@reopt-ai/data-contract 0.5.0 → 0.6.1

package/dist/identity.d.ts

@@ -0,0 +1,119 @@
+export { C as CLIENT_ID_HEADER, a as CLIENT_SECRET_HEADER, b as CONTRACT_VERSION, c as CONTRACT_VERSION_HEADER, D as DEVICE_ID_HEADER, R as REQUEST_ID_HEADER, W as WRITE_KEY_HEADER } from './version-BzeRTpta.js';
+
+/**
+ * Request header carrying the browser's current session id. The browser SDK
+ * adds it to same-origin requests so a server-side `track()` can land in the
+ * session the user is actually in; the server SDK forwards it to ingest.
+ *
+ * Ingest treats it as a *hint*, never as authority — a browser can put any
+ * value here.
+ */
+declare const SESSION_ID_HEADER = "reopt-session-id";
+/** Every request header the identity protocol may carry, for CORS allow-lists. */
+declare const IDENTITY_REQUEST_HEADERS: readonly ["reopt-device-id", "reopt-session-id"];
+/**
+ * 400 days — the longest lifetime Chrome will honour. Anything longer is
+ * silently clamped to this, so asking for more only hides the real expiry.
+ */
+declare const COOKIE_MAX_AGE_SECONDS: number;
+/** Consent category whose refusal means "send nothing at all". */
+declare const OPT_OUT_CONSENT_CATEGORY = "analytics";
+/** `reopt_<writeKey>_device` — device id plus session/profile hints. */
+declare function deviceCookieName(writeKey: string): string;
+/** `reopt_<writeKey>_consent` — per-category consent decisions. */
+declare function consentCookieName(writeKey: string): string;
+/** Everything the device cookie may carry. Only `deviceId` is required. */
+interface DeviceCookieState {
+    deviceId: string;
+    /** Current session, if the browser has one. */
+    sessionId?: string;
+    /** Last identified profile. A hint for the server SDK, never trusted by ingest. */
+    profileId?: string;
+}
+/** Per-category consent. `false` withdraws, `true` grants, absent = undecided. */
+type ConsentCookieState = Record<string, boolean>;
+/**
+ * What the server hands the browser SDK so the first render already agrees
+ * with the server about who the visitor is. Plain JSON — it crosses the
+ * RSC → client component boundary as a prop.
+ */
+interface ReoptBootstrap {
+    /** From the device cookie (seeded by the proxy on first visit). */
+    deviceId: string;
+    /** Session hint, or `null` when the browser has not started one. */
+    sessionId: string | null;
+    /** Result of the server's `getProfileId` resolver, or `null`. */
+    profileId: string | null;
+    consent: ConsentCookieState;
+    /** Server clock at render time, so a skewed device clock can be corrected. */
+    serverTimeMs: number;
+}
+/**
+ * Ids are opaque, but a cookie is attacker-controlled input (a sibling
+ * subdomain can set one). The value ends up in an HTTP header, and
+ * `Headers.set` throws on anything outside ISO-8859-1 — so a single odd
+ * cookie would break every `fetch` the tracing patch touches. Only the URL
+ * "unreserved" set is accepted; every id this SDK mints is a UUID.
+ */
+declare const IDENTITY_ID_PATTERN: RegExp;
+declare function isValidIdentityId(value: unknown): value is string;
+/**
+ * Reads a device cookie value. Accepts the JSON envelope written by
+ * `serializeDeviceCookie` and, for cookies seeded before the envelope existed,
+ * a bare device id. Returns `null` for anything else — a malformed cookie is
+ * treated as absent, never as an error, so a corrupted value cannot take the
+ * page down.
+ */
+declare function parseDeviceCookie(raw: string | null | undefined): DeviceCookieState | null;
+/**
+ * Cookie values may not contain `;`, `,` or whitespace, and JSON contains
+ * quotes and commas. The envelope is therefore URI-encoded; `parseDeviceCookie`
+ * reverses it. Optional fields are omitted rather than written as `null` so
+ * the cookie stays as small as the state it carries.
+ */
+declare function serializeDeviceCookie(state: DeviceCookieState): string;
+/**
+ * Reads a consent cookie. Only boolean entries survive; anything else in the
+ * object is dropped rather than failing the whole cookie, because one odd key
+ * must not erase a user's recorded opt-out.
+ */
+declare function parseConsentCookie(raw: string | null | undefined): ConsentCookieState | null;
+declare function serializeConsentCookie(state: ConsentCookieState): string;
+/**
+ * "Opted out" means the visitor refused the `analytics` category. An absent
+ * cookie or an undecided category is *not* an opt-out — it is the default
+ * state of every first visit, and treating it as refusal would make consent
+ * banners mandatory for every integration.
+ */
+declare function isOptedOut(consent: ConsentCookieState | null | undefined): boolean;
+/**
+ * Sessions are assigned by ingest, not by the browser. To let a later request
+ * — from the same browser, or from a server acting for it — join that session
+ * with authority, ingest hands the browser its session id together with an
+ * HMAC over it, and the browser sends both back as `reopt-session-id`. An
+ * unsigned or wrongly signed value is a hint at most: ingest falls back to
+ * deciding the session from the device, exactly as if the header were absent.
+ *
+ * The token is `base64url(HMAC-SHA256(secret, sessionId))`. The secret is
+ * per project and never leaves the server. WebCrypto only, so this runs in
+ * browsers, edge runtimes and Node alike.
+ */
+declare const SESSION_HEADER_SEPARATOR = ".";
+interface SessionCredential {
+    id: string;
+    token: string;
+}
+/** `<id>.<token>` — what travels in `reopt-session-id`. */
+declare function formatSessionHeader(credential: SessionCredential): string;
+/** Splits a `reopt-session-id` value. `null` unless both parts are well-formed. */
+declare function parseSessionHeader(value: string | null | undefined): SessionCredential | null;
+/** Issues the token for `sessionId`. Server-side only — needs the project secret. */
+declare function signSessionToken(secret: string, sessionId: string): Promise<string>;
+/**
+ * Constant-time check of a presented token. Recomputes and compares the
+ * digests byte by byte rather than using `subtle.verify` with a decoded
+ * token, so a malformed token can never throw its way past the check.
+ */
+declare function verifySessionToken(secret: string, credential: SessionCredential): Promise<boolean>;
+
+export { COOKIE_MAX_AGE_SECONDS, type ConsentCookieState, type DeviceCookieState, IDENTITY_ID_PATTERN, IDENTITY_REQUEST_HEADERS, OPT_OUT_CONSENT_CATEGORY, type ReoptBootstrap, SESSION_HEADER_SEPARATOR, SESSION_ID_HEADER, type SessionCredential, consentCookieName, deviceCookieName, formatSessionHeader, isOptedOut, isValidIdentityId, parseConsentCookie, parseDeviceCookie, parseSessionHeader, serializeConsentCookie, serializeDeviceCookie, signSessionToken, verifySessionToken };

package/dist/identity.js

@@ -0,0 +1,57 @@
+import {
+  COOKIE_MAX_AGE_SECONDS,
+  IDENTITY_ID_PATTERN,
+  IDENTITY_REQUEST_HEADERS,
+  OPT_OUT_CONSENT_CATEGORY,
+  SESSION_HEADER_SEPARATOR,
+  SESSION_ID_HEADER,
+  consentCookieName,
+  deviceCookieName,
+  formatSessionHeader,
+  isOptedOut,
+  isValidIdentityId,
+  parseConsentCookie,
+  parseDeviceCookie,
+  parseSessionHeader,
+  serializeConsentCookie,
+  serializeDeviceCookie,
+  signSessionToken,
+  verifySessionToken
+} from "./chunk-GCQZNME3.js";
+import {
+  CLIENT_ID_HEADER,
+  CLIENT_SECRET_HEADER,
+  CONTRACT_VERSION,
+  CONTRACT_VERSION_HEADER,
+  DEVICE_ID_HEADER,
+  REQUEST_ID_HEADER,
+  WRITE_KEY_HEADER
+} from "./chunk-HLQAZ6JW.js";
+export {
+  CLIENT_ID_HEADER,
+  CLIENT_SECRET_HEADER,
+  CONTRACT_VERSION,
+  CONTRACT_VERSION_HEADER,
+  COOKIE_MAX_AGE_SECONDS,
+  DEVICE_ID_HEADER,
+  IDENTITY_ID_PATTERN,
+  IDENTITY_REQUEST_HEADERS,
+  OPT_OUT_CONSENT_CATEGORY,
+  REQUEST_ID_HEADER,
+  SESSION_HEADER_SEPARATOR,
+  SESSION_ID_HEADER,
+  WRITE_KEY_HEADER,
+  consentCookieName,
+  deviceCookieName,
+  formatSessionHeader,
+  isOptedOut,
+  isValidIdentityId,
+  parseConsentCookie,
+  parseDeviceCookie,
+  parseSessionHeader,
+  serializeConsentCookie,
+  serializeDeviceCookie,
+  signSessionToken,
+  verifySessionToken
+};
+//# sourceMappingURL=identity.js.map

package/dist/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.cjs

@@ -2,6 +2,7 @@
 
 
 
+var _chunkYSAEOYPDcjs = require('./chunk-YSAEOYPD.cjs');
 
 
 
@@ -9,8 +10,8 @@
 
 
 
-var _chunkOLSMH4RYcjs = require('./chunk-OLSMH4RY.cjs');
 
+var _chunkJB4MJQX7cjs = require('./chunk-JB4MJQX7.cjs');
 
 
 
@@ -21,5 +22,6 @@ var _chunkOLSMH4RYcjs = require('./chunk-OLSMH4RY.cjs');
 
 
 
-exports.CLIENT_ID_HEADER = _chunkOLSMH4RYcjs.CLIENT_ID_HEADER; exports.CLIENT_SECRET_HEADER = _chunkOLSMH4RYcjs.CLIENT_SECRET_HEADER; exports.CONTRACT_VERSION = _chunkOLSMH4RYcjs.CONTRACT_VERSION; exports.CONTRACT_VERSION_HEADER = _chunkOLSMH4RYcjs.CONTRACT_VERSION_HEADER; exports.DEVICE_ID_HEADER = _chunkOLSMH4RYcjs.DEVICE_ID_HEADER; exports.DataApiError = _chunkOLSMH4RYcjs.DataApiError; exports.REQUEST_ID_HEADER = _chunkOLSMH4RYcjs.REQUEST_ID_HEADER; exports.WRITE_KEY_HEADER = _chunkOLSMH4RYcjs.WRITE_KEY_HEADER; exports.zDate = _chunkOLSMH4RYcjs.zDate; exports.zInstant = _chunkOLSMH4RYcjs.zInstant;
+
+exports.CLIENT_ID_HEADER = _chunkJB4MJQX7cjs.CLIENT_ID_HEADER; exports.CLIENT_SECRET_HEADER = _chunkJB4MJQX7cjs.CLIENT_SECRET_HEADER; exports.CONTRACT_VERSION = _chunkJB4MJQX7cjs.CONTRACT_VERSION; exports.CONTRACT_VERSION_HEADER = _chunkJB4MJQX7cjs.CONTRACT_VERSION_HEADER; exports.DEVICE_ID_HEADER = _chunkJB4MJQX7cjs.DEVICE_ID_HEADER; exports.DataApiError = _chunkYSAEOYPDcjs.DataApiError; exports.REQUEST_ID_HEADER = _chunkJB4MJQX7cjs.REQUEST_ID_HEADER; exports.WRITE_KEY_HEADER = _chunkJB4MJQX7cjs.WRITE_KEY_HEADER; exports.zDate = _chunkYSAEOYPDcjs.zDate; exports.zInstant = _chunkYSAEOYPDcjs.zInstant;
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/index.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,+lBAAC","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/index.cjs"}
+{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/index.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,+lBAAC","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/index.cjs"}

package/dist/index.d.cts

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+export { C as CLIENT_ID_HEADER, a as CLIENT_SECRET_HEADER, b as CONTRACT_VERSION, c as CONTRACT_VERSION_HEADER, D as DEVICE_ID_HEADER, R as REQUEST_ID_HEADER, W as WRITE_KEY_HEADER } from './version-BzeRTpta.cjs';
 
 /**
  * `@reopt-ai/data-contract` — the wire contract between reopt-data and its
@@ -10,25 +11,14 @@ import { z } from 'zod';
  *   `@reopt-ai/data-contract/query`   POST /api/v1/query/* request + response schemas
  *   `@reopt-ai/data-contract/control` provisioning request + response schemas
  *   `@reopt-ai/data-contract/client`  createDataClient() — typed fetch over all
+ *   `@reopt-ai/data-contract/events`   event names + property keys (no zod)
+ *   `@reopt-ai/data-contract/identity` cookie/header names and encodings shared by
+ *                                     the SDKs, the Next.js proxy and ingest
  *
  * Only `/client` touches `fetch`; everything else is pure zod. The single
  * runtime dependency is zod, deliberately — consumers bundle this.
  */
 
-/**
- * Contract version. Bumped on any breaking change to a schema in this package.
- * The server echoes the version it was built against in `x-reopt-contract-version`;
- * `createDataClient` surfaces a mismatch rather than guessing.
- */
-declare const CONTRACT_VERSION = "0.5.0";
-/** Response header carrying the server's contract version. */
-declare const CONTRACT_VERSION_HEADER = "x-reopt-contract-version";
-/** Request header names shared by the ingest and query planes. */
-declare const CLIENT_ID_HEADER = "reopt-client-id";
-declare const CLIENT_SECRET_HEADER = "reopt-client-secret";
-declare const WRITE_KEY_HEADER = "reopt-write-key";
-declare const DEVICE_ID_HEADER = "reopt-device-id";
-declare const REQUEST_ID_HEADER = "x-request-id";
 /**
  * A real calendar date. The query's resolved IANA zone decides which instants
  * its inclusive day covers.
@@ -92,4 +82,4 @@ declare class DataApiError extends Error {
     static is(value: unknown): value is DataApiError;
 }
 
-export { CLIENT_ID_HEADER, CLIENT_SECRET_HEADER, CONTRACT_VERSION, CONTRACT_VERSION_HEADER, type ClientCredentials, DEVICE_ID_HEADER, DataApiError, type OptionalClientCredentials, REQUEST_ID_HEADER, WRITE_KEY_HEADER, zDate, zInstant };
+export { type ClientCredentials, DataApiError, type OptionalClientCredentials, zDate, zInstant };

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+export { C as CLIENT_ID_HEADER, a as CLIENT_SECRET_HEADER, b as CONTRACT_VERSION, c as CONTRACT_VERSION_HEADER, D as DEVICE_ID_HEADER, R as REQUEST_ID_HEADER, W as WRITE_KEY_HEADER } from './version-BzeRTpta.js';
 
 /**
  * `@reopt-ai/data-contract` — the wire contract between reopt-data and its
@@ -10,25 +11,14 @@ import { z } from 'zod';
  *   `@reopt-ai/data-contract/query`   POST /api/v1/query/* request + response schemas
  *   `@reopt-ai/data-contract/control` provisioning request + response schemas
  *   `@reopt-ai/data-contract/client`  createDataClient() — typed fetch over all
+ *   `@reopt-ai/data-contract/events`   event names + property keys (no zod)
+ *   `@reopt-ai/data-contract/identity` cookie/header names and encodings shared by
+ *                                     the SDKs, the Next.js proxy and ingest
  *
  * Only `/client` touches `fetch`; everything else is pure zod. The single
  * runtime dependency is zod, deliberately — consumers bundle this.
  */
 
-/**
- * Contract version. Bumped on any breaking change to a schema in this package.
- * The server echoes the version it was built against in `x-reopt-contract-version`;
- * `createDataClient` surfaces a mismatch rather than guessing.
- */
-declare const CONTRACT_VERSION = "0.5.0";
-/** Response header carrying the server's contract version. */
-declare const CONTRACT_VERSION_HEADER = "x-reopt-contract-version";
-/** Request header names shared by the ingest and query planes. */
-declare const CLIENT_ID_HEADER = "reopt-client-id";
-declare const CLIENT_SECRET_HEADER = "reopt-client-secret";
-declare const WRITE_KEY_HEADER = "reopt-write-key";
-declare const DEVICE_ID_HEADER = "reopt-device-id";
-declare const REQUEST_ID_HEADER = "x-request-id";
 /**
  * A real calendar date. The query's resolved IANA zone decides which instants
  * its inclusive day covers.
@@ -92,4 +82,4 @@ declare class DataApiError extends Error {
     static is(value: unknown): value is DataApiError;
 }
 
-export { CLIENT_ID_HEADER, CLIENT_SECRET_HEADER, CONTRACT_VERSION, CONTRACT_VERSION_HEADER, type ClientCredentials, DEVICE_ID_HEADER, DataApiError, type OptionalClientCredentials, REQUEST_ID_HEADER, WRITE_KEY_HEADER, zDate, zInstant };
+export { type ClientCredentials, DataApiError, type OptionalClientCredentials, zDate, zInstant };

package/dist/index.js

@@ -1,15 +1,17 @@
+import {
+  DataApiError,
+  zDate,
+  zInstant
+} from "./chunk-33BCA2LH.js";
 import {
   CLIENT_ID_HEADER,
   CLIENT_SECRET_HEADER,
   CONTRACT_VERSION,
   CONTRACT_VERSION_HEADER,
   DEVICE_ID_HEADER,
-  DataApiError,
   REQUEST_ID_HEADER,
-  WRITE_KEY_HEADER,
-  zDate,
-  zInstant
-} from "./chunk-2LZBZXBF.js";
+  WRITE_KEY_HEADER
+} from "./chunk-HLQAZ6JW.js";
 export {
   CLIENT_ID_HEADER,
   CLIENT_SECRET_HEADER,

package/dist/ingest.cjs

@@ -18,7 +18,9 @@
 
 
 
-var _chunkXI3VP5DNcjs = require('./chunk-XI3VP5DN.cjs');
+var _chunkVGB2VJO4cjs = require('./chunk-VGB2VJO4.cjs');
+require('./chunk-PHPTCLRU.cjs');
+require('./chunk-JB4MJQX7.cjs');
 
 
 
@@ -26,6 +28,7 @@ var _chunkXI3VP5DNcjs = require('./chunk-XI3VP5DN.cjs');
 
 
 
+var _chunk3EEANNYNcjs = require('./chunk-3EEANNYN.cjs');
 
 
 
@@ -39,5 +42,18 @@ var _chunkXI3VP5DNcjs = require('./chunk-XI3VP5DN.cjs');
 
 
 
-exports.INGEST_ERROR_CODES = _chunkXI3VP5DNcjs.INGEST_ERROR_CODES; exports.INGEST_MODES = _chunkXI3VP5DNcjs.INGEST_MODES; exports.INGEST_REJECTION_REASONS = _chunkXI3VP5DNcjs.INGEST_REJECTION_REASONS; exports.MAX_TRACK_PAYLOAD_BYTES = _chunkXI3VP5DNcjs.MAX_TRACK_PAYLOAD_BYTES; exports.RESERVED_EVENT_NAMES = _chunkXI3VP5DNcjs.RESERVED_EVENT_NAMES; exports.reconcileIngestResponse = _chunkXI3VP5DNcjs.reconcileIngestResponse; exports.zDecrementPayload = _chunkXI3VP5DNcjs.zDecrementPayload; exports.zIdentifyPayload = _chunkXI3VP5DNcjs.zIdentifyPayload; exports.zIncrementPayload = _chunkXI3VP5DNcjs.zIncrementPayload; exports.zIngestAcceptedResponse = _chunkXI3VP5DNcjs.zIngestAcceptedResponse; exports.zIngestError = _chunkXI3VP5DNcjs.zIngestError; exports.zIngestErrorCode = _chunkXI3VP5DNcjs.zIngestErrorCode; exports.zIngestMode = _chunkXI3VP5DNcjs.zIngestMode; exports.zIngestOkResponse = _chunkXI3VP5DNcjs.zIngestOkResponse; exports.zIngestRejection = _chunkXI3VP5DNcjs.zIngestRejection; exports.zIngestRejectionReason = _chunkXI3VP5DNcjs.zIngestRejectionReason; exports.zIngestResponse = _chunkXI3VP5DNcjs.zIngestResponse; exports.zTrackHandlerPayload = _chunkXI3VP5DNcjs.zTrackHandlerPayload; exports.zTrackPayload = _chunkXI3VP5DNcjs.zTrackPayload;
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.AUTO_EVENT_NAMES = _chunk3EEANNYNcjs.AUTO_EVENT_NAMES; exports.AUTO_EVENT_PROPERTIES = _chunk3EEANNYNcjs.AUTO_EVENT_PROPERTIES; exports.AUTO_EVENT_ROLLUP_KEYS = _chunk3EEANNYNcjs.AUTO_EVENT_ROLLUP_KEYS; exports.INGEST_ERROR_CODES = _chunkVGB2VJO4cjs.INGEST_ERROR_CODES; exports.INGEST_MODES = _chunkVGB2VJO4cjs.INGEST_MODES; exports.INGEST_REJECTION_REASONS = _chunkVGB2VJO4cjs.INGEST_REJECTION_REASONS; exports.MAX_TRACK_PAYLOAD_BYTES = _chunkVGB2VJO4cjs.MAX_TRACK_PAYLOAD_BYTES; exports.RESERVED_EVENT_NAMES = _chunk3EEANNYNcjs.RESERVED_EVENT_NAMES; exports.SCROLL_DEPTH_BUCKETS = _chunk3EEANNYNcjs.SCROLL_DEPTH_BUCKETS; exports.reconcileIngestResponse = _chunkVGB2VJO4cjs.reconcileIngestResponse; exports.scrollDepthBucket = _chunk3EEANNYNcjs.scrollDepthBucket; exports.zDecrementPayload = _chunkVGB2VJO4cjs.zDecrementPayload; exports.zIdentifyPayload = _chunkVGB2VJO4cjs.zIdentifyPayload; exports.zIncrementPayload = _chunkVGB2VJO4cjs.zIncrementPayload; exports.zIngestAcceptedResponse = _chunkVGB2VJO4cjs.zIngestAcceptedResponse; exports.zIngestError = _chunkVGB2VJO4cjs.zIngestError; exports.zIngestErrorCode = _chunkVGB2VJO4cjs.zIngestErrorCode; exports.zIngestMode = _chunkVGB2VJO4cjs.zIngestMode; exports.zIngestOkResponse = _chunkVGB2VJO4cjs.zIngestOkResponse; exports.zIngestRejection = _chunkVGB2VJO4cjs.zIngestRejection; exports.zIngestRejectionReason = _chunkVGB2VJO4cjs.zIngestRejectionReason; exports.zIngestResponse = _chunkVGB2VJO4cjs.zIngestResponse; exports.zSessionCredential = _chunkVGB2VJO4cjs.zSessionCredential; exports.zTrackHandlerPayload = _chunkVGB2VJO4cjs.zTrackHandlerPayload; exports.zTrackPayload = _chunkVGB2VJO4cjs.zTrackPayload;
 //# sourceMappingURL=ingest.cjs.map

package/dist/ingest.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/ingest.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,0uCAAC","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/ingest.cjs"}
+{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/ingest.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B,gCAA6B;AAC7B,gCAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,woDAAC","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/ingest.cjs"}

package/dist/ingest.d.cts

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+export { AUTO_EVENT_NAMES, AUTO_EVENT_PROPERTIES, AUTO_EVENT_ROLLUP_KEYS, AutoEventName, RESERVED_EVENT_NAMES, SCROLL_DEPTH_BUCKETS, ScrollDepthBucket, scrollDepthBucket } from './events.cjs';
 
 /**
  * `POST /api/track` — the ingest contract.
@@ -12,8 +13,6 @@ import { z } from 'zod';
  * now a deprecated re-export of this module.
  */
 
-/** Event names the pipeline reserves for its own session bookkeeping. */
-declare const RESERVED_EVENT_NAMES: readonly ["session_start", "session_end", "screen_view"];
 /** Hard cap enforced by the route before the body is even parsed. */
 declare const MAX_TRACK_PAYLOAD_BYTES = 512000;
 declare const zTrackPayload: z.ZodObject<{
@@ -42,6 +41,7 @@ declare const zDecrementPayload: z.ZodObject<{
 declare const zTrackHandlerPayload: z.ZodDiscriminatedUnion<[z.ZodObject<{
     eventId: z.ZodUUID;
     timestamp: z.ZodNumber;
+    deviceId: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"track">;
     payload: z.ZodObject<{
         name: z.ZodString;
@@ -51,6 +51,7 @@ declare const zTrackHandlerPayload: z.ZodDiscriminatedUnion<[z.ZodObject<{
 }, z.core.$strip>, z.ZodObject<{
     eventId: z.ZodUUID;
     timestamp: z.ZodNumber;
+    deviceId: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"identify">;
     payload: z.ZodObject<{
         profileId: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
@@ -63,6 +64,7 @@ declare const zTrackHandlerPayload: z.ZodDiscriminatedUnion<[z.ZodObject<{
 }, z.core.$strip>, z.ZodObject<{
     eventId: z.ZodUUID;
     timestamp: z.ZodNumber;
+    deviceId: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"increment">;
     payload: z.ZodObject<{
         profileId: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
@@ -72,6 +74,7 @@ declare const zTrackHandlerPayload: z.ZodDiscriminatedUnion<[z.ZodObject<{
 }, z.core.$strip>, z.ZodObject<{
     eventId: z.ZodUUID;
     timestamp: z.ZodNumber;
+    deviceId: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"decrement">;
     payload: z.ZodObject<{
         profileId: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
@@ -124,9 +127,24 @@ declare const zIngestRejection: z.ZodObject<{
     message: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 type IngestRejection = z.infer<typeof zIngestRejection>;
+/**
+ * The session ingest filed this batch under, with the token that lets the
+ * browser (or a server acting for it) join the same session later with
+ * authority — see `signSessionToken` in `./identity`. Browser mode only;
+ * absent when the batch carried no sessionable event.
+ */
+declare const zSessionCredential: z.ZodObject<{
+    id: z.ZodString;
+    token: z.ZodString;
+}, z.core.$strip>;
+type SessionCredential = z.infer<typeof zSessionCredential>;
 /** 200 — accepted and handed to the materialize queue. */
 declare const zIngestOkResponse: z.ZodObject<{
     queued: z.ZodBoolean;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -155,6 +173,10 @@ declare const zIngestOkResponse: z.ZodObject<{
 declare const zIngestAcceptedResponse: z.ZodObject<{
     backgroundQueued: z.ZodLiteral<false>;
     replay: z.ZodLiteral<"unmaterialized-raw-events">;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -176,6 +198,10 @@ declare const zIngestAcceptedResponse: z.ZodObject<{
 }, z.core.$strip>;
 declare const zIngestResponse: z.ZodDiscriminatedUnion<[z.ZodObject<{
     queued: z.ZodBoolean;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -197,6 +223,10 @@ declare const zIngestResponse: z.ZodDiscriminatedUnion<[z.ZodObject<{
 }, z.core.$strip>, z.ZodObject<{
     backgroundQueued: z.ZodLiteral<false>;
     replay: z.ZodLiteral<"unmaterialized-raw-events">;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -234,33 +264,33 @@ declare function reconcileIngestResponse(response: IngestResponse, sentCount: nu
  */
 declare const INGEST_ERROR_CODES: readonly ["unauthorized", "invalid_json", "payload_too_large", "empty_batch", "alias_unsupported", "project_without_organization", "validation_failed", "rate_limited", "quota_exceeded", "project_purging", "internal_error"];
 declare const zIngestErrorCode: z.ZodEnum<{
-    unauthorized: "unauthorized";
     validation_failed: "validation_failed";
-    rate_limited: "rate_limited";
-    internal_error: "internal_error";
+    unauthorized: "unauthorized";
     invalid_json: "invalid_json";
     payload_too_large: "payload_too_large";
     empty_batch: "empty_batch";
     alias_unsupported: "alias_unsupported";
     project_without_organization: "project_without_organization";
+    rate_limited: "rate_limited";
     quota_exceeded: "quota_exceeded";
     project_purging: "project_purging";
+    internal_error: "internal_error";
 }>;
 type IngestErrorCode = z.infer<typeof zIngestErrorCode>;
 declare const zIngestError: z.ZodObject<{
     status: z.ZodNumber;
     code: z.ZodEnum<{
-        unauthorized: "unauthorized";
         validation_failed: "validation_failed";
-        rate_limited: "rate_limited";
-        internal_error: "internal_error";
+        unauthorized: "unauthorized";
         invalid_json: "invalid_json";
         payload_too_large: "payload_too_large";
         empty_batch: "empty_batch";
         alias_unsupported: "alias_unsupported";
         project_without_organization: "project_without_organization";
+        rate_limited: "rate_limited";
         quota_exceeded: "quota_exceeded";
         project_purging: "project_purging";
+        internal_error: "internal_error";
     }>;
     error: z.ZodString;
     message: z.ZodOptional<z.ZodString>;
@@ -269,4 +299,4 @@ declare const zIngestError: z.ZodObject<{
 }, z.core.$strip>;
 type IngestError = z.infer<typeof zIngestError>;
 
-export { type IDecrementPayload, type IIdentifyPayload, type IIncrementPayload, INGEST_ERROR_CODES, INGEST_MODES, INGEST_REJECTION_REASONS, type ITrackHandlerPayload, type ITrackPayload, type IngestAcceptedResponse, type IngestError, type IngestErrorCode, type IngestMode, type IngestOkResponse, type IngestRejection, type IngestRejectionReason, type IngestResponse, MAX_TRACK_PAYLOAD_BYTES, RESERVED_EVENT_NAMES, reconcileIngestResponse, zDecrementPayload, zIdentifyPayload, zIncrementPayload, zIngestAcceptedResponse, zIngestError, zIngestErrorCode, zIngestMode, zIngestOkResponse, zIngestRejection, zIngestRejectionReason, zIngestResponse, zTrackHandlerPayload, zTrackPayload };
+export { type IDecrementPayload, type IIdentifyPayload, type IIncrementPayload, INGEST_ERROR_CODES, INGEST_MODES, INGEST_REJECTION_REASONS, type ITrackHandlerPayload, type ITrackPayload, type IngestAcceptedResponse, type IngestError, type IngestErrorCode, type IngestMode, type IngestOkResponse, type IngestRejection, type IngestRejectionReason, type IngestResponse, MAX_TRACK_PAYLOAD_BYTES, type SessionCredential, reconcileIngestResponse, zDecrementPayload, zIdentifyPayload, zIncrementPayload, zIngestAcceptedResponse, zIngestError, zIngestErrorCode, zIngestMode, zIngestOkResponse, zIngestRejection, zIngestRejectionReason, zIngestResponse, zSessionCredential, zTrackHandlerPayload, zTrackPayload };

package/dist/ingest.d.ts

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+export { AUTO_EVENT_NAMES, AUTO_EVENT_PROPERTIES, AUTO_EVENT_ROLLUP_KEYS, AutoEventName, RESERVED_EVENT_NAMES, SCROLL_DEPTH_BUCKETS, ScrollDepthBucket, scrollDepthBucket } from './events.js';
 
 /**
  * `POST /api/track` — the ingest contract.
@@ -12,8 +13,6 @@ import { z } from 'zod';
  * now a deprecated re-export of this module.
  */
 
-/** Event names the pipeline reserves for its own session bookkeeping. */
-declare const RESERVED_EVENT_NAMES: readonly ["session_start", "session_end", "screen_view"];
 /** Hard cap enforced by the route before the body is even parsed. */
 declare const MAX_TRACK_PAYLOAD_BYTES = 512000;
 declare const zTrackPayload: z.ZodObject<{
@@ -42,6 +41,7 @@ declare const zDecrementPayload: z.ZodObject<{
 declare const zTrackHandlerPayload: z.ZodDiscriminatedUnion<[z.ZodObject<{
     eventId: z.ZodUUID;
     timestamp: z.ZodNumber;
+    deviceId: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"track">;
     payload: z.ZodObject<{
         name: z.ZodString;
@@ -51,6 +51,7 @@ declare const zTrackHandlerPayload: z.ZodDiscriminatedUnion<[z.ZodObject<{
 }, z.core.$strip>, z.ZodObject<{
     eventId: z.ZodUUID;
     timestamp: z.ZodNumber;
+    deviceId: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"identify">;
     payload: z.ZodObject<{
         profileId: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
@@ -63,6 +64,7 @@ declare const zTrackHandlerPayload: z.ZodDiscriminatedUnion<[z.ZodObject<{
 }, z.core.$strip>, z.ZodObject<{
     eventId: z.ZodUUID;
     timestamp: z.ZodNumber;
+    deviceId: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"increment">;
     payload: z.ZodObject<{
         profileId: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
@@ -72,6 +74,7 @@ declare const zTrackHandlerPayload: z.ZodDiscriminatedUnion<[z.ZodObject<{
 }, z.core.$strip>, z.ZodObject<{
     eventId: z.ZodUUID;
     timestamp: z.ZodNumber;
+    deviceId: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"decrement">;
     payload: z.ZodObject<{
         profileId: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
@@ -124,9 +127,24 @@ declare const zIngestRejection: z.ZodObject<{
     message: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 type IngestRejection = z.infer<typeof zIngestRejection>;
+/**
+ * The session ingest filed this batch under, with the token that lets the
+ * browser (or a server acting for it) join the same session later with
+ * authority — see `signSessionToken` in `./identity`. Browser mode only;
+ * absent when the batch carried no sessionable event.
+ */
+declare const zSessionCredential: z.ZodObject<{
+    id: z.ZodString;
+    token: z.ZodString;
+}, z.core.$strip>;
+type SessionCredential = z.infer<typeof zSessionCredential>;
 /** 200 — accepted and handed to the materialize queue. */
 declare const zIngestOkResponse: z.ZodObject<{
     queued: z.ZodBoolean;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -155,6 +173,10 @@ declare const zIngestOkResponse: z.ZodObject<{
 declare const zIngestAcceptedResponse: z.ZodObject<{
     backgroundQueued: z.ZodLiteral<false>;
     replay: z.ZodLiteral<"unmaterialized-raw-events">;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -176,6 +198,10 @@ declare const zIngestAcceptedResponse: z.ZodObject<{
 }, z.core.$strip>;
 declare const zIngestResponse: z.ZodDiscriminatedUnion<[z.ZodObject<{
     queued: z.ZodBoolean;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -197,6 +223,10 @@ declare const zIngestResponse: z.ZodDiscriminatedUnion<[z.ZodObject<{
 }, z.core.$strip>, z.ZodObject<{
     backgroundQueued: z.ZodLiteral<false>;
     replay: z.ZodLiteral<"unmaterialized-raw-events">;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        token: z.ZodString;
+    }, z.core.$strip>>;
     accepted: z.ZodNumber;
     duplicates: z.ZodNumber;
     rejected: z.ZodArray<z.ZodObject<{
@@ -234,33 +264,33 @@ declare function reconcileIngestResponse(response: IngestResponse, sentCount: nu
  */
 declare const INGEST_ERROR_CODES: readonly ["unauthorized", "invalid_json", "payload_too_large", "empty_batch", "alias_unsupported", "project_without_organization", "validation_failed", "rate_limited", "quota_exceeded", "project_purging", "internal_error"];
 declare const zIngestErrorCode: z.ZodEnum<{
-    unauthorized: "unauthorized";
     validation_failed: "validation_failed";
-    rate_limited: "rate_limited";
-    internal_error: "internal_error";
+    unauthorized: "unauthorized";
     invalid_json: "invalid_json";
     payload_too_large: "payload_too_large";
     empty_batch: "empty_batch";
     alias_unsupported: "alias_unsupported";
     project_without_organization: "project_without_organization";
+    rate_limited: "rate_limited";
     quota_exceeded: "quota_exceeded";
     project_purging: "project_purging";
+    internal_error: "internal_error";
 }>;
 type IngestErrorCode = z.infer<typeof zIngestErrorCode>;
 declare const zIngestError: z.ZodObject<{
     status: z.ZodNumber;
     code: z.ZodEnum<{
-        unauthorized: "unauthorized";
         validation_failed: "validation_failed";
-        rate_limited: "rate_limited";
-        internal_error: "internal_error";
+        unauthorized: "unauthorized";
         invalid_json: "invalid_json";
         payload_too_large: "payload_too_large";
         empty_batch: "empty_batch";
         alias_unsupported: "alias_unsupported";
         project_without_organization: "project_without_organization";
+        rate_limited: "rate_limited";
         quota_exceeded: "quota_exceeded";
         project_purging: "project_purging";
+        internal_error: "internal_error";
     }>;
     error: z.ZodString;
     message: z.ZodOptional<z.ZodString>;
@@ -269,4 +299,4 @@ declare const zIngestError: z.ZodObject<{
 }, z.core.$strip>;
 type IngestError = z.infer<typeof zIngestError>;
 
-export { type IDecrementPayload, type IIdentifyPayload, type IIncrementPayload, INGEST_ERROR_CODES, INGEST_MODES, INGEST_REJECTION_REASONS, type ITrackHandlerPayload, type ITrackPayload, type IngestAcceptedResponse, type IngestError, type IngestErrorCode, type IngestMode, type IngestOkResponse, type IngestRejection, type IngestRejectionReason, type IngestResponse, MAX_TRACK_PAYLOAD_BYTES, RESERVED_EVENT_NAMES, reconcileIngestResponse, zDecrementPayload, zIdentifyPayload, zIncrementPayload, zIngestAcceptedResponse, zIngestError, zIngestErrorCode, zIngestMode, zIngestOkResponse, zIngestRejection, zIngestRejectionReason, zIngestResponse, zTrackHandlerPayload, zTrackPayload };
+export { type IDecrementPayload, type IIdentifyPayload, type IIncrementPayload, INGEST_ERROR_CODES, INGEST_MODES, INGEST_REJECTION_REASONS, type ITrackHandlerPayload, type ITrackPayload, type IngestAcceptedResponse, type IngestError, type IngestErrorCode, type IngestMode, type IngestOkResponse, type IngestRejection, type IngestRejectionReason, type IngestResponse, MAX_TRACK_PAYLOAD_BYTES, type SessionCredential, reconcileIngestResponse, zDecrementPayload, zIdentifyPayload, zIncrementPayload, zIngestAcceptedResponse, zIngestError, zIngestErrorCode, zIngestMode, zIngestOkResponse, zIngestRejection, zIngestRejectionReason, zIngestResponse, zSessionCredential, zTrackHandlerPayload, zTrackPayload };