@hanzo/event 0.3.13 → 0.3.14

package/dist/index.cjs

@@ -286,7 +286,7 @@ function uuidv7Time(id) {
 }
 
 // src/version.ts
-var VERSION = "0.3.13";
+var VERSION = "0.3.14";
 
 // src/sentry.ts
 var MAX_FRAMES = 50;
@@ -487,6 +487,8 @@ var KEY = {
   cohort: "hz_cohort"
 };
 var SESSION_TTL_MS = 30 * 60 * 1e3;
+var ANON_DOMAIN = "hanzo.ai";
+var ANON_MAX_AGE_S = 2 * 365 * 24 * 60 * 60;
 function ls() {
   try {
     if (typeof window === "undefined" || !window.localStorage) return void 0;
@@ -495,15 +497,69 @@ function ls() {
     return void 0;
   }
 }
+function jar() {
+  try {
+    if (typeof document === "undefined" || typeof document.cookie !== "string") return void 0;
+    return document;
+  } catch {
+    return void 0;
+  }
+}
+function getCookie(name) {
+  const d = jar();
+  if (!d) return void 0;
+  for (const part of d.cookie.split(";")) {
+    const eq = part.indexOf("=");
+    if (eq < 0 || part.slice(0, eq).trim() !== name) continue;
+    const v = part.slice(eq + 1).trim();
+    if (!v) continue;
+    try {
+      return decodeURIComponent(v);
+    } catch {
+      return v;
+    }
+  }
+  return void 0;
+}
+function setCookie(name, value) {
+  const d = jar();
+  if (!d) return;
+  let host = "";
+  let secure = false;
+  try {
+    if (typeof window !== "undefined" && window.location) {
+      host = window.location.hostname || "";
+      secure = window.location.protocol === "https:";
+    }
+  } catch {
+  }
+  const attrs = [
+    // encodeURIComponent leaves a UUID byte-identical while making any value that
+    // is not one unable to forge a `;` and inject an attribute.
+    `${name}=${encodeURIComponent(value)}`,
+    "Path=/",
+    `Max-Age=${ANON_MAX_AGE_S}`,
+    "SameSite=Lax"
+  ];
+  if (host === ANON_DOMAIN || host.endsWith(`.${ANON_DOMAIN}`)) attrs.push(`Domain=${ANON_DOMAIN}`);
+  if (secure) attrs.push("Secure");
+  try {
+    d.cookie = attrs.join("; ");
+  } catch {
+  }
+}
+var memAnon;
 function anonId() {
+  if (typeof window === "undefined") return void 0;
   const s2 = ls();
-  if (!s2) return void 0;
-  let v = s2.getItem(KEY.anon);
-  if (!v) {
-    v = uuidv7();
-    s2.setItem(KEY.anon, v);
+  const id = getCookie(KEY.anon) || s2?.getItem(KEY.anon) || memAnon || uuidv7();
+  memAnon = id;
+  setCookie(KEY.anon, id);
+  try {
+    if (s2 && s2.getItem(KEY.anon) !== id) s2.setItem(KEY.anon, id);
+  } catch {
   }
-  return v;
+  return id;
 }
 function sessionId(now = Date.now()) {
   const s2 = ls();