pulse-updates 1.1.1 → 1.2.0

package/lib/module/decisions.js

@@ -0,0 +1,122 @@
+/** Generic decision protocol. Product-specific action handlers remain in each app. */
+export function createPulseDecisionClient(options) {
+  const fetcher = options.fetch ?? globalThis.fetch;
+  const base = options.apiUrl.replace(/\/+$/, '');
+  const slug = encodeURIComponent(options.appSlug);
+  const timeoutMs = Math.max(250, options.timeoutMs ?? 3_000);
+  const executionMode = options.executionMode ?? 'shadow-only';
+  const reportOutcome = async (decisionId, outcome, metadata) => {
+    try {
+      const response = await timedFetch(fetcher, `${base}/pulse/decisions/${slug}/${encodeURIComponent(decisionId)}/outcome`, {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/json'
+        },
+        body: JSON.stringify({
+          outcome,
+          ...(metadata ? {
+            metadata
+          } : {})
+        })
+      }, timeoutMs);
+      return response.ok;
+    } catch (error) {
+      options.onError?.(error);
+      return false;
+    }
+  };
+  const decide = async (trigger, request = {}) => {
+    try {
+      const context = await options.getContext();
+      const response = await timedFetch(fetcher, `${base}/pulse/decisions/${slug}`, {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/json'
+        },
+        body: JSON.stringify({
+          ...context,
+          attributes: {
+            ...(context.attributes ?? {}),
+            ...(request.attributes ?? {})
+          },
+          trigger,
+          channel: request.channel ?? 'in_app',
+          idempotencyKey: request.idempotencyKey ?? randomKey()
+        })
+      }, timeoutMs);
+      if (!response.ok) throw new Error(`Pulse decision HTTP ${response.status}`);
+      const decision = parseDecision(await response.json());
+      if (!decision.execute) return decision;
+      if (executionMode !== 'allow-live') {
+        void reportOutcome(decision.decisionId, 'failed', {
+          reason: 'client_executor_not_armed'
+        });
+        return decision;
+      }
+      const action = decision.action;
+      const handler = action?.kind ? options.handlers?.[action.kind] : undefined;
+      if (!action || !handler) {
+        void reportOutcome(decision.decisionId, 'failed', {
+          reason: 'unknown_action_kind',
+          kind: action?.kind ?? null
+        });
+        return decision;
+      }
+      try {
+        const result = await handler(action, decision);
+        void reportOutcome(decision.decisionId, result?.outcome ?? 'accepted', result?.metadata);
+      } catch (error) {
+        options.onError?.(error);
+        void reportOutcome(decision.decisionId, 'failed', {
+          reason: 'handler_failed'
+        });
+      }
+      return decision;
+    } catch (error) {
+      options.onError?.(error);
+      return null;
+    }
+  };
+  return {
+    decide,
+    reportOutcome
+  };
+}
+function parseDecision(raw) {
+  if (!raw || typeof raw !== 'object') throw new Error('Malformed Pulse decision');
+  const value = raw;
+  if (typeof value.decisionId !== 'string' || typeof value.execute !== 'boolean' || typeof value.mode !== 'string' || typeof value.verdict !== 'string' || typeof value.reasonCode !== 'string') throw new Error('Malformed Pulse decision');
+  const action = value.action;
+  if (action != null && (typeof action !== 'object' || typeof action.kind !== 'string')) {
+    throw new Error('Malformed Pulse action');
+  }
+  return {
+    decisionId: value.decisionId,
+    replayed: value.replayed === true,
+    execute: value.execute,
+    mode: value.mode,
+    verdict: value.verdict,
+    reasonCode: value.reasonCode,
+    policyKey: typeof value.policyKey === 'string' ? value.policyKey : null,
+    policyVersion: typeof value.policyVersion === 'number' ? value.policyVersion : null,
+    action: action ?? null
+  };
+}
+async function timedFetch(fetcher, url, init, timeoutMs) {
+  const controller = typeof AbortController !== 'undefined' ? new AbortController() : null;
+  const timer = controller ? setTimeout(() => controller.abort(), timeoutMs) : null;
+  try {
+    return await fetcher(url, {
+      ...init,
+      signal: controller?.signal
+    });
+  } finally {
+    if (timer) clearTimeout(timer);
+  }
+}
+function randomKey() {
+  const cryptoLike = globalThis.crypto;
+  if (typeof cryptoLike?.randomUUID === 'function') return cryptoLike.randomUUID();
+  return `moment-${Date.now()}-${Math.random().toString(36).slice(2, 14)}`;
+}
+//# sourceMappingURL=decisions.js.map

package/lib/module/decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createPulseDecisionClient","options","fetcher","fetch","globalThis","base","apiUrl","replace","slug","encodeURIComponent","appSlug","timeoutMs","Math","max","executionMode","reportOutcome","decisionId","outcome","metadata","response","timedFetch","method","headers","body","JSON","stringify","ok","error","onError","decide","trigger","request","context","getContext","attributes","channel","idempotencyKey","randomKey","Error","status","decision","parseDecision","json","execute","reason","action","handler","kind","handlers","undefined","result","raw","value","mode","verdict","reasonCode","replayed","policyKey","policyVersion","url","init","controller","AbortController","timer","setTimeout","abort","signal","clearTimeout","cryptoLike","crypto","randomUUID","Date","now","random","toString","slice"],"sourceRoot":"../../src","sources":["decisions.ts"],"mappings":"AA6DA;AACA,OAAO,SAASA,yBAAyBA,CAACC,OAAmC,EAAuB;EAClG,MAAMC,OAAO,GAAGD,OAAO,CAACE,KAAK,IAAIC,UAAU,CAACD,KAAK;EACjD,MAAME,IAAI,GAAGJ,OAAO,CAACK,MAAM,CAACC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;EAC/C,MAAMC,IAAI,GAAGC,kBAAkB,CAACR,OAAO,CAACS,OAAO,CAAC;EAChD,MAAMC,SAAS,GAAGC,IAAI,CAACC,GAAG,CAAC,GAAG,EAAEZ,OAAO,CAACU,SAAS,IAAI,KAAK,CAAC;EAC3D,MAAMG,aAAa,GAAGb,OAAO,CAACa,aAAa,IAAI,aAAa;EAE5D,MAAMC,aAAa,GAAG,MAAAA,CACpBC,UAAkB,EAClBC,OAAwB,EACxBC,QAAkC,KACb;IACrB,IAAI;MACF,MAAMC,QAAQ,GAAG,MAAMC,UAAU,CAAClB,OAAO,EACvC,GAAGG,IAAI,oBAAoBG,IAAI,IAAIC,kBAAkB,CAACO,UAAU,CAAC,UAAU,EAAE;QAC3EK,MAAM,EAAE,MAAM;QACdC,OAAO,EAAE;UAAE,cAAc,EAAE;QAAmB,CAAC;QAC/CC,IAAI,EAAEC,IAAI,CAACC,SAAS,CAAC;UAAER,OAAO;UAAE,IAAIC,QAAQ,GAAG;YAAEA;UAAS,CAAC,GAAG,CAAC,CAAC;QAAE,CAAC;MACrE,CAAC,EAAEP,SAAS,CAAC;MACf,OAAOQ,QAAQ,CAACO,EAAE;IACpB,CAAC,CAAC,OAAOC,KAAK,EAAE;MACd1B,OAAO,CAAC2B,OAAO,GAAGD,KAAK,CAAC;MACxB,OAAO,KAAK;IACd;EACF,CAAC;EAED,MAAME,MAAM,GAAG,MAAAA,CAAOC,OAAe,EAAEC,OAAsB,GAAG,CAAC,CAAC,KAAoC;IACpG,IAAI;MACF,MAAMC,OAAO,GAAG,MAAM/B,OAAO,CAACgC,UAAU,CAAC,CAAC;MAC1C,MAAMd,QAAQ,GAAG,MAAMC,UAAU,CAAClB,OAAO,EAAE,GAAGG,IAAI,oBAAoBG,IAAI,EAAE,EAAE;QAC5Ea,MAAM,EAAE,MAAM;QACdC,OAAO,EAAE;UAAE,cAAc,EAAE;QAAmB,CAAC;QAC/CC,IAAI,EAAEC,IAAI,CAACC,SAAS,CAAC;UACnB,GAAGO,OAAO;UACVE,UAAU,EAAE;YAAE,IAAIF,OAAO,CAACE,UAAU,IAAI,CAAC,CAAC,CAAC;YAAE,IAAIH,OAAO,CAACG,UAAU,IAAI,CAAC,CAAC;UAAE,CAAC;UAC5EJ,OAAO;UACPK,OAAO,EAAEJ,OAAO,CAACI,OAAO,IAAI,QAAQ;UACpCC,cAAc,EAAEL,OAAO,CAACK,cAAc,IAAIC,SAAS,CAAC;QACtD,CAAC;MACH,CAAC,EAAE1B,SAAS,CAAC;MACb,IAAI,CAACQ,QAAQ,CAACO,EAAE,EAAE,MAAM,IAAIY,KAAK,CAAC,uBAAuBnB,QAAQ,CAACoB,MAAM,EAAE,CAAC;MAE3E,MAAMC,QAAQ,GAAGC,aAAa,CAAC,MAAMtB,QAAQ,CAACuB,IAAI,CAAC,CAAC,CAAC;MACrD,IAAI,CAACF,QAAQ,CAACG,OAAO,EAAE,OAAOH,QAAQ;MACtC,IAAI1B,aAAa,KAAK,YAAY,EAAE;QAClC,KAAKC,aAAa,CAACyB,QAAQ,CAACxB,UAAU,EAAE,QAAQ,EAAE;UAAE4B,MAAM,EAAE;QAA4B,CAAC,CAAC;QAC1F,OAAOJ,QAAQ;MACjB;MAEA,MAAMK,MAAM,GAAGL,QAAQ,CAACK,MAAM;MAC9B,MAAMC,OAAO,GAAGD,MAAM,EAAEE,IAAI,GAAG9C,OAAO,CAAC+C,QAAQ,GAAGH,MAAM,CAACE,IAAI,CAAC,GAAGE,SAAS;MAC1E,IAAI,CAACJ,MAAM,IAAI,CAACC,OAAO,EAAE;QACvB,KAAK/B,aAAa,CAACyB,QAAQ,CAACxB,UAAU,EAAE,QAAQ,EAAE;UAChD4B,MAAM,EAAE,qBAAqB;UAC7BG,IAAI,EAAEF,MAAM,EAAEE,IAAI,IAAI;QACxB,CAAC,CAAC;QACF,OAAOP,QAAQ;MACjB;MAEA,IAAI;QACF,MAAMU,MAAM,GAAG,MAAMJ,OAAO,CAACD,MAAM,EAAEL,QAAQ,CAAC;QAC9C,KAAKzB,aAAa,CAACyB,QAAQ,CAACxB,UAAU,EAAEkC,MAAM,EAAEjC,OAAO,IAAI,UAAU,EAAEiC,MAAM,EAAEhC,QAAQ,CAAC;MAC1F,CAAC,CAAC,OAAOS,KAAK,EAAE;QACd1B,OAAO,CAAC2B,OAAO,GAAGD,KAAK,CAAC;QACxB,KAAKZ,aAAa,CAACyB,QAAQ,CAACxB,UAAU,EAAE,QAAQ,EAAE;UAAE4B,MAAM,EAAE;QAAiB,CAAC,CAAC;MACjF;MACA,OAAOJ,QAAQ;IACjB,CAAC,CAAC,OAAOb,KAAK,EAAE;MACd1B,OAAO,CAAC2B,OAAO,GAAGD,KAAK,CAAC;MACxB,OAAO,IAAI;IACb;EACF,CAAC;EAED,OAAO;IAAEE,MAAM;IAAEd;EAAc,CAAC;AAClC;AAEA,SAAS0B,aAAaA,CAACU,GAAY,EAAiB;EAClD,IAAI,CAACA,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ,EAAE,MAAM,IAAIb,KAAK,CAAC,0BAA0B,CAAC;EAChF,MAAMc,KAAK,GAAGD,GAA8B;EAC5C,IAAI,OAAOC,KAAK,CAACpC,UAAU,KAAK,QAAQ,IAAI,OAAOoC,KAAK,CAACT,OAAO,KAAK,SAAS,IAC1E,OAAOS,KAAK,CAACC,IAAI,KAAK,QAAQ,IAAI,OAAOD,KAAK,CAACE,OAAO,KAAK,QAAQ,IACnE,OAAOF,KAAK,CAACG,UAAU,KAAK,QAAQ,EAAE,MAAM,IAAIjB,KAAK,CAAC,0BAA0B,CAAC;EACrF,MAAMO,MAAM,GAAGO,KAAK,CAACP,MAAM;EAC3B,IAAIA,MAAM,IAAI,IAAI,KAAK,OAAOA,MAAM,KAAK,QAAQ,IAC7C,OAAQA,MAAM,CAA6BE,IAAI,KAAK,QAAQ,CAAC,EAAE;IACjE,MAAM,IAAIT,KAAK,CAAC,wBAAwB,CAAC;EAC3C;EACA,OAAO;IACLtB,UAAU,EAAEoC,KAAK,CAACpC,UAAU;IAC5BwC,QAAQ,EAAEJ,KAAK,CAACI,QAAQ,KAAK,IAAI;IACjCb,OAAO,EAAES,KAAK,CAACT,OAAO;IACtBU,IAAI,EAAED,KAAK,CAACC,IAAI;IAChBC,OAAO,EAAEF,KAAK,CAACE,OAAO;IACtBC,UAAU,EAAEH,KAAK,CAACG,UAAU;IAC5BE,SAAS,EAAE,OAAOL,KAAK,CAACK,SAAS,KAAK,QAAQ,GAAGL,KAAK,CAACK,SAAS,GAAG,IAAI;IACvEC,aAAa,EAAE,OAAON,KAAK,CAACM,aAAa,KAAK,QAAQ,GAAGN,KAAK,CAACM,aAAa,GAAG,IAAI;IACnFb,MAAM,EAAGA,MAAM,IAA0C;EAC3D,CAAC;AACH;AAEA,eAAezB,UAAUA,CACvBlB,OAAgC,EAChCyD,GAAW,EACXC,IAAiB,EACjBjD,SAAiB,EACE;EACnB,MAAMkD,UAAU,GAAG,OAAOC,eAAe,KAAK,WAAW,GAAG,IAAIA,eAAe,CAAC,CAAC,GAAG,IAAI;EACxF,MAAMC,KAAK,GAAGF,UAAU,GAAGG,UAAU,CAAC,MAAMH,UAAU,CAACI,KAAK,CAAC,CAAC,EAAEtD,SAAS,CAAC,GAAG,IAAI;EACjF,IAAI;IAAE,OAAO,MAAMT,OAAO,CAACyD,GAAG,EAAE;MAAE,GAAGC,IAAI;MAAEM,MAAM,EAAEL,UAAU,EAAEK;IAAO,CAAC,CAAC;EAAE,CAAC,SACnE;IAAE,IAAIH,KAAK,EAAEI,YAAY,CAACJ,KAAK,CAAC;EAAE;AAC5C;AAEA,SAAS1B,SAASA,CAAA,EAAW;EAC3B,MAAM+B,UAAU,GAAGhE,UAAU,CAACiE,MAAmD;EACjF,IAAI,OAAOD,UAAU,EAAEE,UAAU,KAAK,UAAU,EAAE,OAAOF,UAAU,CAACE,UAAU,CAAC,CAAC;EAChF,OAAO,UAAUC,IAAI,CAACC,GAAG,CAAC,CAAC,IAAI5D,IAAI,CAAC6D,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,EAAE,CAAC,CAACC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;AAC1E","ignoreList":[]}

package/lib/module/index.js

@@ -5,4 +5,5 @@ export { initializeAssetResolver, updateLocalAssets } from './assetResolver';
 export * from './config';
 export * from './track';
 export * from './init';
+export * from './decisions';
 //# sourceMappingURL=index.js.map

package/lib/module/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["usePulseUpdates","initializeAssetResolver","updateLocalAssets"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":"AAAA,cAAc,gBAAgB;AAC9B,cAAc,SAAS;AACvB,SAASA,eAAe,QAAQ,mBAAmB;AACnD,SAASC,uBAAuB,EAAEC,iBAAiB,QAAQ,iBAAiB;AAC5E,cAAc,UAAU;AACxB,cAAc,SAAS;AACvB,cAAc,QAAQ","ignoreList":[]}
+{"version":3,"names":["usePulseUpdates","initializeAssetResolver","updateLocalAssets"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":"AAAA,cAAc,gBAAgB;AAC9B,cAAc,SAAS;AACvB,SAASA,eAAe,QAAQ,mBAAmB;AACnD,SAASC,uBAAuB,EAAEC,iBAAiB,QAAQ,iBAAiB;AAC5E,cAAc,UAAU;AACxB,cAAc,SAAS;AACvB,cAAc,QAAQ;AACtB,cAAc,aAAa","ignoreList":[]}

package/lib/module/init.js

@@ -23,39 +23,68 @@
  * installs — a targeting bug that looks like a rollout that "did not work".
  */
 
-import { configureConfig, fetchConfig, startConfigAutoRefresh } from './config';
-import { configureTracking } from './track';
+import { configureConfig, fetchConfig, startConfigAutoRefresh, getConfigInfo, getConfigBoolean, getConfigNumber, getConfigString, getConfigJson } from './config';
+import { configureTracking, disposeTracking, flushEvents, getTrackingInfo, track } from './track';
 const DEVICE_ID_KEY = 'pulse.device-id';
+let activeClient = null;
+let stopActiveRefresh = null;
 
 /** Wires config and events, and returns the context the two share. */
 export function initPulse(opts) {
+  // Reconfiguration is synchronous. Calling the old async dispose without awaiting
+  // it lets its eventual flush tear down the brand-new tracker — exactly the race a
+  // fast app switch or test setup triggers. Persist the old outbox, stop its refresh,
+  // then configure the new app in one uninterrupted turn.
+  stopActiveRefresh?.();
+  disposeTracking();
+  activeClient = null;
+  stopActiveRefresh = null;
   const base = opts.apiUrl.replace(/\/+$/, '');
   const slug = opts.appSlug.trim();
   const configUrl = `${base}/pulse/config/${slug}`;
   const trackUrl = `${base}/pulse/track/${slug}`;
-  const deviceId = opts.deviceId?.trim() || resolveDeviceId(opts.storage);
+  const deviceStorageKey = `pulse.${slug}.device-id`;
+  let deviceId = opts.deviceId?.trim() || resolveDeviceId(opts.storage, deviceStorageKey);
   const platform = detectPlatform();
   const osVersion = detectOsVersion();
+  const appVersion = opts.appVersion ?? detectAppVersion();
+  const language = opts.language ?? detectLanguage();
+  let userId;
+  let userAttributes;
+  let consentOverride = typeof opts.analyticsConsent === 'boolean' ? opts.analyticsConsent : undefined;
+  const hasConsent = () => consentOverride ?? (typeof opts.analyticsConsent === 'function' ? opts.analyticsConsent() : true);
   const getContext = () => ({
     platform,
     osVersion,
-    appVersion: opts.appVersion,
+    appVersion,
+    language,
     deviceId,
-    userId: opts.getUserId?.(),
-    userAttributes: opts.getUserAttributes?.()
+    userId: userId ?? opts.getUserId?.(),
+    userAttributes: userAttributes ?? opts.getUserAttributes?.()
   });
   configureConfig({
     url: configUrl,
     defaults: opts.defaults,
     storage: opts.storage,
+    storageKey: `pulse.${slug}.config.v1`,
     getContext,
     pollIntervalMs: opts.pollIntervalMs,
-    onError: opts.onError
+    onError: opts.onError,
+    signingPublicKey: opts.signingPublicKey,
+    signingKeyId: opts.signingKeyId,
+    requireSignature: opts.requireConfigSignature,
+    verifySignature: opts.verifyConfigSignature ?? (opts.requireConfigSignature && !opts.signingPublicKey ? verifyWithNativeKey : undefined)
   });
   configureTracking({
     url: trackUrl,
     getContext,
     flushIntervalMs: opts.flushIntervalMs,
+    storage: opts.storage,
+    storageKey: `pulse.${slug}.events.v1`,
+    hasConsent,
+    propertyAllowlist: opts.eventPropertyAllowlist,
+    redactProperties: opts.redactEventProperties,
+    appState: opts.appState,
     onIgnored: opts.onIgnoredEvents,
     onError: opts.onError
   });
@@ -65,7 +94,7 @@ export function initPulse(opts) {
   // simply does not match this install — which reads as "the rollout did nothing".
   // Without storage the id is new on every launch, so the arm is re-dealt each time
   // and no experiment can mean anything.
-  if (!opts.appVersion) {
+  if (!appVersion) {
     opts.onError?.(new Error('Pulse: no appVersion given — version targeting and version slices will not match this install'));
   }
   if (!opts.storage && !opts.deviceId) {
@@ -76,12 +105,84 @@ export function initPulse(opts) {
   // the first response is the launch that runs on defaults, and defaults are the
   // off position of every flag.
   void fetchConfig();
-  startConfigAutoRefresh(opts.appState);
-  return {
-    deviceId,
+  const stopRefresh = startConfigAutoRefresh(opts.appState);
+  const client = {
+    get deviceId() {
+      return deviceId;
+    },
     configUrl,
-    trackUrl
+    trackUrl,
+    track,
+    flush: flushEvents,
+    setUser: (nextUserId, attributes) => {
+      userId = nextUserId?.trim() || undefined;
+      userAttributes = sanitizeAttributes(attributes);
+    },
+    clearUser: () => {
+      userId = undefined;
+      userAttributes = undefined;
+    },
+    setAnalyticsConsent: granted => {
+      consentOverride = granted;
+    },
+    resetInstallId: () => {
+      deviceId = randomId();
+      try {
+        opts.storage?.set(deviceStorageKey, deviceId);
+      } catch {/* memory-only fallback */}
+      return deviceId;
+    },
+    health: () => ({
+      appSlug: slug,
+      deviceId,
+      config: getConfigInfo(),
+      events: getTrackingInfo(),
+      analyticsConsent: hasConsent()
+    }),
+    config: {
+      boolean: getConfigBoolean,
+      number: getConfigNumber,
+      string: getConfigString,
+      json: getConfigJson,
+      refresh: fetchConfig
+    },
+    dispose: async () => {
+      stopRefresh();
+      if (activeClient !== client) return;
+      await flushEvents();
+      // Another init may have taken ownership while this network flush was pending.
+      if (activeClient === client) {
+        disposeTracking();
+        activeClient = null;
+        stopActiveRefresh = null;
+      }
+    }
+  };
+  activeClient = client;
+  stopActiveRefresh = stopRefresh;
+  return client;
+}
+
+/**
+ * AsyncStorage-friendly one-call setup. It preloads only Pulse's three app-scoped
+ * records, then exposes the same synchronous hot-path API as initPulse.
+ */
+export async function initPulseAsync(opts) {
+  const slug = opts.appSlug.trim();
+  const keys = [`pulse.${slug}.device-id`, `pulse.${slug}.config.v1`, `pulse.${slug}.events.v1`, DEVICE_ID_KEY];
+  const loaded = await Promise.all(keys.map(async key => [key, await opts.storage.getItem(key)]));
+  const memory = new Map(loaded.filter(entry => entry[1] !== null));
+  const storage = {
+    getString: key => memory.get(key),
+    set: (key, value) => {
+      memory.set(key, value);
+      void opts.storage.setItem(key, value);
+    }
   };
+  return initPulse({
+    ...opts,
+    storage
+  });
 }
 
 /**
@@ -91,18 +192,23 @@ export function initPulse(opts) {
  * arm is a hash of it, so every launch would be a fresh coin toss and no experiment
  * could mean anything. Said out loud through onError rather than hidden.
  */
-function resolveDeviceId(storage) {
+function resolveDeviceId(storage, key = DEVICE_ID_KEY) {
   if (!storage) return randomId();
   try {
-    const existing = storage.getString(DEVICE_ID_KEY);
+    const existing = storage.getString(key) ?? storage.getString(DEVICE_ID_KEY);
     if (existing) return existing;
     const minted = randomId();
-    storage.set(DEVICE_ID_KEY, minted);
+    storage.set(key, minted);
     return minted;
   } catch {
     return randomId();
   }
 }
+function sanitizeAttributes(attributes) {
+  if (!attributes) return undefined;
+  const clean = Object.fromEntries(Object.entries(attributes).filter(([key, value]) => key.trim() !== '' && typeof value === 'string').slice(0, 50));
+  return Object.keys(clean).length > 0 ? clean : undefined;
+}
 function randomId() {
   const bytes = new Uint8Array(16);
   const crypto = globalThis.crypto;
@@ -141,4 +247,37 @@ function detectOsVersion() {
     return undefined;
   }
 }
+function detectAppVersion() {
+  try {
+    // Optional by design: most RN apps already carry this package, plain JS hosts do not.
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    const loaded = require('react-native-device-info');
+    return loaded.default?.getVersion?.() ?? loaded.getVersion?.();
+  } catch {
+    return undefined;
+  }
+}
+async function verifyWithNativeKey(canonicalPayload, signature) {
+  try {
+    // Kept lazy so init/config remain usable in Node, web and test hosts without RN.
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    const updates = require('./PulseUpdates');
+    return (await updates.verifyConfigSignatureAsync?.(canonicalPayload, signature)) ?? false;
+  } catch {
+    return false;
+  }
+}
+function detectLanguage() {
+  try {
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    const localize = require('react-native-localize');
+    return localize.getLocales?.()[0]?.languageTag;
+  } catch {
+    try {
+      return Intl.DateTimeFormat().resolvedOptions().locale;
+    } catch {
+      return undefined;
+    }
+  }
+}
 //# sourceMappingURL=init.js.map

package/lib/module/init.js.map

@@ -1 +1 @@
-{"version":3,"names":["configureConfig","fetchConfig","startConfigAutoRefresh","configureTracking","DEVICE_ID_KEY","initPulse","opts","base","apiUrl","replace","slug","appSlug","trim","configUrl","trackUrl","deviceId","resolveDeviceId","storage","platform","detectPlatform","osVersion","detectOsVersion","getContext","appVersion","userId","getUserId","userAttributes","getUserAttributes","url","defaults","pollIntervalMs","onError","flushIntervalMs","onIgnored","onIgnoredEvents","Error","appState","randomId","existing","getString","minted","set","bytes","Uint8Array","crypto","globalThis","getRandomValues","i","length","Math","floor","random","hex","Array","from","b","toString","padStart","join","slice","rn","require","Platform","OS","undefined","version","Version","String"],"sourceRoot":"../../src","sources":["init.ts"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SACEA,eAAe,EACfC,WAAW,EACXC,sBAAsB,QAIjB,UAAU;AACjB,SAASC,iBAAiB,QAAQ,SAAS;AAoD3C,MAAMC,aAAa,GAAG,iBAAiB;;AAEvC;AACA,OAAO,SAASC,SAASA,CAACC,IAAsB,EAA6D;EAC3G,MAAMC,IAAI,GAAGD,IAAI,CAACE,MAAM,CAACC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;EAC5C,MAAMC,IAAI,GAAGJ,IAAI,CAACK,OAAO,CAACC,IAAI,CAAC,CAAC;EAChC,MAAMC,SAAS,GAAG,GAAGN,IAAI,iBAAiBG,IAAI,EAAE;EAChD,MAAMI,QAAQ,GAAG,GAAGP,IAAI,gBAAgBG,IAAI,EAAE;EAE9C,MAAMK,QAAQ,GAAGT,IAAI,CAACS,QAAQ,EAAEH,IAAI,CAAC,CAAC,IAAII,eAAe,CAACV,IAAI,CAACW,OAAO,CAAC;EACvE,MAAMC,QAAQ,GAAGC,cAAc,CAAC,CAAC;EACjC,MAAMC,SAAS,GAAGC,eAAe,CAAC,CAAC;EAEnC,MAAMC,UAAU,GAAGA,CAAA,MAAsB;IACvCJ,QAAQ;IACRE,SAAS;IACTG,UAAU,EAAEjB,IAAI,CAACiB,UAAU;IAC3BR,QAAQ;IACRS,MAAM,EAAElB,IAAI,CAACmB,SAAS,GAAG,CAAC;IAC1BC,cAAc,EAAEpB,IAAI,CAACqB,iBAAiB,GAAG;EAC3C,CAAC,CAAC;EAEF3B,eAAe,CAAC;IACd4B,GAAG,EAAEf,SAAS;IACdgB,QAAQ,EAAEvB,IAAI,CAACuB,QAAQ;IACvBZ,OAAO,EAAEX,IAAI,CAACW,OAAO;IACrBK,UAAU;IACVQ,cAAc,EAAExB,IAAI,CAACwB,cAAc;IACnCC,OAAO,EAAEzB,IAAI,CAACyB;EAChB,CAAC,CAAC;EAEF5B,iBAAiB,CAAC;IAChByB,GAAG,EAAEd,QAAQ;IACbQ,UAAU;IACVU,eAAe,EAAE1B,IAAI,CAAC0B,eAAe;IACrCC,SAAS,EAAE3B,IAAI,CAAC4B,eAAe;IAC/BH,OAAO,EAAEzB,IAAI,CAACyB;EAChB,CAAC,CAAC;;EAEF;EACA;EACA;EACA;EACA;EACA,IAAI,CAACzB,IAAI,CAACiB,UAAU,EAAE;IACpBjB,IAAI,CAACyB,OAAO,GAAG,IAAII,KAAK,CACtB,+FAA+F,CAAC,CAAC;EACrG;EACA,IAAI,CAAC7B,IAAI,CAACW,OAAO,IAAI,CAACX,IAAI,CAACS,QAAQ,EAAE;IACnCT,IAAI,CAACyB,OAAO,GAAG,IAAII,KAAK,CACtB,qGAAqG,CAAC,CAAC;EAC3G;;EAEA;EACA;EACA;EACA,KAAKlC,WAAW,CAAC,CAAC;EAClBC,sBAAsB,CAACI,IAAI,CAAC8B,QAAQ,CAAC;EAErC,OAAO;IAAErB,QAAQ;IAAEF,SAAS;IAAEC;EAAS,CAAC;AAC1C;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASE,eAAeA,CAACC,OAAuB,EAAU;EACxD,IAAI,CAACA,OAAO,EAAE,OAAOoB,QAAQ,CAAC,CAAC;EAE/B,IAAI;IACF,MAAMC,QAAQ,GAAGrB,OAAO,CAACsB,SAAS,CAACnC,aAAa,CAAC;IACjD,IAAIkC,QAAQ,EAAE,OAAOA,QAAQ;IAC7B,MAAME,MAAM,GAAGH,QAAQ,CAAC,CAAC;IACzBpB,OAAO,CAACwB,GAAG,CAACrC,aAAa,EAAEoC,MAAM,CAAC;IAClC,OAAOA,MAAM;EACf,CAAC,CAAC,MAAM;IACN,OAAOH,QAAQ,CAAC,CAAC;EACnB;AACF;AAEA,SAASA,QAAQA,CAAA,EAAW;EAC1B,MAAMK,KAAK,GAAG,IAAIC,UAAU,CAAC,EAAE,CAAC;EAChC,MAAMC,MAAM,GAAIC,UAAU,CAAgED,MAAM;EAEhG,IAAIA,MAAM,EAAEE,eAAe,EAAE;IAC3BF,MAAM,CAACE,eAAe,CAACJ,KAAK,CAAC;EAC/B,CAAC,MAAM;IACL;IACA;IACA,KAAK,IAAIK,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGL,KAAK,CAACM,MAAM,EAAED,CAAC,EAAE,EAAEL,KAAK,CAACK,CAAC,CAAC,GAAGE,IAAI,CAACC,KAAK,CAACD,IAAI,CAACE,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC;EACnF;EAEAT,KAAK,CAAC,CAAC,CAAC,GAAI,CAACA,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,GAAI,IAAI;EAC1CA,KAAK,CAAC,CAAC,CAAC,GAAI,CAACA,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,GAAI,IAAI;EAE1C,MAAMU,GAAG,GAAGC,KAAK,CAACC,IAAI,CAACZ,KAAK,EAAGa,CAAC,IAAKA,CAAC,CAACC,QAAQ,CAAC,EAAE,CAAC,CAACC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAACC,IAAI,CAAC,EAAE,CAAC;EAC9E,OAAO,GAAGN,GAAG,CAACO,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAIP,GAAG,CAACO,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAIP,GAAG,CAACO,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAIP,GAAG,CAACO,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAIP,GAAG,CAACO,KAAK,CAAC,EAAE,CAAC,EAAE;AAC5G;;AAEA;AACA,SAASxC,cAAcA,CAAA,EAAuB;EAC5C,IAAI;IACF;IACA;IACA;IACA,MAAMyC,EAAE,GAAGC,OAAO,CAAC,cAAc,CAAmC;IACpE,OAAOD,EAAE,EAAEE,QAAQ,EAAEC,EAAE;EACzB,CAAC,CAAC,MAAM;IACN,OAAOC,SAAS;EAClB;AACF;AAEA,SAAS3C,eAAeA,CAAA,EAAuB;EAC7C,IAAI;IACF;IACA,MAAMuC,EAAE,GAAGC,OAAO,CAAC,cAAc,CAAiD;IAClF,MAAMI,OAAO,GAAGL,EAAE,EAAEE,QAAQ,EAAEI,OAAO;IACrC,OAAOD,OAAO,KAAKD,SAAS,IAAIC,OAAO,KAAK,IAAI,GAAGD,SAAS,GAAGG,MAAM,CAACF,OAAO,CAAC;EAChF,CAAC,CAAC,MAAM;IACN,OAAOD,SAAS;EAClB;AACF","ignoreList":[]}
+{"version":3,"names":["configureConfig","fetchConfig","startConfigAutoRefresh","getConfigInfo","getConfigBoolean","getConfigNumber","getConfigString","getConfigJson","configureTracking","disposeTracking","flushEvents","getTrackingInfo","track","DEVICE_ID_KEY","activeClient","stopActiveRefresh","initPulse","opts","base","apiUrl","replace","slug","appSlug","trim","configUrl","trackUrl","deviceStorageKey","deviceId","resolveDeviceId","storage","platform","detectPlatform","osVersion","detectOsVersion","appVersion","detectAppVersion","language","detectLanguage","userId","userAttributes","consentOverride","analyticsConsent","undefined","hasConsent","getContext","getUserId","getUserAttributes","url","defaults","storageKey","pollIntervalMs","onError","signingPublicKey","signingKeyId","requireSignature","requireConfigSignature","verifySignature","verifyConfigSignature","verifyWithNativeKey","flushIntervalMs","propertyAllowlist","eventPropertyAllowlist","redactProperties","redactEventProperties","appState","onIgnored","onIgnoredEvents","Error","stopRefresh","client","flush","setUser","nextUserId","attributes","sanitizeAttributes","clearUser","setAnalyticsConsent","granted","resetInstallId","randomId","set","health","config","events","boolean","number","string","json","refresh","dispose","initPulseAsync","keys","loaded","Promise","all","map","key","getItem","memory","Map","filter","entry","getString","get","value","setItem","existing","minted","clean","Object","fromEntries","entries","slice","length","bytes","Uint8Array","crypto","globalThis","getRandomValues","i","Math","floor","random","hex","Array","from","b","toString","padStart","join","rn","require","Platform","OS","version","Version","String","default","getVersion","canonicalPayload","signature","updates","verifyConfigSignatureAsync","localize","getLocales","languageTag","Intl","DateTimeFormat","resolvedOptions","locale"],"sourceRoot":"../../src","sources":["init.ts"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SACEA,eAAe,EACfC,WAAW,EACXC,sBAAsB,EAKtBC,aAAa,EACbC,gBAAgB,EAChBC,eAAe,EACfC,eAAe,EACfC,aAAa,QACR,UAAU;AACjB,SACEC,iBAAiB,EACjBC,eAAe,EACfC,WAAW,EACXC,eAAe,EACfC,KAAK,QAEA,SAAS;AAoEhB,MAAMC,aAAa,GAAG,iBAAiB;AAoCvC,IAAIC,YAAgC,GAAG,IAAI;AAC3C,IAAIC,iBAAsC,GAAG,IAAI;;AAEjD;AACA,OAAO,SAASC,SAASA,CAACC,IAAsB,EAAe;EAC7D;EACA;EACA;EACA;EACAF,iBAAiB,GAAG,CAAC;EACrBN,eAAe,CAAC,CAAC;EACjBK,YAAY,GAAG,IAAI;EACnBC,iBAAiB,GAAG,IAAI;EACxB,MAAMG,IAAI,GAAGD,IAAI,CAACE,MAAM,CAACC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;EAC5C,MAAMC,IAAI,GAAGJ,IAAI,CAACK,OAAO,CAACC,IAAI,CAAC,CAAC;EAChC,MAAMC,SAAS,GAAG,GAAGN,IAAI,iBAAiBG,IAAI,EAAE;EAChD,MAAMI,QAAQ,GAAG,GAAGP,IAAI,gBAAgBG,IAAI,EAAE;EAE9C,MAAMK,gBAAgB,GAAG,SAASL,IAAI,YAAY;EAClD,IAAIM,QAAQ,GAAGV,IAAI,CAACU,QAAQ,EAAEJ,IAAI,CAAC,CAAC,IAAIK,eAAe,CAACX,IAAI,CAACY,OAAO,EAAEH,gBAAgB,CAAC;EACvF,MAAMI,QAAQ,GAAGC,cAAc,CAAC,CAAC;EACjC,MAAMC,SAAS,GAAGC,eAAe,CAAC,CAAC;EACnC,MAAMC,UAAU,GAAGjB,IAAI,CAACiB,UAAU,IAAIC,gBAAgB,CAAC,CAAC;EACxD,MAAMC,QAAQ,GAAGnB,IAAI,CAACmB,QAAQ,IAAIC,cAAc,CAAC,CAAC;EAClD,IAAIC,MAA0B;EAC9B,IAAIC,cAAkD;EACtD,IAAIC,eAAoC,GAAG,OAAOvB,IAAI,CAACwB,gBAAgB,KAAK,SAAS,GACjFxB,IAAI,CAACwB,gBAAgB,GACrBC,SAAS;EAEb,MAAMC,UAAU,GAAGA,CAAA,KAAeH,eAAe,KAC9C,OAAOvB,IAAI,CAACwB,gBAAgB,KAAK,UAAU,GAAGxB,IAAI,CAACwB,gBAAgB,CAAC,CAAC,GAAG,IAAI,CAAC;EAEhF,MAAMG,UAAU,GAAGA,CAAA,MAAsB;IACvCd,QAAQ;IACRE,SAAS;IACTE,UAAU;IACVE,QAAQ;IACRT,QAAQ;IACRW,MAAM,EAAEA,MAAM,IAAIrB,IAAI,CAAC4B,SAAS,GAAG,CAAC;IACpCN,cAAc,EAAEA,cAAc,IAAItB,IAAI,CAAC6B,iBAAiB,GAAG;EAC7D,CAAC,CAAC;EAEF9C,eAAe,CAAC;IACd+C,GAAG,EAAEvB,SAAS;IACdwB,QAAQ,EAAE/B,IAAI,CAAC+B,QAAQ;IACvBnB,OAAO,EAAEZ,IAAI,CAACY,OAAO;IACrBoB,UAAU,EAAE,SAAS5B,IAAI,YAAY;IACrCuB,UAAU;IACVM,cAAc,EAAEjC,IAAI,CAACiC,cAAc;IACnCC,OAAO,EAAElC,IAAI,CAACkC,OAAO;IACrBC,gBAAgB,EAAEnC,IAAI,CAACmC,gBAAgB;IACvCC,YAAY,EAAEpC,IAAI,CAACoC,YAAY;IAC/BC,gBAAgB,EAAErC,IAAI,CAACsC,sBAAsB;IAC7CC,eAAe,EAAEvC,IAAI,CAACwC,qBAAqB,KACxCxC,IAAI,CAACsC,sBAAsB,IAAI,CAACtC,IAAI,CAACmC,gBAAgB,GAAGM,mBAAmB,GAAGhB,SAAS;EAC5F,CAAC,CAAC;EAEFlC,iBAAiB,CAAC;IAChBuC,GAAG,EAAEtB,QAAQ;IACbmB,UAAU;IACVe,eAAe,EAAE1C,IAAI,CAAC0C,eAAe;IACrC9B,OAAO,EAAEZ,IAAI,CAACY,OAAO;IACrBoB,UAAU,EAAE,SAAS5B,IAAI,YAAY;IACrCsB,UAAU;IACViB,iBAAiB,EAAE3C,IAAI,CAAC4C,sBAAsB;IAC9CC,gBAAgB,EAAE7C,IAAI,CAAC8C,qBAAqB;IAC5CC,QAAQ,EAAE/C,IAAI,CAAC+C,QAAQ;IACvBC,SAAS,EAAEhD,IAAI,CAACiD,eAAe;IAC/Bf,OAAO,EAAElC,IAAI,CAACkC;EAChB,CAAC,CAAC;;EAEF;EACA;EACA;EACA;EACA;EACA,IAAI,CAACjB,UAAU,EAAE;IACfjB,IAAI,CAACkC,OAAO,GAAG,IAAIgB,KAAK,CACtB,+FAA+F,CAAC,CAAC;EACrG;EACA,IAAI,CAAClD,IAAI,CAACY,OAAO,IAAI,CAACZ,IAAI,CAACU,QAAQ,EAAE;IACnCV,IAAI,CAACkC,OAAO,GAAG,IAAIgB,KAAK,CACtB,qGAAqG,CAAC,CAAC;EAC3G;;EAEA;EACA;EACA;EACA,KAAKlE,WAAW,CAAC,CAAC;EAClB,MAAMmE,WAAW,GAAGlE,sBAAsB,CAACe,IAAI,CAAC+C,QAAQ,CAAC;EAEzD,MAAMK,MAAmB,GAAG;IAC1B,IAAI1C,QAAQA,CAAA,EAAG;MAAE,OAAOA,QAAQ;IAAE,CAAC;IACnCH,SAAS;IACTC,QAAQ;IACRb,KAAK;IACL0D,KAAK,EAAE5D,WAAW;IAClB6D,OAAO,EAAEA,CAACC,UAAU,EAAEC,UAAU,KAAK;MACnCnC,MAAM,GAAGkC,UAAU,EAAEjD,IAAI,CAAC,CAAC,IAAImB,SAAS;MACxCH,cAAc,GAAGmC,kBAAkB,CAACD,UAAU,CAAC;IACjD,CAAC;IACDE,SAAS,EAAEA,CAAA,KAAM;MACfrC,MAAM,GAAGI,SAAS;MAClBH,cAAc,GAAGG,SAAS;IAC5B,CAAC;IACDkC,mBAAmB,EAAGC,OAAO,IAAK;MAAErC,eAAe,GAAGqC,OAAO;IAAE,CAAC;IAChEC,cAAc,EAAEA,CAAA,KAAM;MACpBnD,QAAQ,GAAGoD,QAAQ,CAAC,CAAC;MACrB,IAAI;QAAE9D,IAAI,CAACY,OAAO,EAAEmD,GAAG,CAACtD,gBAAgB,EAAEC,QAAQ,CAAC;MAAE,CAAC,CAAC,MAAM,CAAE;MAC/D,OAAOA,QAAQ;IACjB,CAAC;IACDsD,MAAM,EAAEA,CAAA,MAAO;MAAE3D,OAAO,EAAED,IAAI;MAAEM,QAAQ;MAAEuD,MAAM,EAAE/E,aAAa,CAAC,CAAC;MAAEgF,MAAM,EAAExE,eAAe,CAAC,CAAC;MAAE8B,gBAAgB,EAAEE,UAAU,CAAC;IAAE,CAAC,CAAC;IAC/HuC,MAAM,EAAE;MACNE,OAAO,EAAEhF,gBAAgB;MACzBiF,MAAM,EAAEhF,eAAe;MACvBiF,MAAM,EAAEhF,eAAe;MACvBiF,IAAI,EAAEhF,aAAa;MACnBiF,OAAO,EAAEvF;IACX,CAAC;IACDwF,OAAO,EAAE,MAAAA,CAAA,KAAY;MACnBrB,WAAW,CAAC,CAAC;MACb,IAAItD,YAAY,KAAKuD,MAAM,EAAE;MAC7B,MAAM3D,WAAW,CAAC,CAAC;MACnB;MACA,IAAII,YAAY,KAAKuD,MAAM,EAAE;QAC3B5D,eAAe,CAAC,CAAC;QACjBK,YAAY,GAAG,IAAI;QACnBC,iBAAiB,GAAG,IAAI;MAC1B;IACF;EACF,CAAC;EACDD,YAAY,GAAGuD,MAAM;EACrBtD,iBAAiB,GAAGqD,WAAW;EAC/B,OAAOC,MAAM;AACf;;AAEA;AACA;AACA;AACA;AACA,OAAO,eAAeqB,cAAcA,CAClCzE,IAAwE,EAClD;EACtB,MAAMI,IAAI,GAAGJ,IAAI,CAACK,OAAO,CAACC,IAAI,CAAC,CAAC;EAChC,MAAMoE,IAAI,GAAG,CACX,SAAStE,IAAI,YAAY,EACzB,SAASA,IAAI,YAAY,EACzB,SAASA,IAAI,YAAY,EACzBR,aAAa,CACd;EACD,MAAM+E,MAAM,GAAG,MAAMC,OAAO,CAACC,GAAG,CAACH,IAAI,CAACI,GAAG,CAAC,MAAOC,GAAG,IAAK,CAACA,GAAG,EAAE,MAAM/E,IAAI,CAACY,OAAO,CAACoE,OAAO,CAACD,GAAG,CAAC,CAAU,CAAC,CAAC;EAC1G,MAAME,MAAM,GAAG,IAAIC,GAAG,CAACP,MAAM,CAACQ,MAAM,CAAEC,KAAK,IAAyCA,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;EACvG,MAAMxE,OAAsB,GAAG;IAC7ByE,SAAS,EAAGN,GAAG,IAAKE,MAAM,CAACK,GAAG,CAACP,GAAG,CAAC;IACnChB,GAAG,EAAEA,CAACgB,GAAG,EAAEQ,KAAK,KAAK;MACnBN,MAAM,CAAClB,GAAG,CAACgB,GAAG,EAAEQ,KAAK,CAAC;MACtB,KAAKvF,IAAI,CAACY,OAAO,CAAC4E,OAAO,CAACT,GAAG,EAAEQ,KAAK,CAAC;IACvC;EACF,CAAC;EACD,OAAOxF,SAAS,CAAC;IAAE,GAAGC,IAAI;IAAEY;EAAQ,CAAC,CAAC;AACxC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASD,eAAeA,CAACC,OAAuB,EAAEmE,GAAG,GAAGnF,aAAa,EAAU;EAC7E,IAAI,CAACgB,OAAO,EAAE,OAAOkD,QAAQ,CAAC,CAAC;EAE/B,IAAI;IACF,MAAM2B,QAAQ,GAAG7E,OAAO,CAACyE,SAAS,CAACN,GAAG,CAAC,IAAInE,OAAO,CAACyE,SAAS,CAACzF,aAAa,CAAC;IAC3E,IAAI6F,QAAQ,EAAE,OAAOA,QAAQ;IAC7B,MAAMC,MAAM,GAAG5B,QAAQ,CAAC,CAAC;IACzBlD,OAAO,CAACmD,GAAG,CAACgB,GAAG,EAAEW,MAAM,CAAC;IACxB,OAAOA,MAAM;EACf,CAAC,CAAC,MAAM;IACN,OAAO5B,QAAQ,CAAC,CAAC;EACnB;AACF;AAEA,SAASL,kBAAkBA,CAACD,UAAmC,EAAsC;EACnG,IAAI,CAACA,UAAU,EAAE,OAAO/B,SAAS;EACjC,MAAMkE,KAAK,GAAGC,MAAM,CAACC,WAAW,CAACD,MAAM,CAACE,OAAO,CAACtC,UAAU,CAAC,CACxD2B,MAAM,CAAC,CAAC,CAACJ,GAAG,EAAEQ,KAAK,CAAC,KAAKR,GAAG,CAACzE,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,OAAOiF,KAAK,KAAK,QAAQ,CAAC,CACxEQ,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;EAChB,OAAOH,MAAM,CAAClB,IAAI,CAACiB,KAAK,CAAC,CAACK,MAAM,GAAG,CAAC,GAAGL,KAAK,GAAGlE,SAAS;AAC1D;AAEA,SAASqC,QAAQA,CAAA,EAAW;EAC1B,MAAMmC,KAAK,GAAG,IAAIC,UAAU,CAAC,EAAE,CAAC;EAChC,MAAMC,MAAM,GAAIC,UAAU,CAAgED,MAAM;EAEhG,IAAIA,MAAM,EAAEE,eAAe,EAAE;IAC3BF,MAAM,CAACE,eAAe,CAACJ,KAAK,CAAC;EAC/B,CAAC,MAAM;IACL;IACA;IACA,KAAK,IAAIK,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGL,KAAK,CAACD,MAAM,EAAEM,CAAC,EAAE,EAAEL,KAAK,CAACK,CAAC,CAAC,GAAGC,IAAI,CAACC,KAAK,CAACD,IAAI,CAACE,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC;EACnF;EAEAR,KAAK,CAAC,CAAC,CAAC,GAAI,CAACA,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,GAAI,IAAI;EAC1CA,KAAK,CAAC,CAAC,CAAC,GAAI,CAACA,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,GAAI,IAAI;EAE1C,MAAMS,GAAG,GAAGC,KAAK,CAACC,IAAI,CAACX,KAAK,EAAGY,CAAC,IAAKA,CAAC,CAACC,QAAQ,CAAC,EAAE,CAAC,CAACC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAACC,IAAI,CAAC,EAAE,CAAC;EAC9E,OAAO,GAAGN,GAAG,CAACX,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAIW,GAAG,CAACX,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAIW,GAAG,CAACX,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAIW,GAAG,CAACX,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAIW,GAAG,CAACX,KAAK,CAAC,EAAE,CAAC,EAAE;AAC5G;;AAEA;AACA,SAASjF,cAAcA,CAAA,EAAuB;EAC5C,IAAI;IACF;IACA;IACA;IACA,MAAMmG,EAAE,GAAGC,OAAO,CAAC,cAAc,CAAmC;IACpE,OAAOD,EAAE,EAAEE,QAAQ,EAAEC,EAAE;EACzB,CAAC,CAAC,MAAM;IACN,OAAO3F,SAAS;EAClB;AACF;AAEA,SAAST,eAAeA,CAAA,EAAuB;EAC7C,IAAI;IACF;IACA,MAAMiG,EAAE,GAAGC,OAAO,CAAC,cAAc,CAAiD;IAClF,MAAMG,OAAO,GAAGJ,EAAE,EAAEE,QAAQ,EAAEG,OAAO;IACrC,OAAOD,OAAO,KAAK5F,SAAS,IAAI4F,OAAO,KAAK,IAAI,GAAG5F,SAAS,GAAG8F,MAAM,CAACF,OAAO,CAAC;EAChF,CAAC,CAAC,MAAM;IACN,OAAO5F,SAAS;EAClB;AACF;AAEA,SAASP,gBAAgBA,CAAA,EAAuB;EAC9C,IAAI;IACF;IACA;IACA,MAAMyD,MAAM,GAAGuC,OAAO,CAAC,0BAA0B,CAA2E;IAC5H,OAAOvC,MAAM,CAAC6C,OAAO,EAAEC,UAAU,GAAG,CAAC,IAAI9C,MAAM,CAAC8C,UAAU,GAAG,CAAC;EAChE,CAAC,CAAC,MAAM;IACN,OAAOhG,SAAS;EAClB;AACF;AAEA,eAAegB,mBAAmBA,CAChCiF,gBAAwB,EACxBC,SAA0B,EACR;EAClB,IAAI;IACF;IACA;IACA,MAAMC,OAAO,GAAGV,OAAO,CAAC,gBAAgB,CAEvC;IACD,OAAO,OAAMU,OAAO,CAACC,0BAA0B,GAAGH,gBAAgB,EAAEC,SAAS,CAAC,KAAI,KAAK;EACzF,CAAC,CAAC,MAAM;IACN,OAAO,KAAK;EACd;AACF;AAEA,SAASvG,cAAcA,CAAA,EAAuB;EAC5C,IAAI;IACF;IACA,MAAM0G,QAAQ,GAAGZ,OAAO,CAAC,uBAAuB,CAA2D;IAC3G,OAAOY,QAAQ,CAACC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAEC,WAAW;EAChD,CAAC,CAAC,MAAM;IACN,IAAI;MACF,OAAOC,IAAI,CAACC,cAAc,CAAC,CAAC,CAACC,eAAe,CAAC,CAAC,CAACC,MAAM;IACvD,CAAC,CAAC,MAAM;MACN,OAAO3G,SAAS;IAClB;EACF;AACF","ignoreList":[]}

package/lib/module/track.js

@@ -23,10 +23,16 @@
 const DEFAULT_FLUSH_MS = 10_000;
 const DEFAULT_MAX_BATCH = 100;
 const DEFAULT_MAX_QUEUE = 500;
+const DEFAULT_TIMEOUT_MS = 10_000;
+const DEFAULT_MAX_ATTEMPTS = 10;
+const DEFAULT_STORAGE_KEY = 'pulse.events.v1';
 let options = null;
 let queue = [];
 let timer = null;
 let sending = false;
+let nextAttemptAt = 0;
+let lifecycleSubscription = null;
+let trackingGeneration = 0;
 
 /** Turns a config url into the track url; leaves an explicit track url alone. */
 function trackUrl(url) {
@@ -34,8 +40,14 @@ function trackUrl(url) {
   return trimmed.includes('/pulse/config/') ? trimmed.replace('/pulse/config/', '/pulse/track/') : trimmed;
 }
 export function configureTracking(opts) {
+  disposeTracking();
   options = opts;
+  queue = readQueue(opts);
+  nextAttemptAt = 0;
   startTimer();
+  lifecycleSubscription = opts.appState?.addEventListener('change', state => {
+    if (state !== 'active') void flushEvents();
+  }) ?? null;
 }
 
 /**
@@ -45,18 +57,32 @@ export function configureTracking(opts) {
  */
 export function track(event, props, time) {
   if (!options || !event) return;
+  if (options.hasConsent?.() === false) {
+    options.onDropped?.(1, 'no-consent');
+    return;
+  }
   const flat = {};
+  const allow = options.propertyAllowlist ? new Set(options.propertyAllowlist) : null;
+  const redact = new Set(options.redactProperties ?? []);
   for (const [key, value] of Object.entries(props ?? {})) {
     if (value === null || value === undefined) continue;
-    flat[key] = typeof value === 'string' ? value : String(value);
+    if (allow && !allow.has(key)) continue;
+    flat[key] = redact.has(key) ? '[REDACTED]' : typeof value === 'string' ? value : String(value);
   }
   queue.push({
+    id: randomEventId(),
     event,
     time: (time ?? new Date()).toISOString(),
-    props: flat
+    props: flat,
+    attempts: 0
   });
   const maxQueue = options.maxQueue ?? DEFAULT_MAX_QUEUE;
-  if (queue.length > maxQueue) queue = queue.slice(queue.length - maxQueue);
+  if (queue.length > maxQueue) {
+    const dropped = queue.length - maxQueue;
+    queue = queue.slice(dropped);
+    options.onDropped?.(dropped, 'queue-full');
+  }
+  persistQueue();
   if (queue.length >= (options.maxBatch ?? DEFAULT_MAX_BATCH)) void flushEvents();
 }
 
@@ -68,8 +94,9 @@ export function track(event, props, time) {
  * after launch, when the first events of a session are the ones a funnel needs most.
  */
 export async function flushEvents() {
-  if (!options || sending || queue.length === 0) return 0;
+  if (!options || sending || queue.length === 0 || Date.now() < nextAttemptAt) return 0;
   const opts = options;
+  const requestGeneration = trackingGeneration;
   const ctx = opts.getContext?.() ?? {};
 
   // Without a device id the server cannot put the event in an arm, and an empty id
@@ -78,7 +105,10 @@ export async function flushEvents() {
   if (!ctx.deviceId) return 0;
   const batch = queue.slice(0, opts.maxBatch ?? DEFAULT_MAX_BATCH);
   queue = queue.slice(batch.length);
+  persistQueue();
   sending = true;
+  const controller = typeof AbortController !== 'undefined' ? new AbortController() : null;
+  const timeout = controller ? setTimeout(() => controller.abort(), opts.timeoutMs ?? DEFAULT_TIMEOUT_MS) : null;
   try {
     const response = await fetch(trackUrl(opts.url), {
       method: 'POST',
@@ -91,27 +121,37 @@ export async function flushEvents() {
         platform: ctx.platform,
         appVersion: ctx.appVersion,
         events: batch.map(e => ({
+          id: e.id,
           event: e.event,
           time: e.time,
           props: e.props
         }))
-      })
+      }),
+      signal: controller?.signal
     });
     if (!response.ok) {
       // Rate limited or briefly down: keep the events, try on the next tick.
-      queue = [...batch, ...queue];
+      if (requestGeneration === trackingGeneration && options === opts) {
+        requeueWithBackoff(batch, response.status);
+      } else {
+        restoreStaleBatch(opts, batch, response.status);
+      }
       if (response.status !== 429) opts.onError?.(new Error(`Pulse track failed: ${response.status}`));
       return 0;
     }
     const body = await response.json();
+    if (requestGeneration !== trackingGeneration || options !== opts) return body.accepted ?? 0;
     if (body.ignored && body.ignored.length > 0) opts.onIgnored?.(body.ignored);
+    nextAttemptAt = 0;
+    persistQueue();
     return body.accepted ?? 0;
   } catch (error) {
-    queue = [...batch, ...queue];
+    if (requestGeneration === trackingGeneration && options === opts) requeueWithBackoff(batch);else restoreStaleBatch(opts, batch);
     opts.onError?.(error);
     return 0;
   } finally {
-    sending = false;
+    if (timeout) clearTimeout(timeout);
+    if (requestGeneration === trackingGeneration) sending = false;
   }
 }
 
@@ -119,14 +159,31 @@ export async function flushEvents() {
 export function pendingEventCount() {
   return queue.length;
 }
+export function getTrackingInfo() {
+  return {
+    queueDepth: queue.length,
+    sending,
+    nextAttemptAt
+  };
+}
+
+/** Stop timers and listeners while preserving the durable outbox. */
+export function disposeTracking() {
+  trackingGeneration += 1;
+  if (timer) clearInterval(timer);
+  timer = null;
+  lifecycleSubscription?.remove();
+  lifecycleSubscription = null;
+  persistQueue();
+  options = null;
+  sending = false;
+}
 export function stopTracking() {
-  if (timer) {
-    clearInterval(timer);
-    timer = null;
-  }
+  disposeTracking();
   options = null;
   queue = [];
   sending = false;
+  nextAttemptAt = 0;
 }
 function startTimer() {
   if (timer) clearInterval(timer);
@@ -136,4 +193,87 @@ function startTimer() {
   // and a CLI importing this should still be able to exit.
   timer.unref?.();
 }
+function requeueWithBackoff(batch, status) {
+  if (!options) return;
+  const maxAttempts = options.maxAttempts ?? DEFAULT_MAX_ATTEMPTS;
+  const retryable = [];
+  let dropped = 0;
+  for (const event of batch) {
+    const next = {
+      ...event,
+      attempts: event.attempts + 1
+    };
+    if (next.attempts >= maxAttempts && status !== 429) dropped++;else retryable.push(next);
+  }
+  queue = [...retryable, ...queue];
+  if (dropped > 0) options.onDropped?.(dropped, 'max-attempts');
+  const attempts = retryable.reduce((max, event) => Math.max(max, event.attempts), 1);
+  const base = Math.min(60_000, 1_000 * 2 ** Math.min(attempts - 1, 6));
+  nextAttemptAt = Date.now() + base + Math.floor(Math.random() * Math.max(1, base / 4));
+  persistQueue();
+}
+
+/**
+ * An old request may fail after another app has been configured. Its rows belong in
+ * the old app's outbox, never in the new app's in-memory queue. When the same app was
+ * merely reconfigured, merge them back into the live queue so it need not restart to
+ * see them; otherwise persist directly under the captured app-scoped key.
+ */
+function restoreStaleBatch(opts, batch, status) {
+  const maxAttempts = opts.maxAttempts ?? DEFAULT_MAX_ATTEMPTS;
+  const retryable = [];
+  let dropped = 0;
+  for (const event of batch) {
+    const next = {
+      ...event,
+      attempts: event.attempts + 1
+    };
+    if (next.attempts >= maxAttempts && status !== 429) dropped++;else retryable.push(next);
+  }
+  if (dropped > 0) opts.onDropped?.(dropped, 'max-attempts');
+  if (retryable.length === 0) return;
+  const currentOptions = options;
+  const sameOutbox = currentOptions?.storage === opts.storage && currentOptions !== null && storageKey(currentOptions) === storageKey(opts);
+  if (sameOutbox) {
+    queue = [...retryable, ...queue].slice(-(options?.maxQueue ?? DEFAULT_MAX_QUEUE));
+    persistQueue();
+    return;
+  }
+  if (!opts.storage) return;
+  try {
+    const stored = readQueue(opts);
+    const restored = [...retryable, ...stored].slice(-(opts.maxQueue ?? DEFAULT_MAX_QUEUE));
+    opts.storage.set(storageKey(opts), JSON.stringify(restored));
+  } catch {
+    // Best effort only; a telemetry recovery must not affect the new app session.
+  }
+}
+function storageKey(opts) {
+  return opts.storageKey?.trim() || DEFAULT_STORAGE_KEY;
+}
+function readQueue(opts) {
+  if (!opts.storage) return [];
+  try {
+    const raw = opts.storage.getString(storageKey(opts));
+    if (!raw) return [];
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed)) return [];
+    return parsed.filter(item => Boolean(item && typeof item === 'object' && typeof item.id === 'string' && typeof item.event === 'string' && typeof item.time === 'string' && typeof item.props === 'object' && typeof item.attempts === 'number')).slice(-(opts.maxQueue ?? DEFAULT_MAX_QUEUE));
+  } catch {
+    return [];
+  }
+}
+function persistQueue() {
+  if (!options?.storage) return;
+  try {
+    options.storage.set(storageKey(options), JSON.stringify(queue));
+  } catch {
+    // Telemetry persistence must never become an app failure.
+  }
+}
+function randomEventId() {
+  const cryptoLike = globalThis.crypto;
+  if (typeof cryptoLike?.randomUUID === 'function') return cryptoLike.randomUUID();
+  return `evt-${Date.now()}-${Math.random().toString(36).slice(2, 14)}`;
+}
 //# sourceMappingURL=track.js.map