@buni.ai/chatbot-angular 1.0.21 → 1.0.23

package/dist/buni-chat.service.d.ts

@@ -1,9 +1,9 @@
 import { Observable } from 'rxjs';
 import { BuniChatOptions, BuniChatState, CustomerData, SessionVariables } from '@buni.ai/chatbot-core';
 export declare class BuniChatService {
-    private widget;
-    private stateSubject;
-    private readySubject;
+    private readonly widget;
+    private readonly stateSubject;
+    private readonly readySubject;
     constructor();
     initialize(options: BuniChatOptions): Promise<void>;
     private setupEventListeners;

package/dist/buni-chat.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buni-chat.service.d.ts","sourceRoot":"","sources":["../src/buni-chat.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAmB,UAAU,EAAE,MAAM,MAAM,CAAC;AAEnD,OAAO,EAEL,eAAe,EACf,aAAa,EACb,YAAY,EACZ,gBAAgB,EACjB,MAAM,uBAAuB,CAAC;AAE/B,qBAGa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,YAAY,CAKjB;IACH,OAAO,CAAC,YAAY,CAAuC;;IAMrD,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAYzD,OAAO,CAAC,mBAAmB;IAa3B,IAAI,MAAM,IAAI,UAAU,CAAC,aAAa,CAAC,CAEtC;IAED,IAAI,QAAQ,IAAI,UAAU,CAAC,OAAO,CAAC,CAElC;IAED,IAAI,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,CAIjC;IAED,IAAI,YAAY,IAAI,UAAU,CAAC,MAAM,CAAC,CAIrC;IAGD,IAAI,IAAI,IAAI;IAIZ,IAAI,IAAI,IAAI;IAIZ,MAAM,IAAI,IAAI;IAId,QAAQ,IAAI,IAAI;IAIhB,QAAQ,IAAI,IAAI;IAKhB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAIzC,eAAe,IAAI,YAAY,GAAG,IAAI;IAItC,mBAAmB,CAAC,SAAS,EAAE,gBAAgB,GAAG,IAAI;IAItD,mBAAmB,IAAI,gBAAgB,GAAG,IAAI;IAK9C,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIlC,SAAS,IAAI,IAAI;IAKjB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,IAAI;IAIlD,IAAI,IAAI,IAAI;IAIZ,KAAK,IAAI,IAAI;IAKb,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI;IAI3C,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI;IAK7C,OAAO,IAAI,IAAI;CAKhB"}
+{"version":3,"file":"buni-chat.service.d.ts","sourceRoot":"","sources":["../src/buni-chat.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAmB,UAAU,EAAE,MAAM,MAAM,CAAC;AAEnD,OAAO,EAEL,eAAe,EACf,aAAa,EACb,YAAY,EACZ,gBAAgB,EACjB,MAAM,uBAAuB,CAAC;AAE/B,qBAGa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAK1B;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAuC;;IAM9D,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAWzD,OAAO,CAAC,mBAAmB;IAgB3B,IAAI,MAAM,IAAI,UAAU,CAAC,aAAa,CAAC,CAEtC;IAED,IAAI,QAAQ,IAAI,UAAU,CAAC,OAAO,CAAC,CAElC;IAED,IAAI,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,CAIjC;IAED,IAAI,YAAY,IAAI,UAAU,CAAC,MAAM,CAAC,CAIrC;IAGD,IAAI,IAAI,IAAI;IAIZ,IAAI,IAAI,IAAI;IAIZ,MAAM,IAAI,IAAI;IAId,QAAQ,IAAI,IAAI;IAIhB,QAAQ,IAAI,IAAI;IAKhB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAIzC,eAAe,IAAI,YAAY,GAAG,IAAI;IAItC,mBAAmB,CAAC,SAAS,EAAE,gBAAgB,GAAG,IAAI;IAItD,mBAAmB,IAAI,gBAAgB,GAAG,IAAI;IAK9C,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIlC,SAAS,IAAI,IAAI;IAKjB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,IAAI;IAIlD,IAAI,IAAI,IAAI;IAIZ,KAAK,IAAI,IAAI;IAKb,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI;IAI3C,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI;IAK7C,OAAO,IAAI,IAAI;CAKhB"}

package/dist/index.esm.js

@@ -38,6 +38,8 @@ typeof SuppressedError === "function" ? SuppressedError : function (error, suppr
 
 // Default BuniAI platform URL
 const BUNI_PLATFORM_URL = "https://www.buni.ai";
+const PARENT_HANDSHAKE_TYPE = "buni:parent_handshake";
+const IFRAME_HANDSHAKE_ACK_TYPE = "buni:iframe_handshake_ack";
 // Core widget loader class
 class BuniChatWidget {
     constructor() {
@@ -53,6 +55,9 @@ class BuniChatWidget {
         this.chatIframe = null;
         this.customerData = null;
         this.sessionVariables = null;
+        this.chatTargetOrigin = null;
+        this.handshakeComplete = false;
+        this.outboundMessageQueue = [];
     }
     async initialize(options) {
         this.options = options;
@@ -239,7 +244,18 @@ class BuniChatWidget {
                 chatIframe.onload = () => {
                     // Set visibility hidden after iframe loads to allow content initialization
                     chatIframe.style.visibility = "hidden";
+                    // Compute the iframe origin once we know the final src.
+                    try {
+                        this.chatTargetOrigin = new URL(chatIframe.src).origin;
+                    }
+                    catch (_a) {
+                        this.chatTargetOrigin = this.getBaseUrl();
+                    }
+                    // Reset handshake state for this iframe instance.
+                    this.handshakeComplete = false;
+                    this.outboundMessageQueue = [];
                     this.setupPostMessageAPI(chatIframe);
+                    this.sendParentHandshake();
                     // Now that both iframes are loaded, resolve the promise
                     this.widgetElement = container;
                     this.triggerIframe = triggerIframe;
@@ -251,13 +267,17 @@ class BuniChatWidget {
             };
             // Listen for trigger and connection events
             window.addEventListener("message", (event) => {
-                var _a;
-                if (!event.data.type)
+                var _a, _b;
+                const payload = event.data;
+                if (!payload || typeof payload !== "object")
+                    return;
+                if (typeof payload.type !== "string")
                     return;
-                switch (event.data.type) {
+                switch (payload.type) {
                     case "connection_ready":
                         // Check if message is from chat iframe
-                        if (event.source === ((_a = this.chatIframe) === null || _a === void 0 ? void 0 : _a.contentWindow)) {
+                        if (event.source === ((_a = this.chatIframe) === null || _a === void 0 ? void 0 : _a.contentWindow) &&
+                            event.origin === this.getBaseUrl()) {
                             // Connection is ready, show the trigger button
                             if (container && !config.hideDefaultTrigger) {
                                 container.style.display = "block";
@@ -271,7 +291,10 @@ class BuniChatWidget {
                         }
                         break;
                     case "trigger_clicked":
-                        this.openChat();
+                        if (event.source === ((_b = this.triggerIframe) === null || _b === void 0 ? void 0 : _b.contentWindow) &&
+                            event.origin === window.location.origin) {
+                            this.openChat();
+                        }
                         break;
                 }
             });
@@ -386,11 +409,15 @@ class BuniChatWidget {
   </div>
   <script>
     function handleClick() {
-      window.parent.postMessage({ type: 'trigger_clicked' }, '*');
+      // Trigger iframe is same-origin with parent (about:blank + document.write),
+      // so we can safely target the parent's origin.
+      window.parent.postMessage({ type: 'trigger_clicked' }, window.location.origin);
     }
     
     // Listen for unread count updates
     window.addEventListener('message', function(event) {
+      if (event.source !== window.parent) return;
+      if (event.origin !== window.location.origin) return;
       if (event.data.type === 'updateUnreadCount') {
         const badge = document.getElementById('badge');
         const count = event.data.count || 0;
@@ -538,12 +565,24 @@ class BuniChatWidget {
         // Listen for messages from the iframe
         window.addEventListener("message", (event) => {
             var _a;
+            if (event.source !== iframe.contentWindow) {
+                return;
+            }
             // Verify origin for security
             if (event.origin !== this.getBaseUrl()) {
                 return;
             }
-            const { type, data } = event.data;
+            const payload = event.data;
+            if (!payload || typeof payload !== "object")
+                return;
+            const { type, data } = payload;
+            if (typeof type !== "string")
+                return;
             switch (type) {
+                case IFRAME_HANDSHAKE_ACK_TYPE:
+                    this.handshakeComplete = true;
+                    this.flushOutboundMessageQueue();
+                    break;
                 case "ready":
                     this.state.isLoaded = true;
                     this.emit("ready", data);
@@ -575,7 +614,7 @@ class BuniChatWidget {
                     // Update unread count in trigger
                     this.state.unreadCount++;
                     if ((_a = this.triggerIframe) === null || _a === void 0 ? void 0 : _a.contentWindow) {
-                        this.triggerIframe.contentWindow.postMessage({ type: "updateUnreadCount", count: this.state.unreadCount }, "*");
+                        this.triggerIframe.contentWindow.postMessage({ type: "updateUnreadCount", count: this.state.unreadCount }, window.location.origin);
                     }
                     break;
                 case "customer_data_updated":
@@ -595,17 +634,69 @@ class BuniChatWidget {
             }
         });
     }
+    sendParentHandshake() {
+        var _a, _b;
+        const iframeWindow = (_a = this.chatIframe) === null || _a === void 0 ? void 0 : _a.contentWindow;
+        if (!iframeWindow)
+            return;
+        const targetOrigin = (_b = this.chatTargetOrigin) !== null && _b !== void 0 ? _b : this.getBaseUrl();
+        try {
+            iframeWindow.postMessage({
+                type: PARENT_HANDSHAKE_TYPE,
+                data: { origin: window.location.origin },
+            }, targetOrigin);
+        }
+        catch (_c) {
+            // Best-effort; iframe may fall back to document.referrer for origin discovery.
+        }
+    }
+    flushOutboundMessageQueue() {
+        var _a, _b;
+        const iframeWindow = (_a = this.chatIframe) === null || _a === void 0 ? void 0 : _a.contentWindow;
+        if (!iframeWindow)
+            return;
+        const targetOrigin = (_b = this.chatTargetOrigin) !== null && _b !== void 0 ? _b : this.getBaseUrl();
+        const queued = this.outboundMessageQueue;
+        if (queued.length === 0)
+            return;
+        this.outboundMessageQueue = [];
+        for (const msg of queued) {
+            iframeWindow.postMessage({ type: msg.type, data: msg.data }, targetOrigin);
+        }
+    }
     postMessageToWidget(type, data) {
-        var _a;
-        if ((_a = this.chatIframe) === null || _a === void 0 ? void 0 : _a.contentWindow) {
-            this.chatIframe.contentWindow.postMessage({ type, data }, this.getBaseUrl());
+        var _a, _b;
+        const iframeWindow = (_a = this.chatIframe) === null || _a === void 0 ? void 0 : _a.contentWindow;
+        if (!iframeWindow)
+            return;
+        const targetOrigin = (_b = this.chatTargetOrigin) !== null && _b !== void 0 ? _b : this.getBaseUrl();
+        // Ensure handshake is sent before any other commands; queue until ack.
+        if (!this.handshakeComplete && type !== PARENT_HANDSHAKE_TYPE) {
+            const queue = this.outboundMessageQueue;
+            if (queue.length < 50) {
+                queue.push({ type, data });
+            }
+            else {
+                this.outboundMessageQueue = [...queue.slice(-49), { type, data }];
+            }
+            this.sendParentHandshake();
+            return;
         }
+        iframeWindow.postMessage({ type, data }, targetOrigin);
     }
     getBaseUrl() {
+        var _a, _b;
         // Return the base URL for the BuniAI platform
         // Priority: 1. config.baseUrl, 2. global BUNI_API_URL, 3. default platform URL
+        const configUrl = (_b = (_a = this.options) === null || _a === void 0 ? void 0 : _a.config) === null || _b === void 0 ? void 0 : _b.baseUrl;
         const globalUrl = globalThis.BUNI_API_URL;
-        return globalUrl || BUNI_PLATFORM_URL;
+        const rawUrl = configUrl || globalUrl || BUNI_PLATFORM_URL;
+        try {
+            return new URL(rawUrl).origin;
+        }
+        catch (_c) {
+            return rawUrl;
+        }
     }
     destroy() {
         this.postMessageToWidget("destroy");
@@ -753,7 +844,6 @@ let BuniChatService = class BuniChatService {
     async initialize(options) {
         try {
             await this.widget.initialize({ ...options, framework: "angular" });
-            this.readySubject.next(true);
         }
         catch (error) {
             console.error('Failed to initialize BuniChat widget:', error);
@@ -765,6 +855,9 @@ let BuniChatService = class BuniChatService {
         const updateState = () => {
             this.stateSubject.next(this.widget.getState());
         };
+        this.widget.on('connection_ready', () => {
+            this.readySubject.next(true);
+        });
         this.widget.on('ready', updateState);
         this.widget.on('visibility_changed', updateState);
         this.widget.on('minimized', updateState);