@bbearai/core 0.3.1 → 0.4.1

package/dist/index.d.mts

@@ -187,6 +187,15 @@ interface TestGroup {
     description?: string;
     sortOrder: number;
 }
+/** Project role — a user role in the app under test (e.g., Owner, Manager) */
+interface ProjectRole {
+    id: string;
+    name: string;
+    slug: string;
+    color: string;
+    description?: string;
+    loginHint?: string;
+}
 interface QATrack {
     id: string;
     name: string;
@@ -212,6 +221,8 @@ interface TestAssignment {
         track?: QATrack;
         /** Test group (folder) this test belongs to */
         group?: TestGroup;
+        /** Required app role for testing (e.g., Owner, Manager) */
+        role?: ProjectRole;
     };
     status: 'pending' | 'in_progress' | 'passed' | 'failed' | 'blocked' | 'skipped';
     /** Reason for skipping (when status is 'skipped') */
@@ -609,6 +620,7 @@ declare class BugBearClient {
     private supabase;
     private config;
     private navigationHistory;
+    private reportSubmitInFlight;
     constructor(config: BugBearConfig);
     /**
      * Track navigation for context.
@@ -1007,4 +1019,4 @@ declare function captureError(error: Error, errorInfo?: {
     componentStack?: string;
 };
 
-export { type AddFindingOptions, type AppContext, BugBearClient, type BugBearConfig, type BugBearReport, type BugBearTheme, type ChecklistItem, type ChecklistResult, type ConsoleLogEntry, type CoverageGap, type CoverageMatrixCell, type CoverageMatrixRow, type DeployChecklist, type DeviceInfo, type EndSessionOptions, type EnhancedBugContext, type FindingSeverity, type FindingType, type HostUserInfo, type MessageSenderType, type NetworkRequest, type PriorityFactors, type QAFinding, type QAHealthMetrics, type QAHealthScore, type QASession, type QASessionStatus, type QATrack, type RegressionEvent, type ReportStatus, type ReportType, type RoutePriority, type RouteTestStats, type RubricMode, type RubricResult, type Severity, type SkipReason, type StartSessionOptions, type SubmitFeedbackOptions, type TestAssignment, type TestFeedback, type TestGroup, type TestResult, type TestStep, type TestTemplate, type TesterInfo, type TesterMessage, type TesterProfileUpdate, type TesterThread, type ThreadPriority, type ThreadType, captureError, contextCapture, createBugBear };
+export { type AddFindingOptions, type AppContext, BugBearClient, type BugBearConfig, type BugBearReport, type BugBearTheme, type ChecklistItem, type ChecklistResult, type ConsoleLogEntry, type CoverageGap, type CoverageMatrixCell, type CoverageMatrixRow, type DeployChecklist, type DeviceInfo, type EndSessionOptions, type EnhancedBugContext, type FindingSeverity, type FindingType, type HostUserInfo, type MessageSenderType, type NetworkRequest, type PriorityFactors, type ProjectRole, type QAFinding, type QAHealthMetrics, type QAHealthScore, type QASession, type QASessionStatus, type QATrack, type RegressionEvent, type ReportStatus, type ReportType, type RoutePriority, type RouteTestStats, type RubricMode, type RubricResult, type Severity, type SkipReason, type StartSessionOptions, type SubmitFeedbackOptions, type TestAssignment, type TestFeedback, type TestGroup, type TestResult, type TestStep, type TestTemplate, type TesterInfo, type TesterMessage, type TesterProfileUpdate, type TesterThread, type ThreadPriority, type ThreadType, captureError, contextCapture, createBugBear };

package/dist/index.d.ts

@@ -187,6 +187,15 @@ interface TestGroup {
     description?: string;
     sortOrder: number;
 }
+/** Project role — a user role in the app under test (e.g., Owner, Manager) */
+interface ProjectRole {
+    id: string;
+    name: string;
+    slug: string;
+    color: string;
+    description?: string;
+    loginHint?: string;
+}
 interface QATrack {
     id: string;
     name: string;
@@ -212,6 +221,8 @@ interface TestAssignment {
         track?: QATrack;
         /** Test group (folder) this test belongs to */
         group?: TestGroup;
+        /** Required app role for testing (e.g., Owner, Manager) */
+        role?: ProjectRole;
     };
     status: 'pending' | 'in_progress' | 'passed' | 'failed' | 'blocked' | 'skipped';
     /** Reason for skipping (when status is 'skipped') */
@@ -609,6 +620,7 @@ declare class BugBearClient {
     private supabase;
     private config;
     private navigationHistory;
+    private reportSubmitInFlight;
     constructor(config: BugBearConfig);
     /**
      * Track navigation for context.
@@ -1007,4 +1019,4 @@ declare function captureError(error: Error, errorInfo?: {
     componentStack?: string;
 };
 
-export { type AddFindingOptions, type AppContext, BugBearClient, type BugBearConfig, type BugBearReport, type BugBearTheme, type ChecklistItem, type ChecklistResult, type ConsoleLogEntry, type CoverageGap, type CoverageMatrixCell, type CoverageMatrixRow, type DeployChecklist, type DeviceInfo, type EndSessionOptions, type EnhancedBugContext, type FindingSeverity, type FindingType, type HostUserInfo, type MessageSenderType, type NetworkRequest, type PriorityFactors, type QAFinding, type QAHealthMetrics, type QAHealthScore, type QASession, type QASessionStatus, type QATrack, type RegressionEvent, type ReportStatus, type ReportType, type RoutePriority, type RouteTestStats, type RubricMode, type RubricResult, type Severity, type SkipReason, type StartSessionOptions, type SubmitFeedbackOptions, type TestAssignment, type TestFeedback, type TestGroup, type TestResult, type TestStep, type TestTemplate, type TesterInfo, type TesterMessage, type TesterProfileUpdate, type TesterThread, type ThreadPriority, type ThreadType, captureError, contextCapture, createBugBear };
+export { type AddFindingOptions, type AppContext, BugBearClient, type BugBearConfig, type BugBearReport, type BugBearTheme, type ChecklistItem, type ChecklistResult, type ConsoleLogEntry, type CoverageGap, type CoverageMatrixCell, type CoverageMatrixRow, type DeployChecklist, type DeviceInfo, type EndSessionOptions, type EnhancedBugContext, type FindingSeverity, type FindingType, type HostUserInfo, type MessageSenderType, type NetworkRequest, type PriorityFactors, type ProjectRole, type QAFinding, type QAHealthMetrics, type QAHealthScore, type QASession, type QASessionStatus, type QATrack, type RegressionEvent, type ReportStatus, type ReportType, type RoutePriority, type RouteTestStats, type RubricMode, type RubricResult, type Severity, type SkipReason, type StartSessionOptions, type SubmitFeedbackOptions, type TestAssignment, type TestFeedback, type TestGroup, type TestResult, type TestStep, type TestTemplate, type TesterInfo, type TesterMessage, type TesterProfileUpdate, type TesterThread, type ThreadPriority, type ThreadType, captureError, contextCapture, createBugBear };

package/dist/index.js

@@ -292,6 +292,7 @@ var HOSTED_BUGBEAR_ANON_KEY = getEnvVar("BUGBEAR_ANON_KEY") || getEnvVar("NEXT_P
 var BugBearClient = class {
   constructor(config) {
     this.navigationHistory = [];
+    this.reportSubmitInFlight = false;
     this.config = config;
     this.supabase = (0, import_supabase_js.createClient)(
       config.supabaseUrl || DEFAULT_SUPABASE_URL,
@@ -352,6 +353,10 @@ var BugBearClient = class {
    * Submit a report
    */
   async submitReport(report) {
+    if (this.reportSubmitInFlight) {
+      return { success: false, error: "A report is already being submitted" };
+    }
+    this.reportSubmitInFlight = true;
     try {
       const validationError = this.validateReport(report);
       if (validationError) {
@@ -403,6 +408,8 @@ var BugBearClient = class {
     } catch (err) {
       const message = err instanceof Error ? err.message : "Unknown error";
       return { success: false, error: message };
+    } finally {
+      this.reportSubmitInFlight = false;
     }
   }
   /**
@@ -443,6 +450,14 @@ var BugBearClient = class {
               name,
               description,
               sort_order
+            ),
+            role:project_roles(
+              id,
+              name,
+              slug,
+              color,
+              description,
+              login_hint
             )
           )
         `).eq("project_id", this.config.projectId).eq("tester_id", testerInfo.id).in("status", ["pending", "in_progress"]).order("created_at", { ascending: true }).limit(100);
@@ -480,6 +495,14 @@ var BugBearClient = class {
             name: item.test_case.group.name,
             description: item.test_case.group.description,
             sortOrder: item.test_case.group.sort_order
+          } : void 0,
+          role: item.test_case.role ? {
+            id: item.test_case.role.id,
+            name: item.test_case.role.name,
+            slug: item.test_case.role.slug,
+            color: item.test_case.role.color,
+            description: item.test_case.role.description,
+            loginHint: item.test_case.role.login_hint
           } : void 0
         }
       }));
@@ -895,8 +918,8 @@ var BugBearClient = class {
         return "Maximum 10 screenshots allowed";
       }
       for (const url of report.screenshots) {
-        if (typeof url !== "string" || url.length > 2e3) {
-          return "Invalid screenshot URL";
+        if (typeof url !== "string" || url.length > 2e3 || !/^https?:\/\//i.test(url)) {
+          return "Invalid screenshot URL (must be an HTTP/HTTPS URL)";
         }
       }
     }
@@ -1285,7 +1308,10 @@ var BugBearClient = class {
         content
       };
       if (attachments && attachments.length > 0) {
-        insertData.attachments = attachments;
+        const safeAttachments = attachments.filter((a) => /^https?:\/\//i.test(a.url));
+        if (safeAttachments.length > 0) {
+          insertData.attachments = safeAttachments;
+        }
       }
       const { error } = await this.supabase.from("discussion_messages").insert(insertData);
       if (error) {

package/dist/index.mjs

@@ -263,6 +263,7 @@ var HOSTED_BUGBEAR_ANON_KEY = getEnvVar("BUGBEAR_ANON_KEY") || getEnvVar("NEXT_P
 var BugBearClient = class {
   constructor(config) {
     this.navigationHistory = [];
+    this.reportSubmitInFlight = false;
     this.config = config;
     this.supabase = createClient(
       config.supabaseUrl || DEFAULT_SUPABASE_URL,
@@ -323,6 +324,10 @@ var BugBearClient = class {
    * Submit a report
    */
   async submitReport(report) {
+    if (this.reportSubmitInFlight) {
+      return { success: false, error: "A report is already being submitted" };
+    }
+    this.reportSubmitInFlight = true;
     try {
       const validationError = this.validateReport(report);
       if (validationError) {
@@ -374,6 +379,8 @@ var BugBearClient = class {
     } catch (err) {
       const message = err instanceof Error ? err.message : "Unknown error";
       return { success: false, error: message };
+    } finally {
+      this.reportSubmitInFlight = false;
     }
   }
   /**
@@ -414,6 +421,14 @@ var BugBearClient = class {
               name,
               description,
               sort_order
+            ),
+            role:project_roles(
+              id,
+              name,
+              slug,
+              color,
+              description,
+              login_hint
             )
           )
         `).eq("project_id", this.config.projectId).eq("tester_id", testerInfo.id).in("status", ["pending", "in_progress"]).order("created_at", { ascending: true }).limit(100);
@@ -451,6 +466,14 @@ var BugBearClient = class {
             name: item.test_case.group.name,
             description: item.test_case.group.description,
             sortOrder: item.test_case.group.sort_order
+          } : void 0,
+          role: item.test_case.role ? {
+            id: item.test_case.role.id,
+            name: item.test_case.role.name,
+            slug: item.test_case.role.slug,
+            color: item.test_case.role.color,
+            description: item.test_case.role.description,
+            loginHint: item.test_case.role.login_hint
           } : void 0
         }
       }));
@@ -866,8 +889,8 @@ var BugBearClient = class {
         return "Maximum 10 screenshots allowed";
       }
       for (const url of report.screenshots) {
-        if (typeof url !== "string" || url.length > 2e3) {
-          return "Invalid screenshot URL";
+        if (typeof url !== "string" || url.length > 2e3 || !/^https?:\/\//i.test(url)) {
+          return "Invalid screenshot URL (must be an HTTP/HTTPS URL)";
         }
       }
     }
@@ -1256,7 +1279,10 @@ var BugBearClient = class {
         content
       };
       if (attachments && attachments.length > 0) {
-        insertData.attachments = attachments;
+        const safeAttachments = attachments.filter((a) => /^https?:\/\//i.test(a.url));
+        if (safeAttachments.length > 0) {
+          insertData.attachments = safeAttachments;
+        }
       }
       const { error } = await this.supabase.from("discussion_messages").insert(insertData);
       if (error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bbearai/core",
-  "version": "0.3.1",
+  "version": "0.4.1",
   "description": "Core utilities and types for BugBear QA platform",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",