@xenia-martech/sdk-js 1.0.1-dev.1 → 1.1.0-dev.2

package/dist/cookie-names-8FxbGKGS.d.ts

@@ -0,0 +1,127 @@
+import { m as RetryConfig, C as CircuitBreakerConfig, H as HttpMethod, J as JsonValue, X as XeniaAction, d as ConsentState } from './api-URhxxi4x.js';
+
+/** Returns true when running in a browser environment (SSR-safe). */
+declare function isBrowser(): boolean;
+/** Appends query parameters to a URL. Returns the URL unchanged when empty. */
+declare function buildUrl(url: string, queryParams?: Record<string, string>): string;
+/** Options for a single request. */
+interface RequestOptions {
+    method?: HttpMethod;
+    /** Path appended to `baseUrl` (should start with `/`). */
+    path: string;
+    headers?: Record<string, string>;
+    query?: Record<string, string>;
+    body?: JsonValue;
+    /** Per-request timeout override in ms. */
+    timeout?: number;
+    /** Disable retry for this request (e.g. long-polling webhook). */
+    noRetry?: boolean;
+    /** Per-request retry override. */
+    retry?: RetryConfig;
+    /**
+     * Keep the request alive past page unload (`fetch`'s `keepalive` flag).
+     * Used for best-effort flushes on `pagehide`, where `sendBeacon` can't be
+     * used instead because it doesn't support custom headers (tenant scope).
+     */
+    keepalive?: boolean;
+}
+/** Result of a request: the raw Response plus the parsed JSON (or null). */
+interface HttpResult {
+    response: Response;
+    data: JsonValue;
+}
+/** Error thrown for non-2xx responses (after retries are exhausted). */
+declare class HttpError extends Error {
+    readonly status: number;
+    readonly data: JsonValue;
+    constructor(status: number, data: JsonValue, message?: string);
+}
+/** Thrown without a network call while an endpoint's circuit is open (see {@link CircuitBreakerConfig}). */
+declare class CircuitOpenError extends Error {
+    readonly endpoint: string;
+    constructor(endpoint: string);
+}
+interface HttpClientOptions {
+    /** Defaults to {@link DEFAULT_BASE_URL} when omitted. */
+    baseUrl?: string;
+    defaultHeaders?: Record<string, string>;
+    timeout?: number;
+    retry?: RetryConfig;
+    circuitBreaker?: boolean | CircuitBreakerConfig;
+    debug?: boolean;
+}
+/**
+ * Minimal fetch wrapper shared by all runtimes.
+ *
+ * - Injects default headers (tenant scope, content-type).
+ * - Applies an `AbortController` timeout.
+ * - Retries transient failures (network error, `429`, `5xx`) with exponential
+ *   backoff, honoring a `Retry-After` header when present.
+ * - Parses JSON, falling back to `null` on empty/invalid bodies.
+ */
+declare class HttpClient {
+    private readonly baseUrl;
+    private readonly defaultHeaders;
+    private readonly timeout;
+    private readonly retry;
+    private readonly debug;
+    private readonly breaker;
+    constructor(opts: HttpClientOptions);
+    request(opts: RequestOptions): Promise<HttpResult>;
+    private send;
+    private fetchWithTimeout;
+    private parseBody;
+    private isRetryableStatus;
+    private retryAfterMs;
+    private log;
+}
+
+/**
+ * Parse render actions out of a webhook-response body.
+ *
+ * The convention: marketers return `{ "xeniaActions": [ ... ] }` (or a bare
+ * array) from the `webhook-response` node. Any body without a recognizable
+ * `xeniaActions` array yields an empty list — a safe no-op.
+ */
+declare function parseActions(body: JsonValue): XeniaAction[];
+
+/**
+ * Cookie names shared by the browser and server halves of the SDK.
+ *
+ * The visitor cookie is the one channel where two runtimes must agree on a literal string: the
+ * browser writes it, a same-origin server reads it back, and that match is what lets a server-side
+ * conversion attribute to a browser-entered journey. `config.prefix` namespaces it — so two Xenia
+ * apps on one domain keep separate visitors — which means **both halves must derive the name the
+ * same way**. Deriving it on one side and hardcoding it on the other silently breaks the link for
+ * anyone using a custom prefix: the server just finds no cookie and falls back to no visitor.
+ *
+ * Always build the name with these helpers rather than interpolating it by hand.
+ */
+
+/** Default storage/cookie prefix, matching `XeniaConfig.prefix`. */
+declare const DEFAULT_PREFIX = "xenia";
+/** Name of the first-party cookie carrying the SDK-owned visitor id, for a given prefix. */
+declare function visitorCookieName(prefix?: string): string;
+/** Name of the first-party cookie carrying consent scopes, for a given prefix. */
+declare function consentCookieName(prefix?: string): string;
+/**
+ * The visitor cookie name for the DEFAULT prefix (`"xenia_vid"`).
+ *
+ * Correct for the common case, and kept so existing code (e.g. reading the cookie straight out of a
+ * framework's cookie jar) keeps working. If you set `config.prefix`, use {@link visitorCookieName}
+ * instead — this constant will not match what the browser wrote.
+ */
+declare const VISITOR_COOKIE: string;
+/**
+ * The consent cookie name for the DEFAULT prefix (`"xenia_consent"`). Same custom-prefix caveat as
+ * {@link VISITOR_COOKIE}.
+ */
+declare const CONSENT_COOKIE: string;
+/**
+ * A `document.cookie` string carrying consent, in the JSON form the server SDK's `getConsent()`
+ * reads back. The browser client's `consent()` writes it; a page with its own consent banner and no
+ * browser client can write it directly, so server-side calls see the visitor's choice.
+ */
+declare function consentCookie(state: ConsentState, prefix?: string, maxAgeDays?: number): string;
+
+export { CONSENT_COOKIE as C, DEFAULT_PREFIX as D, HttpClient as H, type RequestOptions as R, VISITOR_COOKIE as V, CircuitOpenError as a, type HttpClientOptions as b, HttpError as c, type HttpResult as d, buildUrl as e, consentCookie as f, consentCookieName as g, isBrowser as i, parseActions as p, visitorCookieName as v };

package/dist/cookie-names-QYMiEMAq.d.cts

@@ -0,0 +1,127 @@
+import { m as RetryConfig, C as CircuitBreakerConfig, H as HttpMethod, J as JsonValue, X as XeniaAction, d as ConsentState } from './api-URhxxi4x.cjs';
+
+/** Returns true when running in a browser environment (SSR-safe). */
+declare function isBrowser(): boolean;
+/** Appends query parameters to a URL. Returns the URL unchanged when empty. */
+declare function buildUrl(url: string, queryParams?: Record<string, string>): string;
+/** Options for a single request. */
+interface RequestOptions {
+    method?: HttpMethod;
+    /** Path appended to `baseUrl` (should start with `/`). */
+    path: string;
+    headers?: Record<string, string>;
+    query?: Record<string, string>;
+    body?: JsonValue;
+    /** Per-request timeout override in ms. */
+    timeout?: number;
+    /** Disable retry for this request (e.g. long-polling webhook). */
+    noRetry?: boolean;
+    /** Per-request retry override. */
+    retry?: RetryConfig;
+    /**
+     * Keep the request alive past page unload (`fetch`'s `keepalive` flag).
+     * Used for best-effort flushes on `pagehide`, where `sendBeacon` can't be
+     * used instead because it doesn't support custom headers (tenant scope).
+     */
+    keepalive?: boolean;
+}
+/** Result of a request: the raw Response plus the parsed JSON (or null). */
+interface HttpResult {
+    response: Response;
+    data: JsonValue;
+}
+/** Error thrown for non-2xx responses (after retries are exhausted). */
+declare class HttpError extends Error {
+    readonly status: number;
+    readonly data: JsonValue;
+    constructor(status: number, data: JsonValue, message?: string);
+}
+/** Thrown without a network call while an endpoint's circuit is open (see {@link CircuitBreakerConfig}). */
+declare class CircuitOpenError extends Error {
+    readonly endpoint: string;
+    constructor(endpoint: string);
+}
+interface HttpClientOptions {
+    /** Defaults to {@link DEFAULT_BASE_URL} when omitted. */
+    baseUrl?: string;
+    defaultHeaders?: Record<string, string>;
+    timeout?: number;
+    retry?: RetryConfig;
+    circuitBreaker?: boolean | CircuitBreakerConfig;
+    debug?: boolean;
+}
+/**
+ * Minimal fetch wrapper shared by all runtimes.
+ *
+ * - Injects default headers (tenant scope, content-type).
+ * - Applies an `AbortController` timeout.
+ * - Retries transient failures (network error, `429`, `5xx`) with exponential
+ *   backoff, honoring a `Retry-After` header when present.
+ * - Parses JSON, falling back to `null` on empty/invalid bodies.
+ */
+declare class HttpClient {
+    private readonly baseUrl;
+    private readonly defaultHeaders;
+    private readonly timeout;
+    private readonly retry;
+    private readonly debug;
+    private readonly breaker;
+    constructor(opts: HttpClientOptions);
+    request(opts: RequestOptions): Promise<HttpResult>;
+    private send;
+    private fetchWithTimeout;
+    private parseBody;
+    private isRetryableStatus;
+    private retryAfterMs;
+    private log;
+}
+
+/**
+ * Parse render actions out of a webhook-response body.
+ *
+ * The convention: marketers return `{ "xeniaActions": [ ... ] }` (or a bare
+ * array) from the `webhook-response` node. Any body without a recognizable
+ * `xeniaActions` array yields an empty list — a safe no-op.
+ */
+declare function parseActions(body: JsonValue): XeniaAction[];
+
+/**
+ * Cookie names shared by the browser and server halves of the SDK.
+ *
+ * The visitor cookie is the one channel where two runtimes must agree on a literal string: the
+ * browser writes it, a same-origin server reads it back, and that match is what lets a server-side
+ * conversion attribute to a browser-entered journey. `config.prefix` namespaces it — so two Xenia
+ * apps on one domain keep separate visitors — which means **both halves must derive the name the
+ * same way**. Deriving it on one side and hardcoding it on the other silently breaks the link for
+ * anyone using a custom prefix: the server just finds no cookie and falls back to no visitor.
+ *
+ * Always build the name with these helpers rather than interpolating it by hand.
+ */
+
+/** Default storage/cookie prefix, matching `XeniaConfig.prefix`. */
+declare const DEFAULT_PREFIX = "xenia";
+/** Name of the first-party cookie carrying the SDK-owned visitor id, for a given prefix. */
+declare function visitorCookieName(prefix?: string): string;
+/** Name of the first-party cookie carrying consent scopes, for a given prefix. */
+declare function consentCookieName(prefix?: string): string;
+/**
+ * The visitor cookie name for the DEFAULT prefix (`"xenia_vid"`).
+ *
+ * Correct for the common case, and kept so existing code (e.g. reading the cookie straight out of a
+ * framework's cookie jar) keeps working. If you set `config.prefix`, use {@link visitorCookieName}
+ * instead — this constant will not match what the browser wrote.
+ */
+declare const VISITOR_COOKIE: string;
+/**
+ * The consent cookie name for the DEFAULT prefix (`"xenia_consent"`). Same custom-prefix caveat as
+ * {@link VISITOR_COOKIE}.
+ */
+declare const CONSENT_COOKIE: string;
+/**
+ * A `document.cookie` string carrying consent, in the JSON form the server SDK's `getConsent()`
+ * reads back. The browser client's `consent()` writes it; a page with its own consent banner and no
+ * browser client can write it directly, so server-side calls see the visitor's choice.
+ */
+declare function consentCookie(state: ConsentState, prefix?: string, maxAgeDays?: number): string;
+
+export { CONSENT_COOKIE as C, DEFAULT_PREFIX as D, HttpClient as H, type RequestOptions as R, VISITOR_COOKIE as V, CircuitOpenError as a, type HttpClientOptions as b, HttpError as c, type HttpResult as d, buildUrl as e, consentCookie as f, consentCookieName as g, isBrowser as i, parseActions as p, visitorCookieName as v };

package/dist/index.cjs

@@ -1,84 +1,93 @@
 'use strict';
 
-var chunkWYM4CQVG_cjs = require('./chunk-WYM4CQVG.cjs');
+var chunk5D7SJIO4_cjs = require('./chunk-5D7SJIO4.cjs');
+var chunkJEKVN7HK_cjs = require('./chunk-JEKVN7HK.cjs');
 
 
 
+Object.defineProperty(exports, "LocalStorageResponseStore", {
+  enumerable: true,
+  get: function () { return chunk5D7SJIO4_cjs.LocalStorageResponseStore; }
+});
+Object.defineProperty(exports, "MemoryResponseStore", {
+  enumerable: true,
+  get: function () { return chunk5D7SJIO4_cjs.MemoryResponseStore; }
+});
+Object.defineProperty(exports, "extractContentSwaps", {
+  enumerable: true,
+  get: function () { return chunk5D7SJIO4_cjs.extractContentSwaps; }
+});
+Object.defineProperty(exports, "spliceSlots", {
+  enumerable: true,
+  get: function () { return chunk5D7SJIO4_cjs.spliceSlots; }
+});
 Object.defineProperty(exports, "CONSENT_COOKIE", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.CONSENT_COOKIE; }
+  get: function () { return chunkJEKVN7HK_cjs.CONSENT_COOKIE; }
+});
+Object.defineProperty(exports, "CircuitOpenError", {
+  enumerable: true,
+  get: function () { return chunkJEKVN7HK_cjs.CircuitOpenError; }
 });
 Object.defineProperty(exports, "DEFAULT_PREFIX", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.DEFAULT_PREFIX; }
+  get: function () { return chunkJEKVN7HK_cjs.DEFAULT_PREFIX; }
 });
 Object.defineProperty(exports, "HttpClient", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.HttpClient; }
+  get: function () { return chunkJEKVN7HK_cjs.HttpClient; }
 });
 Object.defineProperty(exports, "HttpError", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.HttpError; }
-});
-Object.defineProperty(exports, "LocalStorageResponseStore", {
-  enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.LocalStorageResponseStore; }
+  get: function () { return chunkJEKVN7HK_cjs.HttpError; }
 });
 Object.defineProperty(exports, "MAX_EVENT_ID_LENGTH", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.MAX_EVENT_ID_LENGTH; }
-});
-Object.defineProperty(exports, "MemoryResponseStore", {
-  enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.MemoryResponseStore; }
+  get: function () { return chunkJEKVN7HK_cjs.MAX_EVENT_ID_LENGTH; }
 });
 Object.defineProperty(exports, "VISITOR_COOKIE", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.VISITOR_COOKIE; }
+  get: function () { return chunkJEKVN7HK_cjs.VISITOR_COOKIE; }
 });
 Object.defineProperty(exports, "XeniaApi", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.XeniaApi; }
+  get: function () { return chunkJEKVN7HK_cjs.XeniaApi; }
 });
 Object.defineProperty(exports, "buildUrl", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.buildUrl; }
+  get: function () { return chunkJEKVN7HK_cjs.buildUrl; }
 });
-Object.defineProperty(exports, "consentCookieName", {
+Object.defineProperty(exports, "consentCookie", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.consentCookieName; }
+  get: function () { return chunkJEKVN7HK_cjs.consentCookie; }
 });
-Object.defineProperty(exports, "contextFromUrl", {
+Object.defineProperty(exports, "consentCookieName", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.contextFromUrl; }
+  get: function () { return chunkJEKVN7HK_cjs.consentCookieName; }
 });
-Object.defineProperty(exports, "extractContentSwaps", {
+Object.defineProperty(exports, "contextFromUrl", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.extractContentSwaps; }
+  get: function () { return chunkJEKVN7HK_cjs.contextFromUrl; }
 });
 Object.defineProperty(exports, "generateUlid", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.generateUlid; }
+  get: function () { return chunkJEKVN7HK_cjs.generateUlid; }
 });
 Object.defineProperty(exports, "isBrowser", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.isBrowser; }
+  get: function () { return chunkJEKVN7HK_cjs.isBrowser; }
 });
 Object.defineProperty(exports, "parseActions", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.parseActions; }
-});
-Object.defineProperty(exports, "spliceSlots", {
-  enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.spliceSlots; }
+  get: function () { return chunkJEKVN7HK_cjs.parseActions; }
 });
 Object.defineProperty(exports, "toEventId", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.toEventId; }
+  get: function () { return chunkJEKVN7HK_cjs.toEventId; }
 });
 Object.defineProperty(exports, "visitorCookieName", {
   enumerable: true,
-  get: function () { return chunkWYM4CQVG_cjs.visitorCookieName; }
+  get: function () { return chunkJEKVN7HK_cjs.visitorCookieName; }
 });
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/index.d.cts

@@ -1,73 +1,6 @@
-import { R as RetryConfig, H as HttpMethod, J as JsonValue, E as EventContext, W as WebhookResponse } from './cookie-names-B3b0XNc2.cjs';
-export { A as AnalyticsContext, a as AnalyticsEventName, b as AnalyticsIdentity, c as AnalyticsIngestResponse, C as CONSENT_COOKIE, d as ConsentState, D as DEFAULT_PREFIX, e as EventIdentity, I as IdentifyRequest, f as IdentifyResponse, g as InteractionType, h as JsonObject, M as MessageCta, i as MessagePlacement, P as PersonalizationSwap, j as ResolveBatchItem, k as ResolveBatchResult, l as ResolveOptions, m as ResolveResult, T as TrackOptions, V as VISITOR_COOKIE, n as WidgetFormSubmit, o as WidgetPrize, p as WidgetSegment, q as WidgetSubmitResponse, r as WidgetType, X as XeniaAction, s as XeniaApi, t as XeniaConfig, u as XeniaEvent, v as consentCookieName, w as parseActions, x as visitorCookieName } from './cookie-names-B3b0XNc2.cjs';
-
-/** Returns true when running in a browser environment (SSR-safe). */
-declare function isBrowser(): boolean;
-/** Appends query parameters to a URL. Returns the URL unchanged when empty. */
-declare function buildUrl(url: string, queryParams?: Record<string, string>): string;
-/** Options for a single request. */
-interface RequestOptions {
-    method?: HttpMethod;
-    /** Path appended to `baseUrl` (should start with `/`). */
-    path: string;
-    headers?: Record<string, string>;
-    query?: Record<string, string>;
-    body?: JsonValue;
-    /** Per-request timeout override in ms. */
-    timeout?: number;
-    /** Disable retry for this request (e.g. long-polling webhook). */
-    noRetry?: boolean;
-    /** Per-request retry override. */
-    retry?: RetryConfig;
-    /**
-     * Keep the request alive past page unload (`fetch`'s `keepalive` flag).
-     * Used for best-effort flushes on `pagehide`, where `sendBeacon` can't be
-     * used instead because it doesn't support custom headers (tenant scope).
-     */
-    keepalive?: boolean;
-}
-/** Result of a request: the raw Response plus the parsed JSON (or null). */
-interface HttpResult {
-    response: Response;
-    data: JsonValue;
-}
-/** Error thrown for non-2xx responses (after retries are exhausted). */
-declare class HttpError extends Error {
-    readonly status: number;
-    readonly data: JsonValue;
-    constructor(status: number, data: JsonValue, message?: string);
-}
-interface HttpClientOptions {
-    /** Defaults to {@link DEFAULT_BASE_URL} when omitted. */
-    baseUrl?: string;
-    defaultHeaders?: Record<string, string>;
-    timeout?: number;
-    retry?: RetryConfig;
-    debug?: boolean;
-}
-/**
- * Minimal fetch wrapper shared by all runtimes.
- *
- * - Injects default headers (tenant scope, content-type).
- * - Applies an `AbortController` timeout.
- * - Retries transient failures (network error, `429`, `5xx`) with exponential
- *   backoff, honoring a `Retry-After` header when present.
- * - Parses JSON, falling back to `null` on empty/invalid bodies.
- */
-declare class HttpClient {
-    private readonly baseUrl;
-    private readonly defaultHeaders;
-    private readonly timeout;
-    private readonly retry;
-    private readonly debug;
-    constructor(opts: HttpClientOptions);
-    request(opts: RequestOptions): Promise<HttpResult>;
-    private fetchWithTimeout;
-    private parseBody;
-    private isRetryableStatus;
-    private retryAfterMs;
-    private log;
-}
+import { J as JsonValue, E as EventContext, W as WebhookResponse } from './api-URhxxi4x.cjs';
+export { A as AnalyticsContext, a as AnalyticsEventName, b as AnalyticsIdentity, c as AnalyticsIngestResponse, C as CircuitBreakerConfig, d as ConsentState, e as EventIdentity, H as HttpMethod, I as IdentifyRequest, f as IdentifyResponse, g as InteractionType, h as JsonObject, M as MessageCta, i as MessagePlacement, P as PersonalizationSwap, R as ResolveBatchItem, j as ResolveBatchResult, k as ResolveOptions, l as ResolveResult, m as RetryConfig, T as TrackOptions, n as WidgetFormSubmit, o as WidgetPrize, p as WidgetSegment, q as WidgetSubmitResponse, r as WidgetType, X as XeniaAction, s as XeniaApi, t as XeniaConfig, u as XeniaEvent } from './api-URhxxi4x.cjs';
+export { C as CONSENT_COOKIE, a as CircuitOpenError, D as DEFAULT_PREFIX, H as HttpClient, b as HttpClientOptions, c as HttpError, d as HttpResult, R as RequestOptions, V as VISITOR_COOKIE, e as buildUrl, f as consentCookie, g as consentCookieName, i as isBrowser, p as parseActions, v as visitorCookieName } from './cookie-names-QYMiEMAq.cjs';
 
 /**
  * Generate a ULID (Universally Unique Lexicographically Sortable Identifier):
@@ -175,4 +108,4 @@ declare class LocalStorageResponseStore implements ResponseStore {
     clear(): void;
 }
 
-export { type ContentSwap, EventContext, HttpClient, type HttpClientOptions, HttpError, HttpMethod, type HttpResult, JsonValue, LocalStorageResponseStore, MAX_EVENT_ID_LENGTH, MemoryResponseStore, type RequestOptions, type ResponseStore, RetryConfig, WebhookResponse, buildUrl, contextFromUrl, extractContentSwaps, generateUlid, isBrowser, spliceSlots, toEventId };
+export { type ContentSwap, EventContext, JsonValue, LocalStorageResponseStore, MAX_EVENT_ID_LENGTH, MemoryResponseStore, type ResponseStore, WebhookResponse, contextFromUrl, extractContentSwaps, generateUlid, spliceSlots, toEventId };

package/dist/index.d.ts

@@ -1,73 +1,6 @@
-import { R as RetryConfig, H as HttpMethod, J as JsonValue, E as EventContext, W as WebhookResponse } from './cookie-names-B3b0XNc2.js';
-export { A as AnalyticsContext, a as AnalyticsEventName, b as AnalyticsIdentity, c as AnalyticsIngestResponse, C as CONSENT_COOKIE, d as ConsentState, D as DEFAULT_PREFIX, e as EventIdentity, I as IdentifyRequest, f as IdentifyResponse, g as InteractionType, h as JsonObject, M as MessageCta, i as MessagePlacement, P as PersonalizationSwap, j as ResolveBatchItem, k as ResolveBatchResult, l as ResolveOptions, m as ResolveResult, T as TrackOptions, V as VISITOR_COOKIE, n as WidgetFormSubmit, o as WidgetPrize, p as WidgetSegment, q as WidgetSubmitResponse, r as WidgetType, X as XeniaAction, s as XeniaApi, t as XeniaConfig, u as XeniaEvent, v as consentCookieName, w as parseActions, x as visitorCookieName } from './cookie-names-B3b0XNc2.js';
-
-/** Returns true when running in a browser environment (SSR-safe). */
-declare function isBrowser(): boolean;
-/** Appends query parameters to a URL. Returns the URL unchanged when empty. */
-declare function buildUrl(url: string, queryParams?: Record<string, string>): string;
-/** Options for a single request. */
-interface RequestOptions {
-    method?: HttpMethod;
-    /** Path appended to `baseUrl` (should start with `/`). */
-    path: string;
-    headers?: Record<string, string>;
-    query?: Record<string, string>;
-    body?: JsonValue;
-    /** Per-request timeout override in ms. */
-    timeout?: number;
-    /** Disable retry for this request (e.g. long-polling webhook). */
-    noRetry?: boolean;
-    /** Per-request retry override. */
-    retry?: RetryConfig;
-    /**
-     * Keep the request alive past page unload (`fetch`'s `keepalive` flag).
-     * Used for best-effort flushes on `pagehide`, where `sendBeacon` can't be
-     * used instead because it doesn't support custom headers (tenant scope).
-     */
-    keepalive?: boolean;
-}
-/** Result of a request: the raw Response plus the parsed JSON (or null). */
-interface HttpResult {
-    response: Response;
-    data: JsonValue;
-}
-/** Error thrown for non-2xx responses (after retries are exhausted). */
-declare class HttpError extends Error {
-    readonly status: number;
-    readonly data: JsonValue;
-    constructor(status: number, data: JsonValue, message?: string);
-}
-interface HttpClientOptions {
-    /** Defaults to {@link DEFAULT_BASE_URL} when omitted. */
-    baseUrl?: string;
-    defaultHeaders?: Record<string, string>;
-    timeout?: number;
-    retry?: RetryConfig;
-    debug?: boolean;
-}
-/**
- * Minimal fetch wrapper shared by all runtimes.
- *
- * - Injects default headers (tenant scope, content-type).
- * - Applies an `AbortController` timeout.
- * - Retries transient failures (network error, `429`, `5xx`) with exponential
- *   backoff, honoring a `Retry-After` header when present.
- * - Parses JSON, falling back to `null` on empty/invalid bodies.
- */
-declare class HttpClient {
-    private readonly baseUrl;
-    private readonly defaultHeaders;
-    private readonly timeout;
-    private readonly retry;
-    private readonly debug;
-    constructor(opts: HttpClientOptions);
-    request(opts: RequestOptions): Promise<HttpResult>;
-    private fetchWithTimeout;
-    private parseBody;
-    private isRetryableStatus;
-    private retryAfterMs;
-    private log;
-}
+import { J as JsonValue, E as EventContext, W as WebhookResponse } from './api-URhxxi4x.js';
+export { A as AnalyticsContext, a as AnalyticsEventName, b as AnalyticsIdentity, c as AnalyticsIngestResponse, C as CircuitBreakerConfig, d as ConsentState, e as EventIdentity, H as HttpMethod, I as IdentifyRequest, f as IdentifyResponse, g as InteractionType, h as JsonObject, M as MessageCta, i as MessagePlacement, P as PersonalizationSwap, R as ResolveBatchItem, j as ResolveBatchResult, k as ResolveOptions, l as ResolveResult, m as RetryConfig, T as TrackOptions, n as WidgetFormSubmit, o as WidgetPrize, p as WidgetSegment, q as WidgetSubmitResponse, r as WidgetType, X as XeniaAction, s as XeniaApi, t as XeniaConfig, u as XeniaEvent } from './api-URhxxi4x.js';
+export { C as CONSENT_COOKIE, a as CircuitOpenError, D as DEFAULT_PREFIX, H as HttpClient, b as HttpClientOptions, c as HttpError, d as HttpResult, R as RequestOptions, V as VISITOR_COOKIE, e as buildUrl, f as consentCookie, g as consentCookieName, i as isBrowser, p as parseActions, v as visitorCookieName } from './cookie-names-8FxbGKGS.js';
 
 /**
  * Generate a ULID (Universally Unique Lexicographically Sortable Identifier):
@@ -175,4 +108,4 @@ declare class LocalStorageResponseStore implements ResponseStore {
     clear(): void;
 }
 
-export { type ContentSwap, EventContext, HttpClient, type HttpClientOptions, HttpError, HttpMethod, type HttpResult, JsonValue, LocalStorageResponseStore, MAX_EVENT_ID_LENGTH, MemoryResponseStore, type RequestOptions, type ResponseStore, RetryConfig, WebhookResponse, buildUrl, contextFromUrl, extractContentSwaps, generateUlid, isBrowser, spliceSlots, toEventId };
+export { type ContentSwap, EventContext, JsonValue, LocalStorageResponseStore, MAX_EVENT_ID_LENGTH, MemoryResponseStore, type ResponseStore, WebhookResponse, contextFromUrl, extractContentSwaps, generateUlid, spliceSlots, toEventId };

package/dist/index.js

@@ -1,3 +1,4 @@
-export { CONSENT_COOKIE, DEFAULT_PREFIX, HttpClient, HttpError, LocalStorageResponseStore, MAX_EVENT_ID_LENGTH, MemoryResponseStore, VISITOR_COOKIE, XeniaApi, buildUrl, consentCookieName, contextFromUrl, extractContentSwaps, generateUlid, isBrowser, parseActions, spliceSlots, toEventId, visitorCookieName } from './chunk-XXNDHYAS.js';
+export { LocalStorageResponseStore, MemoryResponseStore, extractContentSwaps, spliceSlots } from './chunk-TLTG3BTC.js';
+export { CONSENT_COOKIE, CircuitOpenError, DEFAULT_PREFIX, HttpClient, HttpError, MAX_EVENT_ID_LENGTH, VISITOR_COOKIE, XeniaApi, buildUrl, consentCookie, consentCookieName, contextFromUrl, generateUlid, isBrowser, parseActions, toEventId, visitorCookieName } from './chunk-FYSEKFIY.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/next/index.cjs

@@ -0,0 +1,59 @@
+'use strict';
+
+var chunkU2WBBOYT_cjs = require('../chunk-U2WBBOYT.cjs');
+var chunkJEKVN7HK_cjs = require('../chunk-JEKVN7HK.cjs');
+var headers = require('next/headers');
+var server = require('next/server');
+
+var URL_HEADER = "x-xenia-url";
+function cookieAttributes(c = {}) {
+  const sameSite = c.sameSite ?? "Lax";
+  return {
+    path: "/",
+    maxAge: Math.floor((c.maxAgeDays ?? 365) * 86400),
+    sameSite: sameSite.toLowerCase(),
+    secure: c.secure || sameSite === "None",
+    ...c.domain && { domain: c.domain }
+  };
+}
+function xeniaProxy(request, opts = {}) {
+  const name = chunkJEKVN7HK_cjs.visitorCookieName(opts.prefix);
+  const existing = request.cookies.get(name)?.value;
+  const visitorId = existing ?? chunkJEKVN7HK_cjs.generateUlid();
+  const forwarded = new Headers(opts.headers ?? request.headers);
+  forwarded.set(URL_HEADER, request.url);
+  if (!existing) {
+    const header = forwarded.get("cookie");
+    forwarded.set("cookie", header ? `${header}; ${name}=${visitorId}` : `${name}=${visitorId}`);
+  }
+  const response = server.NextResponse.next({ request: { headers: forwarded } });
+  if (!existing) response.cookies.set(name, visitorId, cookieAttributes(opts.cookie));
+  return response;
+}
+async function xeniaServerFromNext(config) {
+  const [jar, h] = await Promise.all([headers.cookies(), headers.headers()]);
+  const name = chunkJEKVN7HK_cjs.visitorCookieName(config.prefix);
+  let visitorId = config.visitorId ?? jar.get(name)?.value;
+  if (!visitorId) {
+    visitorId = chunkJEKVN7HK_cjs.generateUlid();
+    try {
+      jar.set(name, visitorId, cookieAttributes());
+    } catch {
+    }
+  }
+  return chunkU2WBBOYT_cjs.createXeniaServer({
+    ...config,
+    visitorId,
+    context: { ...chunkJEKVN7HK_cjs.contextFromUrl(h.get(URL_HEADER), h.get("referer")), ...config.context }
+  });
+}
+async function consentFromNext(prefix) {
+  return chunkU2WBBOYT_cjs.getConsent((await headers.headers()).get("cookie"), prefix);
+}
+
+exports.URL_HEADER = URL_HEADER;
+exports.consentFromNext = consentFromNext;
+exports.xeniaProxy = xeniaProxy;
+exports.xeniaServerFromNext = xeniaServerFromNext;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/next/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/next/index.ts"],"names":["visitorCookieName","generateUlid","NextResponse","cookies","headers","createXeniaServer","contextFromUrl","getConsent"],"mappings":";;;;;;;AAoBO,IAAM,UAAA,GAAa;AAW1B,SAAS,gBAAA,CAAiB,CAAA,GAA0B,EAAC,EAAG;AACtD,EAAA,MAAM,QAAA,GAAW,EAAE,QAAA,IAAY,KAAA;AAC/B,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,GAAA;AAAA,IACN,QAAQ,IAAA,CAAK,KAAA,CAAA,CAAO,CAAA,CAAE,UAAA,IAAc,OAAO,KAAK,CAAA;AAAA,IAChD,QAAA,EAAU,SAAS,WAAA,EAAY;AAAA,IAC/B,MAAA,EAAQ,CAAA,CAAE,MAAA,IAAU,QAAA,KAAa,MAAA;AAAA,IACjC,GAAI,CAAA,CAAE,MAAA,IAAU,EAAE,MAAA,EAAQ,EAAE,MAAA;AAAO,GACrC;AACF;AAYO,SAAS,UAAA,CAAW,OAAA,EAAsB,IAAA,GAA0B,EAAC,EAAiB;AAC3F,EAAA,MAAM,IAAA,GAAOA,mCAAA,CAAkB,IAAA,CAAK,MAAM,CAAA;AAC1C,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA,EAAG,KAAA;AAC5C,EAAA,MAAM,SAAA,GAAY,YAAYC,8BAAA,EAAa;AAE3C,EAAA,MAAM,YAAY,IAAI,OAAA,CAAQ,IAAA,CAAK,OAAA,IAAW,QAAQ,OAAO,CAAA;AAC7D,EAAA,SAAA,CAAU,GAAA,CAAI,UAAA,EAAY,OAAA,CAAQ,GAAG,CAAA;AACrC,EAAA,IAAI,CAAC,QAAA,EAAU;AAEb,IAAA,MAAM,MAAA,GAAS,SAAA,CAAU,GAAA,CAAI,QAAQ,CAAA;AACrC,IAAA,SAAA,CAAU,GAAA,CAAI,QAAA,EAAU,MAAA,GAAS,CAAA,EAAG,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,GAAK,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,SAAS,CAAA,CAAE,CAAA;AAAA,EAC7F;AAEA,EAAA,MAAM,QAAA,GAAWC,oBAAa,IAAA,CAAK,EAAE,SAAS,EAAE,OAAA,EAAS,SAAA,EAAU,EAAG,CAAA;AACtE,EAAA,IAAI,CAAC,QAAA,EAAU,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,MAAM,SAAA,EAAW,gBAAA,CAAiB,IAAA,CAAK,MAAM,CAAC,CAAA;AAClF,EAAA,OAAO,QAAA;AACT;AAOA,eAAsB,oBAAoB,MAAA,EAA2C;AACnF,EAAA,MAAM,CAAC,GAAA,EAAK,CAAC,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAACC,eAAA,EAAQ,EAAGC,eAAA,EAAS,CAAC,CAAA;AACzD,EAAA,MAAM,IAAA,GAAOJ,mCAAA,CAAkB,MAAA,CAAO,MAAM,CAAA;AAC5C,EAAA,IAAI,YAAY,MAAA,CAAO,SAAA,IAAa,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA,EAAG,KAAA;AACnD,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,SAAA,GAAYC,8BAAA,EAAa;AACzB,IAAA,IAAI;AACF,MAAA,GAAA,CAAI,GAAA,CAAI,IAAA,EAAM,SAAA,EAAW,gBAAA,EAAkB,CAAA;AAAA,IAC7C,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACA,EAAA,OAAOI,mCAAA,CAAkB;AAAA,IACvB,GAAG,MAAA;AAAA,IACH,SAAA;AAAA,IACA,OAAA,EAAS,EAAE,GAAGC,gCAAA,CAAe,EAAE,GAAA,CAAI,UAAU,CAAA,EAAG,CAAA,CAAE,IAAI,SAAS,CAAC,CAAA,EAAG,GAAG,OAAO,OAAA;AAAQ,GACtF,CAAA;AACH;AAGA,eAAsB,gBAAgB,MAAA,EAAwC;AAC5E,EAAA,OAAOC,8BAAY,MAAMH,eAAA,IAAW,GAAA,CAAI,QAAQ,GAAG,MAAM,CAAA;AAC3D","file":"index.cjs","sourcesContent":["/**\n * `@xenia-martech/sdk-js/next` — Next.js (App Router, 15+) glue for the server SDK.\n *\n * A Server Component can't see its own URL or set cookies during render, so the two halves split\n * the work: `xeniaProxy()` runs in `proxy.ts`/`middleware.ts` (mints the visitor cookie, stamps the\n * URL onto a request header), and `xeniaServerFromNext()` reads both back to bind a per-request\n * `XeniaServer`. Use them together; each alone degrades gracefully (no URL context / a throwaway\n * visitor id).\n */\n\nimport { cookies, headers } from \"next/headers\";\nimport { NextResponse, type NextRequest } from \"next/server\";\nimport { visitorCookieName } from \"../core/cookie-names\";\nimport { generateUlid } from \"../core/id\";\nimport { contextFromUrl } from \"../core/request-context\";\nimport type { ConsentState, VisitorCookieOptions, XeniaConfig } from \"../core/types\";\nimport { getConsent } from \"../server/cookies\";\nimport { createXeniaServer, type XeniaServer } from \"../server/xenia-server\";\n\n/** Request header `xeniaProxy()` stamps with the URL being served. */\nexport const URL_HEADER = \"x-xenia-url\";\n\nexport interface XeniaProxyOptions {\n  /** Request headers to forward (e.g. your own additions); defaults to the incoming ones. */\n  headers?: Headers;\n  /** Must match the browser client's `config.prefix`, if you set one. */\n  prefix?: string;\n  /** Visitor cookie attributes. Default: `path=/`, `SameSite=Lax`, one year. */\n  cookie?: VisitorCookieOptions;\n}\n\nfunction cookieAttributes(c: VisitorCookieOptions = {}) {\n  const sameSite = c.sameSite ?? \"Lax\";\n  return {\n    path: \"/\",\n    maxAge: Math.floor((c.maxAgeDays ?? 365) * 86400),\n    sameSite: sameSite.toLowerCase() as \"lax\" | \"strict\" | \"none\",\n    secure: c.secure || sameSite === \"None\",\n    ...(c.domain && { domain: c.domain }),\n  };\n}\n\n/**\n * Next.js proxy/middleware step: ensure the visitor cookie exists and stamp the URL onto\n * {@link URL_HEADER}, then continue. A new visitor id is also put on the forwarded `Cookie` header,\n * so this very request's render already sees it.\n *\n * ```ts\n * // proxy.ts\n * export const proxy = (request: NextRequest) => xeniaProxy(request);\n * ```\n */\nexport function xeniaProxy(request: NextRequest, opts: XeniaProxyOptions = {}): NextResponse {\n  const name = visitorCookieName(opts.prefix);\n  const existing = request.cookies.get(name)?.value;\n  const visitorId = existing ?? generateUlid();\n\n  const forwarded = new Headers(opts.headers ?? request.headers);\n  forwarded.set(URL_HEADER, request.url);\n  if (!existing) {\n    // NextRequest.cookies.set doesn't rewrite the forwarded Cookie header, and cookies() reads that.\n    const header = forwarded.get(\"cookie\");\n    forwarded.set(\"cookie\", header ? `${header}; ${name}=${visitorId}` : `${name}=${visitorId}`);\n  }\n\n  const response = NextResponse.next({ request: { headers: forwarded } });\n  if (!existing) response.cookies.set(name, visitorId, cookieAttributes(opts.cookie));\n  return response;\n}\n\n/**\n * A `XeniaServer` bound to this request's visitor (the cookie `xeniaProxy()` set) and URL context\n * (path, query, UTMs, referrer). For Server Components, Server Actions and Route Handlers.\n * `config.visitorId`/`config.context` still win when passed.\n */\nexport async function xeniaServerFromNext(config: XeniaConfig): Promise<XeniaServer> {\n  const [jar, h] = await Promise.all([cookies(), headers()]);\n  const name = visitorCookieName(config.prefix);\n  let visitorId = config.visitorId ?? jar.get(name)?.value;\n  if (!visitorId) {\n    visitorId = generateUlid();\n    try {\n      jar.set(name, visitorId, cookieAttributes());\n    } catch {\n      // Expected during a Server Component render; xeniaProxy() is the place that persists it.\n    }\n  }\n  return createXeniaServer({\n    ...config,\n    visitorId,\n    context: { ...contextFromUrl(h.get(URL_HEADER), h.get(\"referer\")), ...config.context },\n  });\n}\n\n/** This request's consent, from the cookie the browser client's `consent()` (or `consentCookie()`) wrote. */\nexport async function consentFromNext(prefix?: string): Promise<ConsentState> {\n  return getConsent((await headers()).get(\"cookie\"), prefix);\n}\n"]}