flagmint-js-sdk 2.2.1 → 2.2.2-rc.0

package/dist/flagmint.umd.js

@@ -39095,7 +39095,7 @@ var __publicField = (obj, key, value) => {
       this.connectPromise = new Promise((resolve, reject) => {
         this.connectResolve = resolve;
         this.connectReject = reject;
-        const sdkVersion = "2.2.1";
+        const sdkVersion = "2.2.2-rc.0";
         const platform2 = typeof window !== "undefined" ? "browser" : "nodejs";
         const wrapperName = this.configOptions?.wrapper?.name || "native-js";
         const wrapperVersion = this.configOptions?.wrapper?.version || "none";
@@ -41781,7 +41781,7 @@ var __publicField = (obj, key, value) => {
   const hkdf = (hash2, ikm, salt, info, length) => expand(hash2, extract(hash2, ikm, salt), info, length);
   const ASL_HKDF_INFO = "flagmint-asl-config-sync-mac-v1";
   const ASL_KEY_AGREEMENT = "x25519-hkdf-sha256";
-  const textEncoder$1 = new TextEncoder();
+  const textEncoder$2 = new TextEncoder();
   function generateAslClientKeyPair() {
     const privateKey = x25519.utils.randomSecretKey();
     const publicKey = x25519.getPublicKey(privateKey);
@@ -41812,7 +41812,7 @@ var __publicField = (obj, key, value) => {
       sha256,
       shared,
       salt,
-      textEncoder$1.encode(ASL_HKDF_INFO),
+      textEncoder$2.encode(ASL_HKDF_INFO),
       32
     );
     return { configMacKey };
@@ -41822,7 +41822,7 @@ var __publicField = (obj, key, value) => {
       return;
     key2.fill(0);
   }
-  const textEncoder = new TextEncoder();
+  const textEncoder$1 = new TextEncoder();
   function canonicalizeForSigning(value) {
     return JSON.stringify(sortValue(value));
   }
@@ -41839,12 +41839,12 @@ var __publicField = (obj, key, value) => {
     return sorted;
   }
   function normalizeMacKey(secret) {
-    return typeof secret === "string" ? textEncoder.encode(secret) : secret;
+    return typeof secret === "string" ? textEncoder$1.encode(secret) : secret;
   }
   function signConfigPayload(body, secret) {
     const { signature: _ignored, ...unsigned } = body;
     const canonical = canonicalizeForSigning(unsigned);
-    const mac = hmac(sha256, normalizeMacKey(secret), textEncoder.encode(canonical));
+    const mac = hmac(sha256, normalizeMacKey(secret), textEncoder$1.encode(canonical));
     return bytesToHex$1(mac);
   }
   function timingSafeEqualBytes(a, b) {
@@ -41866,13 +41866,93 @@ var __publicField = (obj, key, value) => {
     } catch {
       return false;
     }
-    const a = textEncoder.encode(body.signature);
-    const b = textEncoder.encode(expected);
+    const a = textEncoder$1.encode(body.signature);
+    const b = textEncoder$1.encode(expected);
     return timingSafeEqualBytes(a, b);
   }
   function isConfigPayloadExpired(expiresAt, now = Date.now()) {
     return !Number.isFinite(expiresAt) || now >= expiresAt;
   }
+  const PII_VALUE_ENCODING = "hmac-v1";
+  const textEncoder = new TextEncoder();
+  const HASH_HEX_PATTERN = /^[0-9a-f]{64}$/;
+  function normalizePiiString(value) {
+    return value.trim().toLowerCase();
+  }
+  function hashPiiValue(value, salt) {
+    const mac = hmac(
+      sha256,
+      textEncoder.encode(salt),
+      textEncoder.encode(normalizePiiString(value))
+    );
+    return bytesToHex$1(mac);
+  }
+  function isPiiAttribute(attribute, piiAttributes) {
+    if (!attribute || piiAttributes.length === 0)
+      return false;
+    const attr = attribute.trim();
+    if (!attr)
+      return false;
+    for (const key2 of piiAttributes) {
+      if (!key2)
+        continue;
+      if (attr === key2)
+        return true;
+      if (attr.endsWith(`.${key2}`))
+        return true;
+    }
+    return false;
+  }
+  function piiWireOptionsFromPayload(payload) {
+    if (!payload)
+      return null;
+    const salt = typeof payload.piiSalt === "string" ? payload.piiSalt : "";
+    if (!salt)
+      return null;
+    const encoding = typeof payload.piiValueEncoding === "string" ? payload.piiValueEncoding : PII_VALUE_ENCODING;
+    if (encoding !== PII_VALUE_ENCODING)
+      return null;
+    const attrs = Array.isArray(payload.piiAttributes) ? payload.piiAttributes.filter((k) => typeof k === "string") : [];
+    return {
+      piiAttributes: attrs,
+      piiSalt: salt,
+      piiValueEncoding: PII_VALUE_ENCODING
+    };
+  }
+  function applyPiiHashToFlatContext(context, options) {
+    if (!options || !options.piiSalt || !options.piiAttributes.length || options.piiValueEncoding !== PII_VALUE_ENCODING) {
+      return context;
+    }
+    let changed = false;
+    const out = { ...context };
+    for (const [key2, value] of Object.entries(context)) {
+      if (!isPiiAttribute(key2, options.piiAttributes))
+        continue;
+      if (typeof value === "string") {
+        if (HASH_HEX_PATTERN.test(value))
+          continue;
+        out[key2] = hashPiiValue(value, options.piiSalt);
+        changed = true;
+        continue;
+      }
+      if (Array.isArray(value)) {
+        let arrayChanged = false;
+        const next = value.map((entry) => {
+          if (typeof entry !== "string")
+            return entry;
+          if (HASH_HEX_PATTERN.test(entry))
+            return entry;
+          arrayChanged = true;
+          return hashPiiValue(entry, options.piiSalt);
+        });
+        if (arrayChanged) {
+          out[key2] = next;
+          changed = true;
+        }
+      }
+    }
+    return changed ? out : context;
+  }
   function createEmptyRulesState() {
     return {
       version: 0,
@@ -41880,7 +41960,8 @@ var __publicField = (obj, key, value) => {
       flags: /* @__PURE__ */ new Map(),
       segments: /* @__PURE__ */ new Map(),
       ready: false,
-      needsFullConfig: true
+      needsFullConfig: true,
+      piiWire: null
     };
   }
   function cloneState(state) {
@@ -41890,7 +41971,12 @@ var __publicField = (obj, key, value) => {
       flags: new Map(state.flags),
       segments: new Map(state.segments),
       ready: state.ready,
-      needsFullConfig: state.needsFullConfig
+      needsFullConfig: state.needsFullConfig,
+      piiWire: state.piiWire ? {
+        piiAttributes: [...state.piiWire.piiAttributes],
+        piiSalt: state.piiWire.piiSalt,
+        piiValueEncoding: state.piiWire.piiValueEncoding
+      } : null
     };
   }
   function segmentsFromRecord(record) {
@@ -41923,7 +42009,8 @@ var __publicField = (obj, key, value) => {
       flags,
       segments: segmentsFromRecord(action.segments),
       ready: true,
-      needsFullConfig: false
+      needsFullConfig: false,
+      piiWire: piiWireOptionsFromPayload(action)
     };
   }
   function applyPatch(state, action) {
@@ -41935,13 +42022,15 @@ var __publicField = (obj, key, value) => {
       if (flag?.key)
         flags.set(flag.key, flag);
     }
+    const nextPii = piiWireOptionsFromPayload(action) ?? state.piiWire;
     return {
       version: action.toVersion,
       expiresAt: typeof action.expiresAt === "number" ? action.expiresAt : state.expiresAt,
       flags,
       segments: applySegmentUpserts(state.segments, action.segments),
       ready: true,
-      needsFullConfig: false
+      needsFullConfig: false,
+      piiWire: nextPii
     };
   }
   function reduceRules(state, action, now = Date.now()) {
@@ -42118,11 +42207,17 @@ var __publicField = (obj, key, value) => {
       this.state.segments.forEach((segment, id) => {
         segments[id] = segment;
       });
+      const pii = this.state.piiWire;
       return {
         version: this.state.version,
         expiresAt: this.state.expiresAt,
         flags: Array.from(this.state.flags.values()),
-        segments
+        segments,
+        ...pii ? {
+          piiAttributes: [...pii.piiAttributes],
+          piiSalt: pii.piiSalt,
+          piiValueEncoding: pii.piiValueEncoding
+        } : {}
       };
     }
     hydrateFromSnapshot(snapshot, now = Date.now()) {
@@ -42138,7 +42233,8 @@ var __publicField = (obj, key, value) => {
         flags,
         segments: segmentsFromRecord(snapshot.segments),
         ready: !expired && flags.size > 0,
-        needsFullConfig: expired || flags.size === 0
+        needsFullConfig: expired || flags.size === 0,
+        piiWire: piiWireOptionsFromPayload(snapshot)
       };
     }
   }
@@ -42902,8 +42998,13 @@ var __publicField = (obj, key, value) => {
     }
     return context;
   }
-  function evaluateSdkFlag(flag, context, segments) {
-    const evalContext = prepareContextForEvaluator(context);
+  function prepareContextForLocalEval(context, pii) {
+    const prepared = prepareContextForEvaluator(context);
+    const flat = flattenEvaluationContext(prepared);
+    return applyPiiHashToFlatContext(flat, pii);
+  }
+  function evaluateSdkFlag(flag, context, segments, pii) {
+    const evalContext = prepareContextForLocalEval(context, pii);
     const variationsById = {};
     for (const v of flag.variations || []) {
       if (v?.id)
@@ -42963,7 +43064,7 @@ var __publicField = (obj, key, value) => {
   }
   function evaluateAllSdkFlags(flags, context, segments, options) {
     const list = flags instanceof Map ? Array.from(flags.values()) : flags;
-    const prepared = prepareContextForEvaluator(context);
+    const prepared = prepareContextForLocalEval(context, options?.pii);
     const out = {};
     for (const flag of list) {
       if (!flag?.key)
@@ -42972,7 +43073,7 @@ var __publicField = (obj, key, value) => {
         out[flag.key] = coerceType(flag.default_value, flag.type);
         continue;
       }
-      out[flag.key] = evaluateSdkFlag(flag, prepared, segments);
+      out[flag.key] = evaluateSdkFlag(flag, prepared, segments, null);
     }
     return out;
   }
@@ -43417,7 +43518,8 @@ var __publicField = (obj, key, value) => {
           value = evaluateSdkFlag(
             flag,
             this.context,
-            this.rulesStore.getState().segments
+            this.rulesStore.getState().segments,
+            this.rulesStore.getState().piiWire
           ) ?? fallback;
         }
       } else {
@@ -43897,7 +43999,7 @@ var __publicField = (obj, key, value) => {
         state.flags,
         context ?? this.context,
         state.segments,
-        { failClosedDefaultsOnly: failClosed }
+        { failClosedDefaultsOnly: failClosed, pii: state.piiWire }
       );
     }
     analyticsMapFromRulesStore() {
@@ -44026,6 +44128,7 @@ var __publicField = (obj, key, value) => {
   exports2.LongPollingTransport = LongPollingTransport;
   exports2.RulesStore = RulesStore;
   exports2.SseTransport = SseTransport;
+  exports2.applyPiiHashToFlatContext = applyPiiHashToFlatContext;
   exports2.applyRolloutStrategy = applyRolloutStrategy;
   exports2.asyncCache = cacheHelper_async;
   exports2.canonicalizeForSigning = canonicalizeForSigning;
@@ -44043,11 +44146,13 @@ var __publicField = (obj, key, value) => {
   exports2.flattenEvaluationContext = flattenEvaluationContext;
   exports2.generateAslClientKeyPair = generateAslClientKeyPair;
   exports2.hashPercent = hashPercent;
+  exports2.hashPiiValue = hashPiiValue;
   exports2.hashToPercentage = hashToPercentage;
   exports2.isConfigPayloadExpired = isConfigPayloadExpired;
   exports2.isInSegment = isInSegment;
   exports2.performAslHandshake = performAslHandshake;
   exports2.pickVariant = pickVariant;
+  exports2.prepareContextForLocalEval = prepareContextForLocalEval;
   exports2.reduceRules = reduceRules;
   exports2.signConfigPayload = signConfigPayload;
   exports2.stringHash = stringHash;