@mushi-mushi/react-native 0.19.1 → 0.19.2

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @mushi-mushi/react-native
 
+## 0.19.2
+
+### Patch Changes
+
+- 7b44c97: SDK fixes from automated code review.
+
+  - **Favicon trust boundary** (`@mushi-mushi/core`): `readPageFaviconHref` now returns only http(s) URLs, so a host page can't get a `data:` / `blob:` / `javascript:` favicon rendered into the widget's `<img src>`; anything else falls back to the default mark.
+  - **Self-hosted credential message** (`@mushi-mushi/core`, `@mushi-mushi/react-native`): the one-time 401/403 "credentials rejected" warning only links to the hosted console when the client is actually using the Cloud endpoint; self-hosted deployments get a console-agnostic message instead of a wrong domain.
+  - **Offline-queue data loss** (`@mushi-mushi/react-native`): `decryptQueueBlob` now decrypts any blob carrying the encrypted prefix regardless of the current `secureStorage` flag. Previously, toggling `secureStorage` from `true` to `false` returned the still-encrypted string, which failed `JSON.parse` and silently cleared the offline report queue.
+
+- Updated dependencies [7b44c97]
+  - @mushi-mushi/core@1.19.2
+
 ## 0.19.1
 
 ### Patch Changes

package/dist/index.cjs

@@ -263,9 +263,8 @@ async function encryptQueueBlob(plaintext, secureStorage) {
   combined.set(new Uint8Array(cipher), iv.length);
   return ENCRYPTED_PREFIX + bytesToBase64(combined);
 }
-async function decryptQueueBlob(stored, secureStorage) {
+async function decryptQueueBlob(stored, _secureStorage) {
   if (!stored.startsWith(ENCRYPTED_PREFIX)) return stored;
-  if (!secureStorage) return stored;
   const secure = await loadSecureStore();
   if (!secure || !hasWebCrypto()) return stored;
   const key = await getOrCreateQueueKey(secure);
@@ -1216,7 +1215,7 @@ var s2 = import_react_native3.StyleSheet.create({
 
 // src/version.ts
 var MUSHI_SDK_PACKAGE = "@mushi-mushi/react-native";
-var MUSHI_SDK_VERSION = "0.19.1" ? "0.19.1" : "0.17.0";
+var MUSHI_SDK_VERSION = "0.19.2" ? "0.19.2" : "0.17.0";
 
 // src/provider.tsx
 var import_jsx_runtime3 = require("react/jsx-runtime");
@@ -1501,8 +1500,9 @@ function MushiProvider({ children, config: configProp, ...barePropConfig }) {
       if (!result.ok) {
         const isCredentialError = result.error?.code === "HTTP_401" || result.error?.code === "HTTP_403" || result.error?.code?.includes("UNAUTHORIZED") || result.error?.code?.includes("FORBIDDEN");
         if (isCredentialError) {
+          const where = apiEndpoint.replace(/\/$/, "") === import_core5.DEFAULT_API_ENDPOINT ? "Get the correct values at: https://kensaur.us/mushi-mushi/admin/projects" : "Get the correct values from your Mushi console's Projects page.";
           console.error(
-            '[Mushi] Credentials rejected. Check your projectId and apiKey (must have "report:write" scope). Get the correct values at: https://kensaur.us/mushi-mushi/admin/projects'
+            '[Mushi] Credentials rejected. Check your projectId and apiKey (must have "report:write" scope). ' + where
           );
           return;
         }

package/dist/index.js

@@ -242,9 +242,8 @@ async function encryptQueueBlob(plaintext, secureStorage) {
   combined.set(new Uint8Array(cipher), iv.length);
   return ENCRYPTED_PREFIX + bytesToBase64(combined);
 }
-async function decryptQueueBlob(stored, secureStorage) {
+async function decryptQueueBlob(stored, _secureStorage) {
   if (!stored.startsWith(ENCRYPTED_PREFIX)) return stored;
-  if (!secureStorage) return stored;
   const secure = await loadSecureStore();
   if (!secure || !hasWebCrypto()) return stored;
   const key = await getOrCreateQueueKey(secure);
@@ -1222,7 +1221,7 @@ var s2 = StyleSheet2.create({
 
 // src/version.ts
 var MUSHI_SDK_PACKAGE = "@mushi-mushi/react-native";
-var MUSHI_SDK_VERSION = "0.19.1" ? "0.19.1" : "0.17.0";
+var MUSHI_SDK_VERSION = "0.19.2" ? "0.19.2" : "0.17.0";
 
 // src/provider.tsx
 import { jsx as jsx3, jsxs as jsxs2 } from "react/jsx-runtime";
@@ -1507,8 +1506,9 @@ function MushiProvider({ children, config: configProp, ...barePropConfig }) {
       if (!result.ok) {
         const isCredentialError = result.error?.code === "HTTP_401" || result.error?.code === "HTTP_403" || result.error?.code?.includes("UNAUTHORIZED") || result.error?.code?.includes("FORBIDDEN");
         if (isCredentialError) {
+          const where = apiEndpoint.replace(/\/$/, "") === DEFAULT_API_ENDPOINT ? "Get the correct values at: https://kensaur.us/mushi-mushi/admin/projects" : "Get the correct values from your Mushi console's Projects page.";
           console.error(
-            '[Mushi] Credentials rejected. Check your projectId and apiKey (must have "report:write" scope). Get the correct values at: https://kensaur.us/mushi-mushi/admin/projects'
+            '[Mushi] Credentials rejected. Check your projectId and apiKey (must have "report:write" scope). ' + where
           );
           return;
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mushi-mushi/react-native",
-  "version": "0.19.1",
+  "version": "0.19.2",
   "license": "MIT",
   "description": "React Native SDK for Mushi Mushi — shake-to-report, bottom sheet widget, full context capture",
   "main": "./dist/index.cjs",
@@ -37,7 +37,7 @@
     }
   },
   "dependencies": {
-    "@mushi-mushi/core": "^1.19.1"
+    "@mushi-mushi/core": "^1.19.2"
   },
   "devDependencies": {
     "@types/react": "^19.2.17",