@syntrologie/runtime-sdk 2.15.0 → 2.16.0

package/dist/platform/PlatformAdapter.d.ts

@@ -0,0 +1,46 @@
+/**
+ * PlatformAdapter — interface for platform-specific integrations.
+ *
+ * Each supported host platform (Shopify, WordPress, etc.) implements this
+ * interface so the runtime can react to platform-specific lifecycle events
+ * (section load/unload, theme changes, etc.) without coupling to any single
+ * platform's API surface.
+ */
+export interface PlatformAdapter {
+    /** Human-readable platform name, e.g. "shopify" */
+    readonly name: string;
+    /**
+     * Synchronously detect whether the current page belongs to this platform.
+     * Must be safe to call in any environment (returns false when unsure).
+     */
+    detect(): boolean;
+    /**
+     * Async initialization hook. Called once after the adapter is selected.
+     * May wait for platform-specific readiness signals (e.g. Shopify sections).
+     */
+    onInit(): Promise<void>;
+    /**
+     * Called by the runtime when a region's DOM has been mutated.
+     */
+    onRegionMutated(regionId: string): void;
+    /**
+     * Returns a CSS-selector scope prefix for the given anchor element,
+     * based on the platform's section/region structure.
+     * Returns empty string when the anchor is not inside a known section.
+     */
+    getAnchorScope(anchor: Element): string;
+    /**
+     * Subscribe to "region is about to unload" events.
+     * Returns an unsubscribe function.
+     */
+    onRegionWillUnload(callback: (regionId: string) => void): () => void;
+    /**
+     * Subscribe to "region finished loading" events.
+     * Returns an unsubscribe function.
+     */
+    onRegionDidLoad(callback: (regionId: string) => void): () => void;
+    /**
+     * Tear down all listeners and internal state.
+     */
+    destroy(): void;
+}

package/dist/platform/ShopifyAdapter.d.ts

@@ -0,0 +1,36 @@
+import type { PlatformAdapter } from './PlatformAdapter';
+/**
+ * Shopify-specific platform adapter.
+ *
+ * Detects Shopify storefronts and hooks into Shopify's section rendering
+ * lifecycle events (`shopify:section:load` / `shopify:section:unload`) so
+ * the runtime can react to dynamic section swaps in Shopify Online Store 2.0.
+ */
+export declare class ShopifyAdapter implements PlatformAdapter {
+    readonly name: "shopify";
+    private loadCallbacks;
+    private unloadCallbacks;
+    private abortController;
+    private antiFlicker;
+    private readonly initTimeoutMs;
+    constructor(options?: {
+        initTimeoutMs?: number;
+    });
+    detect(): boolean;
+    /**
+     * Wait for Shopify sections to be ready, then attach lifecycle listeners.
+     *
+     * Resolution order:
+     * 1. `.shopify-section` already in DOM -> resolve immediately
+     * 2. `shopify:section:load` fires -> resolve
+     * 3. Timeout (default 3000ms) -> resolve anyway (graceful degradation)
+     */
+    onInit(): Promise<void>;
+    onRegionDidLoad(callback: (regionId: string) => void): () => void;
+    onRegionWillUnload(callback: (regionId: string) => void): () => void;
+    onRegionMutated(_regionId: string): void;
+    getAnchorScope(anchor: Element): string;
+    destroy(): void;
+    private attachSectionListeners;
+    private waitForInitialSections;
+}

package/dist/platform/ShopifyAnchorResolver.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Theme families sharing identical DOM structures.
+ * Dawn family: Dawn, Sense, Craft, Ride, Refresh, Colorblock, Taste, Studio
+ */
+export type ShopifyThemeFamily = 'dawn' | 'prestige' | 'impulse' | 'turbo' | 'trademark' | 'legacy' | 'unknown';
+/**
+ * Detect the Shopify theme family from window.Shopify.theme.name.
+ */
+export declare function detectThemeFamily(): ShopifyThemeFamily;
+export interface AnchorValidation {
+    unique: boolean;
+    matchCount: number;
+}
+/**
+ * ShopifyAnchorResolver — provides Shopify-aware selector scoping and
+ * uniqueness validation for anchor configuration.
+ */
+export declare class ShopifyAnchorResolver {
+    /**
+     * Scope a CSS selector to its containing .shopify-section wrapper.
+     */
+    scopeSelector(selector: string, element: Element): string;
+    /**
+     * Validate that a selector matches exactly one element in the document.
+     */
+    validateUniqueness(selector: string): AnchorValidation;
+    /**
+     * Get the current theme family for diagnostic/logging purposes.
+     */
+    getThemeFamily(): ShopifyThemeFamily;
+}

package/dist/platform/ShopifyAntiFlicker.d.ts

@@ -0,0 +1,21 @@
+import type { PlatformAdapter } from './PlatformAdapter';
+/**
+ * ShopifyAntiFlicker -- prevents visible content flash during section re-renders.
+ *
+ * When Shopify's Section Rendering API replaces a section's innerHTML, our
+ * injected content (identified by [data-syntro-action-id]) disappears momentarily.
+ * This module hooks section:unload to pre-hide our content and section:load to
+ * fade it back in, eliminating the visible flash.
+ */
+export declare class ShopifyAntiFlicker {
+    private readonly adapter;
+    private unsubUnload;
+    private unsubLoad;
+    private destroyed;
+    constructor(adapter: PlatformAdapter);
+    activate(): void;
+    destroy(): void;
+    private hideContentInSection;
+    private revealContentInSection;
+    private sectionSelector;
+}

package/dist/platform/ShopifyPixelBridge.d.ts

@@ -0,0 +1,37 @@
+/**
+ * ShopifyPixelBridge — storefront-side cookie writer for checkout attribution.
+ *
+ * The SDK can't run in Shopify's sandboxed checkout. This bridge writes a
+ * `syntro_experiments` cookie containing the telemetry context (distinct_id,
+ * telemetry host, public PostHog key). A Shopify Web Pixel extension running
+ * in the checkout sandbox reads the cookie and POSTs
+ * `checkout_completed` / `product_added_to_cart` events to
+ * `{telemetry_host}/t/{telemetry_key}/e/` — the Syntrologie PostHog proxy.
+ *
+ * Experiment attribution is NOT carried in the cookie. PostHog already tracks
+ * each shopper's assignments server-side via `$experiment_started` events
+ * fired from the storefront SDK under the same distinct_id. When the pixel's
+ * checkout event lands with that distinct_id, PostHog auto-attributes the
+ * conversion to the correct variant. The cookie only needs to ferry identity
+ * and destination.
+ *
+ * Max-age: 30 days (covers long shopping sessions).
+ * SameSite: Lax (readable by checkout on the same registrable domain).
+ */
+export interface ShopifyPixelBridgeContext {
+    /** PostHog distinct_id from the storefront telemetry client. */
+    distinctId: string;
+    /** Telemetry proxy host, e.g. `https://telemetry.syntrologie.com`. No trailing slash. */
+    telemetryHost: string;
+    /** Public write-only PostHog key. */
+    telemetryKey: string;
+}
+export declare class ShopifyPixelBridge {
+    private context;
+    constructor(context: ShopifyPixelBridgeContext);
+    /** Update the telemetry context (e.g., after consent is granted and
+     *  PostHog finally initializes and a real distinct_id becomes available). */
+    updateContext(context: ShopifyPixelBridgeContext): void;
+    destroy(): void;
+    private writeCookie;
+}

package/dist/platform/detect.d.ts

@@ -0,0 +1,9 @@
+import type { PlatformAdapter } from './PlatformAdapter';
+/**
+ * Auto-detect the current host platform.
+ *
+ * Iterates registered adapters and returns the first one that detects
+ * its platform signals. Returns `null` if no platform is recognized
+ * (i.e. the page is a generic/unknown site).
+ */
+export declare function detectPlatform(): PlatformAdapter | null;

package/dist/platform/index.d.ts

@@ -0,0 +1,10 @@
+export { detectPlatform } from './detect';
+export type { PlatformAdapter } from './PlatformAdapter';
+export { ShopifyAdapter } from './ShopifyAdapter';
+export type { AnchorValidation, ShopifyThemeFamily } from './ShopifyAnchorResolver';
+export { detectThemeFamily, ShopifyAnchorResolver } from './ShopifyAnchorResolver';
+export { ShopifyAntiFlicker } from './ShopifyAntiFlicker';
+export type { ShopifyPixelBridgeContext } from './ShopifyPixelBridge';
+export { ShopifyPixelBridge } from './ShopifyPixelBridge';
+export type { ShopifyPixelCookie } from './shopify-cookie-contract';
+export { COOKIE_NAME as SHOPIFY_COOKIE_NAME } from './shopify-cookie-contract';

package/dist/platform/shopify-cookie-contract.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Shared cookie contract between ShopifyPixelBridge (SDK) and the
+ * Shopify Web Pixel extension. Both sides must agree on this format.
+ *
+ * Cookie name: syntro_experiments (legacy name — kept for backward compat;
+ * the cookie carries telemetry identity, not experiment assignments)
+ * Cookie value: JSON-encoded ShopifyPixelCookie
+ *
+ * The storefront SDK writes a snapshot of its telemetry context — the
+ * PostHog distinct_id, the telemetry proxy host, and the public PostHog
+ * project key. The Web Pixel extension runs in Shopify's sandboxed
+ * checkout (which cannot reach the SDK), reads this cookie, and posts
+ * PostHog-shaped checkout events with the same distinct_id so that
+ * checkout events JOIN to the storefront session. PostHog already knows
+ * which experiments that shopper is in (via `$experiment_started` events
+ * fired from the storefront), so attribution happens server-side without
+ * the pixel having to re-transmit assignments.
+ *
+ * Naming note: the fields are `telemetry_host` / `telemetry_key` — not
+ * `api_host` / `api_key` — to disambiguate from the other `apiHost`
+ * fields in the codebase. This cookie is strictly about telemetry.
+ *
+ * Forward compat: pixel code must check `version` and reject unknown
+ * shapes. Bump `version` when fields are removed or semantics change.
+ */
+export interface ShopifyPixelCookie {
+    /** Schema version — pixel rejects unknown versions. Bump on breaking changes. */
+    version: 1;
+    /** PostHog distinct_id from the storefront SDK, used so checkout events
+     * join onto the pre-checkout session. Required — without it the pixel
+     * would create a new anonymous user at checkout and the funnel breaks. */
+    distinct_id: string;
+    /** Telemetry proxy host (e.g., `https://telemetry.syntrologie.com`). No trailing slash. */
+    telemetry_host: string;
+    /** Public write-only PostHog key (embedded in the client). */
+    telemetry_key: string;
+}
+export declare const COOKIE_NAME = "syntro_experiments";
+export declare const COOKIE_VERSION: 1;

package/dist/react.js

@@ -1,6 +1,6 @@
 import {
   Syntro
-} from "./chunk-CVMZW3II.js";
+} from "./chunk-NVV7IWJC.js";
 import "./chunk-2IQ2PTLJ.js";
 import "./chunk-XVRDKBYF.js";
 import "./chunk-GX7BBYX6.js";

package/dist/shopify-pixel-entry.d.ts

@@ -0,0 +1,68 @@
+/**
+ * CDN-hosted Shopify Web Pixel — bundled to `dist/shopify-pixel.min.js` and
+ * served from `cdn.syntrologie.com/runtime-sdk/v2/latest/shopify-pixel.min.js`.
+ *
+ * Merchants install this by pasting a small loader snippet into Shopify admin
+ * under Settings → Customer events → Add custom pixel. The loader dynamically
+ * loads this file, then calls `window.__SyntroShopifyPixel.register({ analytics, browser })`
+ * to wire up subscribers. The indirection means we ship updates to every
+ * merchant's pixel by redeploying the CDN file — merchants never re-paste.
+ *
+ * The pixel's only job is to forward Shopify checkout events to the
+ * Syntrologie PostHog proxy with the shopper's distinct_id attached.
+ * Experiment attribution is handled server-side by PostHog — once the
+ * storefront SDK has fired `$experiment_started` for a distinct_id, PostHog
+ * associates all future events from that user (including checkout events
+ * this pixel posts) with the correct variant.
+ *
+ * Shopify custom pixels run in a "lax sandbox" iframe. Script tag injection
+ * works (verified by PostHog, Sentry, GTM following the same pattern). Cookie
+ * access is via the async `browser.cookie.get()` API which proxies to the
+ * top frame (merchant storefront domain), so the `syntro_experiments` cookie
+ * written by `ShopifyPixelBridge` on the storefront is readable here.
+ *
+ * All errors swallowed — a pixel failure must never disturb checkout.
+ */
+interface ShopifyAnalytics {
+    subscribe(eventName: string, handler: (event: ShopifyPixelEvent) => void | Promise<void>): void;
+}
+interface ShopifyBrowserCookie {
+    get(name: string): Promise<string | undefined>;
+}
+interface ShopifyBrowser {
+    cookie: ShopifyBrowserCookie;
+}
+interface ShopifyPixelEvent {
+    data: {
+        checkout?: {
+            totalPrice: {
+                amount: string | number;
+                currencyCode: string;
+            };
+            order?: {
+                id: string;
+            };
+        };
+        cartLine?: {
+            merchandise: {
+                id: string;
+                product: {
+                    id: string;
+                };
+            };
+            quantity: number;
+        };
+    };
+}
+export declare function register({ analytics, browser, }: {
+    analytics: ShopifyAnalytics;
+    browser: ShopifyBrowser;
+}): void;
+declare global {
+    interface Window {
+        __SyntroShopifyPixel?: {
+            register: typeof register;
+        };
+    }
+}
+export {};

package/dist/shopify-pixel.js

@@ -0,0 +1,77 @@
+(() => {
+  // src/platform/shopify-cookie-contract.ts
+  var COOKIE_NAME = "syntro_experiments";
+  var COOKIE_VERSION = 1;
+
+  // src/shopify-pixel-entry.ts
+  async function readCookie(browser) {
+    try {
+      const raw = await browser.cookie.get(COOKIE_NAME);
+      if (!raw) return null;
+      const parsed = JSON.parse(raw);
+      if (!parsed || typeof parsed !== "object") return null;
+      if (parsed.version !== COOKIE_VERSION) return null;
+      if (typeof parsed.distinct_id !== "string" || parsed.distinct_id.length === 0) return null;
+      if (typeof parsed.telemetry_host !== "string" || !parsed.telemetry_host.startsWith("https://"))
+        return null;
+      if (typeof parsed.telemetry_key !== "string" || parsed.telemetry_key.length === 0) return null;
+      return parsed;
+    } catch {
+      return null;
+    }
+  }
+  async function capture(cookie, eventName, properties) {
+    try {
+      const url = `${cookie.telemetry_host}/t/${cookie.telemetry_key}/e/`;
+      await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        keepalive: true,
+        // survive page unload on checkout_completed
+        body: JSON.stringify({
+          api_key: cookie.telemetry_key,
+          // PostHog's capture body field is always `api_key`
+          event: eventName,
+          distinct_id: cookie.distinct_id,
+          properties: {
+            $lib: "syntrologie-shopify-pixel",
+            $lib_version: "1.0.0",
+            ...properties
+          },
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        })
+      });
+    } catch {
+    }
+  }
+  function register({
+    analytics,
+    browser
+  }) {
+    analytics.subscribe("checkout_completed", async (event) => {
+      const cookie = await readCookie(browser);
+      if (!cookie || !event.data.checkout) return;
+      const { checkout } = event.data;
+      await capture(cookie, "checkout_completed", {
+        order_value: checkout.totalPrice.amount,
+        currency: checkout.totalPrice.currencyCode,
+        order_id: checkout.order?.id
+      });
+    });
+    analytics.subscribe("product_added_to_cart", async (event) => {
+      const cookie = await readCookie(browser);
+      if (!cookie) return;
+      const cartLine = event.data.cartLine;
+      if (!cartLine) return;
+      await capture(cookie, "product_added_to_cart", {
+        product_id: cartLine.merchandise.product.id,
+        variant_id: cartLine.merchandise.id,
+        quantity: cartLine.quantity
+      });
+    });
+  }
+  if (typeof window !== "undefined") {
+    window.__SyntroShopifyPixel = { register };
+  }
+})();
+//# sourceMappingURL=shopify-pixel.js.map

package/dist/shopify-pixel.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/platform/shopify-cookie-contract.ts", "../src/shopify-pixel-entry.ts"],
+  "sourcesContent": ["/**\n * Shared cookie contract between ShopifyPixelBridge (SDK) and the\n * Shopify Web Pixel extension. Both sides must agree on this format.\n *\n * Cookie name: syntro_experiments (legacy name \u2014 kept for backward compat;\n * the cookie carries telemetry identity, not experiment assignments)\n * Cookie value: JSON-encoded ShopifyPixelCookie\n *\n * The storefront SDK writes a snapshot of its telemetry context \u2014 the\n * PostHog distinct_id, the telemetry proxy host, and the public PostHog\n * project key. The Web Pixel extension runs in Shopify's sandboxed\n * checkout (which cannot reach the SDK), reads this cookie, and posts\n * PostHog-shaped checkout events with the same distinct_id so that\n * checkout events JOIN to the storefront session. PostHog already knows\n * which experiments that shopper is in (via `$experiment_started` events\n * fired from the storefront), so attribution happens server-side without\n * the pixel having to re-transmit assignments.\n *\n * Naming note: the fields are `telemetry_host` / `telemetry_key` \u2014 not\n * `api_host` / `api_key` \u2014 to disambiguate from the other `apiHost`\n * fields in the codebase. This cookie is strictly about telemetry.\n *\n * Forward compat: pixel code must check `version` and reject unknown\n * shapes. Bump `version` when fields are removed or semantics change.\n */\n\nexport interface ShopifyPixelCookie {\n  /** Schema version \u2014 pixel rejects unknown versions. Bump on breaking changes. */\n  version: 1;\n  /** PostHog distinct_id from the storefront SDK, used so checkout events\n   * join onto the pre-checkout session. Required \u2014 without it the pixel\n   * would create a new anonymous user at checkout and the funnel breaks. */\n  distinct_id: string;\n  /** Telemetry proxy host (e.g., `https://telemetry.syntrologie.com`). No trailing slash. */\n  telemetry_host: string;\n  /** Public write-only PostHog key (embedded in the client). */\n  telemetry_key: string;\n}\n\nexport const COOKIE_NAME = 'syntro_experiments';\nexport const COOKIE_VERSION = 1 as const;\n", "/**\n * CDN-hosted Shopify Web Pixel \u2014 bundled to `dist/shopify-pixel.min.js` and\n * served from `cdn.syntrologie.com/runtime-sdk/v2/latest/shopify-pixel.min.js`.\n *\n * Merchants install this by pasting a small loader snippet into Shopify admin\n * under Settings \u2192 Customer events \u2192 Add custom pixel. The loader dynamically\n * loads this file, then calls `window.__SyntroShopifyPixel.register({ analytics, browser })`\n * to wire up subscribers. The indirection means we ship updates to every\n * merchant's pixel by redeploying the CDN file \u2014 merchants never re-paste.\n *\n * The pixel's only job is to forward Shopify checkout events to the\n * Syntrologie PostHog proxy with the shopper's distinct_id attached.\n * Experiment attribution is handled server-side by PostHog \u2014 once the\n * storefront SDK has fired `$experiment_started` for a distinct_id, PostHog\n * associates all future events from that user (including checkout events\n * this pixel posts) with the correct variant.\n *\n * Shopify custom pixels run in a \"lax sandbox\" iframe. Script tag injection\n * works (verified by PostHog, Sentry, GTM following the same pattern). Cookie\n * access is via the async `browser.cookie.get()` API which proxies to the\n * top frame (merchant storefront domain), so the `syntro_experiments` cookie\n * written by `ShopifyPixelBridge` on the storefront is readable here.\n *\n * All errors swallowed \u2014 a pixel failure must never disturb checkout.\n */\n\nimport { COOKIE_NAME, COOKIE_VERSION } from './platform/shopify-cookie-contract';\n\ninterface ShopifyAnalytics {\n  subscribe(eventName: string, handler: (event: ShopifyPixelEvent) => void | Promise<void>): void;\n}\n\ninterface ShopifyBrowserCookie {\n  get(name: string): Promise<string | undefined>;\n}\n\ninterface ShopifyBrowser {\n  cookie: ShopifyBrowserCookie;\n}\n\ninterface ShopifyPixelEvent {\n  data: {\n    checkout?: {\n      totalPrice: { amount: string | number; currencyCode: string };\n      order?: { id: string };\n    };\n    cartLine?: {\n      merchandise: { id: string; product: { id: string } };\n      quantity: number;\n    };\n  };\n}\n\ninterface PixelCookie {\n  version: number;\n  distinct_id: string;\n  telemetry_host: string;\n  telemetry_key: string;\n}\n\nasync function readCookie(browser: ShopifyBrowser): Promise<PixelCookie | null> {\n  try {\n    const raw = await browser.cookie.get(COOKIE_NAME);\n    if (!raw) return null;\n    const parsed = JSON.parse(raw);\n    if (!parsed || typeof parsed !== 'object') return null;\n    if (parsed.version !== COOKIE_VERSION) return null;\n    if (typeof parsed.distinct_id !== 'string' || parsed.distinct_id.length === 0) return null;\n    if (typeof parsed.telemetry_host !== 'string' || !parsed.telemetry_host.startsWith('https://'))\n      return null;\n    if (typeof parsed.telemetry_key !== 'string' || parsed.telemetry_key.length === 0) return null;\n    return parsed as PixelCookie;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * POST an event to the PostHog capture endpoint via the Syntrologie proxy.\n * URL shape: `{telemetry_host}/t/{telemetry_key}/e/` \u2014 see\n * `packages/runtime-sdk/src/telemetry/adapters/posthog.ts` for the convention.\n */\nasync function capture(\n  cookie: PixelCookie,\n  eventName: string,\n  properties: Record<string, unknown>\n): Promise<void> {\n  try {\n    const url = `${cookie.telemetry_host}/t/${cookie.telemetry_key}/e/`;\n    await fetch(url, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      keepalive: true, // survive page unload on checkout_completed\n      body: JSON.stringify({\n        api_key: cookie.telemetry_key, // PostHog's capture body field is always `api_key`\n        event: eventName,\n        distinct_id: cookie.distinct_id,\n        properties: {\n          $lib: 'syntrologie-shopify-pixel',\n          $lib_version: '1.0.0',\n          ...properties,\n        },\n        timestamp: new Date().toISOString(),\n      }),\n    });\n  } catch {\n    // Swallow \u2014 pixel errors must never affect checkout.\n  }\n}\n\nexport function register({\n  analytics,\n  browser,\n}: {\n  analytics: ShopifyAnalytics;\n  browser: ShopifyBrowser;\n}): void {\n  analytics.subscribe('checkout_completed', async (event) => {\n    const cookie = await readCookie(browser);\n    if (!cookie || !event.data.checkout) return;\n    const { checkout } = event.data;\n\n    await capture(cookie, 'checkout_completed', {\n      order_value: checkout.totalPrice.amount,\n      currency: checkout.totalPrice.currencyCode,\n      order_id: checkout.order?.id,\n    });\n  });\n\n  analytics.subscribe('product_added_to_cart', async (event) => {\n    const cookie = await readCookie(browser);\n    if (!cookie) return;\n    const cartLine = event.data.cartLine;\n    if (!cartLine) return;\n\n    await capture(cookie, 'product_added_to_cart', {\n      product_id: cartLine.merchandise.product.id,\n      variant_id: cartLine.merchandise.id,\n      quantity: cartLine.quantity,\n    });\n  });\n}\n\n// Expose on window so the loader snippet can find us after script load.\n// Shopify's lax-sandbox iframe has a real `window`; this is safe.\ndeclare global {\n  interface Window {\n    __SyntroShopifyPixel?: { register: typeof register };\n  }\n}\nif (typeof window !== 'undefined') {\n  window.__SyntroShopifyPixel = { register };\n}\n"],
+  "mappings": ";;AAuCO,MAAM,cAAc;AACpB,MAAM,iBAAiB;;;ACoB9B,iBAAe,WAAW,SAAsD;AAC9E,QAAI;AACF,YAAM,MAAM,MAAM,QAAQ,OAAO,IAAI,WAAW;AAChD,UAAI,CAAC,IAAK,QAAO;AACjB,YAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,UAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,UAAI,OAAO,YAAY,eAAgB,QAAO;AAC9C,UAAI,OAAO,OAAO,gBAAgB,YAAY,OAAO,YAAY,WAAW,EAAG,QAAO;AACtF,UAAI,OAAO,OAAO,mBAAmB,YAAY,CAAC,OAAO,eAAe,WAAW,UAAU;AAC3F,eAAO;AACT,UAAI,OAAO,OAAO,kBAAkB,YAAY,OAAO,cAAc,WAAW,EAAG,QAAO;AAC1F,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAOA,iBAAe,QACb,QACA,WACA,YACe;AACf,QAAI;AACF,YAAM,MAAM,GAAG,OAAO,cAAc,MAAM,OAAO,aAAa;AAC9D,YAAM,MAAM,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,WAAW;AAAA;AAAA,QACX,MAAM,KAAK,UAAU;AAAA,UACnB,SAAS,OAAO;AAAA;AAAA,UAChB,OAAO;AAAA,UACP,aAAa,OAAO;AAAA,UACpB,YAAY;AAAA,YACV,MAAM;AAAA,YACN,cAAc;AAAA,YACd,GAAG;AAAA,UACL;AAAA,UACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC,CAAC;AAAA,MACH,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AAEO,WAAS,SAAS;AAAA,IACvB;AAAA,IACA;AAAA,EACF,GAGS;AACP,cAAU,UAAU,sBAAsB,OAAO,UAAU;AACzD,YAAM,SAAS,MAAM,WAAW,OAAO;AACvC,UAAI,CAAC,UAAU,CAAC,MAAM,KAAK,SAAU;AACrC,YAAM,EAAE,SAAS,IAAI,MAAM;AAE3B,YAAM,QAAQ,QAAQ,sBAAsB;AAAA,QAC1C,aAAa,SAAS,WAAW;AAAA,QACjC,UAAU,SAAS,WAAW;AAAA,QAC9B,UAAU,SAAS,OAAO;AAAA,MAC5B,CAAC;AAAA,IACH,CAAC;AAED,cAAU,UAAU,yBAAyB,OAAO,UAAU;AAC5D,YAAM,SAAS,MAAM,WAAW,OAAO;AACvC,UAAI,CAAC,OAAQ;AACb,YAAM,WAAW,MAAM,KAAK;AAC5B,UAAI,CAAC,SAAU;AAEf,YAAM,QAAQ,QAAQ,yBAAyB;AAAA,QAC7C,YAAY,SAAS,YAAY,QAAQ;AAAA,QACzC,YAAY,SAAS,YAAY;AAAA,QACjC,UAAU,SAAS;AAAA,MACrB,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AASA,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,uBAAuB,EAAE,SAAS;AAAA,EAC3C;",
+  "names": []
+}

package/dist/shopify-pixel.min.js

@@ -0,0 +1,2 @@
+(()=>{var o="syntro_experiments";async function s(t){try{let r=await t.cookie.get(o);if(!r)return null;let e=JSON.parse(r);return!e||typeof e!="object"||e.version!==1||typeof e.distinct_id!="string"||e.distinct_id.length===0||typeof e.telemetry_host!="string"||!e.telemetry_host.startsWith("https://")||typeof e.telemetry_key!="string"||e.telemetry_key.length===0?null:e}catch{return null}}async function c(t,r,e){try{let n=`${t.telemetry_host}/t/${t.telemetry_key}/e/`;await fetch(n,{method:"POST",headers:{"Content-Type":"application/json"},keepalive:!0,body:JSON.stringify({api_key:t.telemetry_key,event:r,distinct_id:t.distinct_id,properties:{$lib:"syntrologie-shopify-pixel",$lib_version:"1.0.0",...e},timestamp:new Date().toISOString()})})}catch{}}function d({analytics:t,browser:r}){t.subscribe("checkout_completed",async e=>{let n=await s(r);if(!n||!e.data.checkout)return;let{checkout:i}=e.data;await c(n,"checkout_completed",{order_value:i.totalPrice.amount,currency:i.totalPrice.currencyCode,order_id:i.order?.id})}),t.subscribe("product_added_to_cart",async e=>{let n=await s(r);if(!n)return;let i=e.data.cartLine;i&&await c(n,"product_added_to_cart",{product_id:i.merchandise.product.id,variant_id:i.merchandise.id,quantity:i.quantity})})}typeof window<"u"&&(window.__SyntroShopifyPixel={register:d});})();
+//# sourceMappingURL=shopify-pixel.min.js.map

package/dist/shopify-pixel.min.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/platform/shopify-cookie-contract.ts", "../src/shopify-pixel-entry.ts"],
+  "sourcesContent": ["/**\n * Shared cookie contract between ShopifyPixelBridge (SDK) and the\n * Shopify Web Pixel extension. Both sides must agree on this format.\n *\n * Cookie name: syntro_experiments (legacy name \u2014 kept for backward compat;\n * the cookie carries telemetry identity, not experiment assignments)\n * Cookie value: JSON-encoded ShopifyPixelCookie\n *\n * The storefront SDK writes a snapshot of its telemetry context \u2014 the\n * PostHog distinct_id, the telemetry proxy host, and the public PostHog\n * project key. The Web Pixel extension runs in Shopify's sandboxed\n * checkout (which cannot reach the SDK), reads this cookie, and posts\n * PostHog-shaped checkout events with the same distinct_id so that\n * checkout events JOIN to the storefront session. PostHog already knows\n * which experiments that shopper is in (via `$experiment_started` events\n * fired from the storefront), so attribution happens server-side without\n * the pixel having to re-transmit assignments.\n *\n * Naming note: the fields are `telemetry_host` / `telemetry_key` \u2014 not\n * `api_host` / `api_key` \u2014 to disambiguate from the other `apiHost`\n * fields in the codebase. This cookie is strictly about telemetry.\n *\n * Forward compat: pixel code must check `version` and reject unknown\n * shapes. Bump `version` when fields are removed or semantics change.\n */\n\nexport interface ShopifyPixelCookie {\n  /** Schema version \u2014 pixel rejects unknown versions. Bump on breaking changes. */\n  version: 1;\n  /** PostHog distinct_id from the storefront SDK, used so checkout events\n   * join onto the pre-checkout session. Required \u2014 without it the pixel\n   * would create a new anonymous user at checkout and the funnel breaks. */\n  distinct_id: string;\n  /** Telemetry proxy host (e.g., `https://telemetry.syntrologie.com`). No trailing slash. */\n  telemetry_host: string;\n  /** Public write-only PostHog key (embedded in the client). */\n  telemetry_key: string;\n}\n\nexport const COOKIE_NAME = 'syntro_experiments';\nexport const COOKIE_VERSION = 1 as const;\n", "/**\n * CDN-hosted Shopify Web Pixel \u2014 bundled to `dist/shopify-pixel.min.js` and\n * served from `cdn.syntrologie.com/runtime-sdk/v2/latest/shopify-pixel.min.js`.\n *\n * Merchants install this by pasting a small loader snippet into Shopify admin\n * under Settings \u2192 Customer events \u2192 Add custom pixel. The loader dynamically\n * loads this file, then calls `window.__SyntroShopifyPixel.register({ analytics, browser })`\n * to wire up subscribers. The indirection means we ship updates to every\n * merchant's pixel by redeploying the CDN file \u2014 merchants never re-paste.\n *\n * The pixel's only job is to forward Shopify checkout events to the\n * Syntrologie PostHog proxy with the shopper's distinct_id attached.\n * Experiment attribution is handled server-side by PostHog \u2014 once the\n * storefront SDK has fired `$experiment_started` for a distinct_id, PostHog\n * associates all future events from that user (including checkout events\n * this pixel posts) with the correct variant.\n *\n * Shopify custom pixels run in a \"lax sandbox\" iframe. Script tag injection\n * works (verified by PostHog, Sentry, GTM following the same pattern). Cookie\n * access is via the async `browser.cookie.get()` API which proxies to the\n * top frame (merchant storefront domain), so the `syntro_experiments` cookie\n * written by `ShopifyPixelBridge` on the storefront is readable here.\n *\n * All errors swallowed \u2014 a pixel failure must never disturb checkout.\n */\n\nimport { COOKIE_NAME, COOKIE_VERSION } from './platform/shopify-cookie-contract';\n\ninterface ShopifyAnalytics {\n  subscribe(eventName: string, handler: (event: ShopifyPixelEvent) => void | Promise<void>): void;\n}\n\ninterface ShopifyBrowserCookie {\n  get(name: string): Promise<string | undefined>;\n}\n\ninterface ShopifyBrowser {\n  cookie: ShopifyBrowserCookie;\n}\n\ninterface ShopifyPixelEvent {\n  data: {\n    checkout?: {\n      totalPrice: { amount: string | number; currencyCode: string };\n      order?: { id: string };\n    };\n    cartLine?: {\n      merchandise: { id: string; product: { id: string } };\n      quantity: number;\n    };\n  };\n}\n\ninterface PixelCookie {\n  version: number;\n  distinct_id: string;\n  telemetry_host: string;\n  telemetry_key: string;\n}\n\nasync function readCookie(browser: ShopifyBrowser): Promise<PixelCookie | null> {\n  try {\n    const raw = await browser.cookie.get(COOKIE_NAME);\n    if (!raw) return null;\n    const parsed = JSON.parse(raw);\n    if (!parsed || typeof parsed !== 'object') return null;\n    if (parsed.version !== COOKIE_VERSION) return null;\n    if (typeof parsed.distinct_id !== 'string' || parsed.distinct_id.length === 0) return null;\n    if (typeof parsed.telemetry_host !== 'string' || !parsed.telemetry_host.startsWith('https://'))\n      return null;\n    if (typeof parsed.telemetry_key !== 'string' || parsed.telemetry_key.length === 0) return null;\n    return parsed as PixelCookie;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * POST an event to the PostHog capture endpoint via the Syntrologie proxy.\n * URL shape: `{telemetry_host}/t/{telemetry_key}/e/` \u2014 see\n * `packages/runtime-sdk/src/telemetry/adapters/posthog.ts` for the convention.\n */\nasync function capture(\n  cookie: PixelCookie,\n  eventName: string,\n  properties: Record<string, unknown>\n): Promise<void> {\n  try {\n    const url = `${cookie.telemetry_host}/t/${cookie.telemetry_key}/e/`;\n    await fetch(url, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      keepalive: true, // survive page unload on checkout_completed\n      body: JSON.stringify({\n        api_key: cookie.telemetry_key, // PostHog's capture body field is always `api_key`\n        event: eventName,\n        distinct_id: cookie.distinct_id,\n        properties: {\n          $lib: 'syntrologie-shopify-pixel',\n          $lib_version: '1.0.0',\n          ...properties,\n        },\n        timestamp: new Date().toISOString(),\n      }),\n    });\n  } catch {\n    // Swallow \u2014 pixel errors must never affect checkout.\n  }\n}\n\nexport function register({\n  analytics,\n  browser,\n}: {\n  analytics: ShopifyAnalytics;\n  browser: ShopifyBrowser;\n}): void {\n  analytics.subscribe('checkout_completed', async (event) => {\n    const cookie = await readCookie(browser);\n    if (!cookie || !event.data.checkout) return;\n    const { checkout } = event.data;\n\n    await capture(cookie, 'checkout_completed', {\n      order_value: checkout.totalPrice.amount,\n      currency: checkout.totalPrice.currencyCode,\n      order_id: checkout.order?.id,\n    });\n  });\n\n  analytics.subscribe('product_added_to_cart', async (event) => {\n    const cookie = await readCookie(browser);\n    if (!cookie) return;\n    const cartLine = event.data.cartLine;\n    if (!cartLine) return;\n\n    await capture(cookie, 'product_added_to_cart', {\n      product_id: cartLine.merchandise.product.id,\n      variant_id: cartLine.merchandise.id,\n      quantity: cartLine.quantity,\n    });\n  });\n}\n\n// Expose on window so the loader snippet can find us after script load.\n// Shopify's lax-sandbox iframe has a real `window`; this is safe.\ndeclare global {\n  interface Window {\n    __SyntroShopifyPixel?: { register: typeof register };\n  }\n}\nif (typeof window !== 'undefined') {\n  window.__SyntroShopifyPixel = { register };\n}\n"],
+  "mappings": "MAuCO,IAAMA,EAAc,qBCqB3B,eAAeC,EAAWC,EAAsD,CAC9E,GAAI,CACF,IAAMC,EAAM,MAAMD,EAAQ,OAAO,IAAIE,CAAW,EAChD,GAAI,CAACD,EAAK,OAAO,KACjB,IAAME,EAAS,KAAK,MAAMF,CAAG,EAM7B,MALI,CAACE,GAAU,OAAOA,GAAW,UAC7BA,EAAO,UAAY,GACnB,OAAOA,EAAO,aAAgB,UAAYA,EAAO,YAAY,SAAW,GACxE,OAAOA,EAAO,gBAAmB,UAAY,CAACA,EAAO,eAAe,WAAW,UAAU,GAEzF,OAAOA,EAAO,eAAkB,UAAYA,EAAO,cAAc,SAAW,EAAU,KACnFA,CACT,MAAQ,CACN,OAAO,IACT,CACF,CAOA,eAAeC,EACbC,EACAC,EACAC,EACe,CACf,GAAI,CACF,IAAMC,EAAM,GAAGH,EAAO,cAAc,MAAMA,EAAO,aAAa,MAC9D,MAAM,MAAMG,EAAK,CACf,OAAQ,OACR,QAAS,CAAE,eAAgB,kBAAmB,EAC9C,UAAW,GACX,KAAM,KAAK,UAAU,CACnB,QAASH,EAAO,cAChB,MAAOC,EACP,YAAaD,EAAO,YACpB,WAAY,CACV,KAAM,4BACN,aAAc,QACd,GAAGE,CACL,EACA,UAAW,IAAI,KAAK,EAAE,YAAY,CACpC,CAAC,CACH,CAAC,CACH,MAAQ,CAER,CACF,CAEO,SAASE,EAAS,CACvB,UAAAC,EACA,QAAAV,CACF,EAGS,CACPU,EAAU,UAAU,qBAAsB,MAAOC,GAAU,CACzD,IAAMN,EAAS,MAAMN,EAAWC,CAAO,EACvC,GAAI,CAACK,GAAU,CAACM,EAAM,KAAK,SAAU,OACrC,GAAM,CAAE,SAAAC,CAAS,EAAID,EAAM,KAE3B,MAAMP,EAAQC,EAAQ,qBAAsB,CAC1C,YAAaO,EAAS,WAAW,OACjC,SAAUA,EAAS,WAAW,aAC9B,SAAUA,EAAS,OAAO,EAC5B,CAAC,CACH,CAAC,EAEDF,EAAU,UAAU,wBAAyB,MAAOC,GAAU,CAC5D,IAAMN,EAAS,MAAMN,EAAWC,CAAO,EACvC,GAAI,CAACK,EAAQ,OACb,IAAMQ,EAAWF,EAAM,KAAK,SACvBE,GAEL,MAAMT,EAAQC,EAAQ,wBAAyB,CAC7C,WAAYQ,EAAS,YAAY,QAAQ,GACzC,WAAYA,EAAS,YAAY,GACjC,SAAUA,EAAS,QACrB,CAAC,CACH,CAAC,CACH,CASI,OAAO,OAAW,MACpB,OAAO,qBAAuB,CAAE,SAAAJ,CAAS",
+  "names": ["COOKIE_NAME", "readCookie", "browser", "raw", "COOKIE_NAME", "parsed", "capture", "cookie", "eventName", "properties", "url", "register", "analytics", "event", "checkout", "cartLine"]
+}