@stetcms/analytics 0.1.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,288 @@
+# @stetcms/analytics
+
+Product analytics for apps built on Stet: pageviews and your own typed events,
+routed through your backend instead of a third-party endpoint.
+
+- No cookies, so no consent banner.
+- No third-party origin in the page, so nothing for a blocker to match on.
+- Readers' addresses and user agents never leave your infrastructure.
+- One tracking plan types the browser calls, validates the server ones, and
+  becomes the event list your content team builds dashboards from.
+
+## Install
+
+```bash
+npm install @stetcms/analytics
+```
+
+## 1. Declare the tracking plan
+
+The plan goes in `stet.config.ts` at the project root, the one file
+`@stetcms/vite` and the `stet` CLI read for everything. Props take any
+[Standard Schema](https://standardschema.dev) validator, so Zod, Valibot and
+ArkType all work.
+
+```ts
+import { defineAnalytics, event } from '@stetcms/analytics';
+import { defineStet } from '@stetcms/config';
+import { z } from 'zod';
+
+export default defineStet({
+  analytics: defineAnalytics({
+    events: {
+      signup: event({ plan: z.enum(['free', 'paid']) }),
+      checkout: {
+        started: event(),
+        completed: event({ total: z.number(), coupon: z.string().optional() }),
+      },
+    },
+  }),
+});
+```
+
+Nested events track under dot-joined names (`checkout.completed`). The file
+carries no secrets: `STET_API_KEY` and `STET_ORIGIN` are read from the
+environment, so it is safe to commit.
+
+## 2. Mount the route
+
+One route in your own app. It validates against the plan, adds what only your
+backend can see, and forwards to Stet with your organization API key.
+
+```ts
+import { createAnalyticsHandler } from '@stetcms/analytics/server';
+import config from '../stet.config';
+
+export const POST = createAnalyticsHandler(config.analytics, {
+  // Called per request: whatever you return is attached to every event in the
+  // batch, and overrules anything the browser claimed.
+  context: async (request) => ({ userId: (await session(request))?.userId }),
+});
+```
+
+## 3. Track from the browser
+
+The client only ever talks to the route above, so it needs no key.
+
+```ts
+import { createAnalytics } from '@stetcms/analytics/client';
+import type config from '../stet.config';
+
+export const analytics = createAnalytics<(typeof config)['analytics']>({
+  endpoint: '/api/analytics',
+});
+
+analytics.track('checkout.completed', { total: 42 });
+```
+
+`track` is typed from the plan: a misspelled name, a missing prop or a wrong
+type fails the build. It never throws and never rejects, so a tracking mistake
+cannot break the page. Events batch and flush every two seconds, when twenty
+are queued, and when the page is hidden or unloaded.
+
+## Pageviews
+
+On a site where every navigation is a real page load — plain HTML, Astro
+without view transitions, Rails, Django — leave `autoPageviews` on its default
+and you are done.
+
+**In a single-page app, turn it off and let your router say what a navigation
+is.** The fallback patches `history.pushState`, which cannot see the
+`replaceState` that routers use for redirects and search-parameter changes, so
+it both misses views and reports the wrong URL for others. Your router already
+knows; ask it.
+
+A repeated view of the same URL counts once either way, so the double-invoked
+effects of React Strict Mode do not inflate anything.
+
+```ts
+export const analytics = createAnalytics<(typeof config)['analytics']>({
+  endpoint: '/api/analytics',
+  autoPageviews: false,
+});
+```
+
+Then mount one of these **at the root**, so every page is counted rather than
+only the routes that happen to import the client.
+
+**Pass the router's URL, never let `pageview()` read `window.location`.** By
+the time your effect or callback runs, the router has advanced and
+`window.location` may not have, so a bare `analytics.pageview()` labels the
+view with the _previous_ page — and the same-URL guard then quietly drops
+every other one. Every snippet below passes it explicitly for that reason.
+
+### TanStack Router
+
+```tsx
+import { useLocation } from '@tanstack/react-router';
+import { useEffect } from 'react';
+
+export function usePageviews() {
+  const location = useLocation();
+  useEffect(() => {
+    analytics.pageview(`${window.location.origin}${location.href}`);
+  }, [location.href]);
+}
+```
+
+### Next.js (App Router)
+
+```tsx
+'use client';
+
+import { usePathname, useSearchParams } from 'next/navigation';
+import { useEffect } from 'react';
+
+export function Pageviews() {
+  const pathname = usePathname();
+  const searchParams = useSearchParams();
+  useEffect(() => {
+    const query = searchParams.toString();
+    analytics.pageview(`${window.location.origin}${pathname}${query === '' ? '' : `?${query}`}`);
+  }, [pathname, searchParams]);
+  return null;
+}
+```
+
+Render it in `app/layout.tsx`. `useSearchParams` opts the subtree into client
+rendering, so wrap it in `<Suspense>` to keep the rest of the layout static.
+
+### React Router
+
+```tsx
+import { useEffect } from 'react';
+import { useLocation } from 'react-router';
+
+export function Pageviews() {
+  const location = useLocation();
+  useEffect(() => {
+    analytics.pageview(`${window.location.origin}${location.pathname}${location.search}`);
+  }, [location.pathname, location.search]);
+  return null;
+}
+```
+
+### SvelteKit
+
+In `+layout.svelte`:
+
+```svelte
+<script>
+  import { afterNavigate } from '$app/navigation';
+  afterNavigate(({ to }) => analytics.pageview(to?.url.href));
+</script>
+```
+
+### Nuxt
+
+In a client-only plugin, `plugins/analytics.client.ts`:
+
+```ts
+export default defineNuxtPlugin(() => {
+  useRouter().afterEach((to) => {
+    analytics.pageview(`${window.location.origin}${to.fullPath}`);
+  });
+});
+```
+
+### Astro
+
+Astro navigations are full page loads, so the default is already correct and
+there is nothing to add. With view transitions enabled the client script runs
+only once, so listen instead — and here a bare call _is_ right, because the
+event fires after the swap, when `window.location` is already the new page:
+
+```ts
+document.addEventListener('astro:page-load', () => analytics.pageview());
+```
+
+## Context vs metadata
+
+Two different trust models, worth keeping straight:
+
+- **`metadata`** is derived by the handler from the request. The browser never
+  sends it and cannot influence it.
+- **`context`** is merged. The browser proposes, and your handler overrules it
+  per key.
+
+So a key your handler does not set stays exactly as the browser sent it, and
+anyone can post whatever they like to your route. **Treat a context key as
+trustworthy only if your handler sets it.** `userId` in the example above is
+safe because the handler resolves it from the session; had it come from the
+browser, it would be a claim rather than a fact.
+
+Returning `undefined` for a key leaves the browser's value in place rather than
+deleting it, so a missing session reads as "unknown". Pass `null` to state
+positively that there is nobody signed in.
+
+## Default metadata
+
+Derived by the handler from the request the browser made to you. The raw
+address and user agent are used and discarded there; only what is listed here
+is forwarded.
+
+| Field                       | From                                                                    |
+| --------------------------- | ----------------------------------------------------------------------- |
+| `country`, `region`, `city` | `request.cf` on Cloudflare, `cf-ipcountry` or `x-vercel-ip-*` elsewhere |
+| `browser`, `os`, `device`   | `sec-ch-ua*` client hints, falling back to the agent string             |
+| `visitor`                   | `SHA-256(date, salt, address, user agent)`, truncated                   |
+
+The visitor digest covers the date, so the same reader is a different id
+tomorrow: uniques are countable within a day and nothing can be joined across
+days, by anyone, including us. `salt` defaults to the request's host, which
+also stops ids being comparable across sites you run.
+
+Traffic that announces itself as automation is answered `200` and discarded,
+because a `4xx` only teaches a crawler to retry.
+
+## API
+
+### `@stetcms/analytics`
+
+`defineAnalytics`, `event`, `validateEvent`, `flattenEvents`, `resolveEvent`,
+`parseClientBatch`, and the types behind them. Isomorphic.
+
+### `@stetcms/analytics/sync`
+
+`syncTrackingPlan(options)` publishes the plan to Stet. Called for you by
+`@stetcms/vite` on dev-server start and at the end of a build, and by
+`stet sync`; you rarely call it yourself.
+
+### `@stetcms/analytics/client`
+
+`createAnalytics(options)` → `{ track, pageview, setContext, flush }`.
+
+| Option          | Default  | Meaning                                    |
+| --------------- | -------- | ------------------------------------------ |
+| `endpoint`      | required | The route you mounted the handler on       |
+| `context`       | `{}`     | Props attached to every batch              |
+| `flushInterval` | `2000`   | Milliseconds a partial batch waits         |
+| `maxBatchSize`  | `20`     | Send immediately once this many are queued |
+| `autoPageviews` | `true`   | Pageviews on load and history navigation   |
+
+### `@stetcms/analytics/server`
+
+`createAnalyticsHandler(plan, options)` → `(request: Request) => Promise<Response>`.
+
+| Option    | Default                       | Meaning                                                          |
+| --------- | ----------------------------- | ---------------------------------------------------------------- |
+| `context` | `{}`                          | Props, or a function of the request, that win over the browser's |
+| `origin`  | `STET_ORIGIN`, then the cloud | Stet deployment to forward to                                    |
+| `apiKey`  | `STET_API_KEY`                | Organization API key                                             |
+| `salt`    | the request's host            | Mixed into the visitor digest                                    |
+| `onError` | `console.error`               | Called when a batch cannot be forwarded                          |
+
+Responses: `200 { accepted }` on success, `400` for a malformed batch or an
+event that does not match the plan, `502` when Stet could not be reached. An
+event outside the plan fails loudly rather than being dropped quietly, so a
+typo surfaces the first time it runs.
+
+## Development
+
+```bash
+pnpm test   # Vitest
+pnpm tc     # Type check
+pnpm build  # vp pack
+```
+
+`examples/tanstack` runs this package against a local Stet; see its README.

package/dist/client.d.ts

@@ -0,0 +1,20 @@
+import { s as TrackArgs, t as AnalyticsTypes } from "./types-CVzbMMoR.js";
+
+//#region src/client.d.ts
+type AnalyticsOptions = {
+  /** Path or URL of the route you mounted the handler on, e.g. `/api/analytics`. */endpoint: string; /** Props attached to every event in a batch. Your server's values win over these. */
+  context?: Record<string, unknown>; /** Milliseconds a partial batch waits before being sent. Default 2000. */
+  flushInterval?: number; /** Send as soon as this many events are queued. Default 20. */
+  maxBatchSize?: number; /** Record a pageview on load and on history navigation. Default true. */
+  autoPageviews?: boolean; /** Override fetch, e.g. in tests. */
+  fetch?: typeof globalThis.fetch;
+};
+type Analytics<TPlan extends AnalyticsTypes> = {
+  /** Record an event from the tracking plan. Never throws and never rejects. */track: <K extends keyof TPlan['$types']['events'] & string>(name: K, ...args: TrackArgs<TPlan['$types']['events'][K]>) => void; /** Record a pageview. Called for you unless `autoPageviews` is off. */
+  pageview: (url?: string) => void; /** Merge props into the context sent with every later batch. */
+  setContext: (context: Record<string, unknown>) => void; /** Send anything queued now. Resolves once the request settles. */
+  flush: () => Promise<void>;
+};
+declare function createAnalytics<TPlan extends AnalyticsTypes>(options: AnalyticsOptions): Analytics<TPlan>;
+//#endregion
+export { Analytics, AnalyticsOptions, type AnalyticsTypes, createAnalytics };

package/dist/client.js

@@ -0,0 +1,111 @@
+import { n as PAGEVIEW } from "./events-DnYdjoR6.js";
+//#region src/client.ts
+/**
+* Browser client. Talks only to the route you mounted in your own app with
+* `createAnalyticsHandler` from `@stetcms/analytics/server` — no keys in the
+* bundle, no third-party origin, nothing for an ad blocker to recognise.
+*
+* ```ts
+* import { createAnalytics } from '@stetcms/analytics/client';
+* import type plan from '../stet.config';
+*
+* export const analytics = createAnalytics<typeof plan>({ endpoint: '/api/analytics' });
+* analytics.track('checkout.completed', { total: 42 });
+* ```
+*/
+function createAnalytics(options) {
+	const isBrowser = typeof window !== "undefined";
+	const flushInterval = options.flushInterval ?? 2e3;
+	const maxBatchSize = options.maxBatchSize ?? 20;
+	const fetcher = options.fetch ?? globalThis.fetch.bind(globalThis);
+	let context = { ...options.context };
+	let queue = [];
+	let timer;
+	let lastPageviewUrl;
+	async function flush() {
+		if (timer !== void 0) {
+			clearTimeout(timer);
+			timer = void 0;
+		}
+		if (queue.length === 0) return;
+		const events = queue;
+		queue = [];
+		const batch = {
+			context,
+			events
+		};
+		try {
+			await fetcher(options.endpoint, {
+				method: "POST",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify(batch),
+				keepalive: true
+			});
+		} catch {
+			queue = [...events, ...queue];
+		}
+	}
+	function enqueue(event) {
+		queue.push(event);
+		if (queue.length >= maxBatchSize) {
+			flush();
+			return;
+		}
+		timer ??= setTimeout(() => void flush(), flushInterval);
+	}
+	function envelope() {
+		if (!isBrowser) return {};
+		return {
+			url: window.location.href,
+			...document.referrer === "" ? {} : { referrer: document.referrer }
+		};
+	}
+	function track(name, props) {
+		enqueue({
+			name,
+			props: props ?? {},
+			timestamp: Date.now(),
+			...envelope()
+		});
+	}
+	function pageview(url) {
+		const envelopeUrl = url ?? (isBrowser ? window.location.href : void 0);
+		if (envelopeUrl !== void 0 && envelopeUrl === lastPageviewUrl) return;
+		lastPageviewUrl = envelopeUrl;
+		enqueue({
+			name: PAGEVIEW,
+			props: {},
+			timestamp: Date.now(),
+			...envelope(),
+			...envelopeUrl === void 0 ? {} : { url: envelopeUrl }
+		});
+	}
+	if (isBrowser) {
+		window.addEventListener("pagehide", () => void flush());
+		document.addEventListener("visibilitychange", () => {
+			if (document.visibilityState === "hidden") flush();
+		});
+		if (options.autoPageviews ?? true) {
+			pageview();
+			const pushState = window.history.pushState.bind(window.history);
+			window.history.pushState = (...args) => {
+				pushState(...args);
+				pageview();
+			};
+			window.addEventListener("popstate", () => pageview());
+		}
+	}
+	return {
+		track,
+		pageview,
+		setContext: (next) => {
+			context = {
+				...context,
+				...next
+			};
+		},
+		flush
+	};
+}
+//#endregion
+export { createAnalytics };

package/dist/events-DnYdjoR6.js

@@ -0,0 +1,57 @@
+//#region src/events.ts
+/** The pageview every browser client sends. */
+const PAGEVIEW = "$pageview";
+/**
+* Events the client sends for itself. `$`-prefixed so a tracking plan can
+* never collide with one; their context (url, referrer) rides the envelope
+* rather than the props, so they carry no schema of their own.
+*/
+const BUILT_IN_EVENTS = /* @__PURE__ */ new Set([PAGEVIEW]);
+/**
+* Declares an event and the props it carries. Props are any Standard Schema
+* validator, so the schema library is yours to pick (Zod, Valibot, ArkType).
+* Events group by nesting, and nested events track under dot-joined names:
+*
+* ```ts
+* events: {
+*   signup: event({ plan: z.enum(['free', 'paid']) }),
+*   checkout: { started: event(), completed: event({ total: z.number() }) },
+* }
+* // → 'signup', 'checkout.started', 'checkout.completed'
+* ```
+*/
+function event(props) {
+	return {
+		$event: true,
+		props: props ?? {}
+	};
+}
+function isEventDefinition(value) {
+	return typeof value === "object" && value !== null && value.$event === true;
+}
+/** Walks a dot-joined name (`checkout.completed`) to its definition. */
+function resolveEvent(events, name) {
+	let node = events;
+	for (const part of name.split(".")) {
+		if (isEventDefinition(node)) return;
+		const next = node[part];
+		if (next === void 0) return;
+		node = next;
+	}
+	return isEventDefinition(node) ? node : void 0;
+}
+/** Flattens a nested plan to `[{ name: 'checkout.completed', props: ['total'] }]`. */
+function flattenEvents(events, prefix = "") {
+	const flat = [];
+	for (const [key, value] of Object.entries(events)) {
+		const name = prefix === "" ? key : `${prefix}.${key}`;
+		if (isEventDefinition(value)) flat.push({
+			name,
+			props: Object.keys(value.props)
+		});
+		else flat.push(...flattenEvents(value, name));
+	}
+	return flat;
+}
+//#endregion
+export { isEventDefinition as a, flattenEvents as i, PAGEVIEW as n, resolveEvent as o, event as r, BUILT_IN_EVENTS as t };

package/dist/index.d.ts

@@ -0,0 +1,88 @@
+import { a as InferProps, i as EventsShape, n as EventDefinition, o as PropsShape, r as EventsRecord, s as TrackArgs, t as AnalyticsTypes } from "./types-CVzbMMoR.js";
+import { a as validateEvent, i as formatIssues, n as ValidatedEvent, r as defineAnalytics, t as AnalyticsPlan } from "./plan-CftGOQuT.js";
+import { SyncOptions, syncTrackingPlan } from "./sync.js";
+import { DEFAULT_ORIGIN } from "@stetcms/config";
+
+//#region src/events.d.ts
+/** The pageview every browser client sends. */
+declare const PAGEVIEW = "$pageview";
+/**
+ * Events the client sends for itself. `$`-prefixed so a tracking plan can
+ * never collide with one; their context (url, referrer) rides the envelope
+ * rather than the props, so they carry no schema of their own.
+ */
+declare const BUILT_IN_EVENTS: ReadonlySet<string>;
+/**
+ * Declares an event and the props it carries. Props are any Standard Schema
+ * validator, so the schema library is yours to pick (Zod, Valibot, ArkType).
+ * Events group by nesting, and nested events track under dot-joined names:
+ *
+ * ```ts
+ * events: {
+ *   signup: event({ plan: z.enum(['free', 'paid']) }),
+ *   checkout: { started: event(), completed: event({ total: z.number() }) },
+ * }
+ * // → 'signup', 'checkout.started', 'checkout.completed'
+ * ```
+ */
+declare function event<TProps extends PropsShape = Record<never, never>>(props?: TProps): EventDefinition<TProps>;
+declare function isEventDefinition(value: unknown): value is EventDefinition;
+/** Walks a dot-joined name (`checkout.completed`) to its definition. */
+declare function resolveEvent(events: EventsShape, name: string): EventDefinition | undefined;
+/** Flattens a nested plan to `[{ name: 'checkout.completed', props: ['total'] }]`. */
+declare function flattenEvents(events: EventsShape, prefix?: string): {
+  name: string;
+  props: string[];
+}[];
+//#endregion
+//#region src/wire.d.ts
+/** Events per batch. Anything larger is a client bug or an abusive caller. */
+declare const MAX_BATCH_EVENTS = 100;
+/** One event as it travels from the browser to the route you mounted. */
+type WireEvent = {
+  name: string;
+  props: Record<string, unknown>; /** Epoch milliseconds, stamped in the browser when the event happened. */
+  timestamp: number;
+  url?: string;
+  referrer?: string;
+};
+/** The body the browser client POSTs to your route. */
+type ClientBatch = {
+  context: Record<string, unknown>;
+  events: WireEvent[];
+};
+/**
+ * What the handler derives from the browser's request. Every field is
+ * optional: a proxy may strip the headers it comes from, and analytics never
+ * fails a request over missing context.
+ */
+type EventMetadata = {
+  /** Day-scoped visitor digest. Never a raw address, never stable past midnight. */visitor?: string;
+  country?: string;
+  region?: string;
+  city?: string;
+  browser?: string;
+  os?: string;
+  device?: 'desktop' | 'mobile' | 'tablet';
+};
+/** The body the handler forwards to Stet, once it has enriched the batch. */
+type IngestBatch = {
+  context: Record<string, unknown>;
+  metadata: EventMetadata;
+  events: WireEvent[];
+};
+type ParseResult = {
+  ok: true;
+  value: ClientBatch;
+} | {
+  ok: false;
+  error: string;
+};
+/**
+ * Validates a batch posted by a browser. The body is untrusted input from the
+ * open internet, so this checks shape by hand rather than trusting a cast;
+ * props are validated against the tracking plan separately.
+ */
+declare function parseClientBatch(body: unknown): ParseResult;
+//#endregion
+export { type AnalyticsPlan, type AnalyticsTypes, BUILT_IN_EVENTS, type ClientBatch, DEFAULT_ORIGIN, type EventDefinition, type EventMetadata, type EventsRecord, type EventsShape, type InferProps, type IngestBatch, MAX_BATCH_EVENTS, PAGEVIEW, type PropsShape, type SyncOptions, type TrackArgs, type ValidatedEvent, type WireEvent, defineAnalytics, event, flattenEvents, formatIssues, isEventDefinition, parseClientBatch, resolveEvent, syncTrackingPlan, validateEvent };

package/dist/index.js

@@ -0,0 +1,4 @@
+import { a as isEventDefinition, i as flattenEvents, n as PAGEVIEW, o as resolveEvent, r as event, t as BUILT_IN_EVENTS } from "./events-DnYdjoR6.js";
+import { a as formatIssues, i as defineAnalytics, n as MAX_BATCH_EVENTS, o as validateEvent, r as parseClientBatch, t as DEFAULT_ORIGIN } from "./wire-J3xnrDYj.js";
+import { syncTrackingPlan } from "./sync.js";
+export { BUILT_IN_EVENTS, DEFAULT_ORIGIN, MAX_BATCH_EVENTS, PAGEVIEW, defineAnalytics, event, flattenEvents, formatIssues, isEventDefinition, parseClientBatch, resolveEvent, syncTrackingPlan, validateEvent };

package/dist/plan-CftGOQuT.d.ts

@@ -0,0 +1,57 @@
+import { i as EventsShape, r as EventsRecord } from "./types-CVzbMMoR.js";
+import { StandardSchemaV1 } from "@standard-schema/spec";
+
+//#region src/plan.d.ts
+/**
+ * A tracking plan: every event your product records, and the props each one
+ * carries. It is the single source of truth on both sides — the browser
+ * client types `track()` from it, the handler validates against it, and
+ * `@stetcms/vite` pushes it to Stet so your content team can build dashboards
+ * on the same events.
+ */
+type AnalyticsPlan<TEvents extends EventsShape = EventsShape> = {
+  events: TEvents; /** Stet deployment to send to. Defaults to `STET_ORIGIN`, then the cloud. */
+  origin?: string;
+  /**
+   * Organization API key. Server-side only. Defaults to `STET_API_KEY`, which
+   * is how the plugin and the CLI read it too, so a plan file stays free of
+   * secrets and safe to commit.
+   */
+  apiKey?: string; /** Phantom types read by `createAnalytics<typeof plan>`. No runtime value. */
+  $types: {
+    events: EventsRecord<TEvents>;
+  };
+};
+/**
+ * Declares the tracking plan, conventionally in `stet.config.ts`:
+ *
+ * ```ts
+ * export default defineAnalytics({
+ *   events: {
+ *     signup: event({ plan: z.enum(['free', 'paid']) }),
+ *     checkout: { completed: event({ total: z.number() }) },
+ *   },
+ * });
+ * ```
+ */
+declare function defineAnalytics<TEvents extends EventsShape>(config: {
+  events: TEvents;
+  origin?: string;
+  apiKey?: string;
+}): AnalyticsPlan<TEvents>;
+type ValidatedEvent = {
+  ok: true;
+  props: Record<string, unknown>;
+} | {
+  ok: false;
+  issues: readonly StandardSchemaV1.Issue[];
+};
+/**
+ * Validates an event's props against the plan. Declared props are checked
+ * with their own schema; undeclared props pass through, so adding a prop in
+ * the browser never blocks on a deploy of the plan.
+ */
+declare function validateEvent(events: EventsShape, name: string, props: Record<string, unknown> | undefined): Promise<ValidatedEvent>;
+declare function formatIssues(issues: readonly StandardSchemaV1.Issue[]): string;
+//#endregion
+export { validateEvent as a, formatIssues as i, ValidatedEvent as n, defineAnalytics as r, AnalyticsPlan as t };

package/dist/server.d.ts

@@ -0,0 +1,24 @@
+import { i as EventsShape } from "./types-CVzbMMoR.js";
+import { t as AnalyticsPlan } from "./plan-CftGOQuT.js";
+
+//#region src/server.d.ts
+type AnalyticsHandlerOptions = {
+  /**
+   * Props merged into every batch. Yours win over anything the browser sent,
+   * because the browser is the untrusted side. A function is called per
+   * request, which is how request-scoped values like a session reach here.
+   */
+  context?: Record<string, unknown> | ((request: Request) => Record<string, unknown> | Promise<Record<string, unknown>>); /** Stet deployment. Defaults to the plan's, then `STET_ORIGIN`, then the cloud. */
+  origin?: string; /** Organization API key. Defaults to the plan's, then `STET_API_KEY`. */
+  apiKey?: string;
+  /**
+   * Salt mixed into the visitor digest. Defaults to the request's host, which
+   * keeps visitor ids from being comparable across sites you run.
+   */
+  salt?: string; /** Called when a batch cannot be forwarded. Defaults to console.error. */
+  onError?: (error: unknown) => void; /** Override fetch, e.g. in tests. */
+  fetch?: typeof globalThis.fetch;
+};
+declare function createAnalyticsHandler<TEvents extends EventsShape>(plan: AnalyticsPlan<TEvents>, options?: AnalyticsHandlerOptions): (request: Request) => Promise<Response>;
+//#endregion
+export { AnalyticsHandlerOptions, createAnalyticsHandler };

package/dist/server.js

@@ -0,0 +1,175 @@
+import { a as formatIssues, o as validateEvent, r as parseClientBatch } from "./wire-J3xnrDYj.js";
+import { resolveStetConfig } from "@stetcms/config";
+//#region src/metadata.ts
+const BOT_PATTERN = /bot|crawl|spider|slurp|headless|lighthouse|pingdom|preview|monitor|curl|wget|python-requests|axios|node-fetch/i;
+/** Whether the caller announces itself as automation rather than a reader. */
+function isBot(userAgent) {
+	return BOT_PATTERN.test(userAgent);
+}
+function browserOf(userAgent, brands) {
+	for (const brand of [
+		"Microsoft Edge",
+		"Opera",
+		"Samsung Internet",
+		"Google Chrome",
+		"Firefox"
+	]) if (brands.includes(brand)) return brand === "Google Chrome" ? "Chrome" : brand === "Microsoft Edge" ? "Edge" : brand;
+	if (/Edg[A-Z]?\//.test(userAgent)) return "Edge";
+	if (/OPR\/|Opera/.test(userAgent)) return "Opera";
+	if (/SamsungBrowser\//.test(userAgent)) return "Samsung Internet";
+	if (/Firefox\/|FxiOS\//.test(userAgent)) return "Firefox";
+	if (/Chrome\/|CriOS\//.test(userAgent)) return "Chrome";
+	if (/Safari\//.test(userAgent)) return "Safari";
+}
+function osOf(userAgent, platform) {
+	const hint = platform.replaceAll("\"", "").trim();
+	if (hint !== "") return hint === "macOS" || hint === "iOS" ? hint : hint === "Chrome OS" ? "ChromeOS" : hint;
+	if (/Android/.test(userAgent)) return "Android";
+	if (/iPhone|iPad|iPod/.test(userAgent)) return "iOS";
+	if (/Windows NT/.test(userAgent)) return "Windows";
+	if (/Mac OS X/.test(userAgent)) return "macOS";
+	if (/CrOS/.test(userAgent)) return "ChromeOS";
+	if (/Linux/.test(userAgent)) return "Linux";
+}
+function deviceOf(userAgent, mobileHint) {
+	if (/iPad|Tablet|PlayBook|Silk/.test(userAgent) || /Android(?!.*Mobile)/.test(userAgent)) return "tablet";
+	if (mobileHint.includes("?1") || /Mobi|iPhone|iPod|Android/.test(userAgent)) return "mobile";
+	if (userAgent === "") return;
+	return "desktop";
+}
+function clientAddress(headers) {
+	return headers.get("cf-connecting-ip") ?? headers.get("x-real-ip") ?? headers.get("x-forwarded-for")?.split(",")[0]?.trim() ?? "";
+}
+function decode(value) {
+	if (value === null || value === "") return;
+	try {
+		return decodeURIComponent(value);
+	} catch {
+		return value;
+	}
+}
+/** Geo as the edge already knows it. Nothing is looked up, so nothing is billed. */
+function geoOf(request) {
+	const cf = request.cf;
+	const headers = request.headers;
+	return {
+		country: cf?.country ?? decode(headers.get("cf-ipcountry") ?? headers.get("x-vercel-ip-country")),
+		region: cf?.region ?? decode(headers.get("x-vercel-ip-country-region")),
+		city: cf?.city ?? decode(headers.get("x-vercel-ip-city"))
+	};
+}
+/**
+* A visitor id that cannot outlive the day it was made: the digest covers the
+* date, so the same reader tomorrow is a different id, and the inputs (IP and
+* user agent) are never stored or forwarded anywhere. No cookie, nothing to
+* consent to, and nothing to join across days even by whoever holds the data.
+*/
+async function visitorDigest(request, salt) {
+	const address = clientAddress(request.headers);
+	const userAgent = request.headers.get("user-agent") ?? "";
+	if (address === "" && userAgent === "") return;
+	const day = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+	const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(`${day}:${salt}:${address}:${userAgent}`));
+	return [...new Uint8Array(digest)].slice(0, 16).map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+/**
+* Everything Stet learns about a reader, derived here in your own backend so
+* the raw address and user agent never leave it.
+*/
+async function deriveMetadata(request, salt) {
+	const headers = request.headers;
+	const userAgent = headers.get("user-agent") ?? "";
+	const metadata = {
+		visitor: await visitorDigest(request, salt),
+		...geoOf(request),
+		browser: browserOf(userAgent, headers.get("sec-ch-ua") ?? ""),
+		os: osOf(userAgent, headers.get("sec-ch-ua-platform") ?? ""),
+		device: deviceOf(userAgent, headers.get("sec-ch-ua-mobile") ?? "")
+	};
+	for (const key of Object.keys(metadata)) if (metadata[key] === void 0) delete metadata[key];
+	return metadata;
+}
+//#endregion
+//#region src/server.ts
+/**
+* The route you mount in your own app. Events go browser → your backend →
+* Stet, so there is no third-party origin in the page, nothing for a blocker
+* to match on, and every reader's address stays inside infrastructure you
+* control.
+*
+* ```ts
+* import { createAnalyticsHandler } from '@stetcms/analytics/server';
+* import plan from '../stet.config';
+*
+* const handler = createAnalyticsHandler(plan, {
+*   context: async (request) => ({ userId: (await session(request))?.userId }),
+* });
+* export const POST = handler;
+* ```
+*/
+function json(body, status = 200) {
+	return new Response(JSON.stringify(body), {
+		status,
+		headers: { "content-type": "application/json" }
+	});
+}
+function createAnalyticsHandler(plan, options = {}) {
+	const onError = options.onError ?? ((error) => console.error("[stet analytics]", error));
+	return async (request) => {
+		if (request.method !== "POST") return json({ error: "method not allowed" }, 405);
+		let body;
+		try {
+			body = await request.json();
+		} catch {
+			return json({ error: "invalid JSON body" }, 400);
+		}
+		const parsed = parseClientBatch(body);
+		if (!parsed.ok) return json({ error: parsed.error }, 400);
+		if (isBot(request.headers.get("user-agent") ?? "")) return json({ accepted: 0 });
+		const events = [];
+		for (const event of parsed.value.events) {
+			const validated = await validateEvent(plan.events, event.name, event.props);
+			if (!validated.ok) return json({ error: `event "${event.name}": ${formatIssues(validated.issues)}` }, 400);
+			events.push({
+				...event,
+				props: validated.props
+			});
+		}
+		const context = { ...parsed.value.context };
+		const server = typeof options.context === "function" ? await options.context(request) : options.context;
+		for (const [key, value] of Object.entries(server ?? {})) if (value !== void 0) context[key] = value;
+		const batch = {
+			context,
+			metadata: await deriveMetadata(request, options.salt ?? new URL(request.url).host),
+			events
+		};
+		const { origin, apiKey } = resolveStetConfig({
+			origin: plan.origin,
+			apiKey: plan.apiKey
+		}, {
+			origin: options.origin,
+			apiKey: options.apiKey
+		});
+		if (apiKey === void 0) {
+			onError(/* @__PURE__ */ new Error("No API key. Set STET_API_KEY or pass apiKey."));
+			return json({ error: "analytics is not configured" }, 500);
+		}
+		try {
+			const response = await (options.fetch ?? globalThis.fetch.bind(globalThis))(`${origin}/api/v1/events`, {
+				method: "POST",
+				headers: {
+					"content-type": "application/json",
+					"x-api-key": apiKey
+				},
+				body: JSON.stringify(batch)
+			});
+			if (!response.ok) throw new Error(`Stet responded ${response.status}`);
+			return json({ accepted: events.length });
+		} catch (error) {
+			onError(error);
+			return json({ error: "failed to forward events" }, 502);
+		}
+	};
+}
+//#endregion
+export { createAnalyticsHandler };

package/dist/sync.d.ts

@@ -0,0 +1,23 @@
+import { i as EventsShape } from "./types-CVzbMMoR.js";
+
+//#region src/sync.d.ts
+type SyncOptions = {
+  events: EventsShape; /** Organization API key. Server-side only. */
+  apiKey: string;
+  origin?: string;
+  fetch?: typeof globalThis.fetch;
+};
+/**
+ * Publishes the tracking plan, so the events your code declares can be picked
+ * from the dashboard before anyone has fired one. Run by `@stetcms/vite` on
+ * dev-server start and at the end of a build, and by `stet sync`.
+ *
+ * Replacement, not merge: an event deleted from your code disappears from the
+ * list on the next sync, while anything already recorded under that name
+ * keeps its history.
+ */
+declare function syncTrackingPlan(options: SyncOptions): Promise<{
+  synced: number;
+}>;
+//#endregion
+export { SyncOptions, syncTrackingPlan };

package/dist/sync.js

@@ -0,0 +1,46 @@
+import { DEFAULT_ORIGIN } from "@stetcms/config";
+//#region src/sync.ts
+/**
+* Publishing the tracking plan to Stet.
+*
+* Free of relative imports on purpose, like `@stetcms/client/codegen`: build
+* tools load this entry under plain Node, which resolves package names but
+* not this package's own extensionless paths. That is why the flatten walk is
+* repeated here rather than imported from `./events`.
+*/
+function flatten(events, prefix = "") {
+	const flat = [];
+	for (const [key, value] of Object.entries(events)) {
+		const name = prefix === "" ? key : `${prefix}.${key}`;
+		if (value.$event === true) flat.push({
+			name,
+			props: Object.keys(value.props)
+		});
+		else flat.push(...flatten(value, name));
+	}
+	return flat;
+}
+/**
+* Publishes the tracking plan, so the events your code declares can be picked
+* from the dashboard before anyone has fired one. Run by `@stetcms/vite` on
+* dev-server start and at the end of a build, and by `stet sync`.
+*
+* Replacement, not merge: an event deleted from your code disappears from the
+* list on the next sync, while anything already recorded under that name
+* keeps its history.
+*/
+async function syncTrackingPlan(options) {
+	const origin = options.origin ?? DEFAULT_ORIGIN;
+	const response = await (options.fetch ?? globalThis.fetch.bind(globalThis))(`${origin}/api/v1/events/schema`, {
+		method: "PUT",
+		headers: {
+			"content-type": "application/json",
+			"x-api-key": options.apiKey
+		},
+		body: JSON.stringify({ events: flatten(options.events) })
+	});
+	if (!response.ok) throw new Error(`PUT ${origin}/api/v1/events/schema responded ${response.status}`);
+	return await response.json();
+}
+//#endregion
+export { syncTrackingPlan };

package/dist/types-CVzbMMoR.d.ts

@@ -0,0 +1,39 @@
+import { StandardSchemaV1 } from "@standard-schema/spec";
+
+//#region src/types.d.ts
+type PropsShape = Record<string, StandardSchemaV1>;
+type EventDefinition<TProps extends PropsShape = PropsShape> = {
+  $event: true;
+  props: TProps;
+};
+/** Events nest into groups: `{ checkout: { started: event() } }`. */
+type EventsShape = {
+  [name: string]: EventDefinition | EventsShape;
+};
+type Pretty<T> = { [K in keyof T]: T[K] } & {};
+type RawProps<T extends PropsShape> = { [K in keyof T]: StandardSchemaV1.InferInput<T[K]> };
+type UndefinedKeys<T> = { [K in keyof T]: undefined extends T[K] ? K : never }[keyof T];
+/** A props shape as its call site writes it: schemas accepting `undefined` become optional. */
+type InferProps<T extends PropsShape> = Pretty<Partial<Pick<RawProps<T>, UndefinedKeys<RawProps<T>>>> & Omit<RawProps<T>, UndefinedKeys<RawProps<T>>>>;
+type Join<P extends string, K extends string> = P extends '' ? K : `${P}.${K}`;
+type FlatEventProps<T extends EventsShape, P extends string = ''> = { [K in keyof T & string]: T[K] extends EventDefinition<infer TProps> ? Record<Join<P, K>, InferProps<TProps>> : T[K] extends EventsShape ? FlatEventProps<T[K], Join<P, K>> : never }[keyof T & string];
+type UnionToIntersection<U> = (U extends unknown ? (x: U) => void : never) extends ((x: infer I) => void) ? I : never;
+/** A nested plan flattened to dot-joined names: `{ 'checkout.started': {...} }`. */
+type EventsRecord<T extends EventsShape> = Pretty<UnionToIntersection<FlatEventProps<T>>>;
+/**
+ * The argument tuple for `track(name, ...)`. Props stay optional while every
+ * one of them is, so an event carrying no props tracks with a bare name.
+ */
+type TrackArgs<TProps> = Partial<TProps> extends TProps ? [props?: TProps] : [props: TProps];
+/**
+ * The structural contract between a tracking plan and the browser client:
+ * `createAnalytics<typeof plan>` reads only the phantom `$types`, so nothing
+ * in the plan's module graph (schemas, secrets) has to reach the browser.
+ */
+type AnalyticsTypes = {
+  $types: {
+    events: Record<string, Record<string, unknown>>;
+  };
+};
+//#endregion
+export { InferProps as a, EventsShape as i, EventDefinition as n, PropsShape as o, EventsRecord as r, TrackArgs as s, AnalyticsTypes as t };

package/dist/wire-J3xnrDYj.js

@@ -0,0 +1,143 @@
+import { o as resolveEvent, t as BUILT_IN_EVENTS } from "./events-DnYdjoR6.js";
+import { DEFAULT_ORIGIN as DEFAULT_ORIGIN$1 } from "@stetcms/config";
+//#region src/plan.ts
+/**
+* Declares the tracking plan, conventionally in `stet.config.ts`:
+*
+* ```ts
+* export default defineAnalytics({
+*   events: {
+*     signup: event({ plan: z.enum(['free', 'paid']) }),
+*     checkout: { completed: event({ total: z.number() }) },
+*   },
+* });
+* ```
+*/
+function defineAnalytics(config) {
+	return {
+		...config,
+		$types: void 0
+	};
+}
+/**
+* Validates an event's props against the plan. Declared props are checked
+* with their own schema; undeclared props pass through, so adding a prop in
+* the browser never blocks on a deploy of the plan.
+*/
+async function validateEvent(events, name, props) {
+	if (BUILT_IN_EVENTS.has(name)) return {
+		ok: true,
+		props: props ?? {}
+	};
+	const definition = resolveEvent(events, name);
+	if (definition === void 0) return {
+		ok: false,
+		issues: [{ message: `unknown event "${name}"` }]
+	};
+	const input = props ?? {};
+	const output = { ...input };
+	const issues = [];
+	for (const [key, schema] of Object.entries(definition.props)) {
+		let result = schema["~standard"].validate(input[key]);
+		if (result instanceof Promise) result = await result;
+		if (result.issues) issues.push(...result.issues.map((issue) => ({
+			...issue,
+			message: `${key}: ${issue.message}`
+		})));
+		else output[key] = result.value;
+	}
+	if (issues.length > 0) return {
+		ok: false,
+		issues
+	};
+	return {
+		ok: true,
+		props: output
+	};
+}
+function formatIssues(issues) {
+	return issues.map((issue) => issue.message).join("; ");
+}
+//#endregion
+//#region src/wire.ts
+/** Events per batch. Anything larger is a client bug or an abusive caller. */
+const MAX_BATCH_EVENTS = 100;
+const MAX_NAME_LENGTH = 120;
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseEvent(value, index) {
+	if (!isRecord(value)) return {
+		ok: false,
+		error: `events[${index}] is not an object`
+	};
+	const { name, props, timestamp, url, referrer } = value;
+	if (typeof name !== "string" || name === "" || name.length > MAX_NAME_LENGTH) return {
+		ok: false,
+		error: `events[${index}].name must be a name of 1 to ${MAX_NAME_LENGTH} characters`
+	};
+	if (typeof timestamp !== "number" || !Number.isFinite(timestamp) || timestamp < 0) return {
+		ok: false,
+		error: `events[${index}].timestamp must be epoch milliseconds`
+	};
+	if (props !== void 0 && !isRecord(props)) return {
+		ok: false,
+		error: `events[${index}].props must be an object`
+	};
+	if (url !== void 0 && typeof url !== "string") return {
+		ok: false,
+		error: `events[${index}].url must be a string`
+	};
+	if (referrer !== void 0 && typeof referrer !== "string") return {
+		ok: false,
+		error: `events[${index}].referrer must be a string`
+	};
+	return {
+		ok: true,
+		value: {
+			name,
+			props: isRecord(props) ? props : {},
+			timestamp,
+			...typeof url === "string" ? { url } : {},
+			...typeof referrer === "string" ? { referrer } : {}
+		}
+	};
+}
+/**
+* Validates a batch posted by a browser. The body is untrusted input from the
+* open internet, so this checks shape by hand rather than trusting a cast;
+* props are validated against the tracking plan separately.
+*/
+function parseClientBatch(body) {
+	if (!isRecord(body)) return {
+		ok: false,
+		error: "body must be an object"
+	};
+	if (!Array.isArray(body.events) || body.events.length === 0) return {
+		ok: false,
+		error: "events must be a non-empty array"
+	};
+	if (body.events.length > 100) return {
+		ok: false,
+		error: `events must hold at most 100 entries`
+	};
+	if (body.context !== void 0 && !isRecord(body.context)) return {
+		ok: false,
+		error: "context must be an object"
+	};
+	const events = [];
+	for (const [index, raw] of body.events.entries()) {
+		const parsed = parseEvent(raw, index);
+		if (!parsed.ok) return parsed;
+		events.push(parsed.value);
+	}
+	return {
+		ok: true,
+		value: {
+			context: isRecord(body.context) ? body.context : {},
+			events
+		}
+	};
+}
+//#endregion
+export { formatIssues as a, defineAnalytics as i, MAX_BATCH_EVENTS as n, validateEvent as o, parseClientBatch as r, DEFAULT_ORIGIN$1 as t };

package/package.json

@@ -0,0 +1,65 @@
+{
+  "name": "@stetcms/analytics",
+  "version": "0.1.0",
+  "description": "Type-safe, cookieless product analytics for Stet, routed through your own backend.",
+  "keywords": [
+    "analytics",
+    "cookieless",
+    "pageviews",
+    "stet",
+    "tracking"
+  ],
+  "homepage": "https://github.com/jamiedavenport/stet/tree/main/published/analytics#readme",
+  "bugs": "https://github.com/jamiedavenport/stet/issues",
+  "license": "Apache-2.0",
+  "author": "Jamie Davenport (https://jxd.dev)",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/jamiedavenport/stet.git",
+    "directory": "published/analytics"
+  },
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "default": "./dist/client.js"
+    },
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "default": "./dist/server.js"
+    },
+    "./sync": {
+      "types": "./dist/sync.d.ts",
+      "default": "./dist/sync.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@standard-schema/spec": "^1.1.0",
+    "@stetcms/config": "0.1.0"
+  },
+  "devDependencies": {
+    "publint": "^0.3.21",
+    "typescript": "^5.9.3",
+    "vite-plus": "0.2.2",
+    "vitest": "^4.1.9",
+    "zod": "^4.4.3"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "vp pack",
+    "tc": "tsc --noEmit",
+    "test": "vp test run"
+  }
+}