peakflow-api 0.0.5 → 0.0.6

package/AGENTS.md

@@ -24,6 +24,7 @@ This repo hosts the Peakflow JavaScript client for error reporting across browse
 - Avoid adding global browser dependencies unless guarded by runtime checks.
 - When changing API exports, update `README.md` examples.
 - `.js` files should always have JSDoc comments to keep TypeScript checks happy.
+- Keep single-line JSDoc comments on a single line.
 - Use `gh` to open pull requests when requested.
 - Keep JSDoc accurate; TypeScript checks JS via `checkJs`.
 - Ensure new browser-only logic is opt-in and documented.

package/CHANGELOG.md

@@ -0,0 +1,4 @@
+# Changelog
+- Fix: avoid bundlers resolving Node-only modules in bug-reporting node transport by using runtime-only imports.
+- Chore: keep single-line JSDoc comments on a single line and document the convention.
+- Fix: defer runtime import helper creation to avoid CSP unsafe-eval during browser module load.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "peakflow-api",
-  "version": "0.0.5",
+  "version": "0.0.6",
   "type": "module",
   "main": "build/index.js",
   "types": "build/index.d.ts",

package/src/bug-reporting/index.js

@@ -229,9 +229,7 @@ export default class BugReporting {
     return true
   }
 
-  /**
-   * Wire Node.js uncaught error handlers.
-   */
+  /** Wire Node.js uncaught error handlers. */
   connectNodeUncaughtException() {
     globalThis.process.on("uncaughtException", async (error) => {
       debuggerInstance.debug(`Uncaught exception: ${error?.message || error}`)
@@ -440,8 +438,18 @@ export default class BugReporting {
    * @returns {Promise<string|null>}
    */
   async sendNodeRequest(postUrl, body) {
-    const {request} = await import("node:https")
-    const {URL} = await import("node:url")
+    /** @type {(specifier: string) => Promise<unknown>} */
+    const runtimeImport = (specifier) => {
+      const loader = new Function("specifier", "return import(specifier)")
+      return loader(specifier)
+    }
+
+    const {request} = /** @type {{request: typeof import("node:https").request}} */ (
+      await runtimeImport("node:https")
+    )
+    const {URL} = /** @type {{URL: typeof import("node:url").URL}} */ (
+      await runtimeImport("node:url")
+    )
 
     return await new Promise((resolve) => {
       const url = new URL(postUrl)