@sylergydigital/issue-pin-sdk 0.6.3 → 0.6.4

package/CHANGELOG.md

@@ -0,0 +1,228 @@
+# Changelog
+
+All notable changes to `@sylergydigital/issue-pin-sdk` are documented here.
+
+## [0.6.3] - 2026-04-14
+
+### Added
+- **UUID normalization for non-UUID auth providers** — SDK auto-converts Firebase, Auth0, Cognito, and other non-UUID user IDs to deterministic UUID v5 format at the SDK boundary. Existing UUID-format IDs pass through unchanged.
+- `normalizeUserId()` / `toSupabaseUuid()` — public utility export for converting user IDs outside the SDK component lifecycle.
+- `CSP_REQUIREMENTS` — typed constant exporting all Content Security Policy directives required by the SDK (`connect-src`, `img-src`, `style-src`), usable in server middleware or build-time CSP generation.
+- Runtime CSP violation detection — `subscribeCspDetection()` automatically activates on SDK mount and logs actionable `[IssuePin]` console warnings when CSP blocks SDK functionality. Per-directive deduplication prevents warning spam.
+- CSP documentation section in SDK README with copy-paste directive block, per-directive explanation table, and programmatic access example.
+- Debug logging for ID conversions — when `debug={true}`, logs `[EW SDK] User ID normalized: "{raw}" -> "{effective}"` for converted IDs.
+
+### Fixed
+- Stale closure in identity warning gated on `authReady` state.
+- Missing SSR guard in `subscribeCspDetection` (safe for server-side rendering).
+
+### Dependencies
+- Added `uuid@^11.0.3` as bundled dependency (CommonJS-compatible).
+
+## [0.6.2] - 2026-04-02
+
+### Fixed
+- Replaced `html2canvas` with `html2canvas-pro` to support modern CSS features like `oklab` color space.
+
+## [0.6.1] - 2026-03-24
+
+### Changed
+- Set up public SDK mirror and npm release pipeline.
+
+## [0.6.0] - 2026-03-24
+
+### Changed
+- Set up public SDK mirror and npm release pipeline.
+
+## [0.5.9] - 2026-03-24
+
+### Changed
+- Public SDK mirror and npm registry setup.
+
+## [0.5.8] - 2026-03-23
+
+### Added
+- `showHints` toggle for instructional UI hints in the SDK.
+
+## [0.5.7] - 2026-03-23
+
+### Added
+- Verified LMS federation rollout (patch).
+
+## [0.5.6] - 2026-03-23
+
+### Added
+- LMS federation rollout with verification.
+
+## [0.5.5] - 2026-03-22
+
+### Fixed
+- SDK build and packaging fixes.
+
+## [0.5.4] - 2026-03-22
+
+### Fixed
+- SDK build and packaging fixes.
+
+## [0.5.3] - 2026-03-22
+
+### Changed
+- Aligned SDK docs and package metadata with router-free integration.
+
+## [0.5.2] - 2026-03-22
+
+### Added
+- Iframe review mode for SDK pins (canvas review surface).
+
+## [0.5.1] - 2026-03-22
+
+### Added
+- Anonymous screenshot reads for SDK workspaces via Supabase RLS.
+- ThreadPins test coverage.
+- npm registry publishing.
+
+## [0.5.0] - 2026-03-22
+
+### Changed
+- npm versioning aligned with git tags.
+
+## [0.4.9] - 2026-03-22
+
+### Changed
+- Vite host allowlist and gitignore for local tooling.
+
+## [0.4.8] - 2026-03-17
+
+### Added
+- SDK customization APIs for launcher visibility and pin visibility control.
+
+## [0.4.7] - 2026-03-17
+
+### Fixed
+- SDK publish build for controlled pin mode.
+
+## [0.4.6] - 2026-03-17
+
+### Changed
+- Thread pins open in a new tab.
+
+## [0.4.5] - 2026-03-17
+
+### Changed
+- Rewrote SDK pin positioning lifecycle for stability.
+
+## [0.4.4] - 2026-03-17
+
+### Fixed
+- Stabilized SDK pin rehydration observer.
+
+## [0.4.3] - 2026-03-17
+
+### Changed
+- Allow anonymous `sdk-resolve` calls.
+
+## [0.4.2] - 2026-03-17
+
+### Changed
+- Allow commenter workspace memberships.
+
+## [0.4.1] - 2026-03-17
+
+### Added
+- Documentation for federated first-write gating.
+
+## [0.4.0] - 2026-03-17
+
+### Fixed
+- Federated SDK author attribution.
+
+## [0.3.4] - 2026-03-16
+
+### Added
+- Anonymous update RLS policy.
+
+## [0.3.3] - 2026-03-16
+
+### Changed
+- Enabled React Router v7 future flag.
+
+## [0.3.2] - 2026-03-16
+
+### Changed
+- Relaxed thread comments foreign key constraint.
+
+## [0.3.1] - 2026-03-16
+
+### Added
+- RLS policies for anonymous inserts.
+
+## [0.3.0] - 2026-03-16
+
+### Fixed
+- SDK feedback launcher click behavior.
+
+## [0.2.9] - 2026-03-16
+
+### Added
+- Hardcoded SDK theme for consistent styling.
+
+## [0.2.8] - 2026-03-16
+
+### Fixed
+- FeedbackButton `.d.ts` build ordering.
+
+## [0.2.7] - 2026-03-16
+
+### Added
+- Debug logging for SDK menu state.
+
+### Fixed
+- SDK menu state management hardened.
+
+## [0.2.6] - 2026-03-16
+
+### Fixed
+- SDK feedback launcher click handling.
+
+## [0.2.5] - 2026-03-16
+
+### Fixed
+- FeedbackButton interaction reliability.
+
+## [0.2.4] - 2026-03-16
+
+### Fixed
+- Stabilized `getSignedUrlRef` for screenshot storage.
+
+## [0.2.3] - 2026-03-16
+
+### Added
+- Error boundary wrapping for ThreadPins.
+
+## [0.2.0] - 2026-03-16
+
+### Changed
+- Renamed SDK package to `@sylergydigital/issue-pin-sdk`.
+
+## [0.1.8] - 2026-03-16
+
+### Fixed
+- TS2722 error in ScreenshotFeedback component.
+
+## [0.1.6] - 2026-03-16
+
+### Fixed
+- Viewport auto-screenshot capture.
+
+## [0.1.5] - 2026-03-16
+
+### Fixed
+- Auto-screenshot fetch reliability.
+
+## [0.1.0] - 2026-03-16
+
+### Added
+- Initial SDK release as `@sylergydigital/issue-pin-sdk`.
+- `<IssuePin />` drop-in component with pin annotations, screenshot capture, and threaded discussions.
+- Supabase-backed real-time data layer.
+- Federated user identity for SDK consumers.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sylergydigital/issue-pin-sdk",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "Issue Pin — in-app visual feedback SDK",
   "type": "module",
   "main": "dist/index.cjs",
@@ -15,7 +15,8 @@
   },
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "CHANGELOG.md"
   ],
   "scripts": {
     "build": "tsup",