@scalebun/web 1.0.0

package/dist/browser.js

@@ -0,0 +1,81 @@
+/**
+ * Browser global entry — the no-build install target.
+ *
+ * esbuild bundles this as an IIFE (see scripts/build-browser.mjs) so a plain
+ *   <script src="https://cdn…/scalebun.min.js"></script>
+ * exposes `window.ScaleBun` and `ScaleBun.init({...})` works with NO bundler. It is the SAME facade as
+ * the npm/ESM build — one runtime, no fork.
+ *
+ * IMPORTANT: this module is NOT imported by src/index.ts, so it never enters the eager-core bundle the
+ * `size:check` gate measures. The 30 KB ESM gate is unaffected by anything here.
+ *
+ * Two no-build install shapes are supported:
+ *
+ *  1. ASYNC LOADER SNIPPET (recommended) — an inline stub queues early calls, then loads this bundle:
+ *       <script>
+ *         !function(w,d){w.ScaleBun=w.ScaleBun||{q:[]};
+ *           ['init','track','identify','trackPurchase','setConsent','reset','register','group','alias']
+ *             .forEach(function(m){w.ScaleBun[m]=w.ScaleBun[m]||function(){w.ScaleBun.q.push([m,arguments]);};});
+ *           var s=d.createElement('script');s.async=true;
+ *           s.src='https://cdn.jsdelivr.net/npm/@scalebun/web@1/dist/scalebun.min.js';
+ *           d.head.appendChild(s);}(window,document);
+ *         ScaleBun.init({clientKey:'…',apiBaseUrl:'…'});
+ *       </script>
+ *     On load we replace the stub, replay `ScaleBun.q` in order — no race, no lost calls.
+ *
+ *  2. DECLARATIVE TAG (CSP-clean, zero inline JS) — config via data-* on the tag itself:
+ *       <script async src="…/scalebun.min.js" data-client-key="…" data-api-base-url="…"></script>
+ *     We read the loading script's dataset and auto-init.
+ */
+import { ScaleBun } from './public/ScaleBunFacade';
+import { setNonce } from './core';
+/**
+ * Install the real facade as `window.ScaleBun`: (1) drain any queued calls the loader stub captured
+ * before this bundle loaded, then (2) auto-init from the loading `<script>`'s data-* attributes.
+ * Exported for unit tests; the module runs it once on load below.
+ */
+export function installBrowserGlobal(win, currentScript) {
+    const existing = win.ScaleBun;
+    win.ScaleBun = ScaleBun;
+    // (1) Replay the pre-load queue in order — generic over any facade method.
+    let queuedInit = false;
+    if (existing && Array.isArray(existing.q)) {
+        for (const entry of existing.q) {
+            const [method, args] = entry;
+            if (method === 'init')
+                queuedInit = true;
+            const fn = ScaleBun[method];
+            if (typeof fn === 'function') {
+                // `args` is array-LIKE: a real array (GTM createQueue pushes `['init', [cfg]]`) or an
+                // `arguments` object (the inline snippet pushes `[m, arguments]`). Normalize both.
+                const argv = args ? Array.prototype.slice.call(args) : [];
+                try {
+                    fn.apply(ScaleBun, argv);
+                }
+                catch {
+                    /* one bad queued call must never break the rest of the drain */
+                }
+            }
+        }
+    }
+    // (2) Declarative auto-init (skipped if init already came through the queue). Needs both required
+    // fields; extra data-* map to optional config.
+    const ds = currentScript?.dataset;
+    if (!queuedInit && ds?.clientKey && ds?.apiBaseUrl) {
+        const cfg = { clientKey: ds.clientKey, apiBaseUrl: ds.apiBaseUrl };
+        if (ds.environment)
+            cfg.environment = ds.environment;
+        if (ds.autocapture != null)
+            cfg.autocapture = ds.autocapture !== 'false';
+        void ScaleBun.init(cfg);
+    }
+}
+if (typeof window !== 'undefined') {
+    const currentScript = typeof document !== 'undefined' ? document.currentScript : null;
+    // CSP: auto-detect the nonce from the SDK's own <script> tag (script-tag install). An explicit
+    // init({ csp: { nonce } }) still wins — it runs setNonce() afterwards and only overrides when set.
+    setNonce(currentScript?.nonce);
+    installBrowserGlobal(window, currentScript);
+}
+export { ScaleBun as default, ScaleBun };
+//# sourceMappingURL=browser.js.map

package/dist/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAelC;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAkD,EAClD,aAAgD;IAEhD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAoC,CAAC;IAC1D,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAExB,2EAA2E;IAC3E,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;YAC7B,IAAI,MAAM,KAAK,MAAM;gBAAE,UAAU,GAAG,IAAI,CAAC;YACzC,MAAM,EAAE,GAAI,QAA+C,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;gBAC7B,sFAAsF;gBACtF,mFAAmF;gBACnF,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,IAAI,CAAC;oBACF,EAAmC,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAC7D,CAAC;gBAAC,MAAM,CAAC;oBACP,gEAAgE;gBAClE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,kGAAkG;IAClG,+CAA+C;IAC/C,MAAM,EAAE,GAAG,aAAa,EAAE,OAAO,CAAC;IAClC,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,SAAS,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC;QACnD,MAAM,GAAG,GAAe,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC;QAC/E,IAAI,EAAE,CAAC,WAAW;YAAE,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC;QACrD,IAAI,EAAE,CAAC,WAAW,IAAI,IAAI;YAAE,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC,WAAW,KAAK,OAAO,CAAC;QACzE,KAAK,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;IAClC,MAAM,aAAa,GAAG,OAAO,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,+FAA+F;IAC/F,mGAAmG;IACnG,QAAQ,CAAE,aAA2C,EAAE,KAAK,CAAC,CAAC;IAC9D,oBAAoB,CAClB,MAAkE,EAClE,aAAkD,CACnD,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,QAAQ,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC"}

package/dist/config/schema.d.ts

@@ -0,0 +1,108 @@
+/**
+ * config/schema — runtime config validation + defaults (mirrors RN core/config/schema).
+ * Public input types live in @scalebun/sdk-contracts; this produces the resolved internal config.
+ */
+import type { ScaleBunInitConfig } from '@scalebun/sdk-contracts';
+export interface ResolvedConfig {
+    clientKey: string;
+    apiBaseUrl: string;
+    environment?: string;
+    release?: string;
+    appVersion?: string;
+    flushIntervalMs: number;
+    /** Inactivity after which the next page load starts a NEW session. Default 30 min. */
+    sessionTimeoutMs?: number;
+    /** Absolute cap on a single session, so a permanently-open tab cannot report one endless
+     *  session. Default 24 h. */
+    sessionMaxDurationMs?: number;
+    maxBatchSize: number;
+    maxQueueSize: number;
+    /** Raw replay sampling config — defaults/clamping are applied lazily in `decideSampling` (keeps
+     *  the resolution logic out of the core bundle; undefined = the 'sampled' @ rate-1 default). */
+    replay: ScaleBunInitConfig['replay'];
+    /** Opt-in: capture <canvas> pixels in replay (off by default — pixels can't be masked). */
+    replayCanvas: boolean;
+    /** W1a — HMAC-sign the session/replay batches too (analytics lane always signs). Off by default:
+     *  signing the (often multi-MB) replay uploads re-enables server-side rawBody double-buffering. */
+    signSessionLane: boolean;
+    /** Origin allowlist for cross-origin replay stitching (F-IFR P2). Default []. */
+    replayFrameOrigins: string[];
+    /** Error capture options — passthrough from cfg.errors; defaults resolved in ErrorsFeature. */
+    errors: ScaleBunInitConfig['errors'];
+    /** Network capture options — passthrough from cfg.network; defaults resolved in NetworkFeature. */
+    network: ScaleBunInitConfig['network'];
+    /** Performance/RUM options — passthrough from cfg.performance; defaults resolved in PerformanceFeature. */
+    performance: ScaleBunInitConfig['performance'];
+    /** Product-analytics options (tracking plan) — passthrough; read by AnalyticsFeature. */
+    analytics: ScaleBunInitConfig['analytics'];
+    /** F3 — flags/config options (bootstrap seed) — passthrough; read by ConfigFeature. */
+    flags: ScaleBunInitConfig['flags'];
+    /** Autocapture DOM interactions as analytics events (on by default; text is masked). */
+    autocapture: boolean;
+    /** Inject a W3C traceparent into outbound requests (FE→BE correlation). Default on (same-origin). */
+    tracePropagation: boolean;
+    /** Extra cross-origin origins to propagate the traceparent to (must CORS-allow it). Default []. */
+    tracePropagationOrigins: string[];
+    debug: boolean;
+    features: {
+        errors: boolean;
+        network: boolean;
+        console: boolean;
+        webVitals: boolean;
+        performance: boolean;
+        journey: boolean;
+        replay: boolean;
+        bugReport: boolean;
+        crash: boolean;
+        config: boolean;
+        engage: boolean;
+        analytics: boolean;
+        webPerf: boolean;
+        profiler: boolean;
+        watchdog: boolean;
+        inbox: boolean;
+        inapp2: boolean;
+    };
+    /** W5.2 — Resource Watchdog options passthrough (defaults resolved in WatchdogFeature). */
+    watchdog: ScaleBunInitConfig['watchdog'];
+    /** #25 P2 — exit-intent thresholds passthrough; defaults resolved in the engine (REVERSAL_DEFAULTS).
+     *  Host-tunable so a site can retune from its own data without waiting for an SDK release. */
+    exitIntent: ScaleBunInitConfig['exitIntent'];
+    privacy: {
+        captureNetworkBodies: boolean;
+        denylist: string[];
+        maskSelectors: string[];
+        /** Mask all replay text. Default FALSE — visible text is captured so replays are readable.
+         *  Set true to mask every text node. Form input values have their own flag (maskInputs). */
+        maskReplayText: boolean;
+        /** Mask form input values in replay. Defaults to FOLLOW maskReplayText (one flag governs text +
+         *  inputs). Set explicitly to decouple. Passwords are always blanked regardless. */
+        maskInputs: boolean;
+        /** Honor GPC / Do-Not-Track by not recording replay for opted-out users. Default false. */
+        respectDnt: boolean;
+        /** Mask the text LABEL on interaction events (USER_ACTION.label + $autocapture props.text).
+         *  Default FALSE — the real label is sent, so clicks group per element instead of collapsing
+         *  into one row. Was unconditional masking before. */
+        maskEventText: boolean;
+    };
+    consent: {
+        /** When true, capture + egress are deferred until consent is granted. */
+        required: boolean;
+        /** Initial consent state (host may pre-resolve via SSR/cookie). */
+        initial: 'granted' | 'denied' | 'unknown';
+    };
+    bugReport: {
+        /** Mount the floating launcher widget. */
+        launcher: boolean;
+        position: 'bottom-right' | 'bottom-left' | 'top-right' | 'top-left';
+        label: string;
+    };
+    /**
+     * Host resolver for the 8 gamified in-app formats. Passed through verbatim and NEVER given a
+     * default — a default here would be the SDK choosing a prize, which is the one thing it must not
+     * do. Absent → those formats render their unavailable state.
+     */
+    onInAppGameRequest?: (request: unknown) => Promise<unknown>;
+}
+export declare function resolveConfig(cfg: ScaleBunInitConfig): ResolvedConfig;
+//# sourceMappingURL=schema.d.ts.map

package/dist/config/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,sFAAsF;IACtF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;iCAC6B;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB;oGACgG;IAChG,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACrC,2FAA2F;IAC3F,YAAY,EAAE,OAAO,CAAC;IACtB;uGACmG;IACnG,eAAe,EAAE,OAAO,CAAC;IACzB,iFAAiF;IACjF,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,+FAA+F;IAC/F,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACrC,mGAAmG;IACnG,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACvC,2GAA2G;IAC3G,WAAW,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAC/C,yFAAyF;IACzF,SAAS,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC3C,uFAAuF;IACvF,KAAK,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACnC,wFAAwF;IACxF,WAAW,EAAE,OAAO,CAAC;IACrB,qGAAqG;IACrG,gBAAgB,EAAE,OAAO,CAAC;IAC1B,mGAAmG;IACnG,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE;QACR,MAAM,EAAE,OAAO,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,EAAE,OAAO,CAAC;QACnB,WAAW,EAAE,OAAO,CAAC;QACrB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,OAAO,CAAC;QAChB,SAAS,EAAE,OAAO,CAAC;QACnB,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,EAAE,OAAO,CAAC;QAChB,SAAS,EAAE,OAAO,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,2FAA2F;IAC3F,QAAQ,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACzC;kGAC8F;IAC9F,UAAU,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAC7C,OAAO,EAAE;QACP,oBAAoB,EAAE,OAAO,CAAC;QAC9B,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB;oGAC4F;QAC5F,cAAc,EAAE,OAAO,CAAC;QACxB;4FACoF;QACpF,UAAU,EAAE,OAAO,CAAC;QACpB,2FAA2F;QAC3F,UAAU,EAAE,OAAO,CAAC;QACpB;;8DAEsD;QACtD,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;IACF,OAAO,EAAE;QACP,yEAAyE;QACzE,QAAQ,EAAE,OAAO,CAAC;QAClB,mEAAmE;QACnE,OAAO,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;KAC3C,CAAC;IACF,SAAS,EAAE;QACT,0CAA0C;QAC1C,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,cAAc,GAAG,aAAa,GAAG,WAAW,GAAG,UAAU,CAAC;QACpE,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7D;AAcD,wBAAgB,aAAa,CAAC,GAAG,EAAE,kBAAkB,GAAG,cAAc,CA4ErE"}

package/dist/config/schema.js

@@ -0,0 +1,95 @@
+/**
+ * config/schema — runtime config validation + defaults (mirrors RN core/config/schema).
+ * Public input types live in @scalebun/sdk-contracts; this produces the resolved internal config.
+ */
+// Header/body keys stripped before send, by default — denylist-by-default privacy.
+const DEFAULT_DENYLIST = [
+    'authorization',
+    'cookie',
+    'set-cookie',
+    'x-api-key',
+    'x-csrf-token',
+    'password',
+    'token',
+    'secret',
+];
+export function resolveConfig(cfg) {
+    if (!cfg || !cfg.clientKey)
+        throw new Error('[scalebun] clientKey is required');
+    if (!cfg.apiBaseUrl)
+        throw new Error('[scalebun] apiBaseUrl is required');
+    return {
+        clientKey: cfg.clientKey,
+        apiBaseUrl: cfg.apiBaseUrl.replace(/\/$/, ''),
+        environment: cfg.environment,
+        release: cfg.release,
+        appVersion: cfg.appVersion,
+        flushIntervalMs: cfg.flushIntervalMs ?? 5000,
+        sessionTimeoutMs: cfg.sessionTimeoutMs,
+        sessionMaxDurationMs: cfg.sessionMaxDurationMs,
+        replay: cfg.replay, // passthrough — resolved lazily in decideSampling
+        errors: cfg.errors, // passthrough — defaults resolved in ErrorsFeature
+        network: cfg.network, // passthrough — defaults resolved in NetworkFeature
+        performance: cfg.performance, // passthrough — defaults resolved in PerformanceFeature
+        analytics: cfg.analytics, // passthrough — tracking plan read in AnalyticsFeature
+        flags: cfg.flags, // passthrough — bootstrap seed read in ConfigFeature (F3)
+        replayCanvas: cfg.replayCanvas ?? false,
+        signSessionLane: cfg.signSessionLane ?? false,
+        replayFrameOrigins: cfg.replayFrameOrigins ?? [],
+        autocapture: cfg.autocapture ?? true,
+        tracePropagation: cfg.tracePropagation ?? true,
+        tracePropagationOrigins: cfg.tracePropagationOrigins ?? [],
+        maxBatchSize: cfg.maxBatchSize ?? 50,
+        maxQueueSize: cfg.maxQueueSize ?? 1000,
+        debug: cfg.debug ?? false,
+        features: {
+            errors: cfg.features?.errors ?? true,
+            network: cfg.features?.network ?? true,
+            console: cfg.features?.console ?? true,
+            webVitals: cfg.features?.webVitals ?? true,
+            performance: cfg.features?.performance ?? true,
+            journey: cfg.features?.journey ?? true,
+            replay: cfg.features?.replay ?? false, // lazy/opt-in until capture-on-signal lands
+            bugReport: cfg.features?.bugReport ?? true,
+            crash: cfg.features?.crash ?? true,
+            config: cfg.features?.config ?? true,
+            engage: cfg.features?.engage ?? true,
+            analytics: cfg.features?.analytics ?? true,
+            webPerf: cfg.features?.webPerf ?? true,
+            profiler: cfg.features?.profiler ?? false, // opt-in (CPU cost + needs Document-Policy header)
+            watchdog: cfg.features?.watchdog ?? false, // W5.2 — opt-in until dogfooded (see WAVE5-DESIGN §18)
+            inbox: cfg.features?.inbox ?? false, // opt-in until GA (see INBOX-COACHMARKS-ARCHITECTURE.md)
+            inapp2: cfg.features?.inapp2 ?? false, // IAM 2.0 engine — opt-in until GA
+        },
+        watchdog: cfg.watchdog, // passthrough — defaults resolved in WatchdogFeature
+        exitIntent: cfg.exitIntent, // passthrough — defaults resolved in the exit-intent engine
+        privacy: {
+            captureNetworkBodies: cfg.privacy?.captureNetworkBodies ?? false,
+            denylist: [...DEFAULT_DENYLIST, ...(cfg.privacy?.denylist ?? [])].map((s) => s.toLowerCase()),
+            maskSelectors: cfg.privacy?.maskSelectors ?? [],
+            maskReplayText: cfg.privacy?.maskReplayText ?? false,
+            // Input masking FOLLOWS maskReplayText by default — one flag governs everything (text + inputs).
+            // Can be set explicitly to decouple. Passwords are ALWAYS blanked regardless.
+            maskInputs: cfg.privacy?.maskInputs ?? cfg.privacy?.maskReplayText ?? false,
+            respectDnt: cfg.privacy?.respectDnt ?? false,
+            // Deliberately does NOT follow maskReplayText the way maskInputs does. Replay text and an event
+            // label are different exposures: replay is a recording someone opens deliberately, whereas the
+            // label is an aggregate dimension shown on every dashboard. Coupling them would mean turning on
+            // replay masking silently also collapsed the Events explorer back to one row per element shape.
+            maskEventText: cfg.privacy?.maskEventText ?? false,
+        },
+        consent: {
+            required: cfg.requireConsent ?? false,
+            initial: cfg.initialConsent ?? 'unknown',
+        },
+        bugReport: {
+            launcher: cfg.bugReportOptions?.launcher ?? false,
+            position: cfg.bugReportOptions?.position ?? 'bottom-right',
+            label: cfg.bugReportOptions?.label ?? 'Report a bug',
+        },
+        ...(cfg.engageOptions?.onInAppGameRequest
+            ? { onInAppGameRequest: cfg.engageOptions.onInAppGameRequest }
+            : {}),
+    };
+}
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA0GH,mFAAmF;AACnF,MAAM,gBAAgB,GAAG;IACvB,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,cAAc;IACd,UAAU;IACV,OAAO;IACP,QAAQ;CACT,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,GAAuB;IACnD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAChF,IAAI,CAAC,GAAG,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC1E,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7C,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,IAAI;QAC5C,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;QAC9C,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,kDAAkD;QACtE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,mDAAmD;QACvE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,oDAAoD;QAC1E,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,wDAAwD;QACtF,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,uDAAuD;QACjF,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,0DAA0D;QAC5E,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,KAAK;QACvC,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,KAAK;QAC7C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,IAAI,EAAE;QAChD,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QACpC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,IAAI,IAAI;QAC9C,uBAAuB,EAAE,GAAG,CAAC,uBAAuB,IAAI,EAAE;QAC1D,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE;QACpC,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;QACtC,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,KAAK;QACzB,QAAQ,EAAE;YACR,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI;YACpC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,IAAI;YACtC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,IAAI;YACtC,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,IAAI,IAAI;YAC1C,WAAW,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,IAAI,IAAI;YAC9C,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,IAAI;YACtC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,EAAE,4CAA4C;YACnF,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,IAAI,IAAI;YAC1C,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,IAAI;YAClC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI;YACpC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI;YACpC,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,IAAI,IAAI;YAC1C,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,IAAI;YACtC,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,KAAK,EAAE,mDAAmD;YAC9F,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,KAAK,EAAE,uDAAuD;YAClG,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,KAAK,EAAE,yDAAyD;YAC9F,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,EAAE,mCAAmC;SAC3E;QACD,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,qDAAqD;QAC7E,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,4DAA4D;QACxF,OAAO,EAAE;YACP,oBAAoB,EAAE,GAAG,CAAC,OAAO,EAAE,oBAAoB,IAAI,KAAK;YAChE,QAAQ,EAAE,CAAC,GAAG,gBAAgB,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC7F,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,aAAa,IAAI,EAAE;YAC/C,cAAc,EAAE,GAAG,CAAC,OAAO,EAAE,cAAc,IAAI,KAAK;YACpD,iGAAiG;YACjG,8EAA8E;YAC9E,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE,cAAc,IAAI,KAAK;YAC3E,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,KAAK;YAC5C,gGAAgG;YAChG,+FAA+F;YAC/F,gGAAgG;YAChG,gGAAgG;YAChG,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,aAAa,IAAI,KAAK;SACnD;QACD,OAAO,EAAE;YACP,QAAQ,EAAE,GAAG,CAAC,cAAc,IAAI,KAAK;YACrC,OAAO,EAAE,GAAG,CAAC,cAAc,IAAI,SAAS;SACzC;QACD,SAAS,EAAE;YACT,QAAQ,EAAE,GAAG,CAAC,gBAAgB,EAAE,QAAQ,IAAI,KAAK;YACjD,QAAQ,EAAE,GAAG,CAAC,gBAAgB,EAAE,QAAQ,IAAI,cAAc;YAC1D,KAAK,EAAE,GAAG,CAAC,gBAAgB,EAAE,KAAK,IAAI,cAAc;SACrD;QACD,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,kBAAkB;YACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,GAAG,CAAC,aAAa,CAAC,kBAAkB,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/dist/core/breadcrumbs.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Breadcrumbs (M3) — the trail of what happened BEFORE an error, the single most useful context for
+ * "why did this break". Best-in-class design choices:
+ *
+ *  - **Auto-captured at the ONE emit boundary** (the bootstrap routes every pipeline item through
+ *    `recordBreadcrumb`), so console / network / navigation / clicks / custom events / prior errors
+ *    all become crumbs automatically, in true chronological order, with ZERO per-feature wiring.
+ *  - **Pre-redacted** — messages are scrubbed and network URLs lose their query string at capture, so
+ *    PII never sits in the ring.
+ *  - **Consecutive-dedup** — a burst of identical crumbs (e.g. a render-loop console.error) collapses
+ *    to one with a `count`, keeping the trail readable and the ring useful.
+ *  - **Bounded + configurable** — a fixed-size ring (default 50) snapshotted onto each error.
+ *  - **Manual API** — `ScaleBun.addBreadcrumb(...)` for app-level milestones.
+ *
+ * Frame/performance items are intentionally NOT crumbs (too frequent; the mapper early-returns).
+ */
+import type { Item } from '@scalebun/protocol';
+export type BreadcrumbLevel = 'debug' | 'info' | 'warning' | 'error';
+export interface Breadcrumb {
+    /** epoch ms */
+    ts: number;
+    /** coarse source: 'console' | 'navigation' | 'network' | 'ui.click' | 'error' | 'custom' */
+    category: string;
+    /** finer type, e.g. 'http' | 'event' */
+    type?: string;
+    level?: BreadcrumbLevel;
+    message?: string;
+    data?: Record<string, unknown>;
+    /** consecutive identical crumbs collapsed into one */
+    count?: number;
+}
+/** Map a pipeline Item → a compact, redacted Breadcrumb (or null for kinds that aren't crumbs). */
+export declare function crumbFromItem(item: Item): Breadcrumb | null;
+/** A bounded ring of crumbs with consecutive-dedup. One instance per page (module singleton). */
+declare class BreadcrumbBuffer {
+    private ring;
+    private max;
+    setMax(n: number): void;
+    add(c: Breadcrumb): void;
+    /** Chronological copy for attaching to an error (oldest → newest). */
+    snapshot(): Breadcrumb[];
+    clear(): void;
+    private trim;
+}
+/** The process-wide breadcrumb ring (single SDK instance per page). */
+export declare const breadcrumbs: BreadcrumbBuffer;
+export declare function setBeforeBreadcrumb(fn?: (c: Breadcrumb) => Breadcrumb | null): void;
+/** Add a pre-formed crumb (manual API path fills `ts`/defaults before calling this). The host's
+ *  message is scrubbed + clipped here so app-supplied crumbs are as PII-safe as the auto ones. */
+export declare function addBreadcrumb(c: Breadcrumb): void;
+/** Derive + record a crumb from a pipeline item (called at the emit boundary). Cheap no-op for
+ *  non-crumb kinds (frame/performance) so it's safe on the hot replay path. */
+export declare function recordBreadcrumb(item: Item): void;
+export declare function clearBreadcrumbs(): void;
+export {};
+//# sourceMappingURL=breadcrumbs.d.ts.map

package/dist/core/breadcrumbs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"breadcrumbs.d.ts","sourceRoot":"","sources":["../../src/core/breadcrumbs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAG/C,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;AAErE,MAAM,WAAW,UAAU;IACzB,eAAe;IACf,EAAE,EAAE,MAAM,CAAC;IACX,4FAA4F;IAC5F,QAAQ,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA4BD,mGAAmG;AACnG,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,GAAG,IAAI,CA0B3D;AAkBD,iGAAiG;AACjG,cAAM,gBAAgB;IACpB,OAAO,CAAC,IAAI,CAAoB;IAChC,OAAO,CAAC,GAAG,CAAe;IAE1B,MAAM,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI;IAKvB,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI;IAWxB,sEAAsE;IACtE,QAAQ,IAAI,UAAU,EAAE;IAIxB,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,IAAI;CAGb;AAED,uEAAuE;AACvE,eAAO,MAAM,WAAW,kBAAyB,CAAC;AAIlD,wBAAgB,mBAAmB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,UAAU,GAAG,IAAI,GAAG,IAAI,CAEnF;AAWD;kGACkG;AAClG,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,CAIjD;AAED;+EAC+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAKjD;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/dist/core/breadcrumbs.js

@@ -0,0 +1,141 @@
+import { scrubText } from './redact';
+const DEFAULT_MAX = 50;
+const HARD_MAX = 200;
+const MSG_CAP = 256;
+function clip(s) {
+    return s.length > MSG_CAP ? s.slice(0, MSG_CAP) : s;
+}
+function stripQuery(url) {
+    return url.replace(/[?#].*$/, '');
+}
+function levelFor(l) {
+    return l === 'warn' ? 'warning' : l === 'debug' || l === 'info' || l === 'error' ? l : 'info';
+}
+/** Drop undefined values so crumb `data` stays compact on the wire. */
+function prune(d) {
+    const out = {};
+    let any = false;
+    for (const k in d) {
+        if (d[k] !== undefined && d[k] !== null) {
+            out[k] = d[k];
+            any = true;
+        }
+    }
+    return any ? out : undefined;
+}
+/** Map a pipeline Item → a compact, redacted Breadcrumb (or null for kinds that aren't crumbs). */
+export function crumbFromItem(item) {
+    // Hot path: frame (replay) + performance (RUM) items stream at high frequency and are never
+    // crumbs — bail before any allocation so the emit boundary stays cheap.
+    if (item.kind === 'frame' || item.kind === 'performance')
+        return null;
+    const ts = typeof item.timestamp === 'number' ? item.timestamp : Date.now();
+    switch (item.kind) {
+        case 'log':
+            return { ts, category: 'console', level: levelFor(item.level), message: clip(scrubText(item.message)) };
+        case 'network': {
+            const status = item.status;
+            return {
+                ts,
+                category: 'network',
+                type: 'http',
+                level: typeof status === 'number' && status >= 400 ? 'error' : 'info',
+                message: clip(scrubText(`${item.method} ${stripQuery(item.url)}`)),
+                data: prune({ status, duration: item.duration }),
+            };
+        }
+        case 'event':
+            return eventCrumb(item.name, (item.props ?? {}), ts);
+        case 'error':
+            return { ts, category: 'error', type: item.type, level: 'error', message: clip(scrubText(item.message)) };
+        default:
+            return null; // frame / performance / rating / identify are not breadcrumbs
+    }
+}
+function eventCrumb(name, p, ts) {
+    if (name === 'SCREEN_VIEW') {
+        return { ts, category: 'navigation', message: `${p.from ?? '?'} → ${p.to ?? '?'}` };
+    }
+    if (name === 'USER_ACTION') {
+        const action = typeof p.action === 'string' ? p.action : 'action';
+        return {
+            ts,
+            category: `ui.${action}`,
+            message: clip(scrubText(String(p.selector ?? p.label ?? action))),
+            data: prune({ dead: p.dead, rage: p.rage }),
+        };
+    }
+    return { ts, category: 'custom', type: 'event', message: clip(scrubText(name)) };
+}
+/** A bounded ring of crumbs with consecutive-dedup. One instance per page (module singleton). */
+class BreadcrumbBuffer {
+    constructor() {
+        this.ring = [];
+        this.max = DEFAULT_MAX;
+    }
+    setMax(n) {
+        this.max = Math.max(1, Math.min(HARD_MAX, Math.floor(n)));
+        this.trim();
+    }
+    add(c) {
+        const last = this.ring[this.ring.length - 1];
+        if (last && last.category === c.category && last.message === c.message && last.level === c.level) {
+            last.count = (last.count ?? 1) + 1; // collapse a burst of identical crumbs
+            last.ts = c.ts;
+            return;
+        }
+        this.ring.push(c);
+        this.trim();
+    }
+    /** Chronological copy for attaching to an error (oldest → newest). */
+    snapshot() {
+        return this.ring.slice();
+    }
+    clear() {
+        this.ring = [];
+    }
+    trim() {
+        while (this.ring.length > this.max)
+            this.ring.shift();
+    }
+}
+/** The process-wide breadcrumb ring (single SDK instance per page). */
+export const breadcrumbs = new BreadcrumbBuffer();
+/** Host hook: inspect/modify a crumb before it enters the ring, or return null to drop it. */
+let beforeCrumb;
+export function setBeforeBreadcrumb(fn) {
+    beforeCrumb = fn;
+}
+/** Run the host hook (sandboxed). Returns the (possibly modified) crumb, or null to drop. */
+function applyHook(c) {
+    if (!beforeCrumb)
+        return c;
+    try {
+        return beforeCrumb(c);
+    }
+    catch {
+        return c; // a throwing hook must not lose the crumb
+    }
+}
+/** Add a pre-formed crumb (manual API path fills `ts`/defaults before calling this). The host's
+ *  message is scrubbed + clipped here so app-supplied crumbs are as PII-safe as the auto ones. */
+export function addBreadcrumb(c) {
+    const scrubbed = c.message ? { ...c, message: clip(scrubText(c.message)) } : c;
+    const final = applyHook(scrubbed);
+    if (final)
+        breadcrumbs.add(final);
+}
+/** Derive + record a crumb from a pipeline item (called at the emit boundary). Cheap no-op for
+ *  non-crumb kinds (frame/performance) so it's safe on the hot replay path. */
+export function recordBreadcrumb(item) {
+    const c = crumbFromItem(item);
+    if (!c)
+        return;
+    const final = applyHook(c);
+    if (final)
+        breadcrumbs.add(final);
+}
+export function clearBreadcrumbs() {
+    breadcrumbs.clear();
+}
+//# sourceMappingURL=breadcrumbs.js.map

package/dist/core/breadcrumbs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"breadcrumbs.js","sourceRoot":"","sources":["../../src/core/breadcrumbs.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAkBrC,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,OAAO,GAAG,GAAG,CAAC;AAEpB,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AACD,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AACD,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAChG,CAAC;AACD,uEAAuE;AACvE,SAAS,KAAK,CAAC,CAA0B;IACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACxC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACd,GAAG,GAAG,IAAI,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/B,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,aAAa,CAAC,IAAU;IACtC,4FAA4F;IAC5F,wEAAwE;IACxE,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IACtE,MAAM,EAAE,GAAG,OAAQ,IAA+B,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAE,IAA8B,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACnI,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,KAAK;YACR,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC1G,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,OAAO;gBACL,EAAE;gBACF,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBACrE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAClE,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;aACjD,CAAC;QACJ,CAAC;QACD,KAAK,OAAO;YACV,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAA4B,EAAE,EAAE,CAAC,CAAC;QAClF,KAAK,OAAO;YACV,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC5G;YACE,OAAO,IAAI,CAAC,CAAC,8DAA8D;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,CAA0B,EAAE,EAAU;IACtE,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClE,OAAO;YACL,EAAE;YACF,QAAQ,EAAE,MAAM,MAAM,EAAE;YACxB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC;YACjE,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;SAC5C,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,iGAAiG;AACjG,MAAM,gBAAgB;IAAtB;QACU,SAAI,GAAiB,EAAE,CAAC;QACxB,QAAG,GAAG,WAAW,CAAC;IA8B5B,CAAC;IA5BC,MAAM,CAAC,CAAS;QACd,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,GAAG,CAAC,CAAa;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;YACjG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,uCAAuC;YAC3E,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,sEAAsE;IACtE,QAAQ;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,CAAC;IAEO,IAAI;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACxD,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,gBAAgB,EAAE,CAAC;AAElD,8FAA8F;AAC9F,IAAI,WAA+D,CAAC;AACpE,MAAM,UAAU,mBAAmB,CAAC,EAAyC;IAC3E,WAAW,GAAG,EAAE,CAAC;AACnB,CAAC;AACD,6FAA6F;AAC7F,SAAS,SAAS,CAAC,CAAa;IAC9B,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,CAAC,0CAA0C;IACtD,CAAC;AACH,CAAC;AAED;kGACkG;AAClG,MAAM,UAAU,aAAa,CAAC,CAAa;IACzC,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,KAAK;QAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED;+EAC+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,IAAU;IACzC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC;QAAE,OAAO;IACf,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,KAAK;QAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC"}

package/dist/core/capabilities.d.ts

@@ -0,0 +1,38 @@
+/**
+ * core/capabilities.ts — feature-detect the runtime APIs the SDK's features depend on, ONCE.
+ *
+ * Features ask "can I observe the DOM / persist / send?" via `can('dom')` instead of probing globals
+ * inline (the codebase had ~146 ad-hoc `typeof` guards). Memoized on first call; import-safe (lazy).
+ * `storage`/`session` are PROBED (write+remove in try/catch), not merely `typeof`, because some hosts
+ * (Safari private mode, sandboxed iframes) expose the object but throw on access.
+ *
+ * Nothing consumes this yet (P0 foundation) — features migrate their inline guards to it in later phases.
+ */
+export interface Capabilities {
+    dom: boolean;
+    storage: boolean;
+    session: boolean;
+    indexedDB: boolean;
+    history: boolean;
+    network: boolean;
+    beacon: boolean;
+    keepalive: boolean;
+    performance: boolean;
+    performanceObserver: boolean;
+    mutationObserver: boolean;
+    intersectionObserver: boolean;
+    resizeObserver: boolean;
+    visibility: boolean;
+    raf: boolean;
+    crypto: boolean;
+    webWorker: boolean;
+}
+/** The runtime's capabilities, detected once and memoized. */
+export declare function capabilities(): Capabilities;
+/** Convenience read: `can('dom')`. */
+export declare function can(cap: keyof Capabilities): boolean;
+/** Test-only: clear the memoized capabilities so a suite can re-probe under mocked globals. */
+export declare function __resetCapabilitiesForTests(): void;
+/** Test-only: force specific capabilities (merged over the detected set) — e.g. simulate an edge runtime. */
+export declare function __setCapabilitiesForTests(partial: Partial<Capabilities>): void;
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/core/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../src/core/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAqDD,8DAA8D;AAC9D,wBAAgB,YAAY,IAAI,YAAY,CAG3C;AAED,sCAAsC;AACtC,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,YAAY,GAAG,OAAO,CAEpD;AAED,+FAA+F;AAC/F,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED,6GAA6G;AAC7G,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAE9E"}

package/dist/core/capabilities.js

@@ -0,0 +1,78 @@
+/**
+ * core/capabilities.ts — feature-detect the runtime APIs the SDK's features depend on, ONCE.
+ *
+ * Features ask "can I observe the DOM / persist / send?" via `can('dom')` instead of probing globals
+ * inline (the codebase had ~146 ad-hoc `typeof` guards). Memoized on first call; import-safe (lazy).
+ * `storage`/`session` are PROBED (write+remove in try/catch), not merely `typeof`, because some hosts
+ * (Safari private mode, sandboxed iframes) expose the object but throw on access.
+ *
+ * Nothing consumes this yet (P0 foundation) — features migrate their inline guards to it in later phases.
+ */
+const g = () => globalThis;
+const has = (name) => typeof g()[name] !== 'undefined';
+/** Probe a Web Storage area — present AND usable (private-mode Safari throws on setItem). */
+function storageUsable(kind) {
+    try {
+        const s = g()[kind];
+        if (!s)
+            return false;
+        const k = '__scalebun_probe__';
+        s.setItem(k, '1');
+        s.removeItem(k);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Does this runtime's fetch honor the `keepalive` init flag? (Absent on some SSR/edge fetches.) */
+function keepaliveSupported() {
+    try {
+        return typeof Request !== 'undefined' && 'keepalive' in new Request('https://scalebun.invalid', {});
+    }
+    catch {
+        return false;
+    }
+}
+let cached = null;
+function detect() {
+    const doc = typeof document !== 'undefined';
+    return {
+        dom: doc,
+        storage: storageUsable('localStorage'),
+        session: storageUsable('sessionStorage'),
+        indexedDB: has('indexedDB'),
+        history: typeof history !== 'undefined' && typeof history.pushState === 'function',
+        network: typeof fetch !== 'undefined',
+        beacon: typeof navigator !== 'undefined' && typeof navigator.sendBeacon === 'function',
+        keepalive: keepaliveSupported(),
+        performance: typeof performance !== 'undefined' && typeof performance.now === 'function',
+        performanceObserver: has('PerformanceObserver'),
+        mutationObserver: has('MutationObserver'),
+        intersectionObserver: has('IntersectionObserver'),
+        resizeObserver: has('ResizeObserver'),
+        visibility: doc && typeof document.visibilityState !== 'undefined',
+        raf: typeof requestAnimationFrame !== 'undefined',
+        crypto: typeof crypto !== 'undefined' && typeof crypto.subtle !== 'undefined',
+        webWorker: has('Worker'),
+    };
+}
+/** The runtime's capabilities, detected once and memoized. */
+export function capabilities() {
+    if (cached === null)
+        cached = detect();
+    return cached;
+}
+/** Convenience read: `can('dom')`. */
+export function can(cap) {
+    return capabilities()[cap];
+}
+/** Test-only: clear the memoized capabilities so a suite can re-probe under mocked globals. */
+export function __resetCapabilitiesForTests() {
+    cached = null;
+}
+/** Test-only: force specific capabilities (merged over the detected set) — e.g. simulate an edge runtime. */
+export function __setCapabilitiesForTests(partial) {
+    cached = { ...detect(), ...partial };
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/core/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/core/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAsBH,MAAM,CAAC,GAAG,GAAwB,EAAE,CAAC,UAAiC,CAAC;AACvE,MAAM,GAAG,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC;AAExE,6FAA6F;AAC7F,SAAS,aAAa,CAAC,IAAuC;IAC5D,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrB,MAAM,CAAC,GAAG,oBAAoB,CAAC;QAC/B,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAClB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,OAAO,OAAO,OAAO,KAAK,WAAW,IAAI,WAAW,IAAI,IAAI,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,IAAI,MAAM,GAAwB,IAAI,CAAC;AAEvC,SAAS,MAAM;IACb,MAAM,GAAG,GAAG,OAAO,QAAQ,KAAK,WAAW,CAAC;IAC5C,OAAO;QACL,GAAG,EAAE,GAAG;QACR,OAAO,EAAE,aAAa,CAAC,cAAc,CAAC;QACtC,OAAO,EAAE,aAAa,CAAC,gBAAgB,CAAC;QACxC,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC;QAC3B,OAAO,EAAE,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU;QAClF,OAAO,EAAE,OAAO,KAAK,KAAK,WAAW;QACrC,MAAM,EAAE,OAAO,SAAS,KAAK,WAAW,IAAI,OAAO,SAAS,CAAC,UAAU,KAAK,UAAU;QACtF,SAAS,EAAE,kBAAkB,EAAE;QAC/B,WAAW,EAAE,OAAO,WAAW,KAAK,WAAW,IAAI,OAAO,WAAW,CAAC,GAAG,KAAK,UAAU;QACxF,mBAAmB,EAAE,GAAG,CAAC,qBAAqB,CAAC;QAC/C,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,CAAC;QACzC,oBAAoB,EAAE,GAAG,CAAC,sBAAsB,CAAC;QACjD,cAAc,EAAE,GAAG,CAAC,gBAAgB,CAAC;QACrC,UAAU,EAAE,GAAG,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,WAAW;QAClE,GAAG,EAAE,OAAO,qBAAqB,KAAK,WAAW;QACjD,MAAM,EAAE,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,WAAW;QAC7E,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,YAAY;IAC1B,IAAI,MAAM,KAAK,IAAI;QAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACvC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,GAAG,CAAC,GAAuB;IACzC,OAAO,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,2BAA2B;IACzC,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,yBAAyB,CAAC,OAA8B;IACtE,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC;AACvC,CAAC"}