@bitvea/feedback-toolbar 0.0.1

package/dist/deepLink.js

@@ -0,0 +1,185 @@
+// Deep-linking into one pin on the live page, from the dashboard's feedback
+// list or from the toolbar's own inbox sheet.
+//
+// The carrier is a namespaced hash fragment - `#bitvea-feedback=<id>`. A hash
+// never reaches the host's server, so it cannot land in their request logs,
+// their analytics or an edge cache key, which a query parameter would. The
+// price is that hashes are somebody else's namespace too: host apps use them
+// for hash routing and for in-page anchors, and breaking either is not a
+// trade we are allowed to make. Hence the two rules this module exists to
+// enforce.
+//
+// 1. Act only on a hash that starts with EXACTLY our prefix. Everything else
+//    is read and left completely alone - no rewrite, no normalisation, no
+//    "helpful" clearing.
+// 2. Read it once, as early as a React tree can, and consume it immediately.
+//    A host framework that owns the hash rewrites it during hydration, so a
+//    later read finds nothing; and a link that keeps its fragment gets pasted
+//    onward, reopening a stranger's thread on somebody else's screen.
+// 3. Never let the address bar be the source of truth for "which page is
+//    this". Reading it once is under our control; keeping it clean afterwards
+//    is not - Next's App Router restores the URL it considered canonical at
+//    load, fragment and all, from an effect that runs after every effect the
+//    toolbar can register. So the clear is retried (`clearDeepLinkHash`) and,
+//    more importantly, every page-identity question goes through
+//    `currentPageUrl`, which derives the answer instead of trusting it.
+/** The whole namespace. Nothing else in a hash is ours. */
+export const DEEP_LINK_PREFIX = "#bitvea-feedback=";
+/**
+ * Ids we could have written. Feedback ids are cuids, so this is deliberately
+ * narrower than "any string": the value ends up in a `data-testid`, in an
+ * equality check against server rows, and in a URL the sheet builds, and a
+ * crafted hash must not be able to become any of those. A hash that is ours
+ * by prefix but carries something else is treated as no deep link at all.
+ */
+const ID_SHAPE = /^[A-Za-z0-9_-]{1,64}$/;
+/**
+ * The feedback id a hash names, or null for every other hash there is -
+ * including `#pricing`, `#/route/23` and a bare `#`.
+ */
+export function parseDeepLink(hash) {
+    if (!hash.startsWith(DEEP_LINK_PREFIX))
+        return null;
+    const raw = hash.slice(DEEP_LINK_PREFIX.length);
+    let decoded = raw;
+    try {
+        decoded = decodeURIComponent(raw);
+    }
+    catch {
+        // A lone `%` is not valid percent-encoding. Fall back to the raw text and
+        // let the shape check below reject it, rather than throwing out of a
+        // render on a malformed URL somebody pasted.
+    }
+    const id = decoded.trim();
+    return ID_SHAPE.test(id) ? id : null;
+}
+/**
+ * The URL that opens one item's thread on the page it was filed on. Used by
+ * the inbox sheet for an item on another page of the same site.
+ *
+ * Any existing fragment is dropped, because a URL has one fragment and this
+ * one is ours. That is safe precisely because page identity drops the fragment
+ * too - see the note at the top of this file - so the URL this returns and the
+ * `pageUrl` the item was stored under reduce to the same identity.
+ */
+export function buildDeepLink(pageUrl, feedbackItemId) {
+    const hashAt = pageUrl.indexOf("#");
+    const base = hashAt === -1 ? pageUrl : pageUrl.slice(0, hashAt);
+    return `${base}${DEEP_LINK_PREFIX}${encodeURIComponent(feedbackItemId)}`;
+}
+/**
+ * The captured value, held at module scope rather than in component state.
+ *
+ * Two reasons it cannot live in a component. The hash has to be read before
+ * anything else in the tree can observe `location`, and `captureDeepLink` is
+ * consumed from a `useState` initialiser precisely so it lands in the shell's
+ * first render pass, ahead of the pin layer's own render. And the read is
+ * destructive - it strips the fragment - so a second reader must be given the
+ * same answer rather than the empty hash left behind.
+ *
+ * `null` means "not captured yet"; `{ id: null }` means "captured, and there
+ * was no deep link", which are different states.
+ */
+let captured = null;
+/**
+ * Read the deep link, once. A pure read: nothing about the document changes.
+ *
+ * It used to strip the fragment here as well, which was a `replaceState` from
+ * inside a render pass - a side effect on the HOST's document, in a phase
+ * React may run twice and may throw away. The clear is now the shell's job
+ * (`clearDeepLinkHash` from an effect), and this function only answers.
+ *
+ * Nothing downstream may assume the clear stuck in any case: a render-phase
+ * clear was overwritten by Next's App Router a moment later, which is why the
+ * pin layer's idea of "this page" comes from `currentPageUrl` rather than from
+ * whatever the address bar ended up saying.
+ */
+export function captureDeepLink() {
+    if (captured !== null)
+        return captured.id;
+    // Server render: no `location` to read, and nothing to memoise - the first
+    // browser render is the one that captures.
+    if (typeof window === "undefined")
+        return null;
+    captured = { id: parseDeepLink(window.location.hash) };
+    return captured.id;
+}
+/**
+ * The identity of the page the reviewer is on: its URL with no fragment.
+ *
+ * This is what "which page is this" means everywhere the toolbar asks - the
+ * pin layer's page-scoped query, the inbox sheet's scope, and the metadata
+ * attached to a new report - and it is deliberately not `location.href`.
+ *
+ * Two reasons, and both are about the address bar not being ours to trust. A
+ * host framework can put our own fragment back after we have removed it
+ * (Next's App Router does, see `clearDeepLinkHash`), and a `pageUrl` carrying
+ * `#bitvea-feedback=...` matches no stored row. And a deep link has to replace
+ * the host's fragment to carry the id at all, so a landing URL and the URL a
+ * report was filed from differ by the fragment as a matter of course - see the
+ * note at the top of this file for why identity gives the fragment up rather
+ * than the other way round.
+ *
+ * Deriving it instead of trusting the URL makes that class of bug impossible
+ * rather than merely unlikely: it is right on the first render, whatever the
+ * host does to the address bar afterwards.
+ */
+export function currentPageUrl() {
+    if (typeof window === "undefined")
+        return "";
+    return pageIdentity(window.location.href);
+}
+/**
+ * `href` reduced to a page identity: origin, path and query, no fragment.
+ *
+ * Every fragment, not only ours. See the note at the top of this file: a URL
+ * has one fragment and a deep link needs it, so an identity that keeps the
+ * host's cannot be produced by a link we build. Query strings are kept,
+ * because they do distinguish pages on a server-rendered host.
+ */
+export function pageIdentity(href) {
+    const hashAt = href.indexOf("#");
+    return hashAt === -1 ? href : href.slice(0, hashAt);
+}
+/**
+ * Strip our fragment, leaving the rest of the URL byte-identical. Re-checks
+ * the prefix so this can never be the thing that eats a host's own hash, and
+ * uses `replaceState` so it adds no history entry the back button has to walk
+ * back through.
+ *
+ * Idempotent, and called more than once on purpose. A render-phase clear is
+ * not the last word on the address bar: Next's App Router restores the URL it
+ * considered canonical at load - fragment included - from a commit-phase
+ * effect, and because a parent's effects run after its children's there is no
+ * effect the toolbar can register that is guaranteed to run later. So the
+ * shell schedules one more clear onto the next macrotask, which is after the
+ * whole commit; see `EnabledToolbar`. Re-checking the prefix is what makes
+ * that safe: by then the host may have navigated, and a second clear must
+ * never eat a fragment that is not ours.
+ */
+export function clearDeepLinkHash() {
+    if (typeof window === "undefined")
+        return;
+    const { hash, href } = window.location;
+    if (parseDeepLink(hash) === null)
+        return;
+    const withoutHash = href.slice(0, href.length - hash.length);
+    try {
+        window.history.replaceState(window.history.state, "", withoutHash);
+    }
+    catch {
+        // A sandboxed iframe refuses `replaceState`. The id is already captured,
+        // so the thread still opens; only the tidy-up is lost, and taking the
+        // host app down over a cosmetic URL is not a trade worth making.
+    }
+}
+/**
+ * Forget the capture. Only tests need this - a module-scope one-shot is
+ * exactly right in a browser, where there is one page load per module, and
+ * exactly wrong in a runner where there are many renders per module. It is
+ * deliberately not re-exported from the package barrel.
+ */
+export function resetDeepLinkCapture() {
+    captured = null;
+}
+//# sourceMappingURL=deepLink.js.map

package/dist/deepLink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deepLink.js","sourceRoot":"","sources":["../src/deepLink.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,8CAA8C;AAC9C,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,0EAA0E;AAC1E,WAAW;AACX,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,yBAAyB;AACzB,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,sEAAsE;AACtE,yEAAyE;AACzE,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAC9E,iEAAiE;AACjE,wEAAwE;AAExE,2DAA2D;AAC3D,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AAEzC;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,qEAAqE;QACrE,6CAA6C;IAC/C,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1B,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,cAAsB;IACnE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,OAAO,GAAG,IAAI,GAAG,gBAAgB,GAAG,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,IAAI,QAAQ,GAAiC,IAAI,CAAC;AAElD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;IAC1C,2EAA2E;IAC3E,2CAA2C;IAC3C,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAE/C,QAAQ,GAAG,EAAE,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACvD,OAAO,QAAQ,CAAC,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IAC7C,OAAO,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IACvC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,sEAAsE;QACtE,iEAAiE;IACnE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB;IAClC,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC"}

package/dist/fontFace.d.ts

@@ -0,0 +1,70 @@
+/**
+ * The toolbar's own copy of DESIGN.md's two faces, loaded into whatever page
+ * the toolbar was injected into.
+ *
+ * Naming `Geist` in a font stack is not enough, and it failed twice over:
+ *
+ * 1. A REVIEWED page is somebody else's site. It has no reason to have loaded
+ *    Geist, so the stack fell through to `Inter, system-ui` and the toolbar
+ *    rendered in whatever the host's system font is - which is exactly the
+ *    "our font or the website's font" the redesign was asked to stop doing.
+ * 2. Even on this product's OWN preview route, which does load Geist, the
+ *    stack still missed. `next/font/google` rewrites the family to a hashed
+ *    name (`__Geist_1a2b3c`) and exposes it only through `--font-geist`, so
+ *    the literal string `Geist` matches nothing there either.
+ *
+ * So the package ships the face itself. Not as base64 in the bundle: the two
+ * variable woff2 files are ~140KB together, woff2 is already compressed so
+ * base64 would add a third again and gzip would not take it back, and the
+ * bundle ceiling is 100KB gzipped (CLAUDE.md section 8). They are served as
+ * static files from the same origin the toolbar already talks to, and the
+ * `@font-face` below points at them absolutely - a relative URL would resolve
+ * against the CUSTOMER's origin, where the files do not exist.
+ *
+ * The family names are namespaced rather than plain `Geist`. A host page that
+ * has its own `Geist` - a Vercel customer, most likely of all - would
+ * otherwise have its definition and ours collide in one document, and which
+ * one won would depend on injection order.
+ *
+ * Everything here degrades to the rest of the stack: a host whose CSP sets
+ * `font-src 'self'` blocks the fetch, the family never resolves, and the
+ * toolbar renders in Inter or system-ui exactly as it does today. That is a
+ * worse-looking toolbar, never a broken one.
+ */
+/** The namespaced family names the type scale asks for. See the note above. */
+export declare const TOOLBAR_FONT_SANS = "BitVea Geist";
+export declare const TOOLBAR_FONT_MONO = "BitVea Geist Mono";
+/** Where the two files sit, relative to the backend's origin. */
+export declare const FONT_PATHS: {
+    readonly sans: "/fonts/geist-sans-variable.woff2";
+    readonly mono: "/fonts/geist-mono-variable.woff2";
+};
+/**
+ * The id the injected `<style>` carries, so a second mount finds the first
+ * one instead of adding a duplicate. The toolbar can legitimately mount more
+ * than once in a document - React strict mode does it on every dev render.
+ */
+export declare const FONT_STYLE_ELEMENT_ID = "bitvea-feedback-toolbar-fonts";
+/**
+ * `swap`, not `block`: the toolbar is an overlay on somebody else's page and
+ * has no business rendering invisible text while a font downloads. The
+ * fallback paints immediately and the swap is the only flash.
+ *
+ * Both files are VARIABLE, hence the `100 900` range on one src rather than a
+ * face per weight. DESIGN.md's working set is 400/500/600, all inside it.
+ */
+export declare function buildFontFaceCss(apiUrl: string): string;
+/**
+ * Put the two faces in the host document, once.
+ *
+ * This is the one thing the package writes into a page it does not own, which
+ * is why it is a single `<style>` with a known id defining two namespaced
+ * families and no selectors. It cannot restyle anything the host renders:
+ * an `@font-face` only offers a name, and nothing on the host's side asks for
+ * this one.
+ *
+ * Returns the element so a caller can remove it; a no-op with no API URL,
+ * which is the same condition that keeps the whole toolbar dark.
+ */
+export declare function injectFontFaces(doc: Document, apiUrl: string): HTMLStyleElement | null;
+//# sourceMappingURL=fontFace.d.ts.map

package/dist/fontFace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fontFace.d.ts","sourceRoot":"","sources":["../src/fontFace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAChD,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD,iEAAiE;AACjE,eAAO,MAAM,UAAU;;;CAGb,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,kCAAkC,CAAC;AAErE;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAOvD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,QAAQ,EACb,MAAM,EAAE,MAAM,GACb,gBAAgB,GAAG,IAAI,CAWzB"}

package/dist/fontFace.js

@@ -0,0 +1,88 @@
+/**
+ * The toolbar's own copy of DESIGN.md's two faces, loaded into whatever page
+ * the toolbar was injected into.
+ *
+ * Naming `Geist` in a font stack is not enough, and it failed twice over:
+ *
+ * 1. A REVIEWED page is somebody else's site. It has no reason to have loaded
+ *    Geist, so the stack fell through to `Inter, system-ui` and the toolbar
+ *    rendered in whatever the host's system font is - which is exactly the
+ *    "our font or the website's font" the redesign was asked to stop doing.
+ * 2. Even on this product's OWN preview route, which does load Geist, the
+ *    stack still missed. `next/font/google` rewrites the family to a hashed
+ *    name (`__Geist_1a2b3c`) and exposes it only through `--font-geist`, so
+ *    the literal string `Geist` matches nothing there either.
+ *
+ * So the package ships the face itself. Not as base64 in the bundle: the two
+ * variable woff2 files are ~140KB together, woff2 is already compressed so
+ * base64 would add a third again and gzip would not take it back, and the
+ * bundle ceiling is 100KB gzipped (CLAUDE.md section 8). They are served as
+ * static files from the same origin the toolbar already talks to, and the
+ * `@font-face` below points at them absolutely - a relative URL would resolve
+ * against the CUSTOMER's origin, where the files do not exist.
+ *
+ * The family names are namespaced rather than plain `Geist`. A host page that
+ * has its own `Geist` - a Vercel customer, most likely of all - would
+ * otherwise have its definition and ours collide in one document, and which
+ * one won would depend on injection order.
+ *
+ * Everything here degrades to the rest of the stack: a host whose CSP sets
+ * `font-src 'self'` blocks the fetch, the family never resolves, and the
+ * toolbar renders in Inter or system-ui exactly as it does today. That is a
+ * worse-looking toolbar, never a broken one.
+ */
+/** The namespaced family names the type scale asks for. See the note above. */
+export const TOOLBAR_FONT_SANS = "BitVea Geist";
+export const TOOLBAR_FONT_MONO = "BitVea Geist Mono";
+/** Where the two files sit, relative to the backend's origin. */
+export const FONT_PATHS = {
+    sans: "/fonts/geist-sans-variable.woff2",
+    mono: "/fonts/geist-mono-variable.woff2",
+};
+/**
+ * The id the injected `<style>` carries, so a second mount finds the first
+ * one instead of adding a duplicate. The toolbar can legitimately mount more
+ * than once in a document - React strict mode does it on every dev render.
+ */
+export const FONT_STYLE_ELEMENT_ID = "bitvea-feedback-toolbar-fonts";
+/**
+ * `swap`, not `block`: the toolbar is an overlay on somebody else's page and
+ * has no business rendering invisible text while a font downloads. The
+ * fallback paints immediately and the swap is the only flash.
+ *
+ * Both files are VARIABLE, hence the `100 900` range on one src rather than a
+ * face per weight. DESIGN.md's working set is 400/500/600, all inside it.
+ */
+export function buildFontFaceCss(apiUrl) {
+    const sans = `${apiUrl}${FONT_PATHS.sans}`;
+    const mono = `${apiUrl}${FONT_PATHS.mono}`;
+    return [
+        `@font-face{font-family:"${TOOLBAR_FONT_SANS}";src:url("${sans}") format("woff2");font-weight:100 900;font-style:normal;font-display:swap;}`,
+        `@font-face{font-family:"${TOOLBAR_FONT_MONO}";src:url("${mono}") format("woff2");font-weight:100 900;font-style:normal;font-display:swap;}`,
+    ].join("");
+}
+/**
+ * Put the two faces in the host document, once.
+ *
+ * This is the one thing the package writes into a page it does not own, which
+ * is why it is a single `<style>` with a known id defining two namespaced
+ * families and no selectors. It cannot restyle anything the host renders:
+ * an `@font-face` only offers a name, and nothing on the host's side asks for
+ * this one.
+ *
+ * Returns the element so a caller can remove it; a no-op with no API URL,
+ * which is the same condition that keeps the whole toolbar dark.
+ */
+export function injectFontFaces(doc, apiUrl) {
+    if (apiUrl === "")
+        return null;
+    const existing = doc.getElementById(FONT_STYLE_ELEMENT_ID);
+    if (existing !== null)
+        return existing;
+    const style = doc.createElement("style");
+    style.id = FONT_STYLE_ELEMENT_ID;
+    style.textContent = buildFontFaceCss(apiUrl);
+    doc.head.appendChild(style);
+    return style;
+}
+//# sourceMappingURL=fontFace.js.map

package/dist/fontFace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fontFace.js","sourceRoot":"","sources":["../src/fontFace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAChD,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAErD,iEAAiE;AACjE,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,IAAI,EAAE,kCAAkC;IACxC,IAAI,EAAE,kCAAkC;CAChC,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAErE;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO;QACL,2BAA2B,iBAAiB,cAAc,IAAI,8EAA8E;QAC5I,2BAA2B,iBAAiB,cAAc,IAAI,8EAA8E;KAC7I,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAa,EACb,MAAc;IAEd,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAE/B,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,QAA4B,CAAC;IAE3D,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,GAAG,qBAAqB,CAAC;IACjC,KAAK,CAAC,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC7C,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/gating.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The env var that forces the toolbar on where it would otherwise be off.
+ * Documented in the package README and written by the installer only when the
+ * developer asks for it.
+ */
+export declare const FORCE_ENV_VAR = "NEXT_PUBLIC_FEEDBACK_TOOLBAR_FORCE";
+/** The env var the gate reads. `NEXT_PUBLIC_` so it survives into the bundle. */
+export declare const ENV_VAR = "NEXT_PUBLIC_VERCEL_ENV";
+export interface GateInput {
+    /** `NEXT_PUBLIC_VERCEL_ENV`, or undefined outside Vercel. */
+    vercelEnv?: string | undefined;
+    /** `NEXT_PUBLIC_FEEDBACK_TOOLBAR_FORCE`, or undefined. */
+    force?: string | undefined;
+}
+/**
+ * On for `preview` and `development`, off for `production`, off when the
+ * environment is not stated at all.
+ *
+ * The last case is the one worth arguing about, and it is deliberately the
+ * cautious reading: an absent `VERCEL_ENV` means the toolbar cannot tell where
+ * it is running, and the cost of guessing wrong is a feedback widget on a live
+ * customer site. A developer running `next dev` outside Vercel who wants it
+ * sets the override, which is a one-line env var, and gets a build that says
+ * out loud that it is forced on.
+ */
+export declare function isToolbarEnabled({ vercelEnv, force }: GateInput): boolean;
+/**
+ * Read the gate from a process env bag. Kept separate from `isToolbarEnabled`
+ * so the decision stays testable without touching `process.env`.
+ */
+export declare function isToolbarEnabledFromEnv(env: Record<string, string | undefined>): boolean;
+//# sourceMappingURL=gating.d.ts.map

package/dist/gating.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gating.d.ts","sourceRoot":"","sources":["../src/gating.ts"],"names":[],"mappings":"AAQA;;;;GAIG;AACH,eAAO,MAAM,aAAa,uCAAuC,CAAC;AAElE,iFAAiF;AACjF,eAAO,MAAM,OAAO,2BAA2B,CAAC;AAEhD,MAAM,WAAW,SAAS;IACxB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,SAAS,GAAG,OAAO,CAGzE;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,OAAO,CAKT"}

package/dist/gating.js

@@ -0,0 +1,49 @@
+// Whether the toolbar runs at all.
+//
+// This is the one piece of logic in the package that has to be right by
+// inspection, because getting it wrong ships a feedback widget to somebody's
+// customers. It is therefore a pure function of two strings with no React, no
+// DOM and no network in it, so it can be tested by feeding it the five inputs
+// that actually occur.
+/**
+ * The env var that forces the toolbar on where it would otherwise be off.
+ * Documented in the package README and written by the installer only when the
+ * developer asks for it.
+ */
+export const FORCE_ENV_VAR = "NEXT_PUBLIC_FEEDBACK_TOOLBAR_FORCE";
+/** The env var the gate reads. `NEXT_PUBLIC_` so it survives into the bundle. */
+export const ENV_VAR = "NEXT_PUBLIC_VERCEL_ENV";
+/** `"1"`, `"true"` and `"yes"` all mean on; anything else, including absent. */
+function isTruthy(value) {
+    if (!value)
+        return false;
+    const v = value.trim().toLowerCase();
+    return v === "1" || v === "true" || v === "yes" || v === "on";
+}
+/**
+ * On for `preview` and `development`, off for `production`, off when the
+ * environment is not stated at all.
+ *
+ * The last case is the one worth arguing about, and it is deliberately the
+ * cautious reading: an absent `VERCEL_ENV` means the toolbar cannot tell where
+ * it is running, and the cost of guessing wrong is a feedback widget on a live
+ * customer site. A developer running `next dev` outside Vercel who wants it
+ * sets the override, which is a one-line env var, and gets a build that says
+ * out loud that it is forced on.
+ */
+export function isToolbarEnabled({ vercelEnv, force }) {
+    if (isTruthy(force))
+        return true;
+    return vercelEnv === "preview" || vercelEnv === "development";
+}
+/**
+ * Read the gate from a process env bag. Kept separate from `isToolbarEnabled`
+ * so the decision stays testable without touching `process.env`.
+ */
+export function isToolbarEnabledFromEnv(env) {
+    return isToolbarEnabled({
+        vercelEnv: env[ENV_VAR],
+        force: env[FORCE_ENV_VAR],
+    });
+}
+//# sourceMappingURL=gating.js.map

package/dist/gating.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gating.js","sourceRoot":"","sources":["../src/gating.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,uBAAuB;AAEvB;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,oCAAoC,CAAC;AAElE,iFAAiF;AACjF,MAAM,CAAC,MAAM,OAAO,GAAG,wBAAwB,CAAC;AAShD,gFAAgF;AAChF,SAAS,QAAQ,CAAC,KAAyB;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC;AAChE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAa;IAC9D,IAAI,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,aAAa,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAuC;IAEvC,OAAO,gBAAgB,CAAC;QACtB,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC;QACvB,KAAK,EAAE,GAAG,CAAC,aAAa,CAAC;KAC1B,CAAC,CAAC;AACL,CAAC"}

package/dist/icons.d.ts

@@ -0,0 +1,68 @@
+import type { CSSProperties } from "react";
+/**
+ * The one drawing contract: a 24-unit box, a 1.8 stroke, round joins, and the
+ * host-proof sizing above. `aria-hidden` because every icon in this package
+ * sits inside a control that carries the accessible name itself.
+ */
+export declare function svgProps(): {
+    viewBox: string;
+    fill: "none";
+    stroke: "currentColor";
+    strokeWidth: number;
+    strokeLinecap: "round";
+    strokeLinejoin: "round";
+    style: CSSProperties;
+    "aria-hidden": true;
+};
+export declare function PinIcon(): import("react/jsx-runtime").JSX.Element;
+export declare function NoteIcon(): import("react/jsx-runtime").JSX.Element;
+export declare function InboxIcon(): import("react/jsx-runtime").JSX.Element;
+export declare function AccountIcon(): import("react/jsx-runtime").JSX.Element;
+/**
+ * Collapse: a double chevron, folding the bar away toward the edge it is
+ * docked to.
+ *
+ * Two chevrons rather than one because a single one is the same glyph this
+ * product uses for "next" and for a disclosure caret, and a doubled one reads
+ * as "all of this, out of the way" - which is what the control does. It points
+ * along the dock's own axis, and since issue #21 that axis really can be any of
+ * four: the glyph is drawn pointing right and `dockLayout` answers how far to
+ * turn it. A static rotation on the leaf `<svg>`, which holds nothing that
+ * stacks - the same reasoning that lets `BarButton` squash itself.
+ */
+export declare function CollapseIcon({ turn }: {
+    turn: number;
+}): import("react/jsx-runtime").JSX.Element;
+/** Copy this message's text. */
+export declare function CopyIcon(): import("react/jsx-runtime").JSX.Element;
+/** Copy a link back to this thread - the deep link `buildDeepLink` composes. */
+export declare function LinkIcon(): import("react/jsx-runtime").JSX.Element;
+/** Resolve, and - flipped by its label rather than its shape - reopen. */
+export declare function CheckIcon(): import("react/jsx-runtime").JSX.Element;
+/**
+ * Send a reply. The one ink-filled control in the card.
+ *
+ * The translate is an OPTICAL centring, and it is measured rather than nudged
+ * by eye. A paper plane is a triangle with a long thin tail, so its area
+ * centroid is nowhere near the middle of its bounding box: for this outline -
+ * (21,3) (14.4,21) (10.5,12.9) (2.4,9) - the centroid is (13.32, 10.32) while
+ * the viewBox centre is (12, 12). Flex centring aligns the BOX, so the glyph
+ * sat 1.32 right and 1.68 high inside a perfectly centred button and read as
+ * misaligned.
+ *
+ * Shifting by exactly that difference puts the mass on the button's centre.
+ * The shifted bounds are x 1.08-19.68 and y 4.68-22.68, so with the 1.5 stroke
+ * nothing crosses the 24 viewBox and the glyph is not clipped.
+ */
+export declare function SendIcon(): import("react/jsx-runtime").JSX.Element;
+/**
+ * Attach a screenshot to a reply.
+ *
+ * Disabled until a reply can carry one: `Screenshot` hangs off `FeedbackItem`
+ * and `replySchema` has no field for it, so the control is drawn and refused
+ * rather than drawn and broken.
+ */
+export declare function CameraIcon(): import("react/jsx-runtime").JSX.Element;
+/** Dismiss a thread that has no marker left to re-click. */
+export declare function CloseIcon(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=icons.d.ts.map

package/dist/icons.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"icons.d.ts","sourceRoot":"","sources":["../src/icons.tsx"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAO3C;;;;GAIG;AACH,wBAAgB,QAAQ,IAAI;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,cAAc,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,EAAE,aAAa,CAAC;IACrB,aAAa,EAAE,IAAI,CAAC;CACrB,CAWA;AAID,wBAAgB,OAAO,4CAOtB;AAED,wBAAgB,QAAQ,4CAMvB;AAED,wBAAgB,SAAS,4CAOxB;AAED,wBAAgB,WAAW,4CAO1B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,EAAE,IAAI,EAAE,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,2CAWtD;AAID,gCAAgC;AAChC,wBAAgB,QAAQ,4CAOvB;AAED,gFAAgF;AAChF,wBAAgB,QAAQ,4CAOvB;AAED,0EAA0E;AAC1E,wBAAgB,SAAS,4CAMxB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,QAAQ,4CASvB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,4CAOzB;AAED,4DAA4D;AAC5D,wBAAgB,SAAS,4CAOxB"}

package/dist/icons.js

@@ -0,0 +1,97 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// Size lives here rather than in `width`/`height` attributes: author CSS beats
+// a presentation attribute, so a host `svg { width: 100% }` would resize every
+// icon in the toolbar. Invisible in the preview harness, visible in the wild.
+const ICON = { display: "block", width: "16px", height: "16px" };
+/**
+ * The one drawing contract: a 24-unit box, a 1.8 stroke, round joins, and the
+ * host-proof sizing above. `aria-hidden` because every icon in this package
+ * sits inside a control that carries the accessible name itself.
+ */
+export function svgProps() {
+    return {
+        viewBox: "0 0 24 24",
+        fill: "none",
+        stroke: "currentColor",
+        strokeWidth: 1.8,
+        strokeLinecap: "round",
+        strokeLinejoin: "round",
+        style: ICON,
+        "aria-hidden": true,
+    };
+}
+/* ── The bar ──────────────────────────────────────────────────────────── */
+export function PinIcon() {
+    return (_jsxs("svg", { ...svgProps(), children: [_jsx("path", { d: "M12 21s7-6.2 7-11a7 7 0 1 0-14 0c0 4.8 7 11 7 11Z" }), _jsx("circle", { cx: "12", cy: "10", r: "2.5" })] }));
+}
+export function NoteIcon() {
+    return (_jsx("svg", { ...svgProps(), children: _jsx("path", { d: "M21 12a8 8 0 0 1-8 8H8l-4 3v-6.5A8 8 0 0 1 13 4a8 8 0 0 1 8 8Z" }) }));
+}
+export function InboxIcon() {
+    return (_jsxs("svg", { ...svgProps(), children: [_jsx("path", { d: "M3 13h4l1.5 3h7L17 13h4" }), _jsx("path", { d: "M5 5h14l2 8v6H3v-6l2-8Z" })] }));
+}
+export function AccountIcon() {
+    return (_jsxs("svg", { ...svgProps(), children: [_jsx("circle", { cx: "12", cy: "8.5", r: "3.5" }), _jsx("path", { d: "M4.5 20a7.5 7.5 0 0 1 15 0" })] }));
+}
+/**
+ * Collapse: a double chevron, folding the bar away toward the edge it is
+ * docked to.
+ *
+ * Two chevrons rather than one because a single one is the same glyph this
+ * product uses for "next" and for a disclosure caret, and a doubled one reads
+ * as "all of this, out of the way" - which is what the control does. It points
+ * along the dock's own axis, and since issue #21 that axis really can be any of
+ * four: the glyph is drawn pointing right and `dockLayout` answers how far to
+ * turn it. A static rotation on the leaf `<svg>`, which holds nothing that
+ * stacks - the same reasoning that lets `BarButton` squash itself.
+ */
+export function CollapseIcon({ turn }) {
+    const props = svgProps();
+    return (_jsxs("svg", { ...props, style: { ...props.style, transform: `rotate(${turn}deg)` }, children: [_jsx("path", { d: "M6 7l5 5-5 5" }), _jsx("path", { d: "M13 7l5 5-5 5" })] }));
+}
+/* ── A thread's message rows and composer (issue #20) ─────────────────── */
+/** Copy this message's text. */
+export function CopyIcon() {
+    return (_jsxs("svg", { ...svgProps(), children: [_jsx("rect", { x: "9", y: "9", width: "11", height: "11", rx: "2" }), _jsx("path", { d: "M15 5.5A2.5 2.5 0 0 0 12.5 4h-6A2.5 2.5 0 0 0 4 6.5v6A2.5 2.5 0 0 0 5.5 15" })] }));
+}
+/** Copy a link back to this thread - the deep link `buildDeepLink` composes. */
+export function LinkIcon() {
+    return (_jsxs("svg", { ...svgProps(), children: [_jsx("path", { d: "M10.5 13.5a3.5 3.5 0 0 0 5 0l3-3a3.5 3.5 0 0 0-5-5l-1.2 1.2" }), _jsx("path", { d: "M13.5 10.5a3.5 3.5 0 0 0-5 0l-3 3a3.5 3.5 0 0 0 5 5l1.2-1.2" })] }));
+}
+/** Resolve, and - flipped by its label rather than its shape - reopen. */
+export function CheckIcon() {
+    return (_jsx("svg", { ...svgProps(), children: _jsx("path", { d: "M5 12.5l4.5 4.5L19 7" }) }));
+}
+/**
+ * Send a reply. The one ink-filled control in the card.
+ *
+ * The translate is an OPTICAL centring, and it is measured rather than nudged
+ * by eye. A paper plane is a triangle with a long thin tail, so its area
+ * centroid is nowhere near the middle of its bounding box: for this outline -
+ * (21,3) (14.4,21) (10.5,12.9) (2.4,9) - the centroid is (13.32, 10.32) while
+ * the viewBox centre is (12, 12). Flex centring aligns the BOX, so the glyph
+ * sat 1.32 right and 1.68 high inside a perfectly centred button and read as
+ * misaligned.
+ *
+ * Shifting by exactly that difference puts the mass on the button's centre.
+ * The shifted bounds are x 1.08-19.68 and y 4.68-22.68, so with the 1.5 stroke
+ * nothing crosses the 24 viewBox and the glyph is not clipped.
+ */
+export function SendIcon() {
+    return (_jsx("svg", { ...svgProps(), children: _jsxs("g", { transform: "translate(-1.32 1.68)", children: [_jsx("path", { d: "M21 3 10.5 13.5" }), _jsx("path", { d: "M21 3l-6.6 18-3.9-8.1L2.4 9 21 3Z" })] }) }));
+}
+/**
+ * Attach a screenshot to a reply.
+ *
+ * Disabled until a reply can carry one: `Screenshot` hangs off `FeedbackItem`
+ * and `replySchema` has no field for it, so the control is drawn and refused
+ * rather than drawn and broken.
+ */
+export function CameraIcon() {
+    return (_jsxs("svg", { ...svgProps(), children: [_jsx("path", { d: "M3 8.5a2 2 0 0 1 2-2h2l1.2-2h7.6L17 6.5h2a2 2 0 0 1 2 2v9a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2Z" }), _jsx("circle", { cx: "12", cy: "13", r: "3.5" })] }));
+}
+/** Dismiss a thread that has no marker left to re-click. */
+export function CloseIcon() {
+    return (_jsxs("svg", { ...svgProps(), children: [_jsx("path", { d: "M6.5 6.5l11 11" }), _jsx("path", { d: "M17.5 6.5l-11 11" })] }));
+}
+//# sourceMappingURL=icons.js.map

package/dist/icons.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"icons.js","sourceRoot":"","sources":["../src/icons.tsx"],"names":[],"mappings":";AAuBA,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,MAAM,IAAI,GAAkB,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAEhF;;;;GAIG;AACH,MAAM,UAAU,QAAQ;IAUtB,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,cAAc;QACtB,WAAW,EAAE,GAAG;QAChB,aAAa,EAAE,OAAO;QACtB,cAAc,EAAE,OAAO;QACvB,KAAK,EAAE,IAAI;QACX,aAAa,EAAE,IAAI;KACpB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E,MAAM,UAAU,OAAO;IACrB,OAAO,CACL,kBAAS,QAAQ,EAAE,aACjB,eAAM,CAAC,EAAC,mDAAmD,GAAG,EAC9D,iBAAQ,EAAE,EAAC,IAAI,EAAC,EAAE,EAAC,IAAI,EAAC,CAAC,EAAC,KAAK,GAAG,IAC9B,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,OAAO,CACL,iBAAS,QAAQ,EAAE,YACjB,eAAM,CAAC,EAAC,gEAAgE,GAAG,GACvE,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,CACL,kBAAS,QAAQ,EAAE,aACjB,eAAM,CAAC,EAAC,yBAAyB,GAAG,EACpC,eAAM,CAAC,EAAC,yBAAyB,GAAG,IAChC,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,CACL,kBAAS,QAAQ,EAAE,aACjB,iBAAQ,EAAE,EAAC,IAAI,EAAC,EAAE,EAAC,KAAK,EAAC,CAAC,EAAC,KAAK,GAAG,EACnC,eAAM,CAAC,EAAC,4BAA4B,GAAG,IACnC,CACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,EAAE,IAAI,EAAoB;IACrD,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,OAAO,CACL,kBACM,KAAK,EACT,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,IAAI,MAAM,EAAE,aAE1D,eAAM,CAAC,EAAC,cAAc,GAAG,EACzB,eAAM,CAAC,EAAC,eAAe,GAAG,IACtB,CACP,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E,gCAAgC;AAChC,MAAM,UAAU,QAAQ;IACtB,OAAO,CACL,kBAAS,QAAQ,EAAE,aACjB,eAAM,CAAC,EAAC,GAAG,EAAC,CAAC,EAAC,GAAG,EAAC,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,EAAE,EAAC,GAAG,GAAG,EAClD,eAAM,CAAC,EAAC,4EAA4E,GAAG,IACnF,CACP,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,QAAQ;IACtB,OAAO,CACL,kBAAS,QAAQ,EAAE,aACjB,eAAM,CAAC,EAAC,6DAA6D,GAAG,EACxE,eAAM,CAAC,EAAC,6DAA6D,GAAG,IACpE,CACP,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,SAAS;IACvB,OAAO,CACL,iBAAS,QAAQ,EAAE,YACjB,eAAM,CAAC,EAAC,sBAAsB,GAAG,GAC7B,CACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,QAAQ;IACtB,OAAO,CACL,iBAAS,QAAQ,EAAE,YACjB,aAAG,SAAS,EAAC,uBAAuB,aAClC,eAAM,CAAC,EAAC,iBAAiB,GAAG,EAC5B,eAAM,CAAC,EAAC,mCAAmC,GAAG,IAC5C,GACA,CACP,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,CACL,kBAAS,QAAQ,EAAE,aACjB,eAAM,CAAC,EAAC,0FAA0F,GAAG,EACrG,iBAAQ,EAAE,EAAC,IAAI,EAAC,EAAE,EAAC,IAAI,EAAC,CAAC,EAAC,KAAK,GAAG,IAC9B,CACP,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,SAAS;IACvB,OAAO,CACL,kBAAS,QAAQ,EAAE,aACjB,eAAM,CAAC,EAAC,gBAAgB,GAAG,EAC3B,eAAM,CAAC,EAAC,kBAAkB,GAAG,IACzB,CACP,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+export { FeedbackToolbar, type FeedbackToolbarProps, type ToolbarInboxRenderProps, type ToolbarTool, } from "./FeedbackToolbar.js";
+export { FeedbackPanel, type FeedbackPanelProps, AccountSurface, type AccountSurfaceProps, } from "./FeedbackPanel.js";
+export { InboxSheet, type InboxSheetProps, type InboxScope, INBOX_OPEN_STORAGE_KEY, } from "./InboxSheet.js";
+export { buildDeepLink, parseDeepLink, DEEP_LINK_PREFIX } from "./deepLink.js";
+export { createToolbarClient, ToolbarApiError, type ToolbarClient, type ToolbarSession, } from "./client.js";
+export { captureMetadata, captureScreenshot } from "./capture.js";
+export { toggleMark, MARKDOWN_MARKS, MARKDOWN_ALLOWED_ELEMENTS, safeMarkdownUrl, type MarkdownMark, } from "./markdown.js";
+export { PinLayer, type PinLayerProps } from "./PinLayer.js";
+export { accent, darkTheme, DEFAULT_DOCK, exitFor, fonts, lightTheme, motion, motionTransform, radii, REDUCED_MOTION_QUERY, sizes, spacing, themeFor, TOOLBAR_DOCKS, transition, typeScale, type MotionDuration, type ResolvedTheme, type ToolbarDock, type ToolbarPalette, type ToolbarStatusPalette, type ToolbarStatusStyle, type ToolbarTheme, type ToolbarThemeMode, } from "./tokens.js";
+export { buildSelector, resolveSelector, offsetWithin, locatePin, } from "./selector.js";
+export { resolveConfig, API_URL_ENV_VAR, VERCEL_ENV_VARS, type ToolbarConfig, type ToolbarConfigOverrides, } from "./config.js";
+export { DEFAULT_PIN_SHORTCUT, formatChord, isApplePlatform, type PinShortcutSetting, type ShortcutChord, } from "./shortcut.js";
+export { isToolbarEnabled, isToolbarEnabledFromEnv, ENV_VAR, FORCE_ENV_VAR, type GateInput, } from "./gating.js";
+//# sourceMappingURL=index.d.ts.map