@mushi-mushi/core 1.26.0 → 1.27.1

package/dist/index.d.cts

@@ -46,7 +46,52 @@ interface MushiConfig {
      * when omitted (legacy Vercel Analytics wiring).
      */
     appVersion?: string;
-    /** Hook called before a report is sent. Return null to cancel, or return the (possibly modified) report. */
+    /**
+     * Probabilistic sampling rate for session-replay recording (rrweb/lite).
+     * Range 0–1, default 1 (record all sessions). The sampling decision is made
+     * once at session init — a sampled-out session never loads the rrweb chunk,
+     * reducing bundle cost and CPU for excluded users.
+     *
+     * Independent of `sampleRate` (error reporting). A session can have replay
+     * on but errors sampled, or vice versa.
+     *
+     * @example
+     * replaySampleRate: 0.2  // record replay for ~20% of sessions
+     */
+    replaySampleRate?: number;
+    /**
+     * Probabilistic sampling rate for automatic (non-user-initiated) error
+     * reports. Range 0–1, default 1 (send all). User-initiated feedback reports
+     * are always sent regardless of this value.
+     *
+     * Examples:
+     *   sampleRate: 0.1  → send ~10% of auto-captured errors
+     *   sampleRate: 1    → send all (default)
+     *   sampleRate: 0    → send none (disables automatic capture; feedback unaffected)
+     *
+     * When rate limiting or circuit breaker is also active, the stricter of the
+     * two gates applies. Use sampleRate for sustained high-volume apps; use
+     * rate limiting for burst protection.
+     */
+    sampleRate?: number;
+    /**
+     * Hook called before ANY report (error, exception, or user feedback) is
+     * sent. Return null to cancel the report; return the (possibly modified)
+     * report to proceed. Async version supported — resolution is awaited before
+     * submission. Runs AFTER built-in PII scrubbing.
+     *
+     * @example
+     * beforeSend: (report) => {
+     *   if (report.category === 'bug' && report.description.includes('internal')) return null
+     *   return { ...report, description: sanitize(report.description) }
+     * }
+     */
+    beforeSend?: (report: MushiReport) => MushiReport | null | Promise<MushiReport | null>;
+    /**
+     * @deprecated Use `beforeSend` instead. `beforeSendFeedback` is kept for
+     * backwards compatibility and applies only to user-submitted feedback reports.
+     * `beforeSend` covers all report types and takes precedence when both are set.
+     */
     beforeSendFeedback?: (report: MushiReport) => MushiReport | null | Promise<MushiReport | null>;
     /** Called once if the app crashed during the previous session. */
     onCrashedLastRun?: (crashed: boolean) => void;
@@ -774,6 +819,13 @@ interface MushiBreadcrumb {
     message: string;
     /** Optional structured payload — kept small to keep ingest cheap. */
     data?: Record<string, unknown>;
+    /**
+     * Correlation ID linking this breadcrumb to the `MushiNetworkEntry` and
+     * `MushiConsoleEntry` entries emitted during the same network request's
+     * lifetime (Phase 3b). Set for `fetch` / `xhr` category crumbs and for
+     * console entries captured while a request was in-flight.
+     */
+    correlationId?: string;
 }
 /**
  * Snapshot of Sentry's current scope at report submission. Captured by
@@ -985,6 +1037,13 @@ interface MushiConsoleEntry {
     message: string;
     timestamp: number;
     stack?: string;
+    /**
+     * Correlation ID linking this console entry to the network request that was
+     * active when this log was emitted (e.g. the fetch whose catch block called
+     * console.error). Matches `MushiNetworkEntry.correlationId`. Set by the SDK's
+     * active-request tracker (Phase 3b).
+     */
+    correlationId?: string;
 }
 interface MushiNetworkEntry {
     method: string;
@@ -1002,6 +1061,17 @@ interface MushiNetworkEntry {
      * Used to correlate this network entry with a backend span in the admin console.
      */
     traceId?: string;
+    /**
+     * Whether this entry was captured by the fetch interceptor or the XHR interceptor
+     * (Phase 3a). Used for row-level provenance badges in the console UI.
+     */
+    captureMethod?: 'fetch' | 'xhr';
+    /**
+     * Correlation ID shared with `MushiConsoleEntry.correlationId` and
+     * `MushiBreadcrumb.correlationId` for entries emitted during this request's
+     * lifetime (Phase 3b). Enables "highlight all logs/crumbs from this request."
+     */
+    correlationId?: string;
 }
 interface MushiPerformanceMetrics {
     fcp?: number;
@@ -2037,6 +2107,14 @@ declare function createPiiScrubber(config?: PiiScrubberConfig): {
     scrubObject: <T extends Record<string, unknown>>(obj: T, keys: string[]) => T;
 };
 declare function scrubPii(text: string, config?: PiiScrubberConfig): string;
+/**
+ * Scrub the query-string portion(s) of a URL — both the standard `?…` part
+ * and any `?…` inside the hash fragment (hash routers like RealWorld's
+ * `#/path?query` carry their query inside the fragment). Path segments and
+ * param keys are left untouched; only values are redacted. Accepts absolute
+ * or relative URLs and never throws.
+ */
+declare function scrubUrl(url: string, config?: PiiScrubberConfig): string;
 
 /**
  * Ring-buffer breadcrumb store. Capped at `max` entries (default 50);
@@ -2554,4 +2632,4 @@ declare function projectInitialsThemeIndex(projectId: string): number;
  */
 declare function readPageFaviconHref(): string | null;
 
-export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, DEFAULT_MAX_RETRIES, DEFAULT_TIMEOUT, type EnvConfigDiagnostics, type EnvNearMiss, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_ACCENT_SHADOW, MUSHI_BANNER_BRAND_BORDER, MUSHI_BANNER_NEON, MUSHI_BORDER, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_CONTROL_DISABLED, MUSHI_COPY, MUSHI_DURATION, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_INVERSE, MUSHI_LETTER_SPACING, MUSHI_MOTION, MUSHI_ON_ACCENT, MUSHI_OPACITY, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_REPORTER_STATUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SHADOW_INK, MUSHI_SPACING, MUSHI_TIER_COLORS, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiSessionEventPayload, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, type ProjectFaviconSource, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, type SessionTrackerOptions, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, destroySessionTracker, diagnoseEnvConfig, estimateJsonBytes, expandPreset, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, hmacSha256Hex, initSessionTracker, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, resolveWidgetAccent, safeWidgetHex, scrubPii, sha256Hex, trackPageView, updateSessionIdentity, validateConfig };
+export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, DEFAULT_MAX_RETRIES, DEFAULT_TIMEOUT, type EnvConfigDiagnostics, type EnvNearMiss, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_ACCENT_SHADOW, MUSHI_BANNER_BRAND_BORDER, MUSHI_BANNER_NEON, MUSHI_BORDER, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_CONTROL_DISABLED, MUSHI_COPY, MUSHI_DURATION, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_INVERSE, MUSHI_LETTER_SPACING, MUSHI_MOTION, MUSHI_ON_ACCENT, MUSHI_OPACITY, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_REPORTER_STATUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SHADOW_INK, MUSHI_SPACING, MUSHI_TIER_COLORS, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiSessionEventPayload, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, type ProjectFaviconSource, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, type SessionTrackerOptions, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, destroySessionTracker, diagnoseEnvConfig, estimateJsonBytes, expandPreset, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, hmacSha256Hex, initSessionTracker, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, resolveWidgetAccent, safeWidgetHex, scrubPii, scrubUrl, sha256Hex, trackPageView, updateSessionIdentity, validateConfig };

package/dist/index.d.ts

@@ -46,7 +46,52 @@ interface MushiConfig {
      * when omitted (legacy Vercel Analytics wiring).
      */
     appVersion?: string;
-    /** Hook called before a report is sent. Return null to cancel, or return the (possibly modified) report. */
+    /**
+     * Probabilistic sampling rate for session-replay recording (rrweb/lite).
+     * Range 0–1, default 1 (record all sessions). The sampling decision is made
+     * once at session init — a sampled-out session never loads the rrweb chunk,
+     * reducing bundle cost and CPU for excluded users.
+     *
+     * Independent of `sampleRate` (error reporting). A session can have replay
+     * on but errors sampled, or vice versa.
+     *
+     * @example
+     * replaySampleRate: 0.2  // record replay for ~20% of sessions
+     */
+    replaySampleRate?: number;
+    /**
+     * Probabilistic sampling rate for automatic (non-user-initiated) error
+     * reports. Range 0–1, default 1 (send all). User-initiated feedback reports
+     * are always sent regardless of this value.
+     *
+     * Examples:
+     *   sampleRate: 0.1  → send ~10% of auto-captured errors
+     *   sampleRate: 1    → send all (default)
+     *   sampleRate: 0    → send none (disables automatic capture; feedback unaffected)
+     *
+     * When rate limiting or circuit breaker is also active, the stricter of the
+     * two gates applies. Use sampleRate for sustained high-volume apps; use
+     * rate limiting for burst protection.
+     */
+    sampleRate?: number;
+    /**
+     * Hook called before ANY report (error, exception, or user feedback) is
+     * sent. Return null to cancel the report; return the (possibly modified)
+     * report to proceed. Async version supported — resolution is awaited before
+     * submission. Runs AFTER built-in PII scrubbing.
+     *
+     * @example
+     * beforeSend: (report) => {
+     *   if (report.category === 'bug' && report.description.includes('internal')) return null
+     *   return { ...report, description: sanitize(report.description) }
+     * }
+     */
+    beforeSend?: (report: MushiReport) => MushiReport | null | Promise<MushiReport | null>;
+    /**
+     * @deprecated Use `beforeSend` instead. `beforeSendFeedback` is kept for
+     * backwards compatibility and applies only to user-submitted feedback reports.
+     * `beforeSend` covers all report types and takes precedence when both are set.
+     */
     beforeSendFeedback?: (report: MushiReport) => MushiReport | null | Promise<MushiReport | null>;
     /** Called once if the app crashed during the previous session. */
     onCrashedLastRun?: (crashed: boolean) => void;
@@ -774,6 +819,13 @@ interface MushiBreadcrumb {
     message: string;
     /** Optional structured payload — kept small to keep ingest cheap. */
     data?: Record<string, unknown>;
+    /**
+     * Correlation ID linking this breadcrumb to the `MushiNetworkEntry` and
+     * `MushiConsoleEntry` entries emitted during the same network request's
+     * lifetime (Phase 3b). Set for `fetch` / `xhr` category crumbs and for
+     * console entries captured while a request was in-flight.
+     */
+    correlationId?: string;
 }
 /**
  * Snapshot of Sentry's current scope at report submission. Captured by
@@ -985,6 +1037,13 @@ interface MushiConsoleEntry {
     message: string;
     timestamp: number;
     stack?: string;
+    /**
+     * Correlation ID linking this console entry to the network request that was
+     * active when this log was emitted (e.g. the fetch whose catch block called
+     * console.error). Matches `MushiNetworkEntry.correlationId`. Set by the SDK's
+     * active-request tracker (Phase 3b).
+     */
+    correlationId?: string;
 }
 interface MushiNetworkEntry {
     method: string;
@@ -1002,6 +1061,17 @@ interface MushiNetworkEntry {
      * Used to correlate this network entry with a backend span in the admin console.
      */
     traceId?: string;
+    /**
+     * Whether this entry was captured by the fetch interceptor or the XHR interceptor
+     * (Phase 3a). Used for row-level provenance badges in the console UI.
+     */
+    captureMethod?: 'fetch' | 'xhr';
+    /**
+     * Correlation ID shared with `MushiConsoleEntry.correlationId` and
+     * `MushiBreadcrumb.correlationId` for entries emitted during this request's
+     * lifetime (Phase 3b). Enables "highlight all logs/crumbs from this request."
+     */
+    correlationId?: string;
 }
 interface MushiPerformanceMetrics {
     fcp?: number;
@@ -2037,6 +2107,14 @@ declare function createPiiScrubber(config?: PiiScrubberConfig): {
     scrubObject: <T extends Record<string, unknown>>(obj: T, keys: string[]) => T;
 };
 declare function scrubPii(text: string, config?: PiiScrubberConfig): string;
+/**
+ * Scrub the query-string portion(s) of a URL — both the standard `?…` part
+ * and any `?…` inside the hash fragment (hash routers like RealWorld's
+ * `#/path?query` carry their query inside the fragment). Path segments and
+ * param keys are left untouched; only values are redacted. Accepts absolute
+ * or relative URLs and never throws.
+ */
+declare function scrubUrl(url: string, config?: PiiScrubberConfig): string;
 
 /**
  * Ring-buffer breadcrumb store. Capped at `max` entries (default 50);
@@ -2554,4 +2632,4 @@ declare function projectInitialsThemeIndex(projectId: string): number;
  */
 declare function readPageFaviconHref(): string | null;
 
-export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, DEFAULT_MAX_RETRIES, DEFAULT_TIMEOUT, type EnvConfigDiagnostics, type EnvNearMiss, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_ACCENT_SHADOW, MUSHI_BANNER_BRAND_BORDER, MUSHI_BANNER_NEON, MUSHI_BORDER, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_CONTROL_DISABLED, MUSHI_COPY, MUSHI_DURATION, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_INVERSE, MUSHI_LETTER_SPACING, MUSHI_MOTION, MUSHI_ON_ACCENT, MUSHI_OPACITY, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_REPORTER_STATUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SHADOW_INK, MUSHI_SPACING, MUSHI_TIER_COLORS, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiSessionEventPayload, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, type ProjectFaviconSource, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, type SessionTrackerOptions, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, destroySessionTracker, diagnoseEnvConfig, estimateJsonBytes, expandPreset, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, hmacSha256Hex, initSessionTracker, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, resolveWidgetAccent, safeWidgetHex, scrubPii, sha256Hex, trackPageView, updateSessionIdentity, validateConfig };
+export { type ApiClientOptions, type BreadcrumbBuffer, type BreadcrumbBufferOptions, DEFAULT_API_ENDPOINT, DEFAULT_MAX_RETRIES, DEFAULT_TIMEOUT, type EnvConfigDiagnostics, type EnvNearMiss, type LogEntry, type LogFormat, type LogLevel, type Logger, type LoggerOptions, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_ACCENT_SHADOW, MUSHI_BANNER_BRAND_BORDER, MUSHI_BANNER_NEON, MUSHI_BORDER, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_CONTROL_DISABLED, MUSHI_COPY, MUSHI_DURATION, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_INVERSE, MUSHI_LETTER_SPACING, MUSHI_MOTION, MUSHI_ON_ACCENT, MUSHI_OPACITY, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_REPORTER_STATUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SHADOW_INK, MUSHI_SPACING, MUSHI_TIER_COLORS, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, type MushiActivityEvent, type MushiApiCascadeConfig, type MushiApiClient, type MushiApiResponse, type MushiAssistantConfig, type MushiAssistantReply, type MushiAssistantStep, type MushiBannerConfig, type MushiBannerLink, type MushiBetaChangelogEntry, type MushiBetaModeConfig, type MushiBreadcrumb, type MushiCaptureConfig, type MushiCaptureEventInput, type MushiCaptureExceptionOptions, type MushiColorPalette, type MushiConfig, type MushiConsoleEntry, type MushiCooldownConfig, type MushiCrossAppReport, type MushiCustomCategory, type MushiDiagnosticsResult, type MushiDiscoverInventoryConfig, type MushiDiscoveryEventPayload, type MushiEnvironment, type MushiEventHandler, type MushiEventType, type MushiHallOfFameEntry, type MushiIdentityClaims, type MushiIntegrationsConfig, type MushiInternalRequestKind, type MushiLeaderboardEntry, type MushiNetworkEntry, type MushiOfflineConfig, type MushiOnDeviceClassifier, type MushiOnDeviceClassifierInput, type MushiOnDeviceClassifierResult, type MushiPageContext, type MushiPerformanceMetrics, type MushiPreFilterConfig, type MushiPreset, type MushiPrivacyConfig, type MushiProactiveConfig, type MushiRegion, type MushiReport, type MushiReportBuilder, type MushiReportCategory, type MushiReportStatus, type MushiReporterComment, type MushiReporterReport, type MushiReputationResult, type MushiRewardsConfig, type MushiRuntimeSdkConfig, type MushiSDKInstance, type MushiSdkVersionInfo, type MushiSelectedElement, type MushiSentryConfig, type MushiSentryContext, type MushiSessionEventPayload, type MushiTesterReputation, type MushiThemeMode, type MushiTierResult, type MushiTimelineEntry, type MushiTimelineKind, type MushiTokenSnapshot, type MushiTracePropagationConfig, type MushiUrlMatcher, type MushiWidgetAnchor, type MushiWidgetConfig, type NormalisedException, type OfflineQueue, type PayloadGuardResult, type PiiScrubberConfig, type PreFilterResult, type ProjectFaviconSource, REGION_ENDPOINTS, type RateLimiter, type RateLimiterConfig, type ResolvedEnvConfig, type SessionTrackerOptions, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, destroySessionTracker, diagnoseEnvConfig, estimateJsonBytes, expandPreset, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, hmacSha256Hex, initSessionTracker, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, resolveWidgetAccent, safeWidgetHex, scrubPii, scrubUrl, sha256Hex, trackPageView, updateSessionIdentity, validateConfig };

package/dist/index.js

@@ -503,9 +503,9 @@ function isRetryable(error) {
 
 // src/region.ts
 var REGION_ENDPOINTS = {
-  us: "https://dxptnwrhwsqckaftyymj.supabase.co/functions/v1/api",
-  eu: "https://dxptnwrhwsqckaftyymj.supabase.co/functions/v1/api",
-  jp: "https://dxptnwrhwsqckaftyymj.supabase.co/functions/v1/api"
+  us: DEFAULT_API_ENDPOINT,
+  eu: DEFAULT_API_ENDPOINT,
+  jp: DEFAULT_API_ENDPOINT
 };
 var ROUTING_CACHE_KEY = "mushi_region_v1";
 var ROUTING_CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -697,6 +697,8 @@ var KNOWN_CONFIG_KEYS = [
   "debug",
   "enabled",
   "appVersion",
+  "sampleRate",
+  "beforeSend",
   "beforeSendFeedback",
   "onCrashedLastRun"
 ];
@@ -1052,12 +1054,27 @@ function openKeyDb() {
   return new Promise((resolve, reject) => {
     const req = indexedDB.open(KEY_DB, 1);
     req.onupgradeneeded = () => {
+      try {
+        const db = req.result;
+        if (!db) return;
+        if (!db.objectStoreNames.contains(KEY_STORE)) {
+          db.createObjectStore(KEY_STORE);
+        }
+      } catch {
+      }
+    };
+    req.onsuccess = () => {
       const db = req.result;
-      if (!db.objectStoreNames.contains(KEY_STORE)) {
-        db.createObjectStore(KEY_STORE);
+      if (!db || !db.objectStoreNames.contains(KEY_STORE)) {
+        try {
+          db?.close();
+        } catch {
+        }
+        reject(new Error("key object store unavailable"));
+        return;
       }
+      resolve(db);
     };
-    req.onsuccess = () => resolve(req.result);
     req.onerror = () => reject(req.error);
   });
 }
@@ -1200,12 +1217,28 @@ function createOfflineQueue(config = {}) {
     return new Promise((resolve, reject) => {
       const request = indexedDB.open(DB_NAME, DB_VERSION);
       request.onupgradeneeded = () => {
+        try {
+          const db = request.result;
+          if (!db) return;
+          if (!db.objectStoreNames.contains(STORE_NAME)) {
+            db.createObjectStore(STORE_NAME, { keyPath: "id" });
+          }
+        } catch {
+        }
+      };
+      request.onsuccess = () => {
         const db = request.result;
-        if (!db.objectStoreNames.contains(STORE_NAME)) {
-          db.createObjectStore(STORE_NAME, { keyPath: "id" });
+        if (!db || !db.objectStoreNames.contains(STORE_NAME)) {
+          backendType = "localstorage";
+          try {
+            db?.close();
+          } catch {
+          }
+          reject(new Error("queue object store unavailable"));
+          return;
         }
+        resolve(db);
       };
-      request.onsuccess = () => resolve(request.result);
       request.onerror = () => {
         backendType = "localstorage";
         reject(request.error);
@@ -2034,6 +2067,46 @@ function createPiiScrubber(config = {}) {
 function scrubPii(text, config) {
   return createPiiScrubber(config).scrub(text);
 }
+var SENSITIVE_QUERY_KEY_SUBSTRING_RE = /token|jwt|passw|pwd|secret|api[-_]?key|apikey|auth|session|signature|email|phone|ssn/i;
+var SENSITIVE_QUERY_KEY_EXACT_RE = /^(?:key|code|sig)$/i;
+function isSensitiveQueryKey(key) {
+  let decoded = key;
+  try {
+    decoded = decodeURIComponent(key);
+  } catch {
+  }
+  return SENSITIVE_QUERY_KEY_SUBSTRING_RE.test(decoded) || SENSITIVE_QUERY_KEY_EXACT_RE.test(decoded);
+}
+function scrubQueryPairs(query, scrub) {
+  return query.split("&").map((pair) => {
+    const eq = pair.indexOf("=");
+    if (eq === -1) return pair;
+    const key = pair.slice(0, eq);
+    const value = pair.slice(eq + 1);
+    if (value.length === 0) return pair;
+    if (isSensitiveQueryKey(key)) return `${key}=[Scrubbed]`;
+    let decoded = value;
+    try {
+      decoded = decodeURIComponent(value);
+    } catch {
+    }
+    const scrubbed = scrub(decoded);
+    if (scrubbed !== decoded) return `${key}=${encodeURIComponent(scrubbed)}`;
+    return pair;
+  }).join("&");
+}
+function scrubUrl(url, config) {
+  if (!url || !url.includes("?") && !url.includes("#")) return url;
+  const { scrub } = createPiiScrubber(config);
+  const scrubPart = (part) => {
+    const qIdx = part.indexOf("?");
+    if (qIdx === -1) return part;
+    return part.slice(0, qIdx + 1) + scrubQueryPairs(part.slice(qIdx + 1), scrub);
+  };
+  const hashIdx = url.indexOf("#");
+  if (hashIdx === -1) return scrubPart(url);
+  return scrubPart(url.slice(0, hashIdx)) + scrubPart(url.slice(hashIdx));
+}
 
 // src/breadcrumbs.ts
 var DEFAULT_MAX = 50;
@@ -2537,6 +2610,6 @@ function isSafeFaviconHref(href) {
   }
 }
 
-export { DEFAULT_API_ENDPOINT, DEFAULT_MAX_RETRIES, DEFAULT_TIMEOUT, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_ACCENT_SHADOW, MUSHI_BANNER_BRAND_BORDER, MUSHI_BANNER_NEON, MUSHI_BORDER, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_CONTROL_DISABLED, MUSHI_COPY, MUSHI_DURATION, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_INVERSE, MUSHI_LETTER_SPACING, MUSHI_MOTION, MUSHI_ON_ACCENT, MUSHI_OPACITY, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_REPORTER_STATUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SHADOW_INK, MUSHI_SPACING, MUSHI_TIER_COLORS, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, REGION_ENDPOINTS, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, destroySessionTracker, diagnoseEnvConfig, estimateJsonBytes, expandPreset, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, hmacSha256Hex, initSessionTracker, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, resolveWidgetAccent, safeWidgetHex, scrubPii, sha256Hex, trackPageView, updateSessionIdentity, validateConfig };
+export { DEFAULT_API_ENDPOINT, DEFAULT_MAX_RETRIES, DEFAULT_TIMEOUT, MAX_REPORT_PAYLOAD_BYTES, MAX_SCREENSHOT_DATA_URL_BYTES, MUSHI_ACCENT_SHADOW, MUSHI_BANNER_BRAND_BORDER, MUSHI_BANNER_NEON, MUSHI_BORDER, MUSHI_COLORS_DARK, MUSHI_COLORS_LIGHT, MUSHI_CONTROL_DISABLED, MUSHI_COPY, MUSHI_DURATION, MUSHI_GEOMETRY, MUSHI_IDENTITY_TOKEN_PREFIX, MUSHI_INTERNAL_HEADER, MUSHI_INTERNAL_INIT_MARKER, MUSHI_INVERSE, MUSHI_LETTER_SPACING, MUSHI_MOTION, MUSHI_ON_ACCENT, MUSHI_OPACITY, MUSHI_PROJECT_HEADER, MUSHI_RADIUS, MUSHI_REPORTER_STATUS, MUSHI_SDK_PACKAGE_HEADER, MUSHI_SDK_VERSION_HEADER, MUSHI_SHADOW_INK, MUSHI_SPACING, MUSHI_TIER_COLORS, MUSHI_TYPE, MUSHI_USER_TOKEN_HEADER, MUSHI_Z, REGION_ENDPOINTS, buildIdentityClaims, buildSdkIngestHeaders, captureEnvironment, checkReportPayloadSize, createApiClient, createBreadcrumbBuffer, createLogger, createOfflineQueue, createPiiScrubber, createPreFilter, createRateLimiter, destroySessionTracker, diagnoseEnvConfig, estimateJsonBytes, expandPreset, faviconUrlCandidates, formatBytes, getDeviceFingerprintHash, getReporterToken, getSessionId, githubRepoDomainHint, hmacSha256Hex, initSessionTracker, isLikelyGenericFavicon, isUntrustedFaviconUrl, mushiPalette, mushiTokens, newUuid, noopLogger, normaliseThrown, originToDomain, parseIdentityToken, projectFaviconUrlCandidates, projectInitials, projectInitialsThemeIndex, readPageFaviconHref, resolveEnvConfig, resolveProjectDomain, resolveProjectFaviconDomains, resolveRegionEndpoint, resolveWidgetAccent, safeWidgetHex, scrubPii, scrubUrl, sha256Hex, trackPageView, updateSessionIdentity, validateConfig };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map