@convai/web-sdk 1.8.0-beta.5 → 1.8.0-beta.7

package/dist/embed/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Published-chat descriptor and grant helpers. Server callers must provide a
+ * caller-scoped requester ID when minting a grant.
+ *
+ * Import `@convai/web-sdk/embed/browser` in a browser to register the
+ * `<convai-chat>` custom element.
+ */
+export * from "./publicationApi.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/embed/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/embed/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,qBAAqB,CAAC"}

package/dist/embed/index.js

@@ -0,0 +1,9 @@
+/**
+ * Published-chat descriptor and grant helpers. Server callers must provide a
+ * caller-scoped requester ID when minting a grant.
+ *
+ * Import `@convai/web-sdk/embed/browser` in a browser to register the
+ * `<convai-chat>` custom element.
+ */
+export * from "./publicationApi.js";
+//# sourceMappingURL=index.js.map

package/dist/embed/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/embed/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,qBAAqB,CAAC","sourcesContent":["/**\n * Published-chat descriptor and grant helpers. Server callers must provide a\n * caller-scoped requester ID when minting a grant.\n *\n * Import `@convai/web-sdk/embed/browser` in a browser to register the\n * `<convai-chat>` custom element.\n */\nexport * from \"./publicationApi.js\";\n"]}

package/dist/embed/publicationApi.d.ts

@@ -0,0 +1,23 @@
+export interface PublishedChatDescriptor {
+    publication_id: string;
+    display_name: string;
+    description: string | null;
+    image_url: string | null;
+    mode: "text";
+}
+export type PublishedChatFetch = typeof fetch;
+export declare const DEFAULT_PUBLICATION_API_URL = "https://api.convai.com";
+export interface PublishedChatEndpoints {
+    descriptorUrl: URL;
+    launchGrantUrl: URL;
+}
+export interface PublishedChatSession {
+    descriptor: PublishedChatDescriptor;
+    launchToken: string;
+}
+export declare function parsePublishedChatUrl(value: string, name: string): URL;
+export declare function getPublishedChatEndpoints(publicationId: string, publicationApiUrl?: string): PublishedChatEndpoints;
+export declare function fetchPublishedChatDescriptor(descriptorUrl: string, fetchImpl?: PublishedChatFetch, signal?: AbortSignal): Promise<PublishedChatDescriptor>;
+export declare function requestPublishedChatGrant(launchGrantUrl: string, fetchImpl?: PublishedChatFetch, signal?: AbortSignal, requesterId?: string): Promise<string>;
+export declare function loadPublishedChatSession(publicationId: string, publicationApiUrl?: string, fetchImpl?: PublishedChatFetch, signal?: AbortSignal, requesterId?: string): Promise<PublishedChatSession>;
+//# sourceMappingURL=publicationApi.d.ts.map

package/dist/embed/publicationApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publicationApi.d.ts","sourceRoot":"","sources":["../../src/embed/publicationApi.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,kBAAkB,GAAG,OAAO,KAAK,CAAC;AAW9C,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAEpE,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,GAAG,CAAC;IACnB,cAAc,EAAE,GAAG,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,uBAAuB,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;CACrB;AA2CD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,GAAG,CActE;AAED,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,EACrB,iBAAiB,SAA8B,GAC9C,sBAAsB,CAYxB;AAUD,wBAAsB,4BAA4B,CAChD,aAAa,EAAE,MAAM,EACrB,SAAS,GAAE,kBAA0B,EACrC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,uBAAuB,CAAC,CAyBlC;AAED,wBAAsB,yBAAyB,CAC7C,cAAc,EAAE,MAAM,EACtB,SAAS,GAAE,kBAA0B,EACrC,MAAM,CAAC,EAAE,WAAW,EACpB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,CA+BjB;AAED,wBAAsB,wBAAwB,CAC5C,aAAa,EAAE,MAAM,EACrB,iBAAiB,CAAC,EAAE,MAAM,EAC1B,SAAS,GAAE,kBAA0B,EACrC,MAAM,CAAC,EAAE,WAAW,EACpB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,oBAAoB,CAAC,CAoB/B"}

package/dist/embed/publicationApi.js

@@ -0,0 +1,141 @@
+const LAUNCH_TOKEN_MIN_LENGTH = 32;
+const LAUNCH_TOKEN_MAX_LENGTH = 512;
+const PUBLICATION_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const PUBLICATION_CLIENT_ID_RE = /^[A-Za-z0-9_-]{16,128}$/;
+const PUBLICATION_CLIENT_ID_STORAGE_KEY = "convai.published-chat-client-id.v1";
+let inMemoryPublicationClientId;
+export const DEFAULT_PUBLICATION_API_URL = "https://api.convai.com";
+function newPublicationClientId() {
+    const clientId = globalThis.crypto?.randomUUID?.();
+    if (!clientId) {
+        throw new Error("Published chat requires a secure browser random source");
+    }
+    return clientId;
+}
+function publicationClientId() {
+    if (inMemoryPublicationClientId)
+        return inMemoryPublicationClientId;
+    try {
+        const stored = globalThis.localStorage?.getItem(PUBLICATION_CLIENT_ID_STORAGE_KEY);
+        if (stored && PUBLICATION_CLIENT_ID_RE.test(stored)) {
+            inMemoryPublicationClientId = stored;
+            return stored;
+        }
+    }
+    catch {
+        // Sandboxed embeds can block storage. Keep a per-page random fallback.
+    }
+    const generated = newPublicationClientId();
+    inMemoryPublicationClientId = generated;
+    try {
+        globalThis.localStorage?.setItem(PUBLICATION_CLIENT_ID_STORAGE_KEY, generated);
+    }
+    catch {
+        // The in-memory value still scopes retries in this embedded page.
+    }
+    return generated;
+}
+function resolvePublicationClientId(requesterId) {
+    if (requesterId)
+        return requesterId;
+    if (typeof window === "undefined") {
+        throw new Error("Server callers must provide a caller-scoped published chat requester ID");
+    }
+    return publicationClientId();
+}
+export function parsePublishedChatUrl(value, name) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new Error(`${name} must be an absolute URL`);
+    }
+    if (url.protocol !== "https:" && url.protocol !== "http:") {
+        throw new Error(`${name} must use HTTP or HTTPS`);
+    }
+    if (url.username || url.password) {
+        throw new Error(`${name} must not include credentials`);
+    }
+    return url;
+}
+export function getPublishedChatEndpoints(publicationId, publicationApiUrl = DEFAULT_PUBLICATION_API_URL) {
+    if (!PUBLICATION_ID_RE.test(publicationId)) {
+        throw new Error("publication-id must be a UUID");
+    }
+    const apiUrl = parsePublishedChatUrl(publicationApiUrl, "publication-api-url");
+    apiUrl.pathname = `${apiUrl.pathname.replace(/\/+$/, "")}/`;
+    const publicationPath = `chat-publications/${encodeURIComponent(publicationId)}`;
+    const descriptorUrl = new URL(publicationPath, apiUrl);
+    return {
+        descriptorUrl,
+        launchGrantUrl: new URL(`${publicationPath}/launch-grants`, apiUrl),
+    };
+}
+async function errorMessage(response, fallback) {
+    const payload = await response.json().catch(() => null);
+    const detail = payload?.detail ?? payload?.message ?? payload?.error;
+    return typeof detail === "string" && detail.trim()
+        ? detail.trim().slice(0, 240)
+        : fallback;
+}
+export async function fetchPublishedChatDescriptor(descriptorUrl, fetchImpl = fetch, signal) {
+    const url = parsePublishedChatUrl(descriptorUrl, "descriptor-url");
+    const response = await fetchImpl(url, {
+        method: "GET",
+        cache: "no-store",
+        credentials: "omit",
+        headers: { Accept: "application/json" },
+        signal,
+    });
+    if (!response.ok) {
+        throw new Error(await errorMessage(response, `Unable to load published chat (${response.status})`));
+    }
+    const payload = await response.json();
+    if (typeof payload?.publication_id !== "string" ||
+        typeof payload?.display_name !== "string" ||
+        (typeof payload?.description !== "string" && payload?.description !== null) ||
+        (typeof payload?.image_url !== "string" && payload?.image_url !== null) ||
+        payload?.mode !== "text") {
+        throw new Error("Published chat returned an invalid descriptor");
+    }
+    return payload;
+}
+export async function requestPublishedChatGrant(launchGrantUrl, fetchImpl = fetch, signal, requesterId) {
+    const effectiveRequesterId = resolvePublicationClientId(requesterId);
+    if (!PUBLICATION_CLIENT_ID_RE.test(effectiveRequesterId)) {
+        throw new Error("Published chat browser identifier is invalid");
+    }
+    const url = parsePublishedChatUrl(launchGrantUrl, "launch-grant-url");
+    const response = await fetchImpl(url, {
+        method: "POST",
+        cache: "no-store",
+        credentials: "omit",
+        headers: {
+            Accept: "application/json",
+            "X-Convai-Publication-Client": effectiveRequesterId,
+        },
+        signal,
+    });
+    if (!response.ok) {
+        throw new Error(await errorMessage(response, `Unable to start published chat (${response.status})`));
+    }
+    const payload = await response.json();
+    const launchToken = payload?.launch_token;
+    if (typeof launchToken !== "string" ||
+        launchToken.length < LAUNCH_TOKEN_MIN_LENGTH ||
+        launchToken.length > LAUNCH_TOKEN_MAX_LENGTH) {
+        throw new Error("Published chat returned an invalid launch grant");
+    }
+    return launchToken;
+}
+export async function loadPublishedChatSession(publicationId, publicationApiUrl, fetchImpl = fetch, signal, requesterId) {
+    const { descriptorUrl, launchGrantUrl } = getPublishedChatEndpoints(publicationId, publicationApiUrl);
+    const descriptor = await fetchPublishedChatDescriptor(descriptorUrl.toString(), fetchImpl, signal);
+    if (descriptor.publication_id.toLowerCase() !== publicationId.toLowerCase()) {
+        throw new Error("Published chat descriptor does not match publication-id");
+    }
+    const launchToken = await requestPublishedChatGrant(launchGrantUrl.toString(), fetchImpl, signal, requesterId);
+    return { descriptor, launchToken };
+}
+//# sourceMappingURL=publicationApi.js.map

package/dist/embed/publicationApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publicationApi.js","sourceRoot":"","sources":["../../src/embed/publicationApi.ts"],"names":[],"mappings":"AAUA,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,iBAAiB,GACrB,iEAAiE,CAAC;AACpE,MAAM,wBAAwB,GAAG,yBAAyB,CAAC;AAC3D,MAAM,iCAAiC,GAAG,oCAAoC,CAAC;AAE/E,IAAI,2BAA+C,CAAC;AAEpD,MAAM,CAAC,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AAYpE,SAAS,sBAAsB;IAC7B,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC;IACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,mBAAmB;IAC1B,IAAI,2BAA2B;QAAE,OAAO,2BAA2B,CAAC;IAEpE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,iCAAiC,CAAC,CAAC;QACnF,IAAI,MAAM,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,2BAA2B,GAAG,MAAM,CAAC;YACrC,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;IAED,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,2BAA2B,GAAG,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,iCAAiC,EAAE,SAAS,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,0BAA0B,CAAC,WAAoB;IACtD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,mBAAmB,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,IAAY;IAC/D,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,aAAqB,EACrB,iBAAiB,GAAG,2BAA2B;IAE/C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;IAC/E,MAAM,CAAC,QAAQ,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC;IAC5D,MAAM,eAAe,GAAG,qBAAqB,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;IACjF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACvD,OAAO;QACL,aAAa;QACb,cAAc,EAAE,IAAI,GAAG,CAAC,GAAG,eAAe,gBAAgB,EAAE,MAAM,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAkB,EAAE,QAAgB;IAC9D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,KAAK,CAAC;IACrE,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE;QAChD,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAC7B,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,aAAqB,EACrB,YAAgC,KAAK,EACrC,MAAoB;IAEpB,MAAM,GAAG,GAAG,qBAAqB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,MAAM;QACnB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACvC,MAAM;KACP,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,MAAM,YAAY,CAAC,QAAQ,EAAE,kCAAkC,QAAQ,CAAC,MAAM,GAAG,CAAC,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACtC,IACE,OAAO,OAAO,EAAE,cAAc,KAAK,QAAQ;QAC3C,OAAO,OAAO,EAAE,YAAY,KAAK,QAAQ;QACzC,CAAC,OAAO,OAAO,EAAE,WAAW,KAAK,QAAQ,IAAI,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;QAC3E,CAAC,OAAO,OAAO,EAAE,SAAS,KAAK,QAAQ,IAAI,OAAO,EAAE,SAAS,KAAK,IAAI,CAAC;QACvE,OAAO,EAAE,IAAI,KAAK,MAAM,EACxB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,OAAkC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,cAAsB,EACtB,YAAgC,KAAK,EACrC,MAAoB,EACpB,WAAoB;IAEpB,MAAM,oBAAoB,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IACrE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,GAAG,GAAG,qBAAqB,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,MAAM;QACnB,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,6BAA6B,EAAE,oBAAoB;SACpD;QACD,MAAM;KACP,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,MAAM,YAAY,CAAC,QAAQ,EAAE,mCAAmC,QAAQ,CAAC,MAAM,GAAG,CAAC,CACpF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,WAAW,GAAG,OAAO,EAAE,YAAY,CAAC;IAC1C,IACE,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,MAAM,GAAG,uBAAuB;QAC5C,WAAW,CAAC,MAAM,GAAG,uBAAuB,EAC5C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,aAAqB,EACrB,iBAA0B,EAC1B,YAAgC,KAAK,EACrC,MAAoB,EACpB,WAAoB;IAEpB,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,yBAAyB,CACjE,aAAa,EACb,iBAAiB,CAClB,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,4BAA4B,CACnD,aAAa,CAAC,QAAQ,EAAE,EACxB,SAAS,EACT,MAAM,CACP,CAAC;IACF,IAAI,UAAU,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,yBAAyB,CACjD,cAAc,CAAC,QAAQ,EAAE,EACzB,SAAS,EACT,MAAM,EACN,WAAW,CACZ,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AACrC,CAAC","sourcesContent":["export interface PublishedChatDescriptor {\n  publication_id: string;\n  display_name: string;\n  description: string | null;\n  image_url: string | null;\n  mode: \"text\";\n}\n\nexport type PublishedChatFetch = typeof fetch;\n\nconst LAUNCH_TOKEN_MIN_LENGTH = 32;\nconst LAUNCH_TOKEN_MAX_LENGTH = 512;\nconst PUBLICATION_ID_RE =\n  /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\nconst PUBLICATION_CLIENT_ID_RE = /^[A-Za-z0-9_-]{16,128}$/;\nconst PUBLICATION_CLIENT_ID_STORAGE_KEY = \"convai.published-chat-client-id.v1\";\n\nlet inMemoryPublicationClientId: string | undefined;\n\nexport const DEFAULT_PUBLICATION_API_URL = \"https://api.convai.com\";\n\nexport interface PublishedChatEndpoints {\n  descriptorUrl: URL;\n  launchGrantUrl: URL;\n}\n\nexport interface PublishedChatSession {\n  descriptor: PublishedChatDescriptor;\n  launchToken: string;\n}\n\nfunction newPublicationClientId(): string {\n  const clientId = globalThis.crypto?.randomUUID?.();\n  if (!clientId) {\n    throw new Error(\"Published chat requires a secure browser random source\");\n  }\n  return clientId;\n}\n\nfunction publicationClientId(): string {\n  if (inMemoryPublicationClientId) return inMemoryPublicationClientId;\n\n  try {\n    const stored = globalThis.localStorage?.getItem(PUBLICATION_CLIENT_ID_STORAGE_KEY);\n    if (stored && PUBLICATION_CLIENT_ID_RE.test(stored)) {\n      inMemoryPublicationClientId = stored;\n      return stored;\n    }\n  } catch {\n    // Sandboxed embeds can block storage. Keep a per-page random fallback.\n  }\n\n  const generated = newPublicationClientId();\n  inMemoryPublicationClientId = generated;\n  try {\n    globalThis.localStorage?.setItem(PUBLICATION_CLIENT_ID_STORAGE_KEY, generated);\n  } catch {\n    // The in-memory value still scopes retries in this embedded page.\n  }\n  return generated;\n}\n\nfunction resolvePublicationClientId(requesterId?: string): string {\n  if (requesterId) return requesterId;\n  if (typeof window === \"undefined\") {\n    throw new Error(\n      \"Server callers must provide a caller-scoped published chat requester ID\",\n    );\n  }\n  return publicationClientId();\n}\n\nexport function parsePublishedChatUrl(value: string, name: string): URL {\n  let url: URL;\n  try {\n    url = new URL(value);\n  } catch {\n    throw new Error(`${name} must be an absolute URL`);\n  }\n  if (url.protocol !== \"https:\" && url.protocol !== \"http:\") {\n    throw new Error(`${name} must use HTTP or HTTPS`);\n  }\n  if (url.username || url.password) {\n    throw new Error(`${name} must not include credentials`);\n  }\n  return url;\n}\n\nexport function getPublishedChatEndpoints(\n  publicationId: string,\n  publicationApiUrl = DEFAULT_PUBLICATION_API_URL,\n): PublishedChatEndpoints {\n  if (!PUBLICATION_ID_RE.test(publicationId)) {\n    throw new Error(\"publication-id must be a UUID\");\n  }\n  const apiUrl = parsePublishedChatUrl(publicationApiUrl, \"publication-api-url\");\n  apiUrl.pathname = `${apiUrl.pathname.replace(/\\/+$/, \"\")}/`;\n  const publicationPath = `chat-publications/${encodeURIComponent(publicationId)}`;\n  const descriptorUrl = new URL(publicationPath, apiUrl);\n  return {\n    descriptorUrl,\n    launchGrantUrl: new URL(`${publicationPath}/launch-grants`, apiUrl),\n  };\n}\n\nasync function errorMessage(response: Response, fallback: string): Promise<string> {\n  const payload = await response.json().catch(() => null);\n  const detail = payload?.detail ?? payload?.message ?? payload?.error;\n  return typeof detail === \"string\" && detail.trim()\n    ? detail.trim().slice(0, 240)\n    : fallback;\n}\n\nexport async function fetchPublishedChatDescriptor(\n  descriptorUrl: string,\n  fetchImpl: PublishedChatFetch = fetch,\n  signal?: AbortSignal,\n): Promise<PublishedChatDescriptor> {\n  const url = parsePublishedChatUrl(descriptorUrl, \"descriptor-url\");\n  const response = await fetchImpl(url, {\n    method: \"GET\",\n    cache: \"no-store\",\n    credentials: \"omit\",\n    headers: { Accept: \"application/json\" },\n    signal,\n  });\n  if (!response.ok) {\n    throw new Error(\n      await errorMessage(response, `Unable to load published chat (${response.status})`),\n    );\n  }\n  const payload = await response.json();\n  if (\n    typeof payload?.publication_id !== \"string\" ||\n    typeof payload?.display_name !== \"string\" ||\n    (typeof payload?.description !== \"string\" && payload?.description !== null) ||\n    (typeof payload?.image_url !== \"string\" && payload?.image_url !== null) ||\n    payload?.mode !== \"text\"\n  ) {\n    throw new Error(\"Published chat returned an invalid descriptor\");\n  }\n  return payload as PublishedChatDescriptor;\n}\n\nexport async function requestPublishedChatGrant(\n  launchGrantUrl: string,\n  fetchImpl: PublishedChatFetch = fetch,\n  signal?: AbortSignal,\n  requesterId?: string,\n): Promise<string> {\n  const effectiveRequesterId = resolvePublicationClientId(requesterId);\n  if (!PUBLICATION_CLIENT_ID_RE.test(effectiveRequesterId)) {\n    throw new Error(\"Published chat browser identifier is invalid\");\n  }\n  const url = parsePublishedChatUrl(launchGrantUrl, \"launch-grant-url\");\n  const response = await fetchImpl(url, {\n    method: \"POST\",\n    cache: \"no-store\",\n    credentials: \"omit\",\n    headers: {\n      Accept: \"application/json\",\n      \"X-Convai-Publication-Client\": effectiveRequesterId,\n    },\n    signal,\n  });\n  if (!response.ok) {\n    throw new Error(\n      await errorMessage(response, `Unable to start published chat (${response.status})`),\n    );\n  }\n  const payload = await response.json();\n  const launchToken = payload?.launch_token;\n  if (\n    typeof launchToken !== \"string\" ||\n    launchToken.length < LAUNCH_TOKEN_MIN_LENGTH ||\n    launchToken.length > LAUNCH_TOKEN_MAX_LENGTH\n  ) {\n    throw new Error(\"Published chat returned an invalid launch grant\");\n  }\n  return launchToken;\n}\n\nexport async function loadPublishedChatSession(\n  publicationId: string,\n  publicationApiUrl?: string,\n  fetchImpl: PublishedChatFetch = fetch,\n  signal?: AbortSignal,\n  requesterId?: string,\n): Promise<PublishedChatSession> {\n  const { descriptorUrl, launchGrantUrl } = getPublishedChatEndpoints(\n    publicationId,\n    publicationApiUrl,\n  );\n  const descriptor = await fetchPublishedChatDescriptor(\n    descriptorUrl.toString(),\n    fetchImpl,\n    signal,\n  );\n  if (descriptor.publication_id.toLowerCase() !== publicationId.toLowerCase()) {\n    throw new Error(\"Published chat descriptor does not match publication-id\");\n  }\n  const launchToken = await requestPublishedChatGrant(\n    launchGrantUrl.toString(),\n    fetchImpl,\n    signal,\n    requesterId,\n  );\n  return { descriptor, launchToken };\n}\n"]}

package/dist/react/components/ConvaiWidget.d.ts

@@ -1,4 +1,5 @@
-import type { IConvaiClient } from "../../core/types.js";
+import type { IConvaiClient, PublishedChatConnectOptions } from "../../core/types.js";
+import type { PublishedChatDescriptor } from "../../embed/publicationApi.js";
 interface ConvaiWidgetProps {
     /** Convai client instance (required) */
     convaiClient: IConvaiClient & {
@@ -22,6 +23,15 @@ interface ConvaiWidgetProps {
      * When true, the widget will open directly in voice mode with microphone enabled.
      */
     defaultVoiceMode?: boolean;
+    /**
+     * Mint a fresh single-use grant when a published-chat session is reopened.
+     * Required when using this widget with connectWithPublicationGrant().
+     */
+    requestPublicationGrant?: () => Promise<string>;
+    /** Core endpoint override used with requestPublicationGrant. */
+    publishedChatConnectOptions?: PublishedChatConnectOptions;
+    /** Public descriptor used to label a credential-free published session. */
+    publishedChatDescriptor?: Pick<PublishedChatDescriptor, "display_name" | "image_url">;
 }
 /**
  * ConvaiWidget - A consolidated chat widget component for real-time conversations

package/dist/react/components/ConvaiWidget.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ConvaiWidget.d.ts","sourceRoot":"","sources":["../../../src/react/components/ConvaiWidget.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AA0CtD,UAAU,iBAAiB;IACzB,wCAAwC;IACxC,YAAY,EAAE,aAAa,GAAG;QAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,OAAO,CAAC;QACtB,cAAc,EAAE,OAAO,CAAC;QACxB,mBAAmB,EAAE,OAAO,CAAC;KAC9B,CAAC;IACF;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC,iBAAiB,CA21BpD,CAAC"}
+{"version":3,"file":"ConvaiWidget.d.ts","sourceRoot":"","sources":["../../../src/react/components/ConvaiWidget.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,aAAa,EACb,2BAA2B,EAC5B,MAAM,kBAAkB,CAAC;AAI1B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAwC1E,UAAU,iBAAiB;IACzB,wCAAwC;IACxC,YAAY,EAAE,aAAa,GAAG;QAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,OAAO,CAAC;QACtB,cAAc,EAAE,OAAO,CAAC;QACxB,mBAAmB,EAAE,OAAO,CAAC;KAC9B,CAAC;IACF;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,gEAAgE;IAChE,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;IAC1D,2EAA2E;IAC3E,uBAAuB,CAAC,EAAE,IAAI,CAC5B,uBAAuB,EACvB,cAAc,GAAG,WAAW,CAC7B,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC,iBAAiB,CA46BpD,CAAC"}

package/dist/react/components/ConvaiWidget.js

@@ -7,6 +7,7 @@ import { PiWaveform } from "react-icons/pi";
 import { RoomContext } from "@livekit/components-react";
 import { useCharacterInfo } from "../hooks/useCharacterInfo.js";
 import { AudioRenderer } from "../../vanilla/AudioRenderer.js";
+import { freshPublicationGrantOptions } from "../../core/publishedChat.js";
 // Import styled components and theme from rtc-widget
 import { ConvaiContainer, MorphingContainer, ButtonContent, Logo, ChatContent, Header, Title, CloseButton, SettingsButton, Content, Footer, InputContainer, Input, ActionButton, aeroTheme, iosTransitions, ConvaiLogo, ChevronDown, } from "./rtc-widget/index.js";
 // Import message components
@@ -51,20 +52,36 @@ import { MessageList, SettingsTray, VoiceModeOverlay, FloatingVideo, } from "./r
  * }
  * ```
  */
-export const ConvaiWidget = ({ convaiClient, showVideo = true, showScreenShare = true, defaultVoiceMode = true, }) => {
+export const ConvaiWidget = ({ convaiClient, showVideo = true, showScreenShare = true, defaultVoiceMode = true, requestPublicationGrant, publishedChatConnectOptions, publishedChatDescriptor, }) => {
+    const isTextOnly = Boolean(requestPublicationGrant) || convaiClient.connectionType === "text";
     // Fetch character information dynamically from client's stored values
-    const { name: characterName, image: characterImage, isLoading: isCharacterLoading, } = useCharacterInfo(convaiClient.characterId || undefined, convaiClient.apiKey || undefined, convaiClient.authToken || undefined);
+    const { name: fetchedCharacterName, image: fetchedCharacterImage, isLoading: isFetchedCharacterLoading, } = useCharacterInfo(convaiClient.characterId || undefined, convaiClient.apiKey || undefined, convaiClient.authToken || undefined);
+    const characterName = publishedChatDescriptor?.display_name || fetchedCharacterName;
+    const characterImage = publishedChatDescriptor?.image_url ?? fetchedCharacterImage;
+    const isCharacterLoading = publishedChatDescriptor
+        ? false
+        : isFetchedCharacterLoading;
     // UI State
     const [isOpen, setIsOpen] = useState(false);
     const [inputValue, setInputValue] = useState("");
     const [isSettingsOpen, setIsSettingsOpen] = useState(false);
-    const [isVoiceMode, setIsVoiceMode] = useState(defaultVoiceMode);
+    const [isVoiceMode, setIsVoiceMode] = useState(defaultVoiceMode && !isTextOnly);
     const [isMuted, setIsMuted] = useState(false); // Character audio starts unmuted
     const [isVideoVisible, setIsVideoVisible] = useState(false);
     const [hasEnteredDefaultVoiceMode, setHasEnteredDefaultVoiceMode] = useState(false);
     const settingsButtonRef = useRef(null);
     /** True after we have connected at least once; used to call reconnect() instead of connect() when opening after disconnect */
     const hasConnectedBeforeRef = useRef(false);
+    /** Prevent repeated open clicks from minting multiple one-time publication grants. */
+    const isStartingConnectionRef = useRef(false);
+    /** Avoid opening a room after this widget has been removed from the tree. */
+    const isUnmountedRef = useRef(false);
+    // Only published sessions wait for Core's bot-ready handshake. A normal
+    // authenticated text session still uses the text-only layout, but can send
+    // as soon as it connects.
+    const requiresBotReadyForText = Boolean(requestPublicationGrant) || convaiClient.isPublishedChatSession;
+    const canSendText = convaiClient.state.isConnected &&
+        (!requiresBotReadyForText || convaiClient.isBotReady);
     // Character info from API (using client's stored values)
     const selectedCharacter = {
         id: convaiClient.characterId || "unknown",
@@ -108,21 +125,44 @@ export const ConvaiWidget = ({ convaiClient, showVideo = true, showScreenShare =
     };
     // Event Handlers
     const handleToggle = async () => {
+        if (isStartingConnectionRef.current) {
+            return;
+        }
         // Connect on first click if not already connected/connecting
         if (!convaiClient.state.isConnected && !convaiClient.state.isConnecting) {
+            isStartingConnectionRef.current = true;
             try {
-                // Use reconnect when opening again after a disconnect (reuses stored config)
-                if (hasConnectedBeforeRef.current && typeof convaiClient.reconnect === "function") {
+                if (requestPublicationGrant || convaiClient.isPublishedChatSession) {
+                    if (!requestPublicationGrant) {
+                        throw new Error("Published chat widgets require requestPublicationGrant to start a new session");
+                    }
+                    if (!convaiClient.connectWithPublicationGrant) {
+                        throw new Error("This Convai client does not support published chat connections");
+                    }
+                    const launchToken = await requestPublicationGrant();
+                    if (isUnmountedRef.current)
+                        return;
+                    await convaiClient.connectWithPublicationGrant(launchToken, freshPublicationGrantOptions(publishedChatConnectOptions));
+                }
+                else if (hasConnectedBeforeRef.current &&
+                    typeof convaiClient.reconnect === "function") {
                     await convaiClient.reconnect();
                 }
                 else {
                     await convaiClient.connect();
                 }
+                if (isUnmountedRef.current) {
+                    await convaiClient.disconnect();
+                    return;
+                }
                 setIsOpen(true); // Open widget after successful connection
             }
             catch (error) {
                 console.error("Failed to connect:", error);
             }
+            finally {
+                isStartingConnectionRef.current = false;
+            }
         }
         else {
             // Just toggle open/close if already connected
@@ -136,7 +176,7 @@ export const ConvaiWidget = ({ convaiClient, showVideo = true, showScreenShare =
         setInputValue(e.target.value);
     };
     const handleSend = () => {
-        if (inputValue.trim() && convaiClient.state.isConnected) {
+        if (inputValue.trim() && canSendText) {
             convaiClient.sendUserTextMessage(inputValue);
             setInputValue("");
         }
@@ -209,6 +249,12 @@ export const ConvaiWidget = ({ convaiClient, showVideo = true, showScreenShare =
     const handleSettingsToggle = () => {
         setIsSettingsOpen(!isSettingsOpen);
     };
+    useEffect(() => {
+        isUnmountedRef.current = false;
+        return () => {
+            isUnmountedRef.current = true;
+        };
+    }, []);
     // Remember that we have connected at least once (so we use reconnect() next time after disconnect)
     useEffect(() => {
         if (convaiClient.state.isConnected) {
@@ -232,6 +278,11 @@ export const ConvaiWidget = ({ convaiClient, showVideo = true, showScreenShare =
         setIsVideoVisible(convaiClient.isVideoEnabled);
     }, [convaiClient.isVideoEnabled]);
     // Ensure microphone is muted when not in voice mode
+    useEffect(() => {
+        if (isTextOnly && isVoiceMode) {
+            setIsVoiceMode(false);
+        }
+    }, [isTextOnly, isVoiceMode]);
     useEffect(() => {
         const ensureMicState = async () => {
             if (!isVoiceMode && !convaiClient.isAudioMuted) {
@@ -245,6 +296,7 @@ export const ConvaiWidget = ({ convaiClient, showVideo = true, showScreenShare =
     useEffect(() => {
         if (isOpen &&
             defaultVoiceMode &&
+            !isTextOnly &&
             convaiClient.state.isConnected &&
             !hasEnteredDefaultVoiceMode &&
             !isVoiceMode) {
@@ -260,7 +312,7 @@ export const ConvaiWidget = ({ convaiClient, showVideo = true, showScreenShare =
             };
             enterVoiceMode();
         }
-    }, [isOpen, defaultVoiceMode, convaiClient.state.isConnected, hasEnteredDefaultVoiceMode, isVoiceMode, convaiClient]);
+    }, [isOpen, defaultVoiceMode, isTextOnly, convaiClient.state.isConnected, hasEnteredDefaultVoiceMode, isVoiceMode, convaiClient]);
     // Close settings when clicking outside
     useEffect(() => {
         const handleClickOutside = (event) => {
@@ -495,7 +547,7 @@ export const ConvaiWidget = ({ convaiClient, showVideo = true, showScreenShare =
                                                 flexShrink: 0,
                                                 padding: 0,
                                                 outline: "none",
-                                            }, "aria-label": "Exit Voice Mode", title: "Exit voice mode", children: _jsx(FiPhoneOff, { size: 20 }) }, "voice-mode-exit")) : (_jsx(_Fragment, { children: _jsxs(InputContainer, { style: { flex: 1, position: "relative" }, children: [_jsx(Input, { type: "text", placeholder: "Conversation", value: inputValue, onChange: handleInputChange, onKeyPress: handleKeyPress, style: { paddingRight: "2.75rem" } }), _jsx("div", { style: {
+                                            }, "aria-label": "Exit Voice Mode", title: "Exit voice mode", children: _jsx(FiPhoneOff, { size: 20 }) }, "voice-mode-exit")) : (_jsx(_Fragment, { children: _jsxs(InputContainer, { style: { flex: 1, position: "relative" }, children: [_jsx(Input, { type: "text", placeholder: "Conversation", value: inputValue, onChange: handleInputChange, onKeyPress: handleKeyPress, disabled: !canSendText, style: { paddingRight: "2.75rem" } }), _jsx("div", { style: {
                                                             position: "absolute",
                                                             right: "0.375rem",
                                                             top: "50%",
@@ -510,10 +562,10 @@ export const ConvaiWidget = ({ convaiClient, showVideo = true, showScreenShare =
                                                             alignItems: "center",
                                                             justifyContent: "center",
                                                             zIndex: 2,
-                                                        }, children: _jsx(AnimatePresence, { mode: "wait", children: inputValue.length > 0 ? (_jsx(ActionButton, { initial: { y: "100%" }, animate: { y: "0%" }, exit: { y: "-100%" }, transition: {
+                                                        }, children: _jsx(AnimatePresence, { mode: "wait", children: inputValue.length > 0 || isTextOnly ? (_jsx(ActionButton, { initial: { y: "100%" }, animate: { y: "0%" }, exit: { y: "-100%" }, transition: {
                                                                     duration: 0.1,
                                                                     ease: "linear",
-                                                                }, onClick: handleSend, whileTap: { scale: 0.9 }, style: {
+                                                                }, onClick: handleSend, disabled: inputValue.length === 0 || !canSendText, whileTap: { scale: 0.9 }, style: {
                                                                     position: "absolute",
                                                                     top: 0,
                                                                     left: 0,
@@ -548,7 +600,11 @@ export const ConvaiWidget = ({ convaiClient, showVideo = true, showScreenShare =
                                                                     flexShrink: 0,
                                                                     padding: 0,
                                                                     outline: "none",
-                                                                }, "aria-label": "Enter Voice Mode", title: "Use voice mode", children: _jsx(PiWaveform, { size: 20 }) }, "voice")) }) })] }) })) })] }))] }), convaiClient.state.isConnected && (_jsx(SettingsTray, { isOpen: isSettingsOpen, onReset: handleReset, onDisconnect: handleDisconnect, onToggleVideo: convaiClient.connectionType === "video" && showVideo
+                                                                }, "aria-label": "Enter Voice Mode", title: "Use voice mode", children: _jsx(PiWaveform, { size: 20 }) }, "voice")) }) })] }) })) })] }))] }), convaiClient.state.isConnected && (_jsx(SettingsTray, { isOpen: isSettingsOpen, onReset: convaiClient.isPublishedChatSession && !requestPublicationGrant
+                            ? undefined
+                            : handleReset, onDisconnect: convaiClient.isPublishedChatSession && !requestPublicationGrant
+                            ? undefined
+                            : handleDisconnect, onToggleVideo: convaiClient.connectionType === "video" && showVideo
                             ? handleToggleVideo
                             : undefined, isVideoVisible: isVideoVisible, onToggleScreenShare: convaiClient.connectionType === "video" && showScreenShare
                             ? handleToggleScreenShare