@hanzo/event 0.3.41 → 0.3.43

package/dist/core.d.ts

@@ -37,6 +37,14 @@ export declare class Analytics {
      *  auto-capture unhandled errors. Safe to call from a React effect on every
      *  render. */
     init(): void;
+    /** link returns `url` carrying this visitor's anonymous id, session and first
+     *  touch when the destination is a Hanzo-owned host, so the journey continues
+     *  across the hop. Any other URL comes back unchanged. */
+    link(url: string): string;
+    /** authorize decorates an OAuth authorize URL for the redirect to IAM and flushes
+     *  what is queued, because the page is about to unload. Assign the result to
+     *  `location`. */
+    authorize(url: string): string;
     /** identify binds the current visitor to a stable person id (post-login). */
     identify(personId: string, traits?: Record<string, unknown>): void;
     /** group associates the visitor with an org/team (analytics grouping, not the

package/dist/core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AA2DA,OAAO,EAGL,aAAa,EAEb,SAAS,EAEV,MAAM,WAAW,CAAA;AAElB,OAAO,KAAK,EACV,eAAe,EAEf,mBAAmB,EACnB,MAAM,EAKN,SAAS,EACV,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,OAAO,EAAE,CAAA;AA2KlB,qBAAa,SAAS;IACpB,OAAO,CAAC,GAAG,CAGM;IACjB,OAAO,CAAC,SAAS,CAAW;IAC5B,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,KAAK,CAA6C;IAC1D,OAAO,CAAC,QAAQ,CAAC,CAAQ;IACzB,OAAO,CAAC,WAAW,CAA2B;IAC9C,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,OAAO,CAAQ;IACvB,0DAA0D;IAC1D,OAAO,CAAC,OAAO,CAAC,CAAQ;IACxB,+DAA+D;IAC/D,OAAO,CAAC,GAAG,CAAY;IACvB,6EAA6E;IAC7E,OAAO,CAAC,SAAS,CAAQ;IAEzB,YAAY,MAAM,EAAE,eAAe,EAwClC;IAED;;;;8EAI0E;IAC1E,KAAK,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAQnC;IAED;;;mEAG+D;IAC/D,IAAI,iBAAiB,IAAI,OAAO,CAE/B;IAED;4CACwC;IACxC,IAAI,cAAc,IAAI,MAAM,GAAG,SAAS,CAEvC;IAED;;;kBAGc;IACd,IAAI,IAAI,IAAI,CAgCX;IAED,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAGjE;IAED;6EACyE;IACzE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAE7D;IAED;;oEAEgE;IAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAclE;IAED;uFACmF;IACnF,OAAO,CACL,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC,GAC5E,IAAI,CAEN;IAED;;;;;;;;;;;;;0BAasB;IACtB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAuD9D;IAED;kCAC8B;IAC9B,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAE7B;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,MAAM,UAAQ,GAAG,IAAI,CAmC1B;IAID;;;;;6CAKyC;IACzC,OAAO,CAAC,SAAS;IAiBjB;sEACkE;IAClE,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,KAAK;IA+Db,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,UAAU;CAMnB;AAiCD;;;;;;;;;;;4DAW4D;AAC5D,wBAAgB,YAAY,IAAI,IAAI,CAGnC;AAED;;iEAEiE;AACjE,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CAmBlE;AAID,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAA"}
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AA2DA,OAAO,EAKL,aAAa,EAEb,SAAS,EAEV,MAAM,WAAW,CAAA;AAGlB,OAAO,KAAK,EACV,eAAe,EAEf,mBAAmB,EACnB,MAAM,EAKN,SAAS,EACV,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,OAAO,EAAE,CAAA;AA2KlB,qBAAa,SAAS;IACpB,OAAO,CAAC,GAAG,CAGM;IACjB,OAAO,CAAC,SAAS,CAAW;IAC5B,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,KAAK,CAA6C;IAC1D,OAAO,CAAC,QAAQ,CAAC,CAAQ;IACzB,OAAO,CAAC,WAAW,CAA2B;IAC9C,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,OAAO,CAAQ;IACvB,0DAA0D;IAC1D,OAAO,CAAC,OAAO,CAAC,CAAQ;IACxB,+DAA+D;IAC/D,OAAO,CAAC,GAAG,CAAY;IACvB,6EAA6E;IAC7E,OAAO,CAAC,SAAS,CAAQ;IAEzB,YAAY,MAAM,EAAE,eAAe,EAwClC;IAED;;;;8EAI0E;IAC1E,KAAK,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAQnC;IAED;;;mEAG+D;IAC/D,IAAI,iBAAiB,IAAI,OAAO,CAE/B;IAED;4CACwC;IACxC,IAAI,cAAc,IAAI,MAAM,GAAG,SAAS,CAEvC;IAED;;;kBAGc;IACd,IAAI,IAAI,IAAI,CAgDX;IAED;;8DAE0D;IAC1D,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CASxB;IAED;;sBAEkB;IAClB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAI7B;IAED,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAGjE;IAED;6EACyE;IACzE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAE7D;IAED;;oEAEgE;IAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAclE;IAED;uFACmF;IACnF,OAAO,CACL,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC,GAC5E,IAAI,CAEN;IAED;;;;;;;;;;;;;0BAasB;IACtB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAuD9D;IAED;kCAC8B;IAC9B,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAE7B;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,MAAM,UAAQ,GAAG,IAAI,CAmC1B;IAID;;;;;6CAKyC;IACzC,OAAO,CAAC,SAAS;IAiBjB;sEACkE;IAClE,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,KAAK;IAkEb,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,UAAU;CAMnB;AAiCD;;;;;;;;;;;4DAW4D;AAC5D,wBAAgB,YAAY,IAAI,IAAI,CAGnC;AAED;;iEAEiE;AACjE,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CAmBlE;AAID,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAA"}

package/dist/events.d.ts

@@ -9,7 +9,7 @@
  * and there is still exactly one definition.
  *
  * Nothing about the API moved. Every existing import keeps working, the names
- * and their values are unchanged, and `pkgs/events/test/catalog.mjs` fails the
+ * and their values are unchanged, and `pkg/events/test/catalog.mjs` fails the
  * build if a name and its meaning ever disagree.
  *
  * The naming convention lives with the names, in @hanzo/events and TAXONOMY.md:

package/dist/index.cjs

@@ -254,11 +254,17 @@ var RE_CREDENTIAL_PARAM = new RegExp(
 function redactCredentialParams(s) {
   return s.replace(RE_CREDENTIAL_PARAM, (_m, prefix) => prefix + REDACTED);
 }
+var RE_SECRET43 = /(^|[^A-Za-z0-9_-]|%[0-9A-Fa-f]{2})((?=[A-Za-z0-9_-]{0,42}[a-z])(?=[A-Za-z0-9_-]{0,42}[A-Z])[A-Za-z0-9_-]{43})(?![A-Za-z0-9_-])/g;
 function redactSecrets(s) {
   s = redactCredentialParams(s);
   for (const re of SECRET_PATTERNS) s = s.replace(re, REDACTED);
+  s = s.replace(RE_SECRET43, (_m, lead) => lead + REDACTED);
   return redactPAN(s);
 }
+function withoutFragment(url) {
+  const at = url.indexOf("#");
+  return at < 0 ? url : url.slice(0, at);
+}
 function scrubPII(s) {
   s = s.replace(RE_EMAIL, EMAIL_MARK);
   s = s.replace(RE_IPV6, IP_MARK);
@@ -385,6 +391,15 @@ function hzAnonId() {
   }
   return id;
 }
+function hzAnonAdopt(id) {
+  hzAnonMemo = id;
+  hzAnonWrite(HZ_ANON_KEY, id);
+  try {
+    var s = hzAnonStore();
+    if (s) s.setItem(HZ_ANON_KEY, id);
+  } catch (e) {
+  }
+}
 
 // src/uid.ts
 function uuidv7Time(id) {
@@ -392,7 +407,7 @@ function uuidv7Time(id) {
 }
 
 // package.json
-var version = "0.3.41";
+var version = "0.3.43";
 
 // src/version.ts
 var VERSION = version;
@@ -712,6 +727,13 @@ function sessionId(now = Date.now()) {
   s.setItem(KEY.session, JSON.stringify(state));
   return state.id;
 }
+function adoptSession(id, now = Date.now()) {
+  const s = ls();
+  if (s) s.setItem(KEY.session, JSON.stringify({ id, last: now }));
+}
+function adoptAnonId(id) {
+  hzAnonAdopt(id);
+}
 function getFirstTouch() {
   const s = ls();
   if (!s) return void 0;
@@ -751,6 +773,76 @@ function mergeCohort(patch) {
   return next;
 }
 
+// src/link.ts
+var LINK_PARAMS = { anon: "hz_aid", session: "hz_sid", firstTouch: "hz_ft" };
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var isId = (v) => !!v && UUID.test(v);
+function encodeFirstTouch(a) {
+  return JSON.stringify([
+    a.utm.source,
+    a.utm.medium,
+    a.utm.campaign,
+    a.utm.term,
+    a.utm.content,
+    a.refCode,
+    a.referrer,
+    a.channel
+  ].map((v) => v ?? ""));
+}
+function decodeFirstTouch(raw) {
+  if (!raw || raw.length > 1024) return void 0;
+  try {
+    const t = JSON.parse(raw);
+    if (!Array.isArray(t) || t.length !== 8 || t.some((v) => typeof v !== "string")) return void 0;
+    const [source, medium, campaign, term, content, refCode, referrer, channel] = t;
+    const u = (v) => v || void 0;
+    return {
+      utm: { source: u(source), medium: u(medium), campaign: u(campaign), term: u(term), content: u(content) },
+      refCode: u(refCode),
+      referrer: u(referrer),
+      channel: u(channel)
+    };
+  } catch {
+    return void 0;
+  }
+}
+function linkUrl(url, state, fromHost, base) {
+  let u;
+  try {
+    u = new URL(url, base);
+  } catch {
+    return url;
+  }
+  if (u.protocol !== "https:" && u.protocol !== "http:") return url;
+  if (!orgOf(u.hostname) || u.hostname === fromHost) return url;
+  const set = (k, v) => v && u.searchParams.set(k, v);
+  if (isId(state.anonId)) set(LINK_PARAMS.anon, state.anonId);
+  if (isId(state.sessionId)) set(LINK_PARAMS.session, state.sessionId);
+  if (state.firstTouch) set(LINK_PARAMS.firstTouch, encodeFirstTouch(state.firstTouch));
+  return u.toString();
+}
+function readLink(search) {
+  const q = new URLSearchParams(search || "");
+  const a = q.get(LINK_PARAMS.anon);
+  const s = q.get(LINK_PARAMS.session);
+  return {
+    anonId: isId(a) ? a : void 0,
+    sessionId: isId(s) ? s : void 0,
+    firstTouch: decodeFirstTouch(q.get(LINK_PARAMS.firstTouch))
+  };
+}
+function stripLink(href) {
+  const u = new URL(href);
+  let hit = false;
+  for (const k of Object.values(LINK_PARAMS)) {
+    if (u.searchParams.has(k)) {
+      u.searchParams.delete(k);
+      hit = true;
+    }
+  }
+  return hit ? u.pathname + u.search + u.hash : void 0;
+}
+
 // src/core.ts
 var EVENT_PATH = "/v1/event";
 var DEFAULT_HOST = "https://api.hanzo.ai";
@@ -911,8 +1003,19 @@ var Analytics = class {
     if (this.started || !this.cfg.enabled) return;
     this.started = true;
     if (!isBrowser()) return;
+    const linked = readLink(window.location.search);
+    if (linked.anonId) adoptAnonId(linked.anonId);
+    if (linked.sessionId) adoptSession(linked.sessionId);
+    const clean = stripLink(window.location.href);
+    if (clean !== void 0) {
+      try {
+        window.history.replaceState(window.history.state, "", clean);
+      } catch {
+      }
+    }
     const parsed = parseAttribution(window.location.search, document.referrer);
-    this.attribution = hasAttribution(parsed) ? setFirstTouchOnce(parsed) : getFirstTouch() ?? parsed;
+    const first = linked.firstTouch && !getFirstTouch() ? setFirstTouchOnce(linked.firstTouch) : void 0;
+    this.attribution = first ?? (hasAttribution(parsed) ? setFirstTouchOnce(parsed) : getFirstTouch() ?? parsed);
     this.cohort = mergeCohort({
       channel: this.attribution.channel ?? deriveChannel(this.attribution),
       refCode: this.attribution.refCode
@@ -931,6 +1034,27 @@ var Analytics = class {
       });
     }
   }
+  /** link returns `url` carrying this visitor's anonymous id, session and first
+   *  touch when the destination is a Hanzo-owned host, so the journey continues
+   *  across the hop. Any other URL comes back unchanged. */
+  link(url) {
+    if (!isBrowser()) return url;
+    if (!this.started) this.init();
+    return linkUrl(
+      url,
+      { anonId: anonId(), sessionId: sessionId(), firstTouch: this.attribution },
+      window.location.hostname,
+      window.location.href
+    );
+  }
+  /** authorize decorates an OAuth authorize URL for the redirect to IAM and flushes
+   *  what is queued, because the page is about to unload. Assign the result to
+   *  `location`. */
+  authorize(url) {
+    const out = this.link(url);
+    this.flush(true);
+    return out;
+  }
   /** identify binds the current visitor to a stable person id (post-login). */
   identify(personId, traits) {
     this.personId = personId;
@@ -1114,9 +1238,9 @@ var Analytics = class {
       ...extra
     };
     const capturePII = this.cfg.capturePII ?? false;
-    if (wire.url) wire.url = scrubText(wire.url, capturePII);
-    if (wire.path) wire.path = scrubText(wire.path, capturePII);
-    if (wire.referrer) wire.referrer = scrubText(wire.referrer, capturePII);
+    if (wire.url) wire.url = scrubText(withoutFragment(wire.url), capturePII);
+    if (wire.path) wire.path = scrubText(withoutFragment(wire.path), capturePII);
+    if (wire.referrer) wire.referrer = scrubText(withoutFragment(wire.referrer), capturePII);
     return wire;
   }
   schedule() {
@@ -1247,6 +1371,7 @@ Object.defineProperty(exports, "eventsOf", {
 exports.Analytics = Analytics;
 exports.COHORTS = COHORTS;
 exports.GOALS = GOALS;
+exports.LINK_PARAMS = LINK_PARAMS;
 exports.ORG_DOMAIN = ORG_DOMAIN;
 exports.ORG_KEY = ORG_KEY;
 exports.PRODUCT_PROJECT = PRODUCT_PROJECT;
@@ -1268,13 +1393,16 @@ exports.hostOf = hostOf;
 exports.isoWeek = isoWeek;
 exports.keyFor = keyFor;
 exports.keyForPage = keyForPage;
+exports.linkUrl = linkUrl;
 exports.orgOf = orgOf;
 exports.parseAttribution = parseAttribution;
 exports.parseDsn = parseDsn;
+exports.readLink = readLink;
 exports.redactSecrets = redactSecrets;
 exports.resetClients = resetClients;
 exports.scrubPII = scrubPII;
 exports.scrubText = scrubText;
+exports.stripLink = stripLink;
 exports.uuidv7 = hzUuidv7;
 exports.uuidv7Time = uuidv7Time;
 //# sourceMappingURL=index.cjs.map