@hanzo/event 0.3.48 → 0.3.49

package/README.md

@@ -4,28 +4,9 @@ The ONE telemetry client for Hanzo surfaces. Emits every kind of event —
 `pageview` / `event` / `identify` / `group` **and errors** — to **Hanzo Cloud**,
 never to a third-party.
 
-ONE API surface over **TWO** planes. They are separate pipes, and neither can
-starve the other:
-
-```
-1. event stream  POST {host}/v1/event    body: { batch: [Event, …] } -> { accepted, dropped }
-2. error plane   POST {dsn}/v1/sentry/{projectId}/envelope/?sentry_key=…   (a real Sentry envelope)
-```
-
-> ### Errors need a DSN. Without one, nothing reaches Sentry.
->
-> **There is no server-side fan-out from `/v1/event` into Sentry.** Versions
-> ≤ 0.3.1 of this README claimed there was — that "Cloud fans the one stream out
-> into three lenses". It does not. `/v1/event` writes a `type:'error'` row to the
-> cloud event warehouse (readable via `GET /v1/errors`) and stops there. Because
-> every Hanzo property believed that claim, nobody set a DSN, and the entire
-> fleet reported **zero** errors to Sentry until 0.3.2 added the envelope.
->
-> Set `dsn` (or `NEXT_PUBLIC_HANZO_EVENT_DSN`). Mint one per property with
-> `POST /v1/sentry/projects`. The key is publishable and write-only — safe in a
-> browser bundle, same trust class as a `pk_` ingest key. No DSN means the error
-> plane is **inert**: nothing is sent, nothing throws, analytics is unaffected.
-> Assert `client.errorPlaneEnabled` if you want to know which you have.
+ONE endpoint, `POST {host}/v1/event`, body `{ batch: [Event, …] }`. Pageviews,
+events, identifies, groups and errors all ride it; there is no second endpoint,
+DSN or envelope.
 
 ### No bundler? Use the hosted tag
 
@@ -78,9 +59,8 @@ refusals. A React app does not need this file — mount `<Hanzo analytics>` from
 - **Batched** with a size + interval flush, and **beacon-on-unload**
   (`sendBeacon` for cookie/publishable-key apps, `fetch(keepalive)` for token apps).
 - **Auto error capture** (subsumes `@sentry`): `window.onerror`,
-  `unhandledrejection`, and a React `ErrorBoundary` are reported on both planes —
-  a Sentry envelope to the DSN host, and a correlated `type:'error'` event on the
-  stream. Opt out with `captureErrors: false`.
+  `unhandledrejection`, and a React `ErrorBoundary` are reported as one
+  `type:'error'` event each. Opt out with `captureErrors: false`.
 - **Scrubbed at the source**: secrets are always redacted and PII is masked
   client-side before an error leaves the device.
 - **First-touch attribution**: UTM + referrer + `refCode` are parsed once and
@@ -140,12 +120,10 @@ Unhandled errors and promise rejections are captured automatically. React render
 errors never reach `window.onerror`, so wrap your tree in the `ErrorBoundary` to
 catch those too. Report caught errors yourself with `captureError`.
 
-**Pass a `dsn` or none of this reaches Sentry.**
-
 ```tsx
 import { ErrorBoundary } from '@hanzo/event/react'
 
-<AnalyticsProvider config={{ product: 'console', dsn: process.env.NEXT_PUBLIC_HANZO_EVENT_DSN }}>
+<AnalyticsProvider config={{ product: 'console' }}>
   <ErrorBoundary fallback={(err, reset) => <Crash error={err} onReset={reset} />}>
     <App />
   </ErrorBoundary>
@@ -156,20 +134,13 @@ import { ErrorBoundary } from '@hanzo/event/react'
 try { risky() } catch (err) { analytics.captureError(err, { properties: { where: 'checkout' } }) }
 ```
 
-Each report goes to both planes:
-
-- **Sentry** — a real Sentry envelope to the DSN's ingest route. This is the only
-  thing that creates an issue in the error dashboard, with grouping and stack
-  frames. Sent one envelope per error, immediately; batching a crash report is
-  how you lose it.
-- **the event stream** — a `type:'error'` event; Cloud folds the exception into
-  `properties.$exception` and stamps `event_type='error'`, so the error stays
-  correlated with the session's pageviews (`GET /v1/errors`). This is product
-  signal, *not* error tracking, and it never reaches Sentry on its own.
+Each report is one `type:'error'` event carrying `error` (`type`, `message`,
+`frames`, `stack`, `handled`) plus `release`, `environment`, `site`, `product` and
+`level`. The server files it on the error plane and groups it into an issue.
 
 The message and any `properties` are scrubbed of secrets and PII before sending,
 and the message is capped at 8KB. `captureError` never throws back into your app,
-and a failure on one plane cannot suppress the other.
+
 
 ## Publishable key (public pages, no bearer)
 
@@ -178,18 +149,8 @@ Marketing/public pages have no session. Mint a write-only publishable key
 fetch and `?ingest_key` on an unload beacon, so the **event stream** accepts
 anonymous traffic. It is safe to ship in a bundle (write-only, cannot read).
 
-The `ingestKey` authenticates the event stream ONLY. The error plane
-authenticates independently with the DSN key on `?sentry_key=`, and the two
-credentials are never sent to each other's host. A public page that wants errors
-in Sentry needs the `dsn` as well:
-
 ```ts
-createAnalytics({
-  product: 'site',
-  host: 'https://api.hanzo.ai',
-  ingestKey: 'pk_live_…',                          // event stream
-  dsn: process.env.NEXT_PUBLIC_HANZO_EVENT_DSN,    // error plane
-})
+createAnalytics({ product: 'site', host: 'https://api.hanzo.ai', ingestKey: 'pk_live_…' })
 ```
 
 ## Taxonomy, funnels & goals

package/dist/core.d.ts

@@ -13,25 +13,13 @@ export declare class Analytics {
     private started;
     /** The view pageview() last counted — path + location. */
     private counted?;
-    /** Parsed error-plane DSN, or null when the plane is inert. */
-    private dsn;
     /** Guards against an error thrown *inside* the error path re-entering it. */
     private reentrant;
     constructor(config: AnalyticsConfig);
     /** adopt gives this client a credential it does not have. The key belongs to
      *  the stream, not to whichever caller happened to ask for the handle first,
-     *  so a later caller carrying one hands it over. The error plane derives from
-     *  the key, so it comes up here too when it was inert for want of one.
-     *  Present fields are never overwritten: the first caller's key stays. */
+     *  so a later caller carrying one hands it over. Present fields are never overwritten: the first caller's key stays. */
     adopt(config: AnalyticsConfig): void;
-    /** errorPlaneEnabled reports whether captured exceptions can actually reach the
-     *  error host. False means a DSN was never configured — the documented
-     *  fail-safe. Exposed so an app (or a test) can assert its wiring instead of
-     *  discovering months later that nothing was ever reported. */
-    get errorPlaneEnabled(): boolean;
-    /** errorIngestUrl is the fully-derived envelope endpoint, or undefined when the
-     *  plane is inert. Diagnostics only. */
-    get errorIngestUrl(): string | undefined;
     /** init is idempotent and browser-only for its side effects: capture first-touch
      *  attribution, hydrate cohort, register the unload flush, and (unless opted out)
      *  auto-capture unhandled errors. Safe to call from a React effect on every
@@ -58,19 +46,11 @@ export declare class Analytics {
      *  fields (productId/quantity/revenue/currency) may be passed for order events. */
     capture(event: string, properties?: Record<string, unknown>, commerce?: Pick<WireEvent, 'productId' | 'quantity' | 'revenue' | 'currency'>): void;
     /** captureError reports a caught error, an unhandled rejection, a React render
-     *  error, or a manual report to BOTH planes, from one call:
-     *
-     *    - the ERROR PLANE — a real Sentry envelope to the DSN host. This is the one
-     *      that produces an issue in sentry.hanzo.ai (grouping, stack frames, AST).
-     *      Inert when no DSN is configured.
-     *    - the EVENT STREAM — a `type:'error'` row in the cloud event warehouse, so
-     *      an error stays correlated with the session's pageviews for product
-     *      analysis (readable via GET /v1/errors).
-     *
-     *  Both carry the SAME session and subject id, so an error and the pageview
-     *  before it join up. Never throws back into the app; errors are higher-signal
-     *  than pageviews, so both planes flush promptly (a crash may unload the page
-     *  moments later). */
+     *  error, or a manual report as ONE event of type 'error' on the one stream.
+     *  It carries the exception (type, message, frames, stack, handled) and the
+     *  release, environment, site, product and level that group and scope it, and
+     *  flushes promptly (a crash may unload the page moments later). Never throws
+     *  back into the app. */
     captureError(err: unknown, context?: CaptureErrorOptions): void;
     /** setCohort persists cohort dimensions (e.g. signupWeek at signup) so they ride
      *  every subsequent event. */
@@ -87,16 +67,6 @@ export declare class Analytics {
      *      cookie fine).
      */
     flush(beacon?: boolean): void;
-    /** sendError frames one exception as a Sentry envelope and posts it to the DSN's
-     *  ingest URL. The DSN's own key rides ?sentry_key= (the credential channel the
-     *  server trusts, and the only one a headerless beacon can carry), so NO bearer
-     *  or publishable key is attached here — the two planes authenticate
-     *  independently. Errors are sent one envelope per event, immediately: batching
-     *  a crash report is how you lose it. */
-    private sendError;
-    /** errorIdentity is the SAME identity the event stream stamps — the OIDC subject
-     *  once identify() has run, else the anon id. Never email/PII. */
-    private errorIdentity;
     private enqueue;
     private build;
     private schedule;

package/dist/core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AA2DA,OAAO,EAKL,aAAa,EAEb,SAAS,EAEV,MAAM,WAAW,CAAA;AAGlB,OAAO,KAAK,EACV,eAAe,EAEf,mBAAmB,EACnB,MAAM,EAKN,SAAS,EACV,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,OAAO,EAAE,CAAA;AA2KlB,qBAAa,SAAS;IACpB,OAAO,CAAC,GAAG,CAGM;IACjB,OAAO,CAAC,SAAS,CAAW;IAC5B,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,KAAK,CAA6C;IAC1D,OAAO,CAAC,QAAQ,CAAC,CAAQ;IACzB,OAAO,CAAC,WAAW,CAA2B;IAC9C,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,OAAO,CAAQ;IACvB,0DAA0D;IAC1D,OAAO,CAAC,OAAO,CAAC,CAAQ;IACxB,+DAA+D;IAC/D,OAAO,CAAC,GAAG,CAAY;IACvB,6EAA6E;IAC7E,OAAO,CAAC,SAAS,CAAQ;IAEzB,YAAY,MAAM,EAAE,eAAe,EAwClC;IAED;;;;8EAI0E;IAC1E,KAAK,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAQnC;IAED;;;mEAG+D;IAC/D,IAAI,iBAAiB,IAAI,OAAO,CAE/B;IAED;4CACwC;IACxC,IAAI,cAAc,IAAI,MAAM,GAAG,SAAS,CAEvC;IAED;;;kBAGc;IACd,IAAI,IAAI,IAAI,CAgDX;IAED;;8DAE0D;IAC1D,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CASxB;IAED;;sBAEkB;IAClB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAI7B;IAED,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAGjE;IAED;6EACyE;IACzE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAE7D;IAED;;oEAEgE;IAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAclE;IAED;uFACmF;IACnF,OAAO,CACL,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC,GAC5E,IAAI,CAEN;IAED;;;;;;;;;;;;;0BAasB;IACtB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAuD9D;IAED;kCAC8B;IAC9B,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAE7B;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,MAAM,UAAQ,GAAG,IAAI,CAmC1B;IAID;;;;;6CAKyC;IACzC,OAAO,CAAC,SAAS;IAiBjB;sEACkE;IAClE,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,KAAK;IAkEb,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,UAAU;CAMnB;AAiCD;;;;;;;;;;;4DAW4D;AAC5D,wBAAgB,YAAY,IAAI,IAAI,CAGnC;AAED;;iEAEiE;AACjE,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CAmBlE;AAID,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAA"}
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAoCA,OAAO,EAKL,aAAa,EAEb,SAAS,EAEV,MAAM,WAAW,CAAA;AAGlB,OAAO,KAAK,EACV,eAAe,EAEf,mBAAmB,EACnB,MAAM,EAIN,SAAS,EACV,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,OAAO,EAAE,CAAA;AA4JlB,qBAAa,SAAS;IACpB,OAAO,CAAC,GAAG,CAGM;IACjB,OAAO,CAAC,SAAS,CAAW;IAC5B,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,KAAK,CAA6C;IAC1D,OAAO,CAAC,QAAQ,CAAC,CAAQ;IACzB,OAAO,CAAC,WAAW,CAA2B;IAC9C,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,OAAO,CAAQ;IACvB,0DAA0D;IAC1D,OAAO,CAAC,OAAO,CAAC,CAAQ;IACxB,6EAA6E;IAC7E,OAAO,CAAC,SAAS,CAAQ;IAEzB,YAAY,MAAM,EAAE,eAAe,EAgClC;IAED;;4HAEwH;IACxH,KAAK,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAGnC;IAED;;;kBAGc;IACd,IAAI,IAAI,IAAI,CA6CX;IAED;;8DAE0D;IAC1D,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CASxB;IAED;;sBAEkB;IAClB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAI7B;IAED,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAGjE;IAED;6EACyE;IACzE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAE7D;IAED;;oEAEgE;IAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAclE;IAED;uFACmF;IACnF,OAAO,CACL,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC,GAC5E,IAAI,CAEN;IAED;;;;;6BAKyB;IACzB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAsB9D;IAED;kCAC8B;IAC9B,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAE7B;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,MAAM,UAAQ,GAAG,IAAI,CAmC1B;IAID,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,KAAK;IAkEb,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,UAAU;CAMnB;AAiCD;;;;;;;;;;;4DAW4D;AAC5D,wBAAgB,YAAY,IAAI,IAAI,CAGnC;AAED;;iEAEiE;AACjE,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CAmBlE;AAID,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAA"}