@reopt-ai/data-contract 0.6.2 → 0.7.0

package/dist/{version-BANKB6Og.d.ts → version-CGujUGWd.d.cts}

@@ -1,3 +1,4 @@
+//#region src/version.d.ts
 /**
  * Wire version and header names — the part of the contract every party
  * needs and none of them should pay zod for. Both `.` and `./identity`
@@ -13,7 +14,7 @@
  * every publish is a wire bump: consumers that check for exact equality —
  * every SDK — must upgrade in lockstep with the server.
  */
-declare const CONTRACT_VERSION = "0.6.2";
+declare const CONTRACT_VERSION = "0.7.0";
 /** Response header carrying the server's contract version. */
 declare const CONTRACT_VERSION_HEADER = "x-reopt-contract-version";
 /** Request header names shared by the ingest and query planes. */
@@ -22,5 +23,6 @@ declare const CLIENT_SECRET_HEADER = "reopt-client-secret";
 declare const WRITE_KEY_HEADER = "reopt-write-key";
 declare const DEVICE_ID_HEADER = "reopt-device-id";
 declare const REQUEST_ID_HEADER = "x-request-id";
-
-export { CLIENT_ID_HEADER as C, DEVICE_ID_HEADER as D, REQUEST_ID_HEADER as R, WRITE_KEY_HEADER as W, CLIENT_SECRET_HEADER as a, CONTRACT_VERSION as b, CONTRACT_VERSION_HEADER as c };
+//#endregion
+export { DEVICE_ID_HEADER as a, CONTRACT_VERSION_HEADER as i, CLIENT_SECRET_HEADER as n, REQUEST_ID_HEADER as o, CONTRACT_VERSION as r, WRITE_KEY_HEADER as s, CLIENT_ID_HEADER as t };
+//# sourceMappingURL=version-CGujUGWd.d.cts.map

package/dist/version-CGujUGWd.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-CGujUGWd.d.cts","names":[],"sources":["../src/version.ts"],"mappings":";;;;;;;;;;;;;;;;cAgBa;;cAGA;;cAGA;cACA;cACA;cACA;cACA"}

package/dist/{version-BANKB6Og.d.cts → version-CGujUGWd.d.ts}

@@ -1,3 +1,4 @@
+//#region src/version.d.ts
 /**
  * Wire version and header names — the part of the contract every party
  * needs and none of them should pay zod for. Both `.` and `./identity`
@@ -13,7 +14,7 @@
  * every publish is a wire bump: consumers that check for exact equality —
  * every SDK — must upgrade in lockstep with the server.
  */
-declare const CONTRACT_VERSION = "0.6.2";
+declare const CONTRACT_VERSION = "0.7.0";
 /** Response header carrying the server's contract version. */
 declare const CONTRACT_VERSION_HEADER = "x-reopt-contract-version";
 /** Request header names shared by the ingest and query planes. */
@@ -22,5 +23,6 @@ declare const CLIENT_SECRET_HEADER = "reopt-client-secret";
 declare const WRITE_KEY_HEADER = "reopt-write-key";
 declare const DEVICE_ID_HEADER = "reopt-device-id";
 declare const REQUEST_ID_HEADER = "x-request-id";
-
-export { CLIENT_ID_HEADER as C, DEVICE_ID_HEADER as D, REQUEST_ID_HEADER as R, WRITE_KEY_HEADER as W, CLIENT_SECRET_HEADER as a, CONTRACT_VERSION as b, CONTRACT_VERSION_HEADER as c };
+//#endregion
+export { DEVICE_ID_HEADER as a, CONTRACT_VERSION_HEADER as i, CLIENT_SECRET_HEADER as n, REQUEST_ID_HEADER as o, CONTRACT_VERSION as r, WRITE_KEY_HEADER as s, CLIENT_ID_HEADER as t };
+//# sourceMappingURL=version-CGujUGWd.d.ts.map

package/dist/version-CGujUGWd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-CGujUGWd.d.ts","names":[],"sources":["../src/version.ts"],"mappings":";;;;;;;;;;;;;;;;cAgBa;;cAGA;;cAGA;cACA;cACA;cACA;cACA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reopt-ai/data-contract",
-  "version": "0.6.2",
+  "version": "0.7.0",
   "description": "Wire contract (zod schemas + typed client) for the reopt-data ingest and query APIs",
   "license": "MIT",
   "repository": {
@@ -17,44 +17,84 @@
   },
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
-      "require": "./dist/index.cjs"
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
     },
     "./ingest": {
-      "types": "./dist/ingest.d.ts",
-      "import": "./dist/ingest.js",
-      "require": "./dist/ingest.cjs"
+      "import": {
+        "types": "./dist/ingest.d.ts",
+        "default": "./dist/ingest.js"
+      },
+      "require": {
+        "types": "./dist/ingest.d.cts",
+        "default": "./dist/ingest.cjs"
+      }
     },
     "./query": {
-      "types": "./dist/query.d.ts",
-      "import": "./dist/query.js",
-      "require": "./dist/query.cjs"
+      "import": {
+        "types": "./dist/query.d.ts",
+        "default": "./dist/query.js"
+      },
+      "require": {
+        "types": "./dist/query.d.cts",
+        "default": "./dist/query.cjs"
+      }
     },
     "./control": {
-      "types": "./dist/control.d.ts",
-      "import": "./dist/control.js",
-      "require": "./dist/control.cjs"
+      "import": {
+        "types": "./dist/control.d.ts",
+        "default": "./dist/control.js"
+      },
+      "require": {
+        "types": "./dist/control.d.cts",
+        "default": "./dist/control.cjs"
+      }
     },
     "./client": {
-      "types": "./dist/client.d.ts",
-      "import": "./dist/client.js",
-      "require": "./dist/client.cjs"
+      "import": {
+        "types": "./dist/client.d.ts",
+        "default": "./dist/client.js"
+      },
+      "require": {
+        "types": "./dist/client.d.cts",
+        "default": "./dist/client.cjs"
+      }
     },
     "./report": {
-      "types": "./dist/report.d.ts",
-      "import": "./dist/report.js",
-      "require": "./dist/report.cjs"
+      "import": {
+        "types": "./dist/report.d.ts",
+        "default": "./dist/report.js"
+      },
+      "require": {
+        "types": "./dist/report.d.cts",
+        "default": "./dist/report.cjs"
+      }
     },
     "./identity": {
-      "types": "./dist/identity.d.ts",
-      "import": "./dist/identity.js",
-      "require": "./dist/identity.cjs"
+      "import": {
+        "types": "./dist/identity.d.ts",
+        "default": "./dist/identity.js"
+      },
+      "require": {
+        "types": "./dist/identity.d.cts",
+        "default": "./dist/identity.cjs"
+      }
     },
     "./events": {
-      "types": "./dist/events.d.ts",
-      "import": "./dist/events.js",
-      "require": "./dist/events.cjs"
+      "import": {
+        "types": "./dist/events.d.ts",
+        "default": "./dist/events.js"
+      },
+      "require": {
+        "types": "./dist/events.d.cts",
+        "default": "./dist/events.cjs"
+      }
     }
   },
   "main": "./dist/index.cjs",
@@ -68,15 +108,16 @@
   },
   "devDependencies": {
     "@types/node": "^22.20.1",
-    "tsup": "^8.5.1",
+    "tsdown": "^0.22.14",
     "tsx": "^4.23.12",
     "typescript": "^5.9.3",
     "@repo/typescript-config": "0.0.0"
   },
   "scripts": {
-    "build": "tsup",
+    "build": "tsdown",
+    "check:package": "node ../../scripts/check-package-contract.mjs",
     "check-types": "tsc --noEmit",
-    "dev": "tsup --watch",
+    "dev": "tsdown --watch",
     "lint": "oxlint .",
     "test": "tsx --test src/__tests__/ingest.test.ts src/__tests__/query.test.ts src/__tests__/control.test.ts src/__tests__/client.test.ts src/__tests__/report.test.ts src/__tests__/identity.test.ts src/__tests__/package-identity.test.ts"
   }

package/dist/chunk-33BCA2LH.js

@@ -1,53 +0,0 @@
-// src/index.ts
-import { z } from "zod";
-var zDate = z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD").refine(isRealCalendarDate, "date does not exist");
-function isRealCalendarDate(value) {
-  if (!/^\d{4}-\d{2}-\d{2}$/.test(value)) return false;
-  const [year, month, day] = value.split("-").map(Number);
-  const instant = new Date(Date.UTC(year, month - 1, day));
-  return instant.getUTCFullYear() === year && instant.getUTCMonth() === month - 1 && instant.getUTCDate() === day;
-}
-var zInstant = z.string().min(20);
-var DataApiError = class _DataApiError extends Error {
-  /**
-   * Brand for {@link DataApiError.is}. A bundler that inlines this module into
-   * more than one entry point produces two distinct classes, and `instanceof`
-   * silently stops matching — the brand survives that, and realm boundaries.
-   */
-  isDataApiError = true;
-  status;
-  code;
-  requestId;
-  /** Parsed from `Retry-After`, in milliseconds. Only set on 429. */
-  retryAfterMs;
-  /** zod issues for `validation_failed`, or the raw body when unparseable. */
-  details;
-  constructor(init) {
-    super(init.message);
-    this.name = "DataApiError";
-    this.status = init.status;
-    this.code = init.code;
-    this.requestId = init.requestId;
-    this.retryAfterMs = init.retryAfterMs;
-    this.details = init.details;
-  }
-  /** 429 and 5xx are worth retrying; 4xx are the caller's fault and are not. */
-  get retryable() {
-    return this.status === 429 || this.status >= 500;
-  }
-  /**
-   * Prefer this over `instanceof` in a `catch`. It holds even when the class
-   * has been duplicated — across CJS entry points, across bundler chunks, or
-   * across realms — where `instanceof` quietly returns false.
-   */
-  static is(value) {
-    return value instanceof _DataApiError || typeof value === "object" && value !== null && value.isDataApiError === true;
-  }
-};
-
-export {
-  zDate,
-  zInstant,
-  DataApiError
-};
-//# sourceMappingURL=chunk-33BCA2LH.js.map

package/dist/chunk-33BCA2LH.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * `@reopt-ai/data-contract` — the wire contract between reopt-data and its\n * server-credential consumers (RFC-0023).\n *\n * Subpaths:\n *   `@reopt-ai/data-contract`         this module — version, shared primitives, errors\n *   `@reopt-ai/data-contract/ingest`  POST /api/track request + response schemas\n *   `@reopt-ai/data-contract/query`   POST /api/v1/query/* request + response schemas\n *   `@reopt-ai/data-contract/control` provisioning request + response schemas\n *   `@reopt-ai/data-contract/client`  createDataClient() — typed fetch over all\n *   `@reopt-ai/data-contract/events`   event names + property keys (no zod)\n *   `@reopt-ai/data-contract/identity` cookie/header names and encodings shared by\n *                                     the SDKs, the Next.js proxy and ingest\n *\n * Only `/client` touches `fetch`; everything else is pure zod. The single\n * runtime dependency is zod, deliberately — consumers bundle this.\n */\nimport { z } from \"zod\";\n\nexport {\n  CONTRACT_VERSION,\n  CONTRACT_VERSION_HEADER,\n  CLIENT_ID_HEADER,\n  CLIENT_SECRET_HEADER,\n  WRITE_KEY_HEADER,\n  DEVICE_ID_HEADER,\n  REQUEST_ID_HEADER,\n} from \"./version.js\";\n\n/**\n * A real calendar date. The query's resolved IANA zone decides which instants\n * its inclusive day covers.\n */\nexport const zDate = z\n  .string()\n  .regex(/^\\d{4}-\\d{2}-\\d{2}$/, \"expected YYYY-MM-DD\")\n  .refine(isRealCalendarDate, \"date does not exist\");\n\nfunction isRealCalendarDate(value: string): boolean {\n  if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(value)) return false;\n  const [year, month, day] = value.split(\"-\").map(Number);\n  const instant = new Date(Date.UTC(year!, month! - 1, day!));\n  return instant.getUTCFullYear() === year && instant.getUTCMonth() === month! - 1 && instant.getUTCDate() === day;\n}\n\n/** ISO-8601 instant, as produced by `Date#toISOString()`. */\nexport const zInstant = z.string().min(20);\n\n/**\n * Client credentials. The same pair authenticates both planes; what a given\n * client may reach is decided server-side by `Client.scopes`\n * (`\"ingest\"` / `\"query\"` / `\"provision\"`).\n */\nexport interface ClientCredentials {\n  clientId: string;\n  clientSecret: string;\n}\n\n/**\n * Credentials are optional on the client itself because the provisioning\n * surface does not use them — it authenticates per call with a platform or\n * organization key. A caller that only provisions should not have to invent an\n * empty client id to satisfy a constructor.\n *\n * Reaching ingest or query without them fails with `credentials_missing`\n * rather than sending an unauthenticated request and reporting the 401 as a\n * server problem.\n */\nexport type OptionalClientCredentials = Partial<ClientCredentials>;\n\n/**\n * Every non-2xx response from either plane, plus the two failures the client\n * itself raises (`contract_mismatch`, `network_error`).\n */\nexport class DataApiError extends Error {\n  /**\n   * Brand for {@link DataApiError.is}. A bundler that inlines this module into\n   * more than one entry point produces two distinct classes, and `instanceof`\n   * silently stops matching — the brand survives that, and realm boundaries.\n   */\n  readonly isDataApiError = true as const;\n\n  readonly status: number;\n  readonly code: string;\n  readonly requestId?: string;\n  /** Parsed from `Retry-After`, in milliseconds. Only set on 429. */\n  readonly retryAfterMs?: number;\n  /** zod issues for `validation_failed`, or the raw body when unparseable. */\n  readonly details?: unknown;\n\n  constructor(init: {\n    message: string;\n    status: number;\n    code: string;\n    requestId?: string;\n    retryAfterMs?: number;\n    details?: unknown;\n  }) {\n    super(init.message);\n    this.name = \"DataApiError\";\n    this.status = init.status;\n    this.code = init.code;\n    this.requestId = init.requestId;\n    this.retryAfterMs = init.retryAfterMs;\n    this.details = init.details;\n  }\n\n  /** 429 and 5xx are worth retrying; 4xx are the caller's fault and are not. */\n  get retryable(): boolean {\n    return this.status === 429 || this.status >= 500;\n  }\n\n  /**\n   * Prefer this over `instanceof` in a `catch`. It holds even when the class\n   * has been duplicated — across CJS entry points, across bundler chunks, or\n   * across realms — where `instanceof` quietly returns false.\n   */\n  static is(value: unknown): value is DataApiError {\n    return (\n      value instanceof DataApiError ||\n      (typeof value === \"object\" && value !== null && (value as { isDataApiError?: unknown }).isDataApiError === true)\n    );\n  }\n}\n"],"mappings":";AAiBA,SAAS,SAAS;AAgBX,IAAM,QAAQ,EAClB,OAAO,EACP,MAAM,uBAAuB,qBAAqB,EAClD,OAAO,oBAAoB,qBAAqB;AAEnD,SAAS,mBAAmB,OAAwB;AAClD,MAAI,CAAC,sBAAsB,KAAK,KAAK,EAAG,QAAO;AAC/C,QAAM,CAAC,MAAM,OAAO,GAAG,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM;AACtD,QAAM,UAAU,IAAI,KAAK,KAAK,IAAI,MAAO,QAAS,GAAG,GAAI,CAAC;AAC1D,SAAO,QAAQ,eAAe,MAAM,QAAQ,QAAQ,YAAY,MAAM,QAAS,KAAK,QAAQ,WAAW,MAAM;AAC/G;AAGO,IAAM,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE;AA4BlC,IAAM,eAAN,MAAM,sBAAqB,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM7B,iBAAiB;AAAA,EAEjB;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA,EAET,YAAY,MAOT;AACD,UAAM,KAAK,OAAO;AAClB,SAAK,OAAO;AACZ,SAAK,SAAS,KAAK;AACnB,SAAK,OAAO,KAAK;AACjB,SAAK,YAAY,KAAK;AACtB,SAAK,eAAe,KAAK;AACzB,SAAK,UAAU,KAAK;AAAA,EACtB;AAAA;AAAA,EAGA,IAAI,YAAqB;AACvB,WAAO,KAAK,WAAW,OAAO,KAAK,UAAU;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAO,GAAG,OAAuC;AAC/C,WACE,iBAAiB,iBAChB,OAAO,UAAU,YAAY,UAAU,QAAS,MAAuC,mBAAmB;AAAA,EAE/G;AACF;","names":[]}

package/dist/chunk-3EEANNYN.cjs

@@ -1,62 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/events.ts
-var RESERVED_EVENT_NAMES = ["session_start", "session_end", "screen_view"];
-var AUTO_EVENT_NAMES = {
-  pageview: "$pageview",
-  screenView: "$screen_view",
-  pageleave: "$pageleave",
-  webVitals: "$web_vitals",
-  exception: "$exception"
-};
-var AUTO_EVENT_PROPERTIES = {
-  [AUTO_EVENT_NAMES.pageview]: [
-    "path",
-    "origin",
-    "title",
-    "referrer",
-    "search",
-    "utm_source",
-    "utm_medium",
-    "utm_campaign",
-    "utm_term",
-    "utm_content"
-  ],
-  [AUTO_EVENT_NAMES.screenView]: ["screen_name"],
-  [AUTO_EVENT_NAMES.pageleave]: ["path", "origin", "duration", "scroll_depth", "scroll_depth_bucket"],
-  [AUTO_EVENT_NAMES.webVitals]: ["metric_name", "metric_id", "value", "delta", "rating", "navigation_type", "path"],
-  // `$`-prefixed on purpose: these are reserved, SDK-owned keys with fixed
-  // semantics, distinguished from a host's own snake_case vocabulary the
-  // same way the event names are. Not a typo — do not strip the prefix.
-  [AUTO_EVENT_NAMES.exception]: [
-    "$exception_type",
-    "$exception_message",
-    "$exception_stack",
-    "$exception_source",
-    "$exception_handled",
-    "path"
-  ]
-};
-var AUTO_EVENT_ROLLUP_KEYS = {
-  [AUTO_EVENT_NAMES.pageview]: ["path", "origin", "referrer", "utm_source", "utm_medium", "utm_campaign"],
-  [AUTO_EVENT_NAMES.screenView]: ["screen_name"],
-  [AUTO_EVENT_NAMES.pageleave]: ["path", "origin", "scroll_depth_bucket"],
-  [AUTO_EVENT_NAMES.webVitals]: ["metric_name", "rating", "navigation_type", "path"],
-  [AUTO_EVENT_NAMES.exception]: ["$exception_type", "$exception_source", "$exception_handled", "path"]
-};
-var SCROLL_DEPTH_BUCKETS = [25, 50, 75, 100];
-function scrollDepthBucket(depth) {
-  let reached = "0";
-  for (const threshold of SCROLL_DEPTH_BUCKETS) {
-    if (depth >= threshold) reached = `${threshold}`;
-  }
-  return reached;
-}
-
-
-
-
-
-
-
-
-exports.RESERVED_EVENT_NAMES = RESERVED_EVENT_NAMES; exports.AUTO_EVENT_NAMES = AUTO_EVENT_NAMES; exports.AUTO_EVENT_PROPERTIES = AUTO_EVENT_PROPERTIES; exports.AUTO_EVENT_ROLLUP_KEYS = AUTO_EVENT_ROLLUP_KEYS; exports.SCROLL_DEPTH_BUCKETS = SCROLL_DEPTH_BUCKETS; exports.scrollDepthBucket = scrollDepthBucket;
-//# sourceMappingURL=chunk-3EEANNYN.cjs.map

package/dist/chunk-3EEANNYN.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-3EEANNYN.cjs","../src/events.ts"],"names":[],"mappings":"AAAA;ACOO,IAAM,qBAAA,EAAuB,CAAC,eAAA,EAAiB,aAAA,EAAe,aAAa,CAAA;AAQ3E,IAAM,iBAAA,EAAmB;AAAA,EAC9B,QAAA,EAAU,WAAA;AAAA,EACV,UAAA,EAAY,cAAA;AAAA,EACZ,SAAA,EAAW,YAAA;AAAA,EACX,SAAA,EAAW,aAAA;AAAA,EACX,SAAA,EAAW;AACb,CAAA;AASO,IAAM,sBAAA,EAAwB;AAAA,EACnC,CAAC,gBAAA,CAAiB,QAAQ,CAAA,EAAG;AAAA,IAC3B,MAAA;AAAA,IACA,QAAA;AAAA,IACA,OAAA;AAAA,IACA,UAAA;AAAA,IACA,QAAA;AAAA,IACA,YAAA;AAAA,IACA,YAAA;AAAA,IACA,cAAA;AAAA,IACA,UAAA;AAAA,IACA;AAAA,EACF,CAAA;AAAA,EACA,CAAC,gBAAA,CAAiB,UAAU,CAAA,EAAG,CAAC,aAAa,CAAA;AAAA,EAC7C,CAAC,gBAAA,CAAiB,SAAS,CAAA,EAAG,CAAC,MAAA,EAAQ,QAAA,EAAU,UAAA,EAAY,cAAA,EAAgB,qBAAqB,CAAA;AAAA,EAClG,CAAC,gBAAA,CAAiB,SAAS,CAAA,EAAG,CAAC,aAAA,EAAe,WAAA,EAAa,OAAA,EAAS,OAAA,EAAS,QAAA,EAAU,iBAAA,EAAmB,MAAM,CAAA;AAAA;AAAA;AAAA;AAAA,EAIhH,CAAC,gBAAA,CAAiB,SAAS,CAAA,EAAG;AAAA,IAC5B,iBAAA;AAAA,IACA,oBAAA;AAAA,IACA,kBAAA;AAAA,IACA,mBAAA;AAAA,IACA,oBAAA;AAAA,IACA;AAAA,EACF;AACF,CAAA;AAUO,IAAM,uBAAA,EAAyB;AAAA,EACpC,CAAC,gBAAA,CAAiB,QAAQ,CAAA,EAAG,CAAC,MAAA,EAAQ,QAAA,EAAU,UAAA,EAAY,YAAA,EAAc,YAAA,EAAc,cAAc,CAAA;AAAA,EACtG,CAAC,gBAAA,CAAiB,UAAU,CAAA,EAAG,CAAC,aAAa,CAAA;AAAA,EAC7C,CAAC,gBAAA,CAAiB,SAAS,CAAA,EAAG,CAAC,MAAA,EAAQ,QAAA,EAAU,qBAAqB,CAAA;AAAA,EACtE,CAAC,gBAAA,CAAiB,SAAS,CAAA,EAAG,CAAC,aAAA,EAAe,QAAA,EAAU,iBAAA,EAAmB,MAAM,CAAA;AAAA,EACjF,CAAC,gBAAA,CAAiB,SAAS,CAAA,EAAG,CAAC,iBAAA,EAAmB,mBAAA,EAAqB,oBAAA,EAAsB,MAAM;AACrG,CAAA;AAOO,IAAM,qBAAA,EAAuB,CAAC,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,GAAG,CAAA;AAG7C,SAAS,iBAAA,CAAkB,KAAA,EAAkC;AAClE,EAAA,IAAI,QAAA,EAA6B,GAAA;AACjC,EAAA,IAAA,CAAA,MAAW,UAAA,GAAa,oBAAA,EAAsB;AAC5C,IAAA,GAAA,CAAI,MAAA,GAAS,SAAA,EAAW,QAAA,EAAU,CAAA,EAAA;AACpC,EAAA;AACO,EAAA;AACT;ADrCuC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-3EEANNYN.cjs","sourcesContent":[null,"/**\n * `@reopt-ai/data-contract/events` — event names and property keys, with no\n * zod. Browser SDKs import this so their production bundles stay free of\n * schema code; `./ingest` re-exports everything here.\n */\n\n/** Event names the pipeline reserves for its own session bookkeeping. */\nexport const RESERVED_EVENT_NAMES = [\"session_start\", \"session_end\", \"screen_view\"] as const;\n\n/**\n * Events the SDKs emit on their own. One declaration, so a consumer that\n * registers them in its event catalogue (to make them roll up) cannot drift\n * from what the SDK actually sends — a drifted name silently falls back to\n * raw queries, which is slower but not visibly wrong.\n */\nexport const AUTO_EVENT_NAMES = {\n  pageview: \"$pageview\",\n  screenView: \"$screen_view\",\n  pageleave: \"$pageleave\",\n  webVitals: \"$web_vitals\",\n  exception: \"$exception\",\n} as const;\nexport type AutoEventName = (typeof AUTO_EVENT_NAMES)[keyof typeof AUTO_EVENT_NAMES];\n\n/**\n * Property keys each automatic event carries. Consumers derive their\n * breakdown / rollup property lists from here rather than retyping them.\n * `path`, `origin`, `referrer` and `utm_*` are the keys the ingest pipeline\n * reads into session and event columns.\n */\nexport const AUTO_EVENT_PROPERTIES = {\n  [AUTO_EVENT_NAMES.pageview]: [\n    \"path\",\n    \"origin\",\n    \"title\",\n    \"referrer\",\n    \"search\",\n    \"utm_source\",\n    \"utm_medium\",\n    \"utm_campaign\",\n    \"utm_term\",\n    \"utm_content\",\n  ],\n  [AUTO_EVENT_NAMES.screenView]: [\"screen_name\"],\n  [AUTO_EVENT_NAMES.pageleave]: [\"path\", \"origin\", \"duration\", \"scroll_depth\", \"scroll_depth_bucket\"],\n  [AUTO_EVENT_NAMES.webVitals]: [\"metric_name\", \"metric_id\", \"value\", \"delta\", \"rating\", \"navigation_type\", \"path\"],\n  // `$`-prefixed on purpose: these are reserved, SDK-owned keys with fixed\n  // semantics, distinguished from a host's own snake_case vocabulary the\n  // same way the event names are. Not a typo — do not strip the prefix.\n  [AUTO_EVENT_NAMES.exception]: [\n    \"$exception_type\",\n    \"$exception_message\",\n    \"$exception_stack\",\n    \"$exception_source\",\n    \"$exception_handled\",\n    \"path\",\n  ],\n} as const satisfies Record<AutoEventName, readonly string[]>;\n\n/**\n * The subset of {@link AUTO_EVENT_PROPERTIES} that is a sensible rollup\n * dimension: low cardinality, categorical. Per-measurement ids and\n * continuous values (`metric_id`, `value`, `delta`, `duration`,\n * `scroll_depth`) are deliberately absent — as dimensions they would make\n * the rollup larger than the raw table it summarises. Derive\n * `rollupProperties` from here, not from the full property list.\n */\nexport const AUTO_EVENT_ROLLUP_KEYS = {\n  [AUTO_EVENT_NAMES.pageview]: [\"path\", \"origin\", \"referrer\", \"utm_source\", \"utm_medium\", \"utm_campaign\"],\n  [AUTO_EVENT_NAMES.screenView]: [\"screen_name\"],\n  [AUTO_EVENT_NAMES.pageleave]: [\"path\", \"origin\", \"scroll_depth_bucket\"],\n  [AUTO_EVENT_NAMES.webVitals]: [\"metric_name\", \"rating\", \"navigation_type\", \"path\"],\n  [AUTO_EVENT_NAMES.exception]: [\"$exception_type\", \"$exception_source\", \"$exception_handled\", \"path\"],\n} as const satisfies Record<AutoEventName, readonly string[]>;\n\n/**\n * `$pageleave.scroll_depth` is the exact 0–100 percentage; `scroll_depth_bucket`\n * is the deepest of these thresholds reached, as a string — the value to\n * break down by. `\"0\"` means the visitor never reached the first threshold.\n */\nexport const SCROLL_DEPTH_BUCKETS = [25, 50, 75, 100] as const;\nexport type ScrollDepthBucket = \"0\" | `${(typeof SCROLL_DEPTH_BUCKETS)[number]}`;\n\nexport function scrollDepthBucket(depth: number): ScrollDepthBucket {\n  let reached: ScrollDepthBucket = \"0\";\n  for (const threshold of SCROLL_DEPTH_BUCKETS) {\n    if (depth >= threshold) reached = `${threshold}`;\n  }\n  return reached;\n}\n"]}

package/dist/chunk-AOS53KAV.cjs

@@ -1,19 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/version.ts
-var CONTRACT_VERSION = "0.6.2";
-var CONTRACT_VERSION_HEADER = "x-reopt-contract-version";
-var CLIENT_ID_HEADER = "reopt-client-id";
-var CLIENT_SECRET_HEADER = "reopt-client-secret";
-var WRITE_KEY_HEADER = "reopt-write-key";
-var DEVICE_ID_HEADER = "reopt-device-id";
-var REQUEST_ID_HEADER = "x-request-id";
-
-
-
-
-
-
-
-
-
-exports.CONTRACT_VERSION = CONTRACT_VERSION; exports.CONTRACT_VERSION_HEADER = CONTRACT_VERSION_HEADER; exports.CLIENT_ID_HEADER = CLIENT_ID_HEADER; exports.CLIENT_SECRET_HEADER = CLIENT_SECRET_HEADER; exports.WRITE_KEY_HEADER = WRITE_KEY_HEADER; exports.DEVICE_ID_HEADER = DEVICE_ID_HEADER; exports.REQUEST_ID_HEADER = REQUEST_ID_HEADER;
-//# sourceMappingURL=chunk-AOS53KAV.cjs.map

package/dist/chunk-AOS53KAV.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-AOS53KAV.cjs","../src/version.ts"],"names":[],"mappings":"AAAA;ACgBO,IAAM,iBAAA,EAAmB,OAAA;AAGzB,IAAM,wBAAA,EAA0B,0BAAA;AAGhC,IAAM,iBAAA,EAAmB,iBAAA;AACzB,IAAM,qBAAA,EAAuB,qBAAA;AAC7B,IAAM,iBAAA,EAAmB,iBAAA;AACzB,IAAM,iBAAA,EAAmB,iBAAA;AACzB,IAAM,kBAAA,EAAoB,cAAA;ADlBjC;AACA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACF,kVAAC","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-AOS53KAV.cjs","sourcesContent":[null,"/**\n * Wire version and header names — the part of the contract every party\n * needs and none of them should pay zod for. Both `.` and `./identity`\n * re-export these; browser bundles import them through `./identity` so the\n * schema modules stay out of the client graph.\n */\n\n/**\n * Contract version. Bumped on any breaking change to a schema in this package.\n * The server echoes the version it was built against in `x-reopt-contract-version`;\n * `createDataClient` surfaces a mismatch rather than guessing.\n *\n * Must equal the package version (`package-identity.test.ts` enforces it), so\n * every publish is a wire bump: consumers that check for exact equality —\n * every SDK — must upgrade in lockstep with the server.\n */\nexport const CONTRACT_VERSION = \"0.6.2\";\n\n/** Response header carrying the server's contract version. */\nexport const CONTRACT_VERSION_HEADER = \"x-reopt-contract-version\";\n\n/** Request header names shared by the ingest and query planes. */\nexport const CLIENT_ID_HEADER = \"reopt-client-id\";\nexport const CLIENT_SECRET_HEADER = \"reopt-client-secret\";\nexport const WRITE_KEY_HEADER = \"reopt-write-key\";\nexport const DEVICE_ID_HEADER = \"reopt-device-id\";\nexport const REQUEST_ID_HEADER = \"x-request-id\";\n"]}

package/dist/chunk-BA52YA7N.cjs

@@ -1,179 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-var _chunkFQSCQSMPcjs = require('./chunk-FQSCQSMP.cjs');
-
-
-var _chunk3EEANNYNcjs = require('./chunk-3EEANNYN.cjs');
-
-// src/ingest.ts
-var _zod = require('zod');
-var MAX_TRACK_PAYLOAD_BYTES = 512e3;
-var zClientEventMetadata = {
-  /**
-   * Client-generated UUID. This is the project-scoped idempotency key stored as
-   * `RawEvent.clientEventId`; the server uses a separate globally unique raw
-   * event id internally. Re-sending the same eventId to the same project is
-   * always safe and always reported as a duplicate.
-   */
-  eventId: _zod.z.uuid(),
-  /** Event time, epoch milliseconds. */
-  timestamp: _zod.z.number().int().nonnegative(),
-  /**
-   * The browser device this event belongs to, for events a server records
-   * on a visitor's behalf (a form submission, an order). Lets one server
-   * batch carry events from many visitors — a forwarder cannot split its
-   * batches per device without breaking its failure model and its
-   * `accepted + duplicates + rejected === sent` invariant.
-   *
-   * Honoured in `server` mode only, where it takes precedence over the
-   * `reopt-device-id` request header. Ignored in `browser` mode: there the
-   * header is authoritative and a body field would be trivially forged.
-   * Same character set as every identity id.
-   */
-  deviceId: _zod.z.string().regex(_chunkFQSCQSMPcjs.IDENTITY_ID_PATTERN, "expected an identity id").optional()
-};
-var zTrackPayload = _zod.z.object({
-  name: _zod.z.string().min(1).max(200),
-  properties: _zod.z.record(_zod.z.string(), _zod.z.unknown()).optional(),
-  profileId: _zod.z.string().max(500).or(_zod.z.number()).optional()
-}).refine((data) => !_chunk3EEANNYNcjs.RESERVED_EVENT_NAMES.includes(data.name), {
-  message: `Event name cannot be one of the reserved names: ${_chunk3EEANNYNcjs.RESERVED_EVENT_NAMES.join(", ")}`,
-  path: ["name"]
-});
-var zIdentifyPayload = _zod.z.object({
-  profileId: _zod.z.string().min(1).max(500).or(_zod.z.number()),
-  firstName: _zod.z.string().max(200).optional(),
-  lastName: _zod.z.string().max(200).optional(),
-  email: _zod.z.email().max(320).optional(),
-  avatar: _zod.z.url().max(2e3).optional(),
-  properties: _zod.z.record(_zod.z.string(), _zod.z.unknown()).optional()
-});
-var zIncrementPayload = _zod.z.object({
-  profileId: _zod.z.string().min(1).max(500).or(_zod.z.number()),
-  property: _zod.z.string().min(1).max(200),
-  value: _zod.z.number().positive().optional()
-});
-var zDecrementPayload = _zod.z.object({
-  profileId: _zod.z.string().min(1).max(500).or(_zod.z.number()),
-  property: _zod.z.string().min(1).max(200),
-  value: _zod.z.number().positive().optional()
-});
-var zTrackHandlerPayload = _zod.z.discriminatedUnion("type", [
-  _zod.z.object({ type: _zod.z.literal("track"), payload: zTrackPayload, ...zClientEventMetadata }),
-  _zod.z.object({ type: _zod.z.literal("identify"), payload: zIdentifyPayload, ...zClientEventMetadata }),
-  _zod.z.object({ type: _zod.z.literal("increment"), payload: zIncrementPayload, ...zClientEventMetadata }),
-  _zod.z.object({ type: _zod.z.literal("decrement"), payload: zDecrementPayload, ...zClientEventMetadata })
-]);
-var INGEST_MODES = ["browser", "server"];
-var zIngestMode = _zod.z.enum(INGEST_MODES);
-var INGEST_REJECTION_REASONS = [
-  /** Failed the zod schema (bad eventId, missing name, wrong types…). */
-  "validation_failed",
-  /** Used one of RESERVED_EVENT_NAMES. */
-  "reserved_name",
-  /** Another row earlier in the same batch already claimed this eventId. */
-  "duplicate_in_batch"
-];
-var zIngestRejectionReason = _zod.z.enum(INGEST_REJECTION_REASONS);
-var zIngestRejection = _zod.z.object({
-  /** May be absent or malformed on `validation_failed` — hence `string`, not `uuid`. */
-  eventId: _zod.z.string(),
-  /** Position in the submitted batch. The only reliable identifier when eventId itself is bad. */
-  index: _zod.z.number().int().nonnegative(),
-  reason: zIngestRejectionReason,
-  message: _zod.z.string().optional()
-});
-var ingestCounts = {
-  /** Raw events newly persisted by this request. */
-  accepted: _zod.z.number().int().nonnegative(),
-  /**
-   * Events the server already had. In `server` mode this is exactly the
-   * eventId-idempotency count; in `browser` mode it also includes the
-   * 5-second click dedup.
-   */
-  duplicates: _zod.z.number().int().nonnegative(),
-  /** Always `[]` in `browser` mode, where a bad row fails the whole batch. */
-  rejected: _zod.z.array(zIngestRejection)
-};
-var zSessionCredential = _zod.z.object({
-  id: _zod.z.string().regex(_chunkFQSCQSMPcjs.IDENTITY_ID_PATTERN),
-  token: _zod.z.string().regex(/^[A-Za-z0-9_-]{43}$/)
-});
-var zIngestOkResponse = _zod.z.object({
-  status: _zod.z.literal("ok"),
-  requestId: _zod.z.string(),
-  mode: zIngestMode,
-  ...ingestCounts,
-  queued: _zod.z.boolean(),
-  session: zSessionCredential.optional()
-});
-var zIngestAcceptedResponse = _zod.z.object({
-  status: _zod.z.literal("accepted"),
-  requestId: _zod.z.string(),
-  mode: zIngestMode,
-  ...ingestCounts,
-  backgroundQueued: _zod.z.literal(false),
-  replay: _zod.z.literal("unmaterialized-raw-events"),
-  session: zSessionCredential.optional()
-});
-var zIngestResponse = _zod.z.discriminatedUnion("status", [zIngestOkResponse, zIngestAcceptedResponse]);
-function reconcileIngestResponse(response, sentCount) {
-  return response.accepted + response.duplicates + response.rejected.length === sentCount;
-}
-var INGEST_ERROR_CODES = [
-  /** 401 — unknown or mismatched credentials. Stop and alert; do not retry. */
-  "unauthorized",
-  /** 400 — body was not valid JSON. */
-  "invalid_json",
-  /** 400 — request exceeded MAX_TRACK_PAYLOAD_BYTES. Split the batch. */
-  "payload_too_large",
-  /** 400 — zero events submitted. */
-  "empty_batch",
-  /** 400 — batch contained a `type: "alias"` event, which is not supported. */
-  "alias_unsupported",
-  /** 400 — the project has no organization; it cannot be billed or quota-checked. */
-  "project_without_organization",
-  /** 400 — `browser` mode only: a row failed validation. `server` mode reports these in `rejected[]`. */
-  "validation_failed",
-  /** 429 — per-project request rate limit. `Retry-After` set. Pause this tick, keep the cursor. */
-  "rate_limited",
-  /** 429 — the organization's monthly event quota is exhausted. `Retry-After` set (capped at 1h). Alert: a human must raise the limit. */
-  "quota_exceeded",
-  /** 410 — the project is being deleted. Permanent; stop sending. */
-  "project_purging",
-  /** 500 — unexpected server failure. Back off and retry. */
-  "internal_error"
-];
-var zIngestErrorCode = _zod.z.enum(INGEST_ERROR_CODES);
-var zIngestError = _zod.z.object({
-  status: _zod.z.number().int(),
-  code: zIngestErrorCode,
-  error: _zod.z.string(),
-  message: _zod.z.string().optional(),
-  /** zod issues, when `code === "validation_failed"`. */
-  errors: _zod.z.unknown().optional(),
-  requestId: _zod.z.string().optional()
-});
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-exports.MAX_TRACK_PAYLOAD_BYTES = MAX_TRACK_PAYLOAD_BYTES; exports.zTrackPayload = zTrackPayload; exports.zIdentifyPayload = zIdentifyPayload; exports.zIncrementPayload = zIncrementPayload; exports.zDecrementPayload = zDecrementPayload; exports.zTrackHandlerPayload = zTrackHandlerPayload; exports.INGEST_MODES = INGEST_MODES; exports.zIngestMode = zIngestMode; exports.INGEST_REJECTION_REASONS = INGEST_REJECTION_REASONS; exports.zIngestRejectionReason = zIngestRejectionReason; exports.zIngestRejection = zIngestRejection; exports.zSessionCredential = zSessionCredential; exports.zIngestOkResponse = zIngestOkResponse; exports.zIngestAcceptedResponse = zIngestAcceptedResponse; exports.zIngestResponse = zIngestResponse; exports.reconcileIngestResponse = reconcileIngestResponse; exports.INGEST_ERROR_CODES = INGEST_ERROR_CODES; exports.zIngestErrorCode = zIngestErrorCode; exports.zIngestError = zIngestError;
-//# sourceMappingURL=chunk-BA52YA7N.cjs.map

package/dist/chunk-BA52YA7N.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-BA52YA7N.cjs","../src/ingest.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACA;ACIA,0BAAkB;AAgBX,IAAM,wBAAA,EAA0B,KAAA;AAEvC,IAAM,qBAAA,EAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO3B,OAAA,EAAS,MAAA,CAAE,IAAA,CAAK,CAAA;AAAA;AAAA,EAEhB,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,WAAA,CAAY,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaxC,QAAA,EAAU,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,KAAA,CAAM,qCAAA,EAAqB,yBAAyB,CAAA,CAAE,QAAA,CAAS;AACtF,CAAA;AAEO,IAAM,cAAA,EAAgB,MAAA,CAC1B,MAAA,CAAO;AAAA,EACN,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAAA,EAC/B,UAAA,EAAY,MAAA,CAAE,MAAA,CAAO,MAAA,CAAE,MAAA,CAAO,CAAA,EAAG,MAAA,CAAE,OAAA,CAAQ,CAAC,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,EACvD,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,EAAA,CAAG,MAAA,CAAE,MAAA,CAAO,CAAC,CAAA,CAAE,QAAA,CAAS;AACzD,CAAC,CAAA,CACA,MAAA,CAAO,CAAC,IAAA,EAAA,GAAS,CAAC,sCAAA,CAAqB,QAAA,CAAS,IAAA,CAAK,IAAa,CAAA,EAAG;AAAA,EACpE,OAAA,EAAS,CAAA,gDAAA,EAAmD,sCAAA,CAAqB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAC9E,EAAA;AACd;AAEsC;AACY,EAAA;AACX,EAAA;AACD,EAAA;AACJ,EAAA;AACA,EAAA;AACoB,EAAA;AACxD;AAEyC;AACW,EAAA;AAChB,EAAA;AACG,EAAA;AACvC;AAEyC;AACW,EAAA;AAChB,EAAA;AACG,EAAA;AACvC;AAEgE;AACuB,EAAA;AACM,EAAA;AACpB,EAAA;AACA,EAAA;AACzE;AAqB+C;AACF;AAUN;AAAA;AAEtC,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AACF;AACqE;AAG5B;AAAA;AAErB,EAAA;AAAA;AAEkB,EAAA;AAC5B,EAAA;AACqB,EAAA;AAC9B;AAGoB;AAAA;AAEoB,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAME,EAAA;AAAA;AAEP,EAAA;AACpC;AAQ2C;AACD,EAAA;AACK,EAAA;AAC9C;AAIyC;AAClB,EAAA;AACF,EAAA;AACd,EAAA;AACH,EAAA;AACe,EAAA;AACmB,EAAA;AACtC;AAQ+C;AAClB,EAAA;AACR,EAAA;AACd,EAAA;AACH,EAAA;AAC8B,EAAA;AACY,EAAA;AACR,EAAA;AACtC;AAEiF;AAcY;AACd,EAAA;AAChF;AAQkC;AAAA;AAEhC,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AACF;AACyD;AAGpB;AACZ,EAAA;AACjB,EAAA;AACU,EAAA;AACa,EAAA;AAAA;AAEA,EAAA;AACE,EAAA;AAChC;ADlG6F;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-BA52YA7N.cjs","sourcesContent":[null,"/**\n * `POST /api/track` — the ingest contract.\n *\n * The request shape is shared by both credential modes. The *response* shape\n * is where server-ingest differs: it reports per-event rejections instead of\n * failing a whole batch, because a forwarder that stalls on one malformed row\n * stops forwarding forever.\n *\n * Absorbed from the former internal `@reopt/ingest-contract`; that package is\n * now a deprecated re-export of this module.\n */\nimport { z } from \"zod\";\nimport { IDENTITY_ID_PATTERN } from \"./identity.js\";\n\nexport {\n  AUTO_EVENT_NAMES,\n  AUTO_EVENT_PROPERTIES,\n  AUTO_EVENT_ROLLUP_KEYS,\n  RESERVED_EVENT_NAMES,\n  SCROLL_DEPTH_BUCKETS,\n  scrollDepthBucket,\n  type AutoEventName,\n  type ScrollDepthBucket,\n} from \"./events.js\";\nimport { RESERVED_EVENT_NAMES } from \"./events.js\";\n\n/** Hard cap enforced by the route before the body is even parsed. */\nexport const MAX_TRACK_PAYLOAD_BYTES = 512_000;\n\nconst zClientEventMetadata = {\n  /**\n   * Client-generated UUID. This is the project-scoped idempotency key stored as\n   * `RawEvent.clientEventId`; the server uses a separate globally unique raw\n   * event id internally. Re-sending the same eventId to the same project is\n   * always safe and always reported as a duplicate.\n   */\n  eventId: z.uuid(),\n  /** Event time, epoch milliseconds. */\n  timestamp: z.number().int().nonnegative(),\n  /**\n   * The browser device this event belongs to, for events a server records\n   * on a visitor's behalf (a form submission, an order). Lets one server\n   * batch carry events from many visitors — a forwarder cannot split its\n   * batches per device without breaking its failure model and its\n   * `accepted + duplicates + rejected === sent` invariant.\n   *\n   * Honoured in `server` mode only, where it takes precedence over the\n   * `reopt-device-id` request header. Ignored in `browser` mode: there the\n   * header is authoritative and a body field would be trivially forged.\n   * Same character set as every identity id.\n   */\n  deviceId: z.string().regex(IDENTITY_ID_PATTERN, \"expected an identity id\").optional(),\n};\n\nexport const zTrackPayload = z\n  .object({\n    name: z.string().min(1).max(200),\n    properties: z.record(z.string(), z.unknown()).optional(),\n    profileId: z.string().max(500).or(z.number()).optional(),\n  })\n  .refine((data) => !RESERVED_EVENT_NAMES.includes(data.name as never), {\n    message: `Event name cannot be one of the reserved names: ${RESERVED_EVENT_NAMES.join(\", \")}`,\n    path: [\"name\"],\n  });\n\nexport const zIdentifyPayload = z.object({\n  profileId: z.string().min(1).max(500).or(z.number()),\n  firstName: z.string().max(200).optional(),\n  lastName: z.string().max(200).optional(),\n  email: z.email().max(320).optional(),\n  avatar: z.url().max(2000).optional(),\n  properties: z.record(z.string(), z.unknown()).optional(),\n});\n\nexport const zIncrementPayload = z.object({\n  profileId: z.string().min(1).max(500).or(z.number()),\n  property: z.string().min(1).max(200),\n  value: z.number().positive().optional(),\n});\n\nexport const zDecrementPayload = z.object({\n  profileId: z.string().min(1).max(500).or(z.number()),\n  property: z.string().min(1).max(200),\n  value: z.number().positive().optional(),\n});\n\nexport const zTrackHandlerPayload = z.discriminatedUnion(\"type\", [\n  z.object({ type: z.literal(\"track\"), payload: zTrackPayload, ...zClientEventMetadata }),\n  z.object({ type: z.literal(\"identify\"), payload: zIdentifyPayload, ...zClientEventMetadata }),\n  z.object({ type: z.literal(\"increment\"), payload: zIncrementPayload, ...zClientEventMetadata }),\n  z.object({ type: z.literal(\"decrement\"), payload: zDecrementPayload, ...zClientEventMetadata }),\n]);\n\nexport type ITrackPayload = z.infer<typeof zTrackPayload>;\nexport type IIdentifyPayload = z.infer<typeof zIdentifyPayload>;\nexport type IIncrementPayload = z.infer<typeof zIncrementPayload>;\nexport type IDecrementPayload = z.infer<typeof zDecrementPayload>;\nexport type ITrackHandlerPayload = z.infer<typeof zTrackHandlerPayload>;\n\n// ─── Ingest mode ────────────────────────────────────────────────────────────\n\n/**\n * Decided by the credential presented, never by a header the caller sets:\n * `reopt-write-key` alone → `browser`, `reopt-client-id` + `reopt-client-secret`\n * → `server`. A separate mode header could disagree with the credential; this\n * cannot.\n *\n * `browser` keeps the 5-second click dedup and device-scoped sessions.\n * `server` drops both and relies solely on `eventId` idempotency — a server\n * batch legitimately contains the same event name many times within one second,\n * and its \"device\" is a process, not a person.\n */\nexport const INGEST_MODES = [\"browser\", \"server\"] as const;\nexport const zIngestMode = z.enum(INGEST_MODES);\nexport type IngestMode = z.infer<typeof zIngestMode>;\n\n// ─── Response ───────────────────────────────────────────────────────────────\n\n/**\n * Why a single event in a batch was dropped. These are permanent: re-sending\n * the same row produces the same rejection, so a forwarder should count it as\n * skipped and advance its cursor rather than retry.\n */\nexport const INGEST_REJECTION_REASONS = [\n  /** Failed the zod schema (bad eventId, missing name, wrong types…). */\n  \"validation_failed\",\n  /** Used one of RESERVED_EVENT_NAMES. */\n  \"reserved_name\",\n  /** Another row earlier in the same batch already claimed this eventId. */\n  \"duplicate_in_batch\",\n] as const;\nexport const zIngestRejectionReason = z.enum(INGEST_REJECTION_REASONS);\nexport type IngestRejectionReason = z.infer<typeof zIngestRejectionReason>;\n\nexport const zIngestRejection = z.object({\n  /** May be absent or malformed on `validation_failed` — hence `string`, not `uuid`. */\n  eventId: z.string(),\n  /** Position in the submitted batch. The only reliable identifier when eventId itself is bad. */\n  index: z.number().int().nonnegative(),\n  reason: zIngestRejectionReason,\n  message: z.string().optional(),\n});\nexport type IngestRejection = z.infer<typeof zIngestRejection>;\n\nconst ingestCounts = {\n  /** Raw events newly persisted by this request. */\n  accepted: z.number().int().nonnegative(),\n  /**\n   * Events the server already had. In `server` mode this is exactly the\n   * eventId-idempotency count; in `browser` mode it also includes the\n   * 5-second click dedup.\n   */\n  duplicates: z.number().int().nonnegative(),\n  /** Always `[]` in `browser` mode, where a bad row fails the whole batch. */\n  rejected: z.array(zIngestRejection),\n};\n\n/**\n * The session ingest filed this batch under, with the token that lets the\n * browser (or a server acting for it) join the same session later with\n * authority — see `signSessionToken` in `./identity`. Browser mode only;\n * absent when the batch carried no sessionable event.\n */\nexport const zSessionCredential = z.object({\n  id: z.string().regex(IDENTITY_ID_PATTERN),\n  token: z.string().regex(/^[A-Za-z0-9_-]{43}$/),\n});\nexport type SessionCredential = z.infer<typeof zSessionCredential>;\n\n/** 200 — accepted and handed to the materialize queue. */\nexport const zIngestOkResponse = z.object({\n  status: z.literal(\"ok\"),\n  requestId: z.string(),\n  mode: zIngestMode,\n  ...ingestCounts,\n  queued: z.boolean(),\n  session: zSessionCredential.optional(),\n});\n\n/**\n * 202 — raw events landed, but enqueueing the materialize task failed. No data\n * is lost: the `replay-unmaterialized` cron picks these up. A forwarder should\n * treat this as success and advance its cursor. Carries the same counts as 200\n * so the reconciliation below works here too.\n */\nexport const zIngestAcceptedResponse = z.object({\n  status: z.literal(\"accepted\"),\n  requestId: z.string(),\n  mode: zIngestMode,\n  ...ingestCounts,\n  backgroundQueued: z.literal(false),\n  replay: z.literal(\"unmaterialized-raw-events\"),\n  session: zSessionCredential.optional(),\n});\n\nexport const zIngestResponse = z.discriminatedUnion(\"status\", [zIngestOkResponse, zIngestAcceptedResponse]);\n\nexport type IngestOkResponse = z.infer<typeof zIngestOkResponse>;\nexport type IngestAcceptedResponse = z.infer<typeof zIngestAcceptedResponse>;\nexport type IngestResponse = z.infer<typeof zIngestResponse>;\n\n/**\n * The reconciliation a forwarder runs on every 2xx:\n *\n *     accepted + duplicates + rejected.length === events sent\n *\n * A mismatch means the server silently dropped something, which is exactly the\n * failure mode this contract exists to make impossible to miss.\n */\nexport function reconcileIngestResponse(response: IngestResponse, sentCount: number): boolean {\n  return response.accepted + response.duplicates + response.rejected.length === sentCount;\n}\n\n// ─── Errors ─────────────────────────────────────────────────────────────────\n\n/**\n * Stable machine-readable codes. Branch on these, never on `error`/`message`,\n * which are prose and may be reworded.\n */\nexport const INGEST_ERROR_CODES = [\n  /** 401 — unknown or mismatched credentials. Stop and alert; do not retry. */\n  \"unauthorized\",\n  /** 400 — body was not valid JSON. */\n  \"invalid_json\",\n  /** 400 — request exceeded MAX_TRACK_PAYLOAD_BYTES. Split the batch. */\n  \"payload_too_large\",\n  /** 400 — zero events submitted. */\n  \"empty_batch\",\n  /** 400 — batch contained a `type: \"alias\"` event, which is not supported. */\n  \"alias_unsupported\",\n  /** 400 — the project has no organization; it cannot be billed or quota-checked. */\n  \"project_without_organization\",\n  /** 400 — `browser` mode only: a row failed validation. `server` mode reports these in `rejected[]`. */\n  \"validation_failed\",\n  /** 429 — per-project request rate limit. `Retry-After` set. Pause this tick, keep the cursor. */\n  \"rate_limited\",\n  /** 429 — the organization's monthly event quota is exhausted. `Retry-After` set (capped at 1h). Alert: a human must raise the limit. */\n  \"quota_exceeded\",\n  /** 410 — the project is being deleted. Permanent; stop sending. */\n  \"project_purging\",\n  /** 500 — unexpected server failure. Back off and retry. */\n  \"internal_error\",\n] as const;\nexport const zIngestErrorCode = z.enum(INGEST_ERROR_CODES);\nexport type IngestErrorCode = z.infer<typeof zIngestErrorCode>;\n\nexport const zIngestError = z.object({\n  status: z.number().int(),\n  code: zIngestErrorCode,\n  error: z.string(),\n  message: z.string().optional(),\n  /** zod issues, when `code === \"validation_failed\"`. */\n  errors: z.unknown().optional(),\n  requestId: z.string().optional(),\n});\nexport type IngestError = z.infer<typeof zIngestError>;\n"]}