@xenia-martech/sdk-js 1.2.0-dev.2 → 1.2.0-dev.4

package/dist/consent-DgWdjsSy.d.cts

@@ -0,0 +1,248 @@
+import { P as PersonalizationSwap } from './types-DgVHS4Qw.cjs';
+
+/** Wire types of Xenia's `/api/personalization/edge` endpoints (see the backend's personalization-edge-api.md). */
+
+/** `edge`: decidable from request data alone; `server`: needs a lookup, always decided by `/decide`. */
+type EdgeMode = "edge" | "server" | "off";
+interface ManifestKey {
+    contentKey: string;
+    mode: EdgeMode;
+    pages: string[];
+}
+/** Which content keys target which pages — the proxy's "call Xenia?" switch. */
+interface Manifest {
+    version: string;
+    generatedAt: string;
+    keys: ManifestKey[];
+}
+/** A storefront's own, public copy of the manifest: just the targeted page patterns. */
+interface PublicManifest {
+    version: string;
+    pages: string[];
+}
+/** What `/decide` decided for one content key. */
+interface EdgeDecision {
+    contentKey: string;
+    mode: EdgeMode;
+    personalized: boolean;
+    /** `personalized` | `control`; set when Xenia recorded an exposure. */
+    bucket: string | null;
+    variant: string | null;
+    baseEntryId: string | null;
+    swaps: PersonalizationSwap[];
+    trace: Record<string, string>;
+    reason: string | null;
+}
+/** The visitor profile Xenia decided with (`profile.*` journey facts), when profiles are on. */
+type ProfileFacts = Record<string, unknown>;
+interface DecideResult {
+    version: string;
+    decisions: EdgeDecision[];
+    profileVersion?: number;
+    profile?: ProfileFacts | null;
+}
+/**
+ * A page the visitor viewed: path, when (epoch ms) and, once they've left it, the seconds spent
+ * there. Sent with `/decide` so profile rules see views whose analytics events haven't landed yet.
+ */
+interface TrailView {
+    path: string;
+    at: number;
+    seconds?: number;
+}
+/** Request data journey rules can read (`utmCampaign`, `device`, `query.ref`, `geo.country`, …). */
+type EdgeFacts = Record<string, string | number | boolean | Record<string, string>>;
+/** Where a decision came from — surfaced in `Server-Timing`. */
+type DecisionSource = "cache" | "xenia" | "timeout" | "error" | "no-manifest";
+/** The visitor's location in Xenia's `ViewerGeo` shape — the only keys `/decide` accepts in `facts.geo`. */
+type ViewerGeo = Partial<Record<"country" | "countryName" | "region" | "regionName" | "city" | "postalCode" | "timeZone" | "latitude" | "longitude" | "source", string>>;
+
+/** What a visitor's cached decision holds: the decisions and the profile they were made with. */
+type CachedDecision = {
+    decisions: EdgeDecision[];
+    profile?: ProfileFacts | null;
+};
+type DecisionCache = {
+    get(key: string): CachedDecision | undefined;
+    set(key: string, value: CachedDecision, ttlMs: number): void;
+};
+type XeniaEdgeConfig = {
+    /** Xenia engine base URL, e.g. `https://engine.xeniamartech.com/xenia`. */
+    baseUrl: string;
+    /** A server-type SDK token. Never expose it to the browser. */
+    token: string;
+    /** Hard deadline for one `/decide` call. Default 150 ms. */
+    budgetMs?: number;
+    /**
+     * Where to read the manifest. Default: Xenia's `/edge/manifest` (with the token). A storefront
+     * can serve its own CDN-cached copy instead (e.g. a Next.js ISR route) — then no token is sent.
+     */
+    manifestUrl?: string;
+    /**
+     * A manifest baked in at build time. An instance starts with it in memory, so a cold start never
+     * waits: the first request uses it and triggers a background refresh. Empty version = none.
+     */
+    initialManifest?: Manifest | PublicManifest;
+    /** How long a cold start waits for the first manifest (only without `initialManifest`). Default 300 ms. */
+    manifestWaitMs?: number;
+    /** Manifest refresh interval. Default 30 s. */
+    manifestTtlMs?: number;
+    /** How long a visitor keeps a decision. Default 30 min (a session). */
+    decisionTtlMs?: number;
+    /**
+     * How long a provisional decision is kept (see `provisional`): Jev's answer, or the visitor's first
+     * signals, usually land seconds later, so the next view should ask again. Default 15 s.
+     */
+    provisionalDecisionTtlMs?: number;
+    cache?: DecisionCache;
+    fetch?: typeof fetch;
+    onError?: (error: unknown, context: string) => void;
+};
+type DecideInput = {
+    host: string | null;
+    path: string;
+    visitorId: string;
+    facts: EdgeFacts;
+    /** Facts that identify this visitor's context for caching (e.g. landing UTM, device). */
+    cacheFacts?: EdgeFacts;
+    /** The visitor's recent page views, most recent first (see `TrailView`). */
+    trail?: TrailView[];
+    /** This call's time budget, instead of the client's (a decision that calls a back office). */
+    budgetMs?: number;
+    /** How long to keep this call's answer, from what it said, instead of the client's. */
+    ttlMs?: (answer: CachedDecision) => number;
+};
+type DecideOutcome = {
+    decisions: EdgeDecision[];
+    /** The profile Xenia decided with (also on cache hits), when profiles are on. */
+    profile?: ProfileFacts | null;
+    source: DecisionSource;
+    /** Time spent in Xenia, 0 on a cache hit. */
+    ms: number;
+};
+/** Bounded in-memory LRU with per-entry expiry. */
+declare function memoryDecisionCache(maxEntries?: number): DecisionCache;
+declare function createXeniaEdge(config: XeniaEdgeConfig): {
+    match: (host: string | null, path: string) => Promise<ManifestKey[] | null>;
+    decide: (keys: ManifestKey[], input: DecideInput) => Promise<DecideOutcome>;
+    refreshManifest: () => Promise<void>;
+};
+type XeniaEdge = ReturnType<typeof createXeniaEdge>;
+
+/**
+ * The proxy hands a decision to the page as a signed token in the rewritten URL
+ * (`/xv/<token>/women`). The token is just the swaps — identical for every visitor in the same
+ * variant — so each variant renders once and is then served from the ISR/CDN cache like any static
+ * page. A site may carry its own data along (`extra`), e.g. what the page fills itself from.
+ *
+ * Signed (HMAC-SHA256) so nobody can craft a URL that renders arbitrary entries. Web Crypto only, so
+ * it runs in any runtime.
+ */
+
+/**
+ * One swap: the base entry's field, the entry shown in its place, and the content key whose
+ * decision it is — so the page can report impressions and clicks per journey and entry.
+ */
+type VariantSwap = [identifier: string, replacementEntryId: string, contentKey?: string];
+/** Swaps for one base entry. */
+interface SwapGroup {
+    base: string;
+    swaps: VariantSwap[];
+}
+/** The swap groups of the personalized decisions, in a stable order (stable cache keys). */
+declare function swapGroups(decisions: EdgeDecision[]): SwapGroup[];
+/**
+ * The token for a variant. An `extra` that would push it past the payload limit is left out — the
+ * page still renders its swaps — rather than making a token no page accepts.
+ */
+declare function encodeVariant(groups: SwapGroup[], secret: string, extra?: unknown): Promise<string>;
+/** The variant in a token, or `null` if it is malformed or not signed with `secret`. */
+declare function decodeVariant<E = unknown>(token: string, secret: string): Promise<{
+    groups: SwapGroup[];
+    extra?: E;
+} | null>;
+
+/**
+ * Facts about a request that journey rules read — where the visitor is, on what device, where they
+ * came from, their local time — derived from a standard `Request` in any runtime.
+ */
+
+/** The location headers `viewerGeo` can read, when trusted. */
+type GeoHeader = "x-xn-geo" | "x-nf-geo" | "x-country" | "x-vercel-ip-country" | "cloudfront-viewer-country" | "cf-ipcountry";
+/**
+ * The visitor's location as the hosting edge resolved it, and which source supplied it (`via`).
+ * Geo must come from the storefront's edge, never Xenia's: `/decide` is server to server. Tried in
+ * order — whichever the host provides:
+ * 1. Netlify's per-request `Netlify.context.geo` (can't be spoofed by the client, unlike a header)
+ * 2. `x-xn-geo` (URI-encoded JSON) from the site's own edge function
+ * 3. a `request.geo` some runtimes attach
+ * 4. Netlify's `x-nf-geo` header (base64 or URI-encoded JSON)
+ * 5. `x-country` (Netlify), `x-vercel-ip-*`, `cloudfront-viewer-*`, `cf-ipcountry`
+ * 6. `?xn_country=GB` — only with `devOverride`, for testing geo rules without an edge
+ *
+ * Headers (2, 4 and 5) are read only when named in `trust`: a visitor can send any header, and only
+ * the site knows which ones its own host or edge function sets (and overwrites). Name exactly those,
+ * e.g. `["x-vercel-ip-country"]` on Vercel, `["cf-ipcountry"]` behind Cloudflare,
+ * `["x-nf-geo", "x-country"]` on Netlify. 1 and 3 come from the runtime and are always used.
+ */
+declare function viewerGeo(request: Request, opts?: {
+    devOverride?: boolean;
+    trust?: readonly GeoHeader[];
+}): {
+    geo?: ViewerGeo;
+    via: string;
+};
+declare function deviceOf(headers: Headers): "mobile" | "tablet" | "desktop";
+/** Crawlers and link-preview fetchers: never decided, never recorded. */
+declare function isBot(userAgent: string | null | undefined): boolean;
+/** Link prefetches pass through a proxy too; they aren't page views. */
+declare function isPrefetch(headers: Headers): boolean;
+/**
+ * Whether this is the browser loading a page (a full page load), by `Sec-Fetch-Dest`. Requests
+ * without it (old browsers, curl) count as page loads.
+ */
+declare function isPageLoad(headers: Headers): boolean;
+/**
+ * This session's landing context — first-touch attribution, so a campaign carries across pages:
+ * the UTMs (≤200 chars each) and an external referrer (≤500), refreshed when the visitor arrives
+ * from a new campaign. `saved` is the value kept from earlier (a cookie); `changed` says to save it.
+ */
+declare function landingContext(url: URL, referrer: string | null | undefined, saved: string | undefined): {
+    ctx: Record<string, string>;
+    changed: boolean;
+};
+/** Meteorological seasons: Dec–Feb winter, Mar–May spring, Jun–Aug summer, Sep–Nov fall. */
+declare function seasonOf(month: number, southernHemisphere?: boolean): string;
+interface LocalTime {
+    local_weekday: string;
+    local_month: number;
+    local_hour: number;
+    is_weekend: boolean;
+    season: string;
+}
+/** Weekday, month, hour and season where the visitor is (their time zone; UTC when unknown). */
+declare function localTime(geo: ViewerGeo | undefined, now: Date): LocalTime;
+
+interface EdgeConsent {
+    /** Off: don't ask Xenia, serve base content. */
+    personalization: boolean;
+    /** Off: decide, but keep no trail or click cookies and send no trail. */
+    analytics: boolean;
+}
+/**
+ * What the edge flow may do for this request, from the consent cookie the browser client's
+ * `consent()` writes and the visitor's privacy signals:
+ * - no consent cookie (or an unreadable one) → no choice made: everything on, as before;
+ * - an explicit choice → followed (JSON `{analytics, personalization}`, or the scopes form
+ *   `analytics,personalization` where an unlisted scope is refused);
+ * - `Sec-GPC: 1` / `DNT: 1` → analytics off, like the browser client's `respectDnt` (default on).
+ *
+ * Unlike `getConsent()`, an absent cookie isn't "all denied": the edge can't tell a visitor who
+ * refused from one who was never asked, and refusing both would change every first page view.
+ */
+declare function edgeConsent(headers: Headers, opts?: {
+    prefix?: string;
+    respectDnt?: boolean;
+}): EdgeConsent;
+
+export { type CachedDecision as C, type DecideInput as D, type EdgeConsent as E, type GeoHeader as G, type LocalTime as L, type Manifest as M, type PublicManifest as P, type SwapGroup as S, type TrailView as T, type VariantSwap as V, type XeniaEdge as X, type DecideOutcome as a, type DecideResult as b, type DecisionCache as c, type DecisionSource as d, type EdgeDecision as e, type EdgeFacts as f, type EdgeMode as g, type ManifestKey as h, type ProfileFacts as i, type ViewerGeo as j, type XeniaEdgeConfig as k, createXeniaEdge as l, decodeVariant as m, deviceOf as n, edgeConsent as o, encodeVariant as p, isBot as q, isPageLoad as r, isPrefetch as s, landingContext as t, localTime as u, memoryDecisionCache as v, seasonOf as w, swapGroups as x, viewerGeo as y };

package/dist/{cookie-names-CLqtmGBM.d.ts → cookie-names-BvUaW3uo.d.ts}

@@ -1,4 +1,4 @@
-import { y as RetryConfig, e as CircuitBreakerConfig, H as HttpMethod, J as JsonValue, K as XeniaAction, f as ConsentState } from './personalize-content-Clc1oMYY.js';
+import { r as RetryConfig, C as CircuitBreakerConfig, H as HttpMethod, J as JsonValue, X as XeniaAction, d as ConsentState } from './types-DgVHS4Qw.js';
 
 /** Returns true when running in a browser environment (SSR-safe). */
 declare function isBrowser(): boolean;

package/dist/{cookie-names-BACctagz.d.cts → cookie-names-CnL65Oly.d.cts}

@@ -1,4 +1,4 @@
-import { y as RetryConfig, e as CircuitBreakerConfig, H as HttpMethod, J as JsonValue, K as XeniaAction, f as ConsentState } from './personalize-content-Clc1oMYY.cjs';
+import { r as RetryConfig, C as CircuitBreakerConfig, H as HttpMethod, J as JsonValue, X as XeniaAction, d as ConsentState } from './types-DgVHS4Qw.cjs';
 
 /** Returns true when running in a browser environment (SSR-safe). */
 declare function isBrowser(): boolean;

package/dist/edge/index.cjs

@@ -0,0 +1,280 @@
+'use strict';
+
+var chunkYLMMTKQL_cjs = require('../chunk-YLMMTKQL.cjs');
+require('../chunk-WHGK55JP.cjs');
+require('../chunk-N5M4PI7C.cjs');
+
+// src/edge/matcher.ts
+function normalizePath(path) {
+  if (!path || !path.trim()) return "/";
+  let p = path.trim().toLowerCase();
+  const cut = Math.min(
+    ...["?", "#"].map((c) => p.includes(c) ? p.indexOf(c) : p.length)
+  );
+  p = p.slice(0, cut);
+  if (!p.startsWith("/")) p = "/" + p;
+  while (p.length > 1 && p.endsWith("/")) p = p.slice(0, -1);
+  return p;
+}
+var normalizeHost = (host) => (host ?? "").trim().toLowerCase().replace(/:\d+$/, "");
+function matches(pattern, host, path) {
+  if (!pattern) return false;
+  let patternPath = pattern;
+  if (!pattern.startsWith("/")) {
+    const slash = pattern.indexOf("/");
+    const patternHost = slash < 0 ? pattern : pattern.slice(0, slash);
+    if (patternHost !== host) return false;
+    patternPath = slash < 0 ? "/" : pattern.slice(slash);
+  }
+  if (patternPath === "/*") return true;
+  if (patternPath.endsWith("/*")) {
+    const prefix = patternPath.slice(0, -2);
+    return path === prefix || path.startsWith(prefix + "/");
+  }
+  return path === patternPath;
+}
+function matchesAny(patterns, host, path) {
+  if (!patterns?.length) return false;
+  const h = normalizeHost(host);
+  const p = normalizePath(path);
+  return patterns.some((pattern) => matches(pattern, h, p));
+}
+
+// src/edge/client.ts
+function memoryDecisionCache(maxEntries = 1e4) {
+  const entries = /* @__PURE__ */ new Map();
+  return {
+    get(key) {
+      const hit = entries.get(key);
+      if (!hit) return void 0;
+      entries.delete(key);
+      if (hit.expires < Date.now()) return void 0;
+      entries.set(key, hit);
+      return hit.value;
+    },
+    set(key, value, ttlMs) {
+      entries.delete(key);
+      entries.set(key, { value, expires: Date.now() + ttlMs });
+      while (entries.size > maxEntries) {
+        entries.delete(entries.keys().next().value);
+      }
+    }
+  };
+}
+var stableJson = (facts) => JSON.stringify(
+  Object.keys(facts ?? {}).sort().map((k) => [k, facts[k]])
+);
+function normalizeManifest(m) {
+  if ("keys" in m && Array.isArray(m.keys)) return m;
+  const pages = m.pages ?? [];
+  return {
+    version: m.version,
+    generatedAt: "",
+    keys: pages.map((p) => ({ contentKey: "", mode: "server", pages: [p] }))
+  };
+}
+function provisional(profile) {
+  const answers = profile?.answers;
+  if (!answers || typeof answers !== "object") return false;
+  const steps = Object.values(answers);
+  return steps.some((a) => a?.source === "signals" && a.jev === true) || steps.length > 0 && steps.every((a) => !a?.choice);
+}
+function createXeniaEdge(config) {
+  const baseUrl = config.baseUrl.replace(/\/+$/, "");
+  const budgetMs = config.budgetMs ?? 150;
+  const manifestWaitMs = config.manifestWaitMs ?? 300;
+  const manifestTtlMs = config.manifestTtlMs ?? 3e4;
+  const decisionTtlMs = config.decisionTtlMs ?? 30 * 6e4;
+  const provisionalDecisionTtlMs = config.provisionalDecisionTtlMs ?? 15e3;
+  const cache = config.cache ?? memoryDecisionCache();
+  const doFetch = config.fetch ?? fetch;
+  const onError = config.onError ?? (() => {
+  });
+  const auth = { Authorization: `Bearer ${config.token}` };
+  let manifest = config.initialManifest?.version ? normalizeManifest(config.initialManifest) : null;
+  let manifestAt = 0;
+  let refreshing = null;
+  const inflight = /* @__PURE__ */ new Map();
+  function refreshManifest() {
+    refreshing ??= (async () => {
+      try {
+        const res = await doFetch(config.manifestUrl ?? `${baseUrl}/api/personalization/edge/manifest`, {
+          headers: config.manifestUrl ? {} : { ...auth, ...manifest ? { "If-None-Match": `"${manifest.version}"` } : {} },
+          signal: AbortSignal.timeout(5e3),
+          cache: "no-store"
+        });
+        if (res.status === 304) {
+          manifestAt = Date.now();
+        } else if (res.ok) {
+          manifest = normalizeManifest(await res.json());
+          manifestAt = Date.now();
+        } else {
+          onError(new Error(`manifest ${res.status}`), "manifest");
+          manifestAt = Date.now();
+        }
+      } catch (e) {
+        onError(e, "manifest");
+        manifestAt = Date.now();
+      } finally {
+        refreshing = null;
+      }
+    })();
+    return refreshing;
+  }
+  async function currentManifest() {
+    if (Date.now() - manifestAt > manifestTtlMs) {
+      const pending = refreshManifest();
+      if (!manifest) {
+        await Promise.race([pending, new Promise((r) => setTimeout(r, manifestWaitMs))]);
+      }
+    }
+    return manifest;
+  }
+  async function match(host, path) {
+    const m = await currentManifest();
+    if (!m) return null;
+    return m.keys.filter((k) => k.mode !== "off" && matchesAny(k.pages, host, path));
+  }
+  async function decide(keys, input) {
+    const version = manifest?.version ?? "";
+    const contentKeys = keys.map((k) => k.contentKey).filter(Boolean).sort();
+    const scope = contentKeys.length ? contentKeys.join(",") : keys.flatMap((k) => k.pages).sort().join(",");
+    const cacheKey = [version, input.visitorId, scope, stableJson(input.cacheFacts)].join("|");
+    const cached = cache.get(cacheKey);
+    if (cached) return { decisions: cached.decisions, profile: cached.profile, source: "cache", ms: 0 };
+    const pending = inflight.get(cacheKey);
+    if (pending) return pending;
+    const call = (async () => {
+      const started = Date.now();
+      try {
+        const res = await doFetch(`${baseUrl}/api/personalization/edge/decide`, {
+          method: "POST",
+          headers: { ...auth, "Content-Type": "application/json" },
+          body: JSON.stringify({
+            contentKeys,
+            host: input.host,
+            path: input.path,
+            visitorId: input.visitorId,
+            facts: input.facts,
+            ...input.trail?.length ? { trail: input.trail } : {}
+          }),
+          signal: AbortSignal.timeout(input.budgetMs ?? budgetMs),
+          cache: "no-store"
+        });
+        if (!res.ok) {
+          onError(new Error(`decide ${res.status}`), "decide");
+          return { decisions: [], source: "error", ms: Date.now() - started };
+        }
+        const result = await res.json();
+        if (!Array.isArray(result?.decisions)) throw new Error("decide: reply has no decisions list");
+        const decisions = result.decisions.filter((d) => d && Array.isArray(d.swaps));
+        const answer = { decisions, profile: result.profile };
+        cache.set(cacheKey, answer, input.ttlMs?.(answer) ?? (provisional(result.profile) ? provisionalDecisionTtlMs : decisionTtlMs));
+        if (manifest && result.version && result.version !== manifest.version) {
+          void refreshManifest();
+        }
+        return { decisions, profile: result.profile, source: "xenia", ms: Date.now() - started };
+      } catch (e) {
+        const timedOut = e instanceof DOMException && e.name === "TimeoutError";
+        if (!timedOut) onError(e, "decide");
+        return { decisions: [], source: timedOut ? "timeout" : "error", ms: Date.now() - started };
+      } finally {
+        inflight.delete(cacheKey);
+      }
+    })();
+    inflight.set(cacheKey, call);
+    return call;
+  }
+  return { match, decide, refreshManifest };
+}
+
+Object.defineProperty(exports, "MAX_TRAIL", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.MAX_TRAIL; }
+});
+Object.defineProperty(exports, "TRAIL_MAX_AGE_S", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.TRAIL_MAX_AGE_S; }
+});
+Object.defineProperty(exports, "decodeVariant", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.decodeVariant; }
+});
+Object.defineProperty(exports, "deviceOf", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.deviceOf; }
+});
+Object.defineProperty(exports, "edgeConsent", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.edgeConsent; }
+});
+Object.defineProperty(exports, "encodeVariant", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.encodeVariant; }
+});
+Object.defineProperty(exports, "fetchManifest", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.fetchManifest; }
+});
+Object.defineProperty(exports, "isBot", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.isBot; }
+});
+Object.defineProperty(exports, "isPageLoad", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.isPageLoad; }
+});
+Object.defineProperty(exports, "isPrefetch", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.isPrefetch; }
+});
+Object.defineProperty(exports, "landingContext", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.landingContext; }
+});
+Object.defineProperty(exports, "localTime", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.localTime; }
+});
+Object.defineProperty(exports, "readTrail", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.readTrail; }
+});
+Object.defineProperty(exports, "seasonOf", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.seasonOf; }
+});
+Object.defineProperty(exports, "swapGroups", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.swapGroups; }
+});
+Object.defineProperty(exports, "trailCookieName", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.trailCookieName; }
+});
+Object.defineProperty(exports, "trailCookieValue", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.trailCookieValue; }
+});
+Object.defineProperty(exports, "trimManifest", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.trimManifest; }
+});
+Object.defineProperty(exports, "verifyWebhook", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.verifyWebhook; }
+});
+Object.defineProperty(exports, "viewerGeo", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.viewerGeo; }
+});
+Object.defineProperty(exports, "withView", {
+  enumerable: true,
+  get: function () { return chunkYLMMTKQL_cjs.withView; }
+});
+exports.createXeniaEdge = createXeniaEdge;
+exports.matchesAny = matchesAny;
+exports.memoryDecisionCache = memoryDecisionCache;
+exports.normalizePath = normalizePath;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/edge/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/edge/matcher.ts","../../src/edge/client.ts"],"names":[],"mappings":";;;;;;;AAUO,SAAS,cAAc,IAAA,EAAyC;AACrE,EAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,IAAA,CAAK,IAAA,IAAQ,OAAO,GAAA;AAClC,EAAA,IAAI,CAAA,GAAI,IAAA,CAAK,IAAA,EAAK,CAAE,WAAA,EAAY;AAChC,EAAA,MAAM,MAAM,IAAA,CAAK,GAAA;AAAA,IACf,GAAG,CAAC,GAAA,EAAK,GAAG,CAAA,CAAE,IAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAS,CAAC,CAAA,GAAI,CAAA,CAAE,QAAQ,CAAC,CAAA,GAAI,EAAE,MAAO;AAAA,GACpE;AACA,EAAA,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AAClB,EAAA,IAAI,CAAC,CAAA,CAAE,UAAA,CAAW,GAAG,CAAA,MAAO,GAAA,GAAM,CAAA;AAClC,EAAA,OAAO,CAAA,CAAE,MAAA,GAAS,CAAA,IAAK,CAAA,CAAE,QAAA,CAAS,GAAG,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AACzD,EAAA,OAAO,CAAA;AACT;AAEA,IAAM,aAAA,GAAgB,CAAC,IAAA,KAAA,CACpB,IAAA,IAAQ,EAAA,EAAI,IAAA,EAAK,CAAE,WAAA,EAAY,CAAE,OAAA,CAAQ,OAAA,EAAS,EAAE,CAAA;AAEvD,SAAS,OAAA,CAAQ,OAAA,EAAiB,IAAA,EAAc,IAAA,EAAuB;AACrE,EAAA,IAAI,CAAC,SAAS,OAAO,KAAA;AACrB,EAAA,IAAI,WAAA,GAAc,OAAA;AAClB,EAAA,IAAI,CAAC,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG;AAC5B,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AACjC,IAAA,MAAM,cAAc,KAAA,GAAQ,CAAA,GAAI,UAAU,OAAA,CAAQ,KAAA,CAAM,GAAG,KAAK,CAAA;AAChE,IAAA,IAAI,WAAA,KAAgB,MAAM,OAAO,KAAA;AACjC,IAAA,WAAA,GAAc,KAAA,GAAQ,CAAA,GAAI,GAAA,GAAM,OAAA,CAAQ,MAAM,KAAK,CAAA;AAAA,EACrD;AACA,EAAA,IAAI,WAAA,KAAgB,MAAM,OAAO,IAAA;AACjC,EAAA,IAAI,WAAA,CAAY,QAAA,CAAS,IAAI,CAAA,EAAG;AAC9B,IAAA,MAAM,MAAA,GAAS,WAAA,CAAY,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AACtC,IAAA,OAAO,IAAA,KAAS,MAAA,IAAU,IAAA,CAAK,UAAA,CAAW,SAAS,GAAG,CAAA;AAAA,EACxD;AACA,EAAA,OAAO,IAAA,KAAS,WAAA;AAClB;AAEO,SAAS,UAAA,CACd,QAAA,EACA,IAAA,EACA,IAAA,EACS;AACT,EAAA,IAAI,CAAC,QAAA,EAAU,MAAA,EAAQ,OAAO,KAAA;AAC9B,EAAA,MAAM,CAAA,GAAI,cAAc,IAAI,CAAA;AAC5B,EAAA,MAAM,CAAA,GAAI,cAAc,IAAI,CAAA;AAC5B,EAAA,OAAO,QAAA,CAAS,KAAK,CAAC,OAAA,KAAY,QAAQ,OAAA,EAAS,CAAA,EAAG,CAAC,CAAC,CAAA;AAC1D;;;AC0CO,SAAS,mBAAA,CAAoB,aAAa,GAAA,EAAuB;AACtE,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAwD;AAC5E,EAAA,OAAO;AAAA,IACL,IAAI,GAAA,EAAK;AACP,MAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAC3B,MAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,MAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAClB,MAAA,IAAI,GAAA,CAAI,OAAA,GAAU,IAAA,CAAK,GAAA,IAAO,OAAO,MAAA;AACrC,MAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,GAAG,CAAA;AACpB,MAAA,OAAO,GAAA,CAAI,KAAA;AAAA,IACb,CAAA;AAAA,IACA,GAAA,CAAI,GAAA,EAAK,KAAA,EAAO,KAAA,EAAO;AACrB,MAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAClB,MAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,EAAE,KAAA,EAAO,SAAS,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA,EAAO,CAAA;AACvD,MAAA,OAAO,OAAA,CAAQ,OAAO,UAAA,EAAY;AAChC,QAAA,OAAA,CAAQ,OAAO,OAAA,CAAQ,IAAA,EAAK,CAAE,IAAA,GAAO,KAAe,CAAA;AAAA,MACtD;AAAA,IACF;AAAA,GACF;AACF;AAEA,IAAM,UAAA,GAAa,CAAC,KAAA,KAClB,IAAA,CAAK,SAAA;AAAA,EACH,OAAO,IAAA,CAAK,KAAA,IAAS,EAAE,EACpB,IAAA,EAAK,CACL,GAAA,CAAI,CAAC,MAAM,CAAC,CAAA,EAAG,KAAA,CAAO,CAAC,CAAC,CAAC;AAC9B,CAAA;AAOF,SAAS,kBAAkB,CAAA,EAAwC;AACjE,EAAA,IAAI,UAAU,CAAA,IAAK,KAAA,CAAM,QAAQ,CAAA,CAAE,IAAI,GAAG,OAAO,CAAA;AACjD,EAAA,MAAM,KAAA,GAAS,CAAA,CAAqB,KAAA,IAAS,EAAC;AAC9C,EAAA,OAAO;AAAA,IACL,SAAS,CAAA,CAAE,OAAA;AAAA,IACX,WAAA,EAAa,EAAA;AAAA,IACb,IAAA,EAAM,KAAA,CAAM,GAAA,CAAI,CAAC,OAAO,EAAE,UAAA,EAAY,EAAA,EAAI,IAAA,EAAM,QAAA,EAAmB,KAAA,EAAO,CAAC,CAAC,GAAE,CAAE;AAAA,GAClF;AACF;AAUA,SAAS,YAAY,OAAA,EAAmD;AACtE,EAAA,MAAM,UAAU,OAAA,EAAS,OAAA;AACzB,EAAA,IAAI,CAAC,OAAA,IAAW,OAAO,OAAA,KAAY,UAAU,OAAO,KAAA;AACpD,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,MAAA,CAAO,OAA4F,CAAA;AACxH,EAAA,OAAO,KAAA,CAAM,KAAK,CAAC,CAAA,KAAM,GAAG,MAAA,KAAW,SAAA,IAAa,EAAE,GAAA,KAAQ,IAAI,KAAM,KAAA,CAAM,MAAA,GAAS,KAAK,KAAA,CAAM,KAAA,CAAM,CAAC,CAAA,KAAM,CAAC,GAAG,MAAM,CAAA;AAC3H;AAEO,SAAS,gBAAgB,MAAA,EAAyB;AACvD,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACjD,EAAA,MAAM,QAAA,GAAW,OAAO,QAAA,IAAY,GAAA;AACpC,EAAA,MAAM,cAAA,GAAiB,OAAO,cAAA,IAAkB,GAAA;AAChD,EAAA,MAAM,aAAA,GAAgB,OAAO,aAAA,IAAiB,GAAA;AAC9C,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,aAAA,IAAiB,EAAA,GAAK,GAAA;AACnD,EAAA,MAAM,wBAAA,GAA2B,OAAO,wBAAA,IAA4B,IAAA;AACpE,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,IAAS,mBAAA,EAAoB;AAClD,EAAA,MAAM,OAAA,GAAU,OAAO,KAAA,IAAS,KAAA;AAChC,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,KAAY,MAAM;AAAA,EAAC,CAAA,CAAA;AAC1C,EAAA,MAAM,OAAO,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,MAAA,CAAO,KAAK,CAAA,CAAA,EAAG;AAIvD,EAAA,IAAI,WAA4B,MAAA,CAAO,eAAA,EAAiB,UACpD,iBAAA,CAAkB,MAAA,CAAO,eAAe,CAAA,GACxC,IAAA;AACJ,EAAA,IAAI,UAAA,GAAa,CAAA;AACjB,EAAA,IAAI,UAAA,GAAmC,IAAA;AACvC,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAoC;AAGzD,EAAA,SAAS,eAAA,GAAiC;AACxC,IAAA,UAAA,KAAA,CAAgB,YAAY;AAC1B,MAAA,IAAI;AACF,QAAA,MAAM,MAAM,MAAM,OAAA,CAAQ,OAAO,WAAA,IAAe,CAAA,EAAG,OAAO,CAAA,kCAAA,CAAA,EAAsC;AAAA,UAC9F,SAAS,MAAA,CAAO,WAAA,GACZ,EAAC,GACD,EAAE,GAAG,IAAA,EAAM,GAAI,QAAA,GAAW,EAAE,iBAAiB,CAAA,CAAA,EAAI,QAAA,CAAS,OAAO,CAAA,CAAA,CAAA,EAAI,GAAI,EAAC,EAAG;AAAA,UACjF,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,GAAK,CAAA;AAAA,UACjC,KAAA,EAAO;AAAA,SACR,CAAA;AACD,QAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACtB,UAAA,UAAA,GAAa,KAAK,GAAA,EAAI;AAAA,QACxB,CAAA,MAAA,IAAW,IAAI,EAAA,EAAI;AACjB,UAAA,QAAA,GAAW,iBAAA,CAAmB,MAAM,GAAA,CAAI,IAAA,EAAoC,CAAA;AAC5E,UAAA,UAAA,GAAa,KAAK,GAAA,EAAI;AAAA,QACxB,CAAA,MAAO;AACL,UAAA,OAAA,CAAQ,IAAI,KAAA,CAAM,CAAA,SAAA,EAAY,IAAI,MAAM,CAAA,CAAE,GAAG,UAAU,CAAA;AACvD,UAAA,UAAA,GAAa,KAAK,GAAA,EAAI;AAAA,QACxB;AAAA,MACF,SAAS,CAAA,EAAG;AACV,QAAA,OAAA,CAAQ,GAAG,UAAU,CAAA;AACrB,QAAA,UAAA,GAAa,KAAK,GAAA,EAAI;AAAA,MACxB,CAAA,SAAE;AACA,QAAA,UAAA,GAAa,IAAA;AAAA,MACf;AAAA,IACF,CAAA,GAAG;AACH,IAAA,OAAO,UAAA;AAAA,EACT;AAGA,EAAA,eAAe,eAAA,GAA4C;AACzD,IAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,UAAA,GAAa,aAAA,EAAe;AAC3C,MAAA,MAAM,UAAU,eAAA,EAAgB;AAChC,MAAA,IAAI,CAAC,QAAA,EAAU;AACb,QAAA,MAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,OAAA,EAAS,IAAI,OAAA,CAAQ,CAAC,CAAA,KAAM,UAAA,CAAW,CAAA,EAAG,cAAc,CAAC,CAAC,CAAC,CAAA;AAAA,MACjF;AAAA,IACF;AACA,IAAA,OAAO,QAAA;AAAA,EACT;AAMA,EAAA,eAAe,KAAA,CAAM,MAAqB,IAAA,EAA6C;AACrF,IAAA,MAAM,CAAA,GAAI,MAAM,eAAA,EAAgB;AAChC,IAAA,IAAI,CAAC,GAAG,OAAO,IAAA;AACf,IAAA,OAAO,CAAA,CAAE,IAAA,CAAK,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,KAAS,KAAA,IAAS,UAAA,CAAW,CAAA,CAAE,KAAA,EAAO,IAAA,EAAM,IAAI,CAAC,CAAA;AAAA,EACjF;AAEA,EAAA,eAAe,MAAA,CAAO,MAAqB,KAAA,EAA4C;AACrF,IAAA,MAAM,OAAA,GAAU,UAAU,OAAA,IAAW,EAAA;AAIrC,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,UAAU,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA,EAAK;AACvE,IAAA,MAAM,QAAQ,WAAA,CAAY,MAAA,GAAS,WAAA,CAAY,IAAA,CAAK,GAAG,CAAA,GAAI,IAAA,CAAK,OAAA,CAAQ,CAAC,MAAM,CAAA,CAAE,KAAK,EAAE,IAAA,EAAK,CAAE,KAAK,GAAG,CAAA;AACvG,IAAA,MAAM,QAAA,GAAW,CAAC,OAAA,EAAS,KAAA,CAAM,SAAA,EAAW,KAAA,EAAO,UAAA,CAAW,KAAA,CAAM,UAAU,CAAC,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AAEzF,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,GAAA,CAAI,QAAQ,CAAA;AACjC,IAAA,IAAI,MAAA,EAAQ,OAAO,EAAE,SAAA,EAAW,MAAA,CAAO,SAAA,EAAW,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,MAAA,EAAQ,OAAA,EAAS,EAAA,EAAI,CAAA,EAAE;AAGlG,IAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAA;AACrC,IAAA,IAAI,SAAS,OAAO,OAAA;AAEpB,IAAA,MAAM,QAAQ,YAAoC;AAChD,MAAA,MAAM,OAAA,GAAU,KAAK,GAAA,EAAI;AACzB,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,CAAA,EAAG,OAAO,CAAA,gCAAA,CAAA,EAAoC;AAAA,UACtE,MAAA,EAAQ,MAAA;AAAA,UACR,OAAA,EAAS,EAAE,GAAG,IAAA,EAAM,gBAAgB,kBAAA,EAAmB;AAAA,UACvD,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,YACnB,WAAA;AAAA,YACA,MAAM,KAAA,CAAM,IAAA;AAAA,YACZ,MAAM,KAAA,CAAM,IAAA;AAAA,YACZ,WAAW,KAAA,CAAM,SAAA;AAAA,YACjB,OAAO,KAAA,CAAM,KAAA;AAAA,YACb,GAAI,MAAM,KAAA,EAAO,MAAA,GAAS,EAAE,KAAA,EAAO,KAAA,CAAM,KAAA,EAAM,GAAI;AAAC,WACrD,CAAA;AAAA,UACD,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,KAAA,CAAM,YAAY,QAAQ,CAAA;AAAA,UACtD,KAAA,EAAO;AAAA,SACR,CAAA;AACD,QAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,UAAA,OAAA,CAAQ,IAAI,KAAA,CAAM,CAAA,OAAA,EAAU,IAAI,MAAM,CAAA,CAAE,GAAG,QAAQ,CAAA;AACnD,UAAA,OAAO,EAAE,SAAA,EAAW,EAAC,EAAG,MAAA,EAAQ,SAAS,EAAA,EAAI,IAAA,CAAK,GAAA,EAAI,GAAI,OAAA,EAAQ;AAAA,QACpE;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAE/B,QAAA,IAAI,CAAC,MAAM,OAAA,CAAQ,MAAA,EAAQ,SAAS,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,qCAAqC,CAAA;AAC5F,QAAA,MAAM,SAAA,GAAY,MAAA,CAAO,SAAA,CAAU,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,IAAK,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,KAAK,CAAC,CAAA;AAC5E,QAAA,MAAM,MAAA,GAAS,EAAE,SAAA,EAAW,OAAA,EAAS,OAAO,OAAA,EAAQ;AACpD,QAAA,KAAA,CAAM,GAAA,CAAI,QAAA,EAAU,MAAA,EAAQ,KAAA,CAAM,KAAA,GAAQ,MAAM,CAAA,KAAM,WAAA,CAAY,MAAA,CAAO,OAAO,CAAA,GAAI,wBAAA,GAA2B,aAAA,CAAc,CAAA;AAC7H,QAAA,IAAI,YAAY,MAAA,CAAO,OAAA,IAAW,MAAA,CAAO,OAAA,KAAY,SAAS,OAAA,EAAS;AACrE,UAAA,KAAK,eAAA,EAAgB;AAAA,QACvB;AACA,QAAA,OAAO,EAAE,SAAA,EAAW,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,MAAA,EAAQ,OAAA,EAAS,EAAA,EAAI,IAAA,CAAK,GAAA,EAAI,GAAI,OAAA,EAAQ;AAAA,MACzF,SAAS,CAAA,EAAG;AACV,QAAA,MAAM,QAAA,GAAW,CAAA,YAAa,YAAA,IAAgB,CAAA,CAAE,IAAA,KAAS,cAAA;AACzD,QAAA,IAAI,CAAC,QAAA,EAAU,OAAA,CAAQ,CAAA,EAAG,QAAQ,CAAA;AAClC,QAAA,OAAO,EAAE,SAAA,EAAW,EAAC,EAAG,MAAA,EAAQ,QAAA,GAAW,SAAA,GAAY,OAAA,EAAS,EAAA,EAAI,IAAA,CAAK,GAAA,EAAI,GAAI,OAAA,EAAQ;AAAA,MAC3F,CAAA,SAAE;AACA,QAAA,QAAA,CAAS,OAAO,QAAQ,CAAA;AAAA,MAC1B;AAAA,IACF,CAAA,GAAG;AACH,IAAA,QAAA,CAAS,GAAA,CAAI,UAAU,IAAI,CAAA;AAC3B,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO,EAAE,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAC1C","file":"index.cjs","sourcesContent":["/**\n * Page matching for the Xenia manifest — a port of the backend's\n * `EdgePageMatcher`, which is the reference:\n *\n * - `/women`               exactly that path (case, trailing slash, query ignored)\n * - `/women/*`             `/women` and everything below it, not `/womenswear`\n * - `/*`                   every path\n * - `uk.example.com/women` that path on that host only; hostless patterns match any host\n */\n\nexport function normalizePath(path: string | null | undefined): string {\n  if (!path || !path.trim()) return \"/\";\n  let p = path.trim().toLowerCase();\n  const cut = Math.min(\n    ...[\"?\", \"#\"].map((c) => (p.includes(c) ? p.indexOf(c) : p.length)),\n  );\n  p = p.slice(0, cut);\n  if (!p.startsWith(\"/\")) p = \"/\" + p;\n  while (p.length > 1 && p.endsWith(\"/\")) p = p.slice(0, -1);\n  return p;\n}\n\nconst normalizeHost = (host: string | null | undefined) =>\n  (host ?? \"\").trim().toLowerCase().replace(/:\\d+$/, \"\");\n\nfunction matches(pattern: string, host: string, path: string): boolean {\n  if (!pattern) return false;\n  let patternPath = pattern;\n  if (!pattern.startsWith(\"/\")) {\n    const slash = pattern.indexOf(\"/\");\n    const patternHost = slash < 0 ? pattern : pattern.slice(0, slash);\n    if (patternHost !== host) return false;\n    patternPath = slash < 0 ? \"/\" : pattern.slice(slash);\n  }\n  if (patternPath === \"/*\") return true;\n  if (patternPath.endsWith(\"/*\")) {\n    const prefix = patternPath.slice(0, -2);\n    return path === prefix || path.startsWith(prefix + \"/\");\n  }\n  return path === patternPath;\n}\n\nexport function matchesAny(\n  patterns: readonly string[] | null | undefined,\n  host: string | null | undefined,\n  path: string | null | undefined,\n): boolean {\n  if (!patterns?.length) return false;\n  const h = normalizeHost(host);\n  const p = normalizePath(path);\n  return patterns.some((pattern) => matches(pattern, h, p));\n}\n","/**\n * Proxy-side Xenia client for the hybrid personalization flow:\n *\n * 1. `match()` — synchronous, in-memory: does any journey target this page?\n *    Answered from the manifest, refreshed in the background every\n *    `manifestTtlMs`. Pages no journey targets never call Xenia.\n * 2. `decide()` — for targeted pages only: a per-visitor decision cache hit\n *    costs nothing; a miss calls Xenia's `/decide` with a hard `budgetMs`\n *    deadline. Timeouts and errors resolve to \"no decision\" (base content),\n *    never an exception — Xenia can't slow down or break a page.\n *\n * Runtime-agnostic (only `fetch`, `AbortSignal`, `Map`). The decision cache is\n * per process; swap in `cache` for a shared store (Redis, edge KV).\n */\nimport { matchesAny } from \"./matcher\";\nimport type {\n  DecideResult,\n  DecisionSource,\n  EdgeDecision,\n  EdgeFacts,\n  Manifest,\n  ManifestKey,\n  ProfileFacts,\n  PublicManifest,\n  TrailView,\n} from \"./types\";\n\n/** What a visitor's cached decision holds: the decisions and the profile they were made with. */\nexport type CachedDecision = { decisions: EdgeDecision[]; profile?: ProfileFacts | null };\n\nexport type DecisionCache = {\n  get(key: string): CachedDecision | undefined;\n  set(key: string, value: CachedDecision, ttlMs: number): void;\n};\n\nexport type XeniaEdgeConfig = {\n  /** Xenia engine base URL, e.g. `https://engine.xeniamartech.com/xenia`. */\n  baseUrl: string;\n  /** A server-type SDK token. Never expose it to the browser. */\n  token: string;\n  /** Hard deadline for one `/decide` call. Default 150 ms. */\n  budgetMs?: number;\n  /**\n   * Where to read the manifest. Default: Xenia's `/edge/manifest` (with the token). A storefront\n   * can serve its own CDN-cached copy instead (e.g. a Next.js ISR route) — then no token is sent.\n   */\n  manifestUrl?: string;\n  /**\n   * A manifest baked in at build time. An instance starts with it in memory, so a cold start never\n   * waits: the first request uses it and triggers a background refresh. Empty version = none.\n   */\n  initialManifest?: Manifest | PublicManifest;\n  /** How long a cold start waits for the first manifest (only without `initialManifest`). Default 300 ms. */\n  manifestWaitMs?: number;\n  /** Manifest refresh interval. Default 30 s. */\n  manifestTtlMs?: number;\n  /** How long a visitor keeps a decision. Default 30 min (a session). */\n  decisionTtlMs?: number;\n  /**\n   * How long a provisional decision is kept (see `provisional`): Jev's answer, or the visitor's first\n   * signals, usually land seconds later, so the next view should ask again. Default 15 s.\n   */\n  provisionalDecisionTtlMs?: number;\n  cache?: DecisionCache;\n  fetch?: typeof fetch;\n  onError?: (error: unknown, context: string) => void;\n};\n\nexport type DecideInput = {\n  host: string | null;\n  path: string;\n  visitorId: string;\n  facts: EdgeFacts;\n  /** Facts that identify this visitor's context for caching (e.g. landing UTM, device). */\n  cacheFacts?: EdgeFacts;\n  /** The visitor's recent page views, most recent first (see `TrailView`). */\n  trail?: TrailView[];\n  /** This call's time budget, instead of the client's (a decision that calls a back office). */\n  budgetMs?: number;\n  /** How long to keep this call's answer, from what it said, instead of the client's. */\n  ttlMs?: (answer: CachedDecision) => number;\n};\n\nexport type DecideOutcome = {\n  decisions: EdgeDecision[];\n  /** The profile Xenia decided with (also on cache hits), when profiles are on. */\n  profile?: ProfileFacts | null;\n  source: DecisionSource;\n  /** Time spent in Xenia, 0 on a cache hit. */\n  ms: number;\n};\n\n/** Bounded in-memory LRU with per-entry expiry. */\nexport function memoryDecisionCache(maxEntries = 10_000): DecisionCache {\n  const entries = new Map<string, { value: CachedDecision; expires: number }>();\n  return {\n    get(key) {\n      const hit = entries.get(key);\n      if (!hit) return undefined;\n      entries.delete(key);\n      if (hit.expires < Date.now()) return undefined;\n      entries.set(key, hit); // most recently used last\n      return hit.value;\n    },\n    set(key, value, ttlMs) {\n      entries.delete(key);\n      entries.set(key, { value, expires: Date.now() + ttlMs });\n      while (entries.size > maxEntries) {\n        entries.delete(entries.keys().next().value as string);\n      }\n    },\n  };\n}\n\nconst stableJson = (facts: EdgeFacts | undefined) =>\n  JSON.stringify(\n    Object.keys(facts ?? {})\n      .sort()\n      .map((k) => [k, facts![k]]),\n  );\n\n/**\n * Xenia's manifest, or a storefront's trimmed public copy (`{version, pages}`). The trimmed form\n * becomes one key-less entry per page pattern: the proxy then decides by path, and Xenia picks the\n * content keys itself.\n */\nfunction normalizeManifest(m: Manifest | PublicManifest): Manifest {\n  if (\"keys\" in m && Array.isArray(m.keys)) return m;\n  const pages = (m as PublicManifest).pages ?? [];\n  return {\n    version: m.version,\n    generatedAt: \"\",\n    keys: pages.map((p) => ({ contentKey: \"\", mode: \"server\" as const, pages: [p] })),\n  };\n}\n\n/**\n * A provisional decision, to ask again soon:\n * - a Visitor Intent step that refines with Jev answered from its signals because Jev hasn't yet;\n * - Visitor Intent steps with no answer at all: the visitor's first signals may land any moment —\n *   and for a visitor who is the same in every browser from another browser,\n *   which this browser's cache facts (trail, clicks) never see.\n * Steps answered from signals alone change with the visitor's own views, which the cache facts do see.\n */\nfunction provisional(profile: ProfileFacts | null | undefined): boolean {\n  const answers = profile?.answers;\n  if (!answers || typeof answers !== \"object\") return false;\n  const steps = Object.values(answers as Record<string, { choice?: string | null; source?: string; jev?: boolean } | null>);\n  return steps.some((a) => a?.source === \"signals\" && a.jev === true) || (steps.length > 0 && steps.every((a) => !a?.choice));\n}\n\nexport function createXeniaEdge(config: XeniaEdgeConfig) {\n  const baseUrl = config.baseUrl.replace(/\\/+$/, \"\");\n  const budgetMs = config.budgetMs ?? 150;\n  const manifestWaitMs = config.manifestWaitMs ?? 300;\n  const manifestTtlMs = config.manifestTtlMs ?? 30_000;\n  const decisionTtlMs = config.decisionTtlMs ?? 30 * 60_000;\n  const provisionalDecisionTtlMs = config.provisionalDecisionTtlMs ?? 15_000;\n  const cache = config.cache ?? memoryDecisionCache();\n  const doFetch = config.fetch ?? fetch;\n  const onError = config.onError ?? (() => {});\n  const auth = { Authorization: `Bearer ${config.token}` };\n\n  // A bundled manifest is used right away; manifestAt 0 makes the first request refresh it in the\n  // background (currentManifest only blocks when there is no manifest at all).\n  let manifest: Manifest | null = config.initialManifest?.version\n    ? normalizeManifest(config.initialManifest)\n    : null;\n  let manifestAt = 0;\n  let refreshing: Promise<void> | null = null;\n  const inflight = new Map<string, Promise<DecideOutcome>>();\n\n  /** Fetch the manifest (304-aware); keeps the last good one on failure. */\n  function refreshManifest(): Promise<void> {\n    refreshing ??= (async () => {\n      try {\n        const res = await doFetch(config.manifestUrl ?? `${baseUrl}/api/personalization/edge/manifest`, {\n          headers: config.manifestUrl\n            ? {}\n            : { ...auth, ...(manifest ? { \"If-None-Match\": `\"${manifest.version}\"` } : {}) },\n          signal: AbortSignal.timeout(5_000),\n          cache: \"no-store\",\n        });\n        if (res.status === 304) {\n          manifestAt = Date.now();\n        } else if (res.ok) {\n          manifest = normalizeManifest((await res.json()) as Manifest | PublicManifest);\n          manifestAt = Date.now();\n        } else {\n          onError(new Error(`manifest ${res.status}`), \"manifest\");\n          manifestAt = Date.now(); // back off for a TTL before retrying\n        }\n      } catch (e) {\n        onError(e, \"manifest\");\n        manifestAt = Date.now();\n      } finally {\n        refreshing = null;\n      }\n    })();\n    return refreshing;\n  }\n\n  /** The current manifest; stale-while-revalidate, a bounded wait on cold start. */\n  async function currentManifest(): Promise<Manifest | null> {\n    if (Date.now() - manifestAt > manifestTtlMs) {\n      const pending = refreshManifest();\n      if (!manifest) {\n        await Promise.race([pending, new Promise((r) => setTimeout(r, manifestWaitMs))]);\n      }\n    }\n    return manifest;\n  }\n\n  /**\n   * The content keys targeting this page, or `null` when no manifest is\n   * available yet. An empty array means \"don't call Xenia\".\n   */\n  async function match(host: string | null, path: string): Promise<ManifestKey[] | null> {\n    const m = await currentManifest();\n    if (!m) return null;\n    return m.keys.filter((k) => k.mode !== \"off\" && matchesAny(k.pages, host, path));\n  }\n\n  async function decide(keys: ManifestKey[], input: DecideInput): Promise<DecideOutcome> {\n    const version = manifest?.version ?? \"\";\n    // Known keys are sent explicitly; with a trimmed manifest there are none, and Xenia selects\n    // the keys whose pages match the path. Either way the cache is shared by every page that\n    // matches the same keys / patterns (e.g. all of /women/*).\n    const contentKeys = keys.map((k) => k.contentKey).filter(Boolean).sort();\n    const scope = contentKeys.length ? contentKeys.join(\",\") : keys.flatMap((k) => k.pages).sort().join(\",\");\n    const cacheKey = [version, input.visitorId, scope, stableJson(input.cacheFacts)].join(\"|\");\n\n    const cached = cache.get(cacheKey);\n    if (cached) return { decisions: cached.decisions, profile: cached.profile, source: \"cache\", ms: 0 };\n\n    // Concurrent requests from one visitor (HTML + RSC prefetches) share a call.\n    const pending = inflight.get(cacheKey);\n    if (pending) return pending;\n\n    const call = (async (): Promise<DecideOutcome> => {\n      const started = Date.now();\n      try {\n        const res = await doFetch(`${baseUrl}/api/personalization/edge/decide`, {\n          method: \"POST\",\n          headers: { ...auth, \"Content-Type\": \"application/json\" },\n          body: JSON.stringify({\n            contentKeys,\n            host: input.host,\n            path: input.path,\n            visitorId: input.visitorId,\n            facts: input.facts,\n            ...(input.trail?.length ? { trail: input.trail } : {}),\n          }),\n          signal: AbortSignal.timeout(input.budgetMs ?? budgetMs),\n          cache: \"no-store\",\n        });\n        if (!res.ok) {\n          onError(new Error(`decide ${res.status}`), \"decide\");\n          return { decisions: [], source: \"error\", ms: Date.now() - started };\n        }\n        const result = (await res.json()) as DecideResult | null;\n        // A reply in the wrong shape is an error, never cached: it would break every view for the TTL.\n        if (!Array.isArray(result?.decisions)) throw new Error(\"decide: reply has no decisions list\");\n        const decisions = result.decisions.filter((d) => d && Array.isArray(d.swaps));\n        const answer = { decisions, profile: result.profile };\n        cache.set(cacheKey, answer, input.ttlMs?.(answer) ?? (provisional(result.profile) ? provisionalDecisionTtlMs : decisionTtlMs));\n        if (manifest && result.version && result.version !== manifest.version) {\n          void refreshManifest(); // journeys changed — pick up the new manifest\n        }\n        return { decisions, profile: result.profile, source: \"xenia\", ms: Date.now() - started };\n      } catch (e) {\n        const timedOut = e instanceof DOMException && e.name === \"TimeoutError\";\n        if (!timedOut) onError(e, \"decide\");\n        return { decisions: [], source: timedOut ? \"timeout\" : \"error\", ms: Date.now() - started };\n      } finally {\n        inflight.delete(cacheKey);\n      }\n    })();\n    inflight.set(cacheKey, call);\n    return call;\n  }\n\n  return { match, decide, refreshManifest };\n}\n\nexport type XeniaEdge = ReturnType<typeof createXeniaEdge>;\n"]}

package/dist/edge/index.d.cts

@@ -0,0 +1,61 @@
+import { M as Manifest, P as PublicManifest, T as TrailView } from '../consent-DgWdjsSy.cjs';
+export { C as CachedDecision, D as DecideInput, a as DecideOutcome, b as DecideResult, c as DecisionCache, d as DecisionSource, E as EdgeConsent, e as EdgeDecision, f as EdgeFacts, g as EdgeMode, G as GeoHeader, L as LocalTime, h as ManifestKey, i as ProfileFacts, S as SwapGroup, V as VariantSwap, j as ViewerGeo, X as XeniaEdge, k as XeniaEdgeConfig, l as createXeniaEdge, m as decodeVariant, n as deviceOf, o as edgeConsent, p as encodeVariant, q as isBot, r as isPageLoad, s as isPrefetch, t as landingContext, u as localTime, v as memoryDecisionCache, w as seasonOf, x as swapGroups, y as viewerGeo } from '../consent-DgWdjsSy.cjs';
+import '../types-DgVHS4Qw.cjs';
+
+/**
+ * Page matching for the Xenia manifest — a port of the backend's
+ * `EdgePageMatcher`, which is the reference:
+ *
+ * - `/women`               exactly that path (case, trailing slash, query ignored)
+ * - `/women/*`             `/women` and everything below it, not `/womenswear`
+ * - `/*`                   every path
+ * - `uk.example.com/women` that path on that host only; hostless patterns match any host
+ */
+declare function normalizePath(path: string | null | undefined): string;
+declare function matchesAny(patterns: readonly string[] | null | undefined, host: string | null | undefined, path: string | null | undefined): boolean;
+
+interface FetchManifestOptions {
+    /** Xenia engine base URL. Default the hosted engine. */
+    baseUrl?: string;
+    /** A server-type SDK token. */
+    token: string;
+    /** Default 5000 ms. */
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+    /** Extra fetch options, e.g. Next.js `{ next: { revalidate } }`. */
+    init?: RequestInit;
+}
+/** Xenia's manifest (`GET /api/personalization/edge/manifest`). Throws on a non-2xx answer. */
+declare function fetchManifest(opts: FetchManifestOptions): Promise<Manifest>;
+/**
+ * The manifest as a storefront may serve it publicly (e.g. from a CDN): the version and the page
+ * patterns any live journey targets — no content keys, modes or rules. A proxy reading it decides by
+ * path, and Xenia picks the content keys itself.
+ */
+declare function trimManifest(m: Manifest): PublicManifest;
+
+/**
+ * Whether a storefront webhook from Xenia is genuine and fresh:
+ * `X-Xenia-Signature: t=<unix s>,v1=<hex HMAC-SHA256(secret, "<t>.<body>")>`. Requests older than
+ * `toleranceS` are refused, so a captured request can't be replayed. Pass the raw body text.
+ */
+declare function verifyWebhook(input: {
+    headers: Headers;
+    body: string;
+}, secret: string, toleranceS?: number): Promise<boolean>;
+
+declare const MAX_TRAIL = 8;
+/** Cookie lifetime: a visit ends after 30 idle minutes, like the SDK's session. */
+declare const TRAIL_MAX_AGE_S: number;
+declare function trailCookieName(prefix?: string): string;
+/** The trail in a cookie value (raw or URI-encoded); anything malformed reads as no trail. */
+declare function readTrail(value: string | undefined | null): TrailView[];
+/**
+ * The trail with this view first: a revisit moves to the front and keeps its first time (its old
+ * time on page is dropped — this view's isn't known yet). The same array when `path` is already first.
+ */
+declare function withView(trail: TrailView[], path: string, now?: number): TrailView[];
+/** The cookie value for a trail (not URI-encoded; cookie setters encode it). */
+declare function trailCookieValue(trail: TrailView[]): string;
+
+export { type FetchManifestOptions, MAX_TRAIL, Manifest, PublicManifest, TRAIL_MAX_AGE_S, TrailView, fetchManifest, matchesAny, normalizePath, readTrail, trailCookieName, trailCookieValue, trimManifest, verifyWebhook, withView };