@vskstudio/takt-astro 0.3.1 → 0.4.0

package/Embed.astro

@@ -13,4 +13,4 @@ type Props = {
 
 const { domain, theme, lang, host, width = 404, height = 264, title = 'takt', ...rest } = Astro.props
 ---
-<iframe title={title} referrerpolicy="strict-origin-when-cross-origin" {...rest} width={width} height={height} loading="lazy" style="border:0" src={embedUrl(domain, { theme, lang, host })}></iframe>
+<iframe title={title} {...rest} width={width} height={height} loading="lazy" style="border:0" src={embedUrl(domain, { theme, lang, host })} referrerpolicy="strict-origin-when-cross-origin" sandbox="allow-scripts allow-same-origin"></iframe>

package/README.md

@@ -45,6 +45,7 @@ Both the integration and the component accept the same options:
 | --- | --- | --- | --- |
 | `domain` | `string` | `location.hostname` | Site identifier sent with every event. |
 | `endpoint` | `string` | `/api/event` | Ingestion endpoint. |
+| `scriptOrigin` | `string` | – | First-party origin to derive the endpoint from (`{origin}/api/event`) — your Takt domain or a custom domain to dodge ad-blockers (endpoint wins over it). |
 | `outbound` | `boolean` | `false` | Auto-track outbound link clicks. |
 | `files` | `boolean` | `false` | Auto-track file downloads. |
 | `spa` | `boolean` | `true` | Track client-side navigations. |
@@ -78,7 +79,7 @@ import Embed from '@vskstudio/takt-astro/Embed.astro'
 <Embed domain="example.com" theme="dark" />
 ```
 
-`Badge` renders an `<img>` (props: `domain`, `variant`, `glyph`, `lang`, `host`); `Embed` renders an `<iframe>` (props: `domain`, `theme`, `lang`, `host`, `width`, `height`, `title`). Extra attributes pass through to the underlying element, but the built `src` is locked and cannot be overridden. The optional `host` must be an absolute `http(s)` URL — core validates it and throws on anything else (e.g. a `javascript:` URL).
+`Badge` renders an `<img>` (props: `domain`, `variant`, `glyph`, `lang`, `host`). Its `alt` defaults to `"takt"` and can be overridden. `Embed` renders an `<iframe>` (props: `domain`, `theme`, `lang`, `host`, `width`, `height`, `title`); the iframe is sandboxed (`allow-scripts allow-same-origin`) and ships a fixed `referrerpolicy="strict-origin-when-cross-origin"` — both are locked and cannot be weakened by a consumer. Extra attributes pass through to the underlying element, but the built `src` is locked and cannot be overridden. The optional `host` must be an absolute `http(s)` URL — core validates it and throws on anything else (e.g. a `javascript:` URL), and reduces it to its origin (dropping path/query). An empty `host` resolves same-origin.
 
 ## Public stats
 

package/dist/index.d.ts

@@ -11,6 +11,11 @@ interface TaktOptions {
     domain?: string;
     /** Ingestion endpoint. Defaults to `/api/event`. */
     endpoint?: string;
+    /**
+     * First-party origin to derive the endpoint from (`{origin}/api/event`) — your
+     * Takt domain or a custom domain to dodge ad-blockers. `endpoint` wins over it.
+     */
+    scriptOrigin?: string;
     /** Auto-track outbound link clicks. */
     outbound?: boolean;
     /** Auto-track file downloads. */

package/dist/index.js

@@ -3,6 +3,7 @@ function resolveOptions(options = {}) {
   return {
     domain: options.domain,
     endpoint: options.endpoint,
+    scriptOrigin: options.scriptOrigin,
     outbound: options.outbound ?? false,
     files: options.files ?? false,
     respectDnt: options.respectDnt ?? true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vskstudio/takt-astro",
-  "version": "0.3.1",
+  "version": "0.4.0",
   "description": "Astro integration for Takt privacy-friendly analytics",
   "license": "MIT",
   "author": "VSK Studio",
@@ -45,15 +45,25 @@
   "engines": {
     "node": ">=18"
   },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint .",
+    "test": "vitest run",
+    "e2e": "playwright test",
+    "size": "size-limit",
+    "prepublishOnly": "pnpm build",
+    "release": "pnpm build && changeset publish"
+  },
   "peerDependencies": {
-    "@vskstudio/takt-core": ">=0.3.0",
+    "@vskstudio/takt-core": ">=0.4.0",
     "astro": ">=4"
   },
   "devDependencies": {
     "@changesets/cli": "^2.31.0",
     "@playwright/test": "^1.50.0",
     "@size-limit/preset-small-lib": "^11.1.6",
-    "@vskstudio/takt-core": "^0.3.0",
+    "@vskstudio/takt-core": "^0.4.0",
     "astro": "^5.0.0",
     "eslint": "^9.0.0",
     "size-limit": "^11.1.6",
@@ -62,13 +72,5 @@
     "typescript-eslint": "^8.0.0",
     "vitest": "^2.1.0"
   },
-  "scripts": {
-    "build": "tsup",
-    "typecheck": "tsc --noEmit",
-    "lint": "eslint .",
-    "test": "vitest run",
-    "e2e": "playwright test",
-    "size": "size-limit",
-    "release": "pnpm build && changeset publish"
-  }
-}
+  "packageManager": "pnpm@9.0.0"
+}