@mushi-mushi/core 1.19.0 → 1.19.2

package/dist/index.d.cts

@@ -1536,6 +1536,8 @@ interface MushiCrossAppReport {
     project_id: string | null;
     app_name: string | null;
     app_slug: string | null;
+    /** Hostname from latest SDK heartbeat — used for favicon in cross-app list. */
+    app_domain?: string | null;
 }
 /** A single entry in the global tester leaderboard. */
 interface MushiLeaderboardEntry {
@@ -1557,6 +1559,22 @@ interface MushiTesterReputation {
     total_points: number;
 }
 
+/** Header carrying the signed end-user identity token (verified server-side). */
+declare const MUSHI_USER_TOKEN_HEADER = "X-Mushi-User-Token";
+/** Project scope header — paired with the API key on every SDK request. */
+declare const MUSHI_PROJECT_HEADER = "X-Mushi-Project";
+/** Build-time SDK package identity — recorded on every authenticated heartbeat. */
+declare const MUSHI_SDK_PACKAGE_HEADER = "X-Mushi-SDK-Package";
+declare const MUSHI_SDK_VERSION_HEADER = "X-Mushi-SDK-Version";
+/** Build the standard authenticated SDK ingest headers (shared by api-client + offline flush). */
+declare function buildSdkIngestHeaders(opts: {
+    apiKey: string;
+    projectId: string;
+    sdkPackage?: string;
+    sdkVersion?: string;
+    userToken?: string | null;
+    internalKind?: MushiInternalRequestKind;
+}): Record<string, string>;
 interface ApiClientOptions {
     projectId: string;
     apiKey: string;
@@ -2148,4 +2166,50 @@ declare function buildIdentityClaims(input: {
  */
 declare function parseIdentityToken(token: string): MushiIdentityClaims | null;
 
-export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_MOTION, MUSHI_RADIUS, MUSHI_SPACING, MUSHI_TYPE, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, buildIdentityClaims, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, estimateJsonBytes, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, parseIdentityToken, resolveEnvConfig, resolveRegionEndpoint, scrubPii };
+/**
+ * Shared favicon resolution helpers for admin console and SDK widget.
+ */
+interface ProjectFaviconSource {
+    project_id: string;
+    project_name: string;
+    project_slug: string;
+    /** Operator override — wins over inferred domain when set. */
+    icon_url?: string | null;
+    /** e.g. https://kensaur.us — from SDK heartbeat or API key last_seen_origin */
+    sdk_origin?: string | null;
+    /** Connected GitHub/GitLab repo — used when SDK has not heartbeated yet. */
+    repo_url?: string | null;
+}
+declare function isUntrustedFaviconUrl(url: string): boolean;
+/** Per-domain favicon URLs — first-party assets only (no CDN globes). */
+declare function faviconUrlCandidates(domain: string, _size?: number): string[];
+/** Ordered unique domains to try for a project (most specific first). */
+declare function resolveProjectFaviconDomains(source: ProjectFaviconSource): string[];
+/** Flat URL list across all candidate domains for a project. */
+declare function projectFaviconUrlCandidates(source: ProjectFaviconSource, size?: number): string[];
+declare function originToDomain(origin: string): string | null;
+/** Derive a production hostname from a connected repo URL when possible. */
+declare function githubRepoDomainHint(repoUrl: string | null | undefined): string | null;
+/** Best single domain — first entry from {@link resolveProjectFaviconDomains}. */
+declare function resolveProjectDomain(source: ProjectFaviconSource): string | null;
+/**
+ * Google's favicon CDN returns HTTP 200 with a gray globe when it has no icon.
+ * Treat low-saturation loaded images as "miss" so callers try the next URL or initials.
+ */
+declare function isLikelyGenericFavicon(img: HTMLImageElement): boolean;
+/** Two-letter initials for favicon fallback chips. */
+declare function projectInitials(name: string): string;
+/** Stable theme index (0–4) for initials chip coloring. */
+declare function projectInitialsThemeIndex(projectId: string): number;
+/**
+ * Read the host page favicon href (web SDK only).
+ *
+ * Security: the host page declares this value, so it could be a `data:`,
+ * `blob:`, or `javascript:` URL. Since the result is rendered into an
+ * `<img src>` inside the widget, only same-trust http(s) (and protocol-relative)
+ * URLs are returned; anything else falls back to `null` so the widget renders
+ * its default mark instead of an unvalidated, host-controlled resource.
+ */
+declare function readPageFaviconHref(): string | null;
+
+export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_MOTION, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SPACING, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, type ProjectFaviconSource, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, estimateJsonBytes, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, scrubPii };

package/dist/index.d.ts

@@ -1536,6 +1536,8 @@ interface MushiCrossAppReport {
     project_id: string | null;
     app_name: string | null;
     app_slug: string | null;
+    /** Hostname from latest SDK heartbeat — used for favicon in cross-app list. */
+    app_domain?: string | null;
 }
 /** A single entry in the global tester leaderboard. */
 interface MushiLeaderboardEntry {
@@ -1557,6 +1559,22 @@ interface MushiTesterReputation {
     total_points: number;
 }
 
+/** Header carrying the signed end-user identity token (verified server-side). */
+declare const MUSHI_USER_TOKEN_HEADER = "X-Mushi-User-Token";
+/** Project scope header — paired with the API key on every SDK request. */
+declare const MUSHI_PROJECT_HEADER = "X-Mushi-Project";
+/** Build-time SDK package identity — recorded on every authenticated heartbeat. */
+declare const MUSHI_SDK_PACKAGE_HEADER = "X-Mushi-SDK-Package";
+declare const MUSHI_SDK_VERSION_HEADER = "X-Mushi-SDK-Version";
+/** Build the standard authenticated SDK ingest headers (shared by api-client + offline flush). */
+declare function buildSdkIngestHeaders(opts: {
+    apiKey: string;
+    projectId: string;
+    sdkPackage?: string;
+    sdkVersion?: string;
+    userToken?: string | null;
+    internalKind?: MushiInternalRequestKind;
+}): Record<string, string>;
 interface ApiClientOptions {
     projectId: string;
     apiKey: string;
@@ -2148,4 +2166,50 @@ declare function buildIdentityClaims(input: {
  */
 declare function parseIdentityToken(token: string): MushiIdentityClaims | null;
 
-export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_MOTION, MUSHI_RADIUS, MUSHI_SPACING, MUSHI_TYPE, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, buildIdentityClaims, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, estimateJsonBytes, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, parseIdentityToken, resolveEnvConfig, resolveRegionEndpoint, scrubPii };
+/**
+ * Shared favicon resolution helpers for admin console and SDK widget.
+ */
+interface ProjectFaviconSource {
+    project_id: string;
+    project_name: string;
+    project_slug: string;
+    /** Operator override — wins over inferred domain when set. */
+    icon_url?: string | null;
+    /** e.g. https://kensaur.us — from SDK heartbeat or API key last_seen_origin */
+    sdk_origin?: string | null;
+    /** Connected GitHub/GitLab repo — used when SDK has not heartbeated yet. */
+    repo_url?: string | null;
+}
+declare function isUntrustedFaviconUrl(url: string): boolean;
+/** Per-domain favicon URLs — first-party assets only (no CDN globes). */
+declare function faviconUrlCandidates(domain: string, _size?: number): string[];
+/** Ordered unique domains to try for a project (most specific first). */
+declare function resolveProjectFaviconDomains(source: ProjectFaviconSource): string[];
+/** Flat URL list across all candidate domains for a project. */
+declare function projectFaviconUrlCandidates(source: ProjectFaviconSource, size?: number): string[];
+declare function originToDomain(origin: string): string | null;
+/** Derive a production hostname from a connected repo URL when possible. */
+declare function githubRepoDomainHint(repoUrl: string | null | undefined): string | null;
+/** Best single domain — first entry from {@link resolveProjectFaviconDomains}. */
+declare function resolveProjectDomain(source: ProjectFaviconSource): string | null;
+/**
+ * Google's favicon CDN returns HTTP 200 with a gray globe when it has no icon.
+ * Treat low-saturation loaded images as "miss" so callers try the next URL or initials.
+ */
+declare function isLikelyGenericFavicon(img: HTMLImageElement): boolean;
+/** Two-letter initials for favicon fallback chips. */
+declare function projectInitials(name: string): string;
+/** Stable theme index (0–4) for initials chip coloring. */
+declare function projectInitialsThemeIndex(projectId: string): number;
+/**
+ * Read the host page favicon href (web SDK only).
+ *
+ * Security: the host page declares this value, so it could be a `data:`,
+ * `blob:`, or `javascript:` URL. Since the result is rendered into an
+ * `<img src>` inside the widget, only same-trust http(s) (and protocol-relative)
+ * URLs are returned; anything else falls back to `null` so the widget renders
+ * its default mark instead of an unvalidated, host-controlled resource.
+ */
+declare function readPageFaviconHref(): string | null;
+
+export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_MOTION, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SPACING, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, type ProjectFaviconSource, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, estimateJsonBytes, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, scrubPii };

package/dist/index.js

@@ -41,9 +41,23 @@ function formatBytes(n) {
 }
 
 // src/api-client.ts
+var _credWarningEmitted = false;
 var MUSHI_USER_TOKEN_HEADER = "X-Mushi-User-Token";
+var MUSHI_PROJECT_HEADER = "X-Mushi-Project";
 var MUSHI_SDK_PACKAGE_HEADER = "X-Mushi-SDK-Package";
 var MUSHI_SDK_VERSION_HEADER = "X-Mushi-SDK-Version";
+function buildSdkIngestHeaders(opts) {
+  const headers = {
+    "Content-Type": "application/json",
+    "X-Mushi-Api-Key": opts.apiKey,
+    [MUSHI_PROJECT_HEADER]: opts.projectId
+  };
+  if (opts.sdkPackage) headers[MUSHI_SDK_PACKAGE_HEADER] = opts.sdkPackage;
+  if (opts.sdkVersion) headers[MUSHI_SDK_VERSION_HEADER] = opts.sdkVersion;
+  if (opts.userToken) headers[MUSHI_USER_TOKEN_HEADER] = opts.userToken;
+  if (opts.internalKind) headers[MUSHI_INTERNAL_HEADER] = opts.internalKind;
+  return headers;
+}
 var DEFAULT_API_ENDPOINT = "https://dxptnwrhwsqckaftyymj.supabase.co/functions/v1/api";
 var MUSHI_INTERNAL_HEADER = "X-Mushi-Internal";
 var MUSHI_INTERNAL_INIT_MARKER = "__mushiInternal";
@@ -70,13 +84,14 @@ function createApiClient(options) {
       const response = await fetch(url, {
         method,
         headers: {
-          "Content-Type": "application/json",
-          "X-Mushi-Api-Key": apiKey,
-          "X-Mushi-Project": projectId,
-          ...sdkPackage ? { [MUSHI_SDK_PACKAGE_HEADER]: sdkPackage } : {},
-          ...sdkVersion ? { [MUSHI_SDK_VERSION_HEADER]: sdkVersion } : {},
-          ...userToken ? { [MUSHI_USER_TOKEN_HEADER]: userToken } : {},
-          ...internalKind ? { [MUSHI_INTERNAL_HEADER]: internalKind } : {},
+          ...buildSdkIngestHeaders({
+            apiKey,
+            projectId,
+            sdkPackage,
+            sdkVersion,
+            userToken,
+            internalKind
+          }),
           ...extraHeaders
         },
         body: body ? JSON.stringify(body) : void 0,
@@ -96,6 +111,13 @@ function createApiClient(options) {
       }
       if (!response.ok) {
         const errorBody = await response.json().catch(() => ({}));
+        if ((response.status === 401 || response.status === 403) && !_credWarningEmitted) {
+          _credWarningEmitted = true;
+          const where = baseUrl === DEFAULT_API_ENDPOINT ? "Get the correct values at: https://kensaur.us/mushi-mushi/admin/projects" : "Get the correct values from your Mushi console's Projects page.";
+          console.error(
+            `[Mushi] Credentials rejected (HTTP ${response.status}). Check your Project ID and API key scope (must be "report:write"). ` + where
+          );
+        }
         if (response.status >= 500 && retries > 0) {
           await sleep(getBackoffDelay(maxRetries - retries));
           return request(method, path, body, retries - 1, internalKind, extraHeaders);
@@ -1804,6 +1826,190 @@ function parseIdentityToken(token) {
   }
 }
 
-export { DEFAULT_API_ENDPOINT, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_MOTION, MUSHI_RADIUS, MUSHI_SPACING, MUSHI_TYPE, MUSHI_Z, REGION_ENDPOINTS, buildIdentityClaims, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, estimateJsonBytes, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, parseIdentityToken, resolveEnvConfig, resolveRegionEndpoint, scrubPii };
+// src/favicon.ts
+var MULTI_TENANT_PARENT_HOSTS = /* @__PURE__ */ new Set(["kensaur.us", "www.kensaur.us"]);
+var SLUG_DOMAIN_HINTS = {
+  "glot-it": "glot.it",
+  glotit: "glot.it",
+  "solo-boss-cloud": "sbc-front.vercel.app",
+  "mushi-mushi": "mushimushi.dev"
+};
+var SLUG_ICON_URL_HINTS = {
+  "mushi-mushi": "https://kensaur.us/mushi-mushi/admin/favicon.svg",
+  "solo-boss-cloud": "https://sbc-front.vercel.app/favicon.svg",
+  "glot-it": "https://kensaur.us/glot-it/apple-touch-icon.png",
+  glotit: "https://kensaur.us/glot-it/apple-touch-icon.png"
+};
+var UNTRUSTED_FAVICON_HOSTS = [
+  "www.google.com",
+  "icons.duckduckgo.com",
+  "icon.horse"
+];
+function isUntrustedFaviconUrl(url) {
+  try {
+    const host = new URL(url).hostname.toLowerCase();
+    return UNTRUSTED_FAVICON_HOSTS.some((h) => host === h || host.endsWith(`.${h}`));
+  } catch {
+    return false;
+  }
+}
+function faviconUrlCandidates(domain, _size = 32) {
+  return [
+    `https://${domain}/favicon.svg`,
+    `https://${domain}/favicon.ico`,
+    `https://${domain}/favicon-32x32.png`,
+    `https://${domain}/apple-touch-icon.png`
+  ];
+}
+function resolveProjectFaviconDomains(source) {
+  const out = [];
+  const add = (d) => {
+    const n = d?.trim().toLowerCase();
+    if (!n || out.includes(n)) return;
+    out.push(n);
+  };
+  add(githubRepoDomainHint(source.repo_url));
+  add(SLUG_DOMAIN_HINTS[source.project_slug.toLowerCase()]);
+  const fromOrigin = source.sdk_origin ? originToDomain(source.sdk_origin) : null;
+  if (fromOrigin && !MULTI_TENANT_PARENT_HOSTS.has(fromOrigin)) {
+    add(fromOrigin);
+  }
+  return out;
+}
+function projectFaviconUrlCandidates(source, size = 32) {
+  if (source.icon_url?.trim()) return [source.icon_url.trim()];
+  const seen = /* @__PURE__ */ new Set();
+  const urls = [];
+  const push = (url) => {
+    if (!url || seen.has(url) || isUntrustedFaviconUrl(url)) return;
+    seen.add(url);
+    urls.push(url);
+  };
+  const slugHint = SLUG_ICON_URL_HINTS[source.project_slug.toLowerCase()];
+  if (slugHint) push(slugHint);
+  for (const domain of resolveProjectFaviconDomains(source)) {
+    for (const url of faviconUrlCandidates(domain, size)) {
+      push(url);
+    }
+  }
+  return urls;
+}
+function originToDomain(origin) {
+  const trimmed = origin.trim();
+  if (!trimmed) return null;
+  if (/^(capacitor|file|content|app):/i.test(trimmed)) return null;
+  try {
+    const url = new URL(trimmed.includes("://") ? trimmed : `https://${trimmed}`);
+    const host = url.hostname.toLowerCase();
+    if (host === "localhost" || host === "127.0.0.1" || host.endsWith(".local")) {
+      return null;
+    }
+    return host;
+  } catch {
+    return null;
+  }
+}
+function githubRepoDomainHint(repoUrl) {
+  if (!repoUrl?.trim()) return null;
+  try {
+    const u = new URL(repoUrl.trim());
+    const host = u.hostname.toLowerCase();
+    const parts = u.pathname.replace(/^\/+|\/+$/g, "").split("/").filter(Boolean);
+    if (parts.length < 2) return null;
+    const repo = parts[1].replace(/\.git$/i, "").toLowerCase();
+    if (/^[a-z0-9][a-z0-9.-]*\.[a-z]{2,}$/i.test(repo)) return repo;
+    if (host === "github.com" && repo.endsWith(".github.io")) return repo;
+    if (host !== "github.com" && host !== "www.github.com") return host;
+    return null;
+  } catch {
+    return null;
+  }
+}
+function resolveProjectDomain(source) {
+  return resolveProjectFaviconDomains(source)[0] ?? null;
+}
+function isLikelyGenericFavicon(img) {
+  if (typeof document === "undefined") return false;
+  if (!img.complete || img.naturalWidth === 0 || img.naturalHeight === 0) return false;
+  try {
+    const canvas = document.createElement("canvas");
+    const w = img.naturalWidth;
+    const h = img.naturalHeight;
+    canvas.width = w;
+    canvas.height = h;
+    const ctx = canvas.getContext("2d");
+    if (!ctx) return false;
+    ctx.drawImage(img, 0, 0);
+    const { data } = ctx.getImageData(0, 0, w, h);
+    let opaque = 0;
+    let satSum = 0;
+    let maxDiff = 0;
+    for (let i = 0; i < data.length; i += 4) {
+      const r = data[i];
+      const g = data[i + 1];
+      const b = data[i + 2];
+      const a = data[i + 3];
+      if (a < 128) continue;
+      opaque++;
+      const max = Math.max(r, g, b);
+      const min = Math.min(r, g, b);
+      const diff = max - min;
+      maxDiff = Math.max(maxDiff, diff);
+      satSum += diff;
+    }
+    if (opaque === 0) return true;
+    const avgSat = satSum / opaque;
+    return avgSat < 14 && maxDiff < 24;
+  } catch {
+    return isUntrustedFaviconUrl(img.src);
+  }
+}
+function projectInitials(name) {
+  const parts = name.trim().split(/[\s._-]+/).filter(Boolean);
+  if (parts.length >= 2) {
+    return `${parts[0][0] ?? ""}${parts[1][0] ?? ""}`.toUpperCase();
+  }
+  const compact = name.replace(/[^a-zA-Z0-9]/g, "");
+  return (compact.slice(0, 2) || name.slice(0, 2) || "?").toUpperCase();
+}
+var INITIALS_CHIP_THEMES = [
+  "info",
+  "brand",
+  "warn",
+  "ok",
+  "accent"
+];
+function projectInitialsThemeIndex(projectId) {
+  let hash = 0;
+  for (let i = 0; i < projectId.length; i++) {
+    hash = (hash + projectId.charCodeAt(i)) % INITIALS_CHIP_THEMES.length;
+  }
+  return hash;
+}
+function readPageFaviconHref() {
+  if (typeof document === "undefined") return null;
+  const selectors = [
+    'link[rel="icon"]',
+    'link[rel="shortcut icon"]',
+    'link[rel="apple-touch-icon"]'
+  ];
+  for (const sel of selectors) {
+    const link = document.querySelector(sel);
+    const href = link?.href;
+    if (href && isSafeFaviconHref(href)) return href;
+  }
+  return null;
+}
+function isSafeFaviconHref(href) {
+  try {
+    const base = typeof location !== "undefined" ? location.href : void 0;
+    const protocol = new URL(href, base).protocol;
+    return protocol === "http:" || protocol === "https:";
+  } catch {
+    return false;
+  }
+}
+
+export { DEFAULT_API_ENDPOINT, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_MOTION, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SPACING, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, REGION_ENDPOINTS, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, estimateJsonBytes, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, scrubPii };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map