[harlan-zw]

Stacked on #240.

❓ Type of change

• ✨ New feature

📚 Description

#240 dropped weekly_click_events because every row named a reader. That also removed the one number the ROADMAP Loop 2 evidence bar depends on: digest click-throughs. This brings the number back with nothing that names a person.

Email links go back through a redirect, /api/e/{weekly|digest}. Every recipient of an issue gets identical links. The redirect adds one to a (day, campaign, issue, placement, path) counter in migration 0120 and stores nothing else. The admin weekly report shows clicks, clicks per accepted email, and share clicks again. The daily health summary gains weekly and digest click totals.

Every placement is counted now, including the GitHub links. Liked and trending rows point at SKILL.md on GitHub, which is where a reader judges a change, and those clicks were the evidence bar's biggest gap. The link carries g, a path on GitHub, and the route puts the constant github.com origin back. No request supplies a host, so the redirect cannot be steered off GitHub: that is the same reason the same-site form takes a path and never a URL. The counter stores gh:/owner/repo, so a new commit sha does not start a new row and weeks stay comparable.

flowchart LR
  S["Weekly / digest send"] -->|"rewrite links"| L["/api/e/{campaign}?p=&i=&(to|g)="]
  R["Reader clicks"] --> L
  L -->|"+1 on (day, campaign, issue, placement, path)"| D["email_click_counts"]
  L -->|"302"| P1["skilld.dev page"]
  L -->|"302, origin is a constant"| P2["github.com/owner/repo/blob/..."]
  D --> A["Admin weekly report"]
  D --> H["Daily health summary"]

Loading

Things a reviewer should weigh:

• The counter is per UTC day, so the health summary sums whole days from the window start rather than an exact 24 hours.
• No retention. The purge job landed in chore(privacy): keep less personal data #241. email_click_counts could join it at 180 days; it names no account, so nothing forces that.
• The endpoint is public, so anyone can inflate counts or add rows. Paths are capped at 512 characters. There is no rate limiting.
• Old links from delivered emails (?p=&k=&w=&u=) still redirect and are not counted. The u value is ignored.
• Plain text stays uncounted. Those clients show the raw URL, and a bare skilld.dev link reads better there than a redirect.

🤖 AI disclosure: Harlan Agent Kit modified this description. My AI open-source policy.

[harlan-github-agent]

🤖 MERGED

Harlan Agent Kit posted this automated review. It is not Harlan's personal review or approval. AI open source policy. Last updated: 2026-09-22 08:14 UTC.

GitHub merged this pull request.

No material findings were recorded.

Review completed. No material findings.