@iann29/rastro 0.1.0-alpha.4 → 0.1.0-alpha.5

package/dist/component/visitors.js

@@ -0,0 +1,86 @@
+import { v } from "convex/values";
+import { MAX_VISITOR_ALIASES } from "./constants.js";
+import { fail } from "./errors.js";
+import { sanitizeOpaqueId } from "./sanitize.js";
+import { mutation } from "./_generated/server.js";
+/**
+ * Folds an anonymous visitor id into the pseudonymous identity the host
+ * supplies after signup or sign-in. Links are one level deep: an alias can
+ * belong to one identity, an identity can never become an alias, and an
+ * alias can never own aliases, so journeys stay bounded and unambiguous.
+ */
+export const link = mutation({
+    args: {
+        siteId: v.id("sites"),
+        visitorId: v.string(),
+        previousVisitorId: v.string(),
+    },
+    returns: v.object({ linked: v.boolean(), aliasCount: v.number() }),
+    handler: async (ctx, args) => {
+        const site = await ctx.db.get("sites", args.siteId);
+        if (!site)
+            fail("NOT_FOUND", "site not found");
+        let visitorId;
+        let previousVisitorId;
+        try {
+            visitorId = sanitizeOpaqueId(args.visitorId, "visitorId");
+            previousVisitorId = sanitizeOpaqueId(args.previousVisitorId, "previousVisitorId");
+        }
+        catch (error) {
+            fail("INVALID_ARGUMENT", error instanceof Error ? error.message : "invalid visitor id");
+        }
+        if (visitorId === previousVisitorId) {
+            fail("INVALID_ARGUMENT", "previousVisitorId must differ from visitorId");
+        }
+        if (await findAlias(ctx, args.siteId, visitorId)) {
+            fail("CONFLICT", "visitorId is already linked to another visitor");
+        }
+        const previousOwnsAliases = await ctx.db
+            .query("visitorAliases")
+            .withIndex("by_siteId_and_visitorId", (range) => range.eq("siteId", args.siteId).eq("visitorId", previousVisitorId))
+            .first();
+        if (previousOwnsAliases) {
+            fail("CONFLICT", "previousVisitorId already owns linked visitors");
+        }
+        const aliases = await ctx.db
+            .query("visitorAliases")
+            .withIndex("by_siteId_and_visitorId", (range) => range.eq("siteId", args.siteId).eq("visitorId", visitorId))
+            .take(MAX_VISITOR_ALIASES);
+        const existing = await findAlias(ctx, args.siteId, previousVisitorId);
+        if (existing) {
+            if (existing.visitorId !== visitorId) {
+                fail("CONFLICT", "previousVisitorId is already linked to a different visitor");
+            }
+            return { linked: false, aliasCount: aliases.length };
+        }
+        if (aliases.length >= MAX_VISITOR_ALIASES) {
+            fail("LIMIT_EXCEEDED", `a visitor can hold at most ${MAX_VISITOR_ALIASES} aliases`, {
+                limit: MAX_VISITOR_ALIASES,
+            });
+        }
+        await ctx.db.insert("visitorAliases", {
+            siteId: args.siteId,
+            visitorId,
+            previousVisitorId,
+            linkedAt: Date.now(),
+        });
+        return { linked: true, aliasCount: aliases.length + 1 };
+    },
+});
+/** The identity a visitor id resolves to, followed by every alias it owns. */
+export async function resolveVisitorIdentities(ctx, siteId, visitorId) {
+    const alias = await findAlias(ctx, siteId, visitorId);
+    const identity = alias?.visitorId ?? visitorId;
+    const aliases = await ctx.db
+        .query("visitorAliases")
+        .withIndex("by_siteId_and_visitorId", (range) => range.eq("siteId", siteId).eq("visitorId", identity))
+        .take(MAX_VISITOR_ALIASES);
+    return [identity, ...aliases.map((row) => row.previousVisitorId)];
+}
+function findAlias(ctx, siteId, previousVisitorId) {
+    return ctx.db
+        .query("visitorAliases")
+        .withIndex("by_siteId_and_previousVisitorId", (range) => range.eq("siteId", siteId).eq("previousVisitorId", previousVisitorId))
+        .unique();
+}
+//# sourceMappingURL=visitors.js.map

package/dist/component/visitors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visitors.js","sourceRoot":"","sources":["../../src/component/visitors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAE,QAAQ,EAAiB,MAAM,wBAAwB,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC;IAC3B,IAAI,EAAE;QACJ,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC;QACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;KAC9B;IACD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAClE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC/C,IAAI,SAAiB,CAAC;QACtB,IAAI,iBAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC1D,iBAAiB,GAAG,gBAAgB,CAClC,IAAI,CAAC,iBAAiB,EACtB,mBAAmB,CACpB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CACF,kBAAkB,EAClB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAC9D,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;YACpC,IAAI,CAAC,kBAAkB,EAAE,8CAA8C,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,UAAU,EAAE,gDAAgD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,mBAAmB,GAAG,MAAM,GAAG,CAAC,EAAE;aACrC,KAAK,CAAC,gBAAgB,CAAC;aACvB,SAAS,CAAC,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC9C,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CACnE;aACA,KAAK,EAAE,CAAC;QACX,IAAI,mBAAmB,EAAE,CAAC;YACxB,IAAI,CAAC,UAAU,EAAE,gDAAgD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE;aACzB,KAAK,CAAC,gBAAgB,CAAC;aACvB,SAAS,CAAC,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC9C,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,CAC3D;aACA,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QACtE,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACrC,IAAI,CAAC,UAAU,EAAE,4DAA4D,CAAC,CAAC;YACjF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAC;YAC1C,IAAI,CAAC,gBAAgB,EAAE,8BAA8B,mBAAmB,UAAU,EAAE;gBAClF,KAAK,EAAE,mBAAmB;aAC3B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS;YACT,iBAAiB;YACjB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAC1D,CAAC;CACF,CAAC,CAAC;AAEH,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAa,EACb,MAAmB,EACnB,SAAiB;IAEjB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,EAAE,SAAS,IAAI,SAAS,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE;SACzB,KAAK,CAAC,gBAAgB,CAAC;SACvB,SAAS,CAAC,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC9C,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CACrD;SACA,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC7B,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,SAAS,CAAC,GAAa,EAAE,MAAmB,EAAE,iBAAyB;IAC9E,OAAO,GAAG,CAAC,EAAE;SACV,KAAK,CAAC,gBAAgB,CAAC;SACvB,SAAS,CAAC,iCAAiC,EAAE,CAAC,KAAK,EAAE,EAAE,CACtD,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CACtE;SACA,MAAM,EAAE,CAAC;AACd,CAAC"}

package/dist/tracker/generated.d.ts

@@ -1,5 +1,5 @@
-export declare const TRACKER_SOURCE = "(()=>{const e=document.currentScript,t=e?.dataset.site,s=e?.dataset.endpoint||e?.src&&new URL(\"events\",e.src).href;if(!t||!s)return;const n=()=>crypto.randomUUID?.()||Math.random()+\"\",o=new URLSearchParams(location.search).get(\"ref\")?.slice(0,64);let r,a;try{r=sessionStorage._r||n(),sessionStorage._r=r,a=o||sessionStorage._a,a&&(sessionStorage._a=a)}catch{r=n(),a=o}const i=e.dataset.visitor||r;let c,d=0;const l=[],h=document.referrer?new URL(document.referrer).origin:void 0,p=e=>{const n=l.splice(0,50);if(!n.length)return;const o=()=>new Blob([JSON.stringify({siteId:t,events:n})]);let r=o();for(;r.size>64e3&&n.length>1;)l.unshift(n.pop()),r=o();e&&navigator.sendBeacon(s,r)||fetch(s,{method:\"POST\",body:r,keepalive:1}).catch(()=>{}),l.length&&p(e)},g=(e,t,s)=>{const n=Date.now();l.push({eventId:`${r}.${n.toString(36)}.${d}`,sessionId:r,visitorId:i,type:e,name:t,path:location.pathname.slice(0,256),referrer:h,timestamp:n,sequence:d++,affiliateSlug:a,...s}),clearTimeout(c),c=setTimeout(p,1200)};let u;const v=()=>{const e=location.pathname;e!==u&&(u=e,g(\"pageview\"))};window.rastro=(e,t,s)=>{if(\"context\"===e)return{sessionId:r,visitorId:i};\"event\"===e&&g(\"custom\",`${t||\"event\"}`.slice(0,80),s&&JSON.stringify(s).length>2e4?void 0:{properties:s})},document.addEventListener(\"click\",e=>{const t=e.target?.closest(\"a,button,[data-rastro-event]\");if(!t)return;const s=t.dataset.rastroEvent,n=t.href,o=n&&new URL(n),r=/^https?:$/.test(o?.protocol);g(s?\"custom\":r&&o.origin!==location.origin?\"outbound\":\"click\",s,{target:(t.dataset.rastroLabel||t.tagName).slice(0,80),href:r?o.pathname.slice(0,256):void 0})},1);const m=e=>{const t=history[e];history[e]=(...e)=>{t.apply(history,e),v()}};m(\"pushState\"),m(\"replaceState\"),addEventListener(\"popstate\",v),addEventListener(\"pagehide\",()=>p(1)),setInterval(()=>{g(\"heartbeat\"),p()},2e4),v()})();";
-export declare const TRACKER_GZIP_BASE64 = "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";
-export declare const TRACKER_RAW_BYTES = 1846;
-export declare const TRACKER_GZIP_BYTES = 1000;
+export declare const TRACKER_SOURCE = "(()=>{const e=document.currentScript,t=e?.dataset.site,s=e?.dataset.endpoint||e?.src&&new URL(\"events\",e.src).href;if(!t||!s)return;const o=()=>crypto.randomUUID?.()||Math.random()+\"\",n=new URLSearchParams(location.search),r=n.get(\"ref\")?.slice(0,64);let i,a,c;for(const e of[\"source\",\"medium\",\"campaign\",\"term\",\"content\"]){const t=n.get(\"utm_\"+e)?.slice(0,64);t&&((i??={})[\"utm_\"+e]=t)}try{a=sessionStorage._r||o(),sessionStorage._r=a,c=r||sessionStorage._a,c&&(sessionStorage._a=c),i||=sessionStorage._u&&JSON.parse(sessionStorage._u),i&&(sessionStorage._u=JSON.stringify(i))}catch{a=o(),c=r}const d=e.dataset.visitor||a;let l,p=0;const g=[],u=document.referrer?new URL(document.referrer).origin:void 0,h=e=>{const o=g.splice(0,50);if(!o.length)return;const n=()=>new Blob([JSON.stringify({siteId:t,events:o})]);let r=n();for(;r.size>64e3&&o.length>1;)g.unshift(o.pop()),r=n();e&&navigator.sendBeacon(s,r)||fetch(s,{method:\"POST\",body:r,keepalive:1}).catch(()=>{}),g.length&&h(e)},m=(e,t,s)=>{const o=Date.now();g.push({eventId:`${a}.${o.toString(36)}.${p}`,sessionId:a,visitorId:d,type:e,name:t,path:location.pathname.slice(0,256),referrer:u,timestamp:o,sequence:p++,affiliateSlug:c,...s}),clearTimeout(l),l=setTimeout(h,1200)};let f;const v=()=>{const e=location.pathname;e!==f&&(f=e,m(\"pageview\",void 0,i&&{properties:i}))};window.rastro=(e,t,s)=>{if(\"context\"===e)return{sessionId:a,visitorId:d};\"event\"===e&&m(\"custom\",`${t||\"event\"}`.slice(0,80),s&&JSON.stringify(s).length>2e4?void 0:{properties:s})},document.addEventListener(\"click\",e=>{const t=e.target?.closest(\"a,button,[data-rastro-event]\");if(!t)return;const s=t.dataset.rastroEvent,o=t.href,n=o&&new URL(o),r=/^https?:$/.test(n?.protocol),i=r&&n.origin!==location.origin;m(s?\"custom\":i?\"outbound\":\"click\",s,{target:(t.dataset.rastroLabel||t.innerText||t.tagName).slice(0,64),href:r?((i?n.origin:\"\")+n.pathname).slice(0,256):void 0})},1);const S=e=>{const t=history[e];history[e]=(...e)=>{t.apply(history,e),v()}};S(\"pushState\"),S(\"replaceState\"),addEventListener(\"popstate\",v),addEventListener(\"pagehide\",()=>h(1)),setInterval(()=>{m(\"heartbeat\"),h()},2e4),v()})();";
+export declare const TRACKER_GZIP_BASE64 = "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";
+export declare const TRACKER_RAW_BYTES = 2132;
+export declare const TRACKER_GZIP_BYTES = 1127;
 //# sourceMappingURL=generated.d.ts.map

package/dist/tracker/generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generated.d.ts","sourceRoot":"","sources":["../../src/tracker/generated.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,cAAc,i2DAAi2D,CAAC;AAC73D,eAAO,MAAM,mBAAmB,6zCAA6zC,CAAC;AAC91C,eAAO,MAAM,iBAAiB,OAAO,CAAC;AACtC,eAAO,MAAM,kBAAkB,OAAO,CAAC"}
+{"version":3,"file":"generated.d.ts","sourceRoot":"","sources":["../../src/tracker/generated.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,cAAc,+oEAA+oE,CAAC;AAC3qE,eAAO,MAAM,mBAAmB,q+CAAq+C,CAAC;AACtgD,eAAO,MAAM,iBAAiB,OAAO,CAAC;AACtC,eAAO,MAAM,kBAAkB,OAAO,CAAC"}

package/dist/tracker/generated.js

@@ -1,6 +1,6 @@
 // Generated by scripts/build-tracker.mjs. Do not edit.
-export const TRACKER_SOURCE = "(()=>{const e=document.currentScript,t=e?.dataset.site,s=e?.dataset.endpoint||e?.src&&new URL(\"events\",e.src).href;if(!t||!s)return;const n=()=>crypto.randomUUID?.()||Math.random()+\"\",o=new URLSearchParams(location.search).get(\"ref\")?.slice(0,64);let r,a;try{r=sessionStorage._r||n(),sessionStorage._r=r,a=o||sessionStorage._a,a&&(sessionStorage._a=a)}catch{r=n(),a=o}const i=e.dataset.visitor||r;let c,d=0;const l=[],h=document.referrer?new URL(document.referrer).origin:void 0,p=e=>{const n=l.splice(0,50);if(!n.length)return;const o=()=>new Blob([JSON.stringify({siteId:t,events:n})]);let r=o();for(;r.size>64e3&&n.length>1;)l.unshift(n.pop()),r=o();e&&navigator.sendBeacon(s,r)||fetch(s,{method:\"POST\",body:r,keepalive:1}).catch(()=>{}),l.length&&p(e)},g=(e,t,s)=>{const n=Date.now();l.push({eventId:`${r}.${n.toString(36)}.${d}`,sessionId:r,visitorId:i,type:e,name:t,path:location.pathname.slice(0,256),referrer:h,timestamp:n,sequence:d++,affiliateSlug:a,...s}),clearTimeout(c),c=setTimeout(p,1200)};let u;const v=()=>{const e=location.pathname;e!==u&&(u=e,g(\"pageview\"))};window.rastro=(e,t,s)=>{if(\"context\"===e)return{sessionId:r,visitorId:i};\"event\"===e&&g(\"custom\",`${t||\"event\"}`.slice(0,80),s&&JSON.stringify(s).length>2e4?void 0:{properties:s})},document.addEventListener(\"click\",e=>{const t=e.target?.closest(\"a,button,[data-rastro-event]\");if(!t)return;const s=t.dataset.rastroEvent,n=t.href,o=n&&new URL(n),r=/^https?:$/.test(o?.protocol);g(s?\"custom\":r&&o.origin!==location.origin?\"outbound\":\"click\",s,{target:(t.dataset.rastroLabel||t.tagName).slice(0,80),href:r?o.pathname.slice(0,256):void 0})},1);const m=e=>{const t=history[e];history[e]=(...e)=>{t.apply(history,e),v()}};m(\"pushState\"),m(\"replaceState\"),addEventListener(\"popstate\",v),addEventListener(\"pagehide\",()=>p(1)),setInterval(()=>{g(\"heartbeat\"),p()},2e4),v()})();";
-export const TRACKER_GZIP_BASE64 = "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";
-export const TRACKER_RAW_BYTES = 1846;
-export const TRACKER_GZIP_BYTES = 1000;
+export const TRACKER_SOURCE = "(()=>{const e=document.currentScript,t=e?.dataset.site,s=e?.dataset.endpoint||e?.src&&new URL(\"events\",e.src).href;if(!t||!s)return;const o=()=>crypto.randomUUID?.()||Math.random()+\"\",n=new URLSearchParams(location.search),r=n.get(\"ref\")?.slice(0,64);let i,a,c;for(const e of[\"source\",\"medium\",\"campaign\",\"term\",\"content\"]){const t=n.get(\"utm_\"+e)?.slice(0,64);t&&((i??={})[\"utm_\"+e]=t)}try{a=sessionStorage._r||o(),sessionStorage._r=a,c=r||sessionStorage._a,c&&(sessionStorage._a=c),i||=sessionStorage._u&&JSON.parse(sessionStorage._u),i&&(sessionStorage._u=JSON.stringify(i))}catch{a=o(),c=r}const d=e.dataset.visitor||a;let l,p=0;const g=[],u=document.referrer?new URL(document.referrer).origin:void 0,h=e=>{const o=g.splice(0,50);if(!o.length)return;const n=()=>new Blob([JSON.stringify({siteId:t,events:o})]);let r=n();for(;r.size>64e3&&o.length>1;)g.unshift(o.pop()),r=n();e&&navigator.sendBeacon(s,r)||fetch(s,{method:\"POST\",body:r,keepalive:1}).catch(()=>{}),g.length&&h(e)},m=(e,t,s)=>{const o=Date.now();g.push({eventId:`${a}.${o.toString(36)}.${p}`,sessionId:a,visitorId:d,type:e,name:t,path:location.pathname.slice(0,256),referrer:u,timestamp:o,sequence:p++,affiliateSlug:c,...s}),clearTimeout(l),l=setTimeout(h,1200)};let f;const v=()=>{const e=location.pathname;e!==f&&(f=e,m(\"pageview\",void 0,i&&{properties:i}))};window.rastro=(e,t,s)=>{if(\"context\"===e)return{sessionId:a,visitorId:d};\"event\"===e&&m(\"custom\",`${t||\"event\"}`.slice(0,80),s&&JSON.stringify(s).length>2e4?void 0:{properties:s})},document.addEventListener(\"click\",e=>{const t=e.target?.closest(\"a,button,[data-rastro-event]\");if(!t)return;const s=t.dataset.rastroEvent,o=t.href,n=o&&new URL(o),r=/^https?:$/.test(n?.protocol),i=r&&n.origin!==location.origin;m(s?\"custom\":i?\"outbound\":\"click\",s,{target:(t.dataset.rastroLabel||t.innerText||t.tagName).slice(0,64),href:r?((i?n.origin:\"\")+n.pathname).slice(0,256):void 0})},1);const S=e=>{const t=history[e];history[e]=(...e)=>{t.apply(history,e),v()}};S(\"pushState\"),S(\"replaceState\"),addEventListener(\"popstate\",v),addEventListener(\"pagehide\",()=>h(1)),setInterval(()=>{m(\"heartbeat\"),h()},2e4),v()})();";
+export const TRACKER_GZIP_BASE64 = "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";
+export const TRACKER_RAW_BYTES = 2132;
+export const TRACKER_GZIP_BYTES = 1127;
 //# sourceMappingURL=generated.js.map

package/dist/tracker/generated.js.map

@@ -1 +1 @@
-{"version":3,"file":"generated.js","sourceRoot":"","sources":["../../src/tracker/generated.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,MAAM,CAAC,MAAM,cAAc,GAAG,81DAA81D,CAAC;AAC73D,MAAM,CAAC,MAAM,mBAAmB,GAAG,0zCAA0zC,CAAC;AAC91C,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AACtC,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC"}
+{"version":3,"file":"generated.js","sourceRoot":"","sources":["../../src/tracker/generated.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,MAAM,CAAC,MAAM,cAAc,GAAG,4oEAA4oE,CAAC;AAC3qE,MAAM,CAAC,MAAM,mBAAmB,GAAG,k+CAAk+C,CAAC;AACtgD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AACtC,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC"}

package/dist/tracker/tracker.js

@@ -7,9 +7,15 @@
     if (!siteId || !endpoint)
         return;
     const createId = () => crypto.randomUUID?.() || Math.random() + "";
-    const referral = new URLSearchParams(location.search)
-        .get("ref")
-        ?.slice(0, 64);
+    const params = new URLSearchParams(location.search);
+    const referral = params.get("ref")?.slice(0, 64);
+    // Only the utm_* campaign keys leave the page; other query parameters never do.
+    let utm;
+    for (const key of ["source", "medium", "campaign", "term", "content"]) {
+        const value = params.get("utm_" + key)?.slice(0, 64);
+        if (value)
+            (utm ??= {})["utm_" + key] = value;
+    }
     let sessionId;
     let affiliate;
     try {
@@ -18,6 +24,9 @@
         affiliate = referral || sessionStorage._a;
         if (affiliate)
             sessionStorage._a = affiliate;
+        utm ||= sessionStorage._u && JSON.parse(sessionStorage._u);
+        if (utm)
+            sessionStorage._u = JSON.stringify(utm);
     }
     catch {
         sessionId = createId();
@@ -72,7 +81,7 @@
         if (path === lastPath)
             return;
         lastPath = path;
-        emit("pageview");
+        emit("pageview", undefined, utm && { properties: utm });
     };
     window.rastro = (command, value, properties) => {
         if (command === "context")
@@ -91,13 +100,16 @@
         const href = element.href;
         const url = (href && new URL(href));
         const web = /^https?:$/.test(url?.protocol);
-        emit(name
-            ? "custom"
-            : web && url.origin !== location.origin
-                ? "outbound"
-                : "click", name, {
-            target: (element.dataset.rastroLabel || element.tagName).slice(0, 80),
-            href: web ? url.pathname.slice(0, 256) : undefined,
+        const external = web && url.origin !== location.origin;
+        // The visible label is UI copy, never input contents; hosts override it
+        // with data-rastro-label. The server trims and collapses whitespace.
+        emit(name ? "custom" : external ? "outbound" : "click", name, {
+            target: (element.dataset.rastroLabel ||
+                element.innerText ||
+                element.tagName).slice(0, 64),
+            href: web
+                ? ((external ? url.origin : "") + url.pathname).slice(0, 256)
+                : undefined,
         });
     }, true);
     const wrapHistory = (method) => {

package/dist/tracker/tracker.js.map

@@ -1 +1 @@
-{"version":3,"file":"tracker.js","sourceRoot":"","sources":["../../src/tracker/tracker.ts"],"names":[],"mappings":";AAyCA,CAAC,GAAG,EAAE;IACJ,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAyC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,EAAE,OAAO,CAAC,QAAQ;QACvC,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;QAAE,OAAO;IAEjC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC;SAClD,GAAG,CAAC,KAAK,CAAC;QACX,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjB,IAAI,SAAiB,CAAC;IACtB,IAAI,SAA6B,CAAC;IAClC,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CAAC,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC5C,cAAc,CAAC,EAAE,GAAG,SAAS,CAAC;QAC9B,SAAS,GAAG,QAAQ,IAAI,cAAc,CAAC,EAAE,CAAC;QAC1C,IAAI,SAAS;YAAE,cAAc,CAAC,EAAE,GAAG,SAAS,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,QAAQ,EAAE,CAAC;QACvB,SAAS,GAAG,QAAQ,CAAC;IACvB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC;IACtD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,UAAqD,CAAC;IAC1D,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ;QAChC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM;QACnC,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,KAAK,GAAG,CAAC,MAAgB,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO;QAC3B,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,IAAI,GAAG,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAG,CAAC,CAAC;YAC7B,IAAI,GAAG,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;YACrD,KAAK,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CACnE,GAAG,EAAE;gBACH,mEAAmE;YACrE,CAAC,CACF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CACX,IAAqB,EACrB,IAAa,EACb,KAA4B,EAC5B,EAAE;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC;YACT,OAAO,EAAE,GAAG,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,QAAQ,EAAE;YAC7D,SAAS;YACT,SAAS;YACT,IAAI;YACJ,IAAI;YACJ,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACrC,QAAQ;YACR,SAAS;YACT,QAAQ,EAAE,QAAQ,EAAE;YACpB,aAAa,EAAE,SAAS;YACxB,GAAG,KAAK;SACT,CAAC,CAAC;QACH,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC;IAEF,IAAI,QAA4B,CAAC;IACjC,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAC/B,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC9B,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,UAAU,CAAC,CAAC;IACnB,CAAC,CAAC;IACD,MAAuB,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;QAC/D,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QAC3D,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,IAAI,CACF,QAAQ,EACR,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAClC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,MAAM;gBACtD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,EAAE,UAAU,EAAE,CACnB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,QAAQ,CAAC,gBAAgB,CACvB,OAAO,EACP,CAAC,KAAK,EAAE,EAAE;QACR,MAAM,OAAO,GAAI,KAAK,CAAC,MAAyB,EAAE,OAAO,CACvD,8BAA8B,CAC/B,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QACzC,MAAM,IAAI,GAAI,OAA6B,CAAC,IAAI,CAAC;QACjD,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAoB,CAAC;QACvD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,QAAkB,CAAC,CAAC;QACtD,IAAI,CACF,IAAI;YACF,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,GAAG,IAAI,GAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;gBACtC,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,OAAO,EACb,IAAI,EACJ;YACE,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACrE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,GAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SACpD,CACF,CAAC;IACJ,CAAC,EACD,IAAI,CACL,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,MAAoC,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,GAAG,UAAU,GAAG,IAAI;YACjC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC5B,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC;IACJ,CAAC,CAAC;IACF,WAAW,CAAC,WAAW,CAAC,CAAC;IACzB,WAAW,CAAC,cAAc,CAAC,CAAC;IAC5B,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACvC,gBAAgB,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,WAAW,CAAC,GAAG,EAAE;QACf,IAAI,CAAC,WAAW,CAAC,CAAC;QAClB,KAAK,EAAE,CAAC;IACV,CAAC,EAAE,MAAM,CAAC,CAAC;IACX,QAAQ,EAAE,CAAC;AACb,CAAC,CAAC,EAAE,CAAC"}
+{"version":3,"file":"tracker.js","sourceRoot":"","sources":["../../src/tracker/tracker.ts"],"names":[],"mappings":";AAyCA,CAAC,GAAG,EAAE;IACJ,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAyC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,EAAE,OAAO,CAAC,QAAQ;QACvC,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;QAAE,OAAO;IAEjC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjD,gFAAgF;IAChF,IAAI,GAAiC,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QACtE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,KAAK;YAAE,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC;IAChD,CAAC;IACD,IAAI,SAAiB,CAAC;IACtB,IAAI,SAA6B,CAAC;IAClC,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CAAC,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC5C,cAAc,CAAC,EAAE,GAAG,SAAS,CAAC;QAC9B,SAAS,GAAG,QAAQ,IAAI,cAAc,CAAC,EAAE,CAAC;QAC1C,IAAI,SAAS;YAAE,cAAc,CAAC,EAAE,GAAG,SAAS,CAAC;QAC7C,GAAG,KAAK,cAAc,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,GAAG;YAAE,cAAc,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,QAAQ,EAAE,CAAC;QACvB,SAAS,GAAG,QAAQ,CAAC;IACvB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC;IACtD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,UAAqD,CAAC;IAC1D,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ;QAChC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM;QACnC,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,KAAK,GAAG,CAAC,MAAgB,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO;QAC3B,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,IAAI,GAAG,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAG,CAAC,CAAC;YAC7B,IAAI,GAAG,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;YACrD,KAAK,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CACnE,GAAG,EAAE;gBACH,mEAAmE;YACrE,CAAC,CACF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CACX,IAAqB,EACrB,IAAa,EACb,KAA4B,EAC5B,EAAE;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC;YACT,OAAO,EAAE,GAAG,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,QAAQ,EAAE;YAC7D,SAAS;YACT,SAAS;YACT,IAAI;YACJ,IAAI;YACJ,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACrC,QAAQ;YACR,SAAS;YACT,QAAQ,EAAE,QAAQ,EAAE;YACpB,aAAa,EAAE,SAAS;YACxB,GAAG,KAAK;SACT,CAAC,CAAC;QACH,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC;IAEF,IAAI,QAA4B,CAAC;IACjC,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAC/B,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC9B,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC;IACD,MAAuB,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;QAC/D,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QAC3D,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,IAAI,CACF,QAAQ,EACR,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAClC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,MAAM;gBACtD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,EAAE,UAAU,EAAE,CACnB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,QAAQ,CAAC,gBAAgB,CACvB,OAAO,EACP,CAAC,KAAK,EAAE,EAAE;QACR,MAAM,OAAO,GAAI,KAAK,CAAC,MAAyB,EAAE,OAAO,CACvD,8BAA8B,CAC/B,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QACzC,MAAM,IAAI,GAAI,OAA6B,CAAC,IAAI,CAAC;QACjD,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAoB,CAAC;QACvD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,QAAkB,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,GAAG,IAAI,GAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC;QACxD,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE;YAC5D,MAAM,EAAE,CACN,OAAO,CAAC,OAAO,CAAC,WAAW;gBAC3B,OAAO,CAAC,SAAS;gBACjB,OAAO,CAAC,OAAO,CAChB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACd,IAAI,EAAE,GAAG;gBACP,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC/D,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;IACL,CAAC,EACD,IAAI,CACL,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,MAAoC,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,GAAG,UAAU,GAAG,IAAI;YACjC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC5B,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC;IACJ,CAAC,CAAC;IACF,WAAW,CAAC,WAAW,CAAC,CAAC;IACzB,WAAW,CAAC,cAAc,CAAC,CAAC;IAC5B,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACvC,gBAAgB,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,WAAW,CAAC,GAAG,EAAE;QACf,IAAI,CAAC,WAAW,CAAC,CAAC;QAClB,KAAK,EAAE,CAAC;IACV,CAAC,EAAE,MAAM,CAAC,CAAC;IACX,QAAQ,EAAE,CAAC;AACb,CAAC,CAAC,EAAE,CAAC"}

package/dist/tracker.min.js

@@ -1 +1 @@
-(()=>{const e=document.currentScript,t=e?.dataset.site,s=e?.dataset.endpoint||e?.src&&new URL("events",e.src).href;if(!t||!s)return;const n=()=>crypto.randomUUID?.()||Math.random()+"",o=new URLSearchParams(location.search).get("ref")?.slice(0,64);let r,a;try{r=sessionStorage._r||n(),sessionStorage._r=r,a=o||sessionStorage._a,a&&(sessionStorage._a=a)}catch{r=n(),a=o}const i=e.dataset.visitor||r;let c,d=0;const l=[],h=document.referrer?new URL(document.referrer).origin:void 0,p=e=>{const n=l.splice(0,50);if(!n.length)return;const o=()=>new Blob([JSON.stringify({siteId:t,events:n})]);let r=o();for(;r.size>64e3&&n.length>1;)l.unshift(n.pop()),r=o();e&&navigator.sendBeacon(s,r)||fetch(s,{method:"POST",body:r,keepalive:1}).catch(()=>{}),l.length&&p(e)},g=(e,t,s)=>{const n=Date.now();l.push({eventId:`${r}.${n.toString(36)}.${d}`,sessionId:r,visitorId:i,type:e,name:t,path:location.pathname.slice(0,256),referrer:h,timestamp:n,sequence:d++,affiliateSlug:a,...s}),clearTimeout(c),c=setTimeout(p,1200)};let u;const v=()=>{const e=location.pathname;e!==u&&(u=e,g("pageview"))};window.rastro=(e,t,s)=>{if("context"===e)return{sessionId:r,visitorId:i};"event"===e&&g("custom",`${t||"event"}`.slice(0,80),s&&JSON.stringify(s).length>2e4?void 0:{properties:s})},document.addEventListener("click",e=>{const t=e.target?.closest("a,button,[data-rastro-event]");if(!t)return;const s=t.dataset.rastroEvent,n=t.href,o=n&&new URL(n),r=/^https?:$/.test(o?.protocol);g(s?"custom":r&&o.origin!==location.origin?"outbound":"click",s,{target:(t.dataset.rastroLabel||t.tagName).slice(0,80),href:r?o.pathname.slice(0,256):void 0})},1);const m=e=>{const t=history[e];history[e]=(...e)=>{t.apply(history,e),v()}};m("pushState"),m("replaceState"),addEventListener("popstate",v),addEventListener("pagehide",()=>p(1)),setInterval(()=>{g("heartbeat"),p()},2e4),v()})();
+(()=>{const e=document.currentScript,t=e?.dataset.site,s=e?.dataset.endpoint||e?.src&&new URL("events",e.src).href;if(!t||!s)return;const o=()=>crypto.randomUUID?.()||Math.random()+"",n=new URLSearchParams(location.search),r=n.get("ref")?.slice(0,64);let i,a,c;for(const e of["source","medium","campaign","term","content"]){const t=n.get("utm_"+e)?.slice(0,64);t&&((i??={})["utm_"+e]=t)}try{a=sessionStorage._r||o(),sessionStorage._r=a,c=r||sessionStorage._a,c&&(sessionStorage._a=c),i||=sessionStorage._u&&JSON.parse(sessionStorage._u),i&&(sessionStorage._u=JSON.stringify(i))}catch{a=o(),c=r}const d=e.dataset.visitor||a;let l,p=0;const g=[],u=document.referrer?new URL(document.referrer).origin:void 0,h=e=>{const o=g.splice(0,50);if(!o.length)return;const n=()=>new Blob([JSON.stringify({siteId:t,events:o})]);let r=n();for(;r.size>64e3&&o.length>1;)g.unshift(o.pop()),r=n();e&&navigator.sendBeacon(s,r)||fetch(s,{method:"POST",body:r,keepalive:1}).catch(()=>{}),g.length&&h(e)},m=(e,t,s)=>{const o=Date.now();g.push({eventId:`${a}.${o.toString(36)}.${p}`,sessionId:a,visitorId:d,type:e,name:t,path:location.pathname.slice(0,256),referrer:u,timestamp:o,sequence:p++,affiliateSlug:c,...s}),clearTimeout(l),l=setTimeout(h,1200)};let f;const v=()=>{const e=location.pathname;e!==f&&(f=e,m("pageview",void 0,i&&{properties:i}))};window.rastro=(e,t,s)=>{if("context"===e)return{sessionId:a,visitorId:d};"event"===e&&m("custom",`${t||"event"}`.slice(0,80),s&&JSON.stringify(s).length>2e4?void 0:{properties:s})},document.addEventListener("click",e=>{const t=e.target?.closest("a,button,[data-rastro-event]");if(!t)return;const s=t.dataset.rastroEvent,o=t.href,n=o&&new URL(o),r=/^https?:$/.test(n?.protocol),i=r&&n.origin!==location.origin;m(s?"custom":i?"outbound":"click",s,{target:(t.dataset.rastroLabel||t.innerText||t.tagName).slice(0,64),href:r?((i?n.origin:"")+n.pathname).slice(0,256):void 0})},1);const S=e=>{const t=history[e];history[e]=(...e)=>{t.apply(history,e),v()}};S("pushState"),S("replaceState"),addEventListener("popstate",v),addEventListener("pagehide",()=>h(1)),setInterval(()=>{m("heartbeat"),h()},2e4),v()})();

package/docs/federation.md

@@ -239,7 +239,7 @@ either overview dataset.
 ## Control-plane status
 
 The production control plane at `https://www.amagerastro.com` and its reference
-implementation under `example/` provide Better Auth sessions,
+implementation under `control-plane/` provide Better Auth sessions,
 organization-scoped connections, OIDC discovery, JWKS, ten-minute RS256 tokens,
 manifest verification, redacted site discovery, audit records, revocation of new
 token issuance, and dynamic browser subscriptions to active deployments.

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@iann29/rastro",
-  "description": "Privacy-first, real-time web analytics for Convex: live visitor atlas, journeys, revenue, goals, funnels, affiliates, and a sub-1KB tracker.",
+  "description": "Privacy-first, real-time web analytics for Convex: live visitor atlas, journeys, revenue, goals, funnels, affiliates, and a 1.1 KB tracker.",
   "repository": "github:amageweb/amage-rastro",
   "homepage": "https://github.com/amageweb/amage-rastro#readme",
   "bugs": {
     "url": "https://github.com/amageweb/amage-rastro/issues"
   },
-  "version": "0.1.0-alpha.4",
+  "version": "0.1.0-alpha.5",
   "license": "Apache-2.0",
   "publishConfig": {
     "access": "public"
@@ -27,9 +27,9 @@
   "jsdelivr": "./dist/tracker.min.js",
   "scripts": {
     "dev": "synapse dev --start 'npm run dev:build'",
-    "dev:frontend": "cd example && vite",
+    "dev:frontend": "cd control-plane && vite",
     "dev:build": "chokidar 'tsconfig*.json' 'src/**/*.{ts,js}' 'scripts/build-tracker.mjs' -i '**/*.test.ts' -c 'npm run build:codegen' --initial",
-    "deploy:dashboard": "static-hosting upload --build --dist example/dist --build-command \"npm exec vite -- build example\"",
+    "deploy:dashboard": "static-hosting upload --build --dist control-plane/dist --build-command \"npm exec vite -- build control-plane\"",
     "predev": "npm run build:codegen",
     "prebuild": "rm -rf dist *.tsbuildinfo",
     "build": "npm run build:tracker && tsc --project ./tsconfig.build.json",
@@ -38,16 +38,17 @@
     "benchmark:ingest": "node ./scripts/benchmark-ingest.mjs",
     "benchmark:local": "vitest run src/component/benchmark.test.ts",
     "verify:agent-docs": "node ./scripts/verify-agent-docs.mjs",
-    "build:codegen": "npm run build && synapse convex codegen --component-dir ./src/component && npm run build && synapse dev --once",
+    "build:codegen": "npm run build && synapse convex codegen --component-dir ./src/component && npm run build && npm run codegen:example && synapse dev --once",
+    "codegen:example": "npm run --workspace example codegen",
     "build:clean": "npm run build:codegen",
-    "typecheck": "tsc --noEmit && tsc -p example && tsc -p example/convex",
+    "typecheck": "tsc --noEmit && tsc -p control-plane && tsc -p control-plane/convex && tsc -p example/convex",
     "lint": "eslint .",
     "test": "vitest run --typecheck",
     "test:watch": "vitest --typecheck --clearScreen false",
     "test:debug": "vitest --inspect-brk --no-file-parallelism",
     "test:coverage": "vitest run --coverage --coverage.reporter=text",
     "prepare": "npm run build",
-    "preversion": "npm run build && npm exec vite -- build example && npm run test && npm run lint && npm run typecheck && npm run benchmark:local && npm run verify:agent-docs"
+    "preversion": "npm run build && npm exec vite -- build control-plane && npm run test && npm run lint && npm run typecheck && npm run benchmark:local && npm run verify:agent-docs"
   },
   "files": [
     "dist",
@@ -149,5 +150,8 @@
     "@convex-dev/better-auth": "^0.12.5",
     "better-auth": "~1.6.15",
     "jose": "^6.2.10"
-  }
+  },
+  "workspaces": [
+    "example"
+  ]
 }

package/src/component/_generated/api.ts

@@ -20,13 +20,16 @@ import type * as geo from "../geo.js";
 import type * as goals from "../goals.js";
 import type * as guards from "../guards.js";
 import type * as http from "../http.js";
+import type * as identity from "../identity.js";
 import type * as ingest from "../ingest.js";
 import type * as live from "../live.js";
 import type * as reports from "../reports.js";
 import type * as retention from "../retention.js";
 import type * as sanitize from "../sanitize.js";
 import type * as sites from "../sites.js";
+import type * as useragent from "../useragent.js";
 import type * as validators from "../validators.js";
+import type * as visitors from "../visitors.js";
 
 import type {
   ApiFromModules,
@@ -48,13 +51,16 @@ const fullApi: ApiFromModules<{
   goals: typeof goals;
   guards: typeof guards;
   http: typeof http;
+  identity: typeof identity;
   ingest: typeof ingest;
   live: typeof live;
   reports: typeof reports;
   retention: typeof retention;
   sanitize: typeof sanitize;
   sites: typeof sites;
+  useragent: typeof useragent;
   validators: typeof validators;
+  visitors: typeof visitors;
 }> = anyApi as any;
 
 /**

package/src/component/_generated/component.ts

@@ -185,6 +185,7 @@ export type ComponentApi<Name extends string | undefined = string | undefined> =
             latitude?: number;
             longitude?: number;
             os?: string;
+            visitorKey?: string;
           };
           events: Array<{
             affiliateSlug?: string;
@@ -488,6 +489,7 @@ export type ComponentApi<Name extends string | undefined = string | undefined> =
             utmMedium?: string;
             utmSource?: string;
             visitorId: string;
+            visitorKey?: string;
           }>;
           pageStatus?: "SplitRecommended" | "SplitRequired" | null;
           splitCursor?: string | null;
@@ -537,6 +539,7 @@ export type ComponentApi<Name extends string | undefined = string | undefined> =
           metadata: {
             breakdowns: {
               topBrowsers: "eventVolume";
+              topCampaigns: "eventVolume";
               topCountries: "eventVolume";
               topDevices: "eventVolume";
               topEvents: "eventVolume";
@@ -552,7 +555,7 @@ export type ComponentApi<Name extends string | undefined = string | undefined> =
               state: "complete" | "partial" | "retained" | "unavailable";
             };
             features: {
-              botDetection: "unsupported";
+              botDetection: "userAgent";
               errorInsights: "unsupported";
               outboundLinks: "eventVolume";
               sessionReplay: "unsupported";
@@ -589,6 +592,11 @@ export type ComponentApi<Name extends string | undefined = string | undefined> =
             revenueCents: number;
             value: string;
           }>;
+          topCampaigns: Array<{
+            count: number;
+            revenueCents: number;
+            value: string;
+          }>;
           topCountries: Array<{
             count: number;
             revenueCents: number;
@@ -926,4 +934,13 @@ export type ComponentApi<Name extends string | undefined = string | undefined> =
         Name
       >;
     };
+    visitors: {
+      link: FunctionReference<
+        "mutation",
+        "internal",
+        { previousVisitorId: string; siteId: string; visitorId: string },
+        { aliasCount: number; linked: boolean },
+        Name
+      >;
+    };
   };

package/src/component/constants.ts

@@ -41,3 +41,4 @@ export const DAY_MS = 86_400_000;
 export const HOUR_MS = 3_600_000;
 export const MINUTE_MS = 60_000;
 export const RETENTION_POLICY_INTERVAL_MS = DAY_MS;
+export const MAX_VISITOR_ALIASES = 10;

package/src/component/http.ts

@@ -20,6 +20,8 @@ import {
 } from "./geo.js";
 import { isPlainRecord } from "./guards.js";
 import { sanitizeEvent } from "./sanitize.js";
+import { deriveVisitorKey, randomSecret } from "./identity.js";
+import { classifyClient, isKnownBot } from "./useragent.js";
 import type { TrackerEvent } from "./validators.js";
 import {
   TRACKER_GZIP_BASE64,
@@ -88,9 +90,34 @@ http.route({
     const edgeGeo = proxyRequestTrusted ? geoFromHeaders(request) : {};
     const userAgent =
       metadata.userAgent ?? request.headers.get("user-agent") ?? "";
+    // Self-declared bots never reach a transaction; the response keeps the
+    // counter shape the tracker expects and names the reason in a header.
+    if (isKnownBot(userAgent)) {
+      return json(
+        { accepted: 0, duplicates: 0, rejected: payload.events.length },
+        200,
+        { ...headers, "X-Rastro-Rejected": "bot" },
+      );
+    }
+    // Anonymous batches (visitorId === sessionId) get a salted daily key so
+    // repeat visits count once; the IP itself stops here.
+    const anonymous = payload.events.some(
+      (event) => event.visitorId === event.sessionId,
+    );
+    const visitorKey =
+      anonymous && clientIp.ip && userAgent
+        ? await deriveVisitorKey({
+            secret: await visitorSecret(ctx),
+            now: Date.now(),
+            siteId: payload.siteId,
+            ip: clientIp.ip,
+            userAgent,
+          })
+        : undefined;
     const context = {
       ...edgeGeo,
-      ...classifyUserAgent(userAgent),
+      ...classifyClient(userAgent, request.headers),
+      ...(visitorKey ? { visitorKey } : {}),
     };
 
     try {
@@ -246,6 +273,13 @@ http.route({
           edgeHeadersAvailable:
             proxyRequestTrusted && Object.keys(geoFromHeaders(request)).length > 0,
         },
+        features: {
+          botDetection: "userAgent",
+          uniqueVisitors:
+            clientIp.ip && (metadata.userAgent ?? request.headers.get("user-agent"))
+              ? "dailyHash"
+              : "session",
+        },
       },
       200,
       {
@@ -495,39 +529,6 @@ function decodeHeader(value: string | undefined): string | undefined {
   }
 }
 
-function classifyUserAgent(userAgent: string): {
-  browser: string;
-  os: string;
-  device: string;
-} {
-  const browser = /Edg\//.test(userAgent)
-    ? "Edge"
-    : /Firefox\//.test(userAgent)
-      ? "Firefox"
-      : /Chrome\//.test(userAgent)
-        ? "Chrome"
-        : /Safari\//.test(userAgent)
-          ? "Safari"
-          : "Other";
-  const os = /Android/.test(userAgent)
-    ? "Android"
-    : /iPhone|iPad/.test(userAgent)
-      ? "iOS"
-      : /Windows/.test(userAgent)
-        ? "Windows"
-        : /Mac OS X/.test(userAgent)
-          ? "macOS"
-          : /Linux/.test(userAgent)
-            ? "Linux"
-            : "Other";
-  const device = /iPad|Tablet/.test(userAgent)
-    ? "tablet"
-    : /Mobile|Android|iPhone/.test(userAgent)
-      ? "mobile"
-      : "desktop";
-  return { browser, os, device };
-}
-
 type GeoIpFailureStage = "claim" | "resolve" | "apply";
 
 function logInternalHttpError(requestId: string): void {
@@ -579,3 +580,23 @@ function json(value: unknown, status: number, headers?: HeadersInit): Response {
 }
 
 export default http;
+
+let cachedVisitorSecret: string | undefined;
+
+/** The per-deployment salt behind anonymous visitor keys, created on first use. */
+async function visitorSecret(ctx: {
+  runQuery: (reference: typeof internal.identity.secret, args: Record<string, never>) => Promise<string | null>;
+  runMutation: (
+    reference: typeof internal.identity.ensureSecret,
+    args: { candidate: string },
+  ) => Promise<string>;
+}): Promise<string> {
+  if (cachedVisitorSecret) return cachedVisitorSecret;
+  const stored = await ctx.runQuery(internal.identity.secret, {});
+  cachedVisitorSecret =
+    stored ??
+    (await ctx.runMutation(internal.identity.ensureSecret, {
+      candidate: randomSecret(),
+    }));
+  return cachedVisitorSecret;
+}

package/src/component/identity.ts

@@ -0,0 +1,74 @@
+import { v } from "convex/values";
+import { DAY_MS } from "./constants.js";
+import { internalMutation, internalQuery } from "./_generated/server.js";
+
+/**
+ * Anonymous visitors (no host-supplied id) are counted through a salted hash of
+ * the request IP and User-Agent that rotates every UTC day. The hash is derived
+ * in the HTTP action, so the raw IP never reaches a mutation or a table, and the
+ * salt is a per-deployment secret, so nobody holding a key can walk the IPv4
+ * space back to an address. Same device and network on the same day count once;
+ * the next day they are a new visitor by design.
+ */
+const KEY_HEX_LENGTH = 24;
+const SECRET_PATTERN = /^[0-9a-f]{64}$/;
+
+export const secret = internalQuery({
+  args: {},
+  returns: v.union(v.string(), v.null()),
+  handler: async (ctx) => {
+    const row = await ctx.db
+      .query("visitorSecrets")
+      .withIndex("by_key", (range) => range.eq("key", "current"))
+      .unique();
+    return row?.value ?? null;
+  },
+});
+
+export const ensureSecret = internalMutation({
+  args: { candidate: v.string() },
+  returns: v.string(),
+  handler: async (ctx, args) => {
+    const existing = await ctx.db
+      .query("visitorSecrets")
+      .withIndex("by_key", (range) => range.eq("key", "current"))
+      .unique();
+    if (existing) return existing.value;
+    if (!SECRET_PATTERN.test(args.candidate)) {
+      throw new Error("visitor secret candidate must be 64 hex characters");
+    }
+    await ctx.db.insert("visitorSecrets", {
+      key: "current",
+      value: args.candidate,
+      createdAt: Date.now(),
+    });
+    return args.candidate;
+  },
+});
+
+export function randomSecret(): string {
+  return hex(crypto.getRandomValues(new Uint8Array(32)));
+}
+
+export async function deriveVisitorKey(input: {
+  secret: string;
+  now: number;
+  siteId: string;
+  ip: string;
+  userAgent: string;
+}): Promise<string> {
+  const dayStart = Math.floor(input.now / DAY_MS) * DAY_MS;
+  const material = new TextEncoder().encode(
+    [input.secret, dayStart, input.siteId, input.ip, input.userAgent].join(" "),
+  );
+  const digest = new Uint8Array(
+    await crypto.subtle.digest("SHA-256", material),
+  );
+  return hex(digest).slice(0, KEY_HEX_LENGTH);
+}
+
+function hex(bytes: Uint8Array): string {
+  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join(
+    "",
+  );
+}