@arkyc/widget 1.2.11 → 2.1.0

package/dist/realtime.mjs

@@ -1,107 +1,89 @@
+import { createRealtime } from "@arkstack/realtime";
+import { REALTIME_EVENT } from "@arkyc/types";
 //#region src/realtime.ts
 /** CDN that serves any npm package as ESM (`…/pkg@ver/+esm`). */
 const CDN = "https://cdn.jsdelivr.net/npm/";
+/** CDN paths for the SDK modules the realtime transports load. */
+const CDN_PATHS = {
+	"pusher-js": "pusher-js@8/+esm",
+	"firebase/app": "firebase@11/app/+esm",
+	"firebase/auth": "firebase@11/auth/+esm",
+	"firebase/database": "firebase@11/database/+esm",
+	"firebase/messaging": "firebase@11/messaging/+esm"
+};
+/** The domain events the widget watches its session for. */
+const SESSION_EVENTS = [REALTIME_EVENT.sessionTransition];
 /**
-* Import an optional transport SDK. Tries the bare package specifier first (a
-* bundler, import map, or Node resolves it), then falls back to the jsdelivr CDN
-* so a plain browser embed still loads it — a bare specifier like `pusher-js`
-* isn't resolvable at runtime in the browser, which would otherwise leave the
-* widget silently polling. Non-literal specifiers also keep the bundler from
-* trying to resolve these (they aren't hard dependencies) and avoid needing their
-* type declarations.
+* Load a transport SDK by its package name (resolved by a bundler, import map or
+* Node), falling back to jsDelivr so a plain `<script>` embed still gets it.
+*
+* @param specifier
+* @returns
 */
-async function loadOptional(pkg, cdnPath) {
+const importWithCdnFallback = async (specifier) => {
 	try {
 		return await import(
 			/* @vite-ignore */
 			/* webpackIgnore: true */
-			pkg
+			specifier
 );
-	} catch {
+	} catch (error) {
+		const path = CDN_PATHS[specifier];
+		if (!path) throw error;
 		return await import(
 			/* @vite-ignore */
 			/* webpackIgnore: true */
-			`${CDN}${cdnPath}`
+			`${CDN}${path}`
 );
 	}
-}
+};
 /**
-* Connect to whichever push transport the API reported for this session. Returns
-* null for `polling`/`off`/`memory` (no push — the widget polls instead) and also
-* when the transport SDK can't be loaded (e.g. a plain `<script>` standalone embed
-* with no bundler), so realtime degrades gracefully to polling. The SDK is
-* dynamically imported so only the active transport is ever pulled in.
+* Connect to the session's push transport. Returns null for transports the
+* widget does not stream over (polling, and Firebase Cloud Messaging, which
+* would prompt the end user for notification permission), and rejects when the
+* transport SDK cannot load, so the caller polls instead.
+*
+* @param config
+* @param options
+* @returns
 */
 async function createWidgetRealtimeClient(config, options) {
-	try {
-		if (config.transport === "pusher") return await createPusherClient(config, options);
-		if (config.transport === "firebase") return await createFirebaseClient(config);
-	} catch {
-		return null;
-	}
-	return null;
-}
-async function createPusherClient(config, options) {
-	const Pusher = (await loadOptional("pusher-js", "pusher-js@8/+esm")).default;
-	const pusher = new Pusher(String(config.key ?? ""), {
-		cluster: String(config.cluster ?? "mt1"),
-		forceTLS: Boolean(config.forceTLS ?? false),
-		...config.wsHost ? {
-			wsHost: String(config.wsHost),
-			wsPort: Number(config.wsPort),
-			wssPort: Number(config.wssPort ?? config.wsPort),
-			enabledTransports: config.enabledTransports ?? ["ws", "wss"]
-		} : {},
-		channelAuthorization: {
-			transport: "ajax",
-			endpoint: options.authEndpoint,
-			headers: { "X-Client-Token": options.token }
-		}
+	if (config.transport !== "pusher" && config.transport !== "firebase-database") return null;
+	const authEndpoint = options.authEndpoint;
+	const auth = { headers: { "X-Client-Token": options.token } };
+	const pusher = config.pusher;
+	const firebaseDatabase = config["firebase-database"];
+	const client = createRealtime({
+		transport: config.transport,
+		pusher: pusher && {
+			...pusher,
+			authEndpoint,
+			auth
+		},
+		"firebase-database": firebaseDatabase && {
+			...firebaseDatabase,
+			authEndpoint,
+			auth
+		},
+		importModule: importWithCdnFallback
 	});
+	await client.onPoll(() => {});
 	return {
 		subscribe(channel, handler) {
-			const ch = pusher.subscribe(channel);
-			const cb = (event, data) => handler(event, data);
-			ch.bind_global(cb);
+			let active = true;
+			const stops = [];
+			for (const event of SESSION_EVENTS) client.listen(channel, event, (data) => handler(event, data)).then((stop) => active ? stops.push(stop) : stop()).catch(() => {});
 			return () => {
-				ch.unbind_global(cb);
-				pusher.unsubscribe(channel);
+				active = false;
+				stops.forEach((stop) => stop());
 			};
 		},
 		disconnect() {
-			pusher.disconnect();
+			client.disconnect();
 		}
 	};
 }
-async function createFirebaseClient(config) {
-	const [app, auth, database] = await Promise.all([
-		loadOptional("firebase/app", "firebase@11/app/+esm"),
-		loadOptional("firebase/auth", "firebase@11/auth/+esm"),
-		loadOptional("firebase/database", "firebase@11/database/+esm")
-	]);
-	const name = "arkyc-widget-realtime";
-	const fbApp = app.getApps().some((a) => a.name === name) ? app.getApp(name) : app.initializeApp({
-		apiKey: String(config.apiKey ?? ""),
-		authDomain: String(config.authDomain ?? ""),
-		projectId: String(config.projectId ?? ""),
-		databaseURL: String(config.databaseURL ?? "")
-	}, name);
-	if (config.token) await auth.signInWithCustomToken(auth.getAuth(fbApp), config.token);
-	const db = database.getDatabase(fbApp);
-	const since = Date.now();
-	return {
-		subscribe(channel, handler) {
-			const q = database.query(database.ref(db, `realtime/${channel}`), database.orderByChild("at"), database.startAt(since));
-			const unsubscribe = database.onChildAdded(q, (snap) => {
-				const value = snap.val();
-				if (value) handler(value.event, value.payload);
-			});
-			return () => unsubscribe();
-		},
-		disconnect() {}
-	};
-}
 //#endregion
-export { createWidgetRealtimeClient };
+export { createWidgetRealtimeClient, importWithCdnFallback };
 
 //# sourceMappingURL=realtime.mjs.map

package/dist/realtime.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"realtime.mjs","names":[],"sources":["../src/realtime.ts"],"sourcesContent":["import type { ClientRealtime } from './client'\n\n/** Fires for every event received on a subscribed channel. */\nexport type WidgetRealtimeHandler = (event: string, data: unknown) => void\n\n/** A connected push transport. `subscribe` returns an unsubscribe function. */\nexport interface WidgetRealtimeClient {\n  subscribe(channel: string, handler: WidgetRealtimeHandler): () => void\n  disconnect(): void\n}\n\n/** A factory that builds a push client from the session's realtime config. */\nexport type WidgetRealtimeFactory = (\n  config: ClientRealtime,\n  options: WidgetRealtimeOptions,\n) => Promise<WidgetRealtimeClient | null>\n\nexport interface WidgetRealtimeOptions {\n  /** The client-token channel-auth endpoint (pusher). */\n  authEndpoint: string\n  /** The session's client token (sent as `X-Client-Token` to the authorizer). */\n  token: string\n}\n\n/** CDN that serves any npm package as ESM (`…/pkg@ver/+esm`). */\nconst CDN = 'https://cdn.jsdelivr.net/npm/'\n\n/**\n * Import an optional transport SDK. Tries the bare package specifier first (a\n * bundler, import map, or Node resolves it), then falls back to the jsdelivr CDN\n * so a plain browser embed still loads it — a bare specifier like `pusher-js`\n * isn't resolvable at runtime in the browser, which would otherwise leave the\n * widget silently polling. Non-literal specifiers also keep the bundler from\n * trying to resolve these (they aren't hard dependencies) and avoid needing their\n * type declarations.\n */\nasync function loadOptional(pkg: string, cdnPath: string): Promise<unknown> {\n  try {\n    return await import(/* @vite-ignore */ /* webpackIgnore: true */ pkg)\n  } catch {\n    return await import(/* @vite-ignore */ /* webpackIgnore: true */ `${CDN}${cdnPath}`)\n  }\n}\n\n/**\n * Connect to whichever push transport the API reported for this session. Returns\n * null for `polling`/`off`/`memory` (no push — the widget polls instead) and also\n * when the transport SDK can't be loaded (e.g. a plain `<script>` standalone embed\n * with no bundler), so realtime degrades gracefully to polling. The SDK is\n * dynamically imported so only the active transport is ever pulled in.\n */\nexport async function createWidgetRealtimeClient(\n  config: ClientRealtime,\n  options: WidgetRealtimeOptions,\n): Promise<WidgetRealtimeClient | null> {\n  try {\n    if (config.transport === 'pusher') return await createPusherClient(config, options)\n    if (config.transport === 'firebase') return await createFirebaseClient(config)\n  } catch {\n    // Transport SDK unavailable / failed to connect — fall back to polling.\n    return null\n  }\n\n  return null\n}\n\n// --- pusher-js (minimal surface we depend on) ---\n\ninterface PusherChannel {\n  bind_global(cb: (event: string, data: unknown) => void): void\n  unbind_global(cb: (event: string, data: unknown) => void): void\n}\ninterface PusherInstance {\n  subscribe(channel: string): PusherChannel\n  unsubscribe(channel: string): void\n  disconnect(): void\n}\ntype PusherCtor = new (key: string, options: Record<string, unknown>) => PusherInstance\n\nasync function createPusherClient(\n  config: ClientRealtime,\n  options: WidgetRealtimeOptions,\n): Promise<WidgetRealtimeClient> {\n  const mod = (await loadOptional('pusher-js', 'pusher-js@8/+esm')) as { default: PusherCtor }\n  const Pusher = mod.default\n  const pusher = new Pusher(String(config.key ?? ''), {\n    cluster: String(config.cluster ?? 'mt1'),\n    forceTLS: Boolean(config.forceTLS ?? false),\n    ...(config.wsHost\n      ? {\n          wsHost: String(config.wsHost),\n          wsPort: Number(config.wsPort),\n          wssPort: Number(config.wssPort ?? config.wsPort),\n          enabledTransports: (config.enabledTransports as string[]) ?? ['ws', 'wss'],\n        }\n      : {}),\n    // The widget authorizes private channels with its short-lived client token,\n    // which the API scopes to this session's own channel only.\n    channelAuthorization: {\n      transport: 'ajax',\n      endpoint: options.authEndpoint,\n      headers: { 'X-Client-Token': options.token },\n    },\n  })\n\n  return {\n    subscribe(channel, handler) {\n      const ch = pusher.subscribe(channel)\n      const cb = (event: string, data: unknown) => handler(event, data)\n      ch.bind_global(cb)\n\n      return () => {\n        ch.unbind_global(cb)\n        pusher.unsubscribe(channel)\n      }\n    },\n    disconnect() {\n      pusher.disconnect()\n    },\n  }\n}\n\n// --- firebase (minimal surface we depend on) ---\n\ninterface FirebaseApp {\n  name: string\n}\ninterface FirebaseAppModule {\n  initializeApp(options: Record<string, unknown>, name: string): FirebaseApp\n  getApps(): FirebaseApp[]\n  getApp(name: string): FirebaseApp\n}\ninterface FirebaseAuthModule {\n  getAuth(app: FirebaseApp): unknown\n  signInWithCustomToken(auth: unknown, token: string): Promise<unknown>\n}\ninterface FirebaseSnapshot {\n  val(): { event: string; payload: unknown } | null\n}\ninterface FirebaseDatabaseModule {\n  getDatabase(app: FirebaseApp): unknown\n  ref(db: unknown, path: string): unknown\n  query(ref: unknown, ...constraints: unknown[]): unknown\n  orderByChild(path: string): unknown\n  startAt(value: number): unknown\n  onChildAdded(query: unknown, cb: (snap: FirebaseSnapshot) => void): () => void\n}\n\nasync function createFirebaseClient(config: ClientRealtime): Promise<WidgetRealtimeClient> {\n  const [app, auth, database] = (await Promise.all([\n    loadOptional('firebase/app', 'firebase@11/app/+esm'),\n    loadOptional('firebase/auth', 'firebase@11/auth/+esm'),\n    loadOptional('firebase/database', 'firebase@11/database/+esm'),\n  ])) as [FirebaseAppModule, FirebaseAuthModule, FirebaseDatabaseModule]\n\n  const name = 'arkyc-widget-realtime'\n  const fbApp = app.getApps().some((a) => a.name === name)\n    ? app.getApp(name)\n    : app.initializeApp(\n        {\n          apiKey: String(config.apiKey ?? ''),\n          authDomain: String(config.authDomain ?? ''),\n          projectId: String(config.projectId ?? ''),\n          databaseURL: String(config.databaseURL ?? ''),\n        },\n        name,\n      )\n\n  // The per-session custom token authorizes reads of this session's channel only.\n  if (config.token) await auth.signInWithCustomToken(auth.getAuth(fbApp), config.token)\n\n  const db = database.getDatabase(fbApp)\n  const since = Date.now()\n\n  return {\n    subscribe(channel, handler) {\n      const q = database.query(\n        database.ref(db, `realtime/${channel}`),\n        database.orderByChild('at'),\n        database.startAt(since),\n      )\n      const unsubscribe = database.onChildAdded(q, (snap) => {\n        const value = snap.val()\n        if (value) handler(value.event, value.payload)\n      })\n\n      return () => unsubscribe()\n    },\n    disconnect() {\n      // Firebase listeners are torn down per-subscription via the returned unsub.\n    },\n  }\n}\n"],"mappings":";;AAyBA,MAAM,MAAM;;;;;;;;;;AAWZ,eAAe,aAAa,KAAa,SAAmC;CAC1E,IAAI;EACF,OAAO,MAAM;;;GAAoD;;CACnE,QAAQ;EACN,OAAO,MAAM;;;GAAoD,GAAG,MAAM;;CAC5E;AACF;;;;;;;;AASA,eAAsB,2BACpB,QACA,SACsC;CACtC,IAAI;EACF,IAAI,OAAO,cAAc,UAAU,OAAO,MAAM,mBAAmB,QAAQ,OAAO;EAClF,IAAI,OAAO,cAAc,YAAY,OAAO,MAAM,qBAAqB,MAAM;CAC/E,QAAQ;EAEN,OAAO;CACT;CAEA,OAAO;AACT;AAeA,eAAe,mBACb,QACA,SAC+B;CAE/B,MAAM,UAAS,MADI,aAAa,aAAa,kBAAkB,EAAA,CAC5C;CACnB,MAAM,SAAS,IAAI,OAAO,OAAO,OAAO,OAAO,EAAE,GAAG;EAClD,SAAS,OAAO,OAAO,WAAW,KAAK;EACvC,UAAU,QAAQ,OAAO,YAAY,KAAK;EAC1C,GAAI,OAAO,SACP;GACE,QAAQ,OAAO,OAAO,MAAM;GAC5B,QAAQ,OAAO,OAAO,MAAM;GAC5B,SAAS,OAAO,OAAO,WAAW,OAAO,MAAM;GAC/C,mBAAoB,OAAO,qBAAkC,CAAC,MAAM,KAAK;EAC3E,IACA,CAAC;EAGL,sBAAsB;GACpB,WAAW;GACX,UAAU,QAAQ;GAClB,SAAS,EAAE,kBAAkB,QAAQ,MAAM;EAC7C;CACF,CAAC;CAED,OAAO;EACL,UAAU,SAAS,SAAS;GAC1B,MAAM,KAAK,OAAO,UAAU,OAAO;GACnC,MAAM,MAAM,OAAe,SAAkB,QAAQ,OAAO,IAAI;GAChE,GAAG,YAAY,EAAE;GAEjB,aAAa;IACX,GAAG,cAAc,EAAE;IACnB,OAAO,YAAY,OAAO;GAC5B;EACF;EACA,aAAa;GACX,OAAO,WAAW;EACpB;CACF;AACF;AA4BA,eAAe,qBAAqB,QAAuD;CACzF,MAAM,CAAC,KAAK,MAAM,YAAa,MAAM,QAAQ,IAAI;EAC/C,aAAa,gBAAgB,sBAAsB;EACnD,aAAa,iBAAiB,uBAAuB;EACrD,aAAa,qBAAqB,2BAA2B;CAC/D,CAAC;CAED,MAAM,OAAO;CACb,MAAM,QAAQ,IAAI,QAAQ,CAAC,CAAC,MAAM,MAAM,EAAE,SAAS,IAAI,IACnD,IAAI,OAAO,IAAI,IACf,IAAI,cACF;EACE,QAAQ,OAAO,OAAO,UAAU,EAAE;EAClC,YAAY,OAAO,OAAO,cAAc,EAAE;EAC1C,WAAW,OAAO,OAAO,aAAa,EAAE;EACxC,aAAa,OAAO,OAAO,eAAe,EAAE;CAC9C,GACA,IACF;CAGJ,IAAI,OAAO,OAAO,MAAM,KAAK,sBAAsB,KAAK,QAAQ,KAAK,GAAG,OAAO,KAAK;CAEpF,MAAM,KAAK,SAAS,YAAY,KAAK;CACrC,MAAM,QAAQ,KAAK,IAAI;CAEvB,OAAO;EACL,UAAU,SAAS,SAAS;GAC1B,MAAM,IAAI,SAAS,MACjB,SAAS,IAAI,IAAI,YAAY,SAAS,GACtC,SAAS,aAAa,IAAI,GAC1B,SAAS,QAAQ,KAAK,CACxB;GACA,MAAM,cAAc,SAAS,aAAa,IAAI,SAAS;IACrD,MAAM,QAAQ,KAAK,IAAI;IACvB,IAAI,OAAO,QAAQ,MAAM,OAAO,MAAM,OAAO;GAC/C,CAAC;GAED,aAAa,YAAY;EAC3B;EACA,aAAa,CAEb;CACF;AACF"}
+{"version":3,"file":"realtime.mjs","names":[],"sources":["../src/realtime.ts"],"sourcesContent":["import { createRealtime, type ModuleImporter, type RealtimeConfig } from '@arkstack/realtime'\nimport { REALTIME_EVENT } from '@arkyc/types'\nimport type { ClientRealtime } from './client'\n\n/** Fires for every event received on a subscribed channel. */\nexport type WidgetRealtimeHandler = (event: string, data: unknown) => void\n\n/** A connected push transport. `subscribe` returns an unsubscribe function. */\nexport interface WidgetRealtimeClient {\n  subscribe(channel: string, handler: WidgetRealtimeHandler): () => void\n  disconnect(): void\n}\n\n/** A factory that builds a push client from the session's realtime config. */\nexport type WidgetRealtimeFactory = (\n  config: ClientRealtime,\n  options: WidgetRealtimeOptions,\n) => Promise<WidgetRealtimeClient | null>\n\nexport interface WidgetRealtimeOptions {\n  /** The client-token channel-auth endpoint. */\n  authEndpoint: string\n  /** The session's client token (sent as `X-Client-Token` to the authorizer). */\n  token: string\n}\n\n/** CDN that serves any npm package as ESM (`…/pkg@ver/+esm`). */\nconst CDN = 'https://cdn.jsdelivr.net/npm/'\n\n/** CDN paths for the SDK modules the realtime transports load. */\nconst CDN_PATHS: Record<string, string> = {\n  'pusher-js': 'pusher-js@8/+esm',\n  'firebase/app': 'firebase@11/app/+esm',\n  'firebase/auth': 'firebase@11/auth/+esm',\n  'firebase/database': 'firebase@11/database/+esm',\n  'firebase/messaging': 'firebase@11/messaging/+esm',\n}\n\n/** The domain events the widget watches its session for. */\nconst SESSION_EVENTS = [REALTIME_EVENT.sessionTransition]\n\n/**\n * Load a transport SDK by its package name (resolved by a bundler, import map or\n * Node), falling back to jsDelivr so a plain `<script>` embed still gets it.\n *\n * @param specifier\n * @returns\n */\nexport const importWithCdnFallback: ModuleImporter = async (specifier) => {\n  try {\n    return await import(/* @vite-ignore */ /* webpackIgnore: true */ specifier)\n  } catch (error) {\n    const path = CDN_PATHS[specifier]\n    if (!path) throw error\n\n    return await import(/* @vite-ignore */ /* webpackIgnore: true */ `${CDN}${path}`)\n  }\n}\n\n/**\n * Connect to the session's push transport. Returns null for transports the\n * widget does not stream over (polling, and Firebase Cloud Messaging, which\n * would prompt the end user for notification permission), and rejects when the\n * transport SDK cannot load, so the caller polls instead.\n *\n * @param config\n * @param options\n * @returns\n */\nexport async function createWidgetRealtimeClient(\n  config: ClientRealtime,\n  options: WidgetRealtimeOptions,\n): Promise<WidgetRealtimeClient | null> {\n  if (config.transport !== 'pusher' && config.transport !== 'firebase-database') return null\n\n  const authEndpoint = options.authEndpoint\n  const auth = { headers: { 'X-Client-Token': options.token } }\n  const pusher = config.pusher as RealtimeConfig['pusher']\n  const firebaseDatabase = config['firebase-database'] as RealtimeConfig['firebase-database']\n\n  const client = createRealtime({\n    transport: config.transport,\n    pusher: pusher && { ...pusher, authEndpoint, auth },\n    'firebase-database': firebaseDatabase && { ...firebaseDatabase, authEndpoint, auth },\n    importModule: importWithCdnFallback,\n  })\n\n  // Connect now, so a transport that cannot load falls back to polling.\n  await client.onPoll(() => {})\n\n  return {\n    subscribe(channel, handler) {\n      let active = true\n      const stops: Array<() => void> = []\n\n      for (const event of SESSION_EVENTS) {\n        client\n          .listen(channel, event, (data) => handler(event, data))\n          .then((stop) => (active ? stops.push(stop) : stop()))\n          .catch(() => {\n            // An unauthorized or unavailable channel leaves the session to the poll budget.\n          })\n      }\n\n      return () => {\n        active = false\n        stops.forEach((stop) => stop())\n      }\n    },\n    disconnect() {\n      void client.disconnect()\n    },\n  }\n}\n"],"mappings":";;;;AA2BA,MAAM,MAAM;;AAGZ,MAAM,YAAoC;CACxC,aAAa;CACb,gBAAgB;CAChB,iBAAiB;CACjB,qBAAqB;CACrB,sBAAsB;AACxB;;AAGA,MAAM,iBAAiB,CAAC,eAAe,iBAAiB;;;;;;;;AASxD,MAAa,wBAAwC,OAAO,cAAc;CACxE,IAAI;EACF,OAAO,MAAM;;;GAAoD;;CACnE,SAAS,OAAO;EACd,MAAM,OAAO,UAAU;EACvB,IAAI,CAAC,MAAM,MAAM;EAEjB,OAAO,MAAM;;;GAAoD,GAAG,MAAM;;CAC5E;AACF;;;;;;;;;;;AAYA,eAAsB,2BACpB,QACA,SACsC;CACtC,IAAI,OAAO,cAAc,YAAY,OAAO,cAAc,qBAAqB,OAAO;CAEtF,MAAM,eAAe,QAAQ;CAC7B,MAAM,OAAO,EAAE,SAAS,EAAE,kBAAkB,QAAQ,MAAM,EAAE;CAC5D,MAAM,SAAS,OAAO;CACtB,MAAM,mBAAmB,OAAO;CAEhC,MAAM,SAAS,eAAe;EAC5B,WAAW,OAAO;EAClB,QAAQ,UAAU;GAAE,GAAG;GAAQ;GAAc;EAAK;EAClD,qBAAqB,oBAAoB;GAAE,GAAG;GAAkB;GAAc;EAAK;EACnF,cAAc;CAChB,CAAC;CAGD,MAAM,OAAO,aAAa,CAAC,CAAC;CAE5B,OAAO;EACL,UAAU,SAAS,SAAS;GAC1B,IAAI,SAAS;GACb,MAAM,QAA2B,CAAC;GAElC,KAAK,MAAM,SAAS,gBAClB,OACG,OAAO,SAAS,QAAQ,SAAS,QAAQ,OAAO,IAAI,CAAC,CAAC,CACtD,MAAM,SAAU,SAAS,MAAM,KAAK,IAAI,IAAI,KAAK,CAAE,CAAC,CACpD,YAAY,CAEb,CAAC;GAGL,aAAa;IACX,SAAS;IACT,MAAM,SAAS,SAAS,KAAK,CAAC;GAChC;EACF;EACA,aAAa;GACX,OAAY,WAAW;EACzB;CACF;AACF"}

package/dist/theme.d.mts

@@ -1,13 +1,12 @@
 import { RgbData } from "./types.mjs";
 import { ProjectBranding } from "@arkyc/types";
-
 //#region src/theme.d.ts
 /**
  * Resolves project branding into a concrete theme and renders its CSS. One class
  * owns the whole "theme" concern: defaulted colour/logo/radius values plus the
  * CSS-variable block and stylesheet derived from them.
  */
-declare class Theme {
+export declare class Theme {
   readonly primaryColor: string;
   readonly borderRadius: number;
   readonly mode: 'light' | 'dark';
@@ -45,5 +44,4 @@ declare class Theme {
   }): RgbData;
 }
 //#endregion
-export { Theme };
 //# sourceMappingURL=theme.d.mts.map

package/dist/theme.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"theme.d.mts","names":[],"sources":["../src/theme.ts"],"mappings":";;;;;;AAuBA;;;cAAa,KAAA;EAAA,SACF,YAAA;EAAA,SACA,YAAA;EAAA,SACA,IAAA;EAAA,SACA,OAAA;EAHA;EAAA,SAKA,IAAA;EAHA;EAAA,SAKA,YAAA;EAFA;EAAA,SAIA,UAAA;EAAA;EAAA,SAEA,UAAA;EAEA;EAAA,SAAA,KAAA;;WAEA,MAAA;cAEG,QAAA,GAAW,eAAA;EAmBvB;;;;;EAAA,SAAA;EA+BA;;;;;EAfA,UAAA;EAAA,OAIO,GAAA,CAAI,CAAA;IAAK,YAAA;EAAA,IAAyB,OAAA;EAWzC,GAAA,CAAI,CAAA;IAAK,YAAA;EAAA,IAAyB,OAAA;AAAA"}
+{"version":3,"file":"theme.d.mts","names":[],"sources":["../src/theme.ts"],"mappings":";;;;;;;;qBAuBa;WACF;WACA;WACA;WACA;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;EAEG,YAAA,WAAW;;;;;;EAmBvB;;;;;;EAgBA;SAIO,IAAI;IAAK;MAAyB;EAWzC,IAAI;IAAK;MAAyB"}

package/dist/types.d.mts

@@ -3,10 +3,9 @@ import { FaceAnalyzer, FaceTuning } from "./face.mjs";
 import { AddressFormData } from "./ui.mjs";
 import { ProviderSignalHints } from "./client.mjs";
 import { WidgetRealtimeFactory } from "./realtime.mjs";
-import { DocumentType, LivenessChallenge, ProjectBranding, WidgetResult } from "@arkyc/types";
-
+import { DocumentType, LivenessChallenge, ProjectBranding, SessionTransitionEvent, WidgetResult } from "@arkyc/types";
 //#region src/types.d.ts
-interface RgbData {
+export interface RgbData {
   obj: {
     r: number;
     g: number;
@@ -15,20 +14,62 @@ interface RgbData {
   str: string;
 }
 /**
- * An event surfaced to consumers through `onEvent` / `handle.on(name, cb)`. The
- * stream is a firehose: `session.transition` (live status changes, from the
- * configured transport) plus the lifecycle events `complete` / `error` / `close`.
+ * Payload for `session.transition` — a live verification status change relayed
+ * from the configured transport (pusher/firebase/polling). A widget-scoped
+ * subset of the server's {@link SessionTransitionEvent} (no org/project ids).
  */
-interface WidgetEvent {
-  /** Event name, e.g. `session.transition`, `complete`, `error`, `close`. */
-  name: string;
-  /** Event payload (shape depends on `name`). */
-  data?: unknown;
+export type WidgetSessionTransitionData = Pick<SessionTransitionEvent, 'session_id' | 'status' | 'previous_status'>;
+/**
+ * Payload for `error` — a non-terminal failure surfaced as it happens (an
+ * expired session/token becomes knowable without waiting for the user to
+ * dismiss the screen). `status`/`error` are present only for typed API errors.
+ */
+export interface WidgetErrorData {
+  /** Human-readable failure message. */
+  message: string;
+  /** HTTP status code, when the failure came from a typed API error. */
+  status?: number;
+  /** Stable machine-readable error key, when the failure came from a typed API error. */
+  error?: string;
+}
+/**
+ * The set of widget events and the payload each delivers. This is the single
+ * source of truth for event names and their `data` shapes: `onEvent`,
+ * {@link WidgetEvent}, {@link WidgetEventListener}, and {@link WidgetHandle.on}
+ * are all derived from it, so a listener's `data` is typed from the name.
+ */
+export interface WidgetEventMap {
+  /** Live status change (fires on every real transition, once per change). */
+  'session.transition': WidgetSessionTransitionData;
+  /** The flow settled successfully; carries the final verification result. */
+  complete: WidgetResult;
+  /** A failure occurred (may be recoverable; the flow has not necessarily ended). */
+  error: WidgetErrorData;
+  /** The widget was closed (camera released). No payload. */
+  close: undefined;
 }
-/** Subscribe to a named widget event; returns an unsubscribe function. */
-type WidgetEventListener = (data: unknown) => void;
+/** A widget event name — one of the keys of {@link WidgetEventMap}. */
+export type WidgetEventName = keyof WidgetEventMap;
+/**
+ * An event surfaced to consumers through `onEvent`. Discriminated on `name`, so
+ * a `switch (event.name)` narrows `event.data` to the matching payload. The
+ * stream is a firehose: `session.transition` (live status changes) plus the
+ * lifecycle events `complete` / `error` / `close`.
+ */
+export type WidgetEvent = { [K in WidgetEventName]: {
+  /** Event name (discriminant). */
+  name: K;
+  /** Event payload for this `name` (see {@link WidgetEventMap}). */
+  data: WidgetEventMap[K];
+}; }[WidgetEventName];
+/**
+ * Subscribe callback for a single named widget event; receives that event's
+ * payload (typed from the name via {@link WidgetEventMap}). Defaults to the
+ * union of all payloads when the name isn't fixed.
+ */
+export type WidgetEventListener<K extends WidgetEventName = WidgetEventName> = (data: WidgetEventMap[K]) => void;
 /** Configuration for a {@link WidgetController}. */
-interface WidgetControllerConfig {
+export interface WidgetControllerConfig {
   /** Short-lived client token for this session. */
   token: string;
   /** API origin (defaults to the widget's own origin). */
@@ -93,7 +134,7 @@ interface WidgetControllerConfig {
   maxHandoffPolls?: number;
 }
 /** Common options shared by every launch mode. */
-interface BaseWidgetOptions {
+export interface BaseWidgetOptions {
   /** Short-lived client token minted by the integrator's backend. */
   token: string;
   /** API origin (defaults to the page's own origin). */
@@ -142,23 +183,25 @@ interface BaseWidgetOptions {
   documentTuning?: DocumentTuning;
 }
 /** Options for {@link ArkycWidget.mount} (inline mode). */
-interface MountWidgetOptions extends BaseWidgetOptions {
+export interface MountWidgetOptions extends BaseWidgetOptions {
   /** Element (or selector) to mount the widget into. */
   container: string | HTMLElement;
 }
 /** A handle to an open/mounted widget. */
-interface WidgetHandle {
+export interface WidgetHandle {
   /** Close the widget and release the camera (fires `onClose`). */
   close: () => void;
   /**
-   * Subscribe to a named widget event (e.g. `session.transition`, `complete`).
-   * Returns an unsubscribe function. Registering a listener activates the event
-   * stream (events are only delivered while at least one listener is active).
+   * Subscribe to a named widget event (`session.transition`, `complete`,
+   * `error`, `close`). The `listener`'s `data` is typed from the `event` name
+   * via {@link WidgetEventMap}. Returns an unsubscribe function. Registering a
+   * listener activates the event stream (events are only delivered while at
+   * least one listener is active).
    */
-  on: (event: string, listener: WidgetEventListener) => () => void;
+  on: <K extends WidgetEventName>(event: K, listener: WidgetEventListener<K>) => () => void;
 }
 /** High-level events the view raises back to the controller. */
-interface ViewHandlers {
+export interface ViewHandlers {
   onClose(): void;
   onStart(): void;
   onDocumentSelected(type: DocumentType, country: string): void;
@@ -181,5 +224,4 @@ interface ViewHandlers {
   onShareLocation(): boolean | Promise<boolean>;
 }
 //#endregion
-export { BaseWidgetOptions, MountWidgetOptions, RgbData, ViewHandlers, WidgetControllerConfig, WidgetEvent, WidgetEventListener, WidgetHandle };
 //# sourceMappingURL=types.d.mts.map

package/dist/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","names":[],"sources":["../src/types.ts"],"mappings":";;;;;;;;UAQiB,OAAA;EACf,GAAA;IAAO,CAAA;IAAW,CAAA;IAAW,CAAA;EAAA;EAC7B,GAAA;AAAA;;;;;AAAG;UAQY,WAAA;EAAW;EAE1B,IAAA;EAAA;EAEA,IAAI;AAAA;;KAIM,mBAAA,IAAuB,IAAa;;UAG/B,sBAAA;EAAA;EAEf,KAAA;;EAEA,OAAA;EAUU;EARV,OAAA;EAUkB;EARlB,UAAA;EACA,QAAA,GAAW,eAAA;EAsBL;;;;EAjBN,OAAA,GAAU,mBAAA;EACV,UAAA,IAAc,MAAA,EAAQ,YAAA;EACtB,OAAA,IAAW,KAAA,EAAO,KAAA;EAClB,OAAA;EAqCuC;;;;;EA/BvC,OAAA,IAAW,KAAA,EAAO,WAAA;EAdlB;EAgBA,QAAA;EAXA;EAaA,YAAA;EAGA,KAAA,UAAe,KAAA;EACf,GAAA,GAAM,QAAA;EACN,GAAA,GAAM,MAAA;EACN,GAAA,GAAM,SAAA;EAjBY;;;;;EAuBlB,YAAA,GAAe,YAAA;EAdf;EAgBA,UAAA,GAAa,UAAA;EAXb;;;;;EAiBA,gBAAA,GAAmB,gBAAA;EAdnB;EAgBA,cAAA,GAAiB,cAAA;EAVjB;;;;EAeA,eAAA,GAAkB,qBAAA;EAPC;EASnB,SAAA,IAAa,EAAA,cAAgB,EAAA;EAPZ;EASjB,WAAA;EAJkB;EAMlB,MAAA;EAJa;EAMb,QAAA;EAJA;EAMA,eAAA;AAAA;;UAIe,iBAAA;EAJA;EAMf,KAAA;EAFgC;EAIhC,OAAA;EAaW;;;;;EAPX,OAAA;EA4BM;;;;EAvBN,UAAA;EA+BmB;EA7BnB,QAAA,GAAW,eAAA;EA+BoB;;;;EA1B/B,UAAA;EAPA;EASA,OAAA,GAAU,mBAAA;EACV,UAAA,IAAc,MAAA,EAAQ,YAAA;EACtB,OAAA,IAAW,KAAA,EAAO,KAAA;EAClB,OAAA;EAHU;;;;;;EAUV,OAAA,IAAW,KAAA,EAAO,WAAA;EAGlB,KAAA,UAAe,KAAA;EACf,GAAA,GAAM,QAAA;EACN,GAAA,GAAM,MAAA;EACN,GAAA,GAAM,SAAA;EAHN;EAKA,YAAA,GAAe,YAAA;EAJf;EAMA,UAAA,GAAa,UAAA;EALb;EAOA,gBAAA,GAAmB,gBAAA;EANnB;EAQA,cAAA,GAAiB,cAAA;AAAA;;UAIF,kBAAA,SAA2B,iBAAiB;EAR9C;EAUb,SAAA,WAAoB,WAAA;AAAA;;UAIL,YAAA;EAVgB;EAY/B,KAAA;EARe;;;;;EAcf,EAAA,GAAK,KAAA,UAAe,QAAA,EAAU,mBAAmB;AAAA;;UAIlC,YAAA;EACf,OAAA;EACA,OAAA;EACA,kBAAA,CAAmB,IAAA,EAAM,YAAA,EAAc,OAAA;EAPU;EASjD,OAAA,CAAQ,IAAA,EAAM,IAAA;EATd;;;;EAcA,gBAAA,CAAiB,KAAA,EAAO,IAAA,SAAa,SAAA,EAAW,iBAAA,IAAqB,MAAA,GAAS,IAAA;EAd7B;EAgBjD,aAAA;EAZ2B;EAc3B,UAAA;EAXyB;EAazB,cAAA;EANwB;EAQxB,SAAA,CAAU,IAAA,EAAM,eAAA;EAR8D;EAU9E,eAAA,cAA6B,OAAA;AAAA"}
+{"version":3,"file":"types.d.mts","names":[],"sources":["../src/types.ts"],"mappings":";;;;;;;iBAciB;EACf;IAAO;IAAW;IAAW;;EAC7B;;;;;;;YAQU,8BAA8B,KAAK;;;;;;iBAO9B;;EAEf;;EAEA;;EAEA;;;;;;;;iBASe;;EAEf,sBAAsB;;EAEtB,UAAU;;EAEV,OAAO;;EAEP;;;YAIU,wBAAwB;;;;;;;YAQxB,iBACT,KAAK;;EAEJ,MAAM;;EAEN,MAAM,eAAe;KAEvB;;;;;;YAOU,oBAAoB,UAAU,kBAAkB,oBAAoB,MAAM,eAAe;;iBAGpF;;EAEf;;EAEA;;EAEA;;EAEA;EACA,WAAW;;;;;EAKX,UAAU;EACV,cAAc,QAAQ;EACtB,WAAW,OAAO;EAClB;;;;;;EAMA,WAAW,OAAO;;EAElB;;EAEA;EAGA,eAAe;EACf,MAAM;EACN,MAAM;EACN,MAAM;;;;;;EAMN,eAAe;;EAEf,aAAa;;;;;;EAMb,mBAAmB;;EAEnB,iBAAiB;;;;;EAKjB,kBAAkB;;EAElB,aAAa,gBAAgB;;EAE7B;;EAEA;;EAEA;;EAEA;;;iBAIe;;EAEf;;EAEA;;;;;;EAMA;;;;;EAKA;;EAEA,WAAW;;;;;EAKX;;EAEA,UAAU;EACV,cAAc,QAAQ;EACtB,WAAW,OAAO;EAClB;;;;;;;EAOA,WAAW,OAAO;EAGlB,eAAe;EACf,MAAM;EACN,MAAM;EACN,MAAM;;EAEN,eAAe;;EAEf,aAAa;;EAEb,mBAAmB;;EAEnB,iBAAiB;;;iBAIF,2BAA2B;;EAE1C,oBAAoB;;;iBAIL;;EAEf;;;;;;;;EAQA,KAAK,UAAU,iBAAiB,OAAO,GAAG,UAAU,oBAAoB;;;iBAIzD;EACf;EACA;EACA,mBAAmB,MAAM,cAAc;;EAEvC,QAAQ,MAAM;;;;;EAKd,iBAAiB,OAAO,aAAa,WAAW,qBAAqB,SAAS;;EAE9E;;EAEA;;EAEA;;EAEA,UAAU,MAAM;;EAEhB,6BAA6B"}

package/dist/ui.d.mts

@@ -1,8 +1,10 @@
+import "./face.mjs";
+import "./theme.mjs";
+import "./types.mjs";
 import { DocumentType, LivenessChallenge, ProjectBranding, VerificationDecision, VerificationStatus, WidgetStep } from "@arkyc/types";
-
 //#region src/ui.d.ts
 /** The data the address-entry screen collects before submission. */
-interface AddressFormData {
+export interface AddressFormData {
   line1: string | null;
   line2: string | null;
   city: string | null;
@@ -15,5 +17,4 @@ interface AddressFormData {
   useLocation: boolean;
 }
 //#endregion
-export { AddressFormData };
 //# sourceMappingURL=ui.d.mts.map

package/dist/ui.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"ui.d.mts","names":[],"sources":["../src/ui.ts"],"mappings":";;;;UAWiB,eAAA;EACf,KAAA;EACA,KAAA;EACA,IAAA;EACA,MAAA;EACA,UAAA;EACA,OAAA;EAES;EAAT,GAAA,EAAK,IAAI;EANT;EAQA,WAAA;AAAA"}
+{"version":3,"file":"ui.d.mts","names":[],"sources":["../src/ui.ts"],"mappings":";;;;;;iBAWiB;EACf;EACA;EACA;EACA;EACA;EACA;;EAEA,KAAK;;EAEL"}

package/dist/ui.mjs

@@ -137,7 +137,7 @@ var WidgetView = class {
 	*/
 	fillBrand() {
 		this.clear(this.brandEl);
-		const lastTenMins = Date.now() - Math.floor(Math.random() * (600 * 1e3));
+		const lastTenMins = Date.now() - Math.floor(Math.random() * 6e5);
 		const branded = this.theme.showBranding && (this.theme.logoUrl || this.theme.name);
 		this.dom.append(this.brandEl, branded ? [this.theme.logoUrl && this.dom.h("img", {
 			class: "arkyc-logo",
@@ -446,11 +446,12 @@ var WidgetView = class {
 				if (!sample) return;
 				fillEma = ema(fillEma, sample.fill);
 				edgeEma = ema(edgeEma, sample.edgeStrength);
-				const { ready, hint: message } = documentGuidance({
+				const smoothed = {
 					...sample,
 					fill: fillEma,
 					edgeStrength: edgeEma
-				}, this.docTuning);
+				};
+				const { ready, hint: message } = documentGuidance(smoothed, this.docTuning);
 				hint.textContent = message;
 				doc.setFrame(sample.present ? sample.rect : null);
 				doc.setQuality(ready ? "good" : sample.present ? "wait" : "bad");