@nekuda/webmcp-sdk 0.7.0-dev.18.1 → 0.7.0-dev.19.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.js CHANGED
@@ -1105,7 +1105,7 @@ function shapeMetrics(inputSchema) {
1105
1105
 
1106
1106
  // src/telemetry.ts
1107
1107
  var SDK_NAME = "@nekuda/webmcp-sdk";
1108
- var SDK_VERSION = "0.7.0-dev.18.1";
1108
+ var SDK_VERSION = "0.7.0-dev.19.1";
1109
1109
  var INSTALL_MODES = ["npm", "cdn_snippet"];
1110
1110
  var SDK_INSTALL_MODE = INSTALL_MODES.find((mode) => mode === (typeof __WEBMCP_INSTALL_MODE__ === "string" ? __WEBMCP_INSTALL_MODE__ : "")) ?? "npm";
1111
1111
  function parseSampleRate(raw) {
@@ -15,9 +15,12 @@
15
15
  * may share a request as a `batch` envelope (see {@link PAGE_BATCH_WINDOW_MS}).
16
16
  *
17
17
  * No browser storage is touched anywhere in this channel — no `visitorId`, no
18
- * stored `sessionId` (the ePrivacy Art. 5(3) concern). Cross-visit stitching is
19
- * deliberately impossible here; the authenticated `tracking` channel keeps its own
20
- * storage-backed identity, and this one never reads it.
18
+ * stored `sessionId` (the ePrivacy Art. 5(3) concern). Nothing this SDK sends can
19
+ * stitch two visits together; the authenticated `tracking` channel keeps its own
20
+ * storage-backed identity, and this one never reads it. The ingest edge derives a
21
+ * bounded identifier of its own from the request it receives (a daily-salted hash,
22
+ * see *Privacy posture* in `docs/telemetry-schema.md`), which is not something the
23
+ * client participates in or can observe.
21
24
  *
22
25
  * Every field an event may carry is gated by the baked-in allowlists in
23
26
  * `src/telemetry-fields.ts` — one keyed by event path, one by per-tool field.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@nekuda/webmcp-sdk",
3
- "version": "0.7.0-dev.18.1",
3
+ "version": "0.7.0-dev.19.1",
4
4
  "type": "module",
5
5
  "description": "Phase-1 WebMCP SDK: a thin wrapper over document.modelContext that plugin-generated code targets — defineTool + register/unregister lifecycle. This package pins the plugin↔SDK seam; anonymous tool-call tracking (backend transport via apiKey, OTEL LogRecords via otel) is opt-in through registerTools and default-silent, while anonymous usage telemetry is a separate unauthenticated channel that is on by default (opt out with telemetry: false).",
6
6
  "main": "./dist/index.js",