@sagepilot-ai/web-events-addon 0.2.5 → 0.2.6

package/README.md

@@ -91,9 +91,11 @@ Records retain event ID, occurrence time, workspace/registered installation, ori
 
 Settings → SDK publishes a text-only popup template independently from mapping versions. The installed runtime renders the published revision inside a shadow DOM, with exact page paths, delay/scroll conditions, frequency limits, required fields and keyboard dismissal/focus management. Submitting the form sets the existing contact endpoint's `marketing_consent` field to `true`. The renderer and dashboard preview have no consent checkbox or label. Drafts never render. Disabled publication removes an open popup after refresh. Native app registrations do not render website popups.
 
-A contact-only form saves self-reported details on a new lead and adopts its signed session. Earlier events retain their original credentials and resolve to the lead through the browser link. When email verification is enabled, the SDK adopts a customer session after a successful challenge. Phone numbers remain unverified. Form values and verification codes stay on the identity endpoints. Popup lifecycle observations obey collection permission.
+A contact-only form requires a phone number and can collect an optional email. Platform API resolves a compatible phone match first, then tries a unique email match. It creates a customer when neither matches and saves the form contact as unverified. Earlier events retain their original capture owner and resolve through the browser link. When email verification is enabled, the email field is required and the link is made after the code succeeds.
 
-The popup handles submission/verification itself. Host-owned forms can use `submitContact({submission_id,popup_revision,name?,email?,phone?,marketing_consent})` and `verifyContact(challengeId,code)`. `logout()` immediately pauses capture and cancels pending uploads before revoking the API grant and establishing a fresh anonymous owner. Queued events retain their original ownership. The collector discards any records whose credentials the logout revoked. Existing signed ingress credentials expire within 15 minutes.
+With a compatible Platform API, a successful form submission sends one `popup_submitted` event through Event Handler even when storefront analytics is off. Popup impressions, dismissals and automatic events still follow collection permission. Form values and codes stay off browser observations. FJE adds the selected customer's contact details and verification flags to attributed event history.
+
+The popup handles submission/verification itself. Host-owned forms can use `submitContact({submission_id,popup_revision,phone,name?,email?,marketing_consent})` and `verifyContact(challengeId,code)`. `logout()` immediately pauses capture and cancels pending uploads before revoking the API grant and establishing a fresh anonymous owner. Queued events retain their original ownership. The collector discards any records whose credentials the logout revoked. Existing signed ingress credentials expire within 15 minutes.
 
 - At most 128 pending route/click/network emissions per collector, and 128 capture writes / 512 KiB of serialized handoff evidence.
 - The journal holds up to 8,192 records or 8 MiB, whichever comes first. It evicts oldest records at capacity. The 24-hour local expiry fits the server's existing offline renewal window.

package/dist/index.cjs

@@ -237,18 +237,19 @@ var SagepilotInstallationClient = class {
     if (new TextEncoder().encode(body).byteLength > 128 * 1024) throw new Error("SDK batch exceeds the upload limit.");
     return validateSagepilotInstallationReceipt(await this.request(auth.url, { method: "POST", headers: auth.headers, body }), observations.map((item) => item.event_id));
   }
-  /** Submits contact and adopts only a scoped lead session returned by the server. */
+  /** Submits contact and adopts only a scoped customer session returned by the server. */
   async submitContact(input) {
     if (!UUID.test(input.submission_id) || !Number.isSafeInteger(input.popup_revision) || input.popup_revision < 1 || typeof input.marketing_consent !== "boolean") throw new Error("Invalid popup submission.");
     if (this.transitioning) throw new Error("An SDK identity operation is already running.");
     this.transitioning = true;
     const generation = this.generation, prior = this.current;
     try {
-      const result = await this.authenticated("/contact", input);
+      const body = prior?.popup_submission_events === true ? { ...input, server_submission_event: true } : input;
+      const result = await this.authenticated("/contact", body);
       if (!result || !["recorded", "verification_required"].includes(result.status) || result.status === "verification_required" && (!result.challenge_id || !UUID.test(result.challenge_id) || !Number.isFinite(Date.parse(result.expires_at ?? "")))) throw new Error("Invalid popup submission response.");
       const { session, ...acknowledgement } = result;
       if (session != null) {
-        if (result.status !== "recorded" || prior?.customer_id !== null) throw new Error("Invalid popup lead session.");
+        if (result.status !== "recorded" || prior?.customer_id !== null) throw new Error("Invalid popup customer session.");
         await this.adoptTransition(session, prior, generation, true);
       }
       return acknowledgement;
@@ -394,7 +395,7 @@ function createSagepilotInstallationClient(options) {
 
 // package.json
 var name = "@sagepilot-ai/web-events-addon";
-var version = "0.2.5";
+var version = "0.2.6";
 
 // src/projection.ts
 var sensitive = /password|passwd|secret|token|authorization|cookie|session|email|phone|contact|address|card|payment|cvv|ssn|dob|birth|customer|user|account|person|profile|name|description|message|content|text|search|query/i;
@@ -2946,12 +2947,12 @@ function createSagepilotWebEvents(options) {
       }
     },
     flush,
-    /** Keeps contact data on the identity endpoint and fences capture while a new lead session is adopted. */
+    /** Keeps contact on the identity endpoint and fences capture while adopting the customer. */
     async submitContact(input) {
       const session = client.session();
       const result = session?.popup?.verification === "none" && session.customer_id === null ? await changeIdentity(() => client.submitContact(input)) : await client.submitContact(input);
       if (result.status === "recorded") {
-        emitPopup("popup_submitted");
+        if (result.popup_submission_recorded !== true) emitPopup("popup_submitted");
         await completeVisitor(session?.anonymous_id);
       }
       return result;
@@ -2959,8 +2960,8 @@ function createSagepilotWebEvents(options) {
     /** Verifies proof behind a capture fence; buffered anonymous observations remain anonymous. */
     async verifyContact(challengeId, code) {
       const anonymousId = client.session()?.anonymous_id;
-      await changeIdentity(() => client.verifyContact(challengeId, code));
-      emitPopup("popup_submitted");
+      const session = await changeIdentity(() => client.verifyContact(challengeId, code));
+      if (session.popup_submission_recorded !== true) emitPopup("popup_submitted");
       await completeVisitor(anonymousId);
     },
     /** Applies an explicit logout boundary without relabeling earlier observations. */