@hanzo/event 0.3.48 → 0.3.50

package/dist/tags.d.ts

@@ -22,6 +22,14 @@ export interface TagOptions {
  * given a key.
  */
 export declare const SITE_KEY: Readonly<Record<string, string>>;
+/**
+ * Resolves once every tag this visitor's choice loads has taken the page view, or after
+ * `limit` ms, whichever is first: the tag set has answered, gtag.js has loaded or failed,
+ * and Meta's library has replaced the stub that queued the call. A page that is about to
+ * leave waits on this so the visit is counted where it arrived. A tag the choice does not
+ * load is not waited for.
+ */
+export declare function ready(limit?: number): Promise<void>;
 /**
  * Starts the tag manager: fetches the site's tag set and loads what consent
  * allows, again on every consent change. Safe to call on every page load, and

package/dist/tags.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tags.d.ts","sourceRoot":"","sources":["../src/tags.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAEvC,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAChC;AAED,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CACnB;AAED;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUpD,CAAA;AAuNF;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,CAAC,GAAE,UAAe,GAAG,MAAM,IAAI,CAmCpD;AAOD,uFAAuF;AACvF,wBAAgB,KAAK,IAAI,MAAM,CAc9B;AA+CD;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,SAAU,GAAG,IAAI,CAiCpG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,KAAK,CACnB,MAAM,EAAE,SAAS,GAAG,SAAS,EAC7B,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;AACpC,kGAAkG;AAClG,IAAI,CAAC,EAAE,MAAM,GACZ,IAAI,CAsBN;AAED,gGAAgG;AAChG,wBAAgB,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAG/C"}
+{"version":3,"file":"tags.d.ts","sourceRoot":"","sources":["../src/tags.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAEvC,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAChC;AAED,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CACnB;AAED;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAepD,CAAA;AAqCF;;;;;;GAMG;AACH,wBAAgB,KAAK,CAAC,KAAK,SAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAcjD;AAoLD;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,CAAC,GAAE,UAAe,GAAG,MAAM,IAAI,CAmCpD;AAOD,uFAAuF;AACvF,wBAAgB,KAAK,IAAI,MAAM,CAc9B;AA+CD;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,SAAU,GAAG,IAAI,CAiCpG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,KAAK,CACnB,MAAM,EAAE,SAAS,GAAG,SAAS,EAC7B,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;AACpC,kGAAkG;AAClG,IAAI,CAAC,EAAE,MAAM,GACZ,IAAI,CAsBN;AAED,gGAAgG;AAChG,wBAAgB,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAG/C"}

package/dist/throwable.d.ts

@@ -0,0 +1,15 @@
+import type { SentryFrame } from './types';
+/**
+ * framesFromStack parses a browser Error.stack into Sentry frames, OLDEST-FIRST
+ * (Sentry orders caller->callee; the crash site is last — matching the server's
+ * pickCrashFrame). Handles both V8 ("at fn (file:li:co)") and
+ * Firefox/Safari ("fn@file:li:co"). Unparseable lines are skipped.
+ */
+export declare function framesFromStack(stack: string | undefined): SentryFrame[];
+/** normalizeError coerces an unknown throwable into {name, message, stack}. */
+export declare function normalizeError(err: unknown): {
+    name: string;
+    message: string;
+    stack?: string;
+};
+//# sourceMappingURL=throwable.d.ts.map

package/dist/throwable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"throwable.d.ts","sourceRoot":"","sources":["../src/throwable.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAuB1C;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,EAAE,CAkDxE;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAoB9F"}

package/dist/types.d.ts

@@ -1,12 +1,7 @@
-/** The event kinds — the closed set the server understands. `error` marks the
- *  breadcrumb an exception leaves on the event stream (Cloud stamps
- *  event_type='error' for the warehouse, GET /v1/errors). It does NOT reach the
- *  Sentry dashboard — the envelope on the error plane does that. */
+/** The event kinds — the closed set the server understands. `error` is a captured
+ *  exception; the server files it on the error plane. */
 export type EventKind = 'pageview' | 'event' | 'identify' | 'group' | 'error';
-/** A captured exception as it rides the EVENT STREAM — Cloud folds it into
- *  properties.$exception for the warehouse. The richer copy (parsed stack frames,
- *  grouping, release) travels on the error plane as a Sentry envelope; see
- *  AnalyticsConfig.dsn. */
+/** A captured exception, as the `error` field of a `type:'error'` event. */
 export interface Exception {
     /** Constructor/class name, e.g. "TypeError". */
     type?: string;
@@ -17,6 +12,13 @@ export interface Exception {
     /** false = an unhandled/global error (window.onerror, unhandledrejection);
      *  true = a caught error the app chose to report. Defaults true. */
     handled?: boolean;
+    /** The structured stack, oldest first. */
+    frames?: {
+        function?: string;
+        file?: string;
+        line?: number;
+        column?: number;
+    }[];
 }
 /** One stack frame as Error Tracking renders it. The key names are the product's
  *  POST-symbolication vocabulary (`mangled_name`/`source`/`line`/`column`), which
@@ -121,9 +123,13 @@ export interface WireEvent {
     revenue?: number;
     currency?: string;
     /** Set on `type:'error'` events — the captured exception. Cloud lifts it into
-     *  properties.$exception (foldException) for the event warehouse. Not a Sentry
-     *  path: the envelope on the error plane is what feeds the dashboard. */
+     *  properties.$exception (foldException) for the event warehouse. The
+     *  server files it on the error plane. */
     error?: Exception;
+    level?: string;
+    release?: string;
+    environment?: string;
+    site?: string;
     properties?: Record<string, unknown>;
     library?: string;
     libraryVersion?: string;
@@ -166,8 +172,7 @@ export interface AnalyticsConfig {
      *  POST /v1/keys {"type":"publishable"}.
      *
      *  Omit it and the client reads NEXT_PUBLIC_PUBLISHABLE_KEY from the inlined
-     *  build env, the same way `dsn` falls back — so a surface declares BOTH planes
-     *  in its build and neither needs code to switch on. That is the ONE spelling
+     *  build env, That is the ONE spelling
      *  the fleet already carries: KMS holds deploy/PUBLISHABLE_KEY, and each
      *  Dockerfile takes PUBLISHABLE_KEY as a build-arg and re-exports it with the
      *  NEXT_PUBLIC_ prefix that makes Next inline it.
@@ -177,9 +182,7 @@ export interface AnalyticsConfig {
      *  edge refuses an unattributable write rather than filing it where its owner
      *  cannot read it. That failure is invisible from the page, which is why the key
      *  belongs in the env next to the DSN and not in a checklist.
-     *
-     *  This attributes the EVENT STREAM only — the error plane authenticates
-     *  independently with `dsn`, and one does not stand in for the other. */
+     */
     ingestKey?: string;
     /** Max events buffered before an automatic flush. */
     batchSize?: number;
@@ -188,21 +191,12 @@ export interface AnalyticsConfig {
     /** Turn the client off entirely (e.g. opt-out / DNT). Defaults to enabled. */
     enabled?: boolean;
     /** Auto-capture unhandled errors + promise rejections (window.onerror,
-     *  unhandledrejection). Browser-only, defaults to enabled. Together with `dsn`
-     *  this is what makes the client a drop-in @sentry replacement — without a
-     *  `dsn` the captures never reach the Sentry dashboard. */
+     *  unhandledrejection). Browser-only, defaults to enabled. */
     captureErrors?: boolean;
     /** Override the transport (tests). */
     transport?: Transport;
     /** Debug logging. */
     debug?: boolean;
-    /** Hanzo-minted Sentry DSN: "https://<version>:<hmac>@<host>/v1/event/<projectId>".
-     *  Publishable — the key authorizes writes to ONE project and can read nothing,
-     *  so it is safe in a browser bundle (same trust class as `ingestKey`). When
-     *  absent the client reads NEXT_PUBLIC_HANZO_EVENT_DSN; when neither is set the
-     *  error plane is inert (fail-safe: nothing sent, nothing thrown, analytics
-     *  unaffected). Mint one per property: POST /v1/sentry/projects. */
-    dsn?: string;
     /** Release stamped on error events (a git SHA / app version). */
     release?: string;
     /** Deployment environment for error events (production | staging | …). */
@@ -221,55 +215,6 @@ export interface SentryFrame {
     colno?: number;
     in_app?: boolean;
 }
-export interface SentryExceptionValue {
-    type?: string;
-    value?: string;
-    module?: string;
-    stacktrace?: {
-        frames: SentryFrame[];
-    };
-}
-export interface SentryUser {
-    /** Stable subject id (OIDC sub / anon id). NEVER email/username/ip. */
-    id?: string;
-}
-export interface SentryEvent {
-    event_id: string;
-    timestamp: number;
-    platform: 'javascript';
-    level: SentryLevel;
-    logger?: string;
-    environment?: string;
-    release?: string;
-    transaction?: string;
-    fingerprint?: string[];
-    message?: string;
-    exception?: {
-        values: SentryExceptionValue[];
-    };
-    tags?: Record<string, string>;
-    user?: SentryUser;
-    contexts?: Record<string, Record<string, unknown>>;
-    sdk?: {
-        name: string;
-        version: string;
-    };
-}
-/** Parsed DSN — the public key + the derived ingest URL. */
-export interface Dsn {
-    /** "<version>:<hmac>" public key presented via ?sentry_key= (beacon-safe). */
-    publicKey: string;
-    /** Ingest origin, e.g. "https://sentry.hanzo.ai". */
-    origin: string;
-    /** Project id segment. */
-    projectId: string;
-    /** The DSN's own origin + path, e.g. "https://api.hanzo.ai/v1/event/<projectId>".
-     *  Every URL below is derived from this, so the ingest address is named once —
-     *  in dsnForProduct — and nowhere else. */
-    base: string;
-    /** Fully-derived envelope ingest URL incl. ?sentry_key=. */
-    ingestUrl: string;
-}
 /** Options for Analytics.captureError. */
 export interface CaptureErrorOptions {
     /** false => uncaught (window.onerror / unhandledrejection / render crash). */

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA;;;oEAGoE;AACpE,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,CAAA;AAE7E;;;2BAG2B;AAC3B,MAAM,WAAW,SAAS;IACxB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;wEACoE;IACpE,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED;;mEAEmE;AACnE,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAA;IACd,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAA;IACpB,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,kFAAkF;IAClF,MAAM,EAAE,OAAO,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,QAAQ,EAAE,OAAO,CAAA;IACjB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,0CAA0C;AAC1C,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE;QACV,IAAI,EAAE,SAAS,CAAA;QACf,OAAO,EAAE,OAAO,CAAA;QAChB,SAAS,CAAC,EAAE,OAAO,CAAA;KACpB,CAAA;IACD,+EAA+E;IAC/E,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,MAAM,EAAE,cAAc,EAAE,CAAA;KAAE,CAAA;CAC5D;AAED,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,cAAc,EAAE,CAAA;IACjC,8EAA8E;IAC9E,sBAAsB,EAAE,MAAM,CAAA;IAC9B,6BAA6B,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,EAAE,CAAA;IACnD,eAAe,EAAE,MAAM,CAAA;IACvB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,gBAAgB,EAAE,WAAW,CAAA;IAC7B,kBAAkB,EAAE,OAAO,CAAA;IAC3B,oBAAoB,EAAE,OAAO,CAAA;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,kBAAkB,EAAE,MAAM,EAAE,CAAA;IAC5B,oBAAoB,EAAE,MAAM,EAAE,CAAA;CAC/B;AAED,oEAAoE;AACpE,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE;QACH,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,CAAA;IACD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,kFAAkF;AAClF,MAAM,WAAW,MAAM;IACrB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;gFAGgF;AAChF,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,SAAS,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;6EAEyE;IACzE,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;yBAGyB;AACzB,MAAM,WAAW,SAAS;IACxB;;;;sEAIkE;IAClE,IAAI,CACF,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;QACJ,MAAM,EAAE,OAAO,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,0EAA0E;QAC1E,KAAK,CAAC,EAAE,OAAO,CAAA;KAChB,GACA,IAAI,CAAA;CACR;AAED,MAAM,WAAW,eAAe;IAC9B;;yEAEqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAA;IACf;+DAC2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;IAC1C;;;;;;;;;;;;;;;;;;;;;;6EAsByE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gCAAgC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;+DAG2D;IAC3D,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,sCAAsC;IACtC,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,qBAAqB;IACrB,KAAK,CAAC,EAAE,OAAO,CAAA;IAIf;;;;;wEAKoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;mFAC+E;IAC/E,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAKD,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAA;AAE1E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE;QAAE,MAAM,EAAE,WAAW,EAAE,CAAA;KAAE,CAAA;CACvC;AAED,MAAM,WAAW,UAAU;IACzB,uEAAuE;IACvE,EAAE,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,YAAY,CAAA;IACtB,KAAK,EAAE,WAAW,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE;QAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;KAAE,CAAA;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAClD,GAAG,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CACxC;AAED,4DAA4D;AAC5D,MAAM,WAAW,GAAG;IAClB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAA;IACjB,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAA;IACd,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB;;+CAE2C;IAC3C,IAAI,EAAE,MAAM,CAAA;IACZ,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,0CAA0C;AAC1C,MAAM,WAAW,mBAAmB;IAClC,8EAA8E;IAC9E,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,kFAAkF;IAClF,KAAK,CAAC,EAAE,WAAW,CAAA;CACpB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA;yDACyD;AACzD,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,CAAA;AAE7E,4EAA4E;AAC5E,MAAM,WAAW,SAAS;IACxB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;wEACoE;IACpE,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,0CAA0C;IAC1C,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAChF;AAED;;mEAEmE;AACnE,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAA;IACd,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAA;IACpB,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,kFAAkF;IAClF,MAAM,EAAE,OAAO,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,QAAQ,EAAE,OAAO,CAAA;IACjB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,0CAA0C;AAC1C,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE;QACV,IAAI,EAAE,SAAS,CAAA;QACf,OAAO,EAAE,OAAO,CAAA;QAChB,SAAS,CAAC,EAAE,OAAO,CAAA;KACpB,CAAA;IACD,+EAA+E;IAC/E,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,MAAM,EAAE,cAAc,EAAE,CAAA;KAAE,CAAA;CAC5D;AAED,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,cAAc,EAAE,CAAA;IACjC,8EAA8E;IAC9E,sBAAsB,EAAE,MAAM,CAAA;IAC9B,6BAA6B,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,EAAE,CAAA;IACnD,eAAe,EAAE,MAAM,CAAA;IACvB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,gBAAgB,EAAE,WAAW,CAAA;IAC7B,kBAAkB,EAAE,OAAO,CAAA;IAC3B,oBAAoB,EAAE,OAAO,CAAA;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,kBAAkB,EAAE,MAAM,EAAE,CAAA;IAC5B,oBAAoB,EAAE,MAAM,EAAE,CAAA;CAC/B;AAED,oEAAoE;AACpE,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE;QACH,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,CAAA;IACD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,kFAAkF;AAClF,MAAM,WAAW,MAAM;IACrB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;gFAGgF;AAChF,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,SAAS,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;8CAE0C;IAC1C,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;yBAGyB;AACzB,MAAM,WAAW,SAAS;IACxB;;;;sEAIkE;IAClE,IAAI,CACF,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;QACJ,MAAM,EAAE,OAAO,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,0EAA0E;QAC1E,KAAK,CAAC,EAAE,OAAO,CAAA;KAChB,GACA,IAAI,CAAA;CACR;AAED,MAAM,WAAW,eAAe;IAC9B;;yEAEqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAA;IACf;+DAC2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;IAC1C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gCAAgC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;kEAC8D;IAC9D,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,sCAAsC;IACtC,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,qBAAqB;IACrB,KAAK,CAAC,EAAE,OAAO,CAAA;IAEf,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;mFAC+E;IAC/E,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAID,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAA;AAE1E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,0CAA0C;AAC1C,MAAM,WAAW,mBAAmB;IAClC,8EAA8E;IAC9E,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,kFAAkF;IAClF,KAAK,CAAC,EAAE,WAAW,CAAA;CACpB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanzo/event",
-  "version": "0.3.48",
+  "version": "0.3.50",
   "description": "Hanzo Event — the ONE telemetry client. Emits pageview/event/identify/group to the Hanzo Cloud event stream (POST /v1/event), AND reports errors to Sentry as real Sentry envelopes — the error plane needs a DSN, without one nothing reaches Sentry. First-touch attribution, beacon-on-unload, auto error capture, client-side secret/PII scrubbing, a shared event + goal vocabulary. Subsumes @sentry.",
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",

package/src/core.test.ts

@@ -29,8 +29,6 @@ interface Sent {
 
 // FakeTransport records the EXACT bytes the client would put on the wire, so the
 // tests assert the real POST /v1/event body shape ({ batch: [...] }), not a mock.
-// The error plane puts a newline-delimited Sentry envelope on the same transport,
-// which is deliberately NOT JSON — it is recorded raw, with an empty batch.
 class FakeTransport implements Transport {
   sent: Sent[] = []
   send(
@@ -57,24 +55,11 @@ class FakeTransport implements Transport {
   get all(): WireEvent[] {
     return this.sent.flatMap((s) => s.batch)
   }
-  /** Sends on the error plane — the envelope content type is the discriminator. */
-  get envelopes(): Sent[] {
-    return this.sent.filter((s) => s.contentType === 'application/x-sentry-envelope')
-  }
-  /** Sends on the event stream. */
-  get streams(): Sent[] {
-    return this.sent.filter((s) => s.contentType !== 'application/x-sentry-envelope')
-  }
 }
 
 let tx: FakeTransport
 // Default to same-origin (host:'') so path assertions read the bare /v1/event path;
 // tests that care about the edge host pass it explicitly.
-// `test-app` is deliberately NOT a product in the DSN registry (src/dsn.ts), so
-// the default client here has no error plane and these tests exercise the client
-// itself rather than whichever real products happen to be registered. Tests that
-// want a live error plane pass `dsn:` explicitly; registry resolution is covered
-// in dsn.test.ts.
 function mk(overrides = {}) {
   tx = new FakeTransport()
   return new Analytics({ product: 'test-app', host: '', transport: tx, flushIntervalMs: 999999, ...overrides })
@@ -411,17 +396,17 @@ describe('Analytics capture', () => {
     expect(tx.sent[0].ingestKey).toBeUndefined()
   })
 
-  it('a signed-in bearer WINS over a key from the build env', () => {
-    // The leak this closes: one console bundle is served to several brands, and a
-    // pk- names ONE org. If an env-sourced key displaced the bearer, every
-    // signed-in user's events would re-file under whichever org minted the key.
+  it('a signed-in page sends the key AND the bearer; the bearer never replaces the key', () => {
+    // The person is the bearer and the project is the key. The server files the event
+    // under the key's project only when it belongs to the bearer's own org, so a key
+    // from the build env cannot re-file a person's events under another org.
     process.env.NEXT_PUBLIC_PUBLISHABLE_KEY = 'pk-live-one-org'
     try {
       const a = mk({ getToken: () => 'jwt-of-a-real-person' })
       a.capture('x')
       a.flush()
       expect(tx.sent[0].token).toBe('jwt-of-a-real-person')
-      expect(tx.sent[0].ingestKey).toBeUndefined()
+      expect(tx.sent[0].ingestKey).toBe('pk-live-one-org')
     } finally {
       delete process.env.NEXT_PUBLIC_PUBLISHABLE_KEY
     }
@@ -467,313 +452,56 @@ describe('Analytics capture', () => {
   })
 })
 
-describe('Event error capture', () => {
-  it('emits under the RESERVED $exception name, never under the message', () => {
-    const a = mk()
+describe('error capture', () => {
+  it('is ONE type:error event on the one endpoint, not a second plane', () => {
+    const a = mk({ host: 'https://api.hanzo.ai', release: 'r1', environment: 'production' })
     a.captureError(new TypeError('boom'))
-    // captureError flushes promptly — no explicit flush() needed.
     expect(tx.sent).toHaveLength(1)
+    expect(tx.sent[0].url).toBe('https://api.hanzo.ai/v1/event')
+    expect(tx.all).toHaveLength(1)
     const e = tx.all[0]
-    // THE NAME. Until 0.3.20 this was `ex.message`, which made every distinct
-    // error string a permanent entry in the event taxonomy and left Error
-    // Tracking — which reads this exact name — at zero rows.
-    expect(e.event).toBe('$exception')
-    // THE TYPE. `type` alone picks the storage plane: 'error' routes to the error
-    // plane, which the product-event projection does not read, so an exception
-    // filed there cannot reach Error Tracking. The full error record still goes to
-    // the error plane as a Sentry envelope.
-    expect(e.type).toBe('event')
-    // The exception STILL rides the TOP-LEVEL `error` field, which is what cloud's
-    // foldException reads to stamp properties.$exception (scrubbing on the way).
+    expect(e.type).toBe('error')
+    expect(e.event).toBeUndefined()
     expect(e.error?.type).toBe('TypeError')
     expect(e.error?.message).toBe('boom')
     expect(e.error?.stack).toBeTruthy()
-    expect(e.error?.handled).toBe(true) // a caught, manually-reported error
-    // The client does not stamp $exception itself — the server fold owns that key.
-    expect(e.properties ?? {}).not.toHaveProperty('$exception')
+    expect(Array.isArray(e.error?.frames)).toBe(true)
+    expect(e.error?.handled).toBe(true)
+    expect(e.level).toBe('error')
+    expect(e.release).toBe('r1')
+    expect(e.environment).toBe('production')
+    expect(e.product).toBe('test-app')
+    expect((e as Record<string, unknown>).tenant).toBeUndefined()
   })
 
-  it('carries the $exception_* bag Error Tracking reads', () => {
+  it('never sends a Sentry envelope or a $exception event', () => {
     const a = mk()
-    a.captureError(new TypeError('boom'))
-    const p = tx.all[0].properties as Record<string, unknown>
-    expect(Array.isArray(p.$exception_list)).toBe(true)
-    // Without a fingerprint the issue query drops the event outright.
-    expect(p.$exception_fingerprint).toMatch(/^[0-9a-f]{32}$/)
-    expect(p.$exception_type).toBe('TypeError')
-    expect(p.$exception_handled).toBe(true)
+    a.captureError(new Error('x'))
+    expect(tx.sent.every((s) => s.contentType === undefined)).toBe(true)
+    expect(tx.all.some((e) => e.event === '$exception')).toBe(false)
   })
 
   it('normalizes a thrown string into an exception', () => {
     const a = mk()
     a.captureError('plain failure')
-    const e = tx.all[0]
-    expect(e.event).toBe('$exception')
-    expect(e.type).toBe('event')
-    expect(e.error?.message).toBe('plain failure')
+    expect(tx.all[0].error?.message).toBe('plain failure')
   })
 
-  it('marks handled=false for unhandled/global errors and carries caller properties', () => {
+  it('an unhandled error is fatal and carries caller properties', () => {
     const a = mk()
     a.captureError(new Error('unhandled'), { handled: false, properties: { source: 'onerror' } })
     const e = tx.all[0]
     expect(e.error?.handled).toBe(false)
-    const p = e.properties as Record<string, unknown>
-    // The caller's own properties survive alongside the exception bag.
-    expect(p.source).toBe('onerror')
-    expect(p.$exception_handled).toBe(false)
-  })
-
-  it("a caller property cannot overwrite the exception bag it shares a name with", () => {
-    const a = mk()
-    a.captureError(new Error('x'), {
-      handled: false,
-      properties: { $exception_fingerprint: 'forged' },
-    })
-    const p = tx.all[0].properties as Record<string, unknown>
-    expect(p.$exception_fingerprint).not.toBe('forged')
-  })
-
-  it('an error is still an event on the ONE stream — same /v1/event endpoint + product', () => {
-    const a = mk({ host: 'https://api.hanzo.ai' })
-    a.captureError(new Error('x'))
-    // Same batched endpoint as any other event — one pipe, not a second SDK.
-    expect(tx.sent[0].url).toBe('https://api.hanzo.ai/v1/event')
-    expect(tx.sent[0].raw.startsWith('{"batch":')).toBe(true)
-    expect(tx.all[0].product).toBe('test-app')
-    // never the tenant — the server stamps it, errors included.
-    expect((tx.all[0] as Record<string, unknown>).tenant).toBeUndefined()
+    expect(e.level).toBe('fatal')
+    expect((e.properties as Record<string, unknown>).source).toBe('onerror')
   })
-})
 
-// ── the error plane ────────────────────────────────────────────────────────
-//
-// The regression these tests exist to prevent: @hanzo/event 0.3.1 documented
-// errors as "lensed server-side into … error tracking (sentry)". No such
-// server-side fan-out exists — POST /v1/event stores an event_type='error' row in
-// the cloud warehouse and stops there. The result was that every Hanzo property
-// silently reported ZERO errors to sentry.hanzo.ai. Reaching Sentry requires the
-// client to emit a real Sentry ENVELOPE to the DSN's ingest URL, which is what
-// these assert.
-
-// A syntactically real Hanzo-minted DSN. The key is "<version>:<hmac>"; this hmac
-// is a dummy (32 zero-bytes hex) — the shape is what the parser cares about, and
-// no test performs network I/O.
-const TEST_DSN =
-  'https://1:' +
-  '0'.repeat(64) +
-  '@sentry.hanzo.ai/v1/event/019f9b1e-5785-7359-ad0b-f75db8e58c99'
-
-describe('error plane', () => {
-  it('is INERT without a DSN — nothing sent to sentry, event stream unaffected', () => {
+  it('circular properties do not lose the report', () => {
     const a = mk()
-    expect(a.errorPlaneEnabled).toBe(false)
-    a.captureError(new Error('boom'))
-    expect(tx.envelopes).toHaveLength(0)
-    // fail-safe: the event stream still carries the error, analytics untouched.
-    expect(tx.streams).toHaveLength(1)
-    expect(tx.all[0].event).toBe('$exception')
-  })
-
-  it('with a DSN, an error POSTs a Sentry envelope to the DERIVED ingest URL', () => {
-    const a = mk({ dsn: TEST_DSN })
-    expect(a.errorPlaneEnabled).toBe(true)
-    a.captureError(new TypeError('kaboom'))
-
-    expect(tx.envelopes).toHaveLength(1)
-    const env = tx.envelopes[0]
-    // The exact route the o11y ingest registers, key on the query string.
-    expect(env.url).toBe(
-      'https://sentry.hanzo.ai/v1/event/019f9b1e-5785-7359-ad0b-f75db8e58c99/envelope/' +
-        '?sentry_key=1%3A' + '0'.repeat(64),
-    )
-    expect(env.contentType).toBe('application/x-sentry-envelope')
-    expect(a.errorIngestUrl).toBe(env.url)
-  })
-
-  it('never sends an /api/ path — Hanzo routes are /v1/ only', () => {
-    const a = mk({ dsn: TEST_DSN })
-    a.captureError(new Error('x'))
-    for (const s of tx.sent) expect(s.url).not.toContain('/api/')
-  })
-
-  it('frames a VALID envelope: header / item-header / payload, byte length correct', () => {
-    const a = mk({ dsn: TEST_DSN })
-    a.captureError(new Error('framing'))
-    const lines = tx.envelopes[0].raw.split('\n')
-    const header = JSON.parse(lines[0]) as { event_id: string; dsn: string; sent_at: string }
-    const item = JSON.parse(lines[1]) as { type: string; length: number }
-    const payload = lines[2]
-
-    expect(item.type).toBe('event')
-    // The server reads the length-delimited framing first — it must be the UTF-8
-    // byte length, not the JS string length.
-    expect(item.length).toBe(new TextEncoder().encode(payload).length)
-    expect(header.dsn).toBe(
-      'https://sentry.hanzo.ai/v1/event/019f9b1e-5785-7359-ad0b-f75db8e58c99',
-    )
-    const ev = JSON.parse(payload) as {
-      event_id: string
-      exception: { values: { type: string; value: string }[] }
-    }
-    expect(ev.event_id).toBe(header.event_id)
-    expect(ev.exception.values[0].type).toBe('Error')
-    expect(ev.exception.values[0].value).toBe('framing')
-  })
-
-  it('carries the SAME session + subject identity as the event stream', () => {
-    const a = mk({ dsn: TEST_DSN })
-    a.identify('user-sub-123')
-    a.captureError(new Error('correlate me'))
-    const ev = JSON.parse(tx.envelopes[0].raw.split('\n')[2]) as {
-      user: { id: string }
-      tags: Record<string, string>
-    }
-    expect(ev.user.id).toBe('user-sub-123')
-    const streamed = tx.all.find((e) => e.type === 'error')
-    expect(ev.tags.session).toBe(streamed?.sessionId)
-    expect(ev.tags.product).toBe('test-app')
-  })
-
-  it('an uncaught error is fatal; a reported one is error', () => {
-    const a = mk({ dsn: TEST_DSN })
-    a.captureError(new Error('uncaught'), { handled: false })
-    a.captureError(new Error('reported'))
-    const lvl = (i: number) =>
-      (JSON.parse(tx.envelopes[i].raw.split('\n')[2]) as { level: string }).level
-    expect(lvl(0)).toBe('fatal')
-    expect(lvl(1)).toBe('error')
-  })
-
-  it('scrubs secrets and PII from the error message before it leaves the browser', () => {
-    const a = mk({ dsn: TEST_DSN })
-    a.captureError(new Error('login failed for tam@hanzo.ai with hk-' + 'a'.repeat(20)))
-    const value = (
-      JSON.parse(tx.envelopes[0].raw.split('\n')[2]) as {
-        exception: { values: { value: string }[] }
-      }
-    ).exception.values[0].value
-    expect(value).not.toContain('tam@hanzo.ai')
-    expect(value).not.toContain('hk-aaaa')
-    expect(value).toContain('[email]')
-    expect(value).toContain('[redacted]')
-  })
-
-  it('does NOT attach the event-stream credential to the sentry request', () => {
-    // The two planes authenticate independently: the DSN key rides ?sentry_key=,
-    // so a publishable ingest key must not leak onto the error host.
-    const a = mk({ dsn: TEST_DSN, ingestKey: 'pk_test.sig', getToken: () => 'jwt-abc' })
-    a.captureError(new Error('x'))
-    const env = tx.envelopes[0]
-    expect(env.ingestKey).toBeUndefined()
-    expect(env.token).toBeUndefined()
-    expect(env.beacon).toBe(false)
-  })
-
-  it('ONE captureError feeds BOTH planes', () => {
-    const a = mk({ dsn: TEST_DSN })
-    a.captureError(new Error('both'))
-    expect(tx.streams).toHaveLength(1)
-    expect(tx.envelopes).toHaveLength(1)
-  })
-
-  it('a malformed DSN leaves the plane inert rather than throwing', () => {
-    const a = mk({ dsn: 'not-a-dsn' })
-    expect(a.errorPlaneEnabled).toBe(false)
-    expect(() => a.captureError(new Error('x'))).not.toThrow()
-    expect(tx.envelopes).toHaveLength(0)
-  })
-
-  it('never throws back into the host app when the transport fails', () => {
-    const a = mk({ dsn: TEST_DSN })
-    tx.send = () => {
-      throw new Error('network down')
-    }
-    expect(() => a.captureError(new Error('x'))).not.toThrow()
-  })
-})
-
-// ── plane independence under hostile input ─────────────────────────────────
-//
-// The regression: captureError ran enqueue()+flush() BEFORE sendError(), all in
-// one try{}. `properties` is arbitrary caller data — hanzoai/app spreads
-// ErrorContext.metadata straight in, and a DOM node, a React synthetic event or
-// an axios error are all circular — so serializing the stream threw, the catch
-// swallowed it, and the CRASH REPORT WAS NEVER SENT. Both planes went to zero on
-// exactly the inputs a real app produces. They must not be able to starve each
-// other.
-
-describe('plane independence', () => {
-  function circular(): Record<string, unknown> {
-    const o: Record<string, unknown> = { name: 'node' }
-    o.self = o
-    return o
-  }
-  const throwingGetter = () =>
-    Object.defineProperty({}, 'boom', {
-      get() {
-        throw new Error('getter exploded')
-      },
-      enumerable: true,
-    }) as Record<string, unknown>
-
-  it('circular properties: the error still reaches Sentry', () => {
-    const a = mk({ dsn: TEST_DSN })
-    a.captureError(new Error('circular payload'), { properties: circular() })
-    expect(tx.envelopes).toHaveLength(1)
-  })
-
-  it('throwing getter in properties: the error still reaches Sentry', () => {
-    const a = mk({ dsn: TEST_DSN })
-    a.captureError(new Error('hostile getter'), { properties: throwingGetter() })
-    expect(tx.envelopes).toHaveLength(1)
-    // The exception survives even though the tag did not.
-    const ev = JSON.parse(tx.envelopes[0].raw.split('\n')[2]) as {
-      exception: { values: { value: string }[] }
-    }
-    expect(ev.exception.values[0].value).toBe('hostile getter')
-  })
-
-  it('a throwing event-stream transport does not stop the error plane', () => {
-    const a = mk({ dsn: TEST_DSN })
-    const real = tx.send.bind(tx)
-    tx.send = (url, body, opts) => {
-      if (opts.contentType !== 'application/x-sentry-envelope') throw new Error('stream down')
-      real(url, body, opts)
-    }
-    a.captureError(new Error('stream is broken'))
-    expect(tx.envelopes).toHaveLength(1)
-  })
-
-  it('a throwing error-plane transport does not stop the event stream', () => {
-    const a = mk({ dsn: TEST_DSN })
-    const real = tx.send.bind(tx)
-    tx.send = (url, body, opts) => {
-      if (opts.contentType === 'application/x-sentry-envelope') throw new Error('sentry down')
-      real(url, body, opts)
-    }
-    a.captureError(new Error('sentry is broken'))
-    expect(tx.streams).toHaveLength(1)
-  })
-
-  it('one poisoned event never discards previously buffered clean events', () => {
-    const a = mk({ dsn: TEST_DSN })
-    a.pageview('/one')
-    a.capture('clean_event')
-    // Now poison the buffer, then force a flush.
-    a.capture('poisoned', circular())
-    a.flush()
-    const names = tx.all.map((e) => e.event)
-    expect(names).toContain('$pageview')
-    expect(names).toContain('clean_event')
-    // The poisoned one is kept too — with its payload replaced, not silently lost.
-    const bad = tx.all.find((e) => e.event === 'poisoned')
-    expect(bad?.properties).toEqual({ $unserializable: true })
-  })
-
-  it('never throws into the host app on any of these', () => {
-    const a = mk({ dsn: TEST_DSN })
-    expect(() => a.captureError(new Error('x'), { properties: circular() })).not.toThrow()
-    expect(() => a.captureError(new Error('y'), { properties: throwingGetter() })).not.toThrow()
+    const loop: Record<string, unknown> = {}
+    loop.self = loop
+    a.captureError(new Error('x'), { properties: loop })
+    expect(tx.sent).toHaveLength(1)
+    expect(tx.all[0].error?.message).toBe('x')
   })
 })