@cimplify/sdk 0.87.0 → 0.89.0

package/dist/advanced.d.mts

@@ -1,6 +1,6 @@
-export { k as AuthService, C as BusinessService, O as CartOperations, P as CatalogueQueries, a8 as CheckoutOperations, a8 as CheckoutService, ae as CimplifyElement, af as CimplifyElements, aG as ELEMENT_TYPES, aH as EVENT_TYPES, aK as ElementEventType, aL as ElementOptions, aM as ElementType, aU as ElementsOptions, b0 as FetchQuoteInput, b9 as FxService, bd as GetProductsOptions, bg as InventoryService, bo as LinkService, bs as LiteService, bz as MESSAGE_TYPES, b$ as OrderQueries, cl as PriceQuote, cr as QuoteBundleSelectionInput, cs as QuoteCompositeSelectionInput, ct as QuoteDynamicBuckets, cu as QuoteStatus, cv as QuoteUiMessage, cx as RefreshQuoteInput, cy as RefreshQuoteResult, c_ as SchedulingService, dE as createElements } from './client-BIt37FjS.mjs';
-import './product-C0Lr81ze.mjs';
-import './payment-CLp__KpE.mjs';
+export { k as AuthService, C as BusinessService, O as CartOperations, P as CatalogueQueries, a8 as CheckoutOperations, a8 as CheckoutService, ae as CimplifyElement, af as CimplifyElements, aG as ELEMENT_TYPES, aH as EVENT_TYPES, aK as ElementEventType, aL as ElementOptions, aM as ElementType, aU as ElementsOptions, b0 as FetchQuoteInput, b9 as FxService, bd as GetProductsOptions, bg as InventoryService, bo as LinkService, bs as LiteService, bz as MESSAGE_TYPES, b$ as OrderQueries, cl as PriceQuote, cr as QuoteBundleSelectionInput, cs as QuoteCompositeSelectionInput, ct as QuoteDynamicBuckets, cu as QuoteStatus, cv as QuoteUiMessage, cx as RefreshQuoteInput, cy as RefreshQuoteResult, c_ as SchedulingService, dE as createElements } from './client-D8ZFs-sq.mjs';
+import './product-BakHcsP2.mjs';
+import './payment-Dcgb9n1n.mjs';
 
 declare function generateIdempotencyKey(prefix?: string): string;
 

package/dist/advanced.d.ts

@@ -1,6 +1,6 @@
-export { k as AuthService, C as BusinessService, O as CartOperations, P as CatalogueQueries, a8 as CheckoutOperations, a8 as CheckoutService, ae as CimplifyElement, af as CimplifyElements, aG as ELEMENT_TYPES, aH as EVENT_TYPES, aK as ElementEventType, aL as ElementOptions, aM as ElementType, aU as ElementsOptions, b0 as FetchQuoteInput, b9 as FxService, bd as GetProductsOptions, bg as InventoryService, bo as LinkService, bs as LiteService, bz as MESSAGE_TYPES, b$ as OrderQueries, cl as PriceQuote, cr as QuoteBundleSelectionInput, cs as QuoteCompositeSelectionInput, ct as QuoteDynamicBuckets, cu as QuoteStatus, cv as QuoteUiMessage, cx as RefreshQuoteInput, cy as RefreshQuoteResult, c_ as SchedulingService, dE as createElements } from './client-Dfl6WY2F.js';
-import './product-C0Lr81ze.js';
-import './payment-DJrvivO_.js';
+export { k as AuthService, C as BusinessService, O as CartOperations, P as CatalogueQueries, a8 as CheckoutOperations, a8 as CheckoutService, ae as CimplifyElement, af as CimplifyElements, aG as ELEMENT_TYPES, aH as EVENT_TYPES, aK as ElementEventType, aL as ElementOptions, aM as ElementType, aU as ElementsOptions, b0 as FetchQuoteInput, b9 as FxService, bd as GetProductsOptions, bg as InventoryService, bo as LinkService, bs as LiteService, bz as MESSAGE_TYPES, b$ as OrderQueries, cl as PriceQuote, cr as QuoteBundleSelectionInput, cs as QuoteCompositeSelectionInput, ct as QuoteDynamicBuckets, cu as QuoteStatus, cv as QuoteUiMessage, cx as RefreshQuoteInput, cy as RefreshQuoteResult, c_ as SchedulingService, dE as createElements } from './client-CqZgdUtw.js';
+import './product-BakHcsP2.js';
+import './payment-Xq0WDZXh.js';
 
 declare function generateIdempotencyKey(prefix?: string): string;
 

package/dist/advanced.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkFWEF2DHR_js = require('./chunk-FWEF2DHR.js');
+var chunkGHFDYM5K_js = require('./chunk-GHFDYM5K.js');
 require('./chunk-PTPOQVXS.js');
 require('./chunk-AETVRBKI.js');
 require('./chunk-OWW5GUSB.js');
@@ -9,77 +9,77 @@ require('./chunk-OWW5GUSB.js');
 
 Object.defineProperty(exports, "AuthService", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.AuthService; }
+  get: function () { return chunkGHFDYM5K_js.AuthService; }
 });
 Object.defineProperty(exports, "BusinessService", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.BusinessService; }
+  get: function () { return chunkGHFDYM5K_js.BusinessService; }
 });
 Object.defineProperty(exports, "CartOperations", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.CartOperations; }
+  get: function () { return chunkGHFDYM5K_js.CartOperations; }
 });
 Object.defineProperty(exports, "CatalogueQueries", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.CatalogueQueries; }
+  get: function () { return chunkGHFDYM5K_js.CatalogueQueries; }
 });
 Object.defineProperty(exports, "CheckoutOperations", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.CheckoutService; }
+  get: function () { return chunkGHFDYM5K_js.CheckoutService; }
 });
 Object.defineProperty(exports, "CheckoutService", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.CheckoutService; }
+  get: function () { return chunkGHFDYM5K_js.CheckoutService; }
 });
 Object.defineProperty(exports, "CimplifyElement", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.CimplifyElement; }
+  get: function () { return chunkGHFDYM5K_js.CimplifyElement; }
 });
 Object.defineProperty(exports, "CimplifyElements", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.CimplifyElements; }
+  get: function () { return chunkGHFDYM5K_js.CimplifyElements; }
 });
 Object.defineProperty(exports, "ELEMENT_TYPES", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.ELEMENT_TYPES; }
+  get: function () { return chunkGHFDYM5K_js.ELEMENT_TYPES; }
 });
 Object.defineProperty(exports, "EVENT_TYPES", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.EVENT_TYPES; }
+  get: function () { return chunkGHFDYM5K_js.EVENT_TYPES; }
 });
 Object.defineProperty(exports, "FxService", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.FxService; }
+  get: function () { return chunkGHFDYM5K_js.FxService; }
 });
 Object.defineProperty(exports, "InventoryService", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.InventoryService; }
+  get: function () { return chunkGHFDYM5K_js.InventoryService; }
 });
 Object.defineProperty(exports, "LinkService", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.LinkService; }
+  get: function () { return chunkGHFDYM5K_js.LinkService; }
 });
 Object.defineProperty(exports, "LiteService", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.LiteService; }
+  get: function () { return chunkGHFDYM5K_js.LiteService; }
 });
 Object.defineProperty(exports, "MESSAGE_TYPES", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.MESSAGE_TYPES; }
+  get: function () { return chunkGHFDYM5K_js.MESSAGE_TYPES; }
 });
 Object.defineProperty(exports, "OrderQueries", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.OrderQueries; }
+  get: function () { return chunkGHFDYM5K_js.OrderQueries; }
 });
 Object.defineProperty(exports, "SchedulingService", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.SchedulingService; }
+  get: function () { return chunkGHFDYM5K_js.SchedulingService; }
 });
 Object.defineProperty(exports, "createElements", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.createElements; }
+  get: function () { return chunkGHFDYM5K_js.createElements; }
 });
 Object.defineProperty(exports, "generateIdempotencyKey", {
   enumerable: true,
-  get: function () { return chunkFWEF2DHR_js.generateIdempotencyKey; }
+  get: function () { return chunkGHFDYM5K_js.generateIdempotencyKey; }
 });

package/dist/advanced.mjs

@@ -1,4 +1,4 @@
-export { AuthService, BusinessService, CartOperations, CatalogueQueries, CheckoutService as CheckoutOperations, CheckoutService, CimplifyElement, CimplifyElements, ELEMENT_TYPES, EVENT_TYPES, FxService, InventoryService, LinkService, LiteService, MESSAGE_TYPES, OrderQueries, SchedulingService, createElements, generateIdempotencyKey } from './chunk-U57TYZLD.mjs';
+export { AuthService, BusinessService, CartOperations, CatalogueQueries, CheckoutService as CheckoutOperations, CheckoutService, CimplifyElement, CimplifyElements, ELEMENT_TYPES, EVENT_TYPES, FxService, InventoryService, LinkService, LiteService, MESSAGE_TYPES, OrderQueries, SchedulingService, createElements, generateIdempotencyKey } from './chunk-ZU4ZRYUR.mjs';
 import './chunk-KFLGQGMC.mjs';
 import './chunk-K5EN2W2Q.mjs';
 import './chunk-3G6RQLXK.mjs';

package/dist/{chunk-RCGSHS2Q.mjs → chunk-DENWOZEA.mjs}

@@ -1,4 +1,4 @@
-import { safe, generateIdempotencyKey, CatalogueQueries, CartOperations, CheckoutService, OrderQueries, LinkService, AuthService, BusinessService, InventoryService, SchedulingService, LiteService, FxService, createElements } from './chunk-U57TYZLD.mjs';
+import { safe, generateIdempotencyKey, CatalogueQueries, CartOperations, CheckoutService, OrderQueries, LinkService, AuthService, BusinessService, InventoryService, SchedulingService, LiteService, FxService, createElements } from './chunk-ZU4ZRYUR.mjs';
 import { CimplifyError, ErrorCode, IdempotencyMismatchError, enrichError } from './chunk-K5EN2W2Q.mjs';
 
 // src/store-credit.ts
@@ -307,13 +307,18 @@ var SupportService = class {
       })
     );
   }
-  /** Send a message in the active conversation. */
+  /**
+   * Send a message in the active conversation.
+   *
+   * The idempotency key doubles as the message `client_id`: the backend
+   * dedupes on it, so client retries of the same send never insert twice.
+   */
   async sendMessage(content, opts) {
     const idempotencyKey = opts?.idempotencyKey ?? generateIdempotencyKey();
     return safe(
       this.client.post(
         "/api/v1/support/conversation/messages",
-        { content },
+        { content, client_id: idempotencyKey },
         { idempotencyKey }
       )
     );
@@ -394,6 +399,16 @@ function mergeOptionHeaders(base, opts) {
   }
   return merged;
 }
+function generateSessionToken() {
+  if (typeof crypto !== "undefined" && crypto.randomUUID) {
+    return crypto.randomUUID();
+  }
+  return "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (c) => {
+    const r = Math.random() * 16 | 0;
+    const v = c === "x" ? r : r & 3 | 8;
+    return v.toString(16);
+  });
+}
 function isRetryable(error) {
   if (error instanceof TypeError && error.message.includes("fetch")) {
     return true;
@@ -491,7 +506,7 @@ var CimplifyClient = class {
     this.retryDelay = config.retryDelay ?? DEFAULT_RETRY_DELAY_MS;
     this.hooks = config.hooks ?? {};
     this.fetchImpl = (config.fetch ?? globalThis.fetch).bind(globalThis);
-    this.sessionToken = this.loadSessionToken();
+    this.sessionToken = this.loadSessionToken() ?? this.mintSessionToken();
     if (!this.publicKey && !config.suppressPublicKeyWarning) {
       console.warn(
         '[Cimplify] No public key found. Set NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY in your environment, or pass { publicKey: "cpk_..." } to createCimplifyClient().'
@@ -539,6 +554,7 @@ var CimplifyClient = class {
     if (typeof window !== "undefined" && window.localStorage) {
       localStorage.removeItem(SESSION_TOKEN_STORAGE_KEY);
     }
+    this.sessionToken = this.mintSessionToken();
     this.hooks.onSessionChange?.({
       previousToken: previous,
       newToken: null,
@@ -600,6 +616,17 @@ var CimplifyClient = class {
     }
     this.businessId = normalized;
   }
+  // Set the storefront public key after construction. Needed by hosts that
+  // create the client before they know the key (e.g. the Link element, which
+  // receives it in its INIT message) — without it, storefront calls carry no
+  // X-API-Key and the business can't be resolved.
+  setPublicKey(publicKey) {
+    const normalized = publicKey.trim();
+    if (!normalized) {
+      return;
+    }
+    this.publicKey = normalized;
+  }
   getBusinessId() {
     return this.businessId;
   }
@@ -637,6 +664,23 @@ var CimplifyClient = class {
     }
     return null;
   }
+  /**
+   * Mint the session token client-side so the very first request already
+   * carries it. Without this, parallel first-load requests each get a
+   * different server-minted token and last-writer-wins splits the session
+   * (cart writes and chat conversations land on dropped tokens).
+   *
+   * Browser-only: minting on a server-shared client instance would pin
+   * every visitor to one session, so SSR keeps the lazy server-minted flow.
+   */
+  mintSessionToken() {
+    if (typeof window === "undefined" || !window.localStorage) {
+      return null;
+    }
+    const token = generateSessionToken();
+    this.saveSessionToken(token);
+    return token;
+  }
   saveSessionToken(token) {
     if (typeof window !== "undefined" && window.localStorage) {
       try {
@@ -887,14 +931,9 @@ var CimplifyClient = class {
         const originalCreatedAt = typeof json.error === "object" && json.error?.original_created_at || "";
         throw new IdempotencyMismatchError(errorMessage, originalCreatedAt);
       }
-      const error = enrichError(
-        new CimplifyError(
-          errorCode,
-          errorMessage,
-          retryable
-        ),
-        { isTestMode: this.isTestMode() }
-      );
+      const error = enrichError(new CimplifyError(errorCode, errorMessage, retryable), {
+        isTestMode: this.isTestMode()
+      });
       if ((response.status === 401 || error.code === ErrorCode.UNAUTHORIZED) && this.accessToken) {
         console.warn(
           "[Cimplify] Received 401 Unauthorized. Access token may be missing/expired. Refresh authentication and retry the request."

package/dist/{chunk-FWEF2DHR.js → chunk-GHFDYM5K.js}

@@ -2306,6 +2306,7 @@ var MESSAGE_TYPES = {
   PAYMENT_METHOD_SELECTED: "payment_method_selected",
   LOGOUT_COMPLETE: "logout_complete",
   AUTH_REQUESTED: "auth_requested",
+  SESSION_ESTABLISHED: "session_established",
   CONTACT_PROVIDED: "contact_provided",
   CHECKOUT_STATUS: "checkout_status",
   CHECKOUT_COMPLETE: "checkout_complete",
@@ -2800,6 +2801,7 @@ var CimplifyElements = class {
     if (typeof window !== "undefined") {
       window.addEventListener("message", this.boundHandleMessage);
     }
+    void this.restoreSession();
   }
   debug(...args) {
     if (this.client.isTestMode()) {
@@ -3089,6 +3091,56 @@ var CimplifyElements = class {
     }
     return null;
   }
+  // Refresh token kept first-party (keyed by public key) so a signed-in shopper
+  // survives reloads. Standard SPA tradeoff; far safer than the third-party
+  // iframe, whose storage/cookies are partitioned or blocked.
+  sessionStorageKey() {
+    const key = this.client.getPublicKey().trim();
+    return key ? `cimplify.link.rt.${key}` : null;
+  }
+  persistRefreshToken(refreshToken) {
+    if (typeof window === "undefined") return;
+    const storageKey = this.sessionStorageKey();
+    if (!storageKey) return;
+    try {
+      if (refreshToken) {
+        window.localStorage.setItem(storageKey, refreshToken);
+      } else {
+        window.localStorage.removeItem(storageKey);
+      }
+    } catch {
+    }
+  }
+  clearPersistedSession() {
+    if (typeof window === "undefined") return;
+    const storageKey = this.sessionStorageKey();
+    if (!storageKey) return;
+    try {
+      window.localStorage.removeItem(storageKey);
+    } catch {
+    }
+  }
+  async restoreSession() {
+    if (typeof window === "undefined" || this.accessToken) return;
+    const storageKey = this.sessionStorageKey();
+    if (!storageKey) return;
+    let refreshToken = null;
+    try {
+      refreshToken = window.localStorage.getItem(storageKey);
+    } catch {
+      return;
+    }
+    if (!refreshToken) return;
+    const result = await this.client.link.refreshSession(refreshToken);
+    if (!result.ok || !result.value.session_token) {
+      this.clearPersistedSession();
+      return;
+    }
+    this.persistRefreshToken(result.value.refresh_token ?? void 0);
+    const data = await this.applyAccessToken(result.value.session_token);
+    this.broadcastAccessToken(result.value.session_token);
+    this.elements.forEach((element) => element._emitAuthenticated(data));
+  }
   async applyAccessToken(token) {
     this.accessToken = token;
     this.accountId = decodeJwtSub(token);
@@ -3171,6 +3223,13 @@ var CimplifyElements = class {
       case MESSAGE_TYPES.AUTH_REQUESTED:
         this.startEmbeddedAuth(sourceElement, message);
         break;
+      case MESSAGE_TYPES.SESSION_ESTABLISHED:
+        this.persistRefreshToken(message.refreshToken);
+        void this.applyAccessToken(message.accessToken).then((data) => {
+          this.broadcastAccessToken(message.accessToken);
+          sourceElement._emitAuthenticated(data);
+        });
+        break;
       case MESSAGE_TYPES.ADDRESS_CHANGED:
       case MESSAGE_TYPES.ADDRESS_SELECTED:
         this.addressData = message.address;
@@ -3198,6 +3257,7 @@ var CimplifyElements = class {
         this.customerData = null;
         this.addressData = null;
         this.paymentData = null;
+        this.clearPersistedSession();
         this.client.clearSession();
         break;
     }
@@ -3246,10 +3306,11 @@ var CimplifyElement = class {
     }
   }
   /**
-   * Size the iframe to the element's reported content height. The checkout can
-   * exceed the viewport, so cap it at the viewport height — the checkout then
-   * scrolls internally instead of growing (and scrolling) the host page. Other
-   * element types size to content as before.
+   * Size the iframe to the element's reported content height (in pixels). We do
+   * NOT cap checkout at the viewport: capping forced a tall checkout to scroll
+   * *inside* a viewport-height iframe — a nested scroll-within-scroll. Sizing to
+   * content lets the iframe grow and the host page scroll naturally as one
+   * surface, which is the standard embedded-checkout behaviour.
    */
   applyHeight(reportedHeight) {
     if (!this.iframe) return;
@@ -3258,12 +3319,7 @@ var CimplifyElement = class {
     }
     const content = this.lastReportedHeight;
     if (!content) return;
-    if (this.type !== "checkout" || typeof window === "undefined") {
-      this.iframe.style.height = `${content}px`;
-      return;
-    }
-    const capped = Math.max(320, Math.min(content, window.innerHeight));
-    this.iframe.style.height = `${capped}px`;
+    this.iframe.style.height = `${Math.max(320, content)}px`;
   }
   mount(container) {
     if (this.mounted) {

package/dist/{chunk-PWDX5N2M.js → chunk-JHJTXAPS.js}

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkROBTTS3Q_js = require('./chunk-ROBTTS3Q.js');
-var chunkP3352VXA_js = require('./chunk-P3352VXA.js');
+var chunkT2CJ67QV_js = require('./chunk-T2CJ67QV.js');
 var zod = require('zod');
 
 var cimplifyRegistry = zod.z.registry();
@@ -619,7 +619,7 @@ function createTestClient(options = {}) {
     if (echoed) sessionToken = echoed;
     return res;
   };
-  const client = chunkP3352VXA_js.createCimplifyClient({
+  const client = chunkT2CJ67QV_js.createCimplifyClient({
     baseUrl: TEST_BASE_URL,
     // Link mock lives at /v1/link on the same Hono app, so point the SDK's
     // separate Link transport at the same TEST_BASE_URL.

package/dist/{chunk-J7JDCPNW.mjs → chunk-M4ALCELT.mjs}

@@ -1,5 +1,5 @@
 import { createMockApp } from './chunk-APBLFZ2I.mjs';
-import { createCimplifyClient } from './chunk-RCGSHS2Q.mjs';
+import { createCimplifyClient } from './chunk-DENWOZEA.mjs';
 import { z } from 'zod';
 
 var cimplifyRegistry = z.registry();