@ossy/analytics 3.11.0 → 3.12.0

package/README.md

@@ -1,30 +1,33 @@
 # @ossy/analytics
 
-Analytics feature package for the Ossy platform. Shows **workspace-scoped** traffic and insight KPIs.
+Host-traffic analytics. See **[SPEC.md](./SPEC.md)**.
 
-Platform-wide (ops) insights belong in a future back-office surface — see [ADR 0014](../../docs/adr/0014-system-insights-in-back-office.md).
+Platform-wide (ops) insights belong in a back-office Mongo dashboard — [ADR 0014](../../docs/adr/0014-system-insights-in-back-office.md).
 
 ## Pages
 
 | Page | Path | Audience |
 |------|------|----------|
-| `analytics/home` | `/analytics` · `/analys` | Signed-in + entitled → product KPIs. Otherwise the public sales page (no KPI loads). |
+| `analytics/home` | `/analytics` · `/analys` | Signed-in + entitled → traffic for a **registered Host**. No domain → empty state. Otherwise the public sales page (no stats loads). |
+
+Workspace member/resource counts are **not** this package — they belong on workspace settings.
 
 ## Actions
 
 | Action | Access | Notes |
 |--------|--------|-------|
-| `@ossy/analytics/actions/get-workspace-kpis` | `workspace` | Member count + non-removed resource count for the current workspace |
-| `@ossy/resources/actions/get-page-view-stats` | `workspace` | Page-view aggregates (implemented in `@ossy/resources`) |
+| `@ossy/analytics/actions/create-page-view` | `public` | Ingest. Server resolves Host (`hostname` / `Origin`) via managed-domain registry. Unknown Host → 200 no-op (`recorded: false`). Connection `ip` is stamped on the eventstore row (ADR 0016). |
+| `@ossy/analytics/actions/get-page-view-stats` | `workspace` | Aggregates for a Host this workspace registered (`host` required). Window is resource `created`. Returns `uniqueVisitors`, paths, and `byCountry`. |
+| `@ossy/analytics/actions/get-workspace-kpis` | `workspace` | Member + resource counts — UI on `/settings`; not shown on `/analytics`. |
+
+## Locations (#769)
 
-## Client usage
+**Event (source of truth):** after Host allowlist, the page-view **eventstore row** carries the trusted connection IP (`ip`, ADR 0016). Client body `ip` / `countryCode` and viewer geo headers are ignored. Unknown Hosts never write an event.
 
-```js
-import { GetWorkspaceKpis } from '@ossy/analytics'
+**Read model:** `PageViewLocationProjection` (`@ossy/analytics/data/page-view-location`) maps `event.ip` → ISO `countryCode` via MaxMind GeoLite2-Country (`GEOLITE2_COUNTRY_MMDB`) and folds counts into daily country buckets (`byDay[YYYY-MM-DD][CC]`) scoped per Host (`workspaceId:host`). Day keys use envelope `created`. Rebuilding with a new `.mmdb` refreshes historical countries while events keep raw IPs.
 
-await sdk.invoke(GetWorkspaceKpis, {})
-```
+**UI:** location / `byCountry` only — never show IP. Host-scoped (pick a domain on `/analytics`).
 
 ## Preview
 
-Enable Analytics in workspace entitlements (or `devEntitlements` in `@ossy/app-test`), then open `/analytics`.
+Enable Analytics, register a domain on the workspace, then open `/analytics` and select that Host.

package/SPEC.md

@@ -0,0 +1,177 @@
+# Analytics — Feature Specification
+
+> Package: `@ossy/analytics` · Status: **beta** (Host-traffic model)
+
+---
+
+## Problem
+
+Operators need to know **how many people visited a Host** (e.g. `ossy.se`) — unique visitors and page views. That includes anonymous traffic and signed-in members. Attribution must follow the **Host**, not the visitor’s selected workspace.
+
+**Core user story:** "I register a domain on my workspace. Visitors to that Host are counted (signed in or not). I open `/analytics`, pick that domain, and see unique visitors and page views."
+
+**Non-goal:** Attributing views to the visitor’s selected workspace (cookie / `appWorkspaceId` / client `workspaceId`). A signed-in member of another workspace visiting `ossy.se` counts on Ossy’s Host.
+
+---
+
+## Tenancy
+
+| Layer | Meaning |
+|---|---|
+| Host | A registered managed domain (`@ossy/domains/schema/managed-domain`; hostname on `state.name` and/or `content.Domain`) |
+| Workspace | Owns zero or more Hosts (`belongsTo` on the domain resource) |
+| Write | One public ingest. Attribution is **Host → workspace**. Never client `workspaceId`. |
+| Read | Workspace members see stats **for a Host they registered**, not a blob of all workspace page views |
+
+The domain is registered **on the workspace** (`@ossy/apps/actions/register-domain` / Domains UI). It is **not** a parameter the ingest action trusts from the client.
+
+---
+
+## One write path
+
+There is a single ingest: `@ossy/analytics/actions/create-page-view` (`access: 'public'`).
+
+```
+browser  →  POST /actions  { action: create-page-view, payload: { path, visitorId, … } }
+         →  resolve Host
+         →  lookup managed domain
+         →  registered: page-view resource (belongsTo = that workspace, content.host = Host)
+         →  unknown / local: 200 `{ ok: true, recorded: false }` (no write)
+```
+
+No second event type, no parallel store, no member-session ingest, no baked `config.workspaceId` fallback.
+
+### Resolve Host
+
+| Request | Host |
+|---|---|
+| Same-origin (page on `ossy.se` posts to `ossy.se`) | `req.hostname` |
+| Cross-origin (page on `customer.com` posts to Ossy `/actions`) | Browser `Origin` hostname (fallback `Referer`) |
+
+Strip port and a leading `www.`. `localhost` / loopback are Hosts **if registered** (needed for local app-test). Unregistered local Hosts are the same 200 no-op as any unknown Host.
+
+### Lookup
+
+Managed-domain with hostname on `state.name` **or** `state.content.Domain` / `state.content.domain` (apex or `www.`), not removed. `belongsTo` is the workspace that registered it. Document display name may differ from the Domain field — both must resolve the same Host.
+
+Unknown or local unregistered Host → **200 no-op** (`recorded: false`). Do **not** return 400/404 — that would enumerate the registry. Do not fall back to `req.workspaceId`, cookies, or app config.
+
+### Persist
+
+Page views are **resources**. When the view happened is resource `created` (envelope, unix ms, stamped at ingest). Do not duplicate that as `content.eventAt`. Stats window and daily buckets use `state.created`.
+
+Content **must** include `host` (the resolved hostname). Also: `path`, `visitorId`, optional `section` / `language` / `referrer` / `userAgent`.
+
+After Host allowlist, persist a page-view resource. Trusted connection `ip` is stamped on the **eventstore row** (ADR 0016), never `payload.ip`. Do **not** GeoIP at ingest — `countryCode` is a projection field. Do **not** list `ip` / `countryCode` on the page-view schema.
+
+Drop client `workspaceId`, `ip`, `countryCode`, client `host`, client `eventAt`, and any other extras. `createdBy` is `req.userId` or `public`. Resource `name` is the path.
+
+`visitorId` is a stable anonymous id from the client (localStorage). Unique visitors = distinct `visitorId` per Host in the window. Signed-in users keep the same visitor id in that browser.
+
+Location stays `/@ossy/analytics/page-views/`. `belongsTo` is the registry workspace so ACL/stats stay tenant-scoped.
+
+### Tracker
+
+`PageViewTracker` lives in the app shell and invokes create-page-view on every client navigation (no `GetWorkspace`). Signed-in product routes on a registered Host count as that Host’s traffic. Failures are silent. A site that is not a registered Host is a no-op (`recorded: false`).
+
+External / non-platform sites use the same action: POST `/actions` from their origin. Attribution is `Origin`, which must match a managed domain.
+
+---
+
+## Read path
+
+`@ossy/analytics/actions/get-page-view-stats` remains `access: 'workspace'`.
+
+**Required:** `host` (or `domain`) in the payload. Stats match `belongsTo` = current workspace **and** `content.host` = that Host, filtered by resource `created` in the window. The Host must be registered on this workspace; otherwise **404** (same as unknown — do not distinguish “exists on another tenant”).
+
+**Time window:** filter and bucket on resource envelope `state.created` (server clock), not client `content.eventAt`.
+
+**Returns:** `host`, `from`, `to`, `uniqueVisitors`, `totalViews`, `dailyViews[]`, `topPaths[]`, `byCountry[]` (default last 30 days). `byCountry` comes from `PageViewLocationProjection` (MaxMind), not from write-event `countryCode`.
+
+`/analytics` (`analytics/home`):
+
+1. Signed out or not entitled → sales page (unchanged).
+2. Entitled, **no** registered domains:
+   - Domains package **not** entitled → CTA to enable Domains (`packages/detail` for `domains`). Do not open generic create under `/@ossy/domains/`.
+   - Domains entitled → empty state: add a domain (link to Domains home). Do not load member/resource KPIs. Do not query stats. `data-analytics-overview-status="empty"`.
+3. Entitled, one or more domains → **must pick a Host** (query/select). Then show visitors / views / top paths / daily / locations for that Host.
+
+Analytics **requires a domain** in the product sense: no Host, no traffic UI. Enabling the package without a domain is allowed; the home page tells you to register one.
+
+---
+
+## Multiple domains
+
+One workspace may register `example.com` and `blog.example.com`. Same write. Events differ by `content.host`; both `belongsTo` that workspace.
+
+The dashboard does not sum Hosts together. Pick one. (Later: optional roll-up is a new read, not a second write.)
+
+---
+
+## Workspace KPIs (not analytics)
+
+Member count and resource count are workspace facts, not Host traffic.
+
+| Today | Target |
+|---|---|
+| `@ossy/analytics/actions/get-workspace-kpis` on `/analytics` | Same action on **workspace settings** (`workspace/settings`, `/settings`) |
+
+`@ossy/analytics` does not show members/resources. Sales copy for analytics is about site visitors, not seat counts.
+
+---
+
+## Entitlements
+
+| Package | Role |
+|---|---|
+| `@ossy/domains` | Register Hosts (`/@ossy/domains/`). Analytics must not create documents in that namespace when Domains is off. |
+| `@ossy/analytics` | View Host traffic (`/@ossy/analytics/page-views/`) |
+
+Ingest does **not** require analytics entitlement — a registered Host is enough to accept views. **Reading** stats requires analytics entitled + membership on the workspace that owns the Host.
+
+Do not add a second ingest gated on entitlement.
+
+---
+
+## Locations (#769)
+
+| Layer | Behaviour |
+|---|---|
+| Ingest | After Host allowlist only: append the page-view event. Connection `ip` is stamped on the eventstore row (ADR 0016). No MaxMind at write. Unknown Host → no write. |
+| Projection | `PageViewLocationProjection` (`@ossy/analytics/data/page-view-location`), scope `workspaceId:host`, folds `byDay[YYYY-MM-DD][CC]` from MaxMind GeoLite2-Country (`GEOLITE2_COUNTRY_MMDB`). Day from envelope `created`. |
+| Stats | `byCountry` rollup from the Host projection for the window (`countryLimit` separate from top-paths `limit`). |
+| UI | Location tiles / ranked list only — never show raw IP. |
+
+## Out of scope
+
+- Interactive world map (Phase 0 is ISO tiles + ranked list)
+- Platform-wide visitor totals in the product (ADR 0014 / 0015 — ops Mongo/Grafana)
+- `workspaceId` in website `src/config.js` as a substitute for Host registration
+- Bot filtering, sampling, or rate limits (follow-up)
+- Summing multiple Hosts on one chart
+
+---
+
+## Implementation notes (current vs this spec)
+
+|#797 / previous | This spec |
+|---|---|
+| Host lookup, then cookie `workspaceId`, then `config.workspaceId` | Host lookup only; else 200 no-op |
+| Unknown Host → 400 | Unknown Host → 200 `{ recorded: false }` (no registry leak) |
+| Stats unfiltered by `host`; window on `content.eventAt` | Stats require `host`; window and daily buckets on resource `created` |
+| `/analytics` shows members + resources + all workspace views | Host picker + traffic only; KPIs on `/settings` |
+| Page-view schema has `eventAt`, no `host` | Required `host`; no `eventAt` — envelope `created` is the clock |
+| Signed-in app navigations excluded (or attributed to the session workspace) | Same Host ingest for anonymous and signed-in |
+
+---
+
+## DoD
+
+- [ ] `create-page-view` public; Host from hostname/`Origin`; unknown/local Host → 200 no-op; no cookie/config fallback
+- [ ] Page-view events store `host`; client cannot set `belongsTo` or `eventAt`; when = resource `created`
+- [ ] `get-page-view-stats` requires a Host registered on the current workspace; filters by `state.created`
+- [ ] `/analytics` empty without a domain; with domains, picker + unique visitors / views for the selected Host
+- [ ] Member/resource counts on workspace settings, not analytics home
+- [ ] Cross-origin POST with `Origin: https://{registered-host}` attributes to that Host’s workspace
+- [ ] Signed-in member on another workspace visiting `ossy.se` counts on Ossy’s Host, not the member’s workspace
+- [ ] Registered Host ingest stamps `event.ip`; projection derives `countryCode`; `/analytics` shows `byCountry` for the selected Host (no IP in UI)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ossy/analytics",
-  "description": "Analytics module — workspace insight KPIs",
-  "version": "3.11.0",
+  "description": "Analytics module — Host visitor traffic for registered domains",
+  "version": "3.12.0",
   "type": "module",
   "main": "./src/index.js",
   "module": "./src/index.js",
@@ -22,16 +22,21 @@
   },
   "files": [
     "/src",
-    "README.md"
+    "README.md",
+    "SPEC.md"
   ],
   "dependencies": {
-    "@ossy/event-store": "^3.11.0",
-    "@ossy/workspaces": "^3.11.0"
+    "@ossy/event-store": "^3.12.0",
+    "@ossy/resources": "^3.12.0",
+    "@ossy/workspaces": "^3.12.0",
+    "maxmind": "^5.0.7",
+    "nanoid": "^5.1.11"
   },
   "peerDependencies": {
     "@ossy/app": "*",
     "@ossy/authentication": "*",
     "@ossy/design-system": "*",
+    "@ossy/domains": "*",
     "@ossy/resources": "*",
     "@ossy/router-react": "*",
     "@ossy/sdk-react": "*",
@@ -42,5 +47,5 @@
     "@jest/globals": "^30.2.0",
     "jest": "^30.2.0"
   },
-  "gitHead": "53ff8456920e09151c9d88df4a6c3ee958d811eb"
+  "gitHead": "c2650803219ad1831559b512848358d9550ffad2"
 }

package/src/AnalyticsProductHome.jsx

@@ -1,7 +1,14 @@
 import React, { useMemo } from 'react'
-import { Text, View, Page, useLocale } from '@ossy/design-system'
+import { ListResources } from '@ossy/resources'
+import { location as domainsLocation, DomainsSchema } from '@ossy/domains'
+import { AsyncStatus, useSdk } from '@ossy/sdk-react'
+import { useRouter } from '@ossy/router-react'
+import { Text, View, Page, Button, Select, useLocale } from '@ossy/design-system'
+import { isServiceEntitled } from '@ossy/workspaces/entitlements'
 import { usePageViewStats } from './usePageViewStats.js'
-import { useWorkspaceKpis } from './useWorkspaceKpis.js'
+import { hostFromDomainResource } from './host-from-domain-resource.js'
+
+const DOMAINS_SERVICE = '@ossy/domains'
 
 function SectionPanel ({ title, children }) {
   return (
@@ -38,70 +45,114 @@ function SummaryCard ({ label, value }) {
   )
 }
 
+function overviewStatusFrom ({ listStatus, hostCount, statsStatus }) {
+  if (listStatus === AsyncStatus.Error || listStatus === AsyncStatus.AuthenticationError) return 'error'
+  if (listStatus === AsyncStatus.Loading || listStatus === AsyncStatus.NotInitialized) return 'loading'
+  if (hostCount === 0) return 'empty'
+  if (statsStatus === 'error') return 'error'
+  if (statsStatus === 'success') return 'ready'
+  return 'loading'
+}
+
 /**
- * Workspace analytics product UI. Only mount when the caller is authenticated
- * so KPI / page-view actions do not run for anonymous sessions.
- * Workspace comes from the page (shell snapshot) — do not re-read GetWorkspace.
+ * Host-traffic analytics. Only mount when the caller is authenticated
+ * and entitled. Workspace comes from the page (shell snapshot).
  */
 export default function AnalyticsProductHome ({ workspace }) {
   const { t } = useLocale()
+  const router = useRouter()
+  const sdk = useSdk()
   const { from, to } = useMemo(() => {
     const now = Date.now()
     return { from: now - 30 * 24 * 60 * 60 * 1000, to: now }
   }, [])
 
+  const { status: listStatus, data: resources = [] } = sdk.read(ListResources, { location: domainsLocation })
+  const hosts = useMemo(() => {
+    const seen = new Set()
+    for (const resource of resources || []) {
+      if (resource?.type !== DomainsSchema.managedDomain) continue
+      const host = hostFromDomainResource(resource)
+      if (host) seen.add(host)
+    }
+    return [...seen]
+  }, [resources])
+
+  const requestedHost = String(router.searchParams?.host || '').trim().toLowerCase().replace(/^www\./, '')
+  const host = hosts.includes(requestedHost) ? requestedHost : (hosts[0] || '')
+
   const pageViews = usePageViewStats({
     workspaceId: workspace?.id,
+    host,
     from,
     to,
     limit: 10,
   })
-  const workspaceKpis = useWorkspaceKpis({ workspaceId: workspace?.id })
-
-  const { status, totalViews, dailyViews, topPaths } = pageViews
-  const kpisSettled = workspaceKpis.status === 'success' || workspaceKpis.status === 'error'
-  const viewsSettled = status === 'success' || status === 'error'
-  const pageLoading = !kpisSettled || !viewsSettled
-  const overviewStatus = pageLoading
-    ? 'loading'
-    : (workspaceKpis.status === 'error' || status === 'error')
-      ? 'error'
-      : 'ready'
+
+  const { status, totalViews, uniqueVisitors, dailyViews, topPaths, byCountry } = pageViews
+  const maxCountryViews = byCountry.reduce((max, item) => Math.max(max, item.views || 0), 0)
+  const overviewStatus = overviewStatusFrom({
+    listStatus,
+    hostCount: hosts.length,
+    statsStatus: status,
+  })
+  const domainsEntitled = isServiceEntitled(workspace?.services, DOMAINS_SERVICE)
+  const domainsHref = domainsEntitled
+    ? (router.getHref('domains/home') || '/domains')
+    : (router.getHref({ id: 'packages/detail', params: { packageSlug: 'domains' } }) || '/packages/domains')
+  const emptyCopy = domainsEntitled ? 'analytics.home.empty' : 'analytics.home.emptyEnableDomains'
+  const emptyCta = domainsEntitled ? 'analytics.home.addDomain' : 'analytics.home.enableDomains'
+
+  const selectHost = (nextHost) => {
+    if (typeof router.searchParams?.patch === 'function') {
+      router.searchParams.patch({ host: nextHost || null })
+      return
+    }
+    if (nextHost) router.searchParams.set('host', nextHost)
+    else router.searchParams.delete('host')
+  }
 
   return (
     <Page
       data-analytics-status="on"
       data-analytics-overview-status={overviewStatus}
+      data-analytics-host={host || undefined}
       title="analytics.home.title"
       description="analytics.home.description"
+      far={hosts.length > 0 ? (
+        <Select
+          data-analytics-host-picker
+          aria-label={t('analytics.home.hostLabel')}
+          value={host}
+          onChange={(event) => selectHost(event.target.value)}
+        >
+          {hosts.map((item) => (
+            <option key={item} value={item}>{item}</option>
+          ))}
+        </Select>
+      ) : undefined}
     >
       <View gap="m">
-        {pageLoading && (
-          <SectionPanel title="analytics.home.overview">
+        {overviewStatus === 'loading' && (
+          <SectionPanel title="analytics.home.traffic">
             <View inset="m">
               <Text>{t('analytics.home.loading')}</Text>
             </View>
           </SectionPanel>
         )}
 
-        {!pageLoading && workspaceKpis.status === 'error' && (
-          <SectionPanel title="analytics.home.overview">
-            <View inset="m">
-              <Text>{t('analytics.home.workspaceKpisError')}</Text>
-            </View>
-          </SectionPanel>
-        )}
-
-        {!pageLoading && workspaceKpis.status === 'success' && (
-          <SectionPanel title="analytics.home.overview">
-            <View layout="row-wrap" gap="m" inset="m">
-              <SummaryCard label={t('analytics.home.members')} value={`${workspaceKpis.members}`} />
-              <SummaryCard label={t('analytics.home.resources')} value={`${workspaceKpis.resources}`} />
+        {overviewStatus === 'empty' && (
+          <SectionPanel title="analytics.home.traffic">
+            <View gap="m" inset="m">
+              <Text>{t(emptyCopy)}</Text>
+              <Button variant="cta" href={domainsHref} data-analytics-add-domain>
+                {t(emptyCta)}
+              </Button>
             </View>
           </SectionPanel>
         )}
 
-        {!pageLoading && status === 'error' && (
+        {overviewStatus === 'error' && (
           <SectionPanel title="analytics.home.traffic">
             <View inset="m">
               <Text>{t('analytics.home.error')}</Text>
@@ -109,10 +160,11 @@ export default function AnalyticsProductHome ({ workspace }) {
           </SectionPanel>
         )}
 
-        {!pageLoading && status === 'success' && (
+        {overviewStatus === 'ready' && (
           <>
             <SectionPanel title="analytics.home.traffic">
               <View layout="row-wrap" gap="m" inset="m">
+                <SummaryCard label={t('analytics.home.uniqueVisitors')} value={`${uniqueVisitors}`} />
                 <SummaryCard label={t('analytics.home.totalPageViews')} value={`${totalViews}`} />
                 <SummaryCard label={t('analytics.home.trackedPages')} value={`${topPaths.length}`} />
                 <SummaryCard label={t('analytics.home.daysWithTraffic')} value={`${dailyViews.length}`} />
@@ -148,6 +200,60 @@ export default function AnalyticsProductHome ({ workspace }) {
                 </SectionPanel>
               </View>
             </View>
+
+            <SectionPanel title="analytics.home.locations">
+              <View gap="s" inset="m">
+                {byCountry.length === 0 && (
+                  <Text variant="small" text="analytics.home.noLocationData" />
+                )}
+                {byCountry.length > 0 && (
+                  <View
+                    layout="row-wrap"
+                    gap="s"
+                    data-analytics-locations-map
+                    style={{ marginBottom: 'var(--space-m)' }}
+                  >
+                    {byCountry.map((item) => {
+                      const intensity = maxCountryViews
+                        ? Math.max(0.18, item.views / maxCountryViews)
+                        : 0.18
+                      return (
+                        <View
+                          key={item.countryCode}
+                          data-country={item.countryCode}
+                          style={{
+                            minWidth: 56,
+                            padding: 'var(--space-s)',
+                            borderRadius: 'var(--roundness-xs)',
+                            background: `color-mix(in srgb, var(--color-primary) ${Math.round(intensity * 100)}%, transparent)`,
+                            textAlign: 'center',
+                          }}
+                        >
+                          <Text variant="small" style={{ fontWeight: 'bold' }}>{item.countryCode}</Text>
+                          <Text variant="small">{item.views}</Text>
+                        </View>
+                      )
+                    })}
+                  </View>
+                )}
+                {byCountry.map((item) => (
+                  <View key={`row-${item.countryCode}`} layout="row" justifyContent="space-between" gap="m">
+                    <Text variant="small">{item.countryCode}</Text>
+                    <View style={{ flex: 1, minWidth: 0, alignSelf: 'center' }}>
+                      <View
+                        style={{
+                          height: 6,
+                          borderRadius: 999,
+                          background: 'var(--color-primary)',
+                          width: `${maxCountryViews ? Math.max(8, (item.views / maxCountryViews) * 100) : 8}%`,
+                        }}
+                      />
+                    </View>
+                    <Text variant="small">{item.views}</Text>
+                  </View>
+                ))}
+              </View>
+            </SectionPanel>
           </>
         )}
       </View>

package/src/Definition.js

@@ -1,7 +1,7 @@
 export const Definition = {
   id: 'analytics',
   title: 'Analytics',
-  description: 'Workspace insight KPIs for members, resources, and traffic.',
+  description: 'Visitor analytics for registered Hosts.',
   icon: 'chart',
   status: ['beta'],
 }

package/src/analytics-home-content.js

@@ -31,14 +31,14 @@ export function useAnalyticsHomeContent () {
 
   const features = [
     {
-      title: t('analytics.home.features.members.title'),
+      title: t('analytics.home.features.visitors.title'),
       icon: 'user',
-      text: t('analytics.home.features.members.text'),
+      text: t('analytics.home.features.visitors.text'),
     },
     {
-      title: t('analytics.home.features.resources.title'),
+      title: t('analytics.home.features.paths.title'),
       icon: 'folder',
-      text: t('analytics.home.features.resources.text'),
+      text: t('analytics.home.features.paths.text'),
     },
     {
       title: t('analytics.home.features.traffic.title'),

package/src/analytics.page.jsx

@@ -15,7 +15,7 @@ export const metadata = {
 const ANALYTICS_SERVICE = '@ossy/analytics'
 
 /**
- * Analytics home — product KPIs when signed in and entitled, otherwise sales.
+ * Analytics home — Host traffic when signed in and entitled, otherwise sales.
  * Entitlement comes from the shell workspace snapshot (SSR bootstrap / cookie)
  * so the dashboard does not flash the sales page on navigation.
  */

package/src/create-page-view.action.js

@@ -0,0 +1 @@
+export const metadata = { id: '@ossy/analytics/actions/create-page-view', access: 'public' }

package/src/create-page-view.task.js

@@ -0,0 +1,55 @@
+import { nanoid } from 'nanoid'
+import { Aggregate } from '@ossy/event-store'
+import { Workspace } from '@ossy/workspaces/server'
+import { ResourcesEvents, commitResource, ResourceStream } from '@ossy/resources/server'
+import {
+  hostFromRequest,
+  pageViewContentFromPayload,
+  resolvePageViewWorkspaceId,
+  workspaceIdForRegisteredHost,
+} from './resolve-page-view-workspace.js'
+
+export const metadata = { id: '@ossy/analytics/tasks/create-page-view' }
+
+const PAGE_VIEW_SCHEMA_ID = '@ossy/web/schema/page-view'
+const PAGE_VIEW_LOCATION = '/@ossy/analytics/page-views/'
+
+/**
+ * Public ingest. Unknown Host is a silent no-op (200) so the
+ * managed-domain registry cannot be enumerated.
+ *
+ * After Host allowlist: append a page-view resource. Connection `ip` is stamped
+ * on the eventstore row (ADR 0016), not on content. `countryCode` is derived
+ * later by PageViewLocationProjection (MaxMind).
+ */
+export async function run ({ payload, req }) {
+  const host = hostFromRequest(req)
+  const workspaceId = await resolvePageViewWorkspaceId({
+    host,
+    findDomain: (name) => workspaceIdForRegisteredHost(ResourceStream.Collection, name),
+  })
+  if (!workspaceId) return { ok: true, recorded: false }
+
+  const workspace = await Aggregate.Of(Workspace, workspaceId).then(Aggregate.View())
+
+  const contentInput = pageViewContentFromPayload(payload, {
+    userAgent: req?.headers?.['user-agent'],
+    path: '/',
+    host,
+  })
+
+  const resourceId = nanoid()
+  const event = ResourcesEvents.Created({
+    resourceId,
+    schemaId: PAGE_VIEW_SCHEMA_ID,
+    createdBy: req?.userId ?? 'public',
+    belongsTo: workspace.id,
+    location: PAGE_VIEW_LOCATION,
+    name: contentInput.path || '/',
+    content: contentInput,
+    access: 'restricted',
+  })
+
+  const resource = await commitResource(event)
+  return { ok: true, recorded: true, id: resource.id }
+}