@marketrix.ai/widget 3.8.345 → 3.8.347

package/README.md

@@ -56,12 +56,11 @@ await mountWidget({
 
 ## Credential modes
 
-The widget supports three modes, auto-detected from the credentials you provide.
+The widget supports two modes, auto-detected from the credentials you provide.
 
 | Mode           | Credentials                      | Script attributes    | Network                                                         |
 | -------------- | -------------------------------- | -------------------- | --------------------------------------------------------------- |
 | **Production** | `mtxId` + `mtxKey`               | `mtx-id` + `mtx-key` | Fetches settings from the API, opens the live stream            |
-| **Dev**        | `mtxApp` (application id)        | `mtx-app`            | Same as production, keyed by id instead of credentials          |
 | **Preview**    | `settings` object passed in code | —                    | No network — renders appearance only from the supplied settings |
 
 All modes also accept the common options below.
@@ -143,9 +142,6 @@ Auto-detects the mode (preview / production / dev) from `config` and initializes
 // Production
 await mountWidget({ mtxId, mtxKey, mtxApiHost });
 
-// Dev
-await mountWidget({ mtxApp: 123, mtxApiHost });
-
 // Preview (no network — just renders the appearance)
 await mountWidget({ settings: { widget_enabled: true, widget_position: 'bottom_right' /* ... */ } });
 ```
@@ -174,6 +170,17 @@ Returns the active configuration, or `null` if the widget isn't initialized.
 
 Widget settings are managed in the dashboard. `widget_appearance: 'hidden'` keeps the widget initialized but suppresses its visible UI on the host page; previews remain visible. `widget_greeting_toast` controls the welcome toast, and `widget_recording` enables rrweb session recording. Recording is off by default.
 
+#### Session recording privacy
+
+When recording is enabled, **every input value is masked** — recordings capture that a field was typed into, never what was typed. To exclude more of your page, add either class to any element:
+
+| Class                    | Effect                                                      |
+| ------------------------ | ----------------------------------------------------------- |
+| `mtx-mask` / `rr-mask`   | Text content inside the element is masked                   |
+| `mtx-block` / `rr-block` | The element is replaced by a placeholder and never recorded |
+
+Both the `mtx-` and rrweb's native `rr-` prefixes are honoured, so existing `rr-block` / `rr-mask` markup keeps working.
+
 ### `MarketrixWidget` — React component (preview)
 
 For previewing appearance inside a React app (e.g. a settings/configuration screen). Renders into its own Shadow DOM and makes no network calls.
@@ -207,8 +214,8 @@ Props: `settings` (required), `container?`, `mtxId?`, `mtxKey?`, `mtxApiHost?`.
 
 TypeScript types are bundled with the package:
 
-- `MarketrixConfig` — full config for `initWidget` / `updateMarketrixConfig` (`mtxId`, `mtxKey`, `mtxApp`, `mtxApiHost`, `userId`, `show_widget`, `use_screenshare`, plus all widget appearance settings, optional).
-- `AddWidgetConfig` — discriminated config for `mountWidget` (production / dev / preview variants + common options).
+- `MarketrixConfig` — full config for `initWidget` / `updateMarketrixConfig` (`mtxId`, `mtxKey`, `mtxApiHost`, `userId`, `show_widget`, `use_screenshare`, plus all widget appearance settings, optional).
+- `AddWidgetConfig` — discriminated config for `mountWidget` (production / preview variants + common options).
 - `MarketrixWidgetProps` — props for the `MarketrixWidget` component.
 - `ChatMessage`, `WidgetState`, `InstructionType` (`'tell' | 'show' | 'do'`).
 
@@ -218,7 +225,7 @@ TypeScript types are bundled with the package:
 
 - **React 19** (`react`/`react-dom` `^19.2.3`) on the host page — peer dependency, not bundled. The script-tag loader provides it via importmap; npm consumers supply it from their app.
 - A reachable Marketrix API host (`mtxApiHost` / `mtx-api-host`).
-- Valid credentials for production (`mtxId` + `mtxKey`) or dev (`mtxApp`) mode.
+- Valid credentials (`mtxId` + `mtxKey`) for production mode.
 
 ---
 

package/dist/src/sdk/contract.d.ts

@@ -375,7 +375,6 @@ export declare const widgetContract: {
         tab_id: import("zod").ZodOptional<import("zod").ZodString>;
         marketrix_id: import("zod").ZodOptional<import("zod").ZodString>;
         marketrix_key: import("zod").ZodOptional<import("zod").ZodString>;
-        application_id: import("zod").ZodOptional<import("zod").ZodCoercedNumber<unknown>>;
     }, import("zod/v4/core").$strip>, import("@orpc/contract").Schema<AsyncIteratorObject<{
         type: "registered";
         chat_id: string;

package/dist/src/sdk/contracts/widget.d.ts

@@ -723,7 +723,6 @@ export declare const widgetStream: import("@orpc/contract").ContractProcedureBui
     tab_id: z.ZodOptional<z.ZodString>;
     marketrix_id: z.ZodOptional<z.ZodString>;
     marketrix_key: z.ZodOptional<z.ZodString>;
-    application_id: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
 }, z.core.$strip>, import("@orpc/contract").Schema<AsyncIteratorObject<{
     type: "registered";
     chat_id: string;
@@ -1249,7 +1248,6 @@ export declare const widgetRoutes: {
         tab_id: z.ZodOptional<z.ZodString>;
         marketrix_id: z.ZodOptional<z.ZodString>;
         marketrix_key: z.ZodOptional<z.ZodString>;
-        application_id: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     }, z.core.$strip>, import("@orpc/contract").Schema<AsyncIteratorObject<{
         type: "registered";
         chat_id: string;

package/dist/src/sdk/index.d.ts

@@ -380,7 +380,6 @@ export declare const sdk: {
         tab_id: import("zod").ZodOptional<import("zod").ZodString>;
         marketrix_id: import("zod").ZodOptional<import("zod").ZodString>;
         marketrix_key: import("zod").ZodOptional<import("zod").ZodString>;
-        application_id: import("zod").ZodOptional<import("zod").ZodCoercedNumber<unknown>>;
     }, import("zod/v4/core").$strip>, import("@orpc/contract").Schema<AsyncIteratorObject<{
         type: "registered";
         chat_id: string;

package/dist/src/services/ValidationService.d.ts

@@ -7,8 +7,9 @@ export interface WidgetValidationResult {
     application?: ApplicationData;
 }
 /**
- * Validates widget config: either the widget (marketrix_id + marketrix_key) and its application exist,
- * or the application id exists.
+ * Validates widget config: the widget (marketrix_id + marketrix_key) and its application exist.
+ *
+ * The keyless `mtxApp` mode is retired — an application id is a guessable integer, not a secret, so
+ * it authenticated nothing while granting full agent access under the owning workspace.
  */
-/** Handles both the mtxId+mtxKey and mtxApp cases. */
 export declare function validateConfig(config: MarketrixConfig): Promise<WidgetValidationResult>;

package/dist/src/services/WidgetService.d.ts

@@ -1,4 +1,4 @@
 import { type WidgetData, type WidgetSettingsData } from '../sdk';
 export declare function getWidgetSettings(widget: WidgetData): WidgetSettingsData | null;
 /** Default settings merged with the matched widget's settings; null with no credentials (preview mode). */
-export declare function fetchWidgetSettings(mtxId?: string, mtxKey?: string, mtxApp?: number): Promise<WidgetData | null>;
+export declare function fetchWidgetSettings(mtxId?: string, mtxKey?: string): Promise<WidgetData | null>;

package/dist/src/types/index.d.ts

@@ -66,17 +66,10 @@ export type AddWidgetConfig = ({
     settings: WidgetSettingsData;
     mtxId?: never;
     mtxKey?: never;
-    mtxApp?: never;
 } | {
     settings?: never;
     mtxId: string;
     mtxKey: string;
-    mtxApp?: never;
-} | {
-    settings?: never;
-    mtxId?: never;
-    mtxKey?: never;
-    mtxApp: number;
 }) & {
     container?: HTMLElement;
     mtxApiHost?: string;