[hudsonaikins]

Summary

ProfitCtl's deployed homepage and documentation had no OpenPanel tracking. This adds the official OpenPanel script to their shared layout, using only a public write-client ID. It records page views and outgoing link clicks on profitctl.com and www.profitctl.com, skips local and preview domains, and respects Do Not Track and Global Privacy Control.

The user approved production deployment. This exact candidate is already live as Cloudflare deployment 0f8589ff-b19e-4542-81c8-518679a4117a; an authorized test page view returned HTTP 200 and was found in the ProfitCtl project's stored OpenPanel events. Merging preserves the deployed change in the main branch.

Validation

• go test ./... and the required exact-head product validation gate passed.
• Relevant CLI workflow checks passed through the repository product gate.
• Website build, typecheck, and analytics behavior checks passed.
• Browser verification covered both pages, outgoing clicks, the www domain, preview/local exclusion, privacy signals, and provider failure. Test traffic was intercepted during local validation.
• Built output was checked for private credentials; only the public website client ID is included.
• Production PUBLIC_OPENPANEL_CLIENT_ID was configured and read back; existing production variables and preview settings were preserved.

Validated head: ed1b1356b1bea3767da5495498f98a2df41bc242. Validation used no paid model calls. Live verification sent one authorized page-view event.

Review Readiness

• Codex review completed; no actionable findings remain.
• All six GitHub checks passed on the PR head: website, Go, installation smoke, security, dead code, and product validation.
• AgentShift: no linked story was found in the current project backlog or roadmap. This PR records the user-requested change and its validation.
• The user explicitly approved deployment and requested that the code be merged.

Release Impact

• No CLI installation, release packaging, simulation, comparison, calibration, or covenant-output changes.
• Website analytics only; no SDK package dependency or private credentials added.

Notes

The production client ID is stored in Doppler openpanel/prd as OPENPANEL_WEBSITE_CLIENT_ID. MCP reporting credentials remain separate and are never included in browser output. Future IntelIP website tracking remains outside this change.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-14T23:45:50.485501Z	ed1b135	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.