@iann29/rastro 0.1.0-alpha.1 → 0.1.0-alpha.10

package/dist/tracker/vitals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vitals.js","sourceRoot":"","sources":["../../src/tracker/vitals.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAc7E,CAAC,GAAG,EAAE;IACJ,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAyC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;IACpC,MAAM,QAAQ,GACZ,MAAM,EAAE,OAAO,CAAC,QAAQ;QACxB,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;QAAE,OAAO;IAEjC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;IACnE,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CAAC,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC5C,cAAc,CAAC,EAAE,GAAG,SAAS,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,QAAQ,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC;IACtD,2EAA2E;IAC3E,qCAAqC;IACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAuC,EAAE,CAAC;IACtD,MAAM,SAAS,GAGV,EAAE,CAAC;IACR,MAAM,OAAO,GAAG,CACd,IAAY,EACZ,OAA8C,EAC9C,KAA+B,EAC/B,EAAE;QACF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,CAAC,IAAI,EAAE,EAAE,CAChD,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAC3B,CAAC;YACF,QAAQ,CAAC,OAAO,CAAC;gBACf,IAAI;gBACJ,QAAQ,EAAE,IAAI;gBACd,GAAG,KAAK;aACkB,CAAC,CAAC;YAC9B,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,WAAW,CAAC,gBAAgB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CACxB,CAAC;IAC1C,IAAI,UAAU,IAAI,UAAU,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE;QAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB;gBAAE,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,0BAA0B,EAAE,CAAC,OAAO,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,uBAAuB;IACvB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;QAClC,KAAK,MAAM,KAAK,IAAI,OAA6B,EAAE,CAAC;YAClD,IAAI,KAAK,CAAC,cAAc;gBAAE,SAAS;YACnC,IACE,SAAS;gBACT,KAAK,CAAC,SAAS,GAAG,OAAO,GAAG,KAAK;gBACjC,KAAK,CAAC,SAAS,GAAG,QAAQ,GAAG,KAAK,EAClC,CAAC;gBACD,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;gBACxB,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;YAC7B,CAAC;YACD,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC;YAC1B,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,sEAAsE;IACtE,2DAA2D;IAC3D,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,YAAY,GAAG,CAAC,OAA2B,EAAE,EAAE;QACnD,KAAK,MAAM,KAAK,IAAI,OAA6B,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,aAAa;gBAAE,SAAS;YACnC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,OAAO;QAC9B,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;QAC9C,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GACR,WAA6C,CAAC,gBAAgB;YAC/D,cAAc,CAAC,IAAI,CAAC;QACtB,MAAM,CAAC,GAAG;YACR,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC;IACF,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAErC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,IAAI;YAAE,OAAO;QACjB,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;YAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAChC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACxE,OAAO,EAAE,GAAG,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,KAAK,EAAE;YAC3D,SAAS;YACT,SAAS;YACT,IAAI,EAAE,OAAO;YACb,IAAI;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAE,CAAC;YAChC,IAAI;YACJ,SAAS;YACT,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO;QAC3B,IAAI,GAAG,IAAI,CAAC;QACZ,gEAAgE;QAChE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC;YACpB,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;SACtD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;YACvC,KAAK,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CACnE,GAAG,EAAE;gBACH,qEAAqE;YACvE,CAAC,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,EAAE;QACjD,IAAI,QAAQ,CAAC,eAAe,KAAK,QAAQ;YAAE,IAAI,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC,CAAC,EAAE,CAAC"}

package/dist/tracker.min.js

@@ -1 +1 @@
-"use strict";(()=>{const t=document.currentScript,e=t?.dataset.site,o=t?.dataset.endpoint||t?.src.replace(/tracker\.js.*$/,"events");if(!e||!o)return;const s=()=>crypto.randomUUID?.()||Math.random()+"",n=new URLSearchParams(location.search).get("ref")?.slice(0,64);let r,a;try{r=sessionStorage._r||s(),sessionStorage._r=r,a=n||sessionStorage._a,a&&(sessionStorage._a=a)}catch{r=s(),a=n}const i=t.dataset.visitor||r;let c,d=0;const l=[],h=document.referrer?new URL(document.referrer).origin:void 0,p=t=>{const s=l.splice(0,50);if(!s.length)return;const n=()=>new Blob([JSON.stringify({siteId:e,events:s})]);let r=n();for(;r.size>64e3&&s.length>1;)l.unshift(s.pop()),r=n();t&&navigator.sendBeacon(o,r)||fetch(o,{method:"POST",body:r,keepalive:1}).catch(()=>{}),l.length&&p(t)},g=(t,e,o)=>{const s=Date.now();l.push({eventId:`${r}.${s.toString(36)}.${d.toString(36)}`,sessionId:r,visitorId:i,type:t,name:e,path:location.pathname.slice(0,256),referrer:h,timestamp:s,sequence:d++,affiliateSlug:a,...o}),clearTimeout(c),c=setTimeout(p,1200)};let u;const v=()=>{const t=location.pathname;t!==u&&(u=t,g("pageview"))};window.rastro=(t,e,o)=>{if("context"===t)return{sessionId:r,visitorId:i};"event"===t&&g("custom",`${e||"event"}`.slice(0,80),o&&JSON.stringify(o).length>2e4?void 0:{properties:o})},document.addEventListener("click",t=>{const e=t.target?.closest("a,button,[data-rastro-event]");if(!e)return;const o=e.dataset.rastroEvent,s=e.href,n=s?new URL(s):void 0,r="http:"===n?.protocol||"https:"===n?.protocol;g(o?"custom":r&&n.origin!==location.origin?"outbound":"click",o,{target:(e.dataset.rastroLabel||e.tagName).slice(0,80),href:r?n.pathname.slice(0,256):void 0})},1);const m=t=>{const e=history[t];history[t]=function(t,o,s){e.call(history,t,o,s),v()}};m("pushState"),m("replaceState"),addEventListener("popstate",v),addEventListener("pagehide",()=>p(1)),setInterval(()=>{g("heartbeat"),p()},2e4),v()})();
+(()=>{const e=document.currentScript,t=e?.dataset.site,s=e?.dataset.endpoint||e?.src&&new URL("events",e.src).href;if(!t||!s)return;const o=()=>crypto.randomUUID?.()||Math.random()+"",n=new URLSearchParams(location.search),r=n.get("ref")?.slice(0,64);let a,i,c;for(const e of["source","medium","campaign","term","content"]){const t=n.get("utm_"+e)?.slice(0,64);t&&((a??={})["utm_"+e]=t)}try{i=sessionStorage._r||o(),sessionStorage._r=i,c=r||sessionStorage._a,c&&(sessionStorage._a=c),a||=sessionStorage._u&&JSON.parse(sessionStorage._u),a&&(sessionStorage._u=JSON.stringify(a))}catch{i=o(),c=r}let d=e.dataset.visitor;try{d||=localStorage._rv||=o()}catch{}d||=i;let l,p=0;const g=[],h=document.referrer?new URL(document.referrer).origin:void 0,u=e=>{const o=g.splice(0,50);if(!o.length)return;const n=()=>new Blob([JSON.stringify({siteId:t,events:o,sentAt:Date.now()})]);let r=n();for(;r.size>64e3&&o.length>1;)g.unshift(o.pop()),r=n();e&&navigator.sendBeacon(s,r)||fetch(s,{method:"POST",body:r,keepalive:1}).catch(()=>{}),g.length&&u(e)},m=(e,t,s)=>{const o=Date.now();g.push({eventId:`${i}.${o.toString(36)}.${p}`,sessionId:i,visitorId:d,type:e,name:t,path:location.pathname.slice(0,256),referrer:h,timestamp:o,sequence:p++,affiliateSlug:c,...s}),clearTimeout(l),l=setTimeout(u,1200)};let v;const f=()=>{const e=location.pathname;e!==v&&(v=e,m("pageview",void 0,a&&{properties:a}))};window.rastro=(e,t,s)=>{if("context"===e)return{sessionId:i,visitorId:d};"event"===e&&m("custom",`${t||"event"}`.slice(0,80),s&&JSON.stringify(s).length>2e4?void 0:{properties:s})},document.addEventListener("click",e=>{const t=e.target?.closest("a,button,[data-rastro-event]");if(!t)return;const s=t.dataset.rastroEvent,o=t.href,n=o&&new URL(o),r=/^https?:$/.test(n?.protocol),a=r&&n.origin!==location.origin;m(s?"custom":a?"outbound":"click",s,{target:(t.dataset.rastroLabel||t.innerText||t.tagName).slice(0,64),href:r?((a?n.origin:"")+n.pathname).slice(0,256):void 0})},1);const S=e=>{const t=history[e];history[e]=(...e)=>{t.apply(history,e),f()}};S("pushState"),S("replaceState"),addEventListener("popstate",f),addEventListener("pagehide",()=>{m("leave"),u(1)}),addEventListener("pageshow",e=>{e.persisted&&(m("heartbeat"),u(1))}),setInterval(()=>{m("heartbeat"),u()},2e4),f()})();

package/dist/vitals.min.js

@@ -0,0 +1 @@
+(()=>{const t=document.currentScript,e=t?.dataset.site,n=t?.dataset.endpoint||t?.src&&new URL("events",t.src).href;if(!e||!n)return;const r=()=>crypto.randomUUID?.()||Math.random()+"";let a;try{a=sessionStorage._r||r(),sessionStorage._r=a}catch{a=r()}const s=t.dataset.visitor||a,o=location.pathname.slice(0,256),i={},c=[],d=(t,e,n)=>{try{const r=new PerformanceObserver(t=>e(t.getEntries()));r.observe({type:t,buffered:1,...n}),c.push({observer:r,handler:e})}catch{}},h=performance.getEntriesByType?.("navigation")[0];h&&h.responseStart>0&&(i.TTFB=h.responseStart),d("paint",t=>{for(const e of t)"first-contentful-paint"===e.name&&(i.FCP=e.startTime)}),d("largest-contentful-paint",t=>{const e=t[t.length-1];e&&(i.LCP=e.startTime)});let l=0,f=0,m=0;d("layout-shift",t=>{for(const e of t)e.hadRecentInput||(l&&e.startTime-m<1e3&&e.startTime-f<5e3?l+=e.value:(l=e.value,f=e.startTime),m=e.startTime,i.CLS=Math.max(i.CLS||0,1e3*l))});const u=[],p=new Set,v=t=>{for(const e of t)e.interactionId&&(p.add(e.interactionId),u.push(e.duration));if(!u.length)return;u.sort((t,e)=>e-t),u.length=Math.min(u.length,10);const e=performance.interactionCount||p.size;i.INP=u[Math.min(u.length-1,Math.floor(e/50))]};d("event",v,{durationThreshold:40}),d("first-input",v);let g=0;const y=()=>{if(g)return;for(const{observer:t,handler:e}of c)e(t.takeRecords()),t.disconnect();const t=Date.now(),r=Object.keys(i).map((e,n)=>({eventId:`${a}.${t.toString(36)}.v${n}`,sessionId:a,visitorId:s,type:"vital",name:e,value:Math.round(i[e]),path:o,timestamp:t,sequence:n}));if(!r.length)return;g=1;const d=new Blob([JSON.stringify({siteId:e,events:r,sentAt:t})]),h=navigator.sendBeacon?.bind(navigator);h&&h(n,d)||fetch(n,{method:"POST",body:d,keepalive:1}).catch(()=>{})};document.addEventListener("visibilitychange",()=>{"hidden"===document.visibilityState&&y()}),addEventListener("pagehide",y)})();

package/docs/benchmarks/2026-08-20-realistic.md

@@ -1,40 +1,40 @@
 # Realistic ingest validation, 2026-08-20
 
 This report preserves the performance evidence produced while developing PR
-[#8](https://github.com/amageweb/amage-rastro/pull/8), merged as `93a0b4e`.
-It is a historical engineering record, not a production SLA.
+[#8](https://github.com/amageweb/amage-rastro/pull/8), merged as `93a0b4e`. It
+is a historical engineering record, not a production SLA.
 
 ## Status
 
-- The realistic workload demonstrated the 100 million accepted-events/day
-  target during a sustained ten-minute soak.
+- The realistic workload demonstrated the 100 million accepted-events/day target
+  during a sustained ten-minute soak.
 - The sustained run predates the current `--certify` contract and did not
   preserve a run-scoped JSON artifact with aggregate reconciliation.
 - A later smoke against the final PR code reconciled every expected stored
   event, but lasted only 30 seconds.
-- Formal certification of the merged commit is therefore **pending** a new
-  600-second run using `--certify` on a dedicated idle site.
-- Heavy-payload, browser-feature, and trusted-conversion workloads have not
-  received equivalent sustained certification.
+- This historical gap was closed by the four-profile runs recorded in
+  [`2026-08-21-formal-certification.md`](2026-08-21-formal-certification.md).
+  Lean and realistic exceeded 100 million stored events/day; heavy and feature
+  completed cleanly below that target. Trusted conversions remain pending.
 
 Do not collapse these statements into a generic claim that every workload is
 certified for 100 million stored events/day.
 
 ## Environment
 
-| Item | Value |
-| --- | --- |
-| Date | 2026-08-20 |
-| Platform | Synapse-managed Convex |
-| Deployment | DEV canary `fast-finch-7454` |
-| Allocation | 4 GiB |
-| Site scope | One dedicated benchmark site |
-| Profile | `realistic` |
-| Concurrency | 75 workers |
-| Batch size | 50 events |
-| Session pool | 2,048 reused sessions |
-| Browser context | 12 geographic locations and 4 user-agent families |
-| Event mix | Pageviews, clicks, custom events, outbound events, and heartbeats |
+| Item            | Value                                                             |
+| --------------- | ----------------------------------------------------------------- |
+| Date            | 2026-08-20                                                        |
+| Platform        | Synapse-managed Convex                                            |
+| Deployment      | DEV canary `fast-finch-7454`                                      |
+| Allocation      | 4 GiB                                                             |
+| Site scope      | One dedicated benchmark site                                      |
+| Profile         | `realistic`                                                       |
+| Concurrency     | 75 workers                                                        |
+| Batch size      | 50 events                                                         |
+| Session pool    | 2,048 reused sessions                                             |
+| Browser context | 12 geographic locations and 4 user-agent families                 |
+| Event mix       | Pageviews, clicks, custom events, outbound events, and heartbeats |
 
 The deployment name is historical and may be deleted or repointed. Never use
 this document as deployment configuration.
@@ -44,51 +44,51 @@ this document as deployment configuration.
 The sustained soak ran after the raw-event batching and five-second live-sweep
 work in `bbfb9ad`, before the final review fixes later included in `93a0b4e`.
 
-| Metric | Result |
-| --- | ---: |
-| Target duration | 600 seconds |
-| Accepted events | 1,067,650 |
-| Failed requests | 0 |
-| Rejected events | 0 |
-| Accepted throughput | 1,773 events/s |
-| Accepted daily-rate estimate | 153.2 million events/day |
-| Target daily rate | 100 million events/day |
-| Headroom over target | 53.2% |
-| Request latency p99 | approximately 5.4 seconds |
+| Metric                       |                    Result |
+| ---------------------------- | ------------------------: |
+| Target duration              |               600 seconds |
+| Accepted events              |                 1,067,650 |
+| Failed requests              |                         0 |
+| Rejected events              |                         0 |
+| Accepted throughput          |            1,773 events/s |
+| Accepted daily-rate estimate |  153.2 million events/day |
+| Target daily rate            |    100 million events/day |
+| Headroom over target         |                     53.2% |
+| Request latency p99          | approximately 5.4 seconds |
 
 The target requires approximately 1,157 accepted events/s. The daily figure is
 an extrapolation from the measured soak, not a full-day load test.
 
 This run established sustained accepted-ingress capacity. Its exact heartbeat
-count and stored-event delta were not retained, so it must not be presented as
-a formally reconciled stored-events certification under the current harness.
+count and stored-event delta were not retained, so it must not be presented as a
+formally reconciled stored-events certification under the current harness.
 
 ## Reconciled corroboration
 
 A separate two-minute realistic rerun on the same canary used the same
 concurrency, batch size, and session pool:
 
-| Metric | Result |
-| --- | ---: |
-| Run label | `realistic-2m-rerun` |
-| Run ID | `mt1ydsq5-jjmbjv` |
-| Target duration | 120 seconds |
-| Measured elapsed time | 122.021 seconds |
-| Requests completed | 4,363 |
-| Accepted events | 218,150 |
-| Accepted heartbeats | 10,775 |
-| Expected stored events | 207,375 |
-| Aggregate event delta | 207,375 |
-| Reconciliation | exact |
-| Failed requests | 0 |
-| Duplicate events | 0 |
-| Rejected events | 0 |
-| Accepted throughput | 1,788 events/s |
+| Metric                       |                 Result |
+| ---------------------------- | ---------------------: |
+| Run label                    |   `realistic-2m-rerun` |
+| Run ID                       |      `mt1ydsq5-jjmbjv` |
+| Target duration              |            120 seconds |
+| Measured elapsed time        |        122.021 seconds |
+| Requests completed           |                  4,363 |
+| Accepted events              |                218,150 |
+| Accepted heartbeats          |                 10,775 |
+| Expected stored events       |                207,375 |
+| Aggregate event delta        |                207,375 |
+| Reconciliation               |                  exact |
+| Failed requests              |                      0 |
+| Duplicate events             |                      0 |
+| Rejected events              |                      0 |
+| Accepted throughput          |         1,788 events/s |
 | Accepted daily-rate estimate | 154,466,612 events/day |
-| Request latency p50 | 2,049 ms |
-| Request latency p95 | 2,570 ms |
-| Request latency p99 | 3,082 ms |
-| Request latency max | 3,366 ms |
+| Request latency p50          |               2,049 ms |
+| Request latency p95          |               2,570 ms |
+| Request latency p99          |               3,082 ms |
+| Request latency max          |               3,366 ms |
 
 Reconciliation was a site-wide before/after delta. It is reliable only because
 the benchmark site was kept idle apart from this run.
@@ -99,28 +99,28 @@ After the final correctness review, commit `c43d971` was deployed to the canary.
 That source was subsequently squash-merged unchanged as `93a0b4e`. A 30-second
 smoke produced:
 
-| Metric | Result |
-| --- | ---: |
-| Run label | `final-pr-smoke` |
-| Run ID | `mt2072x6-4c0avl` |
-| Measured elapsed time | 31.747 seconds |
-| Requests completed | 1,243 |
-| Accepted events | 62,150 |
-| Accepted heartbeats | 2,486 |
-| Expected stored events | 59,664 |
-| Aggregate event delta | 59,664 |
-| Reconciliation | exact |
-| Failed requests | 0 |
-| Duplicate events | 0 |
-| Rejected events | 0 |
-| Accepted throughput | 1,958 events/s |
-| Stored throughput | 1,879 events/s |
+| Metric                       |                 Result |
+| ---------------------------- | ---------------------: |
+| Run label                    |       `final-pr-smoke` |
+| Run ID                       |      `mt2072x6-4c0avl` |
+| Measured elapsed time        |         31.747 seconds |
+| Requests completed           |                  1,243 |
+| Accepted events              |                 62,150 |
+| Accepted heartbeats          |                  2,486 |
+| Expected stored events       |                 59,664 |
+| Aggregate event delta        |                 59,664 |
+| Reconciliation               |                  exact |
+| Failed requests              |                      0 |
+| Duplicate events             |                      0 |
+| Rejected events              |                      0 |
+| Accepted throughput          |         1,958 events/s |
+| Stored throughput            |         1,879 events/s |
 | Accepted daily-rate estimate | 169,139,895 events/day |
-| Stored daily-rate estimate | 162,374,299 events/day |
-| Request latency p50 | 1,882 ms |
-| Request latency p95 | 2,430 ms |
-| Request latency p99 | 2,733 ms |
-| Request latency max | 2,827 ms |
+| Stored daily-rate estimate   | 162,374,299 events/day |
+| Request latency p50          |               1,882 ms |
+| Request latency p95          |               2,430 ms |
+| Request latency p99          |               2,733 ms |
+| Request latency max          |               2,827 ms |
 
 The harness correctly marked this result as an estimate, not a certification,
 because it was shorter than 600 seconds.
@@ -150,7 +150,7 @@ A passing harness certification must include:
 - `certification.requested: true` and `certification.passed: true`;
 - zero request failures, duplicate events, rejected events, and failed events;
 - completed request accounting;
-- reliable and exact aggregate reconciliation;
+- reliable and exact run-session reconciliation;
 - separate accepted and stored throughput/capacity fields.
 
 Release evidence should additionally record deployment health and successful

package/docs/benchmarks/2026-08-21-formal-certification.md

@@ -0,0 +1,353 @@
+# Formal ingest certification, 2026-08-21
+
+This report preserves four isolated ten-minute benchmark runs against the
+non-production Synapse canary. It is engineering evidence for the tested commit
+and deployment, not a production SLA.
+
+## Environment
+
+| Item                | Value                                              |
+| ------------------- | -------------------------------------------------- |
+| Git commit          | `e6ae92658c86c1931e697fa2a38c80fd902f7afa`         |
+| Package version     | `0.1.0-alpha.3`                                    |
+| Deployment          | DEV `fast-finch-7454`                              |
+| Benchmark site      | `kx75pnr9wap522n0zmh4nnb4jh8cv110`                 |
+| Driver              | One local Node.js process                          |
+| Reconciliation      | Exact run-scoped session IDs, indexed pages of 100 |
+| Health before/after | `ok: true`                                         |
+| GeoIP provider      | Disabled                                           |
+
+All runs used `--duration 600 --certify`. Runs were sequential so the profiles
+did not compete with each other. A harness certification means the run lasted
+the required duration, had clean request accounting, and reconciled every
+expected stored event. Meeting the separate 100 million stored-events/day target
+requires at least 1,157.41 stored events/second.
+
+## Results
+
+| Profile   | Concurrency | Batch | Accepted |  Stored | Stored/s | Certified stored/day |      p95 | Exact reconciliation | 100M/day target  |
+| --------- | ----------: | ----: | -------: | ------: | -------: | -------------------: | -------: | -------------------- | ---------------- |
+| Lean      |         100 |    50 |  952,600 | 952,600 |    1,582 |          136,654,617 | 4,543 ms | 952,600 / 952,600    | Pass             |
+| Realistic |          75 |    50 |  885,700 | 842,080 |    1,398 |          120,808,947 | 4,247 ms | 842,080 / 842,080    | Pass             |
+| Heavy     |         100 |    20 |  353,980 | 353,980 |      588 |           50,769,480 | 5,787 ms | 353,980 / 353,980    | **Below target** |
+| Feature   |         100 |    15 |  232,170 | 232,170 |      384 |           33,218,356 | 6,226 ms | 232,170 / 232,170    | **Below target** |
+
+The realistic run accepted 43,620 heartbeats, which intentionally update live
+presence without increasing persistent event counts. Its accepted-versus-stored
+difference is therefore exact. The heavy request measured 62,054 bytes and
+sustained 1,828,443 request bytes/second below the 64 KiB HTTP body limit.
+
+## Heavy recertification after byte-accounting optimization
+
+Commit `4460ad34314a6e15c24a0c78aab6e6ce85db5c60` reused each event's exact
+UTF-8 byte measurement for both batch validation and rate limits, removing one
+full-payload serialization from the ingestion transaction. A new isolated
+ten-minute run on 2026-08-22 used the same deployment, site, concurrency, batch
+size, and heavy payload.
+
+| Result               |   Original | Recertified | Change |
+| -------------------- | ---------: | ----------: | -----: |
+| Stored events/s      |        588 |         887 | +50.9% |
+| Certified stored/day | 50,769,480 |  76,623,702 | +50.9% |
+| Request bytes/s      |  1,828,443 |   2,759,875 | +50.9% |
+| p95 latency          |   5,787 ms |    3,670 ms | -36.6% |
+
+The recertification remained below the separate 100 million events/day target,
+but raised the measured heavy-payload ceiling without changing payload shape or
+weakening validation, rate limits, or reconciliation.
+
+```json
+{
+  "label": "heavy-2026-08-22T04:03:22.517Z",
+  "runId": "f3943151-bc71-4806-b609-69faf8bdfb0c",
+  "profile": "heavy",
+  "targetDurationSeconds": 600,
+  "elapsedMs": 601726,
+  "terminationReason": "duration",
+  "durationCompleted": true,
+  "certification": {
+    "requested": true,
+    "passed": true,
+    "minimumDurationSeconds": 600
+  },
+  "concurrency": 100,
+  "batchSize": 20,
+  "sessionPool": 2048,
+  "maximumRequests": null,
+  "requests": { "started": 26682, "completed": 26682, "failures": 0 },
+  "events": {
+    "sent": 533640,
+    "heartbeats": 0,
+    "accepted": 533640,
+    "stored": 533640,
+    "duplicates": 0,
+    "rejected": 0,
+    "failed": 0
+  },
+  "errors": {},
+  "throughput": {
+    "eventsPerSecond": 887,
+    "storedEventsPerSecond": 887,
+    "estimatedEventsPerDay": 76623702,
+    "estimatedStoredEventsPerDay": 76623702,
+    "certifiedEventsPerDay": 76623702,
+    "certifiedStoredEventsPerDay": 76623702,
+    "requestBytesPerSecond": 2759875
+  },
+  "latencyMs": { "p50": 2035, "p95": 3670, "p99": 4755, "max": 8139 },
+  "reconciliation": {
+    "scope": "run-session-ids",
+    "reliable": true,
+    "expectedSessions": 2048,
+    "requestedSessions": 2048,
+    "foundSessions": 2048,
+    "acceptedEvents": 533640,
+    "acceptedHeartbeats": 0,
+    "expectedStoredEvents": 533640,
+    "storedEvents": 533640,
+    "matches": true
+  }
+}
+```
+
+## Run artifacts
+
+### Lean
+
+```json
+{
+  "label": "lean-2026-08-21T13:31:27.434Z",
+  "runId": "41788de1-964e-4315-8b00-f295e202f2e0",
+  "profile": "lean",
+  "targetDurationSeconds": 600,
+  "elapsedMs": 602282,
+  "terminationReason": "duration",
+  "durationCompleted": true,
+  "certification": {
+    "requested": true,
+    "passed": true,
+    "minimumDurationSeconds": 600
+  },
+  "concurrency": 100,
+  "batchSize": 50,
+  "sessionPool": "unique-per-request",
+  "maximumRequests": null,
+  "requests": { "started": 19052, "completed": 19052, "failures": 0 },
+  "events": {
+    "sent": 952600,
+    "heartbeats": 0,
+    "accepted": 952600,
+    "stored": 952600,
+    "duplicates": 0,
+    "rejected": 0,
+    "failed": 0
+  },
+  "errors": {},
+  "throughput": {
+    "eventsPerSecond": 1582,
+    "storedEventsPerSecond": 1582,
+    "estimatedEventsPerDay": 136654617,
+    "estimatedStoredEventsPerDay": 136654617,
+    "certifiedEventsPerDay": 136654617,
+    "certifiedStoredEventsPerDay": 136654617,
+    "requestBytesPerSecond": 438830
+  },
+  "latencyMs": { "p50": 2979, "p95": 4543, "p99": 5217, "max": 5628 },
+  "reconciliation": {
+    "scope": "run-session-ids",
+    "reliable": true,
+    "expectedSessions": 19052,
+    "requestedSessions": 19052,
+    "foundSessions": 19052,
+    "acceptedEvents": 952600,
+    "acceptedHeartbeats": 0,
+    "expectedStoredEvents": 952600,
+    "storedEvents": 952600,
+    "matches": true
+  }
+}
+```
+
+### Realistic
+
+```json
+{
+  "label": "realistic-2026-08-21T13:42:07.118Z",
+  "runId": "8a883d9a-537a-4ce5-b300-be77995ba5da",
+  "profile": "realistic",
+  "targetDurationSeconds": 600,
+  "elapsedMs": 602238,
+  "terminationReason": "duration",
+  "durationCompleted": true,
+  "certification": {
+    "requested": true,
+    "passed": true,
+    "minimumDurationSeconds": 600
+  },
+  "concurrency": 75,
+  "batchSize": 50,
+  "sessionPool": 2048,
+  "maximumRequests": null,
+  "requests": { "started": 17714, "completed": 17714, "failures": 0 },
+  "events": {
+    "sent": 885700,
+    "heartbeats": 43620,
+    "accepted": 885700,
+    "stored": 842080,
+    "duplicates": 0,
+    "rejected": 0,
+    "failed": 0
+  },
+  "errors": {},
+  "throughput": {
+    "eventsPerSecond": 1471,
+    "storedEventsPerSecond": 1398,
+    "estimatedEventsPerDay": 127066887,
+    "estimatedStoredEventsPerDay": 120808947,
+    "certifiedEventsPerDay": 127066887,
+    "certifiedStoredEventsPerDay": 120808947,
+    "requestBytesPerSecond": 445267
+  },
+  "latencyMs": { "p50": 2257, "p95": 4247, "p99": 5122, "max": 6133 },
+  "reconciliation": {
+    "scope": "run-session-ids",
+    "reliable": true,
+    "expectedSessions": 2048,
+    "requestedSessions": 2048,
+    "foundSessions": 2048,
+    "acceptedEvents": 885700,
+    "acceptedHeartbeats": 43620,
+    "expectedStoredEvents": 842080,
+    "storedEvents": 842080,
+    "matches": true
+  }
+}
+```
+
+### Heavy
+
+```json
+{
+  "label": "heavy-2026-08-21T13:52:43.382Z",
+  "runId": "8cd7221e-2e33-4e94-9f9d-13bb4a84c60e",
+  "profile": "heavy",
+  "targetDurationSeconds": 600,
+  "elapsedMs": 602407,
+  "terminationReason": "duration",
+  "durationCompleted": true,
+  "certification": {
+    "requested": true,
+    "passed": true,
+    "minimumDurationSeconds": 600
+  },
+  "concurrency": 100,
+  "batchSize": 20,
+  "sessionPool": 2048,
+  "maximumRequests": null,
+  "requests": { "started": 17699, "completed": 17699, "failures": 0 },
+  "events": {
+    "sent": 353980,
+    "heartbeats": 0,
+    "accepted": 353980,
+    "stored": 353980,
+    "duplicates": 0,
+    "rejected": 0,
+    "failed": 0
+  },
+  "errors": {},
+  "throughput": {
+    "eventsPerSecond": 588,
+    "storedEventsPerSecond": 588,
+    "estimatedEventsPerDay": 50769480,
+    "estimatedStoredEventsPerDay": 50769480,
+    "certifiedEventsPerDay": 50769480,
+    "certifiedStoredEventsPerDay": 50769480,
+    "requestBytesPerSecond": 1828443
+  },
+  "latencyMs": { "p50": 2968, "p95": 5787, "p99": 6942, "max": 7839 },
+  "reconciliation": {
+    "scope": "run-session-ids",
+    "reliable": true,
+    "expectedSessions": 2048,
+    "requestedSessions": 2048,
+    "foundSessions": 2048,
+    "acceptedEvents": 353980,
+    "acceptedHeartbeats": 0,
+    "expectedStoredEvents": 353980,
+    "storedEvents": 353980,
+    "matches": true
+  }
+}
+```
+
+### Feature
+
+```json
+{
+  "label": "feature-2026-08-21T14:03:20.654Z",
+  "runId": "8e60bc5f-6fff-4791-b02c-0e7340767b55",
+  "profile": "feature",
+  "targetDurationSeconds": 600,
+  "elapsedMs": 603868,
+  "terminationReason": "duration",
+  "durationCompleted": true,
+  "certification": {
+    "requested": true,
+    "passed": true,
+    "minimumDurationSeconds": 600
+  },
+  "concurrency": 100,
+  "batchSize": 15,
+  "sessionPool": 2048,
+  "maximumRequests": null,
+  "requests": { "started": 15478, "completed": 15478, "failures": 0 },
+  "events": {
+    "sent": 232170,
+    "heartbeats": 0,
+    "accepted": 232170,
+    "stored": 232170,
+    "duplicates": 0,
+    "rejected": 0,
+    "failed": 0
+  },
+  "errors": {},
+  "throughput": {
+    "eventsPerSecond": 384,
+    "storedEventsPerSecond": 384,
+    "estimatedEventsPerDay": 33218356,
+    "estimatedStoredEventsPerDay": 33218356,
+    "certifiedEventsPerDay": 33218356,
+    "certifiedStoredEventsPerDay": 33218356,
+    "requestBytesPerSecond": 119846
+  },
+  "latencyMs": { "p50": 3523, "p95": 6226, "p99": 7722, "max": 8524 },
+  "reconciliation": {
+    "scope": "run-session-ids",
+    "reliable": true,
+    "expectedSessions": 2048,
+    "requestedSessions": 2048,
+    "foundSessions": 2048,
+    "acceptedEvents": 232170,
+    "acceptedHeartbeats": 0,
+    "expectedStoredEvents": 232170,
+    "storedEvents": 232170,
+    "matches": true
+  }
+}
+```
+
+## Conclusions
+
+- Lean and realistic traffic exceeded 100 million stored events/day for a full
+  ten minutes with exact reconciliation and no failures.
+- Heavy and feature traffic completed cleanly but did not meet the 100 million
+  stored-events/day target at the tested payloads and concurrency. The latest
+  heavy ceiling is 76.62 million events/day after recertification.
+- The updated heavy result demonstrates a different ceiling: 2.76 MB/s of
+  near-limit requests. It must not be generalized to minimal or realistic
+  payloads.
+- Trusted financial conversions were not exercised. They require a separate
+  server-side driver because browser traffic cannot cross the financial trust
+  boundary.
+- GeoIP provider behavior was not benchmarked because provider enrichment was
+  disabled on this deployment.