@hanzo/event 0.3.40 → 0.3.42

package/dist/org.d.ts

@@ -44,12 +44,17 @@ export type Keyring = Readonly<Record<string, string>>;
  */
 export declare const ORG_DOMAIN: Readonly<Record<string, readonly string[]>>;
 /**
- * Each org's publishable key — the same values `universe`'s `SPA_INGEST_KEYRING`
- * serves to the identity hosts, which are each brand's own insights team token.
- * Add an org here the day its project exists, never before.
+ * Each org's publishable key, and a copy: the values live in universe at
+ * infra/k8s/id/configmap.yaml as SPA_INGEST_KEYRING, which serves them to the
+ * identity hosts, and this table is what a statically exported page carries when
+ * it cannot ask. The two must say the same thing. Add an org the day its project
+ * exists, never before.
  *
- * A key is only as real as the project it names: recreate the project and this
- * file moves with it, or every beacon answers 403 and reports nowhere.
+ * A key is only as real as the project it names, and these had stopped naming
+ * one: all three answered `403 ingest_key_unknown` against /v1/event, so every
+ * page that fell back to this table reported nowhere while looking fine. The
+ * copy drifted silently because nothing compares it to the keyring. If you
+ * recreate a project, move BOTH.
  */
 export declare const ORG_KEY: Keyring;
 /**

package/dist/org.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"org.d.ts","sourceRoot":"","sources":["../src/org.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,mCAAmC;AACnC,MAAM,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AAEtD;;;;;;;;;GASG;AACH,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CA6BjE,CAAA;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,OAAO,EAAE,OAIpB,CAAA;AAWF;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CActD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,OAAiB,GAAG,MAAM,GAAG,SAAS,CAOnF;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,OAAO,GAAE,OAAiB,GAAG,MAAM,GAAG,SAAS,CAGzE"}
+{"version":3,"file":"org.d.ts","sourceRoot":"","sources":["../src/org.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,mCAAmC;AACnC,MAAM,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AAEtD;;;;;;;;;GASG;AACH,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CA6BjE,CAAA;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,OAAO,EAAE,OAIpB,CAAA;AAWF;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CActD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,OAAiB,GAAG,MAAM,GAAG,SAAS,CAOnF;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,OAAO,GAAE,OAAiB,GAAG,MAAM,GAAG,SAAS,CAGzE"}

package/dist/react.cjs

@@ -118,9 +118,9 @@ var ORG_DOMAIN = Object.freeze({
   zoo: Object.freeze(["zoo.ngo", "zoo.network", "zoolabs.id", "zoolabs.io"])
 });
 var ORG_KEY = Object.freeze({
-  hanzo: "pk-bCcNBDOLwdIovV349jVGH1ShEOq7rAcaKLsX_bLnRMo",
-  lux: "pk-GxCDhpEn89qajMyuMdMs6mcE4UVQBkv8F2swEKHC67Y",
-  zoo: "pk-bS-xKESMhuhK_wfSmpRf1H_IH8A3x6Y5NV70TD7ycWE"
+  hanzo: "pk-rM_CdaF2MQckGCrla113SrR1oH4zvqN8xh2I95Z9tY8",
+  lux: "pk-gUZp6ZVfhJzSwK-rb4oLbVkpCnMBx5uSCpxf_5yEhQk",
+  zoo: "pk-3TKpKnERV9AQSsBUERWkZejC1O1mUxc1jRzsP3MPbs4"
 });
 var PUBLISHABLE = "pk-";
 var normalize = (host) => host.trim().toLowerCase().replace(/\.$/, "").split(":")[0] ?? "";
@@ -249,11 +249,17 @@ var RE_CREDENTIAL_PARAM = new RegExp(
 function redactCredentialParams(s) {
   return s.replace(RE_CREDENTIAL_PARAM, (_m, prefix) => prefix + REDACTED);
 }
+var RE_SECRET43 = /(^|[^A-Za-z0-9_-]|%[0-9A-Fa-f]{2})((?=[A-Za-z0-9_-]{0,42}[a-z])(?=[A-Za-z0-9_-]{0,42}[A-Z])[A-Za-z0-9_-]{43})(?![A-Za-z0-9_-])/g;
 function redactSecrets(s) {
   s = redactCredentialParams(s);
   for (const re of SECRET_PATTERNS) s = s.replace(re, REDACTED);
+  s = s.replace(RE_SECRET43, (_m, lead) => lead + REDACTED);
   return redactPAN(s);
 }
+function withoutFragment(url) {
+  const at = url.indexOf("#");
+  return at < 0 ? url : url.slice(0, at);
+}
 function scrubPII(s) {
   s = s.replace(RE_EMAIL, EMAIL_MARK);
   s = s.replace(RE_IPV6, IP_MARK);
@@ -382,7 +388,7 @@ function hzAnonId() {
 }
 
 // package.json
-var version = "0.3.40";
+var version = "0.3.42";
 
 // src/version.ts
 var VERSION = version;
@@ -1104,9 +1110,9 @@ var Analytics = class {
       ...extra
     };
     const capturePII = this.cfg.capturePII ?? false;
-    if (wire.url) wire.url = scrubText(wire.url, capturePII);
-    if (wire.path) wire.path = scrubText(wire.path, capturePII);
-    if (wire.referrer) wire.referrer = scrubText(wire.referrer, capturePII);
+    if (wire.url) wire.url = scrubText(withoutFragment(wire.url), capturePII);
+    if (wire.path) wire.path = scrubText(withoutFragment(wire.path), capturePII);
+    if (wire.referrer) wire.referrer = scrubText(withoutFragment(wire.referrer), capturePII);
     return wire;
   }
   schedule() {