@insitue/sdk 0.1.9 → 0.1.10

package/dist/capture-only.js

@@ -1,6 +1,6 @@
 import {
   mountCaptureOnly
-} from "./chunk-BNREKX5C.js";
+} from "./chunk-2MZGFEX6.js";
 import "./chunk-CPPXBTE5.js";
 export {
   mountCaptureOnly

package/dist/{chunk-BNREKX5C.js → chunk-2MZGFEX6.js}

@@ -351,11 +351,19 @@ function CaptureOnlyApp(props) {
         style: `display:flex;justify-content:space-between;padding:9px 16px;border-top:1px solid ${C.line};color:${C.faint};font-size:11px`
       },
       [
-        k("span", {}, "\u{1F512} Secrets scrubbed automatically"),
+        // No "Secrets scrubbed" badge — the redaction is narrow
+        // (regex on attr-names + console.log args; see
+        // packages/sdk/src/runtime.ts safeArg, capture-core/dom.ts
+        // serializeNode). Visible password VALUES, URL query
+        // params, and any text rendered in the screenshot pixels
+        // are NOT scrubbed — claiming otherwise misleads reporters
+        // about what's safe to capture. If we ever build real
+        // form-value redaction the badge can come back.
+        k("span", {}, ""),
         k(
           "span",
-          { title: `@insitue/sdk@${"0.1.9"}` },
-          `InSitue \xB7 v${"0.1.9"}`
+          { title: `@insitue/sdk@${"0.1.10"}` },
+          `InSitue \xB7 v${"0.1.10"}`
         )
       ]
     )

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   mountCaptureOnly
-} from "./chunk-BNREKX5C.js";
+} from "./chunk-2MZGFEX6.js";
 import {
   mountInSitue
 } from "./chunk-DSHJX2LF.js";
@@ -52,7 +52,7 @@ function InSitueCapture({
 }
 
 // src/index.ts
-var SDK_VERSION = "0.1.9";
+var SDK_VERSION = "0.1.10";
 export {
   InSitue,
   InSitueCapture,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@insitue/sdk",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "InSitue capture SDK — drop one snippet into your deployed app; your users point at a bug, InSitue opens a verified pull request.",
   "license": "MIT",
   "type": "module",