@lightworkai.official/debug-capture 0.8.1 → 0.8.2

package/README.md

@@ -142,6 +142,11 @@ takes ten seconds. A tab opened after a countdown can be refused — the click's
 activation may have expired — so the dialog offers a real link in that case,
 which is a fresh gesture and cannot be blocked.
 
+The tab is opened without the `noopener` window feature and its `opener` is
+nulled afterwards instead. `window.open(…, "noopener")` returns `null` on
+*success*, by specification, so asking for it destroys the only signal that says
+whether the tab opened at all.
+
 **It announces itself first.** Leaving for another origin without warning,
 mid-task, reads as a bug — so a small dialog says where they are going, that
 they will be signed in when they arrive, and counts down with a way to go now or

package/dist/index.mjs

@@ -171,15 +171,21 @@ p { margin: 0; font-size: 13px; line-height: 1.6; color: #475569; }
 .host { margin-top: 8px; font-size: 12px; color: #94a3b8; word-break: break-all; }
 
 .actions { display: flex; gap: 8px; margin-top: 20px; }
-button {
-  flex: 1; padding: 9px 12px; border-radius: 9px; font: inherit; font-size: 14px;
-  cursor: pointer; transition: background 120ms ease, border-color 120ms ease;
+/* The anchor too: when a blocked tab turns the primary action into a link, it
+   has to be the same object it was a moment ago. Styling only the button left it
+   with the dark fill and none of the shape: an underlined black smear. */
+.actions button, .actions a {
+  flex: 1; box-sizing: border-box;
+  display: inline-flex; align-items: center; justify-content: center;
+  padding: 9px 12px; border-radius: 9px; font: inherit; font-size: 14px;
+  text-decoration: none; cursor: pointer;
+  transition: background 120ms ease, border-color 120ms ease;
 }
 .go { border: none; background: #0f172a; color: #fff; font-weight: 600; }
 .go:hover { background: #1e293b; }
 .cancel { border: 1px solid #e2e8f0; background: #fff; color: #334155; }
 .cancel:hover { background: #f8fafc; }
-button:focus-visible { outline: 2px solid #0ea5e9; outline-offset: 2px; }
+.actions button:focus-visible, .actions a:focus-visible { outline: 2px solid #0ea5e9; outline-offset: 2px; }
 
 .error h2 { color: #b91c1c; }
 
@@ -208,4 +214,4 @@ button:focus-visible { outline: 2px solid #0ea5e9; outline-offset: 2px; }
         <button type="button" class="cancel"></button>
         <button type="button" class="go"></button>
       </div>
-    </div>`,z.append(K);let G=(D)=>K.querySelector(D),H=G(".card"),U=G(".bar"),C=G(".count"),w=G("h2"),P=G(".body"),O=G(".host"),N=G(".go"),S=G(".cancel");w.textContent=j.handoffTitle,P.textContent=j.handoffBody;try{O.textContent=new URL(R().host).host}catch{O.textContent=""}N.textContent=j.handoffGo,S.textContent=j.cancel,H.style.setProperty("--secs",`${J}s`),C.textContent=String(J),document.body.append(Q),requestAnimationFrame(()=>K.setAttribute("data-open","1"));let _=document.activeElement;return N.focus({preventScroll:!0}),new Promise((D)=>{let q=!1,g=null,e=!1,u=Date.now()+J*1000,E=window.setInterval(()=>{let B=Math.ceil((u-Date.now())/1000);if(C.textContent=String(Math.max(0,B)),Date.now()>=u)L()},100);function p(B){if(q)return;if(q=!0,window.clearInterval(E),document.removeEventListener("keydown",m,!0),K.removeAttribute("data-open"),window.setTimeout(()=>Q.remove(),200),!B)_?.focus?.({preventScroll:!0});D()}function H0(B){window.clearInterval(E),U.classList.remove("spinner"),U.style.animation="none",C.textContent="",w.textContent=j.handoffBlocked,P.textContent=j.handoffBody;let k=document.createElement("a");k.className="go",k.href=B,k.target="_blank",k.rel="noopener noreferrer",k.textContent=j.handoffOpen,k.addEventListener("click",()=>p(!0)),N.replaceWith(k),k.focus({preventScroll:!0})}function L(){if(q||e)return;if(g)return $.go(g)?p(!0):H0(g);window.clearInterval(E),C.textContent="",U.classList.add("spinner"),w.textContent=j.handoffPreparing}function m(B){if(B.key==="Escape")B.stopPropagation(),p(!1)}document.addEventListener("keydown",m,!0),N.addEventListener("click",L),S.addEventListener("click",()=>p(!1)),K.addEventListener("click",(B)=>{if(B.target===K)p(!1)}),$.prepare().then((B)=>{if(g=B,!q&&Date.now()>=u)L()},()=>{e=!0,window.clearInterval(E),H.classList.add("error"),U.classList.remove("spinner"),U.style.animation="none",C.textContent="",w.textContent=j.handoffFailed,P.textContent=j.handoffBody,N.remove(),S.textContent=j.close})})}var s4="/sso";function e1($,j,J){let Q=new URL(s4,$.endsWith("/")?$:`${$}/`);return Q.searchParams.set("realm",j),Q.searchParams.set("token",J),Q.toString()}class F0 extends Error{constructor($="No identity provider is configured, or nobody is signed in"){super($);this.name="NoIdentityError"}}async function a1(){let $=R();if(!$.identity)throw new F0;let j=await $.identity();if(!j)throw new F0;return e1($.host,$.realmKey,j)}function t1($,j){if(j==="_self")return window.location.assign($),!0;return window.open($,"_blank","noopener,noreferrer")!==null}async function n4($={}){if($.announce===!1){t1(await a1(),$.target);return}await n1({seconds:$.seconds,prepare:a1,go:(j)=>t1(j,$.target)})}export{g0 as trimToBudget,g1 as toCurl,e1 as supportPortalUrl,p0 as submitBundle,n as showToast,p4 as setErroredQueriesSource,d4 as requestPath,b as reporterStrings,o as redactUrl,c as redactLabel,i as redactHeaders,l as redactBody,n4 as openSupportPortal,R0 as onLaunch,_0 as onCrash,O0 as launch,i4 as isQuietStep,r1 as isFailedRequest,U0 as isConfigured,b4 as installDebugCapture,D4 as hasCause,A0 as getNetworkLog,S0 as getConsoleLog,R as getConfig,B0 as getActionTrail,o4 as formatDuration,x0 as errorSignature,L0 as emitCrash,u0 as defineReporterElement,y0 as createAnnotator,c4 as correlateActionTrail,Q2 as configureDebugCapture,E0 as captureScreen,P4 as bundleToMarkdown,w4 as bundleFileName,k0 as buildBundle,x as appInfo,D0 as actionCountSuffix,t as REPORTER_TAG,d as REDACTED,F0 as NoIdentityError,h0 as BUNDLE_BUDGET_BYTES};
+    </div>`,z.append(K);let G=(D)=>K.querySelector(D),H=G(".card"),U=G(".bar"),C=G(".count"),w=G("h2"),P=G(".body"),O=G(".host"),N=G(".go"),S=G(".cancel");w.textContent=j.handoffTitle,P.textContent=j.handoffBody;try{O.textContent=new URL(R().host).host}catch{O.textContent=""}N.textContent=j.handoffGo,S.textContent=j.cancel,H.style.setProperty("--secs",`${J}s`),C.textContent=String(J),document.body.append(Q),requestAnimationFrame(()=>K.setAttribute("data-open","1"));let _=document.activeElement;return N.focus({preventScroll:!0}),new Promise((D)=>{let q=!1,g=null,e=!1,u=Date.now()+J*1000,E=window.setInterval(()=>{let B=Math.ceil((u-Date.now())/1000);if(C.textContent=String(Math.max(0,B)),Date.now()>=u)L()},100);function p(B){if(q)return;if(q=!0,window.clearInterval(E),document.removeEventListener("keydown",m,!0),K.removeAttribute("data-open"),window.setTimeout(()=>Q.remove(),200),!B)_?.focus?.({preventScroll:!0});D()}function H0(B){window.clearInterval(E),U.classList.remove("spinner"),U.style.animation="none",C.textContent="",w.textContent=j.handoffBlocked,P.textContent=j.handoffBody;let k=document.createElement("a");k.className="go",k.href=B,k.target="_blank",k.rel="noopener noreferrer",k.textContent=j.handoffOpen,k.addEventListener("click",()=>p(!0)),N.replaceWith(k),k.focus({preventScroll:!0})}function L(){if(q||e)return;if(g)return $.go(g)?p(!0):H0(g);window.clearInterval(E),C.textContent="",U.classList.add("spinner"),w.textContent=j.handoffPreparing}function m(B){if(B.key==="Escape")B.stopPropagation(),p(!1)}document.addEventListener("keydown",m,!0),N.addEventListener("click",L),S.addEventListener("click",()=>p(!1)),K.addEventListener("click",(B)=>{if(B.target===K)p(!1)}),$.prepare().then((B)=>{if(g=B,!q&&Date.now()>=u)L()},()=>{e=!0,window.clearInterval(E),H.classList.add("error"),U.classList.remove("spinner"),U.style.animation="none",C.textContent="",w.textContent=j.handoffFailed,P.textContent=j.handoffBody,N.remove(),S.textContent=j.close})})}var s4="/sso";function e1($,j,J){let Q=new URL(s4,$.endsWith("/")?$:`${$}/`);return Q.searchParams.set("realm",j),Q.searchParams.set("token",J),Q.toString()}class F0 extends Error{constructor($="No identity provider is configured, or nobody is signed in"){super($);this.name="NoIdentityError"}}async function a1(){let $=R();if(!$.identity)throw new F0;let j=await $.identity();if(!j)throw new F0;return e1($.host,$.realmKey,j)}function t1($,j){if(j==="_self")return window.location.assign($),!0;let J=window.open($,"_blank");if(!J)return!1;try{J.opener=null}catch{}return!0}async function n4($={}){if($.announce===!1){t1(await a1(),$.target);return}await n1({seconds:$.seconds,prepare:a1,go:(j)=>t1(j,$.target)})}export{g0 as trimToBudget,g1 as toCurl,e1 as supportPortalUrl,p0 as submitBundle,n as showToast,p4 as setErroredQueriesSource,d4 as requestPath,b as reporterStrings,o as redactUrl,c as redactLabel,i as redactHeaders,l as redactBody,n4 as openSupportPortal,R0 as onLaunch,_0 as onCrash,O0 as launch,i4 as isQuietStep,r1 as isFailedRequest,U0 as isConfigured,b4 as installDebugCapture,D4 as hasCause,A0 as getNetworkLog,S0 as getConsoleLog,R as getConfig,B0 as getActionTrail,o4 as formatDuration,x0 as errorSignature,L0 as emitCrash,u0 as defineReporterElement,y0 as createAnnotator,c4 as correlateActionTrail,Q2 as configureDebugCapture,E0 as captureScreen,P4 as bundleToMarkdown,w4 as bundleFileName,k0 as buildBundle,x as appInfo,D0 as actionCountSuffix,t as REPORTER_TAG,d as REDACTED,F0 as NoIdentityError,h0 as BUNDLE_BUDGET_BYTES};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lightworkai.official/debug-capture",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "description": "Report-a-problem widget: rolling network/console/action capture, annotated screenshot, and submission to a Lightwork Support host",
   "type": "module",
   "module": "./dist/index.mjs",

package/src/portal.ts

@@ -72,10 +72,29 @@ function navigate(url: string, target: OpenPortalOptions["target"]): boolean {
     window.location.assign(url);
     return true;
   }
-  // noopener: the new tab gets no handle back to the host page. noreferrer:
-  // and no Referer either, because the URL it is being sent to has a
-  // credential in it.
-  return window.open(url, "_blank", "noopener,noreferrer") !== null;
+
+  /*
+   * Opened WITHOUT the `noopener` feature, then severed by hand.
+   *
+   * `window.open(…, "noopener")` returns null on success — by specification,
+   * because handing back a reference is the very thing noopener exists to
+   * prevent. So "did it open?" and "give it no opener" cannot both be answered
+   * by the same call: asking for one destroys the answer to the other. Reading
+   * that null as "blocked" made every successful hand-off report a popup
+   * blocker while the tab it had just opened sat there.
+   *
+   * Nulling `opener` afterwards is the long-standing equivalent. In a try
+   * because a cross-origin window may refuse the assignment — and if it does,
+   * the tab is open, which is what the return value is about.
+   */
+  const opened = window.open(url, "_blank");
+  if (!opened) return false;
+  try {
+    opened.opener = null;
+  } catch {
+    /* the tab is open either way */
+  }
+  return true;
 }
 
 /**

package/src/ui/handoff.ts

@@ -74,15 +74,21 @@ p { margin: 0; font-size: 13px; line-height: 1.6; color: #475569; }
 .host { margin-top: 8px; font-size: 12px; color: #94a3b8; word-break: break-all; }
 
 .actions { display: flex; gap: 8px; margin-top: 20px; }
-button {
-  flex: 1; padding: 9px 12px; border-radius: 9px; font: inherit; font-size: 14px;
-  cursor: pointer; transition: background 120ms ease, border-color 120ms ease;
+/* The anchor too: when a blocked tab turns the primary action into a link, it
+   has to be the same object it was a moment ago. Styling only the button left it
+   with the dark fill and none of the shape: an underlined black smear. */
+.actions button, .actions a {
+  flex: 1; box-sizing: border-box;
+  display: inline-flex; align-items: center; justify-content: center;
+  padding: 9px 12px; border-radius: 9px; font: inherit; font-size: 14px;
+  text-decoration: none; cursor: pointer;
+  transition: background 120ms ease, border-color 120ms ease;
 }
 .go { border: none; background: #0f172a; color: #fff; font-weight: 600; }
 .go:hover { background: #1e293b; }
 .cancel { border: 1px solid #e2e8f0; background: #fff; color: #334155; }
 .cancel:hover { background: #f8fafc; }
-button:focus-visible { outline: 2px solid #0ea5e9; outline-offset: 2px; }
+.actions button:focus-visible, .actions a:focus-visible { outline: 2px solid #0ea5e9; outline-offset: 2px; }
 
 .error h2 { color: #b91c1c; }