@iann29/rastro 0.9.0 → 0.10.1

package/docs/upgrading.md

@@ -1,5 +1,121 @@
 # Upgrading Amage Rastro
 
+## The business screen and the owner checks (0.10.1)
+
+No schema change, env var or re-export. Install `@iann29/rastro@0.10.1` and
+deploy the host. Two behaviors change on purpose:
+
+- `setMetaEventMap` (federated) refuses with `CONFLICT` on a site whose pixel
+  another owner set: the dashboard no longer rewrites the map of a pixel the
+  host's own owner linked. The host's `setEventMap` is unchanged unless it
+  passes the new optional `ownerKey`.
+- `removeMetaConnection` (and `removeFederatedMetaConnection`, so revoking a
+  dashboard connection) now also removes the pixels the owner set with their own
+  token (plan B), not only those of its connection. A host that sets plan B
+  pixels for an owner should pass that owner as `setBy` in `setSitePixel`, so
+  removing the owner reaches them.
+
+Hosts embedding `IntegrationsView` can render it for one company with
+`audience="business"` (and `partner`, `productName`), and offer "Usar o mesmo
+mapa nos outros clientes" with `onCopyEventMap`; see
+[the Integrações screen](meta-ads.md#the-integrações-screen-integrationsview).
+Nothing changes for a host that passes neither.
+
+## Meta ads, conversions and the Integrações screen (0.10.0)
+
+Install `@iann29/rastro@0.10.0` and deploy the consuming host. The release is
+additive: every schema change is a new table (the Meta connections, linked ad
+accounts, spend, pixels, board columns and the conversion queue), the new
+`leadsReport` fields are optional, and nothing is removed or rewritten. A host
+that skips Meta changes nothing: it needs no new env var, re-export or grant,
+`leadsReport` answers spend as `null`, and its manifest advertises nothing new.
+
+A host on `leads: true` gains `leadsDaily` by re-exporting it from
+`convex/rastroFederation.ts`; no flag is needed.
+
+A host that connects Meta ads opts in, all in one deploy:
+
+1. Declare the four optional env bindings in `convex/convex.config.ts` and pass
+   them to the component, the same way as GeoIP:
+
+   ```ts
+   const app = defineApp({
+     env: {
+       // ...the bindings the host already declares
+       RASTRO_SECRETS_KEY: v.optional(v.string()),
+       RASTRO_META_FAKE: v.optional(v.literal("true")),
+       RASTRO_META_APP_ID: v.optional(v.string()),
+       RASTRO_META_APP_SECRET: v.optional(v.string()),
+     },
+   });
+   app.use(rastro, {
+     env: {
+       // ...
+       RASTRO_SECRETS_KEY: app.env.RASTRO_SECRETS_KEY,
+       RASTRO_META_FAKE: app.env.RASTRO_META_FAKE,
+       RASTRO_META_APP_ID: app.env.RASTRO_META_APP_ID,
+       RASTRO_META_APP_SECRET: app.env.RASTRO_META_APP_SECRET,
+     },
+   });
+   ```
+
+2. Set the env vars as deployment secrets, never in code:
+   - `RASTRO_SECRETS_KEY`, required to connect Meta or a pixel: 32 random bytes,
+     base64 (`openssl rand -base64 32`), a new one per deployment. Without it
+     those calls fail with `SECRETS_KEY_MISSING` and everything else works.
+   - `RASTRO_META_APP_ID` and `RASTRO_META_APP_SECRET`, for Facebook Login for
+     Business: the "Amage Rastro" app. Without both, the login fails with
+     `META_LOGIN_UNAVAILABLE` and a pasted system user token still connects.
+   - `RASTRO_META_FAKE=true` only on the example host, demos and tests; never on
+     a customer deployment.
+3. Pass `metaAds: true` beside `leads: true` to `exposeFederatedAnalyticsApi`
+   and add the Meta functions to the module's exports, including the internal
+   `authorizeMetaAction` the three federated actions authorize through:
+
+   ```ts
+   const federated = exposeFederatedAnalyticsApi(components.rastroAnalytics, {
+     issuer: federationIssuer,
+     resolveConnection,
+     leads: true,
+     metaAds: true,
+   });
+
+   export const {
+     // ...the functions the module already exports
+     leadsDaily,
+     metaStatus,
+     metaConversions,
+     metaConnection,
+     metaEventMap,
+     metaUnlinkPreview,
+     connectMeta,
+     disconnectMeta,
+     refreshMetaAccounts,
+     linkMetaAdAccount,
+     unlinkMetaAdAccount,
+     setMetaPixel,
+     removeMetaPixel,
+     setMetaEventMap,
+     syncMetaNow,
+     authorizeMetaAction,
+   } = federated;
+   ```
+
+4. Where the host revokes or deletes a dashboard connection's grant, call
+   `rastro.removeFederatedMetaConnection(ctx, { connectionId })` in the same
+   mutation, so the Meta owner that connection acted as goes with it.
+5. Deploy and use **Verificar novamente** in the dashboard's Conexões. The
+   connection records `metaAds`, and the dashboard's **Integrações** screen
+   reads and changes that host's Meta setup. Its writes need
+   `analytics:configure` on both the token and the local grant.
+
+To send conversions, pass the optional `meta` hashes to `recordLead` and
+`setLeadStage`, and declare the board columns with `setPipeline` and their
+events with `setEventMap` (or let the dashboard map them). A host that embeds
+the screens itself imports them from `@iann29/rastro/ui` with
+`@iann29/rastro/ui.css`, and then needs React. Shapes, limits and the security
+invariants are in [Meta ads](meta-ads.md).
+
 ## Tracked paths (0.9.0)
 
 Install `@iann29/rastro@0.9.0` and deploy the consuming host. The site's

package/llms.txt

@@ -19,6 +19,7 @@ Do not infer federation availability from this website, a dist-tag, or a source
 - The tracker is 2,999 bytes raw and 1,565 gzip. It sends the click-ID key **names** of the landing URL in `clid` (`gclid`, `fbclid`, `ttclid`…), at most eight, never a value, and the referrer as scheme and host, so an `android-app://<package>` referrer keeps its package.
 - Tracked links (0.5.0+): browser -> customer HTTP-actions URL `/rastro/l/<slug>` -> `302` (`Cache-Control: no-store`) to a destination on one of the site's domains, with `utm_source` (platform), `utm_medium` (channel), `utm_campaign` (campaign, or the slug) and `utm_content` (slug) appended; the destination's own query and `utm_*` keys stay. Unknown or disabled slug: `404`. Clicks count in four-shard daily counters; self-declared bots are redirected and counted apart.
 - Leads (0.8.0+): the host's server -> `recordLead` / `setLeadStage` on its own Rastro component, for conversations with no web session (a WhatsApp lead from a Click-to-WhatsApp ad). Keyed by the host's opaque id, never a phone number; cohort counts by origin and by campaign -> ad set -> ad; the ad click id never leaves the host.
+- Meta ads (0.10.0+): the host's Rastro component -> Meta Marketing API for each linked ad account's daily spend and ad names, and -> the site's Meta pixel for qualified leads and sales. Tokens are encrypted at rest with the host's `RASTRO_SECRETS_KEY` and no read returns them; phone numbers arrive only as SHA-256 hashes and are erased after delivery. See the [Meta ads guide](https://www.amagerastro.com/docs/reference/meta-ads.md).
 - Optional field Web Vitals (alpha.6+): a second browser module at `/rastro/vitals.js` reports LCP, CLS, INP, FCP, and TTFB to the same events endpoint, into bounded daily histograms; it needs the base tracker on the page.
 - Reactive dashboard reads: amagerastro.com browser -> customer functions URL -> `rastroFederation:*`.
 - Control plane: account, organization, connection metadata, short-lived token issuance, and revocation.
@@ -35,6 +36,7 @@ Do not infer federation availability from this website, a dist-tag, or a source
 - Use the canonical module name `convex/rastroFederation.ts`.
 - A host on 0.5.0 re-exports `listTrackedLinks`, `createTrackedLink`, `updateTrackedLink` and `deleteTrackedLink` from that module and reverifies, which advertises the optional `trackedLinks` capability; listing needs a reader, the other three need `analytics:configure`. A host that skips it keeps working without the capability.
 - A host on 0.8.0 that records leads from its server re-exports `leadsReport`, `listLeads` and `leadJourney` and passes `leads: true` to `exposeFederatedAnalyticsApi`, which advertises the opt-in `leads` capability for any reader; without the option the three refuse and nothing is advertised.
+- A host on 0.10.0 also re-exports `leadsDaily` under `leads`. One that links Meta ad accounts or a pixel passes `metaAds: true` and re-exports `metaStatus` and `metaConversions`, which advertises the opt-in `metaAds` capability for any reader; without the option those two refuse with `FEDERATION_INVALID_SCOPE`. With `metaAds: true` the host also exports the dashboard's own Meta setup (`metaConnection`, `metaEventMap`, `metaUnlinkPreview`, and the `analytics:configure` writes `connectMeta`, `refreshMetaAccounts`, `setMetaPixel`, `disconnectMeta`, `linkMetaAdAccount`, `unlinkMetaAdAccount`, `removeMetaPixel`, `setMetaEventMap`, `syncMetaNow`) plus the internal `authorizeMetaAction`; see docs/upgrading.md for the 0.10.0 steps.
 - Expose only the manifest, connection status, site summaries, reports, journeys, conversions, affiliates, funnels, goals, web vitals, coverage, tracked links, and the configure functions listed in the manifest; the configure functions run only when the token and the local grant both carry `analytics:configure`. A public link's token carries `analytics:public` alone and reaches only the manifest, connection status, site summaries, a redacted overview, redacted live visitors, and coverage, and only when the local grant lists `analytics:public`.
 - Use the functions URL as JWT audience and the HTTP-actions URL for tracker ingestion.
 - Rehearse on an explicit development target. Production changes require fresh operator consent.
@@ -72,6 +74,7 @@ Do not infer federation availability from this website, a dist-tag, or a source
 - Goal, funnel, and affiliate reports include read-only definitions plus aggregates. Configuration writes (goals, funnels, affiliates, a site's name/domains/timezone, retention) exist only in the configure scope and fail with `FEDERATION_CONFIGURE_FORBIDDEN` for a read-only token or grant; `listSites` never returns domains, only `siteSettings` does, to a connection allowed to change them.
 - A public token (`analytics:public`) gets `overview` with zero `conversions` and `revenueCents` and empty `topCampaigns`, `topMediums`, `topEvents`, and `topGoals`, `liveVisitors` with `visitorId` equal to `sessionId` and without `entryPath`, `returning`, `utmCampaign`, `affiliateSlug`, `conversionCount`, or `funnel`, and `FEDERATION_PUBLIC_FORBIDDEN` for sessions, journeys, conversions, goals, funnels, affiliates, vitals, the site map, and the configure scope.
 - Session and visitor journeys include bounded custom properties. Hosts must never place personal data or secrets in event properties.
+- Spend (0.10.0+): `leadsReport` rows, `bySite`, and `leadsDaily` days carry `spendCents` in integer cents; `null` means no linked ad account covers the row, never zero. Cost per lead and return are never stored: compute them with the `@iann29/rastro/ui` helpers from counters the spend bought (ad, ad set, campaign, the `ctwa_ad` origin, a site's `paid`), and not at all when `currencyMismatch` is true.
 - Audit retained routes, identity strategy, sessions, live location, campaigns, affiliates, conversions, custom properties, retention, and intended organization membership before granting federation; stop if their sensitivity or audience cannot be established.
 - Overview ranges require complete UTC hours, complete UTC days, or (hosts from `alpha.11`, optional capability `localDays`) complete calendar days in the timezone every requested site shares; `metadata.range.timezone` names the zone the answer follows. Manual pagination honors `numItems` and `cursor` only.
 - Right after an accepted request, `liveVisitors` and `sessionJourney` reflect it; `listSessions` and the bucketed reports can trail it by seconds, so an empty result from those is not proof of failed ingestion.

package/package.json

@@ -6,7 +6,7 @@
   "bugs": {
     "url": "https://github.com/amageweb/amage-rastro/issues"
   },
-  "version": "0.9.0",
+  "version": "0.10.1",
   "license": "Apache-2.0",
   "publishConfig": {
     "access": "public"
@@ -28,12 +28,13 @@
   "scripts": {
     "dev": "synapse dev --start 'npm run dev:build'",
     "dev:frontend": "cd control-plane && vite",
-    "dev:build": "chokidar 'tsconfig*.json' 'src/**/*.{ts,js}' 'scripts/build-tracker.mjs' -i '**/*.test.ts' -c 'npm run build:codegen' --initial",
+    "dev:build": "chokidar 'tsconfig*.json' 'src/**/*.{ts,tsx,js,css}' 'scripts/build-tracker.mjs' 'scripts/build-ui-css.mjs' -i '**/*.test.ts' -i '**/*.test.tsx' -c 'npm run build:codegen' --initial",
     "deploy:dashboard": "static-hosting upload --build --dist control-plane/dist --build-command \"npm exec vite -- build control-plane\"",
     "predev": "npm run build:codegen",
     "prebuild": "rm -rf dist *.tsbuildinfo",
-    "build": "npm run build:tracker && tsc --project ./tsconfig.build.json",
+    "build": "npm run build:tracker && tsc --project ./tsconfig.build.json && npm run build:ui-css",
     "build:tracker": "node ./scripts/build-tracker.mjs",
+    "build:ui-css": "node ./scripts/build-ui-css.mjs",
     "federation:keys": "node ./scripts/generate-federation-keys.mjs",
     "benchmark:ingest": "node ./scripts/benchmark-ingest.mjs",
     "benchmark:local": "vitest run src/component/benchmark.test.ts",
@@ -59,6 +60,7 @@
     "src/test.ts",
     "src/component/**/*.ts",
     "!src/component/**/*.test.ts",
+    "src/ui/seed.ts",
     "src/tracker/generated.ts",
     "scripts/benchmark-ingest.mjs",
     "scripts/generate-federation-keys.mjs",
@@ -70,6 +72,7 @@
     "docs/federation-setup.md",
     "docs/upgrading.md",
     "docs/identity.md",
+    "docs/meta-ads.md",
     "docs/benchmarks/*.md",
     "assets/rastro-live-atlas.png"
   ],
@@ -83,6 +86,15 @@
       "types": "./dist/react/index.d.ts",
       "default": "./dist/react/index.js"
     },
+    "./ui": {
+      "types": "./dist/ui/index.d.ts",
+      "default": "./dist/ui/index.js"
+    },
+    "./ui/sample": {
+      "types": "./dist/ui/sample.d.ts",
+      "default": "./dist/ui/sample.js"
+    },
+    "./ui.css": "./dist/ui/ui.css",
     "./tracker.js": "./dist/tracker.min.js",
     "./vitals.js": "./dist/vitals.min.js",
     "./test": "./src/test.ts",

package/src/component/_generated/api.ts

@@ -25,14 +25,21 @@ import type * as ingest from "../ingest.js";
 import type * as leads from "../leads.js";
 import type * as live from "../live.js";
 import type * as localTime from "../localTime.js";
+import type * as meta from "../meta.js";
+import type * as metaCapi from "../metaCapi.js";
+import type * as metaFake from "../metaFake.js";
+import type * as metaGraph from "../metaGraph.js";
+import type * as metaSync from "../metaSync.js";
 import type * as origin from "../origin.js";
 import type * as people from "../people.js";
+import type * as pipeline from "../pipeline.js";
 import type * as platforms from "../platforms.js";
 import type * as reports from "../reports.js";
 import type * as retention from "../retention.js";
 import type * as rollupStore from "../rollupStore.js";
 import type * as rollups from "../rollups.js";
 import type * as sanitize from "../sanitize.js";
+import type * as secrets from "../secrets.js";
 import type * as sites from "../sites.js";
 import type * as trackedLinks from "../trackedLinks.js";
 import type * as useragent from "../useragent.js";
@@ -65,14 +72,21 @@ const fullApi: ApiFromModules<{
   leads: typeof leads;
   live: typeof live;
   localTime: typeof localTime;
+  meta: typeof meta;
+  metaCapi: typeof metaCapi;
+  metaFake: typeof metaFake;
+  metaGraph: typeof metaGraph;
+  metaSync: typeof metaSync;
   origin: typeof origin;
   people: typeof people;
+  pipeline: typeof pipeline;
   platforms: typeof platforms;
   reports: typeof reports;
   retention: typeof retention;
   rollupStore: typeof rollupStore;
   rollups: typeof rollups;
   sanitize: typeof sanitize;
+  secrets: typeof secrets;
   sites: typeof sites;
   trackedLinks: typeof trackedLinks;
   useragent: typeof useragent;

package/src/component/_generated/component.ts

@@ -242,6 +242,26 @@ export type ComponentApi<Name extends string | undefined = string | undefined> =
       >;
     };
     leads: {
+      daily: FunctionReference<
+        "query",
+        "internal",
+        {
+          adId?: string;
+          from: number;
+          origin?: string;
+          siteIds: Array<string>;
+          to: number;
+        },
+        Array<{
+          dayStart: number;
+          leads: number;
+          qualified: number;
+          revenueCents: number;
+          spendCents: number | null;
+          won: number;
+        }>,
+        Name
+      >;
       journey: FunctionReference<
         "query",
         "internal",
@@ -320,9 +340,11 @@ export type ComponentApi<Name extends string | undefined = string | undefined> =
             title?: string;
           };
           channel: "whatsapp";
+          column?: string;
           entryPoint?: string;
           label?: string;
           leadKey: string;
+          meta?: any;
           occurredAt: number;
           siteId: string;
           visitorId?: string;
@@ -342,48 +364,85 @@ export type ComponentApi<Name extends string | undefined = string | undefined> =
         "internal",
         { from: number; siteIds: Array<string>; to: number },
         {
+          bySite?: Array<{
+            currencyMismatch?: boolean;
+            leads: number;
+            paid: {
+              leads: number;
+              qualified: number;
+              revenueCents: number;
+              won: number;
+            };
+            qualified: number;
+            revenueCents: number;
+            siteId: string;
+            spendCents?: number | null;
+            spendCurrency?: string | null;
+            won: number;
+          }>;
           campaigns: Array<{
             adsets: Array<{
               ads: Array<{
                 adId: string;
                 adName: string | null;
+                adStatus?: string | null;
+                clicks?: number | null;
+                creativeType?: string | null;
+                impressions?: number | null;
                 leads: number;
                 qualified: number;
                 revenueCents: number;
+                siteId?: string;
                 sourceApp: string | null;
                 sourceUrl: string | null;
+                spendCents?: number | null;
                 thumbnailUrl: string | null;
                 title: string | null;
                 won: number;
               }>;
               adsetId: string | null;
               adsetName: string | null;
+              clicks?: number | null;
+              impressions?: number | null;
               leads: number;
               qualified: number;
               revenueCents: number;
+              spendCents?: number | null;
               won: number;
             }>;
             campaignId: string | null;
             campaignName: string | null;
+            clicks?: number | null;
+            impressions?: number | null;
             leads: number;
             qualified: number;
             revenueCents: number;
+            spendCents?: number | null;
             won: number;
           }>;
           currency: string | null;
+          currencyMismatch?: boolean;
           from: number;
           origins: Array<{
+            clicks?: number | null;
+            impressions?: number | null;
             key: string;
             leads: number;
             qualified: number;
             revenueCents: number;
+            spendCents?: number | null;
             won: number;
           }>;
+          spendCurrency?: string | null;
+          spendIncomplete?: boolean;
           to: number;
           totals: {
+            clicks?: number | null;
+            impressions?: number | null;
             leads: number;
             qualified: number;
             revenueCents: number;
+            spendCents?: number | null;
             won: number;
           };
         },
@@ -393,12 +452,14 @@ export type ComponentApi<Name extends string | undefined = string | undefined> =
         "mutation",
         "internal",
         {
+          column?: string;
           eventId: string;
           leadKey: string;
+          meta?: any;
           occurredAt: number;
           revenueCents?: number;
           siteId: string;
-          stage: "qualified" | "won" | "lost" | "open";
+          stage?: "qualified" | "won" | "lost" | "open";
         },
         { applied: boolean },
         Name
@@ -422,6 +483,221 @@ export type ComponentApi<Name extends string | undefined = string | undefined> =
         Name
       >;
     };
+    meta: {
+      connect: FunctionReference<
+        "action",
+        "internal",
+        { accessToken: string; ownerKey: string },
+        {
+          adAccounts: Array<{
+            adAccountId: string;
+            currency: string;
+            name: string;
+            timezone: string;
+          }>;
+          businessName: string | null;
+          connectionId: string;
+          pixels: Array<{ name: string; pixelId: string }>;
+        },
+        Name
+      >;
+      connectWithCode: FunctionReference<
+        "action",
+        "internal",
+        { code: string; ownerKey: string; redirectUri: string },
+        {
+          adAccounts: Array<{
+            adAccountId: string;
+            currency: string;
+            name: string;
+            timezone: string;
+          }>;
+          businessName: string | null;
+          connectionId: string;
+          pixels: Array<{ name: string; pixelId: string }>;
+        },
+        Name
+      >;
+      connection: FunctionReference<
+        "query",
+        "internal",
+        { ownerKey: string },
+        null | {
+          adAccounts: Array<{
+            adAccountId: string;
+            currency: string;
+            linkedOutsideScope?: boolean;
+            linkedSiteId: string | null;
+            name: string;
+            timezone: string;
+          }>;
+          authorizedAt: number | null;
+          authorizedBy: { name: string | null } | null;
+          businessName: string | null;
+          expiresAt: number | null;
+          expiringSoon: boolean;
+          invalidSince: number | null;
+          lastError: string | null;
+          pixels: Array<{ name: string; pixelId: string }>;
+          status: "active" | "invalid";
+        },
+        Name
+      >;
+      connectionSites: FunctionReference<
+        "query",
+        "internal",
+        { ownerKey: string },
+        Array<string>,
+        Name
+      >;
+      conversions: FunctionReference<
+        "query",
+        "internal",
+        {
+          before?: number;
+          beforeEventId?: string;
+          limit?: number;
+          siteId: string;
+        },
+        Array<{
+          adId: string | null;
+          adName: string | null;
+          createdAt: number;
+          eventId: string;
+          eventName: "Lead" | "QualifiedLead" | "Schedule" | "Purchase";
+          leadId: string | null;
+          leadLabel: string | null;
+          sentAt: number | null;
+          status: "pending" | "sent" | "failed";
+          valueCents: number | null;
+        }>,
+        Name
+      >;
+      linkAdAccount: FunctionReference<
+        "mutation",
+        "internal",
+        {
+          adAccountId: string;
+          onlyOwn?: boolean;
+          ownerKey: string;
+          siteId: string;
+        },
+        { linked: boolean },
+        Name
+      >;
+      listAdAccounts: FunctionReference<
+        "action",
+        "internal",
+        { ownerKey: string },
+        Array<{
+          adAccountId: string;
+          currency: string;
+          name: string;
+          timezone: string;
+        }>,
+        Name
+      >;
+      removeConnection: FunctionReference<
+        "mutation",
+        "internal",
+        { ownerKey: string },
+        { removed: boolean },
+        Name
+      >;
+      removePixel: FunctionReference<
+        "mutation",
+        "internal",
+        { ownerKey?: string; siteId: string },
+        { removed: boolean },
+        Name
+      >;
+      setPixel: FunctionReference<
+        "action",
+        "internal",
+        {
+          accessToken?: string;
+          enabled: boolean;
+          onlyOwn?: boolean;
+          ownerKey?: string;
+          pixelId: string;
+          sendLeadEvent?: boolean;
+          setBy?: string;
+          siteId: string;
+          testEventCode?: string;
+        },
+        { ok: true },
+        Name
+      >;
+      status: FunctionReference<
+        "query",
+        "internal",
+        { now?: number; ownerKey?: string; siteIds: Array<string> },
+        Array<{
+          adAccounts: Array<{
+            adAccountId: string;
+            backfill?: { done: number; total: number } | null;
+            currency: string;
+            lastError: string | null;
+            lastSyncAt: number | null;
+            name: string;
+            own?: boolean;
+            syncState: "backfill" | "live" | "error";
+            timezone: string;
+          }>;
+          conversions: {
+            failed: number;
+            last30d?: {
+              Lead: number;
+              Purchase: number;
+              QualifiedLead: number;
+              Schedule: number;
+            } | null;
+            pending: number;
+            sent: number;
+            sentToday?: number | null;
+          };
+          linked: boolean;
+          pixel: {
+            enabled: boolean;
+            lastError?: string | null;
+            name?: string | null;
+            own?: boolean;
+            pixelId: string | null;
+            source?: "connection" | "token" | null;
+            testMode?: boolean;
+          };
+          siteId: string;
+        }>,
+        Name
+      >;
+      syncNow: FunctionReference<
+        "mutation",
+        "internal",
+        { siteId: string },
+        { scheduled: boolean },
+        Name
+      >;
+      unlinkAdAccount: FunctionReference<
+        "mutation",
+        "internal",
+        { adAccountId: string; ownerKey?: string; siteId: string },
+        { unlinked: boolean },
+        Name
+      >;
+      unlinkPreview: FunctionReference<
+        "query",
+        "internal",
+        { adAccountId: string; siteId: string },
+        {
+          campaigns: number;
+          currency: string;
+          days: number;
+          partial: boolean;
+          spendCents: number;
+        },
+        Name
+      >;
+    };
     people: {
       backfillSearch: FunctionReference<
         "mutation",
@@ -462,6 +738,53 @@ export type ComponentApi<Name extends string | undefined = string | undefined> =
         Name
       >;
     };
+    pipeline: {
+      eventMap: FunctionReference<
+        "query",
+        "internal",
+        { now?: number; siteId: string },
+        {
+          columns: Array<{
+            color: string | null;
+            event: "Lead" | "QualifiedLead" | "Schedule" | null;
+            group: string | null;
+            key: string;
+            monthCount: number | null;
+            name: string;
+          }>;
+          purchase: { enabled: boolean };
+          sendLeadEvent: boolean;
+        },
+        Name
+      >;
+      setEventMap: FunctionReference<
+        "mutation",
+        "internal",
+        {
+          columns: Record<string, "Lead" | "QualifiedLead" | "Schedule" | null>;
+          ownerKey?: string;
+          sendLeadEvent: boolean;
+          siteId: string;
+        },
+        null,
+        Name
+      >;
+      setPipeline: FunctionReference<
+        "mutation",
+        "internal",
+        {
+          columns: Array<{
+            color?: string;
+            group?: string;
+            key: string;
+            name: string;
+          }>;
+          siteId: string;
+        },
+        null,
+        Name
+      >;
+    };
     reports: {
       affiliatesReport: FunctionReference<
         "query",

package/src/component/_generated/server.ts

@@ -43,6 +43,10 @@ type Env = {
   readonly RASTRO_GEOIP_DAILY_LIMIT: string | undefined;
   readonly RASTRO_GEOIP_PROVIDER: "ipinfo" | "ipwhois" | undefined;
   readonly RASTRO_GEOIP_TOKEN: string | undefined;
+  readonly RASTRO_META_APP_ID: string | undefined;
+  readonly RASTRO_META_APP_SECRET: string | undefined;
+  readonly RASTRO_META_FAKE: "true" | undefined;
+  readonly RASTRO_SECRETS_KEY: string | undefined;
   readonly RASTRO_TRUST_PROXY: "true" | undefined;
 };