@traffical/openfeature-web 0.2.0

package/README.md

@@ -0,0 +1,80 @@
+# @traffical/openfeature-web
+
+OpenFeature **web** (static-context) [provider](https://openfeature.dev/) backed by the Traffical browser SDK (`@traffical/js-client`).
+
+Resolvers are synchronous and evaluate against a single **bound static context** (the current user/session). Each resolution runs one Traffical `decide()` (the intent-to-treat / ITT decision); exposure is a separate, explicit render-time signal — so treatment-on-the-treated (ToT) metrics, the SRM health gate, and bandit optimization measure what the user actually saw.
+
+## Install
+
+```bash
+npm install @traffical/openfeature-web @openfeature/web-sdk @traffical/js-client
+```
+
+`@openfeature/web-sdk` and `@traffical/js-client` are peer dependencies.
+
+## Register the provider
+
+Construct your Traffical browser client, wrap it in the provider, and set it on OpenFeature with the initial context. The caller owns the client lifecycle.
+
+```ts
+import { OpenFeature } from "@openfeature/web-sdk";
+import { TrafficalClient } from "@traffical/js-client";
+import { TrafficalWebProvider } from "@traffical/openfeature-web";
+
+const client = new TrafficalClient({ apiKey: "pk_...", /* ... */ });
+
+await OpenFeature.setContext({ targetingKey: user.id, plan: user.plan });
+await OpenFeature.setProviderAndWait(new TrafficalWebProvider(client));
+
+const of = OpenFeature.getClient();
+```
+
+### Static context
+
+The provider evaluates against the context bound via `OpenFeature.setContext(...)` — resolvers ignore any per-call context argument. On a context change (e.g. login/logout) the provider re-binds the context, **clears its decision memo** (so a decision made under the old identity is never served or exposed under the new one), flows the new identity into the client, and returns — letting the web SDK emit the reconcile lifecycle events.
+
+## Resolve a flag
+
+```ts
+const enabled = of.getBooleanValue("checkout.newFlow", false);
+const color = of.getStringValue("ui.color", "blue");
+```
+
+Resolvers are synchronous. The `variant`, `reason` (`SPLIT` when a variant was assigned, else `DEFAULT`), and scalar `traffical.*` `flagMetadata` come from the decision.
+
+## Exposure — the `$traffical.exposure` convention
+
+Exposure (ToT) is **explicit**: fire it at your render site once the user actually sees the treatment. Use the reserved event name `$traffical.exposure` (exported as `EXPOSURE_EVENT_NAME`) and echo the `flagKey` in the details:
+
+```ts
+import { EXPOSURE_EVENT_NAME } from "@traffical/openfeature-web";
+
+of.track(EXPOSURE_EVENT_NAME, { flagKey: "checkout.newFlow" });
+```
+
+The provider stitches this to the memoized decision for that flag in the current context and calls the native `trackExposure()`. It **never re-decides** in the exposure path — a miss (flag not resolved in this context) warns once and no-ops.
+
+Every other `track(name, details)` is a business/reward event, forwarded to the client's `track()` joined on the bound targeting key (falling back to the client's anonymous stable id). A numeric `details.value` is lifted out as the reward value.
+
+> Web `Tracking` takes **no context argument** — identity comes from the bound static context.
+
+### No-exposure alarm
+
+If the provider records many decisions but zero exposures, it fires a one-shot warning and a non-fatal provider `Error` event, since ToT/SRM/optimization would be silently empty. Instrument `$traffical.exposure`, or set `exposureOnResolve`.
+
+## Options
+
+`new TrafficalWebProvider(client, options)`:
+
+| Option | Description |
+| --- | --- |
+| `exposureOnResolve` | When `true`, the resolver fires `trackExposure()` on the just-made decision (collapsing ToT toward ITT). |
+| `unitKey` | Override the context field the bundle buckets on. Defaults to `client.getUnitKeyField()` (the bundle's `hashing.unitKey`). |
+| `exposureEventName` | Override the reserved exposure event name. Defaults to `$traffical.exposure`. |
+| `gatePropensity` | Omit `traffical.propensity` from `flagMetadata`. **Defaults to `true` on web.** |
+
+> On web, `flagMetadata` is visible in browser devtools, so the provider always gates **both** `traffical.propensity` and `traffical.modelVersion` out — bandit selection internals never leak to the client.
+
+## targetingKey → unit-key mapping
+
+The bound `targetingKey` is written under the bundle's **actual** bucketing field (`hashing.unitKey`), not a literal `"targetingKey"` field — otherwise the client's context enrichment would overwrite it with the anonymous stable id and silently mis-bucket the unit. A missing/empty targeting key throws `TargetingKeyMissingError`, which the OpenFeature SDK maps to the default with `reason: ERROR`.

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @traffical/openfeature-web
+ *
+ * OpenFeature WEB (static-context) provider backed by the Traffical browser SDK
+ * (`@traffical/js-client`). Milestone M3.
+ *
+ * See the OpenFeature provider design in the Traffical SDK spec, §2, §3, §5, §6, §7, §9, §13.
+ */
+export { TrafficalWebProvider, default } from "./provider.js";
+export type { TrafficalWebClient } from "./provider.js";
+export type { TrafficalProviderOptions, TrafficalClientLike, OFFlagType, } from "@traffical/openfeature-core";
+export { EXPOSURE_EVENT_NAME, FLAG_METADATA_PREFIX } from "@traffical/openfeature-core";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC9D,YAAY,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAIxD,YAAY,EACV,wBAAwB,EACxB,mBAAmB,EACnB,UAAU,GACX,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+/**
+ * @traffical/openfeature-web
+ *
+ * OpenFeature WEB (static-context) provider backed by the Traffical browser SDK
+ * (`@traffical/js-client`). Milestone M3.
+ *
+ * See the OpenFeature provider design in the Traffical SDK spec, §2, §3, §5, §6, §7, §9, §13.
+ */
+export { TrafficalWebProvider, default } from "./provider.js";
+export { EXPOSURE_EVENT_NAME, FLAG_METADATA_PREFIX } from "@traffical/openfeature-core";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAU9D,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/provider.d.ts

@@ -0,0 +1,111 @@
+/**
+ * TrafficalWebProvider — the OpenFeature WEB (static-context) provider backed by
+ * the Traffical browser SDK (`@traffical/js-client`).
+ *
+ * Design: see the OpenFeature provider design in the Traffical SDK spec, §2, §3, §5, §6, §7, §9, §13
+ * (this is milestone M3). It is a thin, SYNC translation membrane over an
+ * already-constructed native client (constructor injection — one client
+ * instance, the caller owns lifecycle).
+ *
+ * Web specifics (vs the server provider):
+ * - Resolvers are SYNCHRONOUS and receive NO per-invocation context; the
+ *   provider evaluates against a single BOUND static context (§9).
+ * - `onContextChange` re-binds the context and clears the per-context decision
+ *   memo, then RETURNS — the web SDK (not the provider) emits the reconcile
+ *   lifecycle events (§9, finding V2).
+ * - `track(name, details)` takes NO context argument (web `Tracking`).
+ * - `flagMetadata` gates BOTH `traffical.propensity` AND `traffical.modelVersion`
+ *   out — browser devtools must not leak bandit selection internals (§3.5).
+ */
+import { OpenFeatureEventEmitter, type EvaluationContext, type JsonValue, type Logger, type Paradigm, type Provider, type ProviderMetadata, type ResolutionDetails, type Tracking, type TrackingEventDetails } from "@openfeature/web-sdk";
+import { type TrafficalClientLike, type TrafficalProviderOptions } from "@traffical/openfeature-core";
+/**
+ * The optional lifecycle surface a browser client may expose on top of the
+ * frozen `TrafficalClientLike` contract. All optional so the provider can be
+ * driven by a bare structural stub in tests, and so it never depends on hooks
+ * that may not exist on every client.
+ */
+export interface TrafficalWebClient extends TrafficalClientLike {
+    /** Async config fetch + background refresh start. */
+    initialize?(): Promise<void>;
+    /** Sync, unload-aware teardown (chooses `sendBeacon` on unload). */
+    destroy?(): void;
+    /** The anonymous stable id used when no explicit identity is set. */
+    getStableId?(): string;
+    /** Change identity + notify listeners (framework providers, plugins). */
+    identify?(unitKey: string): void;
+    /**
+     * Register a plugin. Used (if present) to hang a config-change listener off
+     * the client's EXISTING `runConfigUpdate` hook so a changed refresh can emit
+     * `PROVIDER_CONFIGURATION_CHANGED`. Never required.
+     */
+    use?(plugin: {
+        name: string;
+        onConfigUpdate?: (bundle: unknown) => void;
+    }): unknown;
+}
+export declare class TrafficalWebProvider implements Provider, Tracking {
+    readonly metadata: ProviderMetadata;
+    /** The web SDK enforces this paradigm at runtime (prevents server/web mixups). */
+    readonly runsOn: Paradigm;
+    /** The provider owns its emitter; the SDK does not synthesize lifecycle events. */
+    readonly events: OpenFeatureEventEmitter;
+    private readonly client;
+    private readonly options;
+    /** The single bound static context. Starts empty; set in `initialize`. */
+    private boundContext;
+    /**
+     * Per-context decision memo (flagKey → DecisionResult). Pure optimization and
+     * the source the exposure route stitches against; CLEARED on every context
+     * change so a stale-identity decision can never be exposed (§9). Inert
+     * decisions are never stored.
+     */
+    private decisionMemo;
+    /** No-exposure alarm counters + one-shot guards (§5). */
+    private decisionCount;
+    private exposureCount;
+    private noExposureAlarmFired;
+    private exposureMissWarned;
+    private closed;
+    constructor(client: TrafficalWebClient, options?: TrafficalProviderOptions);
+    initialize(context?: EvaluationContext): Promise<void>;
+    onClose(): Promise<void>;
+    /**
+     * Re-bind the context and clear the per-context decision memo, then RETURN.
+     *
+     * Returning `void` makes the web SDK emit only `PROVIDER_CONTEXT_CHANGED`
+     * (returning a Promise would make it emit `PROVIDER_RECONCILING` first). The
+     * provider MUST NOT emit `Reconciling`/`ContextChanged`/`Stale` itself — that
+     * would double-emit / race the SDK.
+     */
+    onContextChange(_oldContext: EvaluationContext, newContext: EvaluationContext): void;
+    resolveBooleanEvaluation(flagKey: string, defaultValue: boolean, _context?: EvaluationContext, _logger?: Logger): ResolutionDetails<boolean>;
+    resolveStringEvaluation(flagKey: string, defaultValue: string, _context?: EvaluationContext, _logger?: Logger): ResolutionDetails<string>;
+    resolveNumberEvaluation(flagKey: string, defaultValue: number, _context?: EvaluationContext, _logger?: Logger): ResolutionDetails<number>;
+    resolveObjectEvaluation<T extends JsonValue>(flagKey: string, defaultValue: T, _context?: EvaluationContext, _logger?: Logger): ResolutionDetails<T>;
+    /**
+     * The single translation path shared by all four resolvers.
+     *
+     * A thrown `TargetingKeyMissingError`/`TypeMismatchError` propagates: the web
+     * SDK is the never-throw boundary and maps typed errors to the default +
+     * `reason: ERROR` (§4.4). We do NOT blanket-catch to `GENERAL`.
+     */
+    private resolve;
+    track(trackingEventName: string, details?: TrackingEventDetails): void;
+    /**
+     * Exposure route: stitch to the memoized decision and call `trackExposure`.
+     * NEVER re-decide. A miss (no memoized decision for `flagKey`) warns once and
+     * no-ops (§5).
+     */
+    private routeExposure;
+    /**
+     * Reward route: identity comes from the bound targeting key (falling back to
+     * the client's anonymous stableId). `value` is lifted out of `details`; the
+     * rest ride as properties.
+     */
+    private routeReward;
+    private maybeFireNoExposureAlarm;
+    private wireConfigChangeSignal;
+}
+export default TrafficalWebProvider;
+//# sourceMappingURL=provider.d.ts.map

package/dist/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EACL,uBAAuB,EAIvB,KAAK,iBAAiB,EACtB,KAAK,SAAS,EACd,KAAK,MAAM,EACX,KAAK,QAAQ,EACb,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,QAAQ,EACb,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAML,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC9B,MAAM,6BAA6B,CAAC;AAIrC;;;;;GAKG;AACH,MAAM,WAAW,kBAAmB,SAAQ,mBAAmB;IAC7D,qDAAqD;IACrD,UAAU,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,oEAAoE;IACpE,OAAO,CAAC,IAAI,IAAI,CAAC;IACjB,qEAAqE;IACrE,WAAW,CAAC,IAAI,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;;OAIG;IACH,GAAG,CAAC,CAAC,MAAM,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;KAC5C,GAAG,OAAO,CAAC;CACb;AAqBD,qBAAa,oBAAqB,YAAW,QAAQ,EAAE,QAAQ;IAC7D,SAAgB,QAAQ,EAAE,gBAAgB,CAA2B;IAErE,kFAAkF;IAClF,SAAgB,MAAM,EAAE,QAAQ,CAAY;IAE5C,mFAAmF;IACnF,SAAgB,MAAM,0BAAiC;IAEvD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD,0EAA0E;IAC1E,OAAO,CAAC,YAAY,CAAyB;IAE7C;;;;;OAKG;IACH,OAAO,CAAC,YAAY,CAAqC;IAEzD,yDAAyD;IACzD,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,kBAAkB,CAAS;IAEnC,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,wBAAwB;IAYpE,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBtD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAa9B;;;;;;;OAOG;IACH,eAAe,CAAC,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE,iBAAiB,GAAG,IAAI;IAoBpF,wBAAwB,CACtB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,OAAO,EACrB,QAAQ,CAAC,EAAE,iBAAiB,EAC5B,OAAO,CAAC,EAAE,MAAM,GACf,iBAAiB,CAAC,OAAO,CAAC;IAI7B,uBAAuB,CACrB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,QAAQ,CAAC,EAAE,iBAAiB,EAC5B,OAAO,CAAC,EAAE,MAAM,GACf,iBAAiB,CAAC,MAAM,CAAC;IAI5B,uBAAuB,CACrB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,QAAQ,CAAC,EAAE,iBAAiB,EAC5B,OAAO,CAAC,EAAE,MAAM,GACf,iBAAiB,CAAC,MAAM,CAAC;IAI5B,uBAAuB,CAAC,CAAC,SAAS,SAAS,EACzC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,CAAC,EACf,QAAQ,CAAC,EAAE,iBAAiB,EAC5B,OAAO,CAAC,EAAE,MAAM,GACf,iBAAiB,CAAC,CAAC,CAAC;IAIvB;;;;;;OAMG;IACH,OAAO,CAAC,OAAO;IA8Ef,KAAK,CAAC,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,IAAI;IAWtE;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAoBrB;;;;OAIG;IACH,OAAO,CAAC,WAAW;IAqBnB,OAAO,CAAC,wBAAwB;IAkBhC,OAAO,CAAC,sBAAsB;CAyB/B;AAED,eAAe,oBAAoB,CAAC"}

package/dist/provider.js

@@ -0,0 +1,300 @@
+/**
+ * TrafficalWebProvider — the OpenFeature WEB (static-context) provider backed by
+ * the Traffical browser SDK (`@traffical/js-client`).
+ *
+ * Design: see the OpenFeature provider design in the Traffical SDK spec, §2, §3, §5, §6, §7, §9, §13
+ * (this is milestone M3). It is a thin, SYNC translation membrane over an
+ * already-constructed native client (constructor injection — one client
+ * instance, the caller owns lifecycle).
+ *
+ * Web specifics (vs the server provider):
+ * - Resolvers are SYNCHRONOUS and receive NO per-invocation context; the
+ *   provider evaluates against a single BOUND static context (§9).
+ * - `onContextChange` re-binds the context and clears the per-context decision
+ *   memo, then RETURNS — the web SDK (not the provider) emits the reconcile
+ *   lifecycle events (§9, finding V2).
+ * - `track(name, details)` takes NO context argument (web `Tracking`).
+ * - `flagMetadata` gates BOTH `traffical.propensity` AND `traffical.modelVersion`
+ *   out — browser devtools must not leak bandit selection internals (§3.5).
+ */
+import { OpenFeatureEventEmitter, ProviderEvents, ProviderFatalError, StandardResolutionReasons, } from "@openfeature/web-sdk";
+import { EXPOSURE_EVENT_NAME, FLAG_METADATA_PREFIX, buildTrafficalContext, toResolutionDetails, } from "@traffical/openfeature-core";
+const PROVIDER_NAME = "traffical-provider";
+/**
+ * How many decisions may accumulate with zero exposures before the
+ * "decisions-without-exposures" alarm fires (once). Mirrors the server
+ * provider's footgun defense (§5/D2).
+ */
+const NO_EXPOSURE_ALARM_THRESHOLD = 10;
+/**
+ * A decision is INERT when the web client's `decide()` error boundary returned
+ * its fallback (`unitKeyValue: ""`, `layers: []`, `js-client:560`). An inert
+ * decision must be treated as DEFAULT and never fed to exposure/attribution —
+ * downstream it silently no-ops (§4.4).
+ */
+function isInertDecision(decision) {
+    return decision.metadata.unitKeyValue === "" || decision.metadata.layers.length === 0;
+}
+export class TrafficalWebProvider {
+    metadata = { name: PROVIDER_NAME };
+    /** The web SDK enforces this paradigm at runtime (prevents server/web mixups). */
+    runsOn = "client";
+    /** The provider owns its emitter; the SDK does not synthesize lifecycle events. */
+    events = new OpenFeatureEventEmitter();
+    client;
+    options;
+    /** The single bound static context. Starts empty; set in `initialize`. */
+    boundContext = {};
+    /**
+     * Per-context decision memo (flagKey → DecisionResult). Pure optimization and
+     * the source the exposure route stitches against; CLEARED on every context
+     * change so a stale-identity decision can never be exposed (§9). Inert
+     * decisions are never stored.
+     */
+    decisionMemo = new Map();
+    /** No-exposure alarm counters + one-shot guards (§5). */
+    decisionCount = 0;
+    exposureCount = 0;
+    noExposureAlarmFired = false;
+    exposureMissWarned = false;
+    closed = false;
+    constructor(client, options) {
+        this.client = client;
+        // Web always gates propensity/modelVersion out of flagMetadata (browser
+        // devtools are user-visible). We additionally strip modelVersion below,
+        // because core gates propensity but NOT modelVersion.
+        this.options = { gatePropensity: true, ...options };
+    }
+    // ===========================================================================
+    // Lifecycle
+    // ===========================================================================
+    async initialize(context) {
+        this.closed = false;
+        this.boundContext = context ?? {};
+        try {
+            await this.client.initialize?.();
+            this.wireConfigChangeSignal();
+            this.events.emit(ProviderEvents.Ready);
+        }
+        catch (err) {
+            // Any failure to initialize is treated as irrecoverable: the client
+            // could not load a bundle, so every resolve would degrade to DEFAULT.
+            this.events.emit(ProviderEvents.Error, {
+                message: err instanceof Error ? err.message : String(err),
+                errorCode: new ProviderFatalError().code,
+            });
+            // Rethrow so the SDK also transitions the provider to a FATAL state.
+            throw err;
+        }
+    }
+    async onClose() {
+        if (this.closed)
+            return; // idempotent (guard double-close)
+        this.closed = true;
+        // The browser client's destroy() is sync and unload-aware (it chooses
+        // sendBeacon on unload). Do NOT await an async flush on web (§7.2).
+        this.client.destroy?.();
+        this.decisionMemo.clear();
+    }
+    // ===========================================================================
+    // Static-context reconcile (§9, finding V2)
+    // ===========================================================================
+    /**
+     * Re-bind the context and clear the per-context decision memo, then RETURN.
+     *
+     * Returning `void` makes the web SDK emit only `PROVIDER_CONTEXT_CHANGED`
+     * (returning a Promise would make it emit `PROVIDER_RECONCILING` first). The
+     * provider MUST NOT emit `Reconciling`/`ContextChanged`/`Stale` itself — that
+     * would double-emit / race the SDK.
+     */
+    onContextChange(_oldContext, newContext) {
+        this.boundContext = newContext ?? {};
+        // Clear the memo so a decision made under the old identity can never be
+        // served (or exposed) under the new one.
+        this.decisionMemo.clear();
+        // Flow identity through the client so its stable-id / exposure-dedup state
+        // tracks the new identity (rapid login/logout). Best-effort: identify() is
+        // optional on the structural client.
+        const targetingKey = newContext?.targetingKey;
+        if (typeof targetingKey === "string" && targetingKey !== "") {
+            this.client.identify?.(targetingKey);
+        }
+        // Return void → SDK emits CONTEXT_CHANGED only.
+    }
+    // ===========================================================================
+    // Resolvers (SYNC — evaluate against the BOUND context, ignore the arg)
+    // ===========================================================================
+    resolveBooleanEvaluation(flagKey, defaultValue, _context, _logger) {
+        return this.resolve(flagKey, defaultValue, "boolean");
+    }
+    resolveStringEvaluation(flagKey, defaultValue, _context, _logger) {
+        return this.resolve(flagKey, defaultValue, "string");
+    }
+    resolveNumberEvaluation(flagKey, defaultValue, _context, _logger) {
+        return this.resolve(flagKey, defaultValue, "number");
+    }
+    resolveObjectEvaluation(flagKey, defaultValue, _context, _logger) {
+        return this.resolve(flagKey, defaultValue, "object");
+    }
+    /**
+     * The single translation path shared by all four resolvers.
+     *
+     * A thrown `TargetingKeyMissingError`/`TypeMismatchError` propagates: the web
+     * SDK is the never-throw boundary and maps typed errors to the default +
+     * `reason: ERROR` (§4.4). We do NOT blanket-catch to `GENERAL`.
+     */
+    resolve(flagKey, defaultValue, expectedType) {
+        // (1) Map the targeting key onto EXACTLY the bundle's unit-key field so the
+        // web client's _enrichContext does not override it with the anonymous
+        // stableId (which would silently mis-bucket).
+        const unitKeyField = this.options.unitKey ?? this.client.getUnitKeyField();
+        // (2) Build the Traffical context; a missing targeting key throws
+        // TargetingKeyMissingError, which we let propagate to the SDK boundary.
+        const { targetingKey, ...attributes } = this.boundContext;
+        const ctx = buildTrafficalContext({
+            targetingKey: typeof targetingKey === "string" ? targetingKey : undefined,
+            attributes,
+            unitKeyField,
+        });
+        // (3) Owning-layer id — robust selection (never positional layers[0]).
+        const ownerLayerId = this.client.getParameterLayerId(flagKey);
+        // OpenFeature `JsonValue` admits `null`; Traffical's `ParameterValue` does
+        // not. The default is only a fallback the engine echoes back untouched, so
+        // the boundary cast is sound (the strict type check happens in
+        // toResolutionDetails, which accepts any JSON value for object flags).
+        const decision = this.client.decide({
+            context: ctx,
+            defaults: { [flagKey]: defaultValue },
+        });
+        // Inert decision (error-boundary fallback) → DEFAULT. Never stored, never
+        // exposed, never fed to attribution downstream.
+        if (isInertDecision(decision)) {
+            return { value: defaultValue, reason: StandardResolutionReasons.DEFAULT };
+        }
+        this.decisionCount++;
+        // (4) Memoize the real decision so the exposure route can stitch to it
+        // without ever re-deciding (D3/A2).
+        this.decisionMemo.set(flagKey, decision);
+        // Opt-in escape hatch: fire the exposure on the just-made decision
+        // (collapsing ToT toward ITT). Uses the SAME decision — never re-decides —
+        // and relies on the client's exposure dedup + attributionOnly skip (§5).
+        if (this.options.exposureOnResolve) {
+            this.exposureCount++;
+            this.client.trackExposure(decision);
+        }
+        this.maybeFireNoExposureAlarm();
+        // (5) Translate. `toResolutionDetails` throws TypeMismatchError on a strict
+        // type mismatch (no coercion) — let it propagate.
+        const details = toResolutionDetails({
+            flagKey,
+            defaultValue,
+            expectedType,
+            decision,
+            ownerLayerId,
+            gatePropensity: this.options.gatePropensity,
+        });
+        // Web hardening: core gates propensity but NOT modelVersion. On web,
+        // flagMetadata is visible in browser devtools, so strip the model version
+        // too (§3.5) — never leak the model version to the client.
+        if (details.flagMetadata) {
+            delete details.flagMetadata[`${FLAG_METADATA_PREFIX}.modelVersion`];
+        }
+        return details;
+    }
+    // ===========================================================================
+    // Tracking (web `Tracking` — NO context arg)
+    // ===========================================================================
+    track(trackingEventName, details) {
+        const exposureEventName = this.options.exposureEventName ?? EXPOSURE_EVENT_NAME;
+        if (trackingEventName === exposureEventName) {
+            this.routeExposure(details);
+            return;
+        }
+        this.routeReward(trackingEventName, details);
+    }
+    /**
+     * Exposure route: stitch to the memoized decision and call `trackExposure`.
+     * NEVER re-decide. A miss (no memoized decision for `flagKey`) warns once and
+     * no-ops (§5).
+     */
+    routeExposure(details) {
+        const flagKey = details && typeof details.flagKey === "string" ? details.flagKey : undefined;
+        const decision = flagKey ? this.decisionMemo.get(flagKey) : undefined;
+        if (!decision) {
+            if (!this.exposureMissWarned) {
+                this.exposureMissWarned = true;
+                console.warn(`[Traffical][OpenFeature] Exposure fired for flag "${flagKey ?? "<missing flagKey>"}" ` +
+                    "but no matching decision was found in the current context. " +
+                    "Resolve the flag before firing its exposure; never re-decide in the exposure path.");
+            }
+            return;
+        }
+        this.exposureCount++;
+        this.client.trackExposure(decision);
+    }
+    /**
+     * Reward route: identity comes from the bound targeting key (falling back to
+     * the client's anonymous stableId). `value` is lifted out of `details`; the
+     * rest ride as properties.
+     */
+    routeReward(eventName, details) {
+        const boundKey = this.boundContext.targetingKey;
+        const unitKey = typeof boundKey === "string" && boundKey !== "" ? boundKey : this.client.getStableId?.();
+        const value = details && typeof details.value === "number" ? details.value : undefined;
+        const rest = {};
+        if (details) {
+            for (const [k, v] of Object.entries(details)) {
+                if (k === "value")
+                    continue;
+                rest[k] = v;
+            }
+        }
+        this.client.track(eventName, { value, ...rest }, { unitKey });
+    }
+    // ===========================================================================
+    // No-exposure alarm (§5/D2)
+    // ===========================================================================
+    maybeFireNoExposureAlarm() {
+        if (this.noExposureAlarmFired)
+            return;
+        if (this.decisionCount > NO_EXPOSURE_ALARM_THRESHOLD && this.exposureCount === 0) {
+            this.noExposureAlarmFired = true;
+            const message = "recording decisions but no exposures; ToT/SRM/optimization will be empty. " +
+                `Fire "${this.options.exposureEventName ?? EXPOSURE_EVENT_NAME}", or set exposureOnResolve.`;
+            console.warn(`[Traffical][OpenFeature] ${message}`);
+            // Non-fatal — the provider is still usable, this is a footgun alarm.
+            this.events.emit(ProviderEvents.Error, { message });
+        }
+    }
+    // ===========================================================================
+    // PROVIDER_CONFIGURATION_CHANGED (§7.3) — optional, via the EXISTING
+    // js-client runConfigUpdate plugin hook. No new js-client hooks are added.
+    // ===========================================================================
+    wireConfigChangeSignal() {
+        if (typeof this.client.use !== "function") {
+            // TODO: no plugin surface on this client — config-change signalling is
+            // skipped. The bundle still refreshes silently in the background.
+            return;
+        }
+        let lastVersion = this.client.getConfigVersion();
+        this.client.use({
+            name: "openfeature-config-change",
+            onConfigUpdate: () => {
+                const next = this.client.getConfigVersion();
+                if (next !== null && next !== lastVersion) {
+                    lastVersion = next;
+                    // The memo is a pure optimization, safe-to-miss, and MUST be
+                    // configVersion-invalidated (design §9, A1/A5): a background refresh
+                    // can change the served value / decisionId / propensity / configVersion,
+                    // so any memoized decision is now stale. Clearing it turns a
+                    // post-refresh exposure into a safe drop+warn (memo miss) rather than
+                    // stitching to a decision that no longer matches what the user is served.
+                    this.decisionMemo.clear();
+                    this.events.emit(ProviderEvents.ConfigurationChanged);
+                }
+            },
+        });
+    }
+}
+export default TrafficalWebProvider;
+//# sourceMappingURL=provider.js.map

package/dist/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,kBAAkB,EAClB,yBAAyB,GAU1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GAIpB,MAAM,6BAA6B,CAAC;AA8BrC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C;;;;GAIG;AACH,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAEvC;;;;;GAKG;AACH,SAAS,eAAe,CAAC,QAAwB;IAC/C,OAAO,QAAQ,CAAC,QAAQ,CAAC,YAAY,KAAK,EAAE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,OAAO,oBAAoB;IACf,QAAQ,GAAqB,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAErE,kFAAkF;IAClE,MAAM,GAAa,QAAQ,CAAC;IAE5C,mFAAmF;IACnE,MAAM,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAEtC,MAAM,CAAqB;IAC3B,OAAO,CAA2B;IAEnD,0EAA0E;IAClE,YAAY,GAAsB,EAAE,CAAC;IAE7C;;;;;OAKG;IACK,YAAY,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEzD,yDAAyD;IACjD,aAAa,GAAG,CAAC,CAAC;IAClB,aAAa,GAAG,CAAC,CAAC;IAClB,oBAAoB,GAAG,KAAK,CAAC;IAC7B,kBAAkB,GAAG,KAAK,CAAC;IAE3B,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAY,MAA0B,EAAE,OAAkC;QACxE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,wEAAwE;QACxE,wEAAwE;QACxE,sDAAsD;QACtD,IAAI,CAAC,OAAO,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;IACtD,CAAC;IAED,8EAA8E;IAC9E,YAAY;IACZ,8EAA8E;IAE9E,KAAK,CAAC,UAAU,CAAC,OAA2B;QAC1C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,YAAY,GAAG,OAAO,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;YACjC,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,sEAAsE;YACtE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE;gBACrC,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACzD,SAAS,EAAE,IAAI,kBAAkB,EAAE,CAAC,IAAI;aACzC,CAAC,CAAC;YACH,qEAAqE;YACrE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,kCAAkC;QAC3D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,sEAAsE;QACtE,oEAAoE;QACpE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,8EAA8E;IAC9E,4CAA4C;IAC5C,8EAA8E;IAE9E;;;;;;;OAOG;IACH,eAAe,CAAC,WAA8B,EAAE,UAA6B;QAC3E,IAAI,CAAC,YAAY,GAAG,UAAU,IAAI,EAAE,CAAC;QACrC,wEAAwE;QACxE,yCAAyC;QACzC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAE1B,2EAA2E;QAC3E,2EAA2E;QAC3E,qCAAqC;QACrC,MAAM,YAAY,GAAG,UAAU,EAAE,YAAY,CAAC;QAC9C,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;QACD,gDAAgD;IAClD,CAAC;IAED,8EAA8E;IAC9E,wEAAwE;IACxE,8EAA8E;IAE9E,wBAAwB,CACtB,OAAe,EACf,YAAqB,EACrB,QAA4B,EAC5B,OAAgB;QAEhB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IACxD,CAAC;IAED,uBAAuB,CACrB,OAAe,EACf,YAAoB,EACpB,QAA4B,EAC5B,OAAgB;QAEhB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED,uBAAuB,CACrB,OAAe,EACf,YAAoB,EACpB,QAA4B,EAC5B,OAAgB;QAEhB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED,uBAAuB,CACrB,OAAe,EACf,YAAe,EACf,QAA4B,EAC5B,OAAgB;QAEhB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;OAMG;IACK,OAAO,CACb,OAAe,EACf,YAAe,EACf,YAAwB;QAExB,4EAA4E;QAC5E,sEAAsE;QACtE,8CAA8C;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QAE3E,kEAAkE;QAClE,wEAAwE;QACxE,MAAM,EAAE,YAAY,EAAE,GAAG,UAAU,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC;QAC1D,MAAM,GAAG,GAAG,qBAAqB,CAAC;YAChC,YAAY,EAAE,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YACzE,UAAU;YACV,YAAY;SACb,CAAC,CAAC;QAEH,uEAAuE;QACvE,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAE9D,2EAA2E;QAC3E,2EAA2E;QAC3E,+DAA+D;QAC/D,uEAAuE;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAClC,OAAO,EAAE,GAAG;YACZ,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,YAA8B,EAAE;SACxD,CAAC,CAAC;QAEH,0EAA0E;QAC1E,gDAAgD;QAChD,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,yBAAyB,CAAC,OAAO,EAAE,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,uEAAuE;QACvE,oCAAoC;QACpC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEzC,mEAAmE;QACnE,2EAA2E;QAC3E,yEAAyE;QACzE,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACnC,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAEhC,4EAA4E;QAC5E,kDAAkD;QAClD,MAAM,OAAO,GAAG,mBAAmB,CAAI;YACrC,OAAO;YACP,YAAY;YACZ,YAAY;YACZ,QAAQ;YACR,YAAY;YACZ,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;SAC5C,CAAC,CAAC;QAEH,qEAAqE;QACrE,0EAA0E;QAC1E,2DAA2D;QAC3D,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,OAAQ,OAAO,CAAC,YAAwC,CAAC,GAAG,oBAAoB,eAAe,CAAC,CAAC;QACnG,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,8EAA8E;IAC9E,6CAA6C;IAC7C,8EAA8E;IAE9E,KAAK,CAAC,iBAAyB,EAAE,OAA8B;QAC7D,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,mBAAmB,CAAC;QAEhF,IAAI,iBAAiB,KAAK,iBAAiB,EAAE,CAAC;YAC5C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACK,aAAa,CAAC,OAA8B;QAClD,MAAM,OAAO,GAAG,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7F,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEtE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBAC/B,OAAO,CAAC,IAAI,CACV,qDAAqD,OAAO,IAAI,mBAAmB,IAAI;oBACrF,6DAA6D;oBAC7D,oFAAoF,CACvF,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACK,WAAW,CAAC,SAAiB,EAAE,OAA8B;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;QAChD,MAAM,OAAO,GACX,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAE3F,MAAM,KAAK,GAAG,OAAO,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,KAAK,OAAO;oBAAE,SAAS;gBAC5B,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,8EAA8E;IAC9E,4BAA4B;IAC5B,8EAA8E;IAEtE,wBAAwB;QAC9B,IAAI,IAAI,CAAC,oBAAoB;YAAE,OAAO;QACtC,IAAI,IAAI,CAAC,aAAa,GAAG,2BAA2B,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;YACjF,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;YACjC,MAAM,OAAO,GACX,4EAA4E;gBAC5E,SAAS,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,mBAAmB,8BAA8B,CAAC;YAC/F,OAAO,CAAC,IAAI,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;YACpD,qEAAqE;YACrE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,qEAAqE;IACrE,2EAA2E;IAC3E,8EAA8E;IAEtE,sBAAsB;QAC5B,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;YAC1C,uEAAuE;YACvE,kEAAkE;YAClE,OAAO;QACT,CAAC;QACD,IAAI,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YACd,IAAI,EAAE,2BAA2B;YACjC,cAAc,EAAE,GAAG,EAAE;gBACnB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC5C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC1C,WAAW,GAAG,IAAI,CAAC;oBACnB,6DAA6D;oBAC7D,qEAAqE;oBACrE,yEAAyE;oBACzE,6DAA6D;oBAC7D,sEAAsE;oBACtE,0EAA0E;oBAC1E,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;oBAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF;AAED,eAAe,oBAAoB,CAAC"}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@traffical/openfeature-web",
+  "version": "0.2.0",
+  "description": "OpenFeature web (static-context) provider backed by the Traffical browser SDK",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "bun test",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@traffical/core": "0.11.0",
+    "@traffical/openfeature-core": "0.2.0",
+    "@traffical/js-client": "0.16.0"
+  },
+  "peerDependencies": {
+    "@openfeature/web-sdk": "^1.9.0"
+  },
+  "devDependencies": {
+    "@openfeature/core": "^1.11.0",
+    "@openfeature/web-sdk": "^1.9.0",
+    "@traffical/sdk-spec": "^0.7.0",
+    "@types/bun": "latest",
+    "typescript": "^5.3.0"
+  },
+  "keywords": [
+    "traffical",
+    "feature-flags",
+    "experimentation",
+    "a/b-testing",
+    "openfeature",
+    "provider"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/traffical/js-sdk"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}