@hanzo/event 0.3.41 → 0.3.43

package/dist/index.d.cts

@@ -1,6 +1,8 @@
 export { Analytics, createAnalytics, resetClients, VERSION, getCohort, getFirstTouch, } from './core';
 export { parseDsn, buildSentryEvent, buildEnvelope, framesFromStack } from './sentry';
 export { uuidv7, uuidv7Time } from './uid';
+export { linkUrl, readLink, stripLink, LINK_PARAMS } from './link';
+export type { LinkState } from './link';
 export { PRODUCT_PROJECT, dsnForProduct } from './dsn';
 export type { ErrorIdentity } from './sentry';
 export { scrubText, redactSecrets, scrubPII } from './scrub';

package/dist/index.d.ts

@@ -1,6 +1,8 @@
 export { Analytics, createAnalytics, resetClients, VERSION, getCohort, getFirstTouch, } from './core';
 export { parseDsn, buildSentryEvent, buildEnvelope, framesFromStack } from './sentry';
 export { uuidv7, uuidv7Time } from './uid';
+export { linkUrl, readLink, stripLink, LINK_PARAMS } from './link';
+export type { LinkState } from './link';
 export { PRODUCT_PROJECT, dsnForProduct } from './dsn';
 export type { ErrorIdentity } from './sentry';
 export { scrubText, redactSecrets, scrubPII } from './scrub';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,SAAS,EACT,eAAe,EACf,YAAY,EACZ,OAAO,EACP,SAAS,EACT,aAAa,GACd,MAAM,QAAQ,CAAA;AACf,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AACrF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AACtD,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACtF,YAAY,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACxC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACvD,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAC3E,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,MAAM,EACN,OAAO,GACR,MAAM,eAAe,CAAA;AACtB,YAAY,EACV,eAAe,EACf,WAAW,EACX,mBAAmB,EACnB,MAAM,EACN,GAAG,EACH,SAAS,EACT,SAAS,EACT,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,WAAW,EACX,WAAW,EACX,WAAW,EACX,SAAS,EACT,SAAS,GACV,MAAM,SAAS,CAAA;AAEhB;;;kEAGkE;AAClE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AACtE,YAAY,EAAE,OAAO,EAAE,MAAM,OAAO,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,SAAS,EACT,eAAe,EACf,YAAY,EACZ,OAAO,EACP,SAAS,EACT,aAAa,GACd,MAAM,QAAQ,CAAA;AACf,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AACrF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AAC1C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AAClE,YAAY,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACvC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AACtD,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACtF,YAAY,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACxC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACvD,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAC3E,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,MAAM,EACN,OAAO,GACR,MAAM,eAAe,CAAA;AACtB,YAAY,EACV,eAAe,EACf,WAAW,EACX,mBAAmB,EACnB,MAAM,EACN,GAAG,EACH,SAAS,EACT,SAAS,EACT,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,WAAW,EACX,WAAW,EACX,WAAW,EACX,SAAS,EACT,SAAS,GACV,MAAM,SAAS,CAAA;AAEhB;;;kEAGkE;AAClE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AACtE,YAAY,EAAE,OAAO,EAAE,MAAM,OAAO,CAAA"}

package/dist/index.mjs

@@ -253,11 +253,17 @@ var RE_CREDENTIAL_PARAM = new RegExp(
 function redactCredentialParams(s) {
   return s.replace(RE_CREDENTIAL_PARAM, (_m, prefix) => prefix + REDACTED);
 }
+var RE_SECRET43 = /(^|[^A-Za-z0-9_-]|%[0-9A-Fa-f]{2})((?=[A-Za-z0-9_-]{0,42}[a-z])(?=[A-Za-z0-9_-]{0,42}[A-Z])[A-Za-z0-9_-]{43})(?![A-Za-z0-9_-])/g;
 function redactSecrets(s) {
   s = redactCredentialParams(s);
   for (const re of SECRET_PATTERNS) s = s.replace(re, REDACTED);
+  s = s.replace(RE_SECRET43, (_m, lead) => lead + REDACTED);
   return redactPAN(s);
 }
+function withoutFragment(url) {
+  const at = url.indexOf("#");
+  return at < 0 ? url : url.slice(0, at);
+}
 function scrubPII(s) {
   s = s.replace(RE_EMAIL, EMAIL_MARK);
   s = s.replace(RE_IPV6, IP_MARK);
@@ -384,6 +390,15 @@ function hzAnonId() {
   }
   return id;
 }
+function hzAnonAdopt(id) {
+  hzAnonMemo = id;
+  hzAnonWrite(HZ_ANON_KEY, id);
+  try {
+    var s = hzAnonStore();
+    if (s) s.setItem(HZ_ANON_KEY, id);
+  } catch (e) {
+  }
+}
 
 // src/uid.ts
 function uuidv7Time(id) {
@@ -391,7 +406,7 @@ function uuidv7Time(id) {
 }
 
 // package.json
-var version = "0.3.41";
+var version = "0.3.43";
 
 // src/version.ts
 var VERSION = version;
@@ -711,6 +726,13 @@ function sessionId(now = Date.now()) {
   s.setItem(KEY.session, JSON.stringify(state));
   return state.id;
 }
+function adoptSession(id, now = Date.now()) {
+  const s = ls();
+  if (s) s.setItem(KEY.session, JSON.stringify({ id, last: now }));
+}
+function adoptAnonId(id) {
+  hzAnonAdopt(id);
+}
 function getFirstTouch() {
   const s = ls();
   if (!s) return void 0;
@@ -750,6 +772,76 @@ function mergeCohort(patch) {
   return next;
 }
 
+// src/link.ts
+var LINK_PARAMS = { anon: "hz_aid", session: "hz_sid", firstTouch: "hz_ft" };
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var isId = (v) => !!v && UUID.test(v);
+function encodeFirstTouch(a) {
+  return JSON.stringify([
+    a.utm.source,
+    a.utm.medium,
+    a.utm.campaign,
+    a.utm.term,
+    a.utm.content,
+    a.refCode,
+    a.referrer,
+    a.channel
+  ].map((v) => v ?? ""));
+}
+function decodeFirstTouch(raw) {
+  if (!raw || raw.length > 1024) return void 0;
+  try {
+    const t = JSON.parse(raw);
+    if (!Array.isArray(t) || t.length !== 8 || t.some((v) => typeof v !== "string")) return void 0;
+    const [source, medium, campaign, term, content, refCode, referrer, channel] = t;
+    const u = (v) => v || void 0;
+    return {
+      utm: { source: u(source), medium: u(medium), campaign: u(campaign), term: u(term), content: u(content) },
+      refCode: u(refCode),
+      referrer: u(referrer),
+      channel: u(channel)
+    };
+  } catch {
+    return void 0;
+  }
+}
+function linkUrl(url, state, fromHost, base) {
+  let u;
+  try {
+    u = new URL(url, base);
+  } catch {
+    return url;
+  }
+  if (u.protocol !== "https:" && u.protocol !== "http:") return url;
+  if (!orgOf(u.hostname) || u.hostname === fromHost) return url;
+  const set = (k, v) => v && u.searchParams.set(k, v);
+  if (isId(state.anonId)) set(LINK_PARAMS.anon, state.anonId);
+  if (isId(state.sessionId)) set(LINK_PARAMS.session, state.sessionId);
+  if (state.firstTouch) set(LINK_PARAMS.firstTouch, encodeFirstTouch(state.firstTouch));
+  return u.toString();
+}
+function readLink(search) {
+  const q = new URLSearchParams(search || "");
+  const a = q.get(LINK_PARAMS.anon);
+  const s = q.get(LINK_PARAMS.session);
+  return {
+    anonId: isId(a) ? a : void 0,
+    sessionId: isId(s) ? s : void 0,
+    firstTouch: decodeFirstTouch(q.get(LINK_PARAMS.firstTouch))
+  };
+}
+function stripLink(href) {
+  const u = new URL(href);
+  let hit = false;
+  for (const k of Object.values(LINK_PARAMS)) {
+    if (u.searchParams.has(k)) {
+      u.searchParams.delete(k);
+      hit = true;
+    }
+  }
+  return hit ? u.pathname + u.search + u.hash : void 0;
+}
+
 // src/core.ts
 var EVENT_PATH = "/v1/event";
 var DEFAULT_HOST = "https://api.hanzo.ai";
@@ -910,8 +1002,19 @@ var Analytics = class {
     if (this.started || !this.cfg.enabled) return;
     this.started = true;
     if (!isBrowser()) return;
+    const linked = readLink(window.location.search);
+    if (linked.anonId) adoptAnonId(linked.anonId);
+    if (linked.sessionId) adoptSession(linked.sessionId);
+    const clean = stripLink(window.location.href);
+    if (clean !== void 0) {
+      try {
+        window.history.replaceState(window.history.state, "", clean);
+      } catch {
+      }
+    }
     const parsed = parseAttribution(window.location.search, document.referrer);
-    this.attribution = hasAttribution(parsed) ? setFirstTouchOnce(parsed) : getFirstTouch() ?? parsed;
+    const first = linked.firstTouch && !getFirstTouch() ? setFirstTouchOnce(linked.firstTouch) : void 0;
+    this.attribution = first ?? (hasAttribution(parsed) ? setFirstTouchOnce(parsed) : getFirstTouch() ?? parsed);
     this.cohort = mergeCohort({
       channel: this.attribution.channel ?? deriveChannel(this.attribution),
       refCode: this.attribution.refCode
@@ -930,6 +1033,27 @@ var Analytics = class {
       });
     }
   }
+  /** link returns `url` carrying this visitor's anonymous id, session and first
+   *  touch when the destination is a Hanzo-owned host, so the journey continues
+   *  across the hop. Any other URL comes back unchanged. */
+  link(url) {
+    if (!isBrowser()) return url;
+    if (!this.started) this.init();
+    return linkUrl(
+      url,
+      { anonId: anonId(), sessionId: sessionId(), firstTouch: this.attribution },
+      window.location.hostname,
+      window.location.href
+    );
+  }
+  /** authorize decorates an OAuth authorize URL for the redirect to IAM and flushes
+   *  what is queued, because the page is about to unload. Assign the result to
+   *  `location`. */
+  authorize(url) {
+    const out = this.link(url);
+    this.flush(true);
+    return out;
+  }
   /** identify binds the current visitor to a stable person id (post-login). */
   identify(personId, traits) {
     this.personId = personId;
@@ -1113,9 +1237,9 @@ var Analytics = class {
       ...extra
     };
     const capturePII = this.cfg.capturePII ?? false;
-    if (wire.url) wire.url = scrubText(wire.url, capturePII);
-    if (wire.path) wire.path = scrubText(wire.path, capturePII);
-    if (wire.referrer) wire.referrer = scrubText(wire.referrer, capturePII);
+    if (wire.url) wire.url = scrubText(withoutFragment(wire.url), capturePII);
+    if (wire.path) wire.path = scrubText(withoutFragment(wire.path), capturePII);
+    if (wire.referrer) wire.referrer = scrubText(withoutFragment(wire.referrer), capturePII);
     return wire;
   }
   schedule() {
@@ -1219,6 +1343,6 @@ var COHORTS = {
  *   curl -fsSL https://unpkg.com/@hanzo/event/src/anon.js -o apps/analytics/anon.js
  */
 
-export { Analytics, COHORTS, GOALS, ORG_DOMAIN, ORG_KEY, PRODUCT_PROJECT, VERSION, buildEnvelope, buildSentryEvent, createAnalytics, deriveChannel, digest, dsnForProduct, exceptionEntry, exceptionProperties, fingerprint, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, keyFor, keyForPage, orgOf, parseAttribution, parseDsn, redactSecrets, resetClients, scrubPII, scrubText, hzUuidv7 as uuidv7, uuidv7Time };
+export { Analytics, COHORTS, GOALS, LINK_PARAMS, ORG_DOMAIN, ORG_KEY, PRODUCT_PROJECT, VERSION, buildEnvelope, buildSentryEvent, createAnalytics, deriveChannel, digest, dsnForProduct, exceptionEntry, exceptionProperties, fingerprint, framesFromStack, getCohort, getFirstTouch, hasAttribution, hostOf, isoWeek, keyFor, keyForPage, linkUrl, orgOf, parseAttribution, parseDsn, readLink, redactSecrets, resetClients, scrubPII, scrubText, stripLink, hzUuidv7 as uuidv7, uuidv7Time };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map