@replohq/sdk 0.4.0 → 0.6.0

package/_vendor/schemas/generated/consent.d.ts

@@ -10,6 +10,7 @@ export type ScriptTagDescriptor = {
 } | {
     kind: "inline";
     body: string;
+    module?: boolean;
 };
 export type ReploScriptEntry = {
     type: "GA4" | "GoogleTagManager" | "Meta" | "TikTok" | "Pinterest" | "Reddit" | "Snapchat" | "Hotjar" | "MicrosoftClarity" | "Contentsquare" | "Segment" | "Northbeam";
@@ -19,6 +20,7 @@ export type ReploScriptEntry = {
     type: "snippet";
     id: string;
     body: string;
+    module?: boolean;
     requiredConsent: ConsentCategory[];
 } | {
     type: "custom";

package/consent/inject-script-descriptors.d.ts

@@ -0,0 +1,11 @@
+import type { ScriptTagDescriptor } from "../_vendor/schemas/generated/consent";
+/**
+ * Creates and appends the script nodes for `descriptors`, skipping node ids
+ * already in the document, and returns the created nodes so the caller owns
+ * their removal. Lives outside replo-scripts.tsx so the component file only
+ * exports components (HMR) and this stays off the published public surface.
+ */
+export declare function injectScriptDescriptors({ baseId, descriptors, }: {
+    baseId: string;
+    descriptors: ScriptTagDescriptor[];
+}): HTMLScriptElement[];

package/consent/inject-script-descriptors.js

@@ -0,0 +1,35 @@
+function injectScriptDescriptors({
+  baseId,
+  descriptors
+}) {
+  const createdNodes = [];
+  descriptors.forEach((descriptor, index) => {
+    const nodeId = `${baseId}#${index}`;
+    if (document.querySelector(`script[data-replo-script-id="${nodeId}"]`)) {
+      return;
+    }
+    const scriptElement = document.createElement("script");
+    scriptElement.dataset.reploScriptId = nodeId;
+    if (descriptor.kind === "external") {
+      scriptElement.src = descriptor.src;
+      scriptElement.async = true;
+      for (const [attributeName, attributeValue] of Object.entries(
+        descriptor.attributes ?? {}
+      )) {
+        scriptElement.setAttribute(attributeName, attributeValue);
+      }
+    } else {
+      if (descriptor.module) {
+        scriptElement.type = "module";
+      }
+      scriptElement.textContent = descriptor.body;
+    }
+    document.head.append(scriptElement);
+    createdNodes.push(scriptElement);
+  });
+  return createdNodes;
+}
+export {
+  injectScriptDescriptors
+};
+//# sourceMappingURL=inject-script-descriptors.js.map

package/consent/inject-script-descriptors.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../consent/inject-script-descriptors.ts"],
+  "sourcesContent": ["import type { ScriptTagDescriptor } from \"schemas/generated/consent\";\n\n/**\n * Creates and appends the script nodes for `descriptors`, skipping node ids\n * already in the document, and returns the created nodes so the caller owns\n * their removal. Lives outside replo-scripts.tsx so the component file only\n * exports components (HMR) and this stays off the published public surface.\n */\nexport function injectScriptDescriptors({\n  baseId,\n  descriptors,\n}: {\n  baseId: string;\n  descriptors: ScriptTagDescriptor[];\n}): HTMLScriptElement[] {\n  const createdNodes: HTMLScriptElement[] = [];\n  descriptors.forEach((descriptor, index) => {\n    const nodeId = `${baseId}#${index}`;\n    if (document.querySelector(`script[data-replo-script-id=\"${nodeId}\"]`)) {\n      return;\n    }\n    const scriptElement = document.createElement(\"script\");\n    scriptElement.dataset.reploScriptId = nodeId;\n    if (descriptor.kind === \"external\") {\n      scriptElement.src = descriptor.src;\n      scriptElement.async = true;\n      for (const [attributeName, attributeValue] of Object.entries(\n        descriptor.attributes ?? {},\n      )) {\n        scriptElement.setAttribute(attributeName, attributeValue);\n      }\n    } else {\n      // Module snippets (top-level await, import()) are a SyntaxError as\n      // classic scripts, so the type must survive injection.\n      if (descriptor.module) {\n        scriptElement.type = \"module\";\n      }\n      scriptElement.textContent = descriptor.body;\n    }\n    document.head.append(scriptElement);\n    createdNodes.push(scriptElement);\n  });\n  return createdNodes;\n}\n"],
+  "mappings": "AAQO,SAAS,wBAAwB;AAAA,EACtC;AAAA,EACA;AACF,GAGwB;AACtB,QAAM,eAAoC,CAAC;AAC3C,cAAY,QAAQ,CAAC,YAAY,UAAU;AACzC,UAAM,SAAS,GAAG,MAAM,IAAI,KAAK;AACjC,QAAI,SAAS,cAAc,gCAAgC,MAAM,IAAI,GAAG;AACtE;AAAA,IACF;AACA,UAAM,gBAAgB,SAAS,cAAc,QAAQ;AACrD,kBAAc,QAAQ,gBAAgB;AACtC,QAAI,WAAW,SAAS,YAAY;AAClC,oBAAc,MAAM,WAAW;AAC/B,oBAAc,QAAQ;AACtB,iBAAW,CAAC,eAAe,cAAc,KAAK,OAAO;AAAA,QACnD,WAAW,cAAc,CAAC;AAAA,MAC5B,GAAG;AACD,sBAAc,aAAa,eAAe,cAAc;AAAA,MAC1D;AAAA,IACF,OAAO;AAGL,UAAI,WAAW,QAAQ;AACrB,sBAAc,OAAO;AAAA,MACvB;AACA,oBAAc,cAAc,WAAW;AAAA,IACzC;AACA,aAAS,KAAK,OAAO,aAAa;AAClC,iBAAa,KAAK,aAAa;AAAA,EACjC,CAAC;AACD,SAAO;AACT;",
+  "names": []
+}

package/consent/replo-scripts.js

@@ -2,6 +2,7 @@
 import { Fragment, jsx } from "react/jsx-runtime";
 import { useEffect } from "react";
 import { isConsentAllowed, useConsent } from "./consent-store";
+import { injectScriptDescriptors } from "./inject-script-descriptors";
 import { registerScript, unregisterScript } from "./script-registration-store";
 import { buildScriptTags, defaultConsentFor } from "./script-snippets";
 import { installConsentWindowApi } from "./window-api";
@@ -31,7 +32,7 @@ function descriptorsFor(entry) {
     return [];
   }
   if (entry.type === "snippet") {
-    return [{ kind: "inline", body: entry.body }];
+    return [{ kind: "inline", body: entry.body, module: entry.module }];
   }
   return buildScriptTags({ type: entry.type, identifier: entry.identifier });
 }
@@ -44,31 +45,7 @@ function InjectedScript({
     if (typeof document === "undefined") {
       return;
     }
-    const createdNodes = [];
-    descriptors.forEach((descriptor, index) => {
-      const nodeId = `${baseId}#${index}`;
-      const existing = document.querySelector(
-        `script[data-replo-script-id="${nodeId}"]`
-      );
-      if (existing) {
-        return;
-      }
-      const scriptElement = document.createElement("script");
-      scriptElement.dataset.reploScriptId = nodeId;
-      if (descriptor.kind === "external") {
-        scriptElement.src = descriptor.src;
-        scriptElement.async = true;
-        for (const [attributeName, attributeValue] of Object.entries(
-          descriptor.attributes ?? {}
-        )) {
-          scriptElement.setAttribute(attributeName, attributeValue);
-        }
-      } else {
-        scriptElement.textContent = descriptor.body;
-      }
-      document.head.append(scriptElement);
-      createdNodes.push(scriptElement);
-    });
+    const createdNodes = injectScriptDescriptors({ baseId, descriptors });
     return () => {
       for (const node of createdNodes) {
         node.remove();

package/consent/replo-scripts.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../consent/replo-scripts.tsx"],
-  "sourcesContent": ["\"use client\";\n\nimport type {\n  ConsentCategory,\n  ReploScriptEntry,\n  ScriptTagDescriptor,\n} from \"schemas/generated/consent\";\n\nimport { useEffect } from \"react\";\n\nimport { isConsentAllowed, useConsent } from \"./consent-store\";\nimport { registerScript, unregisterScript } from \"./script-registration-store\";\nimport { buildScriptTags, defaultConsentFor } from \"./script-snippets\";\nimport { installConsentWindowApi } from \"./window-api\";\n\n/**\n * Stable identity for an entry, used as React key and DOM dedupe key. `snippet`\n * and `custom` entries key on their `id`; identifier providers on type+id.\n */\nfunction scriptId(entry: ReploScriptEntry): string {\n  if (entry.type === \"custom\") {\n    return `custom:${entry.id}`;\n  }\n  if (entry.type === \"snippet\") {\n    return `snippet:${entry.id}`;\n  }\n  return `${entry.type}:${entry.identifier}`;\n}\n\nfunction requiredConsentFor(entry: ReploScriptEntry): ConsentCategory[] {\n  if (entry.type === \"custom\" || entry.type === \"snippet\") {\n    return entry.requiredConsent;\n  }\n  return entry.requiredConsent ?? defaultConsentFor(entry.type);\n}\n\n/**\n * Resolves an entry to the concrete tags to inject. An identifier provider may\n * resolve to multiple tags (GA4 = external loader + inline config); a `snippet`\n * entry injects its pasted body inline; a `custom` entry is a single external\n * `src` or inline `body`.\n */\nfunction descriptorsFor(entry: ReploScriptEntry): ScriptTagDescriptor[] {\n  if (entry.type === \"custom\") {\n    if (entry.src) {\n      return [{ kind: \"external\", src: entry.src }];\n    }\n    if (entry.body) {\n      return [{ kind: \"inline\", body: entry.body }];\n    }\n    return [];\n  }\n  if (entry.type === \"snippet\") {\n    return [{ kind: \"inline\", body: entry.body }];\n  }\n  return buildScriptTags({ type: entry.type, identifier: entry.identifier });\n}\n\n/**\n * Injects the resolved tags into `document.head` once a caller has decided\n * consent allows it. Reused both for author-managed `ReploScripts` entries and\n * for the implicit Replo first-party pixel.\n *\n * DOM insertion (not JSX) is required because inline `<script>` bodies set via\n * React's `dangerouslySetInnerHTML` never execute. Each node is tagged with\n * `data-replo-script-id` (plus a per-tag index) so re-renders and React Strict\n * Mode double-invokes do not double-inject.\n */\nexport function InjectedScript({\n  baseId,\n  descriptors,\n}: {\n  baseId: string;\n  descriptors: ScriptTagDescriptor[];\n}) {\n  // Re-inject only when the resolved tags actually change.\n  const injectionKey = `${baseId}|${JSON.stringify(descriptors)}`;\n\n  // eslint-disable-next-line replo/no-use-effect -- script injection is a DOM side effect that must run after mount and on consent changes\n  useEffect(() => {\n    if (typeof document === \"undefined\") {\n      return;\n    }\n    const createdNodes: HTMLScriptElement[] = [];\n    descriptors.forEach((descriptor, index) => {\n      const nodeId = `${baseId}#${index}`;\n      const existing = document.querySelector(\n        `script[data-replo-script-id=\"${nodeId}\"]`,\n      );\n      if (existing) {\n        return;\n      }\n      const scriptElement = document.createElement(\"script\");\n      scriptElement.dataset.reploScriptId = nodeId;\n      if (descriptor.kind === \"external\") {\n        scriptElement.src = descriptor.src;\n        scriptElement.async = true;\n        for (const [attributeName, attributeValue] of Object.entries(\n          descriptor.attributes ?? {},\n        )) {\n          scriptElement.setAttribute(attributeName, attributeValue);\n        }\n      } else {\n        scriptElement.textContent = descriptor.body;\n      }\n      document.head.append(scriptElement);\n      createdNodes.push(scriptElement);\n    });\n\n    return () => {\n      // Removing the node does not unload an already-loaded vendor (see the plan's\n      // revocation note); full teardown is a reload triggered by the banner. This\n      // cleanup keeps the DOM tidy and prevents duplicates across remounts.\n      for (const node of createdNodes) {\n        node.remove();\n      }\n    };\n  }, [injectionKey]);\n\n  return null;\n}\n\nfunction ManagedScript({ entry }: { entry: ReploScriptEntry }) {\n  const consent = useConsent();\n  const requiredConsent = requiredConsentFor(entry);\n  const id = scriptId(entry);\n  const consentKey = requiredConsent.join(\",\");\n\n  // eslint-disable-next-line replo/no-use-effect -- register/unregister with the singleton so the analytics provider can gate sinks by what's on the page\n  useEffect(() => {\n    registerScript({ id, type: entry.type, requiredConsent });\n    return () => unregisterScript(id);\n  }, [id, entry.type, consentKey]);\n\n  if (!isConsentAllowed({ state: consent, requiredConsent })) {\n    return null;\n  }\n  return <InjectedScript baseId={id} descriptors={descriptorsFor(entry)} />;\n}\n\n/**\n * The single registry component for all managed tracking scripts on the site.\n * Authored once in `app/layout.tsx`; the agent/miniapp only edit the `scripts`\n * array. Each entry registers itself and is gated + injected per consent.\n */\nexport function ReploScripts({ scripts }: { scripts: ReploScriptEntry[] }) {\n  // eslint-disable-next-line replo/no-use-effect -- install the window.Replo.customerPrivacy API + change event once the consent runtime mounts\n  useEffect(() => installConsentWindowApi(), []);\n\n  return (\n    <>\n      {scripts.map((entry) => (\n        <ManagedScript key={scriptId(entry)} entry={entry} />\n      ))}\n    </>\n  );\n}\n"],
-  "mappings": ";AAyIS,SAaL,UAbK;AAjIT,SAAS,iBAAiB;AAE1B,SAAS,kBAAkB,kBAAkB;AAC7C,SAAS,gBAAgB,wBAAwB;AACjD,SAAS,iBAAiB,yBAAyB;AACnD,SAAS,+BAA+B;AAMxC,SAAS,SAAS,OAAiC;AACjD,MAAI,MAAM,SAAS,UAAU;AAC3B,WAAO,UAAU,MAAM,EAAE;AAAA,EAC3B;AACA,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,WAAW,MAAM,EAAE;AAAA,EAC5B;AACA,SAAO,GAAG,MAAM,IAAI,IAAI,MAAM,UAAU;AAC1C;AAEA,SAAS,mBAAmB,OAA4C;AACtE,MAAI,MAAM,SAAS,YAAY,MAAM,SAAS,WAAW;AACvD,WAAO,MAAM;AAAA,EACf;AACA,SAAO,MAAM,mBAAmB,kBAAkB,MAAM,IAAI;AAC9D;AAQA,SAAS,eAAe,OAAgD;AACtE,MAAI,MAAM,SAAS,UAAU;AAC3B,QAAI,MAAM,KAAK;AACb,aAAO,CAAC,EAAE,MAAM,YAAY,KAAK,MAAM,IAAI,CAAC;AAAA,IAC9C;AACA,QAAI,MAAM,MAAM;AACd,aAAO,CAAC,EAAE,MAAM,UAAU,MAAM,MAAM,KAAK,CAAC;AAAA,IAC9C;AACA,WAAO,CAAC;AAAA,EACV;AACA,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,CAAC,EAAE,MAAM,UAAU,MAAM,MAAM,KAAK,CAAC;AAAA,EAC9C;AACA,SAAO,gBAAgB,EAAE,MAAM,MAAM,MAAM,YAAY,MAAM,WAAW,CAAC;AAC3E;AAYO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AACF,GAGG;AAED,QAAM,eAAe,GAAG,MAAM,IAAI,KAAK,UAAU,WAAW,CAAC;AAG7D,YAAU,MAAM;AACd,QAAI,OAAO,aAAa,aAAa;AACnC;AAAA,IACF;AACA,UAAM,eAAoC,CAAC;AAC3C,gBAAY,QAAQ,CAAC,YAAY,UAAU;AACzC,YAAM,SAAS,GAAG,MAAM,IAAI,KAAK;AACjC,YAAM,WAAW,SAAS;AAAA,QACxB,gCAAgC,MAAM;AAAA,MACxC;AACA,UAAI,UAAU;AACZ;AAAA,MACF;AACA,YAAM,gBAAgB,SAAS,cAAc,QAAQ;AACrD,oBAAc,QAAQ,gBAAgB;AACtC,UAAI,WAAW,SAAS,YAAY;AAClC,sBAAc,MAAM,WAAW;AAC/B,sBAAc,QAAQ;AACtB,mBAAW,CAAC,eAAe,cAAc,KAAK,OAAO;AAAA,UACnD,WAAW,cAAc,CAAC;AAAA,QAC5B,GAAG;AACD,wBAAc,aAAa,eAAe,cAAc;AAAA,QAC1D;AAAA,MACF,OAAO;AACL,sBAAc,cAAc,WAAW;AAAA,MACzC;AACA,eAAS,KAAK,OAAO,aAAa;AAClC,mBAAa,KAAK,aAAa;AAAA,IACjC,CAAC;AAED,WAAO,MAAM;AAIX,iBAAW,QAAQ,cAAc;AAC/B,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAAA,EACF,GAAG,CAAC,YAAY,CAAC;AAEjB,SAAO;AACT;AAEA,SAAS,cAAc,EAAE,MAAM,GAAgC;AAC7D,QAAM,UAAU,WAAW;AAC3B,QAAM,kBAAkB,mBAAmB,KAAK;AAChD,QAAM,KAAK,SAAS,KAAK;AACzB,QAAM,aAAa,gBAAgB,KAAK,GAAG;AAG3C,YAAU,MAAM;AACd,mBAAe,EAAE,IAAI,MAAM,MAAM,MAAM,gBAAgB,CAAC;AACxD,WAAO,MAAM,iBAAiB,EAAE;AAAA,EAClC,GAAG,CAAC,IAAI,MAAM,MAAM,UAAU,CAAC;AAE/B,MAAI,CAAC,iBAAiB,EAAE,OAAO,SAAS,gBAAgB,CAAC,GAAG;AAC1D,WAAO;AAAA,EACT;AACA,SAAO,oBAAC,kBAAe,QAAQ,IAAI,aAAa,eAAe,KAAK,GAAG;AACzE;AAOO,SAAS,aAAa,EAAE,QAAQ,GAAoC;AAEzE,YAAU,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE7C,SACE,gCACG,kBAAQ,IAAI,CAAC,UACZ,oBAAC,iBAAoC,SAAjB,SAAS,KAAK,CAAiB,CACpD,GACH;AAEJ;",
+  "sourcesContent": ["\"use client\";\n\nimport type {\n  ConsentCategory,\n  ReploScriptEntry,\n  ScriptTagDescriptor,\n} from \"schemas/generated/consent\";\n\nimport { useEffect } from \"react\";\n\nimport { isConsentAllowed, useConsent } from \"./consent-store\";\nimport { injectScriptDescriptors } from \"./inject-script-descriptors\";\nimport { registerScript, unregisterScript } from \"./script-registration-store\";\nimport { buildScriptTags, defaultConsentFor } from \"./script-snippets\";\nimport { installConsentWindowApi } from \"./window-api\";\n\n/**\n * Stable identity for an entry, used as React key and DOM dedupe key. `snippet`\n * and `custom` entries key on their `id`; identifier providers on type+id.\n */\nfunction scriptId(entry: ReploScriptEntry): string {\n  if (entry.type === \"custom\") {\n    return `custom:${entry.id}`;\n  }\n  if (entry.type === \"snippet\") {\n    return `snippet:${entry.id}`;\n  }\n  return `${entry.type}:${entry.identifier}`;\n}\n\nfunction requiredConsentFor(entry: ReploScriptEntry): ConsentCategory[] {\n  if (entry.type === \"custom\" || entry.type === \"snippet\") {\n    return entry.requiredConsent;\n  }\n  return entry.requiredConsent ?? defaultConsentFor(entry.type);\n}\n\n/**\n * Resolves an entry to the concrete tags to inject. An identifier provider may\n * resolve to multiple tags (GA4 = external loader + inline config); a `snippet`\n * entry injects its pasted body inline; a `custom` entry is a single external\n * `src` or inline `body`.\n */\nfunction descriptorsFor(entry: ReploScriptEntry): ScriptTagDescriptor[] {\n  if (entry.type === \"custom\") {\n    if (entry.src) {\n      return [{ kind: \"external\", src: entry.src }];\n    }\n    if (entry.body) {\n      return [{ kind: \"inline\", body: entry.body }];\n    }\n    return [];\n  }\n  if (entry.type === \"snippet\") {\n    return [{ kind: \"inline\", body: entry.body, module: entry.module }];\n  }\n  return buildScriptTags({ type: entry.type, identifier: entry.identifier });\n}\n\n/**\n * Injects the resolved tags into `document.head` once a caller has decided\n * consent allows it. Reused both for author-managed `ReploScripts` entries and\n * for the implicit Replo first-party pixel.\n *\n * DOM insertion (not JSX) is required because inline `<script>` bodies set via\n * React's `dangerouslySetInnerHTML` never execute. Each node is tagged with\n * `data-replo-script-id` (plus a per-tag index) so re-renders and React Strict\n * Mode double-invokes do not double-inject.\n */\nexport function InjectedScript({\n  baseId,\n  descriptors,\n}: {\n  baseId: string;\n  descriptors: ScriptTagDescriptor[];\n}) {\n  // Re-inject only when the resolved tags actually change.\n  const injectionKey = `${baseId}|${JSON.stringify(descriptors)}`;\n\n  // eslint-disable-next-line replo/no-use-effect -- script injection is a DOM side effect that must run after mount and on consent changes\n  useEffect(() => {\n    if (typeof document === \"undefined\") {\n      return;\n    }\n    const createdNodes = injectScriptDescriptors({ baseId, descriptors });\n\n    return () => {\n      // Removing the node does not unload an already-loaded vendor (see the plan's\n      // revocation note); full teardown is a reload triggered by the banner. This\n      // cleanup keeps the DOM tidy and prevents duplicates across remounts.\n      for (const node of createdNodes) {\n        node.remove();\n      }\n    };\n  }, [injectionKey]);\n\n  return null;\n}\n\nfunction ManagedScript({ entry }: { entry: ReploScriptEntry }) {\n  const consent = useConsent();\n  const requiredConsent = requiredConsentFor(entry);\n  const id = scriptId(entry);\n  const consentKey = requiredConsent.join(\",\");\n\n  // eslint-disable-next-line replo/no-use-effect -- register/unregister with the singleton so the analytics provider can gate sinks by what's on the page\n  useEffect(() => {\n    registerScript({ id, type: entry.type, requiredConsent });\n    return () => unregisterScript(id);\n  }, [id, entry.type, consentKey]);\n\n  if (!isConsentAllowed({ state: consent, requiredConsent })) {\n    return null;\n  }\n  return <InjectedScript baseId={id} descriptors={descriptorsFor(entry)} />;\n}\n\n/**\n * The single registry component for all managed tracking scripts on the site.\n * Authored once in `app/layout.tsx`; the agent/miniapp only edit the `scripts`\n * array. Each entry registers itself and is gated + injected per consent.\n */\nexport function ReploScripts({ scripts }: { scripts: ReploScriptEntry[] }) {\n  // eslint-disable-next-line replo/no-use-effect -- install the window.Replo.customerPrivacy API + change event once the consent runtime mounts\n  useEffect(() => installConsentWindowApi(), []);\n\n  return (\n    <>\n      {scripts.map((entry) => (\n        <ManagedScript key={scriptId(entry)} entry={entry} />\n      ))}\n    </>\n  );\n}\n"],
+  "mappings": ";AAkHS,SAaL,UAbK;AA1GT,SAAS,iBAAiB;AAE1B,SAAS,kBAAkB,kBAAkB;AAC7C,SAAS,+BAA+B;AACxC,SAAS,gBAAgB,wBAAwB;AACjD,SAAS,iBAAiB,yBAAyB;AACnD,SAAS,+BAA+B;AAMxC,SAAS,SAAS,OAAiC;AACjD,MAAI,MAAM,SAAS,UAAU;AAC3B,WAAO,UAAU,MAAM,EAAE;AAAA,EAC3B;AACA,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,WAAW,MAAM,EAAE;AAAA,EAC5B;AACA,SAAO,GAAG,MAAM,IAAI,IAAI,MAAM,UAAU;AAC1C;AAEA,SAAS,mBAAmB,OAA4C;AACtE,MAAI,MAAM,SAAS,YAAY,MAAM,SAAS,WAAW;AACvD,WAAO,MAAM;AAAA,EACf;AACA,SAAO,MAAM,mBAAmB,kBAAkB,MAAM,IAAI;AAC9D;AAQA,SAAS,eAAe,OAAgD;AACtE,MAAI,MAAM,SAAS,UAAU;AAC3B,QAAI,MAAM,KAAK;AACb,aAAO,CAAC,EAAE,MAAM,YAAY,KAAK,MAAM,IAAI,CAAC;AAAA,IAC9C;AACA,QAAI,MAAM,MAAM;AACd,aAAO,CAAC,EAAE,MAAM,UAAU,MAAM,MAAM,KAAK,CAAC;AAAA,IAC9C;AACA,WAAO,CAAC;AAAA,EACV;AACA,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,CAAC,EAAE,MAAM,UAAU,MAAM,MAAM,MAAM,QAAQ,MAAM,OAAO,CAAC;AAAA,EACpE;AACA,SAAO,gBAAgB,EAAE,MAAM,MAAM,MAAM,YAAY,MAAM,WAAW,CAAC;AAC3E;AAYO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AACF,GAGG;AAED,QAAM,eAAe,GAAG,MAAM,IAAI,KAAK,UAAU,WAAW,CAAC;AAG7D,YAAU,MAAM;AACd,QAAI,OAAO,aAAa,aAAa;AACnC;AAAA,IACF;AACA,UAAM,eAAe,wBAAwB,EAAE,QAAQ,YAAY,CAAC;AAEpE,WAAO,MAAM;AAIX,iBAAW,QAAQ,cAAc;AAC/B,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAAA,EACF,GAAG,CAAC,YAAY,CAAC;AAEjB,SAAO;AACT;AAEA,SAAS,cAAc,EAAE,MAAM,GAAgC;AAC7D,QAAM,UAAU,WAAW;AAC3B,QAAM,kBAAkB,mBAAmB,KAAK;AAChD,QAAM,KAAK,SAAS,KAAK;AACzB,QAAM,aAAa,gBAAgB,KAAK,GAAG;AAG3C,YAAU,MAAM;AACd,mBAAe,EAAE,IAAI,MAAM,MAAM,MAAM,gBAAgB,CAAC;AACxD,WAAO,MAAM,iBAAiB,EAAE;AAAA,EAClC,GAAG,CAAC,IAAI,MAAM,MAAM,UAAU,CAAC;AAE/B,MAAI,CAAC,iBAAiB,EAAE,OAAO,SAAS,gBAAgB,CAAC,GAAG;AAC1D,WAAO;AAAA,EACT;AACA,SAAO,oBAAC,kBAAe,QAAQ,IAAI,aAAa,eAAe,KAAK,GAAG;AACzE;AAOO,SAAS,aAAa,EAAE,QAAQ,GAAoC;AAEzE,YAAU,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE7C,SACE,gCACG,kBAAQ,IAAI,CAAC,UACZ,oBAAC,iBAAoC,SAAjB,SAAS,KAAK,CAAiB,CACpD,GACH;AAEJ;",
   "names": []
 }

package/lib/buildMetadata.d.ts

@@ -0,0 +1,9 @@
+type BuildMetadata = {
+    packageName: string;
+    version: string;
+    branch: string | null;
+    commit: string | null;
+    builtAt: string | null;
+};
+export declare const BUILD_METADATA: BuildMetadata;
+export {};

package/lib/buildMetadata.js

@@ -0,0 +1,7 @@
+export const BUILD_METADATA = {
+  "packageName": "@replohq/sdk",
+  "version": "0.6.0",
+  "branch": "HEAD",
+  "commit": "bcdd1e929edca05c6245d0bc2af6978fc9e402e8",
+  "builtAt": "2026-08-19T16:52:57.734Z"
+};

package/lib/buildMetadata.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../lib/buildMetadata.ts"],
+  "sourcesContent": ["type BuildMetadata = {\n  packageName: string;\n  version: string;\n  branch: string | null;\n  commit: string | null;\n  builtAt: string | null;\n};\n\nexport const BUILD_METADATA: BuildMetadata = {\n  packageName: \"@replohq/sdk\",\n  version: \"0.0.0-dev\",\n  branch: null,\n  commit: null,\n  builtAt: null,\n};\n"],
+  "mappings": "AAQO,MAAM,iBAAgC;AAAA,EAC3C,aAAa;AAAA,EACb,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AACX;",
+  "names": []
+}

package/package.json

@@ -1,6 +1,13 @@
 {
   "name": "@replohq/sdk",
-  "version": "0.4.0",
+  "version": "0.6.0",
+  "reploBuild": {
+    "packageName": "@replohq/sdk",
+    "version": "0.6.0",
+    "branch": "HEAD",
+    "commit": "bcdd1e929edca05c6245d0bc2af6978fc9e402e8",
+    "builtAt": "2026-08-19T16:52:57.734Z"
+  },
   "description": "Replo SDK — cart, analytics, and data loaders for agent-built Next.js sites.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -66,6 +73,10 @@
       "types": "./hooks/use-formatted-price.d.ts",
       "default": "./hooks/use-formatted-price.js"
     },
+    "./lib/buildMetadata": {
+      "types": "./lib/buildMetadata.d.ts",
+      "default": "./lib/buildMetadata.js"
+    },
     "./analytics/analytics-provider": {
       "types": "./analytics/analytics-provider.d.ts",
       "default": "./analytics/analytics-provider.js"