funnel

.claude/CLAUDE.md

@@ -1,170 +0,0 @@
-# CLAUDE.md
-
-NEVER CALL FORMAT! WE'LL FORMAT IN THE FUTURE WHEN WE HAVE MERGED ALL BIG PRS!
-
-This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
-
-## Project Overview
-
-Openpanel is an open-source web/product analytics platform (Mixpanel alternative). It's a **pnpm monorepo** with apps, packages, tooling, and SDKs.
-
-## Common Commands
-
-```bash
-# Development
-pnpm dev                    # Run all services (api, worker, dashboard) in parallel
-pnpm dev:public             # Run public/docs site only
-pnpm dock:up / dock:down    # Start/stop Docker (PostgreSQL, Redis, ClickHouse)
-
-# Code quality
-pnpm check                  # Lint check (Biome via Ultracite)
-pnpm fix                    # Auto-fix lint/format issues
-pnpm typecheck              # Typecheck all packages
-
-# Testing
-pnpm test                   # Run all tests (vitest)
-pnpm vitest run <path>      # Run a single test file
-# Workspace: packages/* and apps/* (excluding apps/start)
-
-# Database
-pnpm codegen                # Generate Prisma types + geo data
-pnpm migrate                # Run Prisma migrations (dev)
-pnpm migrate:deploy         # Deploy migrations (production - never run this)
-
-# Docker utilities
-pnpm dock:ch                # ClickHouse CLI
-pnpm dock:redis             # Redis CLI
-```
-
-## Architecture
-
-### Apps
-
-| App | Stack | Port | Purpose |
-|-----|-------|------|---------|
-| `apps/api` | Fastify + tRPC | 3333 | REST/RPC API server |
-| `apps/start` | TanStack Start (Vite + React 19) | 3000 | Dashboard SPA |
-| `apps/public` | Next.js 16 + Fumadocs | - | Marketing/docs site |
-| `apps/worker` | Express + BullMQ | 9999 | Background job processor |
-
-### Key Packages
-
-| Package | Purpose |
-|---------|---------|
-| `packages/db` | Prisma ORM (PostgreSQL) + ClickHouse client |
-| `packages/trpc` | tRPC router definitions, context, middleware |
-| `packages/auth` | Authentication (Arctic OAuth, Oslo sessions, argon2) |
-| `packages/queue` | BullMQ + GroupMQ job queue definitions |
-| `packages/redis` | Redis client + LRU caching |
-| `packages/validation` | Zod schemas shared across apps |
-| `packages/common` | Shared utilities (date-fns, ua-parser, nanoid) |
-| `packages/email` | React Email templates via Resend |
-| `packages/sdks/*` | Client SDKs (web, react, next, express, react-native, etc.) |
-
-### Data Flow
-
-1. **Event ingestion**: Client SDKs → `apps/api` (track routes) → Redis queue
-2. **Processing**: `apps/worker` picks up jobs from BullMQ, batches events into ClickHouse
-3. **Dashboard queries**: `apps/start` → tRPC → `apps/api` → ClickHouse (analytics) / PostgreSQL (config)
-4. **Real-time**: WebSocket via Fastify, pub/sub via Redis
-
-### Three-Database Strategy
-
-- **PostgreSQL**: Relational data (users, orgs, projects, dashboards). Managed by Prisma.
-- **ClickHouse**: Analytics event storage (OLAP). High-volume reads/writes.
-- **Redis**: Caching, job queues (BullMQ), rate limiting, pub/sub.
-
-### Dashboard (apps/start)
-
-Uses TanStack Router with file-based routing (`src/routes/`). State management via Redux Toolkit. UI built on Radix primitives + Tailwind v4. Charts via Recharts. Modals in `src/modals/`.
-
-### API (apps/api)
-
-Fastify server with tRPC integration. Route files in `src/routes/`. Hooks for IP extraction, request logging, timestamps. Built with `tsdown`.
----
-
-## Core Principles
-
-Write code that is **accessible, performant, type-safe, and maintainable**. Focus on clarity and explicit intent over brevity.
-
-### Type Safety & Explicitness
-
-- Use explicit types for function parameters and return values when they enhance clarity
-- Prefer `unknown` over `any` when the type is genuinely unknown
-- Use const assertions (`as const`) for immutable values and literal types
-- Leverage TypeScript's type narrowing instead of type assertions
-- Use meaningful variable names instead of magic numbers - extract constants with descriptive names
-
-### Modern JavaScript/TypeScript
-
-- Use arrow functions for callbacks and short functions
-- Prefer `for...of` loops over `.forEach()` and indexed `for` loops
-- Use optional chaining (`?.`) and nullish coalescing (`??`) for safer property access
-- Prefer template literals over string concatenation
-- Use destructuring for object and array assignments
-- Use `const` by default, `let` only when reassignment is needed, never `var`
-
-### Async & Promises
-
-- Always `await` promises in async functions - don't forget to use the return value
-- Use `async/await` syntax instead of promise chains for better readability
-- Handle errors appropriately in async code with try-catch blocks
-- Don't use async functions as Promise executors
-
-### React & JSX
-
-- Use function components over class components
-- Call hooks at the top level only, never conditionally
-- Specify all dependencies in hook dependency arrays correctly
-- Use the `key` prop for elements in iterables (prefer unique IDs over array indices)
-- Nest children between opening and closing tags instead of passing as props
-- Don't define components inside other components
-- Use semantic HTML and ARIA attributes for accessibility:
-  - Provide meaningful alt text for images
-  - Use proper heading hierarchy
-  - Add labels for form inputs
-  - Include keyboard event handlers alongside mouse events
-  - Use semantic elements (`<button>`, `<nav>`, etc.) instead of divs with roles
-
-### Error Handling & Debugging
-
-- Remove `console.log`, `debugger`, and `alert` statements from production code
-- Throw `Error` objects with descriptive messages, not strings or other values
-- Use `try-catch` blocks meaningfully - don't catch errors just to rethrow them
-- Prefer early returns over nested conditionals for error cases
-
-### Code Organization
-
-- Keep functions focused and under reasonable cognitive complexity limits
-- Extract complex conditions into well-named boolean variables
-- Use early returns to reduce nesting
-- Prefer simple conditionals over nested ternary operators
-- Group related code together and separate concerns
-
-### Security
-
-- Add `rel="noopener"` when using `target="_blank"` on links
-- Avoid `dangerouslySetInnerHTML` unless absolutely necessary
-- Don't use `eval()` or assign directly to `document.cookie`
-- Validate and sanitize user input
-
-### Performance
-
-- Avoid spread syntax in accumulators within loops
-- Use top-level regex literals instead of creating them in loops
-- Prefer specific imports over namespace imports
-- Avoid barrel files (index files that re-export everything)
-- Use proper image components (e.g., Next.js `<Image>`) over `<img>` tags
-
-### Framework-Specific Guidance
-
-**Next.js:**
-- Use Next.js `<Image>` component for images
-- Use `next/head` or App Router metadata API for head elements
-- Use Server Components for async data fetching instead of async Client Components
-
-**React 19+:**
-- Use ref as a prop instead of `React.forwardRef`
-
-**Solid/Svelte/Vue/Qwik:**
-- Use `class` and `for` attributes (not `className` or `htmlFor`)

.gitea/workflows/docker-build-api.yml

@@ -1,55 +0,0 @@
-name: Build and Push API
-
-on:
-  push:
-    branches: ["*"]
-    tags: ["v*"]
-  pull_request:
-    branches: [main]
-
-env:
-  REGISTRY: git.zias.be
-  OWNER: zias
-
-jobs:
-  build-api:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Log in to registry
-        if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ env.OWNER }}
-          password: ${{ secrets.REGISTRY_TOKEN }}
-
-      - name: Extract metadata
-        id: meta
-        uses: docker/metadata-action@v5
-        with:
-          images: ${{ env.REGISTRY }}/${{ env.OWNER }}/openpanel-api
-          tags: |
-            type=raw,value=latest,enable={{is_default_branch}}
-            type=sha,prefix=sha-,format=short
-            type=semver,pattern={{version}}
-
-      - name: Build and push
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          file: apps/api/Dockerfile
-          target: runner
-          platforms: linux/amd64
-          push: ${{ github.event_name != 'pull_request' }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          provenance: false
-          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ env.OWNER }}/openpanel-api:buildcache
-          cache-to: ${{ github.event_name != 'pull_request' && format('type=registry,ref={0}/{1}/openpanel-api:buildcache,mode=max,image-manifest=true,oci-mediatypes=true', env.REGISTRY, env.OWNER) || '' }}
-          build-args: |-
-            DATABASE_URL=postgresql://postgres:postgres@localhost:5432/postgres

.gitea/workflows/docker-build-dashboard.yml

@@ -1,53 +0,0 @@
-name: Build and Push Dashboard
-
-on:
-  push:
-    branches: ["*"]
-    tags: ["v*"]
-  pull_request:
-    branches: [main]
-
-env:
-  REGISTRY: git.zias.be
-  OWNER: zias
-
-jobs:
-  build-dashboard:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Log in to registry
-        if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ env.OWNER }}
-          password: ${{ secrets.REGISTRY_TOKEN }}
-
-      - name: Extract metadata
-        id: meta
-        uses: docker/metadata-action@v5
-        with:
-          images: ${{ env.REGISTRY }}/${{ env.OWNER }}/openpanel-dashboard
-          tags: |
-            type=raw,value=latest,enable={{is_default_branch}}
-            type=sha,prefix=sha-,format=short
-            type=semver,pattern={{version}}
-
-      - name: Build and push
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          file: apps/start/Dockerfile
-          target: runner
-          platforms: linux/amd64
-          push: ${{ github.event_name != 'pull_request' }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          provenance: false
-          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ env.OWNER }}/openpanel-dashboard:buildcache
-          cache-to: ${{ github.event_name != 'pull_request' && format('type=registry,ref={0}/{1}/openpanel-dashboard:buildcache,mode=max,image-manifest=true,oci-mediatypes=true', env.REGISTRY, env.OWNER) || '' }}

.gitea/workflows/docker-build-worker.yml

@@ -1,55 +0,0 @@
-name: Build and Push Worker
-
-on:
-  push:
-    branches: ["*"]
-    tags: ["v*"]
-  pull_request:
-    branches: [main]
-
-env:
-  REGISTRY: git.zias.be
-  OWNER: zias
-
-jobs:
-  build-worker:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Log in to registry
-        if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ env.OWNER }}
-          password: ${{ secrets.REGISTRY_TOKEN }}
-
-      - name: Extract metadata
-        id: meta
-        uses: docker/metadata-action@v5
-        with:
-          images: ${{ env.REGISTRY }}/${{ env.OWNER }}/openpanel-worker
-          tags: |
-            type=raw,value=latest,enable={{is_default_branch}}
-            type=sha,prefix=sha-,format=short
-            type=semver,pattern={{version}}
-
-      - name: Build and push
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          file: apps/worker/Dockerfile
-          target: runner
-          platforms: linux/amd64
-          push: ${{ github.event_name != 'pull_request' }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          provenance: false
-          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ env.OWNER }}/openpanel-worker:buildcache
-          cache-to: ${{ github.event_name != 'pull_request' && format('type=registry,ref={0}/{1}/openpanel-worker:buildcache,mode=max,image-manifest=true,oci-mediatypes=true', env.REGISTRY, env.OWNER) || '' }}
-          build-args: |-
-            DATABASE_URL=postgresql://postgres:postgres@localhost:5432/postgres

.github/workflows/docker-build.yml

@@ -3,37 +3,54 @@ name: Docker Build and Push
 on:
   workflow_dispatch:
   push:
-    paths-ignore:
+    # branches: [ "main" ]
-      # README and docs
+    paths:
-      - "**/README*"
+      - "apps/api/**"
-      - "**/readme*"
+      - "apps/worker/**"
-      - "**/*.md"
-      - "**/docs/**"
-      - "**/CHANGELOG*"
-      - "**/LICENSE*"
-      # Test files
-      - "**/*.test.*"
-      - "**/*.spec.*"
-      - "**/__tests__/**"
-      - "**/tests/**"
-      # SDKs (published separately)
-      - "packages/sdks/**"
-      # Public app (docs/marketing, not part of Docker deploy)
       - "apps/public/**"
-      # Dev / tooling
+      - "packages/**"
-      - "**/.vscode/**"
+      - "!packages/sdks/**"
-      - "**/.cursor/**"
+      - "**Dockerfile"
-      - "**/.env.example"
+      - ".github/workflows/**"
-      - "**/.env.*.example"
-      - "**/.gitignore"
-      - "**/.eslintignore"
-      - "**/.prettierignore"
 
 env:
   repo_owner: "openpanel-dev"
 
 jobs:
+  changes:
+    runs-on: ubuntu-latest
+    outputs:
+      api: ${{ steps.filter.outputs.api }}
+      worker: ${{ steps.filter.outputs.worker }}
+      public: ${{ steps.filter.outputs.public }}
+      dashboard: ${{ steps.filter.outputs.dashboard }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dorny/paths-filter@v2
+        id: filter
+        with:
+          base: "main"
+          filters: |
+            api:
+              - 'apps/api/**'
+              - 'packages/**'
+              - '.github/workflows/**'
+            worker:
+              - 'apps/worker/**'
+              - 'packages/**'
+              - '.github/workflows/**'
+            public:
+              - 'apps/public/**'
+              - 'packages/**'
+              - '.github/workflows/**'
+            dashboard:
+              - 'apps/start/**'
+              - 'packages/**'
+              - '.github/workflows/**'
+
   lint-and-test:
+    needs: changes
+    if: ${{ needs.changes.outputs.api == 'true' || needs.changes.outputs.worker == 'true' || needs.changes.outputs.public == 'true' || needs.changes.outputs.dashboard == 'true' }}
     runs-on: ubuntu-latest
     services:
       redis:
@@ -88,7 +105,8 @@ jobs:
     permissions:
       packages: write
       contents: write
-    needs: lint-and-test
+    needs: [changes, lint-and-test]
+    if: ${{ needs.changes.outputs.api == 'true' }}
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
@@ -148,7 +166,8 @@ jobs:
     permissions:
       packages: write
       contents: write
-    needs: lint-and-test
+    needs: [changes, lint-and-test]
+    if: ${{ needs.changes.outputs.worker == 'true' }}
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
@@ -208,7 +227,8 @@ jobs:
     permissions:
       packages: write
       contents: write
-    needs: lint-and-test
+    needs: [changes, lint-and-test]
+    if: ${{ needs.changes.outputs.dashboard == 'true' }}
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository

.gitignore

@@ -1,7 +1,6 @@
 .secrets
 packages/db/src/generated/prisma
 packages/db/code-migrations/*.sql
-**/.open-next
 
 # Based on https://raw.githubusercontent.com/github/gitignore/main/Node.gitignore
 packages/sdk/profileId.txt

.zed/settings.json

@@ -1,50 +0,0 @@
-{
-  "formatter": "language_server",
-  "format_on_save": "on",
-  "lsp": {
-    "typescript-language-server": {
-      "settings": {
-        "typescript": {
-          "preferences": {
-            "includePackageJsonAutoImports": "on"
-          }
-        }
-      }
-    }
-  },
-  "languages": {
-    "JavaScript": {
-      "formatter": {
-        "language_server": {
-          "name": "biome"
-        }
-      },
-      "code_actions_on_format": {
-        "source.fixAll.biome": true,
-        "source.organizeImports.biome": true
-      }
-    },
-    "TypeScript": {
-      "formatter": {
-        "language_server": {
-          "name": "biome"
-        }
-      },
-      "code_actions_on_format": {
-        "source.fixAll.biome": true,
-        "source.organizeImports.biome": true
-      }
-    },
-    "TSX": {
-      "formatter": {
-        "language_server": {
-          "name": "biome"
-        }
-      },
-      "code_actions_on_format": {
-        "source.fixAll.biome": true,
-        "source.organizeImports.biome": true
-      }
-    }
-  }
-}

README.md

@@ -1,4 +1,4 @@
-![hero](apps/public/public/ogimage.png)
+![hero](apps/public/public/ogimage.jpg)
 
 <p align="center">
 	<h1 align="center"><b>Openpanel</b></h1>
@@ -28,7 +28,6 @@ Openpanel is an open-source web and product analytics platform that combines the
 ## ✨ Features
 
 - **🔍 Advanced Analytics**: Funnels, cohorts, user profiles, and session history
-- **🎬 Session Replay**: Record and replay user sessions with privacy controls built in
 - **📊 Real-time Dashboards**: Live data updates and interactive charts
 - **🎯 A/B Testing**: Built-in variant testing with detailed breakdowns
 - **🔔 Smart Notifications**: Event and funnel-based alerts
@@ -49,7 +48,6 @@ Openpanel is an open-source web and product analytics platform that combines the
 | 🔁 Real-time dashboards                | ✅         | ✅        | ❌        | ✅         |
 | 🔍 Funnels & cohort analysis           | ✅         | ✅        | ✅*       | ✅***         |
 | 👤 User profiles & session history     | ✅         | ✅        | ❌        | ❌         |
-| 🎬 Session replay                      | ✅         | ✅****    | ❌        | ❌         |
 | 📈 Custom dashboards & charts          | ✅         | ✅        | ✅        | ❌         |
 | 💬 Event & funnel notifications        | ✅         | ✅        | ❌        | ❌         |
 | 🌍 GDPR-compliant tracking             | ✅         | ✅        | ❌**      | ✅         |
@@ -61,7 +59,6 @@ Openpanel is an open-source web and product analytics platform that combines the
 > ✅* GA4 has a free tier but often requires BigQuery (paid) for raw data access.  
 > ❌** GA4 has faced GDPR bans in several EU countries due to data transfers to US-based servers.  
 > ✅*** Plausible has simple goals
-> ✅**** Mixpanel session replay is limited to 5k sessions/month on free and 20k on paid. OpenPanel has no limit.
 
 ## Stack
 
@@ -101,10 +98,6 @@ You can find the how to [here](https://openpanel.dev/docs/self-hosting/self-host
 ### Start
 
 ```bash
-pnpm install
-cp .env.example .env
-echo "API_URL=http://localhost:3333" > apps/start/.env
-
 pnpm dock:up
 pnpm codegen
 pnpm migrate:deploy # once to setup the db

admin/src/cli.ts

@@ -24,7 +24,7 @@ async function main() {
   const CLICKHOUSE_URL = process.env.CLICKHOUSE_URL;
   const REDIS_URL = process.env.REDIS_URL;
 
-  if (!(DATABASE_URL && CLICKHOUSE_URL && REDIS_URL)) {
+  if (!DATABASE_URL || !CLICKHOUSE_URL || !REDIS_URL) {
     console.error('Environment variables are not set');
     process.exit(1);
   }

admin/src/commands/clear-cache.ts

@@ -40,7 +40,7 @@ export async function clearCache() {
     displayText: `${org.name} ${chalk.gray(`(${org.id})`)}`,
   }));
 
-  const searchFunction = (_answers: unknown, input = '') => {
+  const searchFunction = async (_answers: unknown, input = '') => {
     const fuzzyResult = fuzzy.filter(input, searchItems, {
       extract: (item: OrgSearchItem) => `${item.name} ${item.id}`,
     });
@@ -94,7 +94,7 @@ export async function clearCache() {
     console.log(chalk.yellow('\n📊 Projects:\n'));
     for (const project of organization.projects) {
       console.log(
-        `  - ${project.name} ${chalk.gray(`(${project.id})`)} - ${chalk.cyan(`${project.eventsCount.toLocaleString()} events`)}`
+        `  - ${project.name} ${chalk.gray(`(${project.id})`)} - ${chalk.cyan(`${project.eventsCount.toLocaleString()} events`)}`,
       );
     }
   }
@@ -119,11 +119,9 @@ export async function clearCache() {
   for (const project of organization.projects) {
     // Clear project access cache for each member
     for (const member of organization.members) {
-      if (!member.user?.id) {
+      if (!member.user?.id) continue;
-        continue;
-      }
       console.log(
-        `Clearing cache for project: ${project.name} and member: ${member.user?.email}`
+        `Clearing cache for project: ${project.name} and member: ${member.user?.email}`,
       );
       await getProjectAccess.clear({
         userId: member.user?.id,
@@ -143,8 +141,8 @@ export async function clearCache() {
   console.log(chalk.gray(`Organization ID: ${organization.id}`));
   console.log(
     chalk.gray(
-      `Project IDs: ${organization.projects.map((p) => p.id).join(', ')}`
+      `Project IDs: ${organization.projects.map((p) => p.id).join(', ')}`,
-    )
+    ),
   );
 
   // Example of what you might do:

admin/src/commands/delete-organization.ts

@@ -21,8 +21,8 @@ export async function deleteOrganization() {
   console.log(chalk.red('\n🗑️  Delete Organization\n'));
   console.log(
     chalk.yellow(
-      '⚠️  WARNING: This will permanently delete the organization and all its data!\n'
+      '⚠️  WARNING: This will permanently delete the organization and all its data!\n',
-    )
+    ),
   );
   console.log('Loading organizations...\n');
 
@@ -51,7 +51,7 @@ export async function deleteOrganization() {
     displayText: `${org.name} ${chalk.gray(`(${org.id})`)} ${chalk.cyan(`- ${org.projects.length} projects, ${org.members.length} members`)}`,
   }));
 
-  const searchFunction = (_answers: unknown, input = '') => {
+  const searchFunction = async (_answers: unknown, input = '') => {
     const fuzzyResult = fuzzy.filter(input, searchItems, {
       extract: (item: OrgSearchItem) => `${item.name} ${item.id}`,
     });
@@ -107,7 +107,7 @@ export async function deleteOrganization() {
     console.log(chalk.red('\n  Projects that will be deleted:'));
     for (const project of organization.projects) {
       console.log(
-        `    - ${project.name} ${chalk.gray(`(${project.eventsCount.toLocaleString()} events, ${project.clients.length} clients)`)}`
+        `    - ${project.name} ${chalk.gray(`(${project.eventsCount.toLocaleString()} events, ${project.clients.length} clients)`)}`,
       );
     }
   }
@@ -122,8 +122,8 @@ export async function deleteOrganization() {
 
   console.log(
     chalk.red(
-      '\n⚠️  This will delete ALL projects, clients, events, and data associated with this organization!'
+      '\n⚠️  This will delete ALL projects, clients, events, and data associated with this organization!',
-    )
+    ),
   );
 
   // First confirmation
@@ -132,7 +132,7 @@ export async function deleteOrganization() {
       type: 'confirm',
       name: 'confirmFirst',
       message: chalk.red(
-        `Are you ABSOLUTELY SURE you want to delete "${organization.name}"?`
+        `Are you ABSOLUTELY SURE you want to delete "${organization.name}"?`,
       ),
       default: false,
     },
@@ -154,7 +154,7 @@ export async function deleteOrganization() {
 
   if (confirmName !== organization.name) {
     console.log(
-      chalk.red('\n❌ Organization name does not match. Deletion cancelled.')
+      chalk.red('\n❌ Organization name does not match. Deletion cancelled.'),
     );
     return;
   }
@@ -165,7 +165,7 @@ export async function deleteOrganization() {
       type: 'confirm',
       name: 'confirmFinal',
       message: chalk.red(
-        'FINAL WARNING: This action CANNOT be undone. Delete now?'
+        'FINAL WARNING: This action CANNOT be undone. Delete now?',
       ),
       default: false,
     },
@@ -185,8 +185,8 @@ export async function deleteOrganization() {
     if (projectIds.length > 0) {
       console.log(
         chalk.yellow(
-          `Deleting data from ClickHouse for ${projectIds.length} projects...`
+          `Deleting data from ClickHouse for ${projectIds.length} projects...`,
-        )
+        ),
       );
       await deleteFromClickhouse(projectIds);
       console.log(chalk.green('✓ ClickHouse data deletion initiated'));
@@ -200,13 +200,13 @@ export async function deleteOrganization() {
     console.log(chalk.green('\n✅ Organization deleted successfully!'));
     console.log(
       chalk.gray(
-        `Deleted: ${organization.name} with ${organization.projects.length} projects and ${organization.members.length} members`
+        `Deleted: ${organization.name} with ${organization.projects.length} projects and ${organization.members.length} members`,
-      )
+      ),
     );
     console.log(
       chalk.gray(
-        '\nNote: ClickHouse deletions are processed asynchronously and may take a few moments to complete.'
+        '\nNote: ClickHouse deletions are processed asynchronously and may take a few moments to complete.',
-      )
+      ),
     );
   } catch (error) {
     console.error(chalk.red('\n❌ Error deleting organization:'), error);

admin/src/commands/delete-user.ts

@@ -19,8 +19,8 @@ export async function deleteUser() {
   console.log(chalk.red('\n🗑️  Delete User\n'));
   console.log(
     chalk.yellow(
-      '⚠️  WARNING: This will permanently delete the user and remove them from all organizations!\n'
+      '⚠️  WARNING: This will permanently delete the user and remove them from all organizations!\n',
-    )
+    ),
   );
   console.log('Loading users...\n');
 
@@ -59,7 +59,7 @@ export async function deleteUser() {
     };
   });
 
-  const searchFunction = (_answers: unknown, input = '') => {
+  const searchFunction = async (_answers: unknown, input = '') => {
     const fuzzyResult = fuzzy.filter(input, searchItems, {
       extract: (item: UserSearchItem) =>
         `${item.email} ${item.firstName || ''} ${item.lastName || ''}`,
@@ -107,46 +107,46 @@ export async function deleteUser() {
   console.log(`  ${chalk.bold('User:')} ${user.email}`);
   if (user.firstName || user.lastName) {
     console.log(
-      `  ${chalk.gray('Name:')} ${user.firstName || ''} ${user.lastName || ''}`
+      `  ${chalk.gray('Name:')} ${user.firstName || ''} ${user.lastName || ''}`,
     );
   }
   console.log(`  ${chalk.gray('ID:')} ${user.id}`);
   console.log(
-    `  ${chalk.gray('Member of:')} ${user.membership.length} organizations`
+    `  ${chalk.gray('Member of:')} ${user.membership.length} organizations`,
   );
   console.log(`  ${chalk.gray('Auth accounts:')} ${user.accounts.length}`);
 
   if (user.createdOrganizations.length > 0) {
     console.log(
       chalk.red(
-        `\n  ⚠️  This user CREATED ${user.createdOrganizations.length} organization(s):`
+        `\n  ⚠️  This user CREATED ${user.createdOrganizations.length} organization(s):`,
-      )
+      ),
     );
     for (const org of user.createdOrganizations) {
       console.log(`    - ${org.name} ${chalk.gray(`(${org.id})`)}`);
     }
     console.log(
       chalk.yellow(
-        '    Note: These organizations will NOT be deleted, only the user reference.'
+        '    Note: These organizations will NOT be deleted, only the user reference.',
-      )
+      ),
     );
   }
 
   if (user.membership.length > 0) {
     console.log(
-      chalk.red('\n  Organizations where user will be removed from:')
+      chalk.red('\n  Organizations where user will be removed from:'),
     );
     for (const member of user.membership) {
       console.log(
-        `    - ${member.organization.name} ${chalk.gray(`(${member.role})`)}`
+        `    - ${member.organization.name} ${chalk.gray(`(${member.role})`)}`,
       );
     }
   }
 
   console.log(
     chalk.red(
-      '\n⚠️  This will delete the user account, all sessions, and remove them from all organizations!'
+      '\n⚠️  This will delete the user account, all sessions, and remove them from all organizations!',
-    )
+    ),
   );
 
   // First confirmation
@@ -155,7 +155,7 @@ export async function deleteUser() {
       type: 'confirm',
       name: 'confirmFirst',
       message: chalk.red(
-        `Are you ABSOLUTELY SURE you want to delete user "${user.email}"?`
+        `Are you ABSOLUTELY SURE you want to delete user "${user.email}"?`,
       ),
       default: false,
     },
@@ -186,7 +186,7 @@ export async function deleteUser() {
       type: 'confirm',
       name: 'confirmFinal',
       message: chalk.red(
-        'FINAL WARNING: This action CANNOT be undone. Delete now?'
+        'FINAL WARNING: This action CANNOT be undone. Delete now?',
       ),
       default: false,
     },
@@ -210,8 +210,8 @@ export async function deleteUser() {
     console.log(chalk.green('\n✅ User deleted successfully!'));
     console.log(
       chalk.gray(
-        `Deleted: ${user.email} (removed from ${user.membership.length} organizations)`
+        `Deleted: ${user.email} (removed from ${user.membership.length} organizations)`,
-      )
+      ),
     );
   } catch (error) {
     console.error(chalk.red('\n❌ Error deleting user:'), error);

admin/src/commands/lookup-client.ts

@@ -47,7 +47,7 @@ export async function lookupByClient() {
     displayText: `${client.organization.name} → ${client.project?.name || '[No Project]'} → ${client.name} ${chalk.gray(`(${client.id})`)}`,
   }));
 
-  const searchFunction = (_answers: unknown, input = '') => {
+  const searchFunction = async (_answers: unknown, input = '') => {
     const fuzzyResult = fuzzy.filter(input, searchItems, {
       extract: (item: ClientSearchItem) =>
         `${item.organizationName} ${item.projectName || ''} ${item.name} ${item.id}`,
@@ -101,3 +101,4 @@ export async function lookupByClient() {
     highlightClientId: selectedClient.id,
   });
 }
+

admin/src/commands/lookup-email.ts

@@ -52,7 +52,7 @@ export async function lookupByEmail() {
     };
   });
 
-  const searchFunction = (_answers: unknown, input = '') => {
+  const searchFunction = async (_answers: unknown, input = '') => {
     const fuzzyResult = fuzzy.filter(input, searchItems, {
       extract: (item: EmailSearchItem) =>
         `${item.email} ${item.organizationName}`,
@@ -103,9 +103,10 @@ export async function lookupByEmail() {
 
   console.log(
     chalk.yellow(
-      `\nShowing organization for: ${selectedMember.email} (${selectedMember.role})\n`
+      `\nShowing organization for: ${selectedMember.email} (${selectedMember.role})\n`,
-    )
+    ),
   );
 
   displayOrganizationDetails(organization);
 }
+

admin/src/commands/lookup-org.ts

@@ -35,7 +35,7 @@ export async function lookupByOrg() {
     displayText: `${org.name} ${chalk.gray(`(${org.id})`)}`,
   }));
 
-  const searchFunction = (_answers: unknown, input = '') => {
+  const searchFunction = async (_answers: unknown, input = '') => {
     const fuzzyResult = fuzzy.filter(input, searchItems, {
       extract: (item: OrgSearchItem) => `${item.name} ${item.id}`,
     });
@@ -85,3 +85,4 @@ export async function lookupByOrg() {
 
   displayOrganizationDetails(organization);
 }
+

admin/src/commands/lookup-project.ts

@@ -42,7 +42,7 @@ export async function lookupByProject() {
     displayText: `${project.organization.name} → ${project.name} ${chalk.gray(`(${project.id})`)}`,
   }));
 
-  const searchFunction = (_answers: unknown, input = '') => {
+  const searchFunction = async (_answers: unknown, input = '') => {
     const fuzzyResult = fuzzy.filter(input, searchItems, {
       extract: (item: ProjectSearchItem) =>
         `${item.organizationName} ${item.name} ${item.id}`,
@@ -95,3 +95,4 @@ export async function lookupByProject() {
     highlightProjectId: selectedProject.id,
   });
 }
+

admin/src/utils/display.ts

@@ -23,7 +23,7 @@ interface DisplayOptions {
 
 export function displayOrganizationDetails(
   organization: OrganizationWithDetails,
-  options: DisplayOptions = {}
+  options: DisplayOptions = {},
 ) {
   console.log(`\n${'='.repeat(80)}`);
   console.log(chalk.bold.yellow(`\n📊 ORGANIZATION: ${organization.name}`));
@@ -34,18 +34,18 @@ export function displayOrganizationDetails(
   console.log(`  ${chalk.gray('ID:')} ${organization.id}`);
   console.log(`  ${chalk.gray('Name:')} ${organization.name}`);
   console.log(
-    `  ${chalk.gray('Created:')} ${organization.createdAt.toISOString()}`
+    `  ${chalk.gray('Created:')} ${organization.createdAt.toISOString()}`,
   );
   console.log(`  ${chalk.gray('Timezone:')} ${organization.timezone || 'UTC'}`);
 
   // Subscription info
   if (organization.subscriptionStatus) {
     console.log(
-      `  ${chalk.gray('Subscription Status:')} ${getSubscriptionStatusColor(organization.subscriptionStatus)}`
+      `  ${chalk.gray('Subscription Status:')} ${getSubscriptionStatusColor(organization.subscriptionStatus)}`,
     );
     if (organization.subscriptionPriceId) {
       console.log(
-        `  ${chalk.gray('Price ID:')} ${organization.subscriptionPriceId}`
+        `  ${chalk.gray('Price ID:')} ${organization.subscriptionPriceId}`,
       );
     }
     if (organization.subscriptionPeriodEventsLimit) {
@@ -61,24 +61,24 @@ export function displayOrganizationDetails(
             ? chalk.yellow
             : chalk.green;
       console.log(
-        `  ${chalk.gray('Event Usage:')} ${color(usage)} (${percentage.toFixed(1)}%)`
+        `  ${chalk.gray('Event Usage:')} ${color(usage)} (${percentage.toFixed(1)}%)`,
       );
     }
     if (organization.subscriptionStartsAt) {
       console.log(
-        `  ${chalk.gray('Starts:')} ${organization.subscriptionStartsAt.toISOString()}`
+        `  ${chalk.gray('Starts:')} ${organization.subscriptionStartsAt.toISOString()}`,
       );
     }
     if (organization.subscriptionEndsAt) {
       console.log(
-        `  ${chalk.gray('Ends:')} ${organization.subscriptionEndsAt.toISOString()}`
+        `  ${chalk.gray('Ends:')} ${organization.subscriptionEndsAt.toISOString()}`,
       );
     }
   }
 
   if (organization.deleteAt) {
     console.log(
-      `  ${chalk.red.bold('⚠️  Scheduled for deletion:')} ${organization.deleteAt.toISOString()}`
+      `  ${chalk.red.bold('⚠️  Scheduled for deletion:')} ${organization.deleteAt.toISOString()}`,
     );
   }
 
@@ -90,7 +90,7 @@ export function displayOrganizationDetails(
     for (const member of organization.members) {
       const roleBadge = getRoleBadge(member.role);
       console.log(
-        `  ${roleBadge} ${member.user?.email || member.email || 'Unknown'} ${chalk.gray(`(${member.role})`)}`
+        `  ${roleBadge} ${member.user?.email || member.email || 'Unknown'} ${chalk.gray(`(${member.role})`)}`,
       );
     }
   }
@@ -108,7 +108,7 @@ export function displayOrganizationDetails(
       console.log(`\n${projectPrefix}${chalk.bold.green(project.name)}`);
       console.log(`    ${chalk.gray('ID:')} ${project.id}`);
       console.log(
-        `    ${chalk.gray('Events Count:')} ${project.eventsCount.toLocaleString()}`
+        `    ${chalk.gray('Events Count:')} ${project.eventsCount.toLocaleString()}`,
       );
 
       if (project.domain) {
@@ -120,15 +120,15 @@ export function displayOrganizationDetails(
       }
 
       console.log(
-        `    ${chalk.gray('Cross Domain:')} ${project.crossDomain ? chalk.green('✓') : chalk.red('✗')}`
+        `    ${chalk.gray('Cross Domain:')} ${project.crossDomain ? chalk.green('✓') : chalk.red('✗')}`,
       );
       console.log(
-        `    ${chalk.gray('Created:')} ${project.createdAt.toISOString()}`
+        `    ${chalk.gray('Created:')} ${project.createdAt.toISOString()}`,
       );
 
       if (project.deleteAt) {
         console.log(
-          `    ${chalk.red.bold('⚠️  Scheduled for deletion:')} ${project.deleteAt.toISOString()}`
+          `    ${chalk.red.bold('⚠️  Scheduled for deletion:')} ${project.deleteAt.toISOString()}`,
         );
       }
 
@@ -146,10 +146,10 @@ export function displayOrganizationDetails(
           console.log(`        ${chalk.gray('ID:')} ${client.id}`);
           console.log(`        ${chalk.gray('Type:')} ${client.type}`);
           console.log(
-            `        ${chalk.gray('Has Secret:')} ${client.secret ? chalk.green('✓') : chalk.red('✗')}`
+            `        ${chalk.gray('Has Secret:')} ${client.secret ? chalk.green('✓') : chalk.red('✗')}`,
           );
           console.log(
-            `        ${chalk.gray('Ignore CORS/Secret:')} ${client.ignoreCorsAndSecret ? chalk.yellow('✓') : chalk.gray('✗')}`
+            `        ${chalk.gray('Ignore CORS/Secret:')} ${client.ignoreCorsAndSecret ? chalk.yellow('✓') : chalk.gray('✗')}`,
           );
         }
       } else {
@@ -159,7 +159,7 @@ export function displayOrganizationDetails(
   }
 
   // Clients without projects (organization-level clients)
-  const _orgLevelClients = organization.projects.length > 0 ? [] : []; // We need to query these separately
+  const orgLevelClients = organization.projects.length > 0 ? [] : []; // We need to query these separately
 
   console.log(`\n${'='.repeat(80)}\n`);
 }

admin/tsconfig.json

@@ -5,8 +5,8 @@
     "rootDir": "src",
     "target": "ES2022",
     "lib": ["ES2022"],
-    "types": ["node"],
+    "types": ["node"]
-    "strictNullChecks": true
   },
   "include": ["src"]
 }
+

apps/api/Dockerfile

@@ -5,7 +5,7 @@ FROM node:${NODE_VERSION}-slim AS base
 # FIX: Bad workaround (https://github.com/nodejs/corepack/issues/612)
 ENV COREPACK_INTEGRITY_KEYS=0
 
-RUN rm -f /usr/local/bin/pnpm /usr/local/bin/pnpx && npm install -g pnpm@10.6.2 && apt-get update && \
+RUN corepack enable && apt-get update && \
     apt-get install -y --no-install-recommends \
     ca-certificates \
     openssl \
@@ -38,10 +38,11 @@ COPY packages/redis/package.json packages/redis/
 COPY packages/logger/package.json packages/logger/
 COPY packages/common/package.json packages/common/
 COPY packages/payments/package.json packages/payments/
+COPY packages/sdks/sdk/package.json packages/sdks/sdk/
 COPY packages/constants/package.json packages/constants/
 COPY packages/validation/package.json packages/validation/
 COPY packages/integrations/package.json packages/integrations/
-COPY packages/js-runtime/package.json packages/js-runtime/
+COPY packages/sdks/sdk/package.json packages/sdks/sdk/
 COPY patches ./patches
 
 # BUILD
@@ -106,10 +107,10 @@ COPY --from=build /app/packages/redis ./packages/redis
 COPY --from=build /app/packages/logger ./packages/logger
 COPY --from=build /app/packages/common ./packages/common
 COPY --from=build /app/packages/payments ./packages/payments
+COPY --from=build /app/packages/sdks/sdk ./packages/sdks/sdk
 COPY --from=build /app/packages/constants ./packages/constants
 COPY --from=build /app/packages/validation ./packages/validation
 COPY --from=build /app/packages/integrations ./packages/integrations
-COPY --from=build /app/packages/js-runtime ./packages/js-runtime
 COPY --from=build /app/tooling/typescript ./tooling/typescript
 RUN pnpm db:codegen
 

apps/api/package.json

@@ -8,7 +8,6 @@
     "start": "dotenv -e ../../.env node dist/index.js",
     "build": "rm -rf dist && tsdown",
     "gen:bots": "jiti scripts/get-bots.ts && biome format --write src/bots/bots.ts",
-    "test:manage": "jiti scripts/test-manage-api.ts",
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
@@ -39,7 +38,7 @@
     "fastify": "^5.6.1",
     "fastify-metrics": "^12.1.0",
     "fastify-raw-body": "^5.0.0",
-    "groupmq": "catalog:",
+    "groupmq": "1.1.0-next.6",
     "jsonwebtoken": "^9.0.2",
     "ramda": "^0.29.1",
     "sharp": "^0.33.5",
@@ -47,12 +46,13 @@
     "sqlstring": "^2.3.3",
     "superjson": "^1.13.3",
     "svix": "^1.24.0",
-    "url-metadata": "^5.4.1",
+    "url-metadata": "^4.1.1",
     "uuid": "^9.0.1",
     "zod": "catalog:"
   },
   "devDependencies": {
     "@faker-js/faker": "^9.0.1",
+    "@openpanel/sdk": "workspace:*",
     "@openpanel/tsconfig": "workspace:*",
     "@types/js-yaml": "^4.0.9",
     "@types/jsonwebtoken": "^9.0.9",

apps/api/scripts/get-bots.ts

@@ -1,14 +1,14 @@
 import fs from 'node:fs';
-import path, { dirname } from 'node:path';
+import path from 'node:path';
+import { dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
-
 import yaml from 'js-yaml';
 
 // Regex special characters that indicate we need actual regex
-const regexSpecialChars = /[|^$.*+?(){}[\]\\]/;
+const regexSpecialChars = /[|^$.*+?(){}\[\]\\]/;
 
 function transformBots(bots: any[]): any[] {
   return bots.map((bot) => {
@@ -28,7 +28,7 @@ async function main() {
   // Get document, or throw exception on error
   try {
     const data = await fetch(
-      'https://raw.githubusercontent.com/matomo-org/device-detector/master/regexes/bots.yml'
+      'https://raw.githubusercontent.com/matomo-org/device-detector/master/regexes/bots.yml',
     ).then((res) => res.text());
 
     const parsedData = yaml.load(data) as any[];
@@ -45,11 +45,11 @@ async function main() {
         'export default bots;',
         '',
       ].join('\n'),
-      'utf-8'
+      'utf-8',
     );
 
     console.log(
-      `✅ Generated bots.ts with ${transformedBots.length} bot entries`
+      `✅ Generated bots.ts with ${transformedBots.length} bot entries`,
     );
     const regexCount = transformedBots.filter((b) => 'regex' in b).length;
     const includesCount = transformedBots.filter((b) => 'includes' in b).length;

apps/api/scripts/mock.ts

@@ -133,7 +133,7 @@ function generateEvents(): Event[] {
           clientId,
           profile: profiles[i % PROFILE_COUNT]!,
           eventsCount: Math.floor(Math.random() * 10),
-        })
+        }),
       );
     }
   });
@@ -150,7 +150,7 @@ let lastTriggeredIndex = 0;
 async function triggerEvents(generatedEvents: any[]) {
   const EVENTS_PER_SECOND = Number.parseInt(
     process.env.EVENTS_PER_SECOND || '100',
-    10
+    10,
   );
   const INTERVAL_MS = 1000 / EVENTS_PER_SECOND;
 
@@ -164,7 +164,7 @@ async function triggerEvents(generatedEvents: any[]) {
     await trackit(event);
     console.log(`Event ${lastTriggeredIndex + 1} sent successfully`);
     console.log(
-      `sending ${event.track.payload?.properties?.__path} from user ${event.headers['user-agent']}`
+      `sending ${event.track.payload?.properties?.__path} from user ${event.headers['user-agent']}`,
     );
   } catch (error) {
     console.error(`Failed to send event ${lastTriggeredIndex + 1}:`, error);
@@ -174,7 +174,7 @@ async function triggerEvents(generatedEvents: any[]) {
   const remainingEvents = generatedEvents.length - lastTriggeredIndex;
 
   console.log(
-    `Triggered ${lastTriggeredIndex} events. Remaining: ${remainingEvents}`
+    `Triggered ${lastTriggeredIndex} events. Remaining: ${remainingEvents}`,
   );
 
   if (remainingEvents > 0) {
@@ -215,7 +215,7 @@ async function createMock(file: string) {
   fs.writeFileSync(
     file,
     JSON.stringify(insertFakeEvents(scrambleEvents(generateEvents())), null, 2),
-    'utf-8'
+    'utf-8',
   );
 }
 
@@ -438,7 +438,7 @@ async function simultaneousRequests() {
       if (group.parallel && group.tracks.length > 1) {
         // Parallel execution for same-flagged tracks
         console.log(
-          `Firing ${group.tracks.length} parallel requests with flag '${group.parallel}'`
+          `Firing ${group.tracks.length} parallel requests with flag '${group.parallel}'`,
         );
         const promises = group.tracks.map(async (track) => {
           const { name, parallel, ...properties } = track;

apps/api/scripts/test-manage-api.ts

@@ -1,354 +0,0 @@
-/**
- * One-off script to test all /manage/ API endpoints
- *
- * Usage:
- *   pnpm test:manage
- *   or
- *   pnpm jiti scripts/test-manage-api.ts
- *
- * Set API_URL environment variable to test against a different server:
- *   API_URL=http://localhost:3000 pnpm test:manage
- */
-
-const CLIENT_ID = process.env.CLIENT_ID!;
-const CLIENT_SECRET = process.env.CLIENT_SECRET!;
-const API_BASE_URL = process.env.API_URL || 'http://localhost:3333';
-
-if (!(CLIENT_ID && CLIENT_SECRET)) {
-  console.error('CLIENT_ID and CLIENT_SECRET must be set');
-  process.exit(1);
-}
-
-interface TestResult {
-  name: string;
-  method: string;
-  url: string;
-  status: number;
-  success: boolean;
-  error?: string;
-  data?: any;
-}
-
-const results: TestResult[] = [];
-
-async function makeRequest(
-  method: string,
-  path: string,
-  body?: any
-): Promise<TestResult> {
-  const url = `${API_BASE_URL}${path}`;
-  const headers: Record<string, string> = {
-    'openpanel-client-id': CLIENT_ID,
-    'openpanel-client-secret': CLIENT_SECRET,
-  };
-
-  // Only set Content-Type if there's a body
-  if (body) {
-    headers['Content-Type'] = 'application/json';
-  }
-
-  try {
-    const response = await fetch(url, {
-      method,
-      headers,
-      body: body ? JSON.stringify(body) : undefined,
-    });
-
-    const data = await response.json().catch(() => ({}));
-
-    return {
-      name: `${method} ${path}`,
-      method,
-      url,
-      status: response.status,
-      success: response.ok,
-      error: response.ok ? undefined : data.message || 'Request failed',
-      data: response.ok ? data : undefined,
-    };
-  } catch (error) {
-    return {
-      name: `${method} ${path}`,
-      method,
-      url,
-      status: 0,
-      success: false,
-      error: error instanceof Error ? error.message : 'Unknown error',
-    };
-  }
-}
-
-async function testProjects() {
-  console.log('\n📁 Testing Projects endpoints...\n');
-
-  // Create project
-  const createResult = await makeRequest('POST', '/manage/projects', {
-    name: `Test Project ${Date.now()}`,
-    domain: 'https://example.com',
-    cors: ['https://example.com', 'https://www.example.com'],
-    crossDomain: false,
-    types: ['website'],
-  });
-  results.push(createResult);
-  console.log(
-    `✓ POST /manage/projects: ${createResult.success ? '✅' : '❌'} ${createResult.status}`
-  );
-  if (createResult.error) {
-    console.log(`  Error: ${createResult.error}`);
-  }
-
-  const projectId = createResult.data?.data?.id;
-  const clientId = createResult.data?.data?.client?.id;
-  const clientSecret = createResult.data?.data?.client?.secret;
-
-  if (projectId) {
-    console.log(`  Created project: ${projectId}`);
-    if (clientId) {
-      console.log(`  Created client: ${clientId}`);
-    }
-    if (clientSecret) {
-      console.log(`  Client secret: ${clientSecret}`);
-    }
-  }
-
-  // List projects
-  const listResult = await makeRequest('GET', '/manage/projects');
-  results.push(listResult);
-  console.log(
-    `✓ GET /manage/projects: ${listResult.success ? '✅' : '❌'} ${listResult.status}`
-  );
-  if (listResult.data?.data?.length) {
-    console.log(`  Found ${listResult.data.data.length} projects`);
-  }
-
-  if (projectId) {
-    // Get project
-    const getResult = await makeRequest('GET', `/manage/projects/${projectId}`);
-    results.push(getResult);
-    console.log(
-      `✓ GET /manage/projects/:id: ${getResult.success ? '✅' : '❌'} ${getResult.status}`
-    );
-
-    // Update project
-    const updateResult = await makeRequest(
-      'PATCH',
-      `/manage/projects/${projectId}`,
-      {
-        name: 'Updated Test Project',
-        crossDomain: true,
-      }
-    );
-    results.push(updateResult);
-    console.log(
-      `✓ PATCH /manage/projects/:id: ${updateResult.success ? '✅' : '❌'} ${updateResult.status}`
-    );
-
-    // Delete project (soft delete)
-    const deleteResult = await makeRequest(
-      'DELETE',
-      `/manage/projects/${projectId}`
-    );
-    results.push(deleteResult);
-    console.log(
-      `✓ DELETE /manage/projects/:id: ${deleteResult.success ? '✅' : '❌'} ${deleteResult.status}`
-    );
-  }
-
-  return { projectId, clientId };
-}
-
-async function testClients(projectId?: string) {
-  console.log('\n🔑 Testing Clients endpoints...\n');
-
-  // Create client
-  const createResult = await makeRequest('POST', '/manage/clients', {
-    name: `Test Client ${Date.now()}`,
-    projectId: projectId || undefined,
-    type: 'read',
-  });
-  results.push(createResult);
-  console.log(
-    `✓ POST /manage/clients: ${createResult.success ? '✅' : '❌'} ${createResult.status}`
-  );
-  if (createResult.error) {
-    console.log(`  Error: ${createResult.error}`);
-  }
-
-  const clientId = createResult.data?.data?.id;
-  const clientSecret = createResult.data?.data?.secret;
-
-  if (clientId) {
-    console.log(`  Created client: ${clientId}`);
-    if (clientSecret) {
-      console.log(`  Client secret: ${clientSecret}`);
-    }
-  }
-
-  // List clients
-  const listResult = await makeRequest(
-    'GET',
-    projectId ? `/manage/clients?projectId=${projectId}` : '/manage/clients'
-  );
-  results.push(listResult);
-  console.log(
-    `✓ GET /manage/clients: ${listResult.success ? '✅' : '❌'} ${listResult.status}`
-  );
-  if (listResult.data?.data?.length) {
-    console.log(`  Found ${listResult.data.data.length} clients`);
-  }
-
-  if (clientId) {
-    // Get client
-    const getResult = await makeRequest('GET', `/manage/clients/${clientId}`);
-    results.push(getResult);
-    console.log(
-      `✓ GET /manage/clients/:id: ${getResult.success ? '✅' : '❌'} ${getResult.status}`
-    );
-
-    // Update client
-    const updateResult = await makeRequest(
-      'PATCH',
-      `/manage/clients/${clientId}`,
-      {
-        name: 'Updated Test Client',
-      }
-    );
-    results.push(updateResult);
-    console.log(
-      `✓ PATCH /manage/clients/:id: ${updateResult.success ? '✅' : '❌'} ${updateResult.status}`
-    );
-
-    // Delete client
-    const deleteResult = await makeRequest(
-      'DELETE',
-      `/manage/clients/${clientId}`
-    );
-    results.push(deleteResult);
-    console.log(
-      `✓ DELETE /manage/clients/:id: ${deleteResult.success ? '✅' : '❌'} ${deleteResult.status}`
-    );
-  }
-}
-
-async function testReferences(projectId?: string) {
-  console.log('\n📚 Testing References endpoints...\n');
-
-  if (!projectId) {
-    console.log('  ⚠️  Skipping references tests - no project ID available');
-    return;
-  }
-
-  // Create reference
-  const createResult = await makeRequest('POST', '/manage/references', {
-    projectId,
-    title: `Test Reference ${Date.now()}`,
-    description: 'This is a test reference',
-    datetime: new Date().toISOString(),
-  });
-  results.push(createResult);
-  console.log(
-    `✓ POST /manage/references: ${createResult.success ? '✅' : '❌'} ${createResult.status}`
-  );
-  if (createResult.error) {
-    console.log(`  Error: ${createResult.error}`);
-  }
-
-  const referenceId = createResult.data?.data?.id;
-
-  if (referenceId) {
-    console.log(`  Created reference: ${referenceId}`);
-  }
-
-  // List references
-  const listResult = await makeRequest(
-    'GET',
-    `/manage/references?projectId=${projectId}`
-  );
-  results.push(listResult);
-  console.log(
-    `✓ GET /manage/references: ${listResult.success ? '✅' : '❌'} ${listResult.status}`
-  );
-  if (listResult.data?.data?.length) {
-    console.log(`  Found ${listResult.data.data.length} references`);
-  }
-
-  if (referenceId) {
-    // Get reference
-    const getResult = await makeRequest(
-      'GET',
-      `/manage/references/${referenceId}`
-    );
-    results.push(getResult);
-    console.log(
-      `✓ GET /manage/references/:id: ${getResult.success ? '✅' : '❌'} ${getResult.status}`
-    );
-
-    // Update reference
-    const updateResult = await makeRequest(
-      'PATCH',
-      `/manage/references/${referenceId}`,
-      {
-        title: 'Updated Test Reference',
-        description: 'Updated description',
-        datetime: new Date().toISOString(),
-      }
-    );
-    results.push(updateResult);
-    console.log(
-      `✓ PATCH /manage/references/:id: ${updateResult.success ? '✅' : '❌'} ${updateResult.status}`
-    );
-
-    // Delete reference
-    const deleteResult = await makeRequest(
-      'DELETE',
-      `/manage/references/${referenceId}`
-    );
-    results.push(deleteResult);
-    console.log(
-      `✓ DELETE /manage/references/:id: ${deleteResult.success ? '✅' : '❌'} ${deleteResult.status}`
-    );
-  }
-}
-
-async function main() {
-  console.log('🚀 Testing Manage API Endpoints\n');
-  console.log(`API Base URL: ${API_BASE_URL}`);
-  console.log(`Client ID: ${CLIENT_ID}\n`);
-
-  try {
-    // Test projects first (creates a project we can use for other tests)
-    const { projectId } = await testProjects();
-
-    // Test clients
-    await testClients(projectId);
-
-    // Test references (requires a project)
-    await testReferences(projectId);
-
-    // Summary
-    console.log(`\n${'='.repeat(60)}`);
-    console.log('📊 Test Summary\n');
-    const successful = results.filter((r) => r.success).length;
-    const failed = results.filter((r) => !r.success).length;
-
-    console.log(`Total tests: ${results.length}`);
-    console.log(`✅ Successful: ${successful}`);
-    console.log(`❌ Failed: ${failed}\n`);
-
-    if (failed > 0) {
-      console.log('Failed tests:');
-      results
-        .filter((r) => !r.success)
-        .forEach((r) => {
-          console.log(`  ❌ ${r.name} (${r.status})`);
-          if (r.error) {
-            console.log(`     Error: ${r.error}`);
-          }
-        });
-    }
-  } catch (error) {
-    console.error('Fatal error:', error);
-    process.exit(1);
-  }
-}
-
-main().catch(console.error);

apps/api/scripts/test.ts

@@ -1,10 +1,11 @@
-import { ch, formatClickhouseDate, type IClickhouseEvent } from '@openpanel/db';
+import { type IClickhouseEvent, ch, createEvent } from '@openpanel/db';
+import { formatClickhouseDate } from '@openpanel/db';
 import { v4 as uuid } from 'uuid';
 
 async function main() {
   const startDate = new Date('2025-01-01T00:00:00Z');
   const endDate = new Date();
-  const eventsPerDay = 25_000;
+  const eventsPerDay = 25000;
   const variance = 3000;
 
   // Event names to randomly choose from
@@ -35,7 +36,7 @@ async function main() {
         device_id: `device_${Math.floor(Math.random() * 1000)}`,
         profile_id: `profile_${Math.floor(Math.random() * 1000)}`,
         project_id: 'testing',
-        session_id: `session_${Math.floor(Math.random() * 10_000)}`,
+        session_id: `session_${Math.floor(Math.random() * 10000)}`,
         properties: {
           hash: 'test-hash',
           'query.utm_source': 'test',
@@ -62,7 +63,6 @@ async function main() {
         imported_at: null,
         sdk_name: 'test-script',
         sdk_version: '1.0.0',
-        groups: [],
       });
     }
 
@@ -74,7 +74,7 @@ async function main() {
 
     // Log progress
     console.log(
-      `Created ${dailyEvents} events for ${currentDate.toISOString().split('T')[0]}`
+      `Created ${dailyEvents} events for ${currentDate.toISOString().split('T')[0]}`,
     );
   }
 }

apps/api/src/bots/index.ts

@@ -1,4 +1,4 @@
-import { cacheable } from '@openpanel/redis';
+import { cacheable, cacheableLru } from '@openpanel/redis';
 import bots from './bots';
 
 // Pre-compile regex patterns at module load time
@@ -15,7 +15,7 @@ const compiledBots = bots.map((bot) => {
 const regexBots = compiledBots.filter((bot) => 'compiledRegex' in bot);
 const includesBots = compiledBots.filter((bot) => 'includes' in bot);
 
-export const isBot = cacheable(
+export const isBot = cacheableLru(
   'is-bot',
   (ua: string) => {
     // Check simple string patterns first (fast)
@@ -40,5 +40,8 @@ export const isBot = cacheable(
 
     return null;
   },
-  60 * 5
+  {
+    maxSize: 1000,
+    ttl: 60 * 5,
+  },
 );

apps/api/src/controllers/ai.controller.ts

@@ -1,7 +1,3 @@
-import { db, getOrganizationByProjectIdCached } from '@openpanel/db';
-import { getProjectAccess } from '@openpanel/trpc/src/access';
-import { appendResponseMessages, type Message, streamText } from 'ai';
-import type { FastifyReply, FastifyRequest } from 'fastify';
 import { getChatModel, getChatSystemPrompt } from '@/utils/ai';
 import {
   getAllEventNames,
@@ -12,6 +8,10 @@ import {
   getReport,
 } from '@/utils/ai-tools';
 import { HttpError } from '@/utils/errors';
+import { db, getOrganizationByProjectIdCached } from '@openpanel/db';
+import { getProjectAccess } from '@openpanel/trpc/src/access';
+import { type Message, appendResponseMessages, streamText } from 'ai';
+import type { FastifyReply, FastifyRequest } from 'fastify';
 
 export async function chat(
   request: FastifyRequest<{
@@ -22,7 +22,7 @@ export async function chat(
       messages: Message[];
     };
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const { session } = request.session;
   const { messages } = request.body;
@@ -117,7 +117,7 @@ export async function chat(
           },
         });
       },
-      onError: (error) => {
+      onError: async (error) => {
         request.log.error('chat error', { error });
       },
     });

apps/api/src/controllers/error.html

@@ -1,20 +1,18 @@
 <!DOCTYPE html>
 <html lang="en">
+
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Error - OpenPanel</title>
-    <link
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600&display=swap" rel="stylesheet">
-      href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600&display=swap"
-      rel="stylesheet"
-    >
   <style>
     * {
       box-sizing: border-box;
     }
 
     body {
-      font-family: "Inter", sans-serif;
+      font-family: 'Inter', sans-serif;
       display: flex;
       justify-content: center;
       align-items: center;
@@ -54,16 +52,11 @@
 
 <body>
   <div class="error-container">
-      <img
+    <img src="https://openpanel.dev/logo.svg" alt="OpenPanel Logo" class="logo">
-        src="https://openpanel.dev/logo.svg"
-        alt="OpenPanel Logo"
-        class="logo"
-      >
     <h1>Oops! Something went wrong</h1>
-      <p>
+    <p>We encountered an error while processing your request. Please try again later or contact support if the problem
-        We encountered an error while processing your request. Please try again
+      persists.</p>
-        later or contact support if the problem persists.
-      </p>
   </div>
 </body>
+
 </html>

apps/api/src/controllers/event.controller.ts

@@ -1,25 +1,26 @@
-import { generateId, slug } from '@openpanel/common';
-import { parseUserAgent } from '@openpanel/common/server';
-import { getSalts } from '@openpanel/db';
-import { getGeoLocation } from '@openpanel/geo';
-import { getEventsGroupQueueShard } from '@openpanel/queue';
-import type { DeprecatedPostEventPayload } from '@openpanel/validation';
 import type { FastifyReply, FastifyRequest } from 'fastify';
+
+import { generateDeviceId, parseUserAgent } from '@openpanel/common/server';
+import { getSalts } from '@openpanel/db';
+import { getEventsGroupQueueShard } from '@openpanel/queue';
+import type { PostEventPayload } from '@openpanel/sdk';
+
+import { generateId } from '@openpanel/common';
+import { getGeoLocation } from '@openpanel/geo';
 import { getStringHeaders, getTimestamp } from './track.controller';
-import { getDeviceId } from '@/utils/ids';
 
 export async function postEvent(
   request: FastifyRequest<{
-    Body: DeprecatedPostEventPayload;
+    Body: PostEventPayload;
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const { timestamp, isTimestampFromThePast } = getTimestamp(
     request.timestamp,
-    request.body
+    request.body,
   );
   const ip = request.clientIp;
-  const ua = request.headers['user-agent'] ?? 'unknown/1.0';
+  const ua = request.headers['user-agent'];
   const projectId = request.client?.projectId;
   const headers = getStringHeaders(request.headers);
 
@@ -29,22 +30,34 @@ export async function postEvent(
   }
 
   const [salts, geo] = await Promise.all([getSalts(), getGeoLocation(ip)]);
-  const { deviceId, sessionId } = await getDeviceId({
+  const currentDeviceId = ua
-    projectId,
+    ? generateDeviceId({
+        salt: salts.current,
+        origin: projectId,
         ip,
         ua,
-    salts,
+      })
-  });
+    : '';
+  const previousDeviceId = ua
+    ? generateDeviceId({
+        salt: salts.previous,
+        origin: projectId,
+        ip,
+        ua,
+      })
+    : '';
 
   const uaInfo = parseUserAgent(ua, request.body?.properties);
   const groupId = uaInfo.isServer
-    ? `${projectId}:${request.body?.profileId ?? generateId()}`
+    ? request.body?.profileId
-    : deviceId;
+      ? `${projectId}:${request.body?.profileId}`
+      : `${projectId}:${generateId()}`
+    : currentDeviceId;
   const jobId = [
-    slug(request.body.name),
+    request.body.name,
     timestamp,
     projectId,
-    deviceId,
+    currentDeviceId,
     groupId,
   ]
     .filter(Boolean)
@@ -61,8 +74,8 @@ export async function postEvent(
       },
       uaInfo,
       geo,
-      deviceId,
+      currentDeviceId,
-      sessionId: sessionId ?? '',
+      previousDeviceId,
     },
     groupId,
     jobId,

apps/api/src/controllers/export.controller.ts

@@ -1,18 +1,20 @@
+import { parseQueryString } from '@/utils/parse-zod-query-string';
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import { z } from 'zod';
+
+import { HttpError } from '@/utils/errors';
 import { DateTime } from '@openpanel/common';
 import type { GetEventListOptions } from '@openpanel/db';
 import {
-  ChartEngine,
   ClientType,
   db,
   getEventList,
-  getEventsCount,
+  getEventsCountCached,
   getSettingsForProject,
 } from '@openpanel/db';
-import { zChartEvent, zReport } from '@openpanel/validation';
+import { ChartEngine } from '@openpanel/db';
-import type { FastifyReply, FastifyRequest } from 'fastify';
+import { zChartEvent, zChartInputBase } from '@openpanel/validation';
-import { z } from 'zod';
+import { omit } from 'ramda';
-import { HttpError } from '@/utils/errors';
-import { parseQueryString } from '@/utils/parse-zod-query-string';
 
 async function getProjectId(
   request: FastifyRequest<{
@@ -20,7 +22,8 @@ async function getProjectId(
       project_id?: string;
       projectId?: string;
     };
-  }>
+  }>,
+  reply: FastifyReply,
 ) {
   let projectId = request.query.projectId || request.query.project_id;
 
@@ -71,22 +74,10 @@ const eventsScheme = z.object({
   page: z.coerce.number().optional().default(1),
   limit: z.coerce.number().optional().default(50),
   includes: z
-    .preprocess((arg) => {
+    .preprocess(
-      if (arg == null) {
+      (arg) => (typeof arg === 'string' ? [arg] : arg),
-        return undefined;
+      z.array(z.string()),
-      }
+    )
-      if (Array.isArray(arg)) {
-        return arg;
-      }
-      if (typeof arg === 'string') {
-        const parts = arg
-          .split(',')
-          .map((s) => s.trim())
-          .filter(Boolean);
-        return parts;
-      }
-      return arg;
-    }, z.array(z.string()))
     .optional(),
 });
 
@@ -94,7 +85,7 @@ export async function events(
   request: FastifyRequest<{
     Querystring: z.infer<typeof eventsScheme>;
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const query = eventsScheme.safeParse(request.query);
 
@@ -106,7 +97,7 @@ export async function events(
     });
   }
 
-  const projectId = await getProjectId(request);
+  const projectId = await getProjectId(request, reply);
   const limit = query.data.limit;
   const page = Math.max(query.data.page, 1);
   const take = Math.max(Math.min(limit, 1000), 1);
@@ -127,20 +118,20 @@ export async function events(
       meta: false,
       ...query.data.includes?.reduce(
         (acc, key) => ({ ...acc, [key]: true }),
-        {}
+        {},
       ),
     },
   };
 
   const [data, totalCount] = await Promise.all([
     getEventList(options),
-    getEventsCount(options),
+    getEventsCountCached(omit(['cursor', 'take'], options)),
   ]);
 
   reply.send({
     meta: {
       count: data.length,
-      totalCount,
+      totalCount: totalCount,
       pages: Math.ceil(totalCount / options.take),
       current: cursor + 1,
     },
@@ -148,7 +139,7 @@ export async function events(
   });
 }
 
-const chartSchemeFull = zReport
+const chartSchemeFull = zChartInputBase
   .pick({
     breakdowns: true,
     interval: true,
@@ -167,7 +158,7 @@ const chartSchemeFull = zReport
           filters: zChartEvent.shape.filters.optional(),
           segment: zChartEvent.shape.segment.optional(),
           property: zChartEvent.shape.property.optional(),
-        })
+        }),
       )
       .optional(),
     // Backward compatibility - events will be migrated to series via preprocessing
@@ -178,7 +169,7 @@ const chartSchemeFull = zReport
           filters: zChartEvent.shape.filters.optional(),
           segment: zChartEvent.shape.segment.optional(),
           property: zChartEvent.shape.property.optional(),
-        })
+        }),
       )
       .optional(),
   });
@@ -187,7 +178,7 @@ export async function charts(
   request: FastifyRequest<{
     Querystring: Record<string, string>;
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const query = chartSchemeFull.safeParse(parseQueryString(request.query));
 
@@ -199,7 +190,7 @@ export async function charts(
     });
   }
 
-  const projectId = await getProjectId(request);
+  const projectId = await getProjectId(request, reply);
   const { timezone } = await getSettingsForProject(projectId);
   const { events, series, ...rest } = query.data;
 

apps/api/src/controllers/gsc-oauth-callback.controller.ts

@@ -1,167 +0,0 @@
-import { googleGsc } from '@openpanel/auth';
-import { db, encrypt } from '@openpanel/db';
-import type { FastifyReply, FastifyRequest } from 'fastify';
-import { z } from 'zod';
-import { LogError } from '@/utils/errors';
-
-const OAUTH_SENSITIVE_KEYS = ['code', 'state'];
-
-function sanitizeOAuthQuery(
-  query: Record<string, unknown> | null | undefined
-): Record<string, string> {
-  if (!query || typeof query !== 'object') {
-    return {};
-  }
-  return Object.fromEntries(
-    Object.entries(query).map(([k, v]) => [
-      k,
-      OAUTH_SENSITIVE_KEYS.includes(k) ? '<redacted>' : String(v),
-    ])
-  );
-}
-
-export async function gscGoogleCallback(
-  req: FastifyRequest,
-  reply: FastifyReply
-) {
-  try {
-    const schema = z.object({
-      code: z.string(),
-      state: z.string(),
-    });
-
-    const query = schema.safeParse(req.query);
-    if (!query.success) {
-      throw new LogError(
-        'Invalid GSC callback query params',
-        sanitizeOAuthQuery(req.query as Record<string, unknown>)
-      );
-    }
-
-    const { code, state } = query.data;
-
-    const rawStoredState = req.cookies.gsc_oauth_state ?? null;
-    const rawCodeVerifier = req.cookies.gsc_code_verifier ?? null;
-    const rawProjectId = req.cookies.gsc_project_id ?? null;
-
-    const storedStateResult =
-      rawStoredState !== null ? req.unsignCookie(rawStoredState) : null;
-    const codeVerifierResult =
-      rawCodeVerifier !== null ? req.unsignCookie(rawCodeVerifier) : null;
-    const projectIdResult =
-      rawProjectId !== null ? req.unsignCookie(rawProjectId) : null;
-
-    if (
-      !(
-        storedStateResult?.value &&
-        codeVerifierResult?.value &&
-        projectIdResult?.value
-      )
-    ) {
-      throw new LogError('Missing GSC OAuth cookies', {
-        storedState: !storedStateResult?.value,
-        codeVerifier: !codeVerifierResult?.value,
-        projectId: !projectIdResult?.value,
-      });
-    }
-
-    if (
-      !(
-        storedStateResult?.valid &&
-        codeVerifierResult?.valid &&
-        projectIdResult?.valid
-      )
-    ) {
-      throw new LogError('Invalid GSC OAuth cookies', {
-        storedState: !storedStateResult?.value,
-        codeVerifier: !codeVerifierResult?.value,
-        projectId: !projectIdResult?.value,
-      });
-    }
-
-    const stateStr = storedStateResult?.value;
-    const codeVerifierStr = codeVerifierResult?.value;
-    const projectIdStr = projectIdResult?.value;
-
-    if (state !== stateStr) {
-      throw new LogError('GSC OAuth state mismatch', {
-        hasState: true,
-        hasStoredState: true,
-        stateMismatch: true,
-      });
-    }
-
-    const tokens = await googleGsc.validateAuthorizationCode(
-      code,
-      codeVerifierStr
-    );
-
-    const accessToken = tokens.accessToken();
-    const refreshToken = tokens.hasRefreshToken()
-      ? tokens.refreshToken()
-      : null;
-    const accessTokenExpiresAt = tokens.accessTokenExpiresAt();
-
-    if (!refreshToken) {
-      throw new LogError('No refresh token returned from Google GSC OAuth');
-    }
-
-    const project = await db.project.findUnique({
-      where: { id: projectIdStr },
-      select: { id: true, organizationId: true },
-    });
-
-    if (!project) {
-      throw new LogError('Project not found for GSC connection', {
-        projectId: projectIdStr,
-      });
-    }
-
-    await db.gscConnection.upsert({
-      where: { projectId: projectIdStr },
-      create: {
-        projectId: projectIdStr,
-        accessToken: encrypt(accessToken),
-        refreshToken: encrypt(refreshToken),
-        accessTokenExpiresAt,
-        siteUrl: '',
-      },
-      update: {
-        accessToken: encrypt(accessToken),
-        refreshToken: encrypt(refreshToken),
-        accessTokenExpiresAt,
-        lastSyncStatus: null,
-        lastSyncError: null,
-      },
-    });
-
-    reply.clearCookie('gsc_oauth_state');
-    reply.clearCookie('gsc_code_verifier');
-    reply.clearCookie('gsc_project_id');
-
-    const dashboardUrl =
-      process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!;
-    const redirectUrl = `${dashboardUrl}/${project.organizationId}/${projectIdStr}/settings/gsc`;
-    return reply.redirect(redirectUrl);
-  } catch (error) {
-    req.log.error(error);
-    reply.clearCookie('gsc_oauth_state');
-    reply.clearCookie('gsc_code_verifier');
-    reply.clearCookie('gsc_project_id');
-    return redirectWithError(reply, error);
-  }
-}
-
-function redirectWithError(reply: FastifyReply, error: LogError | unknown) {
-  const url = new URL(
-    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!
-  );
-  url.pathname = '/login';
-  if (error instanceof LogError) {
-    url.searchParams.set('error', error.message);
-  } else {
-    url.searchParams.set('error', 'Failed to connect Google Search Console');
-  }
-  url.searchParams.set('correlationId', reply.request.id);
-  return reply.redirect(url.toString());
-}

apps/api/src/controllers/healthcheck.controller.ts

@@ -1,12 +1,12 @@
+import { isShuttingDown } from '@/utils/graceful-shutdown';
 import { chQuery, db } from '@openpanel/db';
 import { getRedisCache } from '@openpanel/redis';
 import type { FastifyReply, FastifyRequest } from 'fastify';
-import { isShuttingDown } from '@/utils/graceful-shutdown';
 
 // For docker compose healthcheck
 export async function healthcheck(
   request: FastifyRequest,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   try {
     const redisRes = await getRedisCache().ping();
@@ -21,7 +21,6 @@ export async function healthcheck(
       ch: chRes && chRes.length > 0,
     });
   } catch (error) {
-    request.log.warn('healthcheck failed', { error });
     return reply.status(503).send({
       ready: false,
       reason: 'dependencies not ready',
@@ -42,22 +41,18 @@ export async function readiness(request: FastifyRequest, reply: FastifyReply) {
 
   // Perform lightweight dependency checks for readiness
   const redisRes = await getRedisCache().ping();
-  const dbRes = await db.$executeRaw`SELECT 1`;
+  const dbRes = await db.project.findFirst();
   const chRes = await chQuery('SELECT 1');
 
-  const isReady = redisRes;
+  const isReady = redisRes && dbRes && chRes;
 
   if (!isReady) {
-    const res = {
-      redis: redisRes === 'PONG',
-      db: !!dbRes,
-      ch: chRes && chRes.length > 0,
-    };
-    request.log.warn('dependencies not ready', res);
     return reply.status(503).send({
       ready: false,
       reason: 'dependencies not ready',
-      ...res,
+      redis: redisRes === 'PONG',
+      db: !!dbRes,
+      ch: chRes && chRes.length > 0,
     });
   }
 

apps/api/src/controllers/import.controller.ts

@@ -1,13 +1,14 @@
+import type { FastifyReply, FastifyRequest } from 'fastify';
+
 import { toDots } from '@openpanel/common';
 import type { IClickhouseEvent } from '@openpanel/db';
-import { ch, formatClickhouseDate, TABLE_NAMES } from '@openpanel/db';
+import { TABLE_NAMES, ch, formatClickhouseDate } from '@openpanel/db';
-import type { FastifyReply, FastifyRequest } from 'fastify';
 
 export async function importEvents(
   request: FastifyRequest<{
     Body: IClickhouseEvent[];
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const projectId = request.client?.projectId;
   if (!projectId) {

apps/api/src/controllers/insights.controller.ts

@@ -1,3 +1,4 @@
+import { parseQueryString } from '@/utils/parse-zod-query-string';
 import { getDefaultIntervalByDates } from '@openpanel/constants';
 import {
   eventBuffer,
@@ -8,7 +9,6 @@ import {
 import { zChartEventFilter, zRange } from '@openpanel/validation';
 import type { FastifyReply, FastifyRequest } from 'fastify';
 import { z } from 'zod';
-import { parseQueryString } from '@/utils/parse-zod-query-string';
 
 const zGetMetricsQuery = z.object({
   startDate: z.string().nullish(),
@@ -22,7 +22,7 @@ export async function getMetrics(
     Params: { projectId: string };
     Querystring: z.infer<typeof zGetMetricsQuery>;
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const { timezone } = await getSettingsForProject(request.params.projectId);
   const parsed = zGetMetricsQuery.safeParse(parseQueryString(request.query));
@@ -41,11 +41,11 @@ export async function getMetrics(
     await overviewService.getMetrics({
       projectId: request.params.projectId,
       filters: parsed.data.filters,
-      startDate,
+      startDate: startDate,
-      endDate,
+      endDate: endDate,
       interval: getDefaultIntervalByDates(startDate, endDate) ?? 'day',
       timezone,
-    })
+    }),
   );
 }
 
@@ -54,7 +54,7 @@ export async function getLiveVisitors(
   request: FastifyRequest<{
     Params: { projectId: string };
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   reply.send({
     visitors: await eventBuffer.getActiveVisitorCount(request.params.projectId),
@@ -76,7 +76,7 @@ export async function getPages(
     Params: { projectId: string };
     Querystring: z.infer<typeof zGetTopPagesQuery>;
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const { timezone } = await getSettingsForProject(request.params.projectId);
   const { startDate, endDate } = getChartStartEndDate(request.query, timezone);
@@ -93,9 +93,11 @@ export async function getPages(
   return overviewService.getTopPages({
     projectId: request.params.projectId,
     filters: parsed.data.filters,
-    startDate,
+    startDate: startDate,
-    endDate,
+    endDate: endDate,
     timezone,
+    cursor: parsed.data.cursor,
+    limit: Math.min(parsed.data.limit, 50),
   });
 }
 
@@ -132,19 +134,19 @@ const zGetOverviewGenericQuery = z.object({
 });
 
 export function getOverviewGeneric(
-  column: z.infer<typeof zGetOverviewGenericQuery>['column']
+  column: z.infer<typeof zGetOverviewGenericQuery>['column'],
 ) {
   return async (
     request: FastifyRequest<{
       Params: { projectId: string; key: string };
       Querystring: z.infer<typeof zGetOverviewGenericQuery>;
     }>,
-    reply: FastifyReply
+    reply: FastifyReply,
   ) => {
     const { timezone } = await getSettingsForProject(request.params.projectId);
     const { startDate, endDate } = getChartStartEndDate(
       request.query,
-      timezone
+      timezone,
     );
     const parsed = zGetOverviewGenericQuery.safeParse({
       ...parseQueryString(request.query),
@@ -165,10 +167,12 @@ export function getOverviewGeneric(
         column,
         projectId: request.params.projectId,
         filters: parsed.data.filters,
-        startDate,
+        startDate: startDate,
-        endDate,
+        endDate: endDate,
         timezone,
-      })
+        cursor: parsed.data.cursor,
+        limit: Math.min(parsed.data.limit, 50),
+      }),
     );
   };
 }

apps/api/src/controllers/live.controller.ts

@@ -1,10 +1,23 @@
+import type { FastifyRequest } from 'fastify';
+import superjson from 'superjson';
+
 import type { WebSocket } from '@fastify/websocket';
-import { eventBuffer } from '@openpanel/db';
+import {
+  eventBuffer,
+  getProfileById,
+  transformMinimalEvent,
+} from '@openpanel/db';
 import { setSuperJson } from '@openpanel/json';
-import { subscribeToPublishedEvent } from '@openpanel/redis';
+import {
+  psubscribeToPublishedEvent,
+  subscribeToPublishedEvent,
+} from '@openpanel/redis';
 import { getProjectAccess } from '@openpanel/trpc';
 import { getOrganizationAccess } from '@openpanel/trpc/src/access';
-import type { FastifyRequest } from 'fastify';
+
+export function getLiveEventInfo(key: string) {
+  return key.split(':').slice(2) as [string, string];
+}
 
 export function wsVisitors(
   socket: WebSocket,
@@ -12,32 +25,32 @@ export function wsVisitors(
     Params: {
       projectId: string;
     };
-  }>
+  }>,
 ) {
   const { params } = req;
-  const sendCount = () => {
+  const unsubscribe = subscribeToPublishedEvent('events', 'saved', (event) => {
-    eventBuffer
+    if (event?.projectId === params.projectId) {
-      .getActiveVisitorCount(params.projectId)
+      eventBuffer.getActiveVisitorCount(params.projectId).then((count) => {
-      .then((count) => {
         socket.send(String(count));
-      })
-      .catch(() => {
-        socket.send('0');
       });
-  };
+    }
+  });
 
-  const unsubscribe = subscribeToPublishedEvent(
+  const punsubscribe = psubscribeToPublishedEvent(
-    'events',
+    '__keyevent@0__:expired',
-    'batch',
+    (key) => {
-    ({ projectId }) => {
+      const [projectId] = getLiveEventInfo(key);
-      if (projectId === params.projectId) {
+      if (projectId && projectId === params.projectId) {
-        sendCount();
+        eventBuffer.getActiveVisitorCount(params.projectId).then((count) => {
-      }
+          socket.send(String(count));
+        });
       }
+    },
   );
 
   socket.on('close', () => {
     unsubscribe();
+    punsubscribe();
   });
 }
 
@@ -49,10 +62,18 @@ export async function wsProjectEvents(
     };
     Querystring: {
       token?: string;
+      type?: 'saved' | 'received';
     };
-  }>
+  }>,
 ) {
-  const { params } = req;
+  const { params, query } = req;
+  const type = query.type || 'saved';
+
+  if (!['saved', 'received'].includes(type)) {
+    socket.send('Invalid type');
+    socket.close();
+    return;
+  }
 
   const userId = req.session?.userId;
   if (!userId) {
@@ -66,20 +87,24 @@ export async function wsProjectEvents(
     projectId: params.projectId,
   });
 
-  if (!access) {
-    socket.send('No access');
-    socket.close();
-    return;
-  }
-
   const unsubscribe = subscribeToPublishedEvent(
     'events',
-    'batch',
+    type,
-    ({ projectId, count }) => {
+    async (event) => {
-      if (projectId === params.projectId) {
+      if (event.projectId === params.projectId) {
-        socket.send(setSuperJson({ count }));
+        const profile = await getProfileById(event.profileId, event.projectId);
+        socket.send(
+          superjson.stringify(
+            access
+              ? {
+                  ...event,
+                  profile,
                 }
+              : transformMinimalEvent(event),
+          ),
+        );
       }
+    },
   );
 
   socket.on('close', () => unsubscribe());
@@ -91,7 +116,7 @@ export async function wsProjectNotifications(
     Params: {
       projectId: string;
     };
-  }>
+  }>,
 ) {
   const { params } = req;
   const userId = req.session?.userId;
@@ -118,9 +143,9 @@ export async function wsProjectNotifications(
     'created',
     (notification) => {
       if (notification.projectId === params.projectId) {
-        socket.send(setSuperJson(notification));
+        socket.send(superjson.stringify(notification));
-      }
       }
+    },
   );
 
   socket.on('close', () => unsubscribe());
@@ -132,7 +157,7 @@ export async function wsOrganizationEvents(
     Params: {
       organizationId: string;
     };
-  }>
+  }>,
 ) {
   const { params } = req;
   const userId = req.session?.userId;
@@ -159,7 +184,7 @@ export async function wsOrganizationEvents(
     'subscription_updated',
     (message) => {
       socket.send(setSuperJson(message));
-    }
+    },
   );
 
   socket.on('close', () => unsubscribe());

apps/api/src/controllers/logs.controller.ts

@@ -1,68 +0,0 @@
-import { parseUserAgent } from '@openpanel/common/server';
-import { getSalts } from '@openpanel/db';
-import { getGeoLocation } from '@openpanel/geo';
-import { type LogsQueuePayload, logsQueue } from '@openpanel/queue';
-import { type ILogBatchPayload, zLogBatchPayload } from '@openpanel/validation';
-import type { FastifyReply, FastifyRequest } from 'fastify';
-import { getDeviceId } from '@/utils/ids';
-import { getStringHeaders } from './track.controller';
-
-export async function handler(
-  request: FastifyRequest<{ Body: ILogBatchPayload }>,
-  reply: FastifyReply,
-) {
-  const projectId = request.client?.projectId;
-  if (!projectId) {
-    return reply.status(400).send({ status: 400, error: 'Missing projectId' });
-  }
-
-  const validationResult = zLogBatchPayload.safeParse(request.body);
-  if (!validationResult.success) {
-    return reply.status(400).send({
-      status: 400,
-      error: 'Bad Request',
-      message: 'Validation failed',
-      errors: validationResult.error.errors,
-    });
-  }
-
-  const { logs } = validationResult.data;
-
-  const ip = request.clientIp;
-  const ua = request.headers['user-agent'] ?? 'unknown/1.0';
-  const headers = getStringHeaders(request.headers);
-  const receivedAt = new Date().toISOString();
-
-  const [geo, salts] = await Promise.all([getGeoLocation(ip), getSalts()]);
-  const { deviceId, sessionId } = await getDeviceId({ projectId, ip, ua, salts });
-  const uaInfo = parseUserAgent(ua, undefined);
-
-  const jobs: LogsQueuePayload[] = logs.map((log) => ({
-    type: 'incomingLog' as const,
-    payload: {
-      projectId,
-      log: {
-        ...log,
-        timestamp: log.timestamp ?? receivedAt,
-      },
-      uaInfo,
-      geo: {
-        country: geo.country,
-        city: geo.city,
-        region: geo.region,
-      },
-      headers,
-      deviceId,
-      sessionId,
-    },
-  }));
-
-  await logsQueue.addBulk(
-    jobs.map((job) => ({
-      name: 'incomingLog',
-      data: job,
-    })),
-  );
-
-  return reply.status(200).send({ ok: true, count: logs.length });
-}

apps/api/src/controllers/manage.controller.ts

@@ -1,643 +0,0 @@
-import crypto from 'node:crypto';
-import { stripTrailingSlash } from '@openpanel/common';
-import { hashPassword } from '@openpanel/common/server';
-import {
-  db,
-  getClientByIdCached,
-  getId,
-  getProjectByIdCached,
-} from '@openpanel/db';
-import type { FastifyReply, FastifyRequest } from 'fastify';
-import { z } from 'zod';
-import { HttpError } from '@/utils/errors';
-
-// Validation schemas
-const zCreateProject = z.object({
-  name: z.string().min(1),
-  domain: z.string().url().or(z.literal('')).or(z.null()).optional(),
-  cors: z.array(z.string()).default([]),
-  crossDomain: z.boolean().optional().default(false),
-  types: z
-    .array(z.enum(['website', 'app', 'backend']))
-    .optional()
-    .default([]),
-});
-
-const zUpdateProject = z.object({
-  name: z.string().min(1).optional(),
-  domain: z.string().url().or(z.literal('')).or(z.null()).optional(),
-  cors: z.array(z.string()).optional(),
-  crossDomain: z.boolean().optional(),
-  allowUnsafeRevenueTracking: z.boolean().optional(),
-});
-
-const zCreateClient = z.object({
-  name: z.string().min(1),
-  projectId: z.string().optional(),
-  type: z.enum(['read', 'write', 'root']).optional().default('write'),
-});
-
-const zUpdateClient = z.object({
-  name: z.string().min(1).optional(),
-});
-
-const zCreateReference = z.object({
-  projectId: z.string(),
-  title: z.string().min(1),
-  description: z.string().optional(),
-  datetime: z.string(),
-});
-
-const zUpdateReference = z.object({
-  title: z.string().min(1).optional(),
-  description: z.string().optional(),
-  datetime: z.string().optional(),
-});
-
-// Projects CRUD
-export async function listProjects(
-  request: FastifyRequest,
-  reply: FastifyReply
-) {
-  const projects = await db.project.findMany({
-    where: {
-      organizationId: request.client!.organizationId,
-      deleteAt: null,
-    },
-    orderBy: {
-      createdAt: 'desc',
-    },
-  });
-
-  reply.send({ data: projects });
-}
-
-export async function getProject(
-  request: FastifyRequest<{ Params: { id: string } }>,
-  reply: FastifyReply
-) {
-  const project = await db.project.findFirst({
-    where: {
-      id: request.params.id,
-      organizationId: request.client!.organizationId,
-    },
-  });
-
-  if (!project) {
-    throw new HttpError('Project not found', { status: 404 });
-  }
-
-  reply.send({ data: project });
-}
-
-export async function createProject(
-  request: FastifyRequest<{ Body: z.infer<typeof zCreateProject> }>,
-  reply: FastifyReply
-) {
-  const parsed = zCreateProject.safeParse(request.body);
-
-  if (parsed.success === false) {
-    return reply.status(400).send({
-      error: 'Bad Request',
-      message: 'Invalid request body',
-      details: parsed.error.errors,
-    });
-  }
-
-  const { name, domain, cors, crossDomain, types } = parsed.data;
-
-  // Generate a default client secret
-  const secret = `sec_${crypto.randomBytes(10).toString('hex')}`;
-  const clientData = {
-    organizationId: request.client!.organizationId,
-    name: 'First client',
-    type: 'write' as const,
-    secret: await hashPassword(secret),
-  };
-
-  const project = await db.project.create({
-    data: {
-      id: await getId('project', name),
-      organizationId: request.client!.organizationId,
-      name,
-      domain: domain ? stripTrailingSlash(domain) : null,
-      cors: cors.map((c) => stripTrailingSlash(c)),
-      crossDomain: crossDomain ?? false,
-      allowUnsafeRevenueTracking: false,
-      filters: [],
-      types,
-      clients: {
-        create: clientData,
-      },
-    },
-    include: {
-      clients: {
-        select: {
-          id: true,
-        },
-      },
-    },
-  });
-
-  await Promise.all([
-    getProjectByIdCached.clear(project.id),
-    ...project.clients.map((client) => getClientByIdCached.clear(client.id)),
-  ]);
-
-  reply.send({
-    data: {
-      ...project,
-      client: project.clients[0]
-        ? {
-            id: project.clients[0].id,
-            secret,
-          }
-        : null,
-    },
-  });
-}
-
-export async function updateProject(
-  request: FastifyRequest<{
-    Params: { id: string };
-    Body: z.infer<typeof zUpdateProject>;
-  }>,
-  reply: FastifyReply
-) {
-  const parsed = zUpdateProject.safeParse(request.body);
-
-  if (parsed.success === false) {
-    return reply.status(400).send({
-      error: 'Bad Request',
-      message: 'Invalid request body',
-      details: parsed.error.errors,
-    });
-  }
-
-  // Verify project exists and belongs to organization
-  const existing = await db.project.findFirst({
-    where: {
-      id: request.params.id,
-      organizationId: request.client!.organizationId,
-    },
-    include: {
-      clients: {
-        select: {
-          id: true,
-        },
-      },
-    },
-  });
-
-  if (!existing) {
-    throw new HttpError('Project not found', { status: 404 });
-  }
-
-  const updateData: any = {};
-  if (parsed.data.name !== undefined) {
-    updateData.name = parsed.data.name;
-  }
-  if (parsed.data.domain !== undefined) {
-    updateData.domain = parsed.data.domain
-      ? stripTrailingSlash(parsed.data.domain)
-      : null;
-  }
-  if (parsed.data.cors !== undefined) {
-    updateData.cors = parsed.data.cors.map((c) => stripTrailingSlash(c));
-  }
-  if (parsed.data.crossDomain !== undefined) {
-    updateData.crossDomain = parsed.data.crossDomain;
-  }
-  if (parsed.data.allowUnsafeRevenueTracking !== undefined) {
-    updateData.allowUnsafeRevenueTracking =
-      parsed.data.allowUnsafeRevenueTracking;
-  }
-
-  const project = await db.project.update({
-    where: {
-      id: request.params.id,
-    },
-    data: updateData,
-  });
-
-  await Promise.all([
-    getProjectByIdCached.clear(project.id),
-    ...existing.clients.map((client) => getClientByIdCached.clear(client.id)),
-  ]);
-
-  reply.send({ data: project });
-}
-
-export async function deleteProject(
-  request: FastifyRequest<{ Params: { id: string } }>,
-  reply: FastifyReply
-) {
-  const project = await db.project.findFirst({
-    where: {
-      id: request.params.id,
-      organizationId: request.client!.organizationId,
-    },
-  });
-
-  if (!project) {
-    throw new HttpError('Project not found', { status: 404 });
-  }
-
-  await db.project.update({
-    where: {
-      id: request.params.id,
-    },
-    data: {
-      deleteAt: new Date(Date.now() + 24 * 60 * 60 * 1000),
-    },
-  });
-
-  await getProjectByIdCached.clear(request.params.id);
-
-  reply.send({ success: true });
-}
-
-// Clients CRUD
-export async function listClients(
-  request: FastifyRequest<{ Querystring: { projectId?: string } }>,
-  reply: FastifyReply
-) {
-  const where: any = {
-    organizationId: request.client!.organizationId,
-  };
-
-  if (request.query.projectId) {
-    // Verify project belongs to organization
-    const project = await db.project.findFirst({
-      where: {
-        id: request.query.projectId,
-        organizationId: request.client!.organizationId,
-      },
-    });
-
-    if (!project) {
-      throw new HttpError('Project not found', { status: 404 });
-    }
-
-    where.projectId = request.query.projectId;
-  }
-
-  const clients = await db.client.findMany({
-    where,
-    orderBy: {
-      createdAt: 'desc',
-    },
-  });
-
-  reply.send({ data: clients });
-}
-
-export async function getClient(
-  request: FastifyRequest<{ Params: { id: string } }>,
-  reply: FastifyReply
-) {
-  const client = await db.client.findFirst({
-    where: {
-      id: request.params.id,
-      organizationId: request.client!.organizationId,
-    },
-  });
-
-  if (!client) {
-    throw new HttpError('Client not found', { status: 404 });
-  }
-
-  reply.send({ data: client });
-}
-
-export async function createClient(
-  request: FastifyRequest<{ Body: z.infer<typeof zCreateClient> }>,
-  reply: FastifyReply
-) {
-  const parsed = zCreateClient.safeParse(request.body);
-
-  if (parsed.success === false) {
-    return reply.status(400).send({
-      error: 'Bad Request',
-      message: 'Invalid request body',
-      details: parsed.error.errors,
-    });
-  }
-
-  const { name, projectId, type } = parsed.data;
-
-  // If projectId is provided, verify it belongs to organization
-  if (projectId) {
-    const project = await db.project.findFirst({
-      where: {
-        id: projectId,
-        organizationId: request.client!.organizationId,
-      },
-    });
-
-    if (!project) {
-      throw new HttpError('Project not found', { status: 404 });
-    }
-  }
-
-  // Generate secret
-  const secret = `sec_${crypto.randomBytes(10).toString('hex')}`;
-
-  const client = await db.client.create({
-    data: {
-      organizationId: request.client!.organizationId,
-      projectId: projectId || null,
-      name,
-      type: type || 'write',
-      secret: await hashPassword(secret),
-    },
-  });
-
-  await getClientByIdCached.clear(client.id);
-
-  reply.send({
-    data: {
-      ...client,
-      secret, // Return plain secret only once
-    },
-  });
-}
-
-export async function updateClient(
-  request: FastifyRequest<{
-    Params: { id: string };
-    Body: z.infer<typeof zUpdateClient>;
-  }>,
-  reply: FastifyReply
-) {
-  const parsed = zUpdateClient.safeParse(request.body);
-
-  if (parsed.success === false) {
-    return reply.status(400).send({
-      error: 'Bad Request',
-      message: 'Invalid request body',
-      details: parsed.error.errors,
-    });
-  }
-
-  // Verify client exists and belongs to organization
-  const existing = await db.client.findFirst({
-    where: {
-      id: request.params.id,
-      organizationId: request.client!.organizationId,
-    },
-  });
-
-  if (!existing) {
-    throw new HttpError('Client not found', { status: 404 });
-  }
-
-  const updateData: any = {};
-  if (parsed.data.name !== undefined) {
-    updateData.name = parsed.data.name;
-  }
-
-  const client = await db.client.update({
-    where: {
-      id: request.params.id,
-    },
-    data: updateData,
-  });
-
-  await getClientByIdCached.clear(client.id);
-
-  reply.send({ data: client });
-}
-
-export async function deleteClient(
-  request: FastifyRequest<{ Params: { id: string } }>,
-  reply: FastifyReply
-) {
-  const client = await db.client.findFirst({
-    where: {
-      id: request.params.id,
-      organizationId: request.client!.organizationId,
-    },
-  });
-
-  if (!client) {
-    throw new HttpError('Client not found', { status: 404 });
-  }
-
-  await db.client.delete({
-    where: {
-      id: request.params.id,
-    },
-  });
-
-  await getClientByIdCached.clear(request.params.id);
-
-  reply.send({ success: true });
-}
-
-// References CRUD
-export async function listReferences(
-  request: FastifyRequest<{ Querystring: { projectId?: string } }>,
-  reply: FastifyReply
-) {
-  const where: any = {};
-
-  if (request.query.projectId) {
-    // Verify project belongs to organization
-    const project = await db.project.findFirst({
-      where: {
-        id: request.query.projectId,
-        organizationId: request.client!.organizationId,
-      },
-    });
-
-    if (!project) {
-      throw new HttpError('Project not found', { status: 404 });
-    }
-
-    where.projectId = request.query.projectId;
-  } else {
-    // If no projectId, get all projects in org and filter references
-    const projects = await db.project.findMany({
-      where: {
-        organizationId: request.client!.organizationId,
-      },
-      select: { id: true },
-    });
-
-    where.projectId = {
-      in: projects.map((p) => p.id),
-    };
-  }
-
-  const references = await db.reference.findMany({
-    where,
-    orderBy: {
-      createdAt: 'desc',
-    },
-  });
-
-  reply.send({ data: references });
-}
-
-export async function getReference(
-  request: FastifyRequest<{ Params: { id: string } }>,
-  reply: FastifyReply
-) {
-  const reference = await db.reference.findUnique({
-    where: {
-      id: request.params.id,
-    },
-    include: {
-      project: {
-        select: {
-          organizationId: true,
-        },
-      },
-    },
-  });
-
-  if (!reference) {
-    throw new HttpError('Reference not found', { status: 404 });
-  }
-
-  if (reference.project.organizationId !== request.client!.organizationId) {
-    throw new HttpError('Reference not found', { status: 404 });
-  }
-
-  reply.send({ data: reference });
-}
-
-export async function createReference(
-  request: FastifyRequest<{ Body: z.infer<typeof zCreateReference> }>,
-  reply: FastifyReply
-) {
-  const parsed = zCreateReference.safeParse(request.body);
-
-  if (parsed.success === false) {
-    return reply.status(400).send({
-      error: 'Bad Request',
-      message: 'Invalid request body',
-      details: parsed.error.errors,
-    });
-  }
-
-  const { projectId, title, description, datetime } = parsed.data;
-
-  // Verify project belongs to organization
-  const project = await db.project.findFirst({
-    where: {
-      id: projectId,
-      organizationId: request.client!.organizationId,
-    },
-  });
-
-  if (!project) {
-    throw new HttpError('Project not found', { status: 404 });
-  }
-
-  const reference = await db.reference.create({
-    data: {
-      projectId,
-      title,
-      description: description || null,
-      date: new Date(datetime),
-    },
-  });
-
-  reply.send({ data: reference });
-}
-
-export async function updateReference(
-  request: FastifyRequest<{
-    Params: { id: string };
-    Body: z.infer<typeof zUpdateReference>;
-  }>,
-  reply: FastifyReply
-) {
-  const parsed = zUpdateReference.safeParse(request.body);
-
-  if (parsed.success === false) {
-    return reply.status(400).send({
-      error: 'Bad Request',
-      message: 'Invalid request body',
-      details: parsed.error.errors,
-    });
-  }
-
-  // Verify reference exists and belongs to organization
-  const existing = await db.reference.findUnique({
-    where: {
-      id: request.params.id,
-    },
-    include: {
-      project: {
-        select: {
-          organizationId: true,
-        },
-      },
-    },
-  });
-
-  if (!existing) {
-    throw new HttpError('Reference not found', { status: 404 });
-  }
-
-  if (existing.project.organizationId !== request.client!.organizationId) {
-    throw new HttpError('Reference not found', { status: 404 });
-  }
-
-  const updateData: any = {};
-  if (parsed.data.title !== undefined) {
-    updateData.title = parsed.data.title;
-  }
-  if (parsed.data.description !== undefined) {
-    updateData.description = parsed.data.description ?? null;
-  }
-  if (parsed.data.datetime !== undefined) {
-    updateData.date = new Date(parsed.data.datetime);
-  }
-
-  const reference = await db.reference.update({
-    where: {
-      id: request.params.id,
-    },
-    data: updateData,
-  });
-
-  reply.send({ data: reference });
-}
-
-export async function deleteReference(
-  request: FastifyRequest<{ Params: { id: string } }>,
-  reply: FastifyReply
-) {
-  const reference = await db.reference.findUnique({
-    where: {
-      id: request.params.id,
-    },
-    include: {
-      project: {
-        select: {
-          organizationId: true,
-        },
-      },
-    },
-  });
-
-  if (!reference) {
-    throw new HttpError('Reference not found', { status: 404 });
-  }
-
-  if (reference.project.organizationId !== request.client!.organizationId) {
-    throw new HttpError('Reference not found', { status: 404 });
-  }
-
-  await db.reference.delete({
-    where: {
-      id: request.params.id,
-    },
-  });
-
-  reply.send({ success: true });
-}

apps/api/src/controllers/misc.controller.ts

@@ -1,15 +1,16 @@
 import crypto from 'node:crypto';
+import { logger } from '@/utils/logger';
+import { parseUrlMeta } from '@/utils/parseUrlMeta';
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import sharp from 'sharp';
+
 import {
   DEFAULT_IP_HEADER_ORDER,
   getClientIpFromHeaders,
 } from '@openpanel/common/server/get-client-ip';
-import { ch, chQuery, formatClickhouseDate, TABLE_NAMES } from '@openpanel/db';
+import { TABLE_NAMES, ch, chQuery, formatClickhouseDate } from '@openpanel/db';
 import { type GeoLocation, getGeoLocation } from '@openpanel/geo';
 import { getCache, getRedisCache } from '@openpanel/redis';
-import type { FastifyReply, FastifyRequest } from 'fastify';
-import sharp from 'sharp';
-import { logger } from '@/utils/logger';
-import { parseUrlMeta } from '@/utils/parseUrlMeta';
 
 interface GetFaviconParams {
   url: string;
@@ -28,9 +29,7 @@ function createCacheKey(url: string, prefix = 'favicon'): string {
 
 function validateUrl(raw?: string): URL | null {
   try {
-    if (!raw) {
+    if (!raw) throw new Error('Missing ?url');
-      throw new Error('Missing ?url');
-    }
     const url = new URL(raw);
     if (url.protocol !== 'http:' && url.protocol !== 'https:') {
       throw new Error('Only http/https URLs are allowed');
@@ -43,7 +42,7 @@ function validateUrl(raw?: string): URL | null {
 
 // Binary cache functions (more efficient than base64)
 async function getFromCacheBinary(
-  key: string
+  key: string,
 ): Promise<{ buffer: Buffer; contentType: string } | null> {
   const redis = getRedisCache();
   const [bufferBase64, contentType] = await Promise.all([
@@ -51,16 +50,14 @@ async function getFromCacheBinary(
     redis.get(`${key}:ctype`),
   ]);
 
-  if (!(bufferBase64 && contentType)) {
+  if (!bufferBase64 || !contentType) return null;
-    return null;
-  }
   return { buffer: Buffer.from(bufferBase64, 'base64'), contentType };
 }
 
 async function setToCacheBinary(
   key: string,
   buffer: Buffer,
-  contentType: string
+  contentType: string,
 ): Promise<void> {
   const redis = getRedisCache();
   await Promise.all([
@@ -71,10 +68,10 @@ async function setToCacheBinary(
 
 // Fetch image with timeout and size limits
 async function fetchImage(
-  url: URL
+  url: URL,
 ): Promise<{ buffer: Buffer; contentType: string; status: number }> {
   const controller = new AbortController();
-  const timeout = setTimeout(() => controller.abort(), 1000); // 10s timeout
+  const timeout = setTimeout(() => controller.abort(), 10000); // 10s timeout
 
   try {
     const response = await fetch(url.toString(), {
@@ -121,11 +118,7 @@ async function fetchImage(
 
 // Check if URL is an ICO file
 function isIcoFile(url: string, contentType?: string): boolean {
-  return (
+  return url.toLowerCase().endsWith('.ico') || contentType === 'image/x-icon';
-    url.toLowerCase().endsWith('.ico') ||
-    contentType === 'image/x-icon' ||
-    contentType === 'image/vnd.microsoft.icon'
-  );
 }
 function isSvgFile(url: string, contentType?: string): boolean {
   return url.toLowerCase().endsWith('.svg') || contentType === 'image/svg+xml';
@@ -135,7 +128,7 @@ function isSvgFile(url: string, contentType?: string): boolean {
 async function processImage(
   buffer: Buffer,
   originalUrl?: string,
-  contentType?: string
+  contentType?: string,
 ): Promise<Buffer> {
   // If it's an ICO file, just return it as-is (no conversion needed)
   if (originalUrl && isIcoFile(originalUrl, contentType)) {
@@ -178,18 +171,28 @@ async function processImage(
       bufferSize: buffer.length,
     });
 
-    throw error;
+    // If Sharp fails, try to create a simple fallback image
+    return createFallbackImage();
   }
 }
 
+// Create a simple transparent fallback image when Sharp can't process the original
+function createFallbackImage(): Buffer {
+  // 1x1 transparent PNG
+  return Buffer.from(
+    'iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNk+A8AAQUBAScY42YAAAAASUVORK5CYII=',
+    'base64',
+  );
+}
+
 // Process OG image with Sharp (resize to 300px width)
 async function processOgImage(
   buffer: Buffer,
   originalUrl?: string,
-  contentType?: string
+  contentType?: string,
 ): Promise<Buffer> {
   // If buffer is small enough, return it as-is
-  if (buffer.length < 10_000) {
+  if (buffer.length < 10000) {
     logger.debug('Serving OG image directly without processing', {
       originalUrl,
       bufferSize: buffer.length,
@@ -213,7 +216,8 @@ async function processOgImage(
       bufferSize: buffer.length,
     });
 
-    throw error;
+    // If Sharp fails, try to create a simple fallback image
+    return createFallbackImage();
   }
 }
 
@@ -230,18 +234,12 @@ export async function getFavicon(
   request: FastifyRequest<{
     Querystring: GetFaviconParams;
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   try {
-    logger.info('getFavicon', {
-      url: request.query.url,
-    });
     const url = validateUrl(request.query.url);
     if (!url) {
-      return reply
+      return createFallbackImage();
-        .status(404)
-        .header('Content-Type', 'text/plain')
-        .send('Not found');
     }
 
     const cacheKey = createCacheKey(url.toString());
@@ -255,110 +253,41 @@ export async function getFavicon(
     }
 
     let imageUrl: URL;
+
     // If it's a direct image URL, use it directly
     if (isDirectImage(url)) {
       imageUrl = url;
     } else {
-      logger.info('before parseUrlMeta', {
-        url: url.toString(),
-      });
       // For website URLs, extract favicon from HTML
       const meta = await parseUrlMeta(url.toString());
-      logger.info('parseUrlMeta result', {
-        url: url.toString(),
-        favicon: meta?.favicon,
-      });
       if (meta?.favicon) {
         imageUrl = new URL(meta.favicon);
       } else {
-        // Try standard favicon location first
+        // Fallback to Google's favicon service
-        const { origin } = url;
+        const { hostname } = url;
-        imageUrl = new URL(`${origin}/favicon.ico`);
+        imageUrl = new URL(
+          `https://www.google.com/s2/favicons?domain=${hostname}&sz=256`,
+        );
       }
     }
 
-    logger.info('Fetching favicon', {
-      originalUrl: url.toString(),
-      imageUrl: imageUrl.toString(),
-    });
-
     // Fetch the image
-    let { buffer, contentType, status } = await fetchImage(imageUrl);
+    const { buffer, contentType, status } = await fetchImage(imageUrl);
 
-    logger.info('Favicon fetch result', {
+    if (status !== 200 || buffer.length === 0) {
-      originalUrl: url.toString(),
+      return reply.send(createFallbackImage());
-      imageUrl: imageUrl.toString(),
-      status,
-      bufferLength: buffer.length,
-      contentType,
-    });
-
-    // If the direct favicon fetch failed and it's not from DuckDuckGo's service,
-    // try DuckDuckGo's favicon service as a fallback
-    if (buffer.length === 0 && !imageUrl.hostname.includes('duckduckgo.com')) {
-      const { hostname } = url;
-      const duckduckgoUrl = new URL(
-        `https://icons.duckduckgo.com/ip3/${hostname}.ico`
-      );
-
-      logger.info('Trying DuckDuckGo favicon service', {
-        originalUrl: url.toString(),
-        duckduckgoUrl: duckduckgoUrl.toString(),
-      });
-
-      const duckduckgoResult = await fetchImage(duckduckgoUrl);
-      buffer = duckduckgoResult.buffer;
-      contentType = duckduckgoResult.contentType;
-      status = duckduckgoResult.status;
-      imageUrl = duckduckgoUrl;
-
-      logger.info('DuckDuckGo favicon result', {
-        status,
-        bufferLength: buffer.length,
-        contentType,
-      });
-    }
-
-    // Accept any response as long as we have valid image data
-    if (buffer.length === 0) {
-      return reply
-        .status(404)
-        .header('Content-Type', 'text/plain')
-        .send('Not found');
     }
 
     // Process the image (resize to 30x30 PNG, or serve ICO as-is)
     const processedBuffer = await processImage(
       buffer,
       imageUrl.toString(),
-      contentType
+      contentType,
     );
 
-    logger.info('Favicon processing result', {
-      originalUrl: url.toString(),
-      originalBufferLength: buffer.length,
-      processedBufferLength: processedBuffer.length,
-    });
-
     // Determine the correct content type for caching and response
     const isIco = isIcoFile(imageUrl.toString(), contentType);
-    const isSvg = isSvgFile(imageUrl.toString(), contentType);
+    const responseContentType = isIco ? 'image/x-icon' : contentType;
-    let responseContentType = contentType;
-
-    if (isIco) {
-      responseContentType = 'image/x-icon';
-    } else if (isSvg) {
-      responseContentType = 'image/svg+xml';
-    } else if (
-      processedBuffer.length < 5000 &&
-      buffer.length === processedBuffer.length
-    ) {
-      // Image was returned as-is, keep original content type
-      responseContentType = contentType;
-    } else {
-      // Image was processed by Sharp, it's now a PNG
-      responseContentType = 'image/png';
-    }
 
     // Cache the result with correct content type
     await setToCacheBinary(cacheKey, processedBuffer, responseContentType);
@@ -383,7 +312,7 @@ export async function getFavicon(
 
 export async function clearFavicons(
   request: FastifyRequest,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const redis = getRedisCache();
   const keys = await redis.keys('favicon:*');
@@ -399,7 +328,7 @@ export async function clearFavicons(
 
 export async function clearOgImages(
   request: FastifyRequest,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const redis = getRedisCache();
   const keys = await redis.keys('og:*');
@@ -420,7 +349,7 @@ export async function ping(
       count: number;
     };
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   try {
     await ch.insert({
@@ -452,10 +381,10 @@ export async function ping(
 export async function stats(request: FastifyRequest, reply: FastifyReply) {
   const res = await getCache('api:stats', 60 * 60, async () => {
     const projects = await chQuery<{ project_id: string; count: number }>(
-      `SELECT project_id, count(*) as count from ${TABLE_NAMES.events} GROUP by project_id order by count()`
+      `SELECT project_id, count(*) as count from ${TABLE_NAMES.events} GROUP by project_id order by count()`,
     );
     const last24h = await chQuery<{ count: number }>(
-      `SELECT count(*) as count from ${TABLE_NAMES.events} WHERE created_at > now() - interval '24 hours'`
+      `SELECT count(*) as count from ${TABLE_NAMES.events} WHERE created_at > now() - interval '24 hours'`,
     );
     return { projects, last24hCount: last24h[0]?.count || 0 };
   });
@@ -477,7 +406,7 @@ export async function getGeo(request: FastifyRequest, reply: FastifyReply) {
         ip,
         geo: await getGeoLocation(ip),
       };
-    })
+    }),
   );
 
   if (!ip) {
@@ -495,7 +424,7 @@ export async function getGeo(request: FastifyRequest, reply: FastifyReply) {
         acc[other.header] = other;
         return acc;
       },
-      {} as Record<string, { ip: string; header: string; geo: GeoLocation }>
+      {} as Record<string, { ip: string; header: string; geo: GeoLocation }>,
     ),
   });
 }
@@ -506,7 +435,7 @@ export async function getOgImage(
       url: string;
     };
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   try {
     const url = validateUrl(request.query.url);
@@ -550,7 +479,7 @@ export async function getOgImage(
     const processedBuffer = await processOgImage(
       buffer,
       imageUrl.toString(),
-      contentType
+      contentType,
     );
 
     // Cache the result

apps/api/src/controllers/oauth-callback.controller.tsx

@@ -1,17 +1,16 @@
+import { LogError } from '@/utils/errors';
 import {
   Arctic,
+  type OAuth2Tokens,
   createSession,
   generateSessionToken,
   github,
   google,
-  type OAuth2Tokens,
-  setLastAuthProviderCookie,
   setSessionTokenCookie,
 } from '@openpanel/auth';
 import { type Account, connectUserToOrganization, db } from '@openpanel/db';
 import type { FastifyReply, FastifyRequest } from 'fastify';
 import { z } from 'zod';
-import { LogError } from '@/utils/errors';
 
 async function getGithubEmail(githubAccessToken: string) {
   const emailListRequest = new Request('https://api.github.com/user/emails');
@@ -75,14 +74,10 @@ async function handleExistingUser({
   setSessionTokenCookie(
     (...args) => reply.setCookie(...args),
     sessionToken,
-    session.expiresAt
+    session.expiresAt,
-  );
-  setLastAuthProviderCookie(
-    (...args) => reply.setCookie(...args),
-    providerName
   );
   return reply.redirect(
-    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!
+    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!,
   );
 }
 
@@ -108,7 +103,7 @@ async function handleNewUser({
         existingUser,
         oauthUser,
         providerName,
-      }
+      },
     );
   }
 
@@ -143,14 +138,10 @@ async function handleNewUser({
   setSessionTokenCookie(
     (...args) => reply.setCookie(...args),
     sessionToken,
-    session.expiresAt
+    session.expiresAt,
-  );
-  setLastAuthProviderCookie(
-    (...args) => reply.setCookie(...args),
-    providerName
   );
   return reply.redirect(
-    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!
+    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!,
   );
 }
 
@@ -228,7 +219,7 @@ interface ValidatedOAuthQuery {
 
 async function validateOAuthCallback(
   req: FastifyRequest,
-  provider: Provider
+  provider: Provider,
 ): Promise<ValidatedOAuthQuery> {
   const schema = z.object({
     code: z.string(),
@@ -362,7 +353,7 @@ export async function googleCallback(req: FastifyRequest, reply: FastifyReply) {
 
 function redirectWithError(reply: FastifyReply, error: LogError | unknown) {
   const url = new URL(
-    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!
+    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!,
   );
   url.pathname = '/login';
   if (error instanceof LogError) {

apps/api/src/controllers/profile.controller.ts

@@ -1,18 +1,19 @@
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import { assocPath, pathOr } from 'ramda';
+
 import { parseUserAgent } from '@openpanel/common/server';
 import { getProfileById, upsertProfile } from '@openpanel/db';
 import { getGeoLocation } from '@openpanel/geo';
 import type {
-  DeprecatedIncrementProfilePayload,
+  IncrementProfilePayload,
-  DeprecatedUpdateProfilePayload,
+  UpdateProfilePayload,
-} from '@openpanel/validation';
+} from '@openpanel/sdk';
-import type { FastifyReply, FastifyRequest } from 'fastify';
-import { assocPath, pathOr } from 'ramda';
 
 export async function updateProfile(
   request: FastifyRequest<{
-    Body: DeprecatedUpdateProfilePayload;
+    Body: UpdateProfilePayload;
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const payload = request.body;
   const projectId = request.client!.projectId;
@@ -51,9 +52,9 @@ export async function updateProfile(
 
 export async function incrementProfileProperty(
   request: FastifyRequest<{
-    Body: DeprecatedIncrementProfilePayload;
+    Body: IncrementProfilePayload;
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const { profileId, property, value } = request.body;
   const projectId = request.client!.projectId;
@@ -68,7 +69,7 @@ export async function incrementProfileProperty(
 
   const parsed = Number.parseInt(
     pathOr<string>('0', property.split('.'), profile.properties),
-    10
+    10,
   );
 
   if (Number.isNaN(parsed)) {
@@ -78,7 +79,7 @@ export async function incrementProfileProperty(
   profile.properties = assocPath(
     property.split('.'),
     parsed + value,
-    profile.properties
+    profile.properties,
   );
 
   await upsertProfile({
@@ -93,9 +94,9 @@ export async function incrementProfileProperty(
 
 export async function decrementProfileProperty(
   request: FastifyRequest<{
-    Body: DeprecatedIncrementProfilePayload;
+    Body: IncrementProfilePayload;
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const { profileId, property, value } = request.body;
   const projectId = request.client?.projectId;
@@ -110,7 +111,7 @@ export async function decrementProfileProperty(
 
   const parsed = Number.parseInt(
     pathOr<string>('0', property.split('.'), profile.properties),
-    10
+    10,
   );
 
   if (Number.isNaN(parsed)) {
@@ -120,7 +121,7 @@ export async function decrementProfileProperty(
   profile.properties = assocPath(
     property.split('.'),
     parsed - value,
-    profile.properties
+    profile.properties,
   );
 
   await upsertProfile({

apps/api/src/controllers/track.controller.ts

@@ -1,33 +1,19 @@
-import { generateId, slug } from '@openpanel/common';
-import { generateDeviceId, parseUserAgent } from '@openpanel/common/server';
-import {
-  getProfileById,
-  getSalts,
-  groupBuffer,
-  replayBuffer,
-  upsertProfile,
-} from '@openpanel/db';
-import { type GeoLocation, getGeoLocation } from '@openpanel/geo';
-import {
-  type EventsQueuePayloadIncomingEvent,
-  getEventsGroupQueueShard,
-} from '@openpanel/queue';
-import { getRedisCache } from '@openpanel/redis';
-import {
-  type IAssignGroupPayload,
-  type IDecrementPayload,
-  type IGroupPayload,
-  type IIdentifyPayload,
-  type IIncrementPayload,
-  type IReplayPayload,
-  type ITrackHandlerPayload,
-  type ITrackPayload,
-  zTrackHandlerPayload,
-} from '@openpanel/validation';
 import type { FastifyReply, FastifyRequest } from 'fastify';
 import { assocPath, pathOr, pick } from 'ramda';
-import { HttpError } from '@/utils/errors';
+
-import { getDeviceId } from '@/utils/ids';
+import { generateId } from '@openpanel/common';
+import { generateDeviceId, parseUserAgent } from '@openpanel/common/server';
+import { getProfileById, getSalts, upsertProfile } from '@openpanel/db';
+import { type GeoLocation, getGeoLocation } from '@openpanel/geo';
+import { getEventsGroupQueueShard } from '@openpanel/queue';
+import { getRedisCache } from '@openpanel/redis';
+import type {
+  DecrementPayload,
+  IdentifyPayload,
+  IncrementPayload,
+  TrackHandlerPayload,
+  TrackPayload,
+} from '@openpanel/sdk';
 
 export function getStringHeaders(headers: FastifyRequest['headers']) {
   return Object.entries(
@@ -39,40 +25,36 @@ export function getStringHeaders(headers: FastifyRequest['headers']) {
         'openpanel-client-id',
         'request-id',
       ],
-      headers
+      headers,
-    )
+    ),
   ).reduce(
     (acc, [key, value]) => ({
       ...acc,
       [key]: value ? String(value) : undefined,
     }),
-    {}
+    {},
   );
 }
 
-function getIdentity(body: ITrackHandlerPayload): IIdentifyPayload | undefined {
+function getIdentity(body: TrackHandlerPayload): IdentifyPayload | undefined {
-  if (body.type === 'track') {
+  const identity =
-    const identity = body.payload.properties?.__identify as
+    'properties' in body.payload
-      | IIdentifyPayload
+      ? (body.payload?.properties?.__identify as IdentifyPayload | undefined)
-      | undefined;
-
-    if (identity) {
-      return identity;
-    }
-
-    return body.payload.profileId
-      ? {
-          profileId: String(body.payload.profileId),
-        }
       : undefined;
-  }
 
-  return undefined;
+  return (
+    identity ||
+    (body?.payload?.profileId
+      ? {
+          profileId: body.payload.profileId,
+        }
+      : undefined)
+  );
 }
 
 export function getTimestamp(
   timestamp: FastifyRequest['timestamp'],
-  payload: ITrackHandlerPayload['payload']
+  payload: TrackHandlerPayload['payload'],
 ) {
   const safeTimestamp = timestamp || Date.now();
   const userDefinedTimestamp =
@@ -99,7 +81,7 @@ export function getTimestamp(
     return { timestamp: safeTimestamp, isTimestampFromThePast: false };
   }
 
-  // isTimestampFromThePast is true only if timestamp is older than 15 minutes
+  // isTimestampFromThePast is true only if timestamp is older than 1 hour
   const isTimestampFromThePast =
     clientTimestampNumber < safeTimestamp - FIFTEEN_MINUTES_MS;
 
@@ -109,141 +91,203 @@ export function getTimestamp(
   };
 }
 
-interface TrackContext {
+export async function handler(
-  projectId: string;
-  ip: string;
-  ua?: string;
-  headers: Record<string, string | undefined>;
-  timestamp: { value: number; isFromPast: boolean };
-  identity?: IIdentifyPayload;
-  deviceId: string;
-  sessionId: string;
-  session?: EventsQueuePayloadIncomingEvent['payload']['session'];
-  geo: GeoLocation;
-}
-
-async function buildContext(
   request: FastifyRequest<{
-    Body: ITrackHandlerPayload;
+    Body: TrackHandlerPayload;
   }>,
-  validatedBody: ITrackHandlerPayload
+  reply: FastifyReply,
-): Promise<TrackContext> {
+) {
-  const projectId = request.client?.projectId;
+  const timestamp = getTimestamp(request.timestamp, request.body.payload);
-  if (!projectId) {
-    throw new HttpError('Missing projectId', { status: 400 });
-  }
-
-  const timestamp = getTimestamp(request.timestamp, validatedBody.payload);
   const ip =
-    validatedBody.type === 'track' && validatedBody.payload.properties?.__ip
+    'properties' in request.body.payload &&
-      ? (validatedBody.payload.properties.__ip as string)
+    request.body.payload.properties?.__ip
+      ? (request.body.payload.properties.__ip as string)
       : request.clientIp;
-  const ua = request.headers['user-agent'] ?? 'unknown/1.0';
+  const ua = request.headers['user-agent'];
+  const projectId = request.client?.projectId;
 
-  const headers = getStringHeaders(request.headers);
+  if (!projectId) {
-  const identity = getIdentity(validatedBody);
+    return reply.status(400).send({
-  const profileId = identity?.profileId;
+      status: 400,
-
+      error: 'Bad Request',
-  if (profileId && validatedBody.type === 'track') {
+      message: 'Missing projectId',
-    validatedBody.payload.profileId = profileId;
-  }
-
-  const overrideDeviceId =
-    validatedBody.type === 'track' &&
-    typeof validatedBody.payload?.properties?.__deviceId === 'string'
-      ? validatedBody.payload?.properties.__deviceId
-      : undefined;
-
-  // Get geo location (needed for track and identify)
-  const [geo, salts] = await Promise.all([getGeoLocation(ip), getSalts()]);
-
-  const deviceIdResult = await getDeviceId({
-    projectId,
-    ip,
-    ua,
-    salts,
-    overrideDeviceId,
     });
-
-  return {
-    projectId,
-    ip,
-    ua,
-    headers,
-    timestamp: {
-      value: timestamp.timestamp,
-      isFromPast: timestamp.isTimestampFromThePast,
-    },
-    identity,
-    deviceId: deviceIdResult.deviceId,
-    sessionId: deviceIdResult.sessionId,
-    session: deviceIdResult.session,
-    geo,
-  };
   }
 
-async function handleTrack(
+  const identity = getIdentity(request.body);
-  payload: ITrackPayload,
+  const profileId = identity?.profileId;
-  context: TrackContext
+  const overrideDeviceId = (() => {
-): Promise<void> {
+    const deviceId =
-  const { projectId, deviceId, geo, headers, timestamp, sessionId, session } =
+      'properties' in request.body.payload
-    context;
+        ? request.body.payload.properties?.__deviceId
+        : undefined;
+    if (typeof deviceId === 'string') {
+      return deviceId;
+    }
+    return undefined;
+  })();
 
+  // We might get a profileId from the alias table
+  // If we do, we should use that instead of the one from the payload
+  if (profileId) {
+    request.body.payload.profileId = profileId;
+  }
+
+  switch (request.body.type) {
+    case 'track': {
+      const [salts, geo] = await Promise.all([getSalts(), getGeoLocation(ip)]);
+      const currentDeviceId =
+        overrideDeviceId ||
+        (ua
+          ? generateDeviceId({
+              salt: salts.current,
+              origin: projectId,
+              ip,
+              ua,
+            })
+          : '');
+      const previousDeviceId = ua
+        ? generateDeviceId({
+            salt: salts.previous,
+            origin: projectId,
+            ip,
+            ua,
+          })
+        : '';
+
+      const promises = [];
+
+      // If we have more than one property in the identity object, we should identify the user
+      // Otherwise its only a profileId and we should not identify the user
+      if (identity && Object.keys(identity).length > 1) {
+        promises.push(
+          identify({
+            payload: identity,
+            projectId,
+            geo,
+            ua,
+          }),
+        );
+      }
+
+      promises.push(
+        track({
+          payload: request.body.payload,
+          currentDeviceId,
+          previousDeviceId,
+          projectId,
+          geo,
+          headers: getStringHeaders(request.headers),
+          timestamp: timestamp.timestamp,
+          isTimestampFromThePast: timestamp.isTimestampFromThePast,
+        }),
+      );
+
+      await Promise.all(promises);
+      break;
+    }
+    case 'identify': {
+      const geo = await getGeoLocation(ip);
+      await identify({
+        payload: request.body.payload,
+        projectId,
+        geo,
+        ua,
+      });
+      break;
+    }
+    case 'alias': {
+      return reply.status(400).send({
+        status: 400,
+        error: 'Bad Request',
+        message: 'Alias is not supported',
+      });
+    }
+    case 'increment': {
+      await increment({
+        payload: request.body.payload,
+        projectId,
+      });
+      break;
+    }
+    case 'decrement': {
+      await decrement({
+        payload: request.body.payload,
+        projectId,
+      });
+      break;
+    }
+    default: {
+      return reply.status(400).send({
+        status: 400,
+        error: 'Bad Request',
+        message: 'Invalid type',
+      });
+    }
+  }
+
+  reply.status(200).send();
+}
+
+async function track({
+  payload,
+  currentDeviceId,
+  previousDeviceId,
+  projectId,
+  geo,
+  headers,
+  timestamp,
+  isTimestampFromThePast,
+}: {
+  payload: TrackPayload;
+  currentDeviceId: string;
+  previousDeviceId: string;
+  projectId: string;
+  geo: GeoLocation;
+  headers: Record<string, string | undefined>;
+  timestamp: number;
+  isTimestampFromThePast: boolean;
+}) {
   const uaInfo = parseUserAgent(headers['user-agent'], payload.properties);
   const groupId = uaInfo.isServer
     ? payload.profileId
       ? `${projectId}:${payload.profileId}`
-      : undefined
+      : `${projectId}:${generateId()}`
-    : deviceId;
+    : currentDeviceId;
-  const jobId = [
+  const jobId = [payload.name, timestamp, projectId, currentDeviceId, groupId]
-    slug(payload.name),
-    timestamp.value,
-    projectId,
-    deviceId,
-    groupId,
-  ]
     .filter(Boolean)
     .join('-');
-
+  await getEventsGroupQueueShard(groupId).add({
-  const promises: Promise<unknown>[] = [];
+    orderMs: timestamp,
-
-  // If we have more than one property in the identity object, we should identify the user
-  // Otherwise its only a profileId and we should not identify the user
-  if (context.identity && Object.keys(context.identity).length > 1) {
-    promises.push(handleIdentify(context.identity, context));
-  }
-
-  promises.push(
-    getEventsGroupQueueShard(groupId || generateId()).add({
-      orderMs: timestamp.value,
     data: {
       projectId,
       headers,
       event: {
         ...payload,
-          groups: payload.groups ?? [],
+        timestamp,
-          timestamp: timestamp.value,
+        isTimestampFromThePast,
-          isTimestampFromThePast: timestamp.isFromPast,
       },
       uaInfo,
       geo,
-        deviceId,
+      currentDeviceId,
-        sessionId,
+      previousDeviceId,
-        session,
     },
     groupId,
     jobId,
-    })
+  });
-  );
-
-  await Promise.all(promises);
 }
 
-async function handleIdentify(
+async function identify({
-  payload: IIdentifyPayload,
+  payload,
-  context: TrackContext
+  projectId,
-): Promise<void> {
+  geo,
-  const { projectId, geo, ua } = context;
+  ua,
+}: {
+  payload: IdentifyPayload;
+  projectId: string;
+  geo: GeoLocation;
+  ua?: string;
+}) {
   const uaInfo = parseUserAgent(ua, payload.properties);
   await upsertProfile({
     ...payload,
@@ -268,30 +312,32 @@ async function handleIdentify(
   });
 }
 
-async function adjustProfileProperty(
+async function increment({
-  payload: IIncrementPayload | IDecrementPayload,
+  payload,
-  projectId: string,
+  projectId,
-  direction: 1 | -1
+}: {
-): Promise<void> {
+  payload: IncrementPayload;
+  projectId: string;
+}) {
   const { profileId, property, value } = payload;
   const profile = await getProfileById(profileId, projectId);
   if (!profile) {
-    throw new HttpError('Profile not found', { status: 404 });
+    throw new Error('Not found');
   }
 
   const parsed = Number.parseInt(
     pathOr<string>('0', property.split('.'), profile.properties),
-    10
+    10,
   );
 
   if (Number.isNaN(parsed)) {
-    throw new HttpError('Property value is not a number', { status: 400 });
+    throw new Error('Not number');
   }
 
   profile.properties = assocPath(
     property.split('.'),
-    parsed + direction * (value || 1),
+    parsed + (value || 1),
-    profile.properties
+    profile.properties,
   );
 
   await upsertProfile({
@@ -302,142 +348,45 @@ async function adjustProfileProperty(
   });
 }
 
-async function handleIncrement(
+async function decrement({
-  payload: IIncrementPayload,
+  payload,
-  context: TrackContext
+  projectId,
-): Promise<void> {
+}: {
-  await adjustProfileProperty(payload, context.projectId, 1);
+  payload: DecrementPayload;
+  projectId: string;
+}) {
+  const { profileId, property, value } = payload;
+  const profile = await getProfileById(profileId, projectId);
+  if (!profile) {
+    throw new Error('Not found');
   }
 
-async function handleDecrement(
+  const parsed = Number.parseInt(
-  payload: IDecrementPayload,
+    pathOr<string>('0', property.split('.'), profile.properties),
-  context: TrackContext
+    10,
-): Promise<void> {
+  );
-  await adjustProfileProperty(payload, context.projectId, -1);
+
+  if (Number.isNaN(parsed)) {
+    throw new Error('Not number');
   }
 
-async function handleReplay(
+  profile.properties = assocPath(
-  payload: IReplayPayload,
+    property.split('.'),
-  context: TrackContext
+    parsed - (value || 1),
-): Promise<void> {
+    profile.properties,
-  if (!context.sessionId) {
+  );
-    throw new HttpError('Session ID is required for replay', { status: 400 });
-  }
 
-  const row = {
-    project_id: context.projectId,
-    session_id: context.sessionId,
-    chunk_index: payload.chunk_index,
-    started_at: payload.started_at,
-    ended_at: payload.ended_at,
-    events_count: payload.events_count,
-    is_full_snapshot: payload.is_full_snapshot,
-    payload: payload.payload,
-  };
-  await replayBuffer.add(row);
-}
-
-async function handleGroup(
-  payload: IGroupPayload,
-  context: TrackContext
-): Promise<void> {
-  const { id, type, name, properties = {} } = payload;
-  await groupBuffer.add({
-    id,
-    projectId: context.projectId,
-    type,
-    name,
-    properties,
-  });
-}
-
-async function handleAssignGroup(
-  payload: IAssignGroupPayload,
-  context: TrackContext
-): Promise<void> {
-  const profileId = payload.profileId ?? context.deviceId;
-  if (!profileId) {
-    return;
-  }
   await upsertProfile({
-    id: String(profileId),
+    id: profile.id,
-    projectId: context.projectId,
+    projectId,
-    isExternal: !!payload.profileId,
+    properties: profile.properties,
-    groups: payload.groupIds,
+    isExternal: true,
-  });
-}
-
-export async function handler(
-  request: FastifyRequest<{
-    Body: ITrackHandlerPayload;
-  }>,
-  reply: FastifyReply
-) {
-  // Validate request body with Zod
-  const validationResult = zTrackHandlerPayload.safeParse(request.body);
-  if (!validationResult.success) {
-    return reply.status(400).send({
-      status: 400,
-      error: 'Bad Request',
-      message: 'Validation failed',
-      errors: validationResult.error.errors,
-    });
-  }
-
-  const validatedBody = validationResult.data;
-
-  // Handle alias (not supported)
-  if (validatedBody.type === 'alias') {
-    return reply.status(400).send({
-      status: 400,
-      error: 'Bad Request',
-      message: 'Alias is not supported',
-    });
-  }
-
-  // Build request context
-  const context = await buildContext(request, validatedBody);
-
-  // Dispatch to appropriate handler
-  switch (validatedBody.type) {
-    case 'track':
-      await handleTrack(validatedBody.payload, context);
-      break;
-    case 'identify':
-      await handleIdentify(validatedBody.payload, context);
-      break;
-    case 'increment':
-      await handleIncrement(validatedBody.payload, context);
-      break;
-    case 'decrement':
-      await handleDecrement(validatedBody.payload, context);
-      break;
-    case 'replay':
-      await handleReplay(validatedBody.payload, context);
-      break;
-    case 'group':
-      await handleGroup(validatedBody.payload, context);
-      break;
-    case 'assign_group':
-      await handleAssignGroup(validatedBody.payload, context);
-      break;
-    default:
-      return reply.status(400).send({
-        status: 400,
-        error: 'Bad Request',
-        message: 'Invalid type',
-      });
-  }
-
-  reply.status(200).send({
-    deviceId: context.deviceId,
-    sessionId: context.sessionId,
   });
 }
 
 export async function fetchDeviceId(
   request: FastifyRequest,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const salts = await getSalts();
   const projectId = request.client?.projectId;
@@ -470,31 +419,20 @@ export async function fetchDeviceId(
 
   try {
     const multi = getRedisCache().multi();
-    multi.hget(
+    multi.exists(`bull:sessions:sessionEnd:${projectId}:${currentDeviceId}`);
-      `bull:sessions:sessionEnd:${projectId}:${currentDeviceId}`,
+    multi.exists(`bull:sessions:sessionEnd:${projectId}:${previousDeviceId}`);
-      'data'
-    );
-    multi.hget(
-      `bull:sessions:sessionEnd:${projectId}:${previousDeviceId}`,
-      'data'
-    );
     const res = await multi.exec();
+
     if (res?.[0]?.[1]) {
-      const data = JSON.parse(res?.[0]?.[1] as string);
-      const sessionId = data.payload.sessionId;
       return reply.status(200).send({
         deviceId: currentDeviceId,
-        sessionId,
         message: 'current session exists for this device id',
       });
     }
 
     if (res?.[1]?.[1]) {
-      const data = JSON.parse(res?.[1]?.[1] as string);
-      const sessionId = data.payload.sessionId;
       return reply.status(200).send({
         deviceId: previousDeviceId,
-        sessionId,
         message: 'previous session exists for this device id',
       });
     }
@@ -504,7 +442,6 @@ export async function fetchDeviceId(
 
   return reply.status(200).send({
     deviceId: currentDeviceId,
-    sessionId: '',
     message: 'No session exists for this device id',
   });
 }

apps/api/src/controllers/webhook.controller.ts

@@ -1,18 +1,18 @@
 import fs from 'node:fs';
-import path, { dirname } from 'node:path';
+import path from 'node:path';
+import { dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
-
 import { db, getOrganizationByProjectIdCached } from '@openpanel/db';
 import {
   sendSlackNotification,
   slackInstaller,
 } from '@openpanel/integrations/src/slack';
 import {
-  getProduct,
   PolarWebhookVerificationError,
+  getProduct,
   validatePolarEvent,
 } from '@openpanel/payments';
 import { publishEvent } from '@openpanel/redis';
@@ -34,7 +34,7 @@ export async function slackWebhook(
   request: FastifyRequest<{
     Querystring: unknown;
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const parsedParams = paramsSchema.safeParse(request.query);
 
@@ -45,10 +45,10 @@ export async function slackWebhook(
 
   const veryfiedState = await slackInstaller.stateStore?.verifyStateParam(
     new Date(),
-    parsedParams.data.state
+    parsedParams.data.state,
   );
   const parsedMetadata = metadataSchema.safeParse(
-    JSON.parse(veryfiedState?.metadata ?? '{}')
+    JSON.parse(veryfiedState?.metadata ?? '{}'),
   );
 
   if (!parsedMetadata.success) {
@@ -75,7 +75,7 @@ export async function slackWebhook(
           zod: parsedJson,
           json,
         },
-        'Failed to parse slack auth response'
+        'Failed to parse slack auth response',
       );
       const html = fs.readFileSync(path.join(__dirname, 'error.html'), 'utf8');
       return reply.status(500).header('Content-Type', 'text/html').send(html);
@@ -104,7 +104,7 @@ export async function slackWebhook(
     });
 
     return reply.redirect(
-      `${process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL}/${organizationId}/integrations/installed`
+      `${process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL}/${organizationId}/integrations/installed`,
     );
   } catch (err) {
     request.log.error(err);
@@ -128,13 +128,13 @@ export async function polarWebhook(
   request: FastifyRequest<{
     Querystring: unknown;
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   try {
     const event = validatePolarEvent(
       request.rawBody!,
       request.headers as Record<string, string>,
-      process.env.POLAR_WEBHOOK_SECRET ?? ''
+      process.env.POLAR_WEBHOOK_SECRET ?? '',
     );
 
     switch (event.type) {
@@ -169,11 +169,6 @@ export async function polarWebhook(
           .parse(event.data.metadata);
 
         const product = await getProduct(event.data.productId);
-        const organization = await db.organization.findUniqueOrThrow({
-          where: {
-            id: metadata.organizationId,
-          },
-        });
         const eventsLimit = product.metadata?.eventsLimit;
         const subscriptionPeriodEventsLimit =
           typeof eventsLimit === 'number' ? eventsLimit : undefined;
@@ -191,9 +186,7 @@ export async function polarWebhook(
             where: {
               subscriptionCustomerId: event.data.customer.id,
               subscriptionId: event.data.id,
-              subscriptionStatus: {
+              subscriptionStatus: 'active',
-                in: ['active', 'past_due', 'unpaid'],
-              },
             },
           });
 
@@ -223,13 +216,6 @@ export async function polarWebhook(
             subscriptionCreatedByUserId: metadata.userId,
             subscriptionInterval: event.data.recurringInterval,
             subscriptionPeriodEventsLimit,
-            subscriptionPeriodEventsCountExceededAt:
-              subscriptionPeriodEventsLimit &&
-              organization.subscriptionPeriodEventsCountExceededAt &&
-              organization.subscriptionPeriodEventsLimit <
-                subscriptionPeriodEventsLimit
-                ? null
-                : undefined,
           },
         });
 

apps/api/src/hooks/client.hook.ts

@@ -1,15 +1,12 @@
-import type {
-  DeprecatedPostEventPayload,
-  ITrackHandlerPayload,
-} from '@openpanel/validation';
-import type { FastifyReply, FastifyRequest } from 'fastify';
 import { SdkAuthError, validateSdkRequest } from '@/utils/auth';
+import type { PostEventPayload, TrackHandlerPayload } from '@openpanel/sdk';
+import type { FastifyReply, FastifyRequest } from 'fastify';
 
 export async function clientHook(
   req: FastifyRequest<{
-    Body: ITrackHandlerPayload | DeprecatedPostEventPayload;
+    Body: PostEventPayload | TrackHandlerPayload;
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   try {
     const client = await validateSdkRequest(req);

apps/api/src/hooks/duplicate.hook.ts

@@ -1,28 +1,23 @@
-import type {
-  DeprecatedPostEventPayload,
-  ITrackHandlerPayload,
-} from '@openpanel/validation';
-import type { FastifyReply, FastifyRequest } from 'fastify';
 import { isDuplicatedEvent } from '@/utils/deduplicate';
+import type { PostEventPayload, TrackHandlerPayload } from '@openpanel/sdk';
+import type { FastifyReply, FastifyRequest } from 'fastify';
 
 export async function duplicateHook(
   req: FastifyRequest<{
-    Body: ITrackHandlerPayload | DeprecatedPostEventPayload;
+    Body: PostEventPayload | TrackHandlerPayload;
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const ip = req.clientIp;
   const origin = req.headers.origin;
   const clientId = req.headers['openpanel-client-id'];
-  const body = req?.body;
+  const shouldCheck = ip && origin && clientId;
-  const isTrackPayload = getIsTrackPayload(req);
+
-  const isReplay = isTrackPayload && req.body.type === 'replay';
-  const shouldCheck = ip && origin && clientId && !isReplay;
   const isDuplicate = shouldCheck
     ? await isDuplicatedEvent({
         ip,
         origin,
-        payload: body,
+        payload: req.body,
         projectId: clientId as string,
       })
     : false;
@@ -31,25 +26,3 @@ export async function duplicateHook(
     return reply.status(200).send('Duplicate event');
   }
 }
-
-function getIsTrackPayload(
-  req: FastifyRequest<{
-    Body: ITrackHandlerPayload | DeprecatedPostEventPayload;
-  }>
-): req is FastifyRequest<{
-  Body: ITrackHandlerPayload;
-}> {
-  if (req.method !== 'POST') {
-    return false;
-  }
-
-  if (!req.body) {
-    return false;
-  }
-
-  if (typeof req.body !== 'object' || Array.isArray(req.body)) {
-    return false;
-  }
-
-  return 'type' in req.body;
-}

apps/api/src/hooks/is-bot.hook.ts

@@ -1,19 +1,22 @@
-import { createBotEvent } from '@openpanel/db';
-import type {
-  DeprecatedPostEventPayload,
-  ITrackHandlerPayload,
-} from '@openpanel/validation';
-import type { FastifyReply, FastifyRequest } from 'fastify';
 import { isBot } from '@/bots';
+import { createBotEvent } from '@openpanel/db';
+import type { TrackHandlerPayload } from '@openpanel/sdk';
+import type { FastifyReply, FastifyRequest } from 'fastify';
+
+type DeprecatedEventPayload = {
+  name: string;
+  properties: Record<string, unknown>;
+  timestamp: string;
+};
 
 export async function isBotHook(
   req: FastifyRequest<{
-    Body: ITrackHandlerPayload | DeprecatedPostEventPayload;
+    Body: TrackHandlerPayload | DeprecatedEventPayload;
   }>,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   const bot = req.headers['user-agent']
-    ? await isBot(req.headers['user-agent'])
+    ? isBot(req.headers['user-agent'])
     : null;
 
   if (bot && req.client?.projectId) {
@@ -43,6 +46,6 @@ export async function isBotHook(
       }
     }
 
-    return reply.status(202).send({ bot });
+    return reply.status(202).send('OK');
   }
 }

apps/api/src/hooks/request-id.hook.ts

@@ -1,4 +1,8 @@
-import type { FastifyRequest } from 'fastify';
+import type {
+  FastifyReply,
+  FastifyRequest,
+  HookHandlerDoneFunction,
+} from 'fastify';
 
 export async function requestIdHook(request: FastifyRequest) {
   if (!request.headers['request-id']) {

apps/api/src/hooks/request-logging.hook.ts

@@ -1,3 +1,4 @@
+import { DEFAULT_IP_HEADER_ORDER } from '@openpanel/common';
 import type { FastifyReply, FastifyRequest } from 'fastify';
 import { path, pick } from 'ramda';
 
@@ -5,7 +6,7 @@ const ignoreLog = ['/healthcheck', '/healthz', '/metrics', '/misc'];
 const ignoreMethods = ['OPTIONS'];
 
 const getTrpcInput = (
-  request: FastifyRequest
+  request: FastifyRequest,
 ): Record<string, unknown> | undefined => {
   const input = path<any>(['query', 'input'], request);
   try {
@@ -17,7 +18,7 @@ const getTrpcInput = (
 
 export async function requestLoggingHook(
   request: FastifyRequest,
-  reply: FastifyReply
+  reply: FastifyReply,
 ) {
   if (ignoreMethods.includes(request.method)) {
     return;
@@ -37,10 +38,19 @@ export async function requestLoggingHook(
       url: request.url,
       method: request.method,
       elapsed: reply.elapsedTime,
+      clientIp: request.clientIp,
+      clientIpHeader: request.clientIpHeader,
       headers: pick(
-        ['openpanel-client-id', 'openpanel-sdk-name', 'openpanel-sdk-version'],
+        [
-        request.headers
+          'openpanel-client-id',
+          'openpanel-sdk-name',
+          'openpanel-sdk-version',
+          'user-agent',
+          ...DEFAULT_IP_HEADER_ORDER,
+        ],
+        request.headers,
       ),
+      body: request.body,
     });
   }
 }

apps/api/src/index.ts

@@ -1,28 +1,27 @@
-/** biome-ignore-all lint/suspicious/useAwait: fastify need async or done callbacks */
-process.env.TZ = 'UTC';
-
 import compress from '@fastify/compress';
 import cookie from '@fastify/cookie';
 import cors, { type FastifyCorsOptions } from '@fastify/cors';
-import {
-  decodeSessionToken,
-  EMPTY_SESSION,
-  type SessionValidationResult,
-  validateSessionToken,
-} from '@openpanel/auth';
-import { generateId } from '@openpanel/common';
-import {
-  type IServiceClientWithProject,
-  runWithAlsSession,
-} from '@openpanel/db';
-import { getRedisPub } from '@openpanel/redis';
-import type { AppRouter } from '@openpanel/trpc';
-import { appRouter, createContext } from '@openpanel/trpc';
 import type { FastifyTRPCPluginOptions } from '@trpc/server/adapters/fastify';
 import { fastifyTRPCPlugin } from '@trpc/server/adapters/fastify';
 import type { FastifyBaseLogger, FastifyRequest } from 'fastify';
 import Fastify from 'fastify';
 import metricsPlugin from 'fastify-metrics';
+
+import { generateId } from '@openpanel/common';
+import {
+  type IServiceClientWithProject,
+  runWithAlsSession,
+} from '@openpanel/db';
+import { getCache, getRedisPub } from '@openpanel/redis';
+import type { AppRouter } from '@openpanel/trpc';
+import { appRouter, createContext } from '@openpanel/trpc';
+
+import {
+  EMPTY_SESSION,
+  type SessionValidationResult,
+  decodeSessionToken,
+  validateSessionToken,
+} from '@openpanel/auth';
 import sourceMapSupport from 'source-map-support';
 import {
   healthcheck,
@@ -36,12 +35,9 @@ import { timestampHook } from './hooks/timestamp.hook';
 import aiRouter from './routes/ai.router';
 import eventRouter from './routes/event.router';
 import exportRouter from './routes/export.router';
-import gscCallbackRouter from './routes/gsc-callback.router';
 import importRouter from './routes/import.router';
 import insightsRouter from './routes/insights.router';
 import liveRouter from './routes/live.router';
-import logsRouter from './routes/logs.router';
-import manageRouter from './routes/manage.router';
 import miscRouter from './routes/misc.router';
 import oauthRouter from './routes/oauth-callback.router';
 import profileRouter from './routes/profile.router';
@@ -53,6 +49,8 @@ import { logger } from './utils/logger';
 
 sourceMapSupport.install();
 
+process.env.TZ = 'UTC';
+
 declare module 'fastify' {
   interface FastifyRequest {
     client: IServiceClientWithProject | null;
@@ -64,16 +62,13 @@ declare module 'fastify' {
 }
 
 const port = Number.parseInt(process.env.API_PORT || '3000', 10);
-const host =
-  process.env.API_HOST ||
-  (process.env.NODE_ENV === 'production' ? '0.0.0.0' : 'localhost');
 
 const startServer = async () => {
   logger.info('Starting server');
   try {
     const fastify = Fastify({
       maxParamLength: 15_000,
-      bodyLimit: 1_048_576 * 500, // 500MB
+      bodyLimit: 1048576 * 500, // 500MB
       loggerInstance: logger as unknown as FastifyBaseLogger,
       disableRequestLogging: true,
       genReqId: (req) =>
@@ -85,7 +80,7 @@ const startServer = async () => {
     fastify.register(cors, () => {
       return (
         req: FastifyRequest,
-        callback: (error: Error | null, options: FastifyCorsOptions) => void
+        callback: (error: Error | null, options: FastifyCorsOptions) => void,
       ) => {
         // TODO: set prefix on dashboard routes
         const corsPaths = [
@@ -98,7 +93,7 @@ const startServer = async () => {
         ];
 
         const isPrivatePath = corsPaths.some((path) =>
-          req.url.startsWith(path)
+          req.url.startsWith(path),
         );
 
         if (isPrivatePath) {
@@ -119,7 +114,6 @@ const startServer = async () => {
 
         return callback(null, {
           origin: '*',
-          maxAge: 86_400 * 7, // cache preflight for 7 days
         });
       };
     });
@@ -149,21 +143,12 @@ const startServer = async () => {
       instance.addHook('onRequest', async (req) => {
         if (req.cookies?.session) {
           try {
-            const sessionId = decodeSessionToken(req.cookies?.session);
+            const sessionId = decodeSessionToken(req.cookies.session);
             const session = await runWithAlsSession(sessionId, () =>
-              validateSessionToken(req.cookies.session)
+              validateSessionToken(req.cookies.session),
             );
             req.session = session;
-          } catch {
+          } catch (e) {
-            req.session = EMPTY_SESSION;
-          }
-        } else if (process.env.DEMO_USER_ID) {
-          try {
-            const session = await runWithAlsSession('1', () =>
-              validateSessionToken(null)
-            );
-            req.session = session;
-          } catch {
             req.session = EMPTY_SESSION;
           }
         } else {
@@ -175,7 +160,7 @@ const startServer = async () => {
         prefix: '/trpc',
         trpcOptions: {
           router: appRouter,
-          createContext,
+          createContext: createContext,
           onError(ctx) {
             if (
               ctx.error.code === 'UNAUTHORIZED' &&
@@ -196,10 +181,8 @@ const startServer = async () => {
       instance.register(liveRouter, { prefix: '/live' });
       instance.register(webhookRouter, { prefix: '/webhook' });
       instance.register(oauthRouter, { prefix: '/oauth' });
-      instance.register(gscCallbackRouter, { prefix: '/gsc' });
       instance.register(miscRouter, { prefix: '/misc' });
       instance.register(aiRouter, { prefix: '/ai' });
-      instance.register(logsRouter, { prefix: '/logs' });
     });
 
     // Public API
@@ -211,7 +194,6 @@ const startServer = async () => {
       instance.register(importRouter, { prefix: '/import' });
       instance.register(insightsRouter, { prefix: '/insights' });
       instance.register(trackRouter, { prefix: '/track' });
-      instance.register(manageRouter, { prefix: '/manage' });
       // Keep existing endpoints for backward compatibility
       instance.get('/healthcheck', healthcheck);
       // New Kubernetes-style health endpoints
@@ -221,50 +203,39 @@ const startServer = async () => {
         reply.send({
           status: 'ok',
           message: 'Successfully running OpenPanel.dev API',
-        })
+        }),
       );
     });
 
-    const SKIP_LOG_ERRORS = ['UNAUTHORIZED', 'FST_ERR_CTP_INVALID_MEDIA_TYPE'];
     fastify.setErrorHandler((error, request, reply) => {
-      if (error.statusCode === 429) {
-        return reply.status(429).send({
-          status: 429,
-          error: 'Too Many Requests',
-          message: 'You have exceeded the rate limit for this endpoint.',
-        });
-      }
-
       if (error instanceof HttpError) {
-        if (!SKIP_LOG_ERRORS.includes(error.code)) {
+        request.log.error(`${error.message}`, error);
-          request.log.error('internal server error', { error });
-        }
-
         if (process.env.NODE_ENV === 'production' && error.status === 500) {
-          return reply.status(500).send('Internal server error');
+          request.log.error('request error', { error });
-        }
+          reply.status(500).send('Internal server error');
-
+        } else {
-        return reply.status(error.status).send({
+          reply.status(error.status).send({
             status: error.status,
             error: error.error,
             message: error.message,
           });
         }
-
+      } else if (error.statusCode === 429) {
-      if (!SKIP_LOG_ERRORS.includes(error.code)) {
+        reply.status(429).send({
-        request.log.error('request error', { error });
+          status: 429,
-      }
+          error: 'Too Many Requests',
-
+          message: 'You have exceeded the rate limit for this endpoint.',
-      const status = error?.statusCode ?? 500;
-      if (process.env.NODE_ENV === 'production' && status === 500) {
-        return reply.status(500).send('Internal server error');
-      }
-
-      return reply.status(status).send({
-        status,
-        error,
-        message: error.message,
         });
+      } else if (error.statusCode === 400) {
+        reply.status(400).send({
+          status: 400,
+          error,
+          message: 'The request was invalid.',
+        });
+      } else {
+        request.log.error('request error', { error });
+        reply.status(500).send('Internal server error');
+      }
     });
 
     if (process.env.NODE_ENV === 'production') {
@@ -281,7 +252,10 @@ const startServer = async () => {
       });
     }
 
-    await fastify.listen({ host, port });
+    await fastify.listen({
+      host: process.env.NODE_ENV === 'production' ? '0.0.0.0' : 'localhost',
+      port,
+    });
 
     try {
       // Notify when keys expires
@@ -289,7 +263,7 @@ const startServer = async () => {
     } catch (error) {
       logger.warn('Failed to set redis notify-keyspace-events', error);
       logger.warn(
-        'If you use a managed Redis service, you may need to set this manually.'
+        'If you use a managed Redis service, you may need to set this manually.',
       );
       logger.warn('Otherwise some functions may not work as expected.');
     }

apps/api/src/routes/ai.router.ts

@@ -1,6 +1,6 @@
-import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
 import * as controller from '@/controllers/ai.controller';
 import { activateRateLimiter } from '@/utils/rate-limiter';
+import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
 
 const aiRouter: FastifyPluginCallback = async (fastify) => {
   await activateRateLimiter<

apps/api/src/routes/event.router.ts

@@ -1,5 +1,6 @@
-import type { FastifyPluginCallback } from 'fastify';
 import * as controller from '@/controllers/event.controller';
+import type { FastifyPluginCallback } from 'fastify';
+
 import { clientHook } from '@/hooks/client.hook';
 import { duplicateHook } from '@/hooks/duplicate.hook';
 import { isBotHook } from '@/hooks/is-bot.hook';

apps/api/src/routes/export.router.ts

@@ -1,8 +1,8 @@
-import { Prisma } from '@openpanel/db';
-import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
 import * as controller from '@/controllers/export.controller';
 import { validateExportRequest } from '@/utils/auth';
 import { activateRateLimiter } from '@/utils/rate-limiter';
+import { Prisma } from '@openpanel/db';
+import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
 
 const exportRouter: FastifyPluginCallback = async (fastify) => {
   await activateRateLimiter({

apps/api/src/routes/gsc-callback.router.ts

@@ -1,12 +0,0 @@
-import type { FastifyPluginCallback } from 'fastify';
-import { gscGoogleCallback } from '@/controllers/gsc-oauth-callback.controller';
-
-const router: FastifyPluginCallback = async (fastify) => {
-  fastify.route({
-    method: 'GET',
-    url: '/callback',
-    handler: gscGoogleCallback,
-  });
-};
-
-export default router;

apps/api/src/routes/import.router.ts

@@ -1,7 +1,8 @@
-import { Prisma } from '@openpanel/db';
-import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
 import * as controller from '@/controllers/import.controller';
 import { validateImportRequest } from '@/utils/auth';
+import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
+
+import { Prisma } from '@openpanel/db';
 
 const importRouter: FastifyPluginCallback = async (fastify) => {
   fastify.addHook('preHandler', async (req: FastifyRequest, reply) => {

apps/api/src/routes/insights.router.ts

@@ -1,8 +1,8 @@
-import { Prisma } from '@openpanel/db';
-import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
 import * as controller from '@/controllers/insights.controller';
 import { validateExportRequest } from '@/utils/auth';
 import { activateRateLimiter } from '@/utils/rate-limiter';
+import { Prisma } from '@openpanel/db';
+import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
 
 const insightsRouter: FastifyPluginCallback = async (fastify) => {
   await activateRateLimiter({

apps/api/src/routes/live.router.ts

@@ -1,6 +1,6 @@
+import * as controller from '@/controllers/live.controller';
 import fastifyWS from '@fastify/websocket';
 import type { FastifyPluginCallback } from 'fastify';
-import * as controller from '@/controllers/live.controller';
 
 const liveRouter: FastifyPluginCallback = async (fastify) => {
   fastify.register(fastifyWS);
@@ -9,22 +9,22 @@ const liveRouter: FastifyPluginCallback = async (fastify) => {
     fastify.get(
       '/organization/:organizationId',
       { websocket: true },
-      controller.wsOrganizationEvents
+      controller.wsOrganizationEvents,
     );
     fastify.get(
       '/visitors/:projectId',
       { websocket: true },
-      controller.wsVisitors
+      controller.wsVisitors,
     );
     fastify.get(
       '/events/:projectId',
       { websocket: true },
-      controller.wsProjectEvents
+      controller.wsProjectEvents,
     );
     fastify.get(
       '/notifications/:projectId',
       { websocket: true },
-      controller.wsProjectNotifications
+      controller.wsProjectNotifications,
     );
   });
 };

apps/api/src/routes/logs.router.ts

@@ -1,6 +0,0 @@
-import { handler } from '@/controllers/logs.controller';
-import type { FastifyInstance } from 'fastify';
-
-export default async function (fastify: FastifyInstance) {
-  fastify.post('/', handler);
-}

apps/api/src/routes/manage.router.ts

@@ -1,132 +0,0 @@
-import { Prisma } from '@openpanel/db';
-import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
-import * as controller from '@/controllers/manage.controller';
-import { validateManageRequest } from '@/utils/auth';
-import { activateRateLimiter } from '@/utils/rate-limiter';
-
-const manageRouter: FastifyPluginCallback = async (fastify) => {
-  await activateRateLimiter({
-    fastify,
-    max: 20,
-    timeWindow: '10 seconds',
-  });
-
-  fastify.addHook('preHandler', async (req: FastifyRequest, reply) => {
-    try {
-      const client = await validateManageRequest(req.headers);
-      req.client = client;
-    } catch (e) {
-      if (e instanceof Prisma.PrismaClientKnownRequestError) {
-        return reply.status(401).send({
-          error: 'Unauthorized',
-          message: 'Client ID seems to be malformed',
-        });
-      }
-
-      if (e instanceof Error) {
-        return reply
-          .status(401)
-          .send({ error: 'Unauthorized', message: e.message });
-      }
-
-      return reply
-        .status(401)
-        .send({ error: 'Unauthorized', message: 'Unexpected error' });
-    }
-  });
-
-  // Projects routes
-  fastify.route({
-    method: 'GET',
-    url: '/projects',
-    handler: controller.listProjects,
-  });
-
-  fastify.route({
-    method: 'GET',
-    url: '/projects/:id',
-    handler: controller.getProject,
-  });
-
-  fastify.route({
-    method: 'POST',
-    url: '/projects',
-    handler: controller.createProject,
-  });
-
-  fastify.route({
-    method: 'PATCH',
-    url: '/projects/:id',
-    handler: controller.updateProject,
-  });
-
-  fastify.route({
-    method: 'DELETE',
-    url: '/projects/:id',
-    handler: controller.deleteProject,
-  });
-
-  // Clients routes
-  fastify.route({
-    method: 'GET',
-    url: '/clients',
-    handler: controller.listClients,
-  });
-
-  fastify.route({
-    method: 'GET',
-    url: '/clients/:id',
-    handler: controller.getClient,
-  });
-
-  fastify.route({
-    method: 'POST',
-    url: '/clients',
-    handler: controller.createClient,
-  });
-
-  fastify.route({
-    method: 'PATCH',
-    url: '/clients/:id',
-    handler: controller.updateClient,
-  });
-
-  fastify.route({
-    method: 'DELETE',
-    url: '/clients/:id',
-    handler: controller.deleteClient,
-  });
-
-  // References routes
-  fastify.route({
-    method: 'GET',
-    url: '/references',
-    handler: controller.listReferences,
-  });
-
-  fastify.route({
-    method: 'GET',
-    url: '/references/:id',
-    handler: controller.getReference,
-  });
-
-  fastify.route({
-    method: 'POST',
-    url: '/references',
-    handler: controller.createReference,
-  });
-
-  fastify.route({
-    method: 'PATCH',
-    url: '/references/:id',
-    handler: controller.updateReference,
-  });
-
-  fastify.route({
-    method: 'DELETE',
-    url: '/references/:id',
-    handler: controller.deleteReference,
-  });
-};
-
-export default manageRouter;

apps/api/src/routes/misc.router.ts

@@ -1,5 +1,5 @@
-import type { FastifyPluginCallback } from 'fastify';
 import * as controller from '@/controllers/misc.controller';
+import type { FastifyPluginCallback } from 'fastify';
 
 const miscRouter: FastifyPluginCallback = async (fastify) => {
   fastify.route({

apps/api/src/routes/oauth-callback.router.ts

@@ -1,5 +1,5 @@
-import type { FastifyPluginCallback } from 'fastify';
 import * as controller from '@/controllers/oauth-callback.controller';
+import type { FastifyPluginCallback } from 'fastify';
 
 const router: FastifyPluginCallback = async (fastify) => {
   fastify.route({

apps/api/src/routes/profile.router.ts

@@ -1,7 +1,7 @@
-import type { FastifyPluginCallback } from 'fastify';
 import * as controller from '@/controllers/profile.controller';
 import { clientHook } from '@/hooks/client.hook';
 import { isBotHook } from '@/hooks/is-bot.hook';
+import type { FastifyPluginCallback } from 'fastify';
 
 const eventRouter: FastifyPluginCallback = async (fastify) => {
   fastify.addHook('preHandler', clientHook);

apps/api/src/routes/track.router.ts

@@ -1,5 +1,6 @@
-import type { FastifyPluginCallback } from 'fastify';
 import { fetchDeviceId, handler } from '@/controllers/track.controller';
+import type { FastifyPluginCallback } from 'fastify';
+
 import { clientHook } from '@/hooks/client.hook';
 import { duplicateHook } from '@/hooks/duplicate.hook';
 import { isBotHook } from '@/hooks/is-bot.hook';
@@ -12,7 +13,23 @@ const trackRouter: FastifyPluginCallback = async (fastify) => {
   fastify.route({
     method: 'POST',
     url: '/',
-    handler,
+    handler: handler,
+    schema: {
+      body: {
+        type: 'object',
+        required: ['type', 'payload'],
+        properties: {
+          type: {
+            type: 'string',
+            enum: ['track', 'increment', 'decrement', 'alias', 'identify'],
+          },
+          payload: {
+            type: 'object',
+            additionalProperties: true,
+          },
+        },
+      },
+    },
   });
 
   fastify.route({
@@ -25,7 +42,6 @@ const trackRouter: FastifyPluginCallback = async (fastify) => {
           type: 'object',
           properties: {
             deviceId: { type: 'string' },
-            sessionId: { type: 'string' },
             message: { type: 'string', optional: true },
           },
         },

apps/api/src/routes/webhook.router.ts

@@ -1,5 +1,5 @@
-import type { FastifyPluginCallback } from 'fastify';
 import * as controller from '@/controllers/webhook.controller';
+import type { FastifyPluginCallback } from 'fastify';
 
 const webhookRouter: FastifyPluginCallback = async (fastify) => {
   fastify.route({

apps/api/src/utils/ai-tools.ts

@@ -1,18 +1,23 @@
 import { chartTypes } from '@openpanel/constants';
 import type { IClickhouseSession } from '@openpanel/db';
 import {
-  ch,
-  clix,
   type IClickhouseEvent,
   type IClickhouseProfile,
   TABLE_NAMES,
+  ch,
+  clix,
 } from '@openpanel/db';
+import { ChartEngine } from '@openpanel/db';
 import { getCache } from '@openpanel/redis';
-import { zReportInput } from '@openpanel/validation';
+import { zChartInputAI } from '@openpanel/validation';
 import { tool } from 'ai';
 import { z } from 'zod';
 
-export function getReport({ projectId }: { projectId: string }) {
+export function getReport({
+  projectId,
+}: {
+  projectId: string;
+}) {
   return tool({
     description: `Generate a report (a chart) for 
     - ${chartTypes.area}
@@ -22,10 +27,7 @@ export function getReport({ projectId }: { projectId: string }) {
     - ${chartTypes.metric}
     - ${chartTypes.bar}
 `,
-    parameters: zReportInput.extend({
+    parameters: zChartInputAI,
-      startDate: z.string().describe('The start date for the report'),
-      endDate: z.string().describe('The end date for the report'),
-    }),
     execute: async (report) => {
       return {
         type: 'report',
@@ -62,14 +64,15 @@ export function getReport({ projectId }: { projectId: string }) {
     },
   });
 }
-export function getConversionReport({ projectId }: { projectId: string }) {
+export function getConversionReport({
+  projectId,
+}: {
+  projectId: string;
+}) {
   return tool({
     description:
       'Generate a report (a chart) for conversions between two actions a unique user took.',
-    parameters: zReportInput.extend({
+    parameters: zChartInputAI,
-      startDate: z.string().describe('The start date for the report'),
-      endDate: z.string().describe('The end date for the report'),
-    }),
     execute: async (report) => {
       return {
         type: 'report',
@@ -83,14 +86,15 @@ export function getConversionReport({ projectId }: { projectId: string }) {
     },
   });
 }
-export function getFunnelReport({ projectId }: { projectId: string }) {
+export function getFunnelReport({
+  projectId,
+}: {
+  projectId: string;
+}) {
   return tool({
     description:
       'Generate a report (a chart) for funnel between two or more actions a unique user (session_id or profile_id) took.',
-    parameters: zReportInput.extend({
+    parameters: zChartInputAI,
-      startDate: z.string().describe('The start date for the report'),
-      endDate: z.string().describe('The end date for the report'),
-    }),
     execute: async (report) => {
       return {
         type: 'report',
@@ -105,7 +109,11 @@ export function getFunnelReport({ projectId }: { projectId: string }) {
   });
 }
 
-export function getProfiles({ projectId }: { projectId: string }) {
+export function getProfiles({
+  projectId,
+}: {
+  projectId: string;
+}) {
   return tool({
     description: 'Get profiles',
     parameters: z.object({
@@ -171,7 +179,11 @@ export function getProfiles({ projectId }: { projectId: string }) {
   });
 }
 
-export function getProfile({ projectId }: { projectId: string }) {
+export function getProfile({
+  projectId,
+}: {
+  projectId: string;
+}) {
   return tool({
     description: 'Get a specific profile',
     parameters: z.object({
@@ -255,7 +267,11 @@ export function getProfile({ projectId }: { projectId: string }) {
   });
 }
 
-export function getEvents({ projectId }: { projectId: string }) {
+export function getEvents({
+  projectId,
+}: {
+  projectId: string;
+}) {
   return tool({
     description: 'Get events for a project or specific profile',
     parameters: z.object({
@@ -344,7 +360,11 @@ export function getEvents({ projectId }: { projectId: string }) {
   });
 }
 
-export function getSessions({ projectId }: { projectId: string }) {
+export function getSessions({
+  projectId,
+}: {
+  projectId: string;
+}) {
   return tool({
     description: 'Get sessions for a project or specific profile',
     parameters: z.object({
@@ -429,7 +449,11 @@ export function getSessions({ projectId }: { projectId: string }) {
   });
 }
 
-export function getAllEventNames({ projectId }: { projectId: string }) {
+export function getAllEventNames({
+  projectId,
+}: {
+  projectId: string;
+}) {
   return tool({
     description: 'Get the top 50 event names in a comma separated list',
     parameters: z.object({}),

apps/api/src/utils/ai.ts

@@ -14,7 +14,11 @@ export const getChatModel = () => {
   }
 };
 
-export const getChatSystemPrompt = ({ projectId }: { projectId: string }) => {
+export const getChatSystemPrompt = ({
+  projectId,
+}: {
+  projectId: string;
+}) => {
   return `You're an product and web analytics expert. Don't generate more than the user asks for. Follow all rules listed below!
 ## General:
 - projectId: \`${projectId}\`

apps/api/src/utils/auth.ts

@@ -1,14 +1,14 @@
+import type { FastifyRequest, RawRequestDefaultExpression } from 'fastify';
+
 import { verifyPassword } from '@openpanel/common/server';
 import type { IServiceClientWithProject } from '@openpanel/db';
 import { ClientType, getClientByIdCached } from '@openpanel/db';
 import { getCache } from '@openpanel/redis';
+import type { PostEventPayload, TrackHandlerPayload } from '@openpanel/sdk';
 import type {
-  DeprecatedPostEventPayload,
   IProjectFilterIp,
   IProjectFilterProfileId,
-  ITrackHandlerPayload,
 } from '@openpanel/validation';
-import type { FastifyRequest, RawRequestDefaultExpression } from 'fastify';
 import { path } from 'ramda';
 
 const cleanDomain = (domain: string) =>
@@ -30,7 +30,7 @@ export class SdkAuthError extends Error {
       clientId?: string;
       clientSecret?: string;
       origin?: string;
-    }
+    },
   ) {
     super(message);
     this.name = 'SdkAuthError';
@@ -41,8 +41,8 @@ export class SdkAuthError extends Error {
 
 export async function validateSdkRequest(
   req: FastifyRequest<{
-    Body: ITrackHandlerPayload | DeprecatedPostEventPayload;
+    Body: PostEventPayload | TrackHandlerPayload;
-  }>
+  }>,
 ): Promise<IServiceClientWithProject> {
   const { headers, clientIp } = req;
   const clientIdNew = headers['openpanel-client-id'] as string;
@@ -69,10 +69,10 @@ export async function validateSdkRequest(
 
   if (
     !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(
-      clientId
+      clientId,
     )
   ) {
-    throw createError('Ingestion: Client ID must be a valid UUIDv4');
+    throw createError('Ingestion: Clean ID must be a valid UUIDv4');
   }
 
   const client = await getClientByIdCached(clientId);
@@ -87,7 +87,7 @@ export async function validateSdkRequest(
 
   // Filter out blocked IPs
   const ipFilter = client.project.filters.filter(
-    (filter): filter is IProjectFilterIp => filter.type === 'ip'
+    (filter): filter is IProjectFilterIp => filter.type === 'ip',
   );
   if (ipFilter.some((filter) => filter.ip === clientIp)) {
     throw createError('Ingestion: IP address is blocked by project filter');
@@ -95,7 +95,7 @@ export async function validateSdkRequest(
 
   // Filter out blocked profile ids
   const profileFilter = client.project.filters.filter(
-    (filter): filter is IProjectFilterProfileId => filter.type === 'profile_id'
+    (filter): filter is IProjectFilterProfileId => filter.type === 'profile_id',
   );
   const profileId =
     path<string | undefined>(['payload', 'profileId'], req.body) || // Track handler
@@ -112,11 +112,12 @@ export async function validateSdkRequest(
   // Only allow revenue tracking if it was sent with a client secret
   // or if the project has allowUnsafeRevenueTracking enabled
   if (
-    !(client.project.allowUnsafeRevenueTracking || clientSecret) &&
+    !client.project.allowUnsafeRevenueTracking &&
+    !clientSecret &&
     typeof revenue !== 'undefined'
   ) {
     throw createError(
-      'Ingestion: Revenue tracking is not allowed without a client secret'
+      'Ingestion: Revenue tracking is not allowed without a client secret',
     );
   }
 
@@ -130,7 +131,7 @@ export async function validateSdkRequest(
       // support wildcard domains `*.foo.com`
       if (cleanedDomain.includes('*')) {
         const regex = new RegExp(
-          `${cleanedDomain.replaceAll('.', '\\.').replaceAll('*', '.+?')}`
+          `${cleanedDomain.replaceAll('.', '\\.').replaceAll('*', '.+?')}`,
         );
 
         return regex.test(origin || '');
@@ -155,7 +156,7 @@ export async function validateSdkRequest(
       `client:auth:${clientId}:${Buffer.from(clientSecret).toString('base64')}`,
       60 * 5,
       async () => await verifyPassword(clientSecret, client.secret!),
-      true
+      true,
     );
     if (isVerified) {
       return client;
@@ -166,14 +167,14 @@ export async function validateSdkRequest(
 }
 
 export async function validateExportRequest(
-  headers: RawRequestDefaultExpression['headers']
+  headers: RawRequestDefaultExpression['headers'],
 ): Promise<IServiceClientWithProject> {
   const clientId = headers['openpanel-client-id'] as string;
   const clientSecret = (headers['openpanel-client-secret'] as string) || '';
 
   if (
     !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(
-      clientId
+      clientId,
     )
   ) {
     throw new Error('Export: Client ID must be a valid UUIDv4');
@@ -201,14 +202,14 @@ export async function validateExportRequest(
 }
 
 export async function validateImportRequest(
-  headers: RawRequestDefaultExpression['headers']
+  headers: RawRequestDefaultExpression['headers'],
 ): Promise<IServiceClientWithProject> {
   const clientId = headers['openpanel-client-id'] as string;
   const clientSecret = (headers['openpanel-client-secret'] as string) || '';
 
   if (
     !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(
-      clientId
+      clientId,
     )
   ) {
     throw new Error('Import: Client ID must be a valid UUIDv4');
@@ -234,40 +235,3 @@ export async function validateImportRequest(
 
   return client;
 }
-
-export async function validateManageRequest(
-  headers: RawRequestDefaultExpression['headers']
-): Promise<IServiceClientWithProject> {
-  const clientId = headers['openpanel-client-id'] as string;
-  const clientSecret = (headers['openpanel-client-secret'] as string) || '';
-
-  if (
-    !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(
-      clientId
-    )
-  ) {
-    throw new Error('Manage: Client ID must be a valid UUIDv4');
-  }
-
-  const client = await getClientByIdCached(clientId);
-
-  if (!client) {
-    throw new Error('Manage: Invalid client id');
-  }
-
-  if (!client.secret) {
-    throw new Error('Manage: Client has no secret');
-  }
-
-  if (client.type !== ClientType.root) {
-    throw new Error(
-      'Manage: Only root clients are allowed to manage resources'
-    );
-  }
-
-  if (!(await verifyPassword(clientSecret, client.secret))) {
-    throw new Error('Manage: Invalid client secret');
-  }
-
-  return client;
-}

apps/api/src/utils/deduplicate.ts

@@ -20,10 +20,10 @@ export async function isDuplicatedEvent({
         origin,
         projectId,
       },
-      'md5'
+      'md5',
     )}`,
     '1',
-    100
+    100,
   );
 
   if (locked) {

apps/api/src/utils/errors.ts

@@ -4,7 +4,7 @@ export class LogError extends Error {
   constructor(
     message: string,
     payload?: Record<string, unknown>,
-    options?: ErrorOptions
+    options?: ErrorOptions,
   ) {
     super(message, options);
     this.name = 'LogError';
@@ -26,7 +26,7 @@ export class HttpError extends Error {
       fingerprint?: string;
       extra?: Record<string, unknown>;
       error?: Error | unknown;
-    }
+    },
   ) {
     super(message);
     this.name = 'HttpError';

apps/api/src/utils/graceful-shutdown.ts

@@ -29,7 +29,7 @@ export function isShuttingDown() {
 export async function shutdown(
   fastify: FastifyInstance,
   signal: string,
-  exitCode = 0
+  exitCode = 0,
 ) {
   if (isShuttingDown()) {
     logger.warn('Shutdown already in progress, ignoring signal', { signal });
@@ -96,7 +96,7 @@ export async function shutdown(
         if (redis.status === 'ready') {
           await redis.quit();
         }
-      })
+      }),
     );
     logger.info('Redis connections closed');
   } catch (error) {

apps/api/src/utils/ids.ts

@@ -1,181 +0,0 @@
-import crypto from 'node:crypto';
-import { generateDeviceId } from '@openpanel/common/server';
-import { getSafeJson } from '@openpanel/json';
-import type {
-  EventsQueuePayloadCreateSessionEnd,
-  EventsQueuePayloadIncomingEvent,
-} from '@openpanel/queue';
-import { getRedisCache } from '@openpanel/redis';
-import { pick } from 'ramda';
-
-export async function getDeviceId({
-  projectId,
-  ip,
-  ua,
-  salts,
-  overrideDeviceId,
-}: {
-  projectId: string;
-  ip: string;
-  ua: string | undefined;
-  salts: { current: string; previous: string };
-  overrideDeviceId?: string;
-}) {
-  if (overrideDeviceId) {
-    return { deviceId: overrideDeviceId, sessionId: '' };
-  }
-
-  if (!ua) {
-    return { deviceId: '', sessionId: '' };
-  }
-
-  const currentDeviceId = generateDeviceId({
-    salt: salts.current,
-    origin: projectId,
-    ip,
-    ua,
-  });
-  const previousDeviceId = generateDeviceId({
-    salt: salts.previous,
-    origin: projectId,
-    ip,
-    ua,
-  });
-
-  return await getInfoFromSession({
-    projectId,
-    currentDeviceId,
-    previousDeviceId,
-  });
-}
-
-interface DeviceIdResult {
-  deviceId: string;
-  sessionId: string;
-  session?: EventsQueuePayloadIncomingEvent['payload']['session'];
-}
-
-async function getInfoFromSession({
-  projectId,
-  currentDeviceId,
-  previousDeviceId,
-}: {
-  projectId: string;
-  currentDeviceId: string;
-  previousDeviceId: string;
-}): Promise<DeviceIdResult> {
-  try {
-    const multi = getRedisCache().multi();
-    multi.hget(
-      `bull:sessions:sessionEnd:${projectId}:${currentDeviceId}`,
-      'data'
-    );
-    multi.hget(
-      `bull:sessions:sessionEnd:${projectId}:${previousDeviceId}`,
-      'data'
-    );
-    const res = await multi.exec();
-    if (res?.[0]?.[1]) {
-      const data = getSafeJson<EventsQueuePayloadCreateSessionEnd>(
-        (res?.[0]?.[1] as string) ?? ''
-      );
-      if (data) {
-        return {
-          deviceId: currentDeviceId,
-          sessionId: data.payload.sessionId,
-          session: pick(
-            ['referrer', 'referrerName', 'referrerType'],
-            data.payload
-          ),
-        };
-      }
-    }
-    if (res?.[1]?.[1]) {
-      const data = getSafeJson<EventsQueuePayloadCreateSessionEnd>(
-        (res?.[1]?.[1] as string) ?? ''
-      );
-      if (data) {
-        return {
-          deviceId: previousDeviceId,
-          sessionId: data.payload.sessionId,
-          session: pick(
-            ['referrer', 'referrerName', 'referrerType'],
-            data.payload
-          ),
-        };
-      }
-    }
-  } catch (error) {
-    console.error('Error getting session end GET /track/device-id', error);
-  }
-
-  return {
-    deviceId: currentDeviceId,
-    sessionId: getSessionId({
-      projectId,
-      deviceId: currentDeviceId,
-      graceMs: 5 * 1000,
-      windowMs: 1000 * 60 * 30,
-    }),
-  };
-}
-
-/**
- * Deterministic session id for (projectId, deviceId) within a time window,
- * with a grace period at the *start* of each window to avoid boundary splits.
- *
- * - windowMs: 30 minutes by default
- * - graceMs: 1 minute by default (events in first minute of a bucket map to previous bucket)
- * - Output: base64url, 128-bit (16 bytes) truncated from SHA-256
- */
-function getSessionId(params: {
-  projectId: string;
-  deviceId: string;
-  eventMs?: number; // use event timestamp; defaults to Date.now()
-  windowMs?: number; // default 5 min
-  graceMs?: number; // default 1 min
-  bytes?: number; // default 16 (128-bit). You can set 24 or 32 for longer ids.
-}): string {
-  const {
-    projectId,
-    deviceId,
-    eventMs = Date.now(),
-    windowMs = 5 * 60 * 1000,
-    graceMs = 60 * 1000,
-    bytes = 16,
-  } = params;
-
-  if (!projectId) {
-    throw new Error('projectId is required');
-  }
-  if (!deviceId) {
-    throw new Error('deviceId is required');
-  }
-  if (windowMs <= 0) {
-    throw new Error('windowMs must be > 0');
-  }
-  if (graceMs < 0 || graceMs >= windowMs) {
-    throw new Error('graceMs must be >= 0 and < windowMs');
-  }
-  if (bytes < 8 || bytes > 32) {
-    throw new Error('bytes must be between 8 and 32');
-  }
-
-  const bucket = Math.floor(eventMs / windowMs);
-  const offset = eventMs - bucket * windowMs;
-
-  // Grace at the start of the bucket: stick to the previous bucket.
-  const chosenBucket = offset < graceMs ? bucket - 1 : bucket;
-
-  const input = `sess:v1:${projectId}:${deviceId}:${chosenBucket}`;
-
-  const digest = crypto.createHash('sha256').update(input).digest();
-  const truncated = digest.subarray(0, bytes);
-
-  // base64url
-  return truncated
-    .toString('base64')
-    .replace(/\+/g, '-')
-    .replace(/\//g, '_')
-    .replace(/=+$/g, '');
-}

apps/api/src/utils/parse-zod-query-string.ts

@@ -3,21 +3,14 @@ import { getSafeJson } from '@openpanel/json';
 export const parseQueryString = (obj: Record<string, any>): any => {
   return Object.fromEntries(
     Object.entries(obj).map(([k, v]) => {
-      if (typeof v === 'object') {
+      if (typeof v === 'object') return [k, parseQueryString(v)];
-        return [k, parseQueryString(v)];
-      }
       if (
         /^-?[0-9]+(\.[0-9]+)?$/i.test(v) &&
         !Number.isNaN(Number.parseFloat(v))
-      ) {
+      )
         return [k, Number.parseFloat(v)];
-      }
+      if (v === 'true') return [k, true];
-      if (v === 'true') {
+      if (v === 'false') return [k, false];
-        return [k, true];
-      }
-      if (v === 'false') {
-        return [k, false];
-      }
       if (typeof v === 'string') {
         if (getSafeJson(v) !== null) {
           return [k, getSafeJson(v)];
@@ -25,6 +18,6 @@ export const parseQueryString = (obj: Record<string, any>): any => {
         return [k, v];
       }
       return [k, null];
-    })
+    }),
   );
 };

apps/api/src/utils/parseUrlMeta.ts

@@ -1,13 +1,7 @@
 import urlMetadata from 'url-metadata';
 
 function fallbackFavicon(url: string) {
-  try {
+  return `https://www.google.com/s2/favicons?domain=${url}&sz=256`;
-    const hostname = new URL(url).hostname;
-    return `https://icons.duckduckgo.com/ip3/${hostname}.ico`;
-  } catch {
-    // If URL parsing fails, use the original string
-    return `https://icons.duckduckgo.com/ip3/${url}.ico`;
-  }
 }
 
 function findBestFavicon(favicons: UrlMetaData['favicons']) {
@@ -19,7 +13,7 @@ function findBestFavicon(favicons: UrlMetaData['favicons']) {
       (favicon) =>
         favicon.rel === 'shortcut icon' ||
         favicon.rel === 'icon' ||
-        favicon.rel === 'apple-touch-icon'
+        favicon.rel === 'apple-touch-icon',
     );
 
   if (match) {
@@ -72,9 +66,7 @@ interface UrlMetaData {
 
 export async function parseUrlMeta(url: string) {
   try {
-    const metadata = (await urlMetadata(url, {
+    const metadata = (await urlMetadata(url)) as UrlMetaData;
-      timeout: 500,
-    })) as UrlMetaData;
     const data = transform(metadata, url);
     return data;
   } catch (err) {

apps/api/tsconfig.json

@@ -5,8 +5,7 @@
     "paths": {
       "@/*": ["./src/*"]
     },
-    "tsBuildInfoFile": "node_modules/.cache/tsbuildinfo.json",
+    "tsBuildInfoFile": "node_modules/.cache/tsbuildinfo.json"
-    "strictNullChecks": true
   },
   "include": ["."],
   "exclude": ["node_modules", "dist"]

apps/api/tsdown.config.ts

@@ -1,5 +1,5 @@
-import type { Options } from 'tsdown';
 import { defineConfig } from 'tsdown';
+import type { Options } from 'tsdown';
 
 const options: Options = {
   clean: true,

apps/justfuckinguseopenpanel/index.html

@@ -1,767 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-  <head>
-    <meta charset="UTF-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-
-    <!-- Primary Meta Tags -->
-    <title>Just Fucking Use OpenPanel - Stop Overpaying for Analytics</title>
-    <meta
-      name="title"
-      content="Just Fucking Use OpenPanel - Stop Overpaying for Analytics"
-    >
-    <meta
-      name="description"
-      content="Mixpanel costs $2,300/month at scale. PostHog costs $1,982/month. Web-only tools tell you nothing about user behavior. OpenPanel gives you full product analytics for a fraction of the cost, or FREE self-hosted."
-    >
-    <meta
-      name="keywords"
-      content="openpanel, analytics, mixpanel alternative, posthog alternative, product analytics, web analytics, open source analytics, self-hosted analytics"
-    >
-    <meta name="author" content="OpenPanel">
-    <meta name="robots" content="index, follow">
-    <link rel="canonical" href="https://justfuckinguseopenpanel.dev/">
-    <link rel="icon" type="image/x-icon" href="/favicon.ico">
-
-    <!-- Open Graph / Facebook -->
-    <meta property="og:type" content="website">
-    <meta property="og:url" content="https://justfuckinguseopenpanel.dev/">
-    <meta
-      property="og:title"
-      content="Just Fucking Use OpenPanel - Stop Overpaying for Analytics"
-    >
-    <meta
-      property="og:description"
-      content="Mixpanel costs $2,300/month at scale. PostHog costs $1,982/month. Web-only tools tell you nothing about user behavior. OpenPanel gives you full product analytics for a fraction of the cost, or FREE self-hosted."
-    >
-    <meta property="og:image" content="/ogimage.png">
-    <meta property="og:image:width" content="1200">
-    <meta property="og:image:height" content="630">
-    <meta property="og:site_name" content="Just Fucking Use OpenPanel">
-
-    <!-- Twitter -->
-    <meta name="twitter:card" content="summary_large_image">
-    <meta name="twitter:url" content="https://justfuckinguseopenpanel.dev/">
-    <meta
-      name="twitter:title"
-      content="Just Fucking Use OpenPanel - Stop Overpaying for Analytics"
-    >
-    <meta
-      name="twitter:description"
-      content="Mixpanel costs $2,300/month at scale. PostHog costs $1,982/month. Web-only tools tell you nothing about user behavior. OpenPanel gives you full product analytics for a fraction of the cost, or FREE self-hosted."
-    >
-    <meta name="twitter:image" content="/ogimage.png">
-
-    <!-- Additional Meta Tags -->
-    <meta name="theme-color" content="#0a0a0a">
-    <meta name="color-scheme" content="dark">
-    <style>
-    * {
-      margin: 0;
-      padding: 0;
-      box-sizing: border-box;
-    }
-
-    body {
-      background: #0a0a0a;
-      color: #e5e5e5;
-      font-family:
-        -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue",
-        Arial, sans-serif;
-      font-size: 18px;
-      line-height: 1.75;
-      padding: 2rem 1.5rem;
-    }
-
-    .container {
-      max-width: 700px;
-      margin: 0 auto;
-    }
-
-    h1 {
-      font-size: 2rem;
-      font-weight: 700;
-      line-height: 1;
-      margin-bottom: 0.5rem;
-      color: #ffffff;
-    }
-
-    h2 {
-      font-size: 1.875rem;
-      font-weight: 800;
-      line-height: 1.3;
-      margin-top: 3rem;
-      margin-bottom: 1.5rem;
-      color: #ffffff;
-    }
-
-    h3 {
-      font-size: 1.5rem;
-      font-weight: 700;
-      line-height: 1.4;
-      margin-top: 2rem;
-      margin-bottom: 1rem;
-      color: #ffffff;
-    }
-
-    p {
-      margin-bottom: 1.25em;
-    }
-
-    strong {
-      font-weight: 700;
-      color: #ffffff;
-    }
-
-    a {
-      color: #3b82f6;
-      text-decoration: underline;
-      text-underline-offset: 2px;
-    }
-
-    a:hover {
-      color: #60a5fa;
-    }
-
-    ul,
-    ol {
-      margin-left: 1.5rem;
-      margin-bottom: 1.25em;
-    }
-
-    li {
-      margin-bottom: 0.5em;
-    }
-
-    blockquote {
-      border-left: 4px solid #3b82f6;
-      padding-left: 1.5rem;
-      margin: 1.5rem 0;
-      font-style: italic;
-      color: #d1d5db;
-    }
-
-    table {
-      width: 100%;
-      border-collapse: collapse;
-      margin: 2rem 0;
-    }
-
-    th,
-    td {
-      padding: 0.75rem;
-      text-align: left;
-      border-bottom: 1px solid #374151;
-    }
-
-    th {
-      font-weight: 700;
-      color: #ffffff;
-      background: #131313;
-    }
-
-    tr:hover {
-      background: #131313;
-    }
-
-    .screenshot {
-      margin: 0 -4rem 4rem;
-      position: relative;
-      z-index: 10;
-    }
-
-    @media (max-width: 840px) {
-      .screenshot {
-        margin: 0;
-      }
-    }
-
-    .screenshot-inner {
-      border-radius: 8px;
-      overflow: hidden;
-      padding: 0.5rem;
-      background: #1a1a1a;
-      border: 1px solid #2a2a2a;
-    }
-
-    .window-controls {
-      display: flex;
-      align-items: center;
-      gap: 0.5rem;
-      margin-bottom: 0.5rem;
-      padding: 0 0.25rem;
-    }
-
-    .window-dot {
-      width: 8px;
-      height: 8px;
-      border-radius: 50%;
-    }
-
-    .window-dot.red {
-      background: #ef4444;
-    }
-
-    .window-dot.yellow {
-      background: #eab308;
-    }
-
-    .window-dot.green {
-      background: #22c55e;
-    }
-
-    .screenshot-image-wrapper {
-      width: 100%;
-      border: 1px solid #2a2a2a;
-      border-radius: 6px;
-      overflow: hidden;
-      background: #0a0a0a;
-    }
-
-    .screenshot img {
-      width: 100%;
-      height: auto;
-      display: block;
-    }
-
-    .cta {
-      background: #131313;
-      border: 1px solid rgba(255, 255, 255, 0.1);
-      border-radius: 8px;
-      padding: 2rem;
-      margin: 3rem 0;
-      text-align: center;
-      margin: 0 -4rem 4rem;
-    }
-
-    @media (max-width: 840px) {
-      .cta {
-        margin: 0;
-      }
-    }
-
-    .cta h2 {
-      margin-top: 0;
-    }
-
-    .cta a {
-      display: inline-block;
-      background: #fff;
-      color: #000;
-      padding: 0.75rem 1.5rem;
-      border-radius: 6px;
-      text-decoration: none;
-      font-weight: 600;
-      margin: 0.5rem;
-      transition: background 0.2s;
-    }
-
-    .cta a:hover {
-      background: #fff;
-      color: #000;
-    }
-
-    footer {
-      margin-top: 4rem;
-      padding-top: 2rem;
-      border-top: 1px solid #374151;
-      text-align: center;
-      color: #9ca3af;
-      font-size: 0.875rem;
-    }
-
-    .hero {
-      text-align: left;
-      margin-top: 4rem;
-      line-height: 1.5;
-    }
-
-    .hero p {
-      font-size: 1.25rem;
-      color: #8f8f8f;
-      margin-top: 1rem;
-    }
-
-    figcaption {
-      margin-top: 1rem;
-      font-size: 0.875rem;
-      text-align: center;
-      color: #9ca3af;
-      max-width: 100%;
-    }
-    </style>
-  </head>
-  <body>
-    <div class="container">
-      <div class="hero">
-        <h1>Just Fucking Use OpenPanel</h1>
-        <p>
-          Stop settling for basic metrics. Get real insights that actually help
-          you build a better product.
-        </p>
-      </div>
-
-      <figure class="screenshot">
-        <div class="screenshot-inner">
-          <div class="window-controls">
-            <div class="window-dot red"></div>
-            <div class="window-dot yellow"></div>
-            <div class="window-dot green"></div>
-          </div>
-          <div class="screenshot-image-wrapper">
-            <img
-              src="screenshots/realtime-dark.webp"
-              alt="OpenPanel Real-time Analytics"
-              width="1400"
-              height="800"
-            >
-          </div>
-        </div>
-        <figcaption>
-          Real-time analytics - see events as they happen. No waiting, no
-          delays.
-        </figcaption>
-      </figure>
-
-      <h2>The PostHog/Mixpanel Problem (Volume Pricing Hell)</h2>
-
-      <p>
-        Let's talk about what happens when you have a
-        <strong>real product</strong> with <strong>real users</strong>.
-      </p>
-
-      <p><strong>Real pricing at scale (20M+ events/month):</strong></p>
-      <ul>
-        <li><strong>Mixpanel</strong>: $2,300/month (and more with add-ons)</li>
-        <li><strong>PostHog</strong>: $1,982/month (and more with add-ons)</li>
-      </ul>
-
-      <p>
-        "1 million free events!" they scream. Cute. Until you have an actual
-        product with actual users doing actual things. Then suddenly you need to
-        "talk to sales" and your wallet starts bleeding.
-      </p>
-
-      <p>
-        Add-ons, add-ons everywhere. Session replay? +$X. Feature flags? +$X.
-        HIPAA compliance? +$250/month. A/B testing? That'll be extra. You're
-        hemorrhaging money just to understand what your users are doing, you
-        magnificent fool.
-      </p>
-
-      <h2>The Web-Only Analytics Trap</h2>
-
-      <p>
-        You built a great fucking product. You have real traffic. Thousands,
-        tens of thousands of visitors. But you're flying blind.
-      </p>
-
-      <blockquote>
-        "Congrats, 50,000 visitors from France this month. Why didn't a single
-        one buy your baguette?"
-      </blockquote>
-
-      <p>
-        You see the traffic. You see the bounce rate. You see the referrers. You
-        see where they're from. You have <strong>NO FUCKING IDEA</strong> what
-        users actually do.
-      </p>
-
-      <p>
-        Where do they drop off? Do they come back? What features do they use?
-        Why didn't they convert? Who the fuck knows! You're using a glorified
-        hit counter with a pretty dashboard that tells you everything about
-        geography and nothing about behavior.
-      </p>
-
-      <p>
-        Plausible. Umami. Fathom. Simple Analytics. GoatCounter. Cabin. Pirsch.
-        They're all the same story: simple analytics with some goals you can
-        define. Page views, visitors, countries, basic funnels. That's it. No
-        retention analysis. No user profiles. No event tracking. No cohorts. No
-        revenue tracking. Just... basic web analytics.
-      </p>
-
-      <p>
-        And when you finally need to understand your users—when you need to see
-        where they drop off in your signup flow, or which features drive
-        retention, or why your conversion rate is shit—you end up paying for a
-        <strong>SECOND tool</strong> on top. Now you're paying for two
-        subscriptions, managing two dashboards, and your users' data is split
-        across two platforms like a bad divorce.
-      </p>
-
-      <h2>Counter One Dollar Stats</h2>
-
-      <p>"$1/month for page views. Adorable."</p>
-
-      <p>
-        Look, I get it. A dollar is cheap. But you're getting exactly what you
-        pay for: page views. That's it. No funnels. No retention. No user
-        profiles. No event tracking. Just... page views.
-      </p>
-
-      <p>
-        Here's the thing: if you want to make <strong>good decisions</strong>
-        about your product, you need to understand
-        <strong>what your users are actually doing</strong>, not just where the
-        fuck they're from.
-      </p>
-
-      <p>
-        OpenPanel gives you the full product analytics suite. Or self-host for
-        <strong>FREE</strong> with <strong>UNLIMITED events</strong>.
-      </p>
-
-      <p>You get:</p>
-      <ul>
-        <li>Funnels to see where users drop off</li>
-        <li>Retention analysis to see who comes back</li>
-        <li>Cohorts to segment your users</li>
-        <li>User profiles to understand individual behavior</li>
-        <li>Custom dashboards to see what matters to YOU</li>
-        <li>Revenue tracking to see what actually makes money</li>
-        <li>
-          All the web analytics (page views, visitors, referrers) that the other
-          tools give you
-        </li>
-      </ul>
-
-      <p>
-        One Dollar Stats tells you 50,000 people visited from France. OpenPanel
-        tells you why they didn't buy your baguette. That's the difference
-        between vanity metrics and actual insights.
-      </p>
-
-      <h2>Why OpenPanel is the Answer</h2>
-
-      <p>
-        You want analytics that actually help you build a better product. Not
-        vanity metrics. Not enterprise pricing. Not two separate tools.
-      </p>
-
-      <p>
-        To make good decisions, you need to understand
-        <strong>what your users are doing</strong>, not just where they're from.
-        You need to see where they drop off. You need to know which features
-        they use. You need to understand why they convert or why they don't.
-      </p>
-
-      <ul>
-        <li>
-          <strong>Open Source & Self-Hostable</strong>: AGPL-3.0 - fork it,
-          audit it, own it. Self-host for FREE with unlimited events, or use our
-          cloud
-        </li>
-        <li>
-          <strong>Price</strong>: Affordable pricing that scales, or FREE
-          self-hosted (unlimited events, forever)
-        </li>
-        <li>
-          <strong>SDK Size</strong>: 2.3KB (PostHog is 52KB+ - that's 22x
-          bigger, you performance-obsessed maniac)
-        </li>
-        <li>
-          <strong>Privacy</strong>: Cookie-free by default, EU-only hosting (or
-          your own servers if you self-host)
-        </li>
-        <li>
-          <strong>Full Suite</strong>: Web analytics + product analytics in one
-          tool. No need for two subscriptions.
-        </li>
-      </ul>
-
-      <figure class="screenshot">
-        <div class="screenshot-inner">
-          <div class="window-controls">
-            <div class="window-dot red"></div>
-            <div class="window-dot yellow"></div>
-            <div class="window-dot green"></div>
-          </div>
-          <div class="screenshot-image-wrapper">
-            <img
-              src="screenshots/overview-dark.webp"
-              alt="OpenPanel Overview Dashboard"
-              width="1400"
-              height="800"
-            >
-          </div>
-        </div>
-        <figcaption>
-          OpenPanel overview showing web analytics and product analytics in one
-          clean interface
-        </figcaption>
-      </figure>
-
-      <h2>Open Source & Self-Hosting: The Ultimate Fuck You to Pricing Hell</h2>
-
-      <p>
-        Tired of watching your analytics bill grow every month? Tired of "talk
-        to sales" when you hit their arbitrary limits? Tired of paying
-        $2,000+/month just to understand your users?
-      </p>
-
-      <p>
-        <strong>OpenPanel is open source.</strong> AGPL-3.0 licensed. You can
-        fork it. You can audit it. You can own it. And you can
-        <strong>self-host it for FREE with UNLIMITED events</strong>.
-      </p>
-
-      <p>
-        That's right. Zero dollars. Unlimited events. All the features. Your
-        data on your servers. No vendor lock-in. No surprise bills. No
-        "enterprise sales" calls.
-      </p>
-
-      <p>
-        Mixpanel at 20M events? $2,300/month. PostHog? $1,982/month. OpenPanel
-        self-hosted? <strong>$0/month</strong>. Forever.
-      </p>
-
-      <p>
-        Don't want to manage infrastructure? That's fine. Use our cloud. But if
-        you want to escape the pricing hell entirely, self-hosting is a Docker
-        command away. Your data, your rules, your wallet.
-      </p>
-
-      <h2>The Comparison Table (The Brutal Truth)</h2>
-
-      <table>
-        <thead>
-          <tr>
-            <th>Tool</th>
-            <th>Price at 20M events</th>
-            <th>What You Get</th>
-          </tr>
-        </thead>
-        <tbody>
-          <tr>
-            <td><strong>Mixpanel</strong></td>
-            <td>$2,300+/month</td>
-            <td>Not all feautres... since addons are extra</td>
-          </tr>
-          <tr>
-            <td><strong>PostHog</strong></td>
-            <td>$1,982+/month</td>
-            <td>Not all feautres... since addons are extra</td>
-          </tr>
-          <tr>
-            <td><strong>Plausible</strong></td>
-            <td>Various pricing</td>
-            <td>
-              Simple analytics with basic goals. Page views and visitors. That's
-              it.
-            </td>
-          </tr>
-          <tr>
-            <td><strong>One Dollar Stats</strong></td>
-            <td>$1/month</td>
-            <td>Page views (but cheaper!)</td>
-          </tr>
-          <tr style="background: #131313; border: 2px solid #3b82f6;">
-            <td><strong>OpenPanel</strong></td>
-            <td><strong>~$530/mo or FREE (self-hosted)</strong></td>
-            <td>
-              <strong
-                >Web + Product analytics. The full package. Open source. Your
-                data.</strong
-              >
-            </td>
-          </tr>
-        </tbody>
-      </table>
-
-      <figure class="screenshot">
-        <div class="screenshot-inner">
-          <div class="window-controls">
-            <div class="window-dot red"></div>
-            <div class="window-dot yellow"></div>
-            <div class="window-dot green"></div>
-          </div>
-          <div class="screenshot-image-wrapper">
-            <img
-              src="screenshots/profile-dark.webp"
-              alt="OpenPanel User Profiles"
-              width="1400"
-              height="800"
-            >
-          </div>
-        </div>
-        <figcaption>
-          User profiles - see individual user journeys and behavior. Something
-          web-only tools can't give you.
-        </figcaption>
-      </figure>
-
-      <figure class="screenshot">
-        <div class="screenshot-inner">
-          <div class="window-controls">
-            <div class="window-dot red"></div>
-            <div class="window-dot yellow"></div>
-            <div class="window-dot green"></div>
-          </div>
-          <div class="screenshot-image-wrapper">
-            <img
-              src="screenshots/report-dark.webp"
-              alt="OpenPanel Reports and Funnels"
-              width="1400"
-              height="800"
-            >
-          </div>
-        </div>
-        <figcaption>
-          Funnels, retention, and custom reports - the features you CAN'T get
-          with web-only tools
-        </figcaption>
-      </figure>
-
-      <h2>The Bottom Fucking Line</h2>
-
-      <p>
-        If you want to make good decisions about your product, you need to
-        understand what your users are actually doing. Not just where they're
-        from. Not just how many page views you got. You need to see the full
-        picture: funnels, retention, user behavior, conversion paths.
-      </p>
-
-      <p>You have three choices:</p>
-
-      <ol>
-        <li>
-          Keep using Google Analytics like a data-harvesting accomplice, adding
-          cookie banners, annoying your users, and contributing to the dystopian
-          surveillance economy
-        </li>
-        <li>
-          Pay $2,000+/month for Mixpanel or PostHog when you scale, or use
-          simple web-only analytics that tell you nothing about user
-          behavior—just where they're from
-        </li>
-        <li>
-          Use OpenPanel (affordable pricing or FREE self-hosted) and get the
-          full analytics suite: web analytics AND product analytics in one tool,
-          so you can actually understand what your users do
-        </li>
-      </ol>
-
-      <p>
-        If you picked option 1 or 2, I can't help you. You're beyond saving. Go
-        enjoy your complicated, privacy-violating, overpriced analytics life
-        where you know everything about where your users are from but nothing
-        about what they actually do.
-      </p>
-
-      <p>
-        But if you have even one functioning brain cell, you'll realize that
-        OpenPanel gives you everything you need—web analytics AND product
-        analytics—for a fraction of what the enterprise tools cost. You'll
-        finally understand what your users are doing, not just where the fuck
-        they're from.
-      </p>
-
-      <div class="cta">
-        <h2>Ready to understand what your users actually do?</h2>
-        <p>
-          Stop settling for vanity metrics. Get the full analytics suite—web
-          analytics AND product analytics—so you can make better decisions. Or
-          self-host for free.
-        </p>
-        <a href="https://openpanel.dev" target="_blank"
-          >Get Started with OpenPanel</a
-        >
-        <a
-          href="https://openpanel.dev/docs/self-hosting/self-hosting"
-          target="_blank"
-          >Self-Host Guide</a
-        >
-      </div>
-
-      <figure class="screenshot">
-        <div class="screenshot-inner">
-          <div class="window-controls">
-            <div class="window-dot red"></div>
-            <div class="window-dot yellow"></div>
-            <div class="window-dot green"></div>
-          </div>
-          <div class="screenshot-image-wrapper">
-            <img
-              src="screenshots/dashboard-dark.webp"
-              alt="OpenPanel Custom Dashboards"
-              width="1400"
-              height="800"
-            >
-          </div>
-        </div>
-        <figcaption>
-          Custom dashboards - build exactly what you need to understand your
-          product
-        </figcaption>
-      </figure>
-
-      <footer>
-        <p><strong>Just Fucking Use OpenPanel</strong></p>
-        <p>
-          Inspired by
-          <a
-            href="https://justfuckingusereact.com"
-            target="_blank"
-            rel="nofollow"
-            >justfuckingusereact.com</a
-          >, <a
-            href="https://justfuckingusehtml.com"
-            target="_blank"
-            rel="nofollow"
-            >justfuckingusehtml.com</a
-          >, and
-          <a
-            href="https://justfuckinguseonedollarstats.com"
-            target="_blank"
-            rel="nofollow"
-            >justfuckinguseonedollarstats.com</a
-          >
-          and all other just fucking use sites.
-        </p>
-        <p style="margin-top: 1rem;">
-          This is affiliated with
-          <a href="https://openpanel.dev" target="_blank" rel="nofollow"
-            >OpenPanel</a
-          >. We still love all products mentioned in this website, and we're
-          grateful for them and what they do 🫶
-        </p>
-      </footer>
-    </div>
-
-    <script>
-    'use strict';
-    window.op =
-      window.op ||
-      (() => {
-        var n = [];
-        return new Proxy(
-          function () {
-            arguments.length && n.push([].slice.call(arguments));
-          },
-          {
-            get(t, r) {
-              returnr === 'q'
-                ? n
-                : function () {
-                    n.push([r].concat([].slice.call(arguments)));
-                  };
-            },
-            has(t, r) {
-              returnr === 'q';
-            },
-          }
-        );
-      })();
-    window.op('init', {
-      clientId: '59d97757-9449-44cf-a8c1-8f213843b4f0',
-      trackScreenViews: true,
-      trackOutgoingLinks: true,
-      trackAttributes: true,
-    });
-    </script>
-    <script src="https://openpanel.dev/op1.js" defer async></script>
-  </body>
-</html>

apps/justfuckinguseopenpanel/wrangler.jsonc

@@ -1,7 +0,0 @@
-{
-  "name": "justfuckinguseopenpanel",
-  "compatibility_date": "2025-12-19",
-  "assets": {
-    "directory": "."
-  }
-}

apps/public/.gitignore

@@ -2,6 +2,8 @@
 /node_modules
 
 # generated content
+.contentlayer
+.content-collections
 .source
 
 # test & build

apps/public/Dockerfile

@@ -0,0 +1,94 @@
+ARG NODE_VERSION=20.15.1
+
+FROM --platform=linux/amd64 node:${NODE_VERSION}-slim AS base
+
+ARG DATABASE_URL
+ENV DATABASE_URL=$DATABASE_URL
+
+ARG REDIS_URL
+ENV REDIS_URL=$REDIS_URL
+
+ARG CLICKHOUSE_URL
+ENV CLICKHOUSE_URL=$CLICKHOUSE_URL
+
+ENV PNPM_HOME="/pnpm"
+
+ENV PATH="$PNPM_HOME:$PATH"
+
+RUN corepack enable
+
+RUN apt update \
+  && apt install -y curl \
+  && curl -L https://raw.githubusercontent.com/tj/n/master/bin/n -o n \
+  && bash n $NODE_VERSION \
+  && rm n \
+  && npm install -g n
+
+WORKDIR /app
+
+COPY package.json package.json
+COPY pnpm-lock.yaml pnpm-lock.yaml
+COPY pnpm-workspace.yaml pnpm-workspace.yaml
+COPY apps/public/package.json apps/public/package.json
+COPY packages/db/package.json packages/db/package.json
+COPY packages/redis/package.json packages/redis/package.json
+COPY packages/queue/package.json packages/queue/package.json
+COPY packages/common/package.json packages/common/package.json
+COPY packages/constants/package.json packages/constants/package.json
+COPY packages/validation/package.json packages/validation/package.json
+COPY packages/sdks/sdk/package.json packages/sdks/sdk/package.json
+COPY packages/sdks/_info/package.json packages/sdks/_info/package.json
+
+# BUILD
+FROM base AS build
+
+WORKDIR /app/apps/public
+RUN pnpm install --frozen-lockfile --ignore-scripts
+
+WORKDIR  /app
+COPY apps/public apps/public
+COPY packages packages
+COPY tooling tooling
+RUN pnpm db:codegen
+
+WORKDIR /app/apps/public
+RUN pnpm run build
+
+# PROD
+FROM base AS prod
+
+WORKDIR /app/apps/public
+RUN pnpm install --frozen-lockfile --prod --ignore-scripts
+
+# FINAL
+FROM base AS runner
+
+COPY --from=build /app/package.json /app/package.json
+COPY --from=prod /app/node_modules /app/node_modules
+# Apps
+COPY --from=build /app/apps/public /app/apps/public
+# Apps node_modules
+COPY --from=prod /app/apps/public/node_modules /app/apps/public/node_modules
+# Packages
+COPY --from=build /app/packages/db /app/packages/db
+COPY --from=build /app/packages/redis /app/packages/redis
+COPY --from=build /app/packages/common /app/packages/common
+COPY --from=build /app/packages/queue /app/packages/queue
+COPY --from=build /app/packages/constants /app/packages/constants
+COPY --from=build /app/packages/validation /app/packages/validation
+COPY --from=build /app/packages/sdks/sdk /app/packages/sdks/sdk
+COPY --from=build /app/packages/sdks/_info /app/packages/sdks/_info
+# Packages node_modules
+COPY --from=prod /app/packages/db/node_modules /app/packages/db/node_modules
+COPY --from=prod /app/packages/redis/node_modules /app/packages/redis/node_modules
+COPY --from=prod /app/packages/common/node_modules /app/packages/common/node_modules
+COPY --from=prod /app/packages/queue/node_modules /app/packages/queue/node_modules
+COPY --from=prod /app/packages/validation/node_modules /app/packages/validation/node_modules
+
+RUN pnpm db:codegen
+
+WORKDIR /app/apps/public
+
+EXPOSE 3000
+
+CMD ["pnpm", "start"]

apps/public/README.md

@@ -15,25 +15,6 @@ yarn dev
 
 Open http://localhost:3000 with your browser to see the result.
 
-## Explore
-
-In the project, you can see:
-
-- `lib/source.ts`: Code for content source adapter, [`loader()`](https://fumadocs.dev/docs/headless/source-api) provides the interface to access your content.
-- `lib/layout.shared.tsx`: Shared options for layouts, optional but preferred to keep.
-
-| Route                     | Description                                            |
-| ------------------------- | ------------------------------------------------------ |
-| `app/(home)`              | The route group for your landing page and other pages. |
-| `app/docs`                | The documentation layout and pages.                    |
-| `app/api/search/route.ts` | The Route Handler for search.                          |
-
-### Fumadocs MDX
-
-A `source.config.ts` config file has been included, you can customise different options like frontmatter schema.
-
-Read the [Introduction](https://fumadocs.dev/docs/mdx) for further details.
-
 ## Learn More
 
 To learn more about Next.js and Fumadocs, take a look at the following
@@ -42,4 +23,4 @@ resources:
 - [Next.js Documentation](https://nextjs.org/docs) - learn about Next.js
   features and API.
 - [Learn Next.js](https://nextjs.org/learn) - an interactive Next.js tutorial.
-- [Fumadocs](https://fumadocs.dev) - learn about Fumadocs
+- [Fumadocs](https://fumadocs.vercel.app) - learn about Fumadocs

apps/public/app/(content)/[...pages]/page.tsx

@@ -1,12 +1,8 @@
+import { url } from '@/app/layout.config';
+import { pageSource } from '@/lib/source';
 import type { Metadata } from 'next';
 import { notFound } from 'next/navigation';
 import Script from 'next/script';
-import { HeroContainer } from '@/app/(home)/_sections/hero';
-import { SectionHeader } from '@/components/section';
-import { url } from '@/lib/layout.shared';
-import { getOgImageUrl, getPageMetadata } from '@/lib/metadata';
-import { pageSource } from '@/lib/source';
-import { getMDXComponents } from '@/mdx-components';
 
 export async function generateMetadata({
   params,
@@ -22,19 +18,24 @@ export async function generateMetadata({
     };
   }
 
-  return getPageMetadata({
+  return {
     title: page.data.title,
-    url: url(page.url),
     description: page.data.description,
-    image: getOgImageUrl(page.url),
+    alternates: {
-  });
+      canonical: url(page.url),
-}
+    },
-
+    openGraph: {
-export async function generateStaticParams() {
+      title: page.data.title,
-  const pages = await pageSource.getPages();
+      description: page.data.description,
-  return pages.map((page) => ({
+      type: 'website',
-    pages: page.url.split('/').slice(1),
+      url: url(page.url),
-  }));
+    },
+    twitter: {
+      card: 'summary_large_image',
+      title: page.data.title,
+      description: page.data.description,
+    },
+  };
 }
 
 export default async function Page({
@@ -46,17 +47,15 @@ export default async function Page({
   const page = await pageSource.getPage(pages);
   const Body = page?.data.body;
 
-  if (!(page && Body)) {
+  if (!page || !Body) {
     return notFound();
   }
 
   // Create the JSON-LD data
   const jsonLd = {
     '@context': 'https://schema.org',
-    '@type': 'WebPage',
+    '@type': 'Article',
-    name: page.data.title,
+    headline: page.data.title,
-    description: page.data.description,
-    url: url(page.url),
     publisher: {
       '@type': 'Organization',
       name: 'OpenPanel',
@@ -65,28 +64,33 @@ export default async function Page({
         url: url('/logo.png'),
       },
     },
+    mainEntityOfPage: {
+      '@type': 'WebPage',
+      '@id': url(page.url),
+    },
   };
 
   return (
     <div>
       <Script
-        dangerouslySetInnerHTML={{ __html: JSON.stringify(jsonLd) }}
         id="page-schema"
         strategy="beforeInteractive"
         type="application/ld+json"
+        dangerouslySetInnerHTML={{ __html: JSON.stringify(jsonLd) }}
       />
-      <HeroContainer>
+      <article className="container max-w-4xl col">
-        <SectionHeader
+        <div className="pt-16 pb-4 col gap-3">
-          as="h1"
+          <h1 className="text-5xl font-bold">{page.data.title}</h1>
-          description={page.data.description}
+          {page.data.description && (
-          title={page.data.title}
+            <p className="text-muted-foreground text-xl">
-        />
+              {page.data.description}
-      </HeroContainer>
+            </p>
-      <main className="container">
+          )}
-        <article className="prose">
+        </div>
-          <Body components={getMDXComponents()} />
+        <div className="prose">
+          <Body />
+        </div>
       </article>
-      </main>
     </div>
   );
 }

apps/public/app/(content)/articles/[articleSlug]/page.tsx

@@ -0,0 +1,203 @@
+import { url, getAuthor } from '@/app/layout.config';
+import { SingleSwirl } from '@/components/Swirls';
+import { ArticleCard } from '@/components/article-card';
+import { Logo } from '@/components/logo';
+import { SectionHeader } from '@/components/section';
+import { Toc } from '@/components/toc';
+import { Button } from '@/components/ui/button';
+import { articleSource } from '@/lib/source';
+import { ArrowLeftIcon } from 'lucide-react';
+import type { Metadata } from 'next';
+import Image from 'next/image';
+import Link from 'next/link';
+import { notFound } from 'next/navigation';
+import Script from 'next/script';
+
+export async function generateMetadata({
+  params,
+}: {
+  params: Promise<{ articleSlug: string }>;
+}): Promise<Metadata> {
+  const { articleSlug } = await params;
+  const article = await articleSource.getPage([articleSlug]);
+  const author = getAuthor(article?.data.team);
+
+  if (!article) {
+    return {
+      title: 'Article Not Found',
+    };
+  }
+
+  return {
+    title: article.data.title,
+    description: article.data.description,
+    authors: [{ name: author.name }],
+    alternates: {
+      canonical: url(article.url),
+    },
+    openGraph: {
+      title: article.data.title,
+      description: article.data.description,
+      type: 'article',
+      publishedTime: article.data.date.toISOString(),
+      authors: author.name,
+      images: url(article.data.cover),
+      url: url(article.url),
+    },
+    twitter: {
+      card: 'summary_large_image',
+      title: article.data.title,
+      description: article.data.description,
+      images: url(article.data.cover),
+    },
+  };
+}
+
+export default async function Page({
+  params,
+}: {
+  params: Promise<{ articleSlug: string }>;
+}) {
+  const { articleSlug } = await params;
+  const article = await articleSource.getPage([articleSlug]);
+  const Body = article?.data.body;
+  const author = getAuthor(article?.data.team);
+  const goBackUrl = '/articles';
+
+  const relatedArticles = (await articleSource.getPages())
+    .filter(
+      (item) =>
+        item.data.tag === article?.data.tag && item.url !== article?.url,
+    )
+    .sort((a, b) => b.data.date.getTime() - a.data.date.getTime());
+
+  if (!Body) {
+    return notFound();
+  }
+
+  // Create the JSON-LD data
+  const jsonLd = {
+    '@context': 'https://schema.org',
+    '@type': 'Article',
+    headline: article?.data.title,
+    datePublished: article?.data.date.toISOString(),
+    author: {
+      '@type': 'Person',
+      name: author.name,
+    },
+    publisher: {
+      '@type': 'Organization',
+      name: 'OpenPanel',
+      logo: {
+        '@type': 'ImageObject',
+        url: url('/logo.png'),
+      },
+    },
+    mainEntityOfPage: {
+      '@type': 'WebPage',
+      '@id': url(article.url),
+    },
+    image: {
+      '@type': 'ImageObject',
+      url: url(article.data.cover),
+    },
+  };
+
+  return (
+    <div>
+      <Script
+        strategy="beforeInteractive"
+        id="article-schema"
+        type="application/ld+json"
+        dangerouslySetInnerHTML={{ __html: JSON.stringify(jsonLd) }}
+      />
+      <article className="container max-w-5xl col">
+        <div className="py-16">
+          <Link
+            href={goBackUrl}
+            className="flex items-center gap-2 mb-4 text-muted-foreground"
+          >
+            <ArrowLeftIcon className="w-4 h-4" />
+            <span>Back to all articles</span>
+          </Link>
+          <div className="flex-col-reverse col md:row gap-8">
+            <div className="col flex-1">
+              <h1 className="text-5xl font-bold leading-tight">
+                {article?.data.title}
+              </h1>
+
+              <div className="row gap-4 items-center mt-8">
+                <div className="size-10 center-center bg-black rounded-full">
+                  {author.image ? (
+                    <Image
+                      className="size-10 object-cover rounded-full"
+                      src={author.image}
+                      alt={author.name}
+                      width={48}
+                      height={48}
+                    />
+                  ) : (
+                    <Logo className="w-6 h-6 fill-white" />
+                  )}
+                </div>
+                <div className="col">
+                  <p className="font-medium">{author.name}</p>
+                  <p className="text-muted-foreground text-sm">
+                    {article?.data.date.toLocaleDateString()}
+                  </p>
+                </div>
+              </div>
+            </div>
+          </div>
+        </div>
+        <div className="relative">
+          <div className="grid grid-cols-1 md:grid-cols-[1fr_300px] gap-0">
+            <div className="min-w-0">
+              <div className="prose [&_table]:w-auto [&_img]:max-w-full [&_img]:h-auto">
+                <Body />
+              </div>
+            </div>
+            <aside className="pl-12 pb-12 gap-8 col">
+              <Toc toc={article?.data.toc} />
+              <section className="overflow-hidden relative bg-foreground dark:bg-background-dark text-background dark:text-foreground rounded-xl py-16">
+                <SingleSwirl className="pointer-events-none absolute top-0 bottom-0 left-0 size-[300px]" />
+                <SingleSwirl className="pointer-events-none rotate-180 absolute top-0 bottom-0 -right-0 opacity-50 size-[300px]" />
+                <div className="container center-center col">
+                  <SectionHeader
+                    className="mb-8"
+                    title="Try it"
+                    description="Give it a spin for free. No credit card required."
+                  />
+                  <Button size="lg" variant="secondary" asChild>
+                    <Link href="https://dashboard.openpanel.dev/onboarding">
+                      Get started today!
+                    </Link>
+                  </Button>
+                </div>
+              </section>
+            </aside>
+          </div>
+
+          {relatedArticles.length > 0 && (
+            <div className="my-16">
+              <h3 className="text-2xl font-bold mb-8">Related articles</h3>
+              <div className="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-6">
+                {relatedArticles.map((item) => (
+                  <ArticleCard
+                    key={item.url}
+                    url={item.url}
+                    title={item.data.title}
+                    tag={item.data.tag}
+                    cover={item.data.cover}
+                    team={item.data.team}
+                    date={item.data.date}
+                  />
+                ))}
+              </div>
+            </div>
+          )}
+        </div>
+      </article>
+    </div>
+  );
+}

apps/public/app/(content)/articles/page.tsx

@@ -0,0 +1,55 @@
+import { url } from '@/app/layout.config';
+import { ArticleCard } from '@/components/article-card';
+import { articleSource } from '@/lib/source';
+import type { Metadata } from 'next';
+import Image from 'next/image';
+import Link from 'next/link';
+
+const title = 'Articles';
+const description = 'Read our latest articles';
+
+export const metadata: Metadata = {
+  title,
+  description,
+  alternates: {
+    canonical: url('/articles'),
+  },
+  openGraph: {
+    title,
+    description,
+    type: 'website',
+  },
+  twitter: {
+    card: 'summary_large_image',
+    title,
+    description,
+  },
+};
+
+export default async function Page() {
+  const articles = (await articleSource.getPages()).sort(
+    (a, b) => b.data.date.getTime() - a.data.date.getTime(),
+  );
+  return (
+    <div>
+      <div className="container col">
+        <div className="py-16">
+          <h1 className="text-center text-7xl font-bold">Articles</h1>
+        </div>
+        <div className="grid grid-cols-1 sm:grid-cols-2 md:grid-cols-3 gap-8">
+          {articles.map((item) => (
+            <ArticleCard
+              key={item.url}
+              url={item.url}
+              title={item.data.title}
+              tag={item.data.tag}
+              cover={item.data.cover}
+              team={item.data.team}
+              date={item.data.date}
+            />
+          ))}
+        </div>
+      </div>
+    </div>
+  );
+}

apps/public/app/(content)/layout.tsx

@@ -0,0 +1,24 @@
+import { Footer } from '@/components/footer';
+import { HeroContainer } from '@/components/hero';
+import Navbar from '@/components/navbar';
+import type { ReactNode } from 'react';
+
+export default function Layout({
+  children,
+}: {
+  children: ReactNode;
+}): React.ReactElement {
+  return (
+    <>
+      <Navbar />
+      <main className="overflow-hidden">
+        <HeroContainer className="h-screen pointer-events-none" />
+        <div className="absolute h-screen inset-0 radial-gradient-dot-pages select-none pointer-events-none" />
+        <div className="-mt-[calc(100vh-100px)] relative min-h-[500px] pb-12 -mb-24">
+          {children}
+        </div>
+      </main>
+      <Footer />
+    </>
+  );
+}

apps/public/app/(content)/supporter/page.tsx

@@ -0,0 +1,288 @@
+import { url } from '@/app/layout.config';
+import { HeroContainer } from '@/components/hero';
+import { Section, SectionHeader } from '@/components/section';
+import { Faq } from '@/components/sections/faq';
+import { SupporterPerks } from '@/components/sections/supporter-perks';
+import { Testimonials } from '@/components/sections/testimonials';
+import { Tag } from '@/components/tag';
+import { Button } from '@/components/ui/button';
+import {
+  ArrowDownIcon,
+  HeartHandshakeIcon,
+  SparklesIcon,
+  ZapIcon,
+} from 'lucide-react';
+import type { Metadata } from 'next';
+import Link from 'next/link';
+import Script from 'next/script';
+
+export const metadata: Metadata = {
+  title: 'Become a Supporter',
+  description:
+    'Support OpenPanel and get exclusive perks like latest Docker images, prioritized support, and early access to new features.',
+  alternates: {
+    canonical: url('/supporter'),
+  },
+  openGraph: {
+    title: 'Become a Supporter',
+    description:
+      'Support OpenPanel and get exclusive perks like latest Docker images, prioritized support, and early access to new features.',
+    type: 'website',
+    url: url('/supporter'),
+  },
+  twitter: {
+    card: 'summary_large_image',
+    title: 'Become a Supporter',
+    description:
+      'Support OpenPanel and get exclusive perks like latest Docker images, prioritized support, and early access to new features.',
+  },
+};
+
+const jsonLd = {
+  '@context': 'https://schema.org',
+  '@type': 'Article',
+  headline: 'Become a Supporter',
+  publisher: {
+    '@type': 'Organization',
+    name: 'OpenPanel',
+    logo: {
+      '@type': 'ImageObject',
+      url: url('/logo.png'),
+    },
+  },
+  mainEntityOfPage: {
+    '@type': 'WebPage',
+    '@id': url('/supporter'),
+  },
+};
+
+export default function SupporterPage() {
+  return (
+    <div>
+      <Script
+        id="supporter-schema"
+        strategy="beforeInteractive"
+        type="application/ld+json"
+        dangerouslySetInnerHTML={{ __html: JSON.stringify(jsonLd) }}
+      />
+      <HeroContainer>
+        <div className="container relative z-10 col sm:py-44 max-sm:pt-32">
+          <div className="col gap-8 text-center">
+            <div className="col gap-4">
+              <Tag className="self-center">
+                <HeartHandshakeIcon className="size-4 text-rose-600" />
+                Support Open-Source Analytics
+              </Tag>
+              <h1 className="text-4xl md:text-5xl font-extrabold leading-[1.1]">
+                Help us build the future of{' '}
+                <span className="text-primary">open analytics</span>
+              </h1>
+              <p className="text-xl text-muted-foreground max-w-2xl mx-auto">
+                Your support accelerates development, funds infrastructure, and
+                helps us build features faster. Plus, you get exclusive perks
+                and early access to everything we ship.
+              </p>
+            </div>
+            <div className="col gap-4 justify-center items-center">
+              <Button size="lg" asChild>
+                <Link href="https://buy.polar.sh/polar_cl_Az1CruNFzQB2bYdMOZmGHqTevW317knWqV44W1FqZmV">
+                  Become a Supporter
+                  <SparklesIcon className="size-4" />
+                </Link>
+              </Button>
+              <p className="text-sm text-muted-foreground">
+                Starting at $20/month • Cancel anytime
+              </p>
+            </div>
+          </div>
+        </div>
+      </HeroContainer>
+      <div className="container max-w-7xl">
+        {/* Main Content with Sidebar */}
+        <div className="grid lg:grid-cols-[1fr_380px] gap-8 mb-16">
+          {/* Main Content */}
+          <div className="col gap-12">
+            {/* Why Support Section */}
+            <section className="col gap-6">
+              <h2 className="text-3xl font-bold">Why your support matters</h2>
+              <div className="col gap-6 text-muted-foreground">
+                <p className="text-lg">
+                  We're not a big corporation – just a small team passionate
+                  about building something useful for developers. OpenPanel
+                  started because we believed analytics tools shouldn't be
+                  complicated or locked behind expensive enterprise
+                  subscriptions.
+                </p>
+                <p>When you become a supporter, you're directly funding:</p>
+                <ul className="col gap-3 list-none pl-0">
+                  <li className="flex items-start gap-3">
+                    <ZapIcon className="size-5 text-primary mt-0.5 shrink-0" />
+                    <div>
+                      <strong className="text-foreground">
+                        Active Development
+                      </strong>
+                      <p className="text-sm mt-1">
+                        More time fixing bugs, adding features, and improving
+                        documentation
+                      </p>
+                    </div>
+                  </li>
+                  <li className="flex items-start gap-3">
+                    <ZapIcon className="size-5 text-primary mt-0.5 shrink-0" />
+                    <div>
+                      <strong className="text-foreground">
+                        Infrastructure
+                      </strong>
+                      <p className="text-sm mt-1">
+                        Keeping servers running, CI/CD pipelines, and
+                        development tools
+                      </p>
+                    </div>
+                  </li>
+                  <li className="flex items-start gap-3">
+                    <ZapIcon className="size-5 text-primary mt-0.5 shrink-0" />
+                    <div>
+                      <strong className="text-foreground">Independence</strong>
+                      <p className="text-sm mt-1">
+                        Staying focused on what matters: building a tool
+                        developers actually want
+                      </p>
+                    </div>
+                  </li>
+                </ul>
+                <p>
+                  No corporate speak, no fancy promises – just honest work on
+                  making OpenPanel better for everyone. Every contribution, no
+                  matter the size, helps us stay independent and focused on what
+                  matters.
+                </p>
+              </div>
+            </section>
+
+            {/* What You Get Section */}
+            <section className="col gap-6">
+              <h2 className="text-3xl font-bold">
+                What you get as a supporter
+              </h2>
+              <div className="grid md:grid-cols-2 gap-4">
+                <div className="p-6 rounded-lg border bg-card">
+                  <h3 className="font-semibold text-lg mb-2">
+                    🚀 Latest Docker Images
+                  </h3>
+                  <p className="text-sm text-muted-foreground mb-3">
+                    Get bleeding-edge builds on every commit. Access new
+                    features weeks before public release.
+                  </p>
+                  <Link
+                    href="/docs/self-hosting/supporter-access-latest-docker-images"
+                    className="text-sm text-primary hover:underline"
+                  >
+                    Learn more →
+                  </Link>
+                </div>
+                <div className="p-6 rounded-lg border bg-card">
+                  <h3 className="font-semibold text-lg mb-2">
+                    💬 Prioritized Support
+                  </h3>
+                  <p className="text-sm text-muted-foreground mb-3">
+                    Get help faster with priority support in our Discord
+                    community. Your questions get answered first.
+                  </p>
+                </div>
+                <div className="p-6 rounded-lg border bg-card">
+                  <h3 className="font-semibold text-lg mb-2">
+                    ✨ Feature Requests
+                  </h3>
+                  <p className="text-sm text-muted-foreground mb-3">
+                    Your ideas and feature requests get prioritized in our
+                    roadmap. Shape the future of OpenPanel.
+                  </p>
+                </div>
+                <div className="p-6 rounded-lg border bg-card">
+                  <h3 className="font-semibold text-lg mb-2">
+                    ⭐ Exclusive Discord Role
+                  </h3>
+                  <p className="text-sm text-muted-foreground mb-3">
+                    Special badge and recognition in our community. Show your
+                    support with pride.
+                  </p>
+                </div>
+              </div>
+            </section>
+
+            {/* Impact Section */}
+            <section className="p-8 rounded-xl border bg-gradient-to-br from-primary/5 to-primary/10">
+              <h2 className="text-2xl font-bold mb-4">Your impact</h2>
+              <p className="text-muted-foreground mb-6">
+                Every dollar you contribute goes directly into development,
+                infrastructure, and making OpenPanel better. Here's what your
+                support enables:
+              </p>
+              <div className="grid md:grid-cols-3 gap-4">
+                <div className="text-center">
+                  <div className="text-3xl font-bold text-primary mb-2">
+                    100%
+                  </div>
+                  <div className="text-sm text-muted-foreground">
+                    Open Source
+                  </div>
+                </div>
+                <div className="text-center">
+                  <div className="text-3xl font-bold text-primary mb-2">
+                    24/7
+                  </div>
+                  <div className="text-sm text-muted-foreground">
+                    Active Development
+                  </div>
+                </div>
+                <div className="text-center">
+                  <div className="text-3xl font-bold text-primary mb-2">∞</div>
+                  <div className="text-sm text-muted-foreground">
+                    Self-Hostable
+                  </div>
+                </div>
+              </div>
+            </section>
+          </div>
+
+          {/* Sidebar */}
+          <aside className="lg:block hidden">
+            <SupporterPerks />
+          </aside>
+        </div>
+
+        {/* Mobile Perks */}
+        <div className="lg:hidden mb-16">
+          <SupporterPerks />
+        </div>
+
+        {/* CTA Section */}
+        <Section className="container my-0 py-20">
+          <SectionHeader
+            tag={
+              <Tag>
+                <ArrowDownIcon className="size-4" strokeWidth={1.5} />
+                Starting at $20/month
+              </Tag>
+            }
+            title="Ready to support OpenPanel?"
+            description="Join our community of supporters and help us build the best open-source alternative to Mixpanel. Every contribution helps accelerate development and make OpenPanel better for everyone."
+          />
+          <div className="center-center">
+            <Button size="lg" asChild>
+              <Link href="https://buy.polar.sh/polar_cl_Az1CruNFzQB2bYdMOZmGHqTevW317knWqV44W1FqZmV">
+                Become a Supporter Now
+                <HeartHandshakeIcon className="size-4" />
+              </Link>
+            </Button>
+          </div>
+        </Section>
+      </div>
+
+      <div className="lg:-mx-20 xl:-mx-40 not-prose mt-16">
+        <Testimonials />
+        <Faq />
+      </div>
+    </div>
+  );
+}

apps/public/app/api/[...op]/route.ts

@@ -0,0 +1,7 @@
+import {
+  createNextRouteHandler,
+  createScriptHandler,
+} from '@openpanel/nextjs/server';
+
+export const POST = createNextRouteHandler();
+export const GET = createScriptHandler();

apps/public/app/api/headers/route.ts

@@ -23,7 +23,7 @@ export const GET = function POST(req: Request) {
         }
         return acc;
       },
-      {} as Record<string, string>
+      {} as Record<string, string>,
     ),
   });
 };

apps/public/app/api/search/route.ts

@@ -0,0 +1,4 @@
+import { source } from '@/lib/source';
+import { createFromSource } from 'fumadocs-core/search/server';
+
+export const { GET } = createFromSource(source);

apps/public/app/docs/[[...slug]]/page.tsx

@@ -0,0 +1,67 @@
+import { url, siteName } from '@/app/layout.config';
+import { source } from '@/lib/source';
+import defaultMdxComponents from 'fumadocs-ui/mdx';
+import {
+  DocsBody,
+  DocsDescription,
+  DocsPage,
+  DocsTitle,
+} from 'fumadocs-ui/page';
+import { notFound } from 'next/navigation';
+
+export default async function Page(props: {
+  params: Promise<{ slug?: string[] }>;
+}) {
+  const params = await props.params;
+  const page = source.getPage(params.slug);
+  if (!page) notFound();
+
+  const MDX = page.data.body;
+
+  return (
+    <DocsPage toc={page.data.toc} full={page.data.full}>
+      <DocsTitle>{page.data.title}</DocsTitle>
+      <DocsDescription>{page.data.description}</DocsDescription>
+      <DocsBody>
+        <MDX components={{ ...defaultMdxComponents }} />
+      </DocsBody>
+    </DocsPage>
+  );
+}
+
+export async function generateStaticParams() {
+  return source.generateParams();
+}
+
+export async function generateMetadata(props: {
+  params: Promise<{ slug?: string[] }>;
+}) {
+  const params = await props.params;
+  const page = source.getPage(params.slug);
+  if (!page) notFound();
+
+  return {
+    title: page.data.title,
+    description: page.data.description,
+    alternates: {
+      canonical: url(page.url),
+    },
+    icons: {
+      apple: '/apple-touch-icon.png',
+      icon: '/favicon.ico',
+    },
+    manifest: '/site.webmanifest',
+    openGraph: {
+      url: url(page.url),
+      type: 'article',
+      images: [
+        {
+          url: url('/ogimage.jpg'),
+          width: 1200,
+          height: 630,
+          alt: siteName,
+        },
+      ],
+    },
+  };
+}

apps/public/app/docs/layout.tsx

@@ -0,0 +1,12 @@
+import { baseOptions } from '@/app/layout.config';
+import { source } from '@/lib/source';
+import { DocsLayout } from 'fumadocs-ui/layouts/docs';
+import type { ReactNode } from 'react';
+
+export default function Layout({ children }: { children: ReactNode }) {
+  return (
+    <DocsLayout tree={source.pageTree} {...baseOptions}>
+      {children}
+    </DocsLayout>
+  );
+}

apps/public/app/global.css

@@ -0,0 +1,224 @@
+@tailwind base;
+@tailwind components;
+@tailwind utilities;
+
+@layer base {
+  :root {
+    --green: 156 71% 67%;
+    --red: 351 89% 72%;
+    --background: 0 0% 98%;
+    --background-light: 0 0% 100%;
+    --background-dark: 0 0% 96%;
+    --foreground: 0 0% 9%;
+    --foreground-dark: 0 0% 7.5%;
+    --foreground-light: 0 0% 11%;
+    --card: 0 0% 98%;
+    --card-foreground: 0 0% 9%;
+    --popover: 0 0% 98%;
+    --popover-foreground: 0 0% 9%;
+    --primary: 0 0% 9%;
+    --primary-foreground: 0 0% 98%;
+    --secondary: 0 0% 96.1%;
+    --secondary-foreground: 0 0% 9%;
+    --muted: 0 0% 96.1%;
+    --muted-foreground: 0 0% 45.1%;
+    --accent: 0 0% 96.1%;
+    --accent-foreground: 0 0% 9%;
+    --destructive: 0 84.2% 60.2%;
+    --destructive-foreground: 0 0% 98%;
+    --border: 0 0% 89.8%;
+    --input: 0 0% 89.8%;
+    --ring: 0 0% 9%;
+    --chart-1: 12 76% 61%;
+    --chart-2: 173 58% 39%;
+    --chart-3: 197 37% 24%;
+    --chart-4: 43 74% 66%;
+    --chart-5: 27 87% 67%;
+    --radius: 0.5rem;
+  }
+
+  .dark {
+    --background: 0 0% 9%;
+    --background-dark: 0 0% 7.5%;
+    --background-light: 0 0% 11%;
+    --foreground: 0 0% 98%;
+    --foreground-light: 0 0% 100%;
+    --foreground-dark: 0 0% 96%;
+    --card: 0 0% 9%;
+    --card-foreground: 0 0% 98%;
+    --popover: 0 0% 9%;
+    --popover-foreground: 0 0% 98%;
+    --primary: 0 0% 98%;
+    --primary-foreground: 0 0% 9%;
+    --secondary: 0 0% 14.9%;
+    --secondary-foreground: 0 0% 98%;
+    --muted: 0 0% 14.9%;
+    --muted-foreground: 0 0% 63.9%;
+    --accent: 0 0% 14.9%;
+    --accent-foreground: 0 0% 98%;
+    --destructive: 0 62.8% 30.6%;
+    --destructive-foreground: 0 0% 98%;
+    --border: 0 0% 14.9%;
+    --input: 0 0% 14.9%;
+    --ring: 0 0% 83.1%;
+    --chart-1: 220 70% 50%;
+    --chart-2: 160 60% 45%;
+    --chart-3: 30 80% 55%;
+    --chart-4: 280 65% 60%;
+    --chart-5: 340 75% 55%;
+  }
+}
+
+@layer base {
+  * {
+    @apply border-border;
+  }
+  body {
+    @apply !bg-[hsl(var(--background))] text-foreground font-sans text-base antialiased flex flex-col min-h-screen;
+  }
+}
+
+@layer components {
+  .container {
+    @apply max-w-6xl mx-auto px-6 md:px-10 lg:px-14 w-full;
+  }
+
+  .pulled {
+    @apply -mx-2 md:-mx-6 lg:-mx-10 xl:-mx-20;
+  }
+
+  .row {
+    @apply flex flex-row;
+  }
+
+  .col {
+    @apply flex flex-col;
+  }
+
+  .center-center {
+    @apply flex items-center justify-center text-center;
+  }
+}
+
+strong {
+  @apply font-semibold;
+}
+
+
+.radial-gradient {
+  background: #BECCDF;
+  background: radial-gradient(at bottom, hsl(var(--background-light)), hsl(var(--background)));
+}
+
+.radial-gradient-dot-1 {
+  background: #BECCDF;
+  background: radial-gradient(at 50% 20%, hsl(var(--background-light)), transparent);
+}
+
+.radial-gradient-dot-pages {
+  background: #BECCDF;
+  background: radial-gradient(at 50% 50%, hsl(var(--background)), hsl(var(--background)/0.2));
+}
+
+.animated-iframe-gradient {
+  position: relative;
+  overflow: hidden;
+  background: transparent;
+}
+
+.animated-iframe-gradient:before {
+  content: '';
+  display: block;
+  position: absolute;
+  top: 50%;
+  left: 50%;
+  transform: translate(-50%, -50%);
+  width: 1600px;
+  height: 1600px;
+  background: linear-gradient(250deg, hsl(var(--foreground)/0.9), transparent);
+  
+  animation: GradientRotate 8s linear infinite;
+}
+@keyframes GradientRotate {
+  0% { transform: translate(-50%, -50%) rotate(0deg); }
+  100% { transform: translate(-50%, -50%) rotate(360deg); }
+}
+
+.line-before {
+  position: relative;
+  padding: 16px;
+}
+.line-before:before {
+  content: '';
+  display: block;
+  position: absolute;
+  top: calc(4px*-32);
+  bottom: calc(4px*-32);
+  left: 0;
+  width: 1px;
+  background: hsl(var(--foreground)/0.1);
+}
+.line-after {
+  position: relative;
+  padding: 16px;
+}
+.line-after:after {
+  content: '';
+  display: block;
+  position: absolute;
+  top: calc(4px*-32);
+  bottom: calc(4px*-32);
+  right: 0;
+  width: 1px;
+  background: hsl(var(--foreground)/0.1);
+}
+
+.animate-fade-up {
+  animation: animateFadeUp 0.5s ease-in-out;
+  animation-fill-mode: both; 
+}
+
+@keyframes animateFadeUp {
+  0% { transform: translateY(0.5rem); scale: 0.95; }
+  100% { transform: translateY(0); scale: 1; }
+}
+
+.animate-fade-down {
+  animation: animateFadeDown 0.5s ease-in-out;
+  animation-fill-mode: both;
+}
+
+@keyframes animateFadeDown {
+  0% { transform: translateY(-1rem); }
+  100% { transform: translateY(0); }
+}
+
+/* Docs */
+
+h1 code, h2 code, h3 code, h4 code, h5 code, h6 code {
+  font-size: inherit !important;
+}
+
+.prose pre {
+  background: hsl(var(--background-dark));
+  border: 1px solid hsl(var(--background-light));
+  padding: 10px 15px;
+  border-radius: 10px;
+  font-size: 12px;
+}
+
+.prose pre code {
+  background: transparent;
+  padding: 0;
+  border-radius: 0;
+  font-size: inherit;
+  border: none;
+}
+
+div[data-radix-scroll-area-viewport] > div[data-radix-scroll-area-content] {
+  max-height: 400px;
+}
+
+div[data-radix-scroll-area-viewport] > div[data-radix-scroll-area-content] pre{
+  max-height: none;
+}

apps/public/app/layout.config.tsx

@@ -0,0 +1,66 @@
+import type { BaseLayoutProps } from 'fumadocs-ui/layouts/shared';
+
+/**
+ * Shared layout configurations
+ *
+ * you can configure layouts individually from:
+ * Home Layout: app/(home)/layout.tsx
+ * Docs Layout: app/docs/layout.tsx
+ */
+
+export const siteName = 'OpenPanel';
+export const baseUrl = 'https://openpanel.dev';
+export const url = (path: string) => `${baseUrl}${path}`;
+export const baseOptions: BaseLayoutProps = {
+  nav: {
+    title: siteName,
+  },
+  links: [
+    {
+      type: 'main',
+      text: 'Home',
+      url: '/',
+      active: 'nested-url',
+    },
+    {
+      type: 'main',
+      text: 'Pricing',
+      url: '/pricing',
+      active: 'nested-url',
+    },
+    {
+      type: 'main',
+      text: 'Supporter',
+      url: '/supporter',
+      active: 'nested-url',
+    },
+    {
+      type: 'main',
+      text: 'Documentation',
+      url: '/docs',
+      active: 'nested-url',
+    },
+    {
+      type: 'main',
+      text: 'Articles',
+      url: '/articles',
+      active: 'nested-url',
+    },
+  ],
+} as const;
+
+export const authors = [
+  {
+    name: 'OpenPanel Team',
+    url: 'https://openpanel.com',
+  },
+  {
+    name: 'Carl-Gerhard Lindesvärd',
+    url: 'https://openpanel.com',
+    image: '/twitter-carl.jpg',
+  },
+];
+
+export const getAuthor = (author?: string) => {
+  return authors.find((a) => a.name === author)!;
+};

apps/public/app/layout.tsx

@@ -0,0 +1,75 @@
+import { RootProvider } from 'fumadocs-ui/provider';
+import type { ReactNode } from 'react';
+import './global.css';
+
+import { TooltipProvider } from '@/components/ui/tooltip';
+import { OpenPanelComponent } from '@openpanel/nextjs';
+import { cn } from 'fumadocs-ui/components/api';
+import { GeistMono } from 'geist/font/mono';
+import { GeistSans } from 'geist/font/sans';
+import type { Metadata, Viewport } from 'next';
+import Script from 'next/script';
+import { url, baseUrl, siteName } from './layout.config';
+
+export const viewport: Viewport = {
+  width: 'device-width',
+  initialScale: 1,
+  userScalable: true,
+  themeColor: [
+    { media: '(prefers-color-scheme: light)', color: '#fafafa' },
+    { media: '(prefers-color-scheme: dark)', color: '#171717' },
+  ],
+};
+
+const description = `${siteName} is a simple, affordable open-source alternative to Mixpanel for web and product analytics. Get powerful insights without the complexity.`;
+
+export const metadata: Metadata = {
+  title: {
+    default: siteName,
+    template: `%s | ${siteName}`,
+  },
+  description,
+  alternates: {
+    canonical: baseUrl,
+  },
+  icons: {
+    apple: '/apple-touch-icon.png',
+    icon: '/favicon.ico',
+  },
+  manifest: '/site.webmanifest',
+  openGraph: {
+    title: siteName,
+    description,
+    siteName: siteName,
+    url: baseUrl,
+    type: 'website',
+    images: [
+      {
+        url: url('/ogimage.jpg'),
+        width: 1200,
+        height: 630,
+        alt: siteName,
+      },
+    ],
+  },
+};
+
+export default async function Layout({ children }: { children: ReactNode }) {
+  return (
+    <html lang="en" suppressHydrationWarning>
+      <body className={cn(GeistSans.variable, GeistMono.variable)}>
+        <RootProvider>
+          <TooltipProvider>{children}</TooltipProvider>
+        </RootProvider>
+        <OpenPanelComponent
+          apiUrl="/api/op"
+          cdnUrl="/api/op/op1.js"
+          clientId="301c6dc1-424c-4bc3-9886-a8beab09b615"
+          trackAttributes
+          trackScreenViews
+          trackOutgoingLinks
+        />
+      </body>
+    </html>
+  );
+}

apps/public/app/manifest.ts

@@ -0,0 +1,22 @@
+import type { MetadataRoute } from 'next';
+
+import { metadata } from './layout';
+
+export default function manifest(): MetadataRoute.Manifest {
+  return {
+    name: metadata.title as string,
+    short_name: 'Openpanel.dev',
+    description: metadata.description!,
+    start_url: '/',
+    display: 'standalone',
+    background_color: '#fff',
+    theme_color: '#fff',
+    icons: [
+      {
+        src: '/favicon.ico',
+        sizes: 'any',
+        type: 'image/x-icon',
+      },
+    ],
+  };
+}

apps/public/app/not-found.tsx

@@ -0,0 +1,30 @@
+import { baseOptions } from '@/app/layout.config';
+import { Footer } from '@/components/footer';
+import { HeroContainer } from '@/components/hero';
+import Navbar from '@/components/navbar';
+import { HomeLayout } from 'fumadocs-ui/layouts/home';
+import type { ReactNode } from 'react';
+
+export default function NotFound({
+  children,
+}: {
+  children: ReactNode;
+}): React.ReactElement {
+  return (
+    <div>
+      <Navbar />
+      <HeroContainer className="h-screen center-center">
+        <div className="relative z-10 col gap-2">
+          <div className="text-[150px] font-mono font-bold opacity-5 -mb-4">
+            404
+          </div>
+          <h1 className="text-6xl font-bold">Not Found</h1>
+          <p className="text-xl text-muted-foreground">
+            Awkward, we couldn&apos;t find what you were looking for.
+          </p>
+        </div>
+      </HeroContainer>
+      <Footer />
+    </div>
+  );
+}

apps/public/app/page.tsx

@@ -0,0 +1,36 @@
+import { Footer } from '@/components/footer';
+import { Hero } from '@/components/hero';
+import Navbar from '@/components/navbar';
+import { Faq } from '@/components/sections/faq';
+import { Features } from '@/components/sections/features';
+import { Pricing } from '@/components/sections/pricing';
+import { Sdks } from '@/components/sections/sdks';
+import { Stats, StatsPure } from '@/components/sections/stats';
+import { Testimonials } from '@/components/sections/testimonials';
+import { WhyOpenPanel } from '@/components/why-openpanel';
+import type { Metadata } from 'next';
+import { Suspense } from 'react';
+
+export const metadata: Metadata = {
+  title: 'OpenPanel | An open-source alternative to Mixpanel',
+};
+
+// export const experimental_ppr = true;
+
+export default function HomePage() {
+  return (
+    <>
+      <Navbar />
+      <main>
+        <Hero />
+        <WhyOpenPanel />
+        <Features />
+        <Testimonials />
+        <Faq />
+        <Pricing />
+        <Sdks />
+      </main>
+      <Footer />
+    </>
+  );
+}