@hanzo/event 0.3.18 → 0.3.20

package/dist/index.d.cts

@@ -1,12 +1,12 @@
-import { C as Cohort, A as Attribution, S as SentryEvent, D as Dsn, a as CaptureErrorOptions, b as SentryFrame } from './core-D4PaPlOB.cjs';
-export { c as Analytics, d as AnalyticsConfig, E as EventKind, e as Exception, f as SentryLevel, T as Transport, W as WireEvent, g as createAnalytics } from './core-D4PaPlOB.cjs';
+import { C as Cohort, A as Attribution, S as SentryEvent, D as Dsn, a as CaptureErrorOptions, b as SentryFrame, E as ExceptionEntry, c as SentryLevel, d as ExceptionProperties } from './core-CHLpJy51.cjs';
+export { e as Analytics, f as AnalyticsConfig, g as EventKind, h as Exception, i as ExceptionFrame, T as Transport, W as WireEvent, j as createAnalytics } from './core-CHLpJy51.cjs';
 
 /** Read the persisted first-touch attribution. */
 declare function getFirstTouch(): Attribution | undefined;
 /** Read persisted cohort dimensions. */
 declare function getCohort(): Cohort | undefined;
 
-declare const VERSION = "0.3.18";
+declare const VERSION = "0.3.20";
 
 /**
  * parseDsn parses "https://<version>:<hmac>@<host>/v1/sentry/<projectId>" into its
@@ -102,12 +102,19 @@ declare function uuidv7Time(id: string): number;
  * (POST /v1/sentry/projects with X-Org-Id), then add its `dsn` here keyed by the
  * product name the app passes to `createAnalytics`.
  */
-/** PRODUCT_DSN maps a `product` to the DSN its errors are submitted to. */
-declare const PRODUCT_DSN: Readonly<Record<string, string>>;
-/** dsnForProduct resolves the registered DSN for a product, or undefined when the
- *  product has no project yet — which leaves the error plane inert rather than
- *  guessing a destination and silently posting a surface's errors into the wrong
- *  project. */
+/** PRODUCT_PROJECT maps a `product` to its Sentry project id. The DSN's KEY is no
+ *  longer a per-project secret — it is the ONE org publishable key (below), so a
+ *  surface's errors ride the SAME key its events do. The id only names WHICH
+ *  project the errors group under, and cloud auto-provisions that project on first
+ *  keyed ingest, so a new id needs nothing minted. `site` lives in the `hanzo-ai`
+ *  project — an explicit map, because the projects predate this and do not derive
+ *  cleanly from the product name. */
+declare const PRODUCT_PROJECT: Readonly<Record<string, string>>;
+/** dsnForProduct builds the product's Sentry DSN — the ONE org publishable key at
+ *  its project's envelope endpoint — or undefined when the product has no project
+ *  yet, which leaves the error plane inert rather than posting into the wrong one.
+ *  Same key as the event stream: cloud resolves it to the org and attributes the
+ *  errors there. */
 declare function dsnForProduct(product: string | undefined): string | undefined;
 
 /** redactSecrets removes known secret shapes. Always applied. */
@@ -163,6 +170,59 @@ declare const EVENTS: {
 type EventName = (typeof EVENTS)[keyof typeof EVENTS];
 /** The reserved event name a pageview is stored under (server + read lens). */
 declare const PAGEVIEW = "$pageview";
+/** The reserved name every captured exception is emitted under. Error Tracking
+ *  reads exactly this name; an exception emitted under its own message instead
+ *  makes every distinct message a permanent entry in the event taxonomy. */
+declare const EXCEPTION = "$exception";
+
+/**
+ * digest is a stable 32-hex-char (128-bit) content hash, computed synchronously.
+ *
+ * Grouping keys are needed on the capture path, which is synchronous and may be
+ * running inside an unload handler — SubtleCrypto is async and unavailable on
+ * insecure origins, so it cannot be used here. This is FNV-1a run over four seeds
+ * and concatenated. It is a GROUPING key, never a security boundary: it is not
+ * collision-resistant against a chosen-input adversary, and nothing authorizes or
+ * authenticates on it. The product treats the value as opaque.
+ */
+declare function digest(s: string): string;
+/**
+ * exceptionEntry builds the single `$exception_list` entry for a throwable.
+ *
+ * One entry, not a chain: `Error.cause` chaining is a distinct fact with its own
+ * ordering rules, and emitting it wrongly is worse than not emitting it.
+ */
+declare function exceptionEntry(err: unknown, opts: {
+    handled: boolean;
+    id: string;
+}): ExceptionEntry;
+/**
+ * fingerprint is the issue grouping key.
+ *
+ * Keyed on exception type plus each in-app frame's function and source — the same
+ * pieces the server-side grouper records ("Exception Type", "Resolved function
+ * name", "Source file name"). Deliberately NOT the message: `Loading chunk 3324
+ * failed` and `Loading chunk 998 failed` are one bug, and grouping on message is
+ * precisely the mistake that made every distinct error string its own event name.
+ *
+ * Falls back to the type alone when no in-app frame survived, which keeps
+ * stackless errors (`Script error.`, cross-origin) in one issue instead of
+ * scattering them.
+ */
+declare function fingerprint(entry: ExceptionEntry): string;
+/**
+ * exceptionProperties builds the full `$exception_*` property bag for one captured
+ * throwable — everything Error Tracking reads off the event.
+ *
+ * The denormalized arrays are ordered like `frames`: last element is the throw
+ * site, which is the element the issue list indexes at -1 for its source/function
+ * columns.
+ */
+declare function exceptionProperties(err: unknown, opts: {
+    handled: boolean;
+    id: string;
+    level?: SentryLevel;
+}): ExceptionProperties;
 
 /** The emitting surfaces — the closed set of `AnalyticsConfig.product` values.
  *  `product` is on every event, so a funnel scopes by product instead of every
@@ -290,4 +350,4 @@ declare function hasAttribution(a: Attribution): boolean;
 /** isoWeek returns the ISO-8601 week label, e.g. "2026-W28". */
 declare function isoWeek(d: Date): string;
 
-export { Attribution, COHORTS, CaptureErrorOptions, Cohort, type CohortDef, Dsn, EVENTS, type ErrorIdentity, type EventName, FUNNELS, type FunnelDef, type FunnelId, type FunnelStep, GOALS, type GoalDef, PAGEVIEW, PRODUCTS, PRODUCT_DSN, type ProductId, SentryEvent, SentryFrame, VERSION, buildEnvelope, buildSentryEvent, deriveChannel, dsnForProduct, eventsOf, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };
+export { Attribution, COHORTS, CaptureErrorOptions, Cohort, type CohortDef, Dsn, EVENTS, EXCEPTION, type ErrorIdentity, type EventName, ExceptionEntry, ExceptionProperties, FUNNELS, type FunnelDef, type FunnelId, type FunnelStep, GOALS, type GoalDef, PAGEVIEW, PRODUCTS, PRODUCT_PROJECT, type ProductId, SentryEvent, SentryFrame, SentryLevel, VERSION, buildEnvelope, buildSentryEvent, deriveChannel, digest, dsnForProduct, eventsOf, exceptionEntry, exceptionProperties, fingerprint, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };

package/dist/index.d.ts

@@ -1,12 +1,12 @@
-import { C as Cohort, A as Attribution, S as SentryEvent, D as Dsn, a as CaptureErrorOptions, b as SentryFrame } from './core-D4PaPlOB.js';
-export { c as Analytics, d as AnalyticsConfig, E as EventKind, e as Exception, f as SentryLevel, T as Transport, W as WireEvent, g as createAnalytics } from './core-D4PaPlOB.js';
+import { C as Cohort, A as Attribution, S as SentryEvent, D as Dsn, a as CaptureErrorOptions, b as SentryFrame, E as ExceptionEntry, c as SentryLevel, d as ExceptionProperties } from './core-CHLpJy51.js';
+export { e as Analytics, f as AnalyticsConfig, g as EventKind, h as Exception, i as ExceptionFrame, T as Transport, W as WireEvent, j as createAnalytics } from './core-CHLpJy51.js';
 
 /** Read the persisted first-touch attribution. */
 declare function getFirstTouch(): Attribution | undefined;
 /** Read persisted cohort dimensions. */
 declare function getCohort(): Cohort | undefined;
 
-declare const VERSION = "0.3.18";
+declare const VERSION = "0.3.20";
 
 /**
  * parseDsn parses "https://<version>:<hmac>@<host>/v1/sentry/<projectId>" into its
@@ -102,12 +102,19 @@ declare function uuidv7Time(id: string): number;
  * (POST /v1/sentry/projects with X-Org-Id), then add its `dsn` here keyed by the
  * product name the app passes to `createAnalytics`.
  */
-/** PRODUCT_DSN maps a `product` to the DSN its errors are submitted to. */
-declare const PRODUCT_DSN: Readonly<Record<string, string>>;
-/** dsnForProduct resolves the registered DSN for a product, or undefined when the
- *  product has no project yet — which leaves the error plane inert rather than
- *  guessing a destination and silently posting a surface's errors into the wrong
- *  project. */
+/** PRODUCT_PROJECT maps a `product` to its Sentry project id. The DSN's KEY is no
+ *  longer a per-project secret — it is the ONE org publishable key (below), so a
+ *  surface's errors ride the SAME key its events do. The id only names WHICH
+ *  project the errors group under, and cloud auto-provisions that project on first
+ *  keyed ingest, so a new id needs nothing minted. `site` lives in the `hanzo-ai`
+ *  project — an explicit map, because the projects predate this and do not derive
+ *  cleanly from the product name. */
+declare const PRODUCT_PROJECT: Readonly<Record<string, string>>;
+/** dsnForProduct builds the product's Sentry DSN — the ONE org publishable key at
+ *  its project's envelope endpoint — or undefined when the product has no project
+ *  yet, which leaves the error plane inert rather than posting into the wrong one.
+ *  Same key as the event stream: cloud resolves it to the org and attributes the
+ *  errors there. */
 declare function dsnForProduct(product: string | undefined): string | undefined;
 
 /** redactSecrets removes known secret shapes. Always applied. */
@@ -163,6 +170,59 @@ declare const EVENTS: {
 type EventName = (typeof EVENTS)[keyof typeof EVENTS];
 /** The reserved event name a pageview is stored under (server + read lens). */
 declare const PAGEVIEW = "$pageview";
+/** The reserved name every captured exception is emitted under. Error Tracking
+ *  reads exactly this name; an exception emitted under its own message instead
+ *  makes every distinct message a permanent entry in the event taxonomy. */
+declare const EXCEPTION = "$exception";
+
+/**
+ * digest is a stable 32-hex-char (128-bit) content hash, computed synchronously.
+ *
+ * Grouping keys are needed on the capture path, which is synchronous and may be
+ * running inside an unload handler — SubtleCrypto is async and unavailable on
+ * insecure origins, so it cannot be used here. This is FNV-1a run over four seeds
+ * and concatenated. It is a GROUPING key, never a security boundary: it is not
+ * collision-resistant against a chosen-input adversary, and nothing authorizes or
+ * authenticates on it. The product treats the value as opaque.
+ */
+declare function digest(s: string): string;
+/**
+ * exceptionEntry builds the single `$exception_list` entry for a throwable.
+ *
+ * One entry, not a chain: `Error.cause` chaining is a distinct fact with its own
+ * ordering rules, and emitting it wrongly is worse than not emitting it.
+ */
+declare function exceptionEntry(err: unknown, opts: {
+    handled: boolean;
+    id: string;
+}): ExceptionEntry;
+/**
+ * fingerprint is the issue grouping key.
+ *
+ * Keyed on exception type plus each in-app frame's function and source — the same
+ * pieces the server-side grouper records ("Exception Type", "Resolved function
+ * name", "Source file name"). Deliberately NOT the message: `Loading chunk 3324
+ * failed` and `Loading chunk 998 failed` are one bug, and grouping on message is
+ * precisely the mistake that made every distinct error string its own event name.
+ *
+ * Falls back to the type alone when no in-app frame survived, which keeps
+ * stackless errors (`Script error.`, cross-origin) in one issue instead of
+ * scattering them.
+ */
+declare function fingerprint(entry: ExceptionEntry): string;
+/**
+ * exceptionProperties builds the full `$exception_*` property bag for one captured
+ * throwable — everything Error Tracking reads off the event.
+ *
+ * The denormalized arrays are ordered like `frames`: last element is the throw
+ * site, which is the element the issue list indexes at -1 for its source/function
+ * columns.
+ */
+declare function exceptionProperties(err: unknown, opts: {
+    handled: boolean;
+    id: string;
+    level?: SentryLevel;
+}): ExceptionProperties;
 
 /** The emitting surfaces — the closed set of `AnalyticsConfig.product` values.
  *  `product` is on every event, so a funnel scopes by product instead of every
@@ -290,4 +350,4 @@ declare function hasAttribution(a: Attribution): boolean;
 /** isoWeek returns the ISO-8601 week label, e.g. "2026-W28". */
 declare function isoWeek(d: Date): string;
 
-export { Attribution, COHORTS, CaptureErrorOptions, Cohort, type CohortDef, Dsn, EVENTS, type ErrorIdentity, type EventName, FUNNELS, type FunnelDef, type FunnelId, type FunnelStep, GOALS, type GoalDef, PAGEVIEW, PRODUCTS, PRODUCT_DSN, type ProductId, SentryEvent, SentryFrame, VERSION, buildEnvelope, buildSentryEvent, deriveChannel, dsnForProduct, eventsOf, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };
+export { Attribution, COHORTS, CaptureErrorOptions, Cohort, type CohortDef, Dsn, EVENTS, EXCEPTION, type ErrorIdentity, type EventName, ExceptionEntry, ExceptionProperties, FUNNELS, type FunnelDef, type FunnelId, type FunnelStep, GOALS, type GoalDef, PAGEVIEW, PRODUCTS, PRODUCT_PROJECT, type ProductId, SentryEvent, SentryFrame, SentryLevel, VERSION, buildEnvelope, buildSentryEvent, deriveChannel, digest, dsnForProduct, eventsOf, exceptionEntry, exceptionProperties, fingerprint, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };

package/dist/index.mjs

@@ -72,17 +72,19 @@ function isoWeek(d) {
 }
 
 // src/dsn.ts
-var PRODUCT_DSN = Object.freeze({
-  // hanzo-console — console.hanzo.ai (also served embedded by the cloud binary)
-  console: "https://1:0c8054dbde157f4f420c56b58660052b2ad782293c4de1d606ef8fbc46a0bf34@api.hanzo.ai/v1/sentry/019fa40b-94ae-7f1d-8f7b-e92f123fad42",
-  // hanzo-app — hanzo.app
-  app: "https://1:b3e1173125568c80f91ef4b1fabbbd2d7e22341de02b33ce7e22ef4fc16a196e@api.hanzo.ai/v1/sentry/019f9b1e-57eb-7171-9d92-72c0b85e4b4b",
-  // hanzo-ai — hanzo.ai (the marketing site; `site` is the product name it declares)
-  site: "https://1:d9cbfb844958bd7ef2a455600f00fbf237fbd71b75c1504f137773096d6aa53f@api.hanzo.ai/v1/sentry/019f9b1e-5785-7359-ad0b-f75db8e58c99"
+var PRODUCT_PROJECT = Object.freeze({
+  console: "019fa40b-94ae-7f1d-8f7b-e92f123fad42",
+  // console.hanzo.ai
+  app: "019f9b1e-57eb-7171-9d92-72c0b85e4b4b",
+  // hanzo.app
+  site: "019f9b1e-5785-7359-ad0b-f75db8e58c99"
+  // hanzo.ai (marketing; product `site`)
 });
 function dsnForProduct(product) {
   if (!product) return void 0;
-  return PRODUCT_DSN[product];
+  const projectId = PRODUCT_PROJECT[product];
+  if (!projectId) return void 0;
+  return `https://${HANZO_PUBLISHABLE_KEY}@api.hanzo.ai/v1/sentry/${projectId}`;
 }
 var HANZO_PUBLISHABLE_KEY = "pk-live-c88649f1085fb6ad441d8a0072933a9b";
 function defaultPublishableKey(host) {
@@ -140,6 +142,7 @@ var EVENTS = {
   DEPLOY_FAILED: "deploy_failed"
 };
 var PAGEVIEW = "$pageview";
+var EXCEPTION = "$exception";
 
 // src/scrub.ts
 var REDACTED = "[redacted]";
@@ -369,7 +372,7 @@ function uuidv7Time(id) {
 }
 
 // src/version.ts
-var VERSION = "0.3.18";
+var VERSION = "0.3.20";
 
 // src/sentry.ts
 var MAX_FRAMES = 50;
@@ -561,6 +564,94 @@ ${itemHeader}
 ${payload}
 `;
 }
+var MAX_VALUE = 4096;
+function digest(s2) {
+  let out = "";
+  for (const seed of [2166136261, 16777619, 2654435769, 2246822507]) {
+    let h = seed >>> 0;
+    for (let i = 0; i < s2.length; i++) {
+      h ^= s2.charCodeAt(i);
+      h = h + (h << 1) + (h << 4) + (h << 7) + (h << 8) + (h << 24) >>> 0;
+    }
+    out += h.toString(16).padStart(8, "0");
+  }
+  return out;
+}
+function frameOf(f) {
+  const source = f.filename ?? "";
+  const name = f.function ?? "<anonymous>";
+  const line = f.lineno ?? 0;
+  const column = f.colno ?? 0;
+  return {
+    // Stable per code location, so the same frame groups and re-renders under one
+    // key. The '/part' suffix is the product's format for one raw frame expanding
+    // into several resolved ones; a browser frame is always part 0.
+    raw_id: `${digest(`${source}|${name}|${line}|${column}`)}/0`,
+    mangled_name: name,
+    source,
+    line,
+    column,
+    in_app: f.in_app ?? false,
+    lang: "javascript",
+    resolved: false,
+    resolve_failure: "no symbol set uploaded for this release",
+    resolved_name: null,
+    module: null
+  };
+}
+function truncate2(s2, max) {
+  if (s2.length <= max) return s2;
+  let end = max;
+  const c = s2.charCodeAt(end - 1);
+  if (c >= 55296 && c <= 56319) end--;
+  return s2.slice(0, end);
+}
+function exceptionEntry(err, opts) {
+  const n = normalizeError(err);
+  const frames = framesFromStack(n.stack).slice(-50);
+  const entry = {
+    id: opts.id,
+    type: n.name,
+    value: truncate2(n.message, MAX_VALUE),
+    mechanism: {
+      type: "generic",
+      handled: opts.handled,
+      // An exception the app reported by hand was constructed, not thrown by the
+      // runtime at a real call site.
+      synthetic: !(err instanceof Error)
+    }
+  };
+  if (frames.length > 0) {
+    entry.stacktrace = { type: "resolved", frames: frames.map(frameOf) };
+  }
+  return entry;
+}
+function fingerprint(entry) {
+  const frames = entry.stacktrace?.frames ?? [];
+  const pieces = frames.filter((f) => f.in_app).map((f) => `${f.mangled_name}@${f.source}`);
+  return digest([entry.type, ...pieces].join("\n"));
+}
+function exceptionProperties(err, opts) {
+  const entry = exceptionEntry(err, opts);
+  const frames = entry.stacktrace?.frames ?? [];
+  const fp = fingerprint(entry);
+  return {
+    $exception_list: [entry],
+    $exception_fingerprint: fp,
+    // Records WHY this fingerprint holds. 'manual' is the honest value: the client
+    // supplied the key rather than a server grouper deriving one.
+    $exception_fingerprint_record: [{ type: "manual" }],
+    $exception_type: entry.type,
+    $exception_message: entry.value,
+    $exception_level: opts.level ?? "error",
+    $exception_handled: opts.handled,
+    $exception_synthetic: entry.mechanism?.synthetic ?? false,
+    $exception_types: [entry.type],
+    $exception_values: [entry.value],
+    $exception_sources: frames.map((f) => f.source).filter((s2) => !!s2),
+    $exception_functions: frames.map((f) => f.resolved_name ?? f.mangled_name).filter((s2) => !!s2)
+  };
+}
 
 // src/storage.ts
 var KEY = {
@@ -837,9 +928,20 @@ var Analytics = class {
       } catch {
       }
       try {
+        const handled = context?.handled ?? true;
         const ex = normalizeError2(err);
-        ex.handled = context?.handled ?? true;
-        this.enqueue("error", ex.message, { error: ex, properties: context?.properties });
+        ex.handled = handled;
+        this.enqueue("event", EXCEPTION, {
+          error: ex,
+          properties: {
+            ...context?.properties,
+            ...exceptionProperties(err, {
+              handled,
+              id: hzUuidv7(),
+              level: context?.level
+            })
+          }
+        });
         this.flush();
       } catch {
       }
@@ -1146,6 +1248,6 @@ var COHORTS = {
  * reformat of one copy is a diff against the other.
  */
 
-export { Analytics, COHORTS, EVENTS, FUNNELS, GOALS, PAGEVIEW, PRODUCTS, PRODUCT_DSN, VERSION, buildEnvelope, buildSentryEvent, createAnalytics, deriveChannel, dsnForProduct, eventsOf, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };
+export { Analytics, COHORTS, EVENTS, EXCEPTION, FUNNELS, GOALS, PAGEVIEW, PRODUCTS, PRODUCT_PROJECT, VERSION, buildEnvelope, buildSentryEvent, createAnalytics, deriveChannel, digest, dsnForProduct, eventsOf, exceptionEntry, exceptionProperties, fingerprint, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map