@shware/analytics 8.1.0 → 8.2.0

package/dist/_virtual/_rolldown/runtime.cjs

@@ -16,7 +16,7 @@ var __copyProps = (to, from, except, desc) => {
 	}
 	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
 	value: mod,
 	enumerable: true
 }) : target, mod));

package/dist/_virtual/_rolldown/runtime.mjs

@@ -16,7 +16,7 @@ var __copyProps = (to, from, except, desc) => {
 	}
 	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
 	value: mod,
 	enumerable: true
 }) : target, mod));

package/dist/click-id/index.cjs

@@ -2,7 +2,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let cookie = require("cookie");
 //#region src/click-id/index.ts
 /**
-* Server-side resolution of ad-click-id cookies (`_fbc`, `_rdt_cid`) from the incoming request.
+* Server-side resolution of ad-click-id cookies (`_fbc`, `_gcl_aw`/`_gcl_gb`, `_rdt_cid`) from
+* the incoming request.
 *
 * This is the framework-agnostic core meant to run on the *document* response (e.g. TanStack Start
 * server middleware, Next middleware). Setting `_fbc` via an HTTP `Set-Cookie` header on the top
@@ -13,11 +14,14 @@ let cookie = require("cookie");
 *
 * reference: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters/fbp-and-fbc
 */
-const FBC_TTL_MS = 2160 * 60 * 60 * 1e3;
-const RDT_CID_TTL_MS = 2160 * 60 * 60 * 1e3;
-const CLOCK_SKEW_MS = 1440 * 60 * 1e3;
+const FBC_TTL_MS = 7776e6;
+const RDT_CID_TTL_MS = 7776e6;
+const GCL_TTL_MS = 7776e6;
+const CLOCK_SKEW_MS = 864e5;
 const FBC_COOKIE = "_fbc";
 const RDT_CID_COOKIE = "_rdt_cid";
+const GCL_AW_COOKIE = "_gcl_aw";
+const GCL_GB_COOKIE = "_gcl_gb";
 /**
 * Parse `fb.<subdomainIndex>.<creationTime>.<fbclid>`.
 * Returns undefined for anything malformed — a fbclid never contains a dot, but joining the tail
@@ -45,6 +49,34 @@ function parseFbc(raw, now = Date.now()) {
 function formatFbc(fbclid, now, subdomainIndex = 1) {
 	return `fb.${subdomainIndex}.${now}.${fbclid}`;
 }
+const GCL_CLICK_ID = /^[\w-]+$/;
+/**
+* Parse a `_gcl_aw`/`_gcl_gb` value: `GCL.<seconds>.<clickId>[.<labels…>]` — note the timestamp
+* is in SECONDS, unlike `_fbc`'s milliseconds. gtag's parser accepts version `GCL` or `1` and
+* validates the segments exactly this way (`/^\d+$/` timestamp, `/^[\w-]+$/` click id); any
+* labels tail is preserved through `raw` so a re-issue stays byte-identical.
+*/
+function parseGcl(raw, now = Date.now()) {
+	if (!raw) return void 0;
+	const parts = raw.split(".");
+	if (parts.length < 3) return void 0;
+	if (parts[0] !== "GCL" && parts[0] !== "1") return void 0;
+	const seconds = parts[1];
+	const clickId = parts[2];
+	if (seconds === void 0 || !/^\d+$/.test(seconds)) return void 0;
+	if (clickId === void 0 || !GCL_CLICK_ID.test(clickId)) return void 0;
+	const creationTime = Number(seconds) * 1e3;
+	if (creationTime >= 0x38d7ea4c68000 || creationTime > now + CLOCK_SKEW_MS) return void 0;
+	return {
+		raw,
+		creationTime,
+		clickId
+	};
+}
+/** Build a fresh `_gcl_aw`/`_gcl_gb` value in gtag's own format. */
+function formatGcl(clickId, now) {
+	return `GCL.${Math.floor(now / 1e3)}.${clickId}`;
+}
 function searchParams(url) {
 	try {
 		return new URL(url).searchParams;
@@ -102,6 +134,29 @@ function resolveClickIdCookies(input) {
 			if (refresh) set(FBC_COOKIE, existingFbc.raw, remainingMs);
 		}
 	} else if (jar["_fbc"]) del(FBC_COOKIE);
+	const gclsrc = params.get("gclsrc") || void 0;
+	const google = [{
+		cookie: GCL_AW_COOKIE,
+		urlClickId: !gclsrc || gclsrc === "aw.ds" ? params.get("gclid") || void 0 : void 0,
+		assign: (value) => result.gclid = value
+	}, {
+		cookie: GCL_GB_COOKIE,
+		urlClickId: params.get("wbraid") || void 0,
+		assign: (value) => result.wbraid = value
+	}];
+	for (const { cookie: cookie$1, urlClickId, assign } of google) {
+		const existing = parseGcl(jar[cookie$1], now);
+		if (urlClickId && GCL_CLICK_ID.test(urlClickId) && urlClickId !== existing?.clickId) {
+			set(cookie$1, formatGcl(urlClickId, now), GCL_TTL_MS);
+			assign(urlClickId);
+		} else if (existing) {
+			const remainingMs = existing.creationTime + GCL_TTL_MS - now;
+			if (remainingMs > 0) {
+				assign(existing.clickId);
+				if (refresh) set(cookie$1, existing.raw, remainingMs);
+			}
+		}
+	}
 	const urlRdtCid = params.get("rdt_cid") || void 0;
 	const existingRdtCid = jar["_rdt_cid"] || void 0;
 	if (urlRdtCid && urlRdtCid !== existingRdtCid) {
@@ -112,13 +167,17 @@ function resolveClickIdCookies(input) {
 }
 /** Serialize the resolved cookies into `Set-Cookie` header values. */
 function toSetCookieHeaders(cookies) {
-	return cookies.map((cookie$1) => (0, cookie.stringifySetCookie)(cookie$1));
+	return cookies.map((cookie$2) => (0, cookie.stringifySetCookie)(cookie$2));
 }
 //#endregion
 exports.FBC_COOKIE = FBC_COOKIE;
+exports.GCL_AW_COOKIE = GCL_AW_COOKIE;
+exports.GCL_GB_COOKIE = GCL_GB_COOKIE;
 exports.RDT_CID_COOKIE = RDT_CID_COOKIE;
 exports.formatFbc = formatFbc;
+exports.formatGcl = formatGcl;
 exports.parseFbc = parseFbc;
+exports.parseGcl = parseGcl;
 exports.resolveClickIdCookies = resolveClickIdCookies;
 exports.toSetCookieHeaders = toSetCookieHeaders;
 

package/dist/click-id/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["cookie"],"sources":["../../src/click-id/index.ts"],"sourcesContent":["import { type SetCookie, parseCookie, stringifySetCookie } from 'cookie';\n\n/**\n * Server-side resolution of ad-click-id cookies (`_fbc`, `_rdt_cid`) from the incoming request.\n *\n * This is the framework-agnostic core meant to run on the *document* response (e.g. TanStack Start\n * server middleware, Next middleware). Setting `_fbc` via an HTTP `Set-Cookie` header on the top\n * document — rather than `document.cookie` on the client — is what Meta officially recommends and is\n * the only reliable way to keep the cookie alive for 90 days in Safari: ITP caps JavaScript-set\n * cookies on a fbclid-decorated landing page to 24 hours, and the document response is never\n * classified as CNAME/IP cloaking (it is the reference the browser measures cloaking against).\n *\n * reference: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters/fbp-and-fbc\n */\n\n// Meta's recommended _fbc cookie expiry. Events Manager warns (\"Server sending expired fbclid\")\n// when the embedded creationTime is older than 90 days and match quality/attribution may degrade;\n// no hard drop is documented.\nconst FBC_TTL_MS = 90 * 24 * 60 * 60 * 1000;\nconst RDT_CID_TTL_MS = 90 * 24 * 60 * 60 * 1000;\n// Tolerate a little clock skew when validating a creationTime against \"now\".\nconst CLOCK_SKEW_MS = 24 * 60 * 60 * 1000;\n\nexport const FBC_COOKIE = '_fbc';\nexport const RDT_CID_COOKIE = '_rdt_cid';\n\nexport type ParsedFbc = { raw: string; creationTime: number; fbclid: string };\n\n/**\n * Parse `fb.<subdomainIndex>.<creationTime>.<fbclid>`.\n * Returns undefined for anything malformed — a fbclid never contains a dot, but joining the tail\n * back together keeps us forward-compatible if that ever changes.\n */\nexport function parseFbc(\n  raw: string | undefined | null,\n  now: number = Date.now()\n): ParsedFbc | undefined {\n  if (!raw) return undefined;\n  const parts = raw.split('.');\n  if (parts.length < 4 || parts[0] !== 'fb') return undefined;\n\n  const creationTime = Number(parts[2]);\n  const fbclid = parts.slice(3).join('.');\n  if (!fbclid) return undefined;\n  // creationTime is UNIX ms; reject seconds-precision or future-dated values as malformed.\n  if (!Number.isFinite(creationTime)) return undefined;\n  if (creationTime < 1e12 || creationTime > now + CLOCK_SKEW_MS) return undefined;\n\n  return { raw, creationTime, fbclid };\n}\n\n/**\n * Build a fresh `_fbc` value. subdomainIndex is the cookie's domain level (com=0, example.com=1,\n * www.example.com=2); 1 is correct for an apex-hosted cookie.\n */\nexport function formatFbc(fbclid: string, now: number, subdomainIndex = 1): string {\n  return `fb.${subdomainIndex}.${now}.${fbclid}`;\n}\n\nexport type ResolveClickIdCookiesInput = {\n  /** The absolute request URL (must include the query string). */\n  url: string;\n  /** The raw `Cookie` request header, if any. */\n  cookieHeader?: string | null;\n  /** Overridable clock, primarily for tests. Defaults to `Date.now()`. */\n  now?: number;\n  /** `Domain` attribute for the emitted cookies, e.g. `.shware.io`. Omit for a host-only cookie. */\n  domain?: string;\n  /** `Secure` attribute, default true. Set false only for local http testing. */\n  secure?: boolean;\n  /** subdomainIndex for a freshly built `_fbc` (see {@link formatFbc}). Default 1. */\n  subdomainIndex?: number;\n  /**\n   * Re-issue a still-valid `_fbc` at its *remaining* lifetime on every call. On by default, as an\n   * ITP self-heal: cookies follow last-writer-wins, so if the Meta Pixel overwrote `_fbc` via\n   * `document.cookie` (Safari caps JS-written cookies on a fbclid-decorated landing to 24h),\n   * re-issuing the long-lived HTTP cookie on the next navigation restores it — the same\n   * continuous-re-issue mitigation the sGTM ecosystem uses (stape Cookie Keeper, Cookie Monster).\n   * The value (and its creationTime) is byte-for-byte identical and the window never slides, so it\n   * cannot trigger Meta's expired/modified-fbclid warnings.\n   *\n   * Set false to strictly follow Meta's documented conditional-write rule (\"only set the cookie if\n   * it doesn't exist or the fbclid changed\") — e.g. to keep pages CDN-cacheable, since the\n   * re-issue attaches a per-user `Set-Cookie` (forcing `no-store`) to every response carrying an\n   * `_fbc`.\n   */\n  refresh?: boolean;\n};\n\nexport type ResolveClickIdCookiesResult = {\n  /**\n   * Cookies to emit on the response, ready for `Set-Cookie`. Empty when nothing needs to change.\n   * A `value: ''`, `maxAge: 0` entry is a deletion (an expired or malformed leftover).\n   */\n  cookies: SetCookie[];\n  /** The resolved `_fbc` value, for immediate server-side use (e.g. Conversions API). */\n  fbc?: string;\n  /** The resolved `_rdt_cid` value. */\n  rdt_cid?: string;\n};\n\nfunction searchParams(url: string): URLSearchParams {\n  try {\n    return new URL(url).searchParams;\n  } catch {\n    // Fall back to a manual split so a relative or slightly malformed URL still yields the query.\n    const q = url.indexOf('?');\n    return new URLSearchParams(q !== -1 ? url.slice(q + 1) : '');\n  }\n}\n\n/**\n * Resolve the click-id cookies to set on the current document response.\n *\n * `_fbc` follows Meta's documented conditional-write rule value-wise: a new fbclid (or an absent\n * cookie) opens a fresh 90-day window; a same-fbclid cookie keeps its original value and\n * `creationTime`. Expired (>90d) or malformed values are cleared instead of forwarded. By default,\n * ({@link ResolveClickIdCookiesInput.refresh}) a still-valid cookie is re-issued unchanged at its\n * *remaining* lifetime — never `now + 90d` — so a returning visitor's window cannot slide forward\n * (which is what makes Meta flag an expired fbclid).\n */\nexport function resolveClickIdCookies(\n  input: ResolveClickIdCookiesInput\n): ResolveClickIdCookiesResult {\n  const { url, cookieHeader, domain, secure = true, subdomainIndex = 1, refresh = true } = input;\n  const now = input.now ?? Date.now();\n\n  const params = searchParams(url);\n  const jar = parseCookie(cookieHeader ?? '');\n  const cookies: SetCookie[] = [];\n  const result: ResolveClickIdCookiesResult = { cookies };\n\n  const base = { path: '/', secure, sameSite: 'lax', domain } as const;\n  const set = (name: string, value: string, ttlMs: number) =>\n    cookies.push({ name, value, maxAge: Math.floor(ttlMs / 1000), ...base });\n  const del = (name: string) => cookies.push({ name, value: '', maxAge: 0, ...base });\n\n  // --- Meta _fbc ---\n  const urlFbclid = params.get('fbclid') || undefined;\n  const existingFbc = parseFbc(jar[FBC_COOKIE], now);\n\n  if (urlFbclid && urlFbclid !== existingFbc?.fbclid) {\n    // A new click always wins and opens a fresh 90-day window.\n    const raw = formatFbc(urlFbclid, now, subdomainIndex);\n    set(FBC_COOKIE, raw, FBC_TTL_MS);\n    result.fbc = raw;\n  } else if (existingFbc) {\n    const remainingMs = existingFbc.creationTime + FBC_TTL_MS - now;\n    if (remainingMs <= 0) {\n      del(FBC_COOKIE);\n    } else {\n      // Same fbclid: the value and creationTime are preserved (Meta's rule); refresh (default)\n      // re-issues it unchanged at its remaining lifetime as an ITP self-heal.\n      result.fbc = existingFbc.raw;\n      if (refresh) set(FBC_COOKIE, existingFbc.raw, remainingMs);\n    }\n  } else if (jar[FBC_COOKIE]) {\n    // Malformed leftover — clear it rather than forwarding it to Meta.\n    del(FBC_COOKIE);\n  }\n\n  // --- Reddit _rdt_cid ---\n  // No embedded timestamp, so it can only be anchored at first capture; set it once from the URL and\n  // otherwise leave the existing cookie untouched (re-issuing would slide its window).\n  const urlRdtCid = params.get('rdt_cid') || undefined;\n  const existingRdtCid = jar[RDT_CID_COOKIE] || undefined;\n  if (urlRdtCid && urlRdtCid !== existingRdtCid) {\n    set(RDT_CID_COOKIE, urlRdtCid, RDT_CID_TTL_MS);\n    result.rdt_cid = urlRdtCid;\n  } else if (existingRdtCid) {\n    result.rdt_cid = existingRdtCid;\n  }\n\n  return result;\n}\n\n/** Serialize the resolved cookies into `Set-Cookie` header values. */\nexport function toSetCookieHeaders(cookies: SetCookie[]): string[] {\n  return cookies.map((cookie) => stringifySetCookie(cookie));\n}\n"],"mappings":";;;;;;;;;;;;;;;AAkBA,MAAM,aAAa,OAAU,KAAK,KAAK;AACvC,MAAM,iBAAiB,OAAU,KAAK,KAAK;AAE3C,MAAM,gBAAgB,OAAU,KAAK;AAErC,MAAa,aAAa;AAC1B,MAAa,iBAAiB;;;;;;AAS9B,SAAgB,SACd,KACA,MAAc,KAAK,IAAI,GACA;CACvB,IAAI,CAAC,KAAK,OAAO,KAAA;CACjB,MAAM,QAAQ,IAAI,MAAM,GAAG;CAC3B,IAAI,MAAM,SAAS,KAAK,MAAM,OAAO,MAAM,OAAO,KAAA;CAElD,MAAM,eAAe,OAAO,MAAM,EAAE;CACpC,MAAM,SAAS,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;CACtC,IAAI,CAAC,QAAQ,OAAO,KAAA;CAEpB,IAAI,CAAC,OAAO,SAAS,YAAY,GAAG,OAAO,KAAA;CAC3C,IAAI,eAAe,gBAAQ,eAAe,MAAM,eAAe,OAAO,KAAA;CAEtE,OAAO;EAAE;EAAK;EAAc;CAAO;AACrC;;;;;AAMA,SAAgB,UAAU,QAAgB,KAAa,iBAAiB,GAAW;CACjF,OAAO,MAAM,eAAe,GAAG,IAAI,GAAG;AACxC;AA4CA,SAAS,aAAa,KAA8B;CAClD,IAAI;EACF,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC;CACtB,QAAQ;EAEN,MAAM,IAAI,IAAI,QAAQ,GAAG;EACzB,OAAO,IAAI,gBAAgB,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,IAAI,EAAE;CAC7D;AACF;;;;;;;;;;;AAYA,SAAgB,sBACd,OAC6B;CAC7B,MAAM,EAAE,KAAK,cAAc,QAAQ,SAAS,MAAM,iBAAiB,GAAG,UAAU,SAAS;CACzF,MAAM,MAAM,MAAM,OAAO,KAAK,IAAI;CAElC,MAAM,SAAS,aAAa,GAAG;CAC/B,MAAM,OAAA,GAAA,OAAA,YAAA,CAAkB,gBAAgB,EAAE;CAC1C,MAAM,UAAuB,CAAC;CAC9B,MAAM,SAAsC,EAAE,QAAQ;CAEtD,MAAM,OAAO;EAAE,MAAM;EAAK;EAAQ,UAAU;EAAO;CAAO;CAC1D,MAAM,OAAO,MAAc,OAAe,UACxC,QAAQ,KAAK;EAAE;EAAM;EAAO,QAAQ,KAAK,MAAM,QAAQ,GAAI;EAAG,GAAG;CAAK,CAAC;CACzE,MAAM,OAAO,SAAiB,QAAQ,KAAK;EAAE;EAAM,OAAO;EAAI,QAAQ;EAAG,GAAG;CAAK,CAAC;CAGlF,MAAM,YAAY,OAAO,IAAI,QAAQ,KAAK,KAAA;CAC1C,MAAM,cAAc,SAAS,IAAI,aAAa,GAAG;CAEjD,IAAI,aAAa,cAAc,aAAa,QAAQ;EAElD,MAAM,MAAM,UAAU,WAAW,KAAK,cAAc;EACpD,IAAI,YAAY,KAAK,UAAU;EAC/B,OAAO,MAAM;CACf,OAAO,IAAI,aAAa;EACtB,MAAM,cAAc,YAAY,eAAe,aAAa;EAC5D,IAAI,eAAe,GACjB,IAAI,UAAU;OACT;GAGL,OAAO,MAAM,YAAY;GACzB,IAAI,SAAS,IAAI,YAAY,YAAY,KAAK,WAAW;EAC3D;CACF,OAAO,IAAI,IAAA,SAET,IAAI,UAAU;CAMhB,MAAM,YAAY,OAAO,IAAI,SAAS,KAAK,KAAA;CAC3C,MAAM,iBAAiB,IAAA,eAAuB,KAAA;CAC9C,IAAI,aAAa,cAAc,gBAAgB;EAC7C,IAAI,gBAAgB,WAAW,cAAc;EAC7C,OAAO,UAAU;CACnB,OAAO,IAAI,gBACT,OAAO,UAAU;CAGnB,OAAO;AACT;;AAGA,SAAgB,mBAAmB,SAAgC;CACjE,OAAO,QAAQ,KAAK,cAAA,GAAA,OAAA,mBAAA,CAA8BA,QAAM,CAAC;AAC3D"}
+{"version":3,"file":"index.cjs","names":["parseCookie","cookie","stringifySetCookie"],"sources":["../../src/click-id/index.ts"],"sourcesContent":["import { type SetCookie, parseCookie, stringifySetCookie } from 'cookie';\n\n/**\n * Server-side resolution of ad-click-id cookies (`_fbc`, `_gcl_aw`/`_gcl_gb`, `_rdt_cid`) from\n * the incoming request.\n *\n * This is the framework-agnostic core meant to run on the *document* response (e.g. TanStack Start\n * server middleware, Next middleware). Setting `_fbc` via an HTTP `Set-Cookie` header on the top\n * document — rather than `document.cookie` on the client — is what Meta officially recommends and is\n * the only reliable way to keep the cookie alive for 90 days in Safari: ITP caps JavaScript-set\n * cookies on a fbclid-decorated landing page to 24 hours, and the document response is never\n * classified as CNAME/IP cloaking (it is the reference the browser measures cloaking against).\n *\n * reference: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters/fbp-and-fbc\n */\n\n// Meta's recommended _fbc cookie expiry. Events Manager warns (\"Server sending expired fbclid\")\n// when the embedded creationTime is older than 90 days and match quality/attribution may degrade;\n// no hard drop is documented.\nconst FBC_TTL_MS = 90 * 24 * 60 * 60 * 1000;\nconst RDT_CID_TTL_MS = 90 * 24 * 60 * 60 * 1000;\n// gtag's own expiry for _gcl_* — 90 days, the length of a Google Ads click's upload window.\nconst GCL_TTL_MS = 90 * 24 * 60 * 60 * 1000;\n// Tolerate a little clock skew when validating a creationTime against \"now\".\nconst CLOCK_SKEW_MS = 24 * 60 * 60 * 1000;\n\nexport const FBC_COOKIE = '_fbc';\nexport const RDT_CID_COOKIE = '_rdt_cid';\nexport const GCL_AW_COOKIE = '_gcl_aw';\nexport const GCL_GB_COOKIE = '_gcl_gb';\n\nexport type ParsedFbc = { raw: string; creationTime: number; fbclid: string };\n\n/**\n * Parse `fb.<subdomainIndex>.<creationTime>.<fbclid>`.\n * Returns undefined for anything malformed — a fbclid never contains a dot, but joining the tail\n * back together keeps us forward-compatible if that ever changes.\n */\nexport function parseFbc(\n  raw: string | undefined | null,\n  now: number = Date.now()\n): ParsedFbc | undefined {\n  if (!raw) return undefined;\n  const parts = raw.split('.');\n  if (parts.length < 4 || parts[0] !== 'fb') return undefined;\n\n  const creationTime = Number(parts[2]);\n  const fbclid = parts.slice(3).join('.');\n  if (!fbclid) return undefined;\n  // creationTime is UNIX ms; reject seconds-precision or future-dated values as malformed.\n  if (!Number.isFinite(creationTime)) return undefined;\n  if (creationTime < 1e12 || creationTime > now + CLOCK_SKEW_MS) return undefined;\n\n  return { raw, creationTime, fbclid };\n}\n\n/**\n * Build a fresh `_fbc` value. subdomainIndex is the cookie's domain level (com=0, example.com=1,\n * www.example.com=2); 1 is correct for an apex-hosted cookie.\n */\nexport function formatFbc(fbclid: string, now: number, subdomainIndex = 1): string {\n  return `fb.${subdomainIndex}.${now}.${fbclid}`;\n}\n\nexport type ParsedGcl = { raw: string; creationTime: number; clickId: string };\n\n// gtag's own value validator, extracted from gtag.js: the click id segment must match this.\nconst GCL_CLICK_ID = /^[\\w-]+$/;\n\n/**\n * Parse a `_gcl_aw`/`_gcl_gb` value: `GCL.<seconds>.<clickId>[.<labels…>]` — note the timestamp\n * is in SECONDS, unlike `_fbc`'s milliseconds. gtag's parser accepts version `GCL` or `1` and\n * validates the segments exactly this way (`/^\\d+$/` timestamp, `/^[\\w-]+$/` click id); any\n * labels tail is preserved through `raw` so a re-issue stays byte-identical.\n */\nexport function parseGcl(\n  raw: string | undefined | null,\n  now: number = Date.now()\n): ParsedGcl | undefined {\n  if (!raw) return undefined;\n  const parts = raw.split('.');\n  if (parts.length < 3) return undefined;\n  if (parts[0] !== 'GCL' && parts[0] !== '1') return undefined;\n  const seconds = parts[1];\n  const clickId = parts[2];\n  if (seconds === undefined || !/^\\d+$/.test(seconds)) return undefined;\n  if (clickId === undefined || !GCL_CLICK_ID.test(clickId)) return undefined;\n  const creationTime = Number(seconds) * 1000;\n  // Reject millisecond-precision or future-dated values as malformed.\n  if (creationTime >= 1e15 || creationTime > now + CLOCK_SKEW_MS) return undefined;\n  return { raw, creationTime, clickId };\n}\n\n/** Build a fresh `_gcl_aw`/`_gcl_gb` value in gtag's own format. */\nexport function formatGcl(clickId: string, now: number): string {\n  return `GCL.${Math.floor(now / 1000)}.${clickId}`;\n}\n\nexport type ResolveClickIdCookiesInput = {\n  /** The absolute request URL (must include the query string). */\n  url: string;\n  /** The raw `Cookie` request header, if any. */\n  cookieHeader?: string | null;\n  /** Overridable clock, primarily for tests. Defaults to `Date.now()`. */\n  now?: number;\n  /** `Domain` attribute for the emitted cookies, e.g. `.shware.io`. Omit for a host-only cookie. */\n  domain?: string;\n  /** `Secure` attribute, default true. Set false only for local http testing. */\n  secure?: boolean;\n  /** subdomainIndex for a freshly built `_fbc` (see {@link formatFbc}). Default 1. */\n  subdomainIndex?: number;\n  /**\n   * Re-issue a still-valid `_fbc` at its *remaining* lifetime on every call. On by default, as an\n   * ITP self-heal: cookies follow last-writer-wins, so if the Meta Pixel overwrote `_fbc` via\n   * `document.cookie` (Safari caps JS-written cookies on a fbclid-decorated landing to 24h),\n   * re-issuing the long-lived HTTP cookie on the next navigation restores it — the same\n   * continuous-re-issue mitigation the sGTM ecosystem uses (stape Cookie Keeper, Cookie Monster).\n   * The value (and its creationTime) is byte-for-byte identical and the window never slides, so it\n   * cannot trigger Meta's expired/modified-fbclid warnings.\n   *\n   * Set false to strictly follow Meta's documented conditional-write rule (\"only set the cookie if\n   * it doesn't exist or the fbclid changed\") — e.g. to keep pages CDN-cacheable, since the\n   * re-issue attaches a per-user `Set-Cookie` (forcing `no-store`) to every response carrying an\n   * `_fbc`.\n   */\n  refresh?: boolean;\n};\n\nexport type ResolveClickIdCookiesResult = {\n  /**\n   * Cookies to emit on the response, ready for `Set-Cookie`. Empty when nothing needs to change.\n   * A `value: ''`, `maxAge: 0` entry is a deletion (an expired or malformed leftover).\n   */\n  cookies: SetCookie[];\n  /** The resolved `_fbc` value, for immediate server-side use (e.g. Conversions API). */\n  fbc?: string;\n  /** The resolved `_rdt_cid` value. */\n  rdt_cid?: string;\n  /** The resolved Google Ads click id (from the URL or a still-valid `_gcl_aw`). */\n  gclid?: string;\n  /** The resolved iOS web-to-app click id (from the URL or a still-valid `_gcl_gb`). */\n  wbraid?: string;\n};\n\nfunction searchParams(url: string): URLSearchParams {\n  try {\n    return new URL(url).searchParams;\n  } catch {\n    // Fall back to a manual split so a relative or slightly malformed URL still yields the query.\n    const q = url.indexOf('?');\n    return new URLSearchParams(q !== -1 ? url.slice(q + 1) : '');\n  }\n}\n\n/**\n * Resolve the click-id cookies to set on the current document response.\n *\n * `_fbc` follows Meta's documented conditional-write rule value-wise: a new fbclid (or an absent\n * cookie) opens a fresh 90-day window; a same-fbclid cookie keeps its original value and\n * `creationTime`. Expired (>90d) or malformed values are cleared instead of forwarded. By default,\n * ({@link ResolveClickIdCookiesInput.refresh}) a still-valid cookie is re-issued unchanged at its\n * *remaining* lifetime — never `now + 90d` — so a returning visitor's window cannot slide forward\n * (which is what makes Meta flag an expired fbclid).\n */\nexport function resolveClickIdCookies(\n  input: ResolveClickIdCookiesInput\n): ResolveClickIdCookiesResult {\n  const { url, cookieHeader, domain, secure = true, subdomainIndex = 1, refresh = true } = input;\n  const now = input.now ?? Date.now();\n\n  const params = searchParams(url);\n  const jar = parseCookie(cookieHeader ?? '');\n  const cookies: SetCookie[] = [];\n  const result: ResolveClickIdCookiesResult = { cookies };\n\n  const base = { path: '/', secure, sameSite: 'lax', domain } as const;\n  const set = (name: string, value: string, ttlMs: number) =>\n    cookies.push({ name, value, maxAge: Math.floor(ttlMs / 1000), ...base });\n  const del = (name: string) => cookies.push({ name, value: '', maxAge: 0, ...base });\n\n  // --- Meta _fbc ---\n  const urlFbclid = params.get('fbclid') || undefined;\n  const existingFbc = parseFbc(jar[FBC_COOKIE], now);\n\n  if (urlFbclid && urlFbclid !== existingFbc?.fbclid) {\n    // A new click always wins and opens a fresh 90-day window.\n    const raw = formatFbc(urlFbclid, now, subdomainIndex);\n    set(FBC_COOKIE, raw, FBC_TTL_MS);\n    result.fbc = raw;\n  } else if (existingFbc) {\n    const remainingMs = existingFbc.creationTime + FBC_TTL_MS - now;\n    if (remainingMs <= 0) {\n      del(FBC_COOKIE);\n    } else {\n      // Same fbclid: the value and creationTime are preserved (Meta's rule); refresh (default)\n      // re-issues it unchanged at its remaining lifetime as an ITP self-heal.\n      result.fbc = existingFbc.raw;\n      if (refresh) set(FBC_COOKIE, existingFbc.raw, remainingMs);\n    }\n  } else if (jar[FBC_COOKIE]) {\n    // Malformed leftover — clear it rather than forwarding it to Meta.\n    del(FBC_COOKIE);\n  }\n\n  // --- Google Ads _gcl_aw / _gcl_gb ---\n  // The same first-party HTTP persistence Google's own server-side Conversion Linker performs\n  // (it sets FPGCLAW via Set-Cookie for 90 days), applied to gtag's cookies the way the sGTM\n  // ecosystem does (stape Cookie Keeper re-issues _gcl_* over HTTP). Ownership is shared with\n  // gtag, so the rules are stricter than for _fbc: a value this module cannot parse is left\n  // untouched — never rewritten, never deleted — and a re-issue is byte-identical (labels tail\n  // included) at the window's REMAINING lifetime, so the 90-day click window never slides.\n  const gclsrc = params.get('gclsrc') || undefined;\n  const google = [\n    {\n      cookie: GCL_AW_COOKIE,\n      // gtag's own gating, verbatim: a gclid enters _gcl_aw only when gclsrc is absent or\n      // 'aw.ds' — 'ds'/'3p.ds' clicks are Search Ads 360's and belong to _gcl_dc.\n      urlClickId: !gclsrc || gclsrc === 'aw.ds' ? params.get('gclid') || undefined : undefined,\n      assign: (value: string) => (result.gclid = value),\n    },\n    {\n      cookie: GCL_GB_COOKIE,\n      urlClickId: params.get('wbraid') || undefined,\n      assign: (value: string) => (result.wbraid = value),\n    },\n  ];\n  for (const { cookie, urlClickId, assign } of google) {\n    const existing = parseGcl(jar[cookie], now);\n    if (urlClickId && GCL_CLICK_ID.test(urlClickId) && urlClickId !== existing?.clickId) {\n      // A new click always wins and opens a fresh 90-day window, in gtag's exact format.\n      set(cookie, formatGcl(urlClickId, now), GCL_TTL_MS);\n      assign(urlClickId);\n    } else if (existing) {\n      const remainingMs = existing.creationTime + GCL_TTL_MS - now;\n      if (remainingMs > 0) {\n        assign(existing.clickId);\n        if (refresh) set(cookie, existing.raw, remainingMs);\n      }\n      // Expired: not returned and not re-issued, but gtag owns the deletion.\n    }\n  }\n\n  // --- Reddit _rdt_cid ---\n  // No embedded timestamp, so it can only be anchored at first capture; set it once from the URL and\n  // otherwise leave the existing cookie untouched (re-issuing would slide its window).\n  const urlRdtCid = params.get('rdt_cid') || undefined;\n  const existingRdtCid = jar[RDT_CID_COOKIE] || undefined;\n  if (urlRdtCid && urlRdtCid !== existingRdtCid) {\n    set(RDT_CID_COOKIE, urlRdtCid, RDT_CID_TTL_MS);\n    result.rdt_cid = urlRdtCid;\n  } else if (existingRdtCid) {\n    result.rdt_cid = existingRdtCid;\n  }\n\n  return result;\n}\n\n/** Serialize the resolved cookies into `Set-Cookie` header values. */\nexport function toSetCookieHeaders(cookies: SetCookie[]): string[] {\n  return cookies.map((cookie) => stringifySetCookie(cookie));\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAmBA,MAAM,aAAa;AACnB,MAAM,iBAAiB;AAEvB,MAAM,aAAa;AAEnB,MAAM,gBAAgB;AAEtB,MAAa,aAAa;AAC1B,MAAa,iBAAiB;AAC9B,MAAa,gBAAgB;AAC7B,MAAa,gBAAgB;;;;;;AAS7B,SAAgB,SACd,KACA,MAAc,KAAK,IAAI,GACA;CACvB,IAAI,CAAC,KAAK,OAAO,KAAA;CACjB,MAAM,QAAQ,IAAI,MAAM,GAAG;CAC3B,IAAI,MAAM,SAAS,KAAK,MAAM,OAAO,MAAM,OAAO,KAAA;CAElD,MAAM,eAAe,OAAO,MAAM,EAAE;CACpC,MAAM,SAAS,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;CACtC,IAAI,CAAC,QAAQ,OAAO,KAAA;CAEpB,IAAI,CAAC,OAAO,SAAS,YAAY,GAAG,OAAO,KAAA;CAC3C,IAAI,eAAe,gBAAQ,eAAe,MAAM,eAAe,OAAO,KAAA;CAEtE,OAAO;EAAE;EAAK;EAAc;CAAO;AACrC;;;;;AAMA,SAAgB,UAAU,QAAgB,KAAa,iBAAiB,GAAW;CACjF,OAAO,MAAM,eAAe,GAAG,IAAI,GAAG;AACxC;AAKA,MAAM,eAAe;;;;;;;AAQrB,SAAgB,SACd,KACA,MAAc,KAAK,IAAI,GACA;CACvB,IAAI,CAAC,KAAK,OAAO,KAAA;CACjB,MAAM,QAAQ,IAAI,MAAM,GAAG;CAC3B,IAAI,MAAM,SAAS,GAAG,OAAO,KAAA;CAC7B,IAAI,MAAM,OAAO,SAAS,MAAM,OAAO,KAAK,OAAO,KAAA;CACnD,MAAM,UAAU,MAAM;CACtB,MAAM,UAAU,MAAM;CACtB,IAAI,YAAY,KAAA,KAAa,CAAC,QAAQ,KAAK,OAAO,GAAG,OAAO,KAAA;CAC5D,IAAI,YAAY,KAAA,KAAa,CAAC,aAAa,KAAK,OAAO,GAAG,OAAO,KAAA;CACjE,MAAM,eAAe,OAAO,OAAO,IAAI;CAEvC,IAAI,gBAAgB,mBAAQ,eAAe,MAAM,eAAe,OAAO,KAAA;CACvE,OAAO;EAAE;EAAK;EAAc;CAAQ;AACtC;;AAGA,SAAgB,UAAU,SAAiB,KAAqB;CAC9D,OAAO,OAAO,KAAK,MAAM,MAAM,GAAI,EAAE,GAAG;AAC1C;AAgDA,SAAS,aAAa,KAA8B;CAClD,IAAI;EACF,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC;CACtB,QAAQ;EAEN,MAAM,IAAI,IAAI,QAAQ,GAAG;EACzB,OAAO,IAAI,gBAAgB,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,IAAI,EAAE;CAC7D;AACF;;;;;;;;;;;AAYA,SAAgB,sBACd,OAC6B;CAC7B,MAAM,EAAE,KAAK,cAAc,QAAQ,SAAS,MAAM,iBAAiB,GAAG,UAAU,SAAS;CACzF,MAAM,MAAM,MAAM,OAAO,KAAK,IAAI;CAElC,MAAM,SAAS,aAAa,GAAG;CAC/B,MAAM,OAAA,GAAMA,OAAAA,YAAAA,CAAY,gBAAgB,EAAE;CAC1C,MAAM,UAAuB,CAAC;CAC9B,MAAM,SAAsC,EAAE,QAAQ;CAEtD,MAAM,OAAO;EAAE,MAAM;EAAK;EAAQ,UAAU;EAAO;CAAO;CAC1D,MAAM,OAAO,MAAc,OAAe,UACxC,QAAQ,KAAK;EAAE;EAAM;EAAO,QAAQ,KAAK,MAAM,QAAQ,GAAI;EAAG,GAAG;CAAK,CAAC;CACzE,MAAM,OAAO,SAAiB,QAAQ,KAAK;EAAE;EAAM,OAAO;EAAI,QAAQ;EAAG,GAAG;CAAK,CAAC;CAGlF,MAAM,YAAY,OAAO,IAAI,QAAQ,KAAK,KAAA;CAC1C,MAAM,cAAc,SAAS,IAAI,aAAa,GAAG;CAEjD,IAAI,aAAa,cAAc,aAAa,QAAQ;EAElD,MAAM,MAAM,UAAU,WAAW,KAAK,cAAc;EACpD,IAAI,YAAY,KAAK,UAAU;EAC/B,OAAO,MAAM;CACf,OAAO,IAAI,aAAa;EACtB,MAAM,cAAc,YAAY,eAAe,aAAa;EAC5D,IAAI,eAAe,GACjB,IAAI,UAAU;OACT;GAGL,OAAO,MAAM,YAAY;GACzB,IAAI,SAAS,IAAI,YAAY,YAAY,KAAK,WAAW;EAC3D;CACF,OAAO,IAAI,IAAA,SAET,IAAI,UAAU;CAUhB,MAAM,SAAS,OAAO,IAAI,QAAQ,KAAK,KAAA;CACvC,MAAM,SAAS,CACb;EACE,QAAQ;EAGR,YAAY,CAAC,UAAU,WAAW,UAAU,OAAO,IAAI,OAAO,KAAK,KAAA,IAAY,KAAA;EAC/E,SAAS,UAAmB,OAAO,QAAQ;CAC7C,GACA;EACE,QAAQ;EACR,YAAY,OAAO,IAAI,QAAQ,KAAK,KAAA;EACpC,SAAS,UAAmB,OAAO,SAAS;CAC9C,CACF;CACA,KAAK,MAAM,EAAE,QAAA,UAAQ,YAAY,YAAY,QAAQ;EACnD,MAAM,WAAW,SAAS,IAAIC,WAAS,GAAG;EAC1C,IAAI,cAAc,aAAa,KAAK,UAAU,KAAK,eAAe,UAAU,SAAS;GAEnF,IAAIA,UAAQ,UAAU,YAAY,GAAG,GAAG,UAAU;GAClD,OAAO,UAAU;EACnB,OAAO,IAAI,UAAU;GACnB,MAAM,cAAc,SAAS,eAAe,aAAa;GACzD,IAAI,cAAc,GAAG;IACnB,OAAO,SAAS,OAAO;IACvB,IAAI,SAAS,IAAIA,UAAQ,SAAS,KAAK,WAAW;GACpD;EAEF;CACF;CAKA,MAAM,YAAY,OAAO,IAAI,SAAS,KAAK,KAAA;CAC3C,MAAM,iBAAiB,IAAA,eAAuB,KAAA;CAC9C,IAAI,aAAa,cAAc,gBAAgB;EAC7C,IAAI,gBAAgB,WAAW,cAAc;EAC7C,OAAO,UAAU;CACnB,OAAO,IAAI,gBACT,OAAO,UAAU;CAGnB,OAAO;AACT;;AAGA,SAAgB,mBAAmB,SAAgC;CACjE,OAAO,QAAQ,KAAK,cAAA,GAAWC,OAAAA,mBAAAA,CAAmBD,QAAM,CAAC;AAC3D"}

package/dist/click-id/index.d.cts

@@ -2,6 +2,8 @@ import { SetCookie } from "cookie";
 //#region src/click-id/index.d.ts
 declare const FBC_COOKIE = "_fbc";
 declare const RDT_CID_COOKIE = "_rdt_cid";
+declare const GCL_AW_COOKIE = "_gcl_aw";
+declare const GCL_GB_COOKIE = "_gcl_gb";
 type ParsedFbc = {
   raw: string;
   creationTime: number;
@@ -18,6 +20,20 @@ declare function parseFbc(raw: string | undefined | null, now?: number): ParsedF
  * www.example.com=2); 1 is correct for an apex-hosted cookie.
  */
 declare function formatFbc(fbclid: string, now: number, subdomainIndex?: number): string;
+type ParsedGcl = {
+  raw: string;
+  creationTime: number;
+  clickId: string;
+};
+/**
+ * Parse a `_gcl_aw`/`_gcl_gb` value: `GCL.<seconds>.<clickId>[.<labels…>]` — note the timestamp
+ * is in SECONDS, unlike `_fbc`'s milliseconds. gtag's parser accepts version `GCL` or `1` and
+ * validates the segments exactly this way (`/^\d+$/` timestamp, `/^[\w-]+$/` click id); any
+ * labels tail is preserved through `raw` so a re-issue stays byte-identical.
+ */
+declare function parseGcl(raw: string | undefined | null, now?: number): ParsedGcl | undefined;
+/** Build a fresh `_gcl_aw`/`_gcl_gb` value in gtag's own format. */
+declare function formatGcl(clickId: string, now: number): string;
 type ResolveClickIdCookiesInput = {
   /** The absolute request URL (must include the query string). */
   url: string;
@@ -57,6 +73,10 @@ type ResolveClickIdCookiesResult = {
   fbc?: string;
   /** The resolved `_rdt_cid` value. */
   rdt_cid?: string;
+  /** The resolved Google Ads click id (from the URL or a still-valid `_gcl_aw`). */
+  gclid?: string;
+  /** The resolved iOS web-to-app click id (from the URL or a still-valid `_gcl_gb`). */
+  wbraid?: string;
 };
 /**
  * Resolve the click-id cookies to set on the current document response.
@@ -72,5 +92,5 @@ declare function resolveClickIdCookies(input: ResolveClickIdCookiesInput): Resol
 /** Serialize the resolved cookies into `Set-Cookie` header values. */
 declare function toSetCookieHeaders(cookies: SetCookie[]): string[];
 //#endregion
-export { FBC_COOKIE, ParsedFbc, RDT_CID_COOKIE, ResolveClickIdCookiesInput, ResolveClickIdCookiesResult, formatFbc, parseFbc, resolveClickIdCookies, toSetCookieHeaders };
+export { FBC_COOKIE, GCL_AW_COOKIE, GCL_GB_COOKIE, ParsedFbc, ParsedGcl, RDT_CID_COOKIE, ResolveClickIdCookiesInput, ResolveClickIdCookiesResult, formatFbc, formatGcl, parseFbc, parseGcl, resolveClickIdCookies, toSetCookieHeaders };
 //# sourceMappingURL=index.d.cts.map

package/dist/click-id/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/click-id/index.ts"],"mappings":";;cAuBa;cACA;KAED;EAAc;EAAa;EAAsB;;;;;;;iBAO7C,SACd,gCACA,eACC;;;;;iBAmBa,UAAU,gBAAgB,aAAa;KAI3C;;EAEV;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;;;EAeA;;KAGU;;;;;EAKV,SAAS;;EAET;;EAEA;;;;;;;;;;;;iBAuBc,sBACd,OAAO,6BACN;;iBAsDa,mBAAmB,SAAS"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/click-id/index.ts"],"mappings":";;cA0Ba;cACA;cACA;cACA;KAED;EAAc;EAAa;EAAsB;;;;;;;iBAO7C,SACd,gCACA,eACC;;;;;iBAmBa,UAAU,gBAAgB,aAAa;KAI3C;EAAc;EAAa;EAAsB;;;;;;;;iBAW7C,SACd,gCACA,eACC;;iBAgBa,UAAU,iBAAiB;KAI/B;;EAEV;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;;;EAeA;;KAGU;;;;;EAKV,SAAS;;EAET;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;iBAuBc,sBACd,OAAO,6BACN;;iBA4Fa,mBAAmB,SAAS"}

package/dist/click-id/index.d.mts

@@ -2,6 +2,8 @@ import { SetCookie } from "cookie";
 //#region src/click-id/index.d.ts
 declare const FBC_COOKIE = "_fbc";
 declare const RDT_CID_COOKIE = "_rdt_cid";
+declare const GCL_AW_COOKIE = "_gcl_aw";
+declare const GCL_GB_COOKIE = "_gcl_gb";
 type ParsedFbc = {
   raw: string;
   creationTime: number;
@@ -18,6 +20,20 @@ declare function parseFbc(raw: string | undefined | null, now?: number): ParsedF
  * www.example.com=2); 1 is correct for an apex-hosted cookie.
  */
 declare function formatFbc(fbclid: string, now: number, subdomainIndex?: number): string;
+type ParsedGcl = {
+  raw: string;
+  creationTime: number;
+  clickId: string;
+};
+/**
+ * Parse a `_gcl_aw`/`_gcl_gb` value: `GCL.<seconds>.<clickId>[.<labels…>]` — note the timestamp
+ * is in SECONDS, unlike `_fbc`'s milliseconds. gtag's parser accepts version `GCL` or `1` and
+ * validates the segments exactly this way (`/^\d+$/` timestamp, `/^[\w-]+$/` click id); any
+ * labels tail is preserved through `raw` so a re-issue stays byte-identical.
+ */
+declare function parseGcl(raw: string | undefined | null, now?: number): ParsedGcl | undefined;
+/** Build a fresh `_gcl_aw`/`_gcl_gb` value in gtag's own format. */
+declare function formatGcl(clickId: string, now: number): string;
 type ResolveClickIdCookiesInput = {
   /** The absolute request URL (must include the query string). */
   url: string;
@@ -57,6 +73,10 @@ type ResolveClickIdCookiesResult = {
   fbc?: string;
   /** The resolved `_rdt_cid` value. */
   rdt_cid?: string;
+  /** The resolved Google Ads click id (from the URL or a still-valid `_gcl_aw`). */
+  gclid?: string;
+  /** The resolved iOS web-to-app click id (from the URL or a still-valid `_gcl_gb`). */
+  wbraid?: string;
 };
 /**
  * Resolve the click-id cookies to set on the current document response.
@@ -72,5 +92,5 @@ declare function resolveClickIdCookies(input: ResolveClickIdCookiesInput): Resol
 /** Serialize the resolved cookies into `Set-Cookie` header values. */
 declare function toSetCookieHeaders(cookies: SetCookie[]): string[];
 //#endregion
-export { FBC_COOKIE, ParsedFbc, RDT_CID_COOKIE, ResolveClickIdCookiesInput, ResolveClickIdCookiesResult, formatFbc, parseFbc, resolveClickIdCookies, toSetCookieHeaders };
+export { FBC_COOKIE, GCL_AW_COOKIE, GCL_GB_COOKIE, ParsedFbc, ParsedGcl, RDT_CID_COOKIE, ResolveClickIdCookiesInput, ResolveClickIdCookiesResult, formatFbc, formatGcl, parseFbc, parseGcl, resolveClickIdCookies, toSetCookieHeaders };
 //# sourceMappingURL=index.d.mts.map

package/dist/click-id/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/click-id/index.ts"],"mappings":";;cAuBa;cACA;KAED;EAAc;EAAa;EAAsB;;;;;;;iBAO7C,SACd,gCACA,eACC;;;;;iBAmBa,UAAU,gBAAgB,aAAa;KAI3C;;EAEV;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;;;EAeA;;KAGU;;;;;EAKV,SAAS;;EAET;;EAEA;;;;;;;;;;;;iBAuBc,sBACd,OAAO,6BACN;;iBAsDa,mBAAmB,SAAS"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/click-id/index.ts"],"mappings":";;cA0Ba;cACA;cACA;cACA;KAED;EAAc;EAAa;EAAsB;;;;;;;iBAO7C,SACd,gCACA,eACC;;;;;iBAmBa,UAAU,gBAAgB,aAAa;KAI3C;EAAc;EAAa;EAAsB;;;;;;;;iBAW7C,SACd,gCACA,eACC;;iBAgBa,UAAU,iBAAiB;KAI/B;;EAEV;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;;;EAeA;;KAGU;;;;;EAKV,SAAS;;EAET;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;iBAuBc,sBACd,OAAO,6BACN;;iBA4Fa,mBAAmB,SAAS"}

package/dist/click-id/index.mjs

@@ -1,7 +1,8 @@
 import { parseCookie, stringifySetCookie } from "cookie";
 //#region src/click-id/index.ts
 /**
-* Server-side resolution of ad-click-id cookies (`_fbc`, `_rdt_cid`) from the incoming request.
+* Server-side resolution of ad-click-id cookies (`_fbc`, `_gcl_aw`/`_gcl_gb`, `_rdt_cid`) from
+* the incoming request.
 *
 * This is the framework-agnostic core meant to run on the *document* response (e.g. TanStack Start
 * server middleware, Next middleware). Setting `_fbc` via an HTTP `Set-Cookie` header on the top
@@ -12,11 +13,14 @@ import { parseCookie, stringifySetCookie } from "cookie";
 *
 * reference: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters/fbp-and-fbc
 */
-const FBC_TTL_MS = 2160 * 60 * 60 * 1e3;
-const RDT_CID_TTL_MS = 2160 * 60 * 60 * 1e3;
-const CLOCK_SKEW_MS = 1440 * 60 * 1e3;
+const FBC_TTL_MS = 7776e6;
+const RDT_CID_TTL_MS = 7776e6;
+const GCL_TTL_MS = 7776e6;
+const CLOCK_SKEW_MS = 864e5;
 const FBC_COOKIE = "_fbc";
 const RDT_CID_COOKIE = "_rdt_cid";
+const GCL_AW_COOKIE = "_gcl_aw";
+const GCL_GB_COOKIE = "_gcl_gb";
 /**
 * Parse `fb.<subdomainIndex>.<creationTime>.<fbclid>`.
 * Returns undefined for anything malformed — a fbclid never contains a dot, but joining the tail
@@ -44,6 +48,34 @@ function parseFbc(raw, now = Date.now()) {
 function formatFbc(fbclid, now, subdomainIndex = 1) {
 	return `fb.${subdomainIndex}.${now}.${fbclid}`;
 }
+const GCL_CLICK_ID = /^[\w-]+$/;
+/**
+* Parse a `_gcl_aw`/`_gcl_gb` value: `GCL.<seconds>.<clickId>[.<labels…>]` — note the timestamp
+* is in SECONDS, unlike `_fbc`'s milliseconds. gtag's parser accepts version `GCL` or `1` and
+* validates the segments exactly this way (`/^\d+$/` timestamp, `/^[\w-]+$/` click id); any
+* labels tail is preserved through `raw` so a re-issue stays byte-identical.
+*/
+function parseGcl(raw, now = Date.now()) {
+	if (!raw) return void 0;
+	const parts = raw.split(".");
+	if (parts.length < 3) return void 0;
+	if (parts[0] !== "GCL" && parts[0] !== "1") return void 0;
+	const seconds = parts[1];
+	const clickId = parts[2];
+	if (seconds === void 0 || !/^\d+$/.test(seconds)) return void 0;
+	if (clickId === void 0 || !GCL_CLICK_ID.test(clickId)) return void 0;
+	const creationTime = Number(seconds) * 1e3;
+	if (creationTime >= 0x38d7ea4c68000 || creationTime > now + CLOCK_SKEW_MS) return void 0;
+	return {
+		raw,
+		creationTime,
+		clickId
+	};
+}
+/** Build a fresh `_gcl_aw`/`_gcl_gb` value in gtag's own format. */
+function formatGcl(clickId, now) {
+	return `GCL.${Math.floor(now / 1e3)}.${clickId}`;
+}
 function searchParams(url) {
 	try {
 		return new URL(url).searchParams;
@@ -101,6 +133,29 @@ function resolveClickIdCookies(input) {
 			if (refresh) set(FBC_COOKIE, existingFbc.raw, remainingMs);
 		}
 	} else if (jar["_fbc"]) del(FBC_COOKIE);
+	const gclsrc = params.get("gclsrc") || void 0;
+	const google = [{
+		cookie: GCL_AW_COOKIE,
+		urlClickId: !gclsrc || gclsrc === "aw.ds" ? params.get("gclid") || void 0 : void 0,
+		assign: (value) => result.gclid = value
+	}, {
+		cookie: GCL_GB_COOKIE,
+		urlClickId: params.get("wbraid") || void 0,
+		assign: (value) => result.wbraid = value
+	}];
+	for (const { cookie, urlClickId, assign } of google) {
+		const existing = parseGcl(jar[cookie], now);
+		if (urlClickId && GCL_CLICK_ID.test(urlClickId) && urlClickId !== existing?.clickId) {
+			set(cookie, formatGcl(urlClickId, now), GCL_TTL_MS);
+			assign(urlClickId);
+		} else if (existing) {
+			const remainingMs = existing.creationTime + GCL_TTL_MS - now;
+			if (remainingMs > 0) {
+				assign(existing.clickId);
+				if (refresh) set(cookie, existing.raw, remainingMs);
+			}
+		}
+	}
 	const urlRdtCid = params.get("rdt_cid") || void 0;
 	const existingRdtCid = jar["_rdt_cid"] || void 0;
 	if (urlRdtCid && urlRdtCid !== existingRdtCid) {
@@ -114,6 +169,6 @@ function toSetCookieHeaders(cookies) {
 	return cookies.map((cookie) => stringifySetCookie(cookie));
 }
 //#endregion
-export { FBC_COOKIE, RDT_CID_COOKIE, formatFbc, parseFbc, resolveClickIdCookies, toSetCookieHeaders };
+export { FBC_COOKIE, GCL_AW_COOKIE, GCL_GB_COOKIE, RDT_CID_COOKIE, formatFbc, formatGcl, parseFbc, parseGcl, resolveClickIdCookies, toSetCookieHeaders };
 
 //# sourceMappingURL=index.mjs.map

package/dist/click-id/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../src/click-id/index.ts"],"sourcesContent":["import { type SetCookie, parseCookie, stringifySetCookie } from 'cookie';\n\n/**\n * Server-side resolution of ad-click-id cookies (`_fbc`, `_rdt_cid`) from the incoming request.\n *\n * This is the framework-agnostic core meant to run on the *document* response (e.g. TanStack Start\n * server middleware, Next middleware). Setting `_fbc` via an HTTP `Set-Cookie` header on the top\n * document — rather than `document.cookie` on the client — is what Meta officially recommends and is\n * the only reliable way to keep the cookie alive for 90 days in Safari: ITP caps JavaScript-set\n * cookies on a fbclid-decorated landing page to 24 hours, and the document response is never\n * classified as CNAME/IP cloaking (it is the reference the browser measures cloaking against).\n *\n * reference: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters/fbp-and-fbc\n */\n\n// Meta's recommended _fbc cookie expiry. Events Manager warns (\"Server sending expired fbclid\")\n// when the embedded creationTime is older than 90 days and match quality/attribution may degrade;\n// no hard drop is documented.\nconst FBC_TTL_MS = 90 * 24 * 60 * 60 * 1000;\nconst RDT_CID_TTL_MS = 90 * 24 * 60 * 60 * 1000;\n// Tolerate a little clock skew when validating a creationTime against \"now\".\nconst CLOCK_SKEW_MS = 24 * 60 * 60 * 1000;\n\nexport const FBC_COOKIE = '_fbc';\nexport const RDT_CID_COOKIE = '_rdt_cid';\n\nexport type ParsedFbc = { raw: string; creationTime: number; fbclid: string };\n\n/**\n * Parse `fb.<subdomainIndex>.<creationTime>.<fbclid>`.\n * Returns undefined for anything malformed — a fbclid never contains a dot, but joining the tail\n * back together keeps us forward-compatible if that ever changes.\n */\nexport function parseFbc(\n  raw: string | undefined | null,\n  now: number = Date.now()\n): ParsedFbc | undefined {\n  if (!raw) return undefined;\n  const parts = raw.split('.');\n  if (parts.length < 4 || parts[0] !== 'fb') return undefined;\n\n  const creationTime = Number(parts[2]);\n  const fbclid = parts.slice(3).join('.');\n  if (!fbclid) return undefined;\n  // creationTime is UNIX ms; reject seconds-precision or future-dated values as malformed.\n  if (!Number.isFinite(creationTime)) return undefined;\n  if (creationTime < 1e12 || creationTime > now + CLOCK_SKEW_MS) return undefined;\n\n  return { raw, creationTime, fbclid };\n}\n\n/**\n * Build a fresh `_fbc` value. subdomainIndex is the cookie's domain level (com=0, example.com=1,\n * www.example.com=2); 1 is correct for an apex-hosted cookie.\n */\nexport function formatFbc(fbclid: string, now: number, subdomainIndex = 1): string {\n  return `fb.${subdomainIndex}.${now}.${fbclid}`;\n}\n\nexport type ResolveClickIdCookiesInput = {\n  /** The absolute request URL (must include the query string). */\n  url: string;\n  /** The raw `Cookie` request header, if any. */\n  cookieHeader?: string | null;\n  /** Overridable clock, primarily for tests. Defaults to `Date.now()`. */\n  now?: number;\n  /** `Domain` attribute for the emitted cookies, e.g. `.shware.io`. Omit for a host-only cookie. */\n  domain?: string;\n  /** `Secure` attribute, default true. Set false only for local http testing. */\n  secure?: boolean;\n  /** subdomainIndex for a freshly built `_fbc` (see {@link formatFbc}). Default 1. */\n  subdomainIndex?: number;\n  /**\n   * Re-issue a still-valid `_fbc` at its *remaining* lifetime on every call. On by default, as an\n   * ITP self-heal: cookies follow last-writer-wins, so if the Meta Pixel overwrote `_fbc` via\n   * `document.cookie` (Safari caps JS-written cookies on a fbclid-decorated landing to 24h),\n   * re-issuing the long-lived HTTP cookie on the next navigation restores it — the same\n   * continuous-re-issue mitigation the sGTM ecosystem uses (stape Cookie Keeper, Cookie Monster).\n   * The value (and its creationTime) is byte-for-byte identical and the window never slides, so it\n   * cannot trigger Meta's expired/modified-fbclid warnings.\n   *\n   * Set false to strictly follow Meta's documented conditional-write rule (\"only set the cookie if\n   * it doesn't exist or the fbclid changed\") — e.g. to keep pages CDN-cacheable, since the\n   * re-issue attaches a per-user `Set-Cookie` (forcing `no-store`) to every response carrying an\n   * `_fbc`.\n   */\n  refresh?: boolean;\n};\n\nexport type ResolveClickIdCookiesResult = {\n  /**\n   * Cookies to emit on the response, ready for `Set-Cookie`. Empty when nothing needs to change.\n   * A `value: ''`, `maxAge: 0` entry is a deletion (an expired or malformed leftover).\n   */\n  cookies: SetCookie[];\n  /** The resolved `_fbc` value, for immediate server-side use (e.g. Conversions API). */\n  fbc?: string;\n  /** The resolved `_rdt_cid` value. */\n  rdt_cid?: string;\n};\n\nfunction searchParams(url: string): URLSearchParams {\n  try {\n    return new URL(url).searchParams;\n  } catch {\n    // Fall back to a manual split so a relative or slightly malformed URL still yields the query.\n    const q = url.indexOf('?');\n    return new URLSearchParams(q !== -1 ? url.slice(q + 1) : '');\n  }\n}\n\n/**\n * Resolve the click-id cookies to set on the current document response.\n *\n * `_fbc` follows Meta's documented conditional-write rule value-wise: a new fbclid (or an absent\n * cookie) opens a fresh 90-day window; a same-fbclid cookie keeps its original value and\n * `creationTime`. Expired (>90d) or malformed values are cleared instead of forwarded. By default,\n * ({@link ResolveClickIdCookiesInput.refresh}) a still-valid cookie is re-issued unchanged at its\n * *remaining* lifetime — never `now + 90d` — so a returning visitor's window cannot slide forward\n * (which is what makes Meta flag an expired fbclid).\n */\nexport function resolveClickIdCookies(\n  input: ResolveClickIdCookiesInput\n): ResolveClickIdCookiesResult {\n  const { url, cookieHeader, domain, secure = true, subdomainIndex = 1, refresh = true } = input;\n  const now = input.now ?? Date.now();\n\n  const params = searchParams(url);\n  const jar = parseCookie(cookieHeader ?? '');\n  const cookies: SetCookie[] = [];\n  const result: ResolveClickIdCookiesResult = { cookies };\n\n  const base = { path: '/', secure, sameSite: 'lax', domain } as const;\n  const set = (name: string, value: string, ttlMs: number) =>\n    cookies.push({ name, value, maxAge: Math.floor(ttlMs / 1000), ...base });\n  const del = (name: string) => cookies.push({ name, value: '', maxAge: 0, ...base });\n\n  // --- Meta _fbc ---\n  const urlFbclid = params.get('fbclid') || undefined;\n  const existingFbc = parseFbc(jar[FBC_COOKIE], now);\n\n  if (urlFbclid && urlFbclid !== existingFbc?.fbclid) {\n    // A new click always wins and opens a fresh 90-day window.\n    const raw = formatFbc(urlFbclid, now, subdomainIndex);\n    set(FBC_COOKIE, raw, FBC_TTL_MS);\n    result.fbc = raw;\n  } else if (existingFbc) {\n    const remainingMs = existingFbc.creationTime + FBC_TTL_MS - now;\n    if (remainingMs <= 0) {\n      del(FBC_COOKIE);\n    } else {\n      // Same fbclid: the value and creationTime are preserved (Meta's rule); refresh (default)\n      // re-issues it unchanged at its remaining lifetime as an ITP self-heal.\n      result.fbc = existingFbc.raw;\n      if (refresh) set(FBC_COOKIE, existingFbc.raw, remainingMs);\n    }\n  } else if (jar[FBC_COOKIE]) {\n    // Malformed leftover — clear it rather than forwarding it to Meta.\n    del(FBC_COOKIE);\n  }\n\n  // --- Reddit _rdt_cid ---\n  // No embedded timestamp, so it can only be anchored at first capture; set it once from the URL and\n  // otherwise leave the existing cookie untouched (re-issuing would slide its window).\n  const urlRdtCid = params.get('rdt_cid') || undefined;\n  const existingRdtCid = jar[RDT_CID_COOKIE] || undefined;\n  if (urlRdtCid && urlRdtCid !== existingRdtCid) {\n    set(RDT_CID_COOKIE, urlRdtCid, RDT_CID_TTL_MS);\n    result.rdt_cid = urlRdtCid;\n  } else if (existingRdtCid) {\n    result.rdt_cid = existingRdtCid;\n  }\n\n  return result;\n}\n\n/** Serialize the resolved cookies into `Set-Cookie` header values. */\nexport function toSetCookieHeaders(cookies: SetCookie[]): string[] {\n  return cookies.map((cookie) => stringifySetCookie(cookie));\n}\n"],"mappings":";;;;;;;;;;;;;;AAkBA,MAAM,aAAa,OAAU,KAAK,KAAK;AACvC,MAAM,iBAAiB,OAAU,KAAK,KAAK;AAE3C,MAAM,gBAAgB,OAAU,KAAK;AAErC,MAAa,aAAa;AAC1B,MAAa,iBAAiB;;;;;;AAS9B,SAAgB,SACd,KACA,MAAc,KAAK,IAAI,GACA;CACvB,IAAI,CAAC,KAAK,OAAO,KAAA;CACjB,MAAM,QAAQ,IAAI,MAAM,GAAG;CAC3B,IAAI,MAAM,SAAS,KAAK,MAAM,OAAO,MAAM,OAAO,KAAA;CAElD,MAAM,eAAe,OAAO,MAAM,EAAE;CACpC,MAAM,SAAS,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;CACtC,IAAI,CAAC,QAAQ,OAAO,KAAA;CAEpB,IAAI,CAAC,OAAO,SAAS,YAAY,GAAG,OAAO,KAAA;CAC3C,IAAI,eAAe,gBAAQ,eAAe,MAAM,eAAe,OAAO,KAAA;CAEtE,OAAO;EAAE;EAAK;EAAc;CAAO;AACrC;;;;;AAMA,SAAgB,UAAU,QAAgB,KAAa,iBAAiB,GAAW;CACjF,OAAO,MAAM,eAAe,GAAG,IAAI,GAAG;AACxC;AA4CA,SAAS,aAAa,KAA8B;CAClD,IAAI;EACF,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC;CACtB,QAAQ;EAEN,MAAM,IAAI,IAAI,QAAQ,GAAG;EACzB,OAAO,IAAI,gBAAgB,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,IAAI,EAAE;CAC7D;AACF;;;;;;;;;;;AAYA,SAAgB,sBACd,OAC6B;CAC7B,MAAM,EAAE,KAAK,cAAc,QAAQ,SAAS,MAAM,iBAAiB,GAAG,UAAU,SAAS;CACzF,MAAM,MAAM,MAAM,OAAO,KAAK,IAAI;CAElC,MAAM,SAAS,aAAa,GAAG;CAC/B,MAAM,MAAM,YAAY,gBAAgB,EAAE;CAC1C,MAAM,UAAuB,CAAC;CAC9B,MAAM,SAAsC,EAAE,QAAQ;CAEtD,MAAM,OAAO;EAAE,MAAM;EAAK;EAAQ,UAAU;EAAO;CAAO;CAC1D,MAAM,OAAO,MAAc,OAAe,UACxC,QAAQ,KAAK;EAAE;EAAM;EAAO,QAAQ,KAAK,MAAM,QAAQ,GAAI;EAAG,GAAG;CAAK,CAAC;CACzE,MAAM,OAAO,SAAiB,QAAQ,KAAK;EAAE;EAAM,OAAO;EAAI,QAAQ;EAAG,GAAG;CAAK,CAAC;CAGlF,MAAM,YAAY,OAAO,IAAI,QAAQ,KAAK,KAAA;CAC1C,MAAM,cAAc,SAAS,IAAI,aAAa,GAAG;CAEjD,IAAI,aAAa,cAAc,aAAa,QAAQ;EAElD,MAAM,MAAM,UAAU,WAAW,KAAK,cAAc;EACpD,IAAI,YAAY,KAAK,UAAU;EAC/B,OAAO,MAAM;CACf,OAAO,IAAI,aAAa;EACtB,MAAM,cAAc,YAAY,eAAe,aAAa;EAC5D,IAAI,eAAe,GACjB,IAAI,UAAU;OACT;GAGL,OAAO,MAAM,YAAY;GACzB,IAAI,SAAS,IAAI,YAAY,YAAY,KAAK,WAAW;EAC3D;CACF,OAAO,IAAI,IAAA,SAET,IAAI,UAAU;CAMhB,MAAM,YAAY,OAAO,IAAI,SAAS,KAAK,KAAA;CAC3C,MAAM,iBAAiB,IAAA,eAAuB,KAAA;CAC9C,IAAI,aAAa,cAAc,gBAAgB;EAC7C,IAAI,gBAAgB,WAAW,cAAc;EAC7C,OAAO,UAAU;CACnB,OAAO,IAAI,gBACT,OAAO,UAAU;CAGnB,OAAO;AACT;;AAGA,SAAgB,mBAAmB,SAAgC;CACjE,OAAO,QAAQ,KAAK,WAAW,mBAAmB,MAAM,CAAC;AAC3D"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/click-id/index.ts"],"sourcesContent":["import { type SetCookie, parseCookie, stringifySetCookie } from 'cookie';\n\n/**\n * Server-side resolution of ad-click-id cookies (`_fbc`, `_gcl_aw`/`_gcl_gb`, `_rdt_cid`) from\n * the incoming request.\n *\n * This is the framework-agnostic core meant to run on the *document* response (e.g. TanStack Start\n * server middleware, Next middleware). Setting `_fbc` via an HTTP `Set-Cookie` header on the top\n * document — rather than `document.cookie` on the client — is what Meta officially recommends and is\n * the only reliable way to keep the cookie alive for 90 days in Safari: ITP caps JavaScript-set\n * cookies on a fbclid-decorated landing page to 24 hours, and the document response is never\n * classified as CNAME/IP cloaking (it is the reference the browser measures cloaking against).\n *\n * reference: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters/fbp-and-fbc\n */\n\n// Meta's recommended _fbc cookie expiry. Events Manager warns (\"Server sending expired fbclid\")\n// when the embedded creationTime is older than 90 days and match quality/attribution may degrade;\n// no hard drop is documented.\nconst FBC_TTL_MS = 90 * 24 * 60 * 60 * 1000;\nconst RDT_CID_TTL_MS = 90 * 24 * 60 * 60 * 1000;\n// gtag's own expiry for _gcl_* — 90 days, the length of a Google Ads click's upload window.\nconst GCL_TTL_MS = 90 * 24 * 60 * 60 * 1000;\n// Tolerate a little clock skew when validating a creationTime against \"now\".\nconst CLOCK_SKEW_MS = 24 * 60 * 60 * 1000;\n\nexport const FBC_COOKIE = '_fbc';\nexport const RDT_CID_COOKIE = '_rdt_cid';\nexport const GCL_AW_COOKIE = '_gcl_aw';\nexport const GCL_GB_COOKIE = '_gcl_gb';\n\nexport type ParsedFbc = { raw: string; creationTime: number; fbclid: string };\n\n/**\n * Parse `fb.<subdomainIndex>.<creationTime>.<fbclid>`.\n * Returns undefined for anything malformed — a fbclid never contains a dot, but joining the tail\n * back together keeps us forward-compatible if that ever changes.\n */\nexport function parseFbc(\n  raw: string | undefined | null,\n  now: number = Date.now()\n): ParsedFbc | undefined {\n  if (!raw) return undefined;\n  const parts = raw.split('.');\n  if (parts.length < 4 || parts[0] !== 'fb') return undefined;\n\n  const creationTime = Number(parts[2]);\n  const fbclid = parts.slice(3).join('.');\n  if (!fbclid) return undefined;\n  // creationTime is UNIX ms; reject seconds-precision or future-dated values as malformed.\n  if (!Number.isFinite(creationTime)) return undefined;\n  if (creationTime < 1e12 || creationTime > now + CLOCK_SKEW_MS) return undefined;\n\n  return { raw, creationTime, fbclid };\n}\n\n/**\n * Build a fresh `_fbc` value. subdomainIndex is the cookie's domain level (com=0, example.com=1,\n * www.example.com=2); 1 is correct for an apex-hosted cookie.\n */\nexport function formatFbc(fbclid: string, now: number, subdomainIndex = 1): string {\n  return `fb.${subdomainIndex}.${now}.${fbclid}`;\n}\n\nexport type ParsedGcl = { raw: string; creationTime: number; clickId: string };\n\n// gtag's own value validator, extracted from gtag.js: the click id segment must match this.\nconst GCL_CLICK_ID = /^[\\w-]+$/;\n\n/**\n * Parse a `_gcl_aw`/`_gcl_gb` value: `GCL.<seconds>.<clickId>[.<labels…>]` — note the timestamp\n * is in SECONDS, unlike `_fbc`'s milliseconds. gtag's parser accepts version `GCL` or `1` and\n * validates the segments exactly this way (`/^\\d+$/` timestamp, `/^[\\w-]+$/` click id); any\n * labels tail is preserved through `raw` so a re-issue stays byte-identical.\n */\nexport function parseGcl(\n  raw: string | undefined | null,\n  now: number = Date.now()\n): ParsedGcl | undefined {\n  if (!raw) return undefined;\n  const parts = raw.split('.');\n  if (parts.length < 3) return undefined;\n  if (parts[0] !== 'GCL' && parts[0] !== '1') return undefined;\n  const seconds = parts[1];\n  const clickId = parts[2];\n  if (seconds === undefined || !/^\\d+$/.test(seconds)) return undefined;\n  if (clickId === undefined || !GCL_CLICK_ID.test(clickId)) return undefined;\n  const creationTime = Number(seconds) * 1000;\n  // Reject millisecond-precision or future-dated values as malformed.\n  if (creationTime >= 1e15 || creationTime > now + CLOCK_SKEW_MS) return undefined;\n  return { raw, creationTime, clickId };\n}\n\n/** Build a fresh `_gcl_aw`/`_gcl_gb` value in gtag's own format. */\nexport function formatGcl(clickId: string, now: number): string {\n  return `GCL.${Math.floor(now / 1000)}.${clickId}`;\n}\n\nexport type ResolveClickIdCookiesInput = {\n  /** The absolute request URL (must include the query string). */\n  url: string;\n  /** The raw `Cookie` request header, if any. */\n  cookieHeader?: string | null;\n  /** Overridable clock, primarily for tests. Defaults to `Date.now()`. */\n  now?: number;\n  /** `Domain` attribute for the emitted cookies, e.g. `.shware.io`. Omit for a host-only cookie. */\n  domain?: string;\n  /** `Secure` attribute, default true. Set false only for local http testing. */\n  secure?: boolean;\n  /** subdomainIndex for a freshly built `_fbc` (see {@link formatFbc}). Default 1. */\n  subdomainIndex?: number;\n  /**\n   * Re-issue a still-valid `_fbc` at its *remaining* lifetime on every call. On by default, as an\n   * ITP self-heal: cookies follow last-writer-wins, so if the Meta Pixel overwrote `_fbc` via\n   * `document.cookie` (Safari caps JS-written cookies on a fbclid-decorated landing to 24h),\n   * re-issuing the long-lived HTTP cookie on the next navigation restores it — the same\n   * continuous-re-issue mitigation the sGTM ecosystem uses (stape Cookie Keeper, Cookie Monster).\n   * The value (and its creationTime) is byte-for-byte identical and the window never slides, so it\n   * cannot trigger Meta's expired/modified-fbclid warnings.\n   *\n   * Set false to strictly follow Meta's documented conditional-write rule (\"only set the cookie if\n   * it doesn't exist or the fbclid changed\") — e.g. to keep pages CDN-cacheable, since the\n   * re-issue attaches a per-user `Set-Cookie` (forcing `no-store`) to every response carrying an\n   * `_fbc`.\n   */\n  refresh?: boolean;\n};\n\nexport type ResolveClickIdCookiesResult = {\n  /**\n   * Cookies to emit on the response, ready for `Set-Cookie`. Empty when nothing needs to change.\n   * A `value: ''`, `maxAge: 0` entry is a deletion (an expired or malformed leftover).\n   */\n  cookies: SetCookie[];\n  /** The resolved `_fbc` value, for immediate server-side use (e.g. Conversions API). */\n  fbc?: string;\n  /** The resolved `_rdt_cid` value. */\n  rdt_cid?: string;\n  /** The resolved Google Ads click id (from the URL or a still-valid `_gcl_aw`). */\n  gclid?: string;\n  /** The resolved iOS web-to-app click id (from the URL or a still-valid `_gcl_gb`). */\n  wbraid?: string;\n};\n\nfunction searchParams(url: string): URLSearchParams {\n  try {\n    return new URL(url).searchParams;\n  } catch {\n    // Fall back to a manual split so a relative or slightly malformed URL still yields the query.\n    const q = url.indexOf('?');\n    return new URLSearchParams(q !== -1 ? url.slice(q + 1) : '');\n  }\n}\n\n/**\n * Resolve the click-id cookies to set on the current document response.\n *\n * `_fbc` follows Meta's documented conditional-write rule value-wise: a new fbclid (or an absent\n * cookie) opens a fresh 90-day window; a same-fbclid cookie keeps its original value and\n * `creationTime`. Expired (>90d) or malformed values are cleared instead of forwarded. By default,\n * ({@link ResolveClickIdCookiesInput.refresh}) a still-valid cookie is re-issued unchanged at its\n * *remaining* lifetime — never `now + 90d` — so a returning visitor's window cannot slide forward\n * (which is what makes Meta flag an expired fbclid).\n */\nexport function resolveClickIdCookies(\n  input: ResolveClickIdCookiesInput\n): ResolveClickIdCookiesResult {\n  const { url, cookieHeader, domain, secure = true, subdomainIndex = 1, refresh = true } = input;\n  const now = input.now ?? Date.now();\n\n  const params = searchParams(url);\n  const jar = parseCookie(cookieHeader ?? '');\n  const cookies: SetCookie[] = [];\n  const result: ResolveClickIdCookiesResult = { cookies };\n\n  const base = { path: '/', secure, sameSite: 'lax', domain } as const;\n  const set = (name: string, value: string, ttlMs: number) =>\n    cookies.push({ name, value, maxAge: Math.floor(ttlMs / 1000), ...base });\n  const del = (name: string) => cookies.push({ name, value: '', maxAge: 0, ...base });\n\n  // --- Meta _fbc ---\n  const urlFbclid = params.get('fbclid') || undefined;\n  const existingFbc = parseFbc(jar[FBC_COOKIE], now);\n\n  if (urlFbclid && urlFbclid !== existingFbc?.fbclid) {\n    // A new click always wins and opens a fresh 90-day window.\n    const raw = formatFbc(urlFbclid, now, subdomainIndex);\n    set(FBC_COOKIE, raw, FBC_TTL_MS);\n    result.fbc = raw;\n  } else if (existingFbc) {\n    const remainingMs = existingFbc.creationTime + FBC_TTL_MS - now;\n    if (remainingMs <= 0) {\n      del(FBC_COOKIE);\n    } else {\n      // Same fbclid: the value and creationTime are preserved (Meta's rule); refresh (default)\n      // re-issues it unchanged at its remaining lifetime as an ITP self-heal.\n      result.fbc = existingFbc.raw;\n      if (refresh) set(FBC_COOKIE, existingFbc.raw, remainingMs);\n    }\n  } else if (jar[FBC_COOKIE]) {\n    // Malformed leftover — clear it rather than forwarding it to Meta.\n    del(FBC_COOKIE);\n  }\n\n  // --- Google Ads _gcl_aw / _gcl_gb ---\n  // The same first-party HTTP persistence Google's own server-side Conversion Linker performs\n  // (it sets FPGCLAW via Set-Cookie for 90 days), applied to gtag's cookies the way the sGTM\n  // ecosystem does (stape Cookie Keeper re-issues _gcl_* over HTTP). Ownership is shared with\n  // gtag, so the rules are stricter than for _fbc: a value this module cannot parse is left\n  // untouched — never rewritten, never deleted — and a re-issue is byte-identical (labels tail\n  // included) at the window's REMAINING lifetime, so the 90-day click window never slides.\n  const gclsrc = params.get('gclsrc') || undefined;\n  const google = [\n    {\n      cookie: GCL_AW_COOKIE,\n      // gtag's own gating, verbatim: a gclid enters _gcl_aw only when gclsrc is absent or\n      // 'aw.ds' — 'ds'/'3p.ds' clicks are Search Ads 360's and belong to _gcl_dc.\n      urlClickId: !gclsrc || gclsrc === 'aw.ds' ? params.get('gclid') || undefined : undefined,\n      assign: (value: string) => (result.gclid = value),\n    },\n    {\n      cookie: GCL_GB_COOKIE,\n      urlClickId: params.get('wbraid') || undefined,\n      assign: (value: string) => (result.wbraid = value),\n    },\n  ];\n  for (const { cookie, urlClickId, assign } of google) {\n    const existing = parseGcl(jar[cookie], now);\n    if (urlClickId && GCL_CLICK_ID.test(urlClickId) && urlClickId !== existing?.clickId) {\n      // A new click always wins and opens a fresh 90-day window, in gtag's exact format.\n      set(cookie, formatGcl(urlClickId, now), GCL_TTL_MS);\n      assign(urlClickId);\n    } else if (existing) {\n      const remainingMs = existing.creationTime + GCL_TTL_MS - now;\n      if (remainingMs > 0) {\n        assign(existing.clickId);\n        if (refresh) set(cookie, existing.raw, remainingMs);\n      }\n      // Expired: not returned and not re-issued, but gtag owns the deletion.\n    }\n  }\n\n  // --- Reddit _rdt_cid ---\n  // No embedded timestamp, so it can only be anchored at first capture; set it once from the URL and\n  // otherwise leave the existing cookie untouched (re-issuing would slide its window).\n  const urlRdtCid = params.get('rdt_cid') || undefined;\n  const existingRdtCid = jar[RDT_CID_COOKIE] || undefined;\n  if (urlRdtCid && urlRdtCid !== existingRdtCid) {\n    set(RDT_CID_COOKIE, urlRdtCid, RDT_CID_TTL_MS);\n    result.rdt_cid = urlRdtCid;\n  } else if (existingRdtCid) {\n    result.rdt_cid = existingRdtCid;\n  }\n\n  return result;\n}\n\n/** Serialize the resolved cookies into `Set-Cookie` header values. */\nexport function toSetCookieHeaders(cookies: SetCookie[]): string[] {\n  return cookies.map((cookie) => stringifySetCookie(cookie));\n}\n"],"mappings":";;;;;;;;;;;;;;;AAmBA,MAAM,aAAa;AACnB,MAAM,iBAAiB;AAEvB,MAAM,aAAa;AAEnB,MAAM,gBAAgB;AAEtB,MAAa,aAAa;AAC1B,MAAa,iBAAiB;AAC9B,MAAa,gBAAgB;AAC7B,MAAa,gBAAgB;;;;;;AAS7B,SAAgB,SACd,KACA,MAAc,KAAK,IAAI,GACA;CACvB,IAAI,CAAC,KAAK,OAAO,KAAA;CACjB,MAAM,QAAQ,IAAI,MAAM,GAAG;CAC3B,IAAI,MAAM,SAAS,KAAK,MAAM,OAAO,MAAM,OAAO,KAAA;CAElD,MAAM,eAAe,OAAO,MAAM,EAAE;CACpC,MAAM,SAAS,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;CACtC,IAAI,CAAC,QAAQ,OAAO,KAAA;CAEpB,IAAI,CAAC,OAAO,SAAS,YAAY,GAAG,OAAO,KAAA;CAC3C,IAAI,eAAe,gBAAQ,eAAe,MAAM,eAAe,OAAO,KAAA;CAEtE,OAAO;EAAE;EAAK;EAAc;CAAO;AACrC;;;;;AAMA,SAAgB,UAAU,QAAgB,KAAa,iBAAiB,GAAW;CACjF,OAAO,MAAM,eAAe,GAAG,IAAI,GAAG;AACxC;AAKA,MAAM,eAAe;;;;;;;AAQrB,SAAgB,SACd,KACA,MAAc,KAAK,IAAI,GACA;CACvB,IAAI,CAAC,KAAK,OAAO,KAAA;CACjB,MAAM,QAAQ,IAAI,MAAM,GAAG;CAC3B,IAAI,MAAM,SAAS,GAAG,OAAO,KAAA;CAC7B,IAAI,MAAM,OAAO,SAAS,MAAM,OAAO,KAAK,OAAO,KAAA;CACnD,MAAM,UAAU,MAAM;CACtB,MAAM,UAAU,MAAM;CACtB,IAAI,YAAY,KAAA,KAAa,CAAC,QAAQ,KAAK,OAAO,GAAG,OAAO,KAAA;CAC5D,IAAI,YAAY,KAAA,KAAa,CAAC,aAAa,KAAK,OAAO,GAAG,OAAO,KAAA;CACjE,MAAM,eAAe,OAAO,OAAO,IAAI;CAEvC,IAAI,gBAAgB,mBAAQ,eAAe,MAAM,eAAe,OAAO,KAAA;CACvE,OAAO;EAAE;EAAK;EAAc;CAAQ;AACtC;;AAGA,SAAgB,UAAU,SAAiB,KAAqB;CAC9D,OAAO,OAAO,KAAK,MAAM,MAAM,GAAI,EAAE,GAAG;AAC1C;AAgDA,SAAS,aAAa,KAA8B;CAClD,IAAI;EACF,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC;CACtB,QAAQ;EAEN,MAAM,IAAI,IAAI,QAAQ,GAAG;EACzB,OAAO,IAAI,gBAAgB,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,IAAI,EAAE;CAC7D;AACF;;;;;;;;;;;AAYA,SAAgB,sBACd,OAC6B;CAC7B,MAAM,EAAE,KAAK,cAAc,QAAQ,SAAS,MAAM,iBAAiB,GAAG,UAAU,SAAS;CACzF,MAAM,MAAM,MAAM,OAAO,KAAK,IAAI;CAElC,MAAM,SAAS,aAAa,GAAG;CAC/B,MAAM,MAAM,YAAY,gBAAgB,EAAE;CAC1C,MAAM,UAAuB,CAAC;CAC9B,MAAM,SAAsC,EAAE,QAAQ;CAEtD,MAAM,OAAO;EAAE,MAAM;EAAK;EAAQ,UAAU;EAAO;CAAO;CAC1D,MAAM,OAAO,MAAc,OAAe,UACxC,QAAQ,KAAK;EAAE;EAAM;EAAO,QAAQ,KAAK,MAAM,QAAQ,GAAI;EAAG,GAAG;CAAK,CAAC;CACzE,MAAM,OAAO,SAAiB,QAAQ,KAAK;EAAE;EAAM,OAAO;EAAI,QAAQ;EAAG,GAAG;CAAK,CAAC;CAGlF,MAAM,YAAY,OAAO,IAAI,QAAQ,KAAK,KAAA;CAC1C,MAAM,cAAc,SAAS,IAAI,aAAa,GAAG;CAEjD,IAAI,aAAa,cAAc,aAAa,QAAQ;EAElD,MAAM,MAAM,UAAU,WAAW,KAAK,cAAc;EACpD,IAAI,YAAY,KAAK,UAAU;EAC/B,OAAO,MAAM;CACf,OAAO,IAAI,aAAa;EACtB,MAAM,cAAc,YAAY,eAAe,aAAa;EAC5D,IAAI,eAAe,GACjB,IAAI,UAAU;OACT;GAGL,OAAO,MAAM,YAAY;GACzB,IAAI,SAAS,IAAI,YAAY,YAAY,KAAK,WAAW;EAC3D;CACF,OAAO,IAAI,IAAA,SAET,IAAI,UAAU;CAUhB,MAAM,SAAS,OAAO,IAAI,QAAQ,KAAK,KAAA;CACvC,MAAM,SAAS,CACb;EACE,QAAQ;EAGR,YAAY,CAAC,UAAU,WAAW,UAAU,OAAO,IAAI,OAAO,KAAK,KAAA,IAAY,KAAA;EAC/E,SAAS,UAAmB,OAAO,QAAQ;CAC7C,GACA;EACE,QAAQ;EACR,YAAY,OAAO,IAAI,QAAQ,KAAK,KAAA;EACpC,SAAS,UAAmB,OAAO,SAAS;CAC9C,CACF;CACA,KAAK,MAAM,EAAE,QAAQ,YAAY,YAAY,QAAQ;EACnD,MAAM,WAAW,SAAS,IAAI,SAAS,GAAG;EAC1C,IAAI,cAAc,aAAa,KAAK,UAAU,KAAK,eAAe,UAAU,SAAS;GAEnF,IAAI,QAAQ,UAAU,YAAY,GAAG,GAAG,UAAU;GAClD,OAAO,UAAU;EACnB,OAAO,IAAI,UAAU;GACnB,MAAM,cAAc,SAAS,eAAe,aAAa;GACzD,IAAI,cAAc,GAAG;IACnB,OAAO,SAAS,OAAO;IACvB,IAAI,SAAS,IAAI,QAAQ,SAAS,KAAK,WAAW;GACpD;EAEF;CACF;CAKA,MAAM,YAAY,OAAO,IAAI,SAAS,KAAK,KAAA;CAC3C,MAAM,iBAAiB,IAAA,eAAuB,KAAA;CAC9C,IAAI,aAAa,cAAc,gBAAgB;EAC7C,IAAI,gBAAgB,WAAW,cAAc;EAC7C,OAAO,UAAU;CACnB,OAAO,IAAI,gBACT,OAAO,UAAU;CAGnB,OAAO;AACT;;AAGA,SAAgB,mBAAmB,SAAgC;CACjE,OAAO,QAAQ,KAAK,WAAW,mBAAmB,MAAM,CAAC;AAC3D"}

package/dist/feedback/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["config"],"sources":["../../src/feedback/index.ts"],"sourcesContent":["import { fetch } from '@shware/utils';\nimport type { CreateFeedbackDTO } from '../schema/index';\nimport { config } from '../setup/index';\n\nexport async function sendFeedback(dto: CreateFeedbackDTO) {\n  const response = await fetch(`${config.endpoint}/feedback`, {\n    method: 'POST',\n    credentials: 'include',\n    headers: await config.getHeaders(),\n    body: JSON.stringify(dto),\n  });\n\n  if (!response.ok) {\n    throw new Error(`Failed to send feedback: ${response.status} ${await response.text()}`);\n  }\n}\n"],"mappings":";;;;AAIA,eAAsB,aAAa,KAAwB;CACzD,MAAM,WAAW,OAAA,GAAA,cAAA,MAAA,CAAY,GAAGA,oBAAAA,OAAO,SAAS,YAAY;EAC1D,QAAQ;EACR,aAAa;EACb,SAAS,MAAMA,oBAAAA,OAAO,WAAW;EACjC,MAAM,KAAK,UAAU,GAAG;CAC1B,CAAC;CAED,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,4BAA4B,SAAS,OAAO,GAAG,MAAM,SAAS,KAAK,GAAG;AAE1F"}
+{"version":3,"file":"index.cjs","names":["fetch","config"],"sources":["../../src/feedback/index.ts"],"sourcesContent":["import { fetch } from '@shware/utils';\nimport type { CreateFeedbackDTO } from '../schema/index';\nimport { config } from '../setup/index';\n\nexport async function sendFeedback(dto: CreateFeedbackDTO) {\n  const response = await fetch(`${config.endpoint}/feedback`, {\n    method: 'POST',\n    credentials: 'include',\n    headers: await config.getHeaders(),\n    body: JSON.stringify(dto),\n  });\n\n  if (!response.ok) {\n    throw new Error(`Failed to send feedback: ${response.status} ${await response.text()}`);\n  }\n}\n"],"mappings":";;;;AAIA,eAAsB,aAAa,KAAwB;CACzD,MAAM,WAAW,OAAA,GAAMA,cAAAA,MAAAA,CAAM,GAAGC,oBAAAA,OAAO,SAAS,YAAY;EAC1D,QAAQ;EACR,aAAa;EACb,SAAS,MAAMA,oBAAAA,OAAO,WAAW;EACjC,MAAM,KAAK,UAAU,GAAG;CAC1B,CAAC;CAED,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,4BAA4B,SAAS,OAAO,GAAG,MAAM,SAAS,KAAK,GAAG;AAE1F"}

package/dist/hooks/use-previous.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"use-previous.cjs","names":[],"sources":["../../src/hooks/use-previous.ts"],"sourcesContent":["import { useEffect, useRef } from 'react';\n\nexport function usePrevious<T>(value: T): T | undefined {\n  const ref = useRef<T | undefined>(undefined);\n  useEffect(() => {\n    ref.current = value;\n  });\n  return ref.current;\n}\n"],"mappings":";;;AAEA,SAAgB,YAAe,OAAyB;CACtD,MAAM,OAAA,GAAA,MAAA,OAAA,CAA4B,KAAA,CAAS;CAC3C,CAAA,GAAA,MAAA,UAAA,OAAgB;EACd,IAAI,UAAU;CAChB,CAAC;CACD,OAAO,IAAI;AACb"}
+{"version":3,"file":"use-previous.cjs","names":["useRef"],"sources":["../../src/hooks/use-previous.ts"],"sourcesContent":["import { useEffect, useRef } from 'react';\n\nexport function usePrevious<T>(value: T): T | undefined {\n  const ref = useRef<T | undefined>(undefined);\n  useEffect(() => {\n    ref.current = value;\n  });\n  return ref.current;\n}\n"],"mappings":";;;AAEA,SAAgB,YAAe,OAAyB;CACtD,MAAM,OAAA,GAAMA,MAAAA,OAAAA,CAAsB,KAAA,CAAS;CAC3C,CAAA,GAAA,MAAA,UAAA,OAAgB;EACd,IAAI,UAAU;CAChB,CAAC;CACD,OAAO,IAAI;AACb"}

package/dist/hooks/use-track-impression.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"use-track-impression.cjs","names":[],"sources":["../../src/hooks/use-track-impression.ts"],"sourcesContent":["import { type RefCallback, useEffect, useEffectEvent, useRef, useState } from 'react';\nimport { track } from '../track/index';\nimport type { EventName, TrackName, TrackProperties } from '../track/types';\n\nexport function useTrackImpression<T extends EventName = EventName>(\n  name: TrackName<T>,\n  properties?: TrackProperties<T>\n): RefCallback<Element> {\n  const fired = useRef(false);\n  const [node, setNode] = useState<Element | null>(null);\n\n  const onTrack = useEffectEvent(() => {\n    if (fired.current) return;\n    track(name, properties);\n    fired.current = true;\n  });\n\n  useEffect(() => {\n    if (!node) return;\n\n    const observer = new IntersectionObserver(\n      ([entry]) => {\n        if (!entry.isIntersecting) return;\n        onTrack();\n        observer.disconnect();\n      },\n      { threshold: 0.5 }\n    );\n\n    observer.observe(node);\n    return () => observer.disconnect();\n  }, [node]);\n\n  // A callback ref (contravariant in the element type) instead of a RefObject:\n  // it attaches to any element without an R type parameter, so `name` stays the\n  // only inference site and explicit type arguments are never needed. It also\n  // observes elements that mount late, which the previous [ref.current] effect\n  // dependency missed.\n  return setNode;\n}\n"],"mappings":";;;;AAIA,SAAgB,mBACd,MACA,YACsB;CACtB,MAAM,SAAA,GAAA,MAAA,OAAA,CAAe,KAAK;CAC1B,MAAM,CAAC,MAAM,YAAA,GAAA,MAAA,SAAA,CAAoC,IAAI;CAErD,MAAM,WAAA,GAAA,MAAA,eAAA,OAA+B;EACnC,IAAI,MAAM,SAAS;EACnB,oBAAA,MAAM,MAAM,UAAU;EACtB,MAAM,UAAU;CAClB,CAAC;CAED,CAAA,GAAA,MAAA,UAAA,OAAgB;EACd,IAAI,CAAC,MAAM;EAEX,MAAM,WAAW,IAAI,sBAClB,CAAC,WAAW;GACX,IAAI,CAAC,MAAM,gBAAgB;GAC3B,QAAQ;GACR,SAAS,WAAW;EACtB,GACA,EAAE,WAAW,GAAI,CACnB;EAEA,SAAS,QAAQ,IAAI;EACrB,aAAa,SAAS,WAAW;CACnC,GAAG,CAAC,IAAI,CAAC;CAOT,OAAO;AACT"}
+{"version":3,"file":"use-track-impression.cjs","names":["useRef","useState","useEffectEvent"],"sources":["../../src/hooks/use-track-impression.ts"],"sourcesContent":["import { type RefCallback, useEffect, useEffectEvent, useRef, useState } from 'react';\nimport { track } from '../track/index';\nimport type { EventName, TrackName, TrackProperties } from '../track/types';\n\nexport function useTrackImpression<T extends EventName = EventName>(\n  name: TrackName<T>,\n  properties?: TrackProperties<T>\n): RefCallback<Element> {\n  const fired = useRef(false);\n  const [node, setNode] = useState<Element | null>(null);\n\n  const onTrack = useEffectEvent(() => {\n    if (fired.current) return;\n    track(name, properties);\n    fired.current = true;\n  });\n\n  useEffect(() => {\n    if (!node) return;\n\n    const observer = new IntersectionObserver(\n      ([entry]) => {\n        if (!entry.isIntersecting) return;\n        onTrack();\n        observer.disconnect();\n      },\n      { threshold: 0.5 }\n    );\n\n    observer.observe(node);\n    return () => observer.disconnect();\n  }, [node]);\n\n  // A callback ref (contravariant in the element type) instead of a RefObject:\n  // it attaches to any element without an R type parameter, so `name` stays the\n  // only inference site and explicit type arguments are never needed. It also\n  // observes elements that mount late, which the previous [ref.current] effect\n  // dependency missed.\n  return setNode;\n}\n"],"mappings":";;;;AAIA,SAAgB,mBACd,MACA,YACsB;CACtB,MAAM,SAAA,GAAQA,MAAAA,OAAAA,CAAO,KAAK;CAC1B,MAAM,CAAC,MAAM,YAAA,GAAWC,MAAAA,SAAAA,CAAyB,IAAI;CAErD,MAAM,WAAA,GAAUC,MAAAA,eAAAA,OAAqB;EACnC,IAAI,MAAM,SAAS;EACnB,oBAAA,MAAM,MAAM,UAAU;EACtB,MAAM,UAAU;CAClB,CAAC;CAED,CAAA,GAAA,MAAA,UAAA,OAAgB;EACd,IAAI,CAAC,MAAM;EAEX,MAAM,WAAW,IAAI,sBAClB,CAAC,WAAW;GACX,IAAI,CAAC,MAAM,gBAAgB;GAC3B,QAAQ;GACR,SAAS,WAAW;EACtB,GACA,EAAE,WAAW,GAAI,CACnB;EAEA,SAAS,QAAQ,IAAI;EACrB,aAAa,SAAS,WAAW;CACnC,GAAG,CAAC,IAAI,CAAC;CAOT,OAAO;AACT"}

package/dist/hooks/use-web-analytics.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"use-web-analytics.cjs","names":["config","keys","getSession","usePrevious"],"sources":["../../src/hooks/use-web-analytics.ts"],"sourcesContent":["import { throttle } from '@shware/utils';\nimport { useEffect, useRef } from 'react';\nimport { keys } from '../constants/storage';\nimport { config } from '../setup/index';\nimport { getSession } from '../setup/session';\nimport { sendBeacon, track } from '../track/index';\nimport { usePrevious } from './use-previous';\n\nfunction sendFirstVisit(pathname: string) {\n  if (config.storage.getItem(keys.first_visit_time)) return;\n  track('first_visit', {\n    page_path: pathname,\n    page_title: document.title,\n    page_referrer: document.referrer,\n    page_location: window.location.href,\n  });\n  config.storage.setItem(keys.first_visit_time, new Date().toISOString());\n}\n\nfunction sendUserEngagement(trigger: 'pagehide' | 'visibilitychange') {\n  const engagement_time_msec = getSession().flush();\n  if (engagement_time_msec <= 0) return;\n  sendBeacon('user_engagement', { engagement_time_msec, trigger });\n}\n\n/** Whether the event was actually sent — a zero-engagement crossing reports nothing. */\nfunction sendScroll(): boolean {\n  const engagement_time_msec = getSession().flush();\n  if (engagement_time_msec <= 0) return false;\n  track('scroll', { engagement_time_msec });\n  return true;\n}\n\nfunction getScrollPercent() {\n  const scrollTop = window.scrollY || document.documentElement.scrollTop;\n  const windowHeight = window.innerHeight;\n  const docHeight = document.documentElement.scrollHeight;\n  if (docHeight === 0) return 0;\n  return ((scrollTop + windowHeight) * 100) / docHeight;\n}\n\nfunction onPageHide() {\n  getSession().pagehide();\n  sendUserEngagement('pagehide');\n}\n\nfunction onVisibilityChange() {\n  getSession().visibilitychange(document.visibilityState);\n  if (document.visibilityState === 'hidden') {\n    sendUserEngagement('visibilitychange');\n  }\n}\n\n/**\n * 1. send session_start event when the page is loaded\n * 2. send scroll event when the user scrolls more than 90% of the page\n * 3. send user_engagement event when the page is hidden or the user is not focused\n */\nexport function useWebAnalytics(pathname: string) {\n  const prevPathname = usePrevious(pathname);\n\n  // reset state when the pathname changes and send scroll when the user navigates to a new page\n  const hasSendScroll = useRef(false);\n  useEffect(() => {\n    hasSendScroll.current = false;\n  }, [pathname]);\n\n  useEffect(() => {\n    // One lookup for the whole effect: `addEventListener` and its matching\n    // `removeEventListener` have to be handed the very same function.\n    const session = getSession();\n\n    sendFirstVisit(pathname);\n\n    const onScroll = throttle(() => {\n      session.updateAccumulator();\n      if (hasSendScroll.current) return;\n      // only send scroll when the user has scrolled more than 90% of the page\n      if (getScrollPercent() < 90) return;\n      // A crossing with no engaged time (a restored scroll position in an unfocused window) must\n      // not consume the page's one shot: the flag is set only once the event is actually sent.\n      hasSendScroll.current = sendScroll();\n    }, 500);\n\n    const checkpointEvents = ['mousedown', 'keydown', 'touchstart'];\n    const checkpoint = throttle(session.updateAccumulator, 1000);\n\n    window.addEventListener('focus', session.focus);\n    window.addEventListener('blur', session.blur);\n    window.addEventListener('scroll', onScroll, { passive: true });\n    window.addEventListener('pageshow', session.pageshow);\n    window.addEventListener('pagehide', onPageHide);\n    document.addEventListener('visibilitychange', onVisibilityChange);\n\n    // save checkpoint\n    checkpointEvents.forEach((e) => {\n      window.addEventListener(e, checkpoint, { passive: true, capture: true });\n    });\n\n    return () => {\n      window.removeEventListener('focus', session.focus);\n      window.removeEventListener('blur', session.blur);\n      window.removeEventListener('scroll', onScroll);\n      window.removeEventListener('pageshow', session.pageshow);\n      window.removeEventListener('pagehide', onPageHide);\n      document.removeEventListener('visibilitychange', onVisibilityChange);\n      checkpointEvents.forEach((e) => window.removeEventListener(e, checkpoint, { capture: true }));\n\n      onScroll.cancel();\n      checkpoint.cancel();\n    };\n  }, []);\n\n  useEffect(() => {\n    track('page_view', {\n      page_path: pathname,\n      page_title: document.title,\n      page_referrer: document.referrer,\n      page_location: window.location.href,\n      previous_page_path: prevPathname ?? undefined,\n      engagement_time_msec: prevPathname ? getSession().flush() : undefined,\n    });\n  }, [pathname]);\n}\n"],"mappings":";;;;;;;;;AAQA,SAAS,eAAe,UAAkB;CACxC,IAAIA,oBAAAA,OAAO,QAAQ,QAAQC,0BAAAA,KAAK,gBAAgB,GAAG;CACnD,oBAAA,MAAM,eAAe;EACnB,WAAW;EACX,YAAY,SAAS;EACrB,eAAe,SAAS;EACxB,eAAe,OAAO,SAAS;CACjC,CAAC;CACD,oBAAA,OAAO,QAAQ,QAAQA,0BAAAA,KAAK,mCAAkB,IAAI,KAAK,EAAA,CAAE,YAAY,CAAC;AACxE;AAEA,SAAS,mBAAmB,SAA0C;CACpE,MAAM,uBAAuBC,sBAAAA,WAAW,CAAC,CAAC,MAAM;CAChD,IAAI,wBAAwB,GAAG;CAC/B,oBAAA,WAAW,mBAAmB;EAAE;EAAsB;CAAQ,CAAC;AACjE;;AAGA,SAAS,aAAsB;CAC7B,MAAM,uBAAuBA,sBAAAA,WAAW,CAAC,CAAC,MAAM;CAChD,IAAI,wBAAwB,GAAG,OAAO;CACtC,oBAAA,MAAM,UAAU,EAAE,qBAAqB,CAAC;CACxC,OAAO;AACT;AAEA,SAAS,mBAAmB;CAC1B,MAAM,YAAY,OAAO,WAAW,SAAS,gBAAgB;CAC7D,MAAM,eAAe,OAAO;CAC5B,MAAM,YAAY,SAAS,gBAAgB;CAC3C,IAAI,cAAc,GAAG,OAAO;CAC5B,QAAS,YAAY,gBAAgB,MAAO;AAC9C;AAEA,SAAS,aAAa;CACpB,sBAAA,WAAW,CAAC,CAAC,SAAS;CACtB,mBAAmB,UAAU;AAC/B;AAEA,SAAS,qBAAqB;CAC5B,sBAAA,WAAW,CAAC,CAAC,iBAAiB,SAAS,eAAe;CACtD,IAAI,SAAS,oBAAoB,UAC/B,mBAAmB,kBAAkB;AAEzC;;;;;;AAOA,SAAgB,gBAAgB,UAAkB;CAChD,MAAM,eAAeC,2BAAAA,YAAY,QAAQ;CAGzC,MAAM,iBAAA,GAAA,MAAA,OAAA,CAAuB,KAAK;CAClC,CAAA,GAAA,MAAA,UAAA,OAAgB;EACd,cAAc,UAAU;CAC1B,GAAG,CAAC,QAAQ,CAAC;CAEb,CAAA,GAAA,MAAA,UAAA,OAAgB;EAGd,MAAM,UAAUD,sBAAAA,WAAW;EAE3B,eAAe,QAAQ;EAEvB,MAAM,YAAA,GAAA,cAAA,SAAA,OAA0B;GAC9B,QAAQ,kBAAkB;GAC1B,IAAI,cAAc,SAAS;GAE3B,IAAI,iBAAiB,IAAI,IAAI;GAG7B,cAAc,UAAU,WAAW;EACrC,GAAG,GAAG;EAEN,MAAM,mBAAmB;GAAC;GAAa;GAAW;EAAY;EAC9D,MAAM,cAAA,GAAA,cAAA,SAAA,CAAsB,QAAQ,mBAAmB,GAAI;EAE3D,OAAO,iBAAiB,SAAS,QAAQ,KAAK;EAC9C,OAAO,iBAAiB,QAAQ,QAAQ,IAAI;EAC5C,OAAO,iBAAiB,UAAU,UAAU,EAAE,SAAS,KAAK,CAAC;EAC7D,OAAO,iBAAiB,YAAY,QAAQ,QAAQ;EACpD,OAAO,iBAAiB,YAAY,UAAU;EAC9C,SAAS,iBAAiB,oBAAoB,kBAAkB;EAGhE,iBAAiB,SAAS,MAAM;GAC9B,OAAO,iBAAiB,GAAG,YAAY;IAAE,SAAS;IAAM,SAAS;GAAK,CAAC;EACzE,CAAC;EAED,aAAa;GACX,OAAO,oBAAoB,SAAS,QAAQ,KAAK;GACjD,OAAO,oBAAoB,QAAQ,QAAQ,IAAI;GAC/C,OAAO,oBAAoB,UAAU,QAAQ;GAC7C,OAAO,oBAAoB,YAAY,QAAQ,QAAQ;GACvD,OAAO,oBAAoB,YAAY,UAAU;GACjD,SAAS,oBAAoB,oBAAoB,kBAAkB;GACnE,iBAAiB,SAAS,MAAM,OAAO,oBAAoB,GAAG,YAAY,EAAE,SAAS,KAAK,CAAC,CAAC;GAE5F,SAAS,OAAO;GAChB,WAAW,OAAO;EACpB;CACF,GAAG,CAAC,CAAC;CAEL,CAAA,GAAA,MAAA,UAAA,OAAgB;EACd,oBAAA,MAAM,aAAa;GACjB,WAAW;GACX,YAAY,SAAS;GACrB,eAAe,SAAS;GACxB,eAAe,OAAO,SAAS;GAC/B,oBAAoB,gBAAgB,KAAA;GACpC,sBAAsB,eAAeA,sBAAAA,WAAW,CAAC,CAAC,MAAM,IAAI,KAAA;EAC9D,CAAC;CACH,GAAG,CAAC,QAAQ,CAAC;AACf"}
+{"version":3,"file":"use-web-analytics.cjs","names":["config","keys","getSession","usePrevious","useRef","throttle"],"sources":["../../src/hooks/use-web-analytics.ts"],"sourcesContent":["import { throttle } from '@shware/utils';\nimport { useEffect, useRef } from 'react';\nimport { keys } from '../constants/storage';\nimport { config } from '../setup/index';\nimport { getSession } from '../setup/session';\nimport { sendBeacon, track } from '../track/index';\nimport { usePrevious } from './use-previous';\n\nfunction sendFirstVisit(pathname: string) {\n  if (config.storage.getItem(keys.first_visit_time)) return;\n  track('first_visit', {\n    page_path: pathname,\n    page_title: document.title,\n    page_referrer: document.referrer,\n    page_location: window.location.href,\n  });\n  config.storage.setItem(keys.first_visit_time, new Date().toISOString());\n}\n\nfunction sendUserEngagement(trigger: 'pagehide' | 'visibilitychange') {\n  const engagement_time_msec = getSession().flush();\n  if (engagement_time_msec <= 0) return;\n  sendBeacon('user_engagement', { engagement_time_msec, trigger });\n}\n\n/** Whether the event was actually sent — a zero-engagement crossing reports nothing. */\nfunction sendScroll(): boolean {\n  const engagement_time_msec = getSession().flush();\n  if (engagement_time_msec <= 0) return false;\n  track('scroll', { engagement_time_msec });\n  return true;\n}\n\nfunction getScrollPercent() {\n  const scrollTop = window.scrollY || document.documentElement.scrollTop;\n  const windowHeight = window.innerHeight;\n  const docHeight = document.documentElement.scrollHeight;\n  if (docHeight === 0) return 0;\n  return ((scrollTop + windowHeight) * 100) / docHeight;\n}\n\nfunction onPageHide() {\n  getSession().pagehide();\n  sendUserEngagement('pagehide');\n}\n\nfunction onVisibilityChange() {\n  getSession().visibilitychange(document.visibilityState);\n  if (document.visibilityState === 'hidden') {\n    sendUserEngagement('visibilitychange');\n  }\n}\n\n/**\n * 1. send session_start event when the page is loaded\n * 2. send scroll event when the user scrolls more than 90% of the page\n * 3. send user_engagement event when the page is hidden or the user is not focused\n */\nexport function useWebAnalytics(pathname: string) {\n  const prevPathname = usePrevious(pathname);\n\n  // reset state when the pathname changes and send scroll when the user navigates to a new page\n  const hasSendScroll = useRef(false);\n  useEffect(() => {\n    hasSendScroll.current = false;\n  }, [pathname]);\n\n  useEffect(() => {\n    // One lookup for the whole effect: `addEventListener` and its matching\n    // `removeEventListener` have to be handed the very same function.\n    const session = getSession();\n\n    sendFirstVisit(pathname);\n\n    const onScroll = throttle(() => {\n      session.updateAccumulator();\n      if (hasSendScroll.current) return;\n      // only send scroll when the user has scrolled more than 90% of the page\n      if (getScrollPercent() < 90) return;\n      // A crossing with no engaged time (a restored scroll position in an unfocused window) must\n      // not consume the page's one shot: the flag is set only once the event is actually sent.\n      hasSendScroll.current = sendScroll();\n    }, 500);\n\n    const checkpointEvents = ['mousedown', 'keydown', 'touchstart'];\n    const checkpoint = throttle(session.updateAccumulator, 1000);\n\n    window.addEventListener('focus', session.focus);\n    window.addEventListener('blur', session.blur);\n    window.addEventListener('scroll', onScroll, { passive: true });\n    window.addEventListener('pageshow', session.pageshow);\n    window.addEventListener('pagehide', onPageHide);\n    document.addEventListener('visibilitychange', onVisibilityChange);\n\n    // save checkpoint\n    checkpointEvents.forEach((e) => {\n      window.addEventListener(e, checkpoint, { passive: true, capture: true });\n    });\n\n    return () => {\n      window.removeEventListener('focus', session.focus);\n      window.removeEventListener('blur', session.blur);\n      window.removeEventListener('scroll', onScroll);\n      window.removeEventListener('pageshow', session.pageshow);\n      window.removeEventListener('pagehide', onPageHide);\n      document.removeEventListener('visibilitychange', onVisibilityChange);\n      checkpointEvents.forEach((e) => window.removeEventListener(e, checkpoint, { capture: true }));\n\n      onScroll.cancel();\n      checkpoint.cancel();\n    };\n  }, []);\n\n  useEffect(() => {\n    track('page_view', {\n      page_path: pathname,\n      page_title: document.title,\n      page_referrer: document.referrer,\n      page_location: window.location.href,\n      previous_page_path: prevPathname ?? undefined,\n      engagement_time_msec: prevPathname ? getSession().flush() : undefined,\n    });\n  }, [pathname]);\n}\n"],"mappings":";;;;;;;;;AAQA,SAAS,eAAe,UAAkB;CACxC,IAAIA,oBAAAA,OAAO,QAAQ,QAAQC,0BAAAA,KAAK,gBAAgB,GAAG;CACnD,oBAAA,MAAM,eAAe;EACnB,WAAW;EACX,YAAY,SAAS;EACrB,eAAe,SAAS;EACxB,eAAe,OAAO,SAAS;CACjC,CAAC;CACD,oBAAA,OAAO,QAAQ,QAAQA,0BAAAA,KAAK,mCAAkB,IAAI,KAAK,EAAA,CAAE,YAAY,CAAC;AACxE;AAEA,SAAS,mBAAmB,SAA0C;CACpE,MAAM,uBAAuBC,sBAAAA,WAAW,CAAC,CAAC,MAAM;CAChD,IAAI,wBAAwB,GAAG;CAC/B,oBAAA,WAAW,mBAAmB;EAAE;EAAsB;CAAQ,CAAC;AACjE;;AAGA,SAAS,aAAsB;CAC7B,MAAM,uBAAuBA,sBAAAA,WAAW,CAAC,CAAC,MAAM;CAChD,IAAI,wBAAwB,GAAG,OAAO;CACtC,oBAAA,MAAM,UAAU,EAAE,qBAAqB,CAAC;CACxC,OAAO;AACT;AAEA,SAAS,mBAAmB;CAC1B,MAAM,YAAY,OAAO,WAAW,SAAS,gBAAgB;CAC7D,MAAM,eAAe,OAAO;CAC5B,MAAM,YAAY,SAAS,gBAAgB;CAC3C,IAAI,cAAc,GAAG,OAAO;CAC5B,QAAS,YAAY,gBAAgB,MAAO;AAC9C;AAEA,SAAS,aAAa;CACpB,sBAAA,WAAW,CAAC,CAAC,SAAS;CACtB,mBAAmB,UAAU;AAC/B;AAEA,SAAS,qBAAqB;CAC5B,sBAAA,WAAW,CAAC,CAAC,iBAAiB,SAAS,eAAe;CACtD,IAAI,SAAS,oBAAoB,UAC/B,mBAAmB,kBAAkB;AAEzC;;;;;;AAOA,SAAgB,gBAAgB,UAAkB;CAChD,MAAM,eAAeC,2BAAAA,YAAY,QAAQ;CAGzC,MAAM,iBAAA,GAAgBC,MAAAA,OAAAA,CAAO,KAAK;CAClC,CAAA,GAAA,MAAA,UAAA,OAAgB;EACd,cAAc,UAAU;CAC1B,GAAG,CAAC,QAAQ,CAAC;CAEb,CAAA,GAAA,MAAA,UAAA,OAAgB;EAGd,MAAM,UAAUF,sBAAAA,WAAW;EAE3B,eAAe,QAAQ;EAEvB,MAAM,YAAA,GAAWG,cAAAA,SAAAA,OAAe;GAC9B,QAAQ,kBAAkB;GAC1B,IAAI,cAAc,SAAS;GAE3B,IAAI,iBAAiB,IAAI,IAAI;GAG7B,cAAc,UAAU,WAAW;EACrC,GAAG,GAAG;EAEN,MAAM,mBAAmB;GAAC;GAAa;GAAW;EAAY;EAC9D,MAAM,cAAA,GAAaA,cAAAA,SAAAA,CAAS,QAAQ,mBAAmB,GAAI;EAE3D,OAAO,iBAAiB,SAAS,QAAQ,KAAK;EAC9C,OAAO,iBAAiB,QAAQ,QAAQ,IAAI;EAC5C,OAAO,iBAAiB,UAAU,UAAU,EAAE,SAAS,KAAK,CAAC;EAC7D,OAAO,iBAAiB,YAAY,QAAQ,QAAQ;EACpD,OAAO,iBAAiB,YAAY,UAAU;EAC9C,SAAS,iBAAiB,oBAAoB,kBAAkB;EAGhE,iBAAiB,SAAS,MAAM;GAC9B,OAAO,iBAAiB,GAAG,YAAY;IAAE,SAAS;IAAM,SAAS;GAAK,CAAC;EACzE,CAAC;EAED,aAAa;GACX,OAAO,oBAAoB,SAAS,QAAQ,KAAK;GACjD,OAAO,oBAAoB,QAAQ,QAAQ,IAAI;GAC/C,OAAO,oBAAoB,UAAU,QAAQ;GAC7C,OAAO,oBAAoB,YAAY,QAAQ,QAAQ;GACvD,OAAO,oBAAoB,YAAY,UAAU;GACjD,SAAS,oBAAoB,oBAAoB,kBAAkB;GACnE,iBAAiB,SAAS,MAAM,OAAO,oBAAoB,GAAG,YAAY,EAAE,SAAS,KAAK,CAAC,CAAC;GAE5F,SAAS,OAAO;GAChB,WAAW,OAAO;EACpB;CACF,GAAG,CAAC,CAAC;CAEL,CAAA,GAAA,MAAA,UAAA,OAAgB;EACd,oBAAA,MAAM,aAAa;GACjB,WAAW;GACX,YAAY,SAAS;GACrB,eAAe,SAAS;GACxB,eAAe,OAAO,SAAS;GAC/B,oBAAoB,gBAAgB,KAAA;GACpC,sBAAsB,eAAeH,sBAAAA,WAAW,CAAC,CAAC,MAAM,IAAI,KAAA;EAC9D,CAAC;CACH,GAAG,CAAC,QAAQ,CAAC;AACf"}

package/dist/link/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["config"],"sources":["../../src/link/index.ts"],"sourcesContent":["import { fetch } from '@shware/utils';\nimport type { CreateLinkDTO } from '../schema/index';\nimport { config } from '../setup/index';\n\nexport interface Link extends CreateLinkDTO {\n  id: string;\n  created_at: string;\n}\n\nexport async function createLink(dto: CreateLinkDTO) {\n  const response = await fetch(`${config.endpoint}/links`, {\n    method: 'POST',\n    credentials: 'include',\n    headers: await config.getHeaders(),\n    body: JSON.stringify(dto),\n  });\n\n  if (!response.ok) {\n    throw new Error(`Failed to create link: ${response.status} ${await response.text()}`);\n  }\n  return response.json() as Promise<Link>;\n}\n\nexport async function getLink(id: string): Promise<Link | null> {\n  try {\n    const response = await fetch(`${config.endpoint}/links/${id}`, {\n      method: 'GET',\n      credentials: 'include',\n      headers: await config.getHeaders(),\n    });\n\n    if (!response.ok) {\n      console.error(`Failed to get link(${id}): ${response.status} ${await response.text()}`);\n      return null;\n    }\n    return (await response.json()) as Link;\n  } catch {\n    console.error(`Failed to get link(${id}): network error`);\n    return null;\n  }\n}\n"],"mappings":";;;;AASA,eAAsB,WAAW,KAAoB;CACnD,MAAM,WAAW,OAAA,GAAA,cAAA,MAAA,CAAY,GAAGA,oBAAAA,OAAO,SAAS,SAAS;EACvD,QAAQ;EACR,aAAa;EACb,SAAS,MAAMA,oBAAAA,OAAO,WAAW;EACjC,MAAM,KAAK,UAAU,GAAG;CAC1B,CAAC;CAED,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,0BAA0B,SAAS,OAAO,GAAG,MAAM,SAAS,KAAK,GAAG;CAEtF,OAAO,SAAS,KAAK;AACvB;AAEA,eAAsB,QAAQ,IAAkC;CAC9D,IAAI;EACF,MAAM,WAAW,OAAA,GAAA,cAAA,MAAA,CAAY,GAAGA,oBAAAA,OAAO,SAAS,SAAS,MAAM;GAC7D,QAAQ;GACR,aAAa;GACb,SAAS,MAAMA,oBAAAA,OAAO,WAAW;EACnC,CAAC;EAED,IAAI,CAAC,SAAS,IAAI;GAChB,QAAQ,MAAM,sBAAsB,GAAG,KAAK,SAAS,OAAO,GAAG,MAAM,SAAS,KAAK,GAAG;GACtF,OAAO;EACT;EACA,OAAQ,MAAM,SAAS,KAAK;CAC9B,QAAQ;EACN,QAAQ,MAAM,sBAAsB,GAAG,iBAAiB;EACxD,OAAO;CACT;AACF"}
+{"version":3,"file":"index.cjs","names":["fetch","config"],"sources":["../../src/link/index.ts"],"sourcesContent":["import { fetch } from '@shware/utils';\nimport type { CreateLinkDTO } from '../schema/index';\nimport { config } from '../setup/index';\n\nexport interface Link extends CreateLinkDTO {\n  id: string;\n  created_at: string;\n}\n\nexport async function createLink(dto: CreateLinkDTO) {\n  const response = await fetch(`${config.endpoint}/links`, {\n    method: 'POST',\n    credentials: 'include',\n    headers: await config.getHeaders(),\n    body: JSON.stringify(dto),\n  });\n\n  if (!response.ok) {\n    throw new Error(`Failed to create link: ${response.status} ${await response.text()}`);\n  }\n  return response.json() as Promise<Link>;\n}\n\nexport async function getLink(id: string): Promise<Link | null> {\n  try {\n    const response = await fetch(`${config.endpoint}/links/${id}`, {\n      method: 'GET',\n      credentials: 'include',\n      headers: await config.getHeaders(),\n    });\n\n    if (!response.ok) {\n      console.error(`Failed to get link(${id}): ${response.status} ${await response.text()}`);\n      return null;\n    }\n    return (await response.json()) as Link;\n  } catch {\n    console.error(`Failed to get link(${id}): network error`);\n    return null;\n  }\n}\n"],"mappings":";;;;AASA,eAAsB,WAAW,KAAoB;CACnD,MAAM,WAAW,OAAA,GAAMA,cAAAA,MAAAA,CAAM,GAAGC,oBAAAA,OAAO,SAAS,SAAS;EACvD,QAAQ;EACR,aAAa;EACb,SAAS,MAAMA,oBAAAA,OAAO,WAAW;EACjC,MAAM,KAAK,UAAU,GAAG;CAC1B,CAAC;CAED,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,0BAA0B,SAAS,OAAO,GAAG,MAAM,SAAS,KAAK,GAAG;CAEtF,OAAO,SAAS,KAAK;AACvB;AAEA,eAAsB,QAAQ,IAAkC;CAC9D,IAAI;EACF,MAAM,WAAW,OAAA,GAAMD,cAAAA,MAAAA,CAAM,GAAGC,oBAAAA,OAAO,SAAS,SAAS,MAAM;GAC7D,QAAQ;GACR,aAAa;GACb,SAAS,MAAMA,oBAAAA,OAAO,WAAW;EACnC,CAAC;EAED,IAAI,CAAC,SAAS,IAAI;GAChB,QAAQ,MAAM,sBAAsB,GAAG,KAAK,SAAS,OAAO,GAAG,MAAM,SAAS,KAAK,GAAG;GACtF,OAAO;EACT;EACA,OAAQ,MAAM,SAAS,KAAK;CAC9B,QAAQ;EACN,QAAQ,MAAM,sBAAsB,GAAG,iBAAiB;EACxD,OAAO;CACT;AACF"}

package/dist/native/fingerprint.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"fingerprint.cjs","names":["Platform","Dimensions","osName","osVersion","supportedCpuArchitectures","modelName","manufacturer","modelId","PixelRatio"],"sources":["../../src/native/fingerprint.ts"],"sourcesContent":["/**\n * reference: https://docs.swmansion.com/detour/docs/Architecture/matching\n *\n */\nimport { getInstallReferrerAsync } from 'expo-application';\nimport { getStringAsync } from 'expo-clipboard';\nimport {\n  manufacturer,\n  modelId,\n  modelName,\n  osName,\n  osVersion,\n  supportedCpuArchitectures,\n} from 'expo-device';\nimport { getCalendars, getLocales } from 'expo-localization';\nimport { Dimensions, PixelRatio, Platform } from 'react-native';\n\n// used when install referrer on android is available\nexport type DeterministicFingerprint = {\n  click_id: string | null;\n};\n\nexport type ProbabilisticFingerprint = {\n  os: string | null;\n  os_name: string | null;\n  os_version: string | null;\n  cpu_architecture: string | null;\n  platform: 'ios' | 'android' | 'web' | 'macos' | 'windows' | 'linux' | 'unknown';\n  device: string | null;\n  device_vendor: string | null;\n  device_model_id: string | null;\n  device_pixel_ratio: number;\n  screen_width: number;\n  screen_height: number;\n  screen_resolution: string;\n  language: string | null;\n  time_zone: string | null;\n  install_referrer: string | null;\n  pasted_link: string | null;\n  timestamp: number; // 7 days validity\n};\n\nexport async function getDeterministicFingerprint(): Promise<DeterministicFingerprint> {\n  const install_referrer = Platform.OS === 'android' ? await getInstallReferrerAsync() : null;\n  if (!install_referrer) return { click_id: null };\n  const params = new URLSearchParams(install_referrer);\n  return { click_id: params.get('click_id') ?? null };\n}\n\nexport async function getProbabilisticFingerprint(\n  shouldUseClipboard = true\n): Promise<ProbabilisticFingerprint> {\n  const screen = Dimensions.get('screen');\n  const screen_width = Math.floor(screen.width);\n  const screen_height = Math.floor(screen.height);\n  const install_referrer = Platform.OS === 'android' ? await getInstallReferrerAsync() : null;\n\n  return {\n    os: osName && osVersion ? `${osName} ${osVersion}` : null,\n    os_name: osName,\n    os_version: osVersion,\n    cpu_architecture: supportedCpuArchitectures?.at(0) ?? null,\n    platform: Platform.OS,\n    device: modelName,\n    device_vendor: manufacturer,\n    device_model_id: modelId,\n    device_pixel_ratio: PixelRatio.get(),\n    screen_width,\n    screen_height,\n    screen_resolution: `${screen_width}x${screen_height}`,\n    language: getLocales().at(0)?.languageTag ?? null,\n    time_zone: getCalendars().at(0)?.timeZone ?? null,\n    install_referrer,\n    pasted_link: shouldUseClipboard ? await getStringAsync() : null,\n    timestamp: Date.now(),\n  };\n}\n"],"mappings":";;;;;;;;;;;AA0CA,eAAsB,8BAAiE;CACrF,MAAM,mBAAmBA,aAAAA,SAAS,OAAO,YAAY,OAAA,GAAA,iBAAA,wBAAA,CAA8B,IAAI;CACvF,IAAI,CAAC,kBAAkB,OAAO,EAAE,UAAU,KAAK;CAE/C,OAAO,EAAE,UAAU,IADA,gBAAgB,gBACX,CAAC,CAAC,IAAI,UAAU,KAAK,KAAK;AACpD;AAEA,eAAsB,4BACpB,qBAAqB,MACc;CACnC,MAAM,SAASC,aAAAA,WAAW,IAAI,QAAQ;CACtC,MAAM,eAAe,KAAK,MAAM,OAAO,KAAK;CAC5C,MAAM,gBAAgB,KAAK,MAAM,OAAO,MAAM;CAC9C,MAAM,mBAAmBD,aAAAA,SAAS,OAAO,YAAY,OAAA,GAAA,iBAAA,wBAAA,CAA8B,IAAI;CAEvF,OAAO;EACL,IAAIE,YAAAA,UAAUC,YAAAA,YAAY,GAAGD,YAAAA,OAAO,GAAGC,YAAAA,cAAc;EACrD,SAASD,YAAAA;EACT,YAAYC,YAAAA;EACZ,kBAAkBC,YAAAA,2BAA2B,GAAG,CAAC,KAAK;EACtD,UAAUJ,aAAAA,SAAS;EACnB,QAAQK,YAAAA;EACR,eAAeC,YAAAA;EACf,iBAAiBC,YAAAA;EACjB,oBAAoBC,aAAAA,WAAW,IAAI;EACnC;EACA;EACA,mBAAmB,GAAG,aAAa,GAAG;EACtC,WAAA,GAAA,kBAAA,WAAA,CAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe;EAC7C,YAAA,GAAA,kBAAA,aAAA,CAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY;EAC7C;EACA,aAAa,qBAAqB,OAAA,GAAA,eAAA,eAAA,CAAqB,IAAI;EAC3D,WAAW,KAAK,IAAI;CACtB;AACF"}
+{"version":3,"file":"fingerprint.cjs","names":["Platform","getInstallReferrerAsync","Dimensions","osName","osVersion","supportedCpuArchitectures","modelName","manufacturer","modelId","PixelRatio","getLocales","getCalendars","getStringAsync"],"sources":["../../src/native/fingerprint.ts"],"sourcesContent":["/**\n * reference: https://docs.swmansion.com/detour/docs/Architecture/matching\n *\n */\nimport { getInstallReferrerAsync } from 'expo-application';\nimport { getStringAsync } from 'expo-clipboard';\nimport {\n  manufacturer,\n  modelId,\n  modelName,\n  osName,\n  osVersion,\n  supportedCpuArchitectures,\n} from 'expo-device';\nimport { getCalendars, getLocales } from 'expo-localization';\nimport { Dimensions, PixelRatio, Platform } from 'react-native';\n\n// used when install referrer on android is available\nexport type DeterministicFingerprint = {\n  click_id: string | null;\n};\n\nexport type ProbabilisticFingerprint = {\n  os: string | null;\n  os_name: string | null;\n  os_version: string | null;\n  cpu_architecture: string | null;\n  platform: 'ios' | 'android' | 'web' | 'macos' | 'windows' | 'linux' | 'unknown';\n  device: string | null;\n  device_vendor: string | null;\n  device_model_id: string | null;\n  device_pixel_ratio: number;\n  screen_width: number;\n  screen_height: number;\n  screen_resolution: string;\n  language: string | null;\n  time_zone: string | null;\n  install_referrer: string | null;\n  pasted_link: string | null;\n  timestamp: number; // 7 days validity\n};\n\nexport async function getDeterministicFingerprint(): Promise<DeterministicFingerprint> {\n  const install_referrer = Platform.OS === 'android' ? await getInstallReferrerAsync() : null;\n  if (!install_referrer) return { click_id: null };\n  const params = new URLSearchParams(install_referrer);\n  return { click_id: params.get('click_id') ?? null };\n}\n\nexport async function getProbabilisticFingerprint(\n  shouldUseClipboard = true\n): Promise<ProbabilisticFingerprint> {\n  const screen = Dimensions.get('screen');\n  const screen_width = Math.floor(screen.width);\n  const screen_height = Math.floor(screen.height);\n  const install_referrer = Platform.OS === 'android' ? await getInstallReferrerAsync() : null;\n\n  return {\n    os: osName && osVersion ? `${osName} ${osVersion}` : null,\n    os_name: osName,\n    os_version: osVersion,\n    cpu_architecture: supportedCpuArchitectures?.at(0) ?? null,\n    platform: Platform.OS,\n    device: modelName,\n    device_vendor: manufacturer,\n    device_model_id: modelId,\n    device_pixel_ratio: PixelRatio.get(),\n    screen_width,\n    screen_height,\n    screen_resolution: `${screen_width}x${screen_height}`,\n    language: getLocales().at(0)?.languageTag ?? null,\n    time_zone: getCalendars().at(0)?.timeZone ?? null,\n    install_referrer,\n    pasted_link: shouldUseClipboard ? await getStringAsync() : null,\n    timestamp: Date.now(),\n  };\n}\n"],"mappings":";;;;;;;;;;;AA0CA,eAAsB,8BAAiE;CACrF,MAAM,mBAAmBA,aAAAA,SAAS,OAAO,YAAY,OAAA,GAAMC,iBAAAA,wBAAAA,CAAwB,IAAI;CACvF,IAAI,CAAC,kBAAkB,OAAO,EAAE,UAAU,KAAK;CAE/C,OAAO,EAAE,UAAU,IADA,gBAAgB,gBACX,CAAC,CAAC,IAAI,UAAU,KAAK,KAAK;AACpD;AAEA,eAAsB,4BACpB,qBAAqB,MACc;CACnC,MAAM,SAASC,aAAAA,WAAW,IAAI,QAAQ;CACtC,MAAM,eAAe,KAAK,MAAM,OAAO,KAAK;CAC5C,MAAM,gBAAgB,KAAK,MAAM,OAAO,MAAM;CAC9C,MAAM,mBAAmBF,aAAAA,SAAS,OAAO,YAAY,OAAA,GAAMC,iBAAAA,wBAAAA,CAAwB,IAAI;CAEvF,OAAO;EACL,IAAIE,YAAAA,UAAUC,YAAAA,YAAY,GAAGD,YAAAA,OAAO,GAAGC,YAAAA,cAAc;EACrD,SAASD,YAAAA;EACT,YAAYC,YAAAA;EACZ,kBAAkBC,YAAAA,2BAA2B,GAAG,CAAC,KAAK;EACtD,UAAUL,aAAAA,SAAS;EACnB,QAAQM,YAAAA;EACR,eAAeC,YAAAA;EACf,iBAAiBC,YAAAA;EACjB,oBAAoBC,aAAAA,WAAW,IAAI;EACnC;EACA;EACA,mBAAmB,GAAG,aAAa,GAAG;EACtC,WAAA,GAAUC,kBAAAA,WAAAA,CAAW,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe;EAC7C,YAAA,GAAWC,kBAAAA,aAAAA,CAAa,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY;EAC7C;EACA,aAAa,qBAAqB,OAAA,GAAMC,eAAAA,eAAAA,CAAe,IAAI;EAC3D,WAAW,KAAK,IAAI;CACtB;AACF"}

package/dist/native/firebase.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"firebase.cjs","names":[],"sources":["../../src/native/firebase.ts"],"sourcesContent":["import { getAnalytics, logEvent } from '@react-native-firebase/analytics';\nimport type { StandardEvents } from '../track/gtag';\nimport type { EventName, TrackName, TrackProperties } from '../track/types';\n\nconst analytics = getAnalytics();\n\nexport async function sendFirebaseEvent<T extends EventName>(\n  name: TrackName<T>,\n  properties?: TrackProperties<T>\n) {\n  // @react-native-firebase/analytics 26 made the modular logEvent fire-and-forget (void).\n  // sendFirebaseEvent stays async so callers that await it keep compiling.\n  if (name === 'screen_view') {\n    logEvent(analytics, 'screen_view', {\n      firebase_screen: (properties as StandardEvents['screen_view'] | undefined)?.screen_name,\n      firebase_screen_class: (properties as StandardEvents['screen_view'] | undefined)\n        ?.screen_class,\n    });\n  } else {\n    logEvent(analytics, name, properties);\n  }\n}\n"],"mappings":";;;AAIA,MAAM,aAAA,GAAA,iCAAA,aAAA,CAAyB;AAE/B,eAAsB,kBACpB,MACA,YACA;CAGA,IAAI,SAAS,eACX,CAAA,GAAA,iCAAA,SAAA,CAAS,WAAW,eAAe;EACjC,iBAAkB,YAA0D;EAC5E,uBAAwB,YACpB;CACN,CAAC;MAED,CAAA,GAAA,iCAAA,SAAA,CAAS,WAAW,MAAM,UAAU;AAExC"}
+{"version":3,"file":"firebase.cjs","names":["getAnalytics"],"sources":["../../src/native/firebase.ts"],"sourcesContent":["import { getAnalytics, logEvent } from '@react-native-firebase/analytics';\nimport type { StandardEvents } from '../track/gtag';\nimport type { EventName, TrackName, TrackProperties } from '../track/types';\n\nconst analytics = getAnalytics();\n\nexport async function sendFirebaseEvent<T extends EventName>(\n  name: TrackName<T>,\n  properties?: TrackProperties<T>\n) {\n  // @react-native-firebase/analytics 26 made the modular logEvent fire-and-forget (void).\n  // sendFirebaseEvent stays async so callers that await it keep compiling.\n  if (name === 'screen_view') {\n    logEvent(analytics, 'screen_view', {\n      firebase_screen: (properties as StandardEvents['screen_view'] | undefined)?.screen_name,\n      firebase_screen_class: (properties as StandardEvents['screen_view'] | undefined)\n        ?.screen_class,\n    });\n  } else {\n    logEvent(analytics, name, properties);\n  }\n}\n"],"mappings":";;;AAIA,MAAM,aAAA,GAAYA,iCAAAA,aAAAA,CAAa;AAE/B,eAAsB,kBACpB,MACA,YACA;CAGA,IAAI,SAAS,eACX,CAAA,GAAA,iCAAA,SAAA,CAAS,WAAW,eAAe;EACjC,iBAAkB,YAA0D;EAC5E,uBAAwB,YACpB;CACN,CAAC;MAED,CAAA,GAAA,iCAAA,SAAA,CAAS,WAAW,MAAM,UAAU;AAExC"}