@mushi-mushi/core 1.23.0 → 1.26.0

package/dist/index.d.cts

@@ -1390,6 +1390,10 @@ interface MushiApiClient {
     postDiscoveryEvent(event: MushiDiscoveryEventPayload): Promise<MushiApiResponse<{
         accepted: boolean;
     }>>;
+    /** POST /v1/sdk/session — lightweight session lifecycle event (best-effort). */
+    postSessionEvent(payload: MushiSessionEventPayload): Promise<MushiApiResponse<{
+        accepted: boolean;
+    }>>;
     listReporterReports(reporterToken: string): Promise<MushiApiResponse<{
         reports: MushiReporterReport[];
     }>>;
@@ -1520,6 +1524,28 @@ interface MushiDiscoveryEventPayload {
     sdk_version?: string;
     observed_at: string;
 }
+/** Payload for /v1/sdk/session — lightweight session lifecycle tracking.
+ *  Best-effort, no offline queue. Privacy-safe: no PII by default;
+ *  `user_id_hash` is the same device-fingerprint hash used elsewhere. */
+interface MushiSessionEventPayload {
+    /** Lifecycle event kind. */
+    kind: 'session_start' | 'session_heartbeat' | 'session_end' | 'page_view';
+    session_id: string;
+    /** ISO timestamp of the event. */
+    ts: string;
+    /** Entry route for session_start; current route for page_view. */
+    route?: string | null;
+    /** document.referrer on session_start. */
+    referrer?: string | null;
+    /** Total page views in this session so far (updated on heartbeat/end). */
+    page_view_count?: number;
+    /** Device fingerprint hash — same token used in reports. */
+    reporter_token_hash?: string | null;
+    /** user_id_hash when the host app called Mushi.identify(). */
+    user_id_hash?: string | null;
+    user_agent?: string | null;
+    sdk_version?: string;
+}
 interface MushiApiResponse<T> {
     ok: boolean;
     data?: T;
@@ -1932,6 +1958,48 @@ declare function getDeviceFingerprintHash(): Promise<string | null>;
 
 declare function getSessionId(): string;
 
+/**
+ * FILE: packages/core/src/session-tracker.ts
+ * PURPOSE: Lightweight session-lifecycle tracking for the Mushi SDK.
+ *
+ * Emits best-effort events to /v1/sdk/session so the console can show per-
+ * project activity analytics (DAU/WAU, page views, identified vs. anonymous
+ * user split, top routes). Mirrors the postDiscoveryEvent pattern: 1 retry,
+ * no offline queue, fire-and-forget after visibility-change.
+ *
+ * Privacy:
+ *   - No PII by default. `reporter_token_hash` is the same opaque device
+ *     fingerprint already used in reports. `user_id_hash` is only set when
+ *     the host app calls Mushi.identify().
+ *   - Respects the SDK-level `trackSessions: false` opt-out option.
+ *   - Respects a DNT / Global Privacy Control header at the SDK init layer;
+ *     callers should check `shouldRespectDnt()` before calling `initSession`.
+ */
+
+interface SessionTrackerOptions {
+    client: MushiApiClient;
+    sdkVersion?: string;
+    reporterTokenHash?: string | null;
+    userIdHash?: string | null;
+}
+/**
+ * Initialise the session tracker. Call once at SDK init for web environments.
+ * Subsequent calls on the same page are no-ops (idempotent).
+ *
+ * Emits: session_start immediately, heartbeats every minute, session_end on
+ * visibilitychange/pagehide, and page_view on history API navigation.
+ */
+declare function initSessionTracker(opts: SessionTrackerOptions): void;
+/**
+ * Record a page view manually — call from framework router hooks where the
+ * history patch may fire too early (e.g. React Router v7 loader transitions).
+ */
+declare function trackPageView(route?: string): void;
+/** Update the user identity after a Mushi.identify() call. */
+declare function updateSessionIdentity(userIdHash: string | null): void;
+/** Tear down timers (e.g. in tests or SSR environments). */
+declare function destroySessionTracker(): void;
+
 interface RateLimiterConfig {
     maxBurst?: number;
     refillRate?: number;
@@ -2202,6 +2270,13 @@ declare const MUSHI_BANNER_NEON: {
 declare const MUSHI_ON_ACCENT = "#FAF7F0";
 /** Pure white for assistant bubbles on accent backgrounds. */
 declare const MUSHI_INVERSE = "#ffffff";
+/** Disabled control fill (inactive category chips, muted buttons). */
+declare const MUSHI_CONTROL_DISABLED: {
+    readonly light: "#d1d1d6";
+    readonly dark: "#3a3a3c";
+};
+/** Drop-shadow ink for RN shadowColor (sumi black). */
+declare const MUSHI_SHADOW_INK = "#000000";
 /** Submit-button depth shadow (accent ink, mode-specific). */
 declare const MUSHI_ACCENT_SHADOW: {
     readonly light: "#9A2A1E";
@@ -2272,6 +2347,48 @@ declare const MUSHI_MOTION: {
     readonly durationFast: 200;
     readonly durationPanel: 300;
 };
+/**
+ * Full duration vocabulary (ms). MUSHI_MOTION retains its two values for
+ * back-compat; this set adds the missing steps for micro-interactions and
+ * expressive animations without changing the RN / Capacitor snapshot.
+ */
+declare const MUSHI_DURATION: {
+    /** Fastest — tooltip show, chip hover tint */
+    readonly instant: 120;
+    /** Default micro-interaction — most hover / focus transitions */
+    readonly fast: 200;
+    /** Button bloom, option-row wipe */
+    readonly base: 220;
+    /** Panel enter / exit */
+    readonly panel: 300;
+    /** Deliberate — success stamp press, page-level transitions */
+    readonly slow: 420;
+    /** Stamp ring draw, long ambient animations */
+    readonly ring: 700;
+};
+/** Border widths (px) — editorial weight scale. */
+declare const MUSHI_BORDER: {
+    readonly hairline: 1;
+    readonly regular: 1.5;
+    readonly strong: 2;
+    /** Hanko stamp border (FAB inset accent stripe, stamp ring) */
+    readonly stamp: 3;
+};
+/** Opacity scale — disabled, muted, scrim, overlay states. */
+declare const MUSHI_OPACITY: {
+    readonly disabled: 0.4;
+    readonly muted: 0.6;
+    readonly scrim: 0.72;
+    readonly overlay: 0.88;
+};
+/** Letter-spacing scale — mono captions to wide stamp labels. */
+declare const MUSHI_LETTER_SPACING: {
+    readonly tight: "-0.01em";
+    readonly normal: "0";
+    readonly label: "0.02em";
+    readonly stamp: "0.08em";
+    readonly wide: "0.16em";
+};
 /**
  * Launcher geometry — the numbers that previously diverged between platforms
  * (banner height, FAB size, default gutter, panel width). Centralising them
@@ -2325,6 +2442,8 @@ interface MushiTokenSnapshot {
     type: typeof MUSHI_TYPE;
     z: typeof MUSHI_Z;
     motion: typeof MUSHI_MOTION;
+    /** Full duration vocabulary — complements `motion` for micro / stamp steps. */
+    duration: typeof MUSHI_DURATION;
     geometry: typeof MUSHI_GEOMETRY;
     copy: typeof MUSHI_COPY;
 }
@@ -2435,4 +2554,4 @@ declare function projectInitialsThemeIndex(projectId: string): number;
  */
 declare function readPageFaviconHref(): string | null;
 
-export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, DEFAULT_MAX_RETRIES, DEFAULT_TIMEOUT, type EnvConfigDiagnostics, type EnvNearMiss, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_ACCENT_SHADOW, MUSHI_BANNER_BRAND_BORDER, MUSHI_BANNER_NEON, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_INVERSE, MUSHI_MOTION, MUSHI_ON_ACCENT, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_REPORTER_STATUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SPACING, MUSHI_TIER_COLORS, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, type ProjectFaviconSource, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, diagnoseEnvConfig, estimateJsonBytes, expandPreset, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, hmacSha256Hex, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, resolveWidgetAccent, safeWidgetHex, scrubPii, sha256Hex, validateConfig };
+export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, DEFAULT_MAX_RETRIES, DEFAULT_TIMEOUT, type EnvConfigDiagnostics, type EnvNearMiss, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_ACCENT_SHADOW, MUSHI_BANNER_BRAND_BORDER, MUSHI_BANNER_NEON, MUSHI_BORDER, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_CONTROL_DISABLED, MUSHI_COPY, MUSHI_DURATION, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_INVERSE, MUSHI_LETTER_SPACING, MUSHI_MOTION, MUSHI_ON_ACCENT, MUSHI_OPACITY, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_REPORTER_STATUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SHADOW_INK, MUSHI_SPACING, MUSHI_TIER_COLORS, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiSessionEventPayload, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, type ProjectFaviconSource, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, type SessionTrackerOptions, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, destroySessionTracker, diagnoseEnvConfig, estimateJsonBytes, expandPreset, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, hmacSha256Hex, initSessionTracker, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, resolveWidgetAccent, safeWidgetHex, scrubPii, sha256Hex, trackPageView, updateSessionIdentity, validateConfig };

package/dist/index.d.ts

@@ -1390,6 +1390,10 @@ interface MushiApiClient {
     postDiscoveryEvent(event: MushiDiscoveryEventPayload): Promise<MushiApiResponse<{
         accepted: boolean;
     }>>;
+    /** POST /v1/sdk/session — lightweight session lifecycle event (best-effort). */
+    postSessionEvent(payload: MushiSessionEventPayload): Promise<MushiApiResponse<{
+        accepted: boolean;
+    }>>;
     listReporterReports(reporterToken: string): Promise<MushiApiResponse<{
         reports: MushiReporterReport[];
     }>>;
@@ -1520,6 +1524,28 @@ interface MushiDiscoveryEventPayload {
     sdk_version?: string;
     observed_at: string;
 }
+/** Payload for /v1/sdk/session — lightweight session lifecycle tracking.
+ *  Best-effort, no offline queue. Privacy-safe: no PII by default;
+ *  `user_id_hash` is the same device-fingerprint hash used elsewhere. */
+interface MushiSessionEventPayload {
+    /** Lifecycle event kind. */
+    kind: 'session_start' | 'session_heartbeat' | 'session_end' | 'page_view';
+    session_id: string;
+    /** ISO timestamp of the event. */
+    ts: string;
+    /** Entry route for session_start; current route for page_view. */
+    route?: string | null;
+    /** document.referrer on session_start. */
+    referrer?: string | null;
+    /** Total page views in this session so far (updated on heartbeat/end). */
+    page_view_count?: number;
+    /** Device fingerprint hash — same token used in reports. */
+    reporter_token_hash?: string | null;
+    /** user_id_hash when the host app called Mushi.identify(). */
+    user_id_hash?: string | null;
+    user_agent?: string | null;
+    sdk_version?: string;
+}
 interface MushiApiResponse<T> {
     ok: boolean;
     data?: T;
@@ -1932,6 +1958,48 @@ declare function getDeviceFingerprintHash(): Promise<string | null>;
 
 declare function getSessionId(): string;
 
+/**
+ * FILE: packages/core/src/session-tracker.ts
+ * PURPOSE: Lightweight session-lifecycle tracking for the Mushi SDK.
+ *
+ * Emits best-effort events to /v1/sdk/session so the console can show per-
+ * project activity analytics (DAU/WAU, page views, identified vs. anonymous
+ * user split, top routes). Mirrors the postDiscoveryEvent pattern: 1 retry,
+ * no offline queue, fire-and-forget after visibility-change.
+ *
+ * Privacy:
+ *   - No PII by default. `reporter_token_hash` is the same opaque device
+ *     fingerprint already used in reports. `user_id_hash` is only set when
+ *     the host app calls Mushi.identify().
+ *   - Respects the SDK-level `trackSessions: false` opt-out option.
+ *   - Respects a DNT / Global Privacy Control header at the SDK init layer;
+ *     callers should check `shouldRespectDnt()` before calling `initSession`.
+ */
+
+interface SessionTrackerOptions {
+    client: MushiApiClient;
+    sdkVersion?: string;
+    reporterTokenHash?: string | null;
+    userIdHash?: string | null;
+}
+/**
+ * Initialise the session tracker. Call once at SDK init for web environments.
+ * Subsequent calls on the same page are no-ops (idempotent).
+ *
+ * Emits: session_start immediately, heartbeats every minute, session_end on
+ * visibilitychange/pagehide, and page_view on history API navigation.
+ */
+declare function initSessionTracker(opts: SessionTrackerOptions): void;
+/**
+ * Record a page view manually — call from framework router hooks where the
+ * history patch may fire too early (e.g. React Router v7 loader transitions).
+ */
+declare function trackPageView(route?: string): void;
+/** Update the user identity after a Mushi.identify() call. */
+declare function updateSessionIdentity(userIdHash: string | null): void;
+/** Tear down timers (e.g. in tests or SSR environments). */
+declare function destroySessionTracker(): void;
+
 interface RateLimiterConfig {
     maxBurst?: number;
     refillRate?: number;
@@ -2202,6 +2270,13 @@ declare const MUSHI_BANNER_NEON: {
 declare const MUSHI_ON_ACCENT = "#FAF7F0";
 /** Pure white for assistant bubbles on accent backgrounds. */
 declare const MUSHI_INVERSE = "#ffffff";
+/** Disabled control fill (inactive category chips, muted buttons). */
+declare const MUSHI_CONTROL_DISABLED: {
+    readonly light: "#d1d1d6";
+    readonly dark: "#3a3a3c";
+};
+/** Drop-shadow ink for RN shadowColor (sumi black). */
+declare const MUSHI_SHADOW_INK = "#000000";
 /** Submit-button depth shadow (accent ink, mode-specific). */
 declare const MUSHI_ACCENT_SHADOW: {
     readonly light: "#9A2A1E";
@@ -2272,6 +2347,48 @@ declare const MUSHI_MOTION: {
     readonly durationFast: 200;
     readonly durationPanel: 300;
 };
+/**
+ * Full duration vocabulary (ms). MUSHI_MOTION retains its two values for
+ * back-compat; this set adds the missing steps for micro-interactions and
+ * expressive animations without changing the RN / Capacitor snapshot.
+ */
+declare const MUSHI_DURATION: {
+    /** Fastest — tooltip show, chip hover tint */
+    readonly instant: 120;
+    /** Default micro-interaction — most hover / focus transitions */
+    readonly fast: 200;
+    /** Button bloom, option-row wipe */
+    readonly base: 220;
+    /** Panel enter / exit */
+    readonly panel: 300;
+    /** Deliberate — success stamp press, page-level transitions */
+    readonly slow: 420;
+    /** Stamp ring draw, long ambient animations */
+    readonly ring: 700;
+};
+/** Border widths (px) — editorial weight scale. */
+declare const MUSHI_BORDER: {
+    readonly hairline: 1;
+    readonly regular: 1.5;
+    readonly strong: 2;
+    /** Hanko stamp border (FAB inset accent stripe, stamp ring) */
+    readonly stamp: 3;
+};
+/** Opacity scale — disabled, muted, scrim, overlay states. */
+declare const MUSHI_OPACITY: {
+    readonly disabled: 0.4;
+    readonly muted: 0.6;
+    readonly scrim: 0.72;
+    readonly overlay: 0.88;
+};
+/** Letter-spacing scale — mono captions to wide stamp labels. */
+declare const MUSHI_LETTER_SPACING: {
+    readonly tight: "-0.01em";
+    readonly normal: "0";
+    readonly label: "0.02em";
+    readonly stamp: "0.08em";
+    readonly wide: "0.16em";
+};
 /**
  * Launcher geometry — the numbers that previously diverged between platforms
  * (banner height, FAB size, default gutter, panel width). Centralising them
@@ -2325,6 +2442,8 @@ interface MushiTokenSnapshot {
     type: typeof MUSHI_TYPE;
     z: typeof MUSHI_Z;
     motion: typeof MUSHI_MOTION;
+    /** Full duration vocabulary — complements `motion` for micro / stamp steps. */
+    duration: typeof MUSHI_DURATION;
     geometry: typeof MUSHI_GEOMETRY;
     copy: typeof MUSHI_COPY;
 }
@@ -2435,4 +2554,4 @@ declare function projectInitialsThemeIndex(projectId: string): number;
  */
 declare function readPageFaviconHref(): string | null;
 
-export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, DEFAULT_MAX_RETRIES, DEFAULT_TIMEOUT, type EnvConfigDiagnostics, type EnvNearMiss, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_ACCENT_SHADOW, MUSHI_BANNER_BRAND_BORDER, MUSHI_BANNER_NEON, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_INVERSE, MUSHI_MOTION, MUSHI_ON_ACCENT, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_REPORTER_STATUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SPACING, MUSHI_TIER_COLORS, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, type ProjectFaviconSource, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, diagnoseEnvConfig, estimateJsonBytes, expandPreset, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, hmacSha256Hex, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, resolveWidgetAccent, safeWidgetHex, scrubPii, sha256Hex, validateConfig };
+export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, DEFAULT_MAX_RETRIES, DEFAULT_TIMEOUT, type EnvConfigDiagnostics, type EnvNearMiss, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_ACCENT_SHADOW, MUSHI_BANNER_BRAND_BORDER, MUSHI_BANNER_NEON, MUSHI_BORDER, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_CONTROL_DISABLED, MUSHI_COPY, MUSHI_DURATION, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_INVERSE, MUSHI_LETTER_SPACING, MUSHI_MOTION, MUSHI_ON_ACCENT, MUSHI_OPACITY, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_REPORTER_STATUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SHADOW_INK, MUSHI_SPACING, MUSHI_TIER_COLORS, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiSessionEventPayload, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, type ProjectFaviconSource, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, type SessionTrackerOptions, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, destroySessionTracker, diagnoseEnvConfig, estimateJsonBytes, expandPreset, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, hmacSha256Hex, initSessionTracker, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, resolveWidgetAccent, safeWidgetHex, scrubPii, sha256Hex, trackPageView, updateSessionIdentity, validateConfig };

package/dist/index.js

@@ -358,6 +358,17 @@ function createApiClient(options) {
       );
     },
     // ─── Rewards program (P1) ──────────────────────────────────
+    /** POST /v1/sdk/session — lightweight session lifecycle events.
+     *  Best-effort (1 retry, no offline queue) — mirrors postDiscoveryEvent. */
+    async postSessionEvent(payload) {
+      return request(
+        "POST",
+        "/v1/sdk/session",
+        payload,
+        1,
+        "discovery"
+      );
+    },
     async submitActivity(userId, events, opts) {
       return request(
         "POST",
@@ -1167,12 +1178,12 @@ function createOfflineQueue(config = {}) {
     const n = row.attempts;
     return typeof n === "number" && Number.isFinite(n) ? n : 0;
   }
-  function isExpired(row, now) {
+  function isExpired(row, now2) {
     const queuedAt = row.queuedAt;
     if (!queuedAt) return false;
     const ts = Date.parse(queuedAt);
     if (Number.isNaN(ts)) return false;
-    return now - ts > MAX_QUEUE_AGE_MS;
+    return now2 - ts > MAX_QUEUE_AGE_MS;
   }
   function detectBackend() {
     if (backendType) return backendType;
@@ -1351,10 +1362,10 @@ function createOfflineQueue(config = {}) {
     } else {
       rows = lsRead();
     }
-    const now = Date.now();
+    const now2 = Date.now();
     const fresh = [];
     for (const row of rows) {
-      if (isExpired(row, now)) {
+      if (isExpired(row, now2)) {
         const rowId = row.id;
         await removeRow(backend, rowId);
         queueLog.debug("Offline queue: evicting stale report", { id: rowId });
@@ -1819,6 +1830,111 @@ function randomSuffix() {
   return n.toString(36).padStart(6, "0").slice(0, 6);
 }
 
+// src/session-tracker.ts
+var HEARTBEAT_INTERVAL_MS = 6e4;
+var _client = null;
+var _sdkVersion;
+var _userIdHash = null;
+var _reporterTokenHash = null;
+var _pageViewCount = 0;
+var _heartbeatTimer = null;
+var _initialized = false;
+function now() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function currentRoute() {
+  if (typeof window === "undefined") return "";
+  return window.location.pathname + window.location.search;
+}
+function userAgent() {
+  if (typeof navigator === "undefined") return null;
+  return navigator.userAgent ?? null;
+}
+function buildPayload(kind, extra) {
+  return {
+    kind,
+    session_id: getSessionId(),
+    ts: now(),
+    page_view_count: _pageViewCount,
+    reporter_token_hash: _reporterTokenHash,
+    user_id_hash: _userIdHash,
+    user_agent: userAgent(),
+    sdk_version: _sdkVersion,
+    ...extra
+  };
+}
+function send(payload) {
+  if (!_client) return;
+  _client.postSessionEvent(payload).catch(() => {
+  });
+}
+function initSessionTracker(opts) {
+  if (_initialized || typeof window === "undefined") return;
+  _initialized = true;
+  _client = opts.client;
+  _sdkVersion = opts.sdkVersion;
+  _reporterTokenHash = opts.reporterTokenHash ?? null;
+  _userIdHash = opts.userIdHash ?? null;
+  const entryRoute = currentRoute();
+  _pageViewCount = 1;
+  send(buildPayload("session_start", {
+    route: entryRoute,
+    referrer: typeof document !== "undefined" ? document.referrer ?? null : null
+  }));
+  _heartbeatTimer = setInterval(() => {
+    send(buildPayload("session_heartbeat", { route: currentRoute() }));
+  }, HEARTBEAT_INTERVAL_MS);
+  const onHide = () => {
+    if (typeof document !== "undefined" && document.visibilityState === "hidden") {
+      send(buildPayload("session_end", { route: currentRoute() }));
+    }
+  };
+  if (typeof document !== "undefined") {
+    document.addEventListener("visibilitychange", onHide, { passive: true });
+  }
+  if (typeof window !== "undefined") {
+    window.addEventListener("pagehide", () => {
+      send(buildPayload("session_end", { route: currentRoute() }));
+    }, { passive: true });
+  }
+  patchHistoryForPageViews();
+}
+function trackPageView(route) {
+  if (!_initialized || !_client) return;
+  _pageViewCount += 1;
+  send(buildPayload("page_view", { route: route ?? currentRoute() }));
+}
+function updateSessionIdentity(userIdHash) {
+  _userIdHash = userIdHash;
+}
+function destroySessionTracker() {
+  if (_heartbeatTimer != null) {
+    clearInterval(_heartbeatTimer);
+    _heartbeatTimer = null;
+  }
+  _initialized = false;
+  _client = null;
+}
+var _historyPatched = false;
+function patchHistoryForPageViews() {
+  if (_historyPatched || typeof history === "undefined") return;
+  _historyPatched = true;
+  const wrap = (original) => function(...args) {
+    const result = original.apply(this, args);
+    if (original === history.pushState) {
+      _pageViewCount += 1;
+      send(buildPayload("page_view", { route: currentRoute() }));
+    }
+    return result;
+  };
+  history.pushState = wrap(history.pushState);
+  history.replaceState = wrap(history.replaceState);
+  window.addEventListener("popstate", () => {
+    _pageViewCount += 1;
+    send(buildPayload("page_view", { route: currentRoute() }));
+  }, { passive: true });
+}
+
 // src/rate-limiter.ts
 var DEFAULT_MAX_BURST = 10;
 var DEFAULT_REFILL_RATE = 1;
@@ -1832,12 +1948,12 @@ function createRateLimiter(config = {}) {
   let tokens = maxBurst;
   let lastRefill = Date.now();
   function refill() {
-    const now = Date.now();
-    const elapsed = now - lastRefill;
+    const now2 = Date.now();
+    const elapsed = now2 - lastRefill;
     const refills = Math.floor(elapsed / refillIntervalMs);
     if (refills > 0) {
       tokens = Math.min(maxBurst, tokens + refills * refillRate);
-      lastRefill = now;
+      lastRefill = now2;
     }
   }
   function tryConsume() {
@@ -2001,8 +2117,10 @@ var MUSHI_COLORS_LIGHT = {
   accent: "#E03C2C",
   accentWash: "rgba(224,60,44,0.08)",
   accentInk: "#7A1F15",
-  ok: "#16A34A",
-  danger: "#DC2626"
+  /** Aligned with brand.tokens.json `jade` (was Tailwind green-600 — drifted). */
+  ok: "#2D7A55",
+  /** Aligned with brand.tokens.json `viz-danger` (was Tailwind red-600 — drifted). */
+  danger: "#B83232"
 };
 var MUSHI_COLORS_DARK = {
   paper: "#0F0E0C",
@@ -2016,8 +2134,10 @@ var MUSHI_COLORS_DARK = {
   accent: "#FF5A47",
   accentWash: "rgba(255,90,71,0.12)",
   accentInk: "#FFE5E0",
-  ok: "#4ADE80",
-  danger: "#F87171"
+  /** Aligned with brand.tokens.json `dark-jade`. */
+  ok: "#3A9E6E",
+  /** Aligned with brand.tokens.json `dark-viz-danger`. */
+  danger: "#E05555"
 };
 var MUSHI_TIER_COLORS = {
   free: MUSHI_COLORS_LIGHT.inkMuted,
@@ -2033,6 +2153,11 @@ var MUSHI_BANNER_NEON = {
 };
 var MUSHI_ON_ACCENT = "#FAF7F0";
 var MUSHI_INVERSE = "#ffffff";
+var MUSHI_CONTROL_DISABLED = {
+  light: "#d1d1d6",
+  dark: "#3a3a3c"
+};
+var MUSHI_SHADOW_INK = "#000000";
 var MUSHI_ACCENT_SHADOW = {
   light: "#9A2A1E",
   dark: "#7A1F15"
@@ -2098,6 +2223,40 @@ var MUSHI_MOTION = {
   durationFast: 200,
   durationPanel: 300
 };
+var MUSHI_DURATION = {
+  /** Fastest — tooltip show, chip hover tint */
+  instant: 120,
+  /** Default micro-interaction — most hover / focus transitions */
+  fast: 200,
+  /** Button bloom, option-row wipe */
+  base: 220,
+  /** Panel enter / exit */
+  panel: 300,
+  /** Deliberate — success stamp press, page-level transitions */
+  slow: 420,
+  /** Stamp ring draw, long ambient animations */
+  ring: 700
+};
+var MUSHI_BORDER = {
+  hairline: 1,
+  regular: 1.5,
+  strong: 2,
+  /** Hanko stamp border (FAB inset accent stripe, stamp ring) */
+  stamp: 3
+};
+var MUSHI_OPACITY = {
+  disabled: 0.4,
+  muted: 0.6,
+  scrim: 0.72,
+  overlay: 0.88
+};
+var MUSHI_LETTER_SPACING = {
+  tight: "-0.01em",
+  normal: "0",
+  label: "0.02em",
+  stamp: "0.08em",
+  wide: "0.16em"
+};
 var MUSHI_GEOMETRY = {
   bannerHeight: 36,
   fabSize: 52,
@@ -2143,6 +2302,7 @@ function mushiTokens(mode) {
     type: MUSHI_TYPE,
     z: MUSHI_Z,
     motion: MUSHI_MOTION,
+    duration: MUSHI_DURATION,
     geometry: MUSHI_GEOMETRY,
     copy: MUSHI_COPY
   };
@@ -2151,15 +2311,15 @@ function mushiTokens(mode) {
 // src/identity.ts
 var MUSHI_IDENTITY_TOKEN_PREFIX = "mushi.identity";
 function buildIdentityClaims(input) {
-  const now = Math.floor(Date.now() / 1e3);
+  const now2 = Math.floor(Date.now() / 1e3);
   const ttl = input.ttlSeconds && input.ttlSeconds > 0 ? Math.min(input.ttlSeconds, 3600) : 600;
   return {
     projectId: input.projectId,
     sub: input.userId,
     ...input.email ? { email: input.email } : {},
     ...input.name ? { name: input.name } : {},
-    iat: now,
-    exp: now + ttl
+    iat: now2,
+    exp: now2 + ttl
   };
 }
 function base64UrlDecode(segment) {
@@ -2198,12 +2358,12 @@ var MULTI_TENANT_PARENT_HOSTS = /* @__PURE__ */ new Set(["kensaur.us", "www.kens
 var SLUG_DOMAIN_HINTS = {
   "glot-it": "glot.it",
   glotit: "glot.it",
-  "solo-boss-cloud": "sbc-front.vercel.app",
+  "solo-boss-cloud": "solo-boss.kensaur.us",
   "mushi-mushi": "kensaur.us"
 };
 var SLUG_ICON_URL_HINTS = {
   "mushi-mushi": "https://kensaur.us/mushi-mushi/admin/favicon.svg",
-  "solo-boss-cloud": "https://sbc-front.vercel.app/favicon.svg",
+  "solo-boss-cloud": "https://solo-boss.kensaur.us/favicon.svg",
   "glot-it": "https://kensaur.us/glot-it/apple-touch-icon.png",
   glotit: "https://kensaur.us/glot-it/apple-touch-icon.png"
 };
@@ -2377,6 +2537,6 @@ function isSafeFaviconHref(href) {
   }
 }
 
-export { DEFAULT_API_ENDPOINT, DEFAULT_MAX_RETRIES, DEFAULT_TIMEOUT, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_ACCENT_SHADOW, MUSHI_BANNER_BRAND_BORDER, MUSHI_BANNER_NEON, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_COPY, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_INVERSE, MUSHI_MOTION, MUSHI_ON_ACCENT, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_REPORTER_STATUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SPACING, MUSHI_TIER_COLORS, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, REGION_ENDPOINTS, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, diagnoseEnvConfig, estimateJsonBytes, expandPreset, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, hmacSha256Hex, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, resolveWidgetAccent, safeWidgetHex, scrubPii, sha256Hex, validateConfig };
+export { DEFAULT_API_ENDPOINT, DEFAULT_MAX_RETRIES, DEFAULT_TIMEOUT, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_ACCENT_SHADOW, MUSHI_BANNER_BRAND_BORDER, MUSHI_BANNER_NEON, MUSHI_BORDER, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_CONTROL_DISABLED, MUSHI_COPY, MUSHI_DURATION, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_INVERSE, MUSHI_LETTER_SPACING, MUSHI_MOTION, MUSHI_ON_ACCENT, MUSHI_OPACITY, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_REPORTER_STATUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SHADOW_INK, MUSHI_SPACING, MUSHI_TIER_COLORS, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, REGION_ENDPOINTS, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, destroySessionTracker, diagnoseEnvConfig, estimateJsonBytes, expandPreset, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, hmacSha256Hex, initSessionTracker, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, resolveWidgetAccent, safeWidgetHex, scrubPii, sha256Hex, trackPageView, updateSessionIdentity, validateConfig };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map