@xenia-martech/sdk-js 1.2.0-dev.3 → 1.2.0-dev.5

package/README.md

@@ -81,6 +81,7 @@ Ships **client-native** (`/client`), **React** (`/client/react`), **server-nativ
 - [Webhook actions](#webhook-actions)
 - [Theming with CSS variables](#theming-with-css-variables)
 - [Personalization](#personalization)
+- [Edge personalization](#edge-personalization)
 - [Analytics & conversions](#analytics--conversions)
 - [Recipes — end-to-end patterns](#recipes--end-to-end-patterns)
 - [API reference](#api-reference)
@@ -138,7 +139,8 @@ Building a plain HTML site (no npm, no bundler)? Skip the install and pull the p
 | `@xenia-martech/sdk-js/client` | browser, **framework-agnostic** | `createXeniaClient()` — identity, auto-tracking, action rendering. No React. Works from Vue, Angular, Svelte, or plain JS. |
 | `@xenia-martech/sdk-js/client/react` | browser + React | `<XeniaProvider>` + hooks (`useTrack`, `usePersonalization`, `useWebhook`, …), built on top of `/client`. |
 | `@xenia-martech/sdk-js/server` | Node / SSR / RSC | Server-side events, webhooks, personalization, and token minting. Stateless — identity passed explicitly. |
-| `@xenia-martech/sdk-js/next` | Next.js 15+ (App Router) | `xeniaProxy()` for `proxy.ts`/`middleware.ts` and `xeniaServerFromNext()` — the visitor cookie and URL context wired for you. Needs `next` (optional peer). |
+| `@xenia-martech/sdk-js/edge` | any (Node, edge functions, workers) | [Edge personalization](#edge-personalization): the manifest/decide client, page matching, signed variant URLs, webhook verification, request facts, page trail and consent for a storefront's proxy. No Next.js, React or DOM dependency. |
+| `@xenia-martech/sdk-js/next` | Next.js 15+ (App Router) | `xeniaProxy()` for `proxy.ts`/`middleware.ts` and `xeniaServerFromNext()` — the visitor cookie and URL context wired for you. `xeniaEdgeProxy()`, `createManifestRoute()` and `createRevalidateRoute()` for [edge personalization](#nextjs-one-call). Needs `next` (optional peer). |
 | `@xenia-martech/sdk-js/cms/contentful` | any | `contentfulAdapter()` for [CMS page personalization](#cms-page-personalization). |
 | `@xenia-martech/sdk-js/iife` | `<script>` tag | Prebuilt `window.Xenia` for sites without a bundler. |
 
@@ -434,7 +436,7 @@ Passed to `XeniaProvider`, `createXeniaClient`, `createXeniaServer`, or `Xenia.i
 | `token` | `string` | — | SDK Bearer token, sent as `Authorization: Bearer <token>` on every request. Required for `resolve()`/`resolveBatch()`; needed for events/webhooks only when a trigger node has its own auth token. |
 | `getToken` | `() => Promise<string> \| string` | — | Async token provider; cached until shortly before expiry. Overrides `token`. |
 | `visitorId` | `string` | — | Seeds (browser) or supplies (server) the SDK-owned visitor anchor. Server-side, this is how you bind the client to a request — see [Recipes](#recipes--end-to-end-patterns). |
-| `visitorCookie` | `boolean \| VisitorCookieOptions` | `true` | **Browser only.** Persists the visitor id to a first-party `<prefix>_vid` cookie (`xenia_vid` by default) so a same-origin server can read it via `getVisitorId()` and attribute a server-side event to a browser-entered journey. `false` disables it; an object tunes `domain`/`sameSite`/`secure`/`maxAgeDays` (defaults: `Lax`, 365 days). |
+| `visitorCookie` | `boolean \| VisitorCookieOptions` | `true` | **Browser only.** Persists the visitor id to a first-party `<prefix>_vid` cookie (`xenia_vid` by default) so a same-origin server can read it via `getVisitorId()` and attribute a server-side event to a browser-entered journey. `false` disables it; an object tunes `domain`/`sameSite`/`secure`/`maxAgeDays` (defaults: `Lax`, 365 days). `authoritative: true` makes the cookie win over the id stored in the browser, so when a server changes the visitor (a profile switch, a QA persona) the browser follows instead of writing its old id back. |
 | `prefix` | `string` | `"xenia"` | Storage keys, the `data-<prefix>` attribute name, **and the visitor/consent cookie names** (`<prefix>_vid`, `<prefix>_consent`). If you change it, pass the same prefix to the server helpers — `getVisitorId(header, prefix)` — or the server looks for a cookie the browser never wrote. |
 | `timeout` | `number` | `8000` | Per-request timeout (ms). |
 | `retry` | `{ attempts?, baseDelayMs? }` | `{2, 300}` | Retry policy; honors `Retry-After`. |
@@ -453,6 +455,11 @@ Passed to `XeniaProvider`, `createXeniaClient`, `createXeniaServer`, or `Xenia.i
 | `autoApplyActions` | `boolean` | `true` | Apply `xeniaActions` from webhook responses automatically. |
 | `persistResponses` | `boolean` | `true` | Persist saved webhook responses to `localStorage`. |
 | `respectDnt` | `boolean` | `true` | Honor `navigator.doNotTrack`/`globalPrivacyControl` by no-op'ing analytics-only `track()` calls entirely (not even queued). Journey triggers always fire regardless. |
+| `pageViews` | `boolean` | `false` | **Browser.** Sends `pageView` `{ title, searchTerm?, category? }` on the first page and every client-side navigation (`history.pushState`/`replaceState`, Back/Forward), once the new page's title is in (3 s at most). `<meta name="xenia-title">` replaces the title, `<meta name="xenia-category">` adds a category; `searchTerm` comes from `utm_term` or `q`. |
+| `pageLeave` | `boolean` | `false` | **Browser.** Sends `page_leave` `{ path, durationMs }` — the page's visible time — when it is left or first hidden. |
+| `trail` | `boolean` | `false` | **Browser.** Keeps the `<prefix>_trail` cookie [edge personalization](#edge-personalization) sends with `/decide`: client-side navigations, and the time on a page as the visitor leaves it. Only with analytics consent and no DNT/GPC. |
+| `contentClicks` | `boolean \| { root }` | `false` | **Browser.** Sends `content_click` `{ label, category? }` for a click on an image (or a card holding one image) inside `root` (default `main`): the image's alt text, and the first path segment of a same-site link around it. |
+| `navClicks` | `boolean \| { root }` | `false` | **Browser.** Sends `nav_click` `{ category, label }` for a same-site link inside `root` (default `header`). Content and nav clicks also bump the `<prefix>_clicks` cookie an edge proxy keys its decision cache on, so the next page is decided again. |
 | `messageTemplate` | `(ctx: MessageRenderContext) => string` | — | Replace the built-in card markup (as an HTML string) for every `banner`/`popup`/`modal`/`inline` action that doesn't supply its own `html`. Applies system-wide. |
 | `messageComponent` | `(container: HTMLElement, ctx: MessageMountContext) => void \| (() => void)` | — | Framework-native alternative to `messageTemplate` — mounts a real component (React, Vue, …) into `container` instead of an HTML string. Wins over `messageTemplate` when both are set. See [Framework-native components](#framework-native-components). |
 | `messageStyles` | `string` | — | Extra CSS appended to the message overlay's (shadow-scoped) stylesheet. |
@@ -802,6 +809,103 @@ The Webhook Response node's body carries a `xeniaContentSwaps` array — `{ iden
 
 ---
 
+## Edge personalization
+
+Personalize server-rendered pages without Xenia slowing them down. The storefront's proxy knows **which pages** any journey targets (the manifest) and calls Xenia's `POST /api/personalization/edge/decide` **only for those**, within a hard time budget, caching each visitor's decision for the session. Every failure — a timeout, an error, no manifest yet — serves base content; Xenia can't slow down or break a page. `/edge` uses only `fetch`, `AbortSignal`, Web Crypto and `Map`, so it runs in Node, edge functions and workers alike. It needs a **server**-type SDK token (never expose it to the browser).
+
+```ts
+import {
+  createXeniaEdge, deviceOf, edgeConsent, encodeVariant, isBot, isPageLoad, landingContext,
+  localTime, readTrail, swapGroups, trailCookieValue, viewerGeo, withView,
+} from "@xenia-martech/sdk-js/edge";
+
+const edge = createXeniaEdge({ baseUrl, token: process.env.XENIA_SDK_TOKEN!, budgetMs: 150 });
+
+// in your proxy, per page request:
+if (isBot(req.headers.get("user-agent"))) return next();
+const consent = edgeConsent(req.headers);                // see the table below
+const keys = await edge.match(host, path);               // [] → not targeted, don't call Xenia
+const { geo } = viewerGeo(req, { trust: ["x-vercel-ip-country"] }); // only the headers YOUR host sets
+const trail = withView(readTrail(cookies.get("xenia_trail")), path);
+const outcome = await edge.decide(keys ?? [], {
+  host, path, visitorId,
+  facts: { ...localTime(geo, new Date()), device: deviceOf(req.headers), path, ...(geo ? { geo } : {}) },
+  ...(consent.analytics ? { trail } : {}),
+});
+const groups = swapGroups(outcome.decisions);
+if (groups.length) rewrite(`/xv/${await encodeVariant(groups, secret, extra)}${path}`); // cached per variant
+```
+
+### Next.js: one call
+
+In Next.js, `xeniaEdgeProxy()` from `/next` runs that whole flow — bots and non-GET skipped, the visitor cookie (as `xeniaProxy()`), landing campaign and trail cookies, standard facts, consent, `/decide`, the rewrite and a `Server-Timing` header — and takes hooks for what is your site's own:
+
+```ts
+// proxy.ts
+import { createXeniaEdge } from "@xenia-martech/sdk-js/edge";
+import { xeniaEdgeProxy } from "@xenia-martech/sdk-js/next";
+
+const edge = createXeniaEdge({
+  baseUrl: process.env.XENIA_URL!,
+  token: process.env.XENIA_SDK_TOKEN!,
+  manifestUrl: `${process.env.URL}/api/xenia/manifest`, // your CDN copy (below)
+});
+
+export const proxy = (request: NextRequest) =>
+  xeniaEdgeProxy(request, {
+    edge,
+    variantSecret: process.env.XENIA_VARIANT_SECRET!,   // the /xv/<token>/… page decodes with it
+    skip: (path) => path.startsWith("/account"),         // no variant page: never decided
+    facts: (ctx) => ({ signed_in: Boolean(ctx.request.cookies.get("session")) }),
+  });
+```
+
+| Hook | For |
+|---|---|
+| `skip(path)` | Pages with no variant page — their views still join the trail. |
+| `prepare(ctx)` | Change the visitor, geo, landing or earlier trail before facts are built (profiles, QA personas). |
+| `facts(ctx)` / `cacheFacts(ctx)` | Your own facts on top of the standard ones, and what else should give a visitor a fresh decision. |
+| `budgetMs(ctx)` | A bigger budget for a decision that calls a back office. |
+| `alongside(ctx, keys)` | Work started before `/decide` and awaited after it; its result reaches the hooks below as `side`. |
+| `filterDecisions`, `extra`, `rewrite` | Drop decisions, carry data in the variant token, or render somewhere else (`null` = the page itself). |
+| `geoHeaders` | The location headers your host sets (see `viewerGeo`'s `trust`). Default none. |
+| `onDecision(info)` | Every exit (`skipped`, `not-targeted`, `no-consent`, `decided`, `error`) with the context, facts, outcome and response — debug output, extra cookies. |
+| `onError(error)` | Anything that threw — a hook, the edge client. The page is served with base content either way. |
+
+Two route factories serve the rest: `createManifestRoute({ token, baseUrl, revalidate })` for the public manifest copy (`export const GET`, with `export const revalidate = …` beside it), and `createRevalidateRoute({ secret, paths: ["/api/xenia/manifest"], onManifestChanged })` for Xenia's storefront webhook (`export const POST`), which regenerates the manifest the moment a journey changes.
+
+The page behind the rewrite reads the swaps back with `decodeVariant(token, secret)` — `null` for a token that is malformed or not signed with your secret, so a crafted URL can never render arbitrary entries — and applies them to its CMS content. The token holds only the swaps (plus your optional `extra`), identical for every visitor in the same variant, so each variant renders once and is then served from your ISR/CDN cache.
+
+| Export | What it does |
+|---|---|
+| `createXeniaEdge(config)` | `match(host, path)` from the manifest (stale-while-revalidate, ETag; seed it with `initialManifest` so a cold start never waits), `decide(keys, input)` with `budgetMs` (default 150 ms), a per-visitor decision cache (`memoryDecisionCache()` by default, any `DecisionCache` for a shared store) and in-flight de-duplication. `manifestUrl` reads a storefront's own CDN copy instead. |
+| `matchesAny(patterns, host, path)` | The manifest's page patterns: `/women`, `/women/*`, `/*`, `uk.example.com/women`. |
+| `fetchManifest(opts)` / `trimManifest(m)` | Xenia's manifest, and the public copy a storefront may serve from its CDN (version + page patterns only). |
+| `verifyWebhook({ headers, body }, secret)` | Checks Xenia's storefront webhook (`X-Xenia-Signature`), refusing anything older than 5 minutes. |
+| `swapGroups` / `encodeVariant` / `decodeVariant` | The signed variant token. `extra` that would make the token too long is left out. |
+| `viewerGeo`, `deviceOf`, `isBot`, `isPrefetch`, `isPageLoad`, `landingContext`, `localTime`, `seasonOf` | Request facts journey rules read. Geo must come from your edge, never Xenia's: `/decide` is server to server. `viewerGeo` always uses Netlify's runtime context and a runtime-attached `request.geo`, but reads a location **header** only when you list it in `trust` — a visitor can send any header, so name only the ones your host sets and overwrites (`x-vercel-ip-country` on Vercel, `cf-ipcountry` behind Cloudflare, `cloudfront-viewer-country` on CloudFront, `x-nf-geo`/`x-country` on Netlify, `x-xn-geo` from your own edge function). |
+| `readTrail` / `withView` / `trailCookieValue` | The visitor's recent page views (`xenia_trail`), sent with `/decide` so profile rules see views whose events haven't landed yet. |
+| `edgeConsent(headers)` | What the edge flow may do (below). |
+
+**Consent.** `edgeConsent` reads the `xenia_consent` cookie the browser client's `consent()` writes:
+
+| Signal | Effect |
+|---|---|
+| no consent cookie | no choice made: decide, send trail and landing facts, keep the trail and landing cookies |
+| `personalization: false` | don't call Xenia; serve base content |
+| `analytics: false` | still decide, but keep no trail or click cookies and send no trail |
+| `Sec-GPC: 1` or `DNT: 1` | treated as `analytics: false` (pass `respectDnt: false` to ignore them) |
+
+**Browser signals.** `<XeniaProvider pageViews pageLeave trail navClicks contentClicks>` (or the same `createXeniaClient` options) sends what a visitor profile reads — page views, time on page, header navigation and content clicks — and keeps the trail cookie the proxy forwards, so a decision already sees the page the visitor just left.
+
+**Debugging and QA.** `xeniaEdgeProxy({ debug, qa })` — turn both on only in development or on a QA deploy (e.g. `debug: process.env.NODE_ENV === "development"`):
+
+- `debug: true` writes what was decided for each of the last few pages to the `xenia_debug` cookie. Render `<XeniaDebugPanel />` from `/client/react` behind the same flag: a round Xenia launcher in the corner opens a small white card, like Next.js's dev tools menu, with the status, page, source and location, the decision per content key (click a key for the journey path it took), and the visitor profile. `position` picks the corner (default bottom-right, away from Next.js's own dev tools).
+- Your own data: return `custom` from `debugInfo(info)` — `{ Moment: "thursday 12:00", Household: ["Emma: blue, shoes", "John: no taste"] }` — and the card shows each key as a row (a list one line per item). `renderExtra(page)` remains for anything else.
+- `qa: true` lets a tester place the visitor in a city (`?xn_geo=london`, from `QA_CITIES` or your own `qa: { cities }`), decide as of a day (`?xn_date=2026-12-24`), and forget both with `?xn_geo=off`; under `next dev`, `?xn_country=GB` too. The overrides last the visit.
+
+**Impressions and clicks.** Stamp a section Xenia personalized with `data-xenia-slot="<field>"`, `data-xenia-content-entry-id`, `data-xenia-base-entry-id`, `data-xenia-bucket="personalized"` and (when known) `data-xenia-content-key`; the browser client reports `personalization_impression` (half the section in view, or half the screen for a taller one) and `personalization_click` (with the clicked link's or button's `label`; `slotClicks: "controls"` counts only those clicks, not clicks on a section's copy or images). A `display: contents` wrapper works — its first child is watched. Exposures are recorded by `/decide` itself; don't report them again.
+
 ## Analytics & conversions
 
 `track(eventName, props?, opts?)` with the default `opts.trigger: false` records a canonical analytics event — batched client-side and posted to the unified `POST /api/events/v1`. It records a fact for analytics/attribution/reporting and does **not** advance a journey. Set `opts.trigger: true` to *also* match/advance a journey from the same call.

package/dist/{actions-Bhji05Pe.d.cts → actions-C18Kv-4w.d.cts}

@@ -149,6 +149,12 @@ interface VisitorCookieOptions {
     secure?: boolean;
     /** Cookie lifetime in days. Default 365. */
     maxAgeDays?: number;
+    /**
+     * The cookie wins over the id stored in this browser: when a server (e.g. an edge proxy) changes
+     * the visitor — a profile switch, a QA persona — the browser follows instead of writing its old id
+     * back. Default false: the stored id wins and the cookie only seeds a first visit.
+     */
+    authoritative?: boolean;
 }
 /** Well-known event fields understood by the backend event-trigger node. */
 interface EventIdentity {
@@ -998,6 +1004,33 @@ interface XeniaClientOptions extends XeniaConfig {
      * triggers (`track(..., { trigger: true })`) always fire. Default true.
      */
     respectDnt?: boolean;
+    /**
+     * Report a `pageView` (`{ title, searchTerm?, category? }`) on the first page and every client-side
+     * navigation, once the new page's title is in. `<meta name="xenia-title">` / `xenia-category`
+     * override the title / add a category. For single-page apps. Default false.
+     */
+    pageViews?: boolean;
+    /** Report `page_leave` (`{ path, durationMs }`, visible time) when a page is left or first hidden. Default false. */
+    pageLeave?: boolean;
+    /**
+     * Keep the page trail cookie (`<prefix>_trail`) an edge proxy sends with `/decide`: client-side
+     * navigations, and the time on a page as the visitor leaves it. Only with analytics consent and no
+     * DNT/GPC. Default false.
+     */
+    trail?: boolean;
+    /** Report `content_click` `{ label, category? }` for clicks on images (or cards holding one) inside `root` (default `main`). Default false. */
+    contentClicks?: boolean | {
+        root?: string;
+    };
+    /** Report `nav_click` `{ category, label }` for same-site links inside `root` (default `header`). Default false. */
+    navClicks?: boolean | {
+        root?: string;
+    };
+    /**
+     * Which clicks inside a `[data-xenia-slot]` section are a `personalization_click`: `any` (default)
+     * or only clicks on its links and buttons (`controls`).
+     */
+    slotClicks?: "any" | "controls";
 }
 /** Events emitted by the client for observability. */
 type ClientEvent = "event" | "response" | "actions" | "error" | "identify";
@@ -1014,6 +1047,8 @@ declare class XeniaClient {
     private readonly renderer;
     private readonly analyticsQueue;
     private tracker;
+    private stopPageTracking;
+    private stopEngagement;
     /** The in-flight (or finished) boot; shared so concurrent `init()` calls start one tracker. */
     private booting;
     /** Bumped by `destroy()`, so a boot still waiting on the device id knows to stop. */

package/dist/{actions-Bhji05Pe.d.ts → actions-C18Kv-4w.d.ts}

@@ -149,6 +149,12 @@ interface VisitorCookieOptions {
     secure?: boolean;
     /** Cookie lifetime in days. Default 365. */
     maxAgeDays?: number;
+    /**
+     * The cookie wins over the id stored in this browser: when a server (e.g. an edge proxy) changes
+     * the visitor — a profile switch, a QA persona — the browser follows instead of writing its old id
+     * back. Default false: the stored id wins and the cookie only seeds a first visit.
+     */
+    authoritative?: boolean;
 }
 /** Well-known event fields understood by the backend event-trigger node. */
 interface EventIdentity {
@@ -998,6 +1004,33 @@ interface XeniaClientOptions extends XeniaConfig {
      * triggers (`track(..., { trigger: true })`) always fire. Default true.
      */
     respectDnt?: boolean;
+    /**
+     * Report a `pageView` (`{ title, searchTerm?, category? }`) on the first page and every client-side
+     * navigation, once the new page's title is in. `<meta name="xenia-title">` / `xenia-category`
+     * override the title / add a category. For single-page apps. Default false.
+     */
+    pageViews?: boolean;
+    /** Report `page_leave` (`{ path, durationMs }`, visible time) when a page is left or first hidden. Default false. */
+    pageLeave?: boolean;
+    /**
+     * Keep the page trail cookie (`<prefix>_trail`) an edge proxy sends with `/decide`: client-side
+     * navigations, and the time on a page as the visitor leaves it. Only with analytics consent and no
+     * DNT/GPC. Default false.
+     */
+    trail?: boolean;
+    /** Report `content_click` `{ label, category? }` for clicks on images (or cards holding one) inside `root` (default `main`). Default false. */
+    contentClicks?: boolean | {
+        root?: string;
+    };
+    /** Report `nav_click` `{ category, label }` for same-site links inside `root` (default `header`). Default false. */
+    navClicks?: boolean | {
+        root?: string;
+    };
+    /**
+     * Which clicks inside a `[data-xenia-slot]` section are a `personalization_click`: `any` (default)
+     * or only clicks on its links and buttons (`controls`).
+     */
+    slotClicks?: "any" | "controls";
 }
 /** Events emitted by the client for observability. */
 type ClientEvent = "event" | "response" | "actions" | "error" | "identify";
@@ -1014,6 +1047,8 @@ declare class XeniaClient {
     private readonly renderer;
     private readonly analyticsQueue;
     private tracker;
+    private stopPageTracking;
+    private stopEngagement;
     /** The in-flight (or finished) boot; shared so concurrent `init()` calls start one tracker. */
     private booting;
     /** Bumped by `destroy()`, so a boot still waiting on the device id knows to stop. */

package/dist/{api-ByoECRhR.d.ts → api-0IycTYJR.d.cts}

@@ -1,4 +1,4 @@
-import { L as XeniaConfig, J as JsonValue, W as WebhookResponse, F as WidgetSubmitResponse, N as XeniaEvent, c as AnalyticsIngestResponse, I as IdentifyRequest, m as IdentifyResponse, f as ConsentState, w as ResolveOptions, x as ResolveResult, R as ResolveBatchItem, u as ResolveBatchResult, v as ResolveEntriesResult } from './personalize-content-Bf6YZdkZ.js';
+import { x as XeniaConfig, J as JsonValue, W as WebhookResponse, v as WidgetSubmitResponse, y as XeniaEvent, c as AnalyticsIngestResponse, I as IdentifyRequest, j as IdentifyResponse, d as ConsentState, p as ResolveOptions, q as ResolveResult, R as ResolveBatchItem, n as ResolveBatchResult, o as ResolveEntriesResult } from './types-DgVHS4Qw.cjs';
 
 /**
  * Low-level, isomorphic Xenia API client. Wraps the raw endpoints; identity,

package/dist/{api-BqSvWgBZ.d.cts → api-COXWLL5L.d.ts}

@@ -1,4 +1,4 @@
-import { L as XeniaConfig, J as JsonValue, W as WebhookResponse, F as WidgetSubmitResponse, N as XeniaEvent, c as AnalyticsIngestResponse, I as IdentifyRequest, m as IdentifyResponse, f as ConsentState, w as ResolveOptions, x as ResolveResult, R as ResolveBatchItem, u as ResolveBatchResult, v as ResolveEntriesResult } from './personalize-content-Bf6YZdkZ.cjs';
+import { x as XeniaConfig, J as JsonValue, W as WebhookResponse, v as WidgetSubmitResponse, y as XeniaEvent, c as AnalyticsIngestResponse, I as IdentifyRequest, j as IdentifyResponse, d as ConsentState, p as ResolveOptions, q as ResolveResult, R as ResolveBatchItem, n as ResolveBatchResult, o as ResolveEntriesResult } from './types-DgVHS4Qw.js';
 
 /**
  * Low-level, isomorphic Xenia API client. Wraps the raw endpoints; identity,

package/dist/{chunk-TRRMMPBH.cjs → chunk-2DR5AVPX.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkYZG6JR4E_cjs = require('./chunk-YZG6JR4E.cjs');
+var chunkRWE2OCQL_cjs = require('./chunk-RWE2OCQL.cjs');
 
 // src/core/event-payload.ts
 var RESERVED = /* @__PURE__ */ new Set([
@@ -70,7 +70,7 @@ var XeniaServer = class {
   /** Ambient request context attached to every call — see {@link XeniaConfig.context}. */
   context;
   constructor(config) {
-    this.api = new chunkYZG6JR4E_cjs.XeniaApi(config);
+    this.api = new chunkRWE2OCQL_cjs.XeniaApi(config);
     this.visitorId = config.visitorId;
     this.context = config.context;
   }
@@ -83,7 +83,7 @@ var XeniaServer = class {
   async track(eventName, opts = {}) {
     const event = {
       eventName,
-      eventId: opts.eventId ? chunkYZG6JR4E_cjs.toEventId(opts.eventId) : chunkYZG6JR4E_cjs.generateUlid(),
+      eventId: opts.eventId ? chunkRWE2OCQL_cjs.toEventId(opts.eventId) : chunkRWE2OCQL_cjs.generateUlid(),
       eventVersion: opts.eventVersion ?? 1,
       occurredAtMs: opts.occurredAtMs ?? Date.now(),
       source: opts.source ?? "xenia-server-sdk",
@@ -164,7 +164,7 @@ var XeniaServer = class {
    * Pass `opts.identity`/`opts.context` like `resolve()`.
    */
   async personalizeContent(page, opts) {
-    return chunkYZG6JR4E_cjs.personalizeContent(page, { ...opts, resolve: this.entryResolver(opts) });
+    return chunkRWE2OCQL_cjs.personalizeContent(page, { ...opts, resolve: this.entryResolver(opts) });
   }
   /**
    * Fetch a page through `opts.cms` and personalize it — the app passes only the page's identity
@@ -172,7 +172,7 @@ var XeniaServer = class {
    * null` with `error`, a missing page `content: null`.
    */
   async personalizePage(ref, opts) {
-    return chunkYZG6JR4E_cjs.personalizePage(ref, { ...opts, resolve: this.entryResolver(opts) });
+    return chunkRWE2OCQL_cjs.personalizePage(ref, { ...opts, resolve: this.entryResolver(opts) });
   }
   entryResolver(opts) {
     const resolveOpts = this.withVisitor({
@@ -199,13 +199,13 @@ var XeniaServer = class {
    * nothing was passed — preserving today's behavior for callers using neither.
    */
   withVisitor(opts) {
-    const identity = chunkYZG6JR4E_cjs.compact({
+    const identity = chunkRWE2OCQL_cjs.compact({
       ...opts?.identity,
       visitorId: this.visitorId ?? opts?.identity?.visitorId
     });
     const merged = {
-      ...chunkYZG6JR4E_cjs.compact(this.context ?? {}),
-      ...chunkYZG6JR4E_cjs.compact(opts?.context ?? {}),
+      ...chunkRWE2OCQL_cjs.compact(this.context ?? {}),
+      ...chunkRWE2OCQL_cjs.compact(opts?.context ?? {}),
       ...identity
     };
     if (Object.keys(merged).length === 0 && !this.visitorId) return opts;
@@ -217,42 +217,7 @@ function createXeniaServer(config) {
   return new XeniaServer(config);
 }
 
-// src/server/cookies.ts
-function parseCookies(header) {
-  const out = {};
-  if (!header) return out;
-  for (const part of header.split(";")) {
-    const idx = part.indexOf("=");
-    if (idx === -1) continue;
-    const key = part.slice(0, idx).trim();
-    const value = part.slice(idx + 1).trim();
-    if (key) out[key] = decodeURIComponent(value);
-  }
-  return out;
-}
-function getVisitorId(cookieHeader, prefix) {
-  return parseCookies(cookieHeader)[chunkYZG6JR4E_cjs.visitorCookieName(prefix)] ?? null;
-}
-function getConsent(cookieHeader, prefix) {
-  const raw = parseCookies(cookieHeader)[chunkYZG6JR4E_cjs.consentCookieName(prefix)];
-  if (!raw) return { analytics: false, marketing: false, personalization: false };
-  try {
-    const parsed = JSON.parse(raw);
-    return parsed;
-  } catch {
-    const scopes = new Set(raw.split(",").map((s) => s.trim()));
-    return {
-      analytics: scopes.has("analytics"),
-      marketing: scopes.has("marketing"),
-      personalization: scopes.has("personalization")
-    };
-  }
-}
-
 exports.XeniaServer = XeniaServer;
 exports.createXeniaServer = createXeniaServer;
-exports.getConsent = getConsent;
-exports.getVisitorId = getVisitorId;
-exports.parseCookies = parseCookies;
-//# sourceMappingURL=chunk-TRRMMPBH.cjs.map
-//# sourceMappingURL=chunk-TRRMMPBH.cjs.map
+//# sourceMappingURL=chunk-2DR5AVPX.cjs.map
+//# sourceMappingURL=chunk-2DR5AVPX.cjs.map

package/dist/chunk-2DR5AVPX.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/event-payload.ts","../src/server/xenia-server.ts"],"names":["compact","XeniaApi","toEventId","generateUlid","personalizeContent","personalizePage"],"mappings":";;;;;AAGA,IAAM,QAAA,uBAAe,GAAA,CAAI;AAAA,EACvB,SAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA,OAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACA,YAAA;AAAA,EACA,OAAA;AAAA,EACA,KAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF,CAAC,CAAA;AAaD,SAASA,SAAQ,GAAA,EAAuE;AACtF,EAAA,MAAM,MAAiC,EAAC;AACxC,EAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AACxC,IAAA,IAAI,CAAA,KAAM,MAAA,EAAW,GAAA,CAAI,CAAC,CAAA,GAAI,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,GAAA;AACT;AAWO,SAAS,kBAAkB,KAAA,EAAsC;AACtE,EAAA,MAAM,cAAyC,EAAC;AAChD,EAAA,MAAM,WAAsC,EAAC;AAC7C,EAAA,IAAI,MAAM,KAAA,EAAO;AACf,IAAA,KAAA,MAAW,CAAC,GAAG,CAAC,CAAA,IAAK,OAAO,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAA,EAAG;AAChD,MAAA,IAAI,MAAM,MAAA,EAAW;AAKrB,MAAA,IAAI,SAAS,GAAA,CAAI,CAAC,CAAA,EAAG,QAAA,CAAS,CAAC,CAAA,GAAI,CAAA;AAAA,WAC9B,WAAA,CAAY,CAAC,CAAA,GAAI,CAAA;AAAA,IACxB;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU;AAAA,IACd,GAAG,WAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKH,GAAG,QAAA;AAAA,IACH,GAAGA,QAAAA,CAAS,KAAA,CAAM,OAAA,IAAW,EAA4C,CAAA;AAAA,IACzE,GAAGA,QAAAA,CAAS,KAAA,CAAM,QAAA,IAAY,EAA4C,CAAA;AAAA,IAC1E,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,GAAI,MAAM,SAAA,GAAY,EAAE,WAAW,KAAA,CAAM,SAAA,KAAc,EAAC;AAAA,IACxD,GAAI,MAAM,SAAA,GAAY,EAAE,WAAW,KAAA,CAAM,SAAA,KAAc;AAAC,GAC1D;AAEA,EAAA,OAAO,OAAA;AACT;;;ACzBA,eAAe,UAAA,CAAiB,MAAwB,IAAA,EAAwC;AAC9F,EAAA,IAAI,CAAC,IAAA,IAAQ,EAAE,UAAA,IAAc,IAAA,CAAA,SAAc,IAAA,EAAK;AAChD,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,IAAA,EAAK;AAAA,EACpB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA,CAAK,QAAA;AAAA,EACd;AACF;AA8BO,IAAM,cAAN,MAAkB;AAAA,EACd,GAAA;AAAA;AAAA,EAEA,SAAA;AAAA;AAAA,EAEQ,OAAA;AAAA,EAEjB,YAAY,MAAA,EAAqB;AAC/B,IAAA,IAAA,CAAK,GAAA,GAAM,IAAIC,0BAAA,CAAS,MAAM,CAAA;AAC9B,IAAA,IAAA,CAAK,YAAY,MAAA,CAAO,SAAA;AACxB,IAAA,IAAA,CAAK,UAAU,MAAA,CAAO,OAAA;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,KAAA,CACJ,SAAA,EACA,IAAA,GAA2B,EAAC,EACM;AAClC,IAAA,MAAM,KAAA,GAAoB;AAAA,MACxB,SAAA;AAAA,MACA,SAAS,IAAA,CAAK,OAAA,GAAUC,4BAAU,IAAA,CAAK,OAAO,IAAIC,8BAAA,EAAa;AAAA,MAC/D,YAAA,EAAc,KAAK,YAAA,IAAgB,CAAA;AAAA,MACnC,YAAA,EAAc,IAAA,CAAK,YAAA,IAAgB,IAAA,CAAK,GAAA,EAAI;AAAA,MAC5C,MAAA,EAAQ,KAAK,MAAA,IAAU,kBAAA;AAAA,MACvB,QAAA,EAAU;AAAA,QACR,GAAG,IAAA,CAAK,QAAA;AAAA;AAAA;AAAA,QAGR,gBAAgB,IAAA,CAAK;AAAA,OACvB;AAAA,MACA,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,OAAA,EAAS,IAAA,CAAK,OAAA,KAAY,IAAA,GAAO,IAAA,GAAO;AAAA,KAC1C;AACA,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,UAAA,CAAW,CAAC,KAAK,CAAC,CAAA;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,OAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,GAAgC,EAAC,EACH;AAC9B,IAAA,MAAM,UAAU,iBAAA,CAAkB;AAAA,MAChC,OAAA,EAAS,SAAA;AAAA,MACT,WAAW,IAAA,CAAK,SAAA;AAAA;AAAA;AAAA;AAAA,MAIhB,QAAA,EAAU,EAAE,GAAG,IAAA,CAAK,QAAA,EAAU,WAAW,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU;AAAA;AAAA;AAAA,MAGpF,SAAS,EAAE,GAAG,KAAK,OAAA,EAAS,GAAG,KAAK,OAAA,EAAQ;AAAA,MAC5C,KAAA,EAAO;AAAA,KACR,CAAA;AACD,IAAA,OAAO,UAAA,CAAW,MAAM,IAAA,CAAK,GAAA,CAAI,OAAA,CAAQ,SAAA,EAAW,OAAA,EAAsB,IAAA,CAAK,MAAA,IAAU,MAAM,CAAA,EAAG,IAAI,CAAA;AAAA,EACxG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SACJ,IAAA,EAC2B;AAC3B,IAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,cAAA,IAAkB,IAAA,CAAK,SAAA;AACnD,IAAA,IAAI,CAAC,cAAA,EAAgB;AACnB,MAAA,MAAM,IAAI,MAAM,0EAA0E,CAAA;AAAA,IAC5F;AACA,IAAA,OAAO,KAAK,GAAA,CAAI,QAAA,CAAS,EAAE,GAAG,IAAA,EAAM,gBAAgB,CAAA;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,OAAA,CAAmB,UAAA,EAAoB,IAAA,EAA4D;AACvG,IAAA,OAAO,UAAA,CAAW,MAAM,IAAA,CAAK,GAAA,CAAI,OAAA,CAAQ,UAAA,EAAY,IAAA,CAAK,WAAA,CAAY,IAAI,CAAC,CAAA,EAAG,IAAI,CAAA;AAAA,EACpF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,YAAA,CACJ,KAAA,EACA,IAAA,EACmC;AACnC,IAAA,OAAO,UAAA,CAAW,MAAM,IAAA,CAAK,GAAA,CAAI,YAAA,CAAa,KAAA,EAAO,IAAA,CAAK,WAAA,CAAY,IAAI,CAAC,CAAA,EAAG,IAAI,CAAA;AAAA,EACpF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,kBAAA,CAAsB,IAAA,EAAS,IAAA,EAAoE;AACvG,IAAA,OAAOC,oCAAA,CAAmB,IAAA,EAAM,EAAE,GAAG,IAAA,EAAM,SAAS,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA,EAAG,CAAA;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,eAAA,CAA6B,GAAA,EAAc,IAAA,EAA2E;AAC1H,IAAA,OAAOC,iCAAA,CAAmB,GAAA,EAAK,EAAE,GAAG,IAAA,EAAM,SAAS,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA,EAAG,CAAA;AAAA,EAC/E;AAAA,EAEQ,cAAc,IAAA,EAA6C;AACjE,IAAA,MAAM,WAAA,GAAc,KAAK,WAAA,CAAY;AAAA,MACnC,MAAM,IAAA,CAAK,IAAA;AAAA,MAAM,QAAQ,IAAA,CAAK,MAAA;AAAA,MAAQ,UAAU,IAAA,CAAK,QAAA;AAAA,MAAU,SAAS,IAAA,CAAK;AAAA,KAC9E,CAAA;AACD,IAAA,OAAO,OAAO,GAAA,KAAA,CACX,MAAM,IAAA,CAAK,GAAA,CAAI,eAAe,GAAA,EAAK,EAAE,GAAG,WAAA,EAAa,YAAY,IAAA,CAAK,UAAA,EAAY,CAAA,EAAG,aAAa,EAAC;AAAA,EACxG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBQ,YAAY,IAAA,EAAmD;AACrE,IAAA,MAAM,WAAWL,yBAAA,CAAQ;AAAA,MACvB,GAAG,IAAA,EAAM,QAAA;AAAA,MACT,SAAA,EAAW,IAAA,CAAK,SAAA,IAAa,IAAA,EAAM,QAAA,EAAU;AAAA,KAC9C,CAAA;AACD,IAAA,MAAM,MAAA,GAAS;AAAA,MACb,GAAGA,yBAAA,CAAS,IAAA,CAAK,OAAA,IAAW,EAA4C,CAAA;AAAA,MACxE,GAAGA,yBAAA,CAAS,IAAA,EAAM,OAAA,IAAW,EAA4C,CAAA;AAAA,MACzE,GAAG;AAAA,KACL;AACA,IAAA,IAAI,MAAA,CAAO,KAAK,MAAM,CAAA,CAAE,WAAW,CAAA,IAAK,CAAC,IAAA,CAAK,SAAA,EAAW,OAAO,IAAA;AAChE,IAAA,IAAI,IAAA,CAAK,SAAA,EAAW,MAAA,CAAO,UAAA,GAAa,IAAA,CAAK,SAAA;AAC7C,IAAA,OAAO,EAAE,GAAG,IAAA,EAAM,IAAA,EAAM,EAAE,GAAI,IAAA,EAAM,IAAA,IAAQ,EAAC,EAAI,GAAG,MAAA,EAAO,EAAE;AAAA,EAC/D;AACF;AAGO,SAAS,kBAAkB,MAAA,EAAkC;AAClE,EAAA,OAAO,IAAI,YAAY,MAAM,CAAA;AAC/B","file":"chunk-2DR5AVPX.cjs","sourcesContent":["import type { EventContext, EventIdentity, EventPayload, JsonValue } from \"./types\";\n\n/** Reserved keys that map to first-class fields (not passthrough data). */\nconst RESERVED = new Set([\n  \"eventId\",\n  \"eventType\",\n  \"journeyId\",\n  \"deviceId\",\n  \"visitorId\",\n  \"customerId\",\n  \"email\",\n  \"utmSource\",\n  \"utmMedium\",\n  \"utmCampaign\",\n  \"utmContent\",\n  \"utmId\",\n  \"url\",\n  \"referrer\",\n  \"path\",\n  \"query\",\n]);\n\nexport interface BuildEventInput {\n  eventId: string;\n  eventType?: string;\n  journeyId?: string;\n  identity?: EventIdentity;\n  context?: EventContext;\n  /** Arbitrary extra properties merged as passthrough data. */\n  props?: Record<string, JsonValue | undefined>;\n}\n\n/** Drop `undefined` values so the JSON body stays clean. */\nfunction compact(obj: Record<string, JsonValue | undefined>): Record<string, JsonValue> {\n  const out: Record<string, JsonValue> = {};\n  for (const [k, v] of Object.entries(obj)) {\n    if (v !== undefined) out[k] = v;\n  }\n  return out;\n}\n\n/**\n * Build the request body for the webhook `/flow` call (`XeniaApi.webhook`).\n *\n * Merge order (later wins): passthrough props < context < identity < core.\n * Field names match the backend `EventTriggerRequest` DTO exactly.\n *\n * @internal Used only by the webhook request/response path — the unified event\n * surface (`track()` → `POST /api/events/v1`) builds {@link XeniaEvent} instead.\n */\nexport function buildEventPayload(input: BuildEventInput): EventPayload {\n  const passthrough: Record<string, JsonValue> = {};\n  const reserved: Record<string, JsonValue> = {};\n  if (input.props) {\n    for (const [k, v] of Object.entries(input.props)) {\n      if (v === undefined) continue;\n      // A prop whose key matches a reserved field (e.g. `email`, `customerId`,\n      // `utmSource`) is promoted to that first-class field; everything else is\n      // custom passthrough data. Previously reserved-named props were dropped\n      // outright — so `track(\"sign_up\", { email })` never sent `email` at all.\n      if (RESERVED.has(k)) reserved[k] = v;\n      else passthrough[k] = v;\n    }\n  }\n\n  const payload = {\n    ...passthrough,\n    // Reserved-named props fill first-class fields (e.g. `email`, `customerId`)\n    // the SDK didn't auto-collect. Auto-collected context/identity still win for\n    // what they reliably know (real page url, visitor/device id), so a stray prop\n    // can't override the true page context — see merge order below.\n    ...reserved,\n    ...compact((input.context ?? {}) as Record<string, JsonValue | undefined>),\n    ...compact((input.identity ?? {}) as Record<string, JsonValue | undefined>),\n    eventId: input.eventId,\n    ...(input.eventType ? { eventType: input.eventType } : {}),\n    ...(input.journeyId ? { journeyId: input.journeyId } : {}),\n  };\n\n  return payload as EventPayload;\n}\n","import { compact, XeniaApi } from \"../core/api\";\nimport { buildEventPayload } from \"../core/event-payload\";\nimport { generateUlid, toEventId } from \"../core/id\";\nimport { personalizeContent, personalizePage } from \"../core/personalize-content\";\nimport type { EntryResolver, PageRef, PagePersonalizeOptions, PersonalizeContentResult } from \"../core/personalize-content\";\nimport type {\n  AnalyticsContext,\n  AnalyticsEventName,\n  CallerIdentity,\n  AnalyticsIngestResponse,\n  ConsentState,\n  EventContext,\n  EventIdentity,\n  IdentifyRequest,\n  IdentifyResponse,\n  JsonValue,\n  ResolveBatchItem,\n  ResolveBatchResult,\n  ResolveOptions,\n  ResolveResult,\n  WebhookResponse,\n  XeniaConfig,\n  XeniaEvent,\n} from \"../core/types\";\n\n/**\n * Extra per-call identity/context for server-side webhook calls — an override on top of whatever the\n * client already carries.\n *\n * There's no ambient `window` on the server to auto-collect `path`/`query`/`url`/UTM params the way\n * the browser client does, so bind them ONCE per request via {@link XeniaConfig.context} (see\n * `contextFromUrl`) and every call attaches them automatically. These per-call fields are for the\n * remainder: values known only at this call site, or a deliberate override of the ambient ones.\n */\nexport interface ServerWebhookOptions<F = never> extends WithFallback<F> {\n  method?: \"GET\" | \"POST\";\n  journeyId?: string;\n  identity?: EventIdentity;\n  context?: EventContext;\n}\n\n/**\n * Opt-in \"never throw\" for calls a page renders from. When `fallback` is set (even to `null`), any\n * failure (timeout, network error, non-2xx, open circuit) resolves to it instead of throwing, so a\n * caller can render its default content without a `try/catch`. Errors are swallowed silently: leave\n * it unset where you need to see them.\n */\nexport interface WithFallback<F> {\n  fallback?: F;\n}\n\n/** {@link ResolveOptions} plus {@link WithFallback}. */\nexport type ServerResolveOptions<F = never> = ResolveOptions & WithFallback<F>;\n\n/** Runs `call`, or resolves to `opts.fallback` on any error when one was given. */\nasync function orFallback<T, F>(call: () => Promise<T>, opts?: WithFallback<F>): Promise<T | F> {\n  if (!opts || !(\"fallback\" in opts)) return call();\n  try {\n    return await call();\n  } catch {\n    return opts.fallback as F;\n  }\n}\n\n/**\n * Options for a server-side unified event (`POST /api/events/v1`). There's no\n * ambient request context on the server — pass whatever's known at the call\n * site (e.g. pathname/user-agent from the current request, session id from a\n * cookie) via `identity`/`context`.\n */\nexport interface ServerTrackOptions {\n  /** When true, also match/advance a journey (never sampled/shed). Default false. */\n  trigger?: boolean;\n  /** Stable dedup key (e.g. `\"ord-1001\"`) for idempotent conversions. */\n  eventId?: string;\n  eventVersion?: number;\n  occurredAtMs?: number;\n  /** Origin tag. Default `\"xenia-server-sdk\"`. */\n  source?: string;\n  /** Identity fields for this event (except the SDK-owned `xeniaVisitorId`,\n   *  which comes from `config.visitorId` and can't be set per call). */\n  identity?: CallerIdentity;\n  context?: AnalyticsContext;\n  properties?: Record<string, JsonValue | undefined>;\n  consent?: ConsentState;\n}\n\n/**\n * Server-native Xenia client. Same method names as the browser client, but\n * every call is stateless: identity and context are passed explicitly rather\n * than read from the DOM/localStorage. Uses global `fetch` (Node ≥18).\n */\nexport class XeniaServer {\n  readonly api: XeniaApi;\n  /** SDK-owned visitor anchor for this (per-request) client — see {@link XeniaConfig.visitorId}. */\n  readonly visitorId?: string;\n  /** Ambient request context attached to every call — see {@link XeniaConfig.context}. */\n  private readonly context?: EventContext;\n\n  constructor(config: XeniaConfig) {\n    this.api = new XeniaApi(config);\n    this.visitorId = config.visitorId;\n    this.context = config.context;\n  }\n\n  /**\n   * Send a unified event server-side (`POST /api/events/v1`) and return the\n   * ingest response (including per-result `triggered`). `opts.trigger: true`\n   * also matches/advances a journey; pass `opts.eventId` (e.g. `\"ord-1001\"`)\n   * as a stable dedup key for idempotent conversions.\n   */\n  async track(\n    eventName: AnalyticsEventName,\n    opts: ServerTrackOptions = {},\n  ): Promise<AnalyticsIngestResponse> {\n    const event: XeniaEvent = {\n      eventName,\n      eventId: opts.eventId ? toEventId(opts.eventId) : generateUlid(),\n      eventVersion: opts.eventVersion ?? 1,\n      occurredAtMs: opts.occurredAtMs ?? Date.now(),\n      source: opts.source ?? \"xenia-server-sdk\",\n      identity: {\n        ...opts.identity,\n        // SDK-owned, set LAST so it can't be overridden per call. Comes from\n        // `config.visitorId` (bind it per request from the `xenia_vid` cookie).\n        xeniaVisitorId: this.visitorId,\n      },\n      context: opts.context,\n      properties: opts.properties,\n      consent: opts.consent,\n      trigger: opts.trigger === true ? true : undefined,\n    };\n    return this.api.sendEvents([event]);\n  }\n\n  /**\n   * Send a webhook request and await the synchronous response. Merges\n   * `opts.identity`/`opts.context` into the payload the same way the browser\n   * client's auto-attached fields do (`path`, `query`, `url`, `referrer`,\n   * `deviceId`, `visitorId`, etc.) — see `ServerWebhookOptions`. Pass `opts.fallback` to get it\n   * back instead of an error (see {@link WithFallback}).\n   */\n  async webhook<F = never>(\n    triggerId: string,\n    data?: Record<string, JsonValue | undefined>,\n    opts: ServerWebhookOptions<F> = {},\n  ): Promise<WebhookResponse | F> {\n    const payload = buildEventPayload({\n      eventId: triggerId,\n      journeyId: opts.journeyId,\n      // SDK-owned visitor anchor wins: config.visitorId (bind the `xenia_vid`\n      // cookie per request) is attached automatically. Falls back to a\n      // per-call visitorId only when none is bound.\n      identity: { ...opts.identity, visitorId: this.visitorId ?? opts.identity?.visitorId },\n      // Ambient request context (config.context, bound once per request) under a per-call\n      // override — same precedence resolve() uses, so both surfaces carry the same fields.\n      context: { ...this.context, ...opts.context },\n      props: data,\n    });\n    return orFallback(() => this.api.webhook(triggerId, payload as JsonValue, opts.method ?? \"POST\"), opts);\n  }\n\n  /**\n   * Bind visitor→user server-side — `POST /api/events/v1/identify`. `xeniaVisitorId` defaults to\n   * the bound `config.visitorId`, so a per-request client only passes what it learned (e.g. an email\n   * from a submitted form).\n   */\n  async identify(\n    body: Omit<IdentifyRequest, \"xeniaVisitorId\"> & { xeniaVisitorId?: string },\n  ): Promise<IdentifyResponse> {\n    const xeniaVisitorId = body.xeniaVisitorId ?? this.visitorId;\n    if (!xeniaVisitorId) {\n      throw new Error(\"identify() needs a visitor: bind config.visitorId or pass xeniaVisitorId\");\n    }\n    return this.api.identify({ ...body, xeniaVisitorId });\n  }\n\n  /**\n   * Resolve in-entry content personalization for one content key\n   * (`POST /api/personalization/resolve`). Requires a configured SDK token\n   * (`token`/`getToken`) — resolve is auth-required. With `merge: true` the\n   * returned `content` is server-spliced.\n   *\n   * Pass `opts.identity`/`opts.context` to attach the same SDK-provided\n   * fields (`deviceId`, `customerId`, `email`, `path`, `url`, `referrer`,\n   * `utm*`, …) the browser client collects ambiently — there's no ambient\n   * `window`/`document` server-side, so a server caller must supply whatever\n   * it knows (e.g. from the current request) explicitly. See\n   * {@link ResolveOptions}. Pass `opts.fallback` to get it back instead of an\n   * error (see {@link WithFallback}).\n   */\n  async resolve<F = never>(contentKey: string, opts?: ServerResolveOptions<F>): Promise<ResolveResult | F> {\n    return orFallback(() => this.api.resolve(contentKey, this.withVisitor(opts)), opts);\n  }\n\n  /**\n   * Resolve several content keys in one round-trip (`POST /api/personalization/resolve-batch`).\n   * `opts.fallback` as in {@link resolve}.\n   */\n  async resolveBatch<F = never>(\n    items: ResolveBatchItem[],\n    opts?: ServerResolveOptions<F>,\n  ): Promise<ResolveBatchResult[] | F> {\n    return orFallback(() => this.api.resolveBatch(items, this.withVisitor(opts)), opts);\n  }\n\n  /**\n   * Personalize a fetched CMS page server-side — see `XeniaClient.personalizeContent`. Never\n   * throws: on error or timeout the page renders with whatever was decided (base content otherwise).\n   * Pass `opts.identity`/`opts.context` like `resolve()`.\n   */\n  async personalizeContent<T>(page: T, opts: PagePersonalizeOptions): Promise<PersonalizeContentResult<T>> {\n    return personalizeContent(page, { ...opts, resolve: this.entryResolver(opts) });\n  }\n\n  /**\n   * Fetch a page through `opts.cms` and personalize it — the app passes only the page's identity\n   * (entry id, or `{ contentType, fields: { slug } }`). Never throws: a failed fetch is `content:\n   * null` with `error`, a missing page `content: null`.\n   */\n  async personalizePage<T = unknown>(ref: PageRef, opts: PagePersonalizeOptions): Promise<PersonalizeContentResult<T | null>> {\n    return personalizePage<T>(ref, { ...opts, resolve: this.entryResolver(opts) });\n  }\n\n  private entryResolver(opts: PagePersonalizeOptions): EntryResolver {\n    const resolveOpts = this.withVisitor({\n      data: opts.data, locale: opts.locale, identity: opts.identity, context: opts.context,\n    });\n    return async (ids) =>\n      (await this.api.resolveEntries(ids, { ...resolveOpts, contentKey: opts.contentKey })).decisions ?? [];\n  }\n\n  /**\n   * Merge the ambient `config.context` and `opts.identity`/`opts.context` into\n   * the resolve `data`, then stamp the SDK-owned visitor id\n   * (`config.visitorId`) under both the reserved `_xenia_vid` key (read by the\n   * backend for holdout/exposure bucketing) and the flat `visitorId` field —\n   * mirrors `webhook()`'s merge order/precedence exactly: caller `data` <\n   * ambient `config.context` < caller `context`/`identity` < SDK-owned\n   * `visitorId`/`_xenia_vid`, set LAST so neither can be overridden per call.\n   *\n   * `config.context` is what makes the SDK-provided fields automatic on the\n   * server: bound once per request, every `resolve()` carries `path`/`query`/\n   * `url`/`referrer`/UTMs with no per-call wiring, matching what the browser\n   * client collects from `window` on its own. A no-op when nothing is bound and\n   * nothing was passed — preserving today's behavior for callers using neither.\n   */\n  private withVisitor(opts?: ResolveOptions): ResolveOptions | undefined {\n    const identity = compact({\n      ...opts?.identity,\n      visitorId: this.visitorId ?? opts?.identity?.visitorId,\n    });\n    const merged = {\n      ...compact((this.context ?? {}) as Record<string, JsonValue | undefined>),\n      ...compact((opts?.context ?? {}) as Record<string, JsonValue | undefined>),\n      ...identity,\n    };\n    if (Object.keys(merged).length === 0 && !this.visitorId) return opts;\n    if (this.visitorId) merged._xenia_vid = this.visitorId;\n    return { ...opts, data: { ...(opts?.data ?? {}), ...merged } };\n  }\n}\n\n/** Create a server-native client. */\nexport function createXeniaServer(config: XeniaConfig): XeniaServer {\n  return new XeniaServer(config);\n}\n"]}

package/dist/chunk-BQ5PJCZ7.js

@@ -0,0 +1,179 @@
+// src/core/http-client.ts
+var DEFAULT_BASE_URL = "https://engine.xeniamartech.com/xenia";
+function isBrowser() {
+  return typeof window !== "undefined" && typeof document !== "undefined";
+}
+function buildUrl(url, queryParams) {
+  if (!queryParams || Object.keys(queryParams).length === 0) return url;
+  const params = new URLSearchParams(queryParams);
+  const sep = url.includes("?") ? "&" : "?";
+  return `${url}${sep}${params.toString()}`;
+}
+function delay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+var HttpError = class extends Error {
+  constructor(status, data, message) {
+    super(message ?? `Request failed with status ${status}`);
+    this.status = status;
+    this.data = data;
+    this.name = "HttpError";
+  }
+  status;
+  data;
+};
+var CircuitOpenError = class extends Error {
+  constructor(endpoint) {
+    super(`Circuit open for ${endpoint}: failing fast until the cooldown passes`);
+    this.endpoint = endpoint;
+    this.name = "CircuitOpenError";
+  }
+  endpoint;
+};
+var breakers = /* @__PURE__ */ new Map();
+var HttpClient = class {
+  baseUrl;
+  defaultHeaders;
+  timeout;
+  retry;
+  debug;
+  breaker;
+  constructor(opts) {
+    this.baseUrl = (opts.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+    this.defaultHeaders = opts.defaultHeaders ?? {};
+    this.timeout = opts.timeout ?? 8e3;
+    this.retry = {
+      attempts: opts.retry?.attempts ?? 2,
+      baseDelayMs: opts.retry?.baseDelayMs ?? 300
+    };
+    this.debug = opts.debug ?? false;
+    const cb = opts.circuitBreaker === true ? {} : opts.circuitBreaker || null;
+    this.breaker = cb && { failureThreshold: cb.failureThreshold ?? 3, cooldownMs: cb.cooldownMs ?? 3e4 };
+  }
+  async request(opts) {
+    if (!this.breaker) return this.send(opts);
+    const key = buildUrl(this.baseUrl + opts.path, opts.query);
+    const b = breakers.get(key) ?? { failures: 0, openedAt: 0 };
+    if (b.openedAt) {
+      if (Date.now() - b.openedAt < this.breaker.cooldownMs) throw new CircuitOpenError(key);
+      b.openedAt = 0;
+      b.failures = this.breaker.failureThreshold - 1;
+    }
+    try {
+      const result = await this.send(opts);
+      breakers.delete(key);
+      return result;
+    } catch (err) {
+      if (err instanceof HttpError && !this.isRetryableStatus(err.status)) {
+        breakers.delete(key);
+        throw err;
+      }
+      b.failures += 1;
+      if (b.failures >= this.breaker.failureThreshold) {
+        b.openedAt = Date.now();
+        this.log(`circuit opened for ${opts.path} after ${b.failures} failures`);
+      }
+      breakers.set(key, b);
+      throw err;
+    }
+  }
+  async send(opts) {
+    const url = buildUrl(this.baseUrl + opts.path, opts.query);
+    const method = opts.method ?? "GET";
+    const headers = {
+      "Content-Type": "application/json",
+      ...this.defaultHeaders,
+      ...opts.headers
+    };
+    const body = opts.body !== void 0 ? JSON.stringify(opts.body) : void 0;
+    const timeout = opts.timeout ?? this.timeout;
+    const maxAttempts = opts.noRetry ? 1 : (opts.retry?.attempts ?? this.retry.attempts) + 1;
+    const baseDelay = opts.retry?.baseDelayMs ?? this.retry.baseDelayMs;
+    let lastError;
+    for (let attempt = 0; attempt < maxAttempts; attempt++) {
+      try {
+        const response = await this.fetchWithTimeout(
+          url,
+          { method, headers, body, ...opts.keepalive ? { keepalive: true } : {} },
+          timeout
+        );
+        const data = await this.parseBody(response);
+        if (response.ok) {
+          return { response, data };
+        }
+        if (this.isRetryableStatus(response.status) && attempt < maxAttempts - 1) {
+          const wait = this.retryAfterMs(response, baseDelay, attempt);
+          this.log(`retrying ${opts.path} after ${wait}ms (status ${response.status})`);
+          await delay(wait);
+          continue;
+        }
+        throw new HttpError(response.status, data);
+      } catch (err) {
+        lastError = err;
+        if (err instanceof HttpError) throw err;
+        if (attempt < maxAttempts - 1) {
+          const wait = baseDelay * 2 ** attempt;
+          this.log(`retrying ${opts.path} after ${wait}ms (network error)`);
+          await delay(wait);
+          continue;
+        }
+      }
+    }
+    throw lastError instanceof Error ? lastError : new Error("Request failed");
+  }
+  async fetchWithTimeout(url, init, timeout) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeout);
+    try {
+      return await fetch(url, { ...init, signal: controller.signal });
+    } catch (err) {
+      if (err instanceof Error && err.name === "AbortError") {
+        throw new Error(`Request timeout after ${timeout}ms`, { cause: err });
+      }
+      throw err;
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+  async parseBody(response) {
+    const text = await response.text().catch(() => "");
+    if (!text) return null;
+    try {
+      return JSON.parse(text);
+    } catch {
+      return text;
+    }
+  }
+  isRetryableStatus(status) {
+    return status === 429 || status >= 500 && status <= 599;
+  }
+  retryAfterMs(response, baseDelay, attempt) {
+    const header = response.headers.get("Retry-After");
+    if (header) {
+      const seconds = Number(header);
+      if (!Number.isNaN(seconds)) return seconds * 1e3;
+    }
+    return baseDelay * 2 ** attempt;
+  }
+  log(msg) {
+    if (this.debug) console.warn(`[xenia] ${msg}`);
+  }
+};
+
+// src/core/cookie-names.ts
+var DEFAULT_PREFIX = "xenia";
+function visitorCookieName(prefix = DEFAULT_PREFIX) {
+  return `${prefix || DEFAULT_PREFIX}_vid`;
+}
+function consentCookieName(prefix = DEFAULT_PREFIX) {
+  return `${prefix || DEFAULT_PREFIX}_consent`;
+}
+var VISITOR_COOKIE = visitorCookieName();
+var CONSENT_COOKIE = consentCookieName();
+function consentCookie(state, prefix, maxAgeDays = 365) {
+  return `${consentCookieName(prefix)}=${encodeURIComponent(JSON.stringify(state))}; path=/; max-age=${Math.floor(maxAgeDays * 86400)}; SameSite=Lax`;
+}
+
+export { CONSENT_COOKIE, CircuitOpenError, DEFAULT_BASE_URL, DEFAULT_PREFIX, HttpClient, HttpError, VISITOR_COOKIE, buildUrl, consentCookie, consentCookieName, isBrowser, visitorCookieName };
+//# sourceMappingURL=chunk-BQ5PJCZ7.js.map
+//# sourceMappingURL=chunk-BQ5PJCZ7.js.map