@deway-ai/web-sdk 0.45.0 → 0.47.0

package/README.md

@@ -62,8 +62,7 @@ Deway.init({
 Deway.identify('user-123');
 ```
 
-**Note:** `Deway.init()` must be called before other methods. User identification via `Deway.identify()` enables activity
-tracking.
+**Note:** While methods can be called immediately (they're queued until initialization completes), best practice is to call `Deway.init()` early in your app lifecycle.
 
 ### HTML/JavaScript Integration
 
@@ -84,47 +83,16 @@ tracking.
 ```typescript
 Deway.init({
     appKey: string,                               // Required: Your Deway app key
-    apiEndpoint: string | undefined,              // Optional: Custom API endpoint
-    wsEndpoint: string | undefined,               // Optional: Custom WebSocket endpoint
-    isDevelopment: boolean | undefined,           // Optional: Enable dev mode logging (default: false)
-    autoShowBookmark: boolean | undefined,        // Optional: Auto-show bubble (default: true)
-    bubbleConfig: BubbleConfig | undefined,       // Optional: Bubble appearance customization
 });
 ```
 
-### BubbleConfig
-
-Customize the chat bubble appearance:
-
-```typescript
-interface BubbleConfig {
-    position?: BubblePosition;  // Position on screen
-}
-
-enum BubblePosition {
-    BOTTOM_LEFT = "bottom-left",
-    BOTTOM_RIGHT = "bottom-right"  // default
-}
-```
-
-### Example with Custom Configuration
-
-```typescript
-Deway.init({
-    appKey: 'your-app-key',
-    isDevelopment: true,
-    autoShowBookmark: true,
-    bubbleConfig: {
-        position: 'bottom-left'
-    }
-});
-```
+**Note:** Most configuration options (themes, feature flags, prompts, etc.) are managed remotely and automatically fetched during initialization. Only the fields above are configurable by SDK callers.
 
 ## API Reference
 
 ### `Deway.init(config)`
 
-Initialize the SDK with configuration options. Must be called before using other methods.
+Initialize the SDK with configuration options. Should be called early in your app lifecycle (commands are queued until initialization completes).
 
 ### `Deway.identify(userId)`
 
@@ -177,17 +145,31 @@ Deway.setUserProfile({
 - Profile is upserted (created if new, replaced if exists)
 - Profile data completely replaces existing profile on each call
 
-### `Deway.showBookmark(config?)`
+### `Deway.show(config?)`
+
+Show the AI chat interface. Optional configuration:
 
-Show the AI chat bookmark. Optional configuration for appearance customization.
+```typescript
+interface BookmarkConfig {
+    appearanceMode?: "bookmark" | "bubble";  // Display mode (default: "bookmark")
+}
+```
 
-### `Deway.hideBookmark()`
+**Appearance Modes:**
+- `"bookmark"`: Edge-pinned vertical tab (default)
+- `"bubble"`: Floating ellipsoid pill at bottom-right corner
 
-Hide the AI chat bookmark.
+### `Deway.hide()`
 
-### `Deway.isBookmarkVisible()`
+Hide the AI chat interface.
 
-Check if the bookmark is currently visible.
+### `Deway.isVisible()`
+
+Check if the interface is currently visible.
+
+### `Deway.isInitialized()`
+
+Check if the SDK has completed initialization.
 
 ### `Deway.destroy()`
 
@@ -256,21 +238,22 @@ export class AppComponent implements OnInit {
 
 - **AI-powered user engagement and assistance**: Interactive chat interface for user support
 - **Automatic user behavior analysis**: Intelligent tracking and understanding of user interactions
+- **Remote configuration management**: Feature flags, themes, and prompts managed remotely
+- **Dual appearance modes**: Edge-pinned bookmark or floating bubble display
 - **Framework-agnostic integration**: Works with React, Vue, Angular, and vanilla JavaScript
 - **Full TypeScript support**: Complete type definitions included
-- **Lightweight**: Minimal bundle size impact
+- **Lightweight loader**: ~5KB loader shell with dynamic backend loading
+- **Offline resilience**: Backend bundle cached locally for faster loads
 
 ## Edge Cases & Internal Behavior
 
 ### Error Handling
 
-The SDK handles all errors internally. Callers don't need try-catch blocks around SDK methods. Failed operations are
-logged to the console and retried automatically when appropriate.
+The SDK handles all errors internally. Callers don't need try-catch blocks around SDK methods. Failed operations are logged to the console and retried automatically when appropriate.
 
 ### State Persistence
 
-User identification and settings persist across page reloads via localStorage. Once a user is identified, they remain
-identified until `Deway.destroy()` is called or localStorage is cleared.
+User identification and settings persist across page reloads via localStorage. Once a user is identified, they remain identified until `Deway.destroy()` is called or localStorage is cleared.
 
 ### Multiple init() Calls
 
@@ -278,25 +261,29 @@ Calling `Deway.init()` multiple times is safe. Subsequent calls after the first
 
 ### Automatic Retries
 
-Failed API calls and uploads are automatically retried with exponential backoff. No manual intervention required.
+Failed API calls and uploads are automatically retried with exponential backoff. No manual intervention is required.
 
-### Call Queue
+### Command Queue
 
-All SDK calls should be called after the SDK is initialized via `Deway.init()`, and the user is identified via
-`Deway.identify()`.
-In case a call is made before `init` or `identify` the SDK queues the call internally and eventually executed once the
-prerequisite calls were made.
+All SDK methods can be called immediately, even before initialization completes. The loader queues commands and executes them automatically once the backend bundle loads and `Deway.init()` completes.
 
 ## Troubleshooting
 
-### Bubble doesn't appear
+### Interface doesn't appear
 
-- Check `autoShowBookmark` is set to `true` OR manually call `Deway.showBookmark()`
 - Verify `Deway.init()` was called with valid `appKey`
+- Check if auto-show is enabled in your remote configuration, or manually call `Deway.show()`
 - Check browser console for initialization errors
+- Verify the SDK completed initialization with `Deway.isInitialized()`
 
 ### User identification not working
 
 - Ensure `Deway.init()` is called before `Deway.identify()`
-- User ID must be non-empty string
+- User ID must be a non-empty string
 - Check browser console for error logs
+
+### Commands not executing
+
+- The SDK queues commands called before initialization
+- Commands execute automatically once `Deway.init()` completes
+- Check browser console for errors during initialization

package/dist/loader.es.js

@@ -30,11 +30,19 @@ class S {
   getThinkingMessages() {
     return this.loadConfig()?.thinkingMessages ?? p;
   }
-  getTalkToHumanBtnTxt() {
-    return this.loadConfig()?.talkToHumanBtnTxt ?? "talk to Support";
+  /**
+   * Get the support handoff configuration
+   * @returns SupportHandoff config or null if not configured
+   */
+  getSupportHandoff() {
+    return this.loadConfig()?.supportHandoff ?? null;
   }
-  getHumanHandoffUrl() {
-    return this.loadConfig()?.humanHandoffUrl;
+  /**
+   * Get the support handoff button text
+   * @returns Custom button text or default "talk to Support"
+   */
+  getSupportHandoffButtonText() {
+    return this.getSupportHandoff()?.button_text ?? "talk to Support";
   }
   getFeatureFlags() {
     return this.loadConfig()?.featureFlags ?? {};
@@ -66,33 +74,45 @@ class S {
     const t = this.getTenantTheme();
     return t ? e === "dark" ? t.dark : t.light : null;
   }
+  getCustomIcons() {
+    return this.loadConfig()?.customIcons ?? null;
+  }
+  getBookmarkIconInlineSvg() {
+    return this.getCustomIcons()?.bookmark_icon_inline_svg ?? void 0;
+  }
+  getEmptyChatStateIconInlineSvg() {
+    return this.getCustomIcons()?.empty_chat_state_icon_inline_svg ?? void 0;
+  }
+  getIntroIconSize() {
+    return this.loadConfig()?.introIconSize ?? 18;
+  }
 }
 class s {
   static CACHE_KEY = "deway-sdk-cache";
   static DB_NAME = "DewaySdk";
   static DB_VERSION = 1;
   static STORE_NAME = "sdk";
-  async cacheSDK(e, t, i, n) {
+  async cacheSDK(e, t, n, i) {
     try {
       const d = (await this.openIndexedDB()).transaction([s.STORE_NAME], "readwrite").objectStore(s.STORE_NAME);
-      await new Promise((h, m) => {
+      await new Promise((f, m) => {
         const l = d.put({
           id: "latest",
           code: e,
           version: t,
-          checksum: i,
-          signature: n,
+          checksum: n,
+          signature: i,
           timestamp: Date.now()
         });
-        l.onsuccess = () => h(l.result), l.onerror = () => m(l.error);
+        l.onsuccess = () => f(l.result), l.onerror = () => m(l.error);
       });
     } catch {
       try {
         const a = JSON.stringify({
           code: e,
           version: t,
-          checksum: i,
-          signature: n,
+          checksum: n,
+          signature: i,
           timestamp: Date.now()
         });
         localStorage.setItem(s.CACHE_KEY, a);
@@ -102,12 +122,12 @@ class s {
   }
   async getCachedSDK() {
     try {
-      const i = (await this.openIndexedDB()).transaction([s.STORE_NAME], "readonly").objectStore(s.STORE_NAME), n = await new Promise((o, a) => {
-        const d = i.get("latest");
-        d.onsuccess = () => o(d.result || null), d.onerror = () => a(d.error);
+      const n = (await this.openIndexedDB()).transaction([s.STORE_NAME], "readonly").objectStore(s.STORE_NAME), i = await new Promise((r, a) => {
+        const d = n.get("latest");
+        d.onsuccess = () => r(d.result || null), d.onerror = () => a(d.error);
       });
-      if (n)
-        return n;
+      if (i)
+        return i;
     } catch {
     }
     try {
@@ -120,53 +140,53 @@ class s {
   }
   openIndexedDB() {
     return new Promise((e, t) => {
-      const i = indexedDB.open(s.DB_NAME, s.DB_VERSION);
-      i.onerror = () => t(i.error), i.onsuccess = () => e(i.result), i.onupgradeneeded = (n) => {
-        const o = n.target.result;
-        o.objectStoreNames.contains(s.STORE_NAME) || o.createObjectStore(s.STORE_NAME, { keyPath: "id" });
+      const n = indexedDB.open(s.DB_NAME, s.DB_VERSION);
+      n.onerror = () => t(n.error), n.onsuccess = () => e(n.result), n.onupgradeneeded = (i) => {
+        const r = i.target.result;
+        r.objectStoreNames.contains(s.STORE_NAME) || r.createObjectStore(s.STORE_NAME, { keyPath: "id" });
       };
     });
   }
 }
-async function C(r) {
-  const t = new TextEncoder().encode(r), i = await crypto.subtle.digest("SHA-256", t);
-  return Array.from(new Uint8Array(i)).map((o) => o.toString(16).padStart(2, "0")).join("");
+async function C(o) {
+  const t = new TextEncoder().encode(o), n = await crypto.subtle.digest("SHA-256", t);
+  return Array.from(new Uint8Array(n)).map((r) => r.toString(16).padStart(2, "0")).join("");
 }
-function w(r) {
-  const e = atob(r), t = new Uint8Array(e.length);
-  for (let i = 0; i < e.length; i++)
-    t[i] = e.charCodeAt(i);
+function w(o) {
+  const e = atob(o), t = new Uint8Array(e.length);
+  for (let n = 0; n < e.length; n++)
+    t[n] = e.charCodeAt(n);
   return t;
 }
-function E(r) {
-  const e = new Uint8Array(r.length / 2);
-  for (let t = 0; t < r.length; t += 2)
-    e[t / 2] = Number.parseInt(r.substr(t, 2), 16);
+function E(o) {
+  const e = new Uint8Array(o.length / 2);
+  for (let t = 0; t < o.length; t += 2)
+    e[t / 2] = Number.parseInt(o.substr(t, 2), 16);
   return e;
 }
-async function D(r, e, t) {
+async function D(o, e, t) {
   try {
-    const i = w(r), n = E(e), o = w(t), a = await crypto.subtle.importKey("raw", i, { name: "Ed25519" }, !1, ["verify"]);
-    return await crypto.subtle.verify("Ed25519", a, o, n);
+    const n = w(o), i = E(e), r = w(t), a = await crypto.subtle.importKey("raw", n, { name: "Ed25519" }, !1, ["verify"]);
+    return await crypto.subtle.verify("Ed25519", a, r, i);
   } catch {
     return !1;
   }
 }
-async function A(r, e, t, i) {
+async function A(o, e, t, n) {
   if (!e || !t)
     throw new Error("SDK verification failed: Missing security headers");
-  if (await C(r) !== e)
+  if (await C(o) !== e)
     throw new Error("SDK verification failed: Checksum mismatch - content tampered");
-  if (!await D(i, e, t))
+  if (!await D(n, e, t))
     throw new Error("SDK verification failed: Invalid signature - content tampered");
 }
-class b {
+class I {
   cleanApiEndpoint(e) {
     return e.trim().replace(/\/+$/, "");
   }
-  async fetchSDK(e, t, i) {
+  async fetchSDK(e, t, n) {
     try {
-      const n = this.cleanApiEndpoint(t), o = await fetch(`${n}/sdk-serve/sdk/v0`, {
+      const i = this.cleanApiEndpoint(t), r = await fetch(`${i}/sdk-serve/sdk/v0`, {
         method: "GET",
         headers: {
           Accept: "application/javascript",
@@ -174,16 +194,16 @@ class b {
           Origin: window?.location?.origin || ""
         }
       });
-      return o.ok ? this.handleSuccessfulFetch(o, i) : null;
+      return r.ok ? this.handleSuccessfulFetch(r, n) : null;
     } catch {
       return null;
     }
   }
   async handleSuccessfulFetch(e, t) {
-    const i = e.headers.get("x-sdk-checksum"), n = e.headers.get("x-sdk-version"), o = e.headers.get("x-sdk-signature"), a = await e.text();
-    if (!n || !a || !i)
+    const n = e.headers.get("x-sdk-checksum"), i = e.headers.get("x-sdk-version"), r = e.headers.get("x-sdk-signature"), a = await e.text();
+    if (!i || !a || !n)
       throw Object.fromEntries(e.headers.entries()), new Error("Invalid SDK response: missing version, code, or checksum");
-    return await A(a, i, o, t), { code: a, version: n, checksum: i, signature: o || "" };
+    return await A(a, n, r, t), { code: a, version: i, checksum: n, signature: r || "" };
   }
 }
 class g {
@@ -208,8 +228,8 @@ class g {
   }
   replayCommand(e) {
     try {
-      const t = window.Deway, i = t?.[e.method];
-      typeof i == "function" && i.apply(t, e.args);
+      const t = window.Deway, n = t?.[e.method];
+      typeof n == "function" && n.apply(t, e.args);
     } catch {
     }
   }
@@ -225,12 +245,12 @@ class u {
    */
   async cacheRemoteConfig(e, t) {
     try {
-      const i = {
+      const n = {
         config: e,
         ttl_seconds: t,
         timestamp: Date.now()
       };
-      localStorage.setItem(u.CACHE_KEY, JSON.stringify(i));
+      localStorage.setItem(u.CACHE_KEY, JSON.stringify(n));
     } catch {
     }
   }
@@ -257,8 +277,8 @@ class u {
    * @returns true if cache is still valid
    */
   isCacheValid(e, t) {
-    const i = Date.now(), n = e + t * 1e3;
-    return i < n;
+    const n = Date.now(), i = e + t * 1e3;
+    return n < i;
   }
 }
 class v {
@@ -275,7 +295,7 @@ class v {
    */
   async fetchRemoteConfig(e, t) {
     try {
-      const i = this.cleanApiEndpoint(t), n = await fetch(`${i}/sdk-remote-config-serve/`, {
+      const n = this.cleanApiEndpoint(t), i = await fetch(`${n}/sdk-remote-config-serve/`, {
         method: "GET",
         headers: {
           Accept: "application/json",
@@ -283,13 +303,13 @@ class v {
           Origin: window?.location?.origin || ""
         }
       });
-      return n.ok ? await n.json() : null;
+      return i.ok ? await i.json() : null;
     } catch {
       return null;
     }
   }
 }
-class K {
+class b {
   async executeSDK(e) {
     return new Promise((t) => {
       try {
@@ -297,16 +317,16 @@ class K {
           t(!1);
           return;
         }
-        const i = document.createElement("script");
-        i.textContent = e, i.type = "text/javascript";
-        let n = !1;
-        const o = (a) => {
-          n || (n = !0, this.cleanupScript(i), t(a));
+        const n = document.createElement("script");
+        n.textContent = e, n.type = "text/javascript";
+        let i = !1;
+        const r = (a) => {
+          i || (i = !0, this.cleanupScript(n), t(a));
         };
-        i.onerror = () => {
-          o(!1);
-        }, i.onload = () => o(!0), document.head.appendChild(i), setTimeout(() => {
-          !n && this.verifySDKLoaded() ? o(!0) : n || o(!1);
+        n.onerror = () => {
+          r(!1);
+        }, n.onload = () => r(!0), document.head.appendChild(n), setTimeout(() => {
+          !i && this.verifySDKLoaded() ? r(!0) : i || r(!1);
         }, 100);
       } catch {
         t(!1);
@@ -326,7 +346,7 @@ class K {
     }
   }
 }
-class k {
+class K {
   validateConfig(e) {
     return !(!e || !e.appKey || e.appKey.trim().length === 0 || e.apiEndpoint !== void 0 && !this.isValidUrl(e.apiEndpoint) || e.publicKey !== void 0 && e.publicKey.trim().length === 0);
   }
@@ -338,11 +358,11 @@ class k {
     }
   }
 }
-const f = {
+const h = {
   apiEndpoint: "https://service.deway.app",
   publicKey: "9d3dBUvqyUQ7egd5j5uORdHSqZ7VFWOu+ud/SWt9WUY="
 };
-class I {
+class k {
   isLoaded = !1;
   isLoading = !1;
   cacheManager;
@@ -354,7 +374,7 @@ class I {
   remoteConfigCache;
   sdkConfigStore;
   constructor() {
-    this.cacheManager = new s(), this.scriptExecutor = new K(), this.commandQueue = new g(), this.sdkFetcher = new b(), this.configValidator = new k(), this.sdkConfigStore = new S(), this.remoteConfigFetcher = new v(), this.remoteConfigCache = new u();
+    this.cacheManager = new s(), this.scriptExecutor = new b(), this.commandQueue = new g(), this.sdkFetcher = new I(), this.configValidator = new K(), this.sdkConfigStore = new S(), this.remoteConfigFetcher = new v(), this.remoteConfigCache = new u();
   }
   init(e) {
     this.performInit(e).catch((t) => {
@@ -364,15 +384,15 @@ class I {
     try {
       if (!this.canInitialize())
         return;
-      const t = this.isInitializationPayload(e), i = t ? e.localConfig : e;
-      if (!this.configValidator.validateConfig(i))
+      const t = this.isInitializationPayload(e), n = t ? e.localConfig : e;
+      if (!this.configValidator.validateConfig(n))
         return;
       this.isLoading = !0;
-      const n = i.apiEndpoint || f.apiEndpoint, o = i.publicKey || f.publicKey, [a, d] = await Promise.all([this.fetchOrLoadSDK(i.appKey, n, o), this.fetchRemoteConfigWithCache(i, n)]);
+      const i = n.apiEndpoint || h.apiEndpoint, r = n.publicKey || h.publicKey, [a, d] = await Promise.all([this.fetchOrLoadSDK(n.appKey, i, r), this.fetchRemoteConfigWithCache(n, i)]);
       if (!a)
         return;
-      const h = t ? e : this.createInitializationPayload(d, i);
-      if (!await this.scriptExecutor.executeSDK(a.code) || !this.initializeSDK(h))
+      const f = t ? e : this.createInitializationPayload(d, n);
+      if (!await this.scriptExecutor.executeSDK(a.code) || !this.initializeSDK(f))
         return;
       this.commandQueue.replayQueuedCommands(), this.isLoaded = !0;
     } finally {
@@ -391,13 +411,13 @@ class I {
    */
   async fetchRemoteConfigWithCache(e, t) {
     this.sdkConfigStore.saveConfig(e);
-    const i = await this.remoteConfigFetcher.fetchRemoteConfig(e.appKey, t);
-    if (i)
-      return await this.remoteConfigCache.cacheRemoteConfig(i.config, i.ttl_seconds), i;
-    const n = await this.remoteConfigCache.getCachedRemoteConfig();
-    return n ? {
-      config: n.config,
-      ttl_seconds: n.ttl_seconds
+    const n = await this.remoteConfigFetcher.fetchRemoteConfig(e.appKey, t);
+    if (n)
+      return await this.remoteConfigCache.cacheRemoteConfig(n.config, n.ttl_seconds), n;
+    const i = await this.remoteConfigCache.getCachedRemoteConfig();
+    return i ? {
+      config: i.config,
+      ttl_seconds: i.ttl_seconds
     } : null;
   }
   /**
@@ -409,12 +429,12 @@ class I {
     return {
       localConfig: t,
       remoteConfig: e?.config ?? null,
-      defaults: f
+      defaults: h
     };
   }
-  async fetchOrLoadSDK(e, t, i) {
-    const n = await this.sdkFetcher.fetchSDK(e, t, i);
-    return n ? (await this.cacheManager.cacheSDK(n.code, n.version, n.checksum, n.signature), n) : this.loadFromCache();
+  async fetchOrLoadSDK(e, t, n) {
+    const i = await this.sdkFetcher.fetchSDK(e, t, n);
+    return i ? (await this.cacheManager.cacheSDK(i.code, i.version, i.checksum, i.signature), i) : this.loadFromCache();
   }
   async loadFromCache() {
     const e = await this.cacheManager.getCachedSDK();
@@ -483,12 +503,12 @@ class I {
     return typeof window < "u" && "Deway" in window && !!window.Deway;
   }
 }
-const c = new I(), T = {
-  init: (r) => c.init(r),
-  identify: (r) => c.identify(r),
-  reportEvent: (r, e) => c.reportEvent(r, e),
-  setUserProfile: (r) => c.setUserProfile(r),
-  show: (r) => c.show(r),
+const c = new k(), T = {
+  init: (o) => c.init(o),
+  identify: (o) => c.identify(o),
+  reportEvent: (o, e) => c.reportEvent(o, e),
+  setUserProfile: (o) => c.setUserProfile(o),
+  show: (o) => c.show(o),
   hide: () => c.hide(),
   isVisible: () => c.isVisible(),
   isInitialized: () => c.isInitialized(),

package/dist/loader.umd.js

@@ -1 +1 @@
-(function(l,u){typeof exports=="object"&&typeof module<"u"?module.exports=u():typeof define=="function"&&define.amd?define(u):(l=typeof globalThis<"u"?globalThis:l||self,l.Deway=u())})(this,(function(){"use strict";const l="deway-sdk-config",u=["Understanding intent","Reading web page","Browsing the docs","Enriching context","Validating understanding","Crafting response"];class C{saveConfig(e){if(window?.localStorage)try{const t=JSON.stringify(e);window.localStorage.setItem(l,t)}catch{}}loadConfig(){if(window?.localStorage)try{const e=window.localStorage.getItem(l);return e?JSON.parse(e):null}catch{return null}return null}getExcludedVendors(){return this.loadConfig()?.excludedVendors??[]}getAssistantName(){return this.loadConfig()?.assistantName??"Assistant"}getAiDisclaimer(){return this.loadConfig()?.aiDisclaimer}getThinkingMessages(){return this.loadConfig()?.thinkingMessages??u}getTalkToHumanBtnTxt(){return this.loadConfig()?.talkToHumanBtnTxt??"talk to Support"}getHumanHandoffUrl(){return this.loadConfig()?.humanHandoffUrl}getFeatureFlags(){return this.loadConfig()?.featureFlags??{}}getFeatureFlag(e){return this.getFeatureFlags()[e]??!1}getPromptSuggestions(){return this.loadConfig()?.promptSuggestions}getWelcomeTitle(){return this.loadConfig()?.welcomeTitle??"How can I help you today?"}getWelcomeSubtitle(){return this.loadConfig()?.welcomeSubtitle??"I'm ready to help you navigate, learn, and get things done."}getBookmarkAppearanceMode(){return this.loadConfig()?.bookmarkAppearanceMode??"bookmark"}getTenantTheme(){return this.loadConfig()?.tenantTheme??null}getTenantThemeForMode(e){const t=this.getTenantTheme();return t?e==="dark"?t.dark:t.light:null}}class s{static CACHE_KEY="deway-sdk-cache";static DB_NAME="DewaySdk";static DB_VERSION=1;static STORE_NAME="sdk";async cacheSDK(e,t,i,n){try{const d=(await this.openIndexedDB()).transaction([s.STORE_NAME],"readwrite").objectStore(s.STORE_NAME);await new Promise((y,S)=>{const f=d.put({id:"latest",code:e,version:t,checksum:i,signature:n,timestamp:Date.now()});f.onsuccess=()=>y(f.result),f.onerror=()=>S(f.error)})}catch{try{const a=JSON.stringify({code:e,version:t,checksum:i,signature:n,timestamp:Date.now()});localStorage.setItem(s.CACHE_KEY,a)}catch{}}}async getCachedSDK(){try{const i=(await this.openIndexedDB()).transaction([s.STORE_NAME],"readonly").objectStore(s.STORE_NAME),n=await new Promise((o,a)=>{const d=i.get("latest");d.onsuccess=()=>o(d.result||null),d.onerror=()=>a(d.error)});if(n)return n}catch{}try{const e=localStorage.getItem(s.CACHE_KEY);if(e)return JSON.parse(e)}catch{}return null}openIndexedDB(){return new Promise((e,t)=>{const i=indexedDB.open(s.DB_NAME,s.DB_VERSION);i.onerror=()=>t(i.error),i.onsuccess=()=>e(i.result),i.onupgradeneeded=n=>{const o=n.target.result;o.objectStoreNames.contains(s.STORE_NAME)||o.createObjectStore(s.STORE_NAME,{keyPath:"id"})}})}}async function E(r){const t=new TextEncoder().encode(r),i=await crypto.subtle.digest("SHA-256",t);return Array.from(new Uint8Array(i)).map(o=>o.toString(16).padStart(2,"0")).join("")}function w(r){const e=atob(r),t=new Uint8Array(e.length);for(let i=0;i<e.length;i++)t[i]=e.charCodeAt(i);return t}function D(r){const e=new Uint8Array(r.length/2);for(let t=0;t<r.length;t+=2)e[t/2]=Number.parseInt(r.substr(t,2),16);return e}async function A(r,e,t){try{const i=w(r),n=D(e),o=w(t),a=await crypto.subtle.importKey("raw",i,{name:"Ed25519"},!1,["verify"]);return await crypto.subtle.verify("Ed25519",a,o,n)}catch{return!1}}async function b(r,e,t,i){if(!e||!t)throw new Error("SDK verification failed: Missing security headers");if(await E(r)!==e)throw new Error("SDK verification failed: Checksum mismatch - content tampered");if(!await A(i,e,t))throw new Error("SDK verification failed: Invalid signature - content tampered")}class v{cleanApiEndpoint(e){return e.trim().replace(/\/+$/,"")}async fetchSDK(e,t,i){try{const n=this.cleanApiEndpoint(t),o=await fetch(`${n}/sdk-serve/sdk/v0`,{method:"GET",headers:{Accept:"application/javascript","deway-app-key":e,Origin:window?.location?.origin||""}});return o.ok?this.handleSuccessfulFetch(o,i):null}catch{return null}}async handleSuccessfulFetch(e,t){const i=e.headers.get("x-sdk-checksum"),n=e.headers.get("x-sdk-version"),o=e.headers.get("x-sdk-signature"),a=await e.text();if(!n||!a||!i)throw Object.fromEntries(e.headers.entries()),new Error("Invalid SDK response: missing version, code, or checksum");return await b(a,i,o,t),{code:a,version:n,checksum:i,signature:o||""}}}class g{static MAX_QUEUE_SIZE=50;commandQueue=[];queueCommand(e,...t){this.commandQueue.length>=g.MAX_QUEUE_SIZE&&this.commandQueue.shift(),this.commandQueue.push({method:e,args:t})}replayQueuedCommands(){if(this.commandQueue.length===0)return;const e=[...this.commandQueue];if(this.commandQueue=[],!!this.isSDKAvailable())for(const t of e)this.replayCommand(t)}clearQueue(){this.commandQueue=[]}isSDKAvailable(){return typeof window<"u"&&"Deway"in window&&!!window.Deway}replayCommand(e){try{const t=window.Deway,i=t?.[e.method];typeof i=="function"&&i.apply(t,e.args)}catch{}}}class h{static CACHE_KEY="deway-remote-config-cache";async cacheRemoteConfig(e,t){try{const i={config:e,ttl_seconds:t,timestamp:Date.now()};localStorage.setItem(h.CACHE_KEY,JSON.stringify(i))}catch{}}async getCachedRemoteConfig(){try{const e=localStorage.getItem(h.CACHE_KEY);return e?JSON.parse(e):null}catch{return null}}isCacheValid(e,t){const i=Date.now(),n=e+t*1e3;return i<n}}class K{cleanApiEndpoint(e){return e.trim().replace(/\/+$/,"")}async fetchRemoteConfig(e,t){try{const i=this.cleanApiEndpoint(t),n=await fetch(`${i}/sdk-remote-config-serve/`,{method:"GET",headers:{Accept:"application/json","deway-app-key":e,Origin:window?.location?.origin||""}});return n.ok?await n.json():null}catch{return null}}}class k{async executeSDK(e){return new Promise(t=>{try{if(!this.isDocumentReady()){t(!1);return}const i=document.createElement("script");i.textContent=e,i.type="text/javascript";let n=!1;const o=a=>{n||(n=!0,this.cleanupScript(i),t(a))};i.onerror=()=>{o(!1)},i.onload=()=>o(!0),document.head.appendChild(i),setTimeout(()=>{!n&&this.verifySDKLoaded()?o(!0):n||o(!1)},100)}catch{t(!1)}})}isDocumentReady(){return typeof document<"u"&&document.head!=null}verifySDKLoaded(){return typeof window<"u"&&"Deway"in window&&!!window.Deway}cleanupScript(e){try{e.parentNode&&e.parentNode.removeChild(e)}catch{}}}class T{validateConfig(e){return!(!e||!e.appKey||e.appKey.trim().length===0||e.apiEndpoint!==void 0&&!this.isValidUrl(e.apiEndpoint)||e.publicKey!==void 0&&e.publicKey.trim().length===0)}isValidUrl(e){try{return new URL(e),!0}catch{return!1}}}const m={apiEndpoint:"https://service.deway.app",publicKey:"9d3dBUvqyUQ7egd5j5uORdHSqZ7VFWOu+ud/SWt9WUY="};class I{isLoaded=!1;isLoading=!1;cacheManager;scriptExecutor;commandQueue;sdkFetcher;configValidator;remoteConfigFetcher;remoteConfigCache;sdkConfigStore;constructor(){this.cacheManager=new s,this.scriptExecutor=new k,this.commandQueue=new g,this.sdkFetcher=new v,this.configValidator=new T,this.sdkConfigStore=new C,this.remoteConfigFetcher=new K,this.remoteConfigCache=new h}init(e){this.performInit(e).catch(t=>{})}async performInit(e){try{if(!this.canInitialize())return;const t=this.isInitializationPayload(e),i=t?e.localConfig:e;if(!this.configValidator.validateConfig(i))return;this.isLoading=!0;const n=i.apiEndpoint||m.apiEndpoint,o=i.publicKey||m.publicKey,[a,d]=await Promise.all([this.fetchOrLoadSDK(i.appKey,n,o),this.fetchRemoteConfigWithCache(i,n)]);if(!a)return;const y=t?e:this.createInitializationPayload(d,i);if(!await this.scriptExecutor.executeSDK(a.code)||!this.initializeSDK(y))return;this.commandQueue.replayQueuedCommands(),this.isLoaded=!0}finally{this.isLoading=!1}}isInitializationPayload(e){return"localConfig"in e&&"remoteConfig"in e&&"defaults"in e}canInitialize(){return!(this.isLoaded||this.isLoading)}async fetchRemoteConfigWithCache(e,t){this.sdkConfigStore.saveConfig(e);const i=await this.remoteConfigFetcher.fetchRemoteConfig(e.appKey,t);if(i)return await this.remoteConfigCache.cacheRemoteConfig(i.config,i.ttl_seconds),i;const n=await this.remoteConfigCache.getCachedRemoteConfig();return n?{config:n.config,ttl_seconds:n.ttl_seconds}:null}createInitializationPayload(e,t){return{localConfig:t,remoteConfig:e?.config??null,defaults:m}}async fetchOrLoadSDK(e,t,i){const n=await this.sdkFetcher.fetchSDK(e,t,i);return n?(await this.cacheManager.cacheSDK(n.code,n.version,n.checksum,n.signature),n):this.loadFromCache()}async loadFromCache(){const e=await this.cacheManager.getCachedSDK();return e?{code:e.code,version:e.version}:null}initializeSDK(e){if(!this.isSDKAvailable())return!1;try{return window.Deway?.init(e),!0}catch{return!1}}identify(e){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.identify(e):this.commandQueue.queueCommand("identify",e)}catch{}}reportEvent(e,t){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.reportEvent(e,t):this.commandQueue.queueCommand("reportEvent",e,t)}catch{}}setUserProfile(e){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.setUserProfile(e):this.commandQueue.queueCommand("setUserProfile",e)}catch{}}show(e){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.show(e):this.commandQueue.queueCommand("show",e)}catch{}}hide(){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.hide():this.commandQueue.queueCommand("hide")}catch{}}isVisible(){try{return this.isLoaded&&this.isSDKAvailable()?window.Deway?.isVisible()??!1:!1}catch{return!1}}isInitialized(){try{return this.isLoaded&&this.isSDKAvailable()?window.Deway?.isInitialized()??!1:!1}catch{return!1}}destroy(){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.destroy():this.commandQueue.queueCommand("destroy"),this.commandQueue.clearQueue()}catch{}}isSDKAvailable(){return typeof window<"u"&&"Deway"in window&&!!window.Deway}}const c=new I,p={init:r=>c.init(r),identify:r=>c.identify(r),reportEvent:(r,e)=>c.reportEvent(r,e),setUserProfile:r=>c.setUserProfile(r),show:r=>c.show(r),hide:()=>c.hide(),isVisible:()=>c.isVisible(),isInitialized:()=>c.isInitialized(),destroy:()=>c.destroy()};return typeof window<"u"&&(window.Deway=p),p}));
+(function(u,l){typeof exports=="object"&&typeof module<"u"?module.exports=l():typeof define=="function"&&define.amd?define(l):(u=typeof globalThis<"u"?globalThis:u||self,u.Deway=l())})(this,(function(){"use strict";const u="deway-sdk-config",l=["Understanding intent","Reading web page","Browsing the docs","Enriching context","Validating understanding","Crafting response"];class C{saveConfig(e){if(window?.localStorage)try{const t=JSON.stringify(e);window.localStorage.setItem(u,t)}catch{}}loadConfig(){if(window?.localStorage)try{const e=window.localStorage.getItem(u);return e?JSON.parse(e):null}catch{return null}return null}getExcludedVendors(){return this.loadConfig()?.excludedVendors??[]}getAssistantName(){return this.loadConfig()?.assistantName??"Assistant"}getAiDisclaimer(){return this.loadConfig()?.aiDisclaimer}getThinkingMessages(){return this.loadConfig()?.thinkingMessages??l}getSupportHandoff(){return this.loadConfig()?.supportHandoff??null}getSupportHandoffButtonText(){return this.getSupportHandoff()?.button_text??"talk to Support"}getFeatureFlags(){return this.loadConfig()?.featureFlags??{}}getFeatureFlag(e){return this.getFeatureFlags()[e]??!1}getPromptSuggestions(){return this.loadConfig()?.promptSuggestions}getWelcomeTitle(){return this.loadConfig()?.welcomeTitle??"How can I help you today?"}getWelcomeSubtitle(){return this.loadConfig()?.welcomeSubtitle??"I'm ready to help you navigate, learn, and get things done."}getBookmarkAppearanceMode(){return this.loadConfig()?.bookmarkAppearanceMode??"bookmark"}getTenantTheme(){return this.loadConfig()?.tenantTheme??null}getTenantThemeForMode(e){const t=this.getTenantTheme();return t?e==="dark"?t.dark:t.light:null}getCustomIcons(){return this.loadConfig()?.customIcons??null}getBookmarkIconInlineSvg(){return this.getCustomIcons()?.bookmark_icon_inline_svg??void 0}getEmptyChatStateIconInlineSvg(){return this.getCustomIcons()?.empty_chat_state_icon_inline_svg??void 0}getIntroIconSize(){return this.loadConfig()?.introIconSize??18}}class a{static CACHE_KEY="deway-sdk-cache";static DB_NAME="DewaySdk";static DB_VERSION=1;static STORE_NAME="sdk";async cacheSDK(e,t,n,i){try{const d=(await this.openIndexedDB()).transaction([a.STORE_NAME],"readwrite").objectStore(a.STORE_NAME);await new Promise((y,S)=>{const f=d.put({id:"latest",code:e,version:t,checksum:n,signature:i,timestamp:Date.now()});f.onsuccess=()=>y(f.result),f.onerror=()=>S(f.error)})}catch{try{const s=JSON.stringify({code:e,version:t,checksum:n,signature:i,timestamp:Date.now()});localStorage.setItem(a.CACHE_KEY,s)}catch{}}}async getCachedSDK(){try{const n=(await this.openIndexedDB()).transaction([a.STORE_NAME],"readonly").objectStore(a.STORE_NAME),i=await new Promise((r,s)=>{const d=n.get("latest");d.onsuccess=()=>r(d.result||null),d.onerror=()=>s(d.error)});if(i)return i}catch{}try{const e=localStorage.getItem(a.CACHE_KEY);if(e)return JSON.parse(e)}catch{}return null}openIndexedDB(){return new Promise((e,t)=>{const n=indexedDB.open(a.DB_NAME,a.DB_VERSION);n.onerror=()=>t(n.error),n.onsuccess=()=>e(n.result),n.onupgradeneeded=i=>{const r=i.target.result;r.objectStoreNames.contains(a.STORE_NAME)||r.createObjectStore(a.STORE_NAME,{keyPath:"id"})}})}}async function E(o){const t=new TextEncoder().encode(o),n=await crypto.subtle.digest("SHA-256",t);return Array.from(new Uint8Array(n)).map(r=>r.toString(16).padStart(2,"0")).join("")}function w(o){const e=atob(o),t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n);return t}function D(o){const e=new Uint8Array(o.length/2);for(let t=0;t<o.length;t+=2)e[t/2]=Number.parseInt(o.substr(t,2),16);return e}async function A(o,e,t){try{const n=w(o),i=D(e),r=w(t),s=await crypto.subtle.importKey("raw",n,{name:"Ed25519"},!1,["verify"]);return await crypto.subtle.verify("Ed25519",s,r,i)}catch{return!1}}async function I(o,e,t,n){if(!e||!t)throw new Error("SDK verification failed: Missing security headers");if(await E(o)!==e)throw new Error("SDK verification failed: Checksum mismatch - content tampered");if(!await A(n,e,t))throw new Error("SDK verification failed: Invalid signature - content tampered")}class v{cleanApiEndpoint(e){return e.trim().replace(/\/+$/,"")}async fetchSDK(e,t,n){try{const i=this.cleanApiEndpoint(t),r=await fetch(`${i}/sdk-serve/sdk/v0`,{method:"GET",headers:{Accept:"application/javascript","deway-app-key":e,Origin:window?.location?.origin||""}});return r.ok?this.handleSuccessfulFetch(r,n):null}catch{return null}}async handleSuccessfulFetch(e,t){const n=e.headers.get("x-sdk-checksum"),i=e.headers.get("x-sdk-version"),r=e.headers.get("x-sdk-signature"),s=await e.text();if(!i||!s||!n)throw Object.fromEntries(e.headers.entries()),new Error("Invalid SDK response: missing version, code, or checksum");return await I(s,n,r,t),{code:s,version:i,checksum:n,signature:r||""}}}class g{static MAX_QUEUE_SIZE=50;commandQueue=[];queueCommand(e,...t){this.commandQueue.length>=g.MAX_QUEUE_SIZE&&this.commandQueue.shift(),this.commandQueue.push({method:e,args:t})}replayQueuedCommands(){if(this.commandQueue.length===0)return;const e=[...this.commandQueue];if(this.commandQueue=[],!!this.isSDKAvailable())for(const t of e)this.replayCommand(t)}clearQueue(){this.commandQueue=[]}isSDKAvailable(){return typeof window<"u"&&"Deway"in window&&!!window.Deway}replayCommand(e){try{const t=window.Deway,n=t?.[e.method];typeof n=="function"&&n.apply(t,e.args)}catch{}}}class h{static CACHE_KEY="deway-remote-config-cache";async cacheRemoteConfig(e,t){try{const n={config:e,ttl_seconds:t,timestamp:Date.now()};localStorage.setItem(h.CACHE_KEY,JSON.stringify(n))}catch{}}async getCachedRemoteConfig(){try{const e=localStorage.getItem(h.CACHE_KEY);return e?JSON.parse(e):null}catch{return null}}isCacheValid(e,t){const n=Date.now(),i=e+t*1e3;return n<i}}class b{cleanApiEndpoint(e){return e.trim().replace(/\/+$/,"")}async fetchRemoteConfig(e,t){try{const n=this.cleanApiEndpoint(t),i=await fetch(`${n}/sdk-remote-config-serve/`,{method:"GET",headers:{Accept:"application/json","deway-app-key":e,Origin:window?.location?.origin||""}});return i.ok?await i.json():null}catch{return null}}}class K{async executeSDK(e){return new Promise(t=>{try{if(!this.isDocumentReady()){t(!1);return}const n=document.createElement("script");n.textContent=e,n.type="text/javascript";let i=!1;const r=s=>{i||(i=!0,this.cleanupScript(n),t(s))};n.onerror=()=>{r(!1)},n.onload=()=>r(!0),document.head.appendChild(n),setTimeout(()=>{!i&&this.verifySDKLoaded()?r(!0):i||r(!1)},100)}catch{t(!1)}})}isDocumentReady(){return typeof document<"u"&&document.head!=null}verifySDKLoaded(){return typeof window<"u"&&"Deway"in window&&!!window.Deway}cleanupScript(e){try{e.parentNode&&e.parentNode.removeChild(e)}catch{}}}class k{validateConfig(e){return!(!e||!e.appKey||e.appKey.trim().length===0||e.apiEndpoint!==void 0&&!this.isValidUrl(e.apiEndpoint)||e.publicKey!==void 0&&e.publicKey.trim().length===0)}isValidUrl(e){try{return new URL(e),!0}catch{return!1}}}const m={apiEndpoint:"https://service.deway.app",publicKey:"9d3dBUvqyUQ7egd5j5uORdHSqZ7VFWOu+ud/SWt9WUY="};class T{isLoaded=!1;isLoading=!1;cacheManager;scriptExecutor;commandQueue;sdkFetcher;configValidator;remoteConfigFetcher;remoteConfigCache;sdkConfigStore;constructor(){this.cacheManager=new a,this.scriptExecutor=new K,this.commandQueue=new g,this.sdkFetcher=new v,this.configValidator=new k,this.sdkConfigStore=new C,this.remoteConfigFetcher=new b,this.remoteConfigCache=new h}init(e){this.performInit(e).catch(t=>{})}async performInit(e){try{if(!this.canInitialize())return;const t=this.isInitializationPayload(e),n=t?e.localConfig:e;if(!this.configValidator.validateConfig(n))return;this.isLoading=!0;const i=n.apiEndpoint||m.apiEndpoint,r=n.publicKey||m.publicKey,[s,d]=await Promise.all([this.fetchOrLoadSDK(n.appKey,i,r),this.fetchRemoteConfigWithCache(n,i)]);if(!s)return;const y=t?e:this.createInitializationPayload(d,n);if(!await this.scriptExecutor.executeSDK(s.code)||!this.initializeSDK(y))return;this.commandQueue.replayQueuedCommands(),this.isLoaded=!0}finally{this.isLoading=!1}}isInitializationPayload(e){return"localConfig"in e&&"remoteConfig"in e&&"defaults"in e}canInitialize(){return!(this.isLoaded||this.isLoading)}async fetchRemoteConfigWithCache(e,t){this.sdkConfigStore.saveConfig(e);const n=await this.remoteConfigFetcher.fetchRemoteConfig(e.appKey,t);if(n)return await this.remoteConfigCache.cacheRemoteConfig(n.config,n.ttl_seconds),n;const i=await this.remoteConfigCache.getCachedRemoteConfig();return i?{config:i.config,ttl_seconds:i.ttl_seconds}:null}createInitializationPayload(e,t){return{localConfig:t,remoteConfig:e?.config??null,defaults:m}}async fetchOrLoadSDK(e,t,n){const i=await this.sdkFetcher.fetchSDK(e,t,n);return i?(await this.cacheManager.cacheSDK(i.code,i.version,i.checksum,i.signature),i):this.loadFromCache()}async loadFromCache(){const e=await this.cacheManager.getCachedSDK();return e?{code:e.code,version:e.version}:null}initializeSDK(e){if(!this.isSDKAvailable())return!1;try{return window.Deway?.init(e),!0}catch{return!1}}identify(e){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.identify(e):this.commandQueue.queueCommand("identify",e)}catch{}}reportEvent(e,t){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.reportEvent(e,t):this.commandQueue.queueCommand("reportEvent",e,t)}catch{}}setUserProfile(e){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.setUserProfile(e):this.commandQueue.queueCommand("setUserProfile",e)}catch{}}show(e){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.show(e):this.commandQueue.queueCommand("show",e)}catch{}}hide(){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.hide():this.commandQueue.queueCommand("hide")}catch{}}isVisible(){try{return this.isLoaded&&this.isSDKAvailable()?window.Deway?.isVisible()??!1:!1}catch{return!1}}isInitialized(){try{return this.isLoaded&&this.isSDKAvailable()?window.Deway?.isInitialized()??!1:!1}catch{return!1}}destroy(){try{this.isLoaded&&this.isSDKAvailable()?window.Deway?.destroy():this.commandQueue.queueCommand("destroy"),this.commandQueue.clearQueue()}catch{}}isSDKAvailable(){return typeof window<"u"&&"Deway"in window&&!!window.Deway}}const c=new T,p={init:o=>c.init(o),identify:o=>c.identify(o),reportEvent:(o,e)=>c.reportEvent(o,e),setUserProfile:o=>c.setUserProfile(o),show:o=>c.show(o),hide:()=>c.hide(),isVisible:()=>c.isVisible(),isInitialized:()=>c.isInitialized(),destroy:()=>c.destroy()};return typeof window<"u"&&(window.Deway=p),p}));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deway-ai/web-sdk",
-  "version": "0.45.0",
+  "version": "0.47.0",
   "type": "module",
   "description": "Deway's Web SDK",
   "main": "dist/loader.umd.js",