@hanzo/event 0.3.44 → 0.3.49

package/dist/react.mjs

@@ -1,5 +1,5 @@
-import { createContext, Component, useEffect, createElement, useContext, useRef } from 'react';
-import { PAGEVIEW, EXCEPTION } from '@hanzo/events';
+import { createContext, Component, useEffect, createElement, useContext, useRef, useSyncExternalStore } from 'react';
+import { PAGEVIEW } from '@hanzo/events';
 
 // src/react.tsx
 
@@ -20,20 +20,20 @@ var SOCIAL_HOSTS = [
 var SEARCH_HOSTS = ["google.", "bing.", "duckduckgo.", "yahoo.", "baidu.", "ecosia."];
 function parseAttribution(search, referrer) {
   const q = new URLSearchParams(search || "");
-  const get = (k) => {
+  const get2 = (k) => {
     const v = q.get(k);
     return v ? v.trim() : void 0;
   };
   const a = {
     utm: {
-      source: get("utm_source"),
-      medium: get("utm_medium"),
-      campaign: get("utm_campaign"),
-      term: get("utm_term"),
-      content: get("utm_content")
+      source: get2("utm_source"),
+      medium: get2("utm_medium"),
+      campaign: get2("utm_campaign"),
+      term: get2("utm_term"),
+      content: get2("utm_content")
     },
     referrer: referrer ? referrer.trim() : void 0,
-    refCode: get("ref") || get("refCode") || get("ref_code") || void 0
+    refCode: get2("ref") || get2("refCode") || get2("ref_code") || void 0
   };
   a.channel = deriveChannel(a);
   return a;
@@ -68,22 +68,6 @@ function hasAttribution(a) {
   );
 }
 
-// src/dsn.ts
-var PRODUCT_PROJECT = Object.freeze({
-  console: "019fa40b-94ae-7f1d-8f7b-e92f123fad42",
-  // console.hanzo.ai
-  app: "019f9b1e-57eb-7171-9d92-72c0b85e4b4b",
-  // hanzo.app
-  site: "019f9b1e-5785-7359-ad0b-f75db8e58c99"
-  // hanzo.ai (marketing; product `site`)
-});
-function dsnForProduct(product, key) {
-  if (!product || !key) return void 0;
-  const projectId = PRODUCT_PROJECT[product];
-  if (!projectId) return void 0;
-  return `https://${key}@api.hanzo.ai/v1/event/${projectId}`;
-}
-
 // src/org.ts
 var ORG_DOMAIN = Object.freeze({
   // A brand's domains are not a pattern — `hanzoskills.com` is Hanzo's and does
@@ -92,11 +76,15 @@ var ORG_DOMAIN = Object.freeze({
   // separate fact, which is the whole reason this is a table.
   hanzo: Object.freeze([
     "hanzo.ai",
+    "hanzo.agency",
     "hanzo.app",
     "hanzo.bot",
     "hanzo.chat",
     "hanzo.codes",
     "hanzo.id",
+    "hanzo.industries",
+    "hanzo.market",
+    "hanzo.network",
     "hanzo.sh",
     "hanzo.team",
     "hanzo.ventures",
@@ -276,6 +264,93 @@ function scrubText(s, capturePII = false) {
   return s;
 }
 
+// src/throwable.ts
+var MAX_FRAMES = 50;
+var MAX_LINES = 500;
+var MAX_LINE_LEN = 2048;
+var V8_FRAME = /^\s*at\s+(?:(.+?)\s+\()?(?:(.+?):(\d+):(\d+)|([^)]+))\)?\s*$/;
+var MOZ_FRAME = /^\s*(?:(.*?)@)?(.+?):(\d+):(\d+)\s*$/;
+function inApp(file) {
+  if (!file) return false;
+  return !(file.includes("node_modules") || file.startsWith("webpack-internal") || file.startsWith("webpack://") || file.startsWith("chrome-extension://") || file.startsWith("moz-extension://"));
+}
+function framesFromStack(stack) {
+  if (!stack) return [];
+  const lines = stack.split("\n", MAX_LINES);
+  const frames = [];
+  for (const raw of lines) {
+    if (raw.length > MAX_LINE_LEN) continue;
+    const line = raw.trimEnd();
+    if (!line) continue;
+    let fn;
+    let file = "";
+    let lineno = 0;
+    let colno = 0;
+    const v = V8_FRAME.exec(line);
+    if (v) {
+      fn = v[1];
+      if (v[2]) {
+        file = v[2];
+        lineno = Number(v[3]) || 0;
+        colno = Number(v[4]) || 0;
+      } else {
+        file = (v[5] || "").trim();
+      }
+    } else {
+      const f = MOZ_FRAME.exec(line);
+      if (!f) continue;
+      fn = f[1];
+      file = f[2];
+      lineno = Number(f[3]) || 0;
+      colno = Number(f[4]) || 0;
+    }
+    if (!file && !fn) continue;
+    frames.push({
+      function: fn || "<anonymous>",
+      filename: file,
+      abs_path: file,
+      lineno,
+      colno,
+      in_app: inApp(file)
+    });
+  }
+  frames.reverse();
+  if (frames.length > MAX_FRAMES) return frames.slice(frames.length - MAX_FRAMES);
+  return frames;
+}
+function normalizeError(err) {
+  if (err instanceof Error) {
+    const name = read(err, "name");
+    const message = read(err, "message");
+    const stack = read(err, "stack");
+    return {
+      name: typeof name === "string" && name ? name : "Error",
+      message: typeof message === "string" && message ? message : str(err),
+      stack: typeof stack === "string" ? stack : void 0
+    };
+  }
+  if (typeof err === "string") return { name: "Error", message: err };
+  try {
+    return { name: "Error", message: JSON.stringify(err) ?? str(err) };
+  } catch {
+    return { name: "Error", message: str(err) };
+  }
+}
+function read(o, k) {
+  try {
+    return o[k];
+  } catch {
+    return void 0;
+  }
+}
+function str(v) {
+  try {
+    return String(v);
+  } catch {
+    return "[unstringifiable]";
+  }
+}
+
 // src/anon.js
 var HZ_ANON_KEY = "iam-anon-id";
 var HZ_ANON_ADOPT = ["hz_anon_id", "hz_id"];
@@ -394,292 +469,6 @@ function hzAnonAdopt(id) {
   }
 }
 
-// package.json
-var version = "0.3.44";
-
-// src/version.ts
-var VERSION = version;
-
-// src/sentry.ts
-var MAX_FRAMES = 50;
-var MAX_LINES = 500;
-var MAX_LINE_LEN = 2048;
-var MAX_TAG_LEN = 1024;
-var MAX_TAGS = 50;
-function eventId() {
-  return hzUuidv7().replace(/-/g, "");
-}
-function byteLen(s) {
-  if (typeof TextEncoder !== "undefined") return new TextEncoder().encode(s).length;
-  if (typeof Buffer !== "undefined") return Buffer.byteLength(s, "utf8");
-  return s.length;
-}
-function parseDsn(dsn) {
-  if (!dsn) return null;
-  const m = /^(https?):\/\/([^@]+)@([^/]+)(\/.*)?$/.exec(dsn.trim());
-  if (!m) return null;
-  const scheme = m[1];
-  const publicKey = m[2];
-  const host = m[3];
-  const path = m[4] ?? "";
-  if (!publicKey || !host) return null;
-  const segs = path.split("/").filter(Boolean);
-  const projectId = segs.length > 0 ? segs[segs.length - 1] : "";
-  if (!projectId) return null;
-  const origin = `${scheme}://${host}`;
-  const base = `${origin}/${segs.map(encodeURIComponent).join("/")}`;
-  const ingestUrl = `${base}/envelope/?sentry_key=${encodeURIComponent(publicKey)}`;
-  return { publicKey, origin, projectId, base, ingestUrl };
-}
-var V8_FRAME = /^\s*at\s+(?:(.+?)\s+\()?(?:(.+?):(\d+):(\d+)|([^)]+))\)?\s*$/;
-var MOZ_FRAME = /^\s*(?:(.*?)@)?(.+?):(\d+):(\d+)\s*$/;
-function inApp(file) {
-  if (!file) return false;
-  return !(file.includes("node_modules") || file.startsWith("webpack-internal") || file.startsWith("webpack://") || file.startsWith("chrome-extension://") || file.startsWith("moz-extension://"));
-}
-function framesFromStack(stack) {
-  if (!stack) return [];
-  const lines = stack.split("\n", MAX_LINES);
-  const frames = [];
-  for (const raw of lines) {
-    if (raw.length > MAX_LINE_LEN) continue;
-    const line = raw.trimEnd();
-    if (!line) continue;
-    let fn;
-    let file = "";
-    let lineno = 0;
-    let colno = 0;
-    const v = V8_FRAME.exec(line);
-    if (v) {
-      fn = v[1];
-      if (v[2]) {
-        file = v[2];
-        lineno = Number(v[3]) || 0;
-        colno = Number(v[4]) || 0;
-      } else {
-        file = (v[5] || "").trim();
-      }
-    } else {
-      const f = MOZ_FRAME.exec(line);
-      if (!f) continue;
-      fn = f[1];
-      file = f[2];
-      lineno = Number(f[3]) || 0;
-      colno = Number(f[4]) || 0;
-    }
-    if (!file && !fn) continue;
-    frames.push({
-      function: fn || "<anonymous>",
-      filename: file,
-      abs_path: file,
-      lineno,
-      colno,
-      in_app: inApp(file)
-    });
-  }
-  frames.reverse();
-  if (frames.length > MAX_FRAMES) return frames.slice(frames.length - MAX_FRAMES);
-  return frames;
-}
-function normalizeError(err) {
-  if (err instanceof Error) {
-    const name = read(err, "name");
-    const message = read(err, "message");
-    const stack = read(err, "stack");
-    return {
-      name: typeof name === "string" && name ? name : "Error",
-      message: typeof message === "string" && message ? message : str(err),
-      stack: typeof stack === "string" ? stack : void 0
-    };
-  }
-  if (typeof err === "string") return { name: "Error", message: err };
-  try {
-    return { name: "Error", message: JSON.stringify(err) ?? str(err) };
-  } catch {
-    return { name: "Error", message: str(err) };
-  }
-}
-function read(o, k) {
-  try {
-    return o[k];
-  } catch {
-    return void 0;
-  }
-}
-function str(v) {
-  try {
-    return String(v);
-  } catch {
-    return "[unstringifiable]";
-  }
-}
-function coerceTag(v) {
-  const s = typeof v === "string" ? v : (() => {
-    try {
-      return JSON.stringify(v) ?? String(v);
-    } catch {
-      try {
-        return String(v);
-      } catch {
-        return "[unstringifiable]";
-      }
-    }
-  })();
-  return s.length > MAX_TAG_LEN ? s.slice(0, MAX_TAG_LEN) : s;
-}
-function buildSentryEvent(input) {
-  const { error, options = {}, identity, capturePII = false } = input;
-  const norm = normalizeError(error);
-  const handled = options.handled !== false;
-  const level = options.level ?? (handled ? "error" : "fatal");
-  const tags = { handled: String(handled) };
-  if (identity.product) tags.product = identity.product;
-  if (identity.sessionId) tags.session = identity.sessionId;
-  try {
-    const props = options.properties ?? {};
-    let n = 0;
-    for (const k of Object.keys(props)) {
-      if (n >= MAX_TAGS) break;
-      try {
-        const val = props[k];
-        if (val === void 0 || val === null) continue;
-        tags[k] = scrubText(coerceTag(val), capturePII);
-        n++;
-      } catch {
-        continue;
-      }
-    }
-  } catch {
-  }
-  const event = {
-    event_id: input.id ?? eventId(),
-    timestamp: (input.now ?? Date.now()) / 1e3,
-    platform: "javascript",
-    level,
-    logger: identity.product,
-    environment: identity.environment,
-    release: identity.release,
-    exception: {
-      values: [
-        {
-          type: norm.name,
-          value: scrubText(norm.message, capturePII),
-          stacktrace: { frames: framesFromStack(norm.stack) }
-        }
-      ]
-    },
-    tags,
-    sdk: { name: "@hanzo/event", version: VERSION }
-  };
-  if (identity.userId) event.user = { id: identity.userId };
-  return event;
-}
-function buildEnvelope(event, dsn, sentAt) {
-  const payload = JSON.stringify(event);
-  const header = JSON.stringify({
-    event_id: event.event_id,
-    dsn: dsn.base,
-    sent_at: (/* @__PURE__ */ new Date()).toISOString()
-  });
-  const itemHeader = JSON.stringify({
-    type: "event",
-    content_type: "application/json",
-    length: byteLen(payload)
-  });
-  return `${header}
-${itemHeader}
-${payload}
-`;
-}
-var MAX_VALUE = 4096;
-function digest(s) {
-  let out = "";
-  for (const seed of [2166136261, 16777619, 2654435769, 2246822507]) {
-    let h = seed >>> 0;
-    for (let i = 0; i < s.length; i++) {
-      h ^= s.charCodeAt(i);
-      h = h + (h << 1) + (h << 4) + (h << 7) + (h << 8) + (h << 24) >>> 0;
-    }
-    out += h.toString(16).padStart(8, "0");
-  }
-  return out;
-}
-function frameOf(f) {
-  const source = f.filename ?? "";
-  const name = f.function ?? "<anonymous>";
-  const line = f.lineno ?? 0;
-  const column = f.colno ?? 0;
-  return {
-    // Stable per code location, so the same frame groups and re-renders under one
-    // key. The '/part' suffix is the product's format for one raw frame expanding
-    // into several resolved ones; a browser frame is always part 0.
-    raw_id: `${digest(`${source}|${name}|${line}|${column}`)}/0`,
-    mangled_name: name,
-    source,
-    line,
-    column,
-    in_app: f.in_app ?? false,
-    lang: "javascript",
-    resolved: false,
-    resolve_failure: "no symbol set uploaded for this release",
-    resolved_name: null,
-    module: null
-  };
-}
-function truncate2(s, max) {
-  if (s.length <= max) return s;
-  let end = max;
-  const c = s.charCodeAt(end - 1);
-  if (c >= 55296 && c <= 56319) end--;
-  return s.slice(0, end);
-}
-function exceptionEntry(err, opts) {
-  const n = normalizeError(err);
-  const frames = framesFromStack(n.stack).slice(-50);
-  const entry = {
-    id: opts.id,
-    type: n.name,
-    value: truncate2(n.message, MAX_VALUE),
-    mechanism: {
-      type: "generic",
-      handled: opts.handled,
-      // An exception the app reported by hand was constructed, not thrown by the
-      // runtime at a real call site.
-      synthetic: !(err instanceof Error)
-    }
-  };
-  if (frames.length > 0) {
-    entry.stacktrace = { type: "resolved", frames: frames.map(frameOf) };
-  }
-  return entry;
-}
-function fingerprint(entry) {
-  const frames = entry.stacktrace?.frames ?? [];
-  const pieces = frames.filter((f) => f.in_app).map((f) => `${f.mangled_name}@${f.source}`);
-  return digest([entry.type, ...pieces].join("\n"));
-}
-function exceptionProperties(err, opts) {
-  const entry = exceptionEntry(err, opts);
-  const frames = entry.stacktrace?.frames ?? [];
-  const fp = fingerprint(entry);
-  return {
-    $exception_list: [entry],
-    $exception_fingerprint: fp,
-    // Records WHY this fingerprint holds. 'manual' is the honest value: the client
-    // supplied the key rather than a server grouper deriving one.
-    $exception_fingerprint_record: [{ type: "manual" }],
-    $exception_type: entry.type,
-    $exception_message: entry.value,
-    $exception_level: opts.level ?? "error",
-    $exception_handled: opts.handled,
-    $exception_synthetic: entry.mechanism?.synthetic ?? false,
-    $exception_types: [entry.type],
-    $exception_values: [entry.value],
-    $exception_sources: frames.map((f) => f.source).filter((s) => !!s),
-    $exception_functions: frames.map((f) => f.resolved_name ?? f.mangled_name).filter((s) => !!s)
-  };
-}
-
 // src/storage.ts
 var KEY = {
   session: "hz_session",
@@ -803,10 +592,10 @@ function linkUrl(url, state, fromHost, base) {
   }
   if (u.protocol !== "https:" && u.protocol !== "http:") return url;
   if (!orgOf(u.hostname) || u.hostname === fromHost) return url;
-  const set = (k, v) => v && u.searchParams.set(k, v);
-  if (isId(state.anonId)) set(LINK_PARAMS.anon, state.anonId);
-  if (isId(state.sessionId)) set(LINK_PARAMS.session, state.sessionId);
-  if (state.firstTouch) set(LINK_PARAMS.firstTouch, encodeFirstTouch(state.firstTouch));
+  const set2 = (k, v) => v && u.searchParams.set(k, v);
+  if (isId(state.anonId)) set2(LINK_PARAMS.anon, state.anonId);
+  if (isId(state.sessionId)) set2(LINK_PARAMS.session, state.sessionId);
+  if (state.firstTouch) set2(LINK_PARAMS.firstTouch, encodeFirstTouch(state.firstTouch));
   return u.toString();
 }
 function readLink(search) {
@@ -831,20 +620,16 @@ function stripLink(href) {
   return hit ? u.pathname + u.search + u.hash : void 0;
 }
 
+// package.json
+var version = "0.3.49";
+
+// src/version.ts
+var VERSION = version;
+
 // src/core.ts
 var EVENT_PATH = "/v1/event";
 var DEFAULT_HOST = "https://api.hanzo.ai";
-var ENVELOPE_CONTENT_TYPE = "application/x-sentry-envelope";
 var BEACON_CONTENT_TYPE = "text/plain";
-function readEnvDsn() {
-  try {
-    if (typeof process !== "undefined" && process.env) {
-      return process.env.NEXT_PUBLIC_HANZO_EVENT_DSN || process.env.HANZO_EVENT_DSN || void 0;
-    }
-  } catch {
-  }
-  return void 0;
-}
 function readEnv(name) {
   try {
     if (typeof process !== "undefined" && process.env) return process.env[name] || void 0;
@@ -857,7 +642,8 @@ function appendQuery(url, key, value) {
 }
 function normalizeError2(err) {
   const n = normalizeError(err);
-  return { type: n.name, message: n.message, stack: n.stack };
+  const frames = framesFromStack(n.stack).slice(-50).map((f) => ({ function: f.function, file: f.filename, line: f.lineno, column: f.colno }));
+  return { type: n.name, message: n.message, stack: n.stack, frames };
 }
 var isBrowser = () => typeof window !== "undefined" && typeof document !== "undefined";
 function serializeBatch(batch) {
@@ -953,35 +739,13 @@ var Analytics = class {
       ingestKey: config.ingestKey ?? readEnv("NEXT_PUBLIC_PUBLISHABLE_KEY") ?? keyForPage()
     };
     this.transport = config.transport ?? new DefaultTransport();
-    this.dsn = parseDsn(
-      config.dsn ?? readEnvDsn() ?? dsnForProduct(this.cfg.product, this.cfg.ingestKey)
-    );
   }
   /** adopt gives this client a credential it does not have. The key belongs to
    *  the stream, not to whichever caller happened to ask for the handle first,
-   *  so a later caller carrying one hands it over. The error plane derives from
-   *  the key, so it comes up here too when it was inert for want of one.
-   *  Present fields are never overwritten: the first caller's key stays. */
+   *  so a later caller carrying one hands it over. Present fields are never overwritten: the first caller's key stays. */
   adopt(config) {
     if (config.ingestKey && !this.cfg.ingestKey) this.cfg.ingestKey = config.ingestKey;
     if (config.getToken && !this.cfg.getToken) this.cfg.getToken = config.getToken;
-    if (!this.dsn) {
-      this.dsn = parseDsn(
-        config.dsn ?? readEnvDsn() ?? dsnForProduct(this.cfg.product, this.cfg.ingestKey)
-      );
-    }
-  }
-  /** errorPlaneEnabled reports whether captured exceptions can actually reach the
-   *  error host. False means a DSN was never configured — the documented
-   *  fail-safe. Exposed so an app (or a test) can assert its wiring instead of
-   *  discovering months later that nothing was ever reported. */
-  get errorPlaneEnabled() {
-    return this.dsn !== null;
-  }
-  /** errorIngestUrl is the fully-derived envelope endpoint, or undefined when the
-   *  plane is inert. Diagnostics only. */
-  get errorIngestUrl() {
-    return this.dsn?.ingestUrl;
   }
   /** init is idempotent and browser-only for its side effects: capture first-touch
    *  attribution, hydrate cohort, register the unload flush, and (unless opted out)
@@ -1069,45 +833,28 @@ var Analytics = class {
     this.enqueue("event", event, { properties, ...commerce });
   }
   /** captureError reports a caught error, an unhandled rejection, a React render
-   *  error, or a manual report to BOTH planes, from one call:
-   *
-   *    - the ERROR PLANE — a real Sentry envelope to the DSN host. This is the one
-   *      that produces an issue in sentry.hanzo.ai (grouping, stack frames, AST).
-   *      Inert when no DSN is configured.
-   *    - the EVENT STREAM — a `type:'error'` row in the cloud event warehouse, so
-   *      an error stays correlated with the session's pageviews for product
-   *      analysis (readable via GET /v1/errors).
-   *
-   *  Both carry the SAME session and subject id, so an error and the pageview
-   *  before it join up. Never throws back into the app; errors are higher-signal
-   *  than pageviews, so both planes flush promptly (a crash may unload the page
-   *  moments later). */
+   *  error, or a manual report as ONE event of type 'error' on the one stream.
+   *  It carries the exception (type, message, frames, stack, handled) and the
+   *  release, environment, site, product and level that group and scope it, and
+   *  flushes promptly (a crash may unload the page moments later). Never throws
+   *  back into the app. */
   captureError(err, context) {
     if (this.reentrant) return;
     this.reentrant = true;
     try {
-      try {
-        this.sendError(err, context);
-      } catch {
-      }
-      try {
-        const handled = context?.handled ?? true;
-        const ex = normalizeError2(err);
-        ex.handled = handled;
-        this.enqueue("event", EXCEPTION, {
-          error: ex,
-          properties: {
-            ...context?.properties,
-            ...exceptionProperties(err, {
-              handled,
-              id: hzUuidv7(),
-              level: context?.level
-            })
-          }
-        });
-        this.flush();
-      } catch {
-      }
+      const handled = context?.handled ?? true;
+      const ex = normalizeError2(err);
+      ex.handled = handled;
+      this.enqueue("error", void 0, {
+        error: ex,
+        level: context?.level ?? (handled ? "error" : "fatal"),
+        release: this.cfg.release ?? readEnv("NEXT_PUBLIC_HANZO_RELEASE"),
+        environment: this.cfg.environment ?? readEnv("NODE_ENV"),
+        site: isBrowser() ? window.location.hostname : void 0,
+        properties: context?.properties
+      });
+      this.flush();
+    } catch {
     } finally {
       this.reentrant = false;
     }
@@ -1150,39 +897,6 @@ var Analytics = class {
     });
   }
   // ── internals ────────────────────────────────────────────────────────────
-  /** sendError frames one exception as a Sentry envelope and posts it to the DSN's
-   *  ingest URL. The DSN's own key rides ?sentry_key= (the credential channel the
-   *  server trusts, and the only one a headerless beacon can carry), so NO bearer
-   *  or publishable key is attached here — the two planes authenticate
-   *  independently. Errors are sent one envelope per event, immediately: batching
-   *  a crash report is how you lose it. */
-  sendError(err, options) {
-    if (!this.cfg.enabled || !this.dsn) return;
-    const event = buildSentryEvent({
-      error: err,
-      options,
-      identity: this.errorIdentity(),
-      capturePII: this.cfg.capturePII ?? false
-    });
-    const body = buildEnvelope(event, this.dsn);
-    if (this.cfg.debug) console.debug("[event] error \u2192", this.dsn.ingestUrl, event.event_id);
-    this.transport.send(this.dsn.ingestUrl, body, {
-      beacon: false,
-      contentType: ENVELOPE_CONTENT_TYPE,
-      debug: this.cfg.debug
-    });
-  }
-  /** errorIdentity is the SAME identity the event stream stamps — the OIDC subject
-   *  once identify() has run, else the anon id. Never email/PII. */
-  errorIdentity() {
-    return {
-      userId: this.personId ?? anonId(),
-      sessionId: sessionId(),
-      product: this.cfg.product,
-      release: this.cfg.release ?? readEnv("NEXT_PUBLIC_HANZO_RELEASE"),
-      environment: this.cfg.environment ?? readEnv("NODE_ENV")
-    };
-  }
   enqueue(kind, event, extra) {
     if (!this.cfg.enabled) return;
     if (!this.started) this.init();
@@ -1268,6 +982,45 @@ function createAnalytics(config) {
   return fresh;
 }
 
+// src/cookie.ts
+function get(name) {
+  if (typeof document === "undefined") return void 0;
+  const hit = document.cookie.split("; ").find((c) => c.startsWith(`${name}=`));
+  return hit ? decodeURIComponent(hit.slice(name.length + 1)) : void 0;
+}
+
+// src/consent.ts
+var CONSENT_COOKIE = "hz_consent";
+var CONSENT_EVENT = "hzconsent";
+var US = /^(America\/(New_York|Chicago|Denver|Los_Angeles|Phoenix|Anchorage|Adak|Boise|Detroit|Juneau|Sitka|Nome|Yakutat|Menominee|Metlakatla|Indiana\/.*|Kentucky\/.*|North_Dakota\/.*)|Pacific\/Honolulu|US\/.*)$/;
+function gpc() {
+  if (typeof navigator === "undefined") return false;
+  return navigator.globalPrivacyControl === true;
+}
+function refused() {
+  if (typeof window === "undefined") return false;
+  const n = navigator;
+  const dnt = n.doNotTrack ?? window.doNotTrack ?? n.msDoNotTrack;
+  return gpc() || dnt === "1" || dnt === "yes";
+}
+function region() {
+  try {
+    const zone = Intl.DateTimeFormat().resolvedOptions().timeZone ?? "";
+    return US.test(zone) ? "opt-out" : "opt-in";
+  } catch {
+    return "opt-in";
+  }
+}
+function read2() {
+  const kept = get(CONSENT_COOKIE);
+  const on = kept !== void 0 ? kept.split(",") : region() === "opt-in" || refused() ? [] : ["analytics", "marketing", "ads"];
+  const has = (k) => on.includes(k);
+  return { analytics: has("analytics"), marketing: has("marketing") && !gpc(), ads: has("ads") && !gpc() };
+}
+function render(c) {
+  return ["analytics", "marketing", "ads"].filter((k) => c[k]).join(",");
+}
+
 // src/react.tsx
 var Ctx = createContext(null);
 function AnalyticsProvider(props) {
@@ -1322,6 +1075,18 @@ var ErrorBoundary = class extends Component {
   }
 };
 ErrorBoundary.contextType = Ctx;
+var listen = (on) => {
+  window.addEventListener(CONSENT_EVENT, on);
+  return () => window.removeEventListener(CONSENT_EVENT, on);
+};
+function useConsent() {
+  const kept = useSyncExternalStore(listen, () => render(read2()), () => "");
+  return {
+    analytics: kept.includes("analytics"),
+    marketing: kept.includes("marketing"),
+    ads: kept.includes("ads")
+  };
+}
 /*! anon.js — THE anonymous-identity chain. ONE implementation, two distributions.
  *
  * One browser is ONE person on every Hanzo surface, whichever client a page
@@ -1344,6 +1109,6 @@ ErrorBoundary.contextType = Ctx;
  *   curl -fsSL https://unpkg.com/@hanzo/event/src/anon.js -o apps/analytics/anon.js
  */
 
-export { AnalyticsProvider, ErrorBoundary, useAnalytics, usePageview };
+export { AnalyticsProvider, ErrorBoundary, useAnalytics, useConsent, usePageview };
 //# sourceMappingURL=react.mjs.map
 //# sourceMappingURL=react.mjs.map