boosten-runtime 0.1.0-alpha.1 → 0.2.1

package/dist/chunk-VFNN22DR.js

@@ -130,8 +130,8 @@ var PIIDetectedError = class extends Error {
 var _EMAIL_RE = /[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}/;
 var _IPV4_RE = /\b(?:\d{1,3}\.){3}\d{1,3}\b/;
 var _IPV6_RE = /(?:[0-9a-f]{1,4}:){2,7}[0-9a-f]{0,4}|(?:[0-9a-f]{1,4}:)*:[0-9a-f]{1,4}/i;
-var _JWT_RE = /^eyJ[A-Za-z0-9_\-]+\.[A-Za-z0-9_\-]+\.[A-Za-z0-9_\-]+$/;
-var _BEARER_RE = /^bearer\s+\S{8,}/i;
+var _JWT_RE = /eyJ[A-Za-z0-9_\-]+\.[A-Za-z0-9_\-]+\.[A-Za-z0-9_\-]+/;
+var _BEARER_RE = /bearer\s+\S{8,}/i;
 var _PHONE_RE = /(?:\+\d{1,3}[\s\-.]?)?\(?\d{3}\)?[\s\-.]?\d{3}[\s\-.]?\d{4}/;
 function findDeniedValueFragment(val) {
   if (typeof val !== "string" || val.length < 5) return null;
@@ -165,6 +165,7 @@ function findDeniedFragment(name) {
     for (const t of tokens) {
       if (t === d) return denied;
     }
+    if (d.length >= 5 && normalized.includes(d)) return denied;
   }
   return null;
 }

package/dist/index.d.ts

@@ -2,6 +2,7 @@ export { BoostenPhase, BootKind, PerfEvent, PerfSample, ScreenScoreBreakdown } f
 export { PIIDetectedError, PII_DENYLIST, assertNoPII, checkNoPII } from './no-pii.js';
 export { SafeTransmitOptions, safeTransmit } from './transmit.js';
 export { BOOSTEN_CHECKLIST, BoostenChecklistEntry, CHECKLIST_COUNT, CHECKLIST_VERSION, getChecklistEntry, listChecklistIds } from 'boosten-checklist';
+export { DEFAULT_TELEMETRY_ENDPOINT, type TelemetryClient, type TelemetryOptions, type TelemetrySample, enableTelemetry } from './telemetry.js';
 
 /** Indeed-derived mobile thresholds. ~6× stricter than Core Web Vitals. */
 declare const SCORE_THRESHOLDS: {
@@ -29,6 +30,6 @@ declare const RATING_CUTOFFS: {
     readonly good: 85;
     readonly needsWork: 60;
 };
-declare const RUNTIME_VERSION = "0.1.0-alpha.1";
+declare const RUNTIME_VERSION = "0.2.0";
 
 export { RATING_CUTOFFS, RUNTIME_VERSION, SCORE_THRESHOLDS, SCORE_WEIGHTS };

package/dist/index.js

@@ -8,6 +8,10 @@ import {
   checkNoPII
 } from "./chunk-VFNN22DR.js";
 import "./chunk-6F4PWJZI.js";
+import {
+  DEFAULT_TELEMETRY_ENDPOINT,
+  enableTelemetry
+} from "./telemetry.js";
 
 // src/index.ts
 import {
@@ -31,9 +35,10 @@ var RATING_CUTOFFS = {
   good: 85,
   needsWork: 60
 };
-var RUNTIME_VERSION = "0.1.0-alpha.1";
+var RUNTIME_VERSION = "0.2.0";
 export {
   BOOSTEN_CHECKLIST,
+  DEFAULT_TELEMETRY_ENDPOINT,
   CHECKLIST_COUNT,
   CHECKLIST_VERSION,
   PIIDetectedError,
@@ -44,6 +49,7 @@ export {
   SCORE_WEIGHTS,
   assertNoPII,
   checkNoPII,
+  enableTelemetry,
   getChecklistEntry,
   listChecklistIds,
   safeTransmit

package/dist/telemetry.d.ts

@@ -0,0 +1,46 @@
+import { type SafeTransmitOptions } from "./transmit.js";
+
+export interface TelemetryOptions {
+    installId: string;
+    endpoint?: string;
+    packageVersion?: string;
+    fetchOptions?: SafeTransmitOptions;
+    /** Previously-issued bearer token (e.g. restored from AsyncStorage on app
+     *  launch). When absent the client will call /installs/consent to get one. */
+    deleteToken?: string;
+    /** Callback fired the first time the server issues a delete token, so the
+     *  host app can persist it for the next launch. */
+    onTokenIssued?: (token: string) => void;
+}
+
+export interface TelemetrySample {
+    routeLabel: string;
+    durationMs: number;
+    rating: "good" | "needs-work" | "poor";
+    ruleId?: string;
+    metadata?: Record<string, unknown> | null;
+}
+
+export interface TelemetryClient {
+    readonly installId: string;
+    readonly endpoint: string;
+    readonly enabled: boolean;
+    /** Bearer token issued by the server on first successful consent. Null
+     *  until /installs/consent succeeds. Persist this for the next launch
+     *  and pass it back via opts.deleteToken. */
+    readonly deleteToken: string | null;
+    consent(): Promise<number>;
+    /** Send a batch of samples. Will lazily call /installs/consent if no
+     *  delete token has been issued yet. Returns the number of samples the
+     *  server accepted, or 0 on auth/network failure or if disabled. */
+    transmit(samples: readonly TelemetrySample[]): Promise<number>;
+    disable(): void;
+    enable(): void;
+    /** Calls /installs/forget with the stored delete token. Returns the HTTP
+     *  status, or 0 if no token was ever issued (nothing to forget remotely). */
+    forget(): Promise<number>;
+}
+
+export declare const DEFAULT_TELEMETRY_ENDPOINT: string;
+
+export declare function enableTelemetry(opts: TelemetryOptions): TelemetryClient;

package/dist/telemetry.js

@@ -0,0 +1,98 @@
+import { safeTransmit } from "./transmit.js";
+import { assertNoPII } from "./no-pii.js";
+
+var DEFAULT_TELEMETRY_ENDPOINT = "https://boosten.replit.app/api";
+var RUNTIME_VERSION = "0.2.1";
+
+function enableTelemetry(opts) {
+  if (!opts || typeof opts.installId !== "string" || opts.installId.length < 8) {
+    throw new Error(
+      "enableTelemetry: opts.installId is required and must be at least 8 chars (use a UUIDv4)"
+    );
+  }
+  var installId = opts.installId;
+  var endpoint = (opts.endpoint || DEFAULT_TELEMETRY_ENDPOINT).replace(/\/+$/, "");
+  var packageVersion = opts.packageVersion || RUNTIME_VERSION;
+  var fetchOptions = opts.fetchOptions || {};
+  var enabled = true;
+  // Bearer token returned by the server on first successful consent.
+  // Required as Authorization on /samples and as deleteToken on /forget.
+  var deleteToken = (opts.deleteToken && typeof opts.deleteToken === "string") ? opts.deleteToken : null;
+  var onTokenIssued = (typeof opts.onTokenIssued === "function") ? opts.onTokenIssued : null;
+
+  async function tryRegisterConsent() {
+    try {
+      var res = await safeTransmit(
+        endpoint + "/installs/consent",
+        { installId: installId, runtime: "js", packageVersion: packageVersion },
+        fetchOptions
+      );
+      if (res && res.ok) {
+        var body = null;
+        try { body = await res.json(); } catch (_e) { body = null; }
+        if (body && typeof body.deleteToken === "string" && body.deleteToken.length > 0) {
+          deleteToken = body.deleteToken;
+          if (onTokenIssued) {
+            try { onTokenIssued(deleteToken); } catch (_e) {}
+          }
+        }
+      }
+      return res ? res.status : 0;
+    } catch (_e) {
+      return 0;
+    }
+  }
+
+  return {
+    get installId() { return installId; },
+    get endpoint() { return endpoint; },
+    get enabled() { return enabled; },
+    get deleteToken() { return deleteToken; },
+    enable: function () { enabled = true; },
+    disable: function () { enabled = false; },
+    consent: async function () {
+      if (!enabled) return 0;
+      return await tryRegisterConsent();
+    },
+    transmit: async function (samples) {
+      if (!enabled || !samples || samples.length === 0) return 0;
+      if (!deleteToken) {
+        await tryRegisterConsent();
+      }
+      if (!deleteToken) return 0;
+      var batch = samples.slice(0, 100);
+      var payload = { installId: installId, packageVersion: packageVersion, samples: batch };
+      assertNoPII(payload);
+      try {
+        var authOpts = Object.assign({}, fetchOptions, {
+          headers: Object.assign(
+            {},
+            (fetchOptions && fetchOptions.headers) || {},
+            { "Authorization": "Bearer " + deleteToken }
+          ),
+        });
+        var res = await safeTransmit(endpoint + "/samples", payload, authOpts);
+        if (res.ok) return batch.length;
+        return 0;
+      } catch (_e) {
+        return 0;
+      }
+    },
+    forget: async function () {
+      enabled = false;
+      if (!deleteToken) return 0;
+      try {
+        var res = await safeTransmit(
+          endpoint + "/installs/forget",
+          { installId: installId, deleteToken: deleteToken },
+          fetchOptions
+        );
+        return res.status;
+      } catch (_e) {
+        return 0;
+      }
+    },
+  };
+}
+
+export { DEFAULT_TELEMETRY_ENDPOINT, enableTelemetry };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "boosten-runtime",
-  "version": "0.1.0-alpha.1",
+  "version": "0.2.1",
   "private": false,
   "type": "module",
   "description": "React Native performance runtime: tracker hook, frame sampler, boot ladder, novel detectors, score formula. Zero-config, in-memory by default.",
@@ -12,6 +12,10 @@
     "./types": {
       "types": "./dist/types.d.ts",
       "default": "./dist/types.js"
+    },
+    "./telemetry": {
+      "types": "./dist/telemetry.d.ts",
+      "default": "./dist/telemetry.js"
     }
   },
   "files": [