@agentsean/google 1.0.0

package/dist/audit-extras.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-extras.d.ts","sourceRoot":"","sources":["../src/audit-extras.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAQpD,MAAM,MAAM,YAAY,GAAG;IACzB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAChC,CAAC;AAEF,wBAAgB,eAAe,CAC7B,EAAE,EAAE,cAAc,EAClB,MAAM,EAAE,MAAM,GACb;IAAE,GAAG,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAAC,IAAI,CAAC,EAAE,aAAa,GAAG,SAAS,CAAA;CAAE,CA2DtE"}

package/dist/audit-extras.js

@@ -0,0 +1,62 @@
+import { eq } from "drizzle-orm";
+import { cruxRecords, gscConnections, gscPageDaily, gscUrlInspections, } from "@agentsean/db";
+export function loadAuditExtras(db, siteId) {
+    const connected = db
+        .select()
+        .from(gscConnections)
+        .where(eq(gscConnections.siteId, siteId))
+        .get();
+    const clicksByUrl = {};
+    const impressionsByUrl = {};
+    if (connected) {
+        for (const row of db
+            .select()
+            .from(gscPageDaily)
+            .where(eq(gscPageDaily.siteId, siteId))
+            .all()) {
+            clicksByUrl[row.page] = (clicksByUrl[row.page] ?? 0) + row.clicks;
+            impressionsByUrl[row.page] = (impressionsByUrl[row.page] ?? 0) + row.impressions;
+        }
+    }
+    const googleCanonicalByUrl = {};
+    const coverageStateByUrl = {};
+    for (const row of db
+        .select()
+        .from(gscUrlInspections)
+        .where(eq(gscUrlInspections.siteId, siteId))
+        .all()) {
+        if (row.googleCanonical)
+            googleCanonicalByUrl[row.url] = row.googleCanonical;
+        if (row.coverageState)
+            coverageStateByUrl[row.url] = row.coverageState;
+    }
+    const cruxRows = db
+        .select()
+        .from(cruxRecords)
+        .where(eq(cruxRecords.siteId, siteId))
+        .all();
+    const phone = cruxRows.find((r) => r.formFactor === "PHONE");
+    const desktop = cruxRows.find((r) => r.formFactor === "DESKTOP");
+    const any = phone ?? desktop ?? cruxRows[0];
+    const gsc = connected || Object.keys(clicksByUrl).length > 0
+        ? {
+            clicksByUrl,
+            impressionsByUrl,
+            googleCanonicalByUrl,
+            coverageStateByUrl,
+        }
+        : undefined;
+    const crux = any
+        ? {
+            lcpP75Ms: any.lcpP75 ?? undefined,
+            inpP75Ms: any.inpP75 ?? undefined,
+            clsP75: any.clsP75 ?? undefined,
+            ttfbP75Ms: any.ttfbP75 ?? undefined,
+            phoneLcpP75Ms: phone?.lcpP75 ?? undefined,
+            desktopLcpP75Ms: desktop?.lcpP75 ?? undefined,
+            urlLevel: any.identifierKind === "url",
+        }
+        : undefined;
+    return { gsc, crux };
+}
+//# sourceMappingURL=audit-extras.js.map

package/dist/audit-extras.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-extras.js","sourceRoot":"","sources":["../src/audit-extras.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,OAAO,EACL,WAAW,EACX,cAAc,EACd,YAAY,EACZ,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAmBvB,MAAM,UAAU,eAAe,CAC7B,EAAkB,EAClB,MAAc;IAEd,MAAM,SAAS,GAAG,EAAE;SACjB,MAAM,EAAE;SACR,IAAI,CAAC,cAAc,CAAC;SACpB,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACxC,GAAG,EAAE,CAAC;IACT,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,MAAM,gBAAgB,GAA2B,EAAE,CAAC;IACpD,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,EAAE;aACjB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aACtC,GAAG,EAAE,EAAE,CAAC;YACT,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;YAClE,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC;QACnF,CAAC;IACH,CAAC;IACD,MAAM,oBAAoB,GAA2B,EAAE,CAAC;IACxD,MAAM,kBAAkB,GAA2B,EAAE,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,EAAE;SACjB,MAAM,EAAE;SACR,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC3C,GAAG,EAAE,EAAE,CAAC;QACT,IAAI,GAAG,CAAC,eAAe;YAAE,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,eAAe,CAAC;QAC7E,IAAI,GAAG,CAAC,aAAa;YAAE,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC;IACzE,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE;SAChB,MAAM,EAAE;SACR,IAAI,CAAC,WAAW,CAAC;SACjB,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACrC,GAAG,EAAE,CAAC;IACT,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,KAAK,IAAI,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC;IAE5C,MAAM,GAAG,GACP,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC;QAC9C,CAAC,CAAC;YACE,WAAW;YACX,gBAAgB;YAChB,oBAAoB;YACpB,kBAAkB;SACnB;QACH,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GAAG,GAAG;QACd,CAAC,CAAC;YACE,QAAQ,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;YACjC,QAAQ,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;YACjC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;YAC/B,SAAS,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;YACnC,aAAa,EAAE,KAAK,EAAE,MAAM,IAAI,SAAS;YACzC,eAAe,EAAE,OAAO,EAAE,MAAM,IAAI,SAAS;YAC7C,QAAQ,EAAE,GAAG,CAAC,cAAc,KAAK,KAAK;SACvC;QACH,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC"}

package/dist/broker.d.ts

@@ -0,0 +1,47 @@
+/**
+ * First-party stateless OAuth broker (D9).
+ *
+ * Holds GOOGLE_CLIENT_ID / GOOGLE_CLIENT_SECRET in process env on
+ * agentsean.com — never in this repository (Google APIs ToS §4(b)).
+ *
+ * Flow: local connect page POSTs wrap_key + loopback redirect_uri here.
+ * Broker runs Google OAuth as a confidential Web client, encrypts tokens
+ * with wrap_key, 302s to http://127.0.0.1:<port>/oauth/callback?payload=...
+ * The hosted origin never fetches the daemon (Chrome 142 Local Network Access).
+ */
+export type BrokerSecrets = {
+    clientId: string;
+    clientSecret: string;
+    /** HMAC key for the broker's own Google `state` blob. */
+    stateKey: Buffer;
+};
+export declare function brokerStartUrl(opts: {
+    secrets: BrokerSecrets;
+    redirectUri: string;
+    wrapKeyB64: string;
+    localState: string;
+    scopes?: readonly string[] | undefined;
+}): string;
+export declare function setBrokerRegisteredCallback(url: string): void;
+export declare function brokerCallbackPlaceholder(): string;
+export declare function brokerHandleGoogleCallback(opts: {
+    secrets: BrokerSecrets;
+    code: string;
+    state: string;
+    fetch: typeof fetch;
+}): Promise<{
+    location: string;
+}>;
+export declare function brokerHandleRefresh(opts: {
+    secrets: BrokerSecrets;
+    refreshToken: string;
+    wrapKeyB64: string;
+    fetch: typeof fetch;
+}): Promise<{
+    payload: string;
+}>;
+export declare function loadBrokerSecrets(env?: NodeJS.ProcessEnv): BrokerSecrets | null;
+/** Used only by tests that round-trip a sealed payload without HTTP. */
+export declare function sealWithWrapKey(wrapKeyB64: string, value: unknown): string;
+export declare function peekUnseal(wrapKeyB64: string, payload: string): unknown;
+//# sourceMappingURL=broker.d.ts.map

package/dist/broker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.d.ts","sourceRoot":"","sources":["../src/broker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAuCF,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,OAAO,EAAE,aAAa,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACxC,GAAG,MAAM,CA+BT;AAKD,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAE7D;AAED,wBAAgB,yBAAyB,IAAI,MAAM,CAElD;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,OAAO,EAAE,aAAa,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,KAAK,CAAC;CACrB,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA4BhC;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,OAAO,EAAE,aAAa,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,KAAK,CAAC;CACrB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAkB/B;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,aAAa,GAAG,IAAI,CAUtB;AAED,wEAAwE;AACxE,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAE1E;AAED,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAEvE"}

package/dist/broker.js

@@ -0,0 +1,146 @@
+/**
+ * First-party stateless OAuth broker (D9).
+ *
+ * Holds GOOGLE_CLIENT_ID / GOOGLE_CLIENT_SECRET in process env on
+ * agentsean.com — never in this repository (Google APIs ToS §4(b)).
+ *
+ * Flow: local connect page POSTs wrap_key + loopback redirect_uri here.
+ * Broker runs Google OAuth as a confidential Web client, encrypts tokens
+ * with wrap_key, 302s to http://127.0.0.1:<port>/oauth/callback?payload=...
+ * The hosted origin never fetches the daemon (Chrome 142 Local Network Access).
+ */
+import { createHmac } from "node:crypto";
+import { CONNECT_SCOPES, GOOGLE_AUTH_URL, GOOGLE_TOKEN_URL } from "./scopes.js";
+import { generatePkce } from "./pkce.js";
+import { seal, unseal } from "./seal.js";
+function b64urlJson(value) {
+    return Buffer.from(JSON.stringify(value), "utf8").toString("base64url");
+}
+function fromB64urlJson(raw) {
+    return JSON.parse(Buffer.from(raw, "base64url").toString("utf8"));
+}
+function signState(stateKey, payload) {
+    return createHmac("sha256", stateKey).update(payload).digest("base64url");
+}
+function encodeBrokerState(secrets, inner) {
+    const payload = b64urlJson(inner);
+    return `${payload}.${signState(secrets.stateKey, payload)}`;
+}
+function decodeBrokerState(secrets, state) {
+    const dot = state.lastIndexOf(".");
+    if (dot <= 0)
+        throw new Error("invalid broker state");
+    const payload = state.slice(0, dot);
+    const sig = state.slice(dot + 1);
+    if (sig !== signState(secrets.stateKey, payload))
+        throw new Error("bad broker state signature");
+    const inner = fromB64urlJson(payload);
+    if (inner.exp < Date.now())
+        throw new Error("broker state expired");
+    return inner;
+}
+export function brokerStartUrl(opts) {
+    const hostedOrigin = process.env["SEAN_PUBLIC_ORIGIN"]?.replace(/\/$/, "");
+    const hosted = process.env["SEAN_HOSTED"] === "1" &&
+        hostedOrigin &&
+        opts.redirectUri.startsWith(hostedOrigin);
+    if (!opts.redirectUri.startsWith("http://127.0.0.1:") && !hosted) {
+        throw new Error("Broker will only hand tokens to http://127.0.0.1 loopback.");
+    }
+    const pkce = generatePkce();
+    const inner = {
+        redirectUri: opts.redirectUri,
+        wrapKeyB64: opts.wrapKeyB64,
+        localState: opts.localState,
+        verifier: pkce.verifier,
+        exp: Date.now() + 10 * 60_000,
+    };
+    const state = encodeBrokerState(opts.secrets, inner);
+    const params = new URLSearchParams({
+        client_id: opts.secrets.clientId,
+        redirect_uri: brokerCallbackPlaceholder(),
+        response_type: "code",
+        scope: (opts.scopes ?? CONNECT_SCOPES).join(" "),
+        state,
+        code_challenge: pkce.challenge,
+        code_challenge_method: "S256",
+        access_type: "offline",
+        prompt: "consent",
+        include_granted_scopes: "true",
+    });
+    return `${GOOGLE_AUTH_URL}?${params.toString()}`;
+}
+/** Web client redirect registered in Cloud Console, e.g. https://oauth.agentsean.com/google/callback */
+let registeredCallback = "https://oauth.agentsean.com/google/callback";
+export function setBrokerRegisteredCallback(url) {
+    registeredCallback = url;
+}
+export function brokerCallbackPlaceholder() {
+    return registeredCallback;
+}
+export async function brokerHandleGoogleCallback(opts) {
+    const inner = decodeBrokerState(opts.secrets, opts.state);
+    const body = new URLSearchParams({
+        client_id: opts.secrets.clientId,
+        client_secret: opts.secrets.clientSecret,
+        code: opts.code,
+        code_verifier: inner.verifier,
+        grant_type: "authorization_code",
+        redirect_uri: registeredCallback,
+    });
+    const response = await opts.fetch(GOOGLE_TOKEN_URL, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body,
+    });
+    if (!response.ok) {
+        const text = await response.text().catch(() => "");
+        throw new Error(`token exchange failed (${response.status}): ${text.slice(0, 200)}`);
+    }
+    const json = (await response.json());
+    const wrapKey = Buffer.from(inner.wrapKeyB64, "base64url");
+    const payload = seal(wrapKey, JSON.stringify(json));
+    const loc = new URL(inner.redirectUri);
+    loc.searchParams.set("state", inner.localState);
+    loc.searchParams.set("payload", payload);
+    return { location: loc.toString() };
+}
+export async function brokerHandleRefresh(opts) {
+    const body = new URLSearchParams({
+        client_id: opts.secrets.clientId,
+        client_secret: opts.secrets.clientSecret,
+        refresh_token: opts.refreshToken,
+        grant_type: "refresh_token",
+    });
+    const response = await opts.fetch(GOOGLE_TOKEN_URL, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body,
+    });
+    if (!response.ok) {
+        throw new Error(`broker refresh failed (${response.status})`);
+    }
+    const json = await response.json();
+    const wrapKey = Buffer.from(opts.wrapKeyB64, "base64url");
+    return { payload: seal(wrapKey, JSON.stringify(json)) };
+}
+export function loadBrokerSecrets(env = process.env) {
+    const clientId = env["GOOGLE_CLIENT_ID"]?.trim();
+    const clientSecret = env["GOOGLE_CLIENT_SECRET"]?.trim();
+    const stateSecret = env["SEAN_BROKER_STATE_KEY"]?.trim();
+    if (!clientId || !clientSecret || !stateSecret)
+        return null;
+    return {
+        clientId,
+        clientSecret,
+        stateKey: Buffer.from(stateSecret.padEnd(32, "0")).subarray(0, 32),
+    };
+}
+/** Used only by tests that round-trip a sealed payload without HTTP. */
+export function sealWithWrapKey(wrapKeyB64, value) {
+    return seal(Buffer.from(wrapKeyB64, "base64url"), JSON.stringify(value));
+}
+export function peekUnseal(wrapKeyB64, payload) {
+    return JSON.parse(unseal(Buffer.from(wrapKeyB64, "base64url"), payload));
+}
+//# sourceMappingURL=broker.js.map

package/dist/broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.js","sourceRoot":"","sources":["../src/broker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAiBzC,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,cAAc,CAAI,GAAW;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAM,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB,EAAE,OAAe;IAClD,OAAO,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAsB,EAAE,KAAkB;IACnE,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,GAAG,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAsB,EAAE,KAAa;IAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,GAAG,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,cAAc,CAAc,OAAO,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAM9B;IACC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG;QAClC,YAAY;QACZ,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAgB;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM;KAC9B,CAAC;IACF,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;QAChC,YAAY,EAAE,yBAAyB,EAAE;QACzC,aAAa,EAAE,MAAM;QACrB,KAAK,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAChD,KAAK;QACL,cAAc,EAAE,IAAI,CAAC,SAAS;QAC9B,qBAAqB,EAAE,MAAM;QAC7B,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,SAAS;QACjB,sBAAsB,EAAE,MAAM;KAC/B,CAAC,CAAC;IACH,OAAO,GAAG,eAAe,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACnD,CAAC;AAED,wGAAwG;AACxG,IAAI,kBAAkB,GAAG,6CAA6C,CAAC;AAEvE,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,kBAAkB,GAAG,GAAG,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAKhD;IACC,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;QAChC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;QACxC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,KAAK,CAAC,QAAQ;QAC7B,UAAU,EAAE,oBAAoB;QAChC,YAAY,EAAE,kBAAkB;KACjC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE;QAClD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI;KACL,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAKzC;IACC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;QAChC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;QACxC,aAAa,EAAE,IAAI,CAAC,YAAY;QAChC,UAAU,EAAE,eAAe;KAC5B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE;QAClD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI;KACL,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC1D,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC;IACjD,MAAM,YAAY,GAAG,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC;IACzD,MAAM,WAAW,GAAG,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC;IACzD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC5D,OAAO;QACL,QAAQ;QACR,YAAY;QACZ,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,KAAc;IAChE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAAkB,EAAE,OAAe;IAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC"}

package/dist/causes.d.ts

@@ -0,0 +1,157 @@
+/**
+ * GA4 ↔ GSC discrepancy causes. PLAN Phase 7: 17 named codes, waterfall
+ * closes to an explicit residual. Magnitudes from research/gap-08.
+ */
+export declare const GSC_ANONYMIZED_SHARE = 0.468;
+export declare const EU_GA4_INVISIBLE_LOW = 0.4;
+export declare const EU_GA4_INVISIBLE_HIGH = 0.65;
+export type CauseGroup = "definitional" | "gsc" | "ga4_collection" | "ga4_config" | "ga4_reporting";
+export type DiscrepancyCause = {
+    code: string;
+    group: CauseGroup;
+    name: string;
+    direction: "gsc_gt_ga4" | "ga4_gt_gsc" | "either" | "n/a";
+    typicalMagnitude: string;
+    alwaysPresent: boolean;
+    notes: string;
+};
+export declare const DISCREPANCY_CAUSES: readonly [{
+    readonly code: "DEF_CLICK_VS_SESSION";
+    readonly group: "definitional";
+    readonly name: "Click vs session";
+    readonly direction: "gsc_gt_ga4";
+    readonly typicalMagnitude: "2–8% (pogo-sticking)";
+    readonly alwaysPresent: true;
+    readonly notes: "Two SERP clicks inside a 30-minute window are 2 GSC clicks and 1 GA4 session.";
+}, {
+    readonly code: "DEF_TIMEZONE";
+    readonly group: "definitional";
+    readonly name: "Timezone bucket";
+    readonly direction: "either";
+    readonly typicalMagnitude: "up to ~37% of one day (EU vs Pacific); ~0 over 28 days";
+    readonly alwaysPresent: true;
+    readonly notes: "GSC days are US/Pacific. GA4 days are the property timezone. Never compare single days.";
+}, {
+    readonly code: "DEF_CANONICAL_VS_LANDING";
+    readonly group: "definitional";
+    readonly name: "Canonical vs landing URL";
+    readonly direction: "either";
+    readonly typicalMagnitude: "20–60% at page level on parameterised sites; ~0 at property level";
+    readonly alwaysPresent: true;
+    readonly notes: "GSC assigns to Google-selected canonical. GA4 records the URL that loaded.";
+}, {
+    readonly code: "DEF_AGGREGATION";
+    readonly group: "definitional";
+    readonly name: "Chart vs table aggregation";
+    readonly direction: "either";
+    readonly typicalMagnitude: "property totals vs page-table totals";
+    readonly alwaysPresent: true;
+    readonly notes: "GSC chart totals aggregate by property; the table aggregates by page.";
+}, {
+    readonly code: "DEF_REDIRECT_CHAIN";
+    readonly group: "definitional";
+    readonly name: "Redirect chain";
+    readonly direction: "gsc_gt_ga4";
+    readonly typicalMagnitude: "100% of affected URLs; property-level = abandon rate";
+    readonly alwaysPresent: false;
+    readonly notes: "GSC click lands on A, 301 to B, GA4 fires on B. Slow hops abandon mid-chain.";
+}, {
+    readonly code: "GSC_ANONYMIZED_QUERY";
+    readonly group: "gsc";
+    readonly name: "Anonymized queries";
+    readonly direction: "n/a";
+    readonly typicalMagnitude: "46.8% of GSC clicks have no query (Ahrefs, 22B clicks / 887,534 properties)";
+    readonly alwaysPresent: true;
+    readonly notes: "Query-dimensioned totals omit rare queries. Page-level clicks stay complete. Never compute site traffic from a query pull.";
+}, {
+    readonly code: "GSC_ROW_LIMIT";
+    readonly group: "gsc";
+    readonly name: "API row limit";
+    readonly direction: "n/a";
+    readonly typicalMagnitude: "API does not guarantee completeness past top rows";
+    readonly alwaysPresent: true;
+    readonly notes: "searchanalytics.query rowLimit 1–25,000; paging to exhaustion is still a sample. Only BigQuery bulk export is complete.";
+}, {
+    readonly code: "GSC_16_MONTH_WINDOW";
+    readonly group: "gsc";
+    readonly name: "16-month retention";
+    readonly direction: "n/a";
+    readonly typicalMagnitude: "exactly one rolling YoY pair";
+    readonly alwaysPresent: true;
+    readonly notes: "Archive locally from day one. The API window cannot be backfilled.";
+}, {
+    readonly code: "GSC_DISCOVER_NEWS_SPLIT";
+    readonly group: "gsc";
+    readonly name: "Discover / News split";
+    readonly direction: "ga4_gt_gsc";
+    readonly typicalMagnitude: "publishers 30–70% of 'organic'; B2B SaaS ~0";
+    readonly alwaysPresent: false;
+    readonly notes: "Discover and Google News are not in type=web. GA4 still counts them as google / organic.";
+}, {
+    readonly code: "GSC_GENAI_SURFACES";
+    readonly group: "gsc";
+    readonly name: "Generative AI surfaces";
+    readonly direction: "either";
+    readonly typicalMagnitude: "impressions definitional change from mid-2026";
+    readonly alwaysPresent: false;
+    readonly notes: "AI Overviews / AI Mode sit in overall totals. Dedicated report is impressions-only and not in the Search Analytics API.";
+}, {
+    readonly code: "GA4_CONSENT_DENIED";
+    readonly group: "ga4_collection";
+    readonly name: "Consent Mode denied";
+    readonly direction: "gsc_gt_ga4";
+    readonly typicalMagnitude: "EU/UK compliant reject-all: 40–65% of organic permanently invisible in GA4";
+    readonly alwaysPresent: false;
+    readonly notes: "A compliant EU property has 40–65% of organic traffic missing from GA4. GSC is unaffected.";
+}, {
+    readonly code: "GA4_ADBLOCK";
+    readonly group: "ga4_collection";
+    readonly name: "Ad blockers";
+    readonly direction: "gsc_gt_ga4";
+    readonly typicalMagnitude: "vertical-dependent; often 10–30%";
+    readonly alwaysPresent: false;
+    readonly notes: "Requests to google-analytics.com / googletagmanager.com never fire.";
+}, {
+    readonly code: "GA4_JS_FAIL";
+    readonly group: "ga4_collection";
+    readonly name: "Tag never fired";
+    readonly direction: "gsc_gt_ga4";
+    readonly typicalMagnitude: "template / CSP / bounce-before-tag";
+    readonly alwaysPresent: false;
+    readonly notes: "JS error before gtag(), missing tag, CSP, or bounce before the library loads.";
+}, {
+    readonly code: "GA4_CHANNEL_MISCLASS";
+    readonly group: "ga4_config";
+    readonly name: "Default channel group";
+    readonly direction: "gsc_gt_ga4";
+    readonly typicalMagnitude: "campaigns named *shop* silently leave Organic Search";
+    readonly alwaysPresent: false;
+    readonly notes: "Reconcile against sessionSourceMedium == 'google / organic', never the channel group.";
+}, {
+    readonly code: "GA4_ATTRIBUTION_MODEL";
+    readonly group: "ga4_config";
+    readonly name: "Data-driven attribution";
+    readonly direction: "either";
+    readonly typicalMagnitude: "key-event counts will not equal organic-started sessions";
+    readonly alwaysPresent: true;
+    readonly notes: "Sessions are not attribution-modelled. Key events are. Mixing them in one table is a bug.";
+}, {
+    readonly code: "GA4_SAMPLING";
+    readonly group: "ga4_reporting";
+    readonly name: "Sampled API response";
+    readonly direction: "n/a";
+    readonly typicalMagnitude: "standard properties sample above 10M events / query";
+    readonly alwaysPresent: false;
+    readonly notes: "Refuse to report a sampled number without a warning. Read ResponseMetaData.samplingMetadatas.";
+}, {
+    readonly code: "GA4_THRESHOLDING";
+    readonly group: "ga4_reporting";
+    readonly name: "Thresholded rows";
+    readonly direction: "n/a";
+    readonly typicalMagnitude: "undisclosed; triggered by Google Signals";
+    readonly alwaysPresent: false;
+    readonly notes: "Refuse thresholded numbers. subjectToThresholding on the Data API is a hard gate.";
+}];
+export type DiscrepancyCauseCode = (typeof DISCREPANCY_CAUSES)[number]["code"];
+export declare function isEuTimeZone(timeZone: string | null | undefined): boolean;
+//# sourceMappingURL=causes.d.ts.map

package/dist/causes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"causes.d.ts","sourceRoot":"","sources":["../src/causes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,oBAAoB,QAAQ,CAAC;AAC1C,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAE1C,MAAM,MAAM,UAAU,GACpB,cAAc,GAAG,KAAK,GAAG,gBAAgB,GAAG,YAAY,GAAG,eAAe,CAAC;AAE7E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,KAAK,CAAC;IAC1D,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0KiB,CAAC;AAEjD,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAYzE"}

package/dist/causes.js

@@ -0,0 +1,175 @@
+/**
+ * GA4 ↔ GSC discrepancy causes. PLAN Phase 7: 17 named codes, waterfall
+ * closes to an explicit residual. Magnitudes from research/gap-08.
+ */
+export const GSC_ANONYMIZED_SHARE = 0.468;
+export const EU_GA4_INVISIBLE_LOW = 0.4;
+export const EU_GA4_INVISIBLE_HIGH = 0.65;
+export const DISCREPANCY_CAUSES = [
+    {
+        code: "DEF_CLICK_VS_SESSION",
+        group: "definitional",
+        name: "Click vs session",
+        direction: "gsc_gt_ga4",
+        typicalMagnitude: "2–8% (pogo-sticking)",
+        alwaysPresent: true,
+        notes: "Two SERP clicks inside a 30-minute window are 2 GSC clicks and 1 GA4 session.",
+    },
+    {
+        code: "DEF_TIMEZONE",
+        group: "definitional",
+        name: "Timezone bucket",
+        direction: "either",
+        typicalMagnitude: "up to ~37% of one day (EU vs Pacific); ~0 over 28 days",
+        alwaysPresent: true,
+        notes: "GSC days are US/Pacific. GA4 days are the property timezone. Never compare single days.",
+    },
+    {
+        code: "DEF_CANONICAL_VS_LANDING",
+        group: "definitional",
+        name: "Canonical vs landing URL",
+        direction: "either",
+        typicalMagnitude: "20–60% at page level on parameterised sites; ~0 at property level",
+        alwaysPresent: true,
+        notes: "GSC assigns to Google-selected canonical. GA4 records the URL that loaded.",
+    },
+    {
+        code: "DEF_AGGREGATION",
+        group: "definitional",
+        name: "Chart vs table aggregation",
+        direction: "either",
+        typicalMagnitude: "property totals vs page-table totals",
+        alwaysPresent: true,
+        notes: "GSC chart totals aggregate by property; the table aggregates by page.",
+    },
+    {
+        code: "DEF_REDIRECT_CHAIN",
+        group: "definitional",
+        name: "Redirect chain",
+        direction: "gsc_gt_ga4",
+        typicalMagnitude: "100% of affected URLs; property-level = abandon rate",
+        alwaysPresent: false,
+        notes: "GSC click lands on A, 301 to B, GA4 fires on B. Slow hops abandon mid-chain.",
+    },
+    {
+        code: "GSC_ANONYMIZED_QUERY",
+        group: "gsc",
+        name: "Anonymized queries",
+        direction: "n/a",
+        typicalMagnitude: "46.8% of GSC clicks have no query (Ahrefs, 22B clicks / 887,534 properties)",
+        alwaysPresent: true,
+        notes: "Query-dimensioned totals omit rare queries. Page-level clicks stay complete. Never compute site traffic from a query pull.",
+    },
+    {
+        code: "GSC_ROW_LIMIT",
+        group: "gsc",
+        name: "API row limit",
+        direction: "n/a",
+        typicalMagnitude: "API does not guarantee completeness past top rows",
+        alwaysPresent: true,
+        notes: "searchanalytics.query rowLimit 1–25,000; paging to exhaustion is still a sample. Only BigQuery bulk export is complete.",
+    },
+    {
+        code: "GSC_16_MONTH_WINDOW",
+        group: "gsc",
+        name: "16-month retention",
+        direction: "n/a",
+        typicalMagnitude: "exactly one rolling YoY pair",
+        alwaysPresent: true,
+        notes: "Archive locally from day one. The API window cannot be backfilled.",
+    },
+    {
+        code: "GSC_DISCOVER_NEWS_SPLIT",
+        group: "gsc",
+        name: "Discover / News split",
+        direction: "ga4_gt_gsc",
+        typicalMagnitude: "publishers 30–70% of 'organic'; B2B SaaS ~0",
+        alwaysPresent: false,
+        notes: "Discover and Google News are not in type=web. GA4 still counts them as google / organic.",
+    },
+    {
+        code: "GSC_GENAI_SURFACES",
+        group: "gsc",
+        name: "Generative AI surfaces",
+        direction: "either",
+        typicalMagnitude: "impressions definitional change from mid-2026",
+        alwaysPresent: false,
+        notes: "AI Overviews / AI Mode sit in overall totals. Dedicated report is impressions-only and not in the Search Analytics API.",
+    },
+    {
+        code: "GA4_CONSENT_DENIED",
+        group: "ga4_collection",
+        name: "Consent Mode denied",
+        direction: "gsc_gt_ga4",
+        typicalMagnitude: "EU/UK compliant reject-all: 40–65% of organic permanently invisible in GA4",
+        alwaysPresent: false,
+        notes: "A compliant EU property has 40–65% of organic traffic missing from GA4. GSC is unaffected.",
+    },
+    {
+        code: "GA4_ADBLOCK",
+        group: "ga4_collection",
+        name: "Ad blockers",
+        direction: "gsc_gt_ga4",
+        typicalMagnitude: "vertical-dependent; often 10–30%",
+        alwaysPresent: false,
+        notes: "Requests to google-analytics.com / googletagmanager.com never fire.",
+    },
+    {
+        code: "GA4_JS_FAIL",
+        group: "ga4_collection",
+        name: "Tag never fired",
+        direction: "gsc_gt_ga4",
+        typicalMagnitude: "template / CSP / bounce-before-tag",
+        alwaysPresent: false,
+        notes: "JS error before gtag(), missing tag, CSP, or bounce before the library loads.",
+    },
+    {
+        code: "GA4_CHANNEL_MISCLASS",
+        group: "ga4_config",
+        name: "Default channel group",
+        direction: "gsc_gt_ga4",
+        typicalMagnitude: "campaigns named *shop* silently leave Organic Search",
+        alwaysPresent: false,
+        notes: "Reconcile against sessionSourceMedium == 'google / organic', never the channel group.",
+    },
+    {
+        code: "GA4_ATTRIBUTION_MODEL",
+        group: "ga4_config",
+        name: "Data-driven attribution",
+        direction: "either",
+        typicalMagnitude: "key-event counts will not equal organic-started sessions",
+        alwaysPresent: true,
+        notes: "Sessions are not attribution-modelled. Key events are. Mixing them in one table is a bug.",
+    },
+    {
+        code: "GA4_SAMPLING",
+        group: "ga4_reporting",
+        name: "Sampled API response",
+        direction: "n/a",
+        typicalMagnitude: "standard properties sample above 10M events / query",
+        alwaysPresent: false,
+        notes: "Refuse to report a sampled number without a warning. Read ResponseMetaData.samplingMetadatas.",
+    },
+    {
+        code: "GA4_THRESHOLDING",
+        group: "ga4_reporting",
+        name: "Thresholded rows",
+        direction: "n/a",
+        typicalMagnitude: "undisclosed; triggered by Google Signals",
+        alwaysPresent: false,
+        notes: "Refuse thresholded numbers. subjectToThresholding on the Data API is a hard gate.",
+    },
+];
+export function isEuTimeZone(timeZone) {
+    if (!timeZone)
+        return false;
+    const tz = timeZone.toLowerCase();
+    return (tz.startsWith("europe/") ||
+        tz === "gmt" ||
+        tz.includes("london") ||
+        tz.includes("dublin") ||
+        tz.includes("amsterdam") ||
+        tz.includes("berlin") ||
+        tz.includes("paris"));
+}
+//# sourceMappingURL=causes.js.map

package/dist/causes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"causes.js","sourceRoot":"","sources":["../src/causes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAC1C,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAe1C,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,kBAAkB;QACxB,SAAS,EAAE,YAAY;QACvB,gBAAgB,EAAE,sBAAsB;QACxC,aAAa,EAAE,IAAI;QACnB,KAAK,EACH,+EAA+E;KAClF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,iBAAiB;QACvB,SAAS,EAAE,QAAQ;QACnB,gBAAgB,EAAE,wDAAwD;QAC1E,aAAa,EAAE,IAAI;QACnB,KAAK,EACH,yFAAyF;KAC5F;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,0BAA0B;QAChC,SAAS,EAAE,QAAQ;QACnB,gBAAgB,EACd,mEAAmE;QACrE,aAAa,EAAE,IAAI;QACnB,KAAK,EAAE,4EAA4E;KACpF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,4BAA4B;QAClC,SAAS,EAAE,QAAQ;QACnB,gBAAgB,EAAE,sCAAsC;QACxD,aAAa,EAAE,IAAI;QACnB,KAAK,EAAE,uEAAuE;KAC/E;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,YAAY;QACvB,gBAAgB,EAAE,sDAAsD;QACxE,aAAa,EAAE,KAAK;QACpB,KAAK,EACH,8EAA8E;KACjF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,oBAAoB;QAC1B,SAAS,EAAE,KAAK;QAChB,gBAAgB,EACd,6EAA6E;QAC/E,aAAa,EAAE,IAAI;QACnB,KAAK,EACH,4HAA4H;KAC/H;IACD;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,KAAK;QAChB,gBAAgB,EAAE,mDAAmD;QACrE,aAAa,EAAE,IAAI;QACnB,KAAK,EACH,yHAAyH;KAC5H;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,oBAAoB;QAC1B,SAAS,EAAE,KAAK;QAChB,gBAAgB,EAAE,8BAA8B;QAChD,aAAa,EAAE,IAAI;QACnB,KAAK,EAAE,oEAAoE;KAC5E;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,uBAAuB;QAC7B,SAAS,EAAE,YAAY;QACvB,gBAAgB,EAAE,6CAA6C;QAC/D,aAAa,EAAE,KAAK;QACpB,KAAK,EACH,0FAA0F;KAC7F;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,wBAAwB;QAC9B,SAAS,EAAE,QAAQ;QACnB,gBAAgB,EAAE,+CAA+C;QACjE,aAAa,EAAE,KAAK;QACpB,KAAK,EACH,yHAAyH;KAC5H;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,qBAAqB;QAC3B,SAAS,EAAE,YAAY;QACvB,gBAAgB,EACd,4EAA4E;QAC9E,aAAa,EAAE,KAAK;QACpB,KAAK,EACH,4FAA4F;KAC/F;IACD;QACE,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,YAAY;QACvB,gBAAgB,EAAE,kCAAkC;QACpD,aAAa,EAAE,KAAK;QACpB,KAAK,EAAE,qEAAqE;KAC7E;IACD;QACE,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,iBAAiB;QACvB,SAAS,EAAE,YAAY;QACvB,gBAAgB,EAAE,oCAAoC;QACtD,aAAa,EAAE,KAAK;QACpB,KAAK,EACH,+EAA+E;KAClF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,uBAAuB;QAC7B,SAAS,EAAE,YAAY;QACvB,gBAAgB,EAAE,sDAAsD;QACxE,aAAa,EAAE,KAAK;QACpB,KAAK,EACH,uFAAuF;KAC1F;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,yBAAyB;QAC/B,SAAS,EAAE,QAAQ;QACnB,gBAAgB,EAAE,0DAA0D;QAC5E,aAAa,EAAE,IAAI;QACnB,KAAK,EACH,2FAA2F;KAC9F;IACD;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,sBAAsB;QAC5B,SAAS,EAAE,KAAK;QAChB,gBAAgB,EAAE,qDAAqD;QACvE,aAAa,EAAE,KAAK;QACpB,KAAK,EACH,+FAA+F;KAClG;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,kBAAkB;QACxB,SAAS,EAAE,KAAK;QAChB,gBAAgB,EAAE,0CAA0C;QAC5D,aAAa,EAAE,KAAK;QACpB,KAAK,EACH,mFAAmF;KACtF;CAC6C,CAAC;AAIjD,MAAM,UAAU,YAAY,CAAC,QAAmC;IAC9D,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,CACL,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QACxB,EAAE,KAAK,KAAK;QACZ,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACrB,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACrB,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QACxB,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACrB,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CACrB,CAAC;AACJ,CAAC"}