stitchkit 0.115.0 → 0.117.0

package/dist/entrypoints/tracking/performance.js

@@ -0,0 +1,181 @@
+import {
+  DEFAULT_BOT_USER_AGENT_PATTERN2
+} from "../../index-1f40z584.js";
+import {
+  sendUnloadBeacon2,
+  redactTrackingText2
+} from "../../index-vv1sch8a.js";
+
+// src/tracking/performance/collector.ts
+var DEFAULT_EARLY_DELAY_MS = 5000;
+var IDLE_TIMEOUT_MS = 2000;
+var PENDING_KEY = "stitchkit:performance:pending";
+var MAX_PENDING = 20;
+var MAX_MS = 3600000;
+var MAX_CLS = 100;
+var RESTORED_NAVIGATIONS = new Set(["back-forward-cache", "restore"]);
+var LAB_AGENT = /lighthouse|gtmetrix/i;
+function isLabUserAgent(userAgent) {
+  return LAB_AGENT.test(userAgent) || DEFAULT_BOT_USER_AGENT_PATTERN2.test(userAgent);
+}
+var INACTIVE = { stop: () => {
+  return;
+} };
+var running;
+function sessionStore() {
+  try {
+    return typeof sessionStorage === "undefined" ? undefined : sessionStorage;
+  } catch {
+    return;
+  }
+}
+function loadId() {
+  const bytes = crypto.getRandomValues(new Uint8Array(16));
+  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+function browserHost() {
+  const agent = Reflect.get(navigator, "userAgentData");
+  const mobile = agent === undefined ? undefined : Reflect.get(Object(agent), "mobile");
+  return {
+    userAgent: navigator.userAgent,
+    automated: navigator.webdriver === true,
+    mobile: typeof mobile === "boolean" ? mobile : /Mobi|Android/i.test(navigator.userAgent),
+    now: () => Date.now(),
+    route: () => location.pathname,
+    afterLoad(work) {
+      const idle = () => {
+        if (typeof requestIdleCallback === "function") {
+          requestIdleCallback(work, { timeout: IDLE_TIMEOUT_MS });
+        } else {
+          setTimeout(work, 0);
+        }
+      };
+      if (document.readyState === "complete")
+        idle();
+      else
+        addEventListener("load", idle, { once: true });
+    },
+    onHidden(work) {
+      document.addEventListener("visibilitychange", () => {
+        if (document.visibilityState === "hidden")
+          work();
+      });
+      addEventListener("pagehide", work);
+    },
+    after: (delayMs, work) => void setTimeout(work, delayMs),
+    beacon: (url, body) => sendUnloadBeacon2(url, body),
+    storage: sessionStore()
+  };
+}
+function readPending(host) {
+  try {
+    const stored = JSON.parse(host.storage?.getItem(PENDING_KEY) ?? "[]");
+    if (!Array.isArray(stored))
+      return [];
+    return stored.filter((entry) => typeof entry === "string");
+  } catch {
+    return [];
+  }
+}
+function writePending(host, pending) {
+  try {
+    if (pending.length === 0)
+      host.storage?.removeItem(PENDING_KEY);
+    else
+      host.storage?.setItem(PENDING_KEY, JSON.stringify(pending.slice(-MAX_PENDING)));
+  } catch {}
+}
+function samePage(body, id) {
+  return body.includes(`"id":"${id}"`);
+}
+function createPerformanceCollector(config) {
+  if (running)
+    return running;
+  if (config.host === undefined && typeof document === "undefined")
+    return INACTIVE;
+  const host = config.host ?? browserHost();
+  if (host.automated || isLabUserAgent(host.userAgent))
+    return INACTIVE;
+  const route = redactTrackingText2(host.route());
+  const id = loadId();
+  const vitals = {
+    lcpMs: null,
+    inpMs: null,
+    fcpMs: null,
+    ttfbMs: null,
+    cls: null
+  };
+  let navigationType = null;
+  let stopped = false;
+  let finalSent = false;
+  let lastSent;
+  const send = (kind) => {
+    if (stopped || Object.values(vitals).every((value) => value === null))
+      return;
+    const measured = `${kind}:${JSON.stringify(vitals)}`;
+    if (measured === lastSent || kind === "early" && finalSent)
+      return;
+    if (kind === "final")
+      finalSent = true;
+    const sample = {
+      schemaVersion: 1,
+      id,
+      kind,
+      route,
+      buildId: config.buildId,
+      visitId: config.visitId?.() ?? null,
+      deviceClass: host.mobile ? "mobile" : "desktop",
+      navigationType,
+      vitals: { ...vitals },
+      capturedAt: host.now()
+    };
+    const body = JSON.stringify(sample);
+    lastSent = measured;
+    if (host.beacon(config.url, body))
+      return;
+    const others = readPending(host).filter((pending) => !samePage(pending, id));
+    writePending(host, [...others, body]);
+  };
+  const replayPending = () => {
+    writePending(host, readPending(host).filter((body) => !host.beacon(config.url, body)));
+  };
+  const observe = (library) => {
+    const record = (field, limit, metric) => {
+      if (metric.navigationType && RESTORED_NAVIGATIONS.has(metric.navigationType))
+        return;
+      vitals[field] = Math.min(limit, Math.max(0, metric.value));
+      navigationType ??= metric.navigationType ?? null;
+    };
+    const options = { reportAllChanges: true };
+    library.onLCP((metric) => record("lcpMs", MAX_MS, metric), options);
+    library.onINP((metric) => record("inpMs", MAX_MS, metric), options);
+    library.onCLS((metric) => record("cls", MAX_CLS, metric), options);
+    library.onFCP((metric) => record("fcpMs", MAX_MS, metric), options);
+    library.onTTFB((metric) => record("ttfbMs", MAX_MS, metric), options);
+  };
+  host.onHidden(() => send("final"));
+  host.afterLoad(() => {
+    if (stopped)
+      return;
+    replayPending();
+    const load = config.loadVitals ?? (() => import("web-vitals"));
+    load().then((library) => {
+      observe(library);
+      host.after(config.earlyDelayMs ?? DEFAULT_EARLY_DELAY_MS, () => send("early"));
+    }, () => {
+      return;
+    });
+  });
+  const collector = {
+    stop() {
+      stopped = true;
+      running = undefined;
+    }
+  };
+  running = collector;
+  return collector;
+}
+export {
+  createPerformanceCollector,
+  isLabUserAgent
+};

package/dist/entrypoints/tracking/server.d.ts

@@ -11,5 +11,6 @@ export { DEFAULT_BOT_USER_AGENT_PATTERN, isBotUserAgent } from '../../tracking/s
 export { type DispositionEvent, type DispositionInput, type DispositionResult, dispositionTrackingBatch, type KnownVisit, } from '../../tracking/server/disposition.js';
 export { hashTrackingEvent } from '../../tracking/server/hash.js';
 export { createPresenceRegistry, type PresenceEntry, type PresenceRegistry, } from '../../tracking/server/presence.js';
+export { type TrackingOutboxReport, type TrackingTelemetryHealth, trackingTelemetryHealth, } from '../../tracking/server/telemetry-health.js';
 export { type ActiveVisit, type FindActiveVisitQuery, type IssuedVisitLease, type IssueVisitLeaseOptions, issueVisitLease, type TrackingVisitStore, type VisitActor, type VisitOutboxHealth, type VisitOwnership, } from '../../tracking/server/visit-lease.js';
 //# sourceMappingURL=server.d.ts.map

package/dist/entrypoints/tracking/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/entrypoints/tracking/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,gBAAgB,GACjB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,8BAA8B,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,KAAK,UAAU,GAChB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EACL,sBAAsB,EACtB,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,cAAc,GACpB,MAAM,mCAAmC,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/entrypoints/tracking/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,gBAAgB,GACjB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,8BAA8B,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,KAAK,UAAU,GAChB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EACL,sBAAsB,EACtB,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,uBAAuB,GACxB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,cAAc,GACpB,MAAM,mCAAmC,CAAC"}

package/dist/entrypoints/tracking/server.js

@@ -1,3 +1,8 @@
+import {
+  DEFAULT_BOT_USER_AGENT_PATTERN2,
+  isBotUserAgent2
+} from "../../index-1f40z584.js";
+
 // src/tracking/server/active-interval.ts
 var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function activeIntervalOf(event, serverNow, {
@@ -23,11 +28,6 @@ function activeIntervalOf(event, serverNow, {
     endedAt: serverNow
   };
 }
-// src/tracking/server/bot.ts
-var DEFAULT_BOT_USER_AGENT_PATTERN = /bot|crawl|spider|slurp|mediapartners|facebookexternalhit|bingpreview|yandex|baidu|duckduckbot|uptimerobot|pingdom|gtmetrix|pagespeed|lighthouse|headlesschrome/i;
-function isBotUserAgent(userAgent, pattern = DEFAULT_BOT_USER_AGENT_PATTERN) {
-  return userAgent ? pattern.test(userAgent) : false;
-}
 // src/tracking/server/hash.ts
 import { createHash } from "node:crypto";
 function hashTrackingEvent(event) {
@@ -41,9 +41,9 @@ function dispositionTrackingBatch({
   existing,
   actorOwnerId,
   userAgent,
-  botPattern = DEFAULT_BOT_USER_AGENT_PATTERN
+  botPattern = DEFAULT_BOT_USER_AGENT_PATTERN2
 }) {
-  if (isBotUserAgent(userAgent, botPattern)) {
+  if (isBotUserAgent2(userAgent, botPattern)) {
     return {
       accepted: [],
       dispositions: events.map((event) => ({
@@ -115,20 +115,47 @@ function createPresenceRegistry(options = {}) {
     clear: () => active.clear()
   };
 }
+// src/tracking/server/telemetry-health.ts
+function trackingTelemetryHealth(reports, baselines = new Map) {
+  const latest = new Map;
+  const queued = new Map;
+  for (const report of reports) {
+    queued.set(report.stream, report.queued);
+    if (report.state !== "available")
+      continue;
+    latest.set(report.stream, Math.max(latest.get(report.stream) ?? 0, report.dropped));
+  }
+  let dropped = 0;
+  for (const [stream, reported] of latest) {
+    dropped += Math.max(0, reported - (baselines.get(stream) ?? 0));
+  }
+  const count = (state) => reports.filter((report) => report.state === state).length;
+  const unavailable = count("unavailable");
+  const unknown = count("unknown");
+  const degraded = dropped > 0 || unavailable > 0;
+  return {
+    status: reports.length === 0 ? "unknown" : degraded ? "degraded" : unknown > 0 ? "unknown" : "ok",
+    observedVisits: reports.length - unknown,
+    unknownVisits: unknown,
+    unavailable,
+    queued: [...queued.values()].reduce((sum, count) => sum + count, 0),
+    dropped
+  };
+}
 // src/tracking/server/visit-lease.ts
 async function issueVisitLease(store, actor, entry, {
   ownership,
   idleMs = 30 * 60 * 1000,
   now = () => new Date,
   randomUUID = () => crypto.randomUUID(),
-  botPattern = DEFAULT_BOT_USER_AGENT_PATTERN
+  botPattern = DEFAULT_BOT_USER_AGENT_PATTERN2
 }) {
   if (ownership === "adopting" && !store.adopt) {
     throw new Error("issueVisitLease: ownership 'adopting' requires store.adopt");
   }
   const at = now();
   const expiresAt = new Date(at.getTime() + idleMs).toISOString();
-  if (isBotUserAgent(actor.userAgent, botPattern)) {
+  if (isBotUserAgent2(actor.userAgent, botPattern)) {
     return { visitId: randomUUID(), expiresAt, outcome: "bot", adopted: null };
   }
   const health = {
@@ -163,11 +190,12 @@ async function issueVisitLease(store, actor, entry, {
   });
 }
 export {
-  DEFAULT_BOT_USER_AGENT_PATTERN,
+  DEFAULT_BOT_USER_AGENT_PATTERN2 as DEFAULT_BOT_USER_AGENT_PATTERN,
   activeIntervalOf,
   createPresenceRegistry,
   dispositionTrackingBatch,
   hashTrackingEvent,
-  isBotUserAgent,
-  issueVisitLease
+  isBotUserAgent2 as isBotUserAgent,
+  issueVisitLease,
+  trackingTelemetryHealth
 };

package/dist/entrypoints/tracking.d.ts

@@ -4,20 +4,21 @@
  * with one bounded retry, the page-leave beacon that actually arrives, visible
  * time, scroll milestones, declarative clicks, attribution, and the client
  * that composes them. No React, no DOM at import time, no event vocabulary of
- * its own. The server half is `stitchkit/tracking/server`. → ADR 0166.
+ * its own, and no `zod`: this runs on every page. The wire shapes are
+ * `stitchkit/tracking/contract`, the server half `stitchkit/tracking/server`.
+ * → ADR 0166, ADR 0280.
  */
 export { type AttributionStorage, parseReferrer, parseUtmFromSearch, type ReferrerRule, type ResolveAttributionInput, type ResolvedAttribution, resolveAttribution, } from '../tracking/attribution.js';
 export { sendUnloadBeacon } from '../tracking/beacon.js';
 export { type ClickTarget, type ResolveTrackedClickOptions, resolveTrackedClick, type TrackedClick, type TrackedClickAttributes, } from '../tracking/clicks.js';
 export { type BuiltinTrackingEventTypes, CONVENTIONAL_TRACKING_EVENT_TYPES, createTrackingClient, type EventsWithMetadata, type EventsWithoutMetadata, type TrackFn, type TrackingClient, type TrackingClientConfig, } from '../tracking/client.js';
-export { createTrackingContract, type TrackingContractConfig, type TrackingContractEndpoints, } from '../tracking/contract.js';
 export { deliverTrackingBatch, type TrackingDeliveryOptions, type TrackingDeliveryOutcome, } from '../tracking/delivery.js';
 export { browserTrackingHost, type TrackingHost, type TrackingPageContext, } from '../tracking/host.js';
 export { createOncePerPage, type OncePerPage } from '../tracking/once-per-page.js';
 export { createTrackingOutbox, type TrackingOutbox, type TrackingOutboxEvents, type TrackingOutboxHealth, type TrackingOutboxMeta, type TrackingOutboxOptions, type TrackingOutboxRecord, type TrackingOutboxStorage, type TrackingQueuedEvent, } from '../tracking/outbox.js';
 export { indexedDbOutboxStorage } from '../tracking/outbox-storage-indexeddb.js';
 export { memoryOutboxStorage } from '../tracking/outbox-storage-memory.js';
-export { type AttributionData, AttributionDataSchema, createTrackingSchemas, DEFAULT_BUILD_ID_PATTERN, type TrackEventsRequest, type TrackEventsResponse, TrackEventsResponseSchema, type TrackingDisposition, TrackingDispositionSchema, type TrackingDispositionStatus, TrackingDispositionStatusSchema, type TrackingEventEnvelope, type TrackingEventShape, type TrackingOutboxState, TrackingOutboxStateSchema, type TrackingSchemas, type TrackingSchemasConfig, type UtmData, UtmDataSchema, type VisitBootstrapResponse, VisitBootstrapResponseSchema, type VisitEntryContext, type VisitEntryContextShape, } from '../tracking/schemas.js';
+export { redactTrackingText, redactTrackingValue } from '../tracking/privacy.js';
 export { createScrollMilestones, type ScrollMilestones, scrollDepthPercent, } from '../tracking/scroll.js';
 export { createSequenceReserve, type SequenceReserve, type SequenceReserveOptions, } from '../tracking/sequence-reserve.js';
 export { createVisibleTimeMeter, type VisibleHeartbeat, type VisibleInterval, type VisibleTimeMeter, type VisibleTimeMeterOptions, } from '../tracking/visible-time.js';

package/dist/entrypoints/tracking.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tracking.d.ts","sourceRoot":"","sources":["../../src/entrypoints/tracking.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,KAAK,kBAAkB,EACvB,aAAa,EACb,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,0BAA0B,EAC/B,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,sBAAsB,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,yBAAyB,EAC9B,iCAAiC,EACjC,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,GAC/B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,oBAAoB,EACpB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,mBAAmB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EACL,KAAK,eAAe,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,OAAO,EACZ,aAAa,EACb,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,sBAAsB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"tracking.d.ts","sourceRoot":"","sources":["../../src/entrypoints/tracking.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,KAAK,kBAAkB,EACvB,aAAa,EACb,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,0BAA0B,EAC/B,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,sBAAsB,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,yBAAyB,EAC9B,iCAAiC,EACjC,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,mBAAmB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,sBAAsB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,0BAA0B,CAAC"}

package/dist/entrypoints/tracking.js

@@ -1,102 +1,37 @@
-import"../index-m38ej7e5.js";
 import {
-  defineContract2
-} from "../index-d9hq291n.js";
+  sendUnloadBeacon2,
+  redactTrackingText2,
+  redactTrackingValue2
+} from "../index-vv1sch8a.js";
 import {
   ApiError2
 } from "../index-kfjkb396.js";
+import {
+  isRecord
+} from "../index-9jfdm5tg.js";
 
 // src/tracking/attribution.ts
-import { z as z2 } from "zod";
-
-// src/tracking/schemas.ts
-import { z } from "zod";
-var UtmDataSchema = z.object({
-  source: z.string().max(200).optional(),
-  medium: z.string().max(200).optional(),
-  campaign: z.string().max(200).optional(),
-  content: z.string().max(200).optional(),
-  term: z.string().max(200).optional()
-});
-var AttributionDataSchema = z.object({
-  utm: UtmDataSchema.optional(),
-  referrer: z.string().optional(),
-  landingPage: z.string().optional()
-});
-var DEFAULT_BUILD_ID_PATTERN = /^(dev|[a-f0-9]{7,40})$/;
-var TrackingDispositionStatusSchema = z.enum([
-  "accepted",
-  "duplicate",
-  "identity-invalid",
-  "excluded-bot"
-]);
-var TrackingDispositionSchema = z.object({
-  eventId: z.uuid(),
-  status: TrackingDispositionStatusSchema
-});
-var TrackEventsResponseSchema = z.object({
-  accepted: z.number().int().nonnegative(),
-  dispositions: z.array(TrackingDispositionSchema)
-});
-var VisitBootstrapResponseSchema = z.object({
-  visitId: z.uuid(),
-  expiresAt: z.iso.datetime()
-});
-var TrackingOutboxStateSchema = z.enum(["available", "unavailable"]);
-function trackingEventShape(eventTypes) {
-  return {
-    eventId: z.uuid(),
-    visitId: z.uuid(),
-    browserStreamId: z.uuid(),
-    browserSequence: z.number().int().nonnegative(),
-    type: z.enum(eventTypes),
-    page: z.string().max(2000),
-    metadata: z.record(z.string(), z.unknown()).optional(),
-    clientTimestamp: z.number()
-  };
+function isOptionalText(value) {
+  return value === undefined || typeof value === "string";
 }
-function visitEntryContextShape(buildIdPattern) {
-  return {
-    browserStreamId: z.uuid(),
-    previousVisitId: z.uuid().optional(),
-    origin: z.url().max(500),
-    landingPath: z.string().startsWith("/").max(300).regex(/^[^?#]*$/),
-    referrer: z.url().max(2000).optional(),
-    utm: UtmDataSchema.optional(),
-    displayMode: z.enum(["browser", "standalone"]),
-    screenWidth: z.number().int().positive().max(20000),
-    screenHeight: z.number().int().positive().max(20000),
-    buildId: z.string().regex(buildIdPattern),
-    outboxState: TrackingOutboxStateSchema,
-    outboxQueued: z.number().int().nonnegative().max(1000),
-    outboxDropped: z.number().int().nonnegative()
-  };
+var MAX_UTM_LENGTH = 200;
+function isUtmField(value) {
+  return value === undefined || typeof value === "string" && value.length <= MAX_UTM_LENGTH;
 }
-function createTrackingSchemas(config) {
-  const base = z.object(trackingEventShape(config.eventTypes));
-  const event = config.eventExtras ? base.extend(config.eventExtras.shape) : base;
-  const buildIdPattern = config.buildIdPattern ?? DEFAULT_BUILD_ID_PATTERN;
-  const maxEvents = config.maxEventsPerBatch ?? 50;
-  return {
-    event,
-    request: z.object({
-      buildId: z.string().regex(buildIdPattern),
-      events: z.array(event).min(1).max(maxEvents),
-      utm: UtmDataSchema.optional()
-    }),
-    response: TrackEventsResponseSchema,
-    disposition: TrackingDispositionSchema,
-    entry: z.object(visitEntryContextShape(buildIdPattern)),
-    bootstrap: VisitBootstrapResponseSchema
-  };
+function isUtm(value) {
+  if (value === undefined)
+    return true;
+  return isRecord(value) && ["source", "medium", "campaign", "content", "term"].every((field) => isUtmField(value[field]));
+}
+function isStoredTouch(value) {
+  if (!isRecord(value) || !Number.isFinite(value.capturedAt))
+    return false;
+  const { data } = value;
+  return isRecord(data) && isUtm(data.utm) && isOptionalText(data.referrer) && isOptionalText(data.landingPage);
+}
+function isStoredAttribution(value) {
+  return isRecord(value) && isStoredTouch(value.firstTouch) && isStoredTouch(value.currentTouch);
 }
-
-// src/tracking/attribution.ts
-var StoredTouchSchema = z2.object({ data: AttributionDataSchema, capturedAt: z2.number() });
-var StoredAttributionSchema = z2.object({
-  firstTouch: StoredTouchSchema,
-  currentTouch: StoredTouchSchema
-});
 function normalize(value) {
   if (!value)
     return;
@@ -133,12 +68,12 @@ function readStored(storage, key, now, ttlMs) {
     const raw = storage.getItem(key);
     if (!raw)
       return null;
-    const parsed = StoredAttributionSchema.safeParse(JSON.parse(raw));
-    if (!parsed.success || now - parsed.data.firstTouch.capturedAt > ttlMs) {
+    const parsed = JSON.parse(raw);
+    if (!isStoredAttribution(parsed) || now - parsed.firstTouch.capturedAt > ttlMs) {
       storage.removeItem(key);
       return null;
     }
-    return parsed.data;
+    return parsed;
   } catch {
     return null;
   }
@@ -194,12 +129,6 @@ function resolveAttribution({
   });
   return { firstTouch, currentTouch: firstTouch };
 }
-// src/tracking/beacon.ts
-function sendUnloadBeacon(url, body, sender = typeof navigator === "undefined" ? undefined : navigator) {
-  if (!sender || typeof sender.sendBeacon !== "function")
-    return false;
-  return sender.sendBeacon(url, body);
-}
 // src/tracking/clicks.ts
 function label(target) {
   return (target?.textContent ?? "").trim().slice(0, 100) || undefined;
@@ -430,9 +359,9 @@ function bootstrapTrackingVisit(deps, renew) {
         browserStreamId: visit.browserStreamId,
         previousVisitId: visit.visitId ?? undefined,
         origin: page.origin,
-        landingPath: page.pathname,
-        referrer: page.referrer || undefined,
-        utm: touch?.currentTouch.utm?.source ? touch.currentTouch.utm : undefined,
+        landingPath: redactTrackingText2(page.pathname),
+        referrer: page.referrer ? redactTrackingText2(page.referrer) : undefined,
+        utm: touch?.currentTouch.utm?.source ? redactedUtm(touch.currentTouch.utm) : undefined,
         displayMode: page.displayMode,
         screenWidth: page.screenWidth,
         screenHeight: page.screenHeight,
@@ -502,12 +431,15 @@ function createVisitSequences(outbox, visit, options, fail) {
     } : undefined
   });
 }
+function redactedUtm(utm) {
+  return Object.fromEntries(Object.entries(utm).map(([field, value]) => [field, redactTrackingText2(value)]));
+}
 function pageAttribution(host, storage, referrerMap, search, pathname) {
   const page = host.page();
   return resolveAttribution({
     search,
     pathname,
-    referrer: page.referrer,
+    referrer: redactTrackingText2(page.referrer),
     hostname: page.hostname,
     storage,
     referrerMap,
@@ -523,7 +455,7 @@ function pageViewDraft(host, type, pathname, previous) {
       title: page.title,
       screenWidth: page.viewportWidth,
       screenHeight: page.viewportHeight,
-      referrer: previous ? undefined : page.referrer || undefined
+      referrer: previous || !page.referrer ? undefined : redactTrackingText2(page.referrer)
     },
     clientTimestamp: host.wallClock()
   };
@@ -633,10 +565,10 @@ function chunk(items, size) {
   return chunks;
 }
 function unloadBeacon(unloadUrl) {
-  return (request) => unloadUrl === undefined ? false : sendUnloadBeacon(unloadUrl, JSON.stringify(request));
+  return (request) => unloadUrl === undefined ? false : sendUnloadBeacon2(unloadUrl, JSON.stringify(request));
 }
 function currentUtmOf(attribution) {
-  return attribution?.currentTouch.utm?.source ? attribution.currentTouch.utm : undefined;
+  return attribution?.currentTouch.utm?.source ? redactedUtm(attribution.currentTouch.utm) : undefined;
 }
 function trackingTimings(config) {
   if (typeof config.buildId !== "string" || config.buildId.length === 0) {
@@ -815,30 +747,6 @@ function createTrackingClient(config) {
 function asMetadata(value) {
   return typeof value === "object" && value !== null ? { ...value } : undefined;
 }
-// src/tracking/contract.ts
-function createTrackingContract(config) {
-  const schemas = createTrackingSchemas(config);
-  return defineContract2({ prefix: config.prefix ?? "tracking", scope: config.scope }, {
-    bootstrap: {
-      method: "POST",
-      path: "/visit",
-      expose: ["HTTP"],
-      desc: "Issue or renew a browser visit lease",
-      input: schemas.entry,
-      output: schemas.bootstrap
-    },
-    track: {
-      method: "POST",
-      path: "/events",
-      expose: ["HTTP"],
-      desc: "Batch track browser events",
-      input: schemas.request,
-      output: schemas.response,
-      safelistedBody: true,
-      maxJsonBodyBytes: config.maxJsonBodyBytes ?? 256 * 1024
-    }
-  });
-}
 // src/tracking/host.ts
 function browserTrackingHost() {
   return {
@@ -1055,7 +963,7 @@ function indexedDbOutboxStorage(name, factory = () => indexedDB) {
               delete: (eventId) => void events.delete(eventId),
               all: async () => {
                 const raw = await requestResult(events.index("sequence").getAll());
-                return raw.flatMap((value) => isRecord(value) ? [value] : []);
+                return raw.flatMap((value) => isRecord2(value) ? [value] : []);
               },
               count: () => requestResult(events.count())
             }
@@ -1072,7 +980,7 @@ function indexedDbOutboxStorage(name, factory = () => indexedDB) {
     }
   };
 }
-function isRecord(value) {
+function isRecord2(value) {
   if (typeof value !== "object" || value === null)
     return false;
   const event = Reflect.get(value, "event");
@@ -1113,31 +1021,23 @@ function memoryOutboxStorage() {
   };
 }
 export {
-  AttributionDataSchema,
   CONVENTIONAL_TRACKING_EVENT_TYPES,
-  DEFAULT_BUILD_ID_PATTERN,
-  TrackEventsResponseSchema,
-  TrackingDispositionSchema,
-  TrackingDispositionStatusSchema,
-  TrackingOutboxStateSchema,
-  UtmDataSchema,
-  VisitBootstrapResponseSchema,
   browserTrackingHost,
   createOncePerPage,
   createScrollMilestones,
   createSequenceReserve,
   createTrackingClient,
-  createTrackingContract,
   createTrackingOutbox,
-  createTrackingSchemas,
   createVisibleTimeMeter,
   deliverTrackingBatch,
   indexedDbOutboxStorage,
   memoryOutboxStorage,
   parseReferrer,
   parseUtmFromSearch,
+  redactTrackingText2 as redactTrackingText,
+  redactTrackingValue2 as redactTrackingValue,
   resolveAttribution,
   resolveTrackedClick,
   scrollDepthPercent,
-  sendUnloadBeacon
+  sendUnloadBeacon2 as sendUnloadBeacon
 };

package/dist/entrypoints/xlsx.d.ts

@@ -0,0 +1,4 @@
+export { XlsxCellError } from '../xlsx/cells.js';
+export { renderXlsx, XLSX_MEDIA_TYPE } from '../xlsx/render.js';
+export { type XlsxColumn, XlsxColumnSchema, XlsxSheetSchema, type XlsxWorkbook, XlsxWorkbookSchema, } from '../xlsx/schema.js';
+//# sourceMappingURL=xlsx.d.ts.map

package/dist/entrypoints/xlsx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xlsx.d.ts","sourceRoot":"","sources":["../../src/entrypoints/xlsx.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EACL,KAAK,UAAU,EACf,gBAAgB,EAChB,eAAe,EACf,KAAK,YAAY,EACjB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC"}