@canmi/web 2026.1005.4 → 2026.1005.7

package/dist/disclose/src/build.js

@@ -8,7 +8,10 @@ import { join } from "node:path";
 const VERSIONED = [
 	"@codemirror/view",
 	"@videojs/core",
-	"d3-hierarchy"
+	"d3-array",
+	"d3-hierarchy",
+	"d3-scale",
+	"d3-shape"
 ];
 /** The globals a package used on every page is disclosed as, given its installed version. */
 const GLOBALS = {

package/dist/disclose/src/hono.d.ts

@@ -0,0 +1,10 @@
+import { MiddlewareHandler } from "hono";
+//#region disclose/src/hono.d.ts
+/**
+ * `X-Powered-By: Hono` on every answer, which is all Wappalyzer's Hono fingerprint reads -- and on
+ * a page's own response alone, so an API answered in a browser is named too. Hono's own
+ * `poweredBy` sets the header in place, which throws on an answer passed through from a `fetch`,
+ * whose headers are immutable; that one is copied first. See spec/web/disclose.md.
+ */
+export declare function poweredBy(): MiddlewareHandler;
+//#endregion

package/dist/disclose/src/hono.js

@@ -0,0 +1,25 @@
+//#region disclose/src/hono.ts
+/**
+* `X-Powered-By: Hono` on every answer, which is all Wappalyzer's Hono fingerprint reads -- and on
+* a page's own response alone, so an API answered in a browser is named too. Hono's own
+* `poweredBy` sets the header in place, which throws on an answer passed through from a `fetch`,
+* whose headers are immutable; that one is copied first. See spec/web/disclose.md.
+*/
+function poweredBy() {
+	return async (c, next) => {
+		await next();
+		try {
+			c.res.headers.set("X-Powered-By", "Hono");
+		} catch {
+			const headers = new Headers(c.res.headers);
+			headers.set("X-Powered-By", "Hono");
+			c.res = new Response(c.res.body, {
+				status: c.res.status,
+				statusText: c.res.statusText,
+				headers
+			});
+		}
+	};
+}
+//#endregion
+export { poweredBy };

package/dist/disclose/src/index.d.ts

@@ -19,6 +19,12 @@ export interface Disclosure {
  * is nothing to say. See spec/web/disclose.md.
  */
 export declare function disclosureHead(disclosure: Disclosure | undefined): string;
+/**
+ * D3, from the component that draws with it: `d3.version`, which no D3 module sets. The value names
+ * the module, which Wappalyzer's version check refuses, so D3 shows without the module's own major
+ * read as D3's. Nothing when the app's build found no D3 module. See spec/web/disclose.md.
+ */
+export declare function discloseD3(disclosure: Disclosure | undefined): void;
 /** Sets `globals` on `window`, from an app's root layout; nothing on the server. */
 export declare function discloseGlobals(disclosure: Disclosure | undefined): void;
 /**

package/dist/disclose/src/index.js

@@ -14,6 +14,23 @@ function disclosureHead(disclosure) {
 	}
 	return parts.join("");
 }
+/** The D3 modules an app may draw with, any one of which is D3 to a fingerprint. */
+const D3_MODULES = [
+	"d3-hierarchy",
+	"d3-scale",
+	"d3-shape",
+	"d3-array"
+];
+/**
+* D3, from the component that draws with it: `d3.version`, which no D3 module sets. The value names
+* the module, which Wappalyzer's version check refuses, so D3 shows without the module's own major
+* read as D3's. Nothing when the app's build found no D3 module. See spec/web/disclose.md.
+*/
+function discloseD3(disclosure) {
+	const versions = disclosure?.versions ?? {};
+	const name = D3_MODULES.find((module) => versions[module]);
+	if (name) disclose({ "d3.version": `${name}@${versions[name]}` });
+}
 /** Sets `globals` on `window`, from an app's root layout; nothing on the server. */
 function discloseGlobals(disclosure) {
 	if (disclosure) disclose(disclosure.globals);
@@ -41,4 +58,4 @@ function disclose(entries) {
 	}
 }
 //#endregion
-export { disclose, discloseGlobals, disclosureHead };
+export { disclose, discloseD3, discloseGlobals, disclosureHead };

package/dist/sentry/src/feedback.d.ts

@@ -0,0 +1,10 @@
+//#region sentry/src/feedback.d.ts
+/**
+ * Show the dialog, registering the integration the first time.
+ *
+ * Answers whether it opened: not without a client, which an app without a DSN never makes, and
+ * not when the dialog itself fails. A caller offers another way to write when it did not. In
+ * development it opens, and what is sent is dropped.
+ */
+export declare function openReport(): Promise<boolean>;
+//#endregion

package/dist/sentry/src/feedback.js

@@ -0,0 +1,36 @@
+import { feedbackIntegration, getClient, getFeedback } from "@sentry/sveltekit";
+//#region sentry/src/feedback.ts
+/**
+* Sentry's feedback dialog, in a module nothing imports until a reader asks for it.
+*
+* Its widget is 24KB gzipped, so it is a module of its own and an app reaches it with
+* `await import('@canmi/web/sentry/feedback')` from the control that opens it, never at the top
+* of a file: that keeps it out of every page's entry, and out of the server, where
+* `@sentry/sveltekit` has no `getFeedback`. Named imports, because a namespace import forces every
+* export live and the bundler could no longer split this off. See spec/web/sentry.md.
+*/
+let form;
+/**
+* Show the dialog, registering the integration the first time.
+*
+* Answers whether it opened: not without a client, which an app without a DSN never makes, and
+* not when the dialog itself fails. A caller offers another way to write when it did not. In
+* development it opens, and what is sent is dropped.
+*/
+async function openReport() {
+	try {
+		const client = getClient();
+		if (!client) return false;
+		if (!getFeedback()) client.addIntegration(feedbackIntegration({ autoInject: false }));
+		const feedback = getFeedback();
+		if (!feedback) return false;
+		form ??= await feedback.createForm();
+		form.appendToDom();
+		form.open();
+		return true;
+	} catch {
+		return false;
+	}
+}
+//#endregion
+export { openReport };

package/dist/sentry/src/report.d.ts

@@ -0,0 +1,10 @@
+//#region sentry/src/report.d.ts
+/**
+ * What a "report a problem" control calls: Sentry's dialog when it opens, and the reader's mail
+ * client at `mailto` when it does not -- no client, a dialog that fails, or the dialog's own chunk
+ * not loading, as for a tab opened before a deploy. Imports nothing of Sentry itself, so a page
+ * may import this at the top and on the server; the dialog is fetched on the press. See
+ * spec/web/sentry.md.
+ */
+export declare function report(mailto: string): Promise<void>;
+//#endregion

package/dist/sentry/src/report.js

@@ -0,0 +1,17 @@
+//#region sentry/src/report.ts
+/**
+* What a "report a problem" control calls: Sentry's dialog when it opens, and the reader's mail
+* client at `mailto` when it does not -- no client, a dialog that fails, or the dialog's own chunk
+* not loading, as for a tab opened before a deploy. Imports nothing of Sentry itself, so a page
+* may import this at the top and on the server; the dialog is fetched on the press. See
+* spec/web/sentry.md.
+*/
+async function report(mailto) {
+	try {
+		const { openReport } = await import("./feedback.js");
+		if (await openReport()) return;
+	} catch {}
+	window.location.href = mailto;
+}
+//#endregion
+export { report };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canmi/web",
-  "version": "2026.1005.4",
+  "version": "2026.1005.7",
   "description": "SvelteKit compat, referer and Sentry.",
   "keywords": [
     "browserslist",
@@ -40,6 +40,14 @@
       "types": "./dist/sentry/src/client.d.ts",
       "default": "./dist/sentry/src/client.js"
     },
+    "./sentry/feedback": {
+      "types": "./dist/sentry/src/feedback.d.ts",
+      "default": "./dist/sentry/src/feedback.js"
+    },
+    "./sentry/report": {
+      "types": "./dist/sentry/src/report.d.ts",
+      "default": "./dist/sentry/src/report.js"
+    },
     "./sentry/server": {
       "types": "./dist/sentry/src/server.d.ts",
       "default": "./dist/sentry/src/server.js"
@@ -48,6 +56,10 @@
       "types": "./dist/disclose/src/build.d.ts",
       "default": "./dist/disclose/src/build.js"
     },
+    "./disclose/hono": {
+      "types": "./dist/disclose/src/hono.d.ts",
+      "default": "./dist/disclose/src/hono.js"
+    },
     "./disclose": {
       "types": "./dist/disclose/src/index.d.ts",
       "default": "./dist/disclose/src/index.js"
@@ -59,11 +71,13 @@
   },
   "devDependencies": {
     "@sentry/sveltekit": "^11.4.0",
-    "@sveltejs/kit": "^3.0.0"
+    "@sveltejs/kit": "^3.0.0",
+    "hono": "^4.13.12"
   },
   "peerDependencies": {
     "@sentry/sveltekit": "^11.4.0",
-    "@sveltejs/kit": "^3.0.0"
+    "@sveltejs/kit": "^3.0.0",
+    "hono": "^4.13.12"
   },
   "peerDependenciesMeta": {
     "@sentry/sveltekit": {
@@ -71,6 +85,9 @@
     },
     "@sveltejs/kit": {
       "optional": true
+    },
+    "hono": {
+      "optional": true
     }
   },
   "scripts": {