stitchkit 0.116.0 → 0.118.0

package/dist/entrypoints/tracking/contract.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `stitchkit/tracking/contract` — the wire shapes of tracking: the contract
+ * factory, the event and visit schemas, and the performance sample with its
+ * trust threshold. It brings `zod`, so it belongs to the server and to a shared
+ * contract, and browser code that sends events does not import it. → ADR 0280.
+ */
+export { createTrackingContract, type TrackingContractConfig, type TrackingContractEndpoints, } from '../../tracking/contract.js';
+export { type PerformanceSample, PerformanceSampleSchema, type PerformanceVitals, PerformanceVitalsSchema, } from '../../tracking/performance/schema.js';
+export { type PerformanceMetricSummary, summarizePerformanceMetric, } from '../../tracking/performance/summary.js';
+export { type AttributionData, AttributionDataSchema, createTrackingSchemas, DEFAULT_BUILD_ID_PATTERN, type TrackEventsRequest, type TrackEventsResponse, TrackEventsResponseSchema, type TrackingDisposition, TrackingDispositionSchema, type TrackingDispositionStatus, TrackingDispositionStatusSchema, type TrackingEventEnvelope, type TrackingEventShape, type TrackingOutboxState, TrackingOutboxStateSchema, type TrackingSchemas, type TrackingSchemasConfig, type UtmData, UtmDataSchema, type VisitBootstrapResponse, VisitBootstrapResponseSchema, type VisitEntryContext, type VisitEntryContextShape, } from '../../tracking/schemas.js';
+//# sourceMappingURL=contract.d.ts.map

package/dist/entrypoints/tracking/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../src/entrypoints/tracking/contract.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,GAC/B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,iBAAiB,EACtB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,uBAAuB,GACxB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,KAAK,wBAAwB,EAC7B,0BAA0B,GAC3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,KAAK,eAAe,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,OAAO,EACZ,aAAa,EACb,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,wBAAwB,CAAC"}

package/dist/entrypoints/tracking/contract.js

@@ -0,0 +1,162 @@
+import"../../index-m38ej7e5.js";
+import {
+  defineContract2
+} from "../../index-d9hq291n.js";
+
+// src/tracking/schemas.ts
+import { z } from "zod";
+var UtmDataSchema = z.object({
+  source: z.string().max(200).optional(),
+  medium: z.string().max(200).optional(),
+  campaign: z.string().max(200).optional(),
+  content: z.string().max(200).optional(),
+  term: z.string().max(200).optional()
+});
+var AttributionDataSchema = z.object({
+  utm: UtmDataSchema.optional(),
+  referrer: z.string().optional(),
+  landingPage: z.string().optional()
+});
+var DEFAULT_BUILD_ID_PATTERN = /^(dev|[a-f0-9]{7,40})$/;
+var TrackingDispositionStatusSchema = z.enum([
+  "accepted",
+  "duplicate",
+  "identity-invalid",
+  "excluded-bot"
+]);
+var TrackingDispositionSchema = z.object({
+  eventId: z.uuid(),
+  status: TrackingDispositionStatusSchema
+});
+var TrackEventsResponseSchema = z.object({
+  accepted: z.number().int().nonnegative(),
+  dispositions: z.array(TrackingDispositionSchema)
+});
+var VisitBootstrapResponseSchema = z.object({
+  visitId: z.uuid(),
+  expiresAt: z.iso.datetime()
+});
+var TrackingOutboxStateSchema = z.enum(["available", "unavailable"]);
+function trackingEventShape(eventTypes) {
+  return {
+    eventId: z.uuid(),
+    visitId: z.uuid(),
+    browserStreamId: z.uuid(),
+    browserSequence: z.number().int().nonnegative(),
+    type: z.enum(eventTypes),
+    page: z.string().max(2000),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+    clientTimestamp: z.number()
+  };
+}
+function visitEntryContextShape(buildIdPattern) {
+  return {
+    browserStreamId: z.uuid(),
+    previousVisitId: z.uuid().optional(),
+    origin: z.url().max(500),
+    landingPath: z.string().startsWith("/").max(300).regex(/^[^?#]*$/),
+    referrer: z.url().max(2000).optional(),
+    utm: UtmDataSchema.optional(),
+    displayMode: z.enum(["browser", "standalone"]),
+    screenWidth: z.number().int().positive().max(20000),
+    screenHeight: z.number().int().positive().max(20000),
+    buildId: z.string().regex(buildIdPattern),
+    outboxState: TrackingOutboxStateSchema,
+    outboxQueued: z.number().int().nonnegative().max(1000),
+    outboxDropped: z.number().int().nonnegative()
+  };
+}
+function createTrackingSchemas(config) {
+  const base = z.object(trackingEventShape(config.eventTypes));
+  const event = config.eventExtras ? base.extend(config.eventExtras.shape) : base;
+  const buildIdPattern = config.buildIdPattern ?? DEFAULT_BUILD_ID_PATTERN;
+  const maxEvents = config.maxEventsPerBatch ?? 50;
+  return {
+    event,
+    request: z.object({
+      buildId: z.string().regex(buildIdPattern),
+      events: z.array(event).min(1).max(maxEvents),
+      utm: UtmDataSchema.optional()
+    }),
+    response: TrackEventsResponseSchema,
+    disposition: TrackingDispositionSchema,
+    entry: z.object(visitEntryContextShape(buildIdPattern)),
+    bootstrap: VisitBootstrapResponseSchema
+  };
+}
+
+// src/tracking/contract.ts
+function createTrackingContract(config) {
+  const schemas = createTrackingSchemas(config);
+  return defineContract2({ prefix: config.prefix ?? "tracking", scope: config.scope }, {
+    bootstrap: {
+      method: "POST",
+      path: "/visit",
+      expose: ["HTTP"],
+      desc: "Issue or renew a browser visit lease",
+      input: schemas.entry,
+      output: schemas.bootstrap
+    },
+    track: {
+      method: "POST",
+      path: "/events",
+      expose: ["HTTP"],
+      desc: "Batch track browser events",
+      input: schemas.request,
+      output: schemas.response,
+      safelistedBody: true,
+      maxJsonBodyBytes: config.maxJsonBodyBytes ?? 256 * 1024
+    }
+  });
+}
+// src/tracking/performance/schema.ts
+import { z as z2 } from "zod";
+var BoundedMsSchema = z2.number().nonnegative().max(3600000).nullable();
+var PerformanceVitalsSchema = z2.object({
+  lcpMs: BoundedMsSchema,
+  inpMs: BoundedMsSchema,
+  fcpMs: BoundedMsSchema,
+  ttfbMs: BoundedMsSchema,
+  cls: z2.number().nonnegative().max(100).nullable()
+});
+var PerformanceSampleSchema = z2.object({
+  schemaVersion: z2.literal(1),
+  id: z2.string().min(1).max(64),
+  kind: z2.enum(["early", "final"]),
+  route: z2.string().min(1).max(2000),
+  buildId: z2.string().min(1).max(64),
+  visitId: z2.string().min(1).max(128).nullable(),
+  deviceClass: z2.enum(["mobile", "desktop"]),
+  navigationType: z2.string().min(1).max(32).nullable(),
+  vitals: PerformanceVitalsSchema,
+  capturedAt: z2.number().int().nonnegative()
+});
+// src/tracking/performance/summary.ts
+var DEFAULT_MIN_SAMPLES = 100;
+function percentile(ascending, rank) {
+  return ascending[Math.ceil(ascending.length * rank) - 1] ?? null;
+}
+function summarizePerformanceMetric(values, options = {}) {
+  const present = values.filter((value) => value !== null).sort((left, right) => left - right);
+  const trusted = present.length >= (options.minSamples ?? DEFAULT_MIN_SAMPLES);
+  return {
+    samples: present.length,
+    p75: percentile(present, 0.75),
+    p95: trusted ? percentile(present, 0.95) : null
+  };
+}
+export {
+  AttributionDataSchema,
+  DEFAULT_BUILD_ID_PATTERN,
+  PerformanceSampleSchema,
+  PerformanceVitalsSchema,
+  TrackEventsResponseSchema,
+  TrackingDispositionSchema,
+  TrackingDispositionStatusSchema,
+  TrackingOutboxStateSchema,
+  UtmDataSchema,
+  VisitBootstrapResponseSchema,
+  createTrackingContract,
+  createTrackingSchemas,
+  summarizePerformanceMetric
+};

package/dist/entrypoints/tracking/performance.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `stitchkit/tracking/performance` — Web Vitals from real visitors, collected
+ * after the page has loaded. The sample's schema and the report's trust threshold
+ * are `stitchkit/tracking/contract`; tables and reports stay the application's.
+ * Importing this needs the optional peer `web-vitals`. → ADR 0280.
+ */
+export { createPerformanceCollector, isLabUserAgent, type PerformanceCollector, type PerformanceCollectorConfig, type PerformanceHost, type VitalsLibrary, type VitalsMetric, type VitalsObserver, } from '../../tracking/performance/collector.js';
+//# sourceMappingURL=performance.d.ts.map

package/dist/entrypoints/tracking/performance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"performance.d.ts","sourceRoot":"","sources":["../../../src/entrypoints/tracking/performance.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,0BAA0B,EAC1B,cAAc,EACd,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,cAAc,GACpB,MAAM,sCAAsC,CAAC"}

package/dist/entrypoints/tracking/performance.js

@@ -0,0 +1,181 @@
+import {
+  DEFAULT_BOT_USER_AGENT_PATTERN2
+} from "../../index-1f40z584.js";
+import {
+  sendUnloadBeacon2,
+  redactTrackingText2
+} from "../../index-vv1sch8a.js";
+
+// src/tracking/performance/collector.ts
+var DEFAULT_EARLY_DELAY_MS = 5000;
+var IDLE_TIMEOUT_MS = 2000;
+var PENDING_KEY = "stitchkit:performance:pending";
+var MAX_PENDING = 20;
+var MAX_MS = 3600000;
+var MAX_CLS = 100;
+var RESTORED_NAVIGATIONS = new Set(["back-forward-cache", "restore"]);
+var LAB_AGENT = /lighthouse|gtmetrix/i;
+function isLabUserAgent(userAgent) {
+  return LAB_AGENT.test(userAgent) || DEFAULT_BOT_USER_AGENT_PATTERN2.test(userAgent);
+}
+var INACTIVE = { stop: () => {
+  return;
+} };
+var running;
+function sessionStore() {
+  try {
+    return typeof sessionStorage === "undefined" ? undefined : sessionStorage;
+  } catch {
+    return;
+  }
+}
+function loadId() {
+  const bytes = crypto.getRandomValues(new Uint8Array(16));
+  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+function browserHost() {
+  const agent = Reflect.get(navigator, "userAgentData");
+  const mobile = agent === undefined ? undefined : Reflect.get(Object(agent), "mobile");
+  return {
+    userAgent: navigator.userAgent,
+    automated: navigator.webdriver === true,
+    mobile: typeof mobile === "boolean" ? mobile : /Mobi|Android/i.test(navigator.userAgent),
+    now: () => Date.now(),
+    route: () => location.pathname,
+    afterLoad(work) {
+      const idle = () => {
+        if (typeof requestIdleCallback === "function") {
+          requestIdleCallback(work, { timeout: IDLE_TIMEOUT_MS });
+        } else {
+          setTimeout(work, 0);
+        }
+      };
+      if (document.readyState === "complete")
+        idle();
+      else
+        addEventListener("load", idle, { once: true });
+    },
+    onHidden(work) {
+      document.addEventListener("visibilitychange", () => {
+        if (document.visibilityState === "hidden")
+          work();
+      });
+      addEventListener("pagehide", work);
+    },
+    after: (delayMs, work) => void setTimeout(work, delayMs),
+    beacon: (url, body) => sendUnloadBeacon2(url, body),
+    storage: sessionStore()
+  };
+}
+function readPending(host) {
+  try {
+    const stored = JSON.parse(host.storage?.getItem(PENDING_KEY) ?? "[]");
+    if (!Array.isArray(stored))
+      return [];
+    return stored.filter((entry) => typeof entry === "string");
+  } catch {
+    return [];
+  }
+}
+function writePending(host, pending) {
+  try {
+    if (pending.length === 0)
+      host.storage?.removeItem(PENDING_KEY);
+    else
+      host.storage?.setItem(PENDING_KEY, JSON.stringify(pending.slice(-MAX_PENDING)));
+  } catch {}
+}
+function samePage(body, id) {
+  return body.includes(`"id":"${id}"`);
+}
+function createPerformanceCollector(config) {
+  if (running)
+    return running;
+  if (config.host === undefined && typeof document === "undefined")
+    return INACTIVE;
+  const host = config.host ?? browserHost();
+  if (host.automated || isLabUserAgent(host.userAgent))
+    return INACTIVE;
+  const route = redactTrackingText2(host.route());
+  const id = loadId();
+  const vitals = {
+    lcpMs: null,
+    inpMs: null,
+    fcpMs: null,
+    ttfbMs: null,
+    cls: null
+  };
+  let navigationType = null;
+  let stopped = false;
+  let finalSent = false;
+  let lastSent;
+  const send = (kind) => {
+    if (stopped || Object.values(vitals).every((value) => value === null))
+      return;
+    const measured = `${kind}:${JSON.stringify(vitals)}`;
+    if (measured === lastSent || kind === "early" && finalSent)
+      return;
+    if (kind === "final")
+      finalSent = true;
+    const sample = {
+      schemaVersion: 1,
+      id,
+      kind,
+      route,
+      buildId: config.buildId,
+      visitId: config.visitId?.() ?? null,
+      deviceClass: host.mobile ? "mobile" : "desktop",
+      navigationType,
+      vitals: { ...vitals },
+      capturedAt: host.now()
+    };
+    const body = JSON.stringify(sample);
+    lastSent = measured;
+    if (host.beacon(config.url, body))
+      return;
+    const others = readPending(host).filter((pending) => !samePage(pending, id));
+    writePending(host, [...others, body]);
+  };
+  const replayPending = () => {
+    writePending(host, readPending(host).filter((body) => !host.beacon(config.url, body)));
+  };
+  const observe = (library) => {
+    const record = (field, limit, metric) => {
+      if (metric.navigationType && RESTORED_NAVIGATIONS.has(metric.navigationType))
+        return;
+      vitals[field] = Math.min(limit, Math.max(0, metric.value));
+      navigationType ??= metric.navigationType ?? null;
+    };
+    const options = { reportAllChanges: true };
+    library.onLCP((metric) => record("lcpMs", MAX_MS, metric), options);
+    library.onINP((metric) => record("inpMs", MAX_MS, metric), options);
+    library.onCLS((metric) => record("cls", MAX_CLS, metric), options);
+    library.onFCP((metric) => record("fcpMs", MAX_MS, metric), options);
+    library.onTTFB((metric) => record("ttfbMs", MAX_MS, metric), options);
+  };
+  host.onHidden(() => send("final"));
+  host.afterLoad(() => {
+    if (stopped)
+      return;
+    replayPending();
+    const load = config.loadVitals ?? (() => import("web-vitals"));
+    load().then((library) => {
+      observe(library);
+      host.after(config.earlyDelayMs ?? DEFAULT_EARLY_DELAY_MS, () => send("early"));
+    }, () => {
+      return;
+    });
+  });
+  const collector = {
+    stop() {
+      stopped = true;
+      running = undefined;
+    }
+  };
+  running = collector;
+  return collector;
+}
+export {
+  createPerformanceCollector,
+  isLabUserAgent
+};

package/dist/entrypoints/tracking/server.d.ts

@@ -11,5 +11,6 @@ export { DEFAULT_BOT_USER_AGENT_PATTERN, isBotUserAgent } from '../../tracking/s
 export { type DispositionEvent, type DispositionInput, type DispositionResult, dispositionTrackingBatch, type KnownVisit, } from '../../tracking/server/disposition.js';
 export { hashTrackingEvent } from '../../tracking/server/hash.js';
 export { createPresenceRegistry, type PresenceEntry, type PresenceRegistry, } from '../../tracking/server/presence.js';
+export { type TrackingOutboxReport, type TrackingTelemetryHealth, trackingTelemetryHealth, } from '../../tracking/server/telemetry-health.js';
 export { type ActiveVisit, type FindActiveVisitQuery, type IssuedVisitLease, type IssueVisitLeaseOptions, issueVisitLease, type TrackingVisitStore, type VisitActor, type VisitOutboxHealth, type VisitOwnership, } from '../../tracking/server/visit-lease.js';
 //# sourceMappingURL=server.d.ts.map

package/dist/entrypoints/tracking/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/entrypoints/tracking/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,gBAAgB,GACjB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,8BAA8B,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,KAAK,UAAU,GAChB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EACL,sBAAsB,EACtB,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,cAAc,GACpB,MAAM,mCAAmC,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/entrypoints/tracking/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,gBAAgB,GACjB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,8BAA8B,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,KAAK,UAAU,GAChB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EACL,sBAAsB,EACtB,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,uBAAuB,GACxB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,cAAc,GACpB,MAAM,mCAAmC,CAAC"}

package/dist/entrypoints/tracking/server.js

@@ -1,3 +1,8 @@
+import {
+  DEFAULT_BOT_USER_AGENT_PATTERN2,
+  isBotUserAgent2
+} from "../../index-1f40z584.js";
+
 // src/tracking/server/active-interval.ts
 var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function activeIntervalOf(event, serverNow, {
@@ -23,11 +28,6 @@ function activeIntervalOf(event, serverNow, {
     endedAt: serverNow
   };
 }
-// src/tracking/server/bot.ts
-var DEFAULT_BOT_USER_AGENT_PATTERN = /bot|crawl|spider|slurp|mediapartners|facebookexternalhit|bingpreview|yandex|baidu|duckduckbot|uptimerobot|pingdom|gtmetrix|pagespeed|lighthouse|headlesschrome/i;
-function isBotUserAgent(userAgent, pattern = DEFAULT_BOT_USER_AGENT_PATTERN) {
-  return userAgent ? pattern.test(userAgent) : false;
-}
 // src/tracking/server/hash.ts
 import { createHash } from "node:crypto";
 function hashTrackingEvent(event) {
@@ -41,9 +41,9 @@ function dispositionTrackingBatch({
   existing,
   actorOwnerId,
   userAgent,
-  botPattern = DEFAULT_BOT_USER_AGENT_PATTERN
+  botPattern = DEFAULT_BOT_USER_AGENT_PATTERN2
 }) {
-  if (isBotUserAgent(userAgent, botPattern)) {
+  if (isBotUserAgent2(userAgent, botPattern)) {
     return {
       accepted: [],
       dispositions: events.map((event) => ({
@@ -115,20 +115,47 @@ function createPresenceRegistry(options = {}) {
     clear: () => active.clear()
   };
 }
+// src/tracking/server/telemetry-health.ts
+function trackingTelemetryHealth(reports, baselines = new Map) {
+  const latest = new Map;
+  const queued = new Map;
+  for (const report of reports) {
+    queued.set(report.stream, report.queued);
+    if (report.state !== "available")
+      continue;
+    latest.set(report.stream, Math.max(latest.get(report.stream) ?? 0, report.dropped));
+  }
+  let dropped = 0;
+  for (const [stream, reported] of latest) {
+    dropped += Math.max(0, reported - (baselines.get(stream) ?? 0));
+  }
+  const count = (state) => reports.filter((report) => report.state === state).length;
+  const unavailable = count("unavailable");
+  const unknown = count("unknown");
+  const degraded = dropped > 0 || unavailable > 0;
+  return {
+    status: reports.length === 0 ? "unknown" : degraded ? "degraded" : unknown > 0 ? "unknown" : "ok",
+    observedVisits: reports.length - unknown,
+    unknownVisits: unknown,
+    unavailable,
+    queued: [...queued.values()].reduce((sum, count) => sum + count, 0),
+    dropped
+  };
+}
 // src/tracking/server/visit-lease.ts
 async function issueVisitLease(store, actor, entry, {
   ownership,
   idleMs = 30 * 60 * 1000,
   now = () => new Date,
   randomUUID = () => crypto.randomUUID(),
-  botPattern = DEFAULT_BOT_USER_AGENT_PATTERN
+  botPattern = DEFAULT_BOT_USER_AGENT_PATTERN2
 }) {
   if (ownership === "adopting" && !store.adopt) {
     throw new Error("issueVisitLease: ownership 'adopting' requires store.adopt");
   }
   const at = now();
   const expiresAt = new Date(at.getTime() + idleMs).toISOString();
-  if (isBotUserAgent(actor.userAgent, botPattern)) {
+  if (isBotUserAgent2(actor.userAgent, botPattern)) {
     return { visitId: randomUUID(), expiresAt, outcome: "bot", adopted: null };
   }
   const health = {
@@ -163,11 +190,12 @@ async function issueVisitLease(store, actor, entry, {
   });
 }
 export {
-  DEFAULT_BOT_USER_AGENT_PATTERN,
+  DEFAULT_BOT_USER_AGENT_PATTERN2 as DEFAULT_BOT_USER_AGENT_PATTERN,
   activeIntervalOf,
   createPresenceRegistry,
   dispositionTrackingBatch,
   hashTrackingEvent,
-  isBotUserAgent,
-  issueVisitLease
+  isBotUserAgent2 as isBotUserAgent,
+  issueVisitLease,
+  trackingTelemetryHealth
 };

package/dist/entrypoints/tracking.d.ts

@@ -4,20 +4,21 @@
  * with one bounded retry, the page-leave beacon that actually arrives, visible
  * time, scroll milestones, declarative clicks, attribution, and the client
  * that composes them. No React, no DOM at import time, no event vocabulary of
- * its own. The server half is `stitchkit/tracking/server`. → ADR 0166.
+ * its own, and no `zod`: this runs on every page. The wire shapes are
+ * `stitchkit/tracking/contract`, the server half `stitchkit/tracking/server`.
+ * → ADR 0166, ADR 0280.
  */
 export { type AttributionStorage, parseReferrer, parseUtmFromSearch, type ReferrerRule, type ResolveAttributionInput, type ResolvedAttribution, resolveAttribution, } from '../tracking/attribution.js';
 export { sendUnloadBeacon } from '../tracking/beacon.js';
 export { type ClickTarget, type ResolveTrackedClickOptions, resolveTrackedClick, type TrackedClick, type TrackedClickAttributes, } from '../tracking/clicks.js';
 export { type BuiltinTrackingEventTypes, CONVENTIONAL_TRACKING_EVENT_TYPES, createTrackingClient, type EventsWithMetadata, type EventsWithoutMetadata, type TrackFn, type TrackingClient, type TrackingClientConfig, } from '../tracking/client.js';
-export { createTrackingContract, type TrackingContractConfig, type TrackingContractEndpoints, } from '../tracking/contract.js';
 export { deliverTrackingBatch, type TrackingDeliveryOptions, type TrackingDeliveryOutcome, } from '../tracking/delivery.js';
 export { browserTrackingHost, type TrackingHost, type TrackingPageContext, } from '../tracking/host.js';
 export { createOncePerPage, type OncePerPage } from '../tracking/once-per-page.js';
 export { createTrackingOutbox, type TrackingOutbox, type TrackingOutboxEvents, type TrackingOutboxHealth, type TrackingOutboxMeta, type TrackingOutboxOptions, type TrackingOutboxRecord, type TrackingOutboxStorage, type TrackingQueuedEvent, } from '../tracking/outbox.js';
 export { indexedDbOutboxStorage } from '../tracking/outbox-storage-indexeddb.js';
 export { memoryOutboxStorage } from '../tracking/outbox-storage-memory.js';
-export { type AttributionData, AttributionDataSchema, createTrackingSchemas, DEFAULT_BUILD_ID_PATTERN, type TrackEventsRequest, type TrackEventsResponse, TrackEventsResponseSchema, type TrackingDisposition, TrackingDispositionSchema, type TrackingDispositionStatus, TrackingDispositionStatusSchema, type TrackingEventEnvelope, type TrackingEventShape, type TrackingOutboxState, TrackingOutboxStateSchema, type TrackingSchemas, type TrackingSchemasConfig, type UtmData, UtmDataSchema, type VisitBootstrapResponse, VisitBootstrapResponseSchema, type VisitEntryContext, type VisitEntryContextShape, } from '../tracking/schemas.js';
+export { redactTrackingText, redactTrackingValue } from '../tracking/privacy.js';
 export { createScrollMilestones, type ScrollMilestones, scrollDepthPercent, } from '../tracking/scroll.js';
 export { createSequenceReserve, type SequenceReserve, type SequenceReserveOptions, } from '../tracking/sequence-reserve.js';
 export { createVisibleTimeMeter, type VisibleHeartbeat, type VisibleInterval, type VisibleTimeMeter, type VisibleTimeMeterOptions, } from '../tracking/visible-time.js';

package/dist/entrypoints/tracking.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tracking.d.ts","sourceRoot":"","sources":["../../src/entrypoints/tracking.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,KAAK,kBAAkB,EACvB,aAAa,EACb,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,0BAA0B,EAC/B,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,sBAAsB,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,yBAAyB,EAC9B,iCAAiC,EACjC,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,GAC/B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,oBAAoB,EACpB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,mBAAmB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EACL,KAAK,eAAe,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,OAAO,EACZ,aAAa,EACb,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,sBAAsB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"tracking.d.ts","sourceRoot":"","sources":["../../src/entrypoints/tracking.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,KAAK,kBAAkB,EACvB,aAAa,EACb,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,0BAA0B,EAC/B,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,sBAAsB,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,yBAAyB,EAC9B,iCAAiC,EACjC,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,mBAAmB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,sBAAsB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,0BAA0B,CAAC"}