📈 server: track whatsapp chat links

[mainqueg]

Summary by CodeRabbit

• New Features

  • WhatsApp chat links now include tracking parameters for welcome, help, support, and account-creation links.

• Bug Fixes

  • Updated chat-related test configuration to use the correct Anthropic API key variable.

• Security

  • Updated dependency version constraints to address security issues.
  • Added an audit exception for a known advisory.

[changeset-bot]

🦋 Changeset detected

Latest commit: d07eca3

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@exactly/server	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[coderabbitai]

Warning

Review limit reached

Next included review available in 44 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Team

Run ID: 5a61999c-6631-424c-acf0-c90d945f0cb7

📥 Commits

Reviewing files that changed from the base of the PR and between 4b6db56 and d07eca3.

📒 Files selected for processing (1)

• cspell.json

Walkthrough

The WhatsApp chat worker now adds UTM parameters to help, support, and account-creation links. Chat tests expect the updated URLs. Eval tests use a dedicated API key. Dependency overrides and an audit exception were added.

Changes

WhatsApp link tracking

Layer / File(s)	Summary
Add UTM parameters to chat links server/workers/chat/worker.ts	The worker adds shared UTM parameters to help-center, support, and account-creation URLs.
Update chat link tests and release metadata server/test/workers/chat.eval.ts, server/test/workers/chat.test.ts, .changeset/lucky-moons-tickle.md	Tests expect the UTM-tagged links. Eval tests read CHAT_ANTHROPIC_API_KEY. A patch changeset records the update.

Dependency audit configuration

Layer / File(s)	Summary
Update dependency constraints and audit configuration package.json, pnpm-workspace.yaml	The workspace adds dependency overrides and ignores GHSA-vcc3-ghjq-m6fr during audits.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk: 🟡 Moderate · up to 4b6db

This PR adds tracking parameters to WhatsApp links but also disables workspace-wide auditing for a known denial-of-service advisory. Because the affected dependency’s production reachability is unresolved, merge requires explicit owner acceptance or remediation of the audit exception.

🚥 Pre-merge checks | ✅ 4

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: adding tracking to WhatsApp chat links in the server.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch utm

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch utm

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 85efd36759

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[coderabbitai]

Actionable comments posted: 1

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Team

Run ID: d8029b5e-0412-4fc2-8817-838dacc5049b

📥 Commits

Reviewing files that changed from the base of the PR and between f76c1f1 and 4b6db56.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (6)

• .changeset/lucky-moons-tickle.md
• package.json
• pnpm-workspace.yaml
• server/test/workers/chat.eval.ts
• server/test/workers/chat.test.ts
• server/workers/chat/worker.ts

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.05%. Comparing base (f76c1f1) to head (d07eca3).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1282      +/-   ##
==========================================
+ Coverage   72.51%   73.05%   +0.53%     
==========================================
  Files         275      276       +1     
  Lines       13254    13259       +5     
  Branches     4610     4613       +3     
==========================================
+ Hits         9611     9686      +75     
+ Misses       3306     3236      -70     
  Partials      337      337              

Flag	Coverage Δ
e2e	73.04% <ø> (+0.53%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.