@deway-ai/web-sdk 0.36.0

package/README.md

@@ -0,0 +1,302 @@
+# Deway Web SDK
+
+[![Accessibility](https://img.shields.io/badge/accessibility-WCAG%202.1%20AA-green)](./documentation/accessibility/compliance.md)
+
+A lightweight TypeScript SDK for adding an AI-powered user engagement engine by Deway to your web app.
+
+## Quick Install with AI Assistant
+
+Copy and paste this prompt to your AI coding assistant (Claude, Copilot, etc.) to get Deway set up with best practices:
+
+```text
+Install and integrate the Deway Web SDK (@deway-ai/web-sdk) into my project.
+
+PACKAGE INFO:
+- Name: @deway-ai/web-sdk
+- Purpose: Lightweight TypeScript SDK that adds an AI-powered user engagement engine
+- Supports: React, Next.js, Vue, Nuxt, Angular, and vanilla JS
+- Includes full TypeScript definitions
+
+TASKS:
+1. Detect my framework and package manager (npm, pnpm, or yarn) from lock files
+2. Install the SDK using the detected package manager
+3. For vanilla JS/HTML projects: Use the CDN script instead:
+   <script src="https://unpkg.com/@deway-ai/web-sdk/dist/loader.umd.js"></script>
+4. Initialize early in the app lifecycle (use appropriate lifecycle hook for the framework):
+   - Import: import Deway from '@deway-ai/web-sdk'
+   - Call Deway.init() with the appKey:
+     Deway.init({ appKey: 'your-deway-app-key' })
+5. Identify users after authentication:
+   if (user?.id) Deway.identify(user.id);
+
+IMPLEMENTATION NOTES:
+- Follow my existing project structure and code style conventions
+- Use appropriate lifecycle hooks: React (useEffect), Vue (onMounted), Angular (ngOnInit)
+
+FIRST analyze my project structure and detect the framework and package manager. Then and only then implement the Deway Web SDK integration accordingly.
+```
+
+## Installation
+
+```bash
+npm install @deway-ai/web-sdk
+# or
+pnpm add @deway-ai/web-sdk
+# or
+yarn add @deway-ai/web-sdk
+```
+
+## Quick Start
+
+### Basic Integration
+
+```typescript
+import Deway from '@deway-ai/web-sdk';
+
+// Initialize the SDK
+Deway.init({
+    appKey: 'your-app-key'
+});
+
+// Identify a user
+Deway.identify('user-123');
+```
+
+**Note:** `Deway.init()` must be called before other methods. User identification via `Deway.identify()` enables activity
+tracking.
+
+### HTML/JavaScript Integration
+
+```html
+
+<script src="https://unpkg.com/@deway-ai/web-sdk/dist/loader.umd.js"></script>
+<script>
+    Deway.init({
+        appKey: 'your-app-key'
+    });
+
+    Deway.identify('user-123');
+</script>
+```
+
+## Configuration
+
+```typescript
+Deway.init({
+    appKey: string,                               // Required: Your Deway app key
+    apiEndpoint: string | undefined,              // Optional: Custom API endpoint
+    wsEndpoint: string | undefined,               // Optional: Custom WebSocket endpoint
+    isDevelopment: boolean | undefined,           // Optional: Enable dev mode logging (default: false)
+    autoShowBubble: boolean | undefined,          // Optional: Auto-show bubble (default: true)
+    bubbleConfig: BubbleConfig | undefined,       // Optional: Bubble appearance customization
+});
+```
+
+### BubbleConfig
+
+Customize the chat bubble appearance:
+
+```typescript
+interface BubbleConfig {
+    position?: BubblePosition;  // Position on screen
+}
+
+enum BubblePosition {
+    BOTTOM_LEFT = "bottom-left",
+    BOTTOM_RIGHT = "bottom-right"  // default
+}
+```
+
+### Example with Custom Configuration
+
+```typescript
+Deway.init({
+    appKey: 'your-app-key',
+    isDevelopment: true,
+    autoShowBubble: true,
+    bubbleConfig: {
+        position: 'bottom-left'
+    }
+});
+```
+
+## API Reference
+
+### `Deway.init(config)`
+
+Initialize the SDK with configuration options. Must be called before using other methods.
+
+### `Deway.identify(userId)`
+
+Associate a user ID with the current session for personalized experiences.
+
+### `Deway.reportEvent(name, params)`
+
+Report a custom event with the given name and parameters.
+
+**Parameters:**
+
+- `name` (string): Event name (will be normalized: trimmed, lowercased, special characters replaced with underscores)
+- `params` (object): Event parameters as a plain object
+
+**Example:**
+
+```typescript
+Deway.reportEvent('Product Purchased', {
+    product_id: 'ABC-123',
+    quantity: 5,
+    price: 99.99
+});
+// Event sent with normalized name: "product_purchased"
+```
+
+### `Deway.setUserProfile(userProfile)`
+
+Set or update the user profile for the currently identified user.
+
+**Parameters:**
+
+- `userProfile` (object): User profile data as a plain object. Can contain any JSON-serializable properties.
+
+**Example:**
+
+```typescript
+Deway.setUserProfile({
+    name: 'Jane Doe',
+    email: 'jane@example.com',
+    age: 28,
+    preferences: {
+        theme: 'dark',
+        notifications: true
+    }
+});
+```
+
+**Notes:**
+
+- Profile is upserted (created if new, replaced if exists)
+- Profile data completely replaces existing profile on each call
+
+### `Deway.showBubble(config?)`
+
+Show the AI chat bubble. Optional configuration for appearance customization.
+
+### `Deway.hideBubble()`
+
+Hide the AI chat bubble.
+
+### `Deway.isBubbleVisible()`
+
+Check if the bubble is currently visible.
+
+### `Deway.destroy()`
+
+Clean up SDK resources and stop all tracking.
+
+## Framework Examples
+
+### React
+
+```tsx
+import {useEffect} from 'react';
+import Deway from '@deway-ai/web-sdk';
+
+function App() {
+    useEffect(() => {
+        Deway.init({
+            appKey: 'your-app-key'
+        });
+
+        // Identify user when available
+        if (user?.id) {
+            Deway.identify(user.id);
+        }
+    }, [user?.id]);
+
+    return <div>Your App</div>;
+}
+```
+
+### Vue
+
+```vue
+
+<script setup>
+  import {onMounted} from 'vue';
+  import Deway from '@deway-ai/web-sdk';
+
+  onMounted(() => {
+    Deway.init({
+      appKey: 'your-app-key'
+    });
+  });
+</script>
+```
+
+### Angular
+
+```typescript
+import {Component, OnInit} from '@angular/core';
+import Deway from '@deway-ai/web-sdk';
+
+@Component({
+    selector: 'app-root',
+    template: '<div>Your App</div>'
+})
+export class AppComponent implements OnInit {
+    ngOnInit() {
+        Deway.init({
+            appKey: 'your-app-key'
+        });
+    }
+}
+```
+
+## Features
+
+- **AI-powered user engagement and assistance**: Interactive chat interface for user support
+- **Automatic user behavior analysis**: Intelligent tracking and understanding of user interactions
+- **Framework-agnostic integration**: Works with React, Vue, Angular, and vanilla JavaScript
+- **Full TypeScript support**: Complete type definitions included
+- **Lightweight**: Minimal bundle size impact
+
+## Edge Cases & Internal Behavior
+
+### Error Handling
+
+The SDK handles all errors internally. Callers don't need try-catch blocks around SDK methods. Failed operations are
+logged to the console and retried automatically when appropriate.
+
+### State Persistence
+
+User identification and settings persist across page reloads via localStorage. Once a user is identified, they remain
+identified until `Deway.destroy()` is called or localStorage is cleared.
+
+### Multiple init() Calls
+
+Calling `Deway.init()` multiple times is safe. Subsequent calls after the first are ignored.
+
+### Automatic Retries
+
+Failed API calls and uploads are automatically retried with exponential backoff. No manual intervention required.
+
+### Call Queue
+
+All SDK calls should be called after the SDK is initialized via `Deway.init()`, and the user is identified via
+`Deway.identify()`.
+In case a call is made before `init` or `identify` the SDK queues the call internally and eventually executed once the
+prerequisite calls were made.
+
+## Troubleshooting
+
+### Bubble doesn't appear
+
+- Check `autoShowBubble` is set to `true` OR manually call `Deway.showBubble()`
+- Verify `Deway.init()` was called with valid `appKey`
+- Check browser console for initialization errors
+
+### User identification not working
+
+- Ensure `Deway.init()` is called before `Deway.identify()`
+- User ID must be non-empty string
+- Check browser console for error logs

package/dist/loader.d.ts

@@ -0,0 +1,12 @@
+import { BubbleConfig } from '../deway-bubble/models/bubble-config';
+import { DewayConfig } from '../sdk/types';
+import { IDeway } from '../sdk/types';
+
+export { BubbleConfig }
+
+declare const Deway: IDeway;
+export default Deway;
+
+export { DewayConfig }
+
+export { }

package/dist/loader.es.js

@@ -0,0 +1,497 @@
+const w = "deway-sdk-config", p = ["Understanding intent", "Reading web page", "Browsing the docs", "Enriching context", "Validating understanding", "Crafting response"];
+class S {
+  saveConfig(e) {
+    if (window?.localStorage)
+      try {
+        const t = JSON.stringify(e);
+        window.localStorage.setItem(w, t);
+      } catch (t) {
+        console.warn("Failed to save SDK config to localStorage:", t);
+      }
+  }
+  loadConfig() {
+    if (window?.localStorage)
+      try {
+        const e = window.localStorage.getItem(w);
+        return e ? JSON.parse(e) : null;
+      } catch (e) {
+        return console.warn("Failed to load SDK config from localStorage:", e), null;
+      }
+    return null;
+  }
+  getExcludedVendors() {
+    return this.loadConfig()?.excludedVendors ?? [];
+  }
+  getAssistantName() {
+    return this.loadConfig()?.assistantName ?? "Assistant";
+  }
+  getAiDisclaimer() {
+    return this.loadConfig()?.aiDisclaimer;
+  }
+  getThinkingMessages() {
+    return this.loadConfig()?.thinkingMessages ?? p;
+  }
+  getHumanHandoffUrl() {
+    return this.loadConfig()?.humanHandoffUrl;
+  }
+}
+class s {
+  static CACHE_KEY = "deway-sdk-cache";
+  static DB_NAME = "DewaySdk";
+  static DB_VERSION = 1;
+  static STORE_NAME = "sdk";
+  async cacheSDK(e, t, o, n) {
+    try {
+      const c = (await this.openIndexedDB()).transaction([s.STORE_NAME], "readwrite").objectStore(s.STORE_NAME);
+      await new Promise((h, y) => {
+        const d = c.put({
+          id: "latest",
+          code: e,
+          version: t,
+          checksum: o,
+          signature: n,
+          timestamp: Date.now()
+        });
+        d.onsuccess = () => h(d.result), d.onerror = () => y(d.error);
+      }), console.debug("SDK cached in IndexedDB");
+    } catch {
+      try {
+        const a = JSON.stringify({
+          code: e,
+          version: t,
+          checksum: o,
+          signature: n,
+          timestamp: Date.now()
+        });
+        localStorage.setItem(s.CACHE_KEY, a), console.debug("SDK cached in localStorage");
+      } catch (a) {
+        console.warn("Unable to cache SDK:", a);
+      }
+    }
+  }
+  async getCachedSDK() {
+    try {
+      const o = (await this.openIndexedDB()).transaction([s.STORE_NAME], "readonly").objectStore(s.STORE_NAME), n = await new Promise((i, a) => {
+        const c = o.get("latest");
+        c.onsuccess = () => i(c.result || null), c.onerror = () => a(c.error);
+      });
+      if (n)
+        return console.debug("Found cached SDK in IndexedDB"), n;
+    } catch {
+      console.debug("IndexedDB unavailable, trying localStorage");
+    }
+    try {
+      const e = localStorage.getItem(s.CACHE_KEY);
+      if (e)
+        return console.debug("Found cached SDK in localStorage"), JSON.parse(e);
+    } catch (e) {
+      console.warn("Failed to read from localStorage:", e);
+    }
+    return null;
+  }
+  openIndexedDB() {
+    return new Promise((e, t) => {
+      const o = indexedDB.open(s.DB_NAME, s.DB_VERSION);
+      o.onerror = () => t(o.error), o.onsuccess = () => e(o.result), o.onupgradeneeded = (n) => {
+        const i = n.target.result;
+        i.objectStoreNames.contains(s.STORE_NAME) || i.createObjectStore(s.STORE_NAME, { keyPath: "id" });
+      };
+    });
+  }
+}
+async function b(r) {
+  const t = new TextEncoder().encode(r), o = await crypto.subtle.digest("SHA-256", t);
+  return Array.from(new Uint8Array(o)).map((i) => i.toString(16).padStart(2, "0")).join("");
+}
+function g(r) {
+  const e = atob(r), t = new Uint8Array(e.length);
+  for (let o = 0; o < e.length; o++)
+    t[o] = e.charCodeAt(o);
+  return t;
+}
+function D(r) {
+  const e = new Uint8Array(r.length / 2);
+  for (let t = 0; t < r.length; t += 2)
+    e[t / 2] = Number.parseInt(r.substr(t, 2), 16);
+  return e;
+}
+async function E(r, e, t) {
+  try {
+    const o = g(r), n = D(e), i = g(t), a = await crypto.subtle.importKey("raw", o, { name: "Ed25519" }, !1, ["verify"]);
+    return await crypto.subtle.verify("Ed25519", a, i, n);
+  } catch (o) {
+    return console.error("Ed25519 signature verification failed:", o), !1;
+  }
+}
+async function C(r, e, t, o) {
+  if (!e || !t)
+    throw new Error("SDK verification failed: Missing security headers");
+  if (await b(r) !== e)
+    throw new Error("SDK verification failed: Checksum mismatch - content tampered");
+  if (!await E(o, e, t))
+    throw new Error("SDK verification failed: Invalid signature - content tampered");
+}
+class K {
+  cleanApiEndpoint(e) {
+    return e.trim().replace(/\/+$/, "");
+  }
+  async fetchSDK(e, t, o) {
+    try {
+      console.info("Fetching Deway SDK from backend...");
+      const n = this.cleanApiEndpoint(t), i = await fetch(`${n}/sdk-serve/sdk/v0`, {
+        method: "GET",
+        headers: {
+          Accept: "application/javascript",
+          "deway-app-key": e,
+          Origin: window?.location?.origin || ""
+        }
+      });
+      return i.ok ? this.handleSuccessfulFetch(i, o) : (console.warn(`Failed to fetch SDK: HTTP ${i.status}: ${i.statusText}`), null);
+    } catch (n) {
+      return console.warn("Failed to fetch SDK from server:", n), null;
+    }
+  }
+  async handleSuccessfulFetch(e, t) {
+    const o = e.headers.get("x-sdk-checksum"), n = e.headers.get("x-sdk-version"), i = e.headers.get("x-sdk-signature"), a = await e.text();
+    if (console.info(`Fetched Deway SDK version ${n}`), !n || !a || !o) {
+      const c = Object.fromEntries(e.headers.entries());
+      throw console.error(`Failed to get required data from sdk fetch. Headers: ${JSON.stringify(c)}`), new Error("Invalid SDK response: missing version, code, or checksum");
+    }
+    return await C(a, o, i, t), { code: a, version: n, checksum: o, signature: i || "" };
+  }
+}
+class u {
+  static MAX_QUEUE_SIZE = 50;
+  commandQueue = [];
+  queueCommand(e, ...t) {
+    this.commandQueue.length >= u.MAX_QUEUE_SIZE && (console.warn(`Command queue full (${u.MAX_QUEUE_SIZE} commands). Discarding oldest command.`), this.commandQueue.shift()), this.commandQueue.push({ method: e, args: t }), console.debug(`Queued command: ${e} (queue size: ${this.commandQueue.length})`);
+  }
+  replayQueuedCommands() {
+    if (this.commandQueue.length === 0)
+      return;
+    console.info(`Replaying ${this.commandQueue.length} queued commands`);
+    const e = [...this.commandQueue];
+    if (this.commandQueue = [], !this.isSDKAvailable()) {
+      console.warn("Deway SDK not available for command replay");
+      return;
+    }
+    for (const t of e)
+      this.replayCommand(t);
+  }
+  clearQueue() {
+    this.commandQueue = [];
+  }
+  isSDKAvailable() {
+    return typeof window < "u" && "Deway" in window && !!window.Deway;
+  }
+  replayCommand(e) {
+    try {
+      const t = window.Deway, o = t?.[e.method];
+      typeof o == "function" ? o.apply(t, e.args) : console.warn(`Method ${e.method} not found on Deway SDK`);
+    } catch (t) {
+      console.error(`Failed to replay command ${e.method}:`, t);
+    }
+  }
+}
+class f {
+  static CACHE_KEY = "deway-remote-config-cache";
+  /**
+   * Caches remote configuration in localStorage
+   * TTL only controls fetch frequency, cached config is never deleted
+   *
+   * @param config - Remote configuration to cache
+   * @param ttlSeconds - Time-to-live in seconds from server
+   */
+  async cacheRemoteConfig(e, t) {
+    try {
+      const o = {
+        config: e,
+        ttl_seconds: t,
+        timestamp: Date.now()
+      };
+      localStorage.setItem(f.CACHE_KEY, JSON.stringify(o)), console.debug("Remote configuration cached in localStorage");
+    } catch (o) {
+      console.warn("Failed to cache remote config:", o);
+    }
+  }
+  /**
+   * Retrieves cached remote configuration from localStorage
+   * Returns null if no cache exists
+   *
+   * @returns Cached remote config or null
+   */
+  async getCachedRemoteConfig() {
+    try {
+      const e = localStorage.getItem(f.CACHE_KEY);
+      if (!e)
+        return null;
+      const t = JSON.parse(e);
+      return console.debug("Found cached remote configuration"), t;
+    } catch (e) {
+      return console.warn("Failed to read cached remote config:", e), null;
+    }
+  }
+  /**
+   * Checks if the cached config is still valid based on TTL
+   * Note: This only affects whether we fetch fresh config, not if we use cached config
+   *
+   * @param timestamp - Timestamp when config was cached (milliseconds)
+   * @param ttlSeconds - TTL in seconds
+   * @returns true if cache is still valid
+   */
+  isCacheValid(e, t) {
+    const o = Date.now(), n = e + t * 1e3;
+    return o < n;
+  }
+}
+class v {
+  cleanApiEndpoint(e) {
+    return e.trim().replace(/\/+$/, "");
+  }
+  /**
+   * Fetches remote configuration from the backend
+   * Returns null if the fetch fails for any reason
+   *
+   * @param appKey - The application key for authentication
+   * @param apiEndpoint - The API endpoint URL
+   * @returns Remote config response or null on error
+   */
+  async fetchRemoteConfig(e, t) {
+    try {
+      console.info("Fetching remote configuration from backend...");
+      const o = this.cleanApiEndpoint(t), n = await fetch(`${o}/sdk-remote-config-serve/`, {
+        method: "GET",
+        headers: {
+          Accept: "application/json",
+          "deway-app-key": e,
+          Origin: window?.location?.origin || ""
+        }
+      });
+      if (n.ok) {
+        const i = await n.json();
+        return console.info("Remote configuration fetched successfully"), i;
+      }
+      return console.warn(`Failed to fetch remote config: HTTP ${n.status}: ${n.statusText}`), null;
+    } catch (o) {
+      return console.warn("Failed to fetch remote config from server:", o), null;
+    }
+  }
+}
+class A {
+  async executeSDK(e) {
+    return new Promise((t) => {
+      try {
+        if (!this.isDocumentReady()) {
+          console.error("Document is not available for script execution"), t(!1);
+          return;
+        }
+        const o = document.createElement("script");
+        o.textContent = e, o.type = "text/javascript";
+        let n = !1;
+        const i = (a) => {
+          n || (n = !0, this.cleanupScript(o), t(a));
+        };
+        o.onerror = () => {
+          console.error("Script execution failed"), i(!1);
+        }, o.onload = () => i(!0), document.head.appendChild(o), setTimeout(() => {
+          !n && this.verifySDKLoaded() ? i(!0) : n || (console.error("SDK execution timeout - Deway object not found"), i(!1));
+        }, 100);
+      } catch (o) {
+        console.error("Failed to execute SDK script:", o), t(!1);
+      }
+    });
+  }
+  isDocumentReady() {
+    return typeof document < "u" && document.head != null;
+  }
+  verifySDKLoaded() {
+    return typeof window < "u" && "Deway" in window && !!window.Deway;
+  }
+  cleanupScript(e) {
+    try {
+      e.parentNode && e.parentNode.removeChild(e);
+    } catch (t) {
+      console.debug("Failed to cleanup script element:", t);
+    }
+  }
+}
+class F {
+  validateConfig(e) {
+    return e ? !e.appKey || e.appKey.trim().length === 0 ? (console.error("Config.appKey is required and must be a non-empty string"), !1) : e.apiEndpoint !== void 0 && !this.isValidUrl(e.apiEndpoint) ? (console.error("Config.apiEndpoint must be a valid URL"), !1) : e.publicKey !== void 0 && e.publicKey.trim().length === 0 ? (console.error("Config.publicKey must be a non-empty string if provided"), !1) : !0 : (console.error("Config is required"), !1);
+  }
+  isValidUrl(e) {
+    try {
+      return new URL(e), !0;
+    } catch {
+      return !1;
+    }
+  }
+}
+const m = {
+  apiEndpoint: "https://service.deway.app",
+  publicKey: "9d3dBUvqyUQ7egd5j5uORdHSqZ7VFWOu+ud/SWt9WUY=",
+  isDevelopment: !1,
+  autoShowBubble: !1
+};
+class x {
+  isLoaded = !1;
+  isLoading = !1;
+  cacheManager;
+  scriptExecutor;
+  commandQueue;
+  sdkFetcher;
+  configValidator;
+  remoteConfigFetcher;
+  remoteConfigCache;
+  sdkConfigStore;
+  constructor() {
+    this.cacheManager = new s(), this.scriptExecutor = new A(), this.commandQueue = new u(), this.sdkFetcher = new K(), this.configValidator = new F(), this.sdkConfigStore = new S(), this.remoteConfigFetcher = new v(), this.remoteConfigCache = new f();
+  }
+  init(e) {
+    this.performInit(e).catch((t) => {
+      console.error("Failed to initialize Deway SDK:", t);
+    });
+  }
+  async performInit(e) {
+    try {
+      if (!this.canInitialize())
+        return;
+      const t = this.isInitializationPayload(e), o = t ? e.localConfig : e;
+      if (!this.configValidator.validateConfig(o)) {
+        console.error("Invalid config provided to Deway SDK");
+        return;
+      }
+      this.isLoading = !0;
+      const n = o.apiEndpoint || m.apiEndpoint, i = o.publicKey || m.publicKey, [a, c] = await Promise.all([this.fetchOrLoadSDK(o.appKey, n, i), this.fetchRemoteConfigWithCache(o, n)]);
+      if (!a)
+        return;
+      const h = t ? e : this.createInitializationPayload(c, o);
+      if (!await this.scriptExecutor.executeSDK(a.code)) {
+        console.error("SDK execution failed");
+        return;
+      }
+      if (!this.initializeSDK(h))
+        return;
+      this.commandQueue.replayQueuedCommands(), this.isLoaded = !0;
+    } finally {
+      this.isLoading = !1;
+    }
+  }
+  isInitializationPayload(e) {
+    return "localConfig" in e && "remoteConfig" in e && "defaults" in e;
+  }
+  canInitialize() {
+    return this.isLoaded ? (console.warn("Deway SDK already initialized"), !1) : this.isLoading ? (console.warn("Deway SDK initialization already in progress"), !1) : !0;
+  }
+  /**
+   * Fetches remote config from backend with cache fallback
+   * Returns null if both fetch and cache fail
+   */
+  async fetchRemoteConfigWithCache(e, t) {
+    this.sdkConfigStore.saveConfig(e);
+    const o = await this.remoteConfigFetcher.fetchRemoteConfig(e.appKey, t);
+    if (o)
+      return await this.remoteConfigCache.cacheRemoteConfig(o.config, o.ttl_seconds), o;
+    console.info("Using cached remote config as fallback");
+    const n = await this.remoteConfigCache.getCachedRemoteConfig();
+    return n ? {
+      config: n.config,
+      ttl_seconds: n.ttl_seconds
+    } : (console.warn("No remote config available (fetch failed and no cache)"), null);
+  }
+  /**
+   * Creates initialization payload for backend SDK (NEW LOADER v0.29.0+)
+   * Passes raw configuration data to backend for merging
+   * This allows backend to own merge logic and handle all current/future config fields
+   */
+  createInitializationPayload(e, t) {
+    return {
+      localConfig: t,
+      remoteConfig: e?.config ?? null,
+      defaults: m
+    };
+  }
+  async fetchOrLoadSDK(e, t, o) {
+    const n = await this.sdkFetcher.fetchSDK(e, t, o);
+    return n ? (await this.cacheManager.cacheSDK(n.code, n.version, n.checksum, n.signature), n) : (console.warn("Failed to fetch SDK from server, attempting cache fallback"), this.loadFromCache());
+  }
+  async loadFromCache() {
+    const e = await this.cacheManager.getCachedSDK();
+    return e ? (console.info(`Loading cached Deway SDK version ${e.version}`), { code: e.code, version: e.version }) : (console.error("SDK unavailable: Network error and no cached version found"), null);
+  }
+  initializeSDK(e) {
+    if (!this.isSDKAvailable())
+      return console.error("SDK execution failed: Deway object not found after loading"), !1;
+    try {
+      return window.Deway?.init(e), console.info("Deway SDK initialized successfully with payload"), !0;
+    } catch (t) {
+      return console.error("Failed to initialize SDK with payload:", t), !1;
+    }
+  }
+  identify(e) {
+    try {
+      this.isLoaded && this.isSDKAvailable() ? window.Deway?.identify(e) : this.commandQueue.queueCommand("identify", e);
+    } catch (t) {
+      console.error("Failed to identify user:", t);
+    }
+  }
+  reportEvent(e, t) {
+    try {
+      this.isLoaded && this.isSDKAvailable() ? window.Deway?.reportEvent(e, t) : this.commandQueue.queueCommand("reportEvent", e, t);
+    } catch (o) {
+      console.error("Failed to report event:", o);
+    }
+  }
+  setUserProfile(e) {
+    try {
+      this.isLoaded && this.isSDKAvailable() ? window.Deway?.setUserProfile(e) : this.commandQueue.queueCommand("setUserProfile", e);
+    } catch (t) {
+      console.error("Failed to set user profile:", t);
+    }
+  }
+  showBubble(e) {
+    try {
+      this.isLoaded && this.isSDKAvailable() ? window.Deway?.showBubble(e) : this.commandQueue.queueCommand("showBubble", e);
+    } catch (t) {
+      console.error("Failed to show bubble:", t);
+    }
+  }
+  hideBubble() {
+    try {
+      this.isLoaded && this.isSDKAvailable() ? window.Deway?.hideBubble() : this.commandQueue.queueCommand("hideBubble");
+    } catch (e) {
+      console.error("Failed to hide bubble:", e);
+    }
+  }
+  isBubbleVisible() {
+    try {
+      return this.isLoaded && this.isSDKAvailable() ? window.Deway?.isBubbleVisible() ?? !1 : !1;
+    } catch (e) {
+      return console.error("Failed to check bubble visibility:", e), !1;
+    }
+  }
+  destroy() {
+    try {
+      this.isLoaded && this.isSDKAvailable() ? window.Deway?.destroy() : this.commandQueue.queueCommand("destroy"), this.commandQueue.clearQueue();
+    } catch (e) {
+      console.error("Failed to destroy SDK:", e);
+    }
+  }
+  isSDKAvailable() {
+    return typeof window < "u" && "Deway" in window && !!window.Deway;
+  }
+}
+const l = new x(), k = {
+  init: (r) => l.init(r),
+  identify: (r) => l.identify(r),
+  reportEvent: (r, e) => l.reportEvent(r, e),
+  setUserProfile: (r) => l.setUserProfile(r),
+  showBubble: (r) => l.showBubble(r),
+  hideBubble: () => l.hideBubble(),
+  isBubbleVisible: () => l.isBubbleVisible(),
+  destroy: () => l.destroy()
+};
+typeof window < "u" && (window.Deway = k);
+export {
+  k as default
+};

package/dist/loader.umd.js

@@ -0,0 +1 @@
+(function(d,u){typeof exports=="object"&&typeof module<"u"?module.exports=u():typeof define=="function"&&define.amd?define(u):(d=typeof globalThis<"u"?globalThis:d||self,d.Deway=u())})(this,(function(){"use strict";const d="deway-sdk-config",u=["Understanding intent","Reading web page","Browsing the docs","Enriching context","Validating understanding","Crafting response"];class b{saveConfig(e){if(window?.localStorage)try{const t=JSON.stringify(e);window.localStorage.setItem(d,t)}catch(t){console.warn("Failed to save SDK config to localStorage:",t)}}loadConfig(){if(window?.localStorage)try{const e=window.localStorage.getItem(d);return e?JSON.parse(e):null}catch(e){return console.warn("Failed to load SDK config from localStorage:",e),null}return null}getExcludedVendors(){return this.loadConfig()?.excludedVendors??[]}getAssistantName(){return this.loadConfig()?.assistantName??"Assistant"}getAiDisclaimer(){return this.loadConfig()?.aiDisclaimer}getThinkingMessages(){return this.loadConfig()?.thinkingMessages??u}getHumanHandoffUrl(){return this.loadConfig()?.humanHandoffUrl}}class s{static CACHE_KEY="deway-sdk-cache";static DB_NAME="DewaySdk";static DB_VERSION=1;static STORE_NAME="sdk";async cacheSDK(e,t,o,n){try{const c=(await this.openIndexedDB()).transaction([s.STORE_NAME],"readwrite").objectStore(s.STORE_NAME);await new Promise((w,S)=>{const f=c.put({id:"latest",code:e,version:t,checksum:o,signature:n,timestamp:Date.now()});f.onsuccess=()=>w(f.result),f.onerror=()=>S(f.error)}),console.debug("SDK cached in IndexedDB")}catch{try{const a=JSON.stringify({code:e,version:t,checksum:o,signature:n,timestamp:Date.now()});localStorage.setItem(s.CACHE_KEY,a),console.debug("SDK cached in localStorage")}catch(a){console.warn("Unable to cache SDK:",a)}}}async getCachedSDK(){try{const o=(await this.openIndexedDB()).transaction([s.STORE_NAME],"readonly").objectStore(s.STORE_NAME),n=await new Promise((i,a)=>{const c=o.get("latest");c.onsuccess=()=>i(c.result||null),c.onerror=()=>a(c.error)});if(n)return console.debug("Found cached SDK in IndexedDB"),n}catch{console.debug("IndexedDB unavailable, trying localStorage")}try{const e=localStorage.getItem(s.CACHE_KEY);if(e)return console.debug("Found cached SDK in localStorage"),JSON.parse(e)}catch(e){console.warn("Failed to read from localStorage:",e)}return null}openIndexedDB(){return new Promise((e,t)=>{const o=indexedDB.open(s.DB_NAME,s.DB_VERSION);o.onerror=()=>t(o.error),o.onsuccess=()=>e(o.result),o.onupgradeneeded=n=>{const i=n.target.result;i.objectStoreNames.contains(s.STORE_NAME)||i.createObjectStore(s.STORE_NAME,{keyPath:"id"})}})}}async function D(r){const t=new TextEncoder().encode(r),o=await crypto.subtle.digest("SHA-256",t);return Array.from(new Uint8Array(o)).map(i=>i.toString(16).padStart(2,"0")).join("")}function g(r){const e=atob(r),t=new Uint8Array(e.length);for(let o=0;o<e.length;o++)t[o]=e.charCodeAt(o);return t}function E(r){const e=new Uint8Array(r.length/2);for(let t=0;t<r.length;t+=2)e[t/2]=Number.parseInt(r.substr(t,2),16);return e}async function C(r,e,t){try{const o=g(r),n=E(e),i=g(t),a=await crypto.subtle.importKey("raw",o,{name:"Ed25519"},!1,["verify"]);return await crypto.subtle.verify("Ed25519",a,i,n)}catch(o){return console.error("Ed25519 signature verification failed:",o),!1}}async function K(r,e,t,o){if(!e||!t)throw new Error("SDK verification failed: Missing security headers");if(await D(r)!==e)throw new Error("SDK verification failed: Checksum mismatch - content tampered");if(!await C(o,e,t))throw new Error("SDK verification failed: Invalid signature - content tampered")}class v{cleanApiEndpoint(e){return e.trim().replace(/\/+$/,"")}async fetchSDK(e,t,o){try{console.info("Fetching Deway SDK from backend...");const n=this.cleanApiEndpoint(t),i=await fetch(`${n}/sdk-serve/sdk/v0`,{method:"GET",headers:{Accept:"application/javascript","deway-app-key":e,Origin:window?.location?.origin||""}});return i.ok?this.handleSuccessfulFetch(i,o):(console.warn(`Failed to fetch SDK: HTTP ${i.status}: ${i.statusText}`),null)}catch(n){return console.warn("Failed to fetch SDK from server:",n),null}}async handleSuccessfulFetch(e,t){const o=e.headers.get("x-sdk-checksum"),n=e.headers.get("x-sdk-version"),i=e.headers.get("x-sdk-signature"),a=await e.text();if(console.info(`Fetched Deway SDK version ${n}`),!n||!a||!o){const c=Object.fromEntries(e.headers.entries());throw console.error(`Failed to get required data from sdk fetch. Headers: ${JSON.stringify(c)}`),new Error("Invalid SDK response: missing version, code, or checksum")}return await K(a,o,i,t),{code:a,version:n,checksum:o,signature:i||""}}}class h{static MAX_QUEUE_SIZE=50;commandQueue=[];queueCommand(e,...t){this.commandQueue.length>=h.MAX_QUEUE_SIZE&&(console.warn(`Command queue full (${h.MAX_QUEUE_SIZE} commands). Discarding oldest command.`),this.commandQueue.shift()),this.commandQueue.push({method:e,args:t}),console.debug(`Queued command: ${e} (queue size: ${this.commandQueue.length})`)}replayQueuedCommands(){if(this.commandQueue.length===0)return;console.info(`Replaying ${this.commandQueue.length} queued commands`);const e=[...this.commandQueue];if(this.commandQueue=[],!this.isSDKAvailable()){console.warn("Deway SDK not available for command replay");return}for(const t of e)this.replayCommand(t)}clearQueue(){this.commandQueue=[]}isSDKAvailable(){return typeof window<"u"&&"Deway"in window&&!!window.Deway}replayCommand(e){try{const t=window.Deway,o=t?.[e.method];typeof o=="function"?o.apply(t,e.args):console.warn(`Method ${e.method} not found on Deway SDK`)}catch(t){console.error(`Failed to replay command ${e.method}:`,t)}}}class m{static CACHE_KEY="deway-remote-config-cache";async cacheRemoteConfig(e,t){try{const o={config:e,ttl_seconds:t,timestamp:Date.now()};localStorage.setItem(m.CACHE_KEY,JSON.stringify(o)),console.debug("Remote configuration cached in localStorage")}catch(o){console.warn("Failed to cache remote config:",o)}}async getCachedRemoteConfig(){try{const e=localStorage.getItem(m.CACHE_KEY);if(!e)return null;const t=JSON.parse(e);return console.debug("Found cached remote configuration"),t}catch(e){return console.warn("Failed to read cached remote config:",e),null}}isCacheValid(e,t){const o=Date.now(),n=e+t*1e3;return o<n}}class A{cleanApiEndpoint(e){return e.trim().replace(/\/+$/,"")}async fetchRemoteConfig(e,t){try{console.info("Fetching remote configuration from backend...");const o=this.cleanApiEndpoint(t),n=await fetch(`${o}/sdk-remote-config-serve/`,{method:"GET",headers:{Accept:"application/json","deway-app-key":e,Origin:window?.location?.origin||""}});if(n.ok){const i=await n.json();return console.info("Remote configuration fetched successfully"),i}return console.warn(`Failed to fetch remote config: HTTP ${n.status}: ${n.statusText}`),null}catch(o){return console.warn("Failed to fetch remote config from server:",o),null}}}class F{async executeSDK(e){return new Promise(t=>{try{if(!this.isDocumentReady()){console.error("Document is not available for script execution"),t(!1);return}const o=document.createElement("script");o.textContent=e,o.type="text/javascript";let n=!1;const i=a=>{n||(n=!0,this.cleanupScript(o),t(a))};o.onerror=()=>{console.error("Script execution failed"),i(!1)},o.onload=()=>i(!0),document.head.appendChild(o),setTimeout(()=>{!n&&this.verifySDKLoaded()?i(!0):n||(console.error("SDK execution timeout - Deway object not found"),i(!1))},100)}catch(o){console.error("Failed to execute SDK script:",o),t(!1)}})}isDocumentReady(){return typeof document<"u"&&document.head!=null}verifySDKLoaded(){return typeof window<"u"&&"Deway"in window&&!!window.Deway}cleanupScript(e){try{e.parentNode&&e.parentNode.removeChild(e)}catch(t){console.debug("Failed to cleanup script element:",t)}}}class x{validateConfig(e){return e?!e.appKey||e.appKey.trim().length===0?(console.error("Config.appKey is required and must be a non-empty string"),!1):e.apiEndpoint!==void 0&&!this.isValidUrl(e.apiEndpoint)?(console.error("Config.apiEndpoint must be a valid URL"),!1):e.publicKey!==void 0&&e.publicKey.trim().length===0?(console.error("Config.publicKey must be a non-empty string if provided"),!1):!0:(console.error("Config is required"),!1)}isValidUrl(e){try{return new URL(e),!0}catch{return!1}}}const y={apiEndpoint:"https://service.deway.app",publicKey:"9d3dBUvqyUQ7egd5j5uORdHSqZ7VFWOu+ud/SWt9WUY=",isDevelopment:!1,autoShowBubble:!1};class k{isLoaded=!1;isLoading=!1;cacheManager;scriptExecutor;commandQueue;sdkFetcher;configValidator;remoteConfigFetcher;remoteConfigCache;sdkConfigStore;constructor(){this.cacheManager=new s,this.scriptExecutor=new F,this.commandQueue=new h,this.sdkFetcher=new v,this.configValidator=new x,this.sdkConfigStore=new b,this.remoteConfigFetcher=new A,this.remoteConfigCache=new m}init(e){this.performInit(e).catch(t=>{console.error("Failed to initialize Deway SDK:",t)})}async performInit(e){try{if(!this.canInitialize())return;const t=this.isInitializationPayload(e),o=t?e.localConfig:e;if(!this.configValidator.validateConfig(o)){console.error("Invalid config provided to Deway SDK");return}this.isLoading=!0;const n=o.apiEndpoint||y.apiEndpoint,i=o.publicKey||y.publicKey,[a,c]=await Promise.all([this.fetchOrLoadSDK(o.appKey,n,i),this.fetchRemoteConfigWithCache(o,n)]);if(!a)return;const w=t?e:this.createInitializationPayload(c,o);if(!await this.scriptExecutor.executeSDK(a.code)){console.error("SDK execution failed");return}if(!this.initializeSDK(w))return;this.commandQueue.replayQueuedCommands(),this.isLoaded=!0}finally{this.isLoading=!1}}isInitializationPayload(e){return"localConfig"in e&&"remoteConfig"in e&&"defaults"in e}canInitialize(){return this.isLoaded?(console.warn("Deway SDK already initialized"),!1):this.isLoading?(console.warn("Deway SDK initialization already in progress"),!1):!0}async fetchRemoteConfigWithCache(e,t){this.sdkConfigStore.saveConfig(e);const o=await this.remoteConfigFetcher.fetchRemoteConfig(e.appKey,t);if(o)return await this.remoteConfigCache.cacheRemoteConfig(o.config,o.ttl_seconds),o;console.info("Using cached remote config as fallback");const n=await this.remoteConfigCache.getCachedRemoteConfig();return n?{config:n.config,ttl_seconds:n.ttl_seconds}:(console.warn("No remote config available (fetch failed and no cache)"),null)}createInitializationPayload(e,t){return{localConfig:t,remoteConfig:e?.config??null,defaults:y}}async fetchOrLoadSDK(e,t,o){const n=await this.sdkFetcher.fetchSDK(e,t,o);return n?(await this.cacheManager.cacheSDK(n.code,n.version,n.checksum,n.signature),n):(console.warn("Failed to fetch SDK from server, attempting cache fallback"),this.loadFromCache())}async loadFromCache(){const e=await this.cacheManager.getCachedSDK();return e?(console.info(`Loading cached Deway SDK version ${e.version}`),{code:e.code,version:e.version}):(console.error("SDK unavailable: Network error and no cached version found"),null)}initializeSDK(e){if(!this.isSDKAvailable())return console.error("SDK execution failed: Deway object not found after loading"),!1;try{return window.Deway?.init(e),console.info("Deway SDK initialized successfully with payload"),!0}catch(t){return console.error("Failed to initialize SDK with payload:",t),!1}}identify(e){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.identify(e):this.commandQueue.queueCommand("identify",e)}catch(t){console.error("Failed to identify user:",t)}}reportEvent(e,t){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.reportEvent(e,t):this.commandQueue.queueCommand("reportEvent",e,t)}catch(o){console.error("Failed to report event:",o)}}setUserProfile(e){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.setUserProfile(e):this.commandQueue.queueCommand("setUserProfile",e)}catch(t){console.error("Failed to set user profile:",t)}}showBubble(e){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.showBubble(e):this.commandQueue.queueCommand("showBubble",e)}catch(t){console.error("Failed to show bubble:",t)}}hideBubble(){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.hideBubble():this.commandQueue.queueCommand("hideBubble")}catch(e){console.error("Failed to hide bubble:",e)}}isBubbleVisible(){try{return this.isLoaded&&this.isSDKAvailable()?window.Deway?.isBubbleVisible()??!1:!1}catch(e){return console.error("Failed to check bubble visibility:",e),!1}}destroy(){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.destroy():this.commandQueue.queueCommand("destroy"),this.commandQueue.clearQueue()}catch(e){console.error("Failed to destroy SDK:",e)}}isSDKAvailable(){return typeof window<"u"&&"Deway"in window&&!!window.Deway}}const l=new k,p={init:r=>l.init(r),identify:r=>l.identify(r),reportEvent:(r,e)=>l.reportEvent(r,e),setUserProfile:r=>l.setUserProfile(r),showBubble:r=>l.showBubble(r),hideBubble:()=>l.hideBubble(),isBubbleVisible:()=>l.isBubbleVisible(),destroy:()=>l.destroy()};return typeof window<"u"&&(window.Deway=p),p}));

package/package.json

@@ -0,0 +1,110 @@
+{
+  "name": "@deway-ai/web-sdk",
+  "version": "0.36.0",
+  "type": "module",
+  "description": "Deway's Web SDK",
+  "main": "dist/loader.umd.js",
+  "module": "dist/loader.es.js",
+  "types": "dist/loader.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/loader.d.ts",
+      "import": "./dist/loader.es.js",
+      "require": "./dist/loader.umd.js"
+    }
+  },
+  "files": [
+    "dist/loader.*",
+    "dist/backend.*"
+  ],
+  "scripts": {
+    "build:iframe": "node scripts/build-deway-bubble-iframe-bundle.js && node scripts/build-options-menu-iframe-bundle.js && node scripts/build-page-guide-iframe-bundle.js",
+    "build:iframe:dev": "node scripts/build-deway-bubble-iframe-bundle.js --dev && node scripts/build-options-menu-iframe-bundle.js --dev && node scripts/build-page-guide-iframe-bundle.js --dev",
+    "build:iframe:prod": "node scripts/build-deway-bubble-iframe-bundle.js && node scripts/build-options-menu-iframe-bundle.js && node scripts/build-page-guide-iframe-bundle.js",
+    "build:loader:dev": "vite build --config vite.config.loader.ts --mode development",
+    "build:loader:prod": "vite build --config vite.config.loader.ts --mode production",
+    "prebuild:backend:dev": "pnpm build:iframe:dev",
+    "build:backend:dev": "vite build --config vite.config.backend.ts --mode development",
+    "prebuild:backend:prod": "pnpm build:iframe:prod",
+    "build:backend:prod": "vite build --config vite.config.backend.ts --mode production",
+    "build:dev": "pnpm build:loader:dev && pnpm build:backend:dev",
+    "build:prod": "pnpm build:loader:prod && pnpm build:backend:prod",
+    "deploy:test": "node scripts/deploy-to-dev-env.js test",
+    "deploy:alon": "node scripts/deploy-to-dev-env.js alon",
+    "deploy:noy": "node scripts/deploy-to-dev-env.js noy",
+    "deploy:demo": "node scripts/deploy-to-dev-env.js demo",
+    "preserve:test": "pnpm deploy:test",
+    "serve:test": "http-server . -p 2999 -c-1 -o /demo-site/?env=test",
+    "preserve:alon": "pnpm deploy:alon",
+    "serve:alon": "http-server . -p 2999 -c-1 -o /demo-site/?env=alon",
+    "preserve:noy": "pnpm deploy:noy",
+    "serve:noy": "http-server . -p 2999 -c-1 -o /demo-site/?env=noy",
+    "preserve:demo": "pnpm deploy:demo",
+    "serve:demo": "http-server . -p 2999 -c-1 -o /demo-site/?env=demo",
+    "preserve:extension": "node ./scripts/version-burning.js && pnpm build:prod",
+    "serve:extension": "http-server . -p 2999 -c-1",
+    "postserve:extension": "node ./scripts/version-burning.js",
+    "preserve:prod": "node ./scripts/version-burning.js && pnpm build:prod",
+    "serve:prod": "http-server . -p 2999 -c-1",
+    "postserve:prod": "node ./scripts/version-burning.js",
+    "lint": "biome check --write .",
+    "typecheck:tests": "tsc --noEmit --project tsconfig.tests.json",
+    "test:unit": "vitest run --coverage --config vitest.config.ts",
+    "check": "pnpm lint && pnpm typecheck:tests && pnpm test:unit",
+    "test:e2e:ui": "TEST_ENV=noy playwright test --ui",
+    "test:e2e:debug": "TEST_ENV=noy playwright test --debug",
+    "test:e2e:headed": "TEST_ENV=noy playwright test --headed",
+    "test:e2e:test": "TEST_ENV=test playwright test",
+    "test:e2e:alon": "TEST_ENV=alon playwright test",
+    "test:e2e:noy": "TEST_ENV=noy playwright test"
+  },
+  "keywords": [
+    "walkthrough",
+    "guide",
+    "user-guide",
+    "product-tour",
+    "tour",
+    "tutorial",
+    "deway",
+    "theway",
+    "the-way"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Deway-AI/deway-web-sdk.git"
+  },
+  "dependencies": {
+    "markdown-it": "^14.1.0",
+    "pako": "^2.1.0"
+  },
+  "devDependencies": {
+    "@aws-sdk/client-cloudwatch-logs": "^3.919.0",
+    "@aws-sdk/client-s3": "^3.925.0",
+    "@axe-core/playwright": "^4.11.0",
+    "@biomejs/biome": "^2.2.4",
+    "@faker-js/faker": "^10.0.0",
+    "@playwright/test": "^1.55.1",
+    "@types/jsdom": "^21.1.7",
+    "@types/markdown-it": "^14.1.2",
+    "@types/node": "^22.18.1",
+    "@types/pako": "^2.0.4",
+    "@vitest/coverage-v8": "^3.2.4",
+    "axe-core": "^4.11.0",
+    "fishery": "^2.3.1",
+    "http-server": "^14.1.1",
+    "jsdom": "^26.1.0",
+    "ky": "^1.11.0",
+    "p-event": "^7.0.0",
+    "p-timeout": "^7.0.1",
+    "ts-node": "^10.9.2",
+    "typescript": "^5.9.2",
+    "vite": "7.1.11",
+    "vite-plugin-dts": "^4.5.4",
+    "vitest": "^3.2.4",
+    "zod": "^4.1.12"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "packageManager": "pnpm@10.19.0"
+}