@zoho_apptics/apptics-js-sdk 2.0.0-beta.1 → 2.0.0-beta.2

package/dist/cjs/core/consent.d.ts

@@ -1,3 +1,4 @@
+import { type EngagementType } from './constants.js';
 import type { TrackingStatus } from '../types.js';
 /**
  * DNT counts only when not ignored; while it counts, tracking is NO_TRACKING (opt_in_status).
@@ -12,8 +13,11 @@ export declare function shouldTrackOrSendData(): boolean;
  * and consent / server flags allow tracking.
  */
 export declare function canTrack(caller: string): boolean;
-/** canTrack plus the server's `engagementtracking` flag from getupdates (events, screens, sessions, api calls). */
-export declare function canTrackEngagement(caller: string): boolean;
+/**
+ * canTrack plus the server's flag for this kind of item: getsdkconfig's event (5), api (6),
+ * screen (10) and session (11) modules, each switched on its own.
+ */
+export declare function canTrackEngagement(caller: string, type: EngagementType): boolean;
 /**
  * canTrack plus the server's heatmap flag (getsdkconfig module 18).
  *
@@ -21,7 +25,13 @@ export declare function canTrackEngagement(caller: string): boolean;
  * well want events while declining to have every click's coordinates recorded.
  */
 export declare function canTrackHeatmap(caller: string): boolean;
-/** canTrack plus the server's `errortracking` flag from getupdates. */
+/** canTrack plus the server's js_error module (15) from getsdkconfig. */
 export declare function canTrackErrors(caller: string): boolean;
+/**
+ * Stores the visitor's tracking status without telling the server. True when it changed.
+ * user/register uses this alone: the server learns of the user from that call, so a device/add
+ * after it would only repeat a registration the device already has.
+ */
+export declare function recordTrackingStatus(trackingState: TrackingStatus): boolean;
 export declare function setTrackingStatus(trackingState: TrackingStatus): void;
 export declare function getTrackingStatus(): TrackingStatus;

package/dist/cjs/core/consent.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 var constants = require('./constants.js');
@@ -53,13 +53,16 @@ function canTrack(caller) {
     }
     return shouldTrackOrSendData();
 }
-/** canTrack plus the server's `engagementtracking` flag from getupdates (events, screens, sessions, api calls). */
-function canTrackEngagement(caller) {
+/**
+ * canTrack plus the server's flag for this kind of item: getsdkconfig's event (5), api (6),
+ * screen (10) and session (11) modules, each switched on its own.
+ */
+function canTrackEngagement(caller, type) {
     if (!canTrack(caller)) {
         return false;
     }
-    if (!state._ZAP._engagementTracking) {
-        logger.Console.log('apptics.' + caller + ': engagement tracking is turned off by the server'); // no i18n
+    if (!state._ZAP._engagementTracking[type]) {
+        logger.Console.log('apptics.' + caller + ': ' + type + ' tracking is turned off by the server'); // no i18n
         return false;
     }
     return true;
@@ -80,7 +83,7 @@ function canTrackHeatmap(caller) {
     }
     return true;
 }
-/** canTrack plus the server's `errortracking` flag from getupdates. */
+/** canTrack plus the server's js_error module (15) from getsdkconfig. */
 function canTrackErrors(caller) {
     if (!canTrack(caller)) {
         return false;
@@ -91,17 +94,27 @@ function canTrackErrors(caller) {
     }
     return true;
 }
+/**
+ * Stores the visitor's tracking status without telling the server. True when it changed.
+ * user/register uses this alone: the server learns of the user from that call, so a device/add
+ * after it would only repeat a registration the device already has.
+ */
+function recordTrackingStatus(trackingState) {
+    if (storage.tracking_preference.opt_in_status() == trackingState) {
+        return false;
+    }
+    storage.tracking_preference.update_status(trackingState);
+    state._ZAP._devicestatus = storage.tracking_preference.opt_in_status();
+    return true;
+}
 function setTrackingStatus(trackingState) {
     if (utils.isEmpty(trackingState)) {
         logger.Console.warn('setTrackingStatus: trackingStatus is Empty'); // no i18n
         return;
     }
-    if (storage.tracking_preference.opt_in_status() == trackingState) {
+    if (!recordTrackingStatus(trackingState)) {
         return;
     }
-    storage.tracking_preference.update_status(trackingState);
-    state._ZAP._devicestatus = storage.tracking_preference.opt_in_status();
-    state._ZAP._isanonrequired = storage.tracking_preference.opt_in_status() == constants.AP_TRACKING_STATUS.USAGE_TRACKING_WITH_PII ? false : state._ZAP._isanonrequired;
     if (storage.tracking_preference.opt_in_status() != constants.AP_TRACKING_STATUS.NO_TRACKING) {
         logger.Console.log('setTrackingStatus: Updating device info with new tracking status'); // no i18n
         hooks.hooks.updateDevice(state._ZAP._device_info).then(function (result) {
@@ -128,5 +141,6 @@ exports.canTrackHeatmap = canTrackHeatmap;
 exports.getTrackingStatus = getTrackingStatus;
 exports.hasDoNotTrackEnabled = hasDoNotTrackEnabled;
 exports.opt_in_status = opt_in_status;
+exports.recordTrackingStatus = recordTrackingStatus;
 exports.setTrackingStatus = setTrackingStatus;
 exports.shouldTrackOrSendData = shouldTrackOrSendData;

package/dist/cjs/core/constants.d.ts

@@ -34,6 +34,8 @@ export declare const AP_CONSTANTS: Readonly<{
     readonly SUCCESS: "success";
     readonly BROWSER: "Browser";
 }>;
+/** The kinds of engagement item, each with its own getsdkconfig module: AP_CONSTANTS' type values. */
+export type EngagementType = 'event' | 'screen' | 'session' | 'api';
 export declare const DEFAULT_API_PATHS: Readonly<{
     readonly addversion: "app/addversion";
     readonly regdevice: "device/add";
@@ -79,9 +81,13 @@ export declare const SDK_MODULE: Readonly<{
      * authority. Where they disagree, getsdkconfig wins.
      */
     readonly REMOTE_CONFIG: "2";
+    readonly EVENT: "5";
+    readonly API: "6";
+    readonly SCREEN: "10";
     readonly SESSION: "11";
     readonly FEEDBACK: "12";
-    readonly CRASH: "13";
+    /** Uncaught and reported JavaScript errors: js_error. 13 (crash) and 14 (nonfatal) are the native SDKs'. */
+    readonly JS_ERROR: "15";
     readonly REMOTE_LOGGER: "17";
     readonly HEATMAP: "18";
 }>;
@@ -97,9 +103,10 @@ export declare const LOG_FILENAME_MAX = 100;
  */
 export declare const DEVICE_NAME_MAX = 100;
 /**
- * The `level` every line goes out with. Everything the remote logger carries is a failure inside
- * the SDK — logFailure is its only caller — so the level never varies. 3 is what the v2 reference
- * shows in its only example; the scale itself is not documented anywhere we can see.
+ * The `level` a remote log line goes out with when it has none of its own: 3, Info. Every line an
+ * app writes with AppticsLogger carries its level (1 verbose to 5 error, see LOG_LEVEL in
+ * remotelog/logger.ts). Only a line an older SDK stored, when the SDK logged its own failures
+ * there, has none; it is sent as Info rather than having the batch refused for a missing level.
  */
 export declare const REMOTE_LOG_LEVEL = 3;
 /**
@@ -109,29 +116,17 @@ export declare const REMOTE_LOG_LEVEL = 3;
  * enough that a tab left open overnight is not still sending every call to its debug twin.
  */
 export declare const DEBUG_IDLE_MS: number;
-/** Idle minutes that end a session. Lives on state, not in _config, but defaults here. */
+/** Minutes a tab can be inactive before its session ends. Lives on state, not in _config, but defaults here. */
 export declare const DEFAULT_INACTIVE_MINUTES = 30;
 /** Global defaults. `state._config` holds a mutable copy per init. */
 export declare const AP_CONFIG: Readonly<{
     endpoint: "/sdk/web/";
     method: "POST";
-    transport: "XHR";
-    track_link_timeout: 300;
-    cookie_expiration_days: 365;
-    storage_type: "localStorage";
-    enable_batch_requests: true;
     batch_size: 50;
     batch_flush_interval: 30000;
     getupdates_interval: 120000;
     batch_request_timeout: 7;
-    auto_starts_batch: true;
-    mode: 1;
-    default_group_name: "default";
-    default_optin_status: number;
-    enable_pageview_tracking: false;
-    save_referrer: true;
     debug: boolean;
-    track_by_default: true;
     ignore_do_not_track: boolean;
     /**
      * Wrap XHR and fetch to record the app's API calls without it calling startTrackApi(). Off by
@@ -144,6 +139,16 @@ export declare const AP_CONFIG: Readonly<{
      * default; the app's own inScreen() during a navigation replaces that navigation's view.
      */
     track_screen: boolean;
+    /**
+     * Record uncaught errors and unhandled promise rejections, from the window's `error` and
+     * `unhandledrejection` events. On by default; AppticsError.setErrorTracking() switches it later.
+     */
+    track_error: boolean;
+    /**
+     * Record clicks on elements tagged `apeventaction` (or `data-apeventaction`) as events. On by
+     * default; AppticsEvent.setClickTracking() switches it later.
+     */
+    track_click: boolean;
     /**
      * How automatic screen tracking names a path, as init() keeps the config's screen_routes: route
      * patterns (`/users/{id}/orders`, each id recorded as a star), exact paths and regular

package/dist/cjs/core/constants.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 const AP_TRACKING_STATUS = Object.freeze({
@@ -85,9 +85,13 @@ const SDK_MODULE = Object.freeze({
      * authority. Where they disagree, getsdkconfig wins.
      */
     REMOTE_CONFIG: '2', // no i18n
+    EVENT: '5', // no i18n
+    API: '6', // no i18n
+    SCREEN: '10', // no i18n
     SESSION: '11', // no i18n
     FEEDBACK: '12', // no i18n
-    CRASH: '13', // no i18n
+    /** Uncaught and reported JavaScript errors: js_error. 13 (crash) and 14 (nonfatal) are the native SDKs'. */
+    JS_ERROR: '15', // no i18n
     REMOTE_LOGGER: '17', // no i18n
     HEATMAP: '18', // no i18n
 });
@@ -103,9 +107,10 @@ const LOG_FILENAME_MAX = 100;
  */
 const DEVICE_NAME_MAX = 100;
 /**
- * The `level` every line goes out with. Everything the remote logger carries is a failure inside
- * the SDK — logFailure is its only caller — so the level never varies. 3 is what the v2 reference
- * shows in its only example; the scale itself is not documented anywhere we can see.
+ * The `level` a remote log line goes out with when it has none of its own: 3, Info. Every line an
+ * app writes with AppticsLogger carries its level (1 verbose to 5 error, see LOG_LEVEL in
+ * remotelog/logger.ts). Only a line an older SDK stored, when the SDK logged its own failures
+ * there, has none; it is sent as Info rather than having the batch refused for a missing level.
  */
 const REMOTE_LOG_LEVEL = 3;
 /**
@@ -115,30 +120,18 @@ const REMOTE_LOG_LEVEL = 3;
  * enough that a tab left open overnight is not still sending every call to its debug twin.
  */
 const DEBUG_IDLE_MS = 60 * 60 * 1000;
-/** Idle minutes that end a session. Lives on state, not in _config, but defaults here. */
+/** Minutes a tab can be inactive before its session ends. Lives on state, not in _config, but defaults here. */
 const DEFAULT_INACTIVE_MINUTES = 30;
 /** Global defaults. `state._config` holds a mutable copy per init. */
 const AP_CONFIG = Object.freeze({
     // the version is per path (API_VERSIONS); this is only the part before it
     endpoint: '/sdk/web/', // no i18n
     method: 'POST', // no i18n
-    transport: 'XHR', // no i18n
-    track_link_timeout: 300,
-    cookie_expiration_days: 365,
-    storage_type: 'localStorage', // no i18n
-    enable_batch_requests: true,
     batch_size: 50,
     batch_flush_interval: 30000,
-    getupdates_interval: 120000, // 2 minutes in milliseconds
+    getupdates_interval: 120000, // 2 minutes in milliseconds, when getsdkconfig gives no next_check_after
     batch_request_timeout: 7,
-    auto_starts_batch: true,
-    mode: 1,
-    default_group_name: 'default', // no i18n
-    default_optin_status: AP_TRACKING_STATUS.USAGE_TRACKING_WITHOUT_PII,
-    enable_pageview_tracking: false,
-    save_referrer: true,
     debug: false,
-    track_by_default: true,
     ignore_do_not_track: false,
     /**
      * Wrap XHR and fetch to record the app's API calls without it calling startTrackApi(). Off by
@@ -151,6 +144,16 @@ const AP_CONFIG = Object.freeze({
      * default; the app's own inScreen() during a navigation replaces that navigation's view.
      */
     track_screen: true,
+    /**
+     * Record uncaught errors and unhandled promise rejections, from the window's `error` and
+     * `unhandledrejection` events. On by default; AppticsError.setErrorTracking() switches it later.
+     */
+    track_error: true,
+    /**
+     * Record clicks on elements tagged `apeventaction` (or `data-apeventaction`) as events. On by
+     * default; AppticsEvent.setClickTracking() switches it later.
+     */
+    track_click: true,
     /**
      * How automatic screen tracking names a path, as init() keeps the config's screen_routes: route
      * patterns (`/users/{id}/orders`, each id recorded as a star), exact paths and regular

package/dist/cjs/core/db.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 var logger = require('./logger.js');

package/dist/cjs/core/debug.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 var constants = require('./constants.js');

package/dist/cjs/core/env.d.ts

@@ -1,4 +1,3 @@
-import type { AppticsConfig } from '../types.js';
 export declare function isBlockedWS(ua: string): boolean;
 /** Device RAM as the API wants it ("4 GB"). Chromium only; empty elsewhere. */
 export declare function getRam(): string;
@@ -24,5 +23,3 @@ export declare function getTimeZone(): string;
 export declare function is_apptics_disabled(): boolean;
 /** Pure DNT check (no side effects). consent.hasDoNotTrackEnabled() applies NO_TRACKING. */
 export declare function isDntOn(): boolean;
-/** The console snippet's config (window.appticssettings._defaultoptions), if the page defines one. */
-export declare function getSnippetOptions(): AppticsConfig | undefined;

package/dist/cjs/core/env.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 var constants = require('./constants.js');
@@ -242,13 +242,6 @@ function isDntOn() {
         return utils.includes(dntValues, dntValue);
     });
 }
-/** The console snippet's config (window.appticssettings._defaultoptions), if the page defines one. */
-function getSnippetOptions() {
-    if (typeof window === 'undefined' || !window.appticssettings) { // no i18n
-        return undefined;
-    }
-    return window.appticssettings._defaultoptions;
-}
 
 exports.getBatteryPercent = getBatteryPercent;
 exports.getBrowser = getBrowser;
@@ -260,7 +253,6 @@ exports.getOS = getOS;
 exports.getOrientation = getOrientation;
 exports.getRam = getRam;
 exports.getReferringURL = getReferringURL;
-exports.getSnippetOptions = getSnippetOptions;
 exports.getTimeZone = getTimeZone;
 exports.isBlockedWS = isBlockedWS;
 exports.isDntOn = isDntOn;

package/dist/cjs/core/framework-id.d.ts

@@ -1 +1 @@
-export declare const FRAMEWORK_ID = 6002;
+export declare const FRAMEWORK_ID = 6003;

package/dist/cjs/core/framework-id.js

@@ -1,9 +1,9 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 // Generated by scripts/register-version.mjs — do not edit by hand.
 // The framework id Apptics issued for this SDK, from POST /sdk/web/v1/framework/addversion
-// (version 2.0.0-beta.1, platform Browser). Regenerated on every npm pack.
-const FRAMEWORK_ID = 6002;
+// (version 2.0.0-beta.2, platform Browser). Regenerated on every npm pack.
+const FRAMEWORK_ID = 6003;
 
 exports.FRAMEWORK_ID = FRAMEWORK_ID;

package/dist/cjs/core/guard.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 var state = require('./state.js');

package/dist/cjs/core/hooks.d.ts

@@ -36,4 +36,9 @@ export declare const hooks: {
     remoteConfigStarted: () => void;
     /** Set by remoteconfig/fetch.ts: AppticsUser.setUser changed who this is, so conditions on the user re-apply. */
     remoteConfigUserChanged: () => void;
+    /**
+     * Set by device/index.ts: getsdkconfig is asked now, outside its next_check_after. setUser calls
+     * it once a user is registered, and remote config when getupdates reports a module changed.
+     */
+    askServerSettings: () => void;
 };

package/dist/cjs/core/hooks.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 /**
@@ -17,6 +17,7 @@ const hooks = {
     screenTrackedByApp: () => { },
     remoteConfigStarted: () => { },
     remoteConfigUserChanged: () => { },
+    askServerSettings: () => { },
 };
 
 exports.hooks = hooks;

package/dist/cjs/core/locks.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 /**

package/dist/cjs/core/logger.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 var state = require('./state.js');

package/dist/cjs/core/state.d.ts

@@ -1,4 +1,4 @@
-import { type ApConfig } from './constants.js';
+import { type ApConfig, type EngagementType } from './constants.js';
 import type { DeviceInfo, Dict, QuartzSettings, TrackingStatus, UserInfo } from '../types.js';
 /** Runtime state shared by every module (the former `_ZAP` object). */
 export interface State {
@@ -19,7 +19,6 @@ export interface State {
     _token: string;
     _frameworkID: number;
     _platform: string;
-    _isanonrequired: boolean;
     _devicestatus: TrackingStatus;
     _uuid: string;
     _apid: string;
@@ -30,9 +29,12 @@ export interface State {
     _current_session: Dict;
     _properties: Dict;
     _ignoreDnt: boolean;
-    _isGlobalErrorTracking: boolean;
     _shouldTrack: boolean;
-    _engagementTracking: boolean;
+    /**
+     * getsdkconfig's engagement modules, one per kind of item, keyed by the item's type: event (5),
+     * api (6), screen (10) and session (11).
+     */
+    _engagementTracking: Record<EngagementType, boolean>;
     _errorTracking: boolean;
     /** getsdkconfig module 18. Heatmap has its own flag in v2; before that it rode engagement. */
     _heatmapTracking: boolean;

package/dist/cjs/core/state.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 var constants = require('./constants.js');
@@ -23,7 +23,6 @@ function initialState() {
         // issued by Apptics at pack time; see scripts/register-version.mjs
         _frameworkID: frameworkId.FRAMEWORK_ID,
         _platform: constants.AP_CONSTANTS.BROWSER,
-        _isanonrequired: true,
         _devicestatus: constants.AP_TRACKING_STATUS.USAGE_TRACKING_WITHOUT_PII,
         _uuid: '', // no i18n
         _apid: '', // no i18n
@@ -34,9 +33,8 @@ function initialState() {
         _current_session: {},
         _properties: {},
         _ignoreDnt: false,
-        _isGlobalErrorTracking: true,
         _shouldTrack: true,
-        _engagementTracking: true,
+        _engagementTracking: { event: true, screen: true, session: true, api: true },
         _heatmapTracking: true,
         _remoteLoggerEnabled: true,
         _remoteConfigEnabled: true,

package/dist/cjs/core/storage.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 var constants = require('./constants.js');
@@ -293,9 +293,6 @@ const tracking_preference = {
     },
     update_status(tracking_status) {
         state._ZAP._devicestatus = tracking_status;
-        // Legacy order kept: this reads the status *before* the write below (setTrackingStatus recomputes it after).
-        state._ZAP._isanonrequired =
-            tracking_preference.opt_in_status() == constants.AP_TRACKING_STATUS.USAGE_TRACKING_WITH_PII ? false : state._ZAP._isanonrequired;
         var track = Object.assign({}, settings.trackinfo && typeof settings.trackinfo === 'object' ? settings.trackinfo : {}); // no i18n
         track.tracking_status = tracking_status;
         if (state._ZAP._trackinfo && typeof state._ZAP._trackinfo === 'object') { // no i18n

package/dist/cjs/core/stylesheet.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 /**

package/dist/cjs/core/transport.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 var constants = require('./constants.js');
@@ -141,19 +141,17 @@ function getParameters(path) {
     // v2 device/add declares neither identifier, platform nor appversion: the build is already
     // known from app/addversion, and sending an undeclared param is refused as EXTRA_PARAM_FOUND.
     // What it does declare as mandatory is appversionid, which v1 treated as optional.
+    // isanonrequired is always false: the web SDK has no anonymous mode, only the tracking
+    // statuses (with PII, without PII, none), which devicestatus carries.
     if (path == 'regdevice') { // no i18n
-        returnVal = '?isanonrequired=' + state._ZAP._isanonrequired + '&devicestatus=' + state._ZAP._devicestatus; // no i18n
+        returnVal = '?isanonrequired=false&devicestatus=' + state._ZAP._devicestatus; // no i18n
         if (!utils.isEmpty(state._ZAP._device_info.deviceid)) {
             returnVal += '&deviceid=' + encodeURIComponent(String(state._ZAP._device_info.deviceid)); // no i18n
         }
         return returnVal + mandatoryParams(returnVal);
     }
-    // getsdkconfig is the one call that must NOT carry deviceid: it declares the param with
-    // decrypt-label="authenticate", which a web SDK cannot satisfy, and sending it is answered
-    // with NOT_AUTHENTICATED. getupdates declares the same param with plain paramdecrypt, so it
-    // does carry one. It still needs appversionid and frameworkid, added at the end.
-    var identifiesDevice = path != 'sdkconfig'; // no i18n
-    if (identifiesDevice) {
+    // getsdkconfig carries no deviceid: the user's ids below are what it answers for
+    if (path != 'sdkconfig') { // no i18n
         if (utils.isEmpty(state._ZAP._device_info.deviceid)) {
             hooks.hooks.refreshDeviceInfo();
             // the device is missing, but appversionid and frameworkid are mandatory regardless:
@@ -178,14 +176,13 @@ function getParameters(path) {
     // them, and refuses userid as EXTRA_PARAM_FOUND; it has no use for them either, since remote
     // config conditions on the user are evaluated here, against the rule set it answers with
     var carriesUser = path != 'reguser' && path != 'getupdates'; // no i18n
-    if (carriesUser && identifiesDevice) {
-        if (consent.opt_in_status() == constants.AP_TRACKING_STATUS.USAGE_TRACKING_WITH_PII) {
-            if (state._ZAP._user_info.hasOwnProperty('userid') && !utils.isEmpty(state._ZAP._user_info.userid)) { // no i18n
-                returnVal += '&userid=' + encodeURIComponent(String(state._ZAP._user_info.userid)); // no i18n
-            }
-            if (state._ZAP._user_info.hasOwnProperty('groupid') && !utils.isEmpty(state._ZAP._user_info.groupid)) { // no i18n
-                returnVal += '&customergroupid=' + encodeURIComponent(String(state._ZAP._user_info.groupid)); // no i18n
-            }
+    if (carriesUser && consent.opt_in_status() == constants.AP_TRACKING_STATUS.USAGE_TRACKING_WITH_PII) {
+        if (state._ZAP._user_info.hasOwnProperty('userid') && !utils.isEmpty(state._ZAP._user_info.userid)) { // no i18n
+            // getsdkconfig has no deviceid before it, so its userid starts the query
+            returnVal += (returnVal === '' ? '?' : '&') + 'userid=' + encodeURIComponent(String(state._ZAP._user_info.userid)); // no i18n
+        }
+        if (state._ZAP._user_info.hasOwnProperty('groupid') && !utils.isEmpty(state._ZAP._user_info.groupid)) { // no i18n
+            returnVal += (returnVal === '' ? '?' : '&') + 'customergroupid=' + encodeURIComponent(String(state._ZAP._user_info.groupid)); // no i18n
         }
     }
     returnVal += deviceNameParam(path, returnVal);

package/dist/cjs/core/utils.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 var constants = require('./constants.js');

package/dist/cjs/core/validate.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 var logger = require('./logger.js');

package/dist/cjs/device/appversion.d.ts

@@ -1,4 +1,13 @@
-/** Whether we already hold usable ids for the app and version running now. */
+/**
+ * A fingerprint of the auth key, which is what is stored to tell one key from another: enough to
+ * notice that init() was given a different one, without keeping a second copy of the key itself.
+ * FNV-1a, 32 bits, as hex; '' for no key.
+ */
+export declare function keyFingerprint(key: unknown): string;
+/**
+ * Whether we already hold usable ids for the app, auth key and version running now. Ids stored by
+ * a build that kept no key fingerprint register again once, and the answer then records it.
+ */
 export declare function hasAppVersion(): boolean;
 export declare function appVersionFailedForNetwork(): boolean;
 export declare function registerAppVersion(): Promise<boolean>;

package/dist/cjs/device/appversion.js

@@ -1,4 +1,4 @@
-/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.1 | (c) Zoho Corporation Private Limited | see LICENSE */
+/*! @zoho_apptics/apptics-js-sdk v2.0.0-beta.2 | (c) Zoho Corporation Private Limited | see LICENSE */
 'use strict';
 
 var state = require('../core/state.js');
@@ -39,13 +39,34 @@ const REQUIRED_KEYS = ['aaid', 'portalid', 'projectid', 'apid', 'mapid', 'appver
 function missingKeys(data) {
     return REQUIRED_KEYS.filter(function (key) { return utils.isEmpty(data[key]); });
 }
-/** Whether we already hold usable ids for the app and version running now. */
+/**
+ * A fingerprint of the auth key, which is what is stored to tell one key from another: enough to
+ * notice that init() was given a different one, without keeping a second copy of the key itself.
+ * FNV-1a, 32 bits, as hex; '' for no key.
+ */
+function keyFingerprint(key) {
+    var text = utils.isEmpty(key) ? '' : String(key); // no i18n
+    if (text === '') { // no i18n
+        return ''; // no i18n
+    }
+    var hash = 0x811c9dc5;
+    for (var i = 0; i < text.length; i++) {
+        hash ^= text.charCodeAt(i);
+        hash = Math.imul(hash, 0x01000193) >>> 0;
+    }
+    return ('0000000' + hash.toString(16)).slice(-8); // no i18n
+}
+/**
+ * Whether we already hold usable ids for the app, auth key and version running now. Ids stored by
+ * a build that kept no key fingerprint register again once, and the answer then records it.
+ */
 function hasAppVersion() {
     var saved = stored();
     return missingKeys(saved).length === 0
         && saved.appversion === state._ZAP._defaultoptions.appversion
         && saved.identifier === state._ZAP._defaultoptions.identifier
-        && saved.serviceUrl === state._ZAP._defaultoptions.serviceUrl;
+        && saved.serviceUrl === state._ZAP._defaultoptions.serviceUrl
+        && saved.zakhash === keyFingerprint(state._ZAP._defaultoptions.zak);
 }
 /** Puts the ids where the rest of the SDK reads them from. */
 function apply(data) {
@@ -126,6 +147,7 @@ function registerAppVersion() {
             appversion: state._ZAP._defaultoptions.appversion,
             identifier: state._ZAP._defaultoptions.identifier,
             serviceUrl: state._ZAP._defaultoptions.serviceUrl,
+            zakhash: keyFingerprint(state._ZAP._defaultoptions.zak),
         };
         RESULT_KEYS.forEach(function (key) {
             if (!utils.isEmpty(data[key])) {
@@ -167,4 +189,5 @@ exports.appVersionFailedForNetwork = appVersionFailedForNetwork;
 exports.applyStoredAppVersion = applyStoredAppVersion;
 exports.clearAppVersion = clearAppVersion;
 exports.hasAppVersion = hasAppVersion;
+exports.keyFingerprint = keyFingerprint;
 exports.registerAppVersion = registerAppVersion;