@fixback/sdk 0.5.0 → 0.6.0

package/dist/breadcrumbs.d.ts

@@ -1,327 +0,0 @@
-/**
- * The thin trace **breadcrumb ring buffer** and its capture instrumentation
- * (spec 0003 §C; research `sentry-error-capture-findings.md` §7.5).
- *
- * A fixed-size FIFO buffer of the most recent activity — console, navigation,
- * network metadata, masked user actions, and the failing error — that rides on a
- * report as Evidence. It is trimmed exactly like Sentry (`crumbs.slice(-N)`),
- * defaults to a deliberately thin `N ≈ 30` because it ships on **every** payload,
- * and takes an optional age cap. A `beforeBreadcrumb(crumb) => crumb | null`
- * filter lets a Project mute or edit crumbs before they enter the buffer.
- *
- * Everything private is kept out **at the source**: `ui.input` records that an
- * input changed, never its value; `fetch`/`xhr` crumbs carry method + URL +
- * status only, **never** bodies; URLs are scrubbed as the crumb is built. The
- * `beforeSend` choke point (`scrub.ts`) is the final gate over the whole report.
- *
- * The SDK stays dependency-free and must never throw into the host page, so every
- * instrumentation hook is wrapped: a capture failure is swallowed and the original
- * behaviour (the real `console`, `fetch`, navigation) always runs.
- */
-import { type Breadcrumb, type BreadcrumbCategory, type BreadcrumbData, type BreadcrumbLevel, type ConsoleArg, type ConsoleArgType, type NetworkApi, type NetworkOutcome, type SourceLocation } from "@fixback/sdk-core";
-export type { Breadcrumb, BreadcrumbCategory, BreadcrumbData, BreadcrumbLevel, ConsoleArg, ConsoleArgType, NetworkApi, NetworkOutcome, SourceLocation, };
-/**
- * The three independent trace streams (spec #122 §A, decision D6). Each is its own
- * FIFO ring with its own size budget, so a chatty stream can't evict another's
- * lead-up. Every {@link BreadcrumbCategory} maps to exactly one stream via
- * {@link streamOf}.
- */
-export type TraceStream = "network" | "console" | "breadcrumbs";
-/**
- * Per-stream ring budgets — starting points from the grill (D6): network is the
- * chattiest, breadcrumbs the sparsest. Per-project tunable, never frozen.
- */
-export declare const DEFAULT_STREAM_BUDGETS: Readonly<Record<TraceStream, number>>;
-/**
- * The shared age cap (spec #122 §A): entries older than this are pruned from every
- * stream, whichever trims first. ~3 minutes and — unlike the thin buffer's
- * off-by-default cap — **on** by default, so an idle tab never ships stale context.
- */
-export declare const DEFAULT_MAX_AGE_MS: number;
-/**
- * Console levels captured by default (spec #122 §C, decision D7): **all** of them, so
- * the Console tab is a real console and not just an error log. Eviction priority (not
- * capture) is what keeps a chatty app's `log`/`info`/`debug` from burying the signal —
- * see {@link PINNED_CONSOLE_LEVELS}.
- */
-export declare const DEFAULT_CONSOLE_LEVELS: readonly BreadcrumbLevel[];
-/**
- * The console levels **pinned** against eviction (spec #122 §C, decision D7). When the
- * console stream overflows its budget, `warn`/`error`/`assert` are retained ahead of
- * `log`/`info`/`debug`, so an error is never evicted by a burst of chatter — the
- * low-priority levels fill the remainder and are dropped first.
- */
-export declare const PINNED_CONSOLE_LEVELS: readonly BreadcrumbLevel[];
-/**
- * The console levels for which `source` (`file:line`) is captured (ticket #159).
- *
- * Capturing a call site constructs a `new Error()` to read its stack on **every** console
- * call — a measurable hot-page cost when a chatty app logs in a tight loop (spec #122's
- * "hot-page performance budget" open question, handed onward from the grill). The
- * spec-sanctioned mitigation (decision D7) narrows source capture to the **levels that
- * matter for debugging** — the same `warn`/`error`/`assert` that are pinned against
- * eviction — so `log`/`info`/`debug` pay no per-call stack cost and simply omit `source`.
- * Full-fidelity `source` is preserved exactly where it earns its keep: on warnings,
- * errors, and failed assertions. Per-project tunability of this set is future work; today
- * it deliberately mirrors {@link PINNED_CONSOLE_LEVELS} so "what survives eviction" and
- * "what carries a call site" stay one idea.
- */
-export declare const SOURCE_CAPTURE_LEVELS: readonly BreadcrumbLevel[];
-/**
- * Which stream a crumb's category belongs to (spec #122 §A). Network APIs
- * (`fetch` / `xhr` / `beacon`) form the network stream, `console` its own, and
- * everything else (navigation, masked UI events, the failing error) breadcrumbs.
- */
-export declare function streamOf(category: string): TraceStream;
-/** Filters or edits each crumb before it enters the buffer; `null` drops it. */
-export type BeforeBreadcrumb = (crumb: Breadcrumb) => Breadcrumb | null;
-/** Configuration for {@link createBreadcrumbBuffer}. All values are optional. */
-export interface BreadcrumbBufferConfig {
-    /**
-     * Per-stream size budgets (oldest drop, independently per stream). Any stream
-     * omitted falls back to {@link DEFAULT_STREAM_BUDGETS}.
-     */
-    readonly budgets?: Partial<Record<TraceStream, number>>;
-    /**
-     * Shared age cap in ms: entries older than this are dropped from every stream.
-     * Defaults to {@link DEFAULT_MAX_AGE_MS} (on); pass `0` (or a non-positive value)
-     * to disable age pruning.
-     */
-    readonly maxAgeMs?: number;
-    /** A per-crumb filter (mute a category, edit, or drop by returning `null`). */
-    readonly beforeBreadcrumb?: BeforeBreadcrumb | null;
-    /** Epoch clock source, injectable for tests. Defaults to `Date.now`. */
-    readonly now?: () => number;
-    /** High-res monotonic clock, injectable for tests. Defaults to `performance.now`. */
-    readonly mono?: () => number;
-    /** Stable id generator, injectable for tests. Defaults to a per-buffer sequence. */
-    readonly nextId?: () => string;
-}
-/** A live trace buffer. */
-export interface BreadcrumbBuffer {
-    /** Record a crumb (subject to `beforeBreadcrumb`, id/mono stamping, size, and age trimming). */
-    add(crumb: Breadcrumb): void;
-    /** The current crumbs, merged across streams and ordered in time — a fresh array. */
-    snapshot(): Breadcrumb[];
-    /** Drop every crumb. */
-    clear(): void;
-}
-/**
- * Create the per-stream trace buffer (spec #122 §A/§B). It holds **three
- * independent FIFO rings** — `network`, `console`, `breadcrumbs` — each trimmed to
- * its own budget so a chatty stream never evicts another's lead-up, plus a shared
- * age cap. On `add`, a crumb passes through `beforeBreadcrumb`, is stamped with a
- * stable `id` and a high-res `mono` timestamp (and an epoch `timestamp` if it has
- * none), routed to its stream, then that stream is pruned by age and trimmed to its
- * budget. `snapshot` prunes by age again, then merges the three streams into one
- * `mono`-ordered array for transport — so the wire keeps its single `trace` field.
- */
-export declare function createBreadcrumbBuffer(config?: BreadcrumbBufferConfig): BreadcrumbBuffer;
-/**
- * Longest scrubbed URL kept on a crumb (spec #122 §F): capped at assembly so an
- * over-long URL is truncated, never dropped and never allowed to bloat a report.
- */
-export declare const MAX_URL_LENGTH = 2048;
-/**
- * Structured console argument caps (spec #122 §C/§F), all applied **at assembly** so a
- * single console crumb can never bloat a report:
- * - {@link MAX_ARG_DEPTH} bounds how deep a `json` argument is cloned (deeper nodes
- *   collapse to an `[Object]`/`[Array]` marker);
- * - {@link MAX_ARG_ITEMS} bounds how many keys/elements are kept at each level;
- * - {@link MAX_ARG_STRING_LENGTH} truncates a single over-long string value;
- * - {@link MAX_CONSOLE_ARGS_BYTES} bounds the serialized size of the whole args array
- *   (trailing args are dropped to fit), kept well under ingest's per-entry byte cap.
- */
-export declare const MAX_ARG_DEPTH = 4;
-export declare const MAX_ARG_ITEMS = 100;
-export declare const MAX_ARG_STRING_LENGTH = 1024;
-export declare const MAX_CONSOLE_ARGS_BYTES = 4096;
-/** Classify one console argument into a type-tagged {@link ConsoleArg} (spec #122 §C). */
-export declare function toConsoleArg(value: unknown): ConsoleArg;
-/**
- * A `console` crumb from a captured call's level and arguments (spec #122 §C). The
- * `message` is the one-line preview (flattened, truncated); `args` preserves each
- * argument as a structured, type-tagged, size-capped value so the Console tab can
- * render objects/errors expandably; `source` is the best-effort `file:line`, attached
- * only when the stack yielded one. Args are omitted entirely for a no-argument call.
- */
-export declare function consoleCrumb(level: BreadcrumbLevel, args: readonly unknown[], timestamp: number, source?: SourceLocation): Breadcrumb;
-/** A `navigation` crumb; both URLs are scrubbed and length-capped as the crumb is built. */
-export declare function navigationCrumb(from: string, to: string, timestamp: number): Breadcrumb;
-/**
- * Classify an HTTP status into a {@link NetworkOutcome} (spec #122 §D). A missing or
- * `0` status is a `network-error` (a request that never got a response); otherwise
- * the 4xx/5xx classes flag failures and everything else is `ok`. Used both as the
- * fallback outcome and by the thin {@link fetchCrumb} / {@link xhrCrumb} builders.
- */
-export declare function outcomeFromStatus(status: number | undefined): NetworkOutcome;
-/**
- * The trivially-known byte size of a request body (spec #122 §D) — a string's UTF-8
- * length, a `Blob`'s `.size`, or an `ArrayBuffer`/typed-array `.byteLength`. Anything
- * that would require **reading** the body (a `ReadableStream`, `FormData`, a `Request`
- * with a stream body) returns `undefined` — the "never read the body" line holds.
- */
-export declare function trivialBodySize(body: unknown): number | undefined;
-/** Parse a `content-length` header into a non-negative byte count, or `undefined`. */
-export declare function parseContentLength(value: string | null | undefined): number | undefined;
-/** The media type from a `content-type` header (the part before any `;` parameters). */
-export declare function contentTypeOf(value: string | null | undefined): string | undefined;
-/** The rich metadata a network crumb records (spec #122 §D) — never a body or header. */
-export interface NetworkCrumbInput {
-    readonly api: NetworkApi;
-    readonly method: string;
-    /** The raw request URL — scrubbed (query dropped, path PII redacted) as the crumb is built. */
-    readonly url: string;
-    readonly status?: number;
-    readonly statusText?: string;
-    readonly durationMs?: number;
-    readonly reqSize?: number;
-    readonly respSize?: number;
-    readonly contentType?: string;
-    readonly outcome: NetworkOutcome;
-}
-/**
- * A network crumb (`fetch` / `xhr` / `beacon`) with the rich, metadata-only fields
- * the Network tab renders (spec #122 §D, ticket #139): api, method, scrubbed URL,
- * status + statusText, duration, request/response sizes, content type, and a failure
- * outcome. The URL is scrubbed and length-capped at assembly. The shape has **no field
- * for a request/response body or an arbitrary header**, so neither can ever be
- * recorded; only a positive status, and fields that were actually supplied, ride along.
- */
-export declare function networkCrumb(input: NetworkCrumbInput, timestamp: number): Breadcrumb;
-/**
- * A thin `fetch` crumb from method + URL + status (outcome derived from the status).
- * The instrumentation uses {@link networkCrumb} directly to carry the full metadata;
- * this convenience builder seeds a network crumb from a status alone.
- */
-export declare function fetchCrumb(method: string, url: string, status: number | undefined, timestamp: number): Breadcrumb;
-/** A thin `xhr` crumb from method + URL + status (outcome derived from the status). */
-export declare function xhrCrumb(method: string, url: string, status: number | undefined, timestamp: number): Breadcrumb;
-/** A `ui.click` crumb: a masked target selector only — no text or value. */
-export declare function clickCrumb(target: Element, timestamp: number): Breadcrumb;
-/**
- * A `ui.input` crumb: records **that** an input changed and which field, never
- * the value typed into it. The `target` element's `.value` is never read.
- */
-export declare function inputCrumb(target: Element, timestamp: number): Breadcrumb;
-/**
- * An `error` crumb for the failing exception or rejection that ends the trace. When
- * `causedBy` is given (an auto-captured error), it rides on the crumb as the causal
- * pointer to the ids of the entries immediately preceding the throw (spec #122 §F).
- */
-export declare function errorCrumb(error: unknown, timestamp: number, causedBy?: readonly string[]): Breadcrumb;
-/** Detaches an installed instrumentation, restoring the original behaviour. */
-export type Teardown = () => void;
-type AnyFn = (...args: unknown[]) => unknown;
-type ConsoleLike = Partial<Record<BreadcrumbLevel, AnyFn>>;
-type FetchFn = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
-interface HistoryLike {
-    pushState(data: unknown, unused: string, url?: string | URL | null): void;
-    replaceState(data: unknown, unused: string, url?: string | URL | null): void;
-}
-interface XhrInstance {
-    status: number;
-    statusText?: string;
-    open(method: string, url: string | URL, ...rest: unknown[]): void;
-    send(body?: unknown): void;
-    getResponseHeader?(name: string): string | null;
-    addEventListener(type: string, listener: () => void): void;
-    removeEventListener(type: string, listener: () => void): void;
-}
-interface XhrConstructor {
-    new (): XhrInstance;
-    prototype: XhrInstance;
-}
-/** The `navigator.sendBeacon` surface the beacon instrumentation wraps. */
-export interface BeaconNavigator {
-    sendBeacon?: (url: string | URL, data?: BodyInit | null) => boolean;
-}
-/** The structural window surface the instrumentation reaches into. */
-export interface InstrumentWindow {
-    fetch?: FetchFn;
-    history?: HistoryLike;
-    location?: {
-        href: string;
-    };
-    XMLHttpRequest?: XhrConstructor;
-    navigator?: BeaconNavigator;
-    addEventListener(type: string, listener: (event: Event) => void, options?: boolean | AddEventListenerOptions): void;
-    removeEventListener(type: string, listener: (event: Event) => void, options?: boolean | EventListenerOptions): void;
-}
-/** Options for {@link instrumentBreadcrumbs} and the individual installers. */
-export interface InstrumentOptions {
-    readonly win?: InstrumentWindow;
-    readonly doc?: Document;
-    readonly consoleObj?: ConsoleLike;
-    readonly consoleLevels?: readonly BreadcrumbLevel[];
-    /** Skip URLs (e.g. the SDK's own ingest calls) so they never become crumbs. */
-    readonly ignoreUrl?: (url: string) => boolean;
-    readonly now?: () => number;
-    /**
-     * High-res monotonic clock (spec #122 §D) — used to measure a request's duration as
-     * a delta around the wrapped call. Defaults to `performance.now`; injectable for tests.
-     */
-    readonly mono?: () => number;
-    /**
-     * Whether to instrument the **console** stream (spec #122 §L; ticket #138).
-     * Defaults to `true`; pass `false` and `console` is never wrapped, so no console
-     * entry is ever recorded — the per-project toggle stops the stream at its source.
-     */
-    readonly captureConsole?: boolean;
-    /**
-     * Whether to instrument the **network** stream — `fetch` and `XHR` (spec #122 §L;
-     * ticket #138). Defaults to `true`; pass `false` and neither is wrapped, so no
-     * network entry is ever recorded. Navigation and masked UI events are unaffected.
-     */
-    readonly captureNetwork?: boolean;
-}
-/**
- * The best-effort `file:line` a console call was made from (spec #122 §C). Parses the
- * frames of a stack, skipping `skipFrames` leading (SDK-internal) frames so the source
- * points at the host code that called `console.*`. Returns `undefined` when no frame
- * yields a usable location — the crumb then simply omits `source`.
- */
-export declare function sourceFromStack(stack: string | undefined, skipFrames?: number): SourceLocation | undefined;
-/** Wrap `console` methods so calls at the captured levels become crumbs. */
-export declare function instrumentConsole(buffer: BreadcrumbBuffer, consoleObj: ConsoleLike, levels: readonly BreadcrumbLevel[], now: () => number): Teardown;
-/**
- * Wrap `fetch` to record a rich network crumb on settlement (spec #122 §D, ticket
- * #139): method, scrubbed URL, status + statusText, a `performance.now()` duration,
- * request size (only when the body is trivially sized), response size (from the
- * `content-length` header only), content type, and a failure outcome. The **original**
- * outcome is returned untouched — the response is passed through **without its body
- * being read** (only two metadata headers are inspected), and a rejection is re-thrown
- * so the caller's `unhandledrejection` semantics are preserved.
- */
-export declare function instrumentFetch(buffer: BreadcrumbBuffer, win: InstrumentWindow, ignoreUrl: (url: string) => boolean, now: () => number, mono?: () => number): Teardown;
-/**
- * Patch `XMLHttpRequest` to record a rich network crumb when a request settles (spec
- * #122 §D, ticket #139): method, scrubbed URL, status + statusText, a `performance.now()`
- * duration, request size (only when the body is trivially sized), response size (from
- * the `content-length` header only), content type, and a failure outcome distinguished
- * by which terminal event fired (`error` / `timeout` / `abort` / `load`). The `send`
- * body argument is **never read for content** — only its trivially-known size — so a body
- * can never reach the buffer.
- */
-export declare function instrumentXhr(buffer: BreadcrumbBuffer, win: InstrumentWindow, ignoreUrl: (url: string) => boolean, now: () => number, mono?: () => number): Teardown;
-/**
- * Wrap `navigator.sendBeacon` to record a network crumb for each beacon (spec #122 §D,
- * ticket #139). `sendBeacon` is fire-and-forget with a **synchronous boolean** return —
- * `true` when the user agent queued the beacon, `false` when it declined — so wrapping
- * must return that boolean unchanged: the original is called first and its result both
- * classifies the crumb (`ok` / `network-error`) and is returned to the caller. Only the
- * URL and the trivially-known request size are recorded (no response exists to read);
- * capture failure is swallowed and the boolean still returned, and if the original itself
- * throws we record best-effort and re-throw so the contract is preserved exactly.
- */
-export declare function instrumentBeacon(buffer: BreadcrumbBuffer, win: InstrumentWindow, ignoreUrl: (url: string) => boolean, now: () => number): Teardown;
-/** Record a `navigation` crumb on `pushState`/`replaceState`/pop/hash changes. */
-export declare function instrumentNavigation(buffer: BreadcrumbBuffer, win: InstrumentWindow, now: () => number): Teardown;
-/** Listen (capture-phase) for clicks and input changes as masked crumbs. */
-export declare function instrumentUiEvents(buffer: BreadcrumbBuffer, doc: Document, now: () => number): Teardown;
-/**
- * Install every capture hook onto a window/document and return a single teardown
- * that removes them all. Each hook is independent and defensive: a failure in one
- * never blocks the others, and none can throw into the host page.
- */
-export declare function instrumentBreadcrumbs(buffer: BreadcrumbBuffer, options?: InstrumentOptions): Teardown;

package/dist/invite.d.ts

@@ -1,104 +0,0 @@
-/**
- * Invite redemption & reporter identity (spec §F).
- *
- * The zero-integration path for an invited tester: detect an invite token on the
- * page (`?fixback_invite=<token>`) or an explicit `redeem()` call, read the
- * Invite's public status, and — on confirmation — redeem it into a persisted
- * `reporterId` the SDK thereafter presents as an identity input.
- *
- * This module is the wire + storage half (pure enough to unit-test directly): the
- * two invite endpoints, the localStorage persistence scoped by publishable key,
- * and the URL token detection / one-time consumption. The onboarding modal is
- * `onboarding.ts`; `init` wires the two together.
- *
- * Like `boot.ts`, the wire types are a **vendored** slice of the server contract
- * (`apps/api/src/invites/invite-redemption.controller.ts`) — the SDK never imports
- * the private server package. Keep them in lock-step with that controller.
- */
-import type { ReporterTier } from "./boot";
-/** The Invite's shape. Mirrors the server's `InviteKind`. */
-export type InviteKind = "targeted" | "shared";
-/** The dead/unknown states a status or redeem read can resolve to. */
-export type InviteDeadStatus = "revoked" | "expired" | "exhausted" | "not_found";
-/**
- * The public status of an Invite (`GET /api/invites/:token`). A live (`pending`)
- * Invite reveals the minimal facts the onboarding modal needs — the Project, the
- * Invite's shape, and the **server-derived** tier the redemption would grant; a
- * dead or unknown token reveals only its state.
- */
-export type InviteStatusAnswer = {
-    readonly status: "pending";
-    readonly projectId: string;
-    readonly kind: InviteKind;
-    readonly tier: ReporterTier;
-} | {
-    readonly status: InviteDeadStatus;
-};
-/**
- * The result of redeeming an Invite (`POST /api/invites/:token/redeem`): the
- * minted Reporter (its handle + server-derived tier + Project), or why it was
- * refused.
- */
-export type RedeemAnswer = {
-    readonly status: "redeemed";
-    readonly reporterId: string;
-    readonly tier: ReporterTier;
-    readonly projectId: string;
-} | {
-    readonly status: InviteDeadStatus;
-};
-/**
- * The self-provided display fields captured in the onboarding modal. They ride
- * along as a Reporter's chosen name / email — **never** a trust signal (the tier
- * is always server-derived, spec §F).
- */
-export interface ReporterDisplay {
-    readonly name?: string;
-    readonly email?: string;
-}
-/** A persisted redeemed Reporter: the server handle plus the display fields. */
-export interface StoredReporter extends ReporterDisplay {
-    readonly reporterId: string;
-}
-/** The URL query parameter that carries an invite token. */
-export declare const INVITE_QUERY_PARAM = "fixback_invite";
-/**
- * Read the invite token from a page URL's `?fixback_invite=` param. Returns the
- * token, or `null` when absent, empty, or the URL cannot be parsed — never throws.
- */
-export declare function readInviteToken(href: string): string | null;
-/**
- * Strip the invite token from the address bar (one-time consumption, spec §F) via
- * `history.replaceState`, so a reload or a shared link cannot re-trigger — or
- * re-consume — an already-redeemed Invite. Other params, the path, and the hash
- * are preserved. Best-effort: it never throws into the host page.
- */
-export declare function stripInviteToken(win: Window): void;
-/**
- * Persist a redeemed Reporter for `key`. The `reporterId` is the identity the SDK
- * presents on later boots; the display name / email ride along as chosen fields.
- * Best-effort — storage being unavailable (private mode) is never fatal.
- */
-export declare function persistReporter(key: string, reporter: StoredReporter, store?: Storage | null): void;
-/**
- * Read the redeemed Reporter persisted for `key`, or `null` when none is stored,
- * the record is malformed, or it carries no `reporterId`. Never throws.
- */
-export declare function readStoredReporter(key: string, store?: Storage | null): StoredReporter | null;
-/** Join an API base URL with the invite status path, tolerating a trailing slash. */
-export declare function inviteStatusEndpoint(apiUrl: string, token: string): string;
-/** Join an API base URL with the redeem path for a token. */
-export declare function redeemEndpoint(apiUrl: string, token: string): string;
-/**
- * Read an Invite's public status. Resolves to the answer, or `null` when Fixback
- * could not be reached or the body was not a recognised answer. The endpoint
- * answers 200 for a live or dead Invite and 404 (with a JSON body) for an unknown
- * token, so the body — not the HTTP status — is what the caller narrows on. Never
- * throws: an outage stays invisible to the host page.
- */
-export declare function fetchInviteStatus(apiUrl: string, token: string, fetchImpl?: typeof fetch): Promise<InviteStatusAnswer | null>;
-/**
- * Redeem an Invite by token, minting and returning a Reporter. Resolves to the
- * answer, or `null` on an unreachable API or an unrecognised body. Never throws.
- */
-export declare function redeemInviteToken(apiUrl: string, token: string, fetchImpl?: typeof fetch): Promise<RedeemAnswer | null>;

package/dist/onboarding-styles.d.ts

@@ -1,8 +0,0 @@
-/**
- * Styles for the invite onboarding modal (spec §F) — the Signal look of the
- * frozen Reporter prototype (`docs/design/Fixback Reporter.dc.html`), scoped to
- * the modal's own Shadow DOM so the host page is never touched and never touches
- * it. Tokens mirror `overlay-styles.ts` so launcher, overlay, and modal read as
- * one system.
- */
-export declare const ONBOARDING_STYLES = "\n:host {\n  --fb-color-accent: #2f6fed;\n  --fb-color-accent-hover: #245fd0;\n  --fb-color-on-emphasis: #ffffff;\n  --fb-color-ink: #0f1720;\n  --fb-color-text: #1a2530;\n  --fb-color-muted: #5a6875;\n  --fb-color-faint: #9aa7b2;\n  --fb-color-hint: #b7c1cb;\n  --fb-color-border: #dce3ea;\n  --fb-color-border-soft: #e6ebf0;\n  --fb-color-surface: #ffffff;\n  --fb-color-card: #f6f8fa;\n  --fb-color-accent-bg: #eaf1fe;\n  --fb-color-success: #2f9e5b;\n  --fb-font-sans: \"IBM Plex Sans\", system-ui, -apple-system, \"Segoe UI\", Roboto,\n    Helvetica, Arial, sans-serif;\n  --fb-font-mono: \"IBM Plex Mono\", ui-monospace, \"SFMono-Regular\", Menlo, Consolas,\n    monospace;\n  all: initial;\n}\n\n*, *::before, *::after { box-sizing: border-box; }\n\n.fb-ob-backdrop {\n  position: fixed;\n  inset: 0;\n  z-index: 2147483010;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  padding: 24px;\n  background: rgba(15, 23, 32, 0.55);\n  backdrop-filter: blur(3px);\n  font-family: var(--fb-font-sans);\n  color: var(--fb-color-text);\n  animation: fb-ob-fade 0.25s ease both;\n}\n\n.fb-ob-panel {\n  width: 400px;\n  max-width: 100%;\n  background: var(--fb-color-surface);\n  border-radius: 16px;\n  box-shadow: 0 30px 70px rgba(15, 40, 70, 0.4);\n  overflow: hidden;\n  animation: fb-ob-pop 0.32s cubic-bezier(0.2, 0.8, 0.3, 1) both;\n}\n\n.fb-ob-head {\n  padding: 22px 24px 0;\n  display: flex;\n  align-items: center;\n  gap: 10px;\n}\n.fb-ob-mark {\n  width: 22px;\n  height: 22px;\n  border-radius: 6px;\n  background: var(--fb-color-accent);\n  flex: none;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n}\n.fb-ob-mark::after {\n  content: \"\";\n  width: 7px;\n  height: 7px;\n  border-radius: 2px;\n  background: #fff;\n}\n.fb-ob-brand { font-size: 15px; font-weight: 600; color: var(--fb-color-ink); }\n.fb-ob-chip {\n  margin-left: auto;\n  font-family: var(--fb-font-mono);\n  font-size: 10px;\n  color: #8a97a3;\n  border: 1px solid var(--fb-color-border-soft);\n  border-radius: 6px;\n  padding: 2px 7px;\n}\n\n.fb-ob-body { padding: 16px 24px 8px; }\n.fb-ob-title {\n  font-size: 19px;\n  font-weight: 700;\n  color: var(--fb-color-ink);\n  letter-spacing: -0.01em;\n}\n.fb-ob-lede {\n  font-size: 13.5px;\n  color: var(--fb-color-muted);\n  line-height: 1.5;\n  margin: 7px 0 0;\n}\n.fb-ob-lede strong { color: var(--fb-color-text); }\n\n.fb-ob-card {\n  margin: 16px 0;\n  padding: 13px 14px;\n  background: var(--fb-color-card);\n  border: 1px solid var(--fb-color-border-soft);\n  border-radius: 10px;\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n}\n.fb-ob-row { display: flex; align-items: center; gap: 10px; }\n.fb-ob-row + .fb-ob-row {\n  border-top: 1px solid #eef2f6;\n  padding-top: 10px;\n}\n.fb-ob-rowlabel {\n  font-family: var(--fb-font-mono);\n  font-size: 10px;\n  color: var(--fb-color-faint);\n  width: 70px;\n  flex: none;\n}\n.fb-ob-site { font-size: 13px; color: var(--fb-color-text); font-weight: 500; }\n.fb-ob-tier {\n  font-size: 11px;\n  font-weight: 600;\n  color: var(--fb-color-accent);\n  background: var(--fb-color-accent-bg);\n  padding: 3px 9px;\n  border-radius: 6px;\n}\n.fb-ob-tiernote { font-size: 11.5px; color: #8a97a3; }\n\n.fb-ob-fieldlabel {\n  display: block;\n  font-family: var(--fb-font-mono);\n  font-size: 10px;\n  letter-spacing: 0.05em;\n  text-transform: uppercase;\n  color: var(--fb-color-faint);\n  margin-bottom: 6px;\n}\n.fb-ob-fields { display: flex; gap: 8px; }\n.fb-ob-input {\n  height: 38px;\n  padding: 0 12px;\n  border: 1px solid var(--fb-color-border);\n  border-radius: 9px;\n  font-family: inherit;\n  font-size: 13px;\n  color: var(--fb-color-text);\n  outline: none;\n  min-width: 0;\n}\n.fb-ob-input:focus { border-color: var(--fb-color-accent); }\n.fb-ob-name { flex: 1; }\n.fb-ob-email { flex: 1.3; font-family: var(--fb-font-mono); font-size: 12.5px; color: var(--fb-color-muted); }\n\n.fb-ob-privacy {\n  display: flex;\n  align-items: flex-start;\n  gap: 8px;\n  margin-top: 14px;\n  font-size: 11.5px;\n  color: #8a97a3;\n  line-height: 1.5;\n}\n.fb-ob-privacy svg { flex: none; margin-top: 1px; }\n.fb-ob-privacy strong { color: var(--fb-color-muted); }\n\n.fb-ob-foot { padding: 16px 24px 22px; }\n.fb-ob-confirm {\n  width: 100%;\n  height: 44px;\n  border: 0;\n  border-radius: 11px;\n  background: var(--fb-color-accent);\n  color: var(--fb-color-on-emphasis);\n  font-family: inherit;\n  font-size: 14px;\n  font-weight: 600;\n  cursor: pointer;\n}\n.fb-ob-confirm:hover { background: var(--fb-color-accent-hover); }\n.fb-ob-confirm:disabled { opacity: 0.6; cursor: default; }\n\n@keyframes fb-ob-fade { from { opacity: 0; } to { opacity: 1; } }\n@keyframes fb-ob-pop {\n  from { opacity: 0; transform: translateY(8px) scale(0.98); }\n  to { opacity: 1; transform: none; }\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .fb-ob-backdrop, .fb-ob-panel { animation: none; }\n}\n";

package/dist/onboarding.d.ts

@@ -1,44 +0,0 @@
-/**
- * The invite onboarding modal (spec §F) — the SDK-rendered redemption screen an
- * invited tester sees when a page carries an invite token. It shows the site
- * they were invited to, the **server-derived** access tier the redemption grants,
- * a private-by-default note, and a "Continue as" name / email, then confirms.
- *
- * Built to the frozen Signal Reporter prototype
- * (`docs/design/Fixback Reporter.dc.html`). It mounts lazily inside its own open
- * Shadow DOM so the host page is fully isolated, and — like the launcher and
- * overlay — never throws into the host page. It renders only data the SDK
- * truthfully holds: the site's own origin and the server-derived tier. The name /
- * email are **self-provided display fields**, never a trust signal (§F).
- */
-import type { ReporterTier } from "./boot";
-import type { ReporterDisplay } from "./invite";
-/** Marks the modal's host element in the light DOM, so it is findable and unique. */
-export declare const ONBOARDING_ATTRIBUTE = "data-fixback-onboard";
-/** Configuration for {@link createOnboardingModal}. */
-export interface OnboardingConfig {
-    /** The site the tester was invited to — its origin (`window.location.host`). */
-    readonly origin: string;
-    /** The **server-derived** tier the redemption grants (from the invite status). */
-    readonly tier: ReporterTier;
-    /** Prefill the Continue-as fields from a previously stored display identity. */
-    readonly defaults?: ReporterDisplay;
-    /** Called with the self-provided display fields when the tester confirms. */
-    readonly onConfirm: (display: ReporterDisplay) => void;
-    /** Where to mount the modal host. Defaults to `document.body`. */
-    readonly target?: HTMLElement;
-    /** The document to build in. Defaults to the target's owner document. */
-    readonly doc?: Document;
-}
-/** A mounted onboarding modal. */
-export interface OnboardingModal {
-    destroy(): void;
-    readonly host: HTMLElement;
-}
-/**
- * Render the onboarding modal into `target` (default `document.body`) and return a
- * handle to remove it. Confirming reads the name / email, fires `onConfirm` once
- * (further clicks are ignored while the caller redeems), and leaves teardown to
- * the caller so it can strip the token and mount the launcher first.
- */
-export declare function createOnboardingModal(config: OnboardingConfig): OnboardingModal;