@iann29/rastro 0.8.1 → 0.10.0

package/src/component/secrets.ts

@@ -0,0 +1,98 @@
+import { fail } from "./errors.js";
+
+/*
+ * Tokens at rest: AES-256-GCM under the host's RASTRO_SECRETS_KEY (32 random
+ * bytes, base64). The key is an env binding the host passes to the component,
+ * so a copy of the database alone cannot read a token. Only actions call
+ * `decryptSecret`; no query or mutation ever handles the plain text.
+ */
+
+const KEY_BYTES = 32;
+const IV_BYTES = 12;
+
+function fromBase64(value: string): Uint8Array {
+  const binary = atob(value);
+  const bytes = new Uint8Array(binary.length);
+  for (let index = 0; index < binary.length; index += 1) {
+    bytes[index] = binary.charCodeAt(index);
+  }
+  return bytes;
+}
+
+function toBase64(bytes: Uint8Array): string {
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary);
+}
+
+/** The host's key, or `SECRETS_KEY_MISSING` when it is absent or malformed. */
+async function importKey(rawKey: string | undefined): Promise<CryptoKey> {
+  let bytes: Uint8Array | undefined;
+  try {
+    bytes = rawKey ? fromBase64(rawKey.trim()) : undefined;
+  } catch {
+    bytes = undefined;
+  }
+  if (!bytes || bytes.length !== KEY_BYTES) {
+    fail(
+      "SECRETS_KEY_MISSING",
+      "RASTRO_SECRETS_KEY must be 32 random bytes, base64-encoded",
+    );
+  }
+  return await crypto.subtle.importKey(
+    "raw",
+    bytes as Uint8Array<ArrayBuffer>,
+    "AES-GCM",
+    false,
+    ["encrypt", "decrypt"],
+  );
+}
+
+/** Whether the host passed a usable key, without touching any secret. */
+export function hasSecretsKey(rawKey: string | undefined): boolean {
+  try {
+    return (
+      rawKey !== undefined && fromBase64(rawKey.trim()).length === KEY_BYTES
+    );
+  } catch {
+    return false;
+  }
+}
+
+export async function encryptSecret(
+  rawKey: string | undefined,
+  plain: string,
+): Promise<{ cipher: string; iv: string }> {
+  const key = await importKey(rawKey);
+  const iv = crypto.getRandomValues(new Uint8Array(IV_BYTES));
+  const cipher = await crypto.subtle.encrypt(
+    { name: "AES-GCM", iv },
+    key,
+    new TextEncoder().encode(plain),
+  );
+  return { cipher: toBase64(new Uint8Array(cipher)), iv: toBase64(iv) };
+}
+
+/**
+ * The plain token, or `SECRETS_KEY_MISSING` when the key is absent or is not
+ * the one the token was sealed with (a rotated key: connect again).
+ */
+export async function decryptSecret(
+  rawKey: string | undefined,
+  sealed: { cipher: string; iv: string },
+): Promise<string> {
+  const key = await importKey(rawKey);
+  try {
+    const plain = await crypto.subtle.decrypt(
+      { name: "AES-GCM", iv: fromBase64(sealed.iv) as Uint8Array<ArrayBuffer> },
+      key,
+      fromBase64(sealed.cipher) as Uint8Array<ArrayBuffer>,
+    );
+    return new TextDecoder().decode(plain);
+  } catch {
+    fail(
+      "SECRETS_KEY_MISSING",
+      "the stored token was sealed with another RASTRO_SECRETS_KEY; connect again",
+    );
+  }
+}

package/src/component/sites.ts

@@ -13,6 +13,7 @@ import {
   sanitizeOpaqueId,
   validateTimezone,
   validateRoutePatterns,
+  validateTrackedPaths,
 } from "./sanitize.js";
 import { siteFieldsValidator } from "./validators.js";
 
@@ -125,6 +126,8 @@ export const update = mutation({
     currency: v.optional(v.string()),
     cookieless: v.optional(v.boolean()),
     routePatterns: v.optional(v.array(v.string())),
+    /** The only paths the site records; `[]` records every path again. */
+    trackedPaths: v.optional(v.array(v.string())),
   },
   returns: v.null(),
   handler: async (ctx, args) => {
@@ -139,6 +142,7 @@ export const update = mutation({
       currency?: string;
       cookieless?: boolean;
       routePatterns?: string[];
+      trackedPaths?: string[];
       updatedAt: number;
     } = { updatedAt: Date.now() };
     if (args.name !== undefined) {
@@ -174,6 +178,10 @@ export const update = mutation({
       if (args.routePatterns !== undefined) {
         patch.routePatterns = validateRoutePatterns(args.routePatterns);
       }
+      if (args.trackedPaths !== undefined) {
+        const trackedPaths = validateTrackedPaths(args.trackedPaths);
+        patch.trackedPaths = trackedPaths.length ? trackedPaths : undefined;
+      }
     } catch (error) {
       fail(
         "INVALID_SITE",

package/src/component/validators.ts

@@ -162,6 +162,12 @@ export const siteFieldsValidator = v.object({
   currency: v.optional(v.string()),
   cookieless: v.boolean(),
   routePatterns: v.optional(v.array(v.string())),
+  /**
+   * Since 0.9.0: the only paths this site records. Absent or empty records
+   * every path. Enforced at ingestion, so a stale tab or a script loaded where
+   * it should not be cannot put another page's activity in the site.
+   */
+  trackedPaths: v.optional(v.array(v.string())),
   createdAt: v.number(),
   updatedAt: v.number(),
 });
@@ -431,6 +437,9 @@ export const leadFieldsValidator = v.object({
   stageAt: v.number(),
   qualifiedAt: v.optional(v.number()),
   wonAt: v.optional(v.number()),
+  /** The host's board column the lead is in now (see `setPipeline`). */
+  column: v.optional(v.string()),
+  columnAt: v.optional(v.number()),
   updatedAt: v.number(),
 });
 
@@ -443,9 +452,132 @@ export const adCatalogFieldsValidator = v.object({
   campaignId: v.optional(v.string()),
   campaignName: v.optional(v.string()),
   thumbnailUrl: v.optional(v.string()),
+  // Since 0.10.0, filled by the Meta sync (meta.ts).
+  adAccountId: v.optional(v.string()),
+  adStatus: v.optional(v.string()),
+  creativeType: v.optional(
+    v.union(
+      v.literal("video"),
+      v.literal("image"),
+      v.literal("carousel"),
+      v.literal("other"),
+    ),
+  ),
+  /** The creative's thumbnail copied into storage: Meta's URLs expire. */
+  thumbnailStorageId: v.optional(v.id("_storage")),
   updatedAt: v.number(),
 });
 
+export const metaAdAccountSyncStateValidator = v.union(
+  v.literal("backfill"),
+  v.literal("live"),
+  v.literal("error"),
+);
+
+/** An ad account as Meta lists it for a connection's token. */
+export const metaAdAccountValidator = v.object({
+  adAccountId: v.string(),
+  name: v.string(),
+  currency: v.string(),
+  timezone: v.string(),
+});
+
+/** A pixel (dataset) a connection's token can send conversions to. */
+export const metaPixelValidator = v.object({
+  pixelId: v.string(),
+  name: v.string(),
+});
+
+/** Who authorized a Facebook Login for Business connection, as Meta named them. */
+export const metaAuthorizerValidator = v.object({
+  id: v.string(),
+  name: v.union(v.string(), v.null()),
+});
+
+export const metaConnectionFieldsValidator = v.object({
+  /** The host's opaque owner, such as `uzeai:affiliate:<id>`. */
+  ownerKey: v.string(),
+  tokenCipher: v.string(),
+  tokenIv: v.string(),
+  businessName: v.optional(v.string()),
+  status: v.union(v.literal("active"), v.literal("invalid")),
+  /** The token's ad accounts as last listed: what a site may link. */
+  adAccounts: v.array(metaAdAccountValidator),
+  /** The pixels the listed accounts own, deduplicated: what a site may pick. */
+  pixels: v.optional(v.array(metaPixelValidator)),
+  /** Facebook Login for Business only: who granted the token, and when. */
+  authorizedBy: v.optional(metaAuthorizerValidator),
+  authorizedAt: v.optional(v.number()),
+  /** When Meta first refused the token; cleared by a new one. */
+  invalidSince: v.optional(v.number()),
+  /** When the token expires, as Meta said at login; absent for never. */
+  tokenExpiresAt: v.optional(v.number()),
+  /** Set 7 days before `tokenExpiresAt` by a scheduled run. */
+  expiringSoon: v.optional(v.boolean()),
+  lastCheckedAt: v.number(),
+  lastError: v.optional(v.string()),
+  createdAt: v.number(),
+  updatedAt: v.number(),
+});
+
+export const siteAdAccountFieldsValidator = v.object({
+  siteId: v.id("sites"),
+  connectionId: v.id("metaConnections"),
+  ...metaAdAccountValidator.fields,
+  syncState: metaAdAccountSyncStateValidator,
+  lastSyncAt: v.optional(v.number()),
+  /** The last resync of the trailing 7 days (daily, 04:00 account-local). */
+  lastDailyResyncAt: v.optional(v.number()),
+  /** The last resync of the trailing 28 days (weekly). */
+  lastFullResyncAt: v.optional(v.number()),
+  lastError: v.optional(v.string()),
+  nextSyncAt: v.number(),
+  /** The run that holds the account now; a write from any other is dropped. */
+  runId: v.optional(v.string()),
+  /** `syncNow` asked while a run held the account: run again right after. */
+  syncRequested: v.optional(v.boolean()),
+  /**
+   * While backfilling, the next account-local date to read (`YYYY-MM-DD`):
+   * one 30-day block per run, so a failed block resumes where it stopped.
+   */
+  backfillFrom: v.optional(v.string()),
+  /** Consecutive failed runs, for the growing retry delay. */
+  failures: v.optional(v.number()),
+  createdAt: v.number(),
+});
+
+export const metaPixelSourceValidator = v.union(
+  v.literal("connection"),
+  v.literal("token"),
+);
+
+export const sitePixelFieldsValidator = v.object({
+  siteId: v.id("sites"),
+  pixelId: v.string(),
+  /**
+   * `token`: a Conversions API token pasted for this pixel, sealed below.
+   * `connection`: the pixel was picked from a connection's listing and sends
+   * with that connection's token (no token here). Absent on rows from before
+   * the choice existed, which are all `token`.
+   */
+  source: v.optional(metaPixelSourceValidator),
+  connectionId: v.optional(v.id("metaConnections")),
+  /** The pixel's name in Meta, when it came from a listing. */
+  name: v.optional(v.string()),
+  /** The host owner that set the pixel, when the host named one. */
+  setBy: v.optional(v.string()),
+  tokenCipher: v.optional(v.string()),
+  tokenIv: v.optional(v.string()),
+  enabled: v.boolean(),
+  testEventCode: v.optional(v.string()),
+  /** Whether a new lead is sent as `Lead` (off by default). */
+  sendLeadEvent: v.optional(v.boolean()),
+  updatedAt: v.number(),
+  /** When Meta refused the pixel's own token; a new token clears it. */
+  invalidSince: v.optional(v.number()),
+  lastError: v.optional(v.string()),
+});
+
 export const ingestResultValidator = v.object({
   accepted: v.number(),
   duplicates: v.number(),
@@ -482,20 +614,40 @@ const leadCountersFields = {
   revenueCents: v.number(),
 };
 
+// What the site's linked Meta ad accounts spent on a row (since 0.10.0).
+// Optional so a dashboard can read hosts on older releases, and null where
+// no linked account covers the row (no Meta connection, an organic origin).
+// Derived figures (cost per lead or per sale, return) are never stored: the
+// `@iann29/rastro/ui` helpers compute them from these totals.
+const nullableCount = v.optional(v.union(v.number(), v.null()));
+const leadSpendFields = {
+  spendCents: nullableCount,
+  impressions: nullableCount,
+  clicks: nullableCount,
+};
+
 export const leadAdRowValidator = v.object({
   adId: v.string(),
+  /** Since 0.10.0: the site the ad brought leads to, for multi-site reports. */
+  siteId: v.optional(v.string()),
   adName: v.union(v.string(), v.null()),
   sourceApp: v.union(v.string(), v.null()),
   sourceUrl: v.union(v.string(), v.null()),
   title: v.union(v.string(), v.null()),
   thumbnailUrl: v.union(v.string(), v.null()),
+  /** Since 0.10.0: "video" | "image" | "carousel" | "other", from Meta. */
+  creativeType: v.optional(v.union(v.string(), v.null())),
+  /** Since 0.10.0: the ad's effective status at Meta ("ACTIVE", "PAUSED"…). */
+  adStatus: v.optional(v.union(v.string(), v.null())),
   ...leadCountersFields,
+  ...leadSpendFields,
 });
 
 export const leadAdsetRowValidator = v.object({
   adsetId: v.union(v.string(), v.null()),
   adsetName: v.union(v.string(), v.null()),
   ...leadCountersFields,
+  ...leadSpendFields,
   ads: v.array(leadAdRowValidator),
 });
 
@@ -503,21 +655,162 @@ export const leadCampaignRowValidator = v.object({
   campaignId: v.union(v.string(), v.null()),
   campaignName: v.union(v.string(), v.null()),
   ...leadCountersFields,
+  ...leadSpendFields,
   adsets: v.array(leadAdsetRowValidator),
 });
 
+export const leadSiteRowValidator = v.object({
+  siteId: v.string(),
+  ...leadCountersFields,
+  /**
+   * The site's leads that came from an ad (origin `ctwa_ad`): what spend buys,
+   * so cost per lead and return use these and never the organic leads.
+   */
+  paid: v.object(leadCountersFields),
+  spendCents: nullableCount,
+  /** The site's synced ad accounts' currency; null without one or with two. */
+  spendCurrency: v.optional(v.union(v.string(), v.null())),
+  /**
+   * True when the site's spend is not comparable with its revenue: an account
+   * bills in another currency than the site's, or its accounts in two (its
+   * spend is then null).
+   */
+  currencyMismatch: v.optional(v.boolean()),
+});
+
 export const leadsReportValidator = v.object({
   from: v.number(),
   to: v.number(),
   /** The sites' currency, or null when they differ (revenue then mixes). */
   currency: v.union(v.string(), v.null()),
-  totals: v.object(leadCountersFields),
-  origins: v.array(v.object({ key: v.string(), ...leadCountersFields })),
+  totals: v.object({ ...leadCountersFields, ...leadSpendFields }),
+  origins: v.array(
+    v.object({ key: v.string(), ...leadCountersFields, ...leadSpendFields }),
+  ),
   /**
    * Campaign → ad set → ad, with ads the catalog does not name yet grouped
-   * under a null campaign and a null ad set.
+   * under a null campaign and a null ad set. Since 0.10.0 an ad that spent
+   * without bringing a lead is listed too, with zero leads.
    */
   campaigns: v.array(leadCampaignRowValidator),
+  /** Since 0.10.0: the same counters per requested site. */
+  bySite: v.optional(v.array(leadSiteRowValidator)),
+  /** Since 0.10.0: the linked ad accounts' currency, null without spend. */
+  spendCurrency: v.optional(v.union(v.string(), v.null())),
+  /**
+   * Since 0.10.0: true when an ad account bills in another currency than the
+   * site's revenue; spend is then not comparable with revenue.
+   */
+  currencyMismatch: v.optional(v.boolean()),
+  /**
+   * True when the spend rows ran past their read budget: the campaign tree's
+   * spend (or, rarer, all spend) is then null. Leads and revenue stay exact.
+   */
+  spendIncomplete: v.optional(v.boolean()),
+});
+
+/** One cohort day of the lead funnel, with that day's spend (since 0.10.0). */
+export const leadsDailyValidator = v.array(
+  v.object({
+    dayStart: v.number(),
+    ...leadCountersFields,
+    spendCents: v.union(v.number(), v.null()),
+  }),
+);
+
+/** Where a site stands with Meta (since 0.10.0). Never carries a token. */
+export const metaStatusValidator = v.array(
+  v.object({
+    siteId: v.string(),
+    linked: v.boolean(),
+    adAccounts: v.array(
+      v.object({
+        ...metaAdAccountValidator.fields,
+        syncState: metaAdAccountSyncStateValidator,
+        lastSyncAt: v.union(v.number(), v.null()),
+        lastError: v.union(v.string(), v.null()),
+        /** Asked with an owner: whether that owner made this link. */
+        own: v.optional(v.boolean()),
+        /**
+         * The first backfill's 30-day blocks read (`done`) of `total` (3 for
+         * 90 days); null once the account is live. Optional for older hosts.
+         */
+        backfill: v.optional(
+          v.union(v.object({ done: v.number(), total: v.number() }), v.null()),
+        ),
+      }),
+    ),
+    pixel: v.object({
+      enabled: v.boolean(),
+      pixelId: v.union(v.string(), v.null()),
+      // Optional so a dashboard reads hosts from before Facebook Login; this
+      // build always sets both.
+      source: v.optional(v.union(metaPixelSourceValidator, v.null())),
+      name: v.optional(v.union(v.string(), v.null())),
+      lastError: v.optional(v.union(v.string(), v.null())),
+      /** Asked with an owner: whether that owner set the pixel. */
+      own: v.optional(v.boolean()),
+      /**
+       * A `testEventCode` is set: the pixel's events go to Events Manager's
+       * Test Events only, never to the ads. Optional for older hosts.
+       */
+      testMode: v.optional(v.boolean()),
+    }),
+    conversions: v.object({
+      pending: v.number(),
+      sent: v.number(),
+      failed: v.number(),
+      /**
+       * Accepted by Meta in the last 30 UTC days, by event, and today. Null
+       * unless the reader passed `now`; optional for older hosts.
+       */
+      last30d: v.optional(
+        v.union(
+          v.object({
+            Purchase: v.number(),
+            QualifiedLead: v.number(),
+            Lead: v.number(),
+            Schedule: v.number(),
+          }),
+          v.null(),
+        ),
+      ),
+      sentToday: v.optional(v.union(v.number(), v.null())),
+    }),
+  }),
+);
+
+export const metaConversionEventNameValidator = v.union(
+  v.literal("Lead"),
+  v.literal("QualifiedLead"),
+  v.literal("Schedule"),
+  v.literal("Purchase"),
+);
+
+/**
+ * What the host knows of the person behind a lead, every value already a
+ * SHA-256 hex digest: `ph` the normalized phone numbers, `externalId` the
+ * host's own id for the contact. Kept only until the conversion is sent.
+ */
+export const metaUserDataValidator = v.object({
+  ph: v.array(v.string()),
+  externalId: v.optional(v.string()),
+});
+
+/** A conversion sent (or queued) to the site's Meta pixel. No user data. */
+export const metaConversionValidator = v.object({
+  eventId: v.string(),
+  eventName: metaConversionEventNameValidator,
+  /** The lead the conversion reports, so a journey can show it was sent. */
+  leadId: v.union(v.string(), v.null()),
+  leadLabel: v.union(v.string(), v.null()),
+  adId: v.union(v.string(), v.null()),
+  /** The ad's name from the catalog, when the sync or the host named it. */
+  adName: v.union(v.string(), v.null()),
+  valueCents: v.union(v.number(), v.null()),
+  status: v.union(v.literal("pending"), v.literal("sent"), v.literal("failed")),
+  createdAt: v.number(),
+  sentAt: v.union(v.number(), v.null()),
 });
 
 export const leadSummaryValidator = v.object({
@@ -563,3 +856,89 @@ export const leadJourneyValidator = v.union(
     ),
   }),
 );
+
+/**
+ * The events a board column may send to Meta. `Purchase` never comes from a
+ * column: it goes when the host records the sale (`won` with a value).
+ */
+export const metaColumnEventValidator = v.union(
+  v.literal("Lead"),
+  v.literal("QualifiedLead"),
+  v.literal("Schedule"),
+);
+
+/** One column of the host's board, as `setPipeline` declares it. */
+export const pipelineColumnValidator = v.object({
+  key: v.string(),
+  name: v.string(),
+  color: v.optional(v.string()),
+  /** The block the board shows the column in, such as "Prospecção". */
+  group: v.optional(v.string()),
+});
+
+/** A connection as a screen shows it. Never a token. */
+export const metaConnectionValidator = v.union(
+  v.null(),
+  v.object({
+    status: v.union(v.literal("active"), v.literal("invalid")),
+    businessName: v.union(v.string(), v.null()),
+    authorizedBy: v.union(
+      v.object({ name: v.union(v.string(), v.null()) }),
+      v.null(),
+    ),
+    authorizedAt: v.union(v.number(), v.null()),
+    invalidSince: v.union(v.number(), v.null()),
+    lastError: v.union(v.string(), v.null()),
+    /** When the token expires; null when it never does (or is not known). */
+    expiresAt: v.union(v.number(), v.null()),
+    /** Fewer than 7 days left: the screen asks for a new login. */
+    expiringSoon: v.boolean(),
+    adAccounts: v.array(
+      v.object({
+        ...metaAdAccountValidator.fields,
+        /** The site the account feeds, whoever linked it; null when free. */
+        linkedSiteId: v.union(v.string(), v.null()),
+        /**
+         * Federated reads only: the account feeds a site outside the
+         * caller's grant, whose id is withheld (`linkedSiteId` is null).
+         */
+        linkedOutsideScope: v.optional(v.boolean()),
+      }),
+    ),
+    pixels: v.array(metaPixelValidator),
+  }),
+);
+
+export const metaEventMapValidator = v.object({
+  columns: v.array(
+    v.object({
+      key: v.string(),
+      name: v.string(),
+      color: v.union(v.string(), v.null()),
+      group: v.union(v.string(), v.null()),
+      event: v.union(metaColumnEventValidator, v.null()),
+      /** Leads that entered the column in the 30 days before `now`. */
+      monthCount: v.union(v.number(), v.null()),
+    }),
+  ),
+  sendLeadEvent: v.boolean(),
+  purchase: v.object({ enabled: v.boolean() }),
+});
+
+export const metaUnlinkPreviewValidator = v.object({
+  spendCents: v.number(),
+  currency: v.string(),
+  /** Days from the account's first to its last day with spend, inclusive. */
+  days: v.number(),
+  campaigns: v.number(),
+  /** A read cap was hit: the figures are at least these. */
+  partial: v.boolean(),
+});
+
+/** What connecting a Meta token answers: its accounts and their pixels. */
+export const metaConnectResultValidator = v.object({
+  connectionId: v.string(),
+  businessName: v.union(v.string(), v.null()),
+  adAccounts: v.array(metaAdAccountValidator),
+  pixels: v.array(metaPixelValidator),
+});

package/src/tracker/generated.ts

@@ -1,5 +1,5 @@
 // Generated by scripts/build-tracker.mjs. Do not edit.
-export const RASTRO_VERSION = "0.8.1";
+export const RASTRO_VERSION = "0.10.0";
 export const TRACKER_SOURCE = "(()=>{const t=document.currentScript,e=t?.dataset.site,i=t?.dataset.endpoint||t?.src&&new URL(\"events\",t.src).href;if(!e||!i)return;const n=()=>crypto.randomUUID?.()||Math.random()+\"\",r=new URLSearchParams(location.search),s=r.get(\"ref\")?.slice(0,64);let o;for(const t of[\"source\",\"medium\",\"campaign\",\"term\",\"content\"]){const e=r.get(\"utm_\"+t)?.slice(0,64);e&&((o??={})[\"utm_\"+t]=e)}const a=\"gclid gbraid wbraid msclkid ttclid twclid li_fat_id ScCid rdt_cid dclid epik srsltid mc_cid mc_eid _hsenc igsh igshid fbclid\".split(\" \").filter(t=>r.has(t)).slice(0,8);let c,d,l,h,f=t.dataset.visitor||\"\",p=Boolean(f);try{f||=localStorage._rv||=n()}catch{}try{d=sessionStorage,l=d._r,c=d._ri==f&&d._rt,h=s||d._a,h&&(d._a=h),o||=d._u&&JSON.parse(d._u),o&&(d._u=JSON.stringify(o))}catch{h=s}let v,g=0;const u=[];let m=document.referrer.split(\"/\",3).join(\"/\")||void 0;const _=t=>{const n=u.splice(0,50);if(!n.length)return;const r=()=>new Blob([JSON.stringify({siteId:e,events:n,sentAt:Date.now()})]);let s=r();for(;s.size>64e3&&n.length>1;)u.unshift(n.pop()),s=r();t&&navigator.sendBeacon(i,s)||fetch(i,{method:\"POST\",body:s,keepalive:1}).catch(()=>{}),u.length&&_(t)},y=(t,e,i)=>{const r=Date.now(),s=r-c;c=r,s<18e5||(l=n(),\"pageview\"!=t&&(S=\"\",w()));try{d._r=l,d._ri=f,d._rt=r}catch{}u.push({eventId:`${l}.${r.toString(36)}.${g}`,sessionId:l,visitorId:f||l,type:t,name:e,path:location.pathname.slice(0,256),referrer:m,timestamp:r,sequence:g++,affiliateSlug:h,...i}),clearTimeout(v),v=setTimeout(_,1200)};let S;const w=()=>{const t=location.pathname;t!=S&&(S=t,y(\"pageview\",void 0,{properties:o,clid:a.length?a:void 0}))};window.rastro=(e,i,r)=>{if(\"context\"==e)return{sessionId:l,visitorId:f||l,identified:p};if(\"identify\"==e||\"reset\"==e){if(\"identify\"==e&&(!i||i.length>128||!/^[A-Za-z0-9][A-Za-z0-9_.:-]*$/.test(i)))return;if(\"identify\"==e&&i==f)return;_();const r=\"reset\"==e||p;if(p=\"identify\"==e,f=\"identify\"==e?i:n(),t.dataset.visitor=\"identify\"==e?f:\"\",r){h=void 0,o=void 0,m=void 0,a.length=0;try{\"reset\"==e&&(localStorage._rv=f),d._a=\"\",d._u=\"\"}catch{}}c=0,g=0,S=\"\",w()}\"event\"==e&&y(\"custom\",`${i||\"event\"}`.slice(0,80),r&&JSON.stringify(r).length>2e4?void 0:{properties:r})},document.addEventListener(\"click\",t=>{const e=t.target?.closest(\"a,button,[data-rastro-event]\");if(!e)return;const i=e.dataset.rastroEvent,n=e.href,r=n&&new URL(n),s=/^https?:$/.test(r?.protocol),o=s&&r.origin!=location.origin;y(i?\"custom\":o?\"outbound\":\"click\",i,{target:(e.dataset.rastroLabel||e.innerText||e.tagName).slice(0,64),href:s?((o?r.origin:\"\")+r.pathname).slice(0,256):void 0})},1);for(const t of[\"pushState\",\"replaceState\"]){const e=history[t];history[t]=(...t)=>{e.apply(history,t),w()}}addEventListener(\"popstate\",w);let b=0;const I=()=>{y(\"heartbeat\"),_()},L=()=>{b&&(clearInterval(b),b=0,y(\"leave\"),_(1))},E=()=>{document.hidden?L():b||(I(),b=setInterval(I,2e4))};addEventListener(\"pagehide\",L),addEventListener(\"pageshow\",E),document.addEventListener(\"visibilitychange\",E),b=setInterval(I,2e4),w(),E()})();";
 export const TRACKER_GZIP_BASE64 = "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";
 export const TRACKER_RAW_BYTES = 2999;