@monetizationos/proxy 1.0.3 → 1.2.0

package/README.md

@@ -29,6 +29,7 @@ const proxy = new MOSProxyBuilder()
         mosEndpointsPrefix: "/mos-endpoints/",
         anonymousSessionCookieName: "anon-session-id",
         authenticatedUserJwtCookieName: "__session",
+        createAnonymousIdentifierFallback: true,
         injectScriptUrl: "https://assets.monetizationos.com/web-components-latest.js",
         originRequestHeaders: { "X-Api-Key": process.env.ORIGIN_API_KEY! },
     })

package/dist/MOSProxy.d.ts

@@ -1,6 +1,7 @@
 import type { ClientMetadataProvider } from './adapters/ClientMetadataProvider';
 import type { Fetcher } from './adapters/Fetcher';
 import type { HtmlRewriterAdapter } from './adapters/HtmlRewriterAdapter';
+import type { IdentityProvider } from './adapters/IdentityProvider';
 import { type MOSProxyLogger } from './logger';
 import type { MOSConfigInput } from './types';
 export type MOSProxyHtmlPipelineStage = 'origin-response' | 'link-rewriting' | 'surface-decisions' | 'surface-behavior' | 'surface-components';
@@ -24,6 +25,7 @@ export interface MOSProxyOptions {
     apiFetcher: Fetcher | null;
     htmlRewriter: HtmlRewriterAdapter | null;
     clientMetadataProvider: ClientMetadataProvider | null;
+    identityProvider: IdentityProvider | null;
     logger?: MOSProxyLogger;
     onHtmlPipelineError?: MOSProxyHtmlPipelineErrorHandler;
     customEndpointsEnabled: boolean;

package/dist/MOSProxy.js

@@ -20,7 +20,7 @@ export class MOSProxy {
         this.config = normalizeMOSConfig(opts.config, opts.logger ?? consoleLogger);
     }
     async handle(request) {
-        const { originFetcher, apiFetcher, htmlRewriter, clientMetadataProvider, onHtmlPipelineError } = this.opts;
+        const { originFetcher, apiFetcher, htmlRewriter, clientMetadataProvider, identityProvider, onHtmlPipelineError } = this.opts;
         const logger = this.opts.logger ?? consoleLogger;
         const ctx = { config: this.config, logger };
         // Stage 1a: custom endpoint routing
@@ -61,7 +61,7 @@ export class MOSProxy {
                 throw new Error('MOSProxy: surfaceDecisions is enabled but no API fetcher is configured');
             }
             stage = 'surface-decisions';
-            const [modifiedResponse, surfaceDecisions] = await getSurfaceDecisions(ctx, request, rewrittenResponse, apiFetcher, htmlRewriter, clientMetadataProvider);
+            const [modifiedResponse, surfaceDecisions] = await getSurfaceDecisions(ctx, request, rewrittenResponse, apiFetcher, htmlRewriter, clientMetadataProvider, identityProvider);
             if (!surfaceDecisions) {
                 return modifiedResponse;
             }

package/dist/MOSProxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"MOSProxy.js","sourceRoot":"","sources":["../src/MOSProxy.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkB,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAE7D,OAAO,EAAE,aAAa,EAAuB,MAAM,UAAU,CAAA;AAC7D,OAAO,qBAAqB,MAAM,yBAAyB,CAAA;AAC3D,OAAO,kBAAkB,MAAM,6BAA6B,CAAA;AAC5D,OAAO,qBAAqB,MAAM,wBAAwB,CAAA;AAC1D,OAAO,oBAAoB,MAAM,wBAAwB,CAAA;AACzD,OAAO,gBAAgB,MAAM,2BAA2B,CAAA;AACxD,OAAO,qBAAqB,MAAM,0BAA0B,CAAA;AAC5D,OAAO,uBAAuB,MAAM,4BAA4B,CAAA;AAChE,OAAO,mBAAmB,MAAM,2BAA2B,CAAA;AAwC3D;;;GAGG;AACH,MAAM,OAAO,QAAQ;IAGY;IAFZ,MAAM,CAAW;IAElC,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;QAC9C,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,CAAA;IAC/E,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB;QACzB,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC,IAAI,CAAA;QAC1G,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,aAAa,CAAA;QAChD,MAAM,GAAG,GAAoB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;QAE5D,oCAAoC;QACpC,IAAI,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;YAC5F,CAAC;YACD,MAAM,sBAAsB,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;YACpF,IAAI,sBAAsB,EAAE,CAAC;gBACzB,OAAO,sBAAsB,CAAA;YACjC,CAAC;QACL,CAAC;QAED,yBAAyB;QACzB,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;QAE9E,iGAAiG;QACjG,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,IAAI,KAAK,CAAA;QAC3F,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAClD,OAAO,cAAc,CAAA;QACzB,CAAC;QAED,IAAI,KAAK,GAA8B,iBAAiB,CAAA;QACxD,IAAI,gBAAgB,GAAG,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;QAE9E,IAAI,CAAC;YACD,2CAA2C;YAC3C,IAAI,iBAAiB,GAAa,cAAc,CAAA;YAChD,IAAI,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBACjC,KAAK,GAAG,gBAAgB,CAAA;gBACxB,iBAAiB,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,CAAA;gBAC7E,gBAAgB,GAAG,wBAAwB,CAAC,iBAAiB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;YACjF,CAAC;YAED,wCAAwC;YACxC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBACrC,OAAO,iBAAiB,CAAA;YAC5B,CAAC;YACD,IAAI,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC1E,OAAO,iBAAiB,CAAA;YAC5B,CAAC;YAED,IAAI,CAAC,UAAU,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;YAC7F,CAAC;YAED,KAAK,GAAG,mBAAmB,CAAA;YAC3B,MAAM,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,MAAM,mBAAmB,CAClE,GAAG,EACH,OAAO,EACP,iBAAiB,EACjB,UAAU,EACV,YAAY,EACZ,sBAAsB,CACzB,CAAA;YACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACpB,OAAO,gBAAgB,CAAA;YAC3B,CAAC;YACD,gBAAgB,GAAG,wBAAwB,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;YAE5E,yCAAyC;YACzC,KAAK,GAAG,kBAAkB,CAAA;YAC1B,MAAM,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAA;YAC9G,IAAI,iBAAiB,EAAE,CAAC;gBACpB,OAAO,uBAAuB,CAAA;YAClC,CAAC;YACD,gBAAgB,GAAG,wBAAwB,CAAC,uBAAuB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;YAEnF,uEAAuE;YACvE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAChB,OAAO,uBAAuB,CAAA;YAClC,CAAC;YACD,KAAK,GAAG,oBAAoB,CAAA;YAC5B,OAAO,MAAM,uBAAuB,CAAC,GAAG,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAA;QACtG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC;gBACP,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,uBAAuB;gBAChC,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,mBAAmB,CAAC,EAAE;gBACjE,KAAK;aACR,CAAC,CAAA;YAEF,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACvB,OAAO,gBAAgB,CAAA;YAC3B,CAAC;YAED,IAAI,CAAC;gBACD,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC;oBAC9C,KAAK;oBACL,KAAK;oBACL,OAAO;oBACP,gBAAgB,EAAE,gBAAgB;iBACrC,CAAC,CAAA;gBACF,IAAI,CAAC,CAAC,eAAe,YAAY,QAAQ,CAAC,EAAE,CAAC;oBACzC,MAAM,CAAC,GAAG,CAAC;wBACP,KAAK,EAAE,MAAM;wBACb,IAAI,EAAE,qCAAqC;wBAC3C,OAAO,EAAE,wFAAwF;wBACjG,OAAO,EAAE,EAAE,KAAK,EAAE;qBACrB,CAAC,CAAA;oBACF,OAAO,gBAAgB,CAAA;gBAC3B,CAAC;gBACD,OAAO,eAAe,CAAA;YAC1B,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC;oBACP,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,mCAAmC;oBACzC,OAAO,EAAE,oEAAoE;oBAC7E,OAAO,EAAE,EAAE,KAAK,EAAE;oBAClB,KAAK,EAAE,YAAY;iBACtB,CAAC,CAAA;gBACF,OAAO,gBAAgB,CAAA;YAC3B,CAAC;QACL,CAAC;IACL,CAAC;CACJ;AAED,MAAM,wBAAwB,GAAG,CAAC,QAAkB,EAAE,MAAsB,EAAE,KAAgC,EAAY,EAAE;IACxH,IAAI,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,CAAC;YACP,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,kDAAkD;YAC3D,OAAO,EAAE,EAAE,KAAK,EAAE;YAClB,KAAK;SACR,CAAC,CAAA;QACF,OAAO,QAAQ,CAAA;IACnB,CAAC;AACL,CAAC,CAAA","sourcesContent":["import type { ClientMetadataProvider } from './adapters/ClientMetadataProvider'\nimport type { Fetcher } from './adapters/Fetcher'\nimport type { HtmlRewriterAdapter } from './adapters/HtmlRewriterAdapter'\nimport { type MOSConfig, normalizeMOSConfig } from './config'\nimport type { PipelineContext } from './context'\nimport { consoleLogger, type MOSProxyLogger } from './logger'\nimport customEndpointRequest from './stages/customEndpoint'\nimport isRedirectResponse from './stages/isRedirectResponse'\nimport rewriteOriginResponse from './stages/linkRewriting'\nimport performOriginRequest from './stages/originRequest'\nimport shouldIgnorePath from './stages/shouldIgnorePath'\nimport handleSurfaceBehavior from './stages/surfaceBehavior'\nimport handleSurfaceComponents from './stages/surfaceComponents'\nimport getSurfaceDecisions from './stages/surfaceDecisions'\nimport type { MOSConfigInput } from './types'\n\nexport type MOSProxyHtmlPipelineStage =\n    | 'origin-response'\n    | 'link-rewriting'\n    | 'surface-decisions'\n    | 'surface-behavior'\n    | 'surface-components'\n\nexport interface MOSProxyHtmlPipelineErrorContext {\n    error: unknown\n    stage: MOSProxyHtmlPipelineStage\n    request: Request\n    lastSafeResponse: Response\n}\n\n/**\n * Called when the HTML pipeline throws. Return a `Response` to fully control the proxy's reply, or\n * re-throw to surface the error to the platform handler. If omitted, the proxy fails open and\n * returns `lastSafeResponse`. If the callback itself throws or returns a non-Response value, the\n * proxy logs a warning and falls back to `lastSafeResponse` so the site cannot be taken down by a\n * bug in the handler.\n */\nexport type MOSProxyHtmlPipelineErrorHandler = (ctx: MOSProxyHtmlPipelineErrorContext) => Response | Promise<Response>\n\nexport interface MOSProxyOptions {\n    config: MOSConfigInput\n    originFetcher: Fetcher\n    apiFetcher: Fetcher | null\n    htmlRewriter: HtmlRewriterAdapter | null\n    clientMetadataProvider: ClientMetadataProvider | null\n    logger?: MOSProxyLogger\n    onHtmlPipelineError?: MOSProxyHtmlPipelineErrorHandler\n    customEndpointsEnabled: boolean\n    linkRewritingEnabled: boolean\n    surfaceDecisionsEnabled: boolean\n    htmlTransformationEnabled: boolean\n}\n\n/**\n * Platform-agnostic MonetizationOS proxy. Build one with `MOSProxyBuilder`, then call\n * `proxy.handle(request)` from your platform's fetch entry point.\n */\nexport class MOSProxy {\n    private readonly config: MOSConfig\n\n    constructor(private readonly opts: MOSProxyOptions) {\n        this.config = normalizeMOSConfig(opts.config, opts.logger ?? consoleLogger)\n    }\n\n    async handle(request: Request): Promise<Response> {\n        const { originFetcher, apiFetcher, htmlRewriter, clientMetadataProvider, onHtmlPipelineError } = this.opts\n        const logger = this.opts.logger ?? consoleLogger\n        const ctx: PipelineContext = { config: this.config, logger }\n\n        // Stage 1a: custom endpoint routing\n        if (this.opts.customEndpointsEnabled) {\n            if (!apiFetcher) {\n                throw new Error('MOSProxy: customEndpoints is enabled but no API fetcher is configured')\n            }\n            const customEndpointResponse = await customEndpointRequest(ctx, request, apiFetcher)\n            if (customEndpointResponse) {\n                return customEndpointResponse\n            }\n        }\n\n        // Stage 1b: origin fetch\n        const originResponse = await performOriginRequest(ctx, request, originFetcher)\n\n        // Auto-skip HTML pipeline for non-HTML content, or when HTML transformation is disabled entirely\n        const isHtml = originResponse.headers.get('Content-Type')?.startsWith('text/html') ?? false\n        if (!isHtml || !this.opts.htmlTransformationEnabled) {\n            return originResponse\n        }\n\n        let stage: MOSProxyHtmlPipelineStage = 'origin-response'\n        let failOpenResponse = cloneResponseForFallback(originResponse, logger, stage)\n\n        try {\n            // Stage 2: rewrite origin links (optional)\n            let rewrittenResponse: Response = originResponse\n            if (this.opts.linkRewritingEnabled) {\n                stage = 'link-rewriting'\n                rewrittenResponse = await rewriteOriginResponse(ctx, request, originResponse)\n                failOpenResponse = cloneResponseForFallback(rewrittenResponse, logger, stage)\n            }\n\n            // Stage 3: surface decisions (optional)\n            if (!this.opts.surfaceDecisionsEnabled) {\n                return rewrittenResponse\n            }\n            if (shouldIgnorePath(ctx, request) || isRedirectResponse(rewrittenResponse)) {\n                return rewrittenResponse\n            }\n\n            if (!apiFetcher) {\n                throw new Error('MOSProxy: surfaceDecisions is enabled but no API fetcher is configured')\n            }\n\n            stage = 'surface-decisions'\n            const [modifiedResponse, surfaceDecisions] = await getSurfaceDecisions(\n                ctx,\n                request,\n                rewrittenResponse,\n                apiFetcher,\n                htmlRewriter,\n                clientMetadataProvider,\n            )\n            if (!surfaceDecisions) {\n                return modifiedResponse\n            }\n            failOpenResponse = cloneResponseForFallback(modifiedResponse, logger, stage)\n\n            // Stage 4: surface behavior (HTTP-level)\n            stage = 'surface-behavior'\n            const [surfaceDecisionResponse, returnImmediately] = handleSurfaceBehavior(modifiedResponse, surfaceDecisions)\n            if (returnImmediately) {\n                return surfaceDecisionResponse\n            }\n            failOpenResponse = cloneResponseForFallback(surfaceDecisionResponse, logger, stage)\n\n            // Stage 5: surface components (HTML-level) — requires an HTML rewriter\n            if (!htmlRewriter) {\n                return surfaceDecisionResponse\n            }\n            stage = 'surface-components'\n            return await handleSurfaceComponents(ctx, surfaceDecisionResponse, surfaceDecisions, htmlRewriter)\n        } catch (error) {\n            logger.log({\n                level: 'error',\n                code: 'html-pipeline-failed',\n                message: 'HTML pipeline failed.',\n                context: { stage, hasErrorHandler: Boolean(onHtmlPipelineError) },\n                error,\n            })\n\n            if (!onHtmlPipelineError) {\n                return failOpenResponse\n            }\n\n            try {\n                const handlerResponse = await onHtmlPipelineError({\n                    error,\n                    stage,\n                    request,\n                    lastSafeResponse: failOpenResponse,\n                })\n                if (!(handlerResponse instanceof Response)) {\n                    logger.log({\n                        level: 'warn',\n                        code: 'html-pipeline-error-handler-invalid',\n                        message: 'onHtmlPipelineError did not return a Response; falling back to the last safe response.',\n                        context: { stage },\n                    })\n                    return failOpenResponse\n                }\n                return handlerResponse\n            } catch (handlerError) {\n                logger.log({\n                    level: 'warn',\n                    code: 'html-pipeline-error-handler-threw',\n                    message: 'onHtmlPipelineError threw; falling back to the last safe response.',\n                    context: { stage },\n                    error: handlerError,\n                })\n                return failOpenResponse\n            }\n        }\n    }\n}\n\nconst cloneResponseForFallback = (response: Response, logger: MOSProxyLogger, stage: MOSProxyHtmlPipelineStage): Response => {\n    try {\n        return response.clone()\n    } catch (error) {\n        logger.log({\n            level: 'warn',\n            code: 'response-clone-failed',\n            message: 'Could not clone response for fail-open fallback.',\n            context: { stage },\n            error,\n        })\n        return response\n    }\n}\n"]}
+{"version":3,"file":"MOSProxy.js","sourceRoot":"","sources":["../src/MOSProxy.ts"],"names":[],"mappings":"AAIA,OAAO,EAAkB,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAE7D,OAAO,EAAE,aAAa,EAAuB,MAAM,UAAU,CAAA;AAC7D,OAAO,qBAAqB,MAAM,yBAAyB,CAAA;AAC3D,OAAO,kBAAkB,MAAM,6BAA6B,CAAA;AAC5D,OAAO,qBAAqB,MAAM,wBAAwB,CAAA;AAC1D,OAAO,oBAAoB,MAAM,wBAAwB,CAAA;AACzD,OAAO,gBAAgB,MAAM,2BAA2B,CAAA;AACxD,OAAO,qBAAqB,MAAM,0BAA0B,CAAA;AAC5D,OAAO,uBAAuB,MAAM,4BAA4B,CAAA;AAChE,OAAO,mBAAmB,MAAM,2BAA2B,CAAA;AAyC3D;;;GAGG;AACH,MAAM,OAAO,QAAQ;IAGY;IAFZ,MAAM,CAAW;IAElC,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;QAC9C,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,CAAA;IAC/E,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB;QACzB,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC,IAAI,CAAA;QAC5H,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,aAAa,CAAA;QAChD,MAAM,GAAG,GAAoB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;QAE5D,oCAAoC;QACpC,IAAI,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;YAC5F,CAAC;YACD,MAAM,sBAAsB,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;YACpF,IAAI,sBAAsB,EAAE,CAAC;gBACzB,OAAO,sBAAsB,CAAA;YACjC,CAAC;QACL,CAAC;QAED,yBAAyB;QACzB,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;QAE9E,iGAAiG;QACjG,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,IAAI,KAAK,CAAA;QAC3F,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAClD,OAAO,cAAc,CAAA;QACzB,CAAC;QAED,IAAI,KAAK,GAA8B,iBAAiB,CAAA;QACxD,IAAI,gBAAgB,GAAG,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;QAE9E,IAAI,CAAC;YACD,2CAA2C;YAC3C,IAAI,iBAAiB,GAAa,cAAc,CAAA;YAChD,IAAI,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBACjC,KAAK,GAAG,gBAAgB,CAAA;gBACxB,iBAAiB,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,CAAA;gBAC7E,gBAAgB,GAAG,wBAAwB,CAAC,iBAAiB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;YACjF,CAAC;YAED,wCAAwC;YACxC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBACrC,OAAO,iBAAiB,CAAA;YAC5B,CAAC;YACD,IAAI,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC1E,OAAO,iBAAiB,CAAA;YAC5B,CAAC;YAED,IAAI,CAAC,UAAU,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;YAC7F,CAAC;YAED,KAAK,GAAG,mBAAmB,CAAA;YAC3B,MAAM,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,MAAM,mBAAmB,CAClE,GAAG,EACH,OAAO,EACP,iBAAiB,EACjB,UAAU,EACV,YAAY,EACZ,sBAAsB,EACtB,gBAAgB,CACnB,CAAA;YACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACpB,OAAO,gBAAgB,CAAA;YAC3B,CAAC;YACD,gBAAgB,GAAG,wBAAwB,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;YAE5E,yCAAyC;YACzC,KAAK,GAAG,kBAAkB,CAAA;YAC1B,MAAM,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAA;YAC9G,IAAI,iBAAiB,EAAE,CAAC;gBACpB,OAAO,uBAAuB,CAAA;YAClC,CAAC;YACD,gBAAgB,GAAG,wBAAwB,CAAC,uBAAuB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;YAEnF,uEAAuE;YACvE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAChB,OAAO,uBAAuB,CAAA;YAClC,CAAC;YACD,KAAK,GAAG,oBAAoB,CAAA;YAC5B,OAAO,MAAM,uBAAuB,CAAC,GAAG,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAA;QACtG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC;gBACP,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,uBAAuB;gBAChC,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,mBAAmB,CAAC,EAAE;gBACjE,KAAK;aACR,CAAC,CAAA;YAEF,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACvB,OAAO,gBAAgB,CAAA;YAC3B,CAAC;YAED,IAAI,CAAC;gBACD,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC;oBAC9C,KAAK;oBACL,KAAK;oBACL,OAAO;oBACP,gBAAgB,EAAE,gBAAgB;iBACrC,CAAC,CAAA;gBACF,IAAI,CAAC,CAAC,eAAe,YAAY,QAAQ,CAAC,EAAE,CAAC;oBACzC,MAAM,CAAC,GAAG,CAAC;wBACP,KAAK,EAAE,MAAM;wBACb,IAAI,EAAE,qCAAqC;wBAC3C,OAAO,EAAE,wFAAwF;wBACjG,OAAO,EAAE,EAAE,KAAK,EAAE;qBACrB,CAAC,CAAA;oBACF,OAAO,gBAAgB,CAAA;gBAC3B,CAAC;gBACD,OAAO,eAAe,CAAA;YAC1B,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC;oBACP,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,mCAAmC;oBACzC,OAAO,EAAE,oEAAoE;oBAC7E,OAAO,EAAE,EAAE,KAAK,EAAE;oBAClB,KAAK,EAAE,YAAY;iBACtB,CAAC,CAAA;gBACF,OAAO,gBAAgB,CAAA;YAC3B,CAAC;QACL,CAAC;IACL,CAAC;CACJ;AAED,MAAM,wBAAwB,GAAG,CAAC,QAAkB,EAAE,MAAsB,EAAE,KAAgC,EAAY,EAAE;IACxH,IAAI,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,CAAC;YACP,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,kDAAkD;YAC3D,OAAO,EAAE,EAAE,KAAK,EAAE;YAClB,KAAK;SACR,CAAC,CAAA;QACF,OAAO,QAAQ,CAAA;IACnB,CAAC;AACL,CAAC,CAAA","sourcesContent":["import type { ClientMetadataProvider } from './adapters/ClientMetadataProvider'\nimport type { Fetcher } from './adapters/Fetcher'\nimport type { HtmlRewriterAdapter } from './adapters/HtmlRewriterAdapter'\nimport type { IdentityProvider } from './adapters/IdentityProvider'\nimport { type MOSConfig, normalizeMOSConfig } from './config'\nimport type { PipelineContext } from './context'\nimport { consoleLogger, type MOSProxyLogger } from './logger'\nimport customEndpointRequest from './stages/customEndpoint'\nimport isRedirectResponse from './stages/isRedirectResponse'\nimport rewriteOriginResponse from './stages/linkRewriting'\nimport performOriginRequest from './stages/originRequest'\nimport shouldIgnorePath from './stages/shouldIgnorePath'\nimport handleSurfaceBehavior from './stages/surfaceBehavior'\nimport handleSurfaceComponents from './stages/surfaceComponents'\nimport getSurfaceDecisions from './stages/surfaceDecisions'\nimport type { MOSConfigInput } from './types'\n\nexport type MOSProxyHtmlPipelineStage =\n    | 'origin-response'\n    | 'link-rewriting'\n    | 'surface-decisions'\n    | 'surface-behavior'\n    | 'surface-components'\n\nexport interface MOSProxyHtmlPipelineErrorContext {\n    error: unknown\n    stage: MOSProxyHtmlPipelineStage\n    request: Request\n    lastSafeResponse: Response\n}\n\n/**\n * Called when the HTML pipeline throws. Return a `Response` to fully control the proxy's reply, or\n * re-throw to surface the error to the platform handler. If omitted, the proxy fails open and\n * returns `lastSafeResponse`. If the callback itself throws or returns a non-Response value, the\n * proxy logs a warning and falls back to `lastSafeResponse` so the site cannot be taken down by a\n * bug in the handler.\n */\nexport type MOSProxyHtmlPipelineErrorHandler = (ctx: MOSProxyHtmlPipelineErrorContext) => Response | Promise<Response>\n\nexport interface MOSProxyOptions {\n    config: MOSConfigInput\n    originFetcher: Fetcher\n    apiFetcher: Fetcher | null\n    htmlRewriter: HtmlRewriterAdapter | null\n    clientMetadataProvider: ClientMetadataProvider | null\n    identityProvider: IdentityProvider | null\n    logger?: MOSProxyLogger\n    onHtmlPipelineError?: MOSProxyHtmlPipelineErrorHandler\n    customEndpointsEnabled: boolean\n    linkRewritingEnabled: boolean\n    surfaceDecisionsEnabled: boolean\n    htmlTransformationEnabled: boolean\n}\n\n/**\n * Platform-agnostic MonetizationOS proxy. Build one with `MOSProxyBuilder`, then call\n * `proxy.handle(request)` from your platform's fetch entry point.\n */\nexport class MOSProxy {\n    private readonly config: MOSConfig\n\n    constructor(private readonly opts: MOSProxyOptions) {\n        this.config = normalizeMOSConfig(opts.config, opts.logger ?? consoleLogger)\n    }\n\n    async handle(request: Request): Promise<Response> {\n        const { originFetcher, apiFetcher, htmlRewriter, clientMetadataProvider, identityProvider, onHtmlPipelineError } = this.opts\n        const logger = this.opts.logger ?? consoleLogger\n        const ctx: PipelineContext = { config: this.config, logger }\n\n        // Stage 1a: custom endpoint routing\n        if (this.opts.customEndpointsEnabled) {\n            if (!apiFetcher) {\n                throw new Error('MOSProxy: customEndpoints is enabled but no API fetcher is configured')\n            }\n            const customEndpointResponse = await customEndpointRequest(ctx, request, apiFetcher)\n            if (customEndpointResponse) {\n                return customEndpointResponse\n            }\n        }\n\n        // Stage 1b: origin fetch\n        const originResponse = await performOriginRequest(ctx, request, originFetcher)\n\n        // Auto-skip HTML pipeline for non-HTML content, or when HTML transformation is disabled entirely\n        const isHtml = originResponse.headers.get('Content-Type')?.startsWith('text/html') ?? false\n        if (!isHtml || !this.opts.htmlTransformationEnabled) {\n            return originResponse\n        }\n\n        let stage: MOSProxyHtmlPipelineStage = 'origin-response'\n        let failOpenResponse = cloneResponseForFallback(originResponse, logger, stage)\n\n        try {\n            // Stage 2: rewrite origin links (optional)\n            let rewrittenResponse: Response = originResponse\n            if (this.opts.linkRewritingEnabled) {\n                stage = 'link-rewriting'\n                rewrittenResponse = await rewriteOriginResponse(ctx, request, originResponse)\n                failOpenResponse = cloneResponseForFallback(rewrittenResponse, logger, stage)\n            }\n\n            // Stage 3: surface decisions (optional)\n            if (!this.opts.surfaceDecisionsEnabled) {\n                return rewrittenResponse\n            }\n            if (shouldIgnorePath(ctx, request) || isRedirectResponse(rewrittenResponse)) {\n                return rewrittenResponse\n            }\n\n            if (!apiFetcher) {\n                throw new Error('MOSProxy: surfaceDecisions is enabled but no API fetcher is configured')\n            }\n\n            stage = 'surface-decisions'\n            const [modifiedResponse, surfaceDecisions] = await getSurfaceDecisions(\n                ctx,\n                request,\n                rewrittenResponse,\n                apiFetcher,\n                htmlRewriter,\n                clientMetadataProvider,\n                identityProvider,\n            )\n            if (!surfaceDecisions) {\n                return modifiedResponse\n            }\n            failOpenResponse = cloneResponseForFallback(modifiedResponse, logger, stage)\n\n            // Stage 4: surface behavior (HTTP-level)\n            stage = 'surface-behavior'\n            const [surfaceDecisionResponse, returnImmediately] = handleSurfaceBehavior(modifiedResponse, surfaceDecisions)\n            if (returnImmediately) {\n                return surfaceDecisionResponse\n            }\n            failOpenResponse = cloneResponseForFallback(surfaceDecisionResponse, logger, stage)\n\n            // Stage 5: surface components (HTML-level) — requires an HTML rewriter\n            if (!htmlRewriter) {\n                return surfaceDecisionResponse\n            }\n            stage = 'surface-components'\n            return await handleSurfaceComponents(ctx, surfaceDecisionResponse, surfaceDecisions, htmlRewriter)\n        } catch (error) {\n            logger.log({\n                level: 'error',\n                code: 'html-pipeline-failed',\n                message: 'HTML pipeline failed.',\n                context: { stage, hasErrorHandler: Boolean(onHtmlPipelineError) },\n                error,\n            })\n\n            if (!onHtmlPipelineError) {\n                return failOpenResponse\n            }\n\n            try {\n                const handlerResponse = await onHtmlPipelineError({\n                    error,\n                    stage,\n                    request,\n                    lastSafeResponse: failOpenResponse,\n                })\n                if (!(handlerResponse instanceof Response)) {\n                    logger.log({\n                        level: 'warn',\n                        code: 'html-pipeline-error-handler-invalid',\n                        message: 'onHtmlPipelineError did not return a Response; falling back to the last safe response.',\n                        context: { stage },\n                    })\n                    return failOpenResponse\n                }\n                return handlerResponse\n            } catch (handlerError) {\n                logger.log({\n                    level: 'warn',\n                    code: 'html-pipeline-error-handler-threw',\n                    message: 'onHtmlPipelineError threw; falling back to the last safe response.',\n                    context: { stage },\n                    error: handlerError,\n                })\n                return failOpenResponse\n            }\n        }\n    }\n}\n\nconst cloneResponseForFallback = (response: Response, logger: MOSProxyLogger, stage: MOSProxyHtmlPipelineStage): Response => {\n    try {\n        return response.clone()\n    } catch (error) {\n        logger.log({\n            level: 'warn',\n            code: 'response-clone-failed',\n            message: 'Could not clone response for fail-open fallback.',\n            context: { stage },\n            error,\n        })\n        return response\n    }\n}\n"]}

package/dist/MOSProxyBuilder.d.ts

@@ -1,6 +1,7 @@
 import type { ClientMetadataProvider } from './adapters/ClientMetadataProvider';
 import type { Fetcher } from './adapters/Fetcher';
 import type { HtmlRewriterAdapter } from './adapters/HtmlRewriterAdapter';
+import type { IdentityProvider } from './adapters/IdentityProvider';
 import type { MOSProxyLogger } from './logger';
 import { MOSProxy, type MOSProxyHtmlPipelineErrorHandler } from './MOSProxy';
 import type { MOSConfigInput } from './types';
@@ -28,6 +29,7 @@ import type { MOSConfigInput } from './types';
  *         injectScriptUrl: 'https://assets.monetizationos.com/web-components-latest.js',
  *         surfaceDecisionsIgnorePaths: '',
  *         originRequestHeaders: { 'X-Api-Key': process.env.ORIGIN_API_KEY! },
+ *         createAnonymousIdentifierFallback: true,
  *     })
  *     .withHtmlRewriter(myHtmlRewriterAdapter)
  *     .build()
@@ -41,6 +43,7 @@ export declare class MOSProxyBuilder {
     private _apiFetcher;
     private _htmlRewriter;
     private _clientMetadataProvider;
+    private _identityProvider;
     private _logger;
     private _onHtmlPipelineError;
     private _customEndpoints;
@@ -52,6 +55,14 @@ export declare class MOSProxyBuilder {
     withApiFetcher(fetcher: Fetcher): this;
     withHtmlRewriter(rewriter: HtmlRewriterAdapter): this;
     withClientMetadata(provider: ClientMetadataProvider): this;
+    /**
+     * Override identity provision for the surface-decisions API. Provide `resolve` to control the
+     * identity payload sent to the API (e.g. resolved from a request header instead of cookies),
+     * and/or `persist` to control how identity is recorded back on the response (e.g. suppress the
+     * default anonymous-session cookie or write it elsewhere). Either method is optional; omitted
+     * methods fall back to the built-in defaults.
+     */
+    withIdentityProvider(provider: IdentityProvider): this;
     withLogger(logger: MOSProxyLogger): this;
     /**
      * Register a callback to handle HTML pipeline errors. The proxy fails open by default and

package/dist/MOSProxyBuilder.js

@@ -23,6 +23,7 @@ import { MOSProxy } from './MOSProxy';
  *         injectScriptUrl: 'https://assets.monetizationos.com/web-components-latest.js',
  *         surfaceDecisionsIgnorePaths: '',
  *         originRequestHeaders: { 'X-Api-Key': process.env.ORIGIN_API_KEY! },
+ *         createAnonymousIdentifierFallback: true,
  *     })
  *     .withHtmlRewriter(myHtmlRewriterAdapter)
  *     .build()
@@ -36,6 +37,7 @@ export class MOSProxyBuilder {
     _apiFetcher = globalThis.fetch;
     _htmlRewriter = null;
     _clientMetadataProvider = null;
+    _identityProvider = null;
     _logger = null;
     _onHtmlPipelineError = null;
     _customEndpoints = true;
@@ -62,6 +64,17 @@ export class MOSProxyBuilder {
         this._clientMetadataProvider = provider;
         return this;
     }
+    /**
+     * Override identity provision for the surface-decisions API. Provide `resolve` to control the
+     * identity payload sent to the API (e.g. resolved from a request header instead of cookies),
+     * and/or `persist` to control how identity is recorded back on the response (e.g. suppress the
+     * default anonymous-session cookie or write it elsewhere). Either method is optional; omitted
+     * methods fall back to the built-in defaults.
+     */
+    withIdentityProvider(provider) {
+        this._identityProvider = provider;
+        return this;
+    }
     withLogger(logger) {
         this._logger = logger;
         return this;
@@ -113,6 +126,7 @@ export class MOSProxyBuilder {
             apiFetcher: this._apiFetcher,
             htmlRewriter: this._htmlRewriter,
             clientMetadataProvider: this._clientMetadataProvider,
+            identityProvider: this._identityProvider,
             logger: this._logger ?? undefined,
             onHtmlPipelineError: this._onHtmlPipelineError ?? undefined,
             customEndpointsEnabled: this._customEndpoints,

package/dist/MOSProxyBuilder.js.map

@@ -1 +1 @@
-{"version":3,"file":"MOSProxyBuilder.js","sourceRoot":"","sources":["../src/MOSProxyBuilder.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAA+D,MAAM,YAAY,CAAA;AAGlG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,OAAO,eAAe;IAChB,OAAO,GAA0B,IAAI,CAAA;IACrC,cAAc,GAAY,UAAU,CAAC,KAAK,CAAA;IAC1C,WAAW,GAAY,UAAU,CAAC,KAAK,CAAA;IACvC,aAAa,GAA+B,IAAI,CAAA;IAChD,uBAAuB,GAAkC,IAAI,CAAA;IAC7D,OAAO,GAA0B,IAAI,CAAA;IACrC,oBAAoB,GAA4C,IAAI,CAAA;IACpE,gBAAgB,GAAG,IAAI,CAAA;IACvB,cAAc,GAAG,IAAI,CAAA;IACrB,iBAAiB,GAAG,IAAI,CAAA;IACxB,mBAAmB,GAAG,IAAI,CAAA;IAElC,UAAU,CAAC,MAAsB;QAC7B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,OAAO,IAAI,CAAA;IACf,CAAC;IAED,iBAAiB,CAAC,OAAgB;QAC9B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAA;QAC7B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,cAAc,CAAC,OAAgB;QAC3B,IAAI,CAAC,WAAW,GAAG,OAAO,CAAA;QAC1B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,gBAAgB,CAAC,QAA6B;QAC1C,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAA;QAC7B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,kBAAkB,CAAC,QAAgC;QAC/C,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAA;QACvC,OAAO,IAAI,CAAA;IACf,CAAC;IAED,UAAU,CAAC,MAAsB;QAC7B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,OAAO,IAAI,CAAA;IACf,CAAC;IAED;;;;;;OAMG;IACH,4BAA4B,CAAC,OAAyC;QAClE,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAA;QACnC,OAAO,IAAI,CAAA;IACf,CAAC;IAED,sBAAsB;QAClB,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAA;QAC7B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,oBAAoB;QAChB,IAAI,CAAC,cAAc,GAAG,KAAK,CAAA;QAC3B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,uBAAuB;QACnB,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAA;QAC9B,OAAO,IAAI,CAAA;IACf,CAAC;IAED;;;;;OAKG;IACH,yBAAyB;QACrB,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAA;QAChC,OAAO,IAAI,CAAA;IACf,CAAC;IAED,KAAK;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACnE,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,iBAAiB,CAAA;QAC5E,IAAI,iBAAiB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACX,2KAA2K,CAC9K,CAAA;QACL,CAAC;QAED,MAAM,IAAI,GAAoB;YAC1B,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,aAAa,EAAE,IAAI,CAAC,cAAc;YAClC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,sBAAsB,EAAE,IAAI,CAAC,uBAAuB;YACpD,MAAM,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS;YACjC,mBAAmB,EAAE,IAAI,CAAC,oBAAoB,IAAI,SAAS;YAC3D,sBAAsB,EAAE,IAAI,CAAC,gBAAgB;YAC7C,oBAAoB,EAAE,IAAI,CAAC,cAAc;YACzC,uBAAuB,EAAE,IAAI,CAAC,iBAAiB;YAC/C,yBAAyB,EAAE,IAAI,CAAC,mBAAmB;SACtD,CAAA;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC;CACJ","sourcesContent":["import type { ClientMetadataProvider } from './adapters/ClientMetadataProvider'\nimport type { Fetcher } from './adapters/Fetcher'\nimport type { HtmlRewriterAdapter } from './adapters/HtmlRewriterAdapter'\nimport type { MOSProxyLogger } from './logger'\nimport { MOSProxy, type MOSProxyHtmlPipelineErrorHandler, type MOSProxyOptions } from './MOSProxy'\nimport type { MOSConfigInput } from './types'\n\n/**\n * Fluent builder for `MOSProxy`. Provide configuration and platform adapters, then `build()`.\n *\n * Defaults:\n * - custom endpoint routing: enabled\n * - link rewriting: enabled\n * - surface decisions: enabled\n * - HTML transformation: enabled (auto-skipped per request for non-HTML responses)\n * - origin/API fetcher: `globalThis.fetch` (override on runtimes that need a backend binding, e.g. Fastly)\n *\n * @example\n * ```ts\n * const proxy = new MOSProxyBuilder()\n *     .withConfig({\n *         originUrl: 'https://news.example.com',\n *         surfaceSlug: 'web',\n *         mosHost: 'https://api.monetizationos.com',\n *         mosSecretKey: process.env.MONETIZATION_OS_SECRET_KEY!,\n *         mosEndpointsPrefix: '/mos-endpoints/',\n *         anonymousSessionCookieName: 'anon-session-id',\n *         authenticatedUserJwtCookieName: '__session',\n *         injectScriptUrl: 'https://assets.monetizationos.com/web-components-latest.js',\n *         surfaceDecisionsIgnorePaths: '',\n *         originRequestHeaders: { 'X-Api-Key': process.env.ORIGIN_API_KEY! },\n *     })\n *     .withHtmlRewriter(myHtmlRewriterAdapter)\n *     .build()\n *\n * export default { fetch: (request: Request) => proxy.handle(request) }\n * ```\n */\nexport class MOSProxyBuilder {\n    private _config: MOSConfigInput | null = null\n    private _originFetcher: Fetcher = globalThis.fetch\n    private _apiFetcher: Fetcher = globalThis.fetch\n    private _htmlRewriter: HtmlRewriterAdapter | null = null\n    private _clientMetadataProvider: ClientMetadataProvider | null = null\n    private _logger: MOSProxyLogger | null = null\n    private _onHtmlPipelineError: MOSProxyHtmlPipelineErrorHandler | null = null\n    private _customEndpoints = true\n    private _linkRewriting = true\n    private _surfaceDecisions = true\n    private _htmlTransformation = true\n\n    withConfig(config: MOSConfigInput): this {\n        this._config = config\n        return this\n    }\n\n    withOriginFetcher(fetcher: Fetcher): this {\n        this._originFetcher = fetcher\n        return this\n    }\n\n    withApiFetcher(fetcher: Fetcher): this {\n        this._apiFetcher = fetcher\n        return this\n    }\n\n    withHtmlRewriter(rewriter: HtmlRewriterAdapter): this {\n        this._htmlRewriter = rewriter\n        return this\n    }\n\n    withClientMetadata(provider: ClientMetadataProvider): this {\n        this._clientMetadataProvider = provider\n        return this\n    }\n\n    withLogger(logger: MOSProxyLogger): this {\n        this._logger = logger\n        return this\n    }\n\n    /**\n     * Register a callback to handle HTML pipeline errors. The proxy fails open by default and\n     * returns the last safe (unconsumed) response — provide this if you want to shape that\n     * response yourself (e.g. render a custom error page, return a 503, or re-throw so your\n     * platform's error middleware handles it). If the callback throws or returns a non-Response\n     * value, the proxy logs a warning and falls back to the last safe response.\n     */\n    withHtmlPipelineErrorHandler(handler: MOSProxyHtmlPipelineErrorHandler): this {\n        this._onHtmlPipelineError = handler\n        return this\n    }\n\n    withoutCustomEndpoints(): this {\n        this._customEndpoints = false\n        return this\n    }\n\n    withoutLinkRewriting(): this {\n        this._linkRewriting = false\n        return this\n    }\n\n    withoutSurfaceDecisions(): this {\n        this._surfaceDecisions = false\n        return this\n    }\n\n    /**\n     * Disable the HTML transformation pipeline entirely (stages 3–6).\n     *\n     * Use for API-only proxies: neither an HTML rewriter adapter nor an API fetcher is required\n     * if custom endpoints and surface decisions are both disabled alongside this.\n     */\n    withoutHtmlTransformation(): this {\n        this._htmlTransformation = false\n        return this\n    }\n\n    build(): MOSProxy {\n        if (!this._config) {\n            throw new Error('MOSProxyBuilder: withConfig(...) is required')\n        }\n\n        const needsHtmlRewriter = this._htmlTransformation && this._surfaceDecisions\n        if (needsHtmlRewriter && !this._htmlRewriter) {\n            throw new Error(\n                'MOSProxyBuilder: withHtmlRewriter(...) is required when surface decisions is enabled; call withoutSurfaceDecisions() or withoutHtmlTransformation() if you do not need it',\n            )\n        }\n\n        const opts: MOSProxyOptions = {\n            config: this._config,\n            originFetcher: this._originFetcher,\n            apiFetcher: this._apiFetcher,\n            htmlRewriter: this._htmlRewriter,\n            clientMetadataProvider: this._clientMetadataProvider,\n            logger: this._logger ?? undefined,\n            onHtmlPipelineError: this._onHtmlPipelineError ?? undefined,\n            customEndpointsEnabled: this._customEndpoints,\n            linkRewritingEnabled: this._linkRewriting,\n            surfaceDecisionsEnabled: this._surfaceDecisions,\n            htmlTransformationEnabled: this._htmlTransformation,\n        }\n        return new MOSProxy(opts)\n    }\n}\n"]}
+{"version":3,"file":"MOSProxyBuilder.js","sourceRoot":"","sources":["../src/MOSProxyBuilder.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,QAAQ,EAA+D,MAAM,YAAY,CAAA;AAGlG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,OAAO,eAAe;IAChB,OAAO,GAA0B,IAAI,CAAA;IACrC,cAAc,GAAY,UAAU,CAAC,KAAK,CAAA;IAC1C,WAAW,GAAY,UAAU,CAAC,KAAK,CAAA;IACvC,aAAa,GAA+B,IAAI,CAAA;IAChD,uBAAuB,GAAkC,IAAI,CAAA;IAC7D,iBAAiB,GAA4B,IAAI,CAAA;IACjD,OAAO,GAA0B,IAAI,CAAA;IACrC,oBAAoB,GAA4C,IAAI,CAAA;IACpE,gBAAgB,GAAG,IAAI,CAAA;IACvB,cAAc,GAAG,IAAI,CAAA;IACrB,iBAAiB,GAAG,IAAI,CAAA;IACxB,mBAAmB,GAAG,IAAI,CAAA;IAElC,UAAU,CAAC,MAAsB;QAC7B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,OAAO,IAAI,CAAA;IACf,CAAC;IAED,iBAAiB,CAAC,OAAgB;QAC9B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAA;QAC7B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,cAAc,CAAC,OAAgB;QAC3B,IAAI,CAAC,WAAW,GAAG,OAAO,CAAA;QAC1B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,gBAAgB,CAAC,QAA6B;QAC1C,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAA;QAC7B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,kBAAkB,CAAC,QAAgC;QAC/C,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAA;QACvC,OAAO,IAAI,CAAA;IACf,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,QAA0B;QAC3C,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAA;QACjC,OAAO,IAAI,CAAA;IACf,CAAC;IAED,UAAU,CAAC,MAAsB;QAC7B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,OAAO,IAAI,CAAA;IACf,CAAC;IAED;;;;;;OAMG;IACH,4BAA4B,CAAC,OAAyC;QAClE,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAA;QACnC,OAAO,IAAI,CAAA;IACf,CAAC;IAED,sBAAsB;QAClB,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAA;QAC7B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,oBAAoB;QAChB,IAAI,CAAC,cAAc,GAAG,KAAK,CAAA;QAC3B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,uBAAuB;QACnB,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAA;QAC9B,OAAO,IAAI,CAAA;IACf,CAAC;IAED;;;;;OAKG;IACH,yBAAyB;QACrB,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAA;QAChC,OAAO,IAAI,CAAA;IACf,CAAC;IAED,KAAK;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACnE,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,iBAAiB,CAAA;QAC5E,IAAI,iBAAiB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACX,2KAA2K,CAC9K,CAAA;QACL,CAAC;QAED,MAAM,IAAI,GAAoB;YAC1B,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,aAAa,EAAE,IAAI,CAAC,cAAc;YAClC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,sBAAsB,EAAE,IAAI,CAAC,uBAAuB;YACpD,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,MAAM,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS;YACjC,mBAAmB,EAAE,IAAI,CAAC,oBAAoB,IAAI,SAAS;YAC3D,sBAAsB,EAAE,IAAI,CAAC,gBAAgB;YAC7C,oBAAoB,EAAE,IAAI,CAAC,cAAc;YACzC,uBAAuB,EAAE,IAAI,CAAC,iBAAiB;YAC/C,yBAAyB,EAAE,IAAI,CAAC,mBAAmB;SACtD,CAAA;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC;CACJ","sourcesContent":["import type { ClientMetadataProvider } from './adapters/ClientMetadataProvider'\nimport type { Fetcher } from './adapters/Fetcher'\nimport type { HtmlRewriterAdapter } from './adapters/HtmlRewriterAdapter'\nimport type { IdentityProvider } from './adapters/IdentityProvider'\nimport type { MOSProxyLogger } from './logger'\nimport { MOSProxy, type MOSProxyHtmlPipelineErrorHandler, type MOSProxyOptions } from './MOSProxy'\nimport type { MOSConfigInput } from './types'\n\n/**\n * Fluent builder for `MOSProxy`. Provide configuration and platform adapters, then `build()`.\n *\n * Defaults:\n * - custom endpoint routing: enabled\n * - link rewriting: enabled\n * - surface decisions: enabled\n * - HTML transformation: enabled (auto-skipped per request for non-HTML responses)\n * - origin/API fetcher: `globalThis.fetch` (override on runtimes that need a backend binding, e.g. Fastly)\n *\n * @example\n * ```ts\n * const proxy = new MOSProxyBuilder()\n *     .withConfig({\n *         originUrl: 'https://news.example.com',\n *         surfaceSlug: 'web',\n *         mosHost: 'https://api.monetizationos.com',\n *         mosSecretKey: process.env.MONETIZATION_OS_SECRET_KEY!,\n *         mosEndpointsPrefix: '/mos-endpoints/',\n *         anonymousSessionCookieName: 'anon-session-id',\n *         authenticatedUserJwtCookieName: '__session',\n *         injectScriptUrl: 'https://assets.monetizationos.com/web-components-latest.js',\n *         surfaceDecisionsIgnorePaths: '',\n *         originRequestHeaders: { 'X-Api-Key': process.env.ORIGIN_API_KEY! },\n *         createAnonymousIdentifierFallback: true,\n *     })\n *     .withHtmlRewriter(myHtmlRewriterAdapter)\n *     .build()\n *\n * export default { fetch: (request: Request) => proxy.handle(request) }\n * ```\n */\nexport class MOSProxyBuilder {\n    private _config: MOSConfigInput | null = null\n    private _originFetcher: Fetcher = globalThis.fetch\n    private _apiFetcher: Fetcher = globalThis.fetch\n    private _htmlRewriter: HtmlRewriterAdapter | null = null\n    private _clientMetadataProvider: ClientMetadataProvider | null = null\n    private _identityProvider: IdentityProvider | null = null\n    private _logger: MOSProxyLogger | null = null\n    private _onHtmlPipelineError: MOSProxyHtmlPipelineErrorHandler | null = null\n    private _customEndpoints = true\n    private _linkRewriting = true\n    private _surfaceDecisions = true\n    private _htmlTransformation = true\n\n    withConfig(config: MOSConfigInput): this {\n        this._config = config\n        return this\n    }\n\n    withOriginFetcher(fetcher: Fetcher): this {\n        this._originFetcher = fetcher\n        return this\n    }\n\n    withApiFetcher(fetcher: Fetcher): this {\n        this._apiFetcher = fetcher\n        return this\n    }\n\n    withHtmlRewriter(rewriter: HtmlRewriterAdapter): this {\n        this._htmlRewriter = rewriter\n        return this\n    }\n\n    withClientMetadata(provider: ClientMetadataProvider): this {\n        this._clientMetadataProvider = provider\n        return this\n    }\n\n    /**\n     * Override identity provision for the surface-decisions API. Provide `resolve` to control the\n     * identity payload sent to the API (e.g. resolved from a request header instead of cookies),\n     * and/or `persist` to control how identity is recorded back on the response (e.g. suppress the\n     * default anonymous-session cookie or write it elsewhere). Either method is optional; omitted\n     * methods fall back to the built-in defaults.\n     */\n    withIdentityProvider(provider: IdentityProvider): this {\n        this._identityProvider = provider\n        return this\n    }\n\n    withLogger(logger: MOSProxyLogger): this {\n        this._logger = logger\n        return this\n    }\n\n    /**\n     * Register a callback to handle HTML pipeline errors. The proxy fails open by default and\n     * returns the last safe (unconsumed) response — provide this if you want to shape that\n     * response yourself (e.g. render a custom error page, return a 503, or re-throw so your\n     * platform's error middleware handles it). If the callback throws or returns a non-Response\n     * value, the proxy logs a warning and falls back to the last safe response.\n     */\n    withHtmlPipelineErrorHandler(handler: MOSProxyHtmlPipelineErrorHandler): this {\n        this._onHtmlPipelineError = handler\n        return this\n    }\n\n    withoutCustomEndpoints(): this {\n        this._customEndpoints = false\n        return this\n    }\n\n    withoutLinkRewriting(): this {\n        this._linkRewriting = false\n        return this\n    }\n\n    withoutSurfaceDecisions(): this {\n        this._surfaceDecisions = false\n        return this\n    }\n\n    /**\n     * Disable the HTML transformation pipeline entirely (stages 3–6).\n     *\n     * Use for API-only proxies: neither an HTML rewriter adapter nor an API fetcher is required\n     * if custom endpoints and surface decisions are both disabled alongside this.\n     */\n    withoutHtmlTransformation(): this {\n        this._htmlTransformation = false\n        return this\n    }\n\n    build(): MOSProxy {\n        if (!this._config) {\n            throw new Error('MOSProxyBuilder: withConfig(...) is required')\n        }\n\n        const needsHtmlRewriter = this._htmlTransformation && this._surfaceDecisions\n        if (needsHtmlRewriter && !this._htmlRewriter) {\n            throw new Error(\n                'MOSProxyBuilder: withHtmlRewriter(...) is required when surface decisions is enabled; call withoutSurfaceDecisions() or withoutHtmlTransformation() if you do not need it',\n            )\n        }\n\n        const opts: MOSProxyOptions = {\n            config: this._config,\n            originFetcher: this._originFetcher,\n            apiFetcher: this._apiFetcher,\n            htmlRewriter: this._htmlRewriter,\n            clientMetadataProvider: this._clientMetadataProvider,\n            identityProvider: this._identityProvider,\n            logger: this._logger ?? undefined,\n            onHtmlPipelineError: this._onHtmlPipelineError ?? undefined,\n            customEndpointsEnabled: this._customEndpoints,\n            linkRewritingEnabled: this._linkRewriting,\n            surfaceDecisionsEnabled: this._surfaceDecisions,\n            htmlTransformationEnabled: this._htmlTransformation,\n        }\n        return new MOSProxy(opts)\n    }\n}\n"]}

package/dist/adapters/IdentityProvider.d.ts

@@ -0,0 +1,44 @@
+import type { MOSConfig } from '../config';
+import type { MOSProxyLogger } from '../logger';
+import type { SurfaceDecisionResponse } from '../types';
+export type Identity = {
+    createAnonymousIdentifier: true;
+} | {
+    userJwt: string;
+    createAnonymousIdentifierFallback?: true;
+} | {
+    anonymousIdentifier: string;
+};
+export interface ResolveIdentityArgs {
+    request: Request;
+    originResponse: Response;
+    config: MOSConfig;
+    logger: MOSProxyLogger;
+}
+export interface PersistIdentityArgs {
+    resolved: Identity;
+    decisions: SurfaceDecisionResponse;
+    response: Response;
+    request: Request;
+    config: MOSConfig;
+    logger: MOSProxyLogger;
+}
+/**
+ * Either method is optional; omitted methods use the built-in defaults. Both fail open: a throwing
+ * `resolve` skips surface decisions; a throwing `persist` keeps the pre-persist response.
+ */
+export interface IdentityProvider {
+    resolve?(args: ResolveIdentityArgs): Identity | Promise<Identity>;
+    persist?(args: PersistIdentityArgs): Response | Promise<Response>;
+}
+export declare const getExistingCookies: (request: Request, originResponse: Response, config: MOSConfig) => {
+    anonymousIdentifier?: string;
+    userJwt?: string;
+};
+export declare const buildIdentity: ({ anonymousIdentifier, userJwt, createAnonymousIdentifierFallback, }: {
+    anonymousIdentifier?: string;
+    userJwt?: string;
+    createAnonymousIdentifierFallback?: boolean;
+}) => Identity;
+export declare const defaultResolveIdentity: (args: ResolveIdentityArgs) => Identity;
+export declare const defaultPersistIdentity: (args: PersistIdentityArgs) => Response;

package/dist/adapters/IdentityProvider.js

@@ -0,0 +1,51 @@
+import { parse, parseSetCookie } from 'cookie';
+export const getExistingCookies = (request, originResponse, config) => {
+    const setCookies = originResponse.headers.getSetCookie().map((header) => parseSetCookie(header));
+    const originAnonymousCookie = setCookies.find((s) => s.name === config.anonymousSessionCookieName);
+    const originUserJwtCookie = setCookies.find((s) => s.name === config.authenticatedUserJwtCookieName);
+    if (originAnonymousCookie || originUserJwtCookie) {
+        return { anonymousIdentifier: originAnonymousCookie?.value, userJwt: originUserJwtCookie?.value };
+    }
+    const cookies = parse(request.headers.get('Cookie') || '');
+    const anonymousIdentifier = cookies[config.anonymousSessionCookieName];
+    const userJwt = cookies[config.authenticatedUserJwtCookieName];
+    return { anonymousIdentifier, userJwt };
+};
+export const buildIdentity = ({ anonymousIdentifier, userJwt, createAnonymousIdentifierFallback = false, }) => {
+    if (userJwt) {
+        return createAnonymousIdentifierFallback ? { userJwt, createAnonymousIdentifierFallback: true } : { userJwt };
+    }
+    if (anonymousIdentifier) {
+        return { anonymousIdentifier };
+    }
+    return { createAnonymousIdentifier: true };
+};
+export const defaultResolveIdentity = (args) => buildIdentity({
+    ...getExistingCookies(args.request, args.originResponse, args.config),
+    createAnonymousIdentifierFallback: args.config.createAnonymousIdentifierFallback,
+});
+export const defaultPersistIdentity = (args) => {
+    const { resolved, decisions, response, request, config } = args;
+    const identifier = decisions.identity?.identifier;
+    if (!identifier) {
+        return response;
+    }
+    const minted = 'createAnonymousIdentifier' in resolved && resolved.createAnonymousIdentifier === true;
+    // A JWT resolved with the fallback flag mints a fresh anonymous identifier only when the API reports the
+    // JWT as unauthenticated, and only when the request did not already carry an anonymous session cookie.
+    const jwtFallback = 'createAnonymousIdentifierFallback' in resolved &&
+        resolved.createAnonymousIdentifierFallback === true &&
+        !decisions.identity?.isAuthenticated &&
+        !getExistingCookies(request, response, config).anonymousIdentifier;
+    if (!minted && !jwtFallback) {
+        return response;
+    }
+    const headers = new Headers(response.headers);
+    headers.append('Set-Cookie', `${config.anonymousSessionCookieName}=${identifier}; Path=/`);
+    return new Response(response.body, {
+        status: response.status,
+        statusText: response.statusText,
+        headers,
+    });
+};
+//# sourceMappingURL=IdentityProvider.js.map

package/dist/adapters/IdentityProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityProvider.js","sourceRoot":"","sources":["../../src/adapters/IdentityProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAA;AAmC9C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAC9B,OAAgB,EAChB,cAAwB,EACxB,MAAiB,EACiC,EAAE;IACpD,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAA;IAChG,MAAM,qBAAqB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,0BAA0B,CAAC,CAAA;IAClG,MAAM,mBAAmB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,8BAA8B,CAAC,CAAA;IACpG,IAAI,qBAAqB,IAAI,mBAAmB,EAAE,CAAC;QAC/C,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAA;IACrG,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1D,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAA;IACtE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAA;IAC9D,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAA;AAC3C,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,EAC1B,mBAAmB,EACnB,OAAO,EACP,iCAAiC,GAAG,KAAK,GAK5C,EAAY,EAAE;IACX,IAAI,OAAO,EAAE,CAAC;QACV,OAAO,iCAAiC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAA;IACjH,CAAC;IAED,IAAI,mBAAmB,EAAE,CAAC;QACtB,OAAO,EAAE,mBAAmB,EAAE,CAAA;IAClC,CAAC;IAED,OAAO,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAA;AAC9C,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,IAAyB,EAAY,EAAE,CAC1E,aAAa,CAAC;IACV,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC;IACrE,iCAAiC,EAAE,IAAI,CAAC,MAAM,CAAC,iCAAiC;CACnF,CAAC,CAAA;AAEN,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,IAAyB,EAAY,EAAE;IAC1E,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IAC/D,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAA;IACjD,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,OAAO,QAAQ,CAAA;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,2BAA2B,IAAI,QAAQ,IAAI,QAAQ,CAAC,yBAAyB,KAAK,IAAI,CAAA;IACrG,yGAAyG;IACzG,uGAAuG;IACvG,MAAM,WAAW,GACb,mCAAmC,IAAI,QAAQ;QAC/C,QAAQ,CAAC,iCAAiC,KAAK,IAAI;QACnD,CAAC,SAAS,CAAC,QAAQ,EAAE,eAAe;QACpC,CAAC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,mBAAmB,CAAA;IAEtE,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAA;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC7C,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,MAAM,CAAC,0BAA0B,IAAI,UAAU,UAAU,CAAC,CAAA;IAC1F,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;QAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO;KACV,CAAC,CAAA;AACN,CAAC,CAAA","sourcesContent":["import { parse, parseSetCookie } from 'cookie'\nimport type { MOSConfig } from '../config'\nimport type { MOSProxyLogger } from '../logger'\nimport type { SurfaceDecisionResponse } from '../types'\n\nexport type Identity =\n    | { createAnonymousIdentifier: true }\n    | { userJwt: string; createAnonymousIdentifierFallback?: true }\n    | { anonymousIdentifier: string }\n\nexport interface ResolveIdentityArgs {\n    request: Request\n    originResponse: Response\n    config: MOSConfig\n    logger: MOSProxyLogger\n}\n\nexport interface PersistIdentityArgs {\n    resolved: Identity\n    decisions: SurfaceDecisionResponse\n    response: Response\n    request: Request\n    config: MOSConfig\n    logger: MOSProxyLogger\n}\n\n/**\n * Either method is optional; omitted methods use the built-in defaults. Both fail open: a throwing\n * `resolve` skips surface decisions; a throwing `persist` keeps the pre-persist response.\n */\nexport interface IdentityProvider {\n    resolve?(args: ResolveIdentityArgs): Identity | Promise<Identity>\n    persist?(args: PersistIdentityArgs): Response | Promise<Response>\n}\n\nexport const getExistingCookies = (\n    request: Request,\n    originResponse: Response,\n    config: MOSConfig,\n): { anonymousIdentifier?: string; userJwt?: string } => {\n    const setCookies = originResponse.headers.getSetCookie().map((header) => parseSetCookie(header))\n    const originAnonymousCookie = setCookies.find((s) => s.name === config.anonymousSessionCookieName)\n    const originUserJwtCookie = setCookies.find((s) => s.name === config.authenticatedUserJwtCookieName)\n    if (originAnonymousCookie || originUserJwtCookie) {\n        return { anonymousIdentifier: originAnonymousCookie?.value, userJwt: originUserJwtCookie?.value }\n    }\n\n    const cookies = parse(request.headers.get('Cookie') || '')\n    const anonymousIdentifier = cookies[config.anonymousSessionCookieName]\n    const userJwt = cookies[config.authenticatedUserJwtCookieName]\n    return { anonymousIdentifier, userJwt }\n}\n\nexport const buildIdentity = ({\n    anonymousIdentifier,\n    userJwt,\n    createAnonymousIdentifierFallback = false,\n}: {\n    anonymousIdentifier?: string\n    userJwt?: string\n    createAnonymousIdentifierFallback?: boolean\n}): Identity => {\n    if (userJwt) {\n        return createAnonymousIdentifierFallback ? { userJwt, createAnonymousIdentifierFallback: true } : { userJwt }\n    }\n\n    if (anonymousIdentifier) {\n        return { anonymousIdentifier }\n    }\n\n    return { createAnonymousIdentifier: true }\n}\n\nexport const defaultResolveIdentity = (args: ResolveIdentityArgs): Identity =>\n    buildIdentity({\n        ...getExistingCookies(args.request, args.originResponse, args.config),\n        createAnonymousIdentifierFallback: args.config.createAnonymousIdentifierFallback,\n    })\n\nexport const defaultPersistIdentity = (args: PersistIdentityArgs): Response => {\n    const { resolved, decisions, response, request, config } = args\n    const identifier = decisions.identity?.identifier\n    if (!identifier) {\n        return response\n    }\n\n    const minted = 'createAnonymousIdentifier' in resolved && resolved.createAnonymousIdentifier === true\n    // A JWT resolved with the fallback flag mints a fresh anonymous identifier only when the API reports the\n    // JWT as unauthenticated, and only when the request did not already carry an anonymous session cookie.\n    const jwtFallback =\n        'createAnonymousIdentifierFallback' in resolved &&\n        resolved.createAnonymousIdentifierFallback === true &&\n        !decisions.identity?.isAuthenticated &&\n        !getExistingCookies(request, response, config).anonymousIdentifier\n\n    if (!minted && !jwtFallback) {\n        return response\n    }\n\n    const headers = new Headers(response.headers)\n    headers.append('Set-Cookie', `${config.anonymousSessionCookieName}=${identifier}; Path=/`)\n    return new Response(response.body, {\n        status: response.status,\n        statusText: response.statusText,\n        headers,\n    })\n}\n"]}

package/dist/adapters/index.d.ts

@@ -1,3 +1,5 @@
 export type { ClientMetadataProvider } from './ClientMetadataProvider';
 export type { Fetcher } from './Fetcher';
 export type { ContentOptions, ElementHandlers, HtmlRewriterAdapter, HtmlRewriterCapabilities, HtmlRewriterSession, RewriterElement, RewriterText, } from './HtmlRewriterAdapter';
+export type { Identity, IdentityProvider, PersistIdentityArgs, ResolveIdentityArgs } from './IdentityProvider';
+export { buildIdentity, defaultPersistIdentity, defaultResolveIdentity, getExistingCookies, } from './IdentityProvider';

package/dist/adapters/index.js

@@ -1,2 +1,2 @@
-export {};
+export { buildIdentity, defaultPersistIdentity, defaultResolveIdentity, getExistingCookies, } from './IdentityProvider';
 //# sourceMappingURL=index.js.map

package/dist/adapters/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"","sourcesContent":["export type { ClientMetadataProvider } from './ClientMetadataProvider'\nexport type { Fetcher } from './Fetcher'\nexport type {\n    ContentOptions,\n    ElementHandlers,\n    HtmlRewriterAdapter,\n    HtmlRewriterCapabilities,\n    HtmlRewriterSession,\n    RewriterElement,\n    RewriterText,\n} from './HtmlRewriterAdapter'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AAYA,OAAO,EACH,aAAa,EACb,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,GACrB,MAAM,oBAAoB,CAAA","sourcesContent":["export type { ClientMetadataProvider } from './ClientMetadataProvider'\nexport type { Fetcher } from './Fetcher'\nexport type {\n    ContentOptions,\n    ElementHandlers,\n    HtmlRewriterAdapter,\n    HtmlRewriterCapabilities,\n    HtmlRewriterSession,\n    RewriterElement,\n    RewriterText,\n} from './HtmlRewriterAdapter'\nexport type { Identity, IdentityProvider, PersistIdentityArgs, ResolveIdentityArgs } from './IdentityProvider'\nexport {\n    buildIdentity,\n    defaultPersistIdentity,\n    defaultResolveIdentity,\n    getExistingCookies,\n} from './IdentityProvider'\n"]}

package/dist/apiRequestHeaders.d.ts

@@ -1,5 +1,5 @@
 export declare const MOS_PROXY_VERSION_HEADER = "X-MOS-Proxy-Version";
 export declare const MOS_PROXY_CLIENT_HEADER = "X-MOS-Proxy-Client";
-export declare const MOS_PROXY_PACKAGE_VERSION = "1.0.3";
+export declare const MOS_PROXY_PACKAGE_VERSION = "1.2.0";
 export declare const setMosProxyHeaders: (headers: Headers) => void;
 export declare const withMosProxyHeaders: (headers?: HeadersInit) => Headers;

package/dist/apiRequestHeaders.js

@@ -1,7 +1,7 @@
 import { formatClientRuntimeHeader } from './clientRuntime';
 export const MOS_PROXY_VERSION_HEADER = 'X-MOS-Proxy-Version';
 export const MOS_PROXY_CLIENT_HEADER = 'X-MOS-Proxy-Client';
-export const MOS_PROXY_PACKAGE_VERSION = '1.0.3';
+export const MOS_PROXY_PACKAGE_VERSION = '1.2.0';
 export const setMosProxyHeaders = (headers) => {
     headers.set(MOS_PROXY_VERSION_HEADER, MOS_PROXY_PACKAGE_VERSION);
     headers.set(MOS_PROXY_CLIENT_HEADER, formatClientRuntimeHeader());

package/dist/apiRequestHeaders.js.map

@@ -1 +1 @@
-{"version":3,"file":"apiRequestHeaders.js","sourceRoot":"","sources":["../src/apiRequestHeaders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAE3D,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAA;AAC7D,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,CAAA;AAC3D,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAA;AAEhD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAgB,EAAQ,EAAE;IACzD,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,yBAAyB,CAAC,CAAA;IAChE,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,yBAAyB,EAAE,CAAC,CAAA;AACrE,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAqB,EAAW,EAAE;IAClE,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IACjC,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACxB,OAAO,IAAI,CAAA;AACf,CAAC,CAAA","sourcesContent":["import { formatClientRuntimeHeader } from './clientRuntime'\n\nexport const MOS_PROXY_VERSION_HEADER = 'X-MOS-Proxy-Version'\nexport const MOS_PROXY_CLIENT_HEADER = 'X-MOS-Proxy-Client'\nexport const MOS_PROXY_PACKAGE_VERSION = '1.0.3'\n\nexport const setMosProxyHeaders = (headers: Headers): void => {\n    headers.set(MOS_PROXY_VERSION_HEADER, MOS_PROXY_PACKAGE_VERSION)\n    headers.set(MOS_PROXY_CLIENT_HEADER, formatClientRuntimeHeader())\n}\n\nexport const withMosProxyHeaders = (headers?: HeadersInit): Headers => {\n    const next = new Headers(headers)\n    setMosProxyHeaders(next)\n    return next\n}\n"]}
+{"version":3,"file":"apiRequestHeaders.js","sourceRoot":"","sources":["../src/apiRequestHeaders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAE3D,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAA;AAC7D,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,CAAA;AAC3D,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAA;AAEhD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAgB,EAAQ,EAAE;IACzD,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,yBAAyB,CAAC,CAAA;IAChE,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,yBAAyB,EAAE,CAAC,CAAA;AACrE,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAqB,EAAW,EAAE;IAClE,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IACjC,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACxB,OAAO,IAAI,CAAA;AACf,CAAC,CAAA","sourcesContent":["import { formatClientRuntimeHeader } from './clientRuntime'\n\nexport const MOS_PROXY_VERSION_HEADER = 'X-MOS-Proxy-Version'\nexport const MOS_PROXY_CLIENT_HEADER = 'X-MOS-Proxy-Client'\nexport const MOS_PROXY_PACKAGE_VERSION = '1.2.0'\n\nexport const setMosProxyHeaders = (headers: Headers): void => {\n    headers.set(MOS_PROXY_VERSION_HEADER, MOS_PROXY_PACKAGE_VERSION)\n    headers.set(MOS_PROXY_CLIENT_HEADER, formatClientRuntimeHeader())\n}\n\nexport const withMosProxyHeaders = (headers?: HeadersInit): Headers => {\n    const next = new Headers(headers)\n    setMosProxyHeaders(next)\n    return next\n}\n"]}

package/dist/config.d.ts

@@ -12,5 +12,6 @@ export interface MOSConfig {
     injectScriptUrl: string | undefined;
     surfaceDecisionsIgnorePathPatterns: RegExp[];
     originRequestHeaders: Record<string, string>;
+    createAnonymousIdentifierFallback: boolean;
 }
 export declare function normalizeMOSConfig(config: MOSConfigInput, logger?: MOSProxyLogger): MOSConfig;

package/dist/config.js

@@ -34,6 +34,7 @@ export function normalizeMOSConfig(config, logger = consoleLogger) {
         injectScriptUrl: config.injectScriptUrl,
         surfaceDecisionsIgnorePathPatterns: ignorePathPatterns,
         originRequestHeaders: { ...(config.originRequestHeaders ?? {}) },
+        createAnonymousIdentifierFallback: config.createAnonymousIdentifierFallback !== false,
     };
 }
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAuB,MAAM,UAAU,CAAA;AAG7D,MAAM,wBAAwB,GAAG,iBAAiB,CAAA;AAgBlD,MAAM,UAAU,kBAAkB,CAAC,MAAsB,EAAE,SAAyB,aAAa;IAC7F,MAAM,kBAAkB,GAAa,EAAE,CAAA;IACvC,IAAI,MAAM,CAAC,2BAA2B,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,2BAA2B,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;YAC1B,IAAI,CAAC,OAAO;gBAAE,SAAQ;YACtB,IAAI,CAAC;gBACD,kBAAkB,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,CAAC;oBACP,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,6BAA6B;oBACnC,OAAO,EAAE,sDAAsD,OAAO,EAAE;oBACxE,OAAO,EAAE,EAAE,OAAO,EAAE;oBACpB,KAAK;iBACR,CAAC,CAAA;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAErD,OAAO;QACH,SAAS,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;QACpC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,OAAO,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QAChC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,cAAc,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;QACvE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,wBAAwB;QACzE,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;QAC7D,8BAA8B,EAAE,MAAM,CAAC,8BAA8B;QACrE,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,kCAAkC,EAAE,kBAAkB;QACtD,oBAAoB,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,EAAE;KACnE,CAAA;AACL,CAAC","sourcesContent":["import { consoleLogger, type MOSProxyLogger } from './logger'\nimport type { MOSConfigInput } from './types'\n\nconst DEFAULT_ENDPOINTS_PREFIX = '/mos-endpoints/'\n\nexport interface MOSConfig {\n    originUrl: URL\n    surfaceSlug: string\n    mosHost: URL\n    mosSecretKey: string\n    mosEnvironment: string\n    mosEndpointsPrefix: string\n    anonymousSessionCookieName: string\n    authenticatedUserJwtCookieName: string\n    injectScriptUrl: string | undefined\n    surfaceDecisionsIgnorePathPatterns: RegExp[]\n    originRequestHeaders: Record<string, string>\n}\n\nexport function normalizeMOSConfig(config: MOSConfigInput, logger: MOSProxyLogger = consoleLogger): MOSConfig {\n    const ignorePathPatterns: RegExp[] = []\n    if (config.surfaceDecisionsIgnorePaths) {\n        for (const raw of config.surfaceDecisionsIgnorePaths.split(',')) {\n            const pattern = raw.trim()\n            if (!pattern) continue\n            try {\n                ignorePathPatterns.push(new RegExp(pattern))\n            } catch (error) {\n                logger.log({\n                    level: 'warn',\n                    code: 'invalid-ignore-path-pattern',\n                    message: `Invalid surfaceDecisionsIgnorePaths regex pattern: ${pattern}`,\n                    context: { pattern },\n                    error,\n                })\n            }\n        }\n    }\n\n    const secretKeyParts = config.mosSecretKey.split('_')\n\n    return {\n        originUrl: new URL(config.originUrl),\n        surfaceSlug: config.surfaceSlug,\n        mosHost: new URL(config.mosHost),\n        mosSecretKey: config.mosSecretKey,\n        mosEnvironment: `${secretKeyParts[1] ?? ''}_${secretKeyParts[2] ?? ''}`,\n        mosEndpointsPrefix: config.mosEndpointsPrefix || DEFAULT_ENDPOINTS_PREFIX,\n        anonymousSessionCookieName: config.anonymousSessionCookieName,\n        authenticatedUserJwtCookieName: config.authenticatedUserJwtCookieName,\n        injectScriptUrl: config.injectScriptUrl,\n        surfaceDecisionsIgnorePathPatterns: ignorePathPatterns,\n        originRequestHeaders: { ...(config.originRequestHeaders ?? {}) },\n    }\n}\n"]}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAuB,MAAM,UAAU,CAAA;AAG7D,MAAM,wBAAwB,GAAG,iBAAiB,CAAA;AAiBlD,MAAM,UAAU,kBAAkB,CAAC,MAAsB,EAAE,SAAyB,aAAa;IAC7F,MAAM,kBAAkB,GAAa,EAAE,CAAA;IACvC,IAAI,MAAM,CAAC,2BAA2B,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,2BAA2B,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;YAC1B,IAAI,CAAC,OAAO;gBAAE,SAAQ;YACtB,IAAI,CAAC;gBACD,kBAAkB,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,CAAC;oBACP,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,6BAA6B;oBACnC,OAAO,EAAE,sDAAsD,OAAO,EAAE;oBACxE,OAAO,EAAE,EAAE,OAAO,EAAE;oBACpB,KAAK;iBACR,CAAC,CAAA;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAErD,OAAO;QACH,SAAS,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;QACpC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,OAAO,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QAChC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,cAAc,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;QACvE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,wBAAwB;QACzE,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;QAC7D,8BAA8B,EAAE,MAAM,CAAC,8BAA8B;QACrE,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,kCAAkC,EAAE,kBAAkB;QACtD,oBAAoB,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,EAAE;QAChE,iCAAiC,EAAE,MAAM,CAAC,iCAAiC,KAAK,KAAK;KACxF,CAAA;AACL,CAAC","sourcesContent":["import { consoleLogger, type MOSProxyLogger } from './logger'\nimport type { MOSConfigInput } from './types'\n\nconst DEFAULT_ENDPOINTS_PREFIX = '/mos-endpoints/'\n\nexport interface MOSConfig {\n    originUrl: URL\n    surfaceSlug: string\n    mosHost: URL\n    mosSecretKey: string\n    mosEnvironment: string\n    mosEndpointsPrefix: string\n    anonymousSessionCookieName: string\n    authenticatedUserJwtCookieName: string\n    injectScriptUrl: string | undefined\n    surfaceDecisionsIgnorePathPatterns: RegExp[]\n    originRequestHeaders: Record<string, string>\n    createAnonymousIdentifierFallback: boolean\n}\n\nexport function normalizeMOSConfig(config: MOSConfigInput, logger: MOSProxyLogger = consoleLogger): MOSConfig {\n    const ignorePathPatterns: RegExp[] = []\n    if (config.surfaceDecisionsIgnorePaths) {\n        for (const raw of config.surfaceDecisionsIgnorePaths.split(',')) {\n            const pattern = raw.trim()\n            if (!pattern) continue\n            try {\n                ignorePathPatterns.push(new RegExp(pattern))\n            } catch (error) {\n                logger.log({\n                    level: 'warn',\n                    code: 'invalid-ignore-path-pattern',\n                    message: `Invalid surfaceDecisionsIgnorePaths regex pattern: ${pattern}`,\n                    context: { pattern },\n                    error,\n                })\n            }\n        }\n    }\n\n    const secretKeyParts = config.mosSecretKey.split('_')\n\n    return {\n        originUrl: new URL(config.originUrl),\n        surfaceSlug: config.surfaceSlug,\n        mosHost: new URL(config.mosHost),\n        mosSecretKey: config.mosSecretKey,\n        mosEnvironment: `${secretKeyParts[1] ?? ''}_${secretKeyParts[2] ?? ''}`,\n        mosEndpointsPrefix: config.mosEndpointsPrefix || DEFAULT_ENDPOINTS_PREFIX,\n        anonymousSessionCookieName: config.anonymousSessionCookieName,\n        authenticatedUserJwtCookieName: config.authenticatedUserJwtCookieName,\n        injectScriptUrl: config.injectScriptUrl,\n        surfaceDecisionsIgnorePathPatterns: ignorePathPatterns,\n        originRequestHeaders: { ...(config.originRequestHeaders ?? {}) },\n        createAnonymousIdentifierFallback: config.createAnonymousIdentifierFallback !== false,\n    }\n}\n"]}

package/dist/index.d.ts

@@ -1,4 +1,6 @@
-export type { ClientMetadataProvider, ContentOptions, ElementHandlers, Fetcher, HtmlRewriterAdapter, HtmlRewriterCapabilities, HtmlRewriterSession, RewriterElement, RewriterText, } from './adapters';
+export type { ClientMetadataProvider, ContentOptions, ElementHandlers, Fetcher, HtmlRewriterAdapter, HtmlRewriterCapabilities, HtmlRewriterSession, Identity, IdentityProvider, PersistIdentityArgs, ResolveIdentityArgs, RewriterElement, RewriterText, } from './adapters';
+export { buildIdentity, defaultPersistIdentity, defaultResolveIdentity, getExistingCookies, } from './adapters';
+export type { MOSConfig } from './config';
 export type { MOSProxyLogCode, MOSProxyLogEvent, MOSProxyLogger, MOSProxyLogLevel } from './logger';
 export { MOSProxy, type MOSProxyHtmlPipelineErrorContext, type MOSProxyHtmlPipelineErrorHandler, type MOSProxyHtmlPipelineStage, type MOSProxyOptions, } from './MOSProxy';
 export { MOSProxyBuilder } from './MOSProxyBuilder';

package/dist/index.js

@@ -1,3 +1,4 @@
+export { buildIdentity, defaultPersistIdentity, defaultResolveIdentity, getExistingCookies, } from './adapters';
 export { MOSProxy, } from './MOSProxy';
 export { MOSProxyBuilder } from './MOSProxyBuilder';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,OAAO,EACH,QAAQ,GAKX,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA","sourcesContent":["export type {\n    ClientMetadataProvider,\n    ContentOptions,\n    ElementHandlers,\n    Fetcher,\n    HtmlRewriterAdapter,\n    HtmlRewriterCapabilities,\n    HtmlRewriterSession,\n    RewriterElement,\n    RewriterText,\n} from './adapters'\nexport type { MOSProxyLogCode, MOSProxyLogEvent, MOSProxyLogger, MOSProxyLogLevel } from './logger'\nexport {\n    MOSProxy,\n    type MOSProxyHtmlPipelineErrorContext,\n    type MOSProxyHtmlPipelineErrorHandler,\n    type MOSProxyHtmlPipelineStage,\n    type MOSProxyOptions,\n} from './MOSProxy'\nexport { MOSProxyBuilder } from './MOSProxyBuilder'\nexport type {\n    Feature,\n    FeatureMeterableProperty,\n    FeatureNumberProperty,\n    MOSConfigInput,\n    ModifyHttpResponse,\n    PageMetadata,\n    SetHttpResponse,\n    SubSurfaceBehaviorApi,\n    SubSurfaceMetadataApi,\n    SurfaceBehaviorApi,\n    SurfaceDecisionError,\n    SurfaceDecisionResponse,\n    WebComponentElement,\n    WebComponentRangeReplacement,\n    WebContentSurfaceBehavior,\n    WebElement,\n} from './types'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAeA,OAAO,EACH,aAAa,EACb,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,GACrB,MAAM,YAAY,CAAA;AAGnB,OAAO,EACH,QAAQ,GAKX,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA","sourcesContent":["export type {\n    ClientMetadataProvider,\n    ContentOptions,\n    ElementHandlers,\n    Fetcher,\n    HtmlRewriterAdapter,\n    HtmlRewriterCapabilities,\n    HtmlRewriterSession,\n    Identity,\n    IdentityProvider,\n    PersistIdentityArgs,\n    ResolveIdentityArgs,\n    RewriterElement,\n    RewriterText,\n} from './adapters'\nexport {\n    buildIdentity,\n    defaultPersistIdentity,\n    defaultResolveIdentity,\n    getExistingCookies,\n} from './adapters'\nexport type { MOSConfig } from './config'\nexport type { MOSProxyLogCode, MOSProxyLogEvent, MOSProxyLogger, MOSProxyLogLevel } from './logger'\nexport {\n    MOSProxy,\n    type MOSProxyHtmlPipelineErrorContext,\n    type MOSProxyHtmlPipelineErrorHandler,\n    type MOSProxyHtmlPipelineStage,\n    type MOSProxyOptions,\n} from './MOSProxy'\nexport { MOSProxyBuilder } from './MOSProxyBuilder'\nexport type {\n    Feature,\n    FeatureMeterableProperty,\n    FeatureNumberProperty,\n    MOSConfigInput,\n    ModifyHttpResponse,\n    PageMetadata,\n    SetHttpResponse,\n    SubSurfaceBehaviorApi,\n    SubSurfaceMetadataApi,\n    SurfaceBehaviorApi,\n    SurfaceDecisionError,\n    SurfaceDecisionResponse,\n    WebComponentElement,\n    WebComponentRangeReplacement,\n    WebContentSurfaceBehavior,\n    WebElement,\n} from './types'\n"]}

package/dist/logger.d.ts

@@ -1,5 +1,5 @@
 export type MOSProxyLogLevel = 'warn' | 'error';
-export type MOSProxyLogCode = 'html-pipeline-failed' | 'html-pipeline-error-handler-invalid' | 'html-pipeline-error-handler-threw' | 'invalid-ignore-path-pattern' | 'response-clone-failed' | 'surface-decisions-api-failed' | 'link-rewriting-header-failed' | 'link-rewriting-body-failed' | 'marker-pass-invalid-state' | 'marker-pass-selector-failed' | 'replacement-markers-identical' | 'replacement-state-missing' | 'element-render-failed' | 'element-type-unsupported' | 'page-metadata-parse-failed' | 'component-selector-unsupported' | 'component-range-replacement-skipped' | 'component-transform-failed';
+export type MOSProxyLogCode = 'html-pipeline-failed' | 'html-pipeline-error-handler-invalid' | 'html-pipeline-error-handler-threw' | 'invalid-ignore-path-pattern' | 'response-clone-failed' | 'surface-decisions-api-failed' | 'identity-resolve-failed' | 'identity-persist-failed' | 'link-rewriting-header-failed' | 'link-rewriting-body-failed' | 'marker-pass-invalid-state' | 'marker-pass-selector-failed' | 'replacement-markers-identical' | 'replacement-state-missing' | 'element-render-failed' | 'element-type-unsupported' | 'page-metadata-parse-failed' | 'component-selector-unsupported' | 'component-range-replacement-skipped' | 'component-transform-failed';
 export interface MOSProxyLogEvent {
     level: MOSProxyLogLevel;
     code: MOSProxyLogCode;

package/dist/logger.js.map

@@ -1 +1 @@
-{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAkCA,MAAM,CAAC,MAAM,aAAa,GAAmB;IACzC,GAAG,CAAC,KAAK;QACL,MAAM,OAAO,GAAc,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QAClF,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC7B,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAA;YACzB,OAAM;QACV,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAA;IAC5B,CAAC;CACJ,CAAA","sourcesContent":["export type MOSProxyLogLevel = 'warn' | 'error'\n\nexport type MOSProxyLogCode =\n    | 'html-pipeline-failed'\n    | 'html-pipeline-error-handler-invalid'\n    | 'html-pipeline-error-handler-threw'\n    | 'invalid-ignore-path-pattern'\n    | 'response-clone-failed'\n    | 'surface-decisions-api-failed'\n    | 'link-rewriting-header-failed'\n    | 'link-rewriting-body-failed'\n    | 'marker-pass-invalid-state'\n    | 'marker-pass-selector-failed'\n    | 'replacement-markers-identical'\n    | 'replacement-state-missing'\n    | 'element-render-failed'\n    | 'element-type-unsupported'\n    | 'page-metadata-parse-failed'\n    | 'component-selector-unsupported'\n    | 'component-range-replacement-skipped'\n    | 'component-transform-failed'\n\nexport interface MOSProxyLogEvent {\n    level: MOSProxyLogLevel\n    code: MOSProxyLogCode\n    message: string\n    context?: Record<string, unknown>\n    error?: unknown\n}\n\nexport interface MOSProxyLogger {\n    log(event: MOSProxyLogEvent): void\n}\n\nexport const consoleLogger: MOSProxyLogger = {\n    log(event) {\n        const details: unknown[] = [event.message, { code: event.code, ...event.context }]\n        if (event.error) {\n            details.push(event.error)\n        }\n\n        if (event.level === 'error') {\n            console.error(...details)\n            return\n        }\n\n        console.warn(...details)\n    },\n}\n"]}
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAoCA,MAAM,CAAC,MAAM,aAAa,GAAmB;IACzC,GAAG,CAAC,KAAK;QACL,MAAM,OAAO,GAAc,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QAClF,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC7B,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAA;YACzB,OAAM;QACV,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAA;IAC5B,CAAC;CACJ,CAAA","sourcesContent":["export type MOSProxyLogLevel = 'warn' | 'error'\n\nexport type MOSProxyLogCode =\n    | 'html-pipeline-failed'\n    | 'html-pipeline-error-handler-invalid'\n    | 'html-pipeline-error-handler-threw'\n    | 'invalid-ignore-path-pattern'\n    | 'response-clone-failed'\n    | 'surface-decisions-api-failed'\n    | 'identity-resolve-failed'\n    | 'identity-persist-failed'\n    | 'link-rewriting-header-failed'\n    | 'link-rewriting-body-failed'\n    | 'marker-pass-invalid-state'\n    | 'marker-pass-selector-failed'\n    | 'replacement-markers-identical'\n    | 'replacement-state-missing'\n    | 'element-render-failed'\n    | 'element-type-unsupported'\n    | 'page-metadata-parse-failed'\n    | 'component-selector-unsupported'\n    | 'component-range-replacement-skipped'\n    | 'component-transform-failed'\n\nexport interface MOSProxyLogEvent {\n    level: MOSProxyLogLevel\n    code: MOSProxyLogCode\n    message: string\n    context?: Record<string, unknown>\n    error?: unknown\n}\n\nexport interface MOSProxyLogger {\n    log(event: MOSProxyLogEvent): void\n}\n\nexport const consoleLogger: MOSProxyLogger = {\n    log(event) {\n        const details: unknown[] = [event.message, { code: event.code, ...event.context }]\n        if (event.error) {\n            details.push(event.error)\n        }\n\n        if (event.level === 'error') {\n            console.error(...details)\n            return\n        }\n\n        console.warn(...details)\n    },\n}\n"]}

package/dist/stages/fetchSurfaceDecisions.d.ts

@@ -1,9 +1,9 @@
 import type { Fetcher } from '../adapters/Fetcher';
+import type { Identity } from '../adapters/IdentityProvider';
 import type { PipelineContext } from '../context';
 import type { PageMetadata, SurfaceDecisionResponse } from '../types';
 export type FetchSurfaceDecisionsArgs = {
-    anonymousIdentifier?: string | undefined;
-    userJwt?: string | undefined;
+    identity: Identity;
     path: string;
     url: string;
     clientMetadata: Record<string, unknown>;
@@ -22,4 +22,4 @@ export type FetchSurfaceDecisionsResult = {
     status?: number;
     statusCode?: number;
 };
-export default function fetchSurfaceDecisions(ctx: PipelineContext, { anonymousIdentifier, userJwt, path, url, clientMetadata, pageMetadata, userAgent, originStatus }: FetchSurfaceDecisionsArgs, apiFetcher: Fetcher): Promise<FetchSurfaceDecisionsResult>;
+export default function fetchSurfaceDecisions(ctx: PipelineContext, { identity, path, url, clientMetadata, pageMetadata, userAgent, originStatus }: FetchSurfaceDecisionsArgs, apiFetcher: Fetcher): Promise<FetchSurfaceDecisionsResult>;

package/dist/stages/fetchSurfaceDecisions.js

@@ -1,10 +1,10 @@
 import { withMosProxyHeaders } from '../apiRequestHeaders';
-export default async function fetchSurfaceDecisions(ctx, { anonymousIdentifier, userJwt, path, url, clientMetadata, pageMetadata, userAgent, originStatus }, apiFetcher) {
+export default async function fetchSurfaceDecisions(ctx, { identity, path, url, clientMetadata, pageMetadata, userAgent, originStatus }, apiFetcher) {
     const { config } = ctx;
     const body = JSON.stringify({
         ...clientMetadata,
         surfaceSlug: config.surfaceSlug,
-        identity: buildIdentity({ anonymousIdentifier, userJwt }),
+        identity,
         resource: {
             id: path,
             meta: pageMetadata,
@@ -67,12 +67,6 @@ export default async function fetchSurfaceDecisions(ctx, { anonymousIdentifier,
     return { ok: true, data };
 }
 const isRecord = (value) => typeof value === 'object' && value !== null;
-const buildIdentity = ({ anonymousIdentifier, userJwt }) => {
-    if (!anonymousIdentifier && !userJwt) {
-        return { createAnonymousIdentifier: true };
-    }
-    return userJwt ? { userJwt } : { anonymousIdentifier };
-};
 const isSurfaceDecisionError = (value) => isRecord(value) && value.status === 'error' && typeof value.message === 'string' && typeof value.statusCode === 'number';
 const isSurfaceDecisionResponse = (value) => isRecord(value) &&
     value.status === 'success' &&

package/dist/stages/fetchSurfaceDecisions.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetchSurfaceDecisions.js","sourceRoot":"","sources":["../../src/stages/fetchSurfaceDecisions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AA8B1D,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,qBAAqB,CAC/C,GAAoB,EACpB,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAA6B,EAC7H,UAAmB;IAEnB,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IACtB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QACxB,GAAG,cAAc;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,aAAa,CAAC,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC;QACzD,QAAQ,EAAE;YACN,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,YAAY;SACrB;QACD,IAAI,EAAE;YACF,GAAG;YACH,SAAS;YACT,WAAW,EAAE;gBACT,MAAM,EAAE,YAAY;aACvB;SACJ;KACJ,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,2BAA2B,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;QAC9E,MAAM,EAAE,MAAM;QACd,IAAI;QACJ,OAAO,EAAE,mBAAmB,CAAC;YACzB,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,MAAM,CAAC,YAAY,EAAE;SACjD,CAAC;KACL,CAAC,CAAA;IAEF,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACD,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAA;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAA;IACzD,CAAC;IAED,IAAI,IAAa,CAAA;IACjB,IAAI,CAAC;QACD,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAA;IAChF,CAAC;IAED,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO;YACH,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;YAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC9B,CAAA;IACL,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACf,OAAO;YACH,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC1E,MAAM,EAAE,QAAQ,CAAC,MAAM;SAC1B,CAAA;IACL,CAAC;IAED,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO;YACH,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kBAAkB;YAC1B,KAAK,EAAE,IAAI,KAAK,CAAC,0DAA0D,CAAC;YAC5E,MAAM,EAAE,QAAQ,CAAC,MAAM;SAC1B,CAAA;IACL,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AAC7B,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAA;AAElH,MAAM,aAAa,GAAG,CAAC,EAAE,mBAAmB,EAAE,OAAO,EAAsE,EAAE,EAAE;IAC3H,IAAI,CAAC,mBAAmB,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,OAAO,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAA;IAC9C,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAA;AAC1D,CAAC,CAAA;AAED,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAiC,EAAE,CAC7E,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAA;AAE5H,MAAM,yBAAyB,GAAG,CAAC,KAAc,EAAoC,EAAE,CACnF,QAAQ,CAAC,KAAK,CAAC;IACf,KAAK,CAAC,MAAM,KAAK,SAAS;IAC1B,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC;IAC/B,OAAO,KAAK,CAAC,iBAAiB,KAAK,SAAS;IAC5C,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA","sourcesContent":["import type { Fetcher } from '../adapters/Fetcher'\nimport { withMosProxyHeaders } from '../apiRequestHeaders'\nimport type { PipelineContext } from '../context'\nimport type { PageMetadata, SurfaceDecisionError, SurfaceDecisionResponse } from '../types'\n\nexport type FetchSurfaceDecisionsArgs = {\n    anonymousIdentifier?: string | undefined\n    userJwt?: string | undefined\n    path: string\n    url: string\n    clientMetadata: Record<string, unknown>\n    pageMetadata?: PageMetadata\n    userAgent?: string | undefined\n    originStatus: number\n}\n\nexport type FetchSurfaceDecisionsFailureReason = 'request-failed' | 'invalid-json' | 'api-error' | 'http-error' | 'invalid-response'\n\nexport type FetchSurfaceDecisionsResult =\n    | {\n          ok: true\n          data: SurfaceDecisionResponse\n      }\n    | {\n          ok: false\n          reason: FetchSurfaceDecisionsFailureReason\n          error: unknown\n          status?: number\n          statusCode?: number\n      }\n\nexport default async function fetchSurfaceDecisions(\n    ctx: PipelineContext,\n    { anonymousIdentifier, userJwt, path, url, clientMetadata, pageMetadata, userAgent, originStatus }: FetchSurfaceDecisionsArgs,\n    apiFetcher: Fetcher,\n): Promise<FetchSurfaceDecisionsResult> {\n    const { config } = ctx\n    const body = JSON.stringify({\n        ...clientMetadata,\n        surfaceSlug: config.surfaceSlug,\n        identity: buildIdentity({ anonymousIdentifier, userJwt }),\n        resource: {\n            id: path,\n            meta: pageMetadata,\n        },\n        http: {\n            url,\n            userAgent,\n            proxyOrigin: {\n                status: originStatus,\n            },\n        },\n    })\n\n    const request = new Request(new URL('/api/v1/surface-decisions', config.mosHost), {\n        method: 'POST',\n        body,\n        headers: withMosProxyHeaders({\n            'Content-Type': 'application/json',\n            Authorization: `Bearer ${config.mosSecretKey}`,\n        }),\n    })\n\n    let response: Response\n    try {\n        response = await apiFetcher(request)\n    } catch (error) {\n        return { ok: false, reason: 'request-failed', error }\n    }\n\n    let data: unknown\n    try {\n        data = await response.json()\n    } catch (error) {\n        return { ok: false, reason: 'invalid-json', error, status: response.status }\n    }\n\n    if (isSurfaceDecisionError(data)) {\n        return {\n            ok: false,\n            reason: 'api-error',\n            error: new Error(data.message),\n            status: response.status,\n            statusCode: data.statusCode,\n        }\n    }\n\n    if (!response.ok) {\n        return {\n            ok: false,\n            reason: 'http-error',\n            error: new Error(`Surface decisions API returned HTTP ${response.status}`),\n            status: response.status,\n        }\n    }\n\n    if (!isSurfaceDecisionResponse(data)) {\n        return {\n            ok: false,\n            reason: 'invalid-response',\n            error: new Error('Surface decisions API returned an invalid response shape'),\n            status: response.status,\n        }\n    }\n\n    return { ok: true, data }\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> => typeof value === 'object' && value !== null\n\nconst buildIdentity = ({ anonymousIdentifier, userJwt }: Pick<FetchSurfaceDecisionsArgs, 'anonymousIdentifier' | 'userJwt'>) => {\n    if (!anonymousIdentifier && !userJwt) {\n        return { createAnonymousIdentifier: true }\n    }\n    return userJwt ? { userJwt } : { anonymousIdentifier }\n}\n\nconst isSurfaceDecisionError = (value: unknown): value is SurfaceDecisionError =>\n    isRecord(value) && value.status === 'error' && typeof value.message === 'string' && typeof value.statusCode === 'number'\n\nconst isSurfaceDecisionResponse = (value: unknown): value is SurfaceDecisionResponse =>\n    isRecord(value) &&\n    value.status === 'success' &&\n    isRecord(value.identity) &&\n    isRecord(value.features) &&\n    isRecord(value.customer) &&\n    isRecord(value.surfaceBehavior) &&\n    typeof value.componentsSkipped === 'boolean' &&\n    isRecord(value.componentBehaviors)\n"]}
+{"version":3,"file":"fetchSurfaceDecisions.js","sourceRoot":"","sources":["../../src/stages/fetchSurfaceDecisions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AA6B1D,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,qBAAqB,CAC/C,GAAoB,EACpB,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAA6B,EACzG,UAAmB;IAEnB,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IACtB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QACxB,GAAG,cAAc;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ;QACR,QAAQ,EAAE;YACN,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,YAAY;SACrB;QACD,IAAI,EAAE;YACF,GAAG;YACH,SAAS;YACT,WAAW,EAAE;gBACT,MAAM,EAAE,YAAY;aACvB;SACJ;KACJ,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,2BAA2B,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;QAC9E,MAAM,EAAE,MAAM;QACd,IAAI;QACJ,OAAO,EAAE,mBAAmB,CAAC;YACzB,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,MAAM,CAAC,YAAY,EAAE;SACjD,CAAC;KACL,CAAC,CAAA;IAEF,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACD,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAA;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAA;IACzD,CAAC;IAED,IAAI,IAAa,CAAA;IACjB,IAAI,CAAC;QACD,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAA;IAChF,CAAC;IAED,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO;YACH,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;YAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC9B,CAAA;IACL,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACf,OAAO;YACH,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC1E,MAAM,EAAE,QAAQ,CAAC,MAAM;SAC1B,CAAA;IACL,CAAC;IAED,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO;YACH,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kBAAkB;YAC1B,KAAK,EAAE,IAAI,KAAK,CAAC,0DAA0D,CAAC;YAC5E,MAAM,EAAE,QAAQ,CAAC,MAAM;SAC1B,CAAA;IACL,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AAC7B,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAA;AAElH,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAiC,EAAE,CAC7E,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAA;AAE5H,MAAM,yBAAyB,GAAG,CAAC,KAAc,EAAoC,EAAE,CACnF,QAAQ,CAAC,KAAK,CAAC;IACf,KAAK,CAAC,MAAM,KAAK,SAAS;IAC1B,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC;IAC/B,OAAO,KAAK,CAAC,iBAAiB,KAAK,SAAS;IAC5C,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA","sourcesContent":["import type { Fetcher } from '../adapters/Fetcher'\nimport type { Identity } from '../adapters/IdentityProvider'\nimport { withMosProxyHeaders } from '../apiRequestHeaders'\nimport type { PipelineContext } from '../context'\nimport type { PageMetadata, SurfaceDecisionError, SurfaceDecisionResponse } from '../types'\n\nexport type FetchSurfaceDecisionsArgs = {\n    identity: Identity\n    path: string\n    url: string\n    clientMetadata: Record<string, unknown>\n    pageMetadata?: PageMetadata\n    userAgent?: string | undefined\n    originStatus: number\n}\n\nexport type FetchSurfaceDecisionsFailureReason = 'request-failed' | 'invalid-json' | 'api-error' | 'http-error' | 'invalid-response'\n\nexport type FetchSurfaceDecisionsResult =\n    | {\n          ok: true\n          data: SurfaceDecisionResponse\n      }\n    | {\n          ok: false\n          reason: FetchSurfaceDecisionsFailureReason\n          error: unknown\n          status?: number\n          statusCode?: number\n      }\n\nexport default async function fetchSurfaceDecisions(\n    ctx: PipelineContext,\n    { identity, path, url, clientMetadata, pageMetadata, userAgent, originStatus }: FetchSurfaceDecisionsArgs,\n    apiFetcher: Fetcher,\n): Promise<FetchSurfaceDecisionsResult> {\n    const { config } = ctx\n    const body = JSON.stringify({\n        ...clientMetadata,\n        surfaceSlug: config.surfaceSlug,\n        identity,\n        resource: {\n            id: path,\n            meta: pageMetadata,\n        },\n        http: {\n            url,\n            userAgent,\n            proxyOrigin: {\n                status: originStatus,\n            },\n        },\n    })\n\n    const request = new Request(new URL('/api/v1/surface-decisions', config.mosHost), {\n        method: 'POST',\n        body,\n        headers: withMosProxyHeaders({\n            'Content-Type': 'application/json',\n            Authorization: `Bearer ${config.mosSecretKey}`,\n        }),\n    })\n\n    let response: Response\n    try {\n        response = await apiFetcher(request)\n    } catch (error) {\n        return { ok: false, reason: 'request-failed', error }\n    }\n\n    let data: unknown\n    try {\n        data = await response.json()\n    } catch (error) {\n        return { ok: false, reason: 'invalid-json', error, status: response.status }\n    }\n\n    if (isSurfaceDecisionError(data)) {\n        return {\n            ok: false,\n            reason: 'api-error',\n            error: new Error(data.message),\n            status: response.status,\n            statusCode: data.statusCode,\n        }\n    }\n\n    if (!response.ok) {\n        return {\n            ok: false,\n            reason: 'http-error',\n            error: new Error(`Surface decisions API returned HTTP ${response.status}`),\n            status: response.status,\n        }\n    }\n\n    if (!isSurfaceDecisionResponse(data)) {\n        return {\n            ok: false,\n            reason: 'invalid-response',\n            error: new Error('Surface decisions API returned an invalid response shape'),\n            status: response.status,\n        }\n    }\n\n    return { ok: true, data }\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> => typeof value === 'object' && value !== null\n\nconst isSurfaceDecisionError = (value: unknown): value is SurfaceDecisionError =>\n    isRecord(value) && value.status === 'error' && typeof value.message === 'string' && typeof value.statusCode === 'number'\n\nconst isSurfaceDecisionResponse = (value: unknown): value is SurfaceDecisionResponse =>\n    isRecord(value) &&\n    value.status === 'success' &&\n    isRecord(value.identity) &&\n    isRecord(value.features) &&\n    isRecord(value.customer) &&\n    isRecord(value.surfaceBehavior) &&\n    typeof value.componentsSkipped === 'boolean' &&\n    isRecord(value.componentBehaviors)\n"]}

package/dist/stages/surfaceDecisions.d.ts

@@ -1,6 +1,7 @@
 import type { ClientMetadataProvider } from '../adapters/ClientMetadataProvider';
 import type { Fetcher } from '../adapters/Fetcher';
 import type { HtmlRewriterAdapter } from '../adapters/HtmlRewriterAdapter';
+import { type IdentityProvider } from '../adapters/IdentityProvider';
 import type { PipelineContext } from '../context';
 import type { SurfaceDecisionResponse } from '../types';
-export default function getSurfaceDecisions(ctx: PipelineContext, request: Request, response: Response, apiFetcher: Fetcher, rewriter: HtmlRewriterAdapter | null, clientMetadataProvider: ClientMetadataProvider | null): Promise<[Response, SurfaceDecisionResponse | null]>;
+export default function getSurfaceDecisions(ctx: PipelineContext, request: Request, response: Response, apiFetcher: Fetcher, rewriter: HtmlRewriterAdapter | null, clientMetadataProvider: ClientMetadataProvider | null, identityProvider: IdentityProvider | null): Promise<[Response, SurfaceDecisionResponse | null]>;

package/dist/stages/surfaceDecisions.js

@@ -1,16 +1,28 @@
-import { parse, parseSetCookie } from 'cookie';
+import { defaultPersistIdentity, defaultResolveIdentity } from '../adapters/IdentityProvider';
 import fetchSurfaceDecisions from './fetchSurfaceDecisions';
 import { parsePageMetadata } from './pageMetadata';
-export default async function getSurfaceDecisions(ctx, request, response, apiFetcher, rewriter, clientMetadataProvider) {
+export default async function getSurfaceDecisions(ctx, request, response, apiFetcher, rewriter, clientMetadataProvider, identityProvider) {
     const { config, logger } = ctx;
-    const { anonymousIdentifier, userJwt } = getExistingCookies(request, response, config);
+    const resolve = identityProvider?.resolve ?? defaultResolveIdentity;
+    let identity;
+    try {
+        identity = await resolve({ request, originResponse: response, config, logger });
+    }
+    catch (error) {
+        logger.log({
+            level: 'warn',
+            code: 'identity-resolve-failed',
+            message: 'Identity provider resolve threw; skipping surface decisions and returning origin response.',
+            error,
+        });
+        return [response, null];
+    }
     const [metadataStream, passThroughStream] = response.body?.tee() ?? [null, null];
     const pageMetadata = metadataStream && rewriter ? await parsePageMetadata(ctx, new Response(metadataStream, response), rewriter) : {};
     let modifiedResponse = passThroughStream ? new Response(passThroughStream, response) : response;
     const clientMetadata = clientMetadataProvider?.build(request) ?? {};
     const result = await fetchSurfaceDecisions(ctx, {
-        anonymousIdentifier,
-        userJwt,
+        identity,
         path: new URL(request.url).pathname,
         url: request.url,
         clientMetadata,
@@ -33,27 +45,25 @@ export default async function getSurfaceDecisions(ctx, request, response, apiFet
         return [modifiedResponse, null];
     }
     const surfaceDecisions = result.data;
-    if (!anonymousIdentifier && !userJwt && surfaceDecisions?.identity?.identifier) {
-        const headers = new Headers(modifiedResponse.headers);
-        headers.append('Set-Cookie', `${config.anonymousSessionCookieName}=${surfaceDecisions.identity.identifier}; Path=/`);
-        modifiedResponse = new Response(modifiedResponse.body, {
-            status: modifiedResponse.status,
-            statusText: modifiedResponse.statusText,
-            headers,
+    const persist = identityProvider?.persist ?? defaultPersistIdentity;
+    try {
+        modifiedResponse = await persist({
+            resolved: identity,
+            decisions: surfaceDecisions,
+            response: modifiedResponse,
+            request,
+            config,
+            logger,
+        });
+    }
+    catch (error) {
+        logger.log({
+            level: 'warn',
+            code: 'identity-persist-failed',
+            message: 'Identity provider persist threw; keeping pre-persist response.',
+            error,
         });
     }
     return [modifiedResponse, surfaceDecisions];
 }
-const getExistingCookies = (request, originResponse, config) => {
-    const setCookies = originResponse.headers.getSetCookie().map((header) => parseSetCookie(header));
-    const originAnonymousCookie = setCookies.find((s) => s.name === config.anonymousSessionCookieName);
-    const originUserJwtCookie = setCookies.find((s) => s.name === config.authenticatedUserJwtCookieName);
-    if (originAnonymousCookie || originUserJwtCookie) {
-        return { anonymousIdentifier: originAnonymousCookie?.value, userJwt: originUserJwtCookie?.value };
-    }
-    const cookies = parse(request.headers.get('Cookie') || '');
-    const anonymousIdentifier = cookies[config.anonymousSessionCookieName];
-    const userJwt = cookies[config.authenticatedUserJwtCookieName];
-    return { anonymousIdentifier, userJwt };
-};
 //# sourceMappingURL=surfaceDecisions.js.map

package/dist/stages/surfaceDecisions.js.map

@@ -1 +1 @@
-{"version":3,"file":"surfaceDecisions.js","sourceRoot":"","sources":["../../src/stages/surfaceDecisions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAA;AAO9C,OAAO,qBAAqB,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAElD,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,mBAAmB,CAC7C,GAAoB,EACpB,OAAgB,EAChB,QAAkB,EAClB,UAAmB,EACnB,QAAoC,EACpC,sBAAqD;IAErD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IAC9B,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAEtF,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAChF,MAAM,YAAY,GAAG,cAAc,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACrI,IAAI,gBAAgB,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;IAE/F,MAAM,cAAc,GAAG,sBAAsB,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;IAEnE,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACtC,GAAG,EACH;QACI,mBAAmB;QACnB,OAAO;QACP,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ;QACnC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,cAAc;QACd,YAAY;QACZ,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS;QACzD,YAAY,EAAE,QAAQ,CAAC,MAAM;KAChC,EACD,UAAU,CACb,CAAA;IAED,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,CAAC;YACP,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,oEAAoE;YAC7E,OAAO,EAAE;gBACL,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;aAChC;YACD,KAAK,EAAE,MAAM,CAAC,KAAK;SACtB,CAAC,CAAA;QACF,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;IACnC,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAA;IAEpC,IAAI,CAAC,mBAAmB,IAAI,CAAC,OAAO,IAAI,gBAAgB,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QAC7E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAA;QACrD,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,MAAM,CAAC,0BAA0B,IAAI,gBAAgB,CAAC,QAAQ,CAAC,UAAU,UAAU,CAAC,CAAA;QACpH,gBAAgB,GAAG,IAAI,QAAQ,CAAC,gBAAgB,CAAC,IAAI,EAAE;YACnD,MAAM,EAAE,gBAAgB,CAAC,MAAM;YAC/B,UAAU,EAAE,gBAAgB,CAAC,UAAU;YACvC,OAAO;SACV,CAAC,CAAA;IACN,CAAC;IAED,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAA;AAC/C,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,OAAgB,EAAE,cAAwB,EAAE,MAAiB,EAAE,EAAE;IACzF,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAA;IAChG,MAAM,qBAAqB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,0BAA0B,CAAC,CAAA;IAClG,MAAM,mBAAmB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,8BAA8B,CAAC,CAAA;IACpG,IAAI,qBAAqB,IAAI,mBAAmB,EAAE,CAAC;QAC/C,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAA;IACrG,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1D,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAA;IACtE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAA;IAC9D,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAA;AAC3C,CAAC,CAAA","sourcesContent":["import { parse, parseSetCookie } from 'cookie'\nimport type { ClientMetadataProvider } from '../adapters/ClientMetadataProvider'\nimport type { Fetcher } from '../adapters/Fetcher'\nimport type { HtmlRewriterAdapter } from '../adapters/HtmlRewriterAdapter'\nimport type { MOSConfig } from '../config'\nimport type { PipelineContext } from '../context'\nimport type { SurfaceDecisionResponse } from '../types'\nimport fetchSurfaceDecisions from './fetchSurfaceDecisions'\nimport { parsePageMetadata } from './pageMetadata'\n\nexport default async function getSurfaceDecisions(\n    ctx: PipelineContext,\n    request: Request,\n    response: Response,\n    apiFetcher: Fetcher,\n    rewriter: HtmlRewriterAdapter | null,\n    clientMetadataProvider: ClientMetadataProvider | null,\n): Promise<[Response, SurfaceDecisionResponse | null]> {\n    const { config, logger } = ctx\n    const { anonymousIdentifier, userJwt } = getExistingCookies(request, response, config)\n\n    const [metadataStream, passThroughStream] = response.body?.tee() ?? [null, null]\n    const pageMetadata = metadataStream && rewriter ? await parsePageMetadata(ctx, new Response(metadataStream, response), rewriter) : {}\n    let modifiedResponse = passThroughStream ? new Response(passThroughStream, response) : response\n\n    const clientMetadata = clientMetadataProvider?.build(request) ?? {}\n\n    const result = await fetchSurfaceDecisions(\n        ctx,\n        {\n            anonymousIdentifier,\n            userJwt,\n            path: new URL(request.url).pathname,\n            url: request.url,\n            clientMetadata,\n            pageMetadata,\n            userAgent: request.headers.get('User-Agent') ?? undefined,\n            originStatus: response.status,\n        },\n        apiFetcher,\n    )\n\n    if (!result.ok) {\n        logger.log({\n            level: 'warn',\n            code: 'surface-decisions-api-failed',\n            message: 'Surface decisions API failed; continuing with the origin response.',\n            context: {\n                reason: result.reason,\n                status: result.status,\n                statusCode: result.statusCode,\n            },\n            error: result.error,\n        })\n        return [modifiedResponse, null]\n    }\n\n    const surfaceDecisions = result.data\n\n    if (!anonymousIdentifier && !userJwt && surfaceDecisions?.identity?.identifier) {\n        const headers = new Headers(modifiedResponse.headers)\n        headers.append('Set-Cookie', `${config.anonymousSessionCookieName}=${surfaceDecisions.identity.identifier}; Path=/`)\n        modifiedResponse = new Response(modifiedResponse.body, {\n            status: modifiedResponse.status,\n            statusText: modifiedResponse.statusText,\n            headers,\n        })\n    }\n\n    return [modifiedResponse, surfaceDecisions]\n}\n\nconst getExistingCookies = (request: Request, originResponse: Response, config: MOSConfig) => {\n    const setCookies = originResponse.headers.getSetCookie().map((header) => parseSetCookie(header))\n    const originAnonymousCookie = setCookies.find((s) => s.name === config.anonymousSessionCookieName)\n    const originUserJwtCookie = setCookies.find((s) => s.name === config.authenticatedUserJwtCookieName)\n    if (originAnonymousCookie || originUserJwtCookie) {\n        return { anonymousIdentifier: originAnonymousCookie?.value, userJwt: originUserJwtCookie?.value }\n    }\n\n    const cookies = parse(request.headers.get('Cookie') || '')\n    const anonymousIdentifier = cookies[config.anonymousSessionCookieName]\n    const userJwt = cookies[config.authenticatedUserJwtCookieName]\n    return { anonymousIdentifier, userJwt }\n}\n"]}
+{"version":3,"file":"surfaceDecisions.js","sourceRoot":"","sources":["../../src/stages/surfaceDecisions.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAwC,MAAM,8BAA8B,CAAA;AAGnI,OAAO,qBAAqB,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAElD,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,mBAAmB,CAC7C,GAAoB,EACpB,OAAgB,EAChB,QAAkB,EAClB,UAAmB,EACnB,QAAoC,EACpC,sBAAqD,EACrD,gBAAyC;IAEzC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IAE9B,MAAM,OAAO,GAAG,gBAAgB,EAAE,OAAO,IAAI,sBAAsB,CAAA;IACnE,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACD,QAAQ,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACnF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,CAAC;YACP,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,4FAA4F;YACrG,KAAK;SACR,CAAC,CAAA;QACF,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAChF,MAAM,YAAY,GAAG,cAAc,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACrI,IAAI,gBAAgB,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;IAE/F,MAAM,cAAc,GAAG,sBAAsB,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;IAEnE,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACtC,GAAG,EACH;QACI,QAAQ;QACR,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ;QACnC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,cAAc;QACd,YAAY;QACZ,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS;QACzD,YAAY,EAAE,QAAQ,CAAC,MAAM;KAChC,EACD,UAAU,CACb,CAAA;IAED,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,CAAC;YACP,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,oEAAoE;YAC7E,OAAO,EAAE;gBACL,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;aAChC;YACD,KAAK,EAAE,MAAM,CAAC,KAAK;SACtB,CAAC,CAAA;QACF,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;IACnC,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAA;IAEpC,MAAM,OAAO,GAAG,gBAAgB,EAAE,OAAO,IAAI,sBAAsB,CAAA;IACnE,IAAI,CAAC;QACD,gBAAgB,GAAG,MAAM,OAAO,CAAC;YAC7B,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,gBAAgB;YAC3B,QAAQ,EAAE,gBAAgB;YAC1B,OAAO;YACP,MAAM;YACN,MAAM;SACT,CAAC,CAAA;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,CAAC;YACP,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,gEAAgE;YACzE,KAAK;SACR,CAAC,CAAA;IACN,CAAC;IAED,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAA;AAC/C,CAAC","sourcesContent":["import type { ClientMetadataProvider } from '../adapters/ClientMetadataProvider'\nimport type { Fetcher } from '../adapters/Fetcher'\nimport type { HtmlRewriterAdapter } from '../adapters/HtmlRewriterAdapter'\nimport { defaultPersistIdentity, defaultResolveIdentity, type Identity, type IdentityProvider } from '../adapters/IdentityProvider'\nimport type { PipelineContext } from '../context'\nimport type { SurfaceDecisionResponse } from '../types'\nimport fetchSurfaceDecisions from './fetchSurfaceDecisions'\nimport { parsePageMetadata } from './pageMetadata'\n\nexport default async function getSurfaceDecisions(\n    ctx: PipelineContext,\n    request: Request,\n    response: Response,\n    apiFetcher: Fetcher,\n    rewriter: HtmlRewriterAdapter | null,\n    clientMetadataProvider: ClientMetadataProvider | null,\n    identityProvider: IdentityProvider | null,\n): Promise<[Response, SurfaceDecisionResponse | null]> {\n    const { config, logger } = ctx\n\n    const resolve = identityProvider?.resolve ?? defaultResolveIdentity\n    let identity: Identity\n    try {\n        identity = await resolve({ request, originResponse: response, config, logger })\n    } catch (error) {\n        logger.log({\n            level: 'warn',\n            code: 'identity-resolve-failed',\n            message: 'Identity provider resolve threw; skipping surface decisions and returning origin response.',\n            error,\n        })\n        return [response, null]\n    }\n\n    const [metadataStream, passThroughStream] = response.body?.tee() ?? [null, null]\n    const pageMetadata = metadataStream && rewriter ? await parsePageMetadata(ctx, new Response(metadataStream, response), rewriter) : {}\n    let modifiedResponse = passThroughStream ? new Response(passThroughStream, response) : response\n\n    const clientMetadata = clientMetadataProvider?.build(request) ?? {}\n\n    const result = await fetchSurfaceDecisions(\n        ctx,\n        {\n            identity,\n            path: new URL(request.url).pathname,\n            url: request.url,\n            clientMetadata,\n            pageMetadata,\n            userAgent: request.headers.get('User-Agent') ?? undefined,\n            originStatus: response.status,\n        },\n        apiFetcher,\n    )\n\n    if (!result.ok) {\n        logger.log({\n            level: 'warn',\n            code: 'surface-decisions-api-failed',\n            message: 'Surface decisions API failed; continuing with the origin response.',\n            context: {\n                reason: result.reason,\n                status: result.status,\n                statusCode: result.statusCode,\n            },\n            error: result.error,\n        })\n        return [modifiedResponse, null]\n    }\n\n    const surfaceDecisions = result.data\n\n    const persist = identityProvider?.persist ?? defaultPersistIdentity\n    try {\n        modifiedResponse = await persist({\n            resolved: identity,\n            decisions: surfaceDecisions,\n            response: modifiedResponse,\n            request,\n            config,\n            logger,\n        })\n    } catch (error) {\n        logger.log({\n            level: 'warn',\n            code: 'identity-persist-failed',\n            message: 'Identity provider persist threw; keeping pre-persist response.',\n            error,\n        })\n    }\n\n    return [modifiedResponse, surfaceDecisions]\n}\n"]}

package/dist/types.d.ts

@@ -113,4 +113,10 @@ export interface MOSConfigInput {
     surfaceDecisionsIgnorePaths?: string;
     /** Optional headers added to or replacing client headers on every origin request. */
     originRequestHeaders?: Record<string, string>;
+    /**
+     * When true (default), JWT surface-decision requests include `createAnonymousIdentifierFallback: true`
+     * so MonetizationOS can mint an anonymous identifier if JWT authentication fails.
+     * Set to `false` to opt out.
+     */
+    createAnonymousIdentifierFallback?: boolean;
 }

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"","sourcesContent":["export type PageMetadata = Record<string, string>\n\nexport interface FeatureMeterableProperty {\n    type: 'meterable'\n    hasAccess: boolean\n    remainingUnits?: number\n}\n\nexport interface FeatureNumberProperty {\n    type: 'number'\n    value: number\n}\n\nexport interface Feature {\n    featureSlug: string\n    properties: Record<string, FeatureMeterableProperty | FeatureNumberProperty>\n    sideEffects: unknown[]\n}\n\nexport interface SubSurfaceMetadataApi {\n    cssSelector?: string | null\n}\n\nexport type SetHttpResponse = {\n    headers?: Record<string, string>\n    cookies?: string[]\n    status: number\n    statusText?: string\n    body: string | null\n}\n\nexport type ModifyHttpResponse = {\n    addHeaders?: { name: string; value: string }[]\n    removeHeaders?: string[]\n    addCookies?: string[]\n    status?: number\n    statusText?: string\n    body?: string | null\n}\n\nexport type SurfaceBehaviorApi = {\n    http?: ModifyHttpResponse | SetHttpResponse\n    properties?: Record<string, unknown>\n} & Record<string, unknown>\n\nexport type WebComponentElement<T = Record<string, unknown>> = {\n    schema: string\n    props: T\n}\n\nexport type WebElement =\n    | {\n          type: 'html'\n          content: string\n      }\n    | {\n          type: 'text'\n          content: string\n      }\n    | ({\n          type: 'element'\n      } & WebComponentElement)\n    | ({\n          type: 'custom'\n      } & Record<string, unknown>)\n\nexport type WebComponentRangeReplacement = {\n    fromMarker?: string\n    toMarker?: string\n    replaceWith?: WebElement[] | null\n}\n\nexport type WebContentSurfaceBehavior = {\n    before?: WebElement[]\n    prepend?: WebElement[]\n    remove?: boolean\n    replaceRange?: WebComponentRangeReplacement | null\n    append?: WebElement[]\n    after?: WebElement[]\n}\n\nexport type SubSurfaceBehaviorApi = {\n    content?: WebContentSurfaceBehavior\n    properties?: Record<string, unknown>\n    metadata: SubSurfaceMetadataApi\n} & Record<string, unknown>\n\nexport interface SurfaceDecisionResponse {\n    status: 'success'\n    identity: {\n        identifier: string\n        isAuthenticated: boolean\n        authType: string\n        jwtClaims: Record<string, unknown>\n    }\n    features: Record<string, Feature>\n    customer: {\n        hasProducts: boolean\n    }\n    surfaceBehavior: SurfaceBehaviorApi\n    componentsSkipped: boolean\n    componentBehaviors: Record<string, SubSurfaceBehaviorApi>\n}\n\nexport interface SurfaceDecisionError {\n    message: string\n    status: 'error'\n    statusCode: number\n}\n\nexport interface MOSConfigInput {\n    /** Origin website base URL, e.g. `https://news.example.com`. */\n    originUrl: string\n    /** Surface slug identifying the MonetizationOS surface. */\n    surfaceSlug: string\n    /** MonetizationOS API base URL. */\n    mosHost: string\n    /** MonetizationOS secret key; expected format `sk_<env>_<suffix>` */\n    mosSecretKey: string\n    /** Path prefix routed to the MonetizationOS endpoint proxy. Default: `/mos-endpoints/`. */\n    mosEndpointsPrefix?: string\n    /** Cookie name storing the anonymous session id. */\n    anonymousSessionCookieName: string\n    /** Cookie name storing the authenticated user JWT. */\n    authenticatedUserJwtCookieName: string\n    /** Optional script URL injected into the `<head>` of HTML responses. */\n    injectScriptUrl?: string\n    /** Comma-separated regex patterns; matching pathnames skip surface decisions. */\n    surfaceDecisionsIgnorePaths?: string\n    /** Optional headers added to or replacing client headers on every origin request. */\n    originRequestHeaders?: Record<string, string>\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"","sourcesContent":["export type PageMetadata = Record<string, string>\n\nexport interface FeatureMeterableProperty {\n    type: 'meterable'\n    hasAccess: boolean\n    remainingUnits?: number\n}\n\nexport interface FeatureNumberProperty {\n    type: 'number'\n    value: number\n}\n\nexport interface Feature {\n    featureSlug: string\n    properties: Record<string, FeatureMeterableProperty | FeatureNumberProperty>\n    sideEffects: unknown[]\n}\n\nexport interface SubSurfaceMetadataApi {\n    cssSelector?: string | null\n}\n\nexport type SetHttpResponse = {\n    headers?: Record<string, string>\n    cookies?: string[]\n    status: number\n    statusText?: string\n    body: string | null\n}\n\nexport type ModifyHttpResponse = {\n    addHeaders?: { name: string; value: string }[]\n    removeHeaders?: string[]\n    addCookies?: string[]\n    status?: number\n    statusText?: string\n    body?: string | null\n}\n\nexport type SurfaceBehaviorApi = {\n    http?: ModifyHttpResponse | SetHttpResponse\n    properties?: Record<string, unknown>\n} & Record<string, unknown>\n\nexport type WebComponentElement<T = Record<string, unknown>> = {\n    schema: string\n    props: T\n}\n\nexport type WebElement =\n    | {\n          type: 'html'\n          content: string\n      }\n    | {\n          type: 'text'\n          content: string\n      }\n    | ({\n          type: 'element'\n      } & WebComponentElement)\n    | ({\n          type: 'custom'\n      } & Record<string, unknown>)\n\nexport type WebComponentRangeReplacement = {\n    fromMarker?: string\n    toMarker?: string\n    replaceWith?: WebElement[] | null\n}\n\nexport type WebContentSurfaceBehavior = {\n    before?: WebElement[]\n    prepend?: WebElement[]\n    remove?: boolean\n    replaceRange?: WebComponentRangeReplacement | null\n    append?: WebElement[]\n    after?: WebElement[]\n}\n\nexport type SubSurfaceBehaviorApi = {\n    content?: WebContentSurfaceBehavior\n    properties?: Record<string, unknown>\n    metadata: SubSurfaceMetadataApi\n} & Record<string, unknown>\n\nexport interface SurfaceDecisionResponse {\n    status: 'success'\n    identity: {\n        identifier: string\n        isAuthenticated: boolean\n        authType: string\n        jwtClaims: Record<string, unknown>\n    }\n    features: Record<string, Feature>\n    customer: {\n        hasProducts: boolean\n    }\n    surfaceBehavior: SurfaceBehaviorApi\n    componentsSkipped: boolean\n    componentBehaviors: Record<string, SubSurfaceBehaviorApi>\n}\n\nexport interface SurfaceDecisionError {\n    message: string\n    status: 'error'\n    statusCode: number\n}\n\nexport interface MOSConfigInput {\n    /** Origin website base URL, e.g. `https://news.example.com`. */\n    originUrl: string\n    /** Surface slug identifying the MonetizationOS surface. */\n    surfaceSlug: string\n    /** MonetizationOS API base URL. */\n    mosHost: string\n    /** MonetizationOS secret key; expected format `sk_<env>_<suffix>` */\n    mosSecretKey: string\n    /** Path prefix routed to the MonetizationOS endpoint proxy. Default: `/mos-endpoints/`. */\n    mosEndpointsPrefix?: string\n    /** Cookie name storing the anonymous session id. */\n    anonymousSessionCookieName: string\n    /** Cookie name storing the authenticated user JWT. */\n    authenticatedUserJwtCookieName: string\n    /** Optional script URL injected into the `<head>` of HTML responses. */\n    injectScriptUrl?: string\n    /** Comma-separated regex patterns; matching pathnames skip surface decisions. */\n    surfaceDecisionsIgnorePaths?: string\n    /** Optional headers added to or replacing client headers on every origin request. */\n    originRequestHeaders?: Record<string, string>\n    /**\n     * When true (default), JWT surface-decision requests include `createAnonymousIdentifierFallback: true`\n     * so MonetizationOS can mint an anonymous identifier if JWT authentication fails.\n     * Set to `false` to opt out.\n     */\n    createAnonymousIdentifierFallback?: boolean\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@monetizationos/proxy",
-  "version": "1.0.3",
+  "version": "1.2.0",
   "description": "Platform-agnostic MonetizationOS proxy core",
   "license": "MIT",
   "type": "module",