lytx 0.3.0

package/endpoints/site_do_worker.ts

@@ -0,0 +1,11 @@
+import { SiteDurableObject as SiteDurableObjectImpl } from "../db/durable/siteDurableObject";
+
+// Re-declare the class in this module so workerd/miniflare can resolve it
+// as a concrete durable object export on this worker script.
+export class SiteDurableObject extends SiteDurableObjectImpl {}
+
+export default {
+  async fetch(): Promise<Response> {
+    return new Response("site durable object host");
+  },
+} satisfies ExportedHandler;

package/index.d.ts

@@ -0,0 +1,63 @@
+import type { CreateLytxAppConfig } from "./src/config/createLytxAppConfig";
+
+export { Signup } from "./src/pages/Signup";
+export { Login } from "./src/pages/Login";
+export { VerifyEmail } from "./src/pages/VerifyEmail";
+
+export { DashboardPage } from "./src/app/Dashboard";
+export type { DashboardPageProps } from "./src/app/Dashboard";
+export { EventsPage } from "./src/app/Events";
+export { ExplorePage } from "./src/app/Explore";
+export { SettingsPage } from "./src/app/Settings";
+export { AppLayout } from "./src/app/Layout";
+
+export { NewSiteSetup } from "./src/app/components/NewSiteSetup";
+export { DashboardWorkspaceLayout } from "./src/app/components/reports/DashboardWorkspaceLayout";
+export { ReportBuilderWorkspace } from "./src/app/components/reports/ReportBuilderWorkspace";
+export { CustomReportBuilderPage } from "./src/app/components/reports/custom/CustomReportBuilderPage";
+
+export { Document } from "./src/Document";
+
+export { eventsApi } from "./src/api/events_api";
+export { seedApi } from "./src/api/seed_api";
+export { team_dashboard_endpoints } from "./src/api/team_api";
+export {
+  world_countries,
+  getCurrentVisitorsRoute,
+  getDashboardDataRoute,
+  siteEventsSqlRoute,
+  siteEventsSchemaRoute,
+} from "./src/api/sites_api";
+export { aiChatRoute, aiConfigRoute, aiTagSuggestRoute } from "./src/api/ai_api";
+export { resendVerificationEmailRoute, userApiRoutes } from "./src/api/auth_api";
+export { eventLabelsApi } from "./src/api/event_labels_api";
+export { reportsApi } from "./src/api/reports_api";
+export { legacyContainerRoute, newSiteSetup } from "./src/api/tag_api";
+export { lytxTag, trackWebEvent } from "./src/api/tag_api_v2";
+export { handleQueueMessage } from "./src/api/queueWorker";
+
+export { authMiddleware, sessionMiddleware } from "./src/api/authMiddleware";
+
+export { auth } from "./lib/auth";
+export type { AuthUserSession } from "./lib/auth";
+
+export { checkIfTeamSetupSites, onlyAllowGetPost } from "./src/utilities/route_interuptors";
+
+export { SyncDurableObject } from "./src/session/durableObject";
+export { SiteDurableObject } from "./db/durable/siteDurableObject";
+
+export type {
+  CreateLytxAppConfig,
+  LytxDbAdapter,
+  LytxEventStore,
+  LytxDbConfig,
+} from "./src/config/createLytxAppConfig";
+export function createLytxApp(
+  config?: CreateLytxAppConfig,
+): ReturnType<typeof import("./src/worker").createLytxApp>;
+export { DEFAULT_LYTX_RESOURCE_NAMES, resolveLytxResourceNames } from "./src/config/resourceNames";
+export type { LytxResourceNames, LytxResourceNamingOptions, LytxResourceStagePosition } from "./src/config/resourceNames";
+
+export type { AppContext } from "./src/worker";
+export type { DBAdapter, UserRole } from "./db/types";
+export type { SitesContext, TeamContext } from "./db/d1/sites";

package/index.ts

@@ -0,0 +1,83 @@
+// ---------------------------------------------------------------------------
+// Lytx Kit – Core Library
+// ---------------------------------------------------------------------------
+// Re-exports every building block from the analytics platform so consumers
+// can import only what they need and compose their own worker / app.
+//
+//   import { DashboardPage, eventsApi, authMiddleware } from "lytx";
+//
+// The package does not export one static fetch/queue handler singleton.
+// Consumers can either call `createLytxApp(...)` or wire up their own
+// `defineApp` using whichever routes, pages, and middleware they choose.
+// ---------------------------------------------------------------------------
+
+// ── Pages (public / unauthenticated) ────────────────────────────────────────
+export { Signup } from "./src/pages/Signup";
+export { Login } from "./src/pages/Login";
+export { VerifyEmail } from "./src/pages/VerifyEmail";
+
+// ── App pages (authenticated) ───────────────────────────────────────────────
+export { DashboardPage } from "./src/app/Dashboard";
+export type { DashboardPageProps } from "./src/app/Dashboard";
+export { EventsPage } from "./src/app/Events";
+export { ExplorePage } from "./src/app/Explore";
+export { SettingsPage } from "./src/app/Settings";
+export { AppLayout } from "./src/app/Layout";
+
+// ── App components ──────────────────────────────────────────────────────────
+export { NewSiteSetup } from "./src/app/components/NewSiteSetup";
+export { DashboardWorkspaceLayout } from "./src/app/components/reports/DashboardWorkspaceLayout";
+export { ReportBuilderWorkspace } from "./src/app/components/reports/ReportBuilderWorkspace";
+export { CustomReportBuilderPage } from "./src/app/components/reports/custom/CustomReportBuilderPage";
+
+// ── Document / shell ────────────────────────────────────────────────────────
+export { Document } from "./src/Document";
+
+// ── API route groups ────────────────────────────────────────────────────────
+export { eventsApi } from "./src/api/events_api";
+export { seedApi } from "./src/api/seed_api";
+export { team_dashboard_endpoints } from "./src/api/team_api";
+export {
+  world_countries,
+  getCurrentVisitorsRoute,
+  getDashboardDataRoute,
+  siteEventsSqlRoute,
+  siteEventsSchemaRoute,
+} from "./src/api/sites_api";
+export { aiChatRoute, aiConfigRoute, aiTagSuggestRoute } from "./src/api/ai_api";
+export { resendVerificationEmailRoute, userApiRoutes } from "./src/api/auth_api";
+export { eventLabelsApi } from "./src/api/event_labels_api";
+export { reportsApi } from "./src/api/reports_api";
+export { legacyContainerRoute, newSiteSetup } from "./src/api/tag_api";
+export { lytxTag, trackWebEvent } from "./src/api/tag_api_v2";
+export { handleQueueMessage } from "./src/api/queueWorker";
+
+// ── Middleware ───────────────────────────────────────────────────────────────
+export { authMiddleware, sessionMiddleware } from "./src/api/authMiddleware";
+
+// ── Auth ────────────────────────────────────────────────────────────────────
+export { auth } from "./lib/auth";
+export type { AuthUserSession } from "./lib/auth";
+
+// ── Route utilities ─────────────────────────────────────────────────────────
+export { checkIfTeamSetupSites, onlyAllowGetPost } from "./src/utilities/route_interuptors";
+
+// ── Durable Objects ─────────────────────────────────────────────────────────
+export { SyncDurableObject } from "./src/session/durableObject";
+export { SiteDurableObject } from "./db/durable/siteDurableObject";
+
+// ── App factory ─────────────────────────────────────────────────────────────
+export { createLytxApp } from "./src/worker";
+export type {
+  CreateLytxAppConfig,
+  LytxDbAdapter,
+  LytxEventStore,
+  LytxDbConfig,
+} from "./src/config/createLytxAppConfig";
+export { DEFAULT_LYTX_RESOURCE_NAMES, resolveLytxResourceNames } from "./src/config/resourceNames";
+export type { LytxResourceNames, LytxResourceNamingOptions, LytxResourceStagePosition } from "./src/config/resourceNames";
+
+// ── Types ───────────────────────────────────────────────────────────────────
+export type { AppContext } from "./src/worker";
+export type { DBAdapter, UserRole } from "./db/types";
+export type { SitesContext, TeamContext } from "./db/d1/sites";

package/lib/auth.ts

@@ -0,0 +1,279 @@
+import { betterAuth } from "better-auth";
+import { drizzleAdapter } from "better-auth/adapters/drizzle";
+import { customSession } from "better-auth/plugins";
+import { env } from "cloudflare:workers";
+import { IS_DEV } from "rwsdk/constants";
+
+import { d1_client } from "@db/d1/client";
+import type { DBAdapter } from "@db/d1/schema";
+import * as schema from "@db/d1/schema";
+import { createNewAccount, getSitesForUser } from "@db/d1/sites";
+import type { SitesContext } from "@db/d1/sites";
+import { sendVerificationEmail } from "@lib/sendMail";
+
+type SocialProviderToggles = {
+  google?: boolean;
+  github?: boolean;
+};
+
+export type AuthRuntimeConfig = {
+  emailPasswordEnabled?: boolean;
+  requireEmailVerification?: boolean;
+  socialProviders?: SocialProviderToggles;
+};
+
+type TeamSummary = {
+  id: number;
+  name: string;
+  external_id: number;
+};
+
+type CoreSession = {
+  session: {
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    userId: string;
+    expiresAt: Date;
+    token: string;
+    ipAddress?: string | null;
+    userAgent?: string | null;
+  };
+  user: {
+    id: string;
+    name: string;
+    email: string;
+    emailVerified: boolean;
+    image?: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+  };
+};
+
+export type AuthUserSession = CoreSession & {
+  initial_site_setup: boolean;
+  email_verified: boolean;
+  team: TeamSummary;
+  all_teams: TeamSummary[];
+  role: "admin" | "editor" | "viewer";
+  db_adapter: DBAdapter;
+  userSites: SitesContext | undefined;
+  timezone: string | null;
+  last_site_id: number | null;
+  last_team_id: number | null;
+};
+
+export type AuthProviderAvailability = {
+  google: boolean;
+  github: boolean;
+};
+
+let auth_runtime_config: AuthRuntimeConfig = {
+  emailPasswordEnabled: true,
+  requireEmailVerification: true,
+  socialProviders: {},
+};
+
+let auth_instance: ReturnType<typeof betterAuth> | null = null;
+
+const hasGoogleCredentials = () => Boolean(env.GOOGLE_CLIENT_ID?.trim() && env.GOOGLE_CLIENT_SECRET?.trim());
+const hasGithubCredentials = () => Boolean(env.GITHUB_CLIENT_ID?.trim() && env.GITHUB_CLIENT_SECRET?.trim());
+
+export function setAuthRuntimeConfig(config: AuthRuntimeConfig = {}) {
+  auth_runtime_config = {
+    ...auth_runtime_config,
+    ...config,
+    socialProviders: {
+      ...auth_runtime_config.socialProviders,
+      ...config.socialProviders,
+    },
+  };
+
+  auth_instance = null;
+}
+
+export function getAuthProviderAvailability(): AuthProviderAvailability {
+  const google_enabled = auth_runtime_config.socialProviders?.google ?? hasGoogleCredentials();
+  const github_enabled = auth_runtime_config.socialProviders?.github ?? hasGithubCredentials();
+
+  return {
+    google: google_enabled,
+    github: github_enabled,
+  };
+}
+
+function getTrustedOrigins() {
+  if (!IS_DEV) return [env.BETTER_AUTH_URL];
+  return [
+    "http://localhost:5173",
+    "http://127.0.0.1:5173",
+    "http://localhost:6124",
+    "http://localhost:6123",
+    "http://*.ts.net:*",
+    "https://*.ts.net:*",
+    env.BETTER_AUTH_URL,
+  ];
+}
+
+function buildSocialProviders() {
+  const providers: Record<string, { clientId: string; clientSecret: string }> = {};
+  const availability = getAuthProviderAvailability();
+
+  if (availability.google) {
+    const clientId = env.GOOGLE_CLIENT_ID?.trim();
+    const clientSecret = env.GOOGLE_CLIENT_SECRET?.trim();
+    if (!clientId || !clientSecret) {
+      throw new Error("Google sign-in is enabled but GOOGLE_CLIENT_ID/GOOGLE_CLIENT_SECRET are missing");
+    }
+    providers.google = { clientId, clientSecret };
+  }
+
+  if (availability.github) {
+    const clientId = env.GITHUB_CLIENT_ID?.trim();
+    const clientSecret = env.GITHUB_CLIENT_SECRET?.trim();
+    if (!clientId || !clientSecret) {
+      throw new Error("GitHub sign-in is enabled but GITHUB_CLIENT_ID/GITHUB_CLIENT_SECRET are missing");
+    }
+    providers.github = { clientId, clientSecret };
+  }
+
+  return providers;
+}
+
+function createAuthInstance() {
+  return betterAuth({
+    trustedOrigins: getTrustedOrigins(),
+    plugins: [
+      customSession(async ({ user, session }) => {
+        const user_with_state = user as typeof user & {
+          last_team_id?: number | null;
+          timezone?: string | null;
+          last_site_id?: number | null;
+        };
+
+        let initial_site_setup = false;
+        const lastTeamId = user_with_state.last_team_id ?? null;
+        const userSites = await getSitesForUser(user.id, lastTeamId);
+
+        let currentTeamId = 0;
+        let currentTeamName = "";
+        let db_adapter: DBAdapter = "sqlite";
+        let teamExternalId = 0;
+        let userRole = "viewer";
+        if (userSites) {
+          if (userSites.teamHasSites) {
+            initial_site_setup = true;
+          }
+          currentTeamId = userSites.team.id;
+
+          if (userSites.team.name) currentTeamName = userSites.team.name;
+          if (userSites.team.db_adapter) db_adapter = userSites.team.db_adapter;
+          if (userSites.team.external_id) teamExternalId = userSites.team.external_id;
+          if (userSites.team.role) userRole = userSites.team.role;
+        }
+
+        const teams = [{ id: currentTeamId, name: currentTeamName, external_id: teamExternalId }];
+        if (userSites?.all_teams) {
+          const mappedTeams = userSites.all_teams.map((team) => ({
+            id: team.team_id,
+            name: team.name!,
+            external_id: team.external_id!,
+          }));
+          teams.push(...mappedTeams);
+        }
+
+        return {
+          initial_site_setup,
+          email_verified: user.emailVerified,
+          team: { id: currentTeamId, name: currentTeamName, external_id: teamExternalId },
+          all_teams: teams,
+          role: userRole,
+          db_adapter,
+          userSites: userSites?.sitesList,
+          timezone: user_with_state.timezone ?? null,
+          last_site_id: user_with_state.last_site_id ?? null,
+          last_team_id: currentTeamId || lastTeamId,
+          user,
+          session,
+        };
+      }),
+    ],
+    database: drizzleAdapter(d1_client, { provider: "sqlite", schema }),
+    secret: env.BETTER_AUTH_SECRET,
+    emailAndPassword: {
+      enabled: auth_runtime_config.emailPasswordEnabled ?? true,
+      requireEmailVerification: auth_runtime_config.requireEmailVerification ?? true,
+    },
+    rateLimit: {
+      storage: "secondary-storage",
+    },
+    secondaryStorage: {
+      get: async (key) => {
+        const value = await env.lytx_sessions.get(key);
+        return value ? value : null;
+      },
+      set: async (key, value, ttl) => {
+        if (ttl) await env.lytx_sessions.put(key, value, { expirationTtl: ttl });
+        else await env.lytx_sessions.put(key, value);
+      },
+      delete: async (key) => {
+        await env.lytx_sessions.delete(key);
+      },
+    },
+    onAPIError: {
+      onError(error) {
+        if (error instanceof Error) {
+          console.error("Better Auth API error:", {
+            name: error.name,
+            message: error.message,
+            stack: IS_DEV ? error.stack : undefined,
+          });
+          return;
+        }
+
+        console.error("Better Auth API error:", error);
+      },
+    },
+    user: {},
+    emailVerification: {
+      sendOnSignUp: true,
+      sendVerificationEmail: async ({ user, url }, _request) => {
+        if (IS_DEV) console.log("🔥🔥🔥 sendVerificationEmail", user, url);
+        await sendVerificationEmail(user.email, url);
+      },
+    },
+    databaseHooks: {
+      user: {
+        create: {
+          after: async (user) => {
+            await createNewAccount(user);
+          },
+        },
+      },
+    },
+    socialProviders: buildSocialProviders(),
+  });
+}
+
+export function getAuth() {
+  if (!auth_instance) {
+    auth_instance = createAuthInstance();
+  }
+  return auth_instance;
+}
+
+export type AuthInstance = ReturnType<typeof getAuth>;
+
+export const auth: AuthInstance = new Proxy({} as AuthInstance, {
+  get(_target, property, receiver) {
+    return Reflect.get(getAuth(), property, receiver);
+  },
+});
+
+export function asAuthUserSession(value: unknown): AuthUserSession | null {
+  if (!value || typeof value !== "object") return null;
+  const candidate = value as Partial<AuthUserSession>;
+  if (!candidate.user || !candidate.session) return null;
+  if (!candidate.team || !candidate.role || !candidate.db_adapter) return null;
+  return candidate as AuthUserSession;
+}