@hanzo/event 0.3.20 → 0.3.22

package/dist/index.d.cts

@@ -1,12 +1,13 @@
 import { C as Cohort, A as Attribution, S as SentryEvent, D as Dsn, a as CaptureErrorOptions, b as SentryFrame, E as ExceptionEntry, c as SentryLevel, d as ExceptionProperties } from './core-CHLpJy51.cjs';
 export { e as Analytics, f as AnalyticsConfig, g as EventKind, h as Exception, i as ExceptionFrame, T as Transport, W as WireEvent, j as createAnalytics } from './core-CHLpJy51.cjs';
+export { EVENTS, EXCEPTION, EventName, PAGEVIEW } from '@hanzo/events';
 
 /** Read the persisted first-touch attribution. */
 declare function getFirstTouch(): Attribution | undefined;
 /** Read persisted cohort dimensions. */
 declare function getCohort(): Cohort | undefined;
 
-declare const VERSION = "0.3.20";
+declare const VERSION = "0.3.21";
 
 /**
  * parseDsn parses "https://<version>:<hmac>@<host>/v1/sentry/<projectId>" into its
@@ -110,12 +111,15 @@ declare function uuidv7Time(id: string): number;
  *  project — an explicit map, because the projects predate this and do not derive
  *  cleanly from the product name. */
 declare const PRODUCT_PROJECT: Readonly<Record<string, string>>;
-/** dsnForProduct builds the product's Sentry DSN — the ONE org publishable key at
- *  its project's envelope endpoint — or undefined when the product has no project
- *  yet, which leaves the error plane inert rather than posting into the wrong one.
- *  Same key as the event stream: cloud resolves it to the org and attributes the
- *  errors there. */
-declare function dsnForProduct(product: string | undefined): string | undefined;
+/** dsnForProduct builds the product's Sentry DSN from the caller's resolved
+ *  publishable `key` and the product's project — the SAME key the event stream
+ *  carries, at the product's envelope endpoint. Returns undefined when there is no
+ *  key or no project for the product, leaving the error plane inert rather than
+ *  posting into the wrong one. The key is NOT baked here: it is the value the
+ *  surface resolved (an explicit `ingestKey`, or the KMS-sourced
+ *  NEXT_PUBLIC_PUBLISHABLE_KEY the build inlines) — the ONE live source, never a
+ *  literal committed beside the code. */
+declare function dsnForProduct(product: string | undefined, key: string | undefined): string | undefined;
 
 /** redactSecrets removes known secret shapes. Always applied. */
 declare function redactSecrets(s: string): string;
@@ -125,56 +129,6 @@ declare function scrubPII(s: string): string;
  *  first: unbounded text is a denial-of-service surface, not just a size problem. */
 declare function scrubText(s: string | undefined, capturePII?: boolean): string;
 
-declare const EVENTS: {
-    readonly SIGNUP_VIEWED: "signup_viewed";
-    readonly SIGNUP_SUBMITTED: "signup_submitted";
-    readonly SIGNUP_VERIFIED: "signup_verified";
-    readonly SIGNUP_COMPLETED: "signup_completed";
-    /** A RETURNING user authenticated — the non-signup half of the IAM callback.
-     *  Keeping it distinct is what stops returning logins from inflating signups. */
-    readonly LOGIN_COMPLETED: "login_completed";
-    /** Activation: the first moment of real value. ONE event for every product —
-     *  the product-specific moment is the `action` property (api_call, app_live,
-     *  chat_reply), never a new event name. */
-    readonly FIRST_ACTION: "first_action";
-    readonly WAITLIST_JOINED: "waitlist_joined";
-    readonly WAITLIST_SHARED: "waitlist_shared";
-    readonly REFERRAL_USED: "referral_used";
-    readonly REFERRAL_CLAIMED: "referral_claimed";
-    readonly PRICING_VIEWED: "pricing_viewed";
-    readonly PLAN_CLICKED: "plan_clicked";
-    readonly CHECKOUT_STARTED: "checkout_started";
-    readonly ORDER_COMPLETED: "order_completed";
-    readonly FEATURE_USED: "feature_used";
-    readonly API_KEY_CREATED: "api_key_created";
-    readonly APP_CREATED: "app_created";
-    readonly PROJECT_CREATED: "project_created";
-    readonly AGENT_CREATED: "agent_created";
-    readonly CHAT_STARTED: "chat_started";
-    readonly CHAT_MESSAGE_SENT: "chat_message_sent";
-    /** The user switched model/endpoint — the single strongest quality signal a
-     *  chat surface emits (a switch usually follows a bad answer). */
-    readonly MODEL_SWITCHED: "model_switched";
-    readonly TASK_STARTED: "task_started";
-    readonly TASK_COMPLETED: "task_completed";
-    readonly BUILD_STARTED: "build_started";
-    /** A model finished producing an artifact (an app build, a chat reply, an agent
-     *  run). Carries `durationMs` — the outcome event owns its own duration, so no
-     *  paired start event is needed. */
-    readonly GENERATION_COMPLETED: "generation_completed";
-    readonly GENERATION_FAILED: "generation_failed";
-    readonly DEPLOY_STARTED: "deploy_started";
-    readonly DEPLOY_SUCCEEDED: "deploy_succeeded";
-    readonly DEPLOY_FAILED: "deploy_failed";
-};
-type EventName = (typeof EVENTS)[keyof typeof EVENTS];
-/** The reserved event name a pageview is stored under (server + read lens). */
-declare const PAGEVIEW = "$pageview";
-/** The reserved name every captured exception is emitted under. Error Tracking
- *  reads exactly this name; an exception emitted under its own message instead
- *  makes every distinct message a permanent entry in the event taxonomy. */
-declare const EXCEPTION = "$exception";
-
 /**
  * digest is a stable 32-hex-char (128-bit) content hash, computed synchronously.
  *
@@ -350,4 +304,4 @@ declare function hasAttribution(a: Attribution): boolean;
 /** isoWeek returns the ISO-8601 week label, e.g. "2026-W28". */
 declare function isoWeek(d: Date): string;
 
-export { Attribution, COHORTS, CaptureErrorOptions, Cohort, type CohortDef, Dsn, EVENTS, EXCEPTION, type ErrorIdentity, type EventName, ExceptionEntry, ExceptionProperties, FUNNELS, type FunnelDef, type FunnelId, type FunnelStep, GOALS, type GoalDef, PAGEVIEW, PRODUCTS, PRODUCT_PROJECT, type ProductId, SentryEvent, SentryFrame, SentryLevel, VERSION, buildEnvelope, buildSentryEvent, deriveChannel, digest, dsnForProduct, eventsOf, exceptionEntry, exceptionProperties, fingerprint, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };
+export { Attribution, COHORTS, CaptureErrorOptions, Cohort, type CohortDef, Dsn, type ErrorIdentity, ExceptionEntry, ExceptionProperties, FUNNELS, type FunnelDef, type FunnelId, type FunnelStep, GOALS, type GoalDef, PRODUCTS, PRODUCT_PROJECT, type ProductId, SentryEvent, SentryFrame, SentryLevel, VERSION, buildEnvelope, buildSentryEvent, deriveChannel, digest, dsnForProduct, eventsOf, exceptionEntry, exceptionProperties, fingerprint, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };

package/dist/index.d.ts

@@ -1,12 +1,13 @@
 import { C as Cohort, A as Attribution, S as SentryEvent, D as Dsn, a as CaptureErrorOptions, b as SentryFrame, E as ExceptionEntry, c as SentryLevel, d as ExceptionProperties } from './core-CHLpJy51.js';
 export { e as Analytics, f as AnalyticsConfig, g as EventKind, h as Exception, i as ExceptionFrame, T as Transport, W as WireEvent, j as createAnalytics } from './core-CHLpJy51.js';
+export { EVENTS, EXCEPTION, EventName, PAGEVIEW } from '@hanzo/events';
 
 /** Read the persisted first-touch attribution. */
 declare function getFirstTouch(): Attribution | undefined;
 /** Read persisted cohort dimensions. */
 declare function getCohort(): Cohort | undefined;
 
-declare const VERSION = "0.3.20";
+declare const VERSION = "0.3.21";
 
 /**
  * parseDsn parses "https://<version>:<hmac>@<host>/v1/sentry/<projectId>" into its
@@ -110,12 +111,15 @@ declare function uuidv7Time(id: string): number;
  *  project — an explicit map, because the projects predate this and do not derive
  *  cleanly from the product name. */
 declare const PRODUCT_PROJECT: Readonly<Record<string, string>>;
-/** dsnForProduct builds the product's Sentry DSN — the ONE org publishable key at
- *  its project's envelope endpoint — or undefined when the product has no project
- *  yet, which leaves the error plane inert rather than posting into the wrong one.
- *  Same key as the event stream: cloud resolves it to the org and attributes the
- *  errors there. */
-declare function dsnForProduct(product: string | undefined): string | undefined;
+/** dsnForProduct builds the product's Sentry DSN from the caller's resolved
+ *  publishable `key` and the product's project — the SAME key the event stream
+ *  carries, at the product's envelope endpoint. Returns undefined when there is no
+ *  key or no project for the product, leaving the error plane inert rather than
+ *  posting into the wrong one. The key is NOT baked here: it is the value the
+ *  surface resolved (an explicit `ingestKey`, or the KMS-sourced
+ *  NEXT_PUBLIC_PUBLISHABLE_KEY the build inlines) — the ONE live source, never a
+ *  literal committed beside the code. */
+declare function dsnForProduct(product: string | undefined, key: string | undefined): string | undefined;
 
 /** redactSecrets removes known secret shapes. Always applied. */
 declare function redactSecrets(s: string): string;
@@ -125,56 +129,6 @@ declare function scrubPII(s: string): string;
  *  first: unbounded text is a denial-of-service surface, not just a size problem. */
 declare function scrubText(s: string | undefined, capturePII?: boolean): string;
 
-declare const EVENTS: {
-    readonly SIGNUP_VIEWED: "signup_viewed";
-    readonly SIGNUP_SUBMITTED: "signup_submitted";
-    readonly SIGNUP_VERIFIED: "signup_verified";
-    readonly SIGNUP_COMPLETED: "signup_completed";
-    /** A RETURNING user authenticated — the non-signup half of the IAM callback.
-     *  Keeping it distinct is what stops returning logins from inflating signups. */
-    readonly LOGIN_COMPLETED: "login_completed";
-    /** Activation: the first moment of real value. ONE event for every product —
-     *  the product-specific moment is the `action` property (api_call, app_live,
-     *  chat_reply), never a new event name. */
-    readonly FIRST_ACTION: "first_action";
-    readonly WAITLIST_JOINED: "waitlist_joined";
-    readonly WAITLIST_SHARED: "waitlist_shared";
-    readonly REFERRAL_USED: "referral_used";
-    readonly REFERRAL_CLAIMED: "referral_claimed";
-    readonly PRICING_VIEWED: "pricing_viewed";
-    readonly PLAN_CLICKED: "plan_clicked";
-    readonly CHECKOUT_STARTED: "checkout_started";
-    readonly ORDER_COMPLETED: "order_completed";
-    readonly FEATURE_USED: "feature_used";
-    readonly API_KEY_CREATED: "api_key_created";
-    readonly APP_CREATED: "app_created";
-    readonly PROJECT_CREATED: "project_created";
-    readonly AGENT_CREATED: "agent_created";
-    readonly CHAT_STARTED: "chat_started";
-    readonly CHAT_MESSAGE_SENT: "chat_message_sent";
-    /** The user switched model/endpoint — the single strongest quality signal a
-     *  chat surface emits (a switch usually follows a bad answer). */
-    readonly MODEL_SWITCHED: "model_switched";
-    readonly TASK_STARTED: "task_started";
-    readonly TASK_COMPLETED: "task_completed";
-    readonly BUILD_STARTED: "build_started";
-    /** A model finished producing an artifact (an app build, a chat reply, an agent
-     *  run). Carries `durationMs` — the outcome event owns its own duration, so no
-     *  paired start event is needed. */
-    readonly GENERATION_COMPLETED: "generation_completed";
-    readonly GENERATION_FAILED: "generation_failed";
-    readonly DEPLOY_STARTED: "deploy_started";
-    readonly DEPLOY_SUCCEEDED: "deploy_succeeded";
-    readonly DEPLOY_FAILED: "deploy_failed";
-};
-type EventName = (typeof EVENTS)[keyof typeof EVENTS];
-/** The reserved event name a pageview is stored under (server + read lens). */
-declare const PAGEVIEW = "$pageview";
-/** The reserved name every captured exception is emitted under. Error Tracking
- *  reads exactly this name; an exception emitted under its own message instead
- *  makes every distinct message a permanent entry in the event taxonomy. */
-declare const EXCEPTION = "$exception";
-
 /**
  * digest is a stable 32-hex-char (128-bit) content hash, computed synchronously.
  *
@@ -350,4 +304,4 @@ declare function hasAttribution(a: Attribution): boolean;
 /** isoWeek returns the ISO-8601 week label, e.g. "2026-W28". */
 declare function isoWeek(d: Date): string;
 
-export { Attribution, COHORTS, CaptureErrorOptions, Cohort, type CohortDef, Dsn, EVENTS, EXCEPTION, type ErrorIdentity, type EventName, ExceptionEntry, ExceptionProperties, FUNNELS, type FunnelDef, type FunnelId, type FunnelStep, GOALS, type GoalDef, PAGEVIEW, PRODUCTS, PRODUCT_PROJECT, type ProductId, SentryEvent, SentryFrame, SentryLevel, VERSION, buildEnvelope, buildSentryEvent, deriveChannel, digest, dsnForProduct, eventsOf, exceptionEntry, exceptionProperties, fingerprint, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };
+export { Attribution, COHORTS, CaptureErrorOptions, Cohort, type CohortDef, Dsn, type ErrorIdentity, ExceptionEntry, ExceptionProperties, FUNNELS, type FunnelDef, type FunnelId, type FunnelStep, GOALS, type GoalDef, PRODUCTS, PRODUCT_PROJECT, type ProductId, SentryEvent, SentryFrame, SentryLevel, VERSION, buildEnvelope, buildSentryEvent, deriveChannel, digest, dsnForProduct, eventsOf, exceptionEntry, exceptionProperties, fingerprint, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };

package/dist/index.mjs

@@ -1,3 +1,6 @@
+import { EVENTS, PAGEVIEW, EXCEPTION } from '@hanzo/events';
+export { EVENTS, EXCEPTION, PAGEVIEW } from '@hanzo/events';
+
 // src/attribution.ts
 var SOCIAL_HOSTS = [
   "facebook.",
@@ -80,70 +83,13 @@ var PRODUCT_PROJECT = Object.freeze({
   site: "019f9b1e-5785-7359-ad0b-f75db8e58c99"
   // hanzo.ai (marketing; product `site`)
 });
-function dsnForProduct(product) {
-  if (!product) return void 0;
+function dsnForProduct(product, key) {
+  if (!product || !key) return void 0;
   const projectId = PRODUCT_PROJECT[product];
   if (!projectId) return void 0;
-  return `https://${HANZO_PUBLISHABLE_KEY}@api.hanzo.ai/v1/sentry/${projectId}`;
-}
-var HANZO_PUBLISHABLE_KEY = "pk-live-c88649f1085fb6ad441d8a0072933a9b";
-function defaultPublishableKey(host) {
-  return host === void 0 || host === "https://api.hanzo.ai" ? HANZO_PUBLISHABLE_KEY : void 0;
+  return `https://${key}@api.hanzo.ai/v1/sentry/${projectId}`;
 }
 
-// src/events.ts
-var EVENTS = {
-  // Signup funnel: view -> submit -> verify -> completed -> first action.
-  SIGNUP_VIEWED: "signup_viewed",
-  SIGNUP_SUBMITTED: "signup_submitted",
-  SIGNUP_VERIFIED: "signup_verified",
-  SIGNUP_COMPLETED: "signup_completed",
-  /** A RETURNING user authenticated — the non-signup half of the IAM callback.
-   *  Keeping it distinct is what stops returning logins from inflating signups. */
-  LOGIN_COMPLETED: "login_completed",
-  /** Activation: the first moment of real value. ONE event for every product —
-   *  the product-specific moment is the `action` property (api_call, app_live,
-   *  chat_reply), never a new event name. */
-  FIRST_ACTION: "first_action",
-  // Waitlist + referral.
-  WAITLIST_JOINED: "waitlist_joined",
-  WAITLIST_SHARED: "waitlist_shared",
-  REFERRAL_USED: "referral_used",
-  REFERRAL_CLAIMED: "referral_claimed",
-  // Upgrade-intent + purchase.
-  PRICING_VIEWED: "pricing_viewed",
-  PLAN_CLICKED: "plan_clicked",
-  CHECKOUT_STARTED: "checkout_started",
-  ORDER_COMPLETED: "order_completed",
-  // Feature usage — generic + the common key surfaces across products.
-  FEATURE_USED: "feature_used",
-  API_KEY_CREATED: "api_key_created",
-  APP_CREATED: "app_created",
-  PROJECT_CREATED: "project_created",
-  AGENT_CREATED: "agent_created",
-  CHAT_STARTED: "chat_started",
-  CHAT_MESSAGE_SENT: "chat_message_sent",
-  /** The user switched model/endpoint — the single strongest quality signal a
-   *  chat surface emits (a switch usually follows a bad answer). */
-  MODEL_SWITCHED: "model_switched",
-  TASK_STARTED: "task_started",
-  TASK_COMPLETED: "task_completed",
-  // Build → ship. `build_*` is a MODEL producing an artifact; `deploy_*` is that
-  // artifact going live. Intent (build_started) is never the same event as the
-  // artifact existing (app_created) — conflating them makes the funnel lie.
-  BUILD_STARTED: "build_started",
-  /** A model finished producing an artifact (an app build, a chat reply, an agent
-   *  run). Carries `durationMs` — the outcome event owns its own duration, so no
-   *  paired start event is needed. */
-  GENERATION_COMPLETED: "generation_completed",
-  GENERATION_FAILED: "generation_failed",
-  DEPLOY_STARTED: "deploy_started",
-  DEPLOY_SUCCEEDED: "deploy_succeeded",
-  DEPLOY_FAILED: "deploy_failed"
-};
-var PAGEVIEW = "$pageview";
-var EXCEPTION = "$exception";
-
 // src/scrub.ts
 var REDACTED = "[redacted]";
 var EMAIL_MARK = "[email]";
@@ -372,7 +318,7 @@ function uuidv7Time(id) {
 }
 
 // src/version.ts
-var VERSION = "0.3.20";
+var VERSION = "0.3.21";
 
 // src/sentry.ts
 var MAX_FRAMES = 50;
@@ -823,27 +769,24 @@ var Analytics = class {
       enabled: true,
       captureErrors: true,
       ...config,
-      // The publishable key resolves the SAME way the DSN below does, and now
-      // ends the SAME way too — in a baked default, so declaring nothing is
-      // enough. Most specific first:
+      // The publishable key resolves from ONE live source, never a literal baked
+      // beside the code. Most specific first:
       //   1. an explicit `ingestKey` in config;
       //   2. NEXT_PUBLIC_PUBLISHABLE_KEY, the inlined build-time env the fleet
-      //      carries end to end (KMS `deploy/PUBLISHABLE_KEY` -> the PUBLISHABLE_KEY
-      //      build-arg -> the NEXT_PUBLIC_ prefix Next inlines);
-      //   3. the hanzo org key baked in `dsn.ts`, on the hanzo cloud only.
+      //      carries end to end — KMS `deploy/PUBLISHABLE_KEY` -> the PUBLISHABLE_KEY
+      //      build-arg -> the NEXT_PUBLIC_ prefix Next inlines.
       //
-      // (3) is why this is `publishable_key for all`: a hanzo surface that passes
-      // no key in code and inlines no env still emits attributed, exactly as
-      // declaring `product` is enough for the DSN. Without it that surface sent
-      // its beacons to `$public` — which drops every track/identify/group and
-      // still answers 200 — silent in the page and invisible until you read the
-      // warehouse and find the host missing entirely. A white-label surface on
-      // its own cloud (a non-default host) gets no default, so the org this
-      // attributes to is never the wrong one.
-      ingestKey: config.ingestKey ?? readEnv("NEXT_PUBLIC_PUBLISHABLE_KEY") ?? defaultPublishableKey(config.host ?? DEFAULT_HOST)
+      // A surface that provides neither has no key, and its anonymous traffic
+      // files under `$public` (which drops track/identify/group and answers 200);
+      // the fix is to give it the KMS-sourced env, not to hardcode the org key
+      // here. The key is a credential-class value: its home is KMS, and the ONE
+      // build reads it from there.
+      ingestKey: config.ingestKey ?? readEnv("NEXT_PUBLIC_PUBLISHABLE_KEY")
     };
     this.transport = config.transport ?? new DefaultTransport();
-    this.dsn = parseDsn(config.dsn ?? readEnvDsn() ?? dsnForProduct(this.cfg.product));
+    this.dsn = parseDsn(
+      config.dsn ?? readEnvDsn() ?? dsnForProduct(this.cfg.product, this.cfg.ingestKey)
+    );
   }
   /** errorPlaneEnabled reports whether captured exceptions can actually reach the
    *  error host. False means a DSN was never configured — the documented
@@ -1248,6 +1191,6 @@ var COHORTS = {
  * reformat of one copy is a diff against the other.
  */
 
-export { Analytics, COHORTS, EVENTS, EXCEPTION, FUNNELS, GOALS, PAGEVIEW, PRODUCTS, PRODUCT_PROJECT, VERSION, buildEnvelope, buildSentryEvent, createAnalytics, deriveChannel, digest, dsnForProduct, eventsOf, exceptionEntry, exceptionProperties, fingerprint, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };
+export { Analytics, COHORTS, FUNNELS, GOALS, PRODUCTS, PRODUCT_PROJECT, VERSION, buildEnvelope, buildSentryEvent, createAnalytics, deriveChannel, digest, dsnForProduct, eventsOf, exceptionEntry, exceptionProperties, fingerprint, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map