bitsnap-react 1.19.0 → 1.20.0

package/dist/chunk-W3RGQYPD.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/analytics/contract.ts"],"names":["LIMITS","STREAMS","ENVS","SOURCES","CHANNELS","PAGE_TYPES","SOURCES_FOR_STREAM","MONEY","STOREFRONT_EVENT_SPEC","APP_EVENT_SPEC","TX","SUB","BUSINESS_EVENT_SPEC","EVENT_SPEC","EVENT_NAMES","STREAM_FOR_EVENT","stream","name","isEventName","CONSENT_COOKIE_MAX_AGE_SECONDS","CONSENT_SHOWN_ACTION","normalizeProjectKey","key","bare","CLIENT_RE","parseClientHeader","value","m","MAX_QUERY_VALUE","cleanValue","v","max","t","sanitizePath","pathname","joined","seg"],"mappings":"AAiBO,qrBAAMA,CAAAA,CAAS,CAEpB,cAAA,CAAgB,EAAA,CAEhB,YAAA,CAAc,KAAA,CAEd,aAAA,CAAe,IAAA,CACf,aAAA,CAAe,GAAA,CACf,YAAA,CAAc,EAAA,CACd,IAAA,CAAM,GAAA,CACN,IAAA,CAAM,GAAA,CACN,YAAA,CAAc,GAAA,CACd,GAAA,CAAK,GAAA,CACL,OAAA,CAAS,EAAA,CACT,EAAA,CAAI,EAAA,CACJ,GAAA,CAAK,EAAA,CACL,MAAA,CAAQ,EAAA,CACR,MAAA,CAAQ,EAAA,CACR,SAAA,CAAW,EAAA,CAEX,QAAA,CAAU,KACZ,CAAA,CAMaC,CAAAA,CAAU,CACrB,mBAAA,CACA,YAAA,CACA,iBACF,CAAA,CAGaC,CAAAA,CAAO,CAAC,MAAA,CAAQ,MAAM,CAAA,CAGtBC,CAAAA,CAAU,CACrB,YAAA,CACA,WAAA,CACA,QAAA,CACA,QAAA,CACA,WACF,CAAA,CAGaC,CAAAA,CAAW,CACtB,QAAA,CACA,eAAA,CACA,OAAA,CACA,KAAA,CACA,OACF,CAAA,CAGaC,CAAAA,CAAa,CACxB,MAAA,CACA,SAAA,CACA,SAAA,CACA,MAAA,CACA,UAAA,CACA,SAAA,CACA,OAAA,CACA,QAAA,CACA,aAAA,CACA,OAAA,CACA,SAAA,CACA,KAAA,CACA,OACF,CAAA,CAOO,IAAMC,CAAAA,CAAwD,CACnE,iBAAA,CAAmB,CAAC,YAAA,CAAc,WAAA,CAAa,QAAQ,CAAA,CACvD,UAAA,CAAY,CAAC,WAAW,CAAA,CACxB,eAAA,CAAiB,CAAC,QAAQ,CAC5B,CAAA,CAYMC,CAAAA,CAAQ,CAAE,WAAA,CAAa,QAAA,CAAU,QAAA,CAAU,QAAS,CAAA,CAG7CC,CAAAA,CAAwB,CACnC,SAAA,CAAW,CAAE,OAAA,CAAS,SAAU,CAAA,CAChC,mBAAA,CAAqB,CAAE,OAAA,CAAS,SAAA,CAAW,UAAA,CAAY,QAAS,CAAA,CAChE,kBAAA,CAAoB,CAClB,OAAA,CAAS,SAAA,CACT,WAAA,CAAa,UAAA,CACb,SAAA,CAAW,UACb,CAAA,CACA,eAAA,CAAiB,CAAE,OAAA,CAAS,SAAA,CAAW,QAAA,CAAU,SAAU,CAAA,CAC3D,YAAA,CAAc,CACZ,WAAA,CAAa,QAAA,CACb,QAAA,CAAU,QAAA,CACV,YAAA,CAAc,qCAChB,CAAA,CACA,gBAAA,CAAkB,CAAC,CAAA,CACnB,WAAA,CAAa,CAAE,GAAA,CAAK,QAAA,CAAU,GAAGD,CAAM,CAAA,CACvC,gBAAA,CAAkB,CAAE,GAAA,CAAK,QAAA,CAAU,GAAGA,CAAM,CAAA,CAC5C,WAAA,CAAa,CAAE,UAAA,CAAY,QAAA,CAAU,GAAGA,CAAM,CAAA,CAC9C,gBAAA,CAAkB,CAChB,UAAA,CAAY,QAAA,CACZ,aAAA,CAAe,uBAAA,CACf,GAAGA,CACL,CAAA,CACA,uBAAA,CAAyB,CACvB,IAAA,CAAM,wCACR,CAAA,CACA,yBAAA,CAA2B,CAAE,KAAA,CAAO,QAAA,CAAU,IAAA,CAAM,QAAS,CAAA,CAC7D,cAAA,CAAgB,CAAE,SAAA,CAAW,QAAS,CAAA,CACtC,eAAA,CAAiB,CAAE,SAAA,CAAW,SAAA,CAAW,MAAA,CAAQ,QAAS,CAAA,CAC1D,wBAAA,CAA0B,CAAE,MAAA,CAAQ,QAAS,CAAA,CAC7C,uBAAA,CAAyB,CAAE,OAAA,CAAS,QAAA,CAAU,MAAA,CAAQ,QAAS,CAAA,CAC/D,iBAAA,CAAmB,CAAE,OAAA,CAAS,QAAA,CAAU,MAAA,CAAQ,QAAS,CAAA,CACzD,iBAAA,CAAmB,CAAC,CAAA,CACpB,gBAAA,CAAkB,CAAE,OAAA,CAAS,0BAA2B,CAAA,CACxD,gBAAA,CAAkB,CAChB,OAAA,CAAS,QAAA,CACT,MAAA,CAAQ,SAAA,CACR,OAAA,CAAS,kCAAA,CACT,UAAA,CAAY,SACd,CAAA,CACA,mBAAA,CAAqB,CAAC,CAAA,CACtB,WAAA,CAAa,CAAC,CAAA,CACd,kBAAA,CAAoB,CAAC,CAAA,CACrB,cAAA,CAAgB,CAAC,CAAA,CACjB,cAAA,CAAgB,CAAC,CAAA,CACjB,gBAAA,CAAkB,CAAE,WAAA,CAAa,QAAA,CAAU,UAAA,CAAY,QAAS,CAAA,CAChE,aAAA,CAAe,CAAE,SAAA,CAAW,QAAS,CAAA,CACrC,cAAA,CAAgB,CACd,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CACX,QAAA,CAAU,QACZ,CAAA,CACA,gBAAA,CAAkB,CAChB,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CACX,QAAA,CAAU,QACZ,CAAA,CACA,cAAA,CAAgB,CACd,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CAEX,SAAA,CAAW,QACb,CAAA,CACA,cAAA,CAAgB,CACd,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CACX,YAAA,CAAc,iCAChB,CAAA,CACA,YAAA,CAAc,CACZ,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CAEX,MAAA,CAAQ,QACV,CAAA,CAEA,eAAA,CAAiB,CACf,UAAA,CAAY,QAAA,CACZ,MAAA,CAAQ,4CAAA,CACR,SAAA,CAAW,SAAA,CACX,SAAA,CAAW,SAAA,CACX,WAAA,CAAa,SAAA,CACb,cAAA,CAAgB,QAClB,CAAA,CAKA,aAAA,CAAe,CACb,cAAA,CAAgB,QAClB,CACF,CAAA,CAGaE,CAAAA,CAAiB,CAC5B,aAAA,CAAe,CAAE,KAAA,CAAO,QAAA,CAAU,cAAA,CAAgB,SAAU,CAAA,CAC5D,aAAA,CAAe,CAAE,YAAA,CAAc,QAAA,CAAU,IAAA,CAAM,QAAA,CAAU,QAAA,CAAU,QAAS,CAAA,CAC5E,eAAA,CAAiB,CACf,YAAA,CAAc,QAAA,CACd,IAAA,CAAM,QAAA,CACN,QAAA,CAAU,QACZ,CAAA,CACA,iBAAA,CAAmB,CACjB,YAAA,CAAc,QAAA,CACd,IAAA,CAAM,QAAA,CACN,QAAA,CAAU,QACZ,CAAA,CACA,qBAAA,CAAuB,CAAE,IAAA,CAAM,QAAS,CAAA,CACxC,wBAAA,CAA0B,CAAE,IAAA,CAAM,QAAS,CAAA,CAC3C,uBAAA,CAAyB,CAAE,OAAA,CAAS,QAAA,CAAU,IAAA,CAAM,SAAU,CAAA,CAC9D,yBAAA,CAA2B,CAAE,OAAA,CAAS,QAAA,CAAU,IAAA,CAAM,SAAU,CAAA,CAChE,sBAAA,CAAwB,CACtB,OAAA,CAAS,QAAA,CACT,IAAA,CAAM,SAAA,CACN,UAAA,CAAY,SACd,CAAA,CACA,sBAAA,CAAwB,CAAC,CAAA,CACzB,uBAAA,CAAyB,CAAC,CAAA,CAC1B,qBAAA,CAAuB,CAAE,UAAA,CAAY,SAAU,CAAA,CAC/C,eAAA,CAAiB,CAAE,YAAA,CAAc,SAAU,CAAA,CAC3C,iBAAA,CAAmB,CAAE,YAAA,CAAc,SAAU,CAAA,CAC7C,6BAAA,CAA+B,CAAE,OAAA,CAAS,QAAS,CAAA,CACnD,eAAA,CAAiB,CAAE,OAAA,CAAS,QAAS,CAAA,CACrC,YAAA,CAAc,CAAE,GAAA,CAAK,QAAS,CAAA,CAC9B,oBAAA,CAAsB,CAAE,GAAA,CAAK,QAAA,CAAU,MAAA,CAAQ,QAAS,CAAA,CACxD,eAAA,CAAiB,CAAE,MAAA,CAAQ,QAAA,CAAU,MAAA,CAAQ,SAAU,CAAA,CACvD,gBAAA,CAAkB,CAAE,YAAA,CAAc,QAAS,CAAA,CAC3C,WAAA,CAAa,CAAE,IAAA,CAAM,QAAA,CAAU,KAAA,CAAO,QAAS,CAAA,CAC/C,WAAA,CAAa,CAAE,KAAA,CAAO,SAAU,CAAA,CAChC,iBAAA,CAAmB,CAAE,KAAA,CAAO,SAAU,CAAA,CACtC,cAAA,CAAgB,CAAE,IAAA,CAAM,QAAS,CACnC,CAAA,CAEMC,CAAAA,CAAK,CACT,OAAA,CAAS,SAAA,CACT,MAAA,CAAQ,SAAA,CACR,WAAA,CAAa,SAAA,CACb,QAAA,CAAU,SACZ,CAAA,CACMC,CAAAA,CAAM,CACV,eAAA,CAAiB,SAAA,CACjB,WAAA,CAAa,SAAA,CACb,QAAA,CAAU,SACZ,CAAA,CAMaC,CAAAA,CAAsB,CAEjC,mBAAA,CAAqBF,CAAAA,CACrB,mBAAA,CAAqBA,CAAAA,CACrB,mBAAA,CAAqB,CAAE,GAAGA,CAAAA,CAAI,UAAA,CAAY,SAAU,CAAA,CACpD,mBAAA,CAAqBA,CAAAA,CACrB,kBAAA,CAAoBA,CAAAA,CACpB,oBAAA,CAAsBC,CAAAA,CACtB,mBAAA,CAAqBA,CAAAA,CACrB,oBAAA,CAAsBA,CAAAA,CACtB,oBAAA,CAAsBA,CAAAA,CACtB,oBAAA,CAAsBA,CAAAA,CACtB,wBAAA,CAA0BA,CAAAA,CAC1B,0BAAA,CAA4B,CAAE,GAAGA,CAAAA,CAAK,UAAA,CAAY,SAAU,CAAA,CAC5D,qBAAA,CAAuBA,CAAAA,CACvB,qBAAA,CAAuBA,CAAAA,CACvB,wBAAA,CAA0B,CAAC,CAAA,CAC3B,cAAA,CAAgB,CAAC,CAAA,CACjB,aAAA,CAAe,CAAE,WAAA,CAAa,SAAA,CAAW,QAAA,CAAU,SAAU,CAAA,CAC7D,sBAAA,CAAwB,CAAC,CAAA,CACzB,qBAAA,CAAuB,CAAC,CAAA,CACxB,yBAAA,CAA2B,CACzB,UAAA,CAAY,QAAA,CACZ,gBAAA,CAAkB,QAAA,CAClB,QAAA,CAAU,QACZ,CAAA,CAEA,wBAAA,CAA0B,CACxB,UAAA,CAAY,QAAA,CACZ,aAAA,CAAe,uBAAA,CACf,OAAA,CAAS,SAAA,CACT,GAAGJ,CACL,CAAA,CACA,UAAA,CAAY,CACV,OAAA,CAAS,QAAA,CACT,MAAA,CAAQ,SAAA,CACR,UAAA,CAAY,SAAA,CAEZ,WAAA,CAAa,SAAA,CAEb,KAAA,CAAO,aAAA,CACP,GAAGA,CACL,CAAA,CACA,aAAA,CAAe,CACb,OAAA,CAAS,SAAA,CACT,MAAA,CAAQ,SAAA,CACR,GAAGA,CACL,CAAA,CACA,gBAAA,CAAkB,CAAE,UAAA,CAAY,QAAA,CAAU,WAAA,CAAa,SAAU,CAAA,CACjE,wBAAA,CAA0B,CACxB,aAAA,CAAe,QAAA,CACf,MAAA,CAAQ,QAAA,CACR,OAAA,CAAS,SACX,CAAA,CACA,iBAAA,CAAmB,CAAE,MAAA,CAAQ,QAAA,CAAU,QAAA,CAAU,SAAU,CAAA,CAC3D,mBAAA,CAAqB,CACnB,MAAA,CAAQ,QAAA,CACR,QAAA,CAAU,SAAA,CACV,UAAA,CAAY,SACd,CAAA,CACA,mBAAA,CAAqB,CAAE,IAAA,CAAM,SAAU,CAAA,CACvC,qBAAA,CAAuB,CAAC,CAAA,CACxB,WAAA,CAAa,CAEX,QAAA,CAAU,QAAA,CAEV,MAAA,CAAQ,SAAA,CACR,MAAA,CAAQ,QAAA,CACR,cAAA,CAAgB,oCAAA,CAEhB,WAAA,CAAa,QACf,CACF,CAAA,CAQO,IAAMM,CAAAA,CAAa,CACxB,GAAGL,CAAAA,CACH,GAAGC,CAAAA,CACH,GAAGG,CACL,CAAA,CAOaE,CAAAA,CAAc,CACzB,iBAAA,CAAmB,MAAA,CAAO,IAAA,CAAKN,CAAqB,CAAA,CACpD,UAAA,CAAY,MAAA,CAAO,IAAA,CAAKC,CAAc,CAAA,CACtC,eAAA,CAAiB,MAAA,CAAO,IAAA,CAAKG,CAAmB,CAClD,CAAA,CAEaG,CAAAA,CAA8C,MAAA,CAAO,WAAA,CAChEd,CAAAA,CAAQ,OAAA,CAASe,CAAAA,EACdF,CAAAA,CAAYE,CAAM,CAAA,CAAe,GAAA,CAAKC,CAAAA,EAAS,CAACA,CAAAA,CAAMD,CAAM,CAAU,CACzE,CACF,CAAA,CAGO,SAASE,CAAAA,CAAYD,CAAAA,CAAkC,CAC5D,OAAO,OAAOA,CAAAA,EAAS,QAAA,EAAY,MAAA,CAAO,MAAA,CAAOF,CAAAA,CAAkBE,CAAI,CACzE,CAwLO,IAAME,EAAAA,CAAiC,GAAA,CAAM,EAAA,CAAK,EAAA,CAAK,EAAA,CASvD,IAAMC,EAAAA,CAAuB,OAAA,CAoF7B,SAASC,EAAAA,CAAoBC,CAAAA,CAA4B,CAC9D,IAAMC,CAAAA,CAAOD,CAAAA,CAAI,UAAA,CAAW,KAAK,CAAA,CAAIA,CAAAA,CAAI,KAAA,CAAM,CAAC,CAAA,CAAIA,CAAAA,CACpD,MAAO,qBAAA,CAAsB,IAAA,CAAKC,CAAI,CAAA,CAAIA,CAAAA,CAAO,IACnD,CAMA,IAAMC,CAAAA,CAAY,uEAAA,CAGX,SAASC,CAAAA,CACdC,CAAAA,CAC6C,CAC7C,EAAA,CAAI,CAACA,CAAAA,EAASA,CAAAA,CAAM,MAAA,CAAS1B,CAAAA,CAAO,GAAA,CAAK,OAAO,IAAA,CAChD,IAAM2B,CAAAA,CAAIH,CAAAA,CAAU,IAAA,CAAKE,CAAK,CAAA,CAC9B,OAAOC,CAAAA,CAAI,CAAE,OAAA,CAASA,CAAAA,CAAE,CAAC,CAAA,CAAG,OAAA,CAASA,CAAAA,CAAE,CAAC,CAAE,CAAA,CAAI,IAChD,CAMA,IAAMC,CAAAA,CAAkB5B,CAAAA,CAAO,GAAA,CAOxB,SAAS6B,CAAAA,CAAWC,CAAAA,CAA8BC,CAAAA,CAA4B,CACnF,EAAA,CAAID,CAAAA,EAAK,IAAA,CAAM,OAAO,IAAA,CACtB,IAAME,CAAAA,CAAIF,CAAAA,CAAE,IAAA,CAAK,CAAA,CAEjB,OAAIE,CAAAA,CAAE,MAAA,GAAW,CAAA,EAAKA,CAAAA,CAAE,QAAA,CAAS,GAAG,CAAA,CAAU,IAAA,CACvCA,CAAAA,CAAE,KAAA,CAAM,CAAA,CAAGD,CAAG,CACvB,CAOO,SAASE,CAAAA,CAAaC,CAAAA,CAA0B,CAMrD,IAAMC,CAAAA,CALWD,CAAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAKE,CAAAA,EACpCA,CAAAA,CAAI,QAAA,CAAS,GAAG,CAAA,EAAKA,CAAAA,CAAI,QAAA,CAAS,KAAK,CAAA,CAAU,QAAA,CACjD,sBAAA,CAAuB,IAAA,CAAKA,CAAG,CAAA,CAAU,QAAA,CACtCA,CACR,CAAA,CACuB,IAAA,CAAK,GAAG,CAAA,EAAK,GAAA,CACrC,MAAA,CAAQD,CAAAA,CAAO,UAAA,CAAW,GAAG,CAAA,CAAIA,CAAAA,CAAS,CAAA,CAAA,EAAIA,CAAM,CAAA,CAAA","file":"/home/emems/.t3/worktrees/bitsnap-react/emems-chat-v1/dist/chunk-W3RGQYPD.js","sourcesContent":["/**\n * Bitsnap merchant analytics: the wire contract.\n *\n * SOURCE OF TRUTH: instapay `apps/collector/src/contract.ts` (prose version:\n * `docs/merchant-analytics-contract.md`). This file is a verbatim copy of it\n * (everything below the next comment block). Do not edit it here: change\n * instapay's file and copy it over. `computeVisitorId` and\n * `computeConsentedVisitorId` are pure but need the server secret; they are\n * server-only: the browser never calls them, so bundlers drop them.\n */\n\nexport const SCHEMA_VERSION = 1;\n\n// ---------------------------------------------------------------------------\n// Limits\n// ---------------------------------------------------------------------------\n\nexport const LIMITS = {\n  /** Events in one POST /e. */\n  maxBatchEvents: 50,\n  /** Body of one POST /e or /consent, in bytes. */\n  maxBodyBytes: 64 * 1024,\n  /** `JSON.stringify(props)` of one event, in UTF-16 code units. */\n  maxPropsChars: 4096,\n  maxPropString: 200,\n  maxPropArray: 50,\n  host: 253,\n  path: 512,\n  referrerHost: 253,\n  utm: 100,\n  refCode: 64,\n  id: 64,\n  sdk: 64,\n  pageId: 32,\n  region: 64,\n  osBrowser: 32,\n  /** Collector replaces a client `ts` farther than this from `received_at`. */\n  tsSkewMs: 24 * 60 * 60 * 1000,\n} as const;\n\n// ---------------------------------------------------------------------------\n// Enumerations\n// ---------------------------------------------------------------------------\n\nexport const STREAMS = [\n  \"storefront_events\",\n  \"app_events\",\n  \"business_events\",\n] as const;\nexport type Stream = (typeof STREAMS)[number];\n\nexport const ENVS = [\"live\", \"test\"] as const;\nexport type Env = (typeof ENVS)[number];\n\nexport const SOURCES = [\n  \"storefront\",\n  \"sdk_react\",\n  \"script\",\n  \"server\",\n  \"dashboard\",\n] as const;\nexport type Source = (typeof SOURCES)[number];\n\nexport const CHANNELS = [\n  \"hosted\",\n  \"custom_domain\",\n  \"embed\",\n  \"api\",\n  \"panel\",\n] as const;\nexport type Channel = (typeof CHANNELS)[number];\n\nexport const PAGE_TYPES = [\n  \"shop\",\n  \"catalog\",\n  \"product\",\n  \"cart\",\n  \"checkout\",\n  \"payment\",\n  \"panel\",\n  \"course\",\n  \"custom_page\",\n  \"order\",\n  \"returns\",\n  \"app\",\n  \"other\",\n] as const;\nexport type PageType = (typeof PAGE_TYPES)[number];\n\nexport const DEVICE_TYPES = [\"desktop\", \"mobile\", \"tablet\", \"other\"] as const;\nexport type DeviceType = (typeof DEVICE_TYPES)[number];\n\n/** Sources a browser may claim, per stream. `business_events` is server-only. */\nexport const SOURCES_FOR_STREAM: Record<Stream, readonly Source[]> = {\n  storefront_events: [\"storefront\", \"sdk_react\", \"script\"],\n  app_events: [\"dashboard\"],\n  business_events: [\"server\"],\n};\n\n// ---------------------------------------------------------------------------\n// Event catalogue\n//\n// Each prop is `<type>[?]`: type is `string`, `number`, `boolean`, `string[]`,\n// `number[]` or `enum:a|b|c`; a trailing `?` makes the prop optional.\n// Money is always integer minor units (`*_minor`, grosze/cents) + `currency`\n// (ISO 4217, upper case). `product_id`, `variant_id` and `order_ref` live in\n// the envelope, never in props. Strings never hold PII (see the prose doc).\n// ---------------------------------------------------------------------------\n\nconst MONEY = { value_minor: \"number\", currency: \"string\" } as const;\n\n/** Browser events from hosted pages (H), bitsnap-react (R) and the script (S). */\nexport const STOREFRONT_EVENT_SPEC = {\n  page_view: { landing: \"boolean\" },\n  product_list_viewed: { list_id: \"string?\", item_count: \"number\" },\n  product_impression: {\n    list_id: \"string?\",\n    product_ids: \"string[]\",\n    positions: \"number[]\",\n  },\n  product_clicked: { list_id: \"string?\", position: \"number?\" },\n  product_view: {\n    price_minor: \"number\",\n    currency: \"string\",\n    availability: \"enum:in_stock|out_of_stock|preorder\",\n  },\n  variant_selected: {},\n  add_to_cart: { qty: \"number\", ...MONEY },\n  remove_from_cart: { qty: \"number\", ...MONEY },\n  cart_opened: { item_count: \"number\", ...MONEY },\n  checkout_started: {\n    item_count: \"number\",\n    checkout_type: \"enum:single|cart|link\",\n    ...MONEY,\n  },\n  checkout_step_completed: {\n    step: \"enum:contact|delivery|invoice|consents\",\n  },\n  checkout_validation_error: { field: \"string\", rule: \"string\" },\n  coupon_applied: { coupon_id: \"string\" },\n  coupon_rejected: { coupon_id: \"string?\", reason: \"string\" },\n  delivery_method_selected: { method: \"string\" },\n  payment_method_selected: { gateway: \"string\", method: \"string\" },\n  payment_submitted: { gateway: \"string\", method: \"string\" },\n  apple_pay_clicked: {},\n  apple_pay_result: { outcome: \"enum:success|fail|cancel\" },\n  payment_returned: {\n    gateway: \"string\",\n    method: \"string?\",\n    outcome: \"enum:success|fail|cancel|pending\",\n    error_code: \"string?\",\n  },\n  availability_signup: {},\n  panel_login: {},\n  panel_order_viewed: {},\n  panel_download: {},\n  return_started: {},\n  return_submitted: { reason_code: \"string\", item_count: \"number\" },\n  course_opened: { course_id: \"string\" },\n  lesson_started: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    position: \"number\",\n  },\n  lesson_completed: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    position: \"number\",\n  },\n  video_progress: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    /** 25, 50, 75 or 100. */\n    milestone: \"number\",\n  },\n  test_submitted: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    score_bucket: \"enum:0-24|25-49|50-74|75-99|100\",\n  },\n  lesson_rated: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    /** 1..5. */\n    rating: \"number\",\n  },\n  /** Written by the collector's POST /consent, never sent to POST /e. */\n  consent_updated: {\n    consent_id: \"string\",\n    action: \"enum:accept_all|reject_all|custom|withdraw\",\n    analytics: \"boolean\",\n    marketing: \"boolean\",\n    preferences: \"boolean\",\n    banner_version: \"number\",\n  },\n  /**\n   * Written by the collector's POST /consent (action `shown`), never sent to\n   * POST /e. A banner impression: no consent id, no choice, no visitor.\n   */\n  consent_shown: {\n    banner_version: \"number\",\n  },\n} as const;\n\n/** Merchant behaviour in /app, sent through the same tracker core. */\nexport const APP_EVENT_SPEC = {\n  app_page_view: { route: \"string\", previous_route: \"string?\" },\n  insight_shown: { insight_type: \"string\", rank: \"number\", category: \"string\" },\n  insight_clicked: {\n    insight_type: \"string\",\n    rank: \"number\",\n    category: \"string\",\n  },\n  insight_dismissed: {\n    insight_type: \"string\",\n    rank: \"number\",\n    category: \"string\",\n  },\n  checklist_step_viewed: { step: \"string\" },\n  checklist_step_completed: { step: \"string\" },\n  gateway_connect_started: { gateway: \"string\", step: \"string?\" },\n  gateway_connect_completed: { gateway: \"string\", step: \"string?\" },\n  gateway_connect_failed: {\n    gateway: \"string\",\n    step: \"string?\",\n    error_code: \"string?\",\n  },\n  domain_connect_started: {},\n  domain_connect_verified: {},\n  domain_connect_failed: { error_code: \"string?\" },\n  product_created: { product_type: \"string?\" },\n  product_published: { product_type: \"string?\" },\n  product_editor_section_opened: { section: \"string\" },\n  feature_enabled: { feature: \"string\" },\n  stats_viewed: { tab: \"string\" },\n  stats_filter_changed: { tab: \"string\", filter: \"string\" },\n  report_exported: { report: \"string\", format: \"string?\" },\n  search_performed: { result_count: \"number\" },\n  error_shown: { code: \"string\", route: \"string\" },\n  help_opened: { topic: \"string?\" },\n  ai_assistant_used: { topic: \"string?\" },\n  member_invited: { role: \"string\" },\n} as const;\n\nconst TX = {\n  gateway: \"string?\",\n  method: \"string?\",\n  value_minor: \"number?\",\n  currency: \"string?\",\n} as const;\nconst SUB = {\n  subscription_id: \"string?\",\n  value_minor: \"number?\",\n  currency: \"string?\",\n} as const;\n\n/**\n * Emitted by instapay only. The lower-cased `EventType` of\n * server/event-system/event.list.ts maps 1:1 to the first group.\n */\nexport const BUSINESS_EVENT_SPEC = {\n  // Mirror of the event bus (EventType.X -> x.toLowerCase()).\n  transaction_created: TX,\n  transaction_success: TX,\n  transaction_failure: { ...TX, error_code: \"string?\" },\n  transaction_expired: TX,\n  transaction_charge: TX,\n  subscription_created: SUB,\n  subscription_paused: SUB,\n  subscription_resumed: SUB,\n  subscription_updated: SUB,\n  subscription_deleted: SUB,\n  subscription_charge_paid: SUB,\n  subscription_charge_failed: { ...SUB, error_code: \"string?\" },\n  subscription_past_due: SUB,\n  subscription_canceled: SUB,\n  access_expires_in_3_days: {},\n  access_expired: {},\n  cart_recovery: { value_minor: \"number?\", currency: \"string?\" },\n  testimonial_email_send: {},\n  testimonial_fulfilled: {},\n  partner_commission_earned: {\n    partner_id: \"string\",\n    commission_minor: \"number\",\n    currency: \"string\",\n  },\n  // Added by the analytics work.\n  checkout_session_created: {\n    item_count: \"number\",\n    checkout_type: \"enum:single|cart|link\",\n    gateway: \"string?\",\n    ...MONEY,\n  },\n  order_paid: {\n    gateway: \"string\",\n    method: \"string?\",\n    item_count: \"number?\",\n    /** UTC date (`YYYY-MM-DD`) the envelope `visitor_id` was computed for. */\n    visitor_day: \"string?\",\n    /** Every line of the order (public hashed product ids), at most 50. */\n    items: \"line_items?\",\n    ...MONEY,\n  },\n  refund_issued: {\n    gateway: \"string?\",\n    reason: \"string?\",\n    ...MONEY,\n  },\n  return_requested: { item_count: \"number\", reason_code: \"string?\" },\n  automation_run_completed: {\n    automation_id: \"string\",\n    status: \"string\",\n    trigger: \"string?\",\n  },\n  notification_sent: { medium: \"string\", template: \"string?\" },\n  notification_failed: {\n    medium: \"string\",\n    template: \"string?\",\n    error_code: \"string?\",\n  },\n  recovery_email_sent: { step: \"number?\" },\n  recovery_link_clicked: {},\n  api_request: {\n    /** Route template without ids or query, e.g. `/api/rpc/public.v1.PublicApiService/ListProducts`. */\n    endpoint: \"string\",\n    /** `X-Bitsnap-Client` value, absent when the caller sent none. */\n    client: \"string?\",\n    status: \"number\",\n    latency_bucket: \"enum:lt_50|lt_200|lt_1000|gte_1000\",\n    /** 1 for errors, <1 for sampled successes; rollups divide counts by it. */\n    sample_rate: \"number\",\n  },\n} as const;\n\nexport const EVENT_SPEC_BY_STREAM = {\n  storefront_events: STOREFRONT_EVENT_SPEC,\n  app_events: APP_EVENT_SPEC,\n  business_events: BUSINESS_EVENT_SPEC,\n} as const;\n\nexport const EVENT_SPEC = {\n  ...STOREFRONT_EVENT_SPEC,\n  ...APP_EVENT_SPEC,\n  ...BUSINESS_EVENT_SPEC,\n} as const;\n\nexport type StorefrontEventName = keyof typeof STOREFRONT_EVENT_SPEC;\nexport type AppEventName = keyof typeof APP_EVENT_SPEC;\nexport type BusinessEventName = keyof typeof BUSINESS_EVENT_SPEC;\nexport type EventName = StorefrontEventName | AppEventName | BusinessEventName;\n\nexport const EVENT_NAMES = {\n  storefront_events: Object.keys(STOREFRONT_EVENT_SPEC) as StorefrontEventName[],\n  app_events: Object.keys(APP_EVENT_SPEC) as AppEventName[],\n  business_events: Object.keys(BUSINESS_EVENT_SPEC) as BusinessEventName[],\n} as const;\n\nexport const STREAM_FOR_EVENT: Record<EventName, Stream> = Object.fromEntries(\n  STREAMS.flatMap((stream) =>\n    (EVENT_NAMES[stream] as string[]).map((name) => [name, stream] as const),\n  ),\n) as Record<EventName, Stream>;\n\n/** True for a catalogue event name; own keys only (`constructor`, `toString` are not events). */\nexport function isEventName(name: unknown): name is EventName {\n  return typeof name === \"string\" && Object.hasOwn(STREAM_FOR_EVENT, name);\n}\n\n// -- props types, derived from the spec ------------------------------------\n\ntype PropPrimitives = {\n  string: string;\n  number: number;\n  boolean: boolean;\n  \"string[]\": string[];\n  \"number[]\": number[];\n  line_items: Array<{ product_id: string; qty: number; value_minor: number }>;\n};\ntype SplitEnum<S extends string> = S extends `${infer H}|${infer R}`\n  ? H | SplitEnum<R>\n  : S;\ntype StripOpt<S extends string> = S extends `${infer B}?` ? B : S;\ntype ResolveProp<S extends string> =\n  StripOpt<S> extends `enum:${infer E}`\n    ? SplitEnum<E>\n    : StripOpt<S> extends keyof PropPrimitives\n      ? PropPrimitives[StripOpt<S>]\n      : never;\ntype PropsFromSpec<S extends Record<string, string>> = {\n  [K in keyof S as S[K] extends `${string}?` ? never : K]: ResolveProp<S[K]>;\n} & {\n  [K in keyof S as S[K] extends `${string}?` ? K : never]?: ResolveProp<S[K]>;\n};\n\nexport type EventProps<E extends EventName> = PropsFromSpec<\n  (typeof EVENT_SPEC)[E]\n>;\n\n// ---------------------------------------------------------------------------\n// Envelope\n// ---------------------------------------------------------------------------\n\n/** Fields the emitter fills in. Everything else is derived by the collector. */\nexport interface ClientEvent<E extends EventName = EventName> {\n  /** UUIDv7, generated by the emitter. Dedupe key. */\n  event_id: string;\n  event: E;\n  /** Client clock, unix ms. */\n  ts: number;\n  schema_version: typeof SCHEMA_VERSION;\n  env: Env;\n  source: Source;\n  channel: Channel;\n  /** `<package>@<version>`, e.g. `bitsnap-react@1.9.0`. */\n  sdk?: string | null;\n  /** Random per page load, in memory only. */\n  page_id?: string | null;\n  page_type?: PageType | null;\n  host?: string | null;\n  /** Path without query string and fragment, already run through `sanitizePath`. */\n  path?: string | null;\n  referrer_host?: string | null;\n  utm_source?: string | null;\n  utm_medium?: string | null;\n  utm_campaign?: string | null;\n  utm_content?: string | null;\n  utm_term?: string | null;\n  ref_code?: string | null;\n  product_id?: string | null;\n  variant_id?: string | null;\n  order_ref?: string | null;\n  /** Object on the wire; the collector stores `JSON.stringify(props)`. */\n  props: EventProps<E>;\n  /**\n   * Only honoured for `source: \"dashboard\"`: the hashed Clerk user id computed\n   * by instapay and handed to the dashboard tracker. Ignored for every other\n   * source (the collector computes `visitor_id` itself).\n   */\n  visitor_id?: string | null;\n  /**\n   * The value of the first-party `bs_vid_<projectKey>` cookie (`CLIENT_ID_RE`), sent only\n   * while analytics consent is granted. The collector turns it into a stable\n   * `consentedVisitorId` and never stores it.\n   */\n  client_id?: string | null;\n}\n\n/** One row as stored in Basin (all three streams share this shape). */\nexport interface StoredEvent {\n  event_id: string;\n  event: EventName;\n  /** Unix ms, client clock after `clampTs`. */\n  ts: number;\n  /** Unix ms, collector clock. */\n  received_at: number;\n  schema_version: number;\n  /** Numeric database id. Resolved by the collector, never taken from the client. */\n  project_id: number;\n  env: Env;\n  source: Source;\n  channel: Channel;\n  sdk: string | null;\n  visitor_id: string | null;\n  page_id: string | null;\n  page_type: PageType | null;\n  host: string | null;\n  path: string | null;\n  referrer_host: string | null;\n  utm_source: string | null;\n  utm_medium: string | null;\n  utm_campaign: string | null;\n  utm_content: string | null;\n  utm_term: string | null;\n  ref_code: string | null;\n  country: string | null;\n  region: string | null;\n  device_type: DeviceType | null;\n  os: string | null;\n  browser: string | null;\n  product_id: string | null;\n  variant_id: string | null;\n  order_ref: string | null;\n  /** `JSON.stringify` of the props object. */\n  props: string;\n}\n\n/** POST /e body. */\nexport interface IngestBody {\n  /** Project key, see `normalizeProjectKey`. */\n  k: string;\n  events: ClientEvent[];\n}\n\n// ---------------------------------------------------------------------------\n// Consent shapes\n// ---------------------------------------------------------------------------\n\nexport const CONSENT_TEXT_KEYS = [\n  \"title\",\n  \"description\",\n  \"acceptAll\",\n  \"rejectAll\",\n  \"settings\",\n  \"save\",\n  \"close\",\n  \"necessaryTitle\",\n  \"necessaryDescription\",\n  \"analyticsTitle\",\n  \"analyticsDescription\",\n  \"marketingTitle\",\n  \"marketingDescription\",\n  \"preferencesTitle\",\n  \"preferencesDescription\",\n  \"poweredBy\",\n] as const;\nexport type ConsentTextKey = (typeof CONSENT_TEXT_KEYS)[number];\nexport type ConsentTexts = Record<ConsentTextKey, string>;\n\nexport type ConsentCategory = \"analytics\" | \"marketing\" | \"preferences\";\nexport type ConsentChoice = Record<ConsentCategory, boolean>;\n\nexport type ConsentConfig = {\n  version: number;\n  theme: \"auto\" | \"light\" | \"dark\";\n  accentColor?: string;\n  position: \"bottom\" | \"bottom-left\" | \"bottom-right\";\n  privacyPolicyUrl?: string;\n  categories: { analytics: boolean; marketing: boolean; preferences: boolean };\n  services: Array<{\n    name: string;\n    category: \"analytics\" | \"marketing\" | \"preferences\";\n    cookies?: string[];\n  }>;\n  texts?: Partial<Record<\"pl\" | \"en\", Partial<ConsentTexts>>>;\n  poweredBy: true;\n};\n\n/** Value of the consent cookie, JSON then base64url. */\nexport interface ConsentCookie {\n  v: 1;\n  /** Random consent id (also sent to POST /consent). */\n  id: string;\n  /** Unix seconds. */\n  ts: number;\n  /** Banner version (`ConsentConfig.version`) the visitor answered. */\n  bv: number;\n  c: ConsentChoice;\n}\n\nexport const CONSENT_COOKIE_NAME = \"bitsnap_consent\";\nexport const CONSENT_COOKIE_MAX_AGE_SECONDS = 365 * 24 * 60 * 60;\nexport const CONSENT_ACTIONS = [\n  \"accept_all\",\n  \"reject_all\",\n  \"custom\",\n  \"withdraw\",\n] as const;\nexport type ConsentAction = (typeof CONSENT_ACTIONS)[number];\n/** POST /consent `action` of a banner impression (not a choice, not in `CONSENT_ACTIONS`). */\nexport const CONSENT_SHOWN_ACTION = \"shown\";\n\n/** POST /consent body of a choice (`CONSENT_ACTIONS`). */\nexport interface ConsentLogBody {\n  k: string;\n  /** Same random id as `ConsentCookie.id`. 16 to 64 chars of `[A-Za-z0-9_-]`. */\n  consent_id: string;\n  action: ConsentAction;\n  c: ConsentChoice;\n  /** Banner version. */\n  bv: number;\n  /** Hostname the banner ran on. Collector overwrites it with the Origin host. */\n  host: string;\n  /** Unix SECONDS (like the cookie), not ms. */\n  ts: number;\n}\n\n/**\n * POST /consent body of a banner impression: the banner opened by itself\n * because the visitor has no valid choice. Once per page load; no consent id\n * and no choice.\n */\nexport interface ConsentShownBody {\n  k: string;\n  action: typeof CONSENT_SHOWN_ACTION;\n  /** Banner version. */\n  bv: number;\n  /** Hostname the banner ran on. Collector overwrites it with the Origin host. */\n  host: string;\n  /** Unix SECONDS (like the cookie), not ms. */\n  ts: number;\n}\n\n/** Any POST /consent body; discriminate on `action`. */\nexport type ConsentBody = ConsentLogBody | ConsentShownBody;\n\n/** `bitsnap_consent`, or `bitsnap_consent_<projectKey>` for `data-scope=\"project\"`. */\nexport function consentCookieName(scope: \"site\" | \"project\", projectKey?: string): string {\n  if (scope === \"project\") {\n    if (!projectKey) throw new Error(\"projectKey required for project scope\");\n    return `${CONSENT_COOKIE_NAME}_${normalizeProjectKey(projectKey)}`;\n  }\n  return CONSENT_COOKIE_NAME;\n}\n\n/**\n * Decodes the value of a consent cookie (§11.3). Null when it is not base64url\n * JSON of the documented shape (`v` 1 and a boolean per category).\n */\nexport function parseConsentCookie(value: string | null | undefined): ConsentCookie | null {\n  if (!value || !/^[A-Za-z0-9_-]+$/.test(value)) return null;\n  try {\n    const padded = value.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const bin = atob(padded + \"=\".repeat((4 - (padded.length % 4)) % 4));\n    const json: unknown = JSON.parse(\n      new TextDecoder().decode(Uint8Array.from(bin, (ch) => ch.charCodeAt(0))),\n    );\n    if (!isRecord(json) || json.v !== 1) return null;\n    const c = json.c;\n    if (!isRecord(c)) return null;\n    if (\n      typeof c.analytics !== \"boolean\" ||\n      typeof c.marketing !== \"boolean\" ||\n      typeof c.preferences !== \"boolean\"\n    ) {\n      return null;\n    }\n    return json as unknown as ConsentCookie;\n  } catch {\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Project key\n// ---------------------------------------------------------------------------\n\n/**\n * The project key is the existing public hashed project id\n * (`hashId(projectId)` in apps/bitsnap/queries/hashids.ts, the `projectID`\n * of bitsnap-react). A leading `pk_` is accepted and dropped so the\n * documented `pk_…` snippets work too. Returns null when it is not a plausible\n * key (hashids default alphabet).\n */\nexport function normalizeProjectKey(key: string): string | null {\n  const bare = key.startsWith(\"pk_\") ? key.slice(3) : key;\n  return /^[A-Za-z0-9]{1,32}$/.test(bare) ? bare : null;\n}\n\n// ---------------------------------------------------------------------------\n// X-Bitsnap-Client\n// ---------------------------------------------------------------------------\n\nconst CLIENT_RE = /^([a-z][a-z0-9-]{0,39})@(\\d+\\.\\d+\\.\\d+(?:[-+][0-9A-Za-z.+-]{1,20})?)$/;\n\n/** `<package>@<version>`, e.g. `bitsnap-react@1.9.0`. Also the shape of `sdk`. */\nexport function parseClientHeader(\n  value: string | null | undefined,\n): { package: string; version: string } | null {\n  if (!value || value.length > LIMITS.sdk) return null;\n  const m = CLIENT_RE.exec(value);\n  return m ? { package: m[1], version: m[2] } : null;\n}\n\n// ---------------------------------------------------------------------------\n// URL stripping\n// ---------------------------------------------------------------------------\n\nconst MAX_QUERY_VALUE = LIMITS.utm;\n\n/**\n * Campaign/ref value: trimmed, capped, null when empty or when it holds an \"@\"\n * (someone put an email in a tag). The collector runs every client-supplied\n * `utm_*` and `ref_code` through it again.\n */\nexport function cleanValue(v: string | null | undefined, max: number): string | null {\n  if (v == null) return null;\n  const t = v.trim();\n  // An \"@\" means someone put an email in a campaign tag: drop the value.\n  if (t.length === 0 || t.includes(\"@\")) return null;\n  return t.slice(0, max);\n}\n\n/**\n * Path sanitiser: no query, no fragment, capped. Opaque segments (24+ chars of\n * `[A-Za-z0-9_-]`, i.e. tokens in order/panel links) become `:token` and\n * segments containing `@` become `:email`.\n */\nexport function sanitizePath(pathname: string): string {\n  const segments = pathname.split(\"/\").map((seg) => {\n    if (seg.includes(\"@\") || seg.includes(\"%40\")) return \":email\";\n    if (/^[A-Za-z0-9_-]{24,}$/.test(seg)) return \":token\";\n    return seg;\n  });\n  const joined = segments.join(\"/\") || \"/\";\n  return (joined.startsWith(\"/\") ? joined : `/${joined}`).slice(0, LIMITS.path);\n}\n\nexport interface UrlParts {\n  host: string;\n  /** Sanitised path, no query. */\n  path: string;\n  utm_source: string | null;\n  utm_medium: string | null;\n  utm_campaign: string | null;\n  utm_content: string | null;\n  utm_term: string | null;\n  /** The `ref` query parameter. */\n  ref_code: string | null;\n}\n\n/**\n * Parses a URL and keeps only what may leave the browser: host, sanitised path\n * and the `utm_*` and `ref` query parameters. Returns null for non-http(s) or\n * unparseable input. `base` resolves relative URLs.\n */\nexport function parseUrl(url: string, base?: string): UrlParts | null {\n  let u: URL;\n  try {\n    u = new URL(url, base);\n  } catch {\n    return null;\n  }\n  if (u.protocol !== \"https:\" && u.protocol !== \"http:\") return null;\n  const q = u.searchParams;\n  return {\n    host: u.hostname.toLowerCase().slice(0, LIMITS.host),\n    path: sanitizePath(u.pathname),\n    utm_source: cleanValue(q.get(\"utm_source\"), MAX_QUERY_VALUE),\n    utm_medium: cleanValue(q.get(\"utm_medium\"), MAX_QUERY_VALUE),\n    utm_campaign: cleanValue(q.get(\"utm_campaign\"), MAX_QUERY_VALUE),\n    utm_content: cleanValue(q.get(\"utm_content\"), MAX_QUERY_VALUE),\n    utm_term: cleanValue(q.get(\"utm_term\"), MAX_QUERY_VALUE),\n    ref_code: cleanValue(q.get(\"ref\"), LIMITS.refCode),\n  };\n}\n\n/**\n * Returns the URL with userinfo, fragment and every query parameter removed\n * except `utm_*` and `ref`. Null when `url` is not a usable http(s) URL.\n */\nexport function stripUrl(url: string, base?: string): string | null {\n  let u: URL;\n  try {\n    u = new URL(url, base);\n  } catch {\n    return null;\n  }\n  if (u.protocol !== \"https:\" && u.protocol !== \"http:\") return null;\n  const keep = new URLSearchParams();\n  for (const [key, value] of u.searchParams) {\n    if (key !== \"ref\" && !key.startsWith(\"utm_\")) continue;\n    const cleaned = cleanValue(value, MAX_QUERY_VALUE);\n    if (cleaned != null) keep.append(key, cleaned);\n  }\n  const qs = keep.toString();\n  return `${u.protocol}//${u.host}${sanitizePath(u.pathname)}${qs ? `?${qs}` : \"\"}`;\n}\n\nconst HOSTNAME_RE = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/;\n\n/** A plain DNS hostname (lower-cased), or null: no scheme, port, path, userinfo or \"@\". */\nexport function cleanHostname(\n  v: string | null | undefined,\n  max: number = LIMITS.referrerHost,\n): string | null {\n  if (typeof v !== \"string\") return null;\n  const h = v.trim().toLowerCase();\n  return h.length > 0 && h.length <= max && HOSTNAME_RE.test(h) ? h : null;\n}\n\n/** Public hashed ids (`product_id`, `variant_id`, `order_ref`): URL-safe, at most `LIMITS.id`. */\nexport const ID_RE = /^[A-Za-z0-9_-]{1,64}$/;\n\nexport function cleanId(v: string | null | undefined): string | null {\n  return typeof v === \"string\" && ID_RE.test(v) ? v : null;\n}\n\n/** Host of a referrer URL, or null (also null for non-http(s) referrers). */\nexport function referrerHost(referrer: string | null | undefined): string | null {\n  if (!referrer) return null;\n  try {\n    const u = new URL(referrer);\n    if (u.protocol !== \"https:\" && u.protocol !== \"http:\") return null;\n    return u.hostname.toLowerCase().slice(0, LIMITS.referrerHost);\n  } catch {\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Bot rule\n// ---------------------------------------------------------------------------\n\nconst BOT_UA =\n  /bot\\b|crawl|spider|slurp|facebookexternalhit|bingpreview|headless|phantomjs|lighthouse|pagespeed|gtmetrix|pingdom|uptime|statuscake|monitor|preview|scrapy|curl\\/|wget|python-|go-http-client|java\\/|okhttp|axios|node-fetch|undici|libwww|httpclient|aiohttp|postman|insomnia/i;\n\n/** True when the User-Agent is empty or looks automated. Such events are dropped. */\nexport function isBotUserAgent(ua: string | null | undefined): boolean {\n  if (!ua || ua.trim().length === 0) return true;\n  return BOT_UA.test(ua);\n}\n\n// ---------------------------------------------------------------------------\n// visitor_id\n// ---------------------------------------------------------------------------\n\nconst encoder = new TextEncoder();\n\nasync function hmacSha256(\n  key: Uint8Array,\n  message: string,\n): Promise<Uint8Array> {\n  const cryptoKey = await crypto.subtle.importKey(\n    \"raw\",\n    key,\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  return new Uint8Array(\n    await crypto.subtle.sign(\"HMAC\", cryptoKey, encoder.encode(message)),\n  );\n}\n\nfunction base64url(bytes: Uint8Array): string {\n  let bin = \"\";\n  for (const b of bytes) bin += String.fromCharCode(b);\n  return btoa(bin).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n/** `YYYY-MM-DD` of a unix-ms timestamp in UTC. */\nexport function utcDate(ms: number): string {\n  return new Date(ms).toISOString().slice(0, 10);\n}\n\n/**\n * IP as hashed: lower-case; IPv4 unchanged; IPv4-mapped IPv6 (`::ffff:1.2.3.4`\n * or `::ffff:102:304`) becomes plain IPv4; any other IPv6, including one with\n * an embedded dotted quad (`64:ff9b::1.2.3.4`), is cut to its /64 (first four\n * hextets, canonical form `a:b:c:d::`). Both the Worker and the instapay\n * server MUST call this on the client IP before `computeVisitorId`.\n */\nexport function normalizeIp(ip: string): string {\n  let s = ip.trim().toLowerCase();\n  const zone = s.indexOf(\"%\");\n  if (zone >= 0) s = s.slice(0, zone);\n  if (!s.includes(\":\")) return s; // plain IPv4 (or not an IP at all)\n\n  // Embedded dotted quad in the last 32 bits: turn it into two hextets.\n  const quad = /^(.*:)(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})$/.exec(s);\n  if (quad) {\n    const o = [quad[2], quad[3], quad[4], quad[5]].map(Number);\n    if (o.some((n) => n > 255)) return s;\n    const hex = (hi: number, lo: number) => (hi * 256 + lo).toString(16);\n    s = `${quad[1]}${hex(o[0], o[1])}:${hex(o[2], o[3])}`;\n  }\n\n  const [head, tail] = s.split(\"::\");\n  const headParts = head ? head.split(\":\") : [];\n  const tailParts = tail !== undefined && tail !== \"\" ? tail.split(\":\") : [];\n  const fill =\n    tail === undefined ? 0 : Math.max(0, 8 - headParts.length - tailParts.length);\n  const groups = [...headParts, ...Array<string>(fill).fill(\"0\"), ...tailParts];\n  if (groups.length !== 8) return s;\n  const h = groups.map((g) => Number.parseInt(g, 16) || 0);\n\n  // ::ffff:a.b.c.d in hex form.\n  if (h.slice(0, 5).every((x) => x === 0) && h[5] === 0xffff) {\n    return `${h[6] >> 8}.${h[6] & 255}.${h[7] >> 8}.${h[7] & 255}`;\n  }\n  return `${h\n    .slice(0, 4)\n    .map((g) => g.toString(16))\n    .join(\":\")}::`;\n}\n\n/**\n * Cookieless visitor id, identical in the Worker and the instapay server.\n *\n *   day_secret = HMAC-SHA256(key = utf8(masterSecret), msg = utf8(\"YYYY-MM-DD\"))   // 32 raw bytes\n *   visitor_id = base64url(HMAC-SHA256(key = day_secret, msg = utf8(ip + \"\\n\" + ua + \"\\n\" + projectId))).slice(0, 22)\n *\n * `dateUtc` is the UTC date of the request; `ip` is `normalizeIp(<client IP>)`;\n * `ua` is the raw `User-Agent` request header; `projectId` is the decimal\n * numeric project id.\n */\nexport async function computeVisitorId(\n  masterSecret: string,\n  dateUtc: string,\n  ip: string,\n  ua: string,\n  projectId: number | string,\n): Promise<string> {\n  if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(dateUtc)) {\n    throw new Error(`dateUtc must be YYYY-MM-DD, got ${dateUtc}`);\n  }\n  const daySecret = await hmacSha256(encoder.encode(masterSecret), dateUtc);\n  const mac = await hmacSha256(daySecret, `${ip}\\n${ua}\\n${projectId}`);\n  return base64url(mac).slice(0, 22);\n}\n\n/**\n * The `bs_vid_<projectKey>` cookie name. `projectKey` is the bare public key\n * (like `consentCookieName`): consent is per project, so is the client id.\n */\nexport function clientIdCookieName(projectKey: string): string {\n  return `bs_vid_${projectKey}`;\n}\n\n/** Value of the `bs_vid_<projectKey>` cookie: 16 random bytes, base64url without padding. */\nexport const CLIENT_ID_RE = /^[A-Za-z0-9_-]{22}$/;\n\n/**\n * Stable visitor id of a browser that granted analytics consent (contract §6).\n *\n *   consented_visitor_id = \"p_\" + base64url(HMAC-SHA256(key = utf8(masterSecret),\n *                                  msg = utf8(\"client\\n\" + clientId + \"\\n\" + projectId))).slice(0, 22)\n *\n * 24 characters; daily ids are 22, so `isConsentedVisitorId` tells them apart.\n * `clientId` is the `bs_vid_<projectKey>` cookie value and is never stored.\n */\nexport async function computeConsentedVisitorId(\n  masterSecret: string,\n  clientId: string,\n  projectId: number | string,\n): Promise<string> {\n  if (!CLIENT_ID_RE.test(clientId)) {\n    throw new Error(\"clientId must be 22 base64url characters\");\n  }\n  const mac = await hmacSha256(\n    encoder.encode(masterSecret),\n    `client\\n${clientId}\\n${projectId}`,\n  );\n  return `p_${base64url(mac).slice(0, 22)}`;\n}\n\n/** Whether `visitorId` came from `computeConsentedVisitorId` (not a daily id). */\nexport function isConsentedVisitorId(visitorId: string): boolean {\n  return visitorId.length === 24 && visitorId.startsWith(\"p_\");\n}\n\n// ---------------------------------------------------------------------------\n// Validation\n// ---------------------------------------------------------------------------\n\nexport type ValidationResult = { ok: true } | { ok: false; reason: string };\n\nconst UUID_V7 =\n  /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\nconst PAGE_ID_RE = /^[A-Za-z0-9_-]{8,32}$/;\n/** A letter TLD is required: `bitsnap-react@1.9.0` and `v@1.2` are not addresses. */\nconst EMAIL_LIKE = /[^\\s@]+@[^\\s@]+\\.[A-Za-z]{2,}\\b/;\n\nfunction isRecord(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\nfunction nullableString(\n  e: Record<string, unknown>,\n  key: string,\n  max: number,\n): string | null {\n  const v = e[key];\n  if (v === undefined || v === null) return null;\n  if (typeof v !== \"string\") return `bad_${key}`;\n  return v.length > max ? `too_long_${key}` : null;\n}\n\nfunction checkPropValue(spec: string, value: unknown): boolean {\n  const optional = spec.endsWith(\"?\");\n  const type = optional ? spec.slice(0, -1) : spec;\n  if (type.startsWith(\"enum:\")) {\n    return typeof value === \"string\" && type.slice(5).split(\"|\").includes(value);\n  }\n  switch (type) {\n    case \"string\":\n      return typeof value === \"string\" && value.length <= LIMITS.maxPropString;\n    case \"number\":\n      return typeof value === \"number\" && Number.isFinite(value);\n    case \"boolean\":\n      return typeof value === \"boolean\";\n    case \"string[]\":\n      return (\n        Array.isArray(value) &&\n        value.length <= LIMITS.maxPropArray &&\n        value.every((x) => typeof x === \"string\" && x.length <= LIMITS.maxPropString)\n      );\n    case \"number[]\":\n      return (\n        Array.isArray(value) &&\n        value.length <= LIMITS.maxPropArray &&\n        value.every((x) => typeof x === \"number\" && Number.isFinite(x))\n      );\n    case \"line_items\":\n      return (\n        Array.isArray(value) &&\n        value.length <= LIMITS.maxPropArray &&\n        value.every(\n          (x) =>\n            isRecord(x) &&\n            typeof x.product_id === \"string\" &&\n            ID_RE.test(x.product_id) &&\n            isNonNegativeSafeInteger(x.qty) &&\n            isNonNegativeSafeInteger(x.value_minor),\n        )\n      );\n    default:\n      return false;\n  }\n}\n\nfunction isNonNegativeSafeInteger(value: unknown): boolean {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0;\n}\n\n/** True when `value` looks like an email address (also exported for the collector's re-checks). */\nexport function looksLikeEmail(value: string): boolean {\n  // A well-formed `<package>@<version>` client id is never an address.\n  if (parseClientHeader(value) !== null) return false;\n  return EMAIL_LIKE.test(value);\n}\n\nfunction hasEmailLike(value: unknown): boolean {\n  if (typeof value === \"string\") return looksLikeEmail(value);\n  if (Array.isArray(value)) return value.some(hasEmailLike);\n  if (isRecord(value)) return Object.values(value).some(hasEmailLike);\n  return false;\n}\n\n/**\n * Validates `props` against the catalogue and returns a copy without keys the\n * catalogue does not know (forward compatibility: a newer SDK adding an\n * optional prop must not get its events dropped by an older collector).\n * Fails on missing required props, wrong types, bad enum values, oversize\n * props and string values that look like an email address.\n */\nexport function sanitizeProps(\n  event: string,\n  props: unknown,\n): { ok: true; props: Record<string, unknown> } | { ok: false; reason: string } {\n  if (!isEventName(event)) return { ok: false, reason: \"unknown_event\" };\n  const spec = (EVENT_SPEC as Record<string, Record<string, string>>)[event];\n  if (!spec) return { ok: false, reason: \"unknown_event\" };\n  if (!isRecord(props)) return { ok: false, reason: \"bad_props\" };\n  const out: Record<string, unknown> = {};\n  for (const [key, type] of Object.entries(spec)) {\n    const value = props[key];\n    if (value === undefined || value === null) {\n      if (!type.endsWith(\"?\")) return { ok: false, reason: `props_missing_${key}` };\n      continue;\n    }\n    if (!checkPropValue(type, value)) return { ok: false, reason: `props_bad_${key}` };\n    if (hasEmailLike(value)) return { ok: false, reason: `props_pii_${key}` };\n    out[key] =\n      type.startsWith(\"line_items\") && Array.isArray(value)\n        ? value.map((x) => ({ product_id: x.product_id, qty: x.qty, value_minor: x.value_minor }))\n        : value;\n  }\n  if (JSON.stringify(out).length > LIMITS.maxPropsChars) {\n    return { ok: false, reason: \"props_too_large\" };\n  }\n  return { ok: true, props: out };\n}\n\nexport interface ValidateOptions {\n  /**\n   * Who sent it. `browser` (default) is POST /e: the event must belong to\n   * `storefront_events` or `app_events`, `consent_updated` and `consent_shown`\n   * are refused (only POST /consent writes them) and `source` must fit the\n   * stream. `server` is the instapay emitter: any stream, `source` must fit the\n   * stream.\n   */\n  from?: \"browser\" | \"server\";\n}\n\n/**\n * Validates the emitter-controlled part of an event: names, types, enums,\n * lengths, the event/source/stream pairing and `props`. It does not check\n * that `ts` is plausible (use `clampTs`), origins or project keys.\n */\nexport function validateEnvelope(\n  e: unknown,\n  options: ValidateOptions = {},\n): ValidationResult {\n  const from = options.from ?? \"browser\";\n  const fail = (reason: string): ValidationResult => ({ ok: false, reason });\n  if (!isRecord(e)) return fail(\"not_object\");\n\n  if (typeof e.event_id !== \"string\" || !UUID_V7.test(e.event_id)) {\n    return fail(\"bad_event_id\");\n  }\n  if (!isEventName(e.event)) return fail(\"unknown_event\");\n  const stream = STREAM_FOR_EVENT[e.event as EventName];\n  if (from === \"browser\") {\n    if (stream === \"business_events\") return fail(\"server_only_event\");\n    if (e.event === \"consent_updated\" || e.event === \"consent_shown\") {\n      return fail(\"consent_via_consent_endpoint\");\n    }\n  }\n  if (\n    typeof e.ts !== \"number\" ||\n    !Number.isInteger(e.ts) ||\n    e.ts <= 0 ||\n    e.ts > 4e12\n  ) {\n    return fail(\"bad_ts\");\n  }\n  if (e.schema_version !== SCHEMA_VERSION) return fail(\"bad_schema_version\");\n  if (!ENVS.includes(e.env as Env)) return fail(\"bad_env\");\n  if (!SOURCES.includes(e.source as Source)) return fail(\"bad_source\");\n  if (!SOURCES_FOR_STREAM[stream].includes(e.source as Source)) {\n    return fail(\"source_not_allowed_for_event\");\n  }\n  if (!CHANNELS.includes(e.channel as Channel)) return fail(\"bad_channel\");\n\n  if (e.sdk != null) {\n    if (typeof e.sdk !== \"string\" || parseClientHeader(e.sdk) === null) {\n      return fail(\"bad_sdk\");\n    }\n  }\n  if (e.page_id != null) {\n    if (typeof e.page_id !== \"string\" || !PAGE_ID_RE.test(e.page_id)) {\n      return fail(\"bad_page_id\");\n    }\n  }\n  if (e.page_type != null && !PAGE_TYPES.includes(e.page_type as PageType)) {\n    return fail(\"bad_page_type\");\n  }\n  if (from === \"browser\") {\n    if (typeof e.host !== \"string\" || e.host.length === 0) return fail(\"bad_host\");\n    if (typeof e.path !== \"string\" || !e.path.startsWith(\"/\")) return fail(\"bad_path\");\n  }\n  if (typeof e.path === \"string\" && e.path.includes(\"?\")) return fail(\"path_has_query\");\n  if (typeof e.path === \"string\" && e.path.includes(\"#\")) return fail(\"path_has_fragment\");\n\n  const lengths: Array<[string, number]> = [\n    [\"host\", LIMITS.host],\n    [\"path\", LIMITS.path],\n    [\"referrer_host\", LIMITS.referrerHost],\n    [\"utm_source\", LIMITS.utm],\n    [\"utm_medium\", LIMITS.utm],\n    [\"utm_campaign\", LIMITS.utm],\n    [\"utm_content\", LIMITS.utm],\n    [\"utm_term\", LIMITS.utm],\n    [\"ref_code\", LIMITS.refCode],\n    [\"product_id\", LIMITS.id],\n    [\"variant_id\", LIMITS.id],\n    [\"order_ref\", LIMITS.id],\n  ];\n  for (const [key, max] of lengths) {\n    const problem = nullableString(e, key, max);\n    if (problem) return fail(problem);\n  }\n  if (e.visitor_id != null) {\n    if (typeof e.visitor_id !== \"string\" || !/^[A-Za-z0-9_-]{22}$/.test(e.visitor_id)) {\n      return fail(\"bad_visitor_id\");\n    }\n  }\n  if (e.client_id != null) {\n    if (typeof e.client_id !== \"string\" || !CLIENT_ID_RE.test(e.client_id)) {\n      return fail(\"bad_client_id\");\n    }\n  }\n\n  const props = sanitizeProps(e.event, e.props);\n  if (!props.ok) return fail(props.reason);\n  return { ok: true };\n}\n\n/** Client `ts` as stored: replaced by `receivedAt` when more than 24 h away from it. */\nexport function clampTs(ts: number, receivedAt: number): number {\n  return Math.abs(ts - receivedAt) > LIMITS.tsSkewMs ? receivedAt : ts;\n}\n"]}
+{"version":3,"sources":["../src/analytics/contract.ts"],"names":["LIMITS","STREAMS","ENVS","SOURCES","CHANNELS","PAGE_TYPES","SOURCES_FOR_STREAM","MONEY","STOREFRONT_EVENT_SPEC","APP_EVENT_SPEC","TX","SUB","BUSINESS_EVENT_SPEC","EVENT_SPEC","EVENT_NAMES","STREAM_FOR_EVENT","stream","name","isEventName","CONSENT_COOKIE_MAX_AGE_SECONDS","CONSENT_SHOWN_ACTION","normalizeProjectKey","key","bare","CLIENT_RE","parseClientHeader","value","m","MAX_QUERY_VALUE","cleanValue","v","max","t","sanitizePath","pathname","joined","seg"],"mappings":"AAiBO,qrBAAMA,CAAAA,CAAS,CAEpB,cAAA,CAAgB,EAAA,CAEhB,YAAA,CAAc,KAAA,CAEd,aAAA,CAAe,IAAA,CACf,aAAA,CAAe,GAAA,CACf,YAAA,CAAc,EAAA,CACd,IAAA,CAAM,GAAA,CACN,IAAA,CAAM,GAAA,CACN,YAAA,CAAc,GAAA,CACd,GAAA,CAAK,GAAA,CACL,OAAA,CAAS,EAAA,CACT,EAAA,CAAI,EAAA,CACJ,GAAA,CAAK,EAAA,CACL,MAAA,CAAQ,EAAA,CACR,MAAA,CAAQ,EAAA,CACR,SAAA,CAAW,EAAA,CAEX,QAAA,CAAU,KACZ,CAAA,CAMaC,CAAAA,CAAU,CACrB,mBAAA,CACA,YAAA,CACA,iBACF,CAAA,CAGaC,CAAAA,CAAO,CAAC,MAAA,CAAQ,MAAM,CAAA,CAGtBC,CAAAA,CAAU,CACrB,YAAA,CACA,WAAA,CACA,QAAA,CACA,QAAA,CACA,WACF,CAAA,CAGaC,CAAAA,CAAW,CACtB,QAAA,CACA,eAAA,CACA,OAAA,CACA,KAAA,CACA,OACF,CAAA,CAGaC,CAAAA,CAAa,CACxB,MAAA,CACA,SAAA,CACA,SAAA,CACA,MAAA,CACA,UAAA,CACA,SAAA,CACA,OAAA,CACA,QAAA,CACA,aAAA,CACA,OAAA,CACA,SAAA,CACA,KAAA,CACA,OACF,CAAA,CAOO,IAAMC,CAAAA,CAAwD,CACnE,iBAAA,CAAmB,CAAC,YAAA,CAAc,WAAA,CAAa,QAAQ,CAAA,CACvD,UAAA,CAAY,CAAC,WAAW,CAAA,CACxB,eAAA,CAAiB,CAAC,QAAQ,CAC5B,CAAA,CAYMC,CAAAA,CAAQ,CAAE,WAAA,CAAa,QAAA,CAAU,QAAA,CAAU,QAAS,CAAA,CAG7CC,CAAAA,CAAwB,CACnC,SAAA,CAAW,CAAE,OAAA,CAAS,SAAU,CAAA,CAChC,mBAAA,CAAqB,CAAE,OAAA,CAAS,SAAA,CAAW,UAAA,CAAY,QAAS,CAAA,CAChE,kBAAA,CAAoB,CAClB,OAAA,CAAS,SAAA,CACT,WAAA,CAAa,UAAA,CACb,SAAA,CAAW,UACb,CAAA,CACA,eAAA,CAAiB,CAAE,OAAA,CAAS,SAAA,CAAW,QAAA,CAAU,SAAU,CAAA,CAC3D,YAAA,CAAc,CACZ,WAAA,CAAa,QAAA,CACb,QAAA,CAAU,QAAA,CACV,YAAA,CAAc,qCAChB,CAAA,CACA,gBAAA,CAAkB,CAAC,CAAA,CACnB,WAAA,CAAa,CAAE,GAAA,CAAK,QAAA,CAAU,GAAGD,CAAM,CAAA,CACvC,gBAAA,CAAkB,CAAE,GAAA,CAAK,QAAA,CAAU,GAAGA,CAAM,CAAA,CAC5C,WAAA,CAAa,CAAE,UAAA,CAAY,QAAA,CAAU,GAAGA,CAAM,CAAA,CAC9C,gBAAA,CAAkB,CAChB,UAAA,CAAY,QAAA,CACZ,aAAA,CAAe,uBAAA,CACf,GAAGA,CACL,CAAA,CACA,uBAAA,CAAyB,CACvB,IAAA,CAAM,wCACR,CAAA,CACA,yBAAA,CAA2B,CAAE,KAAA,CAAO,QAAA,CAAU,IAAA,CAAM,QAAS,CAAA,CAC7D,cAAA,CAAgB,CAAE,SAAA,CAAW,QAAS,CAAA,CACtC,eAAA,CAAiB,CAAE,SAAA,CAAW,SAAA,CAAW,MAAA,CAAQ,QAAS,CAAA,CAC1D,wBAAA,CAA0B,CAAE,MAAA,CAAQ,QAAS,CAAA,CAC7C,uBAAA,CAAyB,CAAE,OAAA,CAAS,QAAA,CAAU,MAAA,CAAQ,QAAS,CAAA,CAC/D,iBAAA,CAAmB,CAAE,OAAA,CAAS,QAAA,CAAU,MAAA,CAAQ,QAAS,CAAA,CACzD,iBAAA,CAAmB,CAAC,CAAA,CACpB,gBAAA,CAAkB,CAAE,OAAA,CAAS,0BAA2B,CAAA,CACxD,gBAAA,CAAkB,CAChB,OAAA,CAAS,QAAA,CACT,MAAA,CAAQ,SAAA,CACR,OAAA,CAAS,kCAAA,CACT,UAAA,CAAY,SACd,CAAA,CACA,mBAAA,CAAqB,CAAC,CAAA,CACtB,WAAA,CAAa,CAAC,CAAA,CACd,kBAAA,CAAoB,CAAC,CAAA,CACrB,cAAA,CAAgB,CAAC,CAAA,CACjB,cAAA,CAAgB,CAAC,CAAA,CACjB,gBAAA,CAAkB,CAAE,WAAA,CAAa,QAAA,CAAU,UAAA,CAAY,QAAS,CAAA,CAChE,aAAA,CAAe,CAAE,SAAA,CAAW,QAAS,CAAA,CACrC,cAAA,CAAgB,CACd,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CACX,QAAA,CAAU,QACZ,CAAA,CACA,gBAAA,CAAkB,CAChB,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CACX,QAAA,CAAU,QACZ,CAAA,CACA,cAAA,CAAgB,CACd,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CAEX,SAAA,CAAW,QACb,CAAA,CACA,cAAA,CAAgB,CACd,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CACX,YAAA,CAAc,iCAChB,CAAA,CACA,YAAA,CAAc,CACZ,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CAEX,MAAA,CAAQ,QACV,CAAA,CAEA,eAAA,CAAiB,CACf,UAAA,CAAY,QAAA,CACZ,MAAA,CAAQ,4CAAA,CACR,SAAA,CAAW,SAAA,CACX,SAAA,CAAW,SAAA,CACX,WAAA,CAAa,SAAA,CACb,cAAA,CAAgB,QAClB,CAAA,CAKA,aAAA,CAAe,CACb,cAAA,CAAgB,QAClB,CACF,CAAA,CAGaE,CAAAA,CAAiB,CAC5B,aAAA,CAAe,CAAE,KAAA,CAAO,QAAA,CAAU,cAAA,CAAgB,SAAU,CAAA,CAC5D,aAAA,CAAe,CAAE,YAAA,CAAc,QAAA,CAAU,IAAA,CAAM,QAAA,CAAU,QAAA,CAAU,QAAS,CAAA,CAC5E,eAAA,CAAiB,CACf,YAAA,CAAc,QAAA,CACd,IAAA,CAAM,QAAA,CACN,QAAA,CAAU,QACZ,CAAA,CACA,iBAAA,CAAmB,CACjB,YAAA,CAAc,QAAA,CACd,IAAA,CAAM,QAAA,CACN,QAAA,CAAU,QACZ,CAAA,CACA,qBAAA,CAAuB,CAAE,IAAA,CAAM,QAAS,CAAA,CACxC,wBAAA,CAA0B,CAAE,IAAA,CAAM,QAAS,CAAA,CAC3C,uBAAA,CAAyB,CAAE,OAAA,CAAS,QAAA,CAAU,IAAA,CAAM,SAAU,CAAA,CAC9D,yBAAA,CAA2B,CAAE,OAAA,CAAS,QAAA,CAAU,IAAA,CAAM,SAAU,CAAA,CAChE,sBAAA,CAAwB,CACtB,OAAA,CAAS,QAAA,CACT,IAAA,CAAM,SAAA,CACN,UAAA,CAAY,SACd,CAAA,CACA,sBAAA,CAAwB,CAAC,CAAA,CACzB,uBAAA,CAAyB,CAAC,CAAA,CAC1B,qBAAA,CAAuB,CAAE,UAAA,CAAY,SAAU,CAAA,CAC/C,eAAA,CAAiB,CAAE,YAAA,CAAc,SAAU,CAAA,CAC3C,iBAAA,CAAmB,CAAE,YAAA,CAAc,SAAU,CAAA,CAC7C,6BAAA,CAA+B,CAAE,OAAA,CAAS,QAAS,CAAA,CACnD,eAAA,CAAiB,CAAE,OAAA,CAAS,QAAS,CAAA,CACrC,YAAA,CAAc,CAAE,GAAA,CAAK,QAAS,CAAA,CAC9B,oBAAA,CAAsB,CAAE,GAAA,CAAK,QAAA,CAAU,MAAA,CAAQ,QAAS,CAAA,CACxD,eAAA,CAAiB,CAAE,MAAA,CAAQ,QAAA,CAAU,MAAA,CAAQ,SAAU,CAAA,CACvD,gBAAA,CAAkB,CAAE,YAAA,CAAc,QAAS,CAAA,CAC3C,WAAA,CAAa,CAAE,IAAA,CAAM,QAAA,CAAU,KAAA,CAAO,QAAS,CAAA,CAC/C,WAAA,CAAa,CAAE,KAAA,CAAO,SAAU,CAAA,CAChC,iBAAA,CAAmB,CAAE,KAAA,CAAO,SAAU,CAAA,CACtC,cAAA,CAAgB,CAAE,IAAA,CAAM,QAAS,CACnC,CAAA,CAEMC,CAAAA,CAAK,CACT,OAAA,CAAS,SAAA,CACT,MAAA,CAAQ,SAAA,CACR,WAAA,CAAa,SAAA,CACb,QAAA,CAAU,SACZ,CAAA,CACMC,CAAAA,CAAM,CACV,eAAA,CAAiB,SAAA,CACjB,WAAA,CAAa,SAAA,CACb,QAAA,CAAU,SACZ,CAAA,CAMaC,CAAAA,CAAsB,CAEjC,mBAAA,CAAqBF,CAAAA,CACrB,mBAAA,CAAqBA,CAAAA,CACrB,mBAAA,CAAqB,CAAE,GAAGA,CAAAA,CAAI,UAAA,CAAY,SAAU,CAAA,CACpD,mBAAA,CAAqBA,CAAAA,CACrB,kBAAA,CAAoBA,CAAAA,CACpB,oBAAA,CAAsBC,CAAAA,CACtB,mBAAA,CAAqBA,CAAAA,CACrB,oBAAA,CAAsBA,CAAAA,CACtB,oBAAA,CAAsBA,CAAAA,CACtB,oBAAA,CAAsBA,CAAAA,CACtB,wBAAA,CAA0BA,CAAAA,CAC1B,0BAAA,CAA4B,CAAE,GAAGA,CAAAA,CAAK,UAAA,CAAY,SAAU,CAAA,CAC5D,qBAAA,CAAuBA,CAAAA,CACvB,qBAAA,CAAuBA,CAAAA,CACvB,wBAAA,CAA0B,CAAC,CAAA,CAC3B,cAAA,CAAgB,CAAC,CAAA,CACjB,aAAA,CAAe,CAAE,WAAA,CAAa,SAAA,CAAW,QAAA,CAAU,SAAU,CAAA,CAC7D,sBAAA,CAAwB,CAAC,CAAA,CACzB,qBAAA,CAAuB,CAAC,CAAA,CACxB,yBAAA,CAA2B,CACzB,UAAA,CAAY,QAAA,CACZ,gBAAA,CAAkB,QAAA,CAClB,QAAA,CAAU,QACZ,CAAA,CAEA,wBAAA,CAA0B,CACxB,UAAA,CAAY,QAAA,CACZ,aAAA,CAAe,uBAAA,CACf,OAAA,CAAS,SAAA,CACT,GAAGJ,CACL,CAAA,CACA,UAAA,CAAY,CACV,OAAA,CAAS,QAAA,CACT,MAAA,CAAQ,SAAA,CACR,UAAA,CAAY,SAAA,CAEZ,WAAA,CAAa,SAAA,CAEb,KAAA,CAAO,aAAA,CACP,GAAGA,CACL,CAAA,CACA,aAAA,CAAe,CACb,OAAA,CAAS,SAAA,CACT,MAAA,CAAQ,SAAA,CACR,GAAGA,CACL,CAAA,CACA,gBAAA,CAAkB,CAAE,UAAA,CAAY,QAAA,CAAU,WAAA,CAAa,SAAU,CAAA,CACjE,wBAAA,CAA0B,CACxB,aAAA,CAAe,QAAA,CACf,MAAA,CAAQ,QAAA,CACR,OAAA,CAAS,SACX,CAAA,CACA,iBAAA,CAAmB,CAAE,MAAA,CAAQ,QAAA,CAAU,QAAA,CAAU,SAAU,CAAA,CAC3D,mBAAA,CAAqB,CACnB,MAAA,CAAQ,QAAA,CACR,QAAA,CAAU,SAAA,CACV,UAAA,CAAY,SACd,CAAA,CACA,mBAAA,CAAqB,CAAE,IAAA,CAAM,SAAU,CAAA,CACvC,qBAAA,CAAuB,CAAC,CAAA,CACxB,WAAA,CAAa,CAEX,QAAA,CAAU,QAAA,CAEV,MAAA,CAAQ,SAAA,CACR,MAAA,CAAQ,QAAA,CACR,cAAA,CAAgB,oCAAA,CAEhB,WAAA,CAAa,QACf,CACF,CAAA,CAQO,IAAMM,CAAAA,CAAa,CACxB,GAAGL,CAAAA,CACH,GAAGC,CAAAA,CACH,GAAGG,CACL,CAAA,CAOaE,CAAAA,CAAc,CACzB,iBAAA,CAAmB,MAAA,CAAO,IAAA,CAAKN,CAAqB,CAAA,CACpD,UAAA,CAAY,MAAA,CAAO,IAAA,CAAKC,CAAc,CAAA,CACtC,eAAA,CAAiB,MAAA,CAAO,IAAA,CAAKG,CAAmB,CAClD,CAAA,CAEaG,CAAAA,CAA8C,MAAA,CAAO,WAAA,CAChEd,CAAAA,CAAQ,OAAA,CAASe,CAAAA,EACdF,CAAAA,CAAYE,CAAM,CAAA,CAAe,GAAA,CAAKC,CAAAA,EAAS,CAACA,CAAAA,CAAMD,CAAM,CAAU,CACzE,CACF,CAAA,CAGO,SAASE,CAAAA,CAAYD,CAAAA,CAAkC,CAC5D,OAAO,OAAOA,CAAAA,EAAS,QAAA,EAAY,MAAA,CAAO,MAAA,CAAOF,CAAAA,CAAkBE,CAAI,CACzE,CAwLO,IAAME,EAAAA,CAAiC,GAAA,CAAM,EAAA,CAAK,EAAA,CAAK,EAAA,CASvD,IAAMC,EAAAA,CAAuB,OAAA,CAoF7B,SAASC,EAAAA,CAAoBC,CAAAA,CAA4B,CAC9D,IAAMC,CAAAA,CAAOD,CAAAA,CAAI,UAAA,CAAW,KAAK,CAAA,CAAIA,CAAAA,CAAI,KAAA,CAAM,CAAC,CAAA,CAAIA,CAAAA,CACpD,MAAO,qBAAA,CAAsB,IAAA,CAAKC,CAAI,CAAA,CAAIA,CAAAA,CAAO,IACnD,CAMA,IAAMC,CAAAA,CAAY,uEAAA,CAGX,SAASC,CAAAA,CACdC,CAAAA,CAC6C,CAC7C,EAAA,CAAI,CAACA,CAAAA,EAASA,CAAAA,CAAM,MAAA,CAAS1B,CAAAA,CAAO,GAAA,CAAK,OAAO,IAAA,CAChD,IAAM2B,CAAAA,CAAIH,CAAAA,CAAU,IAAA,CAAKE,CAAK,CAAA,CAC9B,OAAOC,CAAAA,CAAI,CAAE,OAAA,CAASA,CAAAA,CAAE,CAAC,CAAA,CAAG,OAAA,CAASA,CAAAA,CAAE,CAAC,CAAE,CAAA,CAAI,IAChD,CAMA,IAAMC,CAAAA,CAAkB5B,CAAAA,CAAO,GAAA,CAOxB,SAAS6B,CAAAA,CAAWC,CAAAA,CAA8BC,CAAAA,CAA4B,CACnF,EAAA,CAAID,CAAAA,EAAK,IAAA,CAAM,OAAO,IAAA,CACtB,IAAME,CAAAA,CAAIF,CAAAA,CAAE,IAAA,CAAK,CAAA,CAEjB,OAAIE,CAAAA,CAAE,MAAA,GAAW,CAAA,EAAKA,CAAAA,CAAE,QAAA,CAAS,GAAG,CAAA,CAAU,IAAA,CACvCA,CAAAA,CAAE,KAAA,CAAM,CAAA,CAAGD,CAAG,CACvB,CAOO,SAASE,CAAAA,CAAaC,CAAAA,CAA0B,CAMrD,IAAMC,CAAAA,CALWD,CAAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAKE,CAAAA,EACpCA,CAAAA,CAAI,QAAA,CAAS,GAAG,CAAA,EAAKA,CAAAA,CAAI,QAAA,CAAS,KAAK,CAAA,CAAU,QAAA,CACjD,sBAAA,CAAuB,IAAA,CAAKA,CAAG,CAAA,CAAU,QAAA,CACtCA,CACR,CAAA,CACuB,IAAA,CAAK,GAAG,CAAA,EAAK,GAAA,CACrC,MAAA,CAAQD,CAAAA,CAAO,UAAA,CAAW,GAAG,CAAA,CAAIA,CAAAA,CAAS,CAAA,CAAA,EAAIA,CAAM,CAAA,CAAA","file":"/home/emems/.t3/worktrees/bitsnap-react/chat-free-pwyw/dist/chunk-W3RGQYPD.js","sourcesContent":["/**\n * Bitsnap merchant analytics: the wire contract.\n *\n * SOURCE OF TRUTH: instapay `apps/collector/src/contract.ts` (prose version:\n * `docs/merchant-analytics-contract.md`). This file is a verbatim copy of it\n * (everything below the next comment block). Do not edit it here: change\n * instapay's file and copy it over. `computeVisitorId` and\n * `computeConsentedVisitorId` are pure but need the server secret; they are\n * server-only: the browser never calls them, so bundlers drop them.\n */\n\nexport const SCHEMA_VERSION = 1;\n\n// ---------------------------------------------------------------------------\n// Limits\n// ---------------------------------------------------------------------------\n\nexport const LIMITS = {\n  /** Events in one POST /e. */\n  maxBatchEvents: 50,\n  /** Body of one POST /e or /consent, in bytes. */\n  maxBodyBytes: 64 * 1024,\n  /** `JSON.stringify(props)` of one event, in UTF-16 code units. */\n  maxPropsChars: 4096,\n  maxPropString: 200,\n  maxPropArray: 50,\n  host: 253,\n  path: 512,\n  referrerHost: 253,\n  utm: 100,\n  refCode: 64,\n  id: 64,\n  sdk: 64,\n  pageId: 32,\n  region: 64,\n  osBrowser: 32,\n  /** Collector replaces a client `ts` farther than this from `received_at`. */\n  tsSkewMs: 24 * 60 * 60 * 1000,\n} as const;\n\n// ---------------------------------------------------------------------------\n// Enumerations\n// ---------------------------------------------------------------------------\n\nexport const STREAMS = [\n  \"storefront_events\",\n  \"app_events\",\n  \"business_events\",\n] as const;\nexport type Stream = (typeof STREAMS)[number];\n\nexport const ENVS = [\"live\", \"test\"] as const;\nexport type Env = (typeof ENVS)[number];\n\nexport const SOURCES = [\n  \"storefront\",\n  \"sdk_react\",\n  \"script\",\n  \"server\",\n  \"dashboard\",\n] as const;\nexport type Source = (typeof SOURCES)[number];\n\nexport const CHANNELS = [\n  \"hosted\",\n  \"custom_domain\",\n  \"embed\",\n  \"api\",\n  \"panel\",\n] as const;\nexport type Channel = (typeof CHANNELS)[number];\n\nexport const PAGE_TYPES = [\n  \"shop\",\n  \"catalog\",\n  \"product\",\n  \"cart\",\n  \"checkout\",\n  \"payment\",\n  \"panel\",\n  \"course\",\n  \"custom_page\",\n  \"order\",\n  \"returns\",\n  \"app\",\n  \"other\",\n] as const;\nexport type PageType = (typeof PAGE_TYPES)[number];\n\nexport const DEVICE_TYPES = [\"desktop\", \"mobile\", \"tablet\", \"other\"] as const;\nexport type DeviceType = (typeof DEVICE_TYPES)[number];\n\n/** Sources a browser may claim, per stream. `business_events` is server-only. */\nexport const SOURCES_FOR_STREAM: Record<Stream, readonly Source[]> = {\n  storefront_events: [\"storefront\", \"sdk_react\", \"script\"],\n  app_events: [\"dashboard\"],\n  business_events: [\"server\"],\n};\n\n// ---------------------------------------------------------------------------\n// Event catalogue\n//\n// Each prop is `<type>[?]`: type is `string`, `number`, `boolean`, `string[]`,\n// `number[]` or `enum:a|b|c`; a trailing `?` makes the prop optional.\n// Money is always integer minor units (`*_minor`, grosze/cents) + `currency`\n// (ISO 4217, upper case). `product_id`, `variant_id` and `order_ref` live in\n// the envelope, never in props. Strings never hold PII (see the prose doc).\n// ---------------------------------------------------------------------------\n\nconst MONEY = { value_minor: \"number\", currency: \"string\" } as const;\n\n/** Browser events from hosted pages (H), bitsnap-react (R) and the script (S). */\nexport const STOREFRONT_EVENT_SPEC = {\n  page_view: { landing: \"boolean\" },\n  product_list_viewed: { list_id: \"string?\", item_count: \"number\" },\n  product_impression: {\n    list_id: \"string?\",\n    product_ids: \"string[]\",\n    positions: \"number[]\",\n  },\n  product_clicked: { list_id: \"string?\", position: \"number?\" },\n  product_view: {\n    price_minor: \"number\",\n    currency: \"string\",\n    availability: \"enum:in_stock|out_of_stock|preorder\",\n  },\n  variant_selected: {},\n  add_to_cart: { qty: \"number\", ...MONEY },\n  remove_from_cart: { qty: \"number\", ...MONEY },\n  cart_opened: { item_count: \"number\", ...MONEY },\n  checkout_started: {\n    item_count: \"number\",\n    checkout_type: \"enum:single|cart|link\",\n    ...MONEY,\n  },\n  checkout_step_completed: {\n    step: \"enum:contact|delivery|invoice|consents\",\n  },\n  checkout_validation_error: { field: \"string\", rule: \"string\" },\n  coupon_applied: { coupon_id: \"string\" },\n  coupon_rejected: { coupon_id: \"string?\", reason: \"string\" },\n  delivery_method_selected: { method: \"string\" },\n  payment_method_selected: { gateway: \"string\", method: \"string\" },\n  payment_submitted: { gateway: \"string\", method: \"string\" },\n  apple_pay_clicked: {},\n  apple_pay_result: { outcome: \"enum:success|fail|cancel\" },\n  payment_returned: {\n    gateway: \"string\",\n    method: \"string?\",\n    outcome: \"enum:success|fail|cancel|pending\",\n    error_code: \"string?\",\n  },\n  availability_signup: {},\n  panel_login: {},\n  panel_order_viewed: {},\n  panel_download: {},\n  return_started: {},\n  return_submitted: { reason_code: \"string\", item_count: \"number\" },\n  course_opened: { course_id: \"string\" },\n  lesson_started: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    position: \"number\",\n  },\n  lesson_completed: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    position: \"number\",\n  },\n  video_progress: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    /** 25, 50, 75 or 100. */\n    milestone: \"number\",\n  },\n  test_submitted: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    score_bucket: \"enum:0-24|25-49|50-74|75-99|100\",\n  },\n  lesson_rated: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    /** 1..5. */\n    rating: \"number\",\n  },\n  /** Written by the collector's POST /consent, never sent to POST /e. */\n  consent_updated: {\n    consent_id: \"string\",\n    action: \"enum:accept_all|reject_all|custom|withdraw\",\n    analytics: \"boolean\",\n    marketing: \"boolean\",\n    preferences: \"boolean\",\n    banner_version: \"number\",\n  },\n  /**\n   * Written by the collector's POST /consent (action `shown`), never sent to\n   * POST /e. A banner impression: no consent id, no choice, no visitor.\n   */\n  consent_shown: {\n    banner_version: \"number\",\n  },\n} as const;\n\n/** Merchant behaviour in /app, sent through the same tracker core. */\nexport const APP_EVENT_SPEC = {\n  app_page_view: { route: \"string\", previous_route: \"string?\" },\n  insight_shown: { insight_type: \"string\", rank: \"number\", category: \"string\" },\n  insight_clicked: {\n    insight_type: \"string\",\n    rank: \"number\",\n    category: \"string\",\n  },\n  insight_dismissed: {\n    insight_type: \"string\",\n    rank: \"number\",\n    category: \"string\",\n  },\n  checklist_step_viewed: { step: \"string\" },\n  checklist_step_completed: { step: \"string\" },\n  gateway_connect_started: { gateway: \"string\", step: \"string?\" },\n  gateway_connect_completed: { gateway: \"string\", step: \"string?\" },\n  gateway_connect_failed: {\n    gateway: \"string\",\n    step: \"string?\",\n    error_code: \"string?\",\n  },\n  domain_connect_started: {},\n  domain_connect_verified: {},\n  domain_connect_failed: { error_code: \"string?\" },\n  product_created: { product_type: \"string?\" },\n  product_published: { product_type: \"string?\" },\n  product_editor_section_opened: { section: \"string\" },\n  feature_enabled: { feature: \"string\" },\n  stats_viewed: { tab: \"string\" },\n  stats_filter_changed: { tab: \"string\", filter: \"string\" },\n  report_exported: { report: \"string\", format: \"string?\" },\n  search_performed: { result_count: \"number\" },\n  error_shown: { code: \"string\", route: \"string\" },\n  help_opened: { topic: \"string?\" },\n  ai_assistant_used: { topic: \"string?\" },\n  member_invited: { role: \"string\" },\n} as const;\n\nconst TX = {\n  gateway: \"string?\",\n  method: \"string?\",\n  value_minor: \"number?\",\n  currency: \"string?\",\n} as const;\nconst SUB = {\n  subscription_id: \"string?\",\n  value_minor: \"number?\",\n  currency: \"string?\",\n} as const;\n\n/**\n * Emitted by instapay only. The lower-cased `EventType` of\n * server/event-system/event.list.ts maps 1:1 to the first group.\n */\nexport const BUSINESS_EVENT_SPEC = {\n  // Mirror of the event bus (EventType.X -> x.toLowerCase()).\n  transaction_created: TX,\n  transaction_success: TX,\n  transaction_failure: { ...TX, error_code: \"string?\" },\n  transaction_expired: TX,\n  transaction_charge: TX,\n  subscription_created: SUB,\n  subscription_paused: SUB,\n  subscription_resumed: SUB,\n  subscription_updated: SUB,\n  subscription_deleted: SUB,\n  subscription_charge_paid: SUB,\n  subscription_charge_failed: { ...SUB, error_code: \"string?\" },\n  subscription_past_due: SUB,\n  subscription_canceled: SUB,\n  access_expires_in_3_days: {},\n  access_expired: {},\n  cart_recovery: { value_minor: \"number?\", currency: \"string?\" },\n  testimonial_email_send: {},\n  testimonial_fulfilled: {},\n  partner_commission_earned: {\n    partner_id: \"string\",\n    commission_minor: \"number\",\n    currency: \"string\",\n  },\n  // Added by the analytics work.\n  checkout_session_created: {\n    item_count: \"number\",\n    checkout_type: \"enum:single|cart|link\",\n    gateway: \"string?\",\n    ...MONEY,\n  },\n  order_paid: {\n    gateway: \"string\",\n    method: \"string?\",\n    item_count: \"number?\",\n    /** UTC date (`YYYY-MM-DD`) the envelope `visitor_id` was computed for. */\n    visitor_day: \"string?\",\n    /** Every line of the order (public hashed product ids), at most 50. */\n    items: \"line_items?\",\n    ...MONEY,\n  },\n  refund_issued: {\n    gateway: \"string?\",\n    reason: \"string?\",\n    ...MONEY,\n  },\n  return_requested: { item_count: \"number\", reason_code: \"string?\" },\n  automation_run_completed: {\n    automation_id: \"string\",\n    status: \"string\",\n    trigger: \"string?\",\n  },\n  notification_sent: { medium: \"string\", template: \"string?\" },\n  notification_failed: {\n    medium: \"string\",\n    template: \"string?\",\n    error_code: \"string?\",\n  },\n  recovery_email_sent: { step: \"number?\" },\n  recovery_link_clicked: {},\n  api_request: {\n    /** Route template without ids or query, e.g. `/api/rpc/public.v1.PublicApiService/ListProducts`. */\n    endpoint: \"string\",\n    /** `X-Bitsnap-Client` value, absent when the caller sent none. */\n    client: \"string?\",\n    status: \"number\",\n    latency_bucket: \"enum:lt_50|lt_200|lt_1000|gte_1000\",\n    /** 1 for errors, <1 for sampled successes; rollups divide counts by it. */\n    sample_rate: \"number\",\n  },\n} as const;\n\nexport const EVENT_SPEC_BY_STREAM = {\n  storefront_events: STOREFRONT_EVENT_SPEC,\n  app_events: APP_EVENT_SPEC,\n  business_events: BUSINESS_EVENT_SPEC,\n} as const;\n\nexport const EVENT_SPEC = {\n  ...STOREFRONT_EVENT_SPEC,\n  ...APP_EVENT_SPEC,\n  ...BUSINESS_EVENT_SPEC,\n} as const;\n\nexport type StorefrontEventName = keyof typeof STOREFRONT_EVENT_SPEC;\nexport type AppEventName = keyof typeof APP_EVENT_SPEC;\nexport type BusinessEventName = keyof typeof BUSINESS_EVENT_SPEC;\nexport type EventName = StorefrontEventName | AppEventName | BusinessEventName;\n\nexport const EVENT_NAMES = {\n  storefront_events: Object.keys(STOREFRONT_EVENT_SPEC) as StorefrontEventName[],\n  app_events: Object.keys(APP_EVENT_SPEC) as AppEventName[],\n  business_events: Object.keys(BUSINESS_EVENT_SPEC) as BusinessEventName[],\n} as const;\n\nexport const STREAM_FOR_EVENT: Record<EventName, Stream> = Object.fromEntries(\n  STREAMS.flatMap((stream) =>\n    (EVENT_NAMES[stream] as string[]).map((name) => [name, stream] as const),\n  ),\n) as Record<EventName, Stream>;\n\n/** True for a catalogue event name; own keys only (`constructor`, `toString` are not events). */\nexport function isEventName(name: unknown): name is EventName {\n  return typeof name === \"string\" && Object.hasOwn(STREAM_FOR_EVENT, name);\n}\n\n// -- props types, derived from the spec ------------------------------------\n\ntype PropPrimitives = {\n  string: string;\n  number: number;\n  boolean: boolean;\n  \"string[]\": string[];\n  \"number[]\": number[];\n  line_items: Array<{ product_id: string; qty: number; value_minor: number }>;\n};\ntype SplitEnum<S extends string> = S extends `${infer H}|${infer R}`\n  ? H | SplitEnum<R>\n  : S;\ntype StripOpt<S extends string> = S extends `${infer B}?` ? B : S;\ntype ResolveProp<S extends string> =\n  StripOpt<S> extends `enum:${infer E}`\n    ? SplitEnum<E>\n    : StripOpt<S> extends keyof PropPrimitives\n      ? PropPrimitives[StripOpt<S>]\n      : never;\ntype PropsFromSpec<S extends Record<string, string>> = {\n  [K in keyof S as S[K] extends `${string}?` ? never : K]: ResolveProp<S[K]>;\n} & {\n  [K in keyof S as S[K] extends `${string}?` ? K : never]?: ResolveProp<S[K]>;\n};\n\nexport type EventProps<E extends EventName> = PropsFromSpec<\n  (typeof EVENT_SPEC)[E]\n>;\n\n// ---------------------------------------------------------------------------\n// Envelope\n// ---------------------------------------------------------------------------\n\n/** Fields the emitter fills in. Everything else is derived by the collector. */\nexport interface ClientEvent<E extends EventName = EventName> {\n  /** UUIDv7, generated by the emitter. Dedupe key. */\n  event_id: string;\n  event: E;\n  /** Client clock, unix ms. */\n  ts: number;\n  schema_version: typeof SCHEMA_VERSION;\n  env: Env;\n  source: Source;\n  channel: Channel;\n  /** `<package>@<version>`, e.g. `bitsnap-react@1.9.0`. */\n  sdk?: string | null;\n  /** Random per page load, in memory only. */\n  page_id?: string | null;\n  page_type?: PageType | null;\n  host?: string | null;\n  /** Path without query string and fragment, already run through `sanitizePath`. */\n  path?: string | null;\n  referrer_host?: string | null;\n  utm_source?: string | null;\n  utm_medium?: string | null;\n  utm_campaign?: string | null;\n  utm_content?: string | null;\n  utm_term?: string | null;\n  ref_code?: string | null;\n  product_id?: string | null;\n  variant_id?: string | null;\n  order_ref?: string | null;\n  /** Object on the wire; the collector stores `JSON.stringify(props)`. */\n  props: EventProps<E>;\n  /**\n   * Only honoured for `source: \"dashboard\"`: the hashed Clerk user id computed\n   * by instapay and handed to the dashboard tracker. Ignored for every other\n   * source (the collector computes `visitor_id` itself).\n   */\n  visitor_id?: string | null;\n  /**\n   * The value of the first-party `bs_vid_<projectKey>` cookie (`CLIENT_ID_RE`), sent only\n   * while analytics consent is granted. The collector turns it into a stable\n   * `consentedVisitorId` and never stores it.\n   */\n  client_id?: string | null;\n}\n\n/** One row as stored in Basin (all three streams share this shape). */\nexport interface StoredEvent {\n  event_id: string;\n  event: EventName;\n  /** Unix ms, client clock after `clampTs`. */\n  ts: number;\n  /** Unix ms, collector clock. */\n  received_at: number;\n  schema_version: number;\n  /** Numeric database id. Resolved by the collector, never taken from the client. */\n  project_id: number;\n  env: Env;\n  source: Source;\n  channel: Channel;\n  sdk: string | null;\n  visitor_id: string | null;\n  page_id: string | null;\n  page_type: PageType | null;\n  host: string | null;\n  path: string | null;\n  referrer_host: string | null;\n  utm_source: string | null;\n  utm_medium: string | null;\n  utm_campaign: string | null;\n  utm_content: string | null;\n  utm_term: string | null;\n  ref_code: string | null;\n  country: string | null;\n  region: string | null;\n  device_type: DeviceType | null;\n  os: string | null;\n  browser: string | null;\n  product_id: string | null;\n  variant_id: string | null;\n  order_ref: string | null;\n  /** `JSON.stringify` of the props object. */\n  props: string;\n}\n\n/** POST /e body. */\nexport interface IngestBody {\n  /** Project key, see `normalizeProjectKey`. */\n  k: string;\n  events: ClientEvent[];\n}\n\n// ---------------------------------------------------------------------------\n// Consent shapes\n// ---------------------------------------------------------------------------\n\nexport const CONSENT_TEXT_KEYS = [\n  \"title\",\n  \"description\",\n  \"acceptAll\",\n  \"rejectAll\",\n  \"settings\",\n  \"save\",\n  \"close\",\n  \"necessaryTitle\",\n  \"necessaryDescription\",\n  \"analyticsTitle\",\n  \"analyticsDescription\",\n  \"marketingTitle\",\n  \"marketingDescription\",\n  \"preferencesTitle\",\n  \"preferencesDescription\",\n  \"poweredBy\",\n] as const;\nexport type ConsentTextKey = (typeof CONSENT_TEXT_KEYS)[number];\nexport type ConsentTexts = Record<ConsentTextKey, string>;\n\nexport type ConsentCategory = \"analytics\" | \"marketing\" | \"preferences\";\nexport type ConsentChoice = Record<ConsentCategory, boolean>;\n\nexport type ConsentConfig = {\n  version: number;\n  theme: \"auto\" | \"light\" | \"dark\";\n  accentColor?: string;\n  position: \"bottom\" | \"bottom-left\" | \"bottom-right\";\n  privacyPolicyUrl?: string;\n  categories: { analytics: boolean; marketing: boolean; preferences: boolean };\n  services: Array<{\n    name: string;\n    category: \"analytics\" | \"marketing\" | \"preferences\";\n    cookies?: string[];\n  }>;\n  texts?: Partial<Record<\"pl\" | \"en\", Partial<ConsentTexts>>>;\n  poweredBy: true;\n};\n\n/** Value of the consent cookie, JSON then base64url. */\nexport interface ConsentCookie {\n  v: 1;\n  /** Random consent id (also sent to POST /consent). */\n  id: string;\n  /** Unix seconds. */\n  ts: number;\n  /** Banner version (`ConsentConfig.version`) the visitor answered. */\n  bv: number;\n  c: ConsentChoice;\n}\n\nexport const CONSENT_COOKIE_NAME = \"bitsnap_consent\";\nexport const CONSENT_COOKIE_MAX_AGE_SECONDS = 365 * 24 * 60 * 60;\nexport const CONSENT_ACTIONS = [\n  \"accept_all\",\n  \"reject_all\",\n  \"custom\",\n  \"withdraw\",\n] as const;\nexport type ConsentAction = (typeof CONSENT_ACTIONS)[number];\n/** POST /consent `action` of a banner impression (not a choice, not in `CONSENT_ACTIONS`). */\nexport const CONSENT_SHOWN_ACTION = \"shown\";\n\n/** POST /consent body of a choice (`CONSENT_ACTIONS`). */\nexport interface ConsentLogBody {\n  k: string;\n  /** Same random id as `ConsentCookie.id`. 16 to 64 chars of `[A-Za-z0-9_-]`. */\n  consent_id: string;\n  action: ConsentAction;\n  c: ConsentChoice;\n  /** Banner version. */\n  bv: number;\n  /** Hostname the banner ran on. Collector overwrites it with the Origin host. */\n  host: string;\n  /** Unix SECONDS (like the cookie), not ms. */\n  ts: number;\n}\n\n/**\n * POST /consent body of a banner impression: the banner opened by itself\n * because the visitor has no valid choice. Once per page load; no consent id\n * and no choice.\n */\nexport interface ConsentShownBody {\n  k: string;\n  action: typeof CONSENT_SHOWN_ACTION;\n  /** Banner version. */\n  bv: number;\n  /** Hostname the banner ran on. Collector overwrites it with the Origin host. */\n  host: string;\n  /** Unix SECONDS (like the cookie), not ms. */\n  ts: number;\n}\n\n/** Any POST /consent body; discriminate on `action`. */\nexport type ConsentBody = ConsentLogBody | ConsentShownBody;\n\n/** `bitsnap_consent`, or `bitsnap_consent_<projectKey>` for `data-scope=\"project\"`. */\nexport function consentCookieName(scope: \"site\" | \"project\", projectKey?: string): string {\n  if (scope === \"project\") {\n    if (!projectKey) throw new Error(\"projectKey required for project scope\");\n    return `${CONSENT_COOKIE_NAME}_${normalizeProjectKey(projectKey)}`;\n  }\n  return CONSENT_COOKIE_NAME;\n}\n\n/**\n * Decodes the value of a consent cookie (§11.3). Null when it is not base64url\n * JSON of the documented shape (`v` 1 and a boolean per category).\n */\nexport function parseConsentCookie(value: string | null | undefined): ConsentCookie | null {\n  if (!value || !/^[A-Za-z0-9_-]+$/.test(value)) return null;\n  try {\n    const padded = value.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const bin = atob(padded + \"=\".repeat((4 - (padded.length % 4)) % 4));\n    const json: unknown = JSON.parse(\n      new TextDecoder().decode(Uint8Array.from(bin, (ch) => ch.charCodeAt(0))),\n    );\n    if (!isRecord(json) || json.v !== 1) return null;\n    const c = json.c;\n    if (!isRecord(c)) return null;\n    if (\n      typeof c.analytics !== \"boolean\" ||\n      typeof c.marketing !== \"boolean\" ||\n      typeof c.preferences !== \"boolean\"\n    ) {\n      return null;\n    }\n    return json as unknown as ConsentCookie;\n  } catch {\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Project key\n// ---------------------------------------------------------------------------\n\n/**\n * The project key is the existing public hashed project id\n * (`hashId(projectId)` in apps/bitsnap/queries/hashids.ts, the `projectID`\n * of bitsnap-react). A leading `pk_` is accepted and dropped so the\n * documented `pk_…` snippets work too. Returns null when it is not a plausible\n * key (hashids default alphabet).\n */\nexport function normalizeProjectKey(key: string): string | null {\n  const bare = key.startsWith(\"pk_\") ? key.slice(3) : key;\n  return /^[A-Za-z0-9]{1,32}$/.test(bare) ? bare : null;\n}\n\n// ---------------------------------------------------------------------------\n// X-Bitsnap-Client\n// ---------------------------------------------------------------------------\n\nconst CLIENT_RE = /^([a-z][a-z0-9-]{0,39})@(\\d+\\.\\d+\\.\\d+(?:[-+][0-9A-Za-z.+-]{1,20})?)$/;\n\n/** `<package>@<version>`, e.g. `bitsnap-react@1.9.0`. Also the shape of `sdk`. */\nexport function parseClientHeader(\n  value: string | null | undefined,\n): { package: string; version: string } | null {\n  if (!value || value.length > LIMITS.sdk) return null;\n  const m = CLIENT_RE.exec(value);\n  return m ? { package: m[1], version: m[2] } : null;\n}\n\n// ---------------------------------------------------------------------------\n// URL stripping\n// ---------------------------------------------------------------------------\n\nconst MAX_QUERY_VALUE = LIMITS.utm;\n\n/**\n * Campaign/ref value: trimmed, capped, null when empty or when it holds an \"@\"\n * (someone put an email in a tag). The collector runs every client-supplied\n * `utm_*` and `ref_code` through it again.\n */\nexport function cleanValue(v: string | null | undefined, max: number): string | null {\n  if (v == null) return null;\n  const t = v.trim();\n  // An \"@\" means someone put an email in a campaign tag: drop the value.\n  if (t.length === 0 || t.includes(\"@\")) return null;\n  return t.slice(0, max);\n}\n\n/**\n * Path sanitiser: no query, no fragment, capped. Opaque segments (24+ chars of\n * `[A-Za-z0-9_-]`, i.e. tokens in order/panel links) become `:token` and\n * segments containing `@` become `:email`.\n */\nexport function sanitizePath(pathname: string): string {\n  const segments = pathname.split(\"/\").map((seg) => {\n    if (seg.includes(\"@\") || seg.includes(\"%40\")) return \":email\";\n    if (/^[A-Za-z0-9_-]{24,}$/.test(seg)) return \":token\";\n    return seg;\n  });\n  const joined = segments.join(\"/\") || \"/\";\n  return (joined.startsWith(\"/\") ? joined : `/${joined}`).slice(0, LIMITS.path);\n}\n\nexport interface UrlParts {\n  host: string;\n  /** Sanitised path, no query. */\n  path: string;\n  utm_source: string | null;\n  utm_medium: string | null;\n  utm_campaign: string | null;\n  utm_content: string | null;\n  utm_term: string | null;\n  /** The `ref` query parameter. */\n  ref_code: string | null;\n}\n\n/**\n * Parses a URL and keeps only what may leave the browser: host, sanitised path\n * and the `utm_*` and `ref` query parameters. Returns null for non-http(s) or\n * unparseable input. `base` resolves relative URLs.\n */\nexport function parseUrl(url: string, base?: string): UrlParts | null {\n  let u: URL;\n  try {\n    u = new URL(url, base);\n  } catch {\n    return null;\n  }\n  if (u.protocol !== \"https:\" && u.protocol !== \"http:\") return null;\n  const q = u.searchParams;\n  return {\n    host: u.hostname.toLowerCase().slice(0, LIMITS.host),\n    path: sanitizePath(u.pathname),\n    utm_source: cleanValue(q.get(\"utm_source\"), MAX_QUERY_VALUE),\n    utm_medium: cleanValue(q.get(\"utm_medium\"), MAX_QUERY_VALUE),\n    utm_campaign: cleanValue(q.get(\"utm_campaign\"), MAX_QUERY_VALUE),\n    utm_content: cleanValue(q.get(\"utm_content\"), MAX_QUERY_VALUE),\n    utm_term: cleanValue(q.get(\"utm_term\"), MAX_QUERY_VALUE),\n    ref_code: cleanValue(q.get(\"ref\"), LIMITS.refCode),\n  };\n}\n\n/**\n * Returns the URL with userinfo, fragment and every query parameter removed\n * except `utm_*` and `ref`. Null when `url` is not a usable http(s) URL.\n */\nexport function stripUrl(url: string, base?: string): string | null {\n  let u: URL;\n  try {\n    u = new URL(url, base);\n  } catch {\n    return null;\n  }\n  if (u.protocol !== \"https:\" && u.protocol !== \"http:\") return null;\n  const keep = new URLSearchParams();\n  for (const [key, value] of u.searchParams) {\n    if (key !== \"ref\" && !key.startsWith(\"utm_\")) continue;\n    const cleaned = cleanValue(value, MAX_QUERY_VALUE);\n    if (cleaned != null) keep.append(key, cleaned);\n  }\n  const qs = keep.toString();\n  return `${u.protocol}//${u.host}${sanitizePath(u.pathname)}${qs ? `?${qs}` : \"\"}`;\n}\n\nconst HOSTNAME_RE = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/;\n\n/** A plain DNS hostname (lower-cased), or null: no scheme, port, path, userinfo or \"@\". */\nexport function cleanHostname(\n  v: string | null | undefined,\n  max: number = LIMITS.referrerHost,\n): string | null {\n  if (typeof v !== \"string\") return null;\n  const h = v.trim().toLowerCase();\n  return h.length > 0 && h.length <= max && HOSTNAME_RE.test(h) ? h : null;\n}\n\n/** Public hashed ids (`product_id`, `variant_id`, `order_ref`): URL-safe, at most `LIMITS.id`. */\nexport const ID_RE = /^[A-Za-z0-9_-]{1,64}$/;\n\nexport function cleanId(v: string | null | undefined): string | null {\n  return typeof v === \"string\" && ID_RE.test(v) ? v : null;\n}\n\n/** Host of a referrer URL, or null (also null for non-http(s) referrers). */\nexport function referrerHost(referrer: string | null | undefined): string | null {\n  if (!referrer) return null;\n  try {\n    const u = new URL(referrer);\n    if (u.protocol !== \"https:\" && u.protocol !== \"http:\") return null;\n    return u.hostname.toLowerCase().slice(0, LIMITS.referrerHost);\n  } catch {\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Bot rule\n// ---------------------------------------------------------------------------\n\nconst BOT_UA =\n  /bot\\b|crawl|spider|slurp|facebookexternalhit|bingpreview|headless|phantomjs|lighthouse|pagespeed|gtmetrix|pingdom|uptime|statuscake|monitor|preview|scrapy|curl\\/|wget|python-|go-http-client|java\\/|okhttp|axios|node-fetch|undici|libwww|httpclient|aiohttp|postman|insomnia/i;\n\n/** True when the User-Agent is empty or looks automated. Such events are dropped. */\nexport function isBotUserAgent(ua: string | null | undefined): boolean {\n  if (!ua || ua.trim().length === 0) return true;\n  return BOT_UA.test(ua);\n}\n\n// ---------------------------------------------------------------------------\n// visitor_id\n// ---------------------------------------------------------------------------\n\nconst encoder = new TextEncoder();\n\nasync function hmacSha256(\n  key: Uint8Array,\n  message: string,\n): Promise<Uint8Array> {\n  const cryptoKey = await crypto.subtle.importKey(\n    \"raw\",\n    key,\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  return new Uint8Array(\n    await crypto.subtle.sign(\"HMAC\", cryptoKey, encoder.encode(message)),\n  );\n}\n\nfunction base64url(bytes: Uint8Array): string {\n  let bin = \"\";\n  for (const b of bytes) bin += String.fromCharCode(b);\n  return btoa(bin).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n/** `YYYY-MM-DD` of a unix-ms timestamp in UTC. */\nexport function utcDate(ms: number): string {\n  return new Date(ms).toISOString().slice(0, 10);\n}\n\n/**\n * IP as hashed: lower-case; IPv4 unchanged; IPv4-mapped IPv6 (`::ffff:1.2.3.4`\n * or `::ffff:102:304`) becomes plain IPv4; any other IPv6, including one with\n * an embedded dotted quad (`64:ff9b::1.2.3.4`), is cut to its /64 (first four\n * hextets, canonical form `a:b:c:d::`). Both the Worker and the instapay\n * server MUST call this on the client IP before `computeVisitorId`.\n */\nexport function normalizeIp(ip: string): string {\n  let s = ip.trim().toLowerCase();\n  const zone = s.indexOf(\"%\");\n  if (zone >= 0) s = s.slice(0, zone);\n  if (!s.includes(\":\")) return s; // plain IPv4 (or not an IP at all)\n\n  // Embedded dotted quad in the last 32 bits: turn it into two hextets.\n  const quad = /^(.*:)(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})$/.exec(s);\n  if (quad) {\n    const o = [quad[2], quad[3], quad[4], quad[5]].map(Number);\n    if (o.some((n) => n > 255)) return s;\n    const hex = (hi: number, lo: number) => (hi * 256 + lo).toString(16);\n    s = `${quad[1]}${hex(o[0], o[1])}:${hex(o[2], o[3])}`;\n  }\n\n  const [head, tail] = s.split(\"::\");\n  const headParts = head ? head.split(\":\") : [];\n  const tailParts = tail !== undefined && tail !== \"\" ? tail.split(\":\") : [];\n  const fill =\n    tail === undefined ? 0 : Math.max(0, 8 - headParts.length - tailParts.length);\n  const groups = [...headParts, ...Array<string>(fill).fill(\"0\"), ...tailParts];\n  if (groups.length !== 8) return s;\n  const h = groups.map((g) => Number.parseInt(g, 16) || 0);\n\n  // ::ffff:a.b.c.d in hex form.\n  if (h.slice(0, 5).every((x) => x === 0) && h[5] === 0xffff) {\n    return `${h[6] >> 8}.${h[6] & 255}.${h[7] >> 8}.${h[7] & 255}`;\n  }\n  return `${h\n    .slice(0, 4)\n    .map((g) => g.toString(16))\n    .join(\":\")}::`;\n}\n\n/**\n * Cookieless visitor id, identical in the Worker and the instapay server.\n *\n *   day_secret = HMAC-SHA256(key = utf8(masterSecret), msg = utf8(\"YYYY-MM-DD\"))   // 32 raw bytes\n *   visitor_id = base64url(HMAC-SHA256(key = day_secret, msg = utf8(ip + \"\\n\" + ua + \"\\n\" + projectId))).slice(0, 22)\n *\n * `dateUtc` is the UTC date of the request; `ip` is `normalizeIp(<client IP>)`;\n * `ua` is the raw `User-Agent` request header; `projectId` is the decimal\n * numeric project id.\n */\nexport async function computeVisitorId(\n  masterSecret: string,\n  dateUtc: string,\n  ip: string,\n  ua: string,\n  projectId: number | string,\n): Promise<string> {\n  if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(dateUtc)) {\n    throw new Error(`dateUtc must be YYYY-MM-DD, got ${dateUtc}`);\n  }\n  const daySecret = await hmacSha256(encoder.encode(masterSecret), dateUtc);\n  const mac = await hmacSha256(daySecret, `${ip}\\n${ua}\\n${projectId}`);\n  return base64url(mac).slice(0, 22);\n}\n\n/**\n * The `bs_vid_<projectKey>` cookie name. `projectKey` is the bare public key\n * (like `consentCookieName`): consent is per project, so is the client id.\n */\nexport function clientIdCookieName(projectKey: string): string {\n  return `bs_vid_${projectKey}`;\n}\n\n/** Value of the `bs_vid_<projectKey>` cookie: 16 random bytes, base64url without padding. */\nexport const CLIENT_ID_RE = /^[A-Za-z0-9_-]{22}$/;\n\n/**\n * Stable visitor id of a browser that granted analytics consent (contract §6).\n *\n *   consented_visitor_id = \"p_\" + base64url(HMAC-SHA256(key = utf8(masterSecret),\n *                                  msg = utf8(\"client\\n\" + clientId + \"\\n\" + projectId))).slice(0, 22)\n *\n * 24 characters; daily ids are 22, so `isConsentedVisitorId` tells them apart.\n * `clientId` is the `bs_vid_<projectKey>` cookie value and is never stored.\n */\nexport async function computeConsentedVisitorId(\n  masterSecret: string,\n  clientId: string,\n  projectId: number | string,\n): Promise<string> {\n  if (!CLIENT_ID_RE.test(clientId)) {\n    throw new Error(\"clientId must be 22 base64url characters\");\n  }\n  const mac = await hmacSha256(\n    encoder.encode(masterSecret),\n    `client\\n${clientId}\\n${projectId}`,\n  );\n  return `p_${base64url(mac).slice(0, 22)}`;\n}\n\n/** Whether `visitorId` came from `computeConsentedVisitorId` (not a daily id). */\nexport function isConsentedVisitorId(visitorId: string): boolean {\n  return visitorId.length === 24 && visitorId.startsWith(\"p_\");\n}\n\n// ---------------------------------------------------------------------------\n// Validation\n// ---------------------------------------------------------------------------\n\nexport type ValidationResult = { ok: true } | { ok: false; reason: string };\n\nconst UUID_V7 =\n  /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\nconst PAGE_ID_RE = /^[A-Za-z0-9_-]{8,32}$/;\n/** A letter TLD is required: `bitsnap-react@1.9.0` and `v@1.2` are not addresses. */\nconst EMAIL_LIKE = /[^\\s@]+@[^\\s@]+\\.[A-Za-z]{2,}\\b/;\n\nfunction isRecord(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\nfunction nullableString(\n  e: Record<string, unknown>,\n  key: string,\n  max: number,\n): string | null {\n  const v = e[key];\n  if (v === undefined || v === null) return null;\n  if (typeof v !== \"string\") return `bad_${key}`;\n  return v.length > max ? `too_long_${key}` : null;\n}\n\nfunction checkPropValue(spec: string, value: unknown): boolean {\n  const optional = spec.endsWith(\"?\");\n  const type = optional ? spec.slice(0, -1) : spec;\n  if (type.startsWith(\"enum:\")) {\n    return typeof value === \"string\" && type.slice(5).split(\"|\").includes(value);\n  }\n  switch (type) {\n    case \"string\":\n      return typeof value === \"string\" && value.length <= LIMITS.maxPropString;\n    case \"number\":\n      return typeof value === \"number\" && Number.isFinite(value);\n    case \"boolean\":\n      return typeof value === \"boolean\";\n    case \"string[]\":\n      return (\n        Array.isArray(value) &&\n        value.length <= LIMITS.maxPropArray &&\n        value.every((x) => typeof x === \"string\" && x.length <= LIMITS.maxPropString)\n      );\n    case \"number[]\":\n      return (\n        Array.isArray(value) &&\n        value.length <= LIMITS.maxPropArray &&\n        value.every((x) => typeof x === \"number\" && Number.isFinite(x))\n      );\n    case \"line_items\":\n      return (\n        Array.isArray(value) &&\n        value.length <= LIMITS.maxPropArray &&\n        value.every(\n          (x) =>\n            isRecord(x) &&\n            typeof x.product_id === \"string\" &&\n            ID_RE.test(x.product_id) &&\n            isNonNegativeSafeInteger(x.qty) &&\n            isNonNegativeSafeInteger(x.value_minor),\n        )\n      );\n    default:\n      return false;\n  }\n}\n\nfunction isNonNegativeSafeInteger(value: unknown): boolean {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0;\n}\n\n/** True when `value` looks like an email address (also exported for the collector's re-checks). */\nexport function looksLikeEmail(value: string): boolean {\n  // A well-formed `<package>@<version>` client id is never an address.\n  if (parseClientHeader(value) !== null) return false;\n  return EMAIL_LIKE.test(value);\n}\n\nfunction hasEmailLike(value: unknown): boolean {\n  if (typeof value === \"string\") return looksLikeEmail(value);\n  if (Array.isArray(value)) return value.some(hasEmailLike);\n  if (isRecord(value)) return Object.values(value).some(hasEmailLike);\n  return false;\n}\n\n/**\n * Validates `props` against the catalogue and returns a copy without keys the\n * catalogue does not know (forward compatibility: a newer SDK adding an\n * optional prop must not get its events dropped by an older collector).\n * Fails on missing required props, wrong types, bad enum values, oversize\n * props and string values that look like an email address.\n */\nexport function sanitizeProps(\n  event: string,\n  props: unknown,\n): { ok: true; props: Record<string, unknown> } | { ok: false; reason: string } {\n  if (!isEventName(event)) return { ok: false, reason: \"unknown_event\" };\n  const spec = (EVENT_SPEC as Record<string, Record<string, string>>)[event];\n  if (!spec) return { ok: false, reason: \"unknown_event\" };\n  if (!isRecord(props)) return { ok: false, reason: \"bad_props\" };\n  const out: Record<string, unknown> = {};\n  for (const [key, type] of Object.entries(spec)) {\n    const value = props[key];\n    if (value === undefined || value === null) {\n      if (!type.endsWith(\"?\")) return { ok: false, reason: `props_missing_${key}` };\n      continue;\n    }\n    if (!checkPropValue(type, value)) return { ok: false, reason: `props_bad_${key}` };\n    if (hasEmailLike(value)) return { ok: false, reason: `props_pii_${key}` };\n    out[key] =\n      type.startsWith(\"line_items\") && Array.isArray(value)\n        ? value.map((x) => ({ product_id: x.product_id, qty: x.qty, value_minor: x.value_minor }))\n        : value;\n  }\n  if (JSON.stringify(out).length > LIMITS.maxPropsChars) {\n    return { ok: false, reason: \"props_too_large\" };\n  }\n  return { ok: true, props: out };\n}\n\nexport interface ValidateOptions {\n  /**\n   * Who sent it. `browser` (default) is POST /e: the event must belong to\n   * `storefront_events` or `app_events`, `consent_updated` and `consent_shown`\n   * are refused (only POST /consent writes them) and `source` must fit the\n   * stream. `server` is the instapay emitter: any stream, `source` must fit the\n   * stream.\n   */\n  from?: \"browser\" | \"server\";\n}\n\n/**\n * Validates the emitter-controlled part of an event: names, types, enums,\n * lengths, the event/source/stream pairing and `props`. It does not check\n * that `ts` is plausible (use `clampTs`), origins or project keys.\n */\nexport function validateEnvelope(\n  e: unknown,\n  options: ValidateOptions = {},\n): ValidationResult {\n  const from = options.from ?? \"browser\";\n  const fail = (reason: string): ValidationResult => ({ ok: false, reason });\n  if (!isRecord(e)) return fail(\"not_object\");\n\n  if (typeof e.event_id !== \"string\" || !UUID_V7.test(e.event_id)) {\n    return fail(\"bad_event_id\");\n  }\n  if (!isEventName(e.event)) return fail(\"unknown_event\");\n  const stream = STREAM_FOR_EVENT[e.event as EventName];\n  if (from === \"browser\") {\n    if (stream === \"business_events\") return fail(\"server_only_event\");\n    if (e.event === \"consent_updated\" || e.event === \"consent_shown\") {\n      return fail(\"consent_via_consent_endpoint\");\n    }\n  }\n  if (\n    typeof e.ts !== \"number\" ||\n    !Number.isInteger(e.ts) ||\n    e.ts <= 0 ||\n    e.ts > 4e12\n  ) {\n    return fail(\"bad_ts\");\n  }\n  if (e.schema_version !== SCHEMA_VERSION) return fail(\"bad_schema_version\");\n  if (!ENVS.includes(e.env as Env)) return fail(\"bad_env\");\n  if (!SOURCES.includes(e.source as Source)) return fail(\"bad_source\");\n  if (!SOURCES_FOR_STREAM[stream].includes(e.source as Source)) {\n    return fail(\"source_not_allowed_for_event\");\n  }\n  if (!CHANNELS.includes(e.channel as Channel)) return fail(\"bad_channel\");\n\n  if (e.sdk != null) {\n    if (typeof e.sdk !== \"string\" || parseClientHeader(e.sdk) === null) {\n      return fail(\"bad_sdk\");\n    }\n  }\n  if (e.page_id != null) {\n    if (typeof e.page_id !== \"string\" || !PAGE_ID_RE.test(e.page_id)) {\n      return fail(\"bad_page_id\");\n    }\n  }\n  if (e.page_type != null && !PAGE_TYPES.includes(e.page_type as PageType)) {\n    return fail(\"bad_page_type\");\n  }\n  if (from === \"browser\") {\n    if (typeof e.host !== \"string\" || e.host.length === 0) return fail(\"bad_host\");\n    if (typeof e.path !== \"string\" || !e.path.startsWith(\"/\")) return fail(\"bad_path\");\n  }\n  if (typeof e.path === \"string\" && e.path.includes(\"?\")) return fail(\"path_has_query\");\n  if (typeof e.path === \"string\" && e.path.includes(\"#\")) return fail(\"path_has_fragment\");\n\n  const lengths: Array<[string, number]> = [\n    [\"host\", LIMITS.host],\n    [\"path\", LIMITS.path],\n    [\"referrer_host\", LIMITS.referrerHost],\n    [\"utm_source\", LIMITS.utm],\n    [\"utm_medium\", LIMITS.utm],\n    [\"utm_campaign\", LIMITS.utm],\n    [\"utm_content\", LIMITS.utm],\n    [\"utm_term\", LIMITS.utm],\n    [\"ref_code\", LIMITS.refCode],\n    [\"product_id\", LIMITS.id],\n    [\"variant_id\", LIMITS.id],\n    [\"order_ref\", LIMITS.id],\n  ];\n  for (const [key, max] of lengths) {\n    const problem = nullableString(e, key, max);\n    if (problem) return fail(problem);\n  }\n  if (e.visitor_id != null) {\n    if (typeof e.visitor_id !== \"string\" || !/^[A-Za-z0-9_-]{22}$/.test(e.visitor_id)) {\n      return fail(\"bad_visitor_id\");\n    }\n  }\n  if (e.client_id != null) {\n    if (typeof e.client_id !== \"string\" || !CLIENT_ID_RE.test(e.client_id)) {\n      return fail(\"bad_client_id\");\n    }\n  }\n\n  const props = sanitizeProps(e.event, e.props);\n  if (!props.ok) return fail(props.reason);\n  return { ok: true };\n}\n\n/** Client `ts` as stored: replaced by `receivedAt` when more than 24 h away from it. */\nexport function clampTs(ts: number, receivedAt: number): number {\n  return Math.abs(ts - receivedAt) > LIMITS.tsSkewMs ? receivedAt : ts;\n}\n"]}