@tinkerlandai/longplay-sdk 0.10.4 → 0.10.6

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.10.6
+
+Only Longplay public factories, errors, types and browser globals are supported. Migrate old Indiana imports to their Longplay names. Internal implementations, protocol and saved identities are unchanged; previously published artifacts remain immutable.
+
+## 0.10.5 — 2026-11-01
+
+- Make IAM Funnel entries recover from configuration timeouts, delayed scene changes, hidden retained pages and earlier refused entries; recheck the selected scene before mounting a Run.
+- Accept up to 100 deduplicated Funnel page assignments so eligible changesets are no longer truncated at 20. Requires the matching GOP contract and IAM reliability SQL migration; wire protocol stays `0.10`.
+
 ## 0.10.4 — 2026-10-31
 
 - Add Longplay public package names, `createLongplay*` factories, error/options aliases, browser readiness and native/Python entry points. Retain legacy exports, commands, downloads, protocol and saved identities; publication is a separate release step.

package/README.md

@@ -6,7 +6,7 @@
 
 # @tinkerlandai/longplay-sdk
 
-This source checkout is SDK 0.10.4, protocol 0.10. These examples use `https://api.longplayai.com` with a Sandbox App and credentials issued by the production deployment. Sandbox still contains production data; do not reuse credentials from the separate test deployment. Confirm runtime readiness in [environment state](../../docs/development-status.md) before running them.
+This source checkout is SDK 0.10.6, protocol 0.10. These examples use `https://api.longplayai.com` with a Sandbox App and credentials issued by the production deployment. Sandbox still contains production data; do not reuse credentials from the separate test deployment. Confirm runtime readiness in [environment state](../../docs/development-status.md) before running them.
 
 [简体中文](./README.zh-CN.md)
 
@@ -20,6 +20,8 @@ npm install --save-exact @tinkerlandai/longplay-sdk@latest
 
 The first install resolves latest and saves an exact package.json version. Commit the lockfile and use npm ci for later builds. Use the original package identity and exact version from the [release records](../../docs/sdk-releases.md) for historical installations and rollback. New Longplay package names require their own publication; source changes do not publish artifacts.
 
+IAM Funnel entry reliability fixes require SDK 0.10.6 or later. Select this release explicitly with `npm install --save-exact @tinkerlandai/longplay-sdk@0.10.5`; current mutable tags are recorded in the [release records](../../docs/sdk-releases.md).
+
 This SDK requires HTTP protocol 0.10. The runtime must serve the same current protocol; publishing a package does not deploy the server. Publication and accepted environment scope are recorded in the [release ledger](../../docs/sdk-releases.md) and [development status](../../docs/development-status.md).
 
 The data/session layer handles public JSON, integrity checks and authenticated operations. The presentation host composes that layer with the packaged screen renderer; the renderer receives supplied data and emits action intents. Client display entry points load presentation lazily. The `/server` entry has no screen presentation dependency and uses a scoped Server Key only on your backend. A local SDK guard never replaces runtime authorization or verified payment completion. Console preview supplies simulated data/session results to the same presentation host.
@@ -69,8 +71,8 @@ The SDK sends current protocol and SDK version headers and validates the protoco
 
 ## Public entry points
 
-| Import                                   | Purpose                                                                            |
-| ---------------------------------------- | ---------------------------------------------------------------------------------- |
+| Import                                    | Purpose                                                                            |
+| ----------------------------------------- | ---------------------------------------------------------------------------------- |
 | `@tinkerlandai/longplay-sdk`              | Browser Customer, Funnel, Feature, and standalone Paywall clients                  |
 | `@tinkerlandai/longplay-sdk/server`       | Trusted Node.js backend, Customer Sessions, business writes, and Funnel decisions  |
 | `@tinkerlandai/longplay-sdk/react-native` | Portable Customer core and authenticated-backend usage relay; no DOM presentation  |
@@ -394,8 +396,12 @@ entries.destroy();
 
 The host observes original button behavior, matches unique render/element guards and attempts automatic entries once per pathname visit. GOP selects the Funnel, checks entry publication, suppresses an existing Customer/Funnel Run and enforces the automatic-entry cooldown. The host retains unknown requests in memory; page reload recovery is not included. When a Run is stopped from Console or expires, the host removes its UI and reports `run_ended`, whether the Run reads `closed` or its next command is refused with `FORBIDDEN`; a later trigger can then start again. An IAM binding supplies no Customer credential or business permission.
 
+The entry scope is the route template plus render, covering every matching dynamic URL instance. Query/hash changes do not create a new visit. Supported anchor and inline-display changes recheck delayed scenes; hidden retained pages do not block the single active button. Multiple active targets remain refused. Configuration fetch/body reads default to a five-second deadline (`timeoutMs` overrides it), recover on the next 15-second poll, and discard late responses. Inspect `onStatus` for `identity_required`, `configuration_unavailable`, `incompatible` and `start_failed`. Definitively refused entries allow the next matching entry in delivered order; pending unknown starts wait for `retry()`. Other entries are preserved while a Run is mounted and reconsidered when it ends. Original button navigation continues, so full-page navigation can prevent presentation.
+
 An opted-in Split (`applyPageExperiment: true`) uses its accepted experiment variation for the merchant page. The entry host automatically shares `appManifestRelease` with `showFunnelRun`; manual hosts pass that option explicitly. `createFunnelPageExperiments({client, appManifestRelease})` is available for hosts without the standard UI. The consumer never rebuckets, reports use against the accepted receipt, and reverts on stop, completion or destruction. A separately installed visual consumer yields ownership of that experiment during the Run. This Web source feature requires matching GOP contracts and the IAM/Funnel database migration; installation alone does not promote runtime support.
 
+All eligible changesets are delivered within the visual payload's existing 100-item/2 MiB budget, with one assignment per accepted Split receipt and up to 100 assignments. More than 20 distinct assignments require the matching GOP response contract and SDK before the SQL is activated. Used-receipt requests keep their existing 20-ID limit. After a source upgrade, check **Version applicability** in the App page map: invalid published Funnel entries link to the affected Funnel for reselection and publication. Missing current versions, read failures and incomplete inventories remain explicit. Follow the [two-layer integration guide](https://longplayai.com/docs/iam?lang=en#funnel-entries) for build binding and host lifecycle.
+
 ## Funnel-scoped resource requests
 
 Formal Local Runs submit advance signals to Longplay; the canonical executor supplies the original Run/node/visit/receipt when it issues a Coupon or performs commerce. An application consuming a pure Funnel result can bind its Customer client explicitly:

package/README.zh-CN.md

@@ -6,7 +6,7 @@
 
 [English](./README.md)
 
-当前源码为 SDK 0.10.4、协议 0.10。本页示例使用 `https://api.longplayai.com` 以及生产部署内签发的 Sandbox App／凭据。Sandbox 仍属于生产数据，不能复用独立测试部署的凭据。运行前核对[环境状态](../../docs/development-status.md)，确认服务已就绪。
+当前源码为 SDK 0.10.6、协议 0.10。本页示例使用 `https://api.longplayai.com` 以及生产部署内签发的 Sandbox App／凭据。Sandbox 仍属于生产数据，不能复用独立测试部署的凭据。运行前核对[环境状态](../../docs/development-status.md)，确认服务已就绪。
 
 # @tinkerlandai/longplay-sdk
 
@@ -20,7 +20,9 @@ npm install --save-exact @tinkerlandai/longplay-sdk@latest
 
 首次安装解析最新稳定版，--save-exact 将结果固定在 package.json。提交锁文件，后续构建使用 npm ci；历史安装或回滚请沿用[发布记录](../../docs/sdk-releases.md)中的原包名和精确版本。Longplay 新包名需要单独发布，源码修改不代表已经发布。
 
-SDK 0.10.4 要求 HTTP 协议 0.10。服务端须使用同一当前协议，不提供旧协议兼容；发布包不会部署服务端。实际发布、标签与环境验收范围见 [SDK 发布总账](../../docs/sdk-releases.md) 和 [开发状态](../../docs/development-status.md)。
+IAM Funnel 入口的可靠触发修复需要 SDK 0.10.6 或更新版本。可执行 `npm install --save-exact @tinkerlandai/longplay-sdk@0.10.5` 固定安装此版本；可变标签的实际指向见[发布记录](../../docs/sdk-releases.md)。
+
+SDK 0.10.6 要求 HTTP 协议 0.10。服务端须使用同一当前协议，不提供旧协议兼容；发布包不会部署服务端。实际发布、标签与环境验收范围见 [SDK 发布总账](../../docs/sdk-releases.md) 和 [开发状态](../../docs/development-status.md)。
 
 数据／会话层负责公开 JSON、完整性校验和鉴权操作；展示宿主将会话接口接入打包的屏幕渲染器，渲染器消费已提供的数据并返回动作意图。客户端按需加载展示；`/server` 入口使用商户后端的受限 Server Key，不加载屏幕展示。SDK 本地检查不替代运行时授权或付款核实。后台 Preview 为同一个展示宿主提供模拟会话和数据。
 
@@ -79,8 +81,8 @@ SDK 发送当前协议及 SDK 版本请求头，并校验成功响应的协议
 
 ## 公开入口
 
-| 导入入口                                 | 用途                                                        |
-| ---------------------------------------- | ----------------------------------------------------------- |
+| 导入入口                                  | 用途                                                        |
+| ----------------------------------------- | ----------------------------------------------------------- |
 | `@tinkerlandai/longplay-sdk`              | 浏览器 Customer、Funnel、Feature 与独立 Paywall 客户端      |
 | `@tinkerlandai/longplay-sdk/server`       | 可信 Node.js 后端、Customer Session、业务写入和 Funnel 决策 |
 | `@tinkerlandai/longplay-sdk/react-native` | Customer 核心和经认证业务后端转发的用量上报，不含 DOM 展示  |