@scalebun/web 1.0.0

package/dist/features/engage/shakeDetector.js

@@ -0,0 +1,105 @@
+/**
+ * W5.1 — shake-to-feedback detector (LAZY; installed only when a served campaign uses the
+ * `shake_device` trigger). Mirrors the native RN algorithm exactly so a shake campaign fires on
+ * web the same way it does on mobile: magnitude of TOTAL acceleration in g, threshold 2.3 g,
+ * 1500 ms cooldown. Browser-only (`devicemotion`) — zero third-party deps.
+ *
+ * iOS 13+ gates `devicemotion` behind `DeviceMotionEvent.requestPermission()`, which must be
+ * called from a user gesture — so passive zero-UI detection is impossible there. We arm a one-shot
+ * gesture listener and request on the first tap; the outcome is remembered for the session so a
+ * denial isn't re-prompted. Android/desktop need no permission (desktop simply never fires motion
+ * events → the whole thing is a silent no-op). Every failure path degrades to no-op, never throws.
+ */
+import { now } from '../../core';
+const SHAKE_THRESHOLD_G = 2.3; // total |a| in g — matches native (Android/iOS 2.3)
+const SHAKE_COOLDOWN_MS = 1500;
+const G = 9.80665; // m/s² per g; `devicemotion` reports m/s², native normalizes the same way
+const IOS_PERM_KEY = 'scalebun_shake_perm'; // session-scoped: 'granted' | 'denied'
+/** Install shake detection; returns a teardown removing every listener. Fail-soft no-op when
+ *  `devicemotion` is unavailable, permission is denied, or on desktop (no motion events arrive). */
+export function installShakeDetector(emit) {
+    if (typeof window === 'undefined' || typeof DeviceMotionEvent === 'undefined')
+        return () => { };
+    let lastShake = 0;
+    let listening = false;
+    let removeGesture;
+    const onMotion = (e) => {
+        const a = e.accelerationIncludingGravity;
+        if (!a)
+            return; // gyro-less device reports null here; fail-soft
+        const gx = (a.x ?? 0) / G;
+        const gy = (a.y ?? 0) / G;
+        const gz = (a.z ?? 0) / G;
+        if (Math.sqrt(gx * gx + gy * gy + gz * gz) < SHAKE_THRESHOLD_G)
+            return;
+        const t = now();
+        if (t - lastShake < SHAKE_COOLDOWN_MS)
+            return; // debounce a shake burst
+        lastShake = t;
+        try {
+            emit('shake');
+        }
+        catch {
+            /* never let a downstream listener throw kill capture */
+        }
+    };
+    const startListening = () => {
+        if (listening)
+            return;
+        listening = true;
+        window.addEventListener('devicemotion', onMotion);
+    };
+    const readPerm = () => {
+        try {
+            return sessionStorage.getItem(IOS_PERM_KEY);
+        }
+        catch {
+            return null;
+        }
+    };
+    const writePerm = (v) => {
+        try {
+            sessionStorage.setItem(IOS_PERM_KEY, v);
+        }
+        catch {
+            /* storage disabled — still works this install, just re-prompts next load */
+        }
+    };
+    const reqPerm = DeviceMotionEvent.requestPermission;
+    if (typeof reqPerm === 'function') {
+        // iOS 13+: needs a user gesture. Respect a prior denial this session; otherwise arm a one-shot
+        // gesture that requests permission (may resolve silently if already granted for the origin).
+        if (readPerm() === 'denied')
+            return () => { };
+        const onGesture = () => {
+            removeGesture?.();
+            reqPerm()
+                .then((state) => {
+                writePerm(state === 'granted' ? 'granted' : 'denied');
+                if (state === 'granted')
+                    startListening();
+            })
+                .catch(() => {
+                /* request failed — leave it unarmed, manual triggers remain the entry point */
+            });
+        };
+        window.addEventListener('click', onGesture);
+        window.addEventListener('touchend', onGesture);
+        removeGesture = () => {
+            window.removeEventListener('click', onGesture);
+            window.removeEventListener('touchend', onGesture);
+        };
+    }
+    else {
+        // Android/other: no permission gate — listen immediately (desktop never fires the event).
+        startListening();
+    }
+    return () => {
+        removeGesture?.();
+        removeGesture = undefined;
+        if (listening)
+            window.removeEventListener('devicemotion', onMotion);
+        listening = false;
+    };
+}
+//# sourceMappingURL=shakeDetector.js.map

package/dist/features/engage/shakeDetector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shakeDetector.js","sourceRoot":"","sources":["../../../src/features/engage/shakeDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AAEjC,MAAM,iBAAiB,GAAG,GAAG,CAAC,CAAC,oDAAoD;AACnF,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,0EAA0E;AAC7F,MAAM,YAAY,GAAG,qBAAqB,CAAC,CAAC,uCAAuC;AAQnF;oGACoG;AACpG,MAAM,UAAU,oBAAoB,CAAC,IAAU;IAC7C,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,iBAAiB,KAAK,WAAW;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAE/F,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,aAAuC,CAAC;IAE5C,MAAM,QAAQ,GAAG,CAAC,CAAoB,EAAE,EAAE;QACxC,MAAM,CAAC,GAAG,CAAC,CAAC,4BAA4B,CAAC;QACzC,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,gDAAgD;QAChE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,iBAAiB;YAAE,OAAO;QACvE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC,GAAG,SAAS,GAAG,iBAAiB;YAAE,OAAO,CAAC,yBAAyB;QACxE,SAAS,GAAG,CAAC,CAAC;QACd,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,GAAG,EAAE;QAC1B,IAAI,SAAS;YAAE,OAAO;QACtB,SAAS,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,GAAkB,EAAE;QACnC,IAAI,CAAC;YACH,OAAO,cAAc,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAI,iBAAsD,CAAC,iBAAiB,CAAC;IAC1F,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,+FAA+F;QAC/F,6FAA6F;QAC7F,IAAI,QAAQ,EAAE,KAAK,QAAQ;YAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,aAAa,EAAE,EAAE,CAAC;YAClB,OAAO,EAAE;iBACN,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBACd,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACtD,IAAI,KAAK,KAAK,SAAS;oBAAE,cAAc,EAAE,CAAC;YAC5C,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE;gBACV,+EAA+E;YACjF,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC/C,aAAa,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC/C,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpD,CAAC,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,0FAA0F;QAC1F,cAAc,EAAE,CAAC;IACnB,CAAC;IAED,OAAO,GAAG,EAAE;QACV,aAAa,EAAE,EAAE,CAAC;QAClB,aAAa,GAAG,SAAS,CAAC;QAC1B,IAAI,SAAS;YAAE,MAAM,CAAC,mBAAmB,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACpE,SAAS,GAAG,KAAK,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC"}

package/dist/features/engage/theme.d.ts

@@ -0,0 +1,129 @@
+/**
+ * ENGAGE THEME TOKENS — the web half of a contract mobile already owns.
+ *
+ * The RN SDK documents this on `InAppRenderSpec.style` (engageTypes.ts):
+ *
+ *   "Normalized theme token overrides. Keys (all optional): accent, cardBg, titleColor, bodyColor,
+ *    couponBg, couponFg, couponBorder, backdrop, ctaText. Unset tokens fall back to the
+ *    dashboard-matching light/dark defaults — this is the SINGLE design contract; the SDK never
+ *    hardcodes dashboard CSS per message."
+ *
+ * Web ignored it entirely: `SurveyWidget` hardcoded #fff / #111827 / #6b7280 / #d1d5db / #e5e7eb /
+ * #9ca3af / #ecfdf5 / #10b981 / #065f46, so every customer's web survey was the same grey-and-black
+ * card while the SAME campaign rendered branded on mobile. This module is the missing consumer.
+ *
+ * THREE RULES THAT SHAPE EVERYTHING HERE
+ *
+ * 1. **Token names are copied, never invented.** Renaming `accent` to `primary` on web would mean one
+ *    authored theme could no longer serve both platforms — which is the entire point. The mobile
+ *    contract is frozen; this file conforms to it.
+ *
+ * 2. **Unstyled must be byte-identical to before.** DEFAULTS_LIGHT below are literally the hex values
+ *    that were hardcoded in the widget. A campaign with no `style` renders exactly as it did, so this
+ *    change cannot regress an existing customer.
+ *
+ * 3. **Theme values are customer input rendered as CSS — the one real security surface in the
+ *    feature.** An unvalidated value can terminate a declaration and inject another (`red;
+ *    background:url(//evil)`), or exfiltrate via `url()`. So every value is matched against a strict
+ *    colour grammar and anything else is DROPPED (falling back to the default), never passed through.
+ *
+ * Zero third-party dependencies (sprint constraint C1) — pure string/number work.
+ */
+/** The token vocabulary, byte-for-byte the mobile contract's key list. */
+export declare const THEME_TOKENS: readonly ["accent", "cardBg", "titleColor", "bodyColor", "backdrop", "ctaText", "couponBg", "couponFg", "couponBorder"];
+export type ThemeToken = (typeof THEME_TOKENS)[number];
+export type EngageTheme = Partial<Record<ThemeToken, string>>;
+/**
+ * Defaults = the exact hex values the widget hardcoded before this module existed.
+ * Changing one of these is a visual regression for every unstyled campaign.
+ */
+export declare const DEFAULTS_LIGHT: Record<ThemeToken, string>;
+/** Dark counterparts. Only applied when the campaign asks for dark — never auto-detected, because a
+ *  host page's colour scheme is not the campaign author's decision. */
+export declare const DEFAULTS_DARK: Record<ThemeToken, string>;
+/**
+ * Derived tokens the widget needs but the contract doesn't name — muted text, borders, disabled
+ * states. Kept OUT of `THEME_TOKENS` on purpose: adding keys would be a contract change, and mobile
+ * would have to follow. These are computed locally from the named tokens instead.
+ */
+export interface DerivedTokens {
+    muted: string;
+    border: string;
+    disabledBg: string;
+    disabledFg: string;
+    fieldBg: string;
+}
+/** True when `value` is a colour we are willing to interpolate into a stylesheet. */
+export declare function isSafeColor(value: unknown): value is string;
+/**
+ * Keep only known token keys carrying a safe colour.
+ *
+ * ⚠️ Unknown keys are PRESERVED, not dropped, when `keepUnknown` is set — the authoring UI stores one
+ * theme object for both platforms, and web silently stripping a mobile-only token on round-trip would
+ * quietly delete a customer's mobile branding. Unknown keys are never rendered; they are just not
+ * destroyed.
+ */
+export declare function sanitizeTheme(input: unknown, opts?: {
+    keepUnknown?: boolean;
+}): EngageTheme;
+/** sRGB relative luminance (WCAG). Returns null when the colour isn't a parseable hex/rgb. */
+export declare function luminance(color: string): number | null;
+/**
+ * Readable foreground for a given background.
+ *
+ * A customer picking a pale accent would otherwise get white-on-pale CTA text — legible in the
+ * authoring preview at full size, unreadable on a phone. Computed rather than trusted: an author who
+ * sets `ctaText` explicitly still wins, but the DEFAULT is always readable.
+ */
+export declare function readableOn(background: string, prefer?: string): string;
+/**
+ * LAYOUT tokens, alongside the colour ones. Colour alone could not fix the thing authors actually
+ * complained about: multi-question surveys render stacked on one card with no visual break between
+ * questions, so they read as one run-on form regardless of palette.
+ *
+ * ENUMS, NOT FREE-FORM VALUES. These arrive over the wire from customer input exactly like the
+ * colours do, and the colours already go through a strict grammar for that reason (see rule 3 above).
+ * An enum keeps the injection surface closed by construction: an unrecognised value is dropped and
+ * the default applies, so there is no path from the wire to arbitrary CSS. Numeric padding/radius
+ * would have to be parsed, clamped and unit-suffixed to be equally safe, for no expressive gain.
+ *
+ * Every one is optional and every default reproduces today's rendering exactly — an untouched
+ * campaign must not shift by a pixel.
+ */
+export declare const APPEARANCE_TOKENS: {
+    /** Divider between stacked questions. `none` is the historical look. */
+    readonly separators: readonly ["none", "line", "card"];
+    /** Padding + gap scale, moved together so spacing stays proportional. */
+    readonly density: readonly ["compact", "cosy", "roomy"];
+    readonly radius: readonly ["sharp", "soft", "round"];
+    readonly width: readonly ["narrow", "standard", "wide"];
+    /** Web only. Mobile keeps its bottom sheet — a corner toast is not a phone pattern. */
+    readonly position: readonly ["bottom", "center", "corner"];
+};
+export type AppearanceKey = keyof typeof APPEARANCE_TOKENS;
+export type AppearanceValue<K extends AppearanceKey> = (typeof APPEARANCE_TOKENS)[K][number];
+export type EngageAppearance = {
+    [K in AppearanceKey]?: AppearanceValue<K>;
+};
+/** Defaults chosen to reproduce the pre-appearance rendering exactly. */
+export declare const APPEARANCE_DEFAULTS: Required<EngageAppearance>;
+/** Keep only recognised enum values; anything else falls back to the default. */
+export declare function sanitizeAppearance(input: unknown): EngageAppearance;
+export interface ResolvedTheme {
+    /** `--sb-*` declarations for the shadow root's :host block */
+    vars: string;
+    /** resolved values, for tests and for the authoring preview */
+    values: Record<string, string>;
+    /** resolved layout enums, applied as host data-attributes the stylesheet selects on */
+    appearance: Required<EngageAppearance>;
+}
+/**
+ * Resolve a campaign's theme into CSS custom properties.
+ *
+ * Everything the widget paints reads a `var(--sb-…)`, so a token that was dropped by validation falls
+ * back to the default automatically — there is no code path where an invalid value reaches the page.
+ */
+export declare function resolveTheme(style: unknown, opts?: {
+    dark?: boolean;
+}): ResolvedTheme;
+//# sourceMappingURL=theme.d.ts.map

package/dist/features/engage/theme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme.d.ts","sourceRoot":"","sources":["../../../src/features/engage/theme.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,0EAA0E;AAC1E,eAAO,MAAM,YAAY,yHAYf,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AACvD,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAUrD,CAAC;AAEF;uEACuE;AACvE,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAUpD,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAqCD,qFAAqF;AACrF,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAK3D;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,WAAW,CAa/F;AAID,8FAA8F;AAC9F,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQtD;AAgBD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAKtE;AAMD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iBAAiB;IAC5B,wEAAwE;;IAExE,yEAAyE;;;;IAIzE,uFAAuF;;CAE/E,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAC3D,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,aAAa,IAAI,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7F,MAAM,MAAM,gBAAgB,GAAG;KAAG,CAAC,IAAI,aAAa,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;CAAE,CAAC;AAE7E,yEAAyE;AACzE,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,gBAAgB,CAM1D,CAAC;AAWF,iFAAiF;AACjF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAWnE;AAED,MAAM,WAAW,aAAa;IAC5B,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,uFAAuF;IACvF,UAAU,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;CACxC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,aAAa,CA4BzF"}

package/dist/features/engage/theme.js

@@ -0,0 +1,270 @@
+/**
+ * ENGAGE THEME TOKENS — the web half of a contract mobile already owns.
+ *
+ * The RN SDK documents this on `InAppRenderSpec.style` (engageTypes.ts):
+ *
+ *   "Normalized theme token overrides. Keys (all optional): accent, cardBg, titleColor, bodyColor,
+ *    couponBg, couponFg, couponBorder, backdrop, ctaText. Unset tokens fall back to the
+ *    dashboard-matching light/dark defaults — this is the SINGLE design contract; the SDK never
+ *    hardcodes dashboard CSS per message."
+ *
+ * Web ignored it entirely: `SurveyWidget` hardcoded #fff / #111827 / #6b7280 / #d1d5db / #e5e7eb /
+ * #9ca3af / #ecfdf5 / #10b981 / #065f46, so every customer's web survey was the same grey-and-black
+ * card while the SAME campaign rendered branded on mobile. This module is the missing consumer.
+ *
+ * THREE RULES THAT SHAPE EVERYTHING HERE
+ *
+ * 1. **Token names are copied, never invented.** Renaming `accent` to `primary` on web would mean one
+ *    authored theme could no longer serve both platforms — which is the entire point. The mobile
+ *    contract is frozen; this file conforms to it.
+ *
+ * 2. **Unstyled must be byte-identical to before.** DEFAULTS_LIGHT below are literally the hex values
+ *    that were hardcoded in the widget. A campaign with no `style` renders exactly as it did, so this
+ *    change cannot regress an existing customer.
+ *
+ * 3. **Theme values are customer input rendered as CSS — the one real security surface in the
+ *    feature.** An unvalidated value can terminate a declaration and inject another (`red;
+ *    background:url(//evil)`), or exfiltrate via `url()`. So every value is matched against a strict
+ *    colour grammar and anything else is DROPPED (falling back to the default), never passed through.
+ *
+ * Zero third-party dependencies (sprint constraint C1) — pure string/number work.
+ */
+/** The token vocabulary, byte-for-byte the mobile contract's key list. */
+export const THEME_TOKENS = [
+    'accent',
+    'cardBg',
+    'titleColor',
+    'bodyColor',
+    'backdrop',
+    'ctaText',
+    // Unused by surveys, present so ONE authored theme object also serves in-app messages. Web must
+    // never strip a token it doesn't consume — see `sanitizeTheme`.
+    'couponBg',
+    'couponFg',
+    'couponBorder',
+];
+/**
+ * Defaults = the exact hex values the widget hardcoded before this module existed.
+ * Changing one of these is a visual regression for every unstyled campaign.
+ */
+export const DEFAULTS_LIGHT = {
+    accent: '#111827',
+    cardBg: '#ffffff',
+    titleColor: '#111827',
+    bodyColor: '#111827',
+    backdrop: 'rgba(0,0,0,.28)',
+    ctaText: '#ffffff',
+    couponBg: '#ecfdf5',
+    couponFg: '#065f46',
+    couponBorder: '#10b981',
+};
+/** Dark counterparts. Only applied when the campaign asks for dark — never auto-detected, because a
+ *  host page's colour scheme is not the campaign author's decision. */
+export const DEFAULTS_DARK = {
+    accent: '#8b7ff0',
+    cardBg: '#1b1922',
+    titleColor: '#edeaf2',
+    bodyColor: '#edeaf2',
+    backdrop: 'rgba(0,0,0,.55)',
+    ctaText: '#ffffff',
+    couponBg: '#12241d',
+    couponFg: '#7ee2bd',
+    couponBorder: '#00c48c',
+};
+const DERIVED_LIGHT = {
+    muted: '#6b7280',
+    border: '#d1d5db',
+    disabledBg: '#e5e7eb',
+    disabledFg: '#9ca3af',
+    fieldBg: '#ffffff',
+};
+const DERIVED_DARK = {
+    muted: '#9a95a6',
+    border: 'rgba(255,255,255,.16)',
+    disabledBg: '#2e2940',
+    disabledFg: '#6b6578',
+    fieldBg: '#262131',
+};
+// ── Validation — the security surface ────────────────────────────────────────
+/**
+ * A strict colour grammar. Deliberately an ALLOW-list of shapes rather than a deny-list of dangerous
+ * characters: a deny-list has to anticipate every escape, an allow-list only has to describe what a
+ * colour looks like.
+ *
+ * Accepts: #rgb, #rgba, #rrggbb, #rrggbbaa, rgb()/rgba(), hsl()/hsla(), and a conservative set of
+ * CSS named colours. Rejects everything else — notably anything containing `;`, `}`, `url(`, `expression(`
+ * or a comment sequence, which cannot appear in any of these shapes.
+ */
+const HEX = /^#(?:[0-9a-f]{3,4}|[0-9a-f]{6}|[0-9a-f]{8})$/i;
+const RGB = /^rgba?\(\s*\d{1,3}\s*,\s*\d{1,3}\s*,\s*\d{1,3}\s*(?:,\s*(?:0|1|0?\.\d+)\s*)?\)$/i;
+const HSL = /^hsla?\(\s*\d{1,3}(?:deg)?\s*,\s*\d{1,3}%\s*,\s*\d{1,3}%\s*(?:,\s*(?:0|1|0?\.\d+)\s*)?\)$/i;
+const NAMED = new Set([
+    'transparent', 'black', 'white', 'red', 'green', 'blue', 'yellow', 'orange', 'purple',
+    'gray', 'grey', 'navy', 'teal', 'olive', 'maroon', 'silver', 'lime', 'aqua', 'fuchsia',
+]);
+/** True when `value` is a colour we are willing to interpolate into a stylesheet. */
+export function isSafeColor(value) {
+    if (typeof value !== 'string')
+        return false;
+    const v = value.trim();
+    if (!v || v.length > 32)
+        return false; // no legitimate colour is this long
+    return HEX.test(v) || RGB.test(v) || HSL.test(v) || NAMED.has(v.toLowerCase());
+}
+/**
+ * Keep only known token keys carrying a safe colour.
+ *
+ * ⚠️ Unknown keys are PRESERVED, not dropped, when `keepUnknown` is set — the authoring UI stores one
+ * theme object for both platforms, and web silently stripping a mobile-only token on round-trip would
+ * quietly delete a customer's mobile branding. Unknown keys are never rendered; they are just not
+ * destroyed.
+ */
+export function sanitizeTheme(input, opts = {}) {
+    const out = {};
+    if (!input || typeof input !== 'object' || Array.isArray(input))
+        return out;
+    const src = input;
+    for (const key of Object.keys(src)) {
+        const known = THEME_TOKENS.includes(key);
+        if (!known) {
+            if (opts.keepUnknown && typeof src[key] === 'string')
+                out[key] = src[key];
+            continue;
+        }
+        if (isSafeColor(src[key]))
+            out[key] = src[key].trim();
+    }
+    return out;
+}
+// ── Contrast ─────────────────────────────────────────────────────────────────
+/** sRGB relative luminance (WCAG). Returns null when the colour isn't a parseable hex/rgb. */
+export function luminance(color) {
+    const rgb = toRgb(color);
+    if (!rgb)
+        return null;
+    const chan = (c) => {
+        const s = c / 255;
+        return s <= 0.03928 ? s / 12.92 : ((s + 0.055) / 1.055) ** 2.4;
+    };
+    return 0.2126 * chan(rgb[0]) + 0.7152 * chan(rgb[1]) + 0.0722 * chan(rgb[2]);
+}
+function toRgb(color) {
+    const v = color.trim();
+    if (HEX.test(v)) {
+        let h = v.slice(1);
+        if (h.length === 3 || h.length === 4)
+            h = h.slice(0, 3).split('').map((c) => c + c).join('');
+        if (h.length >= 6) {
+            return [parseInt(h.slice(0, 2), 16), parseInt(h.slice(2, 4), 16), parseInt(h.slice(4, 6), 16)];
+        }
+        return null;
+    }
+    const m = /^rgba?\(\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(\d{1,3})/i.exec(v);
+    return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : null;
+}
+/**
+ * Readable foreground for a given background.
+ *
+ * A customer picking a pale accent would otherwise get white-on-pale CTA text — legible in the
+ * authoring preview at full size, unreadable on a phone. Computed rather than trusted: an author who
+ * sets `ctaText` explicitly still wins, but the DEFAULT is always readable.
+ */
+export function readableOn(background, prefer) {
+    if (prefer && isSafeColor(prefer))
+        return prefer;
+    const l = luminance(background);
+    if (l == null)
+        return '#ffffff';
+    return l > 0.55 ? '#111827' : '#ffffff';
+}
+// ── CSS custom properties ────────────────────────────────────────────────────
+// ── Appearance (layout) tokens ───────────────────────────────────────────────
+/**
+ * LAYOUT tokens, alongside the colour ones. Colour alone could not fix the thing authors actually
+ * complained about: multi-question surveys render stacked on one card with no visual break between
+ * questions, so they read as one run-on form regardless of palette.
+ *
+ * ENUMS, NOT FREE-FORM VALUES. These arrive over the wire from customer input exactly like the
+ * colours do, and the colours already go through a strict grammar for that reason (see rule 3 above).
+ * An enum keeps the injection surface closed by construction: an unrecognised value is dropped and
+ * the default applies, so there is no path from the wire to arbitrary CSS. Numeric padding/radius
+ * would have to be parsed, clamped and unit-suffixed to be equally safe, for no expressive gain.
+ *
+ * Every one is optional and every default reproduces today's rendering exactly — an untouched
+ * campaign must not shift by a pixel.
+ */
+export const APPEARANCE_TOKENS = {
+    /** Divider between stacked questions. `none` is the historical look. */
+    separators: ['none', 'line', 'card'],
+    /** Padding + gap scale, moved together so spacing stays proportional. */
+    density: ['compact', 'cosy', 'roomy'],
+    radius: ['sharp', 'soft', 'round'],
+    width: ['narrow', 'standard', 'wide'],
+    /** Web only. Mobile keeps its bottom sheet — a corner toast is not a phone pattern. */
+    position: ['bottom', 'center', 'corner'],
+};
+/** Defaults chosen to reproduce the pre-appearance rendering exactly. */
+export const APPEARANCE_DEFAULTS = {
+    separators: 'none',
+    density: 'cosy',
+    radius: 'soft',
+    width: 'standard',
+    position: 'bottom',
+};
+/** The measurements each enum resolves to. Kept here so the widget holds no magic numbers. */
+const DENSITY_SCALE = {
+    compact: { pad: '14px', gap: '9px', qGap: '10px' },
+    cosy: { pad: '20px', gap: '14px', qGap: '14px' },
+    roomy: { pad: '26px', gap: '18px', qGap: '22px' },
+};
+const RADIUS_SCALE = { sharp: '4px', soft: '16px', round: '26px' };
+const WIDTH_SCALE = { narrow: '340px', standard: '420px', wide: '540px' };
+/** Keep only recognised enum values; anything else falls back to the default. */
+export function sanitizeAppearance(input) {
+    const out = {};
+    if (!input || typeof input !== 'object' || Array.isArray(input))
+        return out;
+    const src = input;
+    for (const key of Object.keys(APPEARANCE_TOKENS)) {
+        const v = src[key];
+        if (typeof v === 'string' && APPEARANCE_TOKENS[key].includes(v)) {
+            out[key] = v;
+        }
+    }
+    return out;
+}
+/**
+ * Resolve a campaign's theme into CSS custom properties.
+ *
+ * Everything the widget paints reads a `var(--sb-…)`, so a token that was dropped by validation falls
+ * back to the default automatically — there is no code path where an invalid value reaches the page.
+ */
+export function resolveTheme(style, opts = {}) {
+    const base = opts.dark ? DEFAULTS_DARK : DEFAULTS_LIGHT;
+    const derived = opts.dark ? DERIVED_DARK : DERIVED_LIGHT;
+    const theme = sanitizeTheme(style);
+    const values = {};
+    for (const token of THEME_TOKENS)
+        values[token] = theme[token] ?? base[token];
+    // Read from the resolved local rather than back out of the record — under
+    // `noUncheckedIndexedAccess` an index read is `string | undefined`, and the accent is known here.
+    const accent = theme.accent ?? base.accent;
+    // CTA text is computed from the resolved accent unless the author set it explicitly.
+    values.ctaText = readableOn(accent, theme.ctaText);
+    for (const [k, v] of Object.entries(derived))
+        values[k] = v;
+    // Layout enums resolve to measurements published as custom properties too, so the widget's
+    // stylesheet reads `var(--sb-pad)` rather than branching on a class for every combination.
+    const appearance = { ...APPEARANCE_DEFAULTS, ...sanitizeAppearance(style) };
+    const d = DENSITY_SCALE[appearance.density];
+    values.pad = d.pad;
+    values.gap = d.gap;
+    values.qGap = d.qGap;
+    values.radius = RADIUS_SCALE[appearance.radius];
+    values.maxWidth = WIDTH_SCALE[appearance.width];
+    const vars = Object.entries(values)
+        .map(([k, v]) => `--sb-${k}:${v}`)
+        .join(';');
+    return { vars, values, appearance };
+}
+//# sourceMappingURL=theme.js.map

package/dist/features/engage/theme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme.js","sourceRoot":"","sources":["../../../src/features/engage/theme.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,UAAU;IACV,SAAS;IACT,gGAAgG;IAChG,gEAAgE;IAChE,UAAU;IACV,UAAU;IACV,cAAc;CACN,CAAC;AAKX;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAA+B;IACxD,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,SAAS;IACjB,UAAU,EAAE,SAAS;IACrB,SAAS,EAAE,SAAS;IACpB,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,YAAY,EAAE,SAAS;CACxB,CAAC;AAEF;uEACuE;AACvE,MAAM,CAAC,MAAM,aAAa,GAA+B;IACvD,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,SAAS;IACjB,UAAU,EAAE,SAAS;IACrB,SAAS,EAAE,SAAS;IACpB,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,YAAY,EAAE,SAAS;CACxB,CAAC;AAeF,MAAM,aAAa,GAAkB;IACnC,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;IACjB,UAAU,EAAE,SAAS;IACrB,UAAU,EAAE,SAAS;IACrB,OAAO,EAAE,SAAS;CACnB,CAAC;AAEF,MAAM,YAAY,GAAkB;IAClC,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,uBAAuB;IAC/B,UAAU,EAAE,SAAS;IACrB,UAAU,EAAE,SAAS;IACrB,OAAO,EAAE,SAAS;CACnB,CAAC;AAEF,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,GAAG,GAAG,+CAA+C,CAAC;AAC5D,MAAM,GAAG,GAAG,kFAAkF,CAAC;AAC/F,MAAM,GAAG,GAAG,4FAA4F,CAAC;AACzG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC;IACpB,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACrF,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS;CACvF,CAAC,CAAC;AAEH,qFAAqF;AACrF,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC,CAAC,oCAAoC;IAC3E,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACjF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,OAAkC,EAAE;IAChF,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAC5E,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAI,YAAkC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,IAAI,CAAC,WAAW,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ;gBAAG,GAA8B,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAW,CAAC;YAChH,SAAS;QACX,CAAC;QACD,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAE,GAAG,CAAC,GAAiB,CAAC,GAAI,GAAG,CAAC,GAAG,CAAY,CAAC,IAAI,EAAE,CAAC;IAClF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAEhF,8FAA8F;AAC9F,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;QAClB,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC;IACjE,CAAC,CAAC;IACF,OAAO,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAChB,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7F,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAClB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAG,uDAAuD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,UAAkB,EAAE,MAAe;IAC5D,IAAI,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACjD,MAAM,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IAChC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED,gFAAgF;AAEhF,gFAAgF;AAEhF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,wEAAwE;IACxE,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;IACpC,yEAAyE;IACzE,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC;IACrC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;IAClC,KAAK,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC;IACrC,uFAAuF;IACvF,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;CAChC,CAAC;AAMX,yEAAyE;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAA+B;IAC7D,UAAU,EAAE,MAAM;IAClB,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,UAAU;IACjB,QAAQ,EAAE,QAAQ;CACnB,CAAC;AAEF,8FAA8F;AAC9F,MAAM,aAAa,GAAG;IACpB,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;IAClD,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;IAChD,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;CACzC,CAAC;AACX,MAAM,YAAY,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAW,CAAC;AAC5E,MAAM,WAAW,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAW,CAAC;AAEnF,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAC5E,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAoB,EAAE,CAAC;QACpE,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAK,iBAAiB,CAAC,GAAG,CAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,GAA8B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAWD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,OAA2B,EAAE;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;IACzD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAEnC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,YAAY;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9E,0EAA0E;IAC1E,kGAAkG;IAClG,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAC3C,qFAAqF;IACrF,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAE5D,2FAA2F;IAC3F,2FAA2F;IAC3F,MAAM,UAAU,GAAG,EAAE,GAAG,mBAAmB,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5E,MAAM,CAAC,GAAG,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;IACnB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;IACnB,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACrB,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAEhD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;SACjC,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACtC,CAAC"}

package/dist/features/engage/throttle.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Engage frequency-capping — pure decision + restart-surviving state (localStorage). Mirrors the RN
+ * EngageThrottleStore. The SERVER applies samplePct/platform/version; the SDK enforces the rules the
+ * server does NOT track: showOnce · cooldownHours · maxImpressions — all REVISION-SCOPED (an author
+ * editing the campaign bumps `revision`, which invalidates the old counters so the new design shows).
+ */
+import type { Throttle } from './types';
+/** Anything frequency-capped (surveys + in-app messages both satisfy this). */
+export interface ThrottleTarget {
+    id: string;
+    throttle?: Throttle;
+    revision?: string;
+}
+export interface ThrottleState {
+    impressions: number;
+    lastShownAt: number;
+    completed: boolean;
+    revision?: string;
+}
+export declare function readState(id: string): ThrottleState;
+/** Can this campaign be shown now? (showOnce / maxImpressions / cooldownHours, revision-scoped.) */
+export declare function passesThrottle(c: ThrottleTarget, now: number): boolean;
+/** Record an impression (bumps count + last-shown; resets counters if the revision changed). */
+export declare function recordShown(c: ThrottleTarget, now: number): void;
+/** Record a completed response — hard stop for showOnce. */
+export declare function recordCompleted(c: ThrottleTarget): void;
+export declare function hasTestSeen(testRunId: string): boolean;
+export declare function markTestSeen(testRunId: string): void;
+/** E2 — dev/QA reset: wipe all on-device engage state (throttle counters, session counter, test-seen). */
+export declare function clearEngageState(): void;
+//# sourceMappingURL=throttle.d.ts.map

package/dist/features/engage/throttle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"throttle.d.ts","sourceRoot":"","sources":["../../../src/features/engage/throttle.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAaD,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,CAgBnD;AAmBD,oGAAoG;AACpG,wBAAgB,cAAc,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAQtE;AAED,gGAAgG;AAChG,wBAAgB,WAAW,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAQhE;AAED,4DAA4D;AAC5D,wBAAgB,eAAe,CAAC,CAAC,EAAE,cAAc,GAAG,IAAI,CAGvD;AAMD,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAStD;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAYpD;AAED,0GAA0G;AAC1G,wBAAgB,gBAAgB,IAAI,IAAI,CAavC"}