@rudderhq/server 0.7.0 → 0.7.1

package/dist/services/product-analytics-fixture.js

@@ -0,0 +1,65 @@
+export const PRODUCT_ANALYTICS_FIXTURE_NOW = "2026-08-04T00:00:00.000Z";
+export const PRODUCT_ANALYTICS_FIXTURE_INSTALLATIONS = [
+    "11111111-1111-4111-8111-111111111111",
+    "11111111-1111-4111-8111-111111111112",
+    "11111111-1111-4111-8111-111111111113",
+];
+export const PRODUCT_ANALYTICS_FIXTURE_AUTHORIZATION = {
+    installationId: PRODUCT_ANALYTICS_FIXTURE_INSTALLATIONS[0],
+    mode: "anonymous",
+    consentVersion: "v1",
+    consentEpoch: 1,
+    pseudonymousInstallationId: "fixture-installation-hash",
+};
+const EVENT_NAMES = ["human_work_started", "run_succeeded", "output_ready", "work_loop_completed"];
+export function productAnalyticsFixtureEvent(index, overrides = {}) {
+    const installationIndex = index % PRODUCT_ANALYTICS_FIXTURE_INSTALLATIONS.length;
+    const eventName = EVENT_NAMES[index % EVENT_NAMES.length];
+    const occurredAt = new Date(Date.parse(PRODUCT_ANALYTICS_FIXTURE_NOW) - (index % 3) * 60 * 60 * 1000).toISOString();
+    const properties = eventName === "run_succeeded"
+        ? { run_kind: "agent", runtime: "local", attempt_kind: "initial" }
+        : eventName === "output_ready"
+            ? { output_kind: "patch" }
+            : eventName === "work_loop_completed"
+                ? { work_surface: "issue", origin: "human", review_required: false }
+                : { work_surface: "issue", origin: "human" };
+    return {
+        eventId: `22222222-2222-4${String(index % 10)}22-8222-${String(index).padStart(12, "0")}`,
+        eventName,
+        schemaVersion: 1,
+        occurredAt,
+        environment: "production",
+        appVersion: "0.6.6-fixture",
+        releaseChannel: "stable",
+        deploymentMode: "desktop_local",
+        actorKind: "user",
+        origin: "human",
+        pseudonymousInstallationId: `fixture-installation-hash-${installationIndex}`,
+        pseudonymousOrgId: "fixture-org-hash",
+        pseudonymousWorkId: `fixture-work-${index}`,
+        pseudonymousWorkCycleId: `fixture-cycle-${index}`,
+        pseudonymousRootRunId: null,
+        pseudonymousRunId: `fixture-run-${index}`,
+        completionRevision: eventNameIsCompletion(index) ? 1 : null,
+        properties,
+        confidence: "exact",
+        isBackfill: index % 11 === 0,
+        ...overrides,
+    };
+}
+function eventNameIsCompletion(index) {
+    return EVENT_NAMES[index % EVENT_NAMES.length] === "work_loop_completed";
+}
+export function productAnalyticsFixtureDashboardEvents(count = 30) {
+    return Array.from({ length: count }, (_, index) => {
+        const event = productAnalyticsFixtureEvent(index);
+        const installationId = PRODUCT_ANALYTICS_FIXTURE_INSTALLATIONS[index % PRODUCT_ANALYTICS_FIXTURE_INSTALLATIONS.length];
+        return {
+            ...event,
+            installationId,
+            effectiveAt: event.occurredAt,
+            late: false,
+        };
+    });
+}
+//# sourceMappingURL=product-analytics-fixture.js.map

package/dist/services/product-analytics-fixture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-analytics-fixture.js","sourceRoot":"","sources":["../../src/services/product-analytics-fixture.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,6BAA6B,GAAG,0BAA0B,CAAC;AACxE,MAAM,CAAC,MAAM,uCAAuC,GAAG;IACrD,sCAAsC;IACtC,sCAAsC;IACtC,sCAAsC;CAC9B,CAAC;AAEX,MAAM,CAAC,MAAM,uCAAuC,GAA2C;IAC7F,cAAc,EAAE,uCAAuC,CAAC,CAAC,CAAC;IAC1D,IAAI,EAAE,WAAW;IACjB,cAAc,EAAE,IAAI;IACpB,YAAY,EAAE,CAAC;IACf,0BAA0B,EAAE,2BAA2B;CACxD,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,oBAAoB,EAAE,eAAe,EAAE,cAAc,EAAE,qBAAqB,CAAU,CAAC;AAE5G,MAAM,UAAU,4BAA4B,CAC1C,KAAa,EACb,YAAqD,EAAE;IAEvD,MAAM,iBAAiB,GAAG,KAAK,GAAG,uCAAuC,CAAC,MAAM,CAAC;IACjF,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACpH,MAAM,UAAU,GAAiD,SAAS,KAAK,eAAe;QAC5F,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE;QAClE,CAAC,CAAC,SAAS,KAAK,cAAc;YAC5B,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE;YAC1B,CAAC,CAAC,SAAS,KAAK,qBAAqB;gBACnC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE;gBACpE,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACnD,OAAO;QACL,OAAO,EAAE,kBAAkB,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,WAAW,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE;QACzF,SAAS;QACT,aAAa,EAAE,CAAC;QAChB,UAAU;QACV,WAAW,EAAE,YAAY;QACzB,UAAU,EAAE,eAAe;QAC3B,cAAc,EAAE,QAAQ;QACxB,cAAc,EAAE,eAAe;QAC/B,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,OAAO;QACf,0BAA0B,EAAE,6BAA6B,iBAAiB,EAAE;QAC5E,iBAAiB,EAAE,kBAAkB;QACrC,kBAAkB,EAAE,gBAAgB,KAAK,EAAE;QAC3C,uBAAuB,EAAE,iBAAiB,KAAK,EAAE;QACjD,qBAAqB,EAAE,IAAI;QAC3B,iBAAiB,EAAE,eAAe,KAAK,EAAE;QACzC,kBAAkB,EAAE,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;QAC3D,UAAU;QACV,UAAU,EAAE,OAAO;QACnB,UAAU,EAAE,KAAK,GAAG,EAAE,KAAK,CAAC;QAC5B,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,qBAAqB,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,sCAAsC,CAAC,KAAK,GAAG,EAAE;IAC/D,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,uCAAuC,CAAC,KAAK,GAAG,uCAAuC,CAAC,MAAM,CAAC,CAAC;QACvH,OAAO;YACL,GAAG,KAAK;YACR,cAAc;YACd,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,IAAI,EAAE,KAAK;SACZ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/services/product-analytics-prd-gates.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=product-analytics-prd-gates.test.d.ts.map

package/dist/services/product-analytics-prd-gates.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-analytics-prd-gates.test.d.ts","sourceRoot":"","sources":["../../src/services/product-analytics-prd-gates.test.ts"],"names":[],"mappings":""}

package/dist/services/product-analytics-prd-gates.test.js

@@ -0,0 +1,135 @@
+import { describe, expect, it } from "vitest";
+import { buildProductAnalyticsCollectorDashboard, createProductAnalyticsCollector, InMemoryProductAnalyticsCollectorStore, validateProductAnalyticsCollectorEvent, } from "./product-analytics-collector.js";
+import { PRODUCT_ANALYTICS_FIXTURE_AUTHORIZATION, PRODUCT_ANALYTICS_FIXTURE_INSTALLATIONS, PRODUCT_ANALYTICS_FIXTURE_NOW, productAnalyticsFixtureDashboardEvents, productAnalyticsFixtureEvent, } from "./product-analytics-fixture.js";
+const SENSITIVE_TOKEN = /(prompt|transcript|title|description|body|content|url|token|secret|password|credential|email|hostname|username)/i;
+describe("product analytics PRD gates", () => {
+    it("uses a deterministic fixture and keeps every accepted seed privacy-safe", () => {
+        const first = productAnalyticsFixtureEvent(0);
+        const second = productAnalyticsFixtureEvent(0);
+        expect(first).toEqual(second);
+        expect(first.occurredAt).toBe(PRODUCT_ANALYTICS_FIXTURE_NOW);
+        const seeds = Array.from({ length: 20 }, (_, index) => productAnalyticsFixtureEvent(index));
+        for (const seed of seeds) {
+            const serialized = JSON.stringify(seed);
+            expect(serialized).not.toMatch(SENSITIVE_TOKEN);
+            const result = validateProductAnalyticsCollectorEvent(seed);
+            expect(result).not.toHaveProperty("status", "rejected");
+        }
+    });
+    it("proves idempotency, offline-safe retry, revoke races, and shared-user isolation", async () => {
+        const store = new InMemoryProductAnalyticsCollectorStore();
+        store.setInstallationState(PRODUCT_ANALYTICS_FIXTURE_AUTHORIZATION.installationId, {
+            consentVersion: "v1",
+            consentEpoch: 1,
+            revoked: false,
+        });
+        const collector = createProductAnalyticsCollector(store);
+        const payload = productAnalyticsFixtureEvent(1, { pseudonymousInstallationId: "fixture-installation-hash" });
+        const first = collector.ingestBatch({
+            authorization: PRODUCT_ANALYTICS_FIXTURE_AUTHORIZATION,
+            events: [payload],
+            now: new Date(PRODUCT_ANALYTICS_FIXTURE_NOW),
+        });
+        const duplicate = collector.ingestBatch({
+            authorization: PRODUCT_ANALYTICS_FIXTURE_AUTHORIZATION,
+            events: [payload],
+            now: new Date(PRODUCT_ANALYTICS_FIXTURE_NOW),
+        });
+        expect(first.accepted).toBe(1);
+        expect(duplicate.duplicate).toBe(1);
+        const revoked = collector.advanceConsent({
+            installationId: PRODUCT_ANALYTICS_FIXTURE_AUTHORIZATION.installationId,
+            consentVersion: "v1",
+            consentEpoch: 2,
+            revoked: true,
+        });
+        const stale = collector.ingestBatch({
+            authorization: PRODUCT_ANALYTICS_FIXTURE_AUTHORIZATION,
+            events: [productAnalyticsFixtureEvent(2)],
+            now: new Date(PRODUCT_ANALYTICS_FIXTURE_NOW),
+        });
+        expect(revoked.revoked).toBe(true);
+        expect(stale.rejected[0]?.errorCode).toBe("revoked");
+        const sharedUserStore = new InMemoryProductAnalyticsCollectorStore();
+        const sharedUserCollector = createProductAnalyticsCollector(sharedUserStore);
+        const sharedAuthorization = (installationId) => ({
+            ...PRODUCT_ANALYTICS_FIXTURE_AUTHORIZATION,
+            installationId,
+            analyticsSubject: "shared-user-subject",
+            pseudonymousInstallationId: null,
+            mode: "account_linked",
+        });
+        for (const installationId of PRODUCT_ANALYTICS_FIXTURE_INSTALLATIONS.slice(0, 2)) {
+            sharedUserStore.setSubjectState(installationId, "shared-user-subject", { consentVersion: "v1", consentEpoch: 1, revoked: false });
+        }
+        const sharedFirst = sharedUserCollector.ingestBatch({
+            authorization: sharedAuthorization(PRODUCT_ANALYTICS_FIXTURE_INSTALLATIONS[0]),
+            events: [productAnalyticsFixtureEvent(10, { eventId: "33333333-3333-4333-8333-333333333333" })],
+            now: new Date(PRODUCT_ANALYTICS_FIXTURE_NOW),
+        });
+        const sharedSecond = sharedUserCollector.ingestBatch({
+            authorization: sharedAuthorization(PRODUCT_ANALYTICS_FIXTURE_INSTALLATIONS[1]),
+            events: [productAnalyticsFixtureEvent(11, { eventId: "33333333-3333-4333-8333-333333333334" })],
+            now: new Date(PRODUCT_ANALYTICS_FIXTURE_NOW),
+        });
+        expect(sharedFirst.accepted).toBe(1);
+        expect(sharedSecond.accepted).toBe(1);
+        expect(sharedUserCollector.store.listEvents().map((event) => event.installationId).sort()).toEqual([...PRODUCT_ANALYTICS_FIXTURE_INSTALLATIONS.slice(0, 2)].sort());
+        expect(sharedUserCollector.store.listEvents().every((event) => event.analyticsSubject === "shared-user-subject")).toBe(true);
+    });
+    it("builds thresholded rollups, installation cohorts, and quality counters", () => {
+        const events = productAnalyticsFixtureDashboardEvents(30);
+        const dashboard = buildProductAnalyticsCollectorDashboard(events, { privacyThreshold: 2 });
+        expect(dashboard.rollups.length).toBeGreaterThan(0);
+        expect(dashboard.rollups.every((rollup) => rollup.contributingInstallations >= 2 || rollup.eventCount === null)).toBe(true);
+        expect(dashboard.cohorts).toEqual([
+            { firstSeenDay: "2026-08-03", installationCount: 2, suppressed: false },
+            { firstSeenDay: "2026-08-04", installationCount: null, suppressed: true },
+        ]);
+        expect(dashboard.quality).toMatchObject({
+            acceptedEventCount: 30,
+            backfillEventCount: 3,
+            lateEventCount: 0,
+            missingPseudonymousInstallationCount: 0,
+            privacyThreshold: 2,
+        });
+        const singleton = {
+            ...events[0],
+            installationId: "44444444-4444-4444-8444-444444444444",
+            eventName: "human_work_started",
+            occurredAt: "2026-08-05T00:00:00.000Z",
+            effectiveAt: "2026-08-04T00:00:00.000Z",
+            late: true,
+        };
+        const recomputed = buildProductAnalyticsCollectorDashboard([...events, singleton], { privacyThreshold: 2 });
+        const suppressed = recomputed.rollups.find((rollup) => rollup.day === "2026-08-04" && rollup.eventName === "human_work_started");
+        expect(suppressed).toMatchObject({ contributingInstallations: 1, eventCount: null, suppressed: true });
+        expect(recomputed.quality.lateEventCount).toBe(1);
+        expect(recomputed).toEqual(buildProductAnalyticsCollectorDashboard([singleton, ...events], { privacyThreshold: 2 }));
+        const dashboardJson = JSON.stringify(recomputed);
+        for (const installationId of PRODUCT_ANALYTICS_FIXTURE_INSTALLATIONS) {
+            expect(dashboardJson).not.toContain(installationId);
+        }
+    });
+    it("keeps the deterministic ingest benchmark bounded", () => {
+        const store = new InMemoryProductAnalyticsCollectorStore();
+        store.setInstallationState(PRODUCT_ANALYTICS_FIXTURE_AUTHORIZATION.installationId, { consentVersion: "v1", consentEpoch: 1, revoked: false });
+        const collector = createProductAnalyticsCollector(store);
+        const events = Array.from({ length: 100 }, (_, index) => productAnalyticsFixtureEvent(index));
+        const benchmarkAuthorization = { ...PRODUCT_ANALYTICS_FIXTURE_AUTHORIZATION, pseudonymousInstallationId: null };
+        const startedAt = performance.now();
+        let accepted = 0;
+        for (let offset = 0; offset < events.length; offset += 25) {
+            accepted += collector.ingestBatch({
+                authorization: benchmarkAuthorization,
+                events: events.slice(offset, offset + 25),
+                now: new Date(PRODUCT_ANALYTICS_FIXTURE_NOW),
+            }).accepted;
+        }
+        const elapsedMs = performance.now() - startedAt;
+        console.info(`[product-analytics-benchmark] events=${events.length} accepted=${accepted} elapsed_ms=${elapsedMs.toFixed(2)}`);
+        expect(accepted).toBe(100);
+        expect(elapsedMs).toBeLessThan(500);
+    });
+});
+//# sourceMappingURL=product-analytics-prd-gates.test.js.map

package/dist/services/product-analytics-prd-gates.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-analytics-prd-gates.test.js","sourceRoot":"","sources":["../../src/services/product-analytics-prd-gates.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,uCAAuC,EACvC,+BAA+B,EAC/B,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,uCAAuC,EACvC,uCAAuC,EACvC,6BAA6B,EAC7B,sCAAsC,EACtC,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AAExC,MAAM,eAAe,GAAG,kHAAkH,CAAC;AAE3I,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,KAAK,GAAG,4BAA4B,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,4BAA4B,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAE7D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,sCAAsC,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,KAAK,GAAG,IAAI,sCAAsC,EAAE,CAAC;QAC3D,KAAK,CAAC,oBAAoB,CAAC,uCAAuC,CAAC,cAAc,EAAE;YACjF,cAAc,EAAE,IAAI;YACpB,YAAY,EAAE,CAAC;YACf,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,4BAA4B,CAAC,CAAC,EAAE,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,CAAC,CAAC;QAC7G,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC;YAClC,aAAa,EAAE,uCAAuC;YACtD,MAAM,EAAE,CAAC,OAAO,CAAC;YACjB,GAAG,EAAE,IAAI,IAAI,CAAC,6BAA6B,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC;YACtC,aAAa,EAAE,uCAAuC;YACtD,MAAM,EAAE,CAAC,OAAO,CAAC;YACjB,GAAG,EAAE,IAAI,IAAI,CAAC,6BAA6B,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpC,MAAM,OAAO,GAAG,SAAS,CAAC,cAAc,CAAC;YACvC,cAAc,EAAE,uCAAuC,CAAC,cAAc;YACtE,cAAc,EAAE,IAAI;YACpB,YAAY,EAAE,CAAC;YACf,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC;YAClC,aAAa,EAAE,uCAAuC;YACtD,MAAM,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;YACzC,GAAG,EAAE,IAAI,IAAI,CAAC,6BAA6B,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAErD,MAAM,eAAe,GAAG,IAAI,sCAAsC,EAAE,CAAC;QACrE,MAAM,mBAAmB,GAAG,+BAA+B,CAAC,eAAe,CAAC,CAAC;QAC7E,MAAM,mBAAmB,GAAG,CAAC,cAAsB,EAAE,EAAE,CAAC,CAAC;YACvD,GAAG,uCAAuC;YAC1C,cAAc;YACd,gBAAgB,EAAE,qBAAqB;YACvC,0BAA0B,EAAE,IAAI;YAChC,IAAI,EAAE,gBAAyB;SAChC,CAAC,CAAC;QACH,KAAK,MAAM,cAAc,IAAI,uCAAuC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACjF,eAAe,CAAC,eAAe,CAAC,cAAc,EAAE,qBAAqB,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpI,CAAC;QACD,MAAM,WAAW,GAAG,mBAAmB,CAAC,WAAW,CAAC;YAClD,aAAa,EAAE,mBAAmB,CAAC,uCAAuC,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,EAAE,CAAC,4BAA4B,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;YAC/F,GAAG,EAAE,IAAI,IAAI,CAAC,6BAA6B,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,mBAAmB,CAAC,WAAW,CAAC;YACnD,aAAa,EAAE,mBAAmB,CAAC,uCAAuC,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,EAAE,CAAC,4BAA4B,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;YAC/F,GAAG,EAAE,IAAI,IAAI,CAAC,6BAA6B,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,uCAAuC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpK,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,KAAK,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/H,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,MAAM,GAAG,sCAAsC,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,uCAAuC,CAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,yBAAyB,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5H,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;YAChC,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE;YACvE,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;SAC1E,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC;YACtC,kBAAkB,EAAE,EAAE;YACtB,kBAAkB,EAAE,CAAC;YACrB,cAAc,EAAE,CAAC;YACjB,oCAAoC,EAAE,CAAC;YACvC,gBAAgB,EAAE,CAAC;SACpB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG;YAChB,GAAG,MAAM,CAAC,CAAC,CAAC;YACZ,cAAc,EAAE,sCAAsC;YACtD,SAAS,EAAE,oBAAoB;YAC/B,UAAU,EAAE,0BAA0B;YACtC,WAAW,EAAE,0BAA0B;YACvC,IAAI,EAAE,IAAI;SACF,CAAC;QACX,MAAM,UAAU,GAAG,uCAAuC,CAAC,CAAC,GAAG,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5G,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,YAAY,IAAI,MAAM,CAAC,SAAS,KAAK,oBAAoB,CAAC,CAAC;QACjI,MAAM,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,EAAE,yBAAyB,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACvG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrH,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACjD,KAAK,MAAM,cAAc,IAAI,uCAAuC,EAAE,CAAC;YACrE,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,KAAK,GAAG,IAAI,sCAAsC,EAAE,CAAC;QAC3D,KAAK,CAAC,oBAAoB,CAAC,uCAAuC,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9I,MAAM,SAAS,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9F,MAAM,sBAAsB,GAAG,EAAE,GAAG,uCAAuC,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC;QAChH,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;YAC1D,QAAQ,IAAI,SAAS,CAAC,WAAW,CAAC;gBAChC,aAAa,EAAE,sBAAsB;gBACrC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC;gBACzC,GAAG,EAAE,IAAI,IAAI,CAAC,6BAA6B,CAAC;aAC7C,CAAC,CAAC,QAAQ,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,wCAAwC,MAAM,CAAC,MAAM,aAAa,QAAQ,eAAe,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9H,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/product-analytics.d.ts

@@ -14,6 +14,7 @@ export type ProductAnalyticsEnvironment = "production" | "development" | "test";
 export type ProductAnalyticsReleaseChannel = "development" | "preview" | "canary" | "stable";
 export type ProductAnalyticsDeploymentMode = "desktop_local" | "self_hosted" | "remote_server";
 type AnalyticsProperties = Record<string, ProductAnalyticsPropertyValue>;
+export declare const PRODUCT_ANALYTICS_EVENT_PROPERTY_ALLOWLIST: Record<ProductAnalyticsEventName, ReadonlySet<string>>;
 export type RecordProductAnalyticsEventInput = {
     orgId?: string | null;
     eventName: ProductAnalyticsEventName;
@@ -59,11 +60,11 @@ export declare function enqueueProductAnalyticsEvent(db: Db, input: {
     leaseExpiresAt: Date | null;
     attemptCount: number;
     installationId: string;
+    consentVersion: string;
     consentEpoch: number;
     deliveryMode: string;
     consentScope: string;
     consentedLocalUserId: string | null;
-    consentVersion: string;
     nextAttemptAt: Date;
     deliveredAt: Date | null;
     deadLetteredAt: Date | null;
@@ -90,11 +91,11 @@ export declare function ensureProductAnalyticsWorkCycle(db: Db, input: EnsurePro
     completedAt: Date | null;
     reviewDecision: string | null;
     actorId: string | null;
+    completionRevision: number;
+    invalidatedAt: Date | null;
     workSurface: string;
     workId: string;
     workCycleId: string;
-    completionRevision: number;
-    invalidatedAt: Date | null;
     outputReadyAt: Date | null;
     rootRunIds: string[];
 }>;
@@ -152,7 +153,7 @@ export declare function setProductAnalyticsInstallationMode(db: Db, installation
     createdAt: Date;
     updatedAt: Date;
 }>;
-export declare function reconcileProductAnalyticsInstallationMode(db: Db, installationId: string): Promise<{
+export declare function reconcileProductAnalyticsInstallationMode(db: Db, installationId: string, preferredMode?: "off" | "anonymous" | "account_linked"): Promise<{
     id: string;
     installationId: string;
     installationSecretHash: string;
@@ -199,9 +200,9 @@ export declare function recordProductAnalyticsConsent(db: Db, input: {
     decidedAt: Date;
     localUserId: string | null;
     installationId: string;
+    consentEpoch: number;
     decision: string;
     policyVersion: string;
-    consentEpoch: number;
     decidedByLocalUserId: string | null;
     uploadFromAt: Date | null;
 }>;
@@ -243,6 +244,7 @@ export declare function claimProductAnalyticsOutboxBatch(db: Db, input: {
     installationId: string;
     deliveryMode: string;
     consentScope: string;
+    consentedLocalUserId: string | null;
     consentEpoch: number;
     events: {
         eventId: string;
@@ -285,12 +287,22 @@ export declare function acknowledgeProductAnalyticsOutboxClaim(db: Db, input: {
     installationSecret: string;
     eventIds: string[];
     claimToken: string;
+    consentedLocalUserId?: string | null;
     delivered?: boolean;
     errorCode?: string;
 }): Promise<{
     updatedCount: number;
     state: string;
 }>;
+export declare function cleanupProductAnalyticsRetention(db: Db, input: {
+    installationId: string;
+    retentionDays?: number;
+    now?: Date;
+}): Promise<{
+    deletedEvents: number;
+    droppedDueToRetention: number;
+    cutoff: string;
+}>;
 export declare function pseudonymizeProductAnalyticsId(secret: string, value: string): string;
 export declare function buildProductAnalyticsExportPayload(secret: string, event: Record<string, unknown>): {
     eventId: string;

package/dist/services/product-analytics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"product-analytics.d.ts","sourceRoot":"","sources":["../../src/services/product-analytics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAYvC,eAAO,MAAM,6BAA6B,2RAchC,CAAC;AAEX,eAAO,MAAM,sCAAsC,4LAUzC,CAAC;AAEX,eAAO,MAAM,qCAAqC,uCAAwC,CAAC;AAC3F,eAAO,MAAM,sCAAsC,8EAA+E,CAAC;AAEnI,MAAM,MAAM,iCAAiC,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;AAEnG,wBAAgB,oCAAoC,CAAC,MAAM,EAAE,MAAM,yCAIlE;AAED,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AACvF,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;AACzE,MAAM,MAAM,yBAAyB,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,YAAY,CAAC;AACpF,MAAM,MAAM,6BAA6B,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAC7E,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;AAC9F,MAAM,MAAM,2BAA2B,GAAG,YAAY,GAAG,aAAa,GAAG,MAAM,CAAC;AAChF,MAAM,MAAM,8BAA8B,GAAG,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC7F,MAAM,MAAM,8BAA8B,GAAG,eAAe,GAAG,aAAa,GAAG,eAAe,CAAC;AAE/F,KAAK,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;AA8BzE,MAAM,MAAM,gCAAgC,GAAG;IAC7C,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,yBAAyB,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,0BAA0B,CAAC;IACvC,SAAS,EAAE,yBAAyB,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,2BAA2B,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,8BAA8B,CAAC;IAChD,cAAc,CAAC,EAAE,8BAA8B,CAAC;IAChD,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC,CAAC;AA0DF,wBAAsB,2BAA2B,CAC/C,EAAE,EAAE,EAAE,EACN,KAAK,EAAE,gCAAgC;;GAwDxC;AAED,wBAAsB,4BAA4B,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;;;;;;;;;;;;;;;;;;;UAmBzI;AAED,MAAM,MAAM,oCAAoC,GAAG;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB,CAAC;AAEF,wBAAsB,+BAA+B,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,oCAAoC;;;;;;;;;;;;;;;;;;;GAqBxG;AAED,wBAAsB,iCAAiC,CACrD,EAAE,EAAE,EAAE,EACN,KAAK,EAAE,oCAAoC,GAAG;IAC5C,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,yBAAyB,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;;;;;;;;GA4DF;AAED,wBAAsB,mCAAmC,CACvD,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAAE;;UA2BhK;AAED,MAAM,MAAM,4BAA4B,GAAG,wBAAwB,GAAG,qBAAqB,CAAC;AAC5F,MAAM,MAAM,+BAA+B,GAAG,SAAS,GAAG,SAAS,CAAC;AAEpE,wBAAsB,oCAAoC,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,gBAAgB,CAAA;CAAE;;;;;;;;;;;GAa/K;AAED,wBAAsB,wCAAwC,CAAC,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,iBAYxH;AAED,wBAAsB,mCAAmC,CAAC,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,WAAW,GAAG,gBAAgB;;;;;;;;GAIrI;AAED,wBAAsB,yCAAyC,CAAC,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM;;;;;;;;GAa7F;AAED,wBAAsB,oCAAoC,CAAC,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;UAcxF;AAED,wBAAsB,6BAA6B,CACjD,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,4BAA4B,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,+BAA+B,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CAAE;;;;;;;;;;;GAwCxO;AAED,wBAAsB,2BAA2B,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;;;;;;;;;;;;;;;;;;;KA2C9L;AAED,wBAAsB,gCAAgC,CACpD,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,WAAW,GAAG,gBAAgB,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAmC1L;AAED,wBAAsB,iCAAiC,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;;;GA2BnQ;AAED,wBAAsB,sCAAsC,CAC1D,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;;;GA2B/I;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,UAE3E;AAED,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;EA6BhG;AAeD,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,EAAE;oBAE1B,gCAAgC;;;qBAEzB,MAAM,UAAS;QAAE,IAAI,CAAC,EAAE,IAAI,CAAC;QAAC,EAAE,CAAC,EAAE,IAAI,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAoG5E,MAAM,UACN;QAAE,IAAI,CAAC,EAAE,IAAI,CAAC;QAAC,EAAE,CAAC,EAAE,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,yBAAyB,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;EA6C7F"}
+{"version":3,"file":"product-analytics.d.ts","sourceRoot":"","sources":["../../src/services/product-analytics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAavC,eAAO,MAAM,6BAA6B,2RAchC,CAAC;AAEX,eAAO,MAAM,sCAAsC,4LAUzC,CAAC;AAEX,eAAO,MAAM,qCAAqC,uCAAwC,CAAC;AAC3F,eAAO,MAAM,sCAAsC,8EAA+E,CAAC;AAEnI,MAAM,MAAM,iCAAiC,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;AAEnG,wBAAgB,oCAAoC,CAAC,MAAM,EAAE,MAAM,yCAIlE;AAED,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AACvF,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;AACzE,MAAM,MAAM,yBAAyB,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,YAAY,CAAC;AACpF,MAAM,MAAM,6BAA6B,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAC7E,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;AAC9F,MAAM,MAAM,2BAA2B,GAAG,YAAY,GAAG,aAAa,GAAG,MAAM,CAAC;AAChF,MAAM,MAAM,8BAA8B,GAAG,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC7F,MAAM,MAAM,8BAA8B,GAAG,eAAe,GAAG,aAAa,GAAG,eAAe,CAAC;AAE/F,KAAK,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;AAWzE,eAAO,MAAM,0CAA0C,EAAE,MAAM,CAAC,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAAC,CAmB7G,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,yBAAyB,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,0BAA0B,CAAC;IACvC,SAAS,EAAE,yBAAyB,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,2BAA2B,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,8BAA8B,CAAC;IAChD,cAAc,CAAC,EAAE,8BAA8B,CAAC;IAChD,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC,CAAC;AA0DF,wBAAsB,2BAA2B,CAC/C,EAAE,EAAE,EAAE,EACN,KAAK,EAAE,gCAAgC;;GAwDxC;AAED,wBAAsB,4BAA4B,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;;;;;;;;;;;;;;;;;;;UA+BzI;AAED,MAAM,MAAM,oCAAoC,GAAG;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB,CAAC;AAEF,wBAAsB,+BAA+B,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,oCAAoC;;;;;;;;;;;;;;;;;;;GAqBxG;AAED,wBAAsB,iCAAiC,CACrD,EAAE,EAAE,EAAE,EACN,KAAK,EAAE,oCAAoC,GAAG;IAC5C,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,yBAAyB,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;;;;;;;;GA8EF;AAED,wBAAsB,mCAAmC,CACvD,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAAE;;UAqChK;AAED,MAAM,MAAM,4BAA4B,GAAG,wBAAwB,GAAG,qBAAqB,CAAC;AAC5F,MAAM,MAAM,+BAA+B,GAAG,SAAS,GAAG,SAAS,CAAC;AAEpE,wBAAsB,oCAAoC,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,gBAAgB,CAAA;CAAE;;;;;;;;;;;GAa/K;AAED,wBAAsB,wCAAwC,CAAC,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,iBAYxH;AAED,wBAAsB,mCAAmC,CAAC,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,WAAW,GAAG,gBAAgB;;;;;;;;GAIrI;AAED,wBAAsB,yCAAyC,CAC7D,EAAE,EAAE,EAAE,EACN,cAAc,EAAE,MAAM,EACtB,aAAa,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,gBAAgB;;;;;;;;GAcvD;AAED,wBAAsB,oCAAoC,CAAC,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;UAcxF;AAED,wBAAsB,6BAA6B,CACjD,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,4BAA4B,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,+BAA+B,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CAAE;;;;;;;;;;;GAwCxO;AAED,wBAAsB,2BAA2B,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;;;;;;;;;;;;;;;;;;;KA2C9L;AAED,wBAAsB,gCAAgC,CACpD,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,WAAW,GAAG,gBAAgB,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA2D1L;AAED,wBAAsB,iCAAiC,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;;;GA2BnQ;AAED,wBAAsB,sCAAsC,CAC1D,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;;;GAgCrL;AAED,wBAAsB,gCAAgC,CACpD,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAA;CAAE;;;;GAgBtE;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,UAE3E;AAED,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;EA6BhG;AAeD,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,EAAE;oBAE1B,gCAAgC;;;qBAEzB,MAAM,UAAS;QAAE,IAAI,CAAC,EAAE,IAAI,CAAC;QAAC,EAAE,CAAC,EAAE,IAAI,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAqG5E,MAAM,UACN;QAAE,IAAI,CAAC,EAAE,IAAI,CAAC;QAAC,EAAE,CAAC,EAAE,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,yBAAyB,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;EA6C7F"}

package/dist/services/product-analytics.js

@@ -1,4 +1,4 @@
-import { productAnalyticsConsentLedger, productAnalyticsEvents, productAnalyticsInstallations, productAnalyticsOutbox, productAnalyticsWorkCycles, } from "@rudderhq/db";
+import { productAnalyticsConsentLedger, productAnalyticsEvents, productAnalyticsInstallations, productAnalyticsOutbox, productAnalyticsWorkCycleRevisions, productAnalyticsWorkCycles, } from "@rudderhq/db";
 import { and, asc, desc, eq, gte, inArray, isNull, lt, lte, or, sql } from "drizzle-orm";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { forbidden, unauthorized, unprocessable } from "../errors.js";
@@ -44,7 +44,9 @@ const ACTOR_TYPE_SET = new Set(["human", "agent", "system", "automation"]);
 // focused on content-bearing names so safe dimensions such as creation_path do
 // not get rejected by a substring match.
 const SENSITIVE_PROPERTY_KEY = /(prompt|transcript|title|description|body|content|url|token|secret|password|credential|email|hostname|username)/i;
-const EVENT_PROPERTY_ALLOWLIST = {
+const PRODUCT_ANALYTICS_OUTBOX_MAX_ROWS = 10_000;
+const PRODUCT_ANALYTICS_OUTBOX_MAX_BYTES = 32 * 1024 * 1024;
+export const PRODUCT_ANALYTICS_EVENT_PROPERTY_ALLOWLIST = {
     organization_created: new Set([
         "creation_path",
         "template_kind",
@@ -81,7 +83,7 @@ function assertBoundedText(value, field, maxLength) {
     }
 }
 function validateProperties(eventName, properties) {
-    const allowed = EVENT_PROPERTY_ALLOWLIST[eventName];
+    const allowed = PRODUCT_ANALYTICS_EVENT_PROPERTY_ALLOWLIST[eventName];
     for (const [key, value] of Object.entries(properties)) {
         if (!allowed.has(key) || SENSITIVE_PROPERTY_KEY.test(key)) {
             throw unprocessable(`Product analytics property is not allowed: ${key}`);
@@ -181,10 +183,23 @@ export async function recordProductAnalyticsEvent(db, input) {
     return rows[0] ?? null;
 }
 export async function enqueueProductAnalyticsEvent(db, input) {
-    const [installation] = await db.select({ mode: productAnalyticsInstallations.mode }).from(productAnalyticsInstallations)
+    const [event] = await db.select({ environment: productAnalyticsEvents.environment }).from(productAnalyticsEvents)
+        .where(eq(productAnalyticsEvents.id, input.eventId)).limit(1);
+    if (!event || event.environment !== "production")
+        return null;
+    const [installation] = await db.select({ mode: productAnalyticsInstallations.mode, state: productAnalyticsInstallations.state }).from(productAnalyticsInstallations)
         .where(eq(productAnalyticsInstallations.installationId, input.installationId)).limit(1);
     if (!installation || installation.mode === "off")
         return null;
+    const [backlog] = await db.select({ count: sql `count(*)`, bytes: sql `coalesce(sum(length(${productAnalyticsEvents.properties}::text)), 0)` })
+        .from(productAnalyticsOutbox)
+        .innerJoin(productAnalyticsEvents, eq(productAnalyticsOutbox.eventId, productAnalyticsEvents.id))
+        .where(and(eq(productAnalyticsOutbox.installationId, input.installationId), inArray(productAnalyticsOutbox.state, ["pending", "claimed", "retry_wait"])));
+    if (Number(backlog?.count ?? 0) >= PRODUCT_ANALYTICS_OUTBOX_MAX_ROWS || Number(backlog?.bytes ?? 0) >= PRODUCT_ANALYTICS_OUTBOX_MAX_BYTES) {
+        await db.update(productAnalyticsInstallations).set({ state: { ...(installation.state ?? {}), coverageGap: true }, updatedAt: new Date() })
+            .where(eq(productAnalyticsInstallations.installationId, input.installationId));
+        return null;
+    }
     const scope = installation.mode === "account_linked" ? "account_linked_user" : "anonymous_installation";
     const conditions = [eq(productAnalyticsConsentLedger.installationId, input.installationId), eq(productAnalyticsConsentLedger.scope, scope), eq(productAnalyticsConsentLedger.decision, "granted")];
     conditions.push(scope === "account_linked_user" && input.localUserId ? eq(productAnalyticsConsentLedger.localUserId, input.localUserId) : isNull(productAnalyticsConsentLedger.localUserId));
@@ -247,6 +262,12 @@ export async function completeProductAnalyticsWorkCycle(db, input) {
         if (lockedCycle.state === "completed" && lockedCycle.invalidatedAt === null) {
             return { event: null, revision: lockedCycle.completionRevision };
         }
+        const rootRunRows = await tx.select({ rootRunId: productAnalyticsEvents.rootRunId }).from(productAnalyticsEvents).where(and(eq(productAnalyticsEvents.orgId, input.orgId), eq(productAnalyticsEvents.workCycleId, input.workCycleId), sql `${productAnalyticsEvents.rootRunId} is not null`));
+        const rootRunIds = [...new Set([
+                ...(lockedCycle.rootRunIds ?? []),
+                ...rootRunRows.map((row) => row.rootRunId).filter((value) => Boolean(value)),
+                ...(input.rootRunId ? [input.rootRunId] : []),
+            ])];
         const revision = (lockedCycle.completionRevision ?? 0) + 1;
         const event = await recordProductAnalyticsEvent(tx, {
             orgId: input.orgId,
@@ -269,8 +290,16 @@ export async function completeProductAnalyticsWorkCycle(db, input) {
         });
         await tx
             .update(productAnalyticsWorkCycles)
-            .set({ state: "completed", completionRevision: revision, completedAt: new Date(), invalidatedAt: null, updatedAt: new Date() })
+            .set({ state: "completed", completionRevision: revision, completedAt: new Date(), invalidatedAt: null, rootRunIds, updatedAt: new Date() })
             .where(and(eq(productAnalyticsWorkCycles.orgId, input.orgId), eq(productAnalyticsWorkCycles.workCycleId, input.workCycleId)));
+        await tx.insert(productAnalyticsWorkCycleRevisions).values({
+            orgId: input.orgId,
+            workCycleId: input.workCycleId,
+            completionRevision: revision,
+            completionEventId: event?.id,
+            completedAt: new Date(),
+            updatedAt: new Date(),
+        }).onConflictDoNothing();
         return { event, revision };
     });
 }
@@ -297,6 +326,12 @@ export async function invalidateProductAnalyticsWorkCycle(db, input) {
             dedupeKey: `work_loop_invalidated:${input.workCycleId}:${input.completionRevision}:${input.reasonCode}`,
             properties: { reason_code: input.reasonCode },
         });
+        await tx.update(productAnalyticsWorkCycleRevisions).set({
+            invalidatedAt: input.occurredAt ?? new Date(),
+            invalidationReasonCode: input.reasonCode,
+            invalidationEventId: event?.id,
+            updatedAt: new Date(),
+        }).where(and(eq(productAnalyticsWorkCycleRevisions.orgId, input.orgId), eq(productAnalyticsWorkCycleRevisions.workCycleId, input.workCycleId), eq(productAnalyticsWorkCycleRevisions.completionRevision, input.completionRevision)));
         await tx.update(productAnalyticsWorkCycles).set({ state: "invalidated", invalidatedAt: input.occurredAt ?? new Date(), updatedAt: new Date() })
             .where(and(eq(productAnalyticsWorkCycles.orgId, input.orgId), eq(productAnalyticsWorkCycles.workCycleId, input.workCycleId)));
         return event;
@@ -335,7 +370,7 @@ export async function setProductAnalyticsInstallationMode(db, installationId, mo
         .where(eq(productAnalyticsInstallations.installationId, installationId)).returning();
     return row ?? null;
 }
-export async function reconcileProductAnalyticsInstallationMode(db, installationId) {
+export async function reconcileProductAnalyticsInstallationMode(db, installationId, preferredMode) {
     const consent = await db.select({ scope: productAnalyticsConsentLedger.scope, decision: productAnalyticsConsentLedger.decision })
         .from(productAnalyticsConsentLedger)
         .where(eq(productAnalyticsConsentLedger.installationId, installationId))
@@ -345,9 +380,9 @@ export async function reconcileProductAnalyticsInstallationMode(db, installation
         if (!latestByScope.has(row.scope))
             latestByScope.set(row.scope, row.decision);
     }
-    const mode = latestByScope.get("account_linked_user") === "granted"
+    const mode = preferredMode ?? (latestByScope.get("account_linked_user") === "granted"
         ? "account_linked"
-        : latestByScope.get("anonymous_installation") === "granted" ? "anonymous" : "off";
+        : latestByScope.get("anonymous_installation") === "granted" ? "anonymous" : "off");
     return setProductAnalyticsInstallationMode(db, installationId, mode);
 }
 export async function getProductAnalyticsInstallationState(db, installationId) {
@@ -470,6 +505,30 @@ export async function claimProductAnalyticsOutboxBatch(db, input) {
         });
         throw error;
     }
+    // Keep anonymous exporter output available to the local Privacy & Telemetry page.
+    // Account-linked payloads are deliberately never retained in installation-wide
+    // state because another signed-in user may later read the settings page.
+    const [installation] = await db.select({ state: productAnalyticsInstallations.state })
+        .from(productAnalyticsInstallations)
+        .where(eq(productAnalyticsInstallations.installationId, input.installationId))
+        .limit(1);
+    if (installation) {
+        const nextState = { ...(installation.state ?? {}) };
+        if (input.deliveryMode === "anonymous") {
+            nextState.lastPayloadAt = new Date().toISOString();
+            nextState.lastPayload = payloads.slice(-20);
+            nextState.lastPayloadMode = "anonymous";
+        }
+        else {
+            delete nextState.lastPayloadAt;
+            delete nextState.lastPayload;
+            delete nextState.lastPayloadMode;
+        }
+        await db.update(productAnalyticsInstallations).set({
+            state: nextState,
+            updatedAt: new Date(),
+        }).where(eq(productAnalyticsInstallations.installationId, input.installationId));
+    }
     const first = rows[0];
     if (!first.claimToken)
         throw unprocessable("Product analytics outbox claim token is missing");
@@ -478,6 +537,7 @@ export async function claimProductAnalyticsOutboxBatch(db, input) {
         installationId: first.installationId,
         deliveryMode: first.deliveryMode,
         consentScope: first.consentScope,
+        consentedLocalUserId: first.consentedLocalUserId,
         consentEpoch: first.consentEpoch,
         events: payloads,
     };
@@ -496,7 +556,7 @@ export async function acknowledgeProductAnalyticsOutbox(db, input) {
         attemptCount: sql `${productAnalyticsOutbox.attemptCount} + 1`,
         deliveredAt: delivered ? now : null,
         deadLetteredAt: deadLettered ? now : null,
-        nextAttemptAt: delivered || deadLettered ? now : new Date(now.getTime() + Math.min(60 * 60_000, 2 ** Math.min(maxAttemptCount, 6) * 60_000)),
+        nextAttemptAt: delivered || deadLettered ? now : new Date(now.getTime() + Math.round(Math.min(60 * 60_000, 2 ** Math.min(maxAttemptCount, 6) * 60_000) * (0.8 + Math.random() * 0.4))),
         lastErrorCode: input.errorCode ?? null,
         claimToken: null,
         leaseExpiresAt: null,
@@ -511,7 +571,11 @@ export async function acknowledgeProductAnalyticsOutboxClaim(db, input) {
         deliveryMode: productAnalyticsOutbox.deliveryMode,
         consentEpoch: productAnalyticsOutbox.consentEpoch,
         consentedLocalUserId: productAnalyticsOutbox.consentedLocalUserId,
-    }).from(productAnalyticsOutbox).where(and(eq(productAnalyticsOutbox.installationId, input.installationId), eq(productAnalyticsOutbox.claimToken, input.claimToken), inArray(productAnalyticsOutbox.eventId, input.eventIds)));
+    }).from(productAnalyticsOutbox).where(and(eq(productAnalyticsOutbox.installationId, input.installationId), eq(productAnalyticsOutbox.claimToken, input.claimToken), inArray(productAnalyticsOutbox.eventId, input.eventIds), input.consentedLocalUserId === undefined
+        ? undefined
+        : input.consentedLocalUserId
+            ? eq(productAnalyticsOutbox.consentedLocalUserId, input.consentedLocalUserId)
+            : isNull(productAnalyticsOutbox.consentedLocalUserId)));
     if (rows.length === 0)
         return { updatedCount: 0, state: input.delivered === false ? "retry_wait" : "delivered" };
     const first = rows[0];
@@ -527,6 +591,23 @@ export async function acknowledgeProductAnalyticsOutboxClaim(db, input) {
         consentedLocalUserId: first.consentedLocalUserId,
     });
 }
+export async function cleanupProductAnalyticsRetention(db, input) {
+    const now = input.now ?? new Date();
+    const retentionDays = Math.min(Math.max(Math.trunc(input.retentionDays ?? 90), 1), 3650);
+    const cutoff = new Date(now.getTime() - retentionDays * 24 * 60 * 60 * 1000);
+    const delivered = await db.select({ eventId: productAnalyticsOutbox.eventId }).from(productAnalyticsOutbox)
+        .where(and(eq(productAnalyticsOutbox.installationId, input.installationId), eq(productAnalyticsOutbox.state, "delivered"), lt(productAnalyticsOutbox.updatedAt, cutoff)));
+    if (delivered.length === 0)
+        return { deletedEvents: 0, droppedDueToRetention: 0, cutoff: cutoff.toISOString() };
+    const eventIds = delivered.map((row) => row.eventId);
+    await db.delete(productAnalyticsOutbox).where(inArray(productAnalyticsOutbox.eventId, eventIds));
+    const deleted = await db.delete(productAnalyticsEvents).where(and(eq(productAnalyticsEvents.installationId, input.installationId), inArray(productAnalyticsEvents.id, eventIds))).returning({ id: productAnalyticsEvents.id });
+    await db.update(productAnalyticsInstallations).set({
+        state: { retentionCleanupAt: now.toISOString(), droppedDueToRetention: 0 },
+        updatedAt: now,
+    }).where(eq(productAnalyticsInstallations.installationId, input.installationId));
+    return { deletedEvents: deleted.length, droppedDueToRetention: 0, cutoff: cutoff.toISOString() };
+}
 export function pseudonymizeProductAnalyticsId(secret, value) {
     return createHmac("sha256", secret).update(value).digest("hex");
 }
@@ -598,10 +679,11 @@ export function productAnalyticsService(db) {
                     .select({ count: sql `count(distinct ${productAnalyticsEvents.workCycleId} || ':' || ${productAnalyticsEvents.completionRevision})` })
                     .from(productAnalyticsEvents)
                     .where(and(where, eq(productAnalyticsEvents.eventName, "work_loop_completed"), eq(productAnalyticsEvents.origin, "human"), eq(productAnalyticsEvents.environment, "production"), sql `not exists (
-              select 1 from ${productAnalyticsWorkCycles} invalidated
+              select 1 from ${productAnalyticsWorkCycleRevisions} invalidated
               where invalidated.org_id = ${productAnalyticsEvents.orgId}
                 and invalidated.work_cycle_id = ${productAnalyticsEvents.workCycleId}
-                and invalidated.state = 'invalidated'
+                and invalidated.completion_revision = ${productAnalyticsEvents.completionRevision}
+                and invalidated.invalidated_at is not null
             )`)),
                 db
                     .select({ count: sql `count(*)` })