@iann29/rastro 0.3.0 → 0.5.0

package/dist/tracker/vitals.js

@@ -1,6 +1,7 @@
 "use strict";
-// The opt-in Web Vitals module. It shares the main tracker's session identity
-// through sessionStorage but never depends on it: either script works alone.
+// The opt-in Web Vitals module. Vitals annotate the session the base tracker
+// opened — the server rejects them for a session it never saw — so this
+// module derives its ids by exactly the tracker's rule, whichever runs first.
 // Values are integers — milliseconds, except CLS which ships scaled by 1000.
 (() => {
     const script = document.currentScript;
@@ -10,15 +11,32 @@
     if (!siteId || !endpoint)
         return;
     const createId = () => crypto.randomUUID?.() || Math.random() + "";
+    // The identity and session rule of tracker.ts: the host's signed-in id,
+    // then the persistent localStorage id, then the session id; a session is
+    // one identity's visit in one tab, closed by 30 minutes without an event.
+    let identity = script.dataset.visitor || "";
+    try {
+        identity ||= localStorage._rv ||= createId();
+    }
+    catch {
+        // Blocked storage never breaks the page.
+    }
+    const now = Date.now();
     let sessionId;
     try {
-        sessionId = sessionStorage._r || createId();
+        sessionId =
+            (sessionStorage._ri === identity &&
+                now - sessionStorage._rt < 18e5 &&
+                sessionStorage._r) ||
+                createId();
         sessionStorage._r = sessionId;
+        sessionStorage._ri = identity;
+        sessionStorage._rt = now;
     }
     catch {
         sessionId = createId();
     }
-    const visitorId = script.dataset.visitor || sessionId;
+    const visitorId = identity || sessionId;
     // Metrics describe the loaded document, so they keep the landing path even
     // when a SPA rewrites the URL later.
     const path = location.pathname.slice(0, 256);

package/dist/tracker/vitals.js.map

@@ -1 +1 @@
-{"version":3,"file":"vitals.js","sourceRoot":"","sources":["../../src/tracker/vitals.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAc7E,CAAC,GAAG,EAAE;IACJ,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAyC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;IACpC,MAAM,QAAQ,GACZ,MAAM,EAAE,OAAO,CAAC,QAAQ;QACxB,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;QAAE,OAAO;IAEjC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;IACnE,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CAAC,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC5C,cAAc,CAAC,EAAE,GAAG,SAAS,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,QAAQ,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC;IACtD,2EAA2E;IAC3E,qCAAqC;IACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAuC,EAAE,CAAC;IACtD,MAAM,SAAS,GAGV,EAAE,CAAC;IACR,MAAM,OAAO,GAAG,CACd,IAAY,EACZ,OAA8C,EAC9C,KAA+B,EAC/B,EAAE;QACF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,CAAC,IAAI,EAAE,EAAE,CAChD,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAC3B,CAAC;YACF,QAAQ,CAAC,OAAO,CAAC;gBACf,IAAI;gBACJ,QAAQ,EAAE,IAAI;gBACd,GAAG,KAAK;aACkB,CAAC,CAAC;YAC9B,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,WAAW,CAAC,gBAAgB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CACxB,CAAC;IAC1C,IAAI,UAAU,IAAI,UAAU,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE;QAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB;gBAAE,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,0BAA0B,EAAE,CAAC,OAAO,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,uBAAuB;IACvB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;QAClC,KAAK,MAAM,KAAK,IAAI,OAA6B,EAAE,CAAC;YAClD,IAAI,KAAK,CAAC,cAAc;gBAAE,SAAS;YACnC,IACE,SAAS;gBACT,KAAK,CAAC,SAAS,GAAG,OAAO,GAAG,KAAK;gBACjC,KAAK,CAAC,SAAS,GAAG,QAAQ,GAAG,KAAK,EAClC,CAAC;gBACD,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;gBACxB,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;YAC7B,CAAC;YACD,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC;YAC1B,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,sEAAsE;IACtE,2DAA2D;IAC3D,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,YAAY,GAAG,CAAC,OAA2B,EAAE,EAAE;QACnD,KAAK,MAAM,KAAK,IAAI,OAA6B,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,aAAa;gBAAE,SAAS;YACnC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,OAAO;QAC9B,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;QAC9C,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GACR,WAA6C,CAAC,gBAAgB;YAC/D,cAAc,CAAC,IAAI,CAAC;QACtB,MAAM,CAAC,GAAG;YACR,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC;IACF,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAErC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,IAAI;YAAE,OAAO;QACjB,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;YAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAChC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACxE,OAAO,EAAE,GAAG,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,KAAK,EAAE;YAC3D,SAAS;YACT,SAAS;YACT,IAAI,EAAE,OAAO;YACb,IAAI;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAE,CAAC;YAChC,IAAI;YACJ,SAAS;YACT,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO;QAC3B,IAAI,GAAG,IAAI,CAAC;QACZ,gEAAgE;QAChE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC;YACpB,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;SACtD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;YACvC,KAAK,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CACnE,GAAG,EAAE;gBACH,qEAAqE;YACvE,CAAC,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,EAAE;QACjD,IAAI,QAAQ,CAAC,eAAe,KAAK,QAAQ;YAAE,IAAI,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC,CAAC,EAAE,CAAC"}
+{"version":3,"file":"vitals.js","sourceRoot":"","sources":["../../src/tracker/vitals.ts"],"names":[],"mappings":";AAAA,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,6EAA6E;AAc7E,CAAC,GAAG,EAAE;IACJ,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAyC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;IACpC,MAAM,QAAQ,GACZ,MAAM,EAAE,OAAO,CAAC,QAAQ;QACxB,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;QAAE,OAAO;IAEjC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;IACnE,wEAAwE;IACxE,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IAC5C,IAAI,CAAC;QACH,QAAQ,KAAK,YAAY,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;IAC3C,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS;YACP,CAAC,cAAc,CAAC,GAAG,KAAK,QAAQ;gBAC9B,GAAG,GAAG,cAAc,CAAC,GAAG,GAAG,IAAI;gBAC/B,cAAc,CAAC,EAAE,CAAC;gBACpB,QAAQ,EAAE,CAAC;QACb,cAAc,CAAC,EAAE,GAAG,SAAS,CAAC;QAC9B,cAAc,CAAC,GAAG,GAAG,QAAQ,CAAC;QAC9B,cAAc,CAAC,GAAG,GAAG,GAAG,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,QAAQ,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,IAAI,SAAS,CAAC;IACxC,2EAA2E;IAC3E,qCAAqC;IACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAuC,EAAE,CAAC;IACtD,MAAM,SAAS,GAGV,EAAE,CAAC;IACR,MAAM,OAAO,GAAG,CACd,IAAY,EACZ,OAA8C,EAC9C,KAA+B,EAC/B,EAAE;QACF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,CAAC,IAAI,EAAE,EAAE,CAChD,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAC3B,CAAC;YACF,QAAQ,CAAC,OAAO,CAAC;gBACf,IAAI;gBACJ,QAAQ,EAAE,IAAI;gBACd,GAAG,KAAK;aACkB,CAAC,CAAC;YAC9B,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,WAAW,CAAC,gBAAgB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CACxB,CAAC;IAC1C,IAAI,UAAU,IAAI,UAAU,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE;QAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB;gBAAE,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,0BAA0B,EAAE,CAAC,OAAO,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,uBAAuB;IACvB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;QAClC,KAAK,MAAM,KAAK,IAAI,OAA6B,EAAE,CAAC;YAClD,IAAI,KAAK,CAAC,cAAc;gBAAE,SAAS;YACnC,IACE,SAAS;gBACT,KAAK,CAAC,SAAS,GAAG,OAAO,GAAG,KAAK;gBACjC,KAAK,CAAC,SAAS,GAAG,QAAQ,GAAG,KAAK,EAClC,CAAC;gBACD,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;gBACxB,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;YAC7B,CAAC;YACD,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC;YAC1B,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,sEAAsE;IACtE,2DAA2D;IAC3D,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,YAAY,GAAG,CAAC,OAA2B,EAAE,EAAE;QACnD,KAAK,MAAM,KAAK,IAAI,OAA6B,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,aAAa;gBAAE,SAAS;YACnC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,OAAO;QAC9B,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;QAC9C,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GACR,WAA6C,CAAC,gBAAgB;YAC/D,cAAc,CAAC,IAAI,CAAC;QACtB,MAAM,CAAC,GAAG;YACR,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC;IACF,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAErC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,IAAI;YAAE,OAAO;QACjB,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;YAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAChC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACxE,OAAO,EAAE,GAAG,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,KAAK,EAAE;YAC3D,SAAS;YACT,SAAS;YACT,IAAI,EAAE,OAAO;YACb,IAAI;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAE,CAAC;YAChC,IAAI;YACJ,SAAS;YACT,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO;QAC3B,IAAI,GAAG,IAAI,CAAC;QACZ,gEAAgE;QAChE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC;YACpB,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;SACtD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;YACvC,KAAK,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CACnE,GAAG,EAAE;gBACH,qEAAqE;YACvE,CAAC,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,EAAE;QACjD,IAAI,QAAQ,CAAC,eAAe,KAAK,QAAQ;YAAE,IAAI,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC,CAAC,EAAE,CAAC"}

package/dist/tracker.min.js

@@ -1 +1 @@
-(()=>{const e=document.currentScript,t=e?.dataset.site,s=e?.dataset.endpoint||e?.src&&new URL("events",e.src).href;if(!t||!s)return;const o=()=>crypto.randomUUID?.()||Math.random()+"",n=new URLSearchParams(location.search),r=n.get("ref")?.slice(0,64);let a,i,c;for(const e of["source","medium","campaign","term","content"]){const t=n.get("utm_"+e)?.slice(0,64);t&&((a??={})["utm_"+e]=t)}try{i=sessionStorage._r||o(),sessionStorage._r=i,c=r||sessionStorage._a,c&&(sessionStorage._a=c),a||=sessionStorage._u&&JSON.parse(sessionStorage._u),a&&(sessionStorage._u=JSON.stringify(a))}catch{i=o(),c=r}let d=e.dataset.visitor;try{d||=localStorage._rv||=o()}catch{}d||=i;let l,p=0;const g=[],h=document.referrer?new URL(document.referrer).origin:void 0,u=e=>{const o=g.splice(0,50);if(!o.length)return;const n=()=>new Blob([JSON.stringify({siteId:t,events:o,sentAt:Date.now()})]);let r=n();for(;r.size>64e3&&o.length>1;)g.unshift(o.pop()),r=n();e&&navigator.sendBeacon(s,r)||fetch(s,{method:"POST",body:r,keepalive:1}).catch(()=>{}),g.length&&u(e)},m=(e,t,s)=>{const o=Date.now();g.push({eventId:`${i}.${o.toString(36)}.${p}`,sessionId:i,visitorId:d,type:e,name:t,path:location.pathname.slice(0,256),referrer:h,timestamp:o,sequence:p++,affiliateSlug:c,...s}),clearTimeout(l),l=setTimeout(u,1200)};let v;const f=()=>{const e=location.pathname;e!==v&&(v=e,m("pageview",void 0,a&&{properties:a}))};window.rastro=(e,t,s)=>{if("context"===e)return{sessionId:i,visitorId:d};"event"===e&&m("custom",`${t||"event"}`.slice(0,80),s&&JSON.stringify(s).length>2e4?void 0:{properties:s})},document.addEventListener("click",e=>{const t=e.target?.closest("a,button,[data-rastro-event]");if(!t)return;const s=t.dataset.rastroEvent,o=t.href,n=o&&new URL(o),r=/^https?:$/.test(n?.protocol),a=r&&n.origin!==location.origin;m(s?"custom":a?"outbound":"click",s,{target:(t.dataset.rastroLabel||t.innerText||t.tagName).slice(0,64),href:r?((a?n.origin:"")+n.pathname).slice(0,256):void 0})},1);const S=e=>{const t=history[e];history[e]=(...e)=>{t.apply(history,e),f()}};S("pushState"),S("replaceState"),addEventListener("popstate",f),addEventListener("pagehide",()=>{m("leave"),u(1)}),addEventListener("pageshow",e=>{e.persisted&&(m("heartbeat"),u(1))}),setInterval(()=>{m("heartbeat"),u()},2e4),f()})();
+(()=>{const t=document.currentScript,e=t?.dataset.site,i=t?.dataset.endpoint||t?.src&&new URL("events",t.src).href;if(!e||!i)return;const n=()=>crypto.randomUUID?.()||Math.random()+"",s=new URLSearchParams(location.search),r=s.get("ref")?.slice(0,64);let o;for(const t of["source","medium","campaign","term","content"]){const e=s.get("utm_"+t)?.slice(0,64);e&&((o??={})["utm_"+t]=e)}const a="gclid gbraid wbraid msclkid ttclid twclid li_fat_id ScCid rdt_cid dclid epik srsltid mc_cid mc_eid _hsenc igsh igshid fbclid".split(" ").filter(t=>s.has(t)).slice(0,8);let c,d,l,h,p=t.dataset.visitor||"";try{p||=localStorage._rv||=n()}catch{}try{d=sessionStorage,l=d._r,c=d._ri==p&&d._rt,h=r||d._a,h&&(d._a=h),o||=d._u&&JSON.parse(d._u),o&&(d._u=JSON.stringify(o))}catch{h=r}let g,v=0;const m=[],u=document.referrer.split("/",3).join("/")||void 0,f=t=>{const n=m.splice(0,50);if(!n.length)return;const s=()=>new Blob([JSON.stringify({siteId:e,events:n,sentAt:Date.now()})]);let r=s();for(;r.size>64e3&&n.length>1;)m.unshift(n.pop()),r=s();t&&navigator.sendBeacon(i,r)||fetch(i,{method:"POST",body:r,keepalive:1}).catch(()=>{}),m.length&&f(t)},_=(t,e,i)=>{const s=Date.now(),r=s-c;c=s,r<18e5||(l=n(),"pageview"!=t&&(y="",S()));try{d._r=l,d._ri=p,d._rt=s}catch{}m.push({eventId:`${l}.${s.toString(36)}.${v}`,sessionId:l,visitorId:p||l,type:t,name:e,path:location.pathname.slice(0,256),referrer:u,timestamp:s,sequence:v++,affiliateSlug:h,...i}),clearTimeout(g),g=setTimeout(f,1200)};let y;const S=()=>{const t=location.pathname;t!=y&&(y=t,_("pageview",void 0,{properties:o,clid:a.length?a:void 0}))};window.rastro=(t,e,i)=>{if("context"==t)return{sessionId:l,visitorId:p||l};"event"==t&&_("custom",`${e||"event"}`.slice(0,80),i&&JSON.stringify(i).length>2e4?void 0:{properties:i})},document.addEventListener("click",t=>{const e=t.target?.closest("a,button,[data-rastro-event]");if(!e)return;const i=e.dataset.rastroEvent,n=e.href,s=n&&new URL(n),r=/^https?:$/.test(s?.protocol),o=r&&s.origin!=location.origin;_(i?"custom":o?"outbound":"click",i,{target:(e.dataset.rastroLabel||e.innerText||e.tagName).slice(0,64),href:r?((o?s.origin:"")+s.pathname).slice(0,256):void 0})},1);for(const t of["pushState","replaceState"]){const e=history[t];history[t]=(...t)=>{e.apply(history,t),S()}}addEventListener("popstate",S);let w=0;const b=()=>{_("heartbeat"),f()},I=()=>{w&&(clearInterval(w),w=0,_("leave"),f(1))},L=()=>{document.hidden?I():w||(b(),w=setInterval(b,2e4))};addEventListener("pagehide",I),addEventListener("pageshow",L),document.addEventListener("visibilitychange",L),w=setInterval(b,2e4),S(),L()})();

package/dist/vitals.min.js

@@ -1 +1 @@
-(()=>{const t=document.currentScript,e=t?.dataset.site,n=t?.dataset.endpoint||t?.src&&new URL("events",t.src).href;if(!e||!n)return;const r=()=>crypto.randomUUID?.()||Math.random()+"";let a;try{a=sessionStorage._r||r(),sessionStorage._r=a}catch{a=r()}const s=t.dataset.visitor||a,o=location.pathname.slice(0,256),i={},c=[],d=(t,e,n)=>{try{const r=new PerformanceObserver(t=>e(t.getEntries()));r.observe({type:t,buffered:1,...n}),c.push({observer:r,handler:e})}catch{}},h=performance.getEntriesByType?.("navigation")[0];h&&h.responseStart>0&&(i.TTFB=h.responseStart),d("paint",t=>{for(const e of t)"first-contentful-paint"===e.name&&(i.FCP=e.startTime)}),d("largest-contentful-paint",t=>{const e=t[t.length-1];e&&(i.LCP=e.startTime)});let l=0,f=0,m=0;d("layout-shift",t=>{for(const e of t)e.hadRecentInput||(l&&e.startTime-m<1e3&&e.startTime-f<5e3?l+=e.value:(l=e.value,f=e.startTime),m=e.startTime,i.CLS=Math.max(i.CLS||0,1e3*l))});const u=[],p=new Set,v=t=>{for(const e of t)e.interactionId&&(p.add(e.interactionId),u.push(e.duration));if(!u.length)return;u.sort((t,e)=>e-t),u.length=Math.min(u.length,10);const e=performance.interactionCount||p.size;i.INP=u[Math.min(u.length-1,Math.floor(e/50))]};d("event",v,{durationThreshold:40}),d("first-input",v);let g=0;const y=()=>{if(g)return;for(const{observer:t,handler:e}of c)e(t.takeRecords()),t.disconnect();const t=Date.now(),r=Object.keys(i).map((e,n)=>({eventId:`${a}.${t.toString(36)}.v${n}`,sessionId:a,visitorId:s,type:"vital",name:e,value:Math.round(i[e]),path:o,timestamp:t,sequence:n}));if(!r.length)return;g=1;const d=new Blob([JSON.stringify({siteId:e,events:r,sentAt:t})]),h=navigator.sendBeacon?.bind(navigator);h&&h(n,d)||fetch(n,{method:"POST",body:d,keepalive:1}).catch(()=>{})};document.addEventListener("visibilitychange",()=>{"hidden"===document.visibilityState&&y()}),addEventListener("pagehide",y)})();
+(()=>{const t=document.currentScript,e=t?.dataset.site,n=t?.dataset.endpoint||t?.src&&new URL("events",t.src).href;if(!e||!n)return;const r=()=>crypto.randomUUID?.()||Math.random()+"";let s=t.dataset.visitor||"";try{s||=localStorage._rv||=r()}catch{}const o=Date.now();let a;try{a=sessionStorage._ri===s&&o-sessionStorage._rt<18e5&&sessionStorage._r||r(),sessionStorage._r=a,sessionStorage._ri=s,sessionStorage._rt=o}catch{a=r()}const i=s||a,c=location.pathname.slice(0,256),d={},h=[],l=(t,e,n)=>{try{const r=new PerformanceObserver(t=>e(t.getEntries()));r.observe({type:t,buffered:1,...n}),h.push({observer:r,handler:e})}catch{}},f=performance.getEntriesByType?.("navigation")[0];f&&f.responseStart>0&&(d.TTFB=f.responseStart),l("paint",t=>{for(const e of t)"first-contentful-paint"===e.name&&(d.FCP=e.startTime)}),l("largest-contentful-paint",t=>{const e=t[t.length-1];e&&(d.LCP=e.startTime)});let m=0,u=0,v=0;l("layout-shift",t=>{for(const e of t)e.hadRecentInput||(m&&e.startTime-v<1e3&&e.startTime-u<5e3?m+=e.value:(m=e.value,u=e.startTime),v=e.startTime,d.CLS=Math.max(d.CLS||0,1e3*m))});const g=[],p=new Set,S=t=>{for(const e of t)e.interactionId&&(p.add(e.interactionId),g.push(e.duration));if(!g.length)return;g.sort((t,e)=>e-t),g.length=Math.min(g.length,10);const e=performance.interactionCount||p.size;d.INP=g[Math.min(g.length-1,Math.floor(e/50))]};l("event",S,{durationThreshold:40}),l("first-input",S);let y=0;const b=()=>{if(y)return;for(const{observer:t,handler:e}of h)e(t.takeRecords()),t.disconnect();const t=Date.now(),r=Object.keys(d).map((e,n)=>({eventId:`${a}.${t.toString(36)}.v${n}`,sessionId:a,visitorId:i,type:"vital",name:e,value:Math.round(d[e]),path:c,timestamp:t,sequence:n}));if(!r.length)return;y=1;const s=new Blob([JSON.stringify({siteId:e,events:r,sentAt:t})]),o=navigator.sendBeacon?.bind(navigator);o&&o(n,s)||fetch(n,{method:"POST",body:s,keepalive:1}).catch(()=>{})};document.addEventListener("visibilitychange",()=>{"hidden"===document.visibilityState&&b()}),addEventListener("pagehide",b)})();

package/docs/upgrading.md

@@ -7,28 +7,240 @@ hosts still on them.
 
 ## Release matrix
 
-| Current state                                         | Required path                                                                                                                                   | Success condition                                                   |
-| ----------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------- |
-| Fresh deployment                                      | Install the intended release directly                                                                                                           | Component deploys and `/rastro/health` succeeds                     |
-| `0.1.0-alpha.0` with maintained data                  | Install `0.1.0-alpha.1` first and wait for staged visitor-index backfills                                                                       | Every staged index reports complete before installing `alpha.2`     |
-| `0.1.0-alpha.1`                                       | Wait for staged visitor-index backfills, then install `alpha.2`                                                                                 | Backfills complete before active readers deploy                     |
-| `0.1.0-alpha.2` with legacy `events` rows             | Stay on `alpha.2` and run/resume migration                                                                                                      | Durable success plus empty source                                   |
-| `0.1.0-alpha.3` fresh/canonical deployment            | Rehearse the next alpha normally                                                                                                                | Schema, reports, tracker, and retention checks pass                 |
-| `0.1.0-alpha.3` through `alpha.5` with canonical data | Install `0.1.0-alpha.6` directly; Web Vitals tables are additive                                                                                | Schema deploys and `/rastro/health` reports `webVitals: "optIn"`    |
-| `0.1.0-alpha.6`                                       | Install `0.1.0-alpha.7` directly; no schema change                                                                                              | `GET /rastro/tracker.js` contains `sentAt`                          |
-| `0.1.0-alpha.7`                                       | Install `0.1.0-alpha.8` directly; site map tables are additive; re-export `siteMap`                                                             | `/rastro/health` reports `siteMap: "dailyRollup"`                   |
-| `0.1.0-alpha.8`                                       | Install `0.1.0-alpha.10` directly; no schema change; the tracker changes                                                                        | `/rastro/health` reports `liveDepartures: "leaveBeacon"`            |
-| `0.1.0-alpha.9`                                       | Install `0.1.0-alpha.10` directly; `alpha.9` is deprecated — it rejected its own leave beacons                                                  | The final page-close `POST /rastro/events` returns 200              |
-| `0.1.0-alpha.10`                                      | Install `0.1.0-alpha.12` directly; new tables and fields are additive; re-export the configure functions to opt in                              | `/rastro/health` reports `tracker.version: "0.1.0-alpha.12"`        |
-| `0.1.0-alpha.11`                                      | Install `0.1.0-alpha.12` directly; same code, the package now ships `src/tracker/generated.ts`                                                  | A `convex/` test importing `@iann29/rastro/test` typechecks on push |
-| `0.1.0-alpha.12`                                      | Install `0.1.0` directly; every schema change is an optional field or a new table; add `analytics:public` to a grant only to allow public links | `/rastro/health` reports `tracker.version: "0.1.0"`                 |
-| `0.1.0`                                               | Install `0.2.0` directly; add the optional host callback and grant version to enable transfers                                                  | Health reports `0.2.0`; opted-in connectors advertise `transfer`    |
-| Any release whose packed declarations lack federation | Stop and request an eligible exact registry release                                                                                             | Packed declarations contain the federation exports                  |
+| Current state                                         | Required path                                                                                                                                                                                                                                                | Success condition                                                   |
+| ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------- |
+| Fresh deployment                                      | Install the intended release directly                                                                                                                                                                                                                        | Component deploys and `/rastro/health` succeeds                     |
+| `0.1.0-alpha.0` with maintained data                  | Install `0.1.0-alpha.1` first and wait for staged visitor-index backfills                                                                                                                                                                                    | Every staged index reports complete before installing `alpha.2`     |
+| `0.1.0-alpha.1`                                       | Wait for staged visitor-index backfills, then install `alpha.2`                                                                                                                                                                                              | Backfills complete before active readers deploy                     |
+| `0.1.0-alpha.2` with legacy `events` rows             | Stay on `alpha.2` and run/resume migration                                                                                                                                                                                                                   | Durable success plus empty source                                   |
+| `0.1.0-alpha.3` fresh/canonical deployment            | Rehearse the next alpha normally                                                                                                                                                                                                                             | Schema, reports, tracker, and retention checks pass                 |
+| `0.1.0-alpha.3` through `alpha.5` with canonical data | Install `0.1.0-alpha.6` directly; Web Vitals tables are additive                                                                                                                                                                                             | Schema deploys and `/rastro/health` reports `webVitals: "optIn"`    |
+| `0.1.0-alpha.6`                                       | Install `0.1.0-alpha.7` directly; no schema change                                                                                                                                                                                                           | `GET /rastro/tracker.js` contains `sentAt`                          |
+| `0.1.0-alpha.7`                                       | Install `0.1.0-alpha.8` directly; site map tables are additive; re-export `siteMap`                                                                                                                                                                          | `/rastro/health` reports `siteMap: "dailyRollup"`                   |
+| `0.1.0-alpha.8`                                       | Install `0.1.0-alpha.10` directly; no schema change; the tracker changes                                                                                                                                                                                     | `/rastro/health` reports `liveDepartures: "leaveBeacon"`            |
+| `0.1.0-alpha.9`                                       | Install `0.1.0-alpha.10` directly; `alpha.9` is deprecated — it rejected its own leave beacons                                                                                                                                                               | The final page-close `POST /rastro/events` returns 200              |
+| `0.1.0-alpha.10`                                      | Install `0.1.0-alpha.12` directly; new tables and fields are additive; re-export the configure functions to opt in                                                                                                                                           | `/rastro/health` reports `tracker.version: "0.1.0-alpha.12"`        |
+| `0.1.0-alpha.11`                                      | Install `0.1.0-alpha.12` directly; same code, the package now ships `src/tracker/generated.ts`                                                                                                                                                               | A `convex/` test importing `@iann29/rastro/test` typechecks on push |
+| `0.1.0-alpha.12`                                      | Install `0.1.0` directly; every schema change is an optional field or a new table; add `analytics:public` to a grant only to allow public links                                                                                                              | `/rastro/health` reports `tracker.version: "0.1.0"`                 |
+| `0.1.0`                                               | Install `0.2.0` directly; add the optional host callback and grant version to enable transfers                                                                                                                                                               | Health reports `0.2.0`; opted-in connectors advertise `transfer`    |
+| `0.2.0`                                               | Install `0.3.0` directly; no new table; export `getSession` and `revenueSummary` from the federation module                                                                                                                                                  | Health reports `0.3.0`; the manifest lists `sessionDetails`         |
+| `0.3.0`                                               | Install `0.4.0` directly; no re-export; the deploy rebuilds the `reportRollupQueue` index and the tracker changes                                                                                                                                            | Health reports `0.4.0`; a hidden tab leaves **Ao vivo** in ~10 s    |
+| `0.4.0`                                               | Install `0.5.0` directly; every schema change is an optional field or a new table; export `listTrackedLinks`, `createTrackedLink`, `updateTrackedLink` and `deleteTrackedLink` from the federation module; reverify — the manifest advertises `trackedLinks` | Health reports `0.5.0`; the manifest lists `trackedLinks`           |
+| Any release whose packed declarations lack federation | Stop and request an eligible exact registry release                                                                                                                                                                                                          | Packed declarations contain the federation exports                  |
 
 Do not upgrade a populated legacy deployment directly to a release that removes
 the `events` table. Schema acceptance alone does not prove that telemetry was
 migrated.
 
+## Origins and tracked links (0.5.0)
+
+Install `@iann29/rastro@0.5.0` and deploy the host through its normal workflow.
+Every schema change is an optional field or a new table, so no staged phase and
+no backfill are needed. Then add the four tracked-link functions to the
+destructure in `convex/rastroFederation.ts`:
+
+```ts
+export const {
+  transferConnection,
+  manifest,
+  connectionStatus,
+  listSites,
+  overview,
+  liveVisitors,
+  getSession,
+  revenueSummary,
+  listSessions,
+  sessionJourney,
+  listConversions,
+  visitorJourney,
+  goalsReport,
+  funnelsReport,
+  affiliatesReport,
+  vitalsReport,
+  siteMap,
+  dataCoverage,
+  siteSettings,
+  updateSite,
+  listGoals,
+  upsertGoal,
+  removeGoal,
+  listFunnels,
+  upsertFunnel,
+  removeFunnel,
+  listAffiliates,
+  upsertAffiliate,
+  removeAffiliate,
+  retentionStatus,
+  setRetentionPolicy,
+  disableRetentionPolicy,
+  listTrackedLinks,
+  createTrackedLink,
+  updateTrackedLink,
+  deleteTrackedLink,
+} = federated;
+```
+
+Deploy again, then open **Conexões** and click **Verificar novamente** so the
+control plane records the `trackedLinks` capability. Listing links needs only a
+reader; creating, changing and deleting them need `analytics:configure` in both
+the token and the local grant, like goals and affiliates. A host that skips the
+re-export keeps working: the connector simply does not advertise the capability,
+and the dashboard's **Links** tab says what is missing.
+
+What reports show differently:
+
+- **Fontes in three levels.** Visão geral's flat "Origens" list becomes
+  **Fontes**: the channel a session arrived by, the platform inside it, and the
+  raw hosts inside that. A host outside the classifier's table lands under
+  Referência › Outros.
+- **Sessions from before the upgrade** are classified on read from what they
+  kept, marked `evidence: "legado"` (`legacy` in the API), and never enter
+  `topPlatforms`, `topChannels` or `topEvidence`. Nothing is backfilled.
+- **Classificado desde.** `dataCoverage`'s new `origin` dataset says from when a
+  site carries origins — its first ingest on this release plus the rollup delay
+  — and the caption reads "Classificado desde"; it says nothing rather than
+  guessing when it cannot read the date.
+- **One rule decides.** A declared `utm_source`, then a click-ID name, then the
+  referrer host, then the in-app browser, then an affiliate `ref`. So a landing
+  with `fbclid` alone is Meta by click ID, and nothing at all — the only way to
+  be `direct`. WhatsApp, Telegram, SMS and native e-mail apps stay `direct`
+  unless a tracked link or a UTM proves them.
+- **Attribution quality.** A strip above the tree reads `topEvidence`: how much
+  of the traffic a UTM, a click ID, a referrer, an in-app browser or an
+  affiliate proved, and how much proves nothing.
+- **`topPlatforms` values** are the platform id alone when the session arrived
+  by that platform's default channel and `platform@channel` when it did not
+  (`google@paid_search`); `splitPlatformDimension` reads the pair back.
+  `source`, `topSources`, `topCampaigns` and `topMediums` are unchanged.
+
+Tracked links:
+
+- `GET /rastro/l/<slug>` answers `302` with `Cache-Control: no-store` to the
+  link's destination, appending `utm_source` (the platform), `utm_medium` (the
+  channel), `utm_campaign` (the campaign, or the slug when the link has none)
+  and `utm_content` (the slug). The destination's own query stays, and a `utm_*`
+  key it already carries is never overridden. An unknown or disabled slug
+  answers `404` in plain text.
+- **No open redirect.** A destination must be an absolute `http(s)` URL without
+  credentials on one of the site's domains (exact, or a `*.` pattern). The rule
+  is checked when the link is created or changed and again on every click, so a
+  domain removed from the site stops redirecting at once.
+- **Bots.** A self-declared bot, the WhatsApp, Facebook and Telegram link
+  previews included, is still redirected but counted under `bots`, never
+  `clicks`. Clicks land in daily counters spread over four shards.
+- **Slugs** are 3–32 lowercase letters, digits or hyphens and unique across the
+  deployment, because the route names no site. A site keeps at most 200 links.
+- **A short domain.** The route lives on the deployment's HTTP origin
+  (`https://<deployment>.convex.site/rastro/l/promo`). A host that wants a
+  presentable link serves that origin under a short domain of its own, such as
+  `go.example.com/rastro/l/promo`; nothing in the component changes.
+
+Tracker:
+
+- It sends the click-ID key **names** of the landing URL in `clid` (`fbclid`,
+  `gclid`, `ttclid`, `mc_cid`…), never their values, at most eight; ingestion
+  drops any name outside the allowlist. No advertising identifier leaves the
+  page.
+- The referrer is sent as scheme and host, so a referrer of the form
+  `android-app://<package>` now reaches the server with its package instead of
+  the literal `"null"`: an Instagram or Gmail tap on Android classifies as that
+  platform.
+- The script is 2,594 bytes raw and 1,395 bytes gzip, and its budget moved from
+  1,280 to 1,400 bytes gzip. Hosts serving it from the component get it on
+  upgrade, with a new `tracker.hash` and `ETag`; returning browsers pick it up
+  within the cache window (see [Tracker cache](#tracker-cache)).
+
+Acceptance for this upgrade:
+
+- `/rastro/health` reports `tracker.version: "0.5.0"` and a new `tracker.hash`.
+- A `GET /rastro/l/<slug>` on a link created from the dashboard answers `302`
+  with `utm_source`, `utm_medium`, `utm_campaign` and `utm_content` on the
+  destination.
+- **Conexões → Verificar novamente** shows the `trackedLinks` capability and the
+  **Links** tab appears.
+- In a browser context opened after the deploy, a landing with `?gclid=x` shows
+  in **Fontes** under Busca paga › Google.
+
+## Sessions, presence and rollups (0.4.0)
+
+`0.4.0` needs no host edit: no new function, capability, or re-export. Install
+`@iann29/rastro@0.4.0`, deploy the host through its normal workflow, then open
+**Conexões** and click **Verificar novamente** on the active connection.
+
+What reports show differently:
+
+- **Sessions.** A session is one identity's visit in one tab: a sign-in (a new
+  `data-visitor`) or 30 minutes without an event opens a new one, keeping the
+  referral and campaign. A tab returning after 30 idle minutes counts a pageview
+  of its current page. A tab open during the upgrade starts one new session on
+  its next page load.
+- **Presence.** A hidden tab sends `leave` and drops out of **Ao vivo** about
+  ten seconds later; shown again, it sends a heartbeat at once and returns. A
+  hidden tab sends no requests.
+- **Web Vitals** need the base tracker on the page; `vitals.js` now derives its
+  ids by the tracker's rule, so the default install's vitals are accepted.
+- **Duration** is counted at departure. Heartbeats no longer rewrite aggregate
+  buckets, so a visitor still on a page shows the time up to their last page or
+  event; the rest lands when they leave (about ten seconds after a `leave`, at
+  most 90 seconds after the last heartbeat). Finished visits are unchanged.
+- **Rollups** fold about once a second per site, so bucketed reports trail
+  ingestion by about a second.
+- **Overview.** A busy range fails with `REPORT_INCOMPLETE` instead of a raw
+  read-limit error, and `LIMIT_EXCEEDED` names the real cap: 101 days for one
+  site, 10 for ten; hourly, 24 hours for two sites, 5 for ten.
+- **Funnels.** A completed funnel can be entered again once its conversion
+  window has passed.
+
+Operations:
+
+- The deploy swaps the `reportRollupQueue` index for
+  `by_siteId_and_deadLetteredAt_and_createdAt` and backfills it during the push.
+  The queue holds only batches waiting for their fold, so no staged phase is
+  needed. A batch that fails three fold runs is logged and set aside for 30
+  days.
+- Ingestion admits at most 1,200 events and 2 MiB a minute per site from one
+  client network (an IPv4 address or an IPv6 /64) when `/rastro/health` reports
+  `clientIpAvailable: true`; visitors behind one NAT share it. The per-site
+  budget drops to 384,000 events a minute. Over budget answers 429
+  `RATE_LIMITED`.
+- `RASTRO_CLIENT_RATE_LIMIT=off` lifts the per-client budget for load-test
+  canaries only; leave it unset everywhere else.
+
+Acceptance for this upgrade: `/rastro/health` reports `tracker.version: "0.4.0"`
+and a new `tracker.hash`; `GET /rastro/tracker.js` answers with a new `ETag`,
+which returning browsers pick up within the cache window (see
+[Tracker cache](#tracker-cache)); in a browser context opened after the deploy,
+a hidden tab disappears from **Ao vivo** within about ten seconds and returns
+when shown again.
+
+## Session details and complete revenue lists (0.3.0)
+
+After upgrading the package, export `getSession` and `revenueSummary` from the
+object returned by `exposeFederatedAnalyticsApi` in
+`convex/rastroFederation.ts`, then deploy the host and reverify its dashboard
+connection. The manifest advertises `sessionDetails` and `revenueSummary`;
+advertising them without exporting the functions leaves an incomplete host
+surface.
+
+`getSession({siteId, sessionId})` returns the retained session metadata (or
+null). The dashboard pairs it with the existing paginated `sessionJourney` so a
+copied session link keeps its duration, entry/exit and counters even after a
+reload. Older hosts still provide scoped session events, but cannot restore all
+metadata.
+
+`revenueSummary({siteIds, from, to})` returns exact `commissionCents` for the
+inclusive period. Revenue, conversion count, average order and currency reuse
+`overview` totals. The commission report reads existing daily affiliate stats
+for complete UTC days and trusted conversion records only for partial edge days;
+renamed/deleted affiliate definitions do not remove historical commissions. It
+rejects unavailable retained sources, mixed currencies and periods requiring
+more than 5,000 source rows instead of presenting partial totals. No new table,
+backfill or ingestion change is required. Older hosts show commissions as
+unavailable, never as the sum of a loaded list page.
+
+Session and conversion lists now expose per-site keyset continuation, merge rows
+in chronological order and label search as filtering only loaded records.
+
 ## Organization transfers (0.2.0)
 
 Install `@iann29/rastro@0.2.0` after rehearsing on a non-production snapshot.
@@ -399,6 +611,11 @@ control-plane issuer.
   functions, a read-only grant refuses `upsertGoal` with
   `FEDERATION_CONFIGURE_FORBIDDEN`, and a grant listing `analytics:configure`
   lets an owner or admin create a goal from the dashboard.
+- On `0.4.0` or later: hiding the site's tab removes the visitor from the live
+  view within about ten seconds, and showing it brings them back.
+- On `0.5.0` or later: the federation module re-exports the four tracked-link
+  functions, a created link redirects with its `utm_*`, and a landing with a
+  click ID appears under its channel and platform in **Fontes**.
 - Protected overview, journey, goal, funnel, and affiliate reports used by the
   host still run.
 - Trusted conversion idempotency and currency checks still pass.
@@ -407,31 +624,3 @@ control-plane issuer.
 
 Record the package version, deployment target, migration output, and verifier in
 the project's release evidence.
-
-### Session details and complete revenue lists
-
-After upgrading the package, export `getSession` and `revenueSummary` from the
-object returned by `exposeFederatedAnalyticsApi` in
-`convex/rastroFederation.ts`, then deploy the host and reverify its dashboard
-connection. The manifest advertises `sessionDetails` and `revenueSummary`;
-advertising them without exporting the functions leaves an incomplete host
-surface.
-
-`getSession({siteId, sessionId})` returns the retained session metadata (or
-null). The dashboard pairs it with the existing paginated `sessionJourney` so a
-copied session link keeps its duration, entry/exit and counters even after a
-reload. Older hosts still provide scoped session events, but cannot restore all
-metadata.
-
-`revenueSummary({siteIds, from, to})` returns exact `commissionCents` for the
-inclusive period. Revenue, conversion count, average order and currency reuse
-`overview` totals. The commission report reads existing daily affiliate stats
-for complete UTC days and trusted conversion records only for partial edge days;
-renamed/deleted affiliate definitions do not remove historical commissions. It
-rejects unavailable retained sources, mixed currencies and periods requiring
-more than 5,000 source rows instead of presenting partial totals. No new table,
-backfill or ingestion change is required. Older hosts show commissions as
-unavailable, never as the sum of a loaded list page.
-
-Session and conversion lists now expose per-site keyset continuation, merge rows
-in chronological order and label search as filtering only loaded records.

package/llms.txt

@@ -16,7 +16,9 @@ Do not infer federation availability from this website, a dist-tag, or a source
 ## Architecture
 
 - Tracker and telemetry: browser -> customer HTTP-actions URL -> customer Rastro component.
-- Optional field Web Vitals (alpha.6+): a second browser module at `/rastro/vitals.js` reports LCP, CLS, INP, FCP, and TTFB to the same events endpoint, into bounded daily histograms.
+- The tracker is 2,594 bytes raw and 1,395 gzip. It sends the click-ID key **names** of the landing URL in `clid` (`gclid`, `fbclid`, `ttclid`…), at most eight, never a value, and the referrer as scheme and host, so an `android-app://<package>` referrer keeps its package.
+- Tracked links (0.5.0+): browser -> customer HTTP-actions URL `/rastro/l/<slug>` -> `302` (`Cache-Control: no-store`) to a destination on one of the site's domains, with `utm_source` (platform), `utm_medium` (channel), `utm_campaign` (campaign, or the slug) and `utm_content` (slug) appended; the destination's own query and `utm_*` keys stay. Unknown or disabled slug: `404`. Clicks count in four-shard daily counters; self-declared bots are redirected and counted apart.
+- Optional field Web Vitals (alpha.6+): a second browser module at `/rastro/vitals.js` reports LCP, CLS, INP, FCP, and TTFB to the same events endpoint, into bounded daily histograms; it needs the base tracker on the page.
 - Reactive dashboard reads: amagerastro.com browser -> customer functions URL -> `rastroFederation:*`.
 - Control plane: account, organization, connection metadata, short-lived token issuance, and revocation.
 - The control plane does not proxy or persist customer analytics events.
@@ -30,7 +32,8 @@ Do not infer federation availability from this website, a dist-tag, or a source
 - Resolve an indexed, authoritative local grant on every federated query.
 - Grant one through ten explicit site IDs. Never grant by owner-wide enumeration.
 - Use the canonical module name `convex/rastroFederation.ts`.
-- Expose only the manifest, connection status, site summaries, reports, journeys, conversions, affiliates, funnels, goals, web vitals, coverage, and the configure functions listed in the manifest; the configure functions run only when the token and the local grant both carry `analytics:configure`. A public link's token carries `analytics:public` alone and reaches only the manifest, connection status, site summaries, a redacted overview, redacted live visitors, and coverage, and only when the local grant lists `analytics:public`.
+- A host on 0.5.0 re-exports `listTrackedLinks`, `createTrackedLink`, `updateTrackedLink` and `deleteTrackedLink` from that module and reverifies, which advertises the optional `trackedLinks` capability; listing needs a reader, the other three need `analytics:configure`. A host that skips it keeps working without the capability.
+- Expose only the manifest, connection status, site summaries, reports, journeys, conversions, affiliates, funnels, goals, web vitals, coverage, tracked links, and the configure functions listed in the manifest; the configure functions run only when the token and the local grant both carry `analytics:configure`. A public link's token carries `analytics:public` alone and reaches only the manifest, connection status, site summaries, a redacted overview, redacted live visitors, and coverage, and only when the local grant lists `analytics:public`.
 - Use the functions URL as JWT audience and the HTTP-actions URL for tracker ingestion.
 - Rehearse on an explicit development target. Production changes require fresh operator consent.
 - Validate manifest, authenticated connection status, redacted site list, real ingestion, reactive live data, and local-first revocation.
@@ -49,19 +52,21 @@ Do not infer federation availability from this website, a dist-tag, or a source
 - Protocol: `amage-rastro-analytics` version 1.
 - Maximum sites per connection and report request: 10.
 - Maximum report range: 366 days.
-- Hourly overview maximum: 24 hours.
+- Overview maximum, bounded by the aggregate rows it reads: 101 days for one site and 10 for ten; hourly, 24 hours for two sites and 5 for ten. A wider range fails with `LIMIT_EXCEEDED`, a busy one with `REPORT_INCOMPLETE`.
 - Funnel report maximum: 90 complete UTC days.
 - Affiliate reports require complete UTC-day boundaries.
 - Vitals report maximum: 90 complete UTC days; `vitals` is an optional capability that hosts before `alpha.6` do not advertise.
 - Site map maximum: 90 complete UTC days, read newest day first within 8,000 route rows; older days it could not read are declared as partial coverage. `siteMap` is an optional capability that hosts before `alpha.8` do not advertise, and its data starts at the first ingest after that upgrade.
 - Maximum live visitors: 500.
-- Live window: a `leave` beacon on pagehide retires a visitor about ten seconds after they leave, and a bfcache return revives them; the safety net without a goodbye is 90 seconds since the last event or heartbeat. `POST /rastro/events` re-anchors a batch whose `sentAt` is more than 30 seconds from server time, so a wrong device clock decides neither liveness nor hour buckets.
+- Tracked links: at most 200 per site; slugs are 3–32 lowercase letters, digits or hyphens, unique across the deployment; `listTrackedLinks` reports clicks and bots all time and over the 30 UTC days ending on the `now` it is given. `trackedLinks` is an optional capability that hosts before 0.5.0, and hosts that did not re-export the four functions, do not advertise.
+- Live window: the tracker sends a `leave` when the tab hides or the page unloads, retiring the visitor about ten seconds later; a shown tab or a bfcache return sends a heartbeat at once and revives them. The safety net without a goodbye is 90 seconds since the last event or heartbeat. `POST /rastro/events` re-anchors a batch whose `sentAt` is more than 30 seconds from server time, so a wrong device clock decides neither liveness nor hour buckets.
 - Maximum journey events: 500.
 - Token lifetime: 10 minutes, RS256. Every member's token carries `analytics:read`; owners and admins also carry `analytics:configure`, which the host honors only when the local grant lists it (`configure` is an optional capability that hosts before `alpha.11` do not advertise). A public link's token carries `analytics:public` alone, plus `rastro_site_ids` naming the link's sites; hosts before `0.1.0` reject it.
 
 ## Read semantics
 
 - Times are inclusive Unix epoch milliseconds in UTC.
+- Origin (0.5.0+): a session is classified once, on its first touch, into `platform` (about forty ids), `channel` (twelve, `direct` to `ai` plus `offline`) and `evidence`, the rule that decided it. Decision order, first match wins: declared `utm_source`, click-ID name, referrer host by whole label, in-app browser, affiliate `ref`; nothing at all is the only way to be `direct`. `overview.topPlatforms`, `topChannels` and `topEvidence` rank them beside `topSources`; a `topPlatforms` value is the bare platform id for its default channel and `platform@channel` otherwise. `dataCoverage`'s `origin` dataset says from when a site carries origins; older sessions are classified on read, marked `evidence: "legacy"`, and never enter the aggregates. `source` is unchanged.
 - Goal, funnel, and affiliate reports include read-only definitions plus aggregates. Configuration writes (goals, funnels, affiliates, a site's name/domains/timezone, retention) exist only in the configure scope and fail with `FEDERATION_CONFIGURE_FORBIDDEN` for a read-only token or grant; `listSites` never returns domains, only `siteSettings` does, to a connection allowed to change them.
 - A public token (`analytics:public`) gets `overview` with zero `conversions` and `revenueCents` and empty `topCampaigns`, `topMediums`, `topEvents`, and `topGoals`, `liveVisitors` with `visitorId` equal to `sessionId` and without `entryPath`, `returning`, `utmCampaign`, `affiliateSlug`, `conversionCount`, or `funnel`, and `FEDERATION_PUBLIC_FORBIDDEN` for sessions, journeys, conversions, goals, funnels, affiliates, vitals, the site map, and the configure scope.
 - Session and visitor journeys include bounded custom properties. Hosts must never place personal data or secrets in event properties.

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@iann29/rastro",
-  "description": "Privacy-first, real-time web analytics for Convex: live visitor atlas, journeys, revenue, goals, funnels, affiliates, and a 1.1 KB tracker.",
+  "description": "Privacy-first, real-time web analytics for Convex: live visitor atlas, journeys, revenue, goals, funnels, affiliates, and a 1.4 KB tracker.",
   "repository": "github:amageweb/amage-rastro",
   "homepage": "https://github.com/amageweb/amage-rastro#readme",
   "bugs": {
     "url": "https://github.com/amageweb/amage-rastro/issues"
   },
-  "version": "0.3.0",
+  "version": "0.5.0",
   "license": "Apache-2.0",
   "publishConfig": {
     "access": "public"

package/src/component/_generated/api.ts

@@ -24,12 +24,15 @@ import type * as identity from "../identity.js";
 import type * as ingest from "../ingest.js";
 import type * as live from "../live.js";
 import type * as localTime from "../localTime.js";
+import type * as origin from "../origin.js";
+import type * as platforms from "../platforms.js";
 import type * as reports from "../reports.js";
 import type * as retention from "../retention.js";
 import type * as rollupStore from "../rollupStore.js";
 import type * as rollups from "../rollups.js";
 import type * as sanitize from "../sanitize.js";
 import type * as sites from "../sites.js";
+import type * as trackedLinks from "../trackedLinks.js";
 import type * as useragent from "../useragent.js";
 import type * as validators from "../validators.js";
 import type * as visitors from "../visitors.js";
@@ -59,12 +62,15 @@ const fullApi: ApiFromModules<{
   ingest: typeof ingest;
   live: typeof live;
   localTime: typeof localTime;
+  origin: typeof origin;
+  platforms: typeof platforms;
   reports: typeof reports;
   retention: typeof retention;
   rollupStore: typeof rollupStore;
   rollups: typeof rollups;
   sanitize: typeof sanitize;
   sites: typeof sites;
+  trackedLinks: typeof trackedLinks;
   useragent: typeof useragent;
   validators: typeof validators;
   visitors: typeof visitors;