agency/.pnpm-store/v3/files/4f/16a8758c4e75428e5e44e3125a806955dc364239d9343bbabdf6f84ebc8ff26cee5f838eb1d176929b14bce27c832674438a227b927874f1b82af8af4f0cff

/**
 * The product → Sentinel DSN registry.
 *
 * An app declares WHAT it is (`product: 'console'`); this module knows WHERE its
 * errors go. That split is the whole point: no surface has to learn a DSN, carry
 * a build argument, or grow a config file to report errors — declaring the
 * product it already declares is enough.
 *
 * A Sentinel DSN is PUBLIC by construction. It ships inside the client bundle and
 * is readable in devtools on any deployed page, and it grants exactly one
 * capability: submitting new events. It cannot read issues, projects, or any
 * other data. So committing it is not leaking a secret — it is recording a public
 * identifier next to the code that needs it. (Contrast the server-side collector
 * DSN in the `team-analytics-sentry` Secret, which is HMAC-derived and revocable
 * precisely because a server-side credential is NOT public.)
 *
 * Why a literal map instead of deriving `hanzo-${product}`: the projects predate
 * this registry and do not derive cleanly — `site` lives in `hanzo-ai`, not
 * `hanzo-site`. An explicit map is honest about that; a derivation rule plus an
 * exception table is the same data with a trap in it.
 *
 * Projects are org-scoped and named `<org>-<app>`. To add one: create the project
 * (POST /v1/sentinel/projects with X-Org-Id), then add its `dsn` here keyed by the
 * product name the app passes to `createAnalytics`.
 */

/** PRODUCT_PROJECT maps a `product` to its Sentinel project id. The DSN's KEY is no
 *  longer a per-project secret — it is the ONE org publishable key (below), so a
 *  surface's errors ride the SAME key its events do. The id only names WHICH
 *  project the errors group under, and cloud auto-provisions that project on first
 *  keyed ingest, so a new id needs nothing minted. `site` lives in the `hanzo-ai`
 *  project — an explicit map, because the projects predate this and do not derive
 *  cleanly from the product name. */
export const PRODUCT_PROJECT: Readonly<Record<string, string>> = Object.freeze({
  console: '019fa40b-94ae-7f1d-8f7b-e92f123fad42', // console.hanzo.ai
  app: '019f9b1e-57eb-7171-9d92-72c0b85e4b4b', // hanzo.app
  site: '019f9b1e-5785-7359-ad0b-f75db8e58c99', // hanzo.ai (marketing; product `site`)
})

/** dsnForProduct builds the product's Sentinel DSN from the caller's resolved
 *  publishable `key` and the product's project — the SAME key the event stream
 *  carries, at the product's envelope endpoint. Returns undefined when there is no
 *  key or no project for the product, leaving the error plane inert rather than
 *  posting into the wrong one. The key is NOT baked here: it is the value the
 *  surface resolved (an explicit `ingestKey`, or the KMS-sourced
 *  NEXT_PUBLIC_PUBLISHABLE_KEY the build inlines) — the ONE live source, never a
 *  literal committed beside the code. */
export function dsnForProduct(
  product: string | undefined,
  key: string | undefined
): string | undefined {
  if (!product || !key) return undefined
  const projectId = PRODUCT_PROJECT[product]
  if (!projectId) return undefined
  return `https://${key}@api.hanzo.ai/v1/event/${projectId}`
}