@kywi-software/core 0.15.0 → 0.15.2

package/dist/audiences/cookies.d.ts

@@ -6,6 +6,10 @@ export declare const COOKIE_NAMES: {
     readonly OPTOUT: "kywi_optout";
     readonly KNOWN: "kywi_known";
     readonly PREVIEW_INIT: "kywi_preview_init";
+    /** First page (path + query) of the visitor's session — kywi-cms#196. */
+    readonly ENTRY: "kywi_entry";
+    /** Server-readable copy of the visitor's self-ID answers — kywi-cms#200. */
+    readonly SELFID: "kywi_selfid";
 };
 export declare const COOKIE_MAX_AGE: {
     readonly SIGNALS: 60;
@@ -15,12 +19,29 @@ export declare const COOKIE_MAX_AGE: {
     readonly OPTOUT: number;
     readonly KNOWN: number;
     readonly PREVIEW_INIT: 30;
+    readonly ENTRY: -1;
+    /**
+     * Not a cookie of its own: the "until the browser closes" lifetime, for a
+     * write whose durability depends on consent. A self-ID pin from a visitor who
+     * has not consented is honoured for the session and then forgotten, rather
+     * than filed for 30 days (kywi-cms#200).
+     */
+    readonly SESSION: -1;
+    readonly SELFID: number;
 };
 export declare function signSignals(payload: unknown, secret: string): Promise<string>;
 export declare function verifySignals(token: string, secret: string): Promise<unknown | null>;
 export declare function parseCookies(cookieHeader: string): Map<string, string>;
+/**
+ * `options.secure` adds the `Secure` attribute, which callers pass when the
+ * request being answered is https. It is opt-in rather than always-on because
+ * a browser silently DISCARDS a `Secure` cookie over plain http, which would
+ * break local development and any http-only deployment — so the caller, which
+ * is the only thing that knows the scheme, decides. Omitted, nothing changes.
+ */
 export declare function buildSetCookieHeader(name: string, value: string, maxAge: number, options?: {
     httpOnly?: boolean;
     sameSite?: 'Strict' | 'Lax' | 'None';
+    secure?: boolean;
 }): string;
 //# sourceMappingURL=cookies.d.ts.map

package/dist/audiences/cookies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/audiences/cookies.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY;;;;;;;;CAQf,CAAA;AAEV,eAAO,MAAM,cAAc;;;;;;;;CAWjB,CAAA;AAEV,wBAAsB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMnF;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAQ1F;AAED,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAwBtE;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAA;CAAE,GACrE,MAAM,CAQR"}
+{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/audiences/cookies.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY;;;;;;;;IAQvB,yEAAyE;;IAEzE,4EAA4E;;CAEpE,CAAA;AAEV,eAAO,MAAM,cAAc;;;;;;;;;IAczB;;;;;OAKG;;;CAKK,CAAA;AAEV,wBAAsB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMnF;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAQ1F;AAED,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAwBtE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GACvF,MAAM,CASR"}

package/dist/audiences/cookies.js

@@ -7,6 +7,10 @@ export const COOKIE_NAMES = {
     OPTOUT: 'kywi_optout',
     KNOWN: 'kywi_known',
     PREVIEW_INIT: 'kywi_preview_init',
+    /** First page (path + query) of the visitor's session — kywi-cms#196. */
+    ENTRY: 'kywi_entry',
+    /** Server-readable copy of the visitor's self-ID answers — kywi-cms#200. */
+    SELFID: 'kywi_selfid',
 };
 export const COOKIE_MAX_AGE = {
     SIGNALS: 60,
@@ -19,6 +23,19 @@ export const COOKIE_MAX_AGE = {
     OPTOUT: 365 * 24 * 3600,
     KNOWN: 24 * 3600,
     PREVIEW_INIT: 30,
+    // A session cookie (negative = no Max-Age directive): a new visit is a new
+    // entry page, so this must not outlive the browser session.
+    ENTRY: -1,
+    /**
+     * Not a cookie of its own: the "until the browser closes" lifetime, for a
+     * write whose durability depends on consent. A self-ID pin from a visitor who
+     * has not consented is honoured for the session and then forgotten, rather
+     * than filed for 30 days (kywi-cms#200).
+     */
+    SESSION: -1,
+    // Self-ID answers persist on the same horizon as the audience they resolve to
+    // — long enough to be worth asking for, short enough to age out.
+    SELFID: 30 * 24 * 3600,
 };
 export async function signSignals(payload, secret) {
     const key = new TextEncoder().encode(secret);
@@ -65,6 +82,13 @@ export function parseCookies(cookieHeader) {
     }
     return map;
 }
+/**
+ * `options.secure` adds the `Secure` attribute, which callers pass when the
+ * request being answered is https. It is opt-in rather than always-on because
+ * a browser silently DISCARDS a `Secure` cookie over plain http, which would
+ * break local development and any http-only deployment — so the caller, which
+ * is the only thing that knows the scheme, decides. Omitted, nothing changes.
+ */
 export function buildSetCookieHeader(name, value, maxAge, options) {
     const parts = [`${name}=${encodeURIComponent(value)}`];
     if (maxAge >= 0)
@@ -74,6 +98,8 @@ export function buildSetCookieHeader(name, value, maxAge, options) {
     if (options?.httpOnly !== false)
         parts.push('HttpOnly');
     parts.push(`SameSite=${options?.sameSite ?? 'Lax'}`);
+    if (options?.secure)
+        parts.push('Secure');
     return parts.join('; ');
 }
 //# sourceMappingURL=cookies.js.map

package/dist/audiences/cookies.js.map

@@ -1 +1 @@
-{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../../src/audiences/cookies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAEzC,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,OAAO,EAAE,cAAc;IACvB,OAAO,EAAE,cAAc;IACvB,GAAG,EAAE,UAAU;IACf,QAAQ,EAAE,eAAe;IACzB,MAAM,EAAE,aAAa;IACrB,KAAK,EAAE,YAAY;IACnB,YAAY,EAAE,mBAAmB;CACzB,CAAA;AAEV,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,CAAC,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI;IAC5B,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACnB,8EAA8E;IAC9E,4EAA4E;IAC5E,oEAAoE;IACpE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACxB,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI;IACvB,KAAK,EAAE,EAAE,GAAG,IAAI;IAChB,YAAY,EAAE,EAAE;CACR,CAAA;AAEV,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAgB,EAAE,MAAc;IAChE,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC5C,OAAO,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;SAClC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,iBAAiB,CAAC,KAAK,CAAC;SACxB,IAAI,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,MAAc;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC5C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC1E,OAAQ,OAA8B,CAAC,IAAI,IAAI,IAAI,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,YAAoB;IAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAA;IACrC,IAAI,CAAC,YAAY;QAAE,OAAO,GAAG,CAAA;IAC7B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,KAAK,GAAG,CAAC;YAAE,SAAQ;QACvB,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,2EAA2E;QAC3E,2EAA2E;QAC3E,kEAAkE;QAClE,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QACzC,IAAI,KAAK,GAAG,QAAQ,CAAA;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACrB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,KAAa,EACb,MAAc,EACd,OAAsE;IAEtE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACtD,IAAI,MAAM,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAA;IAChD,yDAAyD;IACzD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpB,IAAI,OAAO,EAAE,QAAQ,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACvD,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,EAAE,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAA;IACpD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}
+{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../../src/audiences/cookies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAEzC,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,OAAO,EAAE,cAAc;IACvB,OAAO,EAAE,cAAc;IACvB,GAAG,EAAE,UAAU;IACf,QAAQ,EAAE,eAAe;IACzB,MAAM,EAAE,aAAa;IACrB,KAAK,EAAE,YAAY;IACnB,YAAY,EAAE,mBAAmB;IACjC,yEAAyE;IACzE,KAAK,EAAE,YAAY;IACnB,4EAA4E;IAC5E,MAAM,EAAE,aAAa;CACb,CAAA;AAEV,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,CAAC,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI;IAC5B,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACnB,8EAA8E;IAC9E,4EAA4E;IAC5E,oEAAoE;IACpE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACxB,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI;IACvB,KAAK,EAAE,EAAE,GAAG,IAAI;IAChB,YAAY,EAAE,EAAE;IAChB,2EAA2E;IAC3E,4DAA4D;IAC5D,KAAK,EAAE,CAAC,CAAC;IACT;;;;;OAKG;IACH,OAAO,EAAE,CAAC,CAAC;IACX,8EAA8E;IAC9E,iEAAiE;IACjE,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;CACd,CAAA;AAEV,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAgB,EAAE,MAAc;IAChE,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC5C,OAAO,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;SAClC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,iBAAiB,CAAC,KAAK,CAAC;SACxB,IAAI,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,MAAc;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC5C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC1E,OAAQ,OAA8B,CAAC,IAAI,IAAI,IAAI,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,YAAoB;IAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAA;IACrC,IAAI,CAAC,YAAY;QAAE,OAAO,GAAG,CAAA;IAC7B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,KAAK,GAAG,CAAC;YAAE,SAAQ;QACvB,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,2EAA2E;QAC3E,2EAA2E;QAC3E,kEAAkE;QAClE,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QACzC,IAAI,KAAK,GAAG,QAAQ,CAAA;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACrB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,KAAa,EACb,MAAc,EACd,OAAwF;IAExF,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACtD,IAAI,MAAM,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAA;IAChD,yDAAyD;IACzD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpB,IAAI,OAAO,EAAE,QAAQ,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACvD,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,EAAE,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAA;IACpD,IAAI,OAAO,EAAE,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}

package/dist/audiences/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/audiences/engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAM1F,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,QAAQ,EAAE,CAAA;IACrB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AACD,MAAM,WAAW,cAAc;IAAG,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;CAAE;AAe9F,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAiCjF"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/audiences/engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAM1F,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,QAAQ,EAAE,CAAA;IACrB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AACD,MAAM,WAAW,cAAc;IAAG,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;CAAE;AAgB9F,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAiCjF"}

package/dist/audiences/engine.js

@@ -8,6 +8,7 @@ function mergeSignals(base, partial) {
         referrer: partial.referrer ?? base.referrer,
         session: partial.session ?? base.session,
         behavioral: partial.behavioral ?? base.behavioral,
+        query: { ...base.query, ...partial.query },
         selfId: { ...base.selfId, ...partial.selfId },
         identity: partial.identity ?? base.identity,
         adapters: { ...base.adapters, ...partial.adapters },

package/dist/audiences/engine.js.map

@@ -1 +1 @@
-{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/audiences/engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAc3C,SAAS,YAAY,CAAC,IAAoB,EAAE,OAAgC;IAC1E,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;QAC3C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;QACxC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU;QACjD,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE;QAC7C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;QAC3C,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE;QACnD,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE;KACxC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAA4B;IAC/D,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,OAAuB;YACpC,sEAAsE;YACtE,gDAAgD;YAChD,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAA;YACjG,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAChE,IAAI,OAAO,GAAG,YAAY,CAAC,kBAAkB,EAAE,EAAE,aAAa,CAAC,CAAA;YAC/D,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC3B,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,CAAA;YACzD,CAAC;YACD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAA;YAC1C,MAAM,EAAE,iBAAiB,EAAE,aAAa,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;YACxF,yEAAyE;YACzE,oEAAoE;YACpE,2EAA2E;YAC3E,0EAA0E;YAC1E,yDAAyD;YACzD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC1D,MAAM,gBAAgB,GAAG,qBAAqB,CAC5C,YAAY,CAAC,YAAY,IAAI,EAAE,CAAC,EAChC,MAAM,CAAC,SAAS,EAChB,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,CAC1B,CAAA;YACD,MAAM,cAAc,GAAG,gBAAgB,IAAI,iBAAiB,CAAA;YAC5D,OAAO;gBACL,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc;gBACrD,aAAa;gBACb,OAAO;gBACP,UAAU;aACX,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/audiences/engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAc3C,SAAS,YAAY,CAAC,IAAoB,EAAE,OAAgC;IAC1E,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;QAC3C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;QACxC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU;QACjD,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE;QAC1C,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE;QAC7C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;QAC3C,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE;QACnD,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE;KACxC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAA4B;IAC/D,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,OAAuB;YACpC,sEAAsE;YACtE,gDAAgD;YAChD,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAA;YACjG,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAChE,IAAI,OAAO,GAAG,YAAY,CAAC,kBAAkB,EAAE,EAAE,aAAa,CAAC,CAAA;YAC/D,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC3B,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,CAAA;YACzD,CAAC;YACD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAA;YAC1C,MAAM,EAAE,iBAAiB,EAAE,aAAa,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;YACxF,yEAAyE;YACzE,oEAAoE;YACpE,2EAA2E;YAC3E,0EAA0E;YAC1E,yDAAyD;YACzD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC1D,MAAM,gBAAgB,GAAG,qBAAqB,CAC5C,YAAY,CAAC,YAAY,IAAI,EAAE,CAAC,EAChC,MAAM,CAAC,SAAS,EAChB,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,CAC1B,CAAA;YACD,MAAM,cAAc,GAAG,gBAAgB,IAAI,iBAAiB,CAAA;YAC5D,OAAO;gBACL,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc;gBACrD,aAAa;gBACb,OAAO;gBACP,UAAU;aACX,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/audiences/entry-page.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Entry page — the *write* side of the `kywi_entry` cookie contract
+ * (kywi-cms#196).
+ *
+ * `session.entryPage` has been in the signal catalogue and in the admin rule
+ * tester since the audience engine shipped, but nothing in core ever wrote it:
+ * `runServerCollectors` fed UTM params, the referrer and the visitor cookies
+ * into signal collection and left `session` at its schema defaults, so
+ * `entryPage` stayed `'/'` forever. A rule like
+ * `session.entryPage contains 'from=marketer'` could not fire on a real request
+ * no matter what the visitor did.
+ *
+ * This module is the missing writer, living next to its reader
+ * (`collectors/session.ts`) so a scaffolded app, the reference app and the
+ * runtime routes all share one implementation. The contract:
+ *
+ *   • The value is `pathname + search` of the FIRST request of a session —
+ *     `/developers?from=marketer`, not the whole URL. Query is included on
+ *     purpose: a campaign link's own params are the interesting part.
+ *   • It is written ONCE. A request that already carries the cookie returns
+ *     `null` here, so "entry page" keeps meaning the page the visitor arrived
+ *     on rather than quietly becoming "current page".
+ *   • It is written only for a DOCUMENT request. If a subresource could record
+ *     it, the first request of a session that happens to be `/kywi.js`, a font
+ *     or an API call would name the entry page, and every rule downstream would
+ *     be matching against an asset URL. Callers pass `Sec-Fetch-Dest` (and
+ *     `Accept` for browsers that omit it); saying neither fails closed.
+ *   • It is a SESSION cookie (no Max-Age): a new visit is a new entry page.
+ *   • It is a `personalization` cookie in the category map, gated exactly like
+ *     `kywi_visitor` and `kywi_utm` (kywi-cms#91). Without consent nothing is
+ *     persisted — and the read side falls back to the CURRENT request's path,
+ *     so a rule on the entry page still fires on the landing request itself.
+ *     That fallback is also what makes `/developers?from=marketer` switch on
+ *     the very request that carries it, with no reload, for everyone: a
+ *     Set-Cookie only takes effect on the NEXT request.
+ *
+ * EDGE-SAFE LEAF MODULE: its only import is `./consent.js`, itself a zero-import
+ * leaf, because this is imported from Next.js edge middleware where core's
+ * DB-backed code cannot run. Keep it dependency-free beyond that. It is
+ * published as its own export entry (`@kywi-software/core/audiences/entry-page`)
+ * so importing it never drags in the DB-backed `audiences` barrel — the same
+ * arrangement as `utm-persistence.ts`.
+ */
+import { type ConsentGateOptions } from './consent.js';
+/**
+ * Cookie name the entry-page collector reads (mirrors `COOKIE_NAMES.ENTRY` in
+ * `audiences/cookies.ts`). Kept as a literal so this leaf imports nothing — the
+ * `cookies` module pulls in `jose`, which an edge writer does not need. A core
+ * test asserts this stays equal to `COOKIE_NAMES.ENTRY`, so the two cannot drift.
+ */
+export declare const ENTRY_COOKIE = "kywi_entry";
+/**
+ * The entry-page value for a URL: `pathname + search`, or `null` when the URL
+ * cannot be parsed. Exported because the READ side needs exactly the same
+ * derivation for its current-request fallback.
+ */
+export declare function entryPagePath(url: string): string | null;
+/**
+ * The value to write to `kywi_entry` for this request, or `null` to leave things
+ * alone. `null` when: the visitor has not consented to personalization, the
+ * cookie is already set (the session's entry page is already recorded), or the
+ * URL is unparseable.
+ *
+ * Callers write it as a SESSION cookie — `buildSetCookieHeader(ENTRY_COOKIE,
+ * value, -1, { httpOnly: false })`, or the framework equivalent with no
+ * `maxAge`.
+ */
+export declare function entryPageCookieValue(url: string, options?: {
+    cookieHeader?: string | null;
+    /** The request's `Sec-Fetch-Dest` header. */
+    secFetchDest?: string | null;
+    /** The request's `Accept` header — the fallback when `Sec-Fetch-Dest` is absent. */
+    accept?: string | null;
+} & ConsentGateOptions): string | null;
+/**
+ * Is this request the visitor navigating to a PAGE, rather than the page
+ * fetching something?
+ *
+ * `Sec-Fetch-Dest` is authoritative where it exists (every current browser
+ * sends it, and it is one of the headers a page cannot forge). Without it, an
+ * `Accept` naming `text/html` is the long-standing signal. Neither is a no:
+ * a caller that cannot say what kind of request this is does not get to name
+ * the visitor's entry page.
+ */
+export declare function isDocumentRequest(headers: {
+    secFetchDest?: string | null;
+    accept?: string | null;
+}): boolean;
+//# sourceMappingURL=entry-page.d.ts.map

package/dist/audiences/entry-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry-page.d.ts","sourceRoot":"","sources":["../../src/audiences/entry-page.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAyB,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAE7E;;;;;GAKG;AACH,eAAO,MAAM,YAAY,eAAe,CAAA;AAExC;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOxD;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IACP,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB,GAAG,kBAAuB,GAC1B,MAAM,GAAG,IAAI,CAKf;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IACzC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB,GAAG,OAAO,CAGV"}

package/dist/audiences/entry-page.js

@@ -0,0 +1,116 @@
+/**
+ * Entry page — the *write* side of the `kywi_entry` cookie contract
+ * (kywi-cms#196).
+ *
+ * `session.entryPage` has been in the signal catalogue and in the admin rule
+ * tester since the audience engine shipped, but nothing in core ever wrote it:
+ * `runServerCollectors` fed UTM params, the referrer and the visitor cookies
+ * into signal collection and left `session` at its schema defaults, so
+ * `entryPage` stayed `'/'` forever. A rule like
+ * `session.entryPage contains 'from=marketer'` could not fire on a real request
+ * no matter what the visitor did.
+ *
+ * This module is the missing writer, living next to its reader
+ * (`collectors/session.ts`) so a scaffolded app, the reference app and the
+ * runtime routes all share one implementation. The contract:
+ *
+ *   • The value is `pathname + search` of the FIRST request of a session —
+ *     `/developers?from=marketer`, not the whole URL. Query is included on
+ *     purpose: a campaign link's own params are the interesting part.
+ *   • It is written ONCE. A request that already carries the cookie returns
+ *     `null` here, so "entry page" keeps meaning the page the visitor arrived
+ *     on rather than quietly becoming "current page".
+ *   • It is written only for a DOCUMENT request. If a subresource could record
+ *     it, the first request of a session that happens to be `/kywi.js`, a font
+ *     or an API call would name the entry page, and every rule downstream would
+ *     be matching against an asset URL. Callers pass `Sec-Fetch-Dest` (and
+ *     `Accept` for browsers that omit it); saying neither fails closed.
+ *   • It is a SESSION cookie (no Max-Age): a new visit is a new entry page.
+ *   • It is a `personalization` cookie in the category map, gated exactly like
+ *     `kywi_visitor` and `kywi_utm` (kywi-cms#91). Without consent nothing is
+ *     persisted — and the read side falls back to the CURRENT request's path,
+ *     so a rule on the entry page still fires on the landing request itself.
+ *     That fallback is also what makes `/developers?from=marketer` switch on
+ *     the very request that carries it, with no reload, for everyone: a
+ *     Set-Cookie only takes effect on the NEXT request.
+ *
+ * EDGE-SAFE LEAF MODULE: its only import is `./consent.js`, itself a zero-import
+ * leaf, because this is imported from Next.js edge middleware where core's
+ * DB-backed code cannot run. Keep it dependency-free beyond that. It is
+ * published as its own export entry (`@kywi-software/core/audiences/entry-page`)
+ * so importing it never drags in the DB-backed `audiences` barrel — the same
+ * arrangement as `utm-persistence.ts`.
+ */
+import { cookieAllowedByHeader } from './consent.js';
+/**
+ * Cookie name the entry-page collector reads (mirrors `COOKIE_NAMES.ENTRY` in
+ * `audiences/cookies.ts`). Kept as a literal so this leaf imports nothing — the
+ * `cookies` module pulls in `jose`, which an edge writer does not need. A core
+ * test asserts this stays equal to `COOKIE_NAMES.ENTRY`, so the two cannot drift.
+ */
+export const ENTRY_COOKIE = 'kywi_entry';
+/**
+ * The entry-page value for a URL: `pathname + search`, or `null` when the URL
+ * cannot be parsed. Exported because the READ side needs exactly the same
+ * derivation for its current-request fallback.
+ */
+export function entryPagePath(url) {
+    try {
+        const parsed = new URL(url);
+        return `${parsed.pathname}${parsed.search}`;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The value to write to `kywi_entry` for this request, or `null` to leave things
+ * alone. `null` when: the visitor has not consented to personalization, the
+ * cookie is already set (the session's entry page is already recorded), or the
+ * URL is unparseable.
+ *
+ * Callers write it as a SESSION cookie — `buildSetCookieHeader(ENTRY_COOKIE,
+ * value, -1, { httpOnly: false })`, or the framework equivalent with no
+ * `maxAge`.
+ */
+export function entryPageCookieValue(url, options = {}) {
+    if (!isDocumentRequest(options))
+        return null;
+    if (!cookieAllowedByHeader(ENTRY_COOKIE, options.cookieHeader, options))
+        return null;
+    if (hasEntryCookie(options.cookieHeader))
+        return null;
+    return entryPagePath(url);
+}
+/**
+ * Is this request the visitor navigating to a PAGE, rather than the page
+ * fetching something?
+ *
+ * `Sec-Fetch-Dest` is authoritative where it exists (every current browser
+ * sends it, and it is one of the headers a page cannot forge). Without it, an
+ * `Accept` naming `text/html` is the long-standing signal. Neither is a no:
+ * a caller that cannot say what kind of request this is does not get to name
+ * the visitor's entry page.
+ */
+export function isDocumentRequest(headers) {
+    if (headers.secFetchDest)
+        return headers.secFetchDest === 'document';
+    return (headers.accept ?? '').includes('text/html');
+}
+/** Is an entry page already recorded on this request? (Header scan, no deps.) */
+function hasEntryCookie(header) {
+    if (!header)
+        return false;
+    for (const pair of header.split(';')) {
+        const trimmed = pair.trim();
+        const eqIdx = trimmed.indexOf('=');
+        if (eqIdx < 0)
+            continue;
+        if (trimmed.slice(0, eqIdx) !== ENTRY_COOKIE)
+            continue;
+        if (trimmed.slice(eqIdx + 1) !== '')
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=entry-page.js.map

package/dist/audiences/entry-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry-page.js","sourceRoot":"","sources":["../../src/audiences/entry-page.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,qBAAqB,EAA2B,MAAM,cAAc,CAAA;AAE7E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAA;AAExC;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3B,OAAO,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,UAMyB,EAAE;IAE3B,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5C,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IACpF,IAAI,cAAc,CAAC,OAAO,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAA;IACrD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAA;AAC3B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAGjC;IACC,IAAI,OAAO,CAAC,YAAY;QAAE,OAAO,OAAO,CAAC,YAAY,KAAK,UAAU,CAAA;IACpE,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACrD,CAAC;AAED,iFAAiF;AACjF,SAAS,cAAc,CAAC,MAAiC;IACvD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,KAAK,GAAG,CAAC;YAAE,SAAQ;QACvB,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,YAAY;YAAE,SAAQ;QACtD,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAA;IAClD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/audiences/evaluator/instant-match.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instant-match.d.ts","sourceRoot":"","sources":["../../../src/audiences/evaluator/instant-match.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAG1F,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAqBhG;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,qBAAqB,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAgB3G"}
+{"version":3,"file":"instant-match.d.ts","sourceRoot":"","sources":["../../../src/audiences/evaluator/instant-match.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAG1F,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CA4BhG;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,qBAAqB,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAgB3G"}

package/dist/audiences/evaluator/instant-match.js

@@ -20,6 +20,13 @@ export function resolveSignalValue(signals, ref) {
         return signals.session.entryPage;
     if (ref === 'session.pagesVisited')
         return signals.session.pagesVisited.join(',');
+    // `query.<param>` — this request's own query string (kywi-cms#196). An absent
+    // param is null, so `not_equals` matches it and `equals` does not, the same
+    // way an absent UTM param behaves.
+    if (ref.startsWith('query.')) {
+        const key = ref.slice(6);
+        return signals.query[key] ?? null;
+    }
     if (ref.startsWith('selfId.')) {
         const key = ref.slice(7);
         return signals.selfId[key] ?? null;

package/dist/audiences/evaluator/instant-match.js.map

@@ -1 +1 @@
-{"version":3,"file":"instant-match.js","sourceRoot":"","sources":["../../../src/audiences/evaluator/instant-match.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAErC,MAAM,UAAU,kBAAkB,CAAC,OAAuB,EAAE,GAAqB;IAC/E,IAAI,GAAG,KAAK,YAAY;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAA;IACnD,IAAI,GAAG,KAAK,YAAY;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAA;IACnD,IAAI,GAAG,KAAK,cAAc;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAA;IACvD,IAAI,GAAG,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;IAC/C,IAAI,GAAG,KAAK,aAAa;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAA;IACrD,IAAI,GAAG,KAAK,iBAAiB;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAA;IAC7D,IAAI,GAAG,KAAK,qBAAqB;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAA;IACrE,IAAI,GAAG,KAAK,kBAAkB;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;IAClF,IAAI,GAAG,KAAK,mBAAmB;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAA;IACjE,IAAI,GAAG,KAAK,sBAAsB;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACjF,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACxB,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAA;IACpC,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;QACjC,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC/D,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,SAAgC,EAAE,OAAuB;IAChG,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;IAC5D,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAA;IAChC,QAAQ,SAAS,CAAC,QAAQ,EAAE,CAAC;QAC3B,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAA;QACzC,KAAK,YAAY,CAAC,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAA;QAC7C,KAAK,UAAU,CAAC,CAAC,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACpG,KAAK,aAAa,CAAC,CAAC,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;QACzG,KAAK,cAAc,CAAC,CAAC,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAC1G,KAAK,WAAW,CAAC,CAAC,OAAO,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC9G,KAAK,SAAS,CAAC,CAAC,OAAO,MAAM,KAAK,MAAM,CAAA;QACxC,KAAK,UAAU,CAAC,CAAC,OAAO,MAAM,KAAK,OAAO,CAAA;QAC1C,KAAK,KAAK,CAAC,CAAC,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAA;QACxG,KAAK,KAAK,CAAC,CAAC,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAA;QACxG,OAAO,CAAC,CAAC,OAAO,KAAK,CAAA;IACvB,CAAC;AACH,CAAC"}
+{"version":3,"file":"instant-match.js","sourceRoot":"","sources":["../../../src/audiences/evaluator/instant-match.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAErC,MAAM,UAAU,kBAAkB,CAAC,OAAuB,EAAE,GAAqB;IAC/E,IAAI,GAAG,KAAK,YAAY;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAA;IACnD,IAAI,GAAG,KAAK,YAAY;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAA;IACnD,IAAI,GAAG,KAAK,cAAc;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAA;IACvD,IAAI,GAAG,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;IAC/C,IAAI,GAAG,KAAK,aAAa;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAA;IACrD,IAAI,GAAG,KAAK,iBAAiB;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAA;IAC7D,IAAI,GAAG,KAAK,qBAAqB;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAA;IACrE,IAAI,GAAG,KAAK,kBAAkB;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;IAClF,IAAI,GAAG,KAAK,mBAAmB;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAA;IACjE,IAAI,GAAG,KAAK,sBAAsB;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACjF,8EAA8E;IAC9E,4EAA4E;IAC5E,mCAAmC;IACnC,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACxB,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAA;IACnC,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACxB,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAA;IACpC,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;QACjC,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC/D,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,SAAgC,EAAE,OAAuB;IAChG,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;IAC5D,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAA;IAChC,QAAQ,SAAS,CAAC,QAAQ,EAAE,CAAC;QAC3B,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAA;QACzC,KAAK,YAAY,CAAC,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAA;QAC7C,KAAK,UAAU,CAAC,CAAC,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACpG,KAAK,aAAa,CAAC,CAAC,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;QACzG,KAAK,cAAc,CAAC,CAAC,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAC1G,KAAK,WAAW,CAAC,CAAC,OAAO,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC9G,KAAK,SAAS,CAAC,CAAC,OAAO,MAAM,KAAK,MAAM,CAAA;QACxC,KAAK,UAAU,CAAC,CAAC,OAAO,MAAM,KAAK,OAAO,CAAA;QAC1C,KAAK,KAAK,CAAC,CAAC,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAA;QACxG,KAAK,KAAK,CAAC,CAAC,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAA;QACxG,OAAO,CAAC,CAAC,OAAO,KAAK,CAAA;IACvB,CAAC;AACH,CAAC"}

package/dist/audiences/index.d.ts

@@ -5,9 +5,10 @@ export * from './consent.js';
 export { personalizationRequiresConsent } from './consent-config.js';
 export { REQUIRE_CONSENT_ENV, requireConsentFromEnv, assertConsentEnvAgreement, createConsentBannerCheck, } from './consent-startup.js';
 export { utmCookieValue, UTM_COOKIE } from './utm-persistence.js';
+export { entryPageCookieValue, entryPagePath, ENTRY_COOKIE } from './entry-page.js';
 export * from './engine.js';
 export * from './hmac.js';
-export { runServerCollectors } from './collectors/index.js';
+export { runServerCollectors, collectSession, collectQuery, collectSelfId } from './collectors/index.js';
 export { resolveAudiences, type EvaluationTrace, type ConditionTrace, type ResolveResult } from './evaluator/resolver.js';
 export { matchGlob } from './evaluator/glob.js';
 export { evaluateInstantCondition, resolveSignalValue } from './evaluator/instant-match.js';
@@ -20,7 +21,7 @@ export { applyAudienceThemeOverrides, tokensToStyleBlock } from './theme-customi
 export { getAudienceAnalytics, getAudiencesAnalytics, type AudienceAnalyticsData } from './analytics.js';
 export { checkAudienceDeletionSafety, createPreviewContext, type AudienceDeletionSafetyResult } from './queries.js';
 export { scanLayoutForAudience } from './deletion-guard.js';
-export { getActiveAudiences, listAudiences, getAudienceById, createAudience, type CreateAudienceInput } from './queries.js';
+export { getActiveAudiences, listAudiences, listPublicAudiences, getAudienceById, createAudience, type CreateAudienceInput } from './queries.js';
 export { getSelfIdWidgetConfig, listSelfIdFields } from './queries.js';
 export { evaluateActiveAudiences, type ServerAudienceEvaluation } from './server-eval.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/audiences/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/audiences/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAI5B,cAAc,cAAc,CAAA;AAC5B,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAA;AACpE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,sBAAsB,CAAA;AAI7B,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjE,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACzH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AAC3F,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,KAAK,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACxI,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAC1I,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AACzE,OAAO,EAAE,2BAA2B,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC1F,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACxG,OAAO,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,KAAK,4BAA4B,EAAE,MAAM,cAAc,CAAA;AACnH,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAC3H,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACtE,OAAO,EAAE,uBAAuB,EAAE,KAAK,wBAAwB,EAAE,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/audiences/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAI5B,cAAc,cAAc,CAAA;AAC5B,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAA;AACpE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,sBAAsB,CAAA;AAI7B,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAIjE,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACnF,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACxG,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACzH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AAC3F,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,KAAK,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACxI,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAC1I,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AACzE,OAAO,EAAE,2BAA2B,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC1F,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACxG,OAAO,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,KAAK,4BAA4B,EAAE,MAAM,cAAc,CAAA;AACnH,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,mBAAmB,EAAE,eAAe,EAAE,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAChJ,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACtE,OAAO,EAAE,uBAAuB,EAAE,KAAK,wBAAwB,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/audiences/index.js

@@ -11,9 +11,13 @@ export { REQUIRE_CONSENT_ENV, requireConsentFromEnv, assertConsentEnvAgreement,
 // dependency-free leaf entry (`@kywi-software/core/audiences/utm-persistence`)
 // for edge middleware that must not pull in this DB-backed barrel.
 export { utmCookieValue, UTM_COOKIE } from './utm-persistence.js';
+// Writer for the kywi_entry cookie collectSession reads (kywi-cms#196). Also a
+// dependency-free leaf entry (`@kywi-software/core/audiences/entry-page`) for
+// edge middleware, which is where an app normally writes it.
+export { entryPageCookieValue, entryPagePath, ENTRY_COOKIE } from './entry-page.js';
 export * from './engine.js';
 export * from './hmac.js';
-export { runServerCollectors } from './collectors/index.js';
+export { runServerCollectors, collectSession, collectQuery, collectSelfId } from './collectors/index.js';
 export { resolveAudiences } from './evaluator/resolver.js';
 export { matchGlob } from './evaluator/glob.js';
 export { evaluateInstantCondition, resolveSignalValue } from './evaluator/instant-match.js';
@@ -26,7 +30,7 @@ export { applyAudienceThemeOverrides, tokensToStyleBlock } from './theme-customi
 export { getAudienceAnalytics, getAudiencesAnalytics } from './analytics.js';
 export { checkAudienceDeletionSafety, createPreviewContext } from './queries.js';
 export { scanLayoutForAudience } from './deletion-guard.js';
-export { getActiveAudiences, listAudiences, getAudienceById, createAudience } from './queries.js';
+export { getActiveAudiences, listAudiences, listPublicAudiences, getAudienceById, createAudience } from './queries.js';
 export { getSelfIdWidgetConfig, listSelfIdFields } from './queries.js';
 export { evaluateActiveAudiences } from './server-eval.js';
 //# sourceMappingURL=index.js.map

package/dist/audiences/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/audiences/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,4EAA4E;AAC5E,+EAA+E;AAC/E,4EAA4E;AAC5E,cAAc,cAAc,CAAA;AAC5B,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAA;AACpE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,sBAAsB,CAAA;AAC7B,uEAAuE;AACvE,+EAA+E;AAC/E,mEAAmE;AACnE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjE,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,gBAAgB,EAAiE,MAAM,yBAAyB,CAAA;AACzH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AAC3F,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAsE,MAAM,qBAAqB,CAAA;AACxI,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,gBAAgB,EAA2C,MAAM,oBAAoB,CAAA;AAC1I,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AACzE,OAAO,EAAE,2BAA2B,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC1F,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAA8B,MAAM,gBAAgB,CAAA;AACxG,OAAO,EAAE,2BAA2B,EAAE,oBAAoB,EAAqC,MAAM,cAAc,CAAA;AACnH,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAA4B,MAAM,cAAc,CAAA;AAC3H,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACtE,OAAO,EAAE,uBAAuB,EAAiC,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/audiences/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,4EAA4E;AAC5E,+EAA+E;AAC/E,4EAA4E;AAC5E,cAAc,cAAc,CAAA;AAC5B,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAA;AACpE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,sBAAsB,CAAA;AAC7B,uEAAuE;AACvE,+EAA+E;AAC/E,mEAAmE;AACnE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjE,+EAA+E;AAC/E,8EAA8E;AAC9E,6DAA6D;AAC7D,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACnF,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACxG,OAAO,EAAE,gBAAgB,EAAiE,MAAM,yBAAyB,CAAA;AACzH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AAC3F,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAsE,MAAM,qBAAqB,CAAA;AACxI,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,gBAAgB,EAA2C,MAAM,oBAAoB,CAAA;AAC1I,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AACzE,OAAO,EAAE,2BAA2B,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC1F,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAA8B,MAAM,gBAAgB,CAAA;AACxG,OAAO,EAAE,2BAA2B,EAAE,oBAAoB,EAAqC,MAAM,cAAc,CAAA;AACnH,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,mBAAmB,EAAE,eAAe,EAAE,cAAc,EAA4B,MAAM,cAAc,CAAA;AAChJ,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACtE,OAAO,EAAE,uBAAuB,EAAiC,MAAM,kBAAkB,CAAA"}

package/dist/audiences/queries.d.ts

@@ -8,6 +8,19 @@ export declare function buildAudienceWithGroups(audienceRow: AudienceRow, groupR
 export declare function listAudiences(db: KywiDb, siteId: string): Promise<Audience[]>;
 export declare function getAudienceById(db: KywiDb, id: string, siteId?: string): Promise<Audience | null>;
 export declare function getActiveAudiences(db: KywiDb, siteId: string): Promise<Audience[]>;
+/**
+ * The audiences a public page may name — active AND flagged `is_public`
+ * (kywi-cms#200), priority-ordered.
+ *
+ * Deliberately NOT `Audience`: this feeds an unauthenticated route, and an
+ * audience's condition groups are its targeting logic. Only the id and the name
+ * leave the database, so a page can render a chooser without publishing how
+ * anybody is classified.
+ */
+export declare function listPublicAudiences(db: KywiDb, siteId: string): Promise<Array<{
+    id: string;
+    name: string;
+}>>;
 export interface CreateAudienceInput {
     siteId: string;
     name: string;
@@ -15,6 +28,8 @@ export interface CreateAudienceInput {
     priority: number;
     status?: 'active' | 'draft' | 'archived';
     scoreThreshold?: number;
+    /** List this audience's name publicly (kywi-cms#200). Defaults to false. */
+    public?: boolean;
     conditionGroups?: Array<{
         conditions: Array<{
             type: 'instant' | 'score';
@@ -36,6 +51,7 @@ export declare function updateAudience(db: KywiDb, id: string, input: Partial<{
     priority: number;
     status: 'active' | 'draft' | 'archived';
     scoreThreshold: number | null;
+    public: boolean;
 }>, siteId?: string): Promise<Audience | null>;
 export declare function deleteAudience(db: KywiDb, id: string, siteId?: string): Promise<boolean>;
 export declare function reorderAudiences(db: KywiDb, siteId: string, orderedIds: string[]): Promise<void>;

package/dist/audiences/queries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queries.d.ts","sourceRoot":"","sources":["../../src/audiences/queries.ts"],"names":[],"mappings":"AACA,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,cAAc,EAKf,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EACV,QAAQ,EAGR,WAAW,EACX,kBAAkB,EAEnB,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAM7C,MAAM,MAAM,WAAW,GAAG,OAAO,aAAa,CAAC,YAAY,CAAA;AAC3D,MAAM,MAAM,iBAAiB,GAAG,OAAO,mBAAmB,CAAC,YAAY,CAAA;AACvE,MAAM,MAAM,YAAY,GAAG,OAAO,cAAc,CAAC,YAAY,CAAA;AAI7D,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,WAAW,EACxB,SAAS,EAAE,iBAAiB,EAAE,EAC9B,aAAa,EAAE,YAAY,EAAE,GAC5B,QAAQ,CA0DV;AAID,wBAAsB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CA8BnF;AAOD,wBAAsB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CA2BvG;AAED,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAmCxF;AAID,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAA;IACxC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,eAAe,CAAC,EAAE,KAAK,CAAC;QACtB,UAAU,EAAE,KAAK,CAAC;YAChB,IAAI,EAAE,SAAS,GAAG,OAAO,CAAA;YACzB,MAAM,CAAC,EAAE,MAAM,CAAA;YACf,QAAQ,CAAC,EAAE,MAAM,CAAA;YACjB,KAAK,CAAC,EAAE,OAAO,CAAA;YACf,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,MAAM,CAAC,EAAE,MAAM,CAAA;YACf,SAAS,CAAC,EAAE,MAAM,CAAA;YAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;YACjB,OAAO,CAAC,EAAE,MAAM,CAAA;SACjB,CAAC,CAAA;KACH,CAAC,CAAA;CACH;AAED,wBAAsB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA8E9F;AAED,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CAAC;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAA;IACvC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B,CAAC,EACF,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAW1B;AAED,wBAAsB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ9F;AAED,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,IAAI,CAAC,CAef;AAID,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,KAAK,CAAC;IACZ,UAAU,EAAE,KAAK,CAAC;QAChB,IAAI,EAAE,SAAS,GAAG,OAAO,CAAA;QACzB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,KAAK,CAAC,EAAE,OAAO,CAAA;QACf,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,CAAC,CAAA;CACH,CAAC,GACD,OAAO,CAAC,IAAI,CAAC,CAgDf;AAID,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAezF;AAED,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,WAAW,CAAC,CA+BtB;AAED,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQjG;AAID,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAqBpC;AAED,wBAAsB,wBAAwB,CAC5C,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GACvD,OAAO,CAAC,kBAAkB,CAAC,CA4F7B;AAID,wBAAsB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO9E;AAED,wBAAsB,WAAW,CAC/B,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,IAAI,GACd,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAE,CAAC,CAAC,CAWnE;AAID,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAWlC;AAED,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAMlB;AAID,MAAM,WAAW,4BAA4B;IAC3C,kFAAkF;IAClF,IAAI,EAAE,OAAO,CAAA;IACb,yEAAyE;IACzE,UAAU,EAAE,MAAM,EAAE,CAAA;CACrB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,2BAA2B,CAC/C,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,4BAA4B,CAAC,CAoCvC;AAID;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEhF"}
+{"version":3,"file":"queries.d.ts","sourceRoot":"","sources":["../../src/audiences/queries.ts"],"names":[],"mappings":"AACA,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,cAAc,EAKf,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EACV,QAAQ,EAGR,WAAW,EACX,kBAAkB,EAEnB,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAM7C,MAAM,MAAM,WAAW,GAAG,OAAO,aAAa,CAAC,YAAY,CAAA;AAC3D,MAAM,MAAM,iBAAiB,GAAG,OAAO,mBAAmB,CAAC,YAAY,CAAA;AACvE,MAAM,MAAM,YAAY,GAAG,OAAO,cAAc,CAAC,YAAY,CAAA;AAI7D,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,WAAW,EACxB,SAAS,EAAE,iBAAiB,EAAE,EAC9B,aAAa,EAAE,YAAY,EAAE,GAC5B,QAAQ,CA4DV;AAID,wBAAsB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CA8BnF;AAOD,wBAAsB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CA2BvG;AAED,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAmCxF;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAY9C;AAID,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAA;IACxC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,eAAe,CAAC,EAAE,KAAK,CAAC;QACtB,UAAU,EAAE,KAAK,CAAC;YAChB,IAAI,EAAE,SAAS,GAAG,OAAO,CAAA;YACzB,MAAM,CAAC,EAAE,MAAM,CAAA;YACf,QAAQ,CAAC,EAAE,MAAM,CAAA;YACjB,KAAK,CAAC,EAAE,OAAO,CAAA;YACf,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,MAAM,CAAC,EAAE,MAAM,CAAA;YACf,SAAS,CAAC,EAAE,MAAM,CAAA;YAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;YACjB,OAAO,CAAC,EAAE,MAAM,CAAA;SACjB,CAAC,CAAA;KACH,CAAC,CAAA;CACH;AAED,wBAAsB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgF9F;AAED,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CAAC;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAA;IACvC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,MAAM,EAAE,OAAO,CAAA;CAChB,CAAC,EACF,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAkB1B;AAED,wBAAsB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ9F;AAED,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,IAAI,CAAC,CAef;AAID,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,KAAK,CAAC;IACZ,UAAU,EAAE,KAAK,CAAC;QAChB,IAAI,EAAE,SAAS,GAAG,OAAO,CAAA;QACzB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,KAAK,CAAC,EAAE,OAAO,CAAA;QACf,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,CAAC,CAAA;CACH,CAAC,GACD,OAAO,CAAC,IAAI,CAAC,CAgDf;AAID,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAezF;AAED,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,WAAW,CAAC,CA+BtB;AAED,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQjG;AAID,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAqBpC;AAED,wBAAsB,wBAAwB,CAC5C,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GACvD,OAAO,CAAC,kBAAkB,CAAC,CA4F7B;AAID,wBAAsB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO9E;AAED,wBAAsB,WAAW,CAC/B,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,IAAI,GACd,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAE,CAAC,CAAC,CAWnE;AAID,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAWlC;AAED,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAMlB;AAID,MAAM,WAAW,4BAA4B;IAC3C,kFAAkF;IAClF,IAAI,EAAE,OAAO,CAAA;IACb,yEAAyE;IACzE,UAAU,EAAE,MAAM,EAAE,CAAA;CACrB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,2BAA2B,CAC/C,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,4BAA4B,CAAC,CAoCvC;AAID;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEhF"}

package/dist/audiences/queries.js

@@ -54,6 +54,8 @@ export function buildAudienceWithGroups(audienceRow, groupRows, conditionRows) {
         priority: audienceRow.priority,
         status: audienceRow.status,
         scoreThreshold: audienceRow.scoreThreshold,
+        // Column `is_public`, wire/domain field `public` — see audiences/schema.ts.
+        public: audienceRow.isPublic,
         createdAt: audienceRow.createdAt,
         updatedAt: audienceRow.updatedAt,
         conditionGroups,
@@ -144,6 +146,22 @@ export async function getActiveAudiences(db, siteId) {
         return buildAudienceWithGroups(aud, audGroups, audConditions);
     });
 }
+/**
+ * The audiences a public page may name — active AND flagged `is_public`
+ * (kywi-cms#200), priority-ordered.
+ *
+ * Deliberately NOT `Audience`: this feeds an unauthenticated route, and an
+ * audience's condition groups are its targeting logic. Only the id and the name
+ * leave the database, so a page can render a chooser without publishing how
+ * anybody is classified.
+ */
+export async function listPublicAudiences(db, siteId) {
+    return db
+        .select({ id: kywiAudiences.id, name: kywiAudiences.name })
+        .from(kywiAudiences)
+        .where(and(eq(kywiAudiences.siteId, siteId), eq(kywiAudiences.status, 'active'), eq(kywiAudiences.isPublic, true)))
+        .orderBy(asc(kywiAudiences.priority));
+}
 export async function createAudience(db, input) {
     const insertValues = {
         siteId: input.siteId,
@@ -156,6 +174,8 @@ export async function createAudience(db, input) {
         insertValues.status = input.status;
     if (input.scoreThreshold !== undefined)
         insertValues.scoreThreshold = input.scoreThreshold;
+    if (input.public !== undefined)
+        insertValues.isPublic = input.public;
     const [audienceRow] = await db
         .insert(kywiAudiences)
         .values(insertValues)
@@ -205,9 +225,16 @@ export async function createAudience(db, input) {
     return buildAudienceWithGroups(aud, insertedGroups, insertedConditions);
 }
 export async function updateAudience(db, id, input, siteId) {
+    // `public` is the wire/domain name; the column is `is_public` (see schema.ts),
+    // so it is translated rather than spread through.
+    const { public: isPublic, ...columns } = input;
     const [row] = await db
         .update(kywiAudiences)
-        .set({ ...input, updatedAt: new Date() })
+        .set({
+        ...columns,
+        ...(isPublic !== undefined ? { isPublic } : {}),
+        updatedAt: new Date(),
+    })
         .where(siteId === undefined
         ? eq(kywiAudiences.id, id)
         : and(eq(kywiAudiences.id, id), eq(kywiAudiences.siteId, siteId)))