@mushi-mushi/core 0.7.0 → 0.8.0

package/dist/index.d.cts

@@ -2,15 +2,18 @@ interface MushiConfig {
     projectId: string;
     apiKey: string;
     apiEndpoint?: string;
+    /** Opinionated defaults for common environments. Explicit config wins. */
+    preset?: MushiPreset;
     /**
      * Fetch non-secret widget/capture settings from the Mushi project at
      * startup. Defaults to true so console changes apply without rebuilding
      * host apps. Set false for fully static/offline deployments.
      */
-    runtimeConfig?: boolean;
+    runtimeConfig?: boolean | 'auto';
     sentry?: MushiSentryConfig;
     widget?: MushiWidgetConfig;
     capture?: MushiCaptureConfig;
+    privacy?: MushiPrivacyConfig;
     proactive?: MushiProactiveConfig;
     preFilter?: MushiPreFilterConfig;
     integrations?: MushiIntegrationsConfig;
@@ -27,6 +30,11 @@ interface MushiSentryConfig {
 }
 interface MushiWidgetConfig {
     position?: 'bottom-right' | 'bottom-left' | 'top-right' | 'top-left';
+    /**
+     * Raw CSS anchors for app shells with bottom navs/chat composers/cookie
+     * banners. When set, these values win over `position` + numeric `inset`.
+     */
+    anchor?: MushiWidgetAnchor;
     theme?: 'auto' | 'light' | 'dark';
     triggerText?: string;
     expandedTitle?: string;
@@ -54,6 +62,10 @@ interface MushiWidgetConfig {
     /** Opt-in smart trigger behavior; planned to become the default in a later minor. */
     smartHide?: boolean | MushiWidgetSmartHideConfig;
     draggable?: boolean;
+    /** Show the tiny "Powered by Mushi vX" footer inside the widget panel. */
+    brandFooter?: boolean;
+    /** How the widget should surface SDK freshness warnings. Defaults to auto. */
+    outdatedBanner?: 'auto' | 'banner' | 'console-only' | 'off';
 }
 interface MushiWidgetInset {
     top?: number | 'auto';
@@ -61,6 +73,13 @@ interface MushiWidgetInset {
     bottom?: number | 'auto';
     left?: number | 'auto';
 }
+interface MushiWidgetAnchor {
+    top?: string;
+    right?: string;
+    bottom?: string;
+    left?: string;
+}
+type MushiPreset = 'production-calm' | 'beta-loud' | 'internal-debug' | 'manual-only';
 interface MushiWidgetSmartHideConfig {
     onMobile?: 'edge-tab' | 'hide' | false;
     onScroll?: 'shrink' | 'hide' | false;
@@ -69,18 +88,41 @@ interface MushiWidgetSmartHideConfig {
 interface MushiCaptureConfig {
     console?: boolean;
     network?: boolean;
+    /**
+     * URLs that should never be captured as host-app traffic. Strings are
+     * substring matches; RegExp values are tested against the fully resolved URL.
+     */
+    ignoreUrls?: MushiUrlMatcher[];
     performance?: boolean;
     screenshot?: 'on-report' | 'auto' | 'off';
     elementSelector?: boolean;
     replay?: 'sentry' | 'rrweb' | 'lite' | 'off';
 }
+interface MushiPrivacyConfig {
+    /** DOM nodes to visually mask in screenshots before upload. */
+    maskSelectors?: string[];
+    /** DOM subtrees to remove from screenshots before upload. */
+    blockSelectors?: string[];
+    /** Let reporters remove an attached screenshot before submitting. Defaults to true. */
+    allowUserRemoveScreenshot?: boolean;
+}
 interface MushiProactiveConfig {
     rageClick?: boolean;
     errorBoundary?: boolean;
     longTask?: boolean;
-    apiCascade?: boolean;
+    apiCascade?: boolean | MushiApiCascadeConfig;
     cooldown?: MushiCooldownConfig;
 }
+type MushiUrlMatcher = string | RegExp;
+interface MushiApiCascadeConfig {
+    enabled?: boolean;
+    /**
+     * URLs ignored by the API cascade detector. The SDK always ignores its own
+     * gateway endpoints as well; this hook lets host apps exclude analytics,
+     * health probes, or third-party scripts that are noisy by design.
+     */
+    ignoreUrls?: MushiUrlMatcher[];
+}
 interface MushiCooldownConfig {
     maxProactivePerSession?: number;
     dismissCooldownHours?: number;
@@ -167,6 +209,7 @@ interface MushiReport {
     consoleLogs?: MushiConsoleEntry[];
     networkLogs?: MushiNetworkEntry[];
     performanceMetrics?: MushiPerformanceMetrics;
+    timeline?: MushiTimelineEntry[];
     screenshotDataUrl?: string;
     selectedElement?: MushiSelectedElement;
     metadata?: Record<string, unknown>;
@@ -179,6 +222,10 @@ interface MushiReport {
      */
     fingerprintHash?: string;
     appVersion?: string;
+    /** SDK package that submitted the report, e.g. `@mushi-mushi/web`. */
+    sdkPackage?: string;
+    /** npm package version that submitted the report, e.g. `0.8.0`. */
+    sdkVersion?: string;
     proactiveTrigger?: string;
     sentryEventId?: string;
     sentryReplayId?: string;
@@ -248,11 +295,28 @@ interface MushiSelectedElement {
         height: number;
     };
 }
+type MushiTimelineKind = 'route' | 'click' | 'request' | 'log' | 'screen';
+interface MushiTimelineEntry {
+    ts: number;
+    kind: MushiTimelineKind;
+    payload: Record<string, unknown>;
+}
 type MushiEventType = 'report:submitted' | 'report:queued' | 'report:sent' | 'report:failed' | 'widget:opened' | 'widget:closed' | 'proactive:triggered' | 'proactive:dismissed';
 type MushiEventHandler = (event: {
     type: MushiEventType;
     data?: unknown;
 }) => void;
+interface MushiDiagnosticsResult {
+    apiEndpointReachable: boolean;
+    cspAllowsEndpoint: boolean;
+    widgetMounted: boolean;
+    shadowDomAvailable: boolean;
+    dialogSupported: boolean;
+    runtimeConfigLoaded: boolean;
+    captureScreenshotAvailable: boolean;
+    captureNetworkIntercepting: boolean;
+    sdkVersion: string;
+}
 interface MushiSDKInstance {
     report(options?: {
         category?: MushiReportCategory;
@@ -264,6 +328,11 @@ interface MushiSDKInstance {
         name?: string;
     }): void;
     setMetadata(key: string, value: unknown): void;
+    setScreen(screen: {
+        name: string;
+        route?: string;
+        feature?: string;
+    }): void;
     isOpen(): boolean;
     open(): void;
     openWith(category: MushiReportCategory): void;
@@ -274,6 +343,7 @@ interface MushiSDKInstance {
     close(): void;
     destroy(): void;
     updateConfig(config: MushiRuntimeSdkConfig): void;
+    diagnose(): Promise<MushiDiagnosticsResult>;
     /**
      * Wave G4 — unified `captureEvent` API. Submits a bug report
      * programmatically without opening the widget. Useful for adapters
@@ -320,6 +390,16 @@ interface MushiApiClient {
         status: MushiReportStatus;
     }>>;
     getSdkConfig(): Promise<MushiApiResponse<MushiRuntimeSdkConfig>>;
+    getLatestSdkVersion(packageName: string): Promise<MushiApiResponse<MushiSdkVersionInfo>>;
+    listReporterReports(reporterToken: string): Promise<MushiApiResponse<{
+        reports: MushiReporterReport[];
+    }>>;
+    listReporterComments(reportId: string, reporterToken: string): Promise<MushiApiResponse<{
+        comments: MushiReporterComment[];
+    }>>;
+    replyToReporterReport(reportId: string, reporterToken: string, body: string): Promise<MushiApiResponse<{
+        comment: MushiReporterComment;
+    }>>;
 }
 interface MushiApiResponse<T> {
     ok: boolean;
@@ -339,6 +419,34 @@ interface MushiRuntimeSdkConfig {
         minDescriptionLength?: number;
     };
 }
+interface MushiSdkVersionInfo {
+    package: string;
+    latest: string | null;
+    current?: string;
+    deprecated: boolean;
+    deprecationMessage?: string | null;
+    releasedAt?: string | null;
+}
+interface MushiReporterReport {
+    id: string;
+    status: string;
+    category: string;
+    severity?: string | null;
+    summary?: string | null;
+    description?: string | null;
+    created_at: string;
+    last_admin_reply_at?: string | null;
+    last_reporter_reply_at?: string | null;
+    unread_count?: number;
+}
+interface MushiReporterComment {
+    id: number;
+    author_kind: 'admin' | 'reporter';
+    author_name?: string | null;
+    body: string;
+    visible_to_reporter?: boolean;
+    created_at: string;
+}
 
 interface ApiClientOptions {
     projectId: string;
@@ -352,6 +460,9 @@ interface ApiClientOptions {
     maxRetries?: number;
 }
 declare const DEFAULT_API_ENDPOINT = "https://dxptnwrhwsqckaftyymj.supabase.co/functions/v1/api";
+declare const MUSHI_INTERNAL_HEADER = "X-Mushi-Internal";
+declare const MUSHI_INTERNAL_INIT_MARKER = "__mushiInternal";
+type MushiInternalRequestKind = 'sdk-config' | 'report-submit' | 'report-status' | 'reporter-poll' | 'diagnose';
 declare function createApiClient(options: ApiClientOptions): MushiApiClient;
 
 /**
@@ -543,4 +654,4 @@ declare function createLogger(options: LoggerOptions): Logger;
  */
 declare const noopLogger: Logger;
 
-export { type ApiClientOptions, DEFAULT_API_ENDPOINT, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, type MushiApiClient, type MushiApiResponse, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiIntegrationsConfig, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSelectedElement, type MushiSentryConfig, type MushiWidgetConfig, type OfflineQueue, type PiiScrubberConfig, type PreFilterResult, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, captureEnvironment, createApiClient, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, getDeviceFingerprintHash, getReporterToken, getSessionId, noopLogger, resolveRegionEndpoint, scrubPii };
+export { type ApiClientOptions, DEFAULT_API_ENDPOINT, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiDiagnosticsResult, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiTimelineEntry, type MushiTimelineKind, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type OfflineQueue, type PiiScrubberConfig, type PreFilterResult, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, captureEnvironment, createApiClient, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, getDeviceFingerprintHash, getReporterToken, getSessionId, noopLogger, resolveRegionEndpoint, scrubPii };

package/dist/index.d.ts

@@ -2,15 +2,18 @@ interface MushiConfig {
     projectId: string;
     apiKey: string;
     apiEndpoint?: string;
+    /** Opinionated defaults for common environments. Explicit config wins. */
+    preset?: MushiPreset;
     /**
      * Fetch non-secret widget/capture settings from the Mushi project at
      * startup. Defaults to true so console changes apply without rebuilding
      * host apps. Set false for fully static/offline deployments.
      */
-    runtimeConfig?: boolean;
+    runtimeConfig?: boolean | 'auto';
     sentry?: MushiSentryConfig;
     widget?: MushiWidgetConfig;
     capture?: MushiCaptureConfig;
+    privacy?: MushiPrivacyConfig;
     proactive?: MushiProactiveConfig;
     preFilter?: MushiPreFilterConfig;
     integrations?: MushiIntegrationsConfig;
@@ -27,6 +30,11 @@ interface MushiSentryConfig {
 }
 interface MushiWidgetConfig {
     position?: 'bottom-right' | 'bottom-left' | 'top-right' | 'top-left';
+    /**
+     * Raw CSS anchors for app shells with bottom navs/chat composers/cookie
+     * banners. When set, these values win over `position` + numeric `inset`.
+     */
+    anchor?: MushiWidgetAnchor;
     theme?: 'auto' | 'light' | 'dark';
     triggerText?: string;
     expandedTitle?: string;
@@ -54,6 +62,10 @@ interface MushiWidgetConfig {
     /** Opt-in smart trigger behavior; planned to become the default in a later minor. */
     smartHide?: boolean | MushiWidgetSmartHideConfig;
     draggable?: boolean;
+    /** Show the tiny "Powered by Mushi vX" footer inside the widget panel. */
+    brandFooter?: boolean;
+    /** How the widget should surface SDK freshness warnings. Defaults to auto. */
+    outdatedBanner?: 'auto' | 'banner' | 'console-only' | 'off';
 }
 interface MushiWidgetInset {
     top?: number | 'auto';
@@ -61,6 +73,13 @@ interface MushiWidgetInset {
     bottom?: number | 'auto';
     left?: number | 'auto';
 }
+interface MushiWidgetAnchor {
+    top?: string;
+    right?: string;
+    bottom?: string;
+    left?: string;
+}
+type MushiPreset = 'production-calm' | 'beta-loud' | 'internal-debug' | 'manual-only';
 interface MushiWidgetSmartHideConfig {
     onMobile?: 'edge-tab' | 'hide' | false;
     onScroll?: 'shrink' | 'hide' | false;
@@ -69,18 +88,41 @@ interface MushiWidgetSmartHideConfig {
 interface MushiCaptureConfig {
     console?: boolean;
     network?: boolean;
+    /**
+     * URLs that should never be captured as host-app traffic. Strings are
+     * substring matches; RegExp values are tested against the fully resolved URL.
+     */
+    ignoreUrls?: MushiUrlMatcher[];
     performance?: boolean;
     screenshot?: 'on-report' | 'auto' | 'off';
     elementSelector?: boolean;
     replay?: 'sentry' | 'rrweb' | 'lite' | 'off';
 }
+interface MushiPrivacyConfig {
+    /** DOM nodes to visually mask in screenshots before upload. */
+    maskSelectors?: string[];
+    /** DOM subtrees to remove from screenshots before upload. */
+    blockSelectors?: string[];
+    /** Let reporters remove an attached screenshot before submitting. Defaults to true. */
+    allowUserRemoveScreenshot?: boolean;
+}
 interface MushiProactiveConfig {
     rageClick?: boolean;
     errorBoundary?: boolean;
     longTask?: boolean;
-    apiCascade?: boolean;
+    apiCascade?: boolean | MushiApiCascadeConfig;
     cooldown?: MushiCooldownConfig;
 }
+type MushiUrlMatcher = string | RegExp;
+interface MushiApiCascadeConfig {
+    enabled?: boolean;
+    /**
+     * URLs ignored by the API cascade detector. The SDK always ignores its own
+     * gateway endpoints as well; this hook lets host apps exclude analytics,
+     * health probes, or third-party scripts that are noisy by design.
+     */
+    ignoreUrls?: MushiUrlMatcher[];
+}
 interface MushiCooldownConfig {
     maxProactivePerSession?: number;
     dismissCooldownHours?: number;
@@ -167,6 +209,7 @@ interface MushiReport {
     consoleLogs?: MushiConsoleEntry[];
     networkLogs?: MushiNetworkEntry[];
     performanceMetrics?: MushiPerformanceMetrics;
+    timeline?: MushiTimelineEntry[];
     screenshotDataUrl?: string;
     selectedElement?: MushiSelectedElement;
     metadata?: Record<string, unknown>;
@@ -179,6 +222,10 @@ interface MushiReport {
      */
     fingerprintHash?: string;
     appVersion?: string;
+    /** SDK package that submitted the report, e.g. `@mushi-mushi/web`. */
+    sdkPackage?: string;
+    /** npm package version that submitted the report, e.g. `0.8.0`. */
+    sdkVersion?: string;
     proactiveTrigger?: string;
     sentryEventId?: string;
     sentryReplayId?: string;
@@ -248,11 +295,28 @@ interface MushiSelectedElement {
         height: number;
     };
 }
+type MushiTimelineKind = 'route' | 'click' | 'request' | 'log' | 'screen';
+interface MushiTimelineEntry {
+    ts: number;
+    kind: MushiTimelineKind;
+    payload: Record<string, unknown>;
+}
 type MushiEventType = 'report:submitted' | 'report:queued' | 'report:sent' | 'report:failed' | 'widget:opened' | 'widget:closed' | 'proactive:triggered' | 'proactive:dismissed';
 type MushiEventHandler = (event: {
     type: MushiEventType;
     data?: unknown;
 }) => void;
+interface MushiDiagnosticsResult {
+    apiEndpointReachable: boolean;
+    cspAllowsEndpoint: boolean;
+    widgetMounted: boolean;
+    shadowDomAvailable: boolean;
+    dialogSupported: boolean;
+    runtimeConfigLoaded: boolean;
+    captureScreenshotAvailable: boolean;
+    captureNetworkIntercepting: boolean;
+    sdkVersion: string;
+}
 interface MushiSDKInstance {
     report(options?: {
         category?: MushiReportCategory;
@@ -264,6 +328,11 @@ interface MushiSDKInstance {
         name?: string;
     }): void;
     setMetadata(key: string, value: unknown): void;
+    setScreen(screen: {
+        name: string;
+        route?: string;
+        feature?: string;
+    }): void;
     isOpen(): boolean;
     open(): void;
     openWith(category: MushiReportCategory): void;
@@ -274,6 +343,7 @@ interface MushiSDKInstance {
     close(): void;
     destroy(): void;
     updateConfig(config: MushiRuntimeSdkConfig): void;
+    diagnose(): Promise<MushiDiagnosticsResult>;
     /**
      * Wave G4 — unified `captureEvent` API. Submits a bug report
      * programmatically without opening the widget. Useful for adapters
@@ -320,6 +390,16 @@ interface MushiApiClient {
         status: MushiReportStatus;
     }>>;
     getSdkConfig(): Promise<MushiApiResponse<MushiRuntimeSdkConfig>>;
+    getLatestSdkVersion(packageName: string): Promise<MushiApiResponse<MushiSdkVersionInfo>>;
+    listReporterReports(reporterToken: string): Promise<MushiApiResponse<{
+        reports: MushiReporterReport[];
+    }>>;
+    listReporterComments(reportId: string, reporterToken: string): Promise<MushiApiResponse<{
+        comments: MushiReporterComment[];
+    }>>;
+    replyToReporterReport(reportId: string, reporterToken: string, body: string): Promise<MushiApiResponse<{
+        comment: MushiReporterComment;
+    }>>;
 }
 interface MushiApiResponse<T> {
     ok: boolean;
@@ -339,6 +419,34 @@ interface MushiRuntimeSdkConfig {
         minDescriptionLength?: number;
     };
 }
+interface MushiSdkVersionInfo {
+    package: string;
+    latest: string | null;
+    current?: string;
+    deprecated: boolean;
+    deprecationMessage?: string | null;
+    releasedAt?: string | null;
+}
+interface MushiReporterReport {
+    id: string;
+    status: string;
+    category: string;
+    severity?: string | null;
+    summary?: string | null;
+    description?: string | null;
+    created_at: string;
+    last_admin_reply_at?: string | null;
+    last_reporter_reply_at?: string | null;
+    unread_count?: number;
+}
+interface MushiReporterComment {
+    id: number;
+    author_kind: 'admin' | 'reporter';
+    author_name?: string | null;
+    body: string;
+    visible_to_reporter?: boolean;
+    created_at: string;
+}
 
 interface ApiClientOptions {
     projectId: string;
@@ -352,6 +460,9 @@ interface ApiClientOptions {
     maxRetries?: number;
 }
 declare const DEFAULT_API_ENDPOINT = "https://dxptnwrhwsqckaftyymj.supabase.co/functions/v1/api";
+declare const MUSHI_INTERNAL_HEADER = "X-Mushi-Internal";
+declare const MUSHI_INTERNAL_INIT_MARKER = "__mushiInternal";
+type MushiInternalRequestKind = 'sdk-config' | 'report-submit' | 'report-status' | 'reporter-poll' | 'diagnose';
 declare function createApiClient(options: ApiClientOptions): MushiApiClient;
 
 /**
@@ -543,4 +654,4 @@ declare function createLogger(options: LoggerOptions): Logger;
  */
 declare const noopLogger: Logger;
 
-export { type ApiClientOptions, DEFAULT_API_ENDPOINT, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, type MushiApiClient, type MushiApiResponse, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiIntegrationsConfig, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSelectedElement, type MushiSentryConfig, type MushiWidgetConfig, type OfflineQueue, type PiiScrubberConfig, type PreFilterResult, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, captureEnvironment, createApiClient, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, getDeviceFingerprintHash, getReporterToken, getSessionId, noopLogger, resolveRegionEndpoint, scrubPii };
+export { type ApiClientOptions, DEFAULT_API_ENDPOINT, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiDiagnosticsResult, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiTimelineEntry, type MushiTimelineKind, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type OfflineQueue, type PiiScrubberConfig, type PreFilterResult, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, captureEnvironment, createApiClient, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, getDeviceFingerprintHash, getReporterToken, getSessionId, noopLogger, resolveRegionEndpoint, scrubPii };

package/dist/index.js

@@ -1,5 +1,7 @@
 // src/api-client.ts
 var DEFAULT_API_ENDPOINT = "https://dxptnwrhwsqckaftyymj.supabase.co/functions/v1/api";
+var MUSHI_INTERNAL_HEADER = "X-Mushi-Internal";
+var MUSHI_INTERNAL_INIT_MARKER = "__mushiInternal";
 var DEFAULT_TIMEOUT = 1e4;
 var DEFAULT_MAX_RETRIES = 2;
 function createApiClient(options) {
@@ -11,7 +13,7 @@ function createApiClient(options) {
     maxRetries = DEFAULT_MAX_RETRIES
   } = options;
   let baseUrl = apiEndpoint.replace(/\/$/, "");
-  async function request(method, path, body, retries = maxRetries) {
+  async function request(method, path, body, retries = maxRetries, internalKind) {
     const url = `${baseUrl}${path}`;
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), timeout);
@@ -21,10 +23,12 @@ function createApiClient(options) {
         headers: {
           "Content-Type": "application/json",
           "X-Mushi-Api-Key": apiKey,
-          "X-Mushi-Project": projectId
+          "X-Mushi-Project": projectId,
+          ...internalKind ? { [MUSHI_INTERNAL_HEADER]: internalKind } : {}
         },
         body: body ? JSON.stringify(body) : void 0,
-        signal: controller.signal
+        signal: controller.signal,
+        ...internalKind ? { [MUSHI_INTERNAL_INIT_MARKER]: internalKind } : {}
       });
       clearTimeout(timer);
       if (response.status === 307 || response.status === 308) {
@@ -33,7 +37,7 @@ function createApiClient(options) {
           const targetBase = target.replace(/\/v1\/.*$/, "").replace(/\/$/, "");
           if (targetBase !== baseUrl) {
             baseUrl = targetBase;
-            return request(method, path, body, retries - 1);
+            return request(method, path, body, retries - 1, internalKind);
           }
         }
       }
@@ -41,7 +45,7 @@ function createApiClient(options) {
         const errorBody = await response.json().catch(() => ({}));
         if (response.status >= 500 && retries > 0) {
           await sleep(getBackoffDelay(maxRetries - retries));
-          return request(method, path, body, retries - 1);
+          return request(method, path, body, retries - 1, internalKind);
         }
         return {
           ok: false,
@@ -58,7 +62,7 @@ function createApiClient(options) {
       clearTimeout(timer);
       if (retries > 0 && isRetryable(error)) {
         await sleep(getBackoffDelay(maxRetries - retries));
-        return request(method, path, body, retries - 1);
+        return request(method, path, body, retries - 1, internalKind);
       }
       return {
         ok: false,
@@ -69,18 +73,87 @@ function createApiClient(options) {
       };
     }
   }
+  async function requestForReporter(method, path, reporterToken, body) {
+    const tokenHash = await sha256Hex(reporterToken);
+    const ts = String(Date.now());
+    const hmac = await hmacSha256Hex(apiKey, `${projectId}.${ts}.${tokenHash}`);
+    const url = `${baseUrl}${path}`;
+    const response = await fetch(url, {
+      method,
+      headers: {
+        "Content-Type": "application/json",
+        "X-Mushi-Api-Key": apiKey,
+        "X-Mushi-Project": projectId,
+        [MUSHI_INTERNAL_HEADER]: "reporter-poll",
+        "X-Reporter-Token-Hash": tokenHash,
+        "X-Reporter-Ts": ts,
+        "X-Reporter-Hmac": hmac
+      },
+      body: body ? JSON.stringify(body) : void 0,
+      [MUSHI_INTERNAL_INIT_MARKER]: "reporter-poll"
+    });
+    if (!response.ok) {
+      const errorBody = await response.json().catch(() => ({}));
+      return {
+        ok: false,
+        error: {
+          code: `HTTP_${response.status}`,
+          message: errorBody.error?.message ?? errorBody.message ?? `HTTP ${response.status} error`
+        }
+      };
+    }
+    const payload = await response.json();
+    return { ok: true, data: payload.data ?? payload };
+  }
   return {
     async submitReport(report) {
-      return request("POST", "/v1/reports", report);
+      return request("POST", "/v1/reports", report, maxRetries, "report-submit");
     },
     async getReportStatus(reportId) {
-      return request("GET", `/v1/reports/${reportId}/status`);
+      return request("GET", `/v1/reports/${reportId}/status`, void 0, maxRetries, "report-status");
     },
     async getSdkConfig() {
-      return request("GET", "/v1/sdk/config");
+      return request("GET", "/v1/sdk/config", void 0, maxRetries, "sdk-config");
+    },
+    async getLatestSdkVersion(packageName) {
+      const query = new URLSearchParams({ package: packageName }).toString();
+      return request("GET", `/v1/sdk/latest-version?${query}`, void 0, maxRetries, "sdk-config");
+    },
+    async listReporterReports(reporterToken) {
+      return requestForReporter("GET", "/v1/reporter/reports", reporterToken);
+    },
+    async listReporterComments(reportId, reporterToken) {
+      return requestForReporter(
+        "GET",
+        `/v1/reporter/reports/${reportId}/comments`,
+        reporterToken
+      );
+    },
+    async replyToReporterReport(reportId, reporterToken, body) {
+      return requestForReporter(
+        "POST",
+        `/v1/reporter/reports/${reportId}/reply`,
+        reporterToken,
+        { body }
+      );
     }
   };
 }
+async function sha256Hex(value) {
+  const buffer = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(value));
+  return Array.from(new Uint8Array(buffer)).map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+async function hmacSha256Hex(secret, value) {
+  const key = await crypto.subtle.importKey(
+    "raw",
+    new TextEncoder().encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const buffer = await crypto.subtle.sign("HMAC", key, new TextEncoder().encode(value));
+  return Array.from(new Uint8Array(buffer)).map((b) => b.toString(16).padStart(2, "0")).join("");
+}
 function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
@@ -774,7 +847,7 @@ function collectInputs() {
     hardwareConcurrency: nav?.hardwareConcurrency
   };
 }
-async function sha256Hex(input) {
+async function sha256Hex2(input) {
   if (typeof crypto !== "undefined" && crypto.subtle) {
     const buf = new TextEncoder().encode(input);
     const digest = await crypto.subtle.digest("SHA-256", buf);
@@ -794,7 +867,7 @@ async function getDeviceFingerprintHash() {
   }
   const inputs = collectInputs();
   const serialised = JSON.stringify(inputs);
-  const hash = await sha256Hex(serialised);
+  const hash = await sha256Hex2(serialised);
   if (typeof localStorage !== "undefined") {
     try {
       localStorage.setItem(CACHE_KEY, hash);
@@ -930,6 +1003,6 @@ function scrubPii(text, config) {
   return createPiiScrubber(config).scrub(text);
 }
 
-export { DEFAULT_API_ENDPOINT, REGION_ENDPOINTS, captureEnvironment, createApiClient, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, getDeviceFingerprintHash, getReporterToken, getSessionId, noopLogger, resolveRegionEndpoint, scrubPii };
+export { DEFAULT_API_ENDPOINT, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, REGION_ENDPOINTS, captureEnvironment, createApiClient, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, getDeviceFingerprintHash, getReporterToken, getSessionId, noopLogger, resolveRegionEndpoint, scrubPii };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map