@aikaara/chat-sdk 0.7.2 → 0.7.4

package/dist/headless.cjs

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const i=require("./MountTenant-BNpG6T7E.cjs");class s extends i.EventEmitter{registration=null;pendingEdits=[];constructor(e){super(),this.setupListeners(e)}registerForm(e){this.registration=e;const t=this.pendingEdits.filter(r=>r.entity_type===e.entityType&&String(r.entity_id)===String(e.entityId));if(t.length>0){for(const r of t)e.onFieldUpdate(r.fields),this.emit("edit:applied",{entityType:r.entity_type,entityId:r.entity_id,fields:r.fields});this.pendingEdits=this.pendingEdits.filter(r=>!(r.entity_type===e.entityType&&String(r.entity_id)===String(e.entityId)))}}unregisterForm(e,t){this.registration?.entityType===e&&String(this.registration?.entityId)===String(t)&&(this.registration=null)}get currentForm(){return this.registration}pushFieldUpdates(e,t,r){this.registration&&this.registration.entityType===e&&String(this.registration.entityId)===String(t)?(this.registration.onFieldUpdate(r),this.emit("edit:applied",{entityType:e,entityId:t,fields:r})):(this.pendingEdits.push({action:"edit_entity",entity_type:e,entity_id:t,fields:r}),this.emit("edit:pending",{entityType:e,entityId:t,fields:r}))}async requestSave(){if(!this.registration)return{success:!1,error:"No form registered"};try{return await this.registration.onSave(),this.emit("save:success",{entityType:this.registration.entityType,entityId:this.registration.entityId}),{success:!0}}catch(e){const t=e instanceof Error?e.message:"Save failed";return this.emit("save:error",{entityType:this.registration.entityType,entityId:this.registration.entityId,error:t}),{success:!1,error:t}}}async requestTest(e){if(!this.registration?.onTest)return{success:!1,error:"Current form does not support testing"};try{return await this.registration.onTest(e),{success:!0}}catch(t){return{success:!1,error:t instanceof Error?t.message:"Test failed"}}}setupListeners(e){e.on("action:edit_entity",t=>{this.pushFieldUpdates(t.entity_type,t.entity_id,t.fields)}),e.on("action:save_entity",t=>{this.requestSave()}),e.on("action:test_tool",t=>{this.emit("test:triggered",{toolId:t.tool_id,parameters:t.parameters}),this.requestTest(t.parameters)})}}exports.ActionCableClient=i.ActionCableClient;exports.AikaaraChatClient=i.AikaaraChatClient;exports.ApiClient=i.ApiClient;exports.ChannelSubscription=i.ChannelSubscription;exports.ConnectionManager=i.ConnectionManager;exports.ConversationManager=i.ConversationManager;exports.EventEmitter=i.EventEmitter;exports.MessageStore=i.MessageStore;exports.SessionAuthAdapter=i.SessionAuthAdapter;exports.TiledeskTransport=i.TiledeskTransport;exports.clearPersistedConversationId=i.clearPersistedConversationId;exports.createFetchUploadAdapter=i.createFetchUploadAdapter;exports.createPresigned3StepUploadAdapter=i.createPresigned3StepUploadAdapter;exports.createTiledeskHistoryAdapter=i.createTiledeskHistoryAdapter;exports.extractTiledeskFileEnvelope=i.extractTiledeskFileEnvelope;exports.inferTiledeskRole=i.inferTiledeskRole;exports.isTiledeskSelfEcho=i.isTiledeskSelfEcho;exports.mountFromSlug=i.mountFromSlug;exports.mountTenantWidget=i.mount;exports.parseTiledeskTemplate=i.parseTiledeskTemplate;exports.FormBridge=s;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const i=require("./MountTenant-Dcp2KDZo.cjs");class r extends i.EventEmitter{registration=null;pendingEdits=[];constructor(e){super(),this.setupListeners(e)}registerForm(e){this.registration=e;const t=this.pendingEdits.filter(s=>s.entity_type===e.entityType&&String(s.entity_id)===String(e.entityId));if(t.length>0){for(const s of t)e.onFieldUpdate(s.fields),this.emit("edit:applied",{entityType:s.entity_type,entityId:s.entity_id,fields:s.fields});this.pendingEdits=this.pendingEdits.filter(s=>!(s.entity_type===e.entityType&&String(s.entity_id)===String(e.entityId)))}}unregisterForm(e,t){this.registration?.entityType===e&&String(this.registration?.entityId)===String(t)&&(this.registration=null)}get currentForm(){return this.registration}pushFieldUpdates(e,t,s){this.registration&&this.registration.entityType===e&&String(this.registration.entityId)===String(t)?(this.registration.onFieldUpdate(s),this.emit("edit:applied",{entityType:e,entityId:t,fields:s})):(this.pendingEdits.push({action:"edit_entity",entity_type:e,entity_id:t,fields:s}),this.emit("edit:pending",{entityType:e,entityId:t,fields:s}))}async requestSave(){if(!this.registration)return{success:!1,error:"No form registered"};try{return await this.registration.onSave(),this.emit("save:success",{entityType:this.registration.entityType,entityId:this.registration.entityId}),{success:!0}}catch(e){const t=e instanceof Error?e.message:"Save failed";return this.emit("save:error",{entityType:this.registration.entityType,entityId:this.registration.entityId,error:t}),{success:!1,error:t}}}async requestTest(e){if(!this.registration?.onTest)return{success:!1,error:"Current form does not support testing"};try{return await this.registration.onTest(e),{success:!0}}catch(t){return{success:!1,error:t instanceof Error?t.message:"Test failed"}}}setupListeners(e){e.on("action:edit_entity",t=>{this.pushFieldUpdates(t.entity_type,t.entity_id,t.fields)}),e.on("action:save_entity",t=>{this.requestSave()}),e.on("action:test_tool",t=>{this.emit("test:triggered",{toolId:t.tool_id,parameters:t.parameters}),this.requestTest(t.parameters)})}}exports.ActionCableClient=i.ActionCableClient;exports.AikaaraChatClient=i.AikaaraChatClient;exports.ApiClient=i.ApiClient;exports.ChannelSubscription=i.ChannelSubscription;exports.ConnectionManager=i.ConnectionManager;exports.ConversationManager=i.ConversationManager;exports.EventEmitter=i.EventEmitter;exports.MessageStore=i.MessageStore;exports.SessionAuthAdapter=i.SessionAuthAdapter;exports.SsoExchangeAdapter=i.SsoExchangeAdapter;exports.TiledeskTransport=i.TiledeskTransport;exports.clearPersistedConversationId=i.clearPersistedConversationId;exports.collectSsoCredentials=i.collectSsoCredentials;exports.createFetchUploadAdapter=i.createFetchUploadAdapter;exports.createPresigned3StepUploadAdapter=i.createPresigned3StepUploadAdapter;exports.createTiledeskHistoryAdapter=i.createTiledeskHistoryAdapter;exports.extractTiledeskFileEnvelope=i.extractTiledeskFileEnvelope;exports.inferTiledeskRole=i.inferTiledeskRole;exports.isTiledeskSelfEcho=i.isTiledeskSelfEcho;exports.mountFromSlug=i.mountFromSlug;exports.mountTenantWidget=i.mount;exports.parseTiledeskTemplate=i.parseTiledeskTemplate;exports.FormBridge=r;

package/dist/headless.d.ts

@@ -440,6 +440,9 @@ declare interface ChatEvents_2 {
 
 export declare function clearPersistedConversationId(userId: string, projectId: string): void;
 
+/** Read every credential listed in `spec`. Throws on missing required. */
+export declare function collectSsoCredentials(opts: SsoCollectorOptions): Promise<Record<string, string>>;
+
 export declare interface ConnectionConfig {
     baseUrl: string;
     wsUrl?: string;
@@ -531,6 +534,8 @@ export declare function createPresigned3StepUploadAdapter(config: Presigned3Step
 
 export declare function createTiledeskHistoryAdapter(config: TiledeskHistoryAdapterConfig): ConversationHistoryAdapter;
 
+export declare type CredentialProviders = Record<string, () => string | Promise<string>>;
+
 export declare interface EditEntityAction {
     action: 'edit_entity';
     entity_type: string;
@@ -585,6 +590,34 @@ declare interface FieldUpdate_2 {
     previousValue?: unknown;
 }
 
+export declare interface FlowDescriptor {
+    /** Heading rendered above the step list (e.g. "ITR filing process"). */
+    title?: string;
+    steps: FlowStep[];
+}
+
+/**
+ * Static side-rail process taxonomy (e.g. bandhan's "ITR filing process").
+ * Fully descriptor-driven — dashboard owns the steps. The runtime state
+ * (which step is `done` / `active`) is calculated host-side from chat
+ * events (or overlaid from a backend status endpoint like
+ * `/itr/life-cycle-status`).
+ */
+export declare interface FlowStep {
+    /** Stable id used by the host's reducer to address this step. */
+    id: string;
+    /** Display title. */
+    title: string;
+    /** Initial status. The host's `onMessage` reducer flips these as the
+     *  conversation progresses. */
+    state?: 'done' | 'active' | 'pending';
+    /** Optional nested sub-steps (one level deep — bandhan style). */
+    sub?: FlowStep[];
+    /** Free-form metadata the host can use in its reducer (templateId
+     *  patterns the bot uses to advance the step, copy text, hint, etc.). */
+    meta?: Record<string, unknown>;
+}
+
 export declare class FormBridge extends EventEmitter<FormBridgeEvents> {
     private registration;
     private pendingEdits;
@@ -714,7 +747,7 @@ export declare function isTiledeskSelfEcho(message: TiledeskMessage, userId: str
  * Descriptor entry for intercepting link clicks. `match` is a glob pattern
  * (`*` = any, `?` = single char) tested against the full clicked URL.
  */
-declare interface LinkHandler {
+export declare interface LinkHandler {
     /** Glob pattern matched against the clicked URL. */
     match: string;
     /** What to do on match. `tab` opens in new tab, `iframe` uses default modal,
@@ -870,7 +903,7 @@ export declare function parseTiledeskTemplate(message: TiledeskMessage): Tiledes
  * One HTTP call run by the SDK before auth. Failure of `soft: true` steps
  * is logged and ignored; failure of strict steps aborts the mount.
  */
-declare interface PreflightStep {
+export declare interface PreflightStep {
     url: string;
     method?: 'GET' | 'POST' | 'PUT';
     body?: Record<string, unknown>;
@@ -983,6 +1016,9 @@ export declare type SessionTokenProvider = string | (() => string | Promise<stri
 
 export declare interface SlugMountedWidget extends MountedTenantWidget {
     fullName: string;
+    /** Resolved descriptor (fallback ⊕ fetched ⊕ overrides). Host reads
+     *  `descriptor.itrFlow`, `descriptor.theme`, etc. */
+    descriptor: WidgetConfigDescriptor;
     /** Force a fresh /chatbuddy/auth-style refetch (clears cached requestId). */
     refreshAuth(): Promise<void>;
 }
@@ -997,6 +1033,12 @@ export declare interface SlugMountOptions {
     /** Additional headers for the descriptor fetch. */
     configHeaders?: Record<string, string>;
     user: {
+        /**
+         * Initial identifier. When `descriptor.sso` is configured, the
+         * server-issued `ext_uid` from the SSO exchange overrides this
+         * value. For SSO-only flows you can pass an empty string and rely
+         * on the exchange to populate the identity.
+         */
         id: string;
         /** Display name fallback when descriptor.auth doesn't return one. */
         name?: string;
@@ -1007,12 +1049,31 @@ export declare interface SlugMountOptions {
          * or a getter that re-resolves on each refresh.
          */
         token: SessionTokenProvider;
+        /**
+         * Async getters for SSO credentials with `source: "callback"`. Each
+         * key matches a `descriptor.sso.collect[].name` entry. Lets the host
+         * app supply tokens that don't live in cookies / localStorage (e.g.
+         * an in-memory auth context, a parent-frame postMessage).
+         */
+        credentialProviders?: CredentialProviders;
+        /**
+         * Free-form identity bag forwarded to descriptor.preflight URL and
+         * body templates. Keys become `{name}` placeholders. Useful for
+         * tenant-specific fields the SDK doesn't know about (`pan`, `mobile`,
+         * `dob`, etc.) so the descriptor can drive the full warm-up chain
+         * without host code per call.
+         */
+        identity?: Record<string, string | undefined>;
     };
     /** Optional escape hatches; merge over descriptor-driven defaults. */
     hooks?: {
         upload?: UploadAdapter;
         history?: ConversationHistoryAdapter;
         onError?: (err: Error) => void;
+        /** Fired for every chat message (incoming + outgoing). Host apps can
+         *  use this to advance UI state outside the widget — e.g. update an
+         *  ITR-filing-process side rail when the bot moves the flow forward. */
+        onMessage?: (message: Message) => void;
     };
     /** Per-mount visual overrides. */
     overrides?: Partial<WidgetConfigDescriptor>;
@@ -1025,6 +1086,105 @@ export declare interface SlugMountOptions {
     fallbackConfig?: WidgetConfigDescriptor;
 }
 
+export declare interface SsoCollectorOptions {
+    /** Spec from `descriptor.sso.collect`. */
+    spec: SsoCollectSpec[];
+    /** Async getters for `source: "callback"` entries (host-supplied). */
+    providers?: CredentialProviders;
+}
+
+export declare interface SsoCollectSpec {
+    /** Field name sent to aikaara-ai as `credentials[name]`. */
+    name: string;
+    /** Where to read it from. */
+    source: SsoSourceKind;
+    /** Source-specific key (cookie name, storage key, query param, etc). */
+    key?: string;
+    /** When true, throw if the credential is absent / empty. */
+    required?: boolean;
+    /** Default value if the source doesn't provide one (and not required). */
+    default?: string;
+}
+
+export declare interface SsoDescriptor {
+    /**
+     * Aikaara-ai endpoint that runs the server-side SSO + provisioning chain.
+     * Optional — when omitted the SDK derives it from the same `configBase`
+     * it used to fetch `widget_configs/:slug`:
+     *   `${configBase}/api/v1/projects/by-slug/${slug}/sso_exchange`
+     * Set this only when self-hosted aikaara-ai sits at a different host
+     * than the widget-config endpoint.
+     */
+    exchangeEndpoint?: string;
+    /** localStorage key for the cached identity. Null/empty → no cache. */
+    cacheKey?: string;
+    /** Cache TTL in seconds. Default 1800 (30 min). */
+    cacheTtlSec?: number;
+    /** Per-widget API key sent as `X-Api-Key` to aikaara-ai. */
+    apiKey?: string;
+    /** Extra static headers attached to the exchange POST. */
+    headers?: Record<string, string>;
+    /** Browser credential collection spec. */
+    collect: SsoCollectSpec[];
+}
+
+export declare class SsoExchangeAdapter {
+    private readonly opts;
+    private cache;
+    private inflight;
+    constructor(opts: SsoExchangeOptions);
+    /** Drop any cached identity. Forces a fresh exchange on next `get()`. */
+    reset(): void;
+    /**
+     * Resolve the SSO identity. Returns cached when fresh; otherwise runs the
+     * collect → POST → response flow once and caches the result.
+     */
+    get(force?: boolean): Promise<SsoIdentity>;
+    private exchange;
+    private computeExpiry;
+    private loadCache;
+    private persistCache;
+    private clearCache;
+}
+
+export declare interface SsoExchangeOptions {
+    descriptor: SsoDescriptor;
+    /** Host-supplied async getters for `source: "callback"` entries. */
+    providers?: CredentialProviders;
+    /**
+     * Resolved exchange URL. When `descriptor.exchangeEndpoint` is set it
+     * wins; otherwise `mountFromSlug` builds this from
+     * `${configBase}/api/v1/projects/by-slug/${slug}/sso_exchange`.
+     */
+    exchangeUrl?: string;
+}
+
+export declare interface SsoIdentity {
+    /** Aikaara `User.id` (UUID/int). Useful for support / audit. */
+    id?: string | number;
+    /** Partner system user id, mirrored as Aikaara `User.ext_uid`. */
+    extUid: string;
+    /** Aikaara user token (ActionCable / Aikaara REST bearer). */
+    userToken: string;
+    email?: string;
+    displayName?: string;
+    /** Free-form properties the provisioner wrote on the user row. */
+    properties?: Record<string, unknown>;
+    /** Unix-ms expiry for the cache row (not the token itself). */
+    expiresAt?: number;
+}
+
+/**
+ * Browser-side credential collector for `descriptor.sso.collect`.
+ *
+ * Each entry tells the SDK where to read one credential from. The collected
+ * map gets POSTed to aikaara-ai's `sso_exchange` endpoint, where the
+ * server-side resolver swaps it for a partner identity + provisions an
+ * Aikaara user. No secrets ever live in the public descriptor — this just
+ * tells us "go look at cookie X" or "ask the host app for token Y".
+ */
+export declare type SsoSourceKind = 'cookie' | 'localStorage' | 'sessionStorage' | 'url_param' | 'header_meta' | 'callback';
+
 declare type SubscriptionCallback = (data: unknown) => void;
 
 declare interface TemplateMessageEvent {
@@ -1084,8 +1244,17 @@ export declare interface TenantMountOptions {
     overrides?: Partial<WidgetConfigDescriptor>;
     /** Surfaced from the SDK. */
     onError?: (err: Error) => void;
+    /** Forwarded to `WidgetConfig.onMessage` — fires for every message. */
+    onMessage?: (message: Message) => void;
     /** Bearer source for descriptor.linkHandlers fetches. */
     getLinkBearer?: (source: 'session' | 'chat' | 'none') => Promise<string | null>;
+    /**
+     * Aikaara user token used by the ActionCable transport
+     * (`?token=<userToken>` on the cable URL). Comes from the SSO exchange
+     * when present. Tiledesk-only widgets ignore it; defaults to `userId`
+     * for backwards compatibility.
+     */
+    userToken?: string;
 }
 
 export declare interface TestToolAction {
@@ -1577,6 +1746,12 @@ export declare interface WidgetConfigDescriptor {
     };
     /** Defaults merged into every form-action postback */
     templateActionAttributes?: Record<string, unknown>;
+    /**
+     * Static side-rail flow (e.g. bandhan's "ITR filing process"). The
+     * dashboard owns this — host renders it next to the chat. Live state
+     * is overlaid by host code from chat events / status endpoints.
+     */
+    itrFlow?: FlowDescriptor;
     /** Adapter endpoints — SDK builds the actual fetch calls */
     uploadEndpoint?: string;
     uploadFieldName?: string;
@@ -1595,6 +1770,17 @@ export declare interface WidgetConfigDescriptor {
      * itself — the host app no longer needs a `tokenProvider` callback.
      */
     auth?: SessionAuthDescriptor;
+    /**
+     * Aikaara-ai-side SSO + provisioning. When present, the SDK collects the
+     * partner credentials listed in `sso.collect`, POSTs them to
+     * `sso.exchangeEndpoint`, and aikaara-ai resolves a partner identity +
+     * provisions an Aikaara user. The returned `ext_uid` overrides
+     * `opts.user.id` and the returned `userToken` populates
+     * `widgetConfig.userToken` (used by the ActionCable transport). This
+     * runs **before** `auth` — so partner SSO seeds the identity, then
+     * `auth` mints chat-platform JWTs against that identity.
+     */
+    sso?: SsoDescriptor;
     /**
      * HTTP calls fired in order before `auth`. Use for backend warmups whose
      * side effects the auth call depends on (e.g. bandhan's bootstrap
@@ -1664,7 +1850,7 @@ export declare interface WidgetConfigDescriptor {
  * (`--aikaara-<kebab-cased-key>`), so renderers (built-in or
  * tenant-supplied) can style themselves consistently.
  */
-declare interface WidgetTheme {
+export declare interface WidgetTheme {
     primary?: string;
     primaryHover?: string;
     primaryContrast?: string;

package/dist/headless.mjs

@@ -1,5 +1,5 @@
-import { E as s } from "./MountTenant-Bdm9wkBa.mjs";
-import { A as p, b as g, k as l, C as h, l as y, m as c, M as u, S as m, T as f, n as T, o as S, p as _, q as v, s as E, t as C, u as F, v as A, w as k, x as I } from "./MountTenant-Bdm9wkBa.mjs";
+import { E as s } from "./MountTenant-7DxQIsTh.mjs";
+import { A as p, b as l, k as g, C as h, l as c, m as y, M as u, S as m, n as f, T as S, o as T, p as _, q as E, s as v, t as C, u as F, v as A, w as k, x as I, y as x, z as U } from "./MountTenant-7DxQIsTh.mjs";
 class a extends s {
   registration = null;
   pendingEdits = [];
@@ -94,24 +94,26 @@ class a extends s {
 }
 export {
   p as ActionCableClient,
-  g as AikaaraChatClient,
-  l as ApiClient,
+  l as AikaaraChatClient,
+  g as ApiClient,
   h as ChannelSubscription,
-  y as ConnectionManager,
-  c as ConversationManager,
+  c as ConnectionManager,
+  y as ConversationManager,
   s as EventEmitter,
   a as FormBridge,
   u as MessageStore,
   m as SessionAuthAdapter,
-  f as TiledeskTransport,
+  f as SsoExchangeAdapter,
+  S as TiledeskTransport,
   T as clearPersistedConversationId,
-  S as createFetchUploadAdapter,
-  _ as createPresigned3StepUploadAdapter,
-  v as createTiledeskHistoryAdapter,
-  E as extractTiledeskFileEnvelope,
-  C as inferTiledeskRole,
-  F as isTiledeskSelfEcho,
-  A as mountFromSlug,
-  k as mountTenantWidget,
-  I as parseTiledeskTemplate
+  _ as collectSsoCredentials,
+  E as createFetchUploadAdapter,
+  v as createPresigned3StepUploadAdapter,
+  C as createTiledeskHistoryAdapter,
+  F as extractTiledeskFileEnvelope,
+  A as inferTiledeskRole,
+  k as isTiledeskSelfEcho,
+  I as mountFromSlug,
+  x as mountTenantWidget,
+  U as parseTiledeskTemplate
 };

package/dist/index.cjs

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("./MountTenant-BNpG6T7E.cjs"),s=require("./headless.cjs");function l(a){e.registerComponents();const t=document.createElement("aikaara-chat-widget"),i={baseUrl:"base-url",userToken:"user-token",apiKey:"api-key",title:"title",subtitle:"subtitle",theme:"theme",primaryColor:"primary-color",position:"position",width:"width",height:"height",placeholder:"placeholder",welcomeMessage:"welcome-message",avatarUrl:"avatar-url"};for(const[n,o]of Object.entries(i)){const r=a[n];r!=null&&t.setAttribute(o,String(r))}return t.configure(a),document.body.appendChild(t),t}function d(){const a=document.querySelector("aikaara-chat-widget");a&&a.remove()}exports.ActionCableClient=e.ActionCableClient;exports.AikaaraChatBubble=e.AikaaraChatBubble;exports.AikaaraChatClient=e.AikaaraChatClient;exports.AikaaraChatHeader=e.AikaaraChatHeader;exports.AikaaraChatInput=e.AikaaraChatInput;exports.AikaaraChatWidget=e.AikaaraChatWidget;exports.AikaaraErrorBanner=e.AikaaraErrorBanner;exports.AikaaraMessageBubble=e.AikaaraMessageBubble;exports.AikaaraMessageList=e.AikaaraMessageList;exports.AikaaraStreamingMessage=e.AikaaraStreamingMessage;exports.AikaaraTypingIndicator=e.AikaaraTypingIndicator;exports.ApiClient=e.ApiClient;exports.ChannelSubscription=e.ChannelSubscription;exports.ConnectionManager=e.ConnectionManager;exports.ConversationManager=e.ConversationManager;exports.EventEmitter=e.EventEmitter;exports.MessageStore=e.MessageStore;exports.SessionAuthAdapter=e.SessionAuthAdapter;exports.TiledeskTransport=e.TiledeskTransport;exports.clearPersistedConversationId=e.clearPersistedConversationId;exports.createFetchUploadAdapter=e.createFetchUploadAdapter;exports.createPresigned3StepUploadAdapter=e.createPresigned3StepUploadAdapter;exports.createTiledeskHistoryAdapter=e.createTiledeskHistoryAdapter;exports.extractTiledeskFileEnvelope=e.extractTiledeskFileEnvelope;exports.inferTiledeskRole=e.inferTiledeskRole;exports.isTiledeskSelfEcho=e.isTiledeskSelfEcho;exports.mountFromSlug=e.mountFromSlug;exports.mountTenantWidget=e.mount;exports.parseTiledeskTemplate=e.parseTiledeskTemplate;exports.registerComponents=e.registerComponents;exports.FormBridge=s.FormBridge;exports.mount=l;exports.unmount=d;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("./MountTenant-Dcp2KDZo.cjs"),s=require("./headless.cjs");function l(a){e.registerComponents();const t=document.createElement("aikaara-chat-widget"),i={baseUrl:"base-url",userToken:"user-token",apiKey:"api-key",title:"title",subtitle:"subtitle",theme:"theme",primaryColor:"primary-color",position:"position",width:"width",height:"height",placeholder:"placeholder",welcomeMessage:"welcome-message",avatarUrl:"avatar-url"};for(const[n,o]of Object.entries(i)){const r=a[n];r!=null&&t.setAttribute(o,String(r))}return t.configure(a),document.body.appendChild(t),t}function d(){const a=document.querySelector("aikaara-chat-widget");a&&a.remove()}exports.ActionCableClient=e.ActionCableClient;exports.AikaaraChatBubble=e.AikaaraChatBubble;exports.AikaaraChatClient=e.AikaaraChatClient;exports.AikaaraChatHeader=e.AikaaraChatHeader;exports.AikaaraChatInput=e.AikaaraChatInput;exports.AikaaraChatWidget=e.AikaaraChatWidget;exports.AikaaraErrorBanner=e.AikaaraErrorBanner;exports.AikaaraMessageBubble=e.AikaaraMessageBubble;exports.AikaaraMessageList=e.AikaaraMessageList;exports.AikaaraStreamingMessage=e.AikaaraStreamingMessage;exports.AikaaraTypingIndicator=e.AikaaraTypingIndicator;exports.ApiClient=e.ApiClient;exports.ChannelSubscription=e.ChannelSubscription;exports.ConnectionManager=e.ConnectionManager;exports.ConversationManager=e.ConversationManager;exports.EventEmitter=e.EventEmitter;exports.MessageStore=e.MessageStore;exports.SessionAuthAdapter=e.SessionAuthAdapter;exports.SsoExchangeAdapter=e.SsoExchangeAdapter;exports.TiledeskTransport=e.TiledeskTransport;exports.clearPersistedConversationId=e.clearPersistedConversationId;exports.collectSsoCredentials=e.collectSsoCredentials;exports.createFetchUploadAdapter=e.createFetchUploadAdapter;exports.createPresigned3StepUploadAdapter=e.createPresigned3StepUploadAdapter;exports.createTiledeskHistoryAdapter=e.createTiledeskHistoryAdapter;exports.extractTiledeskFileEnvelope=e.extractTiledeskFileEnvelope;exports.inferTiledeskRole=e.inferTiledeskRole;exports.isTiledeskSelfEcho=e.isTiledeskSelfEcho;exports.mountFromSlug=e.mountFromSlug;exports.mountTenantWidget=e.mount;exports.parseTiledeskTemplate=e.parseTiledeskTemplate;exports.registerComponents=e.registerComponents;exports.FormBridge=s.FormBridge;exports.mount=l;exports.unmount=d;

package/dist/index.d.ts

@@ -407,6 +407,9 @@ export declare interface ChatEvents {
 
 export declare function clearPersistedConversationId(userId: string, projectId: string): void;
 
+/** Read every credential listed in `spec`. Throws on missing required. */
+export declare function collectSsoCredentials(opts: SsoCollectorOptions): Promise<Record<string, string>>;
+
 export declare interface ConnectionConfig {
     baseUrl: string;
     wsUrl?: string;
@@ -473,6 +476,8 @@ export declare function createPresigned3StepUploadAdapter(config: Presigned3Step
 
 export declare function createTiledeskHistoryAdapter(config: TiledeskHistoryAdapterConfig): ConversationHistoryAdapter;
 
+export declare type CredentialProviders = Record<string, () => string | Promise<string>>;
+
 export declare interface EditEntityAction {
     action: 'edit_entity';
     entity_type: string;
@@ -506,6 +511,34 @@ export declare interface FieldUpdate {
     previousValue?: unknown;
 }
 
+export declare interface FlowDescriptor {
+    /** Heading rendered above the step list (e.g. "ITR filing process"). */
+    title?: string;
+    steps: FlowStep[];
+}
+
+/**
+ * Static side-rail process taxonomy (e.g. bandhan's "ITR filing process").
+ * Fully descriptor-driven — dashboard owns the steps. The runtime state
+ * (which step is `done` / `active`) is calculated host-side from chat
+ * events (or overlaid from a backend status endpoint like
+ * `/itr/life-cycle-status`).
+ */
+export declare interface FlowStep {
+    /** Stable id used by the host's reducer to address this step. */
+    id: string;
+    /** Display title. */
+    title: string;
+    /** Initial status. The host's `onMessage` reducer flips these as the
+     *  conversation progresses. */
+    state?: 'done' | 'active' | 'pending';
+    /** Optional nested sub-steps (one level deep — bandhan style). */
+    sub?: FlowStep[];
+    /** Free-form metadata the host can use in its reducer (templateId
+     *  patterns the bot uses to advance the step, copy text, hint, etc.). */
+    meta?: Record<string, unknown>;
+}
+
 export declare class FormBridge extends EventEmitter<FormBridgeEvents> {
     private registration;
     private pendingEdits;
@@ -635,7 +668,7 @@ export declare function isTiledeskSelfEcho(message: TiledeskMessage, userId: str
  * Descriptor entry for intercepting link clicks. `match` is a glob pattern
  * (`*` = any, `?` = single char) tested against the full clicked URL.
  */
-declare interface LinkHandler {
+export declare interface LinkHandler {
     /** Glob pattern matched against the clicked URL. */
     match: string;
     /** What to do on match. `tab` opens in new tab, `iframe` uses default modal,
@@ -763,7 +796,7 @@ export declare function parseTiledeskTemplate(message: TiledeskMessage): Tiledes
  * One HTTP call run by the SDK before auth. Failure of `soft: true` steps
  * is logged and ignored; failure of strict steps aborts the mount.
  */
-declare interface PreflightStep {
+export declare interface PreflightStep {
     url: string;
     method?: 'GET' | 'POST' | 'PUT';
     body?: Record<string, unknown>;
@@ -874,6 +907,9 @@ export declare type SessionTokenProvider = string | (() => string | Promise<stri
 
 export declare interface SlugMountedWidget extends MountedTenantWidget {
     fullName: string;
+    /** Resolved descriptor (fallback ⊕ fetched ⊕ overrides). Host reads
+     *  `descriptor.itrFlow`, `descriptor.theme`, etc. */
+    descriptor: WidgetConfigDescriptor;
     /** Force a fresh /chatbuddy/auth-style refetch (clears cached requestId). */
     refreshAuth(): Promise<void>;
 }
@@ -888,6 +924,12 @@ export declare interface SlugMountOptions {
     /** Additional headers for the descriptor fetch. */
     configHeaders?: Record<string, string>;
     user: {
+        /**
+         * Initial identifier. When `descriptor.sso` is configured, the
+         * server-issued `ext_uid` from the SSO exchange overrides this
+         * value. For SSO-only flows you can pass an empty string and rely
+         * on the exchange to populate the identity.
+         */
         id: string;
         /** Display name fallback when descriptor.auth doesn't return one. */
         name?: string;
@@ -898,12 +940,31 @@ export declare interface SlugMountOptions {
          * or a getter that re-resolves on each refresh.
          */
         token: SessionTokenProvider;
+        /**
+         * Async getters for SSO credentials with `source: "callback"`. Each
+         * key matches a `descriptor.sso.collect[].name` entry. Lets the host
+         * app supply tokens that don't live in cookies / localStorage (e.g.
+         * an in-memory auth context, a parent-frame postMessage).
+         */
+        credentialProviders?: CredentialProviders;
+        /**
+         * Free-form identity bag forwarded to descriptor.preflight URL and
+         * body templates. Keys become `{name}` placeholders. Useful for
+         * tenant-specific fields the SDK doesn't know about (`pan`, `mobile`,
+         * `dob`, etc.) so the descriptor can drive the full warm-up chain
+         * without host code per call.
+         */
+        identity?: Record<string, string | undefined>;
     };
     /** Optional escape hatches; merge over descriptor-driven defaults. */
     hooks?: {
         upload?: UploadAdapter;
         history?: ConversationHistoryAdapter;
         onError?: (err: Error) => void;
+        /** Fired for every chat message (incoming + outgoing). Host apps can
+         *  use this to advance UI state outside the widget — e.g. update an
+         *  ITR-filing-process side rail when the bot moves the flow forward. */
+        onMessage?: (message: Message) => void;
     };
     /** Per-mount visual overrides. */
     overrides?: Partial<WidgetConfigDescriptor>;
@@ -916,6 +977,105 @@ export declare interface SlugMountOptions {
     fallbackConfig?: WidgetConfigDescriptor;
 }
 
+export declare interface SsoCollectorOptions {
+    /** Spec from `descriptor.sso.collect`. */
+    spec: SsoCollectSpec[];
+    /** Async getters for `source: "callback"` entries (host-supplied). */
+    providers?: CredentialProviders;
+}
+
+export declare interface SsoCollectSpec {
+    /** Field name sent to aikaara-ai as `credentials[name]`. */
+    name: string;
+    /** Where to read it from. */
+    source: SsoSourceKind;
+    /** Source-specific key (cookie name, storage key, query param, etc). */
+    key?: string;
+    /** When true, throw if the credential is absent / empty. */
+    required?: boolean;
+    /** Default value if the source doesn't provide one (and not required). */
+    default?: string;
+}
+
+export declare interface SsoDescriptor {
+    /**
+     * Aikaara-ai endpoint that runs the server-side SSO + provisioning chain.
+     * Optional — when omitted the SDK derives it from the same `configBase`
+     * it used to fetch `widget_configs/:slug`:
+     *   `${configBase}/api/v1/projects/by-slug/${slug}/sso_exchange`
+     * Set this only when self-hosted aikaara-ai sits at a different host
+     * than the widget-config endpoint.
+     */
+    exchangeEndpoint?: string;
+    /** localStorage key for the cached identity. Null/empty → no cache. */
+    cacheKey?: string;
+    /** Cache TTL in seconds. Default 1800 (30 min). */
+    cacheTtlSec?: number;
+    /** Per-widget API key sent as `X-Api-Key` to aikaara-ai. */
+    apiKey?: string;
+    /** Extra static headers attached to the exchange POST. */
+    headers?: Record<string, string>;
+    /** Browser credential collection spec. */
+    collect: SsoCollectSpec[];
+}
+
+export declare class SsoExchangeAdapter {
+    private readonly opts;
+    private cache;
+    private inflight;
+    constructor(opts: SsoExchangeOptions);
+    /** Drop any cached identity. Forces a fresh exchange on next `get()`. */
+    reset(): void;
+    /**
+     * Resolve the SSO identity. Returns cached when fresh; otherwise runs the
+     * collect → POST → response flow once and caches the result.
+     */
+    get(force?: boolean): Promise<SsoIdentity>;
+    private exchange;
+    private computeExpiry;
+    private loadCache;
+    private persistCache;
+    private clearCache;
+}
+
+export declare interface SsoExchangeOptions {
+    descriptor: SsoDescriptor;
+    /** Host-supplied async getters for `source: "callback"` entries. */
+    providers?: CredentialProviders;
+    /**
+     * Resolved exchange URL. When `descriptor.exchangeEndpoint` is set it
+     * wins; otherwise `mountFromSlug` builds this from
+     * `${configBase}/api/v1/projects/by-slug/${slug}/sso_exchange`.
+     */
+    exchangeUrl?: string;
+}
+
+export declare interface SsoIdentity {
+    /** Aikaara `User.id` (UUID/int). Useful for support / audit. */
+    id?: string | number;
+    /** Partner system user id, mirrored as Aikaara `User.ext_uid`. */
+    extUid: string;
+    /** Aikaara user token (ActionCable / Aikaara REST bearer). */
+    userToken: string;
+    email?: string;
+    displayName?: string;
+    /** Free-form properties the provisioner wrote on the user row. */
+    properties?: Record<string, unknown>;
+    /** Unix-ms expiry for the cache row (not the token itself). */
+    expiresAt?: number;
+}
+
+/**
+ * Browser-side credential collector for `descriptor.sso.collect`.
+ *
+ * Each entry tells the SDK where to read one credential from. The collected
+ * map gets POSTed to aikaara-ai's `sso_exchange` endpoint, where the
+ * server-side resolver swaps it for a partner identity + provisions an
+ * Aikaara user. No secrets ever live in the public descriptor — this just
+ * tells us "go look at cookie X" or "ask the host app for token Y".
+ */
+export declare type SsoSourceKind = 'cookie' | 'localStorage' | 'sessionStorage' | 'url_param' | 'header_meta' | 'callback';
+
 declare type SubscriptionCallback = (data: unknown) => void;
 
 declare interface TemplateMessageEvent {
@@ -964,8 +1124,17 @@ export declare interface TenantMountOptions {
     overrides?: Partial<WidgetConfigDescriptor>;
     /** Surfaced from the SDK. */
     onError?: (err: Error) => void;
+    /** Forwarded to `WidgetConfig.onMessage` — fires for every message. */
+    onMessage?: (message: Message) => void;
     /** Bearer source for descriptor.linkHandlers fetches. */
     getLinkBearer?: (source: 'session' | 'chat' | 'none') => Promise<string | null>;
+    /**
+     * Aikaara user token used by the ActionCable transport
+     * (`?token=<userToken>` on the cable URL). Comes from the SSO exchange
+     * when present. Tiledesk-only widgets ignore it; defaults to `userId`
+     * for backwards compatibility.
+     */
+    userToken?: string;
 }
 
 export declare interface TestToolAction {
@@ -1329,6 +1498,12 @@ export declare interface WidgetConfigDescriptor {
     };
     /** Defaults merged into every form-action postback */
     templateActionAttributes?: Record<string, unknown>;
+    /**
+     * Static side-rail flow (e.g. bandhan's "ITR filing process"). The
+     * dashboard owns this — host renders it next to the chat. Live state
+     * is overlaid by host code from chat events / status endpoints.
+     */
+    itrFlow?: FlowDescriptor;
     /** Adapter endpoints — SDK builds the actual fetch calls */
     uploadEndpoint?: string;
     uploadFieldName?: string;
@@ -1347,6 +1522,17 @@ export declare interface WidgetConfigDescriptor {
      * itself — the host app no longer needs a `tokenProvider` callback.
      */
     auth?: SessionAuthDescriptor;
+    /**
+     * Aikaara-ai-side SSO + provisioning. When present, the SDK collects the
+     * partner credentials listed in `sso.collect`, POSTs them to
+     * `sso.exchangeEndpoint`, and aikaara-ai resolves a partner identity +
+     * provisions an Aikaara user. The returned `ext_uid` overrides
+     * `opts.user.id` and the returned `userToken` populates
+     * `widgetConfig.userToken` (used by the ActionCable transport). This
+     * runs **before** `auth` — so partner SSO seeds the identity, then
+     * `auth` mints chat-platform JWTs against that identity.
+     */
+    sso?: SsoDescriptor;
     /**
      * HTTP calls fired in order before `auth`. Use for backend warmups whose
      * side effects the auth call depends on (e.g. bandhan's bootstrap
@@ -1416,7 +1602,7 @@ export declare interface WidgetConfigDescriptor {
  * (`--aikaara-<kebab-cased-key>`), so renderers (built-in or
  * tenant-supplied) can style themselves consistently.
  */
-declare interface WidgetTheme {
+export declare interface WidgetTheme {
     primary?: string;
     primaryHover?: string;
     primaryContrast?: string;