@xenia-martech/sdk-js 1.0.0-dev.26 → 1.0.0-dev.27

package/README.md

@@ -535,7 +535,27 @@ Each entry in `swaps` is `{ identifier, replacementEntryId, mode }` — `identif
 
 **Auth:** resolve **requires** the SDK Bearer token — the *same* `token` / `getToken` config as events (there is no separate personalization token). Events *optionally* send it (public otherwise); resolve *requires* it (401 without). Set it server-side; a browser without a token can still `track()` publicly but cannot `resolve()`.
 
-**Visitor id is attached automatically.** The SDK-owned visitor id (see [Analytics](#analytics--conversions)) is injected into the resolve `data` as `_xenia_vid`, so the backend can bucket holdout experiments and record per-visitor exposure — you don't add it yourself, and it can't be overridden per call. The webhook path (`request()` / `usePersonalization()`) carries the same id on the `/flow` body. Browser: resolved from `identify()`/device id; server: from `config.visitorId` (bind the `xenia_vid` cookie per request).
+**SDK-provided fields are attached automatically.** Every `resolve()`/`resolveBatch()` call carries a fixed set of fields into `data` — `path`, `query`, `deviceId`, `visitorId`, `customerId`, `email`, `url`, `referrer`, `utmSource`, `utmMedium`, `utmCampaign`, `utmContent`, `utmId` — plus the reserved `_xenia_vid` key the backend reads for holdout/exposure bucketing. These are the same "SDK-provided fields" a Personalization Resolve journey trigger exposes natively to downstream nodes. None of them can be overridden per call — the SDK's own values always win, even if your `data` happens to use one of these names.
+
+- **Browser:** collected ambiently — page URL/path/query/referrer/UTMs come from `window`/`document`; `visitorId`/`deviceId` from `identify()`/the auto-resolved device id; `customerId`/`email` from `identify(visitorId, { customerId, email })`. Nothing to configure.
+- **Server:** there's no ambient `window`/`document`, so bind the request **once** when you construct the per-request client and every call carries the fields automatically — no per-call wiring:
+
+  ```ts
+  import { createXeniaServer } from "@xenia-martech/sdk-js/server";
+  import { contextFromUrl } from "@xenia-martech/sdk-js";
+
+  const xenia = createXeniaServer({
+    tenantId, environmentKey, token,
+    visitorId: getVisitorId(cookieHeader),          // the browser's xenia_vid cookie
+    context: contextFromUrl(currentUrl, referrer),  // path / query / url / referrer / utm*
+  });
+
+  await xenia.resolve("hero");                      // ← fields already attached
+  ```
+
+  `contextFromUrl(url, referrer?)` derives the same fields the browser reads off `window.location`, so a rule can gate on `query.<name>` or `path` on a server-rendered page. In a framework where the render context can't see its own URL (e.g. a Next.js RSC), stamp the URL onto the request in middleware and read it back from `headers()` — see the `nextjs` example.
+
+  `opts.context`/`opts.identity` remain available per call, as an override on top of the ambient context or for values known only at that call site (e.g. `identity: { customerId: "c1", email: "a@b.com" }`). `visitorId`/`_xenia_vid` still come from `config.visitorId` and win over a per-call `identity.visitorId`. A client with neither bound behaves exactly as before.
 
 ```tsx
 import { usePersonalizationResolve } from "@xenia-martech/sdk-js/client/react";

package/dist/{actions-DFLoSXO_.d.cts → actions-CkiSdvSa.d.cts}

@@ -80,6 +80,23 @@ interface XeniaConfig {
      *   cookie read via `getVisitorId()`.
      */
     visitorId?: string;
+    /**
+     * The ambient request context for a **server** client — the SDK-provided page/campaign fields
+     * (`path`, `query`, `url`, `referrer`, `utmSource`/`utmMedium`/`utmCampaign`/`utmContent`/`utmId`)
+     * that get attached to EVERY `resolve()`/`resolveBatch()`/`webhook()` made with this client, so
+     * journey rules can gate on `query.<name>` or `path` without any per-call wiring.
+     *
+     * The browser client needs nothing here — it reads these off `window.location` itself. A server
+     * runtime has no ambient request, so bind it once when constructing the per-request client:
+     *
+     * ```ts
+     * createXeniaServer({ …, context: contextFromUrl(currentUrl, referrer) })
+     * ```
+     *
+     * Lowest precedence: a per-call `context`/`identity` overrides it, and the SDK-owned `visitorId`
+     * still wins over everything.
+     */
+    context?: EventContext;
     /**
      * Persist the SDK visitor id to a first-party `xenia_vid` cookie so your
      * **same-origin** server can read it (`getVisitorId(cookieHeader)`) and bind
@@ -115,6 +132,13 @@ interface VisitorCookieOptions {
     /** Cookie lifetime in days. Default 365. */
     maxAgeDays?: number;
 }
+/** Well-known event fields understood by the backend event-trigger node. */
+interface EventIdentity {
+    deviceId?: string;
+    visitorId?: string;
+    customerId?: string;
+    email?: string;
+}
 /** UTM + page context captured automatically by the client. */
 interface EventContext {
     utmSource?: string;
@@ -291,6 +315,23 @@ interface ResolveOptions {
     locale?: string;
     /** When true, ask the server to splice and return `content`. */
     merge?: boolean;
+    /**
+     * Caller-supplied identity fields (`deviceId`/`visitorId`/`customerId`/
+     * `email`), merged into `data` the same way `ServerWebhookOptions.identity`
+     * is merged for `webhook()`. Only relevant server-side — the browser client
+     * collects these ambiently instead and ignores this field. The SDK-owned
+     * `visitorId` (from `config.visitorId`) still wins over a value supplied
+     * here, same precedence as `webhook()`.
+     */
+    identity?: EventIdentity;
+    /**
+     * Caller-supplied page context (`path`/`query`/`url`/`referrer`/`utm*`),
+     * merged into `data` the same way `ServerWebhookOptions.context` is merged
+     * for `webhook()`. There's no ambient `window`/`document` server-side, so a
+     * server caller who wants these SDK-provided fields on a resolve() call
+     * must pass them explicitly (e.g. from the current request's headers).
+     */
+    context?: EventContext;
 }
 /** Body posted to `POST /api/events/v1/identify` — binds visitor to a known user. */
 interface IdentifyRequest {
@@ -543,6 +584,10 @@ declare class Identity {
     /** Persist a visitor id so it rides on every future event. */
     identify(visitorId: string): void;
     getVisitorId(): string | null;
+    setCustomerId(customerId: string | null): void;
+    getCustomerId(): string | null;
+    setEmail(email: string | null): void;
+    getEmail(): string | null;
     /**
      * Resolve the current session id: reused while activity continues within
      * {@link SESSION_TIMEOUT_MS}, otherwise a new one is minted. Persisted in
@@ -628,8 +673,15 @@ declare class XeniaClient {
      * Persist a visitor id, attached to every subsequent event, and bind it to
      * a known user server-side (`POST /api/events/v1/identify`, fire-and-
      * forget — resolves to an `"identify"` client event carrying `personId`).
+     *
+     * `extra.customerId`/`extra.email`, when supplied, are also persisted
+     * ambiently (like the visitor id) so they ride on every later `resolve()`
+     * call automatically — part of the SDK-provided-fields parity list.
      */
-    identify(visitorId: string): void;
+    identify(visitorId: string, extra?: {
+        customerId?: string;
+        email?: string;
+    }): void;
     /** Override the customer-journey UUID (else derived from utm_id). */
     setJourneyId(id: string | null): void;
     /**
@@ -675,10 +727,18 @@ declare class XeniaClient {
     /** The SDK-owned visitor anchor: the `identify()`/`config.visitorId` id, else the device id. */
     private resolveVisitorId;
     /**
-     * Stamp the SDK-owned visitor id into the resolve `data` under the reserved
-     * `_xenia_vid` key so the backend can bucket holdout experiments and record
-     * exposure per visitor (it reads visitor identity from `data`). Set last so a
-     * caller can't override it; a no-op when no visitor id is resolvable yet.
+     * Stamp the full set of SDK-provided fields into the resolve `data` —
+     * `path`, `query`, `deviceId`, `visitorId`, `customerId`, `email`, `url`,
+     * `referrer`, and the five `utm*` fields — the same field-name/type parity
+     * the webhook trigger's "SDK-provided fields" already promises, now native
+     * (always attached, no marketer toggle) for the Personalization Resolve
+     * trigger too. Plus the reserved `_xenia_vid` key the backend reads for
+     * holdout/exposure bucketing. All of these are spread LAST (after the
+     * caller's own `data`) so none can be overridden per call — the same
+     * override-protection guarantee `_xenia_vid` alone used to have, now
+     * widened to the full set. A no-op (returns `opts` unchanged) when nothing
+     * is resolvable yet (e.g. called before `init()` on a fresh visit with no
+     * page context available).
      */
     private withVisitor;
     private dntBlocked;

package/dist/{actions-DFLoSXO_.d.ts → actions-CkiSdvSa.d.ts}

@@ -80,6 +80,23 @@ interface XeniaConfig {
      *   cookie read via `getVisitorId()`.
      */
     visitorId?: string;
+    /**
+     * The ambient request context for a **server** client — the SDK-provided page/campaign fields
+     * (`path`, `query`, `url`, `referrer`, `utmSource`/`utmMedium`/`utmCampaign`/`utmContent`/`utmId`)
+     * that get attached to EVERY `resolve()`/`resolveBatch()`/`webhook()` made with this client, so
+     * journey rules can gate on `query.<name>` or `path` without any per-call wiring.
+     *
+     * The browser client needs nothing here — it reads these off `window.location` itself. A server
+     * runtime has no ambient request, so bind it once when constructing the per-request client:
+     *
+     * ```ts
+     * createXeniaServer({ …, context: contextFromUrl(currentUrl, referrer) })
+     * ```
+     *
+     * Lowest precedence: a per-call `context`/`identity` overrides it, and the SDK-owned `visitorId`
+     * still wins over everything.
+     */
+    context?: EventContext;
     /**
      * Persist the SDK visitor id to a first-party `xenia_vid` cookie so your
      * **same-origin** server can read it (`getVisitorId(cookieHeader)`) and bind
@@ -115,6 +132,13 @@ interface VisitorCookieOptions {
     /** Cookie lifetime in days. Default 365. */
     maxAgeDays?: number;
 }
+/** Well-known event fields understood by the backend event-trigger node. */
+interface EventIdentity {
+    deviceId?: string;
+    visitorId?: string;
+    customerId?: string;
+    email?: string;
+}
 /** UTM + page context captured automatically by the client. */
 interface EventContext {
     utmSource?: string;
@@ -291,6 +315,23 @@ interface ResolveOptions {
     locale?: string;
     /** When true, ask the server to splice and return `content`. */
     merge?: boolean;
+    /**
+     * Caller-supplied identity fields (`deviceId`/`visitorId`/`customerId`/
+     * `email`), merged into `data` the same way `ServerWebhookOptions.identity`
+     * is merged for `webhook()`. Only relevant server-side — the browser client
+     * collects these ambiently instead and ignores this field. The SDK-owned
+     * `visitorId` (from `config.visitorId`) still wins over a value supplied
+     * here, same precedence as `webhook()`.
+     */
+    identity?: EventIdentity;
+    /**
+     * Caller-supplied page context (`path`/`query`/`url`/`referrer`/`utm*`),
+     * merged into `data` the same way `ServerWebhookOptions.context` is merged
+     * for `webhook()`. There's no ambient `window`/`document` server-side, so a
+     * server caller who wants these SDK-provided fields on a resolve() call
+     * must pass them explicitly (e.g. from the current request's headers).
+     */
+    context?: EventContext;
 }
 /** Body posted to `POST /api/events/v1/identify` — binds visitor to a known user. */
 interface IdentifyRequest {
@@ -543,6 +584,10 @@ declare class Identity {
     /** Persist a visitor id so it rides on every future event. */
     identify(visitorId: string): void;
     getVisitorId(): string | null;
+    setCustomerId(customerId: string | null): void;
+    getCustomerId(): string | null;
+    setEmail(email: string | null): void;
+    getEmail(): string | null;
     /**
      * Resolve the current session id: reused while activity continues within
      * {@link SESSION_TIMEOUT_MS}, otherwise a new one is minted. Persisted in
@@ -628,8 +673,15 @@ declare class XeniaClient {
      * Persist a visitor id, attached to every subsequent event, and bind it to
      * a known user server-side (`POST /api/events/v1/identify`, fire-and-
      * forget — resolves to an `"identify"` client event carrying `personId`).
+     *
+     * `extra.customerId`/`extra.email`, when supplied, are also persisted
+     * ambiently (like the visitor id) so they ride on every later `resolve()`
+     * call automatically — part of the SDK-provided-fields parity list.
      */
-    identify(visitorId: string): void;
+    identify(visitorId: string, extra?: {
+        customerId?: string;
+        email?: string;
+    }): void;
     /** Override the customer-journey UUID (else derived from utm_id). */
     setJourneyId(id: string | null): void;
     /**
@@ -675,10 +727,18 @@ declare class XeniaClient {
     /** The SDK-owned visitor anchor: the `identify()`/`config.visitorId` id, else the device id. */
     private resolveVisitorId;
     /**
-     * Stamp the SDK-owned visitor id into the resolve `data` under the reserved
-     * `_xenia_vid` key so the backend can bucket holdout experiments and record
-     * exposure per visitor (it reads visitor identity from `data`). Set last so a
-     * caller can't override it; a no-op when no visitor id is resolvable yet.
+     * Stamp the full set of SDK-provided fields into the resolve `data` —
+     * `path`, `query`, `deviceId`, `visitorId`, `customerId`, `email`, `url`,
+     * `referrer`, and the five `utm*` fields — the same field-name/type parity
+     * the webhook trigger's "SDK-provided fields" already promises, now native
+     * (always attached, no marketer toggle) for the Personalization Resolve
+     * trigger too. Plus the reserved `_xenia_vid` key the backend reads for
+     * holdout/exposure bucketing. All of these are spread LAST (after the
+     * caller's own `data`) so none can be overridden per call — the same
+     * override-protection guarantee `_xenia_vid` alone used to have, now
+     * widened to the full set. A no-op (returns `opts` unchanged) when nothing
+     * is resolvable yet (e.g. called before `init()` on a fresh visit with no
+     * page context available).
      */
     private withVisitor;
     private dntBlocked;

package/dist/{chunk-D37RD3UC.js → chunk-7D2HJMW6.js}

@@ -516,6 +516,34 @@ function extractContentSwaps(body) {
   return Array.isArray(swaps) ? swaps : void 0;
 }
 
+// src/core/request-context.ts
+function contextFromUrl(url, referrer) {
+  const ctx = {};
+  if (referrer) ctx.referrer = referrer;
+  if (!url) return ctx;
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return ctx;
+  }
+  ctx.url = parsed.href;
+  ctx.path = parsed.pathname;
+  ctx.query = Object.fromEntries(parsed.searchParams);
+  const utm = (name) => parsed.searchParams.get(name) || void 0;
+  const utmSource = utm("utm_source");
+  const utmMedium = utm("utm_medium");
+  const utmCampaign = utm("utm_campaign");
+  const utmContent = utm("utm_content");
+  const utmId = utm("utm_id");
+  if (utmSource) ctx.utmSource = utmSource;
+  if (utmMedium) ctx.utmMedium = utmMedium;
+  if (utmCampaign) ctx.utmCampaign = utmCampaign;
+  if (utmContent) ctx.utmContent = utmContent;
+  if (utmId) ctx.utmId = utmId;
+  return ctx;
+}
+
 // src/core/response-store.ts
 var MemoryResponseStore = class {
   map = /* @__PURE__ */ new Map();
@@ -570,6 +598,6 @@ var LocalStorageResponseStore = class {
   }
 };
 
-export { CONSENT_COOKIE, DEFAULT_PREFIX, HttpClient, HttpError, LocalStorageResponseStore, MAX_EVENT_ID_LENGTH, MemoryResponseStore, VISITOR_COOKIE, XeniaApi, buildUrl, consentCookieName, extractContentSwaps, generateUlid, isBrowser, parseActions, spliceSlots, toEventId, visitorCookieName };
-//# sourceMappingURL=chunk-D37RD3UC.js.map
-//# sourceMappingURL=chunk-D37RD3UC.js.map
+export { CONSENT_COOKIE, DEFAULT_PREFIX, HttpClient, HttpError, LocalStorageResponseStore, MAX_EVENT_ID_LENGTH, MemoryResponseStore, VISITOR_COOKIE, XeniaApi, buildUrl, compact, consentCookieName, contextFromUrl, extractContentSwaps, generateUlid, isBrowser, parseActions, spliceSlots, toEventId, visitorCookieName };
+//# sourceMappingURL=chunk-7D2HJMW6.js.map
+//# sourceMappingURL=chunk-7D2HJMW6.js.map

package/dist/chunk-7D2HJMW6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/actions.ts","../src/core/http-client.ts","../src/core/token-provider.ts","../src/core/api.ts","../src/core/id.ts","../src/core/cookie-names.ts","../src/core/content-splice.ts","../src/core/request-context.ts","../src/core/response-store.ts"],"names":[],"mappings":";AAEA,IAAM,aAAA,uBAAyC,GAAA,CAAsB;AAAA,EACnE,QAAA;AAAA,EACA,OAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,IAAM,iBAAA,uBAA6C,GAAA,CAAqB;AAAA,EACtE,UAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACA,cAAA;AAAA,EACA,KAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,IAAM,SAAA,uBAAqC,GAAA,CAAY;AAAA,EACrD,MAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,YAAA;AAAA,EACA,UAAA;AAAA,EACA,GAAG;AACL,CAAC,CAAA;AAGD,SAAS,SAAS,CAAA,EAA2D;AAC3E,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;AAEA,SAAS,SAAS,CAAA,EAA8C;AAC9D,EAAA,OAAO,OAAO,CAAA,KAAM,QAAA,GAAW,CAAA,GAAI,MAAA;AACrC;AAEA,SAAS,SAAS,CAAA,EAA8C;AAC9D,EAAA,OAAO,OAAO,CAAA,KAAM,QAAA,GAAW,CAAA,GAAI,MAAA;AACrC;AAMA,SAAS,SAAS,GAAA,EAAoC;AACpD,EAAA,IAAI,CAAC,QAAA,CAAS,GAAG,CAAA,EAAG,OAAO,IAAA;AAC3B,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC9B,EAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,UAAU,GAAA,CAAI,IAAI,GAAG,OAAO,IAAA;AAE1C,EAAA,IAAI,SAAS,UAAA,EAAY;AACvB,IAAA,MAAM,GAAA,GAAM,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA;AAC5B,IAAA,OAAO,GAAA,GAAM,EAAE,IAAA,EAAM,GAAA,EAAI,GAAI,IAAA;AAAA,EAC/B;AAEA,EAAA,IAAI,IAAA,KAAS,MAAA,IAAU,IAAA,KAAS,MAAA,EAAQ;AACtC,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AAClC,IAAA,OAAO,MAAA,GAAS,EAAE,IAAA,EAAM,MAAA,EAAO,GAAI,IAAA;AAAA,EACrC;AAEA,EAAA,IAAI,IAAA,KAAS,MAAA,IAAU,IAAA,KAAS,YAAA,EAAc;AAC5C,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AAClC,IAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,IAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA,EAAG,IAAA,EAAM,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA,EAAE;AAAA,EAC5E;AAGA,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA,GACxB;AAAA,IACE,KAAA,EAAO,QAAA,CAAS,GAAA,CAAI,GAAA,CAAI,KAAK,CAAA,IAAK,EAAA;AAAA,IAClC,GAAA,EAAK,QAAA,CAAS,GAAA,CAAI,GAAA,CAAI,GAAG,CAAA;AAAA,IACzB,KAAA,EAAO,QAAA,CAAS,GAAA,CAAI,GAAA,CAAI,KAAK;AAAA,GAC/B,GACA,MAAA;AAEJ,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,MAAA,EAAQ,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AAAA,IAC3B,KAAA,EAAO,QAAA,CAAS,GAAA,CAAI,KAAK,CAAA;AAAA,IACzB,OAAA,EAAS,QAAA,CAAS,GAAA,CAAI,OAAO,CAAA;AAAA,IAC7B,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAA;AAAA,IAC/B,IAAA,EAAM,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAAA,IACvB,GAAA,EAAK,GAAA,IAAO,GAAA,CAAI,KAAA,GAAQ,GAAA,GAAM,MAAA;AAAA,IAC9B,cAAA,EAAgB,QAAA,CAAS,GAAA,CAAI,cAAc,CAAA;AAAA,IAC3C,QAAA,EAAU,iBAAA,CAAkB,GAAA,CAAI,QAAQ;AAAA,GAC1C;AACF;AAEA,SAAS,kBAAkB,CAAA,EAAuD;AAChF,EAAA,MAAM,CAAA,GAAI,SAAS,CAAC,CAAA;AACpB,EAAA,OAAO,CAAA,IAAK,iBAAA,CAAkB,GAAA,CAAI,CAAC,IAAK,CAAA,GAAwB,MAAA;AAClE;AASO,SAAS,aAAa,IAAA,EAAgC;AAC3D,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACvB,IAAA,IAAA,GAAO,IAAA;AAAA,EACT,CAAA,MAAA,IAAW,SAAS,IAAI,CAAA,IAAK,MAAM,OAAA,CAAQ,IAAA,CAAK,YAAY,CAAA,EAAG;AAC7D,IAAA,IAAA,GAAO,IAAA,CAAK,YAAA;AAAA,EACd;AACA,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,SAAU,EAAC;AAElC,EAAA,MAAM,UAAyB,EAAC;AAChC,EAAA,KAAA,MAAW,SAAS,IAAA,EAAM;AACxB,IAAA,MAAM,MAAA,GAAS,SAAS,KAAK,CAAA;AAC7B,IAAA,IAAI,MAAA,EAAQ,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA;AAAA,EACjC;AACA,EAAA,OAAO,OAAA;AACT;;;AC3GO,IAAM,gBAAA,GAAmB,uCAAA;AAGzB,SAAS,SAAA,GAAqB;AACnC,EAAA,OAAO,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,QAAA,KAAa,WAAA;AAC9D;AAGO,SAAS,QAAA,CAAS,KAAa,WAAA,EAA8C;AAClF,EAAA,IAAI,CAAC,eAAe,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,MAAA,KAAW,GAAG,OAAO,GAAA;AAClE,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB,WAAW,CAAA;AAC9C,EAAA,MAAM,GAAA,GAAM,GAAA,CAAI,QAAA,CAAS,GAAG,IAAI,GAAA,GAAM,GAAA;AACtC,EAAA,OAAO,GAAG,GAAG,CAAA,EAAG,GAAG,CAAA,EAAG,MAAA,CAAO,UAAU,CAAA,CAAA;AACzC;AAGA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AA+BO,IAAM,SAAA,GAAN,cAAwB,KAAA,CAAM;AAAA,EACnC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAA,IAAW,CAAA,2BAAA,EAA8B,MAAM,CAAA,CAAE,CAAA;AAJvC,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,WAAA;AAAA,EACd;AAAA,EANkB,MAAA;AAAA,EACA,IAAA;AAMpB;AAoBO,IAAM,aAAN,MAAiB;AAAA,EACL,OAAA;AAAA,EACA,cAAA;AAAA,EACA,OAAA;AAAA,EACA,KAAA;AAAA,EACA,KAAA;AAAA,EAEjB,YAAY,IAAA,EAAyB;AACnC,IAAA,IAAA,CAAK,WAAW,IAAA,CAAK,OAAA,IAAW,gBAAA,EAAkB,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACpE,IAAA,IAAA,CAAK,cAAA,GAAiB,IAAA,CAAK,cAAA,IAAkB,EAAC;AAC9C,IAAA,IAAA,CAAK,OAAA,GAAU,KAAK,OAAA,IAAW,GAAA;AAC/B,IAAA,IAAA,CAAK,KAAA,GAAQ;AAAA,MACX,QAAA,EAAU,IAAA,CAAK,KAAA,EAAO,QAAA,IAAY,CAAA;AAAA,MAClC,WAAA,EAAa,IAAA,CAAK,KAAA,EAAO,WAAA,IAAe;AAAA,KAC1C;AACA,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAK,KAAA,IAAS,KAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,QAAQ,IAAA,EAA2C;AACvD,IAAA,MAAM,MAAM,QAAA,CAAS,IAAA,CAAK,UAAU,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AACzD,IAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,cAAA,EAAgB,kBAAA;AAAA,MAChB,GAAG,IAAA,CAAK,cAAA;AAAA,MACR,GAAG,IAAA,CAAK;AAAA,KACV;AACA,IAAA,MAAM,IAAA,GAAO,KAAK,IAAA,KAAS,MAAA,GAAY,KAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GAAI,MAAA;AACnE,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,IAAW,IAAA,CAAK,OAAA;AACrC,IAAA,MAAM,WAAA,GAAc,KAAK,OAAA,GAAU,CAAA,GAAA,CAAK,KAAK,KAAA,EAAO,QAAA,IAAY,IAAA,CAAK,KAAA,CAAM,QAAA,IAAY,CAAA;AACvF,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,EAAO,WAAA,IAAe,KAAK,KAAA,CAAM,WAAA;AAExD,IAAA,IAAI,SAAA;AACJ,IAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,WAAA,EAAa,OAAA,EAAA,EAAW;AACtD,MAAA,IAAI;AACF,QAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,gBAAA;AAAA,UAC1B,GAAA;AAAA,UACA,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,GAAI,IAAA,CAAK,SAAA,GAAY,EAAE,SAAA,EAAW,IAAA,EAAK,GAAI,EAAC,EAAG;AAAA,UACxE;AAAA,SACF;AACA,QAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAA;AAE1C,QAAA,IAAI,SAAS,EAAA,EAAI;AACf,UAAA,OAAO,EAAE,UAAU,IAAA,EAAK;AAAA,QAC1B;AAGA,QAAA,IAAI,KAAK,iBAAA,CAAkB,QAAA,CAAS,MAAM,CAAA,IAAK,OAAA,GAAU,cAAc,CAAA,EAAG;AACxE,UAAA,MAAM,IAAA,GAAO,IAAA,CAAK,YAAA,CAAa,QAAA,EAAU,WAAW,OAAO,CAAA;AAC3D,UAAA,IAAA,CAAK,GAAA,CAAI,YAAY,IAAA,CAAK,IAAI,UAAU,IAAI,CAAA,WAAA,EAAc,QAAA,CAAS,MAAM,CAAA,CAAA,CAAG,CAAA;AAC5E,UAAA,MAAM,MAAM,IAAI,CAAA;AAChB,UAAA;AAAA,QACF;AACA,QAAA,MAAM,IAAI,SAAA,CAAU,QAAA,CAAS,MAAA,EAAQ,IAAI,CAAA;AAAA,MAC3C,SAAS,GAAA,EAAK;AACZ,QAAA,SAAA,GAAY,GAAA;AAEZ,QAAA,IAAI,GAAA,YAAe,WAAW,MAAM,GAAA;AAEpC,QAAA,IAAI,OAAA,GAAU,cAAc,CAAA,EAAG;AAC7B,UAAA,MAAM,IAAA,GAAO,YAAY,CAAA,IAAK,OAAA;AAC9B,UAAA,IAAA,CAAK,IAAI,CAAA,SAAA,EAAY,IAAA,CAAK,IAAI,CAAA,OAAA,EAAU,IAAI,CAAA,kBAAA,CAAoB,CAAA;AAChE,UAAA,MAAM,MAAM,IAAI,CAAA;AAChB,UAAA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,IAAA,MAAM,SAAA,YAAqB,KAAA,GAAQ,SAAA,GAAY,IAAI,MAAM,gBAAgB,CAAA;AAAA,EAC3E;AAAA,EAEA,MAAc,gBAAA,CACZ,GAAA,EACA,IAAA,EACA,OAAA,EACmB;AACnB,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,OAAO,CAAA;AAC1D,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,MAAM,GAAA,EAAK,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AAAA,IAChE,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,GAAA,YAAe,KAAA,IAAS,GAAA,CAAI,IAAA,KAAS,YAAA,EAAc;AACrD,QAAA,MAAM,IAAI,MAAM,CAAA,sBAAA,EAAyB,OAAO,MAAM,EAAE,KAAA,EAAO,KAAK,CAAA;AAAA,MACtE;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAc,UAAU,QAAA,EAAwC;AAC9D,IAAA,MAAM,OAAO,MAAM,QAAA,CAAS,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AACjD,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,IAAA,IAAI;AACF,MAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IACxB,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,kBAAkB,MAAA,EAAyB;AACjD,IAAA,OAAO,MAAA,KAAW,GAAA,IAAQ,MAAA,IAAU,GAAA,IAAO,MAAA,IAAU,GAAA;AAAA,EACvD;AAAA,EAEQ,YAAA,CAAa,QAAA,EAAoB,SAAA,EAAmB,OAAA,EAAyB;AACnF,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA;AACjD,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,MAAM,OAAA,GAAU,OAAO,MAAM,CAAA;AAC7B,MAAA,IAAI,CAAC,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,SAAU,OAAA,GAAU,GAAA;AAAA,IAC/C;AACA,IAAA,OAAO,YAAY,CAAA,IAAK,OAAA;AAAA,EAC1B;AAAA,EAEQ,IAAI,GAAA,EAAmB;AAC7B,IAAA,IAAI,KAAK,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,CAAA,QAAA,EAAW,GAAG,CAAA,CAAE,CAAA;AAAA,EAC/C;AACF;;;AC9LA,SAAS,UAAU,KAAA,EAAmC;AACpD,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AAClC,IAAA,IAAI,CAAC,SAAS,OAAO,KAAA,CAAA;AACrB,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAC,CAAA;AAC3E,IAAA,OAAO,OAAO,IAAA,CAAK,GAAA,KAAQ,QAAA,GAAW,IAAA,CAAK,MAAM,GAAA,GAAO,KAAA,CAAA;AAAA,EAC1D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAQO,IAAM,gBAAN,MAAoB;AAAA,EACR,MAAA;AAAA,EACT,MAAA,GAAwB,IAAA;AAAA,EACxB,QAAA,GAAmC,IAAA;AAAA,EAE3C,YAAY,MAAA,EAAqB;AAC/B,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA,EAGA,SAAA,GAAqB;AACnB,IAAA,OAAO,QAAQ,IAAA,CAAK,MAAA,CAAO,KAAA,IAAS,IAAA,CAAK,OAAO,QAAQ,CAAA;AAAA,EAC1D;AAAA,EAES,WAAW,YAA6B;AAC/C,IAAA,IAAI,IAAA,CAAK,OAAO,KAAA,IAAS,CAAC,KAAK,MAAA,CAAO,QAAA,EAAU,OAAO,IAAA,CAAK,MAAA,CAAO,KAAA;AAEnE,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,IAAA,CAAK,UAAU,IAAA,CAAK,MAAA,CAAO,YAAY,GAAA,EAAK,OAAO,KAAK,MAAA,CAAO,KAAA;AACnE,IAAA,IAAI,IAAA,CAAK,QAAA,EAAU,OAAO,IAAA,CAAK,QAAA;AAE/B,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU;AACzB,MAAA,MAAM,IAAI,MAAM,uDAAuD,CAAA;AAAA,IACzE;AAEA,IAAA,IAAA,CAAK,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,MAAA,CAAO,UAAU,CAAA,CACnD,IAAA,CAAK,CAAC,KAAA,KAAU;AACf,MAAA,MAAM,GAAA,GAAM,UAAU,KAAK,CAAA;AAE3B,MAAA,MAAM,SAAA,GAAY,GAAA,GAAM,GAAA,GAAM,GAAA,GAAS,MAAM,CAAA,GAAI,GAAA;AACjD,MAAA,IAAA,CAAK,MAAA,GAAS,EAAE,KAAA,EAAO,SAAA,EAAU;AACjC,MAAA,OAAO,KAAA;AAAA,IACT,CAAC,CAAA,CACA,OAAA,CAAQ,MAAM;AACb,MAAA,IAAA,CAAK,QAAA,GAAW,IAAA;AAAA,IAClB,CAAC,CAAA;AAEH,IAAA,OAAO,IAAA,CAAK,QAAA;AAAA,EACd,CAAA;AACF,CAAA;;;AC7CO,SAAS,QAAQ,GAAA,EAAwD;AAC9E,EAAA,MAAM,MAAkB,EAAC;AACzB,EAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AACxC,IAAA,IAAI,CAAA,KAAM,MAAA,EAAW,GAAA,CAAI,CAAC,CAAA,GAAI,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,GAAA;AACT;AAQO,IAAM,WAAN,MAAe;AAAA,EACH,IAAA;AAAA,EACA,QAAA;AAAA,EACA,cAAA;AAAA,EACA,aAAA;AAAA,EAEjB,YAAY,MAAA,EAAqB;AAC/B,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,iBAAiB,MAAA,CAAO,cAAA;AAC7B,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAI,aAAA,CAAc,MAAM,CAAA;AAC7C,IAAA,IAAA,CAAK,IAAA,GAAO,IAAI,UAAA,CAAW;AAAA,MACzB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,gBAAgB,MAAA,CAAO,OAAA;AAAA,MACvB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,OAAO,MAAA,CAAO;AAAA,KACf,CAAA;AAAA,EACH;AAAA;AAAA,EAGQ,aAAA,GAAwC;AAC9C,IAAA,OAAO;AAAA,MACL,eAAe,IAAA,CAAK,QAAA;AAAA,MACpB,iBAAiB,IAAA,CAAK;AAAA,KACxB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAc,WAAA,GAA+C;AAC3D,IAAA,MAAM,OAAA,GAAU,KAAK,aAAA,EAAc;AACnC,IAAA,IAAI,CAAC,IAAA,CAAK,aAAA,CAAc,SAAA,IAAa,OAAO,OAAA;AAC5C,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,aAAA,CAAc,QAAA,EAAS;AAChD,IAAA,IAAI,KAAA,EAAO,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,CAAA,CAAA;AAClD,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,OAAA,CACJ,SAAA,EACA,IAAA,EACA,SAAyB,MAAA,EACC;AAC1B,IAAA,MAAM,EAAE,UAAU,IAAA,EAAM,OAAA,KAAY,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ;AAAA,MAC1D,MAAA;AAAA,MACA,IAAA,EAAM,OAAA;AAAA,MACN,KAAA,EAAO,EAAE,EAAA,EAAI,SAAA,EAAU;AAAA,MACvB,OAAA,EAAS,MAAM,IAAA,CAAK,WAAA,EAAY;AAAA,MAChC,IAAA,EAAM,MAAA,KAAW,MAAA,GAAU,IAAA,IAAQ,EAAC,GAAK,MAAA;AAAA,MACzC,OAAA,EAAS;AAAA,KACV,CAAA;AACD,IAAA,OAAO;AAAA,MACL,QAAQ,QAAA,CAAS,MAAA;AAAA,MACjB,IAAA,EAAM,OAAA;AAAA,MACN,OAAA,EAAS,aAAa,OAAO,CAAA;AAAA,MAC7B,UAAA,EAAY,KAAK,GAAA;AAAI,KACvB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,UAAA,CACJ,MAAA,EACA,IAAA,EACkC;AAClC,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ;AAAA,MACvC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,gBAAA;AAAA,MACN,OAAA,EAAS,MAAM,IAAA,CAAK,WAAA,EAAY;AAAA,MAChC,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,MACf,WAAW,IAAA,EAAM;AAAA,KAClB,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,SAAS,IAAA,EAAkD;AAC/D,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ;AAAA,MACvC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EAAS,MAAM,IAAA,CAAK,WAAA,EAAY;AAAA,MAChC;AAAA,KACD,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,OAAA,CAAQ,cAAA,EAAwB,OAAA,EAA2C;AAC/E,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ;AAAA,MACvC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,wBAAA;AAAA,MACN,OAAA,EAAS,MAAM,IAAA,CAAK,WAAA,EAAY;AAAA,MAChC,MAAM,OAAA,CAAQ;AAAA,QACZ,cAAA;AAAA,QACA,SAAA,EAAW,QAAQ,SAAA,KAAc,IAAA;AAAA,QACjC,SAAA,EAAW,QAAQ,SAAA,KAAc,IAAA;AAAA,QACjC,eAAA,EAAiB,QAAQ,eAAA,KAAoB,IAAA;AAAA,QAC7C,eAAe,OAAA,CAAQ,aAAA;AAAA,QACvB,gBAAgB,OAAA,CAAQ;AAAA,OACzB;AAAA,KACF,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,OAAA,CAAQ,UAAA,EAAoB,IAAA,GAAuB,EAAC,EAA2B;AACnF,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ;AAAA,MACvC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,8BAAA;AAAA,MACN,KAAA,EAAO,IAAA,CAAK,KAAA,KAAU,MAAA,GAAY,EAAE,OAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,EAAE,GAAI,MAAA;AAAA,MAClE,OAAA,EAAS,MAAM,IAAA,CAAK,WAAA,EAAY;AAAA,MAChC,MAAM,OAAA,CAAQ;AAAA,QACZ,UAAA;AAAA,QACA,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,QAAQ,IAAA,CAAK;AAAA,OACd;AAAA,KACF,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAA,CACJ,KAAA,EACA,IAAA,GAAuB,EAAC,EACO;AAC/B,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ;AAAA,MACvC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,oCAAA;AAAA,MACN,KAAA,EAAO,IAAA,CAAK,KAAA,KAAU,MAAA,GAAY,EAAE,OAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,EAAE,GAAI,MAAA;AAAA,MAClE,OAAA,EAAS,MAAM,IAAA,CAAK,WAAA,EAAY;AAAA,MAChC,MAAM,OAAA,CAAQ;AAAA,QACZ,KAAA;AAAA,QACA,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,QAAQ,IAAA,CAAK;AAAA,OACd;AAAA,KACF,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;;AC3MA,IAAM,QAAA,GAAW,kCAAA;AAEjB,SAAS,YAAY,MAAA,EAA4B;AAC/C,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,MAAM,CAAA;AACnC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,eAAA,EAAiB;AAC3D,IAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAAA,EAC9B,CAAA,MAAO;AACL,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,KAAA,CAAM,CAAC,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,EAC5E;AACA,EAAA,OAAO,KAAA;AACT;AAQO,SAAS,YAAA,CAAa,IAAA,GAAe,IAAA,CAAK,GAAA,EAAI,EAAW;AAC9D,EAAA,IAAI,QAAA,GAAW,EAAA;AACf,EAAA,IAAI,CAAA,GAAI,IAAA;AACR,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,IAAK,CAAA,EAAG,CAAA,EAAA,EAAK;AAC3B,IAAA,QAAA,GAAW,QAAA,CAAS,CAAA,GAAI,EAAE,CAAA,GAAI,QAAA;AAC9B,IAAA,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,CAAA,GAAI,EAAE,CAAA;AAAA,EACvB;AAEA,EAAA,MAAM,MAAA,GAAS,YAAY,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,GAAa,EAAA;AACjB,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,EAAA,EAAI,CAAA,EAAA,EAAK;AAC3B,IAAA,UAAA,IAAc,QAAA,CAAS,MAAA,CAAO,CAAC,CAAA,GAAI,EAAE,CAAA;AAAA,EACvC;AAEA,EAAA,OAAO,QAAA,GAAW,UAAA;AACpB;AAGO,IAAM,mBAAA,GAAsB;AAe5B,SAAS,UAAU,GAAA,EAAqB;AAC7C,EAAA,IAAI,GAAA,CAAI,MAAA,IAAU,mBAAA,EAAqB,OAAO,GAAA;AAG9C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,IAAA,IAAQ,CAAC,UAAA,EAAY,QAAU,CAAA,EAAG;AAC3C,IAAA,IAAI,OAAO,IAAA,KAAS,CAAA;AACpB,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,QAAQ,CAAA,EAAA,EAAK;AACnC,MAAA,IAAA,IAAQ,GAAA,CAAI,WAAW,CAAC,CAAA;AACxB,MAAA,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,QAAU,CAAA,KAAM,CAAA;AACvC,MAAA,GAAA,IAAO,QAAA,CAAS,OAAO,EAAE,CAAA;AAAA,IAC3B;AAAA,EACF;AAEA,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,mBAAA,EAAqB,CAAA,EAAA,EAAK;AAC5C,IAAA,IAAI,MAAM,CAAA,GAAI,CAAA;AACd,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,mBAAA,EAAqB;AACxD,MAAA,GAAA,GAAO,MAAM,EAAA,GAAK,QAAA,CAAS,QAAQ,GAAA,CAAI,CAAC,CAAC,CAAA,KAAO,CAAA;AAAA,IAClD;AACA,IAAA,MAAA,IAAU,QAAA,CAAS,MAAM,EAAE,CAAA;AAAA,EAC7B;AACA,EAAA,OAAO,MAAA;AACT;;;AC7DO,IAAM,cAAA,GAAiB;AAGvB,SAAS,iBAAA,CAAkB,SAAiB,cAAA,EAAwB;AACzE,EAAA,OAAO,CAAA,EAAG,UAAU,cAAc,CAAA,IAAA,CAAA;AACpC;AAGO,SAAS,iBAAA,CAAkB,SAAiB,cAAA,EAAwB;AACzE,EAAA,OAAO,CAAA,EAAG,UAAU,cAAc,CAAA,QAAA,CAAA;AACpC;AASO,IAAM,iBAAiB,iBAAA;AAMvB,IAAM,iBAAiB,iBAAA;;;ACnB9B,SAAS,cAAc,CAAA,EAAiD;AACtE,EAAA,OAAO,CAAA,KAAM,QAAQ,OAAO,CAAA,KAAM,YAAY,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;AAEA,SAAS,UAA+B,KAAA,EAAa;AACnD,EAAA,OAAO,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAS,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA;AAChG;AAEA,SAAS,SAAA,CAAU,IAAA,EAAiB,IAAA,EAAgB,KAAA,EAAkB,IAAA,EAAsC;AAC1G,EAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,IAAA,IAAI,SAAS,OAAA,IAAW,aAAA,CAAc,IAAI,CAAA,IAAK,aAAA,CAAc,KAAK,CAAA,EAAG;AACnE,MAAA,OAAO,EAAE,GAAG,IAAA,EAAM,GAAG,KAAA,EAAM;AAAA,IAC7B;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,CAAC,GAAA,EAAK,GAAG,IAAI,CAAA,GAAI,IAAA;AACvB,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACvB,IAAA,MAAM,KAAA,GAAQ,OAAO,GAAG,CAAA;AACxB,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,KAAK,CAAA,IAAK,QAAQ,CAAA,IAAK,KAAA,IAAS,IAAA,CAAK,MAAA,EAAQ,OAAO,IAAA;AAC1E,IAAA,MAAM,IAAA,GAAO,KAAK,KAAA,EAAM;AACxB,IAAA,IAAA,CAAK,KAAK,IAAI,SAAA,CAAU,IAAA,CAAK,KAAK,CAAA,EAAG,IAAA,EAAM,OAAO,IAAI,CAAA;AACtD,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACvB,IAAA,IAAI,EAAE,GAAA,IAAO,IAAA,CAAA,EAAO,OAAO,IAAA;AAC3B,IAAA,OAAO,EAAE,GAAG,IAAA,EAAM,CAAC,GAAG,GAAG,SAAA,CAAU,IAAA,CAAK,GAAG,CAAA,EAAG,IAAA,EAAM,KAAA,EAAO,IAAI,CAAA,EAAE;AAAA,EACnE;AACA,EAAA,OAAO,IAAA;AACT;AASO,SAAS,WAAA,CACd,OACA,KAAA,EAC2B;AAC3B,EAAA,MAAM,SAAoC,EAAC;AAC3C,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAChD,IAAA,MAAA,CAAO,GAAG,CAAA,GAAI,SAAA,CAAU,KAAK,CAAA;AAAA,EAC/B;AACA,EAAA,IAAI,CAAC,OAAO,OAAO,MAAA;AAEnB,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,CAAC,SAAS,GAAG,SAAS,IAAI,IAAA,CAAK,UAAA,CAAW,MAAM,GAAG,CAAA;AACzD,IAAA,IAAI,EAAE,WAAW,MAAA,CAAA,EAAS;AAC1B,IAAA,MAAA,CAAO,OAAO,CAAA,GAAI,SAAA,CAAU,MAAA,CAAO,OAAO,CAAA,EAAG,SAAA,EAAW,IAAA,CAAK,WAAA,EAAa,IAAA,CAAK,IAAA,IAAQ,SAAS,CAAA;AAAA,EAClG;AACA,EAAA,OAAO,MAAA;AACT;AAGO,SAAS,oBAAoB,IAAA,EAA4C;AAC9E,EAAA,IAAI,CAAC,aAAA,CAAc,IAAI,CAAA,EAAG,OAAO,MAAA;AACjC,EAAA,MAAM,QAAQ,IAAA,CAAK,iBAAA;AACnB,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAK,KAAA,GAAqC,MAAA;AACtE;;;AC7DO,SAAS,cAAA,CAAe,KAAgC,QAAA,EAAwC;AACrG,EAAA,MAAM,MAAoB,EAAC;AAC3B,EAAA,IAAI,QAAA,MAAc,QAAA,GAAW,QAAA;AAC7B,EAAA,IAAI,CAAC,KAAK,OAAO,GAAA;AAEjB,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,GAAA;AAAA,EACT;AAEA,EAAA,GAAA,CAAI,MAAM,MAAA,CAAO,IAAA;AACjB,EAAA,GAAA,CAAI,OAAO,MAAA,CAAO,QAAA;AAClB,EAAA,GAAA,CAAI,KAAA,GAAQ,MAAA,CAAO,WAAA,CAAY,MAAA,CAAO,YAAY,CAAA;AAElD,EAAA,MAAM,MAAM,CAAC,IAAA,KAAiB,OAAO,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA,IAAK,MAAA;AAC/D,EAAA,MAAM,SAAA,GAAY,IAAI,YAAY,CAAA;AAClC,EAAA,MAAM,SAAA,GAAY,IAAI,YAAY,CAAA;AAClC,EAAA,MAAM,WAAA,GAAc,IAAI,cAAc,CAAA;AACtC,EAAA,MAAM,UAAA,GAAa,IAAI,aAAa,CAAA;AACpC,EAAA,MAAM,KAAA,GAAQ,IAAI,QAAQ,CAAA;AAC1B,EAAA,IAAI,SAAA,MAAe,SAAA,GAAY,SAAA;AAC/B,EAAA,IAAI,SAAA,MAAe,SAAA,GAAY,SAAA;AAC/B,EAAA,IAAI,WAAA,MAAiB,WAAA,GAAc,WAAA;AACnC,EAAA,IAAI,UAAA,MAAgB,UAAA,GAAa,UAAA;AACjC,EAAA,IAAI,KAAA,MAAW,KAAA,GAAQ,KAAA;AAEvB,EAAA,OAAO,GAAA;AACT;;;AClCO,IAAM,sBAAN,MAAmD;AAAA,EACvC,GAAA,uBAAU,GAAA,EAA6B;AAAA,EAExD,GAAA,CAAI,KAAa,KAAA,EAA8B;AAC7C,IAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,EACzB;AAAA,EACA,IAAI,GAAA,EAA0C;AAC5C,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,GAAG,CAAA;AAAA,EACzB;AAAA,EACA,IAAA,GAAiB;AACf,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA;AAAA,EAC5B;AAAA,EACA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,IAAI,KAAA,EAAM;AAAA,EACjB;AACF;AAMO,IAAM,4BAAN,MAAyD;AAAA,EAC7C,KAAA;AAAA,EAEjB,WAAA,CAAY,SAAS,OAAA,EAAS;AAC5B,IAAA,IAAA,CAAK,KAAA,GAAQ,GAAG,MAAM,CAAA,UAAA,CAAA;AAAA,EACxB;AAAA,EAEQ,IAAA,GAAwC;AAC9C,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,YAAA,CAAa,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA;AAC3C,MAAA,OAAO,GAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,IAAwC,EAAC;AAAA,IACvE,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,EAAC;AAAA,IACV;AAAA,EACF;AAAA,EAEQ,MAAM,IAAA,EAA6C;AACzD,IAAA,IAAI;AACF,MAAA,YAAA,CAAa,QAAQ,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,IACvD,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,GAAA,CAAI,KAAa,KAAA,EAA8B;AAC7C,IAAA,MAAM,IAAA,GAAO,KAAK,IAAA,EAAK;AACvB,IAAA,IAAA,CAAK,GAAG,CAAA,GAAI,KAAA;AACZ,IAAA,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACjB;AAAA,EACA,IAAI,GAAA,EAA0C;AAC5C,IAAA,OAAO,IAAA,CAAK,IAAA,EAAK,CAAE,GAAG,CAAA;AAAA,EACxB;AAAA,EACA,IAAA,GAAiB;AACf,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,CAAA;AAAA,EAChC;AAAA,EACA,KAAA,GAAc;AACZ,IAAA,IAAI;AACF,MAAA,YAAA,CAAa,UAAA,CAAW,KAAK,KAAK,CAAA;AAAA,IACpC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACF","file":"chunk-7D2HJMW6.js","sourcesContent":["import type { JsonValue, MessagePlacement, MessagePosition, XeniaAction } from \"./types\";\n\nconst MESSAGE_TYPES: ReadonlySet<string> = new Set<MessagePlacement>([\n  \"banner\",\n  \"popup\",\n  \"modal\",\n  \"inline\",\n]);\n\nconst MESSAGE_POSITIONS: ReadonlySet<string> = new Set<MessagePosition>([\n  \"top-left\",\n  \"top-right\",\n  \"bottom-left\",\n  \"bottom-right\",\n  \"top\",\n  \"bottom\",\n]);\n\nconst ALL_TYPES: ReadonlySet<string> = new Set<string>([\n  \"swap\",\n  \"hide\",\n  \"show\",\n  \"setContent\",\n  \"redirect\",\n  ...MESSAGE_TYPES,\n]);\n\n/** Type guard for a plain JSON object. */\nfunction isObject(v: JsonValue | undefined): v is { [k: string]: JsonValue } {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\nfunction asString(v: JsonValue | undefined): string | undefined {\n  return typeof v === \"string\" ? v : undefined;\n}\n\nfunction asNumber(v: JsonValue | undefined): number | undefined {\n  return typeof v === \"number\" ? v : undefined;\n}\n\n/**\n * Validate and narrow a single raw entry into a {@link XeniaAction}.\n * Returns null for anything malformed so a bad entry can't crash the renderer.\n */\nfunction toAction(raw: JsonValue): XeniaAction | null {\n  if (!isObject(raw)) return null;\n  const type = asString(raw.type);\n  if (!type || !ALL_TYPES.has(type)) return null;\n\n  if (type === \"redirect\") {\n    const url = asString(raw.url);\n    return url ? { type, url } : null;\n  }\n\n  if (type === \"hide\" || type === \"show\") {\n    const target = asString(raw.target);\n    return target ? { type, target } : null;\n  }\n\n  if (type === \"swap\" || type === \"setContent\") {\n    const target = asString(raw.target);\n    if (!target) return null;\n    return { type, target, html: asString(raw.html), text: asString(raw.text) };\n  }\n\n  // Message placement actions (banner/popup/modal/inline).\n  const cta = isObject(raw.cta)\n    ? {\n        label: asString(raw.cta.label) ?? \"\",\n        url: asString(raw.cta.url),\n        event: asString(raw.cta.event),\n      }\n    : undefined;\n\n  return {\n    type: type as MessagePlacement,\n    target: asString(raw.target),\n    title: asString(raw.title),\n    message: asString(raw.message),\n    imageUrl: asString(raw.imageUrl),\n    html: asString(raw.html),\n    cta: cta && cta.label ? cta : undefined,\n    dismissAfterMs: asNumber(raw.dismissAfterMs),\n    position: asMessagePosition(raw.position),\n  };\n}\n\nfunction asMessagePosition(v: JsonValue | undefined): MessagePosition | undefined {\n  const s = asString(v);\n  return s && MESSAGE_POSITIONS.has(s) ? (s as MessagePosition) : undefined;\n}\n\n/**\n * Parse render actions out of a webhook-response body.\n *\n * The convention: marketers return `{ \"xeniaActions\": [ ... ] }` (or a bare\n * array) from the `webhook-response` node. Any body without a recognizable\n * `xeniaActions` array yields an empty list — a safe no-op.\n */\nexport function parseActions(body: JsonValue): XeniaAction[] {\n  let list: JsonValue | undefined;\n  if (Array.isArray(body)) {\n    list = body;\n  } else if (isObject(body) && Array.isArray(body.xeniaActions)) {\n    list = body.xeniaActions;\n  }\n  if (!Array.isArray(list)) return [];\n\n  const actions: XeniaAction[] = [];\n  for (const entry of list) {\n    const action = toAction(entry);\n    if (action) actions.push(action);\n  }\n  return actions;\n}\n","import type { HttpMethod, JsonValue, RetryConfig } from \"./types\";\n\n/**\n * Default Xenia backend base URL, used whenever `baseUrl` is omitted from\n * config. Points at the hosted engine — override only for a self-hosted or\n * non-default environment.\n */\nexport const DEFAULT_BASE_URL = \"https://engine.xeniamartech.com/xenia\";\n\n/** Returns true when running in a browser environment (SSR-safe). */\nexport function isBrowser(): boolean {\n  return typeof window !== \"undefined\" && typeof document !== \"undefined\";\n}\n\n/** Appends query parameters to a URL. Returns the URL unchanged when empty. */\nexport function buildUrl(url: string, queryParams?: Record<string, string>): string {\n  if (!queryParams || Object.keys(queryParams).length === 0) return url;\n  const params = new URLSearchParams(queryParams);\n  const sep = url.includes(\"?\") ? \"&\" : \"?\";\n  return `${url}${sep}${params.toString()}`;\n}\n\n/** Sleep helper used by the retry backoff. */\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** Options for a single request. */\nexport interface RequestOptions {\n  method?: HttpMethod;\n  /** Path appended to `baseUrl` (should start with `/`). */\n  path: string;\n  headers?: Record<string, string>;\n  query?: Record<string, string>;\n  body?: JsonValue;\n  /** Per-request timeout override in ms. */\n  timeout?: number;\n  /** Disable retry for this request (e.g. long-polling webhook). */\n  noRetry?: boolean;\n  /** Per-request retry override. */\n  retry?: RetryConfig;\n  /**\n   * Keep the request alive past page unload (`fetch`'s `keepalive` flag).\n   * Used for best-effort flushes on `pagehide`, where `sendBeacon` can't be\n   * used instead because it doesn't support custom headers (tenant scope).\n   */\n  keepalive?: boolean;\n}\n\n/** Result of a request: the raw Response plus the parsed JSON (or null). */\nexport interface HttpResult {\n  response: Response;\n  data: JsonValue;\n}\n\n/** Error thrown for non-2xx responses (after retries are exhausted). */\nexport class HttpError extends Error {\n  constructor(\n    public readonly status: number,\n    public readonly data: JsonValue,\n    message?: string,\n  ) {\n    super(message ?? `Request failed with status ${status}`);\n    this.name = \"HttpError\";\n  }\n}\n\nexport interface HttpClientOptions {\n  /** Defaults to {@link DEFAULT_BASE_URL} when omitted. */\n  baseUrl?: string;\n  defaultHeaders?: Record<string, string>;\n  timeout?: number;\n  retry?: RetryConfig;\n  debug?: boolean;\n}\n\n/**\n * Minimal fetch wrapper shared by all runtimes.\n *\n * - Injects default headers (tenant scope, content-type).\n * - Applies an `AbortController` timeout.\n * - Retries transient failures (network error, `429`, `5xx`) with exponential\n *   backoff, honoring a `Retry-After` header when present.\n * - Parses JSON, falling back to `null` on empty/invalid bodies.\n */\nexport class HttpClient {\n  private readonly baseUrl: string;\n  private readonly defaultHeaders: Record<string, string>;\n  private readonly timeout: number;\n  private readonly retry: Required<RetryConfig>;\n  private readonly debug: boolean;\n\n  constructor(opts: HttpClientOptions) {\n    this.baseUrl = (opts.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/+$/, \"\");\n    this.defaultHeaders = opts.defaultHeaders ?? {};\n    this.timeout = opts.timeout ?? 8000;\n    this.retry = {\n      attempts: opts.retry?.attempts ?? 2,\n      baseDelayMs: opts.retry?.baseDelayMs ?? 300,\n    };\n    this.debug = opts.debug ?? false;\n  }\n\n  async request(opts: RequestOptions): Promise<HttpResult> {\n    const url = buildUrl(this.baseUrl + opts.path, opts.query);\n    const method = opts.method ?? \"GET\";\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n      ...this.defaultHeaders,\n      ...opts.headers,\n    };\n    const body = opts.body !== undefined ? JSON.stringify(opts.body) : undefined;\n    const timeout = opts.timeout ?? this.timeout;\n    const maxAttempts = opts.noRetry ? 1 : (opts.retry?.attempts ?? this.retry.attempts) + 1;\n    const baseDelay = opts.retry?.baseDelayMs ?? this.retry.baseDelayMs;\n\n    let lastError: unknown;\n    for (let attempt = 0; attempt < maxAttempts; attempt++) {\n      try {\n        const response = await this.fetchWithTimeout(\n          url,\n          { method, headers, body, ...(opts.keepalive ? { keepalive: true } : {}) },\n          timeout,\n        );\n        const data = await this.parseBody(response);\n\n        if (response.ok) {\n          return { response, data };\n        }\n\n        // Retry on 429/5xx if attempts remain; otherwise throw.\n        if (this.isRetryableStatus(response.status) && attempt < maxAttempts - 1) {\n          const wait = this.retryAfterMs(response, baseDelay, attempt);\n          this.log(`retrying ${opts.path} after ${wait}ms (status ${response.status})`);\n          await delay(wait);\n          continue;\n        }\n        throw new HttpError(response.status, data);\n      } catch (err) {\n        lastError = err;\n        // Non-retryable HttpError → rethrow immediately.\n        if (err instanceof HttpError) throw err;\n        // Network/timeout error → retry if attempts remain.\n        if (attempt < maxAttempts - 1) {\n          const wait = baseDelay * 2 ** attempt;\n          this.log(`retrying ${opts.path} after ${wait}ms (network error)`);\n          await delay(wait);\n          continue;\n        }\n      }\n    }\n    throw lastError instanceof Error ? lastError : new Error(\"Request failed\");\n  }\n\n  private async fetchWithTimeout(\n    url: string,\n    init: RequestInit,\n    timeout: number,\n  ): Promise<Response> {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), timeout);\n    try {\n      return await fetch(url, { ...init, signal: controller.signal });\n    } catch (err) {\n      if (err instanceof Error && err.name === \"AbortError\") {\n        throw new Error(`Request timeout after ${timeout}ms`, { cause: err });\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n\n  private async parseBody(response: Response): Promise<JsonValue> {\n    const text = await response.text().catch(() => \"\");\n    if (!text) return null;\n    try {\n      return JSON.parse(text) as JsonValue;\n    } catch {\n      return text;\n    }\n  }\n\n  private isRetryableStatus(status: number): boolean {\n    return status === 429 || (status >= 500 && status <= 599);\n  }\n\n  private retryAfterMs(response: Response, baseDelay: number, attempt: number): number {\n    const header = response.headers.get(\"Retry-After\");\n    if (header) {\n      const seconds = Number(header);\n      if (!Number.isNaN(seconds)) return seconds * 1000;\n    }\n    return baseDelay * 2 ** attempt;\n  }\n\n  private log(msg: string): void {\n    if (this.debug) console.warn(`[xenia] ${msg}`);\n  }\n}\n","import type { XeniaConfig } from \"./types\";\n\ninterface Cached {\n  token: string;\n  /** Epoch ms when the token should be considered stale. */\n  expiresAt: number;\n}\n\n/** JWT `exp` (seconds) if decodable, else undefined. Best-effort, no verify. */\nfunction decodeExp(token: string): number | undefined {\n  try {\n    const payload = token.split(\".\")[1];\n    if (!payload) return undefined;\n    const json = JSON.parse(atob(payload.replace(/-/g, \"+\").replace(/_/g, \"/\")));\n    return typeof json.exp === \"number\" ? json.exp * 1000 : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Resolves the Bearer token `XeniaApi` attaches to every request, caching a\n * short-lived token from `config.getToken` until ~30s before expiry. A static\n * `config.token` is returned as-is. Isomorphic (browser + Node ≥18, both have\n * global `atob`).\n */\nexport class TokenProvider {\n  private readonly config: XeniaConfig;\n  private cached: Cached | null = null;\n  private inflight: Promise<string> | null = null;\n\n  constructor(config: XeniaConfig) {\n    this.config = config;\n  }\n\n  /** Whether a token source is configured at all — lets callers skip resolution entirely. */\n  hasSource(): boolean {\n    return Boolean(this.config.token || this.config.getToken);\n  }\n\n  readonly getToken = async (): Promise<string> => {\n    if (this.config.token && !this.config.getToken) return this.config.token;\n\n    const now = Date.now();\n    if (this.cached && this.cached.expiresAt > now) return this.cached.token;\n    if (this.inflight) return this.inflight;\n\n    if (!this.config.getToken) {\n      throw new Error(\"No token source: set config.token or config.getToken.\");\n    }\n\n    this.inflight = Promise.resolve(this.config.getToken())\n      .then((token) => {\n        const exp = decodeExp(token);\n        // Refresh 30s before real expiry; default 5 min if the token is opaque.\n        const expiresAt = exp ? exp - 30_000 : now + 5 * 60_000;\n        this.cached = { token, expiresAt };\n        return token;\n      })\n      .finally(() => {\n        this.inflight = null;\n      });\n\n    return this.inflight;\n  };\n}\n","import { parseActions } from \"./actions\";\nimport { HttpClient } from \"./http-client\";\nimport { TokenProvider } from \"./token-provider\";\nimport type {\n  AnalyticsIngestResponse,\n  ConsentState,\n  IdentifyRequest,\n  IdentifyResponse,\n  JsonObject,\n  JsonValue,\n  ResolveBatchItem,\n  ResolveBatchResult,\n  ResolveOptions,\n  ResolveResult,\n  WebhookResponse,\n  XeniaConfig,\n  XeniaEvent,\n} from \"./types\";\n\n/** Drop `undefined` values so the JSON body stays clean. */\nexport function compact(obj: Record<string, JsonValue | undefined>): JsonObject {\n  const out: JsonObject = {};\n  for (const [k, v] of Object.entries(obj)) {\n    if (v !== undefined) out[k] = v;\n  }\n  return out;\n}\n\n/**\n * Low-level, isomorphic Xenia API client. Wraps the raw endpoints; identity,\n * UTM capture, and action rendering are layered on top by the client runtime.\n * All paths are relative to `baseUrl`, which defaults to the hosted engine\n * (`https://engine.xeniamartech.com/xenia`) when omitted from config.\n */\nexport class XeniaApi {\n  private readonly http: HttpClient;\n  private readonly tenantId: string;\n  private readonly environmentKey: string;\n  private readonly tokenProvider: TokenProvider;\n\n  constructor(config: XeniaConfig) {\n    this.tenantId = config.tenantId;\n    this.environmentKey = config.environmentKey;\n    this.tokenProvider = new TokenProvider(config);\n    this.http = new HttpClient({\n      baseUrl: config.baseUrl,\n      defaultHeaders: config.headers,\n      timeout: config.timeout,\n      retry: config.retry,\n      debug: config.debug,\n    });\n  }\n\n  /** Tenant-scope headers required by header-scoped endpoints. */\n  private tenantHeaders(): Record<string, string> {\n    return {\n      \"X-Tenant-Id\": this.tenantId,\n      \"X-Environment\": this.environmentKey,\n    };\n  }\n\n  /**\n   * Tenant headers plus a resolved `Authorization: Bearer` header when\n   * `config.token`/`config.getToken` is set — e.g. required by a webhook\n   * trigger node configured with its own auth token. No-op (tenant headers\n   * only) when no token source is configured, so this is safe to call\n   * unconditionally on every request.\n   */\n  private async authHeaders(): Promise<Record<string, string>> {\n    const headers = this.tenantHeaders();\n    if (!this.tokenProvider.hasSource()) return headers;\n    const token = await this.tokenProvider.getToken();\n    if (token) headers.Authorization = `Bearer ${token}`;\n    return headers;\n  }\n\n  /**\n   * Webhook request/response — `GET|POST /flow?id={triggerId}`. Held open by the\n   * backend until a `webhook-response` node resolves. Returns the normalized\n   * response, including any `xeniaActions` parsed from the body.\n   *\n   * Not retried by default: the backend long-polls this call, so a retry would\n   * duplicate the journey run.\n   */\n  async webhook(\n    triggerId: string,\n    data?: JsonValue,\n    method: \"GET\" | \"POST\" = \"POST\",\n  ): Promise<WebhookResponse> {\n    const { response, data: rawBody } = await this.http.request({\n      method,\n      path: \"/flow\",\n      query: { id: triggerId },\n      headers: await this.authHeaders(),\n      body: method === \"POST\" ? (data ?? {}) : undefined,\n      noRetry: true,\n    });\n    return {\n      status: response.status,\n      body: rawBody,\n      actions: parseActions(rawBody),\n      receivedAt: Date.now(),\n    };\n  }\n\n  /**\n   * Unified event batch (max 100/request per the backend) — `POST /api/events/v1`.\n   * Records analytics for every event and matches/advances a journey for any\n   * event with `trigger: true`. Replaces the old `sendEvent()` (journey trigger)\n   * and `sendAnalytics()` (CDP) calls.\n   */\n  async sendEvents(\n    events: XeniaEvent[],\n    opts?: { keepalive?: boolean },\n  ): Promise<AnalyticsIngestResponse> {\n    const { data } = await this.http.request({\n      method: \"POST\",\n      path: \"/api/events/v1\",\n      headers: await this.authHeaders(),\n      body: { events } as unknown as JsonObject,\n      keepalive: opts?.keepalive,\n    });\n    return data as unknown as AnalyticsIngestResponse;\n  }\n\n  /** Bind visitor→user — `POST /api/events/v1/identify`. */\n  async identify(body: IdentifyRequest): Promise<IdentifyResponse> {\n    const { data } = await this.http.request({\n      method: \"POST\",\n      path: \"/api/events/v1/identify\",\n      headers: await this.authHeaders(),\n      body: body as unknown as JsonObject,\n    });\n    return data as unknown as IdentifyResponse;\n  }\n\n  /**\n   * Update consent — `POST /api/events/v1/consent`.\n   *\n   * The three scope flags are required (non-null) by the backend, so an omitted\n   * one is sent as an explicit `false` rather than left out: a partial body like\n   * `consent({ analytics: true })` — the shape most callers actually write — is\n   * otherwise rejected with a 400 and the consent record is never stored.\n   */\n  async consent(xeniaVisitorId: string, consent: ConsentState): Promise<JsonValue> {\n    const { data } = await this.http.request({\n      method: \"POST\",\n      path: \"/api/events/v1/consent\",\n      headers: await this.authHeaders(),\n      body: compact({\n        xeniaVisitorId,\n        analytics: consent.analytics === true,\n        marketing: consent.marketing === true,\n        personalization: consent.personalization === true,\n        consentSource: consent.consentSource,\n        consentVersion: consent.consentVersion,\n      }),\n    });\n    return data;\n  }\n\n  /**\n   * Resolve in-entry content personalization for one content key —\n   * `POST /api/personalization/resolve?merge=<bool>`. Requires the SDK Bearer\n   * token (same credential as events; resolve is auth-required). `merge=true`\n   * returns server-spliced `content`; otherwise splice `swaps` client-side.\n   */\n  async resolve(contentKey: string, opts: ResolveOptions = {}): Promise<ResolveResult> {\n    const { data } = await this.http.request({\n      method: \"POST\",\n      path: \"/api/personalization/resolve\",\n      query: opts.merge !== undefined ? { merge: String(opts.merge) } : undefined,\n      headers: await this.authHeaders(),\n      body: compact({\n        contentKey,\n        data: opts.data as JsonValue,\n        locale: opts.locale,\n      }),\n    });\n    return data as unknown as ResolveResult;\n  }\n\n  /**\n   * Resolve several content keys in one round-trip (≤50) —\n   * `POST /api/personalization/resolve-batch?merge=<bool>`. Same auth/merge\n   * semantics as {@link resolve}.\n   */\n  async resolveBatch(\n    items: ResolveBatchItem[],\n    opts: ResolveOptions = {},\n  ): Promise<ResolveBatchResult[]> {\n    const { data } = await this.http.request({\n      method: \"POST\",\n      path: \"/api/personalization/resolve-batch\",\n      query: opts.merge !== undefined ? { merge: String(opts.merge) } : undefined,\n      headers: await this.authHeaders(),\n      body: compact({\n        items: items as unknown as JsonValue,\n        data: opts.data as JsonValue,\n        locale: opts.locale,\n      }),\n    });\n    return data as unknown as ResolveBatchResult[];\n  }\n}\n","/** Crockford base32 alphabet (no I/L/O/U, avoids visual ambiguity) — used by ULID. */\nconst ENCODING = \"0123456789ABCDEFGHJKMNPQRSTVWXYZ\";\n\nfunction randomBytes(length: number): Uint8Array {\n  const bytes = new Uint8Array(length);\n  if (typeof crypto !== \"undefined\" && crypto.getRandomValues) {\n    crypto.getRandomValues(bytes);\n  } else {\n    for (let i = 0; i < length; i++) bytes[i] = Math.floor(Math.random() * 256);\n  }\n  return bytes;\n}\n\n/**\n * Generate a ULID (Universally Unique Lexicographically Sortable Identifier):\n * a 48-bit timestamp (10 Crockford-base32 chars) + 80 bits of randomness (16\n * chars), 26 chars total — matches the backend's `eventId` field (`≤26`\n * chars). No dependency; implemented inline to keep the SDK lean.\n */\nexport function generateUlid(time: number = Date.now()): string {\n  let timePart = \"\";\n  let t = time;\n  for (let i = 9; i >= 0; i--) {\n    timePart = ENCODING[t % 32] + timePart;\n    t = Math.floor(t / 32);\n  }\n\n  const random = randomBytes(16);\n  let randomPart = \"\";\n  for (let i = 0; i < 16; i++) {\n    randomPart += ENCODING[random[i] % 32];\n  }\n\n  return timePart + randomPart;\n}\n\n/** Backend cap on `eventId` (`@Size(max = 26)`), which a ULID exactly fills. */\nexport const MAX_EVENT_ID_LENGTH = 26;\n\n/**\n * Coerce a caller-supplied dedup key into something the backend will accept.\n *\n * `eventId` is capped at 26 characters server-side, and an over-length value\n * rejects the ENTIRE batch it rides in — not just its own event. That is easy to\n * hit: `\"ord-\" + <uuid>` is 40. Rather than drop the caller's idempotency key or\n * let the batch 400, fold anything longer into a deterministic 26-char digest.\n * Deterministic is the point — the same order id always yields the same event id,\n * so re-firing it still de-dupes to one conversion, which is what the key is for.\n *\n * Truncation is deliberately not used: `\"ord-<uuid>\"` values share a long common\n * prefix, so cutting to 26 chars can map two different orders onto one id.\n */\nexport function toEventId(raw: string): string {\n  if (raw.length <= MAX_EVENT_ID_LENGTH) return raw;\n\n  // Two independently-seeded FNV-1a passes → 128 bits, encoded Crockford base32.\n  let out = \"\";\n  for (const seed of [0x811c9dc5, 0x01000193]) {\n    let hash = seed >>> 0;\n    for (let i = 0; i < raw.length; i++) {\n      hash ^= raw.charCodeAt(i);\n      hash = Math.imul(hash, 0x01000193) >>> 0;\n      out += ENCODING[hash % 32];\n    }\n  }\n  // Fold the accumulated stream down to exactly the cap, order-dependently.\n  let digest = \"\";\n  for (let i = 0; i < MAX_EVENT_ID_LENGTH; i++) {\n    let acc = i + 1;\n    for (let j = i; j < out.length; j += MAX_EVENT_ID_LENGTH) {\n      acc = (acc * 31 + ENCODING.indexOf(out[j])) >>> 0;\n    }\n    digest += ENCODING[acc % 32];\n  }\n  return digest;\n}\n","/**\n * Cookie names shared by the browser and server halves of the SDK.\n *\n * The visitor cookie is the one channel where two runtimes must agree on a literal string: the\n * browser writes it, a same-origin server reads it back, and that match is what lets a server-side\n * conversion attribute to a browser-entered journey. `config.prefix` namespaces it — so two Xenia\n * apps on one domain keep separate visitors — which means **both halves must derive the name the\n * same way**. Deriving it on one side and hardcoding it on the other silently breaks the link for\n * anyone using a custom prefix: the server just finds no cookie and falls back to no visitor.\n *\n * Always build the name with these helpers rather than interpolating it by hand.\n */\n\n/** Default storage/cookie prefix, matching `XeniaConfig.prefix`. */\nexport const DEFAULT_PREFIX = \"xenia\";\n\n/** Name of the first-party cookie carrying the SDK-owned visitor id, for a given prefix. */\nexport function visitorCookieName(prefix: string = DEFAULT_PREFIX): string {\n  return `${prefix || DEFAULT_PREFIX}_vid`;\n}\n\n/** Name of the first-party cookie carrying consent scopes, for a given prefix. */\nexport function consentCookieName(prefix: string = DEFAULT_PREFIX): string {\n  return `${prefix || DEFAULT_PREFIX}_consent`;\n}\n\n/**\n * The visitor cookie name for the DEFAULT prefix (`\"xenia_vid\"`).\n *\n * Correct for the common case, and kept so existing code (e.g. reading the cookie straight out of a\n * framework's cookie jar) keeps working. If you set `config.prefix`, use {@link visitorCookieName}\n * instead — this constant will not match what the browser wrote.\n */\nexport const VISITOR_COOKIE = visitorCookieName();\n\n/**\n * The consent cookie name for the DEFAULT prefix (`\"xenia_consent\"`). Same custom-prefix caveat as\n * {@link VISITOR_COOKIE}.\n */\nexport const CONSENT_COOKIE = consentCookieName();\n","import type { JsonValue } from \"./types\";\n\n/**\n * A single content swap, as emitted in a webhook-response body's\n * `xeniaContentSwaps` array (the multi-slot personalization analogue of\n * `xeniaActions`). `identifier` is `\"<slotKey>\"` (whole-slot replace) or\n * `\"<slotKey>.<dotted.path>\"` addressing a node inside that slot's JSON\n * (object keys or array indices).\n *\n * NOTE: this field name/shape is a proposed contract, not yet emitted by any\n * journey node — confirm with the Journey Orchestrator (FE/BE) team before\n * relying on it in production.\n */\nexport interface ContentSwap {\n  identifier: string;\n  replacement: JsonValue;\n  /** `\"replace\"` (default) swaps the whole matched node; `\"merge\"` shallow-merges when both sides are objects. */\n  mode?: \"replace\" | \"merge\";\n}\n\nfunction isPlainObject(v: JsonValue): v is { [key: string]: JsonValue } {\n  return v !== null && typeof v === \"object\" && !Array.isArray(v);\n}\n\nfunction cloneJson<T extends JsonValue>(value: T): T {\n  return value === null || typeof value !== \"object\" ? value : (JSON.parse(JSON.stringify(value)) as T);\n}\n\nfunction setAtPath(node: JsonValue, path: string[], value: JsonValue, mode: \"replace\" | \"merge\"): JsonValue {\n  if (path.length === 0) {\n    if (mode === \"merge\" && isPlainObject(node) && isPlainObject(value)) {\n      return { ...node, ...value };\n    }\n    return value;\n  }\n\n  const [key, ...rest] = path;\n  if (Array.isArray(node)) {\n    const index = Number(key);\n    if (!Number.isInteger(index) || index < 0 || index >= node.length) return node;\n    const next = node.slice();\n    next[index] = setAtPath(next[index], rest, value, mode);\n    return next;\n  }\n  if (isPlainObject(node)) {\n    if (!(key in node)) return node;\n    return { ...node, [key]: setAtPath(node[key], rest, value, mode) };\n  }\n  return node;\n}\n\n/**\n * Splice `swaps` into a base map of named content slots, recursively at any\n * nesting depth. Defensive by design (mirrors the PHP SDK's personalization\n * client): a swap whose `identifier` doesn't resolve to an existing slot/path\n * is silently ignored rather than thrown — this never fails, it degrades to\n * the base slot value. Slots are deep-cloned; inputs are never mutated.\n */\nexport function spliceSlots(\n  slots: Record<string, JsonValue>,\n  swaps: ContentSwap[] | undefined,\n): Record<string, JsonValue> {\n  const result: Record<string, JsonValue> = {};\n  for (const [key, value] of Object.entries(slots)) {\n    result[key] = cloneJson(value);\n  }\n  if (!swaps) return result;\n\n  for (const swap of swaps) {\n    const [slotKey, ...pathParts] = swap.identifier.split(\".\");\n    if (!(slotKey in result)) continue;\n    result[slotKey] = setAtPath(result[slotKey], pathParts, swap.replacement, swap.mode ?? \"replace\");\n  }\n  return result;\n}\n\n/** Extract `xeniaContentSwaps` from a webhook-response body, if present and well-formed. */\nexport function extractContentSwaps(body: JsonValue): ContentSwap[] | undefined {\n  if (!isPlainObject(body)) return undefined;\n  const swaps = body.xeniaContentSwaps;\n  return Array.isArray(swaps) ? (swaps as unknown as ContentSwap[]) : undefined;\n}\n","import type { EventContext } from \"./types\";\n\n/**\n * Derive the SDK-provided page/campaign fields from a URL — the server-side counterpart to the\n * browser client's `Identity.collectContext()`, which reads the same fields off `window.location`.\n *\n * Exists because a server runtime has no ambient `window`: a Node client is constructed per request,\n * so the one thing it needs handed over is the URL being served. Everything a journey rule can\n * reference — `path`, `query.<name>`, `url`, `referrer`, `utmSource`/`utmMedium`/`utmCampaign`/\n * `utmContent`/`utmId` — is derived here rather than by each app, so a server-rendered page gets the\n * same field set a browser page does without hand-rolling UTM parsing at every call site.\n *\n * Field names and semantics deliberately mirror `collectContext()` exactly: `query` is the flattened\n * search params, UTMs come from the standard `utm_*` params, and absent values are omitted rather\n * than set to `\"\"` (a blank string is a value a condition could accidentally match).\n *\n * @param url Absolute URL of the request being served (e.g. `https://shop.example/product/x?ref=a`).\n *            A relative or unparseable value yields an empty context rather than throwing.\n * @param referrer Optional referring URL, typically the request's `Referer` header.\n */\nexport function contextFromUrl(url: string | null | undefined, referrer?: string | null): EventContext {\n  const ctx: EventContext = {};\n  if (referrer) ctx.referrer = referrer;\n  if (!url) return ctx;\n\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    return ctx; // not an absolute URL — nothing safely derivable\n  }\n\n  ctx.url = parsed.href;\n  ctx.path = parsed.pathname;\n  ctx.query = Object.fromEntries(parsed.searchParams);\n\n  const utm = (name: string) => parsed.searchParams.get(name) || undefined;\n  const utmSource = utm(\"utm_source\");\n  const utmMedium = utm(\"utm_medium\");\n  const utmCampaign = utm(\"utm_campaign\");\n  const utmContent = utm(\"utm_content\");\n  const utmId = utm(\"utm_id\");\n  if (utmSource) ctx.utmSource = utmSource;\n  if (utmMedium) ctx.utmMedium = utmMedium;\n  if (utmCampaign) ctx.utmCampaign = utmCampaign;\n  if (utmContent) ctx.utmContent = utmContent;\n  if (utmId) ctx.utmId = utmId;\n\n  return ctx;\n}\n","import type { WebhookResponse } from \"./types\";\n\n/**\n * Persists webhook responses the SDK receives, keyed by an arbitrary string\n * (typically the eventId, triggerId, or journeyId). Lets the app read back the\n * last server response for a given interaction without re-firing it.\n */\nexport interface ResponseStore {\n  set(key: string, value: WebhookResponse): void;\n  get(key: string): WebhookResponse | undefined;\n  keys(): string[];\n  clear(): void;\n}\n\n/** In-memory store. Default; lost on reload. */\nexport class MemoryResponseStore implements ResponseStore {\n  private readonly map = new Map<string, WebhookResponse>();\n\n  set(key: string, value: WebhookResponse): void {\n    this.map.set(key, value);\n  }\n  get(key: string): WebhookResponse | undefined {\n    return this.map.get(key);\n  }\n  keys(): string[] {\n    return [...this.map.keys()];\n  }\n  clear(): void {\n    this.map.clear();\n  }\n}\n\n/**\n * localStorage-backed store — survives reloads. Falls back to memory semantics\n * (silent no-op reads/writes) when localStorage is unavailable or throws.\n */\nexport class LocalStorageResponseStore implements ResponseStore {\n  private readonly nsKey: string;\n\n  constructor(prefix = \"xenia\") {\n    this.nsKey = `${prefix}_responses`;\n  }\n\n  private read(): Record<string, WebhookResponse> {\n    try {\n      const raw = localStorage.getItem(this.nsKey);\n      return raw ? (JSON.parse(raw) as Record<string, WebhookResponse>) : {};\n    } catch {\n      return {};\n    }\n  }\n\n  private write(data: Record<string, WebhookResponse>): void {\n    try {\n      localStorage.setItem(this.nsKey, JSON.stringify(data));\n    } catch {\n      /* storage full / unavailable — ignore */\n    }\n  }\n\n  set(key: string, value: WebhookResponse): void {\n    const data = this.read();\n    data[key] = value;\n    this.write(data);\n  }\n  get(key: string): WebhookResponse | undefined {\n    return this.read()[key];\n  }\n  keys(): string[] {\n    return Object.keys(this.read());\n  }\n  clear(): void {\n    try {\n      localStorage.removeItem(this.nsKey);\n    } catch {\n      /* ignore */\n    }\n  }\n}\n"]}

package/dist/{chunk-3KYKKIIG.cjs → chunk-UOW3GK4I.cjs}

@@ -518,6 +518,34 @@ function extractContentSwaps(body) {
   return Array.isArray(swaps) ? swaps : void 0;
 }
 
+// src/core/request-context.ts
+function contextFromUrl(url, referrer) {
+  const ctx = {};
+  if (referrer) ctx.referrer = referrer;
+  if (!url) return ctx;
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return ctx;
+  }
+  ctx.url = parsed.href;
+  ctx.path = parsed.pathname;
+  ctx.query = Object.fromEntries(parsed.searchParams);
+  const utm = (name) => parsed.searchParams.get(name) || void 0;
+  const utmSource = utm("utm_source");
+  const utmMedium = utm("utm_medium");
+  const utmCampaign = utm("utm_campaign");
+  const utmContent = utm("utm_content");
+  const utmId = utm("utm_id");
+  if (utmSource) ctx.utmSource = utmSource;
+  if (utmMedium) ctx.utmMedium = utmMedium;
+  if (utmCampaign) ctx.utmCampaign = utmCampaign;
+  if (utmContent) ctx.utmContent = utmContent;
+  if (utmId) ctx.utmId = utmId;
+  return ctx;
+}
+
 // src/core/response-store.ts
 var MemoryResponseStore = class {
   map = /* @__PURE__ */ new Map();
@@ -582,7 +610,9 @@ exports.MemoryResponseStore = MemoryResponseStore;
 exports.VISITOR_COOKIE = VISITOR_COOKIE;
 exports.XeniaApi = XeniaApi;
 exports.buildUrl = buildUrl;
+exports.compact = compact;
 exports.consentCookieName = consentCookieName;
+exports.contextFromUrl = contextFromUrl;
 exports.extractContentSwaps = extractContentSwaps;
 exports.generateUlid = generateUlid;
 exports.isBrowser = isBrowser;
@@ -590,5 +620,5 @@ exports.parseActions = parseActions;
 exports.spliceSlots = spliceSlots;
 exports.toEventId = toEventId;
 exports.visitorCookieName = visitorCookieName;
-//# sourceMappingURL=chunk-3KYKKIIG.cjs.map
-//# sourceMappingURL=chunk-3KYKKIIG.cjs.map
+//# sourceMappingURL=chunk-UOW3GK4I.cjs.map
+//# sourceMappingURL=chunk-UOW3GK4I.cjs.map

package/dist/chunk-UOW3GK4I.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/actions.ts","../src/core/http-client.ts","../src/core/token-provider.ts","../src/core/api.ts","../src/core/id.ts","../src/core/cookie-names.ts","../src/core/content-splice.ts","../src/core/request-context.ts","../src/core/response-store.ts"],"names":[],"mappings":";;;AAEA,IAAM,aAAA,uBAAyC,GAAA,CAAsB;AAAA,EACnE,QAAA;AAAA,EACA,OAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,IAAM,iBAAA,uBAA6C,GAAA,CAAqB;AAAA,EACtE,UAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACA,cAAA;AAAA,EACA,KAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,IAAM,SAAA,uBAAqC,GAAA,CAAY;AAAA,EACrD,MAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,YAAA;AAAA,EACA,UAAA;AAAA,EACA,GAAG;AACL,CAAC,CAAA;AAGD,SAAS,SAAS,CAAA,EAA2D;AAC3E,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;AAEA,SAAS,SAAS,CAAA,EAA8C;AAC9D,EAAA,OAAO,OAAO,CAAA,KAAM,QAAA,GAAW,CAAA,GAAI,MAAA;AACrC;AAEA,SAAS,SAAS,CAAA,EAA8C;AAC9D,EAAA,OAAO,OAAO,CAAA,KAAM,QAAA,GAAW,CAAA,GAAI,MAAA;AACrC;AAMA,SAAS,SAAS,GAAA,EAAoC;AACpD,EAAA,IAAI,CAAC,QAAA,CAAS,GAAG,CAAA,EAAG,OAAO,IAAA;AAC3B,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC9B,EAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,UAAU,GAAA,CAAI,IAAI,GAAG,OAAO,IAAA;AAE1C,EAAA,IAAI,SAAS,UAAA,EAAY;AACvB,IAAA,MAAM,GAAA,GAAM,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA;AAC5B,IAAA,OAAO,GAAA,GAAM,EAAE,IAAA,EAAM,GAAA,EAAI,GAAI,IAAA;AAAA,EAC/B;AAEA,EAAA,IAAI,IAAA,KAAS,MAAA,IAAU,IAAA,KAAS,MAAA,EAAQ;AACtC,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AAClC,IAAA,OAAO,MAAA,GAAS,EAAE,IAAA,EAAM,MAAA,EAAO,GAAI,IAAA;AAAA,EACrC;AAEA,EAAA,IAAI,IAAA,KAAS,MAAA,IAAU,IAAA,KAAS,YAAA,EAAc;AAC5C,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AAClC,IAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,IAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA,EAAG,IAAA,EAAM,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA,EAAE;AAAA,EAC5E;AAGA,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA,GACxB;AAAA,IACE,KAAA,EAAO,QAAA,CAAS,GAAA,CAAI,GAAA,CAAI,KAAK,CAAA,IAAK,EAAA;AAAA,IAClC,GAAA,EAAK,QAAA,CAAS,GAAA,CAAI,GAAA,CAAI,GAAG,CAAA;AAAA,IACzB,KAAA,EAAO,QAAA,CAAS,GAAA,CAAI,GAAA,CAAI,KAAK;AAAA,GAC/B,GACA,MAAA;AAEJ,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,MAAA,EAAQ,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AAAA,IAC3B,KAAA,EAAO,QAAA,CAAS,GAAA,CAAI,KAAK,CAAA;AAAA,IACzB,OAAA,EAAS,QAAA,CAAS,GAAA,CAAI,OAAO,CAAA;AAAA,IAC7B,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAA;AAAA,IAC/B,IAAA,EAAM,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAAA,IACvB,GAAA,EAAK,GAAA,IAAO,GAAA,CAAI,KAAA,GAAQ,GAAA,GAAM,MAAA;AAAA,IAC9B,cAAA,EAAgB,QAAA,CAAS,GAAA,CAAI,cAAc,CAAA;AAAA,IAC3C,QAAA,EAAU,iBAAA,CAAkB,GAAA,CAAI,QAAQ;AAAA,GAC1C;AACF;AAEA,SAAS,kBAAkB,CAAA,EAAuD;AAChF,EAAA,MAAM,CAAA,GAAI,SAAS,CAAC,CAAA;AACpB,EAAA,OAAO,CAAA,IAAK,iBAAA,CAAkB,GAAA,CAAI,CAAC,IAAK,CAAA,GAAwB,MAAA;AAClE;AASO,SAAS,aAAa,IAAA,EAAgC;AAC3D,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACvB,IAAA,IAAA,GAAO,IAAA;AAAA,EACT,CAAA,MAAA,IAAW,SAAS,IAAI,CAAA,IAAK,MAAM,OAAA,CAAQ,IAAA,CAAK,YAAY,CAAA,EAAG;AAC7D,IAAA,IAAA,GAAO,IAAA,CAAK,YAAA;AAAA,EACd;AACA,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,SAAU,EAAC;AAElC,EAAA,MAAM,UAAyB,EAAC;AAChC,EAAA,KAAA,MAAW,SAAS,IAAA,EAAM;AACxB,IAAA,MAAM,MAAA,GAAS,SAAS,KAAK,CAAA;AAC7B,IAAA,IAAI,MAAA,EAAQ,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA;AAAA,EACjC;AACA,EAAA,OAAO,OAAA;AACT;;;AC3GO,IAAM,gBAAA,GAAmB,uCAAA;AAGzB,SAAS,SAAA,GAAqB;AACnC,EAAA,OAAO,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,QAAA,KAAa,WAAA;AAC9D;AAGO,SAAS,QAAA,CAAS,KAAa,WAAA,EAA8C;AAClF,EAAA,IAAI,CAAC,eAAe,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,MAAA,KAAW,GAAG,OAAO,GAAA;AAClE,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB,WAAW,CAAA;AAC9C,EAAA,MAAM,GAAA,GAAM,GAAA,CAAI,QAAA,CAAS,GAAG,IAAI,GAAA,GAAM,GAAA;AACtC,EAAA,OAAO,GAAG,GAAG,CAAA,EAAG,GAAG,CAAA,EAAG,MAAA,CAAO,UAAU,CAAA,CAAA;AACzC;AAGA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AA+BO,IAAM,SAAA,GAAN,cAAwB,KAAA,CAAM;AAAA,EACnC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAA,IAAW,CAAA,2BAAA,EAA8B,MAAM,CAAA,CAAE,CAAA;AAJvC,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,WAAA;AAAA,EACd;AAAA,EANkB,MAAA;AAAA,EACA,IAAA;AAMpB;AAoBO,IAAM,aAAN,MAAiB;AAAA,EACL,OAAA;AAAA,EACA,cAAA;AAAA,EACA,OAAA;AAAA,EACA,KAAA;AAAA,EACA,KAAA;AAAA,EAEjB,YAAY,IAAA,EAAyB;AACnC,IAAA,IAAA,CAAK,WAAW,IAAA,CAAK,OAAA,IAAW,gBAAA,EAAkB,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACpE,IAAA,IAAA,CAAK,cAAA,GAAiB,IAAA,CAAK,cAAA,IAAkB,EAAC;AAC9C,IAAA,IAAA,CAAK,OAAA,GAAU,KAAK,OAAA,IAAW,GAAA;AAC/B,IAAA,IAAA,CAAK,KAAA,GAAQ;AAAA,MACX,QAAA,EAAU,IAAA,CAAK,KAAA,EAAO,QAAA,IAAY,CAAA;AAAA,MAClC,WAAA,EAAa,IAAA,CAAK,KAAA,EAAO,WAAA,IAAe;AAAA,KAC1C;AACA,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAK,KAAA,IAAS,KAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,QAAQ,IAAA,EAA2C;AACvD,IAAA,MAAM,MAAM,QAAA,CAAS,IAAA,CAAK,UAAU,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AACzD,IAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,cAAA,EAAgB,kBAAA;AAAA,MAChB,GAAG,IAAA,CAAK,cAAA;AAAA,MACR,GAAG,IAAA,CAAK;AAAA,KACV;AACA,IAAA,MAAM,IAAA,GAAO,KAAK,IAAA,KAAS,MAAA,GAAY,KAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GAAI,MAAA;AACnE,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,IAAW,IAAA,CAAK,OAAA;AACrC,IAAA,MAAM,WAAA,GAAc,KAAK,OAAA,GAAU,CAAA,GAAA,CAAK,KAAK,KAAA,EAAO,QAAA,IAAY,IAAA,CAAK,KAAA,CAAM,QAAA,IAAY,CAAA;AACvF,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,EAAO,WAAA,IAAe,KAAK,KAAA,CAAM,WAAA;AAExD,IAAA,IAAI,SAAA;AACJ,IAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,WAAA,EAAa,OAAA,EAAA,EAAW;AACtD,MAAA,IAAI;AACF,QAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,gBAAA;AAAA,UAC1B,GAAA;AAAA,UACA,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,GAAI,IAAA,CAAK,SAAA,GAAY,EAAE,SAAA,EAAW,IAAA,EAAK,GAAI,EAAC,EAAG;AAAA,UACxE;AAAA,SACF;AACA,QAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAA;AAE1C,QAAA,IAAI,SAAS,EAAA,EAAI;AACf,UAAA,OAAO,EAAE,UAAU,IAAA,EAAK;AAAA,QAC1B;AAGA,QAAA,IAAI,KAAK,iBAAA,CAAkB,QAAA,CAAS,MAAM,CAAA,IAAK,OAAA,GAAU,cAAc,CAAA,EAAG;AACxE,UAAA,MAAM,IAAA,GAAO,IAAA,CAAK,YAAA,CAAa,QAAA,EAAU,WAAW,OAAO,CAAA;AAC3D,UAAA,IAAA,CAAK,GAAA,CAAI,YAAY,IAAA,CAAK,IAAI,UAAU,IAAI,CAAA,WAAA,EAAc,QAAA,CAAS,MAAM,CAAA,CAAA,CAAG,CAAA;AAC5E,UAAA,MAAM,MAAM,IAAI,CAAA;AAChB,UAAA;AAAA,QACF;AACA,QAAA,MAAM,IAAI,SAAA,CAAU,QAAA,CAAS,MAAA,EAAQ,IAAI,CAAA;AAAA,MAC3C,SAAS,GAAA,EAAK;AACZ,QAAA,SAAA,GAAY,GAAA;AAEZ,QAAA,IAAI,GAAA,YAAe,WAAW,MAAM,GAAA;AAEpC,QAAA,IAAI,OAAA,GAAU,cAAc,CAAA,EAAG;AAC7B,UAAA,MAAM,IAAA,GAAO,YAAY,CAAA,IAAK,OAAA;AAC9B,UAAA,IAAA,CAAK,IAAI,CAAA,SAAA,EAAY,IAAA,CAAK,IAAI,CAAA,OAAA,EAAU,IAAI,CAAA,kBAAA,CAAoB,CAAA;AAChE,UAAA,MAAM,MAAM,IAAI,CAAA;AAChB,UAAA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,IAAA,MAAM,SAAA,YAAqB,KAAA,GAAQ,SAAA,GAAY,IAAI,MAAM,gBAAgB,CAAA;AAAA,EAC3E;AAAA,EAEA,MAAc,gBAAA,CACZ,GAAA,EACA,IAAA,EACA,OAAA,EACmB;AACnB,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,OAAO,CAAA;AAC1D,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,MAAM,GAAA,EAAK,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AAAA,IAChE,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,GAAA,YAAe,KAAA,IAAS,GAAA,CAAI,IAAA,KAAS,YAAA,EAAc;AACrD,QAAA,MAAM,IAAI,MAAM,CAAA,sBAAA,EAAyB,OAAO,MAAM,EAAE,KAAA,EAAO,KAAK,CAAA;AAAA,MACtE;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAc,UAAU,QAAA,EAAwC;AAC9D,IAAA,MAAM,OAAO,MAAM,QAAA,CAAS,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AACjD,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,IAAA,IAAI;AACF,MAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IACxB,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,kBAAkB,MAAA,EAAyB;AACjD,IAAA,OAAO,MAAA,KAAW,GAAA,IAAQ,MAAA,IAAU,GAAA,IAAO,MAAA,IAAU,GAAA;AAAA,EACvD;AAAA,EAEQ,YAAA,CAAa,QAAA,EAAoB,SAAA,EAAmB,OAAA,EAAyB;AACnF,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA;AACjD,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,MAAM,OAAA,GAAU,OAAO,MAAM,CAAA;AAC7B,MAAA,IAAI,CAAC,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,SAAU,OAAA,GAAU,GAAA;AAAA,IAC/C;AACA,IAAA,OAAO,YAAY,CAAA,IAAK,OAAA;AAAA,EAC1B;AAAA,EAEQ,IAAI,GAAA,EAAmB;AAC7B,IAAA,IAAI,KAAK,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,CAAA,QAAA,EAAW,GAAG,CAAA,CAAE,CAAA;AAAA,EAC/C;AACF;;;AC9LA,SAAS,UAAU,KAAA,EAAmC;AACpD,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AAClC,IAAA,IAAI,CAAC,SAAS,OAAO,KAAA,CAAA;AACrB,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAC,CAAA;AAC3E,IAAA,OAAO,OAAO,IAAA,CAAK,GAAA,KAAQ,QAAA,GAAW,IAAA,CAAK,MAAM,GAAA,GAAO,KAAA,CAAA;AAAA,EAC1D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAQO,IAAM,gBAAN,MAAoB;AAAA,EACR,MAAA;AAAA,EACT,MAAA,GAAwB,IAAA;AAAA,EACxB,QAAA,GAAmC,IAAA;AAAA,EAE3C,YAAY,MAAA,EAAqB;AAC/B,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA,EAGA,SAAA,GAAqB;AACnB,IAAA,OAAO,QAAQ,IAAA,CAAK,MAAA,CAAO,KAAA,IAAS,IAAA,CAAK,OAAO,QAAQ,CAAA;AAAA,EAC1D;AAAA,EAES,WAAW,YAA6B;AAC/C,IAAA,IAAI,IAAA,CAAK,OAAO,KAAA,IAAS,CAAC,KAAK,MAAA,CAAO,QAAA,EAAU,OAAO,IAAA,CAAK,MAAA,CAAO,KAAA;AAEnE,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,IAAA,CAAK,UAAU,IAAA,CAAK,MAAA,CAAO,YAAY,GAAA,EAAK,OAAO,KAAK,MAAA,CAAO,KAAA;AACnE,IAAA,IAAI,IAAA,CAAK,QAAA,EAAU,OAAO,IAAA,CAAK,QAAA;AAE/B,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU;AACzB,MAAA,MAAM,IAAI,MAAM,uDAAuD,CAAA;AAAA,IACzE;AAEA,IAAA,IAAA,CAAK,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,MAAA,CAAO,UAAU,CAAA,CACnD,IAAA,CAAK,CAAC,KAAA,KAAU;AACf,MAAA,MAAM,GAAA,GAAM,UAAU,KAAK,CAAA;AAE3B,MAAA,MAAM,SAAA,GAAY,GAAA,GAAM,GAAA,GAAM,GAAA,GAAS,MAAM,CAAA,GAAI,GAAA;AACjD,MAAA,IAAA,CAAK,MAAA,GAAS,EAAE,KAAA,EAAO,SAAA,EAAU;AACjC,MAAA,OAAO,KAAA;AAAA,IACT,CAAC,CAAA,CACA,OAAA,CAAQ,MAAM;AACb,MAAA,IAAA,CAAK,QAAA,GAAW,IAAA;AAAA,IAClB,CAAC,CAAA;AAEH,IAAA,OAAO,IAAA,CAAK,QAAA;AAAA,EACd,CAAA;AACF,CAAA;;;AC7CO,SAAS,QAAQ,GAAA,EAAwD;AAC9E,EAAA,MAAM,MAAkB,EAAC;AACzB,EAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AACxC,IAAA,IAAI,CAAA,KAAM,MAAA,EAAW,GAAA,CAAI,CAAC,CAAA,GAAI,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,GAAA;AACT;AAQO,IAAM,WAAN,MAAe;AAAA,EACH,IAAA;AAAA,EACA,QAAA;AAAA,EACA,cAAA;AAAA,EACA,aAAA;AAAA,EAEjB,YAAY,MAAA,EAAqB;AAC/B,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,iBAAiB,MAAA,CAAO,cAAA;AAC7B,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAI,aAAA,CAAc,MAAM,CAAA;AAC7C,IAAA,IAAA,CAAK,IAAA,GAAO,IAAI,UAAA,CAAW;AAAA,MACzB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,gBAAgB,MAAA,CAAO,OAAA;AAAA,MACvB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,OAAO,MAAA,CAAO;AAAA,KACf,CAAA;AAAA,EACH;AAAA;AAAA,EAGQ,aAAA,GAAwC;AAC9C,IAAA,OAAO;AAAA,MACL,eAAe,IAAA,CAAK,QAAA;AAAA,MACpB,iBAAiB,IAAA,CAAK;AAAA,KACxB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAc,WAAA,GAA+C;AAC3D,IAAA,MAAM,OAAA,GAAU,KAAK,aAAA,EAAc;AACnC,IAAA,IAAI,CAAC,IAAA,CAAK,aAAA,CAAc,SAAA,IAAa,OAAO,OAAA;AAC5C,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,aAAA,CAAc,QAAA,EAAS;AAChD,IAAA,IAAI,KAAA,EAAO,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,CAAA,CAAA;AAClD,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,OAAA,CACJ,SAAA,EACA,IAAA,EACA,SAAyB,MAAA,EACC;AAC1B,IAAA,MAAM,EAAE,UAAU,IAAA,EAAM,OAAA,KAAY,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ;AAAA,MAC1D,MAAA;AAAA,MACA,IAAA,EAAM,OAAA;AAAA,MACN,KAAA,EAAO,EAAE,EAAA,EAAI,SAAA,EAAU;AAAA,MACvB,OAAA,EAAS,MAAM,IAAA,CAAK,WAAA,EAAY;AAAA,MAChC,IAAA,EAAM,MAAA,KAAW,MAAA,GAAU,IAAA,IAAQ,EAAC,GAAK,MAAA;AAAA,MACzC,OAAA,EAAS;AAAA,KACV,CAAA;AACD,IAAA,OAAO;AAAA,MACL,QAAQ,QAAA,CAAS,MAAA;AAAA,MACjB,IAAA,EAAM,OAAA;AAAA,MACN,OAAA,EAAS,aAAa,OAAO,CAAA;AAAA,MAC7B,UAAA,EAAY,KAAK,GAAA;AAAI,KACvB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,UAAA,CACJ,MAAA,EACA,IAAA,EACkC;AAClC,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ;AAAA,MACvC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,gBAAA;AAAA,MACN,OAAA,EAAS,MAAM,IAAA,CAAK,WAAA,EAAY;AAAA,MAChC,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,MACf,WAAW,IAAA,EAAM;AAAA,KAClB,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,SAAS,IAAA,EAAkD;AAC/D,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ;AAAA,MACvC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EAAS,MAAM,IAAA,CAAK,WAAA,EAAY;AAAA,MAChC;AAAA,KACD,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,OAAA,CAAQ,cAAA,EAAwB,OAAA,EAA2C;AAC/E,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ;AAAA,MACvC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,wBAAA;AAAA,MACN,OAAA,EAAS,MAAM,IAAA,CAAK,WAAA,EAAY;AAAA,MAChC,MAAM,OAAA,CAAQ;AAAA,QACZ,cAAA;AAAA,QACA,SAAA,EAAW,QAAQ,SAAA,KAAc,IAAA;AAAA,QACjC,SAAA,EAAW,QAAQ,SAAA,KAAc,IAAA;AAAA,QACjC,eAAA,EAAiB,QAAQ,eAAA,KAAoB,IAAA;AAAA,QAC7C,eAAe,OAAA,CAAQ,aAAA;AAAA,QACvB,gBAAgB,OAAA,CAAQ;AAAA,OACzB;AAAA,KACF,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,OAAA,CAAQ,UAAA,EAAoB,IAAA,GAAuB,EAAC,EAA2B;AACnF,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ;AAAA,MACvC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,8BAAA;AAAA,MACN,KAAA,EAAO,IAAA,CAAK,KAAA,KAAU,MAAA,GAAY,EAAE,OAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,EAAE,GAAI,MAAA;AAAA,MAClE,OAAA,EAAS,MAAM,IAAA,CAAK,WAAA,EAAY;AAAA,MAChC,MAAM,OAAA,CAAQ;AAAA,QACZ,UAAA;AAAA,QACA,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,QAAQ,IAAA,CAAK;AAAA,OACd;AAAA,KACF,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAA,CACJ,KAAA,EACA,IAAA,GAAuB,EAAC,EACO;AAC/B,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ;AAAA,MACvC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,oCAAA;AAAA,MACN,KAAA,EAAO,IAAA,CAAK,KAAA,KAAU,MAAA,GAAY,EAAE,OAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,EAAE,GAAI,MAAA;AAAA,MAClE,OAAA,EAAS,MAAM,IAAA,CAAK,WAAA,EAAY;AAAA,MAChC,MAAM,OAAA,CAAQ;AAAA,QACZ,KAAA;AAAA,QACA,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,QAAQ,IAAA,CAAK;AAAA,OACd;AAAA,KACF,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;;AC3MA,IAAM,QAAA,GAAW,kCAAA;AAEjB,SAAS,YAAY,MAAA,EAA4B;AAC/C,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,MAAM,CAAA;AACnC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,eAAA,EAAiB;AAC3D,IAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAAA,EAC9B,CAAA,MAAO;AACL,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,KAAA,CAAM,CAAC,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,EAC5E;AACA,EAAA,OAAO,KAAA;AACT;AAQO,SAAS,YAAA,CAAa,IAAA,GAAe,IAAA,CAAK,GAAA,EAAI,EAAW;AAC9D,EAAA,IAAI,QAAA,GAAW,EAAA;AACf,EAAA,IAAI,CAAA,GAAI,IAAA;AACR,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,IAAK,CAAA,EAAG,CAAA,EAAA,EAAK;AAC3B,IAAA,QAAA,GAAW,QAAA,CAAS,CAAA,GAAI,EAAE,CAAA,GAAI,QAAA;AAC9B,IAAA,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,CAAA,GAAI,EAAE,CAAA;AAAA,EACvB;AAEA,EAAA,MAAM,MAAA,GAAS,YAAY,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,GAAa,EAAA;AACjB,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,EAAA,EAAI,CAAA,EAAA,EAAK;AAC3B,IAAA,UAAA,IAAc,QAAA,CAAS,MAAA,CAAO,CAAC,CAAA,GAAI,EAAE,CAAA;AAAA,EACvC;AAEA,EAAA,OAAO,QAAA,GAAW,UAAA;AACpB;AAGO,IAAM,mBAAA,GAAsB;AAe5B,SAAS,UAAU,GAAA,EAAqB;AAC7C,EAAA,IAAI,GAAA,CAAI,MAAA,IAAU,mBAAA,EAAqB,OAAO,GAAA;AAG9C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,IAAA,IAAQ,CAAC,UAAA,EAAY,QAAU,CAAA,EAAG;AAC3C,IAAA,IAAI,OAAO,IAAA,KAAS,CAAA;AACpB,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,QAAQ,CAAA,EAAA,EAAK;AACnC,MAAA,IAAA,IAAQ,GAAA,CAAI,WAAW,CAAC,CAAA;AACxB,MAAA,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,QAAU,CAAA,KAAM,CAAA;AACvC,MAAA,GAAA,IAAO,QAAA,CAAS,OAAO,EAAE,CAAA;AAAA,IAC3B;AAAA,EACF;AAEA,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,mBAAA,EAAqB,CAAA,EAAA,EAAK;AAC5C,IAAA,IAAI,MAAM,CAAA,GAAI,CAAA;AACd,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,mBAAA,EAAqB;AACxD,MAAA,GAAA,GAAO,MAAM,EAAA,GAAK,QAAA,CAAS,QAAQ,GAAA,CAAI,CAAC,CAAC,CAAA,KAAO,CAAA;AAAA,IAClD;AACA,IAAA,MAAA,IAAU,QAAA,CAAS,MAAM,EAAE,CAAA;AAAA,EAC7B;AACA,EAAA,OAAO,MAAA;AACT;;;AC7DO,IAAM,cAAA,GAAiB;AAGvB,SAAS,iBAAA,CAAkB,SAAiB,cAAA,EAAwB;AACzE,EAAA,OAAO,CAAA,EAAG,UAAU,cAAc,CAAA,IAAA,CAAA;AACpC;AAGO,SAAS,iBAAA,CAAkB,SAAiB,cAAA,EAAwB;AACzE,EAAA,OAAO,CAAA,EAAG,UAAU,cAAc,CAAA,QAAA,CAAA;AACpC;AASO,IAAM,iBAAiB,iBAAA;AAMvB,IAAM,iBAAiB,iBAAA;;;ACnB9B,SAAS,cAAc,CAAA,EAAiD;AACtE,EAAA,OAAO,CAAA,KAAM,QAAQ,OAAO,CAAA,KAAM,YAAY,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;AAEA,SAAS,UAA+B,KAAA,EAAa;AACnD,EAAA,OAAO,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAS,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA;AAChG;AAEA,SAAS,SAAA,CAAU,IAAA,EAAiB,IAAA,EAAgB,KAAA,EAAkB,IAAA,EAAsC;AAC1G,EAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,IAAA,IAAI,SAAS,OAAA,IAAW,aAAA,CAAc,IAAI,CAAA,IAAK,aAAA,CAAc,KAAK,CAAA,EAAG;AACnE,MAAA,OAAO,EAAE,GAAG,IAAA,EAAM,GAAG,KAAA,EAAM;AAAA,IAC7B;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,CAAC,GAAA,EAAK,GAAG,IAAI,CAAA,GAAI,IAAA;AACvB,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACvB,IAAA,MAAM,KAAA,GAAQ,OAAO,GAAG,CAAA;AACxB,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,KAAK,CAAA,IAAK,QAAQ,CAAA,IAAK,KAAA,IAAS,IAAA,CAAK,MAAA,EAAQ,OAAO,IAAA;AAC1E,IAAA,MAAM,IAAA,GAAO,KAAK,KAAA,EAAM;AACxB,IAAA,IAAA,CAAK,KAAK,IAAI,SAAA,CAAU,IAAA,CAAK,KAAK,CAAA,EAAG,IAAA,EAAM,OAAO,IAAI,CAAA;AACtD,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACvB,IAAA,IAAI,EAAE,GAAA,IAAO,IAAA,CAAA,EAAO,OAAO,IAAA;AAC3B,IAAA,OAAO,EAAE,GAAG,IAAA,EAAM,CAAC,GAAG,GAAG,SAAA,CAAU,IAAA,CAAK,GAAG,CAAA,EAAG,IAAA,EAAM,KAAA,EAAO,IAAI,CAAA,EAAE;AAAA,EACnE;AACA,EAAA,OAAO,IAAA;AACT;AASO,SAAS,WAAA,CACd,OACA,KAAA,EAC2B;AAC3B,EAAA,MAAM,SAAoC,EAAC;AAC3C,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAChD,IAAA,MAAA,CAAO,GAAG,CAAA,GAAI,SAAA,CAAU,KAAK,CAAA;AAAA,EAC/B;AACA,EAAA,IAAI,CAAC,OAAO,OAAO,MAAA;AAEnB,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,CAAC,SAAS,GAAG,SAAS,IAAI,IAAA,CAAK,UAAA,CAAW,MAAM,GAAG,CAAA;AACzD,IAAA,IAAI,EAAE,WAAW,MAAA,CAAA,EAAS;AAC1B,IAAA,MAAA,CAAO,OAAO,CAAA,GAAI,SAAA,CAAU,MAAA,CAAO,OAAO,CAAA,EAAG,SAAA,EAAW,IAAA,CAAK,WAAA,EAAa,IAAA,CAAK,IAAA,IAAQ,SAAS,CAAA;AAAA,EAClG;AACA,EAAA,OAAO,MAAA;AACT;AAGO,SAAS,oBAAoB,IAAA,EAA4C;AAC9E,EAAA,IAAI,CAAC,aAAA,CAAc,IAAI,CAAA,EAAG,OAAO,MAAA;AACjC,EAAA,MAAM,QAAQ,IAAA,CAAK,iBAAA;AACnB,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAK,KAAA,GAAqC,MAAA;AACtE;;;AC7DO,SAAS,cAAA,CAAe,KAAgC,QAAA,EAAwC;AACrG,EAAA,MAAM,MAAoB,EAAC;AAC3B,EAAA,IAAI,QAAA,MAAc,QAAA,GAAW,QAAA;AAC7B,EAAA,IAAI,CAAC,KAAK,OAAO,GAAA;AAEjB,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,GAAA;AAAA,EACT;AAEA,EAAA,GAAA,CAAI,MAAM,MAAA,CAAO,IAAA;AACjB,EAAA,GAAA,CAAI,OAAO,MAAA,CAAO,QAAA;AAClB,EAAA,GAAA,CAAI,KAAA,GAAQ,MAAA,CAAO,WAAA,CAAY,MAAA,CAAO,YAAY,CAAA;AAElD,EAAA,MAAM,MAAM,CAAC,IAAA,KAAiB,OAAO,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA,IAAK,MAAA;AAC/D,EAAA,MAAM,SAAA,GAAY,IAAI,YAAY,CAAA;AAClC,EAAA,MAAM,SAAA,GAAY,IAAI,YAAY,CAAA;AAClC,EAAA,MAAM,WAAA,GAAc,IAAI,cAAc,CAAA;AACtC,EAAA,MAAM,UAAA,GAAa,IAAI,aAAa,CAAA;AACpC,EAAA,MAAM,KAAA,GAAQ,IAAI,QAAQ,CAAA;AAC1B,EAAA,IAAI,SAAA,MAAe,SAAA,GAAY,SAAA;AAC/B,EAAA,IAAI,SAAA,MAAe,SAAA,GAAY,SAAA;AAC/B,EAAA,IAAI,WAAA,MAAiB,WAAA,GAAc,WAAA;AACnC,EAAA,IAAI,UAAA,MAAgB,UAAA,GAAa,UAAA;AACjC,EAAA,IAAI,KAAA,MAAW,KAAA,GAAQ,KAAA;AAEvB,EAAA,OAAO,GAAA;AACT;;;AClCO,IAAM,sBAAN,MAAmD;AAAA,EACvC,GAAA,uBAAU,GAAA,EAA6B;AAAA,EAExD,GAAA,CAAI,KAAa,KAAA,EAA8B;AAC7C,IAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,EACzB;AAAA,EACA,IAAI,GAAA,EAA0C;AAC5C,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,GAAG,CAAA;AAAA,EACzB;AAAA,EACA,IAAA,GAAiB;AACf,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA;AAAA,EAC5B;AAAA,EACA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,IAAI,KAAA,EAAM;AAAA,EACjB;AACF;AAMO,IAAM,4BAAN,MAAyD;AAAA,EAC7C,KAAA;AAAA,EAEjB,WAAA,CAAY,SAAS,OAAA,EAAS;AAC5B,IAAA,IAAA,CAAK,KAAA,GAAQ,GAAG,MAAM,CAAA,UAAA,CAAA;AAAA,EACxB;AAAA,EAEQ,IAAA,GAAwC;AAC9C,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,YAAA,CAAa,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA;AAC3C,MAAA,OAAO,GAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,IAAwC,EAAC;AAAA,IACvE,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,EAAC;AAAA,IACV;AAAA,EACF;AAAA,EAEQ,MAAM,IAAA,EAA6C;AACzD,IAAA,IAAI;AACF,MAAA,YAAA,CAAa,QAAQ,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,IACvD,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,GAAA,CAAI,KAAa,KAAA,EAA8B;AAC7C,IAAA,MAAM,IAAA,GAAO,KAAK,IAAA,EAAK;AACvB,IAAA,IAAA,CAAK,GAAG,CAAA,GAAI,KAAA;AACZ,IAAA,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACjB;AAAA,EACA,IAAI,GAAA,EAA0C;AAC5C,IAAA,OAAO,IAAA,CAAK,IAAA,EAAK,CAAE,GAAG,CAAA;AAAA,EACxB;AAAA,EACA,IAAA,GAAiB;AACf,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,CAAA;AAAA,EAChC;AAAA,EACA,KAAA,GAAc;AACZ,IAAA,IAAI;AACF,MAAA,YAAA,CAAa,UAAA,CAAW,KAAK,KAAK,CAAA;AAAA,IACpC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACF","file":"chunk-UOW3GK4I.cjs","sourcesContent":["import type { JsonValue, MessagePlacement, MessagePosition, XeniaAction } from \"./types\";\n\nconst MESSAGE_TYPES: ReadonlySet<string> = new Set<MessagePlacement>([\n  \"banner\",\n  \"popup\",\n  \"modal\",\n  \"inline\",\n]);\n\nconst MESSAGE_POSITIONS: ReadonlySet<string> = new Set<MessagePosition>([\n  \"top-left\",\n  \"top-right\",\n  \"bottom-left\",\n  \"bottom-right\",\n  \"top\",\n  \"bottom\",\n]);\n\nconst ALL_TYPES: ReadonlySet<string> = new Set<string>([\n  \"swap\",\n  \"hide\",\n  \"show\",\n  \"setContent\",\n  \"redirect\",\n  ...MESSAGE_TYPES,\n]);\n\n/** Type guard for a plain JSON object. */\nfunction isObject(v: JsonValue | undefined): v is { [k: string]: JsonValue } {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\nfunction asString(v: JsonValue | undefined): string | undefined {\n  return typeof v === \"string\" ? v : undefined;\n}\n\nfunction asNumber(v: JsonValue | undefined): number | undefined {\n  return typeof v === \"number\" ? v : undefined;\n}\n\n/**\n * Validate and narrow a single raw entry into a {@link XeniaAction}.\n * Returns null for anything malformed so a bad entry can't crash the renderer.\n */\nfunction toAction(raw: JsonValue): XeniaAction | null {\n  if (!isObject(raw)) return null;\n  const type = asString(raw.type);\n  if (!type || !ALL_TYPES.has(type)) return null;\n\n  if (type === \"redirect\") {\n    const url = asString(raw.url);\n    return url ? { type, url } : null;\n  }\n\n  if (type === \"hide\" || type === \"show\") {\n    const target = asString(raw.target);\n    return target ? { type, target } : null;\n  }\n\n  if (type === \"swap\" || type === \"setContent\") {\n    const target = asString(raw.target);\n    if (!target) return null;\n    return { type, target, html: asString(raw.html), text: asString(raw.text) };\n  }\n\n  // Message placement actions (banner/popup/modal/inline).\n  const cta = isObject(raw.cta)\n    ? {\n        label: asString(raw.cta.label) ?? \"\",\n        url: asString(raw.cta.url),\n        event: asString(raw.cta.event),\n      }\n    : undefined;\n\n  return {\n    type: type as MessagePlacement,\n    target: asString(raw.target),\n    title: asString(raw.title),\n    message: asString(raw.message),\n    imageUrl: asString(raw.imageUrl),\n    html: asString(raw.html),\n    cta: cta && cta.label ? cta : undefined,\n    dismissAfterMs: asNumber(raw.dismissAfterMs),\n    position: asMessagePosition(raw.position),\n  };\n}\n\nfunction asMessagePosition(v: JsonValue | undefined): MessagePosition | undefined {\n  const s = asString(v);\n  return s && MESSAGE_POSITIONS.has(s) ? (s as MessagePosition) : undefined;\n}\n\n/**\n * Parse render actions out of a webhook-response body.\n *\n * The convention: marketers return `{ \"xeniaActions\": [ ... ] }` (or a bare\n * array) from the `webhook-response` node. Any body without a recognizable\n * `xeniaActions` array yields an empty list — a safe no-op.\n */\nexport function parseActions(body: JsonValue): XeniaAction[] {\n  let list: JsonValue | undefined;\n  if (Array.isArray(body)) {\n    list = body;\n  } else if (isObject(body) && Array.isArray(body.xeniaActions)) {\n    list = body.xeniaActions;\n  }\n  if (!Array.isArray(list)) return [];\n\n  const actions: XeniaAction[] = [];\n  for (const entry of list) {\n    const action = toAction(entry);\n    if (action) actions.push(action);\n  }\n  return actions;\n}\n","import type { HttpMethod, JsonValue, RetryConfig } from \"./types\";\n\n/**\n * Default Xenia backend base URL, used whenever `baseUrl` is omitted from\n * config. Points at the hosted engine — override only for a self-hosted or\n * non-default environment.\n */\nexport const DEFAULT_BASE_URL = \"https://engine.xeniamartech.com/xenia\";\n\n/** Returns true when running in a browser environment (SSR-safe). */\nexport function isBrowser(): boolean {\n  return typeof window !== \"undefined\" && typeof document !== \"undefined\";\n}\n\n/** Appends query parameters to a URL. Returns the URL unchanged when empty. */\nexport function buildUrl(url: string, queryParams?: Record<string, string>): string {\n  if (!queryParams || Object.keys(queryParams).length === 0) return url;\n  const params = new URLSearchParams(queryParams);\n  const sep = url.includes(\"?\") ? \"&\" : \"?\";\n  return `${url}${sep}${params.toString()}`;\n}\n\n/** Sleep helper used by the retry backoff. */\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** Options for a single request. */\nexport interface RequestOptions {\n  method?: HttpMethod;\n  /** Path appended to `baseUrl` (should start with `/`). */\n  path: string;\n  headers?: Record<string, string>;\n  query?: Record<string, string>;\n  body?: JsonValue;\n  /** Per-request timeout override in ms. */\n  timeout?: number;\n  /** Disable retry for this request (e.g. long-polling webhook). */\n  noRetry?: boolean;\n  /** Per-request retry override. */\n  retry?: RetryConfig;\n  /**\n   * Keep the request alive past page unload (`fetch`'s `keepalive` flag).\n   * Used for best-effort flushes on `pagehide`, where `sendBeacon` can't be\n   * used instead because it doesn't support custom headers (tenant scope).\n   */\n  keepalive?: boolean;\n}\n\n/** Result of a request: the raw Response plus the parsed JSON (or null). */\nexport interface HttpResult {\n  response: Response;\n  data: JsonValue;\n}\n\n/** Error thrown for non-2xx responses (after retries are exhausted). */\nexport class HttpError extends Error {\n  constructor(\n    public readonly status: number,\n    public readonly data: JsonValue,\n    message?: string,\n  ) {\n    super(message ?? `Request failed with status ${status}`);\n    this.name = \"HttpError\";\n  }\n}\n\nexport interface HttpClientOptions {\n  /** Defaults to {@link DEFAULT_BASE_URL} when omitted. */\n  baseUrl?: string;\n  defaultHeaders?: Record<string, string>;\n  timeout?: number;\n  retry?: RetryConfig;\n  debug?: boolean;\n}\n\n/**\n * Minimal fetch wrapper shared by all runtimes.\n *\n * - Injects default headers (tenant scope, content-type).\n * - Applies an `AbortController` timeout.\n * - Retries transient failures (network error, `429`, `5xx`) with exponential\n *   backoff, honoring a `Retry-After` header when present.\n * - Parses JSON, falling back to `null` on empty/invalid bodies.\n */\nexport class HttpClient {\n  private readonly baseUrl: string;\n  private readonly defaultHeaders: Record<string, string>;\n  private readonly timeout: number;\n  private readonly retry: Required<RetryConfig>;\n  private readonly debug: boolean;\n\n  constructor(opts: HttpClientOptions) {\n    this.baseUrl = (opts.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/+$/, \"\");\n    this.defaultHeaders = opts.defaultHeaders ?? {};\n    this.timeout = opts.timeout ?? 8000;\n    this.retry = {\n      attempts: opts.retry?.attempts ?? 2,\n      baseDelayMs: opts.retry?.baseDelayMs ?? 300,\n    };\n    this.debug = opts.debug ?? false;\n  }\n\n  async request(opts: RequestOptions): Promise<HttpResult> {\n    const url = buildUrl(this.baseUrl + opts.path, opts.query);\n    const method = opts.method ?? \"GET\";\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n      ...this.defaultHeaders,\n      ...opts.headers,\n    };\n    const body = opts.body !== undefined ? JSON.stringify(opts.body) : undefined;\n    const timeout = opts.timeout ?? this.timeout;\n    const maxAttempts = opts.noRetry ? 1 : (opts.retry?.attempts ?? this.retry.attempts) + 1;\n    const baseDelay = opts.retry?.baseDelayMs ?? this.retry.baseDelayMs;\n\n    let lastError: unknown;\n    for (let attempt = 0; attempt < maxAttempts; attempt++) {\n      try {\n        const response = await this.fetchWithTimeout(\n          url,\n          { method, headers, body, ...(opts.keepalive ? { keepalive: true } : {}) },\n          timeout,\n        );\n        const data = await this.parseBody(response);\n\n        if (response.ok) {\n          return { response, data };\n        }\n\n        // Retry on 429/5xx if attempts remain; otherwise throw.\n        if (this.isRetryableStatus(response.status) && attempt < maxAttempts - 1) {\n          const wait = this.retryAfterMs(response, baseDelay, attempt);\n          this.log(`retrying ${opts.path} after ${wait}ms (status ${response.status})`);\n          await delay(wait);\n          continue;\n        }\n        throw new HttpError(response.status, data);\n      } catch (err) {\n        lastError = err;\n        // Non-retryable HttpError → rethrow immediately.\n        if (err instanceof HttpError) throw err;\n        // Network/timeout error → retry if attempts remain.\n        if (attempt < maxAttempts - 1) {\n          const wait = baseDelay * 2 ** attempt;\n          this.log(`retrying ${opts.path} after ${wait}ms (network error)`);\n          await delay(wait);\n          continue;\n        }\n      }\n    }\n    throw lastError instanceof Error ? lastError : new Error(\"Request failed\");\n  }\n\n  private async fetchWithTimeout(\n    url: string,\n    init: RequestInit,\n    timeout: number,\n  ): Promise<Response> {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), timeout);\n    try {\n      return await fetch(url, { ...init, signal: controller.signal });\n    } catch (err) {\n      if (err instanceof Error && err.name === \"AbortError\") {\n        throw new Error(`Request timeout after ${timeout}ms`, { cause: err });\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n\n  private async parseBody(response: Response): Promise<JsonValue> {\n    const text = await response.text().catch(() => \"\");\n    if (!text) return null;\n    try {\n      return JSON.parse(text) as JsonValue;\n    } catch {\n      return text;\n    }\n  }\n\n  private isRetryableStatus(status: number): boolean {\n    return status === 429 || (status >= 500 && status <= 599);\n  }\n\n  private retryAfterMs(response: Response, baseDelay: number, attempt: number): number {\n    const header = response.headers.get(\"Retry-After\");\n    if (header) {\n      const seconds = Number(header);\n      if (!Number.isNaN(seconds)) return seconds * 1000;\n    }\n    return baseDelay * 2 ** attempt;\n  }\n\n  private log(msg: string): void {\n    if (this.debug) console.warn(`[xenia] ${msg}`);\n  }\n}\n","import type { XeniaConfig } from \"./types\";\n\ninterface Cached {\n  token: string;\n  /** Epoch ms when the token should be considered stale. */\n  expiresAt: number;\n}\n\n/** JWT `exp` (seconds) if decodable, else undefined. Best-effort, no verify. */\nfunction decodeExp(token: string): number | undefined {\n  try {\n    const payload = token.split(\".\")[1];\n    if (!payload) return undefined;\n    const json = JSON.parse(atob(payload.replace(/-/g, \"+\").replace(/_/g, \"/\")));\n    return typeof json.exp === \"number\" ? json.exp * 1000 : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Resolves the Bearer token `XeniaApi` attaches to every request, caching a\n * short-lived token from `config.getToken` until ~30s before expiry. A static\n * `config.token` is returned as-is. Isomorphic (browser + Node ≥18, both have\n * global `atob`).\n */\nexport class TokenProvider {\n  private readonly config: XeniaConfig;\n  private cached: Cached | null = null;\n  private inflight: Promise<string> | null = null;\n\n  constructor(config: XeniaConfig) {\n    this.config = config;\n  }\n\n  /** Whether a token source is configured at all — lets callers skip resolution entirely. */\n  hasSource(): boolean {\n    return Boolean(this.config.token || this.config.getToken);\n  }\n\n  readonly getToken = async (): Promise<string> => {\n    if (this.config.token && !this.config.getToken) return this.config.token;\n\n    const now = Date.now();\n    if (this.cached && this.cached.expiresAt > now) return this.cached.token;\n    if (this.inflight) return this.inflight;\n\n    if (!this.config.getToken) {\n      throw new Error(\"No token source: set config.token or config.getToken.\");\n    }\n\n    this.inflight = Promise.resolve(this.config.getToken())\n      .then((token) => {\n        const exp = decodeExp(token);\n        // Refresh 30s before real expiry; default 5 min if the token is opaque.\n        const expiresAt = exp ? exp - 30_000 : now + 5 * 60_000;\n        this.cached = { token, expiresAt };\n        return token;\n      })\n      .finally(() => {\n        this.inflight = null;\n      });\n\n    return this.inflight;\n  };\n}\n","import { parseActions } from \"./actions\";\nimport { HttpClient } from \"./http-client\";\nimport { TokenProvider } from \"./token-provider\";\nimport type {\n  AnalyticsIngestResponse,\n  ConsentState,\n  IdentifyRequest,\n  IdentifyResponse,\n  JsonObject,\n  JsonValue,\n  ResolveBatchItem,\n  ResolveBatchResult,\n  ResolveOptions,\n  ResolveResult,\n  WebhookResponse,\n  XeniaConfig,\n  XeniaEvent,\n} from \"./types\";\n\n/** Drop `undefined` values so the JSON body stays clean. */\nexport function compact(obj: Record<string, JsonValue | undefined>): JsonObject {\n  const out: JsonObject = {};\n  for (const [k, v] of Object.entries(obj)) {\n    if (v !== undefined) out[k] = v;\n  }\n  return out;\n}\n\n/**\n * Low-level, isomorphic Xenia API client. Wraps the raw endpoints; identity,\n * UTM capture, and action rendering are layered on top by the client runtime.\n * All paths are relative to `baseUrl`, which defaults to the hosted engine\n * (`https://engine.xeniamartech.com/xenia`) when omitted from config.\n */\nexport class XeniaApi {\n  private readonly http: HttpClient;\n  private readonly tenantId: string;\n  private readonly environmentKey: string;\n  private readonly tokenProvider: TokenProvider;\n\n  constructor(config: XeniaConfig) {\n    this.tenantId = config.tenantId;\n    this.environmentKey = config.environmentKey;\n    this.tokenProvider = new TokenProvider(config);\n    this.http = new HttpClient({\n      baseUrl: config.baseUrl,\n      defaultHeaders: config.headers,\n      timeout: config.timeout,\n      retry: config.retry,\n      debug: config.debug,\n    });\n  }\n\n  /** Tenant-scope headers required by header-scoped endpoints. */\n  private tenantHeaders(): Record<string, string> {\n    return {\n      \"X-Tenant-Id\": this.tenantId,\n      \"X-Environment\": this.environmentKey,\n    };\n  }\n\n  /**\n   * Tenant headers plus a resolved `Authorization: Bearer` header when\n   * `config.token`/`config.getToken` is set — e.g. required by a webhook\n   * trigger node configured with its own auth token. No-op (tenant headers\n   * only) when no token source is configured, so this is safe to call\n   * unconditionally on every request.\n   */\n  private async authHeaders(): Promise<Record<string, string>> {\n    const headers = this.tenantHeaders();\n    if (!this.tokenProvider.hasSource()) return headers;\n    const token = await this.tokenProvider.getToken();\n    if (token) headers.Authorization = `Bearer ${token}`;\n    return headers;\n  }\n\n  /**\n   * Webhook request/response — `GET|POST /flow?id={triggerId}`. Held open by the\n   * backend until a `webhook-response` node resolves. Returns the normalized\n   * response, including any `xeniaActions` parsed from the body.\n   *\n   * Not retried by default: the backend long-polls this call, so a retry would\n   * duplicate the journey run.\n   */\n  async webhook(\n    triggerId: string,\n    data?: JsonValue,\n    method: \"GET\" | \"POST\" = \"POST\",\n  ): Promise<WebhookResponse> {\n    const { response, data: rawBody } = await this.http.request({\n      method,\n      path: \"/flow\",\n      query: { id: triggerId },\n      headers: await this.authHeaders(),\n      body: method === \"POST\" ? (data ?? {}) : undefined,\n      noRetry: true,\n    });\n    return {\n      status: response.status,\n      body: rawBody,\n      actions: parseActions(rawBody),\n      receivedAt: Date.now(),\n    };\n  }\n\n  /**\n   * Unified event batch (max 100/request per the backend) — `POST /api/events/v1`.\n   * Records analytics for every event and matches/advances a journey for any\n   * event with `trigger: true`. Replaces the old `sendEvent()` (journey trigger)\n   * and `sendAnalytics()` (CDP) calls.\n   */\n  async sendEvents(\n    events: XeniaEvent[],\n    opts?: { keepalive?: boolean },\n  ): Promise<AnalyticsIngestResponse> {\n    const { data } = await this.http.request({\n      method: \"POST\",\n      path: \"/api/events/v1\",\n      headers: await this.authHeaders(),\n      body: { events } as unknown as JsonObject,\n      keepalive: opts?.keepalive,\n    });\n    return data as unknown as AnalyticsIngestResponse;\n  }\n\n  /** Bind visitor→user — `POST /api/events/v1/identify`. */\n  async identify(body: IdentifyRequest): Promise<IdentifyResponse> {\n    const { data } = await this.http.request({\n      method: \"POST\",\n      path: \"/api/events/v1/identify\",\n      headers: await this.authHeaders(),\n      body: body as unknown as JsonObject,\n    });\n    return data as unknown as IdentifyResponse;\n  }\n\n  /**\n   * Update consent — `POST /api/events/v1/consent`.\n   *\n   * The three scope flags are required (non-null) by the backend, so an omitted\n   * one is sent as an explicit `false` rather than left out: a partial body like\n   * `consent({ analytics: true })` — the shape most callers actually write — is\n   * otherwise rejected with a 400 and the consent record is never stored.\n   */\n  async consent(xeniaVisitorId: string, consent: ConsentState): Promise<JsonValue> {\n    const { data } = await this.http.request({\n      method: \"POST\",\n      path: \"/api/events/v1/consent\",\n      headers: await this.authHeaders(),\n      body: compact({\n        xeniaVisitorId,\n        analytics: consent.analytics === true,\n        marketing: consent.marketing === true,\n        personalization: consent.personalization === true,\n        consentSource: consent.consentSource,\n        consentVersion: consent.consentVersion,\n      }),\n    });\n    return data;\n  }\n\n  /**\n   * Resolve in-entry content personalization for one content key —\n   * `POST /api/personalization/resolve?merge=<bool>`. Requires the SDK Bearer\n   * token (same credential as events; resolve is auth-required). `merge=true`\n   * returns server-spliced `content`; otherwise splice `swaps` client-side.\n   */\n  async resolve(contentKey: string, opts: ResolveOptions = {}): Promise<ResolveResult> {\n    const { data } = await this.http.request({\n      method: \"POST\",\n      path: \"/api/personalization/resolve\",\n      query: opts.merge !== undefined ? { merge: String(opts.merge) } : undefined,\n      headers: await this.authHeaders(),\n      body: compact({\n        contentKey,\n        data: opts.data as JsonValue,\n        locale: opts.locale,\n      }),\n    });\n    return data as unknown as ResolveResult;\n  }\n\n  /**\n   * Resolve several content keys in one round-trip (≤50) —\n   * `POST /api/personalization/resolve-batch?merge=<bool>`. Same auth/merge\n   * semantics as {@link resolve}.\n   */\n  async resolveBatch(\n    items: ResolveBatchItem[],\n    opts: ResolveOptions = {},\n  ): Promise<ResolveBatchResult[]> {\n    const { data } = await this.http.request({\n      method: \"POST\",\n      path: \"/api/personalization/resolve-batch\",\n      query: opts.merge !== undefined ? { merge: String(opts.merge) } : undefined,\n      headers: await this.authHeaders(),\n      body: compact({\n        items: items as unknown as JsonValue,\n        data: opts.data as JsonValue,\n        locale: opts.locale,\n      }),\n    });\n    return data as unknown as ResolveBatchResult[];\n  }\n}\n","/** Crockford base32 alphabet (no I/L/O/U, avoids visual ambiguity) — used by ULID. */\nconst ENCODING = \"0123456789ABCDEFGHJKMNPQRSTVWXYZ\";\n\nfunction randomBytes(length: number): Uint8Array {\n  const bytes = new Uint8Array(length);\n  if (typeof crypto !== \"undefined\" && crypto.getRandomValues) {\n    crypto.getRandomValues(bytes);\n  } else {\n    for (let i = 0; i < length; i++) bytes[i] = Math.floor(Math.random() * 256);\n  }\n  return bytes;\n}\n\n/**\n * Generate a ULID (Universally Unique Lexicographically Sortable Identifier):\n * a 48-bit timestamp (10 Crockford-base32 chars) + 80 bits of randomness (16\n * chars), 26 chars total — matches the backend's `eventId` field (`≤26`\n * chars). No dependency; implemented inline to keep the SDK lean.\n */\nexport function generateUlid(time: number = Date.now()): string {\n  let timePart = \"\";\n  let t = time;\n  for (let i = 9; i >= 0; i--) {\n    timePart = ENCODING[t % 32] + timePart;\n    t = Math.floor(t / 32);\n  }\n\n  const random = randomBytes(16);\n  let randomPart = \"\";\n  for (let i = 0; i < 16; i++) {\n    randomPart += ENCODING[random[i] % 32];\n  }\n\n  return timePart + randomPart;\n}\n\n/** Backend cap on `eventId` (`@Size(max = 26)`), which a ULID exactly fills. */\nexport const MAX_EVENT_ID_LENGTH = 26;\n\n/**\n * Coerce a caller-supplied dedup key into something the backend will accept.\n *\n * `eventId` is capped at 26 characters server-side, and an over-length value\n * rejects the ENTIRE batch it rides in — not just its own event. That is easy to\n * hit: `\"ord-\" + <uuid>` is 40. Rather than drop the caller's idempotency key or\n * let the batch 400, fold anything longer into a deterministic 26-char digest.\n * Deterministic is the point — the same order id always yields the same event id,\n * so re-firing it still de-dupes to one conversion, which is what the key is for.\n *\n * Truncation is deliberately not used: `\"ord-<uuid>\"` values share a long common\n * prefix, so cutting to 26 chars can map two different orders onto one id.\n */\nexport function toEventId(raw: string): string {\n  if (raw.length <= MAX_EVENT_ID_LENGTH) return raw;\n\n  // Two independently-seeded FNV-1a passes → 128 bits, encoded Crockford base32.\n  let out = \"\";\n  for (const seed of [0x811c9dc5, 0x01000193]) {\n    let hash = seed >>> 0;\n    for (let i = 0; i < raw.length; i++) {\n      hash ^= raw.charCodeAt(i);\n      hash = Math.imul(hash, 0x01000193) >>> 0;\n      out += ENCODING[hash % 32];\n    }\n  }\n  // Fold the accumulated stream down to exactly the cap, order-dependently.\n  let digest = \"\";\n  for (let i = 0; i < MAX_EVENT_ID_LENGTH; i++) {\n    let acc = i + 1;\n    for (let j = i; j < out.length; j += MAX_EVENT_ID_LENGTH) {\n      acc = (acc * 31 + ENCODING.indexOf(out[j])) >>> 0;\n    }\n    digest += ENCODING[acc % 32];\n  }\n  return digest;\n}\n","/**\n * Cookie names shared by the browser and server halves of the SDK.\n *\n * The visitor cookie is the one channel where two runtimes must agree on a literal string: the\n * browser writes it, a same-origin server reads it back, and that match is what lets a server-side\n * conversion attribute to a browser-entered journey. `config.prefix` namespaces it — so two Xenia\n * apps on one domain keep separate visitors — which means **both halves must derive the name the\n * same way**. Deriving it on one side and hardcoding it on the other silently breaks the link for\n * anyone using a custom prefix: the server just finds no cookie and falls back to no visitor.\n *\n * Always build the name with these helpers rather than interpolating it by hand.\n */\n\n/** Default storage/cookie prefix, matching `XeniaConfig.prefix`. */\nexport const DEFAULT_PREFIX = \"xenia\";\n\n/** Name of the first-party cookie carrying the SDK-owned visitor id, for a given prefix. */\nexport function visitorCookieName(prefix: string = DEFAULT_PREFIX): string {\n  return `${prefix || DEFAULT_PREFIX}_vid`;\n}\n\n/** Name of the first-party cookie carrying consent scopes, for a given prefix. */\nexport function consentCookieName(prefix: string = DEFAULT_PREFIX): string {\n  return `${prefix || DEFAULT_PREFIX}_consent`;\n}\n\n/**\n * The visitor cookie name for the DEFAULT prefix (`\"xenia_vid\"`).\n *\n * Correct for the common case, and kept so existing code (e.g. reading the cookie straight out of a\n * framework's cookie jar) keeps working. If you set `config.prefix`, use {@link visitorCookieName}\n * instead — this constant will not match what the browser wrote.\n */\nexport const VISITOR_COOKIE = visitorCookieName();\n\n/**\n * The consent cookie name for the DEFAULT prefix (`\"xenia_consent\"`). Same custom-prefix caveat as\n * {@link VISITOR_COOKIE}.\n */\nexport const CONSENT_COOKIE = consentCookieName();\n","import type { JsonValue } from \"./types\";\n\n/**\n * A single content swap, as emitted in a webhook-response body's\n * `xeniaContentSwaps` array (the multi-slot personalization analogue of\n * `xeniaActions`). `identifier` is `\"<slotKey>\"` (whole-slot replace) or\n * `\"<slotKey>.<dotted.path>\"` addressing a node inside that slot's JSON\n * (object keys or array indices).\n *\n * NOTE: this field name/shape is a proposed contract, not yet emitted by any\n * journey node — confirm with the Journey Orchestrator (FE/BE) team before\n * relying on it in production.\n */\nexport interface ContentSwap {\n  identifier: string;\n  replacement: JsonValue;\n  /** `\"replace\"` (default) swaps the whole matched node; `\"merge\"` shallow-merges when both sides are objects. */\n  mode?: \"replace\" | \"merge\";\n}\n\nfunction isPlainObject(v: JsonValue): v is { [key: string]: JsonValue } {\n  return v !== null && typeof v === \"object\" && !Array.isArray(v);\n}\n\nfunction cloneJson<T extends JsonValue>(value: T): T {\n  return value === null || typeof value !== \"object\" ? value : (JSON.parse(JSON.stringify(value)) as T);\n}\n\nfunction setAtPath(node: JsonValue, path: string[], value: JsonValue, mode: \"replace\" | \"merge\"): JsonValue {\n  if (path.length === 0) {\n    if (mode === \"merge\" && isPlainObject(node) && isPlainObject(value)) {\n      return { ...node, ...value };\n    }\n    return value;\n  }\n\n  const [key, ...rest] = path;\n  if (Array.isArray(node)) {\n    const index = Number(key);\n    if (!Number.isInteger(index) || index < 0 || index >= node.length) return node;\n    const next = node.slice();\n    next[index] = setAtPath(next[index], rest, value, mode);\n    return next;\n  }\n  if (isPlainObject(node)) {\n    if (!(key in node)) return node;\n    return { ...node, [key]: setAtPath(node[key], rest, value, mode) };\n  }\n  return node;\n}\n\n/**\n * Splice `swaps` into a base map of named content slots, recursively at any\n * nesting depth. Defensive by design (mirrors the PHP SDK's personalization\n * client): a swap whose `identifier` doesn't resolve to an existing slot/path\n * is silently ignored rather than thrown — this never fails, it degrades to\n * the base slot value. Slots are deep-cloned; inputs are never mutated.\n */\nexport function spliceSlots(\n  slots: Record<string, JsonValue>,\n  swaps: ContentSwap[] | undefined,\n): Record<string, JsonValue> {\n  const result: Record<string, JsonValue> = {};\n  for (const [key, value] of Object.entries(slots)) {\n    result[key] = cloneJson(value);\n  }\n  if (!swaps) return result;\n\n  for (const swap of swaps) {\n    const [slotKey, ...pathParts] = swap.identifier.split(\".\");\n    if (!(slotKey in result)) continue;\n    result[slotKey] = setAtPath(result[slotKey], pathParts, swap.replacement, swap.mode ?? \"replace\");\n  }\n  return result;\n}\n\n/** Extract `xeniaContentSwaps` from a webhook-response body, if present and well-formed. */\nexport function extractContentSwaps(body: JsonValue): ContentSwap[] | undefined {\n  if (!isPlainObject(body)) return undefined;\n  const swaps = body.xeniaContentSwaps;\n  return Array.isArray(swaps) ? (swaps as unknown as ContentSwap[]) : undefined;\n}\n","import type { EventContext } from \"./types\";\n\n/**\n * Derive the SDK-provided page/campaign fields from a URL — the server-side counterpart to the\n * browser client's `Identity.collectContext()`, which reads the same fields off `window.location`.\n *\n * Exists because a server runtime has no ambient `window`: a Node client is constructed per request,\n * so the one thing it needs handed over is the URL being served. Everything a journey rule can\n * reference — `path`, `query.<name>`, `url`, `referrer`, `utmSource`/`utmMedium`/`utmCampaign`/\n * `utmContent`/`utmId` — is derived here rather than by each app, so a server-rendered page gets the\n * same field set a browser page does without hand-rolling UTM parsing at every call site.\n *\n * Field names and semantics deliberately mirror `collectContext()` exactly: `query` is the flattened\n * search params, UTMs come from the standard `utm_*` params, and absent values are omitted rather\n * than set to `\"\"` (a blank string is a value a condition could accidentally match).\n *\n * @param url Absolute URL of the request being served (e.g. `https://shop.example/product/x?ref=a`).\n *            A relative or unparseable value yields an empty context rather than throwing.\n * @param referrer Optional referring URL, typically the request's `Referer` header.\n */\nexport function contextFromUrl(url: string | null | undefined, referrer?: string | null): EventContext {\n  const ctx: EventContext = {};\n  if (referrer) ctx.referrer = referrer;\n  if (!url) return ctx;\n\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    return ctx; // not an absolute URL — nothing safely derivable\n  }\n\n  ctx.url = parsed.href;\n  ctx.path = parsed.pathname;\n  ctx.query = Object.fromEntries(parsed.searchParams);\n\n  const utm = (name: string) => parsed.searchParams.get(name) || undefined;\n  const utmSource = utm(\"utm_source\");\n  const utmMedium = utm(\"utm_medium\");\n  const utmCampaign = utm(\"utm_campaign\");\n  const utmContent = utm(\"utm_content\");\n  const utmId = utm(\"utm_id\");\n  if (utmSource) ctx.utmSource = utmSource;\n  if (utmMedium) ctx.utmMedium = utmMedium;\n  if (utmCampaign) ctx.utmCampaign = utmCampaign;\n  if (utmContent) ctx.utmContent = utmContent;\n  if (utmId) ctx.utmId = utmId;\n\n  return ctx;\n}\n","import type { WebhookResponse } from \"./types\";\n\n/**\n * Persists webhook responses the SDK receives, keyed by an arbitrary string\n * (typically the eventId, triggerId, or journeyId). Lets the app read back the\n * last server response for a given interaction without re-firing it.\n */\nexport interface ResponseStore {\n  set(key: string, value: WebhookResponse): void;\n  get(key: string): WebhookResponse | undefined;\n  keys(): string[];\n  clear(): void;\n}\n\n/** In-memory store. Default; lost on reload. */\nexport class MemoryResponseStore implements ResponseStore {\n  private readonly map = new Map<string, WebhookResponse>();\n\n  set(key: string, value: WebhookResponse): void {\n    this.map.set(key, value);\n  }\n  get(key: string): WebhookResponse | undefined {\n    return this.map.get(key);\n  }\n  keys(): string[] {\n    return [...this.map.keys()];\n  }\n  clear(): void {\n    this.map.clear();\n  }\n}\n\n/**\n * localStorage-backed store — survives reloads. Falls back to memory semantics\n * (silent no-op reads/writes) when localStorage is unavailable or throws.\n */\nexport class LocalStorageResponseStore implements ResponseStore {\n  private readonly nsKey: string;\n\n  constructor(prefix = \"xenia\") {\n    this.nsKey = `${prefix}_responses`;\n  }\n\n  private read(): Record<string, WebhookResponse> {\n    try {\n      const raw = localStorage.getItem(this.nsKey);\n      return raw ? (JSON.parse(raw) as Record<string, WebhookResponse>) : {};\n    } catch {\n      return {};\n    }\n  }\n\n  private write(data: Record<string, WebhookResponse>): void {\n    try {\n      localStorage.setItem(this.nsKey, JSON.stringify(data));\n    } catch {\n      /* storage full / unavailable — ignore */\n    }\n  }\n\n  set(key: string, value: WebhookResponse): void {\n    const data = this.read();\n    data[key] = value;\n    this.write(data);\n  }\n  get(key: string): WebhookResponse | undefined {\n    return this.read()[key];\n  }\n  keys(): string[] {\n    return Object.keys(this.read());\n  }\n  clear(): void {\n    try {\n      localStorage.removeItem(this.nsKey);\n    } catch {\n      /* ignore */\n    }\n  }\n}\n"]}