@getpinax/widget 1.0.0-beta.1 → 1.0.0-beta.2

package/dist/preview.d.ts

@@ -1,7 +1,8 @@
 import { type SettingsInput } from './settings';
+import type { KnownIssue } from './types';
 import { type WidgetView } from './ui/widget';
 export type { SettingsInput } from './settings';
-export type { CustomField, WidgetSettings, WidgetWording, } from './types';
+export type { CustomField, KnownIssue, WidgetSettings, WidgetWording, } from './types';
 export type { WidgetView } from './ui/widget';
 export type PreviewOptions = {
     /** Screen to show. Default 'button' (closed). */
@@ -16,6 +17,18 @@ export type PreviewOptions = {
         primary?: string | null;
         accent?: string | null;
     };
+    /**
+     * Known issues to show on the chooser ('choose'), as if they matched this
+     * page (the first 3). Without them the card never shows; with
+     * `knownIssues.enabled` off in the settings it doesn't either. "Me too"
+     * only shows the thanks.
+     */
+    known?: KnownIssue[];
+    /**
+     * Who the form's notice says reports go to ("Sent to … with your note"),
+     * e.g. the site's name or domain. Default "this website".
+     */
+    site?: string;
 };
 export type PreviewHandle = {
     /** Re-render with new settings, staying on the screen on show. */

package/dist/preview.mjs

@@ -1,54 +1,67 @@
-import { a as e, n as t, o as n, t as r } from "./chunks/widget-CkR1Ptzb.mjs";
+import { a as e, n as t, o as n, s as r, t as i } from "./chunks/widget-BpTBdX2R.mjs";
 // src/preview.ts
-var i = `
+var a = `
 :host { display: block; position: relative; overflow: hidden; }
 .preview .launcher, .preview .panel { position: absolute; }
 .preview .panel { max-height: calc(100% - 108px); }
 .preview.pos-right-edge .panel, .preview.no-button .panel { max-height: calc(100% - 48px); }
 ${t("", ".pnx.phone")}
 .pnx.preview.phone .panel { max-height: 88%; }
-`, a = "data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20width%3D%22600%22%20height%3D%22340%22%20viewBox%3D%220%200%20600%20340%22%3E%3Crect%20width%3D%22600%22%20height%3D%22340%22%20fill%3D%22%23F4EDE2%22%2F%3E%3Crect%20x%3D%220%22%20y%3D%220%22%20width%3D%22600%22%20height%3D%2244%22%20fill%3D%22%23FFFFFF%22%2F%3E%3Crect%20x%3D%2224%22%20y%3D%2216%22%20width%3D%22120%22%20height%3D%2212%22%20rx%3D%226%22%20fill%3D%22%23111827%22%2F%3E%3Crect%20x%3D%2240%22%20y%3D%2282%22%20width%3D%22300%22%20height%3D%2222%22%20rx%3D%228%22%20fill%3D%22%23111827%22%2F%3E%3Crect%20x%3D%2240%22%20y%3D%22118%22%20width%3D%22380%22%20height%3D%2212%22%20rx%3D%226%22%20fill%3D%22%23C9C2B6%22%2F%3E%3Crect%20x%3D%2240%22%20y%3D%22140%22%20width%3D%22330%22%20height%3D%2212%22%20rx%3D%226%22%20fill%3D%22%23C9C2B6%22%2F%3E%3Crect%20x%3D%2240%22%20y%3D%22186%22%20width%3D%22250%22%20height%3D%22110%22%20rx%3D%2214%22%20fill%3D%22%23FFFFFF%22%2F%3E%3Crect%20x%3D%22316%22%20y%3D%22186%22%20width%3D%22250%22%20height%3D%22110%22%20rx%3D%2214%22%20fill%3D%22%23FFFFFF%22%2F%3E%3Crect%20x%3D%2260%22%20y%3D%22250%22%20width%3D%22110%22%20height%3D%2228%22%20rx%3D%2214%22%20fill%3D%22%23FF5C35%22%2F%3E%3C%2Fsvg%3E";
-function o(t, o, s = {}) {
-	let c = t.shadowRoot ?? t.attachShadow({ mode: "open" }), l = { ...s }, u = null, d = (t, o) => {
-		u?.destroy(), c.replaceChildren(), u = new r(c, {
+`, o = "data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20width%3D%22600%22%20height%3D%22340%22%20viewBox%3D%220%200%20600%20340%22%3E%3Crect%20width%3D%22600%22%20height%3D%22340%22%20fill%3D%22%23F4EDE2%22%2F%3E%3Crect%20x%3D%220%22%20y%3D%220%22%20width%3D%22600%22%20height%3D%2244%22%20fill%3D%22%23FFFFFF%22%2F%3E%3Crect%20x%3D%2224%22%20y%3D%2216%22%20width%3D%22120%22%20height%3D%2212%22%20rx%3D%226%22%20fill%3D%22%23111827%22%2F%3E%3Crect%20x%3D%2240%22%20y%3D%2282%22%20width%3D%22300%22%20height%3D%2222%22%20rx%3D%228%22%20fill%3D%22%23111827%22%2F%3E%3Crect%20x%3D%2240%22%20y%3D%22118%22%20width%3D%22380%22%20height%3D%2212%22%20rx%3D%226%22%20fill%3D%22%23C9C2B6%22%2F%3E%3Crect%20x%3D%2240%22%20y%3D%22140%22%20width%3D%22330%22%20height%3D%2212%22%20rx%3D%226%22%20fill%3D%22%23C9C2B6%22%2F%3E%3Crect%20x%3D%2240%22%20y%3D%22186%22%20width%3D%22250%22%20height%3D%22110%22%20rx%3D%2214%22%20fill%3D%22%23FFFFFF%22%2F%3E%3Crect%20x%3D%22316%22%20y%3D%22186%22%20width%3D%22250%22%20height%3D%22110%22%20rx%3D%2214%22%20fill%3D%22%23FFFFFF%22%2F%3E%3Crect%20x%3D%2260%22%20y%3D%22250%22%20width%3D%22110%22%20height%3D%2228%22%20rx%3D%2214%22%20fill%3D%22%23FF5C35%22%2F%3E%3C%2Fsvg%3E";
+function s(t, s, c = {}) {
+	let l = t.shadowRoot ?? t.attachShadow({ mode: "open" }), u = { ...c }, d = null, f = (t, s) => {
+		d?.destroy(), l.replaceChildren();
+		let c = r(t), f = n(u.known, c.knownIssues);
+		d = new i(l, {
 			enabled: !0,
-			settings: n(t),
+			settings: c,
 			branding: e({
-				...l.branding,
-				poweredBy: l.poweredBy !== !1
+				...u.branding,
+				poweredBy: u.poweredBy !== !1
 			})
 		}, {
 			takeScreenshot: async () => ({
-				dataUrl: a,
+				dataUrl: o,
 				annotations: []
 			}),
 			markUp: async () => null,
 			submit: async () => ({ status: "sent" }),
-			user: () => void 0
+			user: () => void 0,
+			knownIssues: () => f,
+			meToo: async () => !0,
+			attachments: () => {
+				let e = c.consent?.required === !0, { console: t, network: n } = c.capture;
+				return {
+					logs: !e,
+					askLogs: e && (t || n),
+					replay: !1
+				};
+			},
+			site: () => u.site || "this website"
 		}, {
-			className: l.phone ? "preview phone" : "preview",
-			css: i
-		}), o !== "button" && u.showView(o);
+			className: u.phone ? "preview phone" : "preview",
+			css: a
+		}), s !== "button" && d.showView(s);
 	};
-	return d(o, l.view ?? "button"), {
+	return f(s, u.view ?? "button"), {
 		update(e, t) {
-			let n = u?.currentView() ?? "button";
-			t && (l = {
-				...l,
+			let n = d?.currentView() ?? "button";
+			t && (u = {
+				...u,
 				...t
-			}), d(e, t?.view ?? n);
+			}), f(e, t?.view ?? n);
 		},
 		show(e) {
-			u?.showView(e);
+			d?.showView(e);
 		},
 		view() {
-			return u?.currentView() ?? "button";
+			return d?.currentView() ?? "button";
 		},
 		destroy() {
-			u?.destroy(), u = null, c.replaceChildren();
+			d?.destroy(), d = null, l.replaceChildren();
 		}
 	};
 }
-export { o as preview };
+export { s as preview };
 
 //# sourceMappingURL=preview.mjs.map

package/dist/privacy.d.ts

@@ -1,6 +1,8 @@
 /**
- * AI-12: text patterns for personal details. Used only by the lazily loaded
- * chunks (screenshot auto-blur, replay masking), never by the initial script.
+ * AI-12: text patterns for personal details. Screenshot auto-blur and replay
+ * masking use all of it; the initial script uses only `redactPersonal` (and
+ * what it needs), for console text, breadcrumb targets and error signatures.
+ * Mirrored by `redactPersonal` in `backend/src/modules/widget/widget.sanitise.ts`.
  */
 export type Span = {
     start: number;

package/dist/queue.d.ts

@@ -1,6 +1,7 @@
 import { type Fetch } from './api';
 import { type ReportBody } from './report';
-/** What may be kept in localStorage: the report without the private extras. */
+export declare const MAX_AGE_MS: number;
+/** What may be kept in localStorage: the report without the private parts. */
 export declare function queuedCopy(body: ReportBody): ReportBody;
 /** Saves a slimmed copy of a report for later (see above). */
 export declare function enqueue(key: string, body: ReportBody): boolean;

package/dist/replay/recorder.d.ts

@@ -10,6 +10,16 @@ export type Recorder = {
     exportReplay(maxChars: number): Promise<string | null>;
     stop(): void;
 };
+/**
+ * `'all'` (the default, CNIL's "mask everything"): every text is starred out
+ * and images, pictures, videos, canvases and frames are left out (the replay
+ * shows an empty box of the same size). `'inputs'`: form fields, editable
+ * text, emails and phone numbers only.
+ */
+export type ReplayMask = 'all' | 'inputs';
+/** Left out entirely with `mask: 'all'`; rrweb records only their size. */
+export declare const MEDIA = "img,picture,video,canvas,iframe";
 export declare function startRecorder(options?: {
     exclude?: string;
+    mask?: ReplayMask;
 }): Recorder;

package/dist/replay/sanitize.d.ts

@@ -2,12 +2,18 @@ import { type ReplayEvent } from './buffer';
 /** A URL without its fragment or secret query values, and no email or phone. */
 export declare function cleanUrl(value: string, base?: string): string;
 type Attrs = Record<string, unknown>;
-/** A cleaned copy of a node's (or a mutation's) attributes. */
-export declare function cleanAttributes(attrs: Attrs, tagName?: string, base?: string): Attrs;
+/**
+ * A cleaned copy of a node's (or a mutation's) attributes. `maskText` also
+ * stars out the text attributes above.
+ */
+export declare function cleanAttributes(attrs: Attrs, tagName?: string, base?: string, maskText?: boolean): Attrs;
 /**
  * The events as JSON, with every attribute cleaned: full snapshot nodes
  * (`{ tagName, attributes }`), mutation adds (same shape) and attribute
  * changes (`{ id, attributes }`). Meta events get a cleaned `href`.
+ * `maskText` (replay mask 'all') stars out text attributes as well.
  */
-export declare function serializeReplay(events: readonly ReplayEvent[], base?: string | undefined): string;
+export declare function serializeReplay(events: readonly ReplayEvent[], base?: string | undefined, options?: {
+    maskText?: boolean;
+}): string;
 export {};

package/dist/report.d.ts

@@ -2,7 +2,8 @@ import type { Breadcrumb } from './capture/breadcrumbs';
 import type { ConsoleEntry } from './capture/console';
 import type { Environment } from './capture/env';
 import type { NetworkEntry } from './capture/network';
-import type { Annotation, FieldAnswer, PinaxUser, ReportType } from './types';
+import type { A11yScan, Annotation, Barrier, FieldAnswer, PinaxUser, ReportType } from './types';
+export declare const BARRIERS: Barrier[];
 /**
  * Builds the POST /reports body. Mirrors the limits in
  * backend/src/modules/widget/widget.validator.ts so a report is never rejected
@@ -44,9 +45,21 @@ export type ReportInput = {
     };
     /** W-10 */
     fields?: FieldAnswer[];
+    /** W-19, W-20: accessibility reports only. */
+    barrier?: Barrier;
+    a11yScan?: A11yScan | null;
     /** P-04: honeypot value and time to fill in the form. */
     hp?: string;
     elapsedMs?: number;
+    /** Visitor consent, only on sites that wait for it. */
+    consent?: ReportConsent;
+    /** The visitor ticked "Include technical details" (consent not given). */
+    includeLogs?: boolean;
+};
+/** What the visitor agreed to through the site's banner. */
+export type ReportConsent = {
+    diagnostics: boolean;
+    replay: boolean;
 };
 export type ReportContext = {
     page: {
@@ -79,9 +92,13 @@ export type ReportBody = {
         answer: string;
     };
     fields?: FieldAnswer[];
+    barrier?: Barrier;
+    a11yScan?: A11yScan;
     replay?: string;
     hp?: string;
     elapsedMs?: number;
+    consent?: ReportConsent;
+    includeLogs?: true;
 };
 /** Decoded byte length of a base64 data URL. */
 export declare function dataUrlBytes(dataUrl: string): number;
@@ -92,11 +109,13 @@ export declare function hasContent(input: {
     message: string;
     rating?: number;
     screenshot?: string;
+    barrier?: Barrier;
 }): boolean;
 /**
  * Page URL as the backend accepts it: absolute, at most 2000 chars, with no
  * fragment (OAuth implicit flow, Supabase and Firebase put tokens in
- * `#access_token=…`) and secret-looking query values masked (C-06).
+ * `#access_token=…`) and query values hidden (`…`) except the harmless
+ * `PAGE_PARAM` ones (`utm_*`, `page`, `lang`, `ref`, `variant`, `tab`, `sort`).
  */
 export declare function pageUrl(href: string): string;
 export declare function buildReport(input: ReportInput, ctx: ReportContext): ReportBody;

package/dist/settings.d.ts

@@ -1,4 +1,4 @@
-import type { AiConfig, Branding, CustomField, WidgetSettings, WidgetWording } from './types';
+import type { AiConfig, Branding, CustomField, KnownIssue, WidgetSettings, WidgetWording } from './types';
 /** Same defaults as `backend/src/modules/widget/widget-settings.ts`. */
 export declare const DEFAULT_SETTINGS: WidgetSettings;
 /** W-10: the backend's limits (`FIELD_LIMITS` in widget-settings.ts). */
@@ -10,10 +10,12 @@ export declare const FIELD_LIMITS: {
     readonly text: 200;
 };
 /** Settings with any field (or wording/type entry) left out. */
-export type SettingsInput = Partial<Omit<WidgetSettings, 'types' | 'wording' | 'capture'> & {
+export type SettingsInput = Partial<Omit<WidgetSettings, 'types' | 'wording' | 'capture' | 'knownIssues' | 'consent'> & {
     types: Partial<WidgetSettings['types']>;
     wording: Partial<WidgetWording>;
     capture: Partial<WidgetSettings['capture']>;
+    knownIssues: Partial<NonNullable<WidgetSettings['knownIssues']>>;
+    consent: Partial<NonNullable<WidgetSettings['consent']>>;
 }>;
 /** W-10: well-formed fields only, so a half-made field in the dashboard can't break the form. */
 export declare function resolveFields(input: unknown): CustomField[];
@@ -22,6 +24,8 @@ export declare function resolveFields(input: unknown): CustomField[];
  * (or a half-edited dashboard form, in the preview) never breaks the widget.
  */
 export declare function resolveSettings(input?: SettingsInput | null): WidgetSettings;
+/** The privacy policy link: an https address, or '' (never javascript: and the like). */
+export declare function httpsUrl(v: unknown): string;
 /** W-17: only plain hex colours and an http(s) logo address get through. */
 export declare function resolveBranding(input: unknown): Branding;
 /**
@@ -29,3 +33,8 @@ export declare function resolveBranding(input: unknown): Branding;
  * a site without Pinax AI). `samplingRate` (B-17) caps both sample rates.
  */
 export declare function resolveAi(ai: unknown, samplingRate?: unknown): AiConfig;
+/**
+ * Known issues from the config: none when missing (an older API or CDN
+ * copy) or switched off, and only well-formed entries otherwise.
+ */
+export declare function resolveKnown(input: unknown, settings?: WidgetSettings['knownIssues']): KnownIssue[];

package/dist/types.d.ts

@@ -11,13 +11,43 @@ export type PinaxOptions = {
      * come from the API.
      */
     cdnUrl?: string;
+    /**
+     * Visitor consent: `'wait'` holds replay, technical logs, error counts
+     * and the page-view count until `consent()` says yes; `'none'` never
+     * waits. Without it the site's setting (`settings.consent.required`)
+     * decides. `data-consent` on the script tag.
+     */
+    consent?: 'wait' | 'none';
+};
+/**
+ * Visitor consent, from the site's cookie banner: `true` or `false` for
+ * everything, or only the parts given. `diagnostics` covers technical logs
+ * on reports, fix checks, error counts (with the basket), the Segment user id
+ * and the page-view count; `replay` the session recorder.
+ */
+export type PinaxConsent = boolean | {
+    diagnostics?: boolean;
+    replay?: boolean;
 };
-/** Signed-in visitor details attached to reports (C-09). */
+/**
+ * Signed-in visitor details (C-09). `id` and `name` go with reports; `email`
+ * only fills in the form's email box (when the site allows it) and is sent
+ * only if the visitor leaves it there.
+ */
 export type PinaxUser = {
     id?: string;
     name?: string;
     email?: string;
 };
+/**
+ * AI-21: what the visitor has in their basket right now, in major units
+ * (19.99, not 1999) and an ISO 4217 code. Sent only with a sampled
+ * sighting of an open report's error (P-17), never on its own.
+ */
+export type PinaxBasket = {
+    value: number;
+    currency: string;
+};
 export type WidgetPosition = 'bottom-right' | 'bottom-left' | 'right-edge';
 /** S-06: custom wording. An empty string means "use the default wording". */
 export type WidgetWording = {
@@ -25,6 +55,8 @@ export type WidgetWording = {
     problemTitle: string;
     ideaTitle: string;
     generalTitle: string;
+    /** W-19 */
+    accessibilityTitle: string;
     messagePlaceholder: string;
     confirmation: string;
 };
@@ -57,11 +89,12 @@ export type WidgetSettings = {
     color: string;
     text: string;
     position: WidgetPosition;
-    /** S-02 */
+    /** S-02; W-19 `accessibility` is off unless the owner switches it on. */
     types: {
         problem: boolean;
         idea: boolean;
         general: boolean;
+        accessibility: boolean;
     };
     rating: boolean;
     /** S-04: path patterns where the button is hidden; `*` matches anything. */
@@ -81,6 +114,30 @@ export type WidgetSettings = {
         console: boolean;
         network: boolean;
     };
+    /**
+     * Known issues: show the "We know about this" card, and offer "Email me
+     * when it's fixed". Missing (older API) means both on, as the backend's
+     * defaults; with no `known` list in the config there's nothing to show.
+     */
+    knownIssues?: {
+        enabled: boolean;
+        notify: boolean;
+    };
+    /**
+     * Visitor consent: the site has a cookie banner, so replay, technical
+     * logs, error counts and the page-view count wait for `Pinax.consent()`.
+     * Missing (older API) means not required.
+     */
+    consent?: {
+        required: boolean;
+    };
+    /** The site's privacy policy (https), linked under the form; `''` = none. */
+    privacyUrl?: string;
+    /**
+     * Whether `identify()`'s email fills in the form's email box (the visitor
+     * can clear it). Missing (older API) means yes, as before.
+     */
+    identifyPrefill?: boolean;
 };
 /**
  * W-17: "Powered by Pinax" (Starter) and, with client branding (Agency),
@@ -98,6 +155,11 @@ export type FixCheck = {
     path: string;
     signature: string;
 };
+/** AI-20: an open report whose error the widget counts on any page. */
+export type ErrorWatch = {
+    id: string;
+    signature: string;
+};
 /**
  * Pinax AI switches for the browser (`widgetAiConfig` in
  * `backend/src/modules/widget/widget.service.ts`).
@@ -110,10 +172,30 @@ export type AiConfig = {
     /** AI-15 / P-13: keep a rolling 30-second replay (Pro and Agency). */
     replay: boolean;
     replaySampleRate: number;
+    /**
+     * What the recorder hides: `'all'` (the default) every text and every
+     * image, video, canvas and frame; `'inputs'` form fields, editable text,
+     * emails and phone numbers.
+     */
+    replayMask: 'all' | 'inputs';
     /** AI-17 / P-14 */
     fixChecks: FixCheck[];
+    /** AI-20 / P-17: open reports' errors, counted when seen; same sample rate as fix checks. */
+    watches: ErrorWatch[];
     fixCheckSampleRate: number;
 };
+/**
+ * An open report the team chose to show to visitors, with a public title
+ * they wrote (never the visitor's own words).
+ */
+export type KnownIssue = {
+    id: string;
+    title: string;
+    /** Pages it was reported on; `/a` and `/a/` are the same page. */
+    paths: string[];
+    /** Its error signature (`errorSignature`), when it has one. */
+    signature: string | null;
+};
 /** `data` of GET /v1/widget/:key/config. */
 export type WidgetConfig = {
     enabled: boolean;
@@ -124,8 +206,36 @@ export type WidgetConfig = {
     /** B-17: over the limit, replay and fix-check sampling is cut (to 0.01). */
     samplingRate?: number | null;
     ai?: AiConfig;
+    /** Known issues for this site (up to 20). Missing (older API) means none. */
+    known?: KnownIssue[];
+};
+export type ReportType = 'PROBLEM' | 'IDEA' | 'GENERAL' | 'ACCESSIBILITY';
+/** W-19: what kind of barrier the visitor met (optional). */
+export type Barrier = 'see' | 'keyboard' | 'screen-reader' | 'media' | 'other';
+/** W-20: one failed axe-core rule. */
+export type A11yIssue = {
+    rule: string;
+    impact: 'minor' | 'moderate' | 'serious' | 'critical' | null;
+    help: string;
+    helpUrl: string;
+    /** WCAG success criteria, e.g. "1.4.3". */
+    wcag: string[];
+    /** How many elements fail it; `nodes` holds the first few. */
+    count: number;
+    nodes: {
+        target: string;
+        html: string;
+        summary: string;
+    }[];
+};
+/** W-20: the automatic scan sent with an accessibility report. */
+export type A11yScan = {
+    engine: string;
+    durationMs: number;
+    violations: A11yIssue[];
+    /** Rules that needed a person to check (not failures). */
+    incomplete: number;
 };
-export type ReportType = 'PROBLEM' | 'IDEA' | 'GENERAL';
 /** One drawn mark, coordinates as fractions (0 to 1) of the sent image. */
 export type Annotation = {
     type: 'box' | 'arrow' | 'text' | 'blur';

package/dist/ui/widget.d.ts

@@ -1,4 +1,4 @@
-import type { Annotation, FieldAnswer, PinaxUser, ReportType, WidgetConfig } from '../types';
+import type { Annotation, Barrier, FieldAnswer, KnownIssue, PinaxUser, ReportType, WidgetConfig } from '../types';
 export type Shot = {
     /** The flattened image that will be sent. */
     dataUrl: string;
@@ -21,10 +21,30 @@ export type SubmitInput = {
     };
     /** W-10: answers to the site's custom fields. */
     fields?: FieldAnswer[];
+    /** W-19: the kind of accessibility barrier, when the visitor chose one. */
+    barrier?: Barrier;
     /** P-04: the hidden honeypot field (people leave it empty). */
     hp?: string;
     /** P-04: milliseconds from opening the panel to sending. */
     elapsedMs?: number;
+    /** Visitor consent: the visitor ticked "Include technical details". */
+    includeLogs?: boolean;
+    /** What the notice above Send said would go; nothing else is attached. */
+    listed?: {
+        logs: boolean;
+        replay: boolean;
+    };
+};
+/**
+ * Visitor consent: what goes with a report besides the note, for the
+ * notice above Send. `logs`: technical logs go as things stand; `askLogs`:
+ * they go only if the visitor ticks the box (shown then); `replay`: the
+ * last 30 seconds go.
+ */
+export type Attachments = {
+    logs: boolean;
+    askLogs: boolean;
+    replay: boolean;
 };
 /** AI-10: only short notes on problems and ideas get a follow-up question. */
 export declare const FOLLOW_UP_MAX_NOTE = 140;
@@ -51,9 +71,20 @@ export type UIHandlers = {
         type: ReportType;
         message: string;
     }): Promise<string | null>;
+    /** Known issues that match this page view, asked each time the panel opens. */
+    knownIssues?(): KnownIssue[];
+    /** Known issues: "Me too", with an email when given. False on any error. */
+    meToo?(id: string, email?: string): Promise<boolean>;
+    /**
+     * Visitor consent: what a report would carry now (see `Attachments`).
+     * Without it: technical logs, no box, no recording.
+     */
+    attachments?(): Attachments;
+    /** Who the report goes to, in the notice. Default: this page's host name. */
+    site?(): string;
 };
 /** A screen of the panel, or 'button' for the closed widget. */
-export type WidgetView = 'button' | 'choose' | 'problem' | 'idea' | 'general' | 'done';
+export type WidgetView = 'button' | 'choose' | 'problem' | 'idea' | 'general' | 'accessibility' | 'done';
 /**
  * The floating button and the feedback panel (W-01, W-02, W-07 to W-11,
  * W-15). Everything renders inside the shadow root.
@@ -71,7 +102,11 @@ export declare class WidgetUI {
     private shot;
     private message;
     private email;
+    /** The visitor typed in, changed or cleared an email box: never refill it. */
+    private emailEdited;
     private rating;
+    /** W-19 */
+    private barrier;
     /** W-10: answers by field id. */
     private answers;
     /** W-17: the client's colour on Send buttons (Agency). */
@@ -86,6 +121,16 @@ export declare class WidgetUI {
     private pathHidden;
     /** Where focus goes back to on close when there's no button to return to. */
     private returnFocus;
+    /** Known issues matched when the panel last opened, and those the visitor moved past. */
+    private known;
+    private knownHidden;
+    private meToo;
+    /** Visitor consent: the "Include technical details" box, unticked to start. */
+    private includeLogs;
+    /** The notice above Send on show, and what it said would go. */
+    private privacy;
+    private noticeText;
+    private shown;
     constructor(root: ShadowRoot, config: WidgetConfig, handlers: UIHandlers, 
     /** Extra classes on the wrapper and extra CSS (the dashboard preview). */
     extra?: {
@@ -136,9 +181,44 @@ export declare class WidgetUI {
     private logo;
     private render;
     private renderChoose;
+    /** Known issues: the matches on show, without those the visitor moved past. */
+    private knownShown;
+    /** Asks which known issues match now; with any, the panel starts on the card. */
+    private offerKnown;
+    /**
+     * Known issues: "We know about this", each issue's public title and a
+     * Me too button; after it, thanks and (when the site allows it) "Email me
+     * when it's fixed". "Report something else" leaves the card.
+     */
+    private renderKnown;
+    /** Me too, or (with `emailEl`) the email to hear when it's fixed. */
+    private sendMeToo;
     private renderShot;
     private renderStars;
     private renderForm;
+    /** The optional email, the honeypot, the error line and Send. */
+    private renderEmailAndSend;
+    /** Visitor consent: what a report would carry now. */
+    private attachments;
+    /**
+     * Above Send: the "Include technical details" box (only while the page
+     * waits for consent and the visitor hasn't given it), then what goes
+     * with the note, and the site's privacy policy.
+     */
+    private renderPrivacy;
+    /** "Sent to … with your note: …", listing only what will go. */
+    private updateNotice;
+    /**
+     * Consent changed, or the recorder started: the notice (and the box)
+     * above Send follow, in place, so typing and focus aren't disturbed.
+     */
+    refresh(): void;
+    /**
+     * W-19: a short form that works well with a screen reader and the
+     * keyboard alone: native radio buttons, real labels, no screenshot unless
+     * the visitor adds one, and a note saying who reads it.
+     */
+    private renderAccessibility;
     /**
      * P-04: a field people never see or reach (off-screen, out of the tab
      * order and hidden from screen readers). Form-filling bots fill it in.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getpinax/widget",
-  "version": "1.0.0-beta.1",
+  "version": "1.0.0-beta.2",
   "type": "module",
   "description": "Pinax website feedback widget: a feedback button with screenshots, markup and page context",
   "license": "MIT",
@@ -42,7 +42,7 @@
   ],
   "scripts": {
     "dev": "vite",
-    "build": "tsc --noEmit && vite build && vite build --mode editor && vite build --mode recorder && vite build --mode embed && tsc -p tsconfig.build.json && node scripts/check-size.mjs",
+    "build": "tsc --noEmit && vite build && vite build --mode editor && vite build --mode recorder && vite build --mode axe && vite build --mode embed && tsc -p tsconfig.build.json && node scripts/check-size.mjs",
     "test": "vitest run",
     "typecheck": "tsc --noEmit",
     "check": "biome check ./src ./cdn",
@@ -50,12 +50,12 @@
     "size": "node scripts/check-size.mjs",
     "playground": "yarn build && node scripts/serve-playground.mjs",
     "prepublishOnly": "VITE_PINAX_API=https://api.getpinax.com VITE_PINAX_CDN=https://cdn.getpinax.com yarn build && yarn test",
-    "cdn:deploy": "./cdn/deploy.sh"
+    "cdn:deploy": "./cdn/deploy.sh",
+    "release": "bash scripts/release.sh"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.6.5",
     "@types/node": "^22",
-    "axe-core": "^4.10.0",
     "jsdom": "^30.1.3",
     "typescript": "^7.0.2",
     "vite": "^8.3.5",
@@ -63,6 +63,7 @@
   },
   "dependencies": {
     "@rrweb/record": "2.1.7",
+    "axe-core": "^4.10.0",
     "modern-screenshot": "^4.7.0"
   },
   "resolutions": {

package/dist/chunks/text-8QYEyRYs.mjs

@@ -1,18 +0,0 @@
-// src/capture/text.ts
-function e(e, t) {
-	return e.length > t ? `${e.slice(0, t - 1)}…` : e;
-}
-var t = /^(access_?token|token|id_token|refresh_token|auth|authorization|api_?key|key|secret|password|passwd|pwd|session|sessionid|sid|code|signature|sig)$/i;
-function n(e, n) {
-	try {
-		let r = new URL(e, n);
-		r.hash = "", r.username = "", r.password = "";
-		for (let e of [...r.searchParams.keys()]) t.test(e) && r.searchParams.set(e, "[hidden]");
-		return r.toString();
-	} catch {
-		return String(e);
-	}
-}
-export { n, e as t };
-
-//# sourceMappingURL=text-8QYEyRYs.mjs.map