feat(analytics): build-time bake + telemetry depth (#336)

Bake PostHog + Sentry into the published Docker image (SNAPOTTER_ANALYTICS
build arg, codegen script). Delete entire consent system. Move event emission
to BullMQ worker. Add cross-tier identity stitching, Sentry performance
tracing on both tiers, frontend funnel events. Fix stateful regex bug.

86 files changed, 1593 insertions(+), 3747 deletions(-)

apps/api/src/routes/analytics.ts

@@ -1,86 +1,22 @@
+import { ANALYTICS_BAKED } from "@snapotter/shared";
 import { eq } from "drizzle-orm";
 import type { FastifyInstance } from "fastify";
-import { z } from "zod";
-import { env } from "../config.js";
 import { db, schema } from "../db/index.js";
-import { requireAuth } from "../plugins/auth.js";
-
-const analyticsConsentSchema = z.object({
-  enabled: z.boolean().optional(),
-  remindLater: z.boolean().optional(),
-});
 
 export async function analyticsRoutes(app: FastifyInstance): Promise<void> {
   app.get("/api/v1/config/analytics", async () => {
-    if (!env.ANALYTICS_ENABLED) {
-      return {
-        enabled: false,
-        posthogApiKey: "",
-        posthogHost: "",
-        sentryDsn: "",
-        sampleRate: 0,
-        instanceId: "",
-      };
-    }
-
     const [row] = await db
       .select()
       .from(schema.settings)
       .where(eq(schema.settings.key, "instance_id"));
 
     return {
-      enabled: true,
-      posthogApiKey: env.POSTHOG_API_KEY,
-      posthogHost: env.POSTHOG_HOST,
-      sentryDsn: env.SENTRY_DSN,
-      sampleRate: env.ANALYTICS_SAMPLE_RATE,
+      enabled: ANALYTICS_BAKED.enabled,
+      posthogApiKey: ANALYTICS_BAKED.posthogApiKey,
+      posthogHost: ANALYTICS_BAKED.posthogHost,
+      sentryDsn: ANALYTICS_BAKED.sentryDsn,
+      sampleRate: ANALYTICS_BAKED.sampleRate,
       instanceId: row?.value ?? "",
     };
   });
-
-  app.put(
-    "/api/v1/user/analytics",
-    { config: { rateLimit: { max: 300, timeWindow: "1 minute" } } },
-    async (request, reply) => {
-      const user = requireAuth(request, reply);
-      if (!user) return;
-
-      const parsed = analyticsConsentSchema.safeParse(request.body ?? {});
-      if (!parsed.success) {
-        return reply.status(400).send({
-          error: parsed.error.issues.map((i) => i.message).join("; "),
-          code: "VALIDATION_ERROR",
-        });
-      }
-      const body = parsed.data;
-
-      const now = new Date();
-
-      if (body.remindLater) {
-        const remindAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000);
-        await db
-          .update(schema.users)
-          .set({
-            analyticsEnabled: null,
-            analyticsConsentShownAt: now,
-            analyticsConsentRemindAt: remindAt,
-            updatedAt: now,
-          })
-          .where(eq(schema.users.id, user.id));
-        return reply.send({ ok: true, analyticsEnabled: null });
-      }
-
-      const enabled = body.enabled === true;
-      await db
-        .update(schema.users)
-        .set({
-          analyticsEnabled: enabled,
-          analyticsConsentShownAt: now,
-          analyticsConsentRemindAt: null,
-          updatedAt: now,
-        })
-        .where(eq(schema.users.id, user.id));
-      return reply.send({ ok: true, analyticsEnabled: enabled });
-    },
-  );
 }