@splitsoftware/splitio-commons 3.0.0-rc.0 → 3.0.0-rc.1

package/CHANGES.txt

@@ -4,13 +4,18 @@
  - Added a bloom filter utility and platform-specific modules (`src/platform/`) for reuse across SDKs.
  - Added support for the Configs SDK:
    - new type declarations,
-   - a fallback calculator with sanitizer,
+   - fallback calculator with sanitizer,
    - default treatment evaluation (without a target),
-   - a new `CONFIGS_UPDATE` metadata type for `SDK_UPDATE` event,
-   - an optional `entityType` field in the `/testImpressions/bulk` payload,
+   - new `CONFIGS_UPDATE` metadata type for `SDK_UPDATE` event,
+   - optional `entityType` field in the `/testImpressions/bulk` payload,
    - input validation for the target object.
+ - Removed the misleading warning log 'No listeners for SDK_READY event detected', since users can use the `whenReady` method to wait for the SDK to be ready.
  - BREAKING CHANGES: Renamed some types and modules, and updated the signatures of others for clarity and reusability.
 
+2.12.1 (April 30, 2026)
+ - Updated internal modules to handle `null` values from `/splitChanges` response.
+ - Updated some dependencies for vulnerability fixes.
+
 2.12.0 (February 24, 2026)
  - Added support for ioredis v5 (Related to issue https://github.com/splitio/javascript-commons/issues/471).
 

package/cjs/evaluator/index.js

@@ -27,15 +27,15 @@ function treatmentsException(definitionNames) {
 function evaluateFeature(log, key, definitionName, attributes, storage, options) {
     var definition;
     try {
-        definition = storage.splits.getSplit(definitionName);
+        definition = storage.definitions.get(definitionName);
     }
     catch (e) {
-        // Exception on sync `getSplit` storage. Not possible ATM with InMemory and InLocal storages.
+        // Exception on sync storage. Not possible ATM with InMemory and InLocal storages.
         return EVALUATION_EXCEPTION;
     }
     if ((0, thenable_1.thenable)(definition)) {
         return definition.then(function (definition) { return getEvaluation(log, key, definition, attributes, storage, options); }).catch(
-        // Exception on async `getSplit` storage. For example, when the storage is redis or
+        // Exception on async storage. For example, when the storage is redis or
         // pluggable and there is a connection issue and we can't retrieve the split to be evaluated
         function () { return EVALUATION_EXCEPTION; });
     }
@@ -45,16 +45,16 @@ exports.evaluateFeature = evaluateFeature;
 function evaluateFeatures(log, key, definitionNames, attributes, storage, options) {
     var definitions;
     try {
-        definitions = storage.splits.getSplits(definitionNames);
+        definitions = storage.definitions.getMany(definitionNames);
     }
     catch (e) {
-        // Exception on sync `getSplits` storage. Not possible ATM with InMemory and InLocal storages.
+        // Exception on sync storage. Not possible ATM with InMemory and InLocal storages.
         return treatmentsException(definitionNames);
     }
     return (0, thenable_1.thenable)(definitions) ?
         definitions.then(function (definitions) { return getEvaluations(log, key, definitionNames, definitions, attributes, storage, options); })
             .catch(function () {
-            // Exception on async `getSplits` storage. For example, when the storage is redis or
+            // Exception on async storage. For example, when the storage is redis or
             // pluggable and there is a connection issue and we can't retrieve the split to be evaluated
             return treatmentsException(definitionNames);
         }) :
@@ -80,7 +80,7 @@ function evaluateFeaturesByFlagSets(log, key, flagSets, attributes, storage, met
     }
     // get features by flag sets
     try {
-        storedFlagNames = storage.splits.getNamesByFlagSets(flagSets);
+        storedFlagNames = storage.definitions.getNamesBySets(flagSets);
     }
     catch (e) {
         // return empty evaluations
@@ -99,7 +99,7 @@ function getEvaluation(log, key, definition, attributes, storage, options) {
     if (definition) {
         var split = (0, Engine_1.engineParser)(log, definition, storage);
         var evaluation = split.getTreatment(key, attributes, evaluateFeature);
-        // If the storage is async and the evaluated flag uses segments or dependencies, evaluation is thenable
+        // If the storage is async and the evaluated definition uses segments or dependencies, evaluation is thenable
         if ((0, thenable_1.thenable)(evaluation)) {
             return evaluation.then(function (result) {
                 result.changeNumber = definition.changeNumber;
@@ -119,11 +119,11 @@ function getEvaluation(log, key, definition, attributes, storage, options) {
     }
     return EVALUATION_DEFINITION_NOT_FOUND;
 }
-function getEvaluations(log, key, definitionNames, splits, attributes, storage, options) {
+function getEvaluations(log, key, definitionNames, definitions, attributes, storage, options) {
     var result = {};
     var thenables = [];
     definitionNames.forEach(function (definitionName) {
-        var evaluation = getEvaluation(log, key, splits[definitionName], attributes, storage, options);
+        var evaluation = getEvaluation(log, key, definitions[definitionName], attributes, storage, options);
         if ((0, thenable_1.thenable)(evaluation)) {
             thenables.push(evaluation.then(function (res) {
                 result[definitionName] = res;
@@ -138,7 +138,7 @@ function getEvaluations(log, key, definitionNames, splits, attributes, storage,
 function evaluateDefaultTreatment(definitionName, storage) {
     var definition;
     try {
-        definition = storage.splits.getSplit(definitionName);
+        definition = storage.definitions.get(definitionName);
     }
     catch (e) {
         return EVALUATION_EXCEPTION;

package/cjs/logger/constants.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CLIENT_NO_LISTENER = exports.ENGINE_VALUE_NO_ATTRIBUTES = exports.ENGINE_VALUE_INVALID = exports.SUBMITTERS_PUSH_PAGE_HIDDEN = exports.USER_CONSENT_INITIAL = exports.USER_CONSENT_NOT_UPDATED = exports.USER_CONSENT_UPDATED = exports.IMPRESSIONS_TRACKER_SUCCESS = exports.EVENTS_TRACKER_SUCCESS = exports.SYNC_STOP_POLLING = exports.SYNC_CONTINUE_POLLING = exports.SYNC_START_POLLING = exports.SUBMITTERS_PUSH = exports.SUBMITTERS_PUSH_FULL_QUEUE = exports.STREAMING_DISCONNECTING = exports.STREAMING_DISABLED = exports.STREAMING_CONNECTING = exports.STREAMING_RECONNECT = exports.STREAMING_REFRESH_TOKEN = exports.POLLING_STOP = exports.POLLING_START = exports.POLLING_SMART_PAUSING = exports.NEW_FACTORY = exports.NEW_SHARED_CLIENT = exports.IMPRESSION_QUEUEING = exports.CLIENT_READY = exports.CLIENT_READY_FROM_CACHE = exports.ENGINE_DEFAULT = exports.ENGINE_MATCHER_RESULT = exports.SETTINGS_SPLITS_FILTER = exports.SYNC_TASK_STOP = exports.SYNC_TASK_EXECUTE = exports.SYNC_TASK_START = exports.STREAMING_NEW_MESSAGE = exports.SYNC_UPDATE = exports.SYNC_FETCH = exports.SYNC_OFFLINE_DATA = exports.RETRIEVE_MANAGER = exports.RETRIEVE_CLIENT_EXISTING = exports.RETRIEVE_CLIENT_DEFAULT = exports.CLEANUP_DEREGISTERING = exports.CLEANUP_REGISTERING = exports.ENGINE_SANITIZE = exports.ENGINE_VALUE = exports.ENGINE_MATCHER_DEPENDENCY_PRE = exports.ENGINE_MATCHER_DEPENDENCY = exports.ENGINE_BUCKET = exports.ENGINE_COMBINER_IFELSEIF_NO_TREATMENT = exports.ENGINE_COMBINER_IFELSEIF = exports.ENGINE_COMBINER_AND = void 0;
-exports.ERROR_STORAGE_INVALID = exports.ERROR_HTTP = exports.ERROR_INVALID_CONFIG_PARAM = exports.ERROR_EMPTY_ARRAY = exports.ERROR_EMPTY = exports.ERROR_INVALID = exports.ERROR_INVALID_KEY_OBJECT = exports.ERROR_TOO_LONG = exports.ERROR_NULL = exports.ERROR_CLIENT_DESTROYED = exports.ERROR_NOT_FINITE = exports.ERROR_SIZE_EXCEEDED = exports.ERROR_NOT_PLAIN_OBJECT = exports.ERROR_EVENT_TYPE_FORMAT = exports.ERROR_EVENTS_TRACKER = exports.ERROR_IMPRESSIONS_LISTENER = exports.ERROR_IMPRESSIONS_TRACKER = exports.ERROR_STREAMING_AUTH = exports.ERROR_STREAMING_SSE = exports.ERROR_SYNC_OFFLINE_LOADING = exports.ERROR_CLIENT_CANNOT_GET_READY = exports.ERROR_CLIENT_LISTENER = exports.ERROR_LOGLEVEL_INVALID = exports.ERROR_ENGINE_COMBINER_IFELSEIF = exports.WARN_FLAGSET_WITHOUT_FLAGS = exports.WARN_FLAGSET_NOT_CONFIGURED = exports.WARN_LOWERCASE_FLAGSET = exports.WARN_INVALID_FLAGSET = exports.STREAMING_PARSING_SPLIT_UPDATE = exports.STREAMING_PARSING_MEMBERSHIPS_UPDATE = exports.WARN_SDK_KEY = exports.WARN_SPLITS_FILTER_EMPTY = exports.WARN_SPLITS_FILTER_INVALID = exports.WARN_SPLITS_FILTER_IGNORED = exports.WARN_INTEGRATION_INVALID = exports.WARN_NOT_EXISTENT_TT = exports.WARN_LOWERCASE_TRAFFIC_TYPE = exports.WARN_NOT_EXISTENT_DEFINITION = exports.WARN_TRIMMING = exports.WARN_CONVERTING = exports.WARN_TRIMMING_PROPERTIES = exports.WARN_SETTING_NULL = exports.SUBMITTERS_PUSH_RETRY = exports.SUBMITTERS_PUSH_FAILS = exports.STREAMING_FALLBACK = exports.STREAMING_PARSING_MESSAGE_FAILS = exports.STREAMING_PARSING_ERROR_FAILS = exports.SYNC_FETCH_FAILS = exports.SYNC_FETCH_RETRY = exports.CLIENT_NOT_READY_FROM_CACHE = void 0;
-exports.LOG_PREFIX_CLEANUP = exports.LOG_PREFIX_UNIQUE_KEYS_TRACKER = exports.LOG_PREFIX_EVENTS_TRACKER = exports.LOG_PREFIX_IMPRESSIONS_TRACKER = exports.LOG_PREFIX_SYNC_SUBMITTERS = exports.LOG_PREFIX_SYNC_POLLING = exports.LOG_PREFIX_SYNC_STREAMING = exports.LOG_PREFIX_SYNC_OFFLINE = exports.LOG_PREFIX_SYNC_MANAGER = exports.LOG_PREFIX_SYNC = exports.LOG_PREFIX_ENGINE_VALUE = exports.LOG_PREFIX_ENGINE_MATCHER = exports.LOG_PREFIX_ENGINE_COMBINER = exports.LOG_PREFIX_ENGINE = exports.LOG_PREFIX_CLIENT_INSTANTIATION = exports.LOG_PREFIX_INSTANTIATION = exports.LOG_PREFIX_SETTINGS = exports.ENGINE_MATCHER_ERROR = exports.ERROR_SETS_FILTER_EXCLUSIVE = exports.ERROR_TOO_MANY_SETS = exports.ERROR_MIN_CONFIG_PARAM = exports.ERROR_NOT_BOOLEAN = void 0;
+exports.CLIENT_NOT_READY_FROM_CACHE = exports.ENGINE_VALUE_NO_ATTRIBUTES = exports.ENGINE_VALUE_INVALID = exports.SUBMITTERS_PUSH_PAGE_HIDDEN = exports.USER_CONSENT_INITIAL = exports.USER_CONSENT_NOT_UPDATED = exports.USER_CONSENT_UPDATED = exports.IMPRESSIONS_TRACKER_SUCCESS = exports.EVENTS_TRACKER_SUCCESS = exports.SYNC_STOP_POLLING = exports.SYNC_CONTINUE_POLLING = exports.SYNC_START_POLLING = exports.SUBMITTERS_PUSH = exports.SUBMITTERS_PUSH_FULL_QUEUE = exports.STREAMING_DISCONNECTING = exports.STREAMING_DISABLED = exports.STREAMING_CONNECTING = exports.STREAMING_RECONNECT = exports.STREAMING_REFRESH_TOKEN = exports.POLLING_STOP = exports.POLLING_START = exports.POLLING_SMART_PAUSING = exports.NEW_FACTORY = exports.NEW_SHARED_CLIENT = exports.IMPRESSION_QUEUEING = exports.CLIENT_READY = exports.CLIENT_READY_FROM_CACHE = exports.ENGINE_DEFAULT = exports.ENGINE_MATCHER_RESULT = exports.SETTINGS_SPLITS_FILTER = exports.SYNC_TASK_STOP = exports.SYNC_TASK_EXECUTE = exports.SYNC_TASK_START = exports.STREAMING_NEW_MESSAGE = exports.SYNC_UPDATE = exports.SYNC_FETCH = exports.SYNC_OFFLINE_DATA = exports.RETRIEVE_MANAGER = exports.RETRIEVE_CLIENT_EXISTING = exports.RETRIEVE_CLIENT_DEFAULT = exports.CLEANUP_DEREGISTERING = exports.CLEANUP_REGISTERING = exports.ENGINE_SANITIZE = exports.ENGINE_VALUE = exports.ENGINE_MATCHER_DEPENDENCY_PRE = exports.ENGINE_MATCHER_DEPENDENCY = exports.ENGINE_BUCKET = exports.ENGINE_COMBINER_IFELSEIF_NO_TREATMENT = exports.ENGINE_COMBINER_IFELSEIF = exports.ENGINE_COMBINER_AND = void 0;
+exports.ERROR_NOT_BOOLEAN = exports.ERROR_STORAGE_INVALID = exports.ERROR_HTTP = exports.ERROR_INVALID_CONFIG_PARAM = exports.ERROR_EMPTY_ARRAY = exports.ERROR_EMPTY = exports.ERROR_INVALID = exports.ERROR_INVALID_KEY_OBJECT = exports.ERROR_TOO_LONG = exports.ERROR_NULL = exports.ERROR_CLIENT_DESTROYED = exports.ERROR_NOT_FINITE = exports.ERROR_SIZE_EXCEEDED = exports.ERROR_NOT_PLAIN_OBJECT = exports.ERROR_EVENT_TYPE_FORMAT = exports.ERROR_EVENTS_TRACKER = exports.ERROR_IMPRESSIONS_LISTENER = exports.ERROR_IMPRESSIONS_TRACKER = exports.ERROR_STREAMING_AUTH = exports.ERROR_STREAMING_SSE = exports.ERROR_SYNC_OFFLINE_LOADING = exports.ERROR_CLIENT_CANNOT_GET_READY = exports.ERROR_CLIENT_LISTENER = exports.ERROR_LOGLEVEL_INVALID = exports.ERROR_ENGINE_COMBINER_IFELSEIF = exports.WARN_FLAGSET_WITHOUT_FLAGS = exports.WARN_FLAGSET_NOT_CONFIGURED = exports.WARN_LOWERCASE_FLAGSET = exports.WARN_INVALID_FLAGSET = exports.STREAMING_PARSING_SPLIT_UPDATE = exports.STREAMING_PARSING_MEMBERSHIPS_UPDATE = exports.WARN_SDK_KEY = exports.WARN_SPLITS_FILTER_EMPTY = exports.WARN_SPLITS_FILTER_INVALID = exports.WARN_SPLITS_FILTER_IGNORED = exports.WARN_INTEGRATION_INVALID = exports.WARN_NOT_EXISTENT_TT = exports.WARN_LOWERCASE_TRAFFIC_TYPE = exports.WARN_NOT_EXISTENT_DEFINITION = exports.WARN_TRIMMING = exports.WARN_CONVERTING = exports.WARN_TRIMMING_PROPERTIES = exports.WARN_SETTING_NULL = exports.SUBMITTERS_PUSH_RETRY = exports.SUBMITTERS_PUSH_FAILS = exports.STREAMING_FALLBACK = exports.STREAMING_PARSING_MESSAGE_FAILS = exports.STREAMING_PARSING_ERROR_FAILS = exports.SYNC_FETCH_FAILS = exports.SYNC_FETCH_RETRY = void 0;
+exports.LOG_PREFIX_CLEANUP = exports.LOG_PREFIX_UNIQUE_KEYS_TRACKER = exports.LOG_PREFIX_EVENTS_TRACKER = exports.LOG_PREFIX_IMPRESSIONS_TRACKER = exports.LOG_PREFIX_SYNC_SUBMITTERS = exports.LOG_PREFIX_SYNC_POLLING = exports.LOG_PREFIX_SYNC_STREAMING = exports.LOG_PREFIX_SYNC_OFFLINE = exports.LOG_PREFIX_SYNC_MANAGER = exports.LOG_PREFIX_SYNC_AUTH = exports.LOG_PREFIX_SYNC = exports.LOG_PREFIX_ENGINE_VALUE = exports.LOG_PREFIX_ENGINE_MATCHER = exports.LOG_PREFIX_ENGINE_COMBINER = exports.LOG_PREFIX_ENGINE = exports.LOG_PREFIX_CLIENT_INSTANTIATION = exports.LOG_PREFIX_INSTANTIATION = exports.LOG_PREFIX_SETTINGS = exports.ENGINE_MATCHER_ERROR = exports.ERROR_SETS_FILTER_EXCLUSIVE = exports.ERROR_TOO_MANY_SETS = exports.ERROR_MIN_CONFIG_PARAM = void 0;
 /**
  * Message codes used to trim string log messages from commons and client-side API modules,
  * in order to reduce the minimal SDK size for Browser and eventually other client-side environments.
@@ -59,7 +59,6 @@ exports.USER_CONSENT_INITIAL = 124;
 exports.SUBMITTERS_PUSH_PAGE_HIDDEN = 125;
 exports.ENGINE_VALUE_INVALID = 200;
 exports.ENGINE_VALUE_NO_ATTRIBUTES = 201;
-exports.CLIENT_NO_LISTENER = 202;
 exports.CLIENT_NOT_READY_FROM_CACHE = 203;
 exports.SYNC_FETCH_RETRY = 204;
 exports.SYNC_FETCH_FAILS = 205;
@@ -124,6 +123,7 @@ exports.LOG_PREFIX_ENGINE_COMBINER = exports.LOG_PREFIX_ENGINE + ':combiner: ';
 exports.LOG_PREFIX_ENGINE_MATCHER = exports.LOG_PREFIX_ENGINE + ':matcher: ';
 exports.LOG_PREFIX_ENGINE_VALUE = exports.LOG_PREFIX_ENGINE + ':value: ';
 exports.LOG_PREFIX_SYNC = 'sync: ';
+exports.LOG_PREFIX_SYNC_AUTH = 'sync:auth: ';
 exports.LOG_PREFIX_SYNC_MANAGER = 'sync:sync-manager: ';
 exports.LOG_PREFIX_SYNC_OFFLINE = 'sync:offline: ';
 exports.LOG_PREFIX_SYNC_STREAMING = 'sync:streaming: ';

package/cjs/logger/messages/warn.js

@@ -18,7 +18,6 @@ exports.codesWarn = error_1.codesError.concat([
     [c.SUBMITTERS_PUSH_RETRY, c.LOG_PREFIX_SYNC_SUBMITTERS + 'Failed to push %s, keeping data to retry on next iteration. Reason: %s'],
     // client status
     [c.CLIENT_NOT_READY_FROM_CACHE, '%s: the SDK is not ready to evaluate. Results may be incorrect. Make sure to wait for SDK readiness before using this method.'],
-    [c.CLIENT_NO_LISTENER, 'No listeners for SDK_READY event detected. Incorrect control treatments could have been logged if you called getTreatment/s while the SDK was not yet synchronized with the backend.'],
     // input validation
     [c.WARN_SETTING_NULL, '%s: Property "%s" is of invalid type. Setting value to null.'],
     [c.WARN_TRIMMING_PROPERTIES, '%s: more than 300 properties were provided. Some of them will be trimmed when processed.'],

package/cjs/readiness/constants.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CONFIGS_UPDATE = exports.SEGMENTS_UPDATE = exports.FLAGS_UPDATE = exports.SDK_UPDATE = exports.SDK_READY_FROM_CACHE = exports.SDK_READY = exports.SDK_READY_TIMED_OUT = exports.SDK_SEGMENTS_ARRIVED = exports.SDK_SPLITS_CACHE_LOADED = exports.SDK_SPLITS_ARRIVED = void 0;
-// Splits events:
-exports.SDK_SPLITS_ARRIVED = 'state::splits-arrived';
-exports.SDK_SPLITS_CACHE_LOADED = 'state::splits-cache-loaded';
+exports.CONFIGS_UPDATE = exports.SEGMENTS_UPDATE = exports.FLAGS_UPDATE = exports.SDK_UPDATE = exports.SDK_READY_FROM_CACHE = exports.SDK_READY = exports.SDK_READY_TIMED_OUT = exports.SDK_SEGMENTS_ARRIVED = exports.SDK_DEFINITIONS_CACHE_LOADED = exports.SDK_DEFINITIONS_ARRIVED = void 0;
+// Definitions events:
+exports.SDK_DEFINITIONS_ARRIVED = 'state::splits-arrived';
+exports.SDK_DEFINITIONS_CACHE_LOADED = 'state::splits-cache-loaded';
 // Segments events:
 exports.SDK_SEGMENTS_ARRIVED = 'state::segments-arrived';
 // Readiness events:

package/cjs/readiness/readinessManager.js

@@ -3,20 +3,20 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.readinessManagerFactory = void 0;
 var objectAssign_1 = require("../utils/lang/objectAssign");
 var constants_1 = require("./constants");
-function splitsEventEmitterFactory(EventEmitter) {
-    var splitsEventEmitter = (0, objectAssign_1.objectAssign)(new EventEmitter(), {
-        splitsArrived: false,
-        splitsCacheLoaded: false,
+function definitionsEventEmitterFactory(EventEmitter) {
+    var definitionsEventEmitter = (0, objectAssign_1.objectAssign)(new EventEmitter(), {
+        definitionsArrived: false,
+        definitionsCacheLoaded: false,
         hasInit: false,
         initCallbacks: []
     });
     // `isSplitKill` condition avoids an edge-case of wrongly emitting SDK_READY if:
     // - `/memberships` fetch and SPLIT_KILL occurs before `/splitChanges` fetch, and
     // - storage has cached splits (for which case `splitsStorage.killLocally` can return true)
-    splitsEventEmitter.on(constants_1.SDK_SPLITS_ARRIVED, function (metadata, isSplitKill) { if (!isSplitKill)
-        splitsEventEmitter.splitsArrived = true; });
-    splitsEventEmitter.once(constants_1.SDK_SPLITS_CACHE_LOADED, function () { splitsEventEmitter.splitsCacheLoaded = true; });
-    return splitsEventEmitter;
+    definitionsEventEmitter.on(constants_1.SDK_DEFINITIONS_ARRIVED, function (metadata, isSplitKill) { if (!isSplitKill)
+        definitionsEventEmitter.definitionsArrived = true; });
+    definitionsEventEmitter.once(constants_1.SDK_DEFINITIONS_CACHE_LOADED, function () { definitionsEventEmitter.definitionsCacheLoaded = true; });
+    return definitionsEventEmitter;
 }
 function segmentsEventEmitterFactory(EventEmitter) {
     var segmentsEventEmitter = (0, objectAssign_1.objectAssign)(new EventEmitter(), {
@@ -28,8 +28,8 @@ function segmentsEventEmitterFactory(EventEmitter) {
 /**
  * Factory of readiness manager, which handles the ready / update event propagation.
  */
-function readinessManagerFactory(EventEmitter, settings, splits, isShared) {
-    if (splits === void 0) { splits = splitsEventEmitterFactory(EventEmitter); }
+function readinessManagerFactory(EventEmitter, settings, definitions, isShared) {
+    if (definitions === void 0) { definitions = definitionsEventEmitterFactory(EventEmitter); }
     var readyTimeout = settings.startup.readyTimeout;
     var segments = segmentsEventEmitterFactory(EventEmitter);
     var gate = new EventEmitter();
@@ -44,10 +44,10 @@ function readinessManagerFactory(EventEmitter, settings, splits, isShared) {
     };
     // emit SDK_READY_FROM_CACHE
     var isReadyFromCache = false;
-    if (splits.splitsCacheLoaded)
+    if (definitions.definitionsCacheLoaded)
         isReadyFromCache = true; // ready from cache, but doesn't emit SDK_READY_FROM_CACHE
     else
-        splits.once(constants_1.SDK_SPLITS_CACHE_LOADED, checkIsReadyFromCache);
+        definitions.once(constants_1.SDK_DEFINITIONS_CACHE_LOADED, checkIsReadyFromCache);
     // emit SDK_READY_TIMED_OUT
     var hasTimedout = false;
     function timeout() {
@@ -59,7 +59,7 @@ function readinessManagerFactory(EventEmitter, settings, splits, isShared) {
     }
     // emit SDK_READY and SDK_UPDATE
     var isReady = false;
-    splits.on(constants_1.SDK_SPLITS_ARRIVED, checkIsReadyOrUpdate);
+    definitions.on(constants_1.SDK_DEFINITIONS_ARRIVED, checkIsReadyOrUpdate);
     segments.on(constants_1.SDK_SEGMENTS_ARRIVED, checkIsReadyOrUpdate);
     var isDestroyed = false;
     var readyTimeoutId;
@@ -68,8 +68,8 @@ function readinessManagerFactory(EventEmitter, settings, splits, isShared) {
         if (readyTimeout > 0 && !isReady)
             readyTimeoutId = setTimeout(timeout, readyTimeout);
     }
-    splits.initCallbacks.push(__init);
-    if (splits.hasInit)
+    definitions.initCallbacks.push(__init);
+    if (definitions.hasInit)
         __init();
     function checkIsReadyFromCache(cacheMetadata) {
         metadataReady = cacheMetadata;
@@ -100,7 +100,7 @@ function readinessManagerFactory(EventEmitter, settings, splits, isShared) {
             }
         }
         else {
-            if (splits.splitsArrived && segments.segmentsArrived) {
+            if (definitions.definitionsArrived && segments.segmentsArrived) {
                 clearTimeout(readyTimeoutId);
                 isReady = true;
                 try {
@@ -123,11 +123,11 @@ function readinessManagerFactory(EventEmitter, settings, splits, isShared) {
         }
     }
     return {
-        splits: splits,
+        definitions: definitions,
         segments: segments,
         gate: gate,
         shared: function () {
-            return readinessManagerFactory(EventEmitter, settings, splits, true);
+            return readinessManagerFactory(EventEmitter, settings, definitions, true);
         },
         // @TODO review/remove next methods when non-recoverable errors are reworked
         // Called on consumer mode, when storage fails to connect
@@ -136,17 +136,17 @@ function readinessManagerFactory(EventEmitter, settings, splits, isShared) {
         // tracking and evaluations, while keeping event listeners to emit SDK_READY_TIMED_OUT event
         setDestroyed: function () { isDestroyed = true; },
         init: function () {
-            if (splits.hasInit)
+            if (definitions.hasInit)
                 return;
-            splits.hasInit = true;
-            splits.initCallbacks.forEach(function (cb) { return cb(); });
+            definitions.hasInit = true;
+            definitions.initCallbacks.forEach(function (cb) { return cb(); });
         },
         destroy: function () {
             isDestroyed = true;
             syncLastUpdate();
             clearTimeout(readyTimeoutId);
             if (!isShared)
-                splits.hasInit = false;
+                definitions.hasInit = false;
         },
         isReady: function () { return isReady; },
         isReadyFromCache: function () { return isReadyFromCache; },

package/cjs/readiness/sdkReadinessManager.js

@@ -7,7 +7,6 @@ var readinessManager_1 = require("./readinessManager");
 var constants_1 = require("./constants");
 var constants_2 = require("../logger/constants");
 var NEW_LISTENER_EVENT = 'newListener';
-var REMOVE_LISTENER_EVENT = 'removeListener';
 var TIMEOUT_ERROR = new Error(constants_1.SDK_READY_TIMED_OUT);
 /**
  * SdkReadinessManager factory, which provides the public status API of SDK clients and manager: ready promise, readiness event emitter and constants (SDK_READY, etc).
@@ -19,21 +18,11 @@ var TIMEOUT_ERROR = new Error(constants_1.SDK_READY_TIMED_OUT);
 function sdkReadinessManagerFactory(EventEmitter, settings, readinessManager) {
     if (readinessManager === void 0) { readinessManager = (0, readinessManager_1.readinessManagerFactory)(EventEmitter, settings); }
     var log = settings.log;
-    /** Ready callback warning */
-    var internalReadyCbCount = 0;
-    var readyCbCount = 0;
-    readinessManager.gate.on(REMOVE_LISTENER_EVENT, function (event) {
-        if (event === constants_1.SDK_READY)
-            readyCbCount--;
-    });
     readinessManager.gate.on(NEW_LISTENER_EVENT, function (event) {
         if (event === constants_1.SDK_READY || event === constants_1.SDK_READY_TIMED_OUT) {
             if (readinessManager.isReady()) {
                 log.error(constants_2.ERROR_CLIENT_LISTENER, [event === constants_1.SDK_READY ? 'SDK_READY' : 'SDK_READY_TIMED_OUT']);
             }
-            else if (event === constants_1.SDK_READY) {
-                readyCbCount++;
-            }
         }
         else if (event === constants_1.SDK_READY_FROM_CACHE && readinessManager.isReadyFromCache()) {
             log.error(constants_2.ERROR_CLIENT_LISTENER, ['SDK_READY_FROM_CACHE']);
@@ -52,8 +41,6 @@ function sdkReadinessManagerFactory(EventEmitter, settings, readinessManager) {
         var promise = (0, wrapper_1.promiseWrapper)(new Promise(function (resolve, reject) {
             readinessManager.gate.once(constants_1.SDK_READY, function () {
                 log.info(constants_2.CLIENT_READY);
-                if (readyCbCount === internalReadyCbCount && !promise.hasOnFulfilled())
-                    log.warn(constants_2.CLIENT_NO_LISTENER);
                 resolve();
             });
             readinessManager.gate.once(constants_1.SDK_READY_TIMED_OUT, function (message) {
@@ -78,9 +65,6 @@ function sdkReadinessManagerFactory(EventEmitter, settings, readinessManager) {
         shared: function () {
             return sdkReadinessManagerFactory(EventEmitter, settings, readinessManager.shared());
         },
-        incInternalReadyCbCount: function () {
-            internalReadyCbCount++;
-        },
         sdkStatus: (0, objectAssign_1.objectAssign)(
         // Expose Event Emitter functionality
         Object.create(readinessManager.gate), {

package/cjs/sdkClient/sdkLifecycle.js

@@ -7,7 +7,7 @@ var COOLDOWN_TIME_IN_MILLIS = 1000;
  * Creates an Sdk client, i.e., a base client with status, init, flush and destroy interface
  */
 function sdkLifecycleFactory(params, isSharedClient) {
-    var sdkReadinessManager = params.sdkReadinessManager, syncManager = params.syncManager, storage = params.storage, settings = params.settings, telemetryTracker = params.telemetryTracker, impressionsTracker = params.impressionsTracker, platform = params.platform;
+    var sdkReadinessManager = params.sdkReadinessManager, syncManager = params.syncManager, storage = params.storage, settings = params.settings, telemetryTracker = params.telemetryTracker, impressionsTracker = params.impressionsTracker, platform = params.platform, splitApi = params.splitApi;
     var hasInit = false;
     var lastActionTime = 0;
     var signalListener = platform.SignalListener && new platform.SignalListener(params);
@@ -60,6 +60,7 @@ function sdkLifecycleFactory(params, isSharedClient) {
             }
             // Stop background jobs
             syncManager && syncManager.stop();
+            splitApi && splitApi.stop();
             return __flush().then(function () {
                 // Cleanup storage
                 return storage.destroy();

package/cjs/sdkClient/trackMethod.js

@@ -13,7 +13,7 @@ var mode_1 = require("../utils/settingsValidation/mode");
  */
 function trackMethodFactory(params, warnTTExistence) {
     if (warnTTExistence === void 0) { warnTTExistence = true; }
-    var settings = params.settings, splits = params.storage.splits, telemetryTracker = params.telemetryTracker, eventTracker = params.eventTracker, readinessManager = params.sdkReadinessManager.readinessManager;
+    var settings = params.settings, definitions = params.storage.definitions, telemetryTracker = params.telemetryTracker, eventTracker = params.eventTracker, readinessManager = params.sdkReadinessManager.readinessManager;
     var log = settings.log, mode = settings.mode;
     var isAsync = (0, mode_1.isConsumerMode)(mode);
     return function track(maybeKey, maybeTT, maybeEvent, maybeEventValue, maybeProperties) {
@@ -39,7 +39,7 @@ function trackMethodFactory(params, warnTTExistence) {
         };
         // This may be async but we only warn, we don't actually care if it is valid or not in terms of queueing the event.
         if (warnTTExistence)
-            (0, trafficTypeExistence_1.validateTrafficTypeExistence)(log, readinessManager, splits, mode, trafficTypeName, constants_1.TRACK_FN_LABEL);
+            (0, trafficTypeExistence_1.validateTrafficTypeExistence)(log, readinessManager, definitions, mode, trafficTypeName, constants_1.TRACK_FN_LABEL);
         var result = eventTracker.track(eventData, size);
         if ((0, thenable_1.thenable)(result)) {
             return result.then(function (result) {

package/cjs/sdkFactory/index.js

@@ -30,18 +30,18 @@ function sdkFactory(params) {
                 readiness.timeout();
                 return;
             }
-            readiness.splits.emit(constants_2.SDK_SPLITS_ARRIVED);
+            readiness.definitions.emit(constants_2.SDK_DEFINITIONS_ARRIVED);
             readiness.segments.emit(constants_2.SDK_SEGMENTS_ARRIVED);
         },
         onReadyFromCacheCb: function () {
-            readiness.splits.emit(constants_2.SDK_SPLITS_CACHE_LOADED);
+            readiness.definitions.emit(constants_2.SDK_DEFINITIONS_CACHE_LOADED);
         }
     });
     var fallbackCalculator = (0, fallbackTreatmentsCalculator_1.FallbackTreatmentsCalculator)(settings.fallbackTreatments);
     if (initialRolloutPlan) {
         (0, setRolloutPlan_1.setRolloutPlan)(log, initialRolloutPlan, storage, key && (0, key_1.getMatching)(key));
-        if (storage.splits.getChangeNumber() > -1)
-            readiness.splits.emit(constants_2.SDK_SPLITS_CACHE_LOADED, { initialCacheLoad: false /* Not an initial load, cache exists */ });
+        if (storage.definitions.getChangeNumber() > -1)
+            readiness.definitions.emit(constants_2.SDK_DEFINITIONS_CACHE_LOADED, { initialCacheLoad: false /* Not an initial load, cache exists */ });
     }
     var clients = {};
     var telemetryTracker = (0, telemetryTracker_1.telemetryTrackerFactory)(storage.telemetry, platform.now);
@@ -54,7 +54,7 @@ function sdkFactory(params) {
     ctx.syncManager = syncManagerFactory && syncManagerFactory(ctx);
     // SDK client and manager
     var clientMethod = sdkClientMethodFactory(ctx);
-    var managerInstance = sdkManagerFactory(settings, storage.splits, sdkReadinessManager);
+    var managerInstance = sdkManagerFactory(settings, storage.definitions, sdkReadinessManager);
     function init() {
         Object.keys(clients).map(function (key) { return clients[key].init(); });
     }

package/cjs/sdkManager/index.js

@@ -57,7 +57,7 @@ function sdkManagerFactory(settings, splits, _a) {
             if (!(0, inputValidation_1.validateIfOperational)(log, readinessManager, constants_1.SPLIT_FN_LABEL) || !splitName) {
                 return isAsync ? Promise.resolve(null) : null;
             }
-            var split = splits.getSplit(splitName);
+            var split = splits.get(splitName);
             if ((0, thenable_1.thenable)(split)) {
                 return split.catch(function () { return null; }).then(function (result) {
                     (0, inputValidation_1.validateDefinitionExistence)(log, readinessManager, splitName, result, constants_1.SPLIT_FN_LABEL);
@@ -86,7 +86,7 @@ function sdkManagerFactory(settings, splits, _a) {
             if (!(0, inputValidation_1.validateIfOperational)(log, readinessManager, constants_1.NAMES_FN_LABEL)) {
                 return isAsync ? Promise.resolve([]) : [];
             }
-            var splitNames = splits.getSplitNames();
+            var splitNames = splits.getNames();
             return (0, thenable_1.thenable)(splitNames) ?
                 splitNames.catch(function () { return []; }) : // handle possible rejections when using pluggable storage
                 splitNames;

package/cjs/services/authProvider.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authProviderFactory = void 0;
+var AuthClient_1 = require("../sync/streaming/AuthClient");
+var Backoff_1 = require("../utils/Backoff");
+var constants_1 = require("../logger/constants");
+var constants_2 = require("../utils/constants");
+var SKEW_SECONDS = 30;
+function isExpired(credential) {
+    return Date.now() / 1000 + SKEW_SECONDS >= credential.decodedToken.exp;
+}
+/**
+ * Factory of AuthProvider, which provides JWT credentials for authenticated HTTP requests.
+ * Credentials are fetched lazily on demand, cached in memory, and retried with backoff on failure.
+ */
+function authProviderFactory(settings, splitHttpClient, telemetryTracker) {
+    var urls = settings.urls, log = settings.log;
+    function fetchAuth() {
+        var url = "".concat(urls.auth, "/v3/auth?capabilities=config");
+        return splitHttpClient(url, undefined, telemetryTracker.trackHttp(constants_2.TOKEN));
+    }
+    var authenticate = (0, AuthClient_1.authenticateFactory)(fetchAuth);
+    var backoff = new Backoff_1.Backoff(fetchCredential);
+    var cachedCredential;
+    var inFlightPromise;
+    var stopped = false;
+    function fetchCredential() {
+        return authenticate().then(function (credential) {
+            log.info(constants_1.LOG_PREFIX_SYNC_AUTH + 'credential fetched successfully');
+            cachedCredential = credential;
+            inFlightPromise = undefined;
+            backoff.reset();
+            return credential;
+        }).catch(function (error) {
+            // Avoid rejected promises and unnecessary retries after stop()
+            if (stopped)
+                return cachedCredential;
+            if (error.statusCode && error.statusCode >= 400 && error.statusCode < 500) {
+                log.error(constants_1.LOG_PREFIX_SYNC_AUTH + 'non-retryable error fetching credential (status ' + error.statusCode + '): ' + error.message);
+                inFlightPromise = undefined;
+                throw error;
+            }
+            log.warn(constants_1.LOG_PREFIX_SYNC_AUTH + 'credential fetch failed (attempt ' + (backoff.attempts + 1) + '). Error: ' + error.message);
+            return backoff.scheduleCallAsync();
+        });
+    }
+    return {
+        credential: function () {
+            if (cachedCredential && !isExpired(cachedCredential)) {
+                return Promise.resolve(cachedCredential);
+            }
+            if (cachedCredential)
+                log.debug(constants_1.LOG_PREFIX_SYNC_AUTH + 'cached credential expired');
+            return inFlightPromise || (inFlightPromise = fetchCredential());
+        },
+        invalidate: function () {
+            cachedCredential = undefined;
+        },
+        stop: function () {
+            stopped = true;
+            cachedCredential = undefined;
+            inFlightPromise = undefined;
+            backoff.reset();
+        }
+    };
+}
+exports.authProviderFactory = authProviderFactory;

package/cjs/services/secureSplitHttpClient.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.secureSplitHttpClientFactory = void 0;
+var tslib_1 = require("tslib");
+var splitHttpClient_1 = require("./splitHttpClient");
+var authProvider_1 = require("./authProvider");
+/**
+ * Factory of Secure HTTP client, which authenticates requests using a JWT token.
+ * On 401 responses, invalidates the cached credential and retries once with a fresh token.
+ *
+ * @param settings - SDK settings
+ * @param platform - object containing environment-specific dependencies
+ * @param fetchAuth - function to fetch auth credentials from the /v2/auth endpoint
+ */
+function secureSplitHttpClientFactory(settings, platform, telemetryTracker) {
+    var splitHttpClient = (0, splitHttpClient_1.splitHttpClientFactory)(settings, platform);
+    var authProvider = (0, authProvider_1.authProviderFactory)(settings, splitHttpClient, telemetryTracker);
+    function makeRequest(url, options, latencyTracker, logErrorsAsInfo, token) {
+        return splitHttpClient(url, tslib_1.__assign(tslib_1.__assign({}, options), { headers: tslib_1.__assign(tslib_1.__assign({}, options === null || options === void 0 ? void 0 : options.headers), { Authorization: "Bearer ".concat(token) }) }), latencyTracker, logErrorsAsInfo);
+    }
+    var httpClient = function (url, options, latencyTracker, logErrorsAsInfo) {
+        return authProvider.credential().then(function (credential) {
+            return makeRequest(url, options, latencyTracker, logErrorsAsInfo, credential.token)
+                .catch(function (error) {
+                if (error.statusCode === 401) {
+                    // retry once for 401, in case the token has just expired
+                    authProvider.invalidate();
+                    return authProvider.credential().then(function (newCredential) {
+                        return makeRequest(url, options, latencyTracker, logErrorsAsInfo, newCredential.token);
+                    });
+                }
+                throw error;
+            });
+        });
+    };
+    httpClient.stop = function () { return authProvider.stop(); };
+    return httpClient;
+}
+exports.secureSplitHttpClientFactory = secureSplitHttpClientFactory;

package/cjs/services/splitApi.js

@@ -16,11 +16,12 @@ function userKeyToQueryParam(userKey) {
  * @param platform - object containing environment-specific dependencies
  * @param telemetryTracker - telemetry tracker
  */
-function splitApiFactory(settings, platform, telemetryTracker) {
+function splitApiFactory(settings, platform, telemetryTracker, secureSplitHttpClientFactory) {
     var urls = settings.urls;
     var filterQueryString = settings.sync.__splitFiltersValidation && settings.sync.__splitFiltersValidation.queryString;
     var SplitSDKImpressionsMode = settings.sync.impressionsMode;
     var splitHttpClient = (0, splitHttpClient_1.splitHttpClientFactory)(settings, platform);
+    var secureSplitHttpClient = secureSplitHttpClientFactory ? secureSplitHttpClientFactory(settings, platform, telemetryTracker) : undefined;
     return {
         // @TODO throw errors if health check requests fail, to log them in the Synchronizer
         getSdkAPIHealthCheck: function () {
@@ -52,7 +53,7 @@ function splitApiFactory(settings, platform, telemetryTracker) {
         // @TODO support filterQueryString and handle ERROR_TOO_MANY_SETS error
         fetchConfigs: function (since, noCache, till) {
             var url = "".concat(urls.sdk, "/v1/configs?since=").concat(since).concat(filterQueryString || '').concat(till ? '&till=' + till : '');
-            return splitHttpClient(url, noCache ? noCacheHeaderOptions : undefined);
+            return (secureSplitHttpClient || splitHttpClient)(url, noCache ? noCacheHeaderOptions : undefined);
         },
         fetchSegmentChanges: function (since, segmentName, noCache, till) {
             var url = "".concat(urls.sdk, "/segmentChanges/").concat(segmentName, "?since=").concat(since).concat(till ? '&till=' + till : '');
@@ -130,6 +131,10 @@ function splitApiFactory(settings, platform, telemetryTracker) {
         postMetricsUsage: function (body, headers) {
             var url = "".concat(urls.telemetry, "/v1/metrics/usage");
             return splitHttpClient(url, { method: 'POST', body: body, headers: headers }, telemetryTracker.trackHttp(constants_1.TELEMETRY), true);
+        },
+        stop: function () {
+            if (secureSplitHttpClient)
+                secureSplitHttpClient.stop();
         }
     };
 }

package/cjs/storages/AbstractDefinitionsCacheAsync.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AbstractDefinitionsCacheAsync = void 0;
+var objectAssign_1 = require("../utils/lang/objectAssign");
+/**
+ * This class provides a skeletal implementation of the IDefinitionsCacheAsync interface
+ * to minimize the effort required to implement this interface.
+ */
+var AbstractDefinitionsCacheAsync = /** @class */ (function () {
+    function AbstractDefinitionsCacheAsync() {
+    }
+    AbstractDefinitionsCacheAsync.prototype.update = function (toAdd, toRemove, changeNumber) {
+        var _this = this;
+        return Promise.all([
+            this.setChangeNumber(changeNumber),
+            Promise.all(toAdd.map(function (addedFF) { return _this.add(addedFF); })),
+            Promise.all(toRemove.map(function (removedFF) { return _this.remove(removedFF); }))
+        ]).then(function (_a) {
+            var added = _a[1], removed = _a[2];
+            return added.some(function (result) { return result; }) || removed.some(function (result) { return result; });
+        });
+    };
+    // @TODO revisit segment-related methods ('usesSegments', 'getRegisteredSegments', 'registerSegments')
+    // noop, just keeping the interface. This is used by standalone client-side API only, and so only implemented by InMemory and InLocalStorage.
+    AbstractDefinitionsCacheAsync.prototype.usesSegments = function () {
+        return Promise.resolve(true);
+    };
+    /**
+     * Kill `name` definition and set `defaultTreatment` and `changeNumber`.
+     * Used for SPLIT_KILL push notifications.
+     *
+     * @returns a promise that is resolved once the definition kill operation is performed. The fulfillment value is a boolean: `true` if the operation succeeded updating the definition or `false` if no definition is updated,
+     * for instance, if the `changeNumber` is old, or if the definition is not found (e.g., `/splitchanges` hasn't been fetched yet), or if the storage fails to apply the update.
+     * The promise will never be rejected.
+     */
+    AbstractDefinitionsCacheAsync.prototype.killLocally = function (name, defaultTreatment, changeNumber) {
+        var _this = this;
+        return this.get(name).then(function (definition) {
+            if (definition && (!definition.changeNumber || definition.changeNumber < changeNumber)) {
+                var newDefinition = (0, objectAssign_1.objectAssign)({}, definition);
+                newDefinition.killed = true;
+                newDefinition.defaultTreatment = defaultTreatment;
+                newDefinition.changeNumber = changeNumber;
+                return _this.add(newDefinition);
+            }
+            return false;
+        }).catch(function () { return false; });
+    };
+    return AbstractDefinitionsCacheAsync;
+}());
+exports.AbstractDefinitionsCacheAsync = AbstractDefinitionsCacheAsync;