Heartthrob — Sign in

\n ${fmtValue(value)}${rateHTML}\n `;\n }).join(\"\");\n\n // Blended conversion rate for the Total row (subscribers/returns ÷ signups).\n let totalRateHTML = \"\";\n if (showRate) {\n const totalRate = totalSignups > 0 ? Math.round((total / totalSignups) * 100) : null;\n totalRateHTML = `${totalRate === null ? \"—\" : `${totalRate}% of signups`}`;\n }\n\n return `\n

${escapeHTML(win.label)}

\n \n \n \n \n ${body}\n \n \n \n

Channel		${escapeHTML(label)}
Total		${fmtValue(total)}${totalRateHTML}

`;\n }\n\n function render() {\n const win = windows.find((w) => w.key === windowKey);\n if (!win) {\n container.innerHTML = '

No data yet.

';\n return;\n }\n container.innerHTML = renderTable(win);\n }\n\n metricButtons.forEach((btn) => {\n btn.addEventListener(\"click\", () => {\n metric = btn.dataset.metric;\n metricButtons.forEach((b) => b.classList.toggle(\"is-active\", b === btn));\n render();\n });\n });\n\n windowButtons.forEach((btn) => {\n btn.addEventListener(\"click\", () => {\n windowKey = btn.dataset.window;\n windowButtons.forEach((b) => b.classList.toggle(\"is-active\", b === btn));\n render();\n });\n });\n\n async function load() {\n try {\n const res = await fetch(\"/api/analytics\");\n if (!res.ok) throw new Error(\"Failed to load\");\n const data = await res.json();\n windows = data.windows || [];\n render();\n if (meta && data.updatedAt) {\n const when = new Date(data.updatedAt).toLocaleString(undefined, {\n month: \"short\",\n day: \"numeric\",\n hour: \"numeric\",\n minute: \"2-digit\",\n });\n meta.textContent = `Attributed to each visitor's first-visit channel · updated ${when}`;\n }\n } catch {\n container.innerHTML = '

Couldn’t load analytics right now.

';\n }\n }\n\n load();\n})();\n",[],[208],"a9c5ce6f-7743-4025-9d57-befaa284f78e","main.tsx",117,["D",1781830604807],26,"http","import { parseVal, readFile, serveFile, staticHTTPServer } from \"https://esm.town/v/std/utils/index.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { checkPassword, clearSessionCookie, isAuthed, makeSessionCookie } from \"./auth.ts\";\n\nconst serve = staticHTTPServer();\n\nconst TABLE = \"guestbook_entries\";\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n message TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n)`);\n\nfunction clamp(value: unknown, max: number): string {\n return String(value ?? \"\").trim().slice(0, max);\n}\n\n// --- Analytics: 4 metrics x channels, across 3 time windows, via PostHog ---\nconst ANALYTICS_CACHE_KEY = \"analytics_channels_v8\";\nconst ANALYTICS_TTL_MS = 30 * 60 * 1000; // 30 minutes (heavier query set)\n\nexport type Metric = \"visitors\" | \"signups\" | \"subscribers\" | \"returned7d\" | \"ltv\";\n\nexport interface ChannelMetrics {\n channel: string;\n visitors: number;\n signups: number;\n subscribers: number;\n returned7d: number;\n ltv: number; // lifetime revenue (USD) of users who signed up in the window, by channel\n}\n\nexport interface WindowResult {\n key: string;\n label: string;\n days: number;\n channels: ChannelMetrics[];\n googleSpend: number; // Google Ads spend (USD) for this window, from the warehouse\n}\n\nconst WINDOWS: { key: string; label: string; days: number }[] = [\n { key: \"d14\", label: \"Last 2 weeks\", days: 14 },\n { key: \"d30\", label: \"Last 30 days\", days: 30 },\n { key: \"d90\", label: \"Last 3 months\", days: 90 },\n];\n\nasync function hogQuery(query: string): Promise<[string, number][]> {\n const key = Deno.env.get(\"POSTHOG_API_KEY\");\n const project = Deno.env.get(\"POSTHOG_PROJECT_ID\");\n if (!key || !project) throw new Error(\"PostHog env vars not configured\");\n\n const res = await fetch(`https://us.posthog.com/api/projects/${project}/query/`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", \"Authorization\": `Bearer ${key}` },\n body: JSON.stringify({ query: { kind: \"HogQLQuery\", query } }),\n });\n if (!res.ok) throw new Error(`PostHog ${res.status}`);\n return (await res.json()).results ?? [];\n}\n\n// Each person is attributed to the channel of their FIRST pageview in the\n// window (first-touch), using UTM source/medium + gclid + referring domain.\nfunction firstTouchCTE(days: number): string {\n return `\n WITH ft AS (\n SELECT person_id,\n min(timestamp) AS first_seen,\n argMin(properties.$referring_domain, timestamp) AS ref,\n argMin(lower(coalesce(properties.utm_source,'')), timestamp) AS src,\n argMin(lower(coalesce(properties.utm_medium,'')), timestamp) AS med,\n argMin(if(coalesce(properties.gclid,'') != '', 1, 0), timestamp) AS has_gclid\n FROM events\n WHERE event = '$pageview' AND timestamp >= now() - INTERVAL ${days} DAY\n GROUP BY person_id\n )`;\n}\n\n// Channel buckets: Google Organic, Bing Organic split out, plus the paid\n// search channels and Facebook. Paid is detected first (so a paid Google/Bing\n// click never counts as organic), then organic search engines, then social.\n// \"Other\" is a catch-all (e.g. direct, other referrers) so totals reconcile.\nconst PAID = `med IN ('cpc','paid','ppc','paidsearch','paid_search')`;\nconst CH = `\n multiIf(\n (${PAID}) AND (src = 'google' OR has_gclid = 1), 'Google Paid Search',\n (${PAID}) AND (src = 'bing' OR ref ILIKE '%bing.%'), 'Bing Paid',\n src IN ('fb','facebook','ig','instagram') OR ref ILIKE '%facebook.%' OR ref ILIKE '%instagram.%', 'Facebook',\n (NOT (${PAID})) AND (src = 'google' OR ref ILIKE '%google.%'), 'Google Organic',\n (NOT (${PAID})) AND (src = 'bing' OR ref ILIKE '%bing.%'), 'Bing Organic',\n (NOT (${PAID})) AND (src IN ('duckduckgo','yahoo') OR ref ILIKE '%duckduckgo.%' OR ref ILIKE '%yahoo.%'), 'Other Organic',\n coalesce(ref,'') IN ('','$direct') OR ref ILIKE '%heartthrob.%', 'Direct',\n 'Other'\n )`;\n\nconst CHANNEL_ORDER = [\n \"Google Organic\",\n \"Bing Organic\",\n \"Other Organic\",\n \"Google Paid Search\",\n \"Bing Paid\",\n \"Facebook\",\n \"Direct\",\n \"Other\",\n];\n\nasync function fetchWindow(days: number): Promise {\n const ft = firstTouchCTE(days);\n const eventMetric = (event: string) => `${ft}\n SELECT ${CH} AS ch, count(DISTINCT e.person_id) AS n\n FROM events e INNER JOIN ft ON e.person_id = ft.person_id\n WHERE e.event = '${event}' AND e.timestamp >= now() - INTERVAL ${days} DAY\n GROUP BY ch`;\n\n const [visitors, signups, subscribers, returned, ltv] = await Promise.all([\n hogQuery(`${ft} SELECT ${CH} AS ch, count(DISTINCT person_id) AS n FROM ft GROUP BY ch`),\n hogQuery(eventMetric(\"user_signed_up\")),\n hogQuery(eventMetric(\"subscription_paid\")),\n hogQuery(`${ft}\n SELECT ${CH} AS ch, count(DISTINCT e.person_id) AS n\n FROM events e INNER JOIN ft ON e.person_id = ft.person_id\n WHERE e.event = '$pageview' AND e.timestamp >= ft.first_seen + INTERVAL 7 DAY\n GROUP BY ch`),\n // LTV = lifetime revenue (all payments ever) of users who SIGNED UP within\n // the window, attributed to their first-touch channel. Window filters the\n // signup date (the cohort), not the payment date.\n hogQuery(`\n WITH\n ftl AS (\n SELECT person_id,\n argMin(properties.$referring_domain, timestamp) AS ref,\n argMin(lower(coalesce(properties.utm_source,'')), timestamp) AS src,\n argMin(lower(coalesce(properties.utm_medium,'')), timestamp) AS med,\n argMin(if(coalesce(properties.gclid,'') != '', 1, 0), timestamp) AS has_gclid\n FROM events WHERE event = '$pageview' GROUP BY person_id\n ),\n cohort AS (\n SELECT DISTINCT person_id FROM events\n WHERE event = 'user_signed_up' AND timestamp >= now() - INTERVAL ${days} DAY\n ),\n revenue AS (\n SELECT person_id, sum(coalesce(properties.value_usd, 0)) AS rev\n FROM events WHERE event = 'subscription_paid' GROUP BY person_id\n )\n SELECT ${CH} AS ch, round(sum(coalesce(r.rev, 0)), 2) AS n\n FROM cohort c\n INNER JOIN ftl ON ftl.person_id = c.person_id\n LEFT JOIN revenue r ON r.person_id = c.person_id\n GROUP BY ch`),\n ]);\n\n const map = new Map();\n const ensure = (c: string) =>\n map.get(c) ??\n map.set(c, { channel: c, visitors: 0, signups: 0, subscribers: 0, returned7d: 0, ltv: 0 }).get(c)!;\n for (const [c, n] of visitors) ensure(c).visitors = Number(n) || 0;\n for (const [c, n] of signups) ensure(c).signups = Number(n) || 0;\n for (const [c, n] of subscribers) ensure(c).subscribers = Number(n) || 0;\n for (const [c, n] of returned) ensure(c).returned7d = Number(n) || 0;\n for (const [c, n] of ltv) ensure(c).ltv = Number(n) || 0;\n\n // Stable channel ordering.\n return [...map.values()].sort(\n (a, b) => CHANNEL_ORDER.indexOf(a.channel) - CHANNEL_ORDER.indexOf(b.channel),\n );\n}\n\n// Google Ads spend (USD) for the last N days, from the connected data\n// warehouse. cost is stored in micros, so divide by 1,000,000.\nasync function fetchGoogleSpend(days: number): Promise {\n try {\n const rows = await hogQuery(`\n SELECT 'spend' AS k, round(sum(metrics_cost_micros) / 1000000, 2) AS spend\n FROM googleads_campaign_stats\n WHERE segments_date >= toString(today() - ${days})\n `);\n return Number(rows[0]?.[1]) || 0;\n } catch {\n return 0; // warehouse query failed — treat as no spend rather than erroring the page\n }\n}\n\nasync function getAnalytics(): Promise<{ windows: WindowResult[]; updatedAt: number }> {\n const cached = await blob.getJSON(ANALYTICS_CACHE_KEY).catch(() => null) as\n | { windows: WindowResult[]; updatedAt: number }\n | null;\n if (cached && Date.now() - cached.updatedAt < ANALYTICS_TTL_MS) return cached;\n\n try {\n const windows: WindowResult[] = [];\n for (const w of WINDOWS) {\n const [channels, googleSpend] = await Promise.all([\n fetchWindow(w.days),\n fetchGoogleSpend(w.days),\n ]);\n windows.push({ ...w, channels, googleSpend });\n }\n const fresh = { windows, updatedAt: Date.now() };\n await blob.setJSON(ANALYTICS_CACHE_KEY, fresh);\n return fresh;\n } catch (err) {\n if (cached) return cached; // fall back to stale cache on failure\n throw err;\n }\n}\n\nexport default async function (req: Request): Promise {\n const { pathname } = new URL(req.url);\n\n // --- Auth gate (whole site is private) -----------------------------------\n\n // Handle login submissions (form POST).\n if (pathname === \"/api/login\" && req.method === \"POST\") {\n const form = await req.formData().catch(() => null);\n const password = String(form?.get(\"password\") ?? \"\");\n if (checkPassword(password)) {\n return new Response(null, {\n status: 303,\n headers: { Location: \"/\", \"Set-Cookie\": makeSessionCookie() },\n });\n }\n return new Response(null, { status: 303, headers: { Location: \"/login?error=1\" } });\n }\n\n // Log out: clear the cookie and bounce to the login page.\n if (pathname === \"/api/logout\") {\n return new Response(null, {\n status: 303,\n headers: { Location: \"/login\", \"Set-Cookie\": clearSessionCookie() },\n });\n }\n\n const authed = isAuthed(req);\n\n // The login page and the minimal assets it needs are reachable without auth.\n if (!authed) {\n if (pathname === \"/login\") {\n return serveFile(\"./login.html\", import.meta.url);\n }\n if (pathname === \"/style.css\") {\n return serveFile(\"./style.css\", import.meta.url);\n }\n if (pathname === \"/favicon.svg\") {\n return serveFile(\"./favicon.svg\", import.meta.url);\n }\n if (pathname === \"/banner.png\") {\n const data = await blob.get(\"heartthrob-dark.png\");\n if (!data) return new Response(\"Not found\", { status: 404 });\n return new Response(data.body, {\n headers: { \"Content-Type\": \"image/png\", \"Cache-Control\": \"public, max-age=3600\" },\n });\n }\n // Everything else (page, APIs, assets) is blocked until signed in.\n return new Response(null, { status: 302, headers: { Location: \"/login\" } });\n }\n\n // --- Authenticated routes below ------------------------------------------\n\n if (pathname === \"/source\") {\n return new Response(null, {\n status: 302,\n headers: { Location: parseVal().links.self.val },\n });\n }\n\n // Serve the Heartthrob banner stored in blob storage\n if (pathname === \"/banner.png\") {\n const data = await blob.get(\"heartthrob-dark.png\");\n if (!data) return new Response(\"Not found\", { status: 404 });\n return new Response(data.body, {\n headers: {\n \"Content-Type\": \"image/png\",\n \"Cache-Control\": \"public, max-age=3600\",\n },\n });\n }\n\n // Serve the profile photo stored in blob storage\n if (pathname === \"/photo.png\") {\n const data = await blob.get(\"ht.png\");\n if (!data) return new Response(\"Not found\", { status: 404 });\n return new Response(data.body, {\n headers: {\n \"Content-Type\": \"image/png\",\n \"Cache-Control\": \"public, max-age=3600\",\n },\n });\n }\n\n // Analytics API — metrics by channel across windows (server-side; key stays server-side)\n if (pathname === \"/api/analytics\") {\n try {\n const { windows, updatedAt } = await getAnalytics();\n return Response.json({ windows, updatedAt });\n } catch {\n return Response.json({ error: \"Analytics unavailable\" }, { status: 502 });\n }\n }\n\n // Guest book API\n if (pathname === \"/api/guestbook\") {\n if (req.method === \"GET\") {\n const { rows } = await sqlite.execute(\n `SELECT id, name, message, created_at FROM ${TABLE} ORDER BY id DESC LIMIT 200`,\n );\n return Response.json(rows);\n }\n\n if (req.method === \"POST\") {\n let body: { name?: string; message?: string };\n try {\n body = await req.json();\n } catch {\n return Response.json({ error: \"Invalid JSON\" }, { status: 400 });\n }\n\n const name = clamp(body.name, 60);\n const message = clamp(body.message, 1000);\n if (!name || !message) {\n return Response.json(\n { error: \"Both name and message are required.\" },\n { status: 400 },\n );\n }\n\n const { rows } = await sqlite.execute({\n sql:\n `INSERT INTO ${TABLE} (name, message) VALUES (?, ?) RETURNING id, name, message, created_at`,\n args: [name, message],\n });\n return Response.json(rows[0], { status: 201 });\n }\n\n return new Response(\"Method not allowed\", { status: 405 });\n }\n\n return serve(req);\n}\n","heartthrob",[],[218],["D",1781828501158],[],[18],"94f1804b-2140-4139-8224-13b32ef5f731","index.html","019edcf1-438b-763c-897b-daa8d25f1c28",105,["D",1781830329661],20,"\n\n \n Heartthrob — Marketing\n \n \n \n \n \n\n \n \n \n \n \n \n \n

\n $\"\"$ \n $\"\"$ \n $\"\"$ \n

\n\n \n

\n \n Log out\n

\n\n

\n \n

Traffic by channel

By acquisition channel, attributed to each person's first visit.

\n\n

\n Metric\n

\n \n \n \n \n \n

\n Window\n

\n \n \n \n

\n\n

Loading analytics…

\n\n \n \n\n",[],[231],"a8c96d83-5769-4b60-9b62-958a2982d312","flower-3.svg","9df6bcda-6b6b-11f1-81f5-1607ee4eb77e",93,["D",1781829276346],2,"\n",[],[240],"ecc6f30d-0988-43c5-b812-76a16ca98992","flower-2.svg","99e8d4de-6b6b-11f1-9c5c-1607ee4eb77e",92,["D",1781829263401],"\n",[],[249],"b19cf04d-11fd-4302-968e-e5fea037676b","flower-1.svg","9565bae4-6b6b-11f1-a2f2-1607ee4eb77e",91,["D",1781829251159],"\n",[],[257],"85354f3b-a7df-4046-90b7-51bdc17fa862","favicon.svg","019edcf1-438b-763c-897b-d481639df024",["D",1781823259454],"",[],[265],"f39eaba7-989e-4de8-aa00-d19699dd5fcf","auth.ts","d3401a68-6b74-11f1-9a1e-1607ee4eb77e",71,["D",1781828492969],"import { createHmac, timingSafeEqual } from \"node:crypto\";\n\n// Simple shared-password gate with a signed, HttpOnly session cookie.\n// The password is read from the SITE_PASSWORD env var (never hardcoded, since\n// this val's source is public). The cookie is an HMAC signature so it can't be\n// forged without the secret.\n\nconst COOKIE_NAME = \"ht_session\";\nconst MAX_AGE_SECONDS = 60 * 60 * 24 * 30; // 30 days\n\nfunction secret(): string {\n const pw = Deno.env.get(\"SITE_PASSWORD\");\n if (!pw) throw new Error(\"SITE_PASSWORD not configured\");\n return pw;\n}\n\n// The cookie value is `issuedAtMs.signature`, where signature = HMAC(secret, issuedAtMs).\nfunction sign(issuedAt: string): string {\n return createHmac(\"sha256\", secret()).update(issuedAt).digest(\"hex\");\n}\n\nexport function makeSessionCookie(): string {\n const issuedAt = String(Date.now());\n const value = `${issuedAt}.${sign(issuedAt)}`;\n return [\n `${COOKIE_NAME}=${value}`,\n \"Path=/\",\n \"HttpOnly\",\n \"Secure\",\n \"SameSite=Lax\",\n `Max-Age=${MAX_AGE_SECONDS}`,\n ].join(\"; \");\n}\n\nexport function clearSessionCookie(): string {\n return `${COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=0`;\n}\n\nfunction constantTimeEqual(a: string, b: string): boolean {\n const ab = new TextEncoder().encode(a);\n const bb = new TextEncoder().encode(b);\n if (ab.length !== bb.length) return false;\n return timingSafeEqual(ab, bb);\n}\n\nexport function checkPassword(submitted: string): boolean {\n return constantTimeEqual(submitted ?? \"\", secret());\n}\n\nexport function isAuthed(req: Request): boolean {\n const cookie = req.headers.get(\"cookie\") ?? \"\";\n const match = cookie.split(/;\\s*/).find((c) => c.startsWith(`${COOKIE_NAME}=`));\n if (!match) return false;\n const value = match.slice(COOKIE_NAME.length + 1);\n const [issuedAt, sig] = value.split(\".\");\n if (!issuedAt || !sig) return false;\n\n // Expiry check.\n const age = Date.now() - Number(issuedAt);\n if (!Number.isFinite(age) || age < 0 || age > MAX_AGE_SECONDS * 1000) return false;\n\n // Signature check (constant-time).\n let expected: string;\n try {\n expected = sign(issuedAt);\n } catch {\n return false;\n }\n return constantTimeEqual(sig, expected);\n}\n",[],[272],"c672cfa1-a5a3-410f-aefe-e83587fa6759","README.md","019edcf1-438b-763c-897b-d0e918a6dbe9",6,["D",1781823311732],"# Portfolio\n\nA simple personal portfolio page — header + nav, a hero with a stock photo,\nand sections for **About**, **Projects**, and **Contact**.\n\n## Where to edit\n\n| File | What it controls |\n| --- | --- |\n| `index.html` | All page content — your name, tagline, about text, project cards, links |\n| `style.css` | Colors, layout, and styling (tweak the `:root` variables for a quick theme change) |\n| `script.js` | Tiny bit of JS (fills in the footer year) |\n| `main.tsx` | The HTTP server that hosts the files + the `/source` route |\n\n## Things to personalize\n\n- Replace **Lori** with your name (in `index.html` and the ``).\n- Write your real bio in the **About** section.\n- Swap the three project cards for your actual projects + links.\n- Update the email and social links in the **Contact** section.\n- Change the hero photo `src` if you'd like a different image.\n\nSaving any file instantly redeploys the site.\n",[],[280],"4457310d-275a-4fe8-b415-be2742539eea","queries.ts","9a057106-6e73-11f1-ae24-1607ee4eb77e","9b140c12-fd00-4b3f-a79b-0893a857ee97",133,["D",1782157941497],"// ============================================================================\n// Acquisition cohort reporting — HogQL query builders.\n// Project: 157661 (heartthrob.ai), PostHog US cloud. Built from source events.\n// ============================================================================\n//\n// CANONICAL RULES ENCODED HERE (see methodology in report.ts):\n// - Cohort = first user_signed_up, grouped by signup month (UTC->project tz).\n// - Activity = chat_message_sent ONLY (never chat_message_send).\n// - Attribution = signup-session entry props (click ids + paid UTMs); last paid\n// touch within the signup session. Unattributed-but-no-paid-signal => Organic;\n// sessions we cannot resolve at all => Unknown (kept as its own bucket).\n// - Revenue = subscription_paid.value_usd, split by payment_kind (initial|renewal).\n// - Spend: Google (googleads_campaign_stats), Meta (metaads_*). Bing => N/A.\n// ============================================================================\n\nexport const SINCE = \"2026-01-01\";\n// Lookback for pageviews/sessions so a signup session that started in the prior\n// month is still resolvable.\nexport const PV_SINCE = \"2025-12-01\";\n\n// --- Attribution channel classifier, expressed in HogQL ---------------------\n// Returns one of: 'Google Ads' | 'Bing Ads' | 'Facebook/Meta Ads' | 'Organic'.\n// Operates on already-extracted session-entry fields (lowercased utm_*).\n// NOTE: a bare fbclid is NOT enough for Meta; organic Bing/Yahoo referrers stay\n// Organic unless msclkid or a paid Bing UTM is present.\nexport const PAID_MEDIUM = `('cpc','ppc','paid','paid-search','paidsearch','paid_search')`;\n\nexport function channelExpr(\n gclid: string,\n gbraid: string,\n wbraid: string,\n dclid: string,\n msclkid: string,\n utmSource: string,\n utmMedium: string,\n): string {\n return `multiIf(\n (${gclid}!='' OR ${gbraid}!='' OR ${wbraid}!='' OR ${dclid}!=''\n OR (${utmSource}='google' AND ${utmMedium} IN ${PAID_MEDIUM})), 'Google Ads',\n (${msclkid}!=''\n OR (${utmSource}='bing' AND ${utmMedium} IN ${PAID_MEDIUM})), 'Bing Ads',\n (${utmSource} IN ('facebook','fb','instagram','ig','meta','an')\n AND ${utmMedium} IN ${PAID_MEDIUM}), 'Facebook/Meta Ads',\n 'Organic')`;\n}\n\n// CTE that resolves one attribution row per signup user (deduped to first signup),\n// joining the signup's $session_id to that session's entry attribution.\n// Produces: user_id, signup_ts, cohort_month, channel, utm_campaign, has_session.\nexport function signupAttributionCTE(): string {\n const g = `argMax(JSONExtractString(properties,'$session_entry_gclid'),timestamp)`;\n const gb = `argMax(JSONExtractString(properties,'$session_entry_gbraid'),timestamp)`;\n const wb = `argMax(JSONExtractString(properties,'$session_entry_wbraid'),timestamp)`;\n const dc = `argMax(JSONExtractString(properties,'$session_entry_dclid'),timestamp)`;\n const ms = `argMax(JSONExtractString(properties,'$session_entry_msclkid'),timestamp)`;\n const us = `argMax(lower(JSONExtractString(properties,'$session_entry_utm_source')),timestamp)`;\n const um = `argMax(lower(JSONExtractString(properties,'$session_entry_utm_medium')),timestamp)`;\n const uc = `argMax(JSONExtractString(properties,'$session_entry_utm_campaign'),timestamp)`;\n return `\n signups_raw AS (\n SELECT\n JSONExtractString(properties,'$user_id') AS user_id_prop,\n distinct_id,\n person_id,\n timestamp AS signup_ts,\n JSONExtractString(properties,'$session_id') AS sid,\n lower(JSONExtractString(properties,'utm_source')) AS ev_utm_source,\n lower(JSONExtractString(properties,'utm_medium')) AS ev_utm_medium,\n JSONExtractString(properties,'utm_campaign') AS ev_utm_campaign\n FROM events\n WHERE event='user_signed_up' AND timestamp >= '${SINCE}'\n AND JSONExtractString(properties,'is_demo') != 'true'\n ),\n signups AS (\n -- first signup per person (LIMIT 1 BY avoids aggregate-in-aggregate nesting)\n SELECT person_id, distinct_id, signup_ts, sid,\n ev_utm_source, ev_utm_medium, ev_utm_campaign\n FROM signups_raw\n ORDER BY person_id, signup_ts ASC\n LIMIT 1 BY person_id\n ),\n sess AS (\n SELECT\n JSONExtractString(properties,'$session_id') AS sid,\n ${g} AS s_gclid, ${gb} AS s_gbraid, ${wb} AS s_wbraid, ${dc} AS s_dclid,\n ${ms} AS s_msclkid, ${us} AS s_utm_source, ${um} AS s_utm_medium, ${uc} AS s_utm_campaign,\n argMax(JSONExtractString(properties,'$session_entry_fbclid'),timestamp) AS s_fbclid\n FROM events\n WHERE event='$pageview' AND timestamp >= '${PV_SINCE}'\n GROUP BY sid\n ),\n attributed AS (\n SELECT\n s.person_id AS person_id,\n s.distinct_id AS distinct_id,\n s.signup_ts AS signup_ts,\n (s.sid != '' AND e.sid != '') AS has_session,\n -- prefer session-entry attribution; fall back to signup-event utm\n ${channelExpr(\n \"coalesce(e.s_gclid,'')\",\n \"coalesce(e.s_gbraid,'')\",\n \"coalesce(e.s_wbraid,'')\",\n \"coalesce(e.s_dclid,'')\",\n \"coalesce(e.s_msclkid,'')\",\n \"if(coalesce(e.s_utm_source,'')!='', e.s_utm_source, s.ev_utm_source)\",\n \"if(coalesce(e.s_utm_medium,'')!='', e.s_utm_medium, s.ev_utm_medium)\",\n )} AS channel_raw,\n -- best campaign: session entry utm_campaign, else signup-event utm_campaign\n if(coalesce(e.s_utm_campaign,'')!='', e.s_utm_campaign, s.ev_utm_campaign) AS utm_campaign,\n -- Unknown = no joinable session AND no event-level paid signal\n (s.sid='' OR e.sid='') AS no_session\n FROM signups s\n LEFT JOIN sess e ON s.sid = e.sid\n ),\n cohort AS (\n SELECT\n person_id, distinct_id, signup_ts,\n toStartOfMonth(signup_ts) AS cohort_month,\n utm_campaign,\n -- If we could not resolve the session AND channel fell through to Organic\n -- with no event-level signal, label Unknown rather than asserting Organic.\n multiIf(\n channel_raw != 'Organic', channel_raw,\n no_session, 'Unknown',\n 'Organic') AS channel\n FROM attributed\n )`;\n}\n",[],[296,288],"cohort","9a4afd2f-f6f1-49d4-8058-8dfe3c940713","_validate.ts","a1329800-6e73-11f1-b572-1607ee4eb77e",130,["D",1782157832977],"import { signupAttributionCTE, SINCE } from \"./queries.ts\";\n\nconst KEY = Deno.env.get(\"POSTHOG_API_KEY\");\nconst PROJECT = Deno.env.get(\"POSTHOG_PROJECT_ID\");\nconst HOST = \"https://us.posthog.com\";\n\nasync function q(hogql: string) {\n const res = await fetch(`${HOST}/api/projects/${PROJECT}/query/`, {\n method: \"POST\",\n headers: { \"Authorization\": `Bearer ${KEY}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ query: { kind: \"HogQLQuery\", query: hogql } }),\n });\n const j = await res.json();\n if (j.error || j.detail) return { error: j.error || j.detail };\n return { results: j.results, columns: j.columns };\n}\n\n{\n const out: Record<string, unknown> = {};\n\n // Total distinct signup persons (the reconciliation anchor)\n out.rawSignupPersons = await q(\n `SELECT count(DISTINCT person_id) AS persons, count() AS events\n FROM events WHERE event='user_signed_up' AND timestamp>='${SINCE}'\n AND JSONExtractString(properties,'is_demo')!='true'`,\n );\n\n // Channel x month split from the CTE\n out.split = await q(\n `WITH ${signupAttributionCTE()}\n SELECT formatDateTime(cohort_month,'%Y-%m') AS month, channel, count() AS signups\n FROM cohort GROUP BY month, channel ORDER BY month, channel`,\n );\n\n // Channel totals (must sum to persons above)\n out.channelTotals = await q(\n `WITH ${signupAttributionCTE()}\n SELECT channel, count() AS signups FROM cohort GROUP BY channel ORDER BY signups DESC`,\n );\n\n console.log(JSON.stringify(out, null, 2));\n}\n",[],[296,298],"a664cf13-14c0-4610-9ee8-fa68d3d96455","_probe.ts","605ab8da-6e73-11f1-9b2b-1607ee4eb77e",128,["D",1782157770727],"// Coverage probe #2: session-entry attribution coverage for signup sessions.\nconst KEY = Deno.env.get(\"POSTHOG_API_KEY\");\nconst PROJECT = Deno.env.get(\"POSTHOG_PROJECT_ID\");\nconst HOST = \"https://us.posthog.com\";\n\nasync function q(hogql: string) {\n const res = await fetch(`${HOST}/api/projects/${PROJECT}/query/`, {\n method: \"POST\",\n headers: { \"Authorization\": `Bearer ${KEY}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ query: { kind: \"HogQLQuery\", query: hogql } }),\n });\n const j = await res.json();\n if (j.error || j.detail) return { error: j.error || j.detail };\n return { results: j.results, columns: j.columns };\n}\n\n{\n const out: Record<string, unknown> = {};\n\n // For each signup's session_id, pull the session-entry attribution from the\n // session's pageviews (any pageview in that session carries $session_entry_*).\n // Coverage of click ids / utm by channel signal.\n out.coverage = await q(\n `WITH signups AS (\n SELECT DISTINCT JSONExtractString(properties,'$session_id') AS sid\n FROM events\n WHERE event='user_signed_up' AND timestamp>='2026-01-01'\n AND JSONExtractString(properties,'is_demo')!='true'\n AND JSONExtractString(properties,'$session_id')!=''\n ),\n sess AS (\n SELECT\n JSONExtractString(properties,'$session_id') AS sid,\n argMax(JSONExtractString(properties,'$session_entry_gclid'),timestamp) AS gclid,\n argMax(JSONExtractString(properties,'$session_entry_gbraid'),timestamp) AS gbraid,\n argMax(JSONExtractString(properties,'$session_entry_msclkid'),timestamp) AS msclkid,\n argMax(JSONExtractString(properties,'$session_entry_fbclid'),timestamp) AS fbclid,\n argMax(lower(JSONExtractString(properties,'$session_entry_utm_source')),timestamp) AS utm_source,\n argMax(lower(JSONExtractString(properties,'$session_entry_utm_medium')),timestamp) AS utm_medium,\n argMax(JSONExtractString(properties,'$session_entry_referring_domain'),timestamp) AS refdom\n FROM events\n WHERE event='$pageview' AND timestamp>='2025-12-01'\n AND JSONExtractString(properties,'$session_id') IN (SELECT sid FROM signups)\n GROUP BY sid\n )\n SELECT\n count() AS sessions,\n countIf(gclid!='' OR gbraid!='') AS has_google_click,\n countIf(msclkid!='') AS has_bing_click,\n countIf(fbclid!='') AS has_fbclid,\n countIf(utm_source!='') AS has_utm_source,\n countIf(utm_medium!='') AS has_utm_medium,\n countIf(gclid='' AND gbraid='' AND msclkid='' AND fbclid='' AND utm_source='') AS no_signal\n FROM sess`,\n );\n\n // What utm_source/medium combos appear in session entry (the real distribution)\n out.entrySources = await q(\n `WITH signups AS (\n SELECT DISTINCT JSONExtractString(properties,'$session_id') AS sid\n FROM events WHERE event='user_signed_up' AND timestamp>='2026-01-01'\n AND JSONExtractString(properties,'is_demo')!='true'\n AND JSONExtractString(properties,'$session_id')!=''\n )\n SELECT\n lower(JSONExtractString(properties,'$session_entry_utm_source')) AS src,\n lower(JSONExtractString(properties,'$session_entry_utm_medium')) AS med,\n JSONExtractString(properties,'$session_entry_referring_domain') AS refdom,\n count(DISTINCT JSONExtractString(properties,'$session_id')) AS sessions\n FROM events\n WHERE event='$pageview' AND timestamp>='2025-12-01'\n AND JSONExtractString(properties,'$session_id') IN (SELECT sid FROM signups)\n GROUP BY src, med, refdom ORDER BY sessions DESC LIMIT 40`,\n );\n\n console.log(JSON.stringify(out, null, 2));\n}\n",[],[296,306],"c072acde-10d4-46b8-82ca-563116aa2eca","_organic.ts","497e0e86-6e7e-11f1-a3c5-1607ee4eb77e",["D",1782162410299],"import { signupAttributionCTE } from \"./queries.ts\";\n\nconst KEY = Deno.env.get(\"POSTHOG_API_KEY\");\nconst PROJECT = Deno.env.get(\"POSTHOG_PROJECT_ID\");\nconst HOST = \"https://us.posthog.com\";\n\nasync function q(hogql: string) {\n const res = await fetch(`${HOST}/api/projects/${PROJECT}/query/`, {\n method: \"POST\",\n headers: { \"Authorization\": `Bearer ${KEY}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ query: { kind: \"HogQLQuery\", query: hogql } }),\n });\n const j = await res.json();\n if (j.error || j.detail) return { error: j.error || j.detail };\n return { results: j.results, columns: j.columns };\n}\n\n// Re-derive the per-signup attribution but expose the underlying session-entry\n// referrer/search-engine/utm so we can see WHAT \"Organic\" is actually made of.\nconst sql = `\nWITH\nsignups_raw AS (\n SELECT distinct_id, person_id, timestamp AS signup_ts,\n JSONExtractString(properties,'$session_id') AS sid\n FROM events\n WHERE event='user_signed_up' AND timestamp >= '2026-01-01'\n AND JSONExtractString(properties,'is_demo') != 'true'\n),\nsignups AS (\n SELECT person_id, distinct_id, signup_ts, sid\n FROM signups_raw ORDER BY person_id, signup_ts ASC LIMIT 1 BY person_id\n),\nsess AS (\n SELECT JSONExtractString(properties,'$session_id') AS sid,\n argMax(JSONExtractString(properties,'$session_entry_gclid'),timestamp) AS gclid,\n argMax(JSONExtractString(properties,'$session_entry_gbraid'),timestamp) AS gbraid,\n argMax(JSONExtractString(properties,'$session_entry_msclkid'),timestamp) AS msclkid,\n argMax(JSONExtractString(properties,'$session_entry_fbclid'),timestamp) AS fbclid,\n argMax(lower(JSONExtractString(properties,'$session_entry_utm_source')),timestamp) AS utm_source,\n argMax(lower(JSONExtractString(properties,'$session_entry_utm_medium')),timestamp) AS utm_medium,\n argMax(JSONExtractString(properties,'$session_entry_referring_domain'),timestamp) AS refdom,\n argMax(JSONExtractString(properties,'$session_entry_search_engine'),timestamp) AS search_engine\n FROM events WHERE event='$pageview' AND timestamp >= '2025-12-01'\n GROUP BY sid\n),\njoined AS (\n SELECT s.person_id AS person_id,\n (s.sid!='' AND e.sid!='') AS has_session,\n coalesce(e.gclid,'') AS gclid, coalesce(e.gbraid,'') AS gbraid,\n coalesce(e.msclkid,'') AS msclkid, coalesce(e.fbclid,'') AS fbclid,\n coalesce(e.utm_source,'') AS utm_source, coalesce(e.utm_medium,'') AS utm_medium,\n coalesce(e.refdom,'') AS refdom, coalesce(e.search_engine,'') AS search_engine\n FROM signups s LEFT JOIN sess e ON s.sid = e.sid\n),\n-- only the rows that fall through to Organic (no paid click id, no paid utm)\norganic AS (\n SELECT * FROM joined\n WHERE NOT (gclid!='' OR gbraid!='' OR (utm_source='google' AND utm_medium IN ('cpc','ppc','paid','paid-search')))\n AND NOT (msclkid!='' OR (utm_source='bing' AND utm_medium IN ('cpc','ppc','paid','paid-search')))\n AND NOT (utm_source IN ('facebook','fb','instagram','ig','meta','an') AND utm_medium IN ('cpc','ppc','paid','paid-search'))\n AND has_session\n)\nSELECT\n multiIf(\n refdom='$direct' AND search_engine='' AND fbclid='', 'direct (no referrer)',\n search_engine!='' OR refdom IN ('www.google.com','duckduckgo.com','search.yahoo.com','www.bing.com','search.brave.com'), 'organic search referrer',\n fbclid!='', 'fbclid-only (bare, not counted Meta)',\n refdom!='' AND refdom!='$direct', 'other referrer',\n 'unclassified') AS organic_kind,\n count() AS signups,\n topK(6)(refdom) AS sample_refdoms\nFROM organic GROUP BY organic_kind ORDER BY signups DESC`;\n\nconst r = await q(sql);\nconsole.log(JSON.stringify(r, null, 2));\n",[],[296,314],"7561a77a-58cd-47b2-9b31-ab677ec63101",126,["D",1782157724190],"directory",[182,183,184,185],[296],["D",1781823259454],["D",1789591905500],{"_11":12,"_128":68},{"_11":12,"_123":124,"_67":68,"_30":66,"_125":126,"_127":24},{"_38":110,"_13":16,"_32":35,"_111":70,"_112":113,"_114":115,"_116":75,"_117":118,"_119":120,"_121":14,"_122":12},"ctx",{"_52":-5,"_149":364,"_365":366,"_367":368,"_369":24,"_370":24,"_371":24,"_372":84,"_373":-5,"_374":-7,"_375":-7,"_376":26,"_377":24,"_378":24,"_379":-5,"_380":24,"_381":24,"_382":24,"_383":-5},"ENV",{"_335":336,"_337":338,"_339":16,"_340":341,"_342":343,"_344":345,"_346":347,"_348":349,"_350":351,"_352":353,"_354":355,"_356":357,"_358":359,"_360":361,"_362":363},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5a709144666c9e69e88140f015c586412f0fd8d3","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"] </article></body></html>

History · login.html