@cimplify/sdk 0.92.0 → 0.94.0

package/dist/advanced.d.mts

@@ -1,6 +1,6 @@
-export { k as AuthService, C as BusinessService, O as CartOperations, P as CatalogueQueries, ab as CheckoutOperations, ab as CheckoutService, ah as CimplifyElement, ai as CimplifyElements, aK as ELEMENT_TYPES, aL as EVENT_TYPES, aO as ElementEventType, aP as ElementOptions, aQ as ElementType, aY as ElementsOptions, b4 as FetchQuoteInput, bd as FxService, bh as GetProductsOptions, bk as InventoryService, bs as LinkService, by as LiteService, bF as MESSAGE_TYPES, c5 as OrderQueries, cr as PriceQuote, cx as QuoteBundleSelectionInput, cy as QuoteCompositeSelectionInput, cz as QuoteDynamicBuckets, cA as QuoteStatus, cB as QuoteUiMessage, cD as RefreshQuoteInput, cE as RefreshQuoteResult, d4 as SchedulingService, dK as createElements } from './client-BQbSKlHS.mjs';
-import './product-bZ8G5Z8D.mjs';
-import './payment-BFtLqiG2.mjs';
+export { k as AuthService, C as BusinessService, O as CartOperations, P as CatalogueQueries, ab as CheckoutOperations, ab as CheckoutService, ah as CimplifyElement, ai as CimplifyElements, aK as ELEMENT_TYPES, aL as EVENT_TYPES, aO as ElementEventType, aP as ElementOptions, aQ as ElementType, aY as ElementsOptions, b4 as FetchQuoteInput, bd as FxService, bh as GetProductsOptions, bk as InventoryService, bs as LinkService, by as LiteService, bF as MESSAGE_TYPES, c5 as OrderQueries, cr as PriceQuote, cx as QuoteBundleSelectionInput, cy as QuoteCompositeSelectionInput, cz as QuoteDynamicBuckets, cA as QuoteStatus, cB as QuoteUiMessage, cD as RefreshQuoteInput, cE as RefreshQuoteResult, d4 as SchedulingService, dK as createElements } from './client-BTL9d_nN.mjs';
+import './product-O8-wcHSe.mjs';
+import './payment-pKPpaORI.mjs';
 
 declare function generateIdempotencyKey(prefix?: string): string;
 

package/dist/advanced.d.ts

@@ -1,6 +1,6 @@
-export { k as AuthService, C as BusinessService, O as CartOperations, P as CatalogueQueries, ab as CheckoutOperations, ab as CheckoutService, ah as CimplifyElement, ai as CimplifyElements, aK as ELEMENT_TYPES, aL as EVENT_TYPES, aO as ElementEventType, aP as ElementOptions, aQ as ElementType, aY as ElementsOptions, b4 as FetchQuoteInput, bd as FxService, bh as GetProductsOptions, bk as InventoryService, bs as LinkService, by as LiteService, bF as MESSAGE_TYPES, c5 as OrderQueries, cr as PriceQuote, cx as QuoteBundleSelectionInput, cy as QuoteCompositeSelectionInput, cz as QuoteDynamicBuckets, cA as QuoteStatus, cB as QuoteUiMessage, cD as RefreshQuoteInput, cE as RefreshQuoteResult, d4 as SchedulingService, dK as createElements } from './client-CeW3acve.js';
-import './product-bZ8G5Z8D.js';
-import './payment-Cq8FT1B6.js';
+export { k as AuthService, C as BusinessService, O as CartOperations, P as CatalogueQueries, ab as CheckoutOperations, ab as CheckoutService, ah as CimplifyElement, ai as CimplifyElements, aK as ELEMENT_TYPES, aL as EVENT_TYPES, aO as ElementEventType, aP as ElementOptions, aQ as ElementType, aY as ElementsOptions, b4 as FetchQuoteInput, bd as FxService, bh as GetProductsOptions, bk as InventoryService, bs as LinkService, by as LiteService, bF as MESSAGE_TYPES, c5 as OrderQueries, cr as PriceQuote, cx as QuoteBundleSelectionInput, cy as QuoteCompositeSelectionInput, cz as QuoteDynamicBuckets, cA as QuoteStatus, cB as QuoteUiMessage, cD as RefreshQuoteInput, cE as RefreshQuoteResult, d4 as SchedulingService, dK as createElements } from './client-BX30FAWZ.js';
+import './product-O8-wcHSe.js';
+import './payment-By0JidTe.js';
 
 declare function generateIdempotencyKey(prefix?: string): string;
 

package/dist/advanced.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkIVJEUGWF_js = require('./chunk-IVJEUGWF.js');
+var chunkVEOAMBEX_js = require('./chunk-VEOAMBEX.js');
 require('./chunk-PTPOQVXS.js');
 require('./chunk-AETVRBKI.js');
 require('./chunk-OWW5GUSB.js');
@@ -9,77 +9,77 @@ require('./chunk-OWW5GUSB.js');
 
 Object.defineProperty(exports, "AuthService", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.AuthService; }
+  get: function () { return chunkVEOAMBEX_js.AuthService; }
 });
 Object.defineProperty(exports, "BusinessService", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.BusinessService; }
+  get: function () { return chunkVEOAMBEX_js.BusinessService; }
 });
 Object.defineProperty(exports, "CartOperations", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.CartOperations; }
+  get: function () { return chunkVEOAMBEX_js.CartOperations; }
 });
 Object.defineProperty(exports, "CatalogueQueries", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.CatalogueQueries; }
+  get: function () { return chunkVEOAMBEX_js.CatalogueQueries; }
 });
 Object.defineProperty(exports, "CheckoutOperations", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.CheckoutService; }
+  get: function () { return chunkVEOAMBEX_js.CheckoutService; }
 });
 Object.defineProperty(exports, "CheckoutService", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.CheckoutService; }
+  get: function () { return chunkVEOAMBEX_js.CheckoutService; }
 });
 Object.defineProperty(exports, "CimplifyElement", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.CimplifyElement; }
+  get: function () { return chunkVEOAMBEX_js.CimplifyElement; }
 });
 Object.defineProperty(exports, "CimplifyElements", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.CimplifyElements; }
+  get: function () { return chunkVEOAMBEX_js.CimplifyElements; }
 });
 Object.defineProperty(exports, "ELEMENT_TYPES", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.ELEMENT_TYPES; }
+  get: function () { return chunkVEOAMBEX_js.ELEMENT_TYPES; }
 });
 Object.defineProperty(exports, "EVENT_TYPES", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.EVENT_TYPES; }
+  get: function () { return chunkVEOAMBEX_js.EVENT_TYPES; }
 });
 Object.defineProperty(exports, "FxService", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.FxService; }
+  get: function () { return chunkVEOAMBEX_js.FxService; }
 });
 Object.defineProperty(exports, "InventoryService", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.InventoryService; }
+  get: function () { return chunkVEOAMBEX_js.InventoryService; }
 });
 Object.defineProperty(exports, "LinkService", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.LinkService; }
+  get: function () { return chunkVEOAMBEX_js.LinkService; }
 });
 Object.defineProperty(exports, "LiteService", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.LiteService; }
+  get: function () { return chunkVEOAMBEX_js.LiteService; }
 });
 Object.defineProperty(exports, "MESSAGE_TYPES", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.MESSAGE_TYPES; }
+  get: function () { return chunkVEOAMBEX_js.MESSAGE_TYPES; }
 });
 Object.defineProperty(exports, "OrderQueries", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.OrderQueries; }
+  get: function () { return chunkVEOAMBEX_js.OrderQueries; }
 });
 Object.defineProperty(exports, "SchedulingService", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.SchedulingService; }
+  get: function () { return chunkVEOAMBEX_js.SchedulingService; }
 });
 Object.defineProperty(exports, "createElements", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.createElements; }
+  get: function () { return chunkVEOAMBEX_js.createElements; }
 });
 Object.defineProperty(exports, "generateIdempotencyKey", {
   enumerable: true,
-  get: function () { return chunkIVJEUGWF_js.generateIdempotencyKey; }
+  get: function () { return chunkVEOAMBEX_js.generateIdempotencyKey; }
 });

package/dist/advanced.mjs

@@ -1,4 +1,4 @@
-export { AuthService, BusinessService, CartOperations, CatalogueQueries, CheckoutService as CheckoutOperations, CheckoutService, CimplifyElement, CimplifyElements, ELEMENT_TYPES, EVENT_TYPES, FxService, InventoryService, LinkService, LiteService, MESSAGE_TYPES, OrderQueries, SchedulingService, createElements, generateIdempotencyKey } from './chunk-T7LDBZZZ.mjs';
+export { AuthService, BusinessService, CartOperations, CatalogueQueries, CheckoutService as CheckoutOperations, CheckoutService, CimplifyElement, CimplifyElements, ELEMENT_TYPES, EVENT_TYPES, FxService, InventoryService, LinkService, LiteService, MESSAGE_TYPES, OrderQueries, SchedulingService, createElements, generateIdempotencyKey } from './chunk-VUSHG3HA.mjs';
 import './chunk-KFLGQGMC.mjs';
 import './chunk-K5EN2W2Q.mjs';
 import './chunk-3G6RQLXK.mjs';

package/dist/{chunk-OAHSF542.js → chunk-6Y7KC5YZ.js}

@@ -2482,6 +2482,10 @@ function buildV1(deps) {
     "/support/conversation",
     (c) => tryRoute(c, () => deps.support.openConversation(deps.defaultBusinessId, c.var.session.customer_id))
   );
+  app.get(
+    "/support/conversation",
+    (c) => tryRoute(c, () => deps.support.peekConversation(deps.defaultBusinessId, c.var.session.customer_id))
+  );
   app.post("/support/conversation/messages", async (c) => {
     const body = await c.req.json().catch(() => ({}));
     return tryRoute(
@@ -5480,6 +5484,13 @@ function createSupportService(opts) {
       registry.conversations.put(id, conv);
       return conv;
     },
+    peekConversation(businessId, customerId) {
+      const matches = registry.conversations.list(
+        (c) => c.business_id === businessId && c.customer_id === customerId
+      );
+      const conv = matches[matches.length - 1];
+      return conv ? { conversation: conv, messages: conv.messages } : { conversation: null, messages: [] };
+    },
     sendMessage(conversationId, body) {
       const conv = registry.conversations.get(conversationId);
       if (!conv) throw notFound(`Conversation ${conversationId} not found`);

package/dist/{chunk-3MBMIEWT.js → chunk-AWNWP5J3.js}

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkOAHSF542_js = require('./chunk-OAHSF542.js');
-var chunkDCRN67NO_js = require('./chunk-DCRN67NO.js');
+var chunk6Y7KC5YZ_js = require('./chunk-6Y7KC5YZ.js');
+var chunkQLGZIBRO_js = require('./chunk-QLGZIBRO.js');
 var zod = require('zod');
 
 var cimplifyRegistry = zod.z.registry();
@@ -600,7 +600,7 @@ async function toForwardedRequest(input, init) {
   };
 }
 function createTestClient(options = {}) {
-  const mock = chunkOAHSF542_js.createMockApp(options);
+  const mock = chunk6Y7KC5YZ_js.createMockApp(options);
   let sessionToken;
   const fetchImpl = async (input, init) => {
     const url = typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
@@ -619,7 +619,7 @@ function createTestClient(options = {}) {
     if (echoed) sessionToken = echoed;
     return res;
   };
-  const client = chunkDCRN67NO_js.createCimplifyClient({
+  const client = chunkQLGZIBRO_js.createCimplifyClient({
     baseUrl: TEST_BASE_URL,
     // Link mock lives at /v1/link on the same Hono app, so point the SDK's
     // separate Link transport at the same TEST_BASE_URL.

package/dist/{chunk-3XD2FVP4.mjs → chunk-FKARGZK3.mjs}

@@ -1,4 +1,4 @@
-import { safe, generateIdempotencyKey, err, CatalogueQueries, CartOperations, CheckoutService, OrderQueries, LinkService, AuthService, BusinessService, InventoryService, SchedulingService, LiteService, FxService, createElements } from './chunk-T7LDBZZZ.mjs';
+import { safe, generateIdempotencyKey, err, ok, CatalogueQueries, CartOperations, CheckoutService, OrderQueries, LinkService, AuthService, BusinessService, InventoryService, SchedulingService, LiteService, FxService, createElements } from './chunk-VUSHG3HA.mjs';
 import { CimplifyError, ErrorCode, IdempotencyMismatchError, enrichError } from './chunk-K5EN2W2Q.mjs';
 
 // src/store-credit.ts
@@ -72,6 +72,21 @@ var ActivityService = class {
       is_new_visitor: isNewVisitor
     };
   }
+  /**
+   * Record a page the visitor landed on. Product and category views already
+   * imply one, so call this for everything else — home, listings, booking,
+   * checkout — or entry pages, exits and bounce rate are computed from
+   * product pages alone.
+   */
+  trackPageView(options = {}) {
+    this.sendEvents([
+      {
+        type: "page_view",
+        page_path: options.pagePath ?? currentPath(),
+        page_title: options.pageTitle ?? currentTitle()
+      }
+    ]);
+  }
   trackProductView(productId, options = {}) {
     const event = {
       type: "product_view",
@@ -120,6 +135,12 @@ function currentPath() {
   }
   return void 0;
 }
+function currentTitle() {
+  if (typeof document !== "undefined" && document.title) {
+    return document.title;
+  }
+  return void 0;
+}
 function resolveVisitor() {
   try {
     const existing = localStorage.getItem(VISITOR_ID_STORAGE_KEY);
@@ -331,16 +352,21 @@ function createClientEvents() {
 }
 
 // src/support.ts
+var CLAIM_TIMEOUT_MS = 15e3;
 var SupportService = class {
   constructor(client) {
     this.client = client;
     this.claimInFlight = null;
+    this.claimInFlightToken = null;
     this.lastClaimedAccessToken = null;
     this.claimedName = null;
     this.client.events.on(SESSION_CLEARED, () => {
       this.lastClaimedAccessToken = null;
       this.claimedName = null;
     });
+    this.client.events.on(SESSION_CLAIMED, (event) => {
+      if (event.customerName) this.claimedName = event.customerName;
+    });
   }
   /** The verified customer this session's conversation was claimed for, null while anonymous. */
   get claimedCustomerName() {
@@ -361,20 +387,34 @@ var SupportService = class {
     if (!accessToken) {
       return err(new CimplifyError("not_authenticated", "No access token to claim with"));
     }
-    if (this.claimInFlight) return this.claimInFlight;
+    if (this.claimInFlight) {
+      if (this.claimInFlightToken === accessToken) return this.claimInFlight;
+      await this.claimInFlight;
+      return this.claimConversation();
+    }
     if (this.lastClaimedAccessToken === accessToken) {
       return err(new CimplifyError("already_claimed", "Session already claimed for this token"));
     }
+    const epoch = this.client.getSessionEpoch();
+    this.claimInFlightToken = accessToken;
     this.claimInFlight = (async () => {
       const result = await safe(
-        this.client.post("/api/v1/support/conversation/claim", {
-          access_token: accessToken
-        })
+        this.client.post(
+          "/api/v1/support/conversation/claim",
+          { access_token: accessToken },
+          { timeoutMs: CLAIM_TIMEOUT_MS }
+        )
       );
       if (result.ok) {
+        if (this.client.getSessionEpoch() !== epoch) {
+          return err(
+            new CimplifyError("session_cleared", "Session was cleared during the claim")
+          );
+        }
         this.lastClaimedAccessToken = accessToken;
         this.claimedName = result.value.customer_name || null;
         this.client.adoptSessionToken(result.value.session_token);
+        this.client.publishSessionClaimed(this.claimedName);
         this.client.events.emit(SESSION_CLAIMED, {
           sessionToken: result.value.session_token,
           threadId: result.value.thread_id ?? null,
@@ -387,8 +427,25 @@ var SupportService = class {
       return await this.claimInFlight;
     } finally {
       this.claimInFlight = null;
+      this.claimInFlightToken = null;
     }
   }
+  /**
+   * Peek at the conversation without creating one: resolves the existing
+   * thread (or null) so a page load can hydrate history without littering
+   * the inbox with empty threads.
+   */
+  async peekConversation() {
+    const result = await safe(
+      this.client.get("/api/v1/support/conversation")
+    );
+    if (!result.ok) return result;
+    if (!result.value.conversation) return ok(null);
+    return ok({
+      conversation: result.value.conversation,
+      messages: result.value.messages
+    });
+  }
   /** Open (or resume) the customer's widget conversation. */
   async openConversation(opts) {
     const idempotencyKey = opts?.idempotencyKey ?? generateIdempotencyKey();
@@ -458,6 +515,7 @@ var SupportService = class {
 
 // src/client.ts
 var SESSION_TOKEN_STORAGE_KEY = "cimplify_session_token";
+var SESSION_SYNC_STORAGE_KEY = "cimplify_session_sync";
 var ORDER_TOKEN_PREFIX = "cimplify_ot_";
 var SESSION_TOKEN_HEADER = "x-session-token";
 var ORDER_TOKEN_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -574,6 +632,7 @@ var CimplifyClient = class {
   constructor(config = {}) {
     this.accessToken = null;
     this.sessionToken = null;
+    this.sessionEpoch = 0;
     this.context = {};
     this.businessId = null;
     this.businessIdResolvePromise = null;
@@ -596,6 +655,7 @@ var CimplifyClient = class {
     this.hooks = config.hooks ?? {};
     this.fetchImpl = (config.fetch ?? globalThis.fetch).bind(globalThis);
     this.sessionToken = this.loadSessionToken() ?? this.mintSessionToken();
+    this.watchCrossTabSession();
     if (!this.publicKey && !config.suppressPublicKeyWarning) {
       console.warn(
         '[Cimplify] No public key found. Set NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY in your environment, or pass { publicKey: "cpk_..." } to createCimplifyClient().'
@@ -662,10 +722,15 @@ var CimplifyClient = class {
     const previous = this.accessToken;
     this.accessToken = null;
     this.sessionToken = null;
-    if (typeof window !== "undefined" && window.localStorage) {
-      localStorage.removeItem(SESSION_TOKEN_STORAGE_KEY);
+    this.sessionEpoch++;
+    try {
+      this.safeStorage()?.removeItem(SESSION_TOKEN_STORAGE_KEY);
+    } catch {
     }
     this.sessionToken = this.mintSessionToken();
+    if (this.sessionToken) {
+      this.broadcastSessionSync({ type: "cleared", token: this.sessionToken });
+    }
     this.hooks.onSessionChange?.({
       previousToken: previous,
       newToken: null,
@@ -674,42 +739,89 @@ var CimplifyClient = class {
     this.events.emit(AUTH_TOKEN_CHANGED, { token: null });
     this.events.emit(SESSION_CLEARED, {});
   }
-  setOrderToken(orderId, token) {
-    if (typeof window !== "undefined" && window.localStorage) {
+  getSessionEpoch() {
+    return this.sessionEpoch;
+  }
+  publishSessionClaimed(customerName) {
+    if (!this.sessionToken) return;
+    this.broadcastSessionSync({
+      type: "claimed",
+      token: this.sessionToken,
+      name: customerName
+    });
+  }
+  broadcastSessionSync(payload) {
+    try {
+      this.safeStorage()?.setItem(
+        SESSION_SYNC_STORAGE_KEY,
+        JSON.stringify({ ...payload, at: Date.now() })
+      );
+    } catch {
+    }
+  }
+  watchCrossTabSession() {
+    if (typeof window === "undefined" || typeof window.addEventListener !== "function") return;
+    window.addEventListener("storage", (event) => {
+      if (event.key !== SESSION_SYNC_STORAGE_KEY || !event.newValue) return;
+      let payload;
       try {
-        const entry = JSON.stringify({ token, storedAt: Date.now() });
-        localStorage.setItem(`${ORDER_TOKEN_PREFIX}${orderId}`, entry);
+        payload = JSON.parse(event.newValue);
       } catch {
+        return;
+      }
+      if (!payload?.token || payload.token === this.sessionToken) return;
+      if (payload.type === "claimed") {
+        this.sessionToken = payload.token;
+        this.events.emit(SESSION_CLAIMED, {
+          sessionToken: payload.token,
+          threadId: null,
+          customerName: payload.name ?? ""
+        });
+      } else if (payload.type === "cleared") {
+        this.accessToken = null;
+        this.sessionToken = payload.token;
+        this.sessionEpoch++;
+        this.events.emit(AUTH_TOKEN_CHANGED, { token: null });
+        this.events.emit(SESSION_CLEARED, {});
       }
+    });
+  }
+  setOrderToken(orderId, token) {
+    try {
+      const entry = JSON.stringify({ token, storedAt: Date.now() });
+      this.safeStorage()?.setItem(`${ORDER_TOKEN_PREFIX}${orderId}`, entry);
+    } catch {
     }
   }
   getOrderToken(orderId) {
-    if (typeof window !== "undefined" && window.localStorage) {
-      try {
-        const raw = localStorage.getItem(`${ORDER_TOKEN_PREFIX}${orderId}`);
-        if (!raw) return null;
-        const entry = JSON.parse(raw);
-        if (Date.now() - entry.storedAt > ORDER_TOKEN_TTL_MS) {
-          localStorage.removeItem(`${ORDER_TOKEN_PREFIX}${orderId}`);
-          return null;
-        }
-        return entry.token;
-      } catch {
+    try {
+      const storage = this.safeStorage();
+      if (!storage) return null;
+      const raw = storage.getItem(`${ORDER_TOKEN_PREFIX}${orderId}`);
+      if (!raw) return null;
+      const entry = JSON.parse(raw);
+      if (Date.now() - entry.storedAt > ORDER_TOKEN_TTL_MS) {
+        storage.removeItem(`${ORDER_TOKEN_PREFIX}${orderId}`);
         return null;
       }
+      return entry.token;
+    } catch {
+      return null;
     }
-    return null;
   }
   clearOrderTokens() {
-    if (typeof window !== "undefined" && window.localStorage) {
+    try {
+      const storage = this.safeStorage();
+      if (!storage) return;
       const keysToRemove = [];
-      for (let i = 0; i < localStorage.length; i++) {
-        const key = localStorage.key(i);
+      for (let i = 0; i < storage.length; i++) {
+        const key = storage.key(i);
         if (key?.startsWith(ORDER_TOKEN_PREFIX)) {
           keysToRemove.push(key);
         }
       }
-      keysToRemove.forEach((k) => localStorage.removeItem(k));
+      keysToRemove.forEach((k) => storage.removeItem(k));
+    } catch {
     }
   }
   setLocationId(locationId) {
@@ -768,22 +880,29 @@ var CimplifyClient = class {
       this.businessIdResolvePromise = null;
     }
   }
-  async authedFetch(url, options) {
-    return this.resilientFetch(url, options);
+  async authedFetch(url, options, timeoutMs) {
+    return this.resilientFetch(url, options, timeoutMs);
   }
   // Storage guards: even the `window.localStorage` property access throws in
   // some sandboxed iframes and strict private-browsing modes. These run in the
   // constructor at module load, so a throw would white-screen the whole app —
   // fall back to an in-memory session token instead.
-  loadSessionToken() {
+  safeStorage() {
     try {
       if (typeof window !== "undefined" && window.localStorage) {
-        return localStorage.getItem(SESSION_TOKEN_STORAGE_KEY);
+        return window.localStorage;
       }
     } catch {
     }
     return null;
   }
+  loadSessionToken() {
+    try {
+      return this.safeStorage()?.getItem(SESSION_TOKEN_STORAGE_KEY) ?? null;
+    } catch {
+      return null;
+    }
+  }
   /**
    * Mint the session token client-side so the very first request already
    * carries it. Without this, parallel first-load requests each get a
@@ -803,15 +922,15 @@ var CimplifyClient = class {
   }
   saveSessionToken(token) {
     try {
-      if (typeof window !== "undefined" && window.localStorage) {
-        localStorage.setItem(SESSION_TOKEN_STORAGE_KEY, token);
-      }
+      this.safeStorage()?.setItem(SESSION_TOKEN_STORAGE_KEY, token);
     } catch {
     }
   }
   captureSessionToken(response) {
+    if (typeof window === "undefined") return;
+    if (this.sessionToken) return;
     const token = response.headers.get(SESSION_TOKEN_HEADER);
-    if (token && token !== this.sessionToken) {
+    if (token) {
       this.sessionToken = token;
       this.saveSessionToken(token);
     }
@@ -839,7 +958,7 @@ var CimplifyClient = class {
     }
     return headers;
   }
-  async resilientFetch(url, options) {
+  async resilientFetch(url, options, timeoutMs) {
     const method = options.method || "GET";
     const path = url.replace(this.baseUrl, "").replace(this.linkApiUrl, "");
     const startTime = Date.now();
@@ -856,7 +975,7 @@ var CimplifyClient = class {
     for (let attempt = 0; attempt <= this.maxRetries; attempt++) {
       try {
         const controller = new AbortController();
-        const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+        const timeoutId = setTimeout(() => controller.abort(), timeoutMs ?? this.timeout);
         const response = await this.fetchImpl(url, {
           ...options,
           signal: controller.signal
@@ -987,29 +1106,41 @@ var CimplifyClient = class {
     });
   }
   async post(path, body, opts) {
-    const response = await this.authedFetch(this.buildUrl(this.baseUrl, path), {
-      method: "POST",
-      credentials: this.credentials,
-      headers: mergeOptionHeaders(this.getHeaders(), opts),
-      body: body ? JSON.stringify(body) : void 0
-    });
+    const response = await this.authedFetch(
+      this.buildUrl(this.baseUrl, path),
+      {
+        method: "POST",
+        credentials: this.credentials,
+        headers: mergeOptionHeaders(this.getHeaders(), opts),
+        body: body ? JSON.stringify(body) : void 0
+      },
+      opts?.timeoutMs
+    );
     return this.handleRestResponse(response);
   }
   async patch(path, body, opts) {
-    const response = await this.authedFetch(this.buildUrl(this.baseUrl, path), {
-      method: "PATCH",
-      credentials: this.credentials,
-      headers: mergeOptionHeaders(this.getHeaders(), opts),
-      body: body ? JSON.stringify(body) : void 0
-    });
+    const response = await this.authedFetch(
+      this.buildUrl(this.baseUrl, path),
+      {
+        method: "PATCH",
+        credentials: this.credentials,
+        headers: mergeOptionHeaders(this.getHeaders(), opts),
+        body: body ? JSON.stringify(body) : void 0
+      },
+      opts?.timeoutMs
+    );
     return this.handleRestResponse(response);
   }
   async delete(path, opts) {
-    const response = await this.authedFetch(this.buildUrl(this.baseUrl, path), {
-      method: "DELETE",
-      credentials: this.credentials,
-      headers: mergeOptionHeaders(this.getHeaders(), opts)
-    });
+    const response = await this.authedFetch(
+      this.buildUrl(this.baseUrl, path),
+      {
+        method: "DELETE",
+        credentials: this.credentials,
+        headers: mergeOptionHeaders(this.getHeaders(), opts)
+      },
+      opts?.timeoutMs
+    );
     return this.handleRestResponse(response);
   }
   async linkGet(path, opts) {
@@ -1025,12 +1156,16 @@ var CimplifyClient = class {
     });
   }
   async linkPost(path, body, opts) {
-    const response = await this.authedFetch(`${this.linkApiUrl}${path}`, {
-      method: "POST",
-      credentials: this.credentials,
-      headers: mergeOptionHeaders(this.getHeaders(), opts),
-      body: body ? JSON.stringify(body) : void 0
-    });
+    const response = await this.authedFetch(
+      `${this.linkApiUrl}${path}`,
+      {
+        method: "POST",
+        credentials: this.credentials,
+        headers: mergeOptionHeaders(this.getHeaders(), opts),
+        body: body ? JSON.stringify(body) : void 0
+      },
+      opts?.timeoutMs
+    );
     return this.handleRestResponse(response);
   }
   async linkDelete(path, opts) {