@mushi-mushi/core 1.27.2 → 1.28.0

package/README.md

@@ -96,6 +96,9 @@ Top-level `MushiConfig` fields (consumed by `@mushi-mushi/web` and framework wra
 |-------|---------|----------|
 | `sampleRate` | `1` | Probabilistic gate for **automatic** error reports (`0`–`1`). User-initiated feedback always sends. |
 | `replaySampleRate` | `1` | Probabilistic gate for session replay; decided once at session init. Independent of `sampleRate`. |
+| `replaysOnErrorSampleRate` | `0` | Start a replay buffer on automatic errors when session sample missed. Keep `0` unless you explicitly want rrweb. |
+| `tunnel` | — | Same-origin ingest base (e.g. `/api/mushi-tunnel`). Wins over `apiEndpoint` so browser calls stay first-party. Pagehide uses `fetch` keepalive, then a `{ mushiBeacon, path, headers, body }` envelope because `sendBeacon` cannot set headers. |
+| `ignoreErrors` / `denyUrls` / `allowUrls` | — | Drop **automatic** captures only. Never applied to user widget feedback. |
 | `beforeSend` | — | `(report) => report \| null \| Promise<…>` after built-in PII scrub. Return `null` to drop. |
 | `beforeSendFeedback` | — | Deprecated feedback-only hook; ignored when `beforeSend` is set. |
 
@@ -138,4 +141,4 @@ MIT
 <!-- mushi-readme-stats-footer -->
 ---
 
-<sub>Monorepo scale (July 2026): 55 edge functions · 336 SQL migrations · 13 outbound plugins · 11 inbound adapters · 19 pipeline agents. Canonical counts: <a href="https://github.com/kensaurus/mushi-mushi/blob/master/docs/stats.md">docs/stats.md</a> · <code>pnpm docs-stats</code></sub>
+<sub>Monorepo scale (July 2026): 58 edge functions · 347 SQL migrations · 13 outbound plugins · 11 inbound adapters · 19 pipeline agents. Canonical counts: <a href="https://github.com/kensaurus/mushi-mushi/blob/master/docs/stats.md">docs/stats.md</a> · <code>pnpm docs-stats</code></sub>

package/dist/index.cjs

@@ -86,7 +86,92 @@ async function hmacSha256Hex(secret, value) {
   return bytesToHex(result);
 }
 
+// src/unload-transport.ts
+var MUSHI_BEACON_MAX_BYTES = 60 * 1024;
+function isMushiBeaconEnvelope(value) {
+  if (!value || typeof value !== "object") return false;
+  const rec = value;
+  return rec.mushiBeacon === true && typeof rec.path === "string" && rec.headers !== null && typeof rec.headers === "object";
+}
+function buildBeaconEnvelope(opts) {
+  return {
+    mushiBeacon: true,
+    path: opts.path,
+    headers: opts.headers,
+    body: opts.body
+  };
+}
+function isSameOriginOrRelative(url, origin = typeof location !== "undefined" ? location.origin : "") {
+  if (!url) return false;
+  if (url.startsWith("/")) return true;
+  if (!origin) return false;
+  try {
+    return new URL(url, origin).origin === origin;
+  } catch {
+    return false;
+  }
+}
+function extractTunnelPath(url) {
+  try {
+    const parsed = url.startsWith("/") ? new URL(url, "https://tunnel.local") : new URL(url);
+    return `${parsed.pathname}${parsed.search}`;
+  } catch {
+    return url;
+  }
+}
+function sendOnUnload(opts) {
+  const fetchImpl = opts.fetchImpl ?? (typeof fetch === "function" ? fetch : void 0);
+  if (fetchImpl) {
+    try {
+      void fetchImpl(opts.url, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          ...opts.headers
+        },
+        body: opts.body,
+        keepalive: true
+      });
+      return true;
+    } catch {
+    }
+  }
+  const beacon = opts.sendBeacon ?? (typeof navigator !== "undefined" ? navigator.sendBeacon?.bind(navigator) : void 0);
+  if (!beacon || !isSameOriginOrRelative(opts.url)) return false;
+  let parsedBody = opts.body;
+  try {
+    parsedBody = JSON.parse(opts.body);
+  } catch {
+    parsedBody = opts.body;
+  }
+  const envelope = JSON.stringify(
+    buildBeaconEnvelope({
+      path: opts.path ?? extractTunnelPath(opts.url),
+      headers: opts.headers,
+      body: parsedBody
+    })
+  );
+  if (envelope.length > MUSHI_BEACON_MAX_BYTES) return false;
+  try {
+    return beacon(opts.url, new Blob([envelope], { type: "application/json" }));
+  } catch {
+    return false;
+  }
+}
+var pageUnloading = false;
+function markPageUnloading() {
+  pageUnloading = true;
+}
+function isPageUnloading() {
+  return pageUnloading;
+}
+
 // src/api-client.ts
+var lastOutbound = null;
+function flushLastOutboundOnUnload() {
+  if (!lastOutbound) return false;
+  return sendOnUnload(lastOutbound);
+}
 var _credWarningEmitted = false;
 var MUSHI_USER_TOKEN_HEADER = "X-Mushi-User-Token";
 var MUSHI_PROJECT_HEADER = "X-Mushi-Project";
@@ -107,6 +192,11 @@ function buildSdkIngestHeaders(opts) {
 var DEFAULT_API_ENDPOINT = "https://dxptnwrhwsqckaftyymj.supabase.co/functions/v1/api";
 var MUSHI_INTERNAL_HEADER = "X-Mushi-Internal";
 var MUSHI_INTERNAL_INIT_MARKER = "__mushiInternal";
+function resolveRequestBaseUrl(apiEndpoint, tunnel) {
+  const trimmedTunnel = tunnel?.trim();
+  if (trimmedTunnel) return trimmedTunnel.replace(/\/$/, "");
+  return (apiEndpoint ?? DEFAULT_API_ENDPOINT).replace(/\/$/, "");
+}
 var DEFAULT_TIMEOUT = 1e4;
 var DEFAULT_MAX_RETRIES = 2;
 var DEFAULT_CIRCUIT_THRESHOLD = 4;
@@ -117,6 +207,7 @@ function createApiClient(options) {
     projectId,
     apiKey,
     apiEndpoint = DEFAULT_API_ENDPOINT,
+    tunnel,
     timeout = DEFAULT_TIMEOUT,
     maxRetries = DEFAULT_MAX_RETRIES,
     getUserToken,
@@ -124,7 +215,7 @@ function createApiClient(options) {
     sdkVersion,
     circuitBreaker
   } = options;
-  let baseUrl = apiEndpoint.replace(/\/$/, "");
+  let baseUrl = resolveRequestBaseUrl(apiEndpoint, tunnel);
   const cbEnabled = circuitBreaker?.enabled !== false;
   const cbThreshold = Math.max(1, circuitBreaker?.threshold ?? DEFAULT_CIRCUIT_THRESHOLD);
   const cbCooldownMs = Math.max(1e3, circuitBreaker?.cooldownMs ?? DEFAULT_CIRCUIT_COOLDOWN_MS);
@@ -148,21 +239,27 @@ function createApiClient(options) {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), timeout);
     const userToken = getUserToken?.() ?? null;
+    const headers = {
+      ...buildSdkIngestHeaders({
+        apiKey,
+        projectId,
+        sdkPackage,
+        sdkVersion,
+        userToken,
+        internalKind
+      }),
+      ...extraHeaders
+    };
+    const serialized = body ? JSON.stringify(body) : void 0;
+    if (serialized && method !== "GET") {
+      lastOutbound = { url, headers, body: serialized, path };
+    }
     try {
       const response = await fetch(url, {
         method,
-        headers: {
-          ...buildSdkIngestHeaders({
-            apiKey,
-            projectId,
-            sdkPackage,
-            sdkVersion,
-            userToken,
-            internalKind
-          }),
-          ...extraHeaders
-        },
-        body: body ? JSON.stringify(body) : void 0,
+        headers,
+        body: serialized,
+        keepalive: isPageUnloading(),
         signal: controller.signal,
         ...internalKind ? { [MUSHI_INTERNAL_INIT_MARKER]: internalKind } : {}
       });
@@ -243,6 +340,7 @@ function createApiClient(options) {
         "X-Reporter-Hmac": hmac
       },
       body: body ? JSON.stringify(body) : void 0,
+      keepalive: isPageUnloading(),
       [MUSHI_INTERNAL_INIT_MARKER]: "reporter-poll"
     });
     if (!response.ok) {
@@ -518,6 +616,32 @@ function isRetryable(error) {
   return false;
 }
 
+// src/error-filters.ts
+function matchesErrorFilter(value, filters) {
+  if (!value || !filters || filters.length === 0) return false;
+  for (const filter of filters) {
+    if (typeof filter === "string") {
+      if (value.includes(filter)) return true;
+      continue;
+    }
+    try {
+      if (filter.test(value)) return true;
+    } catch {
+    }
+  }
+  return false;
+}
+function shouldDropCapturedError(input) {
+  if (matchesErrorFilter(input.message, input.ignoreErrors)) return true;
+  const filename = input.filename?.trim() || "";
+  if (filename && matchesErrorFilter(filename, input.denyUrls)) return true;
+  if (input.allowUrls && input.allowUrls.length > 0) {
+    if (!filename) return true;
+    if (!matchesErrorFilter(filename, input.allowUrls)) return true;
+  }
+  return false;
+}
+
 // src/region.ts
 var REGION_ENDPOINTS = {
   us: DEFAULT_API_ENDPOINT,
@@ -696,6 +820,7 @@ var KNOWN_CONFIG_KEYS = [
   "projectId",
   "apiKey",
   "apiEndpoint",
+  "tunnel",
   "timeout",
   "maxRetries",
   "circuitBreaker",
@@ -715,8 +840,13 @@ var KNOWN_CONFIG_KEYS = [
   "enabled",
   "appVersion",
   "sampleRate",
+  "replaySampleRate",
+  "replaysOnErrorSampleRate",
   "beforeSend",
   "beforeSendFeedback",
+  "ignoreErrors",
+  "denyUrls",
+  "allowUrls",
   "onCrashedLastRun"
 ];
 function presetDefaults(preset) {
@@ -2486,13 +2616,22 @@ var SLUG_DOMAIN_HINTS = {
   "glot-it": "glot.it",
   glotit: "glot.it",
   "solo-boss-cloud": "solo-boss.kensaur.us",
-  "mushi-mushi": "kensaur.us"
+  "mushi-mushi": "kensaur.us",
+  "how-to-talk-to-girls": "talk.kensaur.us",
+  htttg: "talk.kensaur.us",
+  tsumagoi: "tsumagoi.kensaur.us"
 };
 var SLUG_ICON_URL_HINTS = {
   "mushi-mushi": "https://kensaur.us/mushi-mushi/admin/favicon.svg",
   "solo-boss-cloud": "https://solo-boss.kensaur.us/favicon.svg",
   "glot-it": "https://kensaur.us/glot-it/apple-touch-icon.png",
-  glotit: "https://kensaur.us/glot-it/apple-touch-icon.png"
+  glotit: "https://kensaur.us/glot-it/apple-touch-icon.png",
+  "the-wanting-mind": "https://kensaur.us/the-wanting-mind/pwa-512x512.png",
+  "how-to-talk-to-girls": "https://talk.kensaur.us/pwa-192.png",
+  htttg: "https://talk.kensaur.us/pwa-192.png",
+  tsumagoi: "https://tsumagoi.kensaur.us/apple-touch-icon.png",
+  "help-her-take-photo": "https://kensaur.us/help-her-take-photo/assets/apple-touch-icon.png",
+  "yen-yen": "https://kensaur.us/yen-yen/icon.svg"
 };
 var UNTRUSTED_FAVICON_HOSTS = [
   "www.google.com",
@@ -2672,6 +2811,7 @@ exports.MAX_SCREENSHOT_DATA_URL_BYTES = MAX_SCREENSHOT_DATA_URL_BYTES;
 exports.MUSHI_ACCENT_SHADOW = MUSHI_ACCENT_SHADOW;
 exports.MUSHI_BANNER_BRAND_BORDER = MUSHI_BANNER_BRAND_BORDER;
 exports.MUSHI_BANNER_NEON = MUSHI_BANNER_NEON;
+exports.MUSHI_BEACON_MAX_BYTES = MUSHI_BEACON_MAX_BYTES;
 exports.MUSHI_BORDER = MUSHI_BORDER;
 exports.MUSHI_COLORS_DARK = MUSHI_COLORS_DARK;
 exports.MUSHI_COLORS_LIGHT = MUSHI_COLORS_LIGHT;
@@ -2699,6 +2839,7 @@ exports.MUSHI_TYPE = MUSHI_TYPE;
 exports.MUSHI_USER_TOKEN_HEADER = MUSHI_USER_TOKEN_HEADER;
 exports.MUSHI_Z = MUSHI_Z;
 exports.REGION_ENDPOINTS = REGION_ENDPOINTS;
+exports.buildBeaconEnvelope = buildBeaconEnvelope;
 exports.buildIdentityClaims = buildIdentityClaims;
 exports.buildSdkIngestHeaders = buildSdkIngestHeaders;
 exports.captureEnvironment = captureEnvironment;
@@ -2714,8 +2855,11 @@ exports.destroySessionTracker = destroySessionTracker;
 exports.diagnoseEnvConfig = diagnoseEnvConfig;
 exports.estimateJsonBytes = estimateJsonBytes;
 exports.expandPreset = expandPreset;
+exports.extractTunnelPath = extractTunnelPath;
 exports.faviconUrlCandidates = faviconUrlCandidates;
+exports.flushLastOutboundOnUnload = flushLastOutboundOnUnload;
 exports.formatBytes = formatBytes;
+exports.getBackoffDelay = getBackoffDelay;
 exports.getDeviceFingerprintHash = getDeviceFingerprintHash;
 exports.getReporterToken = getReporterToken;
 exports.getSessionId = getSessionId;
@@ -2723,7 +2867,12 @@ exports.githubRepoDomainHint = githubRepoDomainHint;
 exports.hmacSha256Hex = hmacSha256Hex;
 exports.initSessionTracker = initSessionTracker;
 exports.isLikelyGenericFavicon = isLikelyGenericFavicon;
+exports.isMushiBeaconEnvelope = isMushiBeaconEnvelope;
+exports.isPageUnloading = isPageUnloading;
+exports.isSameOriginOrRelative = isSameOriginOrRelative;
 exports.isUntrustedFaviconUrl = isUntrustedFaviconUrl;
+exports.markPageUnloading = markPageUnloading;
+exports.matchesErrorFilter = matchesErrorFilter;
 exports.mushiPalette = mushiPalette;
 exports.mushiTokens = mushiTokens;
 exports.newUuid = newUuid;
@@ -2731,6 +2880,7 @@ exports.noopLogger = noopLogger;
 exports.normaliseThrown = normaliseThrown;
 exports.originToDomain = originToDomain;
 exports.parseIdentityToken = parseIdentityToken;
+exports.parseRetryAfter = parseRetryAfter;
 exports.projectFaviconUrlCandidates = projectFaviconUrlCandidates;
 exports.projectInitials = projectInitials;
 exports.projectInitialsThemeIndex = projectInitialsThemeIndex;
@@ -2739,11 +2889,14 @@ exports.resolveEnvConfig = resolveEnvConfig;
 exports.resolveProjectDomain = resolveProjectDomain;
 exports.resolveProjectFaviconDomains = resolveProjectFaviconDomains;
 exports.resolveRegionEndpoint = resolveRegionEndpoint;
+exports.resolveRequestBaseUrl = resolveRequestBaseUrl;
 exports.resolveWidgetAccent = resolveWidgetAccent;
 exports.safeWidgetHex = safeWidgetHex;
 exports.scrubPii = scrubPii;
 exports.scrubUrl = scrubUrl;
+exports.sendOnUnload = sendOnUnload;
 exports.sha256Hex = sha256Hex;
+exports.shouldDropCapturedError = shouldDropCapturedError;
 exports.trackPageView = trackPageView;
 exports.updateSessionIdentity = updateSessionIdentity;
 exports.validateConfig = validateConfig;