@blotoutio/providers-evo-search-sdk 1.65.1 → 1.65.2

package/README.md

@@ -96,6 +96,8 @@ When you want to render search results with your own React components instead of
 
 The EdgeTag pixel must still be loaded on your storefront for the SDK to register and the React hook to receive an API.
 
+`api.search()` retries transient failures and then rejects with a `TimeoutError` after ~23 seconds rather than hanging, so handle the rejected promise. Pass an `AbortSignal` when a newer query can supersede an older one — it is the only way to cancel pending retries, and the React hook already does this for you.
+
 ## /load endpoint cache
 
 CDN responses for `/load` cache for ~25 minutes (`max-age=1500`). Toggling `Disable default UI` in the admin form takes up to that long to propagate across edge nodes — bake the delay into release planning.

package/core.cjs.js

@@ -652,24 +652,48 @@ const isRetryable = (error) => {
     const status = error === null || error === void 0 ? void 0 : error.status;
     return status == null || status === 429 || status >= 500;
 };
-const delay = (ms, signal) => new Promise((resolve, reject) => {
-    if (signal.aborted)
-        return reject(new DOMException('Aborted', 'AbortError'));
-    const t = setTimeout(resolve, ms);
-    signal.addEventListener('abort', () => {
-        clearTimeout(t);
-        reject(new DOMException('Aborted', 'AbortError'));
-    }, { once: true });
-});
+// `navigator.onLine` is only informative when false; wait for the network rather
+// than spending retries on a route that doesn't exist.
+const isOffline = () => typeof navigator != 'undefined' && navigator.onLine === false;
+// Waits `ms`, or until the network returns, whichever is first.
+const delay = (ms, signal) => {
+    // Whichever of timer/online/abort settles first tears down the other two.
+    let cleanup = () => undefined;
+    const waiting = new Promise((resolve, reject) => {
+        var _a;
+        if (signal.aborted)
+            return reject(new DOMException('Aborted', 'AbortError'));
+        const timer = setTimeout(resolve, ms);
+        const onOnline = () => resolve();
+        const onAbort = () => reject(new DOMException('Aborted', 'AbortError'));
+        (_a = globalThis.addEventListener) === null || _a === void 0 ? void 0 : _a.call(globalThis, 'online', onOnline);
+        signal.addEventListener('abort', onAbort, { once: true });
+        cleanup = () => {
+            var _a;
+            clearTimeout(timer);
+            (_a = globalThis.removeEventListener) === null || _a === void 0 ? void 0 : _a.call(globalThis, 'online', onOnline);
+            signal.removeEventListener('abort', onAbort);
+        };
+    });
+    return waiting.finally(() => cleanup());
+};
 /**
  * Run `attempt` with a timeout, retrying transient failures. `callerSignal`
  * supersedes everything: if it aborts, we stop immediately without retrying
  * (the query changed / the widget cleaned up). A timeout or network error is
  * retried up to `retries` times; anything left over is rethrown.
+ *
+ * Every phase draws from one shared deadline — the nominal schedule of all
+ * attempts plus all backoffs — so waiting out an offline route borrows from the
+ * budget instead of widening it, and the whole call still ends within it.
  */
 async function withSearchResilience(attempt, callerSignal, options = {}) {
     var _a, _b;
     const { timeoutMs, retries, backoffMs } = { ...DEFAULTS, ...options };
+    const deadline = Date.now() +
+        (retries + 1) * timeoutMs +
+        backoffMs.reduce((sum, ms) => sum + ms, 0);
+    const remaining = () => deadline - Date.now();
     let lastError;
     for (let i = 0; i <= retries; i++) {
         if (callerSignal.aborted)
@@ -687,7 +711,7 @@ async function withSearchResilience(attempt, callerSignal, options = {}) {
             timer = setTimeout(() => {
                 local.abort(); // still cancel the in-flight request to free the socket
                 reject(new DOMException('Search request timed out', 'TimeoutError'));
-            }, timeoutMs);
+            }, Math.min(timeoutMs, remaining()));
         });
         try {
             return await Promise.race([attempt(local.signal), timeout]);
@@ -699,7 +723,11 @@ async function withSearchResilience(attempt, callerSignal, options = {}) {
                 throw error;
             // Otherwise it was a timeout or a transient network error: retry if budget remains.
             if (i < retries && isRetryable(error)) {
-                const wait = (_b = (_a = backoffMs[i]) !== null && _a !== void 0 ? _a : backoffMs[backoffMs.length - 1]) !== null && _b !== void 0 ? _b : 0;
+                // Offline: hold for the network instead of burning the retry on a route
+                // that doesn't exist — but only with time the call already had.
+                const wait = isOffline()
+                    ? remaining()
+                    : (_b = (_a = backoffMs[i]) !== null && _a !== void 0 ? _a : backoffMs[backoffMs.length - 1]) !== null && _b !== void 0 ? _b : 0;
                 // Rejects with an AbortError if the caller aborts mid-backoff —
                 // propagate that cancellation instead of the transient `error` above.
                 await delay(wait, callerSignal);
@@ -715,14 +743,21 @@ async function withSearchResilience(attempt, callerSignal, options = {}) {
     throw lastError;
 }
 
-// Client-side deadlines for the Ask SSE path. `/search` already gets these via
-// withSearchResilience; Ask is the streaming counterpart. The request timeout
-// matches the resilience wrapper's per-attempt budget; the idle timeout catches
-// a stream that stalls mid-flight without a terminal frame and resets on every
-// chunk. Both surface a TimeoutError (not an AbortError) so submitAsk routes
-// them to the search fallback instead of treating them as caller-cancellation.
+// Ask can't reuse withSearchResilience: a half-consumed stream isn't retryable.
+// Idle timeout resets per chunk; both reject with TimeoutError so submitAsk
+// routes them to the search fallback rather than treating them as cancellation.
 const ASK_REQUEST_TIMEOUT_MS = 7000;
 const ASK_SSE_IDLE_TIMEOUT_MS = 10000;
+// Keep-warm cadence for `warm()`. Chrome reaps used-idle sockets after ~5
+// minutes and the edge sooner than that under load; a ping well inside those
+// windows keeps the established h2/h3 connection alive so a keystroke after an
+// idle pause multiplexes onto it instead of paying (and possibly wedging on)
+// fresh connection establishment. Lives here rather than in either caller so
+// the widget's open-scoped timer and init's headless timer can't drift apart.
+const KEEP_WARM_INTERVAL_MS = 60000;
+// Stand-in caller signal for `search()` calls that don't pass one. Module-level
+// and never aborted, so it carries no state between calls.
+const NEVER_ABORTED = new AbortController().signal;
 // Always defer to what the storefront itself is rendering — same source
 // shop-gpt reads from. Two widgets on the same page would otherwise drift:
 // shop-gpt picks Shopify, evo-search would pick its own override and show
@@ -881,9 +916,13 @@ const createEvoSearchAPI = ({ fetch: fetchImpl = window.fetch, baseURL, userId,
     };
     const deleteRecent = (value) => sendMutation('/user/recents', 'DeleteRecent', 'DELETE', { value });
     const clearRecents = () => sendMutation('/user/recents', 'ClearRecents', 'DELETE');
+    // Resilience lives here, not at each call site, so no consumer can opt out —
+    // the headless channel previously had no deadline and no retry.
     const search = async (query, limit = 8, signal) => {
         logger.info(`EvoSearch API: Search request - query length: ${query.length}, limit: ${limit}`);
-        const data = await getJSON('/search', 'Search', { q: query, limit: String(limit) }, signal);
+        const data = await withSearchResilience((attemptSignal) => getJSON('/search', 'Search', { q: query, limit: String(limit) }, attemptSignal), 
+        // Shared stand-in is safe: the wrapper removes its abort listener per attempt.
+        signal !== null && signal !== void 0 ? signal : NEVER_ABORTED);
         logger.info(`EvoSearch API: Search success - ${data.llmSuggestions.length} suggestions, ${data.products.length} products`);
         return data;
     };
@@ -1081,6 +1120,36 @@ const parseSseFrame = (frame) => {
 };
 
 const error = (message) => console.error(message);
+// Headless hosts render their own UI, so nothing else pings /warm for them.
+let disposeKeepWarm;
+// A ping on load, on the interval, and on the two events that mean the shopper
+// is back — tab return, and the network returning after a sleep suspended the
+// timer. Skipped while hidden: no keystroke is coming and /warm shares its
+// per-IP bucket with /search.
+const startHeadlessKeepWarm = (api) => {
+    // Repeated init() would otherwise leave earlier timers and listeners warming
+    // a replaced API forever.
+    disposeKeepWarm === null || disposeKeepWarm === void 0 ? void 0 : disposeKeepWarm();
+    const ping = () => {
+        if (!document.hidden) {
+            void api.warm();
+        }
+    };
+    ping();
+    const timer = setInterval(ping, KEEP_WARM_INTERVAL_MS);
+    document.addEventListener('visibilitychange', ping);
+    window.addEventListener('online', ping);
+    disposeKeepWarm = () => {
+        clearInterval(timer);
+        document.removeEventListener('visibilitychange', ping);
+        window.removeEventListener('online', ping);
+        // Stopping the cadence must also kill an in-flight retry chain: a
+        // black-holed /warm would otherwise keep re-establishing connections for
+        // the wrapper's full budget against a replaced API.
+        api.cancelWarm();
+        disposeKeepWarm = undefined;
+    };
+};
 const init = (params) => {
     var _a, _b, _c, _d, _e, _f, _g, _h;
     if (typeof window == 'undefined' || typeof document == 'undefined') {
@@ -1089,6 +1158,9 @@ const init = (params) => {
     try {
         (_a = window[registryKey]) !== null && _a !== void 0 ? _a : (window[registryKey] = {});
         logger.info('EvoSearch SDK: Initializing');
+        // A re-init can land on a different channel, or bail out entirely, so drop
+        // any previous cadence before deciding which one this run owns.
+        disposeKeepWarm === null || disposeKeepWarm === void 0 ? void 0 : disposeKeepWarm();
         if (new URLSearchParams(window.location.search).get('evs') === 'preview') {
             try {
                 sessionStorage.setItem(previewKeyName, '1');
@@ -1128,8 +1200,12 @@ const init = (params) => {
             options: { destination: params.baseUrl },
         });
         if (!uiImplementation) {
-            if ((_f = (_e = params.manifest) === null || _e === void 0 ? void 0 : _e.variables) === null || _f === void 0 ? void 0 : _f.disableDefaultUI) {
+            if (((_f = (_e = params.manifest) === null || _e === void 0 ? void 0 : _e.variables) === null || _f === void 0 ? void 0 : _f.disableDefaultUI) === true) {
                 logger.info('EvoSearch SDK: Running in headless mode, no default UI will render');
+                // Deliberately keyed on `disableDefaultUI` rather than bare `headless`:
+                // in the else branch the UI is missing by mistake, so search isn't
+                // usable and there's no connection worth holding open.
+                startHeadlessKeepWarm(evoSearchAPI);
             }
             else {
                 error('UI implementation is missing');

package/core.js

@@ -653,24 +653,48 @@ var ProvidersEvoSearchSdk = (function () {
         const status = error === null || error === void 0 ? void 0 : error.status;
         return status == null || status === 429 || status >= 500;
     };
-    const delay = (ms, signal) => new Promise((resolve, reject) => {
-        if (signal.aborted)
-            return reject(new DOMException('Aborted', 'AbortError'));
-        const t = setTimeout(resolve, ms);
-        signal.addEventListener('abort', () => {
-            clearTimeout(t);
-            reject(new DOMException('Aborted', 'AbortError'));
-        }, { once: true });
-    });
+    // `navigator.onLine` is only informative when false; wait for the network rather
+    // than spending retries on a route that doesn't exist.
+    const isOffline = () => typeof navigator != 'undefined' && navigator.onLine === false;
+    // Waits `ms`, or until the network returns, whichever is first.
+    const delay = (ms, signal) => {
+        // Whichever of timer/online/abort settles first tears down the other two.
+        let cleanup = () => undefined;
+        const waiting = new Promise((resolve, reject) => {
+            var _a;
+            if (signal.aborted)
+                return reject(new DOMException('Aborted', 'AbortError'));
+            const timer = setTimeout(resolve, ms);
+            const onOnline = () => resolve();
+            const onAbort = () => reject(new DOMException('Aborted', 'AbortError'));
+            (_a = globalThis.addEventListener) === null || _a === void 0 ? void 0 : _a.call(globalThis, 'online', onOnline);
+            signal.addEventListener('abort', onAbort, { once: true });
+            cleanup = () => {
+                var _a;
+                clearTimeout(timer);
+                (_a = globalThis.removeEventListener) === null || _a === void 0 ? void 0 : _a.call(globalThis, 'online', onOnline);
+                signal.removeEventListener('abort', onAbort);
+            };
+        });
+        return waiting.finally(() => cleanup());
+    };
     /**
      * Run `attempt` with a timeout, retrying transient failures. `callerSignal`
      * supersedes everything: if it aborts, we stop immediately without retrying
      * (the query changed / the widget cleaned up). A timeout or network error is
      * retried up to `retries` times; anything left over is rethrown.
+     *
+     * Every phase draws from one shared deadline — the nominal schedule of all
+     * attempts plus all backoffs — so waiting out an offline route borrows from the
+     * budget instead of widening it, and the whole call still ends within it.
      */
     async function withSearchResilience(attempt, callerSignal, options = {}) {
         var _a, _b;
         const { timeoutMs, retries, backoffMs } = { ...DEFAULTS, ...options };
+        const deadline = Date.now() +
+            (retries + 1) * timeoutMs +
+            backoffMs.reduce((sum, ms) => sum + ms, 0);
+        const remaining = () => deadline - Date.now();
         let lastError;
         for (let i = 0; i <= retries; i++) {
             if (callerSignal.aborted)
@@ -688,7 +712,7 @@ var ProvidersEvoSearchSdk = (function () {
                 timer = setTimeout(() => {
                     local.abort(); // still cancel the in-flight request to free the socket
                     reject(new DOMException('Search request timed out', 'TimeoutError'));
-                }, timeoutMs);
+                }, Math.min(timeoutMs, remaining()));
             });
             try {
                 return await Promise.race([attempt(local.signal), timeout]);
@@ -700,7 +724,11 @@ var ProvidersEvoSearchSdk = (function () {
                     throw error;
                 // Otherwise it was a timeout or a transient network error: retry if budget remains.
                 if (i < retries && isRetryable(error)) {
-                    const wait = (_b = (_a = backoffMs[i]) !== null && _a !== void 0 ? _a : backoffMs[backoffMs.length - 1]) !== null && _b !== void 0 ? _b : 0;
+                    // Offline: hold for the network instead of burning the retry on a route
+                    // that doesn't exist — but only with time the call already had.
+                    const wait = isOffline()
+                        ? remaining()
+                        : (_b = (_a = backoffMs[i]) !== null && _a !== void 0 ? _a : backoffMs[backoffMs.length - 1]) !== null && _b !== void 0 ? _b : 0;
                     // Rejects with an AbortError if the caller aborts mid-backoff —
                     // propagate that cancellation instead of the transient `error` above.
                     await delay(wait, callerSignal);
@@ -716,14 +744,21 @@ var ProvidersEvoSearchSdk = (function () {
         throw lastError;
     }
 
-    // Client-side deadlines for the Ask SSE path. `/search` already gets these via
-    // withSearchResilience; Ask is the streaming counterpart. The request timeout
-    // matches the resilience wrapper's per-attempt budget; the idle timeout catches
-    // a stream that stalls mid-flight without a terminal frame and resets on every
-    // chunk. Both surface a TimeoutError (not an AbortError) so submitAsk routes
-    // them to the search fallback instead of treating them as caller-cancellation.
+    // Ask can't reuse withSearchResilience: a half-consumed stream isn't retryable.
+    // Idle timeout resets per chunk; both reject with TimeoutError so submitAsk
+    // routes them to the search fallback rather than treating them as cancellation.
     const ASK_REQUEST_TIMEOUT_MS = 7000;
     const ASK_SSE_IDLE_TIMEOUT_MS = 10000;
+    // Keep-warm cadence for `warm()`. Chrome reaps used-idle sockets after ~5
+    // minutes and the edge sooner than that under load; a ping well inside those
+    // windows keeps the established h2/h3 connection alive so a keystroke after an
+    // idle pause multiplexes onto it instead of paying (and possibly wedging on)
+    // fresh connection establishment. Lives here rather than in either caller so
+    // the widget's open-scoped timer and init's headless timer can't drift apart.
+    const KEEP_WARM_INTERVAL_MS = 60000;
+    // Stand-in caller signal for `search()` calls that don't pass one. Module-level
+    // and never aborted, so it carries no state between calls.
+    const NEVER_ABORTED = new AbortController().signal;
     // Always defer to what the storefront itself is rendering — same source
     // shop-gpt reads from. Two widgets on the same page would otherwise drift:
     // shop-gpt picks Shopify, evo-search would pick its own override and show
@@ -882,9 +917,13 @@ var ProvidersEvoSearchSdk = (function () {
         };
         const deleteRecent = (value) => sendMutation('/user/recents', 'DeleteRecent', 'DELETE', { value });
         const clearRecents = () => sendMutation('/user/recents', 'ClearRecents', 'DELETE');
+        // Resilience lives here, not at each call site, so no consumer can opt out —
+        // the headless channel previously had no deadline and no retry.
         const search = async (query, limit = 8, signal) => {
             logger.info(`EvoSearch API: Search request - query length: ${query.length}, limit: ${limit}`);
-            const data = await getJSON('/search', 'Search', { q: query, limit: String(limit) }, signal);
+            const data = await withSearchResilience((attemptSignal) => getJSON('/search', 'Search', { q: query, limit: String(limit) }, attemptSignal), 
+            // Shared stand-in is safe: the wrapper removes its abort listener per attempt.
+            signal !== null && signal !== void 0 ? signal : NEVER_ABORTED);
             logger.info(`EvoSearch API: Search success - ${data.llmSuggestions.length} suggestions, ${data.products.length} products`);
             return data;
         };
@@ -1082,6 +1121,36 @@ var ProvidersEvoSearchSdk = (function () {
     };
 
     const error = (message) => console.error(message);
+    // Headless hosts render their own UI, so nothing else pings /warm for them.
+    let disposeKeepWarm;
+    // A ping on load, on the interval, and on the two events that mean the shopper
+    // is back — tab return, and the network returning after a sleep suspended the
+    // timer. Skipped while hidden: no keystroke is coming and /warm shares its
+    // per-IP bucket with /search.
+    const startHeadlessKeepWarm = (api) => {
+        // Repeated init() would otherwise leave earlier timers and listeners warming
+        // a replaced API forever.
+        disposeKeepWarm === null || disposeKeepWarm === void 0 ? void 0 : disposeKeepWarm();
+        const ping = () => {
+            if (!document.hidden) {
+                void api.warm();
+            }
+        };
+        ping();
+        const timer = setInterval(ping, KEEP_WARM_INTERVAL_MS);
+        document.addEventListener('visibilitychange', ping);
+        window.addEventListener('online', ping);
+        disposeKeepWarm = () => {
+            clearInterval(timer);
+            document.removeEventListener('visibilitychange', ping);
+            window.removeEventListener('online', ping);
+            // Stopping the cadence must also kill an in-flight retry chain: a
+            // black-holed /warm would otherwise keep re-establishing connections for
+            // the wrapper's full budget against a replaced API.
+            api.cancelWarm();
+            disposeKeepWarm = undefined;
+        };
+    };
     const init = (params) => {
         var _a, _b, _c, _d, _e, _f, _g, _h;
         if (typeof window == 'undefined' || typeof document == 'undefined') {
@@ -1090,6 +1159,9 @@ var ProvidersEvoSearchSdk = (function () {
         try {
             (_a = window[registryKey]) !== null && _a !== void 0 ? _a : (window[registryKey] = {});
             logger.info('EvoSearch SDK: Initializing');
+            // A re-init can land on a different channel, or bail out entirely, so drop
+            // any previous cadence before deciding which one this run owns.
+            disposeKeepWarm === null || disposeKeepWarm === void 0 ? void 0 : disposeKeepWarm();
             if (new URLSearchParams(window.location.search).get('evs') === 'preview') {
                 try {
                     sessionStorage.setItem(previewKeyName, '1');
@@ -1129,8 +1201,12 @@ var ProvidersEvoSearchSdk = (function () {
                 options: { destination: params.baseUrl },
             });
             if (!uiImplementation) {
-                if ((_f = (_e = params.manifest) === null || _e === void 0 ? void 0 : _e.variables) === null || _f === void 0 ? void 0 : _f.disableDefaultUI) {
+                if (((_f = (_e = params.manifest) === null || _e === void 0 ? void 0 : _e.variables) === null || _f === void 0 ? void 0 : _f.disableDefaultUI) === true) {
                     logger.info('EvoSearch SDK: Running in headless mode, no default UI will render');
+                    // Deliberately keyed on `disableDefaultUI` rather than bare `headless`:
+                    // in the else branch the UI is missing by mistake, so search isn't
+                    // usable and there's no connection worth holding open.
+                    startHeadlessKeepWarm(evoSearchAPI);
                 }
                 else {
                     error('UI implementation is missing');

package/core.mjs

@@ -650,24 +650,48 @@ const isRetryable = (error) => {
     const status = error === null || error === void 0 ? void 0 : error.status;
     return status == null || status === 429 || status >= 500;
 };
-const delay = (ms, signal) => new Promise((resolve, reject) => {
-    if (signal.aborted)
-        return reject(new DOMException('Aborted', 'AbortError'));
-    const t = setTimeout(resolve, ms);
-    signal.addEventListener('abort', () => {
-        clearTimeout(t);
-        reject(new DOMException('Aborted', 'AbortError'));
-    }, { once: true });
-});
+// `navigator.onLine` is only informative when false; wait for the network rather
+// than spending retries on a route that doesn't exist.
+const isOffline = () => typeof navigator != 'undefined' && navigator.onLine === false;
+// Waits `ms`, or until the network returns, whichever is first.
+const delay = (ms, signal) => {
+    // Whichever of timer/online/abort settles first tears down the other two.
+    let cleanup = () => undefined;
+    const waiting = new Promise((resolve, reject) => {
+        var _a;
+        if (signal.aborted)
+            return reject(new DOMException('Aborted', 'AbortError'));
+        const timer = setTimeout(resolve, ms);
+        const onOnline = () => resolve();
+        const onAbort = () => reject(new DOMException('Aborted', 'AbortError'));
+        (_a = globalThis.addEventListener) === null || _a === void 0 ? void 0 : _a.call(globalThis, 'online', onOnline);
+        signal.addEventListener('abort', onAbort, { once: true });
+        cleanup = () => {
+            var _a;
+            clearTimeout(timer);
+            (_a = globalThis.removeEventListener) === null || _a === void 0 ? void 0 : _a.call(globalThis, 'online', onOnline);
+            signal.removeEventListener('abort', onAbort);
+        };
+    });
+    return waiting.finally(() => cleanup());
+};
 /**
  * Run `attempt` with a timeout, retrying transient failures. `callerSignal`
  * supersedes everything: if it aborts, we stop immediately without retrying
  * (the query changed / the widget cleaned up). A timeout or network error is
  * retried up to `retries` times; anything left over is rethrown.
+ *
+ * Every phase draws from one shared deadline — the nominal schedule of all
+ * attempts plus all backoffs — so waiting out an offline route borrows from the
+ * budget instead of widening it, and the whole call still ends within it.
  */
 async function withSearchResilience(attempt, callerSignal, options = {}) {
     var _a, _b;
     const { timeoutMs, retries, backoffMs } = { ...DEFAULTS, ...options };
+    const deadline = Date.now() +
+        (retries + 1) * timeoutMs +
+        backoffMs.reduce((sum, ms) => sum + ms, 0);
+    const remaining = () => deadline - Date.now();
     let lastError;
     for (let i = 0; i <= retries; i++) {
         if (callerSignal.aborted)
@@ -685,7 +709,7 @@ async function withSearchResilience(attempt, callerSignal, options = {}) {
             timer = setTimeout(() => {
                 local.abort(); // still cancel the in-flight request to free the socket
                 reject(new DOMException('Search request timed out', 'TimeoutError'));
-            }, timeoutMs);
+            }, Math.min(timeoutMs, remaining()));
         });
         try {
             return await Promise.race([attempt(local.signal), timeout]);
@@ -697,7 +721,11 @@ async function withSearchResilience(attempt, callerSignal, options = {}) {
                 throw error;
             // Otherwise it was a timeout or a transient network error: retry if budget remains.
             if (i < retries && isRetryable(error)) {
-                const wait = (_b = (_a = backoffMs[i]) !== null && _a !== void 0 ? _a : backoffMs[backoffMs.length - 1]) !== null && _b !== void 0 ? _b : 0;
+                // Offline: hold for the network instead of burning the retry on a route
+                // that doesn't exist — but only with time the call already had.
+                const wait = isOffline()
+                    ? remaining()
+                    : (_b = (_a = backoffMs[i]) !== null && _a !== void 0 ? _a : backoffMs[backoffMs.length - 1]) !== null && _b !== void 0 ? _b : 0;
                 // Rejects with an AbortError if the caller aborts mid-backoff —
                 // propagate that cancellation instead of the transient `error` above.
                 await delay(wait, callerSignal);
@@ -713,14 +741,21 @@ async function withSearchResilience(attempt, callerSignal, options = {}) {
     throw lastError;
 }
 
-// Client-side deadlines for the Ask SSE path. `/search` already gets these via
-// withSearchResilience; Ask is the streaming counterpart. The request timeout
-// matches the resilience wrapper's per-attempt budget; the idle timeout catches
-// a stream that stalls mid-flight without a terminal frame and resets on every
-// chunk. Both surface a TimeoutError (not an AbortError) so submitAsk routes
-// them to the search fallback instead of treating them as caller-cancellation.
+// Ask can't reuse withSearchResilience: a half-consumed stream isn't retryable.
+// Idle timeout resets per chunk; both reject with TimeoutError so submitAsk
+// routes them to the search fallback rather than treating them as cancellation.
 const ASK_REQUEST_TIMEOUT_MS = 7000;
 const ASK_SSE_IDLE_TIMEOUT_MS = 10000;
+// Keep-warm cadence for `warm()`. Chrome reaps used-idle sockets after ~5
+// minutes and the edge sooner than that under load; a ping well inside those
+// windows keeps the established h2/h3 connection alive so a keystroke after an
+// idle pause multiplexes onto it instead of paying (and possibly wedging on)
+// fresh connection establishment. Lives here rather than in either caller so
+// the widget's open-scoped timer and init's headless timer can't drift apart.
+const KEEP_WARM_INTERVAL_MS = 60000;
+// Stand-in caller signal for `search()` calls that don't pass one. Module-level
+// and never aborted, so it carries no state between calls.
+const NEVER_ABORTED = new AbortController().signal;
 // Always defer to what the storefront itself is rendering — same source
 // shop-gpt reads from. Two widgets on the same page would otherwise drift:
 // shop-gpt picks Shopify, evo-search would pick its own override and show
@@ -879,9 +914,13 @@ const createEvoSearchAPI = ({ fetch: fetchImpl = window.fetch, baseURL, userId,
     };
     const deleteRecent = (value) => sendMutation('/user/recents', 'DeleteRecent', 'DELETE', { value });
     const clearRecents = () => sendMutation('/user/recents', 'ClearRecents', 'DELETE');
+    // Resilience lives here, not at each call site, so no consumer can opt out —
+    // the headless channel previously had no deadline and no retry.
     const search = async (query, limit = 8, signal) => {
         logger.info(`EvoSearch API: Search request - query length: ${query.length}, limit: ${limit}`);
-        const data = await getJSON('/search', 'Search', { q: query, limit: String(limit) }, signal);
+        const data = await withSearchResilience((attemptSignal) => getJSON('/search', 'Search', { q: query, limit: String(limit) }, attemptSignal), 
+        // Shared stand-in is safe: the wrapper removes its abort listener per attempt.
+        signal !== null && signal !== void 0 ? signal : NEVER_ABORTED);
         logger.info(`EvoSearch API: Search success - ${data.llmSuggestions.length} suggestions, ${data.products.length} products`);
         return data;
     };
@@ -1079,6 +1118,36 @@ const parseSseFrame = (frame) => {
 };
 
 const error = (message) => console.error(message);
+// Headless hosts render their own UI, so nothing else pings /warm for them.
+let disposeKeepWarm;
+// A ping on load, on the interval, and on the two events that mean the shopper
+// is back — tab return, and the network returning after a sleep suspended the
+// timer. Skipped while hidden: no keystroke is coming and /warm shares its
+// per-IP bucket with /search.
+const startHeadlessKeepWarm = (api) => {
+    // Repeated init() would otherwise leave earlier timers and listeners warming
+    // a replaced API forever.
+    disposeKeepWarm === null || disposeKeepWarm === void 0 ? void 0 : disposeKeepWarm();
+    const ping = () => {
+        if (!document.hidden) {
+            void api.warm();
+        }
+    };
+    ping();
+    const timer = setInterval(ping, KEEP_WARM_INTERVAL_MS);
+    document.addEventListener('visibilitychange', ping);
+    window.addEventListener('online', ping);
+    disposeKeepWarm = () => {
+        clearInterval(timer);
+        document.removeEventListener('visibilitychange', ping);
+        window.removeEventListener('online', ping);
+        // Stopping the cadence must also kill an in-flight retry chain: a
+        // black-holed /warm would otherwise keep re-establishing connections for
+        // the wrapper's full budget against a replaced API.
+        api.cancelWarm();
+        disposeKeepWarm = undefined;
+    };
+};
 const init = (params) => {
     var _a, _b, _c, _d, _e, _f, _g, _h;
     if (typeof window == 'undefined' || typeof document == 'undefined') {
@@ -1087,6 +1156,9 @@ const init = (params) => {
     try {
         (_a = window[registryKey]) !== null && _a !== void 0 ? _a : (window[registryKey] = {});
         logger.info('EvoSearch SDK: Initializing');
+        // A re-init can land on a different channel, or bail out entirely, so drop
+        // any previous cadence before deciding which one this run owns.
+        disposeKeepWarm === null || disposeKeepWarm === void 0 ? void 0 : disposeKeepWarm();
         if (new URLSearchParams(window.location.search).get('evs') === 'preview') {
             try {
                 sessionStorage.setItem(previewKeyName, '1');
@@ -1126,8 +1198,12 @@ const init = (params) => {
             options: { destination: params.baseUrl },
         });
         if (!uiImplementation) {
-            if ((_f = (_e = params.manifest) === null || _e === void 0 ? void 0 : _e.variables) === null || _f === void 0 ? void 0 : _f.disableDefaultUI) {
+            if (((_f = (_e = params.manifest) === null || _e === void 0 ? void 0 : _e.variables) === null || _f === void 0 ? void 0 : _f.disableDefaultUI) === true) {
                 logger.info('EvoSearch SDK: Running in headless mode, no default UI will render');
+                // Deliberately keyed on `disableDefaultUI` rather than bare `headless`:
+                // in the else branch the UI is missing by mistake, so search isn't
+                // usable and there's no connection worth holding open.
+                startHeadlessKeepWarm(evoSearchAPI);
             }
             else {
                 error('UI implementation is missing');