@hanzo/event 0.3.19 → 0.3.21

package/dist/{core-D4PaPlOB.d.cts → core-CHLpJy51.d.cts}

@@ -18,6 +18,61 @@ interface Exception {
      *  true = a caught error the app chose to report. Defaults true. */
     handled?: boolean;
 }
+/** One stack frame as Error Tracking renders it. The key names are the product's
+ *  POST-symbolication vocabulary (`mangled_name`/`source`/`line`/`column`), which
+ *  is what the issue view reads straight off `$exception_list`. */
+interface ExceptionFrame {
+    /** "<hash>/<part>" — stable per code location; the frame's identity. */
+    raw_id: string;
+    /** The function name as it appears in the shipped bundle. */
+    mangled_name: string;
+    /** File/URL the frame is in. */
+    source: string;
+    line: number;
+    column: number;
+    /** First-party code. Frames without this are hidden by default in the product. */
+    in_app: boolean;
+    lang: string;
+    /** Whether a symbol set mapped this frame back to original source. */
+    resolved: boolean;
+    resolve_failure?: string;
+    resolved_name?: string | null;
+    module?: string | null;
+}
+/** One exception in `$exception_list`. */
+interface ExceptionEntry {
+    id: string;
+    type: string;
+    value: string;
+    mechanism?: {
+        type: 'generic';
+        handled: boolean;
+        synthetic?: boolean;
+    };
+    /** `type` MUST be 'resolved' — the renderer draws frames on no other value. */
+    stacktrace?: {
+        type: 'resolved';
+        frames: ExceptionFrame[];
+    };
+}
+/** The `$exception_*` property bag Error Tracking reads off a `$exception` event. */
+interface ExceptionProperties {
+    $exception_list: ExceptionEntry[];
+    /** Issue grouping key. An event without one is dropped by the issue query. */
+    $exception_fingerprint: string;
+    $exception_fingerprint_record: {
+        type: 'manual';
+    }[];
+    $exception_type: string;
+    $exception_message: string;
+    $exception_level: SentryLevel;
+    $exception_handled: boolean;
+    $exception_synthetic: boolean;
+    $exception_types: string[];
+    $exception_values: string[];
+    $exception_sources: string[];
+    $exception_functions: string[];
+}
 /** First-touch marketing attribution, parsed once and persisted. */
 interface Attribution {
     utm: {
@@ -308,4 +363,4 @@ declare class Analytics {
 /** createAnalytics builds a client instance. Most apps use one shared instance. */
 declare function createAnalytics(config: AnalyticsConfig): Analytics;
 
-export { type Attribution as A, type Cohort as C, type Dsn as D, type EventKind as E, type SentryEvent as S, type Transport as T, type WireEvent as W, type CaptureErrorOptions as a, type SentryFrame as b, Analytics as c, type AnalyticsConfig as d, type Exception as e, type SentryLevel as f, createAnalytics as g };
+export { type Attribution as A, type Cohort as C, type Dsn as D, type ExceptionEntry as E, type SentryEvent as S, type Transport as T, type WireEvent as W, type CaptureErrorOptions as a, type SentryFrame as b, type SentryLevel as c, type ExceptionProperties as d, Analytics as e, type AnalyticsConfig as f, type EventKind as g, type Exception as h, type ExceptionFrame as i, createAnalytics as j };

package/dist/{core-D4PaPlOB.d.ts → core-CHLpJy51.d.ts}

@@ -18,6 +18,61 @@ interface Exception {
      *  true = a caught error the app chose to report. Defaults true. */
     handled?: boolean;
 }
+/** One stack frame as Error Tracking renders it. The key names are the product's
+ *  POST-symbolication vocabulary (`mangled_name`/`source`/`line`/`column`), which
+ *  is what the issue view reads straight off `$exception_list`. */
+interface ExceptionFrame {
+    /** "<hash>/<part>" — stable per code location; the frame's identity. */
+    raw_id: string;
+    /** The function name as it appears in the shipped bundle. */
+    mangled_name: string;
+    /** File/URL the frame is in. */
+    source: string;
+    line: number;
+    column: number;
+    /** First-party code. Frames without this are hidden by default in the product. */
+    in_app: boolean;
+    lang: string;
+    /** Whether a symbol set mapped this frame back to original source. */
+    resolved: boolean;
+    resolve_failure?: string;
+    resolved_name?: string | null;
+    module?: string | null;
+}
+/** One exception in `$exception_list`. */
+interface ExceptionEntry {
+    id: string;
+    type: string;
+    value: string;
+    mechanism?: {
+        type: 'generic';
+        handled: boolean;
+        synthetic?: boolean;
+    };
+    /** `type` MUST be 'resolved' — the renderer draws frames on no other value. */
+    stacktrace?: {
+        type: 'resolved';
+        frames: ExceptionFrame[];
+    };
+}
+/** The `$exception_*` property bag Error Tracking reads off a `$exception` event. */
+interface ExceptionProperties {
+    $exception_list: ExceptionEntry[];
+    /** Issue grouping key. An event without one is dropped by the issue query. */
+    $exception_fingerprint: string;
+    $exception_fingerprint_record: {
+        type: 'manual';
+    }[];
+    $exception_type: string;
+    $exception_message: string;
+    $exception_level: SentryLevel;
+    $exception_handled: boolean;
+    $exception_synthetic: boolean;
+    $exception_types: string[];
+    $exception_values: string[];
+    $exception_sources: string[];
+    $exception_functions: string[];
+}
 /** First-touch marketing attribution, parsed once and persisted. */
 interface Attribution {
     utm: {
@@ -308,4 +363,4 @@ declare class Analytics {
 /** createAnalytics builds a client instance. Most apps use one shared instance. */
 declare function createAnalytics(config: AnalyticsConfig): Analytics;
 
-export { type Attribution as A, type Cohort as C, type Dsn as D, type EventKind as E, type SentryEvent as S, type Transport as T, type WireEvent as W, type CaptureErrorOptions as a, type SentryFrame as b, Analytics as c, type AnalyticsConfig as d, type Exception as e, type SentryLevel as f, createAnalytics as g };
+export { type Attribution as A, type Cohort as C, type Dsn as D, type ExceptionEntry as E, type SentryEvent as S, type Transport as T, type WireEvent as W, type CaptureErrorOptions as a, type SentryFrame as b, type SentryLevel as c, type ExceptionProperties as d, Analytics as e, type AnalyticsConfig as f, type EventKind as g, type Exception as h, type ExceptionFrame as i, createAnalytics as j };

package/dist/index.cjs

@@ -82,15 +82,11 @@ var PRODUCT_PROJECT = Object.freeze({
   site: "019f9b1e-5785-7359-ad0b-f75db8e58c99"
   // hanzo.ai (marketing; product `site`)
 });
-function dsnForProduct(product) {
-  if (!product) return void 0;
+function dsnForProduct(product, key) {
+  if (!product || !key) return void 0;
   const projectId = PRODUCT_PROJECT[product];
   if (!projectId) return void 0;
-  return `https://${HANZO_PUBLISHABLE_KEY}@api.hanzo.ai/v1/sentry/${projectId}`;
-}
-var HANZO_PUBLISHABLE_KEY = "pk-live-c88649f1085fb6ad441d8a0072933a9b";
-function defaultPublishableKey(host) {
-  return host === void 0 || host === "https://api.hanzo.ai" ? HANZO_PUBLISHABLE_KEY : void 0;
+  return `https://${key}@api.hanzo.ai/v1/sentry/${projectId}`;
 }
 
 // src/events.ts
@@ -144,6 +140,7 @@ var EVENTS = {
   DEPLOY_FAILED: "deploy_failed"
 };
 var PAGEVIEW = "$pageview";
+var EXCEPTION = "$exception";
 
 // src/scrub.ts
 var REDACTED = "[redacted]";
@@ -373,7 +370,7 @@ function uuidv7Time(id) {
 }
 
 // src/version.ts
-var VERSION = "0.3.19";
+var VERSION = "0.3.21";
 
 // src/sentry.ts
 var MAX_FRAMES = 50;
@@ -565,6 +562,94 @@ ${itemHeader}
 ${payload}
 `;
 }
+var MAX_VALUE = 4096;
+function digest(s2) {
+  let out = "";
+  for (const seed of [2166136261, 16777619, 2654435769, 2246822507]) {
+    let h = seed >>> 0;
+    for (let i = 0; i < s2.length; i++) {
+      h ^= s2.charCodeAt(i);
+      h = h + (h << 1) + (h << 4) + (h << 7) + (h << 8) + (h << 24) >>> 0;
+    }
+    out += h.toString(16).padStart(8, "0");
+  }
+  return out;
+}
+function frameOf(f) {
+  const source = f.filename ?? "";
+  const name = f.function ?? "<anonymous>";
+  const line = f.lineno ?? 0;
+  const column = f.colno ?? 0;
+  return {
+    // Stable per code location, so the same frame groups and re-renders under one
+    // key. The '/part' suffix is the product's format for one raw frame expanding
+    // into several resolved ones; a browser frame is always part 0.
+    raw_id: `${digest(`${source}|${name}|${line}|${column}`)}/0`,
+    mangled_name: name,
+    source,
+    line,
+    column,
+    in_app: f.in_app ?? false,
+    lang: "javascript",
+    resolved: false,
+    resolve_failure: "no symbol set uploaded for this release",
+    resolved_name: null,
+    module: null
+  };
+}
+function truncate2(s2, max) {
+  if (s2.length <= max) return s2;
+  let end = max;
+  const c = s2.charCodeAt(end - 1);
+  if (c >= 55296 && c <= 56319) end--;
+  return s2.slice(0, end);
+}
+function exceptionEntry(err, opts) {
+  const n = normalizeError(err);
+  const frames = framesFromStack(n.stack).slice(-50);
+  const entry = {
+    id: opts.id,
+    type: n.name,
+    value: truncate2(n.message, MAX_VALUE),
+    mechanism: {
+      type: "generic",
+      handled: opts.handled,
+      // An exception the app reported by hand was constructed, not thrown by the
+      // runtime at a real call site.
+      synthetic: !(err instanceof Error)
+    }
+  };
+  if (frames.length > 0) {
+    entry.stacktrace = { type: "resolved", frames: frames.map(frameOf) };
+  }
+  return entry;
+}
+function fingerprint(entry) {
+  const frames = entry.stacktrace?.frames ?? [];
+  const pieces = frames.filter((f) => f.in_app).map((f) => `${f.mangled_name}@${f.source}`);
+  return digest([entry.type, ...pieces].join("\n"));
+}
+function exceptionProperties(err, opts) {
+  const entry = exceptionEntry(err, opts);
+  const frames = entry.stacktrace?.frames ?? [];
+  const fp = fingerprint(entry);
+  return {
+    $exception_list: [entry],
+    $exception_fingerprint: fp,
+    // Records WHY this fingerprint holds. 'manual' is the honest value: the client
+    // supplied the key rather than a server grouper deriving one.
+    $exception_fingerprint_record: [{ type: "manual" }],
+    $exception_type: entry.type,
+    $exception_message: entry.value,
+    $exception_level: opts.level ?? "error",
+    $exception_handled: opts.handled,
+    $exception_synthetic: entry.mechanism?.synthetic ?? false,
+    $exception_types: [entry.type],
+    $exception_values: [entry.value],
+    $exception_sources: frames.map((f) => f.source).filter((s2) => !!s2),
+    $exception_functions: frames.map((f) => f.resolved_name ?? f.mangled_name).filter((s2) => !!s2)
+  };
+}
 
 // src/storage.ts
 var KEY = {
@@ -736,27 +821,24 @@ var Analytics = class {
       enabled: true,
       captureErrors: true,
       ...config,
-      // The publishable key resolves the SAME way the DSN below does, and now
-      // ends the SAME way too — in a baked default, so declaring nothing is
-      // enough. Most specific first:
+      // The publishable key resolves from ONE live source, never a literal baked
+      // beside the code. Most specific first:
       //   1. an explicit `ingestKey` in config;
       //   2. NEXT_PUBLIC_PUBLISHABLE_KEY, the inlined build-time env the fleet
-      //      carries end to end (KMS `deploy/PUBLISHABLE_KEY` -> the PUBLISHABLE_KEY
-      //      build-arg -> the NEXT_PUBLIC_ prefix Next inlines);
-      //   3. the hanzo org key baked in `dsn.ts`, on the hanzo cloud only.
+      //      carries end to end — KMS `deploy/PUBLISHABLE_KEY` -> the PUBLISHABLE_KEY
+      //      build-arg -> the NEXT_PUBLIC_ prefix Next inlines.
       //
-      // (3) is why this is `publishable_key for all`: a hanzo surface that passes
-      // no key in code and inlines no env still emits attributed, exactly as
-      // declaring `product` is enough for the DSN. Without it that surface sent
-      // its beacons to `$public` — which drops every track/identify/group and
-      // still answers 200 — silent in the page and invisible until you read the
-      // warehouse and find the host missing entirely. A white-label surface on
-      // its own cloud (a non-default host) gets no default, so the org this
-      // attributes to is never the wrong one.
-      ingestKey: config.ingestKey ?? readEnv("NEXT_PUBLIC_PUBLISHABLE_KEY") ?? defaultPublishableKey(config.host ?? DEFAULT_HOST)
+      // A surface that provides neither has no key, and its anonymous traffic
+      // files under `$public` (which drops track/identify/group and answers 200);
+      // the fix is to give it the KMS-sourced env, not to hardcode the org key
+      // here. The key is a credential-class value: its home is KMS, and the ONE
+      // build reads it from there.
+      ingestKey: config.ingestKey ?? readEnv("NEXT_PUBLIC_PUBLISHABLE_KEY")
     };
     this.transport = config.transport ?? new DefaultTransport();
-    this.dsn = parseDsn(config.dsn ?? readEnvDsn() ?? dsnForProduct(this.cfg.product));
+    this.dsn = parseDsn(
+      config.dsn ?? readEnvDsn() ?? dsnForProduct(this.cfg.product, this.cfg.ingestKey)
+    );
   }
   /** errorPlaneEnabled reports whether captured exceptions can actually reach the
    *  error host. False means a DSN was never configured — the documented
@@ -841,9 +923,20 @@ var Analytics = class {
       } catch {
       }
       try {
+        const handled = context?.handled ?? true;
         const ex = normalizeError2(err);
-        ex.handled = context?.handled ?? true;
-        this.enqueue("error", ex.message, { error: ex, properties: context?.properties });
+        ex.handled = handled;
+        this.enqueue("event", EXCEPTION, {
+          error: ex,
+          properties: {
+            ...context?.properties,
+            ...exceptionProperties(err, {
+              handled,
+              id: hzUuidv7(),
+              level: context?.level
+            })
+          }
+        });
         this.flush();
       } catch {
       }
@@ -1153,6 +1246,7 @@ var COHORTS = {
 exports.Analytics = Analytics;
 exports.COHORTS = COHORTS;
 exports.EVENTS = EVENTS;
+exports.EXCEPTION = EXCEPTION;
 exports.FUNNELS = FUNNELS;
 exports.GOALS = GOALS;
 exports.PAGEVIEW = PAGEVIEW;
@@ -1163,8 +1257,12 @@ exports.buildEnvelope = buildEnvelope;
 exports.buildSentryEvent = buildSentryEvent;
 exports.createAnalytics = createAnalytics;
 exports.deriveChannel = deriveChannel;
+exports.digest = digest;
 exports.dsnForProduct = dsnForProduct;
 exports.eventsOf = eventsOf;
+exports.exceptionEntry = exceptionEntry;
+exports.exceptionProperties = exceptionProperties;
+exports.fingerprint = fingerprint;
 exports.framesFromStack = framesFromStack;
 exports.getCohort = getCohort;
 exports.getFirstTouch = getFirstTouch;