drafted 1.7.19 → 1.7.20

package/install-mcp.sh

@@ -215,8 +215,10 @@ export PATH="$HOME/.drafted/npm-global/bin:$PATH"
 
 step "Installing Drafted"
 
-npm install -g drafted@latest --force --silent 2>/dev/null
+npm install -g drafted@latest --force
 hash -r 2>/dev/null || true
+NPM_ROOT="$(npm root -g)"
+node -e "import('node:url').then(({ pathToFileURL }) => import(pathToFileURL(process.argv[1]).href)).then(() => process.exit(0), (err) => { console.error(err); process.exit(1); })" "$NPM_ROOT/drafted/mcp/server.mjs"
 ok "Installed $(drafted --version 2>/dev/null || echo 'drafted') via npm"
 
 # ── Configure ─────────────────────────────────────────────────────

package/mcp/server.mjs

@@ -20,7 +20,21 @@ import { registerAppResource, RESOURCE_MIME_TYPE } from '@modelcontextprotocol/e
 import WebSocket from 'ws';
 import { LAYERS } from '../src/shared/constants.mjs';
 import { emptyExcalidrawScene, excalidrawSceneFromMermaid, stringifyExcalidrawScene } from '../src/shared/excalidraw.mjs';
-import { UMAMI_EVENTS, trackUmamiEvent } from '../server/lib/umami.mjs';
+const { UMAMI_EVENTS, trackUmamiEvent } = await (async () => {
+  try {
+    return await import('../server/lib/umami.mjs');
+  } catch {
+    return {
+      UMAMI_EVENTS: Object.freeze({
+        MCP_CONNECTED: 'mcp_connected',
+        MCP_TOOL_CALLED: 'mcp_tool_called',
+        DRAFTED_MCP_REQUEST: 'drafted_mcp_request',
+        DRAFTED_MCP_ERROR: 'drafted_mcp_error',
+      }),
+      trackUmamiEvent: () => {},
+    };
+  }
+})();
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "drafted",
-  "version": "1.7.19",
+  "version": "1.7.20",
   "description": "Drafted — visual thinking surface for humans and AI agents. Renders HTML, markdown, images, and code as frames on a zoomable canvas, with MCP tools for AI agents and real-time sync for humans.",
   "type": "module",
   "files": [
     "cli/",
     "mcp/",
+    "server/lib/umami.mjs",
     "src/shared/",
     "agent-instructions/",
     "install-mcp.sh"
@@ -31,7 +32,8 @@
     "version:check": "node scripts/sync-versions.mjs",
     "postpublish": "bash scripts/sync-plugin.sh \"chore: sync plugin to v$npm_package_version\"",
     "deploy:check:google": "node scripts/check-google-drive-deploy.mjs",
-    "build:excalidraw": "node scripts/build-excalidraw-editor.mjs"
+    "build:excalidraw": "node scripts/build-excalidraw-editor.mjs",
+    "prepublishOnly": "node scripts/check-npm-package.mjs"
   },
   "dependencies": {
     "@aws-sdk/client-s3": "^3.1007.0",

package/server/lib/umami.mjs

@@ -0,0 +1,156 @@
+export const UMAMI_EVENTS = Object.freeze({
+  SIGNUP_STARTED: 'signup_started',
+  SIGNUP_COMPLETED: 'signup_completed',
+  ORG_CREATED: 'org_created',
+  PROJECT_CREATED: 'project_created',
+  PROJECT_OPENED: 'project_opened',
+  TEMPLATE_USED: 'template_used',
+  FRAME_CREATED: 'frame_created',
+  FRAME_UPDATED: 'frame_updated',
+  FRAME_DELETED: 'frame_deleted',
+  SHARE_CREATED: 'share_created',
+  SHARE_ACCEPTED: 'share_accepted',
+  INVITE_SENT: 'invite_sent',
+  MCP_CONNECTED: 'mcp_connected',
+  MCP_TOOL_CALLED: 'mcp_tool_called',
+  WIKI_PAGE_CREATED: 'wiki_page_created',
+  SKILL_ATTACHED: 'skill_attached',
+  DRIVE_CONNECTED: 'drive_connected',
+  DRIVE_SYNC_COMPLETED: 'drive_sync_completed',
+  DRAFTED_INSTALL: 'drafted_install',
+  DRAFTED_UPDATE: 'drafted_update',
+  DRAFTED_HEARTBEAT: 'drafted_heartbeat',
+  DRAFTED_MCP_CONFIGURED: 'drafted_mcp_configured',
+  DRAFTED_MCP_REQUEST: 'drafted_mcp_request',
+  DRAFTED_MCP_ERROR: 'drafted_mcp_error',
+  DRAFTED_UPDATE_HELPER_STARTED: 'drafted_update_helper_started',
+  DRAFTED_UPDATE_HELPER_FAILED: 'drafted_update_helper_failed',
+  CTA_CLICKED: 'cta_clicked',
+  TEMPLATE_SELECTED: 'template_selected',
+  PROJECT_NAVIGATED: 'project_navigated',
+  SHARE_MODAL_OPENED: 'share_modal_opened',
+  SHARE_MODAL_ACTION: 'share_modal_action',
+  SURFACE_LOADED: 'surface_loaded',
+  SIDEBAR_USED: 'sidebar_used',
+  TOOL_PANEL_USED: 'tool_panel_used',
+});
+
+const BLOCKED_KEYS = new Set([
+  'email', 'userEmail', 'name', 'userName', 'orgName', 'projectName', 'label', 'title',
+  'content', 'html', 'markdown', 'body', 'prompt', 'token', 'cookie', 'authorization',
+  'password', 'secret', 'apiKey', 'request', 'headers', 'file', 'buffer', 'dataUrl',
+]);
+const ID_KEYS = new Set(['userId', 'orgId', 'projectId', 'projectSlug', 'frameId', 'shareId', 'skillId', 'templateId', 'templateSlug', 'userRole', 'role', 'buildId', 'pageType', 'tool', 'action', 'source', 'layer', 'lane', 'mode', 'installId', 'schemaVersion', 'installerVersion', 'cliVersion', 'osFamily', 'osVersion', 'arch', 'nodeVersion', 'npmVersion', 'claudeDesktop', 'claudeCode', 'codex', 'cursor', 'updateHelperStatus', 'mcpMode', 'errorCode']);
+
+export function getUmamiConfig(config = {}) {
+  const hostUrl = (config.umamiHostUrl || process.env.UMAMI_HOST_URL || '').replace(/\/$/, '');
+  const websiteId = config.umamiWebsiteId || process.env.UMAMI_WEBSITE_ID || '';
+  return { hostUrl, websiteId, enabled: Boolean(hostUrl && websiteId) };
+}
+
+export function sanitizeUmamiEventData(data = {}) {
+  const output = {};
+  if (!data || typeof data !== 'object' || Array.isArray(data)) return output;
+  for (const [key, value] of Object.entries(data)) {
+    if (BLOCKED_KEYS.has(key)) continue;
+    if (value === undefined || value === null) continue;
+    if (typeof value === 'object') continue;
+    if (!ID_KEYS.has(key) && /email|name|content|html|markdown|body|prompt|token|cookie|auth|secret|password|key|file/i.test(key)) continue;
+    if (typeof value === 'string') {
+      if (value.length > 120) continue;
+      if (/@/.test(value)) continue;
+      output[key] = value;
+    } else if (typeof value === 'number' || typeof value === 'boolean') {
+      output[key] = value;
+    }
+  }
+  return output;
+}
+
+export function getUmamiHead(config = {}) {
+  const umami = getUmamiConfig(config);
+  if (!umami.enabled) return '';
+  const ctx = sanitizeUmamiEventData({
+    userId: config.userId,
+    orgId: config.orgId,
+    projectId: config.projectId,
+    projectSlug: config.projectSlug,
+    userRole: config.userRole,
+    buildId: config.buildId,
+    pageType: config.pageType,
+  });
+  return `<script defer src="${umami.hostUrl}/script.js" data-website-id="${umami.websiteId}"></script>
+<script>
+window.__DRAFTED_ANALYTICS__ = ${JSON.stringify(ctx)};
+window.draftedTrack = function(name, data) {
+  var base = window.__DRAFTED_ANALYTICS__ || {};
+  var payload = Object.assign({}, base, data || {});
+  if (window.umami && typeof window.umami.track === 'function') window.umami.track(name, payload);
+};
+window.addEventListener('load', function() {
+  var c = window.__DRAFTED_ANALYTICS__ || {};
+  if (c.userId && window.umami && typeof window.umami.identify === 'function') window.umami.identify(c.userId, { orgId: c.orgId, role: c.userRole });
+});
+</script>`;
+}
+
+export function getUmamiInteractionScript(pageType) {
+  return `<script>
+(function() {
+  function track(name, data) { if (window.draftedTrack) window.draftedTrack(name, Object.assign({ pageType: ${JSON.stringify(pageType)} }, data || {})); }
+  window.addEventListener('load', function() {
+    if (${JSON.stringify(pageType)} === 'surface') track('surface_loaded');
+  });
+  document.addEventListener('click', function(event) {
+    var el = event.target && event.target.closest && event.target.closest('a,button,[data-analytics-event],[data-template-slug],[data-project-id]');
+    if (!el) return;
+    var eventName = el.getAttribute('data-analytics-event');
+    if (eventName) return track(eventName, { action: el.getAttribute('data-analytics-action') || undefined });
+    var href = el.getAttribute('href') || '';
+    var cls = el.className || '';
+    if (el.matches('.nav-cta,.btn-primary,.btn-secondary')) track('cta_clicked', { action: href || (el.textContent || '').trim().slice(0, 40) });
+    if (el.getAttribute('data-template-slug')) track('template_selected', { templateSlug: el.getAttribute('data-template-slug') });
+    if (el.getAttribute('data-project-id')) track('project_navigated', { projectId: el.getAttribute('data-project-id') });
+    if (/share/i.test(String(cls)) || /share/i.test(el.textContent || '')) track('share_modal_action');
+    if (/sidebar/i.test(String(cls))) track('sidebar_used');
+    if (/tool|panel/i.test(String(cls))) track('tool_panel_used');
+  }, true);
+})();
+</script>`;
+}
+
+function getRequestUrl(req) {
+  if (!req) return undefined;
+  const host = typeof req.get === 'function' ? req.get('host') : req.headers?.host;
+  const protocol = req.protocol || 'https';
+  return host ? `${protocol}://${host}${req.originalUrl || req.url || ''}` : undefined;
+}
+
+export function trackUmamiEvent(name, data = {}, req = null) {
+  const umami = getUmamiConfig();
+  if (!umami.enabled || !name || name.length > 50) return;
+  const payload = {
+    type: 'event',
+    payload: {
+      website: umami.websiteId,
+      name,
+      url: getRequestUrl(req) || process.env.BASE_URL || 'https://drafted.live',
+      hostname: req?.hostname || 'drafted.live',
+      language: req?.headers?.['accept-language'],
+      referrer: req?.headers?.referer,
+      data: sanitizeUmamiEventData(data),
+    },
+  };
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), 1500);
+  fetch(`${umami.hostUrl}/api/send`, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'User-Agent': req?.headers?.['user-agent'] || 'Drafted Server Analytics',
+      'X-Forwarded-For': req?.ip || req?.headers?.['x-forwarded-for'] || '',
+    },
+    body: JSON.stringify(payload),
+    signal: controller.signal,
+  }).catch(() => {}).finally(() => clearTimeout(timeout));
+}