@tinkerlandai/indiana-sdk 0.8.1 → 0.8.4

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 Release facts and artifact evidence: [SDK release ledger](../../docs/sdk-releases.md).
 
+## 0.8.4 — 2026-10-26
+
+- Add `prepareContent` and `preparePopup` to render authorized content before the opening click and reveal the same iframe on demand.
+- Prepare bounded HTML DOM templates for supplied pages and Product variants; update variable text in place while preserving styles, images and unrelated content. Reuse inactive variants with empty variable slots.
+- Prepare Local Funnel rule definitions once per pure segment and send advance signals without waiting for advisory prediction downloads. Late predictions remain fenced by Run position and identity.
+- Synchronize the packaged Web, iOS and Android renderers. Retain HTTP protocol 0.8 and server authority over Funnel acceptance and commercial operations.
+- Refresh generated native Paywall Coupon applicability schemas from the current Merchandise contract.
+
+## 0.8.3 — 2026-10-26
+
+- Refresh sanitized custom HTML fallback content when Product availability changes.
+- Preserve the selected Product across empty availability refreshes, keeping purchase disabled while that Product is unavailable.
+- Synchronize the shared Web and native renderers with the current Product selection rules.
+- Align Server SDK request helpers with the committed messaging contract.
+
 ## 0.8.1 — 2026-10-25
 
 - Organize SDK implementations by capability while preserving public entry points and interfaces.

package/README.md

@@ -1,6 +1,6 @@
 # @tinkerlandai/indiana-sdk
 
-These examples use SDK 0.8.1 with `https://api.dev.tinker.cash` and test App credentials (protocol 0.8). Check [environment state](../../docs/development-status.md) before switching. The SDK default remains the production API, so set `baseUrl` explicitly for these examples.
+These examples use SDK 0.8.3 with `https://api.dev.tinker.cash` and test App credentials (protocol 0.8). Check [environment state](../../docs/development-status.md) before switching. The SDK default remains the production API, so set `baseUrl` explicitly for these examples.
 
 [简体中文](./README.zh-CN.md)
 
@@ -9,10 +9,10 @@ The Indiana business SDK groups its capabilities as **Identity, Commerce, Growth
 **IAM source scanning, generation, validation and upload belong to the independent build package `@tinkerlandai/indiana-iam`.** This business SDK retains only the runtime release binding used by GB visual changes. See [SDK boundaries](../../docs/sdk-architecture.md) and the [IAM package](../iam/README.md).
 
 ```sh
-npm install --save-exact @tinkerlandai/indiana-sdk@0.8.1
+npm install --save-exact @tinkerlandai/indiana-sdk@0.8.3
 ```
 
-SDK 0.8.1 requires HTTP protocol 0.8. Install a version that matches your runtime; publishing a package does not deploy the server. Publication and accepted environment scope are recorded in the [release ledger](../../docs/sdk-releases.md) and [development status](../../docs/development-status.md).
+SDK 0.8.3 requires HTTP protocol 0.8. Install a version that matches your runtime; publishing a package does not deploy the server. Publication and accepted environment scope are recorded in the [release ledger](../../docs/sdk-releases.md) and [development status](../../docs/development-status.md).
 
 The data/session layer handles public JSON, integrity checks and authenticated operations. The presentation host composes that layer with the packaged screen renderer; the renderer receives supplied data and emits action intents. Client display entry points load presentation lazily. The `/server` entry has no screen presentation dependency and uses a scoped Server Key only on your backend. A local SDK guard never replaces runtime authorization or verified payment completion. Console preview supplies simulated data/session results to the same presentation host.
 
@@ -217,6 +217,26 @@ The selected environment's integration settings control behavior events, experim
 
 Flags default to local evaluation; Owner/Admin can switch each flag to server evaluation. Server-evaluated flags deliver only keys and results, using the caller's fallback until the first result arrives. Attribute changes immediately discard old results. List hashes are not a secrecy boundary. Local Funnels cannot depend on server-evaluated flags; mode switches also check active historical Runs. `identify` / `reset` release the previous identity's Feature instances and event queue.
 
+Merchandise targeting resolves a trusted item in the selected App/environment. Register its attributes and maintain the
+item in Console, then pass a reference rather than item metadata. The SDK resolves the initial SKU before returning;
+after switching items, await context refresh before reading the next decision. Item experiments use `merchandiseId`
+(the internal UUID) without a Customer fallback; Customer experiments keep their own bucketing identity.
+
+```ts
+const merchandiseFlags = await indiana.features({
+  attributes: { ...bucketingIdentity, merchandise: { id: "sku-outdoor" } },
+});
+merchandiseFlags.setAttributes({
+  ...bucketingIdentity,
+  merchandise: { id: "sku-indoor" },
+});
+await merchandiseFlags.refreshRemote();
+const eligible = merchandiseFlags.isOn("item-promotion");
+indiana.track("Item Viewed", {}, { merchandise: { id: "sku-indoor" } });
+await indiana.flush();
+merchandiseFlags.destroy();
+```
+
 Offering pins the Product Version scope and hierarchy. Paywall pins a published Offering Version and independently chooses its displayed Product subset, groups, ordering, and default selection. `createPaywallStartClient`, `createPaywallSession`, and `showPaywall` use a standalone Paywall Session. After payment, read Entitlements again. Your backend still authorizes requests and consumes usage idempotently.
 
 ## Commercial capabilities and current service boundaries
@@ -378,3 +398,24 @@ export async function showBanner(
 ```
 
 Provide every declared action handler. `onContinue` uses `intent.requestId` as its backend idempotency key; `retryAction()` reuses that intent after a failure. Call `destroy()` on unmount, sign-out or account change. The host renders content and emits intents; your backend still authorizes and executes business actions.
+
+To remove module loading, document preparation and iframe startup from the opening click, resolve the current Customer's content earlier and prepare it explicitly:
+
+```ts
+import { prepareContent } from "@tinkerlandai/indiana-sdk";
+
+const lifetime = new AbortController();
+const popup = await prepareContent(container, {
+  content, // Already resolved with kind: "popup" for this Customer.
+  actions: { continue: onContinue },
+  onError: console.error,
+  signal: lifetime.signal,
+});
+openButton.addEventListener("click", () => popup.show(), {
+  signal: lifetime.signal,
+});
+// On unmount, sign-out or account/scope change:
+// lifetime.abort();
+```
+
+Preparation waits for the first render without opening the dialog or running actions. `show()` reveals the same iframe and is idempotent; destroy and prepare a fresh handle for another presentation. Abort also cancels preparation while it is pending. This does not pre-authorize business operations or guarantee that images have decoded. For low-level ScreenDocument rendering, `/popup` provides `preparePopup(document, options)` with `ready`, `show()` and `destroy()`.

package/README.zh-CN.md

@@ -206,6 +206,10 @@ flags.destroy();
 
 每个 flag 默认本地计算，Owner/Admin 可切换为服务器计算。服务器 flag 只下发键与结果，首次结果到达前使用调用方默认值；属性变化立即丢弃旧结果。名单哈希不等于保密，敏感规则应使用服务器计算。本地 Funnel 不得依赖服务器 flag，切换时也会校验仍在运行的历史版本。`identify` / `reset` 会释放旧身份的功能实例和事件队列。
 
+商品定向使用当前 App／环境的可信商品主档。在 Console 登记属性并维护商品后，传入 `merchandise: { id: "sku-outdoor" }` 引用；SDK 在返回 Feature 客户端之前解析商品。切换商品后，先调用 `setAttributes({ ...bucketingIdentity, merchandise: { id: "sku-indoor" } })`，再等待 `refreshRemote()` 后读取决策。商品实验使用服务端解析的 `merchandiseId`（内部 UUID），不能回退到人的分桶标识。请求中的商品属性不能覆盖主档。
+
+自定义商品事件可调用 `indiana.track("Item Viewed", {}, { merchandise: { id: "sku-indoor" } })`，再 `flush()`。Customer 身份、商品引用和实验分桶单位分别记录；事件不构成订单或收入回执。
+
 Offering 固定 Product Version 的范围与层级。Paywall 固定已发布 Offering Version，并独立选择显示的 Product 子集、分组、顺序和默认项。`createPaywallStartClient`、`createPaywallSession`、`showPaywall` 使用独立 Paywall Session，不创建占位 Funnel。付款完成后重新查询权益，业务后端仍须重新鉴权并幂等扣减用量。
 
 ## Web 商业能力与当前服务边界
@@ -299,3 +303,7 @@ export async function showBanner(
 ```
 
 每个声明动作都需要同名 handler。`onContinue` 用 `intent.requestId` 作为业务后端的幂等键；失败后 `retryAction()` 重用原意图。卸载、退出或换号时调用 `destroy()`。宿主只渲染和发出意图，业务后端仍负责鉴权与执行。
+
+需要加快点击打开时，可提前为当前 Customer 读取内容，再调用根入口的 `prepareContent(container, options)`，参数与 `mountContent` 相同。它提前加载展示模块、校验文档并启动 iframe，等首次渲染后返回句柄；点击时同步调用 `handle.show()`，直接显示同一个 iframe。准备期间不打开弹窗、不抢焦点、不执行动作。句柄用于一次展示，重复 `show()` 不重复挂载；下一次展示需重新准备。
+
+可传入 `signal: abortController.signal`，在卸载、退出或切换 Customer／App／环境时 `abortController.abort()`，连同仍在等待的准备一起取消并释放资源。预渲染不代替业务鉴权，也不保证图片已完成解码。直接持有已授权 ScreenDocument 的低层接入可使用 `/popup` 的 `preparePopup(document, options)`；句柄立即返回，提供 `ready`、`show()` 和 `destroy()`。

package/dist/{ai-usage-JoM7ZWk-.d.ts → ai-usage-DUlre7JC.d.ts}

@@ -1,5 +1,5 @@
 import { LanguageModelV4Usage, LanguageModelV4Middleware } from '@ai-sdk/provider';
-import { F as FoundationApi, A as ApiInput } from './api-JVC7x2FV.js';
+import { F as FoundationApi, A as ApiInput } from './api-XDc4pRlN.js';
 import { z } from 'zod';
 
 declare const tokenCounts: z.ZodObject<{