@pendo/agent 2.339.0 → 2.340.0

package/dist/pendo.module.js

@@ -4046,8 +4046,8 @@ let SERVER = '';
 let ASSET_HOST = '';
 let ASSET_PATH = '';
 let DESIGNER_SERVER = '';
-let VERSION = '2.339.0_';
-let PACKAGE_VERSION = '2.339.0';
+let VERSION = '2.340.0_';
+let PACKAGE_VERSION = '2.340.0';
 let LOADER = 'xhr';
 /* eslint-enable web-sdk-eslint-rules/no-gulp-env-references */
 /**
@@ -4464,6 +4464,135 @@ class LogEmitter extends EventTarget {
 }
 const log = new LogEmitter();
 
+/** Key used to lookup the consent collection policy in the pendo configuration. */
+const CONSENT_COLLECTION = 'cookieConsentCollection';
+/** Key used to lookup the analytics events in the consent collection policy. */
+const ANALYTICS = 'analytics';
+/** Key used to lookup the guide analytics events in the consent collection policy. */
+const GUIDE_ANALYTICS = 'guideAnalytics';
+/** Key used to lookup the text collection mode in the consent collection policy. */
+const TEXT_COLLECTION = 'textCollection';
+const TEXT_COLLECTION_LEVELS = ['none', 'whitelist', 'all'];
+let enabledProducts = null;
+function getClassification() {
+    return ConfigReader.get(CONSENT_COLLECTION) || {};
+}
+function toTierList(tiers) {
+    if (_.isString(tiers))
+        return [tiers];
+    return _.isArray(tiers) ? tiers : [];
+}
+function warnOnUnconfiguredTiers(grantedTiers, classification) {
+    _.each(grantedTiers, function (tier) {
+        if (_.isUndefined(classification[tier])) {
+            log.warn('Consent tier "' + tier + '" is not present in ' + CONSENT_COLLECTION + '.');
+        }
+    });
+}
+function moreTextPermissive(a, b) {
+    return TEXT_COLLECTION_LEVELS.indexOf(b) > TEXT_COLLECTION_LEVELS.indexOf(a) ? b : a;
+}
+function orBoolean(a, b) {
+    return a || Boolean(b);
+}
+function unionArrays(a, b) {
+    return _.union(a, b);
+}
+// How a granted tier's value for a product combines with what's been resolved so far.
+// `initial` doubles as what an ungranted tier contributes -- an unlisted product falls
+// back to DEFAULT_RESOLVER, the plain "any granted tier turns it on" boolean rule.
+const RESOLVERS = {
+    [TEXT_COLLECTION]: { initial: TEXT_COLLECTION_LEVELS[0], combine: moreTextPermissive },
+    [ANALYTICS]: { initial: [], combine: unionArrays },
+    [GUIDE_ANALYTICS]: { initial: [], combine: unionArrays }
+};
+const DEFAULT_RESOLVER = { initial: false, combine: orBoolean };
+/**
+ * Resolves the granted tiers against the configured product classification.
+ *
+ * A product the classification mentions anywhere starts at its resolver's `initial` value
+ * -- a tier the visitor hasn't opted into contributes that same `initial` value, so it has
+ * no say over the product, even to explicitly allow something. Only a granted tier's actual
+ * value is combined in, so opting into an additional tier only ever adds capability. Most
+ * products are plain booleans (DEFAULT_RESOLVER); `textCollection`, `analytics`, and
+ * `guideAnalytics` have their own entries in RESOLVERS since none of them is a boolean.
+ *
+ * @access private
+ * @param {string | string[]} tiers tier or tiers the visitor consented to
+ * @returns {object} map of product to its resolved value
+ */
+function applyConsentTiers(tiers) {
+    const cookieConsentCollection = getClassification();
+    const consentedCookieTiers = toTierList(tiers);
+    const resolved = {};
+    warnOnUnconfiguredTiers(consentedCookieTiers, cookieConsentCollection);
+    _.each(cookieConsentCollection, function (products, tier) {
+        var isGranted = _.contains(consentedCookieTiers, tier);
+        _.each(products, function (level, product) {
+            var resolver = RESOLVERS[product] || DEFAULT_RESOLVER;
+            var current = _.has(resolved, product) ? resolved[product] : resolver.initial;
+            var contributed = isGranted ? level : resolver.initial;
+            resolved[product] = resolver.combine(current, contributed);
+        });
+    });
+    enabledProducts = resolved;
+    return getEnabledProducts();
+}
+function getEnabledProducts() {
+    return enabledProducts ? _.extend({}, enabledProducts) : null;
+}
+/**
+ * A product is enabled unless a tier has explicitly resolved it to false -- with no cookie
+ * consent configured at all, or a product no tier ever mentions, there's nothing to deny.
+ *
+ * @access private
+ * @param {string} product
+ * @returns {boolean}
+ */
+function isProductEnabled(product) {
+    if (!enabledProducts || _.isUndefined(enabledProducts[product]))
+        return true;
+    return enabledProducts[product] === true;
+}
+function isTrackingConsentDenied() {
+    return !isProductEnabled('identity');
+}
+/**
+ * Session replay is denied whenever tracking itself is denied (DNT) -- a visitor
+ * who can't be identified shouldn't have their session recorded either -- or when a
+ * tier explicitly denies the `replay` product on its own.
+ *
+ * @access private
+ * @returns {boolean}
+ */
+function isReplayConsentDenied() {
+    return isTrackingConsentDenied() || !isProductEnabled('replay');
+}
+/**
+ * Returns the consented text collection mode of the visitor.
+ *
+ * @access private
+ * @returns {string} 'all', 'whitelist', or 'none'
+ */
+function getTextCollectionMode() {
+    if (!enabledProducts)
+        return 'all';
+    var mode = enabledProducts[TEXT_COLLECTION];
+    return _.isUndefined(mode) ? 'all' : mode;
+}
+function hasConsentForProduct(type, product) {
+    if (!enabledProducts)
+        return true;
+    var allowed = enabledProducts[product];
+    return _.isUndefined(allowed) ? true : _.contains(allowed, type);
+}
+function hasConsentForAnalyticsEvent(type) {
+    return !isTrackingConsentDenied() && hasConsentForProduct(type, ANALYTICS);
+}
+function hasConsentForGuideEvent(type) {
+    return hasConsentForProduct(type, GUIDE_ANALYTICS);
+}
+
 const allowKeys = function () {
     var allowKeys = ConfigReader.get('storage.allowKeys') || '*';
     return _.isArray(allowKeys) ? _.indexBy(allowKeys) : allowKeys;
@@ -4529,7 +4658,7 @@ function createStorageShim(storageAccessor) {
     }
 }
 var pendoLocalStorage$3 = createStorageShim(function () { return window.localStorage; });
-var pendoSessionStorage$2 = createStorageShim(function () { return window.sessionStorage; });
+var pendoSessionStorage$3 = createStorageShim(function () { return window.sessionStorage; });
 
 /**
  * Safely deserializes JSON if value is a valid json string.
@@ -4556,9 +4685,11 @@ var areCookiesEnabled = true;
 var allowLocalStorageOnly = function () {
     return ConfigReader.get('localStorageOnly');
 };
-// This config setting really describes any persistence at all.
+/*
+ * This config setting really describes any persistence at all.
+ */
 var storageIsDisabled = function () {
-    return !!ConfigReader.get('disableCookies');
+    return !!ConfigReader.get('disableCookies') || isTrackingConsentDenied();
 };
 function enableCookies(enabled) {
     areCookiesEnabled = enabled;
@@ -4914,7 +5045,7 @@ var agentStorage = (function () {
             }
         });
     }
-    const wrappedPendoSessionStorage = _.extend({}, pendoSessionStorage$2);
+    const wrappedPendoSessionStorage = _.extend({}, pendoSessionStorage$3);
     wrappedPendoSessionStorage.setItem = wrapStorageWriteMethod(wrappedPendoSessionStorage.setItem, 'hasSession');
     const wrappedPendoLocalStorage = _.extend({}, pendoLocalStorage$3);
     wrappedPendoLocalStorage.setItem = wrapStorageWriteMethod(wrappedPendoLocalStorage.setItem, 'hasLocal');
@@ -5501,7 +5632,7 @@ else {
     };
 }
 
-const pendoSessionStorage$1 = agentStorage.getSession();
+const pendoSessionStorage$2 = agentStorage.getSession();
 /*
 * EventTracer.addTracerIds - Returns a new copy of the original object with
 * additional, contextual IDs added that provide a means of tracing event output
@@ -5583,7 +5714,7 @@ function createEventTracer(window) {
         return tabId;
     }
     function getSessionStorage() {
-        return sessionStorageMemoryCache(MemoryStorage, pendoSessionStorage$1);
+        return sessionStorageMemoryCache(MemoryStorage, pendoSessionStorage$2);
     }
     function tabIdChanged(callback) {
         if (!sniffer.addEventListener)
@@ -5771,6 +5902,8 @@ var Events = (function () {
         new EventType('ptm:paused', [LIFECYCLE]),
         new EventType('recording:unpaused', [LIFECYCLE]),
         new EventType('recording:paused', [LIFECYCLE]),
+        new EventType('consent:changed', [LIFECYCLE]),
+        new EventType('identifyRequested', [DEBUG, LIFECYCLE]),
         new EventType('childFrameJoined', [FRAMES]),
         new EventType('tabIdChanged:self', [DEBUG, LIFECYCLE])
     ];
@@ -5987,6 +6120,7 @@ var SIZE_UNIQUE_ID = 11;
 const VISITOR_ID_KEY = 'visitorId';
 const OLD_VISITOR_ID_KEY = 'oldVisitorId';
 const ACCOUNT_ID_KEY = 'accountId';
+const COOKIELESS_VISITOR_ID = '__cookieless_visitor__';
 /**
  * Generate a unique id string, usually for a visitor id. Default for anonymous visitor ids.
  *
@@ -6038,6 +6172,9 @@ var DEFAULT_VISITOR_ID = 'VISITOR-UNIQUE-ID';
 var isDefaultVisitor = function (vId) {
     return DEFAULT_VISITOR_ID === vId;
 };
+var isVisitorDNT = function (vId = pendo$1.visitorId) {
+    return vId === COOKIELESS_VISITOR_ID;
+};
 var SUBACCOUNT_DELIMITER = '::';
 var isSubaccount = function (aId) {
     return new RegExp(SUBACCOUNT_DELIMITER).test(aId);
@@ -6085,6 +6222,9 @@ function generate_anonymous_visitor_id() {
     return generate_unique_id(TEMP_PREFIX);
 }
 function persistVisitorId(visitorId) {
+    if (isTrackingConsentDenied()) {
+        visitorId = COOKIELESS_VISITOR_ID;
+    }
     if (pendo$1.visitorId === visitorId)
         return visitorId;
     if (shouldPersist()) {
@@ -6153,6 +6293,10 @@ var set_visitor_id = function (new_visitor_id) {
         log.info('Invalid visitor id ' + new_visitor_id);
         return;
     }
+    if (isTrackingConsentDenied() && new_visitor_id !== COOKIELESS_VISITOR_ID) {
+        log.warn('Ignoring visitor id ' + new_visitor_id + ' while identity consent is dnt.');
+        return;
+    }
     persistVisitorId('' + new_visitor_id);
 };
 function set_old_visitor_id(new_old_visitor_id) {
@@ -6197,6 +6341,10 @@ var set_account_id = function (new_account_id) {
         log.info('No account id provided');
         return;
     }
+    if (isTrackingConsentDenied()) {
+        log.warn('Ignoring account id ' + new_account_id + ' while identity consent is dnt.');
+        return;
+    }
     if (!isValidId(new_account_id)) {
         clearAccount();
         log.info('Invalid account id: ' + new_account_id + '. Account cleared');
@@ -6239,10 +6387,12 @@ function clearAccount() {
  *
  * @access public
  * @category Identity
+ * @param {object} [options]
+ * @param {boolean} [options.doNotTrack] register the visitor as DNT instead of a new anonymous visitor
  * @example
  * pendo.clearSession()
  */
-function clearSession() {
+function clearSession(options = { doNotTrack: false }) {
     var props = {
         old_visitor_id: get_visitor_id({ generate: false }),
         old_account_id: get_account_id(),
@@ -6251,7 +6401,12 @@ function clearSession() {
     removeIdentificationCookies();
     delete pendo$1.visitorId;
     delete pendo$1.accountId;
-    get_visitor_id({ generate: true });
+    if (options.doNotTrack) {
+        set_visitor_id(COOKIELESS_VISITOR_ID);
+    }
+    else {
+        get_visitor_id({ generate: true });
+    }
     _.extend(props, {
         visitor_id: get_visitor_id(),
         account_id: get_account_id()
@@ -11072,6 +11227,9 @@ function wouldBeVisibleAfterAutoScroll(element) {
 function scrollElementIntoParentRect(element, scrollParent) {
     var clientRect = getClientRect(element);
     var scrollRect = getClientRect(scrollParent);
+    // A fixed element should already be visible so no need to scroll to it.
+    if (clientRect.fixed && !scrollRect.fixed)
+        return;
     var yScrollAmount = 0;
     var xScrollAmount = 0;
     var diff;
@@ -11826,7 +11984,7 @@ _.extend(dom.prototype, DomEvent.$, DomQuery.$);
 
 // Domains that Pendo owns, will be swapped in by build patches
 const pendoDomainPatterns = [
-        /^https:\/\/((adopt|oem)\.)?((us1)\.)?(app|via|adopt|cdn|oem|novus-api|novus)(\.(au|eu|gov|hsbc|jpn|tv))?\.pendo\.io$/,
+        /^https:\/\/((adopt|oem)\.)?((us1)\.)?(app|via|adopt|cdn|oem|novus-api|novus|portal)(\.(au|eu|gov|hsbc|jpn|tv))?\.pendo\.io$/,
         /^https:\/\/([0-9]{8}t[0-9]{4}-dot-)(pendo-au|pendo-eu|pendo-govramp|pendo-hsbc|pendo-io|pendo-jp-prod|pendo-tv|pendo-us1)\.appspot\.com$/,
         /^https:\/\/hotfix-(ops|app)-([0-9]+-dot-)(pendo-au|pendo-eu|pendo-govramp|pendo-hsbc|pendo-io|pendo-jp-prod|pendo-tv|pendo-us1)\.appspot\.com$/,
         /^https:\/\/(pendo-au|pendo-eu|pendo-govramp|pendo-hsbc|pendo-io|pendo-jp-prod|pendo-tv|pendo-us1)-static\.storage\.googleapis\.com$/
@@ -13394,7 +13552,7 @@ function createSendQueue(options, send, guaranteedSend) {
 }
 function filterNonGuideAnalytics(beacon) {
     return function (event, next) {
-        var isGuidesOnly = ConfigReader.get('excludeNonGuideAnalytics');
+        var isGuidesOnly = ConfigReader.get('excludeNonGuideAnalytics') || isTrackingConsentDenied();
         if (beacon === 'ptm' && isGuidesOnly) {
             return;
         }
@@ -13403,7 +13561,7 @@ function filterNonGuideAnalytics(beacon) {
 }
 function filterAnalyticsByType(event, next) {
     var excludeEvents = ConfigReader.get('analytics.excludeEvents');
-    if (_.indexOf(excludeEvents, event.type) >= 0) {
+    if (_.indexOf(excludeEvents, event.type) >= 0 || !hasConsentForAnalyticsEvent(event.type)) {
         return;
     }
     next(event);
@@ -14039,13 +14197,15 @@ const internalEvents = {
     onEventCaptured: 1,
     segmentFlagsUpdated: 1,
     segmentFlagsReady: 1,
-    segmentFlagsError: 1
+    segmentFlagsError: 1,
+    identifyRequested: 1
 };
 const browserEvents = {
     ready: 1,
     segmentFlagsUpdated: 1,
     segmentFlagsReady: 1,
-    segmentFlagsError: 1
+    segmentFlagsError: 1,
+    identifyRequested: 1
 };
 const supportedPublicEvents = [
     'ready',
@@ -14059,7 +14219,8 @@ const supportedPublicEvents = [
     'segmentFlagsError',
     'validateGuide',
     'validateLauncher',
-    'validateGlobalScript'
+    'validateGlobalScript',
+    'identifyRequested'
 ];
 function forwardInternalEvents(Events) {
     const unsubscribes = _.reduce(supportedPublicEvents, function (unsubscribes, eventName) {
@@ -18391,6 +18552,10 @@ var updateVisitorOptions = function (options = {}) {
     if (!_.isObject(options)) {
         options = {};
     }
+    if (isTrackingConsentDenied()) {
+        log.warn('Ignoring identify/updateOptions metadata while identity consent is dnt.');
+        return { options: getMetadata(), hashChanged: false, storeChanged: false };
+    }
     if (options.jwt && options.signingKeyName) {
         var jwtOptions = JWT.getJwtOptions(options, 'updateOptions');
         if (jwtOptions) {
@@ -25030,9 +25195,15 @@ var processGuideEventCache = function (options) {
 var getGuideEventCache = function () {
     return guideEvtCache;
 };
+function filterGuideAnalyticsByType(event, next) {
+    if (!hasConsentForGuideEvent(event.type)) {
+        return;
+    }
+    next(event);
+}
 function createGuideEventQueue(options) {
     const processSilos = pipeline(filterAnalyticsDisabled, splitSiloOnFieldChange('visitor_id'), splitSiloOnFieldChange('props.source'), filterAccountIdsForSendQueue, compressSilo, errorLogger(), addSiloParams(options), addAccountIdParamIfAdoptPartner, addSourceParamIfPresent, convertSiloToObject);
-    const packageSilos = pipeline(filterBrokenTimestamps, fireEventCaptured, eventSequence, siloReducer(options.cache), _.noop // do not move to the silo queue until manual flush
+    const packageSilos = pipeline(filterBrokenTimestamps, filterGuideAnalyticsByType, fireEventCaptured, eventSequence, siloReducer(options.cache), _.noop // do not move to the silo queue until manual flush
     );
     return new EventQueue(_.extend({ processSilos, packageSilos }, options));
 }
@@ -25137,6 +25308,12 @@ var initGuides = function (observer) {
         const { guideIds } = event.data[0];
         pruneBadges(guideIds);
     });
+    Events['consent:changed'].on(function (event) {
+        var { guides } = event.data[0];
+        if (_.isUndefined(guides))
+            return;
+        guides ? enableGuides() : disableGuides();
+    });
     teardownFns.push(onTurbolinksPageLoad(document, function onPageLoad() {
         if (pendoDotUrl.get() === reloadGuides.lastUrl) {
             // Force a reload if Turbolinks replaces the document body without changing the url
@@ -25257,6 +25434,14 @@ var setGuidesDisabled = function (areDisabled) {
     originalOptions.disableGuides = areDisabled;
     ConfigReader.setLocalConfig(originalOptions);
 };
+function enableGuides() {
+    setGuidesDisabled(false);
+    forceGuideReload();
+}
+function disableGuides() {
+    setGuidesDisabled(true);
+    resetPendoUI();
+}
 var setGuidesDelayed = function (areDelayed) {
     var originalOptions = ConfigReader.getLocalConfig();
     delete originalOptions.delayGuides;
@@ -27017,11 +27202,24 @@ const Keys = (function () {
 })();
 
 const pendoLocalStorage = agentStorage.getLocal();
+const pendoSessionStorage$1 = agentStorage.getSession();
+const DESIGNER_LAUNCH_RECEIPT = 'pendo-designer-launch-receipt';
 var DesignerV2 = (function () {
     // Always use the production server for CNAME customers
     var host = DESIGNER_SERVER || SERVER;
     var bucket = 'in-app-designer';
     var target = 'latest';
+    /**
+     * The designerId of a designer session launched from this tab. Read back after a
+     * page reload to tell a relaunch of that session apart from a URL token planted
+     * by another origin.
+     *
+     * @name pendo-designer-launch-receipt
+     * @category Cookies/sessionStorage
+     * @access public
+     * @label DESIGNER_LAUNCH_RECEIPT
+     */
+    agentStorage.registry.addSession(DESIGNER_LAUNCH_RECEIPT);
     Events.leaderChanged.on(function () {
         // check to make sure that we aren't trying to launch nav mode from a designer frame
         var inDesignerOrPreview = /pendo-/.test(window.name) || isInDesignerPreviewMode();
@@ -27146,13 +27344,20 @@ var DesignerV2 = (function () {
             return false;
         }
     }
+    function writeLaunchReceipt(designerId) {
+        if (!designerId)
+            return;
+        pendoSessionStorage$1.setItem(DESIGNER_LAUNCH_RECEIPT, designerId);
+    }
+    function hasLaunchReceipt(designerId) {
+        if (!designerId)
+            return false;
+        return pendoSessionStorage$1.getItem(DESIGNER_LAUNCH_RECEIPT) === designerId;
+    }
     function launchOnToken(url) {
         if (isDesignerFrame(window.name)) {
             return;
         }
-        if (isPendoDomain(window.location.origin) && !hasSameOriginOpener()) {
-            return;
-        }
         var tokenParamTest = /pendo-designer=([A-Za-z0-9-]+)/;
         if (!tokenParamTest.test(url))
             return;
@@ -27160,6 +27365,9 @@ var DesignerV2 = (function () {
         if (!tokenMatch)
             return;
         var parsedToken = parsePendoToken(tokenMatch[1]);
+        if (isPendoDomain(window.location.origin) && !hasSameOriginOpener() && !hasLaunchReceipt(parsedToken.designerId)) {
+            return;
+        }
         var validAssetHost = getValidDesignerHost(parsedToken);
         var validTarget = getValidTarget(parsedToken);
         // clear stored designer state if we're launching from a token
@@ -27211,6 +27419,7 @@ var DesignerV2 = (function () {
         if (!options) {
             options = {};
         }
+        writeLaunchReceipt(options.designerId);
         var validAssetHost = getValidDesignerHost(options);
         var validBucket = getValidGCSBucket(options);
         var validTarget = getValidTarget(options);
@@ -28960,7 +29169,10 @@ const PluginAPI = {
     agentStorage,
     analytics: {
         ptm: () => eventQueue,
-        collectEvent
+        collectEvent,
+        hasConsentForAnalyticsEvent,
+        getTextCollectionMode,
+        isReplayConsentDenied
     },
     attachEvent,
     attachEventInternal,
@@ -29163,14 +29375,27 @@ function initIdentityEvents() {
             }
         }
     };
+    const requestReidentification = function () {
+        if (!isTrackingConsentDenied() && isVisitorDNT()) {
+            Events.identifyRequested.trigger();
+        }
+    };
+    const handleConsentChange = function (event) {
+        var { identity } = event.data[0];
+        if (_.isUndefined(identity))
+            return;
+        identity ? requestReidentification() : clearSession({ doNotTrack: true });
+    };
     Events.identify.on(collectIdentifyEvent);
     Events.metadata.on(collectMetadataEvent);
     Events.identify.on(handleIdentifyEvent);
+    Events['consent:changed'].on(handleConsentChange);
     initialized = true;
     return function () {
         Events.identify.off(collectIdentifyEvent);
         Events.metadata.off(collectMetadataEvent);
         Events.identify.off(handleIdentifyEvent);
+        Events['consent:changed'].off(handleConsentChange);
         initialized = false;
     };
 }
@@ -29524,7 +29749,7 @@ function registerEventHandlers({ events = [] }) {
 function applyDoNotTrackConfigOverrides(options) {
     options.excludeNonGuideAnalytics = true;
     options.disableCookies = true;
-    options.visitor = { id: '__cookieless_visitor__' };
+    options.visitor = { id: COOKIELESS_VISITOR_ID };
     delete options.account;
     delete options.parentAccount;
 }
@@ -30901,6 +31126,28 @@ logPublic.setActiveContexts = setActiveContexts;
 logPublic.showLogHistory = showLogHistory;
 logPublic.getLoggedContexts = getLoggedContexts;
 
+/**
+ * Enforces the cookie consent policy a visitor has agreed to. The policy is defined by the subscription's cookie consent configuration,
+ * and is used to determine whether each product the web SDK may run.
+ *
+ * @access public
+ * @category Core
+ * @param {string | string[]} tiers tier or tiers the visitor consented to
+ * @returns {object} map of product to its resolved value -- `guides` and `identity` are
+ *   booleans (identity disabled means DNT), `textCollection` is `none`/`whitelist`/`all`,
+ *   `analytics` and `guideAnalytics` are each an array of allowed event types
+ * @example
+ * pendo.updateCookieConsent('strictlyNecessary');
+ * @example
+ * pendo.updateCookieConsent(['strictlyNecessary', 'functional']);
+ */
+function updateCookieConsent(tiers) {
+    const enabledProducts = applyConsentTiers(tiers);
+    Events['consent:changed'].trigger(enabledProducts);
+    log.debug('Cookie consent updated for ' + JSON.stringify(tiers) + '.');
+    return enabledProducts;
+}
+
 /**
  * Shared helper for event collection
  */
@@ -31973,6 +32220,7 @@ function exportPublicApi(pendo) {
     // cache.js
     pendo.flushNow = exportPendoCoreOnly(flushNow);
     pendo.teardown = makeSafe(teardown);
+    pendo.updateCookieConsent = makeSafe(updateCookieConsent);
     // guides.js
     pendo.initGuides = exportPendoCoreOnly(initGuides);
     pendo.loadGuides = exportPendoCoreOnly(loadGuides);
@@ -34512,12 +34760,15 @@ var FramesModule = (function () {
         receiveLastGuideStepSeen(context, payload) {
             if (payload.frameId === context.state.frameId)
                 return;
-            // The extension and native installs will never have the same visitor id
+            // The extension and native installs will never have the same visitor id,
+            // and neither will frames from different applications (apiKeys).
             // However, all frames need to keep an accurate record of what has been viewed, to ensure
-            // that native frames do not attempt to re-display extension guides, and vice versa
+            // that one agent's frames do not attempt to re-display another agent's guides
             var originatingFrame = context.state.frames[payload.frameId];
             var originatingInstallType = _.get(originatingFrame, 'agentInstallType');
-            if (originatingInstallType && originatingInstallType !== context.state.agentInstallType) {
+            var originatingApiKey = _.get(originatingFrame, 'apiKey');
+            if ((originatingInstallType && originatingInstallType !== context.state.agentInstallType) ||
+                (originatingApiKey && originatingApiKey !== pendo$1.apiKey)) {
                 delete payload.lastGuideStepSeen.visitorId;
             }
             context.dispatch('guideState/updateLastGuideStepSeen', payload.lastGuideStepSeen, { root: true });
@@ -42313,9 +42564,11 @@ function TextCapture() {
     }
     function isEnabled() {
         // this preserves the ability for a user to disable text collection after initialization
-        return !pendoGlobal.excludeAllText;
+        return !pendoGlobal.excludeAllText && pluginAPI.analytics.getTextCollectionMode() === 'all';
     }
     function isTextCapturable(text) {
+        if (pluginAPI.analytics.getTextCollectionMode() === 'none')
+            return false;
         var trimmedText = pluginAPI.util.trim.call(text);
         // pass the text as an array so that our toPath override doesn't try to split it on `.`
         return isEnabled() || pendoGlobal._.has(whitelist, [trimmedText]) || pendoGlobal._.has(whitelist, [text]);
@@ -51405,7 +51658,8 @@ class SessionRecorder {
             this.api.attachEvent(this.api.Events, 'eventCaptured', bind(this.addRecordingId, this)),
             this.api.attachEvent(this.api.Events, 'transmit:locked', bind(this.stop, this)),
             this.api.attachEvent(this.api.Events, 'transmit:unlocked', bind(this._start, this)),
-            this.api.attachEvent(this.api.Events, 'tabIdChanged:self', bind(this.handleTabIdChange, this))
+            this.api.attachEvent(this.api.Events, 'tabIdChanged:self', bind(this.handleTabIdChange, this)),
+            this.api.attachEvent(this.api.Events, 'consent:changed', bind(this.handleConsentChange, this))
         ];
         // APP-153357 Zone.js could bypass filterCrossWindowMessages (don't use attachEvent)
         const channel = this.api.frames.getChannel();
@@ -51516,6 +51770,20 @@ class SessionRecorder {
             return this.checkVisitorEligibility();
         }
     }
+    handleConsentChange(event) {
+        var { identity, replay } = event.data[0];
+        if (this.pendo._.isUndefined(identity) && this.pendo._.isUndefined(replay))
+            return;
+        if (this.api.analytics.isReplayConsentDenied()) {
+            if (this.isRecording()) {
+                this.logStopReason('CONSENT_DENIED');
+                this.stop();
+            }
+        }
+        else if (!this.isRecording()) {
+            this.start();
+        }
+    }
     checkVisitorEligibility(continuationCallback) {
         if (!this.isRecording() && this.pendo._.isNull(this.visitorId) && this.pendo._.isNull(this.accountId))
             return;
@@ -51598,6 +51866,8 @@ class SessionRecorder {
      * pendo.recording.start()
      */
     start() {
+        if (this.api.analytics.isReplayConsentDenied())
+            return;
         this._restartPtm = this.api.analytics.ptm().pause();
         this.allowStart = true;
         this.visitorId = this.pendo.get_visitor_id();
@@ -51655,6 +51925,11 @@ class SessionRecorder {
         });
     }
     _startRecordingForVisitor(visitorConfig) {
+        if (this.api.analytics.isReplayConsentDenied()) {
+            this.restartPtm();
+            this.logStopReason('CONSENT_DENIED');
+            return;
+        }
         this.api.Events.trigger('recording:unpaused');
         this.transport.start(this.config);
         const disableFallback = this.pendo._.get(this.config, 'disableFallback', true);
@@ -56009,6 +56284,8 @@ class PredictApiService {
 
 const PREDICT_STEP_REGEX = /\$\$predict\$\$/;
 const DRAG_THRESHOLD = 5;
+const FLOATING_MODAL_OFFSET = '20px';
+const DEFAULT_INITIAL_POSITION = 'TOP_RIGHT';
 const STYLE_ID = 'pendo-predict-plugin-styles';
 const GUIDE_BUTTON_IDENTIFIER = 'button:contains("token")';
 const pluginVersion = '1.0.1';
@@ -56070,7 +56347,7 @@ const injectStyles = (pendoContainerId, log = () => { }) => {
                 }
                 .frame-explanation {
                 aspect-ratio: 16/9; overflow: hidden; min-height: 300px;
-                width: 100vw; height: 100vh; background: transparent;
+                width: 554px; height: 100vh; background: transparent;
                 position: fixed; bottom: 0; right: 0; z-index: 1; border: none;
                 visibility: hidden; opacity: 0; pointer-events: none;
                 transition: opacity 0.1s ease-out, visibility 0s linear 0.1s;
@@ -56228,7 +56505,9 @@ const setupDragAndDrop = (handle, container, frameTargetOrigin) => {
         initialLeft = rect.left;
         initialTop = rect.top;
         container.style.left = `${initialLeft}px`;
+        container.style.top = `${initialTop}px`;
         container.style.right = 'auto';
+        container.style.bottom = 'auto';
         startX = e.clientX;
         startY = e.clientY;
         document.addEventListener('mousemove', onMouseMove);
@@ -56301,6 +56580,19 @@ const createExplanationIframe = ({ analysisId, recordId, configuration, predictB
         src: buildFrameSrc(`${base}?${params}`, wrapperBase)
     }, document.body);
 };
+// The floating modal defaults to the top-right corner (see injected styles).
+// `initialPosition` overrides that by anchoring the container to the requested
+// corner; the drag logic later switches to explicit left/top on first drag.
+const applyInitialPosition = (container, initialPosition = DEFAULT_INITIAL_POSITION) => {
+    var _a;
+    const corners = {
+        TOP_LEFT: { top: FLOATING_MODAL_OFFSET, left: FLOATING_MODAL_OFFSET, bottom: 'auto', right: 'auto' },
+        TOP_RIGHT: { top: FLOATING_MODAL_OFFSET, right: FLOATING_MODAL_OFFSET, bottom: 'auto', left: 'auto' },
+        BOTTOM_LEFT: { bottom: FLOATING_MODAL_OFFSET, left: FLOATING_MODAL_OFFSET, top: 'auto', right: 'auto' },
+        BOTTOM_RIGHT: { bottom: FLOATING_MODAL_OFFSET, right: FLOATING_MODAL_OFFSET, top: 'auto', left: 'auto' }
+    };
+    Object.assign(container.style, (_a = corners[initialPosition]) !== null && _a !== void 0 ? _a : corners[DEFAULT_INITIAL_POSITION]);
+};
 // ----- Floating Modal Creation -----
 const createFloatingModal = ({ recordId, configuration, predictBaseUrl, wrapperBase = '' }) => {
     var _a, _b;
@@ -56315,6 +56607,7 @@ const createFloatingModal = ({ recordId, configuration, predictBaseUrl, wrapperB
         });
     }
     const container = createElement('div', { id: 'floatingModalContainer', className: 'floating-modal-container' }, document.body);
+    applyInitialPosition(container, configuration.initialPosition);
     const dragHandle = createElement('div', {
         className: 'floating-modal-drag-handle',
         innerHTML: `<svg width="16" height="16" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg">
@@ -56455,7 +56748,7 @@ const fetchWidgetConfiguration = (_a) => __awaiter(void 0, void 0, void 0, funct
     if (!widgetSettings) {
         return inlineConfiguration;
     }
-    return Object.assign(Object.assign({}, inlineConfiguration), { analysisIds: mapAnalysisIds(widgetSettings.analysesHierarchy), recordRegexPattern: widgetSettings.recordRegexPattern, recordRegexName: widgetSettings.recordRegexKeyword });
+    return Object.assign(Object.assign({}, inlineConfiguration), { analysisIds: mapAnalysisIds(widgetSettings.analysesHierarchy), recordRegexPattern: widgetSettings.recordRegexPattern, recordRegexName: widgetSettings.recordRegexKeyword, initialPosition: widgetSettings.initialPosition });
 });
 const predictGuidesScript = ({ step, pendo, cleanupArray, cleanup, log, designerServer }) => __awaiter(void 0, void 0, void 0, function* () {
     var _c;