@aranova/tracking-react 0.19.0 → 0.19.1

package/dist/sales.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../tracking-core/src/phone.ts","../../tracking-core/src/user-data.ts","../../tracking-core/src/consent.ts","../../tracking-core/src/gtag.ts","../../tracking-core/src/resources/conversion-firing.ts","../../tracking-core/src/events/page-view.ts","../../tracking-core/src/session.ts","../../tracking-core/src/ingest.ts","../../tracking-core/src/resources/sales/errors.ts","../../tracking-core/src/resources/sales/transport.ts","../../tracking-core/src/resources/sales/money.ts","../../tracking-core/src/resources/sales/client.ts","../../tracking-core/src/resources/sales/schema.ts","../../tracking-core/src/resources/services.ts"],"sourcesContent":["// Framework-agnostic phone-number utilities — isomorphic (browser + Node/RSC),\n// zero React. Bundled `libphonenumber-js` (standard metadata) so clients add no\n// dependency. The transmitted value is ALWAYS E.164; display is the only knob.\n\nimport { AsYouType, parsePhoneNumberFromString, type CountryCode } from \"libphonenumber-js\";\n\nexport type { CountryCode };\n\n/**\n * How a phone number is shown in the UI. The transmitted value is always E.164\n * and is deliberately NOT part of this — only the display format is configurable.\n * A function form covers the long tail (`(parsed) => string`).\n */\nexport type PhoneDisplayFormat =\n  | \"national\"\n  | \"international\"\n  | \"e164\"\n  | ((parsed: ParsedPhone) => string);\n\nexport interface ParsedPhone {\n  /** E.164 (`\"+14165550199\"`) or `null` when the input isn't a valid number. This is what gets transmitted. */\n  e164: string | null;\n  /** National display form (`\"(416) 555-0199\"`); empty string when unparseable. */\n  national: string;\n  /** International display form (`\"+1 416 555 0199\"`); empty string when unparseable. */\n  international: string;\n  /** ISO-3166 country resolved by libphonenumber, or `null`. */\n  country: CountryCode | null;\n  isValid: boolean;\n}\n\n/** Region assumed for numbers typed without a country code. */\nexport const DEFAULT_PHONE_COUNTRY: CountryCode = \"CA\";\n\n/** Parse a raw/display string into every representation at once (one parse → display + wire never drift). */\nexport function parsePhone(raw: string, country?: CountryCode): ParsedPhone {\n  const region = country ?? DEFAULT_PHONE_COUNTRY;\n  const parsed = parsePhoneNumberFromString(raw ?? \"\", region);\n  if (!parsed) {\n    return { e164: null, national: \"\", international: \"\", country: region, isValid: false };\n  }\n  const isValid = parsed.isValid();\n  return {\n    // E.164 is only surfaced for a *valid* number — a possible-but-invalid input\n    // (e.g. too few digits) still parses but must not be transmitted.\n    e164: isValid ? parsed.number : null,\n    national: parsed.formatNational(),\n    international: parsed.formatInternational(),\n    country: parsed.country ?? region,\n    isValid,\n  };\n}\n\n/** Normalize any raw/display value to E.164, or `null` if it isn't a valid number. */\nexport function toE164(raw: string, country?: CountryCode): string | null {\n  return parsePhone(raw, country).e164;\n}\n\n/** Format a value for display. Defaults to `'national'`. Never affects the wire value. */\nexport function formatPhone(\n  value: string,\n  format: PhoneDisplayFormat = \"national\",\n  country?: CountryCode,\n): string {\n  const parsed = parsePhone(value, country);\n  if (typeof format === \"function\") return format(parsed);\n  switch (format) {\n    case \"international\":\n      return parsed.international || value;\n    case \"e164\":\n      return parsed.e164 ?? value;\n    case \"national\":\n    default:\n      return parsed.national || value;\n  }\n}\n\n/** Live, incremental formatting for an `<input>` as the user types (`AsYouType`). */\nexport function formatPhoneAsTyped(raw: string, country?: CountryCode): string {\n  return new AsYouType(country ?? DEFAULT_PHONE_COUNTRY).input(raw ?? \"\");\n}\n","// Enhanced-conversions user_data bridge (Google Ads \"user-provided data\").\n//\n// Why this exists: Google's automatic user-provided-data capture demonstrably\n// misses phone fields on client sites (verified live: a filled tel input never\n// produced a `pn` hit parameter), and our offline sale uploads are phone-hash\n// keyed — without a phone↔click pairing built at conversion time, none of them\n// can match. This module makes the SDK the deterministic capture path: it\n// extracts the visitor's own email/phone from `form_submit` fields (or an\n// explicit override / a recorded sale's customer fields), normalizes them\n// (E.164 phone, lowercased email), and sets them as PLAINTEXT\n// `gtag('set','user_data', …)` immediately before a conversion fires. gtag.js\n// normalizes further and SHA-256 hashes IN THE BROWSER — plaintext never\n// leaves the page, and we never own Google's hashing contract.\n//\n// Privacy posture: the stash is module-level memory only — never persisted to\n// any storage, never added to our own ingest payloads (the form fields were\n// already part of the site's `form_submit` metadata; we only read them).\n// Consent gating happens at the egress in `fireConversionWithConsent` (the\n// same gate every conversion already passes through); an explicit consent\n// denial additionally clears the stash and nulls gtag's page state (see\n// consent.ts). This module must NOT import consent.ts — consent.ts imports us\n// for that clearing hook, and the reverse edge would be a cycle.\n\nimport { toE164, type CountryCode } from \"./phone\";\n\n/** Raw identifiers a caller may hand us (normalized before use). */\nexport interface ConversionUserData {\n  email?: string | null;\n  phone?: string | null;\n}\n\n/** Normalized identifiers as gtag's `user_data` expects them. */\nexport interface NormalizedUserData {\n  email: string | null;\n  /** E.164 (`\"+16477836797\"`) — the format Google's parser reliably accepts. */\n  phoneNumber: string | null;\n}\n\nconst EMAIL_SHAPE = /^[^@\\s]+@[^@\\s]+\\.[^@\\s]+$/;\nconst EMAIL_NAME_HINT = /e[-_]?mail/i;\n// `\\b` won't do: underscores are word chars, so `customer_phone` would miss.\n// The leading guard keeps bare \"tel\" from matching e.g. \"hotel\".\nconst PHONE_NAME_HINT = /(^|[^a-z])(phone|tel|mobile|cell)/i;\n\n// Page-lifetime, memory-only. Freshest non-null value wins per identifier.\nlet stash: NormalizedUserData = { email: null, phoneNumber: null };\n\n/**\n * Trim + lowercase + shape-check. Deliberately NO gmail dot/plus\n * canonicalization — gtag.js applies Google's own normalization before\n * hashing, and owning that contract here would be drift waiting to happen.\n */\nexport function normalizeEmail(raw: unknown): string | null {\n  if (typeof raw !== \"string\") return null;\n  const cleaned = raw.trim().toLowerCase();\n  return EMAIL_SHAPE.test(cleaned) ? cleaned : null;\n}\n\ninterface FieldLike {\n  name?: unknown;\n  type?: unknown;\n  label?: unknown;\n  value?: unknown;\n}\n\nfunction fieldText(field: FieldLike, key: \"name\" | \"type\" | \"label\"): string {\n  const value = field[key];\n  return typeof value === \"string\" ? value : \"\";\n}\n\n/**\n * Deterministic extraction from `form_submit` `fields[]`: for each identifier,\n * a typed field (`type=\"email\"` / `type=\"tel\"`) wins over a name/label match\n * (`user_email`, `customer_phone`, …), in document order. A field whose value\n * fails normalization does NOT consume the slot — scanning continues, so one\n * malformed phone field can't mask a later valid one. Never throws.\n */\nexport function extractUserDataFromFormFields(\n  fields: unknown,\n  country?: CountryCode,\n): NormalizedUserData {\n  const result: NormalizedUserData = { email: null, phoneNumber: null };\n  if (!Array.isArray(fields)) return result;\n  const passes: Array<(field: FieldLike, hint: RegExp, type: string) => boolean> = [\n    (field, _hint, type) => fieldText(field, \"type\").toLowerCase() === type,\n    (field, hint) => hint.test(fieldText(field, \"name\")) || hint.test(fieldText(field, \"label\")),\n  ];\n  for (const matches of passes) {\n    for (const raw of fields) {\n      if (raw === null || typeof raw !== \"object\") continue;\n      const field = raw as FieldLike;\n      if (typeof field.value !== \"string\" || field.value.length === 0) continue;\n      if (result.email === null && matches(field, EMAIL_NAME_HINT, \"email\")) {\n        result.email = normalizeEmail(field.value);\n      }\n      if (result.phoneNumber === null && matches(field, PHONE_NAME_HINT, \"tel\")) {\n        try {\n          result.phoneNumber = toE164(field.value, country);\n        } catch {\n          // libphonenumber choked on garbage — leave the slot open\n        }\n      }\n    }\n    if (result.email !== null && result.phoneNumber !== null) break;\n  }\n  return result;\n}\n\n/** Normalize + merge into the stash (non-null values win over existing). */\nexport function stashUserData(data: ConversionUserData, country?: CountryCode): void {\n  const email = normalizeEmail(data.email);\n  let phoneNumber: string | null = null;\n  if (typeof data.phone === \"string\" && data.phone.length > 0) {\n    try {\n      phoneNumber = toE164(data.phone, country);\n    } catch {\n      phoneNumber = null;\n    }\n  }\n  stash = {\n    email: email ?? stash.email,\n    phoneNumber: phoneNumber ?? stash.phoneNumber,\n  };\n}\n\n/** Extract from `form_submit` fields and merge into the stash. Never throws. */\nexport function stashUserDataFromFormFields(fields: unknown, country?: CountryCode): void {\n  try {\n    const extracted = extractUserDataFromFormFields(fields, country);\n    stash = {\n      email: extracted.email ?? stash.email,\n      phoneNumber: extracted.phoneNumber ?? stash.phoneNumber,\n    };\n  } catch {\n    // extraction must never break event tracking\n  }\n}\n\n/** Snapshot of the current stash (copy — mutations don't leak back). */\nexport function getStashedUserData(): NormalizedUserData {\n  return { ...stash };\n}\n\n/** Drop everything (consent denial, tests). */\nexport function clearStashedUserData(): void {\n  stash = { email: null, phoneNumber: null };\n}\n\n/**\n * Set gtag's per-page `user_data` right before a conversion fires: explicit\n * values win per-key over the stash; an empty merge sets nothing at all.\n * Browser-gated and throw-proof — the conversion must fire regardless.\n * NOT consent-checked here: the single caller (`fireConversionWithConsent`)\n * has already returned on denial before reaching this.\n *\n * Returns whether a `gtag('set','user_data', …)` call was made.\n */\nexport function applyUserDataForConversion(\n  explicit?: ConversionUserData | null,\n  country?: CountryCode,\n): boolean {\n  if (typeof window === \"undefined\" || typeof window.gtag !== \"function\") return false;\n  let email = stash.email;\n  let phoneNumber = stash.phoneNumber;\n  if (explicit) {\n    const normalizedEmail = normalizeEmail(explicit.email);\n    if (normalizedEmail) email = normalizedEmail;\n    if (typeof explicit.phone === \"string\" && explicit.phone.length > 0) {\n      try {\n        phoneNumber = toE164(explicit.phone, country) ?? phoneNumber;\n      } catch {\n        // keep the stashed phone\n      }\n    }\n  }\n  if (email === null && phoneNumber === null) return false;\n  try {\n    window.gtag(\"set\", \"user_data\", {\n      ...(email !== null ? { email } : {}),\n      ...(phoneNumber !== null ? { phone_number: phoneNumber } : {}),\n    });\n    return true;\n  } catch {\n    return false;\n  }\n}\n","import type { ConsentState } from \"./types\";\nimport { clearStashedUserData } from \"./user-data\";\n\n/**\n * localStorage key for the visitor's explicit consent choice.\n */\nexport const CONSENT_STATE_KEY = \"consent_state\";\n\n/**\n * localStorage key for the ISO timestamp when consent was last changed.\n */\nexport const CONSENT_TIMESTAMP_KEY = \"consent_timestamp\";\n\n/**\n * localStorage key for the ISO timestamp when an explicit decline expires.\n *\n * Written alongside a `denied` choice; absent for grants (they never expire).\n * Computed at WRITE time so every reader — including the inline\n * `beforeInteractive` scripts that can't import this module — only has to\n * compare a stored ISO string against the clock.\n */\nexport const CONSENT_EXPIRES_AT_KEY = \"consent_expires_at\";\n\n/**\n * How long an explicit decline is honored before the visitor reverts to the\n * default-granted state. Explicit grants never expire.\n */\nexport const DEFAULT_DECLINE_TTL_DAYS = 90;\n\nconst DAY_MS = 86_400_000;\n\n/**\n * Google Consent Mode value sent to `gtag('consent', 'update', ...)`.\n */\nexport type GtagConsentValue = \"granted\" | \"denied\";\n\n/**\n * Consent Mode v2 payload sent to Google Ads when consent changes.\n */\nexport interface ConsentUpdatePayload {\n  ad_storage: GtagConsentValue;\n  ad_user_data: GtagConsentValue;\n  ad_personalization: GtagConsentValue;\n  analytics_storage: GtagConsentValue;\n}\n\n/** Effective consent state — the opt-out model has no \"pending\". */\nexport type ConsentChoiceState = \"granted\" | \"denied\";\n\n/**\n * Where the effective state came from: `explicit` when the visitor made a\n * stored, still-valid choice; `default` otherwise (no choice, expired decline,\n * storage blocked, SSR).\n */\nexport type ConsentSource = \"default\" | \"explicit\";\n\n/**\n * The effective consent decision plus its provenance.\n */\nexport interface ConsentChoice {\n  state: ConsentChoiceState;\n  source: ConsentSource;\n  /** ISO timestamp of the explicit choice; null for the default state. */\n  updatedAt: string | null;\n  /** ISO expiry of an unexpired decline; null for grants and the default state. */\n  expiresAt: string | null;\n}\n\n/** Options for explicit consent writes. */\nexport interface SetConsentOptions {\n  /** Days an explicit decline is honored. Defaults to {@link DEFAULT_DECLINE_TTL_DAYS}. */\n  declineTtlDays?: number;\n}\n\nconst DEFAULT_CHOICE: ConsentChoice = {\n  state: \"granted\",\n  source: \"default\",\n  updatedAt: null,\n  expiresAt: null,\n};\n\ntype ConsentChangeListener = (choice: ConsentChoice) => void;\nconst changeListeners = new Set<ConsentChangeListener>();\n\n/**\n * Subscribe to consent changes (opt-in, opt-out, reset) made in THIS tab.\n * Cross-tab changes surface via the browser's `storage` event instead.\n * Returns an unsubscribe function.\n */\nexport function onConsentChange(listener: ConsentChangeListener): () => void {\n  changeListeners.add(listener);\n  return () => {\n    changeListeners.delete(listener);\n  };\n}\n\n// Takes the intended choice rather than re-reading storage: when localStorage\n// is blocked, a re-read would report default-granted right after an opt-out\n// click even though the live gtag/fbq revoke DID apply for this page load.\nfunction notifyConsentChanged(choice: ConsentChoice): void {\n  for (const listener of changeListeners) {\n    try {\n      listener(choice);\n    } catch {\n      // a listener must never break the consent flow\n    }\n  }\n}\n\n/**\n * Build the Google Consent Mode v2 update payload for a single consent state.\n */\nexport function buildConsentPayload(state: GtagConsentValue): ConsentUpdatePayload {\n  return {\n    ad_storage: state,\n    ad_user_data: state,\n    ad_personalization: state,\n    analytics_storage: state,\n  };\n}\n\n/**\n * Resolve the visitor's effective consent (opt-out model).\n *\n * Default is GRANTED. Only a stored, unexpired explicit decline yields\n * `denied`. SSR, blocked storage, and expired declines all resolve to the\n * default. A legacy decline stored by the opt-in-era SDK (no expiry key) stays\n * denied and gets a fresh 90-day expiry backfilled, keeping this reader\n * consistent with the inline scripts (which treat a missing expiry as denied).\n */\nexport function getConsentChoice(): ConsentChoice {\n  if (typeof window === \"undefined\") return DEFAULT_CHOICE;\n\n  try {\n    const stored = window.localStorage.getItem(CONSENT_STATE_KEY);\n    const updatedAt = window.localStorage.getItem(CONSENT_TIMESTAMP_KEY);\n\n    if (stored === \"granted\")\n      return { state: \"granted\", source: \"explicit\", updatedAt, expiresAt: null };\n\n    if (stored === \"denied\") {\n      let expiresAt = window.localStorage.getItem(CONSENT_EXPIRES_AT_KEY);\n      if (!expiresAt) {\n        expiresAt = new Date(Date.now() + DEFAULT_DECLINE_TTL_DAYS * DAY_MS).toISOString();\n        try {\n          window.localStorage.setItem(CONSENT_EXPIRES_AT_KEY, expiresAt);\n        } catch {\n          // backfill is best-effort; the decline is still honored this read\n        }\n      }\n      // A garbled expiry parses to NaN, the comparison is false, and the decline\n      // stays honored (fail closed on the decliner's side). Only a parseable\n      // expiry in the past reverts to the default.\n      if (!(Date.parse(expiresAt) <= Date.now()))\n        return { state: \"denied\", source: \"explicit\", updatedAt, expiresAt };\n    }\n  } catch {\n    // localStorage blocked (sandboxed iframe / storage disabled) — default\n  }\n\n  return DEFAULT_CHOICE;\n}\n\n/**\n * Read the visitor's effective consent state.\n *\n * Opt-out model: returns `granted` unless a stored, unexpired explicit decline\n * exists. Never returns `pending` — that value survives in {@link ConsentState}\n * only so pre-v2 call sites keep compiling.\n */\nexport function getConsentState(): ConsentState {\n  return getConsentChoice().state;\n}\n\nfunction pushConsentToPlatforms(state: GtagConsentValue): void {\n  if (typeof window === \"undefined\") return;\n\n  if (typeof window.gtag === \"function\")\n    window.gtag(\"consent\", \"update\", buildConsentPayload(state));\n\n  // Mirror to the Meta Pixel so one control gates both ad platforms.\n  if (typeof window.fbq === \"function\")\n    window.fbq(\"consent\", state === \"granted\" ? \"grant\" : \"revoke\");\n}\n\n/**\n * Persist an explicit visitor consent choice and push it live to Google\n * Consent Mode and the Meta Pixel.\n *\n * Declines expire after {@link DEFAULT_DECLINE_TTL_DAYS} days (override via\n * `options.declineTtlDays`); grants never expire.\n */\nexport function setConsentState(state: GtagConsentValue, options?: SetConsentOptions): void {\n  if (typeof window === \"undefined\") return;\n\n  // Compute the full intended choice BEFORE touching storage so (a) a garbage\n  // TTL can't throw mid-write (state written, expiry not), and (b) listeners\n  // get the visitor's actual choice even when storage is blocked.\n  const requestedTtl = options?.declineTtlDays;\n  const ttlDays =\n    typeof requestedTtl === \"number\" && Number.isFinite(requestedTtl) && requestedTtl > 0\n      ? requestedTtl\n      : DEFAULT_DECLINE_TTL_DAYS;\n  const updatedAt = new Date().toISOString();\n  const expiresAt =\n    state === \"denied\" ? new Date(Date.now() + ttlDays * DAY_MS).toISOString() : null;\n\n  try {\n    window.localStorage.setItem(CONSENT_STATE_KEY, state);\n    window.localStorage.setItem(CONSENT_TIMESTAMP_KEY, updatedAt);\n    if (expiresAt !== null) {\n      window.localStorage.setItem(CONSENT_EXPIRES_AT_KEY, expiresAt);\n    } else {\n      window.localStorage.removeItem(CONSENT_EXPIRES_AT_KEY);\n    }\n  } catch {\n    // localStorage blocked — still push the live consent update below so the\n    // visitor's click takes effect for this page load even if it can't persist\n  }\n\n  pushConsentToPlatforms(state);\n  if (state === \"denied\") {\n    // A mid-session revoke also scrubs enhanced-conversions page state: drop\n    // the stashed identifiers and best-effort null gtag's user_data.\n    clearStashedUserData();\n    try {\n      if (typeof window.gtag === \"function\") window.gtag(\"set\", \"user_data\", null);\n    } catch {\n      // scrubbing is best-effort; the consent update above already gates fires\n    }\n  }\n  notifyConsentChanged({ state, source: \"explicit\", updatedAt, expiresAt });\n}\n\n/**\n * Explicitly opt the visitor in to ad tracking (never expires).\n */\nexport function optIn(): void {\n  setConsentState(\"granted\");\n}\n\n/**\n * Explicitly opt the visitor out of ad tracking for\n * {@link DEFAULT_DECLINE_TTL_DAYS} days (override via `options.declineTtlDays`).\n *\n * This is the primitive a client site's footer \"cookie preferences\" control\n * should call — the packages ship no consent UI of their own.\n */\nexport function optOut(options?: SetConsentOptions): void {\n  setConsentState(\"denied\", options);\n}\n\n/**\n * Clear the stored explicit choice, returning the visitor to the\n * default-granted state, and push that state live to gtag + Meta.\n *\n * Power a \"Cookie preferences\" reset in a footer:\n *\n * ```tsx\n * const { reset } = useCookiePreferences();\n * <button onClick={reset}>Reset cookie preferences</button>\n * ```\n */\nexport function resetConsent(): void {\n  if (typeof window === \"undefined\") return;\n\n  try {\n    window.localStorage.removeItem(CONSENT_STATE_KEY);\n    window.localStorage.removeItem(CONSENT_TIMESTAMP_KEY);\n    window.localStorage.removeItem(CONSENT_EXPIRES_AT_KEY);\n  } catch {\n    // localStorage blocked — nothing to clear\n  }\n\n  pushConsentToPlatforms(\"granted\");\n  notifyConsentChanged(DEFAULT_CHOICE);\n}\n\n/**\n * Re-apply a stored explicit consent choice to Google Consent Mode + Meta.\n *\n * @deprecated The v2 consent-default path ({@link applyDefaultConsentState} /\n * `createConsentDefaultScript`) already applies the effective state at\n * bootstrap, making this redundant. Pushes platform updates directly — it must\n * NOT route through {@link setConsentState}, which would renew the decline's\n * 90-day expiry on every page load.\n */\nexport function restoreStoredConsent(): ConsentState {\n  const choice = getConsentChoice();\n\n  if (choice.source === \"explicit\") pushConsentToPlatforms(choice.state);\n\n  return choice.state;\n}\n\n/**\n * Inline-JS fragment that resolves the effective consent value into\n * `var aranovaConsent = 'granted' | 'denied'`.\n *\n * Single source of the expiry logic for every inline `<script>` builder (gtag\n * and Meta), so the runtime reader and the inline readers can't drift. Must\n * stay dependency-free ES5 and never throw (localStorage access throws in\n * sandboxed iframes).\n */\nexport function createEffectiveConsentSnippet(): string {\n  // IIFE keeps the temporaries off the page's global scope — only\n  // `aranovaConsent` (the value consumed by the rest of the script) leaks.\n  return `\nvar aranovaConsent = (function () {\n  try {\n    if (window.localStorage.getItem('${CONSENT_STATE_KEY}') === 'denied') {\n      var exp = window.localStorage.getItem('${CONSENT_EXPIRES_AT_KEY}');\n      var expMs = exp ? Date.parse(exp) : NaN;\n      if (!(expMs <= Date.now())) return 'denied';\n    }\n  } catch (e) {}\n  return 'granted';\n})();\n`.trim();\n}\n","// This module loads the Google tag (gtag.js), applies Consent Mode, and fires\n// `gtag('config', …)` (remarketing) plus real-time `gtag('event','conversion')`\n// via `fireGtagConversion` (GAP28). Consent v2 is OPT-OUT: the effective state\n// is granted unless the visitor stored an explicit, unexpired decline, so tags\n// run from first paint for the default visitor.\n// See docs/google-ads-deployment/gtags-and-conversion-tracking.md.\n\nimport { buildConsentPayload, createEffectiveConsentSnippet, getConsentState } from \"./consent\";\nimport type { GtagEnvironmentMap } from \"./types\";\n\n/**\n * Google Tag Manager script host used for gtag loading.\n */\nexport const GTAG_SCRIPT_HOST = \"https://www.googletagmanager.com/gtag/js\";\n\n/**\n * Attribute used to mark scripts inserted by the tracking SDK.\n */\nexport const TRACKING_SCRIPT_ATTRIBUTE = \"data-aranova-tracking\";\n\nfunction getScriptMarker(id: string): string {\n  return `aranova-${id}`;\n}\n\n/**\n * Pattern matching valid Google Ads / GA4 tag IDs.\n *\n * Accepted formats: `AW-123456789`, `G-XXXXXXXXXX`, `GT-XXXXXXX`, `DC-XXXXXXX`.\n * IDs that don't match are silently dropped to prevent script injection when\n * interpolated into inline `<script>` content.\n */\nconst GTAG_ID_PATTERN = /^[A-Z]{1,3}-[A-Za-z0-9_-]+$/;\n\nexport function isValidGtagId(id: string): boolean {\n  return GTAG_ID_PATTERN.test(id);\n}\n\n/**\n * Create an inline script that initializes gtag with the visitor's EFFECTIVE\n * consent as the Consent Mode default (opt-out model).\n *\n * Resolves granted/denied synchronously from localStorage in one shot — a\n * decliner never gets a granted window and the default visitor never gets a\n * denied one, so no `wait_for_update` and no follow-up restore script is\n * needed. Run it `beforeInteractive` so the default lands before gtag.js.\n */\nexport function createConsentDefaultScript(): string {\n  return `\nwindow.dataLayer = window.dataLayer || [];\nfunction gtag(){dataLayer.push(arguments);}\nwindow.gtag = gtag;\n${createEffectiveConsentSnippet()}\ngtag('consent', 'default', {\n  ad_storage: aranovaConsent,\n  ad_user_data: aranovaConsent,\n  ad_personalization: aranovaConsent,\n  analytics_storage: aranovaConsent\n});\n`.trim();\n}\n\n/**\n * Create an inline script that initializes gtag for a Google Ads tag id.\n */\nexport function createGtagInitScript(gtagId: string): string {\n  if (!isValidGtagId(gtagId)) return \"\";\n  return `\nwindow.dataLayer = window.dataLayer || [];\nfunction gtag(){dataLayer.push(arguments);}\nwindow.gtag = gtag;\ngtag('js', new Date());\ngtag('config', '${gtagId}');\n`.trim();\n}\n\n/**\n * Create an inline script that pushes the effective consent as an update.\n *\n * @deprecated Redundant since consent v2 — `createConsentDefaultScript()`\n * already resolves the effective state (including decline expiry) into the\n * Consent Mode default, so no restore pass is needed. Kept expiry-aware for\n * integrations that still render it.\n */\nexport function createConsentRestoreScript(): string {\n  return `\n${createEffectiveConsentSnippet()}\nif (window.gtag) {\n  window.gtag('consent', 'update', {\n    ad_storage: aranovaConsent,\n    ad_user_data: aranovaConsent,\n    ad_personalization: aranovaConsent,\n    analytics_storage: aranovaConsent\n  });\n}\n`.trim();\n}\n\n/**\n * Ensure `window.gtag` and `window.dataLayer` exist and return the gtag shim.\n */\nexport function ensureGtagFunction(): NonNullable<Window[\"gtag\"]> {\n  window.dataLayer = window.dataLayer || [];\n\n  if (typeof window.gtag === \"function\") return window.gtag;\n\n  // CRITICAL: push the `arguments` object, NOT a rest-param array. gtag.js only\n  // treats the canonical `dataLayer.push(arguments)` form as a command — a plain\n  // array pushed to the dataLayer is ignored. With the array form, every\n  // gtag('config' | 'consent' | 'event') call silently no-ops: the account never\n  // registers, consent mode never applies, and conversions never fire (verified\n  // live — the array form sends zero network hits; the arguments form sends the\n  // pagead/conversion ping). Mirror Google's canonical inline snippet exactly.\n  function gtag(): void {\n    // eslint-disable-next-line prefer-rest-params\n    window.dataLayer?.push(arguments);\n  }\n  window.gtag = gtag;\n\n  return window.gtag;\n}\n\nconst SEND_TO_RE = /^AW-[A-Za-z0-9]+\\/[A-Za-z0-9_-]+$/;\n\n/** A gtag `send_to` target, e.g. `AW-123456789/AbC-D_efg`. */\nexport function isValidSendTo(sendTo: string): boolean {\n  return SEND_TO_RE.test(sendTo);\n}\n\nexport interface GtagConversionInput {\n  /** `AW-<id>/<label>` — the conversion action's firing target. */\n  sendTo: string;\n  /** Conversion value in MAJOR units; omit to let Google apply the action's default. */\n  value?: number | null;\n  currency?: string | null;\n  transactionId?: string | null;\n}\n\n/**\n * Fire a real-time on-site conversion — `gtag('event','conversion',{ send_to, … })`\n * (GAP28). Browser-gated and never throws: `record()` is isomorphic and runs server-side\n * under a secret key where `window`/`gtag` are absent, so this no-ops there. Consent\n * gating + de-dup are the caller's responsibility (see `fireConversionWithConsent`).\n * Returns whether the event was actually pushed.\n */\nexport function fireGtagConversion(input: GtagConversionInput): boolean {\n  if (typeof window === \"undefined\" || typeof window.gtag !== \"function\") return false;\n  if (!isValidSendTo(input.sendTo)) return false;\n  const params: Record<string, unknown> = { send_to: input.sendTo };\n  if (input.value != null) params.value = input.value;\n  if (input.currency) params.currency = input.currency;\n  if (input.transactionId) params.transaction_id = input.transactionId;\n  try {\n    window.gtag(\"event\", \"conversion\", params);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Apply the visitor's EFFECTIVE consent as the Consent Mode default\n * (opt-out model): granted unless a stored, unexpired decline exists.\n *\n * Reading via `getConsentState()` also backfills the expiry key for\n * legacy opt-in-era declines, keeping later inline reads consistent.\n */\nexport function applyDefaultConsentState(): void {\n  const gtag = ensureGtagFunction();\n  gtag(\n    \"consent\",\n    \"default\",\n    buildConsentPayload(getConsentState() === \"denied\" ? \"denied\" : \"granted\"),\n  );\n}\n\n/**\n * Load the external gtag script once for the provided Google Ads tag id.\n */\nexport function loadGtagScript(gtagId: string): void {\n  if (typeof document === \"undefined\") return;\n\n  const marker = getScriptMarker(\"gtag-loader\");\n  const existingScript = document.querySelector<HTMLScriptElement>(\n    `script[${TRACKING_SCRIPT_ATTRIBUTE}=\"${marker}\"]`,\n  );\n  if (existingScript) return;\n\n  const script = document.createElement(\"script\");\n  script.async = true;\n  script.src = `${GTAG_SCRIPT_HOST}?id=${encodeURIComponent(gtagId)}`;\n  script.setAttribute(TRACKING_SCRIPT_ATTRIBUTE, marker);\n  document.head.append(script);\n}\n\n/**\n * Send the initial `gtag('js')` and `gtag('config')` calls.\n */\nexport function initializeGtag(gtagId: string): void {\n  const gtag = ensureGtagFunction();\n  gtag(\"js\", new Date());\n  gtag(\"config\", gtagId);\n}\n\n/**\n * Push the current effective consent to gtag as an update.\n *\n * @deprecated Redundant since consent v2 — `applyDefaultConsentState()`\n * already applies the effective state at bootstrap. Pushes directly (no\n * storage writes), so it never renews a decline's expiry.\n */\nexport function restoreConsentState(): void {\n  if (typeof window === \"undefined\") return;\n\n  const consentState = getConsentState();\n  if (consentState === \"granted\" || consentState === \"denied\")\n    window.gtag?.(\"consent\", \"update\", buildConsentPayload(consentState));\n}\n\n/**\n * Load and initialize Google Ads tracking with Consent Mode support.\n *\n * Used by framework components and browser-script initialization.\n */\nexport function bootstrapGoogleAdsTracking(gtagId: string): void {\n  if (typeof window === \"undefined\" || typeof document === \"undefined\") return;\n  if (!isValidGtagId(gtagId)) return;\n\n  applyDefaultConsentState();\n  loadGtagScript(gtagId);\n  initializeGtag(gtagId);\n}\n\n/**\n * Load and initialize Google Ads tracking for ALL labelled gtag IDs.\n *\n * Every ID in the map gets a `gtag('config', ...)` call — gtag natively\n * supports multiple configured tags on the same page. The script loader\n * only runs once (for the first ID); subsequent IDs reuse the shared\n * `dataLayer`.\n */\nexport function bootstrapMultipleGtags(gtagIds: GtagEnvironmentMap): void {\n  if (typeof window === \"undefined\" || typeof document === \"undefined\") return;\n\n  const ids = Object.values(gtagIds).filter(\n    (id): id is string => typeof id === \"string\" && isValidGtagId(id),\n  );\n  if (ids.length === 0) return;\n\n  applyDefaultConsentState();\n  loadGtagScript(ids[0]!);\n\n  // Call gtag('js') once, then gtag('config') per ID. initializeGtag\n  // calls both, but gtag('js') should only fire once per page load.\n  const gtag = ensureGtagFunction();\n  gtag(\"js\", new Date());\n  for (const id of ids) {\n    gtag(\"config\", id);\n  }\n}\n\n/**\n * Create an inline script that initializes gtag for multiple Google Ads tag ids.\n *\n * Used by the Next.js `GoogleAdsTracking` component when rendering `<Script>`\n * tags for a multi-gtag configuration.\n */\nexport function createGtagInitScriptMulti(gtagIds: string[]): string {\n  const safeIds = gtagIds.filter(isValidGtagId);\n  const configs = safeIds.map((id) => `gtag('config', '${id}');`).join(\"\\n\");\n  return `\nwindow.dataLayer = window.dataLayer || [];\nfunction gtag(){dataLayer.push(arguments);}\nwindow.gtag = gtag;\ngtag('js', new Date());\n${configs}\n`.trim();\n}\n","// Consent-gated, de-duped orchestration around the raw `fireGtagConversion` (GAP28).\n//\n// Consent v2 (opt-out model): fire unless the visitor's effective consent is an\n// explicit, unexpired decline. There is no \"pending\" state and therefore no\n// queue — the default visitor converts in real time.\n//\n// `fireGtagConversion` is itself browser-gated and never throws, so this is safe to call\n// from the isomorphic sales `record()` — server-side it simply no-ops.\n\nimport { getConsentState } from \"../consent\";\nimport { fireGtagConversion, type GtagConversionInput } from \"../gtag\";\nimport { applyUserDataForConversion, type ConversionUserData } from \"../user-data\";\n\nconst DEDUP_PREFIX = \"_aranova_conv_\";\n\nfunction dedupKey(input: GtagConversionInput): string {\n  return `${DEDUP_PREFIX}${input.transactionId ?? \"\"}:${input.sendTo}`;\n}\n\n// Has this (transaction_id, send_to) already fired? Read-only — the key is written ONLY\n// after a successful fire (see `fireOnce`), so a fire that never happened (e.g. gtag not\n// ready yet) is never suppressed on retry. Best-effort: a blocked sessionStorage reads as\n// \"not fired\" so the conversion still gets a chance.\nfunction alreadyFired(input: GtagConversionInput): boolean {\n  if (!input.transactionId || typeof window === \"undefined\") return false;\n  try {\n    return window.sessionStorage.getItem(dedupKey(input)) !== null;\n  } catch {\n    return false;\n  }\n}\n\nfunction markFired(input: GtagConversionInput): void {\n  if (!input.transactionId || typeof window === \"undefined\") return;\n  try {\n    window.sessionStorage.setItem(dedupKey(input), \"1\");\n  } catch {\n    // sessionStorage unavailable — Google's counting_type is the authoritative backstop\n  }\n}\n\n/**\n * Fire a conversion through the consent gate + de-dup guard.\n *\n * Enhanced conversions: right before the fire (past the consent gate AND the\n * de-dup guard — a duplicate that won't emit an event must not mutate gtag's\n * page-level user_data either), gtag's `user_data` is set from the explicit\n * `options.userData` merged over the form-submit stash — this is the single\n * choke point all firing paths (recordSale, trackConversion, autofire) flow\n * through, so every conversion hit carries the visitor's hashed identifiers\n * when any are known. Re-setting before each fire is idempotent (gtag scopes\n * user_data to the page), so a later autofire on the same page matches too.\n * The de-dup key is written only AFTER a successful fire, so a fire that\n * never happened (gtag not ready) is never suppressed on retry.\n */\nexport function fireConversionWithConsent(\n  input: GtagConversionInput,\n  options?: { userData?: ConversionUserData | null },\n): void {\n  if (getConsentState() === \"denied\") return;\n  if (alreadyFired(input)) return;\n  applyUserDataForConversion(options?.userData);\n  if (fireGtagConversion(input)) markFired(input);\n}\n\n/**\n * Flush conversions queued while consent was pending.\n *\n * @deprecated No-op since consent v2 — there is no \"pending\" state, so nothing\n * is ever queued. Kept exported so pre-v2 integrations keep compiling.\n */\nexport function flushPendingConversions(): void {\n  // intentionally empty\n}\n","import { z } from \"zod\";\n\n/**\n * Metadata for the automatic `page_view` event.\n *\n * The SDK emits this on initial load, SPA route changes, and bfcache restores.\n * Consumers do not call `trackEvent('page_view', ...)`; registering\n * `automatic: { page_view: {} }` enables the SDK-owned trigger.\n */\nexport const pageViewMetadataSchema = z\n  .object({\n    page: z\n      .object({\n        title: z.string().nullable(),\n        path: z.string(),\n        search: z.string(),\n        hash: z.string(),\n      })\n      .strict(),\n    referrer: z.string().nullable(),\n    // `.nullable().optional()` — absent (undefined) OR explicit null OR a\n    // real viewport object. Mirrors Pydantic's `_Viewport | None = None`\n    // on the backend side so the drift test stays clean.\n    viewport: z\n      .object({\n        w: z.number(),\n        h: z.number(),\n      })\n      .strict()\n      .nullable()\n      .optional(),\n  })\n  .strict();\n\nexport type PageViewMetadata = z.infer<typeof pageViewMetadataSchema>;\n\n/**\n * Registration config for automatic `page_view`.\n *\n * `page_view` is required in every trigger registry and currently has no\n * options. Use `{ page_view: {} }`.\n */\nexport const pageViewConfigSchema = z.object({}).strict();\nexport type PageViewConfig = z.infer<typeof pageViewConfigSchema>;\n","// Visitor + session identity for the tracking SDK.\n//\n// Visitor: persistent localStorage UUID, never expires until the user clears\n// browser storage. Used for cross-session correlation.\n//\n// Session: rolling 30-minute idle window. Regenerated when more than\n// SESSION_IDLE_MS has passed since the last event. Matches the behavior of\n// GA4, PostHog, Mixpanel, etc., so analytics is comparable.\n\nimport { clearLandingRecord } from \"./landing\";\n\n/**\n * localStorage key for the persistent visitor id.\n */\nexport const VISITOR_STORAGE_KEY = \"aranova_tracking_visitor\";\n\n/**\n * localStorage key for the rolling session id state.\n */\nexport const SESSION_STORAGE_KEY = \"aranova_tracking_session\";\n\n/**\n * Idle window before a new session id is created.\n */\nexport const SESSION_IDLE_MS = 30 * 60 * 1000;\n\n/**\n * Serialized session state stored in localStorage.\n */\nexport interface StoredSession {\n  /** Client-generated session UUID. */\n  id: string;\n  /** Unix timestamp in milliseconds for the most recent event/session touch. */\n  last_event_at: number;\n}\n\nfunction safeUuid(): string {\n  if (typeof crypto !== \"undefined\" && typeof crypto.randomUUID === \"function\")\n    return crypto.randomUUID();\n  // Fallback for ancient browsers — not cryptographically perfect but unique enough.\n  return `${Date.now().toString(16)}-${Math.random().toString(16).slice(2)}-${Math.random().toString(16).slice(2)}`;\n}\n\nfunction readLocalStorage(key: string): string | null {\n  try {\n    return window.localStorage.getItem(key);\n  } catch {\n    return null;\n  }\n}\n\nfunction writeLocalStorage(key: string, value: string): void {\n  try {\n    window.localStorage.setItem(key, value);\n  } catch {\n    // Storage may be denied (private mode, blocked cookies, quota). Caller is\n    // responsible for degrading gracefully.\n  }\n}\n\n/**\n * Return the persistent visitor id for this browser profile.\n *\n * Creates and stores a new id when one does not already exist. During SSR,\n * returns an ephemeral id because browser storage is unavailable.\n */\nexport function getVisitorId(): string {\n  if (typeof window === \"undefined\") return safeUuid();\n\n  const existing = readLocalStorage(VISITOR_STORAGE_KEY);\n  if (existing && existing.length > 0) return existing;\n\n  const fresh = safeUuid();\n  writeLocalStorage(VISITOR_STORAGE_KEY, fresh);\n  return fresh;\n}\n\n/**\n * Result from `getOrRotateSessionId()`.\n */\nexport interface SessionIdResult {\n  /** Current session id. */\n  id: string;\n  /** Whether this call created a new session. */\n  isNew: boolean;\n}\n\n/**\n * Return the current session id, rotating it after the idle window expires.\n *\n * Also refreshes `last_event_at` for active sessions.\n */\nexport function getOrRotateSessionId(now: number = Date.now()): SessionIdResult {\n  if (typeof window === \"undefined\") return { id: safeUuid(), isNew: true };\n\n  const raw = readLocalStorage(SESSION_STORAGE_KEY);\n  if (raw) {\n    try {\n      const parsed = JSON.parse(raw) as Partial<StoredSession>;\n      if (typeof parsed.id === \"string\" && typeof parsed.last_event_at === \"number\") {\n        if (now - parsed.last_event_at <= SESSION_IDLE_MS) {\n          const refreshed: StoredSession = { id: parsed.id, last_event_at: now };\n          writeLocalStorage(SESSION_STORAGE_KEY, JSON.stringify(refreshed));\n          return { id: parsed.id, isNew: false };\n        }\n      }\n    } catch {\n      // Fall through to a fresh session.\n    }\n  }\n\n  const fresh: StoredSession = { id: safeUuid(), last_event_at: now };\n  writeLocalStorage(SESSION_STORAGE_KEY, JSON.stringify(fresh));\n  return { id: fresh.id, isNew: true };\n}\n\n/**\n * Clear visitor and session identity from localStorage, including the\n * session-scoped landing record (a landing must never outlive its session).\n *\n * Intended for tests, debugging, and explicit user reset flows.\n */\nexport function resetTrackingIdentity(): void {\n  clearLandingRecord();\n  if (typeof window === \"undefined\") return;\n  try {\n    window.localStorage.removeItem(VISITOR_STORAGE_KEY);\n    window.localStorage.removeItem(SESSION_STORAGE_KEY);\n  } catch {\n    // ignored\n  }\n}\n","// Tracking ingest client. Queues events, debounce-flushes them to the\n// /tracking/events endpoint, and degrades silently on errors so a broken\n// network never breaks the host site.\n\nimport { getConsentChoice, getConsentState } from \"./consent\";\nimport { resetPageViewState } from \"./page-view\";\nimport type { PhoneConfig } from \"./phone-field\";\nimport { captureFbc, getFbcCookie, getFbpCookie } from \"./fbq\";\nimport {\n  captureTrackingParamsFromLocation,\n  createEmptyTrackingParams,\n  getCookieValueFromDocument,\n  getTrackingParamsFromCookieReader,\n  mergeTrackingParams,\n} from \"./tracking\";\nimport type { TriggerRegistryConfig } from \"./events/registry\";\nimport { buildHeartbeatMetadata } from \"./heartbeat\";\nimport { buildLandingPayloadFields, getOrCaptureLandingParams } from \"./landing\";\nimport { getOrRotateSessionId, getVisitorId } from \"./session\";\nimport { stashUserDataFromFormFields } from \"./user-data\";\nimport type {\n  TrackingClientContext,\n  TrackingEnvironment,\n  TrackingInstallSurface,\n  TrackingParams,\n  TrackingSessionUpsertPayload,\n} from \"./types\";\n\n/**\n * Default debounce window before queued events are flushed.\n */\nexport const DEFAULT_FLUSH_INTERVAL_MS = 2000;\n\n/**\n * Default queue size that triggers an immediate flush.\n */\nexport const DEFAULT_MAX_QUEUE_SIZE = 10;\n\n/**\n * Hard server-side maximum event count per request body.\n */\nexport const HARD_MAX_BATCH = 50;\n\n/**\n * Header used to authenticate public tracking ingest requests.\n */\nexport const API_KEY_HEADER = \"X-Aranova-Api-Key\";\n\n/**\n * Identity headers stamped on every ingest request. Duplicate fields already\n * present in `session.context` but survive body-parse failures so the backend\n * can attribute 422s to the offending SDK install.\n */\nexport const SDK_VERSION_HEADER = \"X-Aranova-Sdk-Version\";\nexport const SDK_PACKAGE_HEADER = \"X-Aranova-Sdk-Package\";\nexport const SDK_SURFACE_HEADER = \"X-Aranova-Sdk-Surface\";\nexport const SDK_ENVIRONMENT_HEADER = \"X-Aranova-Sdk-Environment\";\n\n/**\n * Configuration for the low-level ingest client.\n *\n * Framework packages usually create this for you through `createTracking()`.\n */\nexport interface TrackingClientConfig {\n  /** Public tracking API key issued for the business. */\n  apiKey: string;\n  /** Tracking endpoint base URL, usually ending in `/tracking`. */\n  endpoint: string;\n  /** SDK surface creating this client. */\n  surface: TrackingInstallSurface;\n  /** Package version reported in session context and heartbeat metadata. */\n  sdkVersion?: string;\n  /** Package name reported in session context and heartbeat metadata. */\n  packageName?: string;\n  /** Trigger registry so the heartbeat can report registered events. */\n  triggers?: TriggerRegistryConfig;\n  /** Override the default 2s debounce window. */\n  flushIntervalMs?: number;\n  /** Override the default 10-event batch trigger. */\n  maxQueueSize?: number;\n  /** Deployment environment label reported in session context. */\n  environment?: TrackingEnvironment;\n  /** All active gtag IDs, keyed by label. Included in session context. */\n  activeGtagIds?: Record<string, string>;\n  /** When true, swallow nothing — useful for tests. */\n  debug?: boolean;\n  /** Phone-field config, carried for parity; the React hook reads it via context. */\n  phone?: PhoneConfig;\n}\n\n/**\n * Input accepted by the low-level stringly-typed client.\n *\n * Prefer the typed `trackEvent(eventName, metadata)` facade exposed by\n * `useTracking()` in React/Next integrations.\n */\nexport interface TrackEventInput {\n  /** Event name to enqueue. */\n  eventType: string;\n  /** URL associated with the event. Defaults to the current page URL. */\n  pageUrl?: string | null;\n  /** Event-specific metadata. */\n  metadata?: Record<string, unknown> | null;\n  /** Timestamp override. Defaults to queue time. */\n  occurredAt?: Date | string | null;\n}\n\ninterface QueuedEvent {\n  event_type: string;\n  page_url: string | null;\n  metadata: Record<string, unknown> | null;\n  occurred_at: string | null;\n}\n\n/**\n * Low-level tracking client responsible for queueing and flushing events.\n */\nexport interface TrackingClient {\n  /** Enqueue an event for batched delivery. */\n  trackEvent: (input: TrackEventInput) => void;\n  /** Flush queued events immediately (fetch, non-keepalive). */\n  flush: () => Promise<void>;\n  /**\n   * Flush queued events through the keepalive transport so the request\n   * survives document unload. Use from `pagehide`/`visibilitychange:hidden`\n   * handlers — a plain `flush()` there is aborted by the browser on unload.\n   */\n  flushBeacon: () => void;\n  /** Return the current rolling session id. */\n  getSessionId: () => string;\n  /** Return the persistent visitor id. */\n  getVisitorId: () => string;\n  /** Remove timers/listeners and prevent future flushes. */\n  destroy: () => void;\n}\n\ninterface IngestRequestBody {\n  session: TrackingSessionUpsertPayload;\n  events: Array<{\n    event_type: string;\n    page_url: string | null;\n    metadata: Record<string, unknown> | null;\n    occurred_at: string | null;\n  }>;\n}\n\nfunction buildContext(\n  surface: TrackingInstallSurface,\n  sdkVersion: string | null,\n  packageName: string | null,\n  environment: TrackingEnvironment,\n  activeGtagIds: Record<string, string> | null,\n): TrackingClientContext {\n  return {\n    surface,\n    sdk_version: sdkVersion,\n    package_name: packageName,\n    site_origin: typeof window === \"undefined\" ? null : window.location.origin,\n    page_title: typeof document === \"undefined\" ? null : document.title || null,\n    referrer: typeof document === \"undefined\" ? null : document.referrer || null,\n    environment,\n    active_gtag_ids: activeGtagIds,\n  };\n}\n\nfunction readTrackingParams(): TrackingParams {\n  if (typeof window === \"undefined\") return createEmptyTrackingParams();\n  // Capture from URL on every read so the first event in a session reflects the\n  // landing-page params even if the cookie helper hasn't run yet.\n  try {\n    captureTrackingParamsFromLocation();\n  } catch {\n    // ignore\n  }\n  return getTrackingParamsFromCookieReader(getCookieValueFromDocument);\n}\n\nfunction consentSnapshot(): Record<string, unknown> | null {\n  try {\n    // Effective consent + provenance so the dashboard can tell default-granted\n    // (opt-out model, no interaction) apart from an explicit choice.\n    const choice = getConsentChoice();\n    return {\n      state: choice.state,\n      source: choice.source,\n      updated_at: choice.updatedAt,\n      expires_at: choice.expiresAt,\n    };\n  } catch {\n    return null;\n  }\n}\n\ninterface IdentityHeaders {\n  sdkVersion: string;\n  packageName: string;\n  surface: string;\n  environment: string;\n}\n\nasync function postWithFetch(\n  url: string,\n  body: string,\n  apiKey: string,\n  identity: IdentityHeaders,\n  keepalive: boolean,\n): Promise<void> {\n  if (typeof fetch !== \"function\") return;\n  try {\n    await fetch(url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        [API_KEY_HEADER]: apiKey,\n        [SDK_VERSION_HEADER]: identity.sdkVersion,\n        [SDK_PACKAGE_HEADER]: identity.packageName,\n        [SDK_SURFACE_HEADER]: identity.surface,\n        [SDK_ENVIRONMENT_HEADER]: identity.environment,\n      },\n      body,\n      keepalive,\n      // CORS is open on the tracking endpoint; never send cookies.\n      credentials: \"omit\",\n      mode: \"cors\",\n    });\n  } catch {\n    // fire-and-forget — never throw to the host site\n  }\n}\n\nlet globalClient: TrackingClient | null = null;\nlet globalClientKey: string | null = null;\n\nfunction clientConfigKey(config: TrackingClientConfig): string {\n  return `${config.apiKey}@${config.endpoint}#${config.surface}`;\n}\n\n/**\n * Return a page-level singleton tracking client. Creating the client anew on\n * every component mount is wrong — React StrictMode double-mounts dev-only,\n * and destroying+recreating the client between the cleanup and re-run strips\n * away the pushState patch that SPA auto page view relies on. A singleton\n * survives all of that: the client lives for the entire page, and providers\n * just attach/detach auto page view against it.\n *\n * If `apiKey` / `endpoint` / `surface` change between calls, the previous\n * singleton is destroyed and a new one replaces it. This covers hot-config\n * changes without leaking state.\n */\nexport function getOrCreateTrackingClient(config: TrackingClientConfig): TrackingClient {\n  const key = clientConfigKey(config);\n  if (globalClient !== null && globalClientKey === key) {\n    return globalClient;\n  }\n  if (globalClient !== null) {\n    globalClient.destroy();\n  }\n  globalClient = createTrackingClient(config);\n  globalClientKey = key;\n  return globalClient;\n}\n\n// Global/delegated captures (document/window listeners: page_exit, scroll_depth,\n// time_on_site, form_start, cta_click, phone_click, bfcache restore) must attach ONCE\n// per page-singleton client — NOT once per React provider mount. A page can mount several\n// <TrackingProvider>s (a supported island pattern: a global provider for page-level\n// triggers plus per-component providers so `useSearchParams()` doesn't opt the whole tree\n// out of static rendering). Since the client is a singleton but each provider runs its own\n// attach effect, N mounts would stack N document listeners and every interaction would emit\n// its event N times. We ref-count attaches against the singleton client's identity: the\n// first mount attaches, later mounts are no-ops, and the last unmount detaches.\ninterface ClientCaptureEntry {\n  detach: () => void;\n  refCount: number;\n}\nconst clientCaptureRegistry = new WeakMap<TrackingClient, ClientCaptureEntry>();\n\n/**\n * Attach a set of global/delegated captures against a singleton `client` exactly once,\n * ref-counted across provider mounts. `build` performs the actual `document`/`window`\n * listener attachment and returns a single detacher for all of them; it runs only on the\n * first mount for a given client. The returned release decrements the ref-count and runs\n * `build`'s detacher when the last holder releases. Release is idempotent — React\n * StrictMode invokes an effect's cleanup twice in dev, and a double release must not\n * double-decrement.\n */\nexport function attachClientCapturesOnce(\n  client: TrackingClient,\n  build: () => () => void,\n): () => void {\n  let entry = clientCaptureRegistry.get(client);\n  if (entry === undefined) {\n    entry = { detach: build(), refCount: 0 };\n    clientCaptureRegistry.set(client, entry);\n  }\n  entry.refCount += 1;\n\n  let released = false;\n  return () => {\n    if (released) return;\n    released = true;\n    const current = clientCaptureRegistry.get(client);\n    if (current === undefined) return;\n    current.refCount -= 1;\n    if (current.refCount <= 0) {\n      current.detach();\n      clientCaptureRegistry.delete(client);\n    }\n  };\n}\n\n/**\n * Tear down the singleton if any. Primarily an escape hatch for tests where\n * each test should see a fresh client; production code rarely needs this.\n * Also clears the in-session SPA referrer so the next test starts with a\n * fresh referrer chain.\n */\nexport function resetGlobalTrackingClient(): void {\n  if (globalClient !== null) {\n    // Force-detach any captures still attached to this client so their document/window\n    // listeners can't leak into the next test even if a provider didn't unmount.\n    const entry = clientCaptureRegistry.get(globalClient);\n    if (entry !== undefined) {\n      entry.detach();\n      clientCaptureRegistry.delete(globalClient);\n    }\n    globalClient.destroy();\n  }\n  globalClient = null;\n  globalClientKey = null;\n  resetPageViewState();\n}\n\n/**\n * Create a low-level ingest client.\n *\n * The client queues events, debounces network flushes, sends an SDK heartbeat\n * once per new session, and swallows network errors so analytics never break\n * the host site.\n */\nexport function createTrackingClient(config: TrackingClientConfig): TrackingClient {\n  const flushIntervalMs = config.flushIntervalMs ?? DEFAULT_FLUSH_INTERVAL_MS;\n  const maxQueueSize = Math.min(config.maxQueueSize ?? DEFAULT_MAX_QUEUE_SIZE, HARD_MAX_BATCH);\n  const sdkVersion = config.sdkVersion ?? null;\n  const packageName = config.packageName ?? null;\n  // Default to 'production' so the wire payload always carries a valid enum\n  // value. Sending null would fail the backend's strict enum validation.\n  const environment: TrackingEnvironment = config.environment ?? \"production\";\n  const activeGtagIds = config.activeGtagIds ?? null;\n  const endpointBase = config.endpoint.replace(/\\/$/, \"\");\n  const eventsUrl = `${endpointBase}/events`;\n  const identityHeaders: IdentityHeaders = {\n    sdkVersion: sdkVersion ?? \"\",\n    packageName: packageName ?? \"\",\n    surface: config.surface,\n    environment,\n  };\n\n  let queue: QueuedEvent[] = [];\n  let flushTimer: ReturnType<typeof setTimeout> | null = null;\n  let firstPage: string | null = null;\n  // Attribution captured synchronously at client creation (before any SPA router\n  // can strip the query string). Merged into every session payload as a fallback\n  // so a blocked-cookie webview or a stripped URL still attributes.\n  let initialParams = createEmptyTrackingParams();\n  let destroyed = false;\n\n  // Initialize identity early so the first POST has stable values.\n  const visitorId = getVisitorId();\n  const initialSession = getOrRotateSessionId();\n  let sessionId = initialSession.id;\n\n  if (typeof window !== \"undefined\") {\n    firstPage = window.location.href;\n    try {\n      initialParams = captureTrackingParamsFromLocation();\n    } catch {\n      // ignore — never break the host site\n    }\n    // Pin this session's LANDING params now, before any SPA router strips the\n    // query string (reuses the stored record when the session already has one).\n    getOrCaptureLandingParams(sessionId);\n    try {\n      captureFbc();\n    } catch {\n      // ignore\n    }\n  }\n\n  // Queue an sdk_heartbeat event at the start of every new session.\n  function enqueueHeartbeat(): void {\n    const metadata = buildHeartbeatMetadata(\n      config.surface,\n      sdkVersion,\n      packageName,\n      config.triggers ?? null,\n      activeGtagIds,\n    );\n    queue.push({\n      event_type: \"sdk_heartbeat\",\n      page_url: typeof window === \"undefined\" ? null : window.location.href,\n      metadata: metadata as unknown as Record<string, unknown>,\n      occurred_at: new Date().toISOString(),\n    });\n  }\n\n  if (initialSession.isNew) {\n    enqueueHeartbeat();\n  }\n\n  function buildSessionPayload(): TrackingSessionUpsertPayload {\n    const rotated = getOrRotateSessionId();\n    if (rotated.isNew && rotated.id !== sessionId) {\n      // Session rotated mid-page (idle > 30min then user returned).\n      enqueueHeartbeat();\n    }\n    sessionId = rotated.id;\n    // Prefer the live cookie/localStorage read; fall back to the init-time\n    // snapshot (covers a webview that blocked the cookie AND a router that\n    // already stripped the landing URL by flush time).\n    const params = mergeTrackingParams(readTrackingParams(), initialParams);\n    const context = buildContext(\n      config.surface,\n      sdkVersion,\n      packageName,\n      environment,\n      activeGtagIds,\n    );\n    return {\n      session_id: sessionId,\n      visitor_id: visitorId,\n      gclid: params.gclid,\n      wbraid: params.wbraid,\n      gbraid: params.gbraid,\n      fbclid: params.fbclid,\n      fbc: getFbcCookie(),\n      fbp: getFbpCookie(),\n      utm_source: params.utm_source,\n      utm_medium: params.utm_medium,\n      utm_campaign: params.utm_campaign,\n      utm_term: params.utm_term,\n      utm_content: params.utm_content,\n      // Landing params for the CURRENT session id — captured on the spot when\n      // the session just rotated (the current URL is the rotated session's\n      // landing), reused from the stored record otherwise. Keys are omitted\n      // entirely when the landing isn't observable (SSR).\n      ...buildLandingPayloadFields(sessionId),\n      first_page: firstPage,\n      consent_state: consentSnapshot(),\n      context,\n    };\n  }\n\n  function scheduleFlush(): void {\n    if (flushTimer !== null || destroyed) return;\n    flushTimer = setTimeout(() => {\n      flushTimer = null;\n      void flush();\n    }, flushIntervalMs);\n  }\n\n  function clearScheduledFlush(): void {\n    if (flushTimer !== null) {\n      clearTimeout(flushTimer);\n      flushTimer = null;\n    }\n  }\n\n  async function flush(): Promise<void> {\n    if (queue.length === 0) return;\n\n    const events = queue.slice(0, HARD_MAX_BATCH);\n    queue = queue.slice(events.length);\n    clearScheduledFlush();\n\n    const body: IngestRequestBody = {\n      session: buildSessionPayload(),\n      events,\n    };\n\n    const serialized = JSON.stringify(body);\n\n    // Prefer fetch + keepalive for better error visibility. sendBeacon is the\n    // pagehide fallback path because it survives navigation away.\n    await postWithFetch(eventsUrl, serialized, config.apiKey, identityHeaders, false);\n  }\n\n  function trackEvent(input: TrackEventInput): void {\n    if (destroyed) return;\n    if (!input || typeof input.eventType !== \"string\" || input.eventType.length === 0) return;\n\n    // Enhanced conversions: a form submit is the one moment the visitor's own\n    // email/phone pass through the SDK — stash them (memory only) so the\n    // conversion that fires next carries user_data. NOT done for phone_click:\n    // its metadata holds the BUSINESS's number, not the visitor's. An explicit\n    // consent decline also skips the stash entirely — egress is already gated,\n    // but a decliner's identifiers shouldn't sit in page memory either.\n    if (input.eventType === \"form_submit\" && getConsentState() !== \"denied\") {\n      try {\n        const fields = (input.metadata as { form?: { fields?: unknown } } | null)?.form?.fields;\n        if (fields) stashUserDataFromFormFields(fields, config.phone?.defaultCountry);\n      } catch {\n        // user-data capture must never break ingest\n      }\n    }\n\n    const occurredAt =\n      input.occurredAt instanceof Date\n        ? input.occurredAt.toISOString()\n        : typeof input.occurredAt === \"string\"\n          ? input.occurredAt\n          : new Date().toISOString();\n\n    queue.push({\n      event_type: input.eventType,\n      page_url: input.pageUrl ?? (typeof window === \"undefined\" ? null : window.location.href),\n      metadata: input.metadata ?? null,\n      occurred_at: occurredAt,\n    });\n\n    if (queue.length >= maxQueueSize) {\n      void flush();\n    } else {\n      scheduleFlush();\n    }\n  }\n\n  function flushOnUnload(): void {\n    if (queue.length === 0) return;\n    const events = queue.slice(0, HARD_MAX_BATCH);\n    queue = queue.slice(events.length);\n    clearScheduledFlush();\n\n    const body: IngestRequestBody = {\n      session: buildSessionPayload(),\n      events,\n    };\n    const serialized = JSON.stringify(body);\n    void postWithFetch(eventsUrl, serialized, config.apiKey, identityHeaders, true);\n  }\n\n  if (typeof window !== \"undefined\") {\n    window.addEventListener(\"pagehide\", flushOnUnload);\n    window.addEventListener(\"visibilitychange\", () => {\n      if (document.visibilityState === \"hidden\") flushOnUnload();\n    });\n  }\n\n  return {\n    trackEvent,\n    flush,\n    flushBeacon: flushOnUnload,\n    getSessionId: () => sessionId,\n    getVisitorId: () => visitorId,\n    destroy: () => {\n      destroyed = true;\n      // Fire any pending events through the keepalive path before tearing\n      // down. Critical for React StrictMode in dev, where the provider's\n      // first mount is immediately unmounted and its 2s debounce would\n      // otherwise drop the initial page_view on the floor. Uses fetch\n      // keepalive so the request survives the component tearing down.\n      if (queue.length > 0) {\n        flushOnUnload();\n      }\n      clearScheduledFlush();\n      queue = [];\n      if (typeof window !== \"undefined\") {\n        window.removeEventListener(\"pagehide\", flushOnUnload);\n      }\n    },\n  };\n}\n","/**\n * Error thrown by the sales client (`createSalesClient`) on a\n * non-2xx response. Unlike the fire-and-forget event queue (which swallows\n * failures), a sale is a transaction the caller must be able to react to.\n */\nexport class AranovaApiError extends Error {\n  readonly status: number;\n  readonly code: string | undefined;\n  readonly requestId: string | undefined;\n\n  constructor(message: string, options: { status: number; code?: string; requestId?: string }) {\n    super(message);\n    this.name = \"AranovaApiError\";\n    this.status = options.status;\n    this.code = options.code;\n    this.requestId = options.requestId;\n  }\n}\n","import {\n  API_KEY_HEADER,\n  SDK_ENVIRONMENT_HEADER,\n  SDK_PACKAGE_HEADER,\n  SDK_SURFACE_HEADER,\n  SDK_VERSION_HEADER,\n} from \"../../ingest\";\nimport { AranovaApiError } from \"./errors\";\n\n/** Shared config for every sales HTTP helper. */\nexport interface SalesTransportConfig {\n  /** Public (`aranv_pk_…`) or secret (`aranv_sk_…`) API key. */\n  apiKey: string;\n  /**\n   * Base tracking endpoint, e.g. `https://aranovainternal-production.up.railway.app/tracking`.\n   * The `/sales` path is appended by the helpers.\n   */\n  endpoint: string;\n  /** Optional SDK identity headers (mirrors the event ingest client). */\n  sdkVersion?: string;\n  packageName?: string;\n  surface?: string;\n  environment?: string;\n}\n\nfunction identityHeaders(config: SalesTransportConfig): Record<string, string> {\n  const headers: Record<string, string> = { [API_KEY_HEADER]: config.apiKey };\n  if (config.sdkVersion) headers[SDK_VERSION_HEADER] = config.sdkVersion;\n  if (config.packageName) headers[SDK_PACKAGE_HEADER] = config.packageName;\n  if (config.surface) headers[SDK_SURFACE_HEADER] = config.surface;\n  if (config.environment) headers[SDK_ENVIRONMENT_HEADER] = config.environment;\n  return headers;\n}\n\nfunction joinUrl(endpoint: string, path: string): string {\n  return `${endpoint.replace(/\\/$/, \"\")}${path}`;\n}\n\n/**\n * Single awaited request used by every sales helper. Unlike the event queue,\n * this surfaces failures: any non-2xx rejects with an {@link AranovaApiError}.\n * Returns `undefined` for 204 No Content.\n */\nexport async function salesRequest<T>(\n  config: SalesTransportConfig,\n  method: string,\n  path: string,\n  body?: unknown,\n): Promise<T> {\n  const headers = identityHeaders(config);\n  if (body !== undefined) headers[\"Content-Type\"] = \"application/json\";\n\n  const response = await fetch(joinUrl(config.endpoint, path), {\n    method,\n    headers,\n    body: body === undefined ? undefined : JSON.stringify(body),\n  });\n\n  if (!response.ok) {\n    let detail: string | undefined;\n    let code: string | undefined;\n    try {\n      const parsed: unknown = await response.json();\n      if (parsed && typeof parsed === \"object\") {\n        const record = parsed as Record<string, unknown>;\n        if (typeof record.detail === \"string\") detail = record.detail;\n        if (typeof record.code === \"string\") code = record.code;\n      }\n    } catch {\n      // non-JSON error body — fall back to status text\n    }\n    throw new AranovaApiError(detail ?? response.statusText ?? \"Request failed\", {\n      status: response.status,\n      code,\n      requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    });\n  }\n\n  if (response.status === 204) return undefined as T;\n  return (await response.json()) as T;\n}\n","import type { SupportedCurrency } from \"./schema\";\n\n/**\n * Money conversion helpers.\n *\n * The API speaks **integer minor units (cents)** exclusively. These helpers move\n * between a human-facing major amount (dollars) and cents, and format cents for\n * display — so a consumer always has both representations without float math.\n */\n\n// Minor-unit exponent per supported currency (USD/CAD = 2 decimal places).\nconst MINOR_UNIT_EXPONENT: Record<SupportedCurrency, number> = {\n  USD: 2,\n  CAD: 2,\n};\n\nfunction exponentFor(currency: SupportedCurrency): number {\n  return MINOR_UNIT_EXPONENT[currency] ?? 2;\n}\n\n/**\n * Convert a major amount (dollars `250.5`) to integer minor units (`25050`).\n *\n * Convenience only — the wire is always integer cents. Uses float multiply +\n * `Math.round`, so values that aren't exactly representable in binary float\n * (e.g. `1.005`) can round to the neighbouring cent. If you already hold an\n * exact cents integer, pass it straight through and skip this helper.\n */\nexport function toMinor(amount: number, currency: SupportedCurrency): number {\n  return Math.round(amount * 10 ** exponentFor(currency));\n}\n\n/** Convert integer minor units (`25050`) to a major amount (`250.5`). */\nexport function fromMinor(cents: number, currency: SupportedCurrency): number {\n  return cents / 10 ** exponentFor(currency);\n}\n\n/**\n * Format integer minor units as a localized currency string (e.g. `\"$250.50\"`).\n * Uses the built-in `Intl.NumberFormat` — no extra dependency.\n */\nexport function formatMoney(cents: number, currency: SupportedCurrency, locale?: string): string {\n  return new Intl.NumberFormat(locale, { style: \"currency\", currency }).format(\n    fromMinor(cents, currency),\n  );\n}\n\n/**\n * Format an ISO timestamp in a specific IANA time zone (e.g. `America/Toronto`),\n * so dashboards stop hand-rolling `Intl`. Defaults to a short date-time; pass\n * `opts` to override fields. The `timeZone` is always forced to the argument.\n */\nexport function formatDateInTz(\n  iso: string,\n  timeZone: string,\n  opts?: Intl.DateTimeFormatOptions,\n  locale?: string,\n): string {\n  const date = new Date(iso);\n  // Guard malformed input: Intl.format(Invalid Date) throws a RangeError.\n  if (Number.isNaN(date.getTime())) return iso;\n  return new Intl.DateTimeFormat(locale, {\n    year: \"numeric\",\n    month: \"short\",\n    day: \"2-digit\",\n    hour: \"2-digit\",\n    minute: \"2-digit\",\n    ...opts,\n    timeZone,\n  }).format(date);\n}\n","import type {\n  BusinessConfig,\n  CustomerGetOptions,\n  CustomerGetResult,\n  CustomerKpis,\n  CustomerListPage,\n  CustomerListQuery,\n  CustomerSummaryQuery,\n  Sale,\n  SaleCursorPage,\n  SaleInput,\n  SaleListQueryV2,\n  SaleSummaryQueryV2,\n  SaleSummaryV2,\n  SaleUpdateInput,\n  SupportedCurrency,\n} from \"./schema\";\nimport type { ConversionConfigStore } from \"../conversion-config\";\nimport { fireConversionWithConsent } from \"../conversion-firing\";\nimport type { TrackingConfigRuntime } from \"../tracking-config-runtime\";\nimport { getConsentState } from \"../../consent\";\nimport { stashUserData, type ConversionUserData } from \"../../user-data\";\nimport { salesRequest, type SalesTransportConfig } from \"./transport\";\nimport { fromMinor } from \"./money\";\n\n/** Config for {@link createSalesClient}. */\nexport interface SalesClientConfig extends SalesTransportConfig {\n  /** Applied when an individual `record()` call omits `currency`. */\n  defaultCurrency?: SupportedCurrency;\n  /**\n   * GAP28: when present, `record()` ALSO fires a real-time on-site conversion\n   * (`gtag('event','conversion')`) for any recorded service that has a `firing` send_to in\n   * the resolved config. Consent-gated + de-duped; no-ops server-side. Wire it from\n   * `resolveConversionConfig(...)`.\n   */\n  firing?: Pick<ConversionConfigStore, \"getFiring\"> | TrackingConfigRuntime;\n}\n\n// Fire the on-site conversion(s) for a just-recorded sale. Per-service value = the sale's\n// amount when present, else the action's configured default from config (Google applies\n// its own default when neither is sent). transaction_id ties the gtag fire to the sale so\n// retries/reloads de-dup within the WEBPAGE action.\nfunction fireRecordedConversions(\n  firing: Pick<ConversionConfigStore, \"getFiring\"> | TrackingConfigRuntime | undefined,\n  input: {\n    external_id?: string | null;\n    amount_total_cents?: number | null;\n    customer_email?: string | null;\n    customer_phone?: string | null;\n  },\n  recorded: { service?: string | null; amount_cents: number | null }[],\n  sale: Sale,\n  currency: SupportedCurrency,\n): void {\n  if (!firing) return;\n  // Enhanced conversions: the sale's own customer identifiers are the\n  // strongest possible user_data signal — pass them into every per-service\n  // fire, and refresh the stash so later same-page event-goal fires match too.\n  const userData: ConversionUserData | null =\n    input.customer_email || input.customer_phone\n      ? { email: input.customer_email ?? null, phone: input.customer_phone ?? null }\n      : null;\n  // Denied consent: the fires below no-op anyway, so don't retain the\n  // identifiers in page memory either.\n  if (userData && getConsentState() !== \"denied\") stashUserData(userData);\n  const txnBase = input.external_id ?? sale.id;\n  for (const item of recorded) {\n    if (!item.service) continue;\n    if (\"fireConversion\" in firing) {\n      firing.fireConversion(item.service, {\n        value: item.amount_cents != null ? fromMinor(item.amount_cents, currency) : undefined,\n        currency,\n        transactionId: `${txnBase}:${item.service}`,\n      });\n      continue;\n    }\n    const config = firing.getFiring(item.service);\n    if (!config) continue;\n    const cents = item.amount_cents ?? config.value_cents ?? null;\n    fireConversionWithConsent(\n      {\n        sendTo: config.send_to,\n        value: cents != null ? fromMinor(cents, currency) : null,\n        currency: config.currency ?? currency,\n        transactionId: `${txnBase}:${item.service}`,\n      },\n      { userData },\n    );\n  }\n}\n\n/** Phone-keyed customer rollups (sk-only; a public key gets a `403`). */\nexport interface SalesCustomersClient {\n  list(query?: CustomerListQuery): Promise<CustomerListPage>;\n  /** `id` is the customer's E.164 phone. */\n  get(id: string, options?: CustomerGetOptions): Promise<CustomerGetResult>;\n  summary(query?: CustomerSummaryQuery): Promise<CustomerKpis>;\n}\n\n/** Business config (low-sensitivity — accepts a public or secret key). */\nexport interface SalesBusinessClient {\n  config(): Promise<BusinessConfig>;\n}\n\n/**\n * One isomorphic sales client — what a key may *do* is enforced by the backend,\n * not by hiding methods. A **public** key (`aranv_pk_…`) may `record` (the\n * backend rejects reads/CRUD from it with a `403`); a **secret** key\n * (`aranv_sk_…`), used **server-side only**, gets full read/list/update/delete.\n * Never ship a secret key in a browser bundle.\n *\n * Generic over the service-key union `TService` and the manual-conversion key union\n * `TConversion`: bind the types emitted by `@aranova/tracking-cli gen` (`AranovaService`\n * and `AranovaConversion`) for compile-time-checked `service` / `trackConversion` keys.\n */\nexport interface SalesClient<\n  TService extends string = string,\n  TConversion extends string = string,\n> {\n  record(\n    input: Omit<SaleInput, \"currency\" | \"occurred_at\" | \"service\" | \"services\"> & {\n      service?: TService | null;\n      // XOR with `service`: record multiple services in one sale, each priced\n      // individually. `amount_total_cents` is then optional (the backend derives\n      // it as the sum). Keys are checked against the codegen `TService` union.\n      services?: Array<{ service: TService; amount_cents: number }>;\n      currency?: SupportedCurrency;\n      occurred_at?: string;\n    },\n  ): Promise<Sale>;\n  /**\n   * Record a revenue sale — the intent-revealing alias of {@link record} in the unified-goal\n   * API. POSTs `/sales` and ALSO fires the on-site conversion when the sale-goal is\n   * WEBPAGE-mapped. Use this for anything with real revenue; use {@link trackConversion} for a\n   * non-revenue on-page event.\n   */\n  recordSale(\n    input: Omit<SaleInput, \"currency\" | \"occurred_at\" | \"service\" | \"services\"> & {\n      service?: TService | null;\n      services?: Array<{ service: TService; amount_cents: number }>;\n      currency?: SupportedCurrency;\n      occurred_at?: string;\n    },\n  ): Promise<Sale>;\n  /**\n   * Fire ONLY the on-site conversion for an event-goal `key` — for MANUAL event-goals\n   * (`form_submit`, `phone_click`, `cta_click`) the consumer triggers explicitly. No `/sales`\n   * write. No-ops when the goal isn't WEBPAGE-mapped (no resolved `send_to`) or the config\n   * isn't wired. Consent-gated + de-duped. (Automatic event-goals fire themselves — no call.)\n   */\n  trackConversion(\n    key: TConversion,\n    options?: {\n      transactionId?: string | null;\n      value?: number | null;\n      currency?: SupportedCurrency;\n      /**\n       * Enhanced conversions override: the visitor's own email/phone for this\n       * conversion. Wins per-key over the automatic form-submit stash — the\n       * escape hatch when a form's fields defeat the extraction heuristics.\n       */\n      userData?: ConversionUserData | null;\n    },\n  ): void;\n  /** Keyset list with optional server sort + opt-in `total_count`. */\n  list(query?: SaleListQueryV2): Promise<SaleCursorPage>;\n  /**\n   * Currency-grouped aggregations for the key's business. Additive v2 options:\n   * calendar/custom ranges, IANA `timezone`, `granularity`, and `compare_to`.\n   * Legacy `24h/7d/30d` keep their exact prior numbers. Secret key only.\n   */\n  summary(query: SaleSummaryQueryV2): Promise<SaleSummaryV2>;\n  get(id: string): Promise<Sale>;\n  update(\n    id: string,\n    patch: Omit<SaleUpdateInput, \"service\" | \"services\"> & {\n      service?: TService | null;\n      // Present ⇒ replaces the whole service set (XOR with `service`); the\n      // backend recomputes `amount_total_cents` from the sum.\n      services?: Array<{ service: TService; amount_cents: number }>;\n    },\n  ): Promise<Sale>;\n  delete(id: string): Promise<void>;\n  /** Phone-keyed customer rollups (sk-only). */\n  customers: SalesCustomersClient;\n  /** Business config (pk or sk). */\n  business: SalesBusinessClient;\n}\n\nexport function createSalesClient<\n  TService extends string = string,\n  TConversion extends string = string,\n>(config: SalesClientConfig): SalesClient<TService, TConversion> {\n  type RecordInput = Parameters<SalesClient<TService, TConversion>[\"record\"]>[0];\n\n  async function record(input: RecordInput): Promise<Sale> {\n    const currency = input.currency ?? config.defaultCurrency;\n    if (!currency) {\n      throw new Error(\n        \"record: `currency` is required (pass it on the sale or set config.defaultCurrency)\",\n      );\n    }\n    const body: SaleInput = {\n      ...input,\n      currency,\n      occurred_at: input.occurred_at ?? new Date().toISOString(),\n    };\n    const sale = await salesRequest<Sale>(config, \"POST\", \"/sales\", body);\n    // GAP28: fire the real-time on-site conversion(s) AFTER the sale is recorded, so the\n    // gtag transaction_id and the offline path agree. Never throws (best-effort fire).\n    const recorded = input.services?.length\n      ? input.services.map((s) => ({\n          service: s.service,\n          amount_cents: s.amount_cents,\n        }))\n      : [\n          {\n            service: input.service,\n            amount_cents: input.amount_total_cents ?? null,\n          },\n        ];\n    fireRecordedConversions(config.firing, input, recorded, sale, currency);\n    return sale;\n  }\n\n  return {\n    record,\n    // recordSale is the intent-revealing alias — same behavior, clearer call site.\n    recordSale: record,\n\n    trackConversion(key, options) {\n      // Manual event-goal: fire the WEBPAGE conversion only (no /sales). No-op when the goal\n      // isn't WEBPAGE-mapped or the config isn't wired.\n      if (config.firing && \"fireConversion\" in config.firing) {\n        // Enhanced conversions on the runtime path: the drain fires gtag\n        // itself, reading user_data from the stash — persist the explicit\n        // override there so it isn't lost to the queue.\n        if (options?.userData && getConsentState() !== \"denied\") stashUserData(options.userData);\n        config.firing.fireConversion(key, {\n          value: options?.value ?? undefined,\n          currency: options?.currency ?? config.defaultCurrency ?? undefined,\n          transactionId: options?.transactionId ?? null,\n        });\n        return;\n      }\n      const firing = config.firing?.getFiring(key);\n      if (!firing) return;\n      const currency = firing.currency ?? options?.currency ?? config.defaultCurrency ?? null;\n      const cents = firing.value_cents ?? null;\n      const value =\n        options?.value ??\n        (cents != null && currency ? fromMinor(cents, currency as SupportedCurrency) : null);\n      fireConversionWithConsent(\n        {\n          sendTo: firing.send_to,\n          value,\n          currency,\n          transactionId: options?.transactionId ?? null,\n        },\n        { userData: options?.userData },\n      );\n    },\n\n    async list(query) {\n      // Pagination + sort travel at the top level; everything else is a filter.\n      const { cursor, limit, sort, order, want_total, ...filters } = query ?? {};\n      return salesRequest<SaleCursorPage>(config, \"POST\", \"/sales/query\", {\n        filters,\n        ...(limit !== undefined ? { limit } : {}),\n        ...(cursor !== undefined ? { cursor } : {}),\n        ...(sort !== undefined ? { sort } : {}),\n        ...(order !== undefined ? { order } : {}),\n        ...(want_total !== undefined ? { want_total } : {}),\n      });\n    },\n\n    async summary(query) {\n      const {\n        range,\n        include_categories,\n        include_deleted_services,\n        top_n,\n        since,\n        until,\n        timezone,\n        granularity,\n        compare_to,\n        ...filters\n      } = query;\n      return salesRequest<SaleSummaryV2>(config, \"POST\", \"/sales/summary\", {\n        filters,\n        ...(range !== undefined ? { range } : {}),\n        ...(include_categories !== undefined ? { include_categories } : {}),\n        ...(include_deleted_services !== undefined ? { include_deleted_services } : {}),\n        ...(top_n !== undefined ? { top_n } : {}),\n        ...(since !== undefined ? { since } : {}),\n        ...(until !== undefined ? { until } : {}),\n        ...(timezone !== undefined ? { timezone } : {}),\n        ...(granularity !== undefined ? { granularity } : {}),\n        ...(compare_to !== undefined ? { compare_to } : {}),\n      });\n    },\n\n    async get(id) {\n      return salesRequest<Sale>(config, \"GET\", `/sales/${id}`);\n    },\n\n    async update(id, patch) {\n      return salesRequest<Sale>(config, \"PATCH\", `/sales/${id}`, patch);\n    },\n\n    async delete(id) {\n      await salesRequest<void>(config, \"DELETE\", `/sales/${id}`);\n    },\n\n    customers: {\n      async list(query) {\n        const { segment, sort, order, cursor, limit, want_total, ...filters } = query ?? {};\n        return salesRequest<CustomerListPage>(config, \"POST\", \"/customers/query\", {\n          filters,\n          ...(segment !== undefined ? { segment } : {}),\n          ...(sort !== undefined ? { sort } : {}),\n          ...(order !== undefined ? { order } : {}),\n          ...(cursor !== undefined ? { cursor } : {}),\n          ...(limit !== undefined ? { limit } : {}),\n          ...(want_total !== undefined ? { want_total } : {}),\n        });\n      },\n      async get(id, options) {\n        const params = new URLSearchParams();\n        if (options?.include_sales !== undefined)\n          params.set(\"include_sales\", String(options.include_sales));\n        if (options?.limit !== undefined) params.set(\"limit\", String(options.limit));\n        if (options?.cursor != null) params.set(\"cursor\", options.cursor);\n        const qs = params.toString();\n        // `id` is the E.164 phone (`+1…`) — must be URL-encoded.\n        return salesRequest<CustomerGetResult>(\n          config,\n          \"GET\",\n          `/customers/${encodeURIComponent(id)}${qs ? `?${qs}` : \"\"}`,\n        );\n      },\n      async summary(query) {\n        const { range, since, until, timezone, compare_to, ...filters } = query ?? {};\n        return salesRequest<CustomerKpis>(config, \"POST\", \"/customers/summary\", {\n          filters,\n          ...(range !== undefined ? { range } : {}),\n          ...(since !== undefined ? { since } : {}),\n          ...(until !== undefined ? { until } : {}),\n          ...(timezone !== undefined ? { timezone } : {}),\n          ...(compare_to !== undefined ? { compare_to } : {}),\n        });\n      },\n    },\n\n    business: {\n      async config() {\n        return salesRequest<BusinessConfig>(config, \"GET\", \"/business/config\");\n      },\n    },\n  };\n}\n","import { z } from \"zod\";\n\n/**\n * Sales / Conversions wire schemas — the client-side source of truth.\n *\n * `saleCreateSchema` is mirrored by `SaleCreateSchema` in\n * `apps/api/src/schemas/tracking_sales.py` and enforced by the backend drift\n * test (the `resources` section of `events.schema.json`). Keep them in lockstep.\n *\n * Money is **integer minor units (cents)**; `quantity` is a decimal string;\n * `currency` is the required `SupportedCurrency` enum.\n */\n\nexport const SUPPORTED_CURRENCIES = [\"USD\", \"CAD\"] as const;\nexport type SupportedCurrency = (typeof SUPPORTED_CURRENCIES)[number];\n\nconst TRACKING_ENVIRONMENTS = [\"production\", \"development\"] as const;\n\nconst currencySchema = z.enum(SUPPORTED_CURRENCIES);\nconst centsSchema = z.number().int().nonnegative();\nconst quantitySchema = z.string().regex(/^\\d+(\\.\\d{1,3})?$/);\n// Free-form JSON object — the sale's extensibility escape hatch. Mirrors the\n// Pydantic `dict[str, Any]` (`additionalProperties: true`) on the wire.\nconst metadataSchema = z.record(z.unknown());\n\nexport const saleItemSchema = z\n  .object({\n    external_item_id: z.string().nullable().optional(),\n    name: z.string().nullable().optional(),\n    category: z.string().nullable().optional(),\n    quantity: quantitySchema,\n    unit_price_cents: centsSchema,\n    // Non-negativity validated on the wire — same contract as the other cents\n    // fields — and backstopped by the DB CHECK.\n    unit_cost_cents: centsSchema.nullable().optional(),\n  })\n  .strict();\n\n// One service covered by a sale, at its own price. `service` is the per-business\n// service key, validated against the taxonomy by the backend at write time.\nexport const saleServiceSchema = z\n  .object({\n    service: z.string(),\n    amount_cents: centsSchema,\n  })\n  .strict();\n\n// Raw customer identity. Stored as-is on the backend for human display in\n// dashboards; hashing happens at writeback-upload time in the future Google\n// Ads reconciliation worker (see docs/tracking-package/conversion-writeback.md).\n// The SDK never hashes — pass values straight through.\nconst customerNameSchema = z.string().max(200);\nconst customerPhoneSchema = z.string().max(64);\nconst customerEmailSchema = z.string().max(320).email();\n\n// The singular `service` (priced by `amount_total_cents`) and the plural\n// `services` (each priced individually) are mutually exclusive. When `services`\n// is present, `amount_total_cents` is optional and the backend derives it as the\n// sum; otherwise it is required. Shared by create + update.\nfunction refineServiceXor(\n  val: {\n    service?: string | null;\n    services?: ReadonlyArray<{ service: string; amount_cents: number }> | null;\n    amount_total_cents?: number | null;\n  },\n  ctx: z.RefinementCtx,\n  { requireAmount }: { requireAmount: boolean },\n): void {\n  if (val.services != null) {\n    if (val.service != null) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        message: \"pass either `service` or `services`, not both\",\n        path: [\"services\"],\n      });\n    }\n    if (val.services.length === 0) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        message: \"`services` must not be empty\",\n        path: [\"services\"],\n      });\n    }\n    const keys = val.services.map((s) => s.service);\n    if (new Set(keys).size !== keys.length) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        message: \"`services` must not list the same service more than once\",\n        path: [\"services\"],\n      });\n    }\n    if (val.amount_total_cents != null) {\n      const sum = val.services.reduce((acc, s) => acc + s.amount_cents, 0);\n      if (val.amount_total_cents !== sum) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          message:\n            \"amount_total_cents must equal the sum of the services amounts \" +\n            \"(omit it to derive it automatically)\",\n          path: [\"amount_total_cents\"],\n        });\n      }\n    }\n  } else if (requireAmount && val.amount_total_cents == null) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      message: \"amount_total_cents is required unless `services` is provided\",\n      path: [\"amount_total_cents\"],\n    });\n  }\n}\n\nexport const saleCreateSchema = z\n  .object({\n    external_id: z.string().nullable().optional(),\n    description: z.string().nullable().optional(),\n    service: z.string().nullable().optional(),\n    services: z.array(saleServiceSchema).nullable().optional(),\n    currency: currencySchema,\n    // Optional only because the plural `services` form derives it from the sum\n    // (see refineServiceXor); the singular/serviceless path still requires it.\n    amount_total_cents: centsSchema.nullable().optional(),\n    occurred_at: z.string().datetime(),\n    environment: z.enum(TRACKING_ENVIRONMENTS).default(\"production\"),\n    items: z.array(saleItemSchema).default([]),\n    metadata: metadataSchema.nullable().optional(),\n    customer_name: customerNameSchema.nullable().optional(),\n    customer_phone: customerPhoneSchema.nullable().optional(),\n    customer_email: customerEmailSchema.nullable().optional(),\n    // CASL consent attestation: the customer agreed to receive SMS. Recorded\n    // with a timestamp server-side; every SMS send path gates on it.\n    sms_consent: z.boolean().default(false),\n  })\n  .strict()\n  .superRefine((val, ctx) => refineServiceXor(val, ctx, { requireAmount: true }));\n\nexport const saleUpdateSchema = z\n  .object({\n    description: z.string().nullable().optional(),\n    service: z.string().nullable().optional(),\n    services: z.array(saleServiceSchema).nullable().optional(),\n    currency: currencySchema.optional(),\n    amount_total_cents: centsSchema.optional(),\n    occurred_at: z.string().datetime().optional(),\n    items: z.array(saleItemSchema).optional(),\n    metadata: metadataSchema.nullable().optional(),\n    customer_name: customerNameSchema.nullable().optional(),\n    customer_phone: customerPhoneSchema.nullable().optional(),\n    customer_email: customerEmailSchema.nullable().optional(),\n    // NOT NULL server-side: omit to leave unchanged (explicit null is rejected).\n    sms_consent: z.boolean().optional(),\n  })\n  .strict()\n  .superRefine((val, ctx) => refineServiceXor(val, ctx, { requireAmount: false }));\n\nexport type SaleItemInput = z.input<typeof saleItemSchema>;\nexport type SaleServiceInput = z.input<typeof saleServiceSchema>;\n// Use the INPUT type so fields with Zod defaults (environment, items) and\n// occurred_at are optional for callers — the sales client fills them in.\nexport type SaleInput = z.input<typeof saleCreateSchema>;\nexport type SaleUpdateInput = z.input<typeof saleUpdateSchema>;\n\n// ---------------------------------------------------------------------------\n// Read shapes (server responses; not validated on the client)\n// ---------------------------------------------------------------------------\n\nexport interface SaleItem {\n  id: string;\n  external_item_id: string | null;\n  name: string | null;\n  category: string | null;\n  quantity: string;\n  unit_price_cents: number;\n  unit_cost_cents: number | null;\n}\n\nexport interface SaleService {\n  id: string;\n  service_id: string;\n  service_key: string;\n  service_label: string;\n  amount_cents: number;\n}\n\nexport interface Sale {\n  id: string;\n  business_id: string;\n  business_name?: string | null;\n  external_id: string | null;\n  currency: SupportedCurrency;\n  amount_total_cents: number;\n  description: string | null;\n  // Singular service fields are populated only for single-service sales (kept\n  // for backwards compatibility); `services` is always the full set.\n  service_id: string | null;\n  service_key?: string | null;\n  service_label?: string | null;\n  services: SaleService[];\n  occurred_at: string;\n  environment: (typeof TRACKING_ENVIRONMENTS)[number];\n  metadata: Record<string, unknown> | null;\n  customer_name: string | null;\n  customer_phone: string | null;\n  customer_email: string | null;\n  /** CASL consent attestation stored on the sale; SMS send paths gate on it server-side. */\n  sms_consent: boolean;\n  /** Server timestamp for when the consent attestation was recorded. */\n  sms_consent_granted_at: string | null;\n  created_at: string;\n  updated_at: string;\n  items: SaleItem[];\n}\n\nexport interface SaleListPage {\n  items: Sale[];\n  total: number;\n}\n\nexport interface SaleCursorPage {\n  items: Sale[];\n  next_cursor: string | null;\n  /** Populated only when `want_total` was requested (a single indexed COUNT). */\n  total_count?: number;\n  has_more?: boolean;\n}\n\n/**\n * Sortable columns on the secret-key (keyset) and admin (offset) list endpoints.\n * `business_name` only applies to the cross-business admin list — it sorts the\n * joined `businesses.name` column.\n */\nexport type SaleSortField =\n  | \"occurred_at\"\n  | \"created_at\"\n  | \"amount_total_cents\"\n  | \"customer_name\"\n  | \"business_name\";\n\nexport type SaleSortOrder = \"asc\" | \"desc\";\n\n/**\n * Comprehensive filter shape mirrored from the backend's `SaleQueryFilters`.\n *\n * `search` runs case-insensitively across `customer_name`, `customer_phone`,\n * `customer_email`, `description`, and `external_id` — the human-facing\n * columns. `service_id` is the resolved per-business service UUID (different\n * from the create-time `service` *key*).\n */\nexport interface SaleFilters {\n  business_id?: string;\n  external_id?: string;\n  service_id?: string;\n  /** E.164 phone — the canonical customer key; filters sales for one customer. */\n  customer_phone?: string;\n  currency?: SupportedCurrency;\n  environment?: (typeof TRACKING_ENVIRONMENTS)[number];\n  since?: string;\n  until?: string;\n  min_amount_cents?: number;\n  max_amount_cents?: number;\n  search?: string;\n}\n\n/**\n * Full query input for `SalesClient.list()` — filters + pagination.\n *\n * Pagination is **keyset (cursor)**: `next_cursor` returned by one page is\n * passed back as `cursor` on the next. `null` / undefined cursor = first page.\n *\n * Ordering on this endpoint is fixed at **`occurred_at DESC, id DESC`** — the\n * cursor encodes a position in that index, so a different sort would\n * invalidate cursors mid-pagination. For ad-hoc sorted reads use the\n * dashboard admin endpoint, which is offset-paginated.\n */\nexport interface SaleListQuery extends SaleFilters {\n  limit?: number;\n  cursor?: string | null;\n}\n\n/** Keyset-safe sort columns (NOT-NULL, indexed). */\nexport type SaleKeysetSortField = \"occurred_at\" | \"created_at\" | \"amount_total_cents\";\n\n/** v2 list query — adds server sort + opt-in total. */\nexport interface SaleListQueryV2 extends SaleListQuery {\n  sort?: SaleKeysetSortField;\n  order?: SaleSortOrder;\n  /** Opt-in: a single indexed COUNT over the filtered set. */\n  want_total?: boolean;\n}\n\n// ---------------------------------------------------------------------------\n// Sales summary (aggregations). Read by `SalesClient.summary()`. Every monetary\n// figure is grouped **by currency** — USD and CAD cents are never summed into a\n// single total. Money stays integer cents; only `quantity` is a decimal string.\n// ---------------------------------------------------------------------------\n\nexport const TRACKING_RANGES = [\"24h\", \"7d\", \"30d\"] as const;\nexport type TrackingOverviewRange = (typeof TRACKING_RANGES)[number];\n\n/** Query input for `SalesClient.summary()` — filters + range + options. */\nexport interface SaleSummaryQuery extends SaleFilters {\n  range: TrackingOverviewRange;\n  /** Include the per-category line-item breakdown (extra join; default false). */\n  include_categories?: boolean;\n  /** Surface soft-deleted services individually (flagged \"(deleted)\") instead of\n   * rolling them into a single \"Deleted services\" bucket. Default false. */\n  include_deleted_services?: boolean;\n  /** Cap on the by-service / by-category rows (1–50, default 10). */\n  top_n?: number;\n}\n\nexport interface CurrencyRevenue {\n  currency: SupportedCurrency;\n  sale_count: number;\n  revenue_cents: number;\n  average_order_value_cents: number;\n}\n\nexport interface SalesServiceBreakdown {\n  service_id: string | null;\n  service_key: string | null;\n  /** \"Unassigned\" when the sale has no service. */\n  service_label: string | null;\n  currency: SupportedCurrency;\n  sale_count: number;\n  revenue_cents: number;\n}\n\nexport interface SalesCategoryBreakdown {\n  category: string | null;\n  currency: SupportedCurrency;\n  /** sum(unit_price_cents * quantity) — advisory, not authoritative. */\n  revenue_cents: number;\n  /** Decimal string. */\n  quantity: string;\n}\n\nexport interface SalesTrendPoint {\n  bucket_start: string;\n  currency: SupportedCurrency;\n  sale_count: number;\n  revenue_cents: number;\n}\n\nexport interface SaleSummary {\n  range: TrackingOverviewRange;\n  business_id: string | null;\n  metrics: {\n    sale_count: number;\n    distinct_customers: number;\n    by_currency: CurrencyRevenue[];\n  };\n  by_service: SalesServiceBreakdown[];\n  by_currency: CurrencyRevenue[];\n  by_category: SalesCategoryBreakdown[];\n  series: SalesTrendPoint[];\n}\n\n// ---------------------------------------------------------------------------\n// v2 dashboard surface (additive, back-compat). Reads only → plain interfaces,\n// not drift-checked. Legacy `24h/7d/30d` callers get the same numbers; new\n// ranges/options layer on tz-correct calendar windows + comparisons.\n// ---------------------------------------------------------------------------\n\nexport const NAMED_RANGES = [\n  \"today\",\n  \"yesterday\",\n  \"wtd\",\n  \"mtd\",\n  \"qtd\",\n  \"ytd\",\n  \"24h\",\n  \"7d\",\n  \"30d\",\n  \"90d\",\n  \"custom\",\n] as const;\n/** Superset of `TrackingOverviewRange` (`24h`/`7d`/`30d` stay valid). */\nexport type NamedRange = (typeof NAMED_RANGES)[number];\nexport type Granularity = \"hour\" | \"day\" | \"week\" | \"month\" | \"auto\";\nexport type CompareTo = \"previous_period\" | \"previous_year\" | \"none\";\n\nexport interface DistinctCustomersByCurrency {\n  currency: SupportedCurrency;\n  distinct_customers: number;\n}\n\nexport interface SummaryWindow {\n  since: string;\n  until: string;\n}\n\nexport interface SummaryCurrencyDelta {\n  currency: SupportedCurrency;\n  revenue_cents_delta: number;\n  /** Ratio (0.12 = +12%); null when previous revenue was 0. */\n  revenue_pct_delta: number | null;\n  sale_count_delta: number;\n}\n\nexport interface SummaryDeltas {\n  by_currency: SummaryCurrencyDelta[];\n  sale_count_delta: number;\n  distinct_customers_delta: number;\n}\n\nexport interface SaleSummaryPrevious {\n  window: SummaryWindow;\n  metrics: SaleSummaryV2[\"metrics\"];\n  by_currency: CurrencyRevenue[];\n  series: SalesTrendPoint[];\n}\n\n/** Query input for `SalesClient.summary()` v2 — widened range + tz/compare options. */\nexport interface SaleSummaryQueryV2 extends SaleFilters {\n  range?: NamedRange;\n  /** Required when `range === 'custom'`. */\n  since?: string;\n  until?: string;\n  /** IANA tz, e.g. `America/Toronto`. Default = business tz. */\n  timezone?: string;\n  granularity?: Granularity;\n  compare_to?: CompareTo;\n  include_categories?: boolean;\n  include_deleted_services?: boolean;\n  top_n?: number;\n}\n\n/** Superset of `SaleSummary` (assignable to it). */\nexport interface SaleSummaryV2 extends Omit<SaleSummary, \"range\" | \"metrics\"> {\n  range: NamedRange;\n  metrics: SaleSummary[\"metrics\"] & {\n    distinct_customers_by_currency: DistinctCustomersByCurrency[];\n  };\n  timezone: string | null;\n  window: SummaryWindow | null;\n  granularity: string | null;\n  previous: SaleSummaryPrevious | null;\n  deltas: SummaryDeltas | null;\n}\n\n// ---------------------------------------------------------------------------\n// Customers — phone-keyed (a customer IS their E.164 phone). `customer_id` is\n// the E.164 string. Money is per-currency, never summed.\n// ---------------------------------------------------------------------------\n\nexport type CustomerSegment = \"new\" | \"returning\" | \"repeat\" | \"lapsed\";\nexport type CustomerSortField = \"total_spent\" | \"last_purchase\" | \"purchases\" | \"first_purchase\";\n\nexport interface CustomerCurrencyTotal {\n  currency: SupportedCurrency;\n  revenue_cents: number;\n  sale_count: number;\n  average_order_value_cents: number;\n}\n\nexport interface CustomerSummary {\n  /** The E.164 phone — the canonical customer id. */\n  customer_id: string;\n  display_name: string | null;\n  email: string | null;\n  phone: string;\n  first_purchase_at: string;\n  last_purchase_at: string;\n  purchase_count: number;\n  segment: CustomerSegment;\n  totals: CustomerCurrencyTotal[];\n}\n\nexport type CustomerProfile = CustomerSummary;\n\nexport interface CustomerListQuery extends Omit<SaleFilters, \"external_id\"> {\n  segment?: CustomerSegment;\n  sort?: CustomerSortField;\n  order?: SaleSortOrder;\n  cursor?: string | null;\n  limit?: number;\n  want_total?: boolean;\n}\n\nexport interface CustomerListPage {\n  items: CustomerSummary[];\n  next_cursor: string | null;\n  total_count: number | null;\n}\n\nexport interface CustomerGetOptions {\n  include_sales?: boolean;\n  limit?: number;\n  cursor?: string | null;\n}\n\nexport interface CustomerGetResult {\n  customer: CustomerProfile;\n  /** Present only when `include_sales: true` (and a business-scoped key). */\n  sales?: SaleCursorPage | null;\n}\n\nexport interface CustomerSummaryQuery extends SaleFilters {\n  range?: NamedRange;\n  since?: string;\n  until?: string;\n  timezone?: string;\n  compare_to?: CompareTo;\n}\n\nexport interface CustomerSegmentCount {\n  segment: CustomerSegment;\n  count: number;\n}\n\nexport interface CustomerCurrencyDelta {\n  currency: SupportedCurrency;\n  revenue_cents_delta: number;\n  /** Ratio (0.12 = +12%); null when previous revenue was 0. */\n  revenue_pct_delta: number | null;\n}\n\nexport interface CustomerKpisDeltas {\n  total_customers_delta: number;\n  new_customers_delta: number;\n  returning_customers_delta: number;\n  repeat_rate_delta: number;\n  ltv_by_currency: CustomerCurrencyDelta[];\n}\n\nexport interface CustomerKpisPrevious {\n  window_since: string;\n  window_until: string;\n  total_customers: number;\n  new_customers: number;\n  returning_customers: number;\n  repeat_rate: number;\n  ltv_by_currency: CustomerCurrencyTotal[];\n}\n\nexport interface CustomerKpis {\n  range: NamedRange;\n  timezone: string;\n  window_since: string;\n  window_until: string;\n  total_customers: number;\n  new_customers: number;\n  returning_customers: number;\n  repeat_rate: number;\n  by_segment: CustomerSegmentCount[];\n  ltv_by_currency: CustomerCurrencyTotal[];\n  /** Present only when `compare_to` is set. */\n  previous?: CustomerKpisPrevious | null;\n  deltas?: CustomerKpisDeltas | null;\n}\n\n// ---------------------------------------------------------------------------\n// Business config — supersets `fetchServices()`.\n// ---------------------------------------------------------------------------\n\nexport interface BusinessConfigService {\n  key: string;\n  label: string;\n  archived: boolean;\n}\n\nexport interface BusinessConfigFeatures {\n  customers: boolean;\n  comparisons: boolean;\n  retention: boolean;\n}\n\nexport interface BusinessConfig {\n  business_id: string;\n  display_name: string;\n  timezone: string;\n  primary_currency: SupportedCurrency;\n  currencies: SupportedCurrency[];\n  default_phone_country: string | null;\n  services: BusinessConfigService[];\n  features: BusinessConfigFeatures;\n}\n","import { salesRequest, type SalesTransportConfig } from \"./sales/transport\";\n\n/** A business's active service, as returned by `GET /tracking/services`. */\nexport interface PublicServiceItem {\n  key: string;\n  label: string;\n}\n\n/**\n * Fetch the caller's business's active service taxonomy. Accepts a public or\n * secret key (the taxonomy is low-sensitivity category names). Powers the\n * `@aranova/tracking-cli gen` codegen.\n */\nexport async function fetchServices(config: SalesTransportConfig): Promise<PublicServiceItem[]> {\n  return salesRequest<PublicServiceItem[]>(config, \"GET\", \"/services\");\n}\n"],"mappings":";AAIA,SAAS,WAAW,kCAAoD;AA4BjE,IAAM,wBAAqC;AAG3C,SAAS,WAAW,KAAa,SAAoC;AAC1E,QAAM,SAAS,WAAW;AAC1B,QAAM,SAAS,2BAA2B,OAAO,IAAI,MAAM;AAC3D,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,MAAM,MAAM,UAAU,IAAI,eAAe,IAAI,SAAS,QAAQ,SAAS,MAAM;AAAA,EACxF;AACA,QAAM,UAAU,OAAO,QAAQ;AAC/B,SAAO;AAAA;AAAA;AAAA,IAGL,MAAM,UAAU,OAAO,SAAS;AAAA,IAChC,UAAU,OAAO,eAAe;AAAA,IAChC,eAAe,OAAO,oBAAoB;AAAA,IAC1C,SAAS,OAAO,WAAW;AAAA,IAC3B;AAAA,EACF;AACF;AAGO,SAAS,OAAO,KAAa,SAAsC;AACxE,SAAO,WAAW,KAAK,OAAO,EAAE;AAClC;;;AClBA,IAAM,cAAc;AAOpB,IAAI,QAA4B,EAAE,OAAO,MAAM,aAAa,KAAK;AAO1D,SAAS,eAAe,KAA6B;AAC1D,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,UAAU,IAAI,KAAK,EAAE,YAAY;AACvC,SAAO,YAAY,KAAK,OAAO,IAAI,UAAU;AAC/C;AAqDO,SAAS,cAAc,MAA0B,SAA6B;AACnF,QAAM,QAAQ,eAAe,KAAK,KAAK;AACvC,MAAI,cAA6B;AACjC,MAAI,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,SAAS,GAAG;AAC3D,QAAI;AACF,oBAAc,OAAO,KAAK,OAAO,OAAO;AAAA,IAC1C,QAAQ;AACN,oBAAc;AAAA,IAChB;AAAA,EACF;AACA,UAAQ;AAAA,IACN,OAAO,SAAS,MAAM;AAAA,IACtB,aAAa,eAAe,MAAM;AAAA,EACpC;AACF;AAkCO,SAAS,2BACd,UACA,SACS;AACT,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,SAAS,WAAY,QAAO;AAC/E,MAAI,QAAQ,MAAM;AAClB,MAAI,cAAc,MAAM;AACxB,MAAI,UAAU;AACZ,UAAM,kBAAkB,eAAe,SAAS,KAAK;AACrD,QAAI,gBAAiB,SAAQ;AAC7B,QAAI,OAAO,SAAS,UAAU,YAAY,SAAS,MAAM,SAAS,GAAG;AACnE,UAAI;AACF,sBAAc,OAAO,SAAS,OAAO,OAAO,KAAK;AAAA,MACnD,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACA,MAAI,UAAU,QAAQ,gBAAgB,KAAM,QAAO;AACnD,MAAI;AACF,WAAO,KAAK,OAAO,aAAa;AAAA,MAC9B,GAAI,UAAU,OAAO,EAAE,MAAM,IAAI,CAAC;AAAA,MAClC,GAAI,gBAAgB,OAAO,EAAE,cAAc,YAAY,IAAI,CAAC;AAAA,IAC9D,CAAC;AACD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACnLO,IAAM,oBAAoB;AAK1B,IAAM,wBAAwB;AAU9B,IAAM,yBAAyB;AAM/B,IAAM,2BAA2B;AAExC,IAAM,SAAS;AA6Cf,IAAM,iBAAgC;AAAA,EACpC,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,WAAW;AACb;AAmDO,SAAS,mBAAkC;AAChD,MAAI,OAAO,WAAW,YAAa,QAAO;AAE1C,MAAI;AACF,UAAM,SAAS,OAAO,aAAa,QAAQ,iBAAiB;AAC5D,UAAM,YAAY,OAAO,aAAa,QAAQ,qBAAqB;AAEnE,QAAI,WAAW;AACb,aAAO,EAAE,OAAO,WAAW,QAAQ,YAAY,WAAW,WAAW,KAAK;AAE5E,QAAI,WAAW,UAAU;AACvB,UAAI,YAAY,OAAO,aAAa,QAAQ,sBAAsB;AAClE,UAAI,CAAC,WAAW;AACd,oBAAY,IAAI,KAAK,KAAK,IAAI,IAAI,2BAA2B,MAAM,EAAE,YAAY;AACjF,YAAI;AACF,iBAAO,aAAa,QAAQ,wBAAwB,SAAS;AAAA,QAC/D,QAAQ;AAAA,QAER;AAAA,MACF;AAIA,UAAI,EAAE,KAAK,MAAM,SAAS,KAAK,KAAK,IAAI;AACtC,eAAO,EAAE,OAAO,UAAU,QAAQ,YAAY,WAAW,UAAU;AAAA,IACvE;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,SAAO;AACT;AASO,SAAS,kBAAgC;AAC9C,SAAO,iBAAiB,EAAE;AAC5B;;;ACnDA,IAAM,aAAa;AAGZ,SAAS,cAAc,QAAyB;AACrD,SAAO,WAAW,KAAK,MAAM;AAC/B;AAkBO,SAAS,mBAAmB,OAAqC;AACtE,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,SAAS,WAAY,QAAO;AAC/E,MAAI,CAAC,cAAc,MAAM,MAAM,EAAG,QAAO;AACzC,QAAM,SAAkC,EAAE,SAAS,MAAM,OAAO;AAChE,MAAI,MAAM,SAAS,KAAM,QAAO,QAAQ,MAAM;AAC9C,MAAI,MAAM,SAAU,QAAO,WAAW,MAAM;AAC5C,MAAI,MAAM,cAAe,QAAO,iBAAiB,MAAM;AACvD,MAAI;AACF,WAAO,KAAK,SAAS,cAAc,MAAM;AACzC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AChJA,IAAM,eAAe;AAErB,SAAS,SAAS,OAAoC;AACpD,SAAO,GAAG,YAAY,GAAG,MAAM,iBAAiB,EAAE,IAAI,MAAM,MAAM;AACpE;AAMA,SAAS,aAAa,OAAqC;AACzD,MAAI,CAAC,MAAM,iBAAiB,OAAO,WAAW,YAAa,QAAO;AAClE,MAAI;AACF,WAAO,OAAO,eAAe,QAAQ,SAAS,KAAK,CAAC,MAAM;AAAA,EAC5D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,OAAkC;AACnD,MAAI,CAAC,MAAM,iBAAiB,OAAO,WAAW,YAAa;AAC3D,MAAI;AACF,WAAO,eAAe,QAAQ,SAAS,KAAK,GAAG,GAAG;AAAA,EACpD,QAAQ;AAAA,EAER;AACF;AAgBO,SAAS,0BACd,OACA,SACM;AACN,MAAI,gBAAgB,MAAM,SAAU;AACpC,MAAI,aAAa,KAAK,EAAG;AACzB,6BAA2B,SAAS,QAAQ;AAC5C,MAAI,mBAAmB,KAAK,EAAG,WAAU,KAAK;AAChD;;;AC/DA,SAAS,SAAS;AASX,IAAM,yBAAyB,EACnC,OAAO;AAAA,EACN,MAAM,EACH,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,MAAM,EAAE,OAAO;AAAA,IACf,QAAQ,EAAE,OAAO;AAAA,IACjB,MAAM,EAAE,OAAO;AAAA,EACjB,CAAC,EACA,OAAO;AAAA,EACV,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAI9B,UAAU,EACP,OAAO;AAAA,IACN,GAAG,EAAE,OAAO;AAAA,IACZ,GAAG,EAAE,OAAO;AAAA,EACd,CAAC,EACA,OAAO,EACP,SAAS,EACT,SAAS;AACd,CAAC,EACA,OAAO;AAUH,IAAM,uBAAuB,EAAE,OAAO,CAAC,CAAC,EAAE,OAAO;;;AClBjD,IAAM,kBAAkB,KAAK,KAAK;;;ACsBlC,IAAM,iBAAiB;AAOvB,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,yBAAyB;;;ACnD/B,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAKzC,YAAY,SAAiB,SAAgE;AAC3F,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS,QAAQ;AACtB,SAAK,OAAO,QAAQ;AACpB,SAAK,YAAY,QAAQ;AAAA,EAC3B;AACF;;;ACQA,SAAS,gBAAgB,QAAsD;AAC7E,QAAM,UAAkC,EAAE,CAAC,cAAc,GAAG,OAAO,OAAO;AAC1E,MAAI,OAAO,WAAY,SAAQ,kBAAkB,IAAI,OAAO;AAC5D,MAAI,OAAO,YAAa,SAAQ,kBAAkB,IAAI,OAAO;AAC7D,MAAI,OAAO,QAAS,SAAQ,kBAAkB,IAAI,OAAO;AACzD,MAAI,OAAO,YAAa,SAAQ,sBAAsB,IAAI,OAAO;AACjE,SAAO;AACT;AAEA,SAAS,QAAQ,UAAkB,MAAsB;AACvD,SAAO,GAAG,SAAS,QAAQ,OAAO,EAAE,CAAC,GAAG,IAAI;AAC9C;AAOA,eAAsB,aACpB,QACA,QACA,MACA,MACY;AACZ,QAAM,UAAU,gBAAgB,MAAM;AACtC,MAAI,SAAS,OAAW,SAAQ,cAAc,IAAI;AAElD,QAAM,WAAW,MAAM,MAAM,QAAQ,OAAO,UAAU,IAAI,GAAG;AAAA,IAC3D;AAAA,IACA;AAAA,IACA,MAAM,SAAS,SAAY,SAAY,KAAK,UAAU,IAAI;AAAA,EAC5D,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,QAAI;AACJ,QAAI;AACJ,QAAI;AACF,YAAM,SAAkB,MAAM,SAAS,KAAK;AAC5C,UAAI,UAAU,OAAO,WAAW,UAAU;AACxC,cAAM,SAAS;AACf,YAAI,OAAO,OAAO,WAAW,SAAU,UAAS,OAAO;AACvD,YAAI,OAAO,OAAO,SAAS,SAAU,QAAO,OAAO;AAAA,MACrD;AAAA,IACF,QAAQ;AAAA,IAER;AACA,UAAM,IAAI,gBAAgB,UAAU,SAAS,cAAc,kBAAkB;AAAA,MAC3E,QAAQ,SAAS;AAAA,MACjB;AAAA,MACA,WAAW,SAAS,QAAQ,IAAI,cAAc,KAAK;AAAA,IACrD,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,WAAW,IAAK,QAAO;AACpC,SAAQ,MAAM,SAAS,KAAK;AAC9B;;;ACrEA,IAAM,sBAAyD;AAAA,EAC7D,KAAK;AAAA,EACL,KAAK;AACP;AAEA,SAAS,YAAY,UAAqC;AACxD,SAAO,oBAAoB,QAAQ,KAAK;AAC1C;AAUO,SAAS,QAAQ,QAAgB,UAAqC;AAC3E,SAAO,KAAK,MAAM,SAAS,MAAM,YAAY,QAAQ,CAAC;AACxD;AAGO,SAAS,UAAU,OAAe,UAAqC;AAC5E,SAAO,QAAQ,MAAM,YAAY,QAAQ;AAC3C;AAMO,SAAS,YAAY,OAAe,UAA6B,QAAyB;AAC/F,SAAO,IAAI,KAAK,aAAa,QAAQ,EAAE,OAAO,YAAY,SAAS,CAAC,EAAE;AAAA,IACpE,UAAU,OAAO,QAAQ;AAAA,EAC3B;AACF;AAOO,SAAS,eACd,KACA,UACA,MACA,QACQ;AACR,QAAM,OAAO,IAAI,KAAK,GAAG;AAEzB,MAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,EAAG,QAAO;AACzC,SAAO,IAAI,KAAK,eAAe,QAAQ;AAAA,IACrC,MAAM;AAAA,IACN,OAAO;AAAA,IACP,KAAK;AAAA,IACL,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,GAAG;AAAA,IACH;AAAA,EACF,CAAC,EAAE,OAAO,IAAI;AAChB;;;AC5BA,SAAS,wBACP,QACA,OAMA,UACA,MACA,UACM;AACN,MAAI,CAAC,OAAQ;AAIb,QAAM,WACJ,MAAM,kBAAkB,MAAM,iBAC1B,EAAE,OAAO,MAAM,kBAAkB,MAAM,OAAO,MAAM,kBAAkB,KAAK,IAC3E;AAGN,MAAI,YAAY,gBAAgB,MAAM,SAAU,eAAc,QAAQ;AACtE,QAAM,UAAU,MAAM,eAAe,KAAK;AAC1C,aAAW,QAAQ,UAAU;AAC3B,QAAI,CAAC,KAAK,QAAS;AACnB,QAAI,oBAAoB,QAAQ;AAC9B,aAAO,eAAe,KAAK,SAAS;AAAA,QAClC,OAAO,KAAK,gBAAgB,OAAO,UAAU,KAAK,cAAc,QAAQ,IAAI;AAAA,QAC5E;AAAA,QACA,eAAe,GAAG,OAAO,IAAI,KAAK,OAAO;AAAA,MAC3C,CAAC;AACD;AAAA,IACF;AACA,UAAM,SAAS,OAAO,UAAU,KAAK,OAAO;AAC5C,QAAI,CAAC,OAAQ;AACb,UAAM,QAAQ,KAAK,gBAAgB,OAAO,eAAe;AACzD;AAAA,MACE;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,OAAO,SAAS,OAAO,UAAU,OAAO,QAAQ,IAAI;AAAA,QACpD,UAAU,OAAO,YAAY;AAAA,QAC7B,eAAe,GAAG,OAAO,IAAI,KAAK,OAAO;AAAA,MAC3C;AAAA,MACA,EAAE,SAAS;AAAA,IACb;AAAA,EACF;AACF;AAoGO,SAAS,kBAGd,QAA+D;AAG/D,iBAAe,OAAO,OAAmC;AACvD,UAAM,WAAW,MAAM,YAAY,OAAO;AAC1C,QAAI,CAAC,UAAU;AACb,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAM,OAAkB;AAAA,MACtB,GAAG;AAAA,MACH;AAAA,MACA,aAAa,MAAM,gBAAe,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC3D;AACA,UAAM,OAAO,MAAM,aAAmB,QAAQ,QAAQ,UAAU,IAAI;AAGpE,UAAM,WAAW,MAAM,UAAU,SAC7B,MAAM,SAAS,IAAI,CAAC,OAAO;AAAA,MACzB,SAAS,EAAE;AAAA,MACX,cAAc,EAAE;AAAA,IAClB,EAAE,IACF;AAAA,MACE;AAAA,QACE,SAAS,MAAM;AAAA,QACf,cAAc,MAAM,sBAAsB;AAAA,MAC5C;AAAA,IACF;AACJ,4BAAwB,OAAO,QAAQ,OAAO,UAAU,MAAM,QAAQ;AACtE,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL;AAAA;AAAA,IAEA,YAAY;AAAA,IAEZ,gBAAgB,KAAK,SAAS;AAG5B,UAAI,OAAO,UAAU,oBAAoB,OAAO,QAAQ;AAItD,YAAI,SAAS,YAAY,gBAAgB,MAAM,SAAU,eAAc,QAAQ,QAAQ;AACvF,eAAO,OAAO,eAAe,KAAK;AAAA,UAChC,OAAO,SAAS,SAAS;AAAA,UACzB,UAAU,SAAS,YAAY,OAAO,mBAAmB;AAAA,UACzD,eAAe,SAAS,iBAAiB;AAAA,QAC3C,CAAC;AACD;AAAA,MACF;AACA,YAAM,SAAS,OAAO,QAAQ,UAAU,GAAG;AAC3C,UAAI,CAAC,OAAQ;AACb,YAAM,WAAW,OAAO,YAAY,SAAS,YAAY,OAAO,mBAAmB;AACnF,YAAM,QAAQ,OAAO,eAAe;AACpC,YAAM,QACJ,SAAS,UACR,SAAS,QAAQ,WAAW,UAAU,OAAO,QAA6B,IAAI;AACjF;AAAA,QACE;AAAA,UACE,QAAQ,OAAO;AAAA,UACf;AAAA,UACA;AAAA,UACA,eAAe,SAAS,iBAAiB;AAAA,QAC3C;AAAA,QACA,EAAE,UAAU,SAAS,SAAS;AAAA,MAChC;AAAA,IACF;AAAA,IAEA,MAAM,KAAK,OAAO;AAEhB,YAAM,EAAE,QAAQ,OAAO,MAAM,OAAO,YAAY,GAAG,QAAQ,IAAI,SAAS,CAAC;AACzE,aAAO,aAA6B,QAAQ,QAAQ,gBAAgB;AAAA,QAClE;AAAA,QACA,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,QACvC,GAAI,WAAW,SAAY,EAAE,OAAO,IAAI,CAAC;AAAA,QACzC,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,QACrC,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,QACvC,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACnD,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,QAAQ,OAAO;AACnB,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAG;AAAA,MACL,IAAI;AACJ,aAAO,aAA4B,QAAQ,QAAQ,kBAAkB;AAAA,QACnE;AAAA,QACA,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,QACvC,GAAI,uBAAuB,SAAY,EAAE,mBAAmB,IAAI,CAAC;AAAA,QACjE,GAAI,6BAA6B,SAAY,EAAE,yBAAyB,IAAI,CAAC;AAAA,QAC7E,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,QACvC,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,QACvC,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,QACvC,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,QAC7C,GAAI,gBAAgB,SAAY,EAAE,YAAY,IAAI,CAAC;AAAA,QACnD,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACnD,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,IAAI,IAAI;AACZ,aAAO,aAAmB,QAAQ,OAAO,UAAU,EAAE,EAAE;AAAA,IACzD;AAAA,IAEA,MAAM,OAAO,IAAI,OAAO;AACtB,aAAO,aAAmB,QAAQ,SAAS,UAAU,EAAE,IAAI,KAAK;AAAA,IAClE;AAAA,IAEA,MAAM,OAAO,IAAI;AACf,YAAM,aAAmB,QAAQ,UAAU,UAAU,EAAE,EAAE;AAAA,IAC3D;AAAA,IAEA,WAAW;AAAA,MACT,MAAM,KAAK,OAAO;AAChB,cAAM,EAAE,SAAS,MAAM,OAAO,QAAQ,OAAO,YAAY,GAAG,QAAQ,IAAI,SAAS,CAAC;AAClF,eAAO,aAA+B,QAAQ,QAAQ,oBAAoB;AAAA,UACxE;AAAA,UACA,GAAI,YAAY,SAAY,EAAE,QAAQ,IAAI,CAAC;AAAA,UAC3C,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,UACrC,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,UACvC,GAAI,WAAW,SAAY,EAAE,OAAO,IAAI,CAAC;AAAA,UACzC,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,UACvC,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,QACnD,CAAC;AAAA,MACH;AAAA,MACA,MAAM,IAAI,IAAI,SAAS;AACrB,cAAM,SAAS,IAAI,gBAAgB;AACnC,YAAI,SAAS,kBAAkB;AAC7B,iBAAO,IAAI,iBAAiB,OAAO,QAAQ,aAAa,CAAC;AAC3D,YAAI,SAAS,UAAU,OAAW,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC3E,YAAI,SAAS,UAAU,KAAM,QAAO,IAAI,UAAU,QAAQ,MAAM;AAChE,cAAM,KAAK,OAAO,SAAS;AAE3B,eAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA,cAAc,mBAAmB,EAAE,CAAC,GAAG,KAAK,IAAI,EAAE,KAAK,EAAE;AAAA,QAC3D;AAAA,MACF;AAAA,MACA,MAAM,QAAQ,OAAO;AACnB,cAAM,EAAE,OAAO,OAAO,OAAO,UAAU,YAAY,GAAG,QAAQ,IAAI,SAAS,CAAC;AAC5E,eAAO,aAA2B,QAAQ,QAAQ,sBAAsB;AAAA,UACtE;AAAA,UACA,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,UACvC,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,UACvC,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,UACvC,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,UAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,QACnD,CAAC;AAAA,MACH;AAAA,IACF;AAAA,IAEA,UAAU;AAAA,MACR,MAAM,SAAS;AACb,eAAO,aAA6B,QAAQ,OAAO,kBAAkB;AAAA,MACvE;AAAA,IACF;AAAA,EACF;AACF;;;ACzWA,SAAS,KAAAA,UAAS;AAaX,IAAM,uBAAuB,CAAC,OAAO,KAAK;AAGjD,IAAM,wBAAwB,CAAC,cAAc,aAAa;AAE1D,IAAM,iBAAiBA,GAAE,KAAK,oBAAoB;AAClD,IAAM,cAAcA,GAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AACjD,IAAM,iBAAiBA,GAAE,OAAO,EAAE,MAAM,mBAAmB;AAG3D,IAAM,iBAAiBA,GAAE,OAAOA,GAAE,QAAQ,CAAC;AAEpC,IAAM,iBAAiBA,GAC3B,OAAO;AAAA,EACN,kBAAkBA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,MAAMA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,UAAUA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,UAAU;AAAA,EACV,kBAAkB;AAAA;AAAA;AAAA,EAGlB,iBAAiB,YAAY,SAAS,EAAE,SAAS;AACnD,CAAC,EACA,OAAO;AAIH,IAAM,oBAAoBA,GAC9B,OAAO;AAAA,EACN,SAASA,GAAE,OAAO;AAAA,EAClB,cAAc;AAChB,CAAC,EACA,OAAO;AAMV,IAAM,qBAAqBA,GAAE,OAAO,EAAE,IAAI,GAAG;AAC7C,IAAM,sBAAsBA,GAAE,OAAO,EAAE,IAAI,EAAE;AAC7C,IAAM,sBAAsBA,GAAE,OAAO,EAAE,IAAI,GAAG,EAAE,MAAM;AAMtD,SAAS,iBACP,KAKA,KACA,EAAE,cAAc,GACV;AACN,MAAI,IAAI,YAAY,MAAM;AACxB,QAAI,IAAI,WAAW,MAAM;AACvB,UAAI,SAAS;AAAA,QACX,MAAMA,GAAE,aAAa;AAAA,QACrB,SAAS;AAAA,QACT,MAAM,CAAC,UAAU;AAAA,MACnB,CAAC;AAAA,IACH;AACA,QAAI,IAAI,SAAS,WAAW,GAAG;AAC7B,UAAI,SAAS;AAAA,QACX,MAAMA,GAAE,aAAa;AAAA,QACrB,SAAS;AAAA,QACT,MAAM,CAAC,UAAU;AAAA,MACnB,CAAC;AAAA,IACH;AACA,UAAM,OAAO,IAAI,SAAS,IAAI,CAAC,MAAM,EAAE,OAAO;AAC9C,QAAI,IAAI,IAAI,IAAI,EAAE,SAAS,KAAK,QAAQ;AACtC,UAAI,SAAS;AAAA,QACX,MAAMA,GAAE,aAAa;AAAA,QACrB,SAAS;AAAA,QACT,MAAM,CAAC,UAAU;AAAA,MACnB,CAAC;AAAA,IACH;AACA,QAAI,IAAI,sBAAsB,MAAM;AAClC,YAAM,MAAM,IAAI,SAAS,OAAO,CAAC,KAAK,MAAM,MAAM,EAAE,cAAc,CAAC;AACnE,UAAI,IAAI,uBAAuB,KAAK;AAClC,YAAI,SAAS;AAAA,UACX,MAAMA,GAAE,aAAa;AAAA,UACrB,SACE;AAAA,UAEF,MAAM,CAAC,oBAAoB;AAAA,QAC7B,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF,WAAW,iBAAiB,IAAI,sBAAsB,MAAM;AAC1D,QAAI,SAAS;AAAA,MACX,MAAMA,GAAE,aAAa;AAAA,MACrB,SAAS;AAAA,MACT,MAAM,CAAC,oBAAoB;AAAA,IAC7B,CAAC;AAAA,EACH;AACF;AAEO,IAAM,mBAAmBA,GAC7B,OAAO;AAAA,EACN,aAAaA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,aAAaA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,SAASA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,UAAUA,GAAE,MAAM,iBAAiB,EAAE,SAAS,EAAE,SAAS;AAAA,EACzD,UAAU;AAAA;AAAA;AAAA,EAGV,oBAAoB,YAAY,SAAS,EAAE,SAAS;AAAA,EACpD,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAaA,GAAE,KAAK,qBAAqB,EAAE,QAAQ,YAAY;AAAA,EAC/D,OAAOA,GAAE,MAAM,cAAc,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzC,UAAU,eAAe,SAAS,EAAE,SAAS;AAAA,EAC7C,eAAe,mBAAmB,SAAS,EAAE,SAAS;AAAA,EACtD,gBAAgB,oBAAoB,SAAS,EAAE,SAAS;AAAA,EACxD,gBAAgB,oBAAoB,SAAS,EAAE,SAAS;AAAA;AAAA;AAAA,EAGxD,aAAaA,GAAE,QAAQ,EAAE,QAAQ,KAAK;AACxC,CAAC,EACA,OAAO,EACP,YAAY,CAAC,KAAK,QAAQ,iBAAiB,KAAK,KAAK,EAAE,eAAe,KAAK,CAAC,CAAC;AAEzE,IAAM,mBAAmBA,GAC7B,OAAO;AAAA,EACN,aAAaA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,SAASA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,UAAUA,GAAE,MAAM,iBAAiB,EAAE,SAAS,EAAE,SAAS;AAAA,EACzD,UAAU,eAAe,SAAS;AAAA,EAClC,oBAAoB,YAAY,SAAS;AAAA,EACzC,aAAaA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,OAAOA,GAAE,MAAM,cAAc,EAAE,SAAS;AAAA,EACxC,UAAU,eAAe,SAAS,EAAE,SAAS;AAAA,EAC7C,eAAe,mBAAmB,SAAS,EAAE,SAAS;AAAA,EACtD,gBAAgB,oBAAoB,SAAS,EAAE,SAAS;AAAA,EACxD,gBAAgB,oBAAoB,SAAS,EAAE,SAAS;AAAA;AAAA,EAExD,aAAaA,GAAE,QAAQ,EAAE,SAAS;AACpC,CAAC,EACA,OAAO,EACP,YAAY,CAAC,KAAK,QAAQ,iBAAiB,KAAK,KAAK,EAAE,eAAe,MAAM,CAAC,CAAC;AA+I1E,IAAM,kBAAkB,CAAC,OAAO,MAAM,KAAK;AAoE3C,IAAM,eAAe;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;;;AC3WA,eAAsB,cAAc,QAA4D;AAC9F,SAAO,aAAkC,QAAQ,OAAO,WAAW;AACrE;","names":["z"]}
+{"version":3,"sources":["../../tracking-core/src/phone.ts","../../tracking-core/src/user-data.ts","../../tracking-core/src/consent.ts","../../tracking-core/src/gtag.ts","../../tracking-core/src/resources/conversion-firing.ts","../../tracking-core/src/events/page-view.ts","../../tracking-core/src/session.ts","../../tracking-core/src/ingest.ts","../../tracking-core/src/resources/sales/errors.ts","../../tracking-core/src/resources/sales/transport.ts","../../tracking-core/src/resources/sales/money.ts","../../tracking-core/src/resources/sales/client.ts","../../tracking-core/src/resources/sales/schema.ts","../../tracking-core/src/resources/services.ts"],"sourcesContent":["// Framework-agnostic phone-number utilities — isomorphic (browser + Node/RSC),\n// zero React. Bundled `libphonenumber-js` (standard metadata) so clients add no\n// dependency. The transmitted value is ALWAYS E.164; display is the only knob.\n\nimport { AsYouType, parsePhoneNumberFromString, type CountryCode } from \"libphonenumber-js\";\n\nexport type { CountryCode };\n\n/**\n * How a phone number is shown in the UI. The transmitted value is always E.164\n * and is deliberately NOT part of this — only the display format is configurable.\n * A function form covers the long tail (`(parsed) => string`).\n */\nexport type PhoneDisplayFormat =\n  | \"national\"\n  | \"international\"\n  | \"e164\"\n  | ((parsed: ParsedPhone) => string);\n\nexport interface ParsedPhone {\n  /** E.164 (`\"+14165550199\"`) or `null` when the input isn't a valid number. This is what gets transmitted. */\n  e164: string | null;\n  /** National display form (`\"(416) 555-0199\"`); empty string when unparseable. */\n  national: string;\n  /** International display form (`\"+1 416 555 0199\"`); empty string when unparseable. */\n  international: string;\n  /** ISO-3166 country resolved by libphonenumber, or `null`. */\n  country: CountryCode | null;\n  isValid: boolean;\n}\n\n/** Region assumed for numbers typed without a country code. */\nexport const DEFAULT_PHONE_COUNTRY: CountryCode = \"CA\";\n\n/** Parse a raw/display string into every representation at once (one parse → display + wire never drift). */\nexport function parsePhone(raw: string, country?: CountryCode): ParsedPhone {\n  const region = country ?? DEFAULT_PHONE_COUNTRY;\n  const parsed = parsePhoneNumberFromString(raw ?? \"\", region);\n  if (!parsed) {\n    return { e164: null, national: \"\", international: \"\", country: region, isValid: false };\n  }\n  const isValid = parsed.isValid();\n  return {\n    // E.164 is only surfaced for a *valid* number — a possible-but-invalid input\n    // (e.g. too few digits) still parses but must not be transmitted.\n    e164: isValid ? parsed.number : null,\n    national: parsed.formatNational(),\n    international: parsed.formatInternational(),\n    country: parsed.country ?? region,\n    isValid,\n  };\n}\n\n/** Normalize any raw/display value to E.164, or `null` if it isn't a valid number. */\nexport function toE164(raw: string, country?: CountryCode): string | null {\n  return parsePhone(raw, country).e164;\n}\n\n/** Format a value for display. Defaults to `'national'`. Never affects the wire value. */\nexport function formatPhone(\n  value: string,\n  format: PhoneDisplayFormat = \"national\",\n  country?: CountryCode,\n): string {\n  const parsed = parsePhone(value, country);\n  if (typeof format === \"function\") return format(parsed);\n  switch (format) {\n    case \"international\":\n      return parsed.international || value;\n    case \"e164\":\n      return parsed.e164 ?? value;\n    case \"national\":\n    default:\n      return parsed.national || value;\n  }\n}\n\n/** Live, incremental formatting for an `<input>` as the user types (`AsYouType`). */\nexport function formatPhoneAsTyped(raw: string, country?: CountryCode): string {\n  return new AsYouType(country ?? DEFAULT_PHONE_COUNTRY).input(raw ?? \"\");\n}\n","// Enhanced-conversions user_data bridge (Google Ads \"user-provided data\").\n//\n// Why this exists: Google's automatic user-provided-data capture demonstrably\n// misses phone fields on client sites (verified live: a filled tel input never\n// produced a `pn` hit parameter), and our offline sale uploads are phone-hash\n// keyed — without a phone↔click pairing built at conversion time, none of them\n// can match. This module makes the SDK the deterministic capture path: it\n// extracts the visitor's own email/phone from `form_submit` fields (or an\n// explicit override / a recorded sale's customer fields), normalizes them\n// (E.164 phone, lowercased email), and sets them as PLAINTEXT\n// `gtag('set','user_data', …)` immediately before a conversion fires. gtag.js\n// normalizes further and SHA-256 hashes IN THE BROWSER — plaintext never\n// leaves the page, and we never own Google's hashing contract.\n//\n// Privacy posture: the stash is module-level memory only — never persisted to\n// any storage, never added to our own ingest payloads (the form fields were\n// already part of the site's `form_submit` metadata; we only read them).\n// Consent gating happens at the egress in `fireConversionWithConsent` (the\n// same gate every conversion already passes through); an explicit consent\n// denial additionally clears the stash and nulls gtag's page state (see\n// consent.ts). This module must NOT import consent.ts — consent.ts imports us\n// for that clearing hook, and the reverse edge would be a cycle.\n\nimport { toE164, type CountryCode } from \"./phone\";\n\n/** Raw identifiers a caller may hand us (normalized before use). */\nexport interface ConversionUserData {\n  email?: string | null;\n  phone?: string | null;\n}\n\n/** Normalized identifiers as gtag's `user_data` expects them. */\nexport interface NormalizedUserData {\n  email: string | null;\n  /** E.164 (`\"+16477836797\"`) — the format Google's parser reliably accepts. */\n  phoneNumber: string | null;\n}\n\nconst EMAIL_SHAPE = /^[^@\\s]+@[^@\\s]+\\.[^@\\s]+$/;\nconst EMAIL_NAME_HINT = /e[-_]?mail/i;\n// `\\b` won't do: underscores are word chars, so `customer_phone` would miss.\n// The leading guard keeps bare \"tel\" from matching e.g. \"hotel\".\nconst PHONE_NAME_HINT = /(^|[^a-z])(phone|tel|mobile|cell)/i;\n\n// Page-lifetime, memory-only. Freshest non-null value wins per identifier.\nlet stash: NormalizedUserData = { email: null, phoneNumber: null };\n\n/**\n * Trim + lowercase + shape-check. Deliberately NO gmail dot/plus\n * canonicalization — gtag.js applies Google's own normalization before\n * hashing, and owning that contract here would be drift waiting to happen.\n */\nexport function normalizeEmail(raw: unknown): string | null {\n  if (typeof raw !== \"string\") return null;\n  const cleaned = raw.trim().toLowerCase();\n  return EMAIL_SHAPE.test(cleaned) ? cleaned : null;\n}\n\ninterface FieldLike {\n  name?: unknown;\n  type?: unknown;\n  label?: unknown;\n  value?: unknown;\n}\n\nfunction fieldText(field: FieldLike, key: \"name\" | \"type\" | \"label\"): string {\n  const value = field[key];\n  return typeof value === \"string\" ? value : \"\";\n}\n\n/**\n * Deterministic extraction from `form_submit` `fields[]`: for each identifier,\n * a typed field (`type=\"email\"` / `type=\"tel\"`) wins over a name/label match\n * (`user_email`, `customer_phone`, …), in document order. A field whose value\n * fails normalization does NOT consume the slot — scanning continues, so one\n * malformed phone field can't mask a later valid one. Never throws.\n */\nexport function extractUserDataFromFormFields(\n  fields: unknown,\n  country?: CountryCode,\n): NormalizedUserData {\n  const result: NormalizedUserData = { email: null, phoneNumber: null };\n  if (!Array.isArray(fields)) return result;\n  const passes: Array<(field: FieldLike, hint: RegExp, type: string) => boolean> = [\n    (field, _hint, type) => fieldText(field, \"type\").toLowerCase() === type,\n    (field, hint) => hint.test(fieldText(field, \"name\")) || hint.test(fieldText(field, \"label\")),\n  ];\n  for (const matches of passes) {\n    for (const raw of fields) {\n      if (raw === null || typeof raw !== \"object\") continue;\n      const field = raw as FieldLike;\n      if (typeof field.value !== \"string\" || field.value.length === 0) continue;\n      if (result.email === null && matches(field, EMAIL_NAME_HINT, \"email\")) {\n        result.email = normalizeEmail(field.value);\n      }\n      if (result.phoneNumber === null && matches(field, PHONE_NAME_HINT, \"tel\")) {\n        try {\n          result.phoneNumber = toE164(field.value, country);\n        } catch {\n          // libphonenumber choked on garbage — leave the slot open\n        }\n      }\n    }\n    if (result.email !== null && result.phoneNumber !== null) break;\n  }\n  return result;\n}\n\n/** Normalize + merge into the stash (non-null values win over existing). */\nexport function stashUserData(data: ConversionUserData, country?: CountryCode): void {\n  const email = normalizeEmail(data.email);\n  let phoneNumber: string | null = null;\n  if (typeof data.phone === \"string\" && data.phone.length > 0) {\n    try {\n      phoneNumber = toE164(data.phone, country);\n    } catch {\n      phoneNumber = null;\n    }\n  }\n  stash = {\n    email: email ?? stash.email,\n    phoneNumber: phoneNumber ?? stash.phoneNumber,\n  };\n}\n\n/** Extract from `form_submit` fields and merge into the stash. Never throws. */\nexport function stashUserDataFromFormFields(fields: unknown, country?: CountryCode): void {\n  try {\n    const extracted = extractUserDataFromFormFields(fields, country);\n    stash = {\n      email: extracted.email ?? stash.email,\n      phoneNumber: extracted.phoneNumber ?? stash.phoneNumber,\n    };\n  } catch {\n    // extraction must never break event tracking\n  }\n}\n\n/** Snapshot of the current stash (copy — mutations don't leak back). */\nexport function getStashedUserData(): NormalizedUserData {\n  return { ...stash };\n}\n\n/** Drop everything (consent denial, tests). */\nexport function clearStashedUserData(): void {\n  stash = { email: null, phoneNumber: null };\n}\n\n/**\n * Set gtag's per-page `user_data` right before a conversion fires: explicit\n * values win per-key over the stash; an empty merge sets nothing at all.\n * Browser-gated and throw-proof — the conversion must fire regardless.\n * NOT consent-checked here: the single caller (`fireConversionWithConsent`)\n * has already returned on denial before reaching this.\n *\n * Returns whether a `gtag('set','user_data', …)` call was made.\n */\nexport function applyUserDataForConversion(\n  explicit?: ConversionUserData | null,\n  country?: CountryCode,\n): boolean {\n  if (typeof window === \"undefined\" || typeof window.gtag !== \"function\") return false;\n  let email = stash.email;\n  let phoneNumber = stash.phoneNumber;\n  if (explicit) {\n    const normalizedEmail = normalizeEmail(explicit.email);\n    if (normalizedEmail) email = normalizedEmail;\n    if (typeof explicit.phone === \"string\" && explicit.phone.length > 0) {\n      try {\n        phoneNumber = toE164(explicit.phone, country) ?? phoneNumber;\n      } catch {\n        // keep the stashed phone\n      }\n    }\n  }\n  if (email === null && phoneNumber === null) return false;\n  try {\n    window.gtag(\"set\", \"user_data\", {\n      ...(email !== null ? { email } : {}),\n      ...(phoneNumber !== null ? { phone_number: phoneNumber } : {}),\n    });\n    return true;\n  } catch {\n    return false;\n  }\n}\n","import type { ConsentState } from \"./types\";\nimport { clearStashedUserData } from \"./user-data\";\n\n/**\n * localStorage key for the visitor's explicit consent choice.\n */\nexport const CONSENT_STATE_KEY = \"consent_state\";\n\n/**\n * localStorage key for the ISO timestamp when consent was last changed.\n */\nexport const CONSENT_TIMESTAMP_KEY = \"consent_timestamp\";\n\n/**\n * localStorage key for the ISO timestamp when an explicit decline expires.\n *\n * Written alongside a `denied` choice; absent for grants (they never expire).\n * Computed at WRITE time so every reader — including the inline\n * `beforeInteractive` scripts that can't import this module — only has to\n * compare a stored ISO string against the clock.\n */\nexport const CONSENT_EXPIRES_AT_KEY = \"consent_expires_at\";\n\n/**\n * How long an explicit decline is honored before the visitor reverts to the\n * default-granted state. Explicit grants never expire.\n */\nexport const DEFAULT_DECLINE_TTL_DAYS = 90;\n\nconst DAY_MS = 86_400_000;\n\n/**\n * Google Consent Mode value sent to `gtag('consent', 'update', ...)`.\n */\nexport type GtagConsentValue = \"granted\" | \"denied\";\n\n/**\n * Consent Mode v2 payload sent to Google Ads when consent changes.\n */\nexport interface ConsentUpdatePayload {\n  ad_storage: GtagConsentValue;\n  ad_user_data: GtagConsentValue;\n  ad_personalization: GtagConsentValue;\n  analytics_storage: GtagConsentValue;\n}\n\n/** Effective consent state — the opt-out model has no \"pending\". */\nexport type ConsentChoiceState = \"granted\" | \"denied\";\n\n/**\n * Where the effective state came from: `explicit` when the visitor made a\n * stored, still-valid choice; `default` otherwise (no choice, expired decline,\n * storage blocked, SSR).\n */\nexport type ConsentSource = \"default\" | \"explicit\";\n\n/**\n * The effective consent decision plus its provenance.\n */\nexport interface ConsentChoice {\n  state: ConsentChoiceState;\n  source: ConsentSource;\n  /** ISO timestamp of the explicit choice; null for the default state. */\n  updatedAt: string | null;\n  /** ISO expiry of an unexpired decline; null for grants and the default state. */\n  expiresAt: string | null;\n}\n\n/** Options for explicit consent writes. */\nexport interface SetConsentOptions {\n  /** Days an explicit decline is honored. Defaults to {@link DEFAULT_DECLINE_TTL_DAYS}. */\n  declineTtlDays?: number;\n}\n\nconst DEFAULT_CHOICE: ConsentChoice = {\n  state: \"granted\",\n  source: \"default\",\n  updatedAt: null,\n  expiresAt: null,\n};\n\ntype ConsentChangeListener = (choice: ConsentChoice) => void;\nconst changeListeners = new Set<ConsentChangeListener>();\n\n/**\n * Subscribe to consent changes (opt-in, opt-out, reset) made in THIS tab.\n * Cross-tab changes surface via the browser's `storage` event instead.\n * Returns an unsubscribe function.\n */\nexport function onConsentChange(listener: ConsentChangeListener): () => void {\n  changeListeners.add(listener);\n  return () => {\n    changeListeners.delete(listener);\n  };\n}\n\n// Takes the intended choice rather than re-reading storage: when localStorage\n// is blocked, a re-read would report default-granted right after an opt-out\n// click even though the live gtag/fbq revoke DID apply for this page load.\nfunction notifyConsentChanged(choice: ConsentChoice): void {\n  for (const listener of changeListeners) {\n    try {\n      listener(choice);\n    } catch {\n      // a listener must never break the consent flow\n    }\n  }\n}\n\n/**\n * Build the Google Consent Mode v2 update payload for a single consent state.\n */\nexport function buildConsentPayload(state: GtagConsentValue): ConsentUpdatePayload {\n  return {\n    ad_storage: state,\n    ad_user_data: state,\n    ad_personalization: state,\n    analytics_storage: state,\n  };\n}\n\n/**\n * Resolve the visitor's effective consent (opt-out model).\n *\n * Default is GRANTED. Only a stored, unexpired explicit decline yields\n * `denied`. SSR, blocked storage, and expired declines all resolve to the\n * default. A legacy decline stored by the opt-in-era SDK (no expiry key) stays\n * denied and gets a fresh 90-day expiry backfilled, keeping this reader\n * consistent with the inline scripts (which treat a missing expiry as denied).\n */\nexport function getConsentChoice(): ConsentChoice {\n  if (typeof window === \"undefined\") return DEFAULT_CHOICE;\n\n  try {\n    const stored = window.localStorage.getItem(CONSENT_STATE_KEY);\n    const updatedAt = window.localStorage.getItem(CONSENT_TIMESTAMP_KEY);\n\n    if (stored === \"granted\")\n      return { state: \"granted\", source: \"explicit\", updatedAt, expiresAt: null };\n\n    if (stored === \"denied\") {\n      let expiresAt = window.localStorage.getItem(CONSENT_EXPIRES_AT_KEY);\n      if (!expiresAt) {\n        expiresAt = new Date(Date.now() + DEFAULT_DECLINE_TTL_DAYS * DAY_MS).toISOString();\n        try {\n          window.localStorage.setItem(CONSENT_EXPIRES_AT_KEY, expiresAt);\n        } catch {\n          // backfill is best-effort; the decline is still honored this read\n        }\n      }\n      // A garbled expiry parses to NaN, the comparison is false, and the decline\n      // stays honored (fail closed on the decliner's side). Only a parseable\n      // expiry in the past reverts to the default.\n      if (!(Date.parse(expiresAt) <= Date.now()))\n        return { state: \"denied\", source: \"explicit\", updatedAt, expiresAt };\n    }\n  } catch {\n    // localStorage blocked (sandboxed iframe / storage disabled) — default\n  }\n\n  return DEFAULT_CHOICE;\n}\n\n/**\n * Read the visitor's effective consent state.\n *\n * Opt-out model: returns `granted` unless a stored, unexpired explicit decline\n * exists. Never returns `pending` — that value survives in {@link ConsentState}\n * only so pre-v2 call sites keep compiling.\n */\nexport function getConsentState(): ConsentState {\n  return getConsentChoice().state;\n}\n\nfunction pushConsentToPlatforms(state: GtagConsentValue): void {\n  if (typeof window === \"undefined\") return;\n\n  if (typeof window.gtag === \"function\")\n    window.gtag(\"consent\", \"update\", buildConsentPayload(state));\n\n  // Mirror to the Meta Pixel so one control gates both ad platforms.\n  if (typeof window.fbq === \"function\")\n    window.fbq(\"consent\", state === \"granted\" ? \"grant\" : \"revoke\");\n}\n\n/**\n * Persist an explicit visitor consent choice and push it live to Google\n * Consent Mode and the Meta Pixel.\n *\n * Declines expire after {@link DEFAULT_DECLINE_TTL_DAYS} days (override via\n * `options.declineTtlDays`); grants never expire.\n */\nexport function setConsentState(state: GtagConsentValue, options?: SetConsentOptions): void {\n  if (typeof window === \"undefined\") return;\n\n  // Compute the full intended choice BEFORE touching storage so (a) a garbage\n  // TTL can't throw mid-write (state written, expiry not), and (b) listeners\n  // get the visitor's actual choice even when storage is blocked.\n  const requestedTtl = options?.declineTtlDays;\n  const ttlDays =\n    typeof requestedTtl === \"number\" && Number.isFinite(requestedTtl) && requestedTtl > 0\n      ? requestedTtl\n      : DEFAULT_DECLINE_TTL_DAYS;\n  const updatedAt = new Date().toISOString();\n  const expiresAt =\n    state === \"denied\" ? new Date(Date.now() + ttlDays * DAY_MS).toISOString() : null;\n\n  try {\n    window.localStorage.setItem(CONSENT_STATE_KEY, state);\n    window.localStorage.setItem(CONSENT_TIMESTAMP_KEY, updatedAt);\n    if (expiresAt !== null) {\n      window.localStorage.setItem(CONSENT_EXPIRES_AT_KEY, expiresAt);\n    } else {\n      window.localStorage.removeItem(CONSENT_EXPIRES_AT_KEY);\n    }\n  } catch {\n    // localStorage blocked — still push the live consent update below so the\n    // visitor's click takes effect for this page load even if it can't persist\n  }\n\n  pushConsentToPlatforms(state);\n  if (state === \"denied\") {\n    // A mid-session revoke also scrubs enhanced-conversions page state: drop\n    // the stashed identifiers and best-effort null gtag's user_data.\n    clearStashedUserData();\n    try {\n      if (typeof window.gtag === \"function\") window.gtag(\"set\", \"user_data\", null);\n    } catch {\n      // scrubbing is best-effort; the consent update above already gates fires\n    }\n  }\n  notifyConsentChanged({ state, source: \"explicit\", updatedAt, expiresAt });\n}\n\n/**\n * Explicitly opt the visitor in to ad tracking (never expires).\n */\nexport function optIn(): void {\n  setConsentState(\"granted\");\n}\n\n/**\n * Explicitly opt the visitor out of ad tracking for\n * {@link DEFAULT_DECLINE_TTL_DAYS} days (override via `options.declineTtlDays`).\n *\n * This is the primitive a client site's footer \"cookie preferences\" control\n * should call — the packages ship no consent UI of their own.\n */\nexport function optOut(options?: SetConsentOptions): void {\n  setConsentState(\"denied\", options);\n}\n\n/**\n * Clear the stored explicit choice, returning the visitor to the\n * default-granted state, and push that state live to gtag + Meta.\n *\n * Power a \"Cookie preferences\" reset in a footer:\n *\n * ```tsx\n * const { reset } = useCookiePreferences();\n * <button onClick={reset}>Reset cookie preferences</button>\n * ```\n */\nexport function resetConsent(): void {\n  if (typeof window === \"undefined\") return;\n\n  try {\n    window.localStorage.removeItem(CONSENT_STATE_KEY);\n    window.localStorage.removeItem(CONSENT_TIMESTAMP_KEY);\n    window.localStorage.removeItem(CONSENT_EXPIRES_AT_KEY);\n  } catch {\n    // localStorage blocked — nothing to clear\n  }\n\n  pushConsentToPlatforms(\"granted\");\n  notifyConsentChanged(DEFAULT_CHOICE);\n}\n\n/**\n * Re-apply a stored explicit consent choice to Google Consent Mode + Meta.\n *\n * @deprecated The v2 consent-default path ({@link applyDefaultConsentState} /\n * `createConsentDefaultScript`) already applies the effective state at\n * bootstrap, making this redundant. Pushes platform updates directly — it must\n * NOT route through {@link setConsentState}, which would renew the decline's\n * 90-day expiry on every page load.\n */\nexport function restoreStoredConsent(): ConsentState {\n  const choice = getConsentChoice();\n\n  if (choice.source === \"explicit\") pushConsentToPlatforms(choice.state);\n\n  return choice.state;\n}\n\n/**\n * Inline-JS fragment that resolves the effective consent value into\n * `var aranovaConsent = 'granted' | 'denied'`.\n *\n * Single source of the expiry logic for every inline `<script>` builder (gtag\n * and Meta), so the runtime reader and the inline readers can't drift. Must\n * stay dependency-free ES5 and never throw (localStorage access throws in\n * sandboxed iframes).\n */\nexport function createEffectiveConsentSnippet(): string {\n  // IIFE keeps the temporaries off the page's global scope — only\n  // `aranovaConsent` (the value consumed by the rest of the script) leaks.\n  return `\nvar aranovaConsent = (function () {\n  try {\n    if (window.localStorage.getItem('${CONSENT_STATE_KEY}') === 'denied') {\n      var exp = window.localStorage.getItem('${CONSENT_EXPIRES_AT_KEY}');\n      var expMs = exp ? Date.parse(exp) : NaN;\n      if (!(expMs <= Date.now())) return 'denied';\n    }\n  } catch (e) {}\n  return 'granted';\n})();\n`.trim();\n}\n","// This module loads the Google tag (gtag.js), applies Consent Mode, and fires\n// `gtag('config', …)` (remarketing) plus real-time `gtag('event','conversion')`\n// via `fireGtagConversion` (GAP28). Consent v2 is OPT-OUT: the effective state\n// is granted unless the visitor stored an explicit, unexpired decline, so tags\n// run from first paint for the default visitor.\n// See docs/google-ads-deployment/gtags-and-conversion-tracking.md.\n\nimport { buildConsentPayload, createEffectiveConsentSnippet, getConsentState } from \"./consent\";\nimport type { GtagEnvironmentMap } from \"./types\";\n\n/**\n * Google Tag Manager script host used for gtag loading.\n */\nexport const GTAG_SCRIPT_HOST = \"https://www.googletagmanager.com/gtag/js\";\n\n/**\n * Attribute used to mark scripts inserted by the tracking SDK.\n */\nexport const TRACKING_SCRIPT_ATTRIBUTE = \"data-aranova-tracking\";\n\nfunction getScriptMarker(id: string): string {\n  return `aranova-${id}`;\n}\n\n/**\n * Pattern matching valid Google Ads / GA4 tag IDs.\n *\n * Accepted formats: `AW-123456789`, `G-XXXXXXXXXX`, `GT-XXXXXXX`, `DC-XXXXXXX`.\n * IDs that don't match are silently dropped to prevent script injection when\n * interpolated into inline `<script>` content.\n */\nconst GTAG_ID_PATTERN = /^[A-Z]{1,3}-[A-Za-z0-9_-]+$/;\n\nexport function isValidGtagId(id: string): boolean {\n  return GTAG_ID_PATTERN.test(id);\n}\n\n/**\n * Create an inline script that initializes gtag with the visitor's EFFECTIVE\n * consent as the Consent Mode default (opt-out model).\n *\n * Resolves granted/denied synchronously from localStorage in one shot — a\n * decliner never gets a granted window and the default visitor never gets a\n * denied one, so no `wait_for_update` and no follow-up restore script is\n * needed. Run it `beforeInteractive` so the default lands before gtag.js.\n */\nexport function createConsentDefaultScript(): string {\n  return `\nwindow.dataLayer = window.dataLayer || [];\nfunction gtag(){dataLayer.push(arguments);}\nwindow.gtag = gtag;\n${createEffectiveConsentSnippet()}\ngtag('consent', 'default', {\n  ad_storage: aranovaConsent,\n  ad_user_data: aranovaConsent,\n  ad_personalization: aranovaConsent,\n  analytics_storage: aranovaConsent\n});\n`.trim();\n}\n\n/**\n * Create an inline script that initializes gtag for a Google Ads tag id.\n */\nexport function createGtagInitScript(gtagId: string): string {\n  if (!isValidGtagId(gtagId)) return \"\";\n  return `\nwindow.dataLayer = window.dataLayer || [];\nfunction gtag(){dataLayer.push(arguments);}\nwindow.gtag = gtag;\ngtag('js', new Date());\ngtag('config', '${gtagId}');\n`.trim();\n}\n\n/**\n * Create an inline script that pushes the effective consent as an update.\n *\n * @deprecated Redundant since consent v2 — `createConsentDefaultScript()`\n * already resolves the effective state (including decline expiry) into the\n * Consent Mode default, so no restore pass is needed. Kept expiry-aware for\n * integrations that still render it.\n */\nexport function createConsentRestoreScript(): string {\n  return `\n${createEffectiveConsentSnippet()}\nif (window.gtag) {\n  window.gtag('consent', 'update', {\n    ad_storage: aranovaConsent,\n    ad_user_data: aranovaConsent,\n    ad_personalization: aranovaConsent,\n    analytics_storage: aranovaConsent\n  });\n}\n`.trim();\n}\n\n/**\n * Ensure `window.gtag` and `window.dataLayer` exist and return the gtag shim.\n */\nexport function ensureGtagFunction(): NonNullable<Window[\"gtag\"]> {\n  window.dataLayer = window.dataLayer || [];\n\n  if (typeof window.gtag === \"function\") return window.gtag;\n\n  // CRITICAL: push the `arguments` object, NOT a rest-param array. gtag.js only\n  // treats the canonical `dataLayer.push(arguments)` form as a command — a plain\n  // array pushed to the dataLayer is ignored. With the array form, every\n  // gtag('config' | 'consent' | 'event') call silently no-ops: the account never\n  // registers, consent mode never applies, and conversions never fire (verified\n  // live — the array form sends zero network hits; the arguments form sends the\n  // pagead/conversion ping). Mirror Google's canonical inline snippet exactly.\n  function gtag(): void {\n    // eslint-disable-next-line prefer-rest-params\n    window.dataLayer?.push(arguments);\n  }\n  window.gtag = gtag;\n\n  return window.gtag;\n}\n\nconst SEND_TO_RE = /^AW-[A-Za-z0-9]+\\/[A-Za-z0-9_-]+$/;\n\n/** A gtag `send_to` target, e.g. `AW-123456789/AbC-D_efg`. */\nexport function isValidSendTo(sendTo: string): boolean {\n  return SEND_TO_RE.test(sendTo);\n}\n\nexport interface GtagConversionInput {\n  /** `AW-<id>/<label>` — the conversion action's firing target. */\n  sendTo: string;\n  /** Conversion value in MAJOR units; omit to let Google apply the action's default. */\n  value?: number | null;\n  currency?: string | null;\n  transactionId?: string | null;\n}\n\n/**\n * Fire a real-time on-site conversion — `gtag('event','conversion',{ send_to, … })`\n * (GAP28). Browser-gated and never throws: `record()` is isomorphic and runs server-side\n * under a secret key where `window`/`gtag` are absent, so this no-ops there. Consent\n * gating + de-dup are the caller's responsibility (see `fireConversionWithConsent`).\n * Returns whether the event was actually pushed.\n */\nexport function fireGtagConversion(input: GtagConversionInput): boolean {\n  if (typeof window === \"undefined\" || typeof window.gtag !== \"function\") return false;\n  if (!isValidSendTo(input.sendTo)) return false;\n  const params: Record<string, unknown> = { send_to: input.sendTo };\n  if (input.value != null) params.value = input.value;\n  if (input.currency) params.currency = input.currency;\n  if (input.transactionId) params.transaction_id = input.transactionId;\n  try {\n    window.gtag(\"event\", \"conversion\", params);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Apply the visitor's EFFECTIVE consent as the Consent Mode default\n * (opt-out model): granted unless a stored, unexpired decline exists.\n *\n * Reading via `getConsentState()` also backfills the expiry key for\n * legacy opt-in-era declines, keeping later inline reads consistent.\n */\nexport function applyDefaultConsentState(): void {\n  const gtag = ensureGtagFunction();\n  gtag(\n    \"consent\",\n    \"default\",\n    buildConsentPayload(getConsentState() === \"denied\" ? \"denied\" : \"granted\"),\n  );\n}\n\n/**\n * Load the external gtag script once for the provided Google Ads tag id.\n */\nexport function loadGtagScript(gtagId: string): void {\n  if (typeof document === \"undefined\") return;\n\n  const marker = getScriptMarker(\"gtag-loader\");\n  const existingScript = document.querySelector<HTMLScriptElement>(\n    `script[${TRACKING_SCRIPT_ATTRIBUTE}=\"${marker}\"]`,\n  );\n  if (existingScript) return;\n\n  const script = document.createElement(\"script\");\n  script.async = true;\n  script.src = `${GTAG_SCRIPT_HOST}?id=${encodeURIComponent(gtagId)}`;\n  script.setAttribute(TRACKING_SCRIPT_ATTRIBUTE, marker);\n  document.head.append(script);\n}\n\n/**\n * Send the initial `gtag('js')` and `gtag('config')` calls.\n */\nexport function initializeGtag(gtagId: string): void {\n  const gtag = ensureGtagFunction();\n  gtag(\"js\", new Date());\n  gtag(\"config\", gtagId);\n}\n\n/**\n * Push the current effective consent to gtag as an update.\n *\n * @deprecated Redundant since consent v2 — `applyDefaultConsentState()`\n * already applies the effective state at bootstrap. Pushes directly (no\n * storage writes), so it never renews a decline's expiry.\n */\nexport function restoreConsentState(): void {\n  if (typeof window === \"undefined\") return;\n\n  const consentState = getConsentState();\n  if (consentState === \"granted\" || consentState === \"denied\")\n    window.gtag?.(\"consent\", \"update\", buildConsentPayload(consentState));\n}\n\n/**\n * Load and initialize Google Ads tracking with Consent Mode support.\n *\n * Used by framework components and browser-script initialization.\n */\nexport function bootstrapGoogleAdsTracking(gtagId: string): void {\n  if (typeof window === \"undefined\" || typeof document === \"undefined\") return;\n  if (!isValidGtagId(gtagId)) return;\n\n  applyDefaultConsentState();\n  loadGtagScript(gtagId);\n  initializeGtag(gtagId);\n}\n\n/**\n * Load and initialize Google Ads tracking for ALL labelled gtag IDs.\n *\n * Every ID in the map gets a `gtag('config', ...)` call — gtag natively\n * supports multiple configured tags on the same page. The script loader\n * only runs once (for the first ID); subsequent IDs reuse the shared\n * `dataLayer`.\n */\nexport function bootstrapMultipleGtags(gtagIds: GtagEnvironmentMap): void {\n  if (typeof window === \"undefined\" || typeof document === \"undefined\") return;\n\n  const ids = Object.values(gtagIds).filter(\n    (id): id is string => typeof id === \"string\" && isValidGtagId(id),\n  );\n  if (ids.length === 0) return;\n\n  applyDefaultConsentState();\n  loadGtagScript(ids[0]!);\n\n  // Call gtag('js') once, then gtag('config') per ID. initializeGtag\n  // calls both, but gtag('js') should only fire once per page load.\n  const gtag = ensureGtagFunction();\n  gtag(\"js\", new Date());\n  for (const id of ids) {\n    gtag(\"config\", id);\n  }\n}\n\n/**\n * Create an inline script that initializes gtag for multiple Google Ads tag ids.\n *\n * Used by the Next.js `GoogleAdsTracking` component when rendering `<Script>`\n * tags for a multi-gtag configuration.\n */\nexport function createGtagInitScriptMulti(gtagIds: string[]): string {\n  const safeIds = gtagIds.filter(isValidGtagId);\n  const configs = safeIds.map((id) => `gtag('config', '${id}');`).join(\"\\n\");\n  return `\nwindow.dataLayer = window.dataLayer || [];\nfunction gtag(){dataLayer.push(arguments);}\nwindow.gtag = gtag;\ngtag('js', new Date());\n${configs}\n`.trim();\n}\n","// Consent-gated, de-duped orchestration around the raw `fireGtagConversion` (GAP28).\n//\n// Consent v2 (opt-out model): fire unless the visitor's effective consent is an\n// explicit, unexpired decline. There is no \"pending\" state and therefore no\n// queue — the default visitor converts in real time.\n//\n// `fireGtagConversion` is itself browser-gated and never throws, so this is safe to call\n// from the isomorphic sales `record()` — server-side it simply no-ops.\n\nimport { getConsentState } from \"../consent\";\nimport { fireGtagConversion, isValidSendTo, type GtagConversionInput } from \"../gtag\";\nimport { applyUserDataForConversion, type ConversionUserData } from \"../user-data\";\n\nconst DEDUP_PREFIX = \"_aranova_conv_\";\n\nexport type ConversionFireOutcome = \"fired\" | \"denied\" | \"duplicate\" | \"invalid\" | \"retryable\";\n\nfunction dedupKey(input: GtagConversionInput): string {\n  return `${DEDUP_PREFIX}${input.transactionId ?? \"\"}:${input.sendTo}`;\n}\n\n// Has this (transaction_id, send_to) already fired? Read-only — the key is written ONLY\n// after a successful fire (see `fireOnce`), so a fire that never happened (e.g. gtag not\n// ready yet) is never suppressed on retry. Best-effort: a blocked sessionStorage reads as\n// \"not fired\" so the conversion still gets a chance.\nfunction alreadyFired(input: GtagConversionInput): boolean {\n  if (!input.transactionId || typeof window === \"undefined\") return false;\n  try {\n    return window.sessionStorage.getItem(dedupKey(input)) !== null;\n  } catch {\n    return false;\n  }\n}\n\nfunction markFired(input: GtagConversionInput): void {\n  if (!input.transactionId || typeof window === \"undefined\") return;\n  try {\n    window.sessionStorage.setItem(dedupKey(input), \"1\");\n  } catch {\n    // sessionStorage unavailable — Google's counting_type is the authoritative backstop\n  }\n}\n\n/**\n * Fire a conversion through the consent gate + de-dup guard.\n *\n * Enhanced conversions: right before the fire (past the consent gate AND the\n * de-dup guard — a duplicate that won't emit an event must not mutate gtag's\n * page-level user_data either), gtag's `user_data` is set from the explicit\n * `options.userData` merged over the form-submit stash — this is the single\n * choke point all firing paths (recordSale, trackConversion, autofire) flow\n * through, so every conversion hit carries the visitor's hashed identifiers\n * when any are known. Re-setting before each fire is idempotent (gtag scopes\n * user_data to the page), so a later autofire on the same page matches too.\n * The de-dup key is written only AFTER a successful fire, so a fire that\n * never happened (gtag not ready) is never suppressed on retry.\n */\nexport function fireConversionWithConsent(\n  input: GtagConversionInput,\n  options?: { userData?: ConversionUserData | null },\n): ConversionFireOutcome {\n  if (getConsentState() === \"denied\") return \"denied\";\n  if (alreadyFired(input)) return \"duplicate\";\n  if (!isValidSendTo(input.sendTo)) return \"invalid\";\n  try {\n    applyUserDataForConversion(options?.userData);\n    if (!fireGtagConversion(input)) return \"retryable\";\n    markFired(input);\n    return \"fired\";\n  } catch {\n    return \"retryable\";\n  }\n}\n\n/**\n * Flush conversions queued while consent was pending.\n *\n * @deprecated No-op since consent v2 — there is no \"pending\" state, so nothing\n * is ever queued. Kept exported so pre-v2 integrations keep compiling.\n */\nexport function flushPendingConversions(): void {\n  // intentionally empty\n}\n","import { z } from \"zod\";\n\n/**\n * Metadata for the automatic `page_view` event.\n *\n * The SDK emits this on initial load, SPA route changes, and bfcache restores.\n * Consumers do not call `trackEvent('page_view', ...)`; registering\n * `automatic: { page_view: {} }` enables the SDK-owned trigger.\n */\nexport const pageViewMetadataSchema = z\n  .object({\n    page: z\n      .object({\n        title: z.string().nullable(),\n        path: z.string(),\n        search: z.string(),\n        hash: z.string(),\n      })\n      .strict(),\n    referrer: z.string().nullable(),\n    // `.nullable().optional()` — absent (undefined) OR explicit null OR a\n    // real viewport object. Mirrors Pydantic's `_Viewport | None = None`\n    // on the backend side so the drift test stays clean.\n    viewport: z\n      .object({\n        w: z.number(),\n        h: z.number(),\n      })\n      .strict()\n      .nullable()\n      .optional(),\n  })\n  .strict();\n\nexport type PageViewMetadata = z.infer<typeof pageViewMetadataSchema>;\n\n/**\n * Registration config for automatic `page_view`.\n *\n * `page_view` is required in every trigger registry and currently has no\n * options. Use `{ page_view: {} }`.\n */\nexport const pageViewConfigSchema = z.object({}).strict();\nexport type PageViewConfig = z.infer<typeof pageViewConfigSchema>;\n","// Visitor + session identity for the tracking SDK.\n//\n// Visitor: persistent localStorage UUID, never expires until the user clears\n// browser storage. Used for cross-session correlation.\n//\n// Session: rolling 30-minute idle window. Regenerated when more than\n// SESSION_IDLE_MS has passed since the last event. Matches the behavior of\n// GA4, PostHog, Mixpanel, etc., so analytics is comparable.\n\nimport { clearLandingRecord } from \"./landing\";\n\n/**\n * localStorage key for the persistent visitor id.\n */\nexport const VISITOR_STORAGE_KEY = \"aranova_tracking_visitor\";\n\n/**\n * localStorage key for the rolling session id state.\n */\nexport const SESSION_STORAGE_KEY = \"aranova_tracking_session\";\n\n/**\n * Idle window before a new session id is created.\n */\nexport const SESSION_IDLE_MS = 30 * 60 * 1000;\n\n/**\n * Serialized session state stored in localStorage.\n */\nexport interface StoredSession {\n  /** Client-generated session UUID. */\n  id: string;\n  /** Unix timestamp in milliseconds for the most recent event/session touch. */\n  last_event_at: number;\n}\n\nfunction safeUuid(): string {\n  if (typeof crypto !== \"undefined\" && typeof crypto.randomUUID === \"function\")\n    return crypto.randomUUID();\n  // Fallback for ancient browsers — not cryptographically perfect but unique enough.\n  return `${Date.now().toString(16)}-${Math.random().toString(16).slice(2)}-${Math.random().toString(16).slice(2)}`;\n}\n\nfunction readLocalStorage(key: string): string | null {\n  try {\n    return window.localStorage.getItem(key);\n  } catch {\n    return null;\n  }\n}\n\nfunction writeLocalStorage(key: string, value: string): void {\n  try {\n    window.localStorage.setItem(key, value);\n  } catch {\n    // Storage may be denied (private mode, blocked cookies, quota). Caller is\n    // responsible for degrading gracefully.\n  }\n}\n\n/**\n * Return the persistent visitor id for this browser profile.\n *\n * Creates and stores a new id when one does not already exist. During SSR,\n * returns an ephemeral id because browser storage is unavailable.\n */\nexport function getVisitorId(): string {\n  if (typeof window === \"undefined\") return safeUuid();\n\n  const existing = readLocalStorage(VISITOR_STORAGE_KEY);\n  if (existing && existing.length > 0) return existing;\n\n  const fresh = safeUuid();\n  writeLocalStorage(VISITOR_STORAGE_KEY, fresh);\n  return fresh;\n}\n\n/**\n * Result from `getOrRotateSessionId()`.\n */\nexport interface SessionIdResult {\n  /** Current session id. */\n  id: string;\n  /** Whether this call created a new session. */\n  isNew: boolean;\n}\n\n/**\n * Return the current session id, rotating it after the idle window expires.\n *\n * Also refreshes `last_event_at` for active sessions.\n */\nexport function getOrRotateSessionId(now: number = Date.now()): SessionIdResult {\n  if (typeof window === \"undefined\") return { id: safeUuid(), isNew: true };\n\n  const raw = readLocalStorage(SESSION_STORAGE_KEY);\n  if (raw) {\n    try {\n      const parsed = JSON.parse(raw) as Partial<StoredSession>;\n      if (typeof parsed.id === \"string\" && typeof parsed.last_event_at === \"number\") {\n        if (now - parsed.last_event_at <= SESSION_IDLE_MS) {\n          const refreshed: StoredSession = { id: parsed.id, last_event_at: now };\n          writeLocalStorage(SESSION_STORAGE_KEY, JSON.stringify(refreshed));\n          return { id: parsed.id, isNew: false };\n        }\n      }\n    } catch {\n      // Fall through to a fresh session.\n    }\n  }\n\n  const fresh: StoredSession = { id: safeUuid(), last_event_at: now };\n  writeLocalStorage(SESSION_STORAGE_KEY, JSON.stringify(fresh));\n  return { id: fresh.id, isNew: true };\n}\n\n/**\n * Clear visitor and session identity from localStorage, including the\n * session-scoped landing record (a landing must never outlive its session).\n *\n * Intended for tests, debugging, and explicit user reset flows.\n */\nexport function resetTrackingIdentity(): void {\n  clearLandingRecord();\n  if (typeof window === \"undefined\") return;\n  try {\n    window.localStorage.removeItem(VISITOR_STORAGE_KEY);\n    window.localStorage.removeItem(SESSION_STORAGE_KEY);\n  } catch {\n    // ignored\n  }\n}\n","// Tracking ingest client. Queues events, debounce-flushes them to the\n// /tracking/events endpoint, and degrades silently on errors so a broken\n// network never breaks the host site.\n\nimport { getConsentChoice, getConsentState } from \"./consent\";\nimport { resetPageViewState } from \"./page-view\";\nimport type { PhoneConfig } from \"./phone-field\";\nimport { captureFbc, getFbcCookie, getFbpCookie } from \"./fbq\";\nimport {\n  captureTrackingParamsFromLocation,\n  createEmptyTrackingParams,\n  getCookieValueFromDocument,\n  getTrackingParamsFromCookieReader,\n  mergeTrackingParams,\n} from \"./tracking\";\nimport type { TriggerRegistryConfig } from \"./events/registry\";\nimport { buildHeartbeatMetadata } from \"./heartbeat\";\nimport { buildLandingPayloadFields, getOrCaptureLandingParams } from \"./landing\";\nimport { getOrRotateSessionId, getVisitorId } from \"./session\";\nimport { stashUserDataFromFormFields } from \"./user-data\";\nimport type {\n  TrackingClientContext,\n  TrackingEnvironment,\n  TrackingInstallSurface,\n  TrackingParams,\n  TrackingSessionUpsertPayload,\n} from \"./types\";\n\n/**\n * Default debounce window before queued events are flushed.\n */\nexport const DEFAULT_FLUSH_INTERVAL_MS = 2000;\n\n/**\n * Default queue size that triggers an immediate flush.\n */\nexport const DEFAULT_MAX_QUEUE_SIZE = 10;\n\n/**\n * Hard server-side maximum event count per request body.\n */\nexport const HARD_MAX_BATCH = 50;\n\n/**\n * Header used to authenticate public tracking ingest requests.\n */\nexport const API_KEY_HEADER = \"X-Aranova-Api-Key\";\n\n/**\n * Identity headers stamped on every ingest request. Duplicate fields already\n * present in `session.context` but survive body-parse failures so the backend\n * can attribute 422s to the offending SDK install.\n */\nexport const SDK_VERSION_HEADER = \"X-Aranova-Sdk-Version\";\nexport const SDK_PACKAGE_HEADER = \"X-Aranova-Sdk-Package\";\nexport const SDK_SURFACE_HEADER = \"X-Aranova-Sdk-Surface\";\nexport const SDK_ENVIRONMENT_HEADER = \"X-Aranova-Sdk-Environment\";\n\n/**\n * Configuration for the low-level ingest client.\n *\n * Framework packages usually create this for you through `createTracking()`.\n */\nexport interface TrackingClientConfig {\n  /** Public tracking API key issued for the business. */\n  apiKey: string;\n  /** Tracking endpoint base URL, usually ending in `/tracking`. */\n  endpoint: string;\n  /** SDK surface creating this client. */\n  surface: TrackingInstallSurface;\n  /** Package version reported in session context and heartbeat metadata. */\n  sdkVersion?: string;\n  /** Package name reported in session context and heartbeat metadata. */\n  packageName?: string;\n  /** Trigger registry so the heartbeat can report registered events. */\n  triggers?: TriggerRegistryConfig;\n  /** Override the default 2s debounce window. */\n  flushIntervalMs?: number;\n  /** Override the default 10-event batch trigger. */\n  maxQueueSize?: number;\n  /** Deployment environment label reported in session context. */\n  environment?: TrackingEnvironment;\n  /** All active gtag IDs, keyed by label. Included in session context. */\n  activeGtagIds?: Record<string, string>;\n  /** When true, swallow nothing — useful for tests. */\n  debug?: boolean;\n  /** Phone-field config, carried for parity; the React hook reads it via context. */\n  phone?: PhoneConfig;\n}\n\n/**\n * Input accepted by the low-level stringly-typed client.\n *\n * Prefer the typed `trackEvent(eventName, metadata)` facade exposed by\n * `useTracking()` in React/Next integrations.\n */\nexport interface TrackEventInput {\n  /** Event name to enqueue. */\n  eventType: string;\n  /** URL associated with the event. Defaults to the current page URL. */\n  pageUrl?: string | null;\n  /** Event-specific metadata. */\n  metadata?: Record<string, unknown> | null;\n  /** Timestamp override. Defaults to queue time. */\n  occurredAt?: Date | string | null;\n}\n\ninterface QueuedEvent {\n  event_type: string;\n  page_url: string | null;\n  metadata: Record<string, unknown> | null;\n  occurred_at: string | null;\n}\n\n/**\n * Low-level tracking client responsible for queueing and flushing events.\n */\nexport interface TrackingClient {\n  /** Enqueue an event for batched delivery. */\n  trackEvent: (input: TrackEventInput) => void;\n  /** Flush queued events immediately (fetch, non-keepalive). */\n  flush: () => Promise<void>;\n  /**\n   * Flush queued events through the keepalive transport so the request\n   * survives document unload. Use from `pagehide`/`visibilitychange:hidden`\n   * handlers — a plain `flush()` there is aborted by the browser on unload.\n   */\n  flushBeacon: () => void;\n  /** Return the current rolling session id. */\n  getSessionId: () => string;\n  /** Return the persistent visitor id. */\n  getVisitorId: () => string;\n  /** Remove timers/listeners and prevent future flushes. */\n  destroy: () => void;\n}\n\ninterface IngestRequestBody {\n  session: TrackingSessionUpsertPayload;\n  events: Array<{\n    event_type: string;\n    page_url: string | null;\n    metadata: Record<string, unknown> | null;\n    occurred_at: string | null;\n  }>;\n}\n\nfunction buildContext(\n  surface: TrackingInstallSurface,\n  sdkVersion: string | null,\n  packageName: string | null,\n  environment: TrackingEnvironment,\n  activeGtagIds: Record<string, string> | null,\n): TrackingClientContext {\n  return {\n    surface,\n    sdk_version: sdkVersion,\n    package_name: packageName,\n    site_origin: typeof window === \"undefined\" ? null : window.location.origin,\n    page_title: typeof document === \"undefined\" ? null : document.title || null,\n    referrer: typeof document === \"undefined\" ? null : document.referrer || null,\n    environment,\n    active_gtag_ids: activeGtagIds,\n  };\n}\n\nfunction readTrackingParams(): TrackingParams {\n  if (typeof window === \"undefined\") return createEmptyTrackingParams();\n  // Capture from URL on every read so the first event in a session reflects the\n  // landing-page params even if the cookie helper hasn't run yet.\n  try {\n    captureTrackingParamsFromLocation();\n  } catch {\n    // ignore\n  }\n  return getTrackingParamsFromCookieReader(getCookieValueFromDocument);\n}\n\nfunction consentSnapshot(): Record<string, unknown> | null {\n  try {\n    // Effective consent + provenance so the dashboard can tell default-granted\n    // (opt-out model, no interaction) apart from an explicit choice.\n    const choice = getConsentChoice();\n    return {\n      state: choice.state,\n      source: choice.source,\n      updated_at: choice.updatedAt,\n      expires_at: choice.expiresAt,\n    };\n  } catch {\n    return null;\n  }\n}\n\ninterface IdentityHeaders {\n  sdkVersion: string;\n  packageName: string;\n  surface: string;\n  environment: string;\n}\n\nasync function postWithFetch(\n  url: string,\n  body: string,\n  apiKey: string,\n  identity: IdentityHeaders,\n  keepalive: boolean,\n): Promise<void> {\n  if (typeof fetch !== \"function\") return;\n  try {\n    await fetch(url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        [API_KEY_HEADER]: apiKey,\n        [SDK_VERSION_HEADER]: identity.sdkVersion,\n        [SDK_PACKAGE_HEADER]: identity.packageName,\n        [SDK_SURFACE_HEADER]: identity.surface,\n        [SDK_ENVIRONMENT_HEADER]: identity.environment,\n      },\n      body,\n      keepalive,\n      // CORS is open on the tracking endpoint; never send cookies.\n      credentials: \"omit\",\n      mode: \"cors\",\n    });\n  } catch {\n    // fire-and-forget — never throw to the host site\n  }\n}\n\nlet globalClient: TrackingClient | null = null;\nlet globalClientKey: string | null = null;\n\nfunction clientConfigKey(config: TrackingClientConfig): string {\n  return `${config.apiKey}@${config.endpoint}#${config.surface}`;\n}\n\n/**\n * Return a page-level singleton tracking client. Creating the client anew on\n * every component mount is wrong — React StrictMode double-mounts dev-only,\n * and destroying+recreating the client between the cleanup and re-run strips\n * away the pushState patch that SPA auto page view relies on. A singleton\n * survives all of that: the client lives for the entire page, and providers\n * just attach/detach auto page view against it.\n *\n * If `apiKey` / `endpoint` / `surface` change between calls, the previous\n * singleton is destroyed and a new one replaces it. This covers hot-config\n * changes without leaking state.\n */\nexport function getOrCreateTrackingClient(config: TrackingClientConfig): TrackingClient {\n  const key = clientConfigKey(config);\n  if (globalClient !== null && globalClientKey === key) {\n    return globalClient;\n  }\n  if (globalClient !== null) {\n    globalClient.destroy();\n  }\n  globalClient = createTrackingClient(config);\n  globalClientKey = key;\n  return globalClient;\n}\n\n// Global/delegated captures (document/window listeners: page_exit, scroll_depth,\n// time_on_site, form_start, cta_click, phone_click, bfcache restore) must attach ONCE\n// per page-singleton client — NOT once per React provider mount. A page can mount several\n// <TrackingProvider>s (a supported island pattern: a global provider for page-level\n// triggers plus per-component providers so `useSearchParams()` doesn't opt the whole tree\n// out of static rendering). Since the client is a singleton but each provider runs its own\n// attach effect, N mounts would stack N document listeners and every interaction would emit\n// its event N times. We ref-count attaches against the singleton client's identity: the\n// first mount attaches, later mounts are no-ops, and the last unmount detaches.\ninterface ClientCaptureEntry {\n  detach: () => void;\n  refCount: number;\n}\nconst clientCaptureRegistry = new WeakMap<TrackingClient, ClientCaptureEntry>();\n\n/**\n * Attach a set of global/delegated captures against a singleton `client` exactly once,\n * ref-counted across provider mounts. `build` performs the actual `document`/`window`\n * listener attachment and returns a single detacher for all of them; it runs only on the\n * first mount for a given client. The returned release decrements the ref-count and runs\n * `build`'s detacher when the last holder releases. Release is idempotent — React\n * StrictMode invokes an effect's cleanup twice in dev, and a double release must not\n * double-decrement.\n */\nexport function attachClientCapturesOnce(\n  client: TrackingClient,\n  build: () => () => void,\n): () => void {\n  let entry = clientCaptureRegistry.get(client);\n  if (entry === undefined) {\n    entry = { detach: build(), refCount: 0 };\n    clientCaptureRegistry.set(client, entry);\n  }\n  entry.refCount += 1;\n\n  let released = false;\n  return () => {\n    if (released) return;\n    released = true;\n    const current = clientCaptureRegistry.get(client);\n    if (current === undefined) return;\n    current.refCount -= 1;\n    if (current.refCount <= 0) {\n      current.detach();\n      clientCaptureRegistry.delete(client);\n    }\n  };\n}\n\n/**\n * Tear down the singleton if any. Primarily an escape hatch for tests where\n * each test should see a fresh client; production code rarely needs this.\n * Also clears the in-session SPA referrer so the next test starts with a\n * fresh referrer chain.\n */\nexport function resetGlobalTrackingClient(): void {\n  if (globalClient !== null) {\n    // Force-detach any captures still attached to this client so their document/window\n    // listeners can't leak into the next test even if a provider didn't unmount.\n    const entry = clientCaptureRegistry.get(globalClient);\n    if (entry !== undefined) {\n      entry.detach();\n      clientCaptureRegistry.delete(globalClient);\n    }\n    globalClient.destroy();\n  }\n  globalClient = null;\n  globalClientKey = null;\n  resetPageViewState();\n}\n\n/**\n * Create a low-level ingest client.\n *\n * The client queues events, debounces network flushes, sends an SDK heartbeat\n * once per new session, and swallows network errors so analytics never break\n * the host site.\n */\nexport function createTrackingClient(config: TrackingClientConfig): TrackingClient {\n  const flushIntervalMs = config.flushIntervalMs ?? DEFAULT_FLUSH_INTERVAL_MS;\n  const maxQueueSize = Math.min(config.maxQueueSize ?? DEFAULT_MAX_QUEUE_SIZE, HARD_MAX_BATCH);\n  const sdkVersion = config.sdkVersion ?? null;\n  const packageName = config.packageName ?? null;\n  // Default to 'production' so the wire payload always carries a valid enum\n  // value. Sending null would fail the backend's strict enum validation.\n  const environment: TrackingEnvironment = config.environment ?? \"production\";\n  const activeGtagIds = config.activeGtagIds ?? null;\n  const endpointBase = config.endpoint.replace(/\\/$/, \"\");\n  const eventsUrl = `${endpointBase}/events`;\n  const identityHeaders: IdentityHeaders = {\n    sdkVersion: sdkVersion ?? \"\",\n    packageName: packageName ?? \"\",\n    surface: config.surface,\n    environment,\n  };\n\n  let queue: QueuedEvent[] = [];\n  let flushTimer: ReturnType<typeof setTimeout> | null = null;\n  let firstPage: string | null = null;\n  // Attribution captured synchronously at client creation (before any SPA router\n  // can strip the query string). Merged into every session payload as a fallback\n  // so a blocked-cookie webview or a stripped URL still attributes.\n  let initialParams = createEmptyTrackingParams();\n  let destroyed = false;\n\n  // Initialize identity early so the first POST has stable values.\n  const visitorId = getVisitorId();\n  const initialSession = getOrRotateSessionId();\n  let sessionId = initialSession.id;\n\n  if (typeof window !== \"undefined\") {\n    firstPage = window.location.href;\n    try {\n      initialParams = captureTrackingParamsFromLocation();\n    } catch {\n      // ignore — never break the host site\n    }\n    // Pin this session's LANDING params now, before any SPA router strips the\n    // query string (reuses the stored record when the session already has one).\n    getOrCaptureLandingParams(sessionId);\n    try {\n      captureFbc();\n    } catch {\n      // ignore\n    }\n  }\n\n  // Queue an sdk_heartbeat event at the start of every new session.\n  function enqueueHeartbeat(): void {\n    const metadata = buildHeartbeatMetadata(\n      config.surface,\n      sdkVersion,\n      packageName,\n      config.triggers ?? null,\n      activeGtagIds,\n    );\n    queue.push({\n      event_type: \"sdk_heartbeat\",\n      page_url: typeof window === \"undefined\" ? null : window.location.href,\n      metadata: metadata as unknown as Record<string, unknown>,\n      occurred_at: new Date().toISOString(),\n    });\n  }\n\n  if (initialSession.isNew) {\n    enqueueHeartbeat();\n  }\n\n  function buildSessionPayload(): TrackingSessionUpsertPayload {\n    const rotated = getOrRotateSessionId();\n    if (rotated.isNew && rotated.id !== sessionId) {\n      // Session rotated mid-page (idle > 30min then user returned).\n      enqueueHeartbeat();\n    }\n    sessionId = rotated.id;\n    // Prefer the live cookie/localStorage read; fall back to the init-time\n    // snapshot (covers a webview that blocked the cookie AND a router that\n    // already stripped the landing URL by flush time).\n    const params = mergeTrackingParams(readTrackingParams(), initialParams);\n    const context = buildContext(\n      config.surface,\n      sdkVersion,\n      packageName,\n      environment,\n      activeGtagIds,\n    );\n    return {\n      session_id: sessionId,\n      visitor_id: visitorId,\n      gclid: params.gclid,\n      wbraid: params.wbraid,\n      gbraid: params.gbraid,\n      fbclid: params.fbclid,\n      fbc: getFbcCookie(),\n      fbp: getFbpCookie(),\n      utm_source: params.utm_source,\n      utm_medium: params.utm_medium,\n      utm_campaign: params.utm_campaign,\n      utm_term: params.utm_term,\n      utm_content: params.utm_content,\n      // Landing params for the CURRENT session id — captured on the spot when\n      // the session just rotated (the current URL is the rotated session's\n      // landing), reused from the stored record otherwise. Keys are omitted\n      // entirely when the landing isn't observable (SSR).\n      ...buildLandingPayloadFields(sessionId),\n      first_page: firstPage,\n      consent_state: consentSnapshot(),\n      context,\n    };\n  }\n\n  function scheduleFlush(): void {\n    if (flushTimer !== null || destroyed) return;\n    flushTimer = setTimeout(() => {\n      flushTimer = null;\n      void flush();\n    }, flushIntervalMs);\n  }\n\n  function clearScheduledFlush(): void {\n    if (flushTimer !== null) {\n      clearTimeout(flushTimer);\n      flushTimer = null;\n    }\n  }\n\n  async function flush(): Promise<void> {\n    if (queue.length === 0) return;\n\n    const events = queue.slice(0, HARD_MAX_BATCH);\n    queue = queue.slice(events.length);\n    clearScheduledFlush();\n\n    const body: IngestRequestBody = {\n      session: buildSessionPayload(),\n      events,\n    };\n\n    const serialized = JSON.stringify(body);\n\n    // Prefer fetch + keepalive for better error visibility. sendBeacon is the\n    // pagehide fallback path because it survives navigation away.\n    await postWithFetch(eventsUrl, serialized, config.apiKey, identityHeaders, false);\n  }\n\n  function trackEvent(input: TrackEventInput): void {\n    if (destroyed) return;\n    if (!input || typeof input.eventType !== \"string\" || input.eventType.length === 0) return;\n\n    // Enhanced conversions: a form submit is the one moment the visitor's own\n    // email/phone pass through the SDK — stash them (memory only) so the\n    // conversion that fires next carries user_data. NOT done for phone_click:\n    // its metadata holds the BUSINESS's number, not the visitor's. An explicit\n    // consent decline also skips the stash entirely — egress is already gated,\n    // but a decliner's identifiers shouldn't sit in page memory either.\n    if (input.eventType === \"form_submit\" && getConsentState() !== \"denied\") {\n      try {\n        const fields = (input.metadata as { form?: { fields?: unknown } } | null)?.form?.fields;\n        if (fields) stashUserDataFromFormFields(fields, config.phone?.defaultCountry);\n      } catch {\n        // user-data capture must never break ingest\n      }\n    }\n\n    const occurredAt =\n      input.occurredAt instanceof Date\n        ? input.occurredAt.toISOString()\n        : typeof input.occurredAt === \"string\"\n          ? input.occurredAt\n          : new Date().toISOString();\n\n    queue.push({\n      event_type: input.eventType,\n      page_url: input.pageUrl ?? (typeof window === \"undefined\" ? null : window.location.href),\n      metadata: input.metadata ?? null,\n      occurred_at: occurredAt,\n    });\n\n    if (queue.length >= maxQueueSize) {\n      void flush();\n    } else {\n      scheduleFlush();\n    }\n  }\n\n  function flushOnUnload(): void {\n    if (queue.length === 0) return;\n    const events = queue.slice(0, HARD_MAX_BATCH);\n    queue = queue.slice(events.length);\n    clearScheduledFlush();\n\n    const body: IngestRequestBody = {\n      session: buildSessionPayload(),\n      events,\n    };\n    const serialized = JSON.stringify(body);\n    void postWithFetch(eventsUrl, serialized, config.apiKey, identityHeaders, true);\n  }\n\n  if (typeof window !== \"undefined\") {\n    window.addEventListener(\"pagehide\", flushOnUnload);\n    window.addEventListener(\"visibilitychange\", () => {\n      if (document.visibilityState === \"hidden\") flushOnUnload();\n    });\n  }\n\n  return {\n    trackEvent,\n    flush,\n    flushBeacon: flushOnUnload,\n    getSessionId: () => sessionId,\n    getVisitorId: () => visitorId,\n    destroy: () => {\n      destroyed = true;\n      // Fire any pending events through the keepalive path before tearing\n      // down. Critical for React StrictMode in dev, where the provider's\n      // first mount is immediately unmounted and its 2s debounce would\n      // otherwise drop the initial page_view on the floor. Uses fetch\n      // keepalive so the request survives the component tearing down.\n      if (queue.length > 0) {\n        flushOnUnload();\n      }\n      clearScheduledFlush();\n      queue = [];\n      if (typeof window !== \"undefined\") {\n        window.removeEventListener(\"pagehide\", flushOnUnload);\n      }\n    },\n  };\n}\n","/**\n * Error thrown by the sales client (`createSalesClient`) on a\n * non-2xx response. Unlike the fire-and-forget event queue (which swallows\n * failures), a sale is a transaction the caller must be able to react to.\n */\nexport class AranovaApiError extends Error {\n  readonly status: number;\n  readonly code: string | undefined;\n  readonly requestId: string | undefined;\n\n  constructor(message: string, options: { status: number; code?: string; requestId?: string }) {\n    super(message);\n    this.name = \"AranovaApiError\";\n    this.status = options.status;\n    this.code = options.code;\n    this.requestId = options.requestId;\n  }\n}\n","import {\n  API_KEY_HEADER,\n  SDK_ENVIRONMENT_HEADER,\n  SDK_PACKAGE_HEADER,\n  SDK_SURFACE_HEADER,\n  SDK_VERSION_HEADER,\n} from \"../../ingest\";\nimport { AranovaApiError } from \"./errors\";\n\n/** Shared config for every sales HTTP helper. */\nexport interface SalesTransportConfig {\n  /** Public (`aranv_pk_…`) or secret (`aranv_sk_…`) API key. */\n  apiKey: string;\n  /**\n   * Base tracking endpoint, e.g. `https://aranovainternal-production.up.railway.app/tracking`.\n   * The `/sales` path is appended by the helpers.\n   */\n  endpoint: string;\n  /** Optional SDK identity headers (mirrors the event ingest client). */\n  sdkVersion?: string;\n  packageName?: string;\n  surface?: string;\n  environment?: string;\n}\n\nfunction identityHeaders(config: SalesTransportConfig): Record<string, string> {\n  const headers: Record<string, string> = { [API_KEY_HEADER]: config.apiKey };\n  if (config.sdkVersion) headers[SDK_VERSION_HEADER] = config.sdkVersion;\n  if (config.packageName) headers[SDK_PACKAGE_HEADER] = config.packageName;\n  if (config.surface) headers[SDK_SURFACE_HEADER] = config.surface;\n  if (config.environment) headers[SDK_ENVIRONMENT_HEADER] = config.environment;\n  return headers;\n}\n\nfunction joinUrl(endpoint: string, path: string): string {\n  return `${endpoint.replace(/\\/$/, \"\")}${path}`;\n}\n\n/**\n * Single awaited request used by every sales helper. Unlike the event queue,\n * this surfaces failures: any non-2xx rejects with an {@link AranovaApiError}.\n * Returns `undefined` for 204 No Content.\n */\nexport async function salesRequest<T>(\n  config: SalesTransportConfig,\n  method: string,\n  path: string,\n  body?: unknown,\n): Promise<T> {\n  const headers = identityHeaders(config);\n  if (body !== undefined) headers[\"Content-Type\"] = \"application/json\";\n\n  const response = await fetch(joinUrl(config.endpoint, path), {\n    method,\n    headers,\n    body: body === undefined ? undefined : JSON.stringify(body),\n  });\n\n  if (!response.ok) {\n    let detail: string | undefined;\n    let code: string | undefined;\n    try {\n      const parsed: unknown = await response.json();\n      if (parsed && typeof parsed === \"object\") {\n        const record = parsed as Record<string, unknown>;\n        if (typeof record.detail === \"string\") detail = record.detail;\n        if (typeof record.code === \"string\") code = record.code;\n      }\n    } catch {\n      // non-JSON error body — fall back to status text\n    }\n    throw new AranovaApiError(detail ?? response.statusText ?? \"Request failed\", {\n      status: response.status,\n      code,\n      requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    });\n  }\n\n  if (response.status === 204) return undefined as T;\n  return (await response.json()) as T;\n}\n","import type { SupportedCurrency } from \"./schema\";\n\n/**\n * Money conversion helpers.\n *\n * The API speaks **integer minor units (cents)** exclusively. These helpers move\n * between a human-facing major amount (dollars) and cents, and format cents for\n * display — so a consumer always has both representations without float math.\n */\n\n// Minor-unit exponent per supported currency (USD/CAD = 2 decimal places).\nconst MINOR_UNIT_EXPONENT: Record<SupportedCurrency, number> = {\n  USD: 2,\n  CAD: 2,\n};\n\nfunction exponentFor(currency: SupportedCurrency): number {\n  return MINOR_UNIT_EXPONENT[currency] ?? 2;\n}\n\n/**\n * Convert a major amount (dollars `250.5`) to integer minor units (`25050`).\n *\n * Convenience only — the wire is always integer cents. Uses float multiply +\n * `Math.round`, so values that aren't exactly representable in binary float\n * (e.g. `1.005`) can round to the neighbouring cent. If you already hold an\n * exact cents integer, pass it straight through and skip this helper.\n */\nexport function toMinor(amount: number, currency: SupportedCurrency): number {\n  return Math.round(amount * 10 ** exponentFor(currency));\n}\n\n/** Convert integer minor units (`25050`) to a major amount (`250.5`). */\nexport function fromMinor(cents: number, currency: SupportedCurrency): number {\n  return cents / 10 ** exponentFor(currency);\n}\n\n/**\n * Format integer minor units as a localized currency string (e.g. `\"$250.50\"`).\n * Uses the built-in `Intl.NumberFormat` — no extra dependency.\n */\nexport function formatMoney(cents: number, currency: SupportedCurrency, locale?: string): string {\n  return new Intl.NumberFormat(locale, { style: \"currency\", currency }).format(\n    fromMinor(cents, currency),\n  );\n}\n\n/**\n * Format an ISO timestamp in a specific IANA time zone (e.g. `America/Toronto`),\n * so dashboards stop hand-rolling `Intl`. Defaults to a short date-time; pass\n * `opts` to override fields. The `timeZone` is always forced to the argument.\n */\nexport function formatDateInTz(\n  iso: string,\n  timeZone: string,\n  opts?: Intl.DateTimeFormatOptions,\n  locale?: string,\n): string {\n  const date = new Date(iso);\n  // Guard malformed input: Intl.format(Invalid Date) throws a RangeError.\n  if (Number.isNaN(date.getTime())) return iso;\n  return new Intl.DateTimeFormat(locale, {\n    year: \"numeric\",\n    month: \"short\",\n    day: \"2-digit\",\n    hour: \"2-digit\",\n    minute: \"2-digit\",\n    ...opts,\n    timeZone,\n  }).format(date);\n}\n","import type {\n  BusinessConfig,\n  CustomerGetOptions,\n  CustomerGetResult,\n  CustomerKpis,\n  CustomerListPage,\n  CustomerListQuery,\n  CustomerSummaryQuery,\n  Sale,\n  SaleCursorPage,\n  SaleInput,\n  SaleListQueryV2,\n  SaleSummaryQueryV2,\n  SaleSummaryV2,\n  SaleUpdateInput,\n  SupportedCurrency,\n} from \"./schema\";\nimport type { ConversionConfigStore } from \"../conversion-config\";\nimport { fireConversionWithConsent } from \"../conversion-firing\";\nimport type { TrackingConfigRuntime } from \"../tracking-config-runtime\";\nimport { getConsentState } from \"../../consent\";\nimport { stashUserData, type ConversionUserData } from \"../../user-data\";\nimport { salesRequest, type SalesTransportConfig } from \"./transport\";\nimport { fromMinor } from \"./money\";\n\n/** Config for {@link createSalesClient}. */\nexport interface SalesClientConfig extends SalesTransportConfig {\n  /** Applied when an individual `record()` call omits `currency`. */\n  defaultCurrency?: SupportedCurrency;\n  /**\n   * GAP28: when present, `record()` ALSO fires a real-time on-site conversion\n   * (`gtag('event','conversion')`) for any recorded service that has a `firing` send_to in\n   * the resolved config. Consent-gated + de-duped; no-ops server-side. Wire it from\n   * `resolveConversionConfig(...)`.\n   */\n  firing?: Pick<ConversionConfigStore, \"getFiring\"> | TrackingConfigRuntime;\n}\n\n// Fire the on-site conversion(s) for a just-recorded sale. Per-service value = the sale's\n// amount when present, else the action's configured default from config (Google applies\n// its own default when neither is sent). transaction_id ties the gtag fire to the sale so\n// retries/reloads de-dup within the WEBPAGE action.\nfunction fireRecordedConversions(\n  firing: Pick<ConversionConfigStore, \"getFiring\"> | TrackingConfigRuntime | undefined,\n  input: {\n    external_id?: string | null;\n    amount_total_cents?: number | null;\n    customer_email?: string | null;\n    customer_phone?: string | null;\n  },\n  recorded: { service?: string | null; amount_cents: number | null }[],\n  sale: Sale,\n  currency: SupportedCurrency,\n): void {\n  if (!firing) return;\n  // Enhanced conversions: the sale's own customer identifiers are the\n  // strongest possible user_data signal — pass them into every per-service\n  // fire, and refresh the stash so later same-page event-goal fires match too.\n  const userData: ConversionUserData | null =\n    input.customer_email || input.customer_phone\n      ? { email: input.customer_email ?? null, phone: input.customer_phone ?? null }\n      : null;\n  // Denied consent: the fires below no-op anyway, so don't retain the\n  // identifiers in page memory either.\n  if (userData && getConsentState() !== \"denied\") stashUserData(userData);\n  const txnBase = input.external_id ?? sale.id;\n  for (const item of recorded) {\n    if (!item.service) continue;\n    if (\"fireConversion\" in firing) {\n      firing.fireConversion(item.service, {\n        value: item.amount_cents != null ? fromMinor(item.amount_cents, currency) : undefined,\n        currency,\n        transactionId: `${txnBase}:${item.service}`,\n      });\n      continue;\n    }\n    const config = firing.getFiring(item.service);\n    if (!config) continue;\n    const cents = item.amount_cents ?? config.value_cents ?? null;\n    fireConversionWithConsent(\n      {\n        sendTo: config.send_to,\n        value: cents != null ? fromMinor(cents, currency) : null,\n        currency: config.currency ?? currency,\n        transactionId: `${txnBase}:${item.service}`,\n      },\n      { userData },\n    );\n  }\n}\n\n/** Phone-keyed customer rollups (sk-only; a public key gets a `403`). */\nexport interface SalesCustomersClient {\n  list(query?: CustomerListQuery): Promise<CustomerListPage>;\n  /** `id` is the customer's E.164 phone. */\n  get(id: string, options?: CustomerGetOptions): Promise<CustomerGetResult>;\n  summary(query?: CustomerSummaryQuery): Promise<CustomerKpis>;\n}\n\n/** Business config (low-sensitivity — accepts a public or secret key). */\nexport interface SalesBusinessClient {\n  config(): Promise<BusinessConfig>;\n}\n\n/**\n * One isomorphic sales client — what a key may *do* is enforced by the backend,\n * not by hiding methods. A **public** key (`aranv_pk_…`) may `record` (the\n * backend rejects reads/CRUD from it with a `403`); a **secret** key\n * (`aranv_sk_…`), used **server-side only**, gets full read/list/update/delete.\n * Never ship a secret key in a browser bundle.\n *\n * Generic over the service-key union `TService` and the manual-conversion key union\n * `TConversion`: bind the types emitted by `@aranova/tracking-cli gen` (`AranovaService`\n * and `AranovaConversion`) for compile-time-checked `service` / `trackConversion` keys.\n */\nexport interface SalesClient<\n  TService extends string = string,\n  TConversion extends string = string,\n> {\n  record(\n    input: Omit<SaleInput, \"currency\" | \"occurred_at\" | \"service\" | \"services\"> & {\n      service?: TService | null;\n      // XOR with `service`: record multiple services in one sale, each priced\n      // individually. `amount_total_cents` is then optional (the backend derives\n      // it as the sum). Keys are checked against the codegen `TService` union.\n      services?: Array<{ service: TService; amount_cents: number }>;\n      currency?: SupportedCurrency;\n      occurred_at?: string;\n    },\n  ): Promise<Sale>;\n  /**\n   * Record a revenue sale — the intent-revealing alias of {@link record} in the unified-goal\n   * API. POSTs `/sales` and ALSO fires the on-site conversion when the sale-goal is\n   * WEBPAGE-mapped. Use this for anything with real revenue; use {@link trackConversion} for a\n   * non-revenue on-page event.\n   */\n  recordSale(\n    input: Omit<SaleInput, \"currency\" | \"occurred_at\" | \"service\" | \"services\"> & {\n      service?: TService | null;\n      services?: Array<{ service: TService; amount_cents: number }>;\n      currency?: SupportedCurrency;\n      occurred_at?: string;\n    },\n  ): Promise<Sale>;\n  /**\n   * Fire ONLY the on-site conversion for an event-goal `key` — for MANUAL event-goals\n   * (`form_submit`, `phone_click`, `cta_click`) the consumer triggers explicitly. No `/sales`\n   * write. No-ops when the goal isn't WEBPAGE-mapped (no resolved `send_to`) or the config\n   * isn't wired. Consent-gated + de-duped. (Automatic event-goals fire themselves — no call.)\n   */\n  trackConversion(\n    key: TConversion,\n    options?: {\n      transactionId?: string | null;\n      value?: number | null;\n      currency?: SupportedCurrency;\n      /**\n       * Enhanced conversions override: the visitor's own email/phone for this\n       * conversion. Wins per-key over the automatic form-submit stash — the\n       * escape hatch when a form's fields defeat the extraction heuristics.\n       */\n      userData?: ConversionUserData | null;\n    },\n  ): void;\n  /** Keyset list with optional server sort + opt-in `total_count`. */\n  list(query?: SaleListQueryV2): Promise<SaleCursorPage>;\n  /**\n   * Currency-grouped aggregations for the key's business. Additive v2 options:\n   * calendar/custom ranges, IANA `timezone`, `granularity`, and `compare_to`.\n   * Legacy `24h/7d/30d` keep their exact prior numbers. Secret key only.\n   */\n  summary(query: SaleSummaryQueryV2): Promise<SaleSummaryV2>;\n  get(id: string): Promise<Sale>;\n  update(\n    id: string,\n    patch: Omit<SaleUpdateInput, \"service\" | \"services\"> & {\n      service?: TService | null;\n      // Present ⇒ replaces the whole service set (XOR with `service`); the\n      // backend recomputes `amount_total_cents` from the sum.\n      services?: Array<{ service: TService; amount_cents: number }>;\n    },\n  ): Promise<Sale>;\n  delete(id: string): Promise<void>;\n  /** Phone-keyed customer rollups (sk-only). */\n  customers: SalesCustomersClient;\n  /** Business config (pk or sk). */\n  business: SalesBusinessClient;\n}\n\nexport function createSalesClient<\n  TService extends string = string,\n  TConversion extends string = string,\n>(config: SalesClientConfig): SalesClient<TService, TConversion> {\n  type RecordInput = Parameters<SalesClient<TService, TConversion>[\"record\"]>[0];\n\n  async function record(input: RecordInput): Promise<Sale> {\n    const currency = input.currency ?? config.defaultCurrency;\n    if (!currency) {\n      throw new Error(\n        \"record: `currency` is required (pass it on the sale or set config.defaultCurrency)\",\n      );\n    }\n    const body: SaleInput = {\n      ...input,\n      currency,\n      occurred_at: input.occurred_at ?? new Date().toISOString(),\n    };\n    const sale = await salesRequest<Sale>(config, \"POST\", \"/sales\", body);\n    // GAP28: fire the real-time on-site conversion(s) AFTER the sale is recorded, so the\n    // gtag transaction_id and the offline path agree. Never throws (best-effort fire).\n    const recorded = input.services?.length\n      ? input.services.map((s) => ({\n          service: s.service,\n          amount_cents: s.amount_cents,\n        }))\n      : [\n          {\n            service: input.service,\n            amount_cents: input.amount_total_cents ?? null,\n          },\n        ];\n    fireRecordedConversions(config.firing, input, recorded, sale, currency);\n    return sale;\n  }\n\n  return {\n    record,\n    // recordSale is the intent-revealing alias — same behavior, clearer call site.\n    recordSale: record,\n\n    trackConversion(key, options) {\n      // Manual event-goal: fire the WEBPAGE conversion only (no /sales). No-op when the goal\n      // isn't WEBPAGE-mapped or the config isn't wired.\n      if (config.firing && \"fireConversion\" in config.firing) {\n        // Enhanced conversions on the runtime path: the drain fires gtag\n        // itself, reading user_data from the stash — persist the explicit\n        // override there so it isn't lost to the queue.\n        if (options?.userData && getConsentState() !== \"denied\") stashUserData(options.userData);\n        config.firing.fireConversion(key, {\n          value: options?.value ?? undefined,\n          currency: options?.currency ?? config.defaultCurrency ?? undefined,\n          transactionId: options?.transactionId ?? null,\n        });\n        return;\n      }\n      const firing = config.firing?.getFiring(key);\n      if (!firing) return;\n      const currency = firing.currency ?? options?.currency ?? config.defaultCurrency ?? null;\n      const cents = firing.value_cents ?? null;\n      const value =\n        options?.value ??\n        (cents != null && currency ? fromMinor(cents, currency as SupportedCurrency) : null);\n      fireConversionWithConsent(\n        {\n          sendTo: firing.send_to,\n          value,\n          currency,\n          transactionId: options?.transactionId ?? null,\n        },\n        { userData: options?.userData },\n      );\n    },\n\n    async list(query) {\n      // Pagination + sort travel at the top level; everything else is a filter.\n      const { cursor, limit, sort, order, want_total, ...filters } = query ?? {};\n      return salesRequest<SaleCursorPage>(config, \"POST\", \"/sales/query\", {\n        filters,\n        ...(limit !== undefined ? { limit } : {}),\n        ...(cursor !== undefined ? { cursor } : {}),\n        ...(sort !== undefined ? { sort } : {}),\n        ...(order !== undefined ? { order } : {}),\n        ...(want_total !== undefined ? { want_total } : {}),\n      });\n    },\n\n    async summary(query) {\n      const {\n        range,\n        include_categories,\n        include_deleted_services,\n        top_n,\n        since,\n        until,\n        timezone,\n        granularity,\n        compare_to,\n        ...filters\n      } = query;\n      return salesRequest<SaleSummaryV2>(config, \"POST\", \"/sales/summary\", {\n        filters,\n        ...(range !== undefined ? { range } : {}),\n        ...(include_categories !== undefined ? { include_categories } : {}),\n        ...(include_deleted_services !== undefined ? { include_deleted_services } : {}),\n        ...(top_n !== undefined ? { top_n } : {}),\n        ...(since !== undefined ? { since } : {}),\n        ...(until !== undefined ? { until } : {}),\n        ...(timezone !== undefined ? { timezone } : {}),\n        ...(granularity !== undefined ? { granularity } : {}),\n        ...(compare_to !== undefined ? { compare_to } : {}),\n      });\n    },\n\n    async get(id) {\n      return salesRequest<Sale>(config, \"GET\", `/sales/${id}`);\n    },\n\n    async update(id, patch) {\n      return salesRequest<Sale>(config, \"PATCH\", `/sales/${id}`, patch);\n    },\n\n    async delete(id) {\n      await salesRequest<void>(config, \"DELETE\", `/sales/${id}`);\n    },\n\n    customers: {\n      async list(query) {\n        const { segment, sort, order, cursor, limit, want_total, ...filters } = query ?? {};\n        return salesRequest<CustomerListPage>(config, \"POST\", \"/customers/query\", {\n          filters,\n          ...(segment !== undefined ? { segment } : {}),\n          ...(sort !== undefined ? { sort } : {}),\n          ...(order !== undefined ? { order } : {}),\n          ...(cursor !== undefined ? { cursor } : {}),\n          ...(limit !== undefined ? { limit } : {}),\n          ...(want_total !== undefined ? { want_total } : {}),\n        });\n      },\n      async get(id, options) {\n        const params = new URLSearchParams();\n        if (options?.include_sales !== undefined)\n          params.set(\"include_sales\", String(options.include_sales));\n        if (options?.limit !== undefined) params.set(\"limit\", String(options.limit));\n        if (options?.cursor != null) params.set(\"cursor\", options.cursor);\n        const qs = params.toString();\n        // `id` is the E.164 phone (`+1…`) — must be URL-encoded.\n        return salesRequest<CustomerGetResult>(\n          config,\n          \"GET\",\n          `/customers/${encodeURIComponent(id)}${qs ? `?${qs}` : \"\"}`,\n        );\n      },\n      async summary(query) {\n        const { range, since, until, timezone, compare_to, ...filters } = query ?? {};\n        return salesRequest<CustomerKpis>(config, \"POST\", \"/customers/summary\", {\n          filters,\n          ...(range !== undefined ? { range } : {}),\n          ...(since !== undefined ? { since } : {}),\n          ...(until !== undefined ? { until } : {}),\n          ...(timezone !== undefined ? { timezone } : {}),\n          ...(compare_to !== undefined ? { compare_to } : {}),\n        });\n      },\n    },\n\n    business: {\n      async config() {\n        return salesRequest<BusinessConfig>(config, \"GET\", \"/business/config\");\n      },\n    },\n  };\n}\n","import { z } from \"zod\";\n\n/**\n * Sales / Conversions wire schemas — the client-side source of truth.\n *\n * `saleCreateSchema` is mirrored by `SaleCreateSchema` in\n * `apps/api/src/schemas/tracking_sales.py` and enforced by the backend drift\n * test (the `resources` section of `events.schema.json`). Keep them in lockstep.\n *\n * Money is **integer minor units (cents)**; `quantity` is a decimal string;\n * `currency` is the required `SupportedCurrency` enum.\n */\n\nexport const SUPPORTED_CURRENCIES = [\"USD\", \"CAD\"] as const;\nexport type SupportedCurrency = (typeof SUPPORTED_CURRENCIES)[number];\n\nconst TRACKING_ENVIRONMENTS = [\"production\", \"development\"] as const;\n\nconst currencySchema = z.enum(SUPPORTED_CURRENCIES);\nconst centsSchema = z.number().int().nonnegative();\nconst quantitySchema = z.string().regex(/^\\d+(\\.\\d{1,3})?$/);\n// Free-form JSON object — the sale's extensibility escape hatch. Mirrors the\n// Pydantic `dict[str, Any]` (`additionalProperties: true`) on the wire.\nconst metadataSchema = z.record(z.unknown());\n\nexport const saleItemSchema = z\n  .object({\n    external_item_id: z.string().nullable().optional(),\n    name: z.string().nullable().optional(),\n    category: z.string().nullable().optional(),\n    quantity: quantitySchema,\n    unit_price_cents: centsSchema,\n    // Non-negativity validated on the wire — same contract as the other cents\n    // fields — and backstopped by the DB CHECK.\n    unit_cost_cents: centsSchema.nullable().optional(),\n  })\n  .strict();\n\n// One service covered by a sale, at its own price. `service` is the per-business\n// service key, validated against the taxonomy by the backend at write time.\nexport const saleServiceSchema = z\n  .object({\n    service: z.string(),\n    amount_cents: centsSchema,\n  })\n  .strict();\n\n// Raw customer identity. Stored as-is on the backend for human display in\n// dashboards; hashing happens at writeback-upload time in the future Google\n// Ads reconciliation worker (see docs/tracking-package/conversion-writeback.md).\n// The SDK never hashes — pass values straight through.\nconst customerNameSchema = z.string().max(200);\nconst customerPhoneSchema = z.string().max(64);\nconst customerEmailSchema = z.string().max(320).email();\n\n// The singular `service` (priced by `amount_total_cents`) and the plural\n// `services` (each priced individually) are mutually exclusive. When `services`\n// is present, `amount_total_cents` is optional and the backend derives it as the\n// sum; otherwise it is required. Shared by create + update.\nfunction refineServiceXor(\n  val: {\n    service?: string | null;\n    services?: ReadonlyArray<{ service: string; amount_cents: number }> | null;\n    amount_total_cents?: number | null;\n  },\n  ctx: z.RefinementCtx,\n  { requireAmount }: { requireAmount: boolean },\n): void {\n  if (val.services != null) {\n    if (val.service != null) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        message: \"pass either `service` or `services`, not both\",\n        path: [\"services\"],\n      });\n    }\n    if (val.services.length === 0) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        message: \"`services` must not be empty\",\n        path: [\"services\"],\n      });\n    }\n    const keys = val.services.map((s) => s.service);\n    if (new Set(keys).size !== keys.length) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        message: \"`services` must not list the same service more than once\",\n        path: [\"services\"],\n      });\n    }\n    if (val.amount_total_cents != null) {\n      const sum = val.services.reduce((acc, s) => acc + s.amount_cents, 0);\n      if (val.amount_total_cents !== sum) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          message:\n            \"amount_total_cents must equal the sum of the services amounts \" +\n            \"(omit it to derive it automatically)\",\n          path: [\"amount_total_cents\"],\n        });\n      }\n    }\n  } else if (requireAmount && val.amount_total_cents == null) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      message: \"amount_total_cents is required unless `services` is provided\",\n      path: [\"amount_total_cents\"],\n    });\n  }\n}\n\nexport const saleCreateSchema = z\n  .object({\n    external_id: z.string().nullable().optional(),\n    description: z.string().nullable().optional(),\n    service: z.string().nullable().optional(),\n    services: z.array(saleServiceSchema).nullable().optional(),\n    currency: currencySchema,\n    // Optional only because the plural `services` form derives it from the sum\n    // (see refineServiceXor); the singular/serviceless path still requires it.\n    amount_total_cents: centsSchema.nullable().optional(),\n    occurred_at: z.string().datetime(),\n    environment: z.enum(TRACKING_ENVIRONMENTS).default(\"production\"),\n    items: z.array(saleItemSchema).default([]),\n    metadata: metadataSchema.nullable().optional(),\n    customer_name: customerNameSchema.nullable().optional(),\n    customer_phone: customerPhoneSchema.nullable().optional(),\n    customer_email: customerEmailSchema.nullable().optional(),\n    // CASL consent attestation: the customer agreed to receive SMS. Recorded\n    // with a timestamp server-side; every SMS send path gates on it.\n    sms_consent: z.boolean().default(false),\n  })\n  .strict()\n  .superRefine((val, ctx) => refineServiceXor(val, ctx, { requireAmount: true }));\n\nexport const saleUpdateSchema = z\n  .object({\n    description: z.string().nullable().optional(),\n    service: z.string().nullable().optional(),\n    services: z.array(saleServiceSchema).nullable().optional(),\n    currency: currencySchema.optional(),\n    amount_total_cents: centsSchema.optional(),\n    occurred_at: z.string().datetime().optional(),\n    items: z.array(saleItemSchema).optional(),\n    metadata: metadataSchema.nullable().optional(),\n    customer_name: customerNameSchema.nullable().optional(),\n    customer_phone: customerPhoneSchema.nullable().optional(),\n    customer_email: customerEmailSchema.nullable().optional(),\n    // NOT NULL server-side: omit to leave unchanged (explicit null is rejected).\n    sms_consent: z.boolean().optional(),\n  })\n  .strict()\n  .superRefine((val, ctx) => refineServiceXor(val, ctx, { requireAmount: false }));\n\nexport type SaleItemInput = z.input<typeof saleItemSchema>;\nexport type SaleServiceInput = z.input<typeof saleServiceSchema>;\n// Use the INPUT type so fields with Zod defaults (environment, items) and\n// occurred_at are optional for callers — the sales client fills them in.\nexport type SaleInput = z.input<typeof saleCreateSchema>;\nexport type SaleUpdateInput = z.input<typeof saleUpdateSchema>;\n\n// ---------------------------------------------------------------------------\n// Read shapes (server responses; not validated on the client)\n// ---------------------------------------------------------------------------\n\nexport interface SaleItem {\n  id: string;\n  external_item_id: string | null;\n  name: string | null;\n  category: string | null;\n  quantity: string;\n  unit_price_cents: number;\n  unit_cost_cents: number | null;\n}\n\nexport interface SaleService {\n  id: string;\n  service_id: string;\n  service_key: string;\n  service_label: string;\n  amount_cents: number;\n}\n\nexport interface Sale {\n  id: string;\n  business_id: string;\n  business_name?: string | null;\n  external_id: string | null;\n  currency: SupportedCurrency;\n  amount_total_cents: number;\n  description: string | null;\n  // Singular service fields are populated only for single-service sales (kept\n  // for backwards compatibility); `services` is always the full set.\n  service_id: string | null;\n  service_key?: string | null;\n  service_label?: string | null;\n  services: SaleService[];\n  occurred_at: string;\n  environment: (typeof TRACKING_ENVIRONMENTS)[number];\n  metadata: Record<string, unknown> | null;\n  customer_name: string | null;\n  customer_phone: string | null;\n  customer_email: string | null;\n  /** CASL consent attestation stored on the sale; SMS send paths gate on it server-side. */\n  sms_consent: boolean;\n  /** Server timestamp for when the consent attestation was recorded. */\n  sms_consent_granted_at: string | null;\n  created_at: string;\n  updated_at: string;\n  items: SaleItem[];\n}\n\nexport interface SaleListPage {\n  items: Sale[];\n  total: number;\n}\n\nexport interface SaleCursorPage {\n  items: Sale[];\n  next_cursor: string | null;\n  /** Populated only when `want_total` was requested (a single indexed COUNT). */\n  total_count?: number;\n  has_more?: boolean;\n}\n\n/**\n * Sortable columns on the secret-key (keyset) and admin (offset) list endpoints.\n * `business_name` only applies to the cross-business admin list — it sorts the\n * joined `businesses.name` column.\n */\nexport type SaleSortField =\n  | \"occurred_at\"\n  | \"created_at\"\n  | \"amount_total_cents\"\n  | \"customer_name\"\n  | \"business_name\";\n\nexport type SaleSortOrder = \"asc\" | \"desc\";\n\n/**\n * Comprehensive filter shape mirrored from the backend's `SaleQueryFilters`.\n *\n * `search` runs case-insensitively across `customer_name`, `customer_phone`,\n * `customer_email`, `description`, and `external_id` — the human-facing\n * columns. `service_id` is the resolved per-business service UUID (different\n * from the create-time `service` *key*).\n */\nexport interface SaleFilters {\n  business_id?: string;\n  external_id?: string;\n  service_id?: string;\n  /** E.164 phone — the canonical customer key; filters sales for one customer. */\n  customer_phone?: string;\n  currency?: SupportedCurrency;\n  environment?: (typeof TRACKING_ENVIRONMENTS)[number];\n  since?: string;\n  until?: string;\n  min_amount_cents?: number;\n  max_amount_cents?: number;\n  search?: string;\n}\n\n/**\n * Full query input for `SalesClient.list()` — filters + pagination.\n *\n * Pagination is **keyset (cursor)**: `next_cursor` returned by one page is\n * passed back as `cursor` on the next. `null` / undefined cursor = first page.\n *\n * Ordering on this endpoint is fixed at **`occurred_at DESC, id DESC`** — the\n * cursor encodes a position in that index, so a different sort would\n * invalidate cursors mid-pagination. For ad-hoc sorted reads use the\n * dashboard admin endpoint, which is offset-paginated.\n */\nexport interface SaleListQuery extends SaleFilters {\n  limit?: number;\n  cursor?: string | null;\n}\n\n/** Keyset-safe sort columns (NOT-NULL, indexed). */\nexport type SaleKeysetSortField = \"occurred_at\" | \"created_at\" | \"amount_total_cents\";\n\n/** v2 list query — adds server sort + opt-in total. */\nexport interface SaleListQueryV2 extends SaleListQuery {\n  sort?: SaleKeysetSortField;\n  order?: SaleSortOrder;\n  /** Opt-in: a single indexed COUNT over the filtered set. */\n  want_total?: boolean;\n}\n\n// ---------------------------------------------------------------------------\n// Sales summary (aggregations). Read by `SalesClient.summary()`. Every monetary\n// figure is grouped **by currency** — USD and CAD cents are never summed into a\n// single total. Money stays integer cents; only `quantity` is a decimal string.\n// ---------------------------------------------------------------------------\n\nexport const TRACKING_RANGES = [\"24h\", \"7d\", \"30d\"] as const;\nexport type TrackingOverviewRange = (typeof TRACKING_RANGES)[number];\n\n/** Query input for `SalesClient.summary()` — filters + range + options. */\nexport interface SaleSummaryQuery extends SaleFilters {\n  range: TrackingOverviewRange;\n  /** Include the per-category line-item breakdown (extra join; default false). */\n  include_categories?: boolean;\n  /** Surface soft-deleted services individually (flagged \"(deleted)\") instead of\n   * rolling them into a single \"Deleted services\" bucket. Default false. */\n  include_deleted_services?: boolean;\n  /** Cap on the by-service / by-category rows (1–50, default 10). */\n  top_n?: number;\n}\n\nexport interface CurrencyRevenue {\n  currency: SupportedCurrency;\n  sale_count: number;\n  revenue_cents: number;\n  average_order_value_cents: number;\n}\n\nexport interface SalesServiceBreakdown {\n  service_id: string | null;\n  service_key: string | null;\n  /** \"Unassigned\" when the sale has no service. */\n  service_label: string | null;\n  currency: SupportedCurrency;\n  sale_count: number;\n  revenue_cents: number;\n}\n\nexport interface SalesCategoryBreakdown {\n  category: string | null;\n  currency: SupportedCurrency;\n  /** sum(unit_price_cents * quantity) — advisory, not authoritative. */\n  revenue_cents: number;\n  /** Decimal string. */\n  quantity: string;\n}\n\nexport interface SalesTrendPoint {\n  bucket_start: string;\n  currency: SupportedCurrency;\n  sale_count: number;\n  revenue_cents: number;\n}\n\nexport interface SaleSummary {\n  range: TrackingOverviewRange;\n  business_id: string | null;\n  metrics: {\n    sale_count: number;\n    distinct_customers: number;\n    by_currency: CurrencyRevenue[];\n  };\n  by_service: SalesServiceBreakdown[];\n  by_currency: CurrencyRevenue[];\n  by_category: SalesCategoryBreakdown[];\n  series: SalesTrendPoint[];\n}\n\n// ---------------------------------------------------------------------------\n// v2 dashboard surface (additive, back-compat). Reads only → plain interfaces,\n// not drift-checked. Legacy `24h/7d/30d` callers get the same numbers; new\n// ranges/options layer on tz-correct calendar windows + comparisons.\n// ---------------------------------------------------------------------------\n\nexport const NAMED_RANGES = [\n  \"today\",\n  \"yesterday\",\n  \"wtd\",\n  \"mtd\",\n  \"qtd\",\n  \"ytd\",\n  \"24h\",\n  \"7d\",\n  \"30d\",\n  \"90d\",\n  \"custom\",\n] as const;\n/** Superset of `TrackingOverviewRange` (`24h`/`7d`/`30d` stay valid). */\nexport type NamedRange = (typeof NAMED_RANGES)[number];\nexport type Granularity = \"hour\" | \"day\" | \"week\" | \"month\" | \"auto\";\nexport type CompareTo = \"previous_period\" | \"previous_year\" | \"none\";\n\nexport interface DistinctCustomersByCurrency {\n  currency: SupportedCurrency;\n  distinct_customers: number;\n}\n\nexport interface SummaryWindow {\n  since: string;\n  until: string;\n}\n\nexport interface SummaryCurrencyDelta {\n  currency: SupportedCurrency;\n  revenue_cents_delta: number;\n  /** Ratio (0.12 = +12%); null when previous revenue was 0. */\n  revenue_pct_delta: number | null;\n  sale_count_delta: number;\n}\n\nexport interface SummaryDeltas {\n  by_currency: SummaryCurrencyDelta[];\n  sale_count_delta: number;\n  distinct_customers_delta: number;\n}\n\nexport interface SaleSummaryPrevious {\n  window: SummaryWindow;\n  metrics: SaleSummaryV2[\"metrics\"];\n  by_currency: CurrencyRevenue[];\n  series: SalesTrendPoint[];\n}\n\n/** Query input for `SalesClient.summary()` v2 — widened range + tz/compare options. */\nexport interface SaleSummaryQueryV2 extends SaleFilters {\n  range?: NamedRange;\n  /** Required when `range === 'custom'`. */\n  since?: string;\n  until?: string;\n  /** IANA tz, e.g. `America/Toronto`. Default = business tz. */\n  timezone?: string;\n  granularity?: Granularity;\n  compare_to?: CompareTo;\n  include_categories?: boolean;\n  include_deleted_services?: boolean;\n  top_n?: number;\n}\n\n/** Superset of `SaleSummary` (assignable to it). */\nexport interface SaleSummaryV2 extends Omit<SaleSummary, \"range\" | \"metrics\"> {\n  range: NamedRange;\n  metrics: SaleSummary[\"metrics\"] & {\n    distinct_customers_by_currency: DistinctCustomersByCurrency[];\n  };\n  timezone: string | null;\n  window: SummaryWindow | null;\n  granularity: string | null;\n  previous: SaleSummaryPrevious | null;\n  deltas: SummaryDeltas | null;\n}\n\n// ---------------------------------------------------------------------------\n// Customers — phone-keyed (a customer IS their E.164 phone). `customer_id` is\n// the E.164 string. Money is per-currency, never summed.\n// ---------------------------------------------------------------------------\n\nexport type CustomerSegment = \"new\" | \"returning\" | \"repeat\" | \"lapsed\";\nexport type CustomerSortField = \"total_spent\" | \"last_purchase\" | \"purchases\" | \"first_purchase\";\n\nexport interface CustomerCurrencyTotal {\n  currency: SupportedCurrency;\n  revenue_cents: number;\n  sale_count: number;\n  average_order_value_cents: number;\n}\n\nexport interface CustomerSummary {\n  /** The E.164 phone — the canonical customer id. */\n  customer_id: string;\n  display_name: string | null;\n  email: string | null;\n  phone: string;\n  first_purchase_at: string;\n  last_purchase_at: string;\n  purchase_count: number;\n  segment: CustomerSegment;\n  totals: CustomerCurrencyTotal[];\n}\n\nexport type CustomerProfile = CustomerSummary;\n\nexport interface CustomerListQuery extends Omit<SaleFilters, \"external_id\"> {\n  segment?: CustomerSegment;\n  sort?: CustomerSortField;\n  order?: SaleSortOrder;\n  cursor?: string | null;\n  limit?: number;\n  want_total?: boolean;\n}\n\nexport interface CustomerListPage {\n  items: CustomerSummary[];\n  next_cursor: string | null;\n  total_count: number | null;\n}\n\nexport interface CustomerGetOptions {\n  include_sales?: boolean;\n  limit?: number;\n  cursor?: string | null;\n}\n\nexport interface CustomerGetResult {\n  customer: CustomerProfile;\n  /** Present only when `include_sales: true` (and a business-scoped key). */\n  sales?: SaleCursorPage | null;\n}\n\nexport interface CustomerSummaryQuery extends SaleFilters {\n  range?: NamedRange;\n  since?: string;\n  until?: string;\n  timezone?: string;\n  compare_to?: CompareTo;\n}\n\nexport interface CustomerSegmentCount {\n  segment: CustomerSegment;\n  count: number;\n}\n\nexport interface CustomerCurrencyDelta {\n  currency: SupportedCurrency;\n  revenue_cents_delta: number;\n  /** Ratio (0.12 = +12%); null when previous revenue was 0. */\n  revenue_pct_delta: number | null;\n}\n\nexport interface CustomerKpisDeltas {\n  total_customers_delta: number;\n  new_customers_delta: number;\n  returning_customers_delta: number;\n  repeat_rate_delta: number;\n  ltv_by_currency: CustomerCurrencyDelta[];\n}\n\nexport interface CustomerKpisPrevious {\n  window_since: string;\n  window_until: string;\n  total_customers: number;\n  new_customers: number;\n  returning_customers: number;\n  repeat_rate: number;\n  ltv_by_currency: CustomerCurrencyTotal[];\n}\n\nexport interface CustomerKpis {\n  range: NamedRange;\n  timezone: string;\n  window_since: string;\n  window_until: string;\n  total_customers: number;\n  new_customers: number;\n  returning_customers: number;\n  repeat_rate: number;\n  by_segment: CustomerSegmentCount[];\n  ltv_by_currency: CustomerCurrencyTotal[];\n  /** Present only when `compare_to` is set. */\n  previous?: CustomerKpisPrevious | null;\n  deltas?: CustomerKpisDeltas | null;\n}\n\n// ---------------------------------------------------------------------------\n// Business config — supersets `fetchServices()`.\n// ---------------------------------------------------------------------------\n\nexport interface BusinessConfigService {\n  key: string;\n  label: string;\n  archived: boolean;\n}\n\nexport interface BusinessConfigFeatures {\n  customers: boolean;\n  comparisons: boolean;\n  retention: boolean;\n}\n\nexport interface BusinessConfig {\n  business_id: string;\n  display_name: string;\n  timezone: string;\n  primary_currency: SupportedCurrency;\n  currencies: SupportedCurrency[];\n  default_phone_country: string | null;\n  services: BusinessConfigService[];\n  features: BusinessConfigFeatures;\n}\n","import { salesRequest, type SalesTransportConfig } from \"./sales/transport\";\n\n/** A business's active service, as returned by `GET /tracking/services`. */\nexport interface PublicServiceItem {\n  key: string;\n  label: string;\n}\n\n/**\n * Fetch the caller's business's active service taxonomy. Accepts a public or\n * secret key (the taxonomy is low-sensitivity category names). Powers the\n * `@aranova/tracking-cli gen` codegen.\n */\nexport async function fetchServices(config: SalesTransportConfig): Promise<PublicServiceItem[]> {\n  return salesRequest<PublicServiceItem[]>(config, \"GET\", \"/services\");\n}\n"],"mappings":";AAIA,SAAS,WAAW,kCAAoD;AA4BjE,IAAM,wBAAqC;AAG3C,SAAS,WAAW,KAAa,SAAoC;AAC1E,QAAM,SAAS,WAAW;AAC1B,QAAM,SAAS,2BAA2B,OAAO,IAAI,MAAM;AAC3D,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,MAAM,MAAM,UAAU,IAAI,eAAe,IAAI,SAAS,QAAQ,SAAS,MAAM;AAAA,EACxF;AACA,QAAM,UAAU,OAAO,QAAQ;AAC/B,SAAO;AAAA;AAAA;AAAA,IAGL,MAAM,UAAU,OAAO,SAAS;AAAA,IAChC,UAAU,OAAO,eAAe;AAAA,IAChC,eAAe,OAAO,oBAAoB;AAAA,IAC1C,SAAS,OAAO,WAAW;AAAA,IAC3B;AAAA,EACF;AACF;AAGO,SAAS,OAAO,KAAa,SAAsC;AACxE,SAAO,WAAW,KAAK,OAAO,EAAE;AAClC;;;AClBA,IAAM,cAAc;AAOpB,IAAI,QAA4B,EAAE,OAAO,MAAM,aAAa,KAAK;AAO1D,SAAS,eAAe,KAA6B;AAC1D,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,UAAU,IAAI,KAAK,EAAE,YAAY;AACvC,SAAO,YAAY,KAAK,OAAO,IAAI,UAAU;AAC/C;AAqDO,SAAS,cAAc,MAA0B,SAA6B;AACnF,QAAM,QAAQ,eAAe,KAAK,KAAK;AACvC,MAAI,cAA6B;AACjC,MAAI,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,SAAS,GAAG;AAC3D,QAAI;AACF,oBAAc,OAAO,KAAK,OAAO,OAAO;AAAA,IAC1C,QAAQ;AACN,oBAAc;AAAA,IAChB;AAAA,EACF;AACA,UAAQ;AAAA,IACN,OAAO,SAAS,MAAM;AAAA,IACtB,aAAa,eAAe,MAAM;AAAA,EACpC;AACF;AAkCO,SAAS,2BACd,UACA,SACS;AACT,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,SAAS,WAAY,QAAO;AAC/E,MAAI,QAAQ,MAAM;AAClB,MAAI,cAAc,MAAM;AACxB,MAAI,UAAU;AACZ,UAAM,kBAAkB,eAAe,SAAS,KAAK;AACrD,QAAI,gBAAiB,SAAQ;AAC7B,QAAI,OAAO,SAAS,UAAU,YAAY,SAAS,MAAM,SAAS,GAAG;AACnE,UAAI;AACF,sBAAc,OAAO,SAAS,OAAO,OAAO,KAAK;AAAA,MACnD,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACA,MAAI,UAAU,QAAQ,gBAAgB,KAAM,QAAO;AACnD,MAAI;AACF,WAAO,KAAK,OAAO,aAAa;AAAA,MAC9B,GAAI,UAAU,OAAO,EAAE,MAAM,IAAI,CAAC;AAAA,MAClC,GAAI,gBAAgB,OAAO,EAAE,cAAc,YAAY,IAAI,CAAC;AAAA,IAC9D,CAAC;AACD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACnLO,IAAM,oBAAoB;AAK1B,IAAM,wBAAwB;AAU9B,IAAM,yBAAyB;AAM/B,IAAM,2BAA2B;AAExC,IAAM,SAAS;AA6Cf,IAAM,iBAAgC;AAAA,EACpC,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,WAAW;AACb;AAmDO,SAAS,mBAAkC;AAChD,MAAI,OAAO,WAAW,YAAa,QAAO;AAE1C,MAAI;AACF,UAAM,SAAS,OAAO,aAAa,QAAQ,iBAAiB;AAC5D,UAAM,YAAY,OAAO,aAAa,QAAQ,qBAAqB;AAEnE,QAAI,WAAW;AACb,aAAO,EAAE,OAAO,WAAW,QAAQ,YAAY,WAAW,WAAW,KAAK;AAE5E,QAAI,WAAW,UAAU;AACvB,UAAI,YAAY,OAAO,aAAa,QAAQ,sBAAsB;AAClE,UAAI,CAAC,WAAW;AACd,oBAAY,IAAI,KAAK,KAAK,IAAI,IAAI,2BAA2B,MAAM,EAAE,YAAY;AACjF,YAAI;AACF,iBAAO,aAAa,QAAQ,wBAAwB,SAAS;AAAA,QAC/D,QAAQ;AAAA,QAER;AAAA,MACF;AAIA,UAAI,EAAE,KAAK,MAAM,SAAS,KAAK,KAAK,IAAI;AACtC,eAAO,EAAE,OAAO,UAAU,QAAQ,YAAY,WAAW,UAAU;AAAA,IACvE;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,SAAO;AACT;AASO,SAAS,kBAAgC;AAC9C,SAAO,iBAAiB,EAAE;AAC5B;;;ACnDA,IAAM,aAAa;AAGZ,SAAS,cAAc,QAAyB;AACrD,SAAO,WAAW,KAAK,MAAM;AAC/B;AAkBO,SAAS,mBAAmB,OAAqC;AACtE,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,SAAS,WAAY,QAAO;AAC/E,MAAI,CAAC,cAAc,MAAM,MAAM,EAAG,QAAO;AACzC,QAAM,SAAkC,EAAE,SAAS,MAAM,OAAO;AAChE,MAAI,MAAM,SAAS,KAAM,QAAO,QAAQ,MAAM;AAC9C,MAAI,MAAM,SAAU,QAAO,WAAW,MAAM;AAC5C,MAAI,MAAM,cAAe,QAAO,iBAAiB,MAAM;AACvD,MAAI;AACF,WAAO,KAAK,SAAS,cAAc,MAAM;AACzC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AChJA,IAAM,eAAe;AAIrB,SAAS,SAAS,OAAoC;AACpD,SAAO,GAAG,YAAY,GAAG,MAAM,iBAAiB,EAAE,IAAI,MAAM,MAAM;AACpE;AAMA,SAAS,aAAa,OAAqC;AACzD,MAAI,CAAC,MAAM,iBAAiB,OAAO,WAAW,YAAa,QAAO;AAClE,MAAI;AACF,WAAO,OAAO,eAAe,QAAQ,SAAS,KAAK,CAAC,MAAM;AAAA,EAC5D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,OAAkC;AACnD,MAAI,CAAC,MAAM,iBAAiB,OAAO,WAAW,YAAa;AAC3D,MAAI;AACF,WAAO,eAAe,QAAQ,SAAS,KAAK,GAAG,GAAG;AAAA,EACpD,QAAQ;AAAA,EAER;AACF;AAgBO,SAAS,0BACd,OACA,SACuB;AACvB,MAAI,gBAAgB,MAAM,SAAU,QAAO;AAC3C,MAAI,aAAa,KAAK,EAAG,QAAO;AAChC,MAAI,CAAC,cAAc,MAAM,MAAM,EAAG,QAAO;AACzC,MAAI;AACF,+BAA2B,SAAS,QAAQ;AAC5C,QAAI,CAAC,mBAAmB,KAAK,EAAG,QAAO;AACvC,cAAU,KAAK;AACf,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACxEA,SAAS,SAAS;AASX,IAAM,yBAAyB,EACnC,OAAO;AAAA,EACN,MAAM,EACH,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,MAAM,EAAE,OAAO;AAAA,IACf,QAAQ,EAAE,OAAO;AAAA,IACjB,MAAM,EAAE,OAAO;AAAA,EACjB,CAAC,EACA,OAAO;AAAA,EACV,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAI9B,UAAU,EACP,OAAO;AAAA,IACN,GAAG,EAAE,OAAO;AAAA,IACZ,GAAG,EAAE,OAAO;AAAA,EACd,CAAC,EACA,OAAO,EACP,SAAS,EACT,SAAS;AACd,CAAC,EACA,OAAO;AAUH,IAAM,uBAAuB,EAAE,OAAO,CAAC,CAAC,EAAE,OAAO;;;AClBjD,IAAM,kBAAkB,KAAK,KAAK;;;ACsBlC,IAAM,iBAAiB;AAOvB,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,yBAAyB;;;ACnD/B,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAKzC,YAAY,SAAiB,SAAgE;AAC3F,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS,QAAQ;AACtB,SAAK,OAAO,QAAQ;AACpB,SAAK,YAAY,QAAQ;AAAA,EAC3B;AACF;;;ACQA,SAAS,gBAAgB,QAAsD;AAC7E,QAAM,UAAkC,EAAE,CAAC,cAAc,GAAG,OAAO,OAAO;AAC1E,MAAI,OAAO,WAAY,SAAQ,kBAAkB,IAAI,OAAO;AAC5D,MAAI,OAAO,YAAa,SAAQ,kBAAkB,IAAI,OAAO;AAC7D,MAAI,OAAO,QAAS,SAAQ,kBAAkB,IAAI,OAAO;AACzD,MAAI,OAAO,YAAa,SAAQ,sBAAsB,IAAI,OAAO;AACjE,SAAO;AACT;AAEA,SAAS,QAAQ,UAAkB,MAAsB;AACvD,SAAO,GAAG,SAAS,QAAQ,OAAO,EAAE,CAAC,GAAG,IAAI;AAC9C;AAOA,eAAsB,aACpB,QACA,QACA,MACA,MACY;AACZ,QAAM,UAAU,gBAAgB,MAAM;AACtC,MAAI,SAAS,OAAW,SAAQ,cAAc,IAAI;AAElD,QAAM,WAAW,MAAM,MAAM,QAAQ,OAAO,UAAU,IAAI,GAAG;AAAA,IAC3D;AAAA,IACA;AAAA,IACA,MAAM,SAAS,SAAY,SAAY,KAAK,UAAU,IAAI;AAAA,EAC5D,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,QAAI;AACJ,QAAI;AACJ,QAAI;AACF,YAAM,SAAkB,MAAM,SAAS,KAAK;AAC5C,UAAI,UAAU,OAAO,WAAW,UAAU;AACxC,cAAM,SAAS;AACf,YAAI,OAAO,OAAO,WAAW,SAAU,UAAS,OAAO;AACvD,YAAI,OAAO,OAAO,SAAS,SAAU,QAAO,OAAO;AAAA,MACrD;AAAA,IACF,QAAQ;AAAA,IAER;AACA,UAAM,IAAI,gBAAgB,UAAU,SAAS,cAAc,kBAAkB;AAAA,MAC3E,QAAQ,SAAS;AAAA,MACjB;AAAA,MACA,WAAW,SAAS,QAAQ,IAAI,cAAc,KAAK;AAAA,IACrD,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,WAAW,IAAK,QAAO;AACpC,SAAQ,MAAM,SAAS,KAAK;AAC9B;;;ACrEA,IAAM,sBAAyD;AAAA,EAC7D,KAAK;AAAA,EACL,KAAK;AACP;AAEA,SAAS,YAAY,UAAqC;AACxD,SAAO,oBAAoB,QAAQ,KAAK;AAC1C;AAUO,SAAS,QAAQ,QAAgB,UAAqC;AAC3E,SAAO,KAAK,MAAM,SAAS,MAAM,YAAY,QAAQ,CAAC;AACxD;AAGO,SAAS,UAAU,OAAe,UAAqC;AAC5E,SAAO,QAAQ,MAAM,YAAY,QAAQ;AAC3C;AAMO,SAAS,YAAY,OAAe,UAA6B,QAAyB;AAC/F,SAAO,IAAI,KAAK,aAAa,QAAQ,EAAE,OAAO,YAAY,SAAS,CAAC,EAAE;AAAA,IACpE,UAAU,OAAO,QAAQ;AAAA,EAC3B;AACF;AAOO,SAAS,eACd,KACA,UACA,MACA,QACQ;AACR,QAAM,OAAO,IAAI,KAAK,GAAG;AAEzB,MAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,EAAG,QAAO;AACzC,SAAO,IAAI,KAAK,eAAe,QAAQ;AAAA,IACrC,MAAM;AAAA,IACN,OAAO;AAAA,IACP,KAAK;AAAA,IACL,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,GAAG;AAAA,IACH;AAAA,EACF,CAAC,EAAE,OAAO,IAAI;AAChB;;;AC5BA,SAAS,wBACP,QACA,OAMA,UACA,MACA,UACM;AACN,MAAI,CAAC,OAAQ;AAIb,QAAM,WACJ,MAAM,kBAAkB,MAAM,iBAC1B,EAAE,OAAO,MAAM,kBAAkB,MAAM,OAAO,MAAM,kBAAkB,KAAK,IAC3E;AAGN,MAAI,YAAY,gBAAgB,MAAM,SAAU,eAAc,QAAQ;AACtE,QAAM,UAAU,MAAM,eAAe,KAAK;AAC1C,aAAW,QAAQ,UAAU;AAC3B,QAAI,CAAC,KAAK,QAAS;AACnB,QAAI,oBAAoB,QAAQ;AAC9B,aAAO,eAAe,KAAK,SAAS;AAAA,QAClC,OAAO,KAAK,gBAAgB,OAAO,UAAU,KAAK,cAAc,QAAQ,IAAI;AAAA,QAC5E;AAAA,QACA,eAAe,GAAG,OAAO,IAAI,KAAK,OAAO;AAAA,MAC3C,CAAC;AACD;AAAA,IACF;AACA,UAAM,SAAS,OAAO,UAAU,KAAK,OAAO;AAC5C,QAAI,CAAC,OAAQ;AACb,UAAM,QAAQ,KAAK,gBAAgB,OAAO,eAAe;AACzD;AAAA,MACE;AAAA,QACE,QAAQ,OAAO;AAAA,QACf,OAAO,SAAS,OAAO,UAAU,OAAO,QAAQ,IAAI;AAAA,QACpD,UAAU,OAAO,YAAY;AAAA,QAC7B,eAAe,GAAG,OAAO,IAAI,KAAK,OAAO;AAAA,MAC3C;AAAA,MACA,EAAE,SAAS;AAAA,IACb;AAAA,EACF;AACF;AAoGO,SAAS,kBAGd,QAA+D;AAG/D,iBAAe,OAAO,OAAmC;AACvD,UAAM,WAAW,MAAM,YAAY,OAAO;AAC1C,QAAI,CAAC,UAAU;AACb,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAM,OAAkB;AAAA,MACtB,GAAG;AAAA,MACH;AAAA,MACA,aAAa,MAAM,gBAAe,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC3D;AACA,UAAM,OAAO,MAAM,aAAmB,QAAQ,QAAQ,UAAU,IAAI;AAGpE,UAAM,WAAW,MAAM,UAAU,SAC7B,MAAM,SAAS,IAAI,CAAC,OAAO;AAAA,MACzB,SAAS,EAAE;AAAA,MACX,cAAc,EAAE;AAAA,IAClB,EAAE,IACF;AAAA,MACE;AAAA,QACE,SAAS,MAAM;AAAA,QACf,cAAc,MAAM,sBAAsB;AAAA,MAC5C;AAAA,IACF;AACJ,4BAAwB,OAAO,QAAQ,OAAO,UAAU,MAAM,QAAQ;AACtE,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL;AAAA;AAAA,IAEA,YAAY;AAAA,IAEZ,gBAAgB,KAAK,SAAS;AAG5B,UAAI,OAAO,UAAU,oBAAoB,OAAO,QAAQ;AAItD,YAAI,SAAS,YAAY,gBAAgB,MAAM,SAAU,eAAc,QAAQ,QAAQ;AACvF,eAAO,OAAO,eAAe,KAAK;AAAA,UAChC,OAAO,SAAS,SAAS;AAAA,UACzB,UAAU,SAAS,YAAY,OAAO,mBAAmB;AAAA,UACzD,eAAe,SAAS,iBAAiB;AAAA,QAC3C,CAAC;AACD;AAAA,MACF;AACA,YAAM,SAAS,OAAO,QAAQ,UAAU,GAAG;AAC3C,UAAI,CAAC,OAAQ;AACb,YAAM,WAAW,OAAO,YAAY,SAAS,YAAY,OAAO,mBAAmB;AACnF,YAAM,QAAQ,OAAO,eAAe;AACpC,YAAM,QACJ,SAAS,UACR,SAAS,QAAQ,WAAW,UAAU,OAAO,QAA6B,IAAI;AACjF;AAAA,QACE;AAAA,UACE,QAAQ,OAAO;AAAA,UACf;AAAA,UACA;AAAA,UACA,eAAe,SAAS,iBAAiB;AAAA,QAC3C;AAAA,QACA,EAAE,UAAU,SAAS,SAAS;AAAA,MAChC;AAAA,IACF;AAAA,IAEA,MAAM,KAAK,OAAO;AAEhB,YAAM,EAAE,QAAQ,OAAO,MAAM,OAAO,YAAY,GAAG,QAAQ,IAAI,SAAS,CAAC;AACzE,aAAO,aAA6B,QAAQ,QAAQ,gBAAgB;AAAA,QAClE;AAAA,QACA,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,QACvC,GAAI,WAAW,SAAY,EAAE,OAAO,IAAI,CAAC;AAAA,QACzC,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,QACrC,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,QACvC,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACnD,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,QAAQ,OAAO;AACnB,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAG;AAAA,MACL,IAAI;AACJ,aAAO,aAA4B,QAAQ,QAAQ,kBAAkB;AAAA,QACnE;AAAA,QACA,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,QACvC,GAAI,uBAAuB,SAAY,EAAE,mBAAmB,IAAI,CAAC;AAAA,QACjE,GAAI,6BAA6B,SAAY,EAAE,yBAAyB,IAAI,CAAC;AAAA,QAC7E,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,QACvC,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,QACvC,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,QACvC,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,QAC7C,GAAI,gBAAgB,SAAY,EAAE,YAAY,IAAI,CAAC;AAAA,QACnD,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACnD,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,IAAI,IAAI;AACZ,aAAO,aAAmB,QAAQ,OAAO,UAAU,EAAE,EAAE;AAAA,IACzD;AAAA,IAEA,MAAM,OAAO,IAAI,OAAO;AACtB,aAAO,aAAmB,QAAQ,SAAS,UAAU,EAAE,IAAI,KAAK;AAAA,IAClE;AAAA,IAEA,MAAM,OAAO,IAAI;AACf,YAAM,aAAmB,QAAQ,UAAU,UAAU,EAAE,EAAE;AAAA,IAC3D;AAAA,IAEA,WAAW;AAAA,MACT,MAAM,KAAK,OAAO;AAChB,cAAM,EAAE,SAAS,MAAM,OAAO,QAAQ,OAAO,YAAY,GAAG,QAAQ,IAAI,SAAS,CAAC;AAClF,eAAO,aAA+B,QAAQ,QAAQ,oBAAoB;AAAA,UACxE;AAAA,UACA,GAAI,YAAY,SAAY,EAAE,QAAQ,IAAI,CAAC;AAAA,UAC3C,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,UACrC,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,UACvC,GAAI,WAAW,SAAY,EAAE,OAAO,IAAI,CAAC;AAAA,UACzC,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,UACvC,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,QACnD,CAAC;AAAA,MACH;AAAA,MACA,MAAM,IAAI,IAAI,SAAS;AACrB,cAAM,SAAS,IAAI,gBAAgB;AACnC,YAAI,SAAS,kBAAkB;AAC7B,iBAAO,IAAI,iBAAiB,OAAO,QAAQ,aAAa,CAAC;AAC3D,YAAI,SAAS,UAAU,OAAW,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC3E,YAAI,SAAS,UAAU,KAAM,QAAO,IAAI,UAAU,QAAQ,MAAM;AAChE,cAAM,KAAK,OAAO,SAAS;AAE3B,eAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA,cAAc,mBAAmB,EAAE,CAAC,GAAG,KAAK,IAAI,EAAE,KAAK,EAAE;AAAA,QAC3D;AAAA,MACF;AAAA,MACA,MAAM,QAAQ,OAAO;AACnB,cAAM,EAAE,OAAO,OAAO,OAAO,UAAU,YAAY,GAAG,QAAQ,IAAI,SAAS,CAAC;AAC5E,eAAO,aAA2B,QAAQ,QAAQ,sBAAsB;AAAA,UACtE;AAAA,UACA,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,UACvC,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,UACvC,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,UACvC,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,UAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,QACnD,CAAC;AAAA,MACH;AAAA,IACF;AAAA,IAEA,UAAU;AAAA,MACR,MAAM,SAAS;AACb,eAAO,aAA6B,QAAQ,OAAO,kBAAkB;AAAA,MACvE;AAAA,IACF;AAAA,EACF;AACF;;;ACzWA,SAAS,KAAAA,UAAS;AAaX,IAAM,uBAAuB,CAAC,OAAO,KAAK;AAGjD,IAAM,wBAAwB,CAAC,cAAc,aAAa;AAE1D,IAAM,iBAAiBA,GAAE,KAAK,oBAAoB;AAClD,IAAM,cAAcA,GAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AACjD,IAAM,iBAAiBA,GAAE,OAAO,EAAE,MAAM,mBAAmB;AAG3D,IAAM,iBAAiBA,GAAE,OAAOA,GAAE,QAAQ,CAAC;AAEpC,IAAM,iBAAiBA,GAC3B,OAAO;AAAA,EACN,kBAAkBA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,MAAMA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,UAAUA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,UAAU;AAAA,EACV,kBAAkB;AAAA;AAAA;AAAA,EAGlB,iBAAiB,YAAY,SAAS,EAAE,SAAS;AACnD,CAAC,EACA,OAAO;AAIH,IAAM,oBAAoBA,GAC9B,OAAO;AAAA,EACN,SAASA,GAAE,OAAO;AAAA,EAClB,cAAc;AAChB,CAAC,EACA,OAAO;AAMV,IAAM,qBAAqBA,GAAE,OAAO,EAAE,IAAI,GAAG;AAC7C,IAAM,sBAAsBA,GAAE,OAAO,EAAE,IAAI,EAAE;AAC7C,IAAM,sBAAsBA,GAAE,OAAO,EAAE,IAAI,GAAG,EAAE,MAAM;AAMtD,SAAS,iBACP,KAKA,KACA,EAAE,cAAc,GACV;AACN,MAAI,IAAI,YAAY,MAAM;AACxB,QAAI,IAAI,WAAW,MAAM;AACvB,UAAI,SAAS;AAAA,QACX,MAAMA,GAAE,aAAa;AAAA,QACrB,SAAS;AAAA,QACT,MAAM,CAAC,UAAU;AAAA,MACnB,CAAC;AAAA,IACH;AACA,QAAI,IAAI,SAAS,WAAW,GAAG;AAC7B,UAAI,SAAS;AAAA,QACX,MAAMA,GAAE,aAAa;AAAA,QACrB,SAAS;AAAA,QACT,MAAM,CAAC,UAAU;AAAA,MACnB,CAAC;AAAA,IACH;AACA,UAAM,OAAO,IAAI,SAAS,IAAI,CAAC,MAAM,EAAE,OAAO;AAC9C,QAAI,IAAI,IAAI,IAAI,EAAE,SAAS,KAAK,QAAQ;AACtC,UAAI,SAAS;AAAA,QACX,MAAMA,GAAE,aAAa;AAAA,QACrB,SAAS;AAAA,QACT,MAAM,CAAC,UAAU;AAAA,MACnB,CAAC;AAAA,IACH;AACA,QAAI,IAAI,sBAAsB,MAAM;AAClC,YAAM,MAAM,IAAI,SAAS,OAAO,CAAC,KAAK,MAAM,MAAM,EAAE,cAAc,CAAC;AACnE,UAAI,IAAI,uBAAuB,KAAK;AAClC,YAAI,SAAS;AAAA,UACX,MAAMA,GAAE,aAAa;AAAA,UACrB,SACE;AAAA,UAEF,MAAM,CAAC,oBAAoB;AAAA,QAC7B,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF,WAAW,iBAAiB,IAAI,sBAAsB,MAAM;AAC1D,QAAI,SAAS;AAAA,MACX,MAAMA,GAAE,aAAa;AAAA,MACrB,SAAS;AAAA,MACT,MAAM,CAAC,oBAAoB;AAAA,IAC7B,CAAC;AAAA,EACH;AACF;AAEO,IAAM,mBAAmBA,GAC7B,OAAO;AAAA,EACN,aAAaA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,aAAaA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,SAASA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,UAAUA,GAAE,MAAM,iBAAiB,EAAE,SAAS,EAAE,SAAS;AAAA,EACzD,UAAU;AAAA;AAAA;AAAA,EAGV,oBAAoB,YAAY,SAAS,EAAE,SAAS;AAAA,EACpD,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAaA,GAAE,KAAK,qBAAqB,EAAE,QAAQ,YAAY;AAAA,EAC/D,OAAOA,GAAE,MAAM,cAAc,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzC,UAAU,eAAe,SAAS,EAAE,SAAS;AAAA,EAC7C,eAAe,mBAAmB,SAAS,EAAE,SAAS;AAAA,EACtD,gBAAgB,oBAAoB,SAAS,EAAE,SAAS;AAAA,EACxD,gBAAgB,oBAAoB,SAAS,EAAE,SAAS;AAAA;AAAA;AAAA,EAGxD,aAAaA,GAAE,QAAQ,EAAE,QAAQ,KAAK;AACxC,CAAC,EACA,OAAO,EACP,YAAY,CAAC,KAAK,QAAQ,iBAAiB,KAAK,KAAK,EAAE,eAAe,KAAK,CAAC,CAAC;AAEzE,IAAM,mBAAmBA,GAC7B,OAAO;AAAA,EACN,aAAaA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,SAASA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACxC,UAAUA,GAAE,MAAM,iBAAiB,EAAE,SAAS,EAAE,SAAS;AAAA,EACzD,UAAU,eAAe,SAAS;AAAA,EAClC,oBAAoB,YAAY,SAAS;AAAA,EACzC,aAAaA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,OAAOA,GAAE,MAAM,cAAc,EAAE,SAAS;AAAA,EACxC,UAAU,eAAe,SAAS,EAAE,SAAS;AAAA,EAC7C,eAAe,mBAAmB,SAAS,EAAE,SAAS;AAAA,EACtD,gBAAgB,oBAAoB,SAAS,EAAE,SAAS;AAAA,EACxD,gBAAgB,oBAAoB,SAAS,EAAE,SAAS;AAAA;AAAA,EAExD,aAAaA,GAAE,QAAQ,EAAE,SAAS;AACpC,CAAC,EACA,OAAO,EACP,YAAY,CAAC,KAAK,QAAQ,iBAAiB,KAAK,KAAK,EAAE,eAAe,MAAM,CAAC,CAAC;AA+I1E,IAAM,kBAAkB,CAAC,OAAO,MAAM,KAAK;AAoE3C,IAAM,eAAe;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;;;AC3WA,eAAsB,cAAc,QAA4D;AAC9F,SAAO,aAAkC,QAAQ,OAAO,WAAW;AACrE;","names":["z"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aranova/tracking-react",
-  "version": "0.19.0",
+  "version": "0.19.1",
   "private": false,
   "type": "commonjs",
   "description": "React tracking and consent utilities for Aranova client sites",