@cimplify/sdk 0.103.0 → 0.104.0

package/dist/{chunk-GERXZQSX.mjs → chunk-OKADBZAI.mjs}

@@ -1,5 +1,6 @@
-import { safe, generateIdempotencyKey, err, ok, CatalogueQueries, CartOperations, CheckoutService, OrderQueries, LinkService, AuthService, BusinessService, InventoryService, SchedulingService, LiteService, FxService, createElements } from './chunk-J6PNHDHL.mjs';
-import { CimplifyError, ErrorCode, IdempotencyMismatchError, enrichError } from './chunk-VNPEYLB2.mjs';
+import { messagePreview } from './chunk-U4MW6PYU.mjs';
+import { safe, generateIdempotencyKey, err, ok, CatalogueQueries, CartOperations, CheckoutService, OrderQueries, LinkService, AuthService, BusinessService, InventoryService, SchedulingService, LiteService, FxService, createElements } from './chunk-OCCNG6MO.mjs';
+import { CimplifyError, ErrorCode, IdempotencyMismatchError, enrichError } from './chunk-H3RATH4B.mjs';
 
 // src/store-credit.ts
 var StoreCreditQueries = class {
@@ -206,6 +207,7 @@ var ActivityService = class {
       utm_campaign: utm("campaign"),
       utm_term: utm("term"),
       utm_content: utm("content"),
+      social_commerce_ref: params.get("social_commerce_ref") || void 0,
       screen_width: window.screen?.width,
       screen_height: window.screen?.height,
       viewport_width: window.innerWidth,
@@ -414,14 +416,14 @@ var UploadService = class {
   constructor(client) {
     this.client = client;
   }
-  async init(filename, contentType, sizeBytes, opts) {
+  async init(filename, contentType2, sizeBytes, opts) {
     const idempotencyKey = opts?.idempotencyKey ?? generateIdempotencyKey();
     return safe(
       this.client.post(
         "/api/v1/uploads/init",
         {
           filename,
-          content_type: contentType,
+          content_type: contentType2,
           size_bytes: sizeBytes
         },
         { idempotencyKey }
@@ -522,6 +524,99 @@ var DeliveryService = class {
   }
 };
 
+// src/chat-wire.ts
+function senderType(message) {
+  if (message.sender_side === "account") return "customer";
+  if (message.sender_side === "system") return "system";
+  return message.authorship === "ai" ? "bot" : "agent";
+}
+function contentType(message) {
+  if (message.content_type === "rich") {
+    return message.structured_content?.["kind"] === "reaction" ? "reaction" : "interactive";
+  }
+  if (message.content_type === "media") {
+    const mime = message.media[0]?.mime_type ?? "";
+    if (mime.startsWith("image/")) return "image";
+    if (mime.startsWith("video/")) return "video";
+    if (mime.startsWith("audio/")) return "audio";
+    return "document";
+  }
+  return "text";
+}
+function unresolvedReply(id) {
+  return { id, sender_type: "system", preview: "Earlier message" };
+}
+function chatMessagesFromWire(messages) {
+  const converted = messages.map((message) => ({
+    id: message.id,
+    sequence: message.sequence,
+    sender_type: senderType(message),
+    content: message.content,
+    content_type: contentType(message),
+    attachments: Array.isArray(message.media) ? message.media : [],
+    metadata: message.structured_content ?? {},
+    reply_to: message.reply_to_message_id ? unresolvedReply(message.reply_to_message_id) : void 0,
+    edited_at: message.edited_at,
+    deleted_at: message.deleted_at,
+    created_at: message.created_at
+  }));
+  const byId = new Map(converted.map((message) => [message.id, message]));
+  return converted.map((message) => {
+    const targetId = message.reply_to?.id;
+    const target = targetId ? byId.get(targetId) : void 0;
+    if (!targetId || !target) return message;
+    return {
+      ...message,
+      reply_to: {
+        id: targetId,
+        sender_type: target.sender_type,
+        preview: messagePreview(target.content)
+      }
+    };
+  });
+}
+function chatMessageFromWire(message) {
+  return chatMessagesFromWire([message])[0];
+}
+function chatRealtimeUpdateFromWire(envelope) {
+  if (envelope.type === "message_created" && envelope.data) {
+    return {
+      kind: "message",
+      message: chatMessageFromWire(envelope.data)
+    };
+  }
+  if (envelope.type === "message_updated" && envelope.data) {
+    return {
+      kind: "message_updated",
+      message: chatMessageFromWire(envelope.data)
+    };
+  }
+  if (envelope.type === "read" && envelope.data) {
+    const read = envelope.data;
+    if (read.reader_side === "business" && typeof read.occurred_at === "string") {
+      return { kind: "business_read", occurredAt: read.occurred_at };
+    }
+    return { kind: "none" };
+  }
+  if (envelope.type === "history_imported") {
+    return { kind: "reload" };
+  }
+  if (envelope.type === "ai_mode_changed" && envelope.data) {
+    const mode = envelope.data.mode;
+    if (mode === "auto" || mode === "assist" || mode === "off") {
+      return { kind: "ai_mode", mode };
+    }
+    return { kind: "none" };
+  }
+  if (envelope.type === "handoff_requested") {
+    return { kind: "handoff" };
+  }
+  if (envelope.type === "resync") {
+    return { kind: "resync", latestSequence: envelope.latest_sequence };
+  }
+  return { kind: "none" };
+}
+
 // src/internal/events.ts
 var MUTATION_ERROR = "mutation:error";
 var AUTH_TOKEN_CHANGED = "auth:token-changed";
@@ -584,11 +679,13 @@ var SupportService = class {
    * Claim the anonymous session for the verified Link identity: the server
    * verifies the access token, rotates the session token (adopted here, so
    * every subsequent request rides the bound session), folds the guest cart
-   * in, and adopts or merges the widget conversation.
+   * in, and opens or reuses the account's canonical direct Chat thread.
    *
    * Idempotent and single-flight: concurrent calls share one request, and a
    * token already claimed by this instance short-circuits without a network
-   * round trip. Emits `session:claimed` on the client's event channel.
+   * round trip. A session already bound to another Link account is rejected
+   * rather than transferring that account's cart. Emits `session:claimed` on
+   * the client's event channel.
    */
   async claimConversation() {
     const accessToken = this.client.getAccessToken();
@@ -625,7 +722,7 @@ var SupportService = class {
         this.client.publishSessionClaimed(this.claimedName);
         this.client.events.emit(SESSION_CLAIMED, {
           sessionToken: result.value.session_token,
-          threadId: result.value.thread_id ?? null,
+          threadId: result.value.thread.id,
           customerName: result.value.customer_name
         });
       }
@@ -638,6 +735,25 @@ var SupportService = class {
       this.claimInFlightToken = null;
     }
   }
+  /**
+   * Retry verified external-history discovery for the current storefront.
+   * Launch scope is intentionally WhatsApp-only because it is the registered
+   * bidirectional transport. Results are per envelope and omit provider ids,
+   * contact values, account ids, and message bodies.
+   */
+  async claimExternalChats() {
+    if (!this.client.getAccessToken()) {
+      return err(new CimplifyError("not_authenticated", "No access token to claim with"));
+    }
+    return safe(
+      (async () => {
+        const businessId = await this.client.resolveBusinessId();
+        return this.client.post("/v1/me/chats/external-claims", {
+          business_id: businessId
+        });
+      })()
+    );
+  }
   /**
    * Peek at the conversation without creating one: resolves the existing
    * thread (or null) so a page load can hydrate history without littering
@@ -651,17 +767,22 @@ var SupportService = class {
     if (!result.value.conversation) return ok(null);
     return ok({
       conversation: result.value.conversation,
-      messages: result.value.messages
+      messages: chatMessagesFromWire(result.value.messages)
     });
   }
   /** Open (or resume) the customer's widget conversation. */
   async openConversation(opts) {
     const idempotencyKey = opts?.idempotencyKey ?? generateIdempotencyKey();
-    return safe(
+    const result = await safe(
       this.client.post("/api/v1/support/conversation", void 0, {
         idempotencyKey
       })
     );
+    if (!result.ok) return result;
+    return ok({
+      conversation: result.value.conversation,
+      messages: chatMessagesFromWire(result.value.messages)
+    });
   }
   /**
    * Send a message in the active conversation.
@@ -673,7 +794,7 @@ var SupportService = class {
    */
   async sendMessage(content, opts) {
     const idempotencyKey = opts?.idempotencyKey ?? generateIdempotencyKey();
-    return safe(
+    const result = await safe(
       this.client.post(
         "/api/v1/support/conversation/messages",
         {
@@ -685,6 +806,7 @@ var SupportService = class {
         { idempotencyKey }
       )
     );
+    return result.ok ? ok(chatMessageFromWire(result.value.message)) : result;
   }
   /**
    * Poll for messages. `after` pages forward (live updates); `before` pages
@@ -692,21 +814,27 @@ var SupportService = class {
    */
   async getMessages(options = {}) {
     const params = new URLSearchParams();
-    if (options.after) params.set("after", options.after);
-    if (options.before) params.set("before", options.before);
+    if (options.afterSequence !== void 0)
+      params.set("after_sequence", String(options.afterSequence));
+    if (options.beforeSequence !== void 0)
+      params.set("before_sequence", String(options.beforeSequence));
     if (options.limit) params.set("limit", String(options.limit));
     const query = params.toString();
     const path = query ? `/api/v1/support/conversation/messages?${query}` : "/api/v1/support/conversation/messages";
-    return safe(this.client.get(path));
+    const result = await safe(this.client.get(path));
+    return result.ok ? ok(chatMessagesFromWire(result.value)) : result;
   }
   /** React to a message in the active conversation by its `ChatMessage.id`. */
   async reactToMessage(messageId, emoji) {
-    return safe(
+    const clientId = generateIdempotencyKey();
+    const result = await safe(
       this.client.post(
         `/api/v1/support/conversation/messages/${messageId}/reactions`,
-        { emoji }
+        { emoji, client_id: clientId },
+        { idempotencyKey: clientId }
       )
     );
+    return result.ok ? ok(chatMessageFromWire(result.value.message)) : result;
   }
   /** Ask for a person: flags the thread for the merchant's inbox. */
   async requestHuman(opts) {
@@ -843,10 +971,10 @@ var PaystackAuthorizationAdapter = class {
 };
 
 // src/payment-authorization/providers/stripe.ts
-async function loadStripeFromPeer(publicKey) {
+async function loadStripeFromPeer(publicKey, options) {
   try {
     const imported = await import('@stripe/stripe-js');
-    return imported.loadStripe ? imported.loadStripe(publicKey) : null;
+    return imported.loadStripe ? imported.loadStripe(publicKey, options) : null;
   } catch {
     return null;
   }
@@ -954,7 +1082,10 @@ var StripeAuthorizationAdapter = class {
     }
     let stripe;
     try {
-      stripe = await this.loadStripe(context.action.public_key);
+      stripe = await this.loadStripe(
+        context.action.public_key,
+        context.action.provider_account_id ? { stripeAccount: context.action.provider_account_id } : void 0
+      );
     } catch (error) {
       return {
         status: "failed",
@@ -1377,7 +1508,8 @@ var CimplifyClient = class {
    * refresh restore) binds the anonymous session so the conversation, cart
    * and orders survive a cleared browser. Best-effort by design — a failed
    * claim leaves the session anonymous, exactly as it was. Called by the
-   * auth flows, never by the raw token setter.
+   * merchant auth flows, never by the raw token setter. Global Link clients
+   * have no storefront tenant and therefore activate without this step.
    */
   autoClaimChatIdentity() {
     if (typeof window === "undefined" || !this.sessionToken || !this.accessToken) return;
@@ -1419,9 +1551,28 @@ var CimplifyClient = class {
   getSessionEpoch() {
     return this.sessionEpoch;
   }
+  /** Monotonic fence for async work scoped to the current storefront tenant. */
+  getPublicKeyEpoch() {
+    return this.publicKeyEpoch;
+  }
   getSessionToken() {
     return this.sessionToken;
   }
+  /** Whether the current transport session is known to have been claimed for
+   * a Link identity, even when its in-memory bearer is absent after reload or
+   * a failed refresh. The sync marker is written only after canonical claim
+   * rotation and is replaced with `cleared` when a fresh session is minted. */
+  hasClaimedSessionAuthority() {
+    if (!this.sessionToken) return false;
+    try {
+      const raw = this.safeStorage()?.getItem(SESSION_SYNC_STORAGE_KEY);
+      if (!raw) return false;
+      const payload = JSON.parse(raw);
+      return payload.type === "claimed" && payload.token === this.sessionToken;
+    } catch {
+      return false;
+    }
+  }
   publishSessionClaimed(customerName) {
     if (!this.sessionToken) return;
     this.broadcastSessionSync({
@@ -2048,4 +2199,4 @@ function createCimplifyClient(config = {}) {
   return new CimplifyClient(config);
 }
 
-export { AUTH_TOKEN_CHANGED, ActivityService, CimplifyClient, DeliveryService, MUTATION_ERROR, PaymentAuthorizationAdapterRegistry, PaystackAuthorizationAdapter, PlacesService, SESSION_CLAIMED, SESSION_CLEARED, StoreCreditQueries, StripeAuthorizationAdapter, SubscriptionService, SupportService, UploadService, createCimplifyClient, createDefaultPaymentAuthorizationAdapterRegistry };
+export { AUTH_TOKEN_CHANGED, ActivityService, CimplifyClient, DeliveryService, MUTATION_ERROR, PaymentAuthorizationAdapterRegistry, PaystackAuthorizationAdapter, PlacesService, SESSION_CLAIMED, SESSION_CLEARED, StoreCreditQueries, StripeAuthorizationAdapter, SubscriptionService, SupportService, UploadService, chatRealtimeUpdateFromWire, createCimplifyClient, createDefaultPaymentAuthorizationAdapterRegistry };

package/dist/{chunk-VIL6IQCG.js → chunk-YVAEY3VC.js}

@@ -2,7 +2,7 @@
 
 var chunkXREIZ56K_js = require('./chunk-XREIZ56K.js');
 var chunkCNN7Z2IP_js = require('./chunk-CNN7Z2IP.js');
-var chunkJG5CQNCB_js = require('./chunk-JG5CQNCB.js');
+var chunk4BKOKHE3_js = require('./chunk-4BKOKHE3.js');
 var chunkOWW5GUSB_js = require('./chunk-OWW5GUSB.js');
 
 // ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/compose.js
@@ -2078,8 +2078,8 @@ var MockError = class extends Error {
     };
   }
 };
-var notFound = (msg) => new MockError(chunkJG5CQNCB_js.ErrorCode.NOT_FOUND, msg, 404);
-var validation = (msg, ctx) => new MockError(chunkJG5CQNCB_js.ErrorCode.VALIDATION_ERROR, msg, 400, ctx);
+var notFound = (msg) => new MockError(chunk4BKOKHE3_js.ErrorCode.NOT_FOUND, msg, 404);
+var validation = (msg, ctx) => new MockError(chunk4BKOKHE3_js.ErrorCode.VALIDATION_ERROR, msg, 400, ctx);
 
 // src/mock/routes/_helpers.ts
 function authMiddleware(deps) {
@@ -2437,6 +2437,36 @@ function buildV1(deps) {
     "/catalogue/quotes/:quote_id/refresh",
     (c) => tryRoute(c, () => deps.catalogue.refreshQuote(c.req.param("quote_id")))
   );
+  app.get("/reviews/summary", (c) => {
+    const productId = c.req.query("product_id");
+    if (productId !== void 0 && (productId.length === 0 || productId.trim() !== productId)) {
+      return fail(c, validation("product_id must be a non-empty canonical identifier"));
+    }
+    const response = {
+      data: {
+        ratings: {
+          product_id: productId ?? null,
+          review_count: 0,
+          rating_sum: 0,
+          average_rating: null,
+          distribution: { one: 0, two: 0, three: 0, four: 0, five: 0 }
+        },
+        trust_chips: {
+          on_time_delivery_percent: null,
+          delivery_sample_size: 0,
+          average_first_response_seconds: null,
+          support_sample_size: 0
+        }
+      }
+    };
+    return c.json(response);
+  });
+  app.get("/reviews", (c) => {
+    const response = {
+      data: { items: [], next_cursor: null }
+    };
+    return c.json(response);
+  });
   app.get("/cart", (c) => tryRoute(c, () => deps.cart.toUICart(deps.cart.get(c.var.session))));
   app.delete("/cart", (c) => tryRoute(c, () => deps.cart.clear(c.var.session)));
   app.get("/cart/items", (c) => tryRoute(c, () => deps.cart.getItems(c.var.session)));
@@ -3332,9 +3362,10 @@ function buildLink(deps) {
   app.post("/auth/request-otp", async (c) => {
     const body = await c.req.json().catch(() => ({}));
     return tryRoute(c, () => {
-      deps.auth.requestOtp(body.contact ?? "");
+      const challenge = deps.auth.requestOtp(body.contact ?? "");
       return {
         success: true,
+        challenge_id: challenge.otp_id,
         message: `OTP sent to ${body.contact ?? "contact"}`,
         expires_in: 300,
         is_new_account: false
@@ -3344,7 +3375,11 @@ function buildLink(deps) {
   app.post("/auth/verify-otp", async (c) => {
     const body = await c.req.json().catch(() => ({}));
     return tryRoute(c, () => {
-      const session = deps.auth.verifyOtp(body.contact ?? "", body.otp_code ?? "");
+      const session = deps.auth.verifyOtp(
+        body.contact ?? "",
+        body.otp_code ?? "",
+        body.challenge_id
+      );
       c.header("x-session-token", session.token);
       const customer = deps.link.ensureCustomer(session.customer_id ?? session.id, {
         email: body.contact?.includes("@") ? body.contact : void 0,
@@ -3438,10 +3473,7 @@ function buildLink(deps) {
       };
     });
   });
-  app.get(
-    "/preferences",
-    (c) => tryRoute(c, () => deps.link.getPreferences(customerId(c)))
-  );
+  app.get("/preferences", (c) => tryRoute(c, () => deps.link.getPreferences(customerId(c))));
   app.post("/preferences", async (c) => {
     const body = await c.req.json().catch(() => ({}));
     return tryRoute(c, () => {
@@ -3918,9 +3950,16 @@ function createAuthService(opts) {
         code_hint: options.mode === "permissive" ? code : void 0
       };
     },
-    verifyOtp(contact, code) {
-      const matching = registry.otps.list((o) => o.contact === contact);
-      const otp = matching[matching.length - 1];
+    verifyOtp(contact, code, challengeId) {
+      let otp = challengeId ? registry.otps.get(challengeId) : void 0;
+      if (!challengeId) {
+        const matching = registry.otps.list((o) => o.contact === contact);
+        otp = matching[matching.length - 1];
+      }
+      if (challengeId) {
+        if (!otp) throw new Error("No OTP challenge found");
+        if (otp.contact !== contact) throw new Error("OTP challenge does not match contact");
+      }
       if (options.mode === "strict") {
         if (!otp) throw new Error("No OTP requested");
         if (otp.code !== code && code !== options.defaultOtp) throw new Error("Invalid OTP");
@@ -5248,7 +5287,7 @@ function createCartService(opts) {
 
 // src/mock/domain/checkout.ts
 function createCheckoutService(opts) {
-  const { registry, clock, ids, bus} = opts;
+  const { registry, clock, ids, bus } = opts;
   return {
     process(session, body) {
       if (!body.cart_id) throw validation("cart_id required");
@@ -5735,6 +5774,7 @@ function createDeliveryService() {
             rate_id: "dlvrt_mock_standard",
             name: "Standard",
             fee: standardFree ? money(0) : money(15),
+            fee_status: "priced",
             currency: "GHS",
             free_delivery_applied: standardFree,
             free_over_amount: money(200),
@@ -5748,6 +5788,7 @@ function createDeliveryService() {
             name: "Express",
             description: "Delivered within the hour",
             fee: money(25),
+            fee_status: "priced",
             currency: "GHS",
             free_delivery_applied: false,
             eta_min_minutes: 30,

package/dist/{client-Dqg2mc-7.d.ts → client-BVNWjk6W.d.ts}

@@ -1,5 +1,5 @@
-import { ac as CimplifyClient } from './client-DHBwvh7U.js';
-import { A as AppHandle, C as CreateAppOptions } from './server-DoXIpSd7.js';
+import { ac as CimplifyClient } from './client-BuLcOWLv.js';
+import { A as AppHandle, C as CreateAppOptions } from './server-DKK_D-PP.js';
 
 /**
  * Test client + fixtures.