@limekex/bugreport-widget-sdk 0.1.0

package/README.md

@@ -0,0 +1,47 @@
+# @bugreport/widget-sdk
+
+Reusable browser SDK for embedding the Stage Bug Reporter widget into staging/UAT applications.
+
+## Usage
+
+```ts
+import { initBugReporter } from '@bugreport/widget-sdk';
+
+initBugReporter({
+  apiBaseUrl: 'https://bugreport.betait.no',
+  environment: 'staging',
+  enabled: true,
+  appVersion: '1.2.3',
+  commitSha: process.env.VITE_COMMIT_SHA,
+  currentUser: { id: 'tester-001', email: 'tester@example.com', role: 'qa' },
+});
+```
+
+This injects a floating **🐛 Report bug** button into the page. Clicking it opens the bug report modal (placeholder).
+
+## Config
+
+See `BugReporterConfig` in `@bugreport/shared-types` for full config options.
+
+## React example
+
+```bash
+cd examples/react-example
+pnpm dev
+```
+
+## Scripts
+
+```bash
+pnpm build        # compile TypeScript
+pnpm typecheck    # type-check without emit
+pnpm dev          # watch mode
+```
+
+## Architecture notes
+
+- The `init.ts` entry point is framework-agnostic.
+- The floating button is a plain DOM element — no React required for the trigger.
+- The modal (`modal.ts`) is a **TODO** placeholder — replace with a real React component or Headless UI modal.
+- `payloadBuilder.ts` auto-collects browser context (URL, viewport, locale, user-agent).
+- `apiClient.ts` handles the multipart POST to the backend.

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { initBugReporter } from './widget/init';
+export type { BugReporterConfig, CurrentUser, TraceContext, WidgetTheme } from '@bugreport/shared-types';
+export { installConsoleErrorHook, getCollectedErrors, clearCollectedErrors } from './utils/consoleCapture';
+export type { CapturedError } from './utils/consoleCapture';
+export { installNetworkCaptureHook, getFailedNetworkRequests, clearFailedNetworkRequests } from './utils/networkCapture';
+export type { FailedNetworkEntry } from './utils/networkCapture';
+export { capturePageScreenshot } from './utils/screenshotCapture';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACzG,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC3G,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACzH,YAAY,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export { initBugReporter } from './widget/init';
+export { installConsoleErrorHook, getCollectedErrors, clearCollectedErrors } from './utils/consoleCapture';
+export { installNetworkCaptureHook, getFailedNetworkRequests, clearFailedNetworkRequests } from './utils/networkCapture';
+export { capturePageScreenshot } from './utils/screenshotCapture';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE3G,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEzH,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/types/widget.types.d.ts

@@ -0,0 +1,21 @@
+import type { BugReporterConfig } from '@bugreport/shared-types';
+export type WidgetState = 'idle' | 'open' | 'submitting' | 'success' | 'error';
+export type WidgetEventType = 'open' | 'close' | 'submit' | 'success' | 'error';
+export interface WidgetEvent {
+    type: WidgetEventType;
+    payload?: unknown;
+}
+export type WidgetEventListener = (event: WidgetEvent) => void;
+/**
+ * Internal state container for the widget instance.
+ * Framework adapters (React, vanilla) wrap this state in their own reactivity model.
+ */
+export interface WidgetInstance {
+    config: BugReporterConfig;
+    state: WidgetState;
+    destroy: () => void;
+    open: () => void;
+    close: () => void;
+    on: (type: WidgetEventType, listener: WidgetEventListener) => void;
+}
+//# sourceMappingURL=widget.types.d.ts.map

package/dist/types/widget.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"widget.types.d.ts","sourceRoot":"","sources":["../../src/types/widget.types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC;AAE/E,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC;AAEhF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,eAAe,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;AAE/D;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,IAAI,CAAC;IACjB,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,EAAE,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,mBAAmB,KAAK,IAAI,CAAC;CACpE"}

package/dist/types/widget.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=widget.types.js.map

package/dist/types/widget.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"widget.types.js","sourceRoot":"","sources":["../../src/types/widget.types.ts"],"names":[],"mappings":""}

package/dist/utils/apiClient.d.ts

@@ -0,0 +1,10 @@
+import type { BugReportSuccessResponse } from '@bugreport/shared-types';
+export interface SubmitReportOptions {
+    apiBaseUrl: string;
+    formData: FormData;
+}
+/**
+ * Sends the bug report FormData to the backend API.
+ */
+export declare function submitReport(options: SubmitReportOptions): Promise<BugReportSuccessResponse>;
+//# sourceMappingURL=apiClient.d.ts.map

package/dist/utils/apiClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiClient.d.ts","sourceRoot":"","sources":["../../src/utils/apiClient.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAA0B,MAAM,yBAAyB,CAAC;AAEhG,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,wBAAwB,CAAC,CAkBnC"}

package/dist/utils/apiClient.js

@@ -0,0 +1,19 @@
+/**
+ * Sends the bug report FormData to the backend API.
+ */
+export async function submitReport(options) {
+    const { apiBaseUrl, formData } = options;
+    const url = `${apiBaseUrl.replace(/\/$/, '')}/api/reports/bug`;
+    const response = await fetch(url, {
+        method: 'POST',
+        body: formData,
+        // Note: do NOT set Content-Type manually — the browser sets it with the boundary.
+        credentials: 'omit',
+    });
+    const data = (await response.json());
+    if (!data.success) {
+        throw new Error(data.error ?? 'Unknown error from API');
+    }
+    return data;
+}
+//# sourceMappingURL=apiClient.js.map

package/dist/utils/apiClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiClient.js","sourceRoot":"","sources":["../../src/utils/apiClient.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAA4B;IAE5B,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC;IAE/D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,QAAQ;QACd,kFAAkF;QAClF,WAAW,EAAE,MAAM;KACpB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsD,CAAC;IAE1F,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAE,IAA+B,CAAC,KAAK,IAAI,wBAAwB,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/utils/consoleCapture.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Lightweight console error capture utility.
+ *
+ * Hooks into `console.error` for the lifetime of the current page to collect
+ * recent errors. This data is attached to bug reports as `optionalClientErrors`.
+ *
+ * Privacy rules (from docs/TECHNICAL_SPEC.md):
+ * - Only errors from the *current page lifetime* are captured.
+ * - A rolling buffer of MAX_ERRORS entries is kept — older entries are dropped.
+ * - No full session recording or persistent storage.
+ * - Error messages are trimmed to MAX_MESSAGE_LENGTH characters.
+ * - Stack traces are trimmed to MAX_STACK_LENGTH characters.
+ */
+export interface CapturedError {
+    message: string;
+    stack?: string;
+    timestamp: string;
+}
+/**
+ * Installs the console.error hook.
+ *
+ * Call once during SDK initialisation (`initBugReporter`).
+ * Safe to call multiple times — subsequent calls are no-ops.
+ */
+export declare function installConsoleErrorHook(): void;
+/**
+ * Returns a JSON-serialised snapshot of the current error buffer.
+ *
+ * Returns `undefined` when the buffer is empty so callers can omit the field.
+ */
+export declare function getCollectedErrors(): string | undefined;
+/** Clears the in-memory buffer (useful for testing). */
+export declare function clearCollectedErrors(): void;
+//# sourceMappingURL=consoleCapture.d.ts.map

package/dist/utils/consoleCapture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consoleCapture.d.ts","sourceRoot":"","sources":["../../src/utils/consoleCapture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAU9C;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAGvD;AAED,wDAAwD;AACxD,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C"}

package/dist/utils/consoleCapture.js

@@ -0,0 +1,82 @@
+/**
+ * Lightweight console error capture utility.
+ *
+ * Hooks into `console.error` for the lifetime of the current page to collect
+ * recent errors. This data is attached to bug reports as `optionalClientErrors`.
+ *
+ * Privacy rules (from docs/TECHNICAL_SPEC.md):
+ * - Only errors from the *current page lifetime* are captured.
+ * - A rolling buffer of MAX_ERRORS entries is kept — older entries are dropped.
+ * - No full session recording or persistent storage.
+ * - Error messages are trimmed to MAX_MESSAGE_LENGTH characters.
+ * - Stack traces are trimmed to MAX_STACK_LENGTH characters.
+ */
+const MAX_ERRORS = 20;
+const MAX_MESSAGE_LENGTH = 500;
+const MAX_STACK_LENGTH = 1000;
+const errorBuffer = [];
+let hooked = false;
+/**
+ * Installs the console.error hook.
+ *
+ * Call once during SDK initialisation (`initBugReporter`).
+ * Safe to call multiple times — subsequent calls are no-ops.
+ */
+export function installConsoleErrorHook() {
+    if (hooked || typeof console === 'undefined')
+        return;
+    hooked = true;
+    const originalError = console.error.bind(console);
+    console.error = (...args) => {
+        originalError(...args);
+        captureError(args);
+    };
+}
+/**
+ * Returns a JSON-serialised snapshot of the current error buffer.
+ *
+ * Returns `undefined` when the buffer is empty so callers can omit the field.
+ */
+export function getCollectedErrors() {
+    if (errorBuffer.length === 0)
+        return undefined;
+    return JSON.stringify(errorBuffer);
+}
+/** Clears the in-memory buffer (useful for testing). */
+export function clearCollectedErrors() {
+    errorBuffer.length = 0;
+}
+// ── Internal helpers ──────────────────────────────────────────────────────────
+function captureError(args) {
+    const raw = args
+        .map((a) => {
+        if (a instanceof Error)
+            return a.message;
+        if (typeof a === 'string')
+            return a;
+        try {
+            return JSON.stringify(a);
+        }
+        catch {
+            return String(a);
+        }
+    })
+        .join(' ');
+    const stack = args.find((a) => a instanceof Error && a.stack)
+        ? (args.find((a) => a instanceof Error).stack ?? undefined)
+        : undefined;
+    const entry = {
+        message: raw.slice(0, MAX_MESSAGE_LENGTH),
+        stack: stack?.slice(0, MAX_STACK_LENGTH),
+        timestamp: new Date().toISOString(),
+    };
+    if (entry.stack === undefined) {
+        delete entry.stack;
+    }
+    errorBuffer.push(entry);
+    // Keep a rolling window — drop oldest when buffer is full
+    if (errorBuffer.length > MAX_ERRORS) {
+        errorBuffer.shift();
+    }
+}
+//# sourceMappingURL=consoleCapture.js.map

package/dist/utils/consoleCapture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consoleCapture.js","sourceRoot":"","sources":["../../src/utils/consoleCapture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAQ9B,MAAM,WAAW,GAAoB,EAAE,CAAC;AACxC,IAAI,MAAM,GAAG,KAAK,CAAC;AAEnB;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IACrC,IAAI,MAAM,IAAI,OAAO,OAAO,KAAK,WAAW;QAAE,OAAO;IACrD,MAAM,GAAG,IAAI,CAAC;IAEd,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAElD,OAAO,CAAC,KAAK,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE;QACrC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC;QACvB,YAAY,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,oBAAoB;IAClC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,iFAAiF;AAEjF,SAAS,YAAY,CAAC,IAAe;IACnC,MAAM,GAAG,GAAG,IAAI;SACb,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC,YAAY,KAAK;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC;QACzC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;IAEb,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC;QAC3D,CAAC,CAAC,CAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,KAAK,CAAW,CAAC,KAAK,IAAI,SAAS,CAAC;QACtE,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,KAAK,GAAkB;QAC3B,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC;QACzC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC;QACxC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAExB,0DAA0D;IAC1D,IAAI,WAAW,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QACpC,WAAW,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/utils/networkCapture.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Failed network request capture utility.
+ *
+ * Uses the `PerformanceObserver` API (where available) to passively observe
+ * `resource` entries and collect those with non-2xx status codes or that failed
+ * entirely (transferSize === 0 with duration > 0).
+ *
+ * The resulting summary is attached to bug reports as the
+ * `failedNetworkRequests` field so developers can see which API calls
+ * broke during the tester's session.
+ *
+ * Privacy rules:
+ * - Only the URL pathname + status are captured — no request/response bodies.
+ * - Authorization headers are never recorded.
+ * - A rolling buffer of MAX_ENTRIES is kept.
+ * - URLs are truncated to MAX_URL_LENGTH characters.
+ */
+export interface FailedNetworkEntry {
+    /** Request URL (pathname only for same-origin; full URL for cross-origin) */
+    url: string;
+    /** HTTP method when available (defaults to "GET" for resource entries) */
+    method: string;
+    /** HTTP status code, or 0 if the request failed entirely */
+    status: number;
+    /** Duration in milliseconds */
+    durationMs: number;
+    /** ISO 8601 timestamp */
+    timestamp: string;
+}
+/**
+ * Installs the PerformanceObserver hook + fetch/XHR interceptors.
+ *
+ * Call once during SDK initialisation. Safe to call multiple times.
+ */
+export declare function installNetworkCaptureHook(): void;
+/**
+ * Returns a JSON-serialised snapshot of captured failed requests.
+ *
+ * Returns `undefined` when the buffer is empty so callers can omit the field.
+ */
+export declare function getFailedNetworkRequests(): string | undefined;
+/** Clears the in-memory buffer (useful for testing). */
+export declare function clearFailedNetworkRequests(): void;
+//# sourceMappingURL=networkCapture.d.ts.map

package/dist/utils/networkCapture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"networkCapture.d.ts","sourceRoot":"","sources":["../../src/utils/networkCapture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;;;GAIG;AACH,wBAAgB,yBAAyB,IAAI,IAAI,CA8FhD;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,GAAG,SAAS,CAG7D;AAED,wDAAwD;AACxD,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}

package/dist/utils/networkCapture.js

@@ -0,0 +1,138 @@
+/**
+ * Failed network request capture utility.
+ *
+ * Uses the `PerformanceObserver` API (where available) to passively observe
+ * `resource` entries and collect those with non-2xx status codes or that failed
+ * entirely (transferSize === 0 with duration > 0).
+ *
+ * The resulting summary is attached to bug reports as the
+ * `failedNetworkRequests` field so developers can see which API calls
+ * broke during the tester's session.
+ *
+ * Privacy rules:
+ * - Only the URL pathname + status are captured — no request/response bodies.
+ * - Authorization headers are never recorded.
+ * - A rolling buffer of MAX_ENTRIES is kept.
+ * - URLs are truncated to MAX_URL_LENGTH characters.
+ */
+const MAX_ENTRIES = 30;
+const MAX_URL_LENGTH = 300;
+const failedRequests = [];
+let installed = false;
+let observer = null;
+/**
+ * Installs the PerformanceObserver hook + fetch/XHR interceptors.
+ *
+ * Call once during SDK initialisation. Safe to call multiple times.
+ */
+export function installNetworkCaptureHook() {
+    if (installed)
+        return;
+    installed = true;
+    // ── Fetch interceptor ─────────────────────────────────────────────────────
+    if (typeof window !== 'undefined' && typeof window.fetch === 'function') {
+        const originalFetch = window.fetch.bind(window);
+        window.fetch = async (input, init) => {
+            const url = typeof input === 'string' ? input : input instanceof URL ? input.href : input.url;
+            const method = init?.method?.toUpperCase() ?? 'GET';
+            const start = performance.now();
+            try {
+                const response = await originalFetch(input, init);
+                const durationMs = Math.round(performance.now() - start);
+                if (!response.ok) {
+                    pushEntry({
+                        url: truncateUrl(url),
+                        method,
+                        status: response.status,
+                        durationMs,
+                        timestamp: new Date().toISOString(),
+                    });
+                }
+                return response;
+            }
+            catch (err) {
+                const durationMs = Math.round(performance.now() - start);
+                pushEntry({
+                    url: truncateUrl(url),
+                    method,
+                    status: 0,
+                    durationMs,
+                    timestamp: new Date().toISOString(),
+                });
+                throw err;
+            }
+        };
+    }
+    // ── XMLHttpRequest interceptor ────────────────────────────────────────────
+    if (typeof window !== 'undefined' && typeof XMLHttpRequest !== 'undefined') {
+        const OriginalXHR = XMLHttpRequest;
+        const originalOpen = OriginalXHR.prototype.open;
+        OriginalXHR.prototype.open = function (method, url, ...rest) {
+            this.__br_method = method;
+            this.__br_url = String(url);
+            this.addEventListener('loadend', function () {
+                if (this.status === 0 || this.status >= 400) {
+                    pushEntry({
+                        url: truncateUrl(String(url)),
+                        method: method.toUpperCase(),
+                        status: this.status,
+                        durationMs: 0, // XHR doesn't expose timing directly
+                        timestamp: new Date().toISOString(),
+                    });
+                }
+            });
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            return originalOpen.call(this, method, url, ...rest);
+        };
+    }
+    // ── PerformanceObserver (bonus: catches non-interceptable requests) ────────
+    if (typeof PerformanceObserver !== 'undefined') {
+        try {
+            observer = new PerformanceObserver((list) => {
+                for (const entry of list.getEntries()) {
+                    const resource = entry;
+                    // transferSize === 0 with duration > 0 often indicates a failed request
+                    // (blocked, CORS error, etc.)
+                    if (resource.transferSize === 0 && resource.duration > 50) {
+                        pushEntry({
+                            url: truncateUrl(resource.name),
+                            method: 'GET', // PerformanceObserver doesn't expose the method
+                            status: 0,
+                            durationMs: Math.round(resource.duration),
+                            timestamp: new Date().toISOString(),
+                        });
+                    }
+                }
+            });
+            observer.observe({ entryTypes: ['resource'] });
+        }
+        catch {
+            // PerformanceObserver not supported — silently skip
+        }
+    }
+}
+/**
+ * Returns a JSON-serialised snapshot of captured failed requests.
+ *
+ * Returns `undefined` when the buffer is empty so callers can omit the field.
+ */
+export function getFailedNetworkRequests() {
+    if (failedRequests.length === 0)
+        return undefined;
+    return JSON.stringify(failedRequests);
+}
+/** Clears the in-memory buffer (useful for testing). */
+export function clearFailedNetworkRequests() {
+    failedRequests.length = 0;
+}
+// ── Internal ──────────────────────────────────────────────────────────────────
+function pushEntry(entry) {
+    failedRequests.push(entry);
+    if (failedRequests.length > MAX_ENTRIES) {
+        failedRequests.shift();
+    }
+}
+function truncateUrl(url) {
+    return url.length > MAX_URL_LENGTH ? url.slice(0, MAX_URL_LENGTH) + '…' : url;
+}
+//# sourceMappingURL=networkCapture.js.map

package/dist/utils/networkCapture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"networkCapture.js","sourceRoot":"","sources":["../../src/utils/networkCapture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,cAAc,GAAG,GAAG,CAAC;AAe3B,MAAM,cAAc,GAAyB,EAAE,CAAC;AAChD,IAAI,SAAS,GAAG,KAAK,CAAC;AACtB,IAAI,QAAQ,GAA+B,IAAI,CAAC;AAEhD;;;;GAIG;AACH,MAAM,UAAU,yBAAyB;IACvC,IAAI,SAAS;QAAE,OAAO;IACtB,SAAS,GAAG,IAAI,CAAC;IAEjB,6EAA6E;IAC7E,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACxE,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,GAAG,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAqB,EAAE;YACvF,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;YAC9F,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC;YACpD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAEhC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAClD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;gBAEzD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,SAAS,CAAC;wBACR,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC;wBACrB,MAAM;wBACN,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,UAAU;wBACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACpC,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,QAAQ,CAAC;YAClB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;gBACzD,SAAS,CAAC;oBACR,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC;oBACrB,MAAM;oBACN,MAAM,EAAE,CAAC;oBACT,UAAU;oBACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;gBACH,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,cAAc,KAAK,WAAW,EAAE,CAAC;QAC3E,MAAM,WAAW,GAAG,cAAc,CAAC;QACnC,MAAM,YAAY,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC;QAEhD,WAAW,CAAC,SAAS,CAAC,IAAI,GAAG,UAC3B,MAAc,EACd,GAAiB,EACjB,GAAG,IAAe;YAEjB,IAAmE,CAAC,WAAW,GAAG,MAAM,CAAC;YACzF,IAA8C,CAAC,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAEvE,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE;gBAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;oBAC5C,SAAS,CAAC;wBACR,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBAC7B,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;wBAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,UAAU,EAAE,CAAC,EAAE,qCAAqC;wBACpD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,8DAA8D;YAC9D,OAAQ,YAA6C,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACzF,CAAC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,IAAI,OAAO,mBAAmB,KAAK,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,mBAAmB,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC1C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;oBACtC,MAAM,QAAQ,GAAG,KAAkC,CAAC;oBACpD,wEAAwE;oBACxE,8BAA8B;oBAC9B,IAAI,QAAQ,CAAC,YAAY,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,GAAG,EAAE,EAAE,CAAC;wBAC1D,SAAS,CAAC;4BACR,GAAG,EAAE,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;4BAC/B,MAAM,EAAE,KAAK,EAAE,gDAAgD;4BAC/D,MAAM,EAAE,CAAC;4BACT,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;4BACzC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;yBACpC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;AACxC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,0BAA0B;IACxC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,iFAAiF;AAEjF,SAAS,SAAS,CAAC,KAAyB;IAC1C,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,cAAc,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QACxC,cAAc,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAChF,CAAC"}

package/dist/utils/payloadBuilder.d.ts

@@ -0,0 +1,15 @@
+import type { BugReportRequest } from '@bugreport/shared-types';
+import type { BugReporterConfig } from '@bugreport/shared-types';
+/**
+ * Builds the multipart FormData payload for POST /api/reports/bug.
+ *
+ * Text fields are taken from the report object; the screenshot File
+ * (if any) must be appended by the caller after this function returns.
+ *
+ * Automatically includes:
+ * - browser context (URL, viewport, locale, user-agent)
+ * - config values (environment, appVersion, commitSha, user info, traceId)
+ * - recent console errors collected by installConsoleErrorHook()
+ */
+export declare function buildReportPayload(report: Omit<BugReportRequest, never>, config: BugReporterConfig, overrides?: Partial<BugReportRequest>): FormData;
+//# sourceMappingURL=payloadBuilder.d.ts.map

package/dist/utils/payloadBuilder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payloadBuilder.d.ts","sourceRoot":"","sources":["../../src/utils/payloadBuilder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAIjE;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,EACrC,MAAM,EAAE,iBAAiB,EACzB,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GACpC,QAAQ,CAyCV"}

package/dist/utils/payloadBuilder.js

@@ -0,0 +1,51 @@
+import { getCollectedErrors } from './consoleCapture';
+import { getFailedNetworkRequests } from './networkCapture';
+/**
+ * Builds the multipart FormData payload for POST /api/reports/bug.
+ *
+ * Text fields are taken from the report object; the screenshot File
+ * (if any) must be appended by the caller after this function returns.
+ *
+ * Automatically includes:
+ * - browser context (URL, viewport, locale, user-agent)
+ * - config values (environment, appVersion, commitSha, user info, traceId)
+ * - recent console errors collected by installConsoleErrorHook()
+ */
+export function buildReportPayload(report, config, overrides) {
+    const contextDefaults = {
+        environment: config.environment,
+        appVersion: config.appVersion,
+        commitSha: config.commitSha,
+        buildNumber: config.buildNumber,
+        testerId: config.currentUser?.id,
+        testerRole: config.currentUser?.role,
+        contactEmail: config.currentUser?.email,
+        traceId: config.getTraceContext?.().traceId,
+        pageUrl: typeof window !== 'undefined' ? window.location.href : undefined,
+        route: typeof window !== 'undefined' ? window.location.pathname : undefined,
+        browser: typeof navigator !== 'undefined' ? navigator.userAgent : undefined,
+        locale: typeof navigator !== 'undefined' ? navigator.language : undefined,
+        viewport: typeof window !== 'undefined'
+            ? `${window.innerWidth}x${window.innerHeight}`
+            : undefined,
+        // Automatically attach any console errors captured since page load
+        optionalClientErrors: getCollectedErrors(),
+        // Automatically attach any failed network requests captured since page load
+        failedNetworkRequests: getFailedNetworkRequests(),
+    };
+    // report fields take priority over context defaults; overrides take priority over everything
+    const payload = {
+        ...contextDefaults,
+        ...report,
+        ...overrides,
+    };
+    const formData = new FormData();
+    Object.keys(payload).forEach((key) => {
+        const value = payload[key];
+        if (value !== undefined && value !== null) {
+            formData.append(key, String(value));
+        }
+    });
+    return formData;
+}
+//# sourceMappingURL=payloadBuilder.js.map

package/dist/utils/payloadBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payloadBuilder.js","sourceRoot":"","sources":["../../src/utils/payloadBuilder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAqC,EACrC,MAAyB,EACzB,SAAqC;IAErC,MAAM,eAAe,GAA8B;QACjD,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE;QAChC,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI;QACpC,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,KAAK;QACvC,OAAO,EAAE,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC,OAAO;QAC3C,OAAO,EAAE,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACzE,KAAK,EAAE,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QAC3E,OAAO,EAAE,OAAO,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAC3E,MAAM,EAAE,OAAO,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACzE,QAAQ,EACN,OAAO,MAAM,KAAK,WAAW;YAC3B,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE;YAC9C,CAAC,CAAC,SAAS;QACf,mEAAmE;QACnE,oBAAoB,EAAE,kBAAkB,EAAE;QAC1C,4EAA4E;QAC5E,qBAAqB,EAAE,wBAAwB,EAAE;KAClD,CAAC;IAEF,6FAA6F;IAC7F,MAAM,OAAO,GAAqB;QAChC,GAAG,eAAe;QAClB,GAAG,MAAM;QACT,GAAG,SAAS;KACO,CAAC;IAEtB,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;IAE/B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAgC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACnE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/utils/screenshotCapture.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Full-page screenshot capture utility.
+ *
+ * Uses html2canvas when available to capture a client-side screenshot of the
+ * current page. html2canvas is loaded lazically from a CDN to keep the SDK
+ * bundle size small — it is only fetched when the user clicks "Capture screen".
+ *
+ * If html2canvas is not available (blocked by CSP, network error, etc.) the
+ * capture silently fails and the user can still attach a manual screenshot.
+ *
+ * @see https://html2canvas.hertzen.com/
+ */
+/**
+ * Captures a screenshot of the current page as a data URL.
+ *
+ * Returns `null` if html2canvas is unavailable or the capture fails.
+ *
+ * The overlay element (if any) is hidden during capture and restored after.
+ */
+export declare function capturePageScreenshot(): Promise<string | null>;
+//# sourceMappingURL=screenshotCapture.d.ts.map

package/dist/utils/screenshotCapture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"screenshotCapture.d.ts","sourceRoot":"","sources":["../../src/utils/screenshotCapture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAkEH;;;;;;GAMG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmBpE"}