@teleporthq/teleport-plugin-next-workflows 0.44.11 → 0.45.0

package/src/nodes/ai/ai-provider-utils.ts

@@ -1,4 +1,113 @@
 import { AI_PROVIDER_UTIL_SOURCES } from './ai-provider-utils-sources.generated'
+import { generateSecurityRuntimeVar } from '../general/visitor-request'
+
+declare function __ai_enforceCallBudget(prompt?: any): Promise<void>
+declare function __ai_clampMaxTokens(value: any): any
+
+/**
+ * Every LLM call the site makes counts against ONE per-site daily budget, in
+ * the shared durable limiter — the AI chat counts against the same key — so a
+ * public AI step looped by a visitor stops at the ceiling instead of billing
+ * the owner's key without end. A prompt longer than the cap is refused before
+ * it is counted or sent.
+ */
+export const AI_SITE_CALLS_KEY = 'site:ai-calls'
+export const AI_SITE_CALLS_PER_DAY = 2000
+export const AI_MAX_PROMPT_CHARS = 8000
+export const AI_LIMIT_REACHED_MESSAGE =
+  'This site has reached its AI usage limit for today. Try again tomorrow.'
+export const AI_PROMPT_TOO_LONG_MESSAGE =
+  'The prompt is too long: it can be at most ' + AI_MAX_PROMPT_CHARS + ' characters.'
+export const AI_UNAVAILABLE_MESSAGE = 'AI is not available right now.'
+/** The most output tokens one call may ask for; a larger `maxTokens` is lowered to it (logged). */
+export const AI_MAX_OUTPUT_TOKENS = 4096
+/**
+ * The AI refusals that name nothing secret, and the status a route answers
+ * them with: a segment route shows these exact messages to the visitor instead
+ * of its generic error (see the route's `__publicRefusal`), so a too-long
+ * prompt or a spent daily budget reads as what it is.
+ */
+export const AI_PUBLIC_REFUSALS: Record<string, number> = {
+  [AI_PROMPT_TOO_LONG_MESSAGE]: 400,
+  [AI_LIMIT_REACHED_MESSAGE]: 429,
+  [AI_UNAVAILABLE_MESSAGE]: 503,
+}
+/** What every other AI-node error says outside the server (the detail is logged). */
+export const AI_NOT_CONFIGURED_MESSAGE = 'The AI provider is not configured.'
+export const AI_REFUSED_MESSAGE = 'The AI provider refused the request.'
+
+/**
+ * Emitted ahead of the provider utils: the security runtime (`null` without a
+ * route prefix, which refuses every call) and `__ai_enforceCallBudget(prompt)`,
+ * which `__ai_callProvider` / `__ai_callProviderStreaming` and the embedding
+ * node await before they reach a provider. It throws an Error whose message is
+ * safe to show.
+ *
+ * And `__ai_publicMessage(err, code)`: what a node's `{ error: true, message }`
+ * says. An AI node's error can leave the server (the route's reply, a
+ * `continueOnError` result in the context), and a provider's message can quote
+ * the key it was given — a token set to an env var's name ends up there — or a
+ * secret name. The detail goes to the server log; the message is one of two
+ * fixed sentences, or a refusal of this module's own.
+ */
+function generateAICallBudgetCode(relativePrefix?: string): string {
+  return `${generateSecurityRuntimeVar('__ai_securityRuntime', relativePrefix)}
+
+var __ai_enforceCallBudget = typeof __ai_enforceCallBudget !== 'undefined' ? __ai_enforceCallBudget : async function __ai_enforceCallBudget(prompt) {
+  // An expression, not a declaration: a named two-parameter function here
+  // would be taken for the node's own entry (see resolveHandlerEntryName).
+  var refusal = function (message, code) {
+    var error = new Error(message);
+    error.code = code;
+    return error;
+  };
+  if (typeof prompt === 'string' && prompt.length > ${AI_MAX_PROMPT_CHARS}) {
+    throw refusal(${JSON.stringify(AI_PROMPT_TOO_LONG_MESSAGE)}, 'prompt_too_long');
+  }
+  var security = __ai_securityRuntime;
+  if (!security || typeof security.rateLimit !== 'function') {
+    console.error('[ai] call refused: the security runtime is not available');
+    throw refusal(${JSON.stringify(AI_UNAVAILABLE_MESSAGE)}, 'ai_unavailable');
+  }
+  var verdict = await security.rateLimit({ key: ${JSON.stringify(
+    AI_SITE_CALLS_KEY
+  )}, limit: ${AI_SITE_CALLS_PER_DAY}, windowSeconds: 86400 });
+  if (!verdict || !verdict.allowed) {
+    console.warn('[ai] call refused: the site reached its daily AI call limit');
+    throw refusal(${JSON.stringify(AI_LIMIT_REACHED_MESSAGE)}, 'ai_limit_reached');
+  }
+};
+
+var __ai_publicMessage = typeof __ai_publicMessage !== 'undefined' ? __ai_publicMessage : function __ai_publicMessage(err, code) {
+  console.error('[ai] ' + code + ': ' + (err && err.message ? err.message : String(err)));
+  if (err && (err.code === 'prompt_too_long' || err.code === 'ai_limit_reached' || err.code === 'ai_unavailable')) {
+    return err.message;
+  }
+  return code === 'authentication_error' ? ${JSON.stringify(
+    AI_NOT_CONFIGURED_MESSAGE
+  )} : ${JSON.stringify(AI_REFUSED_MESSAGE)};
+};
+
+// The code a node answers: one of this module's own refusals keeps its code
+// (a workflow can branch on 'ai_limit_reached' / 'prompt_too_long'), any other
+// error the node's own.
+var __ai_publicCode = typeof __ai_publicCode !== 'undefined' ? __ai_publicCode : function __ai_publicCode(err, code) {
+  return err && (err.code === 'prompt_too_long' || err.code === 'ai_limit_reached' || err.code === 'ai_unavailable') ? err.code : code;
+};
+
+// The output budget of one call: a node's maxTokens (it may be bound to the
+// request) above the ceiling is lowered to it, and the reason is logged, so a
+// visitor cannot make each of the site's daily calls cost more.
+var __ai_clampMaxTokens = typeof __ai_clampMaxTokens !== 'undefined' ? __ai_clampMaxTokens : function __ai_clampMaxTokens(value) {
+  var ceiling = ${AI_MAX_OUTPUT_TOKENS};
+  var requested = typeof value === 'string' && value.trim() !== '' ? Number(value) : value;
+  if (typeof requested === 'number' && isFinite(requested) && requested > ceiling) {
+    console.warn('[ai] maxTokens ' + requested + ' is above the per-call ceiling of ' + ceiling + ' and was lowered to it');
+    return ceiling;
+  }
+  return requested;
+};`
+}
 
 export const AI_PROVIDER_DEPENDENCIES: Record<string, string> = {
   openai: '^4.0.0',
@@ -19,8 +128,13 @@ function wrapWithGuard(globalName: string, source: string): string {
   return `var ${globalName} = typeof ${globalName} !== 'undefined' ? ${globalName} : ${source};`
 }
 
-export function generateAIProviderUtils(): string {
+/**
+ * `relativePrefix`: from the route the utils are inlined into to the project
+ * root. Without it no call reaches a provider (see generateAICallBudgetCode).
+ */
+export function generateAIProviderUtils(relativePrefix?: string): string {
   return [
+    generateAICallBudgetCode(relativePrefix),
     wrapWithGuard('__ai_resolveTextField', AI_PROVIDER_UTIL_SOURCES.__ai_resolveTextField),
     wrapWithGuard('__ai_resolveToken', AI_PROVIDER_UTIL_SOURCES.__ai_resolveToken),
     wrapWithGuard('__ai_detectProvider', AI_PROVIDER_UTIL_SOURCES.__ai_detectProvider),
@@ -34,12 +148,13 @@ export function generateAIProviderUtils(): string {
   ].join('\n\n')
 }
 
-export function generateAIStreamingProviderUtils(): string {
-  return generateAIProviderUtils() + '\n\n' + AI_STREAMING_CODE
+export function generateAIStreamingProviderUtils(relativePrefix?: string): string {
+  return generateAIProviderUtils(relativePrefix) + '\n\n' + AI_STREAMING_CODE
 }
 
 const AI_STREAMING_CODE = `
 var __ai_callProviderStreaming = typeof __ai_callProviderStreaming !== 'undefined' ? __ai_callProviderStreaming : async function __ai_callProviderStreaming(params, onChunk) {
+  await __ai_enforceCallBudget(params.userMessage);
   const provider = params.provider;
   const model = params.model;
   const token = params.token;
@@ -47,7 +162,7 @@ var __ai_callProviderStreaming = typeof __ai_callProviderStreaming !== 'undefine
   const userMessage = params.userMessage;
   const temperature = params.temperature;
   const maxTokens = params.maxTokens;
-  const caps = __ai_modelCapabilities(provider, model, maxTokens);
+  const caps = __ai_modelCapabilities(provider, model, __ai_clampMaxTokens(maxTokens));
   const __nodeRequire = typeof __non_webpack_require__ !== 'undefined' ? __non_webpack_require__ : require;
 
   if (provider === 'anthropic') {
@@ -208,8 +323,15 @@ function __ai_resolveTextField(val: any): string {
 }
 
 function __ai_resolveToken(token: any): string {
+  // The reason (which secret is missing) goes to the server log only: a
+  // node's error can reach the browser, and must never name an env var.
+  function notConfigured(detail: string) {
+    // tslint:disable-next-line:no-console
+    console.error('[ai] the AI provider is not configured: ' + detail)
+    return new Error('The AI provider is not configured.')
+  }
   if (!token) {
-    throw new Error('AI node requires an API token')
+    throw notConfigured('the node has no API token')
   }
 
   const __env = (globalThis as any).process && (globalThis as any).process.env
@@ -218,7 +340,7 @@ function __ai_resolveToken(token: any): string {
     if (token.startsWith('WORKFLOW_SECRET_')) {
       const envVal = __env ? __env[token] : undefined
       if (!envVal) {
-        throw new Error('Secret not found: ' + token)
+        throw notConfigured('secret ' + token + ' is not set')
       }
       return envVal
     }
@@ -226,7 +348,7 @@ function __ai_resolveToken(token: any): string {
       const envKey = token.replace('teleporthq.secrets.', '')
       const envVal2 = __env ? __env[envKey] : undefined
       if (!envVal2) {
-        throw new Error('Secret not found: ' + envKey)
+        throw notConfigured('secret ' + envKey + ' is not set')
       }
       return envVal2
     }
@@ -238,14 +360,14 @@ function __ai_resolveToken(token: any): string {
       const secretId = token.content.id
       const secretVal = __env ? __env[secretId] : undefined
       if (!secretVal) {
-        throw new Error('Secret not found: ' + secretId)
+        throw notConfigured('secret ' + secretId + ' is not set')
       }
       return secretVal
     }
   }
 
   if (typeof token === 'object') {
-    throw new Error('Invalid token format')
+    throw notConfigured('the token is not a string or a secret reference')
   }
 
   return String(token)
@@ -470,6 +592,8 @@ function __ai_parseJSON(text: any): any {
 }
 
 async function __ai_callProvider(params: any): Promise<any> {
+  // The site's daily AI budget and the prompt cap, before any provider is reached.
+  await __ai_enforceCallBudget(params.userMessage)
   const provider = params.provider
   const model = params.model
   const token = params.token
@@ -477,7 +601,8 @@ async function __ai_callProvider(params: any): Promise<any> {
   const userMessage = params.userMessage
   const temperature = params.temperature
   const jsonMode = params.jsonMode || false
-  const caps = __ai_modelCapabilities(provider, model, params.maxTokens)
+  // Lowered to the per-call ceiling first (see __ai_clampMaxTokens).
+  const caps = __ai_modelCapabilities(provider, model, __ai_clampMaxTokens(params.maxTokens))
   const __nodeRequire =
     typeof __non_webpack_require__ !== 'undefined' ? __non_webpack_require__ : require
 

package/src/nodes/ai/ai-select-database-data.ts

@@ -1,9 +1,11 @@
-import { NodeHandlerGenerator } from '../types'
+import { NodeHandlerGenerator, ServerHandlerOptions } from '../types'
+import { serverHandlerPrefix } from '../general/visitor-request'
 import { generateAIProviderUtils, AI_PROVIDER_DEPENDENCIES } from './ai-provider-utils'
 import { generateAiSqlSelectGuard } from './ai-sql-select-guard'
 
 declare function __ai_resolveTextField(val: any): string
 declare function __ai_resolveToken(token: any): string
+declare function __ai_publicMessage(err: any, code: string): string
 declare function __ai_resolveProvider(config: any): string
 declare function __ai_callProvider(params: any): Promise<any>
 declare function __ai_parseJSON(text: any): any
@@ -55,6 +57,8 @@ async function ai_select_database_data(config: any, context: any) {
   try {
     token = __ai_resolveToken(config.token)
   } catch (err: any) {
+    // The detail to the server log only; the result names just the code.
+    __ai_publicMessage(err, 'authentication_error')
     return fail('authentication_error')
   }
   const provider = __ai_resolveProvider(config)
@@ -80,6 +84,7 @@ async function ai_select_database_data(config: any, context: any) {
         jsonMode: true,
       })
     } catch (err: any) {
+      __ai_publicMessage(err, 'provider_error')
       providerFailed = true
       break
     }
@@ -159,9 +164,9 @@ export const aiSelectDatabaseData: NodeHandlerGenerator = {
       ai_select_database_data.toString()
     )
   },
-  generateServerHandler(): string {
+  generateServerHandler(options?: ServerHandlerOptions): string {
     return (
-      generateAIProviderUtils() +
+      generateAIProviderUtils(serverHandlerPrefix(options)) +
       '\n\n' +
       generateAiSqlSelectGuard() +
       '\n\n' +

package/src/nodes/ai/ai-sentiment-analysis.ts

@@ -1,4 +1,5 @@
-import { NodeHandlerGenerator } from '../types'
+import { NodeHandlerGenerator, ServerHandlerOptions } from '../types'
+import { serverHandlerPrefix } from '../general/visitor-request'
 import {
   generateAIProviderUtils,
   generateAIStreamingProviderUtils,
@@ -7,6 +8,8 @@ import {
 
 declare function __ai_resolveTextField(val: any): string
 declare function __ai_resolveToken(token: any): string
+declare function __ai_publicMessage(err: any, code: string): string
+declare function __ai_publicCode(err: any, code: string): string
 declare function __ai_resolveProvider(config: any): string
 declare function __ai_clampTemperature(temp: any, provider: string): number
 declare function __ai_callProvider(params: any): Promise<any>
@@ -44,7 +47,11 @@ async function ai_sentiment_analysis(
   try {
     token = __ai_resolveToken(config.token)
   } catch (err: any) {
-    return { error: true, message: err.message, code: 'authentication_error' }
+    return {
+      error: true,
+      message: __ai_publicMessage(err, 'authentication_error'),
+      code: 'authentication_error',
+    }
   }
 
   const provider = __ai_resolveProvider(config)
@@ -76,7 +83,11 @@ async function ai_sentiment_analysis(
     try {
       return await __ai_handleStreamingCall(callParams, model, streamCallback)
     } catch (err: any) {
-      return { error: true, message: err.message || String(err), code: 'provider_error' }
+      return {
+        error: true,
+        message: __ai_publicMessage(err, 'provider_error'),
+        code: __ai_publicCode(err, 'provider_error'),
+      }
     }
   }
 
@@ -135,7 +146,11 @@ async function ai_sentiment_analysis(
       },
     }
   } catch (err: any) {
-    return { error: true, message: err.message || String(err), code: 'provider_error' }
+    return {
+      error: true,
+      message: __ai_publicMessage(err, 'provider_error'),
+      code: __ai_publicCode(err, 'provider_error'),
+    }
   }
 }
 
@@ -146,7 +161,11 @@ export const aiSentimentAnalysis: NodeHandlerGenerator = {
   generateHandler(): string {
     return generateAIProviderUtils() + '\n\n' + ai_sentiment_analysis.toString()
   },
-  generateServerHandler(): string {
-    return generateAIStreamingProviderUtils() + '\n\n' + ai_sentiment_analysis.toString()
+  generateServerHandler(options?: ServerHandlerOptions): string {
+    return (
+      generateAIStreamingProviderUtils(serverHandlerPrefix(options)) +
+      '\n\n' +
+      ai_sentiment_analysis.toString()
+    )
   },
 }

package/src/nodes/ai/ai-summarization.ts

@@ -1,4 +1,5 @@
-import { NodeHandlerGenerator } from '../types'
+import { NodeHandlerGenerator, ServerHandlerOptions } from '../types'
+import { serverHandlerPrefix } from '../general/visitor-request'
 import {
   generateAIProviderUtils,
   generateAIStreamingProviderUtils,
@@ -7,6 +8,8 @@ import {
 
 declare function __ai_resolveTextField(val: any): string
 declare function __ai_resolveToken(token: any): string
+declare function __ai_publicMessage(err: any, code: string): string
+declare function __ai_publicCode(err: any, code: string): string
 declare function __ai_resolveProvider(config: any): string
 declare function __ai_clampTemperature(temp: any, provider: string): number
 declare function __ai_callProvider(params: any): Promise<any>
@@ -32,7 +35,11 @@ async function ai_summarization(
   try {
     token = __ai_resolveToken(config.token)
   } catch (err: any) {
-    return { error: true, message: err.message, code: 'authentication_error' }
+    return {
+      error: true,
+      message: __ai_publicMessage(err, 'authentication_error'),
+      code: 'authentication_error',
+    }
   }
 
   const provider = __ai_resolveProvider(config)
@@ -83,7 +90,11 @@ async function ai_summarization(
     try {
       return await __ai_handleStreamingCall(callParams, model, streamCallback)
     } catch (err: any) {
-      return { error: true, message: err.message || String(err), code: 'provider_error' }
+      return {
+        error: true,
+        message: __ai_publicMessage(err, 'provider_error'),
+        code: __ai_publicCode(err, 'provider_error'),
+      }
     }
   }
 
@@ -95,7 +106,11 @@ async function ai_summarization(
       model,
     }
   } catch (err: any) {
-    return { error: true, message: err.message || String(err), code: 'provider_error' }
+    return {
+      error: true,
+      message: __ai_publicMessage(err, 'provider_error'),
+      code: __ai_publicCode(err, 'provider_error'),
+    }
   }
 }
 
@@ -106,7 +121,11 @@ export const aiSummarization: NodeHandlerGenerator = {
   generateHandler(): string {
     return generateAIProviderUtils() + '\n\n' + ai_summarization.toString()
   },
-  generateServerHandler(): string {
-    return generateAIStreamingProviderUtils() + '\n\n' + ai_summarization.toString()
+  generateServerHandler(options?: ServerHandlerOptions): string {
+    return (
+      generateAIStreamingProviderUtils(serverHandlerPrefix(options)) +
+      '\n\n' +
+      ai_summarization.toString()
+    )
   },
 }

package/src/nodes/ai/ai-text-classifier.ts

@@ -1,4 +1,5 @@
-import { NodeHandlerGenerator } from '../types'
+import { NodeHandlerGenerator, ServerHandlerOptions } from '../types'
+import { serverHandlerPrefix } from '../general/visitor-request'
 import {
   generateAIProviderUtils,
   generateAIStreamingProviderUtils,
@@ -7,6 +8,8 @@ import {
 
 declare function __ai_resolveTextField(val: any): string
 declare function __ai_resolveToken(token: any): string
+declare function __ai_publicMessage(err: any, code: string): string
+declare function __ai_publicCode(err: any, code: string): string
 declare function __ai_resolveProvider(config: any): string
 declare function __ai_clampTemperature(temp: any, provider: string): number
 declare function __ai_callProvider(params: any): Promise<any>
@@ -53,7 +56,11 @@ async function ai_text_classifier(
   try {
     token = __ai_resolveToken(config.token)
   } catch (err: any) {
-    return { error: true, message: err.message, code: 'authentication_error' }
+    return {
+      error: true,
+      message: __ai_publicMessage(err, 'authentication_error'),
+      code: 'authentication_error',
+    }
   }
 
   const provider = __ai_resolveProvider(config)
@@ -86,7 +93,11 @@ async function ai_text_classifier(
     try {
       return await __ai_handleStreamingCall(callParams, model, streamCallback)
     } catch (err: any) {
-      return { error: true, message: err.message || String(err), code: 'provider_error' }
+      return {
+        error: true,
+        message: __ai_publicMessage(err, 'provider_error'),
+        code: __ai_publicCode(err, 'provider_error'),
+      }
     }
   }
 
@@ -133,7 +144,11 @@ async function ai_text_classifier(
       confidence: typeof parsed.confidence === 'number' ? parsed.confidence : 0,
     }
   } catch (err: any) {
-    return { error: true, message: err.message || String(err), code: 'provider_error' }
+    return {
+      error: true,
+      message: __ai_publicMessage(err, 'provider_error'),
+      code: __ai_publicCode(err, 'provider_error'),
+    }
   }
 }
 
@@ -144,7 +159,11 @@ export const aiTextClassifier: NodeHandlerGenerator = {
   generateHandler(): string {
     return generateAIProviderUtils() + '\n\n' + ai_text_classifier.toString()
   },
-  generateServerHandler(): string {
-    return generateAIStreamingProviderUtils() + '\n\n' + ai_text_classifier.toString()
+  generateServerHandler(options?: ServerHandlerOptions): string {
+    return (
+      generateAIStreamingProviderUtils(serverHandlerPrefix(options)) +
+      '\n\n' +
+      ai_text_classifier.toString()
+    )
   },
 }

package/src/nodes/ai/ai-text-transform.ts

@@ -1,4 +1,5 @@
-import { NodeHandlerGenerator } from '../types'
+import { NodeHandlerGenerator, ServerHandlerOptions } from '../types'
+import { serverHandlerPrefix } from '../general/visitor-request'
 import {
   generateAIProviderUtils,
   generateAIStreamingProviderUtils,
@@ -7,6 +8,8 @@ import {
 
 declare function __ai_resolveTextField(val: any): string
 declare function __ai_resolveToken(token: any): string
+declare function __ai_publicMessage(err: any, code: string): string
+declare function __ai_publicCode(err: any, code: string): string
 declare function __ai_resolveProvider(config: any): string
 declare function __ai_clampTemperature(temp: any, provider: string): number
 declare function __ai_callProvider(params: any): Promise<any>
@@ -35,7 +38,11 @@ async function ai_text_transform(
   try {
     token = __ai_resolveToken(config.token)
   } catch (err: any) {
-    return { error: true, message: err.message, code: 'authentication_error' }
+    return {
+      error: true,
+      message: __ai_publicMessage(err, 'authentication_error'),
+      code: 'authentication_error',
+    }
   }
 
   const provider = __ai_resolveProvider(config)
@@ -94,7 +101,11 @@ async function ai_text_transform(
     try {
       return await __ai_handleStreamingCall(callParams, model, streamCallback)
     } catch (err: any) {
-      return { error: true, message: err.message || String(err), code: 'provider_error' }
+      return {
+        error: true,
+        message: __ai_publicMessage(err, 'provider_error'),
+        code: __ai_publicCode(err, 'provider_error'),
+      }
     }
   }
 
@@ -106,7 +117,11 @@ async function ai_text_transform(
       model,
     }
   } catch (err: any) {
-    return { error: true, message: err.message || String(err), code: 'provider_error' }
+    return {
+      error: true,
+      message: __ai_publicMessage(err, 'provider_error'),
+      code: __ai_publicCode(err, 'provider_error'),
+    }
   }
 }
 
@@ -117,7 +132,11 @@ export const aiTextTransform: NodeHandlerGenerator = {
   generateHandler(): string {
     return generateAIProviderUtils() + '\n\n' + ai_text_transform.toString()
   },
-  generateServerHandler(): string {
-    return generateAIStreamingProviderUtils() + '\n\n' + ai_text_transform.toString()
+  generateServerHandler(options?: ServerHandlerOptions): string {
+    return (
+      generateAIStreamingProviderUtils(serverHandlerPrefix(options)) +
+      '\n\n' +
+      ai_text_transform.toString()
+    )
   },
 }

package/src/nodes/analytics/analytics-track-outcome.ts

@@ -0,0 +1,111 @@
+import { NodeHandlerGenerator } from '../types'
+
+/**
+ * Reports what a visit produced to Growth analytics.
+ *
+ * Two bodies, one node. In the browser the tracker does the sending (it holds
+ * the visitor's identity and queues the beacon); on the server — where the
+ * order or booking row has just been written — the segment posts straight to
+ * the analytics service with the SERVER key, so a purchase cannot be forged by
+ * a visitor's browser nor lost to an ad blocker. The money names are refused
+ * on the client for exactly that reason.
+ *
+ * Attribution: a browser outcome inherits the session's; a server outcome
+ * carries the ids the trigger stamped on the context (`__tpa`, set by every
+ * generated trigger) plus whatever first-touch snapshot the caller binds in
+ * `attribution` (the checkout stamps `utm_*`, `referrer_host`, `landing_path`).
+ *
+ * Never throws: an outcome that cannot be reported answers `{ sent: false }`
+ * and the workflow continues — analytics must never cost a sale.
+ */
+const SERVER_ONLY_OUTCOMES = ['purchase', 'booking_made']
+
+const CLIENT_BODY = `async function analytics_track_outcome(config, context) {
+  var name = config.name == null ? '' : String(config.name);
+  if (!name) {
+    return { sent: false, reason: 'no-name' };
+  }
+  if (${JSON.stringify(SERVER_ONLY_OUTCOMES)}.indexOf(name) !== -1) {
+    return { sent: false, reason: 'server-only' };
+  }
+  try {
+    var tracker = typeof window !== 'undefined' ? window.tpAnalytics : null;
+    if (tracker && typeof tracker.track === 'function') {
+      tracker.track(name, {
+        value: config.value,
+        currency: config.currency,
+        outcomeId: config.outcomeId,
+        recordId: config.recordId,
+        query: config.query,
+        results: config.results
+      });
+      return { sent: true };
+    }
+  } catch (err) {
+    /* analytics must never break the page */
+  }
+  return { sent: false, reason: 'tracker-unavailable' };
+}`
+
+const SERVER_BODY = `async function analytics_track_outcome(config, context) {
+  var name = config.name == null ? '' : String(config.name);
+  if (!name) {
+    return { sent: false, reason: 'no-name' };
+  }
+  // \`globalThis.process\` (member access): webpack rewrites a bare \`process\`.
+  var env = globalThis.process && globalThis.process.env;
+  var baseUrl = (env && env.NEXT_PUBLIC_TELEPORT_ANALYTICS_URL) || '';
+  var publicKey = (env && env.NEXT_PUBLIC_TELEPORT_ANALYTICS_KEY) || '';
+  var serverKey = (env && env.TELEPORT_ANALYTICS_SERVER_KEY) || '';
+  if (baseUrl.indexOf('http') !== 0 || !publicKey || !serverKey) {
+    return { sent: false, reason: 'not-configured' };
+  }
+  var ids = context && context.__tpa && typeof context.__tpa === 'object' ? context.__tpa : {};
+  var attribution = config.attribution && typeof config.attribution === 'object' ? config.attribution : {};
+  var outcome = {
+    name: name,
+    value: config.value == null || config.value === '' ? null : Number(config.value),
+    currency: config.currency == null ? null : String(config.currency),
+    outcomeId: config.outcomeId == null ? null : String(config.outcomeId),
+    recordId: config.recordId == null ? null : String(config.recordId),
+    sessionId: ids.sessionId || null,
+    visitorId: ids.visitorId || attribution.visitor_id || null,
+    path: ids.path || null,
+    exp: ids.exp || null,
+    attribution: {
+      utmSource: attribution.utm_source || attribution.utmSource || null,
+      utmMedium: attribution.utm_medium || attribution.utmMedium || null,
+      utmCampaign: attribution.utm_campaign || attribution.utmCampaign || null,
+      referrerHost: attribution.referrer_host || attribution.referrerHost || null,
+      landingPath: attribution.landing_path || attribution.landingPath || null
+    }
+  };
+  var controller = typeof AbortController !== 'undefined' ? new AbortController() : null;
+  var timer = controller ? setTimeout(function () { controller.abort(); }, 3000) : null;
+  try {
+    var response = await fetch(baseUrl.replace(/\\/$/, '') + '/events/' + publicKey + '/server', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json', 'x-tp-server-key': serverKey },
+      body: JSON.stringify({ outcomes: [outcome] }),
+      signal: controller ? controller.signal : undefined
+    });
+    return { sent: response.status < 400, status: response.status };
+  } catch (err) {
+    return { sent: false, reason: 'network' };
+  } finally {
+    if (timer) {
+      clearTimeout(timer);
+    }
+  }
+}`
+
+export const analyticsTrackOutcome: NodeHandlerGenerator = {
+  nodeType: 'analytics-track-outcome',
+  executionEnv: 'universal',
+  generateHandler(): string {
+    return CLIENT_BODY
+  },
+  generateServerHandler(): string {
+    return SERVER_BODY
+  },
+}