@cagent/chat-embedding-core 0.0.17 → 0.0.22

package/dist/components/Bot.d.ts

@@ -76,6 +76,8 @@ export type BotProps = {
     apiHost?: string;
     onRequest?: (request: RequestInit) => Promise<void>;
     chatflowConfig?: Record<string, unknown>;
+    /** Path fragment of the host site's logout URL (e.g. '/dang-xuat'); navigating there ends the C-Agent SSO session. */
+    ssoLogoutUrlPattern?: string;
     welcomeMessage?: string;
     secondMessage?: string;
     errorMessage?: string;

package/dist/features/sso/components/SsoLoginOverlay.d.ts

@@ -0,0 +1,7 @@
+import type { SsoStatus } from '../ssoSession';
+export type SsoLoginOverlayProps = {
+    status: SsoStatus;
+    buttonColor?: string;
+    onLogin: () => void;
+};
+export declare const SsoLoginOverlay: (props: SsoLoginOverlayProps) => import("solid-js").JSX.Element;

package/dist/features/sso/index.d.ts

@@ -0,0 +1,2 @@
+export * from './ssoSession';
+export * from './components/SsoLoginOverlay';

package/dist/features/sso/ssoSession.d.ts

@@ -0,0 +1,31 @@
+/**
+ * SSO for chatflows that need a signed-in C-Gov user. The C-Agent server does the OIDC exchange; this module only
+ * starts a login, waits for the result and keeps the short-lived C-Agent session token. SSO tokens never reach the page.
+ */
+export type SsoStatus = 'not_required' | 'checking' | 'needs_login' | 'signing_in' | 'failed' | 'ready';
+export declare const clearSsoSession: () => void;
+export declare const getSsoToken: () => string | null;
+/**
+ * Ends the C-Agent session only (never the SSO session of the host site). The local copy goes first and synchronously,
+ * because the page may be unloading; the server call is best effort and `keepalive` lets it outlive the page.
+ */
+export declare const signOutSso: (apiHost: string) => void;
+/**
+ * The host site (e.g. IOC) signs the user out with a full-page navigation, which destroys the widget before it can react,
+ * and the session in sessionStorage would be inherited by the next user of this tab. The Navigation API reports the
+ * navigation while the page is still alive, so the C-Agent session is ended first. Returns a function that stops watching.
+ * Browsers without the Navigation API are not covered; there the server-side back-channel logout is the only signal.
+ */
+export declare const watchHostLogout: (apiHost: string, logoutUrlPattern: string) => (() => void);
+/**
+ * Login without any user action: a hidden frame asks the SSO server with prompt=none. It only succeeds when the browser
+ * sends the SSO cookie inside the frame; otherwise the caller falls back to the popup.
+ */
+export declare const trySilentSignIn: (apiHost: string) => Promise<boolean>;
+/** Browsers only allow a popup inside the click that asked for it, so this must run before any await. */
+export declare const openLoginPopup: () => Window | null;
+/**
+ * The popup is not watched for closing: under Cross-Origin-Opener-Policy `popup.closed` turns true as soon as the SSO
+ * page loads, so the only reliable signal is the server-side result.
+ */
+export declare const signInWithPopup: (apiHost: string, popup: Window | null) => Promise<boolean>;

package/dist/web.d.ts

@@ -4,6 +4,7 @@ declare const chatbot: {
         apiHost?: string | undefined;
         onRequest?: ((request: RequestInit) => Promise<void>) | undefined;
         chatflowConfig?: Record<string, unknown> | undefined;
+        ssoLogoutUrlPattern?: string | undefined;
         observersConfig?: import("./components/Bot").observersConfigType | undefined;
         theme?: import("./features/bubble/types").BubbleTheme | undefined;
         chatwootUrl?: string | undefined;
@@ -20,6 +21,7 @@ declare const chatbot: {
         apiHost?: string | undefined;
         onRequest?: ((request: RequestInit) => Promise<void>) | undefined;
         chatflowConfig?: Record<string, unknown> | undefined;
+        ssoLogoutUrlPattern?: string | undefined;
         observersConfig?: import("./components/Bot").observersConfigType | undefined;
         theme?: import("./features/bubble/types").BubbleTheme | undefined;
         chatwootUrl?: string | undefined;