@hanzo/event 0.3.36 → 0.3.37

package/dist/scrub.d.ts

@@ -0,0 +1,20 @@
+/** redactCredentialParams removes the VALUE of any query parameter whose NAME
+ *  says it carries a credential, leaving the name so the URL still reads. */
+export declare function redactCredentialParams(s: string): string;
+/** redactSecrets removes known secret shapes. Always applied. */
+export declare function redactSecrets(s: string): string;
+/** scrubPII masks emails and IPs. Applied unless PII capture is enabled. */
+export declare function scrubPII(s: string): string;
+/** Longest free-text field this module will scrub. Every pattern here is a regex
+ *  run synchronously on the main thread, and the input is attacker-influenced —
+ *  `throw new Error(await res.text())` against an HTML error page is a one-line
+ *  way to hand us 128KB. Bounding the INPUT bounds the work regardless of which
+ *  pattern is pathological. 8KB is far beyond any real error message. */
+export declare const MAX_SCRUB_LEN = 8192;
+/** truncate caps a string at MAX_SCRUB_LEN, marking that it was cut so a reader
+ *  never mistakes a truncated message for the whole one. */
+export declare function truncate(s: string, max?: number): string;
+/** scrubText applies the redaction policy to a free-text field. Input is capped
+ *  first: unbounded text is a denial-of-service surface, not just a size problem. */
+export declare function scrubText(s: string | undefined, capturePII?: boolean): string;
+//# sourceMappingURL=scrub.d.ts.map

package/dist/scrub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub.d.ts","sourceRoot":"","sources":["../src/scrub.ts"],"names":[],"mappings":"AA8GA;6EAC6E;AAC7E,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAI/C;AAED,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAK1C;AAED;;;;yEAIyE;AACzE,eAAO,MAAM,aAAa,OAAO,CAAA;AAEjC;4DAC4D;AAC5D,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,SAAgB,GAAG,MAAM,CAE/D;AAED;qFACqF;AACrF,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,EAAE,UAAU,UAAQ,GAAG,MAAM,CAM3E"}

package/dist/sentry.d.ts

@@ -0,0 +1,62 @@
+import type { CaptureErrorOptions, Dsn, SentryEvent, SentryFrame } from './types';
+/** eventId mints a 32-hex-char id (no dashes) — the Sentry event_id shape. Same
+ *  minter as everything else, just formatted for Sentry's wire. */
+export declare function eventId(): string;
+/**
+ * parseDsn parses "https://<version>:<hmac>@<host>/v1/event/<projectId>" into its
+ * public key + the derived envelope ingest URL. The key (which itself contains a
+ * ':') is taken verbatim as the userinfo — we do NOT split it as user:pass. The
+ * key rides ?sentry_key= (not the DSN in the body) because that is the credential
+ * channel the server trusts AND the only one sendBeacon can carry on unload.
+ * Returns null for anything malformed (fail-safe: the caller then stays inert).
+ */
+export declare function parseDsn(dsn: string | undefined | null): Dsn | null;
+/**
+ * framesFromStack parses a browser Error.stack into Sentry frames, OLDEST-FIRST
+ * (Sentry orders caller->callee; the crash site is last — matching the server's
+ * pickCrashFrame). Handles both V8 ("at fn (file:li:co)") and
+ * Firefox/Safari ("fn@file:li:co"). Unparseable lines are skipped.
+ */
+export declare function framesFromStack(stack: string | undefined): SentryFrame[];
+/** normalizeError coerces an unknown throwable into {name, message, stack}. */
+export declare function normalizeError(err: unknown): {
+    name: string;
+    message: string;
+    stack?: string;
+};
+/** Identity carried onto every error event — the SAME ids analytics uses. */
+export interface ErrorIdentity {
+    /** OIDC sub (post-identify) or anon id. NEVER email/PII. */
+    userId?: string;
+    sessionId?: string;
+    product?: string;
+    release?: string;
+    environment?: string;
+}
+export interface BuildEventInput {
+    error: unknown;
+    options?: CaptureErrorOptions;
+    identity: ErrorIdentity;
+    capturePII?: boolean;
+    /** Injectable for deterministic tests. */
+    now?: number;
+    id?: string;
+}
+/**
+ * buildSentryEvent turns a throwable + identity into a Sentry `event`. The message
+ * (the leak surface) is scrubbed client-side; the user is ONLY the stable subject
+ * id — never email/username/ip. Level defaults to error, or fatal for uncaught.
+ */
+export declare function buildSentryEvent(input: BuildEventInput): SentryEvent;
+/**
+ * buildEnvelope frames a Sentry event into a newline-delimited envelope:
+ *
+ *   {"event_id","dsn","sent_at"}\n
+ *   {"type":"event","content_type":"application/json","length":N}\n
+ *   <event json>\n
+ *
+ * The item is length-delimited (N = UTF-8 byte length) — the framing the server's
+ * parseEnvelope reads first (falling back to newline-delimited otherwise).
+ */
+export declare function buildEnvelope(event: SentryEvent, dsn: Dsn, sentAt?: string): string;
+//# sourceMappingURL=sentry.d.ts.map

package/dist/sentry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry.d.ts","sourceRoot":"","sources":["../src/sentry.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,mBAAmB,EACnB,GAAG,EACH,WAAW,EACX,WAAW,EAEZ,MAAM,SAAS,CAAA;AAahB;mEACmE;AACnE,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAUD;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,GAAG,GAAG,IAAI,CAqBnE;AAiBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,EAAE,CAkDxE;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAoB9F;AAsBD,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,CAAC,EAAE,mBAAmB,CAAA;IAC7B,QAAQ,EAAE,aAAa,CAAA;IACvB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,EAAE,CAAC,EAAE,MAAM,CAAA;CACZ;AAiBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,GAAG,WAAW,CAqDpE;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAanF"}

package/dist/stack.d.ts

@@ -0,0 +1,25 @@
+/** One parsed stack frame. */
+export interface Frame {
+    filename?: string;
+    function?: string;
+    abs_path?: string;
+    lineno?: number;
+    colno?: number;
+    /** The app's own code, as opposed to vendor/runtime — the useful default filter. */
+    in_app?: boolean;
+}
+/**
+ * framesFromStack parses a browser Error.stack into frames, OLDEST-FIRST (caller
+ * → callee, so the crash site is LAST). Handles both V8 ("at fn (file:li:co)")
+ * and Firefox/Safari ("fn@file:li:co"). Unparseable lines are skipped.
+ */
+export declare function framesFromStack(stack: string | undefined): Frame[];
+/** normalizeError coerces an unknown throwable into {name, message, stack}.
+ *  TOTAL: it returns a usable record for ANY input, including an object
+ *  engineered to throw on property access. */
+export declare function normalizeError(err: unknown): {
+    name: string;
+    message: string;
+    stack?: string;
+};
+//# sourceMappingURL=stack.d.ts.map

package/dist/stack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack.d.ts","sourceRoot":"","sources":["../src/stack.ts"],"names":[],"mappings":"AAkBA,8BAA8B;AAC9B,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oFAAoF;IACpF,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAiBD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,EAAE,CAkDlE;AAwBD;;8CAE8C;AAC9C,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAiB9F"}

package/dist/storage.d.ts

@@ -0,0 +1,32 @@
+import type { Attribution, Cohort } from './types';
+/**
+ * Stable anonymous id, shared by every *.hanzo.ai surface AND by every Hanzo
+ * client on the page — the npm client and the hosted tag both run the one
+ * chain in ./anon.js, so which snippet a surface loaded no longer decides who the
+ * visitor is.
+ *
+ * It lives in a first-party cookie on the registrable domain because localStorage
+ * is ORIGIN-scoped: docs, cloud and console each minted their own id for the same
+ * person, so one marketing → docs → signup → checkout journey arrived as several
+ * strangers — 463 anonymous identities carried 545 events in a week, about 1.2
+ * events each.
+ */
+export declare function anonId(): string | undefined;
+/**
+ * Current session id, rotated after SESSION_TTL_MS of inactivity.
+ *
+ * Minted at `now`, so the v7 timestamp the id carries IS the session's start
+ * instant — which is what the session rollups partition and order on. Passing the
+ * caller's clock rather than reading Date.now() again keeps the id's embedded time
+ * and the recorded `last` from disagreeing.
+ */
+export declare function sessionId(now?: number): string | undefined;
+/** Read the persisted first-touch attribution. */
+export declare function getFirstTouch(): Attribution | undefined;
+/** Persist first-touch attribution ONCE — never overwrite an existing record. */
+export declare function setFirstTouchOnce(a: Attribution): Attribution;
+/** Read persisted cohort dimensions. */
+export declare function getCohort(): Cohort | undefined;
+/** Merge + persist cohort dimensions (signupWeek set once). */
+export declare function mergeCohort(patch: Cohort): Cohort;
+//# sourceMappingURL=storage.d.ts.map

package/dist/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAqBlD;;;;;;;;;;;GAWG;AACH,wBAAgB,MAAM,IAAI,MAAM,GAAG,SAAS,CAE3C;AAOD;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,GAAG,SAAa,GAAG,MAAM,GAAG,SAAS,CAgB9D;AAED,kDAAkD;AAClD,wBAAgB,aAAa,IAAI,WAAW,GAAG,SAAS,CASvD;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,WAAW,GAAG,WAAW,CAM7D;AAED,wCAAwC;AACxC,wBAAgB,SAAS,IAAI,MAAM,GAAG,SAAS,CAS9C;AAED,+DAA+D;AAC/D,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUjD"}

package/dist/{core-CIhI2R7S.d.cts → types.d.ts}

@@ -2,12 +2,12 @@
  *  breadcrumb an exception leaves on the event stream (Cloud stamps
  *  event_type='error' for the warehouse, GET /v1/errors). It does NOT reach the
  *  Sentry dashboard — the envelope on the error plane does that. */
-type EventKind = 'pageview' | 'event' | 'identify' | 'group' | 'error';
+export type EventKind = 'pageview' | 'event' | 'identify' | 'group' | 'error';
 /** A captured exception as it rides the EVENT STREAM — Cloud folds it into
  *  properties.$exception for the warehouse. The richer copy (parsed stack frames,
  *  grouping, release) travels on the error plane as a Sentry envelope; see
  *  AnalyticsConfig.dsn. */
-interface Exception {
+export interface Exception {
     /** Constructor/class name, e.g. "TypeError". */
     type?: string;
     /** The error message. */
@@ -21,7 +21,7 @@ interface Exception {
 /** One stack frame as Error Tracking renders it. The key names are the product's
  *  POST-symbolication vocabulary (`mangled_name`/`source`/`line`/`column`), which
  *  is what the issue view reads straight off `$exception_list`. */
-interface ExceptionFrame {
+export interface ExceptionFrame {
     /** "<hash>/<part>" — stable per code location; the frame's identity. */
     raw_id: string;
     /** The function name as it appears in the shipped bundle. */
@@ -40,7 +40,7 @@ interface ExceptionFrame {
     module?: string | null;
 }
 /** One exception in `$exception_list`. */
-interface ExceptionEntry {
+export interface ExceptionEntry {
     id: string;
     type: string;
     value: string;
@@ -56,7 +56,7 @@ interface ExceptionEntry {
     };
 }
 /** The `$exception_*` property bag Error Tracking reads off a `$exception` event. */
-interface ExceptionProperties {
+export interface ExceptionProperties {
     $exception_list: ExceptionEntry[];
     /** Issue grouping key. An event without one is dropped by the issue query. */
     $exception_fingerprint: string;
@@ -74,7 +74,7 @@ interface ExceptionProperties {
     $exception_functions: string[];
 }
 /** First-touch marketing attribution, parsed once and persisted. */
-interface Attribution {
+export interface Attribution {
     utm: {
         source?: string;
         medium?: string;
@@ -88,7 +88,7 @@ interface Attribution {
     channel?: string;
 }
 /** Cohort dimensions carried on every event once known (see goals.ts COHORTS). */
-interface Cohort {
+export interface Cohort {
     /** ISO week the person first signed up, e.g. "2026-W28". */
     signupWeek?: string;
     channel?: string;
@@ -96,9 +96,9 @@ interface Cohort {
 }
 /** One event as sent on the wire — the canonical Hanzo Cloud event. Maps 1:1 to
  *  the cloud `CaptureEvent` (camelCase JSON keys); a batch of these is POSTed to
- *  the ONE front door `/v1/event` as `{ batch: [WireEvent, …] }`. tenant/org is
+ *  the ONE entry point `/v1/event` as `{ batch: [WireEvent, …] }`. tenant/org is
  *  NEVER a field here — the server stamps it from the validated session/key. */
-interface WireEvent {
+export interface WireEvent {
     messageId: string;
     type: EventKind;
     event?: string;
@@ -132,7 +132,7 @@ interface WireEvent {
  *  (keepalive) and sendBeacon. A bearer JWT or a publishable pk_ key rides
  *  Authorization on fetch; on a headerless beacon a publishable key rides the
  *  ?ingest_key query. */
-interface Transport {
+export interface Transport {
     /** Durable POST usable during page unload (fetch keepalive / sendBeacon).
      *  `contentType` names the FETCH request's Content-Type — it defaults to
      *  application/json, and the error plane sets application/x-sentry-envelope. A
@@ -147,7 +147,7 @@ interface Transport {
         debug?: boolean;
     }): void;
 }
-interface AnalyticsConfig {
+export interface AnalyticsConfig {
     /** Cloud base URL. Defaults to "https://api.hanzo.ai" (the one edge). Set to
      *  same-origin ("") for cookie-auth apps served behind the same edge
      *  (console/admin/chat), so the browser rides the session cookie. */
@@ -158,7 +158,7 @@ interface AnalyticsConfig {
      *  (the client then relies on same-origin credentials). */
     getToken?: () => string | undefined | null;
     /** Publishable ingest key (pk-…). When set, the client attributes writes to the
-     *  ONE front door `/v1/event` with this key instead of a bearer/cookie: it rides
+     *  ONE entry point `/v1/event` with this key instead of a bearer/cookie: it rides
      *  Authorization: Bearer pk-… on fetch and ?ingest_key=pk-… on a headerless
      *  page-unload beacon, so ANONYMOUS traffic is attributed and unload beacons work
      *  without a bearer. The key is write-only — it attributes a write and never mints
@@ -174,7 +174,7 @@ interface AnalyticsConfig {
      *
      *  A surface with no key at all still reports for whoever is SIGNED IN (the
      *  session credential attributes them), and drops every logged-out visitor: the
-     *  door refuses an unattributable write rather than filing it where its owner
+     *  edge refuses an unattributable write rather than filing it where its owner
      *  cannot read it. That failure is invisible from the page, which is why the key
      *  belongs in the env next to the DSN and not in a checklist.
      *
@@ -211,8 +211,8 @@ interface AnalyticsConfig {
      *  client-side before anything leaves the device (the server scrubs again). */
     capturePII?: boolean;
 }
-type SentryLevel = 'fatal' | 'error' | 'warning' | 'info' | 'debug';
-interface SentryFrame {
+export type SentryLevel = 'fatal' | 'error' | 'warning' | 'info' | 'debug';
+export interface SentryFrame {
     filename?: string;
     function?: string;
     module?: string;
@@ -221,7 +221,7 @@ interface SentryFrame {
     colno?: number;
     in_app?: boolean;
 }
-interface SentryExceptionValue {
+export interface SentryExceptionValue {
     type?: string;
     value?: string;
     module?: string;
@@ -229,11 +229,11 @@ interface SentryExceptionValue {
         frames: SentryFrame[];
     };
 }
-interface SentryUser {
+export interface SentryUser {
     /** Stable subject id (OIDC sub / anon id). NEVER email/username/ip. */
     id?: string;
 }
-interface SentryEvent {
+export interface SentryEvent {
     event_id: string;
     timestamp: number;
     platform: 'javascript';
@@ -256,7 +256,7 @@ interface SentryEvent {
     };
 }
 /** Parsed DSN — the public key + the derived ingest URL. */
-interface Dsn {
+export interface Dsn {
     /** "<version>:<hmac>" public key presented via ?sentry_key= (beacon-safe). */
     publicKey: string;
     /** Ingest origin, e.g. "https://sentry.hanzo.ai". */
@@ -271,7 +271,7 @@ interface Dsn {
     ingestUrl: string;
 }
 /** Options for Analytics.captureError. */
-interface CaptureErrorOptions {
+export interface CaptureErrorOptions {
     /** false => uncaught (window.onerror / unhandledrejection / render crash). */
     handled?: boolean;
     /** Severity + free-form context; merged into the event's tags. */
@@ -279,102 +279,4 @@ interface CaptureErrorOptions {
     /** Override the event level (default: error, or fatal when handled === false). */
     level?: SentryLevel;
 }
-
-declare class Analytics {
-    private cfg;
-    private transport;
-    private queue;
-    private timer;
-    private personId?;
-    private attribution;
-    private cohort;
-    private started;
-    /** The view pageview() last counted — path + location. */
-    private counted?;
-    /** Parsed error-plane DSN, or null when the plane is inert. */
-    private dsn;
-    /** Guards against an error thrown *inside* the error path re-entering it. */
-    private reentrant;
-    constructor(config: AnalyticsConfig);
-    /** adopt gives this client a credential it does not have. The key belongs to
-     *  the stream, not to whichever caller happened to ask for the handle first,
-     *  so a later caller carrying one hands it over. The error plane derives from
-     *  the key, so it comes up here too when it was inert for want of one.
-     *  Present fields are never overwritten: the first caller's key stays. */
-    adopt(config: AnalyticsConfig): void;
-    /** errorPlaneEnabled reports whether captured exceptions can actually reach the
-     *  error host. False means a DSN was never configured — the documented
-     *  fail-safe. Exposed so an app (or a test) can assert its wiring instead of
-     *  discovering months later that nothing was ever reported. */
-    get errorPlaneEnabled(): boolean;
-    /** errorIngestUrl is the fully-derived envelope endpoint, or undefined when the
-     *  plane is inert. Diagnostics only. */
-    get errorIngestUrl(): string | undefined;
-    /** init is idempotent and browser-only for its side effects: capture first-touch
-     *  attribution, hydrate cohort, register the unload flush, and (unless opted out)
-     *  auto-capture unhandled errors. Safe to call from a React effect on every
-     *  render. */
-    init(): void;
-    /** identify binds the current visitor to a stable person id (post-login). */
-    identify(personId: string, traits?: Record<string, unknown>): void;
-    /** group associates the visitor with an org/team (analytics grouping, not the
-     *  server tenant — the server still derives tenant from the session). */
-    group(groupId: string, traits?: Record<string, unknown>): void;
-    /** pageview records a $pageview for the current (or given) location, once per
-     *  view. A view is the path plus the full location, so a query or hash change
-     *  is a new one and a repeat call for the same place is not. */
-    pageview(path?: string, properties?: Record<string, unknown>): void;
-    /** capture records a named product event with optional properties. Commerce
-     *  fields (productId/quantity/revenue/currency) may be passed for order events. */
-    capture(event: string, properties?: Record<string, unknown>, commerce?: Pick<WireEvent, 'productId' | 'quantity' | 'revenue' | 'currency'>): void;
-    /** captureError reports a caught error, an unhandled rejection, a React render
-     *  error, or a manual report to BOTH planes, from one call:
-     *
-     *    - the ERROR PLANE — a real Sentry envelope to the DSN host. This is the one
-     *      that produces an issue in sentry.hanzo.ai (grouping, stack frames, AST).
-     *      Inert when no DSN is configured.
-     *    - the EVENT STREAM — a `type:'error'` row in the cloud event warehouse, so
-     *      an error stays correlated with the session's pageviews for product
-     *      analysis (readable via GET /v1/errors).
-     *
-     *  Both carry the SAME session and subject id, so an error and the pageview
-     *  before it join up. Never throws back into the app; errors are higher-signal
-     *  than pageviews, so both planes flush promptly (a crash may unload the page
-     *  moments later). */
-    captureError(err: unknown, context?: CaptureErrorOptions): void;
-    /** setCohort persists cohort dimensions (e.g. signupWeek at signup) so they ride
-     *  every subsequent event. */
-    setCohort(patch: Cohort): void;
-    /** flush drains the buffer to the server as ONE batch through the ONE ingest
-     *  front door POST /v1/event, body { batch: [Event…] }. beacon=true selects the
-     *  unload-safe transport. Auth is orthogonal to the wire:
-     *
-     *    • publishable key set → rides ?ingest_key=pk-… on both sends, keeping each
-     *      a CORS-simple request that any origin may send.
-     *    • else a bearer JWT rides Authorization (fetch only — sendBeacon cannot
-     *      carry a header, so token apps fall back to keepalive fetch on unload).
-     *    • else a cookie app rides same-origin credentials (beacon carries the
-     *      cookie fine).
-     */
-    flush(beacon?: boolean): void;
-    /** sendError frames one exception as a Sentry envelope and posts it to the DSN's
-     *  ingest URL. The DSN's own key rides ?sentry_key= (the credential channel the
-     *  server trusts, and the only one a headerless beacon can carry), so NO bearer
-     *  or publishable key is attached here — the two planes authenticate
-     *  independently. Errors are sent one envelope per event, immediately: batching
-     *  a crash report is how you lose it. */
-    private sendError;
-    /** errorIdentity is the SAME identity the event stream stamps — the OIDC subject
-     *  once identify() has run, else the anon id. Never email/PII. */
-    private errorIdentity;
-    private enqueue;
-    private build;
-    private schedule;
-    private clearTimer;
-}
-/** createAnalytics returns the client for a stream, building it on first ask.
- *  This is the ONE way to get a client: `new Analytics` bypasses the registry
- *  and is for tests and for a deliberately separate instance. */
-declare function createAnalytics(config: AnalyticsConfig): Analytics;
-
-export { type Attribution as A, type Cohort as C, type Dsn as D, type ExceptionEntry as E, type SentryEvent as S, type Transport as T, type WireEvent as W, type CaptureErrorOptions as a, type SentryFrame as b, type SentryLevel as c, type ExceptionProperties as d, Analytics as e, type AnalyticsConfig as f, type EventKind as g, type Exception as h, type ExceptionFrame as i, createAnalytics as j };
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA;;;oEAGoE;AACpE,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,CAAA;AAE7E;;;2BAG2B;AAC3B,MAAM,WAAW,SAAS;IACxB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;wEACoE;IACpE,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED;;mEAEmE;AACnE,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAA;IACd,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAA;IACpB,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,kFAAkF;IAClF,MAAM,EAAE,OAAO,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,QAAQ,EAAE,OAAO,CAAA;IACjB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,0CAA0C;AAC1C,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE;QACV,IAAI,EAAE,SAAS,CAAA;QACf,OAAO,EAAE,OAAO,CAAA;QAChB,SAAS,CAAC,EAAE,OAAO,CAAA;KACpB,CAAA;IACD,+EAA+E;IAC/E,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,MAAM,EAAE,cAAc,EAAE,CAAA;KAAE,CAAA;CAC5D;AAED,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,cAAc,EAAE,CAAA;IACjC,8EAA8E;IAC9E,sBAAsB,EAAE,MAAM,CAAA;IAC9B,6BAA6B,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,EAAE,CAAA;IACnD,eAAe,EAAE,MAAM,CAAA;IACvB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,gBAAgB,EAAE,WAAW,CAAA;IAC7B,kBAAkB,EAAE,OAAO,CAAA;IAC3B,oBAAoB,EAAE,OAAO,CAAA;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,kBAAkB,EAAE,MAAM,EAAE,CAAA;IAC5B,oBAAoB,EAAE,MAAM,EAAE,CAAA;CAC/B;AAED,oEAAoE;AACpE,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE;QACH,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,CAAA;IACD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,kFAAkF;AAClF,MAAM,WAAW,MAAM;IACrB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;gFAGgF;AAChF,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,SAAS,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;6EAEyE;IACzE,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;yBAGyB;AACzB,MAAM,WAAW,SAAS;IACxB;;;;sEAIkE;IAClE,IAAI,CACF,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;QACJ,MAAM,EAAE,OAAO,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,0EAA0E;QAC1E,KAAK,CAAC,EAAE,OAAO,CAAA;KAChB,GACA,IAAI,CAAA;CACR;AAED,MAAM,WAAW,eAAe;IAC9B;;yEAEqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAA;IACf;+DAC2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;IAC1C;;;;;;;;;;;;;;;;;;;;;;6EAsByE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gCAAgC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;+DAG2D;IAC3D,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,sCAAsC;IACtC,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,qBAAqB;IACrB,KAAK,CAAC,EAAE,OAAO,CAAA;IAIf;;;;;wEAKoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;mFAC+E;IAC/E,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAKD,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAA;AAE1E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE;QAAE,MAAM,EAAE,WAAW,EAAE,CAAA;KAAE,CAAA;CACvC;AAED,MAAM,WAAW,UAAU;IACzB,uEAAuE;IACvE,EAAE,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,YAAY,CAAA;IACtB,KAAK,EAAE,WAAW,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE;QAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;KAAE,CAAA;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAClD,GAAG,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CACxC;AAED,4DAA4D;AAC5D,MAAM,WAAW,GAAG;IAClB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAA;IACjB,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAA;IACd,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB;;+CAE2C;IAC3C,IAAI,EAAE,MAAM,CAAA;IACZ,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,0CAA0C;AAC1C,MAAM,WAAW,mBAAmB;IAClC,8EAA8E;IAC9E,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,kFAAkF;IAClF,KAAK,CAAC,EAAE,WAAW,CAAA;CACpB"}

package/dist/uid.d.ts

@@ -0,0 +1,10 @@
+/**
+ * uuidv7 mints a time-ordered UUIDv7 for `now` (epoch milliseconds).
+ *
+ * Two ids minted in the same millisecond sort arbitrarily between themselves; ids
+ * from different milliseconds sort by time, lexically and numerically alike.
+ */
+export { hzUuidv7 as uuidv7 } from './anon.js';
+/** The millisecond timestamp a v7 id was minted at — the inverse of uuidv7. */
+export declare function uuidv7Time(id: string): number;
+//# sourceMappingURL=uid.d.ts.map

package/dist/uid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uid.d.ts","sourceRoot":"","sources":["../src/uid.ts"],"names":[],"mappings":"AAgCA;;;;;GAKG;AACH,OAAO,EAAE,QAAQ,IAAI,MAAM,EAAE,MAAM,WAAW,CAAA;AAE9C,+EAA+E;AAC/E,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE7C"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const VERSION = "0.3.37";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,OAAO,WAAW,CAAA"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hanzo/event",
-  "version": "0.3.36",
-  "description": "Hanzo Event \u2014 the ONE telemetry client. Emits pageview/event/identify/group to the Hanzo Cloud event stream (POST /v1/event), AND reports errors to Sentry as real Sentry envelopes \u2014 the error plane needs a DSN, without one nothing reaches Sentry. First-touch attribution, beacon-on-unload, auto error capture, client-side secret/PII scrubbing, a shared event + goal vocabulary. Subsumes @sentry.",
+  "version": "0.3.37",
+  "description": "Hanzo Event — the ONE telemetry client. Emits pageview/event/identify/group to the Hanzo Cloud event stream (POST /v1/event), AND reports errors to Sentry as real Sentry envelopes — the error plane needs a DSN, without one nothing reaches Sentry. First-touch attribution, beacon-on-unload, auto error capture, client-side secret/PII scrubbing, a shared event + goal vocabulary. Subsumes @sentry.",
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
     "access": "public",
@@ -36,13 +36,6 @@
     "funnel",
     "hanzo"
   ],
-  "scripts": {
-    "build": "tsup",
-    "dev": "tsup --watch",
-    "test": "vitest run",
-    "typecheck": "tsgo --noEmit -p tsconfig.json",
-    "clean": "rm -rf dist"
-  },
   "exports": {
     ".": {
       "import": {
@@ -78,10 +71,17 @@
     "@types/react": "19.2.14",
     "react": "19.2.4",
     "tsup": "^8.5.1",
-    "typescript": "^5.9.3",
+    "typescript": "^7.0.2",
     "vitest": "^4.1.0"
   },
   "dependencies": {
     "@hanzo/events": "^0.2.1"
+  },
+  "scripts": {
+    "build": "tsup && tsc --emitDeclarationOnly --declaration --outDir dist && node ../../scripts/dts.mjs",
+    "dev": "tsup --watch",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "clean": "rm -rf dist"
   }
-}
+}

package/src/anon.d.ts

@@ -1,5 +1,5 @@
 // Types for anon.js, which is hand-written ES5 rather than TypeScript because
-// The door's hosted tag inlines it VERBATIM and has no compiler.
+// The hosted tag inlines it VERBATIM and has no compiler.
 // The declarations are here so the bundled client still imports it typed.
 
 /** Mints a time-ordered UUIDv7 (RFC 9562 §5.7) for `now` in epoch milliseconds. */

package/src/anon.js

@@ -7,15 +7,15 @@
  *
  * The two call sites:
  *   1. src/storage.ts        — the bundled npm client; IMPORTS this file.
- *   2. hanzoai/cloud apps/analytics/tag.js — the tag the door hosts at
+ *   2. hanzoai/cloud apps/analytics/tag.js — the tag served at
  *      /v1/event.js; vendors this file and its tag.go serves the marked region
- *      with the tag as one asset, so the door holds no second copy either.
+ *      with the tag as one asset, so cloud holds no second copy either.
  *
  * (2) has no bundler and cannot import anything, which is why the chain lives in a
  * file that is plain ES5 rather than in a .ts: the region between the BEGIN and END
  * markers is COPIED VERBATIM. Keep it ES5, dependency-free, `hz`-prefixed (it is
  * spliced into other people's scopes) and unformatted — a reformat here is a diff
- * against the vendored copy. After editing, resync the door:
+ * against the vendored copy. After editing, resync that copy:
  *
  *   curl -fsSL https://unpkg.com/@hanzo/event/src/anon.js -o apps/analytics/anon.js
  */

package/src/anon.test.ts

@@ -7,7 +7,7 @@
 //
 // The behavioural contract is proven where the chain runs: storage.test.ts. This
 // file proves the region is SPLICEABLE and that it ships, which is what lets the
-// door vendor it instead of writing a second one.
+// cloud vendor it instead of writing a second one.
 
 import { describe, expect, it } from 'vitest'
 import { readFileSync } from 'node:fs'
@@ -33,7 +33,7 @@ const region = (src: string, what: string): string => src.slice(...span(src, wha
 const ANON = read('./anon.js')
 
 describe('the shared anon chain', () => {
-  it('is marked, so the door can splice exactly it', () => {
+  it('is marked, so cloud can splice exactly it', () => {
     // cloud's tag.go slices between these markers and PANICS if it cannot find
     // them, so losing a marker ships a tag whose every event carries an undefined
     // identity. To change the chain, edit this file; never patch a copy.
@@ -50,7 +50,7 @@ describe('the shared anon chain', () => {
     }
   })
 
-  it('ships in the published package, for the door to vendor', () => {
+  it('ships in the published package, for cloud to vendor', () => {
     // hanzoai/cloud vendors this file whole and its tag.go serves the region with
     // the tag as one asset, so the second call site holds no copy of its own.
     const pkg = JSON.parse(read('../package.json')) as { files: string[] }

package/src/core.test.ts

@@ -68,7 +68,7 @@ class FakeTransport implements Transport {
 }
 
 let tx: FakeTransport
-// Default to same-origin (host:'') so path assertions read the bare /v1/event door;
+// Default to same-origin (host:'') so path assertions read the bare /v1/event path;
 // tests that care about the edge host pass it explicitly.
 // `test-app` is deliberately NOT a product in the DSN registry (src/dsn.ts), so
 // the default client here has no error plane and these tests exercise the client
@@ -91,7 +91,7 @@ describe('Analytics capture', () => {
     a.flush()
     expect(tx.sent).toHaveLength(1)
     expect(tx.sent[0].url).toBe('/v1/event')
-    // The body is the canonical { batch: [...] } envelope, exactly one door.
+    // The body is the canonical { batch: [...] } envelope, exactly one entry point.
     const parsed = JSON.parse(tx.sent[0].raw)
     expect(Array.isArray(parsed.batch)).toBe(true)
     const e = tx.all[0]
@@ -110,7 +110,7 @@ describe('Analytics capture', () => {
     a.identify('user-9')
     a.capture(EVENTS.ORDER_COMPLETED, { kind: 'plan' }, { productId: 'plan_pro', revenue: 49, quantity: 1, currency: 'usd' })
     a.flush()
-    // ONE POST, ONE door, ONE batched envelope.
+    // ONE POST, ONE endpoint, ONE batched envelope.
     expect(tx.sent).toHaveLength(1)
     expect(tx.sent[0].url).toBe('https://api.hanzo.ai/v1/event')
     const parsed = JSON.parse(tx.sent[0].raw) as { batch: WireEvent[] }
@@ -358,7 +358,7 @@ describe('Analytics capture', () => {
 
   it('reads the ingest key from the build env when config omits it', () => {
     // The failure this closes is silent: a surface with no key attributes nothing
-    // for a logged-out visitor, the door refuses the write, and the page shows no
+    // for a logged-out visitor, the edge refuses the write, and the page shows no
     // sign of it. The key must resolve from the env exactly as the DSN does.
     process.env.NEXT_PUBLIC_PUBLISHABLE_KEY = 'pk-live-from-env'
     try {
@@ -515,10 +515,10 @@ describe('Event error capture', () => {
     expect(p.$exception_fingerprint).not.toBe('forged')
   })
 
-  it('an error is still an event on the ONE stream — same /v1/event door + product', () => {
+  it('an error is still an event on the ONE stream — same /v1/event endpoint + product', () => {
     const a = mk({ host: 'https://api.hanzo.ai' })
     a.captureError(new Error('x'))
-    // Same batched door as any other event — one pipe, not a second SDK.
+    // Same batched endpoint as any other event — one pipe, not a second SDK.
     expect(tx.sent[0].url).toBe('https://api.hanzo.ai/v1/event')
     expect(tx.sent[0].raw.startsWith('{"batch":')).toBe(true)
     expect(tx.all[0].product).toBe('test-app')