@mrrocket/sdk 0.14.0 → 0.16.0

package/dist/push-web.js

@@ -1,4 +1,5 @@
 // src/push-web.ts
+import { warnUnsigned } from "./identity.js";
 var b64urlBytes = (s) => {
   const bin = atob(s.replace(/-/g, "+").replace(/_/g, "/").padEnd(Math.ceil(s.length / 4) * 4, "="));
   const out = new Uint8Array(bin.length);
@@ -49,8 +50,9 @@ var subscribeWebPush = async (ctx, options = {}) => {
     const saved = await fetch(`${ctx.host}/api/sdk/push`, {
       method: "POST",
       headers: { "content-type": "application/json" },
-      body: JSON.stringify({ key: ctx.apiKey, distinctId: ctx.distinctId, platform: "web", subscription: sub.toJSON(), host: ctx.host })
+      body: JSON.stringify({ key: ctx.apiKey, distinctId: ctx.distinctId, userHash: ctx.userHash, platform: "web", subscription: sub.toJSON(), host: ctx.host })
     });
+    warnUnsigned(saved.status);
     return saved.ok ? { status: "subscribed" } : { status: "error", reason: `MRRocket answered ${saved.status}.` };
   } catch (e) {
     return { status: "error", reason: e instanceof Error ? e.message : String(e) };
@@ -65,7 +67,7 @@ var unsubscribeWebPush = async (ctx) => {
     await fetch(`${ctx.host}/api/sdk/push`, {
       method: "POST",
       headers: { "content-type": "application/json" },
-      body: JSON.stringify({ key: ctx.apiKey, distinctId: ctx.distinctId, platform: "web", remove: true, endpoint: sub.endpoint })
+      body: JSON.stringify({ key: ctx.apiKey, distinctId: ctx.distinctId, userHash: ctx.userHash, platform: "web", remove: true, endpoint: sub.endpoint })
     }).catch(() => null);
     return await sub.unsubscribe();
   } catch {

package/dist/push-web.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/push-web.ts"],"sourcesContent":["/**\n * Web push in the browser (SDK 0.7.0): signs the signed-in person up for push notifications from the product's Lifecycle\n * journeys. Loaded only when the site calls `push.subscribe()` (a dynamic import in Next.js, `sdk-push.js` for the script\n * tag), so pages that never ask carry none of it.\n *\n * 1. The browser's permission (asked only from a click, and only when the site says so; `ask: false` only re-sends an\n *    existing subscription).\n * 2. The service worker the site hosts (`/mrrocket-sw.js`, a copy of the file MRRocket serves), registered with the\n *    public key and MRRocket's address in its URL, so it can report opened notifications. A site with its own service\n *    worker imports ours there and passes `serviceWorker: false`.\n * 3. The workspace's VAPID key from `GET /api/sdk/push`, the browser's subscription with it, and the subscription sent to\n *    `POST /api/sdk/push` for this person. A subscription made with another key is replaced.\n */\nexport type PushStatus = \"subscribed\" | \"denied\" | \"not-asked\" | \"unsupported\" | \"not-signed-in\" | \"error\";\n\nexport interface PushResult {\n    status: PushStatus;\n    /** What went wrong, for \"error\" and \"unsupported\". */\n    reason?: string;\n}\n\nexport interface WebPushOptions {\n    /**\n     * The service worker's path on your site (default \"/mrrocket-sw.js\"), or false when your site already has one that\n     * imports ours (`importScripts(\"/mrrocket-sw.js\")`): the SDK then uses the one that is active.\n     */\n    serviceWorker?: string | false;\n    /** Ask for the permission when it was not given yet (default true). False: only re-send an existing subscription. */\n    ask?: boolean;\n}\n\nexport interface WebPushContext {\n    host: string;\n    apiKey: string;\n    /** The identify() id; push needs a signed-in person. */\n    distinctId: string | undefined;\n    /** The permission, asked synchronously by the caller inside the click (Safari needs that), or the current one. */\n    permission?: Promise<NotificationPermission>;\n}\n\nconst b64urlBytes = (s: string) => {\n    const bin = atob(s.replace(/-/g, \"+\").replace(/_/g, \"/\").padEnd(Math.ceil(s.length / 4) * 4, \"=\"));\n    const out = new Uint8Array(bin.length);\n    for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n    return out;\n};\n\nconst sameKey = (a: ArrayBuffer | null | undefined, b: Uint8Array) => {\n    if (!a) return false;\n    const x = new Uint8Array(a);\n    return x.length === b.length && x.every((v, i) => v === b[i]);\n};\n\n/** True where the browser can receive web push (Safari 16.4+ only for sites added to the Home Screen on iOS). */\nexport const webPushSupported = () =>\n    typeof window !== \"undefined\" && \"serviceWorker\" in navigator && \"PushManager\" in window && \"Notification\" in window;\n\n/** The permission, asked right away when `ask` and not given yet. Call it synchronously in the click handler. */\nexport const askPermission = (ask = true): Promise<NotificationPermission> => {\n    if (!webPushSupported()) return Promise.resolve(\"denied\");\n    if (Notification.permission !== \"default\" || !ask) return Promise.resolve(Notification.permission);\n    try {\n        return Promise.resolve(Notification.requestPermission());\n    } catch {\n        return Promise.resolve(\"denied\");\n    }\n};\n\nconst registration = async (host: string, apiKey: string, sw: string | false) => {\n    if (sw !== false) {\n        const url = `${sw}?key=${encodeURIComponent(apiKey)}&host=${encodeURIComponent(host)}`;\n        await navigator.serviceWorker.register(url);\n    }\n    return navigator.serviceWorker.ready;\n};\n\nexport const subscribeWebPush = async (ctx: WebPushContext, options: WebPushOptions = {}): Promise<PushResult> => {\n    if (!webPushSupported()) return { status: \"unsupported\", reason: \"This browser has no web push.\" };\n    if (!ctx.distinctId) return { status: \"not-signed-in\" };\n    const ask = options.ask !== false;\n    const permission = await (ctx.permission ?? askPermission(ask));\n    if (permission === \"denied\") return { status: \"denied\" };\n    if (permission !== \"granted\") return { status: ask ? \"denied\" : \"not-asked\" };\n    try {\n        const r = await fetch(`${ctx.host}/api/sdk/push?key=${encodeURIComponent(ctx.apiKey)}`);\n        const vapid = r.ok ? ((await r.json()) as { web?: { vapidKey?: string } }).web?.vapidKey : undefined;\n        if (!vapid) return { status: \"error\", reason: `MRRocket answered ${r.status} for the push key.` };\n        const key = b64urlBytes(vapid);\n        const reg = await registration(ctx.host, ctx.apiKey, options.serviceWorker ?? \"/mrrocket-sw.js\");\n        let sub = await reg.pushManager.getSubscription();\n        if (sub && !sameKey(sub.options?.applicationServerKey, key)) {\n            await sub.unsubscribe().catch(() => false);\n            sub = null;\n        }\n        sub ??= await reg.pushManager.subscribe({ userVisibleOnly: true, applicationServerKey: key });\n        const saved = await fetch(`${ctx.host}/api/sdk/push`, {\n            method: \"POST\",\n            headers: { \"content-type\": \"application/json\" },\n            body: JSON.stringify({ key: ctx.apiKey, distinctId: ctx.distinctId, platform: \"web\", subscription: sub.toJSON(), host: ctx.host }),\n        });\n        return saved.ok ? { status: \"subscribed\" } : { status: \"error\", reason: `MRRocket answered ${saved.status}.` };\n    } catch (e) {\n        return { status: \"error\", reason: e instanceof Error ? e.message : String(e) };\n    }\n};\n\n/** Ends this browser's subscription and tells MRRocket (sign-out, or the person turned push off). */\nexport const unsubscribeWebPush = async (ctx: WebPushContext): Promise<boolean> => {\n    if (!webPushSupported()) return false;\n    try {\n        const reg = await navigator.serviceWorker.getRegistration();\n        const sub = await reg?.pushManager.getSubscription();\n        if (!sub) return false;\n        await fetch(`${ctx.host}/api/sdk/push`, {\n            method: \"POST\",\n            headers: { \"content-type\": \"application/json\" },\n            body: JSON.stringify({ key: ctx.apiKey, distinctId: ctx.distinctId, platform: \"web\", remove: true, endpoint: sub.endpoint }),\n        }).catch(() => null);\n        return await sub.unsubscribe();\n    } catch {\n        return false;\n    }\n};\n"],"mappings":";AAwCA,IAAM,cAAc,CAAC,MAAc;AAC/B,QAAM,MAAM,KAAK,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,EAAE,OAAO,KAAK,KAAK,EAAE,SAAS,CAAC,IAAI,GAAG,GAAG,CAAC;AACjG,QAAM,MAAM,IAAI,WAAW,IAAI,MAAM;AACrC,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,KAAI,CAAC,IAAI,IAAI,WAAW,CAAC;AAC9D,SAAO;AACX;AAEA,IAAM,UAAU,CAAC,GAAmC,MAAkB;AAClE,MAAI,CAAC,EAAG,QAAO;AACf,QAAM,IAAI,IAAI,WAAW,CAAC;AAC1B,SAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,MAAM,MAAM,EAAE,CAAC,CAAC;AAChE;AAGO,IAAM,mBAAmB,MAC5B,OAAO,WAAW,eAAe,mBAAmB,aAAa,iBAAiB,UAAU,kBAAkB;AAG3G,IAAM,gBAAgB,CAAC,MAAM,SAA0C;AAC1E,MAAI,CAAC,iBAAiB,EAAG,QAAO,QAAQ,QAAQ,QAAQ;AACxD,MAAI,aAAa,eAAe,aAAa,CAAC,IAAK,QAAO,QAAQ,QAAQ,aAAa,UAAU;AACjG,MAAI;AACA,WAAO,QAAQ,QAAQ,aAAa,kBAAkB,CAAC;AAAA,EAC3D,QAAQ;AACJ,WAAO,QAAQ,QAAQ,QAAQ;AAAA,EACnC;AACJ;AAEA,IAAM,eAAe,OAAO,MAAc,QAAgB,OAAuB;AAC7E,MAAI,OAAO,OAAO;AACd,UAAM,MAAM,GAAG,EAAE,QAAQ,mBAAmB,MAAM,CAAC,SAAS,mBAAmB,IAAI,CAAC;AACpF,UAAM,UAAU,cAAc,SAAS,GAAG;AAAA,EAC9C;AACA,SAAO,UAAU,cAAc;AACnC;AAEO,IAAM,mBAAmB,OAAO,KAAqB,UAA0B,CAAC,MAA2B;AAC9G,MAAI,CAAC,iBAAiB,EAAG,QAAO,EAAE,QAAQ,eAAe,QAAQ,gCAAgC;AACjG,MAAI,CAAC,IAAI,WAAY,QAAO,EAAE,QAAQ,gBAAgB;AACtD,QAAM,MAAM,QAAQ,QAAQ;AAC5B,QAAM,aAAa,OAAO,IAAI,cAAc,cAAc,GAAG;AAC7D,MAAI,eAAe,SAAU,QAAO,EAAE,QAAQ,SAAS;AACvD,MAAI,eAAe,UAAW,QAAO,EAAE,QAAQ,MAAM,WAAW,YAAY;AAC5E,MAAI;AACA,UAAM,IAAI,MAAM,MAAM,GAAG,IAAI,IAAI,qBAAqB,mBAAmB,IAAI,MAAM,CAAC,EAAE;AACtF,UAAM,QAAQ,EAAE,MAAO,MAAM,EAAE,KAAK,GAAuC,KAAK,WAAW;AAC3F,QAAI,CAAC,MAAO,QAAO,EAAE,QAAQ,SAAS,QAAQ,qBAAqB,EAAE,MAAM,qBAAqB;AAChG,UAAM,MAAM,YAAY,KAAK;AAC7B,UAAM,MAAM,MAAM,aAAa,IAAI,MAAM,IAAI,QAAQ,QAAQ,iBAAiB,iBAAiB;AAC/F,QAAI,MAAM,MAAM,IAAI,YAAY,gBAAgB;AAChD,QAAI,OAAO,CAAC,QAAQ,IAAI,SAAS,sBAAsB,GAAG,GAAG;AACzD,YAAM,IAAI,YAAY,EAAE,MAAM,MAAM,KAAK;AACzC,YAAM;AAAA,IACV;AACA,YAAQ,MAAM,IAAI,YAAY,UAAU,EAAE,iBAAiB,MAAM,sBAAsB,IAAI,CAAC;AAC5F,UAAM,QAAQ,MAAM,MAAM,GAAG,IAAI,IAAI,iBAAiB;AAAA,MAClD,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,KAAK,IAAI,QAAQ,YAAY,IAAI,YAAY,UAAU,OAAO,cAAc,IAAI,OAAO,GAAG,MAAM,IAAI,KAAK,CAAC;AAAA,IACrI,CAAC;AACD,WAAO,MAAM,KAAK,EAAE,QAAQ,aAAa,IAAI,EAAE,QAAQ,SAAS,QAAQ,qBAAqB,MAAM,MAAM,IAAI;AAAA,EACjH,SAAS,GAAG;AACR,WAAO,EAAE,QAAQ,SAAS,QAAQ,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC,EAAE;AAAA,EACjF;AACJ;AAGO,IAAM,qBAAqB,OAAO,QAA0C;AAC/E,MAAI,CAAC,iBAAiB,EAAG,QAAO;AAChC,MAAI;AACA,UAAM,MAAM,MAAM,UAAU,cAAc,gBAAgB;AAC1D,UAAM,MAAM,MAAM,KAAK,YAAY,gBAAgB;AACnD,QAAI,CAAC,IAAK,QAAO;AACjB,UAAM,MAAM,GAAG,IAAI,IAAI,iBAAiB;AAAA,MACpC,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,KAAK,IAAI,QAAQ,YAAY,IAAI,YAAY,UAAU,OAAO,QAAQ,MAAM,UAAU,IAAI,SAAS,CAAC;AAAA,IAC/H,CAAC,EAAE,MAAM,MAAM,IAAI;AACnB,WAAO,MAAM,IAAI,YAAY;AAAA,EACjC,QAAQ;AACJ,WAAO;AAAA,EACX;AACJ;","names":[]}
+{"version":3,"sources":["../src/push-web.ts"],"sourcesContent":["/**\n * Web push in the browser (SDK 0.7.0): signs the signed-in person up for push notifications from the product's Lifecycle\n * journeys. Loaded only when the site calls `push.subscribe()` (a dynamic import in Next.js, `sdk-push.js` for the script\n * tag), so pages that never ask carry none of it.\n *\n * 1. The browser's permission (asked only from a click, and only when the site says so; `ask: false` only re-sends an\n *    existing subscription).\n * 2. The service worker the site hosts (`/mrrocket-sw.js`, a copy of the file MRRocket serves), registered with the\n *    public key and MRRocket's address in its URL, so it can report opened notifications. A site with its own service\n *    worker imports ours there and passes `serviceWorker: false`.\n * 3. The workspace's VAPID key from `GET /api/sdk/push`, the browser's subscription with it, and the subscription sent to\n *    `POST /api/sdk/push` for this person. A subscription made with another key is replaced.\n */\nimport { warnUnsigned } from \"./identity\";\n\nexport type PushStatus = \"subscribed\" | \"denied\" | \"not-asked\" | \"unsupported\" | \"not-signed-in\" | \"error\";\n\nexport interface PushResult {\n    status: PushStatus;\n    /** What went wrong, for \"error\" and \"unsupported\". */\n    reason?: string;\n}\n\nexport interface WebPushOptions {\n    /**\n     * The service worker's path on your site (default \"/mrrocket-sw.js\"), or false when your site already has one that\n     * imports ours (`importScripts(\"/mrrocket-sw.js\")`): the SDK then uses the one that is active.\n     */\n    serviceWorker?: string | false;\n    /** Ask for the permission when it was not given yet (default true). False: only re-send an existing subscription. */\n    ask?: boolean;\n}\n\nexport interface WebPushContext {\n    host: string;\n    apiKey: string;\n    /** The identify() id; push needs a signed-in person. */\n    distinctId: string | undefined;\n    /** The identity hash of that id (0.16.0), when the site gave one to identify. */\n    userHash?: string;\n    /** The permission, asked synchronously by the caller inside the click (Safari needs that), or the current one. */\n    permission?: Promise<NotificationPermission>;\n}\n\nconst b64urlBytes = (s: string) => {\n    const bin = atob(s.replace(/-/g, \"+\").replace(/_/g, \"/\").padEnd(Math.ceil(s.length / 4) * 4, \"=\"));\n    const out = new Uint8Array(bin.length);\n    for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n    return out;\n};\n\nconst sameKey = (a: ArrayBuffer | null | undefined, b: Uint8Array) => {\n    if (!a) return false;\n    const x = new Uint8Array(a);\n    return x.length === b.length && x.every((v, i) => v === b[i]);\n};\n\n/** True where the browser can receive web push (Safari 16.4+ only for sites added to the Home Screen on iOS). */\nexport const webPushSupported = () =>\n    typeof window !== \"undefined\" && \"serviceWorker\" in navigator && \"PushManager\" in window && \"Notification\" in window;\n\n/** The permission, asked right away when `ask` and not given yet. Call it synchronously in the click handler. */\nexport const askPermission = (ask = true): Promise<NotificationPermission> => {\n    if (!webPushSupported()) return Promise.resolve(\"denied\");\n    if (Notification.permission !== \"default\" || !ask) return Promise.resolve(Notification.permission);\n    try {\n        return Promise.resolve(Notification.requestPermission());\n    } catch {\n        return Promise.resolve(\"denied\");\n    }\n};\n\nconst registration = async (host: string, apiKey: string, sw: string | false) => {\n    if (sw !== false) {\n        const url = `${sw}?key=${encodeURIComponent(apiKey)}&host=${encodeURIComponent(host)}`;\n        await navigator.serviceWorker.register(url);\n    }\n    return navigator.serviceWorker.ready;\n};\n\nexport const subscribeWebPush = async (ctx: WebPushContext, options: WebPushOptions = {}): Promise<PushResult> => {\n    if (!webPushSupported()) return { status: \"unsupported\", reason: \"This browser has no web push.\" };\n    if (!ctx.distinctId) return { status: \"not-signed-in\" };\n    const ask = options.ask !== false;\n    const permission = await (ctx.permission ?? askPermission(ask));\n    if (permission === \"denied\") return { status: \"denied\" };\n    if (permission !== \"granted\") return { status: ask ? \"denied\" : \"not-asked\" };\n    try {\n        const r = await fetch(`${ctx.host}/api/sdk/push?key=${encodeURIComponent(ctx.apiKey)}`);\n        const vapid = r.ok ? ((await r.json()) as { web?: { vapidKey?: string } }).web?.vapidKey : undefined;\n        if (!vapid) return { status: \"error\", reason: `MRRocket answered ${r.status} for the push key.` };\n        const key = b64urlBytes(vapid);\n        const reg = await registration(ctx.host, ctx.apiKey, options.serviceWorker ?? \"/mrrocket-sw.js\");\n        let sub = await reg.pushManager.getSubscription();\n        if (sub && !sameKey(sub.options?.applicationServerKey, key)) {\n            await sub.unsubscribe().catch(() => false);\n            sub = null;\n        }\n        sub ??= await reg.pushManager.subscribe({ userVisibleOnly: true, applicationServerKey: key });\n        const saved = await fetch(`${ctx.host}/api/sdk/push`, {\n            method: \"POST\",\n            headers: { \"content-type\": \"application/json\" },\n            body: JSON.stringify({ key: ctx.apiKey, distinctId: ctx.distinctId, userHash: ctx.userHash, platform: \"web\", subscription: sub.toJSON(), host: ctx.host }),\n        });\n        warnUnsigned(saved.status);\n        return saved.ok ? { status: \"subscribed\" } : { status: \"error\", reason: `MRRocket answered ${saved.status}.` };\n    } catch (e) {\n        return { status: \"error\", reason: e instanceof Error ? e.message : String(e) };\n    }\n};\n\n/** Ends this browser's subscription and tells MRRocket (sign-out, or the person turned push off). */\nexport const unsubscribeWebPush = async (ctx: WebPushContext): Promise<boolean> => {\n    if (!webPushSupported()) return false;\n    try {\n        const reg = await navigator.serviceWorker.getRegistration();\n        const sub = await reg?.pushManager.getSubscription();\n        if (!sub) return false;\n        await fetch(`${ctx.host}/api/sdk/push`, {\n            method: \"POST\",\n            headers: { \"content-type\": \"application/json\" },\n            body: JSON.stringify({ key: ctx.apiKey, distinctId: ctx.distinctId, userHash: ctx.userHash, platform: \"web\", remove: true, endpoint: sub.endpoint }),\n        }).catch(() => null);\n        return await sub.unsubscribe();\n    } catch {\n        return false;\n    }\n};\n"],"mappings":";AAaA,SAAS,oBAAoB;AA+B7B,IAAM,cAAc,CAAC,MAAc;AAC/B,QAAM,MAAM,KAAK,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,EAAE,OAAO,KAAK,KAAK,EAAE,SAAS,CAAC,IAAI,GAAG,GAAG,CAAC;AACjG,QAAM,MAAM,IAAI,WAAW,IAAI,MAAM;AACrC,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,KAAI,CAAC,IAAI,IAAI,WAAW,CAAC;AAC9D,SAAO;AACX;AAEA,IAAM,UAAU,CAAC,GAAmC,MAAkB;AAClE,MAAI,CAAC,EAAG,QAAO;AACf,QAAM,IAAI,IAAI,WAAW,CAAC;AAC1B,SAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,MAAM,MAAM,EAAE,CAAC,CAAC;AAChE;AAGO,IAAM,mBAAmB,MAC5B,OAAO,WAAW,eAAe,mBAAmB,aAAa,iBAAiB,UAAU,kBAAkB;AAG3G,IAAM,gBAAgB,CAAC,MAAM,SAA0C;AAC1E,MAAI,CAAC,iBAAiB,EAAG,QAAO,QAAQ,QAAQ,QAAQ;AACxD,MAAI,aAAa,eAAe,aAAa,CAAC,IAAK,QAAO,QAAQ,QAAQ,aAAa,UAAU;AACjG,MAAI;AACA,WAAO,QAAQ,QAAQ,aAAa,kBAAkB,CAAC;AAAA,EAC3D,QAAQ;AACJ,WAAO,QAAQ,QAAQ,QAAQ;AAAA,EACnC;AACJ;AAEA,IAAM,eAAe,OAAO,MAAc,QAAgB,OAAuB;AAC7E,MAAI,OAAO,OAAO;AACd,UAAM,MAAM,GAAG,EAAE,QAAQ,mBAAmB,MAAM,CAAC,SAAS,mBAAmB,IAAI,CAAC;AACpF,UAAM,UAAU,cAAc,SAAS,GAAG;AAAA,EAC9C;AACA,SAAO,UAAU,cAAc;AACnC;AAEO,IAAM,mBAAmB,OAAO,KAAqB,UAA0B,CAAC,MAA2B;AAC9G,MAAI,CAAC,iBAAiB,EAAG,QAAO,EAAE,QAAQ,eAAe,QAAQ,gCAAgC;AACjG,MAAI,CAAC,IAAI,WAAY,QAAO,EAAE,QAAQ,gBAAgB;AACtD,QAAM,MAAM,QAAQ,QAAQ;AAC5B,QAAM,aAAa,OAAO,IAAI,cAAc,cAAc,GAAG;AAC7D,MAAI,eAAe,SAAU,QAAO,EAAE,QAAQ,SAAS;AACvD,MAAI,eAAe,UAAW,QAAO,EAAE,QAAQ,MAAM,WAAW,YAAY;AAC5E,MAAI;AACA,UAAM,IAAI,MAAM,MAAM,GAAG,IAAI,IAAI,qBAAqB,mBAAmB,IAAI,MAAM,CAAC,EAAE;AACtF,UAAM,QAAQ,EAAE,MAAO,MAAM,EAAE,KAAK,GAAuC,KAAK,WAAW;AAC3F,QAAI,CAAC,MAAO,QAAO,EAAE,QAAQ,SAAS,QAAQ,qBAAqB,EAAE,MAAM,qBAAqB;AAChG,UAAM,MAAM,YAAY,KAAK;AAC7B,UAAM,MAAM,MAAM,aAAa,IAAI,MAAM,IAAI,QAAQ,QAAQ,iBAAiB,iBAAiB;AAC/F,QAAI,MAAM,MAAM,IAAI,YAAY,gBAAgB;AAChD,QAAI,OAAO,CAAC,QAAQ,IAAI,SAAS,sBAAsB,GAAG,GAAG;AACzD,YAAM,IAAI,YAAY,EAAE,MAAM,MAAM,KAAK;AACzC,YAAM;AAAA,IACV;AACA,YAAQ,MAAM,IAAI,YAAY,UAAU,EAAE,iBAAiB,MAAM,sBAAsB,IAAI,CAAC;AAC5F,UAAM,QAAQ,MAAM,MAAM,GAAG,IAAI,IAAI,iBAAiB;AAAA,MAClD,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,KAAK,IAAI,QAAQ,YAAY,IAAI,YAAY,UAAU,IAAI,UAAU,UAAU,OAAO,cAAc,IAAI,OAAO,GAAG,MAAM,IAAI,KAAK,CAAC;AAAA,IAC7J,CAAC;AACD,iBAAa,MAAM,MAAM;AACzB,WAAO,MAAM,KAAK,EAAE,QAAQ,aAAa,IAAI,EAAE,QAAQ,SAAS,QAAQ,qBAAqB,MAAM,MAAM,IAAI;AAAA,EACjH,SAAS,GAAG;AACR,WAAO,EAAE,QAAQ,SAAS,QAAQ,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC,EAAE;AAAA,EACjF;AACJ;AAGO,IAAM,qBAAqB,OAAO,QAA0C;AAC/E,MAAI,CAAC,iBAAiB,EAAG,QAAO;AAChC,MAAI;AACA,UAAM,MAAM,MAAM,UAAU,cAAc,gBAAgB;AAC1D,UAAM,MAAM,MAAM,KAAK,YAAY,gBAAgB;AACnD,QAAI,CAAC,IAAK,QAAO;AACjB,UAAM,MAAM,GAAG,IAAI,IAAI,iBAAiB;AAAA,MACpC,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,KAAK,IAAI,QAAQ,YAAY,IAAI,YAAY,UAAU,IAAI,UAAU,UAAU,OAAO,QAAQ,MAAM,UAAU,IAAI,SAAS,CAAC;AAAA,IACvJ,CAAC,EAAE,MAAM,MAAM,IAAI;AACnB,WAAO,MAAM,IAAI,YAAY;AAAA,EACjC,QAAQ;AACJ,WAAO;AAAA,EACX;AACJ;","names":[]}

package/dist/react-native/index.d.cts

@@ -1,10 +1,6 @@
 import * as react from 'react';
 import { ReactNode } from 'react';
 
-/**
- * The SDK's fetch client and the shapes it reads, without React, so the script tag's widgets (src/script) use it too.
- * `./api` re-exports all of it with the `useApi` hook.
- */
 type PostStatus = "review" | "planned" | "progress" | "shipped";
 interface FeedbackBoardInfo {
     id: string;
@@ -78,6 +74,28 @@ interface SurveyDefinition {
     questions: SurveyQuestion[];
 }
 type SurveyAnswer = number | string | string[];
+/** A file in the messenger's chat: a screenshot, a photo or a PDF the visitor sent (servers from SDK 0.15 on). */
+interface ChatFile {
+    /** From an upload: the signed id a message sends. In a message: the file's own id (`attachmentUrl` reads it). */
+    id: string;
+    name: string;
+    type: "image/png" | "image/jpeg" | "image/webp" | "image/gif" | "application/pdf";
+    /** Bytes. */
+    size: number;
+}
+/** A file to upload: a Blob or File on the web, the image picker's `{ uri, name, type }` in React Native. */
+type ChatUpload = Blob | {
+    uri: string;
+    name: string;
+    type: string;
+};
+/** The bug context a visitor message carries; the server fills browser and system from the user agent when left out. */
+interface ChatContext {
+    browser?: string;
+    os?: string;
+    /** "1440×900". */
+    viewport?: string;
+}
 /** One message of the messenger's chat. "visitor" is the person on the site; the rest come from the product's team. */
 interface ChatMessage {
     id: string;
@@ -89,6 +107,8 @@ interface ChatMessage {
         id: string;
         title: string;
     }[];
+    /** Files sent with it (servers from SDK 0.15 on). */
+    attachments?: ChatFile[];
 }
 /** A published help article in a list (the messenger's Help tab). */
 interface ArticleSummary {
@@ -126,11 +146,17 @@ interface Article {
     updatedAt: string;
     blocks: ArticleBlock[];
 }
+/** Where the chat button sits: a corner, the middle of the top or bottom edge, or the middle of a side. */
+type MessengerPosition = "top-left" | "top-center" | "top-right" | "middle-left" | "middle-right" | "bottom-left" | "bottom-center" | "bottom-right";
+/** How round the messenger is. */
+type MessengerCorners = "round" | "soft" | "square";
 /** The messenger's look and texts as set in MRRocket › Support › Messenger (servers from SDK 0.9 on). */
 interface MessengerLook {
     accent: string;
+    /** Up to two more colors blended into Home's background glow (MRRocket from 0.16; older servers leave it out). */
+    glow?: string[];
     theme: "light" | "dark" | "auto";
-    position: "bottom-right" | "bottom-left";
+    position: MessengerPosition;
     title: string;
     greeting: string;
     label: string;
@@ -142,6 +168,16 @@ interface MessengerLook {
     sound: boolean;
     preview: boolean;
     askEmail: boolean;
+    /** How round panel, bubbles, cards and fields are (MRRocket from 0.15; older servers leave it out: round). */
+    corners?: MessengerCorners;
+    /** The site's own font (the default) or the system's (web only; from 0.15). */
+    font?: "site" | "system";
+    /** Home's top: plain like the rest, or in the accent color (from 0.15; older servers leave it out: plain). */
+    header?: "plain" | "color";
+    /** "Powered by MRRocket" at the bottom; the server sends false only on plans that may hide it (from 0.15). */
+    branding?: boolean;
+    /** The product's icon (its favicon) at the top left of Home; without it the title's first letter. */
+    logo?: string;
 }
 /** The visitor's newest chat (open or closed) and its messages. */
 interface ChatThread {
@@ -161,6 +197,11 @@ interface Conn {
         id?: string;
         [key: string]: unknown;
     };
+    /**
+     * The identity hash of `distinctId` (0.16.0, see identity.ts), sent with every request that names the visitor: a
+     * JSON field next to `distinctId`, a query parameter, a form field. Leave it out for any other id.
+     */
+    userHash?: string;
 }
 /** The small fetch client behind the widgets. Every read takes an AbortSignal so unmounting cancels it. */
 declare const createApi: (c: Conn) => {
@@ -197,11 +238,18 @@ declare const createApi: (c: Conn) => {
         seconds: number;
     }) => Promise<unknown>;
     chat: (signal?: AbortSignal) => Promise<ChatThread>;
+    /** A message; `attachments` are upload ids from `uploadChatFile` (then the body may be empty). */
     sendChat: (m: {
         body: string;
         email?: string;
         url?: string;
+        attachments?: string[];
+        context?: ChatContext;
     }) => Promise<ChatThread>;
+    /** Uploads one picked file for the next message (pictures and PDFs, at most 10 MB); answers its upload id. */
+    uploadChatFile: (file: ChatUpload, signal?: AbortSignal) => Promise<ChatFile>;
+    /** Where a sent file of this visitor's chat is read (an image's src, a PDF's link). */
+    attachmentUrl: (id: string) => string;
     articles: (q?: string, signal?: AbortSignal) => Promise<{
         articles: ArticleSummary[];
     }>;
@@ -243,6 +291,29 @@ interface CancelOffer {
     plan?: string;
     planName?: string;
 }
+/** 0.15.0: a second question after an answer ("What would be a fair price?"); no answers means a free text. */
+interface CancelFollowUp {
+    question: string;
+    /** The choices, in order; empty for a free text. */
+    answers: string[];
+}
+/**
+ * 0.15.0: a different offer for some customers of one answer. Every condition that is set must hold; the first rule
+ * that matches wins, else the answer's own offer. `offer: null` means no offer (straight to the confirmation).
+ */
+interface CancelRule {
+    when: {
+        /** The follow-up's answer, as written. */
+        answer?: string;
+        /** The customer's plan: its id or name as MRRocket knows it from the payment provider (any of a list). */
+        plan?: string | string[];
+        /** A customer for fewer than this many months. */
+        tenureUnder?: number;
+        /** A customer for at least this many months. */
+        tenureOver?: number;
+    };
+    offer: CancelOffer | null;
+}
 /** The product's live cancel flow (MRRocket › Churn › Cancel flow). */
 interface CancelFlowConfig {
     /** Grows with every publish. */
@@ -255,6 +326,12 @@ interface CancelFlowConfig {
     }[];
     /** The offer per answer id. */
     offers: Record<string, CancelOffer>;
+    /** 0.15.0: the follow-up question per answer id. */
+    followUps?: Record<string, CancelFollowUp>;
+    /** 0.15.0: the rules per answer id, checked in order before its offer. */
+    rules?: Record<string, CancelRule[]>;
+    /** 0.15.0: what one answer offers after its first offer was declined. */
+    second?: Record<string, CancelOffer>;
     confirm: {
         title: string;
         body: string;
@@ -326,6 +403,8 @@ interface CancelFlowResult {
     outcome: "cancelled" | "saved" | "kept";
     reason?: string;
     reasonLabel?: string;
+    /** 0.15.0: the answer to the follow-up question. */
+    answer?: string;
     offer?: CancelOffer;
     /** What the customer wrote on the confirmation, if anything. */
     comment?: string;
@@ -344,6 +423,10 @@ interface CancelFlowOptions {
         currency: string;
         interval?: "month" | "year";
     };
+    /** 0.15.0: the customer's plan (its id or name in your billing), for offers that depend on it. */
+    plan?: string;
+    /** 0.15.0: since when they pay (a date, ISO string or ms), for offers that depend on how long. */
+    customerSince?: Date | string | number;
     /** The customer confirmed: cancel the subscription in your code. Throwing keeps the dialog open with an error. */
     onCancel?: (result: CancelFlowResult) => unknown;
     /** The customer took an offer: apply it in your code (coupon, pause, plan change). Throwing keeps the dialog open. */
@@ -354,11 +437,16 @@ interface CancelFlowOptions {
 /** What a renderer draws. */
 type FlowView = {
     type: "cancel";
-    screen: "survey" | "offer" | "confirm";
+    screen: "survey" | "followup" | "offer" | "confirm";
     flow: CancelFlowConfig;
     /** The answer picked on the survey. */
     reason?: string;
+    /** 0.15.0: the follow-up question on its screen, and its answer so far. */
+    followUp?: CancelFollowUp;
+    answer?: string;
     offer?: CancelOffer;
+    /** 0.15.0: 2 for the offer after a declined one. */
+    round?: 1 | 2;
     price?: CancelFlowOptions["price"];
     busy: boolean;
     error?: string;
@@ -395,8 +483,10 @@ interface FlowsController {
     view(): FlowView | null;
     subscribe(listener: () => void): () => void;
     /** `accept(comment)`: a "Talk to us" offer sends what the customer wrote with it. */
+    /** `answer(text)`: the follow-up's choice or free text (0.15.0); `next()` moves on from the survey and the follow-up. */
     cancel: {
         pick(reason: string): void;
+        answer(text: string): void;
         next(): void;
         accept(comment?: string): void;
         decline(): void;
@@ -531,7 +621,7 @@ interface PaywallHost {
 
 type VariantId = string;
 /** This build of the SDK. Sent with the config request so MRRocket knows what the site runs (error tracking, flags). */
-declare const SDK_VERSION = "0.14.0";
+declare const SDK_VERSION = "0.16.0";
 /** One variant of an experiment. `changes` replaces texts that the page marks with `<Text id>`. */
 interface VariantConfig {
     id: VariantId;
@@ -672,6 +762,27 @@ interface AppContext {
     locale?: string;
 }
 
+/**
+ * Identity verification (0.16.0), the browser and app side. After `identify(id)` the SDK's id is your app's own user
+ * id, and that id is no secret (a Clerk id shows in URLs and logs), so on its own it proves nothing: anyone who knows it
+ * could read that person's support chat or post as them. Your server signs the id with the product's server key
+ * (`userHash(user.id)` from `@mrrocket/sdk/next/server`) and you hand the result to `identify(id, props, { hash })`.
+ * From then on every request for that id carries it as `userHash` (a JSON field, a query parameter or a form field), and
+ * MRRocket checks it.
+ *
+ * The hash belongs to one id: it is forgotten on `reset()` (sign-out) and when `identify` is called for another id
+ * without a hash, so it never goes out with someone else's id (MRRocket refuses a hash that does not match with 401).
+ * Shared by the Next.js provider, the script tag and React Native: no React, no browser APIs.
+ */
+/** The third argument of `identify`. */
+interface IdentifyOptions {
+    /**
+     * The id signed by your server: `await userHash(user.id)` from `@mrrocket/sdk/next/server` (or the same HMAC in any
+     * language). Needed when MRRocket › Settings › Products › Sign-in › "Only signed users" is on.
+     */
+    hash?: string;
+}
+
 /**
  * The React Native client without React: the event queue (batched, persisted for offline use, retried with backoff),
  * the app lifecycle (`$app_open`, `$app_background`, a new session after 30 minutes away), screens, identity and
@@ -733,6 +844,13 @@ interface RegisterForPushOptions {
     projectId?: string;
 }
 type NativePushStatus = "registered" | "denied" | "not-asked" | "unavailable" | "not-signed-in" | "error";
+/**
+ * 0.16.0, what `requestReview()` did: "requested" the store's rating dialog was asked for (the store decides whether it
+ * shows; Apple shows it at most three times a year); "not-now" no live review request may ask this person now (not a
+ * customer, asked in the last 120 days, no request live); "unavailable" the device has no dialog or `expo-store-review`
+ * is not installed; "not-signed-in" call `identify` first.
+ */
+type NativeReviewResult = "requested" | "not-now" | "unavailable" | "not-signed-in";
 interface NativePushResult {
     status: NativePushStatus;
     /** The Expo push token, once registered. */
@@ -749,8 +867,14 @@ interface MRRocketClient {
     tap(x: number, y: number): void;
     /** The person's answer to session recordings (`replay` in the options); false stops and forgets what was not sent. */
     setReplay(on: boolean): void;
-    identify(id: string, props?: Record<string, unknown>): void;
-    /** Forgets the signed-in person (sign-out): a new anonymous id and a new session. */
+    /**
+     * Who the person is once they sign in. `{ hash }` (0.16.0) is the id signed by your backend (`userHash(id)` from
+     * `@mrrocket/sdk/next/server`, or the same HMAC in any language), fetched after sign-in; sent with every request for
+     * that id so MRRocket knows it is really them. Needed with "Only signed users" (MRRocket › Settings › Products ›
+     * Sign-in). Not stored on the device: call identify with it on every start.
+     */
+    identify(id: string, props?: Record<string, unknown>, options?: IdentifyOptions): void;
+    /** Forgets the signed-in person and their hash (sign-out): a new anonymous id and a new session. */
     reset(): void;
     setConsent(consent: NativeConsent): void;
     captureError(error: unknown): void;
@@ -797,6 +921,12 @@ interface MRRocketClient {
     registerForPush(options?: RegisterForPushOptions): Promise<NativePushResult>;
     /** Removes this device's token for the signed-in person (sign-out does it on its own in `reset`). */
     unregisterForPush(): Promise<boolean>;
+    /**
+     * 0.16.0: asks for a store review at the moment your app picked (the trigger of a review request in MRRocket ›
+     * Reviews › Requests). MRRocket says whether this signed-in person may be asked now; if so the App Store's or Google
+     * Play's own rating dialog opens (needs `expo-store-review`) and MRRocket counts the request. Never filtered by mood.
+     */
+    requestReview(): Promise<NativeReviewResult>;
     /** The cancel flow, onboarding and messages for a renderer (the provider's, or your own). */
     flows: FlowsController;
     /** Sends what is queued now. */
@@ -895,15 +1025,22 @@ declare const useMessenger: () => {
 interface NativeMessengerOptions {
     /** A round chat button (default false: open it with `useMessenger().open()` from your own button). */
     launcher?: boolean;
-    /** Where the chat button sits (default bottom right). */
-    position?: "bottom-right" | "bottom-left";
+    /** Where the chat button sits: a corner, the middle of the top or bottom edge, or the middle of a side (default bottom right). */
+    position?: MessengerPosition;
     /** Text beside the chat button's icon; empty: the round button. */
     label?: string;
+    /** The name beside the team's mark at the top of Home (MRRocket fills in the product's name). */
     title?: string;
     /** The big line on Home and the first line of an empty chat. */
     greeting?: string;
-    /** How soon the team usually answers, said under "Send us a message" and in the chat's head. */
+    /** How soon the team usually answers, said on Home. */
     replyTime?: "minutes" | "hours" | "day";
+    /** How round bubbles, cards and fields are (default round; the sheet itself keeps the system's corners). */
+    corners?: MessengerCorners;
+    /** Home's top: plain like the rest (default), or in the accent color with raised cards. */
+    header?: "plain" | "color";
+    /** The product's icon at the top left of Home (MRRocket sends the product's favicon). */
+    logo?: string;
     /** Ask people the app did not identify with an email for an email (optional for them). Default true. */
     askEmail?: boolean;
     /** The Help tab with your published help articles (default true; hidden while there are none). */
@@ -979,7 +1116,7 @@ declare const MRRocketProvider: ({ client: given, children, consent, flows, appe
 declare const useMRRocket: () => {
     track: (event: string, props?: Record<string, unknown>) => void;
     screen: (name: string, props?: Record<string, unknown>) => void;
-    identify: (id: string, props?: Record<string, unknown>) => void;
+    identify: (id: string, props?: Record<string, unknown>, options?: IdentifyOptions) => void;
     reset: () => void;
     setConsent: (consent: NativeConsent) => void;
     setReplay: (on: boolean) => void;
@@ -1022,6 +1159,17 @@ declare const usePush: () => {
 declare const usePaywall: () => {
     open: MRRocketClient["openPaywall"];
 };
+/**
+ * 0.16.0: store reviews from a review request in MRRocket › Reviews › Requests (needs `expo-store-review`). Call
+ * `request()` at the moment the request names (after the third finished challenge, a 7-day streak …): MRRocket says
+ * whether this signed-in person may be asked now, and the App Store's or Google Play's own rating dialog opens.
+ *
+ *     const review = useReview();
+ *     if (challengesDone === 3) void review.request();
+ */
+declare const useReview: () => {
+    request: MRRocketClient["requestReview"];
+};
 /** Starts an onboarding flow now (the first live one without an id), whatever its trigger. */
 declare const useOnboarding: () => {
     start: (id?: string) => boolean;
@@ -1060,4 +1208,4 @@ declare const useExpoRouterTracking: () => void;
  */
 declare const useNavigationTracking: () => (state: unknown) => void;
 
-export { type AppContext, type CancelFlowConfig, type CancelFlowOptions, type CancelFlowResult, type CancelOffer, type ChatMessage, type ChatThread, type CockpitConfig, type FeedbackPost, type FlagConfig, type FlowView, type InAppMessage, type KeyValueStorage, type MRRocketClient, MRRocketFeedback, MRRocketFlows, MRRocketMask, MRRocketMessenger, type MRRocketOptions, MRRocketProvider, type MRRocketProviderProps, MRRocketSurveys, type NativeAppearance, type NativeConsent, type NativeFeedbackOptions, type NativeMessengerOptions, type NativePushResult, type NativePushStatus, type OnboardingFlow, type OnboardingStep, type PaywallConfig, type PaywallOptions, type PaywallPage, type PaywallPlan, type PaywallResult, type RegisterForPushOptions, SDK_VERSION, type SurveyDefinition, type VariantId, activeRouteName, createMRRocket, getMRRocket, useCancelFlow, useExpoRouterTracking, useFeedback, useFlag, useFlagVariant, useMRRocket, useMessenger, useNavigationTracking, useOnboarding, usePaywall, usePush, useText, useVariant };
+export { type AppContext, type CancelFlowConfig, type CancelFlowOptions, type CancelFlowResult, type CancelOffer, type ChatMessage, type ChatThread, type CockpitConfig, type FeedbackPost, type FlagConfig, type FlowView, type IdentifyOptions, type InAppMessage, type KeyValueStorage, type MRRocketClient, MRRocketFeedback, MRRocketFlows, MRRocketMask, MRRocketMessenger, type MRRocketOptions, MRRocketProvider, type MRRocketProviderProps, MRRocketSurveys, type NativeAppearance, type NativeConsent, type NativeFeedbackOptions, type NativeMessengerOptions, type NativePushResult, type NativePushStatus, type NativeReviewResult, type OnboardingFlow, type OnboardingStep, type PaywallConfig, type PaywallOptions, type PaywallPage, type PaywallPlan, type PaywallResult, type RegisterForPushOptions, SDK_VERSION, type SurveyDefinition, type VariantId, activeRouteName, createMRRocket, getMRRocket, useCancelFlow, useExpoRouterTracking, useFeedback, useFlag, useFlagVariant, useMRRocket, useMessenger, useNavigationTracking, useOnboarding, usePaywall, usePush, useReview, useText, useVariant };