@reopt-ai/data-contract 0.6.3 → 0.7.0

package/dist/events.js

@@ -1,17 +1,103 @@
-import {
-  AUTO_EVENT_NAMES,
-  AUTO_EVENT_PROPERTIES,
-  AUTO_EVENT_ROLLUP_KEYS,
-  RESERVED_EVENT_NAMES,
-  SCROLL_DEPTH_BUCKETS,
-  scrollDepthBucket
-} from "./chunk-FP2X3PRK.js";
-export {
-  AUTO_EVENT_NAMES,
-  AUTO_EVENT_PROPERTIES,
-  AUTO_EVENT_ROLLUP_KEYS,
-  RESERVED_EVENT_NAMES,
-  SCROLL_DEPTH_BUCKETS,
-  scrollDepthBucket
+//#region src/events.ts
+const RESERVED_EVENT_NAMES = [
+	"session_start",
+	"session_end",
+	"screen_view"
+];
+const AUTO_EVENT_NAMES = {
+	pageview: "$pageview",
+	screenView: "$screen_view",
+	pageleave: "$pageleave",
+	webVitals: "$web_vitals",
+	exception: "$exception"
 };
+const AUTO_EVENT_PROPERTIES = {
+	[AUTO_EVENT_NAMES.pageview]: [
+		"path",
+		"origin",
+		"title",
+		"referrer",
+		"search",
+		"utm_source",
+		"utm_medium",
+		"utm_campaign",
+		"utm_term",
+		"utm_content"
+	],
+	[AUTO_EVENT_NAMES.screenView]: ["screen_name"],
+	[AUTO_EVENT_NAMES.pageleave]: [
+		"path",
+		"origin",
+		"duration",
+		"scroll_depth",
+		"scroll_depth_bucket"
+	],
+	[AUTO_EVENT_NAMES.webVitals]: [
+		"metric_name",
+		"metric_id",
+		"value",
+		"delta",
+		"rating",
+		"navigation_type",
+		"path"
+	],
+	[AUTO_EVENT_NAMES.exception]: [
+		"$exception_type",
+		"$exception_message",
+		"$exception_stack",
+		"$exception_source",
+		"$exception_handled",
+		"$exception_list",
+		"$exception_level",
+		"$exception_fingerprint",
+		"$exception_steps",
+		"path"
+	]
+};
+const AUTO_EVENT_ROLLUP_KEYS = {
+	[AUTO_EVENT_NAMES.pageview]: [
+		"path",
+		"origin",
+		"referrer",
+		"utm_source",
+		"utm_medium",
+		"utm_campaign"
+	],
+	[AUTO_EVENT_NAMES.screenView]: ["screen_name"],
+	[AUTO_EVENT_NAMES.pageleave]: [
+		"path",
+		"origin",
+		"scroll_depth_bucket"
+	],
+	[AUTO_EVENT_NAMES.webVitals]: [
+		"metric_name",
+		"rating",
+		"navigation_type",
+		"path"
+	],
+	[AUTO_EVENT_NAMES.exception]: [
+		"$exception_type",
+		"$exception_source",
+		"$exception_handled",
+		"path",
+		"$exception_fingerprint"
+	]
+};
+const RELEASE_PROPERTY = "$release_id";
+const MAX_EXCEPTION_CHAIN = 4;
+const MAX_EXCEPTION_FRAMES = 50;
+const SCROLL_DEPTH_BUCKETS = [
+	25,
+	50,
+	75,
+	100
+];
+function scrollDepthBucket(depth) {
+	let reached = "0";
+	for (const threshold of SCROLL_DEPTH_BUCKETS) if (depth >= threshold) reached = `${threshold}`;
+	return reached;
+}
+//#endregion
+export { AUTO_EVENT_NAMES, AUTO_EVENT_PROPERTIES, AUTO_EVENT_ROLLUP_KEYS, MAX_EXCEPTION_CHAIN, MAX_EXCEPTION_FRAMES, RELEASE_PROPERTY, RESERVED_EVENT_NAMES, SCROLL_DEPTH_BUCKETS, scrollDepthBucket };
+
 //# sourceMappingURL=events.js.map

package/dist/events.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"file":"events.js","names":[],"sources":["../src/events.ts"],"sourcesContent":["/**\n * `@reopt-ai/data-contract/events` — event names and property keys, with no\n * zod. Browser SDKs import this so their production bundles stay free of\n * schema code; `./ingest` re-exports everything here.\n */\n\n/** Event names the pipeline reserves for its own session bookkeeping. */\nexport const RESERVED_EVENT_NAMES = [\"session_start\", \"session_end\", \"screen_view\"] as const;\n\n/**\n * Events the SDKs emit on their own. One declaration, so a consumer that\n * registers them in its event catalogue (to make them roll up) cannot drift\n * from what the SDK actually sends — a drifted name silently falls back to\n * raw queries, which is slower but not visibly wrong.\n */\nexport const AUTO_EVENT_NAMES = {\n  pageview: \"$pageview\",\n  screenView: \"$screen_view\",\n  pageleave: \"$pageleave\",\n  webVitals: \"$web_vitals\",\n  exception: \"$exception\",\n} as const;\nexport type AutoEventName = (typeof AUTO_EVENT_NAMES)[keyof typeof AUTO_EVENT_NAMES];\n\n/**\n * Property keys each automatic event carries. Consumers derive their\n * breakdown / rollup property lists from here rather than retyping them.\n * `path`, `origin`, `referrer` and `utm_*` are the keys the ingest pipeline\n * reads into session and event columns.\n */\nexport const AUTO_EVENT_PROPERTIES = {\n  [AUTO_EVENT_NAMES.pageview]: [\n    \"path\",\n    \"origin\",\n    \"title\",\n    \"referrer\",\n    \"search\",\n    \"utm_source\",\n    \"utm_medium\",\n    \"utm_campaign\",\n    \"utm_term\",\n    \"utm_content\",\n  ],\n  [AUTO_EVENT_NAMES.screenView]: [\"screen_name\"],\n  [AUTO_EVENT_NAMES.pageleave]: [\"path\", \"origin\", \"duration\", \"scroll_depth\", \"scroll_depth_bucket\"],\n  [AUTO_EVENT_NAMES.webVitals]: [\"metric_name\", \"metric_id\", \"value\", \"delta\", \"rating\", \"navigation_type\", \"path\"],\n  // `$`-prefixed on purpose: these are reserved, SDK-owned keys with fixed\n  // semantics, distinguished from a host's own snake_case vocabulary the\n  // same way the event names are. Not a typo — do not strip the prefix.\n  [AUTO_EVENT_NAMES.exception]: [\n    \"$exception_type\",\n    \"$exception_message\",\n    \"$exception_stack\",\n    \"$exception_source\",\n    \"$exception_handled\",\n    // Structured form. The flat keys above stay for every consumer written\n    // against them, and because V1 fingerprinting and the rollup keys read them.\n    \"$exception_list\",\n    \"$exception_level\",\n    \"$exception_fingerprint\",\n    \"$exception_steps\",\n    \"path\",\n  ],\n} as const satisfies Record<AutoEventName, readonly string[]>;\n\n/**\n * The subset of {@link AUTO_EVENT_PROPERTIES} that is a sensible rollup\n * dimension: low cardinality, categorical. Per-measurement ids and\n * continuous values (`metric_id`, `value`, `delta`, `duration`,\n * `scroll_depth`) are deliberately absent — as dimensions they would make\n * the rollup larger than the raw table it summarises. Derive\n * `rollupProperties` from here, not from the full property list.\n */\nexport const AUTO_EVENT_ROLLUP_KEYS = {\n  [AUTO_EVENT_NAMES.pageview]: [\"path\", \"origin\", \"referrer\", \"utm_source\", \"utm_medium\", \"utm_campaign\"],\n  [AUTO_EVENT_NAMES.screenView]: [\"screen_name\"],\n  [AUTO_EVENT_NAMES.pageleave]: [\"path\", \"origin\", \"scroll_depth_bucket\"],\n  [AUTO_EVENT_NAMES.webVitals]: [\"metric_name\", \"rating\", \"navigation_type\", \"path\"],\n  [AUTO_EVENT_NAMES.exception]: [\n    \"$exception_type\",\n    \"$exception_source\",\n    \"$exception_handled\",\n    \"path\",\n    // The one high-ish cardinality key in this table, and deliberately so: a\n    // fingerprint is one per *issue*, not one per occurrence, so its cardinality\n    // is the size of the issue list — hundreds, where `path` on a busy site is\n    // thousands. Rolling it up is what lets the issue list read a whole month\n    // without scanning every exception event. The per-day `__other__` fold still\n    // applies, and the read refuses the rollup when it has folded (see\n    // `errorFingerprintVolumes`), because a folded fingerprint would report zero\n    // rather than \"unknown\".\n    \"$exception_fingerprint\",\n  ],\n} as const satisfies Record<AutoEventName, readonly string[]>;\n\n// ─── Exceptions ─────────────────────────────────────────────────────────────\n\n/**\n * How deep a `cause` chain is carried, and how many frames of each exception.\n *\n * Both caps are part of the contract rather than each SDK's own opinion: the\n * server fingerprints exactly what it receives, so a client that sent more\n * frames than the server hashes would group differently from one that sent\n * fewer, for the same error.\n */\n/**\n * The property carrying the host's build identity.\n *\n * Not in {@link AUTO_EVENT_PROPERTIES}: it is not specific to any automatic\n * event — every event the SDK sends carries it once `release` is configured,\n * the same way a global property does. Error tracking is what reads it, to say\n * which build an issue first and last appeared in and whether a fix held.\n */\nexport const RELEASE_PROPERTY = \"$release_id\";\n\nexport const MAX_EXCEPTION_CHAIN = 4;\nexport const MAX_EXCEPTION_FRAMES = 50;\n\n/**\n * One stack frame, in the shape OTel and Sentry both use.\n *\n * snake_case because it is a wire format, not a JS object — renaming these on\n * the way in or out is how two SDKs end up disagreeing about the same frame.\n */\nexport interface ExceptionFrame {\n  /** The file the frame ran in. Absent for a frame no parser could place. */\n  filename?: string;\n  /** Empty or absent for an anonymous frame. */\n  function?: string;\n  /** Dotted module path, where the runtime has one. */\n  module?: string;\n  lineno?: number;\n  colno?: number;\n  /**\n   * The frame belongs to the app rather than a dependency, the runtime, or a\n   * browser extension. Drives the stack panel's default filter, and V1\n   * fingerprinting.\n   */\n  in_app?: boolean;\n  /**\n   * A source map resolved `function` to its original name. Fingerprinting then\n   * drops line and column, because a resolved name survives a rebuild that\n   * shifts them.\n   */\n  resolved?: boolean;\n  /** Source context, when a symbolication step has it (WS-E). */\n  context_line?: string;\n  pre_context?: string[];\n  post_context?: string[];\n  /** Build-injected chunk id, so a source map can be matched without the URL. */\n  chunk_id?: string;\n}\n\n/** Where an exception came from, and whether anyone caught it. */\nexport interface ExceptionMechanism {\n  /** False means nothing caught it — the error reached the runtime's handler. */\n  handled: boolean;\n  type: \"onerror\" | \"unhandledrejection\" | \"manual\" | \"console\" | \"nextjs_onRequestError\";\n  /** The Error was constructed by the SDK to carry a non-Error throw. */\n  synthetic?: boolean;\n}\n\n/** One exception in a cause chain. */\nexport interface ExceptionEntry {\n  type: string;\n  value: string;\n  mechanism: ExceptionMechanism;\n  stacktrace?: {\n    frames: ExceptionFrame[];\n    /** `raw` means the frames are as the engine reported them — not symbolicated. */\n    type: \"raw\";\n  };\n}\n\n/** A breadcrumb leading up to an exception (A5). */\nexport interface ExceptionStep {\n  /** Epoch milliseconds. */\n  timestamp: number;\n  category: \"navigation\" | \"click\" | \"fetch\" | \"console\" | \"custom\";\n  message: string;\n  data?: Record<string, unknown>;\n}\n\nexport type ExceptionLevel = \"fatal\" | \"error\" | \"warning\" | \"info\";\n\n/**\n * `$pageleave.scroll_depth` is the exact 0–100 percentage; `scroll_depth_bucket`\n * is the deepest of these thresholds reached, as a string — the value to\n * break down by. `\"0\"` means the visitor never reached the first threshold.\n */\nexport const SCROLL_DEPTH_BUCKETS = [25, 50, 75, 100] as const;\nexport type ScrollDepthBucket = \"0\" | `${(typeof SCROLL_DEPTH_BUCKETS)[number]}`;\n\nexport function scrollDepthBucket(depth: number): ScrollDepthBucket {\n  let reached: ScrollDepthBucket = \"0\";\n  for (const threshold of SCROLL_DEPTH_BUCKETS) {\n    if (depth >= threshold) reached = `${threshold}`;\n  }\n  return reached;\n}\n"],"mappings":";AAOA,MAAa,uBAAuB;CAAC;CAAiB;CAAe;AAAa;AAQlF,MAAa,mBAAmB;CAC9B,UAAU;CACV,YAAY;CACZ,WAAW;CACX,WAAW;CACX,WAAW;AACb;AASA,MAAa,wBAAwB;EAClC,iBAAiB,WAAW;EAC3B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;EACC,iBAAiB,aAAa,CAAC,aAAa;EAC5C,iBAAiB,YAAY;EAAC;EAAQ;EAAU;EAAY;EAAgB;CAAqB;EACjG,iBAAiB,YAAY;EAAC;EAAe;EAAa;EAAS;EAAS;EAAU;EAAmB;CAAM;EAI/G,iBAAiB,YAAY;EAC5B;EACA;EACA;EACA;EACA;EAGA;EACA;EACA;EACA;EACA;CACF;AACF;AAUA,MAAa,yBAAyB;EACnC,iBAAiB,WAAW;EAAC;EAAQ;EAAU;EAAY;EAAc;EAAc;CAAc;EACrG,iBAAiB,aAAa,CAAC,aAAa;EAC5C,iBAAiB,YAAY;EAAC;EAAQ;EAAU;CAAqB;EACrE,iBAAiB,YAAY;EAAC;EAAe;EAAU;EAAmB;CAAM;EAChF,iBAAiB,YAAY;EAC5B;EACA;EACA;EACA;EASA;CACF;AACF;AAoBA,MAAa,mBAAmB;AAEhC,MAAa,sBAAsB;AACnC,MAAa,uBAAuB;AA0EpC,MAAa,uBAAuB;CAAC;CAAI;CAAI;CAAI;AAAG;AAGpD,SAAgB,kBAAkB,OAAkC;CAClE,IAAI,UAA6B;CACjC,KAAK,MAAM,aAAa,sBACtB,IAAI,SAAS,WAAW,UAAU,GAAG;CAEvC,OAAO;AACT"}

package/dist/identity.cjs

@@ -1,57 +1,152 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_version = require("./version-B_0qb1_K.cjs");
+//#region src/identity.ts
+const SESSION_ID_HEADER = "reopt-session-id";
+const IDENTITY_REQUEST_HEADERS = [require_version.DEVICE_ID_HEADER, SESSION_ID_HEADER];
+const COOKIE_MAX_AGE_SECONDS = 3456e4;
+const OPT_OUT_CONSENT_CATEGORY = "analytics";
+const COOKIE_PREFIX = "reopt_";
+function cookieSafe(writeKey) {
+	if (!writeKey) throw new Error("[reopt] writeKey is required to derive cookie names");
+	return writeKey.replace(/[^A-Za-z0-9_-]/g, "_");
+}
+function deviceCookieName(writeKey) {
+	return `${COOKIE_PREFIX}${cookieSafe(writeKey)}_device`;
+}
+function consentCookieName(writeKey) {
+	return `${COOKIE_PREFIX}${cookieSafe(writeKey)}_consent`;
+}
+const IDENTITY_ID_PATTERN = /^[A-Za-z0-9._~-]{1,200}$/;
+function isValidIdentityId(value) {
+	return typeof value === "string" && IDENTITY_ID_PATTERN.test(value);
+}
+function decode(raw) {
+	let text = raw;
+	for (let round = 0; round < 3 && /%[0-9A-Fa-f]{2}/.test(text); round++) {
+		try {
+			const next = decodeURIComponent(text);
+			if (next === text) break;
+			text = next;
+		} catch {
+			break;
+		}
+		if (text.startsWith("{")) break;
+	}
+	return text;
+}
+function parseDeviceCookie(raw) {
+	if (!raw) return null;
+	const text = decode(raw.trim());
+	if (!text) return null;
+	if (!text.startsWith("{")) return isValidIdentityId(text) ? { deviceId: text } : null;
+	let parsed;
+	try {
+		parsed = JSON.parse(text);
+	} catch {
+		return null;
+	}
+	if (typeof parsed !== "object" || parsed === null) return null;
+	const candidate = parsed;
+	if (!isValidIdentityId(candidate.deviceId)) return null;
+	const state = { deviceId: candidate.deviceId };
+	if (isValidIdentityId(candidate.sessionId)) state.sessionId = candidate.sessionId;
+	if (isValidIdentityId(candidate.profileId)) state.profileId = candidate.profileId;
+	return state;
+}
+function serializeDeviceCookie(state) {
+	if (!isValidIdentityId(state.deviceId)) throw new Error("[reopt] deviceId must be a non-empty string without control characters");
+	const envelope = { deviceId: state.deviceId };
+	if (isValidIdentityId(state.sessionId)) envelope.sessionId = state.sessionId;
+	if (isValidIdentityId(state.profileId)) envelope.profileId = state.profileId;
+	return encodeURIComponent(JSON.stringify(envelope));
+}
+function parseConsentCookie(raw) {
+	if (!raw) return null;
+	const text = decode(raw.trim());
+	if (!text.startsWith("{")) return null;
+	let parsed;
+	try {
+		parsed = JSON.parse(text);
+	} catch {
+		return null;
+	}
+	if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return null;
+	const state = {};
+	for (const [category, decision] of Object.entries(parsed)) if (typeof decision === "boolean" && isValidIdentityId(category)) state[category] = decision;
+	return state;
+}
+function serializeConsentCookie(state) {
+	const clean = {};
+	for (const [category, decision] of Object.entries(state)) if (typeof decision === "boolean" && isValidIdentityId(category)) clean[category] = decision;
+	return encodeURIComponent(JSON.stringify(clean));
+}
+function isOptedOut(consent) {
+	return consent?.[OPT_OUT_CONSENT_CATEGORY] === false;
+}
+const SESSION_HEADER_SEPARATOR = ".";
+function formatSessionHeader(credential) {
+	return `${credential.id}.${credential.token}`;
+}
+function parseSessionHeader(value) {
+	if (!value) return null;
+	const at = value.lastIndexOf(".");
+	if (at <= 0 || at === value.length - 1) return null;
+	const id = value.slice(0, at);
+	const token = value.slice(at + 1);
+	return isValidIdentityId(id) && /^[A-Za-z0-9_-]{43}$/.test(token) ? {
+		id,
+		token
+	} : null;
+}
+const encoder = new TextEncoder();
+function base64url(bytes) {
+	let binary = "";
+	for (const byte of new Uint8Array(bytes)) binary += String.fromCharCode(byte);
+	return (typeof btoa === "function" ? btoa(binary) : Buffer.from(binary, "binary").toString("base64")).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+async function hmacKey(secret) {
+	return crypto.subtle.importKey("raw", encoder.encode(secret), {
+		name: "HMAC",
+		hash: "SHA-256"
+	}, false, ["sign"]);
+}
+async function signSessionToken(secret, sessionId) {
+	if (!secret) throw new Error("[reopt] a session signing secret is required");
+	return base64url(await crypto.subtle.sign("HMAC", await hmacKey(secret), encoder.encode(sessionId)));
+}
+async function verifySessionToken(secret, credential) {
+	if (!secret || !credential) return false;
+	const expected = await signSessionToken(secret, credential.id);
+	if (expected.length !== credential.token.length) return false;
+	let diff = 0;
+	for (let index = 0; index < expected.length; index++) diff |= expected.charCodeAt(index) ^ credential.token.charCodeAt(index);
+	return diff === 0;
+}
+//#endregion
+exports.CLIENT_ID_HEADER = require_version.CLIENT_ID_HEADER;
+exports.CLIENT_SECRET_HEADER = require_version.CLIENT_SECRET_HEADER;
+exports.CONTRACT_VERSION = require_version.CONTRACT_VERSION;
+exports.CONTRACT_VERSION_HEADER = require_version.CONTRACT_VERSION_HEADER;
+exports.COOKIE_MAX_AGE_SECONDS = COOKIE_MAX_AGE_SECONDS;
+exports.DEVICE_ID_HEADER = require_version.DEVICE_ID_HEADER;
+exports.IDENTITY_ID_PATTERN = IDENTITY_ID_PATTERN;
+exports.IDENTITY_REQUEST_HEADERS = IDENTITY_REQUEST_HEADERS;
+exports.OPT_OUT_CONSENT_CATEGORY = OPT_OUT_CONSENT_CATEGORY;
+exports.REQUEST_ID_HEADER = require_version.REQUEST_ID_HEADER;
+exports.SESSION_HEADER_SEPARATOR = SESSION_HEADER_SEPARATOR;
+exports.SESSION_ID_HEADER = SESSION_ID_HEADER;
+exports.WRITE_KEY_HEADER = require_version.WRITE_KEY_HEADER;
+exports.consentCookieName = consentCookieName;
+exports.deviceCookieName = deviceCookieName;
+exports.formatSessionHeader = formatSessionHeader;
+exports.isOptedOut = isOptedOut;
+exports.isValidIdentityId = isValidIdentityId;
+exports.parseConsentCookie = parseConsentCookie;
+exports.parseDeviceCookie = parseDeviceCookie;
+exports.parseSessionHeader = parseSessionHeader;
+exports.serializeConsentCookie = serializeConsentCookie;
+exports.serializeDeviceCookie = serializeDeviceCookie;
+exports.signSessionToken = signSessionToken;
+exports.verifySessionToken = verifySessionToken;
 
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-var _chunkL3JPDRVGcjs = require('./chunk-L3JPDRVG.cjs');
-
-
-
-
-
-
-
-
-var _chunkF2RNXJGOcjs = require('./chunk-F2RNXJGO.cjs');
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-exports.CLIENT_ID_HEADER = _chunkF2RNXJGOcjs.CLIENT_ID_HEADER; exports.CLIENT_SECRET_HEADER = _chunkF2RNXJGOcjs.CLIENT_SECRET_HEADER; exports.CONTRACT_VERSION = _chunkF2RNXJGOcjs.CONTRACT_VERSION; exports.CONTRACT_VERSION_HEADER = _chunkF2RNXJGOcjs.CONTRACT_VERSION_HEADER; exports.COOKIE_MAX_AGE_SECONDS = _chunkL3JPDRVGcjs.COOKIE_MAX_AGE_SECONDS; exports.DEVICE_ID_HEADER = _chunkF2RNXJGOcjs.DEVICE_ID_HEADER; exports.IDENTITY_ID_PATTERN = _chunkL3JPDRVGcjs.IDENTITY_ID_PATTERN; exports.IDENTITY_REQUEST_HEADERS = _chunkL3JPDRVGcjs.IDENTITY_REQUEST_HEADERS; exports.OPT_OUT_CONSENT_CATEGORY = _chunkL3JPDRVGcjs.OPT_OUT_CONSENT_CATEGORY; exports.REQUEST_ID_HEADER = _chunkF2RNXJGOcjs.REQUEST_ID_HEADER; exports.SESSION_HEADER_SEPARATOR = _chunkL3JPDRVGcjs.SESSION_HEADER_SEPARATOR; exports.SESSION_ID_HEADER = _chunkL3JPDRVGcjs.SESSION_ID_HEADER; exports.WRITE_KEY_HEADER = _chunkF2RNXJGOcjs.WRITE_KEY_HEADER; exports.consentCookieName = _chunkL3JPDRVGcjs.consentCookieName; exports.deviceCookieName = _chunkL3JPDRVGcjs.deviceCookieName; exports.formatSessionHeader = _chunkL3JPDRVGcjs.formatSessionHeader; exports.isOptedOut = _chunkL3JPDRVGcjs.isOptedOut; exports.isValidIdentityId = _chunkL3JPDRVGcjs.isValidIdentityId; exports.parseConsentCookie = _chunkL3JPDRVGcjs.parseConsentCookie; exports.parseDeviceCookie = _chunkL3JPDRVGcjs.parseDeviceCookie; exports.parseSessionHeader = _chunkL3JPDRVGcjs.parseSessionHeader; exports.serializeConsentCookie = _chunkL3JPDRVGcjs.serializeConsentCookie; exports.serializeDeviceCookie = _chunkL3JPDRVGcjs.serializeDeviceCookie; exports.signSessionToken = _chunkL3JPDRVGcjs.signSessionToken; exports.verifySessionToken = _chunkL3JPDRVGcjs.verifySessionToken;
 //# sourceMappingURL=identity.cjs.map

package/dist/identity.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/identity.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,oqDAAC","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/identity.cjs"}
+{"version":3,"file":"identity.cjs","names":["DEVICE_ID_HEADER"],"sources":["../src/identity.ts"],"sourcesContent":["/**\n * `@reopt-ai/data-contract/identity` — the names and encodings that carry a\n * visitor's identity between the browser SDK, the server SDK, the Next.js\n * proxy and the ingest pipeline.\n *\n * Every one of those parties reads or writes the same cookies and headers.\n * None of them depends on another (ingest does not import the SDKs), so this\n * module is the only place a name may be spelled out. A party that hardcodes\n * `reopt_<key>_device` instead of calling `deviceCookieName()` fails silently:\n * the browser sets one cookie, the server looks for another, and every\n * visitor is counted as new. `packages/db/src/__tests__/redis-namespace.test.ts`\n * guards Redis key prefixes for exactly the same reason.\n *\n * Nothing here touches `document`, `fetch` or Node built-ins — it runs in\n * browsers, edge runtimes and Node alike.\n */\nimport { DEVICE_ID_HEADER } from \"./version.js\";\n\nexport {\n  CLIENT_ID_HEADER,\n  CLIENT_SECRET_HEADER,\n  CONTRACT_VERSION,\n  CONTRACT_VERSION_HEADER,\n  DEVICE_ID_HEADER,\n  REQUEST_ID_HEADER,\n  WRITE_KEY_HEADER,\n} from \"./version.js\";\n\n/**\n * Request header carrying the browser's current session id. The browser SDK\n * adds it to same-origin requests so a server-side `track()` can land in the\n * session the user is actually in; the server SDK forwards it to ingest.\n *\n * Ingest treats it as a *hint*, never as authority — a browser can put any\n * value here.\n */\nexport const SESSION_ID_HEADER = \"reopt-session-id\";\n\n/** Every request header the identity protocol may carry, for CORS allow-lists. */\nexport const IDENTITY_REQUEST_HEADERS = [DEVICE_ID_HEADER, SESSION_ID_HEADER] as const;\n\n/**\n * 400 days — the longest lifetime Chrome will honour. Anything longer is\n * silently clamped to this, so asking for more only hides the real expiry.\n */\nexport const COOKIE_MAX_AGE_SECONDS = 400 * 24 * 60 * 60;\n\n/** Consent category whose refusal means \"send nothing at all\". */\nexport const OPT_OUT_CONSENT_CATEGORY = \"analytics\";\n\nconst COOKIE_PREFIX = \"reopt_\";\n\n/**\n * Cookie names may not contain separators (`=`, `;`, `,`, whitespace) or\n * control characters. A write key is opaque to us, so anything outside the\n * safe set is folded to `_` — deterministically, so both ends agree.\n */\nfunction cookieSafe(writeKey: string): string {\n  if (!writeKey) {\n    throw new Error(\"[reopt] writeKey is required to derive cookie names\");\n  }\n  return writeKey.replace(/[^A-Za-z0-9_-]/g, \"_\");\n}\n\n/**\n * `reopt_<writeKey>_device` — device id plus session/profile hints.\n *\n * The write key is **sanitized**: any character outside `[A-Za-z0-9_-]`\n * becomes `_` (see `cookieSafe`), so do not derive prefix/suffix pieces by\n * probing this with a marker character — the marker is folded too. Always\n * call this with the real write key and compare whole names.\n */\nexport function deviceCookieName(writeKey: string): string {\n  return `${COOKIE_PREFIX}${cookieSafe(writeKey)}_device`;\n}\n\n/** `reopt_<writeKey>_consent` — per-category consent decisions. Same sanitizing as `deviceCookieName`. */\nexport function consentCookieName(writeKey: string): string {\n  return `${COOKIE_PREFIX}${cookieSafe(writeKey)}_consent`;\n}\n\n/** Everything the device cookie may carry. Only `deviceId` is required. */\nexport interface DeviceCookieState {\n  deviceId: string;\n  /** Current session, if the browser has one. */\n  sessionId?: string | undefined;\n  /** Last identified profile. A hint for the server SDK, never trusted by ingest. */\n  profileId?: string | undefined;\n}\n\n/** Per-category consent. `false` withdraws, `true` grants, absent = undecided. */\nexport type ConsentCookieState = Record<string, boolean>;\n\n/**\n * What the server hands the browser SDK so the first render already agrees\n * with the server about who the visitor is. Plain JSON — it crosses the\n * RSC → client component boundary as a prop.\n */\nexport interface ReoptBootstrap {\n  /** From the device cookie (seeded by the proxy on first visit). */\n  deviceId: string;\n  /** Session hint, or `null` when the browser has not started one. */\n  sessionId: string | null;\n  /** Result of the server's `getProfileId` resolver, or `null`. */\n  profileId: string | null;\n  consent: ConsentCookieState;\n  /** Server clock at render time, so a skewed device clock can be corrected. */\n  serverTimeMs: number;\n}\n\n/**\n * Ids are opaque, but a cookie is attacker-controlled input (a sibling\n * subdomain can set one). The value ends up in an HTTP header, and\n * `Headers.set` throws on anything outside ISO-8859-1 — so a single odd\n * cookie would break every `fetch` the tracing patch touches. Only the URL\n * \"unreserved\" set is accepted; every id this SDK mints is a UUID.\n */\nexport const IDENTITY_ID_PATTERN = /^[A-Za-z0-9._~-]{1,200}$/;\n\nexport function isValidIdentityId(value: unknown): value is string {\n  return typeof value === \"string\" && IDENTITY_ID_PATTERN.test(value);\n}\n\n/**\n * Decodes the envelope. Tolerates one extra layer (`%257B…`) — a cookie\n * setter that encodes an already-encoded value is a mistake we have shipped\n * once, and a visitor's identity should survive it rather than be reminted.\n */\nfunction decode(raw: string): string {\n  let text = raw;\n  for (let round = 0; round < 3 && /%[0-9A-Fa-f]{2}/.test(text); round++) {\n    try {\n      const next = decodeURIComponent(text);\n      if (next === text) break;\n      text = next;\n    } catch {\n      break;\n    }\n    if (text.startsWith(\"{\")) break;\n  }\n  return text;\n}\n\n/**\n * Reads a device cookie value. Accepts the JSON envelope written by\n * `serializeDeviceCookie` and, for cookies seeded before the envelope existed,\n * a bare device id. Returns `null` for anything else — a malformed cookie is\n * treated as absent, never as an error, so a corrupted value cannot take the\n * page down.\n */\nexport function parseDeviceCookie(raw: string | null | undefined): DeviceCookieState | null {\n  if (!raw) return null;\n  const text = decode(raw.trim());\n  if (!text) return null;\n\n  if (!text.startsWith(\"{\")) {\n    return isValidIdentityId(text) ? { deviceId: text } : null;\n  }\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text);\n  } catch {\n    return null;\n  }\n  if (typeof parsed !== \"object\" || parsed === null) return null;\n\n  const candidate = parsed as Record<string, unknown>;\n  if (!isValidIdentityId(candidate.deviceId)) return null;\n\n  const state: DeviceCookieState = { deviceId: candidate.deviceId };\n  if (isValidIdentityId(candidate.sessionId)) state.sessionId = candidate.sessionId;\n  if (isValidIdentityId(candidate.profileId)) state.profileId = candidate.profileId;\n  return state;\n}\n\n/**\n * Cookie values may not contain `;`, `,` or whitespace, and JSON contains\n * quotes and commas. The envelope is therefore URI-encoded; `parseDeviceCookie`\n * reverses it. Optional fields are omitted rather than written as `null` so\n * the cookie stays as small as the state it carries.\n */\nexport function serializeDeviceCookie(state: DeviceCookieState): string {\n  if (!isValidIdentityId(state.deviceId)) {\n    throw new Error(\"[reopt] deviceId must be a non-empty string without control characters\");\n  }\n  const envelope: DeviceCookieState = { deviceId: state.deviceId };\n  if (isValidIdentityId(state.sessionId)) envelope.sessionId = state.sessionId;\n  if (isValidIdentityId(state.profileId)) envelope.profileId = state.profileId;\n  return encodeURIComponent(JSON.stringify(envelope));\n}\n\n/**\n * Reads a consent cookie. Only boolean entries survive; anything else in the\n * object is dropped rather than failing the whole cookie, because one odd key\n * must not erase a user's recorded opt-out.\n */\nexport function parseConsentCookie(raw: string | null | undefined): ConsentCookieState | null {\n  if (!raw) return null;\n  const text = decode(raw.trim());\n  if (!text.startsWith(\"{\")) return null;\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text);\n  } catch {\n    return null;\n  }\n  if (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) return null;\n\n  const state: ConsentCookieState = {};\n  for (const [category, decision] of Object.entries(parsed as Record<string, unknown>)) {\n    if (typeof decision === \"boolean\" && isValidIdentityId(category)) {\n      state[category] = decision;\n    }\n  }\n  return state;\n}\n\nexport function serializeConsentCookie(state: ConsentCookieState): string {\n  const clean: ConsentCookieState = {};\n  for (const [category, decision] of Object.entries(state)) {\n    if (typeof decision === \"boolean\" && isValidIdentityId(category)) {\n      clean[category] = decision;\n    }\n  }\n  return encodeURIComponent(JSON.stringify(clean));\n}\n\n/**\n * \"Opted out\" means the visitor refused the `analytics` category. An absent\n * cookie or an undecided category is *not* an opt-out — it is the default\n * state of every first visit, and treating it as refusal would make consent\n * banners mandatory for every integration.\n */\nexport function isOptedOut(consent: ConsentCookieState | null | undefined): boolean {\n  return consent?.[OPT_OUT_CONSENT_CATEGORY] === false;\n}\n\n// ─── Session tokens ───────────────────────────────────────────────────────────\n\n/**\n * Sessions are assigned by ingest, not by the browser. To let a later request\n * — from the same browser, or from a server acting for it — join that session\n * with authority, ingest hands the browser its session id together with an\n * HMAC over it, and the browser sends both back as `reopt-session-id`. An\n * unsigned or wrongly signed value is a hint at most: ingest falls back to\n * deciding the session from the device, exactly as if the header were absent.\n *\n * The token is `base64url(HMAC-SHA256(secret, sessionId))`. The secret is\n * per project and never leaves the server. WebCrypto only, so this runs in\n * browsers, edge runtimes and Node alike.\n */\nexport const SESSION_HEADER_SEPARATOR = \".\";\n\nexport interface SessionCredential {\n  id: string;\n  token: string;\n}\n\n/** `<id>.<token>` — what travels in `reopt-session-id`. */\nexport function formatSessionHeader(credential: SessionCredential): string {\n  return `${credential.id}${SESSION_HEADER_SEPARATOR}${credential.token}`;\n}\n\n/** Splits a `reopt-session-id` value. `null` unless both parts are well-formed. */\nexport function parseSessionHeader(value: string | null | undefined): SessionCredential | null {\n  if (!value) return null;\n  const at = value.lastIndexOf(SESSION_HEADER_SEPARATOR);\n  if (at <= 0 || at === value.length - 1) return null;\n  const id = value.slice(0, at);\n  const token = value.slice(at + 1);\n  return isValidIdentityId(id) && /^[A-Za-z0-9_-]{43}$/.test(token) ? { id, token } : null;\n}\n\nconst encoder = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  let binary = \"\";\n  for (const byte of new Uint8Array(bytes)) binary += String.fromCharCode(byte);\n  const b64 = typeof btoa === \"function\" ? btoa(binary) : Buffer.from(binary, \"binary\").toString(\"base64\");\n  return b64.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmacKey(secret: string): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\"raw\", encoder.encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n}\n\n/** Issues the token for `sessionId`. Server-side only — needs the project secret. */\nexport async function signSessionToken(secret: string, sessionId: string): Promise<string> {\n  if (!secret) throw new Error(\"[reopt] a session signing secret is required\");\n  const signature = await crypto.subtle.sign(\"HMAC\", await hmacKey(secret), encoder.encode(sessionId));\n  return base64url(signature);\n}\n\n/**\n * Constant-time check of a presented token. Recomputes and compares the\n * digests byte by byte rather than using `subtle.verify` with a decoded\n * token, so a malformed token can never throw its way past the check.\n */\nexport async function verifySessionToken(secret: string, credential: SessionCredential): Promise<boolean> {\n  if (!secret || !credential) return false;\n  const expected = await signSessionToken(secret, credential.id);\n  if (expected.length !== credential.token.length) return false;\n  let diff = 0;\n  for (let index = 0; index < expected.length; index++) {\n    diff |= expected.charCodeAt(index) ^ credential.token.charCodeAt(index);\n  }\n  return diff === 0;\n}\n"],"mappings":";;;AAoCA,MAAa,oBAAoB;AAGjC,MAAa,2BAA2B,CAACA,gBAAAA,kBAAkB,iBAAiB;AAM5E,MAAa,yBAAyB;AAGtC,MAAa,2BAA2B;AAExC,MAAM,gBAAgB;AAOtB,SAAS,WAAW,UAA0B;CAC5C,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,qDAAqD;CAEvE,OAAO,SAAS,QAAQ,mBAAmB,GAAG;AAChD;AAUA,SAAgB,iBAAiB,UAA0B;CACzD,OAAO,GAAG,gBAAgB,WAAW,QAAQ,EAAE;AACjD;AAGA,SAAgB,kBAAkB,UAA0B;CAC1D,OAAO,GAAG,gBAAgB,WAAW,QAAQ,EAAE;AACjD;AAsCA,MAAa,sBAAsB;AAEnC,SAAgB,kBAAkB,OAAiC;CACjE,OAAO,OAAO,UAAU,YAAY,oBAAoB,KAAK,KAAK;AACpE;AAOA,SAAS,OAAO,KAAqB;CACnC,IAAI,OAAO;CACX,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,kBAAkB,KAAK,IAAI,GAAG,SAAS;EACtE,IAAI;GACF,MAAM,OAAO,mBAAmB,IAAI;GACpC,IAAI,SAAS,MAAM;GACnB,OAAO;EACT,QAAQ;GACN;EACF;EACA,IAAI,KAAK,WAAW,GAAG,GAAG;CAC5B;CACA,OAAO;AACT;AASA,SAAgB,kBAAkB,KAA0D;CAC1F,IAAI,CAAC,KAAK,OAAO;CACjB,MAAM,OAAO,OAAO,IAAI,KAAK,CAAC;CAC9B,IAAI,CAAC,MAAM,OAAO;CAElB,IAAI,CAAC,KAAK,WAAW,GAAG,GACtB,OAAO,kBAAkB,IAAI,IAAI,EAAE,UAAU,KAAK,IAAI;CAGxD,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,QAAQ;EACN,OAAO;CACT;CACA,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO;CAE1D,MAAM,YAAY;CAClB,IAAI,CAAC,kBAAkB,UAAU,QAAQ,GAAG,OAAO;CAEnD,MAAM,QAA2B,EAAE,UAAU,UAAU,SAAS;CAChE,IAAI,kBAAkB,UAAU,SAAS,GAAG,MAAM,YAAY,UAAU;CACxE,IAAI,kBAAkB,UAAU,SAAS,GAAG,MAAM,YAAY,UAAU;CACxE,OAAO;AACT;AAQA,SAAgB,sBAAsB,OAAkC;CACtE,IAAI,CAAC,kBAAkB,MAAM,QAAQ,GACnC,MAAM,IAAI,MAAM,wEAAwE;CAE1F,MAAM,WAA8B,EAAE,UAAU,MAAM,SAAS;CAC/D,IAAI,kBAAkB,MAAM,SAAS,GAAG,SAAS,YAAY,MAAM;CACnE,IAAI,kBAAkB,MAAM,SAAS,GAAG,SAAS,YAAY,MAAM;CACnE,OAAO,mBAAmB,KAAK,UAAU,QAAQ,CAAC;AACpD;AAOA,SAAgB,mBAAmB,KAA2D;CAC5F,IAAI,CAAC,KAAK,OAAO;CACjB,MAAM,OAAO,OAAO,IAAI,KAAK,CAAC;CAC9B,IAAI,CAAC,KAAK,WAAW,GAAG,GAAG,OAAO;CAElC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,QAAQ;EACN,OAAO;CACT;CACA,IAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GAAG,OAAO;CAEnF,MAAM,QAA4B,CAAC;CACnC,KAAK,MAAM,CAAC,UAAU,aAAa,OAAO,QAAQ,MAAiC,GACjF,IAAI,OAAO,aAAa,aAAa,kBAAkB,QAAQ,GAC7D,MAAM,YAAY;CAGtB,OAAO;AACT;AAEA,SAAgB,uBAAuB,OAAmC;CACxE,MAAM,QAA4B,CAAC;CACnC,KAAK,MAAM,CAAC,UAAU,aAAa,OAAO,QAAQ,KAAK,GACrD,IAAI,OAAO,aAAa,aAAa,kBAAkB,QAAQ,GAC7D,MAAM,YAAY;CAGtB,OAAO,mBAAmB,KAAK,UAAU,KAAK,CAAC;AACjD;AAQA,SAAgB,WAAW,SAAyD;CAClF,OAAO,UAAU,8BAA8B;AACjD;AAgBA,MAAa,2BAA2B;AAQxC,SAAgB,oBAAoB,YAAuC;CACzE,OAAO,GAAG,WAAW,MAAgC,WAAW;AAClE;AAGA,SAAgB,mBAAmB,OAA4D;CAC7F,IAAI,CAAC,OAAO,OAAO;CACnB,MAAM,KAAK,MAAM,YAAA,GAAoC;CACrD,IAAI,MAAM,KAAK,OAAO,MAAM,SAAS,GAAG,OAAO;CAC/C,MAAM,KAAK,MAAM,MAAM,GAAG,EAAE;CAC5B,MAAM,QAAQ,MAAM,MAAM,KAAK,CAAC;CAChC,OAAO,kBAAkB,EAAE,KAAK,sBAAsB,KAAK,KAAK,IAAI;EAAE;EAAI;CAAM,IAAI;AACtF;AAEA,MAAM,UAAU,IAAI,YAAY;AAEhC,SAAS,UAAU,OAA4B;CAC7C,IAAI,SAAS;CACb,KAAK,MAAM,QAAQ,IAAI,WAAW,KAAK,GAAG,UAAU,OAAO,aAAa,IAAI;CAE5E,QADY,OAAO,SAAS,aAAa,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ,QAAQ,CAAC,CAAC,SAAS,QAAQ,EAAA,CAC5F,QAAQ,OAAO,GAAG,CAAC,CAAC,QAAQ,OAAO,GAAG,CAAC,CAAC,QAAQ,OAAO,EAAE;AACtE;AAEA,eAAe,QAAQ,QAAoC;CACzD,OAAO,OAAO,OAAO,UAAU,OAAO,QAAQ,OAAO,MAAM,GAAG;EAAE,MAAM;EAAQ,MAAM;CAAU,GAAG,OAAO,CAAC,MAAM,CAAC;AAClH;AAGA,eAAsB,iBAAiB,QAAgB,WAAoC;CACzF,IAAI,CAAC,QAAQ,MAAM,IAAI,MAAM,8CAA8C;CAE3E,OAAO,UAAU,MADO,OAAO,OAAO,KAAK,QAAQ,MAAM,QAAQ,MAAM,GAAG,QAAQ,OAAO,SAAS,CAAC,CACzE;AAC5B;AAOA,eAAsB,mBAAmB,QAAgB,YAAiD;CACxG,IAAI,CAAC,UAAU,CAAC,YAAY,OAAO;CACnC,MAAM,WAAW,MAAM,iBAAiB,QAAQ,WAAW,EAAE;CAC7D,IAAI,SAAS,WAAW,WAAW,MAAM,QAAQ,OAAO;CACxD,IAAI,OAAO;CACX,KAAK,IAAI,QAAQ,GAAG,QAAQ,SAAS,QAAQ,SAC3C,QAAQ,SAAS,WAAW,KAAK,IAAI,WAAW,MAAM,WAAW,KAAK;CAExE,OAAO,SAAS;AAClB"}

package/dist/identity.d.cts

@@ -1,5 +1,5 @@
-export { C as CLIENT_ID_HEADER, a as CLIENT_SECRET_HEADER, b as CONTRACT_VERSION, c as CONTRACT_VERSION_HEADER, D as DEVICE_ID_HEADER, R as REQUEST_ID_HEADER, W as WRITE_KEY_HEADER } from './version-DJ2Grb_N.cjs';
-
+import { a as DEVICE_ID_HEADER, i as CONTRACT_VERSION_HEADER, n as CLIENT_SECRET_HEADER, o as REQUEST_ID_HEADER, r as CONTRACT_VERSION, s as WRITE_KEY_HEADER, t as CLIENT_ID_HEADER } from "./version-CGujUGWd.cjs";
+//#region src/identity.d.ts
 /**
  * Request header carrying the browser's current session id. The browser SDK
  * adds it to same-origin requests so a server-side `track()` can land in the
@@ -31,11 +31,11 @@ declare function deviceCookieName(writeKey: string): string;
 declare function consentCookieName(writeKey: string): string;
 /** Everything the device cookie may carry. Only `deviceId` is required. */
 interface DeviceCookieState {
-    deviceId: string;
-    /** Current session, if the browser has one. */
-    sessionId?: string | undefined;
-    /** Last identified profile. A hint for the server SDK, never trusted by ingest. */
-    profileId?: string | undefined;
+  deviceId: string;
+  /** Current session, if the browser has one. */
+  sessionId?: string | undefined;
+  /** Last identified profile. A hint for the server SDK, never trusted by ingest. */
+  profileId?: string | undefined;
 }
 /** Per-category consent. `false` withdraws, `true` grants, absent = undecided. */
 type ConsentCookieState = Record<string, boolean>;
@@ -45,15 +45,15 @@ type ConsentCookieState = Record<string, boolean>;
  * RSC → client component boundary as a prop.
  */
 interface ReoptBootstrap {
-    /** From the device cookie (seeded by the proxy on first visit). */
-    deviceId: string;
-    /** Session hint, or `null` when the browser has not started one. */
-    sessionId: string | null;
-    /** Result of the server's `getProfileId` resolver, or `null`. */
-    profileId: string | null;
-    consent: ConsentCookieState;
-    /** Server clock at render time, so a skewed device clock can be corrected. */
-    serverTimeMs: number;
+  /** From the device cookie (seeded by the proxy on first visit). */
+  deviceId: string;
+  /** Session hint, or `null` when the browser has not started one. */
+  sessionId: string | null;
+  /** Result of the server's `getProfileId` resolver, or `null`. */
+  profileId: string | null;
+  consent: ConsentCookieState;
+  /** Server clock at render time, so a skewed device clock can be corrected. */
+  serverTimeMs: number;
 }
 /**
  * Ids are opaque, but a cookie is attacker-controlled input (a sibling
@@ -107,8 +107,8 @@ declare function isOptedOut(consent: ConsentCookieState | null | undefined): boo
  */
 declare const SESSION_HEADER_SEPARATOR = ".";
 interface SessionCredential {
-    id: string;
-    token: string;
+  id: string;
+  token: string;
 }
 /** `<id>.<token>` — what travels in `reopt-session-id`. */
 declare function formatSessionHeader(credential: SessionCredential): string;
@@ -122,5 +122,6 @@ declare function signSessionToken(secret: string, sessionId: string): Promise<st
  * token, so a malformed token can never throw its way past the check.
  */
 declare function verifySessionToken(secret: string, credential: SessionCredential): Promise<boolean>;
-
-export { COOKIE_MAX_AGE_SECONDS, type ConsentCookieState, type DeviceCookieState, IDENTITY_ID_PATTERN, IDENTITY_REQUEST_HEADERS, OPT_OUT_CONSENT_CATEGORY, type ReoptBootstrap, SESSION_HEADER_SEPARATOR, SESSION_ID_HEADER, type SessionCredential, consentCookieName, deviceCookieName, formatSessionHeader, isOptedOut, isValidIdentityId, parseConsentCookie, parseDeviceCookie, parseSessionHeader, serializeConsentCookie, serializeDeviceCookie, signSessionToken, verifySessionToken };
+//#endregion
+export { CLIENT_ID_HEADER, CLIENT_SECRET_HEADER, CONTRACT_VERSION, CONTRACT_VERSION_HEADER, COOKIE_MAX_AGE_SECONDS, ConsentCookieState, DEVICE_ID_HEADER, DeviceCookieState, IDENTITY_ID_PATTERN, IDENTITY_REQUEST_HEADERS, OPT_OUT_CONSENT_CATEGORY, REQUEST_ID_HEADER, ReoptBootstrap, SESSION_HEADER_SEPARATOR, SESSION_ID_HEADER, SessionCredential, WRITE_KEY_HEADER, consentCookieName, deviceCookieName, formatSessionHeader, isOptedOut, isValidIdentityId, parseConsentCookie, parseDeviceCookie, parseSessionHeader, serializeConsentCookie, serializeDeviceCookie, signSessionToken, verifySessionToken };
+//# sourceMappingURL=identity.d.cts.map

package/dist/identity.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.cts","names":[],"sources":["../src/identity.ts"],"mappings":";;;;;;;;;;cAoCa;;cAGA;;;;;cAMA;;cAGA;;;;;;;;;iBAwBG,iBAAiB;;iBAKjB,kBAAkB;;UAKjB;EACf;;EAEA;;EAEA;;;KAIU,qBAAqB;;;;;;UAOhB;;EAEf;;EAEA;;EAEA;EACA,SAAS;;EAET;;;;;;;;;cAUW,qBAAmB;iBAEhB,kBAAkB,iBAAiB;;;;;;;;iBA+BnC,kBAAkB,iCAAiC;;;;;;;iBAgCnD,sBAAsB,OAAO;;;;;;iBAe7B,mBAAmB,iCAAiC;iBAsBpD,uBAAuB,OAAO;;;;;;;iBAgB9B,WAAW,SAAS;;;;;;;;;;;;;cAkBvB;UAEI;EACf;EACA;;;iBAIc,oBAAoB,YAAY;;iBAKhC,mBAAmB,mCAAmC;;iBAuBhD,iBAAiB,gBAAgB,oBAAoB;;;;;;iBAWrD,mBAAmB,gBAAgB,YAAY,oBAAoB"}

package/dist/identity.d.ts

@@ -1,5 +1,5 @@
-export { C as CLIENT_ID_HEADER, a as CLIENT_SECRET_HEADER, b as CONTRACT_VERSION, c as CONTRACT_VERSION_HEADER, D as DEVICE_ID_HEADER, R as REQUEST_ID_HEADER, W as WRITE_KEY_HEADER } from './version-DJ2Grb_N.js';
-
+import { a as DEVICE_ID_HEADER, i as CONTRACT_VERSION_HEADER, n as CLIENT_SECRET_HEADER, o as REQUEST_ID_HEADER, r as CONTRACT_VERSION, s as WRITE_KEY_HEADER, t as CLIENT_ID_HEADER } from "./version-CGujUGWd.js";
+//#region src/identity.d.ts
 /**
  * Request header carrying the browser's current session id. The browser SDK
  * adds it to same-origin requests so a server-side `track()` can land in the
@@ -31,11 +31,11 @@ declare function deviceCookieName(writeKey: string): string;
 declare function consentCookieName(writeKey: string): string;
 /** Everything the device cookie may carry. Only `deviceId` is required. */
 interface DeviceCookieState {
-    deviceId: string;
-    /** Current session, if the browser has one. */
-    sessionId?: string | undefined;
-    /** Last identified profile. A hint for the server SDK, never trusted by ingest. */
-    profileId?: string | undefined;
+  deviceId: string;
+  /** Current session, if the browser has one. */
+  sessionId?: string | undefined;
+  /** Last identified profile. A hint for the server SDK, never trusted by ingest. */
+  profileId?: string | undefined;
 }
 /** Per-category consent. `false` withdraws, `true` grants, absent = undecided. */
 type ConsentCookieState = Record<string, boolean>;
@@ -45,15 +45,15 @@ type ConsentCookieState = Record<string, boolean>;
  * RSC → client component boundary as a prop.
  */
 interface ReoptBootstrap {
-    /** From the device cookie (seeded by the proxy on first visit). */
-    deviceId: string;
-    /** Session hint, or `null` when the browser has not started one. */
-    sessionId: string | null;
-    /** Result of the server's `getProfileId` resolver, or `null`. */
-    profileId: string | null;
-    consent: ConsentCookieState;
-    /** Server clock at render time, so a skewed device clock can be corrected. */
-    serverTimeMs: number;
+  /** From the device cookie (seeded by the proxy on first visit). */
+  deviceId: string;
+  /** Session hint, or `null` when the browser has not started one. */
+  sessionId: string | null;
+  /** Result of the server's `getProfileId` resolver, or `null`. */
+  profileId: string | null;
+  consent: ConsentCookieState;
+  /** Server clock at render time, so a skewed device clock can be corrected. */
+  serverTimeMs: number;
 }
 /**
  * Ids are opaque, but a cookie is attacker-controlled input (a sibling
@@ -107,8 +107,8 @@ declare function isOptedOut(consent: ConsentCookieState | null | undefined): boo
  */
 declare const SESSION_HEADER_SEPARATOR = ".";
 interface SessionCredential {
-    id: string;
-    token: string;
+  id: string;
+  token: string;
 }
 /** `<id>.<token>` — what travels in `reopt-session-id`. */
 declare function formatSessionHeader(credential: SessionCredential): string;
@@ -122,5 +122,6 @@ declare function signSessionToken(secret: string, sessionId: string): Promise<st
  * token, so a malformed token can never throw its way past the check.
  */
 declare function verifySessionToken(secret: string, credential: SessionCredential): Promise<boolean>;
-
-export { COOKIE_MAX_AGE_SECONDS, type ConsentCookieState, type DeviceCookieState, IDENTITY_ID_PATTERN, IDENTITY_REQUEST_HEADERS, OPT_OUT_CONSENT_CATEGORY, type ReoptBootstrap, SESSION_HEADER_SEPARATOR, SESSION_ID_HEADER, type SessionCredential, consentCookieName, deviceCookieName, formatSessionHeader, isOptedOut, isValidIdentityId, parseConsentCookie, parseDeviceCookie, parseSessionHeader, serializeConsentCookie, serializeDeviceCookie, signSessionToken, verifySessionToken };
+//#endregion
+export { CLIENT_ID_HEADER, CLIENT_SECRET_HEADER, CONTRACT_VERSION, CONTRACT_VERSION_HEADER, COOKIE_MAX_AGE_SECONDS, ConsentCookieState, DEVICE_ID_HEADER, DeviceCookieState, IDENTITY_ID_PATTERN, IDENTITY_REQUEST_HEADERS, OPT_OUT_CONSENT_CATEGORY, REQUEST_ID_HEADER, ReoptBootstrap, SESSION_HEADER_SEPARATOR, SESSION_ID_HEADER, SessionCredential, WRITE_KEY_HEADER, consentCookieName, deviceCookieName, formatSessionHeader, isOptedOut, isValidIdentityId, parseConsentCookie, parseDeviceCookie, parseSessionHeader, serializeConsentCookie, serializeDeviceCookie, signSessionToken, verifySessionToken };
+//# sourceMappingURL=identity.d.ts.map

package/dist/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","names":[],"sources":["../src/identity.ts"],"mappings":";;;;;;;;;;cAoCa;;cAGA;;;;;cAMA;;cAGA;;;;;;;;;iBAwBG,iBAAiB;;iBAKjB,kBAAkB;;UAKjB;EACf;;EAEA;;EAEA;;;KAIU,qBAAqB;;;;;;UAOhB;;EAEf;;EAEA;;EAEA;EACA,SAAS;;EAET;;;;;;;;;cAUW,qBAAmB;iBAEhB,kBAAkB,iBAAiB;;;;;;;;iBA+BnC,kBAAkB,iCAAiC;;;;;;;iBAgCnD,sBAAsB,OAAO;;;;;;iBAe7B,mBAAmB,iCAAiC;iBAsBpD,uBAAuB,OAAO;;;;;;;iBAgB9B,WAAW,SAAS;;;;;;;;;;;;;cAkBvB;UAEI;EACf;EACA;;;iBAIc,oBAAoB,YAAY;;iBAKhC,mBAAmB,mCAAmC;;iBAuBhD,iBAAiB,gBAAgB,oBAAoB;;;;;;iBAWrD,mBAAmB,gBAAgB,YAAY,oBAAoB"}