@casoon/trackr 0.1.0

package/LICENSE

@@ -0,0 +1,165 @@
+                   GNU LESSER GENERAL PUBLIC LICENSE
+                       Version 3, 29 June 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+
+  This version of the GNU Lesser General Public License incorporates
+the terms and conditions of version 3 of the GNU General Public
+License, supplemented by the additional permissions listed below.
+
+  0. Additional Definitions.
+
+  As used herein, "this License" refers to version 3 of the GNU Lesser
+General Public License, and the "GNU GPL" refers to version 3 of the GNU
+General Public License.
+
+  "The Library" refers to a covered work governed by this License,
+other than an Application or a Combined Work as defined below.
+
+  An "Application" is any work that makes use of an interface provided
+by the Library, but which is not otherwise based on the Library.
+Defining a subclass of a class defined by the Library is deemed a mode
+of using an interface provided by the Library.
+
+  A "Combined Work" is a work produced by combining or linking an
+Application with the Library.  The particular version of the Library
+with which the Combined Work was made is also called the "Linked
+Version".
+
+  The "Minimal Corresponding Source" for a Combined Work means the
+Corresponding Source for the Combined Work, excluding any source code
+for portions of the Combined Work that, considered in isolation, are
+based on the Application, and not on the Linked Version.
+
+  The "Corresponding Application Code" for a Combined Work means the
+object code and/or source code for the Application, including any data
+and utility programs needed for reproducing the Combined Work from the
+Application, but excluding the System Libraries of the Combined Work.
+
+  1. Exception to Section 3 of the GNU GPL.
+
+  You may convey a covered work under sections 3 and 4 of this License
+without being bound by section 3 of the GNU GPL.
+
+  2. Conveying Modified Versions.
+
+  If you modify a copy of the Library, and, in your modifications, a
+facility refers to a function or data to be supplied by an Application
+that uses the facility (other than as an argument passed when the
+facility is invoked), then you may convey a copy of the modified
+version:
+
+   a) under this License, provided that you make a good faith effort to
+   ensure that, in the event an Application does not supply the
+   function or data, the facility still operates, and performs
+   whatever part of its purpose remains meaningful, or
+
+   b) under the GNU GPL, with none of the additional permissions of
+   this License applicable to that copy.
+
+  3. Object Code Incorporating Material from Library Header Files.
+
+  The object code form of an Application may incorporate material from
+a header file that is part of the Library.  You may convey such object
+code under terms of your choice, provided that, if the incorporated
+material is not limited to numerical parameters, data structure
+layouts and accessors, or small macros, inline functions and templates
+(ten or fewer lines in length), you do both of the following:
+
+   a) Give prominent notice with each copy of the object code that the
+   Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the object code with a copy of the GNU GPL and this license
+   document.
+
+  4. Combined Works.
+
+  You may convey a Combined Work under terms of your choice that,
+taken together, effectively do not restrict modification of the
+portions of the Library contained in the Combined Work and reverse
+engineering for debugging such modifications, if you also do each of
+the following:
+
+   a) Give prominent notice with each copy of the Combined Work that
+   the Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the Combined Work with a copy of the GNU GPL and this license
+   document.
+
+   c) For a Combined Work that displays copyright notices during
+   execution, include the copyright notice for the Library among
+   these notices, as well as a reference directing the user to the
+   copies of the GNU GPL and this license document.
+
+   d) Do one of the following:
+
+       0) Convey the Minimal Corresponding Source under the terms of this
+       License, and the Corresponding Application Code in a form
+       suitable for, and under terms that permit, the user to
+       recombine or relink the Application with a modified version of
+       the Linked Version to produce a modified Combined Work, in the
+       manner specified by section 6 of the GNU GPL for conveying
+       Corresponding Source.
+
+       1) Use a suitable shared library mechanism for linking with the
+       Library.  A suitable mechanism is one that (a) uses at run time
+       a copy of the Library already present on the user's computer
+       system, and (b) will operate properly with a modified version
+       of the Library that is interface-compatible with the Linked
+       Version.
+
+   e) Provide Installation Information, but only if you would otherwise
+   be required to provide such information under section 6 of the
+   GNU GPL, and only to the extent that such information is
+   necessary to install and execute a modified version of the
+   Combined Work produced by recombining or relinking the
+   Application with a modified version of the Linked Version. (If
+   you use option 4d0, the Installation Information must accompany
+   the Minimal Corresponding Source and Corresponding Application
+   Code. If you use option 4d1, you must provide the Installation
+   Information in the manner specified by section 6 of the GNU GPL
+   for conveying Corresponding Source.)
+
+  5. Combined Libraries.
+
+  You may place library facilities that are a work based on the
+Library side by side in a single library together with other library
+facilities that are not Applications and are not covered by this
+License, and convey such a combined library under terms of your
+choice, if you do both of the following:
+
+   a) Accompany the combined library with a copy of the same work based
+   on the Library, uncombined with any other library facilities,
+   conveyed under the terms of this License.
+
+   b) Give prominent notice with the combined library that part of it
+   is a work based on the Library, and explaining where to find the
+   accompanying uncombined form of the same work.
+
+  6. Revised Versions of the GNU Lesser General Public License.
+
+  The Free Software Foundation may publish revised and/or new versions
+of the GNU Lesser General Public License from time to time. Such new
+versions will be similar in spirit to the present version, but may
+differ in detail to address new problems or concerns.
+
+  Each version is given a distinguishing version number. If the
+Library as you received it specifies that a certain numbered version
+of the GNU Lesser General Public License "or any later version"
+applies to it, you have the option of following the terms and
+conditions either of that published version or of any later version
+published by the Free Software Foundation. If the Library as you
+received it does not specify a version number of the GNU Lesser
+General Public License, you may choose any version of the GNU Lesser
+General Public License ever published by the Free Software Foundation.
+
+  If the Library as you received it specifies that a proxy can decide
+whether future versions of the GNU Lesser General Public License shall
+apply, that proxy's public statement of acceptance of any version is
+permanent authorization for you to choose that version for the
+Library.

package/README.md

@@ -0,0 +1,142 @@
+# @casoon/trackr
+
+Privacy-first, GDPR-native analytics for static sites. No cookies, no persistent IDs, self-hosted.
+
+## Features
+
+- **Privacy by Default** - No cookies, no localStorage, no fingerprinting
+- **Lightweight** - Client script < 1KB gzipped
+- **Self-Hosted** - Your data stays on your infrastructure
+- **Astro-First** - Designed for Astro, works with any static site
+- **Flexible Storage** - Postgres or external API (Plausible, Umami)
+
+## Installation
+
+```bash
+pnpm add @casoon/trackr
+```
+
+## Quick Start
+
+### 1. Add the client script
+
+```astro
+---
+// src/components/Analytics.astro
+---
+<script>
+  import { init } from "@casoon/trackr/client";
+  init({ endpoint: "/api/track" });
+</script>
+```
+
+Include in your layout:
+
+```astro
+---
+import Analytics from "../components/Analytics.astro";
+---
+<html>
+  <body>
+    <slot />
+    <Analytics />
+  </body>
+</html>
+```
+
+### 2. Create the API endpoint
+
+```typescript
+// src/pages/api/track.ts
+import type { APIRoute } from "astro";
+import { createHandler } from "@casoon/trackr/server";
+import { postgres } from "@casoon/trackr/storage/postgres";
+
+const handler = createHandler({
+  storage: postgres(import.meta.env.DATABASE_URL),
+  privacy: {
+    anonymizeIp: true,
+    stripPii: true
+  },
+  botFilter: true
+});
+
+export const POST: APIRoute = async ({ request }) => {
+  return handler(request);
+};
+```
+
+### 3. Set up the database
+
+```sql
+CREATE TABLE trackr_events (
+  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
+  ts TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  type TEXT NOT NULL,
+  name TEXT,
+  url TEXT NOT NULL,
+  referrer_domain TEXT,
+  country TEXT,
+  device TEXT,
+  browser TEXT,
+  session_id TEXT,
+  props JSONB DEFAULT '{}'
+);
+
+CREATE INDEX idx_trackr_ts ON trackr_events (ts);
+CREATE INDEX idx_trackr_url ON trackr_events (url);
+```
+
+## Custom Events
+
+```typescript
+import { track } from "@casoon/trackr/client";
+
+// Track button click
+document.querySelector("#signup").addEventListener("click", () => {
+  track("signup_click", { plan: "pro" });
+});
+```
+
+## Storage Adapters
+
+### Postgres
+
+```typescript
+import { postgres } from "@casoon/trackr/storage/postgres";
+
+const storage = postgres(process.env.DATABASE_URL);
+```
+
+### External API
+
+Forward events to Plausible, Umami, or any other service:
+
+```typescript
+import { api } from "@casoon/trackr/storage/api";
+
+const storage = api({
+  url: "https://plausible.io/api/event",
+  headers: { "Authorization": "Bearer ..." },
+  transform: (event) => ({
+    name: event.type === "pageview" ? "pageview" : event.name,
+    url: event.url,
+    domain: "your-domain.com"
+  })
+});
+```
+
+## Privacy Features
+
+- **IP Anonymization** - Last octet removed before any processing
+- **PII Filtering** - Email, phone, tokens stripped from URLs
+- **No Cookies** - Session ID derived from anonymized IP + UA + date
+- **Bot Filtering** - Common bots and crawlers excluded
+
+## License
+
+LGPL-3.0-or-later
+
+## Author
+
+Joern Seidel <joern@casoon.de>

package/dist/chunk-7D4SUZUM.js

@@ -0,0 +1,38 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+var __commonJS = (cb, mod) => function __require2() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+export {
+  __require,
+  __commonJS,
+  __toESM
+};
+//# sourceMappingURL=chunk-7D4SUZUM.js.map

package/dist/chunk-7D4SUZUM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/chunk-ABUPERUQ.js

@@ -0,0 +1,58 @@
+// src/client/index.ts
+var config = null;
+function init(options) {
+  config = options;
+  trackPageview();
+  if (typeof window !== "undefined") {
+    window.addEventListener("popstate", trackPageview);
+  }
+}
+function track(name, props) {
+  if (!config) {
+    console.warn("[trackr] Not initialized. Call init() first.");
+    return;
+  }
+  sendEvent({
+    type: "event",
+    name,
+    url: getPath(),
+    props,
+    ts: Date.now()
+  });
+}
+function trackPageview() {
+  if (!config) return;
+  sendEvent({
+    type: "pageview",
+    url: getPath(),
+    referrer: document.referrer ? new URL(document.referrer).hostname : void 0,
+    ts: Date.now()
+  });
+}
+function getPath() {
+  return window.location.pathname;
+}
+function sendEvent(event) {
+  if (!config) return;
+  const body = JSON.stringify(event);
+  if (navigator.sendBeacon) {
+    navigator.sendBeacon(config.endpoint, body);
+  } else {
+    fetch(config.endpoint, {
+      method: "POST",
+      body,
+      keepalive: true,
+      headers: { "Content-Type": "application/json" }
+    }).catch(() => {
+    });
+  }
+  if (config.debug) {
+    console.log("[trackr]", event);
+  }
+}
+
+export {
+  init,
+  track
+};
+//# sourceMappingURL=chunk-ABUPERUQ.js.map

package/dist/chunk-ABUPERUQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client/index.ts"],"sourcesContent":["import type { TrackrConfig } from \"../types.js\";\n\nlet config: TrackrConfig | null = null;\n\nexport function init(options: TrackrConfig): void {\n  config = options;\n  trackPageview();\n  \n  if (typeof window !== \"undefined\") {\n    window.addEventListener(\"popstate\", trackPageview);\n  }\n}\n\nexport function track(name: string, props?: Record<string, string | number | boolean>): void {\n  if (!config) {\n    console.warn(\"[trackr] Not initialized. Call init() first.\");\n    return;\n  }\n  \n  sendEvent({\n    type: \"event\",\n    name,\n    url: getPath(),\n    props,\n    ts: Date.now()\n  });\n}\n\nfunction trackPageview(): void {\n  if (!config) return;\n  \n  sendEvent({\n    type: \"pageview\",\n    url: getPath(),\n    referrer: document.referrer ? new URL(document.referrer).hostname : undefined,\n    ts: Date.now()\n  });\n}\n\nfunction getPath(): string {\n  return window.location.pathname;\n}\n\nfunction sendEvent(event: Record<string, unknown>): void {\n  if (!config) return;\n  \n  const body = JSON.stringify(event);\n  \n  if (navigator.sendBeacon) {\n    navigator.sendBeacon(config.endpoint, body);\n  } else {\n    fetch(config.endpoint, {\n      method: \"POST\",\n      body,\n      keepalive: true,\n      headers: { \"Content-Type\": \"application/json\" }\n    }).catch(() => {});\n  }\n  \n  if (config.debug) {\n    console.log(\"[trackr]\", event);\n  }\n}\n"],"mappings":";AAEA,IAAI,SAA8B;AAE3B,SAAS,KAAK,SAA6B;AAChD,WAAS;AACT,gBAAc;AAEd,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,iBAAiB,YAAY,aAAa;AAAA,EACnD;AACF;AAEO,SAAS,MAAM,MAAc,OAAyD;AAC3F,MAAI,CAAC,QAAQ;AACX,YAAQ,KAAK,8CAA8C;AAC3D;AAAA,EACF;AAEA,YAAU;AAAA,IACR,MAAM;AAAA,IACN;AAAA,IACA,KAAK,QAAQ;AAAA,IACb;AAAA,IACA,IAAI,KAAK,IAAI;AAAA,EACf,CAAC;AACH;AAEA,SAAS,gBAAsB;AAC7B,MAAI,CAAC,OAAQ;AAEb,YAAU;AAAA,IACR,MAAM;AAAA,IACN,KAAK,QAAQ;AAAA,IACb,UAAU,SAAS,WAAW,IAAI,IAAI,SAAS,QAAQ,EAAE,WAAW;AAAA,IACpE,IAAI,KAAK,IAAI;AAAA,EACf,CAAC;AACH;AAEA,SAAS,UAAkB;AACzB,SAAO,OAAO,SAAS;AACzB;AAEA,SAAS,UAAU,OAAsC;AACvD,MAAI,CAAC,OAAQ;AAEb,QAAM,OAAO,KAAK,UAAU,KAAK;AAEjC,MAAI,UAAU,YAAY;AACxB,cAAU,WAAW,OAAO,UAAU,IAAI;AAAA,EAC5C,OAAO;AACL,UAAM,OAAO,UAAU;AAAA,MACrB,QAAQ;AAAA,MACR;AAAA,MACA,WAAW;AAAA,MACX,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACnB;AAEA,MAAI,OAAO,OAAO;AAChB,YAAQ,IAAI,YAAY,KAAK;AAAA,EAC/B;AACF;","names":[]}

package/dist/chunk-L3N32JO4.js

@@ -0,0 +1,153 @@
+// src/server/bot.ts
+var BOT_PATTERNS = [
+  /bot/i,
+  /crawler/i,
+  /spider/i,
+  /crawling/i,
+  /headless/i,
+  /phantom/i,
+  /selenium/i,
+  /google/i,
+  /bing/i,
+  /yahoo/i,
+  /baidu/i,
+  /facebook/i,
+  /twitter/i,
+  /linkedin/i,
+  /slack/i,
+  /discord/i,
+  /telegram/i,
+  /preview/i,
+  /curl/i,
+  /wget/i,
+  /monitoring/i,
+  /uptime/i,
+  /pingdom/i
+];
+function isBot(request) {
+  const ua = request.headers.get("user-agent") || "";
+  if (BOT_PATTERNS.some((p) => p.test(ua))) return true;
+  if (!request.headers.get("accept-language")) return true;
+  if (ua.length < 20) return true;
+  return false;
+}
+
+// src/server/privacy.ts
+var PII_PARAMS = ["email", "mail", "phone", "name", "token", "key", "password", "secret"];
+function anonymizeIp(ip) {
+  if (ip.includes(".")) {
+    return ip.split(".").slice(0, 3).join(".") + ".0";
+  }
+  return ip.split(":").slice(0, 4).join(":") + "::";
+}
+function stripPii(url) {
+  try {
+    const u = new URL(url, "http://localhost");
+    PII_PARAMS.forEach((p) => u.searchParams.delete(p));
+    return u.pathname + (u.search || "");
+  } catch {
+    return url;
+  }
+}
+function createSessionId(ip, ua, date) {
+  const input = anonymizeIp(ip) + "|" + ua + "|" + date;
+  return simpleHash(input).slice(0, 16);
+}
+function simpleHash(str) {
+  let hash = 0;
+  for (let i = 0; i < str.length; i++) {
+    const char = str.charCodeAt(i);
+    hash = (hash << 5) - hash + char;
+    hash = hash & hash;
+  }
+  return Math.abs(hash).toString(36);
+}
+function applyPrivacy(event, config) {
+  const result = { ...event };
+  if (config.stripPii && result.url) {
+    result.url = stripPii(result.url);
+  }
+  if (config.stripQueryParams && result.url) {
+    try {
+      const u = new URL(result.url, "http://localhost");
+      config.stripQueryParams.forEach((p) => {
+        if (p.endsWith("*")) {
+          const prefix = p.slice(0, -1);
+          [...u.searchParams.keys()].filter((k) => k.startsWith(prefix)).forEach((k) => u.searchParams.delete(k));
+        } else {
+          u.searchParams.delete(p);
+        }
+      });
+      result.url = u.pathname + (u.search || "");
+    } catch {
+    }
+  }
+  return result;
+}
+
+// src/server/index.ts
+function createHandler(config) {
+  return async (request) => {
+    if (request.method !== "POST") {
+      return new Response("Method not allowed", { status: 405 });
+    }
+    if (config.botFilter && isBot(request)) {
+      return new Response("OK");
+    }
+    try {
+      const body = await request.json();
+      if (!isValidEvent(body)) {
+        return new Response("Invalid event", { status: 400 });
+      }
+      let event = {
+        type: body.type,
+        name: body.name,
+        url: body.url,
+        referrer: body.referrer,
+        props: body.props,
+        ts: body.ts
+      };
+      if (config.privacy) {
+        event = applyPrivacy(event, config.privacy);
+      }
+      const ip = request.headers.get("x-forwarded-for")?.split(",")[0]?.trim() || request.headers.get("x-real-ip") || "0.0.0.0";
+      const ua = request.headers.get("user-agent") || "";
+      const today = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+      if (config.privacy?.anonymizeIp !== false) {
+        event.sessionId = createSessionId(ip, ua, today);
+      }
+      event.device = detectDevice(ua);
+      event.browser = detectBrowser(ua);
+      await config.storage.save(event);
+      return new Response("OK");
+    } catch {
+      return new Response("Error", { status: 500 });
+    }
+  };
+}
+function isValidEvent(e) {
+  if (typeof e !== "object" || e === null) return false;
+  const obj = e;
+  return typeof obj.type === "string" && typeof obj.url === "string" && typeof obj.ts === "number";
+}
+function detectDevice(ua) {
+  if (/tablet|ipad/i.test(ua)) return "tablet";
+  if (/mobile|android|iphone/i.test(ua)) return "mobile";
+  return "desktop";
+}
+function detectBrowser(ua) {
+  if (/firefox/i.test(ua)) return "Firefox";
+  if (/edg/i.test(ua)) return "Edge";
+  if (/chrome/i.test(ua)) return "Chrome";
+  if (/safari/i.test(ua)) return "Safari";
+  return "Other";
+}
+
+export {
+  isBot,
+  anonymizeIp,
+  stripPii,
+  applyPrivacy,
+  createHandler
+};
+//# sourceMappingURL=chunk-L3N32JO4.js.map

package/dist/chunk-L3N32JO4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/bot.ts","../src/server/privacy.ts","../src/server/index.ts"],"sourcesContent":["const BOT_PATTERNS = [\n  /bot/i, /crawler/i, /spider/i, /crawling/i,\n  /headless/i, /phantom/i, /selenium/i,\n  /google/i, /bing/i, /yahoo/i, /baidu/i,\n  /facebook/i, /twitter/i, /linkedin/i,\n  /slack/i, /discord/i, /telegram/i,\n  /preview/i, /curl/i, /wget/i,\n  /monitoring/i, /uptime/i, /pingdom/i\n];\n\nexport function isBot(request: Request): boolean {\n  const ua = request.headers.get(\"user-agent\") || \"\";\n  \n  if (BOT_PATTERNS.some(p => p.test(ua))) return true;\n  if (!request.headers.get(\"accept-language\")) return true;\n  if (ua.length < 20) return true;\n  \n  return false;\n}\n","import type { PrivacyConfig, TrackrEvent } from \"../types.js\";\n\nconst PII_PARAMS = [\"email\", \"mail\", \"phone\", \"name\", \"token\", \"key\", \"password\", \"secret\"];\n\nexport function anonymizeIp(ip: string): string {\n  if (ip.includes(\".\")) {\n    return ip.split(\".\").slice(0, 3).join(\".\") + \".0\";\n  }\n  return ip.split(\":\").slice(0, 4).join(\":\") + \"::\";\n}\n\nexport function stripPii(url: string): string {\n  try {\n    const u = new URL(url, \"http://localhost\");\n    PII_PARAMS.forEach(p => u.searchParams.delete(p));\n    return u.pathname + (u.search || \"\");\n  } catch {\n    return url;\n  }\n}\n\nexport function createSessionId(ip: string, ua: string, date: string): string {\n  const input = anonymizeIp(ip) + \"|\" + ua + \"|\" + date;\n  return simpleHash(input).slice(0, 16);\n}\n\nfunction simpleHash(str: string): string {\n  let hash = 0;\n  for (let i = 0; i < str.length; i++) {\n    const char = str.charCodeAt(i);\n    hash = ((hash << 5) - hash) + char;\n    hash = hash & hash;\n  }\n  return Math.abs(hash).toString(36);\n}\n\nexport function applyPrivacy(\n  event: TrackrEvent,\n  config: PrivacyConfig\n): TrackrEvent {\n  const result = { ...event };\n\n  if (config.stripPii && result.url) {\n    result.url = stripPii(result.url);\n  }\n\n  if (config.stripQueryParams && result.url) {\n    try {\n      const u = new URL(result.url, \"http://localhost\");\n      config.stripQueryParams.forEach(p => {\n        if (p.endsWith(\"*\")) {\n          const prefix = p.slice(0, -1);\n          [...u.searchParams.keys()]\n            .filter(k => k.startsWith(prefix))\n            .forEach(k => u.searchParams.delete(k));\n        } else {\n          u.searchParams.delete(p);\n        }\n      });\n      result.url = u.pathname + (u.search || \"\");\n    } catch {}\n  }\n\n  return result;\n}\n","import type { HandlerConfig, TrackrEvent } from \"../types.js\";\nimport { isBot } from \"./bot.js\";\nimport { applyPrivacy, createSessionId } from \"./privacy.js\";\n\ninterface RawEvent {\n  type: string;\n  url: string;\n  ts: number;\n  name?: string;\n  referrer?: string;\n  props?: Record<string, string | number | boolean>;\n}\n\nexport function createHandler(config: HandlerConfig): (request: Request) => Promise<Response> {\n  return async (request: Request): Promise<Response> => {\n    if (request.method !== \"POST\") {\n      return new Response(\"Method not allowed\", { status: 405 });\n    }\n\n    if (config.botFilter && isBot(request)) {\n      return new Response(\"OK\");\n    }\n\n    try {\n      const body = await request.json() as unknown;\n\n      if (!isValidEvent(body)) {\n        return new Response(\"Invalid event\", { status: 400 });\n      }\n\n      let event: TrackrEvent = {\n        type: body.type as \"pageview\" | \"event\",\n        name: body.name,\n        url: body.url,\n        referrer: body.referrer,\n        props: body.props,\n        ts: body.ts\n      };\n\n      if (config.privacy) {\n        event = applyPrivacy(event, config.privacy);\n      }\n\n      const ip = request.headers.get(\"x-forwarded-for\")?.split(\",\")[0]?.trim()\n        || request.headers.get(\"x-real-ip\")\n        || \"0.0.0.0\";\n      const ua = request.headers.get(\"user-agent\") || \"\";\n      const today = new Date().toISOString().split(\"T\")[0];\n\n      if (config.privacy?.anonymizeIp !== false) {\n        event.sessionId = createSessionId(ip, ua, today);\n      }\n\n      event.device = detectDevice(ua);\n      event.browser = detectBrowser(ua);\n\n      await config.storage.save(event);\n\n      return new Response(\"OK\");\n    } catch {\n      return new Response(\"Error\", { status: 500 });\n    }\n  };\n}\n\nfunction isValidEvent(e: unknown): e is RawEvent {\n  if (typeof e !== \"object\" || e === null) return false;\n  const obj = e as Record<string, unknown>;\n  return typeof obj.type === \"string\" && typeof obj.url === \"string\" && typeof obj.ts === \"number\";\n}\n\nfunction detectDevice(ua: string): \"desktop\" | \"mobile\" | \"tablet\" {\n  if (/tablet|ipad/i.test(ua)) return \"tablet\";\n  if (/mobile|android|iphone/i.test(ua)) return \"mobile\";\n  return \"desktop\";\n}\n\nfunction detectBrowser(ua: string): string {\n  if (/firefox/i.test(ua)) return \"Firefox\";\n  if (/edg/i.test(ua)) return \"Edge\";\n  if (/chrome/i.test(ua)) return \"Chrome\";\n  if (/safari/i.test(ua)) return \"Safari\";\n  return \"Other\";\n}\n\nexport { isBot } from \"./bot.js\";\nexport { anonymizeIp, stripPii, applyPrivacy } from \"./privacy.js\";\n"],"mappings":";AAAA,IAAM,eAAe;AAAA,EACnB;AAAA,EAAQ;AAAA,EAAY;AAAA,EAAW;AAAA,EAC/B;AAAA,EAAa;AAAA,EAAY;AAAA,EACzB;AAAA,EAAW;AAAA,EAAS;AAAA,EAAU;AAAA,EAC9B;AAAA,EAAa;AAAA,EAAY;AAAA,EACzB;AAAA,EAAU;AAAA,EAAY;AAAA,EACtB;AAAA,EAAY;AAAA,EAAS;AAAA,EACrB;AAAA,EAAe;AAAA,EAAW;AAC5B;AAEO,SAAS,MAAM,SAA2B;AAC/C,QAAM,KAAK,QAAQ,QAAQ,IAAI,YAAY,KAAK;AAEhD,MAAI,aAAa,KAAK,OAAK,EAAE,KAAK,EAAE,CAAC,EAAG,QAAO;AAC/C,MAAI,CAAC,QAAQ,QAAQ,IAAI,iBAAiB,EAAG,QAAO;AACpD,MAAI,GAAG,SAAS,GAAI,QAAO;AAE3B,SAAO;AACT;;;AChBA,IAAM,aAAa,CAAC,SAAS,QAAQ,SAAS,QAAQ,SAAS,OAAO,YAAY,QAAQ;AAEnF,SAAS,YAAY,IAAoB;AAC9C,MAAI,GAAG,SAAS,GAAG,GAAG;AACpB,WAAO,GAAG,MAAM,GAAG,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI;AAAA,EAC/C;AACA,SAAO,GAAG,MAAM,GAAG,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI;AAC/C;AAEO,SAAS,SAAS,KAAqB;AAC5C,MAAI;AACF,UAAM,IAAI,IAAI,IAAI,KAAK,kBAAkB;AACzC,eAAW,QAAQ,OAAK,EAAE,aAAa,OAAO,CAAC,CAAC;AAChD,WAAO,EAAE,YAAY,EAAE,UAAU;AAAA,EACnC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,gBAAgB,IAAY,IAAY,MAAsB;AAC5E,QAAM,QAAQ,YAAY,EAAE,IAAI,MAAM,KAAK,MAAM;AACjD,SAAO,WAAW,KAAK,EAAE,MAAM,GAAG,EAAE;AACtC;AAEA,SAAS,WAAW,KAAqB;AACvC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,UAAM,OAAO,IAAI,WAAW,CAAC;AAC7B,YAAS,QAAQ,KAAK,OAAQ;AAC9B,WAAO,OAAO;AAAA,EAChB;AACA,SAAO,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE;AACnC;AAEO,SAAS,aACd,OACA,QACa;AACb,QAAM,SAAS,EAAE,GAAG,MAAM;AAE1B,MAAI,OAAO,YAAY,OAAO,KAAK;AACjC,WAAO,MAAM,SAAS,OAAO,GAAG;AAAA,EAClC;AAEA,MAAI,OAAO,oBAAoB,OAAO,KAAK;AACzC,QAAI;AACF,YAAM,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB;AAChD,aAAO,iBAAiB,QAAQ,OAAK;AACnC,YAAI,EAAE,SAAS,GAAG,GAAG;AACnB,gBAAM,SAAS,EAAE,MAAM,GAAG,EAAE;AAC5B,WAAC,GAAG,EAAE,aAAa,KAAK,CAAC,EACtB,OAAO,OAAK,EAAE,WAAW,MAAM,CAAC,EAChC,QAAQ,OAAK,EAAE,aAAa,OAAO,CAAC,CAAC;AAAA,QAC1C,OAAO;AACL,YAAE,aAAa,OAAO,CAAC;AAAA,QACzB;AAAA,MACF,CAAC;AACD,aAAO,MAAM,EAAE,YAAY,EAAE,UAAU;AAAA,IACzC,QAAQ;AAAA,IAAC;AAAA,EACX;AAEA,SAAO;AACT;;;ACnDO,SAAS,cAAc,QAAgE;AAC5F,SAAO,OAAO,YAAwC;AACpD,QAAI,QAAQ,WAAW,QAAQ;AAC7B,aAAO,IAAI,SAAS,sBAAsB,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3D;AAEA,QAAI,OAAO,aAAa,MAAM,OAAO,GAAG;AACtC,aAAO,IAAI,SAAS,IAAI;AAAA,IAC1B;AAEA,QAAI;AACF,YAAM,OAAO,MAAM,QAAQ,KAAK;AAEhC,UAAI,CAAC,aAAa,IAAI,GAAG;AACvB,eAAO,IAAI,SAAS,iBAAiB,EAAE,QAAQ,IAAI,CAAC;AAAA,MACtD;AAEA,UAAI,QAAqB;AAAA,QACvB,MAAM,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,KAAK,KAAK;AAAA,QACV,UAAU,KAAK;AAAA,QACf,OAAO,KAAK;AAAA,QACZ,IAAI,KAAK;AAAA,MACX;AAEA,UAAI,OAAO,SAAS;AAClB,gBAAQ,aAAa,OAAO,OAAO,OAAO;AAAA,MAC5C;AAEA,YAAM,KAAK,QAAQ,QAAQ,IAAI,iBAAiB,GAAG,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK,KAClE,QAAQ,QAAQ,IAAI,WAAW,KAC/B;AACL,YAAM,KAAK,QAAQ,QAAQ,IAAI,YAAY,KAAK;AAChD,YAAM,SAAQ,oBAAI,KAAK,GAAE,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAEnD,UAAI,OAAO,SAAS,gBAAgB,OAAO;AACzC,cAAM,YAAY,gBAAgB,IAAI,IAAI,KAAK;AAAA,MACjD;AAEA,YAAM,SAAS,aAAa,EAAE;AAC9B,YAAM,UAAU,cAAc,EAAE;AAEhC,YAAM,OAAO,QAAQ,KAAK,KAAK;AAE/B,aAAO,IAAI,SAAS,IAAI;AAAA,IAC1B,QAAQ;AACN,aAAO,IAAI,SAAS,SAAS,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9C;AAAA,EACF;AACF;AAEA,SAAS,aAAa,GAA2B;AAC/C,MAAI,OAAO,MAAM,YAAY,MAAM,KAAM,QAAO;AAChD,QAAM,MAAM;AACZ,SAAO,OAAO,IAAI,SAAS,YAAY,OAAO,IAAI,QAAQ,YAAY,OAAO,IAAI,OAAO;AAC1F;AAEA,SAAS,aAAa,IAA6C;AACjE,MAAI,eAAe,KAAK,EAAE,EAAG,QAAO;AACpC,MAAI,yBAAyB,KAAK,EAAE,EAAG,QAAO;AAC9C,SAAO;AACT;AAEA,SAAS,cAAc,IAAoB;AACzC,MAAI,WAAW,KAAK,EAAE,EAAG,QAAO;AAChC,MAAI,OAAO,KAAK,EAAE,EAAG,QAAO;AAC5B,MAAI,UAAU,KAAK,EAAE,EAAG,QAAO;AAC/B,MAAI,UAAU,KAAK,EAAE,EAAG,QAAO;AAC/B,SAAO;AACT;","names":[]}

package/dist/client/index.d.ts

@@ -0,0 +1,6 @@
+import { a as TrackrConfig } from '../types-EaeYBDKE.js';
+
+declare function init(options: TrackrConfig): void;
+declare function track(name: string, props?: Record<string, string | number | boolean>): void;
+
+export { init, track };

package/dist/client/index.js

@@ -0,0 +1,10 @@
+import {
+  init,
+  track
+} from "../chunk-ABUPERUQ.js";
+import "../chunk-7D4SUZUM.js";
+export {
+  init,
+  track
+};
+//# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}