@brainfish-ai/web-tracker 0.0.24 → 0.0.25

package/dist/tracker.es.js

@@ -3456,6 +3456,28 @@ class TTLSet {
     return Array.from(this.items.keys());
   }
 }
+let latestIdentifyPayload = null;
+if (typeof window !== "undefined") {
+  window.addEventListener("message", (event) => {
+    const trustedOrigin = "https://agent.brainfi.sh";
+    if (event.origin !== trustedOrigin) {
+      return;
+    }
+    if (event.data?.type === "REQUEST_USER_IDENTITY") {
+      if (latestIdentifyPayload && event.source) {
+        const iframe = document.querySelector("#bf-iframe-container .trigger-iframe");
+        if (!iframe || event.source !== iframe.contentWindow) {
+          console.warn("BrainfishWidgetWarn: Rejected REQUEST_USER_IDENTITY from untrusted iframe source:", event.origin);
+          return;
+        }
+        event.source.postMessage({
+          type: "USER_IDENTIFY",
+          payload: latestIdentifyPayload
+        }, event.origin);
+      }
+    }
+  });
+}
 var NudgeCTABlockActionType;
 (function(NudgeCTABlockActionType2) {
   NudgeCTABlockActionType2["OpenUrl"] = "openUrl";
@@ -3612,6 +3634,7 @@ const _TrackerSdk = class _TrackerSdk {
     if (payload.phone && !/^\+[1-9]\d{1,14}$/.test(payload.phone)) {
       console.warn("BrainfishWidgetWarn: phone should be in E.164 format (e.g., +14155552671). Providing the correct format ensures accurate user identification.");
     }
+    latestIdentifyPayload = payload;
     const iframe = document.querySelector("#bf-iframe-container .trigger-iframe");
     if (iframe) {
       const sendMessage = () => {
@@ -38480,7 +38503,7 @@ function toCamelCase(str) {
     ($1) => $1.toUpperCase().replace("-", "").replace("_", "")
   );
 }
-const VERSION = "0.0.24";
+const VERSION = "0.0.25";
 class Tracker extends TrackerSdk {
   constructor(options) {
     super({