flagmint-js-sdk 2.2.2 → 2.2.3-rc.1

package/dist/sdk/core/config-sync/index.d.ts

@@ -7,7 +7,7 @@ export type { ConfigSyncPayload, DeltaConfigPayload, DeltasCatchUpPayload, FullC
 export { performAslHandshake } from './handshake';
 export type { AslHandshakeSuccess } from './handshake';
 export { evaluateSdkFlag, evaluateAllSdkFlags, coerceType, prepareContextForEvaluator, prepareContextForLocalEval, mapToRecord, } from './evaluateSdkFlag';
-export { PII_VALUE_ENCODING, normalizePiiString, hashPiiValue, isPiiAttribute, payloadHasExplicitPiiFields, piiWireOptionsFromPayload, resolvePiiWireForDelta, applyPiiHashToFlatContext, } from './piiHash';
+export { PII_VALUE_ENCODING, normalizePiiString, hashPiiValue, isPiiAttribute, payloadHasExplicitPiiFields, hasExplicitInvalidPiiEncoding, hasMalformedPiiAttributes, payloadRequiresUsablePiiWire, isExplicitPiiRequirementCleared, piiAttributeKeysFromPayload, piiWireOptionsFromPayload, isPiiWireBroken, resolvePiiWireForDelta, applyPiiHashToFlatContext, } from './piiHash';
 export type { PiiWireOptions, ApplyPiiHashMode } from './piiHash';
 export { evaluateRule, evaluateKillSwitch, evaluateOnVariation, evaluateFlagWithTargetingRules, applyRolloutStrategy, applyPercentageRollout, applyVariantRollout, applyGradualRollout, computeCurrentPercentage, defaultHash, getContextAttribute, } from './flagEvaluator';
 export type { ExpectedFlagType, FlagEvaluationResult, Condition, TargetingRule, Rollout, Variation, Segment, EvaluationDeps, } from './flagEvaluator';

package/dist/sdk/core/config-sync/piiHash.d.ts

@@ -53,6 +53,40 @@ export type PiiWirePayloadFields = {
  * @param payload Signed fullConfig / delta fields
  */
 export declare function payloadHasExplicitPiiFields(payload: PiiWirePayloadFields | null | undefined): boolean;
+/**
+ * String attribute keys listed on a PII wire payload (ignores non-strings).
+ *
+ * @param payload Signed fullConfig / delta fields
+ */
+export declare function piiAttributeKeysFromPayload(payload: PiiWirePayloadFields | null | undefined): string[];
+/**
+ * True when `piiAttributes` is present but not a clean list of non-empty strings.
+ * e.g. `[null]`, `['']`, or a non-array — must not count as "remove all PII".
+ *
+ * @param payload Signed fullConfig / delta fields
+ */
+export declare function hasMalformedPiiAttributes(payload: PiiWirePayloadFields | null | undefined): boolean;
+/**
+ * True when `piiValueEncoding` is present but is not usable `hmac-v1`.
+ * Distinguishes omitted encoding (OK — default hmac-v1) from e.g. `123` / `hmac-v2`.
+ *
+ * @param payload Signed fullConfig / delta fields
+ */
+export declare function hasExplicitInvalidPiiEncoding(payload: PiiWirePayloadFields | null | undefined): boolean;
+/**
+ * True when the payload claims PII hashing is in play and the client must have
+ * usable salt + `hmac-v1` encoding (otherwise local eval must fail closed).
+ *
+ * @param payload Signed fullConfig / delta fields
+ */
+export declare function payloadRequiresUsablePiiWire(payload: PiiWirePayloadFields | null | undefined): boolean;
+/**
+ * True when the payload explicitly clears the PII attribute list.
+ * Only a literal empty array `[]` counts — `[null]` / `['']` are malformed, not removal.
+ *
+ * @param payload Signed fullConfig / delta fields
+ */
+export declare function isExplicitPiiRequirementCleared(payload: PiiWirePayloadFields | null | undefined): boolean;
 /**
  * Parse PII wire options from a config-sync payload body.
  *
@@ -60,6 +94,18 @@ export declare function payloadHasExplicitPiiFields(payload: PiiWirePayloadField
  * @returns Options when salt + encoding are usable; otherwise null
  */
 export declare function piiWireOptionsFromPayload(payload: PiiWirePayloadFields | null | undefined): PiiWireOptions | null;
+/**
+ * Whether resolved PII options are missing while the payload (or prior state)
+ * still requires hashing — local eval must use defaults only.
+ *
+ * Explicit `piiAttributes: []` (literal empty array) clears the requirement
+ * even if salt is empty — evaluation may proceed without hashing.
+ *
+ * @param payload Payload that was just applied (full or merged delta fields)
+ * @param resolved Result of {@link piiWireOptionsFromPayload} / delta resolve
+ * @param previousPriorHadPiiAttrs Whether the store previously had PII attribute keys
+ */
+export declare function isPiiWireBroken(payload: PiiWirePayloadFields | null | undefined, resolved: PiiWireOptions | null, previousPriorHadPiiAttrs?: boolean): boolean;
 /**
  * Resolve PII wire options for a delta: keep prior when all PII fields are
  * absent; otherwise parse after merging omitted fields from `previous`.

package/dist/sdk/core/config-sync/rulesStore.d.ts

@@ -11,6 +11,11 @@ export type RulesState = {
     needsFullConfig: boolean;
     /** PII hash options from the last fullConfig/delta (null when absent). */
     piiWire: PiiWireOptions | null;
+    /**
+     * True when hashed PII rules are expected but salt/encoding is unusable.
+     * Fail closed (defaults only) until a good fullConfig arrives.
+     */
+    piiWireBroken: boolean;
 };
 export type ApplyResult = {
     ok: true;
@@ -36,7 +41,8 @@ export declare class RulesStore {
     getMacKey(): Uint8Array | null;
     getState(): RulesState;
     /**
-     * Fail-closed readiness: lease not expired and store marked ready.
+     * Fail-closed readiness: lease not expired, store marked ready, and PII
+     * wire metadata usable when hashing is required.
      */
     isReady(now?: number): boolean;
     /**

package/dist/sdk/core/config-sync/types.d.ts

@@ -79,4 +79,9 @@ export type RulesCacheSnapshot = {
     piiAttributes?: string[];
     piiSalt?: string;
     piiValueEncoding?: string;
+    /**
+     * When true, hydrate must stay fail-closed even if salt/attrs were omitted
+     * from the snapshot (broken wire with `piiWire === null`).
+     */
+    piiWireBroken?: boolean;
 };

package/dist/sdk/core/helpers/cacheHelper.d.ts

@@ -8,6 +8,13 @@ export interface StorageAdapter {
 export declare function setCacheStorage(customStorage: StorageAdapter): void;
 export declare function loadCachedFlags<T>(apiKey: string, ttl: number): FeatureFlags<T> | null;
 export declare function saveCachedFlags<T>(apiKey: string, data: FeatureFlags<T>): void;
+/**
+ * Drop the evaluated-flag localCache entry for an API key.
+ * Used when config-sync is on so a prior tab’s answers cannot poison another tab.
+ *
+ * @param apiKey SDK API key used as the storage key suffix
+ */
+export declare function clearCachedFlags(apiKey: string): void;
 export declare function loadCachedContext<C>(apiKey: string): C | null;
 export declare function saveCachedContext<C>(apiKey: string, context: C): void;
 /** Config-sync rules localCache — no wall-clock TTL; lease `expiresAt` gates reuse. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "flagmint-js-sdk",
-  "version": "2.2.2",
+  "version": "2.2.3-rc.1",
   "description": "Framework-agnostic JavaScript SDK for managing feature flags in Flagmint applications.",
   "author": "Flagmint Team",
   "license": "BSD 3-Clause",