@scalebun/web 1.0.0 → 1.2.1

package/dist/features/inbox/InboxFeature.js

@@ -1,4 +1,4 @@
-import { now, getReplayCoord } from '../../core';
+import { now, getReplayCoord } from '../../core/index.js';
 const INITIAL_STATE = { unreadCount: 0, total: 0, syncStatus: 'idle' };
 export class InboxFeature {
     constructor() {
@@ -90,7 +90,7 @@ export class InboxFeature {
         this.remoteTheme = theme;
         if (!this.widget)
             return; // headless host, or not mounted yet — mount() will pick it up
-        void import('./widget/InboxWidget').then(({ mountInbox }) => {
+        void import('./widget/InboxWidget.js').then(({ mountInbox }) => {
             this.widget?.destroy();
             this.widget = mountInbox(this.controller(), this.mountOpts ?? {}, this.remoteTheme);
         });
@@ -109,7 +109,7 @@ export class InboxFeature {
         if (this.loading)
             return this.loading;
         this.loading = (async () => {
-            const [{ InboxRuntime }, { InboxStore }] = await Promise.all([import('./runtime'), import('./store')]);
+            const [{ InboxRuntime }, { InboxStore }] = await Promise.all([import('./runtime.js'), import('./store.js')]);
             const store = new InboxStore(this.ctx?.deviceId || 'anon'); // per-identity (A1.4 re-scopes on identify)
             const rt = new InboxRuntime({
                 trackEvent: (n, p) => this.ctx?.trackEvent(n, p),
@@ -124,7 +124,7 @@ export class InboxFeature {
             this.pendingCta.clear();
             await rt.hydrate(); // A1.2 — restore the persisted snapshot, then emit the real initial state
             // A1.3 — build the delta-sync engine (shares the one store) + kick an initial pull (best-effort).
-            const { InboxSync, InboxTransport } = await import('./sync');
+            const { InboxSync, InboxTransport } = await import('./sync.js');
             const transport = new InboxTransport(this.ctx?.apiBaseUrl ?? '', this.ctx?.clientKey ?? '', this.ctx?.deviceId ?? 'anon');
             this.syncEngine = new InboxSync({
                 transport, store, runtime: rt,
@@ -174,7 +174,7 @@ export class InboxFeature {
                 if (typeof document === 'undefined')
                     return;
                 void this.ensureRuntime().then(async () => {
-                    const { mountInbox } = await import('./widget/InboxWidget');
+                    const { mountInbox } = await import('./widget/InboxWidget.js');
                     this.widget?.destroy();
                     this.mountOpts = opts ?? {};
                     this.widget = mountInbox(this.controller(), this.mountOpts, this.remoteTheme);

package/dist/features/inbox/runtime.d.ts

@@ -1,5 +1,5 @@
-import { type InboxStorePort } from './store';
-import type { InboxMessage, InboxQueryOptions, InboxPage, InboxState, InboxCta, InboxSyncStatus, InboxDirtyOp } from './types';
+import { type InboxStorePort } from './store.js';
+import type { InboxMessage, InboxQueryOptions, InboxPage, InboxState, InboxCta, InboxSyncStatus, InboxDirtyOp } from './types.js';
 export interface InboxRuntimeDeps {
     trackEvent: (name: string, props?: Record<string, unknown>) => void;
     replayCoord: () => {

package/dist/features/inbox/runtime.js

@@ -8,9 +8,9 @@
  * cross-tab. The in-memory map stays the hot read path (query/sort/paginate never touch IDB).
  * A1.3 adds the delta sync + conflict resolution on top of this same surface.
  */
-import { INBOX_EVENTS } from './types';
-import { InboxStore, NOOP_STORE } from './store';
-import { mergeMessage } from './sync';
+import { INBOX_EVENTS } from './types.js';
+import { InboxStore, NOOP_STORE } from './store.js';
+import { mergeMessage } from './sync.js';
 const RANK = { unread: 0, read: 1, archived: 2, deleted: 3 };
 const DEFAULT_LIMIT = 20;
 function encodeCursor(m) {

package/dist/features/inbox/store.d.ts

@@ -8,7 +8,7 @@
  * Graceful no-op when IndexedDB is unavailable (SSR / private mode / blocked): every method degrades to
  * a no-op and the runtime's in-memory map becomes the (session-only) memory tier — never throws.
  */
-import type { InboxMessage } from './types';
+import type { InboxMessage } from './types.js';
 /** The durable-tier port the runtime depends on (so tests inject a fake, no real IDB needed). */
 export interface InboxStorePort {
     hydrate(): Promise<InboxMessage[]>;

package/dist/features/inbox/sync.d.ts

@@ -1,5 +1,5 @@
-import type { InboxMessage, InboxMessageState, InboxDirtyOp, InboxRemoteTheme, InboxSyncRequest, InboxSyncResponse, InboxSyncTransport, InboxSyncStatus } from './types';
-import type { InboxStorePort } from './store';
+import type { InboxMessage, InboxMessageState, InboxDirtyOp, InboxRemoteTheme, InboxSyncRequest, InboxSyncResponse, InboxSyncTransport, InboxSyncStatus } from './types.js';
+import type { InboxStorePort } from './store.js';
 /** Pure two-way merge for one message. `local` undefined = brand-new from the server. */
 export declare function mergeMessage(local: InboxMessage | undefined, server: InboxMessage): InboxMessage;
 /** Highest lifecycle rank reached — exported for the runtime's DAG guard + tests. */

package/dist/features/inbox/sync.js

@@ -10,7 +10,7 @@
  * The message store doubles as the outbox: a local mutation flags `_dirty`; sync pushes those as ops and
  * clears the flag on ack. Offline/failure keeps the flag (already persisted) → retried next sync.
  */
-import { isOnline } from '../../core/retry';
+import { isOnline } from '../../core/retry.js';
 const RANK = { unread: 0, read: 1, archived: 2, deleted: 3 };
 const CONTENT_KEYS = [
     'revision', 'campaignId', 'category', 'priority', 'title', 'body', 'html',

package/dist/features/inbox/widget/InboxWidget.d.ts

@@ -1,4 +1,4 @@
-import type { InboxController, InboxMountOptions } from '../types';
+import type { InboxController, InboxMountOptions } from '../types.js';
 export interface InboxWidgetHandle {
     open(): void;
     close(): void;

package/dist/features/inbox/widget/InboxWidget.js

@@ -13,8 +13,8 @@
  * boundary, and this file reads them with fallbacks rather than declaring them, so an outer value
  * wins. `mount({accent})` overrides even that. See `styles()` for why the distinction matters.
  */
-import { injectStyle } from '../../../core';
-import { DEFAULT_INBOX_LABELS } from '../types';
+import { injectStyle } from '../../../core/index.js';
+import { DEFAULT_INBOX_LABELS } from '../types.js';
 const PIN_SVG = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8"><path d="M12 17v5M9 3h6l-1 6 3 3v2H7v-2l3-3z"/></svg>';
 const ARCHIVE_SVG = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8"><path d="M3 7h18v3H3zM5 10v10h14V10M9 14h6"/></svg>';
 const TRASH_SVG = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8"><path d="M4 7h16M9 7V4h6v3M6 7l1 13h10l1-13"/></svg>';
@@ -101,89 +101,89 @@ function styles(dark, corner, rtl, layout, accent, remote) {
     const radSm = (fallback) => v('radius-sm', fallback);
     // Only what the caller explicitly asked for is declared — declaring more is what broke overrides.
     const forced = accent ? `--scalebun-inbox-accent:${accent};` : '';
-    return `
-:host{all:initial;direction:${rtl ? 'rtl' : 'ltr'};${forced}}
-*{box-sizing:border-box;font-family:${FONT}}
-button:focus-visible,.row:focus-visible,.tab:focus-visible{outline:2px solid ${PP};outline-offset:2px}
-.live{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap;border:0}
-.bell{position:fixed;${vy}:22px;${side}:22px;width:52px;height:52px;border-radius:50%;border:none;cursor:pointer;
-  background:${PP};color:#fff;display:grid;place-items:center;box-shadow:0 6px 24px rgba(108,92,231,.4);z-index:${Z}}
-.bell:hover{filter:brightness(1.06)}
-.bell svg{width:22px;height:22px}
-.badge{position:absolute;top:-4px;${side}:-4px;min-width:20px;height:20px;padding:0 5px;border-radius:10px;
-  background:${BADGE};color:#fff;font-size:11px;font-weight:700;display:none;align-items:center;justify-content:center;line-height:1}
-.badge.on{display:flex}
-.scrim{position:fixed;inset:0;background:rgba(10,8,16,.42);z-index:calc(${Z} + 1);opacity:0;pointer-events:none;transition:opacity .2s}
-.scrim.on{opacity:1;pointer-events:auto}
-.panel{position:fixed;${vy === 'bottom' ? 'bottom:0;top:0' : 'top:0;bottom:0'};${side}:0;width:${WIDTH};max-width:94vw;background:${BG};color:${FG};
-  z-index:calc(${Z} + 2);display:flex;flex-direction:column;box-shadow:${SHADOW};
-  transform:translateX(${side === 'right' ? '100%' : '-100%'});transition:transform .26s cubic-bezier(.4,0,.2,1)}
-.panel.open{transform:translateX(0)}
-.hd{display:flex;align-items:center;justify-content:space-between;padding:15px 16px;border-bottom:1px solid ${LINE}}
-.hd .ti{font-size:15px;font-weight:700}
-.hd .mt{font-size:12px;color:${SUB};margin-top:2px}
-.x{width:30px;height:30px;border-radius:${radSm("8px")};border:1px solid ${LINE};background:${SURF};color:${SUB};cursor:pointer;font-size:17px;line-height:1;display:grid;place-items:center}
-.x:hover{color:${FG}}
-.tabs{display:flex;gap:6px;padding:8px 12px;border-bottom:1px solid ${LINE};overflow-x:auto}
-.tab{flex-shrink:0;border:none;background:${SURF};color:${SUB};border-radius:999px;padding:5px 12px;font-size:12px;font-weight:600;cursor:pointer}
-.tab.on{background:${PP};color:#fff}
-.body{flex:1;overflow-y:auto;padding:6px}
-.empty{padding:48px 20px;text-align:center;color:${SUB};font-size:13px}
-.empty b{display:block;color:${FG};font-size:14px;margin-bottom:5px}
-.list{display:flex;flex-direction:column}
-.row{position:relative;display:flex;gap:${GAP};padding:12px 12px 12px 15px;border-radius:${rad("10px")};cursor:pointer}
-.row:hover{background:${SURF}}
-.row.unread{background:${UNREAD}}
-.dot{position:absolute;left:5px;top:18px;width:7px;height:7px;border-radius:50%;background:${PP};opacity:0}
-.row.unread .dot{opacity:1}
-.ic{flex-shrink:0;width:34px;height:34px;border-radius:${rad("9px")};background:${SURF};display:grid;place-items:center;overflow:hidden;font-weight:700;color:${PP};font-size:14px}
-.ic img{width:100%;height:100%;object-fit:cover}
-.rc{flex:1;min-width:0}
-.rtop{display:flex;align-items:baseline;justify-content:space-between;gap:8px}
-.rt{font-size:13.5px;font-weight:600;color:${FG};overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
-.row.unread .rt{font-weight:700}
-.rtime{flex-shrink:0;font-size:11px;color:${SUB}}
-.rb{font-size:12.5px;color:${SUB};line-height:1.4;margin-top:2px;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;overflow:hidden}
-.rcta{display:flex;gap:7px;margin-top:8px}
-.rcta button{background:${PP};color:#fff;border:none;border-radius:${radSm("7px")};padding:5px 11px;font-size:12px;font-weight:600;cursor:pointer}
-.rcta button.sec{background:${SURF};color:${FG}}
-/* ⚠️ Was \`position:absolute\` floating over the row, which meant NO space was reserved for it and the
-   title ran underneath — the buttons masked their own row's text (and in RTL they landed on top of
-   the title rather than the timestamp). A hover-only overlay only looks fine while the text is short.
-   Now a real flex child: it always occupies its column, so nothing can ever slide under it, and
-   \`visibility\` (not \`display\`) means revealing it on hover causes no reflow. */
-.ract{flex-shrink:0;align-self:flex-start;display:flex;gap:2px;border-radius:${radSm("8px")};padding:2px;visibility:hidden}
-.row:hover .ract,.row:focus-within .ract{visibility:visible}
-.ract button{width:26px;height:26px;border:none;background:none;color:${SUB};cursor:pointer;border-radius:${radSm("6px")};display:grid;place-items:center}
-.ract button:hover{background:${SURF};color:${FG}}
-.ract button.on{color:${PP}}
-.ract svg{width:15px;height:15px}
-${layout !== 'dropdown' ? '' : `
-/* ── dropdown ────────────────────────────────────────────────────────────────
-   A compact popover anchored under the host's own trigger, for a bell that already lives in a navbar.
-   Everything below OVERRIDES the drawer rules above rather than forking the stylesheet — the rows,
-   tabs, a11y wiring and theming are identical, so only geometry changes.
-
-   ⚠️ \`inset:auto\` first: the drawer pins all four edges, and leaving even one of them set makes the
-   panel stretch instead of sizing to its content. The anchor coordinates are written inline by
-   \`positionDropdown()\` at open time, because they depend on where the trigger is on screen. */
-.panel{inset:auto;top:auto;bottom:auto;left:auto;right:auto;
-  height:auto;max-height:min(70vh,520px);width:min(${WIDTH},calc(100vw - 24px));
-  border:1px solid ${LINE};border-radius:${rad('14px')};overflow:hidden;
-  transform:translateY(-6px) scale(.98);opacity:0;transform-origin:top ${side};
-  transition:opacity .14s ease-out,transform .14s ease-out}
-.panel.open{transform:none;opacity:1}
-/* No dimming: a dropdown is a light-touch surface, and a full-screen scrim over a navbar menu reads
-   as a modal. It still catches outside clicks — hence transparent rather than removed. */
-.scrim{background:transparent}
-.bell{display:none} /* the host's trigger IS the bell here */
-.hd{padding:12px 14px}
-.body{max-height:none}
-.foot{display:flex;border-top:1px solid ${LINE};padding:8px}
-.foot button{flex:1;border:none;background:none;color:${PP};font-size:13px;font-weight:600;
-  cursor:pointer;padding:8px;border-radius:${radSm('8px')}}
-.foot button:hover{background:${SURF}}
-`}
+    return `
+:host{all:initial;direction:${rtl ? 'rtl' : 'ltr'};${forced}}
+*{box-sizing:border-box;font-family:${FONT}}
+button:focus-visible,.row:focus-visible,.tab:focus-visible{outline:2px solid ${PP};outline-offset:2px}
+.live{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap;border:0}
+.bell{position:fixed;${vy}:22px;${side}:22px;width:52px;height:52px;border-radius:50%;border:none;cursor:pointer;
+  background:${PP};color:#fff;display:grid;place-items:center;box-shadow:0 6px 24px rgba(108,92,231,.4);z-index:${Z}}
+.bell:hover{filter:brightness(1.06)}
+.bell svg{width:22px;height:22px}
+.badge{position:absolute;top:-4px;${side}:-4px;min-width:20px;height:20px;padding:0 5px;border-radius:10px;
+  background:${BADGE};color:#fff;font-size:11px;font-weight:700;display:none;align-items:center;justify-content:center;line-height:1}
+.badge.on{display:flex}
+.scrim{position:fixed;inset:0;background:rgba(10,8,16,.42);z-index:calc(${Z} + 1);opacity:0;pointer-events:none;transition:opacity .2s}
+.scrim.on{opacity:1;pointer-events:auto}
+.panel{position:fixed;${vy === 'bottom' ? 'bottom:0;top:0' : 'top:0;bottom:0'};${side}:0;width:${WIDTH};max-width:94vw;background:${BG};color:${FG};
+  z-index:calc(${Z} + 2);display:flex;flex-direction:column;box-shadow:${SHADOW};
+  transform:translateX(${side === 'right' ? '100%' : '-100%'});transition:transform .26s cubic-bezier(.4,0,.2,1)}
+.panel.open{transform:translateX(0)}
+.hd{display:flex;align-items:center;justify-content:space-between;padding:15px 16px;border-bottom:1px solid ${LINE}}
+.hd .ti{font-size:15px;font-weight:700}
+.hd .mt{font-size:12px;color:${SUB};margin-top:2px}
+.x{width:30px;height:30px;border-radius:${radSm("8px")};border:1px solid ${LINE};background:${SURF};color:${SUB};cursor:pointer;font-size:17px;line-height:1;display:grid;place-items:center}
+.x:hover{color:${FG}}
+.tabs{display:flex;gap:6px;padding:8px 12px;border-bottom:1px solid ${LINE};overflow-x:auto}
+.tab{flex-shrink:0;border:none;background:${SURF};color:${SUB};border-radius:999px;padding:5px 12px;font-size:12px;font-weight:600;cursor:pointer}
+.tab.on{background:${PP};color:#fff}
+.body{flex:1;overflow-y:auto;padding:6px}
+.empty{padding:48px 20px;text-align:center;color:${SUB};font-size:13px}
+.empty b{display:block;color:${FG};font-size:14px;margin-bottom:5px}
+.list{display:flex;flex-direction:column}
+.row{position:relative;display:flex;gap:${GAP};padding:12px 12px 12px 15px;border-radius:${rad("10px")};cursor:pointer}
+.row:hover{background:${SURF}}
+.row.unread{background:${UNREAD}}
+.dot{position:absolute;left:5px;top:18px;width:7px;height:7px;border-radius:50%;background:${PP};opacity:0}
+.row.unread .dot{opacity:1}
+.ic{flex-shrink:0;width:34px;height:34px;border-radius:${rad("9px")};background:${SURF};display:grid;place-items:center;overflow:hidden;font-weight:700;color:${PP};font-size:14px}
+.ic img{width:100%;height:100%;object-fit:cover}
+.rc{flex:1;min-width:0}
+.rtop{display:flex;align-items:baseline;justify-content:space-between;gap:8px}
+.rt{font-size:13.5px;font-weight:600;color:${FG};overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.row.unread .rt{font-weight:700}
+.rtime{flex-shrink:0;font-size:11px;color:${SUB}}
+.rb{font-size:12.5px;color:${SUB};line-height:1.4;margin-top:2px;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;overflow:hidden}
+.rcta{display:flex;gap:7px;margin-top:8px}
+.rcta button{background:${PP};color:#fff;border:none;border-radius:${radSm("7px")};padding:5px 11px;font-size:12px;font-weight:600;cursor:pointer}
+.rcta button.sec{background:${SURF};color:${FG}}
+/* ⚠️ Was \`position:absolute\` floating over the row, which meant NO space was reserved for it and the
+   title ran underneath — the buttons masked their own row's text (and in RTL they landed on top of
+   the title rather than the timestamp). A hover-only overlay only looks fine while the text is short.
+   Now a real flex child: it always occupies its column, so nothing can ever slide under it, and
+   \`visibility\` (not \`display\`) means revealing it on hover causes no reflow. */
+.ract{flex-shrink:0;align-self:flex-start;display:flex;gap:2px;border-radius:${radSm("8px")};padding:2px;visibility:hidden}
+.row:hover .ract,.row:focus-within .ract{visibility:visible}
+.ract button{width:26px;height:26px;border:none;background:none;color:${SUB};cursor:pointer;border-radius:${radSm("6px")};display:grid;place-items:center}
+.ract button:hover{background:${SURF};color:${FG}}
+.ract button.on{color:${PP}}
+.ract svg{width:15px;height:15px}
+${layout !== 'dropdown' ? '' : `
+/* ── dropdown ────────────────────────────────────────────────────────────────
+   A compact popover anchored under the host's own trigger, for a bell that already lives in a navbar.
+   Everything below OVERRIDES the drawer rules above rather than forking the stylesheet — the rows,
+   tabs, a11y wiring and theming are identical, so only geometry changes.
+
+   ⚠️ \`inset:auto\` first: the drawer pins all four edges, and leaving even one of them set makes the
+   panel stretch instead of sizing to its content. The anchor coordinates are written inline by
+   \`positionDropdown()\` at open time, because they depend on where the trigger is on screen. */
+.panel{inset:auto;top:auto;bottom:auto;left:auto;right:auto;
+  height:auto;max-height:min(70vh,520px);width:min(${WIDTH},calc(100vw - 24px));
+  border:1px solid ${LINE};border-radius:${rad('14px')};overflow:hidden;
+  transform:translateY(-6px) scale(.98);opacity:0;transform-origin:top ${side};
+  transition:opacity .14s ease-out,transform .14s ease-out}
+.panel.open{transform:none;opacity:1}
+/* No dimming: a dropdown is a light-touch surface, and a full-screen scrim over a navbar menu reads
+   as a modal. It still catches outside clicks — hence transparent rather than removed. */
+.scrim{background:transparent}
+.bell{display:none} /* the host's trigger IS the bell here */
+.hd{padding:12px 14px}
+.body{max-height:none}
+.foot{display:flex;border-top:1px solid ${LINE};padding:8px}
+.foot button{flex:1;border:none;background:none;color:${PP};font-size:13px;font-weight:600;
+  cursor:pointer;padding:8px;border-radius:${radSm('8px')}}
+.foot button:hover{background:${SURF}}
+`}
 @media(prefers-reduced-motion:reduce){.panel,.scrim{transition:none}}`;
 }
 /**

package/dist/features/journey/InteractionTracker.js

@@ -9,7 +9,7 @@
  * merged into a single row, so per-element click analytics could not exist. The selector was always
  * unmasked, so this never was the SDK's privacy boundary anyway.
  */
-import { RageDetector, DeadClickWatcher } from './friction';
+import { RageDetector, DeadClickWatcher } from './friction.js';
 export class InteractionTracker {
     constructor(emit, opts = {}, 
     /** Raise a capture signal ('rage'|'dead') onto the bus — arms friction-triggered features

package/dist/features/journey/JourneyFeature.js

@@ -1,6 +1,6 @@
-import { uuid, now, getReplayCoord } from '../../core';
-import { NavigationTracker } from './NavigationTracker';
-import { InteractionTracker } from './InteractionTracker';
+import { uuid, now, getReplayCoord } from '../../core/index.js';
+import { NavigationTracker } from './NavigationTracker.js';
+import { InteractionTracker } from './InteractionTracker.js';
 export class JourneyFeature {
     constructor() {
         this.name = 'journey';

package/dist/features/manifest.d.ts

@@ -1,5 +1,5 @@
 import type { IFeature } from '@scalebun/sdk-contracts';
-import type { Capabilities } from '../core/capabilities';
+import type { Capabilities } from '../core/capabilities.js';
 /**
  * The feature registry source. Each capture feature vertical (errors, network, webVitals, replay,
  * …) appends its instance here — this is the append-only seam from WEB-SDK-PLAN.md §1. Bootstrap

package/dist/features/manifest.js

@@ -1,21 +1,21 @@
-import { AnalyticsFeature } from './analytics/AnalyticsFeature';
-import { ConfigFeature } from './config/ConfigFeature';
-import { ErrorsFeature } from './errors/ErrorsFeature';
-import { NetworkFeature } from './network/NetworkFeature';
-import { WebVitalsFeature } from './webVitals/WebVitalsFeature';
-import { PerformanceFeature } from './performance/PerformanceFeature';
-import { JourneyFeature } from './journey/JourneyFeature';
-import { ConsoleFeature } from './console/ConsoleFeature';
-import { BugReportFeature } from './bugreport/BugReportFeature';
-import { CrashFeature } from './crash/CrashFeature';
-import { EngageFeature } from './engage/EngageFeature';
-import { InboxFeature } from './inbox/InboxFeature';
-import { WebPerfFeature } from './webperf/WebPerfFeature';
-import { ProfilerFeature } from './profiler/ProfilerFeature';
-import { WatchdogFeature } from './watchdog/WatchdogFeature';
-import { ExitIntentFeature } from './exit-intent/ExitIntentFeature';
-import { InApp2Feature } from './inapp/InApp2Feature';
-import { ReplayFeature } from './replay/ReplayFeature';
+import { AnalyticsFeature } from './analytics/AnalyticsFeature.js';
+import { ConfigFeature } from './config/ConfigFeature.js';
+import { ErrorsFeature } from './errors/ErrorsFeature.js';
+import { NetworkFeature } from './network/NetworkFeature.js';
+import { WebVitalsFeature } from './webVitals/WebVitalsFeature.js';
+import { PerformanceFeature } from './performance/PerformanceFeature.js';
+import { JourneyFeature } from './journey/JourneyFeature.js';
+import { ConsoleFeature } from './console/ConsoleFeature.js';
+import { BugReportFeature } from './bugreport/BugReportFeature.js';
+import { CrashFeature } from './crash/CrashFeature.js';
+import { EngageFeature } from './engage/EngageFeature.js';
+import { InboxFeature } from './inbox/InboxFeature.js';
+import { WebPerfFeature } from './webperf/WebPerfFeature.js';
+import { ProfilerFeature } from './profiler/ProfilerFeature.js';
+import { WatchdogFeature } from './watchdog/WatchdogFeature.js';
+import { ExitIntentFeature } from './exit-intent/ExitIntentFeature.js';
+import { InApp2Feature } from './inapp/InApp2Feature.js';
+import { ReplayFeature } from './replay/ReplayFeature.js';
 /**
  * The feature registry source. Each capture feature vertical (errors, network, webVitals, replay,
  * …) appends its instance here — this is the append-only seam from WEB-SDK-PLAN.md §1. Bootstrap

package/dist/features/network/NetworkFeature.d.ts

@@ -5,7 +5,7 @@
  * the SDK's own ingestion traffic. Thin shell: interceptors + normalize + stats.
  */
 import type { IFeature, FeatureContext } from '@scalebun/sdk-contracts';
-import type { NetProtocol, NetFailure } from './types';
+import type { NetProtocol, NetFailure } from './types.js';
 /** Self-observability snapshot (N5) — the SDK's own network-capture health. */
 export interface NetworkStats {
     /** emitted to the pipeline */

package/dist/features/network/NetworkFeature.js

@@ -4,14 +4,14 @@
  * taxonomy/slow/route); bodies/headers are off by default (privacy) and an opt-in (N4). Self-excludes
  * the SDK's own ingestion traffic. Thin shell: interceptors + normalize + stats.
  */
-import { installFetch } from './fetchInterceptor';
-import { installXhr } from './xhrInterceptor';
-import { toNetworkItem } from './normalize';
-import { makeTraceInjector } from './tracing';
-import { DEFAULT_SLOW_MS } from './classify';
-import { ResourceTimingIndex } from './timing';
-import { shouldKeep } from './sampler';
-import { Deduper } from './dedup';
+import { installFetch } from './fetchInterceptor.js';
+import { installXhr } from './xhrInterceptor.js';
+import { toNetworkItem } from './normalize.js';
+import { makeTraceInjector } from './tracing.js';
+import { DEFAULT_SLOW_MS } from './classify.js';
+import { ResourceTimingIndex } from './timing.js';
+import { shouldKeep } from './sampler.js';
+import { Deduper } from './dedup.js';
 function matchUrl(pat, url) {
     return typeof pat === 'string' ? url.includes(pat) : pat.test(url);
 }
@@ -110,7 +110,7 @@ export class NetworkFeature {
             beacon: true,
         };
         const nav = typeof navigator !== 'undefined' ? navigator : undefined;
-        void import('./intercept/streams')
+        void import('./intercept/streams.js')
             .then((m) => {
             if (this.active)
                 this.uninstalls.push(...m.installStreams(window, nav, onRecord, isOwnUrl, flags));
@@ -152,7 +152,7 @@ export class NetworkFeature {
         const wantGraphql = proto === 'http' && c.graphql === undefined && this.maybeGraphql(c);
         const wantBody = !!this.bodyOpts && proto === 'http';
         if (wantGraphql || wantBody) {
-            import('./lazy')
+            import('./lazy.js')
                 .then((m) => m.enrichHttpCapture(c, { graphql: wantGraphql, body: wantBody ? this.bodyOpts : undefined }))
                 .catch(() => { })
                 .finally(() => {

package/dist/features/network/capture/body.d.ts

@@ -8,7 +8,7 @@
  * Stream-safety is guaranteed by the interceptor (it clones the response before the host reads it);
  * here we only consume the already-cloned text. Never throws — capture is best-effort.
  */
-import type { NetCapture } from '../types';
+import type { NetCapture } from '../types.js';
 export interface BodyCaptureOptions {
     bodyMaxBytes: number;
     contentTypeAllowlist: string[];

package/dist/features/network/capture/body.js

@@ -8,7 +8,7 @@
  * Stream-safety is guaranteed by the interceptor (it clones the response before the host reads it);
  * here we only consume the already-cloned text. Never throws — capture is best-effort.
  */
-import { scrubText } from '../../../core';
+import { scrubText } from '../../../core/index.js';
 export const DEFAULT_BODY_MAX_BYTES = 8192;
 export const BODY_MAX_CEILING = 64 * 1024; // hard ceiling regardless of config (caps egress)
 export const DEFAULT_CONTENT_TYPES = ['application/json', 'text/plain'];

package/dist/features/network/classify.d.ts

@@ -7,7 +7,7 @@
  * status 0 — we disambiguate by the error message shape (browsers say "Failed to fetch" / mention
  * CORS) but stay conservative: ambiguous → `network_error`.
  */
-import type { NetFailure } from './types';
+import type { NetFailure } from './types.js';
 export declare const DEFAULT_SLOW_MS = 2000;
 /** Map a settled HTTP request to a failure class, or undefined when it succeeded. */
 export declare function classifyHttp(input: {

package/dist/features/network/fetchInterceptor.d.ts

@@ -3,7 +3,7 @@
  * (we never consume the stream) — body capture is a later, opt-in enhancement. Self-excludes the
  * SDK's own ingestion traffic. `target` is injectable so it's unit-testable in node.
  */
-import type { OnRecord, IsOwnUrl, InjectTrace } from './types';
+import type { OnRecord, IsOwnUrl, InjectTrace } from './types.js';
 type FetchHolder = {
     fetch: typeof fetch;
 };

package/dist/features/network/fetchInterceptor.js

@@ -3,7 +3,7 @@
  * (we never consume the stream) — body capture is a later, opt-in enhancement. Self-excludes the
  * SDK's own ingestion traffic. `target` is injectable so it's unit-testable in node.
  */
-import { requestBodyBytes, contentLengthBytes, perfNow } from './size';
+import { requestBodyBytes, contentLengthBytes, perfNow } from './size.js';
 export function installFetch(target, onRecord, isOwnUrl, injectTrace) {
     const original = target.fetch;
     if (typeof original !== 'function')

package/dist/features/network/intercept/beacon.d.ts

@@ -5,7 +5,7 @@
  * not) synchronously, which we map to a success/failure. Self-excludes the SDK's own egress. Patches
  * `navigator.sendBeacon`; restores on teardown.
  */
-import type { OnRecord, IsOwnUrl } from '../types';
+import type { OnRecord, IsOwnUrl } from '../types.js';
 type NavHolder = {
     sendBeacon: typeof navigator.sendBeacon;
 };

package/dist/features/network/intercept/sse.d.ts

@@ -7,7 +7,7 @@
  * EventSource has no programmatic "close" event — the host calls `.close()`. We patch that to settle,
  * and also settle on a terminal `error` (readyState CLOSED) so a dropped connection still emits.
  */
-import type { OnRecord, IsOwnUrl } from '../types';
+import type { OnRecord, IsOwnUrl } from '../types.js';
 type EsHolder = {
     EventSource: typeof EventSource;
 };

package/dist/features/network/intercept/streams.d.ts

@@ -1,9 +1,9 @@
 /** N3/N6 — WebSocket + SSE + sendBeacon installers bundled into ONE lazy chunk (loaded when those
  *  transports are tracked). Keeps the long-lived-stream + beacon code out of the core bundle. */
-import { installWebSocket } from './websocket';
-import { installEventSource } from './sse';
-import { installBeacon } from './beacon';
-import type { OnRecord, IsOwnUrl } from '../types';
+import { installWebSocket } from './websocket.js';
+import { installEventSource } from './sse.js';
+import { installBeacon } from './beacon.js';
+import type { OnRecord, IsOwnUrl } from '../types.js';
 export { installWebSocket, installEventSource, installBeacon };
 /**
  * Install all enabled stream transports in one call, returning their uninstallers. Keeps the

package/dist/features/network/intercept/streams.js

@@ -1,8 +1,8 @@
 /** N3/N6 — WebSocket + SSE + sendBeacon installers bundled into ONE lazy chunk (loaded when those
  *  transports are tracked). Keeps the long-lived-stream + beacon code out of the core bundle. */
-import { installWebSocket } from './websocket';
-import { installEventSource } from './sse';
-import { installBeacon } from './beacon';
+import { installWebSocket } from './websocket.js';
+import { installEventSource } from './sse.js';
+import { installBeacon } from './beacon.js';
 export { installWebSocket, installEventSource, installBeacon };
 /**
  * Install all enabled stream transports in one call, returning their uninstallers. Keeps the

package/dist/features/network/intercept/websocket.d.ts

@@ -5,7 +5,7 @@
  * (10⁴ messages) stays flat in memory. Patches the global `WebSocket` constructor; restores on
  * teardown. Self-excludes the SDK's own origin (it doesn't open sockets, but defensive).
  */
-import type { OnRecord, IsOwnUrl } from '../types';
+import type { OnRecord, IsOwnUrl } from '../types.js';
 type WsHolder = {
     WebSocket: typeof WebSocket;
 };

package/dist/features/network/lazy.d.ts

@@ -4,9 +4,9 @@
  * GraphQL-looking request, the body capturer when captureBodies is on, WS/SSE installers when those
  * transports are tracked + first used.
  */
-import { looksLikeGraphql, parseGraphqlRequest, graphqlResponseHasErrors } from './parse/graphql';
-import { type BodyCaptureOptions } from './capture/body';
-import type { NetCapture } from './types';
+import { looksLikeGraphql, parseGraphqlRequest, graphqlResponseHasErrors } from './parse/graphql.js';
+import { type BodyCaptureOptions } from './capture/body.js';
+import type { NetCapture } from './types.js';
 export { looksLikeGraphql, parseGraphqlRequest, graphqlResponseHasErrors };
 export interface HttpEnrichOptions {
     /** Run N2 GraphQL op-awareness (the capture passed the cheap core-side pre-check). */

package/dist/features/network/lazy.js

@@ -4,8 +4,8 @@
  * GraphQL-looking request, the body capturer when captureBodies is on, WS/SSE installers when those
  * transports are tracked + first used.
  */
-import { looksLikeGraphql, parseGraphqlRequest, graphqlResponseHasErrors } from './parse/graphql';
-import { isAllowedContentType, sanitizeBody } from './capture/body';
+import { looksLikeGraphql, parseGraphqlRequest, graphqlResponseHasErrors } from './parse/graphql.js';
+import { isAllowedContentType, sanitizeBody } from './capture/body.js';
 export { looksLikeGraphql, parseGraphqlRequest, graphqlResponseHasErrors };
 /**
  * Single LAZY enrichment pass for an http capture. Reads the (stream-safe, one-shot) response text

package/dist/features/network/normalize.d.ts

@@ -1,6 +1,6 @@
 /** Builds a contract `network` Item from an interceptor capture. */
 import type { NetworkItem } from '@scalebun/protocol';
-import type { NetCapture } from './types';
+import type { NetCapture } from './types.js';
 export interface NormalizeOptions {
     /** "slow" threshold in ms (config.network.slowRequestMs). */
     slowMs?: number;

package/dist/features/network/normalize.js

@@ -1,7 +1,7 @@
 /** Builds a contract `network` Item from an interceptor capture. */
-import { uuid, now } from '../../core';
-import { classifyHttp, isSlow, DEFAULT_SLOW_MS } from './classify';
-import { templateRoute } from './parse/url';
+import { uuid, now } from '../../core/index.js';
+import { classifyHttp, isSlow, DEFAULT_SLOW_MS } from './classify.js';
+import { templateRoute } from './parse/url.js';
 export function toNetworkItem(c, opts = {}) {
     const protocol = c.protocol ?? 'http';
     // WS/SSE/beacon carry their own settle semantics; classify only request/response transports.

package/dist/features/network/parse/graphql.d.ts

@@ -7,7 +7,7 @@
  * Zero-dep, defensive: never throws (callers feature-detect), bounded work (only the leading bytes of
  * the query are scanned for the operation keyword).
  */
-import type { NetGraphql } from '../types';
+import type { NetGraphql } from '../types.js';
 /** True when a request looks like GraphQL — URL hint OR a body that parses to a GraphQL op shape. */
 export declare function looksLikeGraphql(url: string, body: string | undefined): boolean;
 /** Parse the request body → operation metadata. Returns undefined when it isn't recognizably GraphQL. */

package/dist/features/network/sampler.js

@@ -5,7 +5,7 @@
  * spread evenly and the backend could re-derive it — no client trust, the same hash family as
  * flags/experiments/error-grouping. Zero-dep.
  */
-import { fnv1a32 } from '../config/bucketing';
+import { fnv1a32 } from '../config/bucketing.js';
 /**
  * Decide whether to keep a request. `sampleRate` ∈ [0,1] is the base for SUCCESSFUL requests; 1 keeps
  * everything (today's behavior), 0 keeps only failed/slow. Out-of-range rates clamp.

package/dist/features/network/timing.d.ts

@@ -9,7 +9,7 @@
  * capture and merges timing onto fetch/XHR (`initiatorType` 'fetch'|'xmlhttprequest'). We only read
  * those initiator types so a resource isn't double-counted by both verticals.
  */
-import type { NetTiming } from './types';
+import type { NetTiming } from './types.js';
 export interface MergedTiming {
     timing?: NetTiming;
     transferSize?: number;

package/dist/features/network/xhrInterceptor.d.ts

@@ -3,7 +3,7 @@
  * Bodies/headers are not read in v1. Self-excludes the SDK's own traffic. `target` is injectable
  * for testability.
  */
-import type { OnRecord, IsOwnUrl, InjectTrace } from './types';
+import type { OnRecord, IsOwnUrl, InjectTrace } from './types.js';
 type XhrHolder = {
     XMLHttpRequest: typeof XMLHttpRequest;
 };