@cimplify/sdk 0.106.2 → 0.107.0

package/dist/{chunk-T3MXI7JD.mjs → chunk-2I6YKE6Q.mjs}

@@ -2405,7 +2405,7 @@ var LinkService = class {
       this.client.activity.refreshIdentity();
       return result;
     }
-    const claim = await this.client.support.claimConversation();
+    const claim = await this.client.session.claim();
     if (fence.generation !== this.activationGeneration || fence.publicKeyEpoch !== this.client.getPublicKeyEpoch() || this.client.getAccessToken() !== accessToken) {
       return this.supersededActivation();
     }
@@ -2629,7 +2629,7 @@ var AuthService = class {
     if (result.ok && result.value.session_token) {
       this.client.setAccessToken(result.value.session_token);
       this.client.activity.refreshIdentity();
-      this.client.autoClaimChatIdentity();
+      this.client.autoClaimSession();
     }
     return result;
   }
@@ -2922,13 +2922,10 @@ var ELEMENT_TYPES = {
 };
 var MESSAGE_TYPES = {
   INIT: "init",
-  SET_TOKEN: "set_token",
-  SET_SESSION: "set_session",
+  IDENTITY: "identity",
   SESSION_CLEARED: "session_cleared",
   SET_CART: "set_cart",
   GET_DATA: "get_data",
-  NAVIGATE: "navigate",
-  REFRESH_TOKEN: "refresh_token",
   LOGOUT: "logout",
   PROCESS_CHECKOUT: "process_checkout",
   ABORT_CHECKOUT: "abort_checkout",
@@ -2941,7 +2938,6 @@ var MESSAGE_TYPES = {
   LOGOUT_COMPLETE: "logout_complete",
   AUTH_REQUESTED: "auth_requested",
   SESSION_ESTABLISHED: "session_established",
-  SESSION_ESTABLISHMENT_FAILED: "session_establishment_failed",
   CONTINUE_WITHOUT_SAVED_DETAILS: "continue_without_saved_details",
   CONTACT_PROVIDED: "contact_provided",
   CHECKOUT_STATUS: "checkout_status",
@@ -3345,7 +3341,6 @@ function toCheckoutError(code, message, recoverable) {
   };
 }
 var DEFAULT_LINK_URL = "https://link.cimplify.io";
-var AUTH_ESTABLISHMENT_WAIT_MS = 8e3;
 var AUTH_CONTACT_TYPES = new Set(Object.values(ELEMENTS_AUTH_CONTACT_TYPES));
 var AUTH_MODES = new Set(Object.values(ELEMENTS_AUTH_MODES));
 var AUTH_PROMPTS = new Set(Object.values(ELEMENTS_AUTH_PROMPTS));
@@ -3376,6 +3371,11 @@ function decodeJwtSub(token) {
     return "";
   }
 }
+function isClaimedCustomer(value) {
+  if (!value || typeof value !== "object") return false;
+  const record = value;
+  return typeof record.id === "string" && typeof record.name === "string" && (record.email === null || typeof record.email === "string") && (record.phone === null || typeof record.phone === "string");
+}
 function isAllowedOrigin(origin) {
   try {
     const url = new URL(origin);
@@ -3432,8 +3432,10 @@ function parseIframeMessage(data) {
       }
       break;
     case MESSAGE_TYPES.SESSION_ESTABLISHED:
+      if (typeof record.sessionToken !== "string" || !record.sessionToken.trim()) return null;
       if (typeof record.accessToken !== "string" || !record.accessToken.trim()) return null;
       if (record.refreshToken !== void 0 && typeof record.refreshToken !== "string") return null;
+      if (!isClaimedCustomer(record.customer)) return null;
       break;
     case MESSAGE_TYPES.ADDRESS_CHANGED:
     case MESSAGE_TYPES.ADDRESS_SELECTED:
@@ -3484,7 +3486,6 @@ var CimplifyElements = class {
     this.paymentData = null;
     this.checkoutInProgress = false;
     this.authInProgress = false;
-    this.authEstablishmentInProgress = false;
     this.authGeneration = 0;
     this.activeCheckoutAbort = null;
     this.businessIdResolvePromise = null;
@@ -3499,7 +3500,7 @@ var CimplifyElements = class {
       window.addEventListener("message", this.boundHandleMessage);
     }
     this.stopSessionSync = client.events.on(SESSION_CLAIMED, () => {
-      if (!this.authInProgress && !this.authEstablishmentInProgress) this.syncHostSession();
+      if (!this.authInProgress) this._syncHostSession();
     });
     void this.restoreSession();
   }
@@ -3508,20 +3509,24 @@ var CimplifyElements = class {
       console.debug(...args);
     }
   }
-  syncHostSession(element) {
-    if (this.authEstablishmentInProgress) return;
+  _syncHostSession(element) {
     const sessionToken = this.client.getSessionToken();
-    const token = this.client.getAccessToken() ?? this.accessToken;
+    if (!sessionToken) return;
+    const identity = {
+      type: MESSAGE_TYPES.IDENTITY,
+      sessionToken,
+      accessToken: this.client.getAccessToken() ?? this.accessToken,
+      customer: this.identityCustomer()
+    };
     const targets = element ? [element] : Array.from(this.elements.values());
     for (const target of targets) {
-      if (sessionToken) {
-        target.sendMessage({ type: MESSAGE_TYPES.SET_SESSION, sessionToken });
-      }
-      if (token) {
-        target.sendMessage({ type: MESSAGE_TYPES.SET_TOKEN, token });
-      }
+      target.sendMessage(identity);
     }
   }
+  identityCustomer() {
+    if (!this.accessToken || !this.customerId || !this.customerData) return null;
+    return { id: this.customerId, ...this.customerData };
+  }
   create(type, options = {}) {
     const existing = this.elements.get(type);
     if (existing) return existing;
@@ -3540,11 +3545,7 @@ var CimplifyElements = class {
   }
   destroy() {
     this.authGeneration += 1;
-    if (this.authEstablishmentInProgress) {
-      this.client.setAccessToken(null);
-    }
     this.authInProgress = false;
-    this.authEstablishmentInProgress = false;
     this.stopSessionSync();
     this.stopSessionSync = () => {
     };
@@ -3604,17 +3605,6 @@ var CimplifyElements = class {
         );
       }
       this.checkoutInProgress = true;
-      if (this.authEstablishmentInProgress) {
-        await this.waitForAuthEstablishment(AUTH_ESTABLISHMENT_WAIT_MS);
-        if (this.authEstablishmentInProgress) {
-          this.checkoutInProgress = false;
-          return toCheckoutError(
-            ErrorCode.AUTH_INCOMPLETE,
-            "Authentication must finish establishing the checkout session.",
-            true
-          );
-        }
-      }
       if (!options.cart_id && !options.intent_id) {
         this.debug("[cimplify:checkout] BLOCKED: no cart_id or intent_id");
         this.checkoutInProgress = false;
@@ -3819,7 +3809,7 @@ var CimplifyElements = class {
           hasAddress: !!processMessage.address,
           isUnifiedCheckout
         });
-        this.syncHostSession(checkoutElement);
+        this._syncHostSession(checkoutElement);
         checkoutElement.sendMessage(processMessage);
         this.debug("[cimplify:checkout] postMessage sent, waiting for checkout_complete...");
       });
@@ -3930,7 +3920,6 @@ var CimplifyElements = class {
     this.customerData = null;
     this.addressData = null;
     this.paymentData = null;
-    this.authEstablishmentInProgress = false;
     this.client.clearSession();
     this.broadcastClearedSession();
   }
@@ -3966,73 +3955,73 @@ var CimplifyElements = class {
       this.broadcastClearedSession();
       return;
     }
-    if (application.kind !== "authenticated" || !this.broadcastAccessToken(result.value.session_token, generation)) {
-      return;
-    }
+    if (application.kind !== "authenticated") return;
+    this._syncHostSession();
     this.elements.forEach((element) => element._emitAuthenticated(application.data));
   }
   async applyAccessToken(token, generation) {
     if (this.authGeneration !== generation) return { kind: "incomplete" };
-    this.authEstablishmentInProgress = true;
-    try {
-      this.accessToken = null;
-      this.accountId = null;
-      this.customerId = null;
-      this.customerData = null;
-      this.addressData = null;
-      this.paymentData = null;
-      this.client.setAccessToken(token);
-      const claim = await this.client.support.claimConversation();
-      if (!this.isAuthGenerationCurrent(generation, token)) return { kind: "incomplete" };
-      if (!claim.ok && claim.error.code !== "already_claimed") {
-        if (this.client.hasClaimedSessionAuthority()) {
-          this.client.clearSession();
-        } else {
-          this.client.setAccessToken(null);
-        }
-        return {
-          kind: "claim_failed",
-          code: claim.error.code,
-          message: claim.error.userMessage
-        };
-      }
-      this.accessToken = token;
-      this.accountId = decodeJwtSub(token);
-      if (!await this.hydrateCustomerData(generation, token, true)) {
-        return { kind: "incomplete" };
+    this.accessToken = null;
+    this.accountId = null;
+    this.customerId = null;
+    this.customerData = null;
+    this.addressData = null;
+    this.paymentData = null;
+    this.client.setAccessToken(token);
+    const claim = await this.client.session.claim();
+    if (!this.isAuthGenerationCurrent(generation, token)) return { kind: "incomplete" };
+    if (!claim.ok && claim.error.code !== "already_claimed") {
+      if (this.client.hasClaimedSessionAuthority()) {
+        this.client.clearSession();
+      } else {
+        this.client.setAccessToken(null);
       }
-      if (!this.isAuthGenerationCurrent(generation, token)) return { kind: "incomplete" };
       return {
-        kind: "authenticated",
-        data: {
-          accountId: this.accountId ?? "",
-          customerId: this.customerId ?? "",
-          token,
-          customer: this.customerData ?? { name: "", email: null, phone: null }
-        }
+        kind: "claim_failed",
+        code: claim.error.code,
+        message: claim.error.userMessage
       };
-    } finally {
-      this.authEstablishmentInProgress = false;
-    }
-  }
-  async waitForAuthEstablishment(timeoutMs) {
-    const deadline = Date.now() + timeoutMs;
-    while (this.authEstablishmentInProgress && Date.now() < deadline) {
-      await new Promise((resolve) => setTimeout(resolve, 100));
     }
-  }
-  broadcastAccessToken(token, generation) {
-    if (!this.isAuthGenerationCurrent(generation, token) || this.accessToken !== token || this.authEstablishmentInProgress) {
-      return false;
+    this.accessToken = token;
+    this.accountId = decodeJwtSub(token);
+    if (!await this.hydrateCustomerData(generation, token, true)) {
+      return { kind: "incomplete" };
     }
-    const sessionToken = this.client.getSessionToken();
-    this.elements.forEach((element) => {
-      if (sessionToken) {
-        element.sendMessage({ type: MESSAGE_TYPES.SET_SESSION, sessionToken });
+    if (!this.isAuthGenerationCurrent(generation, token)) return { kind: "incomplete" };
+    return {
+      kind: "authenticated",
+      data: {
+        accountId: this.accountId ?? "",
+        customerId: this.customerId ?? "",
+        token,
+        customer: this.customerData ?? { name: "", email: null, phone: null }
       }
-      element.sendMessage({ type: MESSAGE_TYPES.SET_TOKEN, token });
+    };
+  }
+  adoptEstablishedSession(sourceElement, session) {
+    this.authGeneration += 1;
+    this.authInProgress = false;
+    const { id, ...customer } = session.customer;
+    this.accessToken = session.accessToken;
+    this.accountId = decodeJwtSub(session.accessToken);
+    this.customerId = id;
+    this.customerData = customer;
+    this.addressData = null;
+    this.paymentData = null;
+    this.client.setAccessToken(session.accessToken);
+    this.persistRefreshToken(session.refreshToken);
+    this.client.session.adopt(session.accessToken, {
+      sessionToken: session.sessionToken,
+      customerName: session.customer.name,
+      customer: session.customer,
+      cart: null
+    });
+    sourceElement._emitAuthenticated({
+      accountId: this.accountId,
+      customerId: id,
+      token: session.accessToken,
+      customer
     });
-    return true;
   }
   broadcastClearedSession() {
     const sessionToken = this.client.getSessionToken();
@@ -4079,7 +4068,8 @@ var CimplifyElements = class {
           return;
         }
         const application = await this.applyAccessToken(accessToken, generation);
-        if (application.kind === "authenticated" && this.broadcastAccessToken(accessToken, generation)) {
+        if (application.kind === "authenticated") {
+          this._syncHostSession();
           sourceElement._emitAuthenticated(application.data);
         } else if (application.kind === "claim_failed") {
           sourceElement._emitError({
@@ -4118,29 +4108,7 @@ var CimplifyElements = class {
         this.startEmbeddedAuth(sourceElement, message);
         break;
       case MESSAGE_TYPES.SESSION_ESTABLISHED:
-        {
-          this.authInProgress = false;
-          const generation = ++this.authGeneration;
-          void this.applyAccessToken(message.accessToken, generation).then((application) => {
-            if (this.authGeneration !== generation) return;
-            if (application.kind === "claim_failed") {
-              this.clearPersistedSession();
-              sourceElement.sendMessage({
-                type: MESSAGE_TYPES.SESSION_ESTABLISHMENT_FAILED,
-                accessToken: message.accessToken,
-                code: application.code,
-                message: application.message
-              });
-              this.broadcastClearedSession();
-              return;
-            }
-            if (application.kind !== "authenticated" || !this.broadcastAccessToken(message.accessToken, generation)) {
-              return;
-            }
-            this.persistRefreshToken(message.refreshToken);
-            sourceElement._emitAuthenticated(application.data);
-          });
-        }
+        this.adoptEstablishedSession(sourceElement, message);
         break;
       case MESSAGE_TYPES.ADDRESS_CHANGED:
       case MESSAGE_TYPES.ADDRESS_SELECTED:
@@ -4162,7 +4130,6 @@ var CimplifyElements = class {
       case MESSAGE_TYPES.CONTINUE_WITHOUT_SAVED_DETAILS: {
         this.authGeneration += 1;
         this.authInProgress = false;
-        this.authEstablishmentInProgress = false;
         const carriedIdentityAuthority = Boolean(this.client.getAccessToken()) || this.client.hasClaimedSessionAuthority();
         this.accessToken = null;
         this.accountId = null;
@@ -4187,7 +4154,6 @@ var CimplifyElements = class {
       case MESSAGE_TYPES.LOGOUT_COMPLETE:
         this.authGeneration += 1;
         this.authInProgress = false;
-        this.authEstablishmentInProgress = false;
         if (this.checkoutInProgress && this.activeCheckoutAbort) {
           this.activeCheckoutAbort();
         }
@@ -4436,14 +4402,7 @@ var CimplifyElement = class {
             hostedSessionId: this.options.hostedSessionId,
             initialTerms: this.options.initialTerms
           });
-          const token = this.parent.getAccessToken();
-          const sessionToken = this.parent.getSessionToken();
-          if (sessionToken) {
-            this.sendMessage({ type: MESSAGE_TYPES.SET_SESSION, sessionToken });
-          }
-          if (token) {
-            this.sendMessage({ type: MESSAGE_TYPES.SET_TOKEN, token });
-          }
+          this.parent._syncHostSession(this);
           this.pendingInit = null;
         }
         this.flushPending();

package/dist/{chunk-7O2BBPDM.js → chunk-73HY36Z7.js}

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkNJK3THWT_js = require('./chunk-NJK3THWT.js');
-var chunkBCLGREHS_js = require('./chunk-BCLGREHS.js');
+var chunkNX5YBQZP_js = require('./chunk-NX5YBQZP.js');
+var chunkW4ZFZPPY_js = require('./chunk-W4ZFZPPY.js');
 var chunkEV2EVOYS_js = require('./chunk-EV2EVOYS.js');
 var chunkAVXA4F6G_js = require('./chunk-AVXA4F6G.js');
 var zod = require('zod');
@@ -1185,7 +1185,7 @@ async function toForwardedRequest(input, init) {
   };
 }
 function createTestClient(options = {}) {
-  const mock = chunkNJK3THWT_js.createMockApp(options);
+  const mock = chunkNX5YBQZP_js.createMockApp(options);
   let sessionToken;
   const fetchImpl = async (input, init) => {
     const url = typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
@@ -1204,7 +1204,7 @@ function createTestClient(options = {}) {
     if (echoed) sessionToken = echoed;
     return res;
   };
-  const client = chunkBCLGREHS_js.createCimplifyClient({
+  const client = chunkW4ZFZPPY_js.createCimplifyClient({
     baseUrl: TEST_BASE_URL,
     // Link mock lives at /v1/link on the same Hono app, so point the SDK's
     // separate Link transport at the same TEST_BASE_URL.