@outlit/core 1.4.5 → 1.5.1

package/dist/index.d.mts

@@ -29,8 +29,11 @@ interface BrowserIdentifyOptions extends CustomerAttribution {
 }
 /**
  * Base server-side user identity.
- * Track calls may use customerId/customerDomain without these fields.
+ * Track calls may use customerId without these fields.
  * Identify calls still require email or userId at runtime.
+ * `customerId`-only track calls are valid immediately, but they stay provisional
+ * until the same customer/account/workspace later appears on identify() with
+ * the matching customerId and an email.
  *
  * - fingerprint: Device identifier for anonymous tracking (can be linked later)
  * - email: User's email address (definitive identity, resolves immediately)
@@ -45,8 +48,6 @@ interface ServerIdentity {
 interface CustomerAttribution {
     /** Your system-owned customer/account/workspace ID. */
     customerId?: string;
-    /** Public customer/account domain used for billing and attribution. */
-    customerDomain?: string;
 }
 interface CustomerTraits {
     /** Customer's billing plan */
@@ -73,21 +74,17 @@ interface ServerIdentifyOptions extends ServerIdentity, CustomerAttribution {
 }
 /**
  * Customer identity for SDK billing methods.
- * Public billing calls should use `customerId` and/or `customerDomain`.
+ * Public billing calls should use `customerId`.
  */
 interface CustomerIdentifier extends CustomerAttribution {
-    /**
-     * @deprecated Use `customerDomain` instead.
-     * Legacy alias kept for backward compatibility.
-     */
-    domain?: string;
     /**
      * @deprecated Stripe customer identifier.
-     * Billing attribution should use `customerId` and/or `customerDomain` publicly.
+     * Billing attribution should use `customerId` publicly.
      */
     stripeCustomerId?: string;
 }
 interface BaseEvent {
+    uuid?: string;
     type: EventType;
     timestamp: number;
     url: string;
@@ -110,7 +107,6 @@ interface IdentifyEvent extends BaseEvent {
     userId?: string;
     fingerprint?: string;
     customerId?: string;
-    customerDomain?: string;
     customerTraits?: CustomerTraits;
     traits?: IdentifyTraits;
 }
@@ -121,7 +117,6 @@ interface CustomEvent extends BaseEvent {
     userId?: string;
     fingerprint?: string;
     customerId?: string;
-    customerDomain?: string;
     properties?: Record<string, string | number | boolean | null>;
 }
 interface CalendarEvent extends BaseEvent {
@@ -158,9 +153,6 @@ interface BillingEvent extends BaseEvent {
     status: BillingStatus;
     /** Optional customer identifiers */
     customerId?: string;
-    customerDomain?: string;
-    /** @deprecated Legacy alias for `customerDomain`. */
-    domain?: string;
     stripeCustomerId?: string;
     /** Optional properties for context */
     properties?: Record<string, string | number | boolean | null>;
@@ -182,11 +174,6 @@ interface PayloadUserIdentity {
      * Kept for one compatibility window while callers migrate.
      */
     customerId?: string;
-    /**
-     * @deprecated Use payload-level `customerIdentity.customerDomain` instead.
-     * Kept for one compatibility window while callers migrate.
-     */
-    customerDomain?: string;
     /**
      * @deprecated Use payload-level `customerIdentity.customerTraits` instead.
      * Kept for one compatibility window while callers migrate.
@@ -196,6 +183,8 @@ interface PayloadUserIdentity {
 /**
  * Customer identity for payload-level attribution.
  * Used by browser SDK to attach account/workspace context to a batch.
+ * `customerId`-only attribution is valid and remains provisional until a later
+ * identify(email, customerId) call links that external account/workspace to a resolved customer.
  */
 interface PayloadCustomerIdentity extends CustomerAttribution {
     /** Customer/account traits. */
@@ -273,7 +262,6 @@ declare function buildIdentifyEvent(params: BaseEventParams & {
     fingerprint?: string;
     traits?: IdentifyTraits;
     customerId?: string;
-    customerDomain?: string;
     customerTraits?: CustomerTraits;
 }): IdentifyEvent;
 /**
@@ -286,7 +274,6 @@ declare function buildCustomEvent(params: BaseEventParams & {
     userId?: string;
     fingerprint?: string;
     customerId?: string;
-    customerDomain?: string;
 }): CustomEvent;
 /**
  * Build a calendar booking event.
@@ -326,9 +313,7 @@ declare function buildStageEvent(params: BaseEventParams & {
 declare function buildBillingEvent(params: BaseEventParams & {
     status: BillingStatus;
     customerId?: string;
-    customerDomain?: string;
     stripeCustomerId?: string;
-    domain?: string;
     properties?: Record<string, string | number | boolean | null>;
 }): BillingEvent;
 /**
@@ -340,7 +325,9 @@ declare function buildBillingEvent(params: BaseEventParams & {
  * @param userIdentity - Optional user identity for immediate resolution (from setUser in SPA)
  * @param sessionId - Optional session ID for grouping events (browser SDK only)
  * @param fingerprint - Optional device identifier for server-side anonymous tracking
- * @param customerIdentity - Optional customer identity for batch attribution
+ * @param customerIdentity - Optional customer identity for batch attribution. `customerId`-only
+ * batches are valid and remain provisional until a later identify(email, customerId) call
+ * links that external account/workspace to a resolved customer.
  */
 declare function buildIngestPayload(visitorId: string, source: SourceType, events: TrackerEvent[], userIdentity?: PayloadUserIdentity, sessionId?: string, fingerprint?: string, customerIdentity?: PayloadCustomerIdentity): IngestPayload;
 /**
@@ -378,13 +365,12 @@ declare function sanitizeFormFields(fields: Record<string, string> | undefined,
  * - email: User's email (definitive identity)
  * - userId: Your system-owned user/contact ID
  * - customerId: Your system-owned customer/account/workspace ID
- * - customerDomain: Public customer/account domain used for billing and attribution
  */
-declare function validateServerIdentity(fingerprint?: string, email?: string, userId?: string, customerId?: string, customerDomain?: string): void;
+declare function validateServerIdentity(fingerprint?: string, email?: string, userId?: string, customerId?: string): void;
 /**
  * Validate that at least one customer identifier is provided for billing calls.
  */
-declare function validateCustomerIdentity(customerId?: string, customerDomain?: string, domain?: string, stripeCustomerId?: string): void;
+declare function validateCustomerIdentity(customerId?: string, stripeCustomerId?: string): void;
 /**
  * Validate that a string looks like a valid email address.
  */

package/dist/index.d.ts

@@ -29,8 +29,11 @@ interface BrowserIdentifyOptions extends CustomerAttribution {
 }
 /**
  * Base server-side user identity.
- * Track calls may use customerId/customerDomain without these fields.
+ * Track calls may use customerId without these fields.
  * Identify calls still require email or userId at runtime.
+ * `customerId`-only track calls are valid immediately, but they stay provisional
+ * until the same customer/account/workspace later appears on identify() with
+ * the matching customerId and an email.
  *
  * - fingerprint: Device identifier for anonymous tracking (can be linked later)
  * - email: User's email address (definitive identity, resolves immediately)
@@ -45,8 +48,6 @@ interface ServerIdentity {
 interface CustomerAttribution {
     /** Your system-owned customer/account/workspace ID. */
     customerId?: string;
-    /** Public customer/account domain used for billing and attribution. */
-    customerDomain?: string;
 }
 interface CustomerTraits {
     /** Customer's billing plan */
@@ -73,21 +74,17 @@ interface ServerIdentifyOptions extends ServerIdentity, CustomerAttribution {
 }
 /**
  * Customer identity for SDK billing methods.
- * Public billing calls should use `customerId` and/or `customerDomain`.
+ * Public billing calls should use `customerId`.
  */
 interface CustomerIdentifier extends CustomerAttribution {
-    /**
-     * @deprecated Use `customerDomain` instead.
-     * Legacy alias kept for backward compatibility.
-     */
-    domain?: string;
     /**
      * @deprecated Stripe customer identifier.
-     * Billing attribution should use `customerId` and/or `customerDomain` publicly.
+     * Billing attribution should use `customerId` publicly.
      */
     stripeCustomerId?: string;
 }
 interface BaseEvent {
+    uuid?: string;
     type: EventType;
     timestamp: number;
     url: string;
@@ -110,7 +107,6 @@ interface IdentifyEvent extends BaseEvent {
     userId?: string;
     fingerprint?: string;
     customerId?: string;
-    customerDomain?: string;
     customerTraits?: CustomerTraits;
     traits?: IdentifyTraits;
 }
@@ -121,7 +117,6 @@ interface CustomEvent extends BaseEvent {
     userId?: string;
     fingerprint?: string;
     customerId?: string;
-    customerDomain?: string;
     properties?: Record<string, string | number | boolean | null>;
 }
 interface CalendarEvent extends BaseEvent {
@@ -158,9 +153,6 @@ interface BillingEvent extends BaseEvent {
     status: BillingStatus;
     /** Optional customer identifiers */
     customerId?: string;
-    customerDomain?: string;
-    /** @deprecated Legacy alias for `customerDomain`. */
-    domain?: string;
     stripeCustomerId?: string;
     /** Optional properties for context */
     properties?: Record<string, string | number | boolean | null>;
@@ -182,11 +174,6 @@ interface PayloadUserIdentity {
      * Kept for one compatibility window while callers migrate.
      */
     customerId?: string;
-    /**
-     * @deprecated Use payload-level `customerIdentity.customerDomain` instead.
-     * Kept for one compatibility window while callers migrate.
-     */
-    customerDomain?: string;
     /**
      * @deprecated Use payload-level `customerIdentity.customerTraits` instead.
      * Kept for one compatibility window while callers migrate.
@@ -196,6 +183,8 @@ interface PayloadUserIdentity {
 /**
  * Customer identity for payload-level attribution.
  * Used by browser SDK to attach account/workspace context to a batch.
+ * `customerId`-only attribution is valid and remains provisional until a later
+ * identify(email, customerId) call links that external account/workspace to a resolved customer.
  */
 interface PayloadCustomerIdentity extends CustomerAttribution {
     /** Customer/account traits. */
@@ -273,7 +262,6 @@ declare function buildIdentifyEvent(params: BaseEventParams & {
     fingerprint?: string;
     traits?: IdentifyTraits;
     customerId?: string;
-    customerDomain?: string;
     customerTraits?: CustomerTraits;
 }): IdentifyEvent;
 /**
@@ -286,7 +274,6 @@ declare function buildCustomEvent(params: BaseEventParams & {
     userId?: string;
     fingerprint?: string;
     customerId?: string;
-    customerDomain?: string;
 }): CustomEvent;
 /**
  * Build a calendar booking event.
@@ -326,9 +313,7 @@ declare function buildStageEvent(params: BaseEventParams & {
 declare function buildBillingEvent(params: BaseEventParams & {
     status: BillingStatus;
     customerId?: string;
-    customerDomain?: string;
     stripeCustomerId?: string;
-    domain?: string;
     properties?: Record<string, string | number | boolean | null>;
 }): BillingEvent;
 /**
@@ -340,7 +325,9 @@ declare function buildBillingEvent(params: BaseEventParams & {
  * @param userIdentity - Optional user identity for immediate resolution (from setUser in SPA)
  * @param sessionId - Optional session ID for grouping events (browser SDK only)
  * @param fingerprint - Optional device identifier for server-side anonymous tracking
- * @param customerIdentity - Optional customer identity for batch attribution
+ * @param customerIdentity - Optional customer identity for batch attribution. `customerId`-only
+ * batches are valid and remain provisional until a later identify(email, customerId) call
+ * links that external account/workspace to a resolved customer.
  */
 declare function buildIngestPayload(visitorId: string, source: SourceType, events: TrackerEvent[], userIdentity?: PayloadUserIdentity, sessionId?: string, fingerprint?: string, customerIdentity?: PayloadCustomerIdentity): IngestPayload;
 /**
@@ -378,13 +365,12 @@ declare function sanitizeFormFields(fields: Record<string, string> | undefined,
  * - email: User's email (definitive identity)
  * - userId: Your system-owned user/contact ID
  * - customerId: Your system-owned customer/account/workspace ID
- * - customerDomain: Public customer/account domain used for billing and attribution
  */
-declare function validateServerIdentity(fingerprint?: string, email?: string, userId?: string, customerId?: string, customerDomain?: string): void;
+declare function validateServerIdentity(fingerprint?: string, email?: string, userId?: string, customerId?: string): void;
 /**
  * Validate that at least one customer identifier is provided for billing calls.
  */
-declare function validateCustomerIdentity(customerId?: string, customerDomain?: string, domain?: string, stripeCustomerId?: string): void;
+declare function validateCustomerIdentity(customerId?: string, stripeCustomerId?: string): void;
 /**
  * Validate that a string looks like a valid email address.
  */

package/dist/index.js

@@ -46,6 +46,9 @@ __export(src_exports, {
 });
 module.exports = __toCommonJS(src_exports);
 
+// src/payload.ts
+var import_uuid = require("uuid");
+
 // src/types.ts
 var DEFAULT_API_HOST = "https://app.outlit.ai";
 var DEFAULT_DENIED_FORM_FIELDS = [
@@ -144,26 +147,23 @@ function sanitizeFormFields(fields, customDenylist) {
   }
   return Object.keys(sanitized).length > 0 ? sanitized : void 0;
 }
-function validateServerIdentity(fingerprint, email, userId, customerId, customerDomain) {
+function validateServerIdentity(fingerprint, email, userId, customerId) {
   const hasFingerprint = fingerprint && fingerprint.trim().length > 0;
   const hasEmail = email && email.trim().length > 0;
   const hasUserId = userId && userId.trim().length > 0;
   const hasCustomerId = customerId && customerId.trim().length > 0;
-  const hasCustomerDomain = customerDomain && customerDomain.trim().length > 0;
-  if (!hasFingerprint && !hasEmail && !hasUserId && !hasCustomerId && !hasCustomerDomain) {
+  if (!hasFingerprint && !hasEmail && !hasUserId && !hasCustomerId) {
     throw new Error(
-      "Server SDK requires at least one of: fingerprint, email, userId, customerId, or customerDomain for track calls. Use fingerprint/email/userId for user-scoped tracking or customerId/customerDomain for customer-only tracking."
+      "Server SDK requires at least one of: fingerprint, email, userId, or customerId for track calls. Use fingerprint/email/userId for user-scoped tracking or customerId for customer-only tracking."
     );
   }
 }
-function validateCustomerIdentity(customerId, customerDomain, domain, stripeCustomerId) {
+function validateCustomerIdentity(customerId, stripeCustomerId) {
   const hasCustomerId = customerId && customerId.trim().length > 0;
-  const hasCustomerDomain = customerDomain && customerDomain.trim().length > 0;
-  const hasDomain = domain && domain.trim().length > 0;
   const hasStripeCustomerId = stripeCustomerId && stripeCustomerId.trim().length > 0;
-  if (!hasCustomerId && !hasCustomerDomain && !hasDomain && !hasStripeCustomerId) {
+  if (!hasCustomerId && !hasStripeCustomerId) {
     throw new Error(
-      "Billing methods require customerId or customerDomain. Use customerId for your system-owned account ID and customerDomain for the public account domain."
+      "Billing methods require customerId or stripeCustomerId. Use customerId for your system-owned account ID."
     );
   }
 }
@@ -279,6 +279,7 @@ function extractIdentityFromForm(fields, inputTypes) {
 function buildPageviewEvent(params) {
   const { url, referrer, timestamp, title } = params;
   return {
+    uuid: (0, import_uuid.v7)(),
     type: "pageview",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -291,6 +292,7 @@ function buildPageviewEvent(params) {
 function buildFormEvent(params) {
   const { url, referrer, timestamp, formId, formFields } = params;
   return {
+    uuid: (0, import_uuid.v7)(),
     type: "form",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -311,10 +313,10 @@ function buildIdentifyEvent(params) {
     fingerprint,
     traits,
     customerId,
-    customerDomain,
     customerTraits
   } = params;
   return {
+    uuid: (0, import_uuid.v7)(),
     type: "identify",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -325,7 +327,6 @@ function buildIdentifyEvent(params) {
     userId,
     fingerprint,
     customerId,
-    customerDomain,
     customerTraits,
     traits
   };
@@ -340,10 +341,10 @@ function buildCustomEvent(params) {
     email,
     userId,
     fingerprint,
-    customerId,
-    customerDomain
+    customerId
   } = params;
   return {
+    uuid: (0, import_uuid.v7)(),
     type: "custom",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -355,7 +356,6 @@ function buildCustomEvent(params) {
     userId,
     fingerprint,
     customerId,
-    customerDomain,
     properties
   };
 }
@@ -374,6 +374,7 @@ function buildCalendarEvent(params) {
     inviteeName
   } = params;
   return {
+    uuid: (0, import_uuid.v7)(),
     type: "calendar",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -393,6 +394,7 @@ function buildCalendarEvent(params) {
 function buildEngagementEvent(params) {
   const { url, referrer, timestamp, activeTimeMs, totalTimeMs, sessionId } = params;
   return {
+    uuid: (0, import_uuid.v7)(),
     type: "engagement",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -407,6 +409,7 @@ function buildEngagementEvent(params) {
 function buildStageEvent(params) {
   const { url, referrer, timestamp, stage, properties } = params;
   return {
+    uuid: (0, import_uuid.v7)(),
     type: "stage",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -418,18 +421,9 @@ function buildStageEvent(params) {
   };
 }
 function buildBillingEvent(params) {
-  const {
-    url,
-    referrer,
-    timestamp,
-    status,
-    customerId,
-    customerDomain,
-    stripeCustomerId,
-    domain,
-    properties
-  } = params;
+  const { url, referrer, timestamp, status, customerId, stripeCustomerId, properties } = params;
   return {
+    uuid: (0, import_uuid.v7)(),
     type: "billing",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -438,8 +432,6 @@ function buildBillingEvent(params) {
     utm: extractUtmParams(url),
     status,
     customerId,
-    customerDomain: customerDomain ?? domain,
-    domain: domain ?? customerDomain,
     stripeCustomerId,
     properties
   };
@@ -450,9 +442,8 @@ function buildIngestPayload(visitorId, source, events, userIdentity, sessionId,
     source,
     events
   };
-  const legacyCustomerIdentity = customerIdentity === void 0 && userIdentity && (userIdentity.customerId || userIdentity.customerDomain || userIdentity.customerTraits) ? {
+  const legacyCustomerIdentity = customerIdentity === void 0 && userIdentity && (userIdentity.customerId || userIdentity.customerTraits) ? {
     ...userIdentity.customerId && { customerId: userIdentity.customerId },
-    ...userIdentity.customerDomain && { customerDomain: userIdentity.customerDomain },
     ...userIdentity.customerTraits && { customerTraits: userIdentity.customerTraits }
   } : void 0;
   const resolvedCustomerIdentity = customerIdentity ?? legacyCustomerIdentity;
@@ -469,14 +460,11 @@ function buildIngestPayload(visitorId, source, events, userIdentity, sessionId,
       ...userIdentity.traits && { traits: userIdentity.traits }
     };
   }
-  if (resolvedCustomerIdentity && (resolvedCustomerIdentity.customerId || resolvedCustomerIdentity.customerDomain || resolvedCustomerIdentity.customerTraits)) {
+  if (resolvedCustomerIdentity && (resolvedCustomerIdentity.customerId || resolvedCustomerIdentity.customerTraits)) {
     payload.customerIdentity = {
       ...resolvedCustomerIdentity.customerId && {
         customerId: resolvedCustomerIdentity.customerId
       },
-      ...resolvedCustomerIdentity.customerDomain && {
-        customerDomain: resolvedCustomerIdentity.customerDomain
-      },
       ...resolvedCustomerIdentity.customerTraits && {
         customerTraits: resolvedCustomerIdentity.customerTraits
       }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/types.ts","../src/utils.ts","../src/payload.ts"],"sourcesContent":["// Types\n\n// Payload builders\nexport {\n  batchEvents,\n  buildBillingEvent,\n  buildCalendarEvent,\n  buildCustomEvent,\n  buildEngagementEvent,\n  buildFormEvent,\n  buildIdentifyEvent,\n  buildIngestPayload,\n  buildPageviewEvent,\n  buildStageEvent,\n  MAX_BATCH_SIZE,\n} from \"./payload\"\nexport type {\n  BillingEvent,\n  BillingStatus,\n  BrowserIdentifyOptions,\n  BrowserTrackOptions,\n  CalendarEvent,\n  CalendarProvider,\n  CustomEvent,\n  CustomerAttribution,\n  CustomerIdentifier,\n  CustomerTraits,\n  EngagementEvent,\n  EventType,\n  ExplicitJourneyStage,\n  FormEvent,\n  IdentifyEvent,\n  IdentifyTraits,\n  IngestPayload,\n  IngestResponse,\n  PageviewEvent,\n  PayloadCustomerIdentity,\n  PayloadUserIdentity,\n  ServerIdentifyOptions,\n  ServerIdentity,\n  ServerTrackOptions,\n  SourceType,\n  StageEvent,\n  TrackerConfig,\n  TrackerEvent,\n  UtmParams,\n} from \"./types\"\n// Constants\nexport { DEFAULT_API_HOST, DEFAULT_DENIED_FORM_FIELDS } from \"./types\"\n\n// Auto-identify types\nexport type { ExtractedIdentity } from \"./utils\"\n// Utilities\nexport {\n  extractIdentityFromForm,\n  extractPathFromUrl,\n  extractUtmParams,\n  findEmailField,\n  findNameFields,\n  isFieldDenied,\n  // Auto-identify utilities\n  isValidEmail,\n  sanitizeFormFields,\n  validateCustomerIdentity,\n  validateServerIdentity,\n} from \"./utils\"\n","// ============================================\n// EVENT TYPES\n// ============================================\n\nexport type EventType =\n  | \"pageview\"\n  | \"form\"\n  | \"identify\"\n  | \"custom\"\n  | \"calendar\"\n  | \"engagement\"\n  | \"stage\"\n  | \"billing\"\n\n// Only explicit stages - discovered/signed_up are inferred from identify calls\nexport type ExplicitJourneyStage = \"activated\" | \"engaged\" | \"inactive\"\n\nexport type BillingStatus = \"trialing\" | \"paid\" | \"churned\"\n\nexport type CalendarProvider = \"cal.com\" | \"calendly\" | \"unknown\"\n\nexport type SourceType = \"client\" | \"server\" | \"integration\"\n\n// ============================================\n// UTM PARAMETERS\n// ============================================\n\nexport interface UtmParams {\n  source?: string\n  medium?: string\n  campaign?: string\n  term?: string\n  content?: string\n}\n\n// ============================================\n// TRACKER CONFIGURATION\n// ============================================\n\nexport interface TrackerConfig {\n  publicKey: string\n  apiHost?: string // default: 'https://app.outlit.ai'\n}\n\n// ============================================\n// BROWSER-SPECIFIC TYPES (anonymous allowed)\n// visitorId is auto-managed by the browser SDK\n// ============================================\n\nexport interface BrowserTrackOptions {\n  eventName: string\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport interface BrowserIdentifyOptions extends CustomerAttribution {\n  email?: string\n  /** Your system-owned user/contact ID. */\n  userId?: string\n  /** User/contact traits. */\n  traits?: IdentifyTraits\n  /** Customer/account-level traits. */\n  customerTraits?: CustomerTraits\n}\n\n// ============================================\n// SERVER-SPECIFIC TYPES\n// Track calls can use user identity, customer attribution, or both.\n// Identify calls remain user-scoped and require email or userId.\n// ============================================\n\n/**\n * Base server-side user identity.\n * Track calls may use customerId/customerDomain without these fields.\n * Identify calls still require email or userId at runtime.\n *\n * - fingerprint: Device identifier for anonymous tracking (can be linked later)\n * - email: User's email address (definitive identity, resolves immediately)\n * - userId: Your system-owned user/contact ID\n */\nexport interface ServerIdentity {\n  fingerprint?: string\n  email?: string\n  /** Your system-owned user/contact ID. */\n  userId?: string\n}\n\nexport interface CustomerAttribution {\n  /** Your system-owned customer/account/workspace ID. */\n  customerId?: string\n  /** Public customer/account domain used for billing and attribution. */\n  customerDomain?: string\n}\n\n// ============================================\n// TRAITS\n// ============================================\n\nexport interface CustomerTraits {\n  /** Customer's billing plan */\n  plan?: string\n  /** Allow additional custom properties */\n  [key: string]: string | number | boolean | null | undefined\n}\n\n/**\n * Traits for identify calls.\n * These are user/contact traits, not customer/account traits.\n */\nexport interface IdentifyTraits {\n  /** User-level traits */\n  [key: string]: string | number | boolean | null | undefined\n}\n\nexport interface ServerTrackOptions extends ServerIdentity, CustomerAttribution {\n  eventName: string\n  properties?: Record<string, string | number | boolean | null>\n  timestamp?: number\n}\n\nexport interface ServerIdentifyOptions extends ServerIdentity, CustomerAttribution {\n  traits?: IdentifyTraits\n  customerTraits?: CustomerTraits\n}\n\n/**\n * Customer identity for SDK billing methods.\n * Public billing calls should use `customerId` and/or `customerDomain`.\n */\nexport interface CustomerIdentifier extends CustomerAttribution {\n  /**\n   * @deprecated Use `customerDomain` instead.\n   * Legacy alias kept for backward compatibility.\n   */\n  domain?: string\n  /**\n   * @deprecated Stripe customer identifier.\n   * Billing attribution should use `customerId` and/or `customerDomain` publicly.\n   */\n  stripeCustomerId?: string\n}\n\n// ============================================\n// INTERNAL EVENT TYPES\n// These are the full event objects sent to the API\n// ============================================\n\ninterface BaseEvent {\n  type: EventType\n  timestamp: number // Unix timestamp in milliseconds\n  url: string\n  path: string\n  referrer?: string\n  utm?: UtmParams\n}\n\nexport interface PageviewEvent extends BaseEvent {\n  type: \"pageview\"\n  title?: string\n}\n\nexport interface FormEvent extends BaseEvent {\n  type: \"form\"\n  formId?: string\n  formFields?: Record<string, string>\n}\n\nexport interface IdentifyEvent extends BaseEvent {\n  type: \"identify\"\n  email?: string\n  userId?: string\n  fingerprint?: string\n  customerId?: string\n  customerDomain?: string\n  customerTraits?: CustomerTraits\n  traits?: IdentifyTraits\n}\n\nexport interface CustomEvent extends BaseEvent {\n  type: \"custom\"\n  eventName: string\n  email?: string\n  userId?: string\n  fingerprint?: string\n  customerId?: string\n  customerDomain?: string\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport interface CalendarEvent extends BaseEvent {\n  type: \"calendar\"\n  provider: CalendarProvider\n  eventType?: string // e.g., \"30 Minute Meeting\"\n  startTime?: string // ISO timestamp\n  endTime?: string // ISO timestamp\n  duration?: number // Duration in minutes\n  isRecurring?: boolean\n  /** Available when identity is passed via webhooks or manual integration */\n  inviteeEmail?: string\n  inviteeName?: string\n}\n\nexport interface EngagementEvent extends BaseEvent {\n  type: \"engagement\"\n  /** Time in milliseconds the user was actively engaged (visible tab + user interactions) */\n  activeTimeMs: number\n  /** Total wall-clock time in milliseconds on the page */\n  totalTimeMs: number\n  /** Session ID for grouping engagement events. Resets after 30 min of inactivity or tab close. */\n  sessionId: string\n}\n\nexport interface StageEvent extends BaseEvent {\n  type: \"stage\"\n  /** The journey stage to set (only explicit stages, discovered/signed_up are inferred) */\n  stage: ExplicitJourneyStage\n  /** Optional properties for context */\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport interface BillingEvent extends BaseEvent {\n  type: \"billing\"\n  /** The billing status to set for a customer */\n  status: BillingStatus\n  /** Optional customer identifiers */\n  customerId?: string\n  customerDomain?: string\n  /** @deprecated Legacy alias for `customerDomain`. */\n  domain?: string\n  stripeCustomerId?: string\n  /** Optional properties for context */\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport type TrackerEvent =\n  | PageviewEvent\n  | FormEvent\n  | IdentifyEvent\n  | CustomEvent\n  | CalendarEvent\n  | EngagementEvent\n  | StageEvent\n  | BillingEvent\n\n// ============================================\n// INGEST PAYLOAD\n// This is what gets sent to the API\n// ============================================\n\n/**\n * User identity for payload-level resolution.\n * Used by browser SDK when user is logged in (via setUser).\n * Customer attribution is carried separately in `customerIdentity`.\n */\nexport interface PayloadUserIdentity {\n  email?: string\n  /** Your system-owned user/contact ID. */\n  userId?: string\n  /** User/contact traits. */\n  traits?: IdentifyTraits\n  /**\n   * @deprecated Use payload-level `customerIdentity.customerId` instead.\n   * Kept for one compatibility window while callers migrate.\n   */\n  customerId?: string\n  /**\n   * @deprecated Use payload-level `customerIdentity.customerDomain` instead.\n   * Kept for one compatibility window while callers migrate.\n   */\n  customerDomain?: string\n  /**\n   * @deprecated Use payload-level `customerIdentity.customerTraits` instead.\n   * Kept for one compatibility window while callers migrate.\n   */\n  customerTraits?: CustomerTraits\n}\n\n/**\n * Customer identity for payload-level attribution.\n * Used by browser SDK to attach account/workspace context to a batch.\n */\nexport interface PayloadCustomerIdentity extends CustomerAttribution {\n  /** Customer/account traits. */\n  customerTraits?: CustomerTraits\n}\n\nexport interface IngestPayload {\n  visitorId?: string // Required for pixel, optional for server\n  source: SourceType\n  events: TrackerEvent[]\n  /**\n   * Device identifier for anonymous tracking.\n   * Events with fingerprint can be linked to users later via identify.\n   * Only present for server-side events.\n   */\n  fingerprint?: string\n  /**\n   * Session ID for grouping all events in this batch.\n   * Only present for browser (client) source events.\n   * Used to correlate pageviews, forms, custom events, and engagement\n   * within the same browsing session.\n   */\n  sessionId?: string\n  /**\n   * User identity for this batch of events.\n   * When present, the server can resolve directly to CustomerContact\n   * instead of relying on anonymous visitor flow.\n   *\n   * This is set by the browser SDK when setUser() has been called,\n   * allowing immediate identity resolution for SPA/React apps.\n   */\n  userIdentity?: PayloadUserIdentity\n  /**\n   * Customer/account identity for this batch of events.\n   * Used to attribute browser batches to a customer/workspace even when\n   * the customer fields are not present on every event.\n   */\n  customerIdentity?: PayloadCustomerIdentity\n}\n\n// ============================================\n// API RESPONSE\n// ============================================\n\nexport interface IngestResponse {\n  success: boolean\n  processed: number\n  errors?: Array<{\n    index: number\n    message: string\n  }>\n}\n\n// ============================================\n// CONSTANTS\n// ============================================\n\nexport const DEFAULT_API_HOST = \"https://app.outlit.ai\"\n\n// Re-export for convenience\nexport type { PayloadUserIdentity as UserIdentity }\n\nexport const DEFAULT_DENIED_FORM_FIELDS = [\n  \"password\",\n  \"passwd\",\n  \"pass\",\n  \"pwd\",\n  \"token\",\n  \"secret\",\n  \"api_key\",\n  \"apikey\",\n  \"api-key\",\n  \"credit_card\",\n  \"creditcard\",\n  \"credit-card\",\n  \"cc_number\",\n  \"ccnumber\",\n  \"card_number\",\n  \"cardnumber\",\n  \"cvv\",\n  \"cvc\",\n  \"ssn\",\n  \"social_security\",\n  \"socialsecurity\",\n  \"bank_account\",\n  \"bankaccount\",\n  \"routing_number\",\n  \"routingnumber\",\n]\n","import { DEFAULT_DENIED_FORM_FIELDS, type UtmParams } from \"./types\"\n\n// ============================================\n// UTM EXTRACTION\n// ============================================\n\n/**\n * Extract UTM parameters from a URL.\n */\nexport function extractUtmParams(url: string): UtmParams | undefined {\n  try {\n    const urlObj = new URL(url)\n    const params = urlObj.searchParams\n\n    const utm: UtmParams = {}\n\n    if (params.has(\"utm_source\")) utm.source = params.get(\"utm_source\") ?? undefined\n    if (params.has(\"utm_medium\")) utm.medium = params.get(\"utm_medium\") ?? undefined\n    if (params.has(\"utm_campaign\")) utm.campaign = params.get(\"utm_campaign\") ?? undefined\n    if (params.has(\"utm_term\")) utm.term = params.get(\"utm_term\") ?? undefined\n    if (params.has(\"utm_content\")) utm.content = params.get(\"utm_content\") ?? undefined\n\n    return Object.keys(utm).length > 0 ? utm : undefined\n  } catch (error) {\n    console.warn(`[Outlit] Failed to parse URL for UTM extraction: \"${url}\"`, error)\n    return undefined\n  }\n}\n\n/**\n * Extract path from a URL.\n */\nexport function extractPathFromUrl(url: string): string {\n  try {\n    const urlObj = new URL(url)\n    let path = urlObj.pathname\n    const hash = urlObj.hash\n\n    // For file:// or custom protocol URLs with no real hostname (common in Electron),\n    // the meaningful route is typically stored in the hash fragment.\n    if (hash && hash.length > 1 && (!urlObj.hostname || urlObj.protocol === \"file:\")) {\n      path = hash.replace(/^#/, \"\")\n    }\n    // For web hash-routing SPAs (e.g. \"/#/settings\"), prefer hash when the\n    // pathname is an SPA entry point.\n    else if (\n      hash.startsWith(\"#/\") &&\n      (urlObj.pathname === \"/\" || urlObj.pathname.endsWith(\"/index.html\"))\n    ) {\n      path = hash.slice(1)\n    }\n\n    if (!path) return \"/\"\n    if (!path.startsWith(\"/\")) return `/${path}`\n\n    return path\n  } catch (error) {\n    console.warn(\n      `[Outlit] Failed to parse URL for path extraction: \"${url}\", defaulting to \"/\"`,\n      error,\n    )\n    return \"/\"\n  }\n}\n\n// ============================================\n// FORM FIELD SANITIZATION\n// ============================================\n\n/**\n * Check if a field name should be denied (case-insensitive).\n */\nexport function isFieldDenied(fieldName: string, denylist: string[]): boolean {\n  const normalizedName = fieldName.toLowerCase().replace(/[-_\\s]/g, \"\")\n  return denylist.some((denied) => {\n    const normalizedDenied = denied.toLowerCase().replace(/[-_\\s]/g, \"\")\n    return normalizedName.includes(normalizedDenied)\n  })\n}\n\n/**\n * Check if a value looks like sensitive data (e.g., credit card number).\n */\nfunction looksLikeSensitiveValue(value: string): boolean {\n  // Remove spaces and dashes\n  const cleaned = value.replace(/[\\s-]/g, \"\")\n\n  // Check for credit card patterns (13-19 digits)\n  if (/^\\d{13,19}$/.test(cleaned)) {\n    return true\n  }\n\n  // Check for SSN pattern (9 digits)\n  if (/^\\d{9}$/.test(cleaned) || /^\\d{3}-\\d{2}-\\d{4}$/.test(value)) {\n    return true\n  }\n\n  return false\n}\n\n/**\n * Sanitize form fields by removing sensitive data.\n * Returns a new object with denied fields removed.\n */\nexport function sanitizeFormFields(\n  fields: Record<string, string> | undefined,\n  customDenylist?: string[],\n): Record<string, string> | undefined {\n  if (!fields) return undefined\n\n  const denylist = customDenylist ?? DEFAULT_DENIED_FORM_FIELDS\n  const sanitized: Record<string, string> = {}\n\n  for (const [key, value] of Object.entries(fields)) {\n    if (!isFieldDenied(key, denylist)) {\n      // Also check for credit card patterns in values\n      if (!looksLikeSensitiveValue(value)) {\n        sanitized[key] = value\n      }\n    }\n  }\n\n  return Object.keys(sanitized).length > 0 ? sanitized : undefined\n}\n\n// ============================================\n// VISITOR ID DERIVATION (for server SDK)\n// ============================================\n\n/**\n * Derive a deterministic visitor ID from email and/or userId.\n * This is used by the server SDK to create consistent IDs for API compatibility.\n *\n * Uses a simple hash to create a UUID-like string that will be consistent\n * for the same email/userId combination.\n */\nexport function deriveVisitorIdFromIdentity(email?: string, userId?: string): string {\n  const identity = [email?.toLowerCase(), userId].filter(Boolean).join(\"|\")\n  if (!identity) {\n    throw new Error(\"Either email or userId must be provided\")\n  }\n\n  // Simple hash function to create a deterministic UUID-like string\n  let hash = 0\n  for (let i = 0; i < identity.length; i++) {\n    const char = identity.charCodeAt(i)\n    hash = (hash << 5) - hash + char\n    hash = hash & hash // Convert to 32-bit integer\n  }\n\n  // Convert to hex and format as UUID-like string\n  const hex = Math.abs(hash).toString(16).padStart(8, \"0\")\n  const part1 = hex.slice(0, 8)\n  const part2 = identity.length.toString(16).padStart(4, \"0\")\n  const part3 = \"4000\" // Version 4 UUID marker\n  const part4 = (((hash >>> 16) & 0x0fff) | 0x8000).toString(16)\n  const part5 = Math.abs(hash * 31)\n    .toString(16)\n    .padStart(12, \"0\")\n    .slice(0, 12)\n\n  return `${part1}-${part2}-${part3}-${part4}-${part5}`\n}\n\n// ============================================\n// VALIDATION\n// ============================================\n\n/**\n * Validate that at least one identity field is provided.\n * Used by the server SDK to enforce identity requirements.\n *\n * Valid identities:\n * - fingerprint: Device identifier (for anonymous tracking, can be linked later)\n * - email: User's email (definitive identity)\n * - userId: Your system-owned user/contact ID\n * - customerId: Your system-owned customer/account/workspace ID\n * - customerDomain: Public customer/account domain used for billing and attribution\n */\nexport function validateServerIdentity(\n  fingerprint?: string,\n  email?: string,\n  userId?: string,\n  customerId?: string,\n  customerDomain?: string,\n): void {\n  const hasFingerprint = fingerprint && fingerprint.trim().length > 0\n  const hasEmail = email && email.trim().length > 0\n  const hasUserId = userId && userId.trim().length > 0\n  const hasCustomerId = customerId && customerId.trim().length > 0\n  const hasCustomerDomain = customerDomain && customerDomain.trim().length > 0\n\n  if (!hasFingerprint && !hasEmail && !hasUserId && !hasCustomerId && !hasCustomerDomain) {\n    throw new Error(\n      \"Server SDK requires at least one of: fingerprint, email, userId, customerId, or customerDomain for track calls. \" +\n        \"Use fingerprint/email/userId for user-scoped tracking or customerId/customerDomain for customer-only tracking.\",\n    )\n  }\n}\n\n/**\n * Validate that at least one customer identifier is provided for billing calls.\n */\nexport function validateCustomerIdentity(\n  customerId?: string,\n  customerDomain?: string,\n  domain?: string,\n  stripeCustomerId?: string,\n): void {\n  const hasCustomerId = customerId && customerId.trim().length > 0\n  const hasCustomerDomain = customerDomain && customerDomain.trim().length > 0\n  const hasDomain = domain && domain.trim().length > 0\n  const hasStripeCustomerId = stripeCustomerId && stripeCustomerId.trim().length > 0\n\n  if (!hasCustomerId && !hasCustomerDomain && !hasDomain && !hasStripeCustomerId) {\n    throw new Error(\n      \"Billing methods require customerId or customerDomain. \" +\n        \"Use customerId for your system-owned account ID and customerDomain for the public account domain.\",\n    )\n  }\n}\n\n// ============================================\n// AUTO-IDENTIFY: EMAIL & NAME EXTRACTION\n// ============================================\n\n/**\n * Validate that a string looks like a valid email address.\n */\nexport function isValidEmail(value: string): boolean {\n  if (!value || typeof value !== \"string\") return false\n  // Basic email regex - intentionally permissive to avoid false negatives\n  const emailRegex = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/\n  return emailRegex.test(value.trim())\n}\n\n/**\n * Email field name patterns (case-insensitive, normalized).\n * Order matters - more specific patterns first.\n */\nconst EMAIL_FIELD_PATTERNS = [\n  /^e?-?mail$/i,\n  /^email[_-]?address$/i,\n  /^user[_-]?email$/i,\n  /^work[_-]?email$/i,\n  /^contact[_-]?email$/i,\n  /^primary[_-]?email$/i,\n  /^business[_-]?email$/i,\n]\n\n/**\n * Full name field patterns.\n */\nconst FULL_NAME_PATTERNS = [\n  /^name$/i,\n  /^full[_-]?name$/i,\n  /^your[_-]?name$/i,\n  /^customer[_-]?name$/i,\n  /^contact[_-]?name$/i,\n  /^display[_-]?name$/i,\n]\n\n/**\n * First name field patterns.\n */\nconst FIRST_NAME_PATTERNS = [\n  /^first[_-]?name$/i,\n  /^firstname$/i,\n  /^first$/i,\n  /^fname$/i,\n  /^given[_-]?name$/i,\n  /^forename$/i,\n]\n\n/**\n * Last name field patterns.\n */\nconst LAST_NAME_PATTERNS = [\n  /^last[_-]?name$/i,\n  /^lastname$/i,\n  /^last$/i,\n  /^lname$/i,\n  /^surname$/i,\n  /^family[_-]?name$/i,\n]\n\n/**\n * Check if a field name matches any of the given patterns.\n */\nfunction matchesPatterns(fieldName: string, patterns: RegExp[]): boolean {\n  const normalized = fieldName.trim()\n  return patterns.some((pattern) => pattern.test(normalized))\n}\n\n/**\n * Find an email value from form fields.\n *\n * Priority:\n * 1. Fields with input type=\"email\" (if inputTypes map provided)\n * 2. Field names matching email patterns\n * 3. Any field with a value that looks like an email\n *\n * @param fields - Form field key-value pairs\n * @param inputTypes - Optional map of field names to input types\n * @returns The email value if found, undefined otherwise\n */\nexport function findEmailField(\n  fields: Record<string, string>,\n  inputTypes?: Map<string, string>,\n): string | undefined {\n  // Priority 1: Check fields with type=\"email\"\n  if (inputTypes) {\n    for (const [fieldName, inputType] of inputTypes.entries()) {\n      if (inputType === \"email\") {\n        const value = fields[fieldName]\n        if (value && isValidEmail(value)) {\n          return value.trim()\n        }\n      }\n    }\n  }\n\n  // Priority 2: Check field names matching email patterns\n  for (const [fieldName, value] of Object.entries(fields)) {\n    if (matchesPatterns(fieldName, EMAIL_FIELD_PATTERNS) && isValidEmail(value)) {\n      return value.trim()\n    }\n  }\n\n  // Priority 3: Any field with email-like value (fallback)\n  for (const value of Object.values(fields)) {\n    if (isValidEmail(value)) {\n      return value.trim()\n    }\n  }\n\n  return undefined\n}\n\n/**\n * Extract name fields from form data.\n *\n * Looks for:\n * - Full name fields (name, full_name, etc.)\n * - First name fields (first_name, fname, etc.)\n * - Last name fields (last_name, lname, etc.)\n *\n * If only first/last names are found, combines them into a full name.\n *\n * @param fields - Form field key-value pairs\n * @returns Object with name, firstName, and/or lastName if found\n */\nexport function findNameFields(fields: Record<string, string>): {\n  name?: string\n  firstName?: string\n  lastName?: string\n} {\n  let fullName: string | undefined\n  let firstName: string | undefined\n  let lastName: string | undefined\n\n  for (const [fieldName, value] of Object.entries(fields)) {\n    const trimmedValue = value?.trim()\n    if (!trimmedValue) continue\n\n    // Check for full name\n    if (!fullName && matchesPatterns(fieldName, FULL_NAME_PATTERNS)) {\n      fullName = trimmedValue\n    }\n\n    // Check for first name\n    if (!firstName && matchesPatterns(fieldName, FIRST_NAME_PATTERNS)) {\n      firstName = trimmedValue\n    }\n\n    // Check for last name\n    if (!lastName && matchesPatterns(fieldName, LAST_NAME_PATTERNS)) {\n      lastName = trimmedValue\n    }\n  }\n\n  const result: { name?: string; firstName?: string; lastName?: string } = {}\n\n  // If we have a full name, use it\n  if (fullName) {\n    result.name = fullName\n  }\n  // If we have first and last, combine them\n  else if (firstName && lastName) {\n    result.name = `${firstName} ${lastName}`\n    result.firstName = firstName\n    result.lastName = lastName\n  }\n  // If we only have first name\n  else if (firstName) {\n    result.firstName = firstName\n  }\n  // If we only have last name\n  else if (lastName) {\n    result.lastName = lastName\n  }\n\n  return result\n}\n\n/**\n * Identity extracted from a form submission.\n */\nexport interface ExtractedIdentity {\n  email: string\n  name?: string\n  firstName?: string\n  lastName?: string\n}\n\n/**\n * Extract identity information (email + name) from form fields.\n *\n * Returns undefined if no valid email is found (email is required for identification).\n *\n * @param fields - Form field key-value pairs\n * @param inputTypes - Optional map of field names to input types\n * @returns Extracted identity with email and optional name fields, or undefined\n */\nexport function extractIdentityFromForm(\n  fields: Record<string, string>,\n  inputTypes?: Map<string, string>,\n): ExtractedIdentity | undefined {\n  const email = findEmailField(fields, inputTypes)\n\n  // Email is required for identification\n  if (!email) {\n    return undefined\n  }\n\n  const nameFields = findNameFields(fields)\n\n  return {\n    email,\n    ...nameFields,\n  }\n}\n","import type {\n  BillingEvent,\n  BillingStatus,\n  CalendarEvent,\n  CalendarProvider,\n  CustomEvent,\n  CustomerTraits,\n  EngagementEvent,\n  ExplicitJourneyStage,\n  FormEvent,\n  IdentifyEvent,\n  IdentifyTraits,\n  IngestPayload,\n  PageviewEvent,\n  PayloadCustomerIdentity,\n  PayloadUserIdentity,\n  SourceType,\n  StageEvent,\n  TrackerEvent,\n} from \"./types\"\nimport { extractPathFromUrl, extractUtmParams } from \"./utils\"\n\n// ============================================\n// EVENT BUILDERS\n// ============================================\n\ninterface BaseEventParams {\n  url: string\n  referrer?: string\n  timestamp?: number\n}\n\n/**\n * Build a pageview event.\n */\nexport function buildPageviewEvent(params: BaseEventParams & { title?: string }): PageviewEvent {\n  const { url, referrer, timestamp, title } = params\n  return {\n    type: \"pageview\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    title,\n  }\n}\n\n/**\n * Build a form event.\n */\nexport function buildFormEvent(\n  params: BaseEventParams & {\n    formId?: string\n    formFields?: Record<string, string>\n  },\n): FormEvent {\n  const { url, referrer, timestamp, formId, formFields } = params\n  return {\n    type: \"form\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    formId,\n    formFields,\n  }\n}\n\n/**\n * Build an identify event.\n */\nexport function buildIdentifyEvent(\n  params: BaseEventParams & {\n    email?: string\n    userId?: string\n    fingerprint?: string\n    traits?: IdentifyTraits\n    customerId?: string\n    customerDomain?: string\n    customerTraits?: CustomerTraits\n  },\n): IdentifyEvent {\n  const {\n    url,\n    referrer,\n    timestamp,\n    email,\n    userId,\n    fingerprint,\n    traits,\n    customerId,\n    customerDomain,\n    customerTraits,\n  } = params\n  return {\n    type: \"identify\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    email,\n    userId,\n    fingerprint,\n    customerId,\n    customerDomain,\n    customerTraits,\n    traits,\n  }\n}\n\n/**\n * Build a custom event.\n */\nexport function buildCustomEvent(\n  params: BaseEventParams & {\n    eventName: string\n    properties?: Record<string, string | number | boolean | null>\n    email?: string\n    userId?: string\n    fingerprint?: string\n    customerId?: string\n    customerDomain?: string\n  },\n): CustomEvent {\n  const {\n    url,\n    referrer,\n    timestamp,\n    eventName,\n    properties,\n    email,\n    userId,\n    fingerprint,\n    customerId,\n    customerDomain,\n  } = params\n  return {\n    type: \"custom\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    eventName,\n    email,\n    userId,\n    fingerprint,\n    customerId,\n    customerDomain,\n    properties,\n  }\n}\n\n/**\n * Build a calendar booking event.\n */\nexport function buildCalendarEvent(\n  params: BaseEventParams & {\n    provider: CalendarProvider\n    eventType?: string\n    startTime?: string\n    endTime?: string\n    duration?: number\n    isRecurring?: boolean\n    inviteeEmail?: string\n    inviteeName?: string\n  },\n): CalendarEvent {\n  const {\n    url,\n    referrer,\n    timestamp,\n    provider,\n    eventType,\n    startTime,\n    endTime,\n    duration,\n    isRecurring,\n    inviteeEmail,\n    inviteeName,\n  } = params\n  return {\n    type: \"calendar\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    provider,\n    eventType,\n    startTime,\n    endTime,\n    duration,\n    isRecurring,\n    inviteeEmail,\n    inviteeName,\n  }\n}\n\n/**\n * Build an engagement event.\n * Captures active time on page for session analytics.\n */\nexport function buildEngagementEvent(\n  params: BaseEventParams & {\n    activeTimeMs: number\n    totalTimeMs: number\n    sessionId: string\n  },\n): EngagementEvent {\n  const { url, referrer, timestamp, activeTimeMs, totalTimeMs, sessionId } = params\n  return {\n    type: \"engagement\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    activeTimeMs,\n    totalTimeMs,\n    sessionId,\n  }\n}\n\n/**\n * Build a stage event.\n * Used to explicitly set customer journey stage (activated, engaged, inactive).\n * discovered/signed_up stages are inferred from identify calls.\n */\nexport function buildStageEvent(\n  params: BaseEventParams & {\n    stage: ExplicitJourneyStage\n    properties?: Record<string, string | number | boolean | null>\n  },\n): StageEvent {\n  const { url, referrer, timestamp, stage, properties } = params\n  return {\n    type: \"stage\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    stage,\n    properties,\n  }\n}\n\n/**\n * Build a billing event.\n * Used to set customer billing status (trialing, paid, churned).\n */\nexport function buildBillingEvent(\n  params: BaseEventParams & {\n    status: BillingStatus\n    customerId?: string\n    customerDomain?: string\n    stripeCustomerId?: string\n    domain?: string\n    properties?: Record<string, string | number | boolean | null>\n  },\n): BillingEvent {\n  const {\n    url,\n    referrer,\n    timestamp,\n    status,\n    customerId,\n    customerDomain,\n    stripeCustomerId,\n    domain,\n    properties,\n  } = params\n  return {\n    type: \"billing\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    status,\n    customerId,\n    customerDomain: customerDomain ?? domain,\n    domain: domain ?? customerDomain,\n    stripeCustomerId,\n    properties,\n  }\n}\n\n// ============================================\n// PAYLOAD BUILDER\n// ============================================\n\n/**\n * Build an ingest payload from events.\n *\n * @param visitorId - The anonymous visitor ID from browser cookie/storage\n * @param source - The event source (client, server, integration)\n * @param events - Array of events to send\n * @param userIdentity - Optional user identity for immediate resolution (from setUser in SPA)\n * @param sessionId - Optional session ID for grouping events (browser SDK only)\n * @param fingerprint - Optional device identifier for server-side anonymous tracking\n * @param customerIdentity - Optional customer identity for batch attribution\n */\nexport function buildIngestPayload(\n  visitorId: string,\n  source: SourceType,\n  events: TrackerEvent[],\n  userIdentity?: PayloadUserIdentity,\n  sessionId?: string,\n  fingerprint?: string,\n  customerIdentity?: PayloadCustomerIdentity,\n): IngestPayload {\n  const payload: IngestPayload = {\n    visitorId,\n    source,\n    events,\n  }\n  const legacyCustomerIdentity =\n    customerIdentity === undefined &&\n    userIdentity &&\n    (userIdentity.customerId || userIdentity.customerDomain || userIdentity.customerTraits)\n      ? {\n          ...(userIdentity.customerId && { customerId: userIdentity.customerId }),\n          ...(userIdentity.customerDomain && { customerDomain: userIdentity.customerDomain }),\n          ...(userIdentity.customerTraits && { customerTraits: userIdentity.customerTraits }),\n        }\n      : undefined\n  const resolvedCustomerIdentity = customerIdentity ?? legacyCustomerIdentity\n\n  // Only include fingerprint if provided (server SDK only)\n  if (fingerprint) {\n    payload.fingerprint = fingerprint\n  }\n\n  // Only include sessionId if provided (browser SDK only)\n  if (sessionId) {\n    payload.sessionId = sessionId\n  }\n\n  // Only include userIdentity if it has actual values\n  if (userIdentity && (userIdentity.email || userIdentity.userId || userIdentity.traits)) {\n    payload.userIdentity = {\n      ...(userIdentity.email && { email: userIdentity.email }),\n      ...(userIdentity.userId && { userId: userIdentity.userId }),\n      ...(userIdentity.traits && { traits: userIdentity.traits }),\n    }\n  }\n\n  if (\n    resolvedCustomerIdentity &&\n    (resolvedCustomerIdentity.customerId ||\n      resolvedCustomerIdentity.customerDomain ||\n      resolvedCustomerIdentity.customerTraits)\n  ) {\n    payload.customerIdentity = {\n      ...(resolvedCustomerIdentity.customerId && {\n        customerId: resolvedCustomerIdentity.customerId,\n      }),\n      ...(resolvedCustomerIdentity.customerDomain && {\n        customerDomain: resolvedCustomerIdentity.customerDomain,\n      }),\n      ...(resolvedCustomerIdentity.customerTraits && {\n        customerTraits: resolvedCustomerIdentity.customerTraits,\n      }),\n    }\n  }\n\n  return payload\n}\n\n// ============================================\n// BATCH HELPERS\n// ============================================\n\n/**\n * Maximum number of events in a single batch.\n */\nexport const MAX_BATCH_SIZE = 100\n\n/**\n * Split events into batches of MAX_BATCH_SIZE.\n */\nexport function batchEvents(events: TrackerEvent[]): TrackerEvent[][] {\n  const batches: TrackerEvent[][] = []\n  for (let i = 0; i < events.length; i += MAX_BATCH_SIZE) {\n    batches.push(events.slice(i, i + MAX_BATCH_SIZE))\n  }\n  return batches\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACgVO,IAAM,mBAAmB;AAKzB,IAAM,6BAA6B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;;;ACtWO,SAAS,iBAAiB,KAAoC;AACnE,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,UAAM,SAAS,OAAO;AAEtB,UAAM,MAAiB,CAAC;AAExB,QAAI,OAAO,IAAI,YAAY,EAAG,KAAI,SAAS,OAAO,IAAI,YAAY,KAAK;AACvE,QAAI,OAAO,IAAI,YAAY,EAAG,KAAI,SAAS,OAAO,IAAI,YAAY,KAAK;AACvE,QAAI,OAAO,IAAI,cAAc,EAAG,KAAI,WAAW,OAAO,IAAI,cAAc,KAAK;AAC7E,QAAI,OAAO,IAAI,UAAU,EAAG,KAAI,OAAO,OAAO,IAAI,UAAU,KAAK;AACjE,QAAI,OAAO,IAAI,aAAa,EAAG,KAAI,UAAU,OAAO,IAAI,aAAa,KAAK;AAE1E,WAAO,OAAO,KAAK,GAAG,EAAE,SAAS,IAAI,MAAM;AAAA,EAC7C,SAAS,OAAO;AACd,YAAQ,KAAK,qDAAqD,GAAG,KAAK,KAAK;AAC/E,WAAO;AAAA,EACT;AACF;AAKO,SAAS,mBAAmB,KAAqB;AACtD,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,QAAI,OAAO,OAAO;AAClB,UAAM,OAAO,OAAO;AAIpB,QAAI,QAAQ,KAAK,SAAS,MAAM,CAAC,OAAO,YAAY,OAAO,aAAa,UAAU;AAChF,aAAO,KAAK,QAAQ,MAAM,EAAE;AAAA,IAC9B,WAIE,KAAK,WAAW,IAAI,MACnB,OAAO,aAAa,OAAO,OAAO,SAAS,SAAS,aAAa,IAClE;AACA,aAAO,KAAK,MAAM,CAAC;AAAA,IACrB;AAEA,QAAI,CAAC,KAAM,QAAO;AAClB,QAAI,CAAC,KAAK,WAAW,GAAG,EAAG,QAAO,IAAI,IAAI;AAE1C,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ;AAAA,MACN,sDAAsD,GAAG;AAAA,MACzD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AASO,SAAS,cAAc,WAAmB,UAA6B;AAC5E,QAAM,iBAAiB,UAAU,YAAY,EAAE,QAAQ,WAAW,EAAE;AACpE,SAAO,SAAS,KAAK,CAAC,WAAW;AAC/B,UAAM,mBAAmB,OAAO,YAAY,EAAE,QAAQ,WAAW,EAAE;AACnE,WAAO,eAAe,SAAS,gBAAgB;AAAA,EACjD,CAAC;AACH;AAKA,SAAS,wBAAwB,OAAwB;AAEvD,QAAM,UAAU,MAAM,QAAQ,UAAU,EAAE;AAG1C,MAAI,cAAc,KAAK,OAAO,GAAG;AAC/B,WAAO;AAAA,EACT;AAGA,MAAI,UAAU,KAAK,OAAO,KAAK,sBAAsB,KAAK,KAAK,GAAG;AAChE,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAMO,SAAS,mBACd,QACA,gBACoC;AACpC,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,WAAW,kBAAkB;AACnC,QAAM,YAAoC,CAAC;AAE3C,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,QAAI,CAAC,cAAc,KAAK,QAAQ,GAAG;AAEjC,UAAI,CAAC,wBAAwB,KAAK,GAAG;AACnC,kBAAU,GAAG,IAAI;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAEA,SAAO,OAAO,KAAK,SAAS,EAAE,SAAS,IAAI,YAAY;AACzD;AAwDO,SAAS,uBACd,aACA,OACA,QACA,YACA,gBACM;AACN,QAAM,iBAAiB,eAAe,YAAY,KAAK,EAAE,SAAS;AAClE,QAAM,WAAW,SAAS,MAAM,KAAK,EAAE,SAAS;AAChD,QAAM,YAAY,UAAU,OAAO,KAAK,EAAE,SAAS;AACnD,QAAM,gBAAgB,cAAc,WAAW,KAAK,EAAE,SAAS;AAC/D,QAAM,oBAAoB,kBAAkB,eAAe,KAAK,EAAE,SAAS;AAE3E,MAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,aAAa,CAAC,iBAAiB,CAAC,mBAAmB;AACtF,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACF;AAKO,SAAS,yBACd,YACA,gBACA,QACA,kBACM;AACN,QAAM,gBAAgB,cAAc,WAAW,KAAK,EAAE,SAAS;AAC/D,QAAM,oBAAoB,kBAAkB,eAAe,KAAK,EAAE,SAAS;AAC3E,QAAM,YAAY,UAAU,OAAO,KAAK,EAAE,SAAS;AACnD,QAAM,sBAAsB,oBAAoB,iBAAiB,KAAK,EAAE,SAAS;AAEjF,MAAI,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,aAAa,CAAC,qBAAqB;AAC9E,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACF;AASO,SAAS,aAAa,OAAwB;AACnD,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAEhD,QAAM,aAAa;AACnB,SAAO,WAAW,KAAK,MAAM,KAAK,CAAC;AACrC;AAMA,IAAM,uBAAuB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,qBAAqB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,sBAAsB;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,qBAAqB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,SAAS,gBAAgB,WAAmB,UAA6B;AACvE,QAAM,aAAa,UAAU,KAAK;AAClC,SAAO,SAAS,KAAK,CAAC,YAAY,QAAQ,KAAK,UAAU,CAAC;AAC5D;AAcO,SAAS,eACd,QACA,YACoB;AAEpB,MAAI,YAAY;AACd,eAAW,CAAC,WAAW,SAAS,KAAK,WAAW,QAAQ,GAAG;AACzD,UAAI,cAAc,SAAS;AACzB,cAAM,QAAQ,OAAO,SAAS;AAC9B,YAAI,SAAS,aAAa,KAAK,GAAG;AAChC,iBAAO,MAAM,KAAK;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,aAAW,CAAC,WAAW,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,QAAI,gBAAgB,WAAW,oBAAoB,KAAK,aAAa,KAAK,GAAG;AAC3E,aAAO,MAAM,KAAK;AAAA,IACpB;AAAA,EACF;AAGA,aAAW,SAAS,OAAO,OAAO,MAAM,GAAG;AACzC,QAAI,aAAa,KAAK,GAAG;AACvB,aAAO,MAAM,KAAK;AAAA,IACpB;AAAA,EACF;AAEA,SAAO;AACT;AAeO,SAAS,eAAe,QAI7B;AACA,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,aAAW,CAAC,WAAW,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,UAAM,eAAe,OAAO,KAAK;AACjC,QAAI,CAAC,aAAc;AAGnB,QAAI,CAAC,YAAY,gBAAgB,WAAW,kBAAkB,GAAG;AAC/D,iBAAW;AAAA,IACb;AAGA,QAAI,CAAC,aAAa,gBAAgB,WAAW,mBAAmB,GAAG;AACjE,kBAAY;AAAA,IACd;AAGA,QAAI,CAAC,YAAY,gBAAgB,WAAW,kBAAkB,GAAG;AAC/D,iBAAW;AAAA,IACb;AAAA,EACF;AAEA,QAAM,SAAmE,CAAC;AAG1E,MAAI,UAAU;AACZ,WAAO,OAAO;AAAA,EAChB,WAES,aAAa,UAAU;AAC9B,WAAO,OAAO,GAAG,SAAS,IAAI,QAAQ;AACtC,WAAO,YAAY;AACnB,WAAO,WAAW;AAAA,EACpB,WAES,WAAW;AAClB,WAAO,YAAY;AAAA,EACrB,WAES,UAAU;AACjB,WAAO,WAAW;AAAA,EACpB;AAEA,SAAO;AACT;AAqBO,SAAS,wBACd,QACA,YAC+B;AAC/B,QAAM,QAAQ,eAAe,QAAQ,UAAU;AAG/C,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAEA,QAAM,aAAa,eAAe,MAAM;AAExC,SAAO;AAAA,IACL;AAAA,IACA,GAAG;AAAA,EACL;AACF;;;ACtZO,SAAS,mBAAmB,QAA6D;AAC9F,QAAM,EAAE,KAAK,UAAU,WAAW,MAAM,IAAI;AAC5C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,EACF;AACF;AAKO,SAAS,eACd,QAIW;AACX,QAAM,EAAE,KAAK,UAAU,WAAW,QAAQ,WAAW,IAAI;AACzD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,mBACd,QASe;AACf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,iBACd,QASa;AACb,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,mBACd,QAUe;AACf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAMO,SAAS,qBACd,QAKiB;AACjB,QAAM,EAAE,KAAK,UAAU,WAAW,cAAc,aAAa,UAAU,IAAI;AAC3E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAOO,SAAS,gBACd,QAIY;AACZ,QAAM,EAAE,KAAK,UAAU,WAAW,OAAO,WAAW,IAAI;AACxD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AACF;AAMO,SAAS,kBACd,QAQc;AACd,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA,gBAAgB,kBAAkB;AAAA,IAClC,QAAQ,UAAU;AAAA,IAClB;AAAA,IACA;AAAA,EACF;AACF;AAiBO,SAAS,mBACd,WACA,QACA,QACA,cACA,WACA,aACA,kBACe;AACf,QAAM,UAAyB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,yBACJ,qBAAqB,UACrB,iBACC,aAAa,cAAc,aAAa,kBAAkB,aAAa,kBACpE;AAAA,IACE,GAAI,aAAa,cAAc,EAAE,YAAY,aAAa,WAAW;AAAA,IACrE,GAAI,aAAa,kBAAkB,EAAE,gBAAgB,aAAa,eAAe;AAAA,IACjF,GAAI,aAAa,kBAAkB,EAAE,gBAAgB,aAAa,eAAe;AAAA,EACnF,IACA;AACN,QAAM,2BAA2B,oBAAoB;AAGrD,MAAI,aAAa;AACf,YAAQ,cAAc;AAAA,EACxB;AAGA,MAAI,WAAW;AACb,YAAQ,YAAY;AAAA,EACtB;AAGA,MAAI,iBAAiB,aAAa,SAAS,aAAa,UAAU,aAAa,SAAS;AACtF,YAAQ,eAAe;AAAA,MACrB,GAAI,aAAa,SAAS,EAAE,OAAO,aAAa,MAAM;AAAA,MACtD,GAAI,aAAa,UAAU,EAAE,QAAQ,aAAa,OAAO;AAAA,MACzD,GAAI,aAAa,UAAU,EAAE,QAAQ,aAAa,OAAO;AAAA,IAC3D;AAAA,EACF;AAEA,MACE,6BACC,yBAAyB,cACxB,yBAAyB,kBACzB,yBAAyB,iBAC3B;AACA,YAAQ,mBAAmB;AAAA,MACzB,GAAI,yBAAyB,cAAc;AAAA,QACzC,YAAY,yBAAyB;AAAA,MACvC;AAAA,MACA,GAAI,yBAAyB,kBAAkB;AAAA,QAC7C,gBAAgB,yBAAyB;AAAA,MAC3C;AAAA,MACA,GAAI,yBAAyB,kBAAkB;AAAA,QAC7C,gBAAgB,yBAAyB;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AASO,IAAM,iBAAiB;AAKvB,SAAS,YAAY,QAA0C;AACpE,QAAM,UAA4B,CAAC;AACnC,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK,gBAAgB;AACtD,YAAQ,KAAK,OAAO,MAAM,GAAG,IAAI,cAAc,CAAC;AAAA,EAClD;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/payload.ts","../src/types.ts","../src/utils.ts"],"sourcesContent":["// Types\n\n// Payload builders\nexport {\n  batchEvents,\n  buildBillingEvent,\n  buildCalendarEvent,\n  buildCustomEvent,\n  buildEngagementEvent,\n  buildFormEvent,\n  buildIdentifyEvent,\n  buildIngestPayload,\n  buildPageviewEvent,\n  buildStageEvent,\n  MAX_BATCH_SIZE,\n} from \"./payload\"\nexport type {\n  BillingEvent,\n  BillingStatus,\n  BrowserIdentifyOptions,\n  BrowserTrackOptions,\n  CalendarEvent,\n  CalendarProvider,\n  CustomEvent,\n  CustomerAttribution,\n  CustomerIdentifier,\n  CustomerTraits,\n  EngagementEvent,\n  EventType,\n  ExplicitJourneyStage,\n  FormEvent,\n  IdentifyEvent,\n  IdentifyTraits,\n  IngestPayload,\n  IngestResponse,\n  PageviewEvent,\n  PayloadCustomerIdentity,\n  PayloadUserIdentity,\n  ServerIdentifyOptions,\n  ServerIdentity,\n  ServerTrackOptions,\n  SourceType,\n  StageEvent,\n  TrackerConfig,\n  TrackerEvent,\n  UtmParams,\n} from \"./types\"\n// Constants\nexport { DEFAULT_API_HOST, DEFAULT_DENIED_FORM_FIELDS } from \"./types\"\n\n// Auto-identify types\nexport type { ExtractedIdentity } from \"./utils\"\n// Utilities\nexport {\n  extractIdentityFromForm,\n  extractPathFromUrl,\n  extractUtmParams,\n  findEmailField,\n  findNameFields,\n  isFieldDenied,\n  // Auto-identify utilities\n  isValidEmail,\n  sanitizeFormFields,\n  validateCustomerIdentity,\n  validateServerIdentity,\n} from \"./utils\"\n","import { v7 as uuidv7 } from \"uuid\"\nimport type {\n  BillingEvent,\n  BillingStatus,\n  CalendarEvent,\n  CalendarProvider,\n  CustomEvent,\n  CustomerTraits,\n  EngagementEvent,\n  ExplicitJourneyStage,\n  FormEvent,\n  IdentifyEvent,\n  IdentifyTraits,\n  IngestPayload,\n  PageviewEvent,\n  PayloadCustomerIdentity,\n  PayloadUserIdentity,\n  SourceType,\n  StageEvent,\n  TrackerEvent,\n} from \"./types\"\nimport { extractPathFromUrl, extractUtmParams } from \"./utils\"\n\n// ============================================\n// EVENT BUILDERS\n// ============================================\n\ninterface BaseEventParams {\n  url: string\n  referrer?: string\n  timestamp?: number\n}\n\n/**\n * Build a pageview event.\n */\nexport function buildPageviewEvent(params: BaseEventParams & { title?: string }): PageviewEvent {\n  const { url, referrer, timestamp, title } = params\n  return {\n    uuid: uuidv7(),\n    type: \"pageview\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    title,\n  }\n}\n\n/**\n * Build a form event.\n */\nexport function buildFormEvent(\n  params: BaseEventParams & {\n    formId?: string\n    formFields?: Record<string, string>\n  },\n): FormEvent {\n  const { url, referrer, timestamp, formId, formFields } = params\n  return {\n    uuid: uuidv7(),\n    type: \"form\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    formId,\n    formFields,\n  }\n}\n\n/**\n * Build an identify event.\n */\nexport function buildIdentifyEvent(\n  params: BaseEventParams & {\n    email?: string\n    userId?: string\n    fingerprint?: string\n    traits?: IdentifyTraits\n    customerId?: string\n    customerTraits?: CustomerTraits\n  },\n): IdentifyEvent {\n  const {\n    url,\n    referrer,\n    timestamp,\n    email,\n    userId,\n    fingerprint,\n    traits,\n    customerId,\n    customerTraits,\n  } = params\n  return {\n    uuid: uuidv7(),\n    type: \"identify\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    email,\n    userId,\n    fingerprint,\n    customerId,\n    customerTraits,\n    traits,\n  }\n}\n\n/**\n * Build a custom event.\n */\nexport function buildCustomEvent(\n  params: BaseEventParams & {\n    eventName: string\n    properties?: Record<string, string | number | boolean | null>\n    email?: string\n    userId?: string\n    fingerprint?: string\n    customerId?: string\n  },\n): CustomEvent {\n  const {\n    url,\n    referrer,\n    timestamp,\n    eventName,\n    properties,\n    email,\n    userId,\n    fingerprint,\n    customerId,\n  } = params\n  return {\n    uuid: uuidv7(),\n    type: \"custom\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    eventName,\n    email,\n    userId,\n    fingerprint,\n    customerId,\n    properties,\n  }\n}\n\n/**\n * Build a calendar booking event.\n */\nexport function buildCalendarEvent(\n  params: BaseEventParams & {\n    provider: CalendarProvider\n    eventType?: string\n    startTime?: string\n    endTime?: string\n    duration?: number\n    isRecurring?: boolean\n    inviteeEmail?: string\n    inviteeName?: string\n  },\n): CalendarEvent {\n  const {\n    url,\n    referrer,\n    timestamp,\n    provider,\n    eventType,\n    startTime,\n    endTime,\n    duration,\n    isRecurring,\n    inviteeEmail,\n    inviteeName,\n  } = params\n  return {\n    uuid: uuidv7(),\n    type: \"calendar\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    provider,\n    eventType,\n    startTime,\n    endTime,\n    duration,\n    isRecurring,\n    inviteeEmail,\n    inviteeName,\n  }\n}\n\n/**\n * Build an engagement event.\n * Captures active time on page for session analytics.\n */\nexport function buildEngagementEvent(\n  params: BaseEventParams & {\n    activeTimeMs: number\n    totalTimeMs: number\n    sessionId: string\n  },\n): EngagementEvent {\n  const { url, referrer, timestamp, activeTimeMs, totalTimeMs, sessionId } = params\n  return {\n    uuid: uuidv7(),\n    type: \"engagement\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    activeTimeMs,\n    totalTimeMs,\n    sessionId,\n  }\n}\n\n/**\n * Build a stage event.\n * Used to explicitly set customer journey stage (activated, engaged, inactive).\n * discovered/signed_up stages are inferred from identify calls.\n */\nexport function buildStageEvent(\n  params: BaseEventParams & {\n    stage: ExplicitJourneyStage\n    properties?: Record<string, string | number | boolean | null>\n  },\n): StageEvent {\n  const { url, referrer, timestamp, stage, properties } = params\n  return {\n    uuid: uuidv7(),\n    type: \"stage\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    stage,\n    properties,\n  }\n}\n\n/**\n * Build a billing event.\n * Used to set customer billing status (trialing, paid, churned).\n */\nexport function buildBillingEvent(\n  params: BaseEventParams & {\n    status: BillingStatus\n    customerId?: string\n    stripeCustomerId?: string\n    properties?: Record<string, string | number | boolean | null>\n  },\n): BillingEvent {\n  const { url, referrer, timestamp, status, customerId, stripeCustomerId, properties } = params\n  return {\n    uuid: uuidv7(),\n    type: \"billing\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    status,\n    customerId,\n    stripeCustomerId,\n    properties,\n  }\n}\n\n// ============================================\n// PAYLOAD BUILDER\n// ============================================\n\n/**\n * Build an ingest payload from events.\n *\n * @param visitorId - The anonymous visitor ID from browser cookie/storage\n * @param source - The event source (client, server, integration)\n * @param events - Array of events to send\n * @param userIdentity - Optional user identity for immediate resolution (from setUser in SPA)\n * @param sessionId - Optional session ID for grouping events (browser SDK only)\n * @param fingerprint - Optional device identifier for server-side anonymous tracking\n * @param customerIdentity - Optional customer identity for batch attribution. `customerId`-only\n * batches are valid and remain provisional until a later identify(email, customerId) call\n * links that external account/workspace to a resolved customer.\n */\nexport function buildIngestPayload(\n  visitorId: string,\n  source: SourceType,\n  events: TrackerEvent[],\n  userIdentity?: PayloadUserIdentity,\n  sessionId?: string,\n  fingerprint?: string,\n  customerIdentity?: PayloadCustomerIdentity,\n): IngestPayload {\n  const payload: IngestPayload = {\n    visitorId,\n    source,\n    events,\n  }\n  const legacyCustomerIdentity =\n    customerIdentity === undefined &&\n    userIdentity &&\n    (userIdentity.customerId || userIdentity.customerTraits)\n      ? {\n          ...(userIdentity.customerId && { customerId: userIdentity.customerId }),\n          ...(userIdentity.customerTraits && { customerTraits: userIdentity.customerTraits }),\n        }\n      : undefined\n  const resolvedCustomerIdentity = customerIdentity ?? legacyCustomerIdentity\n\n  // Only include fingerprint if provided (server SDK only)\n  if (fingerprint) {\n    payload.fingerprint = fingerprint\n  }\n\n  // Only include sessionId if provided (browser SDK only)\n  if (sessionId) {\n    payload.sessionId = sessionId\n  }\n\n  // Only include userIdentity if it has actual values\n  if (userIdentity && (userIdentity.email || userIdentity.userId || userIdentity.traits)) {\n    payload.userIdentity = {\n      ...(userIdentity.email && { email: userIdentity.email }),\n      ...(userIdentity.userId && { userId: userIdentity.userId }),\n      ...(userIdentity.traits && { traits: userIdentity.traits }),\n    }\n  }\n\n  if (\n    resolvedCustomerIdentity &&\n    (resolvedCustomerIdentity.customerId || resolvedCustomerIdentity.customerTraits)\n  ) {\n    payload.customerIdentity = {\n      ...(resolvedCustomerIdentity.customerId && {\n        customerId: resolvedCustomerIdentity.customerId,\n      }),\n      ...(resolvedCustomerIdentity.customerTraits && {\n        customerTraits: resolvedCustomerIdentity.customerTraits,\n      }),\n    }\n  }\n\n  return payload\n}\n\n// ============================================\n// BATCH HELPERS\n// ============================================\n\n/**\n * Maximum number of events in a single batch.\n */\nexport const MAX_BATCH_SIZE = 100\n\n/**\n * Split events into batches of MAX_BATCH_SIZE.\n */\nexport function batchEvents(events: TrackerEvent[]): TrackerEvent[][] {\n  const batches: TrackerEvent[][] = []\n  for (let i = 0; i < events.length; i += MAX_BATCH_SIZE) {\n    batches.push(events.slice(i, i + MAX_BATCH_SIZE))\n  }\n  return batches\n}\n","// ============================================\n// EVENT TYPES\n// ============================================\n\nexport type EventType =\n  | \"pageview\"\n  | \"form\"\n  | \"identify\"\n  | \"custom\"\n  | \"calendar\"\n  | \"engagement\"\n  | \"stage\"\n  | \"billing\"\n\n// Only explicit stages - discovered/signed_up are inferred from identify calls\nexport type ExplicitJourneyStage = \"activated\" | \"engaged\" | \"inactive\"\n\nexport type BillingStatus = \"trialing\" | \"paid\" | \"churned\"\n\nexport type CalendarProvider = \"cal.com\" | \"calendly\" | \"unknown\"\n\nexport type SourceType = \"client\" | \"server\" | \"integration\"\n\n// ============================================\n// UTM PARAMETERS\n// ============================================\n\nexport interface UtmParams {\n  source?: string\n  medium?: string\n  campaign?: string\n  term?: string\n  content?: string\n}\n\n// ============================================\n// TRACKER CONFIGURATION\n// ============================================\n\nexport interface TrackerConfig {\n  publicKey: string\n  apiHost?: string // default: 'https://app.outlit.ai'\n}\n\n// ============================================\n// BROWSER-SPECIFIC TYPES (anonymous allowed)\n// visitorId is auto-managed by the browser SDK\n// ============================================\n\nexport interface BrowserTrackOptions {\n  eventName: string\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport interface BrowserIdentifyOptions extends CustomerAttribution {\n  email?: string\n  /** Your system-owned user/contact ID. */\n  userId?: string\n  /** User/contact traits. */\n  traits?: IdentifyTraits\n  /** Customer/account-level traits. */\n  customerTraits?: CustomerTraits\n}\n\n// ============================================\n// SERVER-SPECIFIC TYPES\n// Track calls can use user identity, customer attribution, or both.\n// Identify calls remain user-scoped and require email or userId.\n// ============================================\n\n/**\n * Base server-side user identity.\n * Track calls may use customerId without these fields.\n * Identify calls still require email or userId at runtime.\n * `customerId`-only track calls are valid immediately, but they stay provisional\n * until the same customer/account/workspace later appears on identify() with\n * the matching customerId and an email.\n *\n * - fingerprint: Device identifier for anonymous tracking (can be linked later)\n * - email: User's email address (definitive identity, resolves immediately)\n * - userId: Your system-owned user/contact ID\n */\nexport interface ServerIdentity {\n  fingerprint?: string\n  email?: string\n  /** Your system-owned user/contact ID. */\n  userId?: string\n}\n\nexport interface CustomerAttribution {\n  /** Your system-owned customer/account/workspace ID. */\n  customerId?: string\n}\n\n// ============================================\n// TRAITS\n// ============================================\n\nexport interface CustomerTraits {\n  /** Customer's billing plan */\n  plan?: string\n  /** Allow additional custom properties */\n  [key: string]: string | number | boolean | null | undefined\n}\n\n/**\n * Traits for identify calls.\n * These are user/contact traits, not customer/account traits.\n */\nexport interface IdentifyTraits {\n  /** User-level traits */\n  [key: string]: string | number | boolean | null | undefined\n}\n\nexport interface ServerTrackOptions extends ServerIdentity, CustomerAttribution {\n  eventName: string\n  properties?: Record<string, string | number | boolean | null>\n  timestamp?: number\n}\n\nexport interface ServerIdentifyOptions extends ServerIdentity, CustomerAttribution {\n  traits?: IdentifyTraits\n  customerTraits?: CustomerTraits\n}\n\n/**\n * Customer identity for SDK billing methods.\n * Public billing calls should use `customerId`.\n */\nexport interface CustomerIdentifier extends CustomerAttribution {\n  /**\n   * @deprecated Stripe customer identifier.\n   * Billing attribution should use `customerId` publicly.\n   */\n  stripeCustomerId?: string\n}\n\n// ============================================\n// INTERNAL EVENT TYPES\n// These are the full event objects sent to the API\n// ============================================\n\ninterface BaseEvent {\n  uuid?: string\n  type: EventType\n  timestamp: number // Unix timestamp in milliseconds\n  url: string\n  path: string\n  referrer?: string\n  utm?: UtmParams\n}\n\nexport interface PageviewEvent extends BaseEvent {\n  type: \"pageview\"\n  title?: string\n}\n\nexport interface FormEvent extends BaseEvent {\n  type: \"form\"\n  formId?: string\n  formFields?: Record<string, string>\n}\n\nexport interface IdentifyEvent extends BaseEvent {\n  type: \"identify\"\n  email?: string\n  userId?: string\n  fingerprint?: string\n  customerId?: string\n  customerTraits?: CustomerTraits\n  traits?: IdentifyTraits\n}\n\nexport interface CustomEvent extends BaseEvent {\n  type: \"custom\"\n  eventName: string\n  email?: string\n  userId?: string\n  fingerprint?: string\n  customerId?: string\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport interface CalendarEvent extends BaseEvent {\n  type: \"calendar\"\n  provider: CalendarProvider\n  eventType?: string // e.g., \"30 Minute Meeting\"\n  startTime?: string // ISO timestamp\n  endTime?: string // ISO timestamp\n  duration?: number // Duration in minutes\n  isRecurring?: boolean\n  /** Available when identity is passed via webhooks or manual integration */\n  inviteeEmail?: string\n  inviteeName?: string\n}\n\nexport interface EngagementEvent extends BaseEvent {\n  type: \"engagement\"\n  /** Time in milliseconds the user was actively engaged (visible tab + user interactions) */\n  activeTimeMs: number\n  /** Total wall-clock time in milliseconds on the page */\n  totalTimeMs: number\n  /** Session ID for grouping engagement events. Resets after 30 min of inactivity or tab close. */\n  sessionId: string\n}\n\nexport interface StageEvent extends BaseEvent {\n  type: \"stage\"\n  /** The journey stage to set (only explicit stages, discovered/signed_up are inferred) */\n  stage: ExplicitJourneyStage\n  /** Optional properties for context */\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport interface BillingEvent extends BaseEvent {\n  type: \"billing\"\n  /** The billing status to set for a customer */\n  status: BillingStatus\n  /** Optional customer identifiers */\n  customerId?: string\n  stripeCustomerId?: string\n  /** Optional properties for context */\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport type TrackerEvent =\n  | PageviewEvent\n  | FormEvent\n  | IdentifyEvent\n  | CustomEvent\n  | CalendarEvent\n  | EngagementEvent\n  | StageEvent\n  | BillingEvent\n\n// ============================================\n// INGEST PAYLOAD\n// This is what gets sent to the API\n// ============================================\n\n/**\n * User identity for payload-level resolution.\n * Used by browser SDK when user is logged in (via setUser).\n * Customer attribution is carried separately in `customerIdentity`.\n */\nexport interface PayloadUserIdentity {\n  email?: string\n  /** Your system-owned user/contact ID. */\n  userId?: string\n  /** User/contact traits. */\n  traits?: IdentifyTraits\n  /**\n   * @deprecated Use payload-level `customerIdentity.customerId` instead.\n   * Kept for one compatibility window while callers migrate.\n   */\n  customerId?: string\n  /**\n   * @deprecated Use payload-level `customerIdentity.customerTraits` instead.\n   * Kept for one compatibility window while callers migrate.\n   */\n  customerTraits?: CustomerTraits\n}\n\n/**\n * Customer identity for payload-level attribution.\n * Used by browser SDK to attach account/workspace context to a batch.\n * `customerId`-only attribution is valid and remains provisional until a later\n * identify(email, customerId) call links that external account/workspace to a resolved customer.\n */\nexport interface PayloadCustomerIdentity extends CustomerAttribution {\n  /** Customer/account traits. */\n  customerTraits?: CustomerTraits\n}\n\nexport interface IngestPayload {\n  visitorId?: string // Required for pixel, optional for server\n  source: SourceType\n  events: TrackerEvent[]\n  /**\n   * Device identifier for anonymous tracking.\n   * Events with fingerprint can be linked to users later via identify.\n   * Only present for server-side events.\n   */\n  fingerprint?: string\n  /**\n   * Session ID for grouping all events in this batch.\n   * Only present for browser (client) source events.\n   * Used to correlate pageviews, forms, custom events, and engagement\n   * within the same browsing session.\n   */\n  sessionId?: string\n  /**\n   * User identity for this batch of events.\n   * When present, the server can resolve directly to CustomerContact\n   * instead of relying on anonymous visitor flow.\n   *\n   * This is set by the browser SDK when setUser() has been called,\n   * allowing immediate identity resolution for SPA/React apps.\n   */\n  userIdentity?: PayloadUserIdentity\n  /**\n   * Customer/account identity for this batch of events.\n   * Used to attribute browser batches to a customer/workspace even when\n   * the customer fields are not present on every event.\n   */\n  customerIdentity?: PayloadCustomerIdentity\n}\n\n// ============================================\n// API RESPONSE\n// ============================================\n\nexport interface IngestResponse {\n  success: boolean\n  processed: number\n  errors?: Array<{\n    index: number\n    message: string\n  }>\n}\n\n// ============================================\n// CONSTANTS\n// ============================================\n\nexport const DEFAULT_API_HOST = \"https://app.outlit.ai\"\n\n// Re-export for convenience\nexport type { PayloadUserIdentity as UserIdentity }\n\nexport const DEFAULT_DENIED_FORM_FIELDS = [\n  \"password\",\n  \"passwd\",\n  \"pass\",\n  \"pwd\",\n  \"token\",\n  \"secret\",\n  \"api_key\",\n  \"apikey\",\n  \"api-key\",\n  \"credit_card\",\n  \"creditcard\",\n  \"credit-card\",\n  \"cc_number\",\n  \"ccnumber\",\n  \"card_number\",\n  \"cardnumber\",\n  \"cvv\",\n  \"cvc\",\n  \"ssn\",\n  \"social_security\",\n  \"socialsecurity\",\n  \"bank_account\",\n  \"bankaccount\",\n  \"routing_number\",\n  \"routingnumber\",\n]\n","import { DEFAULT_DENIED_FORM_FIELDS, type UtmParams } from \"./types\"\n\n// ============================================\n// UTM EXTRACTION\n// ============================================\n\n/**\n * Extract UTM parameters from a URL.\n */\nexport function extractUtmParams(url: string): UtmParams | undefined {\n  try {\n    const urlObj = new URL(url)\n    const params = urlObj.searchParams\n\n    const utm: UtmParams = {}\n\n    if (params.has(\"utm_source\")) utm.source = params.get(\"utm_source\") ?? undefined\n    if (params.has(\"utm_medium\")) utm.medium = params.get(\"utm_medium\") ?? undefined\n    if (params.has(\"utm_campaign\")) utm.campaign = params.get(\"utm_campaign\") ?? undefined\n    if (params.has(\"utm_term\")) utm.term = params.get(\"utm_term\") ?? undefined\n    if (params.has(\"utm_content\")) utm.content = params.get(\"utm_content\") ?? undefined\n\n    return Object.keys(utm).length > 0 ? utm : undefined\n  } catch (error) {\n    console.warn(`[Outlit] Failed to parse URL for UTM extraction: \"${url}\"`, error)\n    return undefined\n  }\n}\n\n/**\n * Extract path from a URL.\n */\nexport function extractPathFromUrl(url: string): string {\n  try {\n    const urlObj = new URL(url)\n    let path = urlObj.pathname\n    const hash = urlObj.hash\n\n    // For file:// or custom protocol URLs with no real hostname (common in Electron),\n    // the meaningful route is typically stored in the hash fragment.\n    if (hash && hash.length > 1 && (!urlObj.hostname || urlObj.protocol === \"file:\")) {\n      path = hash.replace(/^#/, \"\")\n    }\n    // For web hash-routing SPAs (e.g. \"/#/settings\"), prefer hash when the\n    // pathname is an SPA entry point.\n    else if (\n      hash.startsWith(\"#/\") &&\n      (urlObj.pathname === \"/\" || urlObj.pathname.endsWith(\"/index.html\"))\n    ) {\n      path = hash.slice(1)\n    }\n\n    if (!path) return \"/\"\n    if (!path.startsWith(\"/\")) return `/${path}`\n\n    return path\n  } catch (error) {\n    console.warn(\n      `[Outlit] Failed to parse URL for path extraction: \"${url}\", defaulting to \"/\"`,\n      error,\n    )\n    return \"/\"\n  }\n}\n\n// ============================================\n// FORM FIELD SANITIZATION\n// ============================================\n\n/**\n * Check if a field name should be denied (case-insensitive).\n */\nexport function isFieldDenied(fieldName: string, denylist: string[]): boolean {\n  const normalizedName = fieldName.toLowerCase().replace(/[-_\\s]/g, \"\")\n  return denylist.some((denied) => {\n    const normalizedDenied = denied.toLowerCase().replace(/[-_\\s]/g, \"\")\n    return normalizedName.includes(normalizedDenied)\n  })\n}\n\n/**\n * Check if a value looks like sensitive data (e.g., credit card number).\n */\nfunction looksLikeSensitiveValue(value: string): boolean {\n  // Remove spaces and dashes\n  const cleaned = value.replace(/[\\s-]/g, \"\")\n\n  // Check for credit card patterns (13-19 digits)\n  if (/^\\d{13,19}$/.test(cleaned)) {\n    return true\n  }\n\n  // Check for SSN pattern (9 digits)\n  if (/^\\d{9}$/.test(cleaned) || /^\\d{3}-\\d{2}-\\d{4}$/.test(value)) {\n    return true\n  }\n\n  return false\n}\n\n/**\n * Sanitize form fields by removing sensitive data.\n * Returns a new object with denied fields removed.\n */\nexport function sanitizeFormFields(\n  fields: Record<string, string> | undefined,\n  customDenylist?: string[],\n): Record<string, string> | undefined {\n  if (!fields) return undefined\n\n  const denylist = customDenylist ?? DEFAULT_DENIED_FORM_FIELDS\n  const sanitized: Record<string, string> = {}\n\n  for (const [key, value] of Object.entries(fields)) {\n    if (!isFieldDenied(key, denylist)) {\n      // Also check for credit card patterns in values\n      if (!looksLikeSensitiveValue(value)) {\n        sanitized[key] = value\n      }\n    }\n  }\n\n  return Object.keys(sanitized).length > 0 ? sanitized : undefined\n}\n\n// ============================================\n// VISITOR ID DERIVATION (for server SDK)\n// ============================================\n\n/**\n * Derive a deterministic visitor ID from email and/or userId.\n * This is used by the server SDK to create consistent IDs for API compatibility.\n *\n * Uses a simple hash to create a UUID-like string that will be consistent\n * for the same email/userId combination.\n */\nexport function deriveVisitorIdFromIdentity(email?: string, userId?: string): string {\n  const identity = [email?.toLowerCase(), userId].filter(Boolean).join(\"|\")\n  if (!identity) {\n    throw new Error(\"Either email or userId must be provided\")\n  }\n\n  // Simple hash function to create a deterministic UUID-like string\n  let hash = 0\n  for (let i = 0; i < identity.length; i++) {\n    const char = identity.charCodeAt(i)\n    hash = (hash << 5) - hash + char\n    hash = hash & hash // Convert to 32-bit integer\n  }\n\n  // Convert to hex and format as UUID-like string\n  const hex = Math.abs(hash).toString(16).padStart(8, \"0\")\n  const part1 = hex.slice(0, 8)\n  const part2 = identity.length.toString(16).padStart(4, \"0\")\n  const part3 = \"4000\" // Version 4 UUID marker\n  const part4 = (((hash >>> 16) & 0x0fff) | 0x8000).toString(16)\n  const part5 = Math.abs(hash * 31)\n    .toString(16)\n    .padStart(12, \"0\")\n    .slice(0, 12)\n\n  return `${part1}-${part2}-${part3}-${part4}-${part5}`\n}\n\n// ============================================\n// VALIDATION\n// ============================================\n\n/**\n * Validate that at least one identity field is provided.\n * Used by the server SDK to enforce identity requirements.\n *\n * Valid identities:\n * - fingerprint: Device identifier (for anonymous tracking, can be linked later)\n * - email: User's email (definitive identity)\n * - userId: Your system-owned user/contact ID\n * - customerId: Your system-owned customer/account/workspace ID\n */\nexport function validateServerIdentity(\n  fingerprint?: string,\n  email?: string,\n  userId?: string,\n  customerId?: string,\n): void {\n  const hasFingerprint = fingerprint && fingerprint.trim().length > 0\n  const hasEmail = email && email.trim().length > 0\n  const hasUserId = userId && userId.trim().length > 0\n  const hasCustomerId = customerId && customerId.trim().length > 0\n\n  if (!hasFingerprint && !hasEmail && !hasUserId && !hasCustomerId) {\n    throw new Error(\n      \"Server SDK requires at least one of: fingerprint, email, userId, or customerId for track calls. \" +\n        \"Use fingerprint/email/userId for user-scoped tracking or customerId for customer-only tracking.\",\n    )\n  }\n}\n\n/**\n * Validate that at least one customer identifier is provided for billing calls.\n */\nexport function validateCustomerIdentity(customerId?: string, stripeCustomerId?: string): void {\n  const hasCustomerId = customerId && customerId.trim().length > 0\n  const hasStripeCustomerId = stripeCustomerId && stripeCustomerId.trim().length > 0\n\n  if (!hasCustomerId && !hasStripeCustomerId) {\n    throw new Error(\n      \"Billing methods require customerId or stripeCustomerId. \" +\n        \"Use customerId for your system-owned account ID.\",\n    )\n  }\n}\n\n// ============================================\n// AUTO-IDENTIFY: EMAIL & NAME EXTRACTION\n// ============================================\n\n/**\n * Validate that a string looks like a valid email address.\n */\nexport function isValidEmail(value: string): boolean {\n  if (!value || typeof value !== \"string\") return false\n  // Basic email regex - intentionally permissive to avoid false negatives\n  const emailRegex = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/\n  return emailRegex.test(value.trim())\n}\n\n/**\n * Email field name patterns (case-insensitive, normalized).\n * Order matters - more specific patterns first.\n */\nconst EMAIL_FIELD_PATTERNS = [\n  /^e?-?mail$/i,\n  /^email[_-]?address$/i,\n  /^user[_-]?email$/i,\n  /^work[_-]?email$/i,\n  /^contact[_-]?email$/i,\n  /^primary[_-]?email$/i,\n  /^business[_-]?email$/i,\n]\n\n/**\n * Full name field patterns.\n */\nconst FULL_NAME_PATTERNS = [\n  /^name$/i,\n  /^full[_-]?name$/i,\n  /^your[_-]?name$/i,\n  /^customer[_-]?name$/i,\n  /^contact[_-]?name$/i,\n  /^display[_-]?name$/i,\n]\n\n/**\n * First name field patterns.\n */\nconst FIRST_NAME_PATTERNS = [\n  /^first[_-]?name$/i,\n  /^firstname$/i,\n  /^first$/i,\n  /^fname$/i,\n  /^given[_-]?name$/i,\n  /^forename$/i,\n]\n\n/**\n * Last name field patterns.\n */\nconst LAST_NAME_PATTERNS = [\n  /^last[_-]?name$/i,\n  /^lastname$/i,\n  /^last$/i,\n  /^lname$/i,\n  /^surname$/i,\n  /^family[_-]?name$/i,\n]\n\n/**\n * Check if a field name matches any of the given patterns.\n */\nfunction matchesPatterns(fieldName: string, patterns: RegExp[]): boolean {\n  const normalized = fieldName.trim()\n  return patterns.some((pattern) => pattern.test(normalized))\n}\n\n/**\n * Find an email value from form fields.\n *\n * Priority:\n * 1. Fields with input type=\"email\" (if inputTypes map provided)\n * 2. Field names matching email patterns\n * 3. Any field with a value that looks like an email\n *\n * @param fields - Form field key-value pairs\n * @param inputTypes - Optional map of field names to input types\n * @returns The email value if found, undefined otherwise\n */\nexport function findEmailField(\n  fields: Record<string, string>,\n  inputTypes?: Map<string, string>,\n): string | undefined {\n  // Priority 1: Check fields with type=\"email\"\n  if (inputTypes) {\n    for (const [fieldName, inputType] of inputTypes.entries()) {\n      if (inputType === \"email\") {\n        const value = fields[fieldName]\n        if (value && isValidEmail(value)) {\n          return value.trim()\n        }\n      }\n    }\n  }\n\n  // Priority 2: Check field names matching email patterns\n  for (const [fieldName, value] of Object.entries(fields)) {\n    if (matchesPatterns(fieldName, EMAIL_FIELD_PATTERNS) && isValidEmail(value)) {\n      return value.trim()\n    }\n  }\n\n  // Priority 3: Any field with email-like value (fallback)\n  for (const value of Object.values(fields)) {\n    if (isValidEmail(value)) {\n      return value.trim()\n    }\n  }\n\n  return undefined\n}\n\n/**\n * Extract name fields from form data.\n *\n * Looks for:\n * - Full name fields (name, full_name, etc.)\n * - First name fields (first_name, fname, etc.)\n * - Last name fields (last_name, lname, etc.)\n *\n * If only first/last names are found, combines them into a full name.\n *\n * @param fields - Form field key-value pairs\n * @returns Object with name, firstName, and/or lastName if found\n */\nexport function findNameFields(fields: Record<string, string>): {\n  name?: string\n  firstName?: string\n  lastName?: string\n} {\n  let fullName: string | undefined\n  let firstName: string | undefined\n  let lastName: string | undefined\n\n  for (const [fieldName, value] of Object.entries(fields)) {\n    const trimmedValue = value?.trim()\n    if (!trimmedValue) continue\n\n    // Check for full name\n    if (!fullName && matchesPatterns(fieldName, FULL_NAME_PATTERNS)) {\n      fullName = trimmedValue\n    }\n\n    // Check for first name\n    if (!firstName && matchesPatterns(fieldName, FIRST_NAME_PATTERNS)) {\n      firstName = trimmedValue\n    }\n\n    // Check for last name\n    if (!lastName && matchesPatterns(fieldName, LAST_NAME_PATTERNS)) {\n      lastName = trimmedValue\n    }\n  }\n\n  const result: { name?: string; firstName?: string; lastName?: string } = {}\n\n  // If we have a full name, use it\n  if (fullName) {\n    result.name = fullName\n  }\n  // If we have first and last, combine them\n  else if (firstName && lastName) {\n    result.name = `${firstName} ${lastName}`\n    result.firstName = firstName\n    result.lastName = lastName\n  }\n  // If we only have first name\n  else if (firstName) {\n    result.firstName = firstName\n  }\n  // If we only have last name\n  else if (lastName) {\n    result.lastName = lastName\n  }\n\n  return result\n}\n\n/**\n * Identity extracted from a form submission.\n */\nexport interface ExtractedIdentity {\n  email: string\n  name?: string\n  firstName?: string\n  lastName?: string\n}\n\n/**\n * Extract identity information (email + name) from form fields.\n *\n * Returns undefined if no valid email is found (email is required for identification).\n *\n * @param fields - Form field key-value pairs\n * @param inputTypes - Optional map of field names to input types\n * @returns Extracted identity with email and optional name fields, or undefined\n */\nexport function extractIdentityFromForm(\n  fields: Record<string, string>,\n  inputTypes?: Map<string, string>,\n): ExtractedIdentity | undefined {\n  const email = findEmailField(fields, inputTypes)\n\n  // Email is required for identification\n  if (!email) {\n    return undefined\n  }\n\n  const nameFields = findNameFields(fields)\n\n  return {\n    email,\n    ...nameFields,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,kBAA6B;;;ACqUtB,IAAM,mBAAmB;AAKzB,IAAM,6BAA6B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;;;AC3VO,SAAS,iBAAiB,KAAoC;AACnE,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,UAAM,SAAS,OAAO;AAEtB,UAAM,MAAiB,CAAC;AAExB,QAAI,OAAO,IAAI,YAAY,EAAG,KAAI,SAAS,OAAO,IAAI,YAAY,KAAK;AACvE,QAAI,OAAO,IAAI,YAAY,EAAG,KAAI,SAAS,OAAO,IAAI,YAAY,KAAK;AACvE,QAAI,OAAO,IAAI,cAAc,EAAG,KAAI,WAAW,OAAO,IAAI,cAAc,KAAK;AAC7E,QAAI,OAAO,IAAI,UAAU,EAAG,KAAI,OAAO,OAAO,IAAI,UAAU,KAAK;AACjE,QAAI,OAAO,IAAI,aAAa,EAAG,KAAI,UAAU,OAAO,IAAI,aAAa,KAAK;AAE1E,WAAO,OAAO,KAAK,GAAG,EAAE,SAAS,IAAI,MAAM;AAAA,EAC7C,SAAS,OAAO;AACd,YAAQ,KAAK,qDAAqD,GAAG,KAAK,KAAK;AAC/E,WAAO;AAAA,EACT;AACF;AAKO,SAAS,mBAAmB,KAAqB;AACtD,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,QAAI,OAAO,OAAO;AAClB,UAAM,OAAO,OAAO;AAIpB,QAAI,QAAQ,KAAK,SAAS,MAAM,CAAC,OAAO,YAAY,OAAO,aAAa,UAAU;AAChF,aAAO,KAAK,QAAQ,MAAM,EAAE;AAAA,IAC9B,WAIE,KAAK,WAAW,IAAI,MACnB,OAAO,aAAa,OAAO,OAAO,SAAS,SAAS,aAAa,IAClE;AACA,aAAO,KAAK,MAAM,CAAC;AAAA,IACrB;AAEA,QAAI,CAAC,KAAM,QAAO;AAClB,QAAI,CAAC,KAAK,WAAW,GAAG,EAAG,QAAO,IAAI,IAAI;AAE1C,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ;AAAA,MACN,sDAAsD,GAAG;AAAA,MACzD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AASO,SAAS,cAAc,WAAmB,UAA6B;AAC5E,QAAM,iBAAiB,UAAU,YAAY,EAAE,QAAQ,WAAW,EAAE;AACpE,SAAO,SAAS,KAAK,CAAC,WAAW;AAC/B,UAAM,mBAAmB,OAAO,YAAY,EAAE,QAAQ,WAAW,EAAE;AACnE,WAAO,eAAe,SAAS,gBAAgB;AAAA,EACjD,CAAC;AACH;AAKA,SAAS,wBAAwB,OAAwB;AAEvD,QAAM,UAAU,MAAM,QAAQ,UAAU,EAAE;AAG1C,MAAI,cAAc,KAAK,OAAO,GAAG;AAC/B,WAAO;AAAA,EACT;AAGA,MAAI,UAAU,KAAK,OAAO,KAAK,sBAAsB,KAAK,KAAK,GAAG;AAChE,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAMO,SAAS,mBACd,QACA,gBACoC;AACpC,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,WAAW,kBAAkB;AACnC,QAAM,YAAoC,CAAC;AAE3C,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,QAAI,CAAC,cAAc,KAAK,QAAQ,GAAG;AAEjC,UAAI,CAAC,wBAAwB,KAAK,GAAG;AACnC,kBAAU,GAAG,IAAI;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAEA,SAAO,OAAO,KAAK,SAAS,EAAE,SAAS,IAAI,YAAY;AACzD;AAuDO,SAAS,uBACd,aACA,OACA,QACA,YACM;AACN,QAAM,iBAAiB,eAAe,YAAY,KAAK,EAAE,SAAS;AAClE,QAAM,WAAW,SAAS,MAAM,KAAK,EAAE,SAAS;AAChD,QAAM,YAAY,UAAU,OAAO,KAAK,EAAE,SAAS;AACnD,QAAM,gBAAgB,cAAc,WAAW,KAAK,EAAE,SAAS;AAE/D,MAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,aAAa,CAAC,eAAe;AAChE,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACF;AAKO,SAAS,yBAAyB,YAAqB,kBAAiC;AAC7F,QAAM,gBAAgB,cAAc,WAAW,KAAK,EAAE,SAAS;AAC/D,QAAM,sBAAsB,oBAAoB,iBAAiB,KAAK,EAAE,SAAS;AAEjF,MAAI,CAAC,iBAAiB,CAAC,qBAAqB;AAC1C,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACF;AASO,SAAS,aAAa,OAAwB;AACnD,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAEhD,QAAM,aAAa;AACnB,SAAO,WAAW,KAAK,MAAM,KAAK,CAAC;AACrC;AAMA,IAAM,uBAAuB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,qBAAqB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,sBAAsB;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,qBAAqB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,SAAS,gBAAgB,WAAmB,UAA6B;AACvE,QAAM,aAAa,UAAU,KAAK;AAClC,SAAO,SAAS,KAAK,CAAC,YAAY,QAAQ,KAAK,UAAU,CAAC;AAC5D;AAcO,SAAS,eACd,QACA,YACoB;AAEpB,MAAI,YAAY;AACd,eAAW,CAAC,WAAW,SAAS,KAAK,WAAW,QAAQ,GAAG;AACzD,UAAI,cAAc,SAAS;AACzB,cAAM,QAAQ,OAAO,SAAS;AAC9B,YAAI,SAAS,aAAa,KAAK,GAAG;AAChC,iBAAO,MAAM,KAAK;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,aAAW,CAAC,WAAW,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,QAAI,gBAAgB,WAAW,oBAAoB,KAAK,aAAa,KAAK,GAAG;AAC3E,aAAO,MAAM,KAAK;AAAA,IACpB;AAAA,EACF;AAGA,aAAW,SAAS,OAAO,OAAO,MAAM,GAAG;AACzC,QAAI,aAAa,KAAK,GAAG;AACvB,aAAO,MAAM,KAAK;AAAA,IACpB;AAAA,EACF;AAEA,SAAO;AACT;AAeO,SAAS,eAAe,QAI7B;AACA,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,aAAW,CAAC,WAAW,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,UAAM,eAAe,OAAO,KAAK;AACjC,QAAI,CAAC,aAAc;AAGnB,QAAI,CAAC,YAAY,gBAAgB,WAAW,kBAAkB,GAAG;AAC/D,iBAAW;AAAA,IACb;AAGA,QAAI,CAAC,aAAa,gBAAgB,WAAW,mBAAmB,GAAG;AACjE,kBAAY;AAAA,IACd;AAGA,QAAI,CAAC,YAAY,gBAAgB,WAAW,kBAAkB,GAAG;AAC/D,iBAAW;AAAA,IACb;AAAA,EACF;AAEA,QAAM,SAAmE,CAAC;AAG1E,MAAI,UAAU;AACZ,WAAO,OAAO;AAAA,EAChB,WAES,aAAa,UAAU;AAC9B,WAAO,OAAO,GAAG,SAAS,IAAI,QAAQ;AACtC,WAAO,YAAY;AACnB,WAAO,WAAW;AAAA,EACpB,WAES,WAAW;AAClB,WAAO,YAAY;AAAA,EACrB,WAES,UAAU;AACjB,WAAO,WAAW;AAAA,EACpB;AAEA,SAAO;AACT;AAqBO,SAAS,wBACd,QACA,YAC+B;AAC/B,QAAM,QAAQ,eAAe,QAAQ,UAAU;AAG/C,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAEA,QAAM,aAAa,eAAe,MAAM;AAExC,SAAO;AAAA,IACL;AAAA,IACA,GAAG;AAAA,EACL;AACF;;;AF3YO,SAAS,mBAAmB,QAA6D;AAC9F,QAAM,EAAE,KAAK,UAAU,WAAW,MAAM,IAAI;AAC5C,SAAO;AAAA,IACL,UAAM,YAAAA,IAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,EACF;AACF;AAKO,SAAS,eACd,QAIW;AACX,QAAM,EAAE,KAAK,UAAU,WAAW,QAAQ,WAAW,IAAI;AACzD,SAAO;AAAA,IACL,UAAM,YAAAA,IAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,mBACd,QAQe;AACf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,SAAO;AAAA,IACL,UAAM,YAAAA,IAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,iBACd,QAQa;AACb,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,SAAO;AAAA,IACL,UAAM,YAAAA,IAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,mBACd,QAUe;AACf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,SAAO;AAAA,IACL,UAAM,YAAAA,IAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAMO,SAAS,qBACd,QAKiB;AACjB,QAAM,EAAE,KAAK,UAAU,WAAW,cAAc,aAAa,UAAU,IAAI;AAC3E,SAAO;AAAA,IACL,UAAM,YAAAA,IAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAOO,SAAS,gBACd,QAIY;AACZ,QAAM,EAAE,KAAK,UAAU,WAAW,OAAO,WAAW,IAAI;AACxD,SAAO;AAAA,IACL,UAAM,YAAAA,IAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AACF;AAMO,SAAS,kBACd,QAMc;AACd,QAAM,EAAE,KAAK,UAAU,WAAW,QAAQ,YAAY,kBAAkB,WAAW,IAAI;AACvF,SAAO;AAAA,IACL,UAAM,YAAAA,IAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAmBO,SAAS,mBACd,WACA,QACA,QACA,cACA,WACA,aACA,kBACe;AACf,QAAM,UAAyB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,yBACJ,qBAAqB,UACrB,iBACC,aAAa,cAAc,aAAa,kBACrC;AAAA,IACE,GAAI,aAAa,cAAc,EAAE,YAAY,aAAa,WAAW;AAAA,IACrE,GAAI,aAAa,kBAAkB,EAAE,gBAAgB,aAAa,eAAe;AAAA,EACnF,IACA;AACN,QAAM,2BAA2B,oBAAoB;AAGrD,MAAI,aAAa;AACf,YAAQ,cAAc;AAAA,EACxB;AAGA,MAAI,WAAW;AACb,YAAQ,YAAY;AAAA,EACtB;AAGA,MAAI,iBAAiB,aAAa,SAAS,aAAa,UAAU,aAAa,SAAS;AACtF,YAAQ,eAAe;AAAA,MACrB,GAAI,aAAa,SAAS,EAAE,OAAO,aAAa,MAAM;AAAA,MACtD,GAAI,aAAa,UAAU,EAAE,QAAQ,aAAa,OAAO;AAAA,MACzD,GAAI,aAAa,UAAU,EAAE,QAAQ,aAAa,OAAO;AAAA,IAC3D;AAAA,EACF;AAEA,MACE,6BACC,yBAAyB,cAAc,yBAAyB,iBACjE;AACA,YAAQ,mBAAmB;AAAA,MACzB,GAAI,yBAAyB,cAAc;AAAA,QACzC,YAAY,yBAAyB;AAAA,MACvC;AAAA,MACA,GAAI,yBAAyB,kBAAkB;AAAA,QAC7C,gBAAgB,yBAAyB;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AASO,IAAM,iBAAiB;AAKvB,SAAS,YAAY,QAA0C;AACpE,QAAM,UAA4B,CAAC;AACnC,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK,gBAAgB;AACtD,YAAQ,KAAK,OAAO,MAAM,GAAG,IAAI,cAAc,CAAC;AAAA,EAClD;AACA,SAAO;AACT;","names":["uuidv7"]}

package/dist/index.mjs

@@ -1,3 +1,6 @@
+// src/payload.ts
+import { v7 as uuidv7 } from "uuid";
+
 // src/types.ts
 var DEFAULT_API_HOST = "https://app.outlit.ai";
 var DEFAULT_DENIED_FORM_FIELDS = [
@@ -96,26 +99,23 @@ function sanitizeFormFields(fields, customDenylist) {
   }
   return Object.keys(sanitized).length > 0 ? sanitized : void 0;
 }
-function validateServerIdentity(fingerprint, email, userId, customerId, customerDomain) {
+function validateServerIdentity(fingerprint, email, userId, customerId) {
   const hasFingerprint = fingerprint && fingerprint.trim().length > 0;
   const hasEmail = email && email.trim().length > 0;
   const hasUserId = userId && userId.trim().length > 0;
   const hasCustomerId = customerId && customerId.trim().length > 0;
-  const hasCustomerDomain = customerDomain && customerDomain.trim().length > 0;
-  if (!hasFingerprint && !hasEmail && !hasUserId && !hasCustomerId && !hasCustomerDomain) {
+  if (!hasFingerprint && !hasEmail && !hasUserId && !hasCustomerId) {
     throw new Error(
-      "Server SDK requires at least one of: fingerprint, email, userId, customerId, or customerDomain for track calls. Use fingerprint/email/userId for user-scoped tracking or customerId/customerDomain for customer-only tracking."
+      "Server SDK requires at least one of: fingerprint, email, userId, or customerId for track calls. Use fingerprint/email/userId for user-scoped tracking or customerId for customer-only tracking."
     );
   }
 }
-function validateCustomerIdentity(customerId, customerDomain, domain, stripeCustomerId) {
+function validateCustomerIdentity(customerId, stripeCustomerId) {
   const hasCustomerId = customerId && customerId.trim().length > 0;
-  const hasCustomerDomain = customerDomain && customerDomain.trim().length > 0;
-  const hasDomain = domain && domain.trim().length > 0;
   const hasStripeCustomerId = stripeCustomerId && stripeCustomerId.trim().length > 0;
-  if (!hasCustomerId && !hasCustomerDomain && !hasDomain && !hasStripeCustomerId) {
+  if (!hasCustomerId && !hasStripeCustomerId) {
     throw new Error(
-      "Billing methods require customerId or customerDomain. Use customerId for your system-owned account ID and customerDomain for the public account domain."
+      "Billing methods require customerId or stripeCustomerId. Use customerId for your system-owned account ID."
     );
   }
 }
@@ -231,6 +231,7 @@ function extractIdentityFromForm(fields, inputTypes) {
 function buildPageviewEvent(params) {
   const { url, referrer, timestamp, title } = params;
   return {
+    uuid: uuidv7(),
     type: "pageview",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -243,6 +244,7 @@ function buildPageviewEvent(params) {
 function buildFormEvent(params) {
   const { url, referrer, timestamp, formId, formFields } = params;
   return {
+    uuid: uuidv7(),
     type: "form",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -263,10 +265,10 @@ function buildIdentifyEvent(params) {
     fingerprint,
     traits,
     customerId,
-    customerDomain,
     customerTraits
   } = params;
   return {
+    uuid: uuidv7(),
     type: "identify",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -277,7 +279,6 @@ function buildIdentifyEvent(params) {
     userId,
     fingerprint,
     customerId,
-    customerDomain,
     customerTraits,
     traits
   };
@@ -292,10 +293,10 @@ function buildCustomEvent(params) {
     email,
     userId,
     fingerprint,
-    customerId,
-    customerDomain
+    customerId
   } = params;
   return {
+    uuid: uuidv7(),
     type: "custom",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -307,7 +308,6 @@ function buildCustomEvent(params) {
     userId,
     fingerprint,
     customerId,
-    customerDomain,
     properties
   };
 }
@@ -326,6 +326,7 @@ function buildCalendarEvent(params) {
     inviteeName
   } = params;
   return {
+    uuid: uuidv7(),
     type: "calendar",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -345,6 +346,7 @@ function buildCalendarEvent(params) {
 function buildEngagementEvent(params) {
   const { url, referrer, timestamp, activeTimeMs, totalTimeMs, sessionId } = params;
   return {
+    uuid: uuidv7(),
     type: "engagement",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -359,6 +361,7 @@ function buildEngagementEvent(params) {
 function buildStageEvent(params) {
   const { url, referrer, timestamp, stage, properties } = params;
   return {
+    uuid: uuidv7(),
     type: "stage",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -370,18 +373,9 @@ function buildStageEvent(params) {
   };
 }
 function buildBillingEvent(params) {
-  const {
-    url,
-    referrer,
-    timestamp,
-    status,
-    customerId,
-    customerDomain,
-    stripeCustomerId,
-    domain,
-    properties
-  } = params;
+  const { url, referrer, timestamp, status, customerId, stripeCustomerId, properties } = params;
   return {
+    uuid: uuidv7(),
     type: "billing",
     timestamp: timestamp ?? Date.now(),
     url,
@@ -390,8 +384,6 @@ function buildBillingEvent(params) {
     utm: extractUtmParams(url),
     status,
     customerId,
-    customerDomain: customerDomain ?? domain,
-    domain: domain ?? customerDomain,
     stripeCustomerId,
     properties
   };
@@ -402,9 +394,8 @@ function buildIngestPayload(visitorId, source, events, userIdentity, sessionId,
     source,
     events
   };
-  const legacyCustomerIdentity = customerIdentity === void 0 && userIdentity && (userIdentity.customerId || userIdentity.customerDomain || userIdentity.customerTraits) ? {
+  const legacyCustomerIdentity = customerIdentity === void 0 && userIdentity && (userIdentity.customerId || userIdentity.customerTraits) ? {
     ...userIdentity.customerId && { customerId: userIdentity.customerId },
-    ...userIdentity.customerDomain && { customerDomain: userIdentity.customerDomain },
     ...userIdentity.customerTraits && { customerTraits: userIdentity.customerTraits }
   } : void 0;
   const resolvedCustomerIdentity = customerIdentity ?? legacyCustomerIdentity;
@@ -421,14 +412,11 @@ function buildIngestPayload(visitorId, source, events, userIdentity, sessionId,
       ...userIdentity.traits && { traits: userIdentity.traits }
     };
   }
-  if (resolvedCustomerIdentity && (resolvedCustomerIdentity.customerId || resolvedCustomerIdentity.customerDomain || resolvedCustomerIdentity.customerTraits)) {
+  if (resolvedCustomerIdentity && (resolvedCustomerIdentity.customerId || resolvedCustomerIdentity.customerTraits)) {
     payload.customerIdentity = {
       ...resolvedCustomerIdentity.customerId && {
         customerId: resolvedCustomerIdentity.customerId
       },
-      ...resolvedCustomerIdentity.customerDomain && {
-        customerDomain: resolvedCustomerIdentity.customerDomain
-      },
       ...resolvedCustomerIdentity.customerTraits && {
         customerTraits: resolvedCustomerIdentity.customerTraits
       }

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/types.ts","../src/utils.ts","../src/payload.ts"],"sourcesContent":["// ============================================\n// EVENT TYPES\n// ============================================\n\nexport type EventType =\n  | \"pageview\"\n  | \"form\"\n  | \"identify\"\n  | \"custom\"\n  | \"calendar\"\n  | \"engagement\"\n  | \"stage\"\n  | \"billing\"\n\n// Only explicit stages - discovered/signed_up are inferred from identify calls\nexport type ExplicitJourneyStage = \"activated\" | \"engaged\" | \"inactive\"\n\nexport type BillingStatus = \"trialing\" | \"paid\" | \"churned\"\n\nexport type CalendarProvider = \"cal.com\" | \"calendly\" | \"unknown\"\n\nexport type SourceType = \"client\" | \"server\" | \"integration\"\n\n// ============================================\n// UTM PARAMETERS\n// ============================================\n\nexport interface UtmParams {\n  source?: string\n  medium?: string\n  campaign?: string\n  term?: string\n  content?: string\n}\n\n// ============================================\n// TRACKER CONFIGURATION\n// ============================================\n\nexport interface TrackerConfig {\n  publicKey: string\n  apiHost?: string // default: 'https://app.outlit.ai'\n}\n\n// ============================================\n// BROWSER-SPECIFIC TYPES (anonymous allowed)\n// visitorId is auto-managed by the browser SDK\n// ============================================\n\nexport interface BrowserTrackOptions {\n  eventName: string\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport interface BrowserIdentifyOptions extends CustomerAttribution {\n  email?: string\n  /** Your system-owned user/contact ID. */\n  userId?: string\n  /** User/contact traits. */\n  traits?: IdentifyTraits\n  /** Customer/account-level traits. */\n  customerTraits?: CustomerTraits\n}\n\n// ============================================\n// SERVER-SPECIFIC TYPES\n// Track calls can use user identity, customer attribution, or both.\n// Identify calls remain user-scoped and require email or userId.\n// ============================================\n\n/**\n * Base server-side user identity.\n * Track calls may use customerId/customerDomain without these fields.\n * Identify calls still require email or userId at runtime.\n *\n * - fingerprint: Device identifier for anonymous tracking (can be linked later)\n * - email: User's email address (definitive identity, resolves immediately)\n * - userId: Your system-owned user/contact ID\n */\nexport interface ServerIdentity {\n  fingerprint?: string\n  email?: string\n  /** Your system-owned user/contact ID. */\n  userId?: string\n}\n\nexport interface CustomerAttribution {\n  /** Your system-owned customer/account/workspace ID. */\n  customerId?: string\n  /** Public customer/account domain used for billing and attribution. */\n  customerDomain?: string\n}\n\n// ============================================\n// TRAITS\n// ============================================\n\nexport interface CustomerTraits {\n  /** Customer's billing plan */\n  plan?: string\n  /** Allow additional custom properties */\n  [key: string]: string | number | boolean | null | undefined\n}\n\n/**\n * Traits for identify calls.\n * These are user/contact traits, not customer/account traits.\n */\nexport interface IdentifyTraits {\n  /** User-level traits */\n  [key: string]: string | number | boolean | null | undefined\n}\n\nexport interface ServerTrackOptions extends ServerIdentity, CustomerAttribution {\n  eventName: string\n  properties?: Record<string, string | number | boolean | null>\n  timestamp?: number\n}\n\nexport interface ServerIdentifyOptions extends ServerIdentity, CustomerAttribution {\n  traits?: IdentifyTraits\n  customerTraits?: CustomerTraits\n}\n\n/**\n * Customer identity for SDK billing methods.\n * Public billing calls should use `customerId` and/or `customerDomain`.\n */\nexport interface CustomerIdentifier extends CustomerAttribution {\n  /**\n   * @deprecated Use `customerDomain` instead.\n   * Legacy alias kept for backward compatibility.\n   */\n  domain?: string\n  /**\n   * @deprecated Stripe customer identifier.\n   * Billing attribution should use `customerId` and/or `customerDomain` publicly.\n   */\n  stripeCustomerId?: string\n}\n\n// ============================================\n// INTERNAL EVENT TYPES\n// These are the full event objects sent to the API\n// ============================================\n\ninterface BaseEvent {\n  type: EventType\n  timestamp: number // Unix timestamp in milliseconds\n  url: string\n  path: string\n  referrer?: string\n  utm?: UtmParams\n}\n\nexport interface PageviewEvent extends BaseEvent {\n  type: \"pageview\"\n  title?: string\n}\n\nexport interface FormEvent extends BaseEvent {\n  type: \"form\"\n  formId?: string\n  formFields?: Record<string, string>\n}\n\nexport interface IdentifyEvent extends BaseEvent {\n  type: \"identify\"\n  email?: string\n  userId?: string\n  fingerprint?: string\n  customerId?: string\n  customerDomain?: string\n  customerTraits?: CustomerTraits\n  traits?: IdentifyTraits\n}\n\nexport interface CustomEvent extends BaseEvent {\n  type: \"custom\"\n  eventName: string\n  email?: string\n  userId?: string\n  fingerprint?: string\n  customerId?: string\n  customerDomain?: string\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport interface CalendarEvent extends BaseEvent {\n  type: \"calendar\"\n  provider: CalendarProvider\n  eventType?: string // e.g., \"30 Minute Meeting\"\n  startTime?: string // ISO timestamp\n  endTime?: string // ISO timestamp\n  duration?: number // Duration in minutes\n  isRecurring?: boolean\n  /** Available when identity is passed via webhooks or manual integration */\n  inviteeEmail?: string\n  inviteeName?: string\n}\n\nexport interface EngagementEvent extends BaseEvent {\n  type: \"engagement\"\n  /** Time in milliseconds the user was actively engaged (visible tab + user interactions) */\n  activeTimeMs: number\n  /** Total wall-clock time in milliseconds on the page */\n  totalTimeMs: number\n  /** Session ID for grouping engagement events. Resets after 30 min of inactivity or tab close. */\n  sessionId: string\n}\n\nexport interface StageEvent extends BaseEvent {\n  type: \"stage\"\n  /** The journey stage to set (only explicit stages, discovered/signed_up are inferred) */\n  stage: ExplicitJourneyStage\n  /** Optional properties for context */\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport interface BillingEvent extends BaseEvent {\n  type: \"billing\"\n  /** The billing status to set for a customer */\n  status: BillingStatus\n  /** Optional customer identifiers */\n  customerId?: string\n  customerDomain?: string\n  /** @deprecated Legacy alias for `customerDomain`. */\n  domain?: string\n  stripeCustomerId?: string\n  /** Optional properties for context */\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport type TrackerEvent =\n  | PageviewEvent\n  | FormEvent\n  | IdentifyEvent\n  | CustomEvent\n  | CalendarEvent\n  | EngagementEvent\n  | StageEvent\n  | BillingEvent\n\n// ============================================\n// INGEST PAYLOAD\n// This is what gets sent to the API\n// ============================================\n\n/**\n * User identity for payload-level resolution.\n * Used by browser SDK when user is logged in (via setUser).\n * Customer attribution is carried separately in `customerIdentity`.\n */\nexport interface PayloadUserIdentity {\n  email?: string\n  /** Your system-owned user/contact ID. */\n  userId?: string\n  /** User/contact traits. */\n  traits?: IdentifyTraits\n  /**\n   * @deprecated Use payload-level `customerIdentity.customerId` instead.\n   * Kept for one compatibility window while callers migrate.\n   */\n  customerId?: string\n  /**\n   * @deprecated Use payload-level `customerIdentity.customerDomain` instead.\n   * Kept for one compatibility window while callers migrate.\n   */\n  customerDomain?: string\n  /**\n   * @deprecated Use payload-level `customerIdentity.customerTraits` instead.\n   * Kept for one compatibility window while callers migrate.\n   */\n  customerTraits?: CustomerTraits\n}\n\n/**\n * Customer identity for payload-level attribution.\n * Used by browser SDK to attach account/workspace context to a batch.\n */\nexport interface PayloadCustomerIdentity extends CustomerAttribution {\n  /** Customer/account traits. */\n  customerTraits?: CustomerTraits\n}\n\nexport interface IngestPayload {\n  visitorId?: string // Required for pixel, optional for server\n  source: SourceType\n  events: TrackerEvent[]\n  /**\n   * Device identifier for anonymous tracking.\n   * Events with fingerprint can be linked to users later via identify.\n   * Only present for server-side events.\n   */\n  fingerprint?: string\n  /**\n   * Session ID for grouping all events in this batch.\n   * Only present for browser (client) source events.\n   * Used to correlate pageviews, forms, custom events, and engagement\n   * within the same browsing session.\n   */\n  sessionId?: string\n  /**\n   * User identity for this batch of events.\n   * When present, the server can resolve directly to CustomerContact\n   * instead of relying on anonymous visitor flow.\n   *\n   * This is set by the browser SDK when setUser() has been called,\n   * allowing immediate identity resolution for SPA/React apps.\n   */\n  userIdentity?: PayloadUserIdentity\n  /**\n   * Customer/account identity for this batch of events.\n   * Used to attribute browser batches to a customer/workspace even when\n   * the customer fields are not present on every event.\n   */\n  customerIdentity?: PayloadCustomerIdentity\n}\n\n// ============================================\n// API RESPONSE\n// ============================================\n\nexport interface IngestResponse {\n  success: boolean\n  processed: number\n  errors?: Array<{\n    index: number\n    message: string\n  }>\n}\n\n// ============================================\n// CONSTANTS\n// ============================================\n\nexport const DEFAULT_API_HOST = \"https://app.outlit.ai\"\n\n// Re-export for convenience\nexport type { PayloadUserIdentity as UserIdentity }\n\nexport const DEFAULT_DENIED_FORM_FIELDS = [\n  \"password\",\n  \"passwd\",\n  \"pass\",\n  \"pwd\",\n  \"token\",\n  \"secret\",\n  \"api_key\",\n  \"apikey\",\n  \"api-key\",\n  \"credit_card\",\n  \"creditcard\",\n  \"credit-card\",\n  \"cc_number\",\n  \"ccnumber\",\n  \"card_number\",\n  \"cardnumber\",\n  \"cvv\",\n  \"cvc\",\n  \"ssn\",\n  \"social_security\",\n  \"socialsecurity\",\n  \"bank_account\",\n  \"bankaccount\",\n  \"routing_number\",\n  \"routingnumber\",\n]\n","import { DEFAULT_DENIED_FORM_FIELDS, type UtmParams } from \"./types\"\n\n// ============================================\n// UTM EXTRACTION\n// ============================================\n\n/**\n * Extract UTM parameters from a URL.\n */\nexport function extractUtmParams(url: string): UtmParams | undefined {\n  try {\n    const urlObj = new URL(url)\n    const params = urlObj.searchParams\n\n    const utm: UtmParams = {}\n\n    if (params.has(\"utm_source\")) utm.source = params.get(\"utm_source\") ?? undefined\n    if (params.has(\"utm_medium\")) utm.medium = params.get(\"utm_medium\") ?? undefined\n    if (params.has(\"utm_campaign\")) utm.campaign = params.get(\"utm_campaign\") ?? undefined\n    if (params.has(\"utm_term\")) utm.term = params.get(\"utm_term\") ?? undefined\n    if (params.has(\"utm_content\")) utm.content = params.get(\"utm_content\") ?? undefined\n\n    return Object.keys(utm).length > 0 ? utm : undefined\n  } catch (error) {\n    console.warn(`[Outlit] Failed to parse URL for UTM extraction: \"${url}\"`, error)\n    return undefined\n  }\n}\n\n/**\n * Extract path from a URL.\n */\nexport function extractPathFromUrl(url: string): string {\n  try {\n    const urlObj = new URL(url)\n    let path = urlObj.pathname\n    const hash = urlObj.hash\n\n    // For file:// or custom protocol URLs with no real hostname (common in Electron),\n    // the meaningful route is typically stored in the hash fragment.\n    if (hash && hash.length > 1 && (!urlObj.hostname || urlObj.protocol === \"file:\")) {\n      path = hash.replace(/^#/, \"\")\n    }\n    // For web hash-routing SPAs (e.g. \"/#/settings\"), prefer hash when the\n    // pathname is an SPA entry point.\n    else if (\n      hash.startsWith(\"#/\") &&\n      (urlObj.pathname === \"/\" || urlObj.pathname.endsWith(\"/index.html\"))\n    ) {\n      path = hash.slice(1)\n    }\n\n    if (!path) return \"/\"\n    if (!path.startsWith(\"/\")) return `/${path}`\n\n    return path\n  } catch (error) {\n    console.warn(\n      `[Outlit] Failed to parse URL for path extraction: \"${url}\", defaulting to \"/\"`,\n      error,\n    )\n    return \"/\"\n  }\n}\n\n// ============================================\n// FORM FIELD SANITIZATION\n// ============================================\n\n/**\n * Check if a field name should be denied (case-insensitive).\n */\nexport function isFieldDenied(fieldName: string, denylist: string[]): boolean {\n  const normalizedName = fieldName.toLowerCase().replace(/[-_\\s]/g, \"\")\n  return denylist.some((denied) => {\n    const normalizedDenied = denied.toLowerCase().replace(/[-_\\s]/g, \"\")\n    return normalizedName.includes(normalizedDenied)\n  })\n}\n\n/**\n * Check if a value looks like sensitive data (e.g., credit card number).\n */\nfunction looksLikeSensitiveValue(value: string): boolean {\n  // Remove spaces and dashes\n  const cleaned = value.replace(/[\\s-]/g, \"\")\n\n  // Check for credit card patterns (13-19 digits)\n  if (/^\\d{13,19}$/.test(cleaned)) {\n    return true\n  }\n\n  // Check for SSN pattern (9 digits)\n  if (/^\\d{9}$/.test(cleaned) || /^\\d{3}-\\d{2}-\\d{4}$/.test(value)) {\n    return true\n  }\n\n  return false\n}\n\n/**\n * Sanitize form fields by removing sensitive data.\n * Returns a new object with denied fields removed.\n */\nexport function sanitizeFormFields(\n  fields: Record<string, string> | undefined,\n  customDenylist?: string[],\n): Record<string, string> | undefined {\n  if (!fields) return undefined\n\n  const denylist = customDenylist ?? DEFAULT_DENIED_FORM_FIELDS\n  const sanitized: Record<string, string> = {}\n\n  for (const [key, value] of Object.entries(fields)) {\n    if (!isFieldDenied(key, denylist)) {\n      // Also check for credit card patterns in values\n      if (!looksLikeSensitiveValue(value)) {\n        sanitized[key] = value\n      }\n    }\n  }\n\n  return Object.keys(sanitized).length > 0 ? sanitized : undefined\n}\n\n// ============================================\n// VISITOR ID DERIVATION (for server SDK)\n// ============================================\n\n/**\n * Derive a deterministic visitor ID from email and/or userId.\n * This is used by the server SDK to create consistent IDs for API compatibility.\n *\n * Uses a simple hash to create a UUID-like string that will be consistent\n * for the same email/userId combination.\n */\nexport function deriveVisitorIdFromIdentity(email?: string, userId?: string): string {\n  const identity = [email?.toLowerCase(), userId].filter(Boolean).join(\"|\")\n  if (!identity) {\n    throw new Error(\"Either email or userId must be provided\")\n  }\n\n  // Simple hash function to create a deterministic UUID-like string\n  let hash = 0\n  for (let i = 0; i < identity.length; i++) {\n    const char = identity.charCodeAt(i)\n    hash = (hash << 5) - hash + char\n    hash = hash & hash // Convert to 32-bit integer\n  }\n\n  // Convert to hex and format as UUID-like string\n  const hex = Math.abs(hash).toString(16).padStart(8, \"0\")\n  const part1 = hex.slice(0, 8)\n  const part2 = identity.length.toString(16).padStart(4, \"0\")\n  const part3 = \"4000\" // Version 4 UUID marker\n  const part4 = (((hash >>> 16) & 0x0fff) | 0x8000).toString(16)\n  const part5 = Math.abs(hash * 31)\n    .toString(16)\n    .padStart(12, \"0\")\n    .slice(0, 12)\n\n  return `${part1}-${part2}-${part3}-${part4}-${part5}`\n}\n\n// ============================================\n// VALIDATION\n// ============================================\n\n/**\n * Validate that at least one identity field is provided.\n * Used by the server SDK to enforce identity requirements.\n *\n * Valid identities:\n * - fingerprint: Device identifier (for anonymous tracking, can be linked later)\n * - email: User's email (definitive identity)\n * - userId: Your system-owned user/contact ID\n * - customerId: Your system-owned customer/account/workspace ID\n * - customerDomain: Public customer/account domain used for billing and attribution\n */\nexport function validateServerIdentity(\n  fingerprint?: string,\n  email?: string,\n  userId?: string,\n  customerId?: string,\n  customerDomain?: string,\n): void {\n  const hasFingerprint = fingerprint && fingerprint.trim().length > 0\n  const hasEmail = email && email.trim().length > 0\n  const hasUserId = userId && userId.trim().length > 0\n  const hasCustomerId = customerId && customerId.trim().length > 0\n  const hasCustomerDomain = customerDomain && customerDomain.trim().length > 0\n\n  if (!hasFingerprint && !hasEmail && !hasUserId && !hasCustomerId && !hasCustomerDomain) {\n    throw new Error(\n      \"Server SDK requires at least one of: fingerprint, email, userId, customerId, or customerDomain for track calls. \" +\n        \"Use fingerprint/email/userId for user-scoped tracking or customerId/customerDomain for customer-only tracking.\",\n    )\n  }\n}\n\n/**\n * Validate that at least one customer identifier is provided for billing calls.\n */\nexport function validateCustomerIdentity(\n  customerId?: string,\n  customerDomain?: string,\n  domain?: string,\n  stripeCustomerId?: string,\n): void {\n  const hasCustomerId = customerId && customerId.trim().length > 0\n  const hasCustomerDomain = customerDomain && customerDomain.trim().length > 0\n  const hasDomain = domain && domain.trim().length > 0\n  const hasStripeCustomerId = stripeCustomerId && stripeCustomerId.trim().length > 0\n\n  if (!hasCustomerId && !hasCustomerDomain && !hasDomain && !hasStripeCustomerId) {\n    throw new Error(\n      \"Billing methods require customerId or customerDomain. \" +\n        \"Use customerId for your system-owned account ID and customerDomain for the public account domain.\",\n    )\n  }\n}\n\n// ============================================\n// AUTO-IDENTIFY: EMAIL & NAME EXTRACTION\n// ============================================\n\n/**\n * Validate that a string looks like a valid email address.\n */\nexport function isValidEmail(value: string): boolean {\n  if (!value || typeof value !== \"string\") return false\n  // Basic email regex - intentionally permissive to avoid false negatives\n  const emailRegex = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/\n  return emailRegex.test(value.trim())\n}\n\n/**\n * Email field name patterns (case-insensitive, normalized).\n * Order matters - more specific patterns first.\n */\nconst EMAIL_FIELD_PATTERNS = [\n  /^e?-?mail$/i,\n  /^email[_-]?address$/i,\n  /^user[_-]?email$/i,\n  /^work[_-]?email$/i,\n  /^contact[_-]?email$/i,\n  /^primary[_-]?email$/i,\n  /^business[_-]?email$/i,\n]\n\n/**\n * Full name field patterns.\n */\nconst FULL_NAME_PATTERNS = [\n  /^name$/i,\n  /^full[_-]?name$/i,\n  /^your[_-]?name$/i,\n  /^customer[_-]?name$/i,\n  /^contact[_-]?name$/i,\n  /^display[_-]?name$/i,\n]\n\n/**\n * First name field patterns.\n */\nconst FIRST_NAME_PATTERNS = [\n  /^first[_-]?name$/i,\n  /^firstname$/i,\n  /^first$/i,\n  /^fname$/i,\n  /^given[_-]?name$/i,\n  /^forename$/i,\n]\n\n/**\n * Last name field patterns.\n */\nconst LAST_NAME_PATTERNS = [\n  /^last[_-]?name$/i,\n  /^lastname$/i,\n  /^last$/i,\n  /^lname$/i,\n  /^surname$/i,\n  /^family[_-]?name$/i,\n]\n\n/**\n * Check if a field name matches any of the given patterns.\n */\nfunction matchesPatterns(fieldName: string, patterns: RegExp[]): boolean {\n  const normalized = fieldName.trim()\n  return patterns.some((pattern) => pattern.test(normalized))\n}\n\n/**\n * Find an email value from form fields.\n *\n * Priority:\n * 1. Fields with input type=\"email\" (if inputTypes map provided)\n * 2. Field names matching email patterns\n * 3. Any field with a value that looks like an email\n *\n * @param fields - Form field key-value pairs\n * @param inputTypes - Optional map of field names to input types\n * @returns The email value if found, undefined otherwise\n */\nexport function findEmailField(\n  fields: Record<string, string>,\n  inputTypes?: Map<string, string>,\n): string | undefined {\n  // Priority 1: Check fields with type=\"email\"\n  if (inputTypes) {\n    for (const [fieldName, inputType] of inputTypes.entries()) {\n      if (inputType === \"email\") {\n        const value = fields[fieldName]\n        if (value && isValidEmail(value)) {\n          return value.trim()\n        }\n      }\n    }\n  }\n\n  // Priority 2: Check field names matching email patterns\n  for (const [fieldName, value] of Object.entries(fields)) {\n    if (matchesPatterns(fieldName, EMAIL_FIELD_PATTERNS) && isValidEmail(value)) {\n      return value.trim()\n    }\n  }\n\n  // Priority 3: Any field with email-like value (fallback)\n  for (const value of Object.values(fields)) {\n    if (isValidEmail(value)) {\n      return value.trim()\n    }\n  }\n\n  return undefined\n}\n\n/**\n * Extract name fields from form data.\n *\n * Looks for:\n * - Full name fields (name, full_name, etc.)\n * - First name fields (first_name, fname, etc.)\n * - Last name fields (last_name, lname, etc.)\n *\n * If only first/last names are found, combines them into a full name.\n *\n * @param fields - Form field key-value pairs\n * @returns Object with name, firstName, and/or lastName if found\n */\nexport function findNameFields(fields: Record<string, string>): {\n  name?: string\n  firstName?: string\n  lastName?: string\n} {\n  let fullName: string | undefined\n  let firstName: string | undefined\n  let lastName: string | undefined\n\n  for (const [fieldName, value] of Object.entries(fields)) {\n    const trimmedValue = value?.trim()\n    if (!trimmedValue) continue\n\n    // Check for full name\n    if (!fullName && matchesPatterns(fieldName, FULL_NAME_PATTERNS)) {\n      fullName = trimmedValue\n    }\n\n    // Check for first name\n    if (!firstName && matchesPatterns(fieldName, FIRST_NAME_PATTERNS)) {\n      firstName = trimmedValue\n    }\n\n    // Check for last name\n    if (!lastName && matchesPatterns(fieldName, LAST_NAME_PATTERNS)) {\n      lastName = trimmedValue\n    }\n  }\n\n  const result: { name?: string; firstName?: string; lastName?: string } = {}\n\n  // If we have a full name, use it\n  if (fullName) {\n    result.name = fullName\n  }\n  // If we have first and last, combine them\n  else if (firstName && lastName) {\n    result.name = `${firstName} ${lastName}`\n    result.firstName = firstName\n    result.lastName = lastName\n  }\n  // If we only have first name\n  else if (firstName) {\n    result.firstName = firstName\n  }\n  // If we only have last name\n  else if (lastName) {\n    result.lastName = lastName\n  }\n\n  return result\n}\n\n/**\n * Identity extracted from a form submission.\n */\nexport interface ExtractedIdentity {\n  email: string\n  name?: string\n  firstName?: string\n  lastName?: string\n}\n\n/**\n * Extract identity information (email + name) from form fields.\n *\n * Returns undefined if no valid email is found (email is required for identification).\n *\n * @param fields - Form field key-value pairs\n * @param inputTypes - Optional map of field names to input types\n * @returns Extracted identity with email and optional name fields, or undefined\n */\nexport function extractIdentityFromForm(\n  fields: Record<string, string>,\n  inputTypes?: Map<string, string>,\n): ExtractedIdentity | undefined {\n  const email = findEmailField(fields, inputTypes)\n\n  // Email is required for identification\n  if (!email) {\n    return undefined\n  }\n\n  const nameFields = findNameFields(fields)\n\n  return {\n    email,\n    ...nameFields,\n  }\n}\n","import type {\n  BillingEvent,\n  BillingStatus,\n  CalendarEvent,\n  CalendarProvider,\n  CustomEvent,\n  CustomerTraits,\n  EngagementEvent,\n  ExplicitJourneyStage,\n  FormEvent,\n  IdentifyEvent,\n  IdentifyTraits,\n  IngestPayload,\n  PageviewEvent,\n  PayloadCustomerIdentity,\n  PayloadUserIdentity,\n  SourceType,\n  StageEvent,\n  TrackerEvent,\n} from \"./types\"\nimport { extractPathFromUrl, extractUtmParams } from \"./utils\"\n\n// ============================================\n// EVENT BUILDERS\n// ============================================\n\ninterface BaseEventParams {\n  url: string\n  referrer?: string\n  timestamp?: number\n}\n\n/**\n * Build a pageview event.\n */\nexport function buildPageviewEvent(params: BaseEventParams & { title?: string }): PageviewEvent {\n  const { url, referrer, timestamp, title } = params\n  return {\n    type: \"pageview\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    title,\n  }\n}\n\n/**\n * Build a form event.\n */\nexport function buildFormEvent(\n  params: BaseEventParams & {\n    formId?: string\n    formFields?: Record<string, string>\n  },\n): FormEvent {\n  const { url, referrer, timestamp, formId, formFields } = params\n  return {\n    type: \"form\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    formId,\n    formFields,\n  }\n}\n\n/**\n * Build an identify event.\n */\nexport function buildIdentifyEvent(\n  params: BaseEventParams & {\n    email?: string\n    userId?: string\n    fingerprint?: string\n    traits?: IdentifyTraits\n    customerId?: string\n    customerDomain?: string\n    customerTraits?: CustomerTraits\n  },\n): IdentifyEvent {\n  const {\n    url,\n    referrer,\n    timestamp,\n    email,\n    userId,\n    fingerprint,\n    traits,\n    customerId,\n    customerDomain,\n    customerTraits,\n  } = params\n  return {\n    type: \"identify\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    email,\n    userId,\n    fingerprint,\n    customerId,\n    customerDomain,\n    customerTraits,\n    traits,\n  }\n}\n\n/**\n * Build a custom event.\n */\nexport function buildCustomEvent(\n  params: BaseEventParams & {\n    eventName: string\n    properties?: Record<string, string | number | boolean | null>\n    email?: string\n    userId?: string\n    fingerprint?: string\n    customerId?: string\n    customerDomain?: string\n  },\n): CustomEvent {\n  const {\n    url,\n    referrer,\n    timestamp,\n    eventName,\n    properties,\n    email,\n    userId,\n    fingerprint,\n    customerId,\n    customerDomain,\n  } = params\n  return {\n    type: \"custom\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    eventName,\n    email,\n    userId,\n    fingerprint,\n    customerId,\n    customerDomain,\n    properties,\n  }\n}\n\n/**\n * Build a calendar booking event.\n */\nexport function buildCalendarEvent(\n  params: BaseEventParams & {\n    provider: CalendarProvider\n    eventType?: string\n    startTime?: string\n    endTime?: string\n    duration?: number\n    isRecurring?: boolean\n    inviteeEmail?: string\n    inviteeName?: string\n  },\n): CalendarEvent {\n  const {\n    url,\n    referrer,\n    timestamp,\n    provider,\n    eventType,\n    startTime,\n    endTime,\n    duration,\n    isRecurring,\n    inviteeEmail,\n    inviteeName,\n  } = params\n  return {\n    type: \"calendar\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    provider,\n    eventType,\n    startTime,\n    endTime,\n    duration,\n    isRecurring,\n    inviteeEmail,\n    inviteeName,\n  }\n}\n\n/**\n * Build an engagement event.\n * Captures active time on page for session analytics.\n */\nexport function buildEngagementEvent(\n  params: BaseEventParams & {\n    activeTimeMs: number\n    totalTimeMs: number\n    sessionId: string\n  },\n): EngagementEvent {\n  const { url, referrer, timestamp, activeTimeMs, totalTimeMs, sessionId } = params\n  return {\n    type: \"engagement\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    activeTimeMs,\n    totalTimeMs,\n    sessionId,\n  }\n}\n\n/**\n * Build a stage event.\n * Used to explicitly set customer journey stage (activated, engaged, inactive).\n * discovered/signed_up stages are inferred from identify calls.\n */\nexport function buildStageEvent(\n  params: BaseEventParams & {\n    stage: ExplicitJourneyStage\n    properties?: Record<string, string | number | boolean | null>\n  },\n): StageEvent {\n  const { url, referrer, timestamp, stage, properties } = params\n  return {\n    type: \"stage\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    stage,\n    properties,\n  }\n}\n\n/**\n * Build a billing event.\n * Used to set customer billing status (trialing, paid, churned).\n */\nexport function buildBillingEvent(\n  params: BaseEventParams & {\n    status: BillingStatus\n    customerId?: string\n    customerDomain?: string\n    stripeCustomerId?: string\n    domain?: string\n    properties?: Record<string, string | number | boolean | null>\n  },\n): BillingEvent {\n  const {\n    url,\n    referrer,\n    timestamp,\n    status,\n    customerId,\n    customerDomain,\n    stripeCustomerId,\n    domain,\n    properties,\n  } = params\n  return {\n    type: \"billing\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    status,\n    customerId,\n    customerDomain: customerDomain ?? domain,\n    domain: domain ?? customerDomain,\n    stripeCustomerId,\n    properties,\n  }\n}\n\n// ============================================\n// PAYLOAD BUILDER\n// ============================================\n\n/**\n * Build an ingest payload from events.\n *\n * @param visitorId - The anonymous visitor ID from browser cookie/storage\n * @param source - The event source (client, server, integration)\n * @param events - Array of events to send\n * @param userIdentity - Optional user identity for immediate resolution (from setUser in SPA)\n * @param sessionId - Optional session ID for grouping events (browser SDK only)\n * @param fingerprint - Optional device identifier for server-side anonymous tracking\n * @param customerIdentity - Optional customer identity for batch attribution\n */\nexport function buildIngestPayload(\n  visitorId: string,\n  source: SourceType,\n  events: TrackerEvent[],\n  userIdentity?: PayloadUserIdentity,\n  sessionId?: string,\n  fingerprint?: string,\n  customerIdentity?: PayloadCustomerIdentity,\n): IngestPayload {\n  const payload: IngestPayload = {\n    visitorId,\n    source,\n    events,\n  }\n  const legacyCustomerIdentity =\n    customerIdentity === undefined &&\n    userIdentity &&\n    (userIdentity.customerId || userIdentity.customerDomain || userIdentity.customerTraits)\n      ? {\n          ...(userIdentity.customerId && { customerId: userIdentity.customerId }),\n          ...(userIdentity.customerDomain && { customerDomain: userIdentity.customerDomain }),\n          ...(userIdentity.customerTraits && { customerTraits: userIdentity.customerTraits }),\n        }\n      : undefined\n  const resolvedCustomerIdentity = customerIdentity ?? legacyCustomerIdentity\n\n  // Only include fingerprint if provided (server SDK only)\n  if (fingerprint) {\n    payload.fingerprint = fingerprint\n  }\n\n  // Only include sessionId if provided (browser SDK only)\n  if (sessionId) {\n    payload.sessionId = sessionId\n  }\n\n  // Only include userIdentity if it has actual values\n  if (userIdentity && (userIdentity.email || userIdentity.userId || userIdentity.traits)) {\n    payload.userIdentity = {\n      ...(userIdentity.email && { email: userIdentity.email }),\n      ...(userIdentity.userId && { userId: userIdentity.userId }),\n      ...(userIdentity.traits && { traits: userIdentity.traits }),\n    }\n  }\n\n  if (\n    resolvedCustomerIdentity &&\n    (resolvedCustomerIdentity.customerId ||\n      resolvedCustomerIdentity.customerDomain ||\n      resolvedCustomerIdentity.customerTraits)\n  ) {\n    payload.customerIdentity = {\n      ...(resolvedCustomerIdentity.customerId && {\n        customerId: resolvedCustomerIdentity.customerId,\n      }),\n      ...(resolvedCustomerIdentity.customerDomain && {\n        customerDomain: resolvedCustomerIdentity.customerDomain,\n      }),\n      ...(resolvedCustomerIdentity.customerTraits && {\n        customerTraits: resolvedCustomerIdentity.customerTraits,\n      }),\n    }\n  }\n\n  return payload\n}\n\n// ============================================\n// BATCH HELPERS\n// ============================================\n\n/**\n * Maximum number of events in a single batch.\n */\nexport const MAX_BATCH_SIZE = 100\n\n/**\n * Split events into batches of MAX_BATCH_SIZE.\n */\nexport function batchEvents(events: TrackerEvent[]): TrackerEvent[][] {\n  const batches: TrackerEvent[][] = []\n  for (let i = 0; i < events.length; i += MAX_BATCH_SIZE) {\n    batches.push(events.slice(i, i + MAX_BATCH_SIZE))\n  }\n  return batches\n}\n"],"mappings":";AAgVO,IAAM,mBAAmB;AAKzB,IAAM,6BAA6B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;;;ACtWO,SAAS,iBAAiB,KAAoC;AACnE,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,UAAM,SAAS,OAAO;AAEtB,UAAM,MAAiB,CAAC;AAExB,QAAI,OAAO,IAAI,YAAY,EAAG,KAAI,SAAS,OAAO,IAAI,YAAY,KAAK;AACvE,QAAI,OAAO,IAAI,YAAY,EAAG,KAAI,SAAS,OAAO,IAAI,YAAY,KAAK;AACvE,QAAI,OAAO,IAAI,cAAc,EAAG,KAAI,WAAW,OAAO,IAAI,cAAc,KAAK;AAC7E,QAAI,OAAO,IAAI,UAAU,EAAG,KAAI,OAAO,OAAO,IAAI,UAAU,KAAK;AACjE,QAAI,OAAO,IAAI,aAAa,EAAG,KAAI,UAAU,OAAO,IAAI,aAAa,KAAK;AAE1E,WAAO,OAAO,KAAK,GAAG,EAAE,SAAS,IAAI,MAAM;AAAA,EAC7C,SAAS,OAAO;AACd,YAAQ,KAAK,qDAAqD,GAAG,KAAK,KAAK;AAC/E,WAAO;AAAA,EACT;AACF;AAKO,SAAS,mBAAmB,KAAqB;AACtD,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,QAAI,OAAO,OAAO;AAClB,UAAM,OAAO,OAAO;AAIpB,QAAI,QAAQ,KAAK,SAAS,MAAM,CAAC,OAAO,YAAY,OAAO,aAAa,UAAU;AAChF,aAAO,KAAK,QAAQ,MAAM,EAAE;AAAA,IAC9B,WAIE,KAAK,WAAW,IAAI,MACnB,OAAO,aAAa,OAAO,OAAO,SAAS,SAAS,aAAa,IAClE;AACA,aAAO,KAAK,MAAM,CAAC;AAAA,IACrB;AAEA,QAAI,CAAC,KAAM,QAAO;AAClB,QAAI,CAAC,KAAK,WAAW,GAAG,EAAG,QAAO,IAAI,IAAI;AAE1C,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ;AAAA,MACN,sDAAsD,GAAG;AAAA,MACzD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AASO,SAAS,cAAc,WAAmB,UAA6B;AAC5E,QAAM,iBAAiB,UAAU,YAAY,EAAE,QAAQ,WAAW,EAAE;AACpE,SAAO,SAAS,KAAK,CAAC,WAAW;AAC/B,UAAM,mBAAmB,OAAO,YAAY,EAAE,QAAQ,WAAW,EAAE;AACnE,WAAO,eAAe,SAAS,gBAAgB;AAAA,EACjD,CAAC;AACH;AAKA,SAAS,wBAAwB,OAAwB;AAEvD,QAAM,UAAU,MAAM,QAAQ,UAAU,EAAE;AAG1C,MAAI,cAAc,KAAK,OAAO,GAAG;AAC/B,WAAO;AAAA,EACT;AAGA,MAAI,UAAU,KAAK,OAAO,KAAK,sBAAsB,KAAK,KAAK,GAAG;AAChE,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAMO,SAAS,mBACd,QACA,gBACoC;AACpC,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,WAAW,kBAAkB;AACnC,QAAM,YAAoC,CAAC;AAE3C,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,QAAI,CAAC,cAAc,KAAK,QAAQ,GAAG;AAEjC,UAAI,CAAC,wBAAwB,KAAK,GAAG;AACnC,kBAAU,GAAG,IAAI;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAEA,SAAO,OAAO,KAAK,SAAS,EAAE,SAAS,IAAI,YAAY;AACzD;AAwDO,SAAS,uBACd,aACA,OACA,QACA,YACA,gBACM;AACN,QAAM,iBAAiB,eAAe,YAAY,KAAK,EAAE,SAAS;AAClE,QAAM,WAAW,SAAS,MAAM,KAAK,EAAE,SAAS;AAChD,QAAM,YAAY,UAAU,OAAO,KAAK,EAAE,SAAS;AACnD,QAAM,gBAAgB,cAAc,WAAW,KAAK,EAAE,SAAS;AAC/D,QAAM,oBAAoB,kBAAkB,eAAe,KAAK,EAAE,SAAS;AAE3E,MAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,aAAa,CAAC,iBAAiB,CAAC,mBAAmB;AACtF,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACF;AAKO,SAAS,yBACd,YACA,gBACA,QACA,kBACM;AACN,QAAM,gBAAgB,cAAc,WAAW,KAAK,EAAE,SAAS;AAC/D,QAAM,oBAAoB,kBAAkB,eAAe,KAAK,EAAE,SAAS;AAC3E,QAAM,YAAY,UAAU,OAAO,KAAK,EAAE,SAAS;AACnD,QAAM,sBAAsB,oBAAoB,iBAAiB,KAAK,EAAE,SAAS;AAEjF,MAAI,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,aAAa,CAAC,qBAAqB;AAC9E,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACF;AASO,SAAS,aAAa,OAAwB;AACnD,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAEhD,QAAM,aAAa;AACnB,SAAO,WAAW,KAAK,MAAM,KAAK,CAAC;AACrC;AAMA,IAAM,uBAAuB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,qBAAqB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,sBAAsB;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,qBAAqB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,SAAS,gBAAgB,WAAmB,UAA6B;AACvE,QAAM,aAAa,UAAU,KAAK;AAClC,SAAO,SAAS,KAAK,CAAC,YAAY,QAAQ,KAAK,UAAU,CAAC;AAC5D;AAcO,SAAS,eACd,QACA,YACoB;AAEpB,MAAI,YAAY;AACd,eAAW,CAAC,WAAW,SAAS,KAAK,WAAW,QAAQ,GAAG;AACzD,UAAI,cAAc,SAAS;AACzB,cAAM,QAAQ,OAAO,SAAS;AAC9B,YAAI,SAAS,aAAa,KAAK,GAAG;AAChC,iBAAO,MAAM,KAAK;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,aAAW,CAAC,WAAW,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,QAAI,gBAAgB,WAAW,oBAAoB,KAAK,aAAa,KAAK,GAAG;AAC3E,aAAO,MAAM,KAAK;AAAA,IACpB;AAAA,EACF;AAGA,aAAW,SAAS,OAAO,OAAO,MAAM,GAAG;AACzC,QAAI,aAAa,KAAK,GAAG;AACvB,aAAO,MAAM,KAAK;AAAA,IACpB;AAAA,EACF;AAEA,SAAO;AACT;AAeO,SAAS,eAAe,QAI7B;AACA,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,aAAW,CAAC,WAAW,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,UAAM,eAAe,OAAO,KAAK;AACjC,QAAI,CAAC,aAAc;AAGnB,QAAI,CAAC,YAAY,gBAAgB,WAAW,kBAAkB,GAAG;AAC/D,iBAAW;AAAA,IACb;AAGA,QAAI,CAAC,aAAa,gBAAgB,WAAW,mBAAmB,GAAG;AACjE,kBAAY;AAAA,IACd;AAGA,QAAI,CAAC,YAAY,gBAAgB,WAAW,kBAAkB,GAAG;AAC/D,iBAAW;AAAA,IACb;AAAA,EACF;AAEA,QAAM,SAAmE,CAAC;AAG1E,MAAI,UAAU;AACZ,WAAO,OAAO;AAAA,EAChB,WAES,aAAa,UAAU;AAC9B,WAAO,OAAO,GAAG,SAAS,IAAI,QAAQ;AACtC,WAAO,YAAY;AACnB,WAAO,WAAW;AAAA,EACpB,WAES,WAAW;AAClB,WAAO,YAAY;AAAA,EACrB,WAES,UAAU;AACjB,WAAO,WAAW;AAAA,EACpB;AAEA,SAAO;AACT;AAqBO,SAAS,wBACd,QACA,YAC+B;AAC/B,QAAM,QAAQ,eAAe,QAAQ,UAAU;AAG/C,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAEA,QAAM,aAAa,eAAe,MAAM;AAExC,SAAO;AAAA,IACL;AAAA,IACA,GAAG;AAAA,EACL;AACF;;;ACtZO,SAAS,mBAAmB,QAA6D;AAC9F,QAAM,EAAE,KAAK,UAAU,WAAW,MAAM,IAAI;AAC5C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,EACF;AACF;AAKO,SAAS,eACd,QAIW;AACX,QAAM,EAAE,KAAK,UAAU,WAAW,QAAQ,WAAW,IAAI;AACzD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,mBACd,QASe;AACf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,iBACd,QASa;AACb,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,mBACd,QAUe;AACf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAMO,SAAS,qBACd,QAKiB;AACjB,QAAM,EAAE,KAAK,UAAU,WAAW,cAAc,aAAa,UAAU,IAAI;AAC3E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAOO,SAAS,gBACd,QAIY;AACZ,QAAM,EAAE,KAAK,UAAU,WAAW,OAAO,WAAW,IAAI;AACxD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AACF;AAMO,SAAS,kBACd,QAQc;AACd,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA,gBAAgB,kBAAkB;AAAA,IAClC,QAAQ,UAAU;AAAA,IAClB;AAAA,IACA;AAAA,EACF;AACF;AAiBO,SAAS,mBACd,WACA,QACA,QACA,cACA,WACA,aACA,kBACe;AACf,QAAM,UAAyB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,yBACJ,qBAAqB,UACrB,iBACC,aAAa,cAAc,aAAa,kBAAkB,aAAa,kBACpE;AAAA,IACE,GAAI,aAAa,cAAc,EAAE,YAAY,aAAa,WAAW;AAAA,IACrE,GAAI,aAAa,kBAAkB,EAAE,gBAAgB,aAAa,eAAe;AAAA,IACjF,GAAI,aAAa,kBAAkB,EAAE,gBAAgB,aAAa,eAAe;AAAA,EACnF,IACA;AACN,QAAM,2BAA2B,oBAAoB;AAGrD,MAAI,aAAa;AACf,YAAQ,cAAc;AAAA,EACxB;AAGA,MAAI,WAAW;AACb,YAAQ,YAAY;AAAA,EACtB;AAGA,MAAI,iBAAiB,aAAa,SAAS,aAAa,UAAU,aAAa,SAAS;AACtF,YAAQ,eAAe;AAAA,MACrB,GAAI,aAAa,SAAS,EAAE,OAAO,aAAa,MAAM;AAAA,MACtD,GAAI,aAAa,UAAU,EAAE,QAAQ,aAAa,OAAO;AAAA,MACzD,GAAI,aAAa,UAAU,EAAE,QAAQ,aAAa,OAAO;AAAA,IAC3D;AAAA,EACF;AAEA,MACE,6BACC,yBAAyB,cACxB,yBAAyB,kBACzB,yBAAyB,iBAC3B;AACA,YAAQ,mBAAmB;AAAA,MACzB,GAAI,yBAAyB,cAAc;AAAA,QACzC,YAAY,yBAAyB;AAAA,MACvC;AAAA,MACA,GAAI,yBAAyB,kBAAkB;AAAA,QAC7C,gBAAgB,yBAAyB;AAAA,MAC3C;AAAA,MACA,GAAI,yBAAyB,kBAAkB;AAAA,QAC7C,gBAAgB,yBAAyB;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AASO,IAAM,iBAAiB;AAKvB,SAAS,YAAY,QAA0C;AACpE,QAAM,UAA4B,CAAC;AACnC,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK,gBAAgB;AACtD,YAAQ,KAAK,OAAO,MAAM,GAAG,IAAI,cAAc,CAAC;AAAA,EAClD;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/payload.ts","../src/types.ts","../src/utils.ts"],"sourcesContent":["import { v7 as uuidv7 } from \"uuid\"\nimport type {\n  BillingEvent,\n  BillingStatus,\n  CalendarEvent,\n  CalendarProvider,\n  CustomEvent,\n  CustomerTraits,\n  EngagementEvent,\n  ExplicitJourneyStage,\n  FormEvent,\n  IdentifyEvent,\n  IdentifyTraits,\n  IngestPayload,\n  PageviewEvent,\n  PayloadCustomerIdentity,\n  PayloadUserIdentity,\n  SourceType,\n  StageEvent,\n  TrackerEvent,\n} from \"./types\"\nimport { extractPathFromUrl, extractUtmParams } from \"./utils\"\n\n// ============================================\n// EVENT BUILDERS\n// ============================================\n\ninterface BaseEventParams {\n  url: string\n  referrer?: string\n  timestamp?: number\n}\n\n/**\n * Build a pageview event.\n */\nexport function buildPageviewEvent(params: BaseEventParams & { title?: string }): PageviewEvent {\n  const { url, referrer, timestamp, title } = params\n  return {\n    uuid: uuidv7(),\n    type: \"pageview\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    title,\n  }\n}\n\n/**\n * Build a form event.\n */\nexport function buildFormEvent(\n  params: BaseEventParams & {\n    formId?: string\n    formFields?: Record<string, string>\n  },\n): FormEvent {\n  const { url, referrer, timestamp, formId, formFields } = params\n  return {\n    uuid: uuidv7(),\n    type: \"form\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    formId,\n    formFields,\n  }\n}\n\n/**\n * Build an identify event.\n */\nexport function buildIdentifyEvent(\n  params: BaseEventParams & {\n    email?: string\n    userId?: string\n    fingerprint?: string\n    traits?: IdentifyTraits\n    customerId?: string\n    customerTraits?: CustomerTraits\n  },\n): IdentifyEvent {\n  const {\n    url,\n    referrer,\n    timestamp,\n    email,\n    userId,\n    fingerprint,\n    traits,\n    customerId,\n    customerTraits,\n  } = params\n  return {\n    uuid: uuidv7(),\n    type: \"identify\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    email,\n    userId,\n    fingerprint,\n    customerId,\n    customerTraits,\n    traits,\n  }\n}\n\n/**\n * Build a custom event.\n */\nexport function buildCustomEvent(\n  params: BaseEventParams & {\n    eventName: string\n    properties?: Record<string, string | number | boolean | null>\n    email?: string\n    userId?: string\n    fingerprint?: string\n    customerId?: string\n  },\n): CustomEvent {\n  const {\n    url,\n    referrer,\n    timestamp,\n    eventName,\n    properties,\n    email,\n    userId,\n    fingerprint,\n    customerId,\n  } = params\n  return {\n    uuid: uuidv7(),\n    type: \"custom\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    eventName,\n    email,\n    userId,\n    fingerprint,\n    customerId,\n    properties,\n  }\n}\n\n/**\n * Build a calendar booking event.\n */\nexport function buildCalendarEvent(\n  params: BaseEventParams & {\n    provider: CalendarProvider\n    eventType?: string\n    startTime?: string\n    endTime?: string\n    duration?: number\n    isRecurring?: boolean\n    inviteeEmail?: string\n    inviteeName?: string\n  },\n): CalendarEvent {\n  const {\n    url,\n    referrer,\n    timestamp,\n    provider,\n    eventType,\n    startTime,\n    endTime,\n    duration,\n    isRecurring,\n    inviteeEmail,\n    inviteeName,\n  } = params\n  return {\n    uuid: uuidv7(),\n    type: \"calendar\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    provider,\n    eventType,\n    startTime,\n    endTime,\n    duration,\n    isRecurring,\n    inviteeEmail,\n    inviteeName,\n  }\n}\n\n/**\n * Build an engagement event.\n * Captures active time on page for session analytics.\n */\nexport function buildEngagementEvent(\n  params: BaseEventParams & {\n    activeTimeMs: number\n    totalTimeMs: number\n    sessionId: string\n  },\n): EngagementEvent {\n  const { url, referrer, timestamp, activeTimeMs, totalTimeMs, sessionId } = params\n  return {\n    uuid: uuidv7(),\n    type: \"engagement\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    activeTimeMs,\n    totalTimeMs,\n    sessionId,\n  }\n}\n\n/**\n * Build a stage event.\n * Used to explicitly set customer journey stage (activated, engaged, inactive).\n * discovered/signed_up stages are inferred from identify calls.\n */\nexport function buildStageEvent(\n  params: BaseEventParams & {\n    stage: ExplicitJourneyStage\n    properties?: Record<string, string | number | boolean | null>\n  },\n): StageEvent {\n  const { url, referrer, timestamp, stage, properties } = params\n  return {\n    uuid: uuidv7(),\n    type: \"stage\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    stage,\n    properties,\n  }\n}\n\n/**\n * Build a billing event.\n * Used to set customer billing status (trialing, paid, churned).\n */\nexport function buildBillingEvent(\n  params: BaseEventParams & {\n    status: BillingStatus\n    customerId?: string\n    stripeCustomerId?: string\n    properties?: Record<string, string | number | boolean | null>\n  },\n): BillingEvent {\n  const { url, referrer, timestamp, status, customerId, stripeCustomerId, properties } = params\n  return {\n    uuid: uuidv7(),\n    type: \"billing\",\n    timestamp: timestamp ?? Date.now(),\n    url,\n    path: extractPathFromUrl(url),\n    referrer,\n    utm: extractUtmParams(url),\n    status,\n    customerId,\n    stripeCustomerId,\n    properties,\n  }\n}\n\n// ============================================\n// PAYLOAD BUILDER\n// ============================================\n\n/**\n * Build an ingest payload from events.\n *\n * @param visitorId - The anonymous visitor ID from browser cookie/storage\n * @param source - The event source (client, server, integration)\n * @param events - Array of events to send\n * @param userIdentity - Optional user identity for immediate resolution (from setUser in SPA)\n * @param sessionId - Optional session ID for grouping events (browser SDK only)\n * @param fingerprint - Optional device identifier for server-side anonymous tracking\n * @param customerIdentity - Optional customer identity for batch attribution. `customerId`-only\n * batches are valid and remain provisional until a later identify(email, customerId) call\n * links that external account/workspace to a resolved customer.\n */\nexport function buildIngestPayload(\n  visitorId: string,\n  source: SourceType,\n  events: TrackerEvent[],\n  userIdentity?: PayloadUserIdentity,\n  sessionId?: string,\n  fingerprint?: string,\n  customerIdentity?: PayloadCustomerIdentity,\n): IngestPayload {\n  const payload: IngestPayload = {\n    visitorId,\n    source,\n    events,\n  }\n  const legacyCustomerIdentity =\n    customerIdentity === undefined &&\n    userIdentity &&\n    (userIdentity.customerId || userIdentity.customerTraits)\n      ? {\n          ...(userIdentity.customerId && { customerId: userIdentity.customerId }),\n          ...(userIdentity.customerTraits && { customerTraits: userIdentity.customerTraits }),\n        }\n      : undefined\n  const resolvedCustomerIdentity = customerIdentity ?? legacyCustomerIdentity\n\n  // Only include fingerprint if provided (server SDK only)\n  if (fingerprint) {\n    payload.fingerprint = fingerprint\n  }\n\n  // Only include sessionId if provided (browser SDK only)\n  if (sessionId) {\n    payload.sessionId = sessionId\n  }\n\n  // Only include userIdentity if it has actual values\n  if (userIdentity && (userIdentity.email || userIdentity.userId || userIdentity.traits)) {\n    payload.userIdentity = {\n      ...(userIdentity.email && { email: userIdentity.email }),\n      ...(userIdentity.userId && { userId: userIdentity.userId }),\n      ...(userIdentity.traits && { traits: userIdentity.traits }),\n    }\n  }\n\n  if (\n    resolvedCustomerIdentity &&\n    (resolvedCustomerIdentity.customerId || resolvedCustomerIdentity.customerTraits)\n  ) {\n    payload.customerIdentity = {\n      ...(resolvedCustomerIdentity.customerId && {\n        customerId: resolvedCustomerIdentity.customerId,\n      }),\n      ...(resolvedCustomerIdentity.customerTraits && {\n        customerTraits: resolvedCustomerIdentity.customerTraits,\n      }),\n    }\n  }\n\n  return payload\n}\n\n// ============================================\n// BATCH HELPERS\n// ============================================\n\n/**\n * Maximum number of events in a single batch.\n */\nexport const MAX_BATCH_SIZE = 100\n\n/**\n * Split events into batches of MAX_BATCH_SIZE.\n */\nexport function batchEvents(events: TrackerEvent[]): TrackerEvent[][] {\n  const batches: TrackerEvent[][] = []\n  for (let i = 0; i < events.length; i += MAX_BATCH_SIZE) {\n    batches.push(events.slice(i, i + MAX_BATCH_SIZE))\n  }\n  return batches\n}\n","// ============================================\n// EVENT TYPES\n// ============================================\n\nexport type EventType =\n  | \"pageview\"\n  | \"form\"\n  | \"identify\"\n  | \"custom\"\n  | \"calendar\"\n  | \"engagement\"\n  | \"stage\"\n  | \"billing\"\n\n// Only explicit stages - discovered/signed_up are inferred from identify calls\nexport type ExplicitJourneyStage = \"activated\" | \"engaged\" | \"inactive\"\n\nexport type BillingStatus = \"trialing\" | \"paid\" | \"churned\"\n\nexport type CalendarProvider = \"cal.com\" | \"calendly\" | \"unknown\"\n\nexport type SourceType = \"client\" | \"server\" | \"integration\"\n\n// ============================================\n// UTM PARAMETERS\n// ============================================\n\nexport interface UtmParams {\n  source?: string\n  medium?: string\n  campaign?: string\n  term?: string\n  content?: string\n}\n\n// ============================================\n// TRACKER CONFIGURATION\n// ============================================\n\nexport interface TrackerConfig {\n  publicKey: string\n  apiHost?: string // default: 'https://app.outlit.ai'\n}\n\n// ============================================\n// BROWSER-SPECIFIC TYPES (anonymous allowed)\n// visitorId is auto-managed by the browser SDK\n// ============================================\n\nexport interface BrowserTrackOptions {\n  eventName: string\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport interface BrowserIdentifyOptions extends CustomerAttribution {\n  email?: string\n  /** Your system-owned user/contact ID. */\n  userId?: string\n  /** User/contact traits. */\n  traits?: IdentifyTraits\n  /** Customer/account-level traits. */\n  customerTraits?: CustomerTraits\n}\n\n// ============================================\n// SERVER-SPECIFIC TYPES\n// Track calls can use user identity, customer attribution, or both.\n// Identify calls remain user-scoped and require email or userId.\n// ============================================\n\n/**\n * Base server-side user identity.\n * Track calls may use customerId without these fields.\n * Identify calls still require email or userId at runtime.\n * `customerId`-only track calls are valid immediately, but they stay provisional\n * until the same customer/account/workspace later appears on identify() with\n * the matching customerId and an email.\n *\n * - fingerprint: Device identifier for anonymous tracking (can be linked later)\n * - email: User's email address (definitive identity, resolves immediately)\n * - userId: Your system-owned user/contact ID\n */\nexport interface ServerIdentity {\n  fingerprint?: string\n  email?: string\n  /** Your system-owned user/contact ID. */\n  userId?: string\n}\n\nexport interface CustomerAttribution {\n  /** Your system-owned customer/account/workspace ID. */\n  customerId?: string\n}\n\n// ============================================\n// TRAITS\n// ============================================\n\nexport interface CustomerTraits {\n  /** Customer's billing plan */\n  plan?: string\n  /** Allow additional custom properties */\n  [key: string]: string | number | boolean | null | undefined\n}\n\n/**\n * Traits for identify calls.\n * These are user/contact traits, not customer/account traits.\n */\nexport interface IdentifyTraits {\n  /** User-level traits */\n  [key: string]: string | number | boolean | null | undefined\n}\n\nexport interface ServerTrackOptions extends ServerIdentity, CustomerAttribution {\n  eventName: string\n  properties?: Record<string, string | number | boolean | null>\n  timestamp?: number\n}\n\nexport interface ServerIdentifyOptions extends ServerIdentity, CustomerAttribution {\n  traits?: IdentifyTraits\n  customerTraits?: CustomerTraits\n}\n\n/**\n * Customer identity for SDK billing methods.\n * Public billing calls should use `customerId`.\n */\nexport interface CustomerIdentifier extends CustomerAttribution {\n  /**\n   * @deprecated Stripe customer identifier.\n   * Billing attribution should use `customerId` publicly.\n   */\n  stripeCustomerId?: string\n}\n\n// ============================================\n// INTERNAL EVENT TYPES\n// These are the full event objects sent to the API\n// ============================================\n\ninterface BaseEvent {\n  uuid?: string\n  type: EventType\n  timestamp: number // Unix timestamp in milliseconds\n  url: string\n  path: string\n  referrer?: string\n  utm?: UtmParams\n}\n\nexport interface PageviewEvent extends BaseEvent {\n  type: \"pageview\"\n  title?: string\n}\n\nexport interface FormEvent extends BaseEvent {\n  type: \"form\"\n  formId?: string\n  formFields?: Record<string, string>\n}\n\nexport interface IdentifyEvent extends BaseEvent {\n  type: \"identify\"\n  email?: string\n  userId?: string\n  fingerprint?: string\n  customerId?: string\n  customerTraits?: CustomerTraits\n  traits?: IdentifyTraits\n}\n\nexport interface CustomEvent extends BaseEvent {\n  type: \"custom\"\n  eventName: string\n  email?: string\n  userId?: string\n  fingerprint?: string\n  customerId?: string\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport interface CalendarEvent extends BaseEvent {\n  type: \"calendar\"\n  provider: CalendarProvider\n  eventType?: string // e.g., \"30 Minute Meeting\"\n  startTime?: string // ISO timestamp\n  endTime?: string // ISO timestamp\n  duration?: number // Duration in minutes\n  isRecurring?: boolean\n  /** Available when identity is passed via webhooks or manual integration */\n  inviteeEmail?: string\n  inviteeName?: string\n}\n\nexport interface EngagementEvent extends BaseEvent {\n  type: \"engagement\"\n  /** Time in milliseconds the user was actively engaged (visible tab + user interactions) */\n  activeTimeMs: number\n  /** Total wall-clock time in milliseconds on the page */\n  totalTimeMs: number\n  /** Session ID for grouping engagement events. Resets after 30 min of inactivity or tab close. */\n  sessionId: string\n}\n\nexport interface StageEvent extends BaseEvent {\n  type: \"stage\"\n  /** The journey stage to set (only explicit stages, discovered/signed_up are inferred) */\n  stage: ExplicitJourneyStage\n  /** Optional properties for context */\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport interface BillingEvent extends BaseEvent {\n  type: \"billing\"\n  /** The billing status to set for a customer */\n  status: BillingStatus\n  /** Optional customer identifiers */\n  customerId?: string\n  stripeCustomerId?: string\n  /** Optional properties for context */\n  properties?: Record<string, string | number | boolean | null>\n}\n\nexport type TrackerEvent =\n  | PageviewEvent\n  | FormEvent\n  | IdentifyEvent\n  | CustomEvent\n  | CalendarEvent\n  | EngagementEvent\n  | StageEvent\n  | BillingEvent\n\n// ============================================\n// INGEST PAYLOAD\n// This is what gets sent to the API\n// ============================================\n\n/**\n * User identity for payload-level resolution.\n * Used by browser SDK when user is logged in (via setUser).\n * Customer attribution is carried separately in `customerIdentity`.\n */\nexport interface PayloadUserIdentity {\n  email?: string\n  /** Your system-owned user/contact ID. */\n  userId?: string\n  /** User/contact traits. */\n  traits?: IdentifyTraits\n  /**\n   * @deprecated Use payload-level `customerIdentity.customerId` instead.\n   * Kept for one compatibility window while callers migrate.\n   */\n  customerId?: string\n  /**\n   * @deprecated Use payload-level `customerIdentity.customerTraits` instead.\n   * Kept for one compatibility window while callers migrate.\n   */\n  customerTraits?: CustomerTraits\n}\n\n/**\n * Customer identity for payload-level attribution.\n * Used by browser SDK to attach account/workspace context to a batch.\n * `customerId`-only attribution is valid and remains provisional until a later\n * identify(email, customerId) call links that external account/workspace to a resolved customer.\n */\nexport interface PayloadCustomerIdentity extends CustomerAttribution {\n  /** Customer/account traits. */\n  customerTraits?: CustomerTraits\n}\n\nexport interface IngestPayload {\n  visitorId?: string // Required for pixel, optional for server\n  source: SourceType\n  events: TrackerEvent[]\n  /**\n   * Device identifier for anonymous tracking.\n   * Events with fingerprint can be linked to users later via identify.\n   * Only present for server-side events.\n   */\n  fingerprint?: string\n  /**\n   * Session ID for grouping all events in this batch.\n   * Only present for browser (client) source events.\n   * Used to correlate pageviews, forms, custom events, and engagement\n   * within the same browsing session.\n   */\n  sessionId?: string\n  /**\n   * User identity for this batch of events.\n   * When present, the server can resolve directly to CustomerContact\n   * instead of relying on anonymous visitor flow.\n   *\n   * This is set by the browser SDK when setUser() has been called,\n   * allowing immediate identity resolution for SPA/React apps.\n   */\n  userIdentity?: PayloadUserIdentity\n  /**\n   * Customer/account identity for this batch of events.\n   * Used to attribute browser batches to a customer/workspace even when\n   * the customer fields are not present on every event.\n   */\n  customerIdentity?: PayloadCustomerIdentity\n}\n\n// ============================================\n// API RESPONSE\n// ============================================\n\nexport interface IngestResponse {\n  success: boolean\n  processed: number\n  errors?: Array<{\n    index: number\n    message: string\n  }>\n}\n\n// ============================================\n// CONSTANTS\n// ============================================\n\nexport const DEFAULT_API_HOST = \"https://app.outlit.ai\"\n\n// Re-export for convenience\nexport type { PayloadUserIdentity as UserIdentity }\n\nexport const DEFAULT_DENIED_FORM_FIELDS = [\n  \"password\",\n  \"passwd\",\n  \"pass\",\n  \"pwd\",\n  \"token\",\n  \"secret\",\n  \"api_key\",\n  \"apikey\",\n  \"api-key\",\n  \"credit_card\",\n  \"creditcard\",\n  \"credit-card\",\n  \"cc_number\",\n  \"ccnumber\",\n  \"card_number\",\n  \"cardnumber\",\n  \"cvv\",\n  \"cvc\",\n  \"ssn\",\n  \"social_security\",\n  \"socialsecurity\",\n  \"bank_account\",\n  \"bankaccount\",\n  \"routing_number\",\n  \"routingnumber\",\n]\n","import { DEFAULT_DENIED_FORM_FIELDS, type UtmParams } from \"./types\"\n\n// ============================================\n// UTM EXTRACTION\n// ============================================\n\n/**\n * Extract UTM parameters from a URL.\n */\nexport function extractUtmParams(url: string): UtmParams | undefined {\n  try {\n    const urlObj = new URL(url)\n    const params = urlObj.searchParams\n\n    const utm: UtmParams = {}\n\n    if (params.has(\"utm_source\")) utm.source = params.get(\"utm_source\") ?? undefined\n    if (params.has(\"utm_medium\")) utm.medium = params.get(\"utm_medium\") ?? undefined\n    if (params.has(\"utm_campaign\")) utm.campaign = params.get(\"utm_campaign\") ?? undefined\n    if (params.has(\"utm_term\")) utm.term = params.get(\"utm_term\") ?? undefined\n    if (params.has(\"utm_content\")) utm.content = params.get(\"utm_content\") ?? undefined\n\n    return Object.keys(utm).length > 0 ? utm : undefined\n  } catch (error) {\n    console.warn(`[Outlit] Failed to parse URL for UTM extraction: \"${url}\"`, error)\n    return undefined\n  }\n}\n\n/**\n * Extract path from a URL.\n */\nexport function extractPathFromUrl(url: string): string {\n  try {\n    const urlObj = new URL(url)\n    let path = urlObj.pathname\n    const hash = urlObj.hash\n\n    // For file:// or custom protocol URLs with no real hostname (common in Electron),\n    // the meaningful route is typically stored in the hash fragment.\n    if (hash && hash.length > 1 && (!urlObj.hostname || urlObj.protocol === \"file:\")) {\n      path = hash.replace(/^#/, \"\")\n    }\n    // For web hash-routing SPAs (e.g. \"/#/settings\"), prefer hash when the\n    // pathname is an SPA entry point.\n    else if (\n      hash.startsWith(\"#/\") &&\n      (urlObj.pathname === \"/\" || urlObj.pathname.endsWith(\"/index.html\"))\n    ) {\n      path = hash.slice(1)\n    }\n\n    if (!path) return \"/\"\n    if (!path.startsWith(\"/\")) return `/${path}`\n\n    return path\n  } catch (error) {\n    console.warn(\n      `[Outlit] Failed to parse URL for path extraction: \"${url}\", defaulting to \"/\"`,\n      error,\n    )\n    return \"/\"\n  }\n}\n\n// ============================================\n// FORM FIELD SANITIZATION\n// ============================================\n\n/**\n * Check if a field name should be denied (case-insensitive).\n */\nexport function isFieldDenied(fieldName: string, denylist: string[]): boolean {\n  const normalizedName = fieldName.toLowerCase().replace(/[-_\\s]/g, \"\")\n  return denylist.some((denied) => {\n    const normalizedDenied = denied.toLowerCase().replace(/[-_\\s]/g, \"\")\n    return normalizedName.includes(normalizedDenied)\n  })\n}\n\n/**\n * Check if a value looks like sensitive data (e.g., credit card number).\n */\nfunction looksLikeSensitiveValue(value: string): boolean {\n  // Remove spaces and dashes\n  const cleaned = value.replace(/[\\s-]/g, \"\")\n\n  // Check for credit card patterns (13-19 digits)\n  if (/^\\d{13,19}$/.test(cleaned)) {\n    return true\n  }\n\n  // Check for SSN pattern (9 digits)\n  if (/^\\d{9}$/.test(cleaned) || /^\\d{3}-\\d{2}-\\d{4}$/.test(value)) {\n    return true\n  }\n\n  return false\n}\n\n/**\n * Sanitize form fields by removing sensitive data.\n * Returns a new object with denied fields removed.\n */\nexport function sanitizeFormFields(\n  fields: Record<string, string> | undefined,\n  customDenylist?: string[],\n): Record<string, string> | undefined {\n  if (!fields) return undefined\n\n  const denylist = customDenylist ?? DEFAULT_DENIED_FORM_FIELDS\n  const sanitized: Record<string, string> = {}\n\n  for (const [key, value] of Object.entries(fields)) {\n    if (!isFieldDenied(key, denylist)) {\n      // Also check for credit card patterns in values\n      if (!looksLikeSensitiveValue(value)) {\n        sanitized[key] = value\n      }\n    }\n  }\n\n  return Object.keys(sanitized).length > 0 ? sanitized : undefined\n}\n\n// ============================================\n// VISITOR ID DERIVATION (for server SDK)\n// ============================================\n\n/**\n * Derive a deterministic visitor ID from email and/or userId.\n * This is used by the server SDK to create consistent IDs for API compatibility.\n *\n * Uses a simple hash to create a UUID-like string that will be consistent\n * for the same email/userId combination.\n */\nexport function deriveVisitorIdFromIdentity(email?: string, userId?: string): string {\n  const identity = [email?.toLowerCase(), userId].filter(Boolean).join(\"|\")\n  if (!identity) {\n    throw new Error(\"Either email or userId must be provided\")\n  }\n\n  // Simple hash function to create a deterministic UUID-like string\n  let hash = 0\n  for (let i = 0; i < identity.length; i++) {\n    const char = identity.charCodeAt(i)\n    hash = (hash << 5) - hash + char\n    hash = hash & hash // Convert to 32-bit integer\n  }\n\n  // Convert to hex and format as UUID-like string\n  const hex = Math.abs(hash).toString(16).padStart(8, \"0\")\n  const part1 = hex.slice(0, 8)\n  const part2 = identity.length.toString(16).padStart(4, \"0\")\n  const part3 = \"4000\" // Version 4 UUID marker\n  const part4 = (((hash >>> 16) & 0x0fff) | 0x8000).toString(16)\n  const part5 = Math.abs(hash * 31)\n    .toString(16)\n    .padStart(12, \"0\")\n    .slice(0, 12)\n\n  return `${part1}-${part2}-${part3}-${part4}-${part5}`\n}\n\n// ============================================\n// VALIDATION\n// ============================================\n\n/**\n * Validate that at least one identity field is provided.\n * Used by the server SDK to enforce identity requirements.\n *\n * Valid identities:\n * - fingerprint: Device identifier (for anonymous tracking, can be linked later)\n * - email: User's email (definitive identity)\n * - userId: Your system-owned user/contact ID\n * - customerId: Your system-owned customer/account/workspace ID\n */\nexport function validateServerIdentity(\n  fingerprint?: string,\n  email?: string,\n  userId?: string,\n  customerId?: string,\n): void {\n  const hasFingerprint = fingerprint && fingerprint.trim().length > 0\n  const hasEmail = email && email.trim().length > 0\n  const hasUserId = userId && userId.trim().length > 0\n  const hasCustomerId = customerId && customerId.trim().length > 0\n\n  if (!hasFingerprint && !hasEmail && !hasUserId && !hasCustomerId) {\n    throw new Error(\n      \"Server SDK requires at least one of: fingerprint, email, userId, or customerId for track calls. \" +\n        \"Use fingerprint/email/userId for user-scoped tracking or customerId for customer-only tracking.\",\n    )\n  }\n}\n\n/**\n * Validate that at least one customer identifier is provided for billing calls.\n */\nexport function validateCustomerIdentity(customerId?: string, stripeCustomerId?: string): void {\n  const hasCustomerId = customerId && customerId.trim().length > 0\n  const hasStripeCustomerId = stripeCustomerId && stripeCustomerId.trim().length > 0\n\n  if (!hasCustomerId && !hasStripeCustomerId) {\n    throw new Error(\n      \"Billing methods require customerId or stripeCustomerId. \" +\n        \"Use customerId for your system-owned account ID.\",\n    )\n  }\n}\n\n// ============================================\n// AUTO-IDENTIFY: EMAIL & NAME EXTRACTION\n// ============================================\n\n/**\n * Validate that a string looks like a valid email address.\n */\nexport function isValidEmail(value: string): boolean {\n  if (!value || typeof value !== \"string\") return false\n  // Basic email regex - intentionally permissive to avoid false negatives\n  const emailRegex = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/\n  return emailRegex.test(value.trim())\n}\n\n/**\n * Email field name patterns (case-insensitive, normalized).\n * Order matters - more specific patterns first.\n */\nconst EMAIL_FIELD_PATTERNS = [\n  /^e?-?mail$/i,\n  /^email[_-]?address$/i,\n  /^user[_-]?email$/i,\n  /^work[_-]?email$/i,\n  /^contact[_-]?email$/i,\n  /^primary[_-]?email$/i,\n  /^business[_-]?email$/i,\n]\n\n/**\n * Full name field patterns.\n */\nconst FULL_NAME_PATTERNS = [\n  /^name$/i,\n  /^full[_-]?name$/i,\n  /^your[_-]?name$/i,\n  /^customer[_-]?name$/i,\n  /^contact[_-]?name$/i,\n  /^display[_-]?name$/i,\n]\n\n/**\n * First name field patterns.\n */\nconst FIRST_NAME_PATTERNS = [\n  /^first[_-]?name$/i,\n  /^firstname$/i,\n  /^first$/i,\n  /^fname$/i,\n  /^given[_-]?name$/i,\n  /^forename$/i,\n]\n\n/**\n * Last name field patterns.\n */\nconst LAST_NAME_PATTERNS = [\n  /^last[_-]?name$/i,\n  /^lastname$/i,\n  /^last$/i,\n  /^lname$/i,\n  /^surname$/i,\n  /^family[_-]?name$/i,\n]\n\n/**\n * Check if a field name matches any of the given patterns.\n */\nfunction matchesPatterns(fieldName: string, patterns: RegExp[]): boolean {\n  const normalized = fieldName.trim()\n  return patterns.some((pattern) => pattern.test(normalized))\n}\n\n/**\n * Find an email value from form fields.\n *\n * Priority:\n * 1. Fields with input type=\"email\" (if inputTypes map provided)\n * 2. Field names matching email patterns\n * 3. Any field with a value that looks like an email\n *\n * @param fields - Form field key-value pairs\n * @param inputTypes - Optional map of field names to input types\n * @returns The email value if found, undefined otherwise\n */\nexport function findEmailField(\n  fields: Record<string, string>,\n  inputTypes?: Map<string, string>,\n): string | undefined {\n  // Priority 1: Check fields with type=\"email\"\n  if (inputTypes) {\n    for (const [fieldName, inputType] of inputTypes.entries()) {\n      if (inputType === \"email\") {\n        const value = fields[fieldName]\n        if (value && isValidEmail(value)) {\n          return value.trim()\n        }\n      }\n    }\n  }\n\n  // Priority 2: Check field names matching email patterns\n  for (const [fieldName, value] of Object.entries(fields)) {\n    if (matchesPatterns(fieldName, EMAIL_FIELD_PATTERNS) && isValidEmail(value)) {\n      return value.trim()\n    }\n  }\n\n  // Priority 3: Any field with email-like value (fallback)\n  for (const value of Object.values(fields)) {\n    if (isValidEmail(value)) {\n      return value.trim()\n    }\n  }\n\n  return undefined\n}\n\n/**\n * Extract name fields from form data.\n *\n * Looks for:\n * - Full name fields (name, full_name, etc.)\n * - First name fields (first_name, fname, etc.)\n * - Last name fields (last_name, lname, etc.)\n *\n * If only first/last names are found, combines them into a full name.\n *\n * @param fields - Form field key-value pairs\n * @returns Object with name, firstName, and/or lastName if found\n */\nexport function findNameFields(fields: Record<string, string>): {\n  name?: string\n  firstName?: string\n  lastName?: string\n} {\n  let fullName: string | undefined\n  let firstName: string | undefined\n  let lastName: string | undefined\n\n  for (const [fieldName, value] of Object.entries(fields)) {\n    const trimmedValue = value?.trim()\n    if (!trimmedValue) continue\n\n    // Check for full name\n    if (!fullName && matchesPatterns(fieldName, FULL_NAME_PATTERNS)) {\n      fullName = trimmedValue\n    }\n\n    // Check for first name\n    if (!firstName && matchesPatterns(fieldName, FIRST_NAME_PATTERNS)) {\n      firstName = trimmedValue\n    }\n\n    // Check for last name\n    if (!lastName && matchesPatterns(fieldName, LAST_NAME_PATTERNS)) {\n      lastName = trimmedValue\n    }\n  }\n\n  const result: { name?: string; firstName?: string; lastName?: string } = {}\n\n  // If we have a full name, use it\n  if (fullName) {\n    result.name = fullName\n  }\n  // If we have first and last, combine them\n  else if (firstName && lastName) {\n    result.name = `${firstName} ${lastName}`\n    result.firstName = firstName\n    result.lastName = lastName\n  }\n  // If we only have first name\n  else if (firstName) {\n    result.firstName = firstName\n  }\n  // If we only have last name\n  else if (lastName) {\n    result.lastName = lastName\n  }\n\n  return result\n}\n\n/**\n * Identity extracted from a form submission.\n */\nexport interface ExtractedIdentity {\n  email: string\n  name?: string\n  firstName?: string\n  lastName?: string\n}\n\n/**\n * Extract identity information (email + name) from form fields.\n *\n * Returns undefined if no valid email is found (email is required for identification).\n *\n * @param fields - Form field key-value pairs\n * @param inputTypes - Optional map of field names to input types\n * @returns Extracted identity with email and optional name fields, or undefined\n */\nexport function extractIdentityFromForm(\n  fields: Record<string, string>,\n  inputTypes?: Map<string, string>,\n): ExtractedIdentity | undefined {\n  const email = findEmailField(fields, inputTypes)\n\n  // Email is required for identification\n  if (!email) {\n    return undefined\n  }\n\n  const nameFields = findNameFields(fields)\n\n  return {\n    email,\n    ...nameFields,\n  }\n}\n"],"mappings":";AAAA,SAAS,MAAM,cAAc;;;ACqUtB,IAAM,mBAAmB;AAKzB,IAAM,6BAA6B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;;;AC3VO,SAAS,iBAAiB,KAAoC;AACnE,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,UAAM,SAAS,OAAO;AAEtB,UAAM,MAAiB,CAAC;AAExB,QAAI,OAAO,IAAI,YAAY,EAAG,KAAI,SAAS,OAAO,IAAI,YAAY,KAAK;AACvE,QAAI,OAAO,IAAI,YAAY,EAAG,KAAI,SAAS,OAAO,IAAI,YAAY,KAAK;AACvE,QAAI,OAAO,IAAI,cAAc,EAAG,KAAI,WAAW,OAAO,IAAI,cAAc,KAAK;AAC7E,QAAI,OAAO,IAAI,UAAU,EAAG,KAAI,OAAO,OAAO,IAAI,UAAU,KAAK;AACjE,QAAI,OAAO,IAAI,aAAa,EAAG,KAAI,UAAU,OAAO,IAAI,aAAa,KAAK;AAE1E,WAAO,OAAO,KAAK,GAAG,EAAE,SAAS,IAAI,MAAM;AAAA,EAC7C,SAAS,OAAO;AACd,YAAQ,KAAK,qDAAqD,GAAG,KAAK,KAAK;AAC/E,WAAO;AAAA,EACT;AACF;AAKO,SAAS,mBAAmB,KAAqB;AACtD,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,QAAI,OAAO,OAAO;AAClB,UAAM,OAAO,OAAO;AAIpB,QAAI,QAAQ,KAAK,SAAS,MAAM,CAAC,OAAO,YAAY,OAAO,aAAa,UAAU;AAChF,aAAO,KAAK,QAAQ,MAAM,EAAE;AAAA,IAC9B,WAIE,KAAK,WAAW,IAAI,MACnB,OAAO,aAAa,OAAO,OAAO,SAAS,SAAS,aAAa,IAClE;AACA,aAAO,KAAK,MAAM,CAAC;AAAA,IACrB;AAEA,QAAI,CAAC,KAAM,QAAO;AAClB,QAAI,CAAC,KAAK,WAAW,GAAG,EAAG,QAAO,IAAI,IAAI;AAE1C,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ;AAAA,MACN,sDAAsD,GAAG;AAAA,MACzD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AASO,SAAS,cAAc,WAAmB,UAA6B;AAC5E,QAAM,iBAAiB,UAAU,YAAY,EAAE,QAAQ,WAAW,EAAE;AACpE,SAAO,SAAS,KAAK,CAAC,WAAW;AAC/B,UAAM,mBAAmB,OAAO,YAAY,EAAE,QAAQ,WAAW,EAAE;AACnE,WAAO,eAAe,SAAS,gBAAgB;AAAA,EACjD,CAAC;AACH;AAKA,SAAS,wBAAwB,OAAwB;AAEvD,QAAM,UAAU,MAAM,QAAQ,UAAU,EAAE;AAG1C,MAAI,cAAc,KAAK,OAAO,GAAG;AAC/B,WAAO;AAAA,EACT;AAGA,MAAI,UAAU,KAAK,OAAO,KAAK,sBAAsB,KAAK,KAAK,GAAG;AAChE,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAMO,SAAS,mBACd,QACA,gBACoC;AACpC,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,WAAW,kBAAkB;AACnC,QAAM,YAAoC,CAAC;AAE3C,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,QAAI,CAAC,cAAc,KAAK,QAAQ,GAAG;AAEjC,UAAI,CAAC,wBAAwB,KAAK,GAAG;AACnC,kBAAU,GAAG,IAAI;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAEA,SAAO,OAAO,KAAK,SAAS,EAAE,SAAS,IAAI,YAAY;AACzD;AAuDO,SAAS,uBACd,aACA,OACA,QACA,YACM;AACN,QAAM,iBAAiB,eAAe,YAAY,KAAK,EAAE,SAAS;AAClE,QAAM,WAAW,SAAS,MAAM,KAAK,EAAE,SAAS;AAChD,QAAM,YAAY,UAAU,OAAO,KAAK,EAAE,SAAS;AACnD,QAAM,gBAAgB,cAAc,WAAW,KAAK,EAAE,SAAS;AAE/D,MAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,aAAa,CAAC,eAAe;AAChE,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACF;AAKO,SAAS,yBAAyB,YAAqB,kBAAiC;AAC7F,QAAM,gBAAgB,cAAc,WAAW,KAAK,EAAE,SAAS;AAC/D,QAAM,sBAAsB,oBAAoB,iBAAiB,KAAK,EAAE,SAAS;AAEjF,MAAI,CAAC,iBAAiB,CAAC,qBAAqB;AAC1C,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACF;AASO,SAAS,aAAa,OAAwB;AACnD,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAEhD,QAAM,aAAa;AACnB,SAAO,WAAW,KAAK,MAAM,KAAK,CAAC;AACrC;AAMA,IAAM,uBAAuB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,qBAAqB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,sBAAsB;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,qBAAqB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,SAAS,gBAAgB,WAAmB,UAA6B;AACvE,QAAM,aAAa,UAAU,KAAK;AAClC,SAAO,SAAS,KAAK,CAAC,YAAY,QAAQ,KAAK,UAAU,CAAC;AAC5D;AAcO,SAAS,eACd,QACA,YACoB;AAEpB,MAAI,YAAY;AACd,eAAW,CAAC,WAAW,SAAS,KAAK,WAAW,QAAQ,GAAG;AACzD,UAAI,cAAc,SAAS;AACzB,cAAM,QAAQ,OAAO,SAAS;AAC9B,YAAI,SAAS,aAAa,KAAK,GAAG;AAChC,iBAAO,MAAM,KAAK;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,aAAW,CAAC,WAAW,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,QAAI,gBAAgB,WAAW,oBAAoB,KAAK,aAAa,KAAK,GAAG;AAC3E,aAAO,MAAM,KAAK;AAAA,IACpB;AAAA,EACF;AAGA,aAAW,SAAS,OAAO,OAAO,MAAM,GAAG;AACzC,QAAI,aAAa,KAAK,GAAG;AACvB,aAAO,MAAM,KAAK;AAAA,IACpB;AAAA,EACF;AAEA,SAAO;AACT;AAeO,SAAS,eAAe,QAI7B;AACA,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,aAAW,CAAC,WAAW,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,UAAM,eAAe,OAAO,KAAK;AACjC,QAAI,CAAC,aAAc;AAGnB,QAAI,CAAC,YAAY,gBAAgB,WAAW,kBAAkB,GAAG;AAC/D,iBAAW;AAAA,IACb;AAGA,QAAI,CAAC,aAAa,gBAAgB,WAAW,mBAAmB,GAAG;AACjE,kBAAY;AAAA,IACd;AAGA,QAAI,CAAC,YAAY,gBAAgB,WAAW,kBAAkB,GAAG;AAC/D,iBAAW;AAAA,IACb;AAAA,EACF;AAEA,QAAM,SAAmE,CAAC;AAG1E,MAAI,UAAU;AACZ,WAAO,OAAO;AAAA,EAChB,WAES,aAAa,UAAU;AAC9B,WAAO,OAAO,GAAG,SAAS,IAAI,QAAQ;AACtC,WAAO,YAAY;AACnB,WAAO,WAAW;AAAA,EACpB,WAES,WAAW;AAClB,WAAO,YAAY;AAAA,EACrB,WAES,UAAU;AACjB,WAAO,WAAW;AAAA,EACpB;AAEA,SAAO;AACT;AAqBO,SAAS,wBACd,QACA,YAC+B;AAC/B,QAAM,QAAQ,eAAe,QAAQ,UAAU;AAG/C,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAEA,QAAM,aAAa,eAAe,MAAM;AAExC,SAAO;AAAA,IACL;AAAA,IACA,GAAG;AAAA,EACL;AACF;;;AF3YO,SAAS,mBAAmB,QAA6D;AAC9F,QAAM,EAAE,KAAK,UAAU,WAAW,MAAM,IAAI;AAC5C,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,EACF;AACF;AAKO,SAAS,eACd,QAIW;AACX,QAAM,EAAE,KAAK,UAAU,WAAW,QAAQ,WAAW,IAAI;AACzD,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,mBACd,QAQe;AACf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,iBACd,QAQa;AACb,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,mBACd,QAUe;AACf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAMO,SAAS,qBACd,QAKiB;AACjB,QAAM,EAAE,KAAK,UAAU,WAAW,cAAc,aAAa,UAAU,IAAI;AAC3E,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAOO,SAAS,gBACd,QAIY;AACZ,QAAM,EAAE,KAAK,UAAU,WAAW,OAAO,WAAW,IAAI;AACxD,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AACF;AAMO,SAAS,kBACd,QAMc;AACd,QAAM,EAAE,KAAK,UAAU,WAAW,QAAQ,YAAY,kBAAkB,WAAW,IAAI;AACvF,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,MAAM;AAAA,IACN,WAAW,aAAa,KAAK,IAAI;AAAA,IACjC;AAAA,IACA,MAAM,mBAAmB,GAAG;AAAA,IAC5B;AAAA,IACA,KAAK,iBAAiB,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAmBO,SAAS,mBACd,WACA,QACA,QACA,cACA,WACA,aACA,kBACe;AACf,QAAM,UAAyB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,yBACJ,qBAAqB,UACrB,iBACC,aAAa,cAAc,aAAa,kBACrC;AAAA,IACE,GAAI,aAAa,cAAc,EAAE,YAAY,aAAa,WAAW;AAAA,IACrE,GAAI,aAAa,kBAAkB,EAAE,gBAAgB,aAAa,eAAe;AAAA,EACnF,IACA;AACN,QAAM,2BAA2B,oBAAoB;AAGrD,MAAI,aAAa;AACf,YAAQ,cAAc;AAAA,EACxB;AAGA,MAAI,WAAW;AACb,YAAQ,YAAY;AAAA,EACtB;AAGA,MAAI,iBAAiB,aAAa,SAAS,aAAa,UAAU,aAAa,SAAS;AACtF,YAAQ,eAAe;AAAA,MACrB,GAAI,aAAa,SAAS,EAAE,OAAO,aAAa,MAAM;AAAA,MACtD,GAAI,aAAa,UAAU,EAAE,QAAQ,aAAa,OAAO;AAAA,MACzD,GAAI,aAAa,UAAU,EAAE,QAAQ,aAAa,OAAO;AAAA,IAC3D;AAAA,EACF;AAEA,MACE,6BACC,yBAAyB,cAAc,yBAAyB,iBACjE;AACA,YAAQ,mBAAmB;AAAA,MACzB,GAAI,yBAAyB,cAAc;AAAA,QACzC,YAAY,yBAAyB;AAAA,MACvC;AAAA,MACA,GAAI,yBAAyB,kBAAkB;AAAA,QAC7C,gBAAgB,yBAAyB;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AASO,IAAM,iBAAiB;AAKvB,SAAS,YAAY,QAA0C;AACpE,QAAM,UAA4B,CAAC;AACnC,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK,gBAAgB;AACtD,YAAQ,KAAK,OAAO,MAAM,GAAG,IAAI,cAAc,CAAC;AAAA,EAClD;AACA,SAAO;AACT;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@outlit/core",
-  "version": "1.4.5",
+  "version": "1.5.1",
   "description": "Shared types and utilities for Outlit tracking SDKs",
   "license": "Apache-2.0",
   "author": "Outlit AI",
@@ -45,6 +45,9 @@
     "typecheck": "tsc --noEmit",
     "test": "vitest run"
   },
+  "dependencies": {
+    "uuid": "^14.0.0"
+  },
   "devDependencies": {
     "@outlit/typescript-config": "workspace:*",
     "tsup": "^8.5.1",