@zaplier/sdk 1.6.5 → 1.6.6

package/dist/sdk.js

@@ -19786,7 +19786,7 @@
                 .map(b => b.toString(16).padStart(2, '0'))
                 .join('') + "_" + Date.now().toString(36);
         }
-        createCamouflageData(visitorId, sessionId, stableCoreHash) {
+        createCamouflageData(visitorId, sessionId, stableCoreHash, fromBackend = false) {
             return {
                 theme: "auto",
                 lang: (navigator.language || "en-US").substring(0, 2),
@@ -19796,13 +19796,16 @@
                 _v: visitorId, // Hidden visitor ID
                 _s: sessionId, // Hidden session ID  
                 _sc: stableCoreHash, // Hidden stable core
+                _vb: fromBackend ? true : undefined, // Flag: visitor ID from backend (v1.7.0+)
                 ts: Date.now(),
             };
         }
         extractFromCamouflage(data) {
             try {
                 const parsed = JSON.parse(data);
-                if (parsed._v && parsed._s && parsed._sc) {
+                // CRITICAL: Only return visitor ID if it came from backend (v1.7.0+)
+                // This invalidates visitor IDs generated by previous SDK versions
+                if (parsed._v && parsed._s && parsed._sc && parsed._vb === true) {
                     return {
                         visitorId: parsed._v,
                         sessionId: parsed._s,
@@ -19814,6 +19817,11 @@
                         reused: true,
                     };
                 }
+                // If visitor ID exists but doesn't have backend flag, ignore it
+                if (parsed._v && !parsed._vb) {
+                    console.log("[VisitorIdentityManager] Ignoring visitor ID from previous SDK version (no backend flag)");
+                    return null;
+                }
             }
             catch (e) {
                 // Invalid data
@@ -19866,7 +19874,8 @@
             try {
                 // Create or update camouflaged data with backend visitor ID
                 const currentSessionId = sessionId || this.getCurrentSessionId() || this.generateSessionId();
-                const camouflageData = this.createCamouflageData(visitorId, currentSessionId, stableCoreHash);
+                const camouflageData = this.createCamouflageData(visitorId, currentSessionId, stableCoreHash, true // Mark as coming from backend
+                );
                 const { success, method } = PersistenceManager.set(STORAGE_KEYS.prefs, JSON.stringify(camouflageData));
                 if (success) {
                     // Also update device fingerprint cache
@@ -20509,8 +20518,9 @@
             try {
                 const payload = {
                     // workspaceId moved to query parameter
-                    // CHANGED: Only send visitor ID if it came from backend (not locally generated)
-                    visitorId: this.backendVisitorId || this.getVisitorId(),
+                    // CRITICAL: Only send visitor ID if it definitively came from backend
+                    // Never send locally generated visitor IDs from previous SDK versions
+                    visitorId: this.backendVisitorId || null,
                     // Session ID (gerado por sessão)
                     sessionId: this.sessionId,
                     fingerprintHash: this.fingerprint?.hash,