@scalebun/web 1.0.0

package/dist/features/errors/parse/stacktrace.js

@@ -0,0 +1,85 @@
+const MAX_FRAMES = 50; // cap pathological/recursive stacks
+/** Strip the URL query/hash so frame identity (and grouping) is stable across cache-busting params. */
+function cleanFile(f) {
+    return f.replace(/[?#].*$/, '').trim();
+}
+/** App code vs node_modules / 3rd-party / browser-internal — drives "in-app frame" highlighting. */
+function isInApp(file) {
+    if (!file)
+        return false;
+    if (file.includes('node_modules'))
+        return false;
+    if (file === '<anonymous>' || file === 'native' || file === '[native code]')
+        return false;
+    if (/^(chrome|moz|safari|webkit)-extension:\/\//.test(file))
+        return false;
+    return true;
+}
+function parseLoc(s) {
+    s = s.trim();
+    if (!s)
+        return null;
+    if (s === '<anonymous>' || s === 'native' || s === '[native code]')
+        return { file: s };
+    // greedy `.*` lets the trailing :line:col win even when the URL itself contains colons (ports).
+    const m3 = /^(.*):(\d+):(\d+)$/.exec(s);
+    if (m3)
+        return { file: cleanFile(m3[1] ?? ''), line: +(m3[2] ?? 0), col: +(m3[3] ?? 0) };
+    const m2 = /^(.*):(\d+)$/.exec(s);
+    if (m2)
+        return { file: cleanFile(m2[1] ?? ''), line: +(m2[2] ?? 0) };
+    return { file: cleanFile(s) };
+}
+function makeFrame(fn, loc) {
+    const frame = {};
+    if (fn && fn !== '<anonymous>')
+        frame.function = fn;
+    if (loc.file)
+        frame.file = loc.file;
+    if (loc.line != null)
+        frame.line = loc.line;
+    if (loc.col != null)
+        frame.col = loc.col;
+    frame.inApp = isInApp(loc.file);
+    return frame;
+}
+function parseLine(raw) {
+    const line = raw.trim();
+    if (!line)
+        return null;
+    // V8 / Chrome / Node / Edge: "at fn (loc)" | "at loc"
+    if (line.indexOf('at ') === 0) {
+        let body = line.slice(3).trim().replace(/^async\s+/, '');
+        let fn;
+        const lp = body.indexOf(' (');
+        if (lp !== -1 && body.endsWith(')')) {
+            fn = body.slice(0, lp).trim() || undefined;
+            body = body.slice(lp + 2, -1);
+        }
+        const loc = parseLoc(body);
+        return loc ? makeFrame(fn, loc) : null;
+    }
+    // Gecko / WebKit / Safari: "fn@loc" | "@loc". Require a location to avoid matching stray '@'.
+    const at = line.lastIndexOf('@');
+    if (at !== -1) {
+        const fn = line.slice(0, at).trim() || undefined;
+        const loc = parseLoc(line.slice(at + 1));
+        if (loc && loc.file)
+            return makeFrame(fn, loc);
+    }
+    return null;
+}
+/** Parse a raw stack string into structured frames (top frame first). Returns [] when unparseable. */
+export function parseStack(stack) {
+    if (!stack)
+        return [];
+    const out = [];
+    const lines = stack.split('\n');
+    for (let i = 0; i < lines.length && out.length < MAX_FRAMES; i++) {
+        const f = parseLine(lines[i] ?? '');
+        if (f)
+            out.push(f);
+    }
+    return out;
+}
+//# sourceMappingURL=stacktrace.js.map

package/dist/features/errors/parse/stacktrace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stacktrace.js","sourceRoot":"","sources":["../../../../src/features/errors/parse/stacktrace.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,oCAAoC;AAQ3D,uGAAuG;AACvG,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,oGAAoG;AACpG,SAAS,OAAO,CAAC,IAAa;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IAC1F,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACb,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,eAAe;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACvF,gGAAgG;IAChG,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACzF,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACrE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,SAAS,CAAC,EAAsB,EAAE,GAAQ;IACjD,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,IAAI,EAAE,IAAI,EAAE,KAAK,aAAa;QAAE,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC;IACpD,IAAI,GAAG,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACpC,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IAC5C,IAAI,GAAG,CAAC,GAAG,IAAI,IAAI;QAAE,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACzC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,sDAAsD;IACtD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,EAAsB,CAAC;QAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;YAC3C,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAED,8FAA8F;IAC9F,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACd,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACjE,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/features/errors/redact.d.ts

@@ -0,0 +1,7 @@
+/** Scrub a stack conservatively: emails + URL query strings (which can carry tokens/PII), while
+ *  preserving `:line:col` and minified frame names so issue-grouping stays stable. */
+export declare function scrubStack(stack?: string): string | undefined;
+/** Scrub string values in a shallow `extra` map (emails + opaque tokens). Returns the input
+ *  unchanged when nothing matched, so callers don't pay an allocation on the common path. */
+export declare function scrubExtra(extra?: Record<string, unknown>): Record<string, unknown> | undefined;
+//# sourceMappingURL=redact.d.ts.map

package/dist/features/errors/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../../src/features/errors/redact.ts"],"names":[],"mappings":"AASA;sFACsF;AACtF,wBAAgB,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK7D;AAED;6FAC6F;AAC7F,wBAAgB,UAAU,CACxB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAerC"}

package/dist/features/errors/redact.js

@@ -0,0 +1,39 @@
+/**
+ * Error-specific PII redaction (M0). The base `scrubText` (core) handles free-text strings; here we
+ * add two things it can't do safely on its own:
+ *  - `scrubStack`: scrub a STACK without corrupting minified frame identifiers (the grouper needs
+ *    those intact), so we strip only emails + URL query strings — never the opaque-token pass.
+ *  - `scrubExtra`: scrub user-supplied `extra`/context string values (these ARE free-text PII).
+ */
+import { scrubText } from '../../core';
+/** Scrub a stack conservatively: emails + URL query strings (which can carry tokens/PII), while
+ *  preserving `:line:col` and minified frame names so issue-grouping stays stable. */
+export function scrubStack(stack) {
+    if (!stack)
+        return stack;
+    return stack
+        .replace(/[\w.+-]+@[\w-]+\.[\w.-]+/g, '[email]')
+        .replace(/\?[^\s:)'"]*/g, ''); // drop "?query…" from frame URLs (stops before :line:col)
+}
+/** Scrub string values in a shallow `extra` map (emails + opaque tokens). Returns the input
+ *  unchanged when nothing matched, so callers don't pay an allocation on the common path. */
+export function scrubExtra(extra) {
+    if (!extra)
+        return extra;
+    let changed = false;
+    const out = {};
+    for (const k in extra) {
+        const v = extra[k];
+        if (typeof v === 'string') {
+            const s = scrubText(v);
+            out[k] = s;
+            if (s !== v)
+                changed = true;
+        }
+        else {
+            out[k] = v;
+        }
+    }
+    return changed ? out : extra;
+}
+//# sourceMappingURL=redact.js.map

package/dist/features/errors/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../../src/features/errors/redact.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC;sFACsF;AACtF,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,KAAK;SACT,OAAO,CAAC,2BAA2B,EAAE,SAAS,CAAC;SAC/C,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,0DAA0D;AAC7F,CAAC;AAED;6FAC6F;AAC7F,MAAM,UAAU,UAAU,CACxB,KAA+B;IAE/B,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACvB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACX,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,GAAG,IAAI,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/B,CAAC"}

package/dist/features/errors/sampling.d.ts

@@ -0,0 +1,2 @@
+export declare function shouldSampleErrors(sampleRate: number | undefined, sessionId: string | undefined): boolean;
+//# sourceMappingURL=sampling.d.ts.map

package/dist/features/errors/sampling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampling.d.ts","sourceRoot":"","sources":["../../../src/features/errors/sampling.ts"],"names":[],"mappings":"AAgBA,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKzG"}

package/dist/features/errors/sampling.js

@@ -0,0 +1,24 @@
+/**
+ * Error sampling (M6) — a coarse cost lever for very-high-volume apps. Deterministic PER SESSION via
+ * the same fnv1a bucket as replay/flags (so the backend can re-derive the decision — no client trust).
+ * Gates only the AUTO firehose (window.onerror / unhandledrejection); manual `captureError` always
+ * fires (it's dev-intentional + low-volume + high-value). Default rate 1 = capture every session.
+ *
+ * Most apps should leave this at 1 and manage volume via grouping / `ignoreErrors` / `beforeSend`;
+ * sampling trades error completeness for cost and should be an explicit choice.
+ */
+import { bucketOf } from '../config/bucketing';
+// NOTE: keeps the legacy `wzb-` prefix on purpose. This salt is a bucketing input, not
+// branding — nobody ever sees it, and changing the string reshuffles which sessions are
+// sampled. It was left untouched by the ScaleBun rebrand for that reason.
+const SALT = 'wzb-errors-v1'; // frozen — changing it reshuffles every app's sampling
+export function shouldSampleErrors(sampleRate, sessionId) {
+    if (sampleRate == null || sampleRate >= 1)
+        return true; // default / explicit full capture
+    if (sampleRate <= 0)
+        return false;
+    if (!sessionId)
+        return true; // no id to bucket on → never silently drop
+    return bucketOf(sessionId, SALT) < sampleRate * 100;
+}
+//# sourceMappingURL=sampling.js.map

package/dist/features/errors/sampling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampling.js","sourceRoot":"","sources":["../../../src/features/errors/sampling.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,uFAAuF;AACvF,wFAAwF;AACxF,0EAA0E;AAC1E,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,uDAAuD;AAErF,MAAM,UAAU,kBAAkB,CAAC,UAA8B,EAAE,SAA6B;IAC9F,IAAI,UAAU,IAAI,IAAI,IAAI,UAAU,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,kCAAkC;IAC1F,IAAI,UAAU,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,2CAA2C;IACxE,OAAO,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,UAAU,GAAG,GAAG,CAAC;AACtD,CAAC"}

package/dist/features/errors/scope.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Error scope (M4) — global enrichment the host sets once and the SDK merges into every error:
+ * `tags` (indexed, searchable), `context` (arbitrary structured data), and a default `level`.
+ * Per-`captureError` options override the global scope for that one call. (User identity is NOT here
+ * — it's session-level via `ScaleBun.setUser`/identify, and the backend already ties errors to it.)
+ */
+export type ErrorLevel = 'fatal' | 'error' | 'warning' | 'info';
+export interface ScopeOverride {
+    level?: ErrorLevel;
+    tags?: Record<string, string>;
+    context?: Record<string, unknown>;
+    /** Force a specific grouping key for this error (overrides the computed fingerprint). */
+    fingerprint?: string;
+}
+export declare function setTag(key: string, value: string): void;
+export declare function setContext(key: string, value: unknown): void;
+export declare function setErrorLevel(level: ErrorLevel): void;
+export declare function clearScope(): void;
+export interface ResolvedScope {
+    level?: ErrorLevel;
+    tags?: Record<string, string>;
+    context?: Record<string, unknown>;
+}
+/** Merge global scope with this-call overrides (the call wins). Empty fields are omitted. */
+export declare function resolveScope(over?: ScopeOverride): ResolvedScope;
+//# sourceMappingURL=scope.d.ts.map

package/dist/features/errors/scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../../../src/features/errors/scope.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAEhE,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,yFAAyF;IACzF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAUD,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAEvD;AACD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAE5D;AACD,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAErD;AACD,wBAAgB,UAAU,IAAI,IAAI,CAIjC;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,6FAA6F;AAC7F,wBAAgB,YAAY,CAAC,IAAI,CAAC,EAAE,aAAa,GAAG,aAAa,CAShE"}

package/dist/features/errors/scope.js

@@ -0,0 +1,30 @@
+const scope = { tags: {}, context: {} };
+export function setTag(key, value) {
+    scope.tags[key] = value;
+}
+export function setContext(key, value) {
+    scope.context[key] = value;
+}
+export function setErrorLevel(level) {
+    scope.level = level;
+}
+export function clearScope() {
+    scope.tags = {};
+    scope.context = {};
+    scope.level = undefined;
+}
+/** Merge global scope with this-call overrides (the call wins). Empty fields are omitted. */
+export function resolveScope(over) {
+    const tags = { ...scope.tags, ...over?.tags };
+    const context = { ...scope.context, ...over?.context };
+    const level = over?.level ?? scope.level;
+    const out = {};
+    if (level)
+        out.level = level;
+    if (Object.keys(tags).length)
+        out.tags = tags;
+    if (Object.keys(context).length)
+        out.context = context;
+    return out;
+}
+//# sourceMappingURL=scope.js.map

package/dist/features/errors/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../../src/features/errors/scope.ts"],"names":[],"mappings":"AAsBA,MAAM,KAAK,GAAe,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAEpD,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,KAAa;IAC/C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AAC1B,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,KAAc;IACpD,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AAC7B,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;AACtB,CAAC;AACD,MAAM,UAAU,UAAU;IACxB,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;IAChB,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;IACnB,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;AAC1B,CAAC;AAQD,6FAA6F;AAC7F,MAAM,UAAU,YAAY,CAAC,IAAoB;IAC/C,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IACzC,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,IAAI,KAAK;QAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM;QAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IACvD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/features/exit-intent/ExitIntentFeature.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Exit-Intent (#25 P2) — CRO capture that a visitor is about to leave. Ultra-thin eager shell:
+ * feature-detect, then lazy-load the engine (pointer-toward-top + scroll-reversal → confidence →
+ * `$exit_intent` + `ctx.signal('exit_intent')`). Everything but the detect+import lives in the lazy
+ * chunk to keep the core bundle gate. Off unless `config.features.exitIntent !== false`.
+ */
+import type { IFeature, FeatureContext } from '@scalebun/sdk-contracts';
+export declare class ExitIntentFeature implements IFeature {
+    readonly name = "exitIntent";
+    private active;
+    private handle?;
+    get isActive(): boolean;
+    setup(ctx: FeatureContext): Promise<void>;
+    teardown(): void;
+}
+//# sourceMappingURL=ExitIntentFeature.d.ts.map

package/dist/features/exit-intent/ExitIntentFeature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExitIntentFeature.d.ts","sourceRoot":"","sources":["../../../src/features/exit-intent/ExitIntentFeature.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGxE,qBAAa,iBAAkB,YAAW,QAAQ;IAChD,QAAQ,CAAC,IAAI,gBAAgB;IAC7B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAC,CAAmB;IAElC,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAEK,KAAK,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAS/C,QAAQ,IAAI,IAAI;CAKjB"}

package/dist/features/exit-intent/ExitIntentFeature.js

@@ -0,0 +1,25 @@
+export class ExitIntentFeature {
+    constructor() {
+        this.name = 'exitIntent';
+        this.active = false;
+    }
+    get isActive() {
+        return this.active;
+    }
+    async setup(ctx) {
+        if (typeof window === 'undefined' || typeof document === 'undefined')
+            return;
+        this.active = true;
+        const { startExitIntent } = await import('./engine');
+        // Host-supplied thresholds (config.exitIntent) override REVERSAL_DEFAULTS per key; undefined = defaults.
+        if (!this.active)
+            return; // torn down while the chunk loaded
+        this.handle = startExitIntent(ctx, ctx.exitIntent);
+    }
+    teardown() {
+        this.active = false;
+        this.handle?.stop();
+        this.handle = undefined;
+    }
+}
+//# sourceMappingURL=ExitIntentFeature.js.map

package/dist/features/exit-intent/ExitIntentFeature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExitIntentFeature.js","sourceRoot":"","sources":["../../../src/features/exit-intent/ExitIntentFeature.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,iBAAiB;IAA9B;QACW,SAAI,GAAG,YAAY,CAAC;QACrB,WAAM,GAAG,KAAK,CAAC;IAqBzB,CAAC;IAlBC,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAmB;QAC7B,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,QAAQ,KAAK,WAAW;YAAE,OAAO;QAC7E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QACrD,yGAAyG;QACzG,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,mCAAmC;QAC7D,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;IAC1B,CAAC;CACF"}

package/dist/features/exit-intent/engine.d.ts

@@ -0,0 +1,127 @@
+/**
+ * Exit-Intent engine (#25 P2) — the CRO suite's only genuinely-new capture. Detects that a visitor is
+ * about to leave and emits `$exit_intent` + raises `ctx.signal('exit_intent')` so an engage / #21
+ * lifecycle exit-offer can fire. Combines desktop pointer-toward-top and (mobile-friendly) scroll
+ * reversal into a confidence score; deliberately does NOT use `beforeunload` (unreliable, breaks bfcache).
+ * Cooldown + per-session cap keep it from crying wolf. Positions only — no page content.
+ *
+ * ── SCOPE (docs/EXIT-INTENT-PLAN.md §7) ─────────────────────────────────────────────────────────────
+ * DOCUMENT-LEVEL SCROLLING ONLY. The listener is on `window`, and scroll events on an element do not
+ * bubble there, so nested scroll containers are excluded by construction — not by accident.
+ *
+ * The consequence worth knowing: a site whose main scroller is a `<div>` (app-shell layouts, many SPAs)
+ * never moves `window.scrollY`, so `scroll_reversal` cannot fire there however correct this code is.
+ * That needs an explicit opt-in scroll root and is deliberately out of scope.
+ *
+ * ── COVERAGE (§5) ───────────────────────────────────────────────────────────────────────────────────
+ *   desktop mouse   top_exit ✅   scroll_reversal ✅
+ *   desktop touch   top_exit ❌   scroll_reversal ✅
+ *   mobile (all)    top_exit ❌   scroll_reversal ✅    ← there is no `mouseout` on touch
+ *   keyboard / AT   top_exit ❌   scroll_reversal ❌    ← no honest signal exists; do not fake one
+ */
+import type { FeatureContext } from '@scalebun/sdk-contracts';
+export declare const EXIT_WEIGHTS: Record<string, number>;
+export declare const EXIT_THRESHOLD = 0.5;
+/**
+ * Scroll-reversal thresholds.
+ *
+ * All five are guesses until real `$exit_intent` telemetry exists, which is why they are host-tunable
+ * (`config.exitIntent`) and why the event carries `velocity_px_ms` + `distance_px`: retuning must be
+ * driven by measured distributions, not by a second guess.
+ *
+ * `minDistancePx` and `minVelocityPxMs` are NOT independent guards. At the full window
+ * `80px / 120ms = 0.67 px/ms`, which is below the 0.7 floor — so at dt = windowMs velocity binds and
+ * distance decides nothing. Distance only does work for SHORT windows (dt < ~114ms), where it stops a
+ * fast twitch qualifying. Raising `windowMs` without raising `minDistancePx` makes distance dead weight.
+ */
+export interface ReversalTuning {
+    /** How far back to measure velocity. */
+    windowMs: number;
+    /** Ignore micro-corrections — finger repositioning, overscroll settle. */
+    minDistancePx: number;
+    /** ≈700 px/s — a deliberate flick, not a drift. */
+    minVelocityPxMs: number;
+    /** Engagement floor: leaving only means something if they got somewhere first. */
+    minDepthPct: number;
+    /** Consecutive qualifying samples required (hysteresis). */
+    sustainSamples: number;
+    /**
+     * Pointer-exit band, px from the top edge. NOT a reversal knob — it belongs to the other trigger
+     * entirely — but it shares the `config.exitIntent` bag because a host tuning one will want the other,
+     * and it was the ONLY threshold here that could not be tuned at all.
+     */
+    topEdgePx: number;
+}
+export declare const REVERSAL_DEFAULTS: ReversalTuning;
+export interface ScrollSample {
+    y: number;
+    t: number;
+}
+export interface ReversalMetrics {
+    /** Positive = upward travel across the window. */
+    distancePx: number;
+    velocityPxMs: number;
+}
+/** Pointer left the document (no relatedTarget) near the top edge → heading for the chrome. */
+export declare function isTopExit(relatedTargetNull: boolean, clientY: number, topEdge?: number): boolean;
+/**
+ * Upward distance + velocity across the trailing `windowMs` of samples.
+ *
+ * THIS REPLACES a two-sample delta (`lastY - y >= 240`), which was a velocity threshold written as a
+ * per-event delta. Browsers fire `scroll` per animation frame at frame-sized increments, so that delta
+ * measured ~16ms of travel rather than the gesture — whether it tripped depended on how many scroll
+ * events the compositor happened to emit. Measured live: it never did, on any app, ever.
+ *
+ * Returns null when there is no measurable interval: fewer than two samples, or two samples in the same
+ * millisecond (dividing by that yields Infinity, which would fire on noise).
+ */
+export declare function reversalMetrics(buf: ScrollSample[], windowMs: number): ReversalMetrics | null;
+/**
+ * Stateful reversal detector — DOM-free on purpose, so the decision logic is testable by pushing a
+ * synthetic scroll trace rather than by simulating a browser.
+ *
+ * Hysteresis (§3): a single qualifying sample is not intent. Mobile scrolling contains constant small
+ * reversals — finger repositioning, rubber-band at the ends, momentum settling, sticky headers shifting
+ * perceived offset. Requiring N consecutive qualifying samples costs ~50ms at 60fps and removes them.
+ *
+ * Consecutive SAMPLES rather than a wall-clock duration, deliberately: a duration timer can be satisfied
+ * by a single sample that happens to straddle the interval — the same class of mistake as the bug this
+ * replaces.
+ */
+export declare class ScrollReversalDetector {
+    private readonly tuning;
+    private buf;
+    private sustained;
+    private maxY;
+    /**
+     * Already reported the gesture currently in progress.
+     *
+     * Without this, a 600ms flick reports on frame 3 and then again every 3rd frame after it — measured:
+     * 11 hits for one gesture. The 30s cooldown would swallow them downstream, which is exactly the
+     * problem: over-detection would be invisible during tuning. Cleared when a sample stops qualifying,
+     * i.e. when the gesture ends.
+     */
+    private latched;
+    constructor(tuning?: ReversalTuning);
+    /** Deepest scroll reached — the "did they engage before leaving" input. */
+    get maxScrollY(): number;
+    /** Consecutive qualifying samples so far. Exposed for tests + diagnostics, not for control flow. */
+    get sustainedSamples(): number;
+    /**
+     * Feed one scroll sample. Returns metrics ONLY on the sample that completes a qualifying gesture.
+     *
+     * `depthPct` and `viewportH` are passed in rather than read from the DOM so this stays pure.
+     */
+    push(y: number, t: number, depthPct: number, viewportH: number): ReversalMetrics | null;
+}
+/** Cooldown + per-session cap gate — pure so it's fixture-tested. */
+export declare function canFire(now: number, lastFire: number, fires: number, opts?: {
+    cooldownMs?: number;
+    maxFires?: number;
+}): boolean;
+export interface ExitIntentHandle {
+    stop: () => void;
+    fires: () => number;
+}
+export declare function startExitIntent(ctx: FeatureContext, tuning?: Partial<ReversalTuning>): ExitIntentHandle;
+//# sourceMappingURL=engine.d.ts.map

package/dist/features/exit-intent/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/features/exit-intent/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAG9D,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAG/C,CAAC;AACF,eAAO,MAAM,cAAc,MAAM,CAAC;AAmBlC;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAC;IACxB,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,iBAAiB,EAAE,cAO/B,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX;AAED,MAAM,WAAW,eAAe;IAC9B,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,+FAA+F;AAC/F,wBAAgB,SAAS,CAAC,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,SAAc,GAAG,OAAO,CAErG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAiB7F;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,sBAAsB;IAcrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAbnC,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,IAAI,CAAK;IACjB;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO,CAAS;gBAEK,MAAM,GAAE,cAAkC;IAEvE,2EAA2E;IAC3E,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,oGAAoG;IACpG,IAAI,gBAAgB,IAAI,MAAM,CAE7B;IAED;;;;OAIG;IACH,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;CAsCxF;AAED,qEAAqE;AACrE,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAIpI;AAID,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,IAAI,CAAC;IACjB,KAAK,EAAE,MAAM,MAAM,CAAC;CACrB;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,gBAAgB,CA0EvG"}