reflet-sdk 0.7.1 → 0.7.3

package/CHANGELOG.md

@@ -5,6 +5,19 @@ All notable changes to `reflet-sdk` will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.7.3] - 2026-10-14
+
+### Added
+
+- Sessions: the Intentions tab opens On screen. Each intention is pinned on the screenshot of the moment it's about: a frame around the element, a line, a number, and a short label the AI writes (at most 6 words, in your language), with Confirm and Dismiss right on the label. A choice already made stays focusable but inactive, like on the cards; Undo in the notice reverts it. Click the label to open the full intention under Details. Intentions with no screenshot are listed below with the same buttons. Your own wording replaces the AI label: once you, an accepted change or a removed contribution rewrites the need, the label shows the need itself. Requires the matching Reflet backend.
+- Sessions: the frame goes around the element you talk about, not the one under your pointer. Each screenshot now records the names and positions of the buttons, links, headings and images it shows (masked elements and anything in or around typed text left out, at most 80), and the AI picks among them. When nothing matches, or for sessions analyzed before, the label sits on the screenshot without a frame. Removing a screenshot or correcting a passage's context moves the pin at once. The session disclosure lists this.
+
+## [0.7.2] - 2026-10-13
+
+### Fixed
+
+- Team tools: Sign in with Reflet failed on every app that sends `Cross-Origin-Opener-Policy: same-origin` (a common security header, Helmet's default), reporting "Sign-in was cancelled." a second after the popup opened. With `same-origin-allow-popups` it still failed in Safari. Sign-in now moves the tab to reflet.app and back to the same page instead of using a popup, so it works whatever that header says, and pop-up blockers no longer get in the way.
+
 ## [0.7.1] - 2026-10-13
 
 ### Fixed

package/README.md

@@ -274,9 +274,11 @@ forwards the feedback and session endpoints the devtools use.
 
 Members of your Reflet organization can record sessions on your deployed app
 too; your users never see it. Open any page with `?reflet-team` once, click
-**Sign in with Reflet**, and approve the app in the popup. The browser keeps a
-token for that origin for 7 days; revoke it from Account → Team tools in your
-apps on reflet.app.
+**Sign in with Reflet**, and approve the app on reflet.app: the tab comes back
+to the same page, signed in. Sign-in needs no popup, so it works whatever
+`Cross-Origin-Opener-Policy` your app sends. The browser keeps a token for that
+origin for 7 days; revoke it from Account → Team tools in your apps on
+reflet.app.
 
 Two things on your side:
 

package/dist/{devtools-layer-BI_hut0i.js → devtools-layer-CsIcpepI.js}

@@ -1,6 +1,6 @@
-import { $ as shortenSourcePath, G as describeElement, Q as resolveComponentStack, R as DEFAULT_WIDGET_LABELS, U as buildElementSelection, V as collectPageContext, X as getFiberFromNode, a as uploadBlob, f as listenOnPageAndWidget, g as isSubmitEnter, it as releaseCapture, nt as capturedFromCanvas, o as ElementPicker, p as listenToKeydown, r as deriveTitle, rt as capturedViewportSize, s as isWidgetOwned, tt as captureViewport, z as SDK_VERSION } from "./submit-DBy9TCSq.js";
+import { $ as shortenSourcePath, G as describeElement, Q as resolveComponentStack, R as DEFAULT_WIDGET_LABELS, U as buildElementSelection, V as collectPageContext, X as getFiberFromNode, a as uploadBlob, f as listenOnPageAndWidget, g as isSubmitEnter, it as releaseCapture, nt as capturedFromCanvas, o as ElementPicker, p as listenToKeydown, r as deriveTitle, rt as capturedViewportSize, s as isWidgetOwned, tt as captureViewport, z as SDK_VERSION } from "./submit-Dl0rm6TV.js";
 import { t as SelectionOutline } from "./selection-outline-NzAAAZXR.js";
-import { A as Notices, C as searchCode, D as openDatabase, E as describeStorageFailure, M as reportFailure, O as settle, S as probeDevRoute, T as committed, a as DevtoolsBar, b as fetchBoardFeedback, c as copyToClipboard, f as SessionWorkspaceProvider, g as devtoolsTransport, j as announce, l as SESSIONS_STYLES, m as useWorkspaceLoader, n as DEVTOOLS_STYLES, o as DevtoolsBarButtons, r as DevtoolsSheet, t as SessionsPanel, u as RecordingLayer, v as callReflet, w as startBoardConnect, x as fetchSourceFile, y as disconnectBoard } from "./sessions-panel-CDrnOEwi.js";
+import { A as Notices, C as searchCode, D as openDatabase, E as describeStorageFailure, M as reportFailure, O as settle, S as probeDevRoute, T as committed, a as DevtoolsBar, b as fetchBoardFeedback, c as copyToClipboard, f as SessionWorkspaceProvider, g as devtoolsTransport, j as announce, l as SESSIONS_STYLES, m as useWorkspaceLoader, n as DEVTOOLS_STYLES, o as DevtoolsBarButtons, r as DevtoolsSheet, t as SessionsPanel, u as RecordingLayer, v as callReflet, w as startBoardConnect, x as fetchSourceFile, y as disconnectBoard } from "./sessions-panel-BYM0UUgT.js";
 import * as G$1 from "react";
 import { useCallback, useEffect, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
@@ -371,40 +371,8 @@ function InboxPanel({ onOpenCode, onShowSelector }) {
 	}, scope)] });
 }
 //#endregion
-//#region src/devtools/client/route/route-hint.tsx
-function MissingRouteHint({ purpose }) {
-	return /* @__PURE__ */ jsxs("div", {
-		className: "dt-empty",
-		children: [
-			/* @__PURE__ */ jsxs("p", { children: [
-				"Add the Reflet dev route to ",
-				purpose,
-				"."
-			] }),
-			/* @__PURE__ */ jsxs("p", { children: [
-				"Next.js: ",
-				/* @__PURE__ */ jsx("code", { children: "app/api/reflet-devtools/[...path]/route.ts" }),
-				/* @__PURE__ */ jsx("br", {}),
-				/* @__PURE__ */ jsxs("code", { children: [
-					"export ",
-					"{ GET, POST }",
-					" from \"reflet-sdk/devtools/next\";"
-				] })
-			] }),
-			/* @__PURE__ */ jsxs("p", { children: [
-				"Vite: ",
-				/* @__PURE__ */ jsx("code", { children: "plugins: [refletDevtools()]" }),
-				" from",
-				" ",
-				/* @__PURE__ */ jsx("code", { children: "reflet-sdk/devtools/vite" })
-			] })
-		]
-	});
-}
-const MISSING_SECRET_KEY_HINT = "Set REFLET_SECRET_KEY (your fb_sec_ key) in the dev server environment to reach your board.";
-//#endregion
-//#region src/devtools/client/board/board-tab.tsx
-function ConnectPrompt({ publicKey }) {
+//#region src/devtools/client/route/connect-prompt.tsx
+function ConnectPrompt({ publicKey, purpose }) {
 	const [prompt, setPrompt] = useState({ kind: "idle" });
 	const connect = async () => {
 		const tab = window.open("", "_blank");
@@ -445,7 +413,7 @@ function ConnectPrompt({ publicKey }) {
 	});
 	return /* @__PURE__ */ jsxs("div", {
 		className: "dt-empty",
-		children: [/* @__PURE__ */ jsx("p", { children: "See this page's feedback and send notes to your board." }), /* @__PURE__ */ jsx("button", {
+		children: [/* @__PURE__ */ jsx("p", { children: purpose }), /* @__PURE__ */ jsx("button", {
 			className: "dt-btn",
 			"data-variant": "primary",
 			disabled: prompt.kind === "starting",
@@ -455,6 +423,40 @@ function ConnectPrompt({ publicKey }) {
 		})]
 	});
 }
+//#endregion
+//#region src/devtools/client/route/route-hint.tsx
+function MissingRouteHint({ purpose }) {
+	return /* @__PURE__ */ jsxs("div", {
+		className: "dt-empty",
+		children: [
+			/* @__PURE__ */ jsxs("p", { children: [
+				"Add the Reflet dev route to ",
+				purpose,
+				"."
+			] }),
+			/* @__PURE__ */ jsxs("p", { children: [
+				"Next.js: ",
+				/* @__PURE__ */ jsx("code", { children: "app/api/reflet-devtools/[...path]/route.ts" }),
+				/* @__PURE__ */ jsx("br", {}),
+				/* @__PURE__ */ jsxs("code", { children: [
+					"export ",
+					"{ GET, POST }",
+					" from \"reflet-sdk/devtools/next\";"
+				] })
+			] }),
+			/* @__PURE__ */ jsxs("p", { children: [
+				"Vite: ",
+				/* @__PURE__ */ jsx("code", { children: "plugins: [refletDevtools()]" }),
+				" from",
+				" ",
+				/* @__PURE__ */ jsx("code", { children: "reflet-sdk/devtools/vite" })
+			] })
+		]
+	});
+}
+const MISSING_SECRET_KEY_HINT = "Set REFLET_SECRET_KEY (your fb_sec_ key) in the dev server environment to reach your board.";
+//#endregion
+//#region src/devtools/client/board/board-tab.tsx
 function ConnectionBar({ organizationName, refresh }) {
 	const [isDisconnecting, setIsDisconnecting] = useState(false);
 	const disconnect = async () => {
@@ -487,7 +489,10 @@ function BoardTab({ canConnect, onOpenCode, onShowSelector, publicKey, refresh,
 	if (route.kind === "missing") return /* @__PURE__ */ jsx(MissingRouteHint, { purpose: "see your board's feedback for this page" });
 	if (route.kind === "checking") return null;
 	const { board } = route.status;
-	if (board.kind === "disconnected") return canConnect && publicKey !== null ? /* @__PURE__ */ jsx(ConnectPrompt, { publicKey }) : /* @__PURE__ */ jsx("p", {
+	if (board.kind === "disconnected") return canConnect && publicKey !== null ? /* @__PURE__ */ jsx(ConnectPrompt, {
+		publicKey,
+		purpose: "See this page's feedback and send notes to your board."
+	}) : /* @__PURE__ */ jsx("p", {
 		className: "dt-hint",
 		children: MISSING_SECRET_KEY_HINT
 	});
@@ -3452,15 +3457,14 @@ function SessionsScope({ children, sessions }) {
 		children
 	});
 }
-function ConnectHint({ onConnect }) {
-	return /* @__PURE__ */ jsxs("div", {
+function SessionsConnect({ connectKey }) {
+	if (connectKey === null) return /* @__PURE__ */ jsx("p", {
 		className: "dt-empty",
-		children: [/* @__PURE__ */ jsx("p", { children: "Sessions are saved under your Reflet account. Connect in the Board tab." }), /* @__PURE__ */ jsx("button", {
-			className: "dt-btn",
-			onClick: onConnect,
-			type: "button",
-			children: "Open the Board tab"
-		})]
+		children: "Sessions are recorded under your Reflet account. Connecting needs this app on localhost with a Reflet public key."
+	});
+	return /* @__PURE__ */ jsx(ConnectPrompt, {
+		publicKey: connectKey,
+		purpose: "Sessions are recorded under your Reflet account."
 	});
 }
 function WorkspaceGate({ actions, sessions }) {
@@ -3485,14 +3489,14 @@ function WorkspaceGate({ actions, sessions }) {
 		children: "Opening your sessions…"
 	});
 }
-function SessionsTab({ actions, route, sessions }) {
+function SessionsTab({ actions, connectKey, route, sessions }) {
 	if (route.kind === "checking") return /* @__PURE__ */ jsx("p", {
 		className: "dt-status",
 		children: "Connecting to the Reflet dev route…"
 	});
 	if (route.kind === "missing") return /* @__PURE__ */ jsx(MissingRouteHint, { purpose: "record sessions under your Reflet account" });
 	const { board } = route.status;
-	if (board.kind === "disconnected") return /* @__PURE__ */ jsx(ConnectHint, { onConnect: actions.onConnect });
+	if (board.kind === "disconnected") return /* @__PURE__ */ jsx(SessionsConnect, { connectKey });
 	if (board.kind === "secretKey") return /* @__PURE__ */ jsx("p", {
 		className: "dt-empty",
 		children: "Sessions are recorded under your own name, so they need Connect in the Board tab rather than REFLET_SECRET_KEY."
@@ -3649,10 +3653,10 @@ function DevtoolsLayer({ isWidgetOpen, position, publicKey }) {
 						}),
 						openTab === "sessions" && /* @__PURE__ */ jsx(SessionsTab, {
 							actions: {
-								onConnect: () => setOpenTab("inbox"),
 								onStarted: closeSheet,
 								onWriteNote: writeNoteInstead
 							},
+							connectKey: canConnect ? publicKey : null,
 							route,
 							sessions
 						}),
@@ -3692,4 +3696,4 @@ function DevtoolsLayer({ isWidgetOpen, position, publicKey }) {
 //#endregion
 export { DevtoolsLayer };
 
-//# sourceMappingURL=devtools-layer-BI_hut0i.js.map
+//# sourceMappingURL=devtools-layer-CsIcpepI.js.map