@hanzo/event 0.3.13 → 0.3.15

package/dist/index.d.ts

@@ -6,7 +6,7 @@ declare function getFirstTouch(): Attribution | undefined;
 /** Read persisted cohort dimensions. */
 declare function getCohort(): Cohort | undefined;
 
-declare const VERSION = "0.3.13";
+declare const VERSION = "0.3.15";
 
 /**
  * parseDsn parses "https://<version>:<hmac>@<host>/v1/sentry/<projectId>" into its
@@ -60,13 +60,20 @@ declare function buildSentryEvent(input: BuildEventInput): SentryEvent;
  */
 declare function buildEnvelope(event: SentryEvent, dsn: Dsn, sentAt?: string): string;
 
+// Types for anon.js, which is hand-written ES5 rather than TypeScript because
+// hz.js and the door's hosted tag inline it VERBATIM and neither has a compiler.
+// The declarations are here so the bundled client still imports it typed.
+
+/** Mints a time-ordered UUIDv7 (RFC 9562 §5.7) for `now` in epoch milliseconds. */
+declare function hzUuidv7(now?: number): string
+
 /**
  * uuidv7 mints a time-ordered UUIDv7 for `now` (epoch milliseconds).
  *
  * Two ids minted in the same millisecond sort arbitrarily between themselves; ids
  * from different milliseconds sort by time, lexically and numerically alike.
  */
-declare function uuidv7(now?: number): string;
+
 /** The millisecond timestamp a v7 id was minted at — the inverse of uuidv7. */
 declare function uuidv7Time(id: string): number;
 
@@ -283,4 +290,4 @@ declare function hasAttribution(a: Attribution): boolean;
 /** isoWeek returns the ISO-8601 week label, e.g. "2026-W28". */
 declare function isoWeek(d: Date): string;
 
-export { Attribution, COHORTS, CaptureErrorOptions, Cohort, type CohortDef, Dsn, EVENTS, type ErrorIdentity, type EventName, FUNNELS, type FunnelDef, type FunnelId, type FunnelStep, GOALS, type GoalDef, PAGEVIEW, PRODUCTS, PRODUCT_DSN, type ProductId, SentryEvent, SentryFrame, VERSION, buildEnvelope, buildSentryEvent, deriveChannel, dsnForProduct, eventsOf, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, uuidv7, uuidv7Time };
+export { Attribution, COHORTS, CaptureErrorOptions, Cohort, type CohortDef, Dsn, EVENTS, type ErrorIdentity, type EventName, FUNNELS, type FunnelDef, type FunnelId, type FunnelStep, GOALS, type GoalDef, PAGEVIEW, PRODUCTS, PRODUCT_DSN, type ProductId, SentryEvent, SentryFrame, VERSION, buildEnvelope, buildSentryEvent, deriveChannel, dsnForProduct, eventsOf, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };

package/dist/index.mjs

@@ -257,34 +257,115 @@ function scrubText(s2, capturePII = false) {
   return s2;
 }
 
-// src/uid.ts
-var HEX = Array.from({ length: 256 }, (_, i) => (i + 256).toString(16).slice(1));
-function fill(b) {
-  const c = typeof crypto !== "undefined" ? crypto : void 0;
-  if (c && typeof c.getRandomValues === "function") {
-    c.getRandomValues(b);
-    return b;
-  }
-  for (let i = 0; i < b.length; i++) b[i] = Math.random() * 256 | 0;
-  return b;
-}
-function uuidv7(now = Date.now()) {
-  const b = fill(new Uint8Array(16));
-  let t = Math.floor(now);
-  for (let i = 5; i >= 0; i--) {
+// src/anon.js
+var HZ_ANON_KEY = "hz_anon_id";
+var HZ_ANON_LEGACY_KEY = "hz_id";
+var HZ_ANON_DOMAIN = "hanzo.ai";
+var HZ_ANON_MAX_AGE = 2 * 365 * 24 * 60 * 60;
+var hzAnonMemo;
+function hzUuidv7(now) {
+  var b = new Uint8Array(16);
+  var i;
+  var c = typeof crypto !== "undefined" ? crypto : void 0;
+  if (c && typeof c.getRandomValues === "function") c.getRandomValues(b);
+  else for (i = 0; i < 16; i++) b[i] = Math.random() * 256 | 0;
+  var t = Math.floor(now === void 0 ? Date.now() : now);
+  for (i = 5; i >= 0; i--) {
     b[i] = t % 256;
     t = Math.floor(t / 256);
   }
   b[6] = 112 | b[6] & 15;
   b[8] = 128 | b[8] & 63;
-  return HEX[b[0]] + HEX[b[1]] + HEX[b[2]] + HEX[b[3]] + "-" + HEX[b[4]] + HEX[b[5]] + "-" + HEX[b[6]] + HEX[b[7]] + "-" + HEX[b[8]] + HEX[b[9]] + "-" + HEX[b[10]] + HEX[b[11]] + HEX[b[12]] + HEX[b[13]] + HEX[b[14]] + HEX[b[15]];
+  var h = "";
+  for (i = 0; i < 16; i++) {
+    h += (b[i] + 256).toString(16).slice(1);
+    if (i === 3 || i === 5 || i === 7 || i === 9) h += "-";
+  }
+  return h;
 }
+function hzAnonJar() {
+  try {
+    if (typeof document === "undefined" || typeof document.cookie !== "string") return null;
+    return document;
+  } catch (e) {
+    return null;
+  }
+}
+function hzAnonStore() {
+  try {
+    if (typeof window === "undefined" || !window.localStorage) return null;
+    return window.localStorage;
+  } catch (e) {
+    return null;
+  }
+}
+function hzAnonItem(store, name) {
+  try {
+    return store && store.getItem(name) || "";
+  } catch (e) {
+    return "";
+  }
+}
+function hzAnonCookie(name) {
+  var d = hzAnonJar();
+  if (!d) return "";
+  var parts = d.cookie.split(";");
+  for (var i = 0; i < parts.length; i++) {
+    var eq = parts[i].indexOf("=");
+    if (eq < 0 || parts[i].slice(0, eq).trim() !== name) continue;
+    var v = parts[i].slice(eq + 1).trim();
+    if (!v) continue;
+    try {
+      return decodeURIComponent(v);
+    } catch (e) {
+      return v;
+    }
+  }
+  return "";
+}
+function hzAnonWrite(name, value) {
+  var d = hzAnonJar();
+  if (!d) return;
+  var host = "";
+  var secure = false;
+  try {
+    if (typeof window !== "undefined" && window.location) {
+      host = window.location.hostname || "";
+      secure = window.location.protocol === "https:";
+    }
+  } catch (e) {
+  }
+  var c = name + "=" + encodeURIComponent(value);
+  c += "; Path=/; Max-Age=" + HZ_ANON_MAX_AGE + "; SameSite=Lax";
+  if (("." + host).slice(-(HZ_ANON_DOMAIN.length + 1)) === "." + HZ_ANON_DOMAIN) {
+    c += "; Domain=" + HZ_ANON_DOMAIN;
+  }
+  if (secure) c += "; Secure";
+  try {
+    d.cookie = c;
+  } catch (e) {
+  }
+}
+function hzAnonId() {
+  if (typeof window === "undefined") return "";
+  var s2 = hzAnonStore();
+  var id = hzAnonCookie(HZ_ANON_KEY) || hzAnonItem(s2, HZ_ANON_KEY) || hzAnonItem(s2, HZ_ANON_LEGACY_KEY) || hzAnonMemo || hzUuidv7();
+  hzAnonMemo = id;
+  hzAnonWrite(HZ_ANON_KEY, id);
+  try {
+    if (s2 && s2.getItem(HZ_ANON_KEY) !== id) s2.setItem(HZ_ANON_KEY, id);
+  } catch (e) {
+  }
+  return id;
+}
+
+// src/uid.ts
 function uuidv7Time(id) {
   return parseInt(id.slice(0, 8) + id.slice(9, 13), 16);
 }
 
 // src/version.ts
-var VERSION = "0.3.13";
+var VERSION = "0.3.15";
 
 // src/sentry.ts
 var MAX_FRAMES = 50;
@@ -293,7 +374,7 @@ var MAX_LINE_LEN = 2048;
 var MAX_TAG_LEN = 1024;
 var MAX_TAGS = 50;
 function eventId() {
-  return uuidv7().replace(/-/g, "");
+  return hzUuidv7().replace(/-/g, "");
 }
 function byteLen(s2) {
   if (typeof TextEncoder !== "undefined") return new TextEncoder().encode(s2).length;
@@ -479,7 +560,6 @@ ${payload}
 
 // src/storage.ts
 var KEY = {
-  anon: "hz_anon_id",
   session: "hz_session",
   firstTouch: "hz_first_touch",
   cohort: "hz_cohort"
@@ -494,14 +574,7 @@ function ls() {
   }
 }
 function anonId() {
-  const s2 = ls();
-  if (!s2) return void 0;
-  let v = s2.getItem(KEY.anon);
-  if (!v) {
-    v = uuidv7();
-    s2.setItem(KEY.anon, v);
-  }
-  return v;
+  return hzAnonId() || void 0;
 }
 function sessionId(now = Date.now()) {
   const s2 = ls();
@@ -513,7 +586,7 @@ function sessionId(now = Date.now()) {
     state = null;
   }
   if (!state || now - state.last > SESSION_TTL_MS) {
-    state = { id: uuidv7(now), last: now };
+    state = { id: hzUuidv7(now), last: now };
   } else {
     state.last = now;
   }
@@ -849,7 +922,7 @@ var Analytics = class {
   build(kind, event, extra) {
     const anon = anonId();
     const wire = {
-      messageId: uuidv7(),
+      messageId: hzUuidv7(),
       type: kind,
       event,
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
@@ -1045,7 +1118,28 @@ var COHORTS = {
   channel: { field: "channel", label: "Acquisition channel" },
   refCode: { field: "ref_code", label: "Referral code" }
 };
+/*! anon.js — THE anonymous-identity chain. ONE implementation, three distributions.
+ *
+ * One browser is ONE person on every Hanzo surface, whichever client a page
+ * happens to have loaded. There were three implementations writing TWO keys —
+ * `hz_anon_id` (the npm client, the hosted tag) and `hz_id` (hz.js) — so the same
+ * visitor was several people depending on which snippet the surface shipped.
+ *
+ * The three call sites:
+ *   1. src/storage.ts        — the bundled npm client; IMPORTS this file.
+ *   2. hz.js                 — the no-build script tag; INLINES the marked region.
+ *   3. hanzoai/cloud apps/analytics/tag.js — the tag the door hosts at
+ *      /v1/event.js; vendors this file and its tag.go serves the marked region
+ *      with the tag as one asset, so the door holds no second copy either.
+ *
+ * (2) and (3) have no bundler and cannot import anything, which is why the chain
+ * lives in a file that is plain ES5 rather than in a .ts: the region between the
+ * BEGIN and END markers is COPIED VERBATIM, and src/anon.test.ts fails if hz.js's
+ * copy is so much as a byte different. Keep the region ES5, dependency-free,
+ * `hz`-prefixed (it is spliced into other people's scopes) and unformatted — a
+ * reformat of one copy is a diff against the other.
+ */
 
-export { Analytics, COHORTS, EVENTS, FUNNELS, GOALS, PAGEVIEW, PRODUCTS, PRODUCT_DSN, VERSION, buildEnvelope, buildSentryEvent, createAnalytics, deriveChannel, dsnForProduct, eventsOf, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, uuidv7, uuidv7Time };
+export { Analytics, COHORTS, EVENTS, FUNNELS, GOALS, PAGEVIEW, PRODUCTS, PRODUCT_DSN, VERSION, buildEnvelope, buildSentryEvent, createAnalytics, deriveChannel, dsnForProduct, eventsOf, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map