@shware/analytics 8.5.0 → 8.7.0

package/dist/third-parties/microsoft-uet.cjs

@@ -1,6 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_utils_field = require("../utils/field.cjs");
+const require_visitor_index = require("../visitor/index.cjs");
 const require_track_uetq = require("../track/uetq.cjs");
+const require_utils_field = require("../utils/field.cjs");
 const require_utils_sha256 = require("../utils/sha256.cjs");
 //#region src/third-parties/microsoft-uet.ts
 const metrics = [
@@ -47,23 +48,23 @@ function sendUETEvent(name, properties, eventId) {
 * when the page load already went out. Values are sent raw — the tag normalizes and SHA-256
 * hashes them in the browser (bat.js `validatePid`) before anything leaves the page.
 *
-* No tag id parameter: unlike the Meta/Reddit pixels, UET is bound to its tag by the snippet
-* and `set` addresses whichever tag drains `uetq`.
+* A setter itself, like `setGAUser`, rather than a factory like `setFBUser(pixelId)`: UET is
+* bound to its tag by the snippet and `set` addresses whichever tag drains `uetq`, so there is
+* nothing to bind first.
 */
-function setUETUser() {
-	return ({ user_data }) => {
-		if (typeof window === "undefined" || !window.uetq) {
-			console.warn("uetq has not been initialized");
-			return;
-		}
-		const em = require_utils_field.getFirst(user_data?.email);
-		const ph = require_utils_field.getFirst(user_data?.phone_number);
-		if (!em && !ph) return;
-		window.uetq.push("set", { pid: clean({
-			em,
-			ph
-		}) });
-	};
+function setUETUser({ user_id, user_data }) {
+	if (typeof window === "undefined" || !window.uetq) {
+		console.warn("uetq has not been initialized");
+		return;
+	}
+	if (user_id) syncUETVisitor(user_id);
+	const em = require_utils_field.getFirst(user_data?.email);
+	const ph = require_utils_field.getFirst(user_data?.phone_number);
+	if (!em && !ph) return;
+	window.uetq.push("set", { pid: clean({
+		em,
+		ph
+	}) });
 }
 /**
 * UET consent mode. Push `default` before the tag loads (the tag processes `consent` early, ahead
@@ -93,6 +94,31 @@ function setUETConsent(mode, consent) {
 * the pixel goes out without `UID` rather than with a raw id.
 * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration#id-sync-and-why-it-matters
 */
+/**
+* The Microsoft Advertising customer id the ID Sync pixel reports to, set once by the framework
+* `Analytics` component's `uetCustomerId` prop (or `configureUET`). Unset, nothing syncs.
+*/
+let uetCustomerId;
+function configureUET(options) {
+	uetCustomerId = options.customerId === void 0 ? void 0 : String(options.customerId);
+}
+/**
+* Sync the SDK visitor — the `anonymousId` of the events the server sends to the Conversions
+* API — with Microsoft, plus the user's `UID` when one is known. The `Analytics` components run
+* it on mount so every visit syncs at least once, anonymous visitors included (they are who
+* remarketing audiences are built from), and `setUETUser` runs it again on sign-in.
+*/
+async function syncUETVisitor(userId) {
+	if (!uetCustomerId) return;
+	try {
+		const { id } = await require_visitor_index.getVisitor();
+		sendUETIdSync({
+			customerId: uetCustomerId,
+			visitorId: id,
+			userId
+		});
+	} catch {}
+}
 function sendUETIdSync(options) {
 	if (typeof window === "undefined" || typeof Image === "undefined") return;
 	if (isLocal()) return;
@@ -111,9 +137,11 @@ function sendUETIdSync(options) {
 	require_utils_sha256.sha256(options.userId).then(fire, () => fire());
 }
 //#endregion
+exports.configureUET = configureUET;
 exports.sendUETEvent = sendUETEvent;
 exports.sendUETIdSync = sendUETIdSync;
 exports.setUETConsent = setUETConsent;
 exports.setUETUser = setUETUser;
+exports.syncUETVisitor = syncUETVisitor;
 
 //# sourceMappingURL=microsoft-uet.cjs.map

package/dist/third-parties/microsoft-uet.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"microsoft-uet.cjs","names":["mapUETEvent","getFirst"],"sources":["../../src/third-parties/microsoft-uet.ts"],"sourcesContent":["import type { UpdateVisitorDTO } from '../schema/index';\nimport type { EventName, TrackName, TrackProperties } from '../track/types';\nimport { type UETConsent, type UETQ, mapUETEvent } from '../track/uetq';\nimport { getFirst } from '../utils/field';\nimport { sha256 } from '../utils/sha256';\n\ndeclare global {\n  interface Window {\n    /**\n     * Defined by the UET snippet before `bat.js` loads (as a plain array), so pushes made early\n     * are queued rather than lost. Undefined only where the snippet was never installed.\n     */\n    uetq?: UETQ;\n  }\n}\n\nconst metrics = ['CLS', 'FCP', 'FID', 'INP', 'LCP', 'TTFB'];\n\n/** Drop `undefined` fields: bat.js validates every key it receives, and `undefined` is a value. */\n// oxlint-disable-next-line @typescript-eslint/no-explicit-any\nfunction clean(value: unknown): any {\n  return JSON.parse(JSON.stringify(value));\n}\n\nfunction isLocal(): boolean {\n  return window.location.host.includes('127.0.0.1') || window.location.host.includes('localhost');\n}\n\n/**\n * Forward an internal track event to the Microsoft Advertising UET tag.\n *\n * `eventId` is reused as UET's `event_id` so the browser event deduplicates against the same\n * conversion sent through the Conversions API (`sendMicrosoftEvents`). The action name is the\n * internal name on both channels — see `mapUETEvent`.\n *\n * `page_view` is not forwarded: bat.js turns that action into its page-load beacon, which the\n * snippet already fires on load and, with `enableAutoSpaTracking: true` (the setting in\n * Microsoft's generated snippet), on every history change — forwarding the SDK's own page views\n * would report each page twice. The tag owns page loads; this tracker owns everything else.\n */\nexport function sendUETEvent<T extends EventName>(\n  name: TrackName<T>,\n  properties?: TrackProperties<T>,\n  eventId?: string\n) {\n  if (typeof window === 'undefined' || !window.uetq) {\n    console.warn('uetq has not been initialized');\n    return;\n  }\n  if (metrics.includes(name) || name === 'page_view') return;\n  if (isLocal()) return;\n\n  const [action, params] = mapUETEvent(name, properties, eventId);\n  window.uetq.push('event', action, clean(params));\n}\n\n/**\n * Enhanced conversions: hand the tag the visitor's email and phone so Microsoft can match a\n * conversion to an ad click without a third-party cookie. A `set` applies to every event fired\n * from the page afterwards, `pageLoad` included, and the tag fires a `pid` beacon on its own\n * when the page load already went out. Values are sent raw — the tag normalizes and SHA-256\n * hashes them in the browser (bat.js `validatePid`) before anything leaves the page.\n *\n * No tag id parameter: unlike the Meta/Reddit pixels, UET is bound to its tag by the snippet\n * and `set` addresses whichever tag drains `uetq`.\n */\nexport function setUETUser() {\n  return ({ user_data }: UpdateVisitorDTO) => {\n    if (typeof window === 'undefined' || !window.uetq) {\n      console.warn('uetq has not been initialized');\n      return;\n    }\n\n    const em = getFirst(user_data?.email);\n    const ph = getFirst(user_data?.phone_number);\n    if (!em && !ph) return;\n\n    window.uetq.push('set', { pid: clean({ em, ph }) });\n  };\n}\n\n/**\n * UET consent mode. Push `default` before the tag loads (the tag processes `consent` early, ahead\n * of the queued events) and `update` when the visitor decides. With `ad_storage: 'denied'` the\n * tag neither writes its cookies nor reads the `msclkid` from the URL.\n * https://help.ads.microsoft.com/#apex/ads/en/60119/1\n */\nexport function setUETConsent(mode: 'default' | 'update', consent: UETConsent) {\n  if (typeof window === 'undefined') return;\n  window.uetq ??= [] as unknown as UETQ;\n  window.uetq.push('consent', mode, consent);\n}\n\n/**\n * The Conversions API's client-side ID Sync pixel: ties the visitor id sent server-side as\n * `anonymousId` to Microsoft's own identifier, so server events can be attributed across\n * contexts (view-through, audiences). Microsoft requires it for remarketing built from CAPI\n * events and recommends it for measurement quality; fire it at least once per session, ideally\n * on the first page view. A pixel rather than a fetch on purpose: Microsoft must observe the\n * browser context of the sync, which a server-side call cannot carry.\n *\n * `customerId` is the Microsoft Advertising customer id (`cid` in the UI's URLs) — not the UET\n * tag id. `visitorId` is the SDK visitor id (`getVisitor().id`), which is what\n * `sendMicrosoftEvents` sends as `anonymousId`; Microsoft requires the two to be equal.\n * `userId` is the raw signed-in user id: it is SHA-256 hashed here, exactly as the server sender\n * hashes it into `externalId`, so the pair matches as well. Hashing is asynchronous, so the\n * pixel fires once the digest resolves; where SubtleCrypto is unavailable (an insecure context)\n * the pixel goes out without `UID` rather than with a raw id.\n * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration#id-sync-and-why-it-matters\n */\nexport function sendUETIdSync(options: {\n  customerId: string | number;\n  visitorId: string;\n  /** The signed-in user's id, raw; hashed before it leaves the page. */\n  userId?: string;\n}) {\n  if (typeof window === 'undefined' || typeof Image === 'undefined') return;\n  if (isLocal()) return;\n\n  const fire = (uid?: string) => {\n    const params = new URLSearchParams({\n      Red3: `BACID_${options.customerId}`,\n      VID: options.visitorId,\n    });\n    if (uid) params.set('UID', uid);\n    new Image().src = `https://c.bing.com/c.gif?${params.toString()}`;\n  };\n\n  if (!options.userId) {\n    fire();\n    return;\n  }\n  sha256(options.userId).then(fire, () => fire());\n}\n"],"mappings":";;;;;AAgBA,MAAM,UAAU;CAAC;CAAO;CAAO;CAAO;CAAO;CAAO;AAAM;;AAI1D,SAAS,MAAM,OAAqB;CAClC,OAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AACzC;AAEA,SAAS,UAAmB;CAC1B,OAAO,OAAO,SAAS,KAAK,SAAS,WAAW,KAAK,OAAO,SAAS,KAAK,SAAS,WAAW;AAChG;;;;;;;;;;;;;AAcA,SAAgB,aACd,MACA,YACA,SACA;CACA,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,MAAM;EACjD,QAAQ,KAAK,+BAA+B;EAC5C;CACF;CACA,IAAI,QAAQ,SAAS,IAAI,KAAK,SAAS,aAAa;CACpD,IAAI,QAAQ,GAAG;CAEf,MAAM,CAAC,QAAQ,UAAUA,mBAAAA,YAAY,MAAM,YAAY,OAAO;CAC9D,OAAO,KAAK,KAAK,SAAS,QAAQ,MAAM,MAAM,CAAC;AACjD;;;;;;;;;;;AAYA,SAAgB,aAAa;CAC3B,QAAQ,EAAE,gBAAkC;EAC1C,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,MAAM;GACjD,QAAQ,KAAK,+BAA+B;GAC5C;EACF;EAEA,MAAM,KAAKC,oBAAAA,SAAS,WAAW,KAAK;EACpC,MAAM,KAAKA,oBAAAA,SAAS,WAAW,YAAY;EAC3C,IAAI,CAAC,MAAM,CAAC,IAAI;EAEhB,OAAO,KAAK,KAAK,OAAO,EAAE,KAAK,MAAM;GAAE;GAAI;EAAG,CAAC,EAAE,CAAC;CACpD;AACF;;;;;;;AAQA,SAAgB,cAAc,MAA4B,SAAqB;CAC7E,IAAI,OAAO,WAAW,aAAa;CACnC,OAAO,SAAS,CAAC;CACjB,OAAO,KAAK,KAAK,WAAW,MAAM,OAAO;AAC3C;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,cAAc,SAK3B;CACD,IAAI,OAAO,WAAW,eAAe,OAAO,UAAU,aAAa;CACnE,IAAI,QAAQ,GAAG;CAEf,MAAM,QAAQ,QAAiB;EAC7B,MAAM,SAAS,IAAI,gBAAgB;GACjC,MAAM,SAAS,QAAQ;GACvB,KAAK,QAAQ;EACf,CAAC;EACD,IAAI,KAAK,OAAO,IAAI,OAAO,GAAG;EAC9B,IAAI,MAAM,CAAC,CAAC,MAAM,4BAA4B,OAAO,SAAS;CAChE;CAEA,IAAI,CAAC,QAAQ,QAAQ;EACnB,KAAK;EACL;CACF;CACA,qBAAA,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;AAChD"}
+{"version":3,"file":"microsoft-uet.cjs","names":["mapUETEvent","getFirst","getVisitor"],"sources":["../../src/third-parties/microsoft-uet.ts"],"sourcesContent":["import type { UpdateVisitorDTO } from '../schema/index';\nimport type { EventName, TrackName, TrackProperties } from '../track/types';\nimport { type UETConsent, type UETQ, mapUETEvent } from '../track/uetq';\nimport { getFirst } from '../utils/field';\nimport { sha256 } from '../utils/sha256';\nimport { getVisitor } from '../visitor/index';\n\ndeclare global {\n  interface Window {\n    /**\n     * Defined by the UET snippet before `bat.js` loads (as a plain array), so pushes made early\n     * are queued rather than lost. Undefined only where the snippet was never installed.\n     */\n    uetq?: UETQ;\n  }\n}\n\nconst metrics = ['CLS', 'FCP', 'FID', 'INP', 'LCP', 'TTFB'];\n\n/** Drop `undefined` fields: bat.js validates every key it receives, and `undefined` is a value. */\n// oxlint-disable-next-line @typescript-eslint/no-explicit-any\nfunction clean(value: unknown): any {\n  return JSON.parse(JSON.stringify(value));\n}\n\nfunction isLocal(): boolean {\n  return window.location.host.includes('127.0.0.1') || window.location.host.includes('localhost');\n}\n\n/**\n * Forward an internal track event to the Microsoft Advertising UET tag.\n *\n * `eventId` is reused as UET's `event_id` so the browser event deduplicates against the same\n * conversion sent through the Conversions API (`sendMicrosoftEvents`). The action name is the\n * internal name on both channels — see `mapUETEvent`.\n *\n * `page_view` is not forwarded: bat.js turns that action into its page-load beacon, which the\n * snippet already fires on load and, with `enableAutoSpaTracking: true` (the setting in\n * Microsoft's generated snippet), on every history change — forwarding the SDK's own page views\n * would report each page twice. The tag owns page loads; this tracker owns everything else.\n */\nexport function sendUETEvent<T extends EventName>(\n  name: TrackName<T>,\n  properties?: TrackProperties<T>,\n  eventId?: string\n) {\n  if (typeof window === 'undefined' || !window.uetq) {\n    console.warn('uetq has not been initialized');\n    return;\n  }\n  if (metrics.includes(name) || name === 'page_view') return;\n  if (isLocal()) return;\n\n  const [action, params] = mapUETEvent(name, properties, eventId);\n  window.uetq.push('event', action, clean(params));\n}\n\n/**\n * Enhanced conversions: hand the tag the visitor's email and phone so Microsoft can match a\n * conversion to an ad click without a third-party cookie. A `set` applies to every event fired\n * from the page afterwards, `pageLoad` included, and the tag fires a `pid` beacon on its own\n * when the page load already went out. Values are sent raw — the tag normalizes and SHA-256\n * hashes them in the browser (bat.js `validatePid`) before anything leaves the page.\n *\n * A setter itself, like `setGAUser`, rather than a factory like `setFBUser(pixelId)`: UET is\n * bound to its tag by the snippet and `set` addresses whichever tag drains `uetq`, so there is\n * nothing to bind first.\n */\nexport function setUETUser({ user_id, user_data }: UpdateVisitorDTO) {\n  if (typeof window === 'undefined' || !window.uetq) {\n    console.warn('uetq has not been initialized');\n    return;\n  }\n\n  // A signed-in user is also the moment the ID Sync pixel can carry a `UID` — see `syncUETVisitor`.\n  if (user_id) void syncUETVisitor(user_id);\n\n  const em = getFirst(user_data?.email);\n  const ph = getFirst(user_data?.phone_number);\n  if (!em && !ph) return;\n\n  window.uetq.push('set', { pid: clean({ em, ph }) });\n}\n\n/**\n * UET consent mode. Push `default` before the tag loads (the tag processes `consent` early, ahead\n * of the queued events) and `update` when the visitor decides. With `ad_storage: 'denied'` the\n * tag neither writes its cookies nor reads the `msclkid` from the URL.\n * https://help.ads.microsoft.com/#apex/ads/en/60119/1\n */\nexport function setUETConsent(mode: 'default' | 'update', consent: UETConsent) {\n  if (typeof window === 'undefined') return;\n  window.uetq ??= [] as unknown as UETQ;\n  window.uetq.push('consent', mode, consent);\n}\n\n/**\n * The Conversions API's client-side ID Sync pixel: ties the visitor id sent server-side as\n * `anonymousId` to Microsoft's own identifier, so server events can be attributed across\n * contexts (view-through, audiences). Microsoft requires it for remarketing built from CAPI\n * events and recommends it for measurement quality; fire it at least once per session, ideally\n * on the first page view. A pixel rather than a fetch on purpose: Microsoft must observe the\n * browser context of the sync, which a server-side call cannot carry.\n *\n * `customerId` is the Microsoft Advertising customer id (`cid` in the UI's URLs) — not the UET\n * tag id. `visitorId` is the SDK visitor id (`getVisitor().id`), which is what\n * `sendMicrosoftEvents` sends as `anonymousId`; Microsoft requires the two to be equal.\n * `userId` is the raw signed-in user id: it is SHA-256 hashed here, exactly as the server sender\n * hashes it into `externalId`, so the pair matches as well. Hashing is asynchronous, so the\n * pixel fires once the digest resolves; where SubtleCrypto is unavailable (an insecure context)\n * the pixel goes out without `UID` rather than with a raw id.\n * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration#id-sync-and-why-it-matters\n */\n/**\n * The Microsoft Advertising customer id the ID Sync pixel reports to, set once by the framework\n * `Analytics` component's `uetCustomerId` prop (or `configureUET`). Unset, nothing syncs.\n */\nlet uetCustomerId: string | undefined;\n\nexport function configureUET(options: { customerId?: string | number }) {\n  uetCustomerId = options.customerId === undefined ? undefined : String(options.customerId);\n}\n\n/**\n * Sync the SDK visitor — the `anonymousId` of the events the server sends to the Conversions\n * API — with Microsoft, plus the user's `UID` when one is known. The `Analytics` components run\n * it on mount so every visit syncs at least once, anonymous visitors included (they are who\n * remarketing audiences are built from), and `setUETUser` runs it again on sign-in.\n */\nexport async function syncUETVisitor(userId?: string): Promise<void> {\n  if (!uetCustomerId) return;\n  try {\n    const { id } = await getVisitor();\n    sendUETIdSync({ customerId: uetCustomerId, visitorId: id, userId });\n  } catch {\n    // The visitor request failed; the next page load tries again.\n  }\n}\n\nexport function sendUETIdSync(options: {\n  customerId: string | number;\n  visitorId: string;\n  /** The signed-in user's id, raw; hashed before it leaves the page. */\n  userId?: string;\n}) {\n  if (typeof window === 'undefined' || typeof Image === 'undefined') return;\n  if (isLocal()) return;\n\n  const fire = (uid?: string) => {\n    const params = new URLSearchParams({\n      Red3: `BACID_${options.customerId}`,\n      VID: options.visitorId,\n    });\n    if (uid) params.set('UID', uid);\n    new Image().src = `https://c.bing.com/c.gif?${params.toString()}`;\n  };\n\n  if (!options.userId) {\n    fire();\n    return;\n  }\n  sha256(options.userId).then(fire, () => fire());\n}\n"],"mappings":";;;;;;AAiBA,MAAM,UAAU;CAAC;CAAO;CAAO;CAAO;CAAO;CAAO;AAAM;;AAI1D,SAAS,MAAM,OAAqB;CAClC,OAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AACzC;AAEA,SAAS,UAAmB;CAC1B,OAAO,OAAO,SAAS,KAAK,SAAS,WAAW,KAAK,OAAO,SAAS,KAAK,SAAS,WAAW;AAChG;;;;;;;;;;;;;AAcA,SAAgB,aACd,MACA,YACA,SACA;CACA,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,MAAM;EACjD,QAAQ,KAAK,+BAA+B;EAC5C;CACF;CACA,IAAI,QAAQ,SAAS,IAAI,KAAK,SAAS,aAAa;CACpD,IAAI,QAAQ,GAAG;CAEf,MAAM,CAAC,QAAQ,UAAUA,mBAAAA,YAAY,MAAM,YAAY,OAAO;CAC9D,OAAO,KAAK,KAAK,SAAS,QAAQ,MAAM,MAAM,CAAC;AACjD;;;;;;;;;;;;AAaA,SAAgB,WAAW,EAAE,SAAS,aAA+B;CACnE,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,MAAM;EACjD,QAAQ,KAAK,+BAA+B;EAC5C;CACF;CAGA,IAAI,SAAS,eAAoB,OAAO;CAExC,MAAM,KAAKC,oBAAAA,SAAS,WAAW,KAAK;CACpC,MAAM,KAAKA,oBAAAA,SAAS,WAAW,YAAY;CAC3C,IAAI,CAAC,MAAM,CAAC,IAAI;CAEhB,OAAO,KAAK,KAAK,OAAO,EAAE,KAAK,MAAM;EAAE;EAAI;CAAG,CAAC,EAAE,CAAC;AACpD;;;;;;;AAQA,SAAgB,cAAc,MAA4B,SAAqB;CAC7E,IAAI,OAAO,WAAW,aAAa;CACnC,OAAO,SAAS,CAAC;CACjB,OAAO,KAAK,KAAK,WAAW,MAAM,OAAO;AAC3C;;;;;;;;;;;;;;;;;;;;;;AAuBA,IAAI;AAEJ,SAAgB,aAAa,SAA2C;CACtE,gBAAgB,QAAQ,eAAe,KAAA,IAAY,KAAA,IAAY,OAAO,QAAQ,UAAU;AAC1F;;;;;;;AAQA,eAAsB,eAAe,QAAgC;CACnE,IAAI,CAAC,eAAe;CACpB,IAAI;EACF,MAAM,EAAE,OAAO,MAAMC,sBAAAA,WAAW;EAChC,cAAc;GAAE,YAAY;GAAe,WAAW;GAAI;EAAO,CAAC;CACpE,QAAQ,CAER;AACF;AAEA,SAAgB,cAAc,SAK3B;CACD,IAAI,OAAO,WAAW,eAAe,OAAO,UAAU,aAAa;CACnE,IAAI,QAAQ,GAAG;CAEf,MAAM,QAAQ,QAAiB;EAC7B,MAAM,SAAS,IAAI,gBAAgB;GACjC,MAAM,SAAS,QAAQ;GACvB,KAAK,QAAQ;EACf,CAAC;EACD,IAAI,KAAK,OAAO,IAAI,OAAO,GAAG;EAC9B,IAAI,MAAM,CAAC,CAAC,MAAM,4BAA4B,OAAO,SAAS;CAChE;CAEA,IAAI,CAAC,QAAQ,QAAQ;EACnB,KAAK;EACL;CACF;CACA,qBAAA,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;AAChD"}

package/dist/third-parties/microsoft-uet.d.cts

@@ -31,10 +31,11 @@ declare function sendUETEvent<T extends EventName>(name: TrackName<T>, propertie
  * when the page load already went out. Values are sent raw — the tag normalizes and SHA-256
  * hashes them in the browser (bat.js `validatePid`) before anything leaves the page.
  *
- * No tag id parameter: unlike the Meta/Reddit pixels, UET is bound to its tag by the snippet
- * and `set` addresses whichever tag drains `uetq`.
+ * A setter itself, like `setGAUser`, rather than a factory like `setFBUser(pixelId)`: UET is
+ * bound to its tag by the snippet and `set` addresses whichever tag drains `uetq`, so there is
+ * nothing to bind first.
  */
-declare function setUETUser(): ({ user_data }: UpdateVisitorDTO) => void;
+declare function setUETUser({ user_id, user_data }: UpdateVisitorDTO): void;
 /**
  * UET consent mode. Push `default` before the tag loads (the tag processes `consent` early, ahead
  * of the queued events) and `update` when the visitor decides. With `ad_storage: 'denied'` the
@@ -42,23 +43,16 @@ declare function setUETUser(): ({ user_data }: UpdateVisitorDTO) => void;
  * https://help.ads.microsoft.com/#apex/ads/en/60119/1
  */
 declare function setUETConsent(mode: 'default' | 'update', consent: UETConsent): void;
+declare function configureUET(options: {
+  customerId?: string | number;
+}): void;
 /**
- * The Conversions API's client-side ID Sync pixel: ties the visitor id sent server-side as
- * `anonymousId` to Microsoft's own identifier, so server events can be attributed across
- * contexts (view-through, audiences). Microsoft requires it for remarketing built from CAPI
- * events and recommends it for measurement quality; fire it at least once per session, ideally
- * on the first page view. A pixel rather than a fetch on purpose: Microsoft must observe the
- * browser context of the sync, which a server-side call cannot carry.
- *
- * `customerId` is the Microsoft Advertising customer id (`cid` in the UI's URLs) — not the UET
- * tag id. `visitorId` is the SDK visitor id (`getVisitor().id`), which is what
- * `sendMicrosoftEvents` sends as `anonymousId`; Microsoft requires the two to be equal.
- * `userId` is the raw signed-in user id: it is SHA-256 hashed here, exactly as the server sender
- * hashes it into `externalId`, so the pair matches as well. Hashing is asynchronous, so the
- * pixel fires once the digest resolves; where SubtleCrypto is unavailable (an insecure context)
- * the pixel goes out without `UID` rather than with a raw id.
- * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration#id-sync-and-why-it-matters
+ * Sync the SDK visitor — the `anonymousId` of the events the server sends to the Conversions
+ * API — with Microsoft, plus the user's `UID` when one is known. The `Analytics` components run
+ * it on mount so every visit syncs at least once, anonymous visitors included (they are who
+ * remarketing audiences are built from), and `setUETUser` runs it again on sign-in.
  */
+declare function syncUETVisitor(userId?: string): Promise<void>;
 declare function sendUETIdSync(options: {
   customerId: string | number;
   visitorId: string;
@@ -66,5 +60,5 @@ declare function sendUETIdSync(options: {
   userId?: string;
 }): void;
 //#endregion
-export { sendUETEvent, sendUETIdSync, setUETConsent, setUETUser };
+export { configureUET, sendUETEvent, sendUETIdSync, setUETConsent, setUETUser, syncUETVisitor };
 //# sourceMappingURL=microsoft-uet.d.cts.map

package/dist/third-parties/microsoft-uet.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"microsoft-uet.d.cts","names":[],"sources":["../../src/third-parties/microsoft-uet.ts"],"mappings":";;;;QAMQ;YACI;;;;;IAKR,OAAO;;;;;;;;;;;;;;;iBA4BK,aAAa,UAAU,WACrC,MAAM,UAAU,IAChB,aAAa,gBAAgB,IAC7B;;;;;;;;;;;iBAuBc,iBAAU,aACD;;;;;;;iBAoBT,cAAc,4BAA4B,SAAS;;;;;;;;;;;;;;;;;;iBAuBnD,cAAc;EAC5B;EACA;;EAEA"}
+{"version":3,"file":"microsoft-uet.d.cts","names":[],"sources":["../../src/third-parties/microsoft-uet.ts"],"mappings":";;;;QAOQ;YACI;;;;;IAKR,OAAO;;;;;;;;;;;;;;;iBA4BK,aAAa,UAAU,WACrC,MAAM,UAAU,IAChB,aAAa,gBAAgB,IAC7B;;;;;;;;;;;;iBAwBc,aAAa,SAAS,aAAa;;;;;;;iBAsBnC,cAAc,4BAA4B,SAAS;iBA6BnD,aAAa;EAAW;;;;;;;;iBAUlB,eAAe,kBAAkB;iBAUvC,cAAc;EAC5B;EACA;;EAEA"}

package/dist/third-parties/microsoft-uet.d.mts

@@ -31,10 +31,11 @@ declare function sendUETEvent<T extends EventName>(name: TrackName<T>, propertie
  * when the page load already went out. Values are sent raw — the tag normalizes and SHA-256
  * hashes them in the browser (bat.js `validatePid`) before anything leaves the page.
  *
- * No tag id parameter: unlike the Meta/Reddit pixels, UET is bound to its tag by the snippet
- * and `set` addresses whichever tag drains `uetq`.
+ * A setter itself, like `setGAUser`, rather than a factory like `setFBUser(pixelId)`: UET is
+ * bound to its tag by the snippet and `set` addresses whichever tag drains `uetq`, so there is
+ * nothing to bind first.
  */
-declare function setUETUser(): ({ user_data }: UpdateVisitorDTO) => void;
+declare function setUETUser({ user_id, user_data }: UpdateVisitorDTO): void;
 /**
  * UET consent mode. Push `default` before the tag loads (the tag processes `consent` early, ahead
  * of the queued events) and `update` when the visitor decides. With `ad_storage: 'denied'` the
@@ -42,23 +43,16 @@ declare function setUETUser(): ({ user_data }: UpdateVisitorDTO) => void;
  * https://help.ads.microsoft.com/#apex/ads/en/60119/1
  */
 declare function setUETConsent(mode: 'default' | 'update', consent: UETConsent): void;
+declare function configureUET(options: {
+  customerId?: string | number;
+}): void;
 /**
- * The Conversions API's client-side ID Sync pixel: ties the visitor id sent server-side as
- * `anonymousId` to Microsoft's own identifier, so server events can be attributed across
- * contexts (view-through, audiences). Microsoft requires it for remarketing built from CAPI
- * events and recommends it for measurement quality; fire it at least once per session, ideally
- * on the first page view. A pixel rather than a fetch on purpose: Microsoft must observe the
- * browser context of the sync, which a server-side call cannot carry.
- *
- * `customerId` is the Microsoft Advertising customer id (`cid` in the UI's URLs) — not the UET
- * tag id. `visitorId` is the SDK visitor id (`getVisitor().id`), which is what
- * `sendMicrosoftEvents` sends as `anonymousId`; Microsoft requires the two to be equal.
- * `userId` is the raw signed-in user id: it is SHA-256 hashed here, exactly as the server sender
- * hashes it into `externalId`, so the pair matches as well. Hashing is asynchronous, so the
- * pixel fires once the digest resolves; where SubtleCrypto is unavailable (an insecure context)
- * the pixel goes out without `UID` rather than with a raw id.
- * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration#id-sync-and-why-it-matters
+ * Sync the SDK visitor — the `anonymousId` of the events the server sends to the Conversions
+ * API — with Microsoft, plus the user's `UID` when one is known. The `Analytics` components run
+ * it on mount so every visit syncs at least once, anonymous visitors included (they are who
+ * remarketing audiences are built from), and `setUETUser` runs it again on sign-in.
  */
+declare function syncUETVisitor(userId?: string): Promise<void>;
 declare function sendUETIdSync(options: {
   customerId: string | number;
   visitorId: string;
@@ -66,5 +60,5 @@ declare function sendUETIdSync(options: {
   userId?: string;
 }): void;
 //#endregion
-export { sendUETEvent, sendUETIdSync, setUETConsent, setUETUser };
+export { configureUET, sendUETEvent, sendUETIdSync, setUETConsent, setUETUser, syncUETVisitor };
 //# sourceMappingURL=microsoft-uet.d.mts.map

package/dist/third-parties/microsoft-uet.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"microsoft-uet.d.mts","names":[],"sources":["../../src/third-parties/microsoft-uet.ts"],"mappings":";;;;QAMQ;YACI;;;;;IAKR,OAAO;;;;;;;;;;;;;;;iBA4BK,aAAa,UAAU,WACrC,MAAM,UAAU,IAChB,aAAa,gBAAgB,IAC7B;;;;;;;;;;;iBAuBc,iBAAU,aACD;;;;;;;iBAoBT,cAAc,4BAA4B,SAAS;;;;;;;;;;;;;;;;;;iBAuBnD,cAAc;EAC5B;EACA;;EAEA"}
+{"version":3,"file":"microsoft-uet.d.mts","names":[],"sources":["../../src/third-parties/microsoft-uet.ts"],"mappings":";;;;QAOQ;YACI;;;;;IAKR,OAAO;;;;;;;;;;;;;;;iBA4BK,aAAa,UAAU,WACrC,MAAM,UAAU,IAChB,aAAa,gBAAgB,IAC7B;;;;;;;;;;;;iBAwBc,aAAa,SAAS,aAAa;;;;;;;iBAsBnC,cAAc,4BAA4B,SAAS;iBA6BnD,aAAa;EAAW;;;;;;;;iBAUlB,eAAe,kBAAkB;iBAUvC,cAAc;EAC5B;EACA;;EAEA"}

package/dist/third-parties/microsoft-uet.mjs

@@ -1,5 +1,6 @@
-import { getFirst } from "../utils/field.mjs";
+import { getVisitor } from "../visitor/index.mjs";
 import { mapUETEvent } from "../track/uetq.mjs";
+import { getFirst } from "../utils/field.mjs";
 import { sha256 } from "../utils/sha256.mjs";
 //#region src/third-parties/microsoft-uet.ts
 const metrics = [
@@ -46,23 +47,23 @@ function sendUETEvent(name, properties, eventId) {
 * when the page load already went out. Values are sent raw — the tag normalizes and SHA-256
 * hashes them in the browser (bat.js `validatePid`) before anything leaves the page.
 *
-* No tag id parameter: unlike the Meta/Reddit pixels, UET is bound to its tag by the snippet
-* and `set` addresses whichever tag drains `uetq`.
+* A setter itself, like `setGAUser`, rather than a factory like `setFBUser(pixelId)`: UET is
+* bound to its tag by the snippet and `set` addresses whichever tag drains `uetq`, so there is
+* nothing to bind first.
 */
-function setUETUser() {
-	return ({ user_data }) => {
-		if (typeof window === "undefined" || !window.uetq) {
-			console.warn("uetq has not been initialized");
-			return;
-		}
-		const em = getFirst(user_data?.email);
-		const ph = getFirst(user_data?.phone_number);
-		if (!em && !ph) return;
-		window.uetq.push("set", { pid: clean({
-			em,
-			ph
-		}) });
-	};
+function setUETUser({ user_id, user_data }) {
+	if (typeof window === "undefined" || !window.uetq) {
+		console.warn("uetq has not been initialized");
+		return;
+	}
+	if (user_id) syncUETVisitor(user_id);
+	const em = getFirst(user_data?.email);
+	const ph = getFirst(user_data?.phone_number);
+	if (!em && !ph) return;
+	window.uetq.push("set", { pid: clean({
+		em,
+		ph
+	}) });
 }
 /**
 * UET consent mode. Push `default` before the tag loads (the tag processes `consent` early, ahead
@@ -92,6 +93,31 @@ function setUETConsent(mode, consent) {
 * the pixel goes out without `UID` rather than with a raw id.
 * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration#id-sync-and-why-it-matters
 */
+/**
+* The Microsoft Advertising customer id the ID Sync pixel reports to, set once by the framework
+* `Analytics` component's `uetCustomerId` prop (or `configureUET`). Unset, nothing syncs.
+*/
+let uetCustomerId;
+function configureUET(options) {
+	uetCustomerId = options.customerId === void 0 ? void 0 : String(options.customerId);
+}
+/**
+* Sync the SDK visitor — the `anonymousId` of the events the server sends to the Conversions
+* API — with Microsoft, plus the user's `UID` when one is known. The `Analytics` components run
+* it on mount so every visit syncs at least once, anonymous visitors included (they are who
+* remarketing audiences are built from), and `setUETUser` runs it again on sign-in.
+*/
+async function syncUETVisitor(userId) {
+	if (!uetCustomerId) return;
+	try {
+		const { id } = await getVisitor();
+		sendUETIdSync({
+			customerId: uetCustomerId,
+			visitorId: id,
+			userId
+		});
+	} catch {}
+}
 function sendUETIdSync(options) {
 	if (typeof window === "undefined" || typeof Image === "undefined") return;
 	if (isLocal()) return;
@@ -110,6 +136,6 @@ function sendUETIdSync(options) {
 	sha256(options.userId).then(fire, () => fire());
 }
 //#endregion
-export { sendUETEvent, sendUETIdSync, setUETConsent, setUETUser };
+export { configureUET, sendUETEvent, sendUETIdSync, setUETConsent, setUETUser, syncUETVisitor };
 
 //# sourceMappingURL=microsoft-uet.mjs.map

package/dist/third-parties/microsoft-uet.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"microsoft-uet.mjs","names":[],"sources":["../../src/third-parties/microsoft-uet.ts"],"sourcesContent":["import type { UpdateVisitorDTO } from '../schema/index';\nimport type { EventName, TrackName, TrackProperties } from '../track/types';\nimport { type UETConsent, type UETQ, mapUETEvent } from '../track/uetq';\nimport { getFirst } from '../utils/field';\nimport { sha256 } from '../utils/sha256';\n\ndeclare global {\n  interface Window {\n    /**\n     * Defined by the UET snippet before `bat.js` loads (as a plain array), so pushes made early\n     * are queued rather than lost. Undefined only where the snippet was never installed.\n     */\n    uetq?: UETQ;\n  }\n}\n\nconst metrics = ['CLS', 'FCP', 'FID', 'INP', 'LCP', 'TTFB'];\n\n/** Drop `undefined` fields: bat.js validates every key it receives, and `undefined` is a value. */\n// oxlint-disable-next-line @typescript-eslint/no-explicit-any\nfunction clean(value: unknown): any {\n  return JSON.parse(JSON.stringify(value));\n}\n\nfunction isLocal(): boolean {\n  return window.location.host.includes('127.0.0.1') || window.location.host.includes('localhost');\n}\n\n/**\n * Forward an internal track event to the Microsoft Advertising UET tag.\n *\n * `eventId` is reused as UET's `event_id` so the browser event deduplicates against the same\n * conversion sent through the Conversions API (`sendMicrosoftEvents`). The action name is the\n * internal name on both channels — see `mapUETEvent`.\n *\n * `page_view` is not forwarded: bat.js turns that action into its page-load beacon, which the\n * snippet already fires on load and, with `enableAutoSpaTracking: true` (the setting in\n * Microsoft's generated snippet), on every history change — forwarding the SDK's own page views\n * would report each page twice. The tag owns page loads; this tracker owns everything else.\n */\nexport function sendUETEvent<T extends EventName>(\n  name: TrackName<T>,\n  properties?: TrackProperties<T>,\n  eventId?: string\n) {\n  if (typeof window === 'undefined' || !window.uetq) {\n    console.warn('uetq has not been initialized');\n    return;\n  }\n  if (metrics.includes(name) || name === 'page_view') return;\n  if (isLocal()) return;\n\n  const [action, params] = mapUETEvent(name, properties, eventId);\n  window.uetq.push('event', action, clean(params));\n}\n\n/**\n * Enhanced conversions: hand the tag the visitor's email and phone so Microsoft can match a\n * conversion to an ad click without a third-party cookie. A `set` applies to every event fired\n * from the page afterwards, `pageLoad` included, and the tag fires a `pid` beacon on its own\n * when the page load already went out. Values are sent raw — the tag normalizes and SHA-256\n * hashes them in the browser (bat.js `validatePid`) before anything leaves the page.\n *\n * No tag id parameter: unlike the Meta/Reddit pixels, UET is bound to its tag by the snippet\n * and `set` addresses whichever tag drains `uetq`.\n */\nexport function setUETUser() {\n  return ({ user_data }: UpdateVisitorDTO) => {\n    if (typeof window === 'undefined' || !window.uetq) {\n      console.warn('uetq has not been initialized');\n      return;\n    }\n\n    const em = getFirst(user_data?.email);\n    const ph = getFirst(user_data?.phone_number);\n    if (!em && !ph) return;\n\n    window.uetq.push('set', { pid: clean({ em, ph }) });\n  };\n}\n\n/**\n * UET consent mode. Push `default` before the tag loads (the tag processes `consent` early, ahead\n * of the queued events) and `update` when the visitor decides. With `ad_storage: 'denied'` the\n * tag neither writes its cookies nor reads the `msclkid` from the URL.\n * https://help.ads.microsoft.com/#apex/ads/en/60119/1\n */\nexport function setUETConsent(mode: 'default' | 'update', consent: UETConsent) {\n  if (typeof window === 'undefined') return;\n  window.uetq ??= [] as unknown as UETQ;\n  window.uetq.push('consent', mode, consent);\n}\n\n/**\n * The Conversions API's client-side ID Sync pixel: ties the visitor id sent server-side as\n * `anonymousId` to Microsoft's own identifier, so server events can be attributed across\n * contexts (view-through, audiences). Microsoft requires it for remarketing built from CAPI\n * events and recommends it for measurement quality; fire it at least once per session, ideally\n * on the first page view. A pixel rather than a fetch on purpose: Microsoft must observe the\n * browser context of the sync, which a server-side call cannot carry.\n *\n * `customerId` is the Microsoft Advertising customer id (`cid` in the UI's URLs) — not the UET\n * tag id. `visitorId` is the SDK visitor id (`getVisitor().id`), which is what\n * `sendMicrosoftEvents` sends as `anonymousId`; Microsoft requires the two to be equal.\n * `userId` is the raw signed-in user id: it is SHA-256 hashed here, exactly as the server sender\n * hashes it into `externalId`, so the pair matches as well. Hashing is asynchronous, so the\n * pixel fires once the digest resolves; where SubtleCrypto is unavailable (an insecure context)\n * the pixel goes out without `UID` rather than with a raw id.\n * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration#id-sync-and-why-it-matters\n */\nexport function sendUETIdSync(options: {\n  customerId: string | number;\n  visitorId: string;\n  /** The signed-in user's id, raw; hashed before it leaves the page. */\n  userId?: string;\n}) {\n  if (typeof window === 'undefined' || typeof Image === 'undefined') return;\n  if (isLocal()) return;\n\n  const fire = (uid?: string) => {\n    const params = new URLSearchParams({\n      Red3: `BACID_${options.customerId}`,\n      VID: options.visitorId,\n    });\n    if (uid) params.set('UID', uid);\n    new Image().src = `https://c.bing.com/c.gif?${params.toString()}`;\n  };\n\n  if (!options.userId) {\n    fire();\n    return;\n  }\n  sha256(options.userId).then(fire, () => fire());\n}\n"],"mappings":";;;;AAgBA,MAAM,UAAU;CAAC;CAAO;CAAO;CAAO;CAAO;CAAO;AAAM;;AAI1D,SAAS,MAAM,OAAqB;CAClC,OAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AACzC;AAEA,SAAS,UAAmB;CAC1B,OAAO,OAAO,SAAS,KAAK,SAAS,WAAW,KAAK,OAAO,SAAS,KAAK,SAAS,WAAW;AAChG;;;;;;;;;;;;;AAcA,SAAgB,aACd,MACA,YACA,SACA;CACA,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,MAAM;EACjD,QAAQ,KAAK,+BAA+B;EAC5C;CACF;CACA,IAAI,QAAQ,SAAS,IAAI,KAAK,SAAS,aAAa;CACpD,IAAI,QAAQ,GAAG;CAEf,MAAM,CAAC,QAAQ,UAAU,YAAY,MAAM,YAAY,OAAO;CAC9D,OAAO,KAAK,KAAK,SAAS,QAAQ,MAAM,MAAM,CAAC;AACjD;;;;;;;;;;;AAYA,SAAgB,aAAa;CAC3B,QAAQ,EAAE,gBAAkC;EAC1C,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,MAAM;GACjD,QAAQ,KAAK,+BAA+B;GAC5C;EACF;EAEA,MAAM,KAAK,SAAS,WAAW,KAAK;EACpC,MAAM,KAAK,SAAS,WAAW,YAAY;EAC3C,IAAI,CAAC,MAAM,CAAC,IAAI;EAEhB,OAAO,KAAK,KAAK,OAAO,EAAE,KAAK,MAAM;GAAE;GAAI;EAAG,CAAC,EAAE,CAAC;CACpD;AACF;;;;;;;AAQA,SAAgB,cAAc,MAA4B,SAAqB;CAC7E,IAAI,OAAO,WAAW,aAAa;CACnC,OAAO,SAAS,CAAC;CACjB,OAAO,KAAK,KAAK,WAAW,MAAM,OAAO;AAC3C;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,cAAc,SAK3B;CACD,IAAI,OAAO,WAAW,eAAe,OAAO,UAAU,aAAa;CACnE,IAAI,QAAQ,GAAG;CAEf,MAAM,QAAQ,QAAiB;EAC7B,MAAM,SAAS,IAAI,gBAAgB;GACjC,MAAM,SAAS,QAAQ;GACvB,KAAK,QAAQ;EACf,CAAC;EACD,IAAI,KAAK,OAAO,IAAI,OAAO,GAAG;EAC9B,IAAI,MAAM,CAAC,CAAC,MAAM,4BAA4B,OAAO,SAAS;CAChE;CAEA,IAAI,CAAC,QAAQ,QAAQ;EACnB,KAAK;EACL;CACF;CACA,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;AAChD"}
+{"version":3,"file":"microsoft-uet.mjs","names":[],"sources":["../../src/third-parties/microsoft-uet.ts"],"sourcesContent":["import type { UpdateVisitorDTO } from '../schema/index';\nimport type { EventName, TrackName, TrackProperties } from '../track/types';\nimport { type UETConsent, type UETQ, mapUETEvent } from '../track/uetq';\nimport { getFirst } from '../utils/field';\nimport { sha256 } from '../utils/sha256';\nimport { getVisitor } from '../visitor/index';\n\ndeclare global {\n  interface Window {\n    /**\n     * Defined by the UET snippet before `bat.js` loads (as a plain array), so pushes made early\n     * are queued rather than lost. Undefined only where the snippet was never installed.\n     */\n    uetq?: UETQ;\n  }\n}\n\nconst metrics = ['CLS', 'FCP', 'FID', 'INP', 'LCP', 'TTFB'];\n\n/** Drop `undefined` fields: bat.js validates every key it receives, and `undefined` is a value. */\n// oxlint-disable-next-line @typescript-eslint/no-explicit-any\nfunction clean(value: unknown): any {\n  return JSON.parse(JSON.stringify(value));\n}\n\nfunction isLocal(): boolean {\n  return window.location.host.includes('127.0.0.1') || window.location.host.includes('localhost');\n}\n\n/**\n * Forward an internal track event to the Microsoft Advertising UET tag.\n *\n * `eventId` is reused as UET's `event_id` so the browser event deduplicates against the same\n * conversion sent through the Conversions API (`sendMicrosoftEvents`). The action name is the\n * internal name on both channels — see `mapUETEvent`.\n *\n * `page_view` is not forwarded: bat.js turns that action into its page-load beacon, which the\n * snippet already fires on load and, with `enableAutoSpaTracking: true` (the setting in\n * Microsoft's generated snippet), on every history change — forwarding the SDK's own page views\n * would report each page twice. The tag owns page loads; this tracker owns everything else.\n */\nexport function sendUETEvent<T extends EventName>(\n  name: TrackName<T>,\n  properties?: TrackProperties<T>,\n  eventId?: string\n) {\n  if (typeof window === 'undefined' || !window.uetq) {\n    console.warn('uetq has not been initialized');\n    return;\n  }\n  if (metrics.includes(name) || name === 'page_view') return;\n  if (isLocal()) return;\n\n  const [action, params] = mapUETEvent(name, properties, eventId);\n  window.uetq.push('event', action, clean(params));\n}\n\n/**\n * Enhanced conversions: hand the tag the visitor's email and phone so Microsoft can match a\n * conversion to an ad click without a third-party cookie. A `set` applies to every event fired\n * from the page afterwards, `pageLoad` included, and the tag fires a `pid` beacon on its own\n * when the page load already went out. Values are sent raw — the tag normalizes and SHA-256\n * hashes them in the browser (bat.js `validatePid`) before anything leaves the page.\n *\n * A setter itself, like `setGAUser`, rather than a factory like `setFBUser(pixelId)`: UET is\n * bound to its tag by the snippet and `set` addresses whichever tag drains `uetq`, so there is\n * nothing to bind first.\n */\nexport function setUETUser({ user_id, user_data }: UpdateVisitorDTO) {\n  if (typeof window === 'undefined' || !window.uetq) {\n    console.warn('uetq has not been initialized');\n    return;\n  }\n\n  // A signed-in user is also the moment the ID Sync pixel can carry a `UID` — see `syncUETVisitor`.\n  if (user_id) void syncUETVisitor(user_id);\n\n  const em = getFirst(user_data?.email);\n  const ph = getFirst(user_data?.phone_number);\n  if (!em && !ph) return;\n\n  window.uetq.push('set', { pid: clean({ em, ph }) });\n}\n\n/**\n * UET consent mode. Push `default` before the tag loads (the tag processes `consent` early, ahead\n * of the queued events) and `update` when the visitor decides. With `ad_storage: 'denied'` the\n * tag neither writes its cookies nor reads the `msclkid` from the URL.\n * https://help.ads.microsoft.com/#apex/ads/en/60119/1\n */\nexport function setUETConsent(mode: 'default' | 'update', consent: UETConsent) {\n  if (typeof window === 'undefined') return;\n  window.uetq ??= [] as unknown as UETQ;\n  window.uetq.push('consent', mode, consent);\n}\n\n/**\n * The Conversions API's client-side ID Sync pixel: ties the visitor id sent server-side as\n * `anonymousId` to Microsoft's own identifier, so server events can be attributed across\n * contexts (view-through, audiences). Microsoft requires it for remarketing built from CAPI\n * events and recommends it for measurement quality; fire it at least once per session, ideally\n * on the first page view. A pixel rather than a fetch on purpose: Microsoft must observe the\n * browser context of the sync, which a server-side call cannot carry.\n *\n * `customerId` is the Microsoft Advertising customer id (`cid` in the UI's URLs) — not the UET\n * tag id. `visitorId` is the SDK visitor id (`getVisitor().id`), which is what\n * `sendMicrosoftEvents` sends as `anonymousId`; Microsoft requires the two to be equal.\n * `userId` is the raw signed-in user id: it is SHA-256 hashed here, exactly as the server sender\n * hashes it into `externalId`, so the pair matches as well. Hashing is asynchronous, so the\n * pixel fires once the digest resolves; where SubtleCrypto is unavailable (an insecure context)\n * the pixel goes out without `UID` rather than with a raw id.\n * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration#id-sync-and-why-it-matters\n */\n/**\n * The Microsoft Advertising customer id the ID Sync pixel reports to, set once by the framework\n * `Analytics` component's `uetCustomerId` prop (or `configureUET`). Unset, nothing syncs.\n */\nlet uetCustomerId: string | undefined;\n\nexport function configureUET(options: { customerId?: string | number }) {\n  uetCustomerId = options.customerId === undefined ? undefined : String(options.customerId);\n}\n\n/**\n * Sync the SDK visitor — the `anonymousId` of the events the server sends to the Conversions\n * API — with Microsoft, plus the user's `UID` when one is known. The `Analytics` components run\n * it on mount so every visit syncs at least once, anonymous visitors included (they are who\n * remarketing audiences are built from), and `setUETUser` runs it again on sign-in.\n */\nexport async function syncUETVisitor(userId?: string): Promise<void> {\n  if (!uetCustomerId) return;\n  try {\n    const { id } = await getVisitor();\n    sendUETIdSync({ customerId: uetCustomerId, visitorId: id, userId });\n  } catch {\n    // The visitor request failed; the next page load tries again.\n  }\n}\n\nexport function sendUETIdSync(options: {\n  customerId: string | number;\n  visitorId: string;\n  /** The signed-in user's id, raw; hashed before it leaves the page. */\n  userId?: string;\n}) {\n  if (typeof window === 'undefined' || typeof Image === 'undefined') return;\n  if (isLocal()) return;\n\n  const fire = (uid?: string) => {\n    const params = new URLSearchParams({\n      Red3: `BACID_${options.customerId}`,\n      VID: options.visitorId,\n    });\n    if (uid) params.set('UID', uid);\n    new Image().src = `https://c.bing.com/c.gif?${params.toString()}`;\n  };\n\n  if (!options.userId) {\n    fire();\n    return;\n  }\n  sha256(options.userId).then(fire, () => fire());\n}\n"],"mappings":";;;;;AAiBA,MAAM,UAAU;CAAC;CAAO;CAAO;CAAO;CAAO;CAAO;AAAM;;AAI1D,SAAS,MAAM,OAAqB;CAClC,OAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AACzC;AAEA,SAAS,UAAmB;CAC1B,OAAO,OAAO,SAAS,KAAK,SAAS,WAAW,KAAK,OAAO,SAAS,KAAK,SAAS,WAAW;AAChG;;;;;;;;;;;;;AAcA,SAAgB,aACd,MACA,YACA,SACA;CACA,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,MAAM;EACjD,QAAQ,KAAK,+BAA+B;EAC5C;CACF;CACA,IAAI,QAAQ,SAAS,IAAI,KAAK,SAAS,aAAa;CACpD,IAAI,QAAQ,GAAG;CAEf,MAAM,CAAC,QAAQ,UAAU,YAAY,MAAM,YAAY,OAAO;CAC9D,OAAO,KAAK,KAAK,SAAS,QAAQ,MAAM,MAAM,CAAC;AACjD;;;;;;;;;;;;AAaA,SAAgB,WAAW,EAAE,SAAS,aAA+B;CACnE,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,MAAM;EACjD,QAAQ,KAAK,+BAA+B;EAC5C;CACF;CAGA,IAAI,SAAS,eAAoB,OAAO;CAExC,MAAM,KAAK,SAAS,WAAW,KAAK;CACpC,MAAM,KAAK,SAAS,WAAW,YAAY;CAC3C,IAAI,CAAC,MAAM,CAAC,IAAI;CAEhB,OAAO,KAAK,KAAK,OAAO,EAAE,KAAK,MAAM;EAAE;EAAI;CAAG,CAAC,EAAE,CAAC;AACpD;;;;;;;AAQA,SAAgB,cAAc,MAA4B,SAAqB;CAC7E,IAAI,OAAO,WAAW,aAAa;CACnC,OAAO,SAAS,CAAC;CACjB,OAAO,KAAK,KAAK,WAAW,MAAM,OAAO;AAC3C;;;;;;;;;;;;;;;;;;;;;;AAuBA,IAAI;AAEJ,SAAgB,aAAa,SAA2C;CACtE,gBAAgB,QAAQ,eAAe,KAAA,IAAY,KAAA,IAAY,OAAO,QAAQ,UAAU;AAC1F;;;;;;;AAQA,eAAsB,eAAe,QAAgC;CACnE,IAAI,CAAC,eAAe;CACpB,IAAI;EACF,MAAM,EAAE,OAAO,MAAM,WAAW;EAChC,cAAc;GAAE,YAAY;GAAe,WAAW;GAAI;EAAO,CAAC;CACpE,QAAQ,CAER;AACF;AAEA,SAAgB,cAAc,SAK3B;CACD,IAAI,OAAO,WAAW,eAAe,OAAO,UAAU,aAAa;CACnE,IAAI,QAAQ,GAAG;CAEf,MAAM,QAAQ,QAAiB;EAC7B,MAAM,SAAS,IAAI,gBAAgB;GACjC,MAAM,SAAS,QAAQ;GACvB,KAAK,QAAQ;EACf,CAAC;EACD,IAAI,KAAK,OAAO,IAAI,OAAO,GAAG;EAC9B,IAAI,MAAM,CAAC,CAAC,MAAM,4BAA4B,OAAO,SAAS;CAChE;CAEA,IAAI,CAAC,QAAQ,QAAQ;EACnB,KAAK;EACL;CACF;CACA,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;AAChD"}

package/dist/third-parties/openai-pixel.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_utils_field = require("../utils/field.cjs");
-const require_track_oaiq = require("../track/oaiq.cjs");
 const require_utils_sha256 = require("../utils/sha256.cjs");
+const require_track_oaiq = require("../track/oaiq.cjs");
 //#region src/third-parties/openai-pixel.ts
 /** Drop `undefined` fields so the SDK only receives populated values. */
 function clean(value) {

package/dist/third-parties/openai-pixel.mjs

@@ -1,6 +1,6 @@
 import { getFirst } from "../utils/field.mjs";
-import { NON_AD_EVENTS, mapOAIEvent } from "../track/oaiq.mjs";
 import { sha256 } from "../utils/sha256.mjs";
+import { NON_AD_EVENTS, mapOAIEvent } from "../track/oaiq.mjs";
 //#region src/third-parties/openai-pixel.ts
 /** Drop `undefined` fields so the SDK only receives populated values. */
 function clean(value) {

package/dist/third-parties/reddit-pixel.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_track_rdt = require("../track/rdt.cjs");
 const require_utils_field = require("../utils/field.cjs");
+const require_track_rdt = require("../track/rdt.cjs");
 //#region src/third-parties/reddit-pixel.ts
 const metrics = [
 	"CLS",

package/dist/third-parties/reddit-pixel.mjs

@@ -1,5 +1,5 @@
-import { mapRDTEvent } from "../track/rdt.mjs";
 import { getFirst } from "../utils/field.mjs";
+import { mapRDTEvent } from "../track/rdt.mjs";
 //#region src/third-parties/reddit-pixel.ts
 const metrics = [
 	"CLS",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shware/analytics",
-  "version": "8.5.0",
+  "version": "8.7.0",
   "private": false,
   "repository": {
     "type": "git",