feat(audience): remove sandbox env routing, add testMode (SDK-357)

[bkbooth]

Summary

• Removes getBaseUrl() and the pk_imapik-test- key prefix check that routed events to api.sandbox.immutable.com (being decommissioned). Default base URL is now always https://api.immutable.com; dev routing continues via the existing baseUrl override.
• Adds testMode?: boolean to PixelInitOptions and AudienceConfig. When true, all outbound events carry a top-level test: true field so the backend can filter test traffic from production analytics.
• Updates both READMEs with a Test Mode section and removes sandbox references.

Closes SDK-357. Sub-issue of SDK-351 (Sandbox Removal).

Changed files

File	Change
core/src/config.ts	Removed TEST_KEY_PREFIX, getBaseUrl(). Added BASE_URL constant.
core/src/config.test.ts	Deleted (tested removed function).
core/src/types.ts	Added test?: true to BaseMessage.
core/src/queue.ts	Uses BASE_URL instead of getBaseUrl(publishableKey).
core/src/consent.ts	Uses BASE_URL instead of getBaseUrl(publishableKey).
pixel/src/pixel.ts	Added testMode to PixelInitOptions, instance property, and buildBase().
sdk/src/types.ts	Added testMode to AudienceConfig with JSDoc.
sdk/src/sdk.ts	Added testMode instance property, wired into baseMessage().
pixel/README.md	Added Test Mode section.
sdk/README.md	Added Test Mode section.

Test plan

• All 155 @imtbl/audience-core unit tests pass
• All 96 @imtbl/pixel unit tests pass
• All 60 @imtbl/audience unit tests pass
• eslint passes on all changed files (lint-staged ran at commit)
• Verify with backend that test: true top-level field is handled correctly on ingest

🤖 Generated with Claude Code

---

Note

Medium Risk
Changes the default ingest/consent endpoints to always use production and removes key-based sandbox routing, which could redirect real traffic if callers relied on the old behavior. Adds an optional testMode flag that alters outbound event payloads by tagging messages with test: true.

Overview
Removes sandbox environment routing by deleting getBaseUrl()/test-key prefix logic and standardizing the default API base to BASE_URL = https://api.immutable.com for both ingest (MessageQueue) and consent sync (createConsentManager), with baseUrl remaining as the only override.

Adds test event tagging via a new testMode?: boolean option in both the web SDK and pixel; when enabled, all emitted messages include a top-level test: true field (type updates in audience-core), and docs/sample app UI are updated accordingly.

^{Reviewed by Cursor Bugbot for commit ad0f604. Bugbot is set up for automated code reviews on this repo. Configure here.}

[nx-cloud]

View your CI Pipeline Execution ↗ for commit ad0f604

Command	Status	Duration	Result
nx affected -t build,lint,test	✅ Succeeded	8s	View ↗
nx run-many -p @imtbl/sdk,@imtbl/checkout-widge...	✅ Succeeded	1s	View ↗

---

☁️ Nx Cloud last updated this comment at 2026-05-15 03:36:28 UTC

[github-actions]

✅ Audience Bundle Size — @imtbl/audience

Metric	Size	Delta vs main (f0f4f43)
Gzipped	18232 bytes (17.80 KB)	-17 bytes
Raw (minified)	53047 bytes	+6 bytes

Budget: 24.00 KB gzipped (warn at 20.00 KB)

[github-actions]

✅ Pixel Bundle Size — @imtbl/pixel

Metric	Size	Delta vs main
Gzipped	5872 bytes (5.73 KB)	-12 bytes
Raw (minified)	15856 bytes	-8 bytes

Budget: 10.00 KB gzipped (warn at 8.00 KB)

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 13e8cf5. Configure here.}

[nattb8]

Need another PR to update the sample app?