: slot.slotId, variantId: slot.variantId, action });
+  };
+  const onClick = interaction("click");
+  const onCopy = interaction("copy");
+  const onToggle = (event) => {
+    if (event.target.open) interaction("expand")(event);
+  };
+  const onSubmit = (event) => {
+    const goal = event.target.closest?.("form")?.getAttribute("data-ge-goal");
+    if (goal) conversion(goal);
+  };
+  const onHide = () => {
+    if (root.visibilityState === "hidden") flush();
+  };
+  const conversion = (goal, value) => {
+    push("conversion", value === void 0 ? { goal } : { goal, value });
+    flush();
+  };
+  root.addEventListener("click", onClick, true);
+  root.addEventListener("copy", onCopy, true);
+  root.addEventListener("toggle", onToggle, true);
+  root.addEventListener("submit", onSubmit, true);
+  root.addEventListener("visibilitychange", onHide);
+  win.addEventListener("pagehide", flush);
+  const timer = win.setInterval(flush, FLUSH_INTERVAL_MS);
+  return {
+    conversion,
+    flush,
+    stop({ discard = false } = {}) {
+      if (discard) queue.length = 0;
+      flush();
+      observer?.disconnect();
+      win.clearInterval(timer);
+      root.removeEventListener("click", onClick, true);
+      root.removeEventListener("copy", onCopy, true);
+      root.removeEventListener("toggle", onToggle, true);
+      root.removeEventListener("submit", onSubmit, true);
+      root.removeEventListener("visibilitychange", onHide);
+      win.removeEventListener("pagehide", flush);
+    }
+  };
+}
+function readSlot(el) {
+  const slotId = el.getAttribute(SLOT_ATTRIBUTES.slot);
+  if (!slotId) return null;
+  return {
+    slotId,
+    variantId: el.getAttribute(SLOT_ATTRIBUTES.variant) || null,
+    counterfactualVariantId: el.getAttribute(SLOT_ATTRIBUTES.counterfactual) || null,
+    ...el.getAttribute(SLOT_ATTRIBUTES.rung) ? { rung: el.getAttribute(SLOT_ATTRIBUTES.rung) } : {}
+  };
+}
+function closestSlot(target) {
+  const el = target instanceof Element ? target.closest(`[${SLOT_ATTRIBUTES.slot}]`) : null;
+  return el ? readSlot(el) : null;
+}
+function sessionFor(win) {
+  try {
+    const existing = win.sessionStorage.getItem(SESSION_KEY);
+    if (existing) return { id: existing, started: false };
+    const id = uuid(win);
+    win.sessionStorage.setItem(SESSION_KEY, id);
+    return { id, started: true };
+  } catch {
+    return { id: uuid(win), started: true };
+  }
+}
+function uuid(win) {
+  if (typeof win.crypto.randomUUID === "function") return win.crypto.randomUUID();
+  const b = win.crypto.getRandomValues(new Uint8Array(16));
+  b[6] = b[6] & 15 | 64;
+  b[8] = b[8] & 63 | 128;
+  const hex = Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+function send(win, endpoint, payload, crossOrigin) {
+  const body = JSON.stringify(payload);
+  const type = crossOrigin ? "text/plain" : "application/json";
+  if (win.navigator.sendBeacon?.(endpoint, new Blob([body], { type }))) return;
+  void win.fetch(endpoint, {
+    method: "POST",
+    body,
+    keepalive: true,
+    credentials: crossOrigin ? "omit" : "same-origin",
+    headers: { "content-type": type }
+  }).catch((error) => console.warn("[ge] analytics beacon failed", error));
+}
+export {
+  COLLECT_PATH,
+  PIN_KEY,
+  SESSION_KEY,
+  startTracker
+};

package/dist/v1.js

@@ -0,0 +1 @@
+"use strict";(()=>{var be=Object.defineProperty;var Oe=(e,t)=>{for(var n in t)be(e,n,{get:t[n],enumerable:!0})};var ie={};Oe(ie,{ANTI_FLICKER_SNIPPET:()=>Ee,DEFAULT_API_BASE:()=>Q,DEFAULT_TIMEOUT_MS:()=>F,VISITOR_COOKIE:()=>E,antiFlickerStart:()=>j,applyDecision:()=>ne,conversion:()=>et,createClient:()=>q,hashSlotDefaults:()=>T,init:()=>re,isWritable:()=>oe,pageIdFor:()=>ee,parseResolveResponse:()=>$,refresh:()=>nt,reveal:()=>D,scanSlots:()=>W,setConsent:()=>Qe,signup:()=>tt});var G="signup";var X={gclid:"google",gbraid:"google",wbraid:"google",msclkid:"microsoft",fbclid:"meta",li_fat_id:"linkedin",ttclid:"tiktok",twclid:"x"},st=new Set(Object.values(X)),Ve=["source","medium","campaign","term","content"],Le="ge_co";function Y(e,t){let n={},o;try{o=new URL(e)}catch{return n}for(let i of Ve){let a=we(o.searchParams.get(`utm_${i}`));a&&(n[i]=a)}for(let[i,a]of Object.entries(X))if(o.searchParams.get(i)){n.clickId=a;break}o.searchParams.get(Le)&&(n.kharonLink=!0);let r=De(t);return r&&r!==se(o.hostname)&&(n.referrer=r),n}function we(e){let t=e?.replace(/[\u0000-\u001f\u007f]/g,"").trim();return t?t.slice(0,100):null}function De(e){if(!e)return null;try{let{protocol:t,hostname:n}=new URL(e);return t==="http:"||t==="https:"?se(n):null}catch{return null}}function se(e){return e.toLowerCase().replace(/^www\./,"")}var Z=1,B=50;var p={slot:"data-ge-slot",variant:"data-ge-variant",counterfactual:"data-ge-counterfactual",reason:"data-ge-reason",rung:"data-ge-rung"};var Me="/api/collect",U="ge_sid",K="ge_pin",ae=.5,Be=2e3;function le({pageId:e,configVersion:t,endpoint:n=Me,root:o=document,match:r,envelope:i=c=>({v:Z,events:c,...r?{m:r}:{}}),crossOrigin:a=!1}){let c=o.defaultView??window,{id:f,started:d}=Ke(c),m=[],b=new Set,R=(l,u)=>{m.push({type:l,sessionId:f,...u}),m.length>=B&&s()},s=()=>{for(;m.length;)$e(c,n,i(m.splice(0,B)),a)};R("page_view",d?{pageId:e,configVersion:t,touch:Y(c.location.href,o.referrer)}:{pageId:e,configVersion:t});let g=Array.from(o.querySelectorAll(`[${p.slot}]`)),h="IntersectionObserver"in c?new c.IntersectionObserver(l=>{for(let u of l){if(!u.isIntersecting||u.intersectionRatio<ae)continue;let v=ue(u.target);h?.unobserve(u.target),!(!v||b.has(v.slotId))&&(b.add(v.slotId),R("slot_impression",v))}},{threshold:ae}):null;for(let l of g)h?.observe(l);let x=l=>u=>{let v=Ue(u.target);v&&R("interaction",{slotId:v.slotId,variantId:v.variantId,action:l})},_=x("click"),N=x("copy"),O=l=>{l.target.open&&x("expand")(l)},C=l=>{let u=l.target.closest?.("form")?.getAttribute("data-ge-goal");u&&S(u)},V=()=>{o.visibilityState==="hidden"&&s()},S=(l,u)=>{R("conversion",u===void 0?{goal:l}:{goal:l,value:u}),s()};o.addEventListener("click",_,!0),o.addEventListener("copy",N,!0),o.addEventListener("toggle",O,!0),o.addEventListener("submit",C,!0),o.addEventListener("visibilitychange",V),c.addEventListener("pagehide",s);let M=c.setInterval(s,Be);return{conversion:S,flush:s,stop({discard:l=!1}={}){l&&(m.length=0),s(),h?.disconnect(),c.clearInterval(M),o.removeEventListener("click",_,!0),o.removeEventListener("copy",N,!0),o.removeEventListener("toggle",O,!0),o.removeEventListener("submit",C,!0),o.removeEventListener("visibilitychange",V),c.removeEventListener("pagehide",s)}}}function ue(e){let t=e.getAttribute(p.slot);return t?{slotId:t,variantId:e.getAttribute(p.variant)||null,counterfactualVariantId:e.getAttribute(p.counterfactual)||null,...e.getAttribute(p.rung)?{rung:e.getAttribute(p.rung)}:{}}:null}function Ue(e){let t=e instanceof Element?e.closest(`[${p.slot}]`):null;return t?ue(t):null}function Ke(e){try{let t=e.sessionStorage.getItem(U);if(t)return{id:t,started:!1};let n=ce(e);return e.sessionStorage.setItem(U,n),{id:n,started:!0}}catch{return{id:ce(e),started:!0}}}function ce(e){if(typeof e.crypto.randomUUID=="function")return e.crypto.randomUUID();let t=e.crypto.getRandomValues(new Uint8Array(16));t[6]=t[6]&15|64,t[8]=t[8]&63|128;let n=Array.from(t,o=>o.toString(16).padStart(2,"0")).join("");return`${n.slice(0,8)}-${n.slice(8,12)}-${n.slice(12,16)}-${n.slice(16,20)}-${n.slice(20)}`}function $e(e,t,n,o){let r=JSON.stringify(n),i=o?"text/plain":"application/json";e.navigator.sendBeacon?.(t,new Blob([r],{type:i}))||e.fetch(t,{method:"POST",body:r,keepalive:!0,credentials:o?"omit":"same-origin",headers:{"content-type":i}}).catch(a=>console.warn("[ge] analytics beacon failed",a))}var y="ge_preview";var pe=/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;function A(e){return typeof e=="string"&&pe.test(e)}function T(e){let t=JSON.stringify(Object.keys(e).sort().map(o=>[o,e[o]])),n=2166136261;for(let o=0;o<t.length;o++)n^=t.charCodeAt(o),n=Math.imul(n,16777619);return(n>>>0).toString(16).padStart(8,"0")}var de="/api/v1/resolve",ge="/api/v1/collect",He=["matched","default","holdout"],Fe=["exact","near","segment","default"];function $(e){if(!L(e)||e.v!==1||!L(e.decisions)||!Number.isSafeInteger(e.configVersion)||typeof e.persist!="boolean")return null;let t=A(e.vid)?e.vid:void 0,n=e.persist&&t!==void 0,o=n&&typeof e.pin=="string"&&/^\d{1,9}\.\d{1,9}$/.test(e.pin)?e.pin:void 0,r={};for(let[a,c]of Object.entries(e.decisions)){let f=qe(c);f&&(r[a]=f)}let i=n&&typeof e.m=="string"&&e.m.length<=1024?e.m:void 0;if(e.preview===!0){let a=L(e.explain)?e.explain:void 0;return{v:1,configVersion:e.configVersion,persist:!1,preview:!0,decisions:r,...a?{explain:a}:{}}}return{v:1,configVersion:e.configVersion,persist:n,vid:t,...o?{pin:o}:{},decisions:r,...i?{m:i}:{}}}function qe(e){if(!L(e)||!L(e.content)||!fe(e.variantId)||!fe(e.counterfactualVariantId)||!He.includes(e.reason))return null;let t={};for(let[o,r]of Object.entries(e.content))typeof r=="string"&&(t[o]=r);let n=Fe.includes(e.rung)?e.rung:void 0;return{variantId:e.variantId,counterfactualVariantId:e.counterfactualVariantId,reason:e.reason,...n&&{rung:n},content:t}}function L(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function fe(e){return e===null||typeof e=="string"}var Q="https://kharonlabs.com",F=500,ze=5e3,E="ge_vid",We=365*24*60*60;function q(e){let t=e.root??document,n=t.defaultView??window,o=(e.apiBase??Q).replace(/\/+$/,""),r=new Set,i=e.consent??"unknown",a=!1,c,f=null,d=!1,m=(s=!1)=>{f?.stop({discard:s}),f=null},b=()=>{a=!1,c=void 0,m(!0),Ye(t,E,e.cookieDomain);try{n.sessionStorage.removeItem(U),n.sessionStorage.removeItem(K)}catch{}},R=s=>{if(s.preview){d=!0,m(!0),s.explain&&n.console?.info("[kharon] debug link: why this page shows what it does",s.explain);return}s.persist&&s.vid&&i!=="denied"?(a=!0,c=s.m,H(t,E)!==s.vid&&Xe(t,E,s.vid,e.cookieDomain),s.pin&&me(n,K,s.pin)):(a||H(t,E))&&b()};return{get consent(){return i},async resolve(s,g=Date.now()+ze){let h=H(t,E),x=ve(n,K),_=je(n),N={v:1,key:e.key,...A(h)?{vid:h}:{},...x?{pin:x}:{},url:_.url,referrer:t.referrer,slots:s.map(S=>({id:S.id,h:T(S.defaults)})),consent:i,gpc:n.navigator.globalPrivacyControl===!0},O=g-Date.now();if(O<=0||typeof n.fetch!="function")return null;let C=typeof AbortController=="function"?new AbortController:null,V;try{let S=n.fetch(o+de,{method:"POST",body:JSON.stringify(N),credentials:"omit",signal:C?.signal}),M=new Promise(v=>{V=setTimeout(()=>{C?.abort(),v(null)},O)}),l=await Promise.race([S,M]);if(!l)return null;if(!l.ok)return console.warn(`[kharon] resolve answered ${l.status}; keeping defaults`),null;let u=$(await Promise.race([l.json(),M]));return!u||Date.now()>g?null:(u.preview&&_.token?me(n,y,_.token):!u.preview&&_.token&&Ge(n,y),R(u),u)}catch(S){return C?.signal.aborted||console.warn("[kharon] resolve failed; keeping defaults",S),null}finally{clearTimeout(V)}},adopt:R,track(s){m();let g=H(t,E);d||!a||!A(g)||(f=le({pageId:e.pageId??ee(n.location.pathname),configVersion:s,endpoint:o+ge,root:t,crossOrigin:!0,envelope:h=>({v:2,key:e.key,vid:g,consent:i,events:h,...c?{m:c}:{}})}))},setConsent(s){if(s!==i){i=s,s==="denied"&&b();for(let g of r)g(s)}},onConsentChange(s){return r.add(s),()=>r.delete(s)},conversion(s,g){f?.conversion(s,g)},stop:()=>m()}}function ee(e){return e.split("/").map(n=>n.replace(/[^A-Za-z0-9_:-]/g,"")).filter(Boolean).join(".").slice(0,128)||"home"}function H(e,t){for(let n of e.cookie.split(";")){let[o,...r]=n.trim().split("=");if(o===t)try{return decodeURIComponent(r.join("="))}catch{return}}}function ve(e,t){try{return e.sessionStorage.getItem(t)}catch{return null}}function je(e){let t=e.location.href,n;try{n=new URL(t)}catch{return{url:t,token:null}}let o=n.searchParams.get(y);if(o)return{url:t,token:o};let r=ve(e,y);return r?(n.searchParams.set(y,r),{url:n.toString(),token:r}):{url:t,token:null}}function Ge(e,t){try{e.sessionStorage.removeItem(t)}catch{}}function me(e,t,n){try{e.sessionStorage.setItem(t,n)}catch{}}function Ie(e,t){let n=e.location?.protocol==="https:"?"; Secure":"";return`; Path=/; SameSite=Lax${t?`; Domain=${t}`:""}${n}`}function Xe(e,t,n,o){e.cookie=`${t}=${encodeURIComponent(n)}; Max-Age=${We}${Ie(e,o)}`}function Ye(e,t,n){e.cookie=`${t}=; Max-Age=0${Ie(e,n)}`}var Se="data-ge-field",he="data-ge-attr",te="kharon-af",Ee=`<style id="${te}">[${p.slot}]{visibility:hidden!important}</style><script>window.__kharonAf=Date.now();setTimeout(function(){var s=document.getElementById("${te}");s&&s.parentNode.removeChild(s)},500)<\/script>`,Ze=new Set(["href","src","action","formaction","poster","cite","xlink:href"]),Je=/^(on|style$|srcdoc$|srcset$)/,z=new WeakMap,w="#text";function Re(e,t){return t===null?(e.textContent??"").trim():e.getAttribute(t)}function _e(e,t){let n=z.get(e);return n?.has(t??w)?n.get(t??w):Re(e,t)}function ye(e,t,n){let o=z.get(e);o||z.set(e,o=new Map),o.has(t??w)||o.set(t??w,Re(e,t)),t===null?e.textContent=n??"":n===null?e.removeAttribute(t):e.setAttribute(t,n)}function W(e){let t=new Map;for(let n of ke(e)){let o=n.getAttribute(p.slot);if(t.has(o))continue;let r={};for(let i of xe(n))i.field in r||(r[i.field]=_e(i.el,i.attr)??"");t.set(o,{id:o,defaults:r})}return[...t.values()]}function Ae(e,t){for(let n of ke(e)){let o=t.decisions[n.getAttribute(p.slot)];o&&ne(n,o,e.baseURI)}}function ne(e,t,n){for(let{el:o,field:r,attr:i}of xe(e)){let a=t.content[r];typeof a=="string"&&(i===null||oe(i,a,n))?ye(o,i,a):z.get(o)?.has(i??w)&&ye(o,i,_e(o,i))}e.setAttribute(p.variant,t.variantId??""),e.setAttribute(p.counterfactual,t.counterfactualVariantId??""),e.setAttribute(p.reason,t.reason),t.rung?e.setAttribute(p.rung,t.rung):e.removeAttribute(p.rung)}function D(e){e.getElementById(te)?.remove()}function j(e){let t=e.defaultView?.__kharonAf;return typeof t=="number"?t:void 0}function oe(e,t,n){let o=e.toLowerCase();if(Je.test(o))return!1;if(!Ze.has(o))return!0;try{let{protocol:r}=new URL(t,n);return r==="http:"||r==="https:"}catch{return!1}}function ke(e){return Array.from(e.querySelectorAll(`[${p.slot}]`))}function xe(e){let t=[],n=[e,...Array.from(e.querySelectorAll(`[${Se}],[${he}]`))];for(let o of n){if(o!==e&&o.closest(`[${p.slot}]`)!==e)continue;let r=o.getAttribute(Se);r&&t.push({el:o,field:r,attr:null});for(let i of(o.getAttribute(he)??"").split(",")){let a=i.lastIndexOf(":"),c=i.slice(0,a).trim(),f=i.slice(a+1).trim();a>0&&c&&f&&t.push({el:o,field:f,attr:c})}}return t}var I=null,Ce;function re(e){if(I)return console.warn("[kharon] init called twice; keeping the first instance"),I;let t=e.root??document,n=e.timeoutMs??F,o=q({...e,consent:Ce??e.consent}),r=async f=>{try{let d=await o.resolve(W(t),f);d&&Ae(t,d),D(t),d&&o.track(d.configVersion)}catch(d){D(t),console.warn("[kharon] personalization failed; keeping defaults",d)}},a=new Promise(f=>{t.readyState!=="loading"?f():t.addEventListener("DOMContentLoaded",()=>f(),{once:!0})}).then(()=>r((j(t)??Date.now())+n));o.onConsentChange(f=>{f==="granted"&&(a=a.then(()=>r()))});let c={client:o,get ready(){return a},setConsent:o.setConsent,conversion:o.conversion,refresh(){return a=a.then(()=>r(Date.now()+n)),a},stop(){o.stop(),I===c&&(I=null)}};return I=c,c}function Qe(e){I?I.setConsent(e):Ce=e}function et(e,t){I?.conversion(e,t)}function tt(){I?.conversion(G)}function nt(){return I?.refresh()??Promise.resolve()}var ot=["granted","denied","unknown"],P=document.currentScript;window.kharon=ie;var Te=P?.getAttribute("data-key");P&&Te&&re({key:Te,apiBase:P.getAttribute("data-api")??new URL(P.src).origin,consent:ot.find(e=>e===P.getAttribute("data-consent"))});})();

package/package.json

@@ -1,6 +1,29 @@
 {
   "name": "@kharon-labs/browser",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "description": "Personalize slots on any website with Kharon Labs: swaps in the variant for each visitor and measures lift against a holdout.",
+  "license": "MIT",
+  "homepage": "https://kharonlabs.com",
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./tracker": {
+      "types": "./dist/tracker.d.ts",
+      "import": "./dist/tracker.js",
+      "require": "./dist/tracker.cjs"
+    }
+  },
+  "files": ["dist"],
+  "browserslist": ["defaults"],
+  "publishConfig": {
+    "access": "public"
+  }
+}