@shware/workflow 0.0.0-stage → 0.1.0

package/dist/react-email.mjs

@@ -0,0 +1,47 @@
+import { parseTemplateProps } from "./templates.mjs";
+import { createElement } from "react";
+import { renderToReadableStream } from "react-dom/server";
+//#region src/react-email.ts
+/**
+* `@shware/workflow/react-email` — an EmailRenderer over the project's email
+* registry (`react-dom` is an optional peer dependency; import this subpath
+* only when you use it).
+*
+* The registry maps keys to `emailTemplate({...})` definitions. Props are
+* parsed against the template's schema before the component renders — a
+* failure throws TemplateValidationError and nothing renders — and the
+* component renders as an element, so hooks and context work. Rendering
+* streams and waits for every Suspense boundary (`allReady`) — react-email's
+* `<Tailwind>` suspends while it compiles the classes, which synchronous
+* static markup cannot wait for — then prepends the XHTML doctype react-email
+* uses. @react-email/render itself is avoided because its Workers build
+* statically imports prettier and html-to-text for options never used here.
+*/
+const DOCTYPE = "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">";
+function registryRenderer(emails) {
+	return async (key, props) => {
+		if (!Object.hasOwn(emails, key)) throw new Error(`unknown email template: ${key}`);
+		const template = emails[key];
+		const parsed = parseTemplateProps(template, key, props);
+		const element = createElement(template.component, parsed);
+		return {
+			subject: template.subject,
+			html: DOCTYPE + await renderToHtml(element)
+		};
+	};
+}
+/** Render to a string once every Suspense boundary has resolved; a rendering error rejects. */
+async function renderToHtml(element) {
+	let failure;
+	const stream = await renderToReadableStream(element, { onError: (error) => {
+		failure = error;
+	} });
+	await stream.allReady;
+	const html = await new Response(stream).text();
+	if (failure !== void 0) throw failure instanceof Error ? failure : new Error("email render failed", { cause: failure });
+	return html.replace(/^<!DOCTYPE html>/i, "").replace(/<link rel="preload" as="image"[^>]*\/>/g, "");
+}
+//#endregion
+export { registryRenderer };
+
+//# sourceMappingURL=react-email.mjs.map

package/dist/react-email.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"react-email.mjs","names":[],"sources":["../src/react-email.ts"],"sourcesContent":["import { type ComponentType, type ReactElement, createElement } from 'react';\nimport { renderToReadableStream } from 'react-dom/server';\nimport type { EmailRenderer } from './cloudflare';\nimport { type EmailTemplate, parseTemplateProps } from './templates';\n\n/**\n * `@shware/workflow/react-email` — an EmailRenderer over the project's email\n * registry (`react-dom` is an optional peer dependency; import this subpath\n * only when you use it).\n *\n * The registry maps keys to `emailTemplate({...})` definitions. Props are\n * parsed against the template's schema before the component renders — a\n * failure throws TemplateValidationError and nothing renders — and the\n * component renders as an element, so hooks and context work. Rendering\n * streams and waits for every Suspense boundary (`allReady`) — react-email's\n * `<Tailwind>` suspends while it compiles the classes, which synchronous\n * static markup cannot wait for — then prepends the XHTML doctype react-email\n * uses. @react-email/render itself is avoided because its Workers build\n * statically imports prettier and html-to-text for options never used here.\n */\n\nconst DOCTYPE =\n  '<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">';\n\nexport function registryRenderer(emails: Record<string, EmailTemplate>): EmailRenderer {\n  return async (key, props) => {\n    if (!Object.hasOwn(emails, key)) throw new Error(`unknown email template: ${key}`);\n    const template = emails[key];\n    const parsed = parseTemplateProps(template, key, props);\n    const element = createElement(template.component as ComponentType<object>, parsed);\n    return { subject: template.subject, html: DOCTYPE + (await renderToHtml(element)) };\n  };\n}\n\n/** Render to a string once every Suspense boundary has resolved; a rendering error rejects. */\nasync function renderToHtml(element: ReactElement): Promise<string> {\n  let failure: unknown;\n  const stream = await renderToReadableStream(element, {\n    onError: (error) => {\n      failure = error;\n    },\n  });\n  await stream.allReady;\n  const html = await new Response(stream).text();\n  if (failure !== undefined) {\n    throw failure instanceof Error ? failure : new Error('email render failed', { cause: failure });\n  }\n  // Streaming a document adds what static markup did not: an HTML5 doctype (the caller prepends\n  // the XHTML one email clients expect) and React 19's image preload hints, which mean nothing in\n  // an email. Both are dropped, as @react-email/render does.\n  return html\n    .replace(/^<!DOCTYPE html>/i, '')\n    .replace(/<link rel=\"preload\" as=\"image\"[^>]*\\/>/g, '');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAqBA,MAAM,UACJ;AAEF,SAAgB,iBAAiB,QAAsD;CACrF,OAAO,OAAO,KAAK,UAAU;EAC3B,IAAI,CAAC,OAAO,OAAO,QAAQ,GAAG,GAAG,MAAM,IAAI,MAAM,2BAA2B,KAAK;EACjF,MAAM,WAAW,OAAO;EACxB,MAAM,SAAS,mBAAmB,UAAU,KAAK,KAAK;EACtD,MAAM,UAAU,cAAc,SAAS,WAAoC,MAAM;EACjF,OAAO;GAAE,SAAS,SAAS;GAAS,MAAM,UAAW,MAAM,aAAa,OAAO;EAAG;CACpF;AACF;;AAGA,eAAe,aAAa,SAAwC;CAClE,IAAI;CACJ,MAAM,SAAS,MAAM,uBAAuB,SAAS,EACnD,UAAU,UAAU;EAClB,UAAU;CACZ,EACF,CAAC;CACD,MAAM,OAAO;CACb,MAAM,OAAO,MAAM,IAAI,SAAS,MAAM,CAAC,CAAC,KAAK;CAC7C,IAAI,YAAY,KAAA,GACd,MAAM,mBAAmB,QAAQ,UAAU,IAAI,MAAM,uBAAuB,EAAE,OAAO,QAAQ,CAAC;CAKhG,OAAO,KACJ,QAAQ,qBAAqB,EAAE,CAAC,CAChC,QAAQ,2CAA2C,EAAE;AAC1D"}

package/dist/reporting/classify.cjs

@@ -0,0 +1,42 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/reporting/classify.ts
+/** How close together clicks on different links of one message must be to count as one walk. */
+const BURST_WINDOW_MS = 5e3;
+const DEFAULT_QUICK_MS = 1e3;
+const SCANNER = /(?<![a-z])(?:(?!cubot)[a-z]*bot|crawler|spider|headlesschrome|phantomjs|barracuda|mimecast|proofpoint|safelinks|symantec|trend ?micro|forcepoint|zscaler|cisco|fortinet|sophos|messagelabs)(?![a-z])|curl\/|wget\/|python|go-http-client|java\/|okhttp/i;
+const DATACENTER = /\b(?:amazon|aws|microsoft|azure|google cloud|digitalocean|ovh|hetzner|linode|akamai connected cloud|vultr|oracle|alibaba|tencent|proofpoint|mimecast|barracuda|forcepoint|zscaler|cisco|fortinet|sophos|trend ?micro|symantec|broadcom)\b/i;
+const GOOGLE_PROXY = /GoogleImageProxy|ggpht\.com/i;
+const human = {
+	machine: false,
+	reason: null
+};
+const machine = (reason) => ({
+	machine: true,
+	reason
+});
+const scanner = (facts) => SCANNER.test(facts.userAgent?.trim() ?? "");
+function classifyOpen(facts, options = {}) {
+	const quickMs = options.quickMs ?? 1e3;
+	const agent = facts.userAgent?.trim() ?? "";
+	if (agent === "Mozilla/5.0" || /apple/i.test(facts.organization ?? "")) return machine("apple_privacy_proxy");
+	if (GOOGLE_PROXY.test(agent)) return facts.sinceDeliveredMs < quickMs ? machine("gmail_prefetch") : human;
+	return scanner(facts) ? machine("scanner") : human;
+}
+function classifyClick(facts, options = {}) {
+	const quickMs = options.quickMs ?? 1e3;
+	if (facts.method === "HEAD") return machine("head_request");
+	if (scanner(facts)) return machine("scanner");
+	if (DATACENTER.test(facts.organization ?? "")) return machine("datacenter");
+	if (facts.linksInBurst >= 3 || facts.linkCount >= 2 && facts.linksInBurst >= facts.linkCount) return machine("link_burst");
+	const quick = facts.sinceDeliveredMs < quickMs;
+	const pair = facts.linksInBurst >= 2;
+	if (quick && pair) return machine("quick+link_pair");
+	return human;
+}
+//#endregion
+exports.BURST_WINDOW_MS = BURST_WINDOW_MS;
+exports.DEFAULT_QUICK_MS = DEFAULT_QUICK_MS;
+exports.classifyClick = classifyClick;
+exports.classifyOpen = classifyOpen;
+
+//# sourceMappingURL=classify.cjs.map

package/dist/reporting/classify.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.cjs","names":[],"sources":["../../src/reporting/classify.ts"],"sourcesContent":["/**\n * Who opened or clicked: a person, or a machine acting on the message without one — the split\n * between human and machine engagement that open and click rates are read through. No single\n * signal decides on its own unless it is strong; weak ones only count together, the way the\n * ESPs that publish their approach describe it (a quick click alone is a person on a phone as\n * often as a scanner). Every verdict names the rule that made it, and the request's user agent and\n * network are stored beside it, so the rules can be revisited against history.\n *\n * Strong, alone enough:\n * - `scanner`: a security gateway or link checker announcing itself (Barracuda, Mimecast,\n *   Proofpoint, Safe Links, curl, a headless browser…);\n * - `datacenter` (clicks): the request came from a cloud or security vendor's network (AWS,\n *   Azure, Google Cloud, Proofpoint…), where people do not browse — Microsoft Defender detonates\n *   links from Azure. Not Cloudflare, Akamai or Fastly: iCloud Private Relay egresses there. Not\n *   for opens: Gmail's, Outlook's and Yahoo's image proxies fetch from their own networks when\n *   the person opens the message;\n * - `apple_privacy_proxy` (opens): Apple Mail Privacy Protection, which fetches every image on\n *   delivery through Apple's proxies with the bare `Mozilla/5.0` user agent, read or not;\n * - `head_request` (clicks): a person's click is a GET;\n * - `link_burst` (clicks): three or more different links of one message within a few seconds, or\n *   every link of it — the way a scanner walks a message. Earlier clicks of the burst are\n *   reclassified too (see `recordClick`).\n *\n * Weak, machine only together:\n * - `quick`: within `quickMs` of delivery (1 s by default, `emails.tracking.quickClickMs`);\n * - `link_pair`: another link of the same message clicked within a few seconds.\n *\n * Gmail's image proxy fetches when the person opens the message, so its opens count as human —\n * unless it fetched within `quickMs` of delivery (`gmail_prefetch`).\n */\n\nexport interface Verdict {\n  machine: boolean;\n  reason: string | null;\n}\n\nexport interface RequestFacts {\n  method: string;\n  userAgent: string | null;\n  /** Cloudflare's `request.cf.asOrganization`: who owns the address the request came from. */\n  organization: string | null;\n  /** Milliseconds between delivering the message and this request. */\n  sinceDeliveredMs: number;\n}\n\nexport interface ClassifyOptions {\n  /** A request this soon after delivery is a weak machine signal; 1000 ms by default. */\n  quickMs?: number;\n}\n\nexport interface ClickFacts extends RequestFacts {\n  /** The different links of the message clicked within `BURST_WINDOW_MS`, this one included. */\n  linksInBurst: number;\n  /** How many tracked links the message has. */\n  linkCount: number;\n}\n\n/** How close together clicks on different links of one message must be to count as one walk. */\nexport const BURST_WINDOW_MS = 5_000;\nexport const DEFAULT_QUICK_MS = 1_000;\n\n// Whole words only: \"San Francisco\" is not Cisco, a CUBOT phone is not a bot\nconst SCANNER =\n  /(?<![a-z])(?:(?!cubot)[a-z]*bot|crawler|spider|headlesschrome|phantomjs|barracuda|mimecast|proofpoint|safelinks|symantec|trend ?micro|forcepoint|zscaler|cisco|fortinet|sophos|messagelabs)(?![a-z])|curl\\/|wget\\/|python|go-http-client|java\\/|okhttp/i;\nconst DATACENTER =\n  /\\b(?:amazon|aws|microsoft|azure|google cloud|digitalocean|ovh|hetzner|linode|akamai connected cloud|vultr|oracle|alibaba|tencent|proofpoint|mimecast|barracuda|forcepoint|zscaler|cisco|fortinet|sophos|trend ?micro|symantec|broadcom)\\b/i;\nconst GOOGLE_PROXY = /GoogleImageProxy|ggpht\\.com/i;\n\nconst human: Verdict = { machine: false, reason: null };\nconst machine = (reason: string): Verdict => ({ machine: true, reason });\n\nconst scanner = (facts: RequestFacts) => SCANNER.test(facts.userAgent?.trim() ?? '');\n\nexport function classifyOpen(facts: RequestFacts, options: ClassifyOptions = {}): Verdict {\n  const quickMs = options.quickMs ?? DEFAULT_QUICK_MS;\n  const agent = facts.userAgent?.trim() ?? '';\n  if (agent === 'Mozilla/5.0' || /apple/i.test(facts.organization ?? '')) {\n    return machine('apple_privacy_proxy');\n  }\n  if (GOOGLE_PROXY.test(agent)) {\n    return facts.sinceDeliveredMs < quickMs ? machine('gmail_prefetch') : human;\n  }\n  return scanner(facts) ? machine('scanner') : human;\n}\n\nexport function classifyClick(facts: ClickFacts, options: ClassifyOptions = {}): Verdict {\n  const quickMs = options.quickMs ?? DEFAULT_QUICK_MS;\n  if (facts.method === 'HEAD') return machine('head_request');\n  if (scanner(facts)) return machine('scanner');\n  if (DATACENTER.test(facts.organization ?? '')) return machine('datacenter');\n  if (facts.linksInBurst >= 3 || (facts.linkCount >= 2 && facts.linksInBurst >= facts.linkCount)) {\n    return machine('link_burst');\n  }\n  const quick = facts.sinceDeliveredMs < quickMs;\n  const pair = facts.linksInBurst >= 2;\n  if (quick && pair) return machine('quick+link_pair');\n  return human;\n}\n"],"mappings":";;;AA0DA,MAAa,kBAAkB;AAC/B,MAAa,mBAAmB;AAGhC,MAAM,UACJ;AACF,MAAM,aACJ;AACF,MAAM,eAAe;AAErB,MAAM,QAAiB;CAAE,SAAS;CAAO,QAAQ;AAAK;AACtD,MAAM,WAAW,YAA6B;CAAE,SAAS;CAAM;AAAO;AAEtE,MAAM,WAAW,UAAwB,QAAQ,KAAK,MAAM,WAAW,KAAK,KAAK,EAAE;AAEnF,SAAgB,aAAa,OAAqB,UAA2B,CAAC,GAAY;CACxF,MAAM,UAAU,QAAQ,WAAA;CACxB,MAAM,QAAQ,MAAM,WAAW,KAAK,KAAK;CACzC,IAAI,UAAU,iBAAiB,SAAS,KAAK,MAAM,gBAAgB,EAAE,GACnE,OAAO,QAAQ,qBAAqB;CAEtC,IAAI,aAAa,KAAK,KAAK,GACzB,OAAO,MAAM,mBAAmB,UAAU,QAAQ,gBAAgB,IAAI;CAExE,OAAO,QAAQ,KAAK,IAAI,QAAQ,SAAS,IAAI;AAC/C;AAEA,SAAgB,cAAc,OAAmB,UAA2B,CAAC,GAAY;CACvF,MAAM,UAAU,QAAQ,WAAA;CACxB,IAAI,MAAM,WAAW,QAAQ,OAAO,QAAQ,cAAc;CAC1D,IAAI,QAAQ,KAAK,GAAG,OAAO,QAAQ,SAAS;CAC5C,IAAI,WAAW,KAAK,MAAM,gBAAgB,EAAE,GAAG,OAAO,QAAQ,YAAY;CAC1E,IAAI,MAAM,gBAAgB,KAAM,MAAM,aAAa,KAAK,MAAM,gBAAgB,MAAM,WAClF,OAAO,QAAQ,YAAY;CAE7B,MAAM,QAAQ,MAAM,mBAAmB;CACvC,MAAM,OAAO,MAAM,gBAAgB;CACnC,IAAI,SAAS,MAAM,OAAO,QAAQ,iBAAiB;CACnD,OAAO;AACT"}

package/dist/reporting/classify.d.cts

@@ -0,0 +1,60 @@
+//#region src/reporting/classify.d.ts
+/**
+ * Who opened or clicked: a person, or a machine acting on the message without one — the split
+ * between human and machine engagement that open and click rates are read through. No single
+ * signal decides on its own unless it is strong; weak ones only count together, the way the
+ * ESPs that publish their approach describe it (a quick click alone is a person on a phone as
+ * often as a scanner). Every verdict names the rule that made it, and the request's user agent and
+ * network are stored beside it, so the rules can be revisited against history.
+ *
+ * Strong, alone enough:
+ * - `scanner`: a security gateway or link checker announcing itself (Barracuda, Mimecast,
+ *   Proofpoint, Safe Links, curl, a headless browser…);
+ * - `datacenter` (clicks): the request came from a cloud or security vendor's network (AWS,
+ *   Azure, Google Cloud, Proofpoint…), where people do not browse — Microsoft Defender detonates
+ *   links from Azure. Not Cloudflare, Akamai or Fastly: iCloud Private Relay egresses there. Not
+ *   for opens: Gmail's, Outlook's and Yahoo's image proxies fetch from their own networks when
+ *   the person opens the message;
+ * - `apple_privacy_proxy` (opens): Apple Mail Privacy Protection, which fetches every image on
+ *   delivery through Apple's proxies with the bare `Mozilla/5.0` user agent, read or not;
+ * - `head_request` (clicks): a person's click is a GET;
+ * - `link_burst` (clicks): three or more different links of one message within a few seconds, or
+ *   every link of it — the way a scanner walks a message. Earlier clicks of the burst are
+ *   reclassified too (see `recordClick`).
+ *
+ * Weak, machine only together:
+ * - `quick`: within `quickMs` of delivery (1 s by default, `emails.tracking.quickClickMs`);
+ * - `link_pair`: another link of the same message clicked within a few seconds.
+ *
+ * Gmail's image proxy fetches when the person opens the message, so its opens count as human —
+ * unless it fetched within `quickMs` of delivery (`gmail_prefetch`).
+ */
+export interface Verdict {
+  machine: boolean;
+  reason: string | null;
+}
+export interface RequestFacts {
+  method: string;
+  userAgent: string | null;
+  /** Cloudflare's `request.cf.asOrganization`: who owns the address the request came from. */
+  organization: string | null;
+  /** Milliseconds between delivering the message and this request. */
+  sinceDeliveredMs: number;
+}
+export interface ClassifyOptions {
+  /** A request this soon after delivery is a weak machine signal; 1000 ms by default. */
+  quickMs?: number;
+}
+export interface ClickFacts extends RequestFacts {
+  /** The different links of the message clicked within `BURST_WINDOW_MS`, this one included. */
+  linksInBurst: number;
+  /** How many tracked links the message has. */
+  linkCount: number;
+}
+/** How close together clicks on different links of one message must be to count as one walk. */
+export declare const BURST_WINDOW_MS = 5000;
+export declare const DEFAULT_QUICK_MS = 1000;
+export declare function classifyOpen(facts: RequestFacts, options?: ClassifyOptions): Verdict;
+export declare function classifyClick(facts: ClickFacts, options?: ClassifyOptions): Verdict;
+//#endregion
+//# sourceMappingURL=classify.d.cts.map

package/dist/reporting/classify.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.d.cts","names":[],"sources":["../../src/reporting/classify.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+BiB;EACf;EACA;;iBAGe;EACf;EACA;;EAEA;;EAEA;;iBAGe;;EAEf;;iBAGe,mBAAmB;;EAElC;;EAEA;;;qBAIW;qBACA;wBAcG,aAAa,OAAO,cAAc,UAAS,kBAAuB;wBAYlE,cAAc,OAAO,YAAY,UAAS,kBAAuB"}

package/dist/reporting/classify.d.mts

@@ -0,0 +1,60 @@
+//#region src/reporting/classify.d.ts
+/**
+ * Who opened or clicked: a person, or a machine acting on the message without one — the split
+ * between human and machine engagement that open and click rates are read through. No single
+ * signal decides on its own unless it is strong; weak ones only count together, the way the
+ * ESPs that publish their approach describe it (a quick click alone is a person on a phone as
+ * often as a scanner). Every verdict names the rule that made it, and the request's user agent and
+ * network are stored beside it, so the rules can be revisited against history.
+ *
+ * Strong, alone enough:
+ * - `scanner`: a security gateway or link checker announcing itself (Barracuda, Mimecast,
+ *   Proofpoint, Safe Links, curl, a headless browser…);
+ * - `datacenter` (clicks): the request came from a cloud or security vendor's network (AWS,
+ *   Azure, Google Cloud, Proofpoint…), where people do not browse — Microsoft Defender detonates
+ *   links from Azure. Not Cloudflare, Akamai or Fastly: iCloud Private Relay egresses there. Not
+ *   for opens: Gmail's, Outlook's and Yahoo's image proxies fetch from their own networks when
+ *   the person opens the message;
+ * - `apple_privacy_proxy` (opens): Apple Mail Privacy Protection, which fetches every image on
+ *   delivery through Apple's proxies with the bare `Mozilla/5.0` user agent, read or not;
+ * - `head_request` (clicks): a person's click is a GET;
+ * - `link_burst` (clicks): three or more different links of one message within a few seconds, or
+ *   every link of it — the way a scanner walks a message. Earlier clicks of the burst are
+ *   reclassified too (see `recordClick`).
+ *
+ * Weak, machine only together:
+ * - `quick`: within `quickMs` of delivery (1 s by default, `emails.tracking.quickClickMs`);
+ * - `link_pair`: another link of the same message clicked within a few seconds.
+ *
+ * Gmail's image proxy fetches when the person opens the message, so its opens count as human —
+ * unless it fetched within `quickMs` of delivery (`gmail_prefetch`).
+ */
+export interface Verdict {
+  machine: boolean;
+  reason: string | null;
+}
+export interface RequestFacts {
+  method: string;
+  userAgent: string | null;
+  /** Cloudflare's `request.cf.asOrganization`: who owns the address the request came from. */
+  organization: string | null;
+  /** Milliseconds between delivering the message and this request. */
+  sinceDeliveredMs: number;
+}
+export interface ClassifyOptions {
+  /** A request this soon after delivery is a weak machine signal; 1000 ms by default. */
+  quickMs?: number;
+}
+export interface ClickFacts extends RequestFacts {
+  /** The different links of the message clicked within `BURST_WINDOW_MS`, this one included. */
+  linksInBurst: number;
+  /** How many tracked links the message has. */
+  linkCount: number;
+}
+/** How close together clicks on different links of one message must be to count as one walk. */
+export declare const BURST_WINDOW_MS = 5000;
+export declare const DEFAULT_QUICK_MS = 1000;
+export declare function classifyOpen(facts: RequestFacts, options?: ClassifyOptions): Verdict;
+export declare function classifyClick(facts: ClickFacts, options?: ClassifyOptions): Verdict;
+//#endregion
+//# sourceMappingURL=classify.d.mts.map

package/dist/reporting/classify.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.d.mts","names":[],"sources":["../../src/reporting/classify.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+BiB;EACf;EACA;;iBAGe;EACf;EACA;;EAEA;;EAEA;;iBAGe;;EAEf;;iBAGe,mBAAmB;;EAElC;;EAEA;;;qBAIW;qBACA;wBAcG,aAAa,OAAO,cAAc,UAAS,kBAAuB;wBAYlE,cAAc,OAAO,YAAY,UAAS,kBAAuB"}

package/dist/reporting/classify.mjs

@@ -0,0 +1,38 @@
+//#region src/reporting/classify.ts
+/** How close together clicks on different links of one message must be to count as one walk. */
+const BURST_WINDOW_MS = 5e3;
+const DEFAULT_QUICK_MS = 1e3;
+const SCANNER = /(?<![a-z])(?:(?!cubot)[a-z]*bot|crawler|spider|headlesschrome|phantomjs|barracuda|mimecast|proofpoint|safelinks|symantec|trend ?micro|forcepoint|zscaler|cisco|fortinet|sophos|messagelabs)(?![a-z])|curl\/|wget\/|python|go-http-client|java\/|okhttp/i;
+const DATACENTER = /\b(?:amazon|aws|microsoft|azure|google cloud|digitalocean|ovh|hetzner|linode|akamai connected cloud|vultr|oracle|alibaba|tencent|proofpoint|mimecast|barracuda|forcepoint|zscaler|cisco|fortinet|sophos|trend ?micro|symantec|broadcom)\b/i;
+const GOOGLE_PROXY = /GoogleImageProxy|ggpht\.com/i;
+const human = {
+	machine: false,
+	reason: null
+};
+const machine = (reason) => ({
+	machine: true,
+	reason
+});
+const scanner = (facts) => SCANNER.test(facts.userAgent?.trim() ?? "");
+function classifyOpen(facts, options = {}) {
+	const quickMs = options.quickMs ?? 1e3;
+	const agent = facts.userAgent?.trim() ?? "";
+	if (agent === "Mozilla/5.0" || /apple/i.test(facts.organization ?? "")) return machine("apple_privacy_proxy");
+	if (GOOGLE_PROXY.test(agent)) return facts.sinceDeliveredMs < quickMs ? machine("gmail_prefetch") : human;
+	return scanner(facts) ? machine("scanner") : human;
+}
+function classifyClick(facts, options = {}) {
+	const quickMs = options.quickMs ?? 1e3;
+	if (facts.method === "HEAD") return machine("head_request");
+	if (scanner(facts)) return machine("scanner");
+	if (DATACENTER.test(facts.organization ?? "")) return machine("datacenter");
+	if (facts.linksInBurst >= 3 || facts.linkCount >= 2 && facts.linksInBurst >= facts.linkCount) return machine("link_burst");
+	const quick = facts.sinceDeliveredMs < quickMs;
+	const pair = facts.linksInBurst >= 2;
+	if (quick && pair) return machine("quick+link_pair");
+	return human;
+}
+//#endregion
+export { BURST_WINDOW_MS, DEFAULT_QUICK_MS, classifyClick, classifyOpen };
+
+//# sourceMappingURL=classify.mjs.map

package/dist/reporting/classify.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.mjs","names":[],"sources":["../../src/reporting/classify.ts"],"sourcesContent":["/**\n * Who opened or clicked: a person, or a machine acting on the message without one — the split\n * between human and machine engagement that open and click rates are read through. No single\n * signal decides on its own unless it is strong; weak ones only count together, the way the\n * ESPs that publish their approach describe it (a quick click alone is a person on a phone as\n * often as a scanner). Every verdict names the rule that made it, and the request's user agent and\n * network are stored beside it, so the rules can be revisited against history.\n *\n * Strong, alone enough:\n * - `scanner`: a security gateway or link checker announcing itself (Barracuda, Mimecast,\n *   Proofpoint, Safe Links, curl, a headless browser…);\n * - `datacenter` (clicks): the request came from a cloud or security vendor's network (AWS,\n *   Azure, Google Cloud, Proofpoint…), where people do not browse — Microsoft Defender detonates\n *   links from Azure. Not Cloudflare, Akamai or Fastly: iCloud Private Relay egresses there. Not\n *   for opens: Gmail's, Outlook's and Yahoo's image proxies fetch from their own networks when\n *   the person opens the message;\n * - `apple_privacy_proxy` (opens): Apple Mail Privacy Protection, which fetches every image on\n *   delivery through Apple's proxies with the bare `Mozilla/5.0` user agent, read or not;\n * - `head_request` (clicks): a person's click is a GET;\n * - `link_burst` (clicks): three or more different links of one message within a few seconds, or\n *   every link of it — the way a scanner walks a message. Earlier clicks of the burst are\n *   reclassified too (see `recordClick`).\n *\n * Weak, machine only together:\n * - `quick`: within `quickMs` of delivery (1 s by default, `emails.tracking.quickClickMs`);\n * - `link_pair`: another link of the same message clicked within a few seconds.\n *\n * Gmail's image proxy fetches when the person opens the message, so its opens count as human —\n * unless it fetched within `quickMs` of delivery (`gmail_prefetch`).\n */\n\nexport interface Verdict {\n  machine: boolean;\n  reason: string | null;\n}\n\nexport interface RequestFacts {\n  method: string;\n  userAgent: string | null;\n  /** Cloudflare's `request.cf.asOrganization`: who owns the address the request came from. */\n  organization: string | null;\n  /** Milliseconds between delivering the message and this request. */\n  sinceDeliveredMs: number;\n}\n\nexport interface ClassifyOptions {\n  /** A request this soon after delivery is a weak machine signal; 1000 ms by default. */\n  quickMs?: number;\n}\n\nexport interface ClickFacts extends RequestFacts {\n  /** The different links of the message clicked within `BURST_WINDOW_MS`, this one included. */\n  linksInBurst: number;\n  /** How many tracked links the message has. */\n  linkCount: number;\n}\n\n/** How close together clicks on different links of one message must be to count as one walk. */\nexport const BURST_WINDOW_MS = 5_000;\nexport const DEFAULT_QUICK_MS = 1_000;\n\n// Whole words only: \"San Francisco\" is not Cisco, a CUBOT phone is not a bot\nconst SCANNER =\n  /(?<![a-z])(?:(?!cubot)[a-z]*bot|crawler|spider|headlesschrome|phantomjs|barracuda|mimecast|proofpoint|safelinks|symantec|trend ?micro|forcepoint|zscaler|cisco|fortinet|sophos|messagelabs)(?![a-z])|curl\\/|wget\\/|python|go-http-client|java\\/|okhttp/i;\nconst DATACENTER =\n  /\\b(?:amazon|aws|microsoft|azure|google cloud|digitalocean|ovh|hetzner|linode|akamai connected cloud|vultr|oracle|alibaba|tencent|proofpoint|mimecast|barracuda|forcepoint|zscaler|cisco|fortinet|sophos|trend ?micro|symantec|broadcom)\\b/i;\nconst GOOGLE_PROXY = /GoogleImageProxy|ggpht\\.com/i;\n\nconst human: Verdict = { machine: false, reason: null };\nconst machine = (reason: string): Verdict => ({ machine: true, reason });\n\nconst scanner = (facts: RequestFacts) => SCANNER.test(facts.userAgent?.trim() ?? '');\n\nexport function classifyOpen(facts: RequestFacts, options: ClassifyOptions = {}): Verdict {\n  const quickMs = options.quickMs ?? DEFAULT_QUICK_MS;\n  const agent = facts.userAgent?.trim() ?? '';\n  if (agent === 'Mozilla/5.0' || /apple/i.test(facts.organization ?? '')) {\n    return machine('apple_privacy_proxy');\n  }\n  if (GOOGLE_PROXY.test(agent)) {\n    return facts.sinceDeliveredMs < quickMs ? machine('gmail_prefetch') : human;\n  }\n  return scanner(facts) ? machine('scanner') : human;\n}\n\nexport function classifyClick(facts: ClickFacts, options: ClassifyOptions = {}): Verdict {\n  const quickMs = options.quickMs ?? DEFAULT_QUICK_MS;\n  if (facts.method === 'HEAD') return machine('head_request');\n  if (scanner(facts)) return machine('scanner');\n  if (DATACENTER.test(facts.organization ?? '')) return machine('datacenter');\n  if (facts.linksInBurst >= 3 || (facts.linkCount >= 2 && facts.linksInBurst >= facts.linkCount)) {\n    return machine('link_burst');\n  }\n  const quick = facts.sinceDeliveredMs < quickMs;\n  const pair = facts.linksInBurst >= 2;\n  if (quick && pair) return machine('quick+link_pair');\n  return human;\n}\n"],"mappings":";;AA0DA,MAAa,kBAAkB;AAC/B,MAAa,mBAAmB;AAGhC,MAAM,UACJ;AACF,MAAM,aACJ;AACF,MAAM,eAAe;AAErB,MAAM,QAAiB;CAAE,SAAS;CAAO,QAAQ;AAAK;AACtD,MAAM,WAAW,YAA6B;CAAE,SAAS;CAAM;AAAO;AAEtE,MAAM,WAAW,UAAwB,QAAQ,KAAK,MAAM,WAAW,KAAK,KAAK,EAAE;AAEnF,SAAgB,aAAa,OAAqB,UAA2B,CAAC,GAAY;CACxF,MAAM,UAAU,QAAQ,WAAA;CACxB,MAAM,QAAQ,MAAM,WAAW,KAAK,KAAK;CACzC,IAAI,UAAU,iBAAiB,SAAS,KAAK,MAAM,gBAAgB,EAAE,GACnE,OAAO,QAAQ,qBAAqB;CAEtC,IAAI,aAAa,KAAK,KAAK,GACzB,OAAO,MAAM,mBAAmB,UAAU,QAAQ,gBAAgB,IAAI;CAExE,OAAO,QAAQ,KAAK,IAAI,QAAQ,SAAS,IAAI;AAC/C;AAEA,SAAgB,cAAc,OAAmB,UAA2B,CAAC,GAAY;CACvF,MAAM,UAAU,QAAQ,WAAA;CACxB,IAAI,MAAM,WAAW,QAAQ,OAAO,QAAQ,cAAc;CAC1D,IAAI,QAAQ,KAAK,GAAG,OAAO,QAAQ,SAAS;CAC5C,IAAI,WAAW,KAAK,MAAM,gBAAgB,EAAE,GAAG,OAAO,QAAQ,YAAY;CAC1E,IAAI,MAAM,gBAAgB,KAAM,MAAM,aAAa,KAAK,MAAM,gBAAgB,MAAM,WAClF,OAAO,QAAQ,YAAY;CAE7B,MAAM,QAAQ,MAAM,mBAAmB;CACvC,MAAM,OAAO,MAAM,gBAAgB;CACnC,IAAI,SAAS,MAAM,OAAO,QAAQ,iBAAiB;CACnD,OAAO;AACT"}

package/dist/reporting/observer.cjs

@@ -0,0 +1,63 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/reporting/observer.ts
+/**
+* The observer journeyWorker installs when the store keeps reporting: every node arrival, copy
+* and outcome recorded through `store.reporting`.
+*
+* A copy is recorded before it goes out, so its id can travel with it: with a tracking origin,
+* an email's links become `<origin>/t/c/<message>/<position>` and an open pixel
+* `<origin>/t/o/<message>` (served by the Worker, ./tracking.ts), and a push carries
+* `message_id` in its payload for the app to report the tap (`JourneyClient.messageOpened`),
+* plus `delivered_url` / `opened_url` for a client that reports straight to the Worker.
+* The links are recorded when the sender commits the rewritten email, before it goes out.
+*/
+function reportingObserver(reporting, origin) {
+	const base = origin?.replace(/\/$/, "");
+	return {
+		started: (event) => reporting.instanceStarted(event),
+		nodeReached: (event) => reporting.nodeReached(event),
+		async messagePrepared(message) {
+			const id = await reporting.recordMessage({
+				idempotencyKey: message.idempotencyKey,
+				workflow: message.workflow,
+				instanceId: message.instanceId,
+				nodeId: message.nodeId,
+				template: message.template,
+				channel: channelOf(message),
+				userId: message.userId,
+				sentAt: Date.now()
+			});
+			if (message.channel === "email" && base !== void 0) {
+				const urls = [];
+				return {
+					link: (url) => {
+						urls.push(url);
+						return `${base}/t/c/${id}/${urls.length - 1}`;
+					},
+					pixel: `${base}/t/o/${id}`,
+					commit: () => reporting.recordLinks(id, urls)
+				};
+			}
+			if (message.channel === "push") return { data: {
+				message_id: id,
+				...base === void 0 ? {} : {
+					delivered_url: `${base}/t/d/${id}`,
+					opened_url: `${base}/t/p/${id}`
+				}
+			} };
+		},
+		async messageSent(message, result) {
+			await reporting.settleMessage(message.idempotencyKey, result, Date.now());
+		},
+		finished: (event) => reporting.instanceFinished(event)
+	};
+}
+/** Where the copy lands — the Studio's metric channel: a push is reported per platform. */
+function channelOf(message) {
+	if (message.channel !== "push") return message.channel;
+	return `push_${message.device?.platform ?? "unknown"}`;
+}
+//#endregion
+exports.reportingObserver = reportingObserver;
+
+//# sourceMappingURL=observer.cjs.map

package/dist/reporting/observer.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"observer.cjs","names":[],"sources":["../../src/reporting/observer.ts"],"sourcesContent":["import type { JourneyObserver, OutboundMessage } from '../engine';\nimport type { JourneyReporting } from '../store';\n\n/**\n * The observer journeyWorker installs when the store keeps reporting: every node arrival, copy\n * and outcome recorded through `store.reporting`.\n *\n * A copy is recorded before it goes out, so its id can travel with it: with a tracking origin,\n * an email's links become `<origin>/t/c/<message>/<position>` and an open pixel\n * `<origin>/t/o/<message>` (served by the Worker, ./tracking.ts), and a push carries\n * `message_id` in its payload for the app to report the tap (`JourneyClient.messageOpened`),\n * plus `delivered_url` / `opened_url` for a client that reports straight to the Worker.\n * The links are recorded when the sender commits the rewritten email, before it goes out.\n */\nexport function reportingObserver(\n  reporting: JourneyReporting,\n  origin: string | undefined\n): JourneyObserver {\n  const base = origin?.replace(/\\/$/, '');\n\n  return {\n    started: (event) => reporting.instanceStarted(event),\n\n    nodeReached: (event) => reporting.nodeReached(event),\n\n    async messagePrepared(message) {\n      const id = await reporting.recordMessage({\n        idempotencyKey: message.idempotencyKey,\n        workflow: message.workflow,\n        instanceId: message.instanceId,\n        nodeId: message.nodeId,\n        template: message.template,\n        channel: channelOf(message),\n        userId: message.userId,\n        sentAt: Date.now(),\n      });\n      if (message.channel === 'email' && base !== undefined) {\n        const urls: string[] = [];\n        return {\n          link: (url) => {\n            urls.push(url);\n            return `${base}/t/c/${id}/${urls.length - 1}`;\n          },\n          pixel: `${base}/t/o/${id}`,\n          // Before the transport takes it, so no click can reach a link not yet recorded\n          commit: () => reporting.recordLinks(id, urls),\n        };\n      }\n      if (message.channel === 'push') {\n        // The app reports the tap with `message_id`; a client that can reach the Worker on its\n        // own (iOS's notification service extension, a browser's service worker) posts to these\n        return {\n          data: {\n            message_id: id,\n            ...(base === undefined\n              ? {}\n              : { delivered_url: `${base}/t/d/${id}`, opened_url: `${base}/t/p/${id}` }),\n          },\n        };\n      }\n      return undefined;\n    },\n\n    async messageSent(message, result) {\n      await reporting.settleMessage(message.idempotencyKey, result, Date.now());\n    },\n\n    finished: (event) => reporting.instanceFinished(event),\n  };\n}\n\n/** Where the copy lands — the Studio's metric channel: a push is reported per platform. */\nfunction channelOf(message: OutboundMessage): string {\n  if (message.channel !== 'push') return message.channel;\n  return `push_${message.device?.platform ?? 'unknown'}`;\n}\n"],"mappings":";;;;;;;;;;;;;AAcA,SAAgB,kBACd,WACA,QACiB;CACjB,MAAM,OAAO,QAAQ,QAAQ,OAAO,EAAE;CAEtC,OAAO;EACL,UAAU,UAAU,UAAU,gBAAgB,KAAK;EAEnD,cAAc,UAAU,UAAU,YAAY,KAAK;EAEnD,MAAM,gBAAgB,SAAS;GAC7B,MAAM,KAAK,MAAM,UAAU,cAAc;IACvC,gBAAgB,QAAQ;IACxB,UAAU,QAAQ;IAClB,YAAY,QAAQ;IACpB,QAAQ,QAAQ;IAChB,UAAU,QAAQ;IAClB,SAAS,UAAU,OAAO;IAC1B,QAAQ,QAAQ;IAChB,QAAQ,KAAK,IAAI;GACnB,CAAC;GACD,IAAI,QAAQ,YAAY,WAAW,SAAS,KAAA,GAAW;IACrD,MAAM,OAAiB,CAAC;IACxB,OAAO;KACL,OAAO,QAAQ;MACb,KAAK,KAAK,GAAG;MACb,OAAO,GAAG,KAAK,OAAO,GAAG,GAAG,KAAK,SAAS;KAC5C;KACA,OAAO,GAAG,KAAK,OAAO;KAEtB,cAAc,UAAU,YAAY,IAAI,IAAI;IAC9C;GACF;GACA,IAAI,QAAQ,YAAY,QAGtB,OAAO,EACL,MAAM;IACJ,YAAY;IACZ,GAAI,SAAS,KAAA,IACT,CAAC,IACD;KAAE,eAAe,GAAG,KAAK,OAAO;KAAM,YAAY,GAAG,KAAK,OAAO;IAAK;GAC5E,EACF;EAGJ;EAEA,MAAM,YAAY,SAAS,QAAQ;GACjC,MAAM,UAAU,cAAc,QAAQ,gBAAgB,QAAQ,KAAK,IAAI,CAAC;EAC1E;EAEA,WAAW,UAAU,UAAU,iBAAiB,KAAK;CACvD;AACF;;AAGA,SAAS,UAAU,SAAkC;CACnD,IAAI,QAAQ,YAAY,QAAQ,OAAO,QAAQ;CAC/C,OAAO,QAAQ,QAAQ,QAAQ,YAAY;AAC7C"}

package/dist/reporting/observer.d.cts

@@ -0,0 +1,18 @@
+import { JourneyObserver } from "../engine/ports.cjs";
+import "../engine/index.cjs";
+import { JourneyReporting } from "../store/index.cjs";
+//#region src/reporting/observer.d.ts
+/**
+ * The observer journeyWorker installs when the store keeps reporting: every node arrival, copy
+ * and outcome recorded through `store.reporting`.
+ *
+ * A copy is recorded before it goes out, so its id can travel with it: with a tracking origin,
+ * an email's links become `<origin>/t/c/<message>/<position>` and an open pixel
+ * `<origin>/t/o/<message>` (served by the Worker, ./tracking.ts), and a push carries
+ * `message_id` in its payload for the app to report the tap (`JourneyClient.messageOpened`),
+ * plus `delivered_url` / `opened_url` for a client that reports straight to the Worker.
+ * The links are recorded when the sender commits the rewritten email, before it goes out.
+ */
+export declare function reportingObserver(reporting: JourneyReporting, origin: string | undefined): JourneyObserver;
+//#endregion
+//# sourceMappingURL=observer.d.cts.map

package/dist/reporting/observer.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observer.d.cts","names":[],"sources":["../../src/reporting/observer.ts"],"mappings":";;;;;;;;;;;;;;;wBAcgB,kBACd,WAAW,kBACX,6BACC"}

package/dist/reporting/observer.d.mts

@@ -0,0 +1,18 @@
+import { JourneyObserver } from "../engine/ports.mjs";
+import "../engine/index.mjs";
+import { JourneyReporting } from "../store/index.mjs";
+//#region src/reporting/observer.d.ts
+/**
+ * The observer journeyWorker installs when the store keeps reporting: every node arrival, copy
+ * and outcome recorded through `store.reporting`.
+ *
+ * A copy is recorded before it goes out, so its id can travel with it: with a tracking origin,
+ * an email's links become `<origin>/t/c/<message>/<position>` and an open pixel
+ * `<origin>/t/o/<message>` (served by the Worker, ./tracking.ts), and a push carries
+ * `message_id` in its payload for the app to report the tap (`JourneyClient.messageOpened`),
+ * plus `delivered_url` / `opened_url` for a client that reports straight to the Worker.
+ * The links are recorded when the sender commits the rewritten email, before it goes out.
+ */
+export declare function reportingObserver(reporting: JourneyReporting, origin: string | undefined): JourneyObserver;
+//#endregion
+//# sourceMappingURL=observer.d.mts.map

package/dist/reporting/observer.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observer.d.mts","names":[],"sources":["../../src/reporting/observer.ts"],"mappings":";;;;;;;;;;;;;;;wBAcgB,kBACd,WAAW,kBACX,6BACC"}

package/dist/reporting/observer.mjs

@@ -0,0 +1,62 @@
+//#region src/reporting/observer.ts
+/**
+* The observer journeyWorker installs when the store keeps reporting: every node arrival, copy
+* and outcome recorded through `store.reporting`.
+*
+* A copy is recorded before it goes out, so its id can travel with it: with a tracking origin,
+* an email's links become `<origin>/t/c/<message>/<position>` and an open pixel
+* `<origin>/t/o/<message>` (served by the Worker, ./tracking.ts), and a push carries
+* `message_id` in its payload for the app to report the tap (`JourneyClient.messageOpened`),
+* plus `delivered_url` / `opened_url` for a client that reports straight to the Worker.
+* The links are recorded when the sender commits the rewritten email, before it goes out.
+*/
+function reportingObserver(reporting, origin) {
+	const base = origin?.replace(/\/$/, "");
+	return {
+		started: (event) => reporting.instanceStarted(event),
+		nodeReached: (event) => reporting.nodeReached(event),
+		async messagePrepared(message) {
+			const id = await reporting.recordMessage({
+				idempotencyKey: message.idempotencyKey,
+				workflow: message.workflow,
+				instanceId: message.instanceId,
+				nodeId: message.nodeId,
+				template: message.template,
+				channel: channelOf(message),
+				userId: message.userId,
+				sentAt: Date.now()
+			});
+			if (message.channel === "email" && base !== void 0) {
+				const urls = [];
+				return {
+					link: (url) => {
+						urls.push(url);
+						return `${base}/t/c/${id}/${urls.length - 1}`;
+					},
+					pixel: `${base}/t/o/${id}`,
+					commit: () => reporting.recordLinks(id, urls)
+				};
+			}
+			if (message.channel === "push") return { data: {
+				message_id: id,
+				...base === void 0 ? {} : {
+					delivered_url: `${base}/t/d/${id}`,
+					opened_url: `${base}/t/p/${id}`
+				}
+			} };
+		},
+		async messageSent(message, result) {
+			await reporting.settleMessage(message.idempotencyKey, result, Date.now());
+		},
+		finished: (event) => reporting.instanceFinished(event)
+	};
+}
+/** Where the copy lands — the Studio's metric channel: a push is reported per platform. */
+function channelOf(message) {
+	if (message.channel !== "push") return message.channel;
+	return `push_${message.device?.platform ?? "unknown"}`;
+}
+//#endregion
+export { reportingObserver };
+
+//# sourceMappingURL=observer.mjs.map

package/dist/reporting/observer.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"observer.mjs","names":[],"sources":["../../src/reporting/observer.ts"],"sourcesContent":["import type { JourneyObserver, OutboundMessage } from '../engine';\nimport type { JourneyReporting } from '../store';\n\n/**\n * The observer journeyWorker installs when the store keeps reporting: every node arrival, copy\n * and outcome recorded through `store.reporting`.\n *\n * A copy is recorded before it goes out, so its id can travel with it: with a tracking origin,\n * an email's links become `<origin>/t/c/<message>/<position>` and an open pixel\n * `<origin>/t/o/<message>` (served by the Worker, ./tracking.ts), and a push carries\n * `message_id` in its payload for the app to report the tap (`JourneyClient.messageOpened`),\n * plus `delivered_url` / `opened_url` for a client that reports straight to the Worker.\n * The links are recorded when the sender commits the rewritten email, before it goes out.\n */\nexport function reportingObserver(\n  reporting: JourneyReporting,\n  origin: string | undefined\n): JourneyObserver {\n  const base = origin?.replace(/\\/$/, '');\n\n  return {\n    started: (event) => reporting.instanceStarted(event),\n\n    nodeReached: (event) => reporting.nodeReached(event),\n\n    async messagePrepared(message) {\n      const id = await reporting.recordMessage({\n        idempotencyKey: message.idempotencyKey,\n        workflow: message.workflow,\n        instanceId: message.instanceId,\n        nodeId: message.nodeId,\n        template: message.template,\n        channel: channelOf(message),\n        userId: message.userId,\n        sentAt: Date.now(),\n      });\n      if (message.channel === 'email' && base !== undefined) {\n        const urls: string[] = [];\n        return {\n          link: (url) => {\n            urls.push(url);\n            return `${base}/t/c/${id}/${urls.length - 1}`;\n          },\n          pixel: `${base}/t/o/${id}`,\n          // Before the transport takes it, so no click can reach a link not yet recorded\n          commit: () => reporting.recordLinks(id, urls),\n        };\n      }\n      if (message.channel === 'push') {\n        // The app reports the tap with `message_id`; a client that can reach the Worker on its\n        // own (iOS's notification service extension, a browser's service worker) posts to these\n        return {\n          data: {\n            message_id: id,\n            ...(base === undefined\n              ? {}\n              : { delivered_url: `${base}/t/d/${id}`, opened_url: `${base}/t/p/${id}` }),\n          },\n        };\n      }\n      return undefined;\n    },\n\n    async messageSent(message, result) {\n      await reporting.settleMessage(message.idempotencyKey, result, Date.now());\n    },\n\n    finished: (event) => reporting.instanceFinished(event),\n  };\n}\n\n/** Where the copy lands — the Studio's metric channel: a push is reported per platform. */\nfunction channelOf(message: OutboundMessage): string {\n  if (message.channel !== 'push') return message.channel;\n  return `push_${message.device?.platform ?? 'unknown'}`;\n}\n"],"mappings":";;;;;;;;;;;;AAcA,SAAgB,kBACd,WACA,QACiB;CACjB,MAAM,OAAO,QAAQ,QAAQ,OAAO,EAAE;CAEtC,OAAO;EACL,UAAU,UAAU,UAAU,gBAAgB,KAAK;EAEnD,cAAc,UAAU,UAAU,YAAY,KAAK;EAEnD,MAAM,gBAAgB,SAAS;GAC7B,MAAM,KAAK,MAAM,UAAU,cAAc;IACvC,gBAAgB,QAAQ;IACxB,UAAU,QAAQ;IAClB,YAAY,QAAQ;IACpB,QAAQ,QAAQ;IAChB,UAAU,QAAQ;IAClB,SAAS,UAAU,OAAO;IAC1B,QAAQ,QAAQ;IAChB,QAAQ,KAAK,IAAI;GACnB,CAAC;GACD,IAAI,QAAQ,YAAY,WAAW,SAAS,KAAA,GAAW;IACrD,MAAM,OAAiB,CAAC;IACxB,OAAO;KACL,OAAO,QAAQ;MACb,KAAK,KAAK,GAAG;MACb,OAAO,GAAG,KAAK,OAAO,GAAG,GAAG,KAAK,SAAS;KAC5C;KACA,OAAO,GAAG,KAAK,OAAO;KAEtB,cAAc,UAAU,YAAY,IAAI,IAAI;IAC9C;GACF;GACA,IAAI,QAAQ,YAAY,QAGtB,OAAO,EACL,MAAM;IACJ,YAAY;IACZ,GAAI,SAAS,KAAA,IACT,CAAC,IACD;KAAE,eAAe,GAAG,KAAK,OAAO;KAAM,YAAY,GAAG,KAAK,OAAO;IAAK;GAC5E,EACF;EAGJ;EAEA,MAAM,YAAY,SAAS,QAAQ;GACjC,MAAM,UAAU,cAAc,QAAQ,gBAAgB,QAAQ,KAAK,IAAI,CAAC;EAC1E;EAEA,WAAW,UAAU,UAAU,iBAAiB,KAAK;CACvD;AACF;;AAGA,SAAS,UAAU,SAAkC;CACnD,IAAI,QAAQ,YAAY,QAAQ,OAAO,QAAQ;CAC/C,OAAO,QAAQ,QAAQ,QAAQ,YAAY;AAC7C"}