@hanzo/event 0.3.41 → 0.3.43

package/dist/react.mjs

@@ -247,11 +247,17 @@ var RE_CREDENTIAL_PARAM = new RegExp(
 function redactCredentialParams(s) {
   return s.replace(RE_CREDENTIAL_PARAM, (_m, prefix) => prefix + REDACTED);
 }
+var RE_SECRET43 = /(^|[^A-Za-z0-9_-]|%[0-9A-Fa-f]{2})((?=[A-Za-z0-9_-]{0,42}[a-z])(?=[A-Za-z0-9_-]{0,42}[A-Z])[A-Za-z0-9_-]{43})(?![A-Za-z0-9_-])/g;
 function redactSecrets(s) {
   s = redactCredentialParams(s);
   for (const re of SECRET_PATTERNS) s = s.replace(re, REDACTED);
+  s = s.replace(RE_SECRET43, (_m, lead) => lead + REDACTED);
   return redactPAN(s);
 }
+function withoutFragment(url) {
+  const at = url.indexOf("#");
+  return at < 0 ? url : url.slice(0, at);
+}
 function scrubPII(s) {
   s = s.replace(RE_EMAIL, EMAIL_MARK);
   s = s.replace(RE_IPV6, IP_MARK);
@@ -378,9 +384,18 @@ function hzAnonId() {
   }
   return id;
 }
+function hzAnonAdopt(id) {
+  hzAnonMemo = id;
+  hzAnonWrite(HZ_ANON_KEY, id);
+  try {
+    var s = hzAnonStore();
+    if (s) s.setItem(HZ_ANON_KEY, id);
+  } catch (e) {
+  }
+}
 
 // package.json
-var version = "0.3.41";
+var version = "0.3.43";
 
 // src/version.ts
 var VERSION = version;
@@ -700,6 +715,13 @@ function sessionId(now = Date.now()) {
   s.setItem(KEY.session, JSON.stringify(state));
   return state.id;
 }
+function adoptSession(id, now = Date.now()) {
+  const s = ls();
+  if (s) s.setItem(KEY.session, JSON.stringify({ id, last: now }));
+}
+function adoptAnonId(id) {
+  hzAnonAdopt(id);
+}
 function getFirstTouch() {
   const s = ls();
   if (!s) return void 0;
@@ -739,6 +761,76 @@ function mergeCohort(patch) {
   return next;
 }
 
+// src/link.ts
+var LINK_PARAMS = { anon: "hz_aid", session: "hz_sid", firstTouch: "hz_ft" };
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var isId = (v) => !!v && UUID.test(v);
+function encodeFirstTouch(a) {
+  return JSON.stringify([
+    a.utm.source,
+    a.utm.medium,
+    a.utm.campaign,
+    a.utm.term,
+    a.utm.content,
+    a.refCode,
+    a.referrer,
+    a.channel
+  ].map((v) => v ?? ""));
+}
+function decodeFirstTouch(raw) {
+  if (!raw || raw.length > 1024) return void 0;
+  try {
+    const t = JSON.parse(raw);
+    if (!Array.isArray(t) || t.length !== 8 || t.some((v) => typeof v !== "string")) return void 0;
+    const [source, medium, campaign, term, content, refCode, referrer, channel] = t;
+    const u = (v) => v || void 0;
+    return {
+      utm: { source: u(source), medium: u(medium), campaign: u(campaign), term: u(term), content: u(content) },
+      refCode: u(refCode),
+      referrer: u(referrer),
+      channel: u(channel)
+    };
+  } catch {
+    return void 0;
+  }
+}
+function linkUrl(url, state, fromHost, base) {
+  let u;
+  try {
+    u = new URL(url, base);
+  } catch {
+    return url;
+  }
+  if (u.protocol !== "https:" && u.protocol !== "http:") return url;
+  if (!orgOf(u.hostname) || u.hostname === fromHost) return url;
+  const set = (k, v) => v && u.searchParams.set(k, v);
+  if (isId(state.anonId)) set(LINK_PARAMS.anon, state.anonId);
+  if (isId(state.sessionId)) set(LINK_PARAMS.session, state.sessionId);
+  if (state.firstTouch) set(LINK_PARAMS.firstTouch, encodeFirstTouch(state.firstTouch));
+  return u.toString();
+}
+function readLink(search) {
+  const q = new URLSearchParams(search || "");
+  const a = q.get(LINK_PARAMS.anon);
+  const s = q.get(LINK_PARAMS.session);
+  return {
+    anonId: isId(a) ? a : void 0,
+    sessionId: isId(s) ? s : void 0,
+    firstTouch: decodeFirstTouch(q.get(LINK_PARAMS.firstTouch))
+  };
+}
+function stripLink(href) {
+  const u = new URL(href);
+  let hit = false;
+  for (const k of Object.values(LINK_PARAMS)) {
+    if (u.searchParams.has(k)) {
+      u.searchParams.delete(k);
+      hit = true;
+    }
+  }
+  return hit ? u.pathname + u.search + u.hash : void 0;
+}
+
 // src/core.ts
 var EVENT_PATH = "/v1/event";
 var DEFAULT_HOST = "https://api.hanzo.ai";
@@ -899,8 +991,19 @@ var Analytics = class {
     if (this.started || !this.cfg.enabled) return;
     this.started = true;
     if (!isBrowser()) return;
+    const linked = readLink(window.location.search);
+    if (linked.anonId) adoptAnonId(linked.anonId);
+    if (linked.sessionId) adoptSession(linked.sessionId);
+    const clean = stripLink(window.location.href);
+    if (clean !== void 0) {
+      try {
+        window.history.replaceState(window.history.state, "", clean);
+      } catch {
+      }
+    }
     const parsed = parseAttribution(window.location.search, document.referrer);
-    this.attribution = hasAttribution(parsed) ? setFirstTouchOnce(parsed) : getFirstTouch() ?? parsed;
+    const first = linked.firstTouch && !getFirstTouch() ? setFirstTouchOnce(linked.firstTouch) : void 0;
+    this.attribution = first ?? (hasAttribution(parsed) ? setFirstTouchOnce(parsed) : getFirstTouch() ?? parsed);
     this.cohort = mergeCohort({
       channel: this.attribution.channel ?? deriveChannel(this.attribution),
       refCode: this.attribution.refCode
@@ -919,6 +1022,27 @@ var Analytics = class {
       });
     }
   }
+  /** link returns `url` carrying this visitor's anonymous id, session and first
+   *  touch when the destination is a Hanzo-owned host, so the journey continues
+   *  across the hop. Any other URL comes back unchanged. */
+  link(url) {
+    if (!isBrowser()) return url;
+    if (!this.started) this.init();
+    return linkUrl(
+      url,
+      { anonId: anonId(), sessionId: sessionId(), firstTouch: this.attribution },
+      window.location.hostname,
+      window.location.href
+    );
+  }
+  /** authorize decorates an OAuth authorize URL for the redirect to IAM and flushes
+   *  what is queued, because the page is about to unload. Assign the result to
+   *  `location`. */
+  authorize(url) {
+    const out = this.link(url);
+    this.flush(true);
+    return out;
+  }
   /** identify binds the current visitor to a stable person id (post-login). */
   identify(personId, traits) {
     this.personId = personId;
@@ -1102,9 +1226,9 @@ var Analytics = class {
       ...extra
     };
     const capturePII = this.cfg.capturePII ?? false;
-    if (wire.url) wire.url = scrubText(wire.url, capturePII);
-    if (wire.path) wire.path = scrubText(wire.path, capturePII);
-    if (wire.referrer) wire.referrer = scrubText(wire.referrer, capturePII);
+    if (wire.url) wire.url = scrubText(withoutFragment(wire.url), capturePII);
+    if (wire.path) wire.path = scrubText(withoutFragment(wire.path), capturePII);
+    if (wire.referrer) wire.referrer = scrubText(withoutFragment(wire.referrer), capturePII);
     return wire;
   }
   schedule() {