@shware/analytics 9.0.0 → 9.1.0

package/dist/server/meta-conversions-api.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"meta-conversions-api.mjs","names":[],"sources":["../../src/server/meta-conversions-api.ts"],"sourcesContent":["import {\n  AppData,\n  Content,\n  CustomData,\n  EventRequest,\n  ExtendedDeviceInfo,\n  ServerEvent,\n  UserData,\n} from 'facebook-nodejs-business-sdk';\nimport { IGNORED_EVENTS } from '../third-parties/ignored-events';\nimport { mapFBEvent } from '../track/fbq';\nimport type { TrackEvent, TrackTags, UserProvidedData } from '../track/types';\nimport { type EventActionSource, resolveActionSource } from './action-source';\nimport { metaFbc, metaFbp } from './click-ids';\nimport { pageLocation } from './page-location';\n\nconst USER_ASSIGNED_COUNTRIES: string[] = ['xk'];\nfunction normalizeCountry(input: string | undefined): string | undefined {\n  const country = input?.split(/[-_]/).at(0)?.toLowerCase();\n  if (!country) return undefined;\n  return USER_ASSIGNED_COUNTRIES.includes(country) ? undefined : country;\n}\n\nfunction getUserData(tags: TrackTags, data: UserProvidedData, eventTimeMs: number) {\n  const userData = new UserData();\n\n  // set user-provided data\n  if (data.email) {\n    if (Array.isArray(data.email)) {\n      userData.setEmails(data.email);\n    } else {\n      userData.setEmail(data.email);\n    }\n  }\n  if (data.phone_number) {\n    if (Array.isArray(data.phone_number)) {\n      userData.setPhones(data.phone_number);\n    } else {\n      userData.setPhone(data.phone_number);\n    }\n  }\n  if (data.gender) {\n    if (data.gender === 'female') {\n      userData.setGender('f');\n      // oxlint-disable-next-line typescript/no-unnecessary-condition -- user-provided data may carry values outside the declared union at runtime\n    } else if (data.gender === 'male') {\n      userData.setGender('m');\n    }\n  }\n  if (data.address) {\n    if (Array.isArray(data.address)) {\n      const firstNames = data.address.map((a) => a.first_name).filter(Boolean);\n      const lastNames = data.address.map((a) => a.last_name).filter(Boolean);\n      const cities = data.address.map((a) => a.city).filter(Boolean);\n      const states = data.address.map((a) => a.region).filter(Boolean);\n      const postalCodes = data.address.map((a) => a.postal_code).filter(Boolean);\n      const countries = data.address.map((a) => normalizeCountry(a.country)).filter(Boolean);\n\n      userData.setFirstNames(firstNames as string[]);\n      userData.setLastNames(lastNames as string[]);\n      userData.setCities(cities as string[]);\n      userData.setStates(states as string[]);\n      userData.setZips(postalCodes as string[]);\n      userData.setCountries(countries as string[]);\n    } else {\n      if (data.address.first_name) {\n        userData.setFirstName(data.address.first_name);\n        userData.setF5First(data.address.first_name.slice(0, 5));\n      }\n      if (data.address.last_name) {\n        userData.setLastName(data.address.last_name);\n        userData.setF5Last(data.address.last_name.slice(0, 5));\n      }\n      if (data.address.city) userData.setCity(data.address.city);\n      if (data.address.region) userData.setState(data.address.region);\n      if (data.address.postal_code) userData.setZip(data.address.postal_code);\n      if (data.address.country) {\n        const country = normalizeCountry(data.address.country);\n        if (country) userData.setCountry(country);\n      }\n    }\n  }\n  if (data.birthday) {\n    userData.setDoby(data.birthday.year.toString());\n    userData.setDobm(data.birthday.month.toString());\n    userData.setDobd(data.birthday.day.toString());\n  }\n  if (data.user_id && data.user_id.length !== 0) {\n    userData.setExternalId(data.user_id);\n  }\n  if (data.ip_address) {\n    userData.setClientIpAddress(data.ip_address);\n  }\n  if (data.user_agent) {\n    userData.setClientUserAgent(data.user_agent);\n  }\n  if (data.fb_login_id) {\n    userData.setFbLoginId(data.fb_login_id);\n  }\n  if (data.fb_page_id) {\n    userData.setPageId(data.fb_page_id);\n  }\n\n  // set tags info\n  const fbc = metaFbc(tags, eventTimeMs);\n  if (fbc) {\n    userData.setFbc(fbc);\n  }\n  const fbp = metaFbp(tags);\n  if (fbp) {\n    userData.setFbp(fbp);\n  }\n  if (tags.advertising_id) {\n    userData.setMadid(tags.advertising_id);\n  }\n  if (tags.ip_address && typeof tags.ip_address === 'string') {\n    userData.setClientIpAddress(tags.ip_address);\n  }\n\n  return userData;\n}\n\nfunction getAppData(tags: TrackTags, appPackageName: string) {\n  const extinfo = new ExtendedDeviceInfo();\n  if (tags.os_name) {\n    if (tags.os_name === 'iOS' || tags.os_name === 'iPadOS') {\n      extinfo.setExtInfoVersion('i2');\n    } else if (tags.os_name === 'Android') {\n      extinfo.setExtInfoVersion('a2');\n    }\n  }\n  extinfo.setAppPackageName(appPackageName);\n  const shortVersion = tags.release?.split('.').at(0);\n  if (shortVersion) {\n    extinfo.setShortVersion(shortVersion);\n  }\n  if (tags.release) {\n    extinfo.setLongVersion(tags.release);\n  }\n  if (tags.os_version) {\n    extinfo.setOsVersion(tags.os_version);\n  }\n  if (tags.device_model_id) {\n    extinfo.setDeviceModelName(tags.device_model_id);\n  }\n  if (tags.language) {\n    extinfo.setLocale(tags.language);\n  }\n  if (tags.screen_width) {\n    extinfo.setScreenWidth(tags.screen_width);\n  }\n  if (tags.screen_height) {\n    extinfo.setScreenHeight(tags.screen_height);\n  }\n  if (tags.device_pixel_ratio) {\n    extinfo.setScreenDensity(tags.device_pixel_ratio.toString());\n  }\n\n  const appData = new AppData();\n  appData.setExtinfo(extinfo);\n  if (tags.install_referrer) {\n    appData.setInstallReferrer(tags.install_referrer);\n  }\n  if (tags.advertising_id) {\n    appData.setAdvertiserTrackingEnabled(true);\n  }\n  if (tags.install_referrer) {\n    appData.setInstallReferrer(tags.install_referrer);\n  }\n\n  return appData;\n}\n\n// oxlint-disable-next-line @typescript-eslint/no-explicit-any\nfunction getCustomData({ name, properties }: TrackEvent<any>) {\n  const data = new CustomData();\n  const [_, _name, fbEventProperties] = mapFBEvent(name, properties);\n  const {\n    value,\n    currency,\n    content_name,\n    content_category,\n    content_ids,\n    contents,\n    content_type,\n    // order_id,\n    predicted_ltv,\n    num_items,\n    search_string,\n    status,\n    // item_number,\n    delivery_category,\n    ...custom_properties\n  } = fbEventProperties;\n  // oxlint-disable-next-line typescript/no-unnecessary-condition -- custom event properties may carry `value: null` at runtime despite the declared type\n  if (value !== undefined && value !== null) data.setValue(value);\n  if (currency) data.setCurrency(currency);\n  if (content_name) data.setContentName(content_name);\n  if (content_category) data.setContentCategory(content_category);\n  if (content_ids) data.setContentIds(content_ids);\n  if (contents)\n    data.setContents(\n      contents.map((c) => {\n        const result = new Content().setId(c.id).setQuantity(c.quantity);\n        if (c.item_price) result.setItemPrice(c.item_price);\n        if (c.title) result.setTitle(c.title);\n        if (c.description) result.setDescription(c.description);\n        if (c.brand) result.setBrand(c.brand);\n        if (c.category) result.setCategory(c.category);\n        if (c.delivery_category) result.setDeliveryCategory(c.delivery_category);\n        return result;\n      })\n    );\n  if (content_type) data.setContentType(content_type);\n  // if (order_id) data.setOrderId(order_id);\n  if (predicted_ltv) data.setPredictedLtv(predicted_ltv);\n  if (num_items) data.setNumItems(num_items);\n  if (search_string) data.setSearchString(search_string);\n  if (status) data.setStatus(status.toString());\n  // if (item_number) data.setItemNumber(item_number);\n  if (delivery_category) data.setDeliveryCategory(delivery_category);\n  data.setCustomProperties(custom_properties);\n  return data;\n}\n\nexport function getServerEvent(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData,\n  appPackageName?: string,\n  actionSource?: EventActionSource\n) {\n  const eventTimeMs = new Date(event.created_at).getTime();\n  const userData = getUserData(event.tags, data, eventTimeMs);\n  const customData = getCustomData(event);\n  const [_, eventName] = mapFBEvent(event.name, event.properties);\n  const serverEvent = new ServerEvent()\n    .setEventId(event.tags.idempotency_key ?? event.id)\n    .setEventName(eventName)\n    .setEventTime(Math.round(eventTimeMs / 1000))\n    .setUserData(userData)\n    .setCustomData(customData);\n\n  const source = resolveActionSource(event.platform, actionSource);\n  if (source === 'app' && appPackageName) {\n    const appData = getAppData(event.tags, appPackageName);\n    serverEvent.setAppData(appData);\n  }\n  const eventSourceUrl = pageLocation(event.tags);\n  if (eventSourceUrl) {\n    serverEvent.setEventSourceUrl(eventSourceUrl);\n  }\n  switch (source) {\n    case 'app':\n      serverEvent.setActionSource('app');\n      break;\n    case 'web':\n      serverEvent.setActionSource('website');\n      break;\n    default:\n      // `action_source` is required on a server event, so both an offline conversion and an\n      // undeterminable platform still have to send something. Meta has no generic offline\n      // value: 'physical_store' and 'system_generated' are narrower claims only the caller can\n      // make, so everything left lands in Meta's own catch-all.\n      serverEvent.setActionSource('other');\n      break;\n  }\n  return serverEvent;\n}\n\n/**\n * The shape `FacebookRequestError` exposes: `status` and `response` are the HTTP status and the\n * parsed error body, and both are null when the request never received a response.\n */\ntype MetaRequestError = { status?: number | null; message?: string; response?: unknown };\n\n/**\n * Meta's SDK rejects on API errors, where every other conversion sender here logs and resolves.\n * Keep the failure inside this module, so one rejected batch cannot fail the caller's request.\n * Never log the error itself: it also carries the access token, in both `url` and `data`.\n */\nfunction logError(error: unknown) {\n  const { status, message, response } = (error ?? {}) as MetaRequestError;\n  if (typeof status !== 'number') {\n    console.error(`Failed to send Meta conversion, network error: ${message ?? String(error)}`);\n    return;\n  }\n  console.error(\n    `Failed to send Meta conversion, status: ${status}, body: ${JSON.stringify(response)}`\n  );\n}\n\nexport async function sendEvent(\n  accessToken: string,\n  pixelId: string,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData = {},\n  appPackageName?: string,\n  actionSource?: EventActionSource\n) {\n  if (IGNORED_EVENTS.includes(event.name)) return undefined;\n  const request = new EventRequest(accessToken, pixelId);\n  const fbEvent = getServerEvent(event, data, appPackageName, actionSource);\n  request.setEvents([fbEvent]);\n  try {\n    return await request.execute();\n  } catch (error) {\n    logError(error);\n    return undefined;\n  }\n}\n\nexport async function sendEvents(\n  accessToken: string,\n  pixelId: string,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  events: TrackEvent<any>[],\n  data: UserProvidedData = {},\n  appPackageName?: string,\n  actionSource?: EventActionSource\n) {\n  const fbEvents = events\n    .filter((event) => !IGNORED_EVENTS.includes(event.name))\n    .map((event) => getServerEvent(event, data, appPackageName, actionSource));\n  if (fbEvents.length === 0) return undefined;\n  const request = new EventRequest(accessToken, pixelId);\n  request.setEvents(fbEvents);\n  try {\n    return await request.execute();\n  } catch (error) {\n    logError(error);\n    return undefined;\n  }\n}\n\nexport async function sendTestEvent(accessToken: string, pixelId: string, testEventCode: string) {\n  const extinfo = new ExtendedDeviceInfo()\n    .setExtInfoVersion('a2')\n    .setAppPackageName('com.some.app')\n    .setShortVersion('771')\n    .setLongVersion('Version 7.7.1')\n    .setOsVersion('10.1.1')\n    .setDeviceModelName('OnePlus6')\n    .setLocale('en_US')\n    .setTimezoneAbbreviation('GMT-1')\n    .setCarrier('TMobile')\n    .setScreenWidth(1920)\n    .setScreenHeight(1080)\n    .setScreenDensity('2.00')\n    .setCpuCoreCount(2)\n    .setTotalDiskSpaceGb(128)\n    .setFreeDiskSpaceGb(8)\n    .setDeviceTimeZone('USA/New York');\n\n  const userData = new UserData().setEmail('test@example.com');\n  const appData = new AppData().setExtinfo(extinfo);\n  const event = new ServerEvent()\n    .setEventId(Math.round(Math.random() * 1000_000).toString())\n    .setEventName('TestEvent')\n    .setEventTime(Math.round(Date.now() / 1000))\n    .setUserData(userData)\n    .setAppData(appData)\n    .setActionSource('app');\n\n  const request = new EventRequest(accessToken, pixelId);\n  request.setTestEventCode(testEventCode);\n  request.setEvents([event]);\n  return request.execute();\n}\n"],"mappings":";;;;;;;AAgBA,MAAM,0BAAoC,CAAC,IAAI;AAC/C,SAAS,iBAAiB,OAA+C;CACvE,MAAM,UAAU,OAAO,MAAM,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY;CACxD,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,OAAO,wBAAwB,SAAS,OAAO,IAAI,KAAA,IAAY;AACjE;AAEA,SAAS,YAAY,MAAiB,MAAwB,aAAqB;CACjF,MAAM,WAAW,IAAI,SAAS;CAG9B,IAAI,KAAK,OAAO;EACd,IAAI,MAAM,QAAQ,KAAK,KAAK,GAC1B,SAAS,UAAU,KAAK,KAAK;OAE7B,SAAS,SAAS,KAAK,KAAK;CAEhC;CACA,IAAI,KAAK,cAAc;EACrB,IAAI,MAAM,QAAQ,KAAK,YAAY,GACjC,SAAS,UAAU,KAAK,YAAY;OAEpC,SAAS,SAAS,KAAK,YAAY;CAEvC;CACA,IAAI,KAAK,QAAQ;EACf,IAAI,KAAK,WAAW,UAClB,SAAS,UAAU,GAAG;OAEjB,IAAI,KAAK,WAAW,QACzB,SAAS,UAAU,GAAG;CAE1B;CACA,IAAI,KAAK,SAAS;EAChB,IAAI,MAAM,QAAQ,KAAK,OAAO,GAAG;GAC/B,MAAM,aAAa,KAAK,QAAQ,KAAK,MAAM,EAAE,UAAU,CAAC,CAAC,OAAO,OAAO;GACvE,MAAM,YAAY,KAAK,QAAQ,KAAK,MAAM,EAAE,SAAS,CAAC,CAAC,OAAO,OAAO;GACrE,MAAM,SAAS,KAAK,QAAQ,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,OAAO;GAC7D,MAAM,SAAS,KAAK,QAAQ,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC,OAAO,OAAO;GAC/D,MAAM,cAAc,KAAK,QAAQ,KAAK,MAAM,EAAE,WAAW,CAAC,CAAC,OAAO,OAAO;GACzE,MAAM,YAAY,KAAK,QAAQ,KAAK,MAAM,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,OAAO;GAErF,SAAS,cAAc,UAAsB;GAC7C,SAAS,aAAa,SAAqB;GAC3C,SAAS,UAAU,MAAkB;GACrC,SAAS,UAAU,MAAkB;GACrC,SAAS,QAAQ,WAAuB;GACxC,SAAS,aAAa,SAAqB;EAC7C,OAAO;GACL,IAAI,KAAK,QAAQ,YAAY;IAC3B,SAAS,aAAa,KAAK,QAAQ,UAAU;IAC7C,SAAS,WAAW,KAAK,QAAQ,WAAW,MAAM,GAAG,CAAC,CAAC;GACzD;GACA,IAAI,KAAK,QAAQ,WAAW;IAC1B,SAAS,YAAY,KAAK,QAAQ,SAAS;IAC3C,SAAS,UAAU,KAAK,QAAQ,UAAU,MAAM,GAAG,CAAC,CAAC;GACvD;GACA,IAAI,KAAK,QAAQ,MAAM,SAAS,QAAQ,KAAK,QAAQ,IAAI;GACzD,IAAI,KAAK,QAAQ,QAAQ,SAAS,SAAS,KAAK,QAAQ,MAAM;GAC9D,IAAI,KAAK,QAAQ,aAAa,SAAS,OAAO,KAAK,QAAQ,WAAW;GACtE,IAAI,KAAK,QAAQ,SAAS;IACxB,MAAM,UAAU,iBAAiB,KAAK,QAAQ,OAAO;IACrD,IAAI,SAAS,SAAS,WAAW,OAAO;GAC1C;EACF;CACF;CACA,IAAI,KAAK,UAAU;EACjB,SAAS,QAAQ,KAAK,SAAS,KAAK,SAAS,CAAC;EAC9C,SAAS,QAAQ,KAAK,SAAS,MAAM,SAAS,CAAC;EAC/C,SAAS,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC;CAC/C;CACA,IAAI,KAAK,WAAW,KAAK,QAAQ,WAAW,GAC1C,SAAS,cAAc,KAAK,OAAO;CAErC,IAAI,KAAK,YACP,SAAS,mBAAmB,KAAK,UAAU;CAE7C,IAAI,KAAK,YACP,SAAS,mBAAmB,KAAK,UAAU;CAE7C,IAAI,KAAK,aACP,SAAS,aAAa,KAAK,WAAW;CAExC,IAAI,KAAK,YACP,SAAS,UAAU,KAAK,UAAU;CAIpC,MAAM,MAAM,QAAQ,MAAM,WAAW;CACrC,IAAI,KACF,SAAS,OAAO,GAAG;CAErB,MAAM,MAAM,QAAQ,IAAI;CACxB,IAAI,KACF,SAAS,OAAO,GAAG;CAErB,IAAI,KAAK,gBACP,SAAS,SAAS,KAAK,cAAc;CAEvC,IAAI,KAAK,cAAc,OAAO,KAAK,eAAe,UAChD,SAAS,mBAAmB,KAAK,UAAU;CAG7C,OAAO;AACT;AAEA,SAAS,WAAW,MAAiB,gBAAwB;CAC3D,MAAM,UAAU,IAAI,mBAAmB;CACvC,IAAI,KAAK,SAAS;EAChB,IAAI,KAAK,YAAY,SAAS,KAAK,YAAY,UAC7C,QAAQ,kBAAkB,IAAI;OACzB,IAAI,KAAK,YAAY,WAC1B,QAAQ,kBAAkB,IAAI;CAElC;CACA,QAAQ,kBAAkB,cAAc;CACxC,MAAM,eAAe,KAAK,SAAS,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC;CAClD,IAAI,cACF,QAAQ,gBAAgB,YAAY;CAEtC,IAAI,KAAK,SACP,QAAQ,eAAe,KAAK,OAAO;CAErC,IAAI,KAAK,YACP,QAAQ,aAAa,KAAK,UAAU;CAEtC,IAAI,KAAK,iBACP,QAAQ,mBAAmB,KAAK,eAAe;CAEjD,IAAI,KAAK,UACP,QAAQ,UAAU,KAAK,QAAQ;CAEjC,IAAI,KAAK,cACP,QAAQ,eAAe,KAAK,YAAY;CAE1C,IAAI,KAAK,eACP,QAAQ,gBAAgB,KAAK,aAAa;CAE5C,IAAI,KAAK,oBACP,QAAQ,iBAAiB,KAAK,mBAAmB,SAAS,CAAC;CAG7D,MAAM,UAAU,IAAI,QAAQ;CAC5B,QAAQ,WAAW,OAAO;CAC1B,IAAI,KAAK,kBACP,QAAQ,mBAAmB,KAAK,gBAAgB;CAElD,IAAI,KAAK,gBACP,QAAQ,6BAA6B,IAAI;CAE3C,IAAI,KAAK,kBACP,QAAQ,mBAAmB,KAAK,gBAAgB;CAGlD,OAAO;AACT;AAGA,SAAS,cAAc,EAAE,MAAM,cAA+B;CAC5D,MAAM,OAAO,IAAI,WAAW;CAC5B,MAAM,CAAC,GAAG,OAAO,qBAAqB,WAAW,MAAM,UAAU;CACjE,MAAM,EACJ,OACA,UACA,cACA,kBACA,aACA,UACA,cAEA,eACA,WACA,eACA,QAEA,mBACA,GAAG,sBACD;CAEJ,IAAI,UAAU,KAAA,KAAa,UAAU,MAAM,KAAK,SAAS,KAAK;CAC9D,IAAI,UAAU,KAAK,YAAY,QAAQ;CACvC,IAAI,cAAc,KAAK,eAAe,YAAY;CAClD,IAAI,kBAAkB,KAAK,mBAAmB,gBAAgB;CAC9D,IAAI,aAAa,KAAK,cAAc,WAAW;CAC/C,IAAI,UACF,KAAK,YACH,SAAS,KAAK,MAAM;EAClB,MAAM,SAAS,IAAI,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,YAAY,EAAE,QAAQ;EAC/D,IAAI,EAAE,YAAY,OAAO,aAAa,EAAE,UAAU;EAClD,IAAI,EAAE,OAAO,OAAO,SAAS,EAAE,KAAK;EACpC,IAAI,EAAE,aAAa,OAAO,eAAe,EAAE,WAAW;EACtD,IAAI,EAAE,OAAO,OAAO,SAAS,EAAE,KAAK;EACpC,IAAI,EAAE,UAAU,OAAO,YAAY,EAAE,QAAQ;EAC7C,IAAI,EAAE,mBAAmB,OAAO,oBAAoB,EAAE,iBAAiB;EACvE,OAAO;CACT,CAAC,CACH;CACF,IAAI,cAAc,KAAK,eAAe,YAAY;CAElD,IAAI,eAAe,KAAK,gBAAgB,aAAa;CACrD,IAAI,WAAW,KAAK,YAAY,SAAS;CACzC,IAAI,eAAe,KAAK,gBAAgB,aAAa;CACrD,IAAI,QAAQ,KAAK,UAAU,OAAO,SAAS,CAAC;CAE5C,IAAI,mBAAmB,KAAK,oBAAoB,iBAAiB;CACjE,KAAK,oBAAoB,iBAAiB;CAC1C,OAAO;AACT;AAEA,SAAgB,eAEd,OACA,MACA,gBACA,cACA;CACA,MAAM,cAAc,IAAI,KAAK,MAAM,UAAU,CAAC,CAAC,QAAQ;CACvD,MAAM,WAAW,YAAY,MAAM,MAAM,MAAM,WAAW;CAC1D,MAAM,aAAa,cAAc,KAAK;CACtC,MAAM,CAAC,GAAG,aAAa,WAAW,MAAM,MAAM,MAAM,UAAU;CAC9D,MAAM,cAAc,IAAI,YAAY,CAAC,CAClC,WAAW,MAAM,KAAK,mBAAmB,MAAM,EAAE,CAAC,CAClD,aAAa,SAAS,CAAC,CACvB,aAAa,KAAK,MAAM,cAAc,GAAI,CAAC,CAAC,CAC5C,YAAY,QAAQ,CAAC,CACrB,cAAc,UAAU;CAE3B,MAAM,SAAS,oBAAoB,MAAM,UAAU,YAAY;CAC/D,IAAI,WAAW,SAAS,gBAAgB;EACtC,MAAM,UAAU,WAAW,MAAM,MAAM,cAAc;EACrD,YAAY,WAAW,OAAO;CAChC;CACA,MAAM,iBAAiB,aAAa,MAAM,IAAI;CAC9C,IAAI,gBACF,YAAY,kBAAkB,cAAc;CAE9C,QAAQ,QAAR;EACE,KAAK;GACH,YAAY,gBAAgB,KAAK;GACjC;EACF,KAAK;GACH,YAAY,gBAAgB,SAAS;GACrC;EACF,SAKE,YAAY,gBAAgB,OAAO;CAEvC;CACA,OAAO;AACT;;;;;;AAaA,SAAS,SAAS,OAAgB;CAChC,MAAM,EAAE,QAAQ,SAAS,aAAc,SAAS,CAAC;CACjD,IAAI,OAAO,WAAW,UAAU;EAC9B,QAAQ,MAAM,kDAAkD,WAAW,OAAO,KAAK,GAAG;EAC1F;CACF;CACA,QAAQ,MACN,2CAA2C,OAAO,UAAU,KAAK,UAAU,QAAQ,GACrF;AACF;AAEA,eAAsB,UACpB,aACA,SAEA,OACA,OAAyB,CAAC,GAC1B,gBACA,cACA;CACA,IAAI,eAAe,SAAS,MAAM,IAAI,GAAG,OAAO,KAAA;CAChD,MAAM,UAAU,IAAI,aAAa,aAAa,OAAO;CACrD,MAAM,UAAU,eAAe,OAAO,MAAM,gBAAgB,YAAY;CACxE,QAAQ,UAAU,CAAC,OAAO,CAAC;CAC3B,IAAI;EACF,OAAO,MAAM,QAAQ,QAAQ;CAC/B,SAAS,OAAO;EACd,SAAS,KAAK;EACd;CACF;AACF;AAEA,eAAsB,WACpB,aACA,SAEA,QACA,OAAyB,CAAC,GAC1B,gBACA,cACA;CACA,MAAM,WAAW,OACd,QAAQ,UAAU,CAAC,eAAe,SAAS,MAAM,IAAI,CAAC,CAAC,CACvD,KAAK,UAAU,eAAe,OAAO,MAAM,gBAAgB,YAAY,CAAC;CAC3E,IAAI,SAAS,WAAW,GAAG,OAAO,KAAA;CAClC,MAAM,UAAU,IAAI,aAAa,aAAa,OAAO;CACrD,QAAQ,UAAU,QAAQ;CAC1B,IAAI;EACF,OAAO,MAAM,QAAQ,QAAQ;CAC/B,SAAS,OAAO;EACd,SAAS,KAAK;EACd;CACF;AACF;AAEA,eAAsB,cAAc,aAAqB,SAAiB,eAAuB;CAC/F,MAAM,UAAU,IAAI,mBAAmB,CAAC,CACrC,kBAAkB,IAAI,CAAC,CACvB,kBAAkB,cAAc,CAAC,CACjC,gBAAgB,KAAK,CAAC,CACtB,eAAe,eAAe,CAAC,CAC/B,aAAa,QAAQ,CAAC,CACtB,mBAAmB,UAAU,CAAC,CAC9B,UAAU,OAAO,CAAC,CAClB,wBAAwB,OAAO,CAAC,CAChC,WAAW,SAAS,CAAC,CACrB,eAAe,IAAI,CAAC,CACpB,gBAAgB,IAAI,CAAC,CACrB,iBAAiB,MAAM,CAAC,CACxB,gBAAgB,CAAC,CAAC,CAClB,oBAAoB,GAAG,CAAC,CACxB,mBAAmB,CAAC,CAAC,CACrB,kBAAkB,cAAc;CAEnC,MAAM,WAAW,IAAI,SAAS,CAAC,CAAC,SAAS,kBAAkB;CAC3D,MAAM,UAAU,IAAI,QAAQ,CAAC,CAAC,WAAW,OAAO;CAChD,MAAM,QAAQ,IAAI,YAAY,CAAC,CAC5B,WAAW,KAAK,MAAM,KAAK,OAAO,IAAI,GAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,CAC3D,aAAa,WAAW,CAAC,CACzB,aAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,CAAC,CAAC,CAC3C,YAAY,QAAQ,CAAC,CACrB,WAAW,OAAO,CAAC,CACnB,gBAAgB,KAAK;CAExB,MAAM,UAAU,IAAI,aAAa,aAAa,OAAO;CACrD,QAAQ,iBAAiB,aAAa;CACtC,QAAQ,UAAU,CAAC,KAAK,CAAC;CACzB,OAAO,QAAQ,QAAQ;AACzB"}
+{"version":3,"file":"meta-conversions-api.mjs","names":[],"sources":["../../src/server/meta-conversions-api.ts"],"sourcesContent":["import {\n  AppData,\n  Content,\n  CustomData,\n  EventRequest,\n  ExtendedDeviceInfo,\n  ServerEvent,\n  UserData,\n} from 'facebook-nodejs-business-sdk';\nimport { IGNORED_EVENTS } from '../third-parties/ignored-events';\nimport { mapFBEvent } from '../track/fbq';\nimport type { TrackEvent, TrackTags, UserProvidedData } from '../track/types';\nimport { type EventActionSource, resolveActionSource } from './action-source';\nimport { metaFbc, metaFbp } from './click-ids';\nimport { pageLocation } from './page-location';\n\nconst USER_ASSIGNED_COUNTRIES: string[] = ['xk'];\nfunction normalizeCountry(input: string | undefined): string | undefined {\n  const country = input?.split(/[-_]/).at(0)?.toLowerCase();\n  if (!country) return undefined;\n  return USER_ASSIGNED_COUNTRIES.includes(country) ? undefined : country;\n}\n\nfunction getUserData(tags: TrackTags, data: UserProvidedData, eventTimeMs: number) {\n  const userData = new UserData();\n\n  // set user-provided data\n  if (data.email) {\n    if (Array.isArray(data.email)) {\n      userData.setEmails(data.email);\n    } else {\n      userData.setEmail(data.email);\n    }\n  }\n  if (data.phone_number) {\n    if (Array.isArray(data.phone_number)) {\n      userData.setPhones(data.phone_number);\n    } else {\n      userData.setPhone(data.phone_number);\n    }\n  }\n  if (data.gender) {\n    if (data.gender === 'female') {\n      userData.setGender('f');\n      // oxlint-disable-next-line typescript/no-unnecessary-condition -- user-provided data may carry values outside the declared union at runtime\n    } else if (data.gender === 'male') {\n      userData.setGender('m');\n    }\n  }\n  if (data.address) {\n    if (Array.isArray(data.address)) {\n      const firstNames = data.address.map((a) => a.first_name).filter(Boolean);\n      const lastNames = data.address.map((a) => a.last_name).filter(Boolean);\n      const cities = data.address.map((a) => a.city).filter(Boolean);\n      const states = data.address.map((a) => a.region).filter(Boolean);\n      const postalCodes = data.address.map((a) => a.postal_code).filter(Boolean);\n      const countries = data.address.map((a) => normalizeCountry(a.country)).filter(Boolean);\n\n      userData.setFirstNames(firstNames as string[]);\n      userData.setLastNames(lastNames as string[]);\n      userData.setCities(cities as string[]);\n      userData.setStates(states as string[]);\n      userData.setZips(postalCodes as string[]);\n      userData.setCountries(countries as string[]);\n    } else {\n      if (data.address.first_name) {\n        userData.setFirstName(data.address.first_name);\n        userData.setF5First(data.address.first_name.slice(0, 5));\n      }\n      if (data.address.last_name) {\n        userData.setLastName(data.address.last_name);\n        userData.setF5Last(data.address.last_name.slice(0, 5));\n      }\n      if (data.address.city) userData.setCity(data.address.city);\n      if (data.address.region) userData.setState(data.address.region);\n      if (data.address.postal_code) userData.setZip(data.address.postal_code);\n      if (data.address.country) {\n        const country = normalizeCountry(data.address.country);\n        if (country) userData.setCountry(country);\n      }\n    }\n  }\n  if (data.birthday) {\n    userData.setDoby(data.birthday.year.toString());\n    userData.setDobm(data.birthday.month.toString());\n    userData.setDobd(data.birthday.day.toString());\n  }\n  if (data.user_id && data.user_id.length !== 0) {\n    userData.setExternalId(data.user_id);\n  }\n  if (data.ip_address) {\n    userData.setClientIpAddress(data.ip_address);\n  }\n  if (data.user_agent) {\n    userData.setClientUserAgent(data.user_agent);\n  }\n  if (data.fb_login_id) {\n    userData.setFbLoginId(data.fb_login_id);\n  }\n  if (data.fb_page_id) {\n    userData.setPageId(data.fb_page_id);\n  }\n\n  // set tags info\n  const fbc = metaFbc(tags, eventTimeMs);\n  if (fbc) {\n    userData.setFbc(fbc);\n  }\n  const fbp = metaFbp(tags);\n  if (fbp) {\n    userData.setFbp(fbp);\n  }\n  if (tags.advertising_id) {\n    userData.setMadid(tags.advertising_id);\n  }\n  if (tags.ip_address && typeof tags.ip_address === 'string') {\n    userData.setClientIpAddress(tags.ip_address);\n  }\n\n  return userData;\n}\n\nfunction getAppData(tags: TrackTags, appPackageName: string) {\n  const extinfo = new ExtendedDeviceInfo();\n  if (tags.os_name) {\n    if (tags.os_name === 'iOS' || tags.os_name === 'iPadOS') {\n      extinfo.setExtInfoVersion('i2');\n    } else if (tags.os_name === 'Android') {\n      extinfo.setExtInfoVersion('a2');\n    }\n  }\n  extinfo.setAppPackageName(appPackageName);\n  const shortVersion = tags.release?.split('.').at(0);\n  if (shortVersion) {\n    extinfo.setShortVersion(shortVersion);\n  }\n  if (tags.release) {\n    extinfo.setLongVersion(tags.release);\n  }\n  if (tags.os_version) {\n    extinfo.setOsVersion(tags.os_version);\n  }\n  if (tags.device_model_id) {\n    extinfo.setDeviceModelName(tags.device_model_id);\n  }\n  if (tags.language) {\n    extinfo.setLocale(tags.language);\n  }\n  if (tags.screen_width) {\n    extinfo.setScreenWidth(tags.screen_width);\n  }\n  if (tags.screen_height) {\n    extinfo.setScreenHeight(tags.screen_height);\n  }\n  if (tags.device_pixel_ratio) {\n    extinfo.setScreenDensity(tags.device_pixel_ratio.toString());\n  }\n\n  const appData = new AppData();\n  appData.setExtinfo(extinfo);\n  if (tags.install_referrer) {\n    appData.setInstallReferrer(tags.install_referrer);\n  }\n  if (tags.advertising_id) {\n    appData.setAdvertiserTrackingEnabled(true);\n  }\n  if (tags.install_referrer) {\n    appData.setInstallReferrer(tags.install_referrer);\n  }\n\n  return appData;\n}\n\n// oxlint-disable-next-line @typescript-eslint/no-explicit-any\nfunction getCustomData({ name, properties }: TrackEvent<any>) {\n  const data = new CustomData();\n  const [_, _name, fbEventProperties] = mapFBEvent(name, properties);\n  const {\n    value,\n    currency,\n    content_name,\n    content_category,\n    content_ids,\n    contents,\n    content_type,\n    // order_id,\n    predicted_ltv,\n    num_items,\n    search_string,\n    status,\n    // item_number,\n    delivery_category,\n    ...custom_properties\n  } = fbEventProperties;\n  // oxlint-disable-next-line typescript/no-unnecessary-condition -- custom event properties may carry `value: null` at runtime despite the declared type\n  if (value !== undefined && value !== null) data.setValue(value);\n  if (currency) data.setCurrency(currency);\n  if (content_name) data.setContentName(content_name);\n  if (content_category) data.setContentCategory(content_category);\n  if (content_ids) data.setContentIds(content_ids);\n  if (contents)\n    data.setContents(\n      contents.map((c) => {\n        const result = new Content().setId(c.id).setQuantity(c.quantity);\n        if (c.item_price) result.setItemPrice(c.item_price);\n        if (c.title) result.setTitle(c.title);\n        if (c.description) result.setDescription(c.description);\n        if (c.brand) result.setBrand(c.brand);\n        if (c.category) result.setCategory(c.category);\n        if (c.delivery_category) result.setDeliveryCategory(c.delivery_category);\n        return result;\n      })\n    );\n  if (content_type) data.setContentType(content_type);\n  // if (order_id) data.setOrderId(order_id);\n  if (predicted_ltv) data.setPredictedLtv(predicted_ltv);\n  if (num_items) data.setNumItems(num_items);\n  if (search_string) data.setSearchString(search_string);\n  if (status) data.setStatus(status.toString());\n  // if (item_number) data.setItemNumber(item_number);\n  if (delivery_category) data.setDeliveryCategory(delivery_category);\n  data.setCustomProperties(custom_properties);\n  return data;\n}\n\nexport function getServerEvent(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData,\n  appPackageName?: string,\n  actionSource?: EventActionSource\n) {\n  const eventTimeMs = new Date(event.created_at).getTime();\n  const userData = getUserData(event.tags, data, eventTimeMs);\n  const customData = getCustomData(event);\n  const [_, eventName] = mapFBEvent(event.name, event.properties);\n  const serverEvent = new ServerEvent()\n    .setEventId(event.tags.idempotency_key ?? event.id)\n    .setEventName(eventName)\n    .setEventTime(Math.round(eventTimeMs / 1000))\n    .setUserData(userData)\n    .setCustomData(customData);\n\n  const source = resolveActionSource(event.platform, actionSource);\n  if (source === 'app' && appPackageName) {\n    const appData = getAppData(event.tags, appPackageName);\n    serverEvent.setAppData(appData);\n  }\n  const eventSourceUrl = pageLocation(event.tags);\n  if (eventSourceUrl) {\n    serverEvent.setEventSourceUrl(eventSourceUrl);\n  }\n  switch (source) {\n    case 'app':\n      serverEvent.setActionSource('app');\n      break;\n    case 'web':\n      serverEvent.setActionSource('website');\n      break;\n    default:\n      // `action_source` is required on a server event, so both an offline conversion and an\n      // undeterminable platform still have to send something. Meta has no generic offline\n      // value: 'physical_store' and 'system_generated' are narrower claims only the caller can\n      // make, so everything left lands in Meta's own catch-all.\n      serverEvent.setActionSource('other');\n      break;\n  }\n  return serverEvent;\n}\n\n/**\n * The shape `FacebookRequestError` exposes: `status` and `response` are the HTTP status and the\n * parsed error body, and both are null when the request never received a response.\n */\ntype MetaRequestError = { status?: number | null; message?: string; response?: unknown };\n\n/**\n * Meta's SDK rejects on API errors, where every other conversion sender here logs and resolves.\n * Keep the failure inside this module, so one rejected batch cannot fail the caller's request.\n * Never log the error itself: it also carries the access token, in both `url` and `data`.\n */\nfunction logError(error: unknown) {\n  const { status, message, response } = (error ?? {}) as MetaRequestError;\n  if (typeof status !== 'number') {\n    console.error(`Failed to send Meta conversion, network error: ${message ?? String(error)}`);\n    return;\n  }\n  console.error(\n    `Failed to send Meta conversion, status: ${status}, body: ${JSON.stringify(response)}`\n  );\n}\n\nexport async function sendEvent(\n  accessToken: string,\n  pixelId: string,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData = {},\n  appPackageName?: string,\n  actionSource?: EventActionSource\n) {\n  if (IGNORED_EVENTS.includes(event.name)) return undefined;\n  const request = new EventRequest(accessToken, pixelId);\n  const fbEvent = getServerEvent(event, data, appPackageName, actionSource);\n  request.setEvents([fbEvent]);\n  try {\n    return await request.execute();\n  } catch (error) {\n    logError(error);\n    return undefined;\n  }\n}\n\n/** An `event_time` over 7 days old fails the whole request; see `meta-capi.ts`. */\nconst MAX_EVENT_AGE_MS = 7 * 24 * 60 * 60 * 1000 - 60 * 1000;\n\nexport async function sendEvents(\n  accessToken: string,\n  pixelId: string,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  events: TrackEvent<any>[],\n  data: UserProvidedData = {},\n  appPackageName?: string,\n  actionSource?: EventActionSource\n) {\n  const fbEvents = events\n    .filter((event) => !IGNORED_EVENTS.includes(event.name))\n    .filter((event) => Date.now() - Date.parse(event.created_at) <= MAX_EVENT_AGE_MS)\n    .map((event) => getServerEvent(event, data, appPackageName, actionSource));\n  if (fbEvents.length === 0) return undefined;\n  const request = new EventRequest(accessToken, pixelId);\n  request.setEvents(fbEvents);\n  try {\n    return await request.execute();\n  } catch (error) {\n    logError(error);\n    return undefined;\n  }\n}\n\nexport async function sendTestEvent(accessToken: string, pixelId: string, testEventCode: string) {\n  const extinfo = new ExtendedDeviceInfo()\n    .setExtInfoVersion('a2')\n    .setAppPackageName('com.some.app')\n    .setShortVersion('771')\n    .setLongVersion('Version 7.7.1')\n    .setOsVersion('10.1.1')\n    .setDeviceModelName('OnePlus6')\n    .setLocale('en_US')\n    .setTimezoneAbbreviation('GMT-1')\n    .setCarrier('TMobile')\n    .setScreenWidth(1920)\n    .setScreenHeight(1080)\n    .setScreenDensity('2.00')\n    .setCpuCoreCount(2)\n    .setTotalDiskSpaceGb(128)\n    .setFreeDiskSpaceGb(8)\n    .setDeviceTimeZone('USA/New York');\n\n  const userData = new UserData().setEmail('test@example.com');\n  const appData = new AppData().setExtinfo(extinfo);\n  const event = new ServerEvent()\n    .setEventId(Math.round(Math.random() * 1000_000).toString())\n    .setEventName('TestEvent')\n    .setEventTime(Math.round(Date.now() / 1000))\n    .setUserData(userData)\n    .setAppData(appData)\n    .setActionSource('app');\n\n  const request = new EventRequest(accessToken, pixelId);\n  request.setTestEventCode(testEventCode);\n  request.setEvents([event]);\n  return request.execute();\n}\n"],"mappings":";;;;;;;AAgBA,MAAM,0BAAoC,CAAC,IAAI;AAC/C,SAAS,iBAAiB,OAA+C;CACvE,MAAM,UAAU,OAAO,MAAM,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY;CACxD,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,OAAO,wBAAwB,SAAS,OAAO,IAAI,KAAA,IAAY;AACjE;AAEA,SAAS,YAAY,MAAiB,MAAwB,aAAqB;CACjF,MAAM,WAAW,IAAI,SAAS;CAG9B,IAAI,KAAK,OAAO;EACd,IAAI,MAAM,QAAQ,KAAK,KAAK,GAC1B,SAAS,UAAU,KAAK,KAAK;OAE7B,SAAS,SAAS,KAAK,KAAK;CAEhC;CACA,IAAI,KAAK,cAAc;EACrB,IAAI,MAAM,QAAQ,KAAK,YAAY,GACjC,SAAS,UAAU,KAAK,YAAY;OAEpC,SAAS,SAAS,KAAK,YAAY;CAEvC;CACA,IAAI,KAAK,QAAQ;EACf,IAAI,KAAK,WAAW,UAClB,SAAS,UAAU,GAAG;OAEjB,IAAI,KAAK,WAAW,QACzB,SAAS,UAAU,GAAG;CAE1B;CACA,IAAI,KAAK,SAAS;EAChB,IAAI,MAAM,QAAQ,KAAK,OAAO,GAAG;GAC/B,MAAM,aAAa,KAAK,QAAQ,KAAK,MAAM,EAAE,UAAU,CAAC,CAAC,OAAO,OAAO;GACvE,MAAM,YAAY,KAAK,QAAQ,KAAK,MAAM,EAAE,SAAS,CAAC,CAAC,OAAO,OAAO;GACrE,MAAM,SAAS,KAAK,QAAQ,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,OAAO;GAC7D,MAAM,SAAS,KAAK,QAAQ,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC,OAAO,OAAO;GAC/D,MAAM,cAAc,KAAK,QAAQ,KAAK,MAAM,EAAE,WAAW,CAAC,CAAC,OAAO,OAAO;GACzE,MAAM,YAAY,KAAK,QAAQ,KAAK,MAAM,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,OAAO;GAErF,SAAS,cAAc,UAAsB;GAC7C,SAAS,aAAa,SAAqB;GAC3C,SAAS,UAAU,MAAkB;GACrC,SAAS,UAAU,MAAkB;GACrC,SAAS,QAAQ,WAAuB;GACxC,SAAS,aAAa,SAAqB;EAC7C,OAAO;GACL,IAAI,KAAK,QAAQ,YAAY;IAC3B,SAAS,aAAa,KAAK,QAAQ,UAAU;IAC7C,SAAS,WAAW,KAAK,QAAQ,WAAW,MAAM,GAAG,CAAC,CAAC;GACzD;GACA,IAAI,KAAK,QAAQ,WAAW;IAC1B,SAAS,YAAY,KAAK,QAAQ,SAAS;IAC3C,SAAS,UAAU,KAAK,QAAQ,UAAU,MAAM,GAAG,CAAC,CAAC;GACvD;GACA,IAAI,KAAK,QAAQ,MAAM,SAAS,QAAQ,KAAK,QAAQ,IAAI;GACzD,IAAI,KAAK,QAAQ,QAAQ,SAAS,SAAS,KAAK,QAAQ,MAAM;GAC9D,IAAI,KAAK,QAAQ,aAAa,SAAS,OAAO,KAAK,QAAQ,WAAW;GACtE,IAAI,KAAK,QAAQ,SAAS;IACxB,MAAM,UAAU,iBAAiB,KAAK,QAAQ,OAAO;IACrD,IAAI,SAAS,SAAS,WAAW,OAAO;GAC1C;EACF;CACF;CACA,IAAI,KAAK,UAAU;EACjB,SAAS,QAAQ,KAAK,SAAS,KAAK,SAAS,CAAC;EAC9C,SAAS,QAAQ,KAAK,SAAS,MAAM,SAAS,CAAC;EAC/C,SAAS,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC;CAC/C;CACA,IAAI,KAAK,WAAW,KAAK,QAAQ,WAAW,GAC1C,SAAS,cAAc,KAAK,OAAO;CAErC,IAAI,KAAK,YACP,SAAS,mBAAmB,KAAK,UAAU;CAE7C,IAAI,KAAK,YACP,SAAS,mBAAmB,KAAK,UAAU;CAE7C,IAAI,KAAK,aACP,SAAS,aAAa,KAAK,WAAW;CAExC,IAAI,KAAK,YACP,SAAS,UAAU,KAAK,UAAU;CAIpC,MAAM,MAAM,QAAQ,MAAM,WAAW;CACrC,IAAI,KACF,SAAS,OAAO,GAAG;CAErB,MAAM,MAAM,QAAQ,IAAI;CACxB,IAAI,KACF,SAAS,OAAO,GAAG;CAErB,IAAI,KAAK,gBACP,SAAS,SAAS,KAAK,cAAc;CAEvC,IAAI,KAAK,cAAc,OAAO,KAAK,eAAe,UAChD,SAAS,mBAAmB,KAAK,UAAU;CAG7C,OAAO;AACT;AAEA,SAAS,WAAW,MAAiB,gBAAwB;CAC3D,MAAM,UAAU,IAAI,mBAAmB;CACvC,IAAI,KAAK,SAAS;EAChB,IAAI,KAAK,YAAY,SAAS,KAAK,YAAY,UAC7C,QAAQ,kBAAkB,IAAI;OACzB,IAAI,KAAK,YAAY,WAC1B,QAAQ,kBAAkB,IAAI;CAElC;CACA,QAAQ,kBAAkB,cAAc;CACxC,MAAM,eAAe,KAAK,SAAS,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC;CAClD,IAAI,cACF,QAAQ,gBAAgB,YAAY;CAEtC,IAAI,KAAK,SACP,QAAQ,eAAe,KAAK,OAAO;CAErC,IAAI,KAAK,YACP,QAAQ,aAAa,KAAK,UAAU;CAEtC,IAAI,KAAK,iBACP,QAAQ,mBAAmB,KAAK,eAAe;CAEjD,IAAI,KAAK,UACP,QAAQ,UAAU,KAAK,QAAQ;CAEjC,IAAI,KAAK,cACP,QAAQ,eAAe,KAAK,YAAY;CAE1C,IAAI,KAAK,eACP,QAAQ,gBAAgB,KAAK,aAAa;CAE5C,IAAI,KAAK,oBACP,QAAQ,iBAAiB,KAAK,mBAAmB,SAAS,CAAC;CAG7D,MAAM,UAAU,IAAI,QAAQ;CAC5B,QAAQ,WAAW,OAAO;CAC1B,IAAI,KAAK,kBACP,QAAQ,mBAAmB,KAAK,gBAAgB;CAElD,IAAI,KAAK,gBACP,QAAQ,6BAA6B,IAAI;CAE3C,IAAI,KAAK,kBACP,QAAQ,mBAAmB,KAAK,gBAAgB;CAGlD,OAAO;AACT;AAGA,SAAS,cAAc,EAAE,MAAM,cAA+B;CAC5D,MAAM,OAAO,IAAI,WAAW;CAC5B,MAAM,CAAC,GAAG,OAAO,qBAAqB,WAAW,MAAM,UAAU;CACjE,MAAM,EACJ,OACA,UACA,cACA,kBACA,aACA,UACA,cAEA,eACA,WACA,eACA,QAEA,mBACA,GAAG,sBACD;CAEJ,IAAI,UAAU,KAAA,KAAa,UAAU,MAAM,KAAK,SAAS,KAAK;CAC9D,IAAI,UAAU,KAAK,YAAY,QAAQ;CACvC,IAAI,cAAc,KAAK,eAAe,YAAY;CAClD,IAAI,kBAAkB,KAAK,mBAAmB,gBAAgB;CAC9D,IAAI,aAAa,KAAK,cAAc,WAAW;CAC/C,IAAI,UACF,KAAK,YACH,SAAS,KAAK,MAAM;EAClB,MAAM,SAAS,IAAI,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,YAAY,EAAE,QAAQ;EAC/D,IAAI,EAAE,YAAY,OAAO,aAAa,EAAE,UAAU;EAClD,IAAI,EAAE,OAAO,OAAO,SAAS,EAAE,KAAK;EACpC,IAAI,EAAE,aAAa,OAAO,eAAe,EAAE,WAAW;EACtD,IAAI,EAAE,OAAO,OAAO,SAAS,EAAE,KAAK;EACpC,IAAI,EAAE,UAAU,OAAO,YAAY,EAAE,QAAQ;EAC7C,IAAI,EAAE,mBAAmB,OAAO,oBAAoB,EAAE,iBAAiB;EACvE,OAAO;CACT,CAAC,CACH;CACF,IAAI,cAAc,KAAK,eAAe,YAAY;CAElD,IAAI,eAAe,KAAK,gBAAgB,aAAa;CACrD,IAAI,WAAW,KAAK,YAAY,SAAS;CACzC,IAAI,eAAe,KAAK,gBAAgB,aAAa;CACrD,IAAI,QAAQ,KAAK,UAAU,OAAO,SAAS,CAAC;CAE5C,IAAI,mBAAmB,KAAK,oBAAoB,iBAAiB;CACjE,KAAK,oBAAoB,iBAAiB;CAC1C,OAAO;AACT;AAEA,SAAgB,eAEd,OACA,MACA,gBACA,cACA;CACA,MAAM,cAAc,IAAI,KAAK,MAAM,UAAU,CAAC,CAAC,QAAQ;CACvD,MAAM,WAAW,YAAY,MAAM,MAAM,MAAM,WAAW;CAC1D,MAAM,aAAa,cAAc,KAAK;CACtC,MAAM,CAAC,GAAG,aAAa,WAAW,MAAM,MAAM,MAAM,UAAU;CAC9D,MAAM,cAAc,IAAI,YAAY,CAAC,CAClC,WAAW,MAAM,KAAK,mBAAmB,MAAM,EAAE,CAAC,CAClD,aAAa,SAAS,CAAC,CACvB,aAAa,KAAK,MAAM,cAAc,GAAI,CAAC,CAAC,CAC5C,YAAY,QAAQ,CAAC,CACrB,cAAc,UAAU;CAE3B,MAAM,SAAS,oBAAoB,MAAM,UAAU,YAAY;CAC/D,IAAI,WAAW,SAAS,gBAAgB;EACtC,MAAM,UAAU,WAAW,MAAM,MAAM,cAAc;EACrD,YAAY,WAAW,OAAO;CAChC;CACA,MAAM,iBAAiB,aAAa,MAAM,IAAI;CAC9C,IAAI,gBACF,YAAY,kBAAkB,cAAc;CAE9C,QAAQ,QAAR;EACE,KAAK;GACH,YAAY,gBAAgB,KAAK;GACjC;EACF,KAAK;GACH,YAAY,gBAAgB,SAAS;GACrC;EACF,SAKE,YAAY,gBAAgB,OAAO;CAEvC;CACA,OAAO;AACT;;;;;;AAaA,SAAS,SAAS,OAAgB;CAChC,MAAM,EAAE,QAAQ,SAAS,aAAc,SAAS,CAAC;CACjD,IAAI,OAAO,WAAW,UAAU;EAC9B,QAAQ,MAAM,kDAAkD,WAAW,OAAO,KAAK,GAAG;EAC1F;CACF;CACA,QAAQ,MACN,2CAA2C,OAAO,UAAU,KAAK,UAAU,QAAQ,GACrF;AACF;AAEA,eAAsB,UACpB,aACA,SAEA,OACA,OAAyB,CAAC,GAC1B,gBACA,cACA;CACA,IAAI,eAAe,SAAS,MAAM,IAAI,GAAG,OAAO,KAAA;CAChD,MAAM,UAAU,IAAI,aAAa,aAAa,OAAO;CACrD,MAAM,UAAU,eAAe,OAAO,MAAM,gBAAgB,YAAY;CACxE,QAAQ,UAAU,CAAC,OAAO,CAAC;CAC3B,IAAI;EACF,OAAO,MAAM,QAAQ,QAAQ;CAC/B,SAAS,OAAO;EACd,SAAS,KAAK;EACd;CACF;AACF;;AAGA,MAAM,mBAAmB;AAEzB,eAAsB,WACpB,aACA,SAEA,QACA,OAAyB,CAAC,GAC1B,gBACA,cACA;CACA,MAAM,WAAW,OACd,QAAQ,UAAU,CAAC,eAAe,SAAS,MAAM,IAAI,CAAC,CAAC,CACvD,QAAQ,UAAU,KAAK,IAAI,IAAI,KAAK,MAAM,MAAM,UAAU,KAAK,gBAAgB,CAAC,CAChF,KAAK,UAAU,eAAe,OAAO,MAAM,gBAAgB,YAAY,CAAC;CAC3E,IAAI,SAAS,WAAW,GAAG,OAAO,KAAA;CAClC,MAAM,UAAU,IAAI,aAAa,aAAa,OAAO;CACrD,QAAQ,UAAU,QAAQ;CAC1B,IAAI;EACF,OAAO,MAAM,QAAQ,QAAQ;CAC/B,SAAS,OAAO;EACd,SAAS,KAAK;EACd;CACF;AACF;AAEA,eAAsB,cAAc,aAAqB,SAAiB,eAAuB;CAC/F,MAAM,UAAU,IAAI,mBAAmB,CAAC,CACrC,kBAAkB,IAAI,CAAC,CACvB,kBAAkB,cAAc,CAAC,CACjC,gBAAgB,KAAK,CAAC,CACtB,eAAe,eAAe,CAAC,CAC/B,aAAa,QAAQ,CAAC,CACtB,mBAAmB,UAAU,CAAC,CAC9B,UAAU,OAAO,CAAC,CAClB,wBAAwB,OAAO,CAAC,CAChC,WAAW,SAAS,CAAC,CACrB,eAAe,IAAI,CAAC,CACpB,gBAAgB,IAAI,CAAC,CACrB,iBAAiB,MAAM,CAAC,CACxB,gBAAgB,CAAC,CAAC,CAClB,oBAAoB,GAAG,CAAC,CACxB,mBAAmB,CAAC,CAAC,CACrB,kBAAkB,cAAc;CAEnC,MAAM,WAAW,IAAI,SAAS,CAAC,CAAC,SAAS,kBAAkB;CAC3D,MAAM,UAAU,IAAI,QAAQ,CAAC,CAAC,WAAW,OAAO;CAChD,MAAM,QAAQ,IAAI,YAAY,CAAC,CAC5B,WAAW,KAAK,MAAM,KAAK,OAAO,IAAI,GAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,CAC3D,aAAa,WAAW,CAAC,CACzB,aAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,CAAC,CAAC,CAC3C,YAAY,QAAQ,CAAC,CACrB,WAAW,OAAO,CAAC,CACnB,gBAAgB,KAAK;CAExB,MAAM,UAAU,IAAI,aAAa,aAAa,OAAO;CACrD,QAAQ,iBAAiB,aAAa;CACtC,QAAQ,UAAU,CAAC,KAAK,CAAC;CACzB,OAAO,QAAQ,QAAQ;AACzB"}

package/dist/server/microsoft-conversions-api.cjs

@@ -120,6 +120,8 @@ function getServerEvent(event, data = {}, options = {}) {
 function compact(value) {
 	return JSON.parse(JSON.stringify(value));
 }
+/** `eventTime` must be "within the last 7 days"; a minute's margin for the trip. */
+const MAX_EVENT_AGE_MS = 60474e4;
 /**
 * Send events to `POST /v1/{tagId}/events`. Batches above the API's 1,000-event limit are split
 * into consecutive requests; one response is returned per request made. Never throws: an HTTP
@@ -127,7 +129,7 @@ function compact(value) {
 */
 async function sendEvents(token, tagId, events, data = {}, options = {}) {
 	const { consent, pageLoads = false, dataProvider, continueOnValidationError = true } = options;
-	const capiEvents = events.filter((event) => pageLoads && event.name === "page_view" || !require_third_parties_ignored_events.IGNORED_EVENTS.includes(event.name)).map((event) => getServerEvent(event, data, {
+	const capiEvents = events.filter((event) => pageLoads && event.name === "page_view" || !require_third_parties_ignored_events.IGNORED_EVENTS.includes(event.name)).filter((event) => Date.now() - Date.parse(event.created_at) <= MAX_EVENT_AGE_MS).map((event) => getServerEvent(event, data, {
 		consent,
 		pageLoads
 	})).filter((event) => event.eventType !== "pageLoad" || event.eventSourceUrl);

package/dist/server/microsoft-conversions-api.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"microsoft-conversions-api.cjs","names":["createHash","microsoftMsclkid","formatMsclkid","mapUETEvent","pageLocation","IGNORED_EVENTS","chunk","fetch"],"sources":["../../src/server/microsoft-conversions-api.ts"],"sourcesContent":["/**\n * Microsoft Advertising Conversions API (CAPI) sender — the server-side counterpart of the UET\n * tag, in the same shape as the other senders here: a pure per-event builder, a never-throws\n * `sendEvents`, the token in a header and never in a URL or a log line.\n *\n * Microsoft's recommended deployment is hybrid: keep the UET JavaScript on the page and send the\n * same conversions here too, deduplicated by (`tagId`, `eventName`, `eventId`). Both channels in\n * this SDK are fed from the same `track()` call — the browser sends the internal name as the UET\n * action with the event id as `event_id`, and this builder sends the same name as `eventName`\n * with the same id — so the pair agrees by construction.\n *\n * The token comes from the UET tag's \"Use Conversions API\" setup step, or from the Campaign\n * Management API's `UetTagAuthKey/Query`. Access is provisioned per customer account: an account\n * whose tag setup has no \"Use Conversions API\" option has to ask Microsoft Advertising support.\n *\n * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration\n */\nimport { createHash } from 'node:crypto';\nimport { chunk, fetch } from '@shware/utils';\nimport { formatMsclkid } from '../click-id/index';\nimport { IGNORED_EVENTS } from '../third-parties/ignored-events';\nimport type { TrackEvent, UserProvidedData } from '../track/types';\nimport { mapUETEvent } from '../track/uetq';\nimport { microsoftMsclkid } from './click-ids';\nimport { pageLocation } from './page-location';\n\nconst ENDPOINT = 'https://capi.uet.microsoft.com/v1';\n\n/** The API's hard limit per request. */\nconst MAX_EVENTS_PER_REQUEST = 1000;\n\nconst SHA256 = /^[a-f0-9]{64}$/;\n\nconst sha256 = (value: string) => createHash('sha256').update(value).digest('hex');\n\n/**\n * Microsoft's email normalization: trim, drop the dots and any `+alias` from the user part —\n * for EVERY domain, unlike Google's gmail-only rule — lowercase, SHA-256. A value that is\n * already a SHA-256 hex digest passes through.\n * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration#hashed-identifiers\n */\nexport function normalizeEmail(input: string): string {\n  const email = input.trim().toLowerCase();\n  const at = email.lastIndexOf('@');\n  if (at === -1) return email;\n  const user = email.slice(0, at).replace(/\\./g, '').split('+', 1)[0] ?? '';\n  return `${user}@${email.slice(at + 1)}`;\n}\n\nfunction hashEmail(input: string | undefined): string | undefined {\n  const value = input?.trim().toLowerCase();\n  if (!value) return undefined;\n  return SHA256.test(value) ? value : sha256(normalizeEmail(value));\n}\n\n/**\n * Phones are E.164 by the schema (`+` then 11–15 digits, the range bat.js validates too); the\n * separators bat.js tolerates are stripped, and anything else is dropped rather than guessed —\n * a number with no country code hashed under an assumed one can never match.\n */\nfunction hashPhone(input: string | undefined): string | undefined {\n  const value = input?.trim().toLowerCase();\n  if (!value) return undefined;\n  if (SHA256.test(value)) return value;\n  const phone = value.replace(/[-() \\t]/g, '');\n  return /^\\+\\d{11,15}$/.test(phone) ? sha256(phone) : undefined;\n}\n\nexport interface MicrosoftUserData {\n  /** Microsoft click id, as a dashed UUID. */\n  msclkid?: string;\n  /** SHA-256 of the normalized email. */\n  em?: string;\n  /** SHA-256 of the E.164 phone number. */\n  ph?: string;\n  /** The SDK visitor id — what the client-side ID Sync pixel (`sendUETIdSync`) sends as `VID`. */\n  anonymousId?: string;\n  /** SHA-256 of the signed-in user id — what `sendUETIdSync` sends as `UID`. */\n  externalId?: string;\n  clientUserAgent?: string;\n  clientIpAddress?: string;\n  idfa?: string;\n  gaid?: string;\n}\n\nexport interface MicrosoftItem {\n  id?: string;\n  name?: string;\n  price?: number;\n  quantity?: number;\n}\n\nexport interface MicrosoftCustomData {\n  eventCategory?: string;\n  eventLabel?: string;\n  eventValue?: number;\n  searchTerm?: string;\n  transactionId?: string;\n  value?: number;\n  currency?: string;\n  items?: MicrosoftItem[];\n  itemIds?: string[];\n  pageType?: string;\n  ecommTotalValue?: number;\n  ecommCategory?: string;\n}\n\n/** One entry of the `data` array POSTed to `/v1/{tagId}/events`. */\nexport interface MicrosoftEvent {\n  eventType: 'custom' | 'pageLoad';\n  eventId: string;\n  /** The UET action; absent on `pageLoad` events. */\n  eventName?: string;\n  /** UNIX seconds, UTC; the API rejects anything older than 7 days. */\n  eventTime: number;\n  eventSourceUrl?: string;\n  /** Links a `custom` event to its `pageLoad` event; a v4 UUID (the SDK's `page_load_id` tag). */\n  pageLoadId?: string;\n  referrerUrl?: string;\n  pageTitle?: string;\n  /** `G` granted, `D` denied. Absent means granted. */\n  adStorageConsent?: 'G' | 'D';\n  userData: MicrosoftUserData;\n  customData?: MicrosoftCustomData;\n}\n\nexport interface MicrosoftConversionsOptions {\n  /**\n   * EEA/UK/CH consent for the whole batch. `denied` events are accepted but used for nothing —\n   * no attribution, no audiences. Absent means granted, which is also the API's default.\n   */\n  consent?: 'granted' | 'denied';\n  /**\n   * Also send `page_view` events, as CAPI `pageLoad` events, and link every custom event to the\n   * page load it happened on (`pageLoadId`, from the `page_load_id` tag). Off by default because\n   * the UET JavaScript already reports every page load and the two would double-count\n   * destination-URL goals; turn it on for a CAPI-only site with no tag on the page. Off, no\n   * `pageLoadId` is sent either: it would point at a page load Microsoft only saw from the tag,\n   * under the tag's own id.\n   *\n   * Not yet modelled: the revenue-only custom event a `pageLoad` needs for a destination goal\n   * with variable revenue.\n   */\n  pageLoads?: boolean;\n  /** Identifies a third-party sender in Microsoft's monitoring; leave unset for a first-party build. */\n  dataProvider?: string;\n  /**\n   * Process the valid events of a batch and report the invalid ones, instead of the API's default\n   * all-or-nothing rejection. On by default — one malformed event should cost itself, not the\n   * batch it travelled with.\n   */\n  continueOnValidationError?: boolean;\n}\n\nexport interface MicrosoftValidationDetail {\n  index?: number;\n  propertyName?: string;\n  attemptedValue?: unknown;\n  errorMessage?: string;\n  errorCode?: string;\n  isWarning?: boolean;\n}\n\nexport interface MicrosoftConversionsResponse {\n  eventsReceived?: number;\n  error?: { code?: string; message?: string; details?: MicrosoftValidationDetail[] };\n}\n\nfunction getUserData(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData\n): MicrosoftUserData {\n  const { tags, platform, visitor_id } = event;\n  const email = Array.isArray(data.email) ? data.email[0] : data.email;\n  const phone = Array.isArray(data.phone_number) ? data.phone_number[0] : data.phone_number;\n  const msclkid = microsoftMsclkid(tags);\n\n  return {\n    msclkid: msclkid ? formatMsclkid(msclkid) : undefined,\n    em: hashEmail(email),\n    ph: hashPhone(phone),\n    // Microsoft requires this to equal the `VID` of the client-side ID Sync pixel; both sides use\n    // the SDK visitor id, which every event carries and the client can always read.\n    anonymousId: visitor_id || undefined,\n    // Microsoft asks for an anonymized id and never a real one. SHA-256, the same digest\n    // `sendUETIdSync` applies client-side, so `externalId` and the pixel's `UID` agree too.\n    externalId: data.user_id ? sha256(data.user_id) : undefined,\n    clientUserAgent: data.user_agent,\n    clientIpAddress:\n      typeof tags.ip_address === 'string' && tags.ip_address ? tags.ip_address : data.ip_address,\n    idfa: platform === 'ios' ? tags.advertising_id : undefined,\n    gaid: platform === 'android' ? tags.advertising_id : undefined,\n  };\n}\n\n// oxlint-disable-next-line @typescript-eslint/no-explicit-any\nfunction getCustomData(event: TrackEvent<any>): MicrosoftCustomData | undefined {\n  const [, params] = mapUETEvent(event.name, event.properties);\n  const customData: MicrosoftCustomData = {\n    eventCategory: params.event_category,\n    eventLabel: params.event_label,\n    eventValue: params.event_value,\n    searchTerm: params.search_term,\n    transactionId: params.transaction_id,\n    value: params.revenue_value,\n    currency: params.currency,\n    items: params.items?.map(({ id, name, price, quantity }) => ({ id, name, price, quantity })),\n    itemIds: Array.isArray(params.ecomm_prodid)\n      ? params.ecomm_prodid\n      : params.ecomm_prodid\n        ? [params.ecomm_prodid]\n        : undefined,\n    pageType: params.ecomm_pagetype,\n    ecommTotalValue: params.ecomm_totalvalue,\n    ecommCategory: params.ecomm_category,\n  };\n  return Object.values(customData).some((value) => value !== undefined) ? customData : undefined;\n}\n\n/**\n * Build one CAPI event. `page_view` becomes a `pageLoad` event (the caller decides whether to\n * send those, see `MicrosoftConversionsOptions.pageLoads`); everything else is a `custom` event\n * named after the track event, which is also the UET action the browser sent.\n */\nexport type MicrosoftEventOptions = Pick<MicrosoftConversionsOptions, 'consent' | 'pageLoads'>;\n\nexport function getServerEvent(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData = {},\n  /** Options, or — the 8.3.0 signature, still accepted — the bare consent value. */\n  options: MicrosoftEventOptions | MicrosoftEventOptions['consent'] = {}\n): MicrosoftEvent {\n  const { consent, pageLoads = false } =\n    typeof options === 'string' ? { consent: options } : options;\n  const { id, name, tags, created_at } = event;\n  const isPageLoad = name === 'page_view';\n\n  return {\n    eventType: isPageLoad ? 'pageLoad' : 'custom',\n    eventId: tags.idempotency_key ?? id,\n    eventName: isPageLoad ? undefined : name,\n    eventTime: Math.round(new Date(created_at).getTime() / 1000),\n    eventSourceUrl: pageLocation(tags),\n    pageLoadId: pageLoads ? tags.page_load_id : undefined,\n    referrerUrl: tags.page_referrer,\n    pageTitle: tags.page_title,\n    adStorageConsent: consent === 'granted' ? 'G' : consent === 'denied' ? 'D' : undefined,\n    userData: getUserData(event, data),\n    customData: isPageLoad ? undefined : getCustomData(event),\n  };\n}\n\n/** Strip undefined fields so the wire payload carries only what was set. */\nfunction compact<T>(value: T): T {\n  return JSON.parse(JSON.stringify(value)) as T;\n}\n\n/**\n * Send events to `POST /v1/{tagId}/events`. Batches above the API's 1,000-event limit are split\n * into consecutive requests; one response is returned per request made. Never throws: an HTTP\n * or network failure is logged (without the token) and yields no response for that request.\n */\nexport async function sendEvents(\n  token: string,\n  tagId: string | number,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  events: TrackEvent<any>[],\n  data: UserProvidedData = {},\n  options: MicrosoftConversionsOptions = {}\n): Promise<MicrosoftConversionsResponse[]> {\n  const { consent, pageLoads = false, dataProvider, continueOnValidationError = true } = options;\n\n  const capiEvents = events\n    .filter(\n      (event) => (pageLoads && event.name === 'page_view') || !IGNORED_EVENTS.includes(event.name)\n    )\n    .map((event) => getServerEvent(event, data, { consent, pageLoads }))\n    // A pageLoad without a URL is rejected by the API, and a page-less event has nothing to say.\n    .filter((event) => event.eventType !== 'pageLoad' || event.eventSourceUrl);\n  if (capiEvents.length === 0) return [];\n\n  const responses: MicrosoftConversionsResponse[] = [];\n  for (const batch of chunk(capiEvents, MAX_EVENTS_PER_REQUEST)) {\n    const body = compact({ data: batch, continueOnValidationError, dataProvider });\n    try {\n      const response = await fetch(`${ENDPOINT}/${tagId}/events`, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          Accept: 'application/json',\n          Authorization: `Bearer ${token}`,\n        },\n        body: JSON.stringify(body),\n      });\n      if (response.ok) {\n        const result = (await response.json()) as MicrosoftConversionsResponse;\n        // A 200 can still carry field-level warnings (the field was removed) and, with\n        // `continueOnValidationError`, skipped events. Surface them: silent partial data loss is\n        // the one failure mode the caller cannot see from the status code.\n        if (result.error?.details?.length) {\n          console.warn(\n            `Microsoft conversion accepted with validation issues: ${JSON.stringify(result.error.details)}`\n          );\n        }\n        responses.push(result);\n        continue;\n      }\n      const { status } = response;\n      const message = await response.text();\n      console.error(`Failed to send Microsoft conversion, status: ${status}, body: ${message}`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      console.error(`Failed to send Microsoft conversion, network error: ${message}`);\n    }\n  }\n  return responses;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,MAAM,WAAW;;AAGjB,MAAM,yBAAyB;AAE/B,MAAM,SAAS;AAEf,MAAM,UAAU,WAAA,GAAkBA,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;;;;;;;AAQjF,SAAgB,eAAe,OAAuB;CACpD,MAAM,QAAQ,MAAM,KAAK,CAAC,CAAC,YAAY;CACvC,MAAM,KAAK,MAAM,YAAY,GAAG;CAChC,IAAI,OAAO,IAAI,OAAO;CAEtB,OAAO,GADM,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,GACxD,GAAG,MAAM,MAAM,KAAK,CAAC;AACtC;AAEA,SAAS,UAAU,OAA+C;CAChE,MAAM,QAAQ,OAAO,KAAK,CAAC,CAAC,YAAY;CACxC,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,OAAO,OAAO,KAAK,KAAK,IAAI,QAAQ,OAAO,eAAe,KAAK,CAAC;AAClE;;;;;;AAOA,SAAS,UAAU,OAA+C;CAChE,MAAM,QAAQ,OAAO,KAAK,CAAC,CAAC,YAAY;CACxC,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,IAAI,OAAO,KAAK,KAAK,GAAG,OAAO;CAC/B,MAAM,QAAQ,MAAM,QAAQ,aAAa,EAAE;CAC3C,OAAO,gBAAgB,KAAK,KAAK,IAAI,OAAO,KAAK,IAAI,KAAA;AACvD;AAsGA,SAAS,YAEP,OACA,MACmB;CACnB,MAAM,EAAE,MAAM,UAAU,eAAe;CACvC,MAAM,QAAQ,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,MAAM,KAAK,KAAK;CAC/D,MAAM,QAAQ,MAAM,QAAQ,KAAK,YAAY,IAAI,KAAK,aAAa,KAAK,KAAK;CAC7E,MAAM,UAAUC,yBAAAA,iBAAiB,IAAI;CAErC,OAAO;EACL,SAAS,UAAUC,uBAAAA,cAAc,OAAO,IAAI,KAAA;EAC5C,IAAI,UAAU,KAAK;EACnB,IAAI,UAAU,KAAK;EAGnB,aAAa,cAAc,KAAA;EAG3B,YAAY,KAAK,UAAU,OAAO,KAAK,OAAO,IAAI,KAAA;EAClD,iBAAiB,KAAK;EACtB,iBACE,OAAO,KAAK,eAAe,YAAY,KAAK,aAAa,KAAK,aAAa,KAAK;EAClF,MAAM,aAAa,QAAQ,KAAK,iBAAiB,KAAA;EACjD,MAAM,aAAa,YAAY,KAAK,iBAAiB,KAAA;CACvD;AACF;AAGA,SAAS,cAAc,OAAyD;CAC9E,MAAM,GAAG,UAAUC,mBAAAA,YAAY,MAAM,MAAM,MAAM,UAAU;CAC3D,MAAM,aAAkC;EACtC,eAAe,OAAO;EACtB,YAAY,OAAO;EACnB,YAAY,OAAO;EACnB,YAAY,OAAO;EACnB,eAAe,OAAO;EACtB,OAAO,OAAO;EACd,UAAU,OAAO;EACjB,OAAO,OAAO,OAAO,KAAK,EAAE,IAAI,MAAM,OAAO,gBAAgB;GAAE;GAAI;GAAM;GAAO;EAAS,EAAE;EAC3F,SAAS,MAAM,QAAQ,OAAO,YAAY,IACtC,OAAO,eACP,OAAO,eACL,CAAC,OAAO,YAAY,IACpB,KAAA;EACN,UAAU,OAAO;EACjB,iBAAiB,OAAO;EACxB,eAAe,OAAO;CACxB;CACA,OAAO,OAAO,OAAO,UAAU,CAAC,CAAC,MAAM,UAAU,UAAU,KAAA,CAAS,IAAI,aAAa,KAAA;AACvF;AASA,SAAgB,eAEd,OACA,OAAyB,CAAC,GAE1B,UAAoE,CAAC,GACrD;CAChB,MAAM,EAAE,SAAS,YAAY,UAC3B,OAAO,YAAY,WAAW,EAAE,SAAS,QAAQ,IAAI;CACvD,MAAM,EAAE,IAAI,MAAM,MAAM,eAAe;CACvC,MAAM,aAAa,SAAS;CAE5B,OAAO;EACL,WAAW,aAAa,aAAa;EACrC,SAAS,KAAK,mBAAmB;EACjC,WAAW,aAAa,KAAA,IAAY;EACpC,WAAW,KAAK,MAAM,IAAI,KAAK,UAAU,CAAC,CAAC,QAAQ,IAAI,GAAI;EAC3D,gBAAgBC,6BAAAA,aAAa,IAAI;EACjC,YAAY,YAAY,KAAK,eAAe,KAAA;EAC5C,aAAa,KAAK;EAClB,WAAW,KAAK;EAChB,kBAAkB,YAAY,YAAY,MAAM,YAAY,WAAW,MAAM,KAAA;EAC7E,UAAU,YAAY,OAAO,IAAI;EACjC,YAAY,aAAa,KAAA,IAAY,cAAc,KAAK;CAC1D;AACF;;AAGA,SAAS,QAAW,OAAa;CAC/B,OAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AACzC;;;;;;AAOA,eAAsB,WACpB,OACA,OAEA,QACA,OAAyB,CAAC,GAC1B,UAAuC,CAAC,GACC;CACzC,MAAM,EAAE,SAAS,YAAY,OAAO,cAAc,4BAA4B,SAAS;CAEvF,MAAM,aAAa,OAChB,QACE,UAAW,aAAa,MAAM,SAAS,eAAgB,CAACC,qCAAAA,eAAe,SAAS,MAAM,IAAI,CAC7F,CAAC,CACA,KAAK,UAAU,eAAe,OAAO,MAAM;EAAE;EAAS;CAAU,CAAC,CAAC,CAAC,CAEnE,QAAQ,UAAU,MAAM,cAAc,cAAc,MAAM,cAAc;CAC3E,IAAI,WAAW,WAAW,GAAG,OAAO,CAAC;CAErC,MAAM,YAA4C,CAAC;CACnD,KAAK,MAAM,UAAA,GAASC,cAAAA,MAAAA,CAAM,YAAY,sBAAsB,GAAG;EAC7D,MAAM,OAAO,QAAQ;GAAE,MAAM;GAAO;GAA2B;EAAa,CAAC;EAC7E,IAAI;GACF,MAAM,WAAW,OAAA,GAAMC,cAAAA,MAAAA,CAAM,GAAG,SAAS,GAAG,MAAM,UAAU;IAC1D,QAAQ;IACR,SAAS;KACP,gBAAgB;KAChB,QAAQ;KACR,eAAe,UAAU;IAC3B;IACA,MAAM,KAAK,UAAU,IAAI;GAC3B,CAAC;GACD,IAAI,SAAS,IAAI;IACf,MAAM,SAAU,MAAM,SAAS,KAAK;IAIpC,IAAI,OAAO,OAAO,SAAS,QACzB,QAAQ,KACN,yDAAyD,KAAK,UAAU,OAAO,MAAM,OAAO,GAC9F;IAEF,UAAU,KAAK,MAAM;IACrB;GACF;GACA,MAAM,EAAE,WAAW;GACnB,MAAM,UAAU,MAAM,SAAS,KAAK;GACpC,QAAQ,MAAM,gDAAgD,OAAO,UAAU,SAAS;EAC1F,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,QAAQ,MAAM,uDAAuD,SAAS;EAChF;CACF;CACA,OAAO;AACT"}
+{"version":3,"file":"microsoft-conversions-api.cjs","names":["createHash","microsoftMsclkid","formatMsclkid","mapUETEvent","pageLocation","IGNORED_EVENTS","chunk","fetch"],"sources":["../../src/server/microsoft-conversions-api.ts"],"sourcesContent":["/**\n * Microsoft Advertising Conversions API (CAPI) sender — the server-side counterpart of the UET\n * tag, in the same shape as the other senders here: a pure per-event builder, a never-throws\n * `sendEvents`, the token in a header and never in a URL or a log line.\n *\n * Microsoft's recommended deployment is hybrid: keep the UET JavaScript on the page and send the\n * same conversions here too, deduplicated by (`tagId`, `eventName`, `eventId`). Both channels in\n * this SDK are fed from the same `track()` call — the browser sends the internal name as the UET\n * action with the event id as `event_id`, and this builder sends the same name as `eventName`\n * with the same id — so the pair agrees by construction.\n *\n * The token comes from the UET tag's \"Use Conversions API\" setup step, or from the Campaign\n * Management API's `UetTagAuthKey/Query`. Access is provisioned per customer account: an account\n * whose tag setup has no \"Use Conversions API\" option has to ask Microsoft Advertising support.\n *\n * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration\n */\nimport { createHash } from 'node:crypto';\nimport { chunk, fetch } from '@shware/utils';\nimport { formatMsclkid } from '../click-id/index';\nimport { IGNORED_EVENTS } from '../third-parties/ignored-events';\nimport type { TrackEvent, UserProvidedData } from '../track/types';\nimport { mapUETEvent } from '../track/uetq';\nimport { microsoftMsclkid } from './click-ids';\nimport { pageLocation } from './page-location';\n\nconst ENDPOINT = 'https://capi.uet.microsoft.com/v1';\n\n/** The API's hard limit per request. */\nconst MAX_EVENTS_PER_REQUEST = 1000;\n\nconst SHA256 = /^[a-f0-9]{64}$/;\n\nconst sha256 = (value: string) => createHash('sha256').update(value).digest('hex');\n\n/**\n * Microsoft's email normalization: trim, drop the dots and any `+alias` from the user part —\n * for EVERY domain, unlike Google's gmail-only rule — lowercase, SHA-256. A value that is\n * already a SHA-256 hex digest passes through.\n * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration#hashed-identifiers\n */\nexport function normalizeEmail(input: string): string {\n  const email = input.trim().toLowerCase();\n  const at = email.lastIndexOf('@');\n  if (at === -1) return email;\n  const user = email.slice(0, at).replace(/\\./g, '').split('+', 1)[0] ?? '';\n  return `${user}@${email.slice(at + 1)}`;\n}\n\nfunction hashEmail(input: string | undefined): string | undefined {\n  const value = input?.trim().toLowerCase();\n  if (!value) return undefined;\n  return SHA256.test(value) ? value : sha256(normalizeEmail(value));\n}\n\n/**\n * Phones are E.164 by the schema (`+` then 11–15 digits, the range bat.js validates too); the\n * separators bat.js tolerates are stripped, and anything else is dropped rather than guessed —\n * a number with no country code hashed under an assumed one can never match.\n */\nfunction hashPhone(input: string | undefined): string | undefined {\n  const value = input?.trim().toLowerCase();\n  if (!value) return undefined;\n  if (SHA256.test(value)) return value;\n  const phone = value.replace(/[-() \\t]/g, '');\n  return /^\\+\\d{11,15}$/.test(phone) ? sha256(phone) : undefined;\n}\n\nexport interface MicrosoftUserData {\n  /** Microsoft click id, as a dashed UUID. */\n  msclkid?: string;\n  /** SHA-256 of the normalized email. */\n  em?: string;\n  /** SHA-256 of the E.164 phone number. */\n  ph?: string;\n  /** The SDK visitor id — what the client-side ID Sync pixel (`sendUETIdSync`) sends as `VID`. */\n  anonymousId?: string;\n  /** SHA-256 of the signed-in user id — what `sendUETIdSync` sends as `UID`. */\n  externalId?: string;\n  clientUserAgent?: string;\n  clientIpAddress?: string;\n  idfa?: string;\n  gaid?: string;\n}\n\nexport interface MicrosoftItem {\n  id?: string;\n  name?: string;\n  price?: number;\n  quantity?: number;\n}\n\nexport interface MicrosoftCustomData {\n  eventCategory?: string;\n  eventLabel?: string;\n  eventValue?: number;\n  searchTerm?: string;\n  transactionId?: string;\n  value?: number;\n  currency?: string;\n  items?: MicrosoftItem[];\n  itemIds?: string[];\n  pageType?: string;\n  ecommTotalValue?: number;\n  ecommCategory?: string;\n}\n\n/** One entry of the `data` array POSTed to `/v1/{tagId}/events`. */\nexport interface MicrosoftEvent {\n  eventType: 'custom' | 'pageLoad';\n  eventId: string;\n  /** The UET action; absent on `pageLoad` events. */\n  eventName?: string;\n  /** UNIX seconds, UTC; the API rejects anything older than 7 days. */\n  eventTime: number;\n  eventSourceUrl?: string;\n  /** Links a `custom` event to its `pageLoad` event; a v4 UUID (the SDK's `page_load_id` tag). */\n  pageLoadId?: string;\n  referrerUrl?: string;\n  pageTitle?: string;\n  /** `G` granted, `D` denied. Absent means granted. */\n  adStorageConsent?: 'G' | 'D';\n  userData: MicrosoftUserData;\n  customData?: MicrosoftCustomData;\n}\n\nexport interface MicrosoftConversionsOptions {\n  /**\n   * EEA/UK/CH consent for the whole batch. `denied` events are accepted but used for nothing —\n   * no attribution, no audiences. Absent means granted, which is also the API's default.\n   */\n  consent?: 'granted' | 'denied';\n  /**\n   * Also send `page_view` events, as CAPI `pageLoad` events, and link every custom event to the\n   * page load it happened on (`pageLoadId`, from the `page_load_id` tag). Off by default because\n   * the UET JavaScript already reports every page load and the two would double-count\n   * destination-URL goals; turn it on for a CAPI-only site with no tag on the page. Off, no\n   * `pageLoadId` is sent either: it would point at a page load Microsoft only saw from the tag,\n   * under the tag's own id.\n   *\n   * Not yet modelled: the revenue-only custom event a `pageLoad` needs for a destination goal\n   * with variable revenue.\n   */\n  pageLoads?: boolean;\n  /** Identifies a third-party sender in Microsoft's monitoring; leave unset for a first-party build. */\n  dataProvider?: string;\n  /**\n   * Process the valid events of a batch and report the invalid ones, instead of the API's default\n   * all-or-nothing rejection. On by default — one malformed event should cost itself, not the\n   * batch it travelled with.\n   */\n  continueOnValidationError?: boolean;\n}\n\nexport interface MicrosoftValidationDetail {\n  index?: number;\n  propertyName?: string;\n  attemptedValue?: unknown;\n  errorMessage?: string;\n  errorCode?: string;\n  isWarning?: boolean;\n}\n\nexport interface MicrosoftConversionsResponse {\n  eventsReceived?: number;\n  error?: { code?: string; message?: string; details?: MicrosoftValidationDetail[] };\n}\n\nfunction getUserData(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData\n): MicrosoftUserData {\n  const { tags, platform, visitor_id } = event;\n  const email = Array.isArray(data.email) ? data.email[0] : data.email;\n  const phone = Array.isArray(data.phone_number) ? data.phone_number[0] : data.phone_number;\n  const msclkid = microsoftMsclkid(tags);\n\n  return {\n    msclkid: msclkid ? formatMsclkid(msclkid) : undefined,\n    em: hashEmail(email),\n    ph: hashPhone(phone),\n    // Microsoft requires this to equal the `VID` of the client-side ID Sync pixel; both sides use\n    // the SDK visitor id, which every event carries and the client can always read.\n    anonymousId: visitor_id || undefined,\n    // Microsoft asks for an anonymized id and never a real one. SHA-256, the same digest\n    // `sendUETIdSync` applies client-side, so `externalId` and the pixel's `UID` agree too.\n    externalId: data.user_id ? sha256(data.user_id) : undefined,\n    clientUserAgent: data.user_agent,\n    clientIpAddress:\n      typeof tags.ip_address === 'string' && tags.ip_address ? tags.ip_address : data.ip_address,\n    idfa: platform === 'ios' ? tags.advertising_id : undefined,\n    gaid: platform === 'android' ? tags.advertising_id : undefined,\n  };\n}\n\n// oxlint-disable-next-line @typescript-eslint/no-explicit-any\nfunction getCustomData(event: TrackEvent<any>): MicrosoftCustomData | undefined {\n  const [, params] = mapUETEvent(event.name, event.properties);\n  const customData: MicrosoftCustomData = {\n    eventCategory: params.event_category,\n    eventLabel: params.event_label,\n    eventValue: params.event_value,\n    searchTerm: params.search_term,\n    transactionId: params.transaction_id,\n    value: params.revenue_value,\n    currency: params.currency,\n    items: params.items?.map(({ id, name, price, quantity }) => ({ id, name, price, quantity })),\n    itemIds: Array.isArray(params.ecomm_prodid)\n      ? params.ecomm_prodid\n      : params.ecomm_prodid\n        ? [params.ecomm_prodid]\n        : undefined,\n    pageType: params.ecomm_pagetype,\n    ecommTotalValue: params.ecomm_totalvalue,\n    ecommCategory: params.ecomm_category,\n  };\n  return Object.values(customData).some((value) => value !== undefined) ? customData : undefined;\n}\n\n/**\n * Build one CAPI event. `page_view` becomes a `pageLoad` event (the caller decides whether to\n * send those, see `MicrosoftConversionsOptions.pageLoads`); everything else is a `custom` event\n * named after the track event, which is also the UET action the browser sent.\n */\nexport type MicrosoftEventOptions = Pick<MicrosoftConversionsOptions, 'consent' | 'pageLoads'>;\n\nexport function getServerEvent(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData = {},\n  /** Options, or — the 8.3.0 signature, still accepted — the bare consent value. */\n  options: MicrosoftEventOptions | MicrosoftEventOptions['consent'] = {}\n): MicrosoftEvent {\n  const { consent, pageLoads = false } =\n    typeof options === 'string' ? { consent: options } : options;\n  const { id, name, tags, created_at } = event;\n  const isPageLoad = name === 'page_view';\n\n  return {\n    eventType: isPageLoad ? 'pageLoad' : 'custom',\n    eventId: tags.idempotency_key ?? id,\n    eventName: isPageLoad ? undefined : name,\n    eventTime: Math.round(new Date(created_at).getTime() / 1000),\n    eventSourceUrl: pageLocation(tags),\n    pageLoadId: pageLoads ? tags.page_load_id : undefined,\n    referrerUrl: tags.page_referrer,\n    pageTitle: tags.page_title,\n    adStorageConsent: consent === 'granted' ? 'G' : consent === 'denied' ? 'D' : undefined,\n    userData: getUserData(event, data),\n    customData: isPageLoad ? undefined : getCustomData(event),\n  };\n}\n\n/** Strip undefined fields so the wire payload carries only what was set. */\nfunction compact<T>(value: T): T {\n  return JSON.parse(JSON.stringify(value)) as T;\n}\n\n/** `eventTime` must be \"within the last 7 days\"; a minute's margin for the trip. */\nconst MAX_EVENT_AGE_MS = 7 * 24 * 60 * 60 * 1000 - 60 * 1000;\n\n/**\n * Send events to `POST /v1/{tagId}/events`. Batches above the API's 1,000-event limit are split\n * into consecutive requests; one response is returned per request made. Never throws: an HTTP\n * or network failure is logged (without the token) and yields no response for that request.\n */\nexport async function sendEvents(\n  token: string,\n  tagId: string | number,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  events: TrackEvent<any>[],\n  data: UserProvidedData = {},\n  options: MicrosoftConversionsOptions = {}\n): Promise<MicrosoftConversionsResponse[]> {\n  const { consent, pageLoads = false, dataProvider, continueOnValidationError = true } = options;\n\n  const capiEvents = events\n    .filter(\n      (event) => (pageLoads && event.name === 'page_view') || !IGNORED_EVENTS.includes(event.name)\n    )\n    .filter((event) => Date.now() - Date.parse(event.created_at) <= MAX_EVENT_AGE_MS)\n    .map((event) => getServerEvent(event, data, { consent, pageLoads }))\n    // A pageLoad without a URL is rejected by the API, and a page-less event has nothing to say.\n    .filter((event) => event.eventType !== 'pageLoad' || event.eventSourceUrl);\n  if (capiEvents.length === 0) return [];\n\n  const responses: MicrosoftConversionsResponse[] = [];\n  for (const batch of chunk(capiEvents, MAX_EVENTS_PER_REQUEST)) {\n    const body = compact({ data: batch, continueOnValidationError, dataProvider });\n    try {\n      const response = await fetch(`${ENDPOINT}/${tagId}/events`, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          Accept: 'application/json',\n          Authorization: `Bearer ${token}`,\n        },\n        body: JSON.stringify(body),\n      });\n      if (response.ok) {\n        const result = (await response.json()) as MicrosoftConversionsResponse;\n        // A 200 can still carry field-level warnings (the field was removed) and, with\n        // `continueOnValidationError`, skipped events. Surface them: silent partial data loss is\n        // the one failure mode the caller cannot see from the status code.\n        if (result.error?.details?.length) {\n          console.warn(\n            `Microsoft conversion accepted with validation issues: ${JSON.stringify(result.error.details)}`\n          );\n        }\n        responses.push(result);\n        continue;\n      }\n      const { status } = response;\n      const message = await response.text();\n      console.error(`Failed to send Microsoft conversion, status: ${status}, body: ${message}`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      console.error(`Failed to send Microsoft conversion, network error: ${message}`);\n    }\n  }\n  return responses;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,MAAM,WAAW;;AAGjB,MAAM,yBAAyB;AAE/B,MAAM,SAAS;AAEf,MAAM,UAAU,WAAA,GAAkBA,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;;;;;;;AAQjF,SAAgB,eAAe,OAAuB;CACpD,MAAM,QAAQ,MAAM,KAAK,CAAC,CAAC,YAAY;CACvC,MAAM,KAAK,MAAM,YAAY,GAAG;CAChC,IAAI,OAAO,IAAI,OAAO;CAEtB,OAAO,GADM,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,GACxD,GAAG,MAAM,MAAM,KAAK,CAAC;AACtC;AAEA,SAAS,UAAU,OAA+C;CAChE,MAAM,QAAQ,OAAO,KAAK,CAAC,CAAC,YAAY;CACxC,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,OAAO,OAAO,KAAK,KAAK,IAAI,QAAQ,OAAO,eAAe,KAAK,CAAC;AAClE;;;;;;AAOA,SAAS,UAAU,OAA+C;CAChE,MAAM,QAAQ,OAAO,KAAK,CAAC,CAAC,YAAY;CACxC,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,IAAI,OAAO,KAAK,KAAK,GAAG,OAAO;CAC/B,MAAM,QAAQ,MAAM,QAAQ,aAAa,EAAE;CAC3C,OAAO,gBAAgB,KAAK,KAAK,IAAI,OAAO,KAAK,IAAI,KAAA;AACvD;AAsGA,SAAS,YAEP,OACA,MACmB;CACnB,MAAM,EAAE,MAAM,UAAU,eAAe;CACvC,MAAM,QAAQ,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,MAAM,KAAK,KAAK;CAC/D,MAAM,QAAQ,MAAM,QAAQ,KAAK,YAAY,IAAI,KAAK,aAAa,KAAK,KAAK;CAC7E,MAAM,UAAUC,yBAAAA,iBAAiB,IAAI;CAErC,OAAO;EACL,SAAS,UAAUC,uBAAAA,cAAc,OAAO,IAAI,KAAA;EAC5C,IAAI,UAAU,KAAK;EACnB,IAAI,UAAU,KAAK;EAGnB,aAAa,cAAc,KAAA;EAG3B,YAAY,KAAK,UAAU,OAAO,KAAK,OAAO,IAAI,KAAA;EAClD,iBAAiB,KAAK;EACtB,iBACE,OAAO,KAAK,eAAe,YAAY,KAAK,aAAa,KAAK,aAAa,KAAK;EAClF,MAAM,aAAa,QAAQ,KAAK,iBAAiB,KAAA;EACjD,MAAM,aAAa,YAAY,KAAK,iBAAiB,KAAA;CACvD;AACF;AAGA,SAAS,cAAc,OAAyD;CAC9E,MAAM,GAAG,UAAUC,mBAAAA,YAAY,MAAM,MAAM,MAAM,UAAU;CAC3D,MAAM,aAAkC;EACtC,eAAe,OAAO;EACtB,YAAY,OAAO;EACnB,YAAY,OAAO;EACnB,YAAY,OAAO;EACnB,eAAe,OAAO;EACtB,OAAO,OAAO;EACd,UAAU,OAAO;EACjB,OAAO,OAAO,OAAO,KAAK,EAAE,IAAI,MAAM,OAAO,gBAAgB;GAAE;GAAI;GAAM;GAAO;EAAS,EAAE;EAC3F,SAAS,MAAM,QAAQ,OAAO,YAAY,IACtC,OAAO,eACP,OAAO,eACL,CAAC,OAAO,YAAY,IACpB,KAAA;EACN,UAAU,OAAO;EACjB,iBAAiB,OAAO;EACxB,eAAe,OAAO;CACxB;CACA,OAAO,OAAO,OAAO,UAAU,CAAC,CAAC,MAAM,UAAU,UAAU,KAAA,CAAS,IAAI,aAAa,KAAA;AACvF;AASA,SAAgB,eAEd,OACA,OAAyB,CAAC,GAE1B,UAAoE,CAAC,GACrD;CAChB,MAAM,EAAE,SAAS,YAAY,UAC3B,OAAO,YAAY,WAAW,EAAE,SAAS,QAAQ,IAAI;CACvD,MAAM,EAAE,IAAI,MAAM,MAAM,eAAe;CACvC,MAAM,aAAa,SAAS;CAE5B,OAAO;EACL,WAAW,aAAa,aAAa;EACrC,SAAS,KAAK,mBAAmB;EACjC,WAAW,aAAa,KAAA,IAAY;EACpC,WAAW,KAAK,MAAM,IAAI,KAAK,UAAU,CAAC,CAAC,QAAQ,IAAI,GAAI;EAC3D,gBAAgBC,6BAAAA,aAAa,IAAI;EACjC,YAAY,YAAY,KAAK,eAAe,KAAA;EAC5C,aAAa,KAAK;EAClB,WAAW,KAAK;EAChB,kBAAkB,YAAY,YAAY,MAAM,YAAY,WAAW,MAAM,KAAA;EAC7E,UAAU,YAAY,OAAO,IAAI;EACjC,YAAY,aAAa,KAAA,IAAY,cAAc,KAAK;CAC1D;AACF;;AAGA,SAAS,QAAW,OAAa;CAC/B,OAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AACzC;;AAGA,MAAM,mBAAmB;;;;;;AAOzB,eAAsB,WACpB,OACA,OAEA,QACA,OAAyB,CAAC,GAC1B,UAAuC,CAAC,GACC;CACzC,MAAM,EAAE,SAAS,YAAY,OAAO,cAAc,4BAA4B,SAAS;CAEvF,MAAM,aAAa,OAChB,QACE,UAAW,aAAa,MAAM,SAAS,eAAgB,CAACC,qCAAAA,eAAe,SAAS,MAAM,IAAI,CAC7F,CAAC,CACA,QAAQ,UAAU,KAAK,IAAI,IAAI,KAAK,MAAM,MAAM,UAAU,KAAK,gBAAgB,CAAC,CAChF,KAAK,UAAU,eAAe,OAAO,MAAM;EAAE;EAAS;CAAU,CAAC,CAAC,CAAC,CAEnE,QAAQ,UAAU,MAAM,cAAc,cAAc,MAAM,cAAc;CAC3E,IAAI,WAAW,WAAW,GAAG,OAAO,CAAC;CAErC,MAAM,YAA4C,CAAC;CACnD,KAAK,MAAM,UAAA,GAASC,cAAAA,MAAAA,CAAM,YAAY,sBAAsB,GAAG;EAC7D,MAAM,OAAO,QAAQ;GAAE,MAAM;GAAO;GAA2B;EAAa,CAAC;EAC7E,IAAI;GACF,MAAM,WAAW,OAAA,GAAMC,cAAAA,MAAAA,CAAM,GAAG,SAAS,GAAG,MAAM,UAAU;IAC1D,QAAQ;IACR,SAAS;KACP,gBAAgB;KAChB,QAAQ;KACR,eAAe,UAAU;IAC3B;IACA,MAAM,KAAK,UAAU,IAAI;GAC3B,CAAC;GACD,IAAI,SAAS,IAAI;IACf,MAAM,SAAU,MAAM,SAAS,KAAK;IAIpC,IAAI,OAAO,OAAO,SAAS,QACzB,QAAQ,KACN,yDAAyD,KAAK,UAAU,OAAO,MAAM,OAAO,GAC9F;IAEF,UAAU,KAAK,MAAM;IACrB;GACF;GACA,MAAM,EAAE,WAAW;GACnB,MAAM,UAAU,MAAM,SAAS,KAAK;GACpC,QAAQ,MAAM,gDAAgD,OAAO,UAAU,SAAS;EAC1F,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,QAAQ,MAAM,uDAAuD,SAAS;EAChF;CACF;CACA,OAAO;AACT"}

package/dist/server/microsoft-conversions-api.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"microsoft-conversions-api.d.cts","names":[],"sources":["../../src/server/microsoft-conversions-api.ts"],"mappings":";;;;;;;;wBAyCgB,eAAe;iBA2Bd;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ;EACR;EACA;EACA;EACA;;;iBAIe;EACf;EACA;;EAEA;;EAEA;EACA;;EAEA;EACA;EACA;;EAEA;EACA,UAAU;EACV,aAAa;;iBAGE;;;;;EAKf;;;;;;;;;;;;EAYA;;EAEA;;;;;;EAMA;;iBAGe;EACf;EACA;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;IAAU;IAAe;IAAkB,UAAU;;;;;;;;YA4D3C,wBAAwB,KAAK;wBAEzB,eAEd,OAAO,iBACP,OAAM,kBAEN;;AAAA,UAAS,wBAAwB,mCAChC;;;;;;wBA+BmB,WACpB,eACA,wBAEA,QAAQ,mBACR,OAAM,kBACN,UAAS,8BACR,QAAQ"}
+{"version":3,"file":"microsoft-conversions-api.d.cts","names":[],"sources":["../../src/server/microsoft-conversions-api.ts"],"mappings":";;;;;;;;wBAyCgB,eAAe;iBA2Bd;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ;EACR;EACA;EACA;EACA;;;iBAIe;EACf;EACA;;EAEA;;EAEA;EACA;;EAEA;EACA;EACA;;EAEA;EACA,UAAU;EACV,aAAa;;iBAGE;;;;;EAKf;;;;;;;;;;;;EAYA;;EAEA;;;;;;EAMA;;iBAGe;EACf;EACA;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;IAAU;IAAe;IAAkB,UAAU;;;;;;;;YA4D3C,wBAAwB,KAAK;wBAEzB,eAEd,OAAO,iBACP,OAAM,kBAEN;;AAAA,UAAS,wBAAwB,mCAChC;;;;;;wBAkCmB,WACpB,eACA,wBAEA,QAAQ,mBACR,OAAM,kBACN,UAAS,8BACR,QAAQ"}

package/dist/server/microsoft-conversions-api.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"microsoft-conversions-api.d.mts","names":[],"sources":["../../src/server/microsoft-conversions-api.ts"],"mappings":";;;;;;;;wBAyCgB,eAAe;iBA2Bd;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ;EACR;EACA;EACA;EACA;;;iBAIe;EACf;EACA;;EAEA;;EAEA;EACA;;EAEA;EACA;EACA;;EAEA;EACA,UAAU;EACV,aAAa;;iBAGE;;;;;EAKf;;;;;;;;;;;;EAYA;;EAEA;;;;;;EAMA;;iBAGe;EACf;EACA;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;IAAU;IAAe;IAAkB,UAAU;;;;;;;;YA4D3C,wBAAwB,KAAK;wBAEzB,eAEd,OAAO,iBACP,OAAM,kBAEN;;AAAA,UAAS,wBAAwB,mCAChC;;;;;;wBA+BmB,WACpB,eACA,wBAEA,QAAQ,mBACR,OAAM,kBACN,UAAS,8BACR,QAAQ"}
+{"version":3,"file":"microsoft-conversions-api.d.mts","names":[],"sources":["../../src/server/microsoft-conversions-api.ts"],"mappings":";;;;;;;;wBAyCgB,eAAe;iBA2Bd;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ;EACR;EACA;EACA;EACA;;;iBAIe;EACf;EACA;;EAEA;;EAEA;EACA;;EAEA;EACA;EACA;;EAEA;EACA,UAAU;EACV,aAAa;;iBAGE;;;;;EAKf;;;;;;;;;;;;EAYA;;EAEA;;;;;;EAMA;;iBAGe;EACf;EACA;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;IAAU;IAAe;IAAkB,UAAU;;;;;;;;YA4D3C,wBAAwB,KAAK;wBAEzB,eAEd,OAAO,iBACP,OAAM,kBAEN;;AAAA,UAAS,wBAAwB,mCAChC;;;;;;wBAkCmB,WACpB,eACA,wBAEA,QAAQ,mBACR,OAAM,kBACN,UAAS,8BACR,QAAQ"}

package/dist/server/microsoft-conversions-api.mjs

@@ -119,6 +119,8 @@ function getServerEvent(event, data = {}, options = {}) {
 function compact(value) {
 	return JSON.parse(JSON.stringify(value));
 }
+/** `eventTime` must be "within the last 7 days"; a minute's margin for the trip. */
+const MAX_EVENT_AGE_MS = 60474e4;
 /**
 * Send events to `POST /v1/{tagId}/events`. Batches above the API's 1,000-event limit are split
 * into consecutive requests; one response is returned per request made. Never throws: an HTTP
@@ -126,7 +128,7 @@ function compact(value) {
 */
 async function sendEvents(token, tagId, events, data = {}, options = {}) {
 	const { consent, pageLoads = false, dataProvider, continueOnValidationError = true } = options;
-	const capiEvents = events.filter((event) => pageLoads && event.name === "page_view" || !IGNORED_EVENTS.includes(event.name)).map((event) => getServerEvent(event, data, {
+	const capiEvents = events.filter((event) => pageLoads && event.name === "page_view" || !IGNORED_EVENTS.includes(event.name)).filter((event) => Date.now() - Date.parse(event.created_at) <= MAX_EVENT_AGE_MS).map((event) => getServerEvent(event, data, {
 		consent,
 		pageLoads
 	})).filter((event) => event.eventType !== "pageLoad" || event.eventSourceUrl);

package/dist/server/microsoft-conversions-api.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"microsoft-conversions-api.mjs","names":[],"sources":["../../src/server/microsoft-conversions-api.ts"],"sourcesContent":["/**\n * Microsoft Advertising Conversions API (CAPI) sender — the server-side counterpart of the UET\n * tag, in the same shape as the other senders here: a pure per-event builder, a never-throws\n * `sendEvents`, the token in a header and never in a URL or a log line.\n *\n * Microsoft's recommended deployment is hybrid: keep the UET JavaScript on the page and send the\n * same conversions here too, deduplicated by (`tagId`, `eventName`, `eventId`). Both channels in\n * this SDK are fed from the same `track()` call — the browser sends the internal name as the UET\n * action with the event id as `event_id`, and this builder sends the same name as `eventName`\n * with the same id — so the pair agrees by construction.\n *\n * The token comes from the UET tag's \"Use Conversions API\" setup step, or from the Campaign\n * Management API's `UetTagAuthKey/Query`. Access is provisioned per customer account: an account\n * whose tag setup has no \"Use Conversions API\" option has to ask Microsoft Advertising support.\n *\n * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration\n */\nimport { createHash } from 'node:crypto';\nimport { chunk, fetch } from '@shware/utils';\nimport { formatMsclkid } from '../click-id/index';\nimport { IGNORED_EVENTS } from '../third-parties/ignored-events';\nimport type { TrackEvent, UserProvidedData } from '../track/types';\nimport { mapUETEvent } from '../track/uetq';\nimport { microsoftMsclkid } from './click-ids';\nimport { pageLocation } from './page-location';\n\nconst ENDPOINT = 'https://capi.uet.microsoft.com/v1';\n\n/** The API's hard limit per request. */\nconst MAX_EVENTS_PER_REQUEST = 1000;\n\nconst SHA256 = /^[a-f0-9]{64}$/;\n\nconst sha256 = (value: string) => createHash('sha256').update(value).digest('hex');\n\n/**\n * Microsoft's email normalization: trim, drop the dots and any `+alias` from the user part —\n * for EVERY domain, unlike Google's gmail-only rule — lowercase, SHA-256. A value that is\n * already a SHA-256 hex digest passes through.\n * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration#hashed-identifiers\n */\nexport function normalizeEmail(input: string): string {\n  const email = input.trim().toLowerCase();\n  const at = email.lastIndexOf('@');\n  if (at === -1) return email;\n  const user = email.slice(0, at).replace(/\\./g, '').split('+', 1)[0] ?? '';\n  return `${user}@${email.slice(at + 1)}`;\n}\n\nfunction hashEmail(input: string | undefined): string | undefined {\n  const value = input?.trim().toLowerCase();\n  if (!value) return undefined;\n  return SHA256.test(value) ? value : sha256(normalizeEmail(value));\n}\n\n/**\n * Phones are E.164 by the schema (`+` then 11–15 digits, the range bat.js validates too); the\n * separators bat.js tolerates are stripped, and anything else is dropped rather than guessed —\n * a number with no country code hashed under an assumed one can never match.\n */\nfunction hashPhone(input: string | undefined): string | undefined {\n  const value = input?.trim().toLowerCase();\n  if (!value) return undefined;\n  if (SHA256.test(value)) return value;\n  const phone = value.replace(/[-() \\t]/g, '');\n  return /^\\+\\d{11,15}$/.test(phone) ? sha256(phone) : undefined;\n}\n\nexport interface MicrosoftUserData {\n  /** Microsoft click id, as a dashed UUID. */\n  msclkid?: string;\n  /** SHA-256 of the normalized email. */\n  em?: string;\n  /** SHA-256 of the E.164 phone number. */\n  ph?: string;\n  /** The SDK visitor id — what the client-side ID Sync pixel (`sendUETIdSync`) sends as `VID`. */\n  anonymousId?: string;\n  /** SHA-256 of the signed-in user id — what `sendUETIdSync` sends as `UID`. */\n  externalId?: string;\n  clientUserAgent?: string;\n  clientIpAddress?: string;\n  idfa?: string;\n  gaid?: string;\n}\n\nexport interface MicrosoftItem {\n  id?: string;\n  name?: string;\n  price?: number;\n  quantity?: number;\n}\n\nexport interface MicrosoftCustomData {\n  eventCategory?: string;\n  eventLabel?: string;\n  eventValue?: number;\n  searchTerm?: string;\n  transactionId?: string;\n  value?: number;\n  currency?: string;\n  items?: MicrosoftItem[];\n  itemIds?: string[];\n  pageType?: string;\n  ecommTotalValue?: number;\n  ecommCategory?: string;\n}\n\n/** One entry of the `data` array POSTed to `/v1/{tagId}/events`. */\nexport interface MicrosoftEvent {\n  eventType: 'custom' | 'pageLoad';\n  eventId: string;\n  /** The UET action; absent on `pageLoad` events. */\n  eventName?: string;\n  /** UNIX seconds, UTC; the API rejects anything older than 7 days. */\n  eventTime: number;\n  eventSourceUrl?: string;\n  /** Links a `custom` event to its `pageLoad` event; a v4 UUID (the SDK's `page_load_id` tag). */\n  pageLoadId?: string;\n  referrerUrl?: string;\n  pageTitle?: string;\n  /** `G` granted, `D` denied. Absent means granted. */\n  adStorageConsent?: 'G' | 'D';\n  userData: MicrosoftUserData;\n  customData?: MicrosoftCustomData;\n}\n\nexport interface MicrosoftConversionsOptions {\n  /**\n   * EEA/UK/CH consent for the whole batch. `denied` events are accepted but used for nothing —\n   * no attribution, no audiences. Absent means granted, which is also the API's default.\n   */\n  consent?: 'granted' | 'denied';\n  /**\n   * Also send `page_view` events, as CAPI `pageLoad` events, and link every custom event to the\n   * page load it happened on (`pageLoadId`, from the `page_load_id` tag). Off by default because\n   * the UET JavaScript already reports every page load and the two would double-count\n   * destination-URL goals; turn it on for a CAPI-only site with no tag on the page. Off, no\n   * `pageLoadId` is sent either: it would point at a page load Microsoft only saw from the tag,\n   * under the tag's own id.\n   *\n   * Not yet modelled: the revenue-only custom event a `pageLoad` needs for a destination goal\n   * with variable revenue.\n   */\n  pageLoads?: boolean;\n  /** Identifies a third-party sender in Microsoft's monitoring; leave unset for a first-party build. */\n  dataProvider?: string;\n  /**\n   * Process the valid events of a batch and report the invalid ones, instead of the API's default\n   * all-or-nothing rejection. On by default — one malformed event should cost itself, not the\n   * batch it travelled with.\n   */\n  continueOnValidationError?: boolean;\n}\n\nexport interface MicrosoftValidationDetail {\n  index?: number;\n  propertyName?: string;\n  attemptedValue?: unknown;\n  errorMessage?: string;\n  errorCode?: string;\n  isWarning?: boolean;\n}\n\nexport interface MicrosoftConversionsResponse {\n  eventsReceived?: number;\n  error?: { code?: string; message?: string; details?: MicrosoftValidationDetail[] };\n}\n\nfunction getUserData(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData\n): MicrosoftUserData {\n  const { tags, platform, visitor_id } = event;\n  const email = Array.isArray(data.email) ? data.email[0] : data.email;\n  const phone = Array.isArray(data.phone_number) ? data.phone_number[0] : data.phone_number;\n  const msclkid = microsoftMsclkid(tags);\n\n  return {\n    msclkid: msclkid ? formatMsclkid(msclkid) : undefined,\n    em: hashEmail(email),\n    ph: hashPhone(phone),\n    // Microsoft requires this to equal the `VID` of the client-side ID Sync pixel; both sides use\n    // the SDK visitor id, which every event carries and the client can always read.\n    anonymousId: visitor_id || undefined,\n    // Microsoft asks for an anonymized id and never a real one. SHA-256, the same digest\n    // `sendUETIdSync` applies client-side, so `externalId` and the pixel's `UID` agree too.\n    externalId: data.user_id ? sha256(data.user_id) : undefined,\n    clientUserAgent: data.user_agent,\n    clientIpAddress:\n      typeof tags.ip_address === 'string' && tags.ip_address ? tags.ip_address : data.ip_address,\n    idfa: platform === 'ios' ? tags.advertising_id : undefined,\n    gaid: platform === 'android' ? tags.advertising_id : undefined,\n  };\n}\n\n// oxlint-disable-next-line @typescript-eslint/no-explicit-any\nfunction getCustomData(event: TrackEvent<any>): MicrosoftCustomData | undefined {\n  const [, params] = mapUETEvent(event.name, event.properties);\n  const customData: MicrosoftCustomData = {\n    eventCategory: params.event_category,\n    eventLabel: params.event_label,\n    eventValue: params.event_value,\n    searchTerm: params.search_term,\n    transactionId: params.transaction_id,\n    value: params.revenue_value,\n    currency: params.currency,\n    items: params.items?.map(({ id, name, price, quantity }) => ({ id, name, price, quantity })),\n    itemIds: Array.isArray(params.ecomm_prodid)\n      ? params.ecomm_prodid\n      : params.ecomm_prodid\n        ? [params.ecomm_prodid]\n        : undefined,\n    pageType: params.ecomm_pagetype,\n    ecommTotalValue: params.ecomm_totalvalue,\n    ecommCategory: params.ecomm_category,\n  };\n  return Object.values(customData).some((value) => value !== undefined) ? customData : undefined;\n}\n\n/**\n * Build one CAPI event. `page_view` becomes a `pageLoad` event (the caller decides whether to\n * send those, see `MicrosoftConversionsOptions.pageLoads`); everything else is a `custom` event\n * named after the track event, which is also the UET action the browser sent.\n */\nexport type MicrosoftEventOptions = Pick<MicrosoftConversionsOptions, 'consent' | 'pageLoads'>;\n\nexport function getServerEvent(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData = {},\n  /** Options, or — the 8.3.0 signature, still accepted — the bare consent value. */\n  options: MicrosoftEventOptions | MicrosoftEventOptions['consent'] = {}\n): MicrosoftEvent {\n  const { consent, pageLoads = false } =\n    typeof options === 'string' ? { consent: options } : options;\n  const { id, name, tags, created_at } = event;\n  const isPageLoad = name === 'page_view';\n\n  return {\n    eventType: isPageLoad ? 'pageLoad' : 'custom',\n    eventId: tags.idempotency_key ?? id,\n    eventName: isPageLoad ? undefined : name,\n    eventTime: Math.round(new Date(created_at).getTime() / 1000),\n    eventSourceUrl: pageLocation(tags),\n    pageLoadId: pageLoads ? tags.page_load_id : undefined,\n    referrerUrl: tags.page_referrer,\n    pageTitle: tags.page_title,\n    adStorageConsent: consent === 'granted' ? 'G' : consent === 'denied' ? 'D' : undefined,\n    userData: getUserData(event, data),\n    customData: isPageLoad ? undefined : getCustomData(event),\n  };\n}\n\n/** Strip undefined fields so the wire payload carries only what was set. */\nfunction compact<T>(value: T): T {\n  return JSON.parse(JSON.stringify(value)) as T;\n}\n\n/**\n * Send events to `POST /v1/{tagId}/events`. Batches above the API's 1,000-event limit are split\n * into consecutive requests; one response is returned per request made. Never throws: an HTTP\n * or network failure is logged (without the token) and yields no response for that request.\n */\nexport async function sendEvents(\n  token: string,\n  tagId: string | number,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  events: TrackEvent<any>[],\n  data: UserProvidedData = {},\n  options: MicrosoftConversionsOptions = {}\n): Promise<MicrosoftConversionsResponse[]> {\n  const { consent, pageLoads = false, dataProvider, continueOnValidationError = true } = options;\n\n  const capiEvents = events\n    .filter(\n      (event) => (pageLoads && event.name === 'page_view') || !IGNORED_EVENTS.includes(event.name)\n    )\n    .map((event) => getServerEvent(event, data, { consent, pageLoads }))\n    // A pageLoad without a URL is rejected by the API, and a page-less event has nothing to say.\n    .filter((event) => event.eventType !== 'pageLoad' || event.eventSourceUrl);\n  if (capiEvents.length === 0) return [];\n\n  const responses: MicrosoftConversionsResponse[] = [];\n  for (const batch of chunk(capiEvents, MAX_EVENTS_PER_REQUEST)) {\n    const body = compact({ data: batch, continueOnValidationError, dataProvider });\n    try {\n      const response = await fetch(`${ENDPOINT}/${tagId}/events`, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          Accept: 'application/json',\n          Authorization: `Bearer ${token}`,\n        },\n        body: JSON.stringify(body),\n      });\n      if (response.ok) {\n        const result = (await response.json()) as MicrosoftConversionsResponse;\n        // A 200 can still carry field-level warnings (the field was removed) and, with\n        // `continueOnValidationError`, skipped events. Surface them: silent partial data loss is\n        // the one failure mode the caller cannot see from the status code.\n        if (result.error?.details?.length) {\n          console.warn(\n            `Microsoft conversion accepted with validation issues: ${JSON.stringify(result.error.details)}`\n          );\n        }\n        responses.push(result);\n        continue;\n      }\n      const { status } = response;\n      const message = await response.text();\n      console.error(`Failed to send Microsoft conversion, status: ${status}, body: ${message}`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      console.error(`Failed to send Microsoft conversion, network error: ${message}`);\n    }\n  }\n  return responses;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,MAAM,WAAW;;AAGjB,MAAM,yBAAyB;AAE/B,MAAM,SAAS;AAEf,MAAM,UAAU,UAAkB,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;;;;;;;AAQjF,SAAgB,eAAe,OAAuB;CACpD,MAAM,QAAQ,MAAM,KAAK,CAAC,CAAC,YAAY;CACvC,MAAM,KAAK,MAAM,YAAY,GAAG;CAChC,IAAI,OAAO,IAAI,OAAO;CAEtB,OAAO,GADM,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,GACxD,GAAG,MAAM,MAAM,KAAK,CAAC;AACtC;AAEA,SAAS,UAAU,OAA+C;CAChE,MAAM,QAAQ,OAAO,KAAK,CAAC,CAAC,YAAY;CACxC,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,OAAO,OAAO,KAAK,KAAK,IAAI,QAAQ,OAAO,eAAe,KAAK,CAAC;AAClE;;;;;;AAOA,SAAS,UAAU,OAA+C;CAChE,MAAM,QAAQ,OAAO,KAAK,CAAC,CAAC,YAAY;CACxC,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,IAAI,OAAO,KAAK,KAAK,GAAG,OAAO;CAC/B,MAAM,QAAQ,MAAM,QAAQ,aAAa,EAAE;CAC3C,OAAO,gBAAgB,KAAK,KAAK,IAAI,OAAO,KAAK,IAAI,KAAA;AACvD;AAsGA,SAAS,YAEP,OACA,MACmB;CACnB,MAAM,EAAE,MAAM,UAAU,eAAe;CACvC,MAAM,QAAQ,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,MAAM,KAAK,KAAK;CAC/D,MAAM,QAAQ,MAAM,QAAQ,KAAK,YAAY,IAAI,KAAK,aAAa,KAAK,KAAK;CAC7E,MAAM,UAAU,iBAAiB,IAAI;CAErC,OAAO;EACL,SAAS,UAAU,cAAc,OAAO,IAAI,KAAA;EAC5C,IAAI,UAAU,KAAK;EACnB,IAAI,UAAU,KAAK;EAGnB,aAAa,cAAc,KAAA;EAG3B,YAAY,KAAK,UAAU,OAAO,KAAK,OAAO,IAAI,KAAA;EAClD,iBAAiB,KAAK;EACtB,iBACE,OAAO,KAAK,eAAe,YAAY,KAAK,aAAa,KAAK,aAAa,KAAK;EAClF,MAAM,aAAa,QAAQ,KAAK,iBAAiB,KAAA;EACjD,MAAM,aAAa,YAAY,KAAK,iBAAiB,KAAA;CACvD;AACF;AAGA,SAAS,cAAc,OAAyD;CAC9E,MAAM,GAAG,UAAU,YAAY,MAAM,MAAM,MAAM,UAAU;CAC3D,MAAM,aAAkC;EACtC,eAAe,OAAO;EACtB,YAAY,OAAO;EACnB,YAAY,OAAO;EACnB,YAAY,OAAO;EACnB,eAAe,OAAO;EACtB,OAAO,OAAO;EACd,UAAU,OAAO;EACjB,OAAO,OAAO,OAAO,KAAK,EAAE,IAAI,MAAM,OAAO,gBAAgB;GAAE;GAAI;GAAM;GAAO;EAAS,EAAE;EAC3F,SAAS,MAAM,QAAQ,OAAO,YAAY,IACtC,OAAO,eACP,OAAO,eACL,CAAC,OAAO,YAAY,IACpB,KAAA;EACN,UAAU,OAAO;EACjB,iBAAiB,OAAO;EACxB,eAAe,OAAO;CACxB;CACA,OAAO,OAAO,OAAO,UAAU,CAAC,CAAC,MAAM,UAAU,UAAU,KAAA,CAAS,IAAI,aAAa,KAAA;AACvF;AASA,SAAgB,eAEd,OACA,OAAyB,CAAC,GAE1B,UAAoE,CAAC,GACrD;CAChB,MAAM,EAAE,SAAS,YAAY,UAC3B,OAAO,YAAY,WAAW,EAAE,SAAS,QAAQ,IAAI;CACvD,MAAM,EAAE,IAAI,MAAM,MAAM,eAAe;CACvC,MAAM,aAAa,SAAS;CAE5B,OAAO;EACL,WAAW,aAAa,aAAa;EACrC,SAAS,KAAK,mBAAmB;EACjC,WAAW,aAAa,KAAA,IAAY;EACpC,WAAW,KAAK,MAAM,IAAI,KAAK,UAAU,CAAC,CAAC,QAAQ,IAAI,GAAI;EAC3D,gBAAgB,aAAa,IAAI;EACjC,YAAY,YAAY,KAAK,eAAe,KAAA;EAC5C,aAAa,KAAK;EAClB,WAAW,KAAK;EAChB,kBAAkB,YAAY,YAAY,MAAM,YAAY,WAAW,MAAM,KAAA;EAC7E,UAAU,YAAY,OAAO,IAAI;EACjC,YAAY,aAAa,KAAA,IAAY,cAAc,KAAK;CAC1D;AACF;;AAGA,SAAS,QAAW,OAAa;CAC/B,OAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AACzC;;;;;;AAOA,eAAsB,WACpB,OACA,OAEA,QACA,OAAyB,CAAC,GAC1B,UAAuC,CAAC,GACC;CACzC,MAAM,EAAE,SAAS,YAAY,OAAO,cAAc,4BAA4B,SAAS;CAEvF,MAAM,aAAa,OAChB,QACE,UAAW,aAAa,MAAM,SAAS,eAAgB,CAAC,eAAe,SAAS,MAAM,IAAI,CAC7F,CAAC,CACA,KAAK,UAAU,eAAe,OAAO,MAAM;EAAE;EAAS;CAAU,CAAC,CAAC,CAAC,CAEnE,QAAQ,UAAU,MAAM,cAAc,cAAc,MAAM,cAAc;CAC3E,IAAI,WAAW,WAAW,GAAG,OAAO,CAAC;CAErC,MAAM,YAA4C,CAAC;CACnD,KAAK,MAAM,SAAS,MAAM,YAAY,sBAAsB,GAAG;EAC7D,MAAM,OAAO,QAAQ;GAAE,MAAM;GAAO;GAA2B;EAAa,CAAC;EAC7E,IAAI;GACF,MAAM,WAAW,MAAM,MAAM,GAAG,SAAS,GAAG,MAAM,UAAU;IAC1D,QAAQ;IACR,SAAS;KACP,gBAAgB;KAChB,QAAQ;KACR,eAAe,UAAU;IAC3B;IACA,MAAM,KAAK,UAAU,IAAI;GAC3B,CAAC;GACD,IAAI,SAAS,IAAI;IACf,MAAM,SAAU,MAAM,SAAS,KAAK;IAIpC,IAAI,OAAO,OAAO,SAAS,QACzB,QAAQ,KACN,yDAAyD,KAAK,UAAU,OAAO,MAAM,OAAO,GAC9F;IAEF,UAAU,KAAK,MAAM;IACrB;GACF;GACA,MAAM,EAAE,WAAW;GACnB,MAAM,UAAU,MAAM,SAAS,KAAK;GACpC,QAAQ,MAAM,gDAAgD,OAAO,UAAU,SAAS;EAC1F,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,QAAQ,MAAM,uDAAuD,SAAS;EAChF;CACF;CACA,OAAO;AACT"}
+{"version":3,"file":"microsoft-conversions-api.mjs","names":[],"sources":["../../src/server/microsoft-conversions-api.ts"],"sourcesContent":["/**\n * Microsoft Advertising Conversions API (CAPI) sender — the server-side counterpart of the UET\n * tag, in the same shape as the other senders here: a pure per-event builder, a never-throws\n * `sendEvents`, the token in a header and never in a URL or a log line.\n *\n * Microsoft's recommended deployment is hybrid: keep the UET JavaScript on the page and send the\n * same conversions here too, deduplicated by (`tagId`, `eventName`, `eventId`). Both channels in\n * this SDK are fed from the same `track()` call — the browser sends the internal name as the UET\n * action with the event id as `event_id`, and this builder sends the same name as `eventName`\n * with the same id — so the pair agrees by construction.\n *\n * The token comes from the UET tag's \"Use Conversions API\" setup step, or from the Campaign\n * Management API's `UetTagAuthKey/Query`. Access is provisioned per customer account: an account\n * whose tag setup has no \"Use Conversions API\" option has to ask Microsoft Advertising support.\n *\n * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration\n */\nimport { createHash } from 'node:crypto';\nimport { chunk, fetch } from '@shware/utils';\nimport { formatMsclkid } from '../click-id/index';\nimport { IGNORED_EVENTS } from '../third-parties/ignored-events';\nimport type { TrackEvent, UserProvidedData } from '../track/types';\nimport { mapUETEvent } from '../track/uetq';\nimport { microsoftMsclkid } from './click-ids';\nimport { pageLocation } from './page-location';\n\nconst ENDPOINT = 'https://capi.uet.microsoft.com/v1';\n\n/** The API's hard limit per request. */\nconst MAX_EVENTS_PER_REQUEST = 1000;\n\nconst SHA256 = /^[a-f0-9]{64}$/;\n\nconst sha256 = (value: string) => createHash('sha256').update(value).digest('hex');\n\n/**\n * Microsoft's email normalization: trim, drop the dots and any `+alias` from the user part —\n * for EVERY domain, unlike Google's gmail-only rule — lowercase, SHA-256. A value that is\n * already a SHA-256 hex digest passes through.\n * https://learn.microsoft.com/en-us/advertising/guides/uet-conversion-api-integration#hashed-identifiers\n */\nexport function normalizeEmail(input: string): string {\n  const email = input.trim().toLowerCase();\n  const at = email.lastIndexOf('@');\n  if (at === -1) return email;\n  const user = email.slice(0, at).replace(/\\./g, '').split('+', 1)[0] ?? '';\n  return `${user}@${email.slice(at + 1)}`;\n}\n\nfunction hashEmail(input: string | undefined): string | undefined {\n  const value = input?.trim().toLowerCase();\n  if (!value) return undefined;\n  return SHA256.test(value) ? value : sha256(normalizeEmail(value));\n}\n\n/**\n * Phones are E.164 by the schema (`+` then 11–15 digits, the range bat.js validates too); the\n * separators bat.js tolerates are stripped, and anything else is dropped rather than guessed —\n * a number with no country code hashed under an assumed one can never match.\n */\nfunction hashPhone(input: string | undefined): string | undefined {\n  const value = input?.trim().toLowerCase();\n  if (!value) return undefined;\n  if (SHA256.test(value)) return value;\n  const phone = value.replace(/[-() \\t]/g, '');\n  return /^\\+\\d{11,15}$/.test(phone) ? sha256(phone) : undefined;\n}\n\nexport interface MicrosoftUserData {\n  /** Microsoft click id, as a dashed UUID. */\n  msclkid?: string;\n  /** SHA-256 of the normalized email. */\n  em?: string;\n  /** SHA-256 of the E.164 phone number. */\n  ph?: string;\n  /** The SDK visitor id — what the client-side ID Sync pixel (`sendUETIdSync`) sends as `VID`. */\n  anonymousId?: string;\n  /** SHA-256 of the signed-in user id — what `sendUETIdSync` sends as `UID`. */\n  externalId?: string;\n  clientUserAgent?: string;\n  clientIpAddress?: string;\n  idfa?: string;\n  gaid?: string;\n}\n\nexport interface MicrosoftItem {\n  id?: string;\n  name?: string;\n  price?: number;\n  quantity?: number;\n}\n\nexport interface MicrosoftCustomData {\n  eventCategory?: string;\n  eventLabel?: string;\n  eventValue?: number;\n  searchTerm?: string;\n  transactionId?: string;\n  value?: number;\n  currency?: string;\n  items?: MicrosoftItem[];\n  itemIds?: string[];\n  pageType?: string;\n  ecommTotalValue?: number;\n  ecommCategory?: string;\n}\n\n/** One entry of the `data` array POSTed to `/v1/{tagId}/events`. */\nexport interface MicrosoftEvent {\n  eventType: 'custom' | 'pageLoad';\n  eventId: string;\n  /** The UET action; absent on `pageLoad` events. */\n  eventName?: string;\n  /** UNIX seconds, UTC; the API rejects anything older than 7 days. */\n  eventTime: number;\n  eventSourceUrl?: string;\n  /** Links a `custom` event to its `pageLoad` event; a v4 UUID (the SDK's `page_load_id` tag). */\n  pageLoadId?: string;\n  referrerUrl?: string;\n  pageTitle?: string;\n  /** `G` granted, `D` denied. Absent means granted. */\n  adStorageConsent?: 'G' | 'D';\n  userData: MicrosoftUserData;\n  customData?: MicrosoftCustomData;\n}\n\nexport interface MicrosoftConversionsOptions {\n  /**\n   * EEA/UK/CH consent for the whole batch. `denied` events are accepted but used for nothing —\n   * no attribution, no audiences. Absent means granted, which is also the API's default.\n   */\n  consent?: 'granted' | 'denied';\n  /**\n   * Also send `page_view` events, as CAPI `pageLoad` events, and link every custom event to the\n   * page load it happened on (`pageLoadId`, from the `page_load_id` tag). Off by default because\n   * the UET JavaScript already reports every page load and the two would double-count\n   * destination-URL goals; turn it on for a CAPI-only site with no tag on the page. Off, no\n   * `pageLoadId` is sent either: it would point at a page load Microsoft only saw from the tag,\n   * under the tag's own id.\n   *\n   * Not yet modelled: the revenue-only custom event a `pageLoad` needs for a destination goal\n   * with variable revenue.\n   */\n  pageLoads?: boolean;\n  /** Identifies a third-party sender in Microsoft's monitoring; leave unset for a first-party build. */\n  dataProvider?: string;\n  /**\n   * Process the valid events of a batch and report the invalid ones, instead of the API's default\n   * all-or-nothing rejection. On by default — one malformed event should cost itself, not the\n   * batch it travelled with.\n   */\n  continueOnValidationError?: boolean;\n}\n\nexport interface MicrosoftValidationDetail {\n  index?: number;\n  propertyName?: string;\n  attemptedValue?: unknown;\n  errorMessage?: string;\n  errorCode?: string;\n  isWarning?: boolean;\n}\n\nexport interface MicrosoftConversionsResponse {\n  eventsReceived?: number;\n  error?: { code?: string; message?: string; details?: MicrosoftValidationDetail[] };\n}\n\nfunction getUserData(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData\n): MicrosoftUserData {\n  const { tags, platform, visitor_id } = event;\n  const email = Array.isArray(data.email) ? data.email[0] : data.email;\n  const phone = Array.isArray(data.phone_number) ? data.phone_number[0] : data.phone_number;\n  const msclkid = microsoftMsclkid(tags);\n\n  return {\n    msclkid: msclkid ? formatMsclkid(msclkid) : undefined,\n    em: hashEmail(email),\n    ph: hashPhone(phone),\n    // Microsoft requires this to equal the `VID` of the client-side ID Sync pixel; both sides use\n    // the SDK visitor id, which every event carries and the client can always read.\n    anonymousId: visitor_id || undefined,\n    // Microsoft asks for an anonymized id and never a real one. SHA-256, the same digest\n    // `sendUETIdSync` applies client-side, so `externalId` and the pixel's `UID` agree too.\n    externalId: data.user_id ? sha256(data.user_id) : undefined,\n    clientUserAgent: data.user_agent,\n    clientIpAddress:\n      typeof tags.ip_address === 'string' && tags.ip_address ? tags.ip_address : data.ip_address,\n    idfa: platform === 'ios' ? tags.advertising_id : undefined,\n    gaid: platform === 'android' ? tags.advertising_id : undefined,\n  };\n}\n\n// oxlint-disable-next-line @typescript-eslint/no-explicit-any\nfunction getCustomData(event: TrackEvent<any>): MicrosoftCustomData | undefined {\n  const [, params] = mapUETEvent(event.name, event.properties);\n  const customData: MicrosoftCustomData = {\n    eventCategory: params.event_category,\n    eventLabel: params.event_label,\n    eventValue: params.event_value,\n    searchTerm: params.search_term,\n    transactionId: params.transaction_id,\n    value: params.revenue_value,\n    currency: params.currency,\n    items: params.items?.map(({ id, name, price, quantity }) => ({ id, name, price, quantity })),\n    itemIds: Array.isArray(params.ecomm_prodid)\n      ? params.ecomm_prodid\n      : params.ecomm_prodid\n        ? [params.ecomm_prodid]\n        : undefined,\n    pageType: params.ecomm_pagetype,\n    ecommTotalValue: params.ecomm_totalvalue,\n    ecommCategory: params.ecomm_category,\n  };\n  return Object.values(customData).some((value) => value !== undefined) ? customData : undefined;\n}\n\n/**\n * Build one CAPI event. `page_view` becomes a `pageLoad` event (the caller decides whether to\n * send those, see `MicrosoftConversionsOptions.pageLoads`); everything else is a `custom` event\n * named after the track event, which is also the UET action the browser sent.\n */\nexport type MicrosoftEventOptions = Pick<MicrosoftConversionsOptions, 'consent' | 'pageLoads'>;\n\nexport function getServerEvent(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData = {},\n  /** Options, or — the 8.3.0 signature, still accepted — the bare consent value. */\n  options: MicrosoftEventOptions | MicrosoftEventOptions['consent'] = {}\n): MicrosoftEvent {\n  const { consent, pageLoads = false } =\n    typeof options === 'string' ? { consent: options } : options;\n  const { id, name, tags, created_at } = event;\n  const isPageLoad = name === 'page_view';\n\n  return {\n    eventType: isPageLoad ? 'pageLoad' : 'custom',\n    eventId: tags.idempotency_key ?? id,\n    eventName: isPageLoad ? undefined : name,\n    eventTime: Math.round(new Date(created_at).getTime() / 1000),\n    eventSourceUrl: pageLocation(tags),\n    pageLoadId: pageLoads ? tags.page_load_id : undefined,\n    referrerUrl: tags.page_referrer,\n    pageTitle: tags.page_title,\n    adStorageConsent: consent === 'granted' ? 'G' : consent === 'denied' ? 'D' : undefined,\n    userData: getUserData(event, data),\n    customData: isPageLoad ? undefined : getCustomData(event),\n  };\n}\n\n/** Strip undefined fields so the wire payload carries only what was set. */\nfunction compact<T>(value: T): T {\n  return JSON.parse(JSON.stringify(value)) as T;\n}\n\n/** `eventTime` must be \"within the last 7 days\"; a minute's margin for the trip. */\nconst MAX_EVENT_AGE_MS = 7 * 24 * 60 * 60 * 1000 - 60 * 1000;\n\n/**\n * Send events to `POST /v1/{tagId}/events`. Batches above the API's 1,000-event limit are split\n * into consecutive requests; one response is returned per request made. Never throws: an HTTP\n * or network failure is logged (without the token) and yields no response for that request.\n */\nexport async function sendEvents(\n  token: string,\n  tagId: string | number,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  events: TrackEvent<any>[],\n  data: UserProvidedData = {},\n  options: MicrosoftConversionsOptions = {}\n): Promise<MicrosoftConversionsResponse[]> {\n  const { consent, pageLoads = false, dataProvider, continueOnValidationError = true } = options;\n\n  const capiEvents = events\n    .filter(\n      (event) => (pageLoads && event.name === 'page_view') || !IGNORED_EVENTS.includes(event.name)\n    )\n    .filter((event) => Date.now() - Date.parse(event.created_at) <= MAX_EVENT_AGE_MS)\n    .map((event) => getServerEvent(event, data, { consent, pageLoads }))\n    // A pageLoad without a URL is rejected by the API, and a page-less event has nothing to say.\n    .filter((event) => event.eventType !== 'pageLoad' || event.eventSourceUrl);\n  if (capiEvents.length === 0) return [];\n\n  const responses: MicrosoftConversionsResponse[] = [];\n  for (const batch of chunk(capiEvents, MAX_EVENTS_PER_REQUEST)) {\n    const body = compact({ data: batch, continueOnValidationError, dataProvider });\n    try {\n      const response = await fetch(`${ENDPOINT}/${tagId}/events`, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          Accept: 'application/json',\n          Authorization: `Bearer ${token}`,\n        },\n        body: JSON.stringify(body),\n      });\n      if (response.ok) {\n        const result = (await response.json()) as MicrosoftConversionsResponse;\n        // A 200 can still carry field-level warnings (the field was removed) and, with\n        // `continueOnValidationError`, skipped events. Surface them: silent partial data loss is\n        // the one failure mode the caller cannot see from the status code.\n        if (result.error?.details?.length) {\n          console.warn(\n            `Microsoft conversion accepted with validation issues: ${JSON.stringify(result.error.details)}`\n          );\n        }\n        responses.push(result);\n        continue;\n      }\n      const { status } = response;\n      const message = await response.text();\n      console.error(`Failed to send Microsoft conversion, status: ${status}, body: ${message}`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      console.error(`Failed to send Microsoft conversion, network error: ${message}`);\n    }\n  }\n  return responses;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,MAAM,WAAW;;AAGjB,MAAM,yBAAyB;AAE/B,MAAM,SAAS;AAEf,MAAM,UAAU,UAAkB,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;;;;;;;AAQjF,SAAgB,eAAe,OAAuB;CACpD,MAAM,QAAQ,MAAM,KAAK,CAAC,CAAC,YAAY;CACvC,MAAM,KAAK,MAAM,YAAY,GAAG;CAChC,IAAI,OAAO,IAAI,OAAO;CAEtB,OAAO,GADM,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,GACxD,GAAG,MAAM,MAAM,KAAK,CAAC;AACtC;AAEA,SAAS,UAAU,OAA+C;CAChE,MAAM,QAAQ,OAAO,KAAK,CAAC,CAAC,YAAY;CACxC,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,OAAO,OAAO,KAAK,KAAK,IAAI,QAAQ,OAAO,eAAe,KAAK,CAAC;AAClE;;;;;;AAOA,SAAS,UAAU,OAA+C;CAChE,MAAM,QAAQ,OAAO,KAAK,CAAC,CAAC,YAAY;CACxC,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,IAAI,OAAO,KAAK,KAAK,GAAG,OAAO;CAC/B,MAAM,QAAQ,MAAM,QAAQ,aAAa,EAAE;CAC3C,OAAO,gBAAgB,KAAK,KAAK,IAAI,OAAO,KAAK,IAAI,KAAA;AACvD;AAsGA,SAAS,YAEP,OACA,MACmB;CACnB,MAAM,EAAE,MAAM,UAAU,eAAe;CACvC,MAAM,QAAQ,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,MAAM,KAAK,KAAK;CAC/D,MAAM,QAAQ,MAAM,QAAQ,KAAK,YAAY,IAAI,KAAK,aAAa,KAAK,KAAK;CAC7E,MAAM,UAAU,iBAAiB,IAAI;CAErC,OAAO;EACL,SAAS,UAAU,cAAc,OAAO,IAAI,KAAA;EAC5C,IAAI,UAAU,KAAK;EACnB,IAAI,UAAU,KAAK;EAGnB,aAAa,cAAc,KAAA;EAG3B,YAAY,KAAK,UAAU,OAAO,KAAK,OAAO,IAAI,KAAA;EAClD,iBAAiB,KAAK;EACtB,iBACE,OAAO,KAAK,eAAe,YAAY,KAAK,aAAa,KAAK,aAAa,KAAK;EAClF,MAAM,aAAa,QAAQ,KAAK,iBAAiB,KAAA;EACjD,MAAM,aAAa,YAAY,KAAK,iBAAiB,KAAA;CACvD;AACF;AAGA,SAAS,cAAc,OAAyD;CAC9E,MAAM,GAAG,UAAU,YAAY,MAAM,MAAM,MAAM,UAAU;CAC3D,MAAM,aAAkC;EACtC,eAAe,OAAO;EACtB,YAAY,OAAO;EACnB,YAAY,OAAO;EACnB,YAAY,OAAO;EACnB,eAAe,OAAO;EACtB,OAAO,OAAO;EACd,UAAU,OAAO;EACjB,OAAO,OAAO,OAAO,KAAK,EAAE,IAAI,MAAM,OAAO,gBAAgB;GAAE;GAAI;GAAM;GAAO;EAAS,EAAE;EAC3F,SAAS,MAAM,QAAQ,OAAO,YAAY,IACtC,OAAO,eACP,OAAO,eACL,CAAC,OAAO,YAAY,IACpB,KAAA;EACN,UAAU,OAAO;EACjB,iBAAiB,OAAO;EACxB,eAAe,OAAO;CACxB;CACA,OAAO,OAAO,OAAO,UAAU,CAAC,CAAC,MAAM,UAAU,UAAU,KAAA,CAAS,IAAI,aAAa,KAAA;AACvF;AASA,SAAgB,eAEd,OACA,OAAyB,CAAC,GAE1B,UAAoE,CAAC,GACrD;CAChB,MAAM,EAAE,SAAS,YAAY,UAC3B,OAAO,YAAY,WAAW,EAAE,SAAS,QAAQ,IAAI;CACvD,MAAM,EAAE,IAAI,MAAM,MAAM,eAAe;CACvC,MAAM,aAAa,SAAS;CAE5B,OAAO;EACL,WAAW,aAAa,aAAa;EACrC,SAAS,KAAK,mBAAmB;EACjC,WAAW,aAAa,KAAA,IAAY;EACpC,WAAW,KAAK,MAAM,IAAI,KAAK,UAAU,CAAC,CAAC,QAAQ,IAAI,GAAI;EAC3D,gBAAgB,aAAa,IAAI;EACjC,YAAY,YAAY,KAAK,eAAe,KAAA;EAC5C,aAAa,KAAK;EAClB,WAAW,KAAK;EAChB,kBAAkB,YAAY,YAAY,MAAM,YAAY,WAAW,MAAM,KAAA;EAC7E,UAAU,YAAY,OAAO,IAAI;EACjC,YAAY,aAAa,KAAA,IAAY,cAAc,KAAK;CAC1D;AACF;;AAGA,SAAS,QAAW,OAAa;CAC/B,OAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AACzC;;AAGA,MAAM,mBAAmB;;;;;;AAOzB,eAAsB,WACpB,OACA,OAEA,QACA,OAAyB,CAAC,GAC1B,UAAuC,CAAC,GACC;CACzC,MAAM,EAAE,SAAS,YAAY,OAAO,cAAc,4BAA4B,SAAS;CAEvF,MAAM,aAAa,OAChB,QACE,UAAW,aAAa,MAAM,SAAS,eAAgB,CAAC,eAAe,SAAS,MAAM,IAAI,CAC7F,CAAC,CACA,QAAQ,UAAU,KAAK,IAAI,IAAI,KAAK,MAAM,MAAM,UAAU,KAAK,gBAAgB,CAAC,CAChF,KAAK,UAAU,eAAe,OAAO,MAAM;EAAE;EAAS;CAAU,CAAC,CAAC,CAAC,CAEnE,QAAQ,UAAU,MAAM,cAAc,cAAc,MAAM,cAAc;CAC3E,IAAI,WAAW,WAAW,GAAG,OAAO,CAAC;CAErC,MAAM,YAA4C,CAAC;CACnD,KAAK,MAAM,SAAS,MAAM,YAAY,sBAAsB,GAAG;EAC7D,MAAM,OAAO,QAAQ;GAAE,MAAM;GAAO;GAA2B;EAAa,CAAC;EAC7E,IAAI;GACF,MAAM,WAAW,MAAM,MAAM,GAAG,SAAS,GAAG,MAAM,UAAU;IAC1D,QAAQ;IACR,SAAS;KACP,gBAAgB;KAChB,QAAQ;KACR,eAAe,UAAU;IAC3B;IACA,MAAM,KAAK,UAAU,IAAI;GAC3B,CAAC;GACD,IAAI,SAAS,IAAI;IACf,MAAM,SAAU,MAAM,SAAS,KAAK;IAIpC,IAAI,OAAO,OAAO,SAAS,QACzB,QAAQ,KACN,yDAAyD,KAAK,UAAU,OAAO,MAAM,OAAO,GAC9F;IAEF,UAAU,KAAK,MAAM;IACrB;GACF;GACA,MAAM,EAAE,WAAW;GACnB,MAAM,UAAU,MAAM,SAAS,KAAK;GACpC,QAAQ,MAAM,gDAAgD,OAAO,UAAU,SAAS;EAC1F,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,QAAQ,MAAM,uDAAuD,SAAS;EAChF;CACF;CACA,OAAO;AACT"}

package/dist/server/openai-conversions-api.cjs

@@ -33,23 +33,16 @@ function values(items) {
 	const result = [...new Set(items.filter((item) => !!item))];
 	return result.length > 0 ? result : void 0;
 }
-function normalizePhone(phone) {
-	const digits = phone.replace(/[\s().-]/g, "").replace(/^\+/, "").replace(/^0+/, "");
-	return /^\d{8,15}$/.test(digits) ? digits : void 0;
-}
-function normalizeName(name) {
-	return name?.toLowerCase().replace(/[\s!-/:-@[-`{-~]/g, "") || void 0;
-}
 function getUser(event, data) {
 	const hashed = (items) => values(items)?.map(sha256);
 	const addresses = list(data.address);
 	const user = {
 		obref: event.tags.__obref,
 		emails_sha256: hashed(list(data.email).map((email) => email.trim().toLowerCase())),
-		phone_numbers_sha256: hashed(list(data.phone_number).map(normalizePhone)),
+		phone_numbers_sha256: hashed(list(data.phone_number).map(require_track_oaiq.normalizeOAIPhone)),
 		external_ids_sha256: hashed([data.user_id?.trim()]),
-		first_names_sha256: hashed(addresses.map((a) => normalizeName(a.first_name))),
-		last_names_sha256: hashed(addresses.map((a) => normalizeName(a.last_name))),
+		first_names_sha256: hashed(addresses.map((a) => require_track_oaiq.normalizeOAIName(a.first_name))),
+		last_names_sha256: hashed(addresses.map((a) => require_track_oaiq.normalizeOAIName(a.last_name))),
 		regions: values(addresses.map((a) => a.region?.trim())),
 		postal_codes: values(addresses.map((a) => a.postal_code?.trim())),
 		cities: values(addresses.map((a) => a.city?.trim())),
@@ -65,7 +58,7 @@ function getServerEvent(event, data, actionSource) {
 	return {
 		id: event.tags.idempotency_key ?? event.id,
 		type,
-		custom_event_name: type === "custom" ? event.name : void 0,
+		custom_event_name: type === "custom" ? require_track_oaiq.oaiCustomEventName(event.name) : void 0,
 		timestamp_ms: new Date(event.created_at).getTime(),
 		source_url: require_server_page_location.pageLocation(event.tags),
 		oppref: require_server_click_ids.openaiOppref(event.tags),
@@ -74,10 +67,18 @@ function getServerEvent(event, data, actionSource) {
 		data: eventData
 	};
 }
+/**
+* `timestamp_ms` "must be within the last 7 days and no more than 10 minutes in the future", or
+* the request fails; such an event is left out, with a minute's margin for the trip.
+*/
+const MAX_EVENT_AGE_MS = 60474e4;
 async function sendEvents(apiKey, pixelId, events, data = {}, validateOnly = false, actionSource) {
 	const dto = {
 		validate_only: validateOnly,
-		events: events.filter((event) => !require_third_parties_ignored_events.IGNORED_EVENTS.includes(event.name)).filter((event) => !require_track_oaiq.NON_AD_EVENTS.includes(event.name)).map((event) => getServerEvent(event, data, actionSource))
+		events: events.filter((event) => !require_third_parties_ignored_events.IGNORED_EVENTS.includes(event.name)).filter((event) => !require_track_oaiq.NON_AD_EVENTS.includes(event.name)).filter((event) => {
+			const age = Date.now() - Date.parse(event.created_at);
+			return age <= MAX_EVENT_AGE_MS && age >= -6e5;
+		}).map((event) => getServerEvent(event, data, actionSource)).filter((event) => event.type !== "custom" || event.custom_event_name !== void 0)
 	};
 	if (dto.events.length === 0) return;
 	try {

package/dist/server/openai-conversions-api.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"openai-conversions-api.cjs","names":["createHash","resolveActionSource","mapOAIEvent","pageLocation","openaiOppref","IGNORED_EVENTS","NON_AD_EVENTS","fetch"],"sources":["../../src/server/openai-conversions-api.ts"],"sourcesContent":["/**\n * OpenAI Conversions API\n * https://developers.openai.com/ads/conversions-api\n * https://developers.openai.com/ads/supported-events\n */\nimport { createHash } from 'node:crypto';\nimport { fetch } from '@shware/utils';\nimport { IGNORED_EVENTS } from '../third-parties/ignored-events';\nimport { type EventData, NON_AD_EVENTS, mapOAIEvent } from '../track/oaiq';\nimport type { Platform, TrackEvent, UserProvidedData } from '../track/types';\nimport { type EventActionSource, resolveActionSource } from './action-source';\nimport { openaiOppref } from './click-ids';\nimport { pageLocation } from './page-location';\n\nconst ENDPOINT = 'https://bzr.openai.com/v1/events';\n\ntype ActionSource =\n  | 'web'\n  | 'mobile_app'\n  | 'offline'\n  | 'physical_store'\n  | 'phone_call'\n  | 'email'\n  | 'other';\n\n/**\n * Conversion-matching fields, all optional. Identifiers are normalized, then sent as lowercase\n * 64-char SHA-256 hex strings; geographic values are raw. Of each list the API uses the first\n * three valid, unique values.\n * ref: https://developers.openai.com/ads/conversions-api#send-user-data\n */\nexport interface OpenAIUser {\n  /** The pixel's `__obref` cookie, unhashed; ties the server event to the pixel's browser. */\n  obref?: string;\n  emails_sha256?: string[];\n  /** 8–15 digits with the country code, no leading `+` or zeroes. */\n  phone_numbers_sha256?: string[];\n  external_ids_sha256?: string[];\n  first_names_sha256?: string[];\n  last_names_sha256?: string[];\n  regions?: string[];\n  postal_codes?: string[];\n  cities?: string[];\n  /** Two-letter ISO 3166-1 country codes (e.g. \"US\"). */\n  countries?: string[];\n  /** Android GAID only; IDFA is not supported. */\n  android_advertising_id?: string;\n  ip_address?: string;\n  user_agent?: string;\n}\n\nexport interface OpenAIEvent {\n  /** Unique event id; combined with `type` for deduplication against pixel events. */\n  id: string;\n  /** Standard event name or `custom`. */\n  type: string;\n  /** Required when `type` is `custom`. */\n  custom_event_name?: string;\n  /** Event timestamp in ms; must be within 7 days and no more than 10 minutes in the future. */\n  timestamp_ms: number;\n  /** Required for `action_source: \"web\"`. */\n  source_url?: string;\n  action_source?: ActionSource;\n  /** OpenAI-provided privacy-preserving identifier. */\n  oppref?: string;\n  /** When true, opts the event out of personalization. */\n  opt_out?: boolean;\n  user?: OpenAIUser;\n  data: EventData;\n}\n\nexport interface CreateOpenAIEventsDTO {\n  /** When true, validates the events without persisting them. */\n  validate_only?: boolean;\n  events: OpenAIEvent[];\n}\n\nfunction sha256(value: string): string {\n  return createHash('sha256').update(value).digest('hex');\n}\n\nfunction mapActionSource(\n  platform: Platform,\n  actionSource?: EventActionSource\n): ActionSource | undefined {\n  switch (resolveActionSource(platform, actionSource)) {\n    case 'web':\n      return 'web';\n    case 'app':\n      return 'mobile_app';\n    case 'offline':\n      return 'offline';\n    default:\n      return undefined;\n  }\n}\n\nfunction list<T>(field: T | T[] | undefined): T[] {\n  if (!field) return [];\n  return Array.isArray(field) ? field : [field];\n}\n\n/** The distinct non-empty values, or undefined when there are none. */\nfunction values(items: (string | undefined)[]): string[] | undefined {\n  const result = [...new Set(items.filter((item): item is string => !!item))];\n  return result.length > 0 ? result : undefined;\n}\n\nfunction normalizePhone(phone: string): string | undefined {\n  const digits = phone\n    .replace(/[\\s().-]/g, '')\n    .replace(/^\\+/, '')\n    .replace(/^0+/, '');\n  return /^\\d{8,15}$/.test(digits) ? digits : undefined;\n}\n\n// Lowercase, without whitespace or ASCII punctuation; other characters (accents) are kept.\nfunction normalizeName(name: string | undefined): string | undefined {\n  return name?.toLowerCase().replace(/[\\s!-/:-@[-`{-~]/g, '') || undefined;\n}\n\nfunction getUser(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData\n): OpenAIUser | undefined {\n  const hashed = (items: (string | undefined)[]) => values(items)?.map(sha256);\n  const addresses = list(data.address);\n\n  const user: OpenAIUser = {\n    obref: event.tags.__obref,\n    emails_sha256: hashed(list(data.email).map((email) => email.trim().toLowerCase())),\n    phone_numbers_sha256: hashed(list(data.phone_number).map(normalizePhone)),\n    external_ids_sha256: hashed([data.user_id?.trim()]),\n    first_names_sha256: hashed(addresses.map((a) => normalizeName(a.first_name))),\n    last_names_sha256: hashed(addresses.map((a) => normalizeName(a.last_name))),\n    regions: values(addresses.map((a) => a.region?.trim())),\n    postal_codes: values(addresses.map((a) => a.postal_code?.trim())),\n    cities: values(addresses.map((a) => a.city?.trim())),\n    countries: values(addresses.map((a) => a.country?.trim().toUpperCase())),\n    android_advertising_id:\n      event.platform === 'android' ? event.tags.advertising_id || undefined : undefined,\n    ip_address: data.ip_address,\n    user_agent: data.user_agent,\n  };\n\n  return Object.values(user).some((value) => value !== undefined) ? user : undefined;\n}\n\nexport function getServerEvent(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData,\n  actionSource?: EventActionSource\n): OpenAIEvent {\n  const { type, data: eventData } = mapOAIEvent(event.name, event.properties);\n\n  return {\n    id: event.tags.idempotency_key ?? event.id,\n    type,\n    // For custom events the original track name is the OpenAI custom_event_name; this matches\n    // the browser pixel so the two deduplicate. Standard events omit it.\n    custom_event_name: type === 'custom' ? event.name : undefined,\n    timestamp_ms: new Date(event.created_at).getTime(),\n    source_url: pageLocation(event.tags),\n    // The click id OpenAI appends to an ad's landing URL; what ties the conversion to the click.\n    oppref: openaiOppref(event.tags),\n    action_source: mapActionSource(event.platform, actionSource),\n    user: getUser(event, data),\n    data: eventData,\n  };\n}\n\nexport async function sendEvents(\n  apiKey: string,\n  pixelId: string,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  events: TrackEvent<any>[],\n  data: UserProvidedData = {},\n  validateOnly = false,\n  actionSource?: EventActionSource\n) {\n  const dto: CreateOpenAIEventsDTO = {\n    validate_only: validateOnly,\n    events: events\n      .filter((event) => !IGNORED_EVENTS.includes(event.name))\n      .filter((event) => !NON_AD_EVENTS.includes(event.name))\n      .map((event) => getServerEvent(event, data, actionSource)),\n  };\n\n  if (dto.events.length === 0) return;\n\n  try {\n    const response = await fetch(`${ENDPOINT}?pid=${pixelId}`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Accept: 'application/json',\n        Authorization: `Bearer ${apiKey}`,\n      },\n      body: JSON.stringify(dto),\n    });\n\n    if (response.ok) return;\n    const { status } = response;\n    const message = await response.text();\n    console.error(`Failed to send OpenAI conversion, status: ${status}, body: ${message}`);\n  } catch (error) {\n    console.error('Failed to send OpenAI conversion, network error:', error);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAcA,MAAM,WAAW;AA+DjB,SAAS,OAAO,OAAuB;CACrC,QAAA,GAAOA,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AACxD;AAEA,SAAS,gBACP,UACA,cAC0B;CAC1B,QAAQC,6BAAAA,oBAAoB,UAAU,YAAY,GAAlD;EACE,KAAK,OACH,OAAO;EACT,KAAK,OACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,SACE;CACJ;AACF;AAEA,SAAS,KAAQ,OAAiC;CAChD,IAAI,CAAC,OAAO,OAAO,CAAC;CACpB,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;AAC9C;;AAGA,SAAS,OAAO,OAAqD;CACnE,MAAM,SAAS,CAAC,GAAG,IAAI,IAAI,MAAM,QAAQ,SAAyB,CAAC,CAAC,IAAI,CAAC,CAAC;CAC1E,OAAO,OAAO,SAAS,IAAI,SAAS,KAAA;AACtC;AAEA,SAAS,eAAe,OAAmC;CACzD,MAAM,SAAS,MACZ,QAAQ,aAAa,EAAE,CAAC,CACxB,QAAQ,OAAO,EAAE,CAAC,CAClB,QAAQ,OAAO,EAAE;CACpB,OAAO,aAAa,KAAK,MAAM,IAAI,SAAS,KAAA;AAC9C;AAGA,SAAS,cAAc,MAA8C;CACnE,OAAO,MAAM,YAAY,CAAC,CAAC,QAAQ,qBAAqB,EAAE,KAAK,KAAA;AACjE;AAEA,SAAS,QAEP,OACA,MACwB;CACxB,MAAM,UAAU,UAAkC,OAAO,KAAK,CAAC,EAAE,IAAI,MAAM;CAC3E,MAAM,YAAY,KAAK,KAAK,OAAO;CAEnC,MAAM,OAAmB;EACvB,OAAO,MAAM,KAAK;EAClB,eAAe,OAAO,KAAK,KAAK,KAAK,CAAC,CAAC,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;EACjF,sBAAsB,OAAO,KAAK,KAAK,YAAY,CAAC,CAAC,IAAI,cAAc,CAAC;EACxE,qBAAqB,OAAO,CAAC,KAAK,SAAS,KAAK,CAAC,CAAC;EAClD,oBAAoB,OAAO,UAAU,KAAK,MAAM,cAAc,EAAE,UAAU,CAAC,CAAC;EAC5E,mBAAmB,OAAO,UAAU,KAAK,MAAM,cAAc,EAAE,SAAS,CAAC,CAAC;EAC1E,SAAS,OAAO,UAAU,KAAK,MAAM,EAAE,QAAQ,KAAK,CAAC,CAAC;EACtD,cAAc,OAAO,UAAU,KAAK,MAAM,EAAE,aAAa,KAAK,CAAC,CAAC;EAChE,QAAQ,OAAO,UAAU,KAAK,MAAM,EAAE,MAAM,KAAK,CAAC,CAAC;EACnD,WAAW,OAAO,UAAU,KAAK,MAAM,EAAE,SAAS,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;EACvE,wBACE,MAAM,aAAa,YAAY,MAAM,KAAK,kBAAkB,KAAA,IAAY,KAAA;EAC1E,YAAY,KAAK;EACjB,YAAY,KAAK;CACnB;CAEA,OAAO,OAAO,OAAO,IAAI,CAAC,CAAC,MAAM,UAAU,UAAU,KAAA,CAAS,IAAI,OAAO,KAAA;AAC3E;AAEA,SAAgB,eAEd,OACA,MACA,cACa;CACb,MAAM,EAAE,MAAM,MAAM,cAAcC,mBAAAA,YAAY,MAAM,MAAM,MAAM,UAAU;CAE1E,OAAO;EACL,IAAI,MAAM,KAAK,mBAAmB,MAAM;EACxC;EAGA,mBAAmB,SAAS,WAAW,MAAM,OAAO,KAAA;EACpD,cAAc,IAAI,KAAK,MAAM,UAAU,CAAC,CAAC,QAAQ;EACjD,YAAYC,6BAAAA,aAAa,MAAM,IAAI;EAEnC,QAAQC,yBAAAA,aAAa,MAAM,IAAI;EAC/B,eAAe,gBAAgB,MAAM,UAAU,YAAY;EAC3D,MAAM,QAAQ,OAAO,IAAI;EACzB,MAAM;CACR;AACF;AAEA,eAAsB,WACpB,QACA,SAEA,QACA,OAAyB,CAAC,GAC1B,eAAe,OACf,cACA;CACA,MAAM,MAA6B;EACjC,eAAe;EACf,QAAQ,OACL,QAAQ,UAAU,CAACC,qCAAAA,eAAe,SAAS,MAAM,IAAI,CAAC,CAAC,CACvD,QAAQ,UAAU,CAACC,mBAAAA,cAAc,SAAS,MAAM,IAAI,CAAC,CAAC,CACtD,KAAK,UAAU,eAAe,OAAO,MAAM,YAAY,CAAC;CAC7D;CAEA,IAAI,IAAI,OAAO,WAAW,GAAG;CAE7B,IAAI;EACF,MAAM,WAAW,OAAA,GAAMC,cAAAA,MAAAA,CAAM,GAAG,SAAS,OAAO,WAAW;GACzD,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,QAAQ;IACR,eAAe,UAAU;GAC3B;GACA,MAAM,KAAK,UAAU,GAAG;EAC1B,CAAC;EAED,IAAI,SAAS,IAAI;EACjB,MAAM,EAAE,WAAW;EACnB,MAAM,UAAU,MAAM,SAAS,KAAK;EACpC,QAAQ,MAAM,6CAA6C,OAAO,UAAU,SAAS;CACvF,SAAS,OAAO;EACd,QAAQ,MAAM,oDAAoD,KAAK;CACzE;AACF"}
+{"version":3,"file":"openai-conversions-api.cjs","names":["createHash","resolveActionSource","normalizeOAIPhone","normalizeOAIName","mapOAIEvent","oaiCustomEventName","pageLocation","openaiOppref","IGNORED_EVENTS","NON_AD_EVENTS","fetch"],"sources":["../../src/server/openai-conversions-api.ts"],"sourcesContent":["/**\n * OpenAI Conversions API\n * https://developers.openai.com/ads/conversions-api\n * https://developers.openai.com/ads/supported-events\n */\nimport { createHash } from 'node:crypto';\nimport { fetch } from '@shware/utils';\nimport { IGNORED_EVENTS } from '../third-parties/ignored-events';\nimport {\n  type EventData,\n  NON_AD_EVENTS,\n  mapOAIEvent,\n  normalizeOAIName,\n  normalizeOAIPhone,\n  oaiCustomEventName,\n} from '../track/oaiq';\nimport type { Platform, TrackEvent, UserProvidedData } from '../track/types';\nimport { type EventActionSource, resolveActionSource } from './action-source';\nimport { openaiOppref } from './click-ids';\nimport { pageLocation } from './page-location';\n\nconst ENDPOINT = 'https://bzr.openai.com/v1/events';\n\ntype ActionSource =\n  | 'web'\n  | 'mobile_app'\n  | 'offline'\n  | 'physical_store'\n  | 'phone_call'\n  | 'email'\n  | 'other';\n\n/**\n * Conversion-matching fields, all optional. Identifiers are normalized, then sent as lowercase\n * 64-char SHA-256 hex strings; geographic values are raw. Of each list the API uses the first\n * three valid, unique values.\n * ref: https://developers.openai.com/ads/conversions-api#send-user-data\n */\nexport interface OpenAIUser {\n  /** The pixel's `__obref` cookie, unhashed; ties the server event to the pixel's browser. */\n  obref?: string;\n  emails_sha256?: string[];\n  /** 8–15 digits with the country code, no leading `+` or zeroes. */\n  phone_numbers_sha256?: string[];\n  external_ids_sha256?: string[];\n  first_names_sha256?: string[];\n  last_names_sha256?: string[];\n  regions?: string[];\n  postal_codes?: string[];\n  cities?: string[];\n  /** Two-letter ISO 3166-1 country codes (e.g. \"US\"). */\n  countries?: string[];\n  /** Android GAID only; IDFA is not supported. */\n  android_advertising_id?: string;\n  ip_address?: string;\n  user_agent?: string;\n}\n\nexport interface OpenAIEvent {\n  /** Unique event id; combined with `type` for deduplication against pixel events. */\n  id: string;\n  /** Standard event name or `custom`. */\n  type: string;\n  /** Required when `type` is `custom`. */\n  custom_event_name?: string;\n  /** Event timestamp in ms; must be within 7 days and no more than 10 minutes in the future. */\n  timestamp_ms: number;\n  /** Required for `action_source: \"web\"`. */\n  source_url?: string;\n  action_source?: ActionSource;\n  /** OpenAI-provided privacy-preserving identifier. */\n  oppref?: string;\n  /** When true, opts the event out of personalization. */\n  opt_out?: boolean;\n  user?: OpenAIUser;\n  data: EventData;\n}\n\nexport interface CreateOpenAIEventsDTO {\n  /** When true, validates the events without persisting them. */\n  validate_only?: boolean;\n  events: OpenAIEvent[];\n}\n\nfunction sha256(value: string): string {\n  return createHash('sha256').update(value).digest('hex');\n}\n\nfunction mapActionSource(\n  platform: Platform,\n  actionSource?: EventActionSource\n): ActionSource | undefined {\n  switch (resolveActionSource(platform, actionSource)) {\n    case 'web':\n      return 'web';\n    case 'app':\n      return 'mobile_app';\n    case 'offline':\n      return 'offline';\n    default:\n      return undefined;\n  }\n}\n\nfunction list<T>(field: T | T[] | undefined): T[] {\n  if (!field) return [];\n  return Array.isArray(field) ? field : [field];\n}\n\n/** The distinct non-empty values, or undefined when there are none. */\nfunction values(items: (string | undefined)[]): string[] | undefined {\n  const result = [...new Set(items.filter((item): item is string => !!item))];\n  return result.length > 0 ? result : undefined;\n}\n\nfunction getUser(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData\n): OpenAIUser | undefined {\n  const hashed = (items: (string | undefined)[]) => values(items)?.map(sha256);\n  const addresses = list(data.address);\n\n  const user: OpenAIUser = {\n    obref: event.tags.__obref,\n    emails_sha256: hashed(list(data.email).map((email) => email.trim().toLowerCase())),\n    phone_numbers_sha256: hashed(list(data.phone_number).map(normalizeOAIPhone)),\n    external_ids_sha256: hashed([data.user_id?.trim()]),\n    first_names_sha256: hashed(addresses.map((a) => normalizeOAIName(a.first_name))),\n    last_names_sha256: hashed(addresses.map((a) => normalizeOAIName(a.last_name))),\n    regions: values(addresses.map((a) => a.region?.trim())),\n    postal_codes: values(addresses.map((a) => a.postal_code?.trim())),\n    cities: values(addresses.map((a) => a.city?.trim())),\n    countries: values(addresses.map((a) => a.country?.trim().toUpperCase())),\n    android_advertising_id:\n      event.platform === 'android' ? event.tags.advertising_id || undefined : undefined,\n    ip_address: data.ip_address,\n    user_agent: data.user_agent,\n  };\n\n  return Object.values(user).some((value) => value !== undefined) ? user : undefined;\n}\n\nexport function getServerEvent(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData,\n  actionSource?: EventActionSource\n): OpenAIEvent {\n  const { type, data: eventData } = mapOAIEvent(event.name, event.properties);\n\n  return {\n    id: event.tags.idempotency_key ?? event.id,\n    type,\n    // For custom events the track name, made valid (`oaiCustomEventName`); the browser pixel\n    // names it the same way, so the two deduplicate. Standard events omit it.\n    custom_event_name: type === 'custom' ? oaiCustomEventName(event.name) : undefined,\n    timestamp_ms: new Date(event.created_at).getTime(),\n    source_url: pageLocation(event.tags),\n    // The click id OpenAI appends to an ad's landing URL; what ties the conversion to the click.\n    oppref: openaiOppref(event.tags),\n    action_source: mapActionSource(event.platform, actionSource),\n    user: getUser(event, data),\n    data: eventData,\n  };\n}\n\n/**\n * `timestamp_ms` \"must be within the last 7 days and no more than 10 minutes in the future\", or\n * the request fails; such an event is left out, with a minute's margin for the trip.\n */\nconst MAX_EVENT_AGE_MS = 7 * 24 * 60 * 60 * 1000 - 60 * 1000;\nconst MAX_EVENT_AHEAD_MS = 10 * 60 * 1000;\n\nexport async function sendEvents(\n  apiKey: string,\n  pixelId: string,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  events: TrackEvent<any>[],\n  data: UserProvidedData = {},\n  validateOnly = false,\n  actionSource?: EventActionSource\n) {\n  const dto: CreateOpenAIEventsDTO = {\n    validate_only: validateOnly,\n    events: events\n      .filter((event) => !IGNORED_EVENTS.includes(event.name))\n      .filter((event) => !NON_AD_EVENTS.includes(event.name))\n      .filter((event) => {\n        const age = Date.now() - Date.parse(event.created_at);\n        return age <= MAX_EVENT_AGE_MS && age >= -MAX_EVENT_AHEAD_MS;\n      })\n      .map((event) => getServerEvent(event, data, actionSource))\n      // A custom event whose name cannot be made valid would fail the whole request.\n      .filter((event) => event.type !== 'custom' || event.custom_event_name !== undefined),\n  };\n\n  if (dto.events.length === 0) return;\n\n  try {\n    const response = await fetch(`${ENDPOINT}?pid=${pixelId}`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Accept: 'application/json',\n        Authorization: `Bearer ${apiKey}`,\n      },\n      body: JSON.stringify(dto),\n    });\n\n    if (response.ok) return;\n    const { status } = response;\n    const message = await response.text();\n    console.error(`Failed to send OpenAI conversion, status: ${status}, body: ${message}`);\n  } catch (error) {\n    console.error('Failed to send OpenAI conversion, network error:', error);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAqBA,MAAM,WAAW;AA+DjB,SAAS,OAAO,OAAuB;CACrC,QAAA,GAAOA,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AACxD;AAEA,SAAS,gBACP,UACA,cAC0B;CAC1B,QAAQC,6BAAAA,oBAAoB,UAAU,YAAY,GAAlD;EACE,KAAK,OACH,OAAO;EACT,KAAK,OACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,SACE;CACJ;AACF;AAEA,SAAS,KAAQ,OAAiC;CAChD,IAAI,CAAC,OAAO,OAAO,CAAC;CACpB,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;AAC9C;;AAGA,SAAS,OAAO,OAAqD;CACnE,MAAM,SAAS,CAAC,GAAG,IAAI,IAAI,MAAM,QAAQ,SAAyB,CAAC,CAAC,IAAI,CAAC,CAAC;CAC1E,OAAO,OAAO,SAAS,IAAI,SAAS,KAAA;AACtC;AAEA,SAAS,QAEP,OACA,MACwB;CACxB,MAAM,UAAU,UAAkC,OAAO,KAAK,CAAC,EAAE,IAAI,MAAM;CAC3E,MAAM,YAAY,KAAK,KAAK,OAAO;CAEnC,MAAM,OAAmB;EACvB,OAAO,MAAM,KAAK;EAClB,eAAe,OAAO,KAAK,KAAK,KAAK,CAAC,CAAC,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;EACjF,sBAAsB,OAAO,KAAK,KAAK,YAAY,CAAC,CAAC,IAAIC,mBAAAA,iBAAiB,CAAC;EAC3E,qBAAqB,OAAO,CAAC,KAAK,SAAS,KAAK,CAAC,CAAC;EAClD,oBAAoB,OAAO,UAAU,KAAK,MAAMC,mBAAAA,iBAAiB,EAAE,UAAU,CAAC,CAAC;EAC/E,mBAAmB,OAAO,UAAU,KAAK,MAAMA,mBAAAA,iBAAiB,EAAE,SAAS,CAAC,CAAC;EAC7E,SAAS,OAAO,UAAU,KAAK,MAAM,EAAE,QAAQ,KAAK,CAAC,CAAC;EACtD,cAAc,OAAO,UAAU,KAAK,MAAM,EAAE,aAAa,KAAK,CAAC,CAAC;EAChE,QAAQ,OAAO,UAAU,KAAK,MAAM,EAAE,MAAM,KAAK,CAAC,CAAC;EACnD,WAAW,OAAO,UAAU,KAAK,MAAM,EAAE,SAAS,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;EACvE,wBACE,MAAM,aAAa,YAAY,MAAM,KAAK,kBAAkB,KAAA,IAAY,KAAA;EAC1E,YAAY,KAAK;EACjB,YAAY,KAAK;CACnB;CAEA,OAAO,OAAO,OAAO,IAAI,CAAC,CAAC,MAAM,UAAU,UAAU,KAAA,CAAS,IAAI,OAAO,KAAA;AAC3E;AAEA,SAAgB,eAEd,OACA,MACA,cACa;CACb,MAAM,EAAE,MAAM,MAAM,cAAcC,mBAAAA,YAAY,MAAM,MAAM,MAAM,UAAU;CAE1E,OAAO;EACL,IAAI,MAAM,KAAK,mBAAmB,MAAM;EACxC;EAGA,mBAAmB,SAAS,WAAWC,mBAAAA,mBAAmB,MAAM,IAAI,IAAI,KAAA;EACxE,cAAc,IAAI,KAAK,MAAM,UAAU,CAAC,CAAC,QAAQ;EACjD,YAAYC,6BAAAA,aAAa,MAAM,IAAI;EAEnC,QAAQC,yBAAAA,aAAa,MAAM,IAAI;EAC/B,eAAe,gBAAgB,MAAM,UAAU,YAAY;EAC3D,MAAM,QAAQ,OAAO,IAAI;EACzB,MAAM;CACR;AACF;;;;;AAMA,MAAM,mBAAmB;AAGzB,eAAsB,WACpB,QACA,SAEA,QACA,OAAyB,CAAC,GAC1B,eAAe,OACf,cACA;CACA,MAAM,MAA6B;EACjC,eAAe;EACf,QAAQ,OACL,QAAQ,UAAU,CAACC,qCAAAA,eAAe,SAAS,MAAM,IAAI,CAAC,CAAC,CACvD,QAAQ,UAAU,CAACC,mBAAAA,cAAc,SAAS,MAAM,IAAI,CAAC,CAAC,CACtD,QAAQ,UAAU;GACjB,MAAM,MAAM,KAAK,IAAI,IAAI,KAAK,MAAM,MAAM,UAAU;GACpD,OAAO,OAAO,oBAAoB,OAAO;EAC3C,CAAC,CAAC,CACD,KAAK,UAAU,eAAe,OAAO,MAAM,YAAY,CAAC,CAAC,CAEzD,QAAQ,UAAU,MAAM,SAAS,YAAY,MAAM,sBAAsB,KAAA,CAAS;CACvF;CAEA,IAAI,IAAI,OAAO,WAAW,GAAG;CAE7B,IAAI;EACF,MAAM,WAAW,OAAA,GAAMC,cAAAA,MAAAA,CAAM,GAAG,SAAS,OAAO,WAAW;GACzD,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,QAAQ;IACR,eAAe,UAAU;GAC3B;GACA,MAAM,KAAK,UAAU,GAAG;EAC1B,CAAC;EAED,IAAI,SAAS,IAAI;EACjB,MAAM,EAAE,WAAW;EACnB,MAAM,UAAU,MAAM,SAAS,KAAK;EACpC,QAAQ,MAAM,6CAA6C,OAAO,UAAU,SAAS;CACvF,SAAS,OAAO;EACd,QAAQ,MAAM,oDAAoD,KAAK;CACzE;AACF"}

package/dist/server/openai-conversions-api.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"openai-conversions-api.d.cts","names":[],"sources":["../../src/server/openai-conversions-api.ts"],"mappings":";;;;KAgBK;;;;;;;iBAeY;;EAEf;EACA;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA;;EAEA;EACA;EACA;;iBAGe;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;EACA,gBAAgB;;EAEhB;;EAEA;EACA,OAAO;EACP,MAAM;;iBAGS;;EAEf;EACA,QAAQ;;wBA2EM,eAEd,OAAO,iBACP,MAAM,kBACN,eAAe,oBACd;wBAmBmB,WACpB,gBACA,iBAEA,QAAQ,mBACR,OAAM,kBACN,wBACA,eAAe,oBAAiB"}
+{"version":3,"file":"openai-conversions-api.d.cts","names":[],"sources":["../../src/server/openai-conversions-api.ts"],"mappings":";;;;KAuBK;;;;;;;iBAeY;;EAEf;EACA;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA;;EAEA;EACA;EACA;;iBAGe;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;EACA,gBAAgB;;EAEhB;;EAEA;EACA,OAAO;EACP,MAAM;;iBAGS;;EAEf;EACA,QAAQ;;wBA8DM,eAEd,OAAO,iBACP,MAAM,kBACN,eAAe,oBACd;wBA0BmB,WACpB,gBACA,iBAEA,QAAQ,mBACR,OAAM,kBACN,wBACA,eAAe,oBAAiB"}

package/dist/server/openai-conversions-api.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"openai-conversions-api.d.mts","names":[],"sources":["../../src/server/openai-conversions-api.ts"],"mappings":";;;;KAgBK;;;;;;;iBAeY;;EAEf;EACA;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA;;EAEA;EACA;EACA;;iBAGe;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;EACA,gBAAgB;;EAEhB;;EAEA;EACA,OAAO;EACP,MAAM;;iBAGS;;EAEf;EACA,QAAQ;;wBA2EM,eAEd,OAAO,iBACP,MAAM,kBACN,eAAe,oBACd;wBAmBmB,WACpB,gBACA,iBAEA,QAAQ,mBACR,OAAM,kBACN,wBACA,eAAe,oBAAiB"}
+{"version":3,"file":"openai-conversions-api.d.mts","names":[],"sources":["../../src/server/openai-conversions-api.ts"],"mappings":";;;;KAuBK;;;;;;;iBAeY;;EAEf;EACA;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA;;EAEA;EACA;EACA;;iBAGe;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;EACA,gBAAgB;;EAEhB;;EAEA;EACA,OAAO;EACP,MAAM;;iBAGS;;EAEf;EACA,QAAQ;;wBA8DM,eAEd,OAAO,iBACP,MAAM,kBACN,eAAe,oBACd;wBA0BmB,WACpB,gBACA,iBAEA,QAAQ,mBACR,OAAM,kBACN,wBACA,eAAe,oBAAiB"}

package/dist/server/openai-conversions-api.mjs

@@ -2,7 +2,7 @@ import { IGNORED_EVENTS } from "../third-parties/ignored-events.mjs";
 import { resolveActionSource } from "./action-source.mjs";
 import { openaiOppref } from "./click-ids.mjs";
 import { pageLocation } from "./page-location.mjs";
-import { NON_AD_EVENTS, mapOAIEvent } from "../track/oaiq.mjs";
+import { NON_AD_EVENTS, mapOAIEvent, normalizeOAIName, normalizeOAIPhone, oaiCustomEventName } from "../track/oaiq.mjs";
 import { fetch } from "@shware/utils";
 import { createHash } from "node:crypto";
 //#region src/server/openai-conversions-api.ts
@@ -32,23 +32,16 @@ function values(items) {
 	const result = [...new Set(items.filter((item) => !!item))];
 	return result.length > 0 ? result : void 0;
 }
-function normalizePhone(phone) {
-	const digits = phone.replace(/[\s().-]/g, "").replace(/^\+/, "").replace(/^0+/, "");
-	return /^\d{8,15}$/.test(digits) ? digits : void 0;
-}
-function normalizeName(name) {
-	return name?.toLowerCase().replace(/[\s!-/:-@[-`{-~]/g, "") || void 0;
-}
 function getUser(event, data) {
 	const hashed = (items) => values(items)?.map(sha256);
 	const addresses = list(data.address);
 	const user = {
 		obref: event.tags.__obref,
 		emails_sha256: hashed(list(data.email).map((email) => email.trim().toLowerCase())),
-		phone_numbers_sha256: hashed(list(data.phone_number).map(normalizePhone)),
+		phone_numbers_sha256: hashed(list(data.phone_number).map(normalizeOAIPhone)),
 		external_ids_sha256: hashed([data.user_id?.trim()]),
-		first_names_sha256: hashed(addresses.map((a) => normalizeName(a.first_name))),
-		last_names_sha256: hashed(addresses.map((a) => normalizeName(a.last_name))),
+		first_names_sha256: hashed(addresses.map((a) => normalizeOAIName(a.first_name))),
+		last_names_sha256: hashed(addresses.map((a) => normalizeOAIName(a.last_name))),
 		regions: values(addresses.map((a) => a.region?.trim())),
 		postal_codes: values(addresses.map((a) => a.postal_code?.trim())),
 		cities: values(addresses.map((a) => a.city?.trim())),
@@ -64,7 +57,7 @@ function getServerEvent(event, data, actionSource) {
 	return {
 		id: event.tags.idempotency_key ?? event.id,
 		type,
-		custom_event_name: type === "custom" ? event.name : void 0,
+		custom_event_name: type === "custom" ? oaiCustomEventName(event.name) : void 0,
 		timestamp_ms: new Date(event.created_at).getTime(),
 		source_url: pageLocation(event.tags),
 		oppref: openaiOppref(event.tags),
@@ -73,10 +66,18 @@ function getServerEvent(event, data, actionSource) {
 		data: eventData
 	};
 }
+/**
+* `timestamp_ms` "must be within the last 7 days and no more than 10 minutes in the future", or
+* the request fails; such an event is left out, with a minute's margin for the trip.
+*/
+const MAX_EVENT_AGE_MS = 60474e4;
 async function sendEvents(apiKey, pixelId, events, data = {}, validateOnly = false, actionSource) {
 	const dto = {
 		validate_only: validateOnly,
-		events: events.filter((event) => !IGNORED_EVENTS.includes(event.name)).filter((event) => !NON_AD_EVENTS.includes(event.name)).map((event) => getServerEvent(event, data, actionSource))
+		events: events.filter((event) => !IGNORED_EVENTS.includes(event.name)).filter((event) => !NON_AD_EVENTS.includes(event.name)).filter((event) => {
+			const age = Date.now() - Date.parse(event.created_at);
+			return age <= MAX_EVENT_AGE_MS && age >= -6e5;
+		}).map((event) => getServerEvent(event, data, actionSource)).filter((event) => event.type !== "custom" || event.custom_event_name !== void 0)
 	};
 	if (dto.events.length === 0) return;
 	try {

package/dist/server/openai-conversions-api.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"openai-conversions-api.mjs","names":[],"sources":["../../src/server/openai-conversions-api.ts"],"sourcesContent":["/**\n * OpenAI Conversions API\n * https://developers.openai.com/ads/conversions-api\n * https://developers.openai.com/ads/supported-events\n */\nimport { createHash } from 'node:crypto';\nimport { fetch } from '@shware/utils';\nimport { IGNORED_EVENTS } from '../third-parties/ignored-events';\nimport { type EventData, NON_AD_EVENTS, mapOAIEvent } from '../track/oaiq';\nimport type { Platform, TrackEvent, UserProvidedData } from '../track/types';\nimport { type EventActionSource, resolveActionSource } from './action-source';\nimport { openaiOppref } from './click-ids';\nimport { pageLocation } from './page-location';\n\nconst ENDPOINT = 'https://bzr.openai.com/v1/events';\n\ntype ActionSource =\n  | 'web'\n  | 'mobile_app'\n  | 'offline'\n  | 'physical_store'\n  | 'phone_call'\n  | 'email'\n  | 'other';\n\n/**\n * Conversion-matching fields, all optional. Identifiers are normalized, then sent as lowercase\n * 64-char SHA-256 hex strings; geographic values are raw. Of each list the API uses the first\n * three valid, unique values.\n * ref: https://developers.openai.com/ads/conversions-api#send-user-data\n */\nexport interface OpenAIUser {\n  /** The pixel's `__obref` cookie, unhashed; ties the server event to the pixel's browser. */\n  obref?: string;\n  emails_sha256?: string[];\n  /** 8–15 digits with the country code, no leading `+` or zeroes. */\n  phone_numbers_sha256?: string[];\n  external_ids_sha256?: string[];\n  first_names_sha256?: string[];\n  last_names_sha256?: string[];\n  regions?: string[];\n  postal_codes?: string[];\n  cities?: string[];\n  /** Two-letter ISO 3166-1 country codes (e.g. \"US\"). */\n  countries?: string[];\n  /** Android GAID only; IDFA is not supported. */\n  android_advertising_id?: string;\n  ip_address?: string;\n  user_agent?: string;\n}\n\nexport interface OpenAIEvent {\n  /** Unique event id; combined with `type` for deduplication against pixel events. */\n  id: string;\n  /** Standard event name or `custom`. */\n  type: string;\n  /** Required when `type` is `custom`. */\n  custom_event_name?: string;\n  /** Event timestamp in ms; must be within 7 days and no more than 10 minutes in the future. */\n  timestamp_ms: number;\n  /** Required for `action_source: \"web\"`. */\n  source_url?: string;\n  action_source?: ActionSource;\n  /** OpenAI-provided privacy-preserving identifier. */\n  oppref?: string;\n  /** When true, opts the event out of personalization. */\n  opt_out?: boolean;\n  user?: OpenAIUser;\n  data: EventData;\n}\n\nexport interface CreateOpenAIEventsDTO {\n  /** When true, validates the events without persisting them. */\n  validate_only?: boolean;\n  events: OpenAIEvent[];\n}\n\nfunction sha256(value: string): string {\n  return createHash('sha256').update(value).digest('hex');\n}\n\nfunction mapActionSource(\n  platform: Platform,\n  actionSource?: EventActionSource\n): ActionSource | undefined {\n  switch (resolveActionSource(platform, actionSource)) {\n    case 'web':\n      return 'web';\n    case 'app':\n      return 'mobile_app';\n    case 'offline':\n      return 'offline';\n    default:\n      return undefined;\n  }\n}\n\nfunction list<T>(field: T | T[] | undefined): T[] {\n  if (!field) return [];\n  return Array.isArray(field) ? field : [field];\n}\n\n/** The distinct non-empty values, or undefined when there are none. */\nfunction values(items: (string | undefined)[]): string[] | undefined {\n  const result = [...new Set(items.filter((item): item is string => !!item))];\n  return result.length > 0 ? result : undefined;\n}\n\nfunction normalizePhone(phone: string): string | undefined {\n  const digits = phone\n    .replace(/[\\s().-]/g, '')\n    .replace(/^\\+/, '')\n    .replace(/^0+/, '');\n  return /^\\d{8,15}$/.test(digits) ? digits : undefined;\n}\n\n// Lowercase, without whitespace or ASCII punctuation; other characters (accents) are kept.\nfunction normalizeName(name: string | undefined): string | undefined {\n  return name?.toLowerCase().replace(/[\\s!-/:-@[-`{-~]/g, '') || undefined;\n}\n\nfunction getUser(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData\n): OpenAIUser | undefined {\n  const hashed = (items: (string | undefined)[]) => values(items)?.map(sha256);\n  const addresses = list(data.address);\n\n  const user: OpenAIUser = {\n    obref: event.tags.__obref,\n    emails_sha256: hashed(list(data.email).map((email) => email.trim().toLowerCase())),\n    phone_numbers_sha256: hashed(list(data.phone_number).map(normalizePhone)),\n    external_ids_sha256: hashed([data.user_id?.trim()]),\n    first_names_sha256: hashed(addresses.map((a) => normalizeName(a.first_name))),\n    last_names_sha256: hashed(addresses.map((a) => normalizeName(a.last_name))),\n    regions: values(addresses.map((a) => a.region?.trim())),\n    postal_codes: values(addresses.map((a) => a.postal_code?.trim())),\n    cities: values(addresses.map((a) => a.city?.trim())),\n    countries: values(addresses.map((a) => a.country?.trim().toUpperCase())),\n    android_advertising_id:\n      event.platform === 'android' ? event.tags.advertising_id || undefined : undefined,\n    ip_address: data.ip_address,\n    user_agent: data.user_agent,\n  };\n\n  return Object.values(user).some((value) => value !== undefined) ? user : undefined;\n}\n\nexport function getServerEvent(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData,\n  actionSource?: EventActionSource\n): OpenAIEvent {\n  const { type, data: eventData } = mapOAIEvent(event.name, event.properties);\n\n  return {\n    id: event.tags.idempotency_key ?? event.id,\n    type,\n    // For custom events the original track name is the OpenAI custom_event_name; this matches\n    // the browser pixel so the two deduplicate. Standard events omit it.\n    custom_event_name: type === 'custom' ? event.name : undefined,\n    timestamp_ms: new Date(event.created_at).getTime(),\n    source_url: pageLocation(event.tags),\n    // The click id OpenAI appends to an ad's landing URL; what ties the conversion to the click.\n    oppref: openaiOppref(event.tags),\n    action_source: mapActionSource(event.platform, actionSource),\n    user: getUser(event, data),\n    data: eventData,\n  };\n}\n\nexport async function sendEvents(\n  apiKey: string,\n  pixelId: string,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  events: TrackEvent<any>[],\n  data: UserProvidedData = {},\n  validateOnly = false,\n  actionSource?: EventActionSource\n) {\n  const dto: CreateOpenAIEventsDTO = {\n    validate_only: validateOnly,\n    events: events\n      .filter((event) => !IGNORED_EVENTS.includes(event.name))\n      .filter((event) => !NON_AD_EVENTS.includes(event.name))\n      .map((event) => getServerEvent(event, data, actionSource)),\n  };\n\n  if (dto.events.length === 0) return;\n\n  try {\n    const response = await fetch(`${ENDPOINT}?pid=${pixelId}`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Accept: 'application/json',\n        Authorization: `Bearer ${apiKey}`,\n      },\n      body: JSON.stringify(dto),\n    });\n\n    if (response.ok) return;\n    const { status } = response;\n    const message = await response.text();\n    console.error(`Failed to send OpenAI conversion, status: ${status}, body: ${message}`);\n  } catch (error) {\n    console.error('Failed to send OpenAI conversion, network error:', error);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAcA,MAAM,WAAW;AA+DjB,SAAS,OAAO,OAAuB;CACrC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AACxD;AAEA,SAAS,gBACP,UACA,cAC0B;CAC1B,QAAQ,oBAAoB,UAAU,YAAY,GAAlD;EACE,KAAK,OACH,OAAO;EACT,KAAK,OACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,SACE;CACJ;AACF;AAEA,SAAS,KAAQ,OAAiC;CAChD,IAAI,CAAC,OAAO,OAAO,CAAC;CACpB,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;AAC9C;;AAGA,SAAS,OAAO,OAAqD;CACnE,MAAM,SAAS,CAAC,GAAG,IAAI,IAAI,MAAM,QAAQ,SAAyB,CAAC,CAAC,IAAI,CAAC,CAAC;CAC1E,OAAO,OAAO,SAAS,IAAI,SAAS,KAAA;AACtC;AAEA,SAAS,eAAe,OAAmC;CACzD,MAAM,SAAS,MACZ,QAAQ,aAAa,EAAE,CAAC,CACxB,QAAQ,OAAO,EAAE,CAAC,CAClB,QAAQ,OAAO,EAAE;CACpB,OAAO,aAAa,KAAK,MAAM,IAAI,SAAS,KAAA;AAC9C;AAGA,SAAS,cAAc,MAA8C;CACnE,OAAO,MAAM,YAAY,CAAC,CAAC,QAAQ,qBAAqB,EAAE,KAAK,KAAA;AACjE;AAEA,SAAS,QAEP,OACA,MACwB;CACxB,MAAM,UAAU,UAAkC,OAAO,KAAK,CAAC,EAAE,IAAI,MAAM;CAC3E,MAAM,YAAY,KAAK,KAAK,OAAO;CAEnC,MAAM,OAAmB;EACvB,OAAO,MAAM,KAAK;EAClB,eAAe,OAAO,KAAK,KAAK,KAAK,CAAC,CAAC,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;EACjF,sBAAsB,OAAO,KAAK,KAAK,YAAY,CAAC,CAAC,IAAI,cAAc,CAAC;EACxE,qBAAqB,OAAO,CAAC,KAAK,SAAS,KAAK,CAAC,CAAC;EAClD,oBAAoB,OAAO,UAAU,KAAK,MAAM,cAAc,EAAE,UAAU,CAAC,CAAC;EAC5E,mBAAmB,OAAO,UAAU,KAAK,MAAM,cAAc,EAAE,SAAS,CAAC,CAAC;EAC1E,SAAS,OAAO,UAAU,KAAK,MAAM,EAAE,QAAQ,KAAK,CAAC,CAAC;EACtD,cAAc,OAAO,UAAU,KAAK,MAAM,EAAE,aAAa,KAAK,CAAC,CAAC;EAChE,QAAQ,OAAO,UAAU,KAAK,MAAM,EAAE,MAAM,KAAK,CAAC,CAAC;EACnD,WAAW,OAAO,UAAU,KAAK,MAAM,EAAE,SAAS,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;EACvE,wBACE,MAAM,aAAa,YAAY,MAAM,KAAK,kBAAkB,KAAA,IAAY,KAAA;EAC1E,YAAY,KAAK;EACjB,YAAY,KAAK;CACnB;CAEA,OAAO,OAAO,OAAO,IAAI,CAAC,CAAC,MAAM,UAAU,UAAU,KAAA,CAAS,IAAI,OAAO,KAAA;AAC3E;AAEA,SAAgB,eAEd,OACA,MACA,cACa;CACb,MAAM,EAAE,MAAM,MAAM,cAAc,YAAY,MAAM,MAAM,MAAM,UAAU;CAE1E,OAAO;EACL,IAAI,MAAM,KAAK,mBAAmB,MAAM;EACxC;EAGA,mBAAmB,SAAS,WAAW,MAAM,OAAO,KAAA;EACpD,cAAc,IAAI,KAAK,MAAM,UAAU,CAAC,CAAC,QAAQ;EACjD,YAAY,aAAa,MAAM,IAAI;EAEnC,QAAQ,aAAa,MAAM,IAAI;EAC/B,eAAe,gBAAgB,MAAM,UAAU,YAAY;EAC3D,MAAM,QAAQ,OAAO,IAAI;EACzB,MAAM;CACR;AACF;AAEA,eAAsB,WACpB,QACA,SAEA,QACA,OAAyB,CAAC,GAC1B,eAAe,OACf,cACA;CACA,MAAM,MAA6B;EACjC,eAAe;EACf,QAAQ,OACL,QAAQ,UAAU,CAAC,eAAe,SAAS,MAAM,IAAI,CAAC,CAAC,CACvD,QAAQ,UAAU,CAAC,cAAc,SAAS,MAAM,IAAI,CAAC,CAAC,CACtD,KAAK,UAAU,eAAe,OAAO,MAAM,YAAY,CAAC;CAC7D;CAEA,IAAI,IAAI,OAAO,WAAW,GAAG;CAE7B,IAAI;EACF,MAAM,WAAW,MAAM,MAAM,GAAG,SAAS,OAAO,WAAW;GACzD,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,QAAQ;IACR,eAAe,UAAU;GAC3B;GACA,MAAM,KAAK,UAAU,GAAG;EAC1B,CAAC;EAED,IAAI,SAAS,IAAI;EACjB,MAAM,EAAE,WAAW;EACnB,MAAM,UAAU,MAAM,SAAS,KAAK;EACpC,QAAQ,MAAM,6CAA6C,OAAO,UAAU,SAAS;CACvF,SAAS,OAAO;EACd,QAAQ,MAAM,oDAAoD,KAAK;CACzE;AACF"}
+{"version":3,"file":"openai-conversions-api.mjs","names":[],"sources":["../../src/server/openai-conversions-api.ts"],"sourcesContent":["/**\n * OpenAI Conversions API\n * https://developers.openai.com/ads/conversions-api\n * https://developers.openai.com/ads/supported-events\n */\nimport { createHash } from 'node:crypto';\nimport { fetch } from '@shware/utils';\nimport { IGNORED_EVENTS } from '../third-parties/ignored-events';\nimport {\n  type EventData,\n  NON_AD_EVENTS,\n  mapOAIEvent,\n  normalizeOAIName,\n  normalizeOAIPhone,\n  oaiCustomEventName,\n} from '../track/oaiq';\nimport type { Platform, TrackEvent, UserProvidedData } from '../track/types';\nimport { type EventActionSource, resolveActionSource } from './action-source';\nimport { openaiOppref } from './click-ids';\nimport { pageLocation } from './page-location';\n\nconst ENDPOINT = 'https://bzr.openai.com/v1/events';\n\ntype ActionSource =\n  | 'web'\n  | 'mobile_app'\n  | 'offline'\n  | 'physical_store'\n  | 'phone_call'\n  | 'email'\n  | 'other';\n\n/**\n * Conversion-matching fields, all optional. Identifiers are normalized, then sent as lowercase\n * 64-char SHA-256 hex strings; geographic values are raw. Of each list the API uses the first\n * three valid, unique values.\n * ref: https://developers.openai.com/ads/conversions-api#send-user-data\n */\nexport interface OpenAIUser {\n  /** The pixel's `__obref` cookie, unhashed; ties the server event to the pixel's browser. */\n  obref?: string;\n  emails_sha256?: string[];\n  /** 8–15 digits with the country code, no leading `+` or zeroes. */\n  phone_numbers_sha256?: string[];\n  external_ids_sha256?: string[];\n  first_names_sha256?: string[];\n  last_names_sha256?: string[];\n  regions?: string[];\n  postal_codes?: string[];\n  cities?: string[];\n  /** Two-letter ISO 3166-1 country codes (e.g. \"US\"). */\n  countries?: string[];\n  /** Android GAID only; IDFA is not supported. */\n  android_advertising_id?: string;\n  ip_address?: string;\n  user_agent?: string;\n}\n\nexport interface OpenAIEvent {\n  /** Unique event id; combined with `type` for deduplication against pixel events. */\n  id: string;\n  /** Standard event name or `custom`. */\n  type: string;\n  /** Required when `type` is `custom`. */\n  custom_event_name?: string;\n  /** Event timestamp in ms; must be within 7 days and no more than 10 minutes in the future. */\n  timestamp_ms: number;\n  /** Required for `action_source: \"web\"`. */\n  source_url?: string;\n  action_source?: ActionSource;\n  /** OpenAI-provided privacy-preserving identifier. */\n  oppref?: string;\n  /** When true, opts the event out of personalization. */\n  opt_out?: boolean;\n  user?: OpenAIUser;\n  data: EventData;\n}\n\nexport interface CreateOpenAIEventsDTO {\n  /** When true, validates the events without persisting them. */\n  validate_only?: boolean;\n  events: OpenAIEvent[];\n}\n\nfunction sha256(value: string): string {\n  return createHash('sha256').update(value).digest('hex');\n}\n\nfunction mapActionSource(\n  platform: Platform,\n  actionSource?: EventActionSource\n): ActionSource | undefined {\n  switch (resolveActionSource(platform, actionSource)) {\n    case 'web':\n      return 'web';\n    case 'app':\n      return 'mobile_app';\n    case 'offline':\n      return 'offline';\n    default:\n      return undefined;\n  }\n}\n\nfunction list<T>(field: T | T[] | undefined): T[] {\n  if (!field) return [];\n  return Array.isArray(field) ? field : [field];\n}\n\n/** The distinct non-empty values, or undefined when there are none. */\nfunction values(items: (string | undefined)[]): string[] | undefined {\n  const result = [...new Set(items.filter((item): item is string => !!item))];\n  return result.length > 0 ? result : undefined;\n}\n\nfunction getUser(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData\n): OpenAIUser | undefined {\n  const hashed = (items: (string | undefined)[]) => values(items)?.map(sha256);\n  const addresses = list(data.address);\n\n  const user: OpenAIUser = {\n    obref: event.tags.__obref,\n    emails_sha256: hashed(list(data.email).map((email) => email.trim().toLowerCase())),\n    phone_numbers_sha256: hashed(list(data.phone_number).map(normalizeOAIPhone)),\n    external_ids_sha256: hashed([data.user_id?.trim()]),\n    first_names_sha256: hashed(addresses.map((a) => normalizeOAIName(a.first_name))),\n    last_names_sha256: hashed(addresses.map((a) => normalizeOAIName(a.last_name))),\n    regions: values(addresses.map((a) => a.region?.trim())),\n    postal_codes: values(addresses.map((a) => a.postal_code?.trim())),\n    cities: values(addresses.map((a) => a.city?.trim())),\n    countries: values(addresses.map((a) => a.country?.trim().toUpperCase())),\n    android_advertising_id:\n      event.platform === 'android' ? event.tags.advertising_id || undefined : undefined,\n    ip_address: data.ip_address,\n    user_agent: data.user_agent,\n  };\n\n  return Object.values(user).some((value) => value !== undefined) ? user : undefined;\n}\n\nexport function getServerEvent(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  data: UserProvidedData,\n  actionSource?: EventActionSource\n): OpenAIEvent {\n  const { type, data: eventData } = mapOAIEvent(event.name, event.properties);\n\n  return {\n    id: event.tags.idempotency_key ?? event.id,\n    type,\n    // For custom events the track name, made valid (`oaiCustomEventName`); the browser pixel\n    // names it the same way, so the two deduplicate. Standard events omit it.\n    custom_event_name: type === 'custom' ? oaiCustomEventName(event.name) : undefined,\n    timestamp_ms: new Date(event.created_at).getTime(),\n    source_url: pageLocation(event.tags),\n    // The click id OpenAI appends to an ad's landing URL; what ties the conversion to the click.\n    oppref: openaiOppref(event.tags),\n    action_source: mapActionSource(event.platform, actionSource),\n    user: getUser(event, data),\n    data: eventData,\n  };\n}\n\n/**\n * `timestamp_ms` \"must be within the last 7 days and no more than 10 minutes in the future\", or\n * the request fails; such an event is left out, with a minute's margin for the trip.\n */\nconst MAX_EVENT_AGE_MS = 7 * 24 * 60 * 60 * 1000 - 60 * 1000;\nconst MAX_EVENT_AHEAD_MS = 10 * 60 * 1000;\n\nexport async function sendEvents(\n  apiKey: string,\n  pixelId: string,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  events: TrackEvent<any>[],\n  data: UserProvidedData = {},\n  validateOnly = false,\n  actionSource?: EventActionSource\n) {\n  const dto: CreateOpenAIEventsDTO = {\n    validate_only: validateOnly,\n    events: events\n      .filter((event) => !IGNORED_EVENTS.includes(event.name))\n      .filter((event) => !NON_AD_EVENTS.includes(event.name))\n      .filter((event) => {\n        const age = Date.now() - Date.parse(event.created_at);\n        return age <= MAX_EVENT_AGE_MS && age >= -MAX_EVENT_AHEAD_MS;\n      })\n      .map((event) => getServerEvent(event, data, actionSource))\n      // A custom event whose name cannot be made valid would fail the whole request.\n      .filter((event) => event.type !== 'custom' || event.custom_event_name !== undefined),\n  };\n\n  if (dto.events.length === 0) return;\n\n  try {\n    const response = await fetch(`${ENDPOINT}?pid=${pixelId}`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Accept: 'application/json',\n        Authorization: `Bearer ${apiKey}`,\n      },\n      body: JSON.stringify(dto),\n    });\n\n    if (response.ok) return;\n    const { status } = response;\n    const message = await response.text();\n    console.error(`Failed to send OpenAI conversion, status: ${status}, body: ${message}`);\n  } catch (error) {\n    console.error('Failed to send OpenAI conversion, network error:', error);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAqBA,MAAM,WAAW;AA+DjB,SAAS,OAAO,OAAuB;CACrC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AACxD;AAEA,SAAS,gBACP,UACA,cAC0B;CAC1B,QAAQ,oBAAoB,UAAU,YAAY,GAAlD;EACE,KAAK,OACH,OAAO;EACT,KAAK,OACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,SACE;CACJ;AACF;AAEA,SAAS,KAAQ,OAAiC;CAChD,IAAI,CAAC,OAAO,OAAO,CAAC;CACpB,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;AAC9C;;AAGA,SAAS,OAAO,OAAqD;CACnE,MAAM,SAAS,CAAC,GAAG,IAAI,IAAI,MAAM,QAAQ,SAAyB,CAAC,CAAC,IAAI,CAAC,CAAC;CAC1E,OAAO,OAAO,SAAS,IAAI,SAAS,KAAA;AACtC;AAEA,SAAS,QAEP,OACA,MACwB;CACxB,MAAM,UAAU,UAAkC,OAAO,KAAK,CAAC,EAAE,IAAI,MAAM;CAC3E,MAAM,YAAY,KAAK,KAAK,OAAO;CAEnC,MAAM,OAAmB;EACvB,OAAO,MAAM,KAAK;EAClB,eAAe,OAAO,KAAK,KAAK,KAAK,CAAC,CAAC,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;EACjF,sBAAsB,OAAO,KAAK,KAAK,YAAY,CAAC,CAAC,IAAI,iBAAiB,CAAC;EAC3E,qBAAqB,OAAO,CAAC,KAAK,SAAS,KAAK,CAAC,CAAC;EAClD,oBAAoB,OAAO,UAAU,KAAK,MAAM,iBAAiB,EAAE,UAAU,CAAC,CAAC;EAC/E,mBAAmB,OAAO,UAAU,KAAK,MAAM,iBAAiB,EAAE,SAAS,CAAC,CAAC;EAC7E,SAAS,OAAO,UAAU,KAAK,MAAM,EAAE,QAAQ,KAAK,CAAC,CAAC;EACtD,cAAc,OAAO,UAAU,KAAK,MAAM,EAAE,aAAa,KAAK,CAAC,CAAC;EAChE,QAAQ,OAAO,UAAU,KAAK,MAAM,EAAE,MAAM,KAAK,CAAC,CAAC;EACnD,WAAW,OAAO,UAAU,KAAK,MAAM,EAAE,SAAS,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;EACvE,wBACE,MAAM,aAAa,YAAY,MAAM,KAAK,kBAAkB,KAAA,IAAY,KAAA;EAC1E,YAAY,KAAK;EACjB,YAAY,KAAK;CACnB;CAEA,OAAO,OAAO,OAAO,IAAI,CAAC,CAAC,MAAM,UAAU,UAAU,KAAA,CAAS,IAAI,OAAO,KAAA;AAC3E;AAEA,SAAgB,eAEd,OACA,MACA,cACa;CACb,MAAM,EAAE,MAAM,MAAM,cAAc,YAAY,MAAM,MAAM,MAAM,UAAU;CAE1E,OAAO;EACL,IAAI,MAAM,KAAK,mBAAmB,MAAM;EACxC;EAGA,mBAAmB,SAAS,WAAW,mBAAmB,MAAM,IAAI,IAAI,KAAA;EACxE,cAAc,IAAI,KAAK,MAAM,UAAU,CAAC,CAAC,QAAQ;EACjD,YAAY,aAAa,MAAM,IAAI;EAEnC,QAAQ,aAAa,MAAM,IAAI;EAC/B,eAAe,gBAAgB,MAAM,UAAU,YAAY;EAC3D,MAAM,QAAQ,OAAO,IAAI;EACzB,MAAM;CACR;AACF;;;;;AAMA,MAAM,mBAAmB;AAGzB,eAAsB,WACpB,QACA,SAEA,QACA,OAAyB,CAAC,GAC1B,eAAe,OACf,cACA;CACA,MAAM,MAA6B;EACjC,eAAe;EACf,QAAQ,OACL,QAAQ,UAAU,CAAC,eAAe,SAAS,MAAM,IAAI,CAAC,CAAC,CACvD,QAAQ,UAAU,CAAC,cAAc,SAAS,MAAM,IAAI,CAAC,CAAC,CACtD,QAAQ,UAAU;GACjB,MAAM,MAAM,KAAK,IAAI,IAAI,KAAK,MAAM,MAAM,UAAU;GACpD,OAAO,OAAO,oBAAoB,OAAO;EAC3C,CAAC,CAAC,CACD,KAAK,UAAU,eAAe,OAAO,MAAM,YAAY,CAAC,CAAC,CAEzD,QAAQ,UAAU,MAAM,SAAS,YAAY,MAAM,sBAAsB,KAAA,CAAS;CACvF;CAEA,IAAI,IAAI,OAAO,WAAW,GAAG;CAE7B,IAAI;EACF,MAAM,WAAW,MAAM,MAAM,GAAG,SAAS,OAAO,WAAW;GACzD,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,QAAQ;IACR,eAAe,UAAU;GAC3B;GACA,MAAM,KAAK,UAAU,GAAG;EAC1B,CAAC;EAED,IAAI,SAAS,IAAI;EACjB,MAAM,EAAE,WAAW;EACnB,MAAM,UAAU,MAAM,SAAS,KAAK;EACpC,QAAQ,MAAM,6CAA6C,OAAO,UAAU,SAAS;CACvF,SAAS,OAAO;EACd,QAAQ,MAAM,oDAAoD,KAAK;CACzE;AACF"}