@namiml/sdk-core 3.4.0-dev.202605190129 → 3.4.0-dev.202605191719

package/dist/index.cjs

@@ -98,7 +98,7 @@ const {
 // version — stamped by scripts/version.sh
 NAMI_SDK_VERSION: exports.NAMI_SDK_VERSION = "3.4.0", 
 // full package version including dev suffix — stamped by scripts/version.sh
-NAMI_SDK_PACKAGE_VERSION: exports.NAMI_SDK_PACKAGE_VERSION = "3.4.0-dev.202605190129", 
+NAMI_SDK_PACKAGE_VERSION: exports.NAMI_SDK_PACKAGE_VERSION = "3.4.0-dev.202605191719", 
 // environments
 PRODUCTION: exports.PRODUCTION = "production", DEVELOPMENT: exports.DEVELOPMENT = "development", 
 // error messages
@@ -6849,7 +6849,7 @@ async function withRetry(url, options, timeout = exports.API_TIMEOUT_LIMIT, retr
         if (logTraffic && options?.body) {
             logger.debug(`[HTTP] Request body: ${options.body}`);
         }
-        const response = await timeoutRequest(url, options, timeout);
+        const response = await timeoutRequest$1(url, options, timeout);
         if (!response.ok) {
             if (logTraffic) {
                 const errorBody = await response.clone().text();
@@ -6879,7 +6879,7 @@ async function withRetry(url, options, timeout = exports.API_TIMEOUT_LIMIT, retr
     const response = await fetchWithRetry();
     return response.json();
 }
-async function timeoutRequest(url, options = {}, timeout) {
+async function timeoutRequest$1(url, options = {}, timeout) {
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), timeout);
     options["signal"] = controller.signal;
@@ -8309,6 +8309,161 @@ class ProductRepository {
 }
 ProductRepository.instance = new ProductRepository();
 
+const DEFAULTS = {
+    maxAttempts: 3,
+    baseDelayMs: 200,
+    maxDelayMs: 2000,
+    budgetMs: 5000,
+};
+const TRANSIENT_STATUSES = new Set([408, 425, 429]);
+const TRANSIENT_ERROR_CODES = new Set(["ECONNRESET", "ECONNREFUSED", "ENOTFOUND", "ETIMEDOUT"]);
+class NonRetryableHttpError extends Error {
+    constructor(status, url) {
+        super(`CDN fetch failed with non-retryable status ${status} for ${url}`);
+        this.name = "NonRetryableHttpError";
+        this.status = status;
+        this.url = url;
+    }
+}
+class RetryExhaustedError extends Error {
+    constructor(url, attempts, lastStatus) {
+        super(`CDN fetch exhausted ${attempts} attempts for ${url}${lastStatus !== undefined ? ` (last status ${lastStatus})` : ""}`);
+        this.name = "RetryExhaustedError";
+        this.url = url;
+        this.attempts = attempts;
+        this.lastStatus = lastStatus;
+    }
+}
+/**
+ * Classify a failure as transient (worth retrying) or not.
+ *
+ * Transient:
+ * - HTTP 408 / 425 / 429 / any 5xx (504 Gateway Timeout from the CDN edge
+ *   is the motivating production case)
+ * - AbortError from the request timeout
+ * - Any TypeError thrown by fetch — covers Safari's "Load failed",
+ *   Chrome's "Failed to fetch", Firefox's "NetworkError ...", and
+ *   CORS-blocked responses from the CDN edge (a 504 without
+ *   Access-Control-Allow-Origin surfaces as a TypeError, not a Response)
+ * - ECONNRESET/ECONNREFUSED/ENOTFOUND/ETIMEDOUT in Node test envs
+ *
+ * Non-transient: every other status (including 404 — a missing paywall is
+ * genuinely gone; retrying just delays the inevitable failure).
+ */
+function isTransientFailure(err, status) {
+    if (typeof status === "number") {
+        return TRANSIENT_STATUSES.has(status) || status >= 500;
+    }
+    if (err && typeof err === "object") {
+        const e = err;
+        if (e.name === "AbortError")
+            return true;
+        if (e.code && TRANSIENT_ERROR_CODES.has(e.code))
+            return true;
+        // fetch() throws TypeError for network-layer failures (DNS/TCP/TLS,
+        // CORS-blocked, edge dropped). HTTP status failures arrive as fulfilled
+        // responses with !response.ok — never as a thrown TypeError. So any
+        // TypeError reaching this catch is by definition transient. Don't filter
+        // on message text: Safari ("Load failed"), Chrome ("Failed to fetch"),
+        // and Firefox ("NetworkError ...") all differ, and any future variation
+        // would silently be classified non-transient.
+        if (err instanceof TypeError)
+            return true;
+    }
+    return false;
+}
+async function timeoutRequest(url, timeout) {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), timeout);
+    try {
+        return await fetch(url, { signal: controller.signal });
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+}
+const defaultSleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/**
+ * Fetch a single CDN-hosted paywall with bounded retries on transient
+ * failures. Exponential backoff (baseDelayMs * 2^n, capped at maxDelayMs)
+ * with ±50% jitter; the whole loop is clamped to budgetMs wall-clock so
+ * the parallel-fetch window can't balloon when one edge is degraded.
+ *
+ * Throws NonRetryableHttpError for hard 4xx (including 404), or
+ * RetryExhaustedError when all attempts and/or the budget are spent.
+ */
+async function fetchWithCdnRetry(url, opts = {}) {
+    const maxAttempts = opts.maxAttempts ?? DEFAULTS.maxAttempts;
+    const baseDelayMs = opts.baseDelayMs ?? DEFAULTS.baseDelayMs;
+    const maxDelayMs = opts.maxDelayMs ?? DEFAULTS.maxDelayMs;
+    const budgetMs = opts.budgetMs ?? DEFAULTS.budgetMs;
+    const timeoutMs = opts.timeoutMs ?? exports.API_TIMEOUT_LIMIT;
+    const randomFn = opts.randomFn ?? Math.random;
+    const sleepFn = opts.sleepFn ?? defaultSleep;
+    const logRequests = shouldLogHTTPRequests();
+    const logTraffic = shouldLogHTTPTraffic();
+    const start = Date.now();
+    let attempt = 0;
+    let lastStatus;
+    let lastError;
+    while (attempt < maxAttempts) {
+        if (attempt > 0) {
+            const elapsed = Date.now() - start;
+            if (elapsed >= budgetMs)
+                break;
+            const baseDelay = Math.min(baseDelayMs * Math.pow(2, attempt - 1), maxDelayMs);
+            // ±50% jitter: random in [0,1) → factor in [-0.5, 0.5)
+            const jitter = baseDelay * (randomFn() - 0.5);
+            const remaining = Math.max(0, budgetMs - elapsed);
+            const sleepFor = Math.min(Math.max(0, baseDelay + jitter), remaining);
+            await sleepFn(sleepFor);
+            // If the sleep consumed the rest of the budget, don't fire another fetch.
+            if (Date.now() - start >= budgetMs)
+                break;
+        }
+        try {
+            if (logRequests || logTraffic) {
+                logger.debug(`[HTTP] GET ${url} (cdn attempt ${attempt + 1}/${maxAttempts})`);
+            }
+            const response = await timeoutRequest(url, timeoutMs);
+            if (!response.ok) {
+                if (logTraffic) {
+                    const errorBody = await response.clone().text();
+                    logger.debug(`[HTTP] Response ${response.status}: ${errorBody}`);
+                }
+                lastStatus = response.status;
+                if (isTransientFailure(undefined, response.status)) {
+                    attempt++;
+                    continue;
+                }
+                throw new NonRetryableHttpError(response.status, url);
+            }
+            if (logTraffic) {
+                const responseBody = await response.clone().text();
+                logger.debug(`[HTTP] Response ${response.status}: ${responseBody}`);
+            }
+            const data = (await response.json());
+            return { data, retryCount: attempt };
+        }
+        catch (err) {
+            if (err instanceof NonRetryableHttpError)
+                throw err;
+            if (isTransientFailure(err)) {
+                lastError = err;
+                attempt++;
+                continue;
+            }
+            throw err;
+        }
+    }
+    // If we exited the loop without success but never saw a transient response,
+    // fall back to surfacing the last raw error. Otherwise raise the canonical
+    // exhausted-attempts signal with the last seen status for telemetry.
+    if (lastStatus === undefined && lastError !== undefined)
+        throw lastError;
+    throw new RetryExhaustedError(url, attempt, lastStatus);
+}
+
 class PaywallRepository {
     async fetchPaywalls() {
         const authDevice = storageService.getDevice();
@@ -8359,17 +8514,22 @@ class PaywallRepository {
         return data?.results || [];
     }
     async fetchPaywallByUrl(url) {
-        return withRetry(url);
+        return fetchWithCdnRetry(url);
     }
     async fetchPaywallsByUrls(urls) {
         const uniqueUrls = [...new Set(urls)];
         const results = await Promise.allSettled(uniqueUrls.map((url) => this.fetchPaywallByUrl(url)));
         const paywalls = [];
+        let retryCount = 0;
         for (const result of results) {
             if (result.status === "fulfilled") {
-                paywalls.push(result.value);
+                paywalls.push(result.value.data);
+                retryCount += result.value.retryCount;
             }
             else {
+                // Note: an exhausted-failure path contributed retries we can't see
+                // from the rejected promise, so retryCount under-reports failures.
+                // Acceptable for the telemetry signal; revisit if full accounting matters.
                 logger.error(`Failed to fetch individual paywall: ${result.reason}`);
             }
         }
@@ -8378,9 +8538,9 @@ class PaywallRepository {
             if (valid.length > 0) {
                 storageService.setPaywalls(exports.API_PAYWALLS, valid);
             }
-            return valid;
+            return { paywalls: valid, retryCount };
         }
-        return paywalls;
+        return { paywalls, retryCount };
     }
     validatePaywalls(paywalls) {
         return paywalls.filter((paywall) => {
@@ -11856,10 +12016,13 @@ class NamiRefs {
         const useIndividual = !campaignRepo.useLegacyPaywallFetch &&
             CampaignRuleRepository.hasPaywallUrls(rawCampaigns);
         let paywalls;
+        let retryCount = 0;
         const paywallsStartTime = Date.now();
         if (useIndividual) {
             const urls = CampaignRuleRepository.extractPaywallUrls(rawCampaigns);
-            paywalls = await paywallRepo.fetchPaywallsByUrls(urls);
+            const result = await paywallRepo.fetchPaywallsByUrls(urls);
+            paywalls = result.paywalls;
+            retryCount = result.retryCount;
         }
         else {
             paywalls = await paywallRepo.fetchPaywalls();
@@ -11868,7 +12031,8 @@ class NamiRefs {
         const totalDuration = Date.now() - startTime;
         logger.info(`Paywall fetch telemetry: strategy=${useIndividual ? "individual" : "bulk"}, ` +
             `count=${paywalls.length}, total=${totalDuration}ms, ` +
-            `campaigns=${campaignRulesDuration}ms, paywalls=${paywallsDuration}ms`);
+            `campaigns=${campaignRulesDuration}ms, paywalls=${paywallsDuration}ms` +
+            `${useIndividual ? `, retry_count=${retryCount}` : ""}`);
         return campaignRepo.finalizeCampaignRules(rawCampaigns, paywalls);
     }
     reRenderPaywall() {
@@ -12831,21 +12995,46 @@ class NamiProfileManager {
         }
         PaywallState.setIsLoggedIn(!!this.externalId);
     }
-    async login(externalId) {
+    /**
+     * Update local profile state for login: persist the external id and flip the
+     * logged-in flag in PaywallState. No network I/O — pair with `loginRemote`
+     * to perform the actual API call. Used by the async login/logout fast path.
+     */
+    loginLocal(externalId) {
+        this.setExternalId(externalId).save();
+        PaywallState.setIsLoggedIn(true);
+    }
+    /**
+     * Perform the login network call only. If the server returns a different
+     * `external_id` than the locally stored value, reconcile it into local state.
+     */
+    async loginRemote(externalId) {
         const loginData = await NamiAPI.instance.login(externalId);
-        if (loginData.external_id) {
-            PaywallState.setIsLoggedIn(true);
+        if (loginData.external_id && loginData.external_id !== this.externalId) {
+            this.setExternalId(loginData.external_id).save();
         }
-        this
-            .setExternalId(loginData.external_id)
-            .save();
     }
-    async logout() {
-        await NamiAPI.instance.logout();
+    /**
+     * Update local profile state for logout: clear the external id, persist,
+     * and flip the logged-in flag in PaywallState. Used by the async fast path.
+     */
+    logoutLocal() {
+        this.setExternalId(undefined).save();
         PaywallState.setIsLoggedIn(false);
-        this
-            .setExternalId(undefined)
-            .save();
+    }
+    /**
+     * Perform the logout network call only.
+     */
+    async logoutRemote() {
+        await NamiAPI.instance.logout();
+    }
+    async login(externalId) {
+        this.loginLocal(externalId);
+        await this.loginRemote(externalId);
+    }
+    async logout() {
+        this.logoutLocal();
+        await this.logoutRemote();
     }
 }
 NamiProfileManager.instance = new NamiProfileManager();
@@ -13165,6 +13354,21 @@ class NamiFlowManager {
     }
 }
 
+const SHOULD_SHOW_LOADING_INDICATOR = false;
+const DISABLE_ASYNC_LOGIN_LOGOUT = "disableAsyncLoginLogout";
+/**
+ * Returns true when `disableAsyncLoginLogout` appears in the active `namiCommands` list,
+ * meaning login/logout should await the underlying API call before notifying handlers.
+ *
+ * Default behavior (flag absent) is the async/fast path: update local state and notify
+ * handlers immediately while dispatching the API call as fire-and-forget.
+ *
+ * Internal feature flag — opt-out via `Nami.configure({ namiCommands: [...] })`.
+ */
+const isAsyncLoginLogoutDisabled = () => {
+    return storageService.getNamiConfig()?.namiCommands?.includes(DISABLE_ASYNC_LOGIN_LOGOUT) ?? false;
+};
+
 /**
  * @class NamiCustomerManager
  * Provides methods for managing customer-related functionality.
@@ -13226,6 +13430,30 @@ class NamiCustomerManager {
             this.invokeStateHandler(exports.AccountStateAction.LOGIN, false, error);
             throw error;
         }
+        if (!isAsyncLoginLogoutDisabled()) {
+            // Default sync/fast path: update local state, notify handlers, and fire
+            // lifecycle immediately. Dispatch the underlying API call and entitlement
+            // refresh fire-and-forget — failures are logged but do not surface.
+            NamiProfileManager.instance.loginLocal(externalId);
+            this.invokeStateHandler(exports.AccountStateAction.LOGIN, true);
+            if (NamiFlowManager.instance.flowOpen) {
+                const currentFlow = NamiFlowManager.instance.currentFlow;
+                const currentStep = currentFlow?.currentFlowStep;
+                if (currentStep) {
+                    if (Nami.instance.maxLogging) {
+                        logger.debug(`[NamiCustomerManager] async login success — triggering __login_success__ on step ${currentStep.id}`);
+                    }
+                    currentFlow.executeLifecycle(currentStep, NamiReservedActions.LOGIN_SUCCESS);
+                }
+            }
+            void NamiProfileManager.instance.loginRemote(externalId).catch((err) => {
+                logger.error('[NamiCustomerManager] async login API failed', err);
+            });
+            void EntitlementRepository.instance.fetchActiveEntitlements().catch((err) => {
+                logger.error('[NamiCustomerManager] async login entitlement refresh failed', err);
+            });
+            return;
+        }
         try {
             await NamiProfileManager.instance.login(externalId);
             await EntitlementRepository.instance.fetchActiveEntitlements();
@@ -13271,6 +13499,30 @@ class NamiCustomerManager {
             this.invokeStateHandler(exports.AccountStateAction.LOGOUT, false, error);
             throw error;
         }
+        if (!isAsyncLoginLogoutDisabled()) {
+            // Default sync/fast path: clear local state, notify handlers, and fire
+            // lifecycle immediately. Dispatch the underlying API call and entitlement
+            // refresh fire-and-forget — failures are logged but do not surface.
+            NamiProfileManager.instance.logoutLocal();
+            this.invokeStateHandler(exports.AccountStateAction.LOGOUT, true);
+            if (NamiFlowManager.instance.flowOpen) {
+                const currentFlow = NamiFlowManager.instance.currentFlow;
+                const currentStep = currentFlow?.currentFlowStep;
+                if (currentStep) {
+                    if (Nami.instance.maxLogging) {
+                        logger.debug(`[NamiCustomerManager] async logout success — triggering __logout_success__ on step ${currentStep.id}`);
+                    }
+                    currentFlow.executeLifecycle(currentStep, NamiReservedActions.LOGOUT_SUCCESS);
+                }
+            }
+            void NamiProfileManager.instance.logoutRemote().catch((err) => {
+                logger.error('[NamiCustomerManager] async logout API failed', err);
+            });
+            void EntitlementRepository.instance.fetchActiveEntitlements().catch((err) => {
+                logger.error('[NamiCustomerManager] async logout entitlement refresh failed', err);
+            });
+            return;
+        }
         try {
             await NamiProfileManager.instance.logout();
             await EntitlementRepository.instance.fetchActiveEntitlements();
@@ -14705,8 +14957,6 @@ exports.CampaignRuleConversionEventType = void 0;
     CampaignRuleConversionEventType["IN_APP"] = "in_app";
 })(exports.CampaignRuleConversionEventType || (exports.CampaignRuleConversionEventType = {}));
 
-const SHOULD_SHOW_LOADING_INDICATOR = false;
-
 function parseToSemver(versionString) {
     const [semVer, major, minor, patch, prerelease, buildmetadata] = versionString.match(/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/) ?? [];
     return {
@@ -64181,6 +64431,7 @@ exports.ClientError = ClientError;
 exports.ConfigRepository = ConfigRepository;
 exports.ConflictError = ConflictError;
 exports.CustomerJourneyRepository = CustomerJourneyRepository;
+exports.DISABLE_ASYNC_LOGIN_LOGOUT = DISABLE_ASYNC_LOGIN_LOGOUT;
 exports.DeviceIDRequiredError = DeviceIDRequiredError;
 exports.DeviceRepository = DeviceRepository;
 exports.EntitlementRepository = EntitlementRepository;

package/dist/index.d.ts

@@ -2133,6 +2133,26 @@ declare class NamiProfileManager {
     isLoggedIn(): boolean;
     private save;
     private load;
+    /**
+     * Update local profile state for login: persist the external id and flip the
+     * logged-in flag in PaywallState. No network I/O — pair with `loginRemote`
+     * to perform the actual API call. Used by the async login/logout fast path.
+     */
+    loginLocal(externalId: string): void;
+    /**
+     * Perform the login network call only. If the server returns a different
+     * `external_id` than the locally stored value, reconcile it into local state.
+     */
+    loginRemote(externalId: string): Promise<void>;
+    /**
+     * Update local profile state for logout: clear the external id, persist,
+     * and flip the logged-in flag in PaywallState. Used by the async fast path.
+     */
+    logoutLocal(): void;
+    /**
+     * Perform the logout network call only.
+     */
+    logoutRemote(): Promise<void>;
     login(externalId: string): Promise<void>;
     logout(): Promise<void>;
 }
@@ -2607,6 +2627,7 @@ declare const LIQUID_VARIABLE_REGEX: RegExp;
 declare const NAMI_STORAGE_KEYS: readonly string[];
 
 declare const SHOULD_SHOW_LOADING_INDICATOR = false;
+declare const DISABLE_ASYNC_LOGIN_LOGOUT = "disableAsyncLoginLogout";
 
 declare const getBaseUrl: (namiCommands?: string[]) => string;
 declare const getExtendedClientInfo: (namiCommands: string[]) => ExtendedPlatformInfo;
@@ -2974,13 +2995,26 @@ declare class EntitlementRepository {
     private invokeActiveEntitlementsHandler;
 }
 
+/**
+ * Result of a single per-paywall CDN fetch — carries the parsed body
+ * alongside the number of retries it took to land. Aggregated upstream
+ * by PaywallRepository.fetchPaywallsByUrls and surfaced in telemetry.
+ */
+type CdnFetchResult<T> = {
+    data: T;
+    retryCount: number;
+};
+
 declare class PaywallRepository {
     static instance: PaywallRepository;
     fetchPaywalls(): Promise<IPaywall[]>;
     private getAnonymousPaywalls;
     private getPaywalls;
-    fetchPaywallByUrl(url: string): Promise<IPaywall>;
-    fetchPaywallsByUrls(urls: string[]): Promise<IPaywall[]>;
+    fetchPaywallByUrl(url: string): Promise<CdnFetchResult<IPaywall>>;
+    fetchPaywallsByUrls(urls: string[]): Promise<{
+        paywalls: IPaywall[];
+        retryCount: number;
+    }>;
     private validatePaywalls;
     private fallbackData;
 }
@@ -3069,5 +3103,5 @@ declare const getBillingPeriodNumber: (billingPeriod: string) => number;
 declare const formattedPrice: (price: number) => number;
 declare function toDouble(num: number): number;
 
-export { ALREADY_CONFIGURED, ANONYMOUS_MODE, ANONYMOUS_MODE_ALREADY_OFF, ANONYMOUS_MODE_ALREADY_ON, ANONYMOUS_MODE_LOGIN_NOT_ALLOWED, ANONYMOUS_UUID, APIError, API_ACTIVE_ENTITLEMENTS, API_CAMPAIGN_RULES, API_CAMPAIGN_SESSION_TIMESTAMP, API_CONFIG, API_MAX_CALLS_LIMIT, API_PAYWALLS, API_PRODUCTS, API_RETRY_DELAY_SEC, API_TIMEOUT_LIMIT, API_VERSION, AUTH_DEVICE, AVAILABLE_ACTIVE_ENTITLEMENTS_CHANGED, AVAILABLE_CAMPAIGNS_CHANGED, AccountStateAction, AnonymousCDPError, AnonymousLoginError, AnonymousModeAlreadyOffError, AnonymousModeAlreadyOnError, BASE_STAGING_URL, BASE_URL, BASE_URL_PATH, BadRequestError, BasicNamiFlow, BorderMap, BorderSideMap, CAMPAIGN_NOT_AVAILABLE, CUSTOMER_ATTRIBUTES_KEY_PREFIX, CUSTOMER_JOURNEY_STATE_CHANGED, CUSTOM_HOST_PREFIX, CampaignNotAvailableError, CampaignRuleConversionEventType, CampaignRuleRepository, Capabilities, ClientError, ConfigRepository, ConflictError, CustomerJourneyRepository, DEVELOPMENT, DEVICE_API_TIMEOUT_LIMIT, DEVICE_ID_NOT_SET, DEVICE_ID_REQUIRED, DeviceIDRequiredError, DeviceRepository, EXTENDED_CLIENT_INFO_DELIMITER, EXTENDED_CLIENT_INFO_PREFIX, EXTENDED_PLATFORM, EXTENDED_PLATFORM_VERSION, EXTERNAL_ID_REQUIRED, EntitlementRepository, EntitlementUtils, ExternalIDRequiredError, FLOW_SCREENS_NOT_AVAILABLE, FlowScreensNotAvailableError, HTML_REGEX, INITIAL_APP_CONFIG, INITIAL_CAMPAIGN_RULES, INITIAL_PAYWALLS, INITIAL_PRODUCTS, INITIAL_SESSION_COUNTER_VALUE, INITIAL_SUCCESS, InternalServerError, KEY_SESSION_COUNTER, LIQUID_VARIABLE_REGEX, LOCAL_NAMI_ENTITLEMENTS, LOG_HTTP_REQUESTS, LOG_HTTP_TRAFFIC, LaunchCampaignError, LaunchContextResolver, LogLevel, NAMI_CONFIGURATION, NAMI_CUSTOMER_JOURNEY_STATE, NAMI_LANGUAGE_CODE, NAMI_LAST_IMPRESSION_ID, NAMI_LAUNCH_ID, NAMI_PROFILE, NAMI_PURCHASE_CHANNEL, NAMI_PURCHASE_IMPRESSION_ID, NAMI_SDK_PACKAGE_VERSION, NAMI_SDK_VERSION, NAMI_SESSION_ID, NAMI_STORAGE_KEYS, Nami, NamiAPI, NamiAnimationType, NamiCampaignManager, NamiCampaignRuleType, NamiConditionEvaluator, NamiCustomerManager, NamiEntitlementManager, NamiEventEmitter, NamiFlow, NamiFlowActionFunction, NamiFlowManager, NamiFlowStepType, NamiPaywallAction, NamiPaywallManager, PaywallManagerEvents as NamiPaywallManagerEvents, NamiProfileManager, NamiPurchaseManager, NamiRefs, NamiReservedActions, NotFoundError, PAYWALL_ACTION_EVENT, PLATFORM_ID_REQUIRED, PRODUCTION, PaywallManagerEvents, PaywallRepository, PaywallState, PlacementLabelResolver, PlatformIDRequiredError, ProductRepository, RECONFIG_SUCCESS, RetryLimitExceededError, SDKNotInitializedError, SDK_NOT_INITIALIZED, SERVER_NAMI_ENTITLEMENTS, SESSION_REQUIRED, SHOULD_SHOW_LOADING_INDICATOR, SKU_TEXT_REGEX, SMART_TEXT_PATTERN, STATUS_BAD_REQUEST, STATUS_CONFLICT, STATUS_INTERNAL_SERVER_ERROR, STATUS_NOT_FOUND, STATUS_SUCCESS, SessionService, SimpleEventTarget, StorageService, UNABLE_TO_UPDATE_CDP_ID, USE_STAGING_API, VALIDATE_PRODUCT_GROUPS, VAR_REGEX, activateEntitlementByPurchase, activeEntitlements, aggregateScreenreaderText, allCampaigns, allPaywalls, applyEntitlementActivation, audienceSplitPosition, bestUrlCampaignMatch, bigintToUuid, checkAnySkuHasPromoOffer, checkAnySkuHasTrialOffer, convertISO8601PeriodToText, convertLocale, convertOfferToPricingPhase, createNamiEntitlements, currentSku, empty, extractStandardPricingPhases, formatDate, formattedPrice, generateUUID, getApiCampaigns, getApiPaywalls, getBaseUrl, getBillingPeriodNumber, getCurrencyFormat, getDeviceData, getDeviceFormFactor, getDeviceScaleFactor, getEffectiveWebStyle, getEntitlementRefIdsForSku, getExtendedClientInfo, getFreeTrialPeriod, getInitialCampaigns, getInitialPaywalls, getPaywall, getPaywallDataFromLabel, getPercentagePriceDifference, getPeriodNumberInDays, getPeriodNumberInWeeks, getPlatformAdapters, getPriceDifference, getPricePerMonth, getProductDetail, getPurchaseAdapter, getReferenceSku, getSkuProductDetailKeys, getSkuSmartTextValue, getSlideSmartTextValue, getStandardBillingPeriod, getTranslate, getUrlParams, handleErrors, hasAllPaywalls, hasCapability, hasPurchaseManagement, initialState, invokeHandler, isAnonymousMode, isInitialConfigCompressed, isNamiFlowCampaign, isSubscription, isValidISODate, isValidUrl, logger, mapAnonymousCampaigns, namiBuySKU, normalizeLaunchContext, parseToSemver, postConversion, productDetail, registerPlatformAdapters, registerPurchaseAdapter, selectSegment, setActiveNamiEntitlements, shouldValidateProductGroups, skuItems, skuMapFromEntitlements, storageService, toDouble, toNamiEntitlements, toNamiSKU, tryParseB64Gzip, tryParseJson, updateRelatedSKUsForNamiEntitlement, uuidFromSplitPosition, validateMinSDKVersion };
+export { ALREADY_CONFIGURED, ANONYMOUS_MODE, ANONYMOUS_MODE_ALREADY_OFF, ANONYMOUS_MODE_ALREADY_ON, ANONYMOUS_MODE_LOGIN_NOT_ALLOWED, ANONYMOUS_UUID, APIError, API_ACTIVE_ENTITLEMENTS, API_CAMPAIGN_RULES, API_CAMPAIGN_SESSION_TIMESTAMP, API_CONFIG, API_MAX_CALLS_LIMIT, API_PAYWALLS, API_PRODUCTS, API_RETRY_DELAY_SEC, API_TIMEOUT_LIMIT, API_VERSION, AUTH_DEVICE, AVAILABLE_ACTIVE_ENTITLEMENTS_CHANGED, AVAILABLE_CAMPAIGNS_CHANGED, AccountStateAction, AnonymousCDPError, AnonymousLoginError, AnonymousModeAlreadyOffError, AnonymousModeAlreadyOnError, BASE_STAGING_URL, BASE_URL, BASE_URL_PATH, BadRequestError, BasicNamiFlow, BorderMap, BorderSideMap, CAMPAIGN_NOT_AVAILABLE, CUSTOMER_ATTRIBUTES_KEY_PREFIX, CUSTOMER_JOURNEY_STATE_CHANGED, CUSTOM_HOST_PREFIX, CampaignNotAvailableError, CampaignRuleConversionEventType, CampaignRuleRepository, Capabilities, ClientError, ConfigRepository, ConflictError, CustomerJourneyRepository, DEVELOPMENT, DEVICE_API_TIMEOUT_LIMIT, DEVICE_ID_NOT_SET, DEVICE_ID_REQUIRED, DISABLE_ASYNC_LOGIN_LOGOUT, DeviceIDRequiredError, DeviceRepository, EXTENDED_CLIENT_INFO_DELIMITER, EXTENDED_CLIENT_INFO_PREFIX, EXTENDED_PLATFORM, EXTENDED_PLATFORM_VERSION, EXTERNAL_ID_REQUIRED, EntitlementRepository, EntitlementUtils, ExternalIDRequiredError, FLOW_SCREENS_NOT_AVAILABLE, FlowScreensNotAvailableError, HTML_REGEX, INITIAL_APP_CONFIG, INITIAL_CAMPAIGN_RULES, INITIAL_PAYWALLS, INITIAL_PRODUCTS, INITIAL_SESSION_COUNTER_VALUE, INITIAL_SUCCESS, InternalServerError, KEY_SESSION_COUNTER, LIQUID_VARIABLE_REGEX, LOCAL_NAMI_ENTITLEMENTS, LOG_HTTP_REQUESTS, LOG_HTTP_TRAFFIC, LaunchCampaignError, LaunchContextResolver, LogLevel, NAMI_CONFIGURATION, NAMI_CUSTOMER_JOURNEY_STATE, NAMI_LANGUAGE_CODE, NAMI_LAST_IMPRESSION_ID, NAMI_LAUNCH_ID, NAMI_PROFILE, NAMI_PURCHASE_CHANNEL, NAMI_PURCHASE_IMPRESSION_ID, NAMI_SDK_PACKAGE_VERSION, NAMI_SDK_VERSION, NAMI_SESSION_ID, NAMI_STORAGE_KEYS, Nami, NamiAPI, NamiAnimationType, NamiCampaignManager, NamiCampaignRuleType, NamiConditionEvaluator, NamiCustomerManager, NamiEntitlementManager, NamiEventEmitter, NamiFlow, NamiFlowActionFunction, NamiFlowManager, NamiFlowStepType, NamiPaywallAction, NamiPaywallManager, PaywallManagerEvents as NamiPaywallManagerEvents, NamiProfileManager, NamiPurchaseManager, NamiRefs, NamiReservedActions, NotFoundError, PAYWALL_ACTION_EVENT, PLATFORM_ID_REQUIRED, PRODUCTION, PaywallManagerEvents, PaywallRepository, PaywallState, PlacementLabelResolver, PlatformIDRequiredError, ProductRepository, RECONFIG_SUCCESS, RetryLimitExceededError, SDKNotInitializedError, SDK_NOT_INITIALIZED, SERVER_NAMI_ENTITLEMENTS, SESSION_REQUIRED, SHOULD_SHOW_LOADING_INDICATOR, SKU_TEXT_REGEX, SMART_TEXT_PATTERN, STATUS_BAD_REQUEST, STATUS_CONFLICT, STATUS_INTERNAL_SERVER_ERROR, STATUS_NOT_FOUND, STATUS_SUCCESS, SessionService, SimpleEventTarget, StorageService, UNABLE_TO_UPDATE_CDP_ID, USE_STAGING_API, VALIDATE_PRODUCT_GROUPS, VAR_REGEX, activateEntitlementByPurchase, activeEntitlements, aggregateScreenreaderText, allCampaigns, allPaywalls, applyEntitlementActivation, audienceSplitPosition, bestUrlCampaignMatch, bigintToUuid, checkAnySkuHasPromoOffer, checkAnySkuHasTrialOffer, convertISO8601PeriodToText, convertLocale, convertOfferToPricingPhase, createNamiEntitlements, currentSku, empty, extractStandardPricingPhases, formatDate, formattedPrice, generateUUID, getApiCampaigns, getApiPaywalls, getBaseUrl, getBillingPeriodNumber, getCurrencyFormat, getDeviceData, getDeviceFormFactor, getDeviceScaleFactor, getEffectiveWebStyle, getEntitlementRefIdsForSku, getExtendedClientInfo, getFreeTrialPeriod, getInitialCampaigns, getInitialPaywalls, getPaywall, getPaywallDataFromLabel, getPercentagePriceDifference, getPeriodNumberInDays, getPeriodNumberInWeeks, getPlatformAdapters, getPriceDifference, getPricePerMonth, getProductDetail, getPurchaseAdapter, getReferenceSku, getSkuProductDetailKeys, getSkuSmartTextValue, getSlideSmartTextValue, getStandardBillingPeriod, getTranslate, getUrlParams, handleErrors, hasAllPaywalls, hasCapability, hasPurchaseManagement, initialState, invokeHandler, isAnonymousMode, isInitialConfigCompressed, isNamiFlowCampaign, isSubscription, isValidISODate, isValidUrl, logger, mapAnonymousCampaigns, namiBuySKU, normalizeLaunchContext, parseToSemver, postConversion, productDetail, registerPlatformAdapters, registerPurchaseAdapter, selectSegment, setActiveNamiEntitlements, shouldValidateProductGroups, skuItems, skuMapFromEntitlements, storageService, toDouble, toNamiEntitlements, toNamiSKU, tryParseB64Gzip, tryParseJson, updateRelatedSKUsForNamiEntitlement, uuidFromSplitPosition, validateMinSDKVersion };
 export type { AlignmentType, AmazonProduct, ApiResponse, AppleProduct, AvailableCampaignsResponseHandler, BorderLocationType, BorderSideType, Callback$1 as Callback, CloseHandler, CustomerJourneyState, DeepLinkUrlHandler, Device, DevicePayload, DeviceProfile, DirectionType, ExtendedPlatformInfo, FlexDirectionObject, FlowNavigationOptions, FontCollection, FontDetails, FormFactor, GoogleProduct, IConfig, IDeviceAdapter, IEntitlements$1 as IEntitlements, IPaywall, IPlatformAdapters, IProductsWithComponents, IPurchaseAdapter, ISkuMenu, IStorageAdapter, IUIAdapter, Impression, InitialConfig, InitialConfigCompressed, InitiateStateGroup, LoginResponse, NamiAnimation, NamiAnimationObjectSpec, NamiAnimationSpec, NamiAnonymousCampaign, NamiAppSuppliedVideoDetails, NamiCampaign, NamiCampaignSegment, NamiConfiguration, NamiConfigurationState, NamiEntitlement$1 as NamiEntitlement, NamiFlowAction, NamiFlowAnimation, NamiFlowCampaign, NamiFlowDTO, NamiFlowEventHandler, NamiFlowHandoffStepHandler, NamiFlowObjectDTO, NamiFlowOn, NamiFlowStep, NamiFlowTransition, NamiFlowTransitionDirection, NamiFlowWithObject, NamiInitialConfig, NamiLanguageCodes, NamiLogLevel, NamiPaywallActionHandler, NamiPaywallComponentChange, NamiPaywallEvent, NamiPaywallEventVideoMetadata, NamiPaywallLaunchContext, NamiPresentationStyle, NamiProductDetails, NamiProductOffer, NamiProfile, NamiPurchase, NamiPurchaseCompleteResult, NamiPurchaseDetails, NamiPurchasesState, NamiSKU, NamiSKUType, NamiSubscriptionInterval, NamiSubscriptionPeriod, None, NoneSpec, PaywallActionEvent, PaywallHandle, PaywallResultHandler, PaywallSKU, PricingPhase, ProductGroup, Pulse, PulseSpec, PurchaseContext, PurchaseResult, PurchaseValidationRequest, SKU, SKUActionHandler, ScreenInfo, Session, TBaseComponent, TButtonContainer, TCarouselContainer, TCarouselSlide, TCarouselSlidesState, TCollapseContainer, TComponent, TConditionalAttributes, TConditionalComponent, TContainer, TContainerPosition, TCountdownTimerTextComponent, TDevice, TDisabledButton, TField, TFieldSettings, TFlexProductContainer, THeaderFooter, TImageComponent, TInitialState, TMediaTypes, TOffer, TPages, TPaywallContext, TPaywallLaunchContext, TPaywallMedia, TPaywallTemplate, TPlayPauseButton, TProductContainer, TProductGroup, TProgressBarComponent, TProgressIndicatorComponent, TQRCodeComponent, TRadioButton, TRepeatingGrid, TResponsiveGrid, TSegmentPicker, TSegmentPickerItem, TSemverObj, TSpacerComponent, TStack, TSvgImageComponent, TSymbolComponent, TTestObject, TTextComponent, TTextLikeComponent, TTextListComponent, TToggleButtonComponent, TToggleSwitch, TVariablePattern, TVideoComponent, TVolumeButton, TimerState, TransactionRequest, UserAction, UserActionParameters, Wave, WaveSpec };

package/dist/index.mjs

@@ -96,7 +96,7 @@ const {
 // version — stamped by scripts/version.sh
 NAMI_SDK_VERSION = "3.4.0", 
 // full package version including dev suffix — stamped by scripts/version.sh
-NAMI_SDK_PACKAGE_VERSION = "3.4.0-dev.202605190129", 
+NAMI_SDK_PACKAGE_VERSION = "3.4.0-dev.202605191719", 
 // environments
 PRODUCTION = "production", DEVELOPMENT = "development", 
 // error messages
@@ -6847,7 +6847,7 @@ async function withRetry(url, options, timeout = API_TIMEOUT_LIMIT, retries = AP
         if (logTraffic && options?.body) {
             logger.debug(`[HTTP] Request body: ${options.body}`);
         }
-        const response = await timeoutRequest(url, options, timeout);
+        const response = await timeoutRequest$1(url, options, timeout);
         if (!response.ok) {
             if (logTraffic) {
                 const errorBody = await response.clone().text();
@@ -6877,7 +6877,7 @@ async function withRetry(url, options, timeout = API_TIMEOUT_LIMIT, retries = AP
     const response = await fetchWithRetry();
     return response.json();
 }
-async function timeoutRequest(url, options = {}, timeout) {
+async function timeoutRequest$1(url, options = {}, timeout) {
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), timeout);
     options["signal"] = controller.signal;
@@ -8307,6 +8307,161 @@ class ProductRepository {
 }
 ProductRepository.instance = new ProductRepository();
 
+const DEFAULTS = {
+    maxAttempts: 3,
+    baseDelayMs: 200,
+    maxDelayMs: 2000,
+    budgetMs: 5000,
+};
+const TRANSIENT_STATUSES = new Set([408, 425, 429]);
+const TRANSIENT_ERROR_CODES = new Set(["ECONNRESET", "ECONNREFUSED", "ENOTFOUND", "ETIMEDOUT"]);
+class NonRetryableHttpError extends Error {
+    constructor(status, url) {
+        super(`CDN fetch failed with non-retryable status ${status} for ${url}`);
+        this.name = "NonRetryableHttpError";
+        this.status = status;
+        this.url = url;
+    }
+}
+class RetryExhaustedError extends Error {
+    constructor(url, attempts, lastStatus) {
+        super(`CDN fetch exhausted ${attempts} attempts for ${url}${lastStatus !== undefined ? ` (last status ${lastStatus})` : ""}`);
+        this.name = "RetryExhaustedError";
+        this.url = url;
+        this.attempts = attempts;
+        this.lastStatus = lastStatus;
+    }
+}
+/**
+ * Classify a failure as transient (worth retrying) or not.
+ *
+ * Transient:
+ * - HTTP 408 / 425 / 429 / any 5xx (504 Gateway Timeout from the CDN edge
+ *   is the motivating production case)
+ * - AbortError from the request timeout
+ * - Any TypeError thrown by fetch — covers Safari's "Load failed",
+ *   Chrome's "Failed to fetch", Firefox's "NetworkError ...", and
+ *   CORS-blocked responses from the CDN edge (a 504 without
+ *   Access-Control-Allow-Origin surfaces as a TypeError, not a Response)
+ * - ECONNRESET/ECONNREFUSED/ENOTFOUND/ETIMEDOUT in Node test envs
+ *
+ * Non-transient: every other status (including 404 — a missing paywall is
+ * genuinely gone; retrying just delays the inevitable failure).
+ */
+function isTransientFailure(err, status) {
+    if (typeof status === "number") {
+        return TRANSIENT_STATUSES.has(status) || status >= 500;
+    }
+    if (err && typeof err === "object") {
+        const e = err;
+        if (e.name === "AbortError")
+            return true;
+        if (e.code && TRANSIENT_ERROR_CODES.has(e.code))
+            return true;
+        // fetch() throws TypeError for network-layer failures (DNS/TCP/TLS,
+        // CORS-blocked, edge dropped). HTTP status failures arrive as fulfilled
+        // responses with !response.ok — never as a thrown TypeError. So any
+        // TypeError reaching this catch is by definition transient. Don't filter
+        // on message text: Safari ("Load failed"), Chrome ("Failed to fetch"),
+        // and Firefox ("NetworkError ...") all differ, and any future variation
+        // would silently be classified non-transient.
+        if (err instanceof TypeError)
+            return true;
+    }
+    return false;
+}
+async function timeoutRequest(url, timeout) {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), timeout);
+    try {
+        return await fetch(url, { signal: controller.signal });
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+}
+const defaultSleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/**
+ * Fetch a single CDN-hosted paywall with bounded retries on transient
+ * failures. Exponential backoff (baseDelayMs * 2^n, capped at maxDelayMs)
+ * with ±50% jitter; the whole loop is clamped to budgetMs wall-clock so
+ * the parallel-fetch window can't balloon when one edge is degraded.
+ *
+ * Throws NonRetryableHttpError for hard 4xx (including 404), or
+ * RetryExhaustedError when all attempts and/or the budget are spent.
+ */
+async function fetchWithCdnRetry(url, opts = {}) {
+    const maxAttempts = opts.maxAttempts ?? DEFAULTS.maxAttempts;
+    const baseDelayMs = opts.baseDelayMs ?? DEFAULTS.baseDelayMs;
+    const maxDelayMs = opts.maxDelayMs ?? DEFAULTS.maxDelayMs;
+    const budgetMs = opts.budgetMs ?? DEFAULTS.budgetMs;
+    const timeoutMs = opts.timeoutMs ?? API_TIMEOUT_LIMIT;
+    const randomFn = opts.randomFn ?? Math.random;
+    const sleepFn = opts.sleepFn ?? defaultSleep;
+    const logRequests = shouldLogHTTPRequests();
+    const logTraffic = shouldLogHTTPTraffic();
+    const start = Date.now();
+    let attempt = 0;
+    let lastStatus;
+    let lastError;
+    while (attempt < maxAttempts) {
+        if (attempt > 0) {
+            const elapsed = Date.now() - start;
+            if (elapsed >= budgetMs)
+                break;
+            const baseDelay = Math.min(baseDelayMs * Math.pow(2, attempt - 1), maxDelayMs);
+            // ±50% jitter: random in [0,1) → factor in [-0.5, 0.5)
+            const jitter = baseDelay * (randomFn() - 0.5);
+            const remaining = Math.max(0, budgetMs - elapsed);
+            const sleepFor = Math.min(Math.max(0, baseDelay + jitter), remaining);
+            await sleepFn(sleepFor);
+            // If the sleep consumed the rest of the budget, don't fire another fetch.
+            if (Date.now() - start >= budgetMs)
+                break;
+        }
+        try {
+            if (logRequests || logTraffic) {
+                logger.debug(`[HTTP] GET ${url} (cdn attempt ${attempt + 1}/${maxAttempts})`);
+            }
+            const response = await timeoutRequest(url, timeoutMs);
+            if (!response.ok) {
+                if (logTraffic) {
+                    const errorBody = await response.clone().text();
+                    logger.debug(`[HTTP] Response ${response.status}: ${errorBody}`);
+                }
+                lastStatus = response.status;
+                if (isTransientFailure(undefined, response.status)) {
+                    attempt++;
+                    continue;
+                }
+                throw new NonRetryableHttpError(response.status, url);
+            }
+            if (logTraffic) {
+                const responseBody = await response.clone().text();
+                logger.debug(`[HTTP] Response ${response.status}: ${responseBody}`);
+            }
+            const data = (await response.json());
+            return { data, retryCount: attempt };
+        }
+        catch (err) {
+            if (err instanceof NonRetryableHttpError)
+                throw err;
+            if (isTransientFailure(err)) {
+                lastError = err;
+                attempt++;
+                continue;
+            }
+            throw err;
+        }
+    }
+    // If we exited the loop without success but never saw a transient response,
+    // fall back to surfacing the last raw error. Otherwise raise the canonical
+    // exhausted-attempts signal with the last seen status for telemetry.
+    if (lastStatus === undefined && lastError !== undefined)
+        throw lastError;
+    throw new RetryExhaustedError(url, attempt, lastStatus);
+}
+
 class PaywallRepository {
     async fetchPaywalls() {
         const authDevice = storageService.getDevice();
@@ -8357,17 +8512,22 @@ class PaywallRepository {
         return data?.results || [];
     }
     async fetchPaywallByUrl(url) {
-        return withRetry(url);
+        return fetchWithCdnRetry(url);
     }
     async fetchPaywallsByUrls(urls) {
         const uniqueUrls = [...new Set(urls)];
         const results = await Promise.allSettled(uniqueUrls.map((url) => this.fetchPaywallByUrl(url)));
         const paywalls = [];
+        let retryCount = 0;
         for (const result of results) {
             if (result.status === "fulfilled") {
-                paywalls.push(result.value);
+                paywalls.push(result.value.data);
+                retryCount += result.value.retryCount;
             }
             else {
+                // Note: an exhausted-failure path contributed retries we can't see
+                // from the rejected promise, so retryCount under-reports failures.
+                // Acceptable for the telemetry signal; revisit if full accounting matters.
                 logger.error(`Failed to fetch individual paywall: ${result.reason}`);
             }
         }
@@ -8376,9 +8536,9 @@ class PaywallRepository {
             if (valid.length > 0) {
                 storageService.setPaywalls(API_PAYWALLS, valid);
             }
-            return valid;
+            return { paywalls: valid, retryCount };
         }
-        return paywalls;
+        return { paywalls, retryCount };
     }
     validatePaywalls(paywalls) {
         return paywalls.filter((paywall) => {
@@ -11854,10 +12014,13 @@ class NamiRefs {
         const useIndividual = !campaignRepo.useLegacyPaywallFetch &&
             CampaignRuleRepository.hasPaywallUrls(rawCampaigns);
         let paywalls;
+        let retryCount = 0;
         const paywallsStartTime = Date.now();
         if (useIndividual) {
             const urls = CampaignRuleRepository.extractPaywallUrls(rawCampaigns);
-            paywalls = await paywallRepo.fetchPaywallsByUrls(urls);
+            const result = await paywallRepo.fetchPaywallsByUrls(urls);
+            paywalls = result.paywalls;
+            retryCount = result.retryCount;
         }
         else {
             paywalls = await paywallRepo.fetchPaywalls();
@@ -11866,7 +12029,8 @@ class NamiRefs {
         const totalDuration = Date.now() - startTime;
         logger.info(`Paywall fetch telemetry: strategy=${useIndividual ? "individual" : "bulk"}, ` +
             `count=${paywalls.length}, total=${totalDuration}ms, ` +
-            `campaigns=${campaignRulesDuration}ms, paywalls=${paywallsDuration}ms`);
+            `campaigns=${campaignRulesDuration}ms, paywalls=${paywallsDuration}ms` +
+            `${useIndividual ? `, retry_count=${retryCount}` : ""}`);
         return campaignRepo.finalizeCampaignRules(rawCampaigns, paywalls);
     }
     reRenderPaywall() {
@@ -12829,21 +12993,46 @@ class NamiProfileManager {
         }
         PaywallState.setIsLoggedIn(!!this.externalId);
     }
-    async login(externalId) {
+    /**
+     * Update local profile state for login: persist the external id and flip the
+     * logged-in flag in PaywallState. No network I/O — pair with `loginRemote`
+     * to perform the actual API call. Used by the async login/logout fast path.
+     */
+    loginLocal(externalId) {
+        this.setExternalId(externalId).save();
+        PaywallState.setIsLoggedIn(true);
+    }
+    /**
+     * Perform the login network call only. If the server returns a different
+     * `external_id` than the locally stored value, reconcile it into local state.
+     */
+    async loginRemote(externalId) {
         const loginData = await NamiAPI.instance.login(externalId);
-        if (loginData.external_id) {
-            PaywallState.setIsLoggedIn(true);
+        if (loginData.external_id && loginData.external_id !== this.externalId) {
+            this.setExternalId(loginData.external_id).save();
         }
-        this
-            .setExternalId(loginData.external_id)
-            .save();
     }
-    async logout() {
-        await NamiAPI.instance.logout();
+    /**
+     * Update local profile state for logout: clear the external id, persist,
+     * and flip the logged-in flag in PaywallState. Used by the async fast path.
+     */
+    logoutLocal() {
+        this.setExternalId(undefined).save();
         PaywallState.setIsLoggedIn(false);
-        this
-            .setExternalId(undefined)
-            .save();
+    }
+    /**
+     * Perform the logout network call only.
+     */
+    async logoutRemote() {
+        await NamiAPI.instance.logout();
+    }
+    async login(externalId) {
+        this.loginLocal(externalId);
+        await this.loginRemote(externalId);
+    }
+    async logout() {
+        this.logoutLocal();
+        await this.logoutRemote();
     }
 }
 NamiProfileManager.instance = new NamiProfileManager();
@@ -13163,6 +13352,21 @@ class NamiFlowManager {
     }
 }
 
+const SHOULD_SHOW_LOADING_INDICATOR = false;
+const DISABLE_ASYNC_LOGIN_LOGOUT = "disableAsyncLoginLogout";
+/**
+ * Returns true when `disableAsyncLoginLogout` appears in the active `namiCommands` list,
+ * meaning login/logout should await the underlying API call before notifying handlers.
+ *
+ * Default behavior (flag absent) is the async/fast path: update local state and notify
+ * handlers immediately while dispatching the API call as fire-and-forget.
+ *
+ * Internal feature flag — opt-out via `Nami.configure({ namiCommands: [...] })`.
+ */
+const isAsyncLoginLogoutDisabled = () => {
+    return storageService.getNamiConfig()?.namiCommands?.includes(DISABLE_ASYNC_LOGIN_LOGOUT) ?? false;
+};
+
 /**
  * @class NamiCustomerManager
  * Provides methods for managing customer-related functionality.
@@ -13224,6 +13428,30 @@ class NamiCustomerManager {
             this.invokeStateHandler(AccountStateAction.LOGIN, false, error);
             throw error;
         }
+        if (!isAsyncLoginLogoutDisabled()) {
+            // Default sync/fast path: update local state, notify handlers, and fire
+            // lifecycle immediately. Dispatch the underlying API call and entitlement
+            // refresh fire-and-forget — failures are logged but do not surface.
+            NamiProfileManager.instance.loginLocal(externalId);
+            this.invokeStateHandler(AccountStateAction.LOGIN, true);
+            if (NamiFlowManager.instance.flowOpen) {
+                const currentFlow = NamiFlowManager.instance.currentFlow;
+                const currentStep = currentFlow?.currentFlowStep;
+                if (currentStep) {
+                    if (Nami.instance.maxLogging) {
+                        logger.debug(`[NamiCustomerManager] async login success — triggering __login_success__ on step ${currentStep.id}`);
+                    }
+                    currentFlow.executeLifecycle(currentStep, NamiReservedActions.LOGIN_SUCCESS);
+                }
+            }
+            void NamiProfileManager.instance.loginRemote(externalId).catch((err) => {
+                logger.error('[NamiCustomerManager] async login API failed', err);
+            });
+            void EntitlementRepository.instance.fetchActiveEntitlements().catch((err) => {
+                logger.error('[NamiCustomerManager] async login entitlement refresh failed', err);
+            });
+            return;
+        }
         try {
             await NamiProfileManager.instance.login(externalId);
             await EntitlementRepository.instance.fetchActiveEntitlements();
@@ -13269,6 +13497,30 @@ class NamiCustomerManager {
             this.invokeStateHandler(AccountStateAction.LOGOUT, false, error);
             throw error;
         }
+        if (!isAsyncLoginLogoutDisabled()) {
+            // Default sync/fast path: clear local state, notify handlers, and fire
+            // lifecycle immediately. Dispatch the underlying API call and entitlement
+            // refresh fire-and-forget — failures are logged but do not surface.
+            NamiProfileManager.instance.logoutLocal();
+            this.invokeStateHandler(AccountStateAction.LOGOUT, true);
+            if (NamiFlowManager.instance.flowOpen) {
+                const currentFlow = NamiFlowManager.instance.currentFlow;
+                const currentStep = currentFlow?.currentFlowStep;
+                if (currentStep) {
+                    if (Nami.instance.maxLogging) {
+                        logger.debug(`[NamiCustomerManager] async logout success — triggering __logout_success__ on step ${currentStep.id}`);
+                    }
+                    currentFlow.executeLifecycle(currentStep, NamiReservedActions.LOGOUT_SUCCESS);
+                }
+            }
+            void NamiProfileManager.instance.logoutRemote().catch((err) => {
+                logger.error('[NamiCustomerManager] async logout API failed', err);
+            });
+            void EntitlementRepository.instance.fetchActiveEntitlements().catch((err) => {
+                logger.error('[NamiCustomerManager] async logout entitlement refresh failed', err);
+            });
+            return;
+        }
         try {
             await NamiProfileManager.instance.logout();
             await EntitlementRepository.instance.fetchActiveEntitlements();
@@ -14703,8 +14955,6 @@ var CampaignRuleConversionEventType;
     CampaignRuleConversionEventType["IN_APP"] = "in_app";
 })(CampaignRuleConversionEventType || (CampaignRuleConversionEventType = {}));
 
-const SHOULD_SHOW_LOADING_INDICATOR = false;
-
 function parseToSemver(versionString) {
     const [semVer, major, minor, patch, prerelease, buildmetadata] = versionString.match(/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/) ?? [];
     return {
@@ -64164,4 +64414,4 @@ function namiBuySKU(skuRefId) {
     return result;
 }
 
-export { ALREADY_CONFIGURED, ANONYMOUS_MODE, ANONYMOUS_MODE_ALREADY_OFF, ANONYMOUS_MODE_ALREADY_ON, ANONYMOUS_MODE_LOGIN_NOT_ALLOWED, ANONYMOUS_UUID, APIError, API_ACTIVE_ENTITLEMENTS, API_CAMPAIGN_RULES, API_CAMPAIGN_SESSION_TIMESTAMP, API_CONFIG, API_MAX_CALLS_LIMIT, API_PAYWALLS, API_PRODUCTS, API_RETRY_DELAY_SEC, API_TIMEOUT_LIMIT, API_VERSION, AUTH_DEVICE, AVAILABLE_ACTIVE_ENTITLEMENTS_CHANGED, AVAILABLE_CAMPAIGNS_CHANGED, AccountStateAction, AnonymousCDPError, AnonymousLoginError, AnonymousModeAlreadyOffError, AnonymousModeAlreadyOnError, BASE_STAGING_URL, BASE_URL, BASE_URL_PATH, BadRequestError, BasicNamiFlow, BorderMap, BorderSideMap, CAMPAIGN_NOT_AVAILABLE, CUSTOMER_ATTRIBUTES_KEY_PREFIX, CUSTOMER_JOURNEY_STATE_CHANGED, CUSTOM_HOST_PREFIX, CampaignNotAvailableError, CampaignRuleConversionEventType, CampaignRuleRepository, Capabilities, ClientError, ConfigRepository, ConflictError, CustomerJourneyRepository, DEVELOPMENT, DEVICE_API_TIMEOUT_LIMIT, DEVICE_ID_NOT_SET, DEVICE_ID_REQUIRED, DeviceIDRequiredError, DeviceRepository, EXTENDED_CLIENT_INFO_DELIMITER, EXTENDED_CLIENT_INFO_PREFIX, EXTENDED_PLATFORM, EXTENDED_PLATFORM_VERSION, EXTERNAL_ID_REQUIRED, EntitlementRepository, EntitlementUtils, ExternalIDRequiredError, FLOW_SCREENS_NOT_AVAILABLE, FlowScreensNotAvailableError, HTML_REGEX, INITIAL_APP_CONFIG, INITIAL_CAMPAIGN_RULES, INITIAL_PAYWALLS, INITIAL_PRODUCTS, INITIAL_SESSION_COUNTER_VALUE, INITIAL_SUCCESS, InternalServerError, KEY_SESSION_COUNTER, LIQUID_VARIABLE_REGEX, LOCAL_NAMI_ENTITLEMENTS, LOG_HTTP_REQUESTS, LOG_HTTP_TRAFFIC, LaunchCampaignError, LaunchContextResolver, LogLevel, NAMI_CONFIGURATION, NAMI_CUSTOMER_JOURNEY_STATE, NAMI_LANGUAGE_CODE, NAMI_LAST_IMPRESSION_ID, NAMI_LAUNCH_ID, NAMI_PROFILE, NAMI_PURCHASE_CHANNEL, NAMI_PURCHASE_IMPRESSION_ID, NAMI_SDK_PACKAGE_VERSION, NAMI_SDK_VERSION, NAMI_SESSION_ID, NAMI_STORAGE_KEYS, Nami, NamiAPI, NamiAnimationType, NamiCampaignManager, NamiCampaignRuleType, NamiConditionEvaluator, NamiCustomerManager, NamiEntitlementManager, NamiEventEmitter, NamiFlow, NamiFlowActionFunction, NamiFlowManager, NamiFlowStepType, NamiPaywallAction, NamiPaywallManager, PaywallManagerEvents as NamiPaywallManagerEvents, NamiProfileManager, NamiPurchaseManager, NamiRefs, NamiReservedActions, NotFoundError, PAYWALL_ACTION_EVENT, PLATFORM_ID_REQUIRED, PRODUCTION, PaywallManagerEvents, PaywallRepository, PaywallState, PlacementLabelResolver, PlatformIDRequiredError, ProductRepository, RECONFIG_SUCCESS, RetryLimitExceededError, SDKNotInitializedError, SDK_NOT_INITIALIZED, SERVER_NAMI_ENTITLEMENTS, SESSION_REQUIRED, SHOULD_SHOW_LOADING_INDICATOR, SKU_TEXT_REGEX, SMART_TEXT_PATTERN, STATUS_BAD_REQUEST, STATUS_CONFLICT, STATUS_INTERNAL_SERVER_ERROR, STATUS_NOT_FOUND, STATUS_SUCCESS, SessionService, SimpleEventTarget, StorageService, UNABLE_TO_UPDATE_CDP_ID, USE_STAGING_API, VALIDATE_PRODUCT_GROUPS, VAR_REGEX, activateEntitlementByPurchase, activeEntitlements, aggregateScreenreaderText, allCampaigns, allPaywalls, applyEntitlementActivation, audienceSplitPosition, bestUrlCampaignMatch, bigintToUuid, checkAnySkuHasPromoOffer, checkAnySkuHasTrialOffer, convertISO8601PeriodToText, convertLocale, convertOfferToPricingPhase, createNamiEntitlements, currentSku, empty, extractStandardPricingPhases, formatDate, formattedPrice, generateUUID, getApiCampaigns, getApiPaywalls, getBaseUrl, getBillingPeriodNumber, getCurrencyFormat, getDeviceData, getDeviceFormFactor, getDeviceScaleFactor, getEffectiveWebStyle, getEntitlementRefIdsForSku, getExtendedClientInfo, getFreeTrialPeriod, getInitialCampaigns, getInitialPaywalls, getPaywall, getPaywallDataFromLabel, getPercentagePriceDifference, getPeriodNumberInDays, getPeriodNumberInWeeks, getPlatformAdapters, getPriceDifference, getPricePerMonth, getProductDetail, getPurchaseAdapter, getReferenceSku, getSkuProductDetailKeys, getSkuSmartTextValue, getSlideSmartTextValue, getStandardBillingPeriod, getTranslate, getUrlParams, handleErrors, hasAllPaywalls, hasCapability, hasPurchaseManagement, initialState, invokeHandler, isAnonymousMode, isInitialConfigCompressed, isNamiFlowCampaign, isSubscription, isValidISODate, isValidUrl, logger, mapAnonymousCampaigns, namiBuySKU, normalizeLaunchContext, parseToSemver, postConversion, productDetail, registerPlatformAdapters, registerPurchaseAdapter, selectSegment, setActiveNamiEntitlements, shouldValidateProductGroups, skuItems, skuMapFromEntitlements, storageService, toDouble, toNamiEntitlements, toNamiSKU, tryParseB64Gzip, tryParseJson, updateRelatedSKUsForNamiEntitlement, uuidFromSplitPosition, validateMinSDKVersion };
+export { ALREADY_CONFIGURED, ANONYMOUS_MODE, ANONYMOUS_MODE_ALREADY_OFF, ANONYMOUS_MODE_ALREADY_ON, ANONYMOUS_MODE_LOGIN_NOT_ALLOWED, ANONYMOUS_UUID, APIError, API_ACTIVE_ENTITLEMENTS, API_CAMPAIGN_RULES, API_CAMPAIGN_SESSION_TIMESTAMP, API_CONFIG, API_MAX_CALLS_LIMIT, API_PAYWALLS, API_PRODUCTS, API_RETRY_DELAY_SEC, API_TIMEOUT_LIMIT, API_VERSION, AUTH_DEVICE, AVAILABLE_ACTIVE_ENTITLEMENTS_CHANGED, AVAILABLE_CAMPAIGNS_CHANGED, AccountStateAction, AnonymousCDPError, AnonymousLoginError, AnonymousModeAlreadyOffError, AnonymousModeAlreadyOnError, BASE_STAGING_URL, BASE_URL, BASE_URL_PATH, BadRequestError, BasicNamiFlow, BorderMap, BorderSideMap, CAMPAIGN_NOT_AVAILABLE, CUSTOMER_ATTRIBUTES_KEY_PREFIX, CUSTOMER_JOURNEY_STATE_CHANGED, CUSTOM_HOST_PREFIX, CampaignNotAvailableError, CampaignRuleConversionEventType, CampaignRuleRepository, Capabilities, ClientError, ConfigRepository, ConflictError, CustomerJourneyRepository, DEVELOPMENT, DEVICE_API_TIMEOUT_LIMIT, DEVICE_ID_NOT_SET, DEVICE_ID_REQUIRED, DISABLE_ASYNC_LOGIN_LOGOUT, DeviceIDRequiredError, DeviceRepository, EXTENDED_CLIENT_INFO_DELIMITER, EXTENDED_CLIENT_INFO_PREFIX, EXTENDED_PLATFORM, EXTENDED_PLATFORM_VERSION, EXTERNAL_ID_REQUIRED, EntitlementRepository, EntitlementUtils, ExternalIDRequiredError, FLOW_SCREENS_NOT_AVAILABLE, FlowScreensNotAvailableError, HTML_REGEX, INITIAL_APP_CONFIG, INITIAL_CAMPAIGN_RULES, INITIAL_PAYWALLS, INITIAL_PRODUCTS, INITIAL_SESSION_COUNTER_VALUE, INITIAL_SUCCESS, InternalServerError, KEY_SESSION_COUNTER, LIQUID_VARIABLE_REGEX, LOCAL_NAMI_ENTITLEMENTS, LOG_HTTP_REQUESTS, LOG_HTTP_TRAFFIC, LaunchCampaignError, LaunchContextResolver, LogLevel, NAMI_CONFIGURATION, NAMI_CUSTOMER_JOURNEY_STATE, NAMI_LANGUAGE_CODE, NAMI_LAST_IMPRESSION_ID, NAMI_LAUNCH_ID, NAMI_PROFILE, NAMI_PURCHASE_CHANNEL, NAMI_PURCHASE_IMPRESSION_ID, NAMI_SDK_PACKAGE_VERSION, NAMI_SDK_VERSION, NAMI_SESSION_ID, NAMI_STORAGE_KEYS, Nami, NamiAPI, NamiAnimationType, NamiCampaignManager, NamiCampaignRuleType, NamiConditionEvaluator, NamiCustomerManager, NamiEntitlementManager, NamiEventEmitter, NamiFlow, NamiFlowActionFunction, NamiFlowManager, NamiFlowStepType, NamiPaywallAction, NamiPaywallManager, PaywallManagerEvents as NamiPaywallManagerEvents, NamiProfileManager, NamiPurchaseManager, NamiRefs, NamiReservedActions, NotFoundError, PAYWALL_ACTION_EVENT, PLATFORM_ID_REQUIRED, PRODUCTION, PaywallManagerEvents, PaywallRepository, PaywallState, PlacementLabelResolver, PlatformIDRequiredError, ProductRepository, RECONFIG_SUCCESS, RetryLimitExceededError, SDKNotInitializedError, SDK_NOT_INITIALIZED, SERVER_NAMI_ENTITLEMENTS, SESSION_REQUIRED, SHOULD_SHOW_LOADING_INDICATOR, SKU_TEXT_REGEX, SMART_TEXT_PATTERN, STATUS_BAD_REQUEST, STATUS_CONFLICT, STATUS_INTERNAL_SERVER_ERROR, STATUS_NOT_FOUND, STATUS_SUCCESS, SessionService, SimpleEventTarget, StorageService, UNABLE_TO_UPDATE_CDP_ID, USE_STAGING_API, VALIDATE_PRODUCT_GROUPS, VAR_REGEX, activateEntitlementByPurchase, activeEntitlements, aggregateScreenreaderText, allCampaigns, allPaywalls, applyEntitlementActivation, audienceSplitPosition, bestUrlCampaignMatch, bigintToUuid, checkAnySkuHasPromoOffer, checkAnySkuHasTrialOffer, convertISO8601PeriodToText, convertLocale, convertOfferToPricingPhase, createNamiEntitlements, currentSku, empty, extractStandardPricingPhases, formatDate, formattedPrice, generateUUID, getApiCampaigns, getApiPaywalls, getBaseUrl, getBillingPeriodNumber, getCurrencyFormat, getDeviceData, getDeviceFormFactor, getDeviceScaleFactor, getEffectiveWebStyle, getEntitlementRefIdsForSku, getExtendedClientInfo, getFreeTrialPeriod, getInitialCampaigns, getInitialPaywalls, getPaywall, getPaywallDataFromLabel, getPercentagePriceDifference, getPeriodNumberInDays, getPeriodNumberInWeeks, getPlatformAdapters, getPriceDifference, getPricePerMonth, getProductDetail, getPurchaseAdapter, getReferenceSku, getSkuProductDetailKeys, getSkuSmartTextValue, getSlideSmartTextValue, getStandardBillingPeriod, getTranslate, getUrlParams, handleErrors, hasAllPaywalls, hasCapability, hasPurchaseManagement, initialState, invokeHandler, isAnonymousMode, isInitialConfigCompressed, isNamiFlowCampaign, isSubscription, isValidISODate, isValidUrl, logger, mapAnonymousCampaigns, namiBuySKU, normalizeLaunchContext, parseToSemver, postConversion, productDetail, registerPlatformAdapters, registerPurchaseAdapter, selectSegment, setActiveNamiEntitlements, shouldValidateProductGroups, skuItems, skuMapFromEntitlements, storageService, toDouble, toNamiEntitlements, toNamiSKU, tryParseB64Gzip, tryParseJson, updateRelatedSKUsForNamiEntitlement, uuidFromSplitPosition, validateMinSDKVersion };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@namiml/sdk-core",
-  "version": "3.4.0-dev.202605190129",
+  "version": "3.4.0-dev.202605191719",
   "description": "Platform-agnostic core for the Nami SDK — business logic, API, types, and state management",
   "type": "module",
   "main": "./dist/index.cjs",