@tellegen/analytics 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,19 @@
+Copyright (c) 2026 Samuel Talkington and contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,58 @@
-# Temporary Holding Version
+# `@tellegen/analytics`
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Cookieless usage analytics for Tellegen sites, built so that only an
+allowlisted vocabulary ever leaves the browser. The package has no
+dependencies and no UI framework. It does two things:
+
+- **Sanitise.** A `Vocabulary` lists the page paths, event names, property
+  keys and property values a site may report. Every payload is rebuilt from
+  it: an unlisted key or value is dropped, numbers become clamped
+  non-negative integers, and any other path is reported as the root. Queries,
+  fragments, titles, referrers, screen sizes and languages are never sent.
+- **Send.** A sender posts each payload straight to Umami Cloud's collection
+  address (`https://gateway.umami.is/api/send`) from the site's own code. No
+  third-party script runs on the page, so a content security policy keeps
+  `script-src 'self'` and adds one host to `connect-src`.
+
+Nothing is sent unless the page is served over https from a listed host, Do
+Not Track and Global Privacy Control are off, and the visitor has not opted
+out. The opt-out is the only thing written to storage, and only when asked.
+
+```sh
+npm install @tellegen/analytics
+```
+
+```ts
+import { createAnalytics, localStorageOptOut, checkVocabulary } from '@tellegen/analytics';
+
+const vocabulary = {
+	pages: { '/': 'Site', '/privacy': 'Privacy' },
+	events: { 'calculation.solve': ['calculation', 'result', 'duration_ms'] },
+	enums: {
+		calculation: new Set(['dcopf', 'acpf']),
+		result: new Set(['completed', 'failed', 'cancelled'])
+	},
+	numbers: new Set(['duration_ms'])
+};
+if (checkVocabulary(vocabulary).length) throw new Error('fix the vocabulary');
+
+const analytics = createAnalytics({
+	...vocabulary,
+	website: 'your-umami-website-id',
+	hosts: ['example.org', 'www.example.org'],
+	optOut: localStorageOptOut('umami.disabled')
+});
+
+analytics.page(location.pathname);
+analytics.track('calculation.solve', {
+	calculation: 'dcopf',
+	result: 'completed',
+	duration_ms: 812
+});
+analytics.setOptOut(true); // a privacy page's switch
+```
+
+`eventCredits(vocabulary, name)` gives what one occurrence costs against an
+Umami quota (the event plus each stored property), so a site can pin its
+budget in a test. `sanitize` returns the exact payload an event would send,
+for tests that assert nothing private is in it.

package/dist/client.d.ts

@@ -0,0 +1,65 @@
+import { type Sender, type Payload } from './sender.js';
+import { type CleanEventData, type EventData, type Vocabulary } from './vocabulary.js';
+/** Where the visitor's choice to turn analytics off is kept. */
+export interface OptOutStore {
+    get(): boolean;
+    set(disabled: boolean): void;
+}
+type StorageLike = {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+    removeItem(key: string): void;
+};
+/**
+ * An opt-out kept in `localStorage` under `key` (Umami's own tracker honours
+ * `umami.disabled`). Storage that cannot be read or written counts as opted
+ * out: a choice that cannot be kept is not asked for.
+ */
+export declare function localStorageOptOut(key: string, win?: {
+    localStorage: StorageLike;
+}): OptOutStore;
+export interface AnalyticsConfig extends Vocabulary {
+    /** Umami website id. */
+    website: string;
+    /** Hostnames that report; every other host (previews, local servers) sends nothing. */
+    hosts: readonly string[];
+    /** Collection endpoint; defaults to Umami Cloud's. */
+    endpoint?: string;
+    /** Replaces the default sender (tests). */
+    sender?: Sender;
+    /** Where the opt-out is kept; defaults to nothing kept, so the choice lasts the page. */
+    optOut?: OptOutStore;
+    /** The page's window; defaults to the global one. */
+    window?: Window;
+    /** Ceiling for measurements, default one day in milliseconds. */
+    maxNumber?: number;
+    /** A site rule applied after sanitising, such as dropping a property that only makes sense with another. */
+    refine?: (name: string, data: CleanEventData) => CleanEventData;
+}
+export interface AnalyticsClient {
+    /** Whether anything may be sent right now. */
+    readonly allowed: boolean;
+    /** Do Not Track or Global Privacy Control is on in this browser. */
+    readonly blockedByBrowser: boolean;
+    /** The visitor turned analytics off, or their choice cannot be kept. */
+    readonly optedOut: boolean;
+    /** Report a view of a listed page. */
+    page(path: string): void;
+    /** Report a listed event with sanitised data. Unlisted names are ignored. */
+    track(name: string, data?: EventData): void;
+    /** Turn analytics off or on for this browser. */
+    setOptOut(disabled: boolean): void;
+    /** Be told when the opt-out changes. */
+    subscribe(listener: () => void): () => void;
+    /** The payload an event or page view would send, or null when nothing may be sent. */
+    sanitize(name: string | undefined, data: Record<string, unknown>, path: string): Payload | null;
+}
+/**
+ * A client that sends only what the vocabulary lists, only from the listed
+ * hosts over https, never under Do Not Track or Global Privacy Control, and
+ * never after the visitor opted out. It stores nothing itself: the opt-out
+ * store is the only thing written, and only when the visitor asks.
+ */
+export declare function createAnalytics(config: AnalyticsConfig): AnalyticsClient;
+export {};
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,EAAe,MAAM,aAAa,CAAC;AACrE,OAAO,EACN,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,UAAU,EAIf,MAAM,iBAAiB,CAAC;AAEzB,gEAAgE;AAChE,MAAM,WAAW,WAAW;IAC3B,GAAG,IAAI,OAAO,CAAC;IACf,GAAG,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;CAC7B;AAED,KAAK,WAAW,GAAG;IAClB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE;IAAE,YAAY,EAAE,WAAW,CAAA;CAAE,GAAG,WAAW,CA6BhG;AAED,MAAM,WAAW,eAAgB,SAAQ,UAAU;IAClD,wBAAwB;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yFAAyF;IACzF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4GAA4G;IAC5G,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,KAAK,cAAc,CAAC;CAChE;AAED,MAAM,WAAW,eAAe;IAC/B,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,sCAAsC;IACtC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,6EAA6E;IAC7E,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC5C,iDAAiD;IACjD,SAAS,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC,wCAAwC;IACxC,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;IAC5C,sFAAsF;IACtF,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;CAChG;AAID;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,eAAe,CA2FxE"}

package/dist/client.js

@@ -0,0 +1,155 @@
+import { umamiSender } from './sender.js';
+import { DEFAULT_MAX_NUMBER, eventData, knownPage } from './vocabulary.js';
+/**
+ * An opt-out kept in `localStorage` under `key` (Umami's own tracker honours
+ * `umami.disabled`). Storage that cannot be read or written counts as opted
+ * out: a choice that cannot be kept is not asked for.
+ */
+export function localStorageOptOut(key, win) {
+    const storage = () => {
+        try {
+            const host = win ?? (typeof window === 'undefined' ? undefined : window);
+            return host?.localStorage ?? null;
+        }
+        catch {
+            return null;
+        }
+    };
+    return {
+        get() {
+            try {
+                const store = storage();
+                return store === null || store.getItem(key) !== null;
+            }
+            catch {
+                return true;
+            }
+        },
+        set(disabled) {
+            try {
+                const store = storage();
+                if (!store)
+                    return;
+                if (disabled)
+                    store.setItem(key, '1');
+                else
+                    store.removeItem(key);
+            }
+            catch {
+                /* Storage denied: the in-memory flag in the client still applies. */
+            }
+        }
+    };
+}
+/**
+ * A client that sends only what the vocabulary lists, only from the listed
+ * hosts over https, never under Do Not Track or Global Privacy Control, and
+ * never after the visitor opted out. It stores nothing itself: the opt-out
+ * store is the only thing written, and only when the visitor asks.
+ */
+export function createAnalytics(config) {
+    const win = config.window ?? (typeof window === 'undefined' ? undefined : window);
+    const hosts = new Set(config.hosts);
+    const sender = config.sender ?? umamiSender(config.endpoint);
+    const maxNumber = config.maxNumber ?? DEFAULT_MAX_NUMBER;
+    const listeners = new Set();
+    let disabled = false;
+    const client = {
+        get blockedByBrowser() {
+            if (!win)
+                return true;
+            try {
+                const nav = win.navigator;
+                const signal = nav.doNotTrack ?? nav.msDoNotTrack ?? '';
+                return signal === '1' || signal === 'yes' || nav.globalPrivacyControl === true;
+            }
+            catch {
+                return true;
+            }
+        },
+        get optedOut() {
+            if (disabled)
+                return true;
+            try {
+                return config.optOut ? config.optOut.get() : false;
+            }
+            catch {
+                return true;
+            }
+        },
+        get allowed() {
+            if (!win)
+                return false;
+            try {
+                return (win.location.protocol === 'https:' &&
+                    hosts.has(win.location.hostname) &&
+                    !client.blockedByBrowser &&
+                    !client.optedOut);
+            }
+            catch {
+                return false;
+            }
+        },
+        sanitize(name, data, path) {
+            if (!client.allowed || !win)
+                return null;
+            const url = knownPage(config.pages, path);
+            const payload = {
+                website: config.website,
+                hostname: win.location.hostname,
+                url,
+                title: config.pages[url] ?? '',
+                referrer: ''
+            };
+            if (name === undefined)
+                return payload;
+            if (!(name in config.events))
+                return null;
+            payload.name = name;
+            let clean = eventData(config, name, data, maxNumber);
+            if (config.refine)
+                clean = config.refine(name, clean);
+            payload.data = clean;
+            return payload;
+        },
+        page(path) {
+            try {
+                const payload = client.sanitize(undefined, {}, path);
+                if (payload)
+                    sender.send(payload);
+            }
+            catch {
+                /* Measurement never interrupts the page. */
+            }
+        },
+        track(name, data = {}) {
+            try {
+                const payload = client.sanitize(name, data, win?.location.pathname ?? '/');
+                if (payload)
+                    sender.send(payload);
+            }
+            catch {
+                /* Measurement never interrupts the page. */
+            }
+        },
+        setOptOut(next) {
+            disabled = next;
+            try {
+                config.optOut?.set(next);
+            }
+            catch {
+                disabled = true;
+            }
+            for (const listener of listeners)
+                listener();
+        },
+        subscribe(listener) {
+            listeners.add(listener);
+            return () => {
+                listeners.delete(listener);
+            };
+        }
+    };
+    return client;
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,WAAW,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAIN,kBAAkB,EAClB,SAAS,EACT,SAAS,EACT,MAAM,iBAAiB,CAAC;AAczB;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,GAAmC;IAClF,MAAM,OAAO,GAAG,GAAuB,EAAE;QACxC,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACzE,OAAO,IAAI,EAAE,YAAY,IAAI,IAAI,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC,CAAC;IACF,OAAO;QACN,GAAG;YACF,IAAI,CAAC;gBACJ,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;gBACxB,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QACD,GAAG,CAAC,QAAQ;YACX,IAAI,CAAC;gBACJ,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK;oBAAE,OAAO;gBACnB,IAAI,QAAQ;oBAAE,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;;oBACjC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACR,qEAAqE;YACtE,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC;AA0CD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAuB;IACtD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;IACxC,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,MAAM,GAAoB;QAC/B,IAAI,gBAAgB;YACnB,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,GAAG,CAAC,SAA6B,CAAC;gBAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;gBACxD,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,oBAAoB,KAAK,IAAI,CAAC;YAChF,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QACD,IAAI,QAAQ;YACX,IAAI,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC1B,IAAI,CAAC;gBACJ,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QACD,IAAI,OAAO;YACV,IAAI,CAAC,GAAG;gBAAE,OAAO,KAAK,CAAC;YACvB,IAAI,CAAC;gBACJ,OAAO,CACN,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ;oBAClC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAChC,CAAC,MAAM,CAAC,gBAAgB;oBACxB,CAAC,MAAM,CAAC,QAAQ,CAChB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI;YACxB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACzC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAY;gBACxB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ;gBAC/B,GAAG;gBACH,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;gBAC9B,QAAQ,EAAE,EAAE;aACZ,CAAC;YACF,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC;YACvC,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;YACpB,IAAI,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,MAAM;gBAAE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACtD,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC;YACrB,OAAO,OAAO,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAI;YACR,IAAI,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;gBACrD,IAAI,OAAO;oBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACR,4CAA4C;YAC7C,CAAC;QACF,CAAC;QACD,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE;YACpB,IAAI,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC;gBAC3E,IAAI,OAAO;oBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACR,4CAA4C;YAC7C,CAAC;QACF,CAAC;QACD,SAAS,CAAC,IAAI;YACb,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC;gBACJ,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACR,QAAQ,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,KAAK,MAAM,QAAQ,IAAI,SAAS;gBAAE,QAAQ,EAAE,CAAC;QAC9C,CAAC;QACD,SAAS,CAAC,QAAQ;YACjB,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,GAAG,EAAE;gBACX,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC,CAAC;QACH,CAAC;KACD,CAAC;IACF,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { checkVocabulary, eventCredits, eventData, knownPage, DEFAULT_MAX_NUMBER, EVENT_NAME_LIMIT, PROPERTY_LIMIT, STRING_LIMIT } from './vocabulary.js';
+export type { CleanEventData, EventData, Vocabulary } from './vocabulary.js';
+export { umamiSender, UMAMI_SEND } from './sender.js';
+export type { FetchLike, Payload, Sender } from './sender.js';
+export { createAnalytics, localStorageOptOut } from './client.js';
+export type { AnalyticsClient, AnalyticsConfig, OptOutStore } from './client.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,eAAe,EACf,YAAY,EACZ,SAAS,EACT,SAAS,EACT,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAClE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,4 @@
+export { checkVocabulary, eventCredits, eventData, knownPage, DEFAULT_MAX_NUMBER, EVENT_NAME_LIMIT, PROPERTY_LIMIT, STRING_LIMIT } from './vocabulary.js';
+export { umamiSender, UMAMI_SEND } from './sender.js';
+export { createAnalytics, localStorageOptOut } from './client.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,eAAe,EACf,YAAY,EACZ,SAAS,EACT,SAAS,EACT,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/sender.d.ts

@@ -0,0 +1,48 @@
+/**
+ * The one request this package makes: a POST of a sanitised payload to Umami
+ * Cloud's collection endpoint, the same request Umami's own tracker script
+ * sends. No script is loaded from a third party. The address is one literal,
+ * never assembled, so a site's content security policy can name its origin.
+ */
+export declare const UMAMI_SEND = "https://gateway.umami.is/api/send";
+/** What an event or page view carries. Nothing else is ever sent. */
+export interface Payload {
+    /** Umami website id. */
+    website: string;
+    /** The page's hostname. */
+    hostname: string;
+    /** A listed page path, never a query or a fragment. */
+    url: string;
+    /** That page's listed title. */
+    title: string;
+    /** Always empty: referring addresses are not reported. */
+    referrer: '';
+    /** The event name, absent for a page view. */
+    name?: string;
+    /** Sanitised event data. */
+    data?: Record<string, string | number>;
+}
+export interface Sender {
+    send(payload: Payload): void;
+}
+/** The subset of `fetch` the sender needs; a test passes a stub. */
+export type FetchLike = (input: string, init: {
+    method: 'POST';
+    headers: Record<string, string>;
+    body: string;
+    keepalive: boolean;
+    credentials: 'omit';
+    referrerPolicy: 'no-referrer';
+    mode: 'cors';
+}) => Promise<{
+    ok: boolean;
+    json(): Promise<unknown>;
+} | undefined | void> | void;
+/**
+ * A sender for Umami's collection endpoint. The response carries a `cache`
+ * token that lets the server skip recomputing the visitor's session; it is
+ * kept in memory only and resent as the `x-umami-cache` header. Every
+ * failure is swallowed: analytics never changes what the page does.
+ */
+export declare function umamiSender(endpoint?: string, fetchFn?: FetchLike): Sender;
+//# sourceMappingURL=sender.d.ts.map

package/dist/sender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender.d.ts","sourceRoot":"","sources":["../src/sender.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,UAAU,sCAAsC,CAAC;AAE9D,qEAAqE;AACrE,MAAM,WAAW,OAAO;IACvB,wBAAwB;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,QAAQ,EAAE,EAAE,CAAC;IACb,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,MAAM;IACtB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CAC7B;AAED,oEAAoE;AACpE,MAAM,MAAM,SAAS,GAAG,CACvB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IACL,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,aAAa,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;CACb,KACG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CAAE,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;AAElF;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,GAAE,MAAmB,EAAE,OAAO,CAAC,EAAE,SAAS,GAAG,MAAM,CAoCtF"}

package/dist/sender.js

@@ -0,0 +1,52 @@
+/**
+ * The one request this package makes: a POST of a sanitised payload to Umami
+ * Cloud's collection endpoint, the same request Umami's own tracker script
+ * sends. No script is loaded from a third party. The address is one literal,
+ * never assembled, so a site's content security policy can name its origin.
+ */
+export const UMAMI_SEND = 'https://gateway.umami.is/api/send';
+/**
+ * A sender for Umami's collection endpoint. The response carries a `cache`
+ * token that lets the server skip recomputing the visitor's session; it is
+ * kept in memory only and resent as the `x-umami-cache` header. Every
+ * failure is swallowed: analytics never changes what the page does.
+ */
+export function umamiSender(endpoint = UMAMI_SEND, fetchFn) {
+    let cache;
+    return {
+        send(payload) {
+            try {
+                const call = fetchFn ?? (typeof fetch === 'function' ? fetch : undefined);
+                if (!call)
+                    return;
+                const headers = { 'content-type': 'application/json' };
+                if (cache)
+                    headers['x-umami-cache'] = cache;
+                const request = call(endpoint, {
+                    method: 'POST',
+                    headers,
+                    body: JSON.stringify({ type: 'event', payload }),
+                    keepalive: true,
+                    credentials: 'omit',
+                    referrerPolicy: 'no-referrer',
+                    mode: 'cors'
+                });
+                Promise.resolve(request)
+                    .then(async (response) => {
+                    if (!response || !response.ok)
+                        return;
+                    const body = await response.json();
+                    if (body &&
+                        typeof body === 'object' &&
+                        typeof body.cache === 'string')
+                        cache = body.cache;
+                })
+                    .catch(() => { });
+            }
+            catch {
+                /* A blocked or failing collector must not reach the page. */
+            }
+        }
+    };
+}
+//# sourceMappingURL=sender.js.map

package/dist/sender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender.js","sourceRoot":"","sources":["../src/sender.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,mCAAmC,CAAC;AAsC9D;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,QAAQ,GAAW,UAAU,EAAE,OAAmB;IAC7E,IAAI,KAAyB,CAAC;IAC9B,OAAO;QACN,IAAI,CAAC,OAAO;YACX,IAAI,CAAC;gBACJ,MAAM,IAAI,GACT,OAAO,IAAI,CAAC,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAE,KAA8B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACxF,IAAI,CAAC,IAAI;oBAAE,OAAO;gBAClB,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;gBAC/E,IAAI,KAAK;oBAAE,OAAO,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC;gBAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE;oBAC9B,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;oBAChD,SAAS,EAAE,IAAI;oBACf,WAAW,EAAE,MAAM;oBACnB,cAAc,EAAE,aAAa;oBAC7B,IAAI,EAAE,MAAM;iBACZ,CAAC,CAAC;gBACH,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;qBACtB,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;oBACxB,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,EAAE;wBAAE,OAAO;oBACtC,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAC5C,IACC,IAAI;wBACJ,OAAO,IAAI,KAAK,QAAQ;wBACxB,OAAQ,IAA4B,CAAC,KAAK,KAAK,QAAQ;wBAEvD,KAAK,GAAI,IAA0B,CAAC,KAAK,CAAC;gBAC5C,CAAC,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACR,6DAA6D;YAC9D,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/vocabulary.d.ts

@@ -0,0 +1,47 @@
+/**
+ * A site's analytics vocabulary: the only page paths, event names, property
+ * keys and property values that may ever leave the browser. Every outgoing
+ * payload is rebuilt from it, so a value that is not listed here is dropped
+ * before it is sent.
+ */
+export interface Vocabulary {
+    /** Page paths that may be reported, each with its title. Any other path is reported as the root. */
+    pages: Record<string, string>;
+    /** Event names and the property keys each may carry. */
+    events: Record<string, readonly string[]>;
+    /** The values each string property may take. */
+    enums: Record<string, ReadonlySet<string>>;
+    /** Properties that carry a non-negative integer measurement. */
+    numbers: ReadonlySet<string>;
+}
+/** What a caller passes to `track`: anything, since only listed keys survive. */
+export type EventData = Record<string, string | number | undefined>;
+/** Event data after sanitising: listed enum values and clamped integers only. */
+export type CleanEventData = Record<string, string | number>;
+/** Umami's limits on what it stores (docs.umami.is, tracker functions). */
+export declare const EVENT_NAME_LIMIT = 50;
+export declare const STRING_LIMIT = 500;
+export declare const PROPERTY_LIMIT = 50;
+/** Default ceiling for measurements: one day in milliseconds. */
+export declare const DEFAULT_MAX_NUMBER = 86400000;
+/** The listed page for a URL or path, or the root when the path is not listed. */
+export declare function knownPage(pages: Vocabulary['pages'], value: unknown): string;
+/**
+ * The event data that may be sent for an event: listed keys only, string
+ * values that the property's enum lists, numbers clamped to non-negative
+ * integers no larger than `maxNumber`. Unlisted keys and values vanish.
+ */
+export declare function eventData(vocabulary: Vocabulary, name: string, input: Record<string, unknown>, maxNumber?: number): CleanEventData;
+/**
+ * How many units of an Umami quota one occurrence of the event costs: the
+ * event itself plus each stored property.
+ */
+export declare function eventCredits(vocabulary: Vocabulary, name: string): number;
+/**
+ * Problems with a vocabulary, as sentences; an empty list means every name
+ * and value fits Umami's limits and every property is either an enum or a
+ * number. Sites assert this in a unit test so a vocabulary change is checked
+ * before it ships.
+ */
+export declare function checkVocabulary(vocabulary: Vocabulary): string[];
+//# sourceMappingURL=vocabulary.d.ts.map

package/dist/vocabulary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vocabulary.d.ts","sourceRoot":"","sources":["../src/vocabulary.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IAC1B,oGAAoG;IACpG,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;IAC1C,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,gEAAgE;IAChE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC7B;AAED,iFAAiF;AACjF,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC;AAEpE,iFAAiF;AACjF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;AAE7D,2EAA2E;AAC3E,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,YAAY,MAAM,CAAC;AAChC,eAAO,MAAM,cAAc,KAAK,CAAC;AACjC,iEAAiE;AACjE,eAAO,MAAM,kBAAkB,WAAa,CAAC;AAE7C,kFAAkF;AAClF,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAS5E;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CACxB,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,SAAS,SAAqB,GAC5B,cAAc,CAgBhB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIzE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,EAAE,CA+BhE"}

package/dist/vocabulary.js

@@ -0,0 +1,93 @@
+/** Umami's limits on what it stores (docs.umami.is, tracker functions). */
+export const EVENT_NAME_LIMIT = 50;
+export const STRING_LIMIT = 500;
+export const PROPERTY_LIMIT = 50;
+/** Default ceiling for measurements: one day in milliseconds. */
+export const DEFAULT_MAX_NUMBER = 86_400_000;
+/** The listed page for a URL or path, or the root when the path is not listed. */
+export function knownPage(pages, value) {
+    const root = '/' in pages ? '/' : (Object.keys(pages)[0] ?? '/');
+    if (typeof value !== 'string')
+        return root;
+    try {
+        const path = new URL(value, 'https://vocabulary.invalid').pathname;
+        return path in pages ? path : root;
+    }
+    catch {
+        return root;
+    }
+}
+/**
+ * The event data that may be sent for an event: listed keys only, string
+ * values that the property's enum lists, numbers clamped to non-negative
+ * integers no larger than `maxNumber`. Unlisted keys and values vanish.
+ */
+export function eventData(vocabulary, name, input, maxNumber = DEFAULT_MAX_NUMBER) {
+    const output = {};
+    for (const key of vocabulary.events[name] ?? []) {
+        const value = input[key];
+        if (typeof value === 'string') {
+            if (vocabulary.enums[key]?.has(value))
+                output[key] = value;
+        }
+        else if (vocabulary.numbers.has(key) &&
+            typeof value === 'number' &&
+            Number.isFinite(value) &&
+            value >= 0) {
+            output[key] = Math.min(maxNumber, Math.round(value));
+        }
+    }
+    return output;
+}
+/**
+ * How many units of an Umami quota one occurrence of the event costs: the
+ * event itself plus each stored property.
+ */
+export function eventCredits(vocabulary, name) {
+    const properties = vocabulary.events[name];
+    if (!properties)
+        return 0;
+    return 1 + properties.length;
+}
+/**
+ * Problems with a vocabulary, as sentences; an empty list means every name
+ * and value fits Umami's limits and every property is either an enum or a
+ * number. Sites assert this in a unit test so a vocabulary change is checked
+ * before it ships.
+ */
+export function checkVocabulary(vocabulary) {
+    const problems = [];
+    const pageEntries = Object.entries(vocabulary.pages);
+    if (pageEntries.length === 0)
+        problems.push('no pages are listed');
+    for (const [path, title] of pageEntries) {
+        if (!path.startsWith('/'))
+            problems.push(`page ${path} is not an absolute path`);
+        if (title.length === 0 || title.length > STRING_LIMIT)
+            problems.push(`page ${path} has a bad title`);
+    }
+    for (const [name, properties] of Object.entries(vocabulary.events)) {
+        if (name.length === 0 || name.length > EVENT_NAME_LIMIT)
+            problems.push(`event ${name} has a name longer than ${EVENT_NAME_LIMIT}`);
+        if (properties.length > PROPERTY_LIMIT)
+            problems.push(`event ${name} has more than ${PROPERTY_LIMIT} properties`);
+        if (new Set(properties).size !== properties.length)
+            problems.push(`event ${name} lists a property twice`);
+        for (const key of properties) {
+            const isEnum = key in vocabulary.enums;
+            const isNumber = vocabulary.numbers.has(key);
+            if (isEnum === isNumber)
+                problems.push(`property ${key} of ${name} must be exactly one of an enum or a number`);
+        }
+    }
+    for (const [key, values] of Object.entries(vocabulary.enums)) {
+        if (values.size === 0)
+            problems.push(`enum ${key} has no values`);
+        for (const value of values) {
+            if (value.length === 0 || value.length > STRING_LIMIT)
+                problems.push(`enum ${key} has a value outside 1 to ${STRING_LIMIT} characters`);
+        }
+    }
+    return problems;
+}
+//# sourceMappingURL=vocabulary.js.map

package/dist/vocabulary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vocabulary.js","sourceRoot":"","sources":["../src/vocabulary.ts"],"names":[],"mappings":"AAuBA,2EAA2E;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAChC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AACjC,iEAAiE;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAE7C,kFAAkF;AAClF,MAAM,UAAU,SAAS,CAAC,KAA0B,EAAE,KAAc;IACnE,MAAM,IAAI,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC,QAAQ,CAAC;QACnE,OAAO,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CACxB,UAAsB,EACtB,IAAY,EACZ,KAA8B,EAC9B,SAAS,GAAG,kBAAkB;IAE9B,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC5D,CAAC;aAAM,IACN,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAC3B,OAAO,KAAK,KAAK,QAAQ;YACzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,KAAK,IAAI,CAAC,EACT,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,UAAsB,EAAE,IAAY;IAChE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,CAAC;IAC1B,OAAO,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,UAAsB;IACrD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,0BAA0B,CAAC,CAAC;QACjF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;YACpD,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC,CAAC;IAChD,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACpE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB;YACtD,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,2BAA2B,gBAAgB,EAAE,CAAC,CAAC;QAC3E,IAAI,UAAU,CAAC,MAAM,GAAG,cAAc;YACrC,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,cAAc,aAAa,CAAC,CAAC;QAC3E,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM;YACjD,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,yBAAyB,CAAC,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC;YACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,MAAM,KAAK,QAAQ;gBACtB,QAAQ,CAAC,IAAI,CAAC,YAAY,GAAG,OAAO,IAAI,6CAA6C,CAAC,CAAC;QACzF,CAAC;IACF,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,CAAC;QAClE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;gBACpD,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,6BAA6B,YAAY,aAAa,CAAC,CAAC;QACnF,CAAC;IACF,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC"}

package/package.json

@@ -1,6 +1,46 @@
 {
-  "name": "@tellegen/analytics",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+	"name": "@tellegen/analytics",
+	"version": "0.1.0",
+	"description": "Allowlisted, cookieless usage analytics for Tellegen sites: a vocabulary sanitizer and a first-party sender for Umami Cloud.",
+	"keywords": [
+		"analytics",
+		"umami",
+		"privacy",
+		"browser"
+	],
+	"license": "MIT",
+	"type": "module",
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/eigenergy/tellegen.git",
+		"directory": "packages/analytics"
+	},
+	"bugs": {
+		"url": "https://github.com/eigenergy/tellegen/issues"
+	},
+	"homepage": "https://eigenergy.github.io/tellegen/",
+	"types": "./dist/index.d.ts",
+	"files": [
+		"dist"
+	],
+	"publishConfig": {
+		"access": "public"
+	},
+	"sideEffects": false,
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"default": "./dist/index.js"
+		}
+	},
+	"scripts": {
+		"build": "tsc -p tsconfig.json",
+		"check": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.test.json && npm test",
+		"test": "vitest run",
+		"pack:dry-run": "npm pack --dry-run --cache ../../node_modules/.cache/npm-pack"
+	},
+	"devDependencies": {
+		"typescript": "^7.0.2",
+		"vitest": "^5.1.0"
+	}
+}