npm - @shipeasy/sdk - Versions diffs - 5.2.0 → 5.4.0 - Mend

@shipeasy/sdk 5.2.0 → 5.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (10) hide show

package/README.md CHANGED Viewed

@@ -53,6 +53,47 @@ const client = new FlagsClient({ sdkKey: process.env.SHIPEASY_SERVER_KEY! });
 const cfg = await client.getConfig("plan_limits", { user_id: "u-1" });
 ```
+## SSR bootstrap (flags on first paint)
+Server-render the evaluated flags / configs / experiments into the page so the
+browser SDK reads them **synchronously on first paint** — no flash, no extra
+round-trip. The `shipeasy()` server handle emits two declarative `<script>`
+tags. **No SDK key is embedded** in the bootstrap tag (the server key never
+reaches the browser).
+```tsx
+// app/layout.tsx — Next.js root layout (React Server Component)
+import { shipeasy } from "@shipeasy/sdk/server";
+export default async function RootLayout({ children }: { children: React.ReactNode }) {
+  const se = await shipeasy({ serverKey: process.env.SHIPEASY_SERVER_KEY ?? "" });
+  const boot = se.getBootstrapData({
+    // public client key — lets the i18n loader revalidate strings at runtime
+    clientKey: process.env.NEXT_PUBLIC_SHIPEASY_CLIENT_KEY,
+  });
+  return (
+    <html>
+      <body>
+        {/* Render REAL <script> elements — scripts set via
+            dangerouslySetInnerHTML do NOT execute. */}
+        <script src={boot.bootstrap.src} {...boot.bootstrap.attrs} />
+        {boot.i18nLoader && <script src={boot.i18nLoader.src} {...boot.i18nLoader.attrs} />}
+        {children}
+      </body>
+    </html>
+  );
+}
+```
+`bootstrap.src` is `https://cdn.shipeasy.ai/sdk/bootstrap.js` — a static loader
+that reads its own `data-*` attributes, hydrates `window.__SE_BOOTSTRAP`, and
+persists the `__se_anon_id` cookie so the browser buckets **identically** to the
+server. The i18n loader tag carries the SSR strings (`data-strings`) for a
+no-flash first paint plus the public client key for runtime revalidation.
+For non-React SSR (Express, raw templates), `se.getBootstrapTags()` returns the
+same two tags as an HTML string you can drop straight into the served markup.
 ## Error tracking — `see()`
 `see` (shipeasy error) is the structured error reporter — opes-style: every

package/dist/client/index.d.mts CHANGED Viewed

@@ -530,8 +530,8 @@ interface BootstrapPayload {
     /** i18n profile the server rendered with, so the client loader matches. No key is embedded. */
     i18nProfile?: string;
     apiUrl?: string;
-    /** When true, tEl() returns marker-wrapped strings for devtools label editing. */
-    editLabels?: boolean;
+    /** Stable anonymous bucketing id the server evaluated against (cross-SDK contract). */
+    anonId?: string;
 }
 /**
  * Universal flags facade. Methods return safe defaults when the singleton

package/dist/client/index.d.ts CHANGED Viewed

@@ -530,8 +530,8 @@ interface BootstrapPayload {
     /** i18n profile the server rendered with, so the client loader matches. No key is embedded. */
     i18nProfile?: string;
     apiUrl?: string;
-    /** When true, tEl() returns marker-wrapped strings for devtools label editing. */
-    editLabels?: boolean;
+    /** Stable anonymous bucketing id the server evaluated against (cross-SDK contract). */
+    anonId?: string;
 }
 /**
  * Universal flags facade. Methods return safe defaults when the singleton

package/dist/client/index.js CHANGED Viewed

@@ -768,7 +768,7 @@ function writeStickyCookie(map) {
 function getOrCreateAnonId() {
   let id = readAnonCookie();
   if (!id && typeof window !== "undefined") {
-    id = window.__SE_BOOTSTRAP?.anonId ?? null;
+    id = getBootstrap()?.anonId ?? null;
   }
   if (!id) {
     try {
@@ -1430,6 +1430,13 @@ var _i18nLoaderInjected = false;
 function injectI18nLoader(clientKey, baseUrl, profileOpt) {
   if (_i18nLoaderInjected || typeof document === "undefined") return;
   if (!clientKey || typeof document.createElement !== "function" || !document.head) return;
+  try {
+    if (document.querySelector?.('script[src*="/sdk/i18n/loader.js"][data-key]')) {
+      _i18nLoaderInjected = true;
+      return;
+    }
+  } catch {
+  }
   _i18nLoaderInjected = true;
   try {
     const bs = getBootstrap();
@@ -1442,9 +1449,36 @@ function injectI18nLoader(clientKey, baseUrl, profileOpt) {
   } catch {
   }
 }
+var _bootstrapFromTag = null;
+function readBootstrapTag() {
+  if (_bootstrapFromTag) return _bootstrapFromTag;
+  if (typeof document === "undefined" || typeof document.querySelector !== "function") return null;
+  const el = document.querySelector("script[data-se-bootstrap]");
+  if (!el) return null;
+  const J = (name) => {
+    try {
+      return JSON.parse(el.getAttribute(name) || "{}");
+    } catch {
+      return {};
+    }
+  };
+  const bs = {
+    flags: J("data-flags"),
+    configs: J("data-configs"),
+    experiments: J("data-experiments"),
+    killswitches: J("data-killswitches"),
+    i18nProfile: el.getAttribute("data-i18n-profile") || void 0,
+    apiUrl: el.getAttribute("data-api-url") || void 0,
+    anonId: el.getAttribute("data-anon-id") || void 0
+  };
+  _bootstrapFromTag = bs;
+  return bs;
+}
 function getBootstrap() {
   if (typeof window === "undefined") return null;
-  return window.__SE_BOOTSTRAP ?? null;
+  const g = window.__SE_BOOTSTRAP;
+  if (g) return g;
+  return readBootstrapTag();
 }
 var _mountedAndReady = false;
 var _standaloneListeners = /* @__PURE__ */ new Set();
@@ -1623,7 +1657,7 @@ function getSSRI18nStore() {
 var _EDIT_MODE_FALLBACK_SYM = /* @__PURE__ */ Symbol.for("@shipeasy/sdk:ssr-edit-mode-fallback");
 function isEditLabelsMode() {
   if (typeof window !== "undefined") {
-    return !!window.__SE_BOOTSTRAP?.editLabels || new URLSearchParams(location.search).has("se_edit_labels");
+    return new URLSearchParams(location.search).has("se_edit_labels") || /(?:^|;\s*)se_edit_labels=1(?:;|$)/.test(document.cookie);
   }
   const val = globalThis[_EDIT_MODE_SSR_SYM];
   if (typeof val === "boolean") return val;

package/dist/client/index.mjs CHANGED Viewed

@@ -719,7 +719,7 @@ function writeStickyCookie(map) {
 function getOrCreateAnonId() {
   let id = readAnonCookie();
   if (!id && typeof window !== "undefined") {
-    id = window.__SE_BOOTSTRAP?.anonId ?? null;
+    id = getBootstrap()?.anonId ?? null;
   }
   if (!id) {
     try {
@@ -1381,6 +1381,13 @@ var _i18nLoaderInjected = false;
 function injectI18nLoader(clientKey, baseUrl, profileOpt) {
   if (_i18nLoaderInjected || typeof document === "undefined") return;
   if (!clientKey || typeof document.createElement !== "function" || !document.head) return;
+  try {
+    if (document.querySelector?.('script[src*="/sdk/i18n/loader.js"][data-key]')) {
+      _i18nLoaderInjected = true;
+      return;
+    }
+  } catch {
+  }
   _i18nLoaderInjected = true;
   try {
     const bs = getBootstrap();
@@ -1393,9 +1400,36 @@ function injectI18nLoader(clientKey, baseUrl, profileOpt) {
   } catch {
   }
 }
+var _bootstrapFromTag = null;
+function readBootstrapTag() {
+  if (_bootstrapFromTag) return _bootstrapFromTag;
+  if (typeof document === "undefined" || typeof document.querySelector !== "function") return null;
+  const el = document.querySelector("script[data-se-bootstrap]");
+  if (!el) return null;
+  const J = (name) => {
+    try {
+      return JSON.parse(el.getAttribute(name) || "{}");
+    } catch {
+      return {};
+    }
+  };
+  const bs = {
+    flags: J("data-flags"),
+    configs: J("data-configs"),
+    experiments: J("data-experiments"),
+    killswitches: J("data-killswitches"),
+    i18nProfile: el.getAttribute("data-i18n-profile") || void 0,
+    apiUrl: el.getAttribute("data-api-url") || void 0,
+    anonId: el.getAttribute("data-anon-id") || void 0
+  };
+  _bootstrapFromTag = bs;
+  return bs;
+}
 function getBootstrap() {
   if (typeof window === "undefined") return null;
-  return window.__SE_BOOTSTRAP ?? null;
+  const g = window.__SE_BOOTSTRAP;
+  if (g) return g;
+  return readBootstrapTag();
 }
 var _mountedAndReady = false;
 var _standaloneListeners = /* @__PURE__ */ new Set();
@@ -1574,7 +1608,7 @@ function getSSRI18nStore() {
 var _EDIT_MODE_FALLBACK_SYM = /* @__PURE__ */ Symbol.for("@shipeasy/sdk:ssr-edit-mode-fallback");
 function isEditLabelsMode() {
   if (typeof window !== "undefined") {
-    return !!window.__SE_BOOTSTRAP?.editLabels || new URLSearchParams(location.search).has("se_edit_labels");
+    return new URLSearchParams(location.search).has("se_edit_labels") || /(?:^|;\s*)se_edit_labels=1(?:;|$)/.test(document.cookie);
   }
   const val = globalThis[_EDIT_MODE_SSR_SYM];
   if (typeof val === "boolean") return val;

package/dist/server/index.d.mts CHANGED Viewed

@@ -477,8 +477,22 @@ interface ShipeasyServerHandle {
     flags: Record<string, boolean>;
     configs: Record<string, unknown>;
     experiments: Record<string, ExperimentResult<Record<string, unknown>>>;
-    /** Returns a vanilla-JS string for a single inline <script> tag. */
-    getBootstrapHtml(): string;
+    /**
+     * Structured `<script>` tag specs to drop into the document head: the
+     * cross-platform `se-bootstrap.js` tag (hydrates window.__SE_BOOTSTRAP +
+     * writes the anon cookie) and, when there are SSR strings or a client key,
+     * the i18n loader tag. Use this in React: scripts inserted via
+     * `dangerouslySetInnerHTML` do NOT execute, so render real `<script>`
+     * elements from these specs (see apps/ui root layout).
+     */
+    getBootstrapData(emit?: BootstrapEmitOptions): BootstrapData;
+    /**
+     * The same tags rendered as an HTML string, for non-React SSR (Express, raw
+     * templates) where the markup is emitted directly into the served HTML (and
+     * therefore executes normally). This is the canonical cross-platform shape
+     * every server SDK mirrors.
+     */
+    getBootstrapTags(emit?: BootstrapEmitOptions): string;
 }
 /**
  * Initialise the ShipEasy server SDK, evaluate flags for this request, and
@@ -487,35 +501,51 @@ interface ShipeasyServerHandle {
  * payloads and i18n falls back to hardcoded strings.
  */
 declare function shipeasy(opts: ShipeasyServerConfig): Promise<ShipeasyServerHandle>;
-interface BootstrapHtmlOptions {
-    /** i18n profile recorded in the bootstrap so the client loader matches SSR. Defaults to "en:prod". */
+interface BootstrapEmitOptions {
+    /** i18n profile recorded on both tags so the client loader matches SSR. Defaults to "en:prod". */
     i18nProfile?: string;
-    /** When true, tEl() embeds label markers so the devtools can highlight them. */
-    editLabels?: boolean;
     /**
-     * Stable anonymous bucketing id the server evaluated against. Emitted into
-     * window.__SE_BOOTSTRAP and persisted (pre-paint) to the first-party
-     * `__se_anon_id` cookie, so the browser SDK buckets identically to SSR.
-     * Normally minted by edge middleware; this write is the fallback for routes
-     * middleware doesn't cover. See experiment-platform/18-identity-bucketing.md.
+     * Stable anonymous bucketing id the server evaluated against. Emitted as
+     * `data-anon-id`; se-bootstrap.js exposes it on window.__SE_BOOTSTRAP and
+     * persists it (pre-paint) to the first-party `__se_anon_id` cookie, so the
+     * browser SDK buckets identically to SSR. Normally minted by edge
+     * middleware; this is the fallback for routes it doesn't cover. See
+     * experiment-platform/18-identity-bucketing.md.
      */
     anonId?: string;
+    /**
+     * Public client key. When provided, the i18n loader tag can revalidate
+     * strings at runtime (`data-key`). Optional — the bootstrap tag NEVER carries
+     * a key, and SSR first paint works keyless via `data-strings`.
+     */
+    clientKey?: string;
+    /** CDN base for the tag `src`s. Defaults to https://cdn.shipeasy.ai. */
+    baseUrl?: string;
+}
+interface ScriptTagSpec {
+    src: string;
+    /** Attribute name → value. An empty-string value renders as a bare boolean attribute (e.g. `data-se-bootstrap`). */
+    attrs: Record<string, string>;
+}
+interface BootstrapData {
+    /** se-bootstrap.js tag — always present. */
+    bootstrap: ScriptTagSpec;
+    /** i18n loader tag — null when there are no SSR strings and no client key. */
+    i18nLoader: ScriptTagSpec | null;
 }
 /**
- * Returns a vanilla-JS string for a single inline <script> tag. Handles
- * everything the client needs at startup EXCEPT the key — no SDK key is ever
- * embedded here (the server only knows the server key, which must stay
- * server-side). The browser supplies its own client key via
- * `shipeasy({ clientKey })` from @shipeasy/sdk/client, which also injects the
- * runtime i18n loader. This script emits:
- *   - window.__se_devtools_config (when devtoolsAdminUrl is set)
- *   - window.__SE_BOOTSTRAP (flags + configs + experiments + i18n DATA + i18nProfile, NO key)
- *   - window.i18n shim from SSR strings (prevents hydration mismatches / FOUC)
- *   - devtools overlay loader when ?se / ?se_devtools is present
- *
- * Framework-agnostic: set innerHTML on a <script> element, nothing else required.
+ * Build the structured `<script>` tag specs for the SSR bootstrap. Render
+ * these as REAL `<script>` elements (React: scripts set via innerHTML do not
+ * execute). No SDK key is ever embedded in the bootstrap tag.
+ */
+declare function getBootstrapData(bootstrap: BootstrapPayload | null, i18nData: I18nForRequest | null, opts: BootstrapEmitOptions): BootstrapData;
+/**
+ * The bootstrap (and optional i18n loader) tags as an HTML string, for non-React
+ * SSR (Express, raw templates) where the markup is emitted directly into the
+ * served HTML and executes normally. React callers should use
+ * {@link getBootstrapData} and render real `<script>` elements instead.
  */
-declare function getBootstrapHtml(bootstrap: BootstrapPayload | null, i18nData: I18nForRequest | null, opts: BootstrapHtmlOptions): string;
+declare function getBootstrapTags(bootstrap: BootstrapPayload | null, i18nData: I18nForRequest | null, opts: BootstrapEmitOptions): string;
 declare const flags: {
     configure(opts: FlagsClientOptions): void;
     /**
@@ -600,4 +630,4 @@ interface SeeApi {
  */
 declare const see: SeeApi;
-export { ANON_ID_COOKIE, type BootstrapHtmlOptions, type BootstrapPayload, type Consequence, type ExperimentResult, type ExpsBlob, FLAG_REASONS, type FetchLabelsOptions, type FlagDetail, type FlagReason, type FlagsBlob, FlagsClient, type FlagsClientEnv, type FlagsClientOptions, type GetConfigOptions, type I18nForRequest, type LabelFile, type SeeApi, type SeeChain, type SeeControlFlowChain, type SeeErrorEvent, type SeeExtras, type SeeKind, type SeeViolationChain, type ShipeasyServerConfig, type ShipeasyServerHandle, type StickyBucketStore, type StickyEntry, type User, type Violation, _murmur3ForTests, _resetShipeasyServerForTests, configureShipeasyServer, createInMemoryStickyStore, fetchLabelsForSSR, flags, getBootstrapHtml, getShipeasyServerClient, i18n, isExpected, see, seeContext, shipeasy, version };
+export { ANON_ID_COOKIE, type BootstrapData, type BootstrapEmitOptions, type BootstrapPayload, type Consequence, type ExperimentResult, type ExpsBlob, FLAG_REASONS, type FetchLabelsOptions, type FlagDetail, type FlagReason, type FlagsBlob, FlagsClient, type FlagsClientEnv, type FlagsClientOptions, type GetConfigOptions, type I18nForRequest, type LabelFile, type ScriptTagSpec, type SeeApi, type SeeChain, type SeeControlFlowChain, type SeeErrorEvent, type SeeExtras, type SeeKind, type SeeViolationChain, type ShipeasyServerConfig, type ShipeasyServerHandle, type StickyBucketStore, type StickyEntry, type User, type Violation, _murmur3ForTests, _resetShipeasyServerForTests, configureShipeasyServer, createInMemoryStickyStore, fetchLabelsForSSR, flags, getBootstrapData, getBootstrapTags, getShipeasyServerClient, i18n, isExpected, see, seeContext, shipeasy, version };

package/dist/server/index.d.ts CHANGED Viewed

@@ -477,8 +477,22 @@ interface ShipeasyServerHandle {
     flags: Record<string, boolean>;
     configs: Record<string, unknown>;
     experiments: Record<string, ExperimentResult<Record<string, unknown>>>;
-    /** Returns a vanilla-JS string for a single inline <script> tag. */
-    getBootstrapHtml(): string;
+    /**
+     * Structured `<script>` tag specs to drop into the document head: the
+     * cross-platform `se-bootstrap.js` tag (hydrates window.__SE_BOOTSTRAP +
+     * writes the anon cookie) and, when there are SSR strings or a client key,
+     * the i18n loader tag. Use this in React: scripts inserted via
+     * `dangerouslySetInnerHTML` do NOT execute, so render real `<script>`
+     * elements from these specs (see apps/ui root layout).
+     */
+    getBootstrapData(emit?: BootstrapEmitOptions): BootstrapData;
+    /**
+     * The same tags rendered as an HTML string, for non-React SSR (Express, raw
+     * templates) where the markup is emitted directly into the served HTML (and
+     * therefore executes normally). This is the canonical cross-platform shape
+     * every server SDK mirrors.
+     */
+    getBootstrapTags(emit?: BootstrapEmitOptions): string;
 }
 /**
  * Initialise the ShipEasy server SDK, evaluate flags for this request, and
@@ -487,35 +501,51 @@ interface ShipeasyServerHandle {
  * payloads and i18n falls back to hardcoded strings.
  */
 declare function shipeasy(opts: ShipeasyServerConfig): Promise<ShipeasyServerHandle>;
-interface BootstrapHtmlOptions {
-    /** i18n profile recorded in the bootstrap so the client loader matches SSR. Defaults to "en:prod". */
+interface BootstrapEmitOptions {
+    /** i18n profile recorded on both tags so the client loader matches SSR. Defaults to "en:prod". */
     i18nProfile?: string;
-    /** When true, tEl() embeds label markers so the devtools can highlight them. */
-    editLabels?: boolean;
     /**
-     * Stable anonymous bucketing id the server evaluated against. Emitted into
-     * window.__SE_BOOTSTRAP and persisted (pre-paint) to the first-party
-     * `__se_anon_id` cookie, so the browser SDK buckets identically to SSR.
-     * Normally minted by edge middleware; this write is the fallback for routes
-     * middleware doesn't cover. See experiment-platform/18-identity-bucketing.md.
+     * Stable anonymous bucketing id the server evaluated against. Emitted as
+     * `data-anon-id`; se-bootstrap.js exposes it on window.__SE_BOOTSTRAP and
+     * persists it (pre-paint) to the first-party `__se_anon_id` cookie, so the
+     * browser SDK buckets identically to SSR. Normally minted by edge
+     * middleware; this is the fallback for routes it doesn't cover. See
+     * experiment-platform/18-identity-bucketing.md.
      */
     anonId?: string;
+    /**
+     * Public client key. When provided, the i18n loader tag can revalidate
+     * strings at runtime (`data-key`). Optional — the bootstrap tag NEVER carries
+     * a key, and SSR first paint works keyless via `data-strings`.
+     */
+    clientKey?: string;
+    /** CDN base for the tag `src`s. Defaults to https://cdn.shipeasy.ai. */
+    baseUrl?: string;
+}
+interface ScriptTagSpec {
+    src: string;
+    /** Attribute name → value. An empty-string value renders as a bare boolean attribute (e.g. `data-se-bootstrap`). */
+    attrs: Record<string, string>;
+}
+interface BootstrapData {
+    /** se-bootstrap.js tag — always present. */
+    bootstrap: ScriptTagSpec;
+    /** i18n loader tag — null when there are no SSR strings and no client key. */
+    i18nLoader: ScriptTagSpec | null;
 }
 /**
- * Returns a vanilla-JS string for a single inline <script> tag. Handles
- * everything the client needs at startup EXCEPT the key — no SDK key is ever
- * embedded here (the server only knows the server key, which must stay
- * server-side). The browser supplies its own client key via
- * `shipeasy({ clientKey })` from @shipeasy/sdk/client, which also injects the
- * runtime i18n loader. This script emits:
- *   - window.__se_devtools_config (when devtoolsAdminUrl is set)
- *   - window.__SE_BOOTSTRAP (flags + configs + experiments + i18n DATA + i18nProfile, NO key)
- *   - window.i18n shim from SSR strings (prevents hydration mismatches / FOUC)
- *   - devtools overlay loader when ?se / ?se_devtools is present
- *
- * Framework-agnostic: set innerHTML on a <script> element, nothing else required.
+ * Build the structured `<script>` tag specs for the SSR bootstrap. Render
+ * these as REAL `<script>` elements (React: scripts set via innerHTML do not
+ * execute). No SDK key is ever embedded in the bootstrap tag.
+ */
+declare function getBootstrapData(bootstrap: BootstrapPayload | null, i18nData: I18nForRequest | null, opts: BootstrapEmitOptions): BootstrapData;
+/**
+ * The bootstrap (and optional i18n loader) tags as an HTML string, for non-React
+ * SSR (Express, raw templates) where the markup is emitted directly into the
+ * served HTML and executes normally. React callers should use
+ * {@link getBootstrapData} and render real `<script>` elements instead.
  */
-declare function getBootstrapHtml(bootstrap: BootstrapPayload | null, i18nData: I18nForRequest | null, opts: BootstrapHtmlOptions): string;
+declare function getBootstrapTags(bootstrap: BootstrapPayload | null, i18nData: I18nForRequest | null, opts: BootstrapEmitOptions): string;
 declare const flags: {
     configure(opts: FlagsClientOptions): void;
     /**
@@ -600,4 +630,4 @@ interface SeeApi {
  */
 declare const see: SeeApi;
-export { ANON_ID_COOKIE, type BootstrapHtmlOptions, type BootstrapPayload, type Consequence, type ExperimentResult, type ExpsBlob, FLAG_REASONS, type FetchLabelsOptions, type FlagDetail, type FlagReason, type FlagsBlob, FlagsClient, type FlagsClientEnv, type FlagsClientOptions, type GetConfigOptions, type I18nForRequest, type LabelFile, type SeeApi, type SeeChain, type SeeControlFlowChain, type SeeErrorEvent, type SeeExtras, type SeeKind, type SeeViolationChain, type ShipeasyServerConfig, type ShipeasyServerHandle, type StickyBucketStore, type StickyEntry, type User, type Violation, _murmur3ForTests, _resetShipeasyServerForTests, configureShipeasyServer, createInMemoryStickyStore, fetchLabelsForSSR, flags, getBootstrapHtml, getShipeasyServerClient, i18n, isExpected, see, seeContext, shipeasy, version };
+export { ANON_ID_COOKIE, type BootstrapData, type BootstrapEmitOptions, type BootstrapPayload, type Consequence, type ExperimentResult, type ExpsBlob, FLAG_REASONS, type FetchLabelsOptions, type FlagDetail, type FlagReason, type FlagsBlob, FlagsClient, type FlagsClientEnv, type FlagsClientOptions, type GetConfigOptions, type I18nForRequest, type LabelFile, type ScriptTagSpec, type SeeApi, type SeeChain, type SeeControlFlowChain, type SeeErrorEvent, type SeeExtras, type SeeKind, type SeeViolationChain, type ShipeasyServerConfig, type ShipeasyServerHandle, type StickyBucketStore, type StickyEntry, type User, type Violation, _murmur3ForTests, _resetShipeasyServerForTests, configureShipeasyServer, createInMemoryStickyStore, fetchLabelsForSSR, flags, getBootstrapData, getBootstrapTags, getShipeasyServerClient, i18n, isExpected, see, seeContext, shipeasy, version };

package/dist/server/index.js CHANGED Viewed

@@ -39,7 +39,8 @@ __export(server_exports, {
   createInMemoryStickyStore: () => createInMemoryStickyStore,
   fetchLabelsForSSR: () => fetchLabelsForSSR,
   flags: () => flags,
-  getBootstrapHtml: () => getBootstrapHtml,
+  getBootstrapData: () => getBootstrapData,
+  getBootstrapTags: () => getBootstrapTags,
   getShipeasyServerClient: () => getShipeasyServerClient,
   i18n: () => i18n,
   isExpected: () => isExpected,
@@ -1161,49 +1162,62 @@ async function shipeasy(opts) {
     flags: bootstrap.flags,
     configs: bootstrap.configs,
     experiments: bootstrap.experiments,
-    getBootstrapHtml() {
-      return getBootstrapHtml(bootstrap, i18nData, {
-        editLabels,
+    getBootstrapData(emit) {
+      return getBootstrapData(bootstrap, i18nData, {
         i18nProfile: profile,
-        anonId
+        anonId,
+        ...emit
+      });
+    },
+    getBootstrapTags(emit) {
+      return getBootstrapTags(bootstrap, i18nData, {
+        i18nProfile: profile,
+        anonId,
+        ...emit
       });
     }
   };
 }
-function getBootstrapHtml(bootstrap, i18nData, opts) {
-  const parts = [];
-  const apiUrl = "https://cdn.shipeasy.ai";
+var DEFAULT_CDN = "https://cdn.shipeasy.ai";
+function getBootstrapData(bootstrap, i18nData, opts) {
+  const base = (opts.baseUrl ?? DEFAULT_CDN).replace(/\/$/, "");
   const profile = opts.i18nProfile ?? "en:prod";
-  const payload = {
-    flags: bootstrap?.flags ?? {},
-    configs: bootstrap?.configs ?? {},
-    experiments: bootstrap?.experiments ?? {},
-    // No key here — the server only knows the server key, which must never reach
-    // the browser. The client supplies its own client key via shipeasy({ clientKey }).
-    i18nProfile: profile,
-    apiUrl
+  const attrs = {
+    "data-se-bootstrap": "",
+    "data-flags": JSON.stringify(bootstrap?.flags ?? {}),
+    "data-configs": JSON.stringify(bootstrap?.configs ?? {}),
+    "data-experiments": JSON.stringify(bootstrap?.experiments ?? {}),
+    "data-killswitches": JSON.stringify(bootstrap?.killswitches ?? {}),
+    "data-i18n-profile": profile,
+    "data-api-url": base
   };
-  if (i18nData) payload.i18n = i18nData;
-  if (opts.editLabels) payload.editLabels = true;
-  if (opts.anonId) payload.anonId = opts.anonId;
-  parts.push(
-    `(function(){var Q=new URLSearchParams(location.search).has('se_edit_labels');var C=/(?:^|;\\s*)se_edit_labels=1(?:;|$)/.test(document.cookie);if(!Q&&!C)return;if(Q){try{document.cookie='se_edit_labels=1;path=/;max-age=86400;samesite=lax';}catch(_){}}var R;function P(v){if(!v||typeof v.t!=='function'||v.__sePatched)return;var O=v.t.bind(v);v.__sePatched=true;window._sei18n_t=O;v.t=function(k,vars){var r=O(k,vars);if(r===k)return k;var V='';try{if(vars&&typeof vars==='object'){var hasKey=false;for(var _k in vars){hasKey=true;break;}if(hasKey)V=JSON.stringify(vars);}}catch(_){V='';}return '\\uFFF9'+k+'\\uFFFA'+V+'\\uFFFA'+r+'\\uFFFB';};}Object.defineProperty(window,'i18n',{configurable:true,get:function(){return R;},set:function(v){P(v);R=v;}});})();`
-  );
-  parts.push(`window.__SE_BOOTSTRAP=${JSON.stringify(payload)};`);
-  if (opts.anonId) {
-    parts.push(
-      `(function(){try{var k=${JSON.stringify(ANON_ID_COOKIE)},v=${JSON.stringify(opts.anonId)};if(('; '+document.cookie).indexOf('; '+k+'=')===-1){document.cookie=k+'='+v+';path=/;max-age=31536000;samesite=lax'+(location.protocol==='https:'?';secure':'');}}catch(_){}})();`
-    );
-  }
-  if (i18nData?.strings && Object.keys(i18nData.strings).length > 0) {
-    parts.push(
-      `(function(){var d=window.__SE_BOOTSTRAP.i18n;if(!d)return;window.i18n={locale:d.locale,t:function(k,v){var r=d.strings[k];if(!r)return k;return v?r.replace(/\\{\\{(\\w+)\\}\\}/g,function(_,p){return v[p]!==undefined?String(v[p]):'{{'+p+'}}'}):r;},on:function(){return function(){};}};})();`
-    );
+  if (opts.anonId) attrs["data-anon-id"] = opts.anonId;
+  const bootstrapTag = { src: `${base}/sdk/bootstrap.js`, attrs };
+  let i18nLoader = null;
+  const hasStrings = !!(i18nData?.strings && Object.keys(i18nData.strings).length > 0);
+  if (hasStrings || opts.clientKey) {
+    const i18nAttrs = { "data-profile": profile };
+    if (opts.clientKey) i18nAttrs["data-key"] = opts.clientKey;
+    if (hasStrings) {
+      i18nAttrs["data-strings"] = JSON.stringify(i18nData.strings);
+      i18nAttrs["data-locale"] = i18nData.locale;
+    }
+    i18nLoader = { src: `${base}/sdk/i18n/loader.js`, attrs: i18nAttrs };
   }
-  parts.push(
-    `(function(){var p=new URLSearchParams(location.search);if(p.has('se')||p.has('se_devtools')){var d=document.createElement('script');d.src='https://shipeasy.ai/se-devtools.js';document.head.appendChild(d);}})();`
-  );
-  return parts.join("");
+  return { bootstrap: bootstrapTag, i18nLoader };
+}
+function escapeAttr(v) {
+  return v.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function renderScriptTag(spec) {
+  const attrs = Object.entries(spec.attrs).map(([k, v]) => v === "" ? ` ${k}` : ` ${k}="${escapeAttr(v)}"`).join("");
+  return `<script src="${escapeAttr(spec.src)}"${attrs}></script>`;
+}
+function getBootstrapTags(bootstrap, i18nData, opts) {
+  const data = getBootstrapData(bootstrap, i18nData, opts);
+  const tags = [data.bootstrap];
+  if (data.i18nLoader) tags.push(data.i18nLoader);
+  return tags.map(renderScriptTag).join("");
 }
 var flags = {
   configure(opts) {
@@ -1298,7 +1312,8 @@ var see = Object.assign(
   createInMemoryStickyStore,
   fetchLabelsForSSR,
   flags,
-  getBootstrapHtml,
+  getBootstrapData,
+  getBootstrapTags,
   getShipeasyServerClient,
   i18n,
   isExpected,

package/dist/server/index.mjs CHANGED Viewed

@@ -1118,49 +1118,62 @@ async function shipeasy(opts) {
     flags: bootstrap.flags,
     configs: bootstrap.configs,
     experiments: bootstrap.experiments,
-    getBootstrapHtml() {
-      return getBootstrapHtml(bootstrap, i18nData, {
-        editLabels,
+    getBootstrapData(emit) {
+      return getBootstrapData(bootstrap, i18nData, {
         i18nProfile: profile,
-        anonId
+        anonId,
+        ...emit
+      });
+    },
+    getBootstrapTags(emit) {
+      return getBootstrapTags(bootstrap, i18nData, {
+        i18nProfile: profile,
+        anonId,
+        ...emit
       });
     }
   };
 }
-function getBootstrapHtml(bootstrap, i18nData, opts) {
-  const parts = [];
-  const apiUrl = "https://cdn.shipeasy.ai";
+var DEFAULT_CDN = "https://cdn.shipeasy.ai";
+function getBootstrapData(bootstrap, i18nData, opts) {
+  const base = (opts.baseUrl ?? DEFAULT_CDN).replace(/\/$/, "");
   const profile = opts.i18nProfile ?? "en:prod";
-  const payload = {
-    flags: bootstrap?.flags ?? {},
-    configs: bootstrap?.configs ?? {},
-    experiments: bootstrap?.experiments ?? {},
-    // No key here — the server only knows the server key, which must never reach
-    // the browser. The client supplies its own client key via shipeasy({ clientKey }).
-    i18nProfile: profile,
-    apiUrl
+  const attrs = {
+    "data-se-bootstrap": "",
+    "data-flags": JSON.stringify(bootstrap?.flags ?? {}),
+    "data-configs": JSON.stringify(bootstrap?.configs ?? {}),
+    "data-experiments": JSON.stringify(bootstrap?.experiments ?? {}),
+    "data-killswitches": JSON.stringify(bootstrap?.killswitches ?? {}),
+    "data-i18n-profile": profile,
+    "data-api-url": base
   };
-  if (i18nData) payload.i18n = i18nData;
-  if (opts.editLabels) payload.editLabels = true;
-  if (opts.anonId) payload.anonId = opts.anonId;
-  parts.push(
-    `(function(){var Q=new URLSearchParams(location.search).has('se_edit_labels');var C=/(?:^|;\\s*)se_edit_labels=1(?:;|$)/.test(document.cookie);if(!Q&&!C)return;if(Q){try{document.cookie='se_edit_labels=1;path=/;max-age=86400;samesite=lax';}catch(_){}}var R;function P(v){if(!v||typeof v.t!=='function'||v.__sePatched)return;var O=v.t.bind(v);v.__sePatched=true;window._sei18n_t=O;v.t=function(k,vars){var r=O(k,vars);if(r===k)return k;var V='';try{if(vars&&typeof vars==='object'){var hasKey=false;for(var _k in vars){hasKey=true;break;}if(hasKey)V=JSON.stringify(vars);}}catch(_){V='';}return '\\uFFF9'+k+'\\uFFFA'+V+'\\uFFFA'+r+'\\uFFFB';};}Object.defineProperty(window,'i18n',{configurable:true,get:function(){return R;},set:function(v){P(v);R=v;}});})();`
-  );
-  parts.push(`window.__SE_BOOTSTRAP=${JSON.stringify(payload)};`);
-  if (opts.anonId) {
-    parts.push(
-      `(function(){try{var k=${JSON.stringify(ANON_ID_COOKIE)},v=${JSON.stringify(opts.anonId)};if(('; '+document.cookie).indexOf('; '+k+'=')===-1){document.cookie=k+'='+v+';path=/;max-age=31536000;samesite=lax'+(location.protocol==='https:'?';secure':'');}}catch(_){}})();`
-    );
-  }
-  if (i18nData?.strings && Object.keys(i18nData.strings).length > 0) {
-    parts.push(
-      `(function(){var d=window.__SE_BOOTSTRAP.i18n;if(!d)return;window.i18n={locale:d.locale,t:function(k,v){var r=d.strings[k];if(!r)return k;return v?r.replace(/\\{\\{(\\w+)\\}\\}/g,function(_,p){return v[p]!==undefined?String(v[p]):'{{'+p+'}}'}):r;},on:function(){return function(){};}};})();`
-    );
+  if (opts.anonId) attrs["data-anon-id"] = opts.anonId;
+  const bootstrapTag = { src: `${base}/sdk/bootstrap.js`, attrs };
+  let i18nLoader = null;
+  const hasStrings = !!(i18nData?.strings && Object.keys(i18nData.strings).length > 0);
+  if (hasStrings || opts.clientKey) {
+    const i18nAttrs = { "data-profile": profile };
+    if (opts.clientKey) i18nAttrs["data-key"] = opts.clientKey;
+    if (hasStrings) {
+      i18nAttrs["data-strings"] = JSON.stringify(i18nData.strings);
+      i18nAttrs["data-locale"] = i18nData.locale;
+    }
+    i18nLoader = { src: `${base}/sdk/i18n/loader.js`, attrs: i18nAttrs };
   }
-  parts.push(
-    `(function(){var p=new URLSearchParams(location.search);if(p.has('se')||p.has('se_devtools')){var d=document.createElement('script');d.src='https://shipeasy.ai/se-devtools.js';document.head.appendChild(d);}})();`
-  );
-  return parts.join("");
+  return { bootstrap: bootstrapTag, i18nLoader };
+}
+function escapeAttr(v) {
+  return v.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function renderScriptTag(spec) {
+  const attrs = Object.entries(spec.attrs).map(([k, v]) => v === "" ? ` ${k}` : ` ${k}="${escapeAttr(v)}"`).join("");
+  return `<script src="${escapeAttr(spec.src)}"${attrs}></script>`;
+}
+function getBootstrapTags(bootstrap, i18nData, opts) {
+  const data = getBootstrapData(bootstrap, i18nData, opts);
+  const tags = [data.bootstrap];
+  if (data.i18nLoader) tags.push(data.i18nLoader);
+  return tags.map(renderScriptTag).join("");
 }
 var flags = {
   configure(opts) {
@@ -1254,7 +1267,8 @@ export {
   createInMemoryStickyStore,
   fetchLabelsForSSR,
   flags,
-  getBootstrapHtml,
+  getBootstrapData,
+  getBootstrapTags,
   getShipeasyServerClient,
   i18n,
   isExpected,

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@shipeasy/sdk",
-  "version": "5.2.0",
+  "version": "5.4.0",
   "description": "Shipeasy SDK — feature gates, runtime configs, experiments, and metrics for the Shipeasy hosted service.",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://shipeasy.ai",