@syntrologie/runtime-sdk 0.2.0

package/dist/experiments/adapters/growthbook.d.ts

@@ -0,0 +1,45 @@
+/**
+ * GrowthBook adapter for the ExperimentClient interface.
+ *
+ * This file is INTERNAL - consumers should only import from experiments/types.ts
+ * and use the ExperimentClient interface.
+ */
+import { GrowthBook } from "@growthbook/growthbook-react";
+import type { Context as GrowthBookInitOptions } from "@growthbook/growthbook";
+import type { ExperimentClient } from "../types";
+import type { RectangleConfig } from "../../types";
+/**
+ * Default API host for GrowthBook experiments.
+ */
+export declare const DEFAULT_EXPERIMENT_API_HOST = "https://experiment.syntrologie.com";
+export interface GrowthBookAdapterOptions extends GrowthBookInitOptions {
+    /**
+     * Existing GrowthBook instance to wrap.
+     * If not provided, a new instance will be created.
+     */
+    client?: GrowthBook;
+    /**
+     * Auto-initialize with streaming enabled.
+     */
+    autoInit?: boolean;
+}
+/**
+ * Internal adapter that implements ExperimentClient using GrowthBook.
+ */
+export declare class GrowthBookAdapter implements ExperimentClient {
+    private readonly gb;
+    constructor(options?: GrowthBookAdapterOptions);
+    /**
+     * Access to the underlying GrowthBook instance.
+     * Only use this internally - don't expose to consumers.
+     */
+    get _internal(): GrowthBook;
+    refreshFeatures(): Promise<void>;
+    setAttributes(attrs: Record<string, unknown>): void;
+    getFeatureValue<T>(key: string, fallback: T): T;
+    shouldRenderRectangle(rectangle: RectangleConfig): boolean;
+}
+/**
+ * Create an ExperimentClient backed by GrowthBook.
+ */
+export declare function createGrowthBookClient(options?: GrowthBookAdapterOptions): ExperimentClient;

package/dist/experiments/adapters/growthbook.js

@@ -0,0 +1,79 @@
+/**
+ * GrowthBook adapter for the ExperimentClient interface.
+ *
+ * This file is INTERNAL - consumers should only import from experiments/types.ts
+ * and use the ExperimentClient interface.
+ */
+import { GrowthBook } from "@growthbook/growthbook-react";
+/**
+ * Default API host for GrowthBook experiments.
+ */
+export const DEFAULT_EXPERIMENT_API_HOST = "https://experiment.syntrologie.com";
+/**
+ * Internal adapter that implements ExperimentClient using GrowthBook.
+ */
+export class GrowthBookAdapter {
+    constructor(options = {}) {
+        var _a;
+        if (options.client) {
+            this.gb = options.client;
+        }
+        else {
+            this.gb = new GrowthBook({
+                ...options,
+                apiHost: (_a = options.apiHost) !== null && _a !== void 0 ? _a : DEFAULT_EXPERIMENT_API_HOST,
+            });
+            if (options.autoInit) {
+                this.gb.init({ streaming: true });
+            }
+        }
+    }
+    /**
+     * Access to the underlying GrowthBook instance.
+     * Only use this internally - don't expose to consumers.
+     */
+    get _internal() {
+        return this.gb;
+    }
+    async refreshFeatures() {
+        await this.gb.loadFeatures();
+    }
+    setAttributes(attrs) {
+        this.gb.setAttributes(attrs);
+    }
+    getFeatureValue(key, fallback) {
+        return this.gb.getFeatureValue(key, fallback);
+    }
+    shouldRenderRectangle(rectangle) {
+        const experiment = rectangle.experiment;
+        if (!experiment)
+            return true;
+        if (!experiment.featureKey)
+            return true;
+        const value = this.gb.getFeatureValue(experiment.featureKey, null);
+        if (value === null || value === undefined)
+            return false;
+        if (typeof experiment.variationId === "number") {
+            return Number(value) === experiment.variationId;
+        }
+        if (typeof experiment.variationValue !== "undefined") {
+            return value === experiment.variationValue;
+        }
+        if (experiment.predicate) {
+            try {
+                return experiment.predicate(value);
+            }
+            catch {
+                return false;
+            }
+        }
+        return Boolean(value);
+    }
+}
+/**
+ * Create an ExperimentClient backed by GrowthBook.
+ */
+export function createGrowthBookClient(options = {}) {
+    return new GrowthBookAdapter(options);
+}
+//# sourceMappingURL=growthbook.js.map

package/dist/experiments/adapters/growthbook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"growthbook.js","sourceRoot":"","sources":["../../../src/experiments/adapters/growthbook.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAK1D;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,oCAAoC,CAAC;AAehF;;GAEG;AACH,MAAM,OAAO,iBAAiB;IAG5B,YAAY,UAAoC,EAAE;;QAChD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,EAAE,GAAG,IAAI,UAAU,CAAC;gBACvB,GAAG,OAAO;gBACV,OAAO,EAAE,MAAA,OAAO,CAAC,OAAO,mCAAI,2BAA2B;aACxD,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC;IAC/B,CAAC;IAED,aAAa,CAAC,KAA8B;QAC1C,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,eAAe,CAAI,GAAW,EAAE,QAAW;QACzC,OAAO,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAM,CAAC;IACrD,CAAC;IAED,qBAAqB,CAAC,SAA0B;QAC9C,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAExC,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAExD,IAAI,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,WAAW,CAAC;QAClD,CAAC;QACD,IAAI,OAAO,UAAU,CAAC,cAAc,KAAK,WAAW,EAAE,CAAC;YACrD,OAAO,KAAK,KAAK,UAAU,CAAC,cAAc,CAAC;QAC7C,CAAC;QACD,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,OAAO,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAoC,EAAE;IAEtC,OAAO,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC"}

package/dist/experiments/index.d.ts

@@ -0,0 +1,3 @@
+export type { ExperimentClient, SyntroExperimentClient } from "./types";
+export { createGrowthBookClient } from "./adapters/growthbook";
+export type { GrowthBookAdapterOptions } from "./adapters/growthbook";

package/dist/experiments/index.js

@@ -0,0 +1,4 @@
+// Adapter factory - consumers use this to create clients
+// but don't need to know about the internal implementation
+export { createGrowthBookClient } from "./adapters/growthbook";
+//# sourceMappingURL=index.js.map

package/dist/experiments/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/experiments/index.ts"],"names":[],"mappings":"AAGA,yDAAyD;AACzD,2DAA2D;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/experiments/registry.d.ts

@@ -0,0 +1,13 @@
+import type { ExperimentClient } from "./types";
+/**
+ * Create an experiment client for the specified provider.
+ *
+ * @param provider - Provider name (e.g., "growthbook")
+ * @param config - Provider-specific configuration
+ * @returns An ExperimentClient instance
+ * @throws Error if the provider is not supported
+ */
+export declare function createExperimentClient(provider: string, config: {
+    clientKey: string;
+    apiHost?: string;
+}): ExperimentClient;

package/dist/experiments/registry.js

@@ -0,0 +1,30 @@
+/**
+ * Experiment provider registry.
+ *
+ * Maps provider names to their adapter factories.
+ * This allows the bootstrap module to dynamically create
+ * experiment clients based on token configuration.
+ */
+import { createGrowthBookClient } from "./adapters/growthbook";
+const adapters = {
+    growthbook: (config) => createGrowthBookClient({
+        ...config,
+        autoInit: true,
+    }),
+};
+/**
+ * Create an experiment client for the specified provider.
+ *
+ * @param provider - Provider name (e.g., "growthbook")
+ * @param config - Provider-specific configuration
+ * @returns An ExperimentClient instance
+ * @throws Error if the provider is not supported
+ */
+export function createExperimentClient(provider, config) {
+    const factory = adapters[provider];
+    if (!factory) {
+        throw new Error(`Unknown experiment provider: ${provider}. Supported: ${Object.keys(adapters).join(", ")}`);
+    }
+    return factory(config);
+}
+//# sourceMappingURL=registry.js.map

package/dist/experiments/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/experiments/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,sBAAsB,EAA4B,MAAM,uBAAuB,CAAC;AAKzF,MAAM,QAAQ,GAAmC;IAC/C,UAAU,EAAE,CAAC,MAAgC,EAAE,EAAE,CAC/C,sBAAsB,CAAC;QACrB,GAAG,MAAM;QACT,QAAQ,EAAE,IAAI;KACf,CAAC;CACL,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,MAA+C;IAE/C,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,gCAAgC,QAAQ,gBAAgB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC"}

package/dist/experiments/types.d.ts

@@ -0,0 +1,25 @@
+import type { RectangleConfig } from "../types";
+/**
+ * Clean interface for experiment/feature flag clients.
+ *
+ * This is the ONLY interface consumers should use. The underlying
+ * implementation (GrowthBook, LaunchDarkly, etc.) is an internal detail.
+ */
+export interface ExperimentClient {
+    /**
+     * Check if a rectangle/tile should be rendered based on its experiment config.
+     */
+    shouldRenderRectangle(rectangle: RectangleConfig): boolean;
+    /**
+     * Get a feature flag value.
+     */
+    getFeatureValue?<T>(key: string, fallback: T): T;
+    /**
+     * Update user/device attributes for targeting.
+     */
+    setAttributes?(attrs: Record<string, unknown>): void;
+}
+/**
+ * @deprecated Use ExperimentClient instead
+ */
+export type SyntroExperimentClient = ExperimentClient;

package/dist/experiments/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/experiments/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/experiments/types.ts"],"names":[],"mappings":""}

package/dist/fetchers/cdnFetcher.d.ts

@@ -0,0 +1,35 @@
+import type { ConfigFetcher, FetchResult } from "./types";
+export interface CdnFetcherOptions {
+    /**
+     * Base CDN URL (e.g., "https://cdn.syntrologie.com/configs")
+     */
+    baseUrl: string;
+    /**
+     * Unique config identifier (UUID).
+     * This should be unguessable to prevent unauthorized access.
+     */
+    configId: string;
+    /**
+     * Optional SRI hash for integrity verification.
+     */
+    integrity?: string;
+}
+/**
+ * Fetches config from CDN using UUID-based paths.
+ *
+ * Security: Config paths use UUIDs which are unguessable.
+ * Each client has a unique config path that cannot be enumerated.
+ *
+ * Performance: CDN-cached with long TTL for versioned configs.
+ */
+export declare class CdnFetcher implements ConfigFetcher {
+    readonly name = "cdn";
+    private url;
+    private integrity?;
+    constructor(options: CdnFetcherOptions);
+    fetch(): Promise<FetchResult>;
+}
+/**
+ * Factory function for creating a CDN fetcher.
+ */
+export declare function createCdnFetcher(options: CdnFetcherOptions): ConfigFetcher;

package/dist/fetchers/cdnFetcher.js

@@ -0,0 +1,100 @@
+/**
+ * Allowed CDN hosts for config fetching.
+ */
+const ALLOWED_CDN_HOSTS = [
+    'cdn.syntrologie.com',
+    'localhost',
+    '127.0.0.1'
+];
+/**
+ * Validates that a CDN URL is from an allowed host.
+ */
+function validateCdnUrl(url) {
+    try {
+        const parsed = new URL(url);
+        const isLocalhost = /^(localhost|127\.0\.0\.1)$/.test(parsed.hostname);
+        if (parsed.protocol !== 'https:' && !isLocalhost) {
+            console.warn('[SmartCanvas] CDN URL must use HTTPS:', url);
+            return false;
+        }
+        const isAllowed = ALLOWED_CDN_HOSTS.some(host => parsed.hostname === host);
+        if (!isAllowed) {
+            console.warn('[SmartCanvas] CDN host not in allowlist:', parsed.hostname);
+            return false;
+        }
+        return true;
+    }
+    catch {
+        console.warn('[SmartCanvas] Invalid CDN URL:', url);
+        return false;
+    }
+}
+/**
+ * Fetches config from CDN using UUID-based paths.
+ *
+ * Security: Config paths use UUIDs which are unguessable.
+ * Each client has a unique config path that cannot be enumerated.
+ *
+ * Performance: CDN-cached with long TTL for versioned configs.
+ */
+export class CdnFetcher {
+    constructor(options) {
+        this.name = "cdn";
+        this.url = `${options.baseUrl}/${options.configId}.json`;
+        this.integrity = options.integrity;
+        if (!validateCdnUrl(this.url)) {
+            throw new Error(`[SmartCanvas] CDN URL not allowed: ${this.url}`);
+        }
+    }
+    async fetch() {
+        var _a;
+        const start = performance.now();
+        const response = await fetch(this.url, {
+            credentials: 'omit', // Never send cookies to CDN
+            cache: 'default',
+        });
+        if (!response.ok) {
+            throw new Error(`[SmartCanvas] Failed to fetch config from CDN (${response.status})`);
+        }
+        const text = await response.text();
+        // Verify integrity if provided
+        if (this.integrity) {
+            const hash = await computeSha384(text);
+            const expected = this.integrity.replace('sha384-', '');
+            if (hash !== expected) {
+                throw new Error(`[SmartCanvas] Config integrity check failed. Expected ${expected}, got ${hash}`);
+            }
+        }
+        const config = JSON.parse(text);
+        const fetchTimeMs = performance.now() - start;
+        // Check cache headers
+        const cacheControl = response.headers.get('cache-control');
+        const age = response.headers.get('age');
+        return {
+            config,
+            meta: {
+                source: "cdn",
+                fetchTimeMs,
+                cached: (_a = cacheControl === null || cacheControl === void 0 ? void 0 : cacheControl.includes('public')) !== null && _a !== void 0 ? _a : false,
+                cacheAge: age ? parseInt(age, 10) : undefined,
+            },
+        };
+    }
+}
+/**
+ * Compute SHA-384 hash in base64 format (for SRI).
+ */
+async function computeSha384(content) {
+    const encoder = new TextEncoder();
+    const data = encoder.encode(content);
+    const hashBuffer = await crypto.subtle.digest('SHA-384', data);
+    const hashArray = new Uint8Array(hashBuffer);
+    return btoa(String.fromCharCode(...hashArray));
+}
+/**
+ * Factory function for creating a CDN fetcher.
+ */
+export function createCdnFetcher(options) {
+    return new CdnFetcher(options);
+}
+//# sourceMappingURL=cdnFetcher.js.map

package/dist/fetchers/cdnFetcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdnFetcher.js","sourceRoot":"","sources":["../../src/fetchers/cdnFetcher.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,iBAAiB,GAAG;IACxB,qBAAqB;IACrB,WAAW;IACX,WAAW;CACZ,CAAC;AAoBF;;GAEG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEvE,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,0CAA0C,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,UAAU;IAMrB,YAAY,OAA0B;QAL7B,SAAI,GAAG,KAAK,CAAC;QAMpB,IAAI,CAAC,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,OAAO,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QAEnC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;;QACT,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEhC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;YACrC,WAAW,EAAE,MAAM,EAAE,4BAA4B;YACjD,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,kDAAkD,QAAQ,CAAC,MAAM,GAAG,CACrE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,+BAA+B;QAC/B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACvD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CACb,yDAAyD,QAAQ,SAAS,IAAI,EAAE,CACjF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA+B,CAAC;QAC9D,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAE9C,sBAAsB;QACtB,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAExC,OAAO;YACL,MAAM;YACN,IAAI,EAAE;gBACJ,MAAM,EAAE,KAAK;gBACb,WAAW;gBACX,MAAM,EAAE,MAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,QAAQ,CAAC,QAAQ,CAAC,mCAAI,KAAK;gBACjD,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;aAC9C;SACF,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,OAAe;IAC1C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA0B;IACzD,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/dist/fetchers/experimentsFetcher.d.ts

@@ -0,0 +1,33 @@
+import type { ConfigFetcher, FetchResult } from "./types";
+import type { ExperimentClient } from "../experiments/types";
+export interface ExperimentsFetcherOptions {
+    /**
+     * Experiment client instance (e.g., from createGrowthBookClient).
+     */
+    client: ExperimentClient;
+    /**
+     * Feature key that contains the config object.
+     * @default "smart-canvas-config"
+     */
+    featureKey?: string;
+}
+/**
+ * Fetches config from an experiment/feature flag system.
+ *
+ * Security: Config is scoped to the experiment client's environment/SDK key.
+ * Each client only sees their own config.
+ *
+ * Performance: No network request needed if features are already cached.
+ * Config is delivered with the feature flag payload.
+ */
+export declare class ExperimentsFetcher implements ConfigFetcher {
+    readonly name = "experiments";
+    private client;
+    private featureKey;
+    constructor(options: ExperimentsFetcherOptions);
+    fetch(): Promise<FetchResult>;
+}
+/**
+ * Factory function for creating an experiments-based fetcher.
+ */
+export declare function createExperimentsFetcher(options: ExperimentsFetcherOptions): ConfigFetcher;

package/dist/fetchers/experimentsFetcher.js

@@ -0,0 +1,42 @@
+/**
+ * Fetches config from an experiment/feature flag system.
+ *
+ * Security: Config is scoped to the experiment client's environment/SDK key.
+ * Each client only sees their own config.
+ *
+ * Performance: No network request needed if features are already cached.
+ * Config is delivered with the feature flag payload.
+ */
+export class ExperimentsFetcher {
+    constructor(options) {
+        var _a;
+        this.name = "experiments";
+        this.client = options.client;
+        this.featureKey = (_a = options.featureKey) !== null && _a !== void 0 ? _a : "smart-canvas-config";
+    }
+    async fetch() {
+        var _a, _b;
+        const start = performance.now();
+        const config = (_b = (_a = this.client).getFeatureValue) === null || _b === void 0 ? void 0 : _b.call(_a, this.featureKey, null);
+        if (!config || typeof config !== "object") {
+            throw new Error(`[SmartCanvas] Feature "${this.featureKey}" not found or invalid. ` +
+                `Ensure the feature is configured in your experiment platform.`);
+        }
+        const fetchTimeMs = performance.now() - start;
+        return {
+            config: config,
+            meta: {
+                source: "experiments",
+                fetchTimeMs,
+                cached: true,
+            },
+        };
+    }
+}
+/**
+ * Factory function for creating an experiments-based fetcher.
+ */
+export function createExperimentsFetcher(options) {
+    return new ExperimentsFetcher(options);
+}
+//# sourceMappingURL=experimentsFetcher.js.map

package/dist/fetchers/experimentsFetcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"experimentsFetcher.js","sourceRoot":"","sources":["../../src/fetchers/experimentsFetcher.ts"],"names":[],"mappings":"AAiBA;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAkB;IAM7B,YAAY,OAAkC;;QALrC,SAAI,GAAG,aAAa,CAAC;QAM5B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,MAAA,OAAO,CAAC,UAAU,mCAAI,qBAAqB,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,KAAK;;QACT,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEhC,MAAM,MAAM,GAAG,MAAA,MAAA,IAAI,CAAC,MAAM,EAAC,eAAe,mDAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAEpE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,CAAC,UAAU,0BAA0B;gBACnE,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAE9C,OAAO;YACL,MAAM,EAAE,MAAoC;YAC5C,IAAI,EAAE;gBACJ,MAAM,EAAE,aAAa;gBACrB,WAAW;gBACX,MAAM,EAAE,IAAI;aACb;SACF,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAkC;IAElC,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC"}

package/dist/fetchers/index.d.ts

@@ -0,0 +1,3 @@
+export type { ConfigFetcher, FetchResult } from "./types";
+export { ExperimentsFetcher, createExperimentsFetcher, type ExperimentsFetcherOptions, } from "./experimentsFetcher";
+export { CdnFetcher, createCdnFetcher, type CdnFetcherOptions, } from "./cdnFetcher";

package/dist/fetchers/index.js

@@ -0,0 +1,5 @@
+// Experiments-based fetcher (GrowthBook, LaunchDarkly, etc.)
+export { ExperimentsFetcher, createExperimentsFetcher, } from "./experimentsFetcher";
+// CDN fetcher with UUID-based paths
+export { CdnFetcher, createCdnFetcher, } from "./cdnFetcher";
+//# sourceMappingURL=index.js.map

package/dist/fetchers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fetchers/index.ts"],"names":[],"mappings":"AAGA,6DAA6D;AAC7D,OAAO,EACL,kBAAkB,EAClB,wBAAwB,GAEzB,MAAM,sBAAsB,CAAC;AAE9B,oCAAoC;AACpC,OAAO,EACL,UAAU,EACV,gBAAgB,GAEjB,MAAM,cAAc,CAAC"}

package/dist/fetchers/registry.d.ts

@@ -0,0 +1,14 @@
+import type { ConfigFetcher } from "./types";
+/**
+ * Default CDN base URL for config fetching.
+ */
+export declare const DEFAULT_CDN_BASE_URL = "https://cdn.syntrologie.com/configs";
+/**
+ * Create a config fetcher for the specified type.
+ *
+ * @param type - Fetcher type (e.g., "cdn", "experiments")
+ * @param options - Fetcher-specific options
+ * @returns A ConfigFetcher instance
+ * @throws Error if the fetcher type is not supported
+ */
+export declare function createConfigFetcher(type: string, options?: Record<string, string>): ConfigFetcher;

package/dist/fetchers/registry.js

@@ -0,0 +1,58 @@
+/**
+ * Config fetcher registry.
+ *
+ * Maps fetcher type names to their factory functions.
+ * This allows the bootstrap module to dynamically create
+ * fetchers based on token configuration.
+ */
+import { createCdnFetcher } from "./cdnFetcher";
+import { createExperimentsFetcher } from "./experimentsFetcher";
+/**
+ * Default CDN base URL for config fetching.
+ */
+export const DEFAULT_CDN_BASE_URL = "https://cdn.syntrologie.com/configs";
+const fetchers = {
+    /**
+     * CDN fetcher - fetches config from Syntrologie CDN.
+     * Options: configId (required), integrity (optional)
+     */
+    cdn: (options) => {
+        var _a;
+        if (!options.configId) {
+            throw new Error("CDN fetcher requires 'configId' option");
+        }
+        return createCdnFetcher({
+            baseUrl: (_a = options.baseUrl) !== null && _a !== void 0 ? _a : DEFAULT_CDN_BASE_URL,
+            configId: options.configId,
+            integrity: options.integrity,
+        });
+    },
+    /**
+     * Experiments fetcher - fetches config based on experiment variations.
+     * Options: featureKey (required)
+     */
+    experiments: (options) => {
+        if (!options.featureKey) {
+            throw new Error("Experiments fetcher requires 'featureKey' option");
+        }
+        return createExperimentsFetcher({
+            featureKey: options.featureKey,
+        });
+    },
+};
+/**
+ * Create a config fetcher for the specified type.
+ *
+ * @param type - Fetcher type (e.g., "cdn", "experiments")
+ * @param options - Fetcher-specific options
+ * @returns A ConfigFetcher instance
+ * @throws Error if the fetcher type is not supported
+ */
+export function createConfigFetcher(type, options = {}) {
+    const factory = fetchers[type];
+    if (!factory) {
+        throw new Error(`Unknown config fetcher type: ${type}. Supported: ${Object.keys(fetchers).join(", ")}`);
+    }
+    return factory(options);
+}
+//# sourceMappingURL=registry.js.map

package/dist/fetchers/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/fetchers/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,gBAAgB,EAAqB,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAA6B,MAAM,sBAAsB,CAAC;AAG3F;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,qCAAqC,CAAC;AAI1E,MAAM,QAAQ,GAAmC;IAC/C;;;OAGG;IACH,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;;QACf,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,gBAAgB,CAAC;YACtB,OAAO,EAAE,MAAA,OAAO,CAAC,OAAO,mCAAI,oBAAoB;YAChD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;SACR,CAAC,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE;QACvB,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,wBAAwB,CAAC;YAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;SACF,CAAC,CAAC;IAClC,CAAC;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,UAAkC,EAAE;IAEpC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,gBAAgB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC"}

package/dist/fetchers/types.d.ts

@@ -0,0 +1,26 @@
+import type { ShadowCanvasConfigResponse } from "../types";
+/**
+ * Result from a config fetch, including timing metadata.
+ */
+export interface FetchResult {
+    config: ShadowCanvasConfigResponse;
+    meta: {
+        source: 'experiments' | 'cdn' | 'cache';
+        fetchTimeMs: number;
+        cached?: boolean;
+        cacheAge?: number;
+    };
+}
+/**
+ * Base interface for all config fetchers.
+ */
+export interface ConfigFetcher {
+    /**
+     * Fetch the config.
+     */
+    fetch(): Promise<FetchResult>;
+    /**
+     * Name of this fetcher for logging/debugging.
+     */
+    readonly name: string;
+}

package/dist/fetchers/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/fetchers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/fetchers/types.ts"],"names":[],"mappings":""}

package/dist/hooks/useCanvasOverlays.d.ts

@@ -0,0 +1,13 @@
+import type { ExperimentClient } from "../experiments/types";
+import type { TelemetryClient } from "../telemetry/types";
+import { type OverlayRecipeFetcher } from "../overlays/fetcher";
+export interface UseCanvasOverlaysOptions {
+    fetcher?: OverlayRecipeFetcher;
+    configUri?: string;
+    featureKey?: string;
+    credentials?: RequestCredentials;
+    experiments?: ExperimentClient;
+    telemetry?: TelemetryClient;
+    canvasHost?: HTMLElement | null;
+}
+export declare function useCanvasOverlays({ fetcher, configUri, featureKey, credentials, experiments, telemetry, canvasHost, }: UseCanvasOverlaysOptions): void;

package/dist/hooks/useCanvasOverlays.js

@@ -0,0 +1,59 @@
+import { useEffect, useMemo } from "react";
+import { createOverlayRecipeFetcher } from "../overlays/fetcher";
+import { CanvasRecipeZ } from "../overlays/schema";
+export function useCanvasOverlays({ fetcher, configUri, featureKey, credentials, experiments, telemetry, canvasHost, }) {
+    const derivedFetcher = useMemo(() => {
+        // Priority 1: Use explicit fetcher if provided
+        if (fetcher)
+            return fetcher;
+        // Priority 2: Only create a fetcher if we have an explicit configUri
+        // (inline recipes are passed via the fetcher prop, not configUri)
+        if (configUri) {
+            return createOverlayRecipeFetcher({
+                configUri,
+                experiments,
+                featureKey,
+                credentials,
+                validator: CanvasRecipeZ,
+            });
+        }
+        // No fetcher and no configUri = no overlays (waiting for inline recipe or none exist)
+        return undefined;
+    }, [fetcher, configUri, experiments, featureKey, credentials]);
+    useEffect(() => {
+        if (!derivedFetcher)
+            return;
+        let cancelled = false;
+        let cleanup;
+        (async () => {
+            var _a;
+            try {
+                const recipe = await derivedFetcher();
+                if (!((_a = recipe === null || recipe === void 0 ? void 0 : recipe.steps) === null || _a === void 0 ? void 0 : _a.length) || cancelled)
+                    return;
+                const mod = await import("../overlays/runtime");
+                const overlayRoot = mod.ensureOverlayRoot();
+                const resolve = mod.createAnchorResolver({ canvasHost });
+                cleanup = await mod.runOverlays(recipe, {
+                    overlayRoot,
+                    resolve,
+                    canvasHost,
+                    onEvent: (name, payload) => {
+                        var _a, _b;
+                        if (!telemetry)
+                            return;
+                        (_a = telemetry.trackAction) === null || _a === void 0 ? void 0 : _a.call(telemetry, name, (_b = payload === null || payload === void 0 ? void 0 : payload.stepId) !== null && _b !== void 0 ? _b : "", "overlay");
+                    },
+                });
+            }
+            catch (err) {
+                console.warn("[SmartCanvas] overlays failed", err);
+            }
+        })();
+        return () => {
+            cancelled = true;
+            cleanup === null || cleanup === void 0 ? void 0 : cleanup();
+        };
+    }, [derivedFetcher, telemetry, canvasHost]);
+}
+//# sourceMappingURL=useCanvasOverlays.js.map