@mrrocket/sdk 0.11.0 → 0.12.0

package/dist/core.d.ts

@@ -5,7 +5,7 @@
 import type { CancelFlowConfig, OnboardingFlow } from "./flows.js";
 export type VariantId = string;
 /** This build of the SDK. Sent with the config request so MRRocket knows what the site runs (error tracking, flags). */
-export declare const SDK_VERSION = "0.11.0";
+export declare const SDK_VERSION = "0.12.0";
 /** One variant of an experiment. `changes` replaces texts that the page marks with `<Text id>`. */
 export interface VariantConfig {
     id: VariantId;

package/dist/core.js

@@ -1,5 +1,5 @@
 // src/core.ts
-var SDK_VERSION = "0.11.0";
+var SDK_VERSION = "0.12.0";
 var propOf = (person, name) => {
   const want = name.trim().toLowerCase();
   for (const [k, v] of Object.entries(person)) if (k.toLowerCase() === want) return v;

package/dist/core.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/core.ts"],"sourcesContent":["/**\n * The part of the SDK that runs anywhere: experiment config, variant assignment, preview links and event shapes.\n * No React, no browser APIs, so the server helper, the proxy helper and the client share it.\n */\nimport type { CancelFlowConfig, OnboardingFlow } from \"./flows\";\n\nexport type VariantId = string;\n\n/** This build of the SDK. Sent with the config request so MRRocket knows what the site runs (error tracking, flags). */\nexport const SDK_VERSION = \"0.11.0\";\n\n/** One variant of an experiment. `changes` replaces texts that the page marks with `<Text id>`. */\nexport interface VariantConfig {\n    id: VariantId;\n    /** Share of traffic, 0 to 1. The weights of an experiment add up to 1. */\n    weight: number;\n    changes?: Record<string, string>;\n    /**\n     * A redirect test: where this variant sends the visitor instead of the test's page (a path like \"/pricing-b\" or a\n     * full address). Control has none and stays. SDK 0.7.0+.\n     */\n    url?: string;\n}\n\nexport interface ExperimentConfig {\n    /** The experiment's key, the same as in Cockpit. */\n    key: string;\n    status: \"running\" | \"draft\" | \"stopped\";\n    /** Control first. */\n    variants: VariantConfig[];\n    /** A winner that shipped: everyone gets it, and nobody is assigned anymore. */\n    winner?: VariantId;\n    /** A redirect test: the path of the page it runs on (\"/pricing\"). Visitors there are sent to their variant's `url`. */\n    path?: string;\n}\n\n/** A page redirect set in MRRocket (Conversion › Landing pages › Redirect): everyone on `from` goes to `to`. SDK 0.7.0+. */\nexport interface RedirectConfig {\n    /** A path of the site, like \"/old-pricing\". */\n    from: string;\n    /** A path or a full address. */\n    to: string;\n}\n\nexport interface CockpitConfig {\n    /** The product the public key belongs to. */\n    project: string;\n    experiments: ExperimentConfig[];\n    /** The product's affiliate program: how many days a partner's referral is kept. Missing without a program. */\n    referral?: { cookieDays: number };\n    /** Session recordings: present only while the product records (Cockpit › Sessions). See `ReplayConfig`. */\n    replay?: ReplayConfig;\n    /** Feature flags of the product in Production (MRRocket › Build › Feature flags), evaluated by `useFlag` and `getFlag`. */\n    flags?: FlagConfig[];\n    /**\n     * Published copy for texts the site marks (`<Text id>`, `data-ck-text`): a landing page's headline, subheadline and\n     * button (`pricing.headline` …) and a paywall's (`paywall.<placement>.headline` …) as published in MRRocket. A\n     * running test's variant changes them on top. Missing when nothing is published. SDK 0.5.0+.\n     */\n    texts?: Record<string, string>;\n    /** The product's live cancel flow (MRRocket › Churn › Cancel flow), for `cancelFlow.open()`. SDK 0.7.0+. */\n    cancelFlow?: CancelFlowConfig;\n    /** The in-app steps of live onboarding flows (tours, checklists, modals). SDK 0.7.0+. */\n    onboarding?: OnboardingFlow[];\n    /** A live Lifecycle journey has in-app messages: signed-in people ask `/api/sdk/inapp` for theirs. SDK 0.7.0+. */\n    messages?: boolean;\n    /** Page redirects set in MRRocket; the SDK sends visitors on before the page shows (`redirectFor`). SDK 0.7.0+. */\n    redirects?: RedirectConfig[];\n}\n\n/** One condition of a flag's audience, on a property of the person (`identify(id, props)`), the id or the page. */\nexport interface FlagCondition {\n    /** \"Email\", \"Plan\", \"Country\", \"id\", \"path\" … Matched against the person's properties without regard to case. */\n    property: string;\n    op: \"is\" | \"is not\" | \"in\" | \"not in\" | \"≥\" | \"in cohort\";\n    values: string[];\n}\n\n/** Users who match every condition, of whom `rollout` percent get the flag. No conditions: everyone. */\nexport interface FlagConditionSet {\n    conditions: FlagCondition[];\n    /** 0 to 100. */\n    rollout: number;\n}\n\nexport interface FlagConfig {\n    key: string;\n    /** Off: everyone gets the off side. */\n    on: boolean;\n    /** The first set a person matches decides; none matched: off. */\n    sets: FlagConditionSet[];\n    /** Multivariate flags: the variants and their split in percent (control included). Missing for an on/off flag. */\n    variants?: { key: string; split: number; payload?: string }[];\n}\n\n/** What a person is for flag conditions: their properties from identify(), their id and the page they are on. */\nexport type FlagPerson = Record<string, unknown>;\n\nconst propOf = (person: FlagPerson, name: string) => {\n    const want = name.trim().toLowerCase();\n    for (const [k, v] of Object.entries(person)) if (k.toLowerCase() === want) return v;\n    return undefined;\n};\n\n/** `\"@acme.com\"` matches every address at that domain; anything else matches the whole value, without regard to case. */\nconst same = (actual: string, value: string) => {\n    const a = actual.trim().toLowerCase();\n    const v = value.trim().toLowerCase();\n    return v.startsWith(\"@\") ? a.endsWith(v) : a === v;\n};\n\nconst matchesCondition = (c: FlagCondition, person: FlagPerson) => {\n    // Cohorts live in MRRocket; a browser cannot know them, so a cohort condition never matches here.\n    if (c.op === \"in cohort\") return false;\n    const raw = propOf(person, c.property);\n    const actual = raw === undefined || raw === null ? \"\" : String(raw);\n    if (c.op === \"≥\") {\n        const a = Number(actual);\n        const b = Number(c.values[0]);\n        return actual !== \"\" && Number.isFinite(a) && Number.isFinite(b) && a >= b;\n    }\n    const hit = actual !== \"\" && c.values.some((v) => same(actual, v));\n    return c.op === \"is\" || c.op === \"in\" ? hit : !hit;\n};\n\n/**\n * The flag for one person: `false` (off), `true` (on, an on/off flag) or the variant's key (a multivariate flag). The\n * bucket is a stable hash of flag and person, so a person keeps their side as the rollout grows.\n */\nexport const evaluateFlag = (flag: FlagConfig, distinctId: string, person: FlagPerson = {}): boolean | string => {\n    if (!flag.on) return false;\n    const subject = { id: distinctId, ...person };\n    const set = flag.sets.length ? flag.sets.find((s) => s.conditions.every((c) => matchesCondition(c, subject))) : { conditions: [], rollout: 100 };\n    if (!set) return false;\n    if (flagUnit(`${flag.key}:rollout:${distinctId}`) * 100 >= set.rollout) return false;\n    if (!flag.variants?.length) return true;\n    const u = flagUnit(`${flag.key}:variant:${distinctId}`) * 100;\n    let acc = 0;\n    for (const v of flag.variants) {\n        acc += v.split;\n        if (u < acc) return v.key;\n    }\n    return flag.variants[flag.variants.length - 1].key;\n};\n\n/** A flag of the config for this person; an unknown flag (or no config) is off. */\nexport const flagFor = (key: string, config: CockpitConfig | null, distinctId: string, person: FlagPerson = {}) => {\n    const flag = config?.flags?.find((f) => f.key === key);\n    return flag ? evaluateFlag(flag, distinctId, person) : false;\n};\n\n/** One JavaScript error as it goes over the wire to `POST /api/sdk/errors`. */\nexport interface ErrorReport {\n    /** \"TypeError\", \"Error\" … */\n    type: string;\n    message: string;\n    /** The raw stack, at most 8 KB. MRRocket parses it into frames. */\n    stack?: string;\n    /** \"onerror\" (uncaught), \"onunhandledrejection\" (a rejected promise nobody caught) or \"manual\" (captureError). */\n    mechanism: \"onerror\" | \"onunhandledrejection\" | \"manual\";\n    handled: boolean;\n    url: string;\n    ts: number;\n    /** What happened just before: pages and clicks, newest last, at most 20. */\n    crumbs?: { ts: number; type: \"navigation\" | \"click\" | \"lifecycle\"; message: string }[];\n    /** Your release (a version or commit), from the provider's `release` prop. */\n    release?: string;\n    distinctId?: string;\n    sessionId?: string;\n}\n\n/**\n * Session recordings of a product, from the config. Recording also needs the visitor's own replay consent\n * (`<CockpitProvider replay>` or `setConsent({ replay: true })`); without it nothing is recorded or buffered.\n */\nexport interface ReplayConfig {\n    /**\n     * Share of sessions uploaded from their start, 0 to 1 (default 0.1). The others keep only the last minute in\n     * memory and upload it when something goes wrong: a JS error, a rage click, a `purchase…` or `checkout…` event.\n     */\n    sampleRate: number;\n}\n\n/**\n * What the SDK may send and store.\n * - \"cookieless\" (default): no cookie, no localStorage. Events go without a visitor id; the server counts visitors\n *   with a hash of key, date, IP and user agent that changes every day.\n * - \"cookies\": a persistent `ck_id` cookie identifies the visitor across visits, `ck_sid` holds the session.\n * - \"off\": nothing is sent and nothing is stored.\n */\nexport type ConsentMode = \"cookieless\" | \"cookies\" | \"off\";\n\n/**\n * What `setConsent` takes: a mode as before, or the parts to change. `replay` is the separate consent for session\n * recordings (default false); it applies only while analytics is not \"off\".\n *\n *     setConsent(\"cookies\");\n *     setConsent({ replay: true });\n *     setConsent({ analytics: \"cookieless\", replay: false });\n */\nexport type ConsentChoice = ConsentMode | { analytics?: ConsentMode; replay?: boolean };\n\n/** The campaign parameters the SDK reads from the landing URL. */\nexport const UTM_KEYS = [\"utm_source\", \"utm_medium\", \"utm_campaign\", \"utm_term\", \"utm_content\"] as const;\nexport type UtmKey = (typeof UTM_KEYS)[number];\n\n/** One event as it goes over the wire to `POST /api/sdk/events`. */\nexport interface CockpitEvent {\n    event: string;\n    /** The visitor. Missing in \"cookieless\" mode until identify(): the server then uses its daily visitor hash. */\n    distinctId?: string;\n    /** Ends after 30 minutes without an event. */\n    sessionId?: string;\n    props?: Record<string, unknown>;\n    /** Milliseconds since the epoch. */\n    ts: number;\n    url?: string;\n    /** `document.referrer` on the first page of a page load, the previous in-app URL after client-side navigation. */\n    referrer?: string;\n    utm_source?: string;\n    utm_medium?: string;\n    utm_campaign?: string;\n    utm_term?: string;\n    utm_content?: string;\n    /** The screen size in CSS pixels (points on a phone). */\n    screen?: { w: number; h: number };\n    /** The app that sent it (React Native only): MRRocket stores it with the event and fills OS and device from it. */\n    app?: AppContext;\n}\n\n/** Where a React Native event comes from. Every field is optional except the platform; nothing identifies the person. */\nexport interface AppContext {\n    /** \"ios\" or \"android\" (React Native's `Platform.OS`). */\n    platform: string;\n    /** The app's version, like \"1.4.0\" (`expo-application`'s `nativeApplicationVersion`). */\n    appVersion?: string;\n    /** The build number, like \"42\". */\n    build?: string;\n    /** The OS version, like \"17.4\". */\n    osVersion?: string;\n    /** The device model, like \"iPhone 15 Pro\" (`expo-device`). */\n    deviceModel?: string;\n    /** \"phone\", \"tablet\", \"desktop\" or \"tv\" when `expo-device` knows it. */\n    deviceType?: string;\n    /** The first preferred locale, like \"de-DE\". */\n    locale?: string;\n}\n\n/** The query parameter that forces variants, for previews in Cockpit: `?ck_preview=pricing-annual:a,home-hero:control`. */\nexport const PREVIEW_PARAM = \"ck_preview\";\n/** Set when Cockpit embeds the page: nothing is tracked, so previews never count as visits. */\nexport const EMBED_PARAM = \"ck_embed\";\n/** The cookie that keeps a visitor in the same variant across visits. Only written in \"cookies\" mode. */\nexport const ID_COOKIE = \"ck_id\";\n/** The cookie that holds the session id in \"cookies\" mode. */\nexport const SESSION_COOKIE = \"ck_sid\";\n/** A session ends after this long without an event. */\nexport const SESSION_TIMEOUT_MS = 30 * 60 * 1000;\n\n/** The UTM parameters from a parameter lookup (`URLSearchParams.get` in a browser). Empty values are left out. */\nexport const utmFrom = (get: (name: string) => string | null | undefined): Partial<Record<UtmKey, string>> => {\n    const out: Partial<Record<UtmKey, string>> = {};\n    for (const key of UTM_KEYS) {\n        const value = get(key)?.trim();\n        if (value) out[key] = value.slice(0, 150);\n    }\n    return out;\n};\n\n/** The UTM parameters of a query string, like `\"?utm_source=x\"`. Empty values are left out. */\nexport const readUtm = (search: string): Partial<Record<UtmKey, string>> => {\n    const params = new URLSearchParams(search);\n    return utmFrom((k) => params.get(k));\n};\n\n/**\n * The query parameters of a URL or query string, without `URLSearchParams` (React Native's is incomplete): `+` is a\n * space, values are percent-decoded, the first of a repeated name wins.\n */\nexport const parseQuery = (url: string): Record<string, string> => {\n    const out: Record<string, string> = {};\n    const q = url.split(\"#\")[0];\n    const at = q.indexOf(\"?\");\n    if (at < 0) return out;\n    const dec = (s: string) => {\n        try {\n            return decodeURIComponent(s.replace(/\\+/g, \" \"));\n        } catch {\n            return s;\n        }\n    };\n    for (const pair of q.slice(at + 1).split(\"&\")) {\n        if (!pair) continue;\n        const eq = pair.indexOf(\"=\");\n        const k = dec(eq < 0 ? pair : pair.slice(0, eq));\n        if (k && !(k in out)) out[k] = eq < 0 ? \"\" : dec(pair.slice(eq + 1));\n    }\n    return out;\n};\n\n/** FNV-1a, 32 bit, mapped to [0, 1). Stable across server and browser. */\nexport const hashUnit = (input: string) => {\n    let h = 0x811c9dc5;\n    for (let i = 0; i < input.length; i++) {\n        h ^= input.charCodeAt(i);\n        h = Math.imul(h, 0x01000193);\n    }\n    return (h >>> 0) / 4294967296;\n};\n\n/**\n * FNV-1a with murmur3's finalizer, mapped to [0, 1): ids that differ only at the end (\"user-1\", \"user-2\") still spread\n * evenly, so a 30 % rollout reaches about 30 % of people. Flags only; experiments keep `hashUnit` so nobody switches.\n */\nexport const flagUnit = (input: string) => {\n    let h = 0x811c9dc5;\n    for (let i = 0; i < input.length; i++) {\n        h ^= input.charCodeAt(i);\n        h = Math.imul(h, 0x01000193);\n    }\n    h ^= h >>> 16;\n    h = Math.imul(h, 0x85ebca6b);\n    h ^= h >>> 13;\n    h = Math.imul(h, 0xc2b2ae35);\n    h ^= h >>> 16;\n    return (h >>> 0) / 4294967296;\n};\n\n/** The variant a visitor sees: a shipped winner, control while the experiment does not run, else a stable bucket by visitor. */\nexport const assign = (experiment: ExperimentConfig, distinctId: string): VariantId => {\n    const control = experiment.variants[0]?.id ?? \"control\";\n    if (experiment.winner) return experiment.winner;\n    if (experiment.status !== \"running\") return control;\n    const u = hashUnit(`${experiment.key}:${distinctId}`);\n    let acc = 0;\n    for (const v of experiment.variants) {\n        acc += v.weight;\n        if (u < acc) return v.id;\n    }\n    return experiment.variants[experiment.variants.length - 1]?.id ?? control;\n};\n\n/** `\"a:b,c:d\"` → `{ a: \"b\", c: \"d\" }`. Ignores anything malformed. */\nexport const parsePreview = (value: string | string[] | null | undefined): Record<string, VariantId> => {\n    const raw = Array.isArray(value) ? value[0] : value;\n    if (!raw) return {};\n    const out: Record<string, VariantId> = {};\n    for (const pair of raw.split(\",\")) {\n        const [key, variant] = pair.split(\":\");\n        if (key && variant) out[key.trim()] = variant.trim();\n    }\n    return out;\n};\n\n/** A link that shows one variant of a page, for example in Cockpit's preview frames. */\nexport const previewHref = (url: string, forced: Record<string, VariantId>, embed = true) => {\n    const [path, query = \"\"] = url.split(\"?\");\n    const params = new URLSearchParams(query);\n    const value = Object.entries(forced)\n        .map(([k, v]) => `${k}:${v}`)\n        .join(\",\");\n    if (value) params.set(PREVIEW_PARAM, value);\n    if (embed) params.set(EMBED_PARAM, \"1\");\n    return `${path}?${params.toString()}`;\n};\n\n/** The variant for one experiment, from a forced preview first, then the config. Unknown experiments get control. */\n/** The experiments whose variants change the text `id`: showing that text is an exposure to them. */\nexport const experimentsOfText = (config: CockpitConfig | null, id: string) =>\n    (config?.experiments ?? []).filter((e) => e.variants.some((v) => v.changes && id in v.changes)).map((e) => e.key);\n\nexport const resolveVariant = (key: string, config: CockpitConfig | null, distinctId: string, preview: Record<string, VariantId>): VariantId => {\n    if (preview[key]) return preview[key];\n    const experiment = config?.experiments.find((e) => e.key === key);\n    return experiment ? assign(experiment, distinctId) : \"control\";\n};\n\n/**\n * Every text change that applies to this visitor: the published texts first, then each experiment's in config order.\n * Control keeps the published (or the page's own) words, so only a non-control variant (assigned, forced in a preview,\n * or a shipped winner) changes them further.\n */\nexport const textChanges = (config: CockpitConfig | null, distinctId: string, preview: Record<string, VariantId>) => {\n    const out: Record<string, string> = { ...(config?.texts ?? {}) };\n    for (const experiment of config?.experiments ?? []) {\n        const id = resolveVariant(experiment.key, config, distinctId, preview);\n        if (id === (experiment.variants[0]?.id ?? \"control\")) continue;\n        Object.assign(out, experiment.variants.find((v) => v.id === id)?.changes ?? {});\n    }\n    return out;\n};\n\n/**\n * The query parameter a redirect test adds to the variant's address (`ck_x=<test>:<variant>`): the page there records\n * the exposure and takes it out of the address bar. It also keeps that page from redirecting again.\n */\nexport const EXPOSURE_PARAM = \"ck_x\";\n\n/** What `redirectFor` decided: go to `to`, and/or the redirect test this page belongs to and the visitor's variant. */\nexport interface RedirectDecision {\n    /** Where to send the visitor now. Missing for control, which stays on the page. */\n    to?: string;\n    /** The redirect test, while it runs: record `$exposure` for it (on this page for control, on `to` otherwise). */\n    experiment?: string;\n    variant?: VariantId;\n}\n\nconst pathOf = (p: string) => p.replace(/\\/+$/, \"\") || \"/\";\n\n/**\n * Where a page sends the visitor, before it shows: a page redirect set in MRRocket first, else a redirect test that runs\n * on this path (the visitor's variant, by the same stable assignment as every test). Null when nothing applies.\n *\n * - The new address keeps the page's query (UTM parameters) and its hash; a running test adds `ck_x=<test>:<variant>`,\n *   so the page it lands on records the exposure (and never redirects again).\n * - `distinctId` null (no stable id, as on a server without the `ck_id` cookie): running tests are left to the browser,\n *   page redirects and shipped winners still apply.\n * - A redirect to the page itself is ignored.\n */\nexport const redirectFor = (config: CockpitConfig | null, href: string, distinctId: string | null, preview: Record<string, VariantId> = {}): RedirectDecision | null => {\n    if (!config) return null;\n    let here: URL;\n    try {\n        here = new URL(href);\n    } catch {\n        return null;\n    }\n    if (here.searchParams.has(EXPOSURE_PARAM)) return null;\n    const path = pathOf(here.pathname);\n    const go = (to: string, mark?: string) => {\n        let t: URL;\n        try {\n            t = new URL(to, here);\n        } catch {\n            return undefined;\n        }\n        if (!/^https?:$/.test(t.protocol) || (t.origin === here.origin && pathOf(t.pathname) === path)) return undefined;\n        here.searchParams.forEach((v, k) => {\n            if (!t.searchParams.has(k)) t.searchParams.set(k, v);\n        });\n        if (mark) t.searchParams.set(EXPOSURE_PARAM, mark);\n        if (!t.hash) t.hash = here.hash;\n        return t.href;\n    };\n    for (const r of config.redirects ?? []) {\n        const to = r.from && pathOf(r.from) === path ? go(r.to) : undefined;\n        if (to) return { to };\n    }\n    for (const e of config.experiments) {\n        if (!e.path || pathOf(e.path) !== path) continue;\n        const running = e.status === \"running\" && !e.winner;\n        if (running && distinctId === null && !preview[e.key]) return null;\n        const variant = resolveVariant(e.key, config, distinctId ?? \"\", preview);\n        const url = e.variants.find((v) => v.id === variant)?.url;\n        const to = url ? go(url, running ? `${e.key}:${variant}` : undefined) : undefined;\n        return running ? { to, experiment: e.key, variant } : to ? { to } : null;\n    }\n    return null;\n};\n\n/** The test and variant a redirect test's `ck_x` names, when the config has them; null otherwise. */\nexport const exposureFrom = (config: CockpitConfig | null, value: string | null | undefined) => {\n    const [key, variant] = (value ?? \"\").split(\":\");\n    const e = config?.experiments.find((x) => x.key === key);\n    return e && e.variants.some((v) => v.id === variant) ? { experiment: key, variant } : null;\n};\n\n/**\n * The MRRocket API host from `NEXT_PUBLIC_MRROCKET_HOST`. Written as a literal property access on purpose: Next.js\n * inlines `process.env.NEXT_PUBLIC_*` at build time, in the browser bundle and in the server bundle (also on\n * Cloudflare Workers), and only replaces the literal form. Without a bundler (or a `process`) it is undefined.\n */\nexport const envHost = (): string | undefined => {\n    try {\n        return process.env.NEXT_PUBLIC_MRROCKET_HOST || undefined;\n    } catch {\n        return undefined;\n    }\n};\n\n/** The public key from `NEXT_PUBLIC_MRROCKET_KEY`, the default for the `apiKey` prop. Same literal-access rule as `envHost`. */\nexport const envKey = (): string | undefined => {\n    try {\n        return process.env.NEXT_PUBLIC_MRROCKET_KEY || undefined;\n    } catch {\n        return undefined;\n    }\n};\n\n/**\n * Where the API lives: the `host` prop, else `NEXT_PUBLIC_MRROCKET_HOST`, else \"\" (the page's own origin, which is how\n * MRRocket's own demo pages call it). Without a trailing slash.\n */\nexport const resolveHost = (host?: string) => (host ?? envHost() ?? \"\").trim().replace(/\\/+$/, \"\");\n\n/** A random visitor id. */\nexport const newDistinctId = () =>\n    typeof crypto !== \"undefined\" && \"randomUUID\" in crypto ? crypto.randomUUID() : `ck_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`;\n"],"mappings":";AASO,IAAM,cAAc;AAyF3B,IAAM,SAAS,CAAC,QAAoB,SAAiB;AACjD,QAAM,OAAO,KAAK,KAAK,EAAE,YAAY;AACrC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,EAAG,KAAI,EAAE,YAAY,MAAM,KAAM,QAAO;AAClF,SAAO;AACX;AAGA,IAAM,OAAO,CAAC,QAAgB,UAAkB;AAC5C,QAAM,IAAI,OAAO,KAAK,EAAE,YAAY;AACpC,QAAM,IAAI,MAAM,KAAK,EAAE,YAAY;AACnC,SAAO,EAAE,WAAW,GAAG,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM;AACrD;AAEA,IAAM,mBAAmB,CAAC,GAAkB,WAAuB;AAE/D,MAAI,EAAE,OAAO,YAAa,QAAO;AACjC,QAAM,MAAM,OAAO,QAAQ,EAAE,QAAQ;AACrC,QAAM,SAAS,QAAQ,UAAa,QAAQ,OAAO,KAAK,OAAO,GAAG;AAClE,MAAI,EAAE,OAAO,UAAK;AACd,UAAM,IAAI,OAAO,MAAM;AACvB,UAAM,IAAI,OAAO,EAAE,OAAO,CAAC,CAAC;AAC5B,WAAO,WAAW,MAAM,OAAO,SAAS,CAAC,KAAK,OAAO,SAAS,CAAC,KAAK,KAAK;AAAA,EAC7E;AACA,QAAM,MAAM,WAAW,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;AACjE,SAAO,EAAE,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,CAAC;AACnD;AAMO,IAAM,eAAe,CAAC,MAAkB,YAAoB,SAAqB,CAAC,MAAwB;AAC7G,MAAI,CAAC,KAAK,GAAI,QAAO;AACrB,QAAM,UAAU,EAAE,IAAI,YAAY,GAAG,OAAO;AAC5C,QAAM,MAAM,KAAK,KAAK,SAAS,KAAK,KAAK,KAAK,CAAC,MAAM,EAAE,WAAW,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,GAAG,SAAS,IAAI;AAC/I,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI,SAAS,GAAG,KAAK,GAAG,YAAY,UAAU,EAAE,IAAI,OAAO,IAAI,QAAS,QAAO;AAC/E,MAAI,CAAC,KAAK,UAAU,OAAQ,QAAO;AACnC,QAAM,IAAI,SAAS,GAAG,KAAK,GAAG,YAAY,UAAU,EAAE,IAAI;AAC1D,MAAI,MAAM;AACV,aAAW,KAAK,KAAK,UAAU;AAC3B,WAAO,EAAE;AACT,QAAI,IAAI,IAAK,QAAO,EAAE;AAAA,EAC1B;AACA,SAAO,KAAK,SAAS,KAAK,SAAS,SAAS,CAAC,EAAE;AACnD;AAGO,IAAM,UAAU,CAAC,KAAa,QAA8B,YAAoB,SAAqB,CAAC,MAAM;AAC/G,QAAM,OAAO,QAAQ,OAAO,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AACrD,SAAO,OAAO,aAAa,MAAM,YAAY,MAAM,IAAI;AAC3D;AAsDO,IAAM,WAAW,CAAC,cAAc,cAAc,gBAAgB,YAAY,aAAa;AA8CvF,IAAM,gBAAgB;AAEtB,IAAM,cAAc;AAEpB,IAAM,YAAY;AAElB,IAAM,iBAAiB;AAEvB,IAAM,qBAAqB,KAAK,KAAK;AAGrC,IAAM,UAAU,CAAC,QAAsF;AAC1G,QAAM,MAAuC,CAAC;AAC9C,aAAW,OAAO,UAAU;AACxB,UAAM,QAAQ,IAAI,GAAG,GAAG,KAAK;AAC7B,QAAI,MAAO,KAAI,GAAG,IAAI,MAAM,MAAM,GAAG,GAAG;AAAA,EAC5C;AACA,SAAO;AACX;AAGO,IAAM,UAAU,CAAC,WAAoD;AACxE,QAAM,SAAS,IAAI,gBAAgB,MAAM;AACzC,SAAO,QAAQ,CAAC,MAAM,OAAO,IAAI,CAAC,CAAC;AACvC;AAMO,IAAM,aAAa,CAAC,QAAwC;AAC/D,QAAM,MAA8B,CAAC;AACrC,QAAM,IAAI,IAAI,MAAM,GAAG,EAAE,CAAC;AAC1B,QAAM,KAAK,EAAE,QAAQ,GAAG;AACxB,MAAI,KAAK,EAAG,QAAO;AACnB,QAAM,MAAM,CAAC,MAAc;AACvB,QAAI;AACA,aAAO,mBAAmB,EAAE,QAAQ,OAAO,GAAG,CAAC;AAAA,IACnD,QAAQ;AACJ,aAAO;AAAA,IACX;AAAA,EACJ;AACA,aAAW,QAAQ,EAAE,MAAM,KAAK,CAAC,EAAE,MAAM,GAAG,GAAG;AAC3C,QAAI,CAAC,KAAM;AACX,UAAM,KAAK,KAAK,QAAQ,GAAG;AAC3B,UAAM,IAAI,IAAI,KAAK,IAAI,OAAO,KAAK,MAAM,GAAG,EAAE,CAAC;AAC/C,QAAI,KAAK,EAAE,KAAK,KAAM,KAAI,CAAC,IAAI,KAAK,IAAI,KAAK,IAAI,KAAK,MAAM,KAAK,CAAC,CAAC;AAAA,EACvE;AACA,SAAO;AACX;AAGO,IAAM,WAAW,CAAC,UAAkB;AACvC,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACnC,SAAK,MAAM,WAAW,CAAC;AACvB,QAAI,KAAK,KAAK,GAAG,QAAU;AAAA,EAC/B;AACA,UAAQ,MAAM,KAAK;AACvB;AAMO,IAAM,WAAW,CAAC,UAAkB;AACvC,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACnC,SAAK,MAAM,WAAW,CAAC;AACvB,QAAI,KAAK,KAAK,GAAG,QAAU;AAAA,EAC/B;AACA,OAAK,MAAM;AACX,MAAI,KAAK,KAAK,GAAG,UAAU;AAC3B,OAAK,MAAM;AACX,MAAI,KAAK,KAAK,GAAG,UAAU;AAC3B,OAAK,MAAM;AACX,UAAQ,MAAM,KAAK;AACvB;AAGO,IAAM,SAAS,CAAC,YAA8B,eAAkC;AACnF,QAAM,UAAU,WAAW,SAAS,CAAC,GAAG,MAAM;AAC9C,MAAI,WAAW,OAAQ,QAAO,WAAW;AACzC,MAAI,WAAW,WAAW,UAAW,QAAO;AAC5C,QAAM,IAAI,SAAS,GAAG,WAAW,GAAG,IAAI,UAAU,EAAE;AACpD,MAAI,MAAM;AACV,aAAW,KAAK,WAAW,UAAU;AACjC,WAAO,EAAE;AACT,QAAI,IAAI,IAAK,QAAO,EAAE;AAAA,EAC1B;AACA,SAAO,WAAW,SAAS,WAAW,SAAS,SAAS,CAAC,GAAG,MAAM;AACtE;AAGO,IAAM,eAAe,CAAC,UAA2E;AACpG,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,QAAM,MAAiC,CAAC;AACxC,aAAW,QAAQ,IAAI,MAAM,GAAG,GAAG;AAC/B,UAAM,CAAC,KAAK,OAAO,IAAI,KAAK,MAAM,GAAG;AACrC,QAAI,OAAO,QAAS,KAAI,IAAI,KAAK,CAAC,IAAI,QAAQ,KAAK;AAAA,EACvD;AACA,SAAO;AACX;AAGO,IAAM,cAAc,CAAC,KAAa,QAAmC,QAAQ,SAAS;AACzF,QAAM,CAAC,MAAM,QAAQ,EAAE,IAAI,IAAI,MAAM,GAAG;AACxC,QAAM,SAAS,IAAI,gBAAgB,KAAK;AACxC,QAAM,QAAQ,OAAO,QAAQ,MAAM,EAC9B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,EAC3B,KAAK,GAAG;AACb,MAAI,MAAO,QAAO,IAAI,eAAe,KAAK;AAC1C,MAAI,MAAO,QAAO,IAAI,aAAa,GAAG;AACtC,SAAO,GAAG,IAAI,IAAI,OAAO,SAAS,CAAC;AACvC;AAIO,IAAM,oBAAoB,CAAC,QAA8B,QAC3D,QAAQ,eAAe,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,MAAM,EAAE,WAAW,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG;AAE7G,IAAM,iBAAiB,CAAC,KAAa,QAA8B,YAAoB,YAAkD;AAC5I,MAAI,QAAQ,GAAG,EAAG,QAAO,QAAQ,GAAG;AACpC,QAAM,aAAa,QAAQ,YAAY,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AAChE,SAAO,aAAa,OAAO,YAAY,UAAU,IAAI;AACzD;AAOO,IAAM,cAAc,CAAC,QAA8B,YAAoB,YAAuC;AACjH,QAAM,MAA8B,EAAE,GAAI,QAAQ,SAAS,CAAC,EAAG;AAC/D,aAAW,cAAc,QAAQ,eAAe,CAAC,GAAG;AAChD,UAAM,KAAK,eAAe,WAAW,KAAK,QAAQ,YAAY,OAAO;AACrE,QAAI,QAAQ,WAAW,SAAS,CAAC,GAAG,MAAM,WAAY;AACtD,WAAO,OAAO,KAAK,WAAW,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC;AAAA,EAClF;AACA,SAAO;AACX;AAMO,IAAM,iBAAiB;AAW9B,IAAM,SAAS,CAAC,MAAc,EAAE,QAAQ,QAAQ,EAAE,KAAK;AAYhD,IAAM,cAAc,CAAC,QAA8B,MAAc,YAA2B,UAAqC,CAAC,MAA+B;AACpK,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI;AACJ,MAAI;AACA,WAAO,IAAI,IAAI,IAAI;AAAA,EACvB,QAAQ;AACJ,WAAO;AAAA,EACX;AACA,MAAI,KAAK,aAAa,IAAI,cAAc,EAAG,QAAO;AAClD,QAAM,OAAO,OAAO,KAAK,QAAQ;AACjC,QAAM,KAAK,CAAC,IAAY,SAAkB;AACtC,QAAI;AACJ,QAAI;AACA,UAAI,IAAI,IAAI,IAAI,IAAI;AAAA,IACxB,QAAQ;AACJ,aAAO;AAAA,IACX;AACA,QAAI,CAAC,YAAY,KAAK,EAAE,QAAQ,KAAM,EAAE,WAAW,KAAK,UAAU,OAAO,EAAE,QAAQ,MAAM,KAAO,QAAO;AACvG,SAAK,aAAa,QAAQ,CAAC,GAAG,MAAM;AAChC,UAAI,CAAC,EAAE,aAAa,IAAI,CAAC,EAAG,GAAE,aAAa,IAAI,GAAG,CAAC;AAAA,IACvD,CAAC;AACD,QAAI,KAAM,GAAE,aAAa,IAAI,gBAAgB,IAAI;AACjD,QAAI,CAAC,EAAE,KAAM,GAAE,OAAO,KAAK;AAC3B,WAAO,EAAE;AAAA,EACb;AACA,aAAW,KAAK,OAAO,aAAa,CAAC,GAAG;AACpC,UAAM,KAAK,EAAE,QAAQ,OAAO,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE,EAAE,IAAI;AAC1D,QAAI,GAAI,QAAO,EAAE,GAAG;AAAA,EACxB;AACA,aAAW,KAAK,OAAO,aAAa;AAChC,QAAI,CAAC,EAAE,QAAQ,OAAO,EAAE,IAAI,MAAM,KAAM;AACxC,UAAM,UAAU,EAAE,WAAW,aAAa,CAAC,EAAE;AAC7C,QAAI,WAAW,eAAe,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAG,QAAO;AAC9D,UAAM,UAAU,eAAe,EAAE,KAAK,QAAQ,cAAc,IAAI,OAAO;AACvE,UAAM,MAAM,EAAE,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,OAAO,GAAG;AACtD,UAAM,KAAK,MAAM,GAAG,KAAK,UAAU,GAAG,EAAE,GAAG,IAAI,OAAO,KAAK,MAAS,IAAI;AACxE,WAAO,UAAU,EAAE,IAAI,YAAY,EAAE,KAAK,QAAQ,IAAI,KAAK,EAAE,GAAG,IAAI;AAAA,EACxE;AACA,SAAO;AACX;AAGO,IAAM,eAAe,CAAC,QAA8B,UAAqC;AAC5F,QAAM,CAAC,KAAK,OAAO,KAAK,SAAS,IAAI,MAAM,GAAG;AAC9C,QAAM,IAAI,QAAQ,YAAY,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AACvD,SAAO,KAAK,EAAE,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,OAAO,IAAI,EAAE,YAAY,KAAK,QAAQ,IAAI;AAC1F;AAOO,IAAM,UAAU,MAA0B;AAC7C,MAAI;AACA,WAAO,QAAQ,IAAI,6BAA6B;AAAA,EACpD,QAAQ;AACJ,WAAO;AAAA,EACX;AACJ;AAGO,IAAM,SAAS,MAA0B;AAC5C,MAAI;AACA,WAAO,QAAQ,IAAI,4BAA4B;AAAA,EACnD,QAAQ;AACJ,WAAO;AAAA,EACX;AACJ;AAMO,IAAM,cAAc,CAAC,UAAmB,QAAQ,QAAQ,KAAK,IAAI,KAAK,EAAE,QAAQ,QAAQ,EAAE;AAG1F,IAAM,gBAAgB,MACzB,OAAO,WAAW,eAAe,gBAAgB,SAAS,OAAO,WAAW,IAAI,MAAM,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC;","names":[]}
+{"version":3,"sources":["../src/core.ts"],"sourcesContent":["/**\n * The part of the SDK that runs anywhere: experiment config, variant assignment, preview links and event shapes.\n * No React, no browser APIs, so the server helper, the proxy helper and the client share it.\n */\nimport type { CancelFlowConfig, OnboardingFlow } from \"./flows\";\n\nexport type VariantId = string;\n\n/** This build of the SDK. Sent with the config request so MRRocket knows what the site runs (error tracking, flags). */\nexport const SDK_VERSION = \"0.12.0\";\n\n/** One variant of an experiment. `changes` replaces texts that the page marks with `<Text id>`. */\nexport interface VariantConfig {\n    id: VariantId;\n    /** Share of traffic, 0 to 1. The weights of an experiment add up to 1. */\n    weight: number;\n    changes?: Record<string, string>;\n    /**\n     * A redirect test: where this variant sends the visitor instead of the test's page (a path like \"/pricing-b\" or a\n     * full address). Control has none and stays. SDK 0.7.0+.\n     */\n    url?: string;\n}\n\nexport interface ExperimentConfig {\n    /** The experiment's key, the same as in Cockpit. */\n    key: string;\n    status: \"running\" | \"draft\" | \"stopped\";\n    /** Control first. */\n    variants: VariantConfig[];\n    /** A winner that shipped: everyone gets it, and nobody is assigned anymore. */\n    winner?: VariantId;\n    /** A redirect test: the path of the page it runs on (\"/pricing\"). Visitors there are sent to their variant's `url`. */\n    path?: string;\n}\n\n/** A page redirect set in MRRocket (Conversion › Landing pages › Redirect): everyone on `from` goes to `to`. SDK 0.7.0+. */\nexport interface RedirectConfig {\n    /** A path of the site, like \"/old-pricing\". */\n    from: string;\n    /** A path or a full address. */\n    to: string;\n}\n\nexport interface CockpitConfig {\n    /** The product the public key belongs to. */\n    project: string;\n    experiments: ExperimentConfig[];\n    /** The product's affiliate program: how many days a partner's referral is kept. Missing without a program. */\n    referral?: { cookieDays: number };\n    /** Session recordings: present only while the product records (Cockpit › Sessions). See `ReplayConfig`. */\n    replay?: ReplayConfig;\n    /** Feature flags of the product in Production (MRRocket › Build › Feature flags), evaluated by `useFlag` and `getFlag`. */\n    flags?: FlagConfig[];\n    /**\n     * Published copy for texts the site marks (`<Text id>`, `data-ck-text`): a landing page's headline, subheadline and\n     * button (`pricing.headline` …) and a paywall's (`paywall.<placement>.headline` …) as published in MRRocket. A\n     * running test's variant changes them on top. Missing when nothing is published. SDK 0.5.0+.\n     */\n    texts?: Record<string, string>;\n    /** The product's live cancel flow (MRRocket › Churn › Cancel flow), for `cancelFlow.open()`. SDK 0.7.0+. */\n    cancelFlow?: CancelFlowConfig;\n    /** The in-app steps of live onboarding flows (tours, checklists, modals). SDK 0.7.0+. */\n    onboarding?: OnboardingFlow[];\n    /** A live Lifecycle journey has in-app messages: signed-in people ask `/api/sdk/inapp` for theirs. SDK 0.7.0+. */\n    messages?: boolean;\n    /** Page redirects set in MRRocket; the SDK sends visitors on before the page shows (`redirectFor`). SDK 0.7.0+. */\n    redirects?: RedirectConfig[];\n}\n\n/** One condition of a flag's audience, on a property of the person (`identify(id, props)`), the id or the page. */\nexport interface FlagCondition {\n    /** \"Email\", \"Plan\", \"Country\", \"id\", \"path\" … Matched against the person's properties without regard to case. */\n    property: string;\n    op: \"is\" | \"is not\" | \"in\" | \"not in\" | \"≥\" | \"in cohort\";\n    values: string[];\n}\n\n/** Users who match every condition, of whom `rollout` percent get the flag. No conditions: everyone. */\nexport interface FlagConditionSet {\n    conditions: FlagCondition[];\n    /** 0 to 100. */\n    rollout: number;\n}\n\nexport interface FlagConfig {\n    key: string;\n    /** Off: everyone gets the off side. */\n    on: boolean;\n    /** The first set a person matches decides; none matched: off. */\n    sets: FlagConditionSet[];\n    /** Multivariate flags: the variants and their split in percent (control included). Missing for an on/off flag. */\n    variants?: { key: string; split: number; payload?: string }[];\n}\n\n/** What a person is for flag conditions: their properties from identify(), their id and the page they are on. */\nexport type FlagPerson = Record<string, unknown>;\n\nconst propOf = (person: FlagPerson, name: string) => {\n    const want = name.trim().toLowerCase();\n    for (const [k, v] of Object.entries(person)) if (k.toLowerCase() === want) return v;\n    return undefined;\n};\n\n/** `\"@acme.com\"` matches every address at that domain; anything else matches the whole value, without regard to case. */\nconst same = (actual: string, value: string) => {\n    const a = actual.trim().toLowerCase();\n    const v = value.trim().toLowerCase();\n    return v.startsWith(\"@\") ? a.endsWith(v) : a === v;\n};\n\nconst matchesCondition = (c: FlagCondition, person: FlagPerson) => {\n    // Cohorts live in MRRocket; a browser cannot know them, so a cohort condition never matches here.\n    if (c.op === \"in cohort\") return false;\n    const raw = propOf(person, c.property);\n    const actual = raw === undefined || raw === null ? \"\" : String(raw);\n    if (c.op === \"≥\") {\n        const a = Number(actual);\n        const b = Number(c.values[0]);\n        return actual !== \"\" && Number.isFinite(a) && Number.isFinite(b) && a >= b;\n    }\n    const hit = actual !== \"\" && c.values.some((v) => same(actual, v));\n    return c.op === \"is\" || c.op === \"in\" ? hit : !hit;\n};\n\n/**\n * The flag for one person: `false` (off), `true` (on, an on/off flag) or the variant's key (a multivariate flag). The\n * bucket is a stable hash of flag and person, so a person keeps their side as the rollout grows.\n */\nexport const evaluateFlag = (flag: FlagConfig, distinctId: string, person: FlagPerson = {}): boolean | string => {\n    if (!flag.on) return false;\n    const subject = { id: distinctId, ...person };\n    const set = flag.sets.length ? flag.sets.find((s) => s.conditions.every((c) => matchesCondition(c, subject))) : { conditions: [], rollout: 100 };\n    if (!set) return false;\n    if (flagUnit(`${flag.key}:rollout:${distinctId}`) * 100 >= set.rollout) return false;\n    if (!flag.variants?.length) return true;\n    const u = flagUnit(`${flag.key}:variant:${distinctId}`) * 100;\n    let acc = 0;\n    for (const v of flag.variants) {\n        acc += v.split;\n        if (u < acc) return v.key;\n    }\n    return flag.variants[flag.variants.length - 1].key;\n};\n\n/** A flag of the config for this person; an unknown flag (or no config) is off. */\nexport const flagFor = (key: string, config: CockpitConfig | null, distinctId: string, person: FlagPerson = {}) => {\n    const flag = config?.flags?.find((f) => f.key === key);\n    return flag ? evaluateFlag(flag, distinctId, person) : false;\n};\n\n/** One JavaScript error as it goes over the wire to `POST /api/sdk/errors`. */\nexport interface ErrorReport {\n    /** \"TypeError\", \"Error\" … */\n    type: string;\n    message: string;\n    /** The raw stack, at most 8 KB. MRRocket parses it into frames. */\n    stack?: string;\n    /** \"onerror\" (uncaught), \"onunhandledrejection\" (a rejected promise nobody caught) or \"manual\" (captureError). */\n    mechanism: \"onerror\" | \"onunhandledrejection\" | \"manual\";\n    handled: boolean;\n    url: string;\n    ts: number;\n    /** What happened just before: pages and clicks, newest last, at most 20. */\n    crumbs?: { ts: number; type: \"navigation\" | \"click\" | \"lifecycle\"; message: string }[];\n    /** Your release (a version or commit), from the provider's `release` prop. */\n    release?: string;\n    distinctId?: string;\n    sessionId?: string;\n}\n\n/**\n * Session recordings of a product, from the config. Recording also needs the visitor's own replay consent\n * (`<CockpitProvider replay>` or `setConsent({ replay: true })`); without it nothing is recorded or buffered.\n */\nexport interface ReplayConfig {\n    /**\n     * Share of sessions uploaded from their start, 0 to 1 (default 0.1). The others keep only the last minute in\n     * memory and upload it when something goes wrong: a JS error, a rage click, a `purchase…` or `checkout…` event.\n     */\n    sampleRate: number;\n}\n\n/**\n * What the SDK may send and store.\n * - \"cookieless\" (default): no cookie, no localStorage. Events go without a visitor id; the server counts visitors\n *   with a hash of key, date, IP and user agent that changes every day.\n * - \"cookies\": a persistent `ck_id` cookie identifies the visitor across visits, `ck_sid` holds the session.\n * - \"off\": nothing is sent and nothing is stored.\n */\nexport type ConsentMode = \"cookieless\" | \"cookies\" | \"off\";\n\n/**\n * What `setConsent` takes: a mode as before, or the parts to change. `replay` is the separate consent for session\n * recordings (default false); it applies only while analytics is not \"off\".\n *\n *     setConsent(\"cookies\");\n *     setConsent({ replay: true });\n *     setConsent({ analytics: \"cookieless\", replay: false });\n */\nexport type ConsentChoice = ConsentMode | { analytics?: ConsentMode; replay?: boolean };\n\n/** The campaign parameters the SDK reads from the landing URL. */\nexport const UTM_KEYS = [\"utm_source\", \"utm_medium\", \"utm_campaign\", \"utm_term\", \"utm_content\"] as const;\nexport type UtmKey = (typeof UTM_KEYS)[number];\n\n/** One event as it goes over the wire to `POST /api/sdk/events`. */\nexport interface CockpitEvent {\n    event: string;\n    /** The visitor. Missing in \"cookieless\" mode until identify(): the server then uses its daily visitor hash. */\n    distinctId?: string;\n    /** Ends after 30 minutes without an event. */\n    sessionId?: string;\n    props?: Record<string, unknown>;\n    /** Milliseconds since the epoch. */\n    ts: number;\n    url?: string;\n    /** `document.referrer` on the first page of a page load, the previous in-app URL after client-side navigation. */\n    referrer?: string;\n    utm_source?: string;\n    utm_medium?: string;\n    utm_campaign?: string;\n    utm_term?: string;\n    utm_content?: string;\n    /** The screen size in CSS pixels (points on a phone). */\n    screen?: { w: number; h: number };\n    /** The app that sent it (React Native only): MRRocket stores it with the event and fills OS and device from it. */\n    app?: AppContext;\n}\n\n/** Where a React Native event comes from. Every field is optional except the platform; nothing identifies the person. */\nexport interface AppContext {\n    /** \"ios\" or \"android\" (React Native's `Platform.OS`). */\n    platform: string;\n    /** The app's version, like \"1.4.0\" (`expo-application`'s `nativeApplicationVersion`). */\n    appVersion?: string;\n    /** The build number, like \"42\". */\n    build?: string;\n    /** The OS version, like \"17.4\". */\n    osVersion?: string;\n    /** The device model, like \"iPhone 15 Pro\" (`expo-device`). */\n    deviceModel?: string;\n    /** \"phone\", \"tablet\", \"desktop\" or \"tv\" when `expo-device` knows it. */\n    deviceType?: string;\n    /** The first preferred locale, like \"de-DE\". */\n    locale?: string;\n}\n\n/** The query parameter that forces variants, for previews in Cockpit: `?ck_preview=pricing-annual:a,home-hero:control`. */\nexport const PREVIEW_PARAM = \"ck_preview\";\n/** Set when Cockpit embeds the page: nothing is tracked, so previews never count as visits. */\nexport const EMBED_PARAM = \"ck_embed\";\n/** The cookie that keeps a visitor in the same variant across visits. Only written in \"cookies\" mode. */\nexport const ID_COOKIE = \"ck_id\";\n/** The cookie that holds the session id in \"cookies\" mode. */\nexport const SESSION_COOKIE = \"ck_sid\";\n/** A session ends after this long without an event. */\nexport const SESSION_TIMEOUT_MS = 30 * 60 * 1000;\n\n/** The UTM parameters from a parameter lookup (`URLSearchParams.get` in a browser). Empty values are left out. */\nexport const utmFrom = (get: (name: string) => string | null | undefined): Partial<Record<UtmKey, string>> => {\n    const out: Partial<Record<UtmKey, string>> = {};\n    for (const key of UTM_KEYS) {\n        const value = get(key)?.trim();\n        if (value) out[key] = value.slice(0, 150);\n    }\n    return out;\n};\n\n/** The UTM parameters of a query string, like `\"?utm_source=x\"`. Empty values are left out. */\nexport const readUtm = (search: string): Partial<Record<UtmKey, string>> => {\n    const params = new URLSearchParams(search);\n    return utmFrom((k) => params.get(k));\n};\n\n/**\n * The query parameters of a URL or query string, without `URLSearchParams` (React Native's is incomplete): `+` is a\n * space, values are percent-decoded, the first of a repeated name wins.\n */\nexport const parseQuery = (url: string): Record<string, string> => {\n    const out: Record<string, string> = {};\n    const q = url.split(\"#\")[0];\n    const at = q.indexOf(\"?\");\n    if (at < 0) return out;\n    const dec = (s: string) => {\n        try {\n            return decodeURIComponent(s.replace(/\\+/g, \" \"));\n        } catch {\n            return s;\n        }\n    };\n    for (const pair of q.slice(at + 1).split(\"&\")) {\n        if (!pair) continue;\n        const eq = pair.indexOf(\"=\");\n        const k = dec(eq < 0 ? pair : pair.slice(0, eq));\n        if (k && !(k in out)) out[k] = eq < 0 ? \"\" : dec(pair.slice(eq + 1));\n    }\n    return out;\n};\n\n/** FNV-1a, 32 bit, mapped to [0, 1). Stable across server and browser. */\nexport const hashUnit = (input: string) => {\n    let h = 0x811c9dc5;\n    for (let i = 0; i < input.length; i++) {\n        h ^= input.charCodeAt(i);\n        h = Math.imul(h, 0x01000193);\n    }\n    return (h >>> 0) / 4294967296;\n};\n\n/**\n * FNV-1a with murmur3's finalizer, mapped to [0, 1): ids that differ only at the end (\"user-1\", \"user-2\") still spread\n * evenly, so a 30 % rollout reaches about 30 % of people. Flags only; experiments keep `hashUnit` so nobody switches.\n */\nexport const flagUnit = (input: string) => {\n    let h = 0x811c9dc5;\n    for (let i = 0; i < input.length; i++) {\n        h ^= input.charCodeAt(i);\n        h = Math.imul(h, 0x01000193);\n    }\n    h ^= h >>> 16;\n    h = Math.imul(h, 0x85ebca6b);\n    h ^= h >>> 13;\n    h = Math.imul(h, 0xc2b2ae35);\n    h ^= h >>> 16;\n    return (h >>> 0) / 4294967296;\n};\n\n/** The variant a visitor sees: a shipped winner, control while the experiment does not run, else a stable bucket by visitor. */\nexport const assign = (experiment: ExperimentConfig, distinctId: string): VariantId => {\n    const control = experiment.variants[0]?.id ?? \"control\";\n    if (experiment.winner) return experiment.winner;\n    if (experiment.status !== \"running\") return control;\n    const u = hashUnit(`${experiment.key}:${distinctId}`);\n    let acc = 0;\n    for (const v of experiment.variants) {\n        acc += v.weight;\n        if (u < acc) return v.id;\n    }\n    return experiment.variants[experiment.variants.length - 1]?.id ?? control;\n};\n\n/** `\"a:b,c:d\"` → `{ a: \"b\", c: \"d\" }`. Ignores anything malformed. */\nexport const parsePreview = (value: string | string[] | null | undefined): Record<string, VariantId> => {\n    const raw = Array.isArray(value) ? value[0] : value;\n    if (!raw) return {};\n    const out: Record<string, VariantId> = {};\n    for (const pair of raw.split(\",\")) {\n        const [key, variant] = pair.split(\":\");\n        if (key && variant) out[key.trim()] = variant.trim();\n    }\n    return out;\n};\n\n/** A link that shows one variant of a page, for example in Cockpit's preview frames. */\nexport const previewHref = (url: string, forced: Record<string, VariantId>, embed = true) => {\n    const [path, query = \"\"] = url.split(\"?\");\n    const params = new URLSearchParams(query);\n    const value = Object.entries(forced)\n        .map(([k, v]) => `${k}:${v}`)\n        .join(\",\");\n    if (value) params.set(PREVIEW_PARAM, value);\n    if (embed) params.set(EMBED_PARAM, \"1\");\n    return `${path}?${params.toString()}`;\n};\n\n/** The variant for one experiment, from a forced preview first, then the config. Unknown experiments get control. */\n/** The experiments whose variants change the text `id`: showing that text is an exposure to them. */\nexport const experimentsOfText = (config: CockpitConfig | null, id: string) =>\n    (config?.experiments ?? []).filter((e) => e.variants.some((v) => v.changes && id in v.changes)).map((e) => e.key);\n\nexport const resolveVariant = (key: string, config: CockpitConfig | null, distinctId: string, preview: Record<string, VariantId>): VariantId => {\n    if (preview[key]) return preview[key];\n    const experiment = config?.experiments.find((e) => e.key === key);\n    return experiment ? assign(experiment, distinctId) : \"control\";\n};\n\n/**\n * Every text change that applies to this visitor: the published texts first, then each experiment's in config order.\n * Control keeps the published (or the page's own) words, so only a non-control variant (assigned, forced in a preview,\n * or a shipped winner) changes them further.\n */\nexport const textChanges = (config: CockpitConfig | null, distinctId: string, preview: Record<string, VariantId>) => {\n    const out: Record<string, string> = { ...(config?.texts ?? {}) };\n    for (const experiment of config?.experiments ?? []) {\n        const id = resolveVariant(experiment.key, config, distinctId, preview);\n        if (id === (experiment.variants[0]?.id ?? \"control\")) continue;\n        Object.assign(out, experiment.variants.find((v) => v.id === id)?.changes ?? {});\n    }\n    return out;\n};\n\n/**\n * The query parameter a redirect test adds to the variant's address (`ck_x=<test>:<variant>`): the page there records\n * the exposure and takes it out of the address bar. It also keeps that page from redirecting again.\n */\nexport const EXPOSURE_PARAM = \"ck_x\";\n\n/** What `redirectFor` decided: go to `to`, and/or the redirect test this page belongs to and the visitor's variant. */\nexport interface RedirectDecision {\n    /** Where to send the visitor now. Missing for control, which stays on the page. */\n    to?: string;\n    /** The redirect test, while it runs: record `$exposure` for it (on this page for control, on `to` otherwise). */\n    experiment?: string;\n    variant?: VariantId;\n}\n\nconst pathOf = (p: string) => p.replace(/\\/+$/, \"\") || \"/\";\n\n/**\n * Where a page sends the visitor, before it shows: a page redirect set in MRRocket first, else a redirect test that runs\n * on this path (the visitor's variant, by the same stable assignment as every test). Null when nothing applies.\n *\n * - The new address keeps the page's query (UTM parameters) and its hash; a running test adds `ck_x=<test>:<variant>`,\n *   so the page it lands on records the exposure (and never redirects again).\n * - `distinctId` null (no stable id, as on a server without the `ck_id` cookie): running tests are left to the browser,\n *   page redirects and shipped winners still apply.\n * - A redirect to the page itself is ignored.\n */\nexport const redirectFor = (config: CockpitConfig | null, href: string, distinctId: string | null, preview: Record<string, VariantId> = {}): RedirectDecision | null => {\n    if (!config) return null;\n    let here: URL;\n    try {\n        here = new URL(href);\n    } catch {\n        return null;\n    }\n    if (here.searchParams.has(EXPOSURE_PARAM)) return null;\n    const path = pathOf(here.pathname);\n    const go = (to: string, mark?: string) => {\n        let t: URL;\n        try {\n            t = new URL(to, here);\n        } catch {\n            return undefined;\n        }\n        if (!/^https?:$/.test(t.protocol) || (t.origin === here.origin && pathOf(t.pathname) === path)) return undefined;\n        here.searchParams.forEach((v, k) => {\n            if (!t.searchParams.has(k)) t.searchParams.set(k, v);\n        });\n        if (mark) t.searchParams.set(EXPOSURE_PARAM, mark);\n        if (!t.hash) t.hash = here.hash;\n        return t.href;\n    };\n    for (const r of config.redirects ?? []) {\n        const to = r.from && pathOf(r.from) === path ? go(r.to) : undefined;\n        if (to) return { to };\n    }\n    for (const e of config.experiments) {\n        if (!e.path || pathOf(e.path) !== path) continue;\n        const running = e.status === \"running\" && !e.winner;\n        if (running && distinctId === null && !preview[e.key]) return null;\n        const variant = resolveVariant(e.key, config, distinctId ?? \"\", preview);\n        const url = e.variants.find((v) => v.id === variant)?.url;\n        const to = url ? go(url, running ? `${e.key}:${variant}` : undefined) : undefined;\n        return running ? { to, experiment: e.key, variant } : to ? { to } : null;\n    }\n    return null;\n};\n\n/** The test and variant a redirect test's `ck_x` names, when the config has them; null otherwise. */\nexport const exposureFrom = (config: CockpitConfig | null, value: string | null | undefined) => {\n    const [key, variant] = (value ?? \"\").split(\":\");\n    const e = config?.experiments.find((x) => x.key === key);\n    return e && e.variants.some((v) => v.id === variant) ? { experiment: key, variant } : null;\n};\n\n/**\n * The MRRocket API host from `NEXT_PUBLIC_MRROCKET_HOST`. Written as a literal property access on purpose: Next.js\n * inlines `process.env.NEXT_PUBLIC_*` at build time, in the browser bundle and in the server bundle (also on\n * Cloudflare Workers), and only replaces the literal form. Without a bundler (or a `process`) it is undefined.\n */\nexport const envHost = (): string | undefined => {\n    try {\n        return process.env.NEXT_PUBLIC_MRROCKET_HOST || undefined;\n    } catch {\n        return undefined;\n    }\n};\n\n/** The public key from `NEXT_PUBLIC_MRROCKET_KEY`, the default for the `apiKey` prop. Same literal-access rule as `envHost`. */\nexport const envKey = (): string | undefined => {\n    try {\n        return process.env.NEXT_PUBLIC_MRROCKET_KEY || undefined;\n    } catch {\n        return undefined;\n    }\n};\n\n/**\n * Where the API lives: the `host` prop, else `NEXT_PUBLIC_MRROCKET_HOST`, else \"\" (the page's own origin, which is how\n * MRRocket's own demo pages call it). Without a trailing slash.\n */\nexport const resolveHost = (host?: string) => (host ?? envHost() ?? \"\").trim().replace(/\\/+$/, \"\");\n\n/** A random visitor id. */\nexport const newDistinctId = () =>\n    typeof crypto !== \"undefined\" && \"randomUUID\" in crypto ? crypto.randomUUID() : `ck_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`;\n"],"mappings":";AASO,IAAM,cAAc;AAyF3B,IAAM,SAAS,CAAC,QAAoB,SAAiB;AACjD,QAAM,OAAO,KAAK,KAAK,EAAE,YAAY;AACrC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,EAAG,KAAI,EAAE,YAAY,MAAM,KAAM,QAAO;AAClF,SAAO;AACX;AAGA,IAAM,OAAO,CAAC,QAAgB,UAAkB;AAC5C,QAAM,IAAI,OAAO,KAAK,EAAE,YAAY;AACpC,QAAM,IAAI,MAAM,KAAK,EAAE,YAAY;AACnC,SAAO,EAAE,WAAW,GAAG,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM;AACrD;AAEA,IAAM,mBAAmB,CAAC,GAAkB,WAAuB;AAE/D,MAAI,EAAE,OAAO,YAAa,QAAO;AACjC,QAAM,MAAM,OAAO,QAAQ,EAAE,QAAQ;AACrC,QAAM,SAAS,QAAQ,UAAa,QAAQ,OAAO,KAAK,OAAO,GAAG;AAClE,MAAI,EAAE,OAAO,UAAK;AACd,UAAM,IAAI,OAAO,MAAM;AACvB,UAAM,IAAI,OAAO,EAAE,OAAO,CAAC,CAAC;AAC5B,WAAO,WAAW,MAAM,OAAO,SAAS,CAAC,KAAK,OAAO,SAAS,CAAC,KAAK,KAAK;AAAA,EAC7E;AACA,QAAM,MAAM,WAAW,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;AACjE,SAAO,EAAE,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,CAAC;AACnD;AAMO,IAAM,eAAe,CAAC,MAAkB,YAAoB,SAAqB,CAAC,MAAwB;AAC7G,MAAI,CAAC,KAAK,GAAI,QAAO;AACrB,QAAM,UAAU,EAAE,IAAI,YAAY,GAAG,OAAO;AAC5C,QAAM,MAAM,KAAK,KAAK,SAAS,KAAK,KAAK,KAAK,CAAC,MAAM,EAAE,WAAW,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,GAAG,SAAS,IAAI;AAC/I,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI,SAAS,GAAG,KAAK,GAAG,YAAY,UAAU,EAAE,IAAI,OAAO,IAAI,QAAS,QAAO;AAC/E,MAAI,CAAC,KAAK,UAAU,OAAQ,QAAO;AACnC,QAAM,IAAI,SAAS,GAAG,KAAK,GAAG,YAAY,UAAU,EAAE,IAAI;AAC1D,MAAI,MAAM;AACV,aAAW,KAAK,KAAK,UAAU;AAC3B,WAAO,EAAE;AACT,QAAI,IAAI,IAAK,QAAO,EAAE;AAAA,EAC1B;AACA,SAAO,KAAK,SAAS,KAAK,SAAS,SAAS,CAAC,EAAE;AACnD;AAGO,IAAM,UAAU,CAAC,KAAa,QAA8B,YAAoB,SAAqB,CAAC,MAAM;AAC/G,QAAM,OAAO,QAAQ,OAAO,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AACrD,SAAO,OAAO,aAAa,MAAM,YAAY,MAAM,IAAI;AAC3D;AAsDO,IAAM,WAAW,CAAC,cAAc,cAAc,gBAAgB,YAAY,aAAa;AA8CvF,IAAM,gBAAgB;AAEtB,IAAM,cAAc;AAEpB,IAAM,YAAY;AAElB,IAAM,iBAAiB;AAEvB,IAAM,qBAAqB,KAAK,KAAK;AAGrC,IAAM,UAAU,CAAC,QAAsF;AAC1G,QAAM,MAAuC,CAAC;AAC9C,aAAW,OAAO,UAAU;AACxB,UAAM,QAAQ,IAAI,GAAG,GAAG,KAAK;AAC7B,QAAI,MAAO,KAAI,GAAG,IAAI,MAAM,MAAM,GAAG,GAAG;AAAA,EAC5C;AACA,SAAO;AACX;AAGO,IAAM,UAAU,CAAC,WAAoD;AACxE,QAAM,SAAS,IAAI,gBAAgB,MAAM;AACzC,SAAO,QAAQ,CAAC,MAAM,OAAO,IAAI,CAAC,CAAC;AACvC;AAMO,IAAM,aAAa,CAAC,QAAwC;AAC/D,QAAM,MAA8B,CAAC;AACrC,QAAM,IAAI,IAAI,MAAM,GAAG,EAAE,CAAC;AAC1B,QAAM,KAAK,EAAE,QAAQ,GAAG;AACxB,MAAI,KAAK,EAAG,QAAO;AACnB,QAAM,MAAM,CAAC,MAAc;AACvB,QAAI;AACA,aAAO,mBAAmB,EAAE,QAAQ,OAAO,GAAG,CAAC;AAAA,IACnD,QAAQ;AACJ,aAAO;AAAA,IACX;AAAA,EACJ;AACA,aAAW,QAAQ,EAAE,MAAM,KAAK,CAAC,EAAE,MAAM,GAAG,GAAG;AAC3C,QAAI,CAAC,KAAM;AACX,UAAM,KAAK,KAAK,QAAQ,GAAG;AAC3B,UAAM,IAAI,IAAI,KAAK,IAAI,OAAO,KAAK,MAAM,GAAG,EAAE,CAAC;AAC/C,QAAI,KAAK,EAAE,KAAK,KAAM,KAAI,CAAC,IAAI,KAAK,IAAI,KAAK,IAAI,KAAK,MAAM,KAAK,CAAC,CAAC;AAAA,EACvE;AACA,SAAO;AACX;AAGO,IAAM,WAAW,CAAC,UAAkB;AACvC,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACnC,SAAK,MAAM,WAAW,CAAC;AACvB,QAAI,KAAK,KAAK,GAAG,QAAU;AAAA,EAC/B;AACA,UAAQ,MAAM,KAAK;AACvB;AAMO,IAAM,WAAW,CAAC,UAAkB;AACvC,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACnC,SAAK,MAAM,WAAW,CAAC;AACvB,QAAI,KAAK,KAAK,GAAG,QAAU;AAAA,EAC/B;AACA,OAAK,MAAM;AACX,MAAI,KAAK,KAAK,GAAG,UAAU;AAC3B,OAAK,MAAM;AACX,MAAI,KAAK,KAAK,GAAG,UAAU;AAC3B,OAAK,MAAM;AACX,UAAQ,MAAM,KAAK;AACvB;AAGO,IAAM,SAAS,CAAC,YAA8B,eAAkC;AACnF,QAAM,UAAU,WAAW,SAAS,CAAC,GAAG,MAAM;AAC9C,MAAI,WAAW,OAAQ,QAAO,WAAW;AACzC,MAAI,WAAW,WAAW,UAAW,QAAO;AAC5C,QAAM,IAAI,SAAS,GAAG,WAAW,GAAG,IAAI,UAAU,EAAE;AACpD,MAAI,MAAM;AACV,aAAW,KAAK,WAAW,UAAU;AACjC,WAAO,EAAE;AACT,QAAI,IAAI,IAAK,QAAO,EAAE;AAAA,EAC1B;AACA,SAAO,WAAW,SAAS,WAAW,SAAS,SAAS,CAAC,GAAG,MAAM;AACtE;AAGO,IAAM,eAAe,CAAC,UAA2E;AACpG,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,QAAM,MAAiC,CAAC;AACxC,aAAW,QAAQ,IAAI,MAAM,GAAG,GAAG;AAC/B,UAAM,CAAC,KAAK,OAAO,IAAI,KAAK,MAAM,GAAG;AACrC,QAAI,OAAO,QAAS,KAAI,IAAI,KAAK,CAAC,IAAI,QAAQ,KAAK;AAAA,EACvD;AACA,SAAO;AACX;AAGO,IAAM,cAAc,CAAC,KAAa,QAAmC,QAAQ,SAAS;AACzF,QAAM,CAAC,MAAM,QAAQ,EAAE,IAAI,IAAI,MAAM,GAAG;AACxC,QAAM,SAAS,IAAI,gBAAgB,KAAK;AACxC,QAAM,QAAQ,OAAO,QAAQ,MAAM,EAC9B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,EAC3B,KAAK,GAAG;AACb,MAAI,MAAO,QAAO,IAAI,eAAe,KAAK;AAC1C,MAAI,MAAO,QAAO,IAAI,aAAa,GAAG;AACtC,SAAO,GAAG,IAAI,IAAI,OAAO,SAAS,CAAC;AACvC;AAIO,IAAM,oBAAoB,CAAC,QAA8B,QAC3D,QAAQ,eAAe,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,MAAM,EAAE,WAAW,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG;AAE7G,IAAM,iBAAiB,CAAC,KAAa,QAA8B,YAAoB,YAAkD;AAC5I,MAAI,QAAQ,GAAG,EAAG,QAAO,QAAQ,GAAG;AACpC,QAAM,aAAa,QAAQ,YAAY,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AAChE,SAAO,aAAa,OAAO,YAAY,UAAU,IAAI;AACzD;AAOO,IAAM,cAAc,CAAC,QAA8B,YAAoB,YAAuC;AACjH,QAAM,MAA8B,EAAE,GAAI,QAAQ,SAAS,CAAC,EAAG;AAC/D,aAAW,cAAc,QAAQ,eAAe,CAAC,GAAG;AAChD,UAAM,KAAK,eAAe,WAAW,KAAK,QAAQ,YAAY,OAAO;AACrE,QAAI,QAAQ,WAAW,SAAS,CAAC,GAAG,MAAM,WAAY;AACtD,WAAO,OAAO,KAAK,WAAW,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC;AAAA,EAClF;AACA,SAAO;AACX;AAMO,IAAM,iBAAiB;AAW9B,IAAM,SAAS,CAAC,MAAc,EAAE,QAAQ,QAAQ,EAAE,KAAK;AAYhD,IAAM,cAAc,CAAC,QAA8B,MAAc,YAA2B,UAAqC,CAAC,MAA+B;AACpK,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI;AACJ,MAAI;AACA,WAAO,IAAI,IAAI,IAAI;AAAA,EACvB,QAAQ;AACJ,WAAO;AAAA,EACX;AACA,MAAI,KAAK,aAAa,IAAI,cAAc,EAAG,QAAO;AAClD,QAAM,OAAO,OAAO,KAAK,QAAQ;AACjC,QAAM,KAAK,CAAC,IAAY,SAAkB;AACtC,QAAI;AACJ,QAAI;AACA,UAAI,IAAI,IAAI,IAAI,IAAI;AAAA,IACxB,QAAQ;AACJ,aAAO;AAAA,IACX;AACA,QAAI,CAAC,YAAY,KAAK,EAAE,QAAQ,KAAM,EAAE,WAAW,KAAK,UAAU,OAAO,EAAE,QAAQ,MAAM,KAAO,QAAO;AACvG,SAAK,aAAa,QAAQ,CAAC,GAAG,MAAM;AAChC,UAAI,CAAC,EAAE,aAAa,IAAI,CAAC,EAAG,GAAE,aAAa,IAAI,GAAG,CAAC;AAAA,IACvD,CAAC;AACD,QAAI,KAAM,GAAE,aAAa,IAAI,gBAAgB,IAAI;AACjD,QAAI,CAAC,EAAE,KAAM,GAAE,OAAO,KAAK;AAC3B,WAAO,EAAE;AAAA,EACb;AACA,aAAW,KAAK,OAAO,aAAa,CAAC,GAAG;AACpC,UAAM,KAAK,EAAE,QAAQ,OAAO,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE,EAAE,IAAI;AAC1D,QAAI,GAAI,QAAO,EAAE,GAAG;AAAA,EACxB;AACA,aAAW,KAAK,OAAO,aAAa;AAChC,QAAI,CAAC,EAAE,QAAQ,OAAO,EAAE,IAAI,MAAM,KAAM;AACxC,UAAM,UAAU,EAAE,WAAW,aAAa,CAAC,EAAE;AAC7C,QAAI,WAAW,eAAe,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAG,QAAO;AAC9D,UAAM,UAAU,eAAe,EAAE,KAAK,QAAQ,cAAc,IAAI,OAAO;AACvE,UAAM,MAAM,EAAE,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,OAAO,GAAG;AACtD,UAAM,KAAK,MAAM,GAAG,KAAK,UAAU,GAAG,EAAE,GAAG,IAAI,OAAO,KAAK,MAAS,IAAI;AACxE,WAAO,UAAU,EAAE,IAAI,YAAY,EAAE,KAAK,QAAQ,IAAI,KAAK,EAAE,GAAG,IAAI;AAAA,EACxE;AACA,SAAO;AACX;AAGO,IAAM,eAAe,CAAC,QAA8B,UAAqC;AAC5F,QAAM,CAAC,KAAK,OAAO,KAAK,SAAS,IAAI,MAAM,GAAG;AAC9C,QAAM,IAAI,QAAQ,YAAY,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AACvD,SAAO,KAAK,EAAE,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,OAAO,IAAI,EAAE,YAAY,KAAK,QAAQ,IAAI;AAC1F;AAOO,IAAM,UAAU,MAA0B;AAC7C,MAAI;AACA,WAAO,QAAQ,IAAI,6BAA6B;AAAA,EACpD,QAAQ;AACJ,WAAO;AAAA,EACX;AACJ;AAGO,IAAM,SAAS,MAA0B;AAC5C,MAAI;AACA,WAAO,QAAQ,IAAI,4BAA4B;AAAA,EACnD,QAAQ;AACJ,WAAO;AAAA,EACX;AACJ;AAMO,IAAM,cAAc,CAAC,UAAmB,QAAQ,QAAQ,KAAK,IAAI,KAAK,EAAE,QAAQ,QAAQ,EAAE;AAG1F,IAAM,gBAAgB,MACzB,OAAO,WAAW,eAAe,gBAAgB,SAAS,OAAO,WAAW,IAAI,MAAM,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC;","names":[]}

package/dist/forms.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Form leads (0.12.0): a form on the customer's site becomes a contact in MRRocket when it is submitted. Forms marked
+ * `data-mrrocket-form` (its value names the form, e.g. `data-mrrocket-form="Demo request"`) are captured; with
+ * auto-detection on (`data-forms="auto"` on the script tag, `forms="auto"` on the provider) also any form with an email
+ * field, except forms with a password field (sign-in and sign-up) and forms marked `data-mrrocket-ignore`.
+ *
+ * What is sent: the email (required), the name, and the other fields a person typed, never passwords, card fields,
+ * hidden fields, files or fields whose name looks sensitive (`SENSITIVE`); a field or form part marked
+ * `data-mrrocket-ignore` stays out too. Plus the form's name, the page, the referrer, UTM, and the state of a checkbox
+ * marked `data-mrrocket-consent` (the visitor's own yes to hear from the site). MRRocket records consent as the contact's
+ * legal basis only when that box was ticked.
+ *
+ * No React and no globals beyond the DOM, so the script tag (`sdk-forms.js`, loaded only on pages with a form to
+ * capture) and the Next.js provider (a dynamic import) share it. `fieldsOf` is pure for the tests.
+ */
+/** Field names that never leave the page, whatever the form says. */
+export declare const SENSITIVE: RegExp;
+export declare const EMAIL_RE: RegExp;
+/** Limits: what a lead may carry, also checked again by the server. */
+export declare const MAX_FIELDS = 30;
+export declare const MAX_VALUE = 1000;
+/** One control of a form as the filter sees it. */
+export interface FieldInput {
+    name: string;
+    type: string;
+    value: string;
+    autocomplete?: string;
+    /** A checkbox or radio that is not ticked. */
+    unchecked?: boolean;
+    /** Marked `data-mrrocket-ignore` (itself or a part of the form around it). */
+    ignored?: boolean;
+    /** Marked `data-mrrocket-consent`. */
+    consent?: boolean;
+}
+export interface FormFields {
+    email: string | null;
+    name: string | null;
+    /** The other fields, by name; checkbox groups joined with ", ". */
+    fields: Record<string, string>;
+    /** True or false when the form has a checkbox marked `data-mrrocket-consent`; undefined without one. */
+    consent?: boolean;
+}
+/** Whether a field's value may be sent: not a password, card, hidden or sensitive-looking field. */
+export declare const sendable: (f: Pick<FieldInput, "name" | "type" | "autocomplete" | "ignored">) => boolean;
+/**
+ * The lead in a form's controls: the email (first valid one), the name (a full-name field, or first and last), the
+ * consent box's state, and the other sendable fields. Pure.
+ */
+export declare const fieldsOf: (inputs: FieldInput[]) => FormFields;
+/** What the page sends to `POST /api/sdk/forms`. */
+export interface FormLead extends FormFields {
+    key: string;
+    form: string;
+    url: string;
+    title?: string;
+    referrer?: string;
+    utm?: Record<string, string>;
+    distinctId?: string;
+}
+/** The form's name: the value of `data-mrrocket-form`, else its name, id or label, else "Form on /path". */
+export declare const formName: (form: HTMLFormElement) => string;
+/** Whether a form is captured: marked, or (auto) one with an email field and no password field. */
+export declare const captures: (form: HTMLFormElement, auto: boolean) => boolean;
+/** The controls of a form, read for `fieldsOf`. */
+export declare const inputsOf: (form: HTMLFormElement) => FieldInput[];
+export interface WatchFormsOptions {
+    host: string;
+    apiKey: string;
+    /** Also forms with an email field that are not marked (default false). */
+    auto?: boolean;
+    /** The visitor id to link the lead to, while analytics consent allows one. */
+    distinctId: () => string | undefined;
+    /** Whether the site already called identify(). */
+    identified: () => boolean;
+    /** Links this visitor's history to the person (the SDK's own identify). */
+    identify: (id: string, props: Record<string, unknown>) => void;
+    /** Whether analytics consent lets the SDK identify the visitor (not "off"). */
+    tracking: () => boolean;
+    referrer?: () => string | undefined;
+    utm?: () => Record<string, string | undefined> | undefined;
+}
+/**
+ * Captures submits from now on (one listener on the document, capture phase, so it sees forms that render later and
+ * forms whose own handler stops the event). The lead goes out with `sendBeacon`, which survives the page leaving. Returns
+ * a function that stops it. Calling it twice keeps one listener.
+ */
+export declare const watchForms: (o: WatchFormsOptions) => (() => void);

package/dist/forms.js

@@ -0,0 +1,124 @@
+// src/forms.ts
+var SENSITIVE = /pass(word|wd|code)?|pwd|secret|token|csrf|xsrf|nonce|captcha|honeypot|card|^cc([-_ ]|num|exp|$)|cvv|cvc|csc|expir|iban|(^|[^a-z])bic([^a-z]|$)|swift|routing|account[-_ ]?(no|num)|sort[-_ ]?code|(^|[^a-z])ssn([^a-z]|$)|social[-_ ]?sec|tax[-_ ]?id|vat[-_ ]?id|steuer|passport|(^|[^a-z])(pin|otp|pw)([^a-z]|$)|one[-_ ]?time|auth(?!or)|api[-_ ]?key|session|signature/i;
+var SKIP_TYPES = /* @__PURE__ */ new Set(["password", "hidden", "file", "submit", "button", "reset", "image"]);
+var EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]{2,}$/;
+var MAX_FIELDS = 30;
+var MAX_VALUE = 1e3;
+var norm = (s) => s.toLowerCase().replace(/[\s_-]+/g, "");
+var sendable = (f) => {
+  if (f.ignored || SKIP_TYPES.has(f.type)) return false;
+  const ac = (f.autocomplete ?? "").toLowerCase();
+  if (/^cc-|password|one-time-code/.test(ac)) return false;
+  return !SENSITIVE.test(f.name);
+};
+var isEmailField = (f) => f.type === "email" || /e-?mail/i.test(f.name) || f.autocomplete === "email";
+var fieldsOf = (inputs) => {
+  let email = null;
+  let full = null;
+  let first = null;
+  let last = null;
+  let consent;
+  const fields = {};
+  for (const f of inputs) {
+    if (f.consent) {
+      consent = (consent ?? false) || !f.unchecked;
+      continue;
+    }
+    if (!f.name || !sendable(f) || f.unchecked) continue;
+    const value = f.value.trim().slice(0, MAX_VALUE);
+    if (!value) continue;
+    const n = norm(f.name);
+    const ac = (f.autocomplete ?? "").toLowerCase();
+    if (!email && isEmailField(f) && EMAIL_RE.test(value)) {
+      email = value.toLowerCase();
+      continue;
+    }
+    if (!full && (ac === "name" || ["name", "fullname", "yourname", "contactname"].includes(n))) {
+      full = value.slice(0, 100);
+      continue;
+    }
+    if (!first && (ac === "given-name" || ["firstname", "first", "vorname", "givenname", "fname"].includes(n))) {
+      first = value.slice(0, 60);
+      continue;
+    }
+    if (!last && (ac === "family-name" || ["lastname", "last", "nachname", "surname", "familyname", "lname"].includes(n))) {
+      last = value.slice(0, 60);
+      continue;
+    }
+    const key = f.name.trim().slice(0, 60);
+    if (key in fields) fields[key] = `${fields[key]}, ${value}`.slice(0, MAX_VALUE);
+    else if (Object.keys(fields).length < MAX_FIELDS) fields[key] = value;
+  }
+  const name = full ?? ([first, last].filter(Boolean).join(" ") || null);
+  return { email, name, fields, ...consent === void 0 ? {} : { consent } };
+};
+var formName = (form) => (form.getAttribute("data-mrrocket-form") || form.getAttribute("name") || form.id || form.getAttribute("aria-label") || `Form on ${window.location.pathname}`).trim().slice(0, 100);
+var captures = (form, auto) => {
+  if (form.closest("[data-mrrocket-ignore]")) return false;
+  if (form.hasAttribute("data-mrrocket-form")) return true;
+  return auto && !!form.querySelector('input[type="email"], input[name*="email" i]') && !form.querySelector('input[type="password"]');
+};
+var inputsOf = (form) => Array.from(form.elements).flatMap((el) => {
+  if (!(el instanceof HTMLInputElement || el instanceof HTMLSelectElement || el instanceof HTMLTextAreaElement)) return [];
+  if (el.disabled) return [];
+  const type = el instanceof HTMLInputElement ? el.type.toLowerCase() : el instanceof HTMLSelectElement ? "select" : "textarea";
+  const check = type === "checkbox" || type === "radio";
+  const value = el instanceof HTMLSelectElement && el.multiple ? Array.from(el.selectedOptions, (o) => o.value).join(", ") : check && el.value === "on" ? "yes" : el.value;
+  return [
+    {
+      name: el.name || el.id || "",
+      type,
+      value,
+      autocomplete: el.getAttribute("autocomplete") ?? void 0,
+      unchecked: check && !el.checked,
+      ignored: !!el.closest("[data-mrrocket-ignore]"),
+      consent: el.hasAttribute("data-mrrocket-consent")
+    }
+  ];
+});
+var watchForms = (o) => {
+  const w = window;
+  w.__mrrocketFormsOff?.();
+  const onSubmit = (e) => {
+    const form = e.target;
+    if (!(form instanceof HTMLFormElement) || !captures(form, !!o.auto)) return;
+    const read = fieldsOf(inputsOf(form));
+    if (!read.email) return;
+    const utm = Object.fromEntries(Object.entries(o.utm?.() ?? {}).filter((x) => typeof x[1] === "string" && !!x[1]));
+    const lead = {
+      key: o.apiKey,
+      form: formName(form),
+      url: window.location.href.slice(0, 500),
+      title: document.title.slice(0, 200) || void 0,
+      referrer: o.referrer?.() || document.referrer || void 0,
+      ...Object.keys(utm).length ? { utm } : {},
+      distinctId: o.distinctId(),
+      ...read
+    };
+    const body = JSON.stringify(lead);
+    const url = `${o.host}/api/sdk/forms`;
+    const sent = "sendBeacon" in navigator && navigator.sendBeacon(url, new Blob([body], { type: "text/plain" }));
+    if (!sent) void fetch(url, { method: "POST", headers: { "content-type": "text/plain" }, body, keepalive: true }).catch(() => void 0);
+    if (o.tracking() && !o.identified()) o.identify(read.email, { email: read.email, ...read.name ? { name: read.name } : {} });
+  };
+  document.addEventListener("submit", onSubmit, true);
+  const off = () => {
+    document.removeEventListener("submit", onSubmit, true);
+    if (w.__mrrocketFormsOff === off) delete w.__mrrocketFormsOff;
+  };
+  w.__mrrocketFormsOff = off;
+  return off;
+};
+export {
+  EMAIL_RE,
+  MAX_FIELDS,
+  MAX_VALUE,
+  SENSITIVE,
+  captures,
+  fieldsOf,
+  formName,
+  inputsOf,
+  sendable,
+  watchForms
+};
+//# sourceMappingURL=forms.js.map

package/dist/forms.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/forms.ts"],"sourcesContent":["/**\n * Form leads (0.12.0): a form on the customer's site becomes a contact in MRRocket when it is submitted. Forms marked\n * `data-mrrocket-form` (its value names the form, e.g. `data-mrrocket-form=\"Demo request\"`) are captured; with\n * auto-detection on (`data-forms=\"auto\"` on the script tag, `forms=\"auto\"` on the provider) also any form with an email\n * field, except forms with a password field (sign-in and sign-up) and forms marked `data-mrrocket-ignore`.\n *\n * What is sent: the email (required), the name, and the other fields a person typed, never passwords, card fields,\n * hidden fields, files or fields whose name looks sensitive (`SENSITIVE`); a field or form part marked\n * `data-mrrocket-ignore` stays out too. Plus the form's name, the page, the referrer, UTM, and the state of a checkbox\n * marked `data-mrrocket-consent` (the visitor's own yes to hear from the site). MRRocket records consent as the contact's\n * legal basis only when that box was ticked.\n *\n * No React and no globals beyond the DOM, so the script tag (`sdk-forms.js`, loaded only on pages with a form to\n * capture) and the Next.js provider (a dynamic import) share it. `fieldsOf` is pure for the tests.\n */\n\n/** Field names that never leave the page, whatever the form says. */\nexport const SENSITIVE =\n    /pass(word|wd|code)?|pwd|secret|token|csrf|xsrf|nonce|captcha|honeypot|card|^cc([-_ ]|num|exp|$)|cvv|cvc|csc|expir|iban|(^|[^a-z])bic([^a-z]|$)|swift|routing|account[-_ ]?(no|num)|sort[-_ ]?code|(^|[^a-z])ssn([^a-z]|$)|social[-_ ]?sec|tax[-_ ]?id|vat[-_ ]?id|steuer|passport|(^|[^a-z])(pin|otp|pw)([^a-z]|$)|one[-_ ]?time|auth(?!or)|api[-_ ]?key|session|signature/i;\n\n/** Input types whose value is never sent. */\nconst SKIP_TYPES = new Set([\"password\", \"hidden\", \"file\", \"submit\", \"button\", \"reset\", \"image\"]);\n\nexport const EMAIL_RE = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]{2,}$/;\n\n/** Limits: what a lead may carry, also checked again by the server. */\nexport const MAX_FIELDS = 30;\nexport const MAX_VALUE = 1000;\n\n/** One control of a form as the filter sees it. */\nexport interface FieldInput {\n    name: string;\n    type: string;\n    value: string;\n    autocomplete?: string;\n    /** A checkbox or radio that is not ticked. */\n    unchecked?: boolean;\n    /** Marked `data-mrrocket-ignore` (itself or a part of the form around it). */\n    ignored?: boolean;\n    /** Marked `data-mrrocket-consent`. */\n    consent?: boolean;\n}\n\nexport interface FormFields {\n    email: string | null;\n    name: string | null;\n    /** The other fields, by name; checkbox groups joined with \", \". */\n    fields: Record<string, string>;\n    /** True or false when the form has a checkbox marked `data-mrrocket-consent`; undefined without one. */\n    consent?: boolean;\n}\n\nconst norm = (s: string) => s.toLowerCase().replace(/[\\s_-]+/g, \"\");\n\n/** Whether a field's value may be sent: not a password, card, hidden or sensitive-looking field. */\nexport const sendable = (f: Pick<FieldInput, \"name\" | \"type\" | \"autocomplete\" | \"ignored\">) => {\n    if (f.ignored || SKIP_TYPES.has(f.type)) return false;\n    const ac = (f.autocomplete ?? \"\").toLowerCase();\n    if (/^cc-|password|one-time-code/.test(ac)) return false;\n    return !SENSITIVE.test(f.name);\n};\n\nconst isEmailField = (f: FieldInput) => f.type === \"email\" || /e-?mail/i.test(f.name) || f.autocomplete === \"email\";\n\n/**\n * The lead in a form's controls: the email (first valid one), the name (a full-name field, or first and last), the\n * consent box's state, and the other sendable fields. Pure.\n */\nexport const fieldsOf = (inputs: FieldInput[]): FormFields => {\n    let email: string | null = null;\n    let full: string | null = null;\n    let first: string | null = null;\n    let last: string | null = null;\n    let consent: boolean | undefined;\n    const fields: Record<string, string> = {};\n    for (const f of inputs) {\n        if (f.consent) {\n            consent = (consent ?? false) || !f.unchecked;\n            continue;\n        }\n        if (!f.name || !sendable(f) || f.unchecked) continue;\n        const value = f.value.trim().slice(0, MAX_VALUE);\n        if (!value) continue;\n        const n = norm(f.name);\n        const ac = (f.autocomplete ?? \"\").toLowerCase();\n        if (!email && isEmailField(f) && EMAIL_RE.test(value)) {\n            email = value.toLowerCase();\n            continue;\n        }\n        if (!full && (ac === \"name\" || [\"name\", \"fullname\", \"yourname\", \"contactname\"].includes(n))) {\n            full = value.slice(0, 100);\n            continue;\n        }\n        if (!first && (ac === \"given-name\" || [\"firstname\", \"first\", \"vorname\", \"givenname\", \"fname\"].includes(n))) {\n            first = value.slice(0, 60);\n            continue;\n        }\n        if (!last && (ac === \"family-name\" || [\"lastname\", \"last\", \"nachname\", \"surname\", \"familyname\", \"lname\"].includes(n))) {\n            last = value.slice(0, 60);\n            continue;\n        }\n        const key = f.name.trim().slice(0, 60);\n        if (key in fields) fields[key] = `${fields[key]}, ${value}`.slice(0, MAX_VALUE);\n        else if (Object.keys(fields).length < MAX_FIELDS) fields[key] = value;\n    }\n    const name = full ?? ([first, last].filter(Boolean).join(\" \") || null);\n    return { email, name, fields, ...(consent === undefined ? {} : { consent }) };\n};\n\n/** What the page sends to `POST /api/sdk/forms`. */\nexport interface FormLead extends FormFields {\n    key: string;\n    form: string;\n    url: string;\n    title?: string;\n    referrer?: string;\n    utm?: Record<string, string>;\n    distinctId?: string;\n}\n\n/** The form's name: the value of `data-mrrocket-form`, else its name, id or label, else \"Form on /path\". */\nexport const formName = (form: HTMLFormElement) =>\n    (form.getAttribute(\"data-mrrocket-form\") || form.getAttribute(\"name\") || form.id || form.getAttribute(\"aria-label\") || `Form on ${window.location.pathname}`)\n        .trim()\n        .slice(0, 100);\n\n/** Whether a form is captured: marked, or (auto) one with an email field and no password field. */\nexport const captures = (form: HTMLFormElement, auto: boolean) => {\n    if (form.closest(\"[data-mrrocket-ignore]\")) return false;\n    if (form.hasAttribute(\"data-mrrocket-form\")) return true;\n    return auto && !!form.querySelector('input[type=\"email\"], input[name*=\"email\" i]') && !form.querySelector('input[type=\"password\"]');\n};\n\n/** The controls of a form, read for `fieldsOf`. */\nexport const inputsOf = (form: HTMLFormElement): FieldInput[] =>\n    Array.from(form.elements).flatMap((el) => {\n        if (!(el instanceof HTMLInputElement || el instanceof HTMLSelectElement || el instanceof HTMLTextAreaElement)) return [];\n        if (el.disabled) return [];\n        const type = el instanceof HTMLInputElement ? el.type.toLowerCase() : el instanceof HTMLSelectElement ? \"select\" : \"textarea\";\n        const check = type === \"checkbox\" || type === \"radio\";\n        const value = el instanceof HTMLSelectElement && el.multiple ? Array.from(el.selectedOptions, (o) => o.value).join(\", \") : check && el.value === \"on\" ? \"yes\" : el.value;\n        return [\n            {\n                name: el.name || el.id || \"\",\n                type,\n                value,\n                autocomplete: el.getAttribute(\"autocomplete\") ?? undefined,\n                unchecked: check && !(el as HTMLInputElement).checked,\n                ignored: !!el.closest(\"[data-mrrocket-ignore]\"),\n                consent: el.hasAttribute(\"data-mrrocket-consent\"),\n            },\n        ];\n    });\n\nexport interface WatchFormsOptions {\n    host: string;\n    apiKey: string;\n    /** Also forms with an email field that are not marked (default false). */\n    auto?: boolean;\n    /** The visitor id to link the lead to, while analytics consent allows one. */\n    distinctId: () => string | undefined;\n    /** Whether the site already called identify(). */\n    identified: () => boolean;\n    /** Links this visitor's history to the person (the SDK's own identify). */\n    identify: (id: string, props: Record<string, unknown>) => void;\n    /** Whether analytics consent lets the SDK identify the visitor (not \"off\"). */\n    tracking: () => boolean;\n    referrer?: () => string | undefined;\n    utm?: () => Record<string, string | undefined> | undefined;\n}\n\n/**\n * Captures submits from now on (one listener on the document, capture phase, so it sees forms that render later and\n * forms whose own handler stops the event). The lead goes out with `sendBeacon`, which survives the page leaving. Returns\n * a function that stops it. Calling it twice keeps one listener.\n */\nexport const watchForms = (o: WatchFormsOptions): (() => void) => {\n    const w = window as Window & { __mrrocketFormsOff?: () => void };\n    w.__mrrocketFormsOff?.();\n    const onSubmit = (e: Event) => {\n        const form = e.target;\n        if (!(form instanceof HTMLFormElement) || !captures(form, !!o.auto)) return;\n        const read = fieldsOf(inputsOf(form));\n        if (!read.email) return;\n        const utm = Object.fromEntries(Object.entries(o.utm?.() ?? {}).filter((x): x is [string, string] => typeof x[1] === \"string\" && !!x[1]));\n        const lead: FormLead = {\n            key: o.apiKey,\n            form: formName(form),\n            url: window.location.href.slice(0, 500),\n            title: document.title.slice(0, 200) || undefined,\n            referrer: o.referrer?.() || document.referrer || undefined,\n            ...(Object.keys(utm).length ? { utm } : {}),\n            distinctId: o.distinctId(),\n            ...read,\n        };\n        const body = JSON.stringify(lead);\n        const url = `${o.host}/api/sdk/forms`;\n        // text/plain keeps it a simple request (no CORS preflight), which sendBeacon needs anyway.\n        const sent = \"sendBeacon\" in navigator && navigator.sendBeacon(url, new Blob([body], { type: \"text/plain\" }));\n        if (!sent) void fetch(url, { method: \"POST\", headers: { \"content-type\": \"text/plain\" }, body, keepalive: true }).catch(() => undefined);\n        // Their visits before the form and after it belong to the same person from now on.\n        if (o.tracking() && !o.identified()) o.identify(read.email, { email: read.email, ...(read.name ? { name: read.name } : {}) });\n    };\n    document.addEventListener(\"submit\", onSubmit, true);\n    const off = () => {\n        document.removeEventListener(\"submit\", onSubmit, true);\n        if (w.__mrrocketFormsOff === off) delete w.__mrrocketFormsOff;\n    };\n    w.__mrrocketFormsOff = off;\n    return off;\n};\n"],"mappings":";AAiBO,IAAM,YACT;AAGJ,IAAM,aAAa,oBAAI,IAAI,CAAC,YAAY,UAAU,QAAQ,UAAU,UAAU,SAAS,OAAO,CAAC;AAExF,IAAM,WAAW;AAGjB,IAAM,aAAa;AACnB,IAAM,YAAY;AAyBzB,IAAM,OAAO,CAAC,MAAc,EAAE,YAAY,EAAE,QAAQ,YAAY,EAAE;AAG3D,IAAM,WAAW,CAAC,MAAsE;AAC3F,MAAI,EAAE,WAAW,WAAW,IAAI,EAAE,IAAI,EAAG,QAAO;AAChD,QAAM,MAAM,EAAE,gBAAgB,IAAI,YAAY;AAC9C,MAAI,8BAA8B,KAAK,EAAE,EAAG,QAAO;AACnD,SAAO,CAAC,UAAU,KAAK,EAAE,IAAI;AACjC;AAEA,IAAM,eAAe,CAAC,MAAkB,EAAE,SAAS,WAAW,WAAW,KAAK,EAAE,IAAI,KAAK,EAAE,iBAAiB;AAMrG,IAAM,WAAW,CAAC,WAAqC;AAC1D,MAAI,QAAuB;AAC3B,MAAI,OAAsB;AAC1B,MAAI,QAAuB;AAC3B,MAAI,OAAsB;AAC1B,MAAI;AACJ,QAAM,SAAiC,CAAC;AACxC,aAAW,KAAK,QAAQ;AACpB,QAAI,EAAE,SAAS;AACX,iBAAW,WAAW,UAAU,CAAC,EAAE;AACnC;AAAA,IACJ;AACA,QAAI,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,UAAW;AAC5C,UAAM,QAAQ,EAAE,MAAM,KAAK,EAAE,MAAM,GAAG,SAAS;AAC/C,QAAI,CAAC,MAAO;AACZ,UAAM,IAAI,KAAK,EAAE,IAAI;AACrB,UAAM,MAAM,EAAE,gBAAgB,IAAI,YAAY;AAC9C,QAAI,CAAC,SAAS,aAAa,CAAC,KAAK,SAAS,KAAK,KAAK,GAAG;AACnD,cAAQ,MAAM,YAAY;AAC1B;AAAA,IACJ;AACA,QAAI,CAAC,SAAS,OAAO,UAAU,CAAC,QAAQ,YAAY,YAAY,aAAa,EAAE,SAAS,CAAC,IAAI;AACzF,aAAO,MAAM,MAAM,GAAG,GAAG;AACzB;AAAA,IACJ;AACA,QAAI,CAAC,UAAU,OAAO,gBAAgB,CAAC,aAAa,SAAS,WAAW,aAAa,OAAO,EAAE,SAAS,CAAC,IAAI;AACxG,cAAQ,MAAM,MAAM,GAAG,EAAE;AACzB;AAAA,IACJ;AACA,QAAI,CAAC,SAAS,OAAO,iBAAiB,CAAC,YAAY,QAAQ,YAAY,WAAW,cAAc,OAAO,EAAE,SAAS,CAAC,IAAI;AACnH,aAAO,MAAM,MAAM,GAAG,EAAE;AACxB;AAAA,IACJ;AACA,UAAM,MAAM,EAAE,KAAK,KAAK,EAAE,MAAM,GAAG,EAAE;AACrC,QAAI,OAAO,OAAQ,QAAO,GAAG,IAAI,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,GAAG,MAAM,GAAG,SAAS;AAAA,aACrE,OAAO,KAAK,MAAM,EAAE,SAAS,WAAY,QAAO,GAAG,IAAI;AAAA,EACpE;AACA,QAAM,OAAO,SAAS,CAAC,OAAO,IAAI,EAAE,OAAO,OAAO,EAAE,KAAK,GAAG,KAAK;AACjE,SAAO,EAAE,OAAO,MAAM,QAAQ,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ,EAAG;AAChF;AAcO,IAAM,WAAW,CAAC,UACpB,KAAK,aAAa,oBAAoB,KAAK,KAAK,aAAa,MAAM,KAAK,KAAK,MAAM,KAAK,aAAa,YAAY,KAAK,WAAW,OAAO,SAAS,QAAQ,IACrJ,KAAK,EACL,MAAM,GAAG,GAAG;AAGd,IAAM,WAAW,CAAC,MAAuB,SAAkB;AAC9D,MAAI,KAAK,QAAQ,wBAAwB,EAAG,QAAO;AACnD,MAAI,KAAK,aAAa,oBAAoB,EAAG,QAAO;AACpD,SAAO,QAAQ,CAAC,CAAC,KAAK,cAAc,6CAA6C,KAAK,CAAC,KAAK,cAAc,wBAAwB;AACtI;AAGO,IAAM,WAAW,CAAC,SACrB,MAAM,KAAK,KAAK,QAAQ,EAAE,QAAQ,CAAC,OAAO;AACtC,MAAI,EAAE,cAAc,oBAAoB,cAAc,qBAAqB,cAAc,qBAAsB,QAAO,CAAC;AACvH,MAAI,GAAG,SAAU,QAAO,CAAC;AACzB,QAAM,OAAO,cAAc,mBAAmB,GAAG,KAAK,YAAY,IAAI,cAAc,oBAAoB,WAAW;AACnH,QAAM,QAAQ,SAAS,cAAc,SAAS;AAC9C,QAAM,QAAQ,cAAc,qBAAqB,GAAG,WAAW,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,SAAS,GAAG,UAAU,OAAO,QAAQ,GAAG;AACnK,SAAO;AAAA,IACH;AAAA,MACI,MAAM,GAAG,QAAQ,GAAG,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,cAAc,GAAG,aAAa,cAAc,KAAK;AAAA,MACjD,WAAW,SAAS,CAAE,GAAwB;AAAA,MAC9C,SAAS,CAAC,CAAC,GAAG,QAAQ,wBAAwB;AAAA,MAC9C,SAAS,GAAG,aAAa,uBAAuB;AAAA,IACpD;AAAA,EACJ;AACJ,CAAC;AAwBE,IAAM,aAAa,CAAC,MAAuC;AAC9D,QAAM,IAAI;AACV,IAAE,qBAAqB;AACvB,QAAM,WAAW,CAAC,MAAa;AAC3B,UAAM,OAAO,EAAE;AACf,QAAI,EAAE,gBAAgB,oBAAoB,CAAC,SAAS,MAAM,CAAC,CAAC,EAAE,IAAI,EAAG;AACrE,UAAM,OAAO,SAAS,SAAS,IAAI,CAAC;AACpC,QAAI,CAAC,KAAK,MAAO;AACjB,UAAM,MAAM,OAAO,YAAY,OAAO,QAAQ,EAAE,MAAM,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,MAA6B,OAAO,EAAE,CAAC,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACvI,UAAM,OAAiB;AAAA,MACnB,KAAK,EAAE;AAAA,MACP,MAAM,SAAS,IAAI;AAAA,MACnB,KAAK,OAAO,SAAS,KAAK,MAAM,GAAG,GAAG;AAAA,MACtC,OAAO,SAAS,MAAM,MAAM,GAAG,GAAG,KAAK;AAAA,MACvC,UAAU,EAAE,WAAW,KAAK,SAAS,YAAY;AAAA,MACjD,GAAI,OAAO,KAAK,GAAG,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC;AAAA,MACzC,YAAY,EAAE,WAAW;AAAA,MACzB,GAAG;AAAA,IACP;AACA,UAAM,OAAO,KAAK,UAAU,IAAI;AAChC,UAAM,MAAM,GAAG,EAAE,IAAI;AAErB,UAAM,OAAO,gBAAgB,aAAa,UAAU,WAAW,KAAK,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,MAAM,aAAa,CAAC,CAAC;AAC5G,QAAI,CAAC,KAAM,MAAK,MAAM,KAAK,EAAE,QAAQ,QAAQ,SAAS,EAAE,gBAAgB,aAAa,GAAG,MAAM,WAAW,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AAEtI,QAAI,EAAE,SAAS,KAAK,CAAC,EAAE,WAAW,EAAG,GAAE,SAAS,KAAK,OAAO,EAAE,OAAO,KAAK,OAAO,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC,EAAG,CAAC;AAAA,EAChI;AACA,WAAS,iBAAiB,UAAU,UAAU,IAAI;AAClD,QAAM,MAAM,MAAM;AACd,aAAS,oBAAoB,UAAU,UAAU,IAAI;AACrD,QAAI,EAAE,uBAAuB,IAAK,QAAO,EAAE;AAAA,EAC/C;AACA,IAAE,qBAAqB;AACvB,SAAO;AACX;","names":[]}

package/dist/react-native/index.d.cts

@@ -421,7 +421,7 @@ interface FlowsController {
 
 type VariantId = string;
 /** This build of the SDK. Sent with the config request so MRRocket knows what the site runs (error tracking, flags). */
-declare const SDK_VERSION = "0.11.0";
+declare const SDK_VERSION = "0.12.0";
 /** One variant of an experiment. `changes` replaces texts that the page marks with `<Text id>`. */
 interface VariantConfig {
     id: VariantId;

package/dist/react-native/index.d.ts

@@ -421,7 +421,7 @@ interface FlowsController {
 
 type VariantId = string;
 /** This build of the SDK. Sent with the config request so MRRocket knows what the site runs (error tracking, flags). */
-declare const SDK_VERSION = "0.11.0";
+declare const SDK_VERSION = "0.12.0";
 /** One variant of an experiment. `changes` replaces texts that the page marks with `<Text id>`. */
 interface VariantConfig {
     id: VariantId;

package/dist/react-native/index.js

@@ -49,7 +49,7 @@ module.exports = __toCommonJS(native_exports);
 var import_react3 = require("react");
 
 // src/core.ts
-var SDK_VERSION = "0.11.0";
+var SDK_VERSION = "0.12.0";
 var propOf = (person, name) => {
   const want = name.trim().toLowerCase();
   for (const [k, v] of Object.entries(person)) if (k.toLowerCase() === want) return v;