@hanzo/event 0.3.6 → 0.3.9

package/README.md

@@ -27,10 +27,28 @@ starve the other:
 > plane is **inert**: nothing is sent, nothing throws, analytics is unaffected.
 > Assert `client.errorPlaneEnabled` if you want to know which you have.
 
-Web analytics (analytics.hanzo.ai) is a **third, separate** plane and is NOT this
-client — it is the `hz.js` tag, which speaks a different wire (a bare JSON array).
-Note that `analytics.hanzo.ai/v1/event` and `api.hanzo.ai/v1/event` share a path
-spelling but are **different protocols**; point this client at the API host.
+### No bundler? Use the `hz.js` tag — same client, same wire
+
+```html
+<script async src="https://unpkg.com/@hanzo/event/hz.js"
+        data-product="hanzo.ai"
+        data-capture="1"></script>
+```
+
+`hz.js` (in this package) is the **script-tag distribution** of this client, for
+surfaces with no build step. It posts the SAME `{ batch: [WireEvent, …] }` to the
+SAME `POST {host}/v1/event`, and adds DOM **autocapture** — `$click` (with an
+element locator), `$outbound`, `$scroll`, `$form`, `$vitals` — which a bundled app
+does not need and a plain page cannot get. Manual API: `window.hanzo.track()` /
+`identify()` / `page()`.
+
+> The tag used to live in `hanzoai/analytics` and post a **bare JSON array** of
+> `{site, ts, type, path, …}` to `analytics.hanzo.ai/v1/event` — a second protocol
+> behind an identical path spelling, served by a second collector with its own
+> database. `POST api.hanzo.ai/v1/event {"batch":[]}` answered 200 while
+> `POST analytics.hanzo.ai/v1/event []` answered 204, and a client pointed at the
+> wrong host failed silently. Both the second door and the second collector are
+> deleted. One wire, one door, one client home — this package.
 
 - **Batched** with a size + interval flush, and **beacon-on-unload**
   (`sendBeacon` for cookie/publishable-key apps, `fetch(keepalive)` for token apps).

package/dist/index.cjs

@@ -219,8 +219,34 @@ function scrubText(s2, capturePII = false) {
   return s2;
 }
 
+// src/uid.ts
+var HEX = Array.from({ length: 256 }, (_, i) => (i + 256).toString(16).slice(1));
+function fill(b) {
+  const c = typeof crypto !== "undefined" ? crypto : void 0;
+  if (c && typeof c.getRandomValues === "function") {
+    c.getRandomValues(b);
+    return b;
+  }
+  for (let i = 0; i < b.length; i++) b[i] = Math.random() * 256 | 0;
+  return b;
+}
+function uuidv7(now = Date.now()) {
+  const b = fill(new Uint8Array(16));
+  let t = Math.floor(now);
+  for (let i = 5; i >= 0; i--) {
+    b[i] = t % 256;
+    t = Math.floor(t / 256);
+  }
+  b[6] = 112 | b[6] & 15;
+  b[8] = 128 | b[8] & 63;
+  return HEX[b[0]] + HEX[b[1]] + HEX[b[2]] + HEX[b[3]] + "-" + HEX[b[4]] + HEX[b[5]] + "-" + HEX[b[6]] + HEX[b[7]] + "-" + HEX[b[8]] + HEX[b[9]] + "-" + HEX[b[10]] + HEX[b[11]] + HEX[b[12]] + HEX[b[13]] + HEX[b[14]] + HEX[b[15]];
+}
+function uuidv7Time(id) {
+  return parseInt(id.slice(0, 8) + id.slice(9, 13), 16);
+}
+
 // src/version.ts
-var VERSION = "0.3.6";
+var VERSION = "0.3.9";
 
 // src/sentry.ts
 var MAX_FRAMES = 50;
@@ -229,11 +255,7 @@ var MAX_LINE_LEN = 2048;
 var MAX_TAG_LEN = 1024;
 var MAX_TAGS = 50;
 function eventId() {
-  const c = typeof crypto !== "undefined" ? crypto : void 0;
-  if (c && "randomUUID" in c) return c.randomUUID().replace(/-/g, "");
-  let s2 = "";
-  for (let i = 0; i < 32; i++) s2 += Math.floor(Math.random() * 16).toString(16);
-  return s2;
+  return uuidv7().replace(/-/g, "");
 }
 function byteLen(s2) {
   if (typeof TextEncoder !== "undefined") return new TextEncoder().encode(s2).length;
@@ -433,17 +455,12 @@ function ls() {
     return void 0;
   }
 }
-function uid() {
-  const c = typeof crypto !== "undefined" ? crypto : void 0;
-  if (c && "randomUUID" in c) return c.randomUUID();
-  return "a-" + Date.now().toString(36) + Math.random().toString(36).slice(2, 10);
-}
 function anonId() {
   const s2 = ls();
   if (!s2) return void 0;
   let v = s2.getItem(KEY.anon);
   if (!v) {
-    v = uid();
+    v = uuidv7();
     s2.setItem(KEY.anon, v);
   }
   return v;
@@ -458,7 +475,7 @@ function sessionId(now = Date.now()) {
     state = null;
   }
   if (!state || now - state.last > SESSION_TTL_MS) {
-    state = { id: uid(), last: now };
+    state = { id: uuidv7(now), last: now };
   } else {
     state.last = now;
   }
@@ -527,11 +544,6 @@ function readEnv(name) {
 function appendQuery(url, key, value) {
   return url + (url.includes("?") ? "&" : "?") + key + "=" + encodeURIComponent(value);
 }
-function uid2() {
-  const c = typeof crypto !== "undefined" ? crypto : void 0;
-  if (c && "randomUUID" in c) return c.randomUUID();
-  return "m-" + Date.now().toString(36) + Math.random().toString(36).slice(2, 10);
-}
 function normalizeError2(err) {
   const n = normalizeError(err);
   return { type: n.name, message: n.message, stack: n.stack };
@@ -661,9 +673,8 @@ var Analytics = class {
   }
   /** pageview records a $pageview for the current (or given) location. */
   pageview(path, properties) {
-    const url = isBrowser() ? window.location.href : void 0;
     const p = path ?? (isBrowser() ? window.location.pathname : void 0);
-    this.enqueue("pageview", PAGEVIEW, { url, path: p, properties });
+    this.enqueue("pageview", PAGEVIEW, { path: p, properties });
   }
   /** capture records a named product event with optional properties. Commerce
    *  fields (productId/quantity/revenue/currency) may be passed for order events. */
@@ -783,8 +794,8 @@ var Analytics = class {
   }
   build(kind, event, extra) {
     const anon = anonId();
-    return {
-      messageId: uid2(),
+    const wire = {
+      messageId: uuidv7(),
       type: kind,
       event,
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
@@ -816,6 +827,11 @@ var Analytics = class {
       libraryVersion: VERSION,
       ...extra
     };
+    const capturePII = this.cfg.capturePII ?? false;
+    if (wire.url) wire.url = scrubText(wire.url, capturePII);
+    if (wire.path) wire.path = scrubText(wire.path, capturePII);
+    if (wire.referrer) wire.referrer = scrubText(wire.referrer, capturePII);
+    return wire;
   }
   schedule() {
     if (this.timer || !this.cfg.enabled) return;
@@ -1002,5 +1018,7 @@ exports.parseDsn = parseDsn;
 exports.redactSecrets = redactSecrets;
 exports.scrubPII = scrubPII;
 exports.scrubText = scrubText;
+exports.uuidv7 = uuidv7;
+exports.uuidv7Time = uuidv7Time;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map