@mushi-mushi/core 1.18.0 → 1.19.1

package/dist/index.d.cts

@@ -102,6 +102,20 @@ interface MushiWidgetConfig {
     brandFooter?: boolean;
     /** How the widget should surface SDK freshness warnings. Defaults to auto. */
     outdatedBanner?: 'auto' | 'banner' | 'console-only' | 'off';
+    /**
+     * Privacy nudge shown beside an attached screenshot preview, reminding the
+     * reporter to remove anything sensitive (balances, PII, tokens) before they
+     * submit. The widget always renders the captured image as a visible preview
+     * so the user can see exactly what will be sent and remove it if needed; this
+     * flag only controls the accompanying caption.
+     * - `true`  (default) — show the localized default caption.
+     * - string  — show this custom caption verbatim.
+     * - `false` — hide the caption (the preview + remove control still show).
+     *
+     * Settable per-host via the SDK config and remotely via the Mushi console
+     * runtime config (it travels in the `widget` block of `GET /v1/sdk/config`).
+     */
+    screenshotSensitiveHint?: boolean | string;
     /**
      * Beta mode: injects discreet "early access" messaging into the widget panel.
      * Shows a beta strip on the category step and a contact footer on the success
@@ -1522,6 +1536,8 @@ interface MushiCrossAppReport {
     project_id: string | null;
     app_name: string | null;
     app_slug: string | null;
+    /** Hostname from latest SDK heartbeat — used for favicon in cross-app list. */
+    app_domain?: string | null;
 }
 /** A single entry in the global tester leaderboard. */
 interface MushiLeaderboardEntry {
@@ -1543,6 +1559,22 @@ interface MushiTesterReputation {
     total_points: number;
 }
 
+/** Header carrying the signed end-user identity token (verified server-side). */
+declare const MUSHI_USER_TOKEN_HEADER = "X-Mushi-User-Token";
+/** Project scope header — paired with the API key on every SDK request. */
+declare const MUSHI_PROJECT_HEADER = "X-Mushi-Project";
+/** Build-time SDK package identity — recorded on every authenticated heartbeat. */
+declare const MUSHI_SDK_PACKAGE_HEADER = "X-Mushi-SDK-Package";
+declare const MUSHI_SDK_VERSION_HEADER = "X-Mushi-SDK-Version";
+/** Build the standard authenticated SDK ingest headers (shared by api-client + offline flush). */
+declare function buildSdkIngestHeaders(opts: {
+    apiKey: string;
+    projectId: string;
+    sdkPackage?: string;
+    sdkVersion?: string;
+    userToken?: string | null;
+    internalKind?: MushiInternalRequestKind;
+}): Record<string, string>;
 interface ApiClientOptions {
     projectId: string;
     apiKey: string;
@@ -2134,4 +2166,42 @@ declare function buildIdentityClaims(input: {
  */
 declare function parseIdentityToken(token: string): MushiIdentityClaims | null;
 
-export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_MOTION, MUSHI_RADIUS, MUSHI_SPACING, MUSHI_TYPE, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, buildIdentityClaims, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, estimateJsonBytes, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, parseIdentityToken, resolveEnvConfig, resolveRegionEndpoint, scrubPii };
+/**
+ * Shared favicon resolution helpers for admin console and SDK widget.
+ */
+interface ProjectFaviconSource {
+    project_id: string;
+    project_name: string;
+    project_slug: string;
+    /** Operator override — wins over inferred domain when set. */
+    icon_url?: string | null;
+    /** e.g. https://kensaur.us — from SDK heartbeat or API key last_seen_origin */
+    sdk_origin?: string | null;
+    /** Connected GitHub/GitLab repo — used when SDK has not heartbeated yet. */
+    repo_url?: string | null;
+}
+declare function isUntrustedFaviconUrl(url: string): boolean;
+/** Per-domain favicon URLs — first-party assets only (no CDN globes). */
+declare function faviconUrlCandidates(domain: string, _size?: number): string[];
+/** Ordered unique domains to try for a project (most specific first). */
+declare function resolveProjectFaviconDomains(source: ProjectFaviconSource): string[];
+/** Flat URL list across all candidate domains for a project. */
+declare function projectFaviconUrlCandidates(source: ProjectFaviconSource, size?: number): string[];
+declare function originToDomain(origin: string): string | null;
+/** Derive a production hostname from a connected repo URL when possible. */
+declare function githubRepoDomainHint(repoUrl: string | null | undefined): string | null;
+/** Best single domain — first entry from {@link resolveProjectFaviconDomains}. */
+declare function resolveProjectDomain(source: ProjectFaviconSource): string | null;
+/**
+ * Google's favicon CDN returns HTTP 200 with a gray globe when it has no icon.
+ * Treat low-saturation loaded images as "miss" so callers try the next URL or initials.
+ */
+declare function isLikelyGenericFavicon(img: HTMLImageElement): boolean;
+/** Two-letter initials for favicon fallback chips. */
+declare function projectInitials(name: string): string;
+/** Stable theme index (0–4) for initials chip coloring. */
+declare function projectInitialsThemeIndex(projectId: string): number;
+/** Read the host page favicon href (web SDK only). */
+declare function readPageFaviconHref(): string | null;
+
+export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_MOTION, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SPACING, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, type ProjectFaviconSource, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, estimateJsonBytes, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, scrubPii };

package/dist/index.d.ts

@@ -102,6 +102,20 @@ interface MushiWidgetConfig {
     brandFooter?: boolean;
     /** How the widget should surface SDK freshness warnings. Defaults to auto. */
     outdatedBanner?: 'auto' | 'banner' | 'console-only' | 'off';
+    /**
+     * Privacy nudge shown beside an attached screenshot preview, reminding the
+     * reporter to remove anything sensitive (balances, PII, tokens) before they
+     * submit. The widget always renders the captured image as a visible preview
+     * so the user can see exactly what will be sent and remove it if needed; this
+     * flag only controls the accompanying caption.
+     * - `true`  (default) — show the localized default caption.
+     * - string  — show this custom caption verbatim.
+     * - `false` — hide the caption (the preview + remove control still show).
+     *
+     * Settable per-host via the SDK config and remotely via the Mushi console
+     * runtime config (it travels in the `widget` block of `GET /v1/sdk/config`).
+     */
+    screenshotSensitiveHint?: boolean | string;
     /**
      * Beta mode: injects discreet "early access" messaging into the widget panel.
      * Shows a beta strip on the category step and a contact footer on the success
@@ -1522,6 +1536,8 @@ interface MushiCrossAppReport {
     project_id: string | null;
     app_name: string | null;
     app_slug: string | null;
+    /** Hostname from latest SDK heartbeat — used for favicon in cross-app list. */
+    app_domain?: string | null;
 }
 /** A single entry in the global tester leaderboard. */
 interface MushiLeaderboardEntry {
@@ -1543,6 +1559,22 @@ interface MushiTesterReputation {
     total_points: number;
 }
 
+/** Header carrying the signed end-user identity token (verified server-side). */
+declare const MUSHI_USER_TOKEN_HEADER = "X-Mushi-User-Token";
+/** Project scope header — paired with the API key on every SDK request. */
+declare const MUSHI_PROJECT_HEADER = "X-Mushi-Project";
+/** Build-time SDK package identity — recorded on every authenticated heartbeat. */
+declare const MUSHI_SDK_PACKAGE_HEADER = "X-Mushi-SDK-Package";
+declare const MUSHI_SDK_VERSION_HEADER = "X-Mushi-SDK-Version";
+/** Build the standard authenticated SDK ingest headers (shared by api-client + offline flush). */
+declare function buildSdkIngestHeaders(opts: {
+    apiKey: string;
+    projectId: string;
+    sdkPackage?: string;
+    sdkVersion?: string;
+    userToken?: string | null;
+    internalKind?: MushiInternalRequestKind;
+}): Record<string, string>;
 interface ApiClientOptions {
     projectId: string;
     apiKey: string;
@@ -2134,4 +2166,42 @@ declare function buildIdentityClaims(input: {
  */
 declare function parseIdentityToken(token: string): MushiIdentityClaims | null;
 
-export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_MOTION, MUSHI_RADIUS, MUSHI_SPACING, MUSHI_TYPE, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, buildIdentityClaims, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, estimateJsonBytes, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, parseIdentityToken, resolveEnvConfig, resolveRegionEndpoint, scrubPii };
+/**
+ * Shared favicon resolution helpers for admin console and SDK widget.
+ */
+interface ProjectFaviconSource {
+    project_id: string;
+    project_name: string;
+    project_slug: string;
+    /** Operator override — wins over inferred domain when set. */
+    icon_url?: string | null;
+    /** e.g. https://kensaur.us — from SDK heartbeat or API key last_seen_origin */
+    sdk_origin?: string | null;
+    /** Connected GitHub/GitLab repo — used when SDK has not heartbeated yet. */
+    repo_url?: string | null;
+}
+declare function isUntrustedFaviconUrl(url: string): boolean;
+/** Per-domain favicon URLs — first-party assets only (no CDN globes). */
+declare function faviconUrlCandidates(domain: string, _size?: number): string[];
+/** Ordered unique domains to try for a project (most specific first). */
+declare function resolveProjectFaviconDomains(source: ProjectFaviconSource): string[];
+/** Flat URL list across all candidate domains for a project. */
+declare function projectFaviconUrlCandidates(source: ProjectFaviconSource, size?: number): string[];
+declare function originToDomain(origin: string): string | null;
+/** Derive a production hostname from a connected repo URL when possible. */
+declare function githubRepoDomainHint(repoUrl: string | null | undefined): string | null;
+/** Best single domain — first entry from {@link resolveProjectFaviconDomains}. */
+declare function resolveProjectDomain(source: ProjectFaviconSource): string | null;
+/**
+ * Google's favicon CDN returns HTTP 200 with a gray globe when it has no icon.
+ * Treat low-saturation loaded images as "miss" so callers try the next URL or initials.
+ */
+declare function isLikelyGenericFavicon(img: HTMLImageElement): boolean;
+/** Two-letter initials for favicon fallback chips. */
+declare function projectInitials(name: string): string;
+/** Stable theme index (0–4) for initials chip coloring. */
+declare function projectInitialsThemeIndex(projectId: string): number;
+/** Read the host page favicon href (web SDK only). */
+declare function readPageFaviconHref(): string | null;
+
+export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_MOTION, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SPACING, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, type ProjectFaviconSource, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, estimateJsonBytes, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, scrubPii };

package/dist/index.js

@@ -41,9 +41,23 @@ function formatBytes(n) {
 }
 
 // src/api-client.ts
+var _credWarningEmitted = false;
 var MUSHI_USER_TOKEN_HEADER = "X-Mushi-User-Token";
+var MUSHI_PROJECT_HEADER = "X-Mushi-Project";
 var MUSHI_SDK_PACKAGE_HEADER = "X-Mushi-SDK-Package";
 var MUSHI_SDK_VERSION_HEADER = "X-Mushi-SDK-Version";
+function buildSdkIngestHeaders(opts) {
+  const headers = {
+    "Content-Type": "application/json",
+    "X-Mushi-Api-Key": opts.apiKey,
+    [MUSHI_PROJECT_HEADER]: opts.projectId
+  };
+  if (opts.sdkPackage) headers[MUSHI_SDK_PACKAGE_HEADER] = opts.sdkPackage;
+  if (opts.sdkVersion) headers[MUSHI_SDK_VERSION_HEADER] = opts.sdkVersion;
+  if (opts.userToken) headers[MUSHI_USER_TOKEN_HEADER] = opts.userToken;
+  if (opts.internalKind) headers[MUSHI_INTERNAL_HEADER] = opts.internalKind;
+  return headers;
+}
 var DEFAULT_API_ENDPOINT = "https://dxptnwrhwsqckaftyymj.supabase.co/functions/v1/api";
 var MUSHI_INTERNAL_HEADER = "X-Mushi-Internal";
 var MUSHI_INTERNAL_INIT_MARKER = "__mushiInternal";
@@ -70,13 +84,14 @@ function createApiClient(options) {
       const response = await fetch(url, {
         method,
         headers: {
-          "Content-Type": "application/json",
-          "X-Mushi-Api-Key": apiKey,
-          "X-Mushi-Project": projectId,
-          ...sdkPackage ? { [MUSHI_SDK_PACKAGE_HEADER]: sdkPackage } : {},
-          ...sdkVersion ? { [MUSHI_SDK_VERSION_HEADER]: sdkVersion } : {},
-          ...userToken ? { [MUSHI_USER_TOKEN_HEADER]: userToken } : {},
-          ...internalKind ? { [MUSHI_INTERNAL_HEADER]: internalKind } : {},
+          ...buildSdkIngestHeaders({
+            apiKey,
+            projectId,
+            sdkPackage,
+            sdkVersion,
+            userToken,
+            internalKind
+          }),
           ...extraHeaders
         },
         body: body ? JSON.stringify(body) : void 0,
@@ -96,6 +111,12 @@ function createApiClient(options) {
       }
       if (!response.ok) {
         const errorBody = await response.json().catch(() => ({}));
+        if ((response.status === 401 || response.status === 403) && !_credWarningEmitted) {
+          _credWarningEmitted = true;
+          console.error(
+            `[Mushi] Credentials rejected (HTTP ${response.status}). Check your Project ID and API key scope (must be "report:write"). Get the correct values at: https://kensaur.us/mushi-mushi/admin/projects`
+          );
+        }
         if (response.status >= 500 && retries > 0) {
           await sleep(getBackoffDelay(maxRetries - retries));
           return request(method, path, body, retries - 1, internalKind, extraHeaders);
@@ -998,6 +1019,30 @@ function createOfflineQueue(config = {}) {
       lsWrite(rows);
     }
   }
+  async function removeRow(backend, rowId) {
+    try {
+      if (backend === "indexeddb") await idbDelete(rowId);
+      else lsDelete(rowId);
+    } catch (err) {
+      queueLog.debug("Offline queue: row removal failed (will age out)", {
+        id: rowId,
+        err: String(err)
+      });
+    }
+  }
+  async function persistRow(backend, row) {
+    try {
+      if (backend === "indexeddb") await idbPutRow(row);
+      else lsUpdateRow(row);
+      return true;
+    } catch (err) {
+      queueLog.debug("Offline queue: row persist failed", {
+        id: row.id,
+        err: String(err)
+      });
+      return false;
+    }
+  }
   async function enqueue(report) {
     if (!enabled) return;
     const currentSize = await size();
@@ -1043,12 +1088,7 @@ function createOfflineQueue(config = {}) {
     for (const row of rows) {
       if (isExpired(row, now)) {
         const rowId = row.id;
-        try {
-          if (backend === "indexeddb") await idbDelete(rowId);
-          else lsDelete(rowId);
-        } catch {
-          lsDelete(rowId);
-        }
+        await removeRow(backend, rowId);
         queueLog.debug("Offline queue: evicting stale report", { id: rowId });
       } else {
         fresh.push(row);
@@ -1063,23 +1103,13 @@ function createOfflineQueue(config = {}) {
       const rowId = row.id;
       const report = await unwrapForSend(row);
       if (!report) {
-        try {
-          if (backend === "indexeddb") await idbDelete(rowId);
-          else lsDelete(rowId);
-        } catch {
-          lsDelete(rowId);
-        }
+        await removeRow(backend, rowId);
         failed++;
         continue;
       }
       const result = await client.submitReport(report);
       if (result.ok) {
-        try {
-          if (backend === "indexeddb") await idbDelete(rowId);
-          else lsDelete(rowId);
-        } catch {
-          lsDelete(rowId);
-        }
+        await removeRow(backend, rowId);
         sent++;
       } else {
         const permanent = result.error?.code === "HTTP_400" || result.error?.code === "HTTP_413" || result.error?.code === "HTTP_422" || result.error?.code === "INGEST_ERROR" || result.error?.code === "VALIDATION_ERROR" || // A payload that exceeds the size guard will never shrink on its own;
@@ -1091,21 +1121,11 @@ function createOfflineQueue(config = {}) {
         );
         const transient = !permanent && (result.error?.code === "NETWORK_ERROR" || result.error?.code === "HTTP_403" || result.error?.code === "HTTP_429" || result.error?.code === "HTTP_502" || result.error?.code === "HTTP_503" || result.error?.code === "HTTP_504" || typeof result.error?.code === "string" && result.error.code.startsWith("HTTP_5"));
         if (permanent) {
-          try {
-            if (backend === "indexeddb") await idbDelete(rowId);
-            else lsDelete(rowId);
-          } catch {
-            lsDelete(rowId);
-          }
+          await removeRow(backend, rowId);
         } else if (transient) {
           const nextAttempts = rowAttempts(row) + 1;
           if (nextAttempts >= MAX_DELIVERY_ATTEMPTS) {
-            try {
-              if (backend === "indexeddb") await idbDelete(rowId);
-              else lsDelete(rowId);
-            } catch {
-              lsDelete(rowId);
-            }
+            await removeRow(backend, rowId);
             queueLog.warn("Offline queue: giving up on report after repeated failures", {
               id: rowId,
               attempts: nextAttempts,
@@ -1113,17 +1133,20 @@ function createOfflineQueue(config = {}) {
             });
           } else {
             row.attempts = nextAttempts;
-            try {
-              if (backend === "indexeddb") await idbPutRow(row);
-              else lsUpdateRow(row);
-            } catch {
-              lsUpdateRow(row);
+            const persisted = await persistRow(backend, row);
+            if (persisted) {
+              queueLog.debug("Offline queue: transient failure, will retry", {
+                id: rowId,
+                attempts: nextAttempts,
+                code: result.error?.code
+              });
+            } else {
+              await removeRow(backend, rowId);
+              queueLog.warn("Offline queue: dropping report (attempt counter unpersistable)", {
+                id: rowId,
+                code: result.error?.code
+              });
             }
-            queueLog.debug("Offline queue: transient failure, will retry", {
-              id: rowId,
-              attempts: nextAttempts,
-              code: result.error?.code
-            });
           }
         }
         failed++;
@@ -1802,6 +1825,180 @@ function parseIdentityToken(token) {
   }
 }
 
-export { DEFAULT_API_ENDPOINT, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_MOTION, MUSHI_RADIUS, MUSHI_SPACING, MUSHI_TYPE, MUSHI_Z, REGION_ENDPOINTS, buildIdentityClaims, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, estimateJsonBytes, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, parseIdentityToken, resolveEnvConfig, resolveRegionEndpoint, scrubPii };
+// src/favicon.ts
+var MULTI_TENANT_PARENT_HOSTS = /* @__PURE__ */ new Set(["kensaur.us", "www.kensaur.us"]);
+var SLUG_DOMAIN_HINTS = {
+  "glot-it": "glot.it",
+  glotit: "glot.it",
+  "solo-boss-cloud": "sbc-front.vercel.app",
+  "mushi-mushi": "mushimushi.dev"
+};
+var SLUG_ICON_URL_HINTS = {
+  "mushi-mushi": "https://kensaur.us/mushi-mushi/admin/favicon.svg",
+  "solo-boss-cloud": "https://sbc-front.vercel.app/favicon.svg",
+  "glot-it": "https://kensaur.us/glot-it/apple-touch-icon.png",
+  glotit: "https://kensaur.us/glot-it/apple-touch-icon.png"
+};
+var UNTRUSTED_FAVICON_HOSTS = [
+  "www.google.com",
+  "icons.duckduckgo.com",
+  "icon.horse"
+];
+function isUntrustedFaviconUrl(url) {
+  try {
+    const host = new URL(url).hostname.toLowerCase();
+    return UNTRUSTED_FAVICON_HOSTS.some((h) => host === h || host.endsWith(`.${h}`));
+  } catch {
+    return false;
+  }
+}
+function faviconUrlCandidates(domain, _size = 32) {
+  return [
+    `https://${domain}/favicon.svg`,
+    `https://${domain}/favicon.ico`,
+    `https://${domain}/favicon-32x32.png`,
+    `https://${domain}/apple-touch-icon.png`
+  ];
+}
+function resolveProjectFaviconDomains(source) {
+  const out = [];
+  const add = (d) => {
+    const n = d?.trim().toLowerCase();
+    if (!n || out.includes(n)) return;
+    out.push(n);
+  };
+  add(githubRepoDomainHint(source.repo_url));
+  add(SLUG_DOMAIN_HINTS[source.project_slug.toLowerCase()]);
+  const fromOrigin = source.sdk_origin ? originToDomain(source.sdk_origin) : null;
+  if (fromOrigin && !MULTI_TENANT_PARENT_HOSTS.has(fromOrigin)) {
+    add(fromOrigin);
+  }
+  return out;
+}
+function projectFaviconUrlCandidates(source, size = 32) {
+  if (source.icon_url?.trim()) return [source.icon_url.trim()];
+  const seen = /* @__PURE__ */ new Set();
+  const urls = [];
+  const push = (url) => {
+    if (!url || seen.has(url) || isUntrustedFaviconUrl(url)) return;
+    seen.add(url);
+    urls.push(url);
+  };
+  const slugHint = SLUG_ICON_URL_HINTS[source.project_slug.toLowerCase()];
+  if (slugHint) push(slugHint);
+  for (const domain of resolveProjectFaviconDomains(source)) {
+    for (const url of faviconUrlCandidates(domain, size)) {
+      push(url);
+    }
+  }
+  return urls;
+}
+function originToDomain(origin) {
+  const trimmed = origin.trim();
+  if (!trimmed) return null;
+  if (/^(capacitor|file|content|app):/i.test(trimmed)) return null;
+  try {
+    const url = new URL(trimmed.includes("://") ? trimmed : `https://${trimmed}`);
+    const host = url.hostname.toLowerCase();
+    if (host === "localhost" || host === "127.0.0.1" || host.endsWith(".local")) {
+      return null;
+    }
+    return host;
+  } catch {
+    return null;
+  }
+}
+function githubRepoDomainHint(repoUrl) {
+  if (!repoUrl?.trim()) return null;
+  try {
+    const u = new URL(repoUrl.trim());
+    const host = u.hostname.toLowerCase();
+    const parts = u.pathname.replace(/^\/+|\/+$/g, "").split("/").filter(Boolean);
+    if (parts.length < 2) return null;
+    const repo = parts[1].replace(/\.git$/i, "").toLowerCase();
+    if (/^[a-z0-9][a-z0-9.-]*\.[a-z]{2,}$/i.test(repo)) return repo;
+    if (host === "github.com" && repo.endsWith(".github.io")) return repo;
+    if (host !== "github.com" && host !== "www.github.com") return host;
+    return null;
+  } catch {
+    return null;
+  }
+}
+function resolveProjectDomain(source) {
+  return resolveProjectFaviconDomains(source)[0] ?? null;
+}
+function isLikelyGenericFavicon(img) {
+  if (typeof document === "undefined") return false;
+  if (!img.complete || img.naturalWidth === 0 || img.naturalHeight === 0) return false;
+  try {
+    const canvas = document.createElement("canvas");
+    const w = img.naturalWidth;
+    const h = img.naturalHeight;
+    canvas.width = w;
+    canvas.height = h;
+    const ctx = canvas.getContext("2d");
+    if (!ctx) return false;
+    ctx.drawImage(img, 0, 0);
+    const { data } = ctx.getImageData(0, 0, w, h);
+    let opaque = 0;
+    let satSum = 0;
+    let maxDiff = 0;
+    for (let i = 0; i < data.length; i += 4) {
+      const r = data[i];
+      const g = data[i + 1];
+      const b = data[i + 2];
+      const a = data[i + 3];
+      if (a < 128) continue;
+      opaque++;
+      const max = Math.max(r, g, b);
+      const min = Math.min(r, g, b);
+      const diff = max - min;
+      maxDiff = Math.max(maxDiff, diff);
+      satSum += diff;
+    }
+    if (opaque === 0) return true;
+    const avgSat = satSum / opaque;
+    return avgSat < 14 && maxDiff < 24;
+  } catch {
+    return isUntrustedFaviconUrl(img.src);
+  }
+}
+function projectInitials(name) {
+  const parts = name.trim().split(/[\s._-]+/).filter(Boolean);
+  if (parts.length >= 2) {
+    return `${parts[0][0] ?? ""}${parts[1][0] ?? ""}`.toUpperCase();
+  }
+  const compact = name.replace(/[^a-zA-Z0-9]/g, "");
+  return (compact.slice(0, 2) || name.slice(0, 2) || "?").toUpperCase();
+}
+var INITIALS_CHIP_THEMES = [
+  "info",
+  "brand",
+  "warn",
+  "ok",
+  "accent"
+];
+function projectInitialsThemeIndex(projectId) {
+  let hash = 0;
+  for (let i = 0; i < projectId.length; i++) {
+    hash = (hash + projectId.charCodeAt(i)) % INITIALS_CHIP_THEMES.length;
+  }
+  return hash;
+}
+function readPageFaviconHref() {
+  if (typeof document === "undefined") return null;
+  const selectors = [
+    'link[rel="icon"]',
+    'link[rel="shortcut icon"]',
+    'link[rel="apple-touch-icon"]'
+  ];
+  for (const sel of selectors) {
+    const link = document.querySelector(sel);
+    if (link?.href) return link.href;
+  }
+  return null;
+}
+
+export { DEFAULT_API_ENDPOINT, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_MOTION, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SPACING, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, REGION_ENDPOINTS, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, estimateJsonBytes, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, scrubPii };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map