chore: sync Rokt kit with upstream page-view storage refactor

[alexs-mparticle]

Summary

• Syncs kits/rokt from upstream mParticle-integrations/mparticle-javascript-integration-rokt development branch with unreleased commits post-v1.30.2.
• Ports upstream refactor that extracts page-view storage into dedicated modules (pageViewStorage.ts, storage.ts, utils.ts), adds a byte-budget cap on stored page views, namespaces the localStorage key with migration from the legacy key, and captures page title and canonical URL in page view events.
• Preserves monorepo adaptations: monorepo package repository URL, @mparticle/web-sdk peer/dev dependency layout, no standalone semantic-release/provenance config, Vite externalization/aliases/version define, and Node webstorage mitigation.

Upstream commits included

• `b428b15` feat: namespace page-view localStorage key and migrate legacy key (Bump rollup from 1.32.1 to 2.41.2 #113)
• `4b041a5` feat: cap page-view storage by byte budget instead of fixed count (Bump rollup from 1.32.1 to 2.41.3 #114)
• `7b65606` feat: capture page title and canonical URL in page view events (Bump uglify-js from 3.9.3 to 3.13.1 #112)

Files changed

• `kits/rokt/src/Rokt-Kit.ts`
• `kits/rokt/src/pageViewStorage.ts` (new)
• `kits/rokt/src/storage.ts` (new)
• `kits/rokt/src/utils.ts` (new)
• `kits/rokt/test/src/tests.spec.ts`
• `kits/rokt/test/src/pageViewStorage.spec.ts` (new)
• `kits/rokt/test/src/storage.spec.ts` (new)
• `kits/rokt/test/src/utils.spec.ts` (new)
• `kits/rokt/dist/**` (rebuilt in monorepo context)

Test plan

• `npm ci` in `kits/rokt` on Node v24.14.0
• `npm run build` in `kits/rokt` on Node v24.14.0: Vite completes successfully (existing declaration-generation type diagnostics from monorepo `../../src/vault.ts` are pre-existing)
• `npm test` in `kits/rokt` on Node v24.14.0: 288 passed across 4 test files

Notes

• Builds on chore: sync Rokt kit with upstream v1.30.2 #1313 which synced through v1.30.2. This PR ports the three subsequent unreleased feature commits from the `development` branch.
• `AGENTS.md` and `CHANGELOG.md` from the upstream repo are not included — no new release tag exists yet for these commits.

[cursor]

PR Summary

Medium Risk
Adds client-side behavioral page history sent to Rokt on placement calls; mitigations include URL sanitization, storage caps, and noTargeting opt-out, but this still affects targeting/privacy-sensitive data flows.

Overview
Syncs the Rokt kit with upstream page-view capture work: mParticle page views are persisted in namespaced localStorage (with migration from mpPageViews), trimmed to a ~100KB budget, and attached to selectPlacements as a JSON page_events attribute (including derived active time on page, plus title and sanitized canonical URL).

Supporting logic moves into pageViewStorage, storage, and utils (URL query stripping before persistence). noTargeting now skips capture, clears stored views on init, and active_time_on_site_ms is blocked from select-placements attribute persistence. Dist is rebuilt (kit 1.30.2).

^{Reviewed by Cursor Bugbot for commit 06da278. Bugbot is set up for automated code reviews on this repo. Configure here.}

[sonarqubecloud]

Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 06da278. Configure here.}

[cursor]

Opt-out still forwards stored page views

Medium Severity

When noTargeting is set, init only clears the namespaced pageViews field and process skips both capture and session-end cleanup. selectPlacements still loads page views, and that read path migrates leftover mpPageViews into storage and attaches them as page_events. Partners who opted out of targeting can still send prior browsing history to Rokt.

Additional Locations (2)

• kits/rokt/src/Rokt-Kit.ts#L1218-L1229
• kits/rokt/src/Rokt-Kit.ts#L1444-L1453

 

^{Reviewed by Cursor Bugbot for commit 06da278. Configure here.}

[rmi22186]

LGTM, but agents.md is missing from othis repo