@wireai/activation 0.10.0 → 0.12.0

package/dist/analytics/index.js

@@ -400,27 +400,113 @@ var init_Constants = __esm({
   }
 });
 
-// src/reviews/transport.ts
-var reportAppEvent = (target, name2, options = {}) => {
-  if (!(target == null ? void 0 : target.serverUrl) || !name2) return;
+// src/analytics/reportClientEvent.ts
+var makeSessionId = () => `wire_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 10)}`;
+var buildEventsRequest = (target, events) => {
+  if (!(target == null ? void 0 : target.serverUrl) || events.length === 0) return null;
   try {
     const url = `${target.serverUrl.replace(/\/$/, "")}/v1/events`;
     const headers = { "Content-Type": "application/json" };
     if (target.apiKey) headers.Authorization = `Bearer ${target.apiKey}`;
+    return { url, init: { method: "POST", headers, body: JSON.stringify({ events }) } };
+  } catch {
+    return null;
+  }
+};
+var warnOnSkippedEvents = (res) => {
+  try {
+    const json = res == null ? void 0 : res.json;
+    if (typeof json !== "function") return;
+    void Promise.resolve(json.call(res)).then((body) => {
+      const skipped = body == null ? void 0 : body.skipped;
+      if (typeof skipped !== "number" || skipped <= 0) return;
+      if (typeof __DEV__ !== "undefined" && __DEV__ && typeof console !== "undefined" && console.warn) {
+        console.warn(
+          `[wireai] the server ACCEPTED the /v1/events POST but DISCARDED ${skipped} event(s) (skipped in the response body) \u2014 they are gone, not retried. The usual cause is an event with a missing or empty session_id.`
+        );
+      }
+    }).catch(() => {
+    });
+  } catch {
+  }
+};
+var reportClientEvents = (target, events) => {
+  try {
+    const req = buildEventsRequest(target, events);
+    if (!req) return;
+    void fetch(req.url, req.init).catch(() => {
+    });
+  } catch {
+  }
+};
+var reportClientEvent = (target, event) => reportClientEvents(target, [event]);
+var reportClientEventsAwait = async (target, events) => {
+  try {
+    const req = buildEventsRequest(target, events);
+    if (!req) return false;
+    const res = await fetch(req.url, req.init);
+    return Boolean(res && res.ok);
+  } catch {
+    return false;
+  }
+};
+var reportClientEventAwait = (target, event) => reportClientEventsAwait(target, [event]);
+
+// src/analytics/currentSession.ts
+var CURRENT_SESSION_ID_SLOT = /* @__PURE__ */ Symbol.for(
+  "@wireai/activation:currentSessionId"
+);
+var globalSlot = globalThis;
+var setCurrentSessionId = (id) => {
+  if (typeof id === "string" && id.length > 0) {
+    globalSlot[CURRENT_SESSION_ID_SLOT] = id;
+  }
+};
+var getCurrentSessionId = () => globalSlot[CURRENT_SESSION_ID_SLOT];
+var resetCurrentSessionId = () => {
+  globalSlot[CURRENT_SESSION_ID_SLOT] = void 0;
+};
+var warnInDev = (message) => {
+  if (typeof __DEV__ !== "undefined" && __DEV__ && typeof console !== "undefined" && console.warn) {
+    console.warn(message);
+    return true;
+  }
+  return false;
+};
+var MINT_WARNING = "[wireai] No app-open session was registered, so a session id was minted for this event (the server drops an event that has no session_id, and still answers 200). Mount useLifecycleEvents at your app root so events correlate to a real app-open.";
+var MINT_WARNED_SLOT = /* @__PURE__ */ Symbol.for(
+  "@wireai/activation:currentSessionIdMintWarned"
+);
+var warnSlot = globalThis;
+var ensureCurrentSessionId = () => {
+  const existing = globalSlot[CURRENT_SESSION_ID_SLOT];
+  if (typeof existing === "string" && existing.length > 0) return existing;
+  const minted = makeSessionId();
+  globalSlot[CURRENT_SESSION_ID_SLOT] = minted;
+  if (!warnSlot[MINT_WARNED_SLOT] && warnInDev(MINT_WARNING)) {
+    warnSlot[MINT_WARNED_SLOT] = true;
+  }
+  return minted;
+};
+
+// src/reviews/transport.ts
+var reportAppEvent = (target, name2, options = {}) => {
+  var _a2;
+  if (!(target == null ? void 0 : target.serverUrl) || !name2) return;
+  try {
+    const supplied = (_a2 = options.sessionId) != null ? _a2 : "";
     const event = {
       event_type: "app_event",
-      question_key: name2
+      question_key: name2,
+      session_id: supplied.trim().length > 0 ? supplied : ensureCurrentSessionId()
     };
-    if (options.sessionId) event.session_id = options.sessionId;
     if (options.deviceKey) event.user_context = { device_key: options.deviceKey };
     if (options.meta && Object.keys(options.meta).length > 0) {
       event.meta = JSON.stringify(options.meta);
     }
-    void fetch(url, {
-      method: "POST",
-      headers,
-      body: JSON.stringify({ events: [event] })
-    }).catch(() => {
+    const req = buildEventsRequest(target, [event]);
+    if (!req) return;
+    void fetch(req.url, req.init).catch(() => {
     });
   } catch {
   }
@@ -497,41 +583,6 @@ var useScreenTracking = (navigationRef, options = {}) => {
   }, [navigationRef]);
 };
 
-// src/analytics/reportClientEvent.ts
-var makeSessionId = () => `wire_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 10)}`;
-var buildEventsRequest = (target, events) => {
-  if (!(target == null ? void 0 : target.serverUrl) || events.length === 0) return null;
-  try {
-    const url = `${target.serverUrl.replace(/\/$/, "")}/v1/events`;
-    const headers = { "Content-Type": "application/json" };
-    if (target.apiKey) headers.Authorization = `Bearer ${target.apiKey}`;
-    return { url, init: { method: "POST", headers, body: JSON.stringify({ events }) } };
-  } catch {
-    return null;
-  }
-};
-var reportClientEvents = (target, events) => {
-  try {
-    const req = buildEventsRequest(target, events);
-    if (!req) return;
-    void fetch(req.url, req.init).catch(() => {
-    });
-  } catch {
-  }
-};
-var reportClientEvent = (target, event) => reportClientEvents(target, [event]);
-var reportClientEventsAwait = async (target, events) => {
-  try {
-    const req = buildEventsRequest(target, events);
-    if (!req) return false;
-    const res = await fetch(req.url, req.init);
-    return Boolean(res && res.ok);
-  } catch {
-    return false;
-  }
-};
-var reportClientEventAwait = (target, event) => reportClientEventsAwait(target, [event]);
-
 // src/analytics/analyticsEvent.ts
 var WIRE_ONBOARDING_EVENTS = {
   started: "wire_onboarding_started",
@@ -822,6 +873,7 @@ var createEventQueue = (options) => {
     var _a3;
     const env = resolveEnvelope();
     const stamped = { ...event };
+    if (stamped.ts === void 0) stamped.ts = Date.now();
     if (!env) return stamped;
     if (!stamped.device && env.device) stamped.device = env.device;
     if (!stamped.session_id && env.sessionId) stamped.session_id = env.sessionId;
@@ -877,19 +929,13 @@ var createEventQueue = (options) => {
     }
   })();
   const postBatch = async (events) => {
-    if (!(target == null ? void 0 : target.serverUrl) || events.length === 0) return false;
+    const req = buildEventsRequest(target, events);
+    if (!req) return false;
     const controller = typeof AbortController !== "undefined" ? new AbortController() : void 0;
     const timer = setTimeout(() => controller == null ? void 0 : controller.abort(), 15e3);
     try {
-      const url = `${target.serverUrl.replace(/\/$/, "")}/v1/events`;
-      const headers = { "Content-Type": "application/json" };
-      if (target.apiKey) headers.Authorization = `Bearer ${target.apiKey}`;
-      const res = await fetch(url, {
-        method: "POST",
-        headers,
-        body: JSON.stringify({ events }),
-        signal: controller == null ? void 0 : controller.signal
-      });
+      const res = await fetch(req.url, { ...req.init, signal: controller == null ? void 0 : controller.signal });
+      warnOnSkippedEvents(res);
       return !!(res && res.ok);
     } catch {
       return false;
@@ -968,21 +1014,6 @@ var createEventQueue = (options) => {
   return { enqueue, flush, notifyOnline, size };
 };
 
-// src/analytics/currentSession.ts
-var CURRENT_SESSION_ID_SLOT = /* @__PURE__ */ Symbol.for(
-  "@wireai/activation:currentSessionId"
-);
-var globalSlot = globalThis;
-var setCurrentSessionId = (id) => {
-  if (typeof id === "string" && id.length > 0) {
-    globalSlot[CURRENT_SESSION_ID_SLOT] = id;
-  }
-};
-var getCurrentSessionId = () => globalSlot[CURRENT_SESSION_ID_SLOT];
-var resetCurrentSessionId = () => {
-  globalSlot[CURRENT_SESSION_ID_SLOT] = void 0;
-};
-
 // src/identity/userIdentity.ts
 var USER_ID_MAX_LENGTH = 128;
 var sanitizeUserId = (raw) => {
@@ -991,6 +1022,7 @@ var sanitizeUserId = (raw) => {
   if (!trimmed) return void 0;
   return trimmed.length > USER_ID_MAX_LENGTH ? trimmed.slice(0, USER_ID_MAX_LENGTH) : trimmed;
 };
+var looksLikeEmail = (value) => typeof value === "string" && /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(value.trim());
 
 // src/context/userContext.ts
 var EXTRA_KEY_PREFIX = "custom.";
@@ -1025,6 +1057,21 @@ var namespaceExtra = (extra) => {
   }
   return out;
 };
+var analyticsUserIdStorageKey = (appId) => `wireai:analytics:userId:${appId != null ? appId : "default"}`;
+var clearPiiFromContext = (ctx = {}) => {
+  const rest = {};
+  if (typeof ctx.appVersion === "string") rest.appVersion = ctx.appVersion;
+  if (typeof ctx.deviceKey === "string") rest.deviceKey = ctx.deviceKey;
+  return rest;
+};
+var clearUserContext = async (opts = {}) => {
+  const storage = opts.storage;
+  if (!storage) return;
+  try {
+    await storage.removeItem(analyticsUserIdStorageKey(opts.appId));
+  } catch {
+  }
+};
 var resolveUserContext = (ctx = {}, opts = {}) => {
   var _a2;
   const result = {};
@@ -1063,29 +1110,75 @@ var mintDeviceId = () => {
   const time = Date.now().toString(36);
   return `${AUTO_DEVICE_ID_PREFIX}${time}_${randomChunk()}${randomChunk()}`;
 };
+var AUTO_DEVICE_KEY_SLOT = /* @__PURE__ */ Symbol.for("@wireai/activation:autoDeviceKeys");
+var deviceKeyGlobal = globalThis;
+var autoDeviceKeyRegistry = () => {
+  const existing = deviceKeyGlobal[AUTO_DEVICE_KEY_SLOT];
+  if (existing) return existing;
+  const created = { keys: /* @__PURE__ */ new Map(), hydrating: /* @__PURE__ */ new Set() };
+  deviceKeyGlobal[AUTO_DEVICE_KEY_SLOT] = created;
+  return created;
+};
+var resolveAutoDeviceKey = (opts = {}) => {
+  var _a2, _b;
+  const registry = autoDeviceKeyRegistry();
+  const appId = (_a2 = opts.appId) != null ? _a2 : "default";
+  let id = registry.keys.get(appId);
+  if (!id) {
+    id = mintDeviceId();
+    registry.keys.set(appId, id);
+  }
+  const storage = opts.storage;
+  if (storage && !registry.hydrating.has(appId)) {
+    registry.hydrating.add(appId);
+    const slot = deviceIdStorageKey(appId);
+    const minted = id;
+    try {
+      void Promise.resolve(storage.getItem(slot)).then((saved) => {
+        const persisted = typeof saved === "string" && saved.trim() ? saved.trim() : void 0;
+        if (persisted) registry.keys.set(appId, persisted);
+        else void Promise.resolve(storage.setItem(slot, minted)).catch(() => {
+        });
+      }).catch(() => {
+      });
+    } catch {
+    }
+  }
+  return (_b = registry.keys.get(appId)) != null ? _b : id;
+};
+var resetAutoDeviceKeys = () => {
+  const registry = autoDeviceKeyRegistry();
+  registry.keys.clear();
+  registry.hydrating.clear();
+};
 
 // src/analytics/analyticsFacade.ts
+var warnInDev2 = (message) => {
+  if (typeof __DEV__ !== "undefined" && __DEV__ && typeof console !== "undefined" && console.warn) {
+    console.warn(message);
+  }
+};
 var createAnalytics = (config, options = {}) => {
-  var _a2, _b, _c, _d, _e;
+  var _a2, _b, _c, _d;
   const instanceSessionId = (_a2 = config.sessionId) != null ? _a2 : makeSessionId();
   const resolveSessionId = () => {
     var _a3, _b2;
     return (_b2 = (_a3 = config.sessionId) != null ? _a3 : getCurrentSessionId()) != null ? _b2 : instanceSessionId;
   };
+  if (config.sessionId) {
+    warnInDev2(
+      "[wireai] createAnalytics({ sessionId }) PINS every event from this instance to that one frozen id and opts out of the live per-open session (app.session_started) \u2014 lifecycle analytics collapse onto a single device-scoped id. Remove it unless your host runs its own session lifecycle."
+    );
+  }
+  const detectedAppVersion = detectAppVersion();
   let userContext = { ...(_b = config.userContext) != null ? _b : {} };
   const hostDeviceKeyAtInit = typeof ((_c = config.userContext) == null ? void 0 : _c.deviceKey) === "string" && config.userContext.deviceKey.trim() ? config.userContext.deviceKey.trim() : void 0;
-  let autoDeviceKey = mintDeviceId();
-  if (config.storage && !hostDeviceKeyAtInit) {
-    const storage = config.storage;
-    const deviceKey = deviceIdStorageKey(config.appId);
-    void storage.getItem(deviceKey).then((saved) => {
-      const persisted = typeof saved === "string" && saved.trim() ? saved.trim() : void 0;
-      if (persisted) autoDeviceKey = persisted;
-      else void storage.setItem(deviceKey, autoDeviceKey).catch(() => {
-      });
-    }).catch(() => {
-    });
-  }
+  const autoDeviceKeyOptions = {
+    appId: config.appId,
+    // A host-supplied deviceKey opts out of minting AND persisting (unchanged contract).
+    storage: hostDeviceKeyAtInit ? void 0 : config.storage
+  };
+  if (!hostDeviceKeyAtInit) resolveAutoDeviceKey(autoDeviceKeyOptions);
   const envelope = () => {
     var _a3;
     return buildContextEnvelope({
@@ -1103,7 +1196,7 @@ var createAnalytics = (config, options = {}) => {
     ...options
   });
   let boundUserId = sanitizeUserId((_d = config.userContext) == null ? void 0 : _d.userId);
-  const storageKey = `wireai:analytics:userId:${(_e = config.appId) != null ? _e : "default"}`;
+  const storageKey = analyticsUserIdStorageKey(config.appId);
   if (config.storage) {
     void config.storage.getItem(storageKey).then((saved) => {
       if (saved && !boundUserId) boundUserId = saved;
@@ -1111,17 +1204,25 @@ var createAnalytics = (config, options = {}) => {
     });
   }
   const applyContext = (event) => {
-    var _a3;
+    var _a3, _b2;
     const hostDeviceKey = typeof userContext.deviceKey === "string" && userContext.deviceKey.trim() ? userContext.deviceKey : void 0;
     const resolved = resolveUserContext(
-      { ...userContext, deviceKey: hostDeviceKey != null ? hostDeviceKey : autoDeviceKey },
-      { autoAppVersion: config.appVersion }
+      // `??` is lazy on purpose: a host-supplied key must never even touch the auto registry.
+      { ...userContext, deviceKey: hostDeviceKey != null ? hostDeviceKey : resolveAutoDeviceKey(autoDeviceKeyOptions) },
+      { autoAppVersion: (_a3 = config.appVersion) != null ? _a3 : detectedAppVersion }
     );
     if (resolved.userContext) {
-      event.user_context = { ...resolved.userContext, ...(_a3 = event.user_context) != null ? _a3 : {} };
+      event.user_context = { ...resolved.userContext, ...(_b2 = event.user_context) != null ? _b2 : {} };
     }
     if (boundUserId && !event.user_id) event.user_id = boundUserId;
   };
+  const guardUserId = (clean) => {
+    if (config.allowEmailAsUserId || !looksLikeEmail(clean)) return clean;
+    warnInDev2(
+      "[wireai] identify() was called with an email-shaped id. A raw email must NOT be the opaque user_id (PII leak) \u2014 pass it as userContext.userEmail instead. Binding was skipped. Set allowEmailAsUserId:true on createAnalytics if your user id genuinely is an email."
+    );
+    return void 0;
+  };
   const setUserContext = (partial) => {
     var _a3, _b2;
     if (!partial || typeof partial !== "object") return;
@@ -1130,11 +1231,20 @@ var createAnalytics = (config, options = {}) => {
     if (mergedExtra) userContext.extra = mergedExtra;
     const uid = sanitizeUserId(partial.userId);
     if (uid) {
-      boundUserId = uid;
-      if (config.storage) void config.storage.setItem(storageKey, uid).catch(() => {
-      });
+      const bindable = guardUserId(uid);
+      if (bindable) {
+        boundUserId = bindable;
+        if (config.storage) void config.storage.setItem(storageKey, bindable).catch(() => {
+        });
+      }
     }
   };
+  const reset = () => {
+    boundUserId = void 0;
+    userContext = clearPiiFromContext(userContext);
+    if (config.storage) void config.storage.removeItem(storageKey).catch(() => {
+    });
+  };
   const track = (event, props) => {
     if (!event) return;
     const clientEvent = {
@@ -1161,9 +1271,11 @@ var createAnalytics = (config, options = {}) => {
   const identify = (userId, traits) => {
     const clean = sanitizeUserId(userId);
     if (!clean) return;
-    boundUserId = clean;
+    const bindable = guardUserId(clean);
+    if (!bindable) return;
+    boundUserId = bindable;
     if (config.storage) {
-      void config.storage.setItem(storageKey, clean).catch(() => {
+      void config.storage.setItem(storageKey, bindable).catch(() => {
       });
     }
     const clientEvent = {
@@ -1171,7 +1283,7 @@ var createAnalytics = (config, options = {}) => {
       // Reuse the LIVE per-open session id (see `resolveSessionId`) so the server binds identity to
       // the session it already saw instead of back-filling a phantom `session_started`.
       session_id: resolveSessionId(),
-      user_id: clean
+      user_id: bindable
     };
     if (traits && Object.keys(traits).length > 0) clientEvent.meta = JSON.stringify(traits);
     applyContext(clientEvent);
@@ -1182,12 +1294,14 @@ var createAnalytics = (config, options = {}) => {
     screen,
     identify,
     setUserContext,
+    reset,
     flush: queue.flush,
     notifyOnline: queue.notifyOnline,
     size: queue.size
   };
 };
 var useAnalytics = (config, options = {}) => {
+  var _a2;
   const ref = react.useRef(void 0);
   const prevKeys = react.useRef("");
   const currentKeys = `${config.serverUrl}|${config.apiKey}|${config.appId}`;
@@ -1195,23 +1309,37 @@ var useAnalytics = (config, options = {}) => {
     prevKeys.current = currentKeys;
     ref.current = createAnalytics(config, options);
   }
+  const hostDeviceKey = typeof ((_a2 = config.userContext) == null ? void 0 : _a2.deviceKey) === "string" && config.userContext.deviceKey.trim() ? config.userContext.deviceKey.trim() : void 0;
+  react.useEffect(() => {
+    var _a3;
+    if (hostDeviceKey) (_a3 = ref.current) == null ? void 0 : _a3.setUserContext({ deviceKey: hostDeviceKey });
+  }, [hostDeviceKey]);
   return ref.current;
 };
 
+exports.AUTO_DEVICE_ID_PREFIX = AUTO_DEVICE_ID_PREFIX;
 exports.WIRE_ONBOARDING_EVENTS = WIRE_ONBOARDING_EVENTS;
+exports.analyticsUserIdStorageKey = analyticsUserIdStorageKey;
 exports.buildContextEnvelope = buildContextEnvelope;
+exports.clearPiiFromContext = clearPiiFromContext;
+exports.clearUserContext = clearUserContext;
 exports.createAnalytics = createAnalytics;
 exports.createEventQueue = createEventQueue;
 exports.createScreenTracker = createScreenTracker;
+exports.deviceIdStorageKey = deviceIdStorageKey;
+exports.ensureCurrentSessionId = ensureCurrentSessionId;
 exports.getActiveRouteName = getActiveRouteName;
 exports.getCurrentSessionId = getCurrentSessionId;
+exports.looksLikeEmail = looksLikeEmail;
 exports.makeSessionId = makeSessionId;
 exports.reportAppEvent = reportAppEvent;
 exports.reportClientEvent = reportClientEvent;
 exports.reportClientEventAwait = reportClientEventAwait;
 exports.reportClientEvents = reportClientEvents;
 exports.reportClientEventsAwait = reportClientEventsAwait;
+exports.resetAutoDeviceKeys = resetAutoDeviceKeys;
 exports.resetCurrentSessionId = resetCurrentSessionId;
+exports.resolveAutoDeviceKey = resolveAutoDeviceKey;
 exports.screenTrackingHandler = screenTrackingHandler;
 exports.setCurrentSessionId = setCurrentSessionId;
 exports.toAnalyticsEvent = toAnalyticsEvent;