@hanzo/event 0.3.35 → 0.3.37

package/dist/index.d.cts

@@ -1,292 +1,22 @@
-import { C as Cohort, A as Attribution, S as SentryEvent, D as Dsn, a as CaptureErrorOptions, b as SentryFrame, E as ExceptionEntry, c as SentryLevel, d as ExceptionProperties } from './core-CIhI2R7S.cjs';
-export { e as Analytics, f as AnalyticsConfig, g as EventKind, h as Exception, i as ExceptionFrame, T as Transport, W as WireEvent, j as createAnalytics } from './core-CIhI2R7S.cjs';
-import { FunnelId } from '@hanzo/events';
-export { EVENTS, EXCEPTION, EventName, FUNNELS, FunnelDef, FunnelId, FunnelStep, PAGEVIEW, PRODUCTS, ProductId, eventsOf } from '@hanzo/events';
-
-/** Read the persisted first-touch attribution. */
-declare function getFirstTouch(): Attribution | undefined;
-/** Read persisted cohort dimensions. */
-declare function getCohort(): Cohort | undefined;
-
-declare const VERSION = "0.3.35";
-
-/**
- * parseDsn parses "https://<version>:<hmac>@<host>/v1/event/<projectId>" into its
- * public key + the derived envelope ingest URL. The key (which itself contains a
- * ':') is taken verbatim as the userinfo — we do NOT split it as user:pass. The
- * key rides ?sentry_key= (not the DSN in the body) because that is the credential
- * channel the server trusts AND the only one sendBeacon can carry on unload.
- * Returns null for anything malformed (fail-safe: the caller then stays inert).
- */
-declare function parseDsn(dsn: string | undefined | null): Dsn | null;
-/**
- * framesFromStack parses a browser Error.stack into Sentry frames, OLDEST-FIRST
- * (Sentry orders caller->callee; the crash site is last — matching the server's
- * pickCrashFrame). Handles both V8 ("at fn (file:li:co)") and
- * Firefox/Safari ("fn@file:li:co"). Unparseable lines are skipped.
- */
-declare function framesFromStack(stack: string | undefined): SentryFrame[];
-/** Identity carried onto every error event — the SAME ids analytics uses. */
-interface ErrorIdentity {
-    /** OIDC sub (post-identify) or anon id. NEVER email/PII. */
-    userId?: string;
-    sessionId?: string;
-    product?: string;
-    release?: string;
-    environment?: string;
-}
-interface BuildEventInput {
-    error: unknown;
-    options?: CaptureErrorOptions;
-    identity: ErrorIdentity;
-    capturePII?: boolean;
-    /** Injectable for deterministic tests. */
-    now?: number;
-    id?: string;
-}
-/**
- * buildSentryEvent turns a throwable + identity into a Sentry `event`. The message
- * (the leak surface) is scrubbed client-side; the user is ONLY the stable subject
- * id — never email/username/ip. Level defaults to error, or fatal for uncaught.
- */
-declare function buildSentryEvent(input: BuildEventInput): SentryEvent;
-/**
- * buildEnvelope frames a Sentry event into a newline-delimited envelope:
- *
- *   {"event_id","dsn","sent_at"}\n
- *   {"type":"event","content_type":"application/json","length":N}\n
- *   <event json>\n
- *
- * The item is length-delimited (N = UTF-8 byte length) — the framing the server's
- * parseEnvelope reads first (falling back to newline-delimited otherwise).
- */
-declare function buildEnvelope(event: SentryEvent, dsn: Dsn, sentAt?: string): string;
-
-// Types for anon.js, which is hand-written ES5 rather than TypeScript because
-// The door's hosted tag inlines it VERBATIM and has no compiler.
-// The declarations are here so the bundled client still imports it typed.
-
-/** Mints a time-ordered UUIDv7 (RFC 9562 §5.7) for `now` in epoch milliseconds. */
-declare function hzUuidv7(now?: number): string
-
-/**
- * uuidv7 mints a time-ordered UUIDv7 for `now` (epoch milliseconds).
- *
- * Two ids minted in the same millisecond sort arbitrarily between themselves; ids
- * from different milliseconds sort by time, lexically and numerically alike.
- */
-
-/** The millisecond timestamp a v7 id was minted at — the inverse of uuidv7. */
-declare function uuidv7Time(id: string): number;
-
-/**
- * The product → Sentinel DSN registry.
- *
- * An app declares WHAT it is (`product: 'console'`); this module knows WHERE its
- * errors go. That split is the whole point: no surface has to learn a DSN, carry
- * a build argument, or grow a config file to report errors — declaring the
- * product it already declares is enough.
- *
- * A Sentinel DSN is PUBLIC by construction. It ships inside the client bundle and
- * is readable in devtools on any deployed page, and it grants exactly one
- * capability: submitting new events. It cannot read issues, projects, or any
- * other data. So committing it is not leaking a secret — it is recording a public
- * identifier next to the code that needs it. (Contrast the server-side collector
- * DSN in the `team-analytics-sentry` Secret, which is HMAC-derived and revocable
- * precisely because a server-side credential is NOT public.)
- *
- * Why a literal map instead of deriving `hanzo-${product}`: the projects predate
- * this registry and do not derive cleanly — `site` lives in `hanzo-ai`, not
- * `hanzo-site`. An explicit map is honest about that; a derivation rule plus an
- * exception table is the same data with a trap in it.
- *
- * Projects are org-scoped and named `<org>-<app>`. To add one: create the project
- * (POST /v1/sentinel/projects with X-Org-Id), then add its `dsn` here keyed by the
- * product name the app passes to `createAnalytics`.
- */
-/** PRODUCT_PROJECT maps a `product` to its Sentinel project id. The DSN's KEY is no
- *  longer a per-project secret — it is the ONE org publishable key (below), so a
- *  surface's errors ride the SAME key its events do. The id only names WHICH
- *  project the errors group under, and cloud auto-provisions that project on first
- *  keyed ingest, so a new id needs nothing minted. `site` lives in the `hanzo-ai`
- *  project — an explicit map, because the projects predate this and do not derive
- *  cleanly from the product name. */
-declare const PRODUCT_PROJECT: Readonly<Record<string, string>>;
-/** dsnForProduct builds the product's Sentinel DSN from the caller's resolved
- *  publishable `key` and the product's project — the SAME key the event stream
- *  carries, at the product's envelope endpoint. Returns undefined when there is no
- *  key or no project for the product, leaving the error plane inert rather than
- *  posting into the wrong one. The key is NOT baked here: it is the value the
- *  surface resolved (an explicit `ingestKey`, or the KMS-sourced
- *  NEXT_PUBLIC_PUBLISHABLE_KEY the build inlines) — the ONE live source, never a
- *  literal committed beside the code. */
-declare function dsnForProduct(product: string | undefined, key: string | undefined): string | undefined;
-
-/** redactSecrets removes known secret shapes. Always applied. */
-declare function redactSecrets(s: string): string;
-/** scrubPII masks emails and IPs. Applied unless PII capture is enabled. */
-declare function scrubPII(s: string): string;
-/** scrubText applies the redaction policy to a free-text field. Input is capped
- *  first: unbounded text is a denial-of-service surface, not just a size problem. */
-declare function scrubText(s: string | undefined, capturePII?: boolean): string;
-
-/**
- * digest is a stable 32-hex-char (128-bit) content hash, computed synchronously.
- *
- * Grouping keys are needed on the capture path, which is synchronous and may be
- * running inside an unload handler — SubtleCrypto is async and unavailable on
- * insecure origins, so it cannot be used here. This is FNV-1a run over four seeds
- * and concatenated. It is a GROUPING key, never a security boundary: it is not
- * collision-resistant against a chosen-input adversary, and nothing authorizes or
- * authenticates on it. The product treats the value as opaque.
- */
-declare function digest(s: string): string;
-/**
- * exceptionEntry builds the single `$exception_list` entry for a throwable.
- *
- * One entry, not a chain: `Error.cause` chaining is a distinct fact with its own
- * ordering rules, and emitting it wrongly is worse than not emitting it.
- */
-declare function exceptionEntry(err: unknown, opts: {
-    handled: boolean;
-    id: string;
-}): ExceptionEntry;
-/**
- * fingerprint is the issue grouping key.
- *
- * Keyed on exception type plus each in-app frame's function and source — the same
- * pieces the server-side grouper records ("Exception Type", "Resolved function
- * name", "Source file name"). Deliberately NOT the message: `Loading chunk 3324
- * failed` and `Loading chunk 998 failed` are one bug, and grouping on message is
- * precisely the mistake that made every distinct error string its own event name.
- *
- * Falls back to the type alone when no in-app frame survived, which keeps
- * stackless errors (`Script error.`, cross-origin) in one issue instead of
- * scattering them.
- */
-declare function fingerprint(entry: ExceptionEntry): string;
-/**
- * exceptionProperties builds the full `$exception_*` property bag for one captured
- * throwable — everything Error Tracking reads off the event.
- *
- * The denormalized arrays are ordered like `frames`: last element is the throw
- * site, which is the element the issue list indexes at -1 for its source/function
- * columns.
- */
-declare function exceptionProperties(err: unknown, opts: {
-    handled: boolean;
-    id: string;
-    level?: SentryLevel;
-}): ExceptionProperties;
-
-interface GoalDef {
-    /** Human label shown in Insights. */
-    label: string;
-    /** The event whose occurrence counts as the goal conversion. */
-    event: string;
-    /** The funnel leading to the goal — an id into FUNNELS (see funnels.ts). */
-    funnelId?: FunnelId;
-    /** The ordered event names of `funnelId`, derived — never hand-written. */
-    funnel?: string[];
-    /** Optional property equality filter that qualifies the conversion. */
-    filter?: {
-        property: string;
-        equals: string;
-    };
-}
-declare const GOALS: Record<'signup' | 'sale' | 'upgradeIntent' | 'activation', GoalDef>;
-interface CohortDef {
-    /** The hanzo.events column the cohort dimension maps to. */
-    field: string;
-    label: string;
-}
-declare const COHORTS: Record<'signupWeek' | 'channel' | 'refCode', CohortDef>;
-
-/** parseAttribution reads UTM params + ref/refCode from a query string and pairs
- *  them with the referrer. `search` is a location.search value ("?utm_source=…"). */
-declare function parseAttribution(search: string, referrer: string): Attribution;
-/** deriveChannel classifies the visit: paid | referral | social | organic | direct. */
-declare function deriveChannel(a: Attribution): string;
-/** hostOf extracts a bare lowercase host from a URL; "" when unparseable. */
-declare function hostOf(raw?: string): string;
-/** hasAttribution reports whether anything was captured (so we don't persist an
- *  empty first-touch that would shadow a later real one). */
-declare function hasAttribution(a: Attribution): boolean;
-/** isoWeek returns the ISO-8601 week label, e.g. "2026-W28". */
-declare function isoWeek(d: Date): string;
-
-/**
- * Which org owns a host's telemetry.
- *
- * A surface should not have to LEARN its key. It already knows the domain it is
- * served from, and a domain belongs to exactly one brand, so the key is derivable
- * and asking a surface to carry one is asking it to restate something already
- * true. This module answers `orgOf(location.hostname)` and hands back that org's
- * publishable key, which is what lets a static export report correctly while
- * configuring nothing.
- *
- * This is the SAME question `hanzo.id` answers at runtime for the identity hosts
- * (`pkgs/shared/src/ingest.ts`): one image serves every brand, so the key cannot
- * be a property of the build. It was, and the bill is on record — Lux's, Zoo's,
- * Osage's and Pars' visitors were all filed in HANZO's project, because one
- * build-time key was inlined for every brand. That is the white-label boundary
- * crossed in the direction that shows up latest. The marketing sites carry the
- * identical defect in its other form: each commits its OWN key literal, so the
- * fleet holds N copies of a value with one source, and a site added tomorrow
- * reports nothing until somebody remembers to paste one in.
- *
- * A `pk-` is PUBLISHABLE: it authorizes a write into one org and mints no reading
- * principal. It is readable in devtools on every deployed page that sends an
- * event, so stating it here exposes nothing that serving the page did not. What
- * it does buy is that correct attribution becomes the DEFAULT rather than
- * something each surface opts into.
- *
- * Keyed by ORG, never by host: a brand's facts repeat on every alias it owns
- * (`lux.id`, `id.lux.network`), and a key stated per host would have to be
- * repeated too — so the day someone adds an alias and forgets the key, that host
- * silently stops reporting. Stated once per org, a new alias inherits its brand's
- * key by naming its brand's domain, which is all an alias ever says.
- */
-/** One publishable key per org. */
-type Keyring = Readonly<Record<string, string>>;
-/**
- * Each org's registrable domains. A host matches a domain when it IS that domain
- * or a subdomain of it, so `explore.lux.network` needs no entry of its own.
- *
- * An org absent from this table resolves to undefined, and that is deliberate:
- * `osage`, `pars` and `bootnode` have no project of their own yet, and reporting
- * NOTHING is the honest answer. Filing them under a brand that is not theirs is
- * the defect this module exists to prevent — it is silent, it reads as working,
- * and it is only visible later in someone else's warehouse.
- */
-declare const ORG_DOMAIN: Readonly<Record<string, readonly string[]>>;
-/**
- * Each org's publishable key — the same values `universe`'s `SPA_INGEST_KEYRING`
- * serves to the identity hosts, which are each brand's own insights team token.
- * Add an org here the day its project exists, never before.
- */
-declare const ORG_KEY: Keyring;
-/**
- * The org that owns a host, or undefined when no brand claims it.
- *
- * Longest match wins, so a brand owning both a domain and a subdomain of another
- * brand's cannot be decided by table order. Pure and total.
- */
-declare function orgOf(host: string): string | undefined;
-/**
- * The publishable key for a host, or undefined when there is not exactly one to
- * give.
- *
- * Deliberately WITHOUT a fallback: returning Hanzo's key for an unrecognised host
- * is precisely the defect described above. Undefined is the honest answer and the
- * caller reports nothing.
- *
- * `keyring` is a parameter so the identity runtime — which receives its keyring
- * from `/config.json` because one image serves every brand — resolves through
- * this SAME function rather than a second copy of it.
- */
-declare function keyFor(host: string, keyring?: Keyring): string | undefined;
-/** The key for the page this code is running on; undefined off a browser. */
-declare function keyForPage(keyring?: Keyring): string | undefined;
-
-export { Attribution, COHORTS, CaptureErrorOptions, Cohort, type CohortDef, Dsn, type ErrorIdentity, ExceptionEntry, ExceptionProperties, GOALS, type GoalDef, type Keyring, ORG_DOMAIN, ORG_KEY, PRODUCT_PROJECT, SentryEvent, SentryFrame, SentryLevel, VERSION, buildEnvelope, buildSentryEvent, deriveChannel, digest, dsnForProduct, exceptionEntry, exceptionProperties, fingerprint, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, keyFor, keyForPage, orgOf, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };
+export { Analytics, createAnalytics, VERSION, getCohort, getFirstTouch } from './core';
+export { parseDsn, buildSentryEvent, buildEnvelope, framesFromStack } from './sentry';
+export { uuidv7, uuidv7Time } from './uid';
+export { PRODUCT_PROJECT, dsnForProduct } from './dsn';
+export type { ErrorIdentity } from './sentry';
+export { scrubText, redactSecrets, scrubPII } from './scrub';
+export { EVENTS, EXCEPTION, PAGEVIEW } from './events';
+export { exceptionEntry, exceptionProperties, fingerprint, digest } from './exception';
+export type { EventName } from './events';
+export { GOALS, COHORTS } from './goals';
+export type { GoalDef, CohortDef } from './goals';
+export { FUNNELS, PRODUCTS, eventsOf } from './funnels';
+export type { FunnelDef, FunnelStep, FunnelId, ProductId } from './funnels';
+export { parseAttribution, deriveChannel, hasAttribution, hostOf, isoWeek, } from './attribution';
+export type { AnalyticsConfig, Attribution, CaptureErrorOptions, Cohort, Dsn, EventKind, Exception, ExceptionEntry, ExceptionFrame, ExceptionProperties, SentryEvent, SentryFrame, SentryLevel, Transport, WireEvent, } from './types';
+/** Which org owns a host's telemetry — the resolution that lets a surface report
+ *  correctly while configuring nothing. `keyFor` takes an optional keyring so a
+ *  runtime that receives one (hanzo.id serves every brand from one image) resolves
+ *  through this same function rather than a second copy of it. */
+export { ORG_DOMAIN, ORG_KEY, orgOf, keyFor, keyForPage } from './org';
+export type { Keyring } from './org';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts

@@ -1,292 +1,22 @@
-import { C as Cohort, A as Attribution, S as SentryEvent, D as Dsn, a as CaptureErrorOptions, b as SentryFrame, E as ExceptionEntry, c as SentryLevel, d as ExceptionProperties } from './core-CIhI2R7S.js';
-export { e as Analytics, f as AnalyticsConfig, g as EventKind, h as Exception, i as ExceptionFrame, T as Transport, W as WireEvent, j as createAnalytics } from './core-CIhI2R7S.js';
-import { FunnelId } from '@hanzo/events';
-export { EVENTS, EXCEPTION, EventName, FUNNELS, FunnelDef, FunnelId, FunnelStep, PAGEVIEW, PRODUCTS, ProductId, eventsOf } from '@hanzo/events';
-
-/** Read the persisted first-touch attribution. */
-declare function getFirstTouch(): Attribution | undefined;
-/** Read persisted cohort dimensions. */
-declare function getCohort(): Cohort | undefined;
-
-declare const VERSION = "0.3.35";
-
-/**
- * parseDsn parses "https://<version>:<hmac>@<host>/v1/event/<projectId>" into its
- * public key + the derived envelope ingest URL. The key (which itself contains a
- * ':') is taken verbatim as the userinfo — we do NOT split it as user:pass. The
- * key rides ?sentry_key= (not the DSN in the body) because that is the credential
- * channel the server trusts AND the only one sendBeacon can carry on unload.
- * Returns null for anything malformed (fail-safe: the caller then stays inert).
- */
-declare function parseDsn(dsn: string | undefined | null): Dsn | null;
-/**
- * framesFromStack parses a browser Error.stack into Sentry frames, OLDEST-FIRST
- * (Sentry orders caller->callee; the crash site is last — matching the server's
- * pickCrashFrame). Handles both V8 ("at fn (file:li:co)") and
- * Firefox/Safari ("fn@file:li:co"). Unparseable lines are skipped.
- */
-declare function framesFromStack(stack: string | undefined): SentryFrame[];
-/** Identity carried onto every error event — the SAME ids analytics uses. */
-interface ErrorIdentity {
-    /** OIDC sub (post-identify) or anon id. NEVER email/PII. */
-    userId?: string;
-    sessionId?: string;
-    product?: string;
-    release?: string;
-    environment?: string;
-}
-interface BuildEventInput {
-    error: unknown;
-    options?: CaptureErrorOptions;
-    identity: ErrorIdentity;
-    capturePII?: boolean;
-    /** Injectable for deterministic tests. */
-    now?: number;
-    id?: string;
-}
-/**
- * buildSentryEvent turns a throwable + identity into a Sentry `event`. The message
- * (the leak surface) is scrubbed client-side; the user is ONLY the stable subject
- * id — never email/username/ip. Level defaults to error, or fatal for uncaught.
- */
-declare function buildSentryEvent(input: BuildEventInput): SentryEvent;
-/**
- * buildEnvelope frames a Sentry event into a newline-delimited envelope:
- *
- *   {"event_id","dsn","sent_at"}\n
- *   {"type":"event","content_type":"application/json","length":N}\n
- *   <event json>\n
- *
- * The item is length-delimited (N = UTF-8 byte length) — the framing the server's
- * parseEnvelope reads first (falling back to newline-delimited otherwise).
- */
-declare function buildEnvelope(event: SentryEvent, dsn: Dsn, sentAt?: string): string;
-
-// Types for anon.js, which is hand-written ES5 rather than TypeScript because
-// The door's hosted tag inlines it VERBATIM and has no compiler.
-// The declarations are here so the bundled client still imports it typed.
-
-/** Mints a time-ordered UUIDv7 (RFC 9562 §5.7) for `now` in epoch milliseconds. */
-declare function hzUuidv7(now?: number): string
-
-/**
- * uuidv7 mints a time-ordered UUIDv7 for `now` (epoch milliseconds).
- *
- * Two ids minted in the same millisecond sort arbitrarily between themselves; ids
- * from different milliseconds sort by time, lexically and numerically alike.
- */
-
-/** The millisecond timestamp a v7 id was minted at — the inverse of uuidv7. */
-declare function uuidv7Time(id: string): number;
-
-/**
- * The product → Sentinel DSN registry.
- *
- * An app declares WHAT it is (`product: 'console'`); this module knows WHERE its
- * errors go. That split is the whole point: no surface has to learn a DSN, carry
- * a build argument, or grow a config file to report errors — declaring the
- * product it already declares is enough.
- *
- * A Sentinel DSN is PUBLIC by construction. It ships inside the client bundle and
- * is readable in devtools on any deployed page, and it grants exactly one
- * capability: submitting new events. It cannot read issues, projects, or any
- * other data. So committing it is not leaking a secret — it is recording a public
- * identifier next to the code that needs it. (Contrast the server-side collector
- * DSN in the `team-analytics-sentry` Secret, which is HMAC-derived and revocable
- * precisely because a server-side credential is NOT public.)
- *
- * Why a literal map instead of deriving `hanzo-${product}`: the projects predate
- * this registry and do not derive cleanly — `site` lives in `hanzo-ai`, not
- * `hanzo-site`. An explicit map is honest about that; a derivation rule plus an
- * exception table is the same data with a trap in it.
- *
- * Projects are org-scoped and named `<org>-<app>`. To add one: create the project
- * (POST /v1/sentinel/projects with X-Org-Id), then add its `dsn` here keyed by the
- * product name the app passes to `createAnalytics`.
- */
-/** PRODUCT_PROJECT maps a `product` to its Sentinel project id. The DSN's KEY is no
- *  longer a per-project secret — it is the ONE org publishable key (below), so a
- *  surface's errors ride the SAME key its events do. The id only names WHICH
- *  project the errors group under, and cloud auto-provisions that project on first
- *  keyed ingest, so a new id needs nothing minted. `site` lives in the `hanzo-ai`
- *  project — an explicit map, because the projects predate this and do not derive
- *  cleanly from the product name. */
-declare const PRODUCT_PROJECT: Readonly<Record<string, string>>;
-/** dsnForProduct builds the product's Sentinel DSN from the caller's resolved
- *  publishable `key` and the product's project — the SAME key the event stream
- *  carries, at the product's envelope endpoint. Returns undefined when there is no
- *  key or no project for the product, leaving the error plane inert rather than
- *  posting into the wrong one. The key is NOT baked here: it is the value the
- *  surface resolved (an explicit `ingestKey`, or the KMS-sourced
- *  NEXT_PUBLIC_PUBLISHABLE_KEY the build inlines) — the ONE live source, never a
- *  literal committed beside the code. */
-declare function dsnForProduct(product: string | undefined, key: string | undefined): string | undefined;
-
-/** redactSecrets removes known secret shapes. Always applied. */
-declare function redactSecrets(s: string): string;
-/** scrubPII masks emails and IPs. Applied unless PII capture is enabled. */
-declare function scrubPII(s: string): string;
-/** scrubText applies the redaction policy to a free-text field. Input is capped
- *  first: unbounded text is a denial-of-service surface, not just a size problem. */
-declare function scrubText(s: string | undefined, capturePII?: boolean): string;
-
-/**
- * digest is a stable 32-hex-char (128-bit) content hash, computed synchronously.
- *
- * Grouping keys are needed on the capture path, which is synchronous and may be
- * running inside an unload handler — SubtleCrypto is async and unavailable on
- * insecure origins, so it cannot be used here. This is FNV-1a run over four seeds
- * and concatenated. It is a GROUPING key, never a security boundary: it is not
- * collision-resistant against a chosen-input adversary, and nothing authorizes or
- * authenticates on it. The product treats the value as opaque.
- */
-declare function digest(s: string): string;
-/**
- * exceptionEntry builds the single `$exception_list` entry for a throwable.
- *
- * One entry, not a chain: `Error.cause` chaining is a distinct fact with its own
- * ordering rules, and emitting it wrongly is worse than not emitting it.
- */
-declare function exceptionEntry(err: unknown, opts: {
-    handled: boolean;
-    id: string;
-}): ExceptionEntry;
-/**
- * fingerprint is the issue grouping key.
- *
- * Keyed on exception type plus each in-app frame's function and source — the same
- * pieces the server-side grouper records ("Exception Type", "Resolved function
- * name", "Source file name"). Deliberately NOT the message: `Loading chunk 3324
- * failed` and `Loading chunk 998 failed` are one bug, and grouping on message is
- * precisely the mistake that made every distinct error string its own event name.
- *
- * Falls back to the type alone when no in-app frame survived, which keeps
- * stackless errors (`Script error.`, cross-origin) in one issue instead of
- * scattering them.
- */
-declare function fingerprint(entry: ExceptionEntry): string;
-/**
- * exceptionProperties builds the full `$exception_*` property bag for one captured
- * throwable — everything Error Tracking reads off the event.
- *
- * The denormalized arrays are ordered like `frames`: last element is the throw
- * site, which is the element the issue list indexes at -1 for its source/function
- * columns.
- */
-declare function exceptionProperties(err: unknown, opts: {
-    handled: boolean;
-    id: string;
-    level?: SentryLevel;
-}): ExceptionProperties;
-
-interface GoalDef {
-    /** Human label shown in Insights. */
-    label: string;
-    /** The event whose occurrence counts as the goal conversion. */
-    event: string;
-    /** The funnel leading to the goal — an id into FUNNELS (see funnels.ts). */
-    funnelId?: FunnelId;
-    /** The ordered event names of `funnelId`, derived — never hand-written. */
-    funnel?: string[];
-    /** Optional property equality filter that qualifies the conversion. */
-    filter?: {
-        property: string;
-        equals: string;
-    };
-}
-declare const GOALS: Record<'signup' | 'sale' | 'upgradeIntent' | 'activation', GoalDef>;
-interface CohortDef {
-    /** The hanzo.events column the cohort dimension maps to. */
-    field: string;
-    label: string;
-}
-declare const COHORTS: Record<'signupWeek' | 'channel' | 'refCode', CohortDef>;
-
-/** parseAttribution reads UTM params + ref/refCode from a query string and pairs
- *  them with the referrer. `search` is a location.search value ("?utm_source=…"). */
-declare function parseAttribution(search: string, referrer: string): Attribution;
-/** deriveChannel classifies the visit: paid | referral | social | organic | direct. */
-declare function deriveChannel(a: Attribution): string;
-/** hostOf extracts a bare lowercase host from a URL; "" when unparseable. */
-declare function hostOf(raw?: string): string;
-/** hasAttribution reports whether anything was captured (so we don't persist an
- *  empty first-touch that would shadow a later real one). */
-declare function hasAttribution(a: Attribution): boolean;
-/** isoWeek returns the ISO-8601 week label, e.g. "2026-W28". */
-declare function isoWeek(d: Date): string;
-
-/**
- * Which org owns a host's telemetry.
- *
- * A surface should not have to LEARN its key. It already knows the domain it is
- * served from, and a domain belongs to exactly one brand, so the key is derivable
- * and asking a surface to carry one is asking it to restate something already
- * true. This module answers `orgOf(location.hostname)` and hands back that org's
- * publishable key, which is what lets a static export report correctly while
- * configuring nothing.
- *
- * This is the SAME question `hanzo.id` answers at runtime for the identity hosts
- * (`pkgs/shared/src/ingest.ts`): one image serves every brand, so the key cannot
- * be a property of the build. It was, and the bill is on record — Lux's, Zoo's,
- * Osage's and Pars' visitors were all filed in HANZO's project, because one
- * build-time key was inlined for every brand. That is the white-label boundary
- * crossed in the direction that shows up latest. The marketing sites carry the
- * identical defect in its other form: each commits its OWN key literal, so the
- * fleet holds N copies of a value with one source, and a site added tomorrow
- * reports nothing until somebody remembers to paste one in.
- *
- * A `pk-` is PUBLISHABLE: it authorizes a write into one org and mints no reading
- * principal. It is readable in devtools on every deployed page that sends an
- * event, so stating it here exposes nothing that serving the page did not. What
- * it does buy is that correct attribution becomes the DEFAULT rather than
- * something each surface opts into.
- *
- * Keyed by ORG, never by host: a brand's facts repeat on every alias it owns
- * (`lux.id`, `id.lux.network`), and a key stated per host would have to be
- * repeated too — so the day someone adds an alias and forgets the key, that host
- * silently stops reporting. Stated once per org, a new alias inherits its brand's
- * key by naming its brand's domain, which is all an alias ever says.
- */
-/** One publishable key per org. */
-type Keyring = Readonly<Record<string, string>>;
-/**
- * Each org's registrable domains. A host matches a domain when it IS that domain
- * or a subdomain of it, so `explore.lux.network` needs no entry of its own.
- *
- * An org absent from this table resolves to undefined, and that is deliberate:
- * `osage`, `pars` and `bootnode` have no project of their own yet, and reporting
- * NOTHING is the honest answer. Filing them under a brand that is not theirs is
- * the defect this module exists to prevent — it is silent, it reads as working,
- * and it is only visible later in someone else's warehouse.
- */
-declare const ORG_DOMAIN: Readonly<Record<string, readonly string[]>>;
-/**
- * Each org's publishable key — the same values `universe`'s `SPA_INGEST_KEYRING`
- * serves to the identity hosts, which are each brand's own insights team token.
- * Add an org here the day its project exists, never before.
- */
-declare const ORG_KEY: Keyring;
-/**
- * The org that owns a host, or undefined when no brand claims it.
- *
- * Longest match wins, so a brand owning both a domain and a subdomain of another
- * brand's cannot be decided by table order. Pure and total.
- */
-declare function orgOf(host: string): string | undefined;
-/**
- * The publishable key for a host, or undefined when there is not exactly one to
- * give.
- *
- * Deliberately WITHOUT a fallback: returning Hanzo's key for an unrecognised host
- * is precisely the defect described above. Undefined is the honest answer and the
- * caller reports nothing.
- *
- * `keyring` is a parameter so the identity runtime — which receives its keyring
- * from `/config.json` because one image serves every brand — resolves through
- * this SAME function rather than a second copy of it.
- */
-declare function keyFor(host: string, keyring?: Keyring): string | undefined;
-/** The key for the page this code is running on; undefined off a browser. */
-declare function keyForPage(keyring?: Keyring): string | undefined;
-
-export { Attribution, COHORTS, CaptureErrorOptions, Cohort, type CohortDef, Dsn, type ErrorIdentity, ExceptionEntry, ExceptionProperties, GOALS, type GoalDef, type Keyring, ORG_DOMAIN, ORG_KEY, PRODUCT_PROJECT, SentryEvent, SentryFrame, SentryLevel, VERSION, buildEnvelope, buildSentryEvent, deriveChannel, digest, dsnForProduct, exceptionEntry, exceptionProperties, fingerprint, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, keyFor, keyForPage, orgOf, parseAttribution, parseDsn, redactSecrets, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };
+export { Analytics, createAnalytics, VERSION, getCohort, getFirstTouch } from './core';
+export { parseDsn, buildSentryEvent, buildEnvelope, framesFromStack } from './sentry';
+export { uuidv7, uuidv7Time } from './uid';
+export { PRODUCT_PROJECT, dsnForProduct } from './dsn';
+export type { ErrorIdentity } from './sentry';
+export { scrubText, redactSecrets, scrubPII } from './scrub';
+export { EVENTS, EXCEPTION, PAGEVIEW } from './events';
+export { exceptionEntry, exceptionProperties, fingerprint, digest } from './exception';
+export type { EventName } from './events';
+export { GOALS, COHORTS } from './goals';
+export type { GoalDef, CohortDef } from './goals';
+export { FUNNELS, PRODUCTS, eventsOf } from './funnels';
+export type { FunnelDef, FunnelStep, FunnelId, ProductId } from './funnels';
+export { parseAttribution, deriveChannel, hasAttribution, hostOf, isoWeek, } from './attribution';
+export type { AnalyticsConfig, Attribution, CaptureErrorOptions, Cohort, Dsn, EventKind, Exception, ExceptionEntry, ExceptionFrame, ExceptionProperties, SentryEvent, SentryFrame, SentryLevel, Transport, WireEvent, } from './types';
+/** Which org owns a host's telemetry — the resolution that lets a surface report
+ *  correctly while configuring nothing. `keyFor` takes an optional keyring so a
+ *  runtime that receives one (hanzo.id serves every brand from one image) resolves
+ *  through this same function rather than a second copy of it. */
+export { ORG_DOMAIN, ORG_KEY, orgOf, keyFor, keyForPage } from './org';
+export type { Keyring } from './org';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAA;AACtF,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AACrF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AACtD,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACtF,YAAY,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACxC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACvD,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAC3E,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,MAAM,EACN,OAAO,GACR,MAAM,eAAe,CAAA;AACtB,YAAY,EACV,eAAe,EACf,WAAW,EACX,mBAAmB,EACnB,MAAM,EACN,GAAG,EACH,SAAS,EACT,SAAS,EACT,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,WAAW,EACX,WAAW,EACX,WAAW,EACX,SAAS,EACT,SAAS,GACV,MAAM,SAAS,CAAA;AAEhB;;;kEAGkE;AAClE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AACtE,YAAY,EAAE,OAAO,EAAE,MAAM,OAAO,CAAA"}