tracklane 0.5.0 → 0.6.0

package/dist/{browser-CddkJdvX.d.ts → browser-_0LRgTpx.d.ts}

@@ -1,3 +1,62 @@
+//#region src/errors.d.ts
+/**
+ * Thrown by a server provider when the vendor's endpoint answers with a
+ * non-2xx status. The message stays exactly what the provider composed,
+ * free of the payload, per `TrackingError`'s guarantee, and the vendor's own
+ * answer travels separately on `status` and `body`, for a host that asks for
+ * it via `onError` rather than a host that logs by default.
+ *
+ * See ADR-0013 for why the split exists and why `body` is a property rather
+ * than `cause`.
+ *
+ * @param message - The same one-line message the provider already throws
+ * today (e.g. `meta: the Conversions API answered 400`). Not composed here.
+ * @param details - The vendor's own answer: `provider` is the name it
+ * registers under, `status` is the HTTP status, and `body` is the response
+ * body verbatim, capped at 2048 characters with a `…[truncated]` suffix that
+ * fits inside the cap.
+ *
+ * @example
+ * ```ts
+ * throw new VendorResponseError(`meta: the Conversions API answered ${status}`, {
+ *   provider: 'meta',
+ *   status,
+ *   body: await response.text().catch(() => ''),
+ * });
+ * ```
+ */
+declare class VendorResponseError extends Error {
+  readonly provider: string;
+  readonly status: number;
+  readonly body: string;
+  constructor(message: string, details: {
+    provider: string;
+    status: number;
+    body: string;
+  });
+}
+/**
+ * Tests the brand `VendorResponseError` sets, not `instanceof`: two copies
+ * of this package in one `node_modules` produce two constructors, and
+ * `instanceof` would say `false` for an instance the other copy built. The
+ * `Symbol.for` brand is the same symbol across both.
+ *
+ * @param value - Anything a `catch` block might hand back.
+ * @returns Whether `value` carries the `VendorResponseError` brand.
+ *
+ * @example
+ * ```ts
+ * try {
+ *   await track.server('purchase', data, context);
+ * } catch (error) {
+ *   if (isVendorResponseError(error)) {
+ *     reportWithFingerprint(error.provider, error.status, error.body);
+ *   }
+ * }
+ * ```
+ */
+declare function isVendorResponseError(value: unknown): value is VendorResponseError;
+//#endregion
 //#region src/providers/ga4.server.d.ts
 /** Credentials for the GA4 Measurement Protocol. */
 interface Ga4ServerCredentials {
@@ -639,5 +698,5 @@ interface BrowserTracking {
  */
 declare function createTracking(options: BrowserTrackingOptions): BrowserTracking;
 //#endregion
-export { MetaServerCredentials as A, ProviderDefault as C, PosthogServerCredentials as D, PosthogServerConfig as E, Ga4ServerConfig as M, Ga4ServerCredentials as N, posthog$1 as O, ga4$1 as P, EventItem as S, UserData as T, createTracking$1 as _, createTracking as a, EventBinding as b, MetaBrowserConfig as c, ga4 as d, EventContext as f, ServerTrackingOptions as g, ServerTracking as h, TrackOptions as i, meta$1 as j, MetaServerConfig as k, meta as l, ServerProvider as m, BrowserTracking as n, PosthogBrowserConfig as o, ResolvedContext as p, BrowserTrackingOptions as r, posthog as s, BrowserProvider as t, Ga4BrowserConfig as u, ActionSource as v, TrackingError as w, EventData as x, ConsentState as y };
-//# sourceMappingURL=browser-CddkJdvX.d.ts.map
+export { MetaServerCredentials as A, ProviderDefault as C, PosthogServerCredentials as D, PosthogServerConfig as E, VendorResponseError as F, isVendorResponseError as I, Ga4ServerConfig as M, Ga4ServerCredentials as N, posthog$1 as O, ga4$1 as P, EventItem as S, UserData as T, createTracking$1 as _, createTracking as a, EventBinding as b, MetaBrowserConfig as c, ga4 as d, EventContext as f, ServerTrackingOptions as g, ServerTracking as h, TrackOptions as i, meta$1 as j, MetaServerConfig as k, meta as l, ServerProvider as m, BrowserTracking as n, PosthogBrowserConfig as o, ResolvedContext as p, BrowserTrackingOptions as r, posthog as s, BrowserProvider as t, Ga4BrowserConfig as u, ActionSource as v, TrackingError as w, EventData as x, ConsentState as y };
+//# sourceMappingURL=browser-_0LRgTpx.d.ts.map

package/dist/browser.d.ts

@@ -1,2 +1,2 @@
-import { a as createTracking, c as MetaBrowserConfig, d as ga4, i as TrackOptions, l as meta, n as BrowserTracking, o as PosthogBrowserConfig, r as BrowserTrackingOptions, s as posthog, t as BrowserProvider, u as Ga4BrowserConfig } from "./browser-CddkJdvX.js";
+import { a as createTracking, c as MetaBrowserConfig, d as ga4, i as TrackOptions, l as meta, n as BrowserTracking, o as PosthogBrowserConfig, r as BrowserTrackingOptions, s as posthog, t as BrowserProvider, u as Ga4BrowserConfig } from "./browser-_0LRgTpx.js";
 export { BrowserProvider, BrowserTracking, BrowserTrackingOptions, type Ga4BrowserConfig, type MetaBrowserConfig, type PosthogBrowserConfig, TrackOptions, createTracking, ga4, meta, posthog };

package/dist/conformance.d.ts

@@ -1,4 +1,4 @@
-import { m as ServerProvider, p as ResolvedContext, t as BrowserProvider } from "./browser-CddkJdvX.js";
+import { m as ServerProvider, p as ResolvedContext, t as BrowserProvider } from "./browser-_0LRgTpx.js";
 //#region src/conformance.d.ts
 /**
  * Runs the shared conformance suite against a browser provider.

package/dist/conformance.js

@@ -1,3 +1,4 @@
+import { n as isVendorResponseError } from "./errors-DLRGPWMj.js";
 import { expect, it } from "vitest";
 //#region src/conformance.ts
 /**
@@ -141,10 +142,20 @@ function conformsAsServerProvider(options) {
 		if (with_ !== without) expect(with_).toContain("DEDUP-XYZ");
 		expect(without).not.toContain("DEDUP-XYZ");
 	});
-	it("throws when the vendor did not accept the send", async () => {
+	it("throws a VendorResponseError when the vendor did not accept the send", async () => {
 		reset();
 		fail();
-		await expect(create().track("purchase", STABLE_DATA, context(), noop)).rejects.toThrow();
+		let caught;
+		try {
+			await create().track("purchase", STABLE_DATA, context(), noop);
+		} catch (error) {
+			caught = error;
+		}
+		expect(isVendorResponseError(caught)).toBe(true);
+		if (isVendorResponseError(caught)) {
+			expect(typeof caught.status).toBe("number");
+			expect(typeof caught.body).toBe("string");
+		}
 	});
 }
 //#endregion

package/dist/conformance.js.map

@@ -1 +1 @@
-{"version":3,"file":"conformance.js","names":[],"sources":["../src/conformance.ts"],"sourcesContent":["import { expect, it } from 'vitest';\nimport type { BrowserProvider } from './browser.js';\nimport type { ResolvedContext, ServerProvider } from './server.js';\nimport type { EventData, ProviderDefault } from './vocabulary.js';\n\n/**\n * The behaviour every provider owes, which the types cannot express.\n *\n * ADR-0004 requires this suite because a provider can satisfy\n * {@link BrowserProvider} or {@link ServerProvider} perfectly and still break\n * a rule the whole library rests on. The interface cannot say \"never invent an\n * identifier\" or \"never expand a consent signal\"; a test can.\n *\n * These are invariants, not vendor behaviour. What GA4 sends and how it spells\n * it belongs in the GA4 tests. What follows must hold for a provider written\n * by anyone, for a vendor nobody here has heard of.\n *\n * **Published as `tracklane/conformance`**, because the claim that a provider\n * written elsewhere uses the same contract as the ones shipped here is only\n * true if it can run the same checks. `vitest` is an optional peer: import this\n * from a test file and call one of the two functions below inside a `describe`.\n *\n * **A wrapper owes the same invariants as a provider.** Wrapping a shipped\n * provider and delegating (see the provider documentation) produces an object\n * that the dispatcher cannot tell apart from any other, so run it through here\n * too. On the server half that catches the expensive mistake: a wrapper whose\n * `track` does not `await` the provider it delegates to resolves before the\n * request settles, which a serverless runtime turns into a conversion that\n * never left. {@link conformsAsServerProvider} fails on it, because a vendor\n * refusal can no longer reach the caller.\n */\n\nconst DEFAULTS: ProviderDefault[] = ['passthrough', 'ignore'];\n\n/** A payload with nothing in it that could excuse a difference between runs. */\nconst STABLE_DATA: EventData = { transaction_id: 'T-1', value: 49.9, currency: 'BRL' };\n\nfunction assertIdentity(provider: { name: string; default: ProviderDefault }): void {\n  it('names itself, once and stably', () => {\n    // The name is what a duplicate registration is detected by, and what an\n    // error report is attributed to.\n    expect(provider.name).toBeTruthy();\n    expect(provider.name.trim()).toBe(provider.name);\n  });\n\n  it('declares what happens to an event it has no binding for', () => {\n    expect(DEFAULTS).toContain(provider.default);\n  });\n}\n\n/**\n * Runs the shared conformance suite against a browser provider.\n *\n * @param create - Builds the provider under test. Called per assertion, so a\n * provider that accumulates state between runs fails rather than hides.\n * @param captured - Everything the provider handed the vendor since the last\n * reset, in order.\n * @param reset - Clears what `captured` returns.\n *\n * @example\n * ```ts\n * describe('ga4 browser conformance', () => {\n *   conformsAsBrowserProvider({\n *     create: () => ga4('G-ABC'),\n *     captured: () => calls,\n *     reset: () => { calls = []; },\n *   });\n * });\n * ```\n */\nexport function conformsAsBrowserProvider(options: {\n  create: () => BrowserProvider;\n  captured: () => unknown[];\n  reset: () => void;\n}): void {\n  const { create, captured, reset } = options;\n\n  assertIdentity(create());\n\n  it('sends the same thing twice for the same event', () => {\n    // The library never invents an identifier, and this is how that rule is\n    // caught rather than trusted: a generated id, a random value or a clock\n    // read makes two identical calls differ.\n    reset();\n    create().track('purchase', STABLE_DATA, {});\n    const first = JSON.stringify(captured());\n\n    reset();\n    create().track('purchase', STABLE_DATA, {});\n    const second = JSON.stringify(captured());\n\n    expect(second).toBe(first);\n  });\n\n  it('forwards the deduplication id only when it was given one', () => {\n    reset();\n    create().track('purchase', STABLE_DATA, {});\n    const without = JSON.stringify(captured());\n\n    reset();\n    create().track('purchase', STABLE_DATA, { dedupId: 'DEDUP-XYZ' });\n    const with_ = JSON.stringify(captured());\n\n    // Either the vendor has the concept, and the value appears where it did\n    // not before, or it has none and nothing changes. Inventing one to fill\n    // the slot is the failure this catches.\n    if (with_ !== without) expect(with_).toContain('DEDUP-XYZ');\n    expect(without).not.toContain('DEDUP-XYZ');\n  });\n\n  it('never expands a consent signal it was not given', () => {\n    const provider = create();\n    if (!provider.consent) return;\n\n    reset();\n    provider.consent('update', { analytics_storage: 'denied' });\n\n    // One denial in must never become a grant out. Collapsing Google's\n    // vocabulary for a coarser vendor is translation; widening it invents a\n    // permission the visitor never gave.\n    expect(JSON.stringify(captured())).not.toContain('granted');\n  });\n}\n\n/**\n * Runs the shared conformance suite against a server provider.\n *\n * @param create - Builds the provider under test, per assertion.\n * @param captured - Everything the provider sent since the last reset.\n * @param reset - Clears what `captured` returns, and restores a successful\n * transport.\n * @param fail - Makes the next send fail at the transport, so the suite can\n * check that the provider is loud about it.\n * @param context - A resolved context with a fixed timestamp.\n *\n * @example\n * ```ts\n * describe('ga4 server conformance', () => {\n *   conformsAsServerProvider({\n *     create: () => ga4(credentials),\n *     captured: () => fetchMock.mock.calls,\n *     reset: () => { fetchMock.mockClear(); },\n *     fail: () => { fetchMock.mockResolvedValueOnce(new Response(null, { status: 500 })); },\n *     context,\n *   });\n * });\n * ```\n */\nexport function conformsAsServerProvider(options: {\n  create: () => ServerProvider;\n  captured: () => unknown[];\n  reset: () => void;\n  fail: () => void;\n  context: () => ResolvedContext;\n}): void {\n  const { create, captured, reset, fail, context } = options;\n  const noop = (): void => {};\n\n  assertIdentity(create());\n\n  it('sends the same thing twice for the same event', async () => {\n    // The context carries a fixed timestamp, so any difference between these\n    // two is something the provider produced on its own.\n    reset();\n    await create().track('purchase', STABLE_DATA, context(), noop);\n    const first = JSON.stringify(captured());\n\n    reset();\n    await create().track('purchase', STABLE_DATA, context(), noop);\n\n    expect(JSON.stringify(captured())).toBe(first);\n  });\n\n  it('forwards the deduplication id only when it was given one', async () => {\n    reset();\n    await create().track('purchase', STABLE_DATA, context(), noop);\n    const without = JSON.stringify(captured());\n\n    reset();\n    await create().track('purchase', STABLE_DATA, { ...context(), dedupId: 'DEDUP-XYZ' }, noop);\n    const with_ = JSON.stringify(captured());\n\n    if (with_ !== without) expect(with_).toContain('DEDUP-XYZ');\n    expect(without).not.toContain('DEDUP-XYZ');\n  });\n\n  it('throws when the vendor did not accept the send', async () => {\n    // Adapters stay honest and loud. Swallowing a non-2xx is how a host ends\n    // up believing it is measuring something, and the dispatcher is already\n    // there to isolate the throw and report it.\n    reset();\n    fail();\n\n    await expect(create().track('purchase', STABLE_DATA, context(), noop)).rejects.toThrow();\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,MAAM,WAA8B,CAAC,eAAe,QAAQ;;AAG5D,MAAM,cAAyB;CAAE,gBAAgB;CAAO,OAAO;CAAM,UAAU;AAAM;AAErF,SAAS,eAAe,UAA4D;CAClF,GAAG,uCAAuC;EAGxC,OAAO,SAAS,IAAI,CAAC,CAAC,WAAW;EACjC,OAAO,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI;CACjD,CAAC;CAED,GAAG,iEAAiE;EAClE,OAAO,QAAQ,CAAC,CAAC,UAAU,SAAS,OAAO;CAC7C,CAAC;AACH;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,0BAA0B,SAIjC;CACP,MAAM,EAAE,QAAQ,UAAU,UAAU;CAEpC,eAAe,OAAO,CAAC;CAEvB,GAAG,uDAAuD;EAIxD,MAAM;EACN,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,CAAC,CAAC;EAC1C,MAAM,QAAQ,KAAK,UAAU,SAAS,CAAC;EAEvC,MAAM;EACN,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,CAAC,CAAC;EAC1C,MAAM,SAAS,KAAK,UAAU,SAAS,CAAC;EAExC,OAAO,MAAM,CAAC,CAAC,KAAK,KAAK;CAC3B,CAAC;CAED,GAAG,kEAAkE;EACnE,MAAM;EACN,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,CAAC,CAAC;EAC1C,MAAM,UAAU,KAAK,UAAU,SAAS,CAAC;EAEzC,MAAM;EACN,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,EAAE,SAAS,YAAY,CAAC;EAChE,MAAM,QAAQ,KAAK,UAAU,SAAS,CAAC;EAKvC,IAAI,UAAU,SAAS,OAAO,KAAK,CAAC,CAAC,UAAU,WAAW;EAC1D,OAAO,OAAO,CAAC,CAAC,IAAI,UAAU,WAAW;CAC3C,CAAC;CAED,GAAG,yDAAyD;EAC1D,MAAM,WAAW,OAAO;EACxB,IAAI,CAAC,SAAS,SAAS;EAEvB,MAAM;EACN,SAAS,QAAQ,UAAU,EAAE,mBAAmB,SAAS,CAAC;EAK1D,OAAO,KAAK,UAAU,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,SAAS;CAC5D,CAAC;AACH;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,SAAgB,yBAAyB,SAMhC;CACP,MAAM,EAAE,QAAQ,UAAU,OAAO,MAAM,YAAY;CACnD,MAAM,aAAmB,CAAC;CAE1B,eAAe,OAAO,CAAC;CAEvB,GAAG,iDAAiD,YAAY;EAG9D,MAAM;EACN,MAAM,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,QAAQ,GAAG,IAAI;EAC7D,MAAM,QAAQ,KAAK,UAAU,SAAS,CAAC;EAEvC,MAAM;EACN,MAAM,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,QAAQ,GAAG,IAAI;EAE7D,OAAO,KAAK,UAAU,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK;CAC/C,CAAC;CAED,GAAG,4DAA4D,YAAY;EACzE,MAAM;EACN,MAAM,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,QAAQ,GAAG,IAAI;EAC7D,MAAM,UAAU,KAAK,UAAU,SAAS,CAAC;EAEzC,MAAM;EACN,MAAM,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa;GAAE,GAAG,QAAQ;GAAG,SAAS;EAAY,GAAG,IAAI;EAC1F,MAAM,QAAQ,KAAK,UAAU,SAAS,CAAC;EAEvC,IAAI,UAAU,SAAS,OAAO,KAAK,CAAC,CAAC,UAAU,WAAW;EAC1D,OAAO,OAAO,CAAC,CAAC,IAAI,UAAU,WAAW;CAC3C,CAAC;CAED,GAAG,kDAAkD,YAAY;EAI/D,MAAM;EACN,KAAK;EAEL,MAAM,OAAO,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,QAAQ;CACzF,CAAC;AACH"}
+{"version":3,"file":"conformance.js","names":[],"sources":["../src/conformance.ts"],"sourcesContent":["import { expect, it } from 'vitest';\nimport type { BrowserProvider } from './browser.js';\nimport { isVendorResponseError } from './errors.js';\nimport type { ResolvedContext, ServerProvider } from './server.js';\nimport type { EventData, ProviderDefault } from './vocabulary.js';\n\n/**\n * The behaviour every provider owes, which the types cannot express.\n *\n * ADR-0004 requires this suite because a provider can satisfy\n * {@link BrowserProvider} or {@link ServerProvider} perfectly and still break\n * a rule the whole library rests on. The interface cannot say \"never invent an\n * identifier\" or \"never expand a consent signal\"; a test can.\n *\n * These are invariants, not vendor behaviour. What GA4 sends and how it spells\n * it belongs in the GA4 tests. What follows must hold for a provider written\n * by anyone, for a vendor nobody here has heard of.\n *\n * **Published as `tracklane/conformance`**, because the claim that a provider\n * written elsewhere uses the same contract as the ones shipped here is only\n * true if it can run the same checks. `vitest` is an optional peer: import this\n * from a test file and call one of the two functions below inside a `describe`.\n *\n * **A wrapper owes the same invariants as a provider.** Wrapping a shipped\n * provider and delegating (see the provider documentation) produces an object\n * that the dispatcher cannot tell apart from any other, so run it through here\n * too. On the server half that catches the expensive mistake: a wrapper whose\n * `track` does not `await` the provider it delegates to resolves before the\n * request settles, which a serverless runtime turns into a conversion that\n * never left. {@link conformsAsServerProvider} fails on it, because a vendor\n * refusal can no longer reach the caller.\n */\n\nconst DEFAULTS: ProviderDefault[] = ['passthrough', 'ignore'];\n\n/** A payload with nothing in it that could excuse a difference between runs. */\nconst STABLE_DATA: EventData = { transaction_id: 'T-1', value: 49.9, currency: 'BRL' };\n\nfunction assertIdentity(provider: { name: string; default: ProviderDefault }): void {\n  it('names itself, once and stably', () => {\n    // The name is what a duplicate registration is detected by, and what an\n    // error report is attributed to.\n    expect(provider.name).toBeTruthy();\n    expect(provider.name.trim()).toBe(provider.name);\n  });\n\n  it('declares what happens to an event it has no binding for', () => {\n    expect(DEFAULTS).toContain(provider.default);\n  });\n}\n\n/**\n * Runs the shared conformance suite against a browser provider.\n *\n * @param create - Builds the provider under test. Called per assertion, so a\n * provider that accumulates state between runs fails rather than hides.\n * @param captured - Everything the provider handed the vendor since the last\n * reset, in order.\n * @param reset - Clears what `captured` returns.\n *\n * @example\n * ```ts\n * describe('ga4 browser conformance', () => {\n *   conformsAsBrowserProvider({\n *     create: () => ga4('G-ABC'),\n *     captured: () => calls,\n *     reset: () => { calls = []; },\n *   });\n * });\n * ```\n */\nexport function conformsAsBrowserProvider(options: {\n  create: () => BrowserProvider;\n  captured: () => unknown[];\n  reset: () => void;\n}): void {\n  const { create, captured, reset } = options;\n\n  assertIdentity(create());\n\n  it('sends the same thing twice for the same event', () => {\n    // The library never invents an identifier, and this is how that rule is\n    // caught rather than trusted: a generated id, a random value or a clock\n    // read makes two identical calls differ.\n    reset();\n    create().track('purchase', STABLE_DATA, {});\n    const first = JSON.stringify(captured());\n\n    reset();\n    create().track('purchase', STABLE_DATA, {});\n    const second = JSON.stringify(captured());\n\n    expect(second).toBe(first);\n  });\n\n  it('forwards the deduplication id only when it was given one', () => {\n    reset();\n    create().track('purchase', STABLE_DATA, {});\n    const without = JSON.stringify(captured());\n\n    reset();\n    create().track('purchase', STABLE_DATA, { dedupId: 'DEDUP-XYZ' });\n    const with_ = JSON.stringify(captured());\n\n    // Either the vendor has the concept, and the value appears where it did\n    // not before, or it has none and nothing changes. Inventing one to fill\n    // the slot is the failure this catches.\n    if (with_ !== without) expect(with_).toContain('DEDUP-XYZ');\n    expect(without).not.toContain('DEDUP-XYZ');\n  });\n\n  it('never expands a consent signal it was not given', () => {\n    const provider = create();\n    if (!provider.consent) return;\n\n    reset();\n    provider.consent('update', { analytics_storage: 'denied' });\n\n    // One denial in must never become a grant out. Collapsing Google's\n    // vocabulary for a coarser vendor is translation; widening it invents a\n    // permission the visitor never gave.\n    expect(JSON.stringify(captured())).not.toContain('granted');\n  });\n}\n\n/**\n * Runs the shared conformance suite against a server provider.\n *\n * @param create - Builds the provider under test, per assertion.\n * @param captured - Everything the provider sent since the last reset.\n * @param reset - Clears what `captured` returns, and restores a successful\n * transport.\n * @param fail - Makes the next send fail at the transport, so the suite can\n * check that the provider is loud about it.\n * @param context - A resolved context with a fixed timestamp.\n *\n * @example\n * ```ts\n * describe('ga4 server conformance', () => {\n *   conformsAsServerProvider({\n *     create: () => ga4(credentials),\n *     captured: () => fetchMock.mock.calls,\n *     reset: () => { fetchMock.mockClear(); },\n *     fail: () => { fetchMock.mockResolvedValueOnce(new Response(null, { status: 500 })); },\n *     context,\n *   });\n * });\n * ```\n */\nexport function conformsAsServerProvider(options: {\n  create: () => ServerProvider;\n  captured: () => unknown[];\n  reset: () => void;\n  fail: () => void;\n  context: () => ResolvedContext;\n}): void {\n  const { create, captured, reset, fail, context } = options;\n  const noop = (): void => {};\n\n  assertIdentity(create());\n\n  it('sends the same thing twice for the same event', async () => {\n    // The context carries a fixed timestamp, so any difference between these\n    // two is something the provider produced on its own.\n    reset();\n    await create().track('purchase', STABLE_DATA, context(), noop);\n    const first = JSON.stringify(captured());\n\n    reset();\n    await create().track('purchase', STABLE_DATA, context(), noop);\n\n    expect(JSON.stringify(captured())).toBe(first);\n  });\n\n  it('forwards the deduplication id only when it was given one', async () => {\n    reset();\n    await create().track('purchase', STABLE_DATA, context(), noop);\n    const without = JSON.stringify(captured());\n\n    reset();\n    await create().track('purchase', STABLE_DATA, { ...context(), dedupId: 'DEDUP-XYZ' }, noop);\n    const with_ = JSON.stringify(captured());\n\n    if (with_ !== without) expect(with_).toContain('DEDUP-XYZ');\n    expect(without).not.toContain('DEDUP-XYZ');\n  });\n\n  it('throws a VendorResponseError when the vendor did not accept the send', async () => {\n    // Adapters stay honest and loud. Swallowing a non-2xx is how a host ends\n    // up believing it is measuring something, and the dispatcher is already\n    // there to isolate the throw and report it. ADR-0013 adds the shape: what\n    // reaches the host is recognised by `isVendorResponseError`, carrying the\n    // status and the body, not just any throw. The body itself is\n    // the caller's `fail()` hook to produce; a bodiless response is valid\n    // (the documented example does exactly that), so it is not asserted here.\n    reset();\n    fail();\n\n    let caught: unknown;\n    try {\n      await create().track('purchase', STABLE_DATA, context(), noop);\n    } catch (error) {\n      caught = error;\n    }\n\n    expect(isVendorResponseError(caught)).toBe(true);\n    if (isVendorResponseError(caught)) {\n      expect(typeof caught.status).toBe('number');\n      expect(typeof caught.body).toBe('string');\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,MAAM,WAA8B,CAAC,eAAe,QAAQ;;AAG5D,MAAM,cAAyB;CAAE,gBAAgB;CAAO,OAAO;CAAM,UAAU;AAAM;AAErF,SAAS,eAAe,UAA4D;CAClF,GAAG,uCAAuC;EAGxC,OAAO,SAAS,IAAI,CAAC,CAAC,WAAW;EACjC,OAAO,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI;CACjD,CAAC;CAED,GAAG,iEAAiE;EAClE,OAAO,QAAQ,CAAC,CAAC,UAAU,SAAS,OAAO;CAC7C,CAAC;AACH;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,0BAA0B,SAIjC;CACP,MAAM,EAAE,QAAQ,UAAU,UAAU;CAEpC,eAAe,OAAO,CAAC;CAEvB,GAAG,uDAAuD;EAIxD,MAAM;EACN,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,CAAC,CAAC;EAC1C,MAAM,QAAQ,KAAK,UAAU,SAAS,CAAC;EAEvC,MAAM;EACN,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,CAAC,CAAC;EAC1C,MAAM,SAAS,KAAK,UAAU,SAAS,CAAC;EAExC,OAAO,MAAM,CAAC,CAAC,KAAK,KAAK;CAC3B,CAAC;CAED,GAAG,kEAAkE;EACnE,MAAM;EACN,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,CAAC,CAAC;EAC1C,MAAM,UAAU,KAAK,UAAU,SAAS,CAAC;EAEzC,MAAM;EACN,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,EAAE,SAAS,YAAY,CAAC;EAChE,MAAM,QAAQ,KAAK,UAAU,SAAS,CAAC;EAKvC,IAAI,UAAU,SAAS,OAAO,KAAK,CAAC,CAAC,UAAU,WAAW;EAC1D,OAAO,OAAO,CAAC,CAAC,IAAI,UAAU,WAAW;CAC3C,CAAC;CAED,GAAG,yDAAyD;EAC1D,MAAM,WAAW,OAAO;EACxB,IAAI,CAAC,SAAS,SAAS;EAEvB,MAAM;EACN,SAAS,QAAQ,UAAU,EAAE,mBAAmB,SAAS,CAAC;EAK1D,OAAO,KAAK,UAAU,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,SAAS;CAC5D,CAAC;AACH;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,SAAgB,yBAAyB,SAMhC;CACP,MAAM,EAAE,QAAQ,UAAU,OAAO,MAAM,YAAY;CACnD,MAAM,aAAmB,CAAC;CAE1B,eAAe,OAAO,CAAC;CAEvB,GAAG,iDAAiD,YAAY;EAG9D,MAAM;EACN,MAAM,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,QAAQ,GAAG,IAAI;EAC7D,MAAM,QAAQ,KAAK,UAAU,SAAS,CAAC;EAEvC,MAAM;EACN,MAAM,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,QAAQ,GAAG,IAAI;EAE7D,OAAO,KAAK,UAAU,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK;CAC/C,CAAC;CAED,GAAG,4DAA4D,YAAY;EACzE,MAAM;EACN,MAAM,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,QAAQ,GAAG,IAAI;EAC7D,MAAM,UAAU,KAAK,UAAU,SAAS,CAAC;EAEzC,MAAM;EACN,MAAM,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa;GAAE,GAAG,QAAQ;GAAG,SAAS;EAAY,GAAG,IAAI;EAC1F,MAAM,QAAQ,KAAK,UAAU,SAAS,CAAC;EAEvC,IAAI,UAAU,SAAS,OAAO,KAAK,CAAC,CAAC,UAAU,WAAW;EAC1D,OAAO,OAAO,CAAC,CAAC,IAAI,UAAU,WAAW;CAC3C,CAAC;CAED,GAAG,wEAAwE,YAAY;EAQrF,MAAM;EACN,KAAK;EAEL,IAAI;EACJ,IAAI;GACF,MAAM,OAAO,CAAC,CAAC,MAAM,YAAY,aAAa,QAAQ,GAAG,IAAI;EAC/D,SAAS,OAAO;GACd,SAAS;EACX;EAEA,OAAO,sBAAsB,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;EAC/C,IAAI,sBAAsB,MAAM,GAAG;GACjC,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ;GAC1C,OAAO,OAAO,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ;EAC1C;CACF,CAAC;AACH"}

package/dist/errors-DLRGPWMj.js

@@ -0,0 +1,75 @@
+//#region src/errors.ts
+const BRAND = Symbol.for("tracklane.VendorResponseError");
+/** The vendor's own answer to a refusal, capped so it cannot grow without bound. */
+const BODY_CAP = 2048;
+const TRUNCATION_SUFFIX = "…[truncated]";
+function capBody(body) {
+	if (body.length <= BODY_CAP) return body;
+	return `${body.slice(0, 2036)}${TRUNCATION_SUFFIX}`;
+}
+/**
+* Thrown by a server provider when the vendor's endpoint answers with a
+* non-2xx status. The message stays exactly what the provider composed,
+* free of the payload, per `TrackingError`'s guarantee, and the vendor's own
+* answer travels separately on `status` and `body`, for a host that asks for
+* it via `onError` rather than a host that logs by default.
+*
+* See ADR-0013 for why the split exists and why `body` is a property rather
+* than `cause`.
+*
+* @param message - The same one-line message the provider already throws
+* today (e.g. `meta: the Conversions API answered 400`). Not composed here.
+* @param details - The vendor's own answer: `provider` is the name it
+* registers under, `status` is the HTTP status, and `body` is the response
+* body verbatim, capped at 2048 characters with a `…[truncated]` suffix that
+* fits inside the cap.
+*
+* @example
+* ```ts
+* throw new VendorResponseError(`meta: the Conversions API answered ${status}`, {
+*   provider: 'meta',
+*   status,
+*   body: await response.text().catch(() => ''),
+* });
+* ```
+*/
+var VendorResponseError = class extends Error {
+	provider;
+	status;
+	body;
+	constructor(message, details) {
+		super(message);
+		this.name = "VendorResponseError";
+		this.provider = details.provider;
+		this.status = details.status;
+		this.body = capBody(details.body);
+		Object.defineProperty(this, BRAND, { value: true });
+	}
+};
+/**
+* Tests the brand `VendorResponseError` sets, not `instanceof`: two copies
+* of this package in one `node_modules` produce two constructors, and
+* `instanceof` would say `false` for an instance the other copy built. The
+* `Symbol.for` brand is the same symbol across both.
+*
+* @param value - Anything a `catch` block might hand back.
+* @returns Whether `value` carries the `VendorResponseError` brand.
+*
+* @example
+* ```ts
+* try {
+*   await track.server('purchase', data, context);
+* } catch (error) {
+*   if (isVendorResponseError(error)) {
+*     reportWithFingerprint(error.provider, error.status, error.body);
+*   }
+* }
+* ```
+*/
+function isVendorResponseError(value) {
+	return typeof value === "object" && value !== null && BRAND in value;
+}
+//#endregion
+export { isVendorResponseError as n, VendorResponseError as t };
+
+//# sourceMappingURL=errors-DLRGPWMj.js.map

package/dist/errors-DLRGPWMj.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors-DLRGPWMj.js","names":[],"sources":["../src/errors.ts"],"sourcesContent":["const BRAND = Symbol.for('tracklane.VendorResponseError');\n\n/** The vendor's own answer to a refusal, capped so it cannot grow without bound. */\nconst BODY_CAP = 2048;\nconst TRUNCATION_SUFFIX = '…[truncated]';\n\nfunction capBody(body: string): string {\n  if (body.length <= BODY_CAP) return body;\n  return `${body.slice(0, BODY_CAP - TRUNCATION_SUFFIX.length)}${TRUNCATION_SUFFIX}`;\n}\n\n/**\n * Thrown by a server provider when the vendor's endpoint answers with a\n * non-2xx status. The message stays exactly what the provider composed,\n * free of the payload, per `TrackingError`'s guarantee, and the vendor's own\n * answer travels separately on `status` and `body`, for a host that asks for\n * it via `onError` rather than a host that logs by default.\n *\n * See ADR-0013 for why the split exists and why `body` is a property rather\n * than `cause`.\n *\n * @param message - The same one-line message the provider already throws\n * today (e.g. `meta: the Conversions API answered 400`). Not composed here.\n * @param details - The vendor's own answer: `provider` is the name it\n * registers under, `status` is the HTTP status, and `body` is the response\n * body verbatim, capped at 2048 characters with a `…[truncated]` suffix that\n * fits inside the cap.\n *\n * @example\n * ```ts\n * throw new VendorResponseError(`meta: the Conversions API answered ${status}`, {\n *   provider: 'meta',\n *   status,\n *   body: await response.text().catch(() => ''),\n * });\n * ```\n */\nexport class VendorResponseError extends Error {\n  readonly provider: string;\n  readonly status: number;\n  readonly body: string;\n\n  constructor(message: string, details: { provider: string; status: number; body: string }) {\n    super(message);\n    this.name = 'VendorResponseError';\n    this.provider = details.provider;\n    this.status = details.status;\n    this.body = capBody(details.body);\n    Object.defineProperty(this, BRAND, { value: true });\n  }\n}\n\n/**\n * Tests the brand `VendorResponseError` sets, not `instanceof`: two copies\n * of this package in one `node_modules` produce two constructors, and\n * `instanceof` would say `false` for an instance the other copy built. The\n * `Symbol.for` brand is the same symbol across both.\n *\n * @param value - Anything a `catch` block might hand back.\n * @returns Whether `value` carries the `VendorResponseError` brand.\n *\n * @example\n * ```ts\n * try {\n *   await track.server('purchase', data, context);\n * } catch (error) {\n *   if (isVendorResponseError(error)) {\n *     reportWithFingerprint(error.provider, error.status, error.body);\n *   }\n * }\n * ```\n */\nexport function isVendorResponseError(value: unknown): value is VendorResponseError {\n  return typeof value === 'object' && value !== null && BRAND in value;\n}\n"],"mappings":";AAAA,MAAM,QAAQ,OAAO,IAAI,+BAA+B;;AAGxD,MAAM,WAAW;AACjB,MAAM,oBAAoB;AAE1B,SAAS,QAAQ,MAAsB;CACrC,IAAI,KAAK,UAAU,UAAU,OAAO;CACpC,OAAO,GAAG,KAAK,MAAM,GAAG,IAAmC,IAAI;AACjE;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,IAAa,sBAAb,cAAyC,MAAM;CAC7C;CACA;CACA;CAEA,YAAY,SAAiB,SAA6D;EACxF,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,WAAW,QAAQ;EACxB,KAAK,SAAS,QAAQ;EACtB,KAAK,OAAO,QAAQ,QAAQ,IAAI;EAChC,OAAO,eAAe,MAAM,OAAO,EAAE,OAAO,KAAK,CAAC;CACpD;AACF;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,sBAAsB,OAA8C;CAClF,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,SAAS;AACjE"}

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-import { C as ProviderDefault, S as EventItem, T as UserData, b as EventBinding, f as EventContext, g as ServerTrackingOptions, h as ServerTracking, i as TrackOptions, m as ServerProvider, n as BrowserTracking, p as ResolvedContext, r as BrowserTrackingOptions, t as BrowserProvider, v as ActionSource, w as TrackingError, x as EventData, y as ConsentState } from "./browser-CddkJdvX.js";
-export type { ActionSource, BrowserProvider, BrowserTracking, BrowserTrackingOptions, ConsentState, EventBinding, EventContext, EventData, EventItem, ProviderDefault, ResolvedContext, ServerProvider, ServerTracking, ServerTrackingOptions, TrackOptions, TrackingError, UserData };
+import { C as ProviderDefault, F as VendorResponseError, I as isVendorResponseError, S as EventItem, T as UserData, b as EventBinding, f as EventContext, g as ServerTrackingOptions, h as ServerTracking, i as TrackOptions, m as ServerProvider, n as BrowserTracking, p as ResolvedContext, r as BrowserTrackingOptions, t as BrowserProvider, v as ActionSource, w as TrackingError, x as EventData, y as ConsentState } from "./browser-_0LRgTpx.js";
+export { type ActionSource, type BrowserProvider, type BrowserTracking, type BrowserTrackingOptions, type ConsentState, type EventBinding, type EventContext, type EventData, type EventItem, type ProviderDefault, type ResolvedContext, type ServerProvider, type ServerTracking, type ServerTrackingOptions, type TrackOptions, type TrackingError, type UserData, VendorResponseError, isVendorResponseError };

package/dist/index.js

@@ -0,0 +1,2 @@
+import { n as isVendorResponseError, t as VendorResponseError } from "./errors-DLRGPWMj.js";
+export { VendorResponseError, isVendorResponseError };

package/dist/server.d.ts

@@ -1,2 +1,2 @@
-import { A as MetaServerCredentials, D as PosthogServerCredentials, E as PosthogServerConfig, M as Ga4ServerConfig, N as Ga4ServerCredentials, O as posthog, P as ga4, _ as createTracking, f as EventContext, g as ServerTrackingOptions, h as ServerTracking, j as meta, k as MetaServerConfig, m as ServerProvider, p as ResolvedContext } from "./browser-CddkJdvX.js";
+import { A as MetaServerCredentials, D as PosthogServerCredentials, E as PosthogServerConfig, M as Ga4ServerConfig, N as Ga4ServerCredentials, O as posthog, P as ga4, _ as createTracking, f as EventContext, g as ServerTrackingOptions, h as ServerTracking, j as meta, k as MetaServerConfig, m as ServerProvider, p as ResolvedContext } from "./browser-_0LRgTpx.js";
 export { EventContext, type Ga4ServerConfig, type Ga4ServerCredentials, type MetaServerConfig, type MetaServerCredentials, type PosthogServerConfig, type PosthogServerCredentials, ResolvedContext, ServerProvider, ServerTracking, ServerTrackingOptions, createTracking, ga4, meta, posthog };

package/dist/server.js

@@ -1,3 +1,4 @@
+import { t as VendorResponseError } from "./errors-DLRGPWMj.js";
 import { i as resolveEvent, n as makeReporter, r as messageOf, t as assertUniqueProviders } from "./dispatch-BLBoCn-b.js";
 //#region src/providers/ga4.server.ts
 const ENDPOINT = "https://www.google-analytics.com/mp/collect";
@@ -103,7 +104,14 @@ function ga4(credentials, config = {}) {
 				headers: { "content-type": "application/json" },
 				body: JSON.stringify(body)
 			});
-			if (!response.ok) throw new Error(`ga4: the Measurement Protocol answered ${response.status}`);
+			if (!response.ok) {
+				const body = await response.text().catch(() => "");
+				throw new VendorResponseError(`ga4: the Measurement Protocol answered ${response.status}`, {
+					provider: "ga4",
+					status: response.status,
+					body
+				});
+			}
 		}
 	};
 }
@@ -311,7 +319,14 @@ function meta(credentials, config = {}) {
 				headers: { "content-type": "application/x-www-form-urlencoded" },
 				body
 			});
-			if (!response.ok) throw new Error(`meta: the Conversions API answered ${response.status}`);
+			if (!response.ok) {
+				const body = await response.text().catch(() => "");
+				throw new VendorResponseError(`meta: the Conversions API answered ${response.status}`, {
+					provider: "meta",
+					status: response.status,
+					body
+				});
+			}
 			const result = await response.json().catch(() => null);
 			const messages = result?.messages;
 			if (Array.isArray(messages) && messages.length > 0) report(`accepted with ${messages.length} warning(s) from the Conversions API; read them under fbtrace_id ${result?.fbtrace_id ?? "unknown"} in Events Manager`);
@@ -422,7 +437,14 @@ function posthog(credentials, config = {}) {
 				headers: { "content-type": "application/json" },
 				body: JSON.stringify(body)
 			});
-			if (!response.ok) throw new Error(`posthog: the capture endpoint answered ${response.status}`);
+			if (!response.ok) {
+				const body = await response.text().catch(() => "");
+				throw new VendorResponseError(`posthog: the capture endpoint answered ${response.status}`, {
+					provider: "posthog",
+					status: response.status,
+					body
+				});
+			}
 		}
 	};
 }

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","names":[],"sources":["../src/providers/ga4.server.ts","../src/providers/meta.server.ts","../src/providers/posthog.server.ts","../src/server.ts"],"sourcesContent":["// Through the public entry point, exactly as a provider written elsewhere\n// would import it. A provider that needs something not exported here is\n// telling us the contract is incomplete, which is a conversation rather than\n// a reason to reach inside.\nimport type {\n  ConsentState,\n  EventBinding,\n  EventData,\n  ResolvedContext,\n  ServerProvider,\n} from '../index.js';\n\nconst ENDPOINT = 'https://www.google-analytics.com/mp/collect';\n\n/** Credentials for the GA4 Measurement Protocol. */\nexport interface Ga4ServerCredentials {\n  /** The `G-` id of the data stream. */\n  measurementId: string;\n  /** Created under Admin → Data Streams → Measurement Protocol. */\n  apiSecret: string;\n}\n\n/** Optional configuration for the GA4 server provider. */\nexport interface Ga4ServerConfig {\n  events?: Record<string, EventBinding<string>>;\n}\n\n/**\n * The visitor cookie holds `GA1.<depth>.<client_id>`, and the client id\n * itself contains a dot, so the identifier is the last two segments, which\n * is what survives Google's varying prefix depth.\n *\n * The value must be the cookie as the browser wrote it. A host passing a\n * parsed map passes cookie values, not values it took apart itself.\n */\nfunction visitorId(cookies: Record<string, string>): string | undefined {\n  const raw = cookies._ga;\n  if (!raw) return undefined;\n\n  const parts = raw.split('.');\n  if (parts.length < 4) return undefined;\n\n  return parts.slice(-2).join('.');\n}\n\n/**\n * The per-container cookie carries the session, in one of two layouts.\n *\n * Verified against Google's live tag on 2026-07-31 rather than assumed:\n *\n * - `GS2.1.s1785511401$o1$g0$t1785511401$j60$l0$h0`, the current one. The\n *   third dot-segment packs several fields joined by `$`, and the session is\n *   the first of them, prefixed with `s`.\n * - `GS1.1.1785511401.1.1.…`, the older one, where the third dot-segment is\n *   the session on its own.\n *\n * Reading the third segment blindly works for the old layout and returns the\n * whole `s…$o1$g0$…` blob for the new one, which the vendor would accept and\n * silently fail to match. Hence the two shapes, and hence `undefined` rather\n * than a guess when neither fits.\n */\nfunction sessionId(cookies: Record<string, string>, measurementId: string): string | undefined {\n  // Scoped to *this* property's cookie. A page with two GA4 properties has two\n  // `_ga_*` cookies, and taking whichever came first would attach another\n  // property's session to our event, which Google accepts and never matches.\n  const value = cookies[`_ga_${measurementId.replace(/^G-/, '')}`];\n  const segment = value?.split('.')[2];\n  if (!segment) return undefined;\n\n  const packed = /^s(\\d+)/.exec(segment);\n  if (packed) return packed[1];\n\n  // The older layout: a bare session id, nothing packed around it.\n  return /^\\d+$/.test(segment) ? segment : undefined;\n}\n\n/**\n * The Measurement Protocol documents exactly two consent fields, and spells\n * their values in upper case where the browser spells them in lower, one of\n * the small asymmetries an adapter absorbs so nobody else has to.\n */\nfunction consentBody(state: ConsentState | undefined): Record<string, string> | undefined {\n  if (!state) return undefined;\n\n  const body: Record<string, string> = {};\n  if (state.ad_user_data) body.ad_user_data = state.ad_user_data.toUpperCase();\n  if (state.ad_personalization) body.ad_personalization = state.ad_personalization.toUpperCase();\n\n  return Object.keys(body).length > 0 ? body : undefined;\n}\n\n/**\n * Google Analytics 4 on the server, through the Measurement Protocol.\n *\n * @param credentials - The measurement id and API secret.\n * @param config - Rarely needed event name overrides.\n * @returns A provider for `createTracking` from `tracklane/server`.\n *\n * @example\n * ```ts\n * import { createTracking, ga4 } from 'tracklane/server';\n *\n * const { track } = createTracking({\n *   providers: [ga4({ measurementId: 'G-XXXXXXX', apiSecret: process.env.GA4_SECRET! })],\n * });\n *\n * await track('purchase', order, { cookies: request.headers.get('cookie') });\n * ```\n */\nexport function ga4(\n  credentials: Ga4ServerCredentials,\n  config: Ga4ServerConfig = {},\n): ServerProvider {\n  const { measurementId, apiSecret } = credentials;\n\n  return {\n    name: 'ga4',\n    default: 'passthrough',\n    ...(config.events ? { events: config.events } : {}),\n\n    async track(\n      name: string,\n      data: EventData,\n      context: ResolvedContext,\n      report: (message: string) => void,\n    ): Promise<void> {\n      const clientId = visitorId(context.cookies);\n      if (!clientId) {\n        // Not withholding on policy grounds: the protocol requires this and\n        // it cannot be invented. The endpoint answers success even to\n        // invalid payloads, so sending anyway would look like it worked.\n        // Naming the vendor's own field, so that searching Google's docs\n        // for the error leads somewhere.\n        throw new Error(\n          \"ga4: cannot build client_id, no _ga cookie among the cookies passed in context. Ensure GA4's browser tag has set it first.\",\n        );\n      }\n\n      const session = sessionId(context.cookies, measurementId);\n      if (!session) {\n        report(\n          'no session cookie (_ga_<container>): Google will accept this event and it will not appear in any report',\n        );\n      }\n\n      const params: Record<string, unknown> = { ...data };\n      if (session) {\n        params.session_id = session;\n        // Google drops sessions with no engagement from its reports, so the\n        // event would arrive and still be invisible without this.\n        params.engagement_time_msec = 1;\n      }\n\n      // The dedup id maps nowhere: GA4 documents no browser-to-server\n      // deduplication. `transaction_id` (business data) travels in params\n      // and is the duplicate control this vendor does have.\n      const body: Record<string, unknown> = {\n        client_id: clientId,\n        timestamp_micros: context.timestamp * 1000,\n        events: [{ name, params }],\n      };\n\n      if (context.user?.userId !== undefined) body.user_id = context.user.userId;\n\n      if (context.traits) {\n        // Each property is an object with a `value` key here, where the\n        // browser takes the bare value. Sending the bare value is rejected\n        // by Google's validation endpoint and **accepted with 204 by the\n        // collection endpoint**, which then drops it, verified on\n        // 2026-07-31. One of several places where this vendor fails by\n        // accepting.\n        body.user_properties = Object.fromEntries(\n          Object.entries(context.traits).map(([name, value]) => [name, { value }]),\n        );\n      }\n\n      const consent = consentBody(context.consent);\n      if (consent) body.consent = consent;\n\n      // Credentials go in the query because the protocol offers no\n      // alternative. Query strings land in proxy and APM logs; that\n      // exposure is Google's design, not a choice made here.\n      const url = `${ENDPOINT}?measurement_id=${encodeURIComponent(measurementId)}&api_secret=${encodeURIComponent(apiSecret)}`;\n\n      const response = await fetch(url, {\n        method: 'POST',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify(body),\n      });\n\n      if (!response.ok) {\n        // The status only. The event carries raw personal data, and no\n        // library-owned surface re-emits it into a host's logs.\n        throw new Error(`ga4: the Measurement Protocol answered ${response.status}`);\n      }\n    },\n  };\n}\n","// Through the public entry point, exactly as a provider written elsewhere\n// would import it. A provider that needs something not exported here is\n// telling us the contract is incomplete, which is a conversation rather than\n// a reason to reach inside.\nimport type {\n  ActionSource,\n  EventBinding,\n  EventData,\n  EventItem,\n  ResolvedContext,\n  ServerProvider,\n} from '../index.js';\n\nconst GRAPH = 'https://graph.facebook.com';\n\n/**\n * Pinned on purpose. A Graph URL with no version resolves to the *oldest*\n * version still available, which silently changes what the endpoint accepts\n * the day Meta drops it.\n */\nconst DEFAULT_API_VERSION = 'v25.0';\n\n/**\n * How Meta spells the canonical vocabulary, which is GA4's. Kept in step with\n * `meta.browser.ts` by hand: the two halves are two libraries, and neither\n * imports the other.\n */\nconst CANONICAL_EVENTS: Record<string, EventBinding<string>> = {\n  page_view: 'PageView',\n  view_item: 'ViewContent',\n  search: 'Search',\n  add_to_cart: 'AddToCart',\n  add_to_wishlist: 'AddToWishlist',\n  begin_checkout: 'InitiateCheckout',\n  add_payment_info: 'AddPaymentInfo',\n  purchase: 'Purchase',\n  sign_up: 'CompleteRegistration',\n  generate_lead: 'Lead',\n};\n\n/** Credentials for Meta's Conversions API. */\nexport interface MetaServerCredentials {\n  /** The pixel (dataset) id events are posted to. */\n  pixelId: string;\n  /** A system user or page access token with `ads_management`. It is a credential. */\n  accessToken: string;\n}\n\n/** Optional configuration for the Meta server provider. */\nexport interface MetaServerConfig {\n  /** How this pixel spells each canonical event, merged over the built-in map. */\n  events?: Record<string, EventBinding<string>>;\n  /**\n   * Where conversions happen by default. Meta requires `action_source` on\n   * every event, so there is always a value; `context.source` overrides it\n   * per call, which is what a webhook and a checkout need.\n   */\n  actionSource?: ActionSource;\n  /** The Graph API version in the URL. Defaults to a pinned one. */\n  apiVersion?: string;\n  /**\n   * Routes events to the Test Events tab in Events Manager instead of the\n   * live dataset. **Testing only**: Meta says to remove it before\n   * production, and it is the only instrument that shows what a payload\n   * actually became.\n   */\n  testEventCode?: string;\n  /**\n   * Meta's Limited Data Use marking, forwarded verbatim: `['LDU']` to enable\n   * it, `[]` to disable it.\n   *\n   * This is a processing marking that some US state laws require, not a\n   * consent declaration, which is why it is configuration on this factory and\n   * not a reading of `context.consent`. The browser half has no equivalent:\n   * `fbq('dataProcessingOptions', …)` is documented as running before\n   * `fbq('init')`, and the snippet is the host's.\n   */\n  dataProcessingOptions?: readonly string[];\n  /** `0` lets Meta geolocate. Meaningless without `dataProcessingOptions`. */\n  dataProcessingOptionsCountry?: number;\n  /** `0` lets Meta geolocate. Meaningless without `dataProcessingOptions`. */\n  dataProcessingOptionsState?: number;\n}\n\n/**\n * Web Crypto rather than `node:crypto`, so the built server bundle stays\n * platform-neutral: this adapter is called from Cloudflare Workers, Deno and\n * Vercel's edge runtime as often as from a Node process, and a `node:` import\n * would rule those out for no gain.\n */\nasync function sha256(value: string): Promise<string> {\n  const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(value));\n\n  return Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, '0')).join('');\n}\n\n/**\n * **Why the adapter hashes and does not ask the host to.**\n *\n * This looks like the library transforming data, and the cutting rule forbids\n * that. It is not. Meta does not define a field called \"email\" that happens\n * to want a hash: it defines `em` *as* the SHA-256 of the trimmed, lowercased\n * address, the same way it defines `event_time` as seconds rather than\n * milliseconds. Writing this line by hand you write\n * `sha256(email.trim().toLowerCase())`, and the adapter replicates exactly\n * that. Normalisation lives with the field it belongs to.\n *\n * The alternative is worse and is where integrations demonstrably go wrong:\n * three vendors want SHA-256 under three different normalisation rules, so a\n * host hashing on its own side has to hash the same address three ways and\n * discovers a mistake only as a quietly poor match rate.\n */\nconst normaliseEmail = (value: string): string => value.trim().toLowerCase();\n\n/**\n * \"Remove symbols, letters, and any leading zeros.\" The country code is not\n * added here: Meta wants one and the library does not know it, and guessing a\n * country onto a phone number invents an identifier for a different person.\n */\nconst normalisePhone = (value: string): string => value.replace(/\\D/g, '').replace(/^0+/, '');\n\n/** \"Lowercase only with no punctuation.\" Spaces and accents survive; Meta reads UTF-8. */\nconst normaliseName = (value: string): string =>\n  value\n    .trim()\n    .toLowerCase()\n    .replace(/[\\p{P}\\p{S}]/gu, '');\n\n/**\n * GA4's `items` become Meta's `contents`, a closed shape: `id`, `quantity`,\n * `item_price`, `delivery_category`. The rest of a GA4 item is dropped rather\n * than forwarded, because a key Meta does not read inside `contents` looks\n * mapped and arrives nowhere.\n */\nfunction contents(items: readonly EventItem[]): Record<string, unknown>[] {\n  return items.map((item) => {\n    const content: Record<string, unknown> = {};\n\n    if (item.item_id !== undefined) content.id = item.item_id;\n    if (item.quantity !== undefined) content.quantity = item.quantity;\n    if (item.price !== undefined) content.item_price = item.price;\n\n    return content;\n  });\n}\n\n/**\n * `value` and `currency` are spelled identically by both vendors. Everything\n * the host named itself passes through, because a business measures things\n * this vocabulary does not name.\n *\n * `transaction_id` becomes `order_id`, which this surface documents and the\n * pixel does not. It is one of the asymmetries between Meta's two halves an\n * adapter absorbs so nobody else has to.\n */\nfunction customData(data: EventData): Record<string, unknown> {\n  const { items, transaction_id: transactionId, ...rest } = data;\n  const custom: Record<string, unknown> = { ...rest };\n\n  if (transactionId !== undefined) custom.order_id = transactionId;\n  if (items) custom.contents = contents(items);\n\n  return custom;\n}\n\n/**\n * The heaviest surface of the five vendors: four hashed identifiers, four raw\n * ones, and two cookies forwarded exactly as the pixel wrote them.\n *\n * Built in a fixed order, and hashed one after another rather than in\n * parallel, so that the same input produces the same JSON on every run. Two\n * identical events differing only in key order would be the library inventing\n * something, which is precisely what the conformance suite looks for.\n */\nasync function userData(context: ResolvedContext): Promise<Record<string, string>> {\n  const user = context.user ?? {};\n  const built: Record<string, string> = {};\n\n  const hashed: readonly [string, string | undefined, (value: string) => string][] = [\n    ['em', user.email, normaliseEmail],\n    ['ph', user.phone, normalisePhone],\n    ['fn', user.firstName, normaliseName],\n    ['ln', user.lastName, normaliseName],\n  ];\n\n  for (const [field, raw, normalise] of hashed) {\n    if (raw === undefined) continue;\n\n    const normalised = normalise(raw);\n    // An empty value still hashes to a perfectly valid digest, one that\n    // matches nobody and counts as an identifier towards the minimum below.\n    if (!normalised) continue;\n\n    built[field] = await sha256(normalised);\n  }\n\n  // Raw by Meta's own instruction. `external_id` is the one it merely\n  // *recommends* hashing, and it stays raw here so the value Meta receives is\n  // the value the host holds. A host that also puts an external id in its\n  // `fbq('init')` should know the pixel hashes what it finds there, so the two\n  // surfaces match only if both sides send the same form: pre-hash on both,\n  // or on neither. Meta's pages do not state which side should give way.\n  if (user.userId !== undefined) built.external_id = user.userId;\n  if (context.ip !== undefined) built.client_ip_address = context.ip;\n  if (context.userAgent !== undefined) built.client_user_agent = context.userAgent;\n\n  // Meta forwards these as-is; they are its own cookies in its own format.\n  // Note what is *not* here: an `fbc` synthesised from an `fbclid` in the URL.\n  // Meta documents that construction, and it needs a click timestamp the\n  // library does not have, so building one would be inventing an identifier.\n  const fbp = context.cookies._fbp;\n  if (fbp) built.fbp = fbp;\n\n  const fbc = context.cookies._fbc;\n  if (fbc) built.fbc = fbc;\n\n  return built;\n}\n\n/**\n * Meta's Conversions API.\n *\n * @param credentials - The pixel id and an access token.\n * @param config - Event overrides, the default action source, and Meta's own\n * levers: the API version, a test event code, and Limited Data Use.\n * @returns A provider for `createTracking` from `tracklane/server`.\n *\n * @example\n * ```ts\n * import { createTracking, meta } from 'tracklane/server';\n *\n * const { track } = createTracking({\n *   providers: [meta({ pixelId: '1234567890', accessToken: process.env.META_TOKEN! })],\n * });\n *\n * await track('purchase', order, {\n *   user: { email: order.email },\n *   cookies: request.headers.get('cookie'),\n *   dedupId: order.id,\n *   ip,\n *   userAgent,\n * });\n * ```\n */\nexport function meta(\n  credentials: MetaServerCredentials,\n  config: MetaServerConfig = {},\n): ServerProvider {\n  const { pixelId, accessToken } = credentials;\n  const { actionSource = 'website', apiVersion = DEFAULT_API_VERSION, testEventCode } = config;\n\n  return {\n    name: 'meta',\n    default: 'passthrough',\n    events: { ...CANONICAL_EVENTS, ...config.events },\n\n    async track(\n      name: string,\n      data: EventData,\n      context: ResolvedContext,\n      report: (message: string) => void,\n    ): Promise<void> {\n      const user = await userData(context);\n\n      if (Object.keys(user).length === 0) {\n        // Not withholding on policy grounds: Meta requires at least one\n        // `user_data` parameter and none can be invented. Its own page says\n        // \"at least one of the following\" over the whole list, so a bare\n        // `fbp` qualifies; whether matching is any good with a non-contact\n        // identifier alone is Meta's business, not this adapter's to judge.\n        // Naming the vendor's own field, so searching for the error leads\n        // somewhere.\n        throw new Error(\n          'meta: cannot build user_data, the Conversions API requires at least one identifier. Pass context.user, context.ip with context.userAgent, or the _fbp/_fbc cookies.',\n        );\n      }\n\n      const event: Record<string, unknown> = {\n        event_name: name,\n        // Seconds, where the context carries milliseconds.\n        event_time: Math.floor(context.timestamp / 1000),\n        // Required on every event, which is why the factory carries a default\n        // rather than letting the request fail.\n        action_source: context.source ?? actionSource,\n        user_data: user,\n      };\n\n      // Meta's key is `event_id` here and `eventID` on the pixel, matched\n      // together with `event_name`. Never produced by the library.\n      if (context.dedupId !== undefined) event.event_id = context.dedupId;\n      if (context.url !== undefined) event.event_source_url = context.url;\n\n      const custom = customData(data);\n      if (Object.keys(custom).length > 0) event.custom_data = custom;\n\n      if (config.dataProcessingOptions) {\n        // Meta lists these among its *server event* parameters, alongside\n        // `event_name` and `user_data`, which is why they sit inside the\n        // event. No example on its pages states the level outright.\n        event.data_processing_options = config.dataProcessingOptions;\n\n        if (config.dataProcessingOptionsCountry !== undefined) {\n          event.data_processing_options_country = config.dataProcessingOptionsCountry;\n        }\n        if (config.dataProcessingOptionsState !== undefined) {\n          event.data_processing_options_state = config.dataProcessingOptionsState;\n        }\n      }\n\n      // `context.traits` and `context.consent` map to nothing. Meta has no\n      // person-properties slot on this endpoint, and its consent surface is a\n      // browser command; the processing marking above is a different concept\n      // wearing similar words.\n\n      // Form-encoded, which is the shape Meta's own examples post, and it\n      // keeps the token out of the query string. Unlike GA4, this vendor\n      // offers a body slot for it, so query strings in proxy and APM logs are\n      // avoidable here.\n      const body = new URLSearchParams({\n        data: JSON.stringify([event]),\n        access_token: accessToken,\n      });\n\n      if (testEventCode) body.set('test_event_code', testEventCode);\n\n      const response = await fetch(`${GRAPH}/${apiVersion}/${encodeURIComponent(pixelId)}/events`, {\n        method: 'POST',\n        headers: { 'content-type': 'application/x-www-form-urlencoded' },\n        body,\n      });\n\n      if (!response.ok) {\n        // The status only. The event carries raw personal data, and no\n        // library-owned surface re-emits it into a host's logs.\n        throw new Error(`meta: the Conversions API answered ${response.status}`);\n      }\n\n      // A body that will not parse must not turn a delivered conversion into\n      // an error, which would tell a host's retry logic to send it again.\n      const result = (await response.json().catch(() => null)) as {\n        messages?: unknown[];\n        fbtrace_id?: string;\n      } | null;\n\n      const messages = result?.messages;\n      if (Array.isArray(messages) && messages.length > 0) {\n        // A caveat about a send that already happened, so it reports rather\n        // than throws. The count and the trace id only: Meta's warnings can\n        // quote the parameter that upset it, and event contents never reach a\n        // host's logs through this library.\n        report(\n          `accepted with ${messages.length} warning(s) from the Conversions API; read them under fbtrace_id ${result?.fbtrace_id ?? 'unknown'} in Events Manager`,\n        );\n      }\n    },\n  };\n}\n","// Through the public entry point, exactly as a provider written elsewhere\n// would import it. A provider that needs something not exported here is\n// telling us the contract is incomplete, which is a conversation rather than\n// a reason to reach inside.\nimport type { EventBinding, EventData, ResolvedContext, ServerProvider } from '../index.js';\n\nconst DEFAULT_HOST = 'https://us.i.posthog.com';\n\n/** Credentials for PostHog's Capture API. */\nexport interface PosthogServerCredentials {\n  /** The project API key, the same one the browser SDK is initialised with (`phc_...`). */\n  apiKey: string;\n  /**\n   * Where this project ingests events, when it is not PostHog's default US\n   * Cloud instance — `https://eu.i.posthog.com` for the EU Cloud, or a\n   * self-hosted deployment's own origin. Defaults to `https://us.i.posthog.com`.\n   */\n  host?: string;\n}\n\n/** Optional configuration for the PostHog server provider. */\nexport interface PosthogServerConfig {\n  /**\n   * How this project spells each canonical event. Rarely needed: `capture()`\n   * accepts any string, so the canonical vocabulary already is PostHog's.\n   */\n  events?: Record<string, EventBinding<string>>;\n}\n\n/**\n * The distinct_id lives inside a cookie posthog-js writes by default, named\n * after this project's own api key: `ph_<api_key>_posthog`. Its value is\n * `encodeURIComponent(JSON.stringify({ distinct_id, ... }))`, so it has to be\n * decoded before it parses as JSON.\n *\n * Verified against a live project rather than read off the SDK's source: the\n * cookie was percent-encoded, held `distinct_id` alongside `$device_id` and\n * `$user_state`, and the id parsed out of it matched what the page's own\n * `posthog.get_distinct_id()` returned. A server event sent with it landed on\n * the same person the browser had created, which is the whole point.\n *\n * This is only the anonymous fallback. It is not read when the caller already\n * knows who the visitor is; see the comment in `track` for why.\n */\nfunction anonymousId(cookies: Record<string, string>, apiKey: string): string | undefined {\n  const raw = cookies[`ph_${apiKey}_posthog`];\n  if (!raw) return undefined;\n\n  try {\n    const parsed = JSON.parse(decodeURIComponent(raw)) as { distinct_id?: unknown };\n    return typeof parsed.distinct_id === 'string' ? parsed.distinct_id : undefined;\n  } catch {\n    // A cookie that fails to decode or parse is not this vendor's cookie, or\n    // not this shape of it. Either way, nothing to read.\n    return undefined;\n  }\n}\n\n/**\n * PostHog deduplicates on `uuid`, and the field holds a UUID rather than any\n * string: an invalid one is documented as dropped on ingestion, and has been\n * reported answering 400 instead. Since `dedupId` is whatever the host chose\n * — Meta's `event_id` takes anything, and this library's own example is an\n * order id — forwarding it unchecked would turn a duplicated purchase into no\n * purchase at all.\n *\n * Accepts any RFC 4122 layout rather than v4 alone, because v7 is what a\n * system minting ids today tends to produce.\n */\nconst UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\n\n/**\n * PostHog on the server, through the Capture API.\n *\n * **Deduplicating a retried webhook takes two things, not one.** `dedupId`\n * becomes PostHog's `uuid`, and PostHog collapses events sharing `uuid`, event\n * name, timestamp and `distinct_id` — so a `timestamp` left to default to the\n * clock differs on the retry and nothing is deduplicated. Pin it to a value\n * derived from the order, as below. The `dedupId` itself must be a UUID:\n * anything else is reported through `onError` and sent without the field,\n * because PostHog rejects other shapes rather than ignoring them.\n *\n * Deduplication is also eventual, happening during a background merge, so both\n * rows are visible for a while and a test that counts immediately will fail.\n *\n * @param credentials - The project API key, and the ingestion host for\n * anything other than PostHog's default US Cloud instance.\n * @param config - Rarely needed event name overrides.\n * @returns A provider for `createTracking` from `tracklane/server`.\n *\n * @example\n * ```ts\n * import { createTracking, posthog } from 'tracklane/server';\n *\n * const { track } = createTracking({\n *   providers: [posthog({ apiKey: process.env.POSTHOG_API_KEY! })],\n * });\n *\n * // Both fields come from the order, so the payment provider's second\n * // delivery of the same webhook produces the same event.\n * await track('purchase', order, {\n *   user: { userId: order.userId },\n *   cookies: request.headers.get('cookie'),\n *   dedupId: order.eventId, // a UUID your checkout minted with the order\n *   timestamp: order.paidAt,\n * });\n * ```\n */\nexport function posthog(\n  credentials: PosthogServerCredentials,\n  config: PosthogServerConfig = {},\n): ServerProvider {\n  const { apiKey, host = DEFAULT_HOST } = credentials;\n\n  return {\n    name: 'posthog',\n    // capture() accepts any string as an event name, so the canonical\n    // vocabulary already is PostHog's, and every event passes through\n    // unless the host says otherwise.\n    default: 'passthrough',\n    ...(config.events ? { events: config.events } : {}),\n\n    async track(\n      name: string,\n      data: EventData,\n      context: ResolvedContext,\n      report: (message: string) => void,\n    ): Promise<void> {\n      // PostHog has one identity slot, distinct_id — not two the way GA4 has\n      // a required client_id plus an optional user_id. PostHog's own\n      // guidance is to send the same distinct_id the browser SDK is using\n      // for that visitor, so a known application user id (the same value\n      // handed to `identify()` on the browser) is used first, because it is\n      // what the visitor becomes once they are known. The anonymous id\n      // PostHog's own tag already wrote to its cookie is the fallback for a\n      // visitor nobody has identified yet. Inventing a third value here\n      // would orphan the event: PostHog would accept it and never connect it\n      // to anything, on either side.\n      const id = context.user?.userId ?? anonymousId(context.cookies, apiKey);\n      if (!id) {\n        throw new Error(\n          \"posthog: cannot resolve distinct_id — no user.userId in context and no ph_<api_key>_posthog cookie among the cookies passed in context. Pass user.userId once the visitor is known, or ensure PostHog's browser tag has set its cookie first.\",\n        );\n      }\n\n      const properties: Record<string, unknown> = { ...data };\n      // $set is the server-side slot for what is known *about* the person,\n      // the same job `user_properties` does in GA4's Measurement Protocol\n      // body — kept separate from the identifiers used to match someone.\n      if (context.traits) properties.$set = context.traits;\n\n      // The deduplication key is `uuid`, and it is the whole quartet of\n      // `uuid`, event name, timestamp and distinct_id that PostHog collapses,\n      // eventually, during a background merge. So this field alone does not\n      // make a retry idempotent: the host has to pin `context.timestamp` to\n      // something derived from the order rather than let it default to the\n      // clock. That is documentation's job, not this adapter's.\n      const dedup: { uuid?: string } = {};\n      if (context.dedupId !== undefined) {\n        if (UUID.test(context.dedupId)) {\n          dedup.uuid = context.dedupId;\n        } else {\n          // Sent anyway, without the field. The alternative is the vendor\n          // dropping the whole event over an id shape, which trades a visible\n          // duplicate for an invisible absence.\n          report(\n            'dedupId is not a UUID, so it was not forwarded as uuid: PostHog deduplicates on that field and rejects other shapes, so this event can duplicate on a retry',\n          );\n        }\n      }\n\n      const body = {\n        api_key: apiKey,\n        event: name,\n        distinct_id: id,\n        ...dedup,\n        // context.url, context.ip and context.userAgent are not forwarded\n        // either. PostHog documents override properties for some of these\n        // on other surfaces, but nothing found here confirms one for this\n        // endpoint with enough certainty to translate rather than guess, so\n        // they are left unmapped. context.consent and context.source are\n        // Google's and Meta's vocabularies respectively, and this endpoint\n        // documents a slot for neither.\n        properties,\n        timestamp: new Date(context.timestamp).toISOString(),\n      };\n\n      const response = await fetch(`${host}/i/v0/e/`, {\n        method: 'POST',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify(body),\n      });\n\n      if (!response.ok) {\n        // The status only. The event carries raw personal data, and no\n        // library-owned surface re-emits it into a host's logs.\n        throw new Error(`posthog: the capture endpoint answered ${response.status}`);\n      }\n    },\n  };\n}\n","import { assertUniqueProviders, makeReporter, messageOf, resolveEvent } from './dispatch.js';\n\nexport {\n  type Ga4ServerConfig,\n  type Ga4ServerCredentials,\n  ga4,\n} from './providers/ga4.server.js';\nexport {\n  type MetaServerConfig,\n  type MetaServerCredentials,\n  meta,\n} from './providers/meta.server.js';\nexport {\n  type PosthogServerConfig,\n  type PosthogServerCredentials,\n  posthog,\n} from './providers/posthog.server.js';\n\nimport type {\n  ActionSource,\n  ConsentState,\n  EventBinding,\n  EventData,\n  ProviderDefault,\n  TrackingError,\n  UserData,\n} from './vocabulary.js';\n\n/**\n * Everything a conversion API needs beyond the event itself: who the person\n * is, when it happened, and where it was observed.\n *\n * None of this is \"what happened\", which is why it does not travel in the\n * event data: putting it there would leak identity into the pass-through\n * event params of the vendors that forward the payload as-is.\n */\nexport interface EventContext {\n  /** The person's identity, the server-side counterpart to `identify()` on the browser. */\n  user?: UserData;\n  /**\n   * The request's raw `Cookie` header, or an already-parsed map.\n   *\n   * These are cookies the vendors' own browser tags set. This library never\n   * writes one. On the server each adapter reads the cookies belonging to\n   * its own vendor: Meta forwards its value as-is, Google's holds several\n   * things at once and has to be opened. That knowledge lives in the\n   * adapters; the core only splits `name=value; name=value` into pairs.\n   *\n   * **It splits, it does not interpret.** Values are handed over exactly as\n   * they appear, with no percent-decoding. The cookies these vendors set do\n   * not need it; a host reading some other cookie should decode it itself.\n   */\n  cookies?: string | Record<string, string> | null;\n  /** Ties this send to a browser hit. Never invented by the library. */\n  dedupId?: string;\n  /**\n   * When the conversion actually happened. Defaults to now.\n   *\n   * A webhook arrives after the fact and LinkedIn rejects conversions older\n   * than 90 days, so reporting \"now\" for everything would quietly distort\n   * attribution.\n   */\n  timestamp?: number | Date;\n  /** Overrides the factory default. Meta requires it on every event. */\n  source?: ActionSource;\n  /** The page the conversion happened on. Meta's Conversions API reads it as `event_source_url`. */\n  url?: string;\n  /** The visitor's IP. Meta's Conversions API reads it as one of the identifiers in `user_data`. */\n  ip?: string;\n  /** The visitor's user agent. Meta's Conversions API reads it alongside `ip`. */\n  userAgent?: string;\n  /** What is known *about* the person: GA4 user properties, PostHog `$set`. */\n  traits?: Record<string, unknown>;\n  /**\n   * Travels inside the event, for the vendors that document such a field.\n   * Today that is GA4's Measurement Protocol, and it reads two of the\n   * signals; the others have no slot and ignore it.\n   */\n  consent?: ConsentState;\n}\n\n/** The context an adapter receives, with the ambiguity resolved. */\nexport interface ResolvedContext extends Omit<EventContext, 'cookies' | 'timestamp'> {\n  /** The request's cookies, already split into a `name → value` map. */\n  cookies: Record<string, string>;\n  /** Epoch milliseconds. Adapters convert to their vendor's spelling. */\n  timestamp: number;\n}\n\n/**\n * A destination for server events.\n *\n * `track` may throw, on a non-2xx or where a vendor documents a\n * precondition the event cannot meet. The dispatcher isolates and reports\n * it, so adapters stay honest and loud.\n *\n * `report` is for a caveat about a request that already succeeded. It does\n * not throw: by then the send happened, and throwing would tell a host's\n * retry logic to resend a delivered conversion.\n */\nexport interface ServerProvider<Target = string> {\n  /** The vendor's fixed name. Registering one twice is an error. */\n  name: string;\n  /** What happens to a canonical event this vendor has no binding for. */\n  default: ProviderDefault;\n  /** How this vendor spells each canonical event. */\n  events?: Record<string, EventBinding<Target>>;\n  /** Sends one event to this vendor's conversion API. May throw, or call `report` for a caveat. */\n  track(\n    name: Target,\n    data: EventData,\n    context: ResolvedContext,\n    report: (message: string) => void,\n  ): Promise<void>;\n}\n\n/** Options accepted by {@link createTracking}. */\nexport interface ServerTrackingOptions {\n  /** The vendors to send every event to. Registering the same `name` twice throws. */\n  providers: readonly ServerProvider[];\n  /**\n   * The one diagnostic channel. Without it the library is silent, exactly as\n   * a hand-written vendor call is.\n   */\n  onError?: (error: TrackingError) => void;\n}\n\n/** What {@link createTracking} returns. */\nexport interface ServerTracking {\n  /**\n   * Sends one event to every configured conversion API.\n   *\n   * Resolves once every provider has settled and never rejects: one vendor\n   * being down is not the caller's failure to handle. Awaiting is about the\n   * request surviving a serverless runtime, not about delivery being\n   * guaranteed.\n   */\n  track(name: string, data?: EventData, context?: EventContext): Promise<void>;\n}\n\n/** `name=value; name=value`, the shape of a `Cookie` header. */\nfunction parseCookies(\n  cookies: string | Record<string, string> | null | undefined,\n): Record<string, string> {\n  if (!cookies) return {};\n  if (typeof cookies !== 'string') return cookies;\n\n  const parsed: Record<string, string> = {};\n\n  for (const pair of cookies.split(';')) {\n    const separator = pair.indexOf('=');\n    if (separator < 1) continue;\n\n    const name = pair.slice(0, separator).trim();\n    // Cookie values may contain `=`, so only the first one separates.\n    if (name) parsed[name] = pair.slice(separator + 1).trim();\n  }\n\n  return parsed;\n}\n\n/**\n * Creates the server tracking surface.\n *\n * There is no `identify` here and nothing is held between calls: a server\n * instance is shared by every request, so a retained identity would attach\n * one visitor to another visitor's conversion. Identity travels with the\n * call, which is also what every conversion API expects.\n *\n * There is no `consent` call either. Consent commands are properties of a\n * vendor's on-page tag, and a server request has no tag. The one vendor that\n * accepts consent server-side reads it from the context.\n *\n * @param options - The providers to send to, and an optional error channel.\n * @returns The `track` call.\n *\n * @example\n * ```ts\n * import { createTracking, ga4 } from 'tracklane/server';\n *\n * const { track } = createTracking({\n *   providers: [ga4({ measurementId: 'G-XXXXXXX', apiSecret })],\n * });\n *\n * await track('purchase', order, { cookies: request.headers.get('cookie') });\n * ```\n */\nexport function createTracking(options: ServerTrackingOptions): ServerTracking {\n  const { providers } = options;\n  assertUniqueProviders(providers);\n\n  const report = makeReporter(options.onError);\n\n  return {\n    async track(name, data = {}, context = {}) {\n      const { cookies, timestamp, ...rest } = context;\n      const resolved: ResolvedContext = {\n        ...rest,\n        cookies: parseCookies(cookies),\n        timestamp: timestamp instanceof Date ? timestamp.getTime() : (timestamp ?? Date.now()),\n      };\n\n      const sends = providers.map(async (provider) => {\n        const target = resolveEvent(provider, name);\n        if (target === undefined) return;\n\n        try {\n          await provider.track(target, data, resolved, (message) => {\n            report({ provider: provider.name, event: name, severity: 'warning', message });\n          });\n        } catch (cause) {\n          report({\n            provider: provider.name,\n            event: name,\n            severity: 'error',\n            message: messageOf(cause),\n            cause,\n          });\n        }\n      });\n\n      await Promise.all(sends);\n    },\n  };\n}\n"],"mappings":";;AAYA,MAAM,WAAW;;;;;;;;;AAuBjB,SAAS,UAAU,SAAqD;CACtE,MAAM,MAAM,QAAQ;CACpB,IAAI,CAAC,KAAK,OAAO,KAAA;CAEjB,MAAM,QAAQ,IAAI,MAAM,GAAG;CAC3B,IAAI,MAAM,SAAS,GAAG,OAAO,KAAA;CAE7B,OAAO,MAAM,MAAM,EAAE,CAAC,CAAC,KAAK,GAAG;AACjC;;;;;;;;;;;;;;;;;AAkBA,SAAS,UAAU,SAAiC,eAA2C;CAK7F,MAAM,UADQ,QAAQ,OAAO,cAAc,QAAQ,OAAO,EAAE,IACvC,EAAE,MAAM,GAAG,CAAC,CAAC;CAClC,IAAI,CAAC,SAAS,OAAO,KAAA;CAErB,MAAM,SAAS,UAAU,KAAK,OAAO;CACrC,IAAI,QAAQ,OAAO,OAAO;CAG1B,OAAO,QAAQ,KAAK,OAAO,IAAI,UAAU,KAAA;AAC3C;;;;;;AAOA,SAAS,YAAY,OAAqE;CACxF,IAAI,CAAC,OAAO,OAAO,KAAA;CAEnB,MAAM,OAA+B,CAAC;CACtC,IAAI,MAAM,cAAc,KAAK,eAAe,MAAM,aAAa,YAAY;CAC3E,IAAI,MAAM,oBAAoB,KAAK,qBAAqB,MAAM,mBAAmB,YAAY;CAE7F,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,KAAA;AAC/C;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,IACd,aACA,SAA0B,CAAC,GACX;CAChB,MAAM,EAAE,eAAe,cAAc;CAErC,OAAO;EACL,MAAM;EACN,SAAS;EACT,GAAI,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;EAEjD,MAAM,MACJ,MACA,MACA,SACA,QACe;GACf,MAAM,WAAW,UAAU,QAAQ,OAAO;GAC1C,IAAI,CAAC,UAMH,MAAM,IAAI,MACR,4HACF;GAGF,MAAM,UAAU,UAAU,QAAQ,SAAS,aAAa;GACxD,IAAI,CAAC,SACH,OACE,yGACF;GAGF,MAAM,SAAkC,EAAE,GAAG,KAAK;GAClD,IAAI,SAAS;IACX,OAAO,aAAa;IAGpB,OAAO,uBAAuB;GAChC;GAKA,MAAM,OAAgC;IACpC,WAAW;IACX,kBAAkB,QAAQ,YAAY;IACtC,QAAQ,CAAC;KAAE;KAAM;IAAO,CAAC;GAC3B;GAEA,IAAI,QAAQ,MAAM,WAAW,KAAA,GAAW,KAAK,UAAU,QAAQ,KAAK;GAEpE,IAAI,QAAQ,QAOV,KAAK,kBAAkB,OAAO,YAC5B,OAAO,QAAQ,QAAQ,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACzE;GAGF,MAAM,UAAU,YAAY,QAAQ,OAAO;GAC3C,IAAI,SAAS,KAAK,UAAU;GAK5B,MAAM,MAAM,GAAG,SAAS,kBAAkB,mBAAmB,aAAa,EAAE,cAAc,mBAAmB,SAAS;GAEtH,MAAM,WAAW,MAAM,MAAM,KAAK;IAChC,QAAQ;IACR,SAAS,EAAE,gBAAgB,mBAAmB;IAC9C,MAAM,KAAK,UAAU,IAAI;GAC3B,CAAC;GAED,IAAI,CAAC,SAAS,IAGZ,MAAM,IAAI,MAAM,0CAA0C,SAAS,QAAQ;EAE/E;CACF;AACF;;;ACxLA,MAAM,QAAQ;;;;;;AAOd,MAAM,sBAAsB;;;;;;AAO5B,MAAM,mBAAyD;CAC7D,WAAW;CACX,WAAW;CACX,QAAQ;CACR,aAAa;CACb,iBAAiB;CACjB,gBAAgB;CAChB,kBAAkB;CAClB,UAAU;CACV,SAAS;CACT,eAAe;AACjB;;;;;;;AAoDA,eAAe,OAAO,OAAgC;CACpD,MAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC;CAEpF,OAAO,MAAM,KAAK,IAAI,WAAW,MAAM,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;AACjG;;;;;;;;;;;;;;;;;AAkBA,MAAM,kBAAkB,UAA0B,MAAM,KAAK,CAAC,CAAC,YAAY;;;;;;AAO3E,MAAM,kBAAkB,UAA0B,MAAM,QAAQ,OAAO,EAAE,CAAC,CAAC,QAAQ,OAAO,EAAE;;AAG5F,MAAM,iBAAiB,UACrB,MACG,KAAK,CAAC,CACN,YAAY,CAAC,CACb,QAAQ,kBAAkB,EAAE;;;;;;;AAQjC,SAAS,SAAS,OAAwD;CACxE,OAAO,MAAM,KAAK,SAAS;EACzB,MAAM,UAAmC,CAAC;EAE1C,IAAI,KAAK,YAAY,KAAA,GAAW,QAAQ,KAAK,KAAK;EAClD,IAAI,KAAK,aAAa,KAAA,GAAW,QAAQ,WAAW,KAAK;EACzD,IAAI,KAAK,UAAU,KAAA,GAAW,QAAQ,aAAa,KAAK;EAExD,OAAO;CACT,CAAC;AACH;;;;;;;;;;AAWA,SAAS,WAAW,MAA0C;CAC5D,MAAM,EAAE,OAAO,gBAAgB,eAAe,GAAG,SAAS;CAC1D,MAAM,SAAkC,EAAE,GAAG,KAAK;CAElD,IAAI,kBAAkB,KAAA,GAAW,OAAO,WAAW;CACnD,IAAI,OAAO,OAAO,WAAW,SAAS,KAAK;CAE3C,OAAO;AACT;;;;;;;;;;AAWA,eAAe,SAAS,SAA2D;CACjF,MAAM,OAAO,QAAQ,QAAQ,CAAC;CAC9B,MAAM,QAAgC,CAAC;CAEvC,MAAM,SAA6E;EACjF;GAAC;GAAM,KAAK;GAAO;EAAc;EACjC;GAAC;GAAM,KAAK;GAAO;EAAc;EACjC;GAAC;GAAM,KAAK;GAAW;EAAa;EACpC;GAAC;GAAM,KAAK;GAAU;EAAa;CACrC;CAEA,KAAK,MAAM,CAAC,OAAO,KAAK,cAAc,QAAQ;EAC5C,IAAI,QAAQ,KAAA,GAAW;EAEvB,MAAM,aAAa,UAAU,GAAG;EAGhC,IAAI,CAAC,YAAY;EAEjB,MAAM,SAAS,MAAM,OAAO,UAAU;CACxC;CAQA,IAAI,KAAK,WAAW,KAAA,GAAW,MAAM,cAAc,KAAK;CACxD,IAAI,QAAQ,OAAO,KAAA,GAAW,MAAM,oBAAoB,QAAQ;CAChE,IAAI,QAAQ,cAAc,KAAA,GAAW,MAAM,oBAAoB,QAAQ;CAMvE,MAAM,MAAM,QAAQ,QAAQ;CAC5B,IAAI,KAAK,MAAM,MAAM;CAErB,MAAM,MAAM,QAAQ,QAAQ;CAC5B,IAAI,KAAK,MAAM,MAAM;CAErB,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,SAAgB,KACd,aACA,SAA2B,CAAC,GACZ;CAChB,MAAM,EAAE,SAAS,gBAAgB;CACjC,MAAM,EAAE,eAAe,WAAW,aAAa,qBAAqB,kBAAkB;CAEtF,OAAO;EACL,MAAM;EACN,SAAS;EACT,QAAQ;GAAE,GAAG;GAAkB,GAAG,OAAO;EAAO;EAEhD,MAAM,MACJ,MACA,MACA,SACA,QACe;GACf,MAAM,OAAO,MAAM,SAAS,OAAO;GAEnC,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,WAAW,GAQ/B,MAAM,IAAI,MACR,qKACF;GAGF,MAAM,QAAiC;IACrC,YAAY;IAEZ,YAAY,KAAK,MAAM,QAAQ,YAAY,GAAI;IAG/C,eAAe,QAAQ,UAAU;IACjC,WAAW;GACb;GAIA,IAAI,QAAQ,YAAY,KAAA,GAAW,MAAM,WAAW,QAAQ;GAC5D,IAAI,QAAQ,QAAQ,KAAA,GAAW,MAAM,mBAAmB,QAAQ;GAEhE,MAAM,SAAS,WAAW,IAAI;GAC9B,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC,SAAS,GAAG,MAAM,cAAc;GAExD,IAAI,OAAO,uBAAuB;IAIhC,MAAM,0BAA0B,OAAO;IAEvC,IAAI,OAAO,iCAAiC,KAAA,GAC1C,MAAM,kCAAkC,OAAO;IAEjD,IAAI,OAAO,+BAA+B,KAAA,GACxC,MAAM,gCAAgC,OAAO;GAEjD;GAWA,MAAM,OAAO,IAAI,gBAAgB;IAC/B,MAAM,KAAK,UAAU,CAAC,KAAK,CAAC;IAC5B,cAAc;GAChB,CAAC;GAED,IAAI,eAAe,KAAK,IAAI,mBAAmB,aAAa;GAE5D,MAAM,WAAW,MAAM,MAAM,GAAG,MAAM,GAAG,WAAW,GAAG,mBAAmB,OAAO,EAAE,UAAU;IAC3F,QAAQ;IACR,SAAS,EAAE,gBAAgB,oCAAoC;IAC/D;GACF,CAAC;GAED,IAAI,CAAC,SAAS,IAGZ,MAAM,IAAI,MAAM,sCAAsC,SAAS,QAAQ;GAKzE,MAAM,SAAU,MAAM,SAAS,KAAK,CAAC,CAAC,YAAY,IAAI;GAKtD,MAAM,WAAW,QAAQ;GACzB,IAAI,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,GAK/C,OACE,iBAAiB,SAAS,OAAO,mEAAmE,QAAQ,cAAc,UAAU,mBACtI;EAEJ;CACF;AACF;;;AC9VA,MAAM,eAAe;;;;;;;;;;;;;;;;AAsCrB,SAAS,YAAY,SAAiC,QAAoC;CACxF,MAAM,MAAM,QAAQ,MAAM,OAAO;CACjC,IAAI,CAAC,KAAK,OAAO,KAAA;CAEjB,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,mBAAmB,GAAG,CAAC;EACjD,OAAO,OAAO,OAAO,gBAAgB,WAAW,OAAO,cAAc,KAAA;CACvE,QAAQ;EAGN;CACF;AACF;;;;;;;;;;;;AAaA,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCb,SAAgB,QACd,aACA,SAA8B,CAAC,GACf;CAChB,MAAM,EAAE,QAAQ,OAAO,iBAAiB;CAExC,OAAO;EACL,MAAM;EAIN,SAAS;EACT,GAAI,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;EAEjD,MAAM,MACJ,MACA,MACA,SACA,QACe;GAWf,MAAM,KAAK,QAAQ,MAAM,UAAU,YAAY,QAAQ,SAAS,MAAM;GACtE,IAAI,CAAC,IACH,MAAM,IAAI,MACR,+OACF;GAGF,MAAM,aAAsC,EAAE,GAAG,KAAK;GAItD,IAAI,QAAQ,QAAQ,WAAW,OAAO,QAAQ;GAQ9C,MAAM,QAA2B,CAAC;GAClC,IAAI,QAAQ,YAAY,KAAA,GACtB,IAAI,KAAK,KAAK,QAAQ,OAAO,GAC3B,MAAM,OAAO,QAAQ;QAKrB,OACE,6JACF;GAIJ,MAAM,OAAO;IACX,SAAS;IACT,OAAO;IACP,aAAa;IACb,GAAG;IAQH;IACA,WAAW,IAAI,KAAK,QAAQ,SAAS,CAAC,CAAC,YAAY;GACrD;GAEA,MAAM,WAAW,MAAM,MAAM,GAAG,KAAK,WAAW;IAC9C,QAAQ;IACR,SAAS,EAAE,gBAAgB,mBAAmB;IAC9C,MAAM,KAAK,UAAU,IAAI;GAC3B,CAAC;GAED,IAAI,CAAC,SAAS,IAGZ,MAAM,IAAI,MAAM,0CAA0C,SAAS,QAAQ;EAE/E;CACF;AACF;;;;AC3DA,SAAS,aACP,SACwB;CACxB,IAAI,CAAC,SAAS,OAAO,CAAC;CACtB,IAAI,OAAO,YAAY,UAAU,OAAO;CAExC,MAAM,SAAiC,CAAC;CAExC,KAAK,MAAM,QAAQ,QAAQ,MAAM,GAAG,GAAG;EACrC,MAAM,YAAY,KAAK,QAAQ,GAAG;EAClC,IAAI,YAAY,GAAG;EAEnB,MAAM,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC,CAAC,KAAK;EAE3C,IAAI,MAAM,OAAO,QAAQ,KAAK,MAAM,YAAY,CAAC,CAAC,CAAC,KAAK;CAC1D;CAEA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,SAAgB,eAAe,SAAgD;CAC7E,MAAM,EAAE,cAAc;CACtB,sBAAsB,SAAS;CAE/B,MAAM,SAAS,aAAa,QAAQ,OAAO;CAE3C,OAAO,EACL,MAAM,MAAM,MAAM,OAAO,CAAC,GAAG,UAAU,CAAC,GAAG;EACzC,MAAM,EAAE,SAAS,WAAW,GAAG,SAAS;EACxC,MAAM,WAA4B;GAChC,GAAG;GACH,SAAS,aAAa,OAAO;GAC7B,WAAW,qBAAqB,OAAO,UAAU,QAAQ,IAAK,aAAa,KAAK,IAAI;EACtF;EAEA,MAAM,QAAQ,UAAU,IAAI,OAAO,aAAa;GAC9C,MAAM,SAAS,aAAa,UAAU,IAAI;GAC1C,IAAI,WAAW,KAAA,GAAW;GAE1B,IAAI;IACF,MAAM,SAAS,MAAM,QAAQ,MAAM,WAAW,YAAY;KACxD,OAAO;MAAE,UAAU,SAAS;MAAM,OAAO;MAAM,UAAU;MAAW;KAAQ,CAAC;IAC/E,CAAC;GACH,SAAS,OAAO;IACd,OAAO;KACL,UAAU,SAAS;KACnB,OAAO;KACP,UAAU;KACV,SAAS,UAAU,KAAK;KACxB;IACF,CAAC;GACH;EACF,CAAC;EAED,MAAM,QAAQ,IAAI,KAAK;CACzB,EACF;AACF"}
+{"version":3,"file":"server.js","names":[],"sources":["../src/providers/ga4.server.ts","../src/providers/meta.server.ts","../src/providers/posthog.server.ts","../src/server.ts"],"sourcesContent":["// Through the public entry point, exactly as a provider written elsewhere\n// would import it. A provider that needs something not exported here is\n// telling us the contract is incomplete, which is a conversation rather than\n// a reason to reach inside.\nimport type {\n  ConsentState,\n  EventBinding,\n  EventData,\n  ResolvedContext,\n  ServerProvider,\n} from '../index.js';\nimport { VendorResponseError } from '../index.js';\n\nconst ENDPOINT = 'https://www.google-analytics.com/mp/collect';\n\n/** Credentials for the GA4 Measurement Protocol. */\nexport interface Ga4ServerCredentials {\n  /** The `G-` id of the data stream. */\n  measurementId: string;\n  /** Created under Admin → Data Streams → Measurement Protocol. */\n  apiSecret: string;\n}\n\n/** Optional configuration for the GA4 server provider. */\nexport interface Ga4ServerConfig {\n  events?: Record<string, EventBinding<string>>;\n}\n\n/**\n * The visitor cookie holds `GA1.<depth>.<client_id>`, and the client id\n * itself contains a dot, so the identifier is the last two segments, which\n * is what survives Google's varying prefix depth.\n *\n * The value must be the cookie as the browser wrote it. A host passing a\n * parsed map passes cookie values, not values it took apart itself.\n */\nfunction visitorId(cookies: Record<string, string>): string | undefined {\n  const raw = cookies._ga;\n  if (!raw) return undefined;\n\n  const parts = raw.split('.');\n  if (parts.length < 4) return undefined;\n\n  return parts.slice(-2).join('.');\n}\n\n/**\n * The per-container cookie carries the session, in one of two layouts.\n *\n * Verified against Google's live tag on 2026-07-31 rather than assumed:\n *\n * - `GS2.1.s1785511401$o1$g0$t1785511401$j60$l0$h0`, the current one. The\n *   third dot-segment packs several fields joined by `$`, and the session is\n *   the first of them, prefixed with `s`.\n * - `GS1.1.1785511401.1.1.…`, the older one, where the third dot-segment is\n *   the session on its own.\n *\n * Reading the third segment blindly works for the old layout and returns the\n * whole `s…$o1$g0$…` blob for the new one, which the vendor would accept and\n * silently fail to match. Hence the two shapes, and hence `undefined` rather\n * than a guess when neither fits.\n */\nfunction sessionId(cookies: Record<string, string>, measurementId: string): string | undefined {\n  // Scoped to *this* property's cookie. A page with two GA4 properties has two\n  // `_ga_*` cookies, and taking whichever came first would attach another\n  // property's session to our event, which Google accepts and never matches.\n  const value = cookies[`_ga_${measurementId.replace(/^G-/, '')}`];\n  const segment = value?.split('.')[2];\n  if (!segment) return undefined;\n\n  const packed = /^s(\\d+)/.exec(segment);\n  if (packed) return packed[1];\n\n  // The older layout: a bare session id, nothing packed around it.\n  return /^\\d+$/.test(segment) ? segment : undefined;\n}\n\n/**\n * The Measurement Protocol documents exactly two consent fields, and spells\n * their values in upper case where the browser spells them in lower, one of\n * the small asymmetries an adapter absorbs so nobody else has to.\n */\nfunction consentBody(state: ConsentState | undefined): Record<string, string> | undefined {\n  if (!state) return undefined;\n\n  const body: Record<string, string> = {};\n  if (state.ad_user_data) body.ad_user_data = state.ad_user_data.toUpperCase();\n  if (state.ad_personalization) body.ad_personalization = state.ad_personalization.toUpperCase();\n\n  return Object.keys(body).length > 0 ? body : undefined;\n}\n\n/**\n * Google Analytics 4 on the server, through the Measurement Protocol.\n *\n * @param credentials - The measurement id and API secret.\n * @param config - Rarely needed event name overrides.\n * @returns A provider for `createTracking` from `tracklane/server`.\n *\n * @example\n * ```ts\n * import { createTracking, ga4 } from 'tracklane/server';\n *\n * const { track } = createTracking({\n *   providers: [ga4({ measurementId: 'G-XXXXXXX', apiSecret: process.env.GA4_SECRET! })],\n * });\n *\n * await track('purchase', order, { cookies: request.headers.get('cookie') });\n * ```\n */\nexport function ga4(\n  credentials: Ga4ServerCredentials,\n  config: Ga4ServerConfig = {},\n): ServerProvider {\n  const { measurementId, apiSecret } = credentials;\n\n  return {\n    name: 'ga4',\n    default: 'passthrough',\n    ...(config.events ? { events: config.events } : {}),\n\n    async track(\n      name: string,\n      data: EventData,\n      context: ResolvedContext,\n      report: (message: string) => void,\n    ): Promise<void> {\n      const clientId = visitorId(context.cookies);\n      if (!clientId) {\n        // Not withholding on policy grounds: the protocol requires this and\n        // it cannot be invented. The endpoint answers success even to\n        // invalid payloads, so sending anyway would look like it worked.\n        // Naming the vendor's own field, so that searching Google's docs\n        // for the error leads somewhere.\n        throw new Error(\n          \"ga4: cannot build client_id, no _ga cookie among the cookies passed in context. Ensure GA4's browser tag has set it first.\",\n        );\n      }\n\n      const session = sessionId(context.cookies, measurementId);\n      if (!session) {\n        report(\n          'no session cookie (_ga_<container>): Google will accept this event and it will not appear in any report',\n        );\n      }\n\n      const params: Record<string, unknown> = { ...data };\n      if (session) {\n        params.session_id = session;\n        // Google drops sessions with no engagement from its reports, so the\n        // event would arrive and still be invisible without this.\n        params.engagement_time_msec = 1;\n      }\n\n      // The dedup id maps nowhere: GA4 documents no browser-to-server\n      // deduplication. `transaction_id` (business data) travels in params\n      // and is the duplicate control this vendor does have.\n      const body: Record<string, unknown> = {\n        client_id: clientId,\n        timestamp_micros: context.timestamp * 1000,\n        events: [{ name, params }],\n      };\n\n      if (context.user?.userId !== undefined) body.user_id = context.user.userId;\n\n      if (context.traits) {\n        // Each property is an object with a `value` key here, where the\n        // browser takes the bare value. Sending the bare value is rejected\n        // by Google's validation endpoint and **accepted with 204 by the\n        // collection endpoint**, which then drops it, verified on\n        // 2026-07-31. One of several places where this vendor fails by\n        // accepting.\n        body.user_properties = Object.fromEntries(\n          Object.entries(context.traits).map(([name, value]) => [name, { value }]),\n        );\n      }\n\n      const consent = consentBody(context.consent);\n      if (consent) body.consent = consent;\n\n      // Credentials go in the query because the protocol offers no\n      // alternative. Query strings land in proxy and APM logs; that\n      // exposure is Google's design, not a choice made here.\n      const url = `${ENDPOINT}?measurement_id=${encodeURIComponent(measurementId)}&api_secret=${encodeURIComponent(apiSecret)}`;\n\n      const response = await fetch(url, {\n        method: 'POST',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify(body),\n      });\n\n      if (!response.ok) {\n        // The message stays free of the payload; the body rides on the\n        // error for a host that asks (ADR-0013). A body that will not read\n        // must not replace the real failure with a different one.\n        const body = await response.text().catch(() => '');\n        throw new VendorResponseError(`ga4: the Measurement Protocol answered ${response.status}`, {\n          provider: 'ga4',\n          status: response.status,\n          body,\n        });\n      }\n    },\n  };\n}\n","// Through the public entry point, exactly as a provider written elsewhere\n// would import it. A provider that needs something not exported here is\n// telling us the contract is incomplete, which is a conversation rather than\n// a reason to reach inside.\nimport type {\n  ActionSource,\n  EventBinding,\n  EventData,\n  EventItem,\n  ResolvedContext,\n  ServerProvider,\n} from '../index.js';\nimport { VendorResponseError } from '../index.js';\n\nconst GRAPH = 'https://graph.facebook.com';\n\n/**\n * Pinned on purpose. A Graph URL with no version resolves to the *oldest*\n * version still available, which silently changes what the endpoint accepts\n * the day Meta drops it.\n */\nconst DEFAULT_API_VERSION = 'v25.0';\n\n/**\n * How Meta spells the canonical vocabulary, which is GA4's. Kept in step with\n * `meta.browser.ts` by hand: the two halves are two libraries, and neither\n * imports the other.\n */\nconst CANONICAL_EVENTS: Record<string, EventBinding<string>> = {\n  page_view: 'PageView',\n  view_item: 'ViewContent',\n  search: 'Search',\n  add_to_cart: 'AddToCart',\n  add_to_wishlist: 'AddToWishlist',\n  begin_checkout: 'InitiateCheckout',\n  add_payment_info: 'AddPaymentInfo',\n  purchase: 'Purchase',\n  sign_up: 'CompleteRegistration',\n  generate_lead: 'Lead',\n};\n\n/** Credentials for Meta's Conversions API. */\nexport interface MetaServerCredentials {\n  /** The pixel (dataset) id events are posted to. */\n  pixelId: string;\n  /** A system user or page access token with `ads_management`. It is a credential. */\n  accessToken: string;\n}\n\n/** Optional configuration for the Meta server provider. */\nexport interface MetaServerConfig {\n  /** How this pixel spells each canonical event, merged over the built-in map. */\n  events?: Record<string, EventBinding<string>>;\n  /**\n   * Where conversions happen by default. Meta requires `action_source` on\n   * every event, so there is always a value; `context.source` overrides it\n   * per call, which is what a webhook and a checkout need.\n   */\n  actionSource?: ActionSource;\n  /** The Graph API version in the URL. Defaults to a pinned one. */\n  apiVersion?: string;\n  /**\n   * Routes events to the Test Events tab in Events Manager instead of the\n   * live dataset. **Testing only**: Meta says to remove it before\n   * production, and it is the only instrument that shows what a payload\n   * actually became.\n   */\n  testEventCode?: string;\n  /**\n   * Meta's Limited Data Use marking, forwarded verbatim: `['LDU']` to enable\n   * it, `[]` to disable it.\n   *\n   * This is a processing marking that some US state laws require, not a\n   * consent declaration, which is why it is configuration on this factory and\n   * not a reading of `context.consent`. The browser half has no equivalent:\n   * `fbq('dataProcessingOptions', …)` is documented as running before\n   * `fbq('init')`, and the snippet is the host's.\n   */\n  dataProcessingOptions?: readonly string[];\n  /** `0` lets Meta geolocate. Meaningless without `dataProcessingOptions`. */\n  dataProcessingOptionsCountry?: number;\n  /** `0` lets Meta geolocate. Meaningless without `dataProcessingOptions`. */\n  dataProcessingOptionsState?: number;\n}\n\n/**\n * Web Crypto rather than `node:crypto`, so the built server bundle stays\n * platform-neutral: this adapter is called from Cloudflare Workers, Deno and\n * Vercel's edge runtime as often as from a Node process, and a `node:` import\n * would rule those out for no gain.\n */\nasync function sha256(value: string): Promise<string> {\n  const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(value));\n\n  return Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, '0')).join('');\n}\n\n/**\n * **Why the adapter hashes and does not ask the host to.**\n *\n * This looks like the library transforming data, and the cutting rule forbids\n * that. It is not. Meta does not define a field called \"email\" that happens\n * to want a hash: it defines `em` *as* the SHA-256 of the trimmed, lowercased\n * address, the same way it defines `event_time` as seconds rather than\n * milliseconds. Writing this line by hand you write\n * `sha256(email.trim().toLowerCase())`, and the adapter replicates exactly\n * that. Normalisation lives with the field it belongs to.\n *\n * The alternative is worse and is where integrations demonstrably go wrong:\n * three vendors want SHA-256 under three different normalisation rules, so a\n * host hashing on its own side has to hash the same address three ways and\n * discovers a mistake only as a quietly poor match rate.\n */\nconst normaliseEmail = (value: string): string => value.trim().toLowerCase();\n\n/**\n * \"Remove symbols, letters, and any leading zeros.\" The country code is not\n * added here: Meta wants one and the library does not know it, and guessing a\n * country onto a phone number invents an identifier for a different person.\n */\nconst normalisePhone = (value: string): string => value.replace(/\\D/g, '').replace(/^0+/, '');\n\n/** \"Lowercase only with no punctuation.\" Spaces and accents survive; Meta reads UTF-8. */\nconst normaliseName = (value: string): string =>\n  value\n    .trim()\n    .toLowerCase()\n    .replace(/[\\p{P}\\p{S}]/gu, '');\n\n/**\n * GA4's `items` become Meta's `contents`, a closed shape: `id`, `quantity`,\n * `item_price`, `delivery_category`. The rest of a GA4 item is dropped rather\n * than forwarded, because a key Meta does not read inside `contents` looks\n * mapped and arrives nowhere.\n */\nfunction contents(items: readonly EventItem[]): Record<string, unknown>[] {\n  return items.map((item) => {\n    const content: Record<string, unknown> = {};\n\n    if (item.item_id !== undefined) content.id = item.item_id;\n    if (item.quantity !== undefined) content.quantity = item.quantity;\n    if (item.price !== undefined) content.item_price = item.price;\n\n    return content;\n  });\n}\n\n/**\n * `value` and `currency` are spelled identically by both vendors. Everything\n * the host named itself passes through, because a business measures things\n * this vocabulary does not name.\n *\n * `transaction_id` becomes `order_id`, which this surface documents and the\n * pixel does not. It is one of the asymmetries between Meta's two halves an\n * adapter absorbs so nobody else has to.\n */\nfunction customData(data: EventData): Record<string, unknown> {\n  const { items, transaction_id: transactionId, ...rest } = data;\n  const custom: Record<string, unknown> = { ...rest };\n\n  if (transactionId !== undefined) custom.order_id = transactionId;\n  if (items) custom.contents = contents(items);\n\n  return custom;\n}\n\n/**\n * The heaviest surface of the five vendors: four hashed identifiers, four raw\n * ones, and two cookies forwarded exactly as the pixel wrote them.\n *\n * Built in a fixed order, and hashed one after another rather than in\n * parallel, so that the same input produces the same JSON on every run. Two\n * identical events differing only in key order would be the library inventing\n * something, which is precisely what the conformance suite looks for.\n */\nasync function userData(context: ResolvedContext): Promise<Record<string, string>> {\n  const user = context.user ?? {};\n  const built: Record<string, string> = {};\n\n  const hashed: readonly [string, string | undefined, (value: string) => string][] = [\n    ['em', user.email, normaliseEmail],\n    ['ph', user.phone, normalisePhone],\n    ['fn', user.firstName, normaliseName],\n    ['ln', user.lastName, normaliseName],\n  ];\n\n  for (const [field, raw, normalise] of hashed) {\n    if (raw === undefined) continue;\n\n    const normalised = normalise(raw);\n    // An empty value still hashes to a perfectly valid digest, one that\n    // matches nobody and counts as an identifier towards the minimum below.\n    if (!normalised) continue;\n\n    built[field] = await sha256(normalised);\n  }\n\n  // Raw by Meta's own instruction. `external_id` is the one it merely\n  // *recommends* hashing, and it stays raw here so the value Meta receives is\n  // the value the host holds. A host that also puts an external id in its\n  // `fbq('init')` should know the pixel hashes what it finds there, so the two\n  // surfaces match only if both sides send the same form: pre-hash on both,\n  // or on neither. Meta's pages do not state which side should give way.\n  if (user.userId !== undefined) built.external_id = user.userId;\n  if (context.ip !== undefined) built.client_ip_address = context.ip;\n  if (context.userAgent !== undefined) built.client_user_agent = context.userAgent;\n\n  // Meta forwards these as-is; they are its own cookies in its own format.\n  // Note what is *not* here: an `fbc` synthesised from an `fbclid` in the URL.\n  // Meta documents that construction, and it needs a click timestamp the\n  // library does not have, so building one would be inventing an identifier.\n  const fbp = context.cookies._fbp;\n  if (fbp) built.fbp = fbp;\n\n  const fbc = context.cookies._fbc;\n  if (fbc) built.fbc = fbc;\n\n  return built;\n}\n\n/**\n * Meta's Conversions API.\n *\n * @param credentials - The pixel id and an access token.\n * @param config - Event overrides, the default action source, and Meta's own\n * levers: the API version, a test event code, and Limited Data Use.\n * @returns A provider for `createTracking` from `tracklane/server`.\n *\n * @example\n * ```ts\n * import { createTracking, meta } from 'tracklane/server';\n *\n * const { track } = createTracking({\n *   providers: [meta({ pixelId: '1234567890', accessToken: process.env.META_TOKEN! })],\n * });\n *\n * await track('purchase', order, {\n *   user: { email: order.email },\n *   cookies: request.headers.get('cookie'),\n *   dedupId: order.id,\n *   ip,\n *   userAgent,\n * });\n * ```\n */\nexport function meta(\n  credentials: MetaServerCredentials,\n  config: MetaServerConfig = {},\n): ServerProvider {\n  const { pixelId, accessToken } = credentials;\n  const { actionSource = 'website', apiVersion = DEFAULT_API_VERSION, testEventCode } = config;\n\n  return {\n    name: 'meta',\n    default: 'passthrough',\n    events: { ...CANONICAL_EVENTS, ...config.events },\n\n    async track(\n      name: string,\n      data: EventData,\n      context: ResolvedContext,\n      report: (message: string) => void,\n    ): Promise<void> {\n      const user = await userData(context);\n\n      if (Object.keys(user).length === 0) {\n        // Not withholding on policy grounds: Meta requires at least one\n        // `user_data` parameter and none can be invented. Its own page says\n        // \"at least one of the following\" over the whole list, so a bare\n        // `fbp` qualifies; whether matching is any good with a non-contact\n        // identifier alone is Meta's business, not this adapter's to judge.\n        // Naming the vendor's own field, so searching for the error leads\n        // somewhere.\n        throw new Error(\n          'meta: cannot build user_data, the Conversions API requires at least one identifier. Pass context.user, context.ip with context.userAgent, or the _fbp/_fbc cookies.',\n        );\n      }\n\n      const event: Record<string, unknown> = {\n        event_name: name,\n        // Seconds, where the context carries milliseconds.\n        event_time: Math.floor(context.timestamp / 1000),\n        // Required on every event, which is why the factory carries a default\n        // rather than letting the request fail.\n        action_source: context.source ?? actionSource,\n        user_data: user,\n      };\n\n      // Meta's key is `event_id` here and `eventID` on the pixel, matched\n      // together with `event_name`. Never produced by the library.\n      if (context.dedupId !== undefined) event.event_id = context.dedupId;\n      if (context.url !== undefined) event.event_source_url = context.url;\n\n      const custom = customData(data);\n      if (Object.keys(custom).length > 0) event.custom_data = custom;\n\n      if (config.dataProcessingOptions) {\n        // Meta lists these among its *server event* parameters, alongside\n        // `event_name` and `user_data`, which is why they sit inside the\n        // event. No example on its pages states the level outright.\n        event.data_processing_options = config.dataProcessingOptions;\n\n        if (config.dataProcessingOptionsCountry !== undefined) {\n          event.data_processing_options_country = config.dataProcessingOptionsCountry;\n        }\n        if (config.dataProcessingOptionsState !== undefined) {\n          event.data_processing_options_state = config.dataProcessingOptionsState;\n        }\n      }\n\n      // `context.traits` and `context.consent` map to nothing. Meta has no\n      // person-properties slot on this endpoint, and its consent surface is a\n      // browser command; the processing marking above is a different concept\n      // wearing similar words.\n\n      // Form-encoded, which is the shape Meta's own examples post, and it\n      // keeps the token out of the query string. Unlike GA4, this vendor\n      // offers a body slot for it, so query strings in proxy and APM logs are\n      // avoidable here.\n      const body = new URLSearchParams({\n        data: JSON.stringify([event]),\n        access_token: accessToken,\n      });\n\n      if (testEventCode) body.set('test_event_code', testEventCode);\n\n      const response = await fetch(`${GRAPH}/${apiVersion}/${encodeURIComponent(pixelId)}/events`, {\n        method: 'POST',\n        headers: { 'content-type': 'application/x-www-form-urlencoded' },\n        body,\n      });\n\n      if (!response.ok) {\n        // The message stays free of the payload; the body rides on the\n        // error for a host that asks (ADR-0013). A body that will not read\n        // must not replace the real failure with a different one.\n        const body = await response.text().catch(() => '');\n        throw new VendorResponseError(`meta: the Conversions API answered ${response.status}`, {\n          provider: 'meta',\n          status: response.status,\n          body,\n        });\n      }\n\n      // A body that will not parse must not turn a delivered conversion into\n      // an error, which would tell a host's retry logic to send it again.\n      const result = (await response.json().catch(() => null)) as {\n        messages?: unknown[];\n        fbtrace_id?: string;\n      } | null;\n\n      const messages = result?.messages;\n      if (Array.isArray(messages) && messages.length > 0) {\n        // A caveat about a send that already happened, so it reports rather\n        // than throws. The count and the trace id only: Meta's warnings can\n        // quote the parameter that upset it, and event contents never reach a\n        // host's logs through this library.\n        report(\n          `accepted with ${messages.length} warning(s) from the Conversions API; read them under fbtrace_id ${result?.fbtrace_id ?? 'unknown'} in Events Manager`,\n        );\n      }\n    },\n  };\n}\n","// Through the public entry point, exactly as a provider written elsewhere\n// would import it. A provider that needs something not exported here is\n// telling us the contract is incomplete, which is a conversation rather than\n// a reason to reach inside.\nimport type { EventBinding, EventData, ResolvedContext, ServerProvider } from '../index.js';\nimport { VendorResponseError } from '../index.js';\n\nconst DEFAULT_HOST = 'https://us.i.posthog.com';\n\n/** Credentials for PostHog's Capture API. */\nexport interface PosthogServerCredentials {\n  /** The project API key, the same one the browser SDK is initialised with (`phc_...`). */\n  apiKey: string;\n  /**\n   * Where this project ingests events, when it is not PostHog's default US\n   * Cloud instance — `https://eu.i.posthog.com` for the EU Cloud, or a\n   * self-hosted deployment's own origin. Defaults to `https://us.i.posthog.com`.\n   */\n  host?: string;\n}\n\n/** Optional configuration for the PostHog server provider. */\nexport interface PosthogServerConfig {\n  /**\n   * How this project spells each canonical event. Rarely needed: `capture()`\n   * accepts any string, so the canonical vocabulary already is PostHog's.\n   */\n  events?: Record<string, EventBinding<string>>;\n}\n\n/**\n * The distinct_id lives inside a cookie posthog-js writes by default, named\n * after this project's own api key: `ph_<api_key>_posthog`. Its value is\n * `encodeURIComponent(JSON.stringify({ distinct_id, ... }))`, so it has to be\n * decoded before it parses as JSON.\n *\n * Verified against a live project rather than read off the SDK's source: the\n * cookie was percent-encoded, held `distinct_id` alongside `$device_id` and\n * `$user_state`, and the id parsed out of it matched what the page's own\n * `posthog.get_distinct_id()` returned. A server event sent with it landed on\n * the same person the browser had created, which is the whole point.\n *\n * This is only the anonymous fallback. It is not read when the caller already\n * knows who the visitor is; see the comment in `track` for why.\n */\nfunction anonymousId(cookies: Record<string, string>, apiKey: string): string | undefined {\n  const raw = cookies[`ph_${apiKey}_posthog`];\n  if (!raw) return undefined;\n\n  try {\n    const parsed = JSON.parse(decodeURIComponent(raw)) as { distinct_id?: unknown };\n    return typeof parsed.distinct_id === 'string' ? parsed.distinct_id : undefined;\n  } catch {\n    // A cookie that fails to decode or parse is not this vendor's cookie, or\n    // not this shape of it. Either way, nothing to read.\n    return undefined;\n  }\n}\n\n/**\n * PostHog deduplicates on `uuid`, and the field holds a UUID rather than any\n * string: an invalid one is documented as dropped on ingestion, and has been\n * reported answering 400 instead. Since `dedupId` is whatever the host chose\n * — Meta's `event_id` takes anything, and this library's own example is an\n * order id — forwarding it unchecked would turn a duplicated purchase into no\n * purchase at all.\n *\n * Accepts any RFC 4122 layout rather than v4 alone, because v7 is what a\n * system minting ids today tends to produce.\n */\nconst UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\n\n/**\n * PostHog on the server, through the Capture API.\n *\n * **Deduplicating a retried webhook takes two things, not one.** `dedupId`\n * becomes PostHog's `uuid`, and PostHog collapses events sharing `uuid`, event\n * name, timestamp and `distinct_id` — so a `timestamp` left to default to the\n * clock differs on the retry and nothing is deduplicated. Pin it to a value\n * derived from the order, as below. The `dedupId` itself must be a UUID:\n * anything else is reported through `onError` and sent without the field,\n * because PostHog rejects other shapes rather than ignoring them.\n *\n * Deduplication is also eventual, happening during a background merge, so both\n * rows are visible for a while and a test that counts immediately will fail.\n *\n * @param credentials - The project API key, and the ingestion host for\n * anything other than PostHog's default US Cloud instance.\n * @param config - Rarely needed event name overrides.\n * @returns A provider for `createTracking` from `tracklane/server`.\n *\n * @example\n * ```ts\n * import { createTracking, posthog } from 'tracklane/server';\n *\n * const { track } = createTracking({\n *   providers: [posthog({ apiKey: process.env.POSTHOG_API_KEY! })],\n * });\n *\n * // Both fields come from the order, so the payment provider's second\n * // delivery of the same webhook produces the same event.\n * await track('purchase', order, {\n *   user: { userId: order.userId },\n *   cookies: request.headers.get('cookie'),\n *   dedupId: order.eventId, // a UUID your checkout minted with the order\n *   timestamp: order.paidAt,\n * });\n * ```\n */\nexport function posthog(\n  credentials: PosthogServerCredentials,\n  config: PosthogServerConfig = {},\n): ServerProvider {\n  const { apiKey, host = DEFAULT_HOST } = credentials;\n\n  return {\n    name: 'posthog',\n    // capture() accepts any string as an event name, so the canonical\n    // vocabulary already is PostHog's, and every event passes through\n    // unless the host says otherwise.\n    default: 'passthrough',\n    ...(config.events ? { events: config.events } : {}),\n\n    async track(\n      name: string,\n      data: EventData,\n      context: ResolvedContext,\n      report: (message: string) => void,\n    ): Promise<void> {\n      // PostHog has one identity slot, distinct_id — not two the way GA4 has\n      // a required client_id plus an optional user_id. PostHog's own\n      // guidance is to send the same distinct_id the browser SDK is using\n      // for that visitor, so a known application user id (the same value\n      // handed to `identify()` on the browser) is used first, because it is\n      // what the visitor becomes once they are known. The anonymous id\n      // PostHog's own tag already wrote to its cookie is the fallback for a\n      // visitor nobody has identified yet. Inventing a third value here\n      // would orphan the event: PostHog would accept it and never connect it\n      // to anything, on either side.\n      const id = context.user?.userId ?? anonymousId(context.cookies, apiKey);\n      if (!id) {\n        throw new Error(\n          \"posthog: cannot resolve distinct_id — no user.userId in context and no ph_<api_key>_posthog cookie among the cookies passed in context. Pass user.userId once the visitor is known, or ensure PostHog's browser tag has set its cookie first.\",\n        );\n      }\n\n      const properties: Record<string, unknown> = { ...data };\n      // $set is the server-side slot for what is known *about* the person,\n      // the same job `user_properties` does in GA4's Measurement Protocol\n      // body — kept separate from the identifiers used to match someone.\n      if (context.traits) properties.$set = context.traits;\n\n      // The deduplication key is `uuid`, and it is the whole quartet of\n      // `uuid`, event name, timestamp and distinct_id that PostHog collapses,\n      // eventually, during a background merge. So this field alone does not\n      // make a retry idempotent: the host has to pin `context.timestamp` to\n      // something derived from the order rather than let it default to the\n      // clock. That is documentation's job, not this adapter's.\n      const dedup: { uuid?: string } = {};\n      if (context.dedupId !== undefined) {\n        if (UUID.test(context.dedupId)) {\n          dedup.uuid = context.dedupId;\n        } else {\n          // Sent anyway, without the field. The alternative is the vendor\n          // dropping the whole event over an id shape, which trades a visible\n          // duplicate for an invisible absence.\n          report(\n            'dedupId is not a UUID, so it was not forwarded as uuid: PostHog deduplicates on that field and rejects other shapes, so this event can duplicate on a retry',\n          );\n        }\n      }\n\n      const body = {\n        api_key: apiKey,\n        event: name,\n        distinct_id: id,\n        ...dedup,\n        // context.url, context.ip and context.userAgent are not forwarded\n        // either. PostHog documents override properties for some of these\n        // on other surfaces, but nothing found here confirms one for this\n        // endpoint with enough certainty to translate rather than guess, so\n        // they are left unmapped. context.consent and context.source are\n        // Google's and Meta's vocabularies respectively, and this endpoint\n        // documents a slot for neither.\n        properties,\n        timestamp: new Date(context.timestamp).toISOString(),\n      };\n\n      const response = await fetch(`${host}/i/v0/e/`, {\n        method: 'POST',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify(body),\n      });\n\n      if (!response.ok) {\n        // The message stays free of the payload; the body rides on the\n        // error for a host that asks (ADR-0013). A body that will not read\n        // must not replace the real failure with a different one.\n        const body = await response.text().catch(() => '');\n        throw new VendorResponseError(`posthog: the capture endpoint answered ${response.status}`, {\n          provider: 'posthog',\n          status: response.status,\n          body,\n        });\n      }\n    },\n  };\n}\n","import { assertUniqueProviders, makeReporter, messageOf, resolveEvent } from './dispatch.js';\n\nexport {\n  type Ga4ServerConfig,\n  type Ga4ServerCredentials,\n  ga4,\n} from './providers/ga4.server.js';\nexport {\n  type MetaServerConfig,\n  type MetaServerCredentials,\n  meta,\n} from './providers/meta.server.js';\nexport {\n  type PosthogServerConfig,\n  type PosthogServerCredentials,\n  posthog,\n} from './providers/posthog.server.js';\n\nimport type {\n  ActionSource,\n  ConsentState,\n  EventBinding,\n  EventData,\n  ProviderDefault,\n  TrackingError,\n  UserData,\n} from './vocabulary.js';\n\n/**\n * Everything a conversion API needs beyond the event itself: who the person\n * is, when it happened, and where it was observed.\n *\n * None of this is \"what happened\", which is why it does not travel in the\n * event data: putting it there would leak identity into the pass-through\n * event params of the vendors that forward the payload as-is.\n */\nexport interface EventContext {\n  /** The person's identity, the server-side counterpart to `identify()` on the browser. */\n  user?: UserData;\n  /**\n   * The request's raw `Cookie` header, or an already-parsed map.\n   *\n   * These are cookies the vendors' own browser tags set. This library never\n   * writes one. On the server each adapter reads the cookies belonging to\n   * its own vendor: Meta forwards its value as-is, Google's holds several\n   * things at once and has to be opened. That knowledge lives in the\n   * adapters; the core only splits `name=value; name=value` into pairs.\n   *\n   * **It splits, it does not interpret.** Values are handed over exactly as\n   * they appear, with no percent-decoding. The cookies these vendors set do\n   * not need it; a host reading some other cookie should decode it itself.\n   */\n  cookies?: string | Record<string, string> | null;\n  /** Ties this send to a browser hit. Never invented by the library. */\n  dedupId?: string;\n  /**\n   * When the conversion actually happened. Defaults to now.\n   *\n   * A webhook arrives after the fact and LinkedIn rejects conversions older\n   * than 90 days, so reporting \"now\" for everything would quietly distort\n   * attribution.\n   */\n  timestamp?: number | Date;\n  /** Overrides the factory default. Meta requires it on every event. */\n  source?: ActionSource;\n  /** The page the conversion happened on. Meta's Conversions API reads it as `event_source_url`. */\n  url?: string;\n  /** The visitor's IP. Meta's Conversions API reads it as one of the identifiers in `user_data`. */\n  ip?: string;\n  /** The visitor's user agent. Meta's Conversions API reads it alongside `ip`. */\n  userAgent?: string;\n  /** What is known *about* the person: GA4 user properties, PostHog `$set`. */\n  traits?: Record<string, unknown>;\n  /**\n   * Travels inside the event, for the vendors that document such a field.\n   * Today that is GA4's Measurement Protocol, and it reads two of the\n   * signals; the others have no slot and ignore it.\n   */\n  consent?: ConsentState;\n}\n\n/** The context an adapter receives, with the ambiguity resolved. */\nexport interface ResolvedContext extends Omit<EventContext, 'cookies' | 'timestamp'> {\n  /** The request's cookies, already split into a `name → value` map. */\n  cookies: Record<string, string>;\n  /** Epoch milliseconds. Adapters convert to their vendor's spelling. */\n  timestamp: number;\n}\n\n/**\n * A destination for server events.\n *\n * `track` may throw, on a non-2xx or where a vendor documents a\n * precondition the event cannot meet. The dispatcher isolates and reports\n * it, so adapters stay honest and loud.\n *\n * `report` is for a caveat about a request that already succeeded. It does\n * not throw: by then the send happened, and throwing would tell a host's\n * retry logic to resend a delivered conversion.\n */\nexport interface ServerProvider<Target = string> {\n  /** The vendor's fixed name. Registering one twice is an error. */\n  name: string;\n  /** What happens to a canonical event this vendor has no binding for. */\n  default: ProviderDefault;\n  /** How this vendor spells each canonical event. */\n  events?: Record<string, EventBinding<Target>>;\n  /** Sends one event to this vendor's conversion API. May throw, or call `report` for a caveat. */\n  track(\n    name: Target,\n    data: EventData,\n    context: ResolvedContext,\n    report: (message: string) => void,\n  ): Promise<void>;\n}\n\n/** Options accepted by {@link createTracking}. */\nexport interface ServerTrackingOptions {\n  /** The vendors to send every event to. Registering the same `name` twice throws. */\n  providers: readonly ServerProvider[];\n  /**\n   * The one diagnostic channel. Without it the library is silent, exactly as\n   * a hand-written vendor call is.\n   */\n  onError?: (error: TrackingError) => void;\n}\n\n/** What {@link createTracking} returns. */\nexport interface ServerTracking {\n  /**\n   * Sends one event to every configured conversion API.\n   *\n   * Resolves once every provider has settled and never rejects: one vendor\n   * being down is not the caller's failure to handle. Awaiting is about the\n   * request surviving a serverless runtime, not about delivery being\n   * guaranteed.\n   */\n  track(name: string, data?: EventData, context?: EventContext): Promise<void>;\n}\n\n/** `name=value; name=value`, the shape of a `Cookie` header. */\nfunction parseCookies(\n  cookies: string | Record<string, string> | null | undefined,\n): Record<string, string> {\n  if (!cookies) return {};\n  if (typeof cookies !== 'string') return cookies;\n\n  const parsed: Record<string, string> = {};\n\n  for (const pair of cookies.split(';')) {\n    const separator = pair.indexOf('=');\n    if (separator < 1) continue;\n\n    const name = pair.slice(0, separator).trim();\n    // Cookie values may contain `=`, so only the first one separates.\n    if (name) parsed[name] = pair.slice(separator + 1).trim();\n  }\n\n  return parsed;\n}\n\n/**\n * Creates the server tracking surface.\n *\n * There is no `identify` here and nothing is held between calls: a server\n * instance is shared by every request, so a retained identity would attach\n * one visitor to another visitor's conversion. Identity travels with the\n * call, which is also what every conversion API expects.\n *\n * There is no `consent` call either. Consent commands are properties of a\n * vendor's on-page tag, and a server request has no tag. The one vendor that\n * accepts consent server-side reads it from the context.\n *\n * @param options - The providers to send to, and an optional error channel.\n * @returns The `track` call.\n *\n * @example\n * ```ts\n * import { createTracking, ga4 } from 'tracklane/server';\n *\n * const { track } = createTracking({\n *   providers: [ga4({ measurementId: 'G-XXXXXXX', apiSecret })],\n * });\n *\n * await track('purchase', order, { cookies: request.headers.get('cookie') });\n * ```\n */\nexport function createTracking(options: ServerTrackingOptions): ServerTracking {\n  const { providers } = options;\n  assertUniqueProviders(providers);\n\n  const report = makeReporter(options.onError);\n\n  return {\n    async track(name, data = {}, context = {}) {\n      const { cookies, timestamp, ...rest } = context;\n      const resolved: ResolvedContext = {\n        ...rest,\n        cookies: parseCookies(cookies),\n        timestamp: timestamp instanceof Date ? timestamp.getTime() : (timestamp ?? Date.now()),\n      };\n\n      const sends = providers.map(async (provider) => {\n        const target = resolveEvent(provider, name);\n        if (target === undefined) return;\n\n        try {\n          await provider.track(target, data, resolved, (message) => {\n            report({ provider: provider.name, event: name, severity: 'warning', message });\n          });\n        } catch (cause) {\n          report({\n            provider: provider.name,\n            event: name,\n            severity: 'error',\n            message: messageOf(cause),\n            cause,\n          });\n        }\n      });\n\n      await Promise.all(sends);\n    },\n  };\n}\n"],"mappings":";;;AAaA,MAAM,WAAW;;;;;;;;;AAuBjB,SAAS,UAAU,SAAqD;CACtE,MAAM,MAAM,QAAQ;CACpB,IAAI,CAAC,KAAK,OAAO,KAAA;CAEjB,MAAM,QAAQ,IAAI,MAAM,GAAG;CAC3B,IAAI,MAAM,SAAS,GAAG,OAAO,KAAA;CAE7B,OAAO,MAAM,MAAM,EAAE,CAAC,CAAC,KAAK,GAAG;AACjC;;;;;;;;;;;;;;;;;AAkBA,SAAS,UAAU,SAAiC,eAA2C;CAK7F,MAAM,UADQ,QAAQ,OAAO,cAAc,QAAQ,OAAO,EAAE,IACvC,EAAE,MAAM,GAAG,CAAC,CAAC;CAClC,IAAI,CAAC,SAAS,OAAO,KAAA;CAErB,MAAM,SAAS,UAAU,KAAK,OAAO;CACrC,IAAI,QAAQ,OAAO,OAAO;CAG1B,OAAO,QAAQ,KAAK,OAAO,IAAI,UAAU,KAAA;AAC3C;;;;;;AAOA,SAAS,YAAY,OAAqE;CACxF,IAAI,CAAC,OAAO,OAAO,KAAA;CAEnB,MAAM,OAA+B,CAAC;CACtC,IAAI,MAAM,cAAc,KAAK,eAAe,MAAM,aAAa,YAAY;CAC3E,IAAI,MAAM,oBAAoB,KAAK,qBAAqB,MAAM,mBAAmB,YAAY;CAE7F,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,KAAA;AAC/C;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,IACd,aACA,SAA0B,CAAC,GACX;CAChB,MAAM,EAAE,eAAe,cAAc;CAErC,OAAO;EACL,MAAM;EACN,SAAS;EACT,GAAI,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;EAEjD,MAAM,MACJ,MACA,MACA,SACA,QACe;GACf,MAAM,WAAW,UAAU,QAAQ,OAAO;GAC1C,IAAI,CAAC,UAMH,MAAM,IAAI,MACR,4HACF;GAGF,MAAM,UAAU,UAAU,QAAQ,SAAS,aAAa;GACxD,IAAI,CAAC,SACH,OACE,yGACF;GAGF,MAAM,SAAkC,EAAE,GAAG,KAAK;GAClD,IAAI,SAAS;IACX,OAAO,aAAa;IAGpB,OAAO,uBAAuB;GAChC;GAKA,MAAM,OAAgC;IACpC,WAAW;IACX,kBAAkB,QAAQ,YAAY;IACtC,QAAQ,CAAC;KAAE;KAAM;IAAO,CAAC;GAC3B;GAEA,IAAI,QAAQ,MAAM,WAAW,KAAA,GAAW,KAAK,UAAU,QAAQ,KAAK;GAEpE,IAAI,QAAQ,QAOV,KAAK,kBAAkB,OAAO,YAC5B,OAAO,QAAQ,QAAQ,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACzE;GAGF,MAAM,UAAU,YAAY,QAAQ,OAAO;GAC3C,IAAI,SAAS,KAAK,UAAU;GAK5B,MAAM,MAAM,GAAG,SAAS,kBAAkB,mBAAmB,aAAa,EAAE,cAAc,mBAAmB,SAAS;GAEtH,MAAM,WAAW,MAAM,MAAM,KAAK;IAChC,QAAQ;IACR,SAAS,EAAE,gBAAgB,mBAAmB;IAC9C,MAAM,KAAK,UAAU,IAAI;GAC3B,CAAC;GAED,IAAI,CAAC,SAAS,IAAI;IAIhB,MAAM,OAAO,MAAM,SAAS,KAAK,CAAC,CAAC,YAAY,EAAE;IACjD,MAAM,IAAI,oBAAoB,0CAA0C,SAAS,UAAU;KACzF,UAAU;KACV,QAAQ,SAAS;KACjB;IACF,CAAC;GACH;EACF;CACF;AACF;;;AC9LA,MAAM,QAAQ;;;;;;AAOd,MAAM,sBAAsB;;;;;;AAO5B,MAAM,mBAAyD;CAC7D,WAAW;CACX,WAAW;CACX,QAAQ;CACR,aAAa;CACb,iBAAiB;CACjB,gBAAgB;CAChB,kBAAkB;CAClB,UAAU;CACV,SAAS;CACT,eAAe;AACjB;;;;;;;AAoDA,eAAe,OAAO,OAAgC;CACpD,MAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC;CAEpF,OAAO,MAAM,KAAK,IAAI,WAAW,MAAM,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;AACjG;;;;;;;;;;;;;;;;;AAkBA,MAAM,kBAAkB,UAA0B,MAAM,KAAK,CAAC,CAAC,YAAY;;;;;;AAO3E,MAAM,kBAAkB,UAA0B,MAAM,QAAQ,OAAO,EAAE,CAAC,CAAC,QAAQ,OAAO,EAAE;;AAG5F,MAAM,iBAAiB,UACrB,MACG,KAAK,CAAC,CACN,YAAY,CAAC,CACb,QAAQ,kBAAkB,EAAE;;;;;;;AAQjC,SAAS,SAAS,OAAwD;CACxE,OAAO,MAAM,KAAK,SAAS;EACzB,MAAM,UAAmC,CAAC;EAE1C,IAAI,KAAK,YAAY,KAAA,GAAW,QAAQ,KAAK,KAAK;EAClD,IAAI,KAAK,aAAa,KAAA,GAAW,QAAQ,WAAW,KAAK;EACzD,IAAI,KAAK,UAAU,KAAA,GAAW,QAAQ,aAAa,KAAK;EAExD,OAAO;CACT,CAAC;AACH;;;;;;;;;;AAWA,SAAS,WAAW,MAA0C;CAC5D,MAAM,EAAE,OAAO,gBAAgB,eAAe,GAAG,SAAS;CAC1D,MAAM,SAAkC,EAAE,GAAG,KAAK;CAElD,IAAI,kBAAkB,KAAA,GAAW,OAAO,WAAW;CACnD,IAAI,OAAO,OAAO,WAAW,SAAS,KAAK;CAE3C,OAAO;AACT;;;;;;;;;;AAWA,eAAe,SAAS,SAA2D;CACjF,MAAM,OAAO,QAAQ,QAAQ,CAAC;CAC9B,MAAM,QAAgC,CAAC;CAEvC,MAAM,SAA6E;EACjF;GAAC;GAAM,KAAK;GAAO;EAAc;EACjC;GAAC;GAAM,KAAK;GAAO;EAAc;EACjC;GAAC;GAAM,KAAK;GAAW;EAAa;EACpC;GAAC;GAAM,KAAK;GAAU;EAAa;CACrC;CAEA,KAAK,MAAM,CAAC,OAAO,KAAK,cAAc,QAAQ;EAC5C,IAAI,QAAQ,KAAA,GAAW;EAEvB,MAAM,aAAa,UAAU,GAAG;EAGhC,IAAI,CAAC,YAAY;EAEjB,MAAM,SAAS,MAAM,OAAO,UAAU;CACxC;CAQA,IAAI,KAAK,WAAW,KAAA,GAAW,MAAM,cAAc,KAAK;CACxD,IAAI,QAAQ,OAAO,KAAA,GAAW,MAAM,oBAAoB,QAAQ;CAChE,IAAI,QAAQ,cAAc,KAAA,GAAW,MAAM,oBAAoB,QAAQ;CAMvE,MAAM,MAAM,QAAQ,QAAQ;CAC5B,IAAI,KAAK,MAAM,MAAM;CAErB,MAAM,MAAM,QAAQ,QAAQ;CAC5B,IAAI,KAAK,MAAM,MAAM;CAErB,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,SAAgB,KACd,aACA,SAA2B,CAAC,GACZ;CAChB,MAAM,EAAE,SAAS,gBAAgB;CACjC,MAAM,EAAE,eAAe,WAAW,aAAa,qBAAqB,kBAAkB;CAEtF,OAAO;EACL,MAAM;EACN,SAAS;EACT,QAAQ;GAAE,GAAG;GAAkB,GAAG,OAAO;EAAO;EAEhD,MAAM,MACJ,MACA,MACA,SACA,QACe;GACf,MAAM,OAAO,MAAM,SAAS,OAAO;GAEnC,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,WAAW,GAQ/B,MAAM,IAAI,MACR,qKACF;GAGF,MAAM,QAAiC;IACrC,YAAY;IAEZ,YAAY,KAAK,MAAM,QAAQ,YAAY,GAAI;IAG/C,eAAe,QAAQ,UAAU;IACjC,WAAW;GACb;GAIA,IAAI,QAAQ,YAAY,KAAA,GAAW,MAAM,WAAW,QAAQ;GAC5D,IAAI,QAAQ,QAAQ,KAAA,GAAW,MAAM,mBAAmB,QAAQ;GAEhE,MAAM,SAAS,WAAW,IAAI;GAC9B,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC,SAAS,GAAG,MAAM,cAAc;GAExD,IAAI,OAAO,uBAAuB;IAIhC,MAAM,0BAA0B,OAAO;IAEvC,IAAI,OAAO,iCAAiC,KAAA,GAC1C,MAAM,kCAAkC,OAAO;IAEjD,IAAI,OAAO,+BAA+B,KAAA,GACxC,MAAM,gCAAgC,OAAO;GAEjD;GAWA,MAAM,OAAO,IAAI,gBAAgB;IAC/B,MAAM,KAAK,UAAU,CAAC,KAAK,CAAC;IAC5B,cAAc;GAChB,CAAC;GAED,IAAI,eAAe,KAAK,IAAI,mBAAmB,aAAa;GAE5D,MAAM,WAAW,MAAM,MAAM,GAAG,MAAM,GAAG,WAAW,GAAG,mBAAmB,OAAO,EAAE,UAAU;IAC3F,QAAQ;IACR,SAAS,EAAE,gBAAgB,oCAAoC;IAC/D;GACF,CAAC;GAED,IAAI,CAAC,SAAS,IAAI;IAIhB,MAAM,OAAO,MAAM,SAAS,KAAK,CAAC,CAAC,YAAY,EAAE;IACjD,MAAM,IAAI,oBAAoB,sCAAsC,SAAS,UAAU;KACrF,UAAU;KACV,QAAQ,SAAS;KACjB;IACF,CAAC;GACH;GAIA,MAAM,SAAU,MAAM,SAAS,KAAK,CAAC,CAAC,YAAY,IAAI;GAKtD,MAAM,WAAW,QAAQ;GACzB,IAAI,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,GAK/C,OACE,iBAAiB,SAAS,OAAO,mEAAmE,QAAQ,cAAc,UAAU,mBACtI;EAEJ;CACF;AACF;;;ACpWA,MAAM,eAAe;;;;;;;;;;;;;;;;AAsCrB,SAAS,YAAY,SAAiC,QAAoC;CACxF,MAAM,MAAM,QAAQ,MAAM,OAAO;CACjC,IAAI,CAAC,KAAK,OAAO,KAAA;CAEjB,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,mBAAmB,GAAG,CAAC;EACjD,OAAO,OAAO,OAAO,gBAAgB,WAAW,OAAO,cAAc,KAAA;CACvE,QAAQ;EAGN;CACF;AACF;;;;;;;;;;;;AAaA,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCb,SAAgB,QACd,aACA,SAA8B,CAAC,GACf;CAChB,MAAM,EAAE,QAAQ,OAAO,iBAAiB;CAExC,OAAO;EACL,MAAM;EAIN,SAAS;EACT,GAAI,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;EAEjD,MAAM,MACJ,MACA,MACA,SACA,QACe;GAWf,MAAM,KAAK,QAAQ,MAAM,UAAU,YAAY,QAAQ,SAAS,MAAM;GACtE,IAAI,CAAC,IACH,MAAM,IAAI,MACR,+OACF;GAGF,MAAM,aAAsC,EAAE,GAAG,KAAK;GAItD,IAAI,QAAQ,QAAQ,WAAW,OAAO,QAAQ;GAQ9C,MAAM,QAA2B,CAAC;GAClC,IAAI,QAAQ,YAAY,KAAA,GACtB,IAAI,KAAK,KAAK,QAAQ,OAAO,GAC3B,MAAM,OAAO,QAAQ;QAKrB,OACE,6JACF;GAIJ,MAAM,OAAO;IACX,SAAS;IACT,OAAO;IACP,aAAa;IACb,GAAG;IAQH;IACA,WAAW,IAAI,KAAK,QAAQ,SAAS,CAAC,CAAC,YAAY;GACrD;GAEA,MAAM,WAAW,MAAM,MAAM,GAAG,KAAK,WAAW;IAC9C,QAAQ;IACR,SAAS,EAAE,gBAAgB,mBAAmB;IAC9C,MAAM,KAAK,UAAU,IAAI;GAC3B,CAAC;GAED,IAAI,CAAC,SAAS,IAAI;IAIhB,MAAM,OAAO,MAAM,SAAS,KAAK,CAAC,CAAC,YAAY,EAAE;IACjD,MAAM,IAAI,oBAAoB,0CAA0C,SAAS,UAAU;KACzF,UAAU;KACV,QAAQ,SAAS;KACjB;IACF,CAAC;GACH;EACF;CACF;AACF;;;;AClEA,SAAS,aACP,SACwB;CACxB,IAAI,CAAC,SAAS,OAAO,CAAC;CACtB,IAAI,OAAO,YAAY,UAAU,OAAO;CAExC,MAAM,SAAiC,CAAC;CAExC,KAAK,MAAM,QAAQ,QAAQ,MAAM,GAAG,GAAG;EACrC,MAAM,YAAY,KAAK,QAAQ,GAAG;EAClC,IAAI,YAAY,GAAG;EAEnB,MAAM,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC,CAAC,KAAK;EAE3C,IAAI,MAAM,OAAO,QAAQ,KAAK,MAAM,YAAY,CAAC,CAAC,CAAC,KAAK;CAC1D;CAEA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,SAAgB,eAAe,SAAgD;CAC7E,MAAM,EAAE,cAAc;CACtB,sBAAsB,SAAS;CAE/B,MAAM,SAAS,aAAa,QAAQ,OAAO;CAE3C,OAAO,EACL,MAAM,MAAM,MAAM,OAAO,CAAC,GAAG,UAAU,CAAC,GAAG;EACzC,MAAM,EAAE,SAAS,WAAW,GAAG,SAAS;EACxC,MAAM,WAA4B;GAChC,GAAG;GACH,SAAS,aAAa,OAAO;GAC7B,WAAW,qBAAqB,OAAO,UAAU,QAAQ,IAAK,aAAa,KAAK,IAAI;EACtF;EAEA,MAAM,QAAQ,UAAU,IAAI,OAAO,aAAa;GAC9C,MAAM,SAAS,aAAa,UAAU,IAAI;GAC1C,IAAI,WAAW,KAAA,GAAW;GAE1B,IAAI;IACF,MAAM,SAAS,MAAM,QAAQ,MAAM,WAAW,YAAY;KACxD,OAAO;MAAE,UAAU,SAAS;MAAM,OAAO;MAAM,UAAU;MAAW;KAAQ,CAAC;IAC/E,CAAC;GACH,SAAS,OAAO;IACd,OAAO;KACL,UAAU,SAAS;KACnB,OAAO;KACP,UAAU;KACV,SAAS,UAAU,KAAK;KACxB;IACF,CAAC;GACH;EACF,CAAC;EAED,MAAM,QAAQ,IAAI,KAAK;CACzB,EACF;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tracklane",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "One interface between your application and every tool that receives events, for the browser and server. GA4, Meta and PostHog today; LinkedIn and X next.",
   "keywords": [
     "analytics",
@@ -52,8 +52,7 @@
     "node": ">=22.14.0"
   },
   "publishConfig": {
-    "access": "public",
-    "provenance": true
+    "access": "public"
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "0.18.5",