@reopt-ai/data-contract 0.6.0 → 0.6.2

package/dist/control.d.cts

@@ -181,27 +181,27 @@ declare const zEventMetaResponse: z.ZodObject<{
 type EventMetaResponse = z.infer<typeof zEventMetaResponse>;
 declare const CONTROL_ERROR_CODES: readonly ["unauthorized", "organization_scope_mismatch", "external_id_conflict", "project_external_id_mismatch", "not_found", "validation_failed", "rate_limited", "internal_error"];
 declare const zControlErrorCode: z.ZodEnum<{
-    validation_failed: "validation_failed";
     unauthorized: "unauthorized";
-    rate_limited: "rate_limited";
-    internal_error: "internal_error";
     organization_scope_mismatch: "organization_scope_mismatch";
     external_id_conflict: "external_id_conflict";
     project_external_id_mismatch: "project_external_id_mismatch";
     not_found: "not_found";
+    validation_failed: "validation_failed";
+    rate_limited: "rate_limited";
+    internal_error: "internal_error";
 }>;
 type ControlErrorCode = z.infer<typeof zControlErrorCode>;
 declare const zControlError: z.ZodObject<{
     status: z.ZodNumber;
     code: z.ZodEnum<{
-        validation_failed: "validation_failed";
         unauthorized: "unauthorized";
-        rate_limited: "rate_limited";
-        internal_error: "internal_error";
         organization_scope_mismatch: "organization_scope_mismatch";
         external_id_conflict: "external_id_conflict";
         project_external_id_mismatch: "project_external_id_mismatch";
         not_found: "not_found";
+        validation_failed: "validation_failed";
+        rate_limited: "rate_limited";
+        internal_error: "internal_error";
     }>;
     error: z.ZodString;
     message: z.ZodOptional<z.ZodString>;

package/dist/control.d.ts

@@ -181,27 +181,27 @@ declare const zEventMetaResponse: z.ZodObject<{
 type EventMetaResponse = z.infer<typeof zEventMetaResponse>;
 declare const CONTROL_ERROR_CODES: readonly ["unauthorized", "organization_scope_mismatch", "external_id_conflict", "project_external_id_mismatch", "not_found", "validation_failed", "rate_limited", "internal_error"];
 declare const zControlErrorCode: z.ZodEnum<{
-    validation_failed: "validation_failed";
     unauthorized: "unauthorized";
-    rate_limited: "rate_limited";
-    internal_error: "internal_error";
     organization_scope_mismatch: "organization_scope_mismatch";
     external_id_conflict: "external_id_conflict";
     project_external_id_mismatch: "project_external_id_mismatch";
     not_found: "not_found";
+    validation_failed: "validation_failed";
+    rate_limited: "rate_limited";
+    internal_error: "internal_error";
 }>;
 type ControlErrorCode = z.infer<typeof zControlErrorCode>;
 declare const zControlError: z.ZodObject<{
     status: z.ZodNumber;
     code: z.ZodEnum<{
-        validation_failed: "validation_failed";
         unauthorized: "unauthorized";
-        rate_limited: "rate_limited";
-        internal_error: "internal_error";
         organization_scope_mismatch: "organization_scope_mismatch";
         external_id_conflict: "external_id_conflict";
         project_external_id_mismatch: "project_external_id_mismatch";
         not_found: "not_found";
+        validation_failed: "validation_failed";
+        rate_limited: "rate_limited";
+        internal_error: "internal_error";
     }>;
     error: z.ZodString;
     message: z.ZodOptional<z.ZodString>;

package/dist/control.js

@@ -26,7 +26,7 @@ import {
 } from "./chunk-IY4MXH35.js";
 import "./chunk-L3WJGIKD.js";
 import "./chunk-33BCA2LH.js";
-import "./chunk-IXPP5K4I.js";
+import "./chunk-ZCKVMUIQ.js";
 export {
   CONTROL_API_PATHS,
   CONTROL_ERROR_CODES,

package/dist/identity.cjs

@@ -12,21 +12,21 @@
 
 
 
-var _chunkKRJPEMFDcjs = require('./chunk-KRJPEMFD.cjs');
 
 
 
 
 
+var _chunkFQSCQSMPcjs = require('./chunk-FQSCQSMP.cjs');
 
 
 
-var _chunkJHHCT3GAcjs = require('./chunk-JHHCT3GA.cjs');
 
 
 
 
 
+var _chunkAOS53KAVcjs = require('./chunk-AOS53KAV.cjs');
 
 
 
@@ -43,5 +43,15 @@ var _chunkJHHCT3GAcjs = require('./chunk-JHHCT3GA.cjs');
 
 
 
-exports.CLIENT_ID_HEADER = _chunkJHHCT3GAcjs.CLIENT_ID_HEADER; exports.CLIENT_SECRET_HEADER = _chunkJHHCT3GAcjs.CLIENT_SECRET_HEADER; exports.CONTRACT_VERSION = _chunkJHHCT3GAcjs.CONTRACT_VERSION; exports.CONTRACT_VERSION_HEADER = _chunkJHHCT3GAcjs.CONTRACT_VERSION_HEADER; exports.COOKIE_MAX_AGE_SECONDS = _chunkKRJPEMFDcjs.COOKIE_MAX_AGE_SECONDS; exports.DEVICE_ID_HEADER = _chunkJHHCT3GAcjs.DEVICE_ID_HEADER; exports.IDENTITY_ID_PATTERN = _chunkKRJPEMFDcjs.IDENTITY_ID_PATTERN; exports.IDENTITY_REQUEST_HEADERS = _chunkKRJPEMFDcjs.IDENTITY_REQUEST_HEADERS; exports.OPT_OUT_CONSENT_CATEGORY = _chunkKRJPEMFDcjs.OPT_OUT_CONSENT_CATEGORY; exports.REQUEST_ID_HEADER = _chunkJHHCT3GAcjs.REQUEST_ID_HEADER; exports.SESSION_ID_HEADER = _chunkKRJPEMFDcjs.SESSION_ID_HEADER; exports.WRITE_KEY_HEADER = _chunkJHHCT3GAcjs.WRITE_KEY_HEADER; exports.consentCookieName = _chunkKRJPEMFDcjs.consentCookieName; exports.deviceCookieName = _chunkKRJPEMFDcjs.deviceCookieName; exports.isOptedOut = _chunkKRJPEMFDcjs.isOptedOut; exports.isValidIdentityId = _chunkKRJPEMFDcjs.isValidIdentityId; exports.parseConsentCookie = _chunkKRJPEMFDcjs.parseConsentCookie; exports.parseDeviceCookie = _chunkKRJPEMFDcjs.parseDeviceCookie; exports.serializeConsentCookie = _chunkKRJPEMFDcjs.serializeConsentCookie; exports.serializeDeviceCookie = _chunkKRJPEMFDcjs.serializeDeviceCookie;
+
+
+
+
+
+
+
+
+
+
+exports.CLIENT_ID_HEADER = _chunkAOS53KAVcjs.CLIENT_ID_HEADER; exports.CLIENT_SECRET_HEADER = _chunkAOS53KAVcjs.CLIENT_SECRET_HEADER; exports.CONTRACT_VERSION = _chunkAOS53KAVcjs.CONTRACT_VERSION; exports.CONTRACT_VERSION_HEADER = _chunkAOS53KAVcjs.CONTRACT_VERSION_HEADER; exports.COOKIE_MAX_AGE_SECONDS = _chunkFQSCQSMPcjs.COOKIE_MAX_AGE_SECONDS; exports.DEVICE_ID_HEADER = _chunkAOS53KAVcjs.DEVICE_ID_HEADER; exports.IDENTITY_ID_PATTERN = _chunkFQSCQSMPcjs.IDENTITY_ID_PATTERN; exports.IDENTITY_REQUEST_HEADERS = _chunkFQSCQSMPcjs.IDENTITY_REQUEST_HEADERS; exports.OPT_OUT_CONSENT_CATEGORY = _chunkFQSCQSMPcjs.OPT_OUT_CONSENT_CATEGORY; exports.REQUEST_ID_HEADER = _chunkAOS53KAVcjs.REQUEST_ID_HEADER; exports.SESSION_HEADER_SEPARATOR = _chunkFQSCQSMPcjs.SESSION_HEADER_SEPARATOR; exports.SESSION_ID_HEADER = _chunkFQSCQSMPcjs.SESSION_ID_HEADER; exports.WRITE_KEY_HEADER = _chunkAOS53KAVcjs.WRITE_KEY_HEADER; exports.consentCookieName = _chunkFQSCQSMPcjs.consentCookieName; exports.deviceCookieName = _chunkFQSCQSMPcjs.deviceCookieName; exports.formatSessionHeader = _chunkFQSCQSMPcjs.formatSessionHeader; exports.isOptedOut = _chunkFQSCQSMPcjs.isOptedOut; exports.isValidIdentityId = _chunkFQSCQSMPcjs.isValidIdentityId; exports.parseConsentCookie = _chunkFQSCQSMPcjs.parseConsentCookie; exports.parseDeviceCookie = _chunkFQSCQSMPcjs.parseDeviceCookie; exports.parseSessionHeader = _chunkFQSCQSMPcjs.parseSessionHeader; exports.serializeConsentCookie = _chunkFQSCQSMPcjs.serializeConsentCookie; exports.serializeDeviceCookie = _chunkFQSCQSMPcjs.serializeDeviceCookie; exports.signSessionToken = _chunkFQSCQSMPcjs.signSessionToken; exports.verifySessionToken = _chunkFQSCQSMPcjs.verifySessionToken;
 //# sourceMappingURL=identity.cjs.map

package/dist/identity.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/identity.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,20CAAC","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/identity.cjs"}
+{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/identity.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,oqDAAC","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/identity.cjs"}

package/dist/identity.d.cts

@@ -1,4 +1,4 @@
-export { C as CLIENT_ID_HEADER, a as CLIENT_SECRET_HEADER, b as CONTRACT_VERSION, c as CONTRACT_VERSION_HEADER, D as DEVICE_ID_HEADER, R as REQUEST_ID_HEADER, W as WRITE_KEY_HEADER } from './version-CC4_BBvq.cjs';
+export { C as CLIENT_ID_HEADER, a as CLIENT_SECRET_HEADER, b as CONTRACT_VERSION, c as CONTRACT_VERSION_HEADER, D as DEVICE_ID_HEADER, R as REQUEST_ID_HEADER, W as WRITE_KEY_HEADER } from './version-BANKB6Og.cjs';
 
 /**
  * Request header carrying the browser's current session id. The browser SDK
@@ -18,9 +18,16 @@ declare const IDENTITY_REQUEST_HEADERS: readonly ["reopt-device-id", "reopt-sess
 declare const COOKIE_MAX_AGE_SECONDS: number;
 /** Consent category whose refusal means "send nothing at all". */
 declare const OPT_OUT_CONSENT_CATEGORY = "analytics";
-/** `reopt_<writeKey>_device` — device id plus session/profile hints. */
+/**
+ * `reopt_<writeKey>_device` — device id plus session/profile hints.
+ *
+ * The write key is **sanitized**: any character outside `[A-Za-z0-9_-]`
+ * becomes `_` (see `cookieSafe`), so do not derive prefix/suffix pieces by
+ * probing this with a marker character — the marker is folded too. Always
+ * call this with the real write key and compare whole names.
+ */
 declare function deviceCookieName(writeKey: string): string;
-/** `reopt_<writeKey>_consent` — per-category consent decisions. */
+/** `reopt_<writeKey>_consent` — per-category consent decisions. Same sanitizing as `deviceCookieName`. */
 declare function consentCookieName(writeKey: string): string;
 /** Everything the device cookie may carry. Only `deviceId` is required. */
 interface DeviceCookieState {
@@ -86,5 +93,34 @@ declare function serializeConsentCookie(state: ConsentCookieState): string;
  * banners mandatory for every integration.
  */
 declare function isOptedOut(consent: ConsentCookieState | null | undefined): boolean;
+/**
+ * Sessions are assigned by ingest, not by the browser. To let a later request
+ * — from the same browser, or from a server acting for it — join that session
+ * with authority, ingest hands the browser its session id together with an
+ * HMAC over it, and the browser sends both back as `reopt-session-id`. An
+ * unsigned or wrongly signed value is a hint at most: ingest falls back to
+ * deciding the session from the device, exactly as if the header were absent.
+ *
+ * The token is `base64url(HMAC-SHA256(secret, sessionId))`. The secret is
+ * per project and never leaves the server. WebCrypto only, so this runs in
+ * browsers, edge runtimes and Node alike.
+ */
+declare const SESSION_HEADER_SEPARATOR = ".";
+interface SessionCredential {
+    id: string;
+    token: string;
+}
+/** `<id>.<token>` — what travels in `reopt-session-id`. */
+declare function formatSessionHeader(credential: SessionCredential): string;
+/** Splits a `reopt-session-id` value. `null` unless both parts are well-formed. */
+declare function parseSessionHeader(value: string | null | undefined): SessionCredential | null;
+/** Issues the token for `sessionId`. Server-side only — needs the project secret. */
+declare function signSessionToken(secret: string, sessionId: string): Promise<string>;
+/**
+ * Constant-time check of a presented token. Recomputes and compares the
+ * digests byte by byte rather than using `subtle.verify` with a decoded
+ * token, so a malformed token can never throw its way past the check.
+ */
+declare function verifySessionToken(secret: string, credential: SessionCredential): Promise<boolean>;
 
-export { COOKIE_MAX_AGE_SECONDS, type ConsentCookieState, type DeviceCookieState, IDENTITY_ID_PATTERN, IDENTITY_REQUEST_HEADERS, OPT_OUT_CONSENT_CATEGORY, type ReoptBootstrap, SESSION_ID_HEADER, consentCookieName, deviceCookieName, isOptedOut, isValidIdentityId, parseConsentCookie, parseDeviceCookie, serializeConsentCookie, serializeDeviceCookie };
+export { COOKIE_MAX_AGE_SECONDS, type ConsentCookieState, type DeviceCookieState, IDENTITY_ID_PATTERN, IDENTITY_REQUEST_HEADERS, OPT_OUT_CONSENT_CATEGORY, type ReoptBootstrap, SESSION_HEADER_SEPARATOR, SESSION_ID_HEADER, type SessionCredential, consentCookieName, deviceCookieName, formatSessionHeader, isOptedOut, isValidIdentityId, parseConsentCookie, parseDeviceCookie, parseSessionHeader, serializeConsentCookie, serializeDeviceCookie, signSessionToken, verifySessionToken };

package/dist/identity.d.ts

@@ -1,4 +1,4 @@
-export { C as CLIENT_ID_HEADER, a as CLIENT_SECRET_HEADER, b as CONTRACT_VERSION, c as CONTRACT_VERSION_HEADER, D as DEVICE_ID_HEADER, R as REQUEST_ID_HEADER, W as WRITE_KEY_HEADER } from './version-CC4_BBvq.js';
+export { C as CLIENT_ID_HEADER, a as CLIENT_SECRET_HEADER, b as CONTRACT_VERSION, c as CONTRACT_VERSION_HEADER, D as DEVICE_ID_HEADER, R as REQUEST_ID_HEADER, W as WRITE_KEY_HEADER } from './version-BANKB6Og.js';
 
 /**
  * Request header carrying the browser's current session id. The browser SDK
@@ -18,9 +18,16 @@ declare const IDENTITY_REQUEST_HEADERS: readonly ["reopt-device-id", "reopt-sess
 declare const COOKIE_MAX_AGE_SECONDS: number;
 /** Consent category whose refusal means "send nothing at all". */
 declare const OPT_OUT_CONSENT_CATEGORY = "analytics";
-/** `reopt_<writeKey>_device` — device id plus session/profile hints. */
+/**
+ * `reopt_<writeKey>_device` — device id plus session/profile hints.
+ *
+ * The write key is **sanitized**: any character outside `[A-Za-z0-9_-]`
+ * becomes `_` (see `cookieSafe`), so do not derive prefix/suffix pieces by
+ * probing this with a marker character — the marker is folded too. Always
+ * call this with the real write key and compare whole names.
+ */
 declare function deviceCookieName(writeKey: string): string;
-/** `reopt_<writeKey>_consent` — per-category consent decisions. */
+/** `reopt_<writeKey>_consent` — per-category consent decisions. Same sanitizing as `deviceCookieName`. */
 declare function consentCookieName(writeKey: string): string;
 /** Everything the device cookie may carry. Only `deviceId` is required. */
 interface DeviceCookieState {
@@ -86,5 +93,34 @@ declare function serializeConsentCookie(state: ConsentCookieState): string;
  * banners mandatory for every integration.
  */
 declare function isOptedOut(consent: ConsentCookieState | null | undefined): boolean;
+/**
+ * Sessions are assigned by ingest, not by the browser. To let a later request
+ * — from the same browser, or from a server acting for it — join that session
+ * with authority, ingest hands the browser its session id together with an
+ * HMAC over it, and the browser sends both back as `reopt-session-id`. An
+ * unsigned or wrongly signed value is a hint at most: ingest falls back to
+ * deciding the session from the device, exactly as if the header were absent.
+ *
+ * The token is `base64url(HMAC-SHA256(secret, sessionId))`. The secret is
+ * per project and never leaves the server. WebCrypto only, so this runs in
+ * browsers, edge runtimes and Node alike.
+ */
+declare const SESSION_HEADER_SEPARATOR = ".";
+interface SessionCredential {
+    id: string;
+    token: string;
+}
+/** `<id>.<token>` — what travels in `reopt-session-id`. */
+declare function formatSessionHeader(credential: SessionCredential): string;
+/** Splits a `reopt-session-id` value. `null` unless both parts are well-formed. */
+declare function parseSessionHeader(value: string | null | undefined): SessionCredential | null;
+/** Issues the token for `sessionId`. Server-side only — needs the project secret. */
+declare function signSessionToken(secret: string, sessionId: string): Promise<string>;
+/**
+ * Constant-time check of a presented token. Recomputes and compares the
+ * digests byte by byte rather than using `subtle.verify` with a decoded
+ * token, so a malformed token can never throw its way past the check.
+ */
+declare function verifySessionToken(secret: string, credential: SessionCredential): Promise<boolean>;
 
-export { COOKIE_MAX_AGE_SECONDS, type ConsentCookieState, type DeviceCookieState, IDENTITY_ID_PATTERN, IDENTITY_REQUEST_HEADERS, OPT_OUT_CONSENT_CATEGORY, type ReoptBootstrap, SESSION_ID_HEADER, consentCookieName, deviceCookieName, isOptedOut, isValidIdentityId, parseConsentCookie, parseDeviceCookie, serializeConsentCookie, serializeDeviceCookie };
+export { COOKIE_MAX_AGE_SECONDS, type ConsentCookieState, type DeviceCookieState, IDENTITY_ID_PATTERN, IDENTITY_REQUEST_HEADERS, OPT_OUT_CONSENT_CATEGORY, type ReoptBootstrap, SESSION_HEADER_SEPARATOR, SESSION_ID_HEADER, type SessionCredential, consentCookieName, deviceCookieName, formatSessionHeader, isOptedOut, isValidIdentityId, parseConsentCookie, parseDeviceCookie, parseSessionHeader, serializeConsentCookie, serializeDeviceCookie, signSessionToken, verifySessionToken };

package/dist/identity.js

@@ -3,16 +3,21 @@ import {
   IDENTITY_ID_PATTERN,
   IDENTITY_REQUEST_HEADERS,
   OPT_OUT_CONSENT_CATEGORY,
+  SESSION_HEADER_SEPARATOR,
   SESSION_ID_HEADER,
   consentCookieName,
   deviceCookieName,
+  formatSessionHeader,
   isOptedOut,
   isValidIdentityId,
   parseConsentCookie,
   parseDeviceCookie,
+  parseSessionHeader,
   serializeConsentCookie,
-  serializeDeviceCookie
-} from "./chunk-6ZJOC4NJ.js";
+  serializeDeviceCookie,
+  signSessionToken,
+  verifySessionToken
+} from "./chunk-FMOKJTQD.js";
 import {
   CLIENT_ID_HEADER,
   CLIENT_SECRET_HEADER,
@@ -21,7 +26,7 @@ import {
   DEVICE_ID_HEADER,
   REQUEST_ID_HEADER,
   WRITE_KEY_HEADER
-} from "./chunk-IXPP5K4I.js";
+} from "./chunk-ZCKVMUIQ.js";
 export {
   CLIENT_ID_HEADER,
   CLIENT_SECRET_HEADER,
@@ -33,15 +38,20 @@ export {
   IDENTITY_REQUEST_HEADERS,
   OPT_OUT_CONSENT_CATEGORY,
   REQUEST_ID_HEADER,
+  SESSION_HEADER_SEPARATOR,
   SESSION_ID_HEADER,
   WRITE_KEY_HEADER,
   consentCookieName,
   deviceCookieName,
+  formatSessionHeader,
   isOptedOut,
   isValidIdentityId,
   parseConsentCookie,
   parseDeviceCookie,
+  parseSessionHeader,
   serializeConsentCookie,
-  serializeDeviceCookie
+  serializeDeviceCookie,
+  signSessionToken,
+  verifySessionToken
 };
 //# sourceMappingURL=identity.js.map

package/dist/index.cjs

@@ -11,7 +11,7 @@ var _chunkYSAEOYPDcjs = require('./chunk-YSAEOYPD.cjs');
 
 
 
-var _chunkJHHCT3GAcjs = require('./chunk-JHHCT3GA.cjs');
+var _chunkAOS53KAVcjs = require('./chunk-AOS53KAV.cjs');
 
 
 
@@ -23,5 +23,5 @@ var _chunkJHHCT3GAcjs = require('./chunk-JHHCT3GA.cjs');
 
 
 
-exports.CLIENT_ID_HEADER = _chunkJHHCT3GAcjs.CLIENT_ID_HEADER; exports.CLIENT_SECRET_HEADER = _chunkJHHCT3GAcjs.CLIENT_SECRET_HEADER; exports.CONTRACT_VERSION = _chunkJHHCT3GAcjs.CONTRACT_VERSION; exports.CONTRACT_VERSION_HEADER = _chunkJHHCT3GAcjs.CONTRACT_VERSION_HEADER; exports.DEVICE_ID_HEADER = _chunkJHHCT3GAcjs.DEVICE_ID_HEADER; exports.DataApiError = _chunkYSAEOYPDcjs.DataApiError; exports.REQUEST_ID_HEADER = _chunkJHHCT3GAcjs.REQUEST_ID_HEADER; exports.WRITE_KEY_HEADER = _chunkJHHCT3GAcjs.WRITE_KEY_HEADER; exports.zDate = _chunkYSAEOYPDcjs.zDate; exports.zInstant = _chunkYSAEOYPDcjs.zInstant;
+exports.CLIENT_ID_HEADER = _chunkAOS53KAVcjs.CLIENT_ID_HEADER; exports.CLIENT_SECRET_HEADER = _chunkAOS53KAVcjs.CLIENT_SECRET_HEADER; exports.CONTRACT_VERSION = _chunkAOS53KAVcjs.CONTRACT_VERSION; exports.CONTRACT_VERSION_HEADER = _chunkAOS53KAVcjs.CONTRACT_VERSION_HEADER; exports.DEVICE_ID_HEADER = _chunkAOS53KAVcjs.DEVICE_ID_HEADER; exports.DataApiError = _chunkYSAEOYPDcjs.DataApiError; exports.REQUEST_ID_HEADER = _chunkAOS53KAVcjs.REQUEST_ID_HEADER; exports.WRITE_KEY_HEADER = _chunkAOS53KAVcjs.WRITE_KEY_HEADER; exports.zDate = _chunkYSAEOYPDcjs.zDate; exports.zInstant = _chunkYSAEOYPDcjs.zInstant;
 //# sourceMappingURL=index.cjs.map

package/dist/index.d.cts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-export { C as CLIENT_ID_HEADER, a as CLIENT_SECRET_HEADER, b as CONTRACT_VERSION, c as CONTRACT_VERSION_HEADER, D as DEVICE_ID_HEADER, R as REQUEST_ID_HEADER, W as WRITE_KEY_HEADER } from './version-CC4_BBvq.cjs';
+export { C as CLIENT_ID_HEADER, a as CLIENT_SECRET_HEADER, b as CONTRACT_VERSION, c as CONTRACT_VERSION_HEADER, D as DEVICE_ID_HEADER, R as REQUEST_ID_HEADER, W as WRITE_KEY_HEADER } from './version-BANKB6Og.cjs';
 
 /**
  * `@reopt-ai/data-contract` — the wire contract between reopt-data and its

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-export { C as CLIENT_ID_HEADER, a as CLIENT_SECRET_HEADER, b as CONTRACT_VERSION, c as CONTRACT_VERSION_HEADER, D as DEVICE_ID_HEADER, R as REQUEST_ID_HEADER, W as WRITE_KEY_HEADER } from './version-CC4_BBvq.js';
+export { C as CLIENT_ID_HEADER, a as CLIENT_SECRET_HEADER, b as CONTRACT_VERSION, c as CONTRACT_VERSION_HEADER, D as DEVICE_ID_HEADER, R as REQUEST_ID_HEADER, W as WRITE_KEY_HEADER } from './version-BANKB6Og.js';
 
 /**
  * `@reopt-ai/data-contract` — the wire contract between reopt-data and its

package/dist/index.js

@@ -11,7 +11,7 @@ import {
   DEVICE_ID_HEADER,
   REQUEST_ID_HEADER,
   WRITE_KEY_HEADER
-} from "./chunk-IXPP5K4I.js";
+} from "./chunk-ZCKVMUIQ.js";
 export {
   CLIENT_ID_HEADER,
   CLIENT_SECRET_HEADER,

package/dist/ingest.cjs

@@ -17,9 +17,10 @@
 
 
 
-var _chunkOGL3P7IHcjs = require('./chunk-OGL3P7IH.cjs');
-require('./chunk-KRJPEMFD.cjs');
-require('./chunk-JHHCT3GA.cjs');
+
+var _chunkBA52YA7Ncjs = require('./chunk-BA52YA7N.cjs');
+require('./chunk-FQSCQSMP.cjs');
+require('./chunk-AOS53KAV.cjs');
 
 
 
@@ -53,5 +54,6 @@ var _chunk3EEANNYNcjs = require('./chunk-3EEANNYN.cjs');
 
 
 
-exports.AUTO_EVENT_NAMES = _chunk3EEANNYNcjs.AUTO_EVENT_NAMES; exports.AUTO_EVENT_PROPERTIES = _chunk3EEANNYNcjs.AUTO_EVENT_PROPERTIES; exports.AUTO_EVENT_ROLLUP_KEYS = _chunk3EEANNYNcjs.AUTO_EVENT_ROLLUP_KEYS; exports.INGEST_ERROR_CODES = _chunkOGL3P7IHcjs.INGEST_ERROR_CODES; exports.INGEST_MODES = _chunkOGL3P7IHcjs.INGEST_MODES; exports.INGEST_REJECTION_REASONS = _chunkOGL3P7IHcjs.INGEST_REJECTION_REASONS; exports.MAX_TRACK_PAYLOAD_BYTES = _chunkOGL3P7IHcjs.MAX_TRACK_PAYLOAD_BYTES; exports.RESERVED_EVENT_NAMES = _chunk3EEANNYNcjs.RESERVED_EVENT_NAMES; exports.SCROLL_DEPTH_BUCKETS = _chunk3EEANNYNcjs.SCROLL_DEPTH_BUCKETS; exports.reconcileIngestResponse = _chunkOGL3P7IHcjs.reconcileIngestResponse; exports.scrollDepthBucket = _chunk3EEANNYNcjs.scrollDepthBucket; exports.zDecrementPayload = _chunkOGL3P7IHcjs.zDecrementPayload; exports.zIdentifyPayload = _chunkOGL3P7IHcjs.zIdentifyPayload; exports.zIncrementPayload = _chunkOGL3P7IHcjs.zIncrementPayload; exports.zIngestAcceptedResponse = _chunkOGL3P7IHcjs.zIngestAcceptedResponse; exports.zIngestError = _chunkOGL3P7IHcjs.zIngestError; exports.zIngestErrorCode = _chunkOGL3P7IHcjs.zIngestErrorCode; exports.zIngestMode = _chunkOGL3P7IHcjs.zIngestMode; exports.zIngestOkResponse = _chunkOGL3P7IHcjs.zIngestOkResponse; exports.zIngestRejection = _chunkOGL3P7IHcjs.zIngestRejection; exports.zIngestRejectionReason = _chunkOGL3P7IHcjs.zIngestRejectionReason; exports.zIngestResponse = _chunkOGL3P7IHcjs.zIngestResponse; exports.zTrackHandlerPayload = _chunkOGL3P7IHcjs.zTrackHandlerPayload; exports.zTrackPayload = _chunkOGL3P7IHcjs.zTrackPayload;
+
+exports.AUTO_EVENT_NAMES = _chunk3EEANNYNcjs.AUTO_EVENT_NAMES; exports.AUTO_EVENT_PROPERTIES = _chunk3EEANNYNcjs.AUTO_EVENT_PROPERTIES; exports.AUTO_EVENT_ROLLUP_KEYS = _chunk3EEANNYNcjs.AUTO_EVENT_ROLLUP_KEYS; exports.INGEST_ERROR_CODES = _chunkBA52YA7Ncjs.INGEST_ERROR_CODES; exports.INGEST_MODES = _chunkBA52YA7Ncjs.INGEST_MODES; exports.INGEST_REJECTION_REASONS = _chunkBA52YA7Ncjs.INGEST_REJECTION_REASONS; exports.MAX_TRACK_PAYLOAD_BYTES = _chunkBA52YA7Ncjs.MAX_TRACK_PAYLOAD_BYTES; exports.RESERVED_EVENT_NAMES = _chunk3EEANNYNcjs.RESERVED_EVENT_NAMES; exports.SCROLL_DEPTH_BUCKETS = _chunk3EEANNYNcjs.SCROLL_DEPTH_BUCKETS; exports.reconcileIngestResponse = _chunkBA52YA7Ncjs.reconcileIngestResponse; exports.scrollDepthBucket = _chunk3EEANNYNcjs.scrollDepthBucket; exports.zDecrementPayload = _chunkBA52YA7Ncjs.zDecrementPayload; exports.zIdentifyPayload = _chunkBA52YA7Ncjs.zIdentifyPayload; exports.zIncrementPayload = _chunkBA52YA7Ncjs.zIncrementPayload; exports.zIngestAcceptedResponse = _chunkBA52YA7Ncjs.zIngestAcceptedResponse; exports.zIngestError = _chunkBA52YA7Ncjs.zIngestError; exports.zIngestErrorCode = _chunkBA52YA7Ncjs.zIngestErrorCode; exports.zIngestMode = _chunkBA52YA7Ncjs.zIngestMode; exports.zIngestOkResponse = _chunkBA52YA7Ncjs.zIngestOkResponse; exports.zIngestRejection = _chunkBA52YA7Ncjs.zIngestRejection; exports.zIngestRejectionReason = _chunkBA52YA7Ncjs.zIngestRejectionReason; exports.zIngestResponse = _chunkBA52YA7Ncjs.zIngestResponse; exports.zSessionCredential = _chunkBA52YA7Ncjs.zSessionCredential; exports.zTrackHandlerPayload = _chunkBA52YA7Ncjs.zTrackHandlerPayload; exports.zTrackPayload = _chunkBA52YA7Ncjs.zTrackPayload;
 //# sourceMappingURL=ingest.cjs.map

package/dist/ingest.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/ingest.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B,gCAA6B;AAC7B,gCAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,qkDAAC","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/ingest.cjs"}
+{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/ingest.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B,gCAA6B;AAC7B,gCAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,woDAAC","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/ingest.cjs"}

package/dist/ingest.d.cts

@@ -127,9 +127,24 @@ declare const zIngestRejection: z.ZodObject<{
     message: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 type IngestRejection = z.infer<typeof zIngestRejection>;
+/**
+ * The session ingest filed this batch under, with the token that lets the
+ * browser (or a server acting for it) join the same session later with
+ * authority — see `signSessionToken` in `./identity`. Browser mode only;
+ * absent when the batch carried no sessionable event.
+ */
+declare const zSessionCredential: z.ZodObject<{
+    id: z.ZodString;
+    token: z.ZodString;
+}, z.core.$strip>;
+type SessionCredential = z.infer<typeof zSessionCredential>;
 /** 200 — accepted and handed to the materialize queue. */
 declare const zIngestOkResponse: z.ZodObject<{
     queued: z.ZodBoolean;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -158,6 +173,10 @@ declare const zIngestOkResponse: z.ZodObject<{
 declare const zIngestAcceptedResponse: z.ZodObject<{
     backgroundQueued: z.ZodLiteral<false>;
     replay: z.ZodLiteral<"unmaterialized-raw-events">;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -179,6 +198,10 @@ declare const zIngestAcceptedResponse: z.ZodObject<{
 }, z.core.$strip>;
 declare const zIngestResponse: z.ZodDiscriminatedUnion<[z.ZodObject<{
     queued: z.ZodBoolean;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -200,6 +223,10 @@ declare const zIngestResponse: z.ZodDiscriminatedUnion<[z.ZodObject<{
 }, z.core.$strip>, z.ZodObject<{
     backgroundQueued: z.ZodLiteral<false>;
     replay: z.ZodLiteral<"unmaterialized-raw-events">;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -237,33 +264,33 @@ declare function reconcileIngestResponse(response: IngestResponse, sentCount: nu
  */
 declare const INGEST_ERROR_CODES: readonly ["unauthorized", "invalid_json", "payload_too_large", "empty_batch", "alias_unsupported", "project_without_organization", "validation_failed", "rate_limited", "quota_exceeded", "project_purging", "internal_error"];
 declare const zIngestErrorCode: z.ZodEnum<{
-    validation_failed: "validation_failed";
     unauthorized: "unauthorized";
+    validation_failed: "validation_failed";
+    rate_limited: "rate_limited";
+    internal_error: "internal_error";
     invalid_json: "invalid_json";
     payload_too_large: "payload_too_large";
     empty_batch: "empty_batch";
     alias_unsupported: "alias_unsupported";
     project_without_organization: "project_without_organization";
-    rate_limited: "rate_limited";
     quota_exceeded: "quota_exceeded";
     project_purging: "project_purging";
-    internal_error: "internal_error";
 }>;
 type IngestErrorCode = z.infer<typeof zIngestErrorCode>;
 declare const zIngestError: z.ZodObject<{
     status: z.ZodNumber;
     code: z.ZodEnum<{
-        validation_failed: "validation_failed";
         unauthorized: "unauthorized";
+        validation_failed: "validation_failed";
+        rate_limited: "rate_limited";
+        internal_error: "internal_error";
         invalid_json: "invalid_json";
         payload_too_large: "payload_too_large";
         empty_batch: "empty_batch";
         alias_unsupported: "alias_unsupported";
         project_without_organization: "project_without_organization";
-        rate_limited: "rate_limited";
         quota_exceeded: "quota_exceeded";
         project_purging: "project_purging";
-        internal_error: "internal_error";
     }>;
     error: z.ZodString;
     message: z.ZodOptional<z.ZodString>;
@@ -272,4 +299,4 @@ declare const zIngestError: z.ZodObject<{
 }, z.core.$strip>;
 type IngestError = z.infer<typeof zIngestError>;
 
-export { type IDecrementPayload, type IIdentifyPayload, type IIncrementPayload, INGEST_ERROR_CODES, INGEST_MODES, INGEST_REJECTION_REASONS, type ITrackHandlerPayload, type ITrackPayload, type IngestAcceptedResponse, type IngestError, type IngestErrorCode, type IngestMode, type IngestOkResponse, type IngestRejection, type IngestRejectionReason, type IngestResponse, MAX_TRACK_PAYLOAD_BYTES, reconcileIngestResponse, zDecrementPayload, zIdentifyPayload, zIncrementPayload, zIngestAcceptedResponse, zIngestError, zIngestErrorCode, zIngestMode, zIngestOkResponse, zIngestRejection, zIngestRejectionReason, zIngestResponse, zTrackHandlerPayload, zTrackPayload };
+export { type IDecrementPayload, type IIdentifyPayload, type IIncrementPayload, INGEST_ERROR_CODES, INGEST_MODES, INGEST_REJECTION_REASONS, type ITrackHandlerPayload, type ITrackPayload, type IngestAcceptedResponse, type IngestError, type IngestErrorCode, type IngestMode, type IngestOkResponse, type IngestRejection, type IngestRejectionReason, type IngestResponse, MAX_TRACK_PAYLOAD_BYTES, type SessionCredential, reconcileIngestResponse, zDecrementPayload, zIdentifyPayload, zIncrementPayload, zIngestAcceptedResponse, zIngestError, zIngestErrorCode, zIngestMode, zIngestOkResponse, zIngestRejection, zIngestRejectionReason, zIngestResponse, zSessionCredential, zTrackHandlerPayload, zTrackPayload };

package/dist/ingest.d.ts

@@ -127,9 +127,24 @@ declare const zIngestRejection: z.ZodObject<{
     message: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 type IngestRejection = z.infer<typeof zIngestRejection>;
+/**
+ * The session ingest filed this batch under, with the token that lets the
+ * browser (or a server acting for it) join the same session later with
+ * authority — see `signSessionToken` in `./identity`. Browser mode only;
+ * absent when the batch carried no sessionable event.
+ */
+declare const zSessionCredential: z.ZodObject<{
+    id: z.ZodString;
+    token: z.ZodString;
+}, z.core.$strip>;
+type SessionCredential = z.infer<typeof zSessionCredential>;
 /** 200 — accepted and handed to the materialize queue. */
 declare const zIngestOkResponse: z.ZodObject<{
     queued: z.ZodBoolean;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -158,6 +173,10 @@ declare const zIngestOkResponse: z.ZodObject<{
 declare const zIngestAcceptedResponse: z.ZodObject<{
     backgroundQueued: z.ZodLiteral<false>;
     replay: z.ZodLiteral<"unmaterialized-raw-events">;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -179,6 +198,10 @@ declare const zIngestAcceptedResponse: z.ZodObject<{
 }, z.core.$strip>;
 declare const zIngestResponse: z.ZodDiscriminatedUnion<[z.ZodObject<{
     queued: z.ZodBoolean;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -200,6 +223,10 @@ declare const zIngestResponse: z.ZodDiscriminatedUnion<[z.ZodObject<{
 }, z.core.$strip>, z.ZodObject<{
     backgroundQueued: z.ZodLiteral<false>;
     replay: z.ZodLiteral<"unmaterialized-raw-events">;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -237,33 +264,33 @@ declare function reconcileIngestResponse(response: IngestResponse, sentCount: nu
  */
 declare const INGEST_ERROR_CODES: readonly ["unauthorized", "invalid_json", "payload_too_large", "empty_batch", "alias_unsupported", "project_without_organization", "validation_failed", "rate_limited", "quota_exceeded", "project_purging", "internal_error"];
 declare const zIngestErrorCode: z.ZodEnum<{
-    validation_failed: "validation_failed";
     unauthorized: "unauthorized";
+    validation_failed: "validation_failed";
+    rate_limited: "rate_limited";
+    internal_error: "internal_error";
     invalid_json: "invalid_json";
     payload_too_large: "payload_too_large";
     empty_batch: "empty_batch";
     alias_unsupported: "alias_unsupported";
     project_without_organization: "project_without_organization";
-    rate_limited: "rate_limited";
     quota_exceeded: "quota_exceeded";
     project_purging: "project_purging";
-    internal_error: "internal_error";
 }>;
 type IngestErrorCode = z.infer<typeof zIngestErrorCode>;
 declare const zIngestError: z.ZodObject<{
     status: z.ZodNumber;
     code: z.ZodEnum<{
-        validation_failed: "validation_failed";
         unauthorized: "unauthorized";
+        validation_failed: "validation_failed";
+        rate_limited: "rate_limited";
+        internal_error: "internal_error";
         invalid_json: "invalid_json";
         payload_too_large: "payload_too_large";
         empty_batch: "empty_batch";
         alias_unsupported: "alias_unsupported";
         project_without_organization: "project_without_organization";
-        rate_limited: "rate_limited";
         quota_exceeded: "quota_exceeded";
         project_purging: "project_purging";
-        internal_error: "internal_error";
     }>;
     error: z.ZodString;
     message: z.ZodOptional<z.ZodString>;
@@ -272,4 +299,4 @@ declare const zIngestError: z.ZodObject<{
 }, z.core.$strip>;
 type IngestError = z.infer<typeof zIngestError>;
 
-export { type IDecrementPayload, type IIdentifyPayload, type IIncrementPayload, INGEST_ERROR_CODES, INGEST_MODES, INGEST_REJECTION_REASONS, type ITrackHandlerPayload, type ITrackPayload, type IngestAcceptedResponse, type IngestError, type IngestErrorCode, type IngestMode, type IngestOkResponse, type IngestRejection, type IngestRejectionReason, type IngestResponse, MAX_TRACK_PAYLOAD_BYTES, reconcileIngestResponse, zDecrementPayload, zIdentifyPayload, zIncrementPayload, zIngestAcceptedResponse, zIngestError, zIngestErrorCode, zIngestMode, zIngestOkResponse, zIngestRejection, zIngestRejectionReason, zIngestResponse, zTrackHandlerPayload, zTrackPayload };
+export { type IDecrementPayload, type IIdentifyPayload, type IIncrementPayload, INGEST_ERROR_CODES, INGEST_MODES, INGEST_REJECTION_REASONS, type ITrackHandlerPayload, type ITrackPayload, type IngestAcceptedResponse, type IngestError, type IngestErrorCode, type IngestMode, type IngestOkResponse, type IngestRejection, type IngestRejectionReason, type IngestResponse, MAX_TRACK_PAYLOAD_BYTES, type SessionCredential, reconcileIngestResponse, zDecrementPayload, zIdentifyPayload, zIncrementPayload, zIngestAcceptedResponse, zIngestError, zIngestErrorCode, zIngestMode, zIngestOkResponse, zIngestRejection, zIngestRejectionReason, zIngestResponse, zSessionCredential, zTrackHandlerPayload, zTrackPayload };

package/dist/ingest.js

@@ -15,11 +15,12 @@ import {
   zIngestRejection,
   zIngestRejectionReason,
   zIngestResponse,
+  zSessionCredential,
   zTrackHandlerPayload,
   zTrackPayload
-} from "./chunk-5BRCHDS3.js";
-import "./chunk-6ZJOC4NJ.js";
-import "./chunk-IXPP5K4I.js";
+} from "./chunk-DUJSYMYY.js";
+import "./chunk-FMOKJTQD.js";
+import "./chunk-ZCKVMUIQ.js";
 import {
   AUTO_EVENT_NAMES,
   AUTO_EVENT_PROPERTIES,
@@ -51,6 +52,7 @@ export {
   zIngestRejection,
   zIngestRejectionReason,
   zIngestResponse,
+  zSessionCredential,
   zTrackHandlerPayload,
   zTrackPayload
 };

package/dist/query.cjs

@@ -41,7 +41,7 @@ var _chunkFUGY5ANJcjs = require('./chunk-FUGY5ANJ.cjs');
 
 
 var _chunkYSAEOYPDcjs = require('./chunk-YSAEOYPD.cjs');
-require('./chunk-JHHCT3GA.cjs');
+require('./chunk-AOS53KAV.cjs');