thumbgate 1.4.5 → 1.5.0

package/scripts/billing.js

@@ -2292,8 +2292,14 @@ async function handleWebhook(rawBody, signature) {
   if (LOCAL_MODE()) return { handled: false, reason: 'local_mode' };
   let event;
   try {
-    const stripe = getStripeClient();
-    event = stripe.webhooks.constructEvent(rawBody, signature, CONFIG.STRIPE_WEBHOOK_SECRET);
+    if (CONFIG.STRIPE_WEBHOOK_SECRET) {
+      const stripe = getStripeClient();
+      event = stripe.webhooks.constructEvent(rawBody, signature, CONFIG.STRIPE_WEBHOOK_SECRET);
+    } else {
+      // No webhook secret configured — signature was already checked by verifyWebhookSignature
+      // (which is also lenient when no secret). Parse the raw body directly.
+      event = JSON.parse(rawBody.toString('utf-8'));
+    }
   } catch (err) {
     return { handled: false, reason: 'invalid_signature', error: err.message };
   }

package/scripts/commercial-offer.js

@@ -1,6 +1,6 @@
 'use strict';
 
-const PRO_MONTHLY_PAYMENT_LINK = 'https://buy.stripe.com/5kQ4gzbmI9Lo6tPayn3sI06';
+const PRO_MONTHLY_PAYMENT_LINK = 'https://buy.stripe.com/7sYcN5bmIf5IcSd8qf3sI0a';
 const PRO_ANNUAL_PAYMENT_LINK = 'https://buy.stripe.com/3cI8wPfCYaPs2dzdKz3sI07';
 
 const PRO_MONTHLY_PRICE_ID = 'price_1THQY7GGBpd520QYHoS7RG0J';

package/scripts/telemetry-analytics.js

@@ -15,6 +15,21 @@ const {
 } = require('./feedback-paths');
 
 const TELEMETRY_FILE_NAME = 'telemetry-pings.jsonl';
+const MARKETING_CLICK_EVENT_TYPES = new Set([
+  'cta_click',
+  'checkout_start',
+  'checkout_bootstrap',
+  'chatgpt_gpt_open',
+  'chatgpt_gpt_click',
+  'install_guide_click',
+  'install_click',
+  'pro_page_click',
+  'pro_checkout_start',
+  'workflow_sprint_intake_click',
+  'demo_click',
+  'github_repo_click',
+  'community_landing_redirect',
+]);
 
 function shouldIncludeLegacyTelemetry() {
   if (
@@ -64,6 +79,10 @@ function safeRate(num, den) {
   return Number((num / den).toFixed(4));
 }
 
+function isMarketingClickEvent(eventType) {
+  return MARKETING_CLICK_EVENT_TYPES.has(String(eventType || '').toLowerCase());
+}
+
 function getTelemetryPath(feedbackDir) {
   return path.join(feedbackDir, TELEMETRY_FILE_NAME);
 }
@@ -288,6 +307,8 @@ function sanitizeTelemetryPayload(payload = {}, headers = {}) {
     ctaId: pickFirstText(raw.ctaId),
     ctaPlacement: pickFirstText(raw.ctaPlacement),
     planId: pickFirstText(raw.planId),
+    linkSlug: pickFirstText(raw.linkSlug, raw.destinationSlug),
+    destinationPath: pickFirstText(raw.destinationPath),
     pipelineStatus: pickFirstText(raw.pipelineStatus, raw.workflowSprintStatus, raw.status),
     reasonCode,
     reasonDetail: pickFirstText(raw.reasonDetail, raw.reasonText, raw.otherReason, raw.notes),
@@ -365,6 +386,7 @@ function summarizeRecentEvents(events) {
       utmCampaign: entry.utmCampaign || null,
       ctaId: entry.ctaId || null,
       page: entry.page || null,
+      linkSlug: entry.linkSlug || null,
       reasonCode: entry.reasonCode || null,
       creator: entry.creator || null,
       community: entry.community || null,
@@ -474,7 +496,7 @@ function getTelemetrySummary(feedbackDir, options = {}) {
         if (entry.attributionTagged) attributedPageViews += 1;
       }
 
-      if ((entry.eventType || entry.event) === 'cta_click' || (entry.eventType || entry.event) === 'checkout_start' || (entry.eventType || entry.event) === 'checkout_bootstrap') {
+      if (isMarketingClickEvent(entry.eventType || entry.event)) {
         ctaClicks += 1;
         incrementCounter(ctaClicksBySource, entry.source);
         incrementCounter(ctaClicksByCampaign, entry.utmCampaign);
@@ -601,6 +623,10 @@ function getTelemetrySummary(feedbackDir, options = {}) {
       pageViewsByTrafficChannel[channelKey] || 0
     );
   }
+  const installCopies = byEventType.install_copy || 0;
+  const gptOpens = (byEventType.chatgpt_gpt_open || 0) + (byEventType.chatgpt_gpt_click || 0);
+  const trialEmails = byEventType.trial_email_captured || 0;
+  const proConversions = checkoutPaidConfirmations;
 
   return {
     window: serializeAnalyticsWindow(analyticsWindow),
@@ -608,6 +634,19 @@ function getTelemetrySummary(feedbackDir, options = {}) {
     latestSeenAt,
     byClientType,
     byEventType,
+    conversionFunnel: {
+      landingViews: pageViews,
+      installCopies,
+      gptOpens,
+      checkoutStarts,
+      trialEmails,
+      proConversions,
+      landingToInstallCopyRate: safeRate(installCopies, pageViews),
+      landingToGptOpenRate: safeRate(gptOpens, pageViews),
+      landingToCheckoutRate: safeRate(checkoutStarts, pageViews),
+      checkoutToTrialEmailRate: safeRate(trialEmails, checkoutStarts),
+      checkoutToProConversionRate: safeRate(proConversions, checkoutStarts),
+    },
     web: {
       totalEvents: webEvents,
       uniqueVisitors: webVisitors.size,
@@ -712,6 +751,7 @@ function getTelemetryAnalytics(feedbackDir, options = {}) {
     latestSeenAt: summary.latestSeenAt,
     byClientType: summary.byClientType,
     byEventType: summary.byEventType,
+    conversionFunnel: summary.conversionFunnel,
     visitors: {
       totalEvents: summary.web.totalEvents,
       uniqueVisitors: summary.web.uniqueVisitors,

package/src/api/server.js

@@ -227,6 +227,123 @@ const BUILD_METADATA = resolveBuildMetadata();
 const TERMINAL_JOB_STATUSES = new Set(['completed', 'failed', 'cancelled']);
 const IDLE_JOB_STATUSES = new Set(['queued', 'paused', 'resume_requested']);
 const JOB_CONTROL_ACTIONS = new Set(['pause', 'cancel', 'resume']);
+const TRACKED_LINK_QUERY_KEYS = [
+  'utm_source',
+  'utm_medium',
+  'utm_campaign',
+  'utm_content',
+  'utm_term',
+  'source',
+  'creator',
+  'creator_handle',
+  'community',
+  'subreddit',
+  'post_id',
+  'comment_id',
+  'campaign_variant',
+  'offer_code',
+  'acquisition_id',
+  'visitor_id',
+  'session_id',
+  'visitor_session_id',
+  'install_id',
+  'trace_id',
+  'cta_id',
+  'cta_placement',
+  'plan_id',
+  'billing_cycle',
+  'seat_count',
+  'landing_path',
+  'referrer_host',
+];
+const TRACKED_LINK_TARGETS = Object.freeze({
+  gpt: {
+    href: 'https://chatgpt.com/g/g-69dcfd1cd5f881918ae31874631d6f08-thumbgate',
+    external: true,
+    ctaId: 'go_gpt',
+    ctaPlacement: 'link_router',
+    eventType: 'chatgpt_gpt_open',
+    defaults: {
+      utm_source: 'website',
+      utm_medium: 'link_router',
+      utm_campaign: 'chatgpt_gpt',
+    },
+  },
+  pro: {
+    path: '/checkout/pro',
+    ctaId: 'go_pro',
+    ctaPlacement: 'link_router',
+    eventType: 'cta_click',
+    defaults: {
+      utm_source: 'website',
+      utm_medium: 'link_router',
+      utm_campaign: 'pro_upgrade',
+      plan_id: 'pro',
+      billing_cycle: 'monthly',
+    },
+    allowCustomerEmail: true,
+  },
+  install: {
+    path: '/guide',
+    ctaId: 'go_install',
+    ctaPlacement: 'link_router',
+    eventType: 'install_guide_click',
+    defaults: {
+      utm_source: 'website',
+      utm_medium: 'link_router',
+      utm_campaign: 'install_free',
+      plan_id: 'free',
+    },
+  },
+  reddit: {
+    path: '/',
+    ctaId: 'go_reddit',
+    ctaPlacement: 'link_router',
+    eventType: 'community_landing_redirect',
+    defaults: {
+      utm_source: 'reddit',
+      utm_medium: 'organic_social',
+      utm_campaign: 'first_party_redirect',
+      campaign_variant: 'reddit_shortlink',
+    },
+  },
+  linkedin: {
+    path: '/',
+    ctaId: 'go_linkedin',
+    ctaPlacement: 'link_router',
+    eventType: 'community_landing_redirect',
+    defaults: {
+      utm_source: 'linkedin',
+      utm_medium: 'organic_social',
+      utm_campaign: 'first_party_redirect',
+      campaign_variant: 'linkedin_shortlink',
+    },
+  },
+  x: {
+    path: '/',
+    ctaId: 'go_x',
+    ctaPlacement: 'link_router',
+    eventType: 'community_landing_redirect',
+    defaults: {
+      utm_source: 'x',
+      utm_medium: 'organic_social',
+      utm_campaign: 'first_party_redirect',
+      campaign_variant: 'x_shortlink',
+    },
+  },
+  github: {
+    href: 'https://github.com/IgorGanapolsky/ThumbGate',
+    external: true,
+    ctaId: 'go_github',
+    ctaPlacement: 'link_router',
+    eventType: 'github_repo_click',
+    defaults: {
+      utm_source: 'website',
+      utm_medium: 'link_router',
+      utm_campaign: 'github_repo',
+    },
+  },
+});
 
 // ---------------------------------------------------------------------------
 // Stripe event tracking helpers
@@ -841,6 +958,130 @@ function buildCheckoutBootstrapBody(parsed, req, journeyState = resolveJourneySt
   };
 }
 
+function normalizeTrackedLinkSlug(value) {
+  return String(value || '').trim().toLowerCase().replace(/[^a-z0-9-]/g, '');
+}
+
+function getTrackedLinkTarget(slug) {
+  const normalizedSlug = normalizeTrackedLinkSlug(slug);
+  return TRACKED_LINK_TARGETS[normalizedSlug]
+    ? { slug: normalizedSlug, ...TRACKED_LINK_TARGETS[normalizedSlug] }
+    : null;
+}
+
+function appendTrackedLinkQueryParams(destinationUrl, parsed, target) {
+  const params = parsed.searchParams;
+  for (const [key, value] of Object.entries(target.defaults || {})) {
+    if (!destinationUrl.searchParams.has(key)) {
+      appendQueryParam(destinationUrl, key, value);
+    }
+  }
+  for (const key of TRACKED_LINK_QUERY_KEYS) {
+    const value = params.get(key);
+    if (value && value.trim()) {
+      destinationUrl.searchParams.set(key, value.trim());
+    }
+  }
+  if (target.allowCustomerEmail) {
+    appendQueryParam(destinationUrl, 'customer_email', params.get('customer_email'));
+  }
+  if (!destinationUrl.searchParams.has('cta_id')) {
+    appendQueryParam(destinationUrl, 'cta_id', target.ctaId);
+  }
+  if (!destinationUrl.searchParams.has('cta_placement')) {
+    appendQueryParam(destinationUrl, 'cta_placement', target.ctaPlacement);
+  }
+  if (!destinationUrl.searchParams.has('landing_path')) {
+    appendQueryParam(destinationUrl, 'landing_path', `/go/${target.slug}`);
+  }
+}
+
+function buildTrackedLinkDestination(target, hostedConfig, parsed) {
+  const destinationUrl = target.href
+    ? new URL(target.href)
+    : new URL(target.path || '/', hostedConfig.appOrigin);
+  appendTrackedLinkQueryParams(destinationUrl, parsed, target);
+  return destinationUrl;
+}
+
+function buildTrackedLinkAttribution(target, parsed, req, journeyState, destinationUrl) {
+  const params = parsed.searchParams;
+  const referrer = pickFirstText(params.get('referrer'), req.headers.referer, req.headers.referrer);
+  const referrerHost = pickFirstText(params.get('referrer_host'), parseReferrerHost(referrer));
+  const source = pickFirstText(
+    params.get('source'),
+    params.get('utm_source'),
+    target.defaults && target.defaults.utm_source,
+    inferSource(referrerHost)
+  );
+
+  return {
+    eventType: target.eventType || 'cta_click',
+    clientType: 'web',
+    acquisitionId: journeyState.acquisitionId,
+    visitorId: journeyState.visitorId,
+    sessionId: journeyState.sessionId,
+    installId: pickFirstText(params.get('install_id')),
+    traceId: pickFirstText(params.get('trace_id')),
+    source,
+    utmSource: pickFirstText(params.get('utm_source'), source),
+    utmMedium: pickFirstText(params.get('utm_medium'), target.defaults && target.defaults.utm_medium, 'link_router'),
+    utmCampaign: pickFirstText(params.get('utm_campaign'), target.defaults && target.defaults.utm_campaign, 'first_party_redirect'),
+    utmContent: pickFirstText(params.get('utm_content')),
+    utmTerm: pickFirstText(params.get('utm_term')),
+    creator: pickFirstText(params.get('creator'), params.get('creator_handle')),
+    community: pickFirstText(params.get('community'), params.get('subreddit')),
+    postId: pickFirstText(params.get('post_id')),
+    commentId: pickFirstText(params.get('comment_id')),
+    campaignVariant: pickFirstText(params.get('campaign_variant'), target.defaults && target.defaults.campaign_variant),
+    offerCode: pickFirstText(params.get('offer_code')),
+    ctaId: pickFirstText(params.get('cta_id'), target.ctaId),
+    ctaPlacement: pickFirstText(params.get('cta_placement'), target.ctaPlacement),
+    planId: pickFirstText(params.get('plan_id'), target.defaults && target.defaults.plan_id),
+    landingPath: pickFirstText(params.get('landing_path'), `/go/${target.slug}`),
+    page: `/go/${target.slug}`,
+    referrer,
+    referrerHost,
+    destinationSlug: target.slug,
+    destinationPath: target.external ? destinationUrl.host : destinationUrl.pathname,
+  };
+}
+
+function serveTrackedLinkRedirect({ req, res, parsed, hostedConfig, isHeadRequest, slug }) {
+  const target = getTrackedLinkTarget(slug);
+  if (!target) {
+    sendJson(res, 404, {
+      error: 'Tracked link not found',
+      allowed: Object.keys(TRACKED_LINK_TARGETS),
+    }, {}, {
+      headOnly: isHeadRequest,
+    });
+    return;
+  }
+
+  const { FEEDBACK_DIR } = getFeedbackPaths();
+  const journeyState = resolveJourneyState(req, parsed);
+  const destinationUrl = buildTrackedLinkDestination(target, hostedConfig, parsed);
+  if (!isHeadRequest) {
+    appendBestEffortTelemetry(
+      FEEDBACK_DIR,
+      buildTrackedLinkAttribution(target, parsed, req, journeyState, destinationUrl),
+      req.headers,
+      `tracked_link_redirect:${target.slug}`
+    );
+  }
+
+  res.writeHead(302, {
+    ...(journeyState.setCookieHeaders.length ? { 'Set-Cookie': journeyState.setCookieHeaders } : {}),
+    'Cache-Control': 'no-store',
+    'Referrer-Policy': 'strict-origin-when-cross-origin',
+    'X-Robots-Tag': 'noindex,nofollow',
+    'X-ThumbGate-Link-Slug': target.slug,
+    Location: destinationUrl.toString(),
+  });
+  res.end();
+}
+
 function resolveCheckoutOfferSummary(metadata = {}) {
   const planId = normalizePlanId(metadata.planId);
   const billingCycle = normalizeBillingCycle(metadata.billingCycle);
@@ -2697,6 +2938,34 @@ function createApiServer() {
               attribution,
             }) + '\n');
           }
+          const journeyState = resolveJourneyState(req, parsed);
+          appendBestEffortTelemetry(getFeedbackPaths().FEEDBACK_DIR, {
+            eventType: 'trial_email_captured',
+            clientType: 'web',
+            acquisitionId: journeyState.acquisitionId,
+            visitorId: journeyState.visitorId,
+            sessionId: journeyState.sessionId,
+            source: attribution.source || 'landing-page',
+            utmSource: attribution.source || null,
+            utmMedium: attribution.medium || 'newsletter',
+            utmCampaign: attribution.campaign || 'trial_email_capture',
+            utmContent: attribution.content || null,
+            utmTerm: attribution.term || null,
+            creator: attribution.creator || null,
+            community: attribution.community || null,
+            postId: attribution.postId || null,
+            commentId: attribution.commentId || null,
+            campaignVariant: attribution.campaignVariant || null,
+            offerCode: attribution.offerCode || null,
+            ctaId: 'trial_email',
+            ctaPlacement: landingPath === '/pro' ? 'pro_email_form' : 'homepage_email_form',
+            planId: 'pro',
+            pipelineStatus: duplicate ? 'duplicate' : 'accepted',
+            page: landingPath,
+            landingPath,
+            referrer: referrer || null,
+            referrerHost,
+          }, req.headers, 'trial_email_captured');
           if (wantsJson) {
             sendJson(res, 200, {
               accepted: true,
@@ -2750,6 +3019,19 @@ function createApiServer() {
     }
 
     // Public endpoints — no auth required
+    const trackedLinkMatch = pathname.match(/^\/go\/([^/]+)$/);
+    if (isGetLikeRequest && trackedLinkMatch) {
+      serveTrackedLinkRedirect({
+        req,
+        res,
+        parsed,
+        hostedConfig,
+        isHeadRequest,
+        slug: trackedLinkMatch[1],
+      });
+      return;
+    }
+
     if (isGetLikeRequest && pathname === '/robots.txt') {
       sendText(res, 200, renderRobotsTxt(hostedConfig), {
         'Content-Type': 'text/plain; charset=utf-8',