zooqueenandHanzo Dev 1e77538df0 Analytics sends with the hanzo org key, so each batch is a CORS-simple request ...

The build read its key from a forge secret that was empty, so the bundle passed
ingestKey "" to @hanzo/event. With no key the SDK posts JSON with credentials
included, and api.hanzo.ai refuses that preflight for hanzo.agency. The site now
passes ORG_KEY.hanzo from the SDK's keyring: each batch goes out with
?ingest_key=, a text/plain body and credentials omitted, and the API answers 200.

The deploy workflow no longer passes the empty secret. The first pk- in the
bundle, which it tests at the ingest endpoint, is now the key the site sends.

Co-authored-by: Hanzo Dev <[email protected]>

2026-09-23 15:41:48 -07:00

..

ci.yml

runs-on names the machine, not the job

2026-09-16 02:39:11 -07:00

deploy.yml

Analytics sends with the hanzo org key, so each batch is a CORS-simple request

2026-09-23 15:41:48 -07:00