@capturly/capture-sdk 2.11.3 → 2.11.4

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # @capturly/capture-sdk
 
+## 2.11.4
+
+### Patch Changes
+
+- [#486](https://github.com/Corey-Alan-Consulting/capturly.app/pull/486) [`52f5252`](https://github.com/Corey-Alan-Consulting/capturly.app/commit/52f5252a783bdc4c5725779ac5190ce3dd760ee9) Thanks [@NX211](https://github.com/NX211)! - Show the brand logo to respondents on iOS and in the capture SDK, and pin the
+  respondent-branding payload so the next field cannot reach one client only.
+
+  Brand logos shipped to the web respondent page and stopped there. The server was
+  already serving them — `/api/campaigns/respond/view` returns the same view the
+  /c page renders — but the mobile app and the SDK each re-declare the branding
+  shape by hand to parse an untrusted body defensively, and neither picked the
+  field up. On iOS that left the studio name rendering in exactly the slot the mark
+  is meant to replace; an SDK host got a brand-coloured surface with no mark at
+  all.
+
+  Both now read `logoPath`. The mobile respond screen renders it where the wordmark
+  was, with the studio name as its accessibility label — the same substitution the
+  web page makes, for the same reason: the mark says who is asking, and a reader
+  who cannot see it still needs to know.
+
+  Nothing could have caught this. The web page is type-checked against the
+  server's own view type, so adding a branding field turns every web surface into a
+  compile error — and leaves the two hand-written parsers compiling cleanly while
+  dropping it. `RESPONDENT_BRANDING_KEYS` in @capturly/studios-client is now the
+  agreed list of what that endpoint serves, and all three sides own a test against
+  it: the server proves it serves exactly those keys, and each client proves it
+  accounts for every one. Deliberately ignoring a key is still fine — `studioSlug`
+  is ignored by both clients — but a new key now fails three tests until each
+  surface has decided.
+
+  No desktop change: branding is edited on the web by design, and the desktop has
+  no respondent surface.
+
+  `@capturly/capture-sdk` takes a patch rather than the minor its new `logoPath`
+  would suggest: it shares the repo's `fixed` version group with the desktop and
+  mobile apps, so a minor there moves the versions the store pipelines submit
+  against. `@capturly/studios-client` is outside that group and takes the minor on
+  its own.
+
 ## 2.11.3
 
 ## 2.11.2

package/dist/{chunk-CZPDQKMD.js → chunk-U6XUGPHI.js}

@@ -101,6 +101,18 @@ function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 var stringOrNull = (v) => typeof v === "string" ? v : null;
+var HANDLED_KEYS = {
+  brandAccentColor: true,
+  brandColor: true,
+  brandSecondaryColor: true,
+  coverPath: true,
+  logoPath: true,
+  studioName: true,
+  // Served and deliberately dropped: it addresses a Capturly studio page, which
+  // an embedding host has no reason to link to.
+  studioSlug: false
+};
+var BRANDING_KEYS_HANDLED = Object.keys(HANDLED_KEYS);
 async function fetchCaptureView(args) {
   const json = await postJson(
     args.baseUrl,
@@ -117,13 +129,15 @@ async function fetchCaptureView(args) {
     brandColor: stringOrNull(view.branding.brandColor),
     brandSecondaryColor: stringOrNull(view.branding.brandSecondaryColor),
     brandAccentColor: stringOrNull(view.branding.brandAccentColor),
-    coverPath: stringOrNull(view.branding.coverPath)
+    coverPath: stringOrNull(view.branding.coverPath),
+    logoPath: stringOrNull(view.branding.logoPath)
   } : {
     studioName: "",
     brandColor: null,
     brandSecondaryColor: null,
     brandAccentColor: null,
-    coverPath: null
+    coverPath: null,
+    logoPath: null
   };
   if (typeof view.maxDurationSec !== "number" || view.maxDurationSec <= 0) {
     throw new CaptureError("unknown", "Capturly returned no recording time limit.");
@@ -271,6 +285,7 @@ async function finalizeSubmission(args) {
 export {
   isSecureTransportUrl,
   CaptureError,
+  BRANDING_KEYS_HANDLED,
   fetchCaptureView,
   requestUpload,
   uploadBlob,

package/dist/index.js

@@ -5,7 +5,7 @@ import {
   isSecureTransportUrl,
   requestUpload,
   uploadBlob
-} from "./chunk-CZPDQKMD.js";
+} from "./chunk-U6XUGPHI.js";
 
 var MP4_MIME = "video/mp4;codecs=avc1.42E01E,mp4a.40.2";
 function pickMuxStrategy() {

package/dist/transport.d.ts

@@ -1,6 +1,7 @@
 import { CaptureError, type CaptureAccess, type CaptureErrorCode, type CaptureRequestBranding, type CaptureRequestView } from './types.js';
 export { CaptureError };
 export type { CaptureAccess, CaptureErrorCode, CaptureRequestBranding, CaptureRequestView };
+export declare const BRANDING_KEYS_HANDLED: readonly string[];
 /**
  * Fetch what the person is being asked — title, prompt, branding, release
  * text, limits, and any submission they already made. Same access, same

package/dist/transport.js

@@ -1,11 +1,13 @@
 import {
+  BRANDING_KEYS_HANDLED,
   CaptureError,
   fetchCaptureView,
   finalizeSubmission,
   requestUpload,
   uploadBlob
-} from "./chunk-CZPDQKMD.js";
+} from "./chunk-U6XUGPHI.js";
 export {
+  BRANDING_KEYS_HANDLED,
   CaptureError,
   fetchCaptureView,
   finalizeSubmission,

package/dist/types.d.ts

@@ -31,6 +31,16 @@ export interface CaptureRequestBranding {
     brandAccentColor: string | null;
     /** Cover-art path under the Capturly origin, or null when unset. */
     coverPath: string | null;
+    /**
+     * Brand-mark path under the Capturly origin, already resolved through
+     * request → studio → organization, or null when no level has one.
+     *
+     * Render it in place of `studioName` and keep the name as the image's alt
+     * text: the mark says who is asking, and a reader with images blocked still
+     * needs to know. Served by an unauthenticated proxy, so a host page can load
+     * it without credentials.
+     */
+    logoPath: string | null;
 }
 /**
  * What the person is being asked, fetched with the same access the recording

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capturly/capture-sdk",
-  "version": "2.11.3",
+  "version": "2.11.4",
   "description": "Record full-quality audio and video on your user's own device, from your own product.",
   "keywords": [
     "recording",
@@ -55,9 +55,10 @@
     "esbuild": "^0.25.0",
     "typescript": "^5.4.0",
     "vitest": "^4.1.7",
-    "@capturly/eslint-config": "2.11.3",
-    "@capturly/tsconfig": "2.11.3",
-    "@capturly/recording-engine": "2.11.3"
+    "@capturly/eslint-config": "2.11.4",
+    "@capturly/studios-client": "0.3.0",
+    "@capturly/tsconfig": "2.11.4",
+    "@capturly/recording-engine": "2.11.4"
   },
   "scripts": {
     "build": "pnpm clean && node build.mjs && tsc -p tsconfig.build.json --emitDeclarationOnly",