@tagadapay/headless-sdk 1.14.1 → 1.16.0

package/dist/pixels/engine.d.ts

@@ -0,0 +1,56 @@
+/**
+ * The browser pixel engine.
+ *
+ * It wraps the lifted `createPixelTracker` with three things the hosted runtime
+ * does not need: it stays inert until `init()`, it gates every fire on the
+ * per-step configuration served by the SDK config route, and it reports what it
+ * could not do (a pixel already on the page, a pixel blocked by the CSP).
+ */
+import type { PixelRawIdentity } from './pixelIdentity.js';
+import type { PixelProviderKey, StandardPixelEvent } from './pixelMapping.js';
+import type { PixelsConfig } from './types.js';
+export type PixelSignalKind = 'pixel_blocked' | 'pixel_duplicate';
+export interface PixelSignal {
+    kind: PixelSignalKind;
+    provider: PixelProviderKey;
+    detail: Record<string, string>;
+}
+export type SdkPixelProvider = 'facebook' | 'tiktok' | 'snapchat' | 'gtm' | 'clarity';
+export declare const SDK_PIXEL_PROVIDERS: readonly SdkPixelProvider[];
+export interface PixelEngineConfig {
+    pixels: PixelsConfig;
+    /** Keyed by the MANIFEST step id (`sdk_steps.key`, e.g. `paywall`) — the id the merchant passes to
+        `track.step()` — never the `sdkstep_…` node id. R4 re-keys onto it server-side (contract §6). */
+    steps?: Record<string, {
+        type?: string;
+        events: Record<string, PixelProviderKey[]>;
+    }>;
+    checkout?: {
+        InitiateCheckout?: PixelProviderKey[];
+        Purchase?: PixelProviderKey[];
+    };
+    requireConsent?: boolean;
+    onSignal?: (signal: PixelSignal) => void;
+}
+export interface PixelEngine {
+    init(): Promise<void>;
+    pageView(path: string, options?: {
+        stepId?: string;
+    }): void;
+    track(event: StandardPixelEvent, data?: Record<string, unknown>, options?: {
+        eventId?: string;
+        stepId?: string;
+    }): void;
+    trackCustom(name: string, data?: Record<string, unknown>, options?: {
+        stepId?: string;
+    }): void;
+    identify(identity: PixelRawIdentity): void;
+    consent(state: {
+        marketing: boolean;
+    }): void;
+    destroy(): void;
+}
+/** The single origin each provider's loader fetches its script from; the drift test pins it. */
+export declare const SCRIPT_ORIGINS: Record<SdkPixelProvider, string>;
+export declare function createPixelEngine(config: PixelEngineConfig): PixelEngine;
+//# sourceMappingURL=engine.d.ts.map

package/dist/pixels/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/pixels/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAG9E,OAAO,KAAK,EAAe,YAAY,EAAE,MAAM,YAAY,CAAC;AAE5D,MAAM,MAAM,eAAe,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAClE,MAAM,WAAW,WAAW;IAAG,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE;AAClH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,KAAK,GAAG,SAAS,CAAC;AACtF,eAAO,MAAM,mBAAmB,EAAE,SAAS,gBAAgB,EAAyD,CAAC;AAErH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,YAAY,CAAC;IACrB;wGACoG;IACpG,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IACtF,QAAQ,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,gBAAgB,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IACpF,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5D,KAAK,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACxH,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/F,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C,OAAO,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7C,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,gGAAgG;AAChG,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAI3D,CAAC;AAwCF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,WAAW,CA+KxE"}

package/dist/pixels/engine.js

@@ -0,0 +1,263 @@
+import { pixelIdKeyOf } from './pixelMapping.js';
+import { createPixelTracker, isSafePixelId } from './pixelTracker.js';
+export const SDK_PIXEL_PROVIDERS = ['facebook', 'tiktok', 'snapchat', 'gtm', 'clarity'];
+/** The single origin each provider's loader fetches its script from; the drift test pins it. */
+export const SCRIPT_ORIGINS = {
+    facebook: 'https://connect.facebook.net', tiktok: 'https://analytics.tiktok.com',
+    snapchat: 'https://sc-static.net', gtm: 'https://www.googletagmanager.com',
+    clarity: 'https://www.clarity.ms',
+};
+/** The global a provider's own script installs; its presence means a second tag is on the page. */
+const PROVIDER_GLOBALS = {
+    facebook: 'fbq', tiktok: 'ttq', snapchat: 'snaptr', gtm: 'dataLayer', clarity: 'clarity',
+};
+/* eslint-enable @typescript-eslint/no-explicit-any */
+const QUEUE_LIMIT = 50;
+/** Same window as the SDK's own step dedup: React StrictMode double-renders, nothing more. */
+const PAGE_VIEW_DEDUP_MS = 1000;
+function isSdkProvider(provider) {
+    return SDK_PIXEL_PROVIDERS.includes(provider);
+}
+/** The five SDK providers and nothing else, copied key by key: a spread would carry `pinterest` through. */
+function filterPixels(pixels) {
+    const out = {};
+    if (pixels.facebook)
+        out.facebook = pixels.facebook;
+    if (pixels.tiktok)
+        out.tiktok = pixels.tiktok;
+    if (pixels.snapchat)
+        out.snapchat = pixels.snapchat;
+    if (pixels.gtm)
+        out.gtm = pixels.gtm;
+    if (pixels.clarity)
+        out.clarity = pixels.clarity;
+    return out;
+}
+function entriesOf(pixels, provider) {
+    const list = pixels[provider];
+    return Array.isArray(list) ? list : [];
+}
+function usableIdOf(pixel) {
+    const value = pixel[pixelIdKeyOf(pixel)];
+    return isSafePixelId(value) ? value.trim() : null;
+}
+export function createPixelEngine(config) {
+    const pixels = filterPixels(config.pixels);
+    const trackers = new Map();
+    /** `stepId|path` → when it last fired. A window, not a page-lifetime latch: an SPA that comes
+        back to a step later in the session must count as a second page view. */
+    const seen = new Map();
+    const signalled = new Set();
+    const queue = [];
+    let granted = config.requireConsent !== true;
+    let latchedOff = false;
+    let started = false;
+    let cspHandler = null;
+    const signal = (kind, provider, detail) => {
+        const key = `${provider}|${kind}`;
+        if (signalled.has(key))
+            return;
+        signalled.add(key);
+        try {
+            config.onSignal?.({ kind, provider, detail });
+        }
+        catch { /* a consumer callback never breaks a page */ }
+    };
+    const configuredProviders = () => SDK_PIXEL_PROVIDERS.filter((provider) => entriesOf(pixels, provider).length > 0);
+    const gateFor = (event, stepId) => {
+        const raw = event === 'InitiateCheckout' || event === 'Purchase'
+            ? config.checkout?.[event] ?? []
+            : config.steps?.[stepId ?? '']?.events?.[event] ?? [];
+        return raw.filter(isSdkProvider);
+    };
+    const detectDuplicates = (win) => {
+        for (const provider of configuredProviders()) {
+            const host = typeof win.location?.host === 'string' ? win.location.host : '';
+            if (provider === 'gtm') {
+                const loaded = win.google_tag_manager;
+                const clash = entriesOf(pixels, 'gtm').some((px) => {
+                    const id = usableIdOf(px);
+                    return id !== null && loaded?.[id] !== undefined;
+                });
+                if (clash)
+                    signal('pixel_duplicate', 'gtm', { origin: host });
+                continue;
+            }
+            if (win[PROVIDER_GLOBALS[provider]] !== undefined)
+                signal('pixel_duplicate', provider, { origin: host });
+        }
+    };
+    const watchCsp = (win) => {
+        cspHandler = (event) => {
+            const violation = event;
+            const blocked = typeof violation.blockedURI === 'string' ? violation.blockedURI : '';
+            for (const provider of SDK_PIXEL_PROVIDERS) {
+                if (!blocked.startsWith(SCRIPT_ORIGINS[provider]))
+                    continue;
+                signal('pixel_blocked', provider, { reason: 'csp', directive: violation.violatedDirective ?? '' });
+                return;
+            }
+        };
+        win.addEventListener('securitypolicyviolation', cspHandler);
+    };
+    const enqueue = (run) => {
+        if (latchedOff)
+            return;
+        if (queue.length >= QUEUE_LIMIT)
+            queue.shift();
+        queue.push(run);
+    };
+    const guardEventId = (eventId) => {
+        try {
+            if (sessionStorage.getItem(`__tgd_px:${eventId}`))
+                return false;
+        }
+        catch { /* private mode */ }
+        return true;
+    };
+    const markEventId = (eventId) => {
+        try {
+            sessionStorage.setItem(`__tgd_px:${eventId}`, '1');
+        }
+        catch { /* private mode */ }
+    };
+    const engine = {
+        async init() {
+            if (started || typeof window === 'undefined')
+                return;
+            if (!granted)
+                return;
+            started = true;
+            const win = window;
+            detectDuplicates(win);
+            watchCsp(win);
+            const ready = [];
+            for (const provider of configuredProviders()) {
+                // One tracker per provider: the lifted tracker fires to every provider of its own
+                // config, so a per-provider gate needs a per-provider tracker.
+                const tracker = createPixelTracker({ [provider]: entriesOf(pixels, provider) }, { autoPageView: false });
+                trackers.set(provider, tracker);
+                ready.push(tracker.initPromise);
+            }
+            // `track()` no-ops until `pixelsInitialized` flips, which only happens when these settle.
+            await Promise.all(ready);
+        },
+        pageView(path, options) {
+            if (typeof window === 'undefined')
+                return;
+            if (!granted) {
+                enqueue(() => engine.pageView(path, options));
+                return;
+            }
+            const key = `${options?.stepId ?? ''}|${path}`;
+            const now = Date.now();
+            const previous = seen.get(key);
+            if (previous !== undefined && now - previous < PAGE_VIEW_DEDUP_MS)
+                return;
+            for (const [other, when] of seen)
+                if (now - when >= PAGE_VIEW_DEDUP_MS)
+                    seen.delete(other);
+            seen.set(key, now);
+            const allowed = gateFor('PageView', options?.stepId);
+            if (allowed.length === 0)
+                return;
+            // A per-step id, and a per-fire one: two steps on one path would otherwise collapse into a
+            // single fire inside the tracker's own 5 s duplicate guard, and so would a genuine return
+            // to the same step later in the session.
+            for (const provider of allowed)
+                trackers.get(provider)?.track('PageView', { path }, { eventId: `PageView_${key}|${now}` });
+        },
+        track(event, data, options) {
+            if (typeof window === 'undefined')
+                return;
+            if (!granted) {
+                enqueue(() => engine.track(event, data, options));
+                return;
+            }
+            if (event === 'InitiateCheckout' || event === 'Purchase') {
+                if (!options?.eventId)
+                    return;
+                if (!guardEventId(options.eventId))
+                    return;
+            }
+            const allowed = gateFor(event, options?.stepId);
+            if (allowed.length === 0)
+                return;
+            for (const provider of allowed) {
+                trackers.get(provider)?.track(event, data ?? {}, options?.eventId ? { eventId: options.eventId } : undefined);
+            }
+            if (options?.eventId)
+                markEventId(options.eventId);
+        },
+        trackCustom(name, data, options) {
+            if (typeof window === 'undefined')
+                return;
+            if (!granted) {
+                enqueue(() => engine.trackCustom(name, data, options));
+                return;
+            }
+            const win = window;
+            const params = data ?? {};
+            for (const provider of gateFor(name, options?.stepId)) {
+                for (const px of entriesOf(pixels, provider)) {
+                    if (!px.enabled)
+                        continue;
+                    const id = usableIdOf(px);
+                    if (id === null)
+                        continue;
+                    switch (provider) {
+                        // `trackSingle` with a custom name is read by Meta as an unknown standard event.
+                        case 'facebook':
+                            win.fbq?.('trackSingleCustom', id, name, params);
+                            break;
+                        case 'tiktok':
+                            win.ttq?.instance?.(id)?.track?.(name, params);
+                            break;
+                        // Snap offers no per-pixel target: the global broadcasts to every Snap pixel.
+                        case 'snapchat':
+                            win.snaptr?.('track', name, params);
+                            break;
+                        case 'gtm':
+                            win.gtag?.('event', name, params);
+                            break;
+                        case 'clarity':
+                            win.clarity?.('event', name);
+                            break;
+                    }
+                }
+            }
+        },
+        identify(identity) {
+            if (typeof window === 'undefined')
+                return;
+            for (const tracker of trackers.values())
+                tracker.identify(identity);
+        },
+        consent(state) {
+            if (!state.marketing) {
+                queue.length = 0;
+                latchedOff = true;
+                granted = false;
+                return;
+            }
+            if (latchedOff || granted)
+                return;
+            granted = true;
+            void engine.init().then(() => {
+                const pending = queue.splice(0, queue.length);
+                for (const run of pending)
+                    run();
+            });
+        },
+        destroy() {
+            queue.length = 0;
+            if (cspHandler && typeof window !== 'undefined') {
+                window.removeEventListener('securitypolicyviolation', cspHandler);
+            }
+            cspHandler = null;
+            trackers.clear();
+        },
+    };
+    return engine;
+}
+//# sourceMappingURL=engine.js.map

package/dist/pixels/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/pixels/engine.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAOtE,MAAM,CAAC,MAAM,mBAAmB,GAAgC,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAsBrH,gGAAgG;AAChG,MAAM,CAAC,MAAM,cAAc,GAAqC;IAC9D,QAAQ,EAAE,8BAA8B,EAAE,MAAM,EAAE,8BAA8B;IAChF,QAAQ,EAAE,uBAAuB,EAAE,GAAG,EAAE,kCAAkC;IAC1E,OAAO,EAAE,wBAAwB;CAClC,CAAC;AAEF,mGAAmG;AACnG,MAAM,gBAAgB,GAAqC;IACzD,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS;CACzF,CAAC;AAIF,sDAAsD;AAEtD,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,8FAA8F;AAC9F,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAQ,mBAAyC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACvE,CAAC;AAED,4GAA4G;AAC5G,SAAS,YAAY,CAAC,MAAoB;IACxC,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,IAAI,MAAM,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACpD,IAAI,MAAM,CAAC,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,IAAI,MAAM,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACpD,IAAI,MAAM,CAAC,GAAG;QAAE,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACrC,IAAI,MAAM,CAAC,OAAO;QAAE,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACjD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,MAAoB,EAAE,QAA0B;IACjE,MAAM,IAAI,GAAI,MAAoD,CAAC,QAAQ,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,KAAkB;IACpC,MAAM,KAAK,GAAI,KAA4C,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IACjF,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC3D;gFAC4E;IAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,IAAI,OAAO,GAAG,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC;IAC7C,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,UAAU,GAAoC,IAAI,CAAC;IAEvD,MAAM,MAAM,GAAG,CAAC,IAAqB,EAAE,QAA0B,EAAE,MAA8B,EAAQ,EAAE;QACzG,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC/B,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,6CAA6C,CAAC,CAAC;IAChH,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,GAAuB,EAAE,CACnD,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEnF,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,MAAe,EAAsB,EAAE;QACrE,MAAM,GAAG,GAAG,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,UAAU;YAC9D,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE;YAChC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxD,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,GAAiB,EAAQ,EAAE;QACnD,KAAK,MAAM,QAAQ,IAAI,mBAAmB,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,GAAG,CAAC,kBAAkB,CAAC;gBACtC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;oBACjD,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;oBAC1B,OAAO,EAAE,KAAK,IAAI,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC;gBACnD,CAAC,CAAC,CAAC;gBACH,IAAI,KAAK;oBAAE,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9D,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,KAAK,SAAS;gBAAE,MAAM,CAAC,iBAAiB,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,GAAiB,EAAQ,EAAE;QAC3C,UAAU,GAAG,CAAC,KAAY,EAAQ,EAAE;YAClC,MAAM,SAAS,GAAG,KAAqC,CAAC;YACxD,MAAM,OAAO,GAAG,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,KAAK,MAAM,QAAQ,IAAI,mBAAmB,EAAE,CAAC;gBAC3C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;oBAAE,SAAS;gBAC5D,MAAM,CAAC,eAAe,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,iBAAiB,IAAI,EAAE,EAAE,CAAC,CAAC;gBACnG,OAAO;YACT,CAAC;QACH,CAAC,CAAC;QACF,GAAG,CAAC,gBAAgB,CAAC,yBAAyB,EAAE,UAAU,CAAC,CAAC;IAC9D,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,GAAe,EAAQ,EAAE;QACxC,IAAI,UAAU;YAAE,OAAO;QACvB,IAAI,KAAK,CAAC,MAAM,IAAI,WAAW;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,OAAe,EAAW,EAAE;QAChD,IAAI,CAAC;YAAC,IAAI,cAAc,CAAC,OAAO,CAAC,YAAY,OAAO,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACrG,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,OAAe,EAAQ,EAAE;QAC5C,IAAI,CAAC;YAAC,cAAc,CAAC,OAAO,CAAC,YAAY,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC1F,CAAC,CAAC;IAEF,MAAM,MAAM,GAAgB;QAC1B,KAAK,CAAC,IAAI;YACR,IAAI,OAAO,IAAI,OAAO,MAAM,KAAK,WAAW;gBAAE,OAAO;YACrD,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,GAAG,GAAG,MAAiC,CAAC;YAC9C,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACtB,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,KAAK,GAAoB,EAAE,CAAC;YAClC,KAAK,MAAM,QAAQ,IAAI,mBAAmB,EAAE,EAAE,CAAC;gBAC7C,kFAAkF;gBAClF,+DAA+D;gBAC/D,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAkB,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;gBACzH,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAClC,CAAC;YACD,0FAA0F;YAC1F,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAED,QAAQ,CAAC,IAAI,EAAE,OAAO;YACpB,IAAI,OAAO,MAAM,KAAK,WAAW;gBAAE,OAAO;YAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACxE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,MAAM,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,QAAQ,KAAK,SAAS,IAAI,GAAG,GAAG,QAAQ,GAAG,kBAAkB;gBAAE,OAAO;YAC1E,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI;gBAAE,IAAI,GAAG,GAAG,IAAI,IAAI,kBAAkB;oBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3F,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACnB,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YACjC,2FAA2F;YAC3F,0FAA0F;YAC1F,yCAAyC;YACzC,KAAK,MAAM,QAAQ,IAAI,OAAO;gBAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7H,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO;YACxB,IAAI,OAAO,MAAM,KAAK,WAAW;gBAAE,OAAO;YAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC5E,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;gBACzD,IAAI,CAAC,OAAO,EAAE,OAAO;oBAAE,OAAO;gBAC9B,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC;oBAAE,OAAO;YAC7C,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YACjC,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;gBAC/B,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAChH,CAAC;YACD,IAAI,OAAO,EAAE,OAAO;gBAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrD,CAAC;QAED,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO;YAC7B,IAAI,OAAO,MAAM,KAAK,WAAW;gBAAE,OAAO;YAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACjF,MAAM,GAAG,GAAG,MAAiC,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YAC1B,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;gBACtD,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAC7C,IAAI,CAAC,EAAE,CAAC,OAAO;wBAAE,SAAS;oBAC1B,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;oBAC1B,IAAI,EAAE,KAAK,IAAI;wBAAE,SAAS;oBAC1B,QAAQ,QAAQ,EAAE,CAAC;wBACjB,iFAAiF;wBACjF,KAAK,UAAU;4BAAE,GAAG,CAAC,GAAG,EAAE,CAAC,mBAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;4BAAC,MAAM;wBACzE,KAAK,QAAQ;4BAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;4BAAC,MAAM;wBACrE,8EAA8E;wBAC9E,KAAK,UAAU;4BAAE,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;4BAAC,MAAM;wBAC5D,KAAK,KAAK;4BAAE,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;4BAAC,MAAM;wBACrD,KAAK,SAAS;4BAAE,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;4BAAC,MAAM;oBACtD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,QAAQ;YACf,IAAI,OAAO,MAAM,KAAK,WAAW;gBAAE,OAAO;YAC1C,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;gBAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,CAAC,KAAK;YACX,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;gBAAC,UAAU,GAAG,IAAI,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;gBAAC,OAAO;YAAC,CAAC;YACvF,IAAI,UAAU,IAAI,OAAO;gBAAE,OAAO;YAClC,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9C,KAAK,MAAM,GAAG,IAAI,OAAO;oBAAE,GAAG,EAAE,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YACjB,IAAI,UAAU,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;gBAChD,MAAM,CAAC,mBAAmB,CAAC,yBAAyB,EAAE,UAAU,CAAC,CAAC;YACpE,CAAC;YACD,UAAU,GAAG,IAAI,CAAC;YAClB,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;KACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/pixels/index.d.ts

@@ -0,0 +1,10 @@
+export { createPixelEngine, SDK_PIXEL_PROVIDERS } from './engine.js';
+export type { PixelEngine, PixelEngineConfig, PixelSignal, PixelSignalKind, SdkPixelProvider, } from './engine.js';
+export { makeMetaEventId } from './metaEventId.js';
+export { bootstrapPixelTrackerFromWindow, createPixelTracker, isSafePixelId } from './pixelTracker.js';
+export type { PixelTracker, TrackOptions } from './pixelTracker.js';
+export { buildGa4PurchasePayload, getEligiblePixels, isEventEnabled, pixelIdKeyOf, resolvePixelEvents } from './pixelMapping.js';
+export type { PixelProviderKey, StandardPixelEvent } from './pixelMapping.js';
+export type { PixelRawIdentity } from './pixelIdentity.js';
+export type { PixelConfig, PixelsConfig } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/pixels/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/pixels/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACrE,YAAY,EACV,WAAW,EAAE,iBAAiB,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,GAC/E,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,+BAA+B,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvG,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACjI,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC9E,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}

package/dist/pixels/index.js

@@ -0,0 +1,5 @@
+export { createPixelEngine, SDK_PIXEL_PROVIDERS } from './engine.js';
+export { makeMetaEventId } from './metaEventId.js';
+export { bootstrapPixelTrackerFromWindow, createPixelTracker, isSafePixelId } from './pixelTracker.js';
+export { buildGa4PurchasePayload, getEligiblePixels, isEventEnabled, pixelIdKeyOf, resolvePixelEvents } from './pixelMapping.js';
+//# sourceMappingURL=index.js.map

package/dist/pixels/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/pixels/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAKrE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,+BAA+B,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvG,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/pixels/metaEventId.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Stable event_id helper for Meta CAPI / browser pixel deduplication.
+ *
+ * The browser side (`fbq('track', name, params, { eventID })`) and the server
+ * side (`ServerEvent.setEventId(...)`) must publish the same value to let Meta
+ * dedup. This helper is the single source of truth for the formula, mirrored
+ * on the server in `src/app/services/meta/meta-event-id.ts`. A parity test in
+ * the server package keeps them byte-identical.
+ *
+ * Convention: `${eventName}_${entityId}`. Different event names get different
+ * IDs even when fired for the same entity (e.g. a Purchase + Subscribe pair on
+ * the same order), so each dedups independently.
+ */
+export declare function makeMetaEventId(eventName: string, entityId: string): string;
+//# sourceMappingURL=metaEventId.d.ts.map

package/dist/pixels/metaEventId.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metaEventId.d.ts","sourceRoot":"","sources":["../../src/pixels/metaEventId.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3E"}

package/dist/pixels/metaEventId.js

@@ -0,0 +1,17 @@
+/**
+ * Stable event_id helper for Meta CAPI / browser pixel deduplication.
+ *
+ * The browser side (`fbq('track', name, params, { eventID })`) and the server
+ * side (`ServerEvent.setEventId(...)`) must publish the same value to let Meta
+ * dedup. This helper is the single source of truth for the formula, mirrored
+ * on the server in `src/app/services/meta/meta-event-id.ts`. A parity test in
+ * the server package keeps them byte-identical.
+ *
+ * Convention: `${eventName}_${entityId}`. Different event names get different
+ * IDs even when fired for the same entity (e.g. a Purchase + Subscribe pair on
+ * the same order), so each dedups independently.
+ */
+export function makeMetaEventId(eventName, entityId) {
+    return `${eventName}_${entityId}`;
+}
+//# sourceMappingURL=metaEventId.js.map

package/dist/pixels/metaEventId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metaEventId.js","sourceRoot":"","sources":["../../src/pixels/metaEventId.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,QAAgB;IACjE,OAAO,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC;AACpC,CAAC"}

package/dist/pixels/pixelIdentity.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Client-side identity hashing for pixel advanced matching.
+ *
+ * Framework-agnostic (no DOM). Normalizes + SHA-256-hashes the customer
+ * identifiers (email / phone / external id) so the tracker can feed match
+ * keys to Snapchat (`user_hashed_email`/`user_hashed_phone_number`) and TikTok
+ * (`ttq.identify`). We hash in the browser ourselves so raw PII never leaves
+ * the page — TikTok requires pre-hashed values anyway, and Snap/Meta accept
+ * pre-hashed too.
+ */
+export interface PixelRawIdentity {
+    /** Raw email (any case). */
+    email?: string;
+    /** Raw phone in any format. */
+    phone?: string;
+    /** Stable external id (e.g. Tagada customer id). */
+    externalId?: string;
+}
+export interface PixelHashedIdentity {
+    /** SHA-256 hex of the normalized email. */
+    email?: string;
+    /** SHA-256 hex of the E.164-normalized phone. */
+    phone?: string;
+    /** SHA-256 hex of the trimmed external id. */
+    externalId?: string;
+}
+/** True when SubtleCrypto is usable (secure context). */
+export declare function canHashIdentity(): boolean;
+/**
+ * Hash whichever identifiers are present. Empty/whitespace-only fields are
+ * skipped so we never emit a hash of "". Returns `{}` when nothing usable.
+ */
+export declare function buildHashedIdentity(id: PixelRawIdentity): Promise<PixelHashedIdentity>;
+//# sourceMappingURL=pixelIdentity.d.ts.map

package/dist/pixels/pixelIdentity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pixelIdentity.d.ts","sourceRoot":"","sources":["../../src/pixels/pixelIdentity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,4BAA4B;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA6BD,yDAAyD;AACzD,wBAAgB,eAAe,IAAI,OAAO,CAMzC;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAiB5F"}

package/dist/pixels/pixelIdentity.js

@@ -0,0 +1,65 @@
+/**
+ * Client-side identity hashing for pixel advanced matching.
+ *
+ * Framework-agnostic (no DOM). Normalizes + SHA-256-hashes the customer
+ * identifiers (email / phone / external id) so the tracker can feed match
+ * keys to Snapchat (`user_hashed_email`/`user_hashed_phone_number`) and TikTok
+ * (`ttq.identify`). We hash in the browser ourselves so raw PII never leaves
+ * the page — TikTok requires pre-hashed values anyway, and Snap/Meta accept
+ * pre-hashed too.
+ */
+/** Lowercase + trim — the normalization Meta/Snap/TikTok all expect for email. */
+function normalizeEmail(email) {
+    return email.trim().toLowerCase();
+}
+/**
+ * Normalize to E.164-ish: keep a single leading `+` (if present) and digits.
+ * Snap and TikTok both expect E.164 with the country-code `+`, so a single
+ * hash satisfies both. (Meta wants digits-only — add a per-provider variant
+ * here if Meta browser matching is added later.)
+ */
+function normalizePhone(phone) {
+    const trimmed = phone.trim();
+    const hasPlus = trimmed.startsWith('+');
+    const digits = trimmed.replace(/[^0-9]/g, '');
+    if (!digits)
+        return '';
+    return (hasPlus ? '+' : '') + digits;
+}
+async function sha256Hex(input) {
+    const data = new TextEncoder().encode(input);
+    const buf = await crypto.subtle.digest('SHA-256', data);
+    return Array.from(new Uint8Array(buf))
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('');
+}
+/** True when SubtleCrypto is usable (secure context). */
+export function canHashIdentity() {
+    return (typeof crypto !== 'undefined' &&
+        typeof crypto.subtle !== 'undefined' &&
+        typeof crypto.subtle.digest === 'function');
+}
+/**
+ * Hash whichever identifiers are present. Empty/whitespace-only fields are
+ * skipped so we never emit a hash of "". Returns `{}` when nothing usable.
+ */
+export async function buildHashedIdentity(id) {
+    const out = {};
+    if (id.email) {
+        const n = normalizeEmail(id.email);
+        if (n)
+            out.email = await sha256Hex(n);
+    }
+    if (id.phone) {
+        const n = normalizePhone(id.phone);
+        if (n)
+            out.phone = await sha256Hex(n);
+    }
+    if (id.externalId) {
+        const n = id.externalId.trim();
+        if (n)
+            out.externalId = await sha256Hex(n);
+    }
+    return out;
+}
+//# sourceMappingURL=pixelIdentity.js.map

package/dist/pixels/pixelIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pixelIdentity.js","sourceRoot":"","sources":["../../src/pixels/pixelIdentity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAoBH,kFAAkF;AAClF,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAa;IACpC,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,eAAe;IAC7B,OAAO,CACL,OAAO,MAAM,KAAK,WAAW;QAC7B,OAAO,MAAM,CAAC,MAAM,KAAK,WAAW;QACpC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAC3C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAoB;IAC5D,MAAM,GAAG,GAAwB,EAAE,CAAC;IAEpC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC;YAAE,GAAG,CAAC,KAAK,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC;YAAE,GAAG,CAAC,KAAK,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC;YAAE,GAAG,CAAC,UAAU,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}