Revert "blog analytics"

This reverts commit d460d45.

Author: Jayanaka-98

main.jac

@@ -915,111 +915,6 @@ node PreviewDoc {
 }
 
 
-node PostStat {
-    # One reading-analytics bucket per (slug, day), hung off the public shared
-    # root and granted WritePerm so anonymous readers (who run ON root.shared)
-    # AND signed-in readers (who run on their own root but address the shared
-    # node) can both increment it. Concurrent first-views can race and create
-    # duplicate buckets for the same (slug, day); that's harmless — GetAnalytics
-    # sums across every bucket, so duplicates just add up. No per-reader rows and
-    # no PII: `visitors` holds short one-way hashes of an anonymous client id.
-    has slug: str = "";
-    has day: str = "";                          # "YYYY-MM-DD" (UTC)
-    has views: int = 0;                         # total opens (every mount += 1)
-    has visitors: list = [];                    # hashed anon visitor ids (unique opens)
-    has dwell_ms_sum: float = 0.0;              # summed active reading time
-    has dwell_samples: int = 0;                 # number of engagement flushes (one per visit)
-    has scroll_pct_sum: float = 0.0;            # summed deepest-scroll % (for a true average)
-    has scroll_samples: int = 0;                # number of scroll samples
-    has scroll_buckets: list = [0, 0, 0, 0];    # [0-25), [25-50), [50-75), [75-100] depth-reached counts
-}
-
-
-node LinkClick {
-    # Outbound/in-article link clicks, one bucket per (slug, href, day) on the
-    # shared root (same race-tolerant, no-PII model as PostStat). GetAnalytics
-    # sums across days into per-(slug, href) totals.
-    has slug: str = "";
-    has href: str = "";
-    has day: str = "";
-    has clicks: int = 0;
-}
-
-
-def:priv today_utc() -> str {
-    # Date bucket key in UTC so all deployments agree regardless of server TZ.
-    t = time.gmtime();
-    return f"{t.tm_year:04d}-{t.tm_mon:02d}-{t.tm_mday:02d}";
-}
-
-
-def:priv hash_visitor(v: str) -> str {
-    # One-way, truncated hash of the anonymous client-side visitor id. We never
-    # store the raw id, so this can't be reversed to anything identifying.
-    if not v {
-        return "";
-    }
-    return hashlib.sha256(v.encode("utf-8")).hexdigest()[:16];
-}
-
-
-def:priv scroll_bucket(p: int) -> int {
-    if p >= 75 {
-        return 3;
-    }
-    if p >= 50 {
-        return 2;
-    }
-    if p >= 25 {
-        return 1;
-    }
-    return 0;
-}
-
-
-def:priv match_day_stat(nodes: list, slug: str, day: str) -> any {
-    for n in nodes {
-        if n.slug == slug and n.day == day {
-            return n;
-        }
-    }
-    return None;
-}
-
-
-def:priv match_link_click(nodes: list, slug: str, href: str, day: str) -> any {
-    for n in nodes {
-        if n.slug == slug and n.href == href and n.day == day {
-            return n;
-        }
-    }
-    return None;
-}
-
-
-def:priv median_scroll(buckets: list) -> int {
-    # Bucketed median: walk the cumulative distribution to the halfway point and
-    # report that bucket's midpoint. Coarse by design (we only keep 4 buckets).
-    total: int = 0;
-    for b in buckets {
-        total += int(b);
-    }
-    if total == 0 {
-        return 0;
-    }
-    midpoints = [12, 37, 62, 88];
-    half = total / 2.0;
-    cum: int = 0;
-    for i in range(4) {
-        cum += int(buckets[i]);
-        if cum >= half {
-            return midpoints[i];
-        }
-    }
-    return midpoints[3];
-}
-
-
 def:priv env_str(name: str, fallback: str = "") -> str {
     val = os.environ.get(name, fallback);
     if val is None {
@@ -1738,243 +1633,6 @@ walker:pub GetPreview {
 }
 
 
-# ── Reading analytics ────────────────────────────────────────────────────────
-# Two public collectors (RecordView / RecordEngagement) write anonymous counters
-# to per-(slug, day) PostStat buckets on the shared root; one private reader
-# (GetAnalytics) rolls them up for the reviewer-only dashboard. All three address
-# root.shared explicitly so anonymous and signed-in readers land in the SAME
-# store (a :pub walker runs on root.shared for anon callers but on the caller's
-# own root for signed-in ones — addressing .shared directly keeps data unified).
-
-walker:pub RecordView {
-    # Fired once per post page mount. Bumps the total open count and records the
-    # anonymous visitor id (hashed) toward the unique-opens tally.
-    has slug: str = "";
-    has visitor: str = "";
-
-    can rec with Root entry {
-        if not self.slug {
-            report {"ok": False};
-            return;
-        }
-        try {
-            shared_root = root.shared;  # jac:ignore[E1030] runtime attr, no static stub
-            day = today_utc();
-            vh = hash_visitor(self.visitor);
-            stat = match_day_stat([shared_root -->][?:PostStat], self.slug, day);
-            if stat is None {
-                made = shared_root ++> PostStat(
-                    slug=self.slug, day=day, views=1,
-                    visitors=([vh] if vh else []),
-                );
-                grant(made[0], level=WritePerm);
-            } else {
-                stat.views += 1;
-                if vh and (vh not in stat.visitors) {
-                    # Reassign (not in-place append) so jac-scale persists the change.
-                    stat.visitors = stat.visitors + [vh];
-                }
-            }
-            report {"ok": True};
-        } except Exception {
-            report {"ok": False};
-        }
-    }
-}
-
-
-walker:pub RecordEngagement {
-    # Fired when a reader leaves a post (tab close / SPA navigation). Records one
-    # reading sample: active time on the page and the deepest scroll % reached.
-    has slug: str = "";
-    has dwell_ms: float = 0.0;
-    has scroll_pct: int = 0;
-
-    can rec with Root entry {
-        if not self.slug {
-            report {"ok": False};
-            return;
-        }
-        # Defense-in-depth against the same non-read samples the client filters
-        # (sub-second bounces, React Strict-Mode phantom unmounts): ignore a
-        # sample with negligible dwell AND no real scroll so it can't pollute
-        # the scroll-depth buckets.
-        if (self.dwell_ms < 1000) and (int(self.scroll_pct) < 25) {
-            report {"ok": True, "skipped": True};
-            return;
-        }
-        try {
-            shared_root = root.shared;  # jac:ignore[E1030] runtime attr, no static stub
-            day = today_utc();
-            stat = match_day_stat([shared_root -->][?:PostStat], self.slug, day);
-            if stat is None {
-                made = shared_root ++> PostStat(slug=self.slug, day=day);
-                grant(made[0], level=WritePerm);
-                stat = made[0];
-            }
-            if self.dwell_ms > 0 {
-                stat.dwell_ms_sum += self.dwell_ms;
-                stat.dwell_samples += 1;
-            }
-            pct = int(self.scroll_pct);
-            stat.scroll_pct_sum += float(pct);
-            stat.scroll_samples += 1;
-            b = scroll_bucket(pct);
-            buckets = stat.scroll_buckets;
-            buckets[b] += 1;
-            stat.scroll_buckets = buckets;  # reassign so the mutation persists
-            report {"ok": True};
-        } except Exception {
-            report {"ok": False};
-        }
-    }
-}
-
-
-walker:pub RecordLinkClick {
-    # Fired when a reader clicks a link inside the article body.
-    has slug: str = "";
-    has href: str = "";
-
-    can rec with Root entry {
-        if not self.slug or not self.href {
-            report {"ok": False};
-            return;
-        }
-        try {
-            shared_root = root.shared;  # jac:ignore[E1030] runtime attr, no static stub
-            day = today_utc();
-            lc = match_link_click([shared_root -->][?:LinkClick], self.slug, self.href, day);
-            if lc is None {
-                made = shared_root ++> LinkClick(slug=self.slug, href=self.href, day=day, clicks=1);
-                grant(made[0], level=WritePerm);
-            } else {
-                lc.clicks += 1;
-            }
-            report {"ok": True};
-        } except Exception {
-            report {"ok": False};
-        }
-    }
-}
-
-
-walker:priv GetAnalytics {
-    # Reviewer-only rollup of every PostStat bucket. Re-verifies repo write
-    # access server-side (the client gate is UX only); rolls daily buckets up
-    # into per-post totals plus a per-day views series for trend charts.
-    has gh_enc: str = "";
-
-    can get with Root entry {
-        gh_token = decrypt_gh(self.gh_enc);
-        if not has_write_access(gh_token) {
-            report {"ok": False, "error": "Not authorized."};
-            return;
-        }
-        shared_root = root.shared;  # jac:ignore[E1030] runtime attr, no static stub
-        stats = [shared_root -->][?:PostStat];
-        by_slug = {};
-        for n in stats {
-            s = n.slug;
-            if s not in by_slug {
-                by_slug[s] = {
-                    "slug": s, "views": 0, "visitors": [],
-                    "dwell_ms_sum": 0.0, "dwell_samples": 0,
-                    "scroll_pct_sum": 0.0, "scroll_samples": 0,
-                    "scroll_buckets": [0, 0, 0, 0], "days": {},
-                };
-            }
-            agg = by_slug[s];
-            agg["views"] += n.views;
-            for vh in n.visitors {
-                if vh not in agg["visitors"] {
-                    agg["visitors"].append(vh);
-                }
-            }
-            agg["dwell_ms_sum"] += float(n.dwell_ms_sum);
-            agg["dwell_samples"] += int(n.dwell_samples);
-            agg["scroll_pct_sum"] += float(n.scroll_pct_sum);
-            agg["scroll_samples"] += int(n.scroll_samples);
-            for i in range(4) {
-                agg["scroll_buckets"][i] += int(n.scroll_buckets[i]);
-            }
-            agg["days"][n.day] = int(agg["days"].get(n.day, 0)) + int(n.views);
-        }
-        # Roll link clicks up into per-(slug, href) totals.
-        links_by_slug = {};
-        for lc in [shared_root -->][?:LinkClick] {
-            s = lc.slug;
-            if s not in links_by_slug {
-                links_by_slug[s] = {};
-            }
-            m = links_by_slug[s];
-            m[lc.href] = int(m.get(lc.href, 0)) + int(lc.clicks);
-        }
-        out = [];
-        totals = {"views": 0, "uniques": 0};
-        for s in by_slug {
-            agg = by_slug[s];
-            uniques = len(agg["visitors"]);
-            avg_dwell_ms = (agg["dwell_ms_sum"] / agg["dwell_samples"]) if agg["dwell_samples"] else 0.0;
-            avg_scroll = (agg["scroll_pct_sum"] / agg["scroll_samples"]) if agg["scroll_samples"] else 0.0;
-            totals["views"] += int(agg["views"]);
-            totals["uniques"] += int(uniques);
-            post_links = [];
-            link_clicks = 0;
-            if s in links_by_slug {
-                for href in links_by_slug[s] {
-                    c = int(links_by_slug[s][href]);
-                    link_clicks += c;
-                    post_links.append({"href": href, "clicks": c});
-                }
-                post_links.sort(key=lambda r: dict -> int { return int(r["clicks"]); }, reverse=True);
-            }
-            out.append({
-                "slug": s,
-                "views": agg["views"],
-                "uniques": uniques,
-                "avg_read_sec": round(avg_dwell_ms / 1000.0, 1),
-                "samples": agg["dwell_samples"],
-                "scroll_buckets": agg["scroll_buckets"],
-                "avg_scroll": round(avg_scroll),
-                "median_scroll": median_scroll(agg["scroll_buckets"]),
-                "links": post_links,
-                "link_clicks": link_clicks,
-                "days": agg["days"],
-            });
-        }
-        out.sort(key=lambda r: dict -> int { return int(r["views"]); }, reverse=True);
-        report {"ok": True, "posts": out, "totals": totals};
-    }
-}
-
-
-walker:priv ResetAnalytics {
-    # Reviewer-only: wipe every reading-analytics bucket and start fresh. Useful
-    # after a measurement bug, or to clear test data on a dev deployment.
-    has gh_enc: str = "";
-
-    can clear with Root entry {
-        gh_token = decrypt_gh(self.gh_enc);
-        if not has_write_access(gh_token) {
-            report {"ok": False, "error": "Not authorized."};
-            return;
-        }
-        shared_root = root.shared;  # jac:ignore[E1030] runtime attr, no static stub
-        removed = 0;
-        for n in [shared_root -->][?:PostStat] {
-            del n;
-            removed += 1;
-        }
-        for lc in [shared_root -->][?:LinkClick] {
-            del lc;
-            removed += 1;
-        }
-        report {"ok": True, "removed": removed};
-    }
-}
-
-
 walker:pub GithubOAuthConfig {
     # Hands the browser the OAuth client id so it can build the authorize URL.
     can get with Root entry {