@uniformdev/next-app-router 20.80.0 → 20.80.1-alpha.10.sha-e0cfb4ce44

package/dist/index.esm.js

@@ -4510,6 +4510,7 @@ var bton = (base64) => {
   }
   return sign ? -number : number;
 };
+var isZeroCookieScore = (score) => Math.abs(score) < 1;
 var ssr = typeof document === "undefined";
 var UNIFORM_DEFAULT_COOKIE_NAME = "ufvd";
 var UNIFORM_DEFAULT_QUIRK_COOKIE_NAME = `ufvdqk`;
@@ -4517,6 +4518,7 @@ var _cookieName;
 var _quirkCookieName;
 var _cookieAttributes;
 var _quirksEnabled;
+var _maxBytes;
 var CookieTransitionDataStore = class extends TransitionDataStore {
   constructor({
     serverCookieValue,
@@ -4524,7 +4526,9 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
     quirkCookieValue,
     quirkCookieName = UNIFORM_DEFAULT_QUIRK_COOKIE_NAME,
     cookieName = UNIFORM_DEFAULT_COOKIE_NAME,
-    cookieAttributes = { sameSite: "lax" }
+    cookieAttributes = { sameSite: "lax" },
+    maxBytes,
+    onLogMessage
   }) {
     super({
       initialData: ssr ? parseScoreCookie(serverCookieValue, experimental_quirksEnabled ? quirkCookieValue : void 0) : void 0
@@ -4533,10 +4537,20 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
     __privateAdd5(this, _quirkCookieName);
     __privateAdd5(this, _cookieAttributes);
     __privateAdd5(this, _quirksEnabled);
+    __privateAdd5(this, _maxBytes);
+    __publicField3(this, "onLogMessage");
     __privateSet3(this, _cookieName, cookieName);
     __privateSet3(this, _cookieAttributes, cookieAttributes);
     __privateSet3(this, _quirkCookieName, quirkCookieName);
     __privateSet3(this, _quirksEnabled, experimental_quirksEnabled || false);
+    __privateSet3(this, _maxBytes, maxBytes);
+    this.onLogMessage = onLogMessage;
+    const minimumBytes = minimumCookieBytes(cookieName);
+    if (maxBytes !== void 0 && maxBytes < minimumBytes) {
+      throw new Error(
+        `maxBytes of ${maxBytes} is below the ${minimumBytes} bytes the "${cookieName}" cookie costs when it carries nothing but control group membership, so no visitor could ever meet it.`
+      );
+    }
   }
   handleDelete() {
     if (ssr) return Promise.resolve();
@@ -4546,7 +4560,15 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
   async handleUpdateData(_, computedValue) {
     if (ssr) return;
     if (computedValue.consent) {
-      api.set(__privateGet5(this, _cookieName), serializeCookie(computedValue), __privateGet5(this, _cookieAttributes));
+      const cookieValue = serializeCookie(computedValue, {
+        maxBytes: __privateGet5(this, _maxBytes),
+        cookieName: __privateGet5(this, _cookieName),
+        onBudgetExceeded: (dropped, bytes, maxBytes) => {
+          var _a;
+          return (_a = this.onLogMessage) == null ? void 0 : _a.call(this, ["info", 151, { dropped, bytes, maxBytes }]);
+        }
+      });
+      api.set(__privateGet5(this, _cookieName), cookieValue, __privateGet5(this, _cookieAttributes));
       if (__privateGet5(this, _quirksEnabled) && Object.keys(computedValue.quirks || {}).length) {
         const quirkCookieValue = serializeQuirks(computedValue.quirks || {});
         api.set(__privateGet5(this, _quirkCookieName), quirkCookieValue, __privateGet5(this, _cookieAttributes));
@@ -4563,6 +4585,7 @@ _cookieName = /* @__PURE__ */ new WeakMap();
 _quirkCookieName = /* @__PURE__ */ new WeakMap();
 _cookieAttributes = /* @__PURE__ */ new WeakMap();
 _quirksEnabled = /* @__PURE__ */ new WeakMap();
+_maxBytes = /* @__PURE__ */ new WeakMap();
 var TYPE_SEP = "~";
 var PAIR_SEP = "!";
 var KV_SEP = "-";
@@ -4634,18 +4657,66 @@ function decodeCookieType(type) {
     return acc;
   }, {});
 }
-function serializeCookie(data) {
+function serializeCookie(data, options = {}) {
+  const { maxBytes, cookieName = UNIFORM_DEFAULT_COOKIE_NAME, onBudgetExceeded } = options;
+  const parts = {
+    tests: { ...data.tests },
+    sessionScores: encodeCookieType(data.sessionScores),
+    scores: encodeCookieType(data.scores),
+    controlGroup: data.controlGroup ? "1" : "0",
+    personalizeVariants: encodePersonalizeVariants(data.personalizeVariants)
+  };
+  let value = serializeCookieParts(parts);
+  if (maxBytes === void 0) {
+    return value;
+  }
+  const overhead = encodeCookieName(cookieName).length + 1;
+  const measure = () => overhead + api.converter.write(value, cookieName).length;
+  if (measure() <= maxBytes) {
+    return value;
+  }
+  const candidates = dropCandidates(parts, data);
+  const dropped = [];
+  for (let i = 0; i < candidates.length && measure() > maxBytes; i++) {
+    const { bucket, key } = candidates[i];
+    delete parts[bucket][key];
+    dropped.push(`${bucket}.${key}`);
+    value = serializeCookieParts(parts);
+  }
+  if (dropped.length) {
+    onBudgetExceeded == null ? void 0 : onBudgetExceeded(dropped, measure(), maxBytes);
+  }
+  return value;
+}
+function serializeCookieParts(parts) {
   return [
-    serializeCookieType(data.tests),
-    serializeCookieType(encodeCookieType(data.sessionScores)),
-    serializeCookieType(encodeCookieType(data.scores)),
-    data.controlGroup ? "1" : "0",
-    serializePersonalizeVariants(data)
+    serializeCookieType(parts.tests),
+    serializeCookieType(parts.sessionScores),
+    serializeCookieType(parts.scores),
+    parts.controlGroup,
+    serializeCookieType(parts.personalizeVariants)
   ].join(TYPE_SEP);
 }
-function serializePersonalizeVariants({
-  personalizeVariants
-}) {
+function dropCandidates(parts, data) {
+  const dimensions = ["sessionScores", "scores"].flatMap(
+    (bucket, order) => Object.keys(parts[bucket]).map((key) => {
+      var _a;
+      return { bucket, key, order, score: (_a = data[bucket][key]) != null ? _a : 0 };
+    })
+  );
+  dimensions.sort(
+    (a, b) => Number(isZeroCookieScore(b.score)) - Number(isZeroCookieScore(a.score)) || a.score - b.score || a.order - b.order || (a.key < b.key ? -1 : 1)
+  );
+  const keysOf = (bucket) => Object.keys(parts[bucket]).sort().map((key) => ({ bucket, key }));
+  return [...dimensions, ...keysOf("personalizeVariants"), ...keysOf("tests")];
+}
+function minimumCookieBytes(cookieName) {
+  return encodeCookieName(cookieName).length + 6;
+}
+function encodeCookieName(name) {
+  return encodeURIComponent(name).replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent).replace(/\(/g, "%28").replace(/\)/g, "%29");
+}
+function encodePersonalizeVariants(personalizeVariants) {
   const data = {};
   if (typeof personalizeVariants === "object") {
     Object.keys(personalizeVariants).forEach((personalizationName) => {
@@ -4657,8 +4728,7 @@ function serializePersonalizeVariants({
       data[personalizationName] = results.join(",");
     });
   }
-  const serialized = serializeCookieType(data);
-  return serialized;
+  return data;
 }
 function decodePersonalizeVariants(data) {
   const parsed = parseCookieType(data);
@@ -4705,6 +4775,7 @@ fetchData_fn = async function() {
     this.signalAsyncDataUpdate(serviceData);
   }
 };
+var isSystemDimension = (dimension) => dimension.startsWith("$");
 var emptyVisitorData = () => ({
   quirks: {},
   scores: {},
@@ -4840,6 +4911,9 @@ var replaceData_fn;
 var setVisitTimeout_fn;
 var isExpired_fn;
 var handleCaps_fn;
+var pruningManifest_get;
+var handlePruning_fn;
+var pruneScores_fn;
 var defaultData_fn;
 var VisitorDataStore = class {
   constructor(options) {
@@ -4950,6 +5024,7 @@ replaceData_fn = function(data, quiet = false) {
     sessionScores: data.sessionScores,
     onLogMessage: __privateGet5(this, _options).onLogMessage
   });
+  __privateMethod2(this, _VisitorDataStore_instances, handlePruning_fn).call(this, data);
   const haveScoresChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.scores, data.scores);
   const haveSessionScoresChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.sessionScores, data.sessionScores);
   const haveQuirksChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.quirks, data.quirks);
@@ -5022,6 +5097,48 @@ handleCaps_fn = function(scores) {
     }
   }
 };
+pruningManifest_get = function() {
+  var _a, _b, _c, _d, _e;
+  const project = (_b = (_a = __privateGet5(this, _options).manifest) == null ? void 0 : _a.data) == null ? void 0 : _b.project;
+  const populated = [(_c = project == null ? void 0 : project.pz) == null ? void 0 : _c.sig, (_d = project == null ? void 0 : project.pz) == null ? void 0 : _d.enr, (_e = project == null ? void 0 : project.pz) == null ? void 0 : _e.agg, project == null ? void 0 : project.test].some(
+    (definitions) => definitions && Object.keys(definitions).length > 0
+  );
+  return populated ? __privateGet5(this, _options).manifest : void 0;
+};
+handlePruning_fn = function(data) {
+  var _a, _b;
+  const { pruneUnknownTests, pruneUnknownDimensions } = __privateGet5(this, _options);
+  const manifest = pruneUnknownTests || pruneUnknownDimensions ? __privateGet5(this, _VisitorDataStore_instances, pruningManifest_get) : void 0;
+  const pruned = [];
+  if (pruneUnknownTests && manifest) {
+    for (const test in data.tests) {
+      if (!manifest.getTest(test)) {
+        delete data.tests[test];
+        pruned.push(`tests.${test}`);
+      }
+    }
+  }
+  __privateMethod2(this, _VisitorDataStore_instances, pruneScores_fn).call(this, data.scores, "scores", pruned, manifest);
+  __privateMethod2(this, _VisitorDataStore_instances, pruneScores_fn).call(this, data.sessionScores, "sessionScores", pruned, manifest);
+  if (pruned.length) {
+    (_b = (_a = __privateGet5(this, _options)).onLogMessage) == null ? void 0 : _b.call(_a, ["info", 150, pruned]);
+  }
+};
+pruneScores_fn = function(scores, bucket, pruned, manifest) {
+  const { pruneUnknownDimensions, pruneZeroScores } = __privateGet5(this, _options);
+  if (!pruneUnknownDimensions && !pruneZeroScores) {
+    return;
+  }
+  const pruneUnknown = pruneUnknownDimensions && manifest;
+  for (const dim in scores) {
+    const isUnknown = pruneUnknown && !isSystemDimension(dim) && !manifest.getDimensionByKey(dim);
+    const isZero = pruneZeroScores && (pruneZeroScores === "round" ? isZeroCookieScore(scores[dim]) : scores[dim] === 0);
+    if (isUnknown || isZero) {
+      delete scores[dim];
+      pruned.push(`${bucket}.${dim}`);
+    }
+  }
+};
 defaultData_fn = function() {
   var _a, _b, _c;
   return {
@@ -5555,6 +5672,9 @@ var dc2 = (0, import_rfdc3.default)();
 
 // src/config/helpers.ts
 import config from "@uniformdev/next-app-router/config/resolved";
+var getServerConfig = () => {
+  return config;
+};
 var getDisabledDevTools = () => {
   var _a;
   if (typeof ((_a = config.context) == null ? void 0 : _a.disableDevTools) === "boolean") {
@@ -6258,6 +6378,7 @@ var UniformContext = async ({ clientContextComponent, result }) => {
   const disableDevTools = getDisabledDevTools();
   const defaultConsent = (_a = result == null ? void 0 : result.pageState.defaultConsent) != null ? _a : getDefaultConsent();
   const experimentalQuirkSerialization = getQuirkSerialization();
+  const contextConfig = getServerConfig().context;
   return /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(
     ContextComponent,
     {
@@ -6265,6 +6386,10 @@ var UniformContext = async ({ clientContextComponent, result }) => {
       disableDevTools,
       defaultConsent,
       experimentalQuirkSerialization,
+      cookieMaxBytes: contextConfig == null ? void 0 : contextConfig.cookieMaxBytes,
+      pruneUnknownTests: contextConfig == null ? void 0 : contextConfig.pruneUnknownTests,
+      pruneUnknownDimensions: contextConfig == null ? void 0 : contextConfig.pruneUnknownDimensions,
+      pruneZeroScores: contextConfig == null ? void 0 : contextConfig.pruneZeroScores,
       compositionMetadata
     }
   ));

package/dist/index.js

@@ -4536,6 +4536,7 @@ var bton = (base64) => {
   }
   return sign ? -number : number;
 };
+var isZeroCookieScore = (score) => Math.abs(score) < 1;
 var ssr = typeof document === "undefined";
 var UNIFORM_DEFAULT_COOKIE_NAME = "ufvd";
 var UNIFORM_DEFAULT_QUIRK_COOKIE_NAME = `ufvdqk`;
@@ -4543,6 +4544,7 @@ var _cookieName;
 var _quirkCookieName;
 var _cookieAttributes;
 var _quirksEnabled;
+var _maxBytes;
 var CookieTransitionDataStore = class extends TransitionDataStore {
   constructor({
     serverCookieValue,
@@ -4550,7 +4552,9 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
     quirkCookieValue,
     quirkCookieName = UNIFORM_DEFAULT_QUIRK_COOKIE_NAME,
     cookieName = UNIFORM_DEFAULT_COOKIE_NAME,
-    cookieAttributes = { sameSite: "lax" }
+    cookieAttributes = { sameSite: "lax" },
+    maxBytes,
+    onLogMessage
   }) {
     super({
       initialData: ssr ? parseScoreCookie(serverCookieValue, experimental_quirksEnabled ? quirkCookieValue : void 0) : void 0
@@ -4559,10 +4563,20 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
     __privateAdd5(this, _quirkCookieName);
     __privateAdd5(this, _cookieAttributes);
     __privateAdd5(this, _quirksEnabled);
+    __privateAdd5(this, _maxBytes);
+    __publicField3(this, "onLogMessage");
     __privateSet3(this, _cookieName, cookieName);
     __privateSet3(this, _cookieAttributes, cookieAttributes);
     __privateSet3(this, _quirkCookieName, quirkCookieName);
     __privateSet3(this, _quirksEnabled, experimental_quirksEnabled || false);
+    __privateSet3(this, _maxBytes, maxBytes);
+    this.onLogMessage = onLogMessage;
+    const minimumBytes = minimumCookieBytes(cookieName);
+    if (maxBytes !== void 0 && maxBytes < minimumBytes) {
+      throw new Error(
+        `maxBytes of ${maxBytes} is below the ${minimumBytes} bytes the "${cookieName}" cookie costs when it carries nothing but control group membership, so no visitor could ever meet it.`
+      );
+    }
   }
   handleDelete() {
     if (ssr) return Promise.resolve();
@@ -4572,7 +4586,15 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
   async handleUpdateData(_, computedValue) {
     if (ssr) return;
     if (computedValue.consent) {
-      api.set(__privateGet5(this, _cookieName), serializeCookie(computedValue), __privateGet5(this, _cookieAttributes));
+      const cookieValue = serializeCookie(computedValue, {
+        maxBytes: __privateGet5(this, _maxBytes),
+        cookieName: __privateGet5(this, _cookieName),
+        onBudgetExceeded: (dropped, bytes, maxBytes) => {
+          var _a;
+          return (_a = this.onLogMessage) == null ? void 0 : _a.call(this, ["info", 151, { dropped, bytes, maxBytes }]);
+        }
+      });
+      api.set(__privateGet5(this, _cookieName), cookieValue, __privateGet5(this, _cookieAttributes));
       if (__privateGet5(this, _quirksEnabled) && Object.keys(computedValue.quirks || {}).length) {
         const quirkCookieValue = serializeQuirks(computedValue.quirks || {});
         api.set(__privateGet5(this, _quirkCookieName), quirkCookieValue, __privateGet5(this, _cookieAttributes));
@@ -4589,6 +4611,7 @@ _cookieName = /* @__PURE__ */ new WeakMap();
 _quirkCookieName = /* @__PURE__ */ new WeakMap();
 _cookieAttributes = /* @__PURE__ */ new WeakMap();
 _quirksEnabled = /* @__PURE__ */ new WeakMap();
+_maxBytes = /* @__PURE__ */ new WeakMap();
 var TYPE_SEP = "~";
 var PAIR_SEP = "!";
 var KV_SEP = "-";
@@ -4660,18 +4683,66 @@ function decodeCookieType(type) {
     return acc;
   }, {});
 }
-function serializeCookie(data) {
+function serializeCookie(data, options = {}) {
+  const { maxBytes, cookieName = UNIFORM_DEFAULT_COOKIE_NAME, onBudgetExceeded } = options;
+  const parts = {
+    tests: { ...data.tests },
+    sessionScores: encodeCookieType(data.sessionScores),
+    scores: encodeCookieType(data.scores),
+    controlGroup: data.controlGroup ? "1" : "0",
+    personalizeVariants: encodePersonalizeVariants(data.personalizeVariants)
+  };
+  let value = serializeCookieParts(parts);
+  if (maxBytes === void 0) {
+    return value;
+  }
+  const overhead = encodeCookieName(cookieName).length + 1;
+  const measure = () => overhead + api.converter.write(value, cookieName).length;
+  if (measure() <= maxBytes) {
+    return value;
+  }
+  const candidates = dropCandidates(parts, data);
+  const dropped = [];
+  for (let i = 0; i < candidates.length && measure() > maxBytes; i++) {
+    const { bucket, key } = candidates[i];
+    delete parts[bucket][key];
+    dropped.push(`${bucket}.${key}`);
+    value = serializeCookieParts(parts);
+  }
+  if (dropped.length) {
+    onBudgetExceeded == null ? void 0 : onBudgetExceeded(dropped, measure(), maxBytes);
+  }
+  return value;
+}
+function serializeCookieParts(parts) {
   return [
-    serializeCookieType(data.tests),
-    serializeCookieType(encodeCookieType(data.sessionScores)),
-    serializeCookieType(encodeCookieType(data.scores)),
-    data.controlGroup ? "1" : "0",
-    serializePersonalizeVariants(data)
+    serializeCookieType(parts.tests),
+    serializeCookieType(parts.sessionScores),
+    serializeCookieType(parts.scores),
+    parts.controlGroup,
+    serializeCookieType(parts.personalizeVariants)
   ].join(TYPE_SEP);
 }
-function serializePersonalizeVariants({
-  personalizeVariants
-}) {
+function dropCandidates(parts, data) {
+  const dimensions = ["sessionScores", "scores"].flatMap(
+    (bucket, order) => Object.keys(parts[bucket]).map((key) => {
+      var _a;
+      return { bucket, key, order, score: (_a = data[bucket][key]) != null ? _a : 0 };
+    })
+  );
+  dimensions.sort(
+    (a, b) => Number(isZeroCookieScore(b.score)) - Number(isZeroCookieScore(a.score)) || a.score - b.score || a.order - b.order || (a.key < b.key ? -1 : 1)
+  );
+  const keysOf = (bucket) => Object.keys(parts[bucket]).sort().map((key) => ({ bucket, key }));
+  return [...dimensions, ...keysOf("personalizeVariants"), ...keysOf("tests")];
+}
+function minimumCookieBytes(cookieName) {
+  return encodeCookieName(cookieName).length + 6;
+}
+function encodeCookieName(name) {
+  return encodeURIComponent(name).replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent).replace(/\(/g, "%28").replace(/\)/g, "%29");
+}
+function encodePersonalizeVariants(personalizeVariants) {
   const data = {};
   if (typeof personalizeVariants === "object") {
     Object.keys(personalizeVariants).forEach((personalizationName) => {
@@ -4683,8 +4754,7 @@ function serializePersonalizeVariants({
       data[personalizationName] = results.join(",");
     });
   }
-  const serialized = serializeCookieType(data);
-  return serialized;
+  return data;
 }
 function decodePersonalizeVariants(data) {
   const parsed = parseCookieType(data);
@@ -4731,6 +4801,7 @@ fetchData_fn = async function() {
     this.signalAsyncDataUpdate(serviceData);
   }
 };
+var isSystemDimension = (dimension) => dimension.startsWith("$");
 var emptyVisitorData = () => ({
   quirks: {},
   scores: {},
@@ -4866,6 +4937,9 @@ var replaceData_fn;
 var setVisitTimeout_fn;
 var isExpired_fn;
 var handleCaps_fn;
+var pruningManifest_get;
+var handlePruning_fn;
+var pruneScores_fn;
 var defaultData_fn;
 var VisitorDataStore = class {
   constructor(options) {
@@ -4976,6 +5050,7 @@ replaceData_fn = function(data, quiet = false) {
     sessionScores: data.sessionScores,
     onLogMessage: __privateGet5(this, _options).onLogMessage
   });
+  __privateMethod2(this, _VisitorDataStore_instances, handlePruning_fn).call(this, data);
   const haveScoresChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.scores, data.scores);
   const haveSessionScoresChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.sessionScores, data.sessionScores);
   const haveQuirksChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.quirks, data.quirks);
@@ -5048,6 +5123,48 @@ handleCaps_fn = function(scores) {
     }
   }
 };
+pruningManifest_get = function() {
+  var _a, _b, _c, _d, _e;
+  const project = (_b = (_a = __privateGet5(this, _options).manifest) == null ? void 0 : _a.data) == null ? void 0 : _b.project;
+  const populated = [(_c = project == null ? void 0 : project.pz) == null ? void 0 : _c.sig, (_d = project == null ? void 0 : project.pz) == null ? void 0 : _d.enr, (_e = project == null ? void 0 : project.pz) == null ? void 0 : _e.agg, project == null ? void 0 : project.test].some(
+    (definitions) => definitions && Object.keys(definitions).length > 0
+  );
+  return populated ? __privateGet5(this, _options).manifest : void 0;
+};
+handlePruning_fn = function(data) {
+  var _a, _b;
+  const { pruneUnknownTests, pruneUnknownDimensions } = __privateGet5(this, _options);
+  const manifest = pruneUnknownTests || pruneUnknownDimensions ? __privateGet5(this, _VisitorDataStore_instances, pruningManifest_get) : void 0;
+  const pruned = [];
+  if (pruneUnknownTests && manifest) {
+    for (const test in data.tests) {
+      if (!manifest.getTest(test)) {
+        delete data.tests[test];
+        pruned.push(`tests.${test}`);
+      }
+    }
+  }
+  __privateMethod2(this, _VisitorDataStore_instances, pruneScores_fn).call(this, data.scores, "scores", pruned, manifest);
+  __privateMethod2(this, _VisitorDataStore_instances, pruneScores_fn).call(this, data.sessionScores, "sessionScores", pruned, manifest);
+  if (pruned.length) {
+    (_b = (_a = __privateGet5(this, _options)).onLogMessage) == null ? void 0 : _b.call(_a, ["info", 150, pruned]);
+  }
+};
+pruneScores_fn = function(scores, bucket, pruned, manifest) {
+  const { pruneUnknownDimensions, pruneZeroScores } = __privateGet5(this, _options);
+  if (!pruneUnknownDimensions && !pruneZeroScores) {
+    return;
+  }
+  const pruneUnknown = pruneUnknownDimensions && manifest;
+  for (const dim in scores) {
+    const isUnknown = pruneUnknown && !isSystemDimension(dim) && !manifest.getDimensionByKey(dim);
+    const isZero = pruneZeroScores && (pruneZeroScores === "round" ? isZeroCookieScore(scores[dim]) : scores[dim] === 0);
+    if (isUnknown || isZero) {
+      delete scores[dim];
+      pruned.push(`${bucket}.${dim}`);
+    }
+  }
+};
 defaultData_fn = function() {
   var _a, _b, _c;
   return {
@@ -5581,6 +5698,9 @@ var dc2 = (0, import_rfdc3.default)();
 
 // src/config/helpers.ts
 var import_resolved = __toESM(require("@uniformdev/next-app-router/config/resolved"));
+var getServerConfig = () => {
+  return import_resolved.default;
+};
 var getDisabledDevTools = () => {
   var _a;
   if (typeof ((_a = import_resolved.default.context) == null ? void 0 : _a.disableDevTools) === "boolean") {
@@ -6277,6 +6397,7 @@ var UniformContext = async ({ clientContextComponent, result }) => {
   const disableDevTools = getDisabledDevTools();
   const defaultConsent = (_a = result == null ? void 0 : result.pageState.defaultConsent) != null ? _a : getDefaultConsent();
   const experimentalQuirkSerialization = getQuirkSerialization();
+  const contextConfig = getServerConfig().context;
   return /* @__PURE__ */ import_react3.default.createElement(import_react3.default.Fragment, null, /* @__PURE__ */ import_react3.default.createElement(
     ContextComponent,
     {
@@ -6284,6 +6405,10 @@ var UniformContext = async ({ clientContextComponent, result }) => {
       disableDevTools,
       defaultConsent,
       experimentalQuirkSerialization,
+      cookieMaxBytes: contextConfig == null ? void 0 : contextConfig.cookieMaxBytes,
+      pruneUnknownTests: contextConfig == null ? void 0 : contextConfig.pruneUnknownTests,
+      pruneUnknownDimensions: contextConfig == null ? void 0 : contextConfig.pruneUnknownDimensions,
+      pruneZeroScores: contextConfig == null ? void 0 : contextConfig.pruneZeroScores,
       compositionMetadata
     }
   ));

package/dist/index.mjs

@@ -4510,6 +4510,7 @@ var bton = (base64) => {
   }
   return sign ? -number : number;
 };
+var isZeroCookieScore = (score) => Math.abs(score) < 1;
 var ssr = typeof document === "undefined";
 var UNIFORM_DEFAULT_COOKIE_NAME = "ufvd";
 var UNIFORM_DEFAULT_QUIRK_COOKIE_NAME = `ufvdqk`;
@@ -4517,6 +4518,7 @@ var _cookieName;
 var _quirkCookieName;
 var _cookieAttributes;
 var _quirksEnabled;
+var _maxBytes;
 var CookieTransitionDataStore = class extends TransitionDataStore {
   constructor({
     serverCookieValue,
@@ -4524,7 +4526,9 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
     quirkCookieValue,
     quirkCookieName = UNIFORM_DEFAULT_QUIRK_COOKIE_NAME,
     cookieName = UNIFORM_DEFAULT_COOKIE_NAME,
-    cookieAttributes = { sameSite: "lax" }
+    cookieAttributes = { sameSite: "lax" },
+    maxBytes,
+    onLogMessage
   }) {
     super({
       initialData: ssr ? parseScoreCookie(serverCookieValue, experimental_quirksEnabled ? quirkCookieValue : void 0) : void 0
@@ -4533,10 +4537,20 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
     __privateAdd5(this, _quirkCookieName);
     __privateAdd5(this, _cookieAttributes);
     __privateAdd5(this, _quirksEnabled);
+    __privateAdd5(this, _maxBytes);
+    __publicField3(this, "onLogMessage");
     __privateSet3(this, _cookieName, cookieName);
     __privateSet3(this, _cookieAttributes, cookieAttributes);
     __privateSet3(this, _quirkCookieName, quirkCookieName);
     __privateSet3(this, _quirksEnabled, experimental_quirksEnabled || false);
+    __privateSet3(this, _maxBytes, maxBytes);
+    this.onLogMessage = onLogMessage;
+    const minimumBytes = minimumCookieBytes(cookieName);
+    if (maxBytes !== void 0 && maxBytes < minimumBytes) {
+      throw new Error(
+        `maxBytes of ${maxBytes} is below the ${minimumBytes} bytes the "${cookieName}" cookie costs when it carries nothing but control group membership, so no visitor could ever meet it.`
+      );
+    }
   }
   handleDelete() {
     if (ssr) return Promise.resolve();
@@ -4546,7 +4560,15 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
   async handleUpdateData(_, computedValue) {
     if (ssr) return;
     if (computedValue.consent) {
-      api.set(__privateGet5(this, _cookieName), serializeCookie(computedValue), __privateGet5(this, _cookieAttributes));
+      const cookieValue = serializeCookie(computedValue, {
+        maxBytes: __privateGet5(this, _maxBytes),
+        cookieName: __privateGet5(this, _cookieName),
+        onBudgetExceeded: (dropped, bytes, maxBytes) => {
+          var _a;
+          return (_a = this.onLogMessage) == null ? void 0 : _a.call(this, ["info", 151, { dropped, bytes, maxBytes }]);
+        }
+      });
+      api.set(__privateGet5(this, _cookieName), cookieValue, __privateGet5(this, _cookieAttributes));
       if (__privateGet5(this, _quirksEnabled) && Object.keys(computedValue.quirks || {}).length) {
         const quirkCookieValue = serializeQuirks(computedValue.quirks || {});
         api.set(__privateGet5(this, _quirkCookieName), quirkCookieValue, __privateGet5(this, _cookieAttributes));
@@ -4563,6 +4585,7 @@ _cookieName = /* @__PURE__ */ new WeakMap();
 _quirkCookieName = /* @__PURE__ */ new WeakMap();
 _cookieAttributes = /* @__PURE__ */ new WeakMap();
 _quirksEnabled = /* @__PURE__ */ new WeakMap();
+_maxBytes = /* @__PURE__ */ new WeakMap();
 var TYPE_SEP = "~";
 var PAIR_SEP = "!";
 var KV_SEP = "-";
@@ -4634,18 +4657,66 @@ function decodeCookieType(type) {
     return acc;
   }, {});
 }
-function serializeCookie(data) {
+function serializeCookie(data, options = {}) {
+  const { maxBytes, cookieName = UNIFORM_DEFAULT_COOKIE_NAME, onBudgetExceeded } = options;
+  const parts = {
+    tests: { ...data.tests },
+    sessionScores: encodeCookieType(data.sessionScores),
+    scores: encodeCookieType(data.scores),
+    controlGroup: data.controlGroup ? "1" : "0",
+    personalizeVariants: encodePersonalizeVariants(data.personalizeVariants)
+  };
+  let value = serializeCookieParts(parts);
+  if (maxBytes === void 0) {
+    return value;
+  }
+  const overhead = encodeCookieName(cookieName).length + 1;
+  const measure = () => overhead + api.converter.write(value, cookieName).length;
+  if (measure() <= maxBytes) {
+    return value;
+  }
+  const candidates = dropCandidates(parts, data);
+  const dropped = [];
+  for (let i = 0; i < candidates.length && measure() > maxBytes; i++) {
+    const { bucket, key } = candidates[i];
+    delete parts[bucket][key];
+    dropped.push(`${bucket}.${key}`);
+    value = serializeCookieParts(parts);
+  }
+  if (dropped.length) {
+    onBudgetExceeded == null ? void 0 : onBudgetExceeded(dropped, measure(), maxBytes);
+  }
+  return value;
+}
+function serializeCookieParts(parts) {
   return [
-    serializeCookieType(data.tests),
-    serializeCookieType(encodeCookieType(data.sessionScores)),
-    serializeCookieType(encodeCookieType(data.scores)),
-    data.controlGroup ? "1" : "0",
-    serializePersonalizeVariants(data)
+    serializeCookieType(parts.tests),
+    serializeCookieType(parts.sessionScores),
+    serializeCookieType(parts.scores),
+    parts.controlGroup,
+    serializeCookieType(parts.personalizeVariants)
   ].join(TYPE_SEP);
 }
-function serializePersonalizeVariants({
-  personalizeVariants
-}) {
+function dropCandidates(parts, data) {
+  const dimensions = ["sessionScores", "scores"].flatMap(
+    (bucket, order) => Object.keys(parts[bucket]).map((key) => {
+      var _a;
+      return { bucket, key, order, score: (_a = data[bucket][key]) != null ? _a : 0 };
+    })
+  );
+  dimensions.sort(
+    (a, b) => Number(isZeroCookieScore(b.score)) - Number(isZeroCookieScore(a.score)) || a.score - b.score || a.order - b.order || (a.key < b.key ? -1 : 1)
+  );
+  const keysOf = (bucket) => Object.keys(parts[bucket]).sort().map((key) => ({ bucket, key }));
+  return [...dimensions, ...keysOf("personalizeVariants"), ...keysOf("tests")];
+}
+function minimumCookieBytes(cookieName) {
+  return encodeCookieName(cookieName).length + 6;
+}
+function encodeCookieName(name) {
+  return encodeURIComponent(name).replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent).replace(/\(/g, "%28").replace(/\)/g, "%29");
+}
+function encodePersonalizeVariants(personalizeVariants) {
   const data = {};
   if (typeof personalizeVariants === "object") {
     Object.keys(personalizeVariants).forEach((personalizationName) => {
@@ -4657,8 +4728,7 @@ function serializePersonalizeVariants({
       data[personalizationName] = results.join(",");
     });
   }
-  const serialized = serializeCookieType(data);
-  return serialized;
+  return data;
 }
 function decodePersonalizeVariants(data) {
   const parsed = parseCookieType(data);
@@ -4705,6 +4775,7 @@ fetchData_fn = async function() {
     this.signalAsyncDataUpdate(serviceData);
   }
 };
+var isSystemDimension = (dimension) => dimension.startsWith("$");
 var emptyVisitorData = () => ({
   quirks: {},
   scores: {},
@@ -4840,6 +4911,9 @@ var replaceData_fn;
 var setVisitTimeout_fn;
 var isExpired_fn;
 var handleCaps_fn;
+var pruningManifest_get;
+var handlePruning_fn;
+var pruneScores_fn;
 var defaultData_fn;
 var VisitorDataStore = class {
   constructor(options) {
@@ -4950,6 +5024,7 @@ replaceData_fn = function(data, quiet = false) {
     sessionScores: data.sessionScores,
     onLogMessage: __privateGet5(this, _options).onLogMessage
   });
+  __privateMethod2(this, _VisitorDataStore_instances, handlePruning_fn).call(this, data);
   const haveScoresChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.scores, data.scores);
   const haveSessionScoresChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.sessionScores, data.sessionScores);
   const haveQuirksChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.quirks, data.quirks);
@@ -5022,6 +5097,48 @@ handleCaps_fn = function(scores) {
     }
   }
 };
+pruningManifest_get = function() {
+  var _a, _b, _c, _d, _e;
+  const project = (_b = (_a = __privateGet5(this, _options).manifest) == null ? void 0 : _a.data) == null ? void 0 : _b.project;
+  const populated = [(_c = project == null ? void 0 : project.pz) == null ? void 0 : _c.sig, (_d = project == null ? void 0 : project.pz) == null ? void 0 : _d.enr, (_e = project == null ? void 0 : project.pz) == null ? void 0 : _e.agg, project == null ? void 0 : project.test].some(
+    (definitions) => definitions && Object.keys(definitions).length > 0
+  );
+  return populated ? __privateGet5(this, _options).manifest : void 0;
+};
+handlePruning_fn = function(data) {
+  var _a, _b;
+  const { pruneUnknownTests, pruneUnknownDimensions } = __privateGet5(this, _options);
+  const manifest = pruneUnknownTests || pruneUnknownDimensions ? __privateGet5(this, _VisitorDataStore_instances, pruningManifest_get) : void 0;
+  const pruned = [];
+  if (pruneUnknownTests && manifest) {
+    for (const test in data.tests) {
+      if (!manifest.getTest(test)) {
+        delete data.tests[test];
+        pruned.push(`tests.${test}`);
+      }
+    }
+  }
+  __privateMethod2(this, _VisitorDataStore_instances, pruneScores_fn).call(this, data.scores, "scores", pruned, manifest);
+  __privateMethod2(this, _VisitorDataStore_instances, pruneScores_fn).call(this, data.sessionScores, "sessionScores", pruned, manifest);
+  if (pruned.length) {
+    (_b = (_a = __privateGet5(this, _options)).onLogMessage) == null ? void 0 : _b.call(_a, ["info", 150, pruned]);
+  }
+};
+pruneScores_fn = function(scores, bucket, pruned, manifest) {
+  const { pruneUnknownDimensions, pruneZeroScores } = __privateGet5(this, _options);
+  if (!pruneUnknownDimensions && !pruneZeroScores) {
+    return;
+  }
+  const pruneUnknown = pruneUnknownDimensions && manifest;
+  for (const dim in scores) {
+    const isUnknown = pruneUnknown && !isSystemDimension(dim) && !manifest.getDimensionByKey(dim);
+    const isZero = pruneZeroScores && (pruneZeroScores === "round" ? isZeroCookieScore(scores[dim]) : scores[dim] === 0);
+    if (isUnknown || isZero) {
+      delete scores[dim];
+      pruned.push(`${bucket}.${dim}`);
+    }
+  }
+};
 defaultData_fn = function() {
   var _a, _b, _c;
   return {
@@ -5555,6 +5672,9 @@ var dc2 = (0, import_rfdc3.default)();
 
 // src/config/helpers.ts
 import config from "@uniformdev/next-app-router/config/resolved";
+var getServerConfig = () => {
+  return config;
+};
 var getDisabledDevTools = () => {
   var _a;
   if (typeof ((_a = config.context) == null ? void 0 : _a.disableDevTools) === "boolean") {
@@ -6258,6 +6378,7 @@ var UniformContext = async ({ clientContextComponent, result }) => {
   const disableDevTools = getDisabledDevTools();
   const defaultConsent = (_a = result == null ? void 0 : result.pageState.defaultConsent) != null ? _a : getDefaultConsent();
   const experimentalQuirkSerialization = getQuirkSerialization();
+  const contextConfig = getServerConfig().context;
   return /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(
     ContextComponent,
     {
@@ -6265,6 +6386,10 @@ var UniformContext = async ({ clientContextComponent, result }) => {
       disableDevTools,
       defaultConsent,
       experimentalQuirkSerialization,
+      cookieMaxBytes: contextConfig == null ? void 0 : contextConfig.cookieMaxBytes,
+      pruneUnknownTests: contextConfig == null ? void 0 : contextConfig.pruneUnknownTests,
+      pruneUnknownDimensions: contextConfig == null ? void 0 : contextConfig.pruneUnknownDimensions,
+      pruneZeroScores: contextConfig == null ? void 0 : contextConfig.pruneZeroScores,
       compositionMetadata
     }
   ));

package/dist/middleware.js

@@ -4487,6 +4487,7 @@ var bton = (base64) => {
   }
   return sign ? -number : number;
 };
+var isZeroCookieScore = (score) => Math.abs(score) < 1;
 var ssr = typeof document === "undefined";
 var UNIFORM_DEFAULT_COOKIE_NAME = "ufvd";
 var UNIFORM_DEFAULT_QUIRK_COOKIE_NAME = `ufvdqk`;
@@ -4494,6 +4495,7 @@ var _cookieName;
 var _quirkCookieName;
 var _cookieAttributes;
 var _quirksEnabled;
+var _maxBytes;
 var CookieTransitionDataStore = class extends TransitionDataStore {
   constructor({
     serverCookieValue,
@@ -4501,7 +4503,9 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
     quirkCookieValue,
     quirkCookieName = UNIFORM_DEFAULT_QUIRK_COOKIE_NAME,
     cookieName = UNIFORM_DEFAULT_COOKIE_NAME,
-    cookieAttributes = { sameSite: "lax" }
+    cookieAttributes = { sameSite: "lax" },
+    maxBytes,
+    onLogMessage
   }) {
     super({
       initialData: ssr ? parseScoreCookie(serverCookieValue, experimental_quirksEnabled ? quirkCookieValue : void 0) : void 0
@@ -4510,10 +4514,20 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
     __privateAdd4(this, _quirkCookieName);
     __privateAdd4(this, _cookieAttributes);
     __privateAdd4(this, _quirksEnabled);
+    __privateAdd4(this, _maxBytes);
+    __publicField3(this, "onLogMessage");
     __privateSet2(this, _cookieName, cookieName);
     __privateSet2(this, _cookieAttributes, cookieAttributes);
     __privateSet2(this, _quirkCookieName, quirkCookieName);
     __privateSet2(this, _quirksEnabled, experimental_quirksEnabled || false);
+    __privateSet2(this, _maxBytes, maxBytes);
+    this.onLogMessage = onLogMessage;
+    const minimumBytes = minimumCookieBytes(cookieName);
+    if (maxBytes !== void 0 && maxBytes < minimumBytes) {
+      throw new Error(
+        `maxBytes of ${maxBytes} is below the ${minimumBytes} bytes the "${cookieName}" cookie costs when it carries nothing but control group membership, so no visitor could ever meet it.`
+      );
+    }
   }
   handleDelete() {
     if (ssr) return Promise.resolve();
@@ -4523,7 +4537,15 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
   async handleUpdateData(_, computedValue) {
     if (ssr) return;
     if (computedValue.consent) {
-      api.set(__privateGet4(this, _cookieName), serializeCookie(computedValue), __privateGet4(this, _cookieAttributes));
+      const cookieValue = serializeCookie(computedValue, {
+        maxBytes: __privateGet4(this, _maxBytes),
+        cookieName: __privateGet4(this, _cookieName),
+        onBudgetExceeded: (dropped, bytes, maxBytes) => {
+          var _a;
+          return (_a = this.onLogMessage) == null ? void 0 : _a.call(this, ["info", 151, { dropped, bytes, maxBytes }]);
+        }
+      });
+      api.set(__privateGet4(this, _cookieName), cookieValue, __privateGet4(this, _cookieAttributes));
       if (__privateGet4(this, _quirksEnabled) && Object.keys(computedValue.quirks || {}).length) {
         const quirkCookieValue = serializeQuirks(computedValue.quirks || {});
         api.set(__privateGet4(this, _quirkCookieName), quirkCookieValue, __privateGet4(this, _cookieAttributes));
@@ -4540,6 +4562,7 @@ _cookieName = /* @__PURE__ */ new WeakMap();
 _quirkCookieName = /* @__PURE__ */ new WeakMap();
 _cookieAttributes = /* @__PURE__ */ new WeakMap();
 _quirksEnabled = /* @__PURE__ */ new WeakMap();
+_maxBytes = /* @__PURE__ */ new WeakMap();
 var TYPE_SEP = "~";
 var PAIR_SEP = "!";
 var KV_SEP = "-";
@@ -4611,18 +4634,66 @@ function decodeCookieType(type) {
     return acc;
   }, {});
 }
-function serializeCookie(data) {
+function serializeCookie(data, options = {}) {
+  const { maxBytes, cookieName = UNIFORM_DEFAULT_COOKIE_NAME, onBudgetExceeded } = options;
+  const parts = {
+    tests: { ...data.tests },
+    sessionScores: encodeCookieType(data.sessionScores),
+    scores: encodeCookieType(data.scores),
+    controlGroup: data.controlGroup ? "1" : "0",
+    personalizeVariants: encodePersonalizeVariants(data.personalizeVariants)
+  };
+  let value = serializeCookieParts(parts);
+  if (maxBytes === void 0) {
+    return value;
+  }
+  const overhead = encodeCookieName(cookieName).length + 1;
+  const measure = () => overhead + api.converter.write(value, cookieName).length;
+  if (measure() <= maxBytes) {
+    return value;
+  }
+  const candidates = dropCandidates(parts, data);
+  const dropped = [];
+  for (let i = 0; i < candidates.length && measure() > maxBytes; i++) {
+    const { bucket, key } = candidates[i];
+    delete parts[bucket][key];
+    dropped.push(`${bucket}.${key}`);
+    value = serializeCookieParts(parts);
+  }
+  if (dropped.length) {
+    onBudgetExceeded == null ? void 0 : onBudgetExceeded(dropped, measure(), maxBytes);
+  }
+  return value;
+}
+function serializeCookieParts(parts) {
   return [
-    serializeCookieType(data.tests),
-    serializeCookieType(encodeCookieType(data.sessionScores)),
-    serializeCookieType(encodeCookieType(data.scores)),
-    data.controlGroup ? "1" : "0",
-    serializePersonalizeVariants(data)
+    serializeCookieType(parts.tests),
+    serializeCookieType(parts.sessionScores),
+    serializeCookieType(parts.scores),
+    parts.controlGroup,
+    serializeCookieType(parts.personalizeVariants)
   ].join(TYPE_SEP);
 }
-function serializePersonalizeVariants({
-  personalizeVariants
-}) {
+function dropCandidates(parts, data) {
+  const dimensions = ["sessionScores", "scores"].flatMap(
+    (bucket, order) => Object.keys(parts[bucket]).map((key) => {
+      var _a;
+      return { bucket, key, order, score: (_a = data[bucket][key]) != null ? _a : 0 };
+    })
+  );
+  dimensions.sort(
+    (a, b) => Number(isZeroCookieScore(b.score)) - Number(isZeroCookieScore(a.score)) || a.score - b.score || a.order - b.order || (a.key < b.key ? -1 : 1)
+  );
+  const keysOf = (bucket) => Object.keys(parts[bucket]).sort().map((key) => ({ bucket, key }));
+  return [...dimensions, ...keysOf("personalizeVariants"), ...keysOf("tests")];
+}
+function minimumCookieBytes(cookieName) {
+  return encodeCookieName(cookieName).length + 6;
+}
+function encodeCookieName(name) {
+  return encodeURIComponent(name).replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent).replace(/\(/g, "%28").replace(/\)/g, "%29");
+}
+function encodePersonalizeVariants(personalizeVariants) {
   const data = {};
   if (typeof personalizeVariants === "object") {
     Object.keys(personalizeVariants).forEach((personalizationName) => {
@@ -4634,8 +4705,7 @@ function serializePersonalizeVariants({
       data[personalizationName] = results.join(",");
     });
   }
-  const serialized = serializeCookieType(data);
-  return serialized;
+  return data;
 }
 function decodePersonalizeVariants(data) {
   const parsed = parseCookieType(data);
@@ -4682,6 +4752,7 @@ fetchData_fn = async function() {
     this.signalAsyncDataUpdate(serviceData);
   }
 };
+var isSystemDimension = (dimension) => dimension.startsWith("$");
 var emptyVisitorData = () => ({
   quirks: {},
   scores: {},
@@ -4817,6 +4888,9 @@ var replaceData_fn;
 var setVisitTimeout_fn;
 var isExpired_fn;
 var handleCaps_fn;
+var pruningManifest_get;
+var handlePruning_fn;
+var pruneScores_fn;
 var defaultData_fn;
 var VisitorDataStore = class {
   constructor(options) {
@@ -4927,6 +5001,7 @@ replaceData_fn = function(data, quiet = false) {
     sessionScores: data.sessionScores,
     onLogMessage: __privateGet4(this, _options).onLogMessage
   });
+  __privateMethod(this, _VisitorDataStore_instances, handlePruning_fn).call(this, data);
   const haveScoresChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.scores, data.scores);
   const haveSessionScoresChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.sessionScores, data.sessionScores);
   const haveQuirksChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.quirks, data.quirks);
@@ -4999,6 +5074,48 @@ handleCaps_fn = function(scores) {
     }
   }
 };
+pruningManifest_get = function() {
+  var _a, _b, _c, _d, _e;
+  const project = (_b = (_a = __privateGet4(this, _options).manifest) == null ? void 0 : _a.data) == null ? void 0 : _b.project;
+  const populated = [(_c = project == null ? void 0 : project.pz) == null ? void 0 : _c.sig, (_d = project == null ? void 0 : project.pz) == null ? void 0 : _d.enr, (_e = project == null ? void 0 : project.pz) == null ? void 0 : _e.agg, project == null ? void 0 : project.test].some(
+    (definitions) => definitions && Object.keys(definitions).length > 0
+  );
+  return populated ? __privateGet4(this, _options).manifest : void 0;
+};
+handlePruning_fn = function(data) {
+  var _a, _b;
+  const { pruneUnknownTests, pruneUnknownDimensions } = __privateGet4(this, _options);
+  const manifest = pruneUnknownTests || pruneUnknownDimensions ? __privateGet4(this, _VisitorDataStore_instances, pruningManifest_get) : void 0;
+  const pruned = [];
+  if (pruneUnknownTests && manifest) {
+    for (const test in data.tests) {
+      if (!manifest.getTest(test)) {
+        delete data.tests[test];
+        pruned.push(`tests.${test}`);
+      }
+    }
+  }
+  __privateMethod(this, _VisitorDataStore_instances, pruneScores_fn).call(this, data.scores, "scores", pruned, manifest);
+  __privateMethod(this, _VisitorDataStore_instances, pruneScores_fn).call(this, data.sessionScores, "sessionScores", pruned, manifest);
+  if (pruned.length) {
+    (_b = (_a = __privateGet4(this, _options)).onLogMessage) == null ? void 0 : _b.call(_a, ["info", 150, pruned]);
+  }
+};
+pruneScores_fn = function(scores, bucket, pruned, manifest) {
+  const { pruneUnknownDimensions, pruneZeroScores } = __privateGet4(this, _options);
+  if (!pruneUnknownDimensions && !pruneZeroScores) {
+    return;
+  }
+  const pruneUnknown = pruneUnknownDimensions && manifest;
+  for (const dim in scores) {
+    const isUnknown = pruneUnknown && !isSystemDimension(dim) && !manifest.getDimensionByKey(dim);
+    const isZero = pruneZeroScores && (pruneZeroScores === "round" ? isZeroCookieScore(scores[dim]) : scores[dim] === 0);
+    if (isUnknown || isZero) {
+      delete scores[dim];
+      pruned.push(`${bucket}.${dim}`);
+    }
+  }
+};
 defaultData_fn = function() {
   var _a, _b, _c;
   return {

package/dist/middleware.mjs

@@ -4479,6 +4479,7 @@ var bton = (base64) => {
   }
   return sign ? -number : number;
 };
+var isZeroCookieScore = (score) => Math.abs(score) < 1;
 var ssr = typeof document === "undefined";
 var UNIFORM_DEFAULT_COOKIE_NAME = "ufvd";
 var UNIFORM_DEFAULT_QUIRK_COOKIE_NAME = `ufvdqk`;
@@ -4486,6 +4487,7 @@ var _cookieName;
 var _quirkCookieName;
 var _cookieAttributes;
 var _quirksEnabled;
+var _maxBytes;
 var CookieTransitionDataStore = class extends TransitionDataStore {
   constructor({
     serverCookieValue,
@@ -4493,7 +4495,9 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
     quirkCookieValue,
     quirkCookieName = UNIFORM_DEFAULT_QUIRK_COOKIE_NAME,
     cookieName = UNIFORM_DEFAULT_COOKIE_NAME,
-    cookieAttributes = { sameSite: "lax" }
+    cookieAttributes = { sameSite: "lax" },
+    maxBytes,
+    onLogMessage
   }) {
     super({
       initialData: ssr ? parseScoreCookie(serverCookieValue, experimental_quirksEnabled ? quirkCookieValue : void 0) : void 0
@@ -4502,10 +4506,20 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
     __privateAdd4(this, _quirkCookieName);
     __privateAdd4(this, _cookieAttributes);
     __privateAdd4(this, _quirksEnabled);
+    __privateAdd4(this, _maxBytes);
+    __publicField3(this, "onLogMessage");
     __privateSet2(this, _cookieName, cookieName);
     __privateSet2(this, _cookieAttributes, cookieAttributes);
     __privateSet2(this, _quirkCookieName, quirkCookieName);
     __privateSet2(this, _quirksEnabled, experimental_quirksEnabled || false);
+    __privateSet2(this, _maxBytes, maxBytes);
+    this.onLogMessage = onLogMessage;
+    const minimumBytes = minimumCookieBytes(cookieName);
+    if (maxBytes !== void 0 && maxBytes < minimumBytes) {
+      throw new Error(
+        `maxBytes of ${maxBytes} is below the ${minimumBytes} bytes the "${cookieName}" cookie costs when it carries nothing but control group membership, so no visitor could ever meet it.`
+      );
+    }
   }
   handleDelete() {
     if (ssr) return Promise.resolve();
@@ -4515,7 +4529,15 @@ var CookieTransitionDataStore = class extends TransitionDataStore {
   async handleUpdateData(_, computedValue) {
     if (ssr) return;
     if (computedValue.consent) {
-      api.set(__privateGet4(this, _cookieName), serializeCookie(computedValue), __privateGet4(this, _cookieAttributes));
+      const cookieValue = serializeCookie(computedValue, {
+        maxBytes: __privateGet4(this, _maxBytes),
+        cookieName: __privateGet4(this, _cookieName),
+        onBudgetExceeded: (dropped, bytes, maxBytes) => {
+          var _a;
+          return (_a = this.onLogMessage) == null ? void 0 : _a.call(this, ["info", 151, { dropped, bytes, maxBytes }]);
+        }
+      });
+      api.set(__privateGet4(this, _cookieName), cookieValue, __privateGet4(this, _cookieAttributes));
       if (__privateGet4(this, _quirksEnabled) && Object.keys(computedValue.quirks || {}).length) {
         const quirkCookieValue = serializeQuirks(computedValue.quirks || {});
         api.set(__privateGet4(this, _quirkCookieName), quirkCookieValue, __privateGet4(this, _cookieAttributes));
@@ -4532,6 +4554,7 @@ _cookieName = /* @__PURE__ */ new WeakMap();
 _quirkCookieName = /* @__PURE__ */ new WeakMap();
 _cookieAttributes = /* @__PURE__ */ new WeakMap();
 _quirksEnabled = /* @__PURE__ */ new WeakMap();
+_maxBytes = /* @__PURE__ */ new WeakMap();
 var TYPE_SEP = "~";
 var PAIR_SEP = "!";
 var KV_SEP = "-";
@@ -4603,18 +4626,66 @@ function decodeCookieType(type) {
     return acc;
   }, {});
 }
-function serializeCookie(data) {
+function serializeCookie(data, options = {}) {
+  const { maxBytes, cookieName = UNIFORM_DEFAULT_COOKIE_NAME, onBudgetExceeded } = options;
+  const parts = {
+    tests: { ...data.tests },
+    sessionScores: encodeCookieType(data.sessionScores),
+    scores: encodeCookieType(data.scores),
+    controlGroup: data.controlGroup ? "1" : "0",
+    personalizeVariants: encodePersonalizeVariants(data.personalizeVariants)
+  };
+  let value = serializeCookieParts(parts);
+  if (maxBytes === void 0) {
+    return value;
+  }
+  const overhead = encodeCookieName(cookieName).length + 1;
+  const measure = () => overhead + api.converter.write(value, cookieName).length;
+  if (measure() <= maxBytes) {
+    return value;
+  }
+  const candidates = dropCandidates(parts, data);
+  const dropped = [];
+  for (let i = 0; i < candidates.length && measure() > maxBytes; i++) {
+    const { bucket, key } = candidates[i];
+    delete parts[bucket][key];
+    dropped.push(`${bucket}.${key}`);
+    value = serializeCookieParts(parts);
+  }
+  if (dropped.length) {
+    onBudgetExceeded == null ? void 0 : onBudgetExceeded(dropped, measure(), maxBytes);
+  }
+  return value;
+}
+function serializeCookieParts(parts) {
   return [
-    serializeCookieType(data.tests),
-    serializeCookieType(encodeCookieType(data.sessionScores)),
-    serializeCookieType(encodeCookieType(data.scores)),
-    data.controlGroup ? "1" : "0",
-    serializePersonalizeVariants(data)
+    serializeCookieType(parts.tests),
+    serializeCookieType(parts.sessionScores),
+    serializeCookieType(parts.scores),
+    parts.controlGroup,
+    serializeCookieType(parts.personalizeVariants)
   ].join(TYPE_SEP);
 }
-function serializePersonalizeVariants({
-  personalizeVariants
-}) {
+function dropCandidates(parts, data) {
+  const dimensions = ["sessionScores", "scores"].flatMap(
+    (bucket, order) => Object.keys(parts[bucket]).map((key) => {
+      var _a;
+      return { bucket, key, order, score: (_a = data[bucket][key]) != null ? _a : 0 };
+    })
+  );
+  dimensions.sort(
+    (a, b) => Number(isZeroCookieScore(b.score)) - Number(isZeroCookieScore(a.score)) || a.score - b.score || a.order - b.order || (a.key < b.key ? -1 : 1)
+  );
+  const keysOf = (bucket) => Object.keys(parts[bucket]).sort().map((key) => ({ bucket, key }));
+  return [...dimensions, ...keysOf("personalizeVariants"), ...keysOf("tests")];
+}
+function minimumCookieBytes(cookieName) {
+  return encodeCookieName(cookieName).length + 6;
+}
+function encodeCookieName(name) {
+  return encodeURIComponent(name).replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent).replace(/\(/g, "%28").replace(/\)/g, "%29");
+}
+function encodePersonalizeVariants(personalizeVariants) {
   const data = {};
   if (typeof personalizeVariants === "object") {
     Object.keys(personalizeVariants).forEach((personalizationName) => {
@@ -4626,8 +4697,7 @@ function serializePersonalizeVariants({
       data[personalizationName] = results.join(",");
     });
   }
-  const serialized = serializeCookieType(data);
-  return serialized;
+  return data;
 }
 function decodePersonalizeVariants(data) {
   const parsed = parseCookieType(data);
@@ -4674,6 +4744,7 @@ fetchData_fn = async function() {
     this.signalAsyncDataUpdate(serviceData);
   }
 };
+var isSystemDimension = (dimension) => dimension.startsWith("$");
 var emptyVisitorData = () => ({
   quirks: {},
   scores: {},
@@ -4809,6 +4880,9 @@ var replaceData_fn;
 var setVisitTimeout_fn;
 var isExpired_fn;
 var handleCaps_fn;
+var pruningManifest_get;
+var handlePruning_fn;
+var pruneScores_fn;
 var defaultData_fn;
 var VisitorDataStore = class {
   constructor(options) {
@@ -4919,6 +4993,7 @@ replaceData_fn = function(data, quiet = false) {
     sessionScores: data.sessionScores,
     onLogMessage: __privateGet4(this, _options).onLogMessage
   });
+  __privateMethod(this, _VisitorDataStore_instances, handlePruning_fn).call(this, data);
   const haveScoresChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.scores, data.scores);
   const haveSessionScoresChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.sessionScores, data.sessionScores);
   const haveQuirksChanged = !dequal(oldData == null ? void 0 : oldData.visitorData.quirks, data.quirks);
@@ -4991,6 +5066,48 @@ handleCaps_fn = function(scores) {
     }
   }
 };
+pruningManifest_get = function() {
+  var _a, _b, _c, _d, _e;
+  const project = (_b = (_a = __privateGet4(this, _options).manifest) == null ? void 0 : _a.data) == null ? void 0 : _b.project;
+  const populated = [(_c = project == null ? void 0 : project.pz) == null ? void 0 : _c.sig, (_d = project == null ? void 0 : project.pz) == null ? void 0 : _d.enr, (_e = project == null ? void 0 : project.pz) == null ? void 0 : _e.agg, project == null ? void 0 : project.test].some(
+    (definitions) => definitions && Object.keys(definitions).length > 0
+  );
+  return populated ? __privateGet4(this, _options).manifest : void 0;
+};
+handlePruning_fn = function(data) {
+  var _a, _b;
+  const { pruneUnknownTests, pruneUnknownDimensions } = __privateGet4(this, _options);
+  const manifest = pruneUnknownTests || pruneUnknownDimensions ? __privateGet4(this, _VisitorDataStore_instances, pruningManifest_get) : void 0;
+  const pruned = [];
+  if (pruneUnknownTests && manifest) {
+    for (const test in data.tests) {
+      if (!manifest.getTest(test)) {
+        delete data.tests[test];
+        pruned.push(`tests.${test}`);
+      }
+    }
+  }
+  __privateMethod(this, _VisitorDataStore_instances, pruneScores_fn).call(this, data.scores, "scores", pruned, manifest);
+  __privateMethod(this, _VisitorDataStore_instances, pruneScores_fn).call(this, data.sessionScores, "sessionScores", pruned, manifest);
+  if (pruned.length) {
+    (_b = (_a = __privateGet4(this, _options)).onLogMessage) == null ? void 0 : _b.call(_a, ["info", 150, pruned]);
+  }
+};
+pruneScores_fn = function(scores, bucket, pruned, manifest) {
+  const { pruneUnknownDimensions, pruneZeroScores } = __privateGet4(this, _options);
+  if (!pruneUnknownDimensions && !pruneZeroScores) {
+    return;
+  }
+  const pruneUnknown = pruneUnknownDimensions && manifest;
+  for (const dim in scores) {
+    const isUnknown = pruneUnknown && !isSystemDimension(dim) && !manifest.getDimensionByKey(dim);
+    const isZero = pruneZeroScores && (pruneZeroScores === "round" ? isZeroCookieScore(scores[dim]) : scores[dim] === 0);
+    if (isUnknown || isZero) {
+      delete scores[dim];
+      pruned.push(`${bucket}.${dim}`);
+    }
+  }
+};
 defaultData_fn = function() {
   var _a, _b, _c;
   return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uniformdev/next-app-router",
-  "version": "20.80.0",
+  "version": "20.80.1-alpha.10.sha-e0cfb4ce44",
   "license": "SEE LICENSE IN LICENSE.txt",
   "scripts": {
     "build": "tsup",
@@ -100,12 +100,12 @@
     "vitest": "4.1.11"
   },
   "dependencies": {
-    "@uniformdev/canvas-react": "20.80.0",
-    "@uniformdev/next-app-router-client": "20.80.0",
-    "@uniformdev/next-app-router-shared": "20.80.0",
-    "@uniformdev/redirect": "20.80.0",
-    "@uniformdev/richtext": "20.80.0",
-    "@uniformdev/webhooks": "20.80.0",
+    "@uniformdev/canvas-react": "20.80.1-alpha.10.sha-e0cfb4ce44",
+    "@uniformdev/next-app-router-client": "20.80.1-alpha.10.sha-e0cfb4ce44",
+    "@uniformdev/next-app-router-shared": "20.80.1-alpha.10.sha-e0cfb4ce44",
+    "@uniformdev/redirect": "20.80.1-alpha.10.sha-e0cfb4ce44",
+    "@uniformdev/richtext": "20.80.1-alpha.10.sha-e0cfb4ce44",
+    "@uniformdev/webhooks": "20.80.1-alpha.10.sha-e0cfb4ce44",
     "@vercel/functions": "^3.7.2",
     "encoding": "^0.1.13",
     "server-only": "^0.0.1",
@@ -122,5 +122,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "6eec8f028463f30667b59af913a74d56960dde11"
+  "gitHead": "e0cfb4ce4435ea507f36d3246fc886c24f8ebe16"
 }