@siteping/server 0.1.0 → 0.2.0

package/dist/logger.d.cts

@@ -0,0 +1,30 @@
+/**
+ * Where SitePing reports what goes wrong. The arguments come in console's and
+ * winston's order, so `console` and winston satisfy it as they are. pino's
+ * methods take the context first and type-check here anyway, then drop the
+ * context: adapt them — `{ error: (message, { error, ...context }) =>
+ * log.error({ err: error, ...context }, message), warn: … }`.
+ *
+ * Each option asks only for the level it reports — the handler's `logger`
+ * for `error`, the stores' and screenshot storages' for `warn`
+ * ({@link SitepingWarnLogger}) — so one object can be handed to all of them.
+ */
+export interface SitepingLogger {
+    /** Unexpected failures: a request answered 500, a hook or a lookup failed. */
+    error(message: string, context: Record<string, unknown>): void | Promise<void>;
+    /**
+     * Degraded but handled: a screenshot dropped or left orphaned, screenshots
+     * stored inline. The handler never calls it; the stores and screenshot
+     * storages require it.
+     */
+    warn?(message: string, context: Record<string, unknown>): void | Promise<void>;
+}
+/** What the stores and screenshot storages report through: a {@link SitepingLogger} with `warn`. */
+export type SitepingWarnLogger = Required<Pick<SitepingLogger, "warn">>;
+/**
+ * Report through `logger.warn` without letting the logger fail its caller,
+ * on paths documented as non-throwing: a throw, or a rejection of what it
+ * returns — unhandled, fatal in Node by default — is dropped. A broken
+ * logger has no other channel to report through.
+ */
+export declare function warnSafely(logger: SitepingWarnLogger, message: string, context: Record<string, unknown>): void;

package/dist/logger.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Where SitePing reports what goes wrong. The arguments come in console's and
+ * winston's order, so `console` and winston satisfy it as they are. pino's
+ * methods take the context first and type-check here anyway, then drop the
+ * context: adapt them — `{ error: (message, { error, ...context }) =>
+ * log.error({ err: error, ...context }, message), warn: … }`.
+ *
+ * Each option asks only for the level it reports — the handler's `logger`
+ * for `error`, the stores' and screenshot storages' for `warn`
+ * ({@link SitepingWarnLogger}) — so one object can be handed to all of them.
+ */
+export interface SitepingLogger {
+    /** Unexpected failures: a request answered 500, a hook or a lookup failed. */
+    error(message: string, context: Record<string, unknown>): void | Promise<void>;
+    /**
+     * Degraded but handled: a screenshot dropped or left orphaned, screenshots
+     * stored inline. The handler never calls it; the stores and screenshot
+     * storages require it.
+     */
+    warn?(message: string, context: Record<string, unknown>): void | Promise<void>;
+}
+/** What the stores and screenshot storages report through: a {@link SitepingLogger} with `warn`. */
+export type SitepingWarnLogger = Required<Pick<SitepingLogger, "warn">>;
+/**
+ * Report through `logger.warn` without letting the logger fail its caller,
+ * on paths documented as non-throwing: a throw, or a rejection of what it
+ * returns — unhandled, fatal in Node by default — is dropped. A broken
+ * logger has no other channel to report through.
+ */
+export declare function warnSafely(logger: SitepingWarnLogger, message: string, context: Record<string, unknown>): void;

package/dist/schema.d.cts

@@ -52,6 +52,13 @@ export interface FieldDef {
     isUnique?: boolean;
     /** Prisma native type attribute (e.g. "Text" for @db.Text) — used for MySQL compatibility on long strings */
     nativeType?: PrismaNativeType;
+    /**
+     * Longest value the HTTP handler accepts for this column, in characters —
+     * set on every `String` column filled from a request body, and checked
+     * against the handler's own caps. The CLI sizes the column from it where a
+     * plain `String` is shorter: on MySQL, a `VARCHAR(191)`.
+     */
+    maxLength?: number;
     /** Prisma @updatedAt attribute */
     isUpdatedAt?: boolean;
 }
@@ -82,6 +89,7 @@ declare const _SITEPING_MODELS: {
             };
             readonly projectName: {
                 readonly type: "String";
+                readonly maxLength: 191;
             };
             readonly type: {
                 readonly type: "String";
@@ -89,6 +97,7 @@ declare const _SITEPING_MODELS: {
             readonly message: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 5000;
             };
             readonly status: {
                 readonly type: "String";
@@ -96,15 +105,18 @@ declare const _SITEPING_MODELS: {
             };
             readonly url: {
                 readonly type: "String";
+                readonly maxLength: 2000;
             };
             readonly urlPattern: {
                 readonly type: "String";
                 readonly optional: true;
+                readonly maxLength: 2000;
             };
             readonly screenshotUrl: {
                 readonly type: "String";
                 readonly optional: true;
                 readonly nativeType: "Text";
+                readonly maxLength: 1500000;
             };
             readonly screenshotRegion: {
                 readonly type: "Json";
@@ -116,19 +128,24 @@ declare const _SITEPING_MODELS: {
             };
             readonly viewport: {
                 readonly type: "String";
+                readonly maxLength: 50;
             };
             readonly userAgent: {
                 readonly type: "String";
+                readonly maxLength: 500;
             };
             readonly authorName: {
                 readonly type: "String";
+                readonly maxLength: 200;
             };
             readonly authorEmail: {
                 readonly type: "String";
+                readonly maxLength: 200;
             };
             readonly clientId: {
                 readonly type: "String";
                 readonly isUnique: true;
+                readonly maxLength: 191;
             };
             readonly resolvedAt: {
                 readonly type: "DateTime";
@@ -188,40 +205,50 @@ declare const _SITEPING_MODELS: {
             readonly cssSelector: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 2000;
             };
             readonly xpath: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 2000;
             };
             readonly textSnippet: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 500;
             };
             readonly elementTag: {
                 readonly type: "String";
+                readonly maxLength: 191;
             };
             readonly elementId: {
                 readonly type: "String";
                 readonly optional: true;
+                readonly maxLength: 191;
             };
             readonly textPrefix: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 200;
             };
             readonly textSuffix: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 200;
             };
             readonly fingerprint: {
                 readonly type: "String";
+                readonly maxLength: 200;
             };
             readonly neighborText: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 500;
             };
             readonly anchorKey: {
                 readonly type: "String";
                 readonly optional: true;
+                readonly maxLength: 200;
             };
             readonly xPct: {
                 readonly type: "Float";
@@ -283,12 +310,15 @@ declare const _SITEPING_MODELS: {
             readonly body: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 5000;
             };
             readonly authorName: {
                 readonly type: "String";
+                readonly maxLength: 200;
             };
             readonly authorEmail: {
                 readonly type: "String";
+                readonly maxLength: 200;
             };
             readonly authorRole: {
                 readonly type: "String";
@@ -297,6 +327,7 @@ declare const _SITEPING_MODELS: {
             readonly clientId: {
                 readonly type: "String";
                 readonly isUnique: true;
+                readonly maxLength: 191;
             };
             readonly createdAt: {
                 readonly type: "DateTime";

package/dist/schema.d.ts

@@ -52,6 +52,13 @@ export interface FieldDef {
     isUnique?: boolean;
     /** Prisma native type attribute (e.g. "Text" for @db.Text) — used for MySQL compatibility on long strings */
     nativeType?: PrismaNativeType;
+    /**
+     * Longest value the HTTP handler accepts for this column, in characters —
+     * set on every `String` column filled from a request body, and checked
+     * against the handler's own caps. The CLI sizes the column from it where a
+     * plain `String` is shorter: on MySQL, a `VARCHAR(191)`.
+     */
+    maxLength?: number;
     /** Prisma @updatedAt attribute */
     isUpdatedAt?: boolean;
 }
@@ -82,6 +89,7 @@ declare const _SITEPING_MODELS: {
             };
             readonly projectName: {
                 readonly type: "String";
+                readonly maxLength: 191;
             };
             readonly type: {
                 readonly type: "String";
@@ -89,6 +97,7 @@ declare const _SITEPING_MODELS: {
             readonly message: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 5000;
             };
             readonly status: {
                 readonly type: "String";
@@ -96,15 +105,18 @@ declare const _SITEPING_MODELS: {
             };
             readonly url: {
                 readonly type: "String";
+                readonly maxLength: 2000;
             };
             readonly urlPattern: {
                 readonly type: "String";
                 readonly optional: true;
+                readonly maxLength: 2000;
             };
             readonly screenshotUrl: {
                 readonly type: "String";
                 readonly optional: true;
                 readonly nativeType: "Text";
+                readonly maxLength: 1500000;
             };
             readonly screenshotRegion: {
                 readonly type: "Json";
@@ -116,19 +128,24 @@ declare const _SITEPING_MODELS: {
             };
             readonly viewport: {
                 readonly type: "String";
+                readonly maxLength: 50;
             };
             readonly userAgent: {
                 readonly type: "String";
+                readonly maxLength: 500;
             };
             readonly authorName: {
                 readonly type: "String";
+                readonly maxLength: 200;
             };
             readonly authorEmail: {
                 readonly type: "String";
+                readonly maxLength: 200;
             };
             readonly clientId: {
                 readonly type: "String";
                 readonly isUnique: true;
+                readonly maxLength: 191;
             };
             readonly resolvedAt: {
                 readonly type: "DateTime";
@@ -188,40 +205,50 @@ declare const _SITEPING_MODELS: {
             readonly cssSelector: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 2000;
             };
             readonly xpath: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 2000;
             };
             readonly textSnippet: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 500;
             };
             readonly elementTag: {
                 readonly type: "String";
+                readonly maxLength: 191;
             };
             readonly elementId: {
                 readonly type: "String";
                 readonly optional: true;
+                readonly maxLength: 191;
             };
             readonly textPrefix: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 200;
             };
             readonly textSuffix: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 200;
             };
             readonly fingerprint: {
                 readonly type: "String";
+                readonly maxLength: 200;
             };
             readonly neighborText: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 500;
             };
             readonly anchorKey: {
                 readonly type: "String";
                 readonly optional: true;
+                readonly maxLength: 200;
             };
             readonly xPct: {
                 readonly type: "Float";
@@ -283,12 +310,15 @@ declare const _SITEPING_MODELS: {
             readonly body: {
                 readonly type: "String";
                 readonly nativeType: "Text";
+                readonly maxLength: 5000;
             };
             readonly authorName: {
                 readonly type: "String";
+                readonly maxLength: 200;
             };
             readonly authorEmail: {
                 readonly type: "String";
+                readonly maxLength: 200;
             };
             readonly authorRole: {
                 readonly type: "String";
@@ -297,6 +327,7 @@ declare const _SITEPING_MODELS: {
             readonly clientId: {
                 readonly type: "String";
                 readonly isUnique: true;
+                readonly maxLength: 191;
             };
             readonly createdAt: {
                 readonly type: "DateTime";

package/dist/screenshot-storage.d.cts

@@ -42,26 +42,24 @@ export interface ScreenshotStorage {
      * Adapters call this synchronously inside `createFeedback` — keep it
      * fast or move to a queue if needed.
      *
-     * `ctx.feedbackId` identifies the upload. Adapters that upload before the
-     * record exists pass the *client-generated* `clientId` (Prisma); the
-     * Drizzle adapter passes the server-generated id the create attempt will
-     * insert the record under.
+     * `ctx.feedbackId` is the id the feedback is stored under. The record does
+     * not exist yet, so the store draws it before the upload — fresh for each
+     * create attempt, never client-supplied — and inserts the row under it.
+     * Two submissions of one `clientId` therefore upload under two ids, and
+     * only one of them is stored.
      *
      * **URL ownership:** every call must return a URL no other call returns —
      * key the object by a fresh random value (`crypto.randomUUID()`, as the
      * example does), never by `ctx.feedbackId` alone nor by a content hash.
      * Adapters treat each URL as the property of the one record that stores it
      * and may pass it to `delete` once that record is deleted, or once its
-     * create lost a race: two submissions of one `clientId` both upload, and
-     * the object of the one that is not stored is deleted. Under Prisma,
-     * `ctx.feedbackId` is that client-supplied `clientId`, so an object keyed
-     * by it is rewritten by every replay — a retry, or anyone who learns the
-     * id — and a URL shared by several records lets deleting one remove the
-     * object another still points at.
+     * create lost a race: the object of the submission that is not stored is
+     * deleted, and a URL shared by several records would let deleting one
+     * remove the object another still points at.
      *
-     * **Security note:** treat `ctx.feedbackId` as attacker-controlled:
-     * sanitize before using it in filesystem paths or object keys, even though
-     * server adapters validate its shape upstream.
+     * **Security note:** the bundled stores generate `ctx.feedbackId`, but a
+     * third-party one may not honour the contract: sanitize it before using it
+     * in a filesystem path or an object key.
      */
     upload(dataUrl: string, ctx: {
         feedbackId: string;
@@ -72,10 +70,9 @@ export interface ScreenshotStorage {
     /**
      * Optional cleanup hook called when the feedback is deleted, and for an
      * object uploaded by a create whose record was not stored: one rejected
-     * because its `clientId` is already stored, or — in adapters that key
-     * uploads per attempt, like Drizzle — one whose insert failed. An object a
-     * stored row still references (a deterministic key reused by the replay)
-     * is kept. Receives only URLs returned by {@link ScreenshotStorage.upload}.
+     * because its `clientId` is already stored, or one whose insert failed. An
+     * object a stored row still references (a storage that broke URL
+     * ownership) is kept. Receives only URLs returned by {@link ScreenshotStorage.upload}.
      * Adapters call this best-effort and swallow errors — orphaned objects are
      * preferred over failed deletes.
      */

package/dist/screenshot-storage.d.ts

@@ -42,26 +42,24 @@ export interface ScreenshotStorage {
      * Adapters call this synchronously inside `createFeedback` — keep it
      * fast or move to a queue if needed.
      *
-     * `ctx.feedbackId` identifies the upload. Adapters that upload before the
-     * record exists pass the *client-generated* `clientId` (Prisma); the
-     * Drizzle adapter passes the server-generated id the create attempt will
-     * insert the record under.
+     * `ctx.feedbackId` is the id the feedback is stored under. The record does
+     * not exist yet, so the store draws it before the upload — fresh for each
+     * create attempt, never client-supplied — and inserts the row under it.
+     * Two submissions of one `clientId` therefore upload under two ids, and
+     * only one of them is stored.
      *
      * **URL ownership:** every call must return a URL no other call returns —
      * key the object by a fresh random value (`crypto.randomUUID()`, as the
      * example does), never by `ctx.feedbackId` alone nor by a content hash.
      * Adapters treat each URL as the property of the one record that stores it
      * and may pass it to `delete` once that record is deleted, or once its
-     * create lost a race: two submissions of one `clientId` both upload, and
-     * the object of the one that is not stored is deleted. Under Prisma,
-     * `ctx.feedbackId` is that client-supplied `clientId`, so an object keyed
-     * by it is rewritten by every replay — a retry, or anyone who learns the
-     * id — and a URL shared by several records lets deleting one remove the
-     * object another still points at.
+     * create lost a race: the object of the submission that is not stored is
+     * deleted, and a URL shared by several records would let deleting one
+     * remove the object another still points at.
      *
-     * **Security note:** treat `ctx.feedbackId` as attacker-controlled:
-     * sanitize before using it in filesystem paths or object keys, even though
-     * server adapters validate its shape upstream.
+     * **Security note:** the bundled stores generate `ctx.feedbackId`, but a
+     * third-party one may not honour the contract: sanitize it before using it
+     * in a filesystem path or an object key.
      */
     upload(dataUrl: string, ctx: {
         feedbackId: string;
@@ -72,10 +70,9 @@ export interface ScreenshotStorage {
     /**
      * Optional cleanup hook called when the feedback is deleted, and for an
      * object uploaded by a create whose record was not stored: one rejected
-     * because its `clientId` is already stored, or — in adapters that key
-     * uploads per attempt, like Drizzle — one whose insert failed. An object a
-     * stored row still references (a deterministic key reused by the replay)
-     * is kept. Receives only URLs returned by {@link ScreenshotStorage.upload}.
+     * because its `clientId` is already stored, or one whose insert failed. An
+     * object a stored row still references (a storage that broke URL
+     * ownership) is kept. Receives only URLs returned by {@link ScreenshotStorage.upload}.
      * Adapters call this best-effort and swallow errors — orphaned objects are
      * preferred over failed deletes.
      */

package/dist/siteping-core.d.cts

@@ -1,20 +1,23 @@
 export { settleWithConcurrencyLimit } from "./concurrency.cjs";
-export { buildDeepLink, parseHttpUrl } from "./deep-link.cjs";
+export { buildDeepLink, isSafeImageUrl, parseHttpUrl } from "./deep-link.cjs";
 export { EMAIL_PATTERN, isValidEmail } from "./email.cjs";
-export type { SitepingErrorCode } from "./errors.cjs";
-export { SitepingAuthError, SitepingError, SitepingNetworkError, SitepingValidationError } from "./errors.cjs";
+export type { SitepingClientError, SitepingConfigErrorCode, SitepingErrorCode } from "./errors.cjs";
+export { isSitepingConfigError, isSitepingError, SitepingAuthError, SitepingConfigError, SitepingError, SitepingNetworkError, SitepingValidationError, } from "./errors.cjs";
 export type { FilterResult, Pagination } from "./filters.cjs";
 export { applyFeedbackFilters, clampPagination, DEFAULT_PAGE_LIMIT, isUnreachableOffset, MAX_PAGE_LIMIT, matchesFeedbackQuery, } from "./filters.cjs";
 export type { I18n, LocaleLoaders, TranslateFunction } from "./i18n.cjs";
 export { canonicalizeLocale, createI18n, interpolate, intlLocale, tWithParams } from "./i18n.cjs";
+export type { SitepingLogger, SitepingWarnLogger } from "./logger.cjs";
+export { warnSafely } from "./logger.cjs";
 export type { FieldDef, IndexDef, ModelDef, PrismaNativeType, PrismaScalarType, RelationDef, RelationKind, RelationOnDelete, SitepingModelFieldName, SitepingModelName, } from "./schema.cjs";
 export { isRelationField, isScalarField, SITEPING_MODELS } from "./schema.cjs";
 export type { ScreenshotStorage } from "./screenshot-storage.cjs";
 export { SCREENSHOT_DELETE_CONCURRENCY, screenshotMimeType } from "./screenshot-storage.cjs";
 export type { CollectionStore, CollectionStoreBackend } from "./store-helpers.cjs";
 export { buildAnnotationRecord, buildCommentRecord, buildFeedbackRecord, createCollectionStore, } from "./store-helpers.cjs";
+export { REPLACEMENT_CHARACTER, toStorableText, toStorableValue, UNSTORABLE_CODE_UNITS } from "./text.cjs";
 export type { AssertEqual, IfEquals, Prettify, Serialized } from "./type-utils.cjs";
 export { hasOwn, isRecord } from "./type-utils.cjs";
-export type { AnchorData, AnnotationCreateInput, AnnotationPayload, AnnotationRecord, AnnotationResponse, BuiltinLocale, ClosedFeedbackStatus, CommentAuthorRole, CommentCreateInput, CommentDeletePayload, CommentPayload, CommentRecord, CommentResponse, ConsoleDiagnosticEntry, ConsoleDiagnosticLevel, DiagnosticsCaptureOptions, DiagnosticsSnapshot, FeedbackCreateInput, FeedbackCreateOutcome, FeedbackListPermissions, FeedbackPage, FeedbackPayload, FeedbackPermissions, FeedbackQuery, FeedbackRecord, FeedbackResponse, FeedbackResponseList, FeedbackStatus, FeedbackType, FeedbackUpdateInput, NetworkDiagnosticEntry, OpenFeedbackStatus, PageScope, RectData, ScreenshotRegion, SitepingBaseConfig, SitepingCapabilities, SitepingConfig, SitepingDeepLinkOptions, SitepingHeadersOption, SitepingHttpConfig, SitepingIdentity, SitepingInstance, SitepingLocale, SitepingPanelAction, SitepingPanelActionContext, SitepingPanelActionFeedback, SitepingPanelButtonAction, SitepingPanelLinkAction, SitepingPosition, SitepingPublicEventListener, SitepingPublicEvents, SitepingSkipReason, SitepingStore, SitepingStoreConfig, SitepingTheme, SitepingUnsubscribe, } from "./types.cjs";
-export { ANCHOR_ELEMENT_ID_MAX, ANCHOR_ELEMENT_TAG_MAX, BUILTIN_LOCALES, CLOSED_FEEDBACK_STATUSES, COMMENT_AUTHOR_ROLES, COMMENT_BODY_MAX_LENGTH, CONSOLE_DIAGNOSTIC_LEVELS, FEEDBACK_STATUSES, FEEDBACK_TYPES, flattenAnnotation, IDENTITY_FIELD_MAX_LENGTH, isClosedStatus, isStoreDuplicate, isStoreLimit, isStoreNotFound, isStorePersistence, isStoreValueTooLong, MAX_COMMENTS_PER_FEEDBACK, OPEN_FEEDBACK_STATUSES, StoreDuplicateError, StoreLimitError, StoreNotFoundError, StorePersistenceError, StoreValueTooLongError, toFeedbackUpdate, } from "./types.cjs";
+export type { AnchorData, AnnotationCreateInput, AnnotationPayload, AnnotationRecord, AnnotationResponse, BuiltinLocale, ClosedFeedbackStatus, CommentAuthorRole, CommentCreateInput, CommentCreateOutcome, CommentDeletePayload, CommentPayload, CommentPermissions, CommentRecord, CommentResponse, ConsoleDiagnosticEntry, ConsoleDiagnosticLevel, DiagnosticsCaptureOptions, DiagnosticsSnapshot, FeedbackCreateInput, FeedbackCreateOutcome, FeedbackListPermissions, FeedbackPage, FeedbackPayload, FeedbackPermissions, FeedbackQuery, FeedbackRecord, FeedbackResponse, FeedbackResponseList, FeedbackStatus, FeedbackType, FeedbackUpdateInput, NetworkDiagnosticEntry, OpenFeedbackStatus, PageScope, RectData, ScreenshotRegion, SitepingBaseConfig, SitepingCapabilities, SitepingConfig, SitepingDeepLinkOptions, SitepingHeadersOption, SitepingHttpConfig, SitepingIdentity, SitepingInstance, SitepingLocale, SitepingPanelAction, SitepingPanelActionContext, SitepingPanelActionFeedback, SitepingPanelButtonAction, SitepingPanelLinkAction, SitepingPosition, SitepingPublicEventListener, SitepingPublicEvents, SitepingSkipReason, SitepingStore, SitepingStoreConfig, SitepingTheme, SitepingUnsubscribe, } from "./types.cjs";
+export { ANCHOR_ELEMENT_ID_MAX, ANCHOR_ELEMENT_TAG_MAX, BUILTIN_LOCALES, CLIENT_ID_MAX_LENGTH, CLOSED_FEEDBACK_STATUSES, COMMENT_AUTHOR_ROLES, COMMENT_BODY_MAX_LENGTH, CONSOLE_DIAGNOSTIC_LEVELS, FEEDBACK_STATUSES, FEEDBACK_TYPES, flattenAnnotation, IDENTITY_FIELD_MAX_LENGTH, isClosedStatus, isStoreDuplicate, isStoreLimit, isStoreNotFound, isStorePersistence, isStoreValueTooLong, MAX_COMMENTS_PER_FEEDBACK, OPEN_FEEDBACK_STATUSES, PROJECT_NAME_MAX_LENGTH, SITEPING_PROTOCOL_VERSION, StoreDuplicateError, StoreLimitError, StoreNotFoundError, StorePersistenceError, StoreValueTooLongError, toFeedbackUpdate, } from "./types.cjs";
 export { errorFromResponse, feedbackQueryToSearchParams, isCommentGone, isThreadFull, mergeRequestHeaders, networkErrorFromException, newClientId, withSearchParams, } from "./wire.cjs";

package/dist/siteping-core.d.ts

@@ -1,20 +1,23 @@
 export { settleWithConcurrencyLimit } from "./concurrency.js";
-export { buildDeepLink, parseHttpUrl } from "./deep-link.js";
+export { buildDeepLink, isSafeImageUrl, parseHttpUrl } from "./deep-link.js";
 export { EMAIL_PATTERN, isValidEmail } from "./email.js";
-export type { SitepingErrorCode } from "./errors.js";
-export { SitepingAuthError, SitepingError, SitepingNetworkError, SitepingValidationError } from "./errors.js";
+export type { SitepingClientError, SitepingConfigErrorCode, SitepingErrorCode } from "./errors.js";
+export { isSitepingConfigError, isSitepingError, SitepingAuthError, SitepingConfigError, SitepingError, SitepingNetworkError, SitepingValidationError, } from "./errors.js";
 export type { FilterResult, Pagination } from "./filters.js";
 export { applyFeedbackFilters, clampPagination, DEFAULT_PAGE_LIMIT, isUnreachableOffset, MAX_PAGE_LIMIT, matchesFeedbackQuery, } from "./filters.js";
 export type { I18n, LocaleLoaders, TranslateFunction } from "./i18n.js";
 export { canonicalizeLocale, createI18n, interpolate, intlLocale, tWithParams } from "./i18n.js";
+export type { SitepingLogger, SitepingWarnLogger } from "./logger.js";
+export { warnSafely } from "./logger.js";
 export type { FieldDef, IndexDef, ModelDef, PrismaNativeType, PrismaScalarType, RelationDef, RelationKind, RelationOnDelete, SitepingModelFieldName, SitepingModelName, } from "./schema.js";
 export { isRelationField, isScalarField, SITEPING_MODELS } from "./schema.js";
 export type { ScreenshotStorage } from "./screenshot-storage.js";
 export { SCREENSHOT_DELETE_CONCURRENCY, screenshotMimeType } from "./screenshot-storage.js";
 export type { CollectionStore, CollectionStoreBackend } from "./store-helpers.js";
 export { buildAnnotationRecord, buildCommentRecord, buildFeedbackRecord, createCollectionStore, } from "./store-helpers.js";
+export { REPLACEMENT_CHARACTER, toStorableText, toStorableValue, UNSTORABLE_CODE_UNITS } from "./text.js";
 export type { AssertEqual, IfEquals, Prettify, Serialized } from "./type-utils.js";
 export { hasOwn, isRecord } from "./type-utils.js";
-export type { AnchorData, AnnotationCreateInput, AnnotationPayload, AnnotationRecord, AnnotationResponse, BuiltinLocale, ClosedFeedbackStatus, CommentAuthorRole, CommentCreateInput, CommentDeletePayload, CommentPayload, CommentRecord, CommentResponse, ConsoleDiagnosticEntry, ConsoleDiagnosticLevel, DiagnosticsCaptureOptions, DiagnosticsSnapshot, FeedbackCreateInput, FeedbackCreateOutcome, FeedbackListPermissions, FeedbackPage, FeedbackPayload, FeedbackPermissions, FeedbackQuery, FeedbackRecord, FeedbackResponse, FeedbackResponseList, FeedbackStatus, FeedbackType, FeedbackUpdateInput, NetworkDiagnosticEntry, OpenFeedbackStatus, PageScope, RectData, ScreenshotRegion, SitepingBaseConfig, SitepingCapabilities, SitepingConfig, SitepingDeepLinkOptions, SitepingHeadersOption, SitepingHttpConfig, SitepingIdentity, SitepingInstance, SitepingLocale, SitepingPanelAction, SitepingPanelActionContext, SitepingPanelActionFeedback, SitepingPanelButtonAction, SitepingPanelLinkAction, SitepingPosition, SitepingPublicEventListener, SitepingPublicEvents, SitepingSkipReason, SitepingStore, SitepingStoreConfig, SitepingTheme, SitepingUnsubscribe, } from "./types.js";
-export { ANCHOR_ELEMENT_ID_MAX, ANCHOR_ELEMENT_TAG_MAX, BUILTIN_LOCALES, CLOSED_FEEDBACK_STATUSES, COMMENT_AUTHOR_ROLES, COMMENT_BODY_MAX_LENGTH, CONSOLE_DIAGNOSTIC_LEVELS, FEEDBACK_STATUSES, FEEDBACK_TYPES, flattenAnnotation, IDENTITY_FIELD_MAX_LENGTH, isClosedStatus, isStoreDuplicate, isStoreLimit, isStoreNotFound, isStorePersistence, isStoreValueTooLong, MAX_COMMENTS_PER_FEEDBACK, OPEN_FEEDBACK_STATUSES, StoreDuplicateError, StoreLimitError, StoreNotFoundError, StorePersistenceError, StoreValueTooLongError, toFeedbackUpdate, } from "./types.js";
+export type { AnchorData, AnnotationCreateInput, AnnotationPayload, AnnotationRecord, AnnotationResponse, BuiltinLocale, ClosedFeedbackStatus, CommentAuthorRole, CommentCreateInput, CommentCreateOutcome, CommentDeletePayload, CommentPayload, CommentPermissions, CommentRecord, CommentResponse, ConsoleDiagnosticEntry, ConsoleDiagnosticLevel, DiagnosticsCaptureOptions, DiagnosticsSnapshot, FeedbackCreateInput, FeedbackCreateOutcome, FeedbackListPermissions, FeedbackPage, FeedbackPayload, FeedbackPermissions, FeedbackQuery, FeedbackRecord, FeedbackResponse, FeedbackResponseList, FeedbackStatus, FeedbackType, FeedbackUpdateInput, NetworkDiagnosticEntry, OpenFeedbackStatus, PageScope, RectData, ScreenshotRegion, SitepingBaseConfig, SitepingCapabilities, SitepingConfig, SitepingDeepLinkOptions, SitepingHeadersOption, SitepingHttpConfig, SitepingIdentity, SitepingInstance, SitepingLocale, SitepingPanelAction, SitepingPanelActionContext, SitepingPanelActionFeedback, SitepingPanelButtonAction, SitepingPanelLinkAction, SitepingPosition, SitepingPublicEventListener, SitepingPublicEvents, SitepingSkipReason, SitepingStore, SitepingStoreConfig, SitepingTheme, SitepingUnsubscribe, } from "./types.js";
+export { ANCHOR_ELEMENT_ID_MAX, ANCHOR_ELEMENT_TAG_MAX, BUILTIN_LOCALES, CLIENT_ID_MAX_LENGTH, CLOSED_FEEDBACK_STATUSES, COMMENT_AUTHOR_ROLES, COMMENT_BODY_MAX_LENGTH, CONSOLE_DIAGNOSTIC_LEVELS, FEEDBACK_STATUSES, FEEDBACK_TYPES, flattenAnnotation, IDENTITY_FIELD_MAX_LENGTH, isClosedStatus, isStoreDuplicate, isStoreLimit, isStoreNotFound, isStorePersistence, isStoreValueTooLong, MAX_COMMENTS_PER_FEEDBACK, OPEN_FEEDBACK_STATUSES, PROJECT_NAME_MAX_LENGTH, SITEPING_PROTOCOL_VERSION, StoreDuplicateError, StoreLimitError, StoreNotFoundError, StorePersistenceError, StoreValueTooLongError, toFeedbackUpdate, } from "./types.js";
 export { errorFromResponse, feedbackQueryToSearchParams, isCommentGone, isThreadFull, mergeRequestHeaders, networkErrorFromException, newClientId, withSearchParams, } from "./wire.js";

package/dist/store-helpers.d.cts

@@ -69,8 +69,9 @@ export interface CollectionStoreBackend {
     /** Generate a unique id for a new feedback, annotation or comment record. */
     generateId(): string;
     /**
-     * Keep discussion threads on the records: the store gains `addComment` and
-     * `deleteComment`, and new records start with `comments: []`. Opt in once
+     * Keep discussion threads on the records: the store gains `addComment`,
+     * `addCommentIfAbsent` and `deleteComment`, and new records start with
+     * `comments: []`. Opt in once
      * `load` hands back what `persist` wrote for them, each comment's
      * `createdAt` a `Date` again (a JSON backend revives it like the record's
      * own dates). Off by default, so an adapter written before threads never
@@ -87,12 +88,14 @@ export type CollectionStore = SitepingStore & Required<Pick<SitepingStore, "veri
 /**
  * Build a fully conformant `SitepingStore` on top of a snapshot backend.
  *
- * The engine implements the whole store contract: clientId dedup (idempotent
- * create, with `createFeedbackIfAbsent` reporting inserts), newest-first
+ * The engine implements the whole store contract: clientId dedup (a repeated
+ * `clientId` makes `createFeedback` throw `StoreDuplicateError`, and
+ * `createFeedbackIfAbsent` report the existing record), newest-first
  * ordering, the standard filter/pagination pipeline, `StoreNotFoundError` on
  * missing update/delete, project-scoped bulk delete,
  * `verifyProjectOwnership`, and — with `comments: true` — discussion threads
- * (`addComment`, `deleteComment`) kept on each record. The snapshot returned by `load` is
+ * (`addComment`, `addCommentIfAbsent` reporting inserts, `deleteComment`)
+ * kept on each record. The snapshot returned by `load` is
  * never mutated: every write hands `persist` a new array, so a failed write leaves
  * a cached snapshot exactly as it was. When `persist` fails during `createFeedback`
  * and the record carries an inline screenshot, the engine retries once
@@ -101,12 +104,13 @@ export type CollectionStore = SitepingStore & Required<Pick<SitepingStore, "veri
  * returning the record would claim a success that was never persisted.
  *
  * Mutations (`createFeedbackIfAbsent`, `createFeedback`, `updateFeedback`,
- * `deleteFeedback`, `deleteAllFeedbacks`, `addComment`, `deleteComment`) run
+ * `deleteFeedback`, `deleteAllFeedbacks`, `addComment`, `addCommentIfAbsent`,
+ * `deleteComment`) run
  * one at a time through a queue owned by the returned store, so concurrent
  * calls — the widget's `Promise.all` bulk resolve/delete, a comment posted
  * while its feedback is resolved — never start from the same snapshot and
- * overwrite each other, and `createFeedbackIfAbsent` reports `created: true`
- * exactly once per `clientId`. A failed mutation rejects with its own error
+ * overwrite each other, and `createFeedbackIfAbsent` and `addCommentIfAbsent`
+ * report `created: true` exactly once per `clientId`. A failed mutation rejects with its own error
  * and does not block the ones queued after it, but `load` and `persist` must
  * always settle: one that never does stalls every later mutation on the
  * store, so give network-backed primitives a timeout. Reads are not queued: they see the
@@ -136,5 +140,5 @@ export type CollectionStore = SitepingStore & Required<Pick<SitepingStore, "veri
  */
 export declare function createCollectionStore(backend: CollectionStoreBackend & {
     comments: true;
-}): CollectionStore & Required<Pick<SitepingStore, "createFeedbackIfAbsent" | "addComment" | "deleteComment">>;
+}): CollectionStore & Required<Pick<SitepingStore, "createFeedbackIfAbsent" | "addComment" | "addCommentIfAbsent" | "deleteComment">>;
 export declare function createCollectionStore(backend: CollectionStoreBackend): CollectionStore & Required<Pick<SitepingStore, "createFeedbackIfAbsent">>;